From 415d79015664c24fc1dd379a613e787be3b39ee7 Mon Sep 17 00:00:00 2001
From: Paolo Salvatori <leprino@hotmail.com>
Date: Tue, 8 Sep 2026 12:08:22 +0200
Subject: [PATCH 01/20] Move the Python samples into python/ subfolders

Each samples/web-app-<store>/ now holds its Python implementation under
python/ (README, images, scripts, src) to make room for a .NET twin under
dotnet/. Relative links that reached outside a sample gained one level,
the root README table points at python/README.md, every Python README
links to its upcoming .NET sibling, .gitignore learns the .NET build
outputs and the files sample scripts drop into scripts/, and a
.gitattributes pins LF line endings for scripts, manifests and .NET
sources.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
---
 .gitattributes                                |   6 ++
 .gitignore                                    |  58 +++++++++++++++++-
 README.md                                     |  18 +++---
 .../{ => python}/README.md                    |  10 +--
 .../{ => python}/images/architecture.png      | Bin
 .../{ => python}/scripts/00-variables.sh      |   0
 .../scripts/01-deploy-resources.sh            |   0
 .../scripts/02-build-docker-image.sh          |   0
 .../scripts/03-run-docker-container.sh        |   0
 .../scripts/04-push-docker-image.sh           |   0
 .../{ => python}/scripts/05-deploy-app.sh     |   0
 .../{ => python}/scripts/Dockerfile           |   0
 .../{ => python}/scripts/configmap.yml        |   0
 .../{ => python}/scripts/deployment.yml       |   0
 .../{ => python}/scripts/namespace.yml        |   0
 .../{ => python}/scripts/secret.yml           |   0
 .../{ => python}/scripts/service.yml          |   0
 .../{ => python}/src/app.py                   |   0
 .../{ => python}/src/gunicorn.conf.py         |   0
 .../{ => python}/src/requirements.txt         |   0
 .../static/bootstrap/css/bootstrap-grid.css   |   0
 .../bootstrap/css/bootstrap-grid.css.map      |   0
 .../bootstrap/css/bootstrap-grid.min.css      |   0
 .../bootstrap/css/bootstrap-grid.min.css.map  |   0
 .../bootstrap/css/bootstrap-grid.rtl.css      |   0
 .../bootstrap/css/bootstrap-grid.rtl.css.map  |   0
 .../bootstrap/css/bootstrap-grid.rtl.min.css  |   0
 .../css/bootstrap-grid.rtl.min.css.map        |   0
 .../static/bootstrap/css/bootstrap-reboot.css |   0
 .../bootstrap/css/bootstrap-reboot.css.map    |   0
 .../bootstrap/css/bootstrap-reboot.min.css    |   0
 .../css/bootstrap-reboot.min.css.map          |   0
 .../bootstrap/css/bootstrap-reboot.rtl.css    |   0
 .../css/bootstrap-reboot.rtl.css.map          |   0
 .../css/bootstrap-reboot.rtl.min.css          |   0
 .../css/bootstrap-reboot.rtl.min.css.map      |   0
 .../bootstrap/css/bootstrap-utilities.css     |   0
 .../bootstrap/css/bootstrap-utilities.css.map |   0
 .../bootstrap/css/bootstrap-utilities.min.css |   0
 .../css/bootstrap-utilities.min.css.map       |   0
 .../bootstrap/css/bootstrap-utilities.rtl.css |   0
 .../css/bootstrap-utilities.rtl.css.map       |   0
 .../css/bootstrap-utilities.rtl.min.css       |   0
 .../css/bootstrap-utilities.rtl.min.css.map   |   0
 .../src/static/bootstrap/css/bootstrap.css    |   0
 .../static/bootstrap/css/bootstrap.css.map    |   0
 .../static/bootstrap/css/bootstrap.min.css    |   0
 .../bootstrap/css/bootstrap.min.css.map       |   0
 .../static/bootstrap/css/bootstrap.rtl.css    |   0
 .../bootstrap/css/bootstrap.rtl.css.map       |   0
 .../bootstrap/css/bootstrap.rtl.min.css       |   0
 .../bootstrap/css/bootstrap.rtl.min.css.map   |   0
 .../static/bootstrap/js/bootstrap.bundle.js   |   0
 .../bootstrap/js/bootstrap.bundle.js.map      |   0
 .../bootstrap/js/bootstrap.bundle.min.js      |   0
 .../bootstrap/js/bootstrap.bundle.min.js.map  |   0
 .../src/static/bootstrap/js/bootstrap.esm.js  |   0
 .../static/bootstrap/js/bootstrap.esm.js.map  |   0
 .../static/bootstrap/js/bootstrap.esm.min.js  |   0
 .../bootstrap/js/bootstrap.esm.min.js.map     |   0
 .../src/static/bootstrap/js/bootstrap.js      |   0
 .../src/static/bootstrap/js/bootstrap.js.map  |   0
 .../src/static/bootstrap/js/bootstrap.min.js  |   0
 .../static/bootstrap/js/bootstrap.min.js.map  |   0
 .../{ => python}/src/static/favicon.ico       | Bin
 .../{ => python}/src/static/style.css         |   0
 .../{ => python}/src/templates/index.html     |   0
 .../{ => python}/README.md                    |   8 ++-
 .../{ => python}/images/architecture.png      | Bin
 .../{ => python}/scripts/00-variables.sh      |   0
 .../scripts/01-deploy-resources.sh            |   0
 .../scripts/02-build-docker-image.sh          |   0
 .../scripts/03-run-docker-container.sh        |   0
 .../scripts/04-push-docker-image.sh           |   0
 .../{ => python}/scripts/05-deploy-app.sh     |   0
 .../{ => python}/scripts/Dockerfile           |   0
 .../{ => python}/scripts/configmap.yml        |   0
 .../{ => python}/scripts/deployment.yml       |   0
 .../{ => python}/scripts/namespace.yml        |   0
 .../{ => python}/scripts/secret.yml           |   0
 .../{ => python}/scripts/service.yml          |   0
 .../{ => python}/src/app.py                   |   0
 .../{ => python}/src/gunicorn.conf.py         |   0
 .../{ => python}/src/mongodb.py               |   0
 .../{ => python}/src/requirements.txt         |   0
 .../static/bootstrap/css/bootstrap-grid.css   |   0
 .../bootstrap/css/bootstrap-grid.css.map      |   0
 .../bootstrap/css/bootstrap-grid.min.css      |   0
 .../bootstrap/css/bootstrap-grid.min.css.map  |   0
 .../bootstrap/css/bootstrap-grid.rtl.css      |   0
 .../bootstrap/css/bootstrap-grid.rtl.css.map  |   0
 .../bootstrap/css/bootstrap-grid.rtl.min.css  |   0
 .../css/bootstrap-grid.rtl.min.css.map        |   0
 .../static/bootstrap/css/bootstrap-reboot.css |   0
 .../bootstrap/css/bootstrap-reboot.css.map    |   0
 .../bootstrap/css/bootstrap-reboot.min.css    |   0
 .../css/bootstrap-reboot.min.css.map          |   0
 .../bootstrap/css/bootstrap-reboot.rtl.css    |   0
 .../css/bootstrap-reboot.rtl.css.map          |   0
 .../css/bootstrap-reboot.rtl.min.css          |   0
 .../css/bootstrap-reboot.rtl.min.css.map      |   0
 .../bootstrap/css/bootstrap-utilities.css     |   0
 .../bootstrap/css/bootstrap-utilities.css.map |   0
 .../bootstrap/css/bootstrap-utilities.min.css |   0
 .../css/bootstrap-utilities.min.css.map       |   0
 .../bootstrap/css/bootstrap-utilities.rtl.css |   0
 .../css/bootstrap-utilities.rtl.css.map       |   0
 .../css/bootstrap-utilities.rtl.min.css       |   0
 .../css/bootstrap-utilities.rtl.min.css.map   |   0
 .../src/static/bootstrap/css/bootstrap.css    |   0
 .../static/bootstrap/css/bootstrap.css.map    |   0
 .../static/bootstrap/css/bootstrap.min.css    |   0
 .../bootstrap/css/bootstrap.min.css.map       |   0
 .../static/bootstrap/css/bootstrap.rtl.css    |   0
 .../bootstrap/css/bootstrap.rtl.css.map       |   0
 .../bootstrap/css/bootstrap.rtl.min.css       |   0
 .../bootstrap/css/bootstrap.rtl.min.css.map   |   0
 .../static/bootstrap/js/bootstrap.bundle.js   |   0
 .../bootstrap/js/bootstrap.bundle.js.map      |   0
 .../bootstrap/js/bootstrap.bundle.min.js      |   0
 .../bootstrap/js/bootstrap.bundle.min.js.map  |   0
 .../src/static/bootstrap/js/bootstrap.esm.js  |   0
 .../static/bootstrap/js/bootstrap.esm.js.map  |   0
 .../static/bootstrap/js/bootstrap.esm.min.js  |   0
 .../bootstrap/js/bootstrap.esm.min.js.map     |   0
 .../src/static/bootstrap/js/bootstrap.js      |   0
 .../src/static/bootstrap/js/bootstrap.js.map  |   0
 .../src/static/bootstrap/js/bootstrap.min.js  |   0
 .../static/bootstrap/js/bootstrap.min.js.map  |   0
 .../{ => python}/src/static/favicon.ico       | Bin
 .../{ => python}/src/static/style.css         |   0
 .../{ => python}/src/templates/index.html     |   0
 .../{ => python}/README.md                    |   8 ++-
 .../{ => python}/images/architecture.png      | Bin
 .../{ => python}/scripts/00-variables.sh      |   0
 .../scripts/01-deploy-resources.sh            |   0
 .../scripts/02-build-docker-image.sh          |   0
 .../scripts/03-run-docker-container.sh        |   0
 .../scripts/04-push-docker-image.sh           |   0
 .../{ => python}/scripts/05-deploy-app.sh     |   0
 .../{ => python}/scripts/Dockerfile           |   0
 .../{ => python}/scripts/configmap.yml        |   0
 .../{ => python}/scripts/deployment.yml       |   0
 .../{ => python}/scripts/namespace.yml        |   0
 .../{ => python}/scripts/secret.yml           |   0
 .../{ => python}/scripts/service.yml          |   0
 .../{ => python}/src/app.py                   |   0
 .../{ => python}/src/cosmosdb_client.py       |   0
 .../{ => python}/src/gunicorn.conf.py         |   0
 .../{ => python}/src/requirements.txt         |   0
 .../static/bootstrap/css/bootstrap-grid.css   |   0
 .../bootstrap/css/bootstrap-grid.css.map      |   0
 .../bootstrap/css/bootstrap-grid.min.css      |   0
 .../bootstrap/css/bootstrap-grid.min.css.map  |   0
 .../bootstrap/css/bootstrap-grid.rtl.css      |   0
 .../bootstrap/css/bootstrap-grid.rtl.css.map  |   0
 .../bootstrap/css/bootstrap-grid.rtl.min.css  |   0
 .../css/bootstrap-grid.rtl.min.css.map        |   0
 .../static/bootstrap/css/bootstrap-reboot.css |   0
 .../bootstrap/css/bootstrap-reboot.css.map    |   0
 .../bootstrap/css/bootstrap-reboot.min.css    |   0
 .../css/bootstrap-reboot.min.css.map          |   0
 .../bootstrap/css/bootstrap-reboot.rtl.css    |   0
 .../css/bootstrap-reboot.rtl.css.map          |   0
 .../css/bootstrap-reboot.rtl.min.css          |   0
 .../css/bootstrap-reboot.rtl.min.css.map      |   0
 .../bootstrap/css/bootstrap-utilities.css     |   0
 .../bootstrap/css/bootstrap-utilities.css.map |   0
 .../bootstrap/css/bootstrap-utilities.min.css |   0
 .../css/bootstrap-utilities.min.css.map       |   0
 .../bootstrap/css/bootstrap-utilities.rtl.css |   0
 .../css/bootstrap-utilities.rtl.css.map       |   0
 .../css/bootstrap-utilities.rtl.min.css       |   0
 .../css/bootstrap-utilities.rtl.min.css.map   |   0
 .../src/static/bootstrap/css/bootstrap.css    |   0
 .../static/bootstrap/css/bootstrap.css.map    |   0
 .../static/bootstrap/css/bootstrap.min.css    |   0
 .../bootstrap/css/bootstrap.min.css.map       |   0
 .../static/bootstrap/css/bootstrap.rtl.css    |   0
 .../bootstrap/css/bootstrap.rtl.css.map       |   0
 .../bootstrap/css/bootstrap.rtl.min.css       |   0
 .../bootstrap/css/bootstrap.rtl.min.css.map   |   0
 .../static/bootstrap/js/bootstrap.bundle.js   |   0
 .../bootstrap/js/bootstrap.bundle.js.map      |   0
 .../bootstrap/js/bootstrap.bundle.min.js      |   0
 .../bootstrap/js/bootstrap.bundle.min.js.map  |   0
 .../src/static/bootstrap/js/bootstrap.esm.js  |   0
 .../static/bootstrap/js/bootstrap.esm.js.map  |   0
 .../static/bootstrap/js/bootstrap.esm.min.js  |   0
 .../bootstrap/js/bootstrap.esm.min.js.map     |   0
 .../src/static/bootstrap/js/bootstrap.js      |   0
 .../src/static/bootstrap/js/bootstrap.js.map  |   0
 .../src/static/bootstrap/js/bootstrap.min.js  |   0
 .../static/bootstrap/js/bootstrap.min.js.map  |   0
 .../{ => python}/src/static/favicon.ico       | Bin
 .../{ => python}/src/static/style.css         |   0
 .../{ => python}/src/templates/index.html     |   0
 .../{ => python}/README.md                    |   8 ++-
 .../{ => python}/images/architecture.png      | Bin
 .../{ => python}/scripts/00-variables.sh      |   0
 .../scripts/01-deploy-resources.sh            |   0
 .../scripts/02-build-docker-image.sh          |   0
 .../scripts/03-run-docker-container.sh        |   0
 .../scripts/04-push-docker-image.sh           |   0
 .../{ => python}/scripts/05-deploy-app.sh     |   0
 .../{ => python}/scripts/Dockerfile           |   0
 .../{ => python}/scripts/configmap.yml        |   0
 .../{ => python}/scripts/deployment.yml       |   0
 .../{ => python}/scripts/namespace.yml        |   0
 .../scripts/persistentvolume-nfs.yml          |   0
 .../scripts/persistentvolume-smb.yml          |   0
 .../scripts/persistentvolumeclaim.yml         |   0
 .../{ => python}/scripts/secret.yml           |   0
 .../{ => python}/scripts/seed-configmap.yml   |   0
 .../{ => python}/scripts/service.yml          |   0
 .../{ => python}/scripts/storage-secret.yml   |   0
 .../{ => python}/scripts/storageclass-nfs.yml |   0
 .../{ => python}/src/app.py                   |   0
 .../{ => python}/src/gunicorn.conf.py         |   0
 .../{ => python}/src/requirements.txt         |   0
 .../static/bootstrap/css/bootstrap-grid.css   |   0
 .../bootstrap/css/bootstrap-grid.css.map      |   0
 .../bootstrap/css/bootstrap-grid.min.css      |   0
 .../bootstrap/css/bootstrap-grid.min.css.map  |   0
 .../bootstrap/css/bootstrap-grid.rtl.css      |   0
 .../bootstrap/css/bootstrap-grid.rtl.css.map  |   0
 .../bootstrap/css/bootstrap-grid.rtl.min.css  |   0
 .../css/bootstrap-grid.rtl.min.css.map        |   0
 .../static/bootstrap/css/bootstrap-reboot.css |   0
 .../bootstrap/css/bootstrap-reboot.css.map    |   0
 .../bootstrap/css/bootstrap-reboot.min.css    |   0
 .../css/bootstrap-reboot.min.css.map          |   0
 .../bootstrap/css/bootstrap-reboot.rtl.css    |   0
 .../css/bootstrap-reboot.rtl.css.map          |   0
 .../css/bootstrap-reboot.rtl.min.css          |   0
 .../css/bootstrap-reboot.rtl.min.css.map      |   0
 .../bootstrap/css/bootstrap-utilities.css     |   0
 .../bootstrap/css/bootstrap-utilities.css.map |   0
 .../bootstrap/css/bootstrap-utilities.min.css |   0
 .../css/bootstrap-utilities.min.css.map       |   0
 .../bootstrap/css/bootstrap-utilities.rtl.css |   0
 .../css/bootstrap-utilities.rtl.css.map       |   0
 .../css/bootstrap-utilities.rtl.min.css       |   0
 .../css/bootstrap-utilities.rtl.min.css.map   |   0
 .../src/static/bootstrap/css/bootstrap.css    |   0
 .../static/bootstrap/css/bootstrap.css.map    |   0
 .../static/bootstrap/css/bootstrap.min.css    |   0
 .../bootstrap/css/bootstrap.min.css.map       |   0
 .../static/bootstrap/css/bootstrap.rtl.css    |   0
 .../bootstrap/css/bootstrap.rtl.css.map       |   0
 .../bootstrap/css/bootstrap.rtl.min.css       |   0
 .../bootstrap/css/bootstrap.rtl.min.css.map   |   0
 .../static/bootstrap/js/bootstrap.bundle.js   |   0
 .../bootstrap/js/bootstrap.bundle.js.map      |   0
 .../bootstrap/js/bootstrap.bundle.min.js      |   0
 .../bootstrap/js/bootstrap.bundle.min.js.map  |   0
 .../src/static/bootstrap/js/bootstrap.esm.js  |   0
 .../static/bootstrap/js/bootstrap.esm.js.map  |   0
 .../static/bootstrap/js/bootstrap.esm.min.js  |   0
 .../bootstrap/js/bootstrap.esm.min.js.map     |   0
 .../src/static/bootstrap/js/bootstrap.js      |   0
 .../src/static/bootstrap/js/bootstrap.js.map  |   0
 .../src/static/bootstrap/js/bootstrap.min.js  |   0
 .../static/bootstrap/js/bootstrap.min.js.map  |   0
 .../{ => python}/src/static/favicon.ico       | Bin
 .../{ => python}/src/static/style.css         |   0
 .../{ => python}/src/templates/index.html     |   0
 .../{ => python}/README.md                    |   8 ++-
 .../{ => python}/images/architecture.png      | Bin
 .../{ => python}/scripts/00-variables.sh      |   0
 .../scripts/01-deploy-resources.sh            |   0
 .../scripts/02-build-docker-image.sh          |   0
 .../scripts/03-run-docker-container.sh        |   0
 .../scripts/04-push-docker-image.sh           |   0
 .../{ => python}/scripts/05-deploy-app.sh     |   0
 .../{ => python}/scripts/Dockerfile           |   0
 .../{ => python}/scripts/configmap.yml        |   0
 .../{ => python}/scripts/deployment.yml       |   0
 .../{ => python}/scripts/namespace.yml        |   0
 .../{ => python}/scripts/secret.yml           |   0
 .../{ => python}/scripts/service.yml          |   0
 .../{ => python}/scripts/statefulset.yml      |   0
 .../{ => python}/src/app.py                   |   0
 .../{ => python}/src/database.py              |   0
 .../{ => python}/src/gunicorn.conf.py         |   0
 .../{ => python}/src/requirements.txt         |   0
 .../static/bootstrap/css/bootstrap-grid.css   |   0
 .../bootstrap/css/bootstrap-grid.css.map      |   0
 .../bootstrap/css/bootstrap-grid.min.css      |   0
 .../bootstrap/css/bootstrap-grid.min.css.map  |   0
 .../bootstrap/css/bootstrap-grid.rtl.css      |   0
 .../bootstrap/css/bootstrap-grid.rtl.css.map  |   0
 .../bootstrap/css/bootstrap-grid.rtl.min.css  |   0
 .../css/bootstrap-grid.rtl.min.css.map        |   0
 .../static/bootstrap/css/bootstrap-reboot.css |   0
 .../bootstrap/css/bootstrap-reboot.css.map    |   0
 .../bootstrap/css/bootstrap-reboot.min.css    |   0
 .../css/bootstrap-reboot.min.css.map          |   0
 .../bootstrap/css/bootstrap-reboot.rtl.css    |   0
 .../css/bootstrap-reboot.rtl.css.map          |   0
 .../css/bootstrap-reboot.rtl.min.css          |   0
 .../css/bootstrap-reboot.rtl.min.css.map      |   0
 .../bootstrap/css/bootstrap-utilities.css     |   0
 .../bootstrap/css/bootstrap-utilities.css.map |   0
 .../bootstrap/css/bootstrap-utilities.min.css |   0
 .../css/bootstrap-utilities.min.css.map       |   0
 .../bootstrap/css/bootstrap-utilities.rtl.css |   0
 .../css/bootstrap-utilities.rtl.css.map       |   0
 .../css/bootstrap-utilities.rtl.min.css       |   0
 .../css/bootstrap-utilities.rtl.min.css.map   |   0
 .../src/static/bootstrap/css/bootstrap.css    |   0
 .../static/bootstrap/css/bootstrap.css.map    |   0
 .../static/bootstrap/css/bootstrap.min.css    |   0
 .../bootstrap/css/bootstrap.min.css.map       |   0
 .../static/bootstrap/css/bootstrap.rtl.css    |   0
 .../bootstrap/css/bootstrap.rtl.css.map       |   0
 .../bootstrap/css/bootstrap.rtl.min.css       |   0
 .../bootstrap/css/bootstrap.rtl.min.css.map   |   0
 .../static/bootstrap/js/bootstrap.bundle.js   |   0
 .../bootstrap/js/bootstrap.bundle.js.map      |   0
 .../bootstrap/js/bootstrap.bundle.min.js      |   0
 .../bootstrap/js/bootstrap.bundle.min.js.map  |   0
 .../src/static/bootstrap/js/bootstrap.esm.js  |   0
 .../static/bootstrap/js/bootstrap.esm.js.map  |   0
 .../static/bootstrap/js/bootstrap.esm.min.js  |   0
 .../bootstrap/js/bootstrap.esm.min.js.map     |   0
 .../src/static/bootstrap/js/bootstrap.js      |   0
 .../src/static/bootstrap/js/bootstrap.js.map  |   0
 .../src/static/bootstrap/js/bootstrap.min.js  |   0
 .../static/bootstrap/js/bootstrap.min.js.map  |   0
 .../{ => python}/src/static/favicon.ico       | Bin
 .../{ => python}/src/static/style.css         |   0
 .../{ => python}/src/templates/index.html     |   0
 .../{ => python}/README.md                    |  10 +--
 .../{ => python}/images/architecture.png      | Bin
 .../{ => python}/scripts/00-variables.sh      |   0
 .../scripts/01-deploy-resources.sh            |   0
 .../scripts/02-build-docker-image.sh          |   0
 .../scripts/03-run-docker-container.sh        |   0
 .../scripts/04-push-docker-image.sh           |   0
 .../{ => python}/scripts/05-deploy-app.sh     |   0
 .../{ => python}/scripts/Dockerfile           |   0
 .../{ => python}/scripts/configmap.yml        |   0
 .../{ => python}/scripts/deployment.yml       |   0
 .../{ => python}/scripts/gateway.yml          |   0
 .../{ => python}/scripts/httproute.yml        |   0
 .../{ => python}/scripts/issuer.yml           |   0
 .../{ => python}/scripts/namespace.yml        |   0
 .../{ => python}/scripts/secret.yml           |   0
 .../{ => python}/scripts/service.yml          |   0
 .../{ => python}/src/app.py                   |   0
 .../{ => python}/src/gunicorn.conf.py         |   0
 .../{ => python}/src/requirements.txt         |   0
 .../static/bootstrap/css/bootstrap-grid.css   |   0
 .../bootstrap/css/bootstrap-grid.css.map      |   0
 .../bootstrap/css/bootstrap-grid.min.css      |   0
 .../bootstrap/css/bootstrap-grid.min.css.map  |   0
 .../bootstrap/css/bootstrap-grid.rtl.css      |   0
 .../bootstrap/css/bootstrap-grid.rtl.css.map  |   0
 .../bootstrap/css/bootstrap-grid.rtl.min.css  |   0
 .../css/bootstrap-grid.rtl.min.css.map        |   0
 .../static/bootstrap/css/bootstrap-reboot.css |   0
 .../bootstrap/css/bootstrap-reboot.css.map    |   0
 .../bootstrap/css/bootstrap-reboot.min.css    |   0
 .../css/bootstrap-reboot.min.css.map          |   0
 .../bootstrap/css/bootstrap-reboot.rtl.css    |   0
 .../css/bootstrap-reboot.rtl.css.map          |   0
 .../css/bootstrap-reboot.rtl.min.css          |   0
 .../css/bootstrap-reboot.rtl.min.css.map      |   0
 .../bootstrap/css/bootstrap-utilities.css     |   0
 .../bootstrap/css/bootstrap-utilities.css.map |   0
 .../bootstrap/css/bootstrap-utilities.min.css |   0
 .../css/bootstrap-utilities.min.css.map       |   0
 .../bootstrap/css/bootstrap-utilities.rtl.css |   0
 .../css/bootstrap-utilities.rtl.css.map       |   0
 .../css/bootstrap-utilities.rtl.min.css       |   0
 .../css/bootstrap-utilities.rtl.min.css.map   |   0
 .../src/static/bootstrap/css/bootstrap.css    |   0
 .../static/bootstrap/css/bootstrap.css.map    |   0
 .../static/bootstrap/css/bootstrap.min.css    |   0
 .../bootstrap/css/bootstrap.min.css.map       |   0
 .../static/bootstrap/css/bootstrap.rtl.css    |   0
 .../bootstrap/css/bootstrap.rtl.css.map       |   0
 .../bootstrap/css/bootstrap.rtl.min.css       |   0
 .../bootstrap/css/bootstrap.rtl.min.css.map   |   0
 .../static/bootstrap/js/bootstrap.bundle.js   |   0
 .../bootstrap/js/bootstrap.bundle.js.map      |   0
 .../bootstrap/js/bootstrap.bundle.min.js      |   0
 .../bootstrap/js/bootstrap.bundle.min.js.map  |   0
 .../src/static/bootstrap/js/bootstrap.esm.js  |   0
 .../static/bootstrap/js/bootstrap.esm.js.map  |   0
 .../static/bootstrap/js/bootstrap.esm.min.js  |   0
 .../bootstrap/js/bootstrap.esm.min.js.map     |   0
 .../src/static/bootstrap/js/bootstrap.js      |   0
 .../src/static/bootstrap/js/bootstrap.js.map  |   0
 .../src/static/bootstrap/js/bootstrap.min.js  |   0
 .../static/bootstrap/js/bootstrap.min.js.map  |   0
 .../{ => python}/src/static/favicon.ico       | Bin
 .../{ => python}/src/static/style.css         |   0
 .../{ => python}/src/templates/index.html     |   0
 .../{ => python}/README.md                    |   8 ++-
 .../{ => python}/images/architecture.png      | Bin
 .../{ => python}/scripts/00-variables.sh      |   0
 .../scripts/01-deploy-resources.sh            |   0
 .../scripts/02-build-docker-image.sh          |   0
 .../scripts/03-run-docker-container.sh        |   0
 .../scripts/04-push-docker-image.sh           |   0
 .../{ => python}/scripts/05-deploy-app.sh     |   0
 .../{ => python}/scripts/Dockerfile           |   0
 .../{ => python}/scripts/configmap.yml        |   0
 .../{ => python}/scripts/deployment.yml       |   0
 .../{ => python}/scripts/namespace.yml        |   0
 .../{ => python}/scripts/secret.yml           |   0
 .../{ => python}/scripts/service.yml          |   0
 .../{ => python}/src/app.py                   |   0
 .../{ => python}/src/database.py              |   0
 .../{ => python}/src/gunicorn.conf.py         |   0
 .../{ => python}/src/requirements.txt         |   0
 .../static/bootstrap/css/bootstrap-grid.css   |   0
 .../bootstrap/css/bootstrap-grid.css.map      |   0
 .../bootstrap/css/bootstrap-grid.min.css      |   0
 .../bootstrap/css/bootstrap-grid.min.css.map  |   0
 .../bootstrap/css/bootstrap-grid.rtl.css      |   0
 .../bootstrap/css/bootstrap-grid.rtl.css.map  |   0
 .../bootstrap/css/bootstrap-grid.rtl.min.css  |   0
 .../css/bootstrap-grid.rtl.min.css.map        |   0
 .../static/bootstrap/css/bootstrap-reboot.css |   0
 .../bootstrap/css/bootstrap-reboot.css.map    |   0
 .../bootstrap/css/bootstrap-reboot.min.css    |   0
 .../css/bootstrap-reboot.min.css.map          |   0
 .../bootstrap/css/bootstrap-reboot.rtl.css    |   0
 .../css/bootstrap-reboot.rtl.css.map          |   0
 .../css/bootstrap-reboot.rtl.min.css          |   0
 .../css/bootstrap-reboot.rtl.min.css.map      |   0
 .../bootstrap/css/bootstrap-utilities.css     |   0
 .../bootstrap/css/bootstrap-utilities.css.map |   0
 .../bootstrap/css/bootstrap-utilities.min.css |   0
 .../css/bootstrap-utilities.min.css.map       |   0
 .../bootstrap/css/bootstrap-utilities.rtl.css |   0
 .../css/bootstrap-utilities.rtl.css.map       |   0
 .../css/bootstrap-utilities.rtl.min.css       |   0
 .../css/bootstrap-utilities.rtl.min.css.map   |   0
 .../src/static/bootstrap/css/bootstrap.css    |   0
 .../static/bootstrap/css/bootstrap.css.map    |   0
 .../static/bootstrap/css/bootstrap.min.css    |   0
 .../bootstrap/css/bootstrap.min.css.map       |   0
 .../static/bootstrap/css/bootstrap.rtl.css    |   0
 .../bootstrap/css/bootstrap.rtl.css.map       |   0
 .../bootstrap/css/bootstrap.rtl.min.css       |   0
 .../bootstrap/css/bootstrap.rtl.min.css.map   |   0
 .../static/bootstrap/js/bootstrap.bundle.js   |   0
 .../bootstrap/js/bootstrap.bundle.js.map      |   0
 .../bootstrap/js/bootstrap.bundle.min.js      |   0
 .../bootstrap/js/bootstrap.bundle.min.js.map  |   0
 .../src/static/bootstrap/js/bootstrap.esm.js  |   0
 .../static/bootstrap/js/bootstrap.esm.js.map  |   0
 .../static/bootstrap/js/bootstrap.esm.min.js  |   0
 .../bootstrap/js/bootstrap.esm.min.js.map     |   0
 .../src/static/bootstrap/js/bootstrap.js      |   0
 .../src/static/bootstrap/js/bootstrap.js.map  |   0
 .../src/static/bootstrap/js/bootstrap.min.js  |   0
 .../static/bootstrap/js/bootstrap.min.js.map  |   0
 .../{ => python}/src/static/favicon.ico       | Bin
 .../{ => python}/src/static/style.css         |   0
 .../{ => python}/src/templates/index.html     |   0
 .../{ => python}/README.md                    |   8 ++-
 .../{ => python}/images/architecture.png      | Bin
 .../{ => python}/scripts/00-variables.sh      |   0
 .../scripts/01-deploy-resources.sh            |   0
 .../scripts/02-build-docker-image.sh          |   0
 .../scripts/03-run-docker-container.sh        |   0
 .../scripts/04-push-docker-image.sh           |   0
 .../{ => python}/scripts/05-deploy-app.sh     |   0
 .../{ => python}/scripts/Dockerfile           |   0
 .../{ => python}/scripts/configmap.yml        |   0
 .../{ => python}/scripts/deployment.yml       |   0
 .../{ => python}/scripts/namespace.yml        |   0
 .../{ => python}/scripts/secret.yml           |   0
 .../{ => python}/scripts/service.yml          |   0
 .../{ => python}/src/app.py                   |   0
 .../{ => python}/src/database.py              |   0
 .../{ => python}/src/gunicorn.conf.py         |   0
 .../{ => python}/src/requirements.txt         |   0
 .../static/bootstrap/css/bootstrap-grid.css   |   0
 .../bootstrap/css/bootstrap-grid.css.map      |   0
 .../bootstrap/css/bootstrap-grid.min.css      |   0
 .../bootstrap/css/bootstrap-grid.min.css.map  |   0
 .../bootstrap/css/bootstrap-grid.rtl.css      |   0
 .../bootstrap/css/bootstrap-grid.rtl.css.map  |   0
 .../bootstrap/css/bootstrap-grid.rtl.min.css  |   0
 .../css/bootstrap-grid.rtl.min.css.map        |   0
 .../static/bootstrap/css/bootstrap-reboot.css |   0
 .../bootstrap/css/bootstrap-reboot.css.map    |   0
 .../bootstrap/css/bootstrap-reboot.min.css    |   0
 .../css/bootstrap-reboot.min.css.map          |   0
 .../bootstrap/css/bootstrap-reboot.rtl.css    |   0
 .../css/bootstrap-reboot.rtl.css.map          |   0
 .../css/bootstrap-reboot.rtl.min.css          |   0
 .../css/bootstrap-reboot.rtl.min.css.map      |   0
 .../bootstrap/css/bootstrap-utilities.css     |   0
 .../bootstrap/css/bootstrap-utilities.css.map |   0
 .../bootstrap/css/bootstrap-utilities.min.css |   0
 .../css/bootstrap-utilities.min.css.map       |   0
 .../bootstrap/css/bootstrap-utilities.rtl.css |   0
 .../css/bootstrap-utilities.rtl.css.map       |   0
 .../css/bootstrap-utilities.rtl.min.css       |   0
 .../css/bootstrap-utilities.rtl.min.css.map   |   0
 .../src/static/bootstrap/css/bootstrap.css    |   0
 .../static/bootstrap/css/bootstrap.css.map    |   0
 .../static/bootstrap/css/bootstrap.min.css    |   0
 .../bootstrap/css/bootstrap.min.css.map       |   0
 .../static/bootstrap/css/bootstrap.rtl.css    |   0
 .../bootstrap/css/bootstrap.rtl.css.map       |   0
 .../bootstrap/css/bootstrap.rtl.min.css       |   0
 .../bootstrap/css/bootstrap.rtl.min.css.map   |   0
 .../static/bootstrap/js/bootstrap.bundle.js   |   0
 .../bootstrap/js/bootstrap.bundle.js.map      |   0
 .../bootstrap/js/bootstrap.bundle.min.js      |   0
 .../bootstrap/js/bootstrap.bundle.min.js.map  |   0
 .../src/static/bootstrap/js/bootstrap.esm.js  |   0
 .../static/bootstrap/js/bootstrap.esm.js.map  |   0
 .../static/bootstrap/js/bootstrap.esm.min.js  |   0
 .../bootstrap/js/bootstrap.esm.min.js.map     |   0
 .../src/static/bootstrap/js/bootstrap.js      |   0
 .../src/static/bootstrap/js/bootstrap.js.map  |   0
 .../src/static/bootstrap/js/bootstrap.min.js  |   0
 .../static/bootstrap/js/bootstrap.min.js.map  |   0
 .../{ => python}/src/static/favicon.ico       | Bin
 .../{ => python}/src/static/style.css         |   0
 .../{ => python}/src/templates/index.html     |   0
 .../{ => python}/README.md                    |   8 ++-
 .../{ => python}/images/architecture.png      | Bin
 .../{ => python}/scripts/00-variables.sh      |   0
 .../scripts/01-deploy-resources.sh            |   0
 .../scripts/02-build-docker-image.sh          |   0
 .../scripts/03-run-docker-container.sh        |   0
 .../scripts/04-push-docker-image.sh           |   0
 .../{ => python}/scripts/05-deploy-app.sh     |   0
 .../{ => python}/scripts/Dockerfile           |   0
 .../{ => python}/scripts/configmap.yml        |   0
 .../{ => python}/scripts/deployment.yml       |   0
 .../{ => python}/scripts/namespace.yml        |   0
 .../{ => python}/scripts/secret.yml           |   0
 .../{ => python}/scripts/service.yml          |   0
 .../{ => python}/src/activities.py            |   0
 .../{ => python}/src/app.py                   |   0
 .../{ => python}/src/database.py              |   0
 .../{ => python}/src/gunicorn.conf.py         |   0
 .../{ => python}/src/requirements.txt         |   0
 .../static/bootstrap/css/bootstrap-grid.css   |   0
 .../bootstrap/css/bootstrap-grid.css.map      |   0
 .../bootstrap/css/bootstrap-grid.min.css      |   0
 .../bootstrap/css/bootstrap-grid.min.css.map  |   0
 .../bootstrap/css/bootstrap-grid.rtl.css      |   0
 .../bootstrap/css/bootstrap-grid.rtl.css.map  |   0
 .../bootstrap/css/bootstrap-grid.rtl.min.css  |   0
 .../css/bootstrap-grid.rtl.min.css.map        |   0
 .../static/bootstrap/css/bootstrap-reboot.css |   0
 .../bootstrap/css/bootstrap-reboot.css.map    |   0
 .../bootstrap/css/bootstrap-reboot.min.css    |   0
 .../css/bootstrap-reboot.min.css.map          |   0
 .../bootstrap/css/bootstrap-reboot.rtl.css    |   0
 .../css/bootstrap-reboot.rtl.css.map          |   0
 .../css/bootstrap-reboot.rtl.min.css          |   0
 .../css/bootstrap-reboot.rtl.min.css.map      |   0
 .../bootstrap/css/bootstrap-utilities.css     |   0
 .../bootstrap/css/bootstrap-utilities.css.map |   0
 .../bootstrap/css/bootstrap-utilities.min.css |   0
 .../css/bootstrap-utilities.min.css.map       |   0
 .../bootstrap/css/bootstrap-utilities.rtl.css |   0
 .../css/bootstrap-utilities.rtl.css.map       |   0
 .../css/bootstrap-utilities.rtl.min.css       |   0
 .../css/bootstrap-utilities.rtl.min.css.map   |   0
 .../src/static/bootstrap/css/bootstrap.css    |   0
 .../static/bootstrap/css/bootstrap.css.map    |   0
 .../static/bootstrap/css/bootstrap.min.css    |   0
 .../bootstrap/css/bootstrap.min.css.map       |   0
 .../static/bootstrap/css/bootstrap.rtl.css    |   0
 .../bootstrap/css/bootstrap.rtl.css.map       |   0
 .../bootstrap/css/bootstrap.rtl.min.css       |   0
 .../bootstrap/css/bootstrap.rtl.min.css.map   |   0
 .../static/bootstrap/js/bootstrap.bundle.js   |   0
 .../bootstrap/js/bootstrap.bundle.js.map      |   0
 .../bootstrap/js/bootstrap.bundle.min.js      |   0
 .../bootstrap/js/bootstrap.bundle.min.js.map  |   0
 .../src/static/bootstrap/js/bootstrap.esm.js  |   0
 .../static/bootstrap/js/bootstrap.esm.js.map  |   0
 .../static/bootstrap/js/bootstrap.esm.min.js  |   0
 .../bootstrap/js/bootstrap.esm.min.js.map     |   0
 .../src/static/bootstrap/js/bootstrap.js      |   0
 .../src/static/bootstrap/js/bootstrap.js.map  |   0
 .../src/static/bootstrap/js/bootstrap.min.js  |   0
 .../static/bootstrap/js/bootstrap.min.js.map  |   0
 .../{ => python}/src/static/favicon.ico       | Bin
 .../{ => python}/src/static/style.css         |   0
 .../{ => python}/src/templates/index.html     |   0
 596 files changed, 119 insertions(+), 39 deletions(-)
 create mode 100644 .gitattributes
 rename samples/web-app-blob-storage/{ => python}/README.md (86%)
 rename samples/web-app-blob-storage/{ => python}/images/architecture.png (100%)
 rename samples/web-app-blob-storage/{ => python}/scripts/00-variables.sh (100%)
 rename samples/web-app-blob-storage/{ => python}/scripts/01-deploy-resources.sh (100%)
 rename samples/web-app-blob-storage/{ => python}/scripts/02-build-docker-image.sh (100%)
 rename samples/web-app-blob-storage/{ => python}/scripts/03-run-docker-container.sh (100%)
 rename samples/web-app-blob-storage/{ => python}/scripts/04-push-docker-image.sh (100%)
 rename samples/web-app-blob-storage/{ => python}/scripts/05-deploy-app.sh (100%)
 rename samples/web-app-blob-storage/{ => python}/scripts/Dockerfile (100%)
 rename samples/web-app-blob-storage/{ => python}/scripts/configmap.yml (100%)
 rename samples/web-app-blob-storage/{ => python}/scripts/deployment.yml (100%)
 rename samples/web-app-blob-storage/{ => python}/scripts/namespace.yml (100%)
 rename samples/web-app-blob-storage/{ => python}/scripts/secret.yml (100%)
 rename samples/web-app-blob-storage/{ => python}/scripts/service.yml (100%)
 rename samples/web-app-blob-storage/{ => python}/src/app.py (100%)
 rename samples/web-app-blob-storage/{ => python}/src/gunicorn.conf.py (100%)
 rename samples/web-app-blob-storage/{ => python}/src/requirements.txt (100%)
 rename samples/web-app-blob-storage/{ => python}/src/static/bootstrap/css/bootstrap-grid.css (100%)
 rename samples/web-app-blob-storage/{ => python}/src/static/bootstrap/css/bootstrap-grid.css.map (100%)
 rename samples/web-app-blob-storage/{ => python}/src/static/bootstrap/css/bootstrap-grid.min.css (100%)
 rename samples/web-app-blob-storage/{ => python}/src/static/bootstrap/css/bootstrap-grid.min.css.map (100%)
 rename samples/web-app-blob-storage/{ => python}/src/static/bootstrap/css/bootstrap-grid.rtl.css (100%)
 rename samples/web-app-blob-storage/{ => python}/src/static/bootstrap/css/bootstrap-grid.rtl.css.map (100%)
 rename samples/web-app-blob-storage/{ => python}/src/static/bootstrap/css/bootstrap-grid.rtl.min.css (100%)
 rename samples/web-app-blob-storage/{ => python}/src/static/bootstrap/css/bootstrap-grid.rtl.min.css.map (100%)
 rename samples/web-app-blob-storage/{ => python}/src/static/bootstrap/css/bootstrap-reboot.css (100%)
 rename samples/web-app-blob-storage/{ => python}/src/static/bootstrap/css/bootstrap-reboot.css.map (100%)
 rename samples/web-app-blob-storage/{ => python}/src/static/bootstrap/css/bootstrap-reboot.min.css (100%)
 rename samples/web-app-blob-storage/{ => python}/src/static/bootstrap/css/bootstrap-reboot.min.css.map (100%)
 rename samples/web-app-blob-storage/{ => python}/src/static/bootstrap/css/bootstrap-reboot.rtl.css (100%)
 rename samples/web-app-blob-storage/{ => python}/src/static/bootstrap/css/bootstrap-reboot.rtl.css.map (100%)
 rename samples/web-app-blob-storage/{ => python}/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css (100%)
 rename samples/web-app-blob-storage/{ => python}/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css.map (100%)
 rename samples/web-app-blob-storage/{ => python}/src/static/bootstrap/css/bootstrap-utilities.css (100%)
 rename samples/web-app-blob-storage/{ => python}/src/static/bootstrap/css/bootstrap-utilities.css.map (100%)
 rename samples/web-app-blob-storage/{ => python}/src/static/bootstrap/css/bootstrap-utilities.min.css (100%)
 rename samples/web-app-blob-storage/{ => python}/src/static/bootstrap/css/bootstrap-utilities.min.css.map (100%)
 rename samples/web-app-blob-storage/{ => python}/src/static/bootstrap/css/bootstrap-utilities.rtl.css (100%)
 rename samples/web-app-blob-storage/{ => python}/src/static/bootstrap/css/bootstrap-utilities.rtl.css.map (100%)
 rename samples/web-app-blob-storage/{ => python}/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css (100%)
 rename samples/web-app-blob-storage/{ => python}/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css.map (100%)
 rename samples/web-app-blob-storage/{ => python}/src/static/bootstrap/css/bootstrap.css (100%)
 rename samples/web-app-blob-storage/{ => python}/src/static/bootstrap/css/bootstrap.css.map (100%)
 rename samples/web-app-blob-storage/{ => python}/src/static/bootstrap/css/bootstrap.min.css (100%)
 rename samples/web-app-blob-storage/{ => python}/src/static/bootstrap/css/bootstrap.min.css.map (100%)
 rename samples/web-app-blob-storage/{ => python}/src/static/bootstrap/css/bootstrap.rtl.css (100%)
 rename samples/web-app-blob-storage/{ => python}/src/static/bootstrap/css/bootstrap.rtl.css.map (100%)
 rename samples/web-app-blob-storage/{ => python}/src/static/bootstrap/css/bootstrap.rtl.min.css (100%)
 rename samples/web-app-blob-storage/{ => python}/src/static/bootstrap/css/bootstrap.rtl.min.css.map (100%)
 rename samples/web-app-blob-storage/{ => python}/src/static/bootstrap/js/bootstrap.bundle.js (100%)
 rename samples/web-app-blob-storage/{ => python}/src/static/bootstrap/js/bootstrap.bundle.js.map (100%)
 rename samples/web-app-blob-storage/{ => python}/src/static/bootstrap/js/bootstrap.bundle.min.js (100%)
 rename samples/web-app-blob-storage/{ => python}/src/static/bootstrap/js/bootstrap.bundle.min.js.map (100%)
 rename samples/web-app-blob-storage/{ => python}/src/static/bootstrap/js/bootstrap.esm.js (100%)
 rename samples/web-app-blob-storage/{ => python}/src/static/bootstrap/js/bootstrap.esm.js.map (100%)
 rename samples/web-app-blob-storage/{ => python}/src/static/bootstrap/js/bootstrap.esm.min.js (100%)
 rename samples/web-app-blob-storage/{ => python}/src/static/bootstrap/js/bootstrap.esm.min.js.map (100%)
 rename samples/web-app-blob-storage/{ => python}/src/static/bootstrap/js/bootstrap.js (100%)
 rename samples/web-app-blob-storage/{ => python}/src/static/bootstrap/js/bootstrap.js.map (100%)
 rename samples/web-app-blob-storage/{ => python}/src/static/bootstrap/js/bootstrap.min.js (100%)
 rename samples/web-app-blob-storage/{ => python}/src/static/bootstrap/js/bootstrap.min.js.map (100%)
 rename samples/web-app-blob-storage/{ => python}/src/static/favicon.ico (100%)
 rename samples/web-app-blob-storage/{ => python}/src/static/style.css (100%)
 rename samples/web-app-blob-storage/{ => python}/src/templates/index.html (100%)
 rename samples/web-app-cosmosdb-mongodb-api/{ => python}/README.md (88%)
 rename samples/web-app-cosmosdb-mongodb-api/{ => python}/images/architecture.png (100%)
 rename samples/web-app-cosmosdb-mongodb-api/{ => python}/scripts/00-variables.sh (100%)
 rename samples/web-app-cosmosdb-mongodb-api/{ => python}/scripts/01-deploy-resources.sh (100%)
 rename samples/web-app-cosmosdb-mongodb-api/{ => python}/scripts/02-build-docker-image.sh (100%)
 rename samples/web-app-cosmosdb-mongodb-api/{ => python}/scripts/03-run-docker-container.sh (100%)
 rename samples/web-app-cosmosdb-mongodb-api/{ => python}/scripts/04-push-docker-image.sh (100%)
 rename samples/web-app-cosmosdb-mongodb-api/{ => python}/scripts/05-deploy-app.sh (100%)
 rename samples/web-app-cosmosdb-mongodb-api/{ => python}/scripts/Dockerfile (100%)
 rename samples/web-app-cosmosdb-mongodb-api/{ => python}/scripts/configmap.yml (100%)
 rename samples/web-app-cosmosdb-mongodb-api/{ => python}/scripts/deployment.yml (100%)
 rename samples/web-app-cosmosdb-mongodb-api/{ => python}/scripts/namespace.yml (100%)
 rename samples/web-app-cosmosdb-mongodb-api/{ => python}/scripts/secret.yml (100%)
 rename samples/web-app-cosmosdb-mongodb-api/{ => python}/scripts/service.yml (100%)
 rename samples/web-app-cosmosdb-mongodb-api/{ => python}/src/app.py (100%)
 rename samples/web-app-cosmosdb-mongodb-api/{ => python}/src/gunicorn.conf.py (100%)
 rename samples/web-app-cosmosdb-mongodb-api/{ => python}/src/mongodb.py (100%)
 rename samples/web-app-cosmosdb-mongodb-api/{ => python}/src/requirements.txt (100%)
 rename samples/web-app-cosmosdb-mongodb-api/{ => python}/src/static/bootstrap/css/bootstrap-grid.css (100%)
 rename samples/web-app-cosmosdb-mongodb-api/{ => python}/src/static/bootstrap/css/bootstrap-grid.css.map (100%)
 rename samples/web-app-cosmosdb-mongodb-api/{ => python}/src/static/bootstrap/css/bootstrap-grid.min.css (100%)
 rename samples/web-app-cosmosdb-mongodb-api/{ => python}/src/static/bootstrap/css/bootstrap-grid.min.css.map (100%)
 rename samples/web-app-cosmosdb-mongodb-api/{ => python}/src/static/bootstrap/css/bootstrap-grid.rtl.css (100%)
 rename samples/web-app-cosmosdb-mongodb-api/{ => python}/src/static/bootstrap/css/bootstrap-grid.rtl.css.map (100%)
 rename samples/web-app-cosmosdb-mongodb-api/{ => python}/src/static/bootstrap/css/bootstrap-grid.rtl.min.css (100%)
 rename samples/web-app-cosmosdb-mongodb-api/{ => python}/src/static/bootstrap/css/bootstrap-grid.rtl.min.css.map (100%)
 rename samples/web-app-cosmosdb-mongodb-api/{ => python}/src/static/bootstrap/css/bootstrap-reboot.css (100%)
 rename samples/web-app-cosmosdb-mongodb-api/{ => python}/src/static/bootstrap/css/bootstrap-reboot.css.map (100%)
 rename samples/web-app-cosmosdb-mongodb-api/{ => python}/src/static/bootstrap/css/bootstrap-reboot.min.css (100%)
 rename samples/web-app-cosmosdb-mongodb-api/{ => python}/src/static/bootstrap/css/bootstrap-reboot.min.css.map (100%)
 rename samples/web-app-cosmosdb-mongodb-api/{ => python}/src/static/bootstrap/css/bootstrap-reboot.rtl.css (100%)
 rename samples/web-app-cosmosdb-mongodb-api/{ => python}/src/static/bootstrap/css/bootstrap-reboot.rtl.css.map (100%)
 rename samples/web-app-cosmosdb-mongodb-api/{ => python}/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css (100%)
 rename samples/web-app-cosmosdb-mongodb-api/{ => python}/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css.map (100%)
 rename samples/web-app-cosmosdb-mongodb-api/{ => python}/src/static/bootstrap/css/bootstrap-utilities.css (100%)
 rename samples/web-app-cosmosdb-mongodb-api/{ => python}/src/static/bootstrap/css/bootstrap-utilities.css.map (100%)
 rename samples/web-app-cosmosdb-mongodb-api/{ => python}/src/static/bootstrap/css/bootstrap-utilities.min.css (100%)
 rename samples/web-app-cosmosdb-mongodb-api/{ => python}/src/static/bootstrap/css/bootstrap-utilities.min.css.map (100%)
 rename samples/web-app-cosmosdb-mongodb-api/{ => python}/src/static/bootstrap/css/bootstrap-utilities.rtl.css (100%)
 rename samples/web-app-cosmosdb-mongodb-api/{ => python}/src/static/bootstrap/css/bootstrap-utilities.rtl.css.map (100%)
 rename samples/web-app-cosmosdb-mongodb-api/{ => python}/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css (100%)
 rename samples/web-app-cosmosdb-mongodb-api/{ => python}/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css.map (100%)
 rename samples/web-app-cosmosdb-mongodb-api/{ => python}/src/static/bootstrap/css/bootstrap.css (100%)
 rename samples/web-app-cosmosdb-mongodb-api/{ => python}/src/static/bootstrap/css/bootstrap.css.map (100%)
 rename samples/web-app-cosmosdb-mongodb-api/{ => python}/src/static/bootstrap/css/bootstrap.min.css (100%)
 rename samples/web-app-cosmosdb-mongodb-api/{ => python}/src/static/bootstrap/css/bootstrap.min.css.map (100%)
 rename samples/web-app-cosmosdb-mongodb-api/{ => python}/src/static/bootstrap/css/bootstrap.rtl.css (100%)
 rename samples/web-app-cosmosdb-mongodb-api/{ => python}/src/static/bootstrap/css/bootstrap.rtl.css.map (100%)
 rename samples/web-app-cosmosdb-mongodb-api/{ => python}/src/static/bootstrap/css/bootstrap.rtl.min.css (100%)
 rename samples/web-app-cosmosdb-mongodb-api/{ => python}/src/static/bootstrap/css/bootstrap.rtl.min.css.map (100%)
 rename samples/web-app-cosmosdb-mongodb-api/{ => python}/src/static/bootstrap/js/bootstrap.bundle.js (100%)
 rename samples/web-app-cosmosdb-mongodb-api/{ => python}/src/static/bootstrap/js/bootstrap.bundle.js.map (100%)
 rename samples/web-app-cosmosdb-mongodb-api/{ => python}/src/static/bootstrap/js/bootstrap.bundle.min.js (100%)
 rename samples/web-app-cosmosdb-mongodb-api/{ => python}/src/static/bootstrap/js/bootstrap.bundle.min.js.map (100%)
 rename samples/web-app-cosmosdb-mongodb-api/{ => python}/src/static/bootstrap/js/bootstrap.esm.js (100%)
 rename samples/web-app-cosmosdb-mongodb-api/{ => python}/src/static/bootstrap/js/bootstrap.esm.js.map (100%)
 rename samples/web-app-cosmosdb-mongodb-api/{ => python}/src/static/bootstrap/js/bootstrap.esm.min.js (100%)
 rename samples/web-app-cosmosdb-mongodb-api/{ => python}/src/static/bootstrap/js/bootstrap.esm.min.js.map (100%)
 rename samples/web-app-cosmosdb-mongodb-api/{ => python}/src/static/bootstrap/js/bootstrap.js (100%)
 rename samples/web-app-cosmosdb-mongodb-api/{ => python}/src/static/bootstrap/js/bootstrap.js.map (100%)
 rename samples/web-app-cosmosdb-mongodb-api/{ => python}/src/static/bootstrap/js/bootstrap.min.js (100%)
 rename samples/web-app-cosmosdb-mongodb-api/{ => python}/src/static/bootstrap/js/bootstrap.min.js.map (100%)
 rename samples/web-app-cosmosdb-mongodb-api/{ => python}/src/static/favicon.ico (100%)
 rename samples/web-app-cosmosdb-mongodb-api/{ => python}/src/static/style.css (100%)
 rename samples/web-app-cosmosdb-mongodb-api/{ => python}/src/templates/index.html (100%)
 rename samples/web-app-cosmosdb-nosql-api/{ => python}/README.md (88%)
 rename samples/web-app-cosmosdb-nosql-api/{ => python}/images/architecture.png (100%)
 rename samples/web-app-cosmosdb-nosql-api/{ => python}/scripts/00-variables.sh (100%)
 rename samples/web-app-cosmosdb-nosql-api/{ => python}/scripts/01-deploy-resources.sh (100%)
 rename samples/web-app-cosmosdb-nosql-api/{ => python}/scripts/02-build-docker-image.sh (100%)
 rename samples/web-app-cosmosdb-nosql-api/{ => python}/scripts/03-run-docker-container.sh (100%)
 rename samples/web-app-cosmosdb-nosql-api/{ => python}/scripts/04-push-docker-image.sh (100%)
 rename samples/web-app-cosmosdb-nosql-api/{ => python}/scripts/05-deploy-app.sh (100%)
 rename samples/web-app-cosmosdb-nosql-api/{ => python}/scripts/Dockerfile (100%)
 rename samples/web-app-cosmosdb-nosql-api/{ => python}/scripts/configmap.yml (100%)
 rename samples/web-app-cosmosdb-nosql-api/{ => python}/scripts/deployment.yml (100%)
 rename samples/web-app-cosmosdb-nosql-api/{ => python}/scripts/namespace.yml (100%)
 rename samples/web-app-cosmosdb-nosql-api/{ => python}/scripts/secret.yml (100%)
 rename samples/web-app-cosmosdb-nosql-api/{ => python}/scripts/service.yml (100%)
 rename samples/web-app-cosmosdb-nosql-api/{ => python}/src/app.py (100%)
 rename samples/web-app-cosmosdb-nosql-api/{ => python}/src/cosmosdb_client.py (100%)
 rename samples/web-app-cosmosdb-nosql-api/{ => python}/src/gunicorn.conf.py (100%)
 rename samples/web-app-cosmosdb-nosql-api/{ => python}/src/requirements.txt (100%)
 rename samples/web-app-cosmosdb-nosql-api/{ => python}/src/static/bootstrap/css/bootstrap-grid.css (100%)
 rename samples/web-app-cosmosdb-nosql-api/{ => python}/src/static/bootstrap/css/bootstrap-grid.css.map (100%)
 rename samples/web-app-cosmosdb-nosql-api/{ => python}/src/static/bootstrap/css/bootstrap-grid.min.css (100%)
 rename samples/web-app-cosmosdb-nosql-api/{ => python}/src/static/bootstrap/css/bootstrap-grid.min.css.map (100%)
 rename samples/web-app-cosmosdb-nosql-api/{ => python}/src/static/bootstrap/css/bootstrap-grid.rtl.css (100%)
 rename samples/web-app-cosmosdb-nosql-api/{ => python}/src/static/bootstrap/css/bootstrap-grid.rtl.css.map (100%)
 rename samples/web-app-cosmosdb-nosql-api/{ => python}/src/static/bootstrap/css/bootstrap-grid.rtl.min.css (100%)
 rename samples/web-app-cosmosdb-nosql-api/{ => python}/src/static/bootstrap/css/bootstrap-grid.rtl.min.css.map (100%)
 rename samples/web-app-cosmosdb-nosql-api/{ => python}/src/static/bootstrap/css/bootstrap-reboot.css (100%)
 rename samples/web-app-cosmosdb-nosql-api/{ => python}/src/static/bootstrap/css/bootstrap-reboot.css.map (100%)
 rename samples/web-app-cosmosdb-nosql-api/{ => python}/src/static/bootstrap/css/bootstrap-reboot.min.css (100%)
 rename samples/web-app-cosmosdb-nosql-api/{ => python}/src/static/bootstrap/css/bootstrap-reboot.min.css.map (100%)
 rename samples/web-app-cosmosdb-nosql-api/{ => python}/src/static/bootstrap/css/bootstrap-reboot.rtl.css (100%)
 rename samples/web-app-cosmosdb-nosql-api/{ => python}/src/static/bootstrap/css/bootstrap-reboot.rtl.css.map (100%)
 rename samples/web-app-cosmosdb-nosql-api/{ => python}/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css (100%)
 rename samples/web-app-cosmosdb-nosql-api/{ => python}/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css.map (100%)
 rename samples/web-app-cosmosdb-nosql-api/{ => python}/src/static/bootstrap/css/bootstrap-utilities.css (100%)
 rename samples/web-app-cosmosdb-nosql-api/{ => python}/src/static/bootstrap/css/bootstrap-utilities.css.map (100%)
 rename samples/web-app-cosmosdb-nosql-api/{ => python}/src/static/bootstrap/css/bootstrap-utilities.min.css (100%)
 rename samples/web-app-cosmosdb-nosql-api/{ => python}/src/static/bootstrap/css/bootstrap-utilities.min.css.map (100%)
 rename samples/web-app-cosmosdb-nosql-api/{ => python}/src/static/bootstrap/css/bootstrap-utilities.rtl.css (100%)
 rename samples/web-app-cosmosdb-nosql-api/{ => python}/src/static/bootstrap/css/bootstrap-utilities.rtl.css.map (100%)
 rename samples/web-app-cosmosdb-nosql-api/{ => python}/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css (100%)
 rename samples/web-app-cosmosdb-nosql-api/{ => python}/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css.map (100%)
 rename samples/web-app-cosmosdb-nosql-api/{ => python}/src/static/bootstrap/css/bootstrap.css (100%)
 rename samples/web-app-cosmosdb-nosql-api/{ => python}/src/static/bootstrap/css/bootstrap.css.map (100%)
 rename samples/web-app-cosmosdb-nosql-api/{ => python}/src/static/bootstrap/css/bootstrap.min.css (100%)
 rename samples/web-app-cosmosdb-nosql-api/{ => python}/src/static/bootstrap/css/bootstrap.min.css.map (100%)
 rename samples/web-app-cosmosdb-nosql-api/{ => python}/src/static/bootstrap/css/bootstrap.rtl.css (100%)
 rename samples/web-app-cosmosdb-nosql-api/{ => python}/src/static/bootstrap/css/bootstrap.rtl.css.map (100%)
 rename samples/web-app-cosmosdb-nosql-api/{ => python}/src/static/bootstrap/css/bootstrap.rtl.min.css (100%)
 rename samples/web-app-cosmosdb-nosql-api/{ => python}/src/static/bootstrap/css/bootstrap.rtl.min.css.map (100%)
 rename samples/web-app-cosmosdb-nosql-api/{ => python}/src/static/bootstrap/js/bootstrap.bundle.js (100%)
 rename samples/web-app-cosmosdb-nosql-api/{ => python}/src/static/bootstrap/js/bootstrap.bundle.js.map (100%)
 rename samples/web-app-cosmosdb-nosql-api/{ => python}/src/static/bootstrap/js/bootstrap.bundle.min.js (100%)
 rename samples/web-app-cosmosdb-nosql-api/{ => python}/src/static/bootstrap/js/bootstrap.bundle.min.js.map (100%)
 rename samples/web-app-cosmosdb-nosql-api/{ => python}/src/static/bootstrap/js/bootstrap.esm.js (100%)
 rename samples/web-app-cosmosdb-nosql-api/{ => python}/src/static/bootstrap/js/bootstrap.esm.js.map (100%)
 rename samples/web-app-cosmosdb-nosql-api/{ => python}/src/static/bootstrap/js/bootstrap.esm.min.js (100%)
 rename samples/web-app-cosmosdb-nosql-api/{ => python}/src/static/bootstrap/js/bootstrap.esm.min.js.map (100%)
 rename samples/web-app-cosmosdb-nosql-api/{ => python}/src/static/bootstrap/js/bootstrap.js (100%)
 rename samples/web-app-cosmosdb-nosql-api/{ => python}/src/static/bootstrap/js/bootstrap.js.map (100%)
 rename samples/web-app-cosmosdb-nosql-api/{ => python}/src/static/bootstrap/js/bootstrap.min.js (100%)
 rename samples/web-app-cosmosdb-nosql-api/{ => python}/src/static/bootstrap/js/bootstrap.min.js.map (100%)
 rename samples/web-app-cosmosdb-nosql-api/{ => python}/src/static/favicon.ico (100%)
 rename samples/web-app-cosmosdb-nosql-api/{ => python}/src/static/style.css (100%)
 rename samples/web-app-cosmosdb-nosql-api/{ => python}/src/templates/index.html (100%)
 rename samples/web-app-file-storage/{ => python}/README.md (96%)
 rename samples/web-app-file-storage/{ => python}/images/architecture.png (100%)
 rename samples/web-app-file-storage/{ => python}/scripts/00-variables.sh (100%)
 rename samples/web-app-file-storage/{ => python}/scripts/01-deploy-resources.sh (100%)
 rename samples/web-app-file-storage/{ => python}/scripts/02-build-docker-image.sh (100%)
 rename samples/web-app-file-storage/{ => python}/scripts/03-run-docker-container.sh (100%)
 rename samples/web-app-file-storage/{ => python}/scripts/04-push-docker-image.sh (100%)
 rename samples/web-app-file-storage/{ => python}/scripts/05-deploy-app.sh (100%)
 rename samples/web-app-file-storage/{ => python}/scripts/Dockerfile (100%)
 rename samples/web-app-file-storage/{ => python}/scripts/configmap.yml (100%)
 rename samples/web-app-file-storage/{ => python}/scripts/deployment.yml (100%)
 rename samples/web-app-file-storage/{ => python}/scripts/namespace.yml (100%)
 rename samples/web-app-file-storage/{ => python}/scripts/persistentvolume-nfs.yml (100%)
 rename samples/web-app-file-storage/{ => python}/scripts/persistentvolume-smb.yml (100%)
 rename samples/web-app-file-storage/{ => python}/scripts/persistentvolumeclaim.yml (100%)
 rename samples/web-app-file-storage/{ => python}/scripts/secret.yml (100%)
 rename samples/web-app-file-storage/{ => python}/scripts/seed-configmap.yml (100%)
 rename samples/web-app-file-storage/{ => python}/scripts/service.yml (100%)
 rename samples/web-app-file-storage/{ => python}/scripts/storage-secret.yml (100%)
 rename samples/web-app-file-storage/{ => python}/scripts/storageclass-nfs.yml (100%)
 rename samples/web-app-file-storage/{ => python}/src/app.py (100%)
 rename samples/web-app-file-storage/{ => python}/src/gunicorn.conf.py (100%)
 rename samples/web-app-file-storage/{ => python}/src/requirements.txt (100%)
 rename samples/web-app-file-storage/{ => python}/src/static/bootstrap/css/bootstrap-grid.css (100%)
 rename samples/web-app-file-storage/{ => python}/src/static/bootstrap/css/bootstrap-grid.css.map (100%)
 rename samples/web-app-file-storage/{ => python}/src/static/bootstrap/css/bootstrap-grid.min.css (100%)
 rename samples/web-app-file-storage/{ => python}/src/static/bootstrap/css/bootstrap-grid.min.css.map (100%)
 rename samples/web-app-file-storage/{ => python}/src/static/bootstrap/css/bootstrap-grid.rtl.css (100%)
 rename samples/web-app-file-storage/{ => python}/src/static/bootstrap/css/bootstrap-grid.rtl.css.map (100%)
 rename samples/web-app-file-storage/{ => python}/src/static/bootstrap/css/bootstrap-grid.rtl.min.css (100%)
 rename samples/web-app-file-storage/{ => python}/src/static/bootstrap/css/bootstrap-grid.rtl.min.css.map (100%)
 rename samples/web-app-file-storage/{ => python}/src/static/bootstrap/css/bootstrap-reboot.css (100%)
 rename samples/web-app-file-storage/{ => python}/src/static/bootstrap/css/bootstrap-reboot.css.map (100%)
 rename samples/web-app-file-storage/{ => python}/src/static/bootstrap/css/bootstrap-reboot.min.css (100%)
 rename samples/web-app-file-storage/{ => python}/src/static/bootstrap/css/bootstrap-reboot.min.css.map (100%)
 rename samples/web-app-file-storage/{ => python}/src/static/bootstrap/css/bootstrap-reboot.rtl.css (100%)
 rename samples/web-app-file-storage/{ => python}/src/static/bootstrap/css/bootstrap-reboot.rtl.css.map (100%)
 rename samples/web-app-file-storage/{ => python}/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css (100%)
 rename samples/web-app-file-storage/{ => python}/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css.map (100%)
 rename samples/web-app-file-storage/{ => python}/src/static/bootstrap/css/bootstrap-utilities.css (100%)
 rename samples/web-app-file-storage/{ => python}/src/static/bootstrap/css/bootstrap-utilities.css.map (100%)
 rename samples/web-app-file-storage/{ => python}/src/static/bootstrap/css/bootstrap-utilities.min.css (100%)
 rename samples/web-app-file-storage/{ => python}/src/static/bootstrap/css/bootstrap-utilities.min.css.map (100%)
 rename samples/web-app-file-storage/{ => python}/src/static/bootstrap/css/bootstrap-utilities.rtl.css (100%)
 rename samples/web-app-file-storage/{ => python}/src/static/bootstrap/css/bootstrap-utilities.rtl.css.map (100%)
 rename samples/web-app-file-storage/{ => python}/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css (100%)
 rename samples/web-app-file-storage/{ => python}/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css.map (100%)
 rename samples/web-app-file-storage/{ => python}/src/static/bootstrap/css/bootstrap.css (100%)
 rename samples/web-app-file-storage/{ => python}/src/static/bootstrap/css/bootstrap.css.map (100%)
 rename samples/web-app-file-storage/{ => python}/src/static/bootstrap/css/bootstrap.min.css (100%)
 rename samples/web-app-file-storage/{ => python}/src/static/bootstrap/css/bootstrap.min.css.map (100%)
 rename samples/web-app-file-storage/{ => python}/src/static/bootstrap/css/bootstrap.rtl.css (100%)
 rename samples/web-app-file-storage/{ => python}/src/static/bootstrap/css/bootstrap.rtl.css.map (100%)
 rename samples/web-app-file-storage/{ => python}/src/static/bootstrap/css/bootstrap.rtl.min.css (100%)
 rename samples/web-app-file-storage/{ => python}/src/static/bootstrap/css/bootstrap.rtl.min.css.map (100%)
 rename samples/web-app-file-storage/{ => python}/src/static/bootstrap/js/bootstrap.bundle.js (100%)
 rename samples/web-app-file-storage/{ => python}/src/static/bootstrap/js/bootstrap.bundle.js.map (100%)
 rename samples/web-app-file-storage/{ => python}/src/static/bootstrap/js/bootstrap.bundle.min.js (100%)
 rename samples/web-app-file-storage/{ => python}/src/static/bootstrap/js/bootstrap.bundle.min.js.map (100%)
 rename samples/web-app-file-storage/{ => python}/src/static/bootstrap/js/bootstrap.esm.js (100%)
 rename samples/web-app-file-storage/{ => python}/src/static/bootstrap/js/bootstrap.esm.js.map (100%)
 rename samples/web-app-file-storage/{ => python}/src/static/bootstrap/js/bootstrap.esm.min.js (100%)
 rename samples/web-app-file-storage/{ => python}/src/static/bootstrap/js/bootstrap.esm.min.js.map (100%)
 rename samples/web-app-file-storage/{ => python}/src/static/bootstrap/js/bootstrap.js (100%)
 rename samples/web-app-file-storage/{ => python}/src/static/bootstrap/js/bootstrap.js.map (100%)
 rename samples/web-app-file-storage/{ => python}/src/static/bootstrap/js/bootstrap.min.js (100%)
 rename samples/web-app-file-storage/{ => python}/src/static/bootstrap/js/bootstrap.min.js.map (100%)
 rename samples/web-app-file-storage/{ => python}/src/static/favicon.ico (100%)
 rename samples/web-app-file-storage/{ => python}/src/static/style.css (100%)
 rename samples/web-app-file-storage/{ => python}/src/templates/index.html (100%)
 rename samples/web-app-in-cluster-postgresql/{ => python}/README.md (91%)
 rename samples/web-app-in-cluster-postgresql/{ => python}/images/architecture.png (100%)
 rename samples/web-app-in-cluster-postgresql/{ => python}/scripts/00-variables.sh (100%)
 rename samples/web-app-in-cluster-postgresql/{ => python}/scripts/01-deploy-resources.sh (100%)
 rename samples/web-app-in-cluster-postgresql/{ => python}/scripts/02-build-docker-image.sh (100%)
 rename samples/web-app-in-cluster-postgresql/{ => python}/scripts/03-run-docker-container.sh (100%)
 rename samples/web-app-in-cluster-postgresql/{ => python}/scripts/04-push-docker-image.sh (100%)
 rename samples/web-app-in-cluster-postgresql/{ => python}/scripts/05-deploy-app.sh (100%)
 rename samples/web-app-in-cluster-postgresql/{ => python}/scripts/Dockerfile (100%)
 rename samples/web-app-in-cluster-postgresql/{ => python}/scripts/configmap.yml (100%)
 rename samples/web-app-in-cluster-postgresql/{ => python}/scripts/deployment.yml (100%)
 rename samples/web-app-in-cluster-postgresql/{ => python}/scripts/namespace.yml (100%)
 rename samples/web-app-in-cluster-postgresql/{ => python}/scripts/secret.yml (100%)
 rename samples/web-app-in-cluster-postgresql/{ => python}/scripts/service.yml (100%)
 rename samples/web-app-in-cluster-postgresql/{ => python}/scripts/statefulset.yml (100%)
 rename samples/web-app-in-cluster-postgresql/{ => python}/src/app.py (100%)
 rename samples/web-app-in-cluster-postgresql/{ => python}/src/database.py (100%)
 rename samples/web-app-in-cluster-postgresql/{ => python}/src/gunicorn.conf.py (100%)
 rename samples/web-app-in-cluster-postgresql/{ => python}/src/requirements.txt (100%)
 rename samples/web-app-in-cluster-postgresql/{ => python}/src/static/bootstrap/css/bootstrap-grid.css (100%)
 rename samples/web-app-in-cluster-postgresql/{ => python}/src/static/bootstrap/css/bootstrap-grid.css.map (100%)
 rename samples/web-app-in-cluster-postgresql/{ => python}/src/static/bootstrap/css/bootstrap-grid.min.css (100%)
 rename samples/web-app-in-cluster-postgresql/{ => python}/src/static/bootstrap/css/bootstrap-grid.min.css.map (100%)
 rename samples/web-app-in-cluster-postgresql/{ => python}/src/static/bootstrap/css/bootstrap-grid.rtl.css (100%)
 rename samples/web-app-in-cluster-postgresql/{ => python}/src/static/bootstrap/css/bootstrap-grid.rtl.css.map (100%)
 rename samples/web-app-in-cluster-postgresql/{ => python}/src/static/bootstrap/css/bootstrap-grid.rtl.min.css (100%)
 rename samples/web-app-in-cluster-postgresql/{ => python}/src/static/bootstrap/css/bootstrap-grid.rtl.min.css.map (100%)
 rename samples/web-app-in-cluster-postgresql/{ => python}/src/static/bootstrap/css/bootstrap-reboot.css (100%)
 rename samples/web-app-in-cluster-postgresql/{ => python}/src/static/bootstrap/css/bootstrap-reboot.css.map (100%)
 rename samples/web-app-in-cluster-postgresql/{ => python}/src/static/bootstrap/css/bootstrap-reboot.min.css (100%)
 rename samples/web-app-in-cluster-postgresql/{ => python}/src/static/bootstrap/css/bootstrap-reboot.min.css.map (100%)
 rename samples/web-app-in-cluster-postgresql/{ => python}/src/static/bootstrap/css/bootstrap-reboot.rtl.css (100%)
 rename samples/web-app-in-cluster-postgresql/{ => python}/src/static/bootstrap/css/bootstrap-reboot.rtl.css.map (100%)
 rename samples/web-app-in-cluster-postgresql/{ => python}/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css (100%)
 rename samples/web-app-in-cluster-postgresql/{ => python}/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css.map (100%)
 rename samples/web-app-in-cluster-postgresql/{ => python}/src/static/bootstrap/css/bootstrap-utilities.css (100%)
 rename samples/web-app-in-cluster-postgresql/{ => python}/src/static/bootstrap/css/bootstrap-utilities.css.map (100%)
 rename samples/web-app-in-cluster-postgresql/{ => python}/src/static/bootstrap/css/bootstrap-utilities.min.css (100%)
 rename samples/web-app-in-cluster-postgresql/{ => python}/src/static/bootstrap/css/bootstrap-utilities.min.css.map (100%)
 rename samples/web-app-in-cluster-postgresql/{ => python}/src/static/bootstrap/css/bootstrap-utilities.rtl.css (100%)
 rename samples/web-app-in-cluster-postgresql/{ => python}/src/static/bootstrap/css/bootstrap-utilities.rtl.css.map (100%)
 rename samples/web-app-in-cluster-postgresql/{ => python}/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css (100%)
 rename samples/web-app-in-cluster-postgresql/{ => python}/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css.map (100%)
 rename samples/web-app-in-cluster-postgresql/{ => python}/src/static/bootstrap/css/bootstrap.css (100%)
 rename samples/web-app-in-cluster-postgresql/{ => python}/src/static/bootstrap/css/bootstrap.css.map (100%)
 rename samples/web-app-in-cluster-postgresql/{ => python}/src/static/bootstrap/css/bootstrap.min.css (100%)
 rename samples/web-app-in-cluster-postgresql/{ => python}/src/static/bootstrap/css/bootstrap.min.css.map (100%)
 rename samples/web-app-in-cluster-postgresql/{ => python}/src/static/bootstrap/css/bootstrap.rtl.css (100%)
 rename samples/web-app-in-cluster-postgresql/{ => python}/src/static/bootstrap/css/bootstrap.rtl.css.map (100%)
 rename samples/web-app-in-cluster-postgresql/{ => python}/src/static/bootstrap/css/bootstrap.rtl.min.css (100%)
 rename samples/web-app-in-cluster-postgresql/{ => python}/src/static/bootstrap/css/bootstrap.rtl.min.css.map (100%)
 rename samples/web-app-in-cluster-postgresql/{ => python}/src/static/bootstrap/js/bootstrap.bundle.js (100%)
 rename samples/web-app-in-cluster-postgresql/{ => python}/src/static/bootstrap/js/bootstrap.bundle.js.map (100%)
 rename samples/web-app-in-cluster-postgresql/{ => python}/src/static/bootstrap/js/bootstrap.bundle.min.js (100%)
 rename samples/web-app-in-cluster-postgresql/{ => python}/src/static/bootstrap/js/bootstrap.bundle.min.js.map (100%)
 rename samples/web-app-in-cluster-postgresql/{ => python}/src/static/bootstrap/js/bootstrap.esm.js (100%)
 rename samples/web-app-in-cluster-postgresql/{ => python}/src/static/bootstrap/js/bootstrap.esm.js.map (100%)
 rename samples/web-app-in-cluster-postgresql/{ => python}/src/static/bootstrap/js/bootstrap.esm.min.js (100%)
 rename samples/web-app-in-cluster-postgresql/{ => python}/src/static/bootstrap/js/bootstrap.esm.min.js.map (100%)
 rename samples/web-app-in-cluster-postgresql/{ => python}/src/static/bootstrap/js/bootstrap.js (100%)
 rename samples/web-app-in-cluster-postgresql/{ => python}/src/static/bootstrap/js/bootstrap.js.map (100%)
 rename samples/web-app-in-cluster-postgresql/{ => python}/src/static/bootstrap/js/bootstrap.min.js (100%)
 rename samples/web-app-in-cluster-postgresql/{ => python}/src/static/bootstrap/js/bootstrap.min.js.map (100%)
 rename samples/web-app-in-cluster-postgresql/{ => python}/src/static/favicon.ico (100%)
 rename samples/web-app-in-cluster-postgresql/{ => python}/src/static/style.css (100%)
 rename samples/web-app-in-cluster-postgresql/{ => python}/src/templates/index.html (100%)
 rename samples/web-app-managed-identity/{ => python}/README.md (83%)
 rename samples/web-app-managed-identity/{ => python}/images/architecture.png (100%)
 rename samples/web-app-managed-identity/{ => python}/scripts/00-variables.sh (100%)
 rename samples/web-app-managed-identity/{ => python}/scripts/01-deploy-resources.sh (100%)
 rename samples/web-app-managed-identity/{ => python}/scripts/02-build-docker-image.sh (100%)
 rename samples/web-app-managed-identity/{ => python}/scripts/03-run-docker-container.sh (100%)
 rename samples/web-app-managed-identity/{ => python}/scripts/04-push-docker-image.sh (100%)
 rename samples/web-app-managed-identity/{ => python}/scripts/05-deploy-app.sh (100%)
 rename samples/web-app-managed-identity/{ => python}/scripts/Dockerfile (100%)
 rename samples/web-app-managed-identity/{ => python}/scripts/configmap.yml (100%)
 rename samples/web-app-managed-identity/{ => python}/scripts/deployment.yml (100%)
 rename samples/web-app-managed-identity/{ => python}/scripts/gateway.yml (100%)
 rename samples/web-app-managed-identity/{ => python}/scripts/httproute.yml (100%)
 rename samples/web-app-managed-identity/{ => python}/scripts/issuer.yml (100%)
 rename samples/web-app-managed-identity/{ => python}/scripts/namespace.yml (100%)
 rename samples/web-app-managed-identity/{ => python}/scripts/secret.yml (100%)
 rename samples/web-app-managed-identity/{ => python}/scripts/service.yml (100%)
 rename samples/web-app-managed-identity/{ => python}/src/app.py (100%)
 rename samples/web-app-managed-identity/{ => python}/src/gunicorn.conf.py (100%)
 rename samples/web-app-managed-identity/{ => python}/src/requirements.txt (100%)
 rename samples/web-app-managed-identity/{ => python}/src/static/bootstrap/css/bootstrap-grid.css (100%)
 rename samples/web-app-managed-identity/{ => python}/src/static/bootstrap/css/bootstrap-grid.css.map (100%)
 rename samples/web-app-managed-identity/{ => python}/src/static/bootstrap/css/bootstrap-grid.min.css (100%)
 rename samples/web-app-managed-identity/{ => python}/src/static/bootstrap/css/bootstrap-grid.min.css.map (100%)
 rename samples/web-app-managed-identity/{ => python}/src/static/bootstrap/css/bootstrap-grid.rtl.css (100%)
 rename samples/web-app-managed-identity/{ => python}/src/static/bootstrap/css/bootstrap-grid.rtl.css.map (100%)
 rename samples/web-app-managed-identity/{ => python}/src/static/bootstrap/css/bootstrap-grid.rtl.min.css (100%)
 rename samples/web-app-managed-identity/{ => python}/src/static/bootstrap/css/bootstrap-grid.rtl.min.css.map (100%)
 rename samples/web-app-managed-identity/{ => python}/src/static/bootstrap/css/bootstrap-reboot.css (100%)
 rename samples/web-app-managed-identity/{ => python}/src/static/bootstrap/css/bootstrap-reboot.css.map (100%)
 rename samples/web-app-managed-identity/{ => python}/src/static/bootstrap/css/bootstrap-reboot.min.css (100%)
 rename samples/web-app-managed-identity/{ => python}/src/static/bootstrap/css/bootstrap-reboot.min.css.map (100%)
 rename samples/web-app-managed-identity/{ => python}/src/static/bootstrap/css/bootstrap-reboot.rtl.css (100%)
 rename samples/web-app-managed-identity/{ => python}/src/static/bootstrap/css/bootstrap-reboot.rtl.css.map (100%)
 rename samples/web-app-managed-identity/{ => python}/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css (100%)
 rename samples/web-app-managed-identity/{ => python}/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css.map (100%)
 rename samples/web-app-managed-identity/{ => python}/src/static/bootstrap/css/bootstrap-utilities.css (100%)
 rename samples/web-app-managed-identity/{ => python}/src/static/bootstrap/css/bootstrap-utilities.css.map (100%)
 rename samples/web-app-managed-identity/{ => python}/src/static/bootstrap/css/bootstrap-utilities.min.css (100%)
 rename samples/web-app-managed-identity/{ => python}/src/static/bootstrap/css/bootstrap-utilities.min.css.map (100%)
 rename samples/web-app-managed-identity/{ => python}/src/static/bootstrap/css/bootstrap-utilities.rtl.css (100%)
 rename samples/web-app-managed-identity/{ => python}/src/static/bootstrap/css/bootstrap-utilities.rtl.css.map (100%)
 rename samples/web-app-managed-identity/{ => python}/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css (100%)
 rename samples/web-app-managed-identity/{ => python}/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css.map (100%)
 rename samples/web-app-managed-identity/{ => python}/src/static/bootstrap/css/bootstrap.css (100%)
 rename samples/web-app-managed-identity/{ => python}/src/static/bootstrap/css/bootstrap.css.map (100%)
 rename samples/web-app-managed-identity/{ => python}/src/static/bootstrap/css/bootstrap.min.css (100%)
 rename samples/web-app-managed-identity/{ => python}/src/static/bootstrap/css/bootstrap.min.css.map (100%)
 rename samples/web-app-managed-identity/{ => python}/src/static/bootstrap/css/bootstrap.rtl.css (100%)
 rename samples/web-app-managed-identity/{ => python}/src/static/bootstrap/css/bootstrap.rtl.css.map (100%)
 rename samples/web-app-managed-identity/{ => python}/src/static/bootstrap/css/bootstrap.rtl.min.css (100%)
 rename samples/web-app-managed-identity/{ => python}/src/static/bootstrap/css/bootstrap.rtl.min.css.map (100%)
 rename samples/web-app-managed-identity/{ => python}/src/static/bootstrap/js/bootstrap.bundle.js (100%)
 rename samples/web-app-managed-identity/{ => python}/src/static/bootstrap/js/bootstrap.bundle.js.map (100%)
 rename samples/web-app-managed-identity/{ => python}/src/static/bootstrap/js/bootstrap.bundle.min.js (100%)
 rename samples/web-app-managed-identity/{ => python}/src/static/bootstrap/js/bootstrap.bundle.min.js.map (100%)
 rename samples/web-app-managed-identity/{ => python}/src/static/bootstrap/js/bootstrap.esm.js (100%)
 rename samples/web-app-managed-identity/{ => python}/src/static/bootstrap/js/bootstrap.esm.js.map (100%)
 rename samples/web-app-managed-identity/{ => python}/src/static/bootstrap/js/bootstrap.esm.min.js (100%)
 rename samples/web-app-managed-identity/{ => python}/src/static/bootstrap/js/bootstrap.esm.min.js.map (100%)
 rename samples/web-app-managed-identity/{ => python}/src/static/bootstrap/js/bootstrap.js (100%)
 rename samples/web-app-managed-identity/{ => python}/src/static/bootstrap/js/bootstrap.js.map (100%)
 rename samples/web-app-managed-identity/{ => python}/src/static/bootstrap/js/bootstrap.min.js (100%)
 rename samples/web-app-managed-identity/{ => python}/src/static/bootstrap/js/bootstrap.min.js.map (100%)
 rename samples/web-app-managed-identity/{ => python}/src/static/favicon.ico (100%)
 rename samples/web-app-managed-identity/{ => python}/src/static/style.css (100%)
 rename samples/web-app-managed-identity/{ => python}/src/templates/index.html (100%)
 rename samples/web-app-mysql-flexible-server/{ => python}/README.md (89%)
 rename samples/web-app-mysql-flexible-server/{ => python}/images/architecture.png (100%)
 rename samples/web-app-mysql-flexible-server/{ => python}/scripts/00-variables.sh (100%)
 rename samples/web-app-mysql-flexible-server/{ => python}/scripts/01-deploy-resources.sh (100%)
 rename samples/web-app-mysql-flexible-server/{ => python}/scripts/02-build-docker-image.sh (100%)
 rename samples/web-app-mysql-flexible-server/{ => python}/scripts/03-run-docker-container.sh (100%)
 rename samples/web-app-mysql-flexible-server/{ => python}/scripts/04-push-docker-image.sh (100%)
 rename samples/web-app-mysql-flexible-server/{ => python}/scripts/05-deploy-app.sh (100%)
 rename samples/web-app-mysql-flexible-server/{ => python}/scripts/Dockerfile (100%)
 rename samples/web-app-mysql-flexible-server/{ => python}/scripts/configmap.yml (100%)
 rename samples/web-app-mysql-flexible-server/{ => python}/scripts/deployment.yml (100%)
 rename samples/web-app-mysql-flexible-server/{ => python}/scripts/namespace.yml (100%)
 rename samples/web-app-mysql-flexible-server/{ => python}/scripts/secret.yml (100%)
 rename samples/web-app-mysql-flexible-server/{ => python}/scripts/service.yml (100%)
 rename samples/web-app-mysql-flexible-server/{ => python}/src/app.py (100%)
 rename samples/web-app-mysql-flexible-server/{ => python}/src/database.py (100%)
 rename samples/web-app-mysql-flexible-server/{ => python}/src/gunicorn.conf.py (100%)
 rename samples/web-app-mysql-flexible-server/{ => python}/src/requirements.txt (100%)
 rename samples/web-app-mysql-flexible-server/{ => python}/src/static/bootstrap/css/bootstrap-grid.css (100%)
 rename samples/web-app-mysql-flexible-server/{ => python}/src/static/bootstrap/css/bootstrap-grid.css.map (100%)
 rename samples/web-app-mysql-flexible-server/{ => python}/src/static/bootstrap/css/bootstrap-grid.min.css (100%)
 rename samples/web-app-mysql-flexible-server/{ => python}/src/static/bootstrap/css/bootstrap-grid.min.css.map (100%)
 rename samples/web-app-mysql-flexible-server/{ => python}/src/static/bootstrap/css/bootstrap-grid.rtl.css (100%)
 rename samples/web-app-mysql-flexible-server/{ => python}/src/static/bootstrap/css/bootstrap-grid.rtl.css.map (100%)
 rename samples/web-app-mysql-flexible-server/{ => python}/src/static/bootstrap/css/bootstrap-grid.rtl.min.css (100%)
 rename samples/web-app-mysql-flexible-server/{ => python}/src/static/bootstrap/css/bootstrap-grid.rtl.min.css.map (100%)
 rename samples/web-app-mysql-flexible-server/{ => python}/src/static/bootstrap/css/bootstrap-reboot.css (100%)
 rename samples/web-app-mysql-flexible-server/{ => python}/src/static/bootstrap/css/bootstrap-reboot.css.map (100%)
 rename samples/web-app-mysql-flexible-server/{ => python}/src/static/bootstrap/css/bootstrap-reboot.min.css (100%)
 rename samples/web-app-mysql-flexible-server/{ => python}/src/static/bootstrap/css/bootstrap-reboot.min.css.map (100%)
 rename samples/web-app-mysql-flexible-server/{ => python}/src/static/bootstrap/css/bootstrap-reboot.rtl.css (100%)
 rename samples/web-app-mysql-flexible-server/{ => python}/src/static/bootstrap/css/bootstrap-reboot.rtl.css.map (100%)
 rename samples/web-app-mysql-flexible-server/{ => python}/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css (100%)
 rename samples/web-app-mysql-flexible-server/{ => python}/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css.map (100%)
 rename samples/web-app-mysql-flexible-server/{ => python}/src/static/bootstrap/css/bootstrap-utilities.css (100%)
 rename samples/web-app-mysql-flexible-server/{ => python}/src/static/bootstrap/css/bootstrap-utilities.css.map (100%)
 rename samples/web-app-mysql-flexible-server/{ => python}/src/static/bootstrap/css/bootstrap-utilities.min.css (100%)
 rename samples/web-app-mysql-flexible-server/{ => python}/src/static/bootstrap/css/bootstrap-utilities.min.css.map (100%)
 rename samples/web-app-mysql-flexible-server/{ => python}/src/static/bootstrap/css/bootstrap-utilities.rtl.css (100%)
 rename samples/web-app-mysql-flexible-server/{ => python}/src/static/bootstrap/css/bootstrap-utilities.rtl.css.map (100%)
 rename samples/web-app-mysql-flexible-server/{ => python}/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css (100%)
 rename samples/web-app-mysql-flexible-server/{ => python}/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css.map (100%)
 rename samples/web-app-mysql-flexible-server/{ => python}/src/static/bootstrap/css/bootstrap.css (100%)
 rename samples/web-app-mysql-flexible-server/{ => python}/src/static/bootstrap/css/bootstrap.css.map (100%)
 rename samples/web-app-mysql-flexible-server/{ => python}/src/static/bootstrap/css/bootstrap.min.css (100%)
 rename samples/web-app-mysql-flexible-server/{ => python}/src/static/bootstrap/css/bootstrap.min.css.map (100%)
 rename samples/web-app-mysql-flexible-server/{ => python}/src/static/bootstrap/css/bootstrap.rtl.css (100%)
 rename samples/web-app-mysql-flexible-server/{ => python}/src/static/bootstrap/css/bootstrap.rtl.css.map (100%)
 rename samples/web-app-mysql-flexible-server/{ => python}/src/static/bootstrap/css/bootstrap.rtl.min.css (100%)
 rename samples/web-app-mysql-flexible-server/{ => python}/src/static/bootstrap/css/bootstrap.rtl.min.css.map (100%)
 rename samples/web-app-mysql-flexible-server/{ => python}/src/static/bootstrap/js/bootstrap.bundle.js (100%)
 rename samples/web-app-mysql-flexible-server/{ => python}/src/static/bootstrap/js/bootstrap.bundle.js.map (100%)
 rename samples/web-app-mysql-flexible-server/{ => python}/src/static/bootstrap/js/bootstrap.bundle.min.js (100%)
 rename samples/web-app-mysql-flexible-server/{ => python}/src/static/bootstrap/js/bootstrap.bundle.min.js.map (100%)
 rename samples/web-app-mysql-flexible-server/{ => python}/src/static/bootstrap/js/bootstrap.esm.js (100%)
 rename samples/web-app-mysql-flexible-server/{ => python}/src/static/bootstrap/js/bootstrap.esm.js.map (100%)
 rename samples/web-app-mysql-flexible-server/{ => python}/src/static/bootstrap/js/bootstrap.esm.min.js (100%)
 rename samples/web-app-mysql-flexible-server/{ => python}/src/static/bootstrap/js/bootstrap.esm.min.js.map (100%)
 rename samples/web-app-mysql-flexible-server/{ => python}/src/static/bootstrap/js/bootstrap.js (100%)
 rename samples/web-app-mysql-flexible-server/{ => python}/src/static/bootstrap/js/bootstrap.js.map (100%)
 rename samples/web-app-mysql-flexible-server/{ => python}/src/static/bootstrap/js/bootstrap.min.js (100%)
 rename samples/web-app-mysql-flexible-server/{ => python}/src/static/bootstrap/js/bootstrap.min.js.map (100%)
 rename samples/web-app-mysql-flexible-server/{ => python}/src/static/favicon.ico (100%)
 rename samples/web-app-mysql-flexible-server/{ => python}/src/static/style.css (100%)
 rename samples/web-app-mysql-flexible-server/{ => python}/src/templates/index.html (100%)
 rename samples/web-app-postgresql-flexible-server/{ => python}/README.md (88%)
 rename samples/web-app-postgresql-flexible-server/{ => python}/images/architecture.png (100%)
 rename samples/web-app-postgresql-flexible-server/{ => python}/scripts/00-variables.sh (100%)
 rename samples/web-app-postgresql-flexible-server/{ => python}/scripts/01-deploy-resources.sh (100%)
 rename samples/web-app-postgresql-flexible-server/{ => python}/scripts/02-build-docker-image.sh (100%)
 rename samples/web-app-postgresql-flexible-server/{ => python}/scripts/03-run-docker-container.sh (100%)
 rename samples/web-app-postgresql-flexible-server/{ => python}/scripts/04-push-docker-image.sh (100%)
 rename samples/web-app-postgresql-flexible-server/{ => python}/scripts/05-deploy-app.sh (100%)
 rename samples/web-app-postgresql-flexible-server/{ => python}/scripts/Dockerfile (100%)
 rename samples/web-app-postgresql-flexible-server/{ => python}/scripts/configmap.yml (100%)
 rename samples/web-app-postgresql-flexible-server/{ => python}/scripts/deployment.yml (100%)
 rename samples/web-app-postgresql-flexible-server/{ => python}/scripts/namespace.yml (100%)
 rename samples/web-app-postgresql-flexible-server/{ => python}/scripts/secret.yml (100%)
 rename samples/web-app-postgresql-flexible-server/{ => python}/scripts/service.yml (100%)
 rename samples/web-app-postgresql-flexible-server/{ => python}/src/app.py (100%)
 rename samples/web-app-postgresql-flexible-server/{ => python}/src/database.py (100%)
 rename samples/web-app-postgresql-flexible-server/{ => python}/src/gunicorn.conf.py (100%)
 rename samples/web-app-postgresql-flexible-server/{ => python}/src/requirements.txt (100%)
 rename samples/web-app-postgresql-flexible-server/{ => python}/src/static/bootstrap/css/bootstrap-grid.css (100%)
 rename samples/web-app-postgresql-flexible-server/{ => python}/src/static/bootstrap/css/bootstrap-grid.css.map (100%)
 rename samples/web-app-postgresql-flexible-server/{ => python}/src/static/bootstrap/css/bootstrap-grid.min.css (100%)
 rename samples/web-app-postgresql-flexible-server/{ => python}/src/static/bootstrap/css/bootstrap-grid.min.css.map (100%)
 rename samples/web-app-postgresql-flexible-server/{ => python}/src/static/bootstrap/css/bootstrap-grid.rtl.css (100%)
 rename samples/web-app-postgresql-flexible-server/{ => python}/src/static/bootstrap/css/bootstrap-grid.rtl.css.map (100%)
 rename samples/web-app-postgresql-flexible-server/{ => python}/src/static/bootstrap/css/bootstrap-grid.rtl.min.css (100%)
 rename samples/web-app-postgresql-flexible-server/{ => python}/src/static/bootstrap/css/bootstrap-grid.rtl.min.css.map (100%)
 rename samples/web-app-postgresql-flexible-server/{ => python}/src/static/bootstrap/css/bootstrap-reboot.css (100%)
 rename samples/web-app-postgresql-flexible-server/{ => python}/src/static/bootstrap/css/bootstrap-reboot.css.map (100%)
 rename samples/web-app-postgresql-flexible-server/{ => python}/src/static/bootstrap/css/bootstrap-reboot.min.css (100%)
 rename samples/web-app-postgresql-flexible-server/{ => python}/src/static/bootstrap/css/bootstrap-reboot.min.css.map (100%)
 rename samples/web-app-postgresql-flexible-server/{ => python}/src/static/bootstrap/css/bootstrap-reboot.rtl.css (100%)
 rename samples/web-app-postgresql-flexible-server/{ => python}/src/static/bootstrap/css/bootstrap-reboot.rtl.css.map (100%)
 rename samples/web-app-postgresql-flexible-server/{ => python}/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css (100%)
 rename samples/web-app-postgresql-flexible-server/{ => python}/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css.map (100%)
 rename samples/web-app-postgresql-flexible-server/{ => python}/src/static/bootstrap/css/bootstrap-utilities.css (100%)
 rename samples/web-app-postgresql-flexible-server/{ => python}/src/static/bootstrap/css/bootstrap-utilities.css.map (100%)
 rename samples/web-app-postgresql-flexible-server/{ => python}/src/static/bootstrap/css/bootstrap-utilities.min.css (100%)
 rename samples/web-app-postgresql-flexible-server/{ => python}/src/static/bootstrap/css/bootstrap-utilities.min.css.map (100%)
 rename samples/web-app-postgresql-flexible-server/{ => python}/src/static/bootstrap/css/bootstrap-utilities.rtl.css (100%)
 rename samples/web-app-postgresql-flexible-server/{ => python}/src/static/bootstrap/css/bootstrap-utilities.rtl.css.map (100%)
 rename samples/web-app-postgresql-flexible-server/{ => python}/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css (100%)
 rename samples/web-app-postgresql-flexible-server/{ => python}/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css.map (100%)
 rename samples/web-app-postgresql-flexible-server/{ => python}/src/static/bootstrap/css/bootstrap.css (100%)
 rename samples/web-app-postgresql-flexible-server/{ => python}/src/static/bootstrap/css/bootstrap.css.map (100%)
 rename samples/web-app-postgresql-flexible-server/{ => python}/src/static/bootstrap/css/bootstrap.min.css (100%)
 rename samples/web-app-postgresql-flexible-server/{ => python}/src/static/bootstrap/css/bootstrap.min.css.map (100%)
 rename samples/web-app-postgresql-flexible-server/{ => python}/src/static/bootstrap/css/bootstrap.rtl.css (100%)
 rename samples/web-app-postgresql-flexible-server/{ => python}/src/static/bootstrap/css/bootstrap.rtl.css.map (100%)
 rename samples/web-app-postgresql-flexible-server/{ => python}/src/static/bootstrap/css/bootstrap.rtl.min.css (100%)
 rename samples/web-app-postgresql-flexible-server/{ => python}/src/static/bootstrap/css/bootstrap.rtl.min.css.map (100%)
 rename samples/web-app-postgresql-flexible-server/{ => python}/src/static/bootstrap/js/bootstrap.bundle.js (100%)
 rename samples/web-app-postgresql-flexible-server/{ => python}/src/static/bootstrap/js/bootstrap.bundle.js.map (100%)
 rename samples/web-app-postgresql-flexible-server/{ => python}/src/static/bootstrap/js/bootstrap.bundle.min.js (100%)
 rename samples/web-app-postgresql-flexible-server/{ => python}/src/static/bootstrap/js/bootstrap.bundle.min.js.map (100%)
 rename samples/web-app-postgresql-flexible-server/{ => python}/src/static/bootstrap/js/bootstrap.esm.js (100%)
 rename samples/web-app-postgresql-flexible-server/{ => python}/src/static/bootstrap/js/bootstrap.esm.js.map (100%)
 rename samples/web-app-postgresql-flexible-server/{ => python}/src/static/bootstrap/js/bootstrap.esm.min.js (100%)
 rename samples/web-app-postgresql-flexible-server/{ => python}/src/static/bootstrap/js/bootstrap.esm.min.js.map (100%)
 rename samples/web-app-postgresql-flexible-server/{ => python}/src/static/bootstrap/js/bootstrap.js (100%)
 rename samples/web-app-postgresql-flexible-server/{ => python}/src/static/bootstrap/js/bootstrap.js.map (100%)
 rename samples/web-app-postgresql-flexible-server/{ => python}/src/static/bootstrap/js/bootstrap.min.js (100%)
 rename samples/web-app-postgresql-flexible-server/{ => python}/src/static/bootstrap/js/bootstrap.min.js.map (100%)
 rename samples/web-app-postgresql-flexible-server/{ => python}/src/static/favicon.ico (100%)
 rename samples/web-app-postgresql-flexible-server/{ => python}/src/static/style.css (100%)
 rename samples/web-app-postgresql-flexible-server/{ => python}/src/templates/index.html (100%)
 rename samples/web-app-sql-database/{ => python}/README.md (88%)
 rename samples/web-app-sql-database/{ => python}/images/architecture.png (100%)
 rename samples/web-app-sql-database/{ => python}/scripts/00-variables.sh (100%)
 rename samples/web-app-sql-database/{ => python}/scripts/01-deploy-resources.sh (100%)
 rename samples/web-app-sql-database/{ => python}/scripts/02-build-docker-image.sh (100%)
 rename samples/web-app-sql-database/{ => python}/scripts/03-run-docker-container.sh (100%)
 rename samples/web-app-sql-database/{ => python}/scripts/04-push-docker-image.sh (100%)
 rename samples/web-app-sql-database/{ => python}/scripts/05-deploy-app.sh (100%)
 rename samples/web-app-sql-database/{ => python}/scripts/Dockerfile (100%)
 rename samples/web-app-sql-database/{ => python}/scripts/configmap.yml (100%)
 rename samples/web-app-sql-database/{ => python}/scripts/deployment.yml (100%)
 rename samples/web-app-sql-database/{ => python}/scripts/namespace.yml (100%)
 rename samples/web-app-sql-database/{ => python}/scripts/secret.yml (100%)
 rename samples/web-app-sql-database/{ => python}/scripts/service.yml (100%)
 rename samples/web-app-sql-database/{ => python}/src/activities.py (100%)
 rename samples/web-app-sql-database/{ => python}/src/app.py (100%)
 rename samples/web-app-sql-database/{ => python}/src/database.py (100%)
 rename samples/web-app-sql-database/{ => python}/src/gunicorn.conf.py (100%)
 rename samples/web-app-sql-database/{ => python}/src/requirements.txt (100%)
 rename samples/web-app-sql-database/{ => python}/src/static/bootstrap/css/bootstrap-grid.css (100%)
 rename samples/web-app-sql-database/{ => python}/src/static/bootstrap/css/bootstrap-grid.css.map (100%)
 rename samples/web-app-sql-database/{ => python}/src/static/bootstrap/css/bootstrap-grid.min.css (100%)
 rename samples/web-app-sql-database/{ => python}/src/static/bootstrap/css/bootstrap-grid.min.css.map (100%)
 rename samples/web-app-sql-database/{ => python}/src/static/bootstrap/css/bootstrap-grid.rtl.css (100%)
 rename samples/web-app-sql-database/{ => python}/src/static/bootstrap/css/bootstrap-grid.rtl.css.map (100%)
 rename samples/web-app-sql-database/{ => python}/src/static/bootstrap/css/bootstrap-grid.rtl.min.css (100%)
 rename samples/web-app-sql-database/{ => python}/src/static/bootstrap/css/bootstrap-grid.rtl.min.css.map (100%)
 rename samples/web-app-sql-database/{ => python}/src/static/bootstrap/css/bootstrap-reboot.css (100%)
 rename samples/web-app-sql-database/{ => python}/src/static/bootstrap/css/bootstrap-reboot.css.map (100%)
 rename samples/web-app-sql-database/{ => python}/src/static/bootstrap/css/bootstrap-reboot.min.css (100%)
 rename samples/web-app-sql-database/{ => python}/src/static/bootstrap/css/bootstrap-reboot.min.css.map (100%)
 rename samples/web-app-sql-database/{ => python}/src/static/bootstrap/css/bootstrap-reboot.rtl.css (100%)
 rename samples/web-app-sql-database/{ => python}/src/static/bootstrap/css/bootstrap-reboot.rtl.css.map (100%)
 rename samples/web-app-sql-database/{ => python}/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css (100%)
 rename samples/web-app-sql-database/{ => python}/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css.map (100%)
 rename samples/web-app-sql-database/{ => python}/src/static/bootstrap/css/bootstrap-utilities.css (100%)
 rename samples/web-app-sql-database/{ => python}/src/static/bootstrap/css/bootstrap-utilities.css.map (100%)
 rename samples/web-app-sql-database/{ => python}/src/static/bootstrap/css/bootstrap-utilities.min.css (100%)
 rename samples/web-app-sql-database/{ => python}/src/static/bootstrap/css/bootstrap-utilities.min.css.map (100%)
 rename samples/web-app-sql-database/{ => python}/src/static/bootstrap/css/bootstrap-utilities.rtl.css (100%)
 rename samples/web-app-sql-database/{ => python}/src/static/bootstrap/css/bootstrap-utilities.rtl.css.map (100%)
 rename samples/web-app-sql-database/{ => python}/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css (100%)
 rename samples/web-app-sql-database/{ => python}/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css.map (100%)
 rename samples/web-app-sql-database/{ => python}/src/static/bootstrap/css/bootstrap.css (100%)
 rename samples/web-app-sql-database/{ => python}/src/static/bootstrap/css/bootstrap.css.map (100%)
 rename samples/web-app-sql-database/{ => python}/src/static/bootstrap/css/bootstrap.min.css (100%)
 rename samples/web-app-sql-database/{ => python}/src/static/bootstrap/css/bootstrap.min.css.map (100%)
 rename samples/web-app-sql-database/{ => python}/src/static/bootstrap/css/bootstrap.rtl.css (100%)
 rename samples/web-app-sql-database/{ => python}/src/static/bootstrap/css/bootstrap.rtl.css.map (100%)
 rename samples/web-app-sql-database/{ => python}/src/static/bootstrap/css/bootstrap.rtl.min.css (100%)
 rename samples/web-app-sql-database/{ => python}/src/static/bootstrap/css/bootstrap.rtl.min.css.map (100%)
 rename samples/web-app-sql-database/{ => python}/src/static/bootstrap/js/bootstrap.bundle.js (100%)
 rename samples/web-app-sql-database/{ => python}/src/static/bootstrap/js/bootstrap.bundle.js.map (100%)
 rename samples/web-app-sql-database/{ => python}/src/static/bootstrap/js/bootstrap.bundle.min.js (100%)
 rename samples/web-app-sql-database/{ => python}/src/static/bootstrap/js/bootstrap.bundle.min.js.map (100%)
 rename samples/web-app-sql-database/{ => python}/src/static/bootstrap/js/bootstrap.esm.js (100%)
 rename samples/web-app-sql-database/{ => python}/src/static/bootstrap/js/bootstrap.esm.js.map (100%)
 rename samples/web-app-sql-database/{ => python}/src/static/bootstrap/js/bootstrap.esm.min.js (100%)
 rename samples/web-app-sql-database/{ => python}/src/static/bootstrap/js/bootstrap.esm.min.js.map (100%)
 rename samples/web-app-sql-database/{ => python}/src/static/bootstrap/js/bootstrap.js (100%)
 rename samples/web-app-sql-database/{ => python}/src/static/bootstrap/js/bootstrap.js.map (100%)
 rename samples/web-app-sql-database/{ => python}/src/static/bootstrap/js/bootstrap.min.js (100%)
 rename samples/web-app-sql-database/{ => python}/src/static/bootstrap/js/bootstrap.min.js.map (100%)
 rename samples/web-app-sql-database/{ => python}/src/static/favicon.ico (100%)
 rename samples/web-app-sql-database/{ => python}/src/static/style.css (100%)
 rename samples/web-app-sql-database/{ => python}/src/templates/index.html (100%)

diff --git a/.gitattributes b/.gitattributes
new file mode 100644
index 0000000..59cadee
--- /dev/null
+++ b/.gitattributes
@@ -0,0 +1,6 @@
+*.sh text eol=lf
+*.yml text eol=lf
+*.cs text eol=lf
+*.csproj text eol=lf
+*.cshtml text eol=lf
+Dockerfile text eol=lf
diff --git a/.gitignore b/.gitignore
index 7a37ee9..fd3780f 100644
--- a/.gitignore
+++ b/.gitignore
@@ -151,7 +151,7 @@ activemq-data/
 .env
 .envrc
 .venv
-# Deployment options generated by samples/web-app-file-storage/scripts/01-deploy-resources.sh
+# Deployment options generated by samples/web-app-file-storage/*/scripts/01-deploy-resources.sh
 .deploy-options.env
 env/
 venv/
@@ -208,6 +208,62 @@ tempCodeRunnerFile.py
 # Ruff stuff:
 .ruff_cache/
 
+## .NET (the samples/web-app-*/dotnet projects), from
+## https://github.com/github/gitignore/blob/main/Dotnet.gitignore
+
+# Build results
+[Dd]ebug/
+[Dd]ebugPublic/
+[Rr]elease/
+[Rr]eleases/
+x64/
+x86/
+[Ww][Ii][Nn]32/
+[Aa][Rr][Mm]/
+[Aa][Rr][Mm]64/
+bld/
+[Bb]in/
+[Oo]bj/
+[Ll]og/
+[Ll]ogs/
+publish/
+
+# .NET Core
+project.lock.json
+project.fragment.lock.json
+artifacts/
+
+# ASP.NET Scaffolding
+ScaffoldingReadMe.txt
+
+# NuGet Packages
+*.nupkg
+# NuGet Symbol Packages
+*.snupkg
+
+# Others
+~$*
+*~
+CodeCoverage/
+
+# MSBuild Binary and Structured Log
+*.binlog
+
+# MSTest test Results
+[Tt]est[Rr]esult*/
+[Bb]uild[Ll]og.*
+
+# NUnit
+*.VisualState.xml
+TestResult.xml
+nunit-*.xml
+
+# Files that sample scripts or ad-hoc local runs drop into a scripts/ folder:
+# the LocalStack CA written by web-app-cosmosdb-nosql-api/*/scripts/03-run-docker-container.sh
+# and activity files written by a Vacation Planner run pointed at the scripts folder.
+samples/**/scripts/.localstack-ca.crt
+samples/**/scripts/*-activity.txt
+
 # PyPI configuration file
 .pypirc
 
diff --git a/README.md b/README.md
index 09adbf3..2db3130 100644
--- a/README.md
+++ b/README.md
@@ -102,15 +102,15 @@ To run any sample you must first create the AKS cluster with one of the two scri
 
 | Sample | Description |
 | ------ | ----------- |
-| [web-app-sql-database](samples/web-app-sql-database/) | Stores activities in an [Azure SQL Database](https://learn.microsoft.com/en-us/azure/azure-sql/database/sql-database-paas-overview), connecting with a SQL login over TDS. |
-| [web-app-mysql-flexible-server](samples/web-app-mysql-flexible-server/) | Stores activities in an [Azure Database for MySQL flexible server](https://learn.microsoft.com/en-us/azure/mysql/flexible-server/overview). |
-| [web-app-postgresql-flexible-server](samples/web-app-postgresql-flexible-server/) | Stores activities in an [Azure Database for PostgreSQL flexible server](https://learn.microsoft.com/en-us/azure/postgresql/flexible-server/overview). |
-| [web-app-in-cluster-postgresql](samples/web-app-in-cluster-postgresql/) | Stores activities in an in-cluster [PostgreSQL](https://www.postgresql.org/) database deployed as a Kubernetes [StatefulSet](https://kubernetes.io/docs/concepts/workloads/controllers/statefulset/) (a primary with two streaming-replica standbys), instead of a managed Azure data service. |
-| [web-app-cosmosdb-mongodb-api](samples/web-app-cosmosdb-mongodb-api/) | Stores activities in a collection of an [Azure Cosmos DB for MongoDB](https://learn.microsoft.com/en-us/azure/cosmos-db/mongodb/introduction) account. |
-| [web-app-cosmosdb-nosql-api](samples/web-app-cosmosdb-nosql-api/) | Stores activities in a container of an [Azure Cosmos DB for NoSQL](https://learn.microsoft.com/en-us/azure/cosmos-db/nosql/) account. |
-| [web-app-blob-storage](samples/web-app-blob-storage/) | Stores activities in an [Azure Blob Storage](https://learn.microsoft.com/en-us/azure/storage/blobs/storage-blobs-introduction) container, using a connection string. |
-| [web-app-file-storage](samples/web-app-file-storage/) | Stores activities as text files on an [Azure Files](https://learn.microsoft.com/en-us/azure/storage/files/storage-files-introduction) share mounted into the pods by the [Azure Files CSI driver](https://learn.microsoft.com/en-us/azure/aks/azure-files-csi), over either SMB or NFS, with either a pre-created share or one provisioned on demand. The only sample whose app uses no Azure SDK at all. |
-| [web-app-managed-identity](samples/web-app-managed-identity/) | Stores activities in an Azure Blob Storage container, authenticating with [Microsoft Entra Workload ID](https://learn.microsoft.com/en-us/azure/aks/workload-identity-overview) (federated credential plus workload identity) instead of a secret, and optionally exposes the app through the Gateway API with a managed TLS certificate. |
+| [web-app-sql-database](samples/web-app-sql-database/python/README.md) | Stores activities in an [Azure SQL Database](https://learn.microsoft.com/en-us/azure/azure-sql/database/sql-database-paas-overview), connecting with a SQL login over TDS. |
+| [web-app-mysql-flexible-server](samples/web-app-mysql-flexible-server/python/README.md) | Stores activities in an [Azure Database for MySQL flexible server](https://learn.microsoft.com/en-us/azure/mysql/flexible-server/overview). |
+| [web-app-postgresql-flexible-server](samples/web-app-postgresql-flexible-server/python/README.md) | Stores activities in an [Azure Database for PostgreSQL flexible server](https://learn.microsoft.com/en-us/azure/postgresql/flexible-server/overview). |
+| [web-app-in-cluster-postgresql](samples/web-app-in-cluster-postgresql/python/README.md) | Stores activities in an in-cluster [PostgreSQL](https://www.postgresql.org/) database deployed as a Kubernetes [StatefulSet](https://kubernetes.io/docs/concepts/workloads/controllers/statefulset/) (a primary with two streaming-replica standbys), instead of a managed Azure data service. |
+| [web-app-cosmosdb-mongodb-api](samples/web-app-cosmosdb-mongodb-api/python/README.md) | Stores activities in a collection of an [Azure Cosmos DB for MongoDB](https://learn.microsoft.com/en-us/azure/cosmos-db/mongodb/introduction) account. |
+| [web-app-cosmosdb-nosql-api](samples/web-app-cosmosdb-nosql-api/python/README.md) | Stores activities in a container of an [Azure Cosmos DB for NoSQL](https://learn.microsoft.com/en-us/azure/cosmos-db/nosql/) account. |
+| [web-app-blob-storage](samples/web-app-blob-storage/python/README.md) | Stores activities in an [Azure Blob Storage](https://learn.microsoft.com/en-us/azure/storage/blobs/storage-blobs-introduction) container, using a connection string. |
+| [web-app-file-storage](samples/web-app-file-storage/python/README.md) | Stores activities as text files on an [Azure Files](https://learn.microsoft.com/en-us/azure/storage/files/storage-files-introduction) share mounted into the pods by the [Azure Files CSI driver](https://learn.microsoft.com/en-us/azure/aks/azure-files-csi), over either SMB or NFS, with either a pre-created share or one provisioned on demand. The only sample whose app uses no Azure SDK at all. |
+| [web-app-managed-identity](samples/web-app-managed-identity/python/README.md) | Stores activities in an Azure Blob Storage container, authenticating with [Microsoft Entra Workload ID](https://learn.microsoft.com/en-us/azure/aks/workload-identity-overview) (federated credential plus workload identity) instead of a secret, and optionally exposes the app through the Gateway API with a managed TLS certificate. |
 
 Each sample folder follows the same layout:
 
diff --git a/samples/web-app-blob-storage/README.md b/samples/web-app-blob-storage/python/README.md
similarity index 86%
rename from samples/web-app-blob-storage/README.md
rename to samples/web-app-blob-storage/python/README.md
index 27b51f7..ad0d130 100644
--- a/samples/web-app-blob-storage/README.md
+++ b/samples/web-app-blob-storage/python/README.md
@@ -1,17 +1,19 @@
 # Vacation Planner: Azure Blob Storage
 
+> A .NET version of this sample lives in [../dotnet](../dotnet/README.md).
+
 This sample demonstrates a Python Flask single-page web application called *Vacation Planner* hosted on an [Azure Kubernetes Service (AKS)](https://learn.microsoft.com/en-us/azure/aks/what-is-aks) cluster in the cloud on Azure or locally in the LocalStack emulator for Azure. The app runs in a dedicated namespace and stores activity data in the `activities` container of an [Azure Blob Storage](https://learn.microsoft.com/en-us/azure/storage/blobs/storage-blobs-introduction) account.
 
-The application authenticates to the storage account with a connection string passed in through a Kubernetes Secret. For a secret-less alternative based on [Microsoft Entra Workload ID](https://learn.microsoft.com/en-us/azure/aks/workload-identity-overview), see the [`web-app-managed-identity`](../web-app-managed-identity/) sample.
+The application authenticates to the storage account with a connection string passed in through a Kubernetes Secret. For a secret-less alternative based on [Microsoft Entra Workload ID](https://learn.microsoft.com/en-us/azure/aks/workload-identity-overview), see the [`web-app-managed-identity`](../../web-app-managed-identity/python/) sample.
 
 Before installing the sample, make sure to create an [Azure Kubernetes Service (AKS)](https://learn.microsoft.com/en-us/azure/aks/what-is-aks) cluster by using one of the following scripts:
 
-- [scripts/01-system-assigned-managed-identity.sh](../../scripts/01-system-assigned-managed-identity.sh): creates the cluster using a system-assigned managed identity as its cluster identity.
-- [scripts/01-user-assigned-managed-identity.sh](../../scripts/01-user-assigned-managed-identity.sh): creates the cluster using a user-assigned managed identity as its cluster identity.
+- [scripts/01-system-assigned-managed-identity.sh](../../../scripts/01-system-assigned-managed-identity.sh): creates the cluster using a system-assigned managed identity as its cluster identity.
+- [scripts/01-user-assigned-managed-identity.sh](../../../scripts/01-user-assigned-managed-identity.sh): creates the cluster using a user-assigned managed identity as its cluster identity.
 
 All commands below are run from this sample's `scripts/` folder.
 
-> **Running on LocalStack?** Install the [lstk CLI](https://docs.localstack.cloud/aws/developer-tools/running-localstack/lstk/) and run `lstk az start-interception` to route Azure CLI calls to the emulator. See [Run against LocalStack](../../README.md#run-against-localstack) for the full setup.
+> **Running on LocalStack?** Install the [lstk CLI](https://docs.localstack.cloud/aws/developer-tools/running-localstack/lstk/) and run `lstk az start-interception` to route Azure CLI calls to the emulator. See [Run against LocalStack](../../../README.md#run-against-localstack) for the full setup.
 
 ## Architecture
 
diff --git a/samples/web-app-blob-storage/images/architecture.png b/samples/web-app-blob-storage/python/images/architecture.png
similarity index 100%
rename from samples/web-app-blob-storage/images/architecture.png
rename to samples/web-app-blob-storage/python/images/architecture.png
diff --git a/samples/web-app-blob-storage/scripts/00-variables.sh b/samples/web-app-blob-storage/python/scripts/00-variables.sh
similarity index 100%
rename from samples/web-app-blob-storage/scripts/00-variables.sh
rename to samples/web-app-blob-storage/python/scripts/00-variables.sh
diff --git a/samples/web-app-blob-storage/scripts/01-deploy-resources.sh b/samples/web-app-blob-storage/python/scripts/01-deploy-resources.sh
similarity index 100%
rename from samples/web-app-blob-storage/scripts/01-deploy-resources.sh
rename to samples/web-app-blob-storage/python/scripts/01-deploy-resources.sh
diff --git a/samples/web-app-blob-storage/scripts/02-build-docker-image.sh b/samples/web-app-blob-storage/python/scripts/02-build-docker-image.sh
similarity index 100%
rename from samples/web-app-blob-storage/scripts/02-build-docker-image.sh
rename to samples/web-app-blob-storage/python/scripts/02-build-docker-image.sh
diff --git a/samples/web-app-blob-storage/scripts/03-run-docker-container.sh b/samples/web-app-blob-storage/python/scripts/03-run-docker-container.sh
similarity index 100%
rename from samples/web-app-blob-storage/scripts/03-run-docker-container.sh
rename to samples/web-app-blob-storage/python/scripts/03-run-docker-container.sh
diff --git a/samples/web-app-blob-storage/scripts/04-push-docker-image.sh b/samples/web-app-blob-storage/python/scripts/04-push-docker-image.sh
similarity index 100%
rename from samples/web-app-blob-storage/scripts/04-push-docker-image.sh
rename to samples/web-app-blob-storage/python/scripts/04-push-docker-image.sh
diff --git a/samples/web-app-blob-storage/scripts/05-deploy-app.sh b/samples/web-app-blob-storage/python/scripts/05-deploy-app.sh
similarity index 100%
rename from samples/web-app-blob-storage/scripts/05-deploy-app.sh
rename to samples/web-app-blob-storage/python/scripts/05-deploy-app.sh
diff --git a/samples/web-app-blob-storage/scripts/Dockerfile b/samples/web-app-blob-storage/python/scripts/Dockerfile
similarity index 100%
rename from samples/web-app-blob-storage/scripts/Dockerfile
rename to samples/web-app-blob-storage/python/scripts/Dockerfile
diff --git a/samples/web-app-blob-storage/scripts/configmap.yml b/samples/web-app-blob-storage/python/scripts/configmap.yml
similarity index 100%
rename from samples/web-app-blob-storage/scripts/configmap.yml
rename to samples/web-app-blob-storage/python/scripts/configmap.yml
diff --git a/samples/web-app-blob-storage/scripts/deployment.yml b/samples/web-app-blob-storage/python/scripts/deployment.yml
similarity index 100%
rename from samples/web-app-blob-storage/scripts/deployment.yml
rename to samples/web-app-blob-storage/python/scripts/deployment.yml
diff --git a/samples/web-app-blob-storage/scripts/namespace.yml b/samples/web-app-blob-storage/python/scripts/namespace.yml
similarity index 100%
rename from samples/web-app-blob-storage/scripts/namespace.yml
rename to samples/web-app-blob-storage/python/scripts/namespace.yml
diff --git a/samples/web-app-blob-storage/scripts/secret.yml b/samples/web-app-blob-storage/python/scripts/secret.yml
similarity index 100%
rename from samples/web-app-blob-storage/scripts/secret.yml
rename to samples/web-app-blob-storage/python/scripts/secret.yml
diff --git a/samples/web-app-blob-storage/scripts/service.yml b/samples/web-app-blob-storage/python/scripts/service.yml
similarity index 100%
rename from samples/web-app-blob-storage/scripts/service.yml
rename to samples/web-app-blob-storage/python/scripts/service.yml
diff --git a/samples/web-app-blob-storage/src/app.py b/samples/web-app-blob-storage/python/src/app.py
similarity index 100%
rename from samples/web-app-blob-storage/src/app.py
rename to samples/web-app-blob-storage/python/src/app.py
diff --git a/samples/web-app-blob-storage/src/gunicorn.conf.py b/samples/web-app-blob-storage/python/src/gunicorn.conf.py
similarity index 100%
rename from samples/web-app-blob-storage/src/gunicorn.conf.py
rename to samples/web-app-blob-storage/python/src/gunicorn.conf.py
diff --git a/samples/web-app-blob-storage/src/requirements.txt b/samples/web-app-blob-storage/python/src/requirements.txt
similarity index 100%
rename from samples/web-app-blob-storage/src/requirements.txt
rename to samples/web-app-blob-storage/python/src/requirements.txt
diff --git a/samples/web-app-blob-storage/src/static/bootstrap/css/bootstrap-grid.css b/samples/web-app-blob-storage/python/src/static/bootstrap/css/bootstrap-grid.css
similarity index 100%
rename from samples/web-app-blob-storage/src/static/bootstrap/css/bootstrap-grid.css
rename to samples/web-app-blob-storage/python/src/static/bootstrap/css/bootstrap-grid.css
diff --git a/samples/web-app-blob-storage/src/static/bootstrap/css/bootstrap-grid.css.map b/samples/web-app-blob-storage/python/src/static/bootstrap/css/bootstrap-grid.css.map
similarity index 100%
rename from samples/web-app-blob-storage/src/static/bootstrap/css/bootstrap-grid.css.map
rename to samples/web-app-blob-storage/python/src/static/bootstrap/css/bootstrap-grid.css.map
diff --git a/samples/web-app-blob-storage/src/static/bootstrap/css/bootstrap-grid.min.css b/samples/web-app-blob-storage/python/src/static/bootstrap/css/bootstrap-grid.min.css
similarity index 100%
rename from samples/web-app-blob-storage/src/static/bootstrap/css/bootstrap-grid.min.css
rename to samples/web-app-blob-storage/python/src/static/bootstrap/css/bootstrap-grid.min.css
diff --git a/samples/web-app-blob-storage/src/static/bootstrap/css/bootstrap-grid.min.css.map b/samples/web-app-blob-storage/python/src/static/bootstrap/css/bootstrap-grid.min.css.map
similarity index 100%
rename from samples/web-app-blob-storage/src/static/bootstrap/css/bootstrap-grid.min.css.map
rename to samples/web-app-blob-storage/python/src/static/bootstrap/css/bootstrap-grid.min.css.map
diff --git a/samples/web-app-blob-storage/src/static/bootstrap/css/bootstrap-grid.rtl.css b/samples/web-app-blob-storage/python/src/static/bootstrap/css/bootstrap-grid.rtl.css
similarity index 100%
rename from samples/web-app-blob-storage/src/static/bootstrap/css/bootstrap-grid.rtl.css
rename to samples/web-app-blob-storage/python/src/static/bootstrap/css/bootstrap-grid.rtl.css
diff --git a/samples/web-app-blob-storage/src/static/bootstrap/css/bootstrap-grid.rtl.css.map b/samples/web-app-blob-storage/python/src/static/bootstrap/css/bootstrap-grid.rtl.css.map
similarity index 100%
rename from samples/web-app-blob-storage/src/static/bootstrap/css/bootstrap-grid.rtl.css.map
rename to samples/web-app-blob-storage/python/src/static/bootstrap/css/bootstrap-grid.rtl.css.map
diff --git a/samples/web-app-blob-storage/src/static/bootstrap/css/bootstrap-grid.rtl.min.css b/samples/web-app-blob-storage/python/src/static/bootstrap/css/bootstrap-grid.rtl.min.css
similarity index 100%
rename from samples/web-app-blob-storage/src/static/bootstrap/css/bootstrap-grid.rtl.min.css
rename to samples/web-app-blob-storage/python/src/static/bootstrap/css/bootstrap-grid.rtl.min.css
diff --git a/samples/web-app-blob-storage/src/static/bootstrap/css/bootstrap-grid.rtl.min.css.map b/samples/web-app-blob-storage/python/src/static/bootstrap/css/bootstrap-grid.rtl.min.css.map
similarity index 100%
rename from samples/web-app-blob-storage/src/static/bootstrap/css/bootstrap-grid.rtl.min.css.map
rename to samples/web-app-blob-storage/python/src/static/bootstrap/css/bootstrap-grid.rtl.min.css.map
diff --git a/samples/web-app-blob-storage/src/static/bootstrap/css/bootstrap-reboot.css b/samples/web-app-blob-storage/python/src/static/bootstrap/css/bootstrap-reboot.css
similarity index 100%
rename from samples/web-app-blob-storage/src/static/bootstrap/css/bootstrap-reboot.css
rename to samples/web-app-blob-storage/python/src/static/bootstrap/css/bootstrap-reboot.css
diff --git a/samples/web-app-blob-storage/src/static/bootstrap/css/bootstrap-reboot.css.map b/samples/web-app-blob-storage/python/src/static/bootstrap/css/bootstrap-reboot.css.map
similarity index 100%
rename from samples/web-app-blob-storage/src/static/bootstrap/css/bootstrap-reboot.css.map
rename to samples/web-app-blob-storage/python/src/static/bootstrap/css/bootstrap-reboot.css.map
diff --git a/samples/web-app-blob-storage/src/static/bootstrap/css/bootstrap-reboot.min.css b/samples/web-app-blob-storage/python/src/static/bootstrap/css/bootstrap-reboot.min.css
similarity index 100%
rename from samples/web-app-blob-storage/src/static/bootstrap/css/bootstrap-reboot.min.css
rename to samples/web-app-blob-storage/python/src/static/bootstrap/css/bootstrap-reboot.min.css
diff --git a/samples/web-app-blob-storage/src/static/bootstrap/css/bootstrap-reboot.min.css.map b/samples/web-app-blob-storage/python/src/static/bootstrap/css/bootstrap-reboot.min.css.map
similarity index 100%
rename from samples/web-app-blob-storage/src/static/bootstrap/css/bootstrap-reboot.min.css.map
rename to samples/web-app-blob-storage/python/src/static/bootstrap/css/bootstrap-reboot.min.css.map
diff --git a/samples/web-app-blob-storage/src/static/bootstrap/css/bootstrap-reboot.rtl.css b/samples/web-app-blob-storage/python/src/static/bootstrap/css/bootstrap-reboot.rtl.css
similarity index 100%
rename from samples/web-app-blob-storage/src/static/bootstrap/css/bootstrap-reboot.rtl.css
rename to samples/web-app-blob-storage/python/src/static/bootstrap/css/bootstrap-reboot.rtl.css
diff --git a/samples/web-app-blob-storage/src/static/bootstrap/css/bootstrap-reboot.rtl.css.map b/samples/web-app-blob-storage/python/src/static/bootstrap/css/bootstrap-reboot.rtl.css.map
similarity index 100%
rename from samples/web-app-blob-storage/src/static/bootstrap/css/bootstrap-reboot.rtl.css.map
rename to samples/web-app-blob-storage/python/src/static/bootstrap/css/bootstrap-reboot.rtl.css.map
diff --git a/samples/web-app-blob-storage/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css b/samples/web-app-blob-storage/python/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css
similarity index 100%
rename from samples/web-app-blob-storage/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css
rename to samples/web-app-blob-storage/python/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css
diff --git a/samples/web-app-blob-storage/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css.map b/samples/web-app-blob-storage/python/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css.map
similarity index 100%
rename from samples/web-app-blob-storage/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css.map
rename to samples/web-app-blob-storage/python/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css.map
diff --git a/samples/web-app-blob-storage/src/static/bootstrap/css/bootstrap-utilities.css b/samples/web-app-blob-storage/python/src/static/bootstrap/css/bootstrap-utilities.css
similarity index 100%
rename from samples/web-app-blob-storage/src/static/bootstrap/css/bootstrap-utilities.css
rename to samples/web-app-blob-storage/python/src/static/bootstrap/css/bootstrap-utilities.css
diff --git a/samples/web-app-blob-storage/src/static/bootstrap/css/bootstrap-utilities.css.map b/samples/web-app-blob-storage/python/src/static/bootstrap/css/bootstrap-utilities.css.map
similarity index 100%
rename from samples/web-app-blob-storage/src/static/bootstrap/css/bootstrap-utilities.css.map
rename to samples/web-app-blob-storage/python/src/static/bootstrap/css/bootstrap-utilities.css.map
diff --git a/samples/web-app-blob-storage/src/static/bootstrap/css/bootstrap-utilities.min.css b/samples/web-app-blob-storage/python/src/static/bootstrap/css/bootstrap-utilities.min.css
similarity index 100%
rename from samples/web-app-blob-storage/src/static/bootstrap/css/bootstrap-utilities.min.css
rename to samples/web-app-blob-storage/python/src/static/bootstrap/css/bootstrap-utilities.min.css
diff --git a/samples/web-app-blob-storage/src/static/bootstrap/css/bootstrap-utilities.min.css.map b/samples/web-app-blob-storage/python/src/static/bootstrap/css/bootstrap-utilities.min.css.map
similarity index 100%
rename from samples/web-app-blob-storage/src/static/bootstrap/css/bootstrap-utilities.min.css.map
rename to samples/web-app-blob-storage/python/src/static/bootstrap/css/bootstrap-utilities.min.css.map
diff --git a/samples/web-app-blob-storage/src/static/bootstrap/css/bootstrap-utilities.rtl.css b/samples/web-app-blob-storage/python/src/static/bootstrap/css/bootstrap-utilities.rtl.css
similarity index 100%
rename from samples/web-app-blob-storage/src/static/bootstrap/css/bootstrap-utilities.rtl.css
rename to samples/web-app-blob-storage/python/src/static/bootstrap/css/bootstrap-utilities.rtl.css
diff --git a/samples/web-app-blob-storage/src/static/bootstrap/css/bootstrap-utilities.rtl.css.map b/samples/web-app-blob-storage/python/src/static/bootstrap/css/bootstrap-utilities.rtl.css.map
similarity index 100%
rename from samples/web-app-blob-storage/src/static/bootstrap/css/bootstrap-utilities.rtl.css.map
rename to samples/web-app-blob-storage/python/src/static/bootstrap/css/bootstrap-utilities.rtl.css.map
diff --git a/samples/web-app-blob-storage/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css b/samples/web-app-blob-storage/python/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css
similarity index 100%
rename from samples/web-app-blob-storage/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css
rename to samples/web-app-blob-storage/python/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css
diff --git a/samples/web-app-blob-storage/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css.map b/samples/web-app-blob-storage/python/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css.map
similarity index 100%
rename from samples/web-app-blob-storage/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css.map
rename to samples/web-app-blob-storage/python/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css.map
diff --git a/samples/web-app-blob-storage/src/static/bootstrap/css/bootstrap.css b/samples/web-app-blob-storage/python/src/static/bootstrap/css/bootstrap.css
similarity index 100%
rename from samples/web-app-blob-storage/src/static/bootstrap/css/bootstrap.css
rename to samples/web-app-blob-storage/python/src/static/bootstrap/css/bootstrap.css
diff --git a/samples/web-app-blob-storage/src/static/bootstrap/css/bootstrap.css.map b/samples/web-app-blob-storage/python/src/static/bootstrap/css/bootstrap.css.map
similarity index 100%
rename from samples/web-app-blob-storage/src/static/bootstrap/css/bootstrap.css.map
rename to samples/web-app-blob-storage/python/src/static/bootstrap/css/bootstrap.css.map
diff --git a/samples/web-app-blob-storage/src/static/bootstrap/css/bootstrap.min.css b/samples/web-app-blob-storage/python/src/static/bootstrap/css/bootstrap.min.css
similarity index 100%
rename from samples/web-app-blob-storage/src/static/bootstrap/css/bootstrap.min.css
rename to samples/web-app-blob-storage/python/src/static/bootstrap/css/bootstrap.min.css
diff --git a/samples/web-app-blob-storage/src/static/bootstrap/css/bootstrap.min.css.map b/samples/web-app-blob-storage/python/src/static/bootstrap/css/bootstrap.min.css.map
similarity index 100%
rename from samples/web-app-blob-storage/src/static/bootstrap/css/bootstrap.min.css.map
rename to samples/web-app-blob-storage/python/src/static/bootstrap/css/bootstrap.min.css.map
diff --git a/samples/web-app-blob-storage/src/static/bootstrap/css/bootstrap.rtl.css b/samples/web-app-blob-storage/python/src/static/bootstrap/css/bootstrap.rtl.css
similarity index 100%
rename from samples/web-app-blob-storage/src/static/bootstrap/css/bootstrap.rtl.css
rename to samples/web-app-blob-storage/python/src/static/bootstrap/css/bootstrap.rtl.css
diff --git a/samples/web-app-blob-storage/src/static/bootstrap/css/bootstrap.rtl.css.map b/samples/web-app-blob-storage/python/src/static/bootstrap/css/bootstrap.rtl.css.map
similarity index 100%
rename from samples/web-app-blob-storage/src/static/bootstrap/css/bootstrap.rtl.css.map
rename to samples/web-app-blob-storage/python/src/static/bootstrap/css/bootstrap.rtl.css.map
diff --git a/samples/web-app-blob-storage/src/static/bootstrap/css/bootstrap.rtl.min.css b/samples/web-app-blob-storage/python/src/static/bootstrap/css/bootstrap.rtl.min.css
similarity index 100%
rename from samples/web-app-blob-storage/src/static/bootstrap/css/bootstrap.rtl.min.css
rename to samples/web-app-blob-storage/python/src/static/bootstrap/css/bootstrap.rtl.min.css
diff --git a/samples/web-app-blob-storage/src/static/bootstrap/css/bootstrap.rtl.min.css.map b/samples/web-app-blob-storage/python/src/static/bootstrap/css/bootstrap.rtl.min.css.map
similarity index 100%
rename from samples/web-app-blob-storage/src/static/bootstrap/css/bootstrap.rtl.min.css.map
rename to samples/web-app-blob-storage/python/src/static/bootstrap/css/bootstrap.rtl.min.css.map
diff --git a/samples/web-app-blob-storage/src/static/bootstrap/js/bootstrap.bundle.js b/samples/web-app-blob-storage/python/src/static/bootstrap/js/bootstrap.bundle.js
similarity index 100%
rename from samples/web-app-blob-storage/src/static/bootstrap/js/bootstrap.bundle.js
rename to samples/web-app-blob-storage/python/src/static/bootstrap/js/bootstrap.bundle.js
diff --git a/samples/web-app-blob-storage/src/static/bootstrap/js/bootstrap.bundle.js.map b/samples/web-app-blob-storage/python/src/static/bootstrap/js/bootstrap.bundle.js.map
similarity index 100%
rename from samples/web-app-blob-storage/src/static/bootstrap/js/bootstrap.bundle.js.map
rename to samples/web-app-blob-storage/python/src/static/bootstrap/js/bootstrap.bundle.js.map
diff --git a/samples/web-app-blob-storage/src/static/bootstrap/js/bootstrap.bundle.min.js b/samples/web-app-blob-storage/python/src/static/bootstrap/js/bootstrap.bundle.min.js
similarity index 100%
rename from samples/web-app-blob-storage/src/static/bootstrap/js/bootstrap.bundle.min.js
rename to samples/web-app-blob-storage/python/src/static/bootstrap/js/bootstrap.bundle.min.js
diff --git a/samples/web-app-blob-storage/src/static/bootstrap/js/bootstrap.bundle.min.js.map b/samples/web-app-blob-storage/python/src/static/bootstrap/js/bootstrap.bundle.min.js.map
similarity index 100%
rename from samples/web-app-blob-storage/src/static/bootstrap/js/bootstrap.bundle.min.js.map
rename to samples/web-app-blob-storage/python/src/static/bootstrap/js/bootstrap.bundle.min.js.map
diff --git a/samples/web-app-blob-storage/src/static/bootstrap/js/bootstrap.esm.js b/samples/web-app-blob-storage/python/src/static/bootstrap/js/bootstrap.esm.js
similarity index 100%
rename from samples/web-app-blob-storage/src/static/bootstrap/js/bootstrap.esm.js
rename to samples/web-app-blob-storage/python/src/static/bootstrap/js/bootstrap.esm.js
diff --git a/samples/web-app-blob-storage/src/static/bootstrap/js/bootstrap.esm.js.map b/samples/web-app-blob-storage/python/src/static/bootstrap/js/bootstrap.esm.js.map
similarity index 100%
rename from samples/web-app-blob-storage/src/static/bootstrap/js/bootstrap.esm.js.map
rename to samples/web-app-blob-storage/python/src/static/bootstrap/js/bootstrap.esm.js.map
diff --git a/samples/web-app-blob-storage/src/static/bootstrap/js/bootstrap.esm.min.js b/samples/web-app-blob-storage/python/src/static/bootstrap/js/bootstrap.esm.min.js
similarity index 100%
rename from samples/web-app-blob-storage/src/static/bootstrap/js/bootstrap.esm.min.js
rename to samples/web-app-blob-storage/python/src/static/bootstrap/js/bootstrap.esm.min.js
diff --git a/samples/web-app-blob-storage/src/static/bootstrap/js/bootstrap.esm.min.js.map b/samples/web-app-blob-storage/python/src/static/bootstrap/js/bootstrap.esm.min.js.map
similarity index 100%
rename from samples/web-app-blob-storage/src/static/bootstrap/js/bootstrap.esm.min.js.map
rename to samples/web-app-blob-storage/python/src/static/bootstrap/js/bootstrap.esm.min.js.map
diff --git a/samples/web-app-blob-storage/src/static/bootstrap/js/bootstrap.js b/samples/web-app-blob-storage/python/src/static/bootstrap/js/bootstrap.js
similarity index 100%
rename from samples/web-app-blob-storage/src/static/bootstrap/js/bootstrap.js
rename to samples/web-app-blob-storage/python/src/static/bootstrap/js/bootstrap.js
diff --git a/samples/web-app-blob-storage/src/static/bootstrap/js/bootstrap.js.map b/samples/web-app-blob-storage/python/src/static/bootstrap/js/bootstrap.js.map
similarity index 100%
rename from samples/web-app-blob-storage/src/static/bootstrap/js/bootstrap.js.map
rename to samples/web-app-blob-storage/python/src/static/bootstrap/js/bootstrap.js.map
diff --git a/samples/web-app-blob-storage/src/static/bootstrap/js/bootstrap.min.js b/samples/web-app-blob-storage/python/src/static/bootstrap/js/bootstrap.min.js
similarity index 100%
rename from samples/web-app-blob-storage/src/static/bootstrap/js/bootstrap.min.js
rename to samples/web-app-blob-storage/python/src/static/bootstrap/js/bootstrap.min.js
diff --git a/samples/web-app-blob-storage/src/static/bootstrap/js/bootstrap.min.js.map b/samples/web-app-blob-storage/python/src/static/bootstrap/js/bootstrap.min.js.map
similarity index 100%
rename from samples/web-app-blob-storage/src/static/bootstrap/js/bootstrap.min.js.map
rename to samples/web-app-blob-storage/python/src/static/bootstrap/js/bootstrap.min.js.map
diff --git a/samples/web-app-blob-storage/src/static/favicon.ico b/samples/web-app-blob-storage/python/src/static/favicon.ico
similarity index 100%
rename from samples/web-app-blob-storage/src/static/favicon.ico
rename to samples/web-app-blob-storage/python/src/static/favicon.ico
diff --git a/samples/web-app-blob-storage/src/static/style.css b/samples/web-app-blob-storage/python/src/static/style.css
similarity index 100%
rename from samples/web-app-blob-storage/src/static/style.css
rename to samples/web-app-blob-storage/python/src/static/style.css
diff --git a/samples/web-app-blob-storage/src/templates/index.html b/samples/web-app-blob-storage/python/src/templates/index.html
similarity index 100%
rename from samples/web-app-blob-storage/src/templates/index.html
rename to samples/web-app-blob-storage/python/src/templates/index.html
diff --git a/samples/web-app-cosmosdb-mongodb-api/README.md b/samples/web-app-cosmosdb-mongodb-api/python/README.md
similarity index 88%
rename from samples/web-app-cosmosdb-mongodb-api/README.md
rename to samples/web-app-cosmosdb-mongodb-api/python/README.md
index 46e4612..1d2b0ed 100644
--- a/samples/web-app-cosmosdb-mongodb-api/README.md
+++ b/samples/web-app-cosmosdb-mongodb-api/python/README.md
@@ -1,17 +1,19 @@
 # Vacation Planner: Azure Cosmos DB for MongoDB
 
+> A .NET version of this sample lives in [../dotnet](../dotnet/README.md).
+
 This sample demonstrates a Python Flask single-page web application called *Vacation Planner* hosted on an [Azure Kubernetes Service (AKS)](https://learn.microsoft.com/en-us/azure/aks/what-is-aks) cluster in the cloud on Azure or locally in the LocalStack emulator for Azure. The app runs in a dedicated namespace and stores activity data in the `activities` collection of the `sampledb` database on an [Azure Cosmos DB for MongoDB](https://learn.microsoft.com/en-us/azure/cosmos-db/mongodb/introduction) account.
 
 The application talks to Cosmos DB through the MongoDB wire protocol, so it uses a standard MongoDB driver and connection string.
 
 Before installing the sample, make sure to create an [Azure Kubernetes Service (AKS)](https://learn.microsoft.com/en-us/azure/aks/what-is-aks) cluster by using one of the following scripts:
 
-- [scripts/01-system-assigned-managed-identity.sh](../../scripts/01-system-assigned-managed-identity.sh): creates the cluster using a system-assigned managed identity as its cluster identity.
-- [scripts/01-user-assigned-managed-identity.sh](../../scripts/01-user-assigned-managed-identity.sh): creates the cluster using a user-assigned managed identity as its cluster identity.
+- [scripts/01-system-assigned-managed-identity.sh](../../../scripts/01-system-assigned-managed-identity.sh): creates the cluster using a system-assigned managed identity as its cluster identity.
+- [scripts/01-user-assigned-managed-identity.sh](../../../scripts/01-user-assigned-managed-identity.sh): creates the cluster using a user-assigned managed identity as its cluster identity.
 
 All commands below are run from this sample's `scripts/` folder.
 
-> **Running on LocalStack?** Install the [lstk CLI](https://docs.localstack.cloud/aws/developer-tools/running-localstack/lstk/) and run `lstk az start-interception` to route Azure CLI calls to the emulator. See [Run against LocalStack](../../README.md#run-against-localstack) for the full setup.
+> **Running on LocalStack?** Install the [lstk CLI](https://docs.localstack.cloud/aws/developer-tools/running-localstack/lstk/) and run `lstk az start-interception` to route Azure CLI calls to the emulator. See [Run against LocalStack](../../../README.md#run-against-localstack) for the full setup.
 
 ## Architecture
 
diff --git a/samples/web-app-cosmosdb-mongodb-api/images/architecture.png b/samples/web-app-cosmosdb-mongodb-api/python/images/architecture.png
similarity index 100%
rename from samples/web-app-cosmosdb-mongodb-api/images/architecture.png
rename to samples/web-app-cosmosdb-mongodb-api/python/images/architecture.png
diff --git a/samples/web-app-cosmosdb-mongodb-api/scripts/00-variables.sh b/samples/web-app-cosmosdb-mongodb-api/python/scripts/00-variables.sh
similarity index 100%
rename from samples/web-app-cosmosdb-mongodb-api/scripts/00-variables.sh
rename to samples/web-app-cosmosdb-mongodb-api/python/scripts/00-variables.sh
diff --git a/samples/web-app-cosmosdb-mongodb-api/scripts/01-deploy-resources.sh b/samples/web-app-cosmosdb-mongodb-api/python/scripts/01-deploy-resources.sh
similarity index 100%
rename from samples/web-app-cosmosdb-mongodb-api/scripts/01-deploy-resources.sh
rename to samples/web-app-cosmosdb-mongodb-api/python/scripts/01-deploy-resources.sh
diff --git a/samples/web-app-cosmosdb-mongodb-api/scripts/02-build-docker-image.sh b/samples/web-app-cosmosdb-mongodb-api/python/scripts/02-build-docker-image.sh
similarity index 100%
rename from samples/web-app-cosmosdb-mongodb-api/scripts/02-build-docker-image.sh
rename to samples/web-app-cosmosdb-mongodb-api/python/scripts/02-build-docker-image.sh
diff --git a/samples/web-app-cosmosdb-mongodb-api/scripts/03-run-docker-container.sh b/samples/web-app-cosmosdb-mongodb-api/python/scripts/03-run-docker-container.sh
similarity index 100%
rename from samples/web-app-cosmosdb-mongodb-api/scripts/03-run-docker-container.sh
rename to samples/web-app-cosmosdb-mongodb-api/python/scripts/03-run-docker-container.sh
diff --git a/samples/web-app-cosmosdb-mongodb-api/scripts/04-push-docker-image.sh b/samples/web-app-cosmosdb-mongodb-api/python/scripts/04-push-docker-image.sh
similarity index 100%
rename from samples/web-app-cosmosdb-mongodb-api/scripts/04-push-docker-image.sh
rename to samples/web-app-cosmosdb-mongodb-api/python/scripts/04-push-docker-image.sh
diff --git a/samples/web-app-cosmosdb-mongodb-api/scripts/05-deploy-app.sh b/samples/web-app-cosmosdb-mongodb-api/python/scripts/05-deploy-app.sh
similarity index 100%
rename from samples/web-app-cosmosdb-mongodb-api/scripts/05-deploy-app.sh
rename to samples/web-app-cosmosdb-mongodb-api/python/scripts/05-deploy-app.sh
diff --git a/samples/web-app-cosmosdb-mongodb-api/scripts/Dockerfile b/samples/web-app-cosmosdb-mongodb-api/python/scripts/Dockerfile
similarity index 100%
rename from samples/web-app-cosmosdb-mongodb-api/scripts/Dockerfile
rename to samples/web-app-cosmosdb-mongodb-api/python/scripts/Dockerfile
diff --git a/samples/web-app-cosmosdb-mongodb-api/scripts/configmap.yml b/samples/web-app-cosmosdb-mongodb-api/python/scripts/configmap.yml
similarity index 100%
rename from samples/web-app-cosmosdb-mongodb-api/scripts/configmap.yml
rename to samples/web-app-cosmosdb-mongodb-api/python/scripts/configmap.yml
diff --git a/samples/web-app-cosmosdb-mongodb-api/scripts/deployment.yml b/samples/web-app-cosmosdb-mongodb-api/python/scripts/deployment.yml
similarity index 100%
rename from samples/web-app-cosmosdb-mongodb-api/scripts/deployment.yml
rename to samples/web-app-cosmosdb-mongodb-api/python/scripts/deployment.yml
diff --git a/samples/web-app-cosmosdb-mongodb-api/scripts/namespace.yml b/samples/web-app-cosmosdb-mongodb-api/python/scripts/namespace.yml
similarity index 100%
rename from samples/web-app-cosmosdb-mongodb-api/scripts/namespace.yml
rename to samples/web-app-cosmosdb-mongodb-api/python/scripts/namespace.yml
diff --git a/samples/web-app-cosmosdb-mongodb-api/scripts/secret.yml b/samples/web-app-cosmosdb-mongodb-api/python/scripts/secret.yml
similarity index 100%
rename from samples/web-app-cosmosdb-mongodb-api/scripts/secret.yml
rename to samples/web-app-cosmosdb-mongodb-api/python/scripts/secret.yml
diff --git a/samples/web-app-cosmosdb-mongodb-api/scripts/service.yml b/samples/web-app-cosmosdb-mongodb-api/python/scripts/service.yml
similarity index 100%
rename from samples/web-app-cosmosdb-mongodb-api/scripts/service.yml
rename to samples/web-app-cosmosdb-mongodb-api/python/scripts/service.yml
diff --git a/samples/web-app-cosmosdb-mongodb-api/src/app.py b/samples/web-app-cosmosdb-mongodb-api/python/src/app.py
similarity index 100%
rename from samples/web-app-cosmosdb-mongodb-api/src/app.py
rename to samples/web-app-cosmosdb-mongodb-api/python/src/app.py
diff --git a/samples/web-app-cosmosdb-mongodb-api/src/gunicorn.conf.py b/samples/web-app-cosmosdb-mongodb-api/python/src/gunicorn.conf.py
similarity index 100%
rename from samples/web-app-cosmosdb-mongodb-api/src/gunicorn.conf.py
rename to samples/web-app-cosmosdb-mongodb-api/python/src/gunicorn.conf.py
diff --git a/samples/web-app-cosmosdb-mongodb-api/src/mongodb.py b/samples/web-app-cosmosdb-mongodb-api/python/src/mongodb.py
similarity index 100%
rename from samples/web-app-cosmosdb-mongodb-api/src/mongodb.py
rename to samples/web-app-cosmosdb-mongodb-api/python/src/mongodb.py
diff --git a/samples/web-app-cosmosdb-mongodb-api/src/requirements.txt b/samples/web-app-cosmosdb-mongodb-api/python/src/requirements.txt
similarity index 100%
rename from samples/web-app-cosmosdb-mongodb-api/src/requirements.txt
rename to samples/web-app-cosmosdb-mongodb-api/python/src/requirements.txt
diff --git a/samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/css/bootstrap-grid.css b/samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/css/bootstrap-grid.css
similarity index 100%
rename from samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/css/bootstrap-grid.css
rename to samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/css/bootstrap-grid.css
diff --git a/samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/css/bootstrap-grid.css.map b/samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/css/bootstrap-grid.css.map
similarity index 100%
rename from samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/css/bootstrap-grid.css.map
rename to samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/css/bootstrap-grid.css.map
diff --git a/samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/css/bootstrap-grid.min.css b/samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/css/bootstrap-grid.min.css
similarity index 100%
rename from samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/css/bootstrap-grid.min.css
rename to samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/css/bootstrap-grid.min.css
diff --git a/samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/css/bootstrap-grid.min.css.map b/samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/css/bootstrap-grid.min.css.map
similarity index 100%
rename from samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/css/bootstrap-grid.min.css.map
rename to samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/css/bootstrap-grid.min.css.map
diff --git a/samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/css/bootstrap-grid.rtl.css b/samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/css/bootstrap-grid.rtl.css
similarity index 100%
rename from samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/css/bootstrap-grid.rtl.css
rename to samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/css/bootstrap-grid.rtl.css
diff --git a/samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/css/bootstrap-grid.rtl.css.map b/samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/css/bootstrap-grid.rtl.css.map
similarity index 100%
rename from samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/css/bootstrap-grid.rtl.css.map
rename to samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/css/bootstrap-grid.rtl.css.map
diff --git a/samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/css/bootstrap-grid.rtl.min.css b/samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/css/bootstrap-grid.rtl.min.css
similarity index 100%
rename from samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/css/bootstrap-grid.rtl.min.css
rename to samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/css/bootstrap-grid.rtl.min.css
diff --git a/samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/css/bootstrap-grid.rtl.min.css.map b/samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/css/bootstrap-grid.rtl.min.css.map
similarity index 100%
rename from samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/css/bootstrap-grid.rtl.min.css.map
rename to samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/css/bootstrap-grid.rtl.min.css.map
diff --git a/samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/css/bootstrap-reboot.css b/samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/css/bootstrap-reboot.css
similarity index 100%
rename from samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/css/bootstrap-reboot.css
rename to samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/css/bootstrap-reboot.css
diff --git a/samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/css/bootstrap-reboot.css.map b/samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/css/bootstrap-reboot.css.map
similarity index 100%
rename from samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/css/bootstrap-reboot.css.map
rename to samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/css/bootstrap-reboot.css.map
diff --git a/samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/css/bootstrap-reboot.min.css b/samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/css/bootstrap-reboot.min.css
similarity index 100%
rename from samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/css/bootstrap-reboot.min.css
rename to samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/css/bootstrap-reboot.min.css
diff --git a/samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/css/bootstrap-reboot.min.css.map b/samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/css/bootstrap-reboot.min.css.map
similarity index 100%
rename from samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/css/bootstrap-reboot.min.css.map
rename to samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/css/bootstrap-reboot.min.css.map
diff --git a/samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/css/bootstrap-reboot.rtl.css b/samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/css/bootstrap-reboot.rtl.css
similarity index 100%
rename from samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/css/bootstrap-reboot.rtl.css
rename to samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/css/bootstrap-reboot.rtl.css
diff --git a/samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/css/bootstrap-reboot.rtl.css.map b/samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/css/bootstrap-reboot.rtl.css.map
similarity index 100%
rename from samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/css/bootstrap-reboot.rtl.css.map
rename to samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/css/bootstrap-reboot.rtl.css.map
diff --git a/samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css b/samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css
similarity index 100%
rename from samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css
rename to samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css
diff --git a/samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css.map b/samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css.map
similarity index 100%
rename from samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css.map
rename to samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css.map
diff --git a/samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/css/bootstrap-utilities.css b/samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/css/bootstrap-utilities.css
similarity index 100%
rename from samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/css/bootstrap-utilities.css
rename to samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/css/bootstrap-utilities.css
diff --git a/samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/css/bootstrap-utilities.css.map b/samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/css/bootstrap-utilities.css.map
similarity index 100%
rename from samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/css/bootstrap-utilities.css.map
rename to samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/css/bootstrap-utilities.css.map
diff --git a/samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/css/bootstrap-utilities.min.css b/samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/css/bootstrap-utilities.min.css
similarity index 100%
rename from samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/css/bootstrap-utilities.min.css
rename to samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/css/bootstrap-utilities.min.css
diff --git a/samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/css/bootstrap-utilities.min.css.map b/samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/css/bootstrap-utilities.min.css.map
similarity index 100%
rename from samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/css/bootstrap-utilities.min.css.map
rename to samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/css/bootstrap-utilities.min.css.map
diff --git a/samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/css/bootstrap-utilities.rtl.css b/samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/css/bootstrap-utilities.rtl.css
similarity index 100%
rename from samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/css/bootstrap-utilities.rtl.css
rename to samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/css/bootstrap-utilities.rtl.css
diff --git a/samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/css/bootstrap-utilities.rtl.css.map b/samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/css/bootstrap-utilities.rtl.css.map
similarity index 100%
rename from samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/css/bootstrap-utilities.rtl.css.map
rename to samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/css/bootstrap-utilities.rtl.css.map
diff --git a/samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css b/samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css
similarity index 100%
rename from samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css
rename to samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css
diff --git a/samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css.map b/samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css.map
similarity index 100%
rename from samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css.map
rename to samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css.map
diff --git a/samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/css/bootstrap.css b/samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/css/bootstrap.css
similarity index 100%
rename from samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/css/bootstrap.css
rename to samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/css/bootstrap.css
diff --git a/samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/css/bootstrap.css.map b/samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/css/bootstrap.css.map
similarity index 100%
rename from samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/css/bootstrap.css.map
rename to samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/css/bootstrap.css.map
diff --git a/samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/css/bootstrap.min.css b/samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/css/bootstrap.min.css
similarity index 100%
rename from samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/css/bootstrap.min.css
rename to samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/css/bootstrap.min.css
diff --git a/samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/css/bootstrap.min.css.map b/samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/css/bootstrap.min.css.map
similarity index 100%
rename from samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/css/bootstrap.min.css.map
rename to samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/css/bootstrap.min.css.map
diff --git a/samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/css/bootstrap.rtl.css b/samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/css/bootstrap.rtl.css
similarity index 100%
rename from samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/css/bootstrap.rtl.css
rename to samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/css/bootstrap.rtl.css
diff --git a/samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/css/bootstrap.rtl.css.map b/samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/css/bootstrap.rtl.css.map
similarity index 100%
rename from samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/css/bootstrap.rtl.css.map
rename to samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/css/bootstrap.rtl.css.map
diff --git a/samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/css/bootstrap.rtl.min.css b/samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/css/bootstrap.rtl.min.css
similarity index 100%
rename from samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/css/bootstrap.rtl.min.css
rename to samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/css/bootstrap.rtl.min.css
diff --git a/samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/css/bootstrap.rtl.min.css.map b/samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/css/bootstrap.rtl.min.css.map
similarity index 100%
rename from samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/css/bootstrap.rtl.min.css.map
rename to samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/css/bootstrap.rtl.min.css.map
diff --git a/samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/js/bootstrap.bundle.js b/samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/js/bootstrap.bundle.js
similarity index 100%
rename from samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/js/bootstrap.bundle.js
rename to samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/js/bootstrap.bundle.js
diff --git a/samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/js/bootstrap.bundle.js.map b/samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/js/bootstrap.bundle.js.map
similarity index 100%
rename from samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/js/bootstrap.bundle.js.map
rename to samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/js/bootstrap.bundle.js.map
diff --git a/samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/js/bootstrap.bundle.min.js b/samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/js/bootstrap.bundle.min.js
similarity index 100%
rename from samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/js/bootstrap.bundle.min.js
rename to samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/js/bootstrap.bundle.min.js
diff --git a/samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/js/bootstrap.bundle.min.js.map b/samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/js/bootstrap.bundle.min.js.map
similarity index 100%
rename from samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/js/bootstrap.bundle.min.js.map
rename to samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/js/bootstrap.bundle.min.js.map
diff --git a/samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/js/bootstrap.esm.js b/samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/js/bootstrap.esm.js
similarity index 100%
rename from samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/js/bootstrap.esm.js
rename to samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/js/bootstrap.esm.js
diff --git a/samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/js/bootstrap.esm.js.map b/samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/js/bootstrap.esm.js.map
similarity index 100%
rename from samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/js/bootstrap.esm.js.map
rename to samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/js/bootstrap.esm.js.map
diff --git a/samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/js/bootstrap.esm.min.js b/samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/js/bootstrap.esm.min.js
similarity index 100%
rename from samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/js/bootstrap.esm.min.js
rename to samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/js/bootstrap.esm.min.js
diff --git a/samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/js/bootstrap.esm.min.js.map b/samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/js/bootstrap.esm.min.js.map
similarity index 100%
rename from samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/js/bootstrap.esm.min.js.map
rename to samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/js/bootstrap.esm.min.js.map
diff --git a/samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/js/bootstrap.js b/samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/js/bootstrap.js
similarity index 100%
rename from samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/js/bootstrap.js
rename to samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/js/bootstrap.js
diff --git a/samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/js/bootstrap.js.map b/samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/js/bootstrap.js.map
similarity index 100%
rename from samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/js/bootstrap.js.map
rename to samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/js/bootstrap.js.map
diff --git a/samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/js/bootstrap.min.js b/samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/js/bootstrap.min.js
similarity index 100%
rename from samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/js/bootstrap.min.js
rename to samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/js/bootstrap.min.js
diff --git a/samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/js/bootstrap.min.js.map b/samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/js/bootstrap.min.js.map
similarity index 100%
rename from samples/web-app-cosmosdb-mongodb-api/src/static/bootstrap/js/bootstrap.min.js.map
rename to samples/web-app-cosmosdb-mongodb-api/python/src/static/bootstrap/js/bootstrap.min.js.map
diff --git a/samples/web-app-cosmosdb-mongodb-api/src/static/favicon.ico b/samples/web-app-cosmosdb-mongodb-api/python/src/static/favicon.ico
similarity index 100%
rename from samples/web-app-cosmosdb-mongodb-api/src/static/favicon.ico
rename to samples/web-app-cosmosdb-mongodb-api/python/src/static/favicon.ico
diff --git a/samples/web-app-cosmosdb-mongodb-api/src/static/style.css b/samples/web-app-cosmosdb-mongodb-api/python/src/static/style.css
similarity index 100%
rename from samples/web-app-cosmosdb-mongodb-api/src/static/style.css
rename to samples/web-app-cosmosdb-mongodb-api/python/src/static/style.css
diff --git a/samples/web-app-cosmosdb-mongodb-api/src/templates/index.html b/samples/web-app-cosmosdb-mongodb-api/python/src/templates/index.html
similarity index 100%
rename from samples/web-app-cosmosdb-mongodb-api/src/templates/index.html
rename to samples/web-app-cosmosdb-mongodb-api/python/src/templates/index.html
diff --git a/samples/web-app-cosmosdb-nosql-api/README.md b/samples/web-app-cosmosdb-nosql-api/python/README.md
similarity index 88%
rename from samples/web-app-cosmosdb-nosql-api/README.md
rename to samples/web-app-cosmosdb-nosql-api/python/README.md
index e75016e..1238c4d 100644
--- a/samples/web-app-cosmosdb-nosql-api/README.md
+++ b/samples/web-app-cosmosdb-nosql-api/python/README.md
@@ -1,19 +1,21 @@
 # Vacation Planner: Azure Cosmos DB for NoSQL
 
+> A .NET version of this sample lives in [../dotnet](../dotnet/README.md).
+
 This sample demonstrates a Python Flask single-page web application called *Vacation Planner* hosted on an [Azure Kubernetes Service (AKS)](https://learn.microsoft.com/en-us/azure/aks/what-is-aks) cluster in the cloud on Azure or locally in the LocalStack emulator for Azure. The app runs in a dedicated namespace and stores activity data in the `activities` container of the `vacationplanner` database on an [Azure Cosmos DB for NoSQL](https://learn.microsoft.com/en-us/azure/cosmos-db/nosql/) account.
 
 The application uses the native Cosmos DB NoSQL (SQL) API, with `/username` as the container's partition key.
 
 Before installing the sample, make sure to create an [Azure Kubernetes Service (AKS)](https://learn.microsoft.com/en-us/azure/aks/what-is-aks) cluster by using one of the following scripts:
 
-- [scripts/01-system-assigned-managed-identity.sh](../../scripts/01-system-assigned-managed-identity.sh): creates the cluster using a system-assigned managed identity as its cluster identity.
-- [scripts/01-user-assigned-managed-identity.sh](../../scripts/01-user-assigned-managed-identity.sh): creates the cluster using a user-assigned managed identity as its cluster identity.
+- [scripts/01-system-assigned-managed-identity.sh](../../../scripts/01-system-assigned-managed-identity.sh): creates the cluster using a system-assigned managed identity as its cluster identity.
+- [scripts/01-user-assigned-managed-identity.sh](../../../scripts/01-user-assigned-managed-identity.sh): creates the cluster using a user-assigned managed identity as its cluster identity.
 
 All commands below are run from this sample's `scripts/` folder.
 
 > LocalStack note: when running against the emulator, the `LOCALSTACK_URL` variable in [`00-variables.sh`](scripts/00-variables.sh) triggers installation of the LocalStack root CA so the app trusts the emulated endpoint. Set it to an empty value when targeting real Azure.
 
-> **Running on LocalStack?** Install the [lstk CLI](https://docs.localstack.cloud/aws/developer-tools/running-localstack/lstk/) and run `lstk az start-interception` to route Azure CLI calls to the emulator. See [Run against LocalStack](../../README.md#run-against-localstack) for the full setup.
+> **Running on LocalStack?** Install the [lstk CLI](https://docs.localstack.cloud/aws/developer-tools/running-localstack/lstk/) and run `lstk az start-interception` to route Azure CLI calls to the emulator. See [Run against LocalStack](../../../README.md#run-against-localstack) for the full setup.
 
 ## Architecture
 
diff --git a/samples/web-app-cosmosdb-nosql-api/images/architecture.png b/samples/web-app-cosmosdb-nosql-api/python/images/architecture.png
similarity index 100%
rename from samples/web-app-cosmosdb-nosql-api/images/architecture.png
rename to samples/web-app-cosmosdb-nosql-api/python/images/architecture.png
diff --git a/samples/web-app-cosmosdb-nosql-api/scripts/00-variables.sh b/samples/web-app-cosmosdb-nosql-api/python/scripts/00-variables.sh
similarity index 100%
rename from samples/web-app-cosmosdb-nosql-api/scripts/00-variables.sh
rename to samples/web-app-cosmosdb-nosql-api/python/scripts/00-variables.sh
diff --git a/samples/web-app-cosmosdb-nosql-api/scripts/01-deploy-resources.sh b/samples/web-app-cosmosdb-nosql-api/python/scripts/01-deploy-resources.sh
similarity index 100%
rename from samples/web-app-cosmosdb-nosql-api/scripts/01-deploy-resources.sh
rename to samples/web-app-cosmosdb-nosql-api/python/scripts/01-deploy-resources.sh
diff --git a/samples/web-app-cosmosdb-nosql-api/scripts/02-build-docker-image.sh b/samples/web-app-cosmosdb-nosql-api/python/scripts/02-build-docker-image.sh
similarity index 100%
rename from samples/web-app-cosmosdb-nosql-api/scripts/02-build-docker-image.sh
rename to samples/web-app-cosmosdb-nosql-api/python/scripts/02-build-docker-image.sh
diff --git a/samples/web-app-cosmosdb-nosql-api/scripts/03-run-docker-container.sh b/samples/web-app-cosmosdb-nosql-api/python/scripts/03-run-docker-container.sh
similarity index 100%
rename from samples/web-app-cosmosdb-nosql-api/scripts/03-run-docker-container.sh
rename to samples/web-app-cosmosdb-nosql-api/python/scripts/03-run-docker-container.sh
diff --git a/samples/web-app-cosmosdb-nosql-api/scripts/04-push-docker-image.sh b/samples/web-app-cosmosdb-nosql-api/python/scripts/04-push-docker-image.sh
similarity index 100%
rename from samples/web-app-cosmosdb-nosql-api/scripts/04-push-docker-image.sh
rename to samples/web-app-cosmosdb-nosql-api/python/scripts/04-push-docker-image.sh
diff --git a/samples/web-app-cosmosdb-nosql-api/scripts/05-deploy-app.sh b/samples/web-app-cosmosdb-nosql-api/python/scripts/05-deploy-app.sh
similarity index 100%
rename from samples/web-app-cosmosdb-nosql-api/scripts/05-deploy-app.sh
rename to samples/web-app-cosmosdb-nosql-api/python/scripts/05-deploy-app.sh
diff --git a/samples/web-app-cosmosdb-nosql-api/scripts/Dockerfile b/samples/web-app-cosmosdb-nosql-api/python/scripts/Dockerfile
similarity index 100%
rename from samples/web-app-cosmosdb-nosql-api/scripts/Dockerfile
rename to samples/web-app-cosmosdb-nosql-api/python/scripts/Dockerfile
diff --git a/samples/web-app-cosmosdb-nosql-api/scripts/configmap.yml b/samples/web-app-cosmosdb-nosql-api/python/scripts/configmap.yml
similarity index 100%
rename from samples/web-app-cosmosdb-nosql-api/scripts/configmap.yml
rename to samples/web-app-cosmosdb-nosql-api/python/scripts/configmap.yml
diff --git a/samples/web-app-cosmosdb-nosql-api/scripts/deployment.yml b/samples/web-app-cosmosdb-nosql-api/python/scripts/deployment.yml
similarity index 100%
rename from samples/web-app-cosmosdb-nosql-api/scripts/deployment.yml
rename to samples/web-app-cosmosdb-nosql-api/python/scripts/deployment.yml
diff --git a/samples/web-app-cosmosdb-nosql-api/scripts/namespace.yml b/samples/web-app-cosmosdb-nosql-api/python/scripts/namespace.yml
similarity index 100%
rename from samples/web-app-cosmosdb-nosql-api/scripts/namespace.yml
rename to samples/web-app-cosmosdb-nosql-api/python/scripts/namespace.yml
diff --git a/samples/web-app-cosmosdb-nosql-api/scripts/secret.yml b/samples/web-app-cosmosdb-nosql-api/python/scripts/secret.yml
similarity index 100%
rename from samples/web-app-cosmosdb-nosql-api/scripts/secret.yml
rename to samples/web-app-cosmosdb-nosql-api/python/scripts/secret.yml
diff --git a/samples/web-app-cosmosdb-nosql-api/scripts/service.yml b/samples/web-app-cosmosdb-nosql-api/python/scripts/service.yml
similarity index 100%
rename from samples/web-app-cosmosdb-nosql-api/scripts/service.yml
rename to samples/web-app-cosmosdb-nosql-api/python/scripts/service.yml
diff --git a/samples/web-app-cosmosdb-nosql-api/src/app.py b/samples/web-app-cosmosdb-nosql-api/python/src/app.py
similarity index 100%
rename from samples/web-app-cosmosdb-nosql-api/src/app.py
rename to samples/web-app-cosmosdb-nosql-api/python/src/app.py
diff --git a/samples/web-app-cosmosdb-nosql-api/src/cosmosdb_client.py b/samples/web-app-cosmosdb-nosql-api/python/src/cosmosdb_client.py
similarity index 100%
rename from samples/web-app-cosmosdb-nosql-api/src/cosmosdb_client.py
rename to samples/web-app-cosmosdb-nosql-api/python/src/cosmosdb_client.py
diff --git a/samples/web-app-cosmosdb-nosql-api/src/gunicorn.conf.py b/samples/web-app-cosmosdb-nosql-api/python/src/gunicorn.conf.py
similarity index 100%
rename from samples/web-app-cosmosdb-nosql-api/src/gunicorn.conf.py
rename to samples/web-app-cosmosdb-nosql-api/python/src/gunicorn.conf.py
diff --git a/samples/web-app-cosmosdb-nosql-api/src/requirements.txt b/samples/web-app-cosmosdb-nosql-api/python/src/requirements.txt
similarity index 100%
rename from samples/web-app-cosmosdb-nosql-api/src/requirements.txt
rename to samples/web-app-cosmosdb-nosql-api/python/src/requirements.txt
diff --git a/samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/css/bootstrap-grid.css b/samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/css/bootstrap-grid.css
similarity index 100%
rename from samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/css/bootstrap-grid.css
rename to samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/css/bootstrap-grid.css
diff --git a/samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/css/bootstrap-grid.css.map b/samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/css/bootstrap-grid.css.map
similarity index 100%
rename from samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/css/bootstrap-grid.css.map
rename to samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/css/bootstrap-grid.css.map
diff --git a/samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/css/bootstrap-grid.min.css b/samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/css/bootstrap-grid.min.css
similarity index 100%
rename from samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/css/bootstrap-grid.min.css
rename to samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/css/bootstrap-grid.min.css
diff --git a/samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/css/bootstrap-grid.min.css.map b/samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/css/bootstrap-grid.min.css.map
similarity index 100%
rename from samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/css/bootstrap-grid.min.css.map
rename to samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/css/bootstrap-grid.min.css.map
diff --git a/samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/css/bootstrap-grid.rtl.css b/samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/css/bootstrap-grid.rtl.css
similarity index 100%
rename from samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/css/bootstrap-grid.rtl.css
rename to samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/css/bootstrap-grid.rtl.css
diff --git a/samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/css/bootstrap-grid.rtl.css.map b/samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/css/bootstrap-grid.rtl.css.map
similarity index 100%
rename from samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/css/bootstrap-grid.rtl.css.map
rename to samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/css/bootstrap-grid.rtl.css.map
diff --git a/samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/css/bootstrap-grid.rtl.min.css b/samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/css/bootstrap-grid.rtl.min.css
similarity index 100%
rename from samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/css/bootstrap-grid.rtl.min.css
rename to samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/css/bootstrap-grid.rtl.min.css
diff --git a/samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/css/bootstrap-grid.rtl.min.css.map b/samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/css/bootstrap-grid.rtl.min.css.map
similarity index 100%
rename from samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/css/bootstrap-grid.rtl.min.css.map
rename to samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/css/bootstrap-grid.rtl.min.css.map
diff --git a/samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/css/bootstrap-reboot.css b/samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/css/bootstrap-reboot.css
similarity index 100%
rename from samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/css/bootstrap-reboot.css
rename to samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/css/bootstrap-reboot.css
diff --git a/samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/css/bootstrap-reboot.css.map b/samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/css/bootstrap-reboot.css.map
similarity index 100%
rename from samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/css/bootstrap-reboot.css.map
rename to samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/css/bootstrap-reboot.css.map
diff --git a/samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/css/bootstrap-reboot.min.css b/samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/css/bootstrap-reboot.min.css
similarity index 100%
rename from samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/css/bootstrap-reboot.min.css
rename to samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/css/bootstrap-reboot.min.css
diff --git a/samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/css/bootstrap-reboot.min.css.map b/samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/css/bootstrap-reboot.min.css.map
similarity index 100%
rename from samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/css/bootstrap-reboot.min.css.map
rename to samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/css/bootstrap-reboot.min.css.map
diff --git a/samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/css/bootstrap-reboot.rtl.css b/samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/css/bootstrap-reboot.rtl.css
similarity index 100%
rename from samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/css/bootstrap-reboot.rtl.css
rename to samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/css/bootstrap-reboot.rtl.css
diff --git a/samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/css/bootstrap-reboot.rtl.css.map b/samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/css/bootstrap-reboot.rtl.css.map
similarity index 100%
rename from samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/css/bootstrap-reboot.rtl.css.map
rename to samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/css/bootstrap-reboot.rtl.css.map
diff --git a/samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css b/samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css
similarity index 100%
rename from samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css
rename to samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css
diff --git a/samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css.map b/samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css.map
similarity index 100%
rename from samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css.map
rename to samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css.map
diff --git a/samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/css/bootstrap-utilities.css b/samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/css/bootstrap-utilities.css
similarity index 100%
rename from samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/css/bootstrap-utilities.css
rename to samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/css/bootstrap-utilities.css
diff --git a/samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/css/bootstrap-utilities.css.map b/samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/css/bootstrap-utilities.css.map
similarity index 100%
rename from samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/css/bootstrap-utilities.css.map
rename to samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/css/bootstrap-utilities.css.map
diff --git a/samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/css/bootstrap-utilities.min.css b/samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/css/bootstrap-utilities.min.css
similarity index 100%
rename from samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/css/bootstrap-utilities.min.css
rename to samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/css/bootstrap-utilities.min.css
diff --git a/samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/css/bootstrap-utilities.min.css.map b/samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/css/bootstrap-utilities.min.css.map
similarity index 100%
rename from samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/css/bootstrap-utilities.min.css.map
rename to samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/css/bootstrap-utilities.min.css.map
diff --git a/samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/css/bootstrap-utilities.rtl.css b/samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/css/bootstrap-utilities.rtl.css
similarity index 100%
rename from samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/css/bootstrap-utilities.rtl.css
rename to samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/css/bootstrap-utilities.rtl.css
diff --git a/samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/css/bootstrap-utilities.rtl.css.map b/samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/css/bootstrap-utilities.rtl.css.map
similarity index 100%
rename from samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/css/bootstrap-utilities.rtl.css.map
rename to samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/css/bootstrap-utilities.rtl.css.map
diff --git a/samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css b/samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css
similarity index 100%
rename from samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css
rename to samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css
diff --git a/samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css.map b/samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css.map
similarity index 100%
rename from samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css.map
rename to samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css.map
diff --git a/samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/css/bootstrap.css b/samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/css/bootstrap.css
similarity index 100%
rename from samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/css/bootstrap.css
rename to samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/css/bootstrap.css
diff --git a/samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/css/bootstrap.css.map b/samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/css/bootstrap.css.map
similarity index 100%
rename from samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/css/bootstrap.css.map
rename to samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/css/bootstrap.css.map
diff --git a/samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/css/bootstrap.min.css b/samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/css/bootstrap.min.css
similarity index 100%
rename from samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/css/bootstrap.min.css
rename to samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/css/bootstrap.min.css
diff --git a/samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/css/bootstrap.min.css.map b/samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/css/bootstrap.min.css.map
similarity index 100%
rename from samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/css/bootstrap.min.css.map
rename to samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/css/bootstrap.min.css.map
diff --git a/samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/css/bootstrap.rtl.css b/samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/css/bootstrap.rtl.css
similarity index 100%
rename from samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/css/bootstrap.rtl.css
rename to samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/css/bootstrap.rtl.css
diff --git a/samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/css/bootstrap.rtl.css.map b/samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/css/bootstrap.rtl.css.map
similarity index 100%
rename from samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/css/bootstrap.rtl.css.map
rename to samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/css/bootstrap.rtl.css.map
diff --git a/samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/css/bootstrap.rtl.min.css b/samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/css/bootstrap.rtl.min.css
similarity index 100%
rename from samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/css/bootstrap.rtl.min.css
rename to samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/css/bootstrap.rtl.min.css
diff --git a/samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/css/bootstrap.rtl.min.css.map b/samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/css/bootstrap.rtl.min.css.map
similarity index 100%
rename from samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/css/bootstrap.rtl.min.css.map
rename to samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/css/bootstrap.rtl.min.css.map
diff --git a/samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/js/bootstrap.bundle.js b/samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/js/bootstrap.bundle.js
similarity index 100%
rename from samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/js/bootstrap.bundle.js
rename to samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/js/bootstrap.bundle.js
diff --git a/samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/js/bootstrap.bundle.js.map b/samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/js/bootstrap.bundle.js.map
similarity index 100%
rename from samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/js/bootstrap.bundle.js.map
rename to samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/js/bootstrap.bundle.js.map
diff --git a/samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/js/bootstrap.bundle.min.js b/samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/js/bootstrap.bundle.min.js
similarity index 100%
rename from samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/js/bootstrap.bundle.min.js
rename to samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/js/bootstrap.bundle.min.js
diff --git a/samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/js/bootstrap.bundle.min.js.map b/samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/js/bootstrap.bundle.min.js.map
similarity index 100%
rename from samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/js/bootstrap.bundle.min.js.map
rename to samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/js/bootstrap.bundle.min.js.map
diff --git a/samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/js/bootstrap.esm.js b/samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/js/bootstrap.esm.js
similarity index 100%
rename from samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/js/bootstrap.esm.js
rename to samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/js/bootstrap.esm.js
diff --git a/samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/js/bootstrap.esm.js.map b/samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/js/bootstrap.esm.js.map
similarity index 100%
rename from samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/js/bootstrap.esm.js.map
rename to samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/js/bootstrap.esm.js.map
diff --git a/samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/js/bootstrap.esm.min.js b/samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/js/bootstrap.esm.min.js
similarity index 100%
rename from samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/js/bootstrap.esm.min.js
rename to samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/js/bootstrap.esm.min.js
diff --git a/samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/js/bootstrap.esm.min.js.map b/samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/js/bootstrap.esm.min.js.map
similarity index 100%
rename from samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/js/bootstrap.esm.min.js.map
rename to samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/js/bootstrap.esm.min.js.map
diff --git a/samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/js/bootstrap.js b/samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/js/bootstrap.js
similarity index 100%
rename from samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/js/bootstrap.js
rename to samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/js/bootstrap.js
diff --git a/samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/js/bootstrap.js.map b/samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/js/bootstrap.js.map
similarity index 100%
rename from samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/js/bootstrap.js.map
rename to samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/js/bootstrap.js.map
diff --git a/samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/js/bootstrap.min.js b/samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/js/bootstrap.min.js
similarity index 100%
rename from samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/js/bootstrap.min.js
rename to samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/js/bootstrap.min.js
diff --git a/samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/js/bootstrap.min.js.map b/samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/js/bootstrap.min.js.map
similarity index 100%
rename from samples/web-app-cosmosdb-nosql-api/src/static/bootstrap/js/bootstrap.min.js.map
rename to samples/web-app-cosmosdb-nosql-api/python/src/static/bootstrap/js/bootstrap.min.js.map
diff --git a/samples/web-app-cosmosdb-nosql-api/src/static/favicon.ico b/samples/web-app-cosmosdb-nosql-api/python/src/static/favicon.ico
similarity index 100%
rename from samples/web-app-cosmosdb-nosql-api/src/static/favicon.ico
rename to samples/web-app-cosmosdb-nosql-api/python/src/static/favicon.ico
diff --git a/samples/web-app-cosmosdb-nosql-api/src/static/style.css b/samples/web-app-cosmosdb-nosql-api/python/src/static/style.css
similarity index 100%
rename from samples/web-app-cosmosdb-nosql-api/src/static/style.css
rename to samples/web-app-cosmosdb-nosql-api/python/src/static/style.css
diff --git a/samples/web-app-cosmosdb-nosql-api/src/templates/index.html b/samples/web-app-cosmosdb-nosql-api/python/src/templates/index.html
similarity index 100%
rename from samples/web-app-cosmosdb-nosql-api/src/templates/index.html
rename to samples/web-app-cosmosdb-nosql-api/python/src/templates/index.html
diff --git a/samples/web-app-file-storage/README.md b/samples/web-app-file-storage/python/README.md
similarity index 96%
rename from samples/web-app-file-storage/README.md
rename to samples/web-app-file-storage/python/README.md
index 5f3ff24..5e40d09 100644
--- a/samples/web-app-file-storage/README.md
+++ b/samples/web-app-file-storage/python/README.md
@@ -1,5 +1,7 @@
 # Vacation Planner: Azure Files
 
+> A .NET version of this sample lives in [../dotnet](../dotnet/README.md).
+
 This sample demonstrates a Python Flask single-page web application called *Vacation Planner* hosted on an [Azure Kubernetes Service (AKS)](https://learn.microsoft.com/en-us/azure/aks/what-is-aks) cluster in the cloud on Azure or locally in the LocalStack emulator for Azure. The app runs in a dedicated namespace and stores each activity as a text file on an [Azure Files](https://learn.microsoft.com/en-us/azure/storage/files/storage-files-introduction) share, mounted into every pod by the [Azure Files CSI driver](https://learn.microsoft.com/en-us/azure/aks/azure-files-csi).
 
 Unlike every other sample in this repository, the app uses **no Azure SDK at all**: no client library, no connection string, no account key, not a single line of authentication code. It calls `open()`, `os.listdir()` and `os.remove()` on a directory, and the CSI driver turns that directory into an Azure file share. That is the point of the sample, and it is what makes Azure Files the shortest path to persistence for an application that already speaks the file system.
@@ -8,14 +10,14 @@ The three replicas of the deployment mount the same share at the same time (`Rea
 
 Before installing the sample, make sure to create an [Azure Kubernetes Service (AKS)](https://learn.microsoft.com/en-us/azure/aks/what-is-aks) cluster by using one of the following scripts:
 
-- [scripts/01-system-assigned-managed-identity.sh](../../scripts/01-system-assigned-managed-identity.sh): creates the cluster using a system-assigned managed identity as its cluster identity.
-- [scripts/01-user-assigned-managed-identity.sh](../../scripts/01-user-assigned-managed-identity.sh): creates the cluster using a user-assigned managed identity as its cluster identity.
+- [scripts/01-system-assigned-managed-identity.sh](../../../scripts/01-system-assigned-managed-identity.sh): creates the cluster using a system-assigned managed identity as its cluster identity.
+- [scripts/01-user-assigned-managed-identity.sh](../../../scripts/01-user-assigned-managed-identity.sh): creates the cluster using a user-assigned managed identity as its cluster identity.
 
 Both scripts check that the Azure Files CSI driver and the CSI snapshot controller are enabled on the cluster, and enable the `Microsoft.Storage` service endpoint on the node subnets, which an NFS share requires. They print the cluster's `storageProfile` and its storage classes when they are done.
 
 All commands below are run from this sample's `scripts/` folder.
 
-> **Running on LocalStack?** Install the [lstk CLI](https://docs.localstack.cloud/aws/developer-tools/running-localstack/lstk/) and run `lstk az start-interception` to route Azure CLI calls to the emulator. See [Run against LocalStack](../../README.md#run-against-localstack) for the full setup.
+> **Running on LocalStack?** Install the [lstk CLI](https://docs.localstack.cloud/aws/developer-tools/running-localstack/lstk/) and run `lstk az start-interception` to route Azure CLI calls to the emulator. See [Run against LocalStack](../../../README.md#run-against-localstack) for the full setup.
 
 ## Architecture
 
diff --git a/samples/web-app-file-storage/images/architecture.png b/samples/web-app-file-storage/python/images/architecture.png
similarity index 100%
rename from samples/web-app-file-storage/images/architecture.png
rename to samples/web-app-file-storage/python/images/architecture.png
diff --git a/samples/web-app-file-storage/scripts/00-variables.sh b/samples/web-app-file-storage/python/scripts/00-variables.sh
similarity index 100%
rename from samples/web-app-file-storage/scripts/00-variables.sh
rename to samples/web-app-file-storage/python/scripts/00-variables.sh
diff --git a/samples/web-app-file-storage/scripts/01-deploy-resources.sh b/samples/web-app-file-storage/python/scripts/01-deploy-resources.sh
similarity index 100%
rename from samples/web-app-file-storage/scripts/01-deploy-resources.sh
rename to samples/web-app-file-storage/python/scripts/01-deploy-resources.sh
diff --git a/samples/web-app-file-storage/scripts/02-build-docker-image.sh b/samples/web-app-file-storage/python/scripts/02-build-docker-image.sh
similarity index 100%
rename from samples/web-app-file-storage/scripts/02-build-docker-image.sh
rename to samples/web-app-file-storage/python/scripts/02-build-docker-image.sh
diff --git a/samples/web-app-file-storage/scripts/03-run-docker-container.sh b/samples/web-app-file-storage/python/scripts/03-run-docker-container.sh
similarity index 100%
rename from samples/web-app-file-storage/scripts/03-run-docker-container.sh
rename to samples/web-app-file-storage/python/scripts/03-run-docker-container.sh
diff --git a/samples/web-app-file-storage/scripts/04-push-docker-image.sh b/samples/web-app-file-storage/python/scripts/04-push-docker-image.sh
similarity index 100%
rename from samples/web-app-file-storage/scripts/04-push-docker-image.sh
rename to samples/web-app-file-storage/python/scripts/04-push-docker-image.sh
diff --git a/samples/web-app-file-storage/scripts/05-deploy-app.sh b/samples/web-app-file-storage/python/scripts/05-deploy-app.sh
similarity index 100%
rename from samples/web-app-file-storage/scripts/05-deploy-app.sh
rename to samples/web-app-file-storage/python/scripts/05-deploy-app.sh
diff --git a/samples/web-app-file-storage/scripts/Dockerfile b/samples/web-app-file-storage/python/scripts/Dockerfile
similarity index 100%
rename from samples/web-app-file-storage/scripts/Dockerfile
rename to samples/web-app-file-storage/python/scripts/Dockerfile
diff --git a/samples/web-app-file-storage/scripts/configmap.yml b/samples/web-app-file-storage/python/scripts/configmap.yml
similarity index 100%
rename from samples/web-app-file-storage/scripts/configmap.yml
rename to samples/web-app-file-storage/python/scripts/configmap.yml
diff --git a/samples/web-app-file-storage/scripts/deployment.yml b/samples/web-app-file-storage/python/scripts/deployment.yml
similarity index 100%
rename from samples/web-app-file-storage/scripts/deployment.yml
rename to samples/web-app-file-storage/python/scripts/deployment.yml
diff --git a/samples/web-app-file-storage/scripts/namespace.yml b/samples/web-app-file-storage/python/scripts/namespace.yml
similarity index 100%
rename from samples/web-app-file-storage/scripts/namespace.yml
rename to samples/web-app-file-storage/python/scripts/namespace.yml
diff --git a/samples/web-app-file-storage/scripts/persistentvolume-nfs.yml b/samples/web-app-file-storage/python/scripts/persistentvolume-nfs.yml
similarity index 100%
rename from samples/web-app-file-storage/scripts/persistentvolume-nfs.yml
rename to samples/web-app-file-storage/python/scripts/persistentvolume-nfs.yml
diff --git a/samples/web-app-file-storage/scripts/persistentvolume-smb.yml b/samples/web-app-file-storage/python/scripts/persistentvolume-smb.yml
similarity index 100%
rename from samples/web-app-file-storage/scripts/persistentvolume-smb.yml
rename to samples/web-app-file-storage/python/scripts/persistentvolume-smb.yml
diff --git a/samples/web-app-file-storage/scripts/persistentvolumeclaim.yml b/samples/web-app-file-storage/python/scripts/persistentvolumeclaim.yml
similarity index 100%
rename from samples/web-app-file-storage/scripts/persistentvolumeclaim.yml
rename to samples/web-app-file-storage/python/scripts/persistentvolumeclaim.yml
diff --git a/samples/web-app-file-storage/scripts/secret.yml b/samples/web-app-file-storage/python/scripts/secret.yml
similarity index 100%
rename from samples/web-app-file-storage/scripts/secret.yml
rename to samples/web-app-file-storage/python/scripts/secret.yml
diff --git a/samples/web-app-file-storage/scripts/seed-configmap.yml b/samples/web-app-file-storage/python/scripts/seed-configmap.yml
similarity index 100%
rename from samples/web-app-file-storage/scripts/seed-configmap.yml
rename to samples/web-app-file-storage/python/scripts/seed-configmap.yml
diff --git a/samples/web-app-file-storage/scripts/service.yml b/samples/web-app-file-storage/python/scripts/service.yml
similarity index 100%
rename from samples/web-app-file-storage/scripts/service.yml
rename to samples/web-app-file-storage/python/scripts/service.yml
diff --git a/samples/web-app-file-storage/scripts/storage-secret.yml b/samples/web-app-file-storage/python/scripts/storage-secret.yml
similarity index 100%
rename from samples/web-app-file-storage/scripts/storage-secret.yml
rename to samples/web-app-file-storage/python/scripts/storage-secret.yml
diff --git a/samples/web-app-file-storage/scripts/storageclass-nfs.yml b/samples/web-app-file-storage/python/scripts/storageclass-nfs.yml
similarity index 100%
rename from samples/web-app-file-storage/scripts/storageclass-nfs.yml
rename to samples/web-app-file-storage/python/scripts/storageclass-nfs.yml
diff --git a/samples/web-app-file-storage/src/app.py b/samples/web-app-file-storage/python/src/app.py
similarity index 100%
rename from samples/web-app-file-storage/src/app.py
rename to samples/web-app-file-storage/python/src/app.py
diff --git a/samples/web-app-file-storage/src/gunicorn.conf.py b/samples/web-app-file-storage/python/src/gunicorn.conf.py
similarity index 100%
rename from samples/web-app-file-storage/src/gunicorn.conf.py
rename to samples/web-app-file-storage/python/src/gunicorn.conf.py
diff --git a/samples/web-app-file-storage/src/requirements.txt b/samples/web-app-file-storage/python/src/requirements.txt
similarity index 100%
rename from samples/web-app-file-storage/src/requirements.txt
rename to samples/web-app-file-storage/python/src/requirements.txt
diff --git a/samples/web-app-file-storage/src/static/bootstrap/css/bootstrap-grid.css b/samples/web-app-file-storage/python/src/static/bootstrap/css/bootstrap-grid.css
similarity index 100%
rename from samples/web-app-file-storage/src/static/bootstrap/css/bootstrap-grid.css
rename to samples/web-app-file-storage/python/src/static/bootstrap/css/bootstrap-grid.css
diff --git a/samples/web-app-file-storage/src/static/bootstrap/css/bootstrap-grid.css.map b/samples/web-app-file-storage/python/src/static/bootstrap/css/bootstrap-grid.css.map
similarity index 100%
rename from samples/web-app-file-storage/src/static/bootstrap/css/bootstrap-grid.css.map
rename to samples/web-app-file-storage/python/src/static/bootstrap/css/bootstrap-grid.css.map
diff --git a/samples/web-app-file-storage/src/static/bootstrap/css/bootstrap-grid.min.css b/samples/web-app-file-storage/python/src/static/bootstrap/css/bootstrap-grid.min.css
similarity index 100%
rename from samples/web-app-file-storage/src/static/bootstrap/css/bootstrap-grid.min.css
rename to samples/web-app-file-storage/python/src/static/bootstrap/css/bootstrap-grid.min.css
diff --git a/samples/web-app-file-storage/src/static/bootstrap/css/bootstrap-grid.min.css.map b/samples/web-app-file-storage/python/src/static/bootstrap/css/bootstrap-grid.min.css.map
similarity index 100%
rename from samples/web-app-file-storage/src/static/bootstrap/css/bootstrap-grid.min.css.map
rename to samples/web-app-file-storage/python/src/static/bootstrap/css/bootstrap-grid.min.css.map
diff --git a/samples/web-app-file-storage/src/static/bootstrap/css/bootstrap-grid.rtl.css b/samples/web-app-file-storage/python/src/static/bootstrap/css/bootstrap-grid.rtl.css
similarity index 100%
rename from samples/web-app-file-storage/src/static/bootstrap/css/bootstrap-grid.rtl.css
rename to samples/web-app-file-storage/python/src/static/bootstrap/css/bootstrap-grid.rtl.css
diff --git a/samples/web-app-file-storage/src/static/bootstrap/css/bootstrap-grid.rtl.css.map b/samples/web-app-file-storage/python/src/static/bootstrap/css/bootstrap-grid.rtl.css.map
similarity index 100%
rename from samples/web-app-file-storage/src/static/bootstrap/css/bootstrap-grid.rtl.css.map
rename to samples/web-app-file-storage/python/src/static/bootstrap/css/bootstrap-grid.rtl.css.map
diff --git a/samples/web-app-file-storage/src/static/bootstrap/css/bootstrap-grid.rtl.min.css b/samples/web-app-file-storage/python/src/static/bootstrap/css/bootstrap-grid.rtl.min.css
similarity index 100%
rename from samples/web-app-file-storage/src/static/bootstrap/css/bootstrap-grid.rtl.min.css
rename to samples/web-app-file-storage/python/src/static/bootstrap/css/bootstrap-grid.rtl.min.css
diff --git a/samples/web-app-file-storage/src/static/bootstrap/css/bootstrap-grid.rtl.min.css.map b/samples/web-app-file-storage/python/src/static/bootstrap/css/bootstrap-grid.rtl.min.css.map
similarity index 100%
rename from samples/web-app-file-storage/src/static/bootstrap/css/bootstrap-grid.rtl.min.css.map
rename to samples/web-app-file-storage/python/src/static/bootstrap/css/bootstrap-grid.rtl.min.css.map
diff --git a/samples/web-app-file-storage/src/static/bootstrap/css/bootstrap-reboot.css b/samples/web-app-file-storage/python/src/static/bootstrap/css/bootstrap-reboot.css
similarity index 100%
rename from samples/web-app-file-storage/src/static/bootstrap/css/bootstrap-reboot.css
rename to samples/web-app-file-storage/python/src/static/bootstrap/css/bootstrap-reboot.css
diff --git a/samples/web-app-file-storage/src/static/bootstrap/css/bootstrap-reboot.css.map b/samples/web-app-file-storage/python/src/static/bootstrap/css/bootstrap-reboot.css.map
similarity index 100%
rename from samples/web-app-file-storage/src/static/bootstrap/css/bootstrap-reboot.css.map
rename to samples/web-app-file-storage/python/src/static/bootstrap/css/bootstrap-reboot.css.map
diff --git a/samples/web-app-file-storage/src/static/bootstrap/css/bootstrap-reboot.min.css b/samples/web-app-file-storage/python/src/static/bootstrap/css/bootstrap-reboot.min.css
similarity index 100%
rename from samples/web-app-file-storage/src/static/bootstrap/css/bootstrap-reboot.min.css
rename to samples/web-app-file-storage/python/src/static/bootstrap/css/bootstrap-reboot.min.css
diff --git a/samples/web-app-file-storage/src/static/bootstrap/css/bootstrap-reboot.min.css.map b/samples/web-app-file-storage/python/src/static/bootstrap/css/bootstrap-reboot.min.css.map
similarity index 100%
rename from samples/web-app-file-storage/src/static/bootstrap/css/bootstrap-reboot.min.css.map
rename to samples/web-app-file-storage/python/src/static/bootstrap/css/bootstrap-reboot.min.css.map
diff --git a/samples/web-app-file-storage/src/static/bootstrap/css/bootstrap-reboot.rtl.css b/samples/web-app-file-storage/python/src/static/bootstrap/css/bootstrap-reboot.rtl.css
similarity index 100%
rename from samples/web-app-file-storage/src/static/bootstrap/css/bootstrap-reboot.rtl.css
rename to samples/web-app-file-storage/python/src/static/bootstrap/css/bootstrap-reboot.rtl.css
diff --git a/samples/web-app-file-storage/src/static/bootstrap/css/bootstrap-reboot.rtl.css.map b/samples/web-app-file-storage/python/src/static/bootstrap/css/bootstrap-reboot.rtl.css.map
similarity index 100%
rename from samples/web-app-file-storage/src/static/bootstrap/css/bootstrap-reboot.rtl.css.map
rename to samples/web-app-file-storage/python/src/static/bootstrap/css/bootstrap-reboot.rtl.css.map
diff --git a/samples/web-app-file-storage/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css b/samples/web-app-file-storage/python/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css
similarity index 100%
rename from samples/web-app-file-storage/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css
rename to samples/web-app-file-storage/python/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css
diff --git a/samples/web-app-file-storage/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css.map b/samples/web-app-file-storage/python/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css.map
similarity index 100%
rename from samples/web-app-file-storage/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css.map
rename to samples/web-app-file-storage/python/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css.map
diff --git a/samples/web-app-file-storage/src/static/bootstrap/css/bootstrap-utilities.css b/samples/web-app-file-storage/python/src/static/bootstrap/css/bootstrap-utilities.css
similarity index 100%
rename from samples/web-app-file-storage/src/static/bootstrap/css/bootstrap-utilities.css
rename to samples/web-app-file-storage/python/src/static/bootstrap/css/bootstrap-utilities.css
diff --git a/samples/web-app-file-storage/src/static/bootstrap/css/bootstrap-utilities.css.map b/samples/web-app-file-storage/python/src/static/bootstrap/css/bootstrap-utilities.css.map
similarity index 100%
rename from samples/web-app-file-storage/src/static/bootstrap/css/bootstrap-utilities.css.map
rename to samples/web-app-file-storage/python/src/static/bootstrap/css/bootstrap-utilities.css.map
diff --git a/samples/web-app-file-storage/src/static/bootstrap/css/bootstrap-utilities.min.css b/samples/web-app-file-storage/python/src/static/bootstrap/css/bootstrap-utilities.min.css
similarity index 100%
rename from samples/web-app-file-storage/src/static/bootstrap/css/bootstrap-utilities.min.css
rename to samples/web-app-file-storage/python/src/static/bootstrap/css/bootstrap-utilities.min.css
diff --git a/samples/web-app-file-storage/src/static/bootstrap/css/bootstrap-utilities.min.css.map b/samples/web-app-file-storage/python/src/static/bootstrap/css/bootstrap-utilities.min.css.map
similarity index 100%
rename from samples/web-app-file-storage/src/static/bootstrap/css/bootstrap-utilities.min.css.map
rename to samples/web-app-file-storage/python/src/static/bootstrap/css/bootstrap-utilities.min.css.map
diff --git a/samples/web-app-file-storage/src/static/bootstrap/css/bootstrap-utilities.rtl.css b/samples/web-app-file-storage/python/src/static/bootstrap/css/bootstrap-utilities.rtl.css
similarity index 100%
rename from samples/web-app-file-storage/src/static/bootstrap/css/bootstrap-utilities.rtl.css
rename to samples/web-app-file-storage/python/src/static/bootstrap/css/bootstrap-utilities.rtl.css
diff --git a/samples/web-app-file-storage/src/static/bootstrap/css/bootstrap-utilities.rtl.css.map b/samples/web-app-file-storage/python/src/static/bootstrap/css/bootstrap-utilities.rtl.css.map
similarity index 100%
rename from samples/web-app-file-storage/src/static/bootstrap/css/bootstrap-utilities.rtl.css.map
rename to samples/web-app-file-storage/python/src/static/bootstrap/css/bootstrap-utilities.rtl.css.map
diff --git a/samples/web-app-file-storage/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css b/samples/web-app-file-storage/python/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css
similarity index 100%
rename from samples/web-app-file-storage/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css
rename to samples/web-app-file-storage/python/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css
diff --git a/samples/web-app-file-storage/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css.map b/samples/web-app-file-storage/python/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css.map
similarity index 100%
rename from samples/web-app-file-storage/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css.map
rename to samples/web-app-file-storage/python/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css.map
diff --git a/samples/web-app-file-storage/src/static/bootstrap/css/bootstrap.css b/samples/web-app-file-storage/python/src/static/bootstrap/css/bootstrap.css
similarity index 100%
rename from samples/web-app-file-storage/src/static/bootstrap/css/bootstrap.css
rename to samples/web-app-file-storage/python/src/static/bootstrap/css/bootstrap.css
diff --git a/samples/web-app-file-storage/src/static/bootstrap/css/bootstrap.css.map b/samples/web-app-file-storage/python/src/static/bootstrap/css/bootstrap.css.map
similarity index 100%
rename from samples/web-app-file-storage/src/static/bootstrap/css/bootstrap.css.map
rename to samples/web-app-file-storage/python/src/static/bootstrap/css/bootstrap.css.map
diff --git a/samples/web-app-file-storage/src/static/bootstrap/css/bootstrap.min.css b/samples/web-app-file-storage/python/src/static/bootstrap/css/bootstrap.min.css
similarity index 100%
rename from samples/web-app-file-storage/src/static/bootstrap/css/bootstrap.min.css
rename to samples/web-app-file-storage/python/src/static/bootstrap/css/bootstrap.min.css
diff --git a/samples/web-app-file-storage/src/static/bootstrap/css/bootstrap.min.css.map b/samples/web-app-file-storage/python/src/static/bootstrap/css/bootstrap.min.css.map
similarity index 100%
rename from samples/web-app-file-storage/src/static/bootstrap/css/bootstrap.min.css.map
rename to samples/web-app-file-storage/python/src/static/bootstrap/css/bootstrap.min.css.map
diff --git a/samples/web-app-file-storage/src/static/bootstrap/css/bootstrap.rtl.css b/samples/web-app-file-storage/python/src/static/bootstrap/css/bootstrap.rtl.css
similarity index 100%
rename from samples/web-app-file-storage/src/static/bootstrap/css/bootstrap.rtl.css
rename to samples/web-app-file-storage/python/src/static/bootstrap/css/bootstrap.rtl.css
diff --git a/samples/web-app-file-storage/src/static/bootstrap/css/bootstrap.rtl.css.map b/samples/web-app-file-storage/python/src/static/bootstrap/css/bootstrap.rtl.css.map
similarity index 100%
rename from samples/web-app-file-storage/src/static/bootstrap/css/bootstrap.rtl.css.map
rename to samples/web-app-file-storage/python/src/static/bootstrap/css/bootstrap.rtl.css.map
diff --git a/samples/web-app-file-storage/src/static/bootstrap/css/bootstrap.rtl.min.css b/samples/web-app-file-storage/python/src/static/bootstrap/css/bootstrap.rtl.min.css
similarity index 100%
rename from samples/web-app-file-storage/src/static/bootstrap/css/bootstrap.rtl.min.css
rename to samples/web-app-file-storage/python/src/static/bootstrap/css/bootstrap.rtl.min.css
diff --git a/samples/web-app-file-storage/src/static/bootstrap/css/bootstrap.rtl.min.css.map b/samples/web-app-file-storage/python/src/static/bootstrap/css/bootstrap.rtl.min.css.map
similarity index 100%
rename from samples/web-app-file-storage/src/static/bootstrap/css/bootstrap.rtl.min.css.map
rename to samples/web-app-file-storage/python/src/static/bootstrap/css/bootstrap.rtl.min.css.map
diff --git a/samples/web-app-file-storage/src/static/bootstrap/js/bootstrap.bundle.js b/samples/web-app-file-storage/python/src/static/bootstrap/js/bootstrap.bundle.js
similarity index 100%
rename from samples/web-app-file-storage/src/static/bootstrap/js/bootstrap.bundle.js
rename to samples/web-app-file-storage/python/src/static/bootstrap/js/bootstrap.bundle.js
diff --git a/samples/web-app-file-storage/src/static/bootstrap/js/bootstrap.bundle.js.map b/samples/web-app-file-storage/python/src/static/bootstrap/js/bootstrap.bundle.js.map
similarity index 100%
rename from samples/web-app-file-storage/src/static/bootstrap/js/bootstrap.bundle.js.map
rename to samples/web-app-file-storage/python/src/static/bootstrap/js/bootstrap.bundle.js.map
diff --git a/samples/web-app-file-storage/src/static/bootstrap/js/bootstrap.bundle.min.js b/samples/web-app-file-storage/python/src/static/bootstrap/js/bootstrap.bundle.min.js
similarity index 100%
rename from samples/web-app-file-storage/src/static/bootstrap/js/bootstrap.bundle.min.js
rename to samples/web-app-file-storage/python/src/static/bootstrap/js/bootstrap.bundle.min.js
diff --git a/samples/web-app-file-storage/src/static/bootstrap/js/bootstrap.bundle.min.js.map b/samples/web-app-file-storage/python/src/static/bootstrap/js/bootstrap.bundle.min.js.map
similarity index 100%
rename from samples/web-app-file-storage/src/static/bootstrap/js/bootstrap.bundle.min.js.map
rename to samples/web-app-file-storage/python/src/static/bootstrap/js/bootstrap.bundle.min.js.map
diff --git a/samples/web-app-file-storage/src/static/bootstrap/js/bootstrap.esm.js b/samples/web-app-file-storage/python/src/static/bootstrap/js/bootstrap.esm.js
similarity index 100%
rename from samples/web-app-file-storage/src/static/bootstrap/js/bootstrap.esm.js
rename to samples/web-app-file-storage/python/src/static/bootstrap/js/bootstrap.esm.js
diff --git a/samples/web-app-file-storage/src/static/bootstrap/js/bootstrap.esm.js.map b/samples/web-app-file-storage/python/src/static/bootstrap/js/bootstrap.esm.js.map
similarity index 100%
rename from samples/web-app-file-storage/src/static/bootstrap/js/bootstrap.esm.js.map
rename to samples/web-app-file-storage/python/src/static/bootstrap/js/bootstrap.esm.js.map
diff --git a/samples/web-app-file-storage/src/static/bootstrap/js/bootstrap.esm.min.js b/samples/web-app-file-storage/python/src/static/bootstrap/js/bootstrap.esm.min.js
similarity index 100%
rename from samples/web-app-file-storage/src/static/bootstrap/js/bootstrap.esm.min.js
rename to samples/web-app-file-storage/python/src/static/bootstrap/js/bootstrap.esm.min.js
diff --git a/samples/web-app-file-storage/src/static/bootstrap/js/bootstrap.esm.min.js.map b/samples/web-app-file-storage/python/src/static/bootstrap/js/bootstrap.esm.min.js.map
similarity index 100%
rename from samples/web-app-file-storage/src/static/bootstrap/js/bootstrap.esm.min.js.map
rename to samples/web-app-file-storage/python/src/static/bootstrap/js/bootstrap.esm.min.js.map
diff --git a/samples/web-app-file-storage/src/static/bootstrap/js/bootstrap.js b/samples/web-app-file-storage/python/src/static/bootstrap/js/bootstrap.js
similarity index 100%
rename from samples/web-app-file-storage/src/static/bootstrap/js/bootstrap.js
rename to samples/web-app-file-storage/python/src/static/bootstrap/js/bootstrap.js
diff --git a/samples/web-app-file-storage/src/static/bootstrap/js/bootstrap.js.map b/samples/web-app-file-storage/python/src/static/bootstrap/js/bootstrap.js.map
similarity index 100%
rename from samples/web-app-file-storage/src/static/bootstrap/js/bootstrap.js.map
rename to samples/web-app-file-storage/python/src/static/bootstrap/js/bootstrap.js.map
diff --git a/samples/web-app-file-storage/src/static/bootstrap/js/bootstrap.min.js b/samples/web-app-file-storage/python/src/static/bootstrap/js/bootstrap.min.js
similarity index 100%
rename from samples/web-app-file-storage/src/static/bootstrap/js/bootstrap.min.js
rename to samples/web-app-file-storage/python/src/static/bootstrap/js/bootstrap.min.js
diff --git a/samples/web-app-file-storage/src/static/bootstrap/js/bootstrap.min.js.map b/samples/web-app-file-storage/python/src/static/bootstrap/js/bootstrap.min.js.map
similarity index 100%
rename from samples/web-app-file-storage/src/static/bootstrap/js/bootstrap.min.js.map
rename to samples/web-app-file-storage/python/src/static/bootstrap/js/bootstrap.min.js.map
diff --git a/samples/web-app-file-storage/src/static/favicon.ico b/samples/web-app-file-storage/python/src/static/favicon.ico
similarity index 100%
rename from samples/web-app-file-storage/src/static/favicon.ico
rename to samples/web-app-file-storage/python/src/static/favicon.ico
diff --git a/samples/web-app-file-storage/src/static/style.css b/samples/web-app-file-storage/python/src/static/style.css
similarity index 100%
rename from samples/web-app-file-storage/src/static/style.css
rename to samples/web-app-file-storage/python/src/static/style.css
diff --git a/samples/web-app-file-storage/src/templates/index.html b/samples/web-app-file-storage/python/src/templates/index.html
similarity index 100%
rename from samples/web-app-file-storage/src/templates/index.html
rename to samples/web-app-file-storage/python/src/templates/index.html
diff --git a/samples/web-app-in-cluster-postgresql/README.md b/samples/web-app-in-cluster-postgresql/python/README.md
similarity index 91%
rename from samples/web-app-in-cluster-postgresql/README.md
rename to samples/web-app-in-cluster-postgresql/python/README.md
index 1083765..23d811f 100644
--- a/samples/web-app-in-cluster-postgresql/README.md
+++ b/samples/web-app-in-cluster-postgresql/python/README.md
@@ -1,17 +1,19 @@
 # Vacation Planner: in-cluster PostgreSQL
 
+> A .NET version of this sample lives in [../dotnet](../dotnet/README.md).
+
 This sample demonstrates a Python Flask single-page web application called *Vacation Planner* hosted on an [Azure Kubernetes Service (AKS)](https://learn.microsoft.com/en-us/azure/aks/what-is-aks) cluster in the cloud on Azure or locally in the LocalStack emulator for Azure. The app runs in a dedicated namespace and stores activity data in the `activities` table of the `PlannerDB` database on an **in-cluster PostgreSQL database** — a primary plus two streaming-replica pods deployed as a Kubernetes [StatefulSet](https://kubernetes.io/docs/concepts/workloads/controllers/statefulset/), rather than a managed service such as Azure Database for PostgreSQL flexible server.
 
 The database runs entirely inside the cluster: PostgreSQL 16 pods are backed by Azure managed-disk `PersistentVolumeClaim`s, and they are exposed through three `ClusterIP` services — a headless service for stable per-pod DNS, a *primary* (write) endpoint targeting the pod-0 leader, and a *read* endpoint that round-robins across all replicas. The application connects to the primary (write) endpoint using a dedicated application user (`testuser`) rather than the `postgres` superuser, and the deployment seeds the `activities` table with a handful of sample plans so the app shows data on first load.
 
 Before installing the sample, make sure to create an [Azure Kubernetes Service (AKS)](https://learn.microsoft.com/en-us/azure/aks/what-is-aks) cluster by using one of the following scripts:
 
-- [scripts/01-system-assigned-managed-identity.sh](../../scripts/01-system-assigned-managed-identity.sh): creates the cluster using a system-assigned managed identity as its cluster identity.
-- [scripts/01-user-assigned-managed-identity.sh](../../scripts/01-user-assigned-managed-identity.sh): creates the cluster using a user-assigned managed identity as its cluster identity.
+- [scripts/01-system-assigned-managed-identity.sh](../../../scripts/01-system-assigned-managed-identity.sh): creates the cluster using a system-assigned managed identity as its cluster identity.
+- [scripts/01-user-assigned-managed-identity.sh](../../../scripts/01-user-assigned-managed-identity.sh): creates the cluster using a user-assigned managed identity as its cluster identity.
 
 All commands below are run from this sample's `scripts/` folder.
 
-> **Running on LocalStack?** Install the [lstk CLI](https://docs.localstack.cloud/aws/developer-tools/running-localstack/lstk/) and run `lstk az start-interception` to route Azure CLI calls to the emulator. See [Run against LocalStack](../../README.md#run-against-localstack) for the full setup.
+> **Running on LocalStack?** Install the [lstk CLI](https://docs.localstack.cloud/aws/developer-tools/running-localstack/lstk/) and run `lstk az start-interception` to route Azure CLI calls to the emulator. See [Run against LocalStack](../../../README.md#run-against-localstack) for the full setup.
 
 ## Architecture
 
diff --git a/samples/web-app-in-cluster-postgresql/images/architecture.png b/samples/web-app-in-cluster-postgresql/python/images/architecture.png
similarity index 100%
rename from samples/web-app-in-cluster-postgresql/images/architecture.png
rename to samples/web-app-in-cluster-postgresql/python/images/architecture.png
diff --git a/samples/web-app-in-cluster-postgresql/scripts/00-variables.sh b/samples/web-app-in-cluster-postgresql/python/scripts/00-variables.sh
similarity index 100%
rename from samples/web-app-in-cluster-postgresql/scripts/00-variables.sh
rename to samples/web-app-in-cluster-postgresql/python/scripts/00-variables.sh
diff --git a/samples/web-app-in-cluster-postgresql/scripts/01-deploy-resources.sh b/samples/web-app-in-cluster-postgresql/python/scripts/01-deploy-resources.sh
similarity index 100%
rename from samples/web-app-in-cluster-postgresql/scripts/01-deploy-resources.sh
rename to samples/web-app-in-cluster-postgresql/python/scripts/01-deploy-resources.sh
diff --git a/samples/web-app-in-cluster-postgresql/scripts/02-build-docker-image.sh b/samples/web-app-in-cluster-postgresql/python/scripts/02-build-docker-image.sh
similarity index 100%
rename from samples/web-app-in-cluster-postgresql/scripts/02-build-docker-image.sh
rename to samples/web-app-in-cluster-postgresql/python/scripts/02-build-docker-image.sh
diff --git a/samples/web-app-in-cluster-postgresql/scripts/03-run-docker-container.sh b/samples/web-app-in-cluster-postgresql/python/scripts/03-run-docker-container.sh
similarity index 100%
rename from samples/web-app-in-cluster-postgresql/scripts/03-run-docker-container.sh
rename to samples/web-app-in-cluster-postgresql/python/scripts/03-run-docker-container.sh
diff --git a/samples/web-app-in-cluster-postgresql/scripts/04-push-docker-image.sh b/samples/web-app-in-cluster-postgresql/python/scripts/04-push-docker-image.sh
similarity index 100%
rename from samples/web-app-in-cluster-postgresql/scripts/04-push-docker-image.sh
rename to samples/web-app-in-cluster-postgresql/python/scripts/04-push-docker-image.sh
diff --git a/samples/web-app-in-cluster-postgresql/scripts/05-deploy-app.sh b/samples/web-app-in-cluster-postgresql/python/scripts/05-deploy-app.sh
similarity index 100%
rename from samples/web-app-in-cluster-postgresql/scripts/05-deploy-app.sh
rename to samples/web-app-in-cluster-postgresql/python/scripts/05-deploy-app.sh
diff --git a/samples/web-app-in-cluster-postgresql/scripts/Dockerfile b/samples/web-app-in-cluster-postgresql/python/scripts/Dockerfile
similarity index 100%
rename from samples/web-app-in-cluster-postgresql/scripts/Dockerfile
rename to samples/web-app-in-cluster-postgresql/python/scripts/Dockerfile
diff --git a/samples/web-app-in-cluster-postgresql/scripts/configmap.yml b/samples/web-app-in-cluster-postgresql/python/scripts/configmap.yml
similarity index 100%
rename from samples/web-app-in-cluster-postgresql/scripts/configmap.yml
rename to samples/web-app-in-cluster-postgresql/python/scripts/configmap.yml
diff --git a/samples/web-app-in-cluster-postgresql/scripts/deployment.yml b/samples/web-app-in-cluster-postgresql/python/scripts/deployment.yml
similarity index 100%
rename from samples/web-app-in-cluster-postgresql/scripts/deployment.yml
rename to samples/web-app-in-cluster-postgresql/python/scripts/deployment.yml
diff --git a/samples/web-app-in-cluster-postgresql/scripts/namespace.yml b/samples/web-app-in-cluster-postgresql/python/scripts/namespace.yml
similarity index 100%
rename from samples/web-app-in-cluster-postgresql/scripts/namespace.yml
rename to samples/web-app-in-cluster-postgresql/python/scripts/namespace.yml
diff --git a/samples/web-app-in-cluster-postgresql/scripts/secret.yml b/samples/web-app-in-cluster-postgresql/python/scripts/secret.yml
similarity index 100%
rename from samples/web-app-in-cluster-postgresql/scripts/secret.yml
rename to samples/web-app-in-cluster-postgresql/python/scripts/secret.yml
diff --git a/samples/web-app-in-cluster-postgresql/scripts/service.yml b/samples/web-app-in-cluster-postgresql/python/scripts/service.yml
similarity index 100%
rename from samples/web-app-in-cluster-postgresql/scripts/service.yml
rename to samples/web-app-in-cluster-postgresql/python/scripts/service.yml
diff --git a/samples/web-app-in-cluster-postgresql/scripts/statefulset.yml b/samples/web-app-in-cluster-postgresql/python/scripts/statefulset.yml
similarity index 100%
rename from samples/web-app-in-cluster-postgresql/scripts/statefulset.yml
rename to samples/web-app-in-cluster-postgresql/python/scripts/statefulset.yml
diff --git a/samples/web-app-in-cluster-postgresql/src/app.py b/samples/web-app-in-cluster-postgresql/python/src/app.py
similarity index 100%
rename from samples/web-app-in-cluster-postgresql/src/app.py
rename to samples/web-app-in-cluster-postgresql/python/src/app.py
diff --git a/samples/web-app-in-cluster-postgresql/src/database.py b/samples/web-app-in-cluster-postgresql/python/src/database.py
similarity index 100%
rename from samples/web-app-in-cluster-postgresql/src/database.py
rename to samples/web-app-in-cluster-postgresql/python/src/database.py
diff --git a/samples/web-app-in-cluster-postgresql/src/gunicorn.conf.py b/samples/web-app-in-cluster-postgresql/python/src/gunicorn.conf.py
similarity index 100%
rename from samples/web-app-in-cluster-postgresql/src/gunicorn.conf.py
rename to samples/web-app-in-cluster-postgresql/python/src/gunicorn.conf.py
diff --git a/samples/web-app-in-cluster-postgresql/src/requirements.txt b/samples/web-app-in-cluster-postgresql/python/src/requirements.txt
similarity index 100%
rename from samples/web-app-in-cluster-postgresql/src/requirements.txt
rename to samples/web-app-in-cluster-postgresql/python/src/requirements.txt
diff --git a/samples/web-app-in-cluster-postgresql/src/static/bootstrap/css/bootstrap-grid.css b/samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/css/bootstrap-grid.css
similarity index 100%
rename from samples/web-app-in-cluster-postgresql/src/static/bootstrap/css/bootstrap-grid.css
rename to samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/css/bootstrap-grid.css
diff --git a/samples/web-app-in-cluster-postgresql/src/static/bootstrap/css/bootstrap-grid.css.map b/samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/css/bootstrap-grid.css.map
similarity index 100%
rename from samples/web-app-in-cluster-postgresql/src/static/bootstrap/css/bootstrap-grid.css.map
rename to samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/css/bootstrap-grid.css.map
diff --git a/samples/web-app-in-cluster-postgresql/src/static/bootstrap/css/bootstrap-grid.min.css b/samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/css/bootstrap-grid.min.css
similarity index 100%
rename from samples/web-app-in-cluster-postgresql/src/static/bootstrap/css/bootstrap-grid.min.css
rename to samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/css/bootstrap-grid.min.css
diff --git a/samples/web-app-in-cluster-postgresql/src/static/bootstrap/css/bootstrap-grid.min.css.map b/samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/css/bootstrap-grid.min.css.map
similarity index 100%
rename from samples/web-app-in-cluster-postgresql/src/static/bootstrap/css/bootstrap-grid.min.css.map
rename to samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/css/bootstrap-grid.min.css.map
diff --git a/samples/web-app-in-cluster-postgresql/src/static/bootstrap/css/bootstrap-grid.rtl.css b/samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/css/bootstrap-grid.rtl.css
similarity index 100%
rename from samples/web-app-in-cluster-postgresql/src/static/bootstrap/css/bootstrap-grid.rtl.css
rename to samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/css/bootstrap-grid.rtl.css
diff --git a/samples/web-app-in-cluster-postgresql/src/static/bootstrap/css/bootstrap-grid.rtl.css.map b/samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/css/bootstrap-grid.rtl.css.map
similarity index 100%
rename from samples/web-app-in-cluster-postgresql/src/static/bootstrap/css/bootstrap-grid.rtl.css.map
rename to samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/css/bootstrap-grid.rtl.css.map
diff --git a/samples/web-app-in-cluster-postgresql/src/static/bootstrap/css/bootstrap-grid.rtl.min.css b/samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/css/bootstrap-grid.rtl.min.css
similarity index 100%
rename from samples/web-app-in-cluster-postgresql/src/static/bootstrap/css/bootstrap-grid.rtl.min.css
rename to samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/css/bootstrap-grid.rtl.min.css
diff --git a/samples/web-app-in-cluster-postgresql/src/static/bootstrap/css/bootstrap-grid.rtl.min.css.map b/samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/css/bootstrap-grid.rtl.min.css.map
similarity index 100%
rename from samples/web-app-in-cluster-postgresql/src/static/bootstrap/css/bootstrap-grid.rtl.min.css.map
rename to samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/css/bootstrap-grid.rtl.min.css.map
diff --git a/samples/web-app-in-cluster-postgresql/src/static/bootstrap/css/bootstrap-reboot.css b/samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/css/bootstrap-reboot.css
similarity index 100%
rename from samples/web-app-in-cluster-postgresql/src/static/bootstrap/css/bootstrap-reboot.css
rename to samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/css/bootstrap-reboot.css
diff --git a/samples/web-app-in-cluster-postgresql/src/static/bootstrap/css/bootstrap-reboot.css.map b/samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/css/bootstrap-reboot.css.map
similarity index 100%
rename from samples/web-app-in-cluster-postgresql/src/static/bootstrap/css/bootstrap-reboot.css.map
rename to samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/css/bootstrap-reboot.css.map
diff --git a/samples/web-app-in-cluster-postgresql/src/static/bootstrap/css/bootstrap-reboot.min.css b/samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/css/bootstrap-reboot.min.css
similarity index 100%
rename from samples/web-app-in-cluster-postgresql/src/static/bootstrap/css/bootstrap-reboot.min.css
rename to samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/css/bootstrap-reboot.min.css
diff --git a/samples/web-app-in-cluster-postgresql/src/static/bootstrap/css/bootstrap-reboot.min.css.map b/samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/css/bootstrap-reboot.min.css.map
similarity index 100%
rename from samples/web-app-in-cluster-postgresql/src/static/bootstrap/css/bootstrap-reboot.min.css.map
rename to samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/css/bootstrap-reboot.min.css.map
diff --git a/samples/web-app-in-cluster-postgresql/src/static/bootstrap/css/bootstrap-reboot.rtl.css b/samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/css/bootstrap-reboot.rtl.css
similarity index 100%
rename from samples/web-app-in-cluster-postgresql/src/static/bootstrap/css/bootstrap-reboot.rtl.css
rename to samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/css/bootstrap-reboot.rtl.css
diff --git a/samples/web-app-in-cluster-postgresql/src/static/bootstrap/css/bootstrap-reboot.rtl.css.map b/samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/css/bootstrap-reboot.rtl.css.map
similarity index 100%
rename from samples/web-app-in-cluster-postgresql/src/static/bootstrap/css/bootstrap-reboot.rtl.css.map
rename to samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/css/bootstrap-reboot.rtl.css.map
diff --git a/samples/web-app-in-cluster-postgresql/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css b/samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css
similarity index 100%
rename from samples/web-app-in-cluster-postgresql/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css
rename to samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css
diff --git a/samples/web-app-in-cluster-postgresql/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css.map b/samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css.map
similarity index 100%
rename from samples/web-app-in-cluster-postgresql/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css.map
rename to samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css.map
diff --git a/samples/web-app-in-cluster-postgresql/src/static/bootstrap/css/bootstrap-utilities.css b/samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/css/bootstrap-utilities.css
similarity index 100%
rename from samples/web-app-in-cluster-postgresql/src/static/bootstrap/css/bootstrap-utilities.css
rename to samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/css/bootstrap-utilities.css
diff --git a/samples/web-app-in-cluster-postgresql/src/static/bootstrap/css/bootstrap-utilities.css.map b/samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/css/bootstrap-utilities.css.map
similarity index 100%
rename from samples/web-app-in-cluster-postgresql/src/static/bootstrap/css/bootstrap-utilities.css.map
rename to samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/css/bootstrap-utilities.css.map
diff --git a/samples/web-app-in-cluster-postgresql/src/static/bootstrap/css/bootstrap-utilities.min.css b/samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/css/bootstrap-utilities.min.css
similarity index 100%
rename from samples/web-app-in-cluster-postgresql/src/static/bootstrap/css/bootstrap-utilities.min.css
rename to samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/css/bootstrap-utilities.min.css
diff --git a/samples/web-app-in-cluster-postgresql/src/static/bootstrap/css/bootstrap-utilities.min.css.map b/samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/css/bootstrap-utilities.min.css.map
similarity index 100%
rename from samples/web-app-in-cluster-postgresql/src/static/bootstrap/css/bootstrap-utilities.min.css.map
rename to samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/css/bootstrap-utilities.min.css.map
diff --git a/samples/web-app-in-cluster-postgresql/src/static/bootstrap/css/bootstrap-utilities.rtl.css b/samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/css/bootstrap-utilities.rtl.css
similarity index 100%
rename from samples/web-app-in-cluster-postgresql/src/static/bootstrap/css/bootstrap-utilities.rtl.css
rename to samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/css/bootstrap-utilities.rtl.css
diff --git a/samples/web-app-in-cluster-postgresql/src/static/bootstrap/css/bootstrap-utilities.rtl.css.map b/samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/css/bootstrap-utilities.rtl.css.map
similarity index 100%
rename from samples/web-app-in-cluster-postgresql/src/static/bootstrap/css/bootstrap-utilities.rtl.css.map
rename to samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/css/bootstrap-utilities.rtl.css.map
diff --git a/samples/web-app-in-cluster-postgresql/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css b/samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css
similarity index 100%
rename from samples/web-app-in-cluster-postgresql/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css
rename to samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css
diff --git a/samples/web-app-in-cluster-postgresql/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css.map b/samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css.map
similarity index 100%
rename from samples/web-app-in-cluster-postgresql/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css.map
rename to samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css.map
diff --git a/samples/web-app-in-cluster-postgresql/src/static/bootstrap/css/bootstrap.css b/samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/css/bootstrap.css
similarity index 100%
rename from samples/web-app-in-cluster-postgresql/src/static/bootstrap/css/bootstrap.css
rename to samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/css/bootstrap.css
diff --git a/samples/web-app-in-cluster-postgresql/src/static/bootstrap/css/bootstrap.css.map b/samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/css/bootstrap.css.map
similarity index 100%
rename from samples/web-app-in-cluster-postgresql/src/static/bootstrap/css/bootstrap.css.map
rename to samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/css/bootstrap.css.map
diff --git a/samples/web-app-in-cluster-postgresql/src/static/bootstrap/css/bootstrap.min.css b/samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/css/bootstrap.min.css
similarity index 100%
rename from samples/web-app-in-cluster-postgresql/src/static/bootstrap/css/bootstrap.min.css
rename to samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/css/bootstrap.min.css
diff --git a/samples/web-app-in-cluster-postgresql/src/static/bootstrap/css/bootstrap.min.css.map b/samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/css/bootstrap.min.css.map
similarity index 100%
rename from samples/web-app-in-cluster-postgresql/src/static/bootstrap/css/bootstrap.min.css.map
rename to samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/css/bootstrap.min.css.map
diff --git a/samples/web-app-in-cluster-postgresql/src/static/bootstrap/css/bootstrap.rtl.css b/samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/css/bootstrap.rtl.css
similarity index 100%
rename from samples/web-app-in-cluster-postgresql/src/static/bootstrap/css/bootstrap.rtl.css
rename to samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/css/bootstrap.rtl.css
diff --git a/samples/web-app-in-cluster-postgresql/src/static/bootstrap/css/bootstrap.rtl.css.map b/samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/css/bootstrap.rtl.css.map
similarity index 100%
rename from samples/web-app-in-cluster-postgresql/src/static/bootstrap/css/bootstrap.rtl.css.map
rename to samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/css/bootstrap.rtl.css.map
diff --git a/samples/web-app-in-cluster-postgresql/src/static/bootstrap/css/bootstrap.rtl.min.css b/samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/css/bootstrap.rtl.min.css
similarity index 100%
rename from samples/web-app-in-cluster-postgresql/src/static/bootstrap/css/bootstrap.rtl.min.css
rename to samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/css/bootstrap.rtl.min.css
diff --git a/samples/web-app-in-cluster-postgresql/src/static/bootstrap/css/bootstrap.rtl.min.css.map b/samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/css/bootstrap.rtl.min.css.map
similarity index 100%
rename from samples/web-app-in-cluster-postgresql/src/static/bootstrap/css/bootstrap.rtl.min.css.map
rename to samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/css/bootstrap.rtl.min.css.map
diff --git a/samples/web-app-in-cluster-postgresql/src/static/bootstrap/js/bootstrap.bundle.js b/samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/js/bootstrap.bundle.js
similarity index 100%
rename from samples/web-app-in-cluster-postgresql/src/static/bootstrap/js/bootstrap.bundle.js
rename to samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/js/bootstrap.bundle.js
diff --git a/samples/web-app-in-cluster-postgresql/src/static/bootstrap/js/bootstrap.bundle.js.map b/samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/js/bootstrap.bundle.js.map
similarity index 100%
rename from samples/web-app-in-cluster-postgresql/src/static/bootstrap/js/bootstrap.bundle.js.map
rename to samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/js/bootstrap.bundle.js.map
diff --git a/samples/web-app-in-cluster-postgresql/src/static/bootstrap/js/bootstrap.bundle.min.js b/samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/js/bootstrap.bundle.min.js
similarity index 100%
rename from samples/web-app-in-cluster-postgresql/src/static/bootstrap/js/bootstrap.bundle.min.js
rename to samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/js/bootstrap.bundle.min.js
diff --git a/samples/web-app-in-cluster-postgresql/src/static/bootstrap/js/bootstrap.bundle.min.js.map b/samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/js/bootstrap.bundle.min.js.map
similarity index 100%
rename from samples/web-app-in-cluster-postgresql/src/static/bootstrap/js/bootstrap.bundle.min.js.map
rename to samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/js/bootstrap.bundle.min.js.map
diff --git a/samples/web-app-in-cluster-postgresql/src/static/bootstrap/js/bootstrap.esm.js b/samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/js/bootstrap.esm.js
similarity index 100%
rename from samples/web-app-in-cluster-postgresql/src/static/bootstrap/js/bootstrap.esm.js
rename to samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/js/bootstrap.esm.js
diff --git a/samples/web-app-in-cluster-postgresql/src/static/bootstrap/js/bootstrap.esm.js.map b/samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/js/bootstrap.esm.js.map
similarity index 100%
rename from samples/web-app-in-cluster-postgresql/src/static/bootstrap/js/bootstrap.esm.js.map
rename to samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/js/bootstrap.esm.js.map
diff --git a/samples/web-app-in-cluster-postgresql/src/static/bootstrap/js/bootstrap.esm.min.js b/samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/js/bootstrap.esm.min.js
similarity index 100%
rename from samples/web-app-in-cluster-postgresql/src/static/bootstrap/js/bootstrap.esm.min.js
rename to samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/js/bootstrap.esm.min.js
diff --git a/samples/web-app-in-cluster-postgresql/src/static/bootstrap/js/bootstrap.esm.min.js.map b/samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/js/bootstrap.esm.min.js.map
similarity index 100%
rename from samples/web-app-in-cluster-postgresql/src/static/bootstrap/js/bootstrap.esm.min.js.map
rename to samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/js/bootstrap.esm.min.js.map
diff --git a/samples/web-app-in-cluster-postgresql/src/static/bootstrap/js/bootstrap.js b/samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/js/bootstrap.js
similarity index 100%
rename from samples/web-app-in-cluster-postgresql/src/static/bootstrap/js/bootstrap.js
rename to samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/js/bootstrap.js
diff --git a/samples/web-app-in-cluster-postgresql/src/static/bootstrap/js/bootstrap.js.map b/samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/js/bootstrap.js.map
similarity index 100%
rename from samples/web-app-in-cluster-postgresql/src/static/bootstrap/js/bootstrap.js.map
rename to samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/js/bootstrap.js.map
diff --git a/samples/web-app-in-cluster-postgresql/src/static/bootstrap/js/bootstrap.min.js b/samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/js/bootstrap.min.js
similarity index 100%
rename from samples/web-app-in-cluster-postgresql/src/static/bootstrap/js/bootstrap.min.js
rename to samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/js/bootstrap.min.js
diff --git a/samples/web-app-in-cluster-postgresql/src/static/bootstrap/js/bootstrap.min.js.map b/samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/js/bootstrap.min.js.map
similarity index 100%
rename from samples/web-app-in-cluster-postgresql/src/static/bootstrap/js/bootstrap.min.js.map
rename to samples/web-app-in-cluster-postgresql/python/src/static/bootstrap/js/bootstrap.min.js.map
diff --git a/samples/web-app-in-cluster-postgresql/src/static/favicon.ico b/samples/web-app-in-cluster-postgresql/python/src/static/favicon.ico
similarity index 100%
rename from samples/web-app-in-cluster-postgresql/src/static/favicon.ico
rename to samples/web-app-in-cluster-postgresql/python/src/static/favicon.ico
diff --git a/samples/web-app-in-cluster-postgresql/src/static/style.css b/samples/web-app-in-cluster-postgresql/python/src/static/style.css
similarity index 100%
rename from samples/web-app-in-cluster-postgresql/src/static/style.css
rename to samples/web-app-in-cluster-postgresql/python/src/static/style.css
diff --git a/samples/web-app-in-cluster-postgresql/src/templates/index.html b/samples/web-app-in-cluster-postgresql/python/src/templates/index.html
similarity index 100%
rename from samples/web-app-in-cluster-postgresql/src/templates/index.html
rename to samples/web-app-in-cluster-postgresql/python/src/templates/index.html
diff --git a/samples/web-app-managed-identity/README.md b/samples/web-app-managed-identity/python/README.md
similarity index 83%
rename from samples/web-app-managed-identity/README.md
rename to samples/web-app-managed-identity/python/README.md
index 3c4f172..14f81e2 100644
--- a/samples/web-app-managed-identity/README.md
+++ b/samples/web-app-managed-identity/python/README.md
@@ -1,19 +1,21 @@
 # Vacation Planner: Azure Blob Storage with Microsoft Entra Workload ID
 
+> A .NET version of this sample lives in [../dotnet](../dotnet/README.md).
+
 This sample demonstrates a Python Flask single-page web application called *Vacation Planner* hosted on an [Azure Kubernetes Service (AKS)](https://learn.microsoft.com/en-us/azure/aks/what-is-aks) cluster in the cloud on Azure or locally in the LocalStack emulator for Azure. The app runs in a dedicated namespace and stores activity data in the `activities` container of an [Azure Blob Storage](https://learn.microsoft.com/en-us/azure/storage/blobs/storage-blobs-introduction) account.
 
-Unlike the [`web-app-blob-storage`](../web-app-blob-storage/) sample, which uses a connection string, this sample authenticates to the storage account without any secret, using [Microsoft Entra Workload ID](https://learn.microsoft.com/en-us/azure/aks/workload-identity-overview). A [user-assigned managed identity](https://learn.microsoft.com/en-us/entra/identity/managed-identities-azure-resources/overview) is federated with a Kubernetes service account, so the pod obtains Microsoft Entra tokens through the cluster's OIDC issuer and accesses the storage account with its RBAC role assignment.
+Unlike the [`web-app-blob-storage`](../../web-app-blob-storage/python/) sample, which uses a connection string, this sample authenticates to the storage account without any secret, using [Microsoft Entra Workload ID](https://learn.microsoft.com/en-us/azure/aks/workload-identity-overview). A [user-assigned managed identity](https://learn.microsoft.com/en-us/entra/identity/managed-identities-azure-resources/overview) is federated with a Kubernetes service account, so the pod obtains Microsoft Entra tokens through the cluster's OIDC issuer and accesses the storage account with its RBAC role assignment.
 
 Optionally, when `DEPLOY_GATEWAY="true"` in [`00-variables.sh`](scripts/00-variables.sh), the sample also exposes the app on a public hostname through the [Gateway API](https://gateway-api.sigs.k8s.io/), with an A record created in an [Azure DNS](https://learn.microsoft.com/en-us/azure/dns/dns-overview) zone and a TLS certificate issued via [cert-manager](https://cert-manager.io/).
 
 Before installing the sample, make sure to create an [Azure Kubernetes Service (AKS)](https://learn.microsoft.com/en-us/azure/aks/what-is-aks) cluster by using one of the following scripts:
 
-- [scripts/01-system-assigned-managed-identity.sh](../../scripts/01-system-assigned-managed-identity.sh): creates the cluster using a system-assigned managed identity as its cluster identity.
-- [scripts/01-user-assigned-managed-identity.sh](../../scripts/01-user-assigned-managed-identity.sh): creates the cluster using a user-assigned managed identity as its cluster identity.
+- [scripts/01-system-assigned-managed-identity.sh](../../../scripts/01-system-assigned-managed-identity.sh): creates the cluster using a system-assigned managed identity as its cluster identity.
+- [scripts/01-user-assigned-managed-identity.sh](../../../scripts/01-user-assigned-managed-identity.sh): creates the cluster using a user-assigned managed identity as its cluster identity.
 
 Both scripts enable the OIDC issuer and workload identity that this sample relies on. If you enable the Gateway path, also install the [Gateway API](https://gateway-api.sigs.k8s.io/) and [cert-manager](https://cert-manager.io/) add-ons from the root `scripts/` folder. All commands below are run from this sample's `scripts/` folder.
 
-> **Running on LocalStack?** Install the [lstk CLI](https://docs.localstack.cloud/aws/developer-tools/running-localstack/lstk/) and run `lstk az start-interception` to route Azure CLI calls to the emulator. See [Run against LocalStack](../../README.md#run-against-localstack) for the full setup.
+> **Running on LocalStack?** Install the [lstk CLI](https://docs.localstack.cloud/aws/developer-tools/running-localstack/lstk/) and run `lstk az start-interception` to route Azure CLI calls to the emulator. See [Run against LocalStack](../../../README.md#run-against-localstack) for the full setup.
 
 ## Architecture
 
diff --git a/samples/web-app-managed-identity/images/architecture.png b/samples/web-app-managed-identity/python/images/architecture.png
similarity index 100%
rename from samples/web-app-managed-identity/images/architecture.png
rename to samples/web-app-managed-identity/python/images/architecture.png
diff --git a/samples/web-app-managed-identity/scripts/00-variables.sh b/samples/web-app-managed-identity/python/scripts/00-variables.sh
similarity index 100%
rename from samples/web-app-managed-identity/scripts/00-variables.sh
rename to samples/web-app-managed-identity/python/scripts/00-variables.sh
diff --git a/samples/web-app-managed-identity/scripts/01-deploy-resources.sh b/samples/web-app-managed-identity/python/scripts/01-deploy-resources.sh
similarity index 100%
rename from samples/web-app-managed-identity/scripts/01-deploy-resources.sh
rename to samples/web-app-managed-identity/python/scripts/01-deploy-resources.sh
diff --git a/samples/web-app-managed-identity/scripts/02-build-docker-image.sh b/samples/web-app-managed-identity/python/scripts/02-build-docker-image.sh
similarity index 100%
rename from samples/web-app-managed-identity/scripts/02-build-docker-image.sh
rename to samples/web-app-managed-identity/python/scripts/02-build-docker-image.sh
diff --git a/samples/web-app-managed-identity/scripts/03-run-docker-container.sh b/samples/web-app-managed-identity/python/scripts/03-run-docker-container.sh
similarity index 100%
rename from samples/web-app-managed-identity/scripts/03-run-docker-container.sh
rename to samples/web-app-managed-identity/python/scripts/03-run-docker-container.sh
diff --git a/samples/web-app-managed-identity/scripts/04-push-docker-image.sh b/samples/web-app-managed-identity/python/scripts/04-push-docker-image.sh
similarity index 100%
rename from samples/web-app-managed-identity/scripts/04-push-docker-image.sh
rename to samples/web-app-managed-identity/python/scripts/04-push-docker-image.sh
diff --git a/samples/web-app-managed-identity/scripts/05-deploy-app.sh b/samples/web-app-managed-identity/python/scripts/05-deploy-app.sh
similarity index 100%
rename from samples/web-app-managed-identity/scripts/05-deploy-app.sh
rename to samples/web-app-managed-identity/python/scripts/05-deploy-app.sh
diff --git a/samples/web-app-managed-identity/scripts/Dockerfile b/samples/web-app-managed-identity/python/scripts/Dockerfile
similarity index 100%
rename from samples/web-app-managed-identity/scripts/Dockerfile
rename to samples/web-app-managed-identity/python/scripts/Dockerfile
diff --git a/samples/web-app-managed-identity/scripts/configmap.yml b/samples/web-app-managed-identity/python/scripts/configmap.yml
similarity index 100%
rename from samples/web-app-managed-identity/scripts/configmap.yml
rename to samples/web-app-managed-identity/python/scripts/configmap.yml
diff --git a/samples/web-app-managed-identity/scripts/deployment.yml b/samples/web-app-managed-identity/python/scripts/deployment.yml
similarity index 100%
rename from samples/web-app-managed-identity/scripts/deployment.yml
rename to samples/web-app-managed-identity/python/scripts/deployment.yml
diff --git a/samples/web-app-managed-identity/scripts/gateway.yml b/samples/web-app-managed-identity/python/scripts/gateway.yml
similarity index 100%
rename from samples/web-app-managed-identity/scripts/gateway.yml
rename to samples/web-app-managed-identity/python/scripts/gateway.yml
diff --git a/samples/web-app-managed-identity/scripts/httproute.yml b/samples/web-app-managed-identity/python/scripts/httproute.yml
similarity index 100%
rename from samples/web-app-managed-identity/scripts/httproute.yml
rename to samples/web-app-managed-identity/python/scripts/httproute.yml
diff --git a/samples/web-app-managed-identity/scripts/issuer.yml b/samples/web-app-managed-identity/python/scripts/issuer.yml
similarity index 100%
rename from samples/web-app-managed-identity/scripts/issuer.yml
rename to samples/web-app-managed-identity/python/scripts/issuer.yml
diff --git a/samples/web-app-managed-identity/scripts/namespace.yml b/samples/web-app-managed-identity/python/scripts/namespace.yml
similarity index 100%
rename from samples/web-app-managed-identity/scripts/namespace.yml
rename to samples/web-app-managed-identity/python/scripts/namespace.yml
diff --git a/samples/web-app-managed-identity/scripts/secret.yml b/samples/web-app-managed-identity/python/scripts/secret.yml
similarity index 100%
rename from samples/web-app-managed-identity/scripts/secret.yml
rename to samples/web-app-managed-identity/python/scripts/secret.yml
diff --git a/samples/web-app-managed-identity/scripts/service.yml b/samples/web-app-managed-identity/python/scripts/service.yml
similarity index 100%
rename from samples/web-app-managed-identity/scripts/service.yml
rename to samples/web-app-managed-identity/python/scripts/service.yml
diff --git a/samples/web-app-managed-identity/src/app.py b/samples/web-app-managed-identity/python/src/app.py
similarity index 100%
rename from samples/web-app-managed-identity/src/app.py
rename to samples/web-app-managed-identity/python/src/app.py
diff --git a/samples/web-app-managed-identity/src/gunicorn.conf.py b/samples/web-app-managed-identity/python/src/gunicorn.conf.py
similarity index 100%
rename from samples/web-app-managed-identity/src/gunicorn.conf.py
rename to samples/web-app-managed-identity/python/src/gunicorn.conf.py
diff --git a/samples/web-app-managed-identity/src/requirements.txt b/samples/web-app-managed-identity/python/src/requirements.txt
similarity index 100%
rename from samples/web-app-managed-identity/src/requirements.txt
rename to samples/web-app-managed-identity/python/src/requirements.txt
diff --git a/samples/web-app-managed-identity/src/static/bootstrap/css/bootstrap-grid.css b/samples/web-app-managed-identity/python/src/static/bootstrap/css/bootstrap-grid.css
similarity index 100%
rename from samples/web-app-managed-identity/src/static/bootstrap/css/bootstrap-grid.css
rename to samples/web-app-managed-identity/python/src/static/bootstrap/css/bootstrap-grid.css
diff --git a/samples/web-app-managed-identity/src/static/bootstrap/css/bootstrap-grid.css.map b/samples/web-app-managed-identity/python/src/static/bootstrap/css/bootstrap-grid.css.map
similarity index 100%
rename from samples/web-app-managed-identity/src/static/bootstrap/css/bootstrap-grid.css.map
rename to samples/web-app-managed-identity/python/src/static/bootstrap/css/bootstrap-grid.css.map
diff --git a/samples/web-app-managed-identity/src/static/bootstrap/css/bootstrap-grid.min.css b/samples/web-app-managed-identity/python/src/static/bootstrap/css/bootstrap-grid.min.css
similarity index 100%
rename from samples/web-app-managed-identity/src/static/bootstrap/css/bootstrap-grid.min.css
rename to samples/web-app-managed-identity/python/src/static/bootstrap/css/bootstrap-grid.min.css
diff --git a/samples/web-app-managed-identity/src/static/bootstrap/css/bootstrap-grid.min.css.map b/samples/web-app-managed-identity/python/src/static/bootstrap/css/bootstrap-grid.min.css.map
similarity index 100%
rename from samples/web-app-managed-identity/src/static/bootstrap/css/bootstrap-grid.min.css.map
rename to samples/web-app-managed-identity/python/src/static/bootstrap/css/bootstrap-grid.min.css.map
diff --git a/samples/web-app-managed-identity/src/static/bootstrap/css/bootstrap-grid.rtl.css b/samples/web-app-managed-identity/python/src/static/bootstrap/css/bootstrap-grid.rtl.css
similarity index 100%
rename from samples/web-app-managed-identity/src/static/bootstrap/css/bootstrap-grid.rtl.css
rename to samples/web-app-managed-identity/python/src/static/bootstrap/css/bootstrap-grid.rtl.css
diff --git a/samples/web-app-managed-identity/src/static/bootstrap/css/bootstrap-grid.rtl.css.map b/samples/web-app-managed-identity/python/src/static/bootstrap/css/bootstrap-grid.rtl.css.map
similarity index 100%
rename from samples/web-app-managed-identity/src/static/bootstrap/css/bootstrap-grid.rtl.css.map
rename to samples/web-app-managed-identity/python/src/static/bootstrap/css/bootstrap-grid.rtl.css.map
diff --git a/samples/web-app-managed-identity/src/static/bootstrap/css/bootstrap-grid.rtl.min.css b/samples/web-app-managed-identity/python/src/static/bootstrap/css/bootstrap-grid.rtl.min.css
similarity index 100%
rename from samples/web-app-managed-identity/src/static/bootstrap/css/bootstrap-grid.rtl.min.css
rename to samples/web-app-managed-identity/python/src/static/bootstrap/css/bootstrap-grid.rtl.min.css
diff --git a/samples/web-app-managed-identity/src/static/bootstrap/css/bootstrap-grid.rtl.min.css.map b/samples/web-app-managed-identity/python/src/static/bootstrap/css/bootstrap-grid.rtl.min.css.map
similarity index 100%
rename from samples/web-app-managed-identity/src/static/bootstrap/css/bootstrap-grid.rtl.min.css.map
rename to samples/web-app-managed-identity/python/src/static/bootstrap/css/bootstrap-grid.rtl.min.css.map
diff --git a/samples/web-app-managed-identity/src/static/bootstrap/css/bootstrap-reboot.css b/samples/web-app-managed-identity/python/src/static/bootstrap/css/bootstrap-reboot.css
similarity index 100%
rename from samples/web-app-managed-identity/src/static/bootstrap/css/bootstrap-reboot.css
rename to samples/web-app-managed-identity/python/src/static/bootstrap/css/bootstrap-reboot.css
diff --git a/samples/web-app-managed-identity/src/static/bootstrap/css/bootstrap-reboot.css.map b/samples/web-app-managed-identity/python/src/static/bootstrap/css/bootstrap-reboot.css.map
similarity index 100%
rename from samples/web-app-managed-identity/src/static/bootstrap/css/bootstrap-reboot.css.map
rename to samples/web-app-managed-identity/python/src/static/bootstrap/css/bootstrap-reboot.css.map
diff --git a/samples/web-app-managed-identity/src/static/bootstrap/css/bootstrap-reboot.min.css b/samples/web-app-managed-identity/python/src/static/bootstrap/css/bootstrap-reboot.min.css
similarity index 100%
rename from samples/web-app-managed-identity/src/static/bootstrap/css/bootstrap-reboot.min.css
rename to samples/web-app-managed-identity/python/src/static/bootstrap/css/bootstrap-reboot.min.css
diff --git a/samples/web-app-managed-identity/src/static/bootstrap/css/bootstrap-reboot.min.css.map b/samples/web-app-managed-identity/python/src/static/bootstrap/css/bootstrap-reboot.min.css.map
similarity index 100%
rename from samples/web-app-managed-identity/src/static/bootstrap/css/bootstrap-reboot.min.css.map
rename to samples/web-app-managed-identity/python/src/static/bootstrap/css/bootstrap-reboot.min.css.map
diff --git a/samples/web-app-managed-identity/src/static/bootstrap/css/bootstrap-reboot.rtl.css b/samples/web-app-managed-identity/python/src/static/bootstrap/css/bootstrap-reboot.rtl.css
similarity index 100%
rename from samples/web-app-managed-identity/src/static/bootstrap/css/bootstrap-reboot.rtl.css
rename to samples/web-app-managed-identity/python/src/static/bootstrap/css/bootstrap-reboot.rtl.css
diff --git a/samples/web-app-managed-identity/src/static/bootstrap/css/bootstrap-reboot.rtl.css.map b/samples/web-app-managed-identity/python/src/static/bootstrap/css/bootstrap-reboot.rtl.css.map
similarity index 100%
rename from samples/web-app-managed-identity/src/static/bootstrap/css/bootstrap-reboot.rtl.css.map
rename to samples/web-app-managed-identity/python/src/static/bootstrap/css/bootstrap-reboot.rtl.css.map
diff --git a/samples/web-app-managed-identity/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css b/samples/web-app-managed-identity/python/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css
similarity index 100%
rename from samples/web-app-managed-identity/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css
rename to samples/web-app-managed-identity/python/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css
diff --git a/samples/web-app-managed-identity/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css.map b/samples/web-app-managed-identity/python/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css.map
similarity index 100%
rename from samples/web-app-managed-identity/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css.map
rename to samples/web-app-managed-identity/python/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css.map
diff --git a/samples/web-app-managed-identity/src/static/bootstrap/css/bootstrap-utilities.css b/samples/web-app-managed-identity/python/src/static/bootstrap/css/bootstrap-utilities.css
similarity index 100%
rename from samples/web-app-managed-identity/src/static/bootstrap/css/bootstrap-utilities.css
rename to samples/web-app-managed-identity/python/src/static/bootstrap/css/bootstrap-utilities.css
diff --git a/samples/web-app-managed-identity/src/static/bootstrap/css/bootstrap-utilities.css.map b/samples/web-app-managed-identity/python/src/static/bootstrap/css/bootstrap-utilities.css.map
similarity index 100%
rename from samples/web-app-managed-identity/src/static/bootstrap/css/bootstrap-utilities.css.map
rename to samples/web-app-managed-identity/python/src/static/bootstrap/css/bootstrap-utilities.css.map
diff --git a/samples/web-app-managed-identity/src/static/bootstrap/css/bootstrap-utilities.min.css b/samples/web-app-managed-identity/python/src/static/bootstrap/css/bootstrap-utilities.min.css
similarity index 100%
rename from samples/web-app-managed-identity/src/static/bootstrap/css/bootstrap-utilities.min.css
rename to samples/web-app-managed-identity/python/src/static/bootstrap/css/bootstrap-utilities.min.css
diff --git a/samples/web-app-managed-identity/src/static/bootstrap/css/bootstrap-utilities.min.css.map b/samples/web-app-managed-identity/python/src/static/bootstrap/css/bootstrap-utilities.min.css.map
similarity index 100%
rename from samples/web-app-managed-identity/src/static/bootstrap/css/bootstrap-utilities.min.css.map
rename to samples/web-app-managed-identity/python/src/static/bootstrap/css/bootstrap-utilities.min.css.map
diff --git a/samples/web-app-managed-identity/src/static/bootstrap/css/bootstrap-utilities.rtl.css b/samples/web-app-managed-identity/python/src/static/bootstrap/css/bootstrap-utilities.rtl.css
similarity index 100%
rename from samples/web-app-managed-identity/src/static/bootstrap/css/bootstrap-utilities.rtl.css
rename to samples/web-app-managed-identity/python/src/static/bootstrap/css/bootstrap-utilities.rtl.css
diff --git a/samples/web-app-managed-identity/src/static/bootstrap/css/bootstrap-utilities.rtl.css.map b/samples/web-app-managed-identity/python/src/static/bootstrap/css/bootstrap-utilities.rtl.css.map
similarity index 100%
rename from samples/web-app-managed-identity/src/static/bootstrap/css/bootstrap-utilities.rtl.css.map
rename to samples/web-app-managed-identity/python/src/static/bootstrap/css/bootstrap-utilities.rtl.css.map
diff --git a/samples/web-app-managed-identity/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css b/samples/web-app-managed-identity/python/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css
similarity index 100%
rename from samples/web-app-managed-identity/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css
rename to samples/web-app-managed-identity/python/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css
diff --git a/samples/web-app-managed-identity/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css.map b/samples/web-app-managed-identity/python/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css.map
similarity index 100%
rename from samples/web-app-managed-identity/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css.map
rename to samples/web-app-managed-identity/python/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css.map
diff --git a/samples/web-app-managed-identity/src/static/bootstrap/css/bootstrap.css b/samples/web-app-managed-identity/python/src/static/bootstrap/css/bootstrap.css
similarity index 100%
rename from samples/web-app-managed-identity/src/static/bootstrap/css/bootstrap.css
rename to samples/web-app-managed-identity/python/src/static/bootstrap/css/bootstrap.css
diff --git a/samples/web-app-managed-identity/src/static/bootstrap/css/bootstrap.css.map b/samples/web-app-managed-identity/python/src/static/bootstrap/css/bootstrap.css.map
similarity index 100%
rename from samples/web-app-managed-identity/src/static/bootstrap/css/bootstrap.css.map
rename to samples/web-app-managed-identity/python/src/static/bootstrap/css/bootstrap.css.map
diff --git a/samples/web-app-managed-identity/src/static/bootstrap/css/bootstrap.min.css b/samples/web-app-managed-identity/python/src/static/bootstrap/css/bootstrap.min.css
similarity index 100%
rename from samples/web-app-managed-identity/src/static/bootstrap/css/bootstrap.min.css
rename to samples/web-app-managed-identity/python/src/static/bootstrap/css/bootstrap.min.css
diff --git a/samples/web-app-managed-identity/src/static/bootstrap/css/bootstrap.min.css.map b/samples/web-app-managed-identity/python/src/static/bootstrap/css/bootstrap.min.css.map
similarity index 100%
rename from samples/web-app-managed-identity/src/static/bootstrap/css/bootstrap.min.css.map
rename to samples/web-app-managed-identity/python/src/static/bootstrap/css/bootstrap.min.css.map
diff --git a/samples/web-app-managed-identity/src/static/bootstrap/css/bootstrap.rtl.css b/samples/web-app-managed-identity/python/src/static/bootstrap/css/bootstrap.rtl.css
similarity index 100%
rename from samples/web-app-managed-identity/src/static/bootstrap/css/bootstrap.rtl.css
rename to samples/web-app-managed-identity/python/src/static/bootstrap/css/bootstrap.rtl.css
diff --git a/samples/web-app-managed-identity/src/static/bootstrap/css/bootstrap.rtl.css.map b/samples/web-app-managed-identity/python/src/static/bootstrap/css/bootstrap.rtl.css.map
similarity index 100%
rename from samples/web-app-managed-identity/src/static/bootstrap/css/bootstrap.rtl.css.map
rename to samples/web-app-managed-identity/python/src/static/bootstrap/css/bootstrap.rtl.css.map
diff --git a/samples/web-app-managed-identity/src/static/bootstrap/css/bootstrap.rtl.min.css b/samples/web-app-managed-identity/python/src/static/bootstrap/css/bootstrap.rtl.min.css
similarity index 100%
rename from samples/web-app-managed-identity/src/static/bootstrap/css/bootstrap.rtl.min.css
rename to samples/web-app-managed-identity/python/src/static/bootstrap/css/bootstrap.rtl.min.css
diff --git a/samples/web-app-managed-identity/src/static/bootstrap/css/bootstrap.rtl.min.css.map b/samples/web-app-managed-identity/python/src/static/bootstrap/css/bootstrap.rtl.min.css.map
similarity index 100%
rename from samples/web-app-managed-identity/src/static/bootstrap/css/bootstrap.rtl.min.css.map
rename to samples/web-app-managed-identity/python/src/static/bootstrap/css/bootstrap.rtl.min.css.map
diff --git a/samples/web-app-managed-identity/src/static/bootstrap/js/bootstrap.bundle.js b/samples/web-app-managed-identity/python/src/static/bootstrap/js/bootstrap.bundle.js
similarity index 100%
rename from samples/web-app-managed-identity/src/static/bootstrap/js/bootstrap.bundle.js
rename to samples/web-app-managed-identity/python/src/static/bootstrap/js/bootstrap.bundle.js
diff --git a/samples/web-app-managed-identity/src/static/bootstrap/js/bootstrap.bundle.js.map b/samples/web-app-managed-identity/python/src/static/bootstrap/js/bootstrap.bundle.js.map
similarity index 100%
rename from samples/web-app-managed-identity/src/static/bootstrap/js/bootstrap.bundle.js.map
rename to samples/web-app-managed-identity/python/src/static/bootstrap/js/bootstrap.bundle.js.map
diff --git a/samples/web-app-managed-identity/src/static/bootstrap/js/bootstrap.bundle.min.js b/samples/web-app-managed-identity/python/src/static/bootstrap/js/bootstrap.bundle.min.js
similarity index 100%
rename from samples/web-app-managed-identity/src/static/bootstrap/js/bootstrap.bundle.min.js
rename to samples/web-app-managed-identity/python/src/static/bootstrap/js/bootstrap.bundle.min.js
diff --git a/samples/web-app-managed-identity/src/static/bootstrap/js/bootstrap.bundle.min.js.map b/samples/web-app-managed-identity/python/src/static/bootstrap/js/bootstrap.bundle.min.js.map
similarity index 100%
rename from samples/web-app-managed-identity/src/static/bootstrap/js/bootstrap.bundle.min.js.map
rename to samples/web-app-managed-identity/python/src/static/bootstrap/js/bootstrap.bundle.min.js.map
diff --git a/samples/web-app-managed-identity/src/static/bootstrap/js/bootstrap.esm.js b/samples/web-app-managed-identity/python/src/static/bootstrap/js/bootstrap.esm.js
similarity index 100%
rename from samples/web-app-managed-identity/src/static/bootstrap/js/bootstrap.esm.js
rename to samples/web-app-managed-identity/python/src/static/bootstrap/js/bootstrap.esm.js
diff --git a/samples/web-app-managed-identity/src/static/bootstrap/js/bootstrap.esm.js.map b/samples/web-app-managed-identity/python/src/static/bootstrap/js/bootstrap.esm.js.map
similarity index 100%
rename from samples/web-app-managed-identity/src/static/bootstrap/js/bootstrap.esm.js.map
rename to samples/web-app-managed-identity/python/src/static/bootstrap/js/bootstrap.esm.js.map
diff --git a/samples/web-app-managed-identity/src/static/bootstrap/js/bootstrap.esm.min.js b/samples/web-app-managed-identity/python/src/static/bootstrap/js/bootstrap.esm.min.js
similarity index 100%
rename from samples/web-app-managed-identity/src/static/bootstrap/js/bootstrap.esm.min.js
rename to samples/web-app-managed-identity/python/src/static/bootstrap/js/bootstrap.esm.min.js
diff --git a/samples/web-app-managed-identity/src/static/bootstrap/js/bootstrap.esm.min.js.map b/samples/web-app-managed-identity/python/src/static/bootstrap/js/bootstrap.esm.min.js.map
similarity index 100%
rename from samples/web-app-managed-identity/src/static/bootstrap/js/bootstrap.esm.min.js.map
rename to samples/web-app-managed-identity/python/src/static/bootstrap/js/bootstrap.esm.min.js.map
diff --git a/samples/web-app-managed-identity/src/static/bootstrap/js/bootstrap.js b/samples/web-app-managed-identity/python/src/static/bootstrap/js/bootstrap.js
similarity index 100%
rename from samples/web-app-managed-identity/src/static/bootstrap/js/bootstrap.js
rename to samples/web-app-managed-identity/python/src/static/bootstrap/js/bootstrap.js
diff --git a/samples/web-app-managed-identity/src/static/bootstrap/js/bootstrap.js.map b/samples/web-app-managed-identity/python/src/static/bootstrap/js/bootstrap.js.map
similarity index 100%
rename from samples/web-app-managed-identity/src/static/bootstrap/js/bootstrap.js.map
rename to samples/web-app-managed-identity/python/src/static/bootstrap/js/bootstrap.js.map
diff --git a/samples/web-app-managed-identity/src/static/bootstrap/js/bootstrap.min.js b/samples/web-app-managed-identity/python/src/static/bootstrap/js/bootstrap.min.js
similarity index 100%
rename from samples/web-app-managed-identity/src/static/bootstrap/js/bootstrap.min.js
rename to samples/web-app-managed-identity/python/src/static/bootstrap/js/bootstrap.min.js
diff --git a/samples/web-app-managed-identity/src/static/bootstrap/js/bootstrap.min.js.map b/samples/web-app-managed-identity/python/src/static/bootstrap/js/bootstrap.min.js.map
similarity index 100%
rename from samples/web-app-managed-identity/src/static/bootstrap/js/bootstrap.min.js.map
rename to samples/web-app-managed-identity/python/src/static/bootstrap/js/bootstrap.min.js.map
diff --git a/samples/web-app-managed-identity/src/static/favicon.ico b/samples/web-app-managed-identity/python/src/static/favicon.ico
similarity index 100%
rename from samples/web-app-managed-identity/src/static/favicon.ico
rename to samples/web-app-managed-identity/python/src/static/favicon.ico
diff --git a/samples/web-app-managed-identity/src/static/style.css b/samples/web-app-managed-identity/python/src/static/style.css
similarity index 100%
rename from samples/web-app-managed-identity/src/static/style.css
rename to samples/web-app-managed-identity/python/src/static/style.css
diff --git a/samples/web-app-managed-identity/src/templates/index.html b/samples/web-app-managed-identity/python/src/templates/index.html
similarity index 100%
rename from samples/web-app-managed-identity/src/templates/index.html
rename to samples/web-app-managed-identity/python/src/templates/index.html
diff --git a/samples/web-app-mysql-flexible-server/README.md b/samples/web-app-mysql-flexible-server/python/README.md
similarity index 89%
rename from samples/web-app-mysql-flexible-server/README.md
rename to samples/web-app-mysql-flexible-server/python/README.md
index faf8cca..9aa8174 100644
--- a/samples/web-app-mysql-flexible-server/README.md
+++ b/samples/web-app-mysql-flexible-server/python/README.md
@@ -1,19 +1,21 @@
 # Vacation Planner: Azure Database for MySQL flexible server
 
+> A .NET version of this sample lives in [../dotnet](../dotnet/README.md).
+
 This sample demonstrates a Python Flask single-page web application called *Vacation Planner* hosted on an [Azure Kubernetes Service (AKS)](https://learn.microsoft.com/en-us/azure/aks/what-is-aks) cluster in the cloud on Azure or locally in the LocalStack emulator for Azure. The app runs in a dedicated namespace and stores activity data in the `activities` table of the `plannerdb` database on an [Azure Database for MySQL flexible server](https://learn.microsoft.com/en-us/azure/mysql/flexible-server/overview).
 
 The application connects to MySQL using a dedicated application user (rather than the server admin) over TLS, and the deployment scripts seed the `activities` table with a handful of sample plans so the app shows data on first load.
 
 Before installing the sample, make sure to create an [Azure Kubernetes Service (AKS)](https://learn.microsoft.com/en-us/azure/aks/what-is-aks) cluster by using one of the following scripts:
 
-- [scripts/01-system-assigned-managed-identity.sh](../../scripts/01-system-assigned-managed-identity.sh): creates the cluster using a system-assigned managed identity as its cluster identity.
-- [scripts/01-user-assigned-managed-identity.sh](../../scripts/01-user-assigned-managed-identity.sh): creates the cluster using a user-assigned managed identity as its cluster identity.
+- [scripts/01-system-assigned-managed-identity.sh](../../../scripts/01-system-assigned-managed-identity.sh): creates the cluster using a system-assigned managed identity as its cluster identity.
+- [scripts/01-user-assigned-managed-identity.sh](../../../scripts/01-user-assigned-managed-identity.sh): creates the cluster using a user-assigned managed identity as its cluster identity.
 
 The `01-deploy-resources.sh` script needs the `mysql` client installed on the host (for example `sudo apt install -y mysql-client`) to bootstrap the application user, schema, and seed data.
 
 All commands below are run from this sample's `scripts/` folder.
 
-> **Running on LocalStack?** Install the [lstk CLI](https://docs.localstack.cloud/aws/developer-tools/running-localstack/lstk/) and run `lstk az start-interception` to route Azure CLI calls to the emulator. See [Run against LocalStack](../../README.md#run-against-localstack) for the full setup.
+> **Running on LocalStack?** Install the [lstk CLI](https://docs.localstack.cloud/aws/developer-tools/running-localstack/lstk/) and run `lstk az start-interception` to route Azure CLI calls to the emulator. See [Run against LocalStack](../../../README.md#run-against-localstack) for the full setup.
 
 ## Architecture
 
diff --git a/samples/web-app-mysql-flexible-server/images/architecture.png b/samples/web-app-mysql-flexible-server/python/images/architecture.png
similarity index 100%
rename from samples/web-app-mysql-flexible-server/images/architecture.png
rename to samples/web-app-mysql-flexible-server/python/images/architecture.png
diff --git a/samples/web-app-mysql-flexible-server/scripts/00-variables.sh b/samples/web-app-mysql-flexible-server/python/scripts/00-variables.sh
similarity index 100%
rename from samples/web-app-mysql-flexible-server/scripts/00-variables.sh
rename to samples/web-app-mysql-flexible-server/python/scripts/00-variables.sh
diff --git a/samples/web-app-mysql-flexible-server/scripts/01-deploy-resources.sh b/samples/web-app-mysql-flexible-server/python/scripts/01-deploy-resources.sh
similarity index 100%
rename from samples/web-app-mysql-flexible-server/scripts/01-deploy-resources.sh
rename to samples/web-app-mysql-flexible-server/python/scripts/01-deploy-resources.sh
diff --git a/samples/web-app-mysql-flexible-server/scripts/02-build-docker-image.sh b/samples/web-app-mysql-flexible-server/python/scripts/02-build-docker-image.sh
similarity index 100%
rename from samples/web-app-mysql-flexible-server/scripts/02-build-docker-image.sh
rename to samples/web-app-mysql-flexible-server/python/scripts/02-build-docker-image.sh
diff --git a/samples/web-app-mysql-flexible-server/scripts/03-run-docker-container.sh b/samples/web-app-mysql-flexible-server/python/scripts/03-run-docker-container.sh
similarity index 100%
rename from samples/web-app-mysql-flexible-server/scripts/03-run-docker-container.sh
rename to samples/web-app-mysql-flexible-server/python/scripts/03-run-docker-container.sh
diff --git a/samples/web-app-mysql-flexible-server/scripts/04-push-docker-image.sh b/samples/web-app-mysql-flexible-server/python/scripts/04-push-docker-image.sh
similarity index 100%
rename from samples/web-app-mysql-flexible-server/scripts/04-push-docker-image.sh
rename to samples/web-app-mysql-flexible-server/python/scripts/04-push-docker-image.sh
diff --git a/samples/web-app-mysql-flexible-server/scripts/05-deploy-app.sh b/samples/web-app-mysql-flexible-server/python/scripts/05-deploy-app.sh
similarity index 100%
rename from samples/web-app-mysql-flexible-server/scripts/05-deploy-app.sh
rename to samples/web-app-mysql-flexible-server/python/scripts/05-deploy-app.sh
diff --git a/samples/web-app-mysql-flexible-server/scripts/Dockerfile b/samples/web-app-mysql-flexible-server/python/scripts/Dockerfile
similarity index 100%
rename from samples/web-app-mysql-flexible-server/scripts/Dockerfile
rename to samples/web-app-mysql-flexible-server/python/scripts/Dockerfile
diff --git a/samples/web-app-mysql-flexible-server/scripts/configmap.yml b/samples/web-app-mysql-flexible-server/python/scripts/configmap.yml
similarity index 100%
rename from samples/web-app-mysql-flexible-server/scripts/configmap.yml
rename to samples/web-app-mysql-flexible-server/python/scripts/configmap.yml
diff --git a/samples/web-app-mysql-flexible-server/scripts/deployment.yml b/samples/web-app-mysql-flexible-server/python/scripts/deployment.yml
similarity index 100%
rename from samples/web-app-mysql-flexible-server/scripts/deployment.yml
rename to samples/web-app-mysql-flexible-server/python/scripts/deployment.yml
diff --git a/samples/web-app-mysql-flexible-server/scripts/namespace.yml b/samples/web-app-mysql-flexible-server/python/scripts/namespace.yml
similarity index 100%
rename from samples/web-app-mysql-flexible-server/scripts/namespace.yml
rename to samples/web-app-mysql-flexible-server/python/scripts/namespace.yml
diff --git a/samples/web-app-mysql-flexible-server/scripts/secret.yml b/samples/web-app-mysql-flexible-server/python/scripts/secret.yml
similarity index 100%
rename from samples/web-app-mysql-flexible-server/scripts/secret.yml
rename to samples/web-app-mysql-flexible-server/python/scripts/secret.yml
diff --git a/samples/web-app-mysql-flexible-server/scripts/service.yml b/samples/web-app-mysql-flexible-server/python/scripts/service.yml
similarity index 100%
rename from samples/web-app-mysql-flexible-server/scripts/service.yml
rename to samples/web-app-mysql-flexible-server/python/scripts/service.yml
diff --git a/samples/web-app-mysql-flexible-server/src/app.py b/samples/web-app-mysql-flexible-server/python/src/app.py
similarity index 100%
rename from samples/web-app-mysql-flexible-server/src/app.py
rename to samples/web-app-mysql-flexible-server/python/src/app.py
diff --git a/samples/web-app-mysql-flexible-server/src/database.py b/samples/web-app-mysql-flexible-server/python/src/database.py
similarity index 100%
rename from samples/web-app-mysql-flexible-server/src/database.py
rename to samples/web-app-mysql-flexible-server/python/src/database.py
diff --git a/samples/web-app-mysql-flexible-server/src/gunicorn.conf.py b/samples/web-app-mysql-flexible-server/python/src/gunicorn.conf.py
similarity index 100%
rename from samples/web-app-mysql-flexible-server/src/gunicorn.conf.py
rename to samples/web-app-mysql-flexible-server/python/src/gunicorn.conf.py
diff --git a/samples/web-app-mysql-flexible-server/src/requirements.txt b/samples/web-app-mysql-flexible-server/python/src/requirements.txt
similarity index 100%
rename from samples/web-app-mysql-flexible-server/src/requirements.txt
rename to samples/web-app-mysql-flexible-server/python/src/requirements.txt
diff --git a/samples/web-app-mysql-flexible-server/src/static/bootstrap/css/bootstrap-grid.css b/samples/web-app-mysql-flexible-server/python/src/static/bootstrap/css/bootstrap-grid.css
similarity index 100%
rename from samples/web-app-mysql-flexible-server/src/static/bootstrap/css/bootstrap-grid.css
rename to samples/web-app-mysql-flexible-server/python/src/static/bootstrap/css/bootstrap-grid.css
diff --git a/samples/web-app-mysql-flexible-server/src/static/bootstrap/css/bootstrap-grid.css.map b/samples/web-app-mysql-flexible-server/python/src/static/bootstrap/css/bootstrap-grid.css.map
similarity index 100%
rename from samples/web-app-mysql-flexible-server/src/static/bootstrap/css/bootstrap-grid.css.map
rename to samples/web-app-mysql-flexible-server/python/src/static/bootstrap/css/bootstrap-grid.css.map
diff --git a/samples/web-app-mysql-flexible-server/src/static/bootstrap/css/bootstrap-grid.min.css b/samples/web-app-mysql-flexible-server/python/src/static/bootstrap/css/bootstrap-grid.min.css
similarity index 100%
rename from samples/web-app-mysql-flexible-server/src/static/bootstrap/css/bootstrap-grid.min.css
rename to samples/web-app-mysql-flexible-server/python/src/static/bootstrap/css/bootstrap-grid.min.css
diff --git a/samples/web-app-mysql-flexible-server/src/static/bootstrap/css/bootstrap-grid.min.css.map b/samples/web-app-mysql-flexible-server/python/src/static/bootstrap/css/bootstrap-grid.min.css.map
similarity index 100%
rename from samples/web-app-mysql-flexible-server/src/static/bootstrap/css/bootstrap-grid.min.css.map
rename to samples/web-app-mysql-flexible-server/python/src/static/bootstrap/css/bootstrap-grid.min.css.map
diff --git a/samples/web-app-mysql-flexible-server/src/static/bootstrap/css/bootstrap-grid.rtl.css b/samples/web-app-mysql-flexible-server/python/src/static/bootstrap/css/bootstrap-grid.rtl.css
similarity index 100%
rename from samples/web-app-mysql-flexible-server/src/static/bootstrap/css/bootstrap-grid.rtl.css
rename to samples/web-app-mysql-flexible-server/python/src/static/bootstrap/css/bootstrap-grid.rtl.css
diff --git a/samples/web-app-mysql-flexible-server/src/static/bootstrap/css/bootstrap-grid.rtl.css.map b/samples/web-app-mysql-flexible-server/python/src/static/bootstrap/css/bootstrap-grid.rtl.css.map
similarity index 100%
rename from samples/web-app-mysql-flexible-server/src/static/bootstrap/css/bootstrap-grid.rtl.css.map
rename to samples/web-app-mysql-flexible-server/python/src/static/bootstrap/css/bootstrap-grid.rtl.css.map
diff --git a/samples/web-app-mysql-flexible-server/src/static/bootstrap/css/bootstrap-grid.rtl.min.css b/samples/web-app-mysql-flexible-server/python/src/static/bootstrap/css/bootstrap-grid.rtl.min.css
similarity index 100%
rename from samples/web-app-mysql-flexible-server/src/static/bootstrap/css/bootstrap-grid.rtl.min.css
rename to samples/web-app-mysql-flexible-server/python/src/static/bootstrap/css/bootstrap-grid.rtl.min.css
diff --git a/samples/web-app-mysql-flexible-server/src/static/bootstrap/css/bootstrap-grid.rtl.min.css.map b/samples/web-app-mysql-flexible-server/python/src/static/bootstrap/css/bootstrap-grid.rtl.min.css.map
similarity index 100%
rename from samples/web-app-mysql-flexible-server/src/static/bootstrap/css/bootstrap-grid.rtl.min.css.map
rename to samples/web-app-mysql-flexible-server/python/src/static/bootstrap/css/bootstrap-grid.rtl.min.css.map
diff --git a/samples/web-app-mysql-flexible-server/src/static/bootstrap/css/bootstrap-reboot.css b/samples/web-app-mysql-flexible-server/python/src/static/bootstrap/css/bootstrap-reboot.css
similarity index 100%
rename from samples/web-app-mysql-flexible-server/src/static/bootstrap/css/bootstrap-reboot.css
rename to samples/web-app-mysql-flexible-server/python/src/static/bootstrap/css/bootstrap-reboot.css
diff --git a/samples/web-app-mysql-flexible-server/src/static/bootstrap/css/bootstrap-reboot.css.map b/samples/web-app-mysql-flexible-server/python/src/static/bootstrap/css/bootstrap-reboot.css.map
similarity index 100%
rename from samples/web-app-mysql-flexible-server/src/static/bootstrap/css/bootstrap-reboot.css.map
rename to samples/web-app-mysql-flexible-server/python/src/static/bootstrap/css/bootstrap-reboot.css.map
diff --git a/samples/web-app-mysql-flexible-server/src/static/bootstrap/css/bootstrap-reboot.min.css b/samples/web-app-mysql-flexible-server/python/src/static/bootstrap/css/bootstrap-reboot.min.css
similarity index 100%
rename from samples/web-app-mysql-flexible-server/src/static/bootstrap/css/bootstrap-reboot.min.css
rename to samples/web-app-mysql-flexible-server/python/src/static/bootstrap/css/bootstrap-reboot.min.css
diff --git a/samples/web-app-mysql-flexible-server/src/static/bootstrap/css/bootstrap-reboot.min.css.map b/samples/web-app-mysql-flexible-server/python/src/static/bootstrap/css/bootstrap-reboot.min.css.map
similarity index 100%
rename from samples/web-app-mysql-flexible-server/src/static/bootstrap/css/bootstrap-reboot.min.css.map
rename to samples/web-app-mysql-flexible-server/python/src/static/bootstrap/css/bootstrap-reboot.min.css.map
diff --git a/samples/web-app-mysql-flexible-server/src/static/bootstrap/css/bootstrap-reboot.rtl.css b/samples/web-app-mysql-flexible-server/python/src/static/bootstrap/css/bootstrap-reboot.rtl.css
similarity index 100%
rename from samples/web-app-mysql-flexible-server/src/static/bootstrap/css/bootstrap-reboot.rtl.css
rename to samples/web-app-mysql-flexible-server/python/src/static/bootstrap/css/bootstrap-reboot.rtl.css
diff --git a/samples/web-app-mysql-flexible-server/src/static/bootstrap/css/bootstrap-reboot.rtl.css.map b/samples/web-app-mysql-flexible-server/python/src/static/bootstrap/css/bootstrap-reboot.rtl.css.map
similarity index 100%
rename from samples/web-app-mysql-flexible-server/src/static/bootstrap/css/bootstrap-reboot.rtl.css.map
rename to samples/web-app-mysql-flexible-server/python/src/static/bootstrap/css/bootstrap-reboot.rtl.css.map
diff --git a/samples/web-app-mysql-flexible-server/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css b/samples/web-app-mysql-flexible-server/python/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css
similarity index 100%
rename from samples/web-app-mysql-flexible-server/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css
rename to samples/web-app-mysql-flexible-server/python/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css
diff --git a/samples/web-app-mysql-flexible-server/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css.map b/samples/web-app-mysql-flexible-server/python/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css.map
similarity index 100%
rename from samples/web-app-mysql-flexible-server/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css.map
rename to samples/web-app-mysql-flexible-server/python/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css.map
diff --git a/samples/web-app-mysql-flexible-server/src/static/bootstrap/css/bootstrap-utilities.css b/samples/web-app-mysql-flexible-server/python/src/static/bootstrap/css/bootstrap-utilities.css
similarity index 100%
rename from samples/web-app-mysql-flexible-server/src/static/bootstrap/css/bootstrap-utilities.css
rename to samples/web-app-mysql-flexible-server/python/src/static/bootstrap/css/bootstrap-utilities.css
diff --git a/samples/web-app-mysql-flexible-server/src/static/bootstrap/css/bootstrap-utilities.css.map b/samples/web-app-mysql-flexible-server/python/src/static/bootstrap/css/bootstrap-utilities.css.map
similarity index 100%
rename from samples/web-app-mysql-flexible-server/src/static/bootstrap/css/bootstrap-utilities.css.map
rename to samples/web-app-mysql-flexible-server/python/src/static/bootstrap/css/bootstrap-utilities.css.map
diff --git a/samples/web-app-mysql-flexible-server/src/static/bootstrap/css/bootstrap-utilities.min.css b/samples/web-app-mysql-flexible-server/python/src/static/bootstrap/css/bootstrap-utilities.min.css
similarity index 100%
rename from samples/web-app-mysql-flexible-server/src/static/bootstrap/css/bootstrap-utilities.min.css
rename to samples/web-app-mysql-flexible-server/python/src/static/bootstrap/css/bootstrap-utilities.min.css
diff --git a/samples/web-app-mysql-flexible-server/src/static/bootstrap/css/bootstrap-utilities.min.css.map b/samples/web-app-mysql-flexible-server/python/src/static/bootstrap/css/bootstrap-utilities.min.css.map
similarity index 100%
rename from samples/web-app-mysql-flexible-server/src/static/bootstrap/css/bootstrap-utilities.min.css.map
rename to samples/web-app-mysql-flexible-server/python/src/static/bootstrap/css/bootstrap-utilities.min.css.map
diff --git a/samples/web-app-mysql-flexible-server/src/static/bootstrap/css/bootstrap-utilities.rtl.css b/samples/web-app-mysql-flexible-server/python/src/static/bootstrap/css/bootstrap-utilities.rtl.css
similarity index 100%
rename from samples/web-app-mysql-flexible-server/src/static/bootstrap/css/bootstrap-utilities.rtl.css
rename to samples/web-app-mysql-flexible-server/python/src/static/bootstrap/css/bootstrap-utilities.rtl.css
diff --git a/samples/web-app-mysql-flexible-server/src/static/bootstrap/css/bootstrap-utilities.rtl.css.map b/samples/web-app-mysql-flexible-server/python/src/static/bootstrap/css/bootstrap-utilities.rtl.css.map
similarity index 100%
rename from samples/web-app-mysql-flexible-server/src/static/bootstrap/css/bootstrap-utilities.rtl.css.map
rename to samples/web-app-mysql-flexible-server/python/src/static/bootstrap/css/bootstrap-utilities.rtl.css.map
diff --git a/samples/web-app-mysql-flexible-server/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css b/samples/web-app-mysql-flexible-server/python/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css
similarity index 100%
rename from samples/web-app-mysql-flexible-server/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css
rename to samples/web-app-mysql-flexible-server/python/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css
diff --git a/samples/web-app-mysql-flexible-server/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css.map b/samples/web-app-mysql-flexible-server/python/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css.map
similarity index 100%
rename from samples/web-app-mysql-flexible-server/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css.map
rename to samples/web-app-mysql-flexible-server/python/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css.map
diff --git a/samples/web-app-mysql-flexible-server/src/static/bootstrap/css/bootstrap.css b/samples/web-app-mysql-flexible-server/python/src/static/bootstrap/css/bootstrap.css
similarity index 100%
rename from samples/web-app-mysql-flexible-server/src/static/bootstrap/css/bootstrap.css
rename to samples/web-app-mysql-flexible-server/python/src/static/bootstrap/css/bootstrap.css
diff --git a/samples/web-app-mysql-flexible-server/src/static/bootstrap/css/bootstrap.css.map b/samples/web-app-mysql-flexible-server/python/src/static/bootstrap/css/bootstrap.css.map
similarity index 100%
rename from samples/web-app-mysql-flexible-server/src/static/bootstrap/css/bootstrap.css.map
rename to samples/web-app-mysql-flexible-server/python/src/static/bootstrap/css/bootstrap.css.map
diff --git a/samples/web-app-mysql-flexible-server/src/static/bootstrap/css/bootstrap.min.css b/samples/web-app-mysql-flexible-server/python/src/static/bootstrap/css/bootstrap.min.css
similarity index 100%
rename from samples/web-app-mysql-flexible-server/src/static/bootstrap/css/bootstrap.min.css
rename to samples/web-app-mysql-flexible-server/python/src/static/bootstrap/css/bootstrap.min.css
diff --git a/samples/web-app-mysql-flexible-server/src/static/bootstrap/css/bootstrap.min.css.map b/samples/web-app-mysql-flexible-server/python/src/static/bootstrap/css/bootstrap.min.css.map
similarity index 100%
rename from samples/web-app-mysql-flexible-server/src/static/bootstrap/css/bootstrap.min.css.map
rename to samples/web-app-mysql-flexible-server/python/src/static/bootstrap/css/bootstrap.min.css.map
diff --git a/samples/web-app-mysql-flexible-server/src/static/bootstrap/css/bootstrap.rtl.css b/samples/web-app-mysql-flexible-server/python/src/static/bootstrap/css/bootstrap.rtl.css
similarity index 100%
rename from samples/web-app-mysql-flexible-server/src/static/bootstrap/css/bootstrap.rtl.css
rename to samples/web-app-mysql-flexible-server/python/src/static/bootstrap/css/bootstrap.rtl.css
diff --git a/samples/web-app-mysql-flexible-server/src/static/bootstrap/css/bootstrap.rtl.css.map b/samples/web-app-mysql-flexible-server/python/src/static/bootstrap/css/bootstrap.rtl.css.map
similarity index 100%
rename from samples/web-app-mysql-flexible-server/src/static/bootstrap/css/bootstrap.rtl.css.map
rename to samples/web-app-mysql-flexible-server/python/src/static/bootstrap/css/bootstrap.rtl.css.map
diff --git a/samples/web-app-mysql-flexible-server/src/static/bootstrap/css/bootstrap.rtl.min.css b/samples/web-app-mysql-flexible-server/python/src/static/bootstrap/css/bootstrap.rtl.min.css
similarity index 100%
rename from samples/web-app-mysql-flexible-server/src/static/bootstrap/css/bootstrap.rtl.min.css
rename to samples/web-app-mysql-flexible-server/python/src/static/bootstrap/css/bootstrap.rtl.min.css
diff --git a/samples/web-app-mysql-flexible-server/src/static/bootstrap/css/bootstrap.rtl.min.css.map b/samples/web-app-mysql-flexible-server/python/src/static/bootstrap/css/bootstrap.rtl.min.css.map
similarity index 100%
rename from samples/web-app-mysql-flexible-server/src/static/bootstrap/css/bootstrap.rtl.min.css.map
rename to samples/web-app-mysql-flexible-server/python/src/static/bootstrap/css/bootstrap.rtl.min.css.map
diff --git a/samples/web-app-mysql-flexible-server/src/static/bootstrap/js/bootstrap.bundle.js b/samples/web-app-mysql-flexible-server/python/src/static/bootstrap/js/bootstrap.bundle.js
similarity index 100%
rename from samples/web-app-mysql-flexible-server/src/static/bootstrap/js/bootstrap.bundle.js
rename to samples/web-app-mysql-flexible-server/python/src/static/bootstrap/js/bootstrap.bundle.js
diff --git a/samples/web-app-mysql-flexible-server/src/static/bootstrap/js/bootstrap.bundle.js.map b/samples/web-app-mysql-flexible-server/python/src/static/bootstrap/js/bootstrap.bundle.js.map
similarity index 100%
rename from samples/web-app-mysql-flexible-server/src/static/bootstrap/js/bootstrap.bundle.js.map
rename to samples/web-app-mysql-flexible-server/python/src/static/bootstrap/js/bootstrap.bundle.js.map
diff --git a/samples/web-app-mysql-flexible-server/src/static/bootstrap/js/bootstrap.bundle.min.js b/samples/web-app-mysql-flexible-server/python/src/static/bootstrap/js/bootstrap.bundle.min.js
similarity index 100%
rename from samples/web-app-mysql-flexible-server/src/static/bootstrap/js/bootstrap.bundle.min.js
rename to samples/web-app-mysql-flexible-server/python/src/static/bootstrap/js/bootstrap.bundle.min.js
diff --git a/samples/web-app-mysql-flexible-server/src/static/bootstrap/js/bootstrap.bundle.min.js.map b/samples/web-app-mysql-flexible-server/python/src/static/bootstrap/js/bootstrap.bundle.min.js.map
similarity index 100%
rename from samples/web-app-mysql-flexible-server/src/static/bootstrap/js/bootstrap.bundle.min.js.map
rename to samples/web-app-mysql-flexible-server/python/src/static/bootstrap/js/bootstrap.bundle.min.js.map
diff --git a/samples/web-app-mysql-flexible-server/src/static/bootstrap/js/bootstrap.esm.js b/samples/web-app-mysql-flexible-server/python/src/static/bootstrap/js/bootstrap.esm.js
similarity index 100%
rename from samples/web-app-mysql-flexible-server/src/static/bootstrap/js/bootstrap.esm.js
rename to samples/web-app-mysql-flexible-server/python/src/static/bootstrap/js/bootstrap.esm.js
diff --git a/samples/web-app-mysql-flexible-server/src/static/bootstrap/js/bootstrap.esm.js.map b/samples/web-app-mysql-flexible-server/python/src/static/bootstrap/js/bootstrap.esm.js.map
similarity index 100%
rename from samples/web-app-mysql-flexible-server/src/static/bootstrap/js/bootstrap.esm.js.map
rename to samples/web-app-mysql-flexible-server/python/src/static/bootstrap/js/bootstrap.esm.js.map
diff --git a/samples/web-app-mysql-flexible-server/src/static/bootstrap/js/bootstrap.esm.min.js b/samples/web-app-mysql-flexible-server/python/src/static/bootstrap/js/bootstrap.esm.min.js
similarity index 100%
rename from samples/web-app-mysql-flexible-server/src/static/bootstrap/js/bootstrap.esm.min.js
rename to samples/web-app-mysql-flexible-server/python/src/static/bootstrap/js/bootstrap.esm.min.js
diff --git a/samples/web-app-mysql-flexible-server/src/static/bootstrap/js/bootstrap.esm.min.js.map b/samples/web-app-mysql-flexible-server/python/src/static/bootstrap/js/bootstrap.esm.min.js.map
similarity index 100%
rename from samples/web-app-mysql-flexible-server/src/static/bootstrap/js/bootstrap.esm.min.js.map
rename to samples/web-app-mysql-flexible-server/python/src/static/bootstrap/js/bootstrap.esm.min.js.map
diff --git a/samples/web-app-mysql-flexible-server/src/static/bootstrap/js/bootstrap.js b/samples/web-app-mysql-flexible-server/python/src/static/bootstrap/js/bootstrap.js
similarity index 100%
rename from samples/web-app-mysql-flexible-server/src/static/bootstrap/js/bootstrap.js
rename to samples/web-app-mysql-flexible-server/python/src/static/bootstrap/js/bootstrap.js
diff --git a/samples/web-app-mysql-flexible-server/src/static/bootstrap/js/bootstrap.js.map b/samples/web-app-mysql-flexible-server/python/src/static/bootstrap/js/bootstrap.js.map
similarity index 100%
rename from samples/web-app-mysql-flexible-server/src/static/bootstrap/js/bootstrap.js.map
rename to samples/web-app-mysql-flexible-server/python/src/static/bootstrap/js/bootstrap.js.map
diff --git a/samples/web-app-mysql-flexible-server/src/static/bootstrap/js/bootstrap.min.js b/samples/web-app-mysql-flexible-server/python/src/static/bootstrap/js/bootstrap.min.js
similarity index 100%
rename from samples/web-app-mysql-flexible-server/src/static/bootstrap/js/bootstrap.min.js
rename to samples/web-app-mysql-flexible-server/python/src/static/bootstrap/js/bootstrap.min.js
diff --git a/samples/web-app-mysql-flexible-server/src/static/bootstrap/js/bootstrap.min.js.map b/samples/web-app-mysql-flexible-server/python/src/static/bootstrap/js/bootstrap.min.js.map
similarity index 100%
rename from samples/web-app-mysql-flexible-server/src/static/bootstrap/js/bootstrap.min.js.map
rename to samples/web-app-mysql-flexible-server/python/src/static/bootstrap/js/bootstrap.min.js.map
diff --git a/samples/web-app-mysql-flexible-server/src/static/favicon.ico b/samples/web-app-mysql-flexible-server/python/src/static/favicon.ico
similarity index 100%
rename from samples/web-app-mysql-flexible-server/src/static/favicon.ico
rename to samples/web-app-mysql-flexible-server/python/src/static/favicon.ico
diff --git a/samples/web-app-mysql-flexible-server/src/static/style.css b/samples/web-app-mysql-flexible-server/python/src/static/style.css
similarity index 100%
rename from samples/web-app-mysql-flexible-server/src/static/style.css
rename to samples/web-app-mysql-flexible-server/python/src/static/style.css
diff --git a/samples/web-app-mysql-flexible-server/src/templates/index.html b/samples/web-app-mysql-flexible-server/python/src/templates/index.html
similarity index 100%
rename from samples/web-app-mysql-flexible-server/src/templates/index.html
rename to samples/web-app-mysql-flexible-server/python/src/templates/index.html
diff --git a/samples/web-app-postgresql-flexible-server/README.md b/samples/web-app-postgresql-flexible-server/python/README.md
similarity index 88%
rename from samples/web-app-postgresql-flexible-server/README.md
rename to samples/web-app-postgresql-flexible-server/python/README.md
index 435c76e..d83c97c 100644
--- a/samples/web-app-postgresql-flexible-server/README.md
+++ b/samples/web-app-postgresql-flexible-server/python/README.md
@@ -1,17 +1,19 @@
 # Vacation Planner: Azure Database for PostgreSQL flexible server
 
+> A .NET version of this sample lives in [../dotnet](../dotnet/README.md).
+
 This sample demonstrates a Python Flask single-page web application called *Vacation Planner* hosted on an [Azure Kubernetes Service (AKS)](https://learn.microsoft.com/en-us/azure/aks/what-is-aks) cluster in the cloud on Azure or locally in the LocalStack emulator for Azure. The app runs in a dedicated namespace and stores activity data in the `activities` table of the `PlannerDB` database on an [Azure Database for PostgreSQL flexible server](https://learn.microsoft.com/en-us/azure/postgresql/flexible-server/overview).
 
 The application connects to PostgreSQL using a dedicated application user (rather than the server admin), and the deployment scripts seed the `activities` table with a handful of sample plans so the app shows data on first load.
 
 Before installing the sample, make sure to create an [Azure Kubernetes Service (AKS)](https://learn.microsoft.com/en-us/azure/aks/what-is-aks) cluster by using one of the following scripts:
 
-- [scripts/01-system-assigned-managed-identity.sh](../../scripts/01-system-assigned-managed-identity.sh): creates the cluster using a system-assigned managed identity as its cluster identity.
-- [scripts/01-user-assigned-managed-identity.sh](../../scripts/01-user-assigned-managed-identity.sh): creates the cluster using a user-assigned managed identity as its cluster identity.
+- [scripts/01-system-assigned-managed-identity.sh](../../../scripts/01-system-assigned-managed-identity.sh): creates the cluster using a system-assigned managed identity as its cluster identity.
+- [scripts/01-user-assigned-managed-identity.sh](../../../scripts/01-user-assigned-managed-identity.sh): creates the cluster using a user-assigned managed identity as its cluster identity.
 
 All commands below are run from this sample's `scripts/` folder.
 
-> **Running on LocalStack?** Install the [lstk CLI](https://docs.localstack.cloud/aws/developer-tools/running-localstack/lstk/) and run `lstk az start-interception` to route Azure CLI calls to the emulator. See [Run against LocalStack](../../README.md#run-against-localstack) for the full setup.
+> **Running on LocalStack?** Install the [lstk CLI](https://docs.localstack.cloud/aws/developer-tools/running-localstack/lstk/) and run `lstk az start-interception` to route Azure CLI calls to the emulator. See [Run against LocalStack](../../../README.md#run-against-localstack) for the full setup.
 
 ## Architecture
 
diff --git a/samples/web-app-postgresql-flexible-server/images/architecture.png b/samples/web-app-postgresql-flexible-server/python/images/architecture.png
similarity index 100%
rename from samples/web-app-postgresql-flexible-server/images/architecture.png
rename to samples/web-app-postgresql-flexible-server/python/images/architecture.png
diff --git a/samples/web-app-postgresql-flexible-server/scripts/00-variables.sh b/samples/web-app-postgresql-flexible-server/python/scripts/00-variables.sh
similarity index 100%
rename from samples/web-app-postgresql-flexible-server/scripts/00-variables.sh
rename to samples/web-app-postgresql-flexible-server/python/scripts/00-variables.sh
diff --git a/samples/web-app-postgresql-flexible-server/scripts/01-deploy-resources.sh b/samples/web-app-postgresql-flexible-server/python/scripts/01-deploy-resources.sh
similarity index 100%
rename from samples/web-app-postgresql-flexible-server/scripts/01-deploy-resources.sh
rename to samples/web-app-postgresql-flexible-server/python/scripts/01-deploy-resources.sh
diff --git a/samples/web-app-postgresql-flexible-server/scripts/02-build-docker-image.sh b/samples/web-app-postgresql-flexible-server/python/scripts/02-build-docker-image.sh
similarity index 100%
rename from samples/web-app-postgresql-flexible-server/scripts/02-build-docker-image.sh
rename to samples/web-app-postgresql-flexible-server/python/scripts/02-build-docker-image.sh
diff --git a/samples/web-app-postgresql-flexible-server/scripts/03-run-docker-container.sh b/samples/web-app-postgresql-flexible-server/python/scripts/03-run-docker-container.sh
similarity index 100%
rename from samples/web-app-postgresql-flexible-server/scripts/03-run-docker-container.sh
rename to samples/web-app-postgresql-flexible-server/python/scripts/03-run-docker-container.sh
diff --git a/samples/web-app-postgresql-flexible-server/scripts/04-push-docker-image.sh b/samples/web-app-postgresql-flexible-server/python/scripts/04-push-docker-image.sh
similarity index 100%
rename from samples/web-app-postgresql-flexible-server/scripts/04-push-docker-image.sh
rename to samples/web-app-postgresql-flexible-server/python/scripts/04-push-docker-image.sh
diff --git a/samples/web-app-postgresql-flexible-server/scripts/05-deploy-app.sh b/samples/web-app-postgresql-flexible-server/python/scripts/05-deploy-app.sh
similarity index 100%
rename from samples/web-app-postgresql-flexible-server/scripts/05-deploy-app.sh
rename to samples/web-app-postgresql-flexible-server/python/scripts/05-deploy-app.sh
diff --git a/samples/web-app-postgresql-flexible-server/scripts/Dockerfile b/samples/web-app-postgresql-flexible-server/python/scripts/Dockerfile
similarity index 100%
rename from samples/web-app-postgresql-flexible-server/scripts/Dockerfile
rename to samples/web-app-postgresql-flexible-server/python/scripts/Dockerfile
diff --git a/samples/web-app-postgresql-flexible-server/scripts/configmap.yml b/samples/web-app-postgresql-flexible-server/python/scripts/configmap.yml
similarity index 100%
rename from samples/web-app-postgresql-flexible-server/scripts/configmap.yml
rename to samples/web-app-postgresql-flexible-server/python/scripts/configmap.yml
diff --git a/samples/web-app-postgresql-flexible-server/scripts/deployment.yml b/samples/web-app-postgresql-flexible-server/python/scripts/deployment.yml
similarity index 100%
rename from samples/web-app-postgresql-flexible-server/scripts/deployment.yml
rename to samples/web-app-postgresql-flexible-server/python/scripts/deployment.yml
diff --git a/samples/web-app-postgresql-flexible-server/scripts/namespace.yml b/samples/web-app-postgresql-flexible-server/python/scripts/namespace.yml
similarity index 100%
rename from samples/web-app-postgresql-flexible-server/scripts/namespace.yml
rename to samples/web-app-postgresql-flexible-server/python/scripts/namespace.yml
diff --git a/samples/web-app-postgresql-flexible-server/scripts/secret.yml b/samples/web-app-postgresql-flexible-server/python/scripts/secret.yml
similarity index 100%
rename from samples/web-app-postgresql-flexible-server/scripts/secret.yml
rename to samples/web-app-postgresql-flexible-server/python/scripts/secret.yml
diff --git a/samples/web-app-postgresql-flexible-server/scripts/service.yml b/samples/web-app-postgresql-flexible-server/python/scripts/service.yml
similarity index 100%
rename from samples/web-app-postgresql-flexible-server/scripts/service.yml
rename to samples/web-app-postgresql-flexible-server/python/scripts/service.yml
diff --git a/samples/web-app-postgresql-flexible-server/src/app.py b/samples/web-app-postgresql-flexible-server/python/src/app.py
similarity index 100%
rename from samples/web-app-postgresql-flexible-server/src/app.py
rename to samples/web-app-postgresql-flexible-server/python/src/app.py
diff --git a/samples/web-app-postgresql-flexible-server/src/database.py b/samples/web-app-postgresql-flexible-server/python/src/database.py
similarity index 100%
rename from samples/web-app-postgresql-flexible-server/src/database.py
rename to samples/web-app-postgresql-flexible-server/python/src/database.py
diff --git a/samples/web-app-postgresql-flexible-server/src/gunicorn.conf.py b/samples/web-app-postgresql-flexible-server/python/src/gunicorn.conf.py
similarity index 100%
rename from samples/web-app-postgresql-flexible-server/src/gunicorn.conf.py
rename to samples/web-app-postgresql-flexible-server/python/src/gunicorn.conf.py
diff --git a/samples/web-app-postgresql-flexible-server/src/requirements.txt b/samples/web-app-postgresql-flexible-server/python/src/requirements.txt
similarity index 100%
rename from samples/web-app-postgresql-flexible-server/src/requirements.txt
rename to samples/web-app-postgresql-flexible-server/python/src/requirements.txt
diff --git a/samples/web-app-postgresql-flexible-server/src/static/bootstrap/css/bootstrap-grid.css b/samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/css/bootstrap-grid.css
similarity index 100%
rename from samples/web-app-postgresql-flexible-server/src/static/bootstrap/css/bootstrap-grid.css
rename to samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/css/bootstrap-grid.css
diff --git a/samples/web-app-postgresql-flexible-server/src/static/bootstrap/css/bootstrap-grid.css.map b/samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/css/bootstrap-grid.css.map
similarity index 100%
rename from samples/web-app-postgresql-flexible-server/src/static/bootstrap/css/bootstrap-grid.css.map
rename to samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/css/bootstrap-grid.css.map
diff --git a/samples/web-app-postgresql-flexible-server/src/static/bootstrap/css/bootstrap-grid.min.css b/samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/css/bootstrap-grid.min.css
similarity index 100%
rename from samples/web-app-postgresql-flexible-server/src/static/bootstrap/css/bootstrap-grid.min.css
rename to samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/css/bootstrap-grid.min.css
diff --git a/samples/web-app-postgresql-flexible-server/src/static/bootstrap/css/bootstrap-grid.min.css.map b/samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/css/bootstrap-grid.min.css.map
similarity index 100%
rename from samples/web-app-postgresql-flexible-server/src/static/bootstrap/css/bootstrap-grid.min.css.map
rename to samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/css/bootstrap-grid.min.css.map
diff --git a/samples/web-app-postgresql-flexible-server/src/static/bootstrap/css/bootstrap-grid.rtl.css b/samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/css/bootstrap-grid.rtl.css
similarity index 100%
rename from samples/web-app-postgresql-flexible-server/src/static/bootstrap/css/bootstrap-grid.rtl.css
rename to samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/css/bootstrap-grid.rtl.css
diff --git a/samples/web-app-postgresql-flexible-server/src/static/bootstrap/css/bootstrap-grid.rtl.css.map b/samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/css/bootstrap-grid.rtl.css.map
similarity index 100%
rename from samples/web-app-postgresql-flexible-server/src/static/bootstrap/css/bootstrap-grid.rtl.css.map
rename to samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/css/bootstrap-grid.rtl.css.map
diff --git a/samples/web-app-postgresql-flexible-server/src/static/bootstrap/css/bootstrap-grid.rtl.min.css b/samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/css/bootstrap-grid.rtl.min.css
similarity index 100%
rename from samples/web-app-postgresql-flexible-server/src/static/bootstrap/css/bootstrap-grid.rtl.min.css
rename to samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/css/bootstrap-grid.rtl.min.css
diff --git a/samples/web-app-postgresql-flexible-server/src/static/bootstrap/css/bootstrap-grid.rtl.min.css.map b/samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/css/bootstrap-grid.rtl.min.css.map
similarity index 100%
rename from samples/web-app-postgresql-flexible-server/src/static/bootstrap/css/bootstrap-grid.rtl.min.css.map
rename to samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/css/bootstrap-grid.rtl.min.css.map
diff --git a/samples/web-app-postgresql-flexible-server/src/static/bootstrap/css/bootstrap-reboot.css b/samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/css/bootstrap-reboot.css
similarity index 100%
rename from samples/web-app-postgresql-flexible-server/src/static/bootstrap/css/bootstrap-reboot.css
rename to samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/css/bootstrap-reboot.css
diff --git a/samples/web-app-postgresql-flexible-server/src/static/bootstrap/css/bootstrap-reboot.css.map b/samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/css/bootstrap-reboot.css.map
similarity index 100%
rename from samples/web-app-postgresql-flexible-server/src/static/bootstrap/css/bootstrap-reboot.css.map
rename to samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/css/bootstrap-reboot.css.map
diff --git a/samples/web-app-postgresql-flexible-server/src/static/bootstrap/css/bootstrap-reboot.min.css b/samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/css/bootstrap-reboot.min.css
similarity index 100%
rename from samples/web-app-postgresql-flexible-server/src/static/bootstrap/css/bootstrap-reboot.min.css
rename to samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/css/bootstrap-reboot.min.css
diff --git a/samples/web-app-postgresql-flexible-server/src/static/bootstrap/css/bootstrap-reboot.min.css.map b/samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/css/bootstrap-reboot.min.css.map
similarity index 100%
rename from samples/web-app-postgresql-flexible-server/src/static/bootstrap/css/bootstrap-reboot.min.css.map
rename to samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/css/bootstrap-reboot.min.css.map
diff --git a/samples/web-app-postgresql-flexible-server/src/static/bootstrap/css/bootstrap-reboot.rtl.css b/samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/css/bootstrap-reboot.rtl.css
similarity index 100%
rename from samples/web-app-postgresql-flexible-server/src/static/bootstrap/css/bootstrap-reboot.rtl.css
rename to samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/css/bootstrap-reboot.rtl.css
diff --git a/samples/web-app-postgresql-flexible-server/src/static/bootstrap/css/bootstrap-reboot.rtl.css.map b/samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/css/bootstrap-reboot.rtl.css.map
similarity index 100%
rename from samples/web-app-postgresql-flexible-server/src/static/bootstrap/css/bootstrap-reboot.rtl.css.map
rename to samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/css/bootstrap-reboot.rtl.css.map
diff --git a/samples/web-app-postgresql-flexible-server/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css b/samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css
similarity index 100%
rename from samples/web-app-postgresql-flexible-server/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css
rename to samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css
diff --git a/samples/web-app-postgresql-flexible-server/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css.map b/samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css.map
similarity index 100%
rename from samples/web-app-postgresql-flexible-server/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css.map
rename to samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css.map
diff --git a/samples/web-app-postgresql-flexible-server/src/static/bootstrap/css/bootstrap-utilities.css b/samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/css/bootstrap-utilities.css
similarity index 100%
rename from samples/web-app-postgresql-flexible-server/src/static/bootstrap/css/bootstrap-utilities.css
rename to samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/css/bootstrap-utilities.css
diff --git a/samples/web-app-postgresql-flexible-server/src/static/bootstrap/css/bootstrap-utilities.css.map b/samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/css/bootstrap-utilities.css.map
similarity index 100%
rename from samples/web-app-postgresql-flexible-server/src/static/bootstrap/css/bootstrap-utilities.css.map
rename to samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/css/bootstrap-utilities.css.map
diff --git a/samples/web-app-postgresql-flexible-server/src/static/bootstrap/css/bootstrap-utilities.min.css b/samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/css/bootstrap-utilities.min.css
similarity index 100%
rename from samples/web-app-postgresql-flexible-server/src/static/bootstrap/css/bootstrap-utilities.min.css
rename to samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/css/bootstrap-utilities.min.css
diff --git a/samples/web-app-postgresql-flexible-server/src/static/bootstrap/css/bootstrap-utilities.min.css.map b/samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/css/bootstrap-utilities.min.css.map
similarity index 100%
rename from samples/web-app-postgresql-flexible-server/src/static/bootstrap/css/bootstrap-utilities.min.css.map
rename to samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/css/bootstrap-utilities.min.css.map
diff --git a/samples/web-app-postgresql-flexible-server/src/static/bootstrap/css/bootstrap-utilities.rtl.css b/samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/css/bootstrap-utilities.rtl.css
similarity index 100%
rename from samples/web-app-postgresql-flexible-server/src/static/bootstrap/css/bootstrap-utilities.rtl.css
rename to samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/css/bootstrap-utilities.rtl.css
diff --git a/samples/web-app-postgresql-flexible-server/src/static/bootstrap/css/bootstrap-utilities.rtl.css.map b/samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/css/bootstrap-utilities.rtl.css.map
similarity index 100%
rename from samples/web-app-postgresql-flexible-server/src/static/bootstrap/css/bootstrap-utilities.rtl.css.map
rename to samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/css/bootstrap-utilities.rtl.css.map
diff --git a/samples/web-app-postgresql-flexible-server/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css b/samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css
similarity index 100%
rename from samples/web-app-postgresql-flexible-server/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css
rename to samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css
diff --git a/samples/web-app-postgresql-flexible-server/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css.map b/samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css.map
similarity index 100%
rename from samples/web-app-postgresql-flexible-server/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css.map
rename to samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css.map
diff --git a/samples/web-app-postgresql-flexible-server/src/static/bootstrap/css/bootstrap.css b/samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/css/bootstrap.css
similarity index 100%
rename from samples/web-app-postgresql-flexible-server/src/static/bootstrap/css/bootstrap.css
rename to samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/css/bootstrap.css
diff --git a/samples/web-app-postgresql-flexible-server/src/static/bootstrap/css/bootstrap.css.map b/samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/css/bootstrap.css.map
similarity index 100%
rename from samples/web-app-postgresql-flexible-server/src/static/bootstrap/css/bootstrap.css.map
rename to samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/css/bootstrap.css.map
diff --git a/samples/web-app-postgresql-flexible-server/src/static/bootstrap/css/bootstrap.min.css b/samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/css/bootstrap.min.css
similarity index 100%
rename from samples/web-app-postgresql-flexible-server/src/static/bootstrap/css/bootstrap.min.css
rename to samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/css/bootstrap.min.css
diff --git a/samples/web-app-postgresql-flexible-server/src/static/bootstrap/css/bootstrap.min.css.map b/samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/css/bootstrap.min.css.map
similarity index 100%
rename from samples/web-app-postgresql-flexible-server/src/static/bootstrap/css/bootstrap.min.css.map
rename to samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/css/bootstrap.min.css.map
diff --git a/samples/web-app-postgresql-flexible-server/src/static/bootstrap/css/bootstrap.rtl.css b/samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/css/bootstrap.rtl.css
similarity index 100%
rename from samples/web-app-postgresql-flexible-server/src/static/bootstrap/css/bootstrap.rtl.css
rename to samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/css/bootstrap.rtl.css
diff --git a/samples/web-app-postgresql-flexible-server/src/static/bootstrap/css/bootstrap.rtl.css.map b/samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/css/bootstrap.rtl.css.map
similarity index 100%
rename from samples/web-app-postgresql-flexible-server/src/static/bootstrap/css/bootstrap.rtl.css.map
rename to samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/css/bootstrap.rtl.css.map
diff --git a/samples/web-app-postgresql-flexible-server/src/static/bootstrap/css/bootstrap.rtl.min.css b/samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/css/bootstrap.rtl.min.css
similarity index 100%
rename from samples/web-app-postgresql-flexible-server/src/static/bootstrap/css/bootstrap.rtl.min.css
rename to samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/css/bootstrap.rtl.min.css
diff --git a/samples/web-app-postgresql-flexible-server/src/static/bootstrap/css/bootstrap.rtl.min.css.map b/samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/css/bootstrap.rtl.min.css.map
similarity index 100%
rename from samples/web-app-postgresql-flexible-server/src/static/bootstrap/css/bootstrap.rtl.min.css.map
rename to samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/css/bootstrap.rtl.min.css.map
diff --git a/samples/web-app-postgresql-flexible-server/src/static/bootstrap/js/bootstrap.bundle.js b/samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/js/bootstrap.bundle.js
similarity index 100%
rename from samples/web-app-postgresql-flexible-server/src/static/bootstrap/js/bootstrap.bundle.js
rename to samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/js/bootstrap.bundle.js
diff --git a/samples/web-app-postgresql-flexible-server/src/static/bootstrap/js/bootstrap.bundle.js.map b/samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/js/bootstrap.bundle.js.map
similarity index 100%
rename from samples/web-app-postgresql-flexible-server/src/static/bootstrap/js/bootstrap.bundle.js.map
rename to samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/js/bootstrap.bundle.js.map
diff --git a/samples/web-app-postgresql-flexible-server/src/static/bootstrap/js/bootstrap.bundle.min.js b/samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/js/bootstrap.bundle.min.js
similarity index 100%
rename from samples/web-app-postgresql-flexible-server/src/static/bootstrap/js/bootstrap.bundle.min.js
rename to samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/js/bootstrap.bundle.min.js
diff --git a/samples/web-app-postgresql-flexible-server/src/static/bootstrap/js/bootstrap.bundle.min.js.map b/samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/js/bootstrap.bundle.min.js.map
similarity index 100%
rename from samples/web-app-postgresql-flexible-server/src/static/bootstrap/js/bootstrap.bundle.min.js.map
rename to samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/js/bootstrap.bundle.min.js.map
diff --git a/samples/web-app-postgresql-flexible-server/src/static/bootstrap/js/bootstrap.esm.js b/samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/js/bootstrap.esm.js
similarity index 100%
rename from samples/web-app-postgresql-flexible-server/src/static/bootstrap/js/bootstrap.esm.js
rename to samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/js/bootstrap.esm.js
diff --git a/samples/web-app-postgresql-flexible-server/src/static/bootstrap/js/bootstrap.esm.js.map b/samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/js/bootstrap.esm.js.map
similarity index 100%
rename from samples/web-app-postgresql-flexible-server/src/static/bootstrap/js/bootstrap.esm.js.map
rename to samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/js/bootstrap.esm.js.map
diff --git a/samples/web-app-postgresql-flexible-server/src/static/bootstrap/js/bootstrap.esm.min.js b/samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/js/bootstrap.esm.min.js
similarity index 100%
rename from samples/web-app-postgresql-flexible-server/src/static/bootstrap/js/bootstrap.esm.min.js
rename to samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/js/bootstrap.esm.min.js
diff --git a/samples/web-app-postgresql-flexible-server/src/static/bootstrap/js/bootstrap.esm.min.js.map b/samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/js/bootstrap.esm.min.js.map
similarity index 100%
rename from samples/web-app-postgresql-flexible-server/src/static/bootstrap/js/bootstrap.esm.min.js.map
rename to samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/js/bootstrap.esm.min.js.map
diff --git a/samples/web-app-postgresql-flexible-server/src/static/bootstrap/js/bootstrap.js b/samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/js/bootstrap.js
similarity index 100%
rename from samples/web-app-postgresql-flexible-server/src/static/bootstrap/js/bootstrap.js
rename to samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/js/bootstrap.js
diff --git a/samples/web-app-postgresql-flexible-server/src/static/bootstrap/js/bootstrap.js.map b/samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/js/bootstrap.js.map
similarity index 100%
rename from samples/web-app-postgresql-flexible-server/src/static/bootstrap/js/bootstrap.js.map
rename to samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/js/bootstrap.js.map
diff --git a/samples/web-app-postgresql-flexible-server/src/static/bootstrap/js/bootstrap.min.js b/samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/js/bootstrap.min.js
similarity index 100%
rename from samples/web-app-postgresql-flexible-server/src/static/bootstrap/js/bootstrap.min.js
rename to samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/js/bootstrap.min.js
diff --git a/samples/web-app-postgresql-flexible-server/src/static/bootstrap/js/bootstrap.min.js.map b/samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/js/bootstrap.min.js.map
similarity index 100%
rename from samples/web-app-postgresql-flexible-server/src/static/bootstrap/js/bootstrap.min.js.map
rename to samples/web-app-postgresql-flexible-server/python/src/static/bootstrap/js/bootstrap.min.js.map
diff --git a/samples/web-app-postgresql-flexible-server/src/static/favicon.ico b/samples/web-app-postgresql-flexible-server/python/src/static/favicon.ico
similarity index 100%
rename from samples/web-app-postgresql-flexible-server/src/static/favicon.ico
rename to samples/web-app-postgresql-flexible-server/python/src/static/favicon.ico
diff --git a/samples/web-app-postgresql-flexible-server/src/static/style.css b/samples/web-app-postgresql-flexible-server/python/src/static/style.css
similarity index 100%
rename from samples/web-app-postgresql-flexible-server/src/static/style.css
rename to samples/web-app-postgresql-flexible-server/python/src/static/style.css
diff --git a/samples/web-app-postgresql-flexible-server/src/templates/index.html b/samples/web-app-postgresql-flexible-server/python/src/templates/index.html
similarity index 100%
rename from samples/web-app-postgresql-flexible-server/src/templates/index.html
rename to samples/web-app-postgresql-flexible-server/python/src/templates/index.html
diff --git a/samples/web-app-sql-database/README.md b/samples/web-app-sql-database/python/README.md
similarity index 88%
rename from samples/web-app-sql-database/README.md
rename to samples/web-app-sql-database/python/README.md
index fc419ac..b1ae839 100644
--- a/samples/web-app-sql-database/README.md
+++ b/samples/web-app-sql-database/python/README.md
@@ -1,17 +1,19 @@
 # Vacation Planner: Azure SQL Database
 
+> A .NET version of this sample lives in [../dotnet](../dotnet/README.md).
+
 This sample demonstrates a Python Flask single-page web application called *Vacation Planner* hosted on an [Azure Kubernetes Service (AKS)](https://learn.microsoft.com/en-us/azure/aks/what-is-aks) cluster in the cloud on Azure or locally in the LocalStack emulator for Azure. The app runs in a dedicated namespace and stores activity data in the `dbo.Activities` table of the `PlannerDB` database on an [Azure SQL Database](https://learn.microsoft.com/en-us/azure/azure-sql/database/sql-database-paas-overview).
 
 The application connects to Azure SQL using a dedicated SQL login (rather than the server admin), and the deployment scripts seed the `Activities` table with a handful of sample plans so the app shows data on first load.
 
 Before installing the sample, make sure to create an [Azure Kubernetes Service (AKS)](https://learn.microsoft.com/en-us/azure/aks/what-is-aks) cluster by using one of the following scripts:
 
-- [scripts/01-system-assigned-managed-identity.sh](../../scripts/01-system-assigned-managed-identity.sh): creates the cluster using a system-assigned managed identity as its cluster identity.
-- [scripts/01-user-assigned-managed-identity.sh](../../scripts/01-user-assigned-managed-identity.sh): creates the cluster using a user-assigned managed identity as its cluster identity.
+- [scripts/01-system-assigned-managed-identity.sh](../../../scripts/01-system-assigned-managed-identity.sh): creates the cluster using a system-assigned managed identity as its cluster identity.
+- [scripts/01-user-assigned-managed-identity.sh](../../../scripts/01-user-assigned-managed-identity.sh): creates the cluster using a user-assigned managed identity as its cluster identity.
 
 All commands below are run from this sample's `scripts/` folder.
 
-> **Running on LocalStack?** Install the [lstk CLI](https://docs.localstack.cloud/aws/developer-tools/running-localstack/lstk/) and run `lstk az start-interception` to route Azure CLI calls to the emulator. See [Run against LocalStack](../../README.md#run-against-localstack) for the full setup.
+> **Running on LocalStack?** Install the [lstk CLI](https://docs.localstack.cloud/aws/developer-tools/running-localstack/lstk/) and run `lstk az start-interception` to route Azure CLI calls to the emulator. See [Run against LocalStack](../../../README.md#run-against-localstack) for the full setup.
 
 ## Architecture
 
diff --git a/samples/web-app-sql-database/images/architecture.png b/samples/web-app-sql-database/python/images/architecture.png
similarity index 100%
rename from samples/web-app-sql-database/images/architecture.png
rename to samples/web-app-sql-database/python/images/architecture.png
diff --git a/samples/web-app-sql-database/scripts/00-variables.sh b/samples/web-app-sql-database/python/scripts/00-variables.sh
similarity index 100%
rename from samples/web-app-sql-database/scripts/00-variables.sh
rename to samples/web-app-sql-database/python/scripts/00-variables.sh
diff --git a/samples/web-app-sql-database/scripts/01-deploy-resources.sh b/samples/web-app-sql-database/python/scripts/01-deploy-resources.sh
similarity index 100%
rename from samples/web-app-sql-database/scripts/01-deploy-resources.sh
rename to samples/web-app-sql-database/python/scripts/01-deploy-resources.sh
diff --git a/samples/web-app-sql-database/scripts/02-build-docker-image.sh b/samples/web-app-sql-database/python/scripts/02-build-docker-image.sh
similarity index 100%
rename from samples/web-app-sql-database/scripts/02-build-docker-image.sh
rename to samples/web-app-sql-database/python/scripts/02-build-docker-image.sh
diff --git a/samples/web-app-sql-database/scripts/03-run-docker-container.sh b/samples/web-app-sql-database/python/scripts/03-run-docker-container.sh
similarity index 100%
rename from samples/web-app-sql-database/scripts/03-run-docker-container.sh
rename to samples/web-app-sql-database/python/scripts/03-run-docker-container.sh
diff --git a/samples/web-app-sql-database/scripts/04-push-docker-image.sh b/samples/web-app-sql-database/python/scripts/04-push-docker-image.sh
similarity index 100%
rename from samples/web-app-sql-database/scripts/04-push-docker-image.sh
rename to samples/web-app-sql-database/python/scripts/04-push-docker-image.sh
diff --git a/samples/web-app-sql-database/scripts/05-deploy-app.sh b/samples/web-app-sql-database/python/scripts/05-deploy-app.sh
similarity index 100%
rename from samples/web-app-sql-database/scripts/05-deploy-app.sh
rename to samples/web-app-sql-database/python/scripts/05-deploy-app.sh
diff --git a/samples/web-app-sql-database/scripts/Dockerfile b/samples/web-app-sql-database/python/scripts/Dockerfile
similarity index 100%
rename from samples/web-app-sql-database/scripts/Dockerfile
rename to samples/web-app-sql-database/python/scripts/Dockerfile
diff --git a/samples/web-app-sql-database/scripts/configmap.yml b/samples/web-app-sql-database/python/scripts/configmap.yml
similarity index 100%
rename from samples/web-app-sql-database/scripts/configmap.yml
rename to samples/web-app-sql-database/python/scripts/configmap.yml
diff --git a/samples/web-app-sql-database/scripts/deployment.yml b/samples/web-app-sql-database/python/scripts/deployment.yml
similarity index 100%
rename from samples/web-app-sql-database/scripts/deployment.yml
rename to samples/web-app-sql-database/python/scripts/deployment.yml
diff --git a/samples/web-app-sql-database/scripts/namespace.yml b/samples/web-app-sql-database/python/scripts/namespace.yml
similarity index 100%
rename from samples/web-app-sql-database/scripts/namespace.yml
rename to samples/web-app-sql-database/python/scripts/namespace.yml
diff --git a/samples/web-app-sql-database/scripts/secret.yml b/samples/web-app-sql-database/python/scripts/secret.yml
similarity index 100%
rename from samples/web-app-sql-database/scripts/secret.yml
rename to samples/web-app-sql-database/python/scripts/secret.yml
diff --git a/samples/web-app-sql-database/scripts/service.yml b/samples/web-app-sql-database/python/scripts/service.yml
similarity index 100%
rename from samples/web-app-sql-database/scripts/service.yml
rename to samples/web-app-sql-database/python/scripts/service.yml
diff --git a/samples/web-app-sql-database/src/activities.py b/samples/web-app-sql-database/python/src/activities.py
similarity index 100%
rename from samples/web-app-sql-database/src/activities.py
rename to samples/web-app-sql-database/python/src/activities.py
diff --git a/samples/web-app-sql-database/src/app.py b/samples/web-app-sql-database/python/src/app.py
similarity index 100%
rename from samples/web-app-sql-database/src/app.py
rename to samples/web-app-sql-database/python/src/app.py
diff --git a/samples/web-app-sql-database/src/database.py b/samples/web-app-sql-database/python/src/database.py
similarity index 100%
rename from samples/web-app-sql-database/src/database.py
rename to samples/web-app-sql-database/python/src/database.py
diff --git a/samples/web-app-sql-database/src/gunicorn.conf.py b/samples/web-app-sql-database/python/src/gunicorn.conf.py
similarity index 100%
rename from samples/web-app-sql-database/src/gunicorn.conf.py
rename to samples/web-app-sql-database/python/src/gunicorn.conf.py
diff --git a/samples/web-app-sql-database/src/requirements.txt b/samples/web-app-sql-database/python/src/requirements.txt
similarity index 100%
rename from samples/web-app-sql-database/src/requirements.txt
rename to samples/web-app-sql-database/python/src/requirements.txt
diff --git a/samples/web-app-sql-database/src/static/bootstrap/css/bootstrap-grid.css b/samples/web-app-sql-database/python/src/static/bootstrap/css/bootstrap-grid.css
similarity index 100%
rename from samples/web-app-sql-database/src/static/bootstrap/css/bootstrap-grid.css
rename to samples/web-app-sql-database/python/src/static/bootstrap/css/bootstrap-grid.css
diff --git a/samples/web-app-sql-database/src/static/bootstrap/css/bootstrap-grid.css.map b/samples/web-app-sql-database/python/src/static/bootstrap/css/bootstrap-grid.css.map
similarity index 100%
rename from samples/web-app-sql-database/src/static/bootstrap/css/bootstrap-grid.css.map
rename to samples/web-app-sql-database/python/src/static/bootstrap/css/bootstrap-grid.css.map
diff --git a/samples/web-app-sql-database/src/static/bootstrap/css/bootstrap-grid.min.css b/samples/web-app-sql-database/python/src/static/bootstrap/css/bootstrap-grid.min.css
similarity index 100%
rename from samples/web-app-sql-database/src/static/bootstrap/css/bootstrap-grid.min.css
rename to samples/web-app-sql-database/python/src/static/bootstrap/css/bootstrap-grid.min.css
diff --git a/samples/web-app-sql-database/src/static/bootstrap/css/bootstrap-grid.min.css.map b/samples/web-app-sql-database/python/src/static/bootstrap/css/bootstrap-grid.min.css.map
similarity index 100%
rename from samples/web-app-sql-database/src/static/bootstrap/css/bootstrap-grid.min.css.map
rename to samples/web-app-sql-database/python/src/static/bootstrap/css/bootstrap-grid.min.css.map
diff --git a/samples/web-app-sql-database/src/static/bootstrap/css/bootstrap-grid.rtl.css b/samples/web-app-sql-database/python/src/static/bootstrap/css/bootstrap-grid.rtl.css
similarity index 100%
rename from samples/web-app-sql-database/src/static/bootstrap/css/bootstrap-grid.rtl.css
rename to samples/web-app-sql-database/python/src/static/bootstrap/css/bootstrap-grid.rtl.css
diff --git a/samples/web-app-sql-database/src/static/bootstrap/css/bootstrap-grid.rtl.css.map b/samples/web-app-sql-database/python/src/static/bootstrap/css/bootstrap-grid.rtl.css.map
similarity index 100%
rename from samples/web-app-sql-database/src/static/bootstrap/css/bootstrap-grid.rtl.css.map
rename to samples/web-app-sql-database/python/src/static/bootstrap/css/bootstrap-grid.rtl.css.map
diff --git a/samples/web-app-sql-database/src/static/bootstrap/css/bootstrap-grid.rtl.min.css b/samples/web-app-sql-database/python/src/static/bootstrap/css/bootstrap-grid.rtl.min.css
similarity index 100%
rename from samples/web-app-sql-database/src/static/bootstrap/css/bootstrap-grid.rtl.min.css
rename to samples/web-app-sql-database/python/src/static/bootstrap/css/bootstrap-grid.rtl.min.css
diff --git a/samples/web-app-sql-database/src/static/bootstrap/css/bootstrap-grid.rtl.min.css.map b/samples/web-app-sql-database/python/src/static/bootstrap/css/bootstrap-grid.rtl.min.css.map
similarity index 100%
rename from samples/web-app-sql-database/src/static/bootstrap/css/bootstrap-grid.rtl.min.css.map
rename to samples/web-app-sql-database/python/src/static/bootstrap/css/bootstrap-grid.rtl.min.css.map
diff --git a/samples/web-app-sql-database/src/static/bootstrap/css/bootstrap-reboot.css b/samples/web-app-sql-database/python/src/static/bootstrap/css/bootstrap-reboot.css
similarity index 100%
rename from samples/web-app-sql-database/src/static/bootstrap/css/bootstrap-reboot.css
rename to samples/web-app-sql-database/python/src/static/bootstrap/css/bootstrap-reboot.css
diff --git a/samples/web-app-sql-database/src/static/bootstrap/css/bootstrap-reboot.css.map b/samples/web-app-sql-database/python/src/static/bootstrap/css/bootstrap-reboot.css.map
similarity index 100%
rename from samples/web-app-sql-database/src/static/bootstrap/css/bootstrap-reboot.css.map
rename to samples/web-app-sql-database/python/src/static/bootstrap/css/bootstrap-reboot.css.map
diff --git a/samples/web-app-sql-database/src/static/bootstrap/css/bootstrap-reboot.min.css b/samples/web-app-sql-database/python/src/static/bootstrap/css/bootstrap-reboot.min.css
similarity index 100%
rename from samples/web-app-sql-database/src/static/bootstrap/css/bootstrap-reboot.min.css
rename to samples/web-app-sql-database/python/src/static/bootstrap/css/bootstrap-reboot.min.css
diff --git a/samples/web-app-sql-database/src/static/bootstrap/css/bootstrap-reboot.min.css.map b/samples/web-app-sql-database/python/src/static/bootstrap/css/bootstrap-reboot.min.css.map
similarity index 100%
rename from samples/web-app-sql-database/src/static/bootstrap/css/bootstrap-reboot.min.css.map
rename to samples/web-app-sql-database/python/src/static/bootstrap/css/bootstrap-reboot.min.css.map
diff --git a/samples/web-app-sql-database/src/static/bootstrap/css/bootstrap-reboot.rtl.css b/samples/web-app-sql-database/python/src/static/bootstrap/css/bootstrap-reboot.rtl.css
similarity index 100%
rename from samples/web-app-sql-database/src/static/bootstrap/css/bootstrap-reboot.rtl.css
rename to samples/web-app-sql-database/python/src/static/bootstrap/css/bootstrap-reboot.rtl.css
diff --git a/samples/web-app-sql-database/src/static/bootstrap/css/bootstrap-reboot.rtl.css.map b/samples/web-app-sql-database/python/src/static/bootstrap/css/bootstrap-reboot.rtl.css.map
similarity index 100%
rename from samples/web-app-sql-database/src/static/bootstrap/css/bootstrap-reboot.rtl.css.map
rename to samples/web-app-sql-database/python/src/static/bootstrap/css/bootstrap-reboot.rtl.css.map
diff --git a/samples/web-app-sql-database/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css b/samples/web-app-sql-database/python/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css
similarity index 100%
rename from samples/web-app-sql-database/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css
rename to samples/web-app-sql-database/python/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css
diff --git a/samples/web-app-sql-database/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css.map b/samples/web-app-sql-database/python/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css.map
similarity index 100%
rename from samples/web-app-sql-database/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css.map
rename to samples/web-app-sql-database/python/src/static/bootstrap/css/bootstrap-reboot.rtl.min.css.map
diff --git a/samples/web-app-sql-database/src/static/bootstrap/css/bootstrap-utilities.css b/samples/web-app-sql-database/python/src/static/bootstrap/css/bootstrap-utilities.css
similarity index 100%
rename from samples/web-app-sql-database/src/static/bootstrap/css/bootstrap-utilities.css
rename to samples/web-app-sql-database/python/src/static/bootstrap/css/bootstrap-utilities.css
diff --git a/samples/web-app-sql-database/src/static/bootstrap/css/bootstrap-utilities.css.map b/samples/web-app-sql-database/python/src/static/bootstrap/css/bootstrap-utilities.css.map
similarity index 100%
rename from samples/web-app-sql-database/src/static/bootstrap/css/bootstrap-utilities.css.map
rename to samples/web-app-sql-database/python/src/static/bootstrap/css/bootstrap-utilities.css.map
diff --git a/samples/web-app-sql-database/src/static/bootstrap/css/bootstrap-utilities.min.css b/samples/web-app-sql-database/python/src/static/bootstrap/css/bootstrap-utilities.min.css
similarity index 100%
rename from samples/web-app-sql-database/src/static/bootstrap/css/bootstrap-utilities.min.css
rename to samples/web-app-sql-database/python/src/static/bootstrap/css/bootstrap-utilities.min.css
diff --git a/samples/web-app-sql-database/src/static/bootstrap/css/bootstrap-utilities.min.css.map b/samples/web-app-sql-database/python/src/static/bootstrap/css/bootstrap-utilities.min.css.map
similarity index 100%
rename from samples/web-app-sql-database/src/static/bootstrap/css/bootstrap-utilities.min.css.map
rename to samples/web-app-sql-database/python/src/static/bootstrap/css/bootstrap-utilities.min.css.map
diff --git a/samples/web-app-sql-database/src/static/bootstrap/css/bootstrap-utilities.rtl.css b/samples/web-app-sql-database/python/src/static/bootstrap/css/bootstrap-utilities.rtl.css
similarity index 100%
rename from samples/web-app-sql-database/src/static/bootstrap/css/bootstrap-utilities.rtl.css
rename to samples/web-app-sql-database/python/src/static/bootstrap/css/bootstrap-utilities.rtl.css
diff --git a/samples/web-app-sql-database/src/static/bootstrap/css/bootstrap-utilities.rtl.css.map b/samples/web-app-sql-database/python/src/static/bootstrap/css/bootstrap-utilities.rtl.css.map
similarity index 100%
rename from samples/web-app-sql-database/src/static/bootstrap/css/bootstrap-utilities.rtl.css.map
rename to samples/web-app-sql-database/python/src/static/bootstrap/css/bootstrap-utilities.rtl.css.map
diff --git a/samples/web-app-sql-database/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css b/samples/web-app-sql-database/python/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css
similarity index 100%
rename from samples/web-app-sql-database/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css
rename to samples/web-app-sql-database/python/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css
diff --git a/samples/web-app-sql-database/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css.map b/samples/web-app-sql-database/python/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css.map
similarity index 100%
rename from samples/web-app-sql-database/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css.map
rename to samples/web-app-sql-database/python/src/static/bootstrap/css/bootstrap-utilities.rtl.min.css.map
diff --git a/samples/web-app-sql-database/src/static/bootstrap/css/bootstrap.css b/samples/web-app-sql-database/python/src/static/bootstrap/css/bootstrap.css
similarity index 100%
rename from samples/web-app-sql-database/src/static/bootstrap/css/bootstrap.css
rename to samples/web-app-sql-database/python/src/static/bootstrap/css/bootstrap.css
diff --git a/samples/web-app-sql-database/src/static/bootstrap/css/bootstrap.css.map b/samples/web-app-sql-database/python/src/static/bootstrap/css/bootstrap.css.map
similarity index 100%
rename from samples/web-app-sql-database/src/static/bootstrap/css/bootstrap.css.map
rename to samples/web-app-sql-database/python/src/static/bootstrap/css/bootstrap.css.map
diff --git a/samples/web-app-sql-database/src/static/bootstrap/css/bootstrap.min.css b/samples/web-app-sql-database/python/src/static/bootstrap/css/bootstrap.min.css
similarity index 100%
rename from samples/web-app-sql-database/src/static/bootstrap/css/bootstrap.min.css
rename to samples/web-app-sql-database/python/src/static/bootstrap/css/bootstrap.min.css
diff --git a/samples/web-app-sql-database/src/static/bootstrap/css/bootstrap.min.css.map b/samples/web-app-sql-database/python/src/static/bootstrap/css/bootstrap.min.css.map
similarity index 100%
rename from samples/web-app-sql-database/src/static/bootstrap/css/bootstrap.min.css.map
rename to samples/web-app-sql-database/python/src/static/bootstrap/css/bootstrap.min.css.map
diff --git a/samples/web-app-sql-database/src/static/bootstrap/css/bootstrap.rtl.css b/samples/web-app-sql-database/python/src/static/bootstrap/css/bootstrap.rtl.css
similarity index 100%
rename from samples/web-app-sql-database/src/static/bootstrap/css/bootstrap.rtl.css
rename to samples/web-app-sql-database/python/src/static/bootstrap/css/bootstrap.rtl.css
diff --git a/samples/web-app-sql-database/src/static/bootstrap/css/bootstrap.rtl.css.map b/samples/web-app-sql-database/python/src/static/bootstrap/css/bootstrap.rtl.css.map
similarity index 100%
rename from samples/web-app-sql-database/src/static/bootstrap/css/bootstrap.rtl.css.map
rename to samples/web-app-sql-database/python/src/static/bootstrap/css/bootstrap.rtl.css.map
diff --git a/samples/web-app-sql-database/src/static/bootstrap/css/bootstrap.rtl.min.css b/samples/web-app-sql-database/python/src/static/bootstrap/css/bootstrap.rtl.min.css
similarity index 100%
rename from samples/web-app-sql-database/src/static/bootstrap/css/bootstrap.rtl.min.css
rename to samples/web-app-sql-database/python/src/static/bootstrap/css/bootstrap.rtl.min.css
diff --git a/samples/web-app-sql-database/src/static/bootstrap/css/bootstrap.rtl.min.css.map b/samples/web-app-sql-database/python/src/static/bootstrap/css/bootstrap.rtl.min.css.map
similarity index 100%
rename from samples/web-app-sql-database/src/static/bootstrap/css/bootstrap.rtl.min.css.map
rename to samples/web-app-sql-database/python/src/static/bootstrap/css/bootstrap.rtl.min.css.map
diff --git a/samples/web-app-sql-database/src/static/bootstrap/js/bootstrap.bundle.js b/samples/web-app-sql-database/python/src/static/bootstrap/js/bootstrap.bundle.js
similarity index 100%
rename from samples/web-app-sql-database/src/static/bootstrap/js/bootstrap.bundle.js
rename to samples/web-app-sql-database/python/src/static/bootstrap/js/bootstrap.bundle.js
diff --git a/samples/web-app-sql-database/src/static/bootstrap/js/bootstrap.bundle.js.map b/samples/web-app-sql-database/python/src/static/bootstrap/js/bootstrap.bundle.js.map
similarity index 100%
rename from samples/web-app-sql-database/src/static/bootstrap/js/bootstrap.bundle.js.map
rename to samples/web-app-sql-database/python/src/static/bootstrap/js/bootstrap.bundle.js.map
diff --git a/samples/web-app-sql-database/src/static/bootstrap/js/bootstrap.bundle.min.js b/samples/web-app-sql-database/python/src/static/bootstrap/js/bootstrap.bundle.min.js
similarity index 100%
rename from samples/web-app-sql-database/src/static/bootstrap/js/bootstrap.bundle.min.js
rename to samples/web-app-sql-database/python/src/static/bootstrap/js/bootstrap.bundle.min.js
diff --git a/samples/web-app-sql-database/src/static/bootstrap/js/bootstrap.bundle.min.js.map b/samples/web-app-sql-database/python/src/static/bootstrap/js/bootstrap.bundle.min.js.map
similarity index 100%
rename from samples/web-app-sql-database/src/static/bootstrap/js/bootstrap.bundle.min.js.map
rename to samples/web-app-sql-database/python/src/static/bootstrap/js/bootstrap.bundle.min.js.map
diff --git a/samples/web-app-sql-database/src/static/bootstrap/js/bootstrap.esm.js b/samples/web-app-sql-database/python/src/static/bootstrap/js/bootstrap.esm.js
similarity index 100%
rename from samples/web-app-sql-database/src/static/bootstrap/js/bootstrap.esm.js
rename to samples/web-app-sql-database/python/src/static/bootstrap/js/bootstrap.esm.js
diff --git a/samples/web-app-sql-database/src/static/bootstrap/js/bootstrap.esm.js.map b/samples/web-app-sql-database/python/src/static/bootstrap/js/bootstrap.esm.js.map
similarity index 100%
rename from samples/web-app-sql-database/src/static/bootstrap/js/bootstrap.esm.js.map
rename to samples/web-app-sql-database/python/src/static/bootstrap/js/bootstrap.esm.js.map
diff --git a/samples/web-app-sql-database/src/static/bootstrap/js/bootstrap.esm.min.js b/samples/web-app-sql-database/python/src/static/bootstrap/js/bootstrap.esm.min.js
similarity index 100%
rename from samples/web-app-sql-database/src/static/bootstrap/js/bootstrap.esm.min.js
rename to samples/web-app-sql-database/python/src/static/bootstrap/js/bootstrap.esm.min.js
diff --git a/samples/web-app-sql-database/src/static/bootstrap/js/bootstrap.esm.min.js.map b/samples/web-app-sql-database/python/src/static/bootstrap/js/bootstrap.esm.min.js.map
similarity index 100%
rename from samples/web-app-sql-database/src/static/bootstrap/js/bootstrap.esm.min.js.map
rename to samples/web-app-sql-database/python/src/static/bootstrap/js/bootstrap.esm.min.js.map
diff --git a/samples/web-app-sql-database/src/static/bootstrap/js/bootstrap.js b/samples/web-app-sql-database/python/src/static/bootstrap/js/bootstrap.js
similarity index 100%
rename from samples/web-app-sql-database/src/static/bootstrap/js/bootstrap.js
rename to samples/web-app-sql-database/python/src/static/bootstrap/js/bootstrap.js
diff --git a/samples/web-app-sql-database/src/static/bootstrap/js/bootstrap.js.map b/samples/web-app-sql-database/python/src/static/bootstrap/js/bootstrap.js.map
similarity index 100%
rename from samples/web-app-sql-database/src/static/bootstrap/js/bootstrap.js.map
rename to samples/web-app-sql-database/python/src/static/bootstrap/js/bootstrap.js.map
diff --git a/samples/web-app-sql-database/src/static/bootstrap/js/bootstrap.min.js b/samples/web-app-sql-database/python/src/static/bootstrap/js/bootstrap.min.js
similarity index 100%
rename from samples/web-app-sql-database/src/static/bootstrap/js/bootstrap.min.js
rename to samples/web-app-sql-database/python/src/static/bootstrap/js/bootstrap.min.js
diff --git a/samples/web-app-sql-database/src/static/bootstrap/js/bootstrap.min.js.map b/samples/web-app-sql-database/python/src/static/bootstrap/js/bootstrap.min.js.map
similarity index 100%
rename from samples/web-app-sql-database/src/static/bootstrap/js/bootstrap.min.js.map
rename to samples/web-app-sql-database/python/src/static/bootstrap/js/bootstrap.min.js.map
diff --git a/samples/web-app-sql-database/src/static/favicon.ico b/samples/web-app-sql-database/python/src/static/favicon.ico
similarity index 100%
rename from samples/web-app-sql-database/src/static/favicon.ico
rename to samples/web-app-sql-database/python/src/static/favicon.ico
diff --git a/samples/web-app-sql-database/src/static/style.css b/samples/web-app-sql-database/python/src/static/style.css
similarity index 100%
rename from samples/web-app-sql-database/src/static/style.css
rename to samples/web-app-sql-database/python/src/static/style.css
diff --git a/samples/web-app-sql-database/src/templates/index.html b/samples/web-app-sql-database/python/src/templates/index.html
similarity index 100%
rename from samples/web-app-sql-database/src/templates/index.html
rename to samples/web-app-sql-database/python/src/templates/index.html

From 6aa2661a994f6633710ca17fde852f848a20642f Mon Sep 17 00:00:00 2001
From: Paolo Salvatori <leprino@hotmail.com>
Date: Tue, 8 Sep 2026 12:12:50 +0200
Subject: [PATCH 02/20] Add GET /health to the Python samples and probe it

Every Python Vacation Planner gains a GET /health route that answers
{"status": "ok"} when its backing store is reachable (container exists,
directory writable, MongoDB ping, Cosmos container read, SELECT 1) and
503 {"status": "unavailable"} otherwise. The liveness and readiness
probes of all nine Deployments call it instead of rendering the full
page on every probe. Verified locally with the file-storage image: 200
on a writable mount, 503 on a missing one.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
---
 samples/web-app-blob-storage/python/README.md     |  8 +++++++-
 .../python/scripts/deployment.yml                 |  4 ++--
 samples/web-app-blob-storage/python/src/app.py    | 15 ++++++++++++++-
 .../web-app-cosmosdb-mongodb-api/python/README.md |  8 +++++++-
 .../python/scripts/deployment.yml                 |  4 ++--
 .../python/src/app.py                             | 12 +++++++++++-
 .../web-app-cosmosdb-nosql-api/python/README.md   |  8 +++++++-
 .../python/scripts/deployment.yml                 |  4 ++--
 .../web-app-cosmosdb-nosql-api/python/src/app.py  | 12 +++++++++++-
 .../python/src/cosmosdb_client.py                 |  5 +++++
 samples/web-app-file-storage/python/README.md     |  8 +++++++-
 .../python/scripts/deployment.yml                 |  4 ++--
 samples/web-app-file-storage/python/src/app.py    | 15 ++++++++++++++-
 .../python/README.md                              |  8 +++++++-
 .../python/scripts/deployment.yml                 |  4 ++--
 .../python/src/app.py                             | 13 ++++++++++++-
 .../python/src/database.py                        | 10 ++++++++++
 samples/web-app-managed-identity/python/README.md |  8 +++++++-
 .../python/scripts/deployment.yml                 |  4 ++--
 .../web-app-managed-identity/python/src/app.py    | 15 ++++++++++++++-
 .../python/README.md                              |  8 +++++++-
 .../python/scripts/deployment.yml                 |  4 ++--
 .../python/src/app.py                             | 13 ++++++++++++-
 .../python/src/database.py                        | 10 ++++++++++
 .../python/README.md                              |  8 +++++++-
 .../python/scripts/deployment.yml                 |  4 ++--
 .../python/src/app.py                             | 13 ++++++++++++-
 .../python/src/database.py                        | 10 ++++++++++
 samples/web-app-sql-database/python/README.md     |  8 +++++++-
 .../python/scripts/deployment.yml                 |  4 ++--
 samples/web-app-sql-database/python/src/app.py    | 10 +++++++++-
 31 files changed, 225 insertions(+), 36 deletions(-)

diff --git a/samples/web-app-blob-storage/python/README.md b/samples/web-app-blob-storage/python/README.md
index ad0d130..1b33427 100644
--- a/samples/web-app-blob-storage/python/README.md
+++ b/samples/web-app-blob-storage/python/README.md
@@ -48,7 +48,7 @@ cd scripts
 | [`namespace.yml`](scripts/namespace.yml) | Creates the Kubernetes namespace. |
 | [`configmap.yml`](scripts/configmap.yml) | Creates the ConfigMap holding non-secret input values (blob container name, login name) passed to the app as environment variables. |
 | [`secret.yml`](scripts/secret.yml) | Creates the Secret holding sensitive values (the storage account connection string and the Flask secret key) passed to the app as environment variables. |
-| [`deployment.yml`](scripts/deployment.yml) | Creates the Kubernetes Deployment, including the pod specification for the web app. |
+| [`deployment.yml`](scripts/deployment.yml) | Creates the Kubernetes Deployment, including the pod specification for the web app. The liveness and readiness probes call `GET /health`. |
 | [`service.yml`](scripts/service.yml) | Creates the `ClusterIP` Service that exposes the web app inside the cluster. |
 
 ## Accessing the web app
@@ -60,3 +60,9 @@ kubectl port-forward service/vacation-planner-blob 8080:80 -n vacation-planner-b
 ```
 
 Then browse to [http://localhost:8080](http://localhost:8080). Alternatively, use a tool such as [k9s](https://k9scli.io/) to start the port-forward interactively.
+
+The app also exposes `GET /health`, the endpoint the liveness and readiness probes call: it returns `{"status": "ok"}` when the blob container is reachable and `503` with `{"status": "unavailable"}` otherwise.
+
+```bash
+curl http://localhost:8080/health
+```
diff --git a/samples/web-app-blob-storage/python/scripts/deployment.yml b/samples/web-app-blob-storage/python/scripts/deployment.yml
index b4cd0da..60db5e9 100644
--- a/samples/web-app-blob-storage/python/scripts/deployment.yml
+++ b/samples/web-app-blob-storage/python/scripts/deployment.yml
@@ -55,7 +55,7 @@ spec:
               memory: "256Mi"
           livenessProbe:
             httpGet:
-              path: /
+              path: /health
               port: http
             initialDelaySeconds: 15
             periodSeconds: 30
@@ -63,7 +63,7 @@ spec:
             failureThreshold: 3
           readinessProbe:
             httpGet:
-              path: /
+              path: /health
               port: http
             initialDelaySeconds: 5
             periodSeconds: 10
diff --git a/samples/web-app-blob-storage/python/src/app.py b/samples/web-app-blob-storage/python/src/app.py
index de56959..7b7d833 100644
--- a/samples/web-app-blob-storage/python/src/app.py
+++ b/samples/web-app-blob-storage/python/src/app.py
@@ -5,7 +5,7 @@
 from azure.identity import DefaultAzureCredential, ClientSecretCredential
 from azure.storage.blob import BlobServiceClient
 from azure.core.exceptions import ResourceExistsError
-from flask import Flask, flash, render_template, request, redirect, url_for
+from flask import Flask, flash, jsonify, render_template, request, redirect, url_for
 
 # Initialize Flask application
 app: Flask = Flask(__name__)
@@ -255,6 +255,19 @@ def delete(activity_id):
         flash('Activity deleted successfully.')
     return redirect(url_for('index'))
 
+@app.route('/health')
+def health():
+    """Liveness and readiness probe: reports whether the blob container is reachable."""
+    try:
+        if not blob_service_client or not container_name:
+            raise ValueError("BlobServiceClient is not initialized.")
+        if not blob_service_client.get_container_client(container_name).exists():
+            raise ValueError(f"Container '{container_name}' does not exist.")
+        return jsonify({"status": "ok"})
+    except Exception as ex:
+        print(f"Health check failed: {ex}")
+        return jsonify({"status": "unavailable"}), 503
+
 # Initialize the application and Azure services when the module is loaded.
 # This ensures that the setup runs regardless of how the app is started (e.g., via 'flask run' or directly).
 get_environment_variables()
diff --git a/samples/web-app-cosmosdb-mongodb-api/python/README.md b/samples/web-app-cosmosdb-mongodb-api/python/README.md
index 1d2b0ed..ffa8165 100644
--- a/samples/web-app-cosmosdb-mongodb-api/python/README.md
+++ b/samples/web-app-cosmosdb-mongodb-api/python/README.md
@@ -48,7 +48,7 @@ cd scripts
 | [`namespace.yml`](scripts/namespace.yml) | Creates the Kubernetes namespace. |
 | [`configmap.yml`](scripts/configmap.yml) | Creates the ConfigMap holding non-secret input values (database name, collection name, login name) passed to the app as environment variables. |
 | [`secret.yml`](scripts/secret.yml) | Creates the Secret holding sensitive values (the Cosmos DB MongoDB connection string and the Flask secret key) passed to the app as environment variables. |
-| [`deployment.yml`](scripts/deployment.yml) | Creates the Kubernetes Deployment, including the pod specification for the web app. |
+| [`deployment.yml`](scripts/deployment.yml) | Creates the Kubernetes Deployment, including the pod specification for the web app. The liveness and readiness probes call `GET /health`. |
 | [`service.yml`](scripts/service.yml) | Creates the `ClusterIP` Service that exposes the web app inside the cluster. |
 
 ## Accessing the web app
@@ -60,3 +60,9 @@ kubectl port-forward service/vacation-planner-mongodb 8080:80 -n vacation-planne
 ```
 
 Then browse to [http://localhost:8080](http://localhost:8080). Alternatively, use a tool such as [k9s](https://k9scli.io/) to start the port-forward interactively.
+
+The app also exposes `GET /health`, the endpoint the liveness and readiness probes call: it returns `{"status": "ok"}` when the Cosmos DB for MongoDB account is reachable and `503` with `{"status": "unavailable"}` otherwise.
+
+```bash
+curl http://localhost:8080/health
+```
diff --git a/samples/web-app-cosmosdb-mongodb-api/python/scripts/deployment.yml b/samples/web-app-cosmosdb-mongodb-api/python/scripts/deployment.yml
index 6366645..148e5ca 100644
--- a/samples/web-app-cosmosdb-mongodb-api/python/scripts/deployment.yml
+++ b/samples/web-app-cosmosdb-mongodb-api/python/scripts/deployment.yml
@@ -65,7 +65,7 @@ spec:
               memory: "256Mi"
           livenessProbe:
             httpGet:
-              path: /
+              path: /health
               port: http
             initialDelaySeconds: 15
             periodSeconds: 30
@@ -73,7 +73,7 @@ spec:
             failureThreshold: 3
           readinessProbe:
             httpGet:
-              path: /
+              path: /health
               port: http
             initialDelaySeconds: 5
             periodSeconds: 10
diff --git a/samples/web-app-cosmosdb-mongodb-api/python/src/app.py b/samples/web-app-cosmosdb-mongodb-api/python/src/app.py
index aab8e20..dcc8d24 100644
--- a/samples/web-app-cosmosdb-mongodb-api/python/src/app.py
+++ b/samples/web-app-cosmosdb-mongodb-api/python/src/app.py
@@ -3,7 +3,7 @@
 import datetime
 import logging
 from typing import List, Tuple
-from flask import Flask, flash, render_template, request, redirect, url_for
+from flask import Flask, flash, jsonify, render_template, request, redirect, url_for
 from mongodb import MongoDbClient
 import hashlib
 
@@ -118,6 +118,16 @@ def delete(activity_id: int):
 
     return redirect(url_for('index'))
 
+@app.route('/health')
+def health():
+    """Liveness and readiness probe: reports whether the MongoDB server answers a ping."""
+    try:
+        mongodb_client.client.admin.command('ping')
+        return jsonify({"status": "ok"})
+    except Exception as ex:
+        logger.warning("Health check failed: %s", ex)
+        return jsonify({"status": "unavailable"}), 503
+
 # Read debug environment variable
 debug = os.environ.get("DEBUG", "false").lower() == "true"
 
diff --git a/samples/web-app-cosmosdb-nosql-api/python/README.md b/samples/web-app-cosmosdb-nosql-api/python/README.md
index 1238c4d..7e474d3 100644
--- a/samples/web-app-cosmosdb-nosql-api/python/README.md
+++ b/samples/web-app-cosmosdb-nosql-api/python/README.md
@@ -50,7 +50,7 @@ cd scripts
 | [`namespace.yml`](scripts/namespace.yml) | Creates the Kubernetes namespace. |
 | [`configmap.yml`](scripts/configmap.yml) | Creates the ConfigMap holding non-secret input values (Cosmos DB endpoint, database, container, login name) passed to the app as environment variables. |
 | [`secret.yml`](scripts/secret.yml) | Creates the Secret holding sensitive values (the Cosmos DB key and the Flask secret key) passed to the app as environment variables. |
-| [`deployment.yml`](scripts/deployment.yml) | Creates the Kubernetes Deployment, including the pod specification for the web app. |
+| [`deployment.yml`](scripts/deployment.yml) | Creates the Kubernetes Deployment, including the pod specification for the web app. The liveness and readiness probes call `GET /health`. |
 | [`service.yml`](scripts/service.yml) | Creates the `ClusterIP` Service that exposes the web app inside the cluster. |
 
 ## Accessing the web app
@@ -62,3 +62,9 @@ kubectl port-forward service/vacation-planner-nosql 8080:80 -n vacation-planner-
 ```
 
 Then browse to [http://localhost:8080](http://localhost:8080). Alternatively, use a tool such as [k9s](https://k9scli.io/) to start the port-forward interactively.
+
+The app also exposes `GET /health`, the endpoint the liveness and readiness probes call: it returns `{"status": "ok"}` when the Cosmos DB for NoSQL container is reachable and `503` with `{"status": "unavailable"}` otherwise.
+
+```bash
+curl http://localhost:8080/health
+```
diff --git a/samples/web-app-cosmosdb-nosql-api/python/scripts/deployment.yml b/samples/web-app-cosmosdb-nosql-api/python/scripts/deployment.yml
index 940c99f..07537ae 100644
--- a/samples/web-app-cosmosdb-nosql-api/python/scripts/deployment.yml
+++ b/samples/web-app-cosmosdb-nosql-api/python/scripts/deployment.yml
@@ -80,7 +80,7 @@ spec:
               memory: "256Mi"
           livenessProbe:
             httpGet:
-              path: /
+              path: /health
               port: http
             initialDelaySeconds: 15
             periodSeconds: 30
@@ -88,7 +88,7 @@ spec:
             failureThreshold: 3
           readinessProbe:
             httpGet:
-              path: /
+              path: /health
               port: http
             initialDelaySeconds: 5
             periodSeconds: 10
diff --git a/samples/web-app-cosmosdb-nosql-api/python/src/app.py b/samples/web-app-cosmosdb-nosql-api/python/src/app.py
index 01ec002..9ed4f92 100644
--- a/samples/web-app-cosmosdb-nosql-api/python/src/app.py
+++ b/samples/web-app-cosmosdb-nosql-api/python/src/app.py
@@ -2,7 +2,7 @@
 import datetime
 import logging
 import hashlib
-from flask import Flask, flash, render_template, request, redirect, url_for
+from flask import Flask, flash, jsonify, render_template, request, redirect, url_for
 from cosmosdb_client import CosmosDbClient
 
 
@@ -114,5 +114,15 @@ def delete(activity_id: str):
     
     return redirect(url_for('index'))
 
+@app.route('/health')
+def health():
+    """Liveness and readiness probe: reports whether the Cosmos DB container is reachable."""
+    try:
+        get_cosmos().ping()
+        return jsonify({"status": "ok"})
+    except Exception as ex:
+        logger.warning("Health check failed: %s", ex)
+        return jsonify({"status": "unavailable"}), 503
+
 if __name__ == '__main__':
     app.run(debug=True)
diff --git a/samples/web-app-cosmosdb-nosql-api/python/src/cosmosdb_client.py b/samples/web-app-cosmosdb-nosql-api/python/src/cosmosdb_client.py
index 0eb19b7..65ed36a 100644
--- a/samples/web-app-cosmosdb-nosql-api/python/src/cosmosdb_client.py
+++ b/samples/web-app-cosmosdb-nosql-api/python/src/cosmosdb_client.py
@@ -23,6 +23,11 @@ def ensure_initialized(self):
             offer_throughput=400
         )
 
+    def ping(self):
+        """Read the container's properties: the cheapest round trip proving the account is reachable."""
+        self.ensure_initialized()
+        return self.container.read()
+
     @classmethod
     def from_env(cls):
         return cls(
diff --git a/samples/web-app-file-storage/python/README.md b/samples/web-app-file-storage/python/README.md
index 5e40d09..e9ee2db 100644
--- a/samples/web-app-file-storage/python/README.md
+++ b/samples/web-app-file-storage/python/README.md
@@ -92,7 +92,7 @@ cd scripts
 | [`persistentvolume-nfs.yml`](scripts/persistentvolume-nfs.yml) | Creates the `PersistentVolume` bound to a pre-created NFS file share, with `protocol: nfs`, the NFS mount options, and no secret. |
 | [`persistentvolumeclaim.yml`](scripts/persistentvolumeclaim.yml) | Creates the `ReadWriteMany` claim the pods mount. Committed in its static shape (pre-bound by name, empty storage class); `05-deploy-app.sh` rewrites those two fields for dynamic provisioning. |
 | [`storageclass-nfs.yml`](scripts/storageclass-nfs.yml) | Creates the storage class that provisions an NFS file share on demand (`protocol: nfs`, `skuName: Premium_LRS`). Applied for the dynamic NFS combination only. |
-| [`deployment.yml`](scripts/deployment.yml) | Creates the Kubernetes Deployment: three replicas mounting the same share, plus the init container that prepares and seeds it. |
+| [`deployment.yml`](scripts/deployment.yml) | Creates the Kubernetes Deployment: three replicas mounting the same share, plus the init container that prepares and seeds it. The liveness and readiness probes call `GET /health`. |
 | [`service.yml`](scripts/service.yml) | Creates the `ClusterIP` Service that exposes the web app inside the cluster. |
 
 ## Accessing the web app
@@ -105,6 +105,12 @@ kubectl port-forward service/vacation-planner-file 8080:80 -n vacation-planner-f
 
 Then browse to [http://localhost:8080](http://localhost:8080). Alternatively, use a tool such as [k9s](https://k9scli.io/) to start the port-forward interactively.
 
+The app also exposes `GET /health`, the endpoint the liveness and readiness probes call: it returns `{"status": "ok"}` when the mounted file share is reachable and `503` with `{"status": "unavailable"}` otherwise.
+
+```bash
+curl http://localhost:8080/health
+```
+
 ## Looking at the file share
 
 Every activity is one UTF-8 text file named `YYYY-MM-DD-HH-MM-SS-activity.txt`. From inside the cluster, on any of the three replicas and for any of the four combinations:
diff --git a/samples/web-app-file-storage/python/scripts/deployment.yml b/samples/web-app-file-storage/python/scripts/deployment.yml
index ebac00d..0e762cb 100644
--- a/samples/web-app-file-storage/python/scripts/deployment.yml
+++ b/samples/web-app-file-storage/python/scripts/deployment.yml
@@ -149,7 +149,7 @@ spec:
               memory: "256Mi"
           livenessProbe:
             httpGet:
-              path: /
+              path: /health
               port: http
             initialDelaySeconds: 15
             periodSeconds: 30
@@ -157,7 +157,7 @@ spec:
             failureThreshold: 3
           readinessProbe:
             httpGet:
-              path: /
+              path: /health
               port: http
             initialDelaySeconds: 5
             periodSeconds: 10
diff --git a/samples/web-app-file-storage/python/src/app.py b/samples/web-app-file-storage/python/src/app.py
index 34cc348..da46e6e 100644
--- a/samples/web-app-file-storage/python/src/app.py
+++ b/samples/web-app-file-storage/python/src/app.py
@@ -2,7 +2,7 @@
 import socket
 import datetime
 from typing import List, Tuple
-from flask import Flask, flash, render_template, request, redirect, url_for
+from flask import Flask, flash, jsonify, render_template, request, redirect, url_for
 
 # Initialize Flask application
 app: Flask = Flask(__name__)
@@ -262,6 +262,19 @@ def delete():
 
     return redirect(url_for('index'))
 
+@app.route('/health')
+def health():
+    """Liveness and readiness probe: reports whether the mounted activities directory is usable."""
+    try:
+        if not activities_dir or not os.path.isdir(activities_dir):
+            raise ValueError(f"Activities directory '{activities_dir}' does not exist. Is the Azure file share mounted?")
+        if not os.access(activities_dir, os.W_OK | os.X_OK):
+            raise ValueError(f"Activities directory '{activities_dir}' is not writable by uid {os.geteuid()}.")
+        return jsonify({"status": "ok"})
+    except Exception as ex:
+        print(f"Health check failed: {ex}")
+        return jsonify({"status": "unavailable"}), 503
+
 # Initialize the application and the activities directory when the module is loaded.
 # This ensures that the setup runs regardless of how the app is started (e.g., via 'flask run' or directly).
 get_environment_variables()
diff --git a/samples/web-app-in-cluster-postgresql/python/README.md b/samples/web-app-in-cluster-postgresql/python/README.md
index 23d811f..75e56f1 100644
--- a/samples/web-app-in-cluster-postgresql/python/README.md
+++ b/samples/web-app-in-cluster-postgresql/python/README.md
@@ -52,7 +52,7 @@ Optionally, **after** `05-deploy-app.sh` has deployed and provisioned the databa
 | [`statefulset.yml`](scripts/statefulset.yml) | Creates the in-cluster PostgreSQL cluster: a Secret with the superuser and replication passwords, a ConfigMap with the primary/replica init scripts, the headless / primary (write) / read `ClusterIP` services, and a 3-replica StatefulSet (one primary plus two standbys configured for streaming replication) backed by Azure managed-disk PVCs. |
 | [`configmap.yml`](scripts/configmap.yml) | Creates the ConfigMap holding non-secret input values (the in-cluster PostgreSQL primary service host, database, user, login name) passed to the app as environment variables. |
 | [`secret.yml`](scripts/secret.yml) | Creates the Secret holding sensitive values (the application user's PostgreSQL password and the Flask secret key) passed to the app as environment variables. |
-| [`deployment.yml`](scripts/deployment.yml) | Creates the Kubernetes Deployment, including the pod specification for the web app. |
+| [`deployment.yml`](scripts/deployment.yml) | Creates the Kubernetes Deployment, including the pod specification for the web app. The liveness and readiness probes call `GET /health`. |
 | [`service.yml`](scripts/service.yml) | Creates the `ClusterIP` Service that exposes the web app inside the cluster. |
 
 ## Accessing the web app
@@ -64,3 +64,9 @@ kubectl port-forward service/vacation-planner-postgres 8080:80 -n vacation-plann
 ```
 
 Then browse to [http://localhost:8080](http://localhost:8080). Alternatively, use a tool such as [k9s](https://k9scli.io/) to start the port-forward interactively.
+
+The app also exposes `GET /health`, the endpoint the liveness and readiness probes call: it returns `{"status": "ok"}` when the in-cluster PostgreSQL database is reachable and `503` with `{"status": "unavailable"}` otherwise.
+
+```bash
+curl http://localhost:8080/health
+```
diff --git a/samples/web-app-in-cluster-postgresql/python/scripts/deployment.yml b/samples/web-app-in-cluster-postgresql/python/scripts/deployment.yml
index 75c88d3..6939a25 100644
--- a/samples/web-app-in-cluster-postgresql/python/scripts/deployment.yml
+++ b/samples/web-app-in-cluster-postgresql/python/scripts/deployment.yml
@@ -80,7 +80,7 @@ spec:
               memory: "512Mi"
           livenessProbe:
             httpGet:
-              path: /
+              path: /health
               port: http
             initialDelaySeconds: 30
             periodSeconds: 30
@@ -88,7 +88,7 @@ spec:
             failureThreshold: 3
           readinessProbe:
             httpGet:
-              path: /
+              path: /health
               port: http
             initialDelaySeconds: 10
             periodSeconds: 10
diff --git a/samples/web-app-in-cluster-postgresql/python/src/app.py b/samples/web-app-in-cluster-postgresql/python/src/app.py
index cd5cb23..c5dfb9e 100644
--- a/samples/web-app-in-cluster-postgresql/python/src/app.py
+++ b/samples/web-app-in-cluster-postgresql/python/src/app.py
@@ -5,7 +5,7 @@
 import os
 from typing import List, Tuple
 
-from flask import Flask, flash, redirect, render_template, request, url_for
+from flask import Flask, flash, jsonify, redirect, render_template, request, url_for
 
 from database import PostgresClient
 
@@ -86,6 +86,17 @@ def delete(activity_id: int):
     return redirect(url_for("index"))
 
 
+@app.route("/health")
+def health():
+    """Liveness and readiness probe: reports whether PostgreSQL answers SELECT 1."""
+    try:
+        db_client.ping()
+        return jsonify({"status": "ok"})
+    except Exception as exc:
+        logger.warning("Health check failed: %s", exc)
+        return jsonify({"status": "unavailable"}), 503
+
+
 debug = os.environ.get("DEBUG", "false").lower() == "true"
 
 reload_activities()
diff --git a/samples/web-app-in-cluster-postgresql/python/src/database.py b/samples/web-app-in-cluster-postgresql/python/src/database.py
index 515a6f3..d3082c0 100644
--- a/samples/web-app-in-cluster-postgresql/python/src/database.py
+++ b/samples/web-app-in-cluster-postgresql/python/src/database.py
@@ -80,6 +80,16 @@ def _connect(self):
             connect_timeout=10,
         )
 
+    def ping(self) -> None:
+        """Open a connection and run SELECT 1; raises when the server is unreachable."""
+        conn = self._connect()
+        try:
+            with conn.cursor() as cur:
+                cur.execute("SELECT 1")
+                cur.fetchone()
+        finally:
+            conn.close()
+
     def init_schema(self, retries: int = 30, delay: float = 2.0) -> None:
         """Wait for PostgreSQL to accept connections, then create the activities table."""
         last_err: Exception | None = None
diff --git a/samples/web-app-managed-identity/python/README.md b/samples/web-app-managed-identity/python/README.md
index 14f81e2..79de032 100644
--- a/samples/web-app-managed-identity/python/README.md
+++ b/samples/web-app-managed-identity/python/README.md
@@ -50,7 +50,7 @@ cd scripts
 | [`namespace.yml`](scripts/namespace.yml) | Creates the Kubernetes namespace. |
 | [`configmap.yml`](scripts/configmap.yml) | Creates the ConfigMap holding non-secret input values (blob container name, storage account URL, managed identity client ID, tenant ID) passed to the app as environment variables. |
 | [`secret.yml`](scripts/secret.yml) | Creates the Secret holding sensitive values (the Flask secret key, and the optional connection string / client secret fallback) passed to the app as environment variables. |
-| [`deployment.yml`](scripts/deployment.yml) | Creates the Kubernetes Deployment, including the pod specification and the workload-identity service account reference. |
+| [`deployment.yml`](scripts/deployment.yml) | Creates the Kubernetes Deployment, including the pod specification and the workload-identity service account reference. The liveness and readiness probes call `GET /health`. |
 | [`service.yml`](scripts/service.yml) | Creates the `ClusterIP` Service that exposes the web app inside the cluster. |
 | [`issuer.yml`](scripts/issuer.yml) | (Gateway path) cert-manager Issuer that solves the ACME HTTP-01 challenge through a Gateway API HTTPRoute. |
 | [`gateway.yml`](scripts/gateway.yml) | (Gateway path) Gateway API Gateway that exposes the app on the configured public hostname. |
@@ -66,4 +66,10 @@ kubectl port-forward service/vacation-planner-blob 8080:80 -n vacation-planner-b
 
 Then browse to [http://localhost:8080](http://localhost:8080). Alternatively, use a tool such as [k9s](https://k9scli.io/) to start the port-forward interactively.
 
+The app also exposes `GET /health`, the endpoint the liveness and readiness probes call: it returns `{"status": "ok"}` when the blob container is reachable and `503` with `{"status": "unavailable"}` otherwise.
+
+```bash
+curl http://localhost:8080/health
+```
+
 If you deployed the Gateway path (`DEPLOY_GATEWAY="true"`), the app is instead reachable directly at the public hostname configured in [`00-variables.sh`](scripts/00-variables.sh) (`https://<subdomain>.<dns-zone>`), with no port-forward required.
diff --git a/samples/web-app-managed-identity/python/scripts/deployment.yml b/samples/web-app-managed-identity/python/scripts/deployment.yml
index ec50219..fe48043 100644
--- a/samples/web-app-managed-identity/python/scripts/deployment.yml
+++ b/samples/web-app-managed-identity/python/scripts/deployment.yml
@@ -70,7 +70,7 @@ spec:
               memory: "256Mi"
           livenessProbe:
             httpGet:
-              path: /
+              path: /health
               port: http
             initialDelaySeconds: 15
             periodSeconds: 30
@@ -78,7 +78,7 @@ spec:
             failureThreshold: 3
           readinessProbe:
             httpGet:
-              path: /
+              path: /health
               port: http
             initialDelaySeconds: 5
             periodSeconds: 10
diff --git a/samples/web-app-managed-identity/python/src/app.py b/samples/web-app-managed-identity/python/src/app.py
index de56959..7b7d833 100644
--- a/samples/web-app-managed-identity/python/src/app.py
+++ b/samples/web-app-managed-identity/python/src/app.py
@@ -5,7 +5,7 @@
 from azure.identity import DefaultAzureCredential, ClientSecretCredential
 from azure.storage.blob import BlobServiceClient
 from azure.core.exceptions import ResourceExistsError
-from flask import Flask, flash, render_template, request, redirect, url_for
+from flask import Flask, flash, jsonify, render_template, request, redirect, url_for
 
 # Initialize Flask application
 app: Flask = Flask(__name__)
@@ -255,6 +255,19 @@ def delete(activity_id):
         flash('Activity deleted successfully.')
     return redirect(url_for('index'))
 
+@app.route('/health')
+def health():
+    """Liveness and readiness probe: reports whether the blob container is reachable."""
+    try:
+        if not blob_service_client or not container_name:
+            raise ValueError("BlobServiceClient is not initialized.")
+        if not blob_service_client.get_container_client(container_name).exists():
+            raise ValueError(f"Container '{container_name}' does not exist.")
+        return jsonify({"status": "ok"})
+    except Exception as ex:
+        print(f"Health check failed: {ex}")
+        return jsonify({"status": "unavailable"}), 503
+
 # Initialize the application and Azure services when the module is loaded.
 # This ensures that the setup runs regardless of how the app is started (e.g., via 'flask run' or directly).
 get_environment_variables()
diff --git a/samples/web-app-mysql-flexible-server/python/README.md b/samples/web-app-mysql-flexible-server/python/README.md
index 9aa8174..6976089 100644
--- a/samples/web-app-mysql-flexible-server/python/README.md
+++ b/samples/web-app-mysql-flexible-server/python/README.md
@@ -50,7 +50,7 @@ cd scripts
 | [`namespace.yml`](scripts/namespace.yml) | Creates the Kubernetes namespace. |
 | [`configmap.yml`](scripts/configmap.yml) | Creates the ConfigMap holding non-secret input values (MySQL host, port, database, user, TLS flag, login name) passed to the app as environment variables. |
 | [`secret.yml`](scripts/secret.yml) | Creates the Secret holding sensitive values (the MySQL password and the Flask secret key) passed to the app as environment variables. |
-| [`deployment.yml`](scripts/deployment.yml) | Creates the Kubernetes Deployment, including the pod specification for the web app. |
+| [`deployment.yml`](scripts/deployment.yml) | Creates the Kubernetes Deployment, including the pod specification for the web app. The liveness and readiness probes call `GET /health`. |
 | [`service.yml`](scripts/service.yml) | Creates the `ClusterIP` Service that exposes the web app inside the cluster. |
 
 ## Accessing the web app
@@ -62,3 +62,9 @@ kubectl port-forward service/vacation-planner-mysql 8080:80 -n vacation-planner-
 ```
 
 Then browse to [http://localhost:8080](http://localhost:8080). Alternatively, use a tool such as [k9s](https://k9scli.io/) to start the port-forward interactively.
+
+The app also exposes `GET /health`, the endpoint the liveness and readiness probes call: it returns `{"status": "ok"}` when the MySQL flexible server is reachable and `503` with `{"status": "unavailable"}` otherwise.
+
+```bash
+curl http://localhost:8080/health
+```
diff --git a/samples/web-app-mysql-flexible-server/python/scripts/deployment.yml b/samples/web-app-mysql-flexible-server/python/scripts/deployment.yml
index 39b0f67..8aff955 100644
--- a/samples/web-app-mysql-flexible-server/python/scripts/deployment.yml
+++ b/samples/web-app-mysql-flexible-server/python/scripts/deployment.yml
@@ -85,7 +85,7 @@ spec:
               memory: "512Mi"
           livenessProbe:
             httpGet:
-              path: /
+              path: /health
               port: http
             initialDelaySeconds: 30
             periodSeconds: 30
@@ -93,7 +93,7 @@ spec:
             failureThreshold: 3
           readinessProbe:
             httpGet:
-              path: /
+              path: /health
               port: http
             initialDelaySeconds: 10
             periodSeconds: 10
diff --git a/samples/web-app-mysql-flexible-server/python/src/app.py b/samples/web-app-mysql-flexible-server/python/src/app.py
index 12b231b..4f7ef11 100644
--- a/samples/web-app-mysql-flexible-server/python/src/app.py
+++ b/samples/web-app-mysql-flexible-server/python/src/app.py
@@ -5,7 +5,7 @@
 import os
 from typing import List, Tuple
 
-from flask import Flask, flash, redirect, render_template, request, url_for
+from flask import Flask, flash, jsonify, redirect, render_template, request, url_for
 
 from database import MySQLClient
 
@@ -86,6 +86,17 @@ def delete(activity_id: int):
     return redirect(url_for("index"))
 
 
+@app.route("/health")
+def health():
+    """Liveness and readiness probe: reports whether MySQL answers SELECT 1."""
+    try:
+        db_client.ping()
+        return jsonify({"status": "ok"})
+    except Exception as exc:
+        logger.warning("Health check failed: %s", exc)
+        return jsonify({"status": "unavailable"}), 503
+
+
 debug = os.environ.get("DEBUG", "false").lower() == "true"
 
 reload_activities()
diff --git a/samples/web-app-mysql-flexible-server/python/src/database.py b/samples/web-app-mysql-flexible-server/python/src/database.py
index f5680cb..eb5b097 100644
--- a/samples/web-app-mysql-flexible-server/python/src/database.py
+++ b/samples/web-app-mysql-flexible-server/python/src/database.py
@@ -111,6 +111,16 @@ def _connect(self):
             kwargs["ssl"] = ssl_ctx
         return pymysql.connect(**kwargs)
 
+    def ping(self) -> None:
+        """Open a connection and run SELECT 1; raises when the server is unreachable."""
+        conn = self._connect()
+        try:
+            with conn.cursor() as cur:
+                cur.execute("SELECT 1")
+                cur.fetchone()
+        finally:
+            conn.close()
+
     def init_schema(self, retries: int = 30, delay: float = 2.0) -> None:
         """Wait for MySQL to accept connections, then create the activities table."""
         last_err: Exception | None = None
diff --git a/samples/web-app-postgresql-flexible-server/python/README.md b/samples/web-app-postgresql-flexible-server/python/README.md
index d83c97c..99fe9df 100644
--- a/samples/web-app-postgresql-flexible-server/python/README.md
+++ b/samples/web-app-postgresql-flexible-server/python/README.md
@@ -48,7 +48,7 @@ cd scripts
 | [`namespace.yml`](scripts/namespace.yml) | Creates the Kubernetes namespace. |
 | [`configmap.yml`](scripts/configmap.yml) | Creates the ConfigMap holding non-secret input values (PostgreSQL host, database, user, login name) passed to the app as environment variables. |
 | [`secret.yml`](scripts/secret.yml) | Creates the Secret holding sensitive values (the PostgreSQL password and the Flask secret key) passed to the app as environment variables. |
-| [`deployment.yml`](scripts/deployment.yml) | Creates the Kubernetes Deployment, including the pod specification for the web app. |
+| [`deployment.yml`](scripts/deployment.yml) | Creates the Kubernetes Deployment, including the pod specification for the web app. The liveness and readiness probes call `GET /health`. |
 | [`service.yml`](scripts/service.yml) | Creates the `ClusterIP` Service that exposes the web app inside the cluster. |
 
 ## Accessing the web app
@@ -60,3 +60,9 @@ kubectl port-forward service/vacation-planner-postgres 8080:80 -n vacation-plann
 ```
 
 Then browse to [http://localhost:8080](http://localhost:8080). Alternatively, use a tool such as [k9s](https://k9scli.io/) to start the port-forward interactively.
+
+The app also exposes `GET /health`, the endpoint the liveness and readiness probes call: it returns `{"status": "ok"}` when the PostgreSQL flexible server is reachable and `503` with `{"status": "unavailable"}` otherwise.
+
+```bash
+curl http://localhost:8080/health
+```
diff --git a/samples/web-app-postgresql-flexible-server/python/scripts/deployment.yml b/samples/web-app-postgresql-flexible-server/python/scripts/deployment.yml
index 75c88d3..6939a25 100644
--- a/samples/web-app-postgresql-flexible-server/python/scripts/deployment.yml
+++ b/samples/web-app-postgresql-flexible-server/python/scripts/deployment.yml
@@ -80,7 +80,7 @@ spec:
               memory: "512Mi"
           livenessProbe:
             httpGet:
-              path: /
+              path: /health
               port: http
             initialDelaySeconds: 30
             periodSeconds: 30
@@ -88,7 +88,7 @@ spec:
             failureThreshold: 3
           readinessProbe:
             httpGet:
-              path: /
+              path: /health
               port: http
             initialDelaySeconds: 10
             periodSeconds: 10
diff --git a/samples/web-app-postgresql-flexible-server/python/src/app.py b/samples/web-app-postgresql-flexible-server/python/src/app.py
index cd5cb23..c5dfb9e 100644
--- a/samples/web-app-postgresql-flexible-server/python/src/app.py
+++ b/samples/web-app-postgresql-flexible-server/python/src/app.py
@@ -5,7 +5,7 @@
 import os
 from typing import List, Tuple
 
-from flask import Flask, flash, redirect, render_template, request, url_for
+from flask import Flask, flash, jsonify, redirect, render_template, request, url_for
 
 from database import PostgresClient
 
@@ -86,6 +86,17 @@ def delete(activity_id: int):
     return redirect(url_for("index"))
 
 
+@app.route("/health")
+def health():
+    """Liveness and readiness probe: reports whether PostgreSQL answers SELECT 1."""
+    try:
+        db_client.ping()
+        return jsonify({"status": "ok"})
+    except Exception as exc:
+        logger.warning("Health check failed: %s", exc)
+        return jsonify({"status": "unavailable"}), 503
+
+
 debug = os.environ.get("DEBUG", "false").lower() == "true"
 
 reload_activities()
diff --git a/samples/web-app-postgresql-flexible-server/python/src/database.py b/samples/web-app-postgresql-flexible-server/python/src/database.py
index 515a6f3..d3082c0 100644
--- a/samples/web-app-postgresql-flexible-server/python/src/database.py
+++ b/samples/web-app-postgresql-flexible-server/python/src/database.py
@@ -80,6 +80,16 @@ def _connect(self):
             connect_timeout=10,
         )
 
+    def ping(self) -> None:
+        """Open a connection and run SELECT 1; raises when the server is unreachable."""
+        conn = self._connect()
+        try:
+            with conn.cursor() as cur:
+                cur.execute("SELECT 1")
+                cur.fetchone()
+        finally:
+            conn.close()
+
     def init_schema(self, retries: int = 30, delay: float = 2.0) -> None:
         """Wait for PostgreSQL to accept connections, then create the activities table."""
         last_err: Exception | None = None
diff --git a/samples/web-app-sql-database/python/README.md b/samples/web-app-sql-database/python/README.md
index b1ae839..9c19693 100644
--- a/samples/web-app-sql-database/python/README.md
+++ b/samples/web-app-sql-database/python/README.md
@@ -48,7 +48,7 @@ cd scripts
 | [`namespace.yml`](scripts/namespace.yml) | Creates the Kubernetes namespace. |
 | [`configmap.yml`](scripts/configmap.yml) | Creates the ConfigMap holding non-secret input values (SQL server FQDN, database, username, login name) passed to the app as environment variables. |
 | [`secret.yml`](scripts/secret.yml) | Creates the Secret holding sensitive values (the SQL password and the Flask secret key) passed to the app as environment variables. |
-| [`deployment.yml`](scripts/deployment.yml) | Creates the Kubernetes Deployment, including the pod specification for the web app. |
+| [`deployment.yml`](scripts/deployment.yml) | Creates the Kubernetes Deployment, including the pod specification for the web app. The liveness and readiness probes call `GET /health`. |
 | [`service.yml`](scripts/service.yml) | Creates the `ClusterIP` Service that exposes the web app inside the cluster. |
 
 ## Accessing the web app
@@ -60,3 +60,9 @@ kubectl port-forward service/vacation-planner-sql 8080:80 -n vacation-planner-sq
 ```
 
 Then browse to [http://localhost:8080](http://localhost:8080). Alternatively, use a tool such as [k9s](https://k9scli.io/) to start the port-forward interactively.
+
+The app also exposes `GET /health`, the endpoint the liveness and readiness probes call: it returns `{"status": "ok"}` when the Azure SQL database is reachable and `503` with `{"status": "unavailable"}` otherwise.
+
+```bash
+curl http://localhost:8080/health
+```
diff --git a/samples/web-app-sql-database/python/scripts/deployment.yml b/samples/web-app-sql-database/python/scripts/deployment.yml
index 8054def..ed2e16f 100644
--- a/samples/web-app-sql-database/python/scripts/deployment.yml
+++ b/samples/web-app-sql-database/python/scripts/deployment.yml
@@ -70,7 +70,7 @@ spec:
               memory: "512Mi"
           livenessProbe:
             httpGet:
-              path: /
+              path: /health
               port: http
             initialDelaySeconds: 30
             periodSeconds: 30
@@ -78,7 +78,7 @@ spec:
             failureThreshold: 3
           readinessProbe:
             httpGet:
-              path: /
+              path: /health
               port: http
             initialDelaySeconds: 10
             periodSeconds: 10
diff --git a/samples/web-app-sql-database/python/src/app.py b/samples/web-app-sql-database/python/src/app.py
index eccb8e2..c48698e 100644
--- a/samples/web-app-sql-database/python/src/app.py
+++ b/samples/web-app-sql-database/python/src/app.py
@@ -4,7 +4,7 @@
 from typing import List, Tuple
 
 from activities import ActivitiesHelper
-from flask import Flask, flash, redirect, render_template, request, url_for
+from flask import Flask, flash, jsonify, redirect, render_template, request, url_for
 
 # Initialize Flask application
 app: Flask = Flask(__name__)
@@ -139,6 +139,14 @@ def update(activity_id: int):
 
     return redirect(url_for('index'))
 
+@app.route('/health')
+def health():
+    """Liveness and readiness probe: reports whether Azure SQL Database answers SELECT 1."""
+    if activities_helper and activities_helper.test_connection():
+        return jsonify({"status": "ok"})
+    logger.warning("Health check failed: the SQL Database connection test did not succeed")
+    return jsonify({"status": "unavailable"}), 503
+
 # Read debug environment variable
 debug = os.environ.get("DEBUG", "false").lower() == "true"
 

From dc6c9add0b8efe5886e766eaa17f79135d68a258 Mon Sep 17 00:00:00 2001
From: Paolo Salvatori <leprino@hotmail.com>
Date: Tue, 8 Sep 2026 13:58:31 +0200
Subject: [PATCH 03/20] Add the .NET version of web-app-blob-storage

ASP.NET Core Razor Pages port of the Vacation Planner backed by Azure Blob
Storage, under samples/web-app-blob-storage/dotnet, with the same
environment variables, Kubernetes names, flash wording and blob naming as
the Python version and a -dotnet image name. Deletes are keyed by blob
name, the Data Protection key ring is derived from SECRET_KEY so the three
replicas validate each other's antiforgery tokens and flash cookies, GET
/health probes the container, and the client honours the connection
string's explicit BlobEndpoint, which the .NET parser otherwise rejects
when the LocalStack EndpointSuffix carries a port. Verified on the
emulator's AKS: rollout, port-forward and in-cluster smoke tests, then the
Python image rolled over the same Deployment.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
---
 samples/web-app-blob-storage/dotnet/README.md |  68 ++++
 .../dotnet/images/architecture.png            | Bin 0 -> 36963 bytes
 .../dotnet/scripts/00-variables.sh            |  30 ++
 .../dotnet/scripts/01-deploy-resources.sh     | 141 ++++++++
 .../dotnet/scripts/02-build-docker-image.sh   |  18 +
 .../dotnet/scripts/03-run-docker-container.sh |  31 ++
 .../dotnet/scripts/04-push-docker-image.sh    |  40 ++
 .../dotnet/scripts/05-deploy-app.sh           |  86 +++++
 .../dotnet/scripts/Dockerfile                 |  28 ++
 .../dotnet/scripts/configmap.yml              |   9 +
 .../dotnet/scripts/deployment.yml             |  71 ++++
 .../dotnet/scripts/namespace.yml              |   4 +
 .../dotnet/scripts/secret.yml                 |  11 +
 .../dotnet/scripts/service.yml                |  16 +
 .../dotnet/src/.dockerignore                  |   2 +
 .../dotnet/src/Models/Activity.cs             |   4 +
 .../dotnet/src/Pages/Delete.cshtml            |   2 +
 .../dotnet/src/Pages/Delete.cshtml.cs         |  21 ++
 .../dotnet/src/Pages/Index.cshtml             | 265 ++++++++++++++
 .../dotnet/src/Pages/Index.cshtml.cs          |  47 +++
 .../dotnet/src/Pages/_ViewImports.cshtml      |   4 +
 .../dotnet/src/Program.cs                     |  48 +++
 .../dotnet/src/Services/BlobActivityStore.cs  | 123 +++++++
 .../dotnet/src/Services/BlobStorageOptions.cs |  19 +
 .../dotnet/src/Services/IActivityStore.cs     |  24 ++
 .../src/Services/SecretKeyXmlRepository.cs    |  49 +++
 .../dotnet/src/Services/StoreInitializer.cs   |  33 ++
 .../dotnet/src/VacationPlanner.csproj         |  12 +
 .../dotnet/src/appsettings.json               |   9 +
 .../dotnet/src/wwwroot/favicon.ico            | Bin 0 -> 36791 bytes
 .../dotnet/src/wwwroot/style.css              | 341 ++++++++++++++++++
 31 files changed, 1556 insertions(+)
 create mode 100644 samples/web-app-blob-storage/dotnet/README.md
 create mode 100644 samples/web-app-blob-storage/dotnet/images/architecture.png
 create mode 100755 samples/web-app-blob-storage/dotnet/scripts/00-variables.sh
 create mode 100755 samples/web-app-blob-storage/dotnet/scripts/01-deploy-resources.sh
 create mode 100755 samples/web-app-blob-storage/dotnet/scripts/02-build-docker-image.sh
 create mode 100755 samples/web-app-blob-storage/dotnet/scripts/03-run-docker-container.sh
 create mode 100755 samples/web-app-blob-storage/dotnet/scripts/04-push-docker-image.sh
 create mode 100755 samples/web-app-blob-storage/dotnet/scripts/05-deploy-app.sh
 create mode 100644 samples/web-app-blob-storage/dotnet/scripts/Dockerfile
 create mode 100644 samples/web-app-blob-storage/dotnet/scripts/configmap.yml
 create mode 100644 samples/web-app-blob-storage/dotnet/scripts/deployment.yml
 create mode 100644 samples/web-app-blob-storage/dotnet/scripts/namespace.yml
 create mode 100644 samples/web-app-blob-storage/dotnet/scripts/secret.yml
 create mode 100644 samples/web-app-blob-storage/dotnet/scripts/service.yml
 create mode 100644 samples/web-app-blob-storage/dotnet/src/.dockerignore
 create mode 100644 samples/web-app-blob-storage/dotnet/src/Models/Activity.cs
 create mode 100644 samples/web-app-blob-storage/dotnet/src/Pages/Delete.cshtml
 create mode 100644 samples/web-app-blob-storage/dotnet/src/Pages/Delete.cshtml.cs
 create mode 100644 samples/web-app-blob-storage/dotnet/src/Pages/Index.cshtml
 create mode 100644 samples/web-app-blob-storage/dotnet/src/Pages/Index.cshtml.cs
 create mode 100644 samples/web-app-blob-storage/dotnet/src/Pages/_ViewImports.cshtml
 create mode 100644 samples/web-app-blob-storage/dotnet/src/Program.cs
 create mode 100644 samples/web-app-blob-storage/dotnet/src/Services/BlobActivityStore.cs
 create mode 100644 samples/web-app-blob-storage/dotnet/src/Services/BlobStorageOptions.cs
 create mode 100644 samples/web-app-blob-storage/dotnet/src/Services/IActivityStore.cs
 create mode 100644 samples/web-app-blob-storage/dotnet/src/Services/SecretKeyXmlRepository.cs
 create mode 100644 samples/web-app-blob-storage/dotnet/src/Services/StoreInitializer.cs
 create mode 100644 samples/web-app-blob-storage/dotnet/src/VacationPlanner.csproj
 create mode 100644 samples/web-app-blob-storage/dotnet/src/appsettings.json
 create mode 100644 samples/web-app-blob-storage/dotnet/src/wwwroot/favicon.ico
 create mode 100644 samples/web-app-blob-storage/dotnet/src/wwwroot/style.css

diff --git a/samples/web-app-blob-storage/dotnet/README.md b/samples/web-app-blob-storage/dotnet/README.md
new file mode 100644
index 0000000..4bca8a1
--- /dev/null
+++ b/samples/web-app-blob-storage/dotnet/README.md
@@ -0,0 +1,68 @@
+# Vacation Planner: Azure Blob Storage
+
+> A Python version of this sample lives in [../python](../python/README.md).
+
+This sample demonstrates a ASP.NET Core Razor Pages single-page web application called *Vacation Planner* hosted on an [Azure Kubernetes Service (AKS)](https://learn.microsoft.com/en-us/azure/aks/what-is-aks) cluster in the cloud on Azure or locally in the LocalStack emulator for Azure. The app runs in a dedicated namespace and stores activity data in the `activities` container of an [Azure Blob Storage](https://learn.microsoft.com/en-us/azure/storage/blobs/storage-blobs-introduction) account.
+
+The application authenticates to the storage account with a connection string passed in through a Kubernetes Secret. For a secret-less alternative based on [Microsoft Entra Workload ID](https://learn.microsoft.com/en-us/azure/aks/workload-identity-overview), see the [`web-app-managed-identity`](../../web-app-managed-identity/dotnet/) sample.
+
+Before installing the sample, make sure to create an [Azure Kubernetes Service (AKS)](https://learn.microsoft.com/en-us/azure/aks/what-is-aks) cluster by using one of the following scripts:
+
+- [scripts/01-system-assigned-managed-identity.sh](../../../scripts/01-system-assigned-managed-identity.sh): creates the cluster using a system-assigned managed identity as its cluster identity.
+- [scripts/01-user-assigned-managed-identity.sh](../../../scripts/01-user-assigned-managed-identity.sh): creates the cluster using a user-assigned managed identity as its cluster identity.
+
+All commands below are run from this sample's `scripts/` folder.
+
+> **Running on LocalStack?** Install the [lstk CLI](https://docs.localstack.cloud/aws/developer-tools/running-localstack/lstk/) and run `lstk az start-interception` to route Azure CLI calls to the emulator. See [Run against LocalStack](../../../README.md#run-against-localstack) for the full setup.
+
+## Architecture
+
+The following diagram illustrates the architecture of the solution:
+
+![Architecture Diagram](./images/architecture.png)
+
+## Deployment workflow
+
+Run the numbered scripts in order from the `scripts/` folder:
+
+```bash
+cd scripts
+./01-deploy-resources.sh
+./02-build-docker-image.sh
+./03-run-docker-container.sh   # optional local smoke test
+./04-push-docker-image.sh
+./05-deploy-app.sh
+```
+
+## Scripts and manifests
+
+| File | Description |
+| ---- | ----------- |
+| [`00-variables.sh`](scripts/00-variables.sh) | Defines the variables shared across the other scripts (resource names, image tag, storage account and container names, Kubernetes namespace, …). The other scripts load these values by sourcing this file. |
+| [`01-deploy-resources.sh`](scripts/01-deploy-resources.sh) | Deploys the Azure resources used by this sample: the resource group, the [Azure Container Registry (ACR)](https://learn.microsoft.com/en-us/azure/container-registry/container-registry-intro), the [Azure Blob Storage](https://learn.microsoft.com/en-us/azure/storage/blobs/storage-blobs-introduction) account, and the `activities` container. |
+| [`02-build-docker-image.sh`](scripts/02-build-docker-image.sh) | Builds the Docker image for the web app from the [`src/`](src/) folder. |
+| [`03-run-docker-container.sh`](scripts/03-run-docker-container.sh) | Runs the web app in a local Docker container (no Kubernetes) to validate that it starts and connects to the storage account as expected. |
+| [`04-push-docker-image.sh`](scripts/04-push-docker-image.sh) | Tags and pushes the Docker image to the Azure Container Registry, on Azure or in the LocalStack emulator. |
+| [`05-deploy-app.sh`](scripts/05-deploy-app.sh) | Uses the YAML manifests below (templated with `yq`) to deploy the app to the AKS cluster. |
+| [`Dockerfile`](scripts/Dockerfile) | Builds the Docker image of the web app. |
+| [`namespace.yml`](scripts/namespace.yml) | Creates the Kubernetes namespace. |
+| [`configmap.yml`](scripts/configmap.yml) | Creates the ConfigMap holding non-secret input values (blob container name, login name) passed to the app as environment variables. |
+| [`secret.yml`](scripts/secret.yml) | Creates the Secret holding sensitive values (the storage account connection string and the `SECRET_KEY` the app derives its Data Protection key ring from (so antiforgery tokens and flash messages are valid on every replica)) passed to the app as environment variables. |
+| [`deployment.yml`](scripts/deployment.yml) | Creates the Kubernetes Deployment, including the pod specification for the web app. The liveness and readiness probes call `GET /health`. |
+| [`service.yml`](scripts/service.yml) | Creates the `ClusterIP` Service that exposes the web app inside the cluster. |
+
+## Accessing the web app
+
+The app is exposed through a `ClusterIP` service, which is only reachable from inside the cluster. Port-forward it to a local port to open it from your machine:
+
+```bash
+kubectl port-forward service/vacation-planner-blob 8080:80 -n vacation-planner-blob
+```
+
+Then browse to [http://localhost:8080](http://localhost:8080). Alternatively, use a tool such as [k9s](https://k9scli.io/) to start the port-forward interactively.
+
+The app also exposes `GET /health`, the endpoint the liveness and readiness probes call: it returns `{"status": "ok"}` when the blob container is reachable and `503` with `{"status": "unavailable"}` otherwise.
+
+```bash
+curl http://localhost:8080/health
+```
diff --git a/samples/web-app-blob-storage/dotnet/images/architecture.png b/samples/web-app-blob-storage/dotnet/images/architecture.png
new file mode 100644
index 0000000000000000000000000000000000000000..40618b4d616a9e381ff68840dc1da589dd7cde6e
GIT binary patch
literal 36963
zcmbTdWmH^U6DHbNkOT?t5G=U6CTMW&#x1zJTS5o~g1Zw!f^|3UE<uC4LvVN3Ie9;s
zd)HleX4d@Zbq@P%tzGrhQ?)nYYASM=7^D~=5C~KLowNoBgy;(VNYD_05_ph|KJZ|1
zm(g*Ta<wpZw{dc$*0OQ109n~MQS(!qS~*d3b8_=jb8!muaSQYCQL}JzadHmRV=w^C
zP~GK~Wl(p~o}uyb<0q8I07dA|?{wWjpy#-Me+XlXf%iZmvejGVw;)h?%=3Fw6c8w;
zQC|A3miOF#7P`OIM)TEhn%JEzKfiAL2V#8nmxy}!taNqKC;68xR}pjk)};h>Ij&y=
zcHj>Nj)rw?;nlX^A=~rw?-y1jgP#XuynJackM@ep?lK^4AaLj|Qz#*=Z=XkqC!z1Y
zCHha=mgttx(16e8P1e&{5MjE7?q4~8B&jhjfr)@X38=lyz=N7N77RSza8g5o#|M))
z5Cq`a{sHz^M!^WWf9oP6Rs3y>_RO3Bc;LMFziFtWULTjALL?w8Qd2(m>4ib&(LN3c
zq(n*$ZIiU{u`xBh+{|*E9A~Ph-;Yx!p`@~9H9E|l@XZFK8H{dDkorf9ua&N~tZLyq
zH1omM+^l}*;dJ%A=0djujc0eP?uqQ=uy9&mFW>V#A;t8e1p{!k(0FPv`I63nMGt+2
zLPzuK9+<|d&nP4<Mks|;Kg91j8L%+q3Jh7UVq5kkyPwb`vNPKVQXR?8;B*b~5?eP1
zaUxB1o%9sl#w-zt^sIgzIO8|ru@&Luepv;Ne6kjb-S=F^*I~a~=~6_r^kffAqZruA
z?FZ#C`uX?uy?zN>Y;+G)1V4LpMoFq|s%yVB$e_7~A%Ljgyn%c~Pbk)aH1x|jY>7DX
z@H=p<k8j{R@G*logUK~HX<6pq25$0HRzPjZ21X4IeWJzcgi!VdvVK|mC8QQ%vAf?{
zdvW)b6xRgq*Rw|eTOxs^iy|rwV^oPm^P$r^tZmU;!d;Ydpr&_VbW8nF?p;5-L}$5M
z7xCsbCy4qRF#gLS<f_9AzFlUncXAii<=%2du^Sfl!W|HN2pB9RlwC=kz~N<_=72jy
zOmP6&WQTGFWqqZ&zy1IWb_u9RSUu{@yY2?WylhMRIZdrj{W7w`1M$?TOC3!9@8L52
z^%gt_N(vf|Z*>`#Q4KN-tsCgv`WNCO_6PGjEl@CPmNYYHRt!);$hhe<4DBt?fNo9V
zL3aNq>J^HOMc9Agj^H<56wC@Ysaz^0Dlna;1GW7^tssRQvxxKJPp;Q%_HqS_G(bYs
zG~Wz9R~4K;=tf|_>_z~62uCvKd+`V2S6EbAb8m1!EET<RvPXJ)H!!2q#4j>jx3Jue
zemTFWQ@U+Zi4gs%*#(x6(O(fx(%6N0S&IO=#_qKx?qEYp&9ZQ~sh{HtC5JNdlBUup
z9!zmH8R#8Ru8ltO=U0cZ`Px-3DsK!8&Jy^u|1i-foAq?c?2qz)o2RWhR2x;kwEFCB
z9t65aH|K+`Tnvmx1hIQYmj5W97Y<!c?e@JQj=8KQIY6#C-xZ!c?B+7V6PTJ#^_Z*s
zXm=pqNW919Sk{UOYRh>8>BLCLo)u>5X*7!*aaO!1v*0T2{xMe4$7E~5mI!mhH$(Vm
z95izRVwZBWNRm6a+5Pxuz1C9J`JrqN46DlI13Pz;wQb&gCnV4@YAkrgvxk_+u_pS2
z*bN(QX2-?CG9TX&VCCQ_-?=@RQBf6B{^7v^1PVkEnfZV&w;|ggnnR^5E$xg{jml#O
z0=@b~H$w#az*evS)e}cQAxKlFT~ZSPl#2xW7tE~a|1S|`C7J8_a*UfPjcV<8B+!Qu
zz(7UYn~14vi^!Ajkw73TKzX&z?S(Z=^*WsQH|>(hC>)|4TP?^e$RvCTYuEHQta&fJ
zkU$}fz)INem-uQjN+&sp4NYoYj7hqjh|GYhIi2D?WCLJ_rFMs<ZW&9b?ng(^hge`F
z|L;qVXVox&BW<=~TcBd=hQ4mv8s_GJNXtpw%rYhjCm0yMRx3GWleM>E-k(iix)4eT
z-Y8REvrzx%yDjkDOUrR!&3@1THKUY7AbQ?J9c)EbMSw3jYvRb89J3Jeum}R>qM8$U
zOHOW%222UYFj#pA&-q8~HNq<@z*!C>HA8*R+&<4%r}@V?@z<J>{j(lQ9a}0T99YdK
zKq|2)Q~!eQvVVhh_5T8%>DpUBoJH1DV^p@3MSEjI3bE{2BwP}@g!?RrpbsAqby0%L
zug+KSsNBz?FE&#hSQ4@g6Ug`XfRAk-(fQvHM;k%d{5IkPMB~6TCG9Q3fFr;;h9jEJ
zRFsaJ-XCGPLodAD0f|441yh5h1y!qyo5hd;|AO7ij0399b}@~w!QT56@DcDF)YQ;7
zpjCqRM4tjvhQ6R(q9B6ad;naH=}eVqyXn1@z_0u+lQtm`wZY#)@B68c`@Q$}G$})o
zGu7<$GbsR0d_=;t{}8(`CU)Ik|L5{mvm{M}(_8$}ITPcT0G{LbGCNDP&K)-*iOF$5
zzv!^17thquIXXb9K(pKvPh{WOw;3rE2a`3t<TP}3;?O}jx4@3E>^4++HF>6?6??32
z5`?eq&%sAEhA-3=ES1*R$|uqbO@d57AYv*&rSPk>4KMrY!zxvtPDUoe9KTeDi%#Z?
zPZkR;mb@w$P>5ZMWj7Y4eZQkLZ`vlU95gC(!BykaZ@n9%S!hGNgbYHn7zsrvAa91b
z*2H&aAECl6s*N3HPF=PR@sKW=!eK2pCJh(o8BUW}yh-0Iid1C_d)_kvA~)p3B^Law
zlQV=x(fqw4gacagu!a(r-cQwh()GMFaNa7qe%s&W3n7dQ0fgoPcvU8wQQWPtU;ZCv
zimsmEUEMdfpY(>s)tBC$Ck2rmHI2#dm;_n=XH|Z+g%7y}S6+=%T0E-$Bkdf{+wXrJ
zMG?Pv@$b$maerW4xqpqpIcqGO^00yXc^SGDgPZT9CD6@(7tWLKT-Y;tSeche@PI&(
zz|K2&IcY1Gt54nZRrJf{pY6R&zw;1VpJ!pPI_TEXM=@kAc;tDR)duJ?D(%OQEcm$T
z#Q9`|Jumgo-sd>(C^>e#2w#uMcAWN3nlIwlyk&fO@m0_f{mXM<g+7h5A3DzwL7eh!
zP2d%gM%5QM@Qd9<D~KxkB^WRcs*f;4)mIq8EN_|ZvlT+e>dDDo00xI53=9LPauWHT
z#AN=T>Cazca5xlFmTReRPxSEy4BMwB?23-~CUhzI^d&9iiwIOgadRfrP{9V+$KW;U
zRpgh`=>B;xz7ipVBq?>EZCtiuca2Dk!xXzN-tK`F`-7<C4wftX6yKLfDHH6=Gv|^y
zEva$2RG+w|1GrY}Mtr!3wjwT`14#JXoIvn{^==f0QQ_WLgNkh8MO?<}^|2|zMOYxJ
z&6KRmTA<G@$?kF^d8vW5tgL3M{5r!QfT1xW77#kOCC7*?+A{wMKlMD*!#QH2D3~p+
z+SfWO2oy+HAklut(C6+w0~jMiEZF3C?&eEuA|GnmgS?}v1dw|B^C3CpX)^2pu8w*`
zvE1=C4}7G*-Rh#$;A{IdIOCcIJ(PvH*^5)2&?SX)G|2;U!vk1iS=X$kv&wjF(NEsm
z^KU#AKQe{(CJ%Y_+!2vLl6Zf=&l6By)1yD}b)Sr0j4q@r5V@-<fZphQh-+(0mKt2T
zXv^<<cWu}&p`j5(MoOFGC94tB<BDg0OEQiR9&R@=`PVEY$81&>zQdo{7N=%ZMI;3x
zfd2f4abEum=-Rkl-f&_;3%~mAHbobYIwO7B>MPWJ@2I=NDB6So>UaiB3Bh_)Gl=xt
zkceIi(_85Wn(PL3%6&y-0O~-xC~KdIi=;IThjZ#*NBFW%jlTf+nETr+a$=%~NI&JD
zk#0^c7mffdfY9Wrp(Y0RMa$zJlnT#S?GBMZZRRL|i`WVt8lOBv4|s9$nR!MVkWk<=
zptNA=VadhJ`q&XH4YU;l%+G7L*&yb)DTN!T@(Ohmj<{T}qChW)dPf6L9U1^w0m}2i
z<QpC_@chfDak4M}{AoBmG%*JJBQnC@f@KQfDvPJb|CRtXsfmdzkV6UrymjEy!x1sq
zm!AQ}`1Y|H;~p_?(!?0x?Ef^S{3|b0K+*o`{2KD{xUCiggr;u-M{ETxGlQr_0VDbI
z(TM<rQ}Z9f??ixx?GFWgC<C0!@pAy+K^?%}{xgg7Up-W)cYw>GMg!2&SnVC)QvifV
zLj-F5+0lkh`UdE^yO(hQWr&zCFtw<(W_ZQ3|2Fvd-~je}<Kv?L9pf0e1*rAU7=$`N
z@fVoU{t@;iz!2Wx0LcHx=kfSYfy9&Oj5ZLAyaiQYgrK&7L2qUdmzi<?y|%x@{Hp_C
zlK)-rf0pq7?*1?52w?-<)BkLd?fn_?Z<pTxbXjerY9wv&Dc}{b7uJA~{@74amh2s3
z{m&WwM^^ulB+zAt^Z73L)NAK_XF_Lrx9c(RR8PnbQpN#<HHZjG7}PH+SJ$kF2;y4T
z`JDO_P2n|G=05_wQ+p5kdZ@53ClUU-zG@6)v)_*oGIB9<(woCMPmfaAD0gFkpx*!+
zhP<ZD0-0&l3Tkw<C@XyqbPKQsG+90O^EH8GdkQI~Nf{fP_7-+vC&+=t(eXcHQ394!
z2Lx@B?;XlIw18E=0zPnBej>;RHvL6AG8r{zQ@d|@E7gDh7Cq?fTt@-IyuVceb$P@2
zzhh{T{ZZ$PWGq<)F3zxW@0-(AS=Y#W4|Pz^KxHs6b6#KriSQw1A)(*XMXAo&YeU2;
zm}o&L2mnJzsK8i=FE61k$Zv6hIoP646LD-QE0fK;PY`b)W|QP?{_Q{u(9K%jLl$WN
zkgKIva<aOgpk@NRcd4oUZGn^7N$B9LtXZOkqHB*jAn6bg;FN>MM2ETuSXr!{*}r_A
zR~BoozxfQV#;geo*V2&DH~d{>1&sa%?E~M(kIyk!7D!TaAwbh>A^^tSxQQYg#L2#T
zC8pCTdf{i}VVoUQahVw+RQtT{eg!}Zaxe37W~B0brGOP_qn+LJ2-ip#AsLiv|B20g
z3^~HrLPfDhYhCvwptf~X#RGt$0zvctQ5=Jay>glAQbQK?z`!3}TMdLJ&VZsXXzCj2
z>7+)<P=G*ffXc2As({ZFPoFFPW^1rrqV+JVUrX&?-5~o~54RhDlvvP`X=YxCL&?gw
zm_a5Q0Ky$|0^w|Je2cC&i@@e2J|A)IJ3}?iT|rBCC$jNuAjsvht3A7$DZ@muAdC1a
zu&JIO<uHR$JVD;Q3V35R0L&IlG{F4|+Vza%Eqn`OAy{T;e}m7ACcdd@wLC@Qv9t_m
zv2EpPlpQH4=ClEn6W9c9V4|cnsd>Jsa*`V@S0kIpQ?OZvLAF1Sf1^;{lr8;^ZRBU5
z5Kf>T?$8T9uVH@t4Pp;Ix3@!uE$KBC<uT>2XjvMI?Q@XKc+JLN)^wOZ(+>l%nGVne
z?Nq-HQRXlf&SI<Xd@&imCX~jHb3+amW>jX1j`C7(b@MF@G|DYN38OD452%OonEwWr
zA?!2lf1^sA7drpSYrG2%Krs0}Udq2OKDu1Wjr<KJ=ctgHM2&g*8mPDY_BE$-C*Fnw
zz@*4hE0TvI?>EC|+aG^{Kr14^)Exm=jSPcbz6vOl0PHRDIpAoHuJ1ned0EMzCCzUj
zNL}XW2S23!wI2XKj=pH4=~`KKhktqiXz!bMfIkqK@O_na@=Fi%5*0w{SHO73(WsZ6
z&+dQ(hsi49zf}g%NKAo&m?#x><a}5Nn&=h+NRkX-Q=e>Qwd~%1Fi(mfZGWr-fjHSs
z$br@U|0ZaPziB!C*xBfcnmQ7I2&>v<RRKwWv#R#bm@5E|09_Wx0#OVhp{3K(PMq-O
zCJ`j*fNXNIJHP_``KCTQNs4YpFYX}{55<7S>Pp1|d(hlS#e#<pCM2#deURGG)hZBG
zFA%}iBR4(~M7k!CJ#;S^`mqcV#6TYlM)+^42BIy*lFTDhAEay#BhQ0kRx^O%3w2F(
z-g!cCC)8Gb={iORx=o^PZs5sHCE+hq4xx#QaUJ>cf+PmiR>tov1~tt*=_*-h>aV4_
zE{^2!sTk}P-yiXY=E+QSBilOg(&2+R(Lcg4!qmZTLM-mE5?u9xJm#7Bh5o38Rt5!E
z_yKslUbdJ&h0S^;9!Lx9Q_I=_NtwBW{7O=ceor+&(g;`A2+~L&WJFY1`j?7(O!?Ap
zQ>2|wq^-mI^>Ui{BfiEEmRkmF)bm6H*JFTE{og=PI$@D!9@V@tcwO<MNIp|T+La}G
zP-Ynd$K}NKhm5!+L-72Fj<J+W0m+~JiMdddAgu^eOY$DUuhSI^ze(AUP*6ZhlGISi
zw}~!V52x>XVbISqGJHPyOLGgjL#qo?4#Wq`d^@{3;OZXh^a_Zl<F|4irdGAFW{BS~
z@9wrHGkf67n*%CJw_On=gQnzMadOhi;4zU;ypdo4gODniaWc8nMZC!(Tv;2^t9Ra^
zBw6wOV*Hm;jkq@GHIDx*cIAg!SZl_Xfm@A`8tb!!MJ2PQMyRmHGv-;t9%rN;%wic%
zdbB2n=fA9`t8g5c-FTng#$fFxlA0w0fgKJEo%O}N_0Lf+l06Jp{uJ%>!N0j3SKrQV
zz2d5>eta3;8SlhxTO&&Kb=)nVtz_N_j^Q5y`a`U`+HWl4iP^V<#*-}SQz%lZCoZx2
zjnJxD!DDOG&6VEs6#)Jx=IZjAx6zYjB=&?|d}OjKRyrT8=K8lSmO(y>^nN1hjFcdY
zLDLcf%=0y1TolrpNDNR`{!oDV@&g!y^|}Qdlmrl|+!y8qb)Qm;pLJeWo_u+e1mJTZ
zVudh?HLFp}$2qqUV`)j}zlqNkuGCs)>h7O@aE3y?<kM>XChZZasJs5cV2{jvy(w}+
zN2Wj$yTr-1CdAEOK)+8QT>^~n)<DurMriX(_bO&aWfY6F7Jl*}ah_`jB{$U8>?As!
zX56+TG3;);ZtE}+jYN@G_2>qAHb#<V+Y8map6*BXDLbP58!i!|^=^}1n|(6t2&SqC
zq4*q(crm|B+2s7nx(gua#~-RmcXfO}6h$igVf1rHv7AmjUZoUF;;j;3d`5Qk1HBPM
z)WvjxX(e$V&M6Q;wD2|fA9@h-o#tzPju)WbK>^o74bsJQfPsNb-%T_MroFtQBYG{z
zUg!$?o?94pEjD(H1Qoy{gs7p9G-ihF+hw`^Ss8Fvg;&^7)nKOnCL$KAnrATpBWo&Y
z6!}5~0MA?6nW05_DVf~KT0I>uhJNl?YhK2gTrS!KQdXq6PeSj*4bS^oUeC`3Yl{P<
z6m#DMuY;G6V>!)(4y`dA*al}r;g3=&0N~8t;Av=j<p`tvi<eeogoFidrhSSLt#F-!
znHZx1tx0vD6CXnB*N)(-0h@teFy*B*;?LV#*29Nj*Vo>kY5qkMsTbhj?{POrHPh}k
z@^!odH;*tzD<(x1EXSwf6y%Boi;cbU)pc(gfKr+$>ezj%&c`ipI!i|*3P0PF9g5t5
zVA1UK>6Yml9-nXJbpGYbsvX)82i{3If-o&aa_o(+*q{2&Fs{F>IXk2X<_j$nRfAyv
ziy4OGIZX;E^SN25sj9S!7G52=142qjEgMI&Qyx@GyrqsP(_I9(CWzV|okQ0_lgn<I
z%Z7QhtM*WlKE0U#MZogaVR?2d_MYDWlfKrZu~$-j>n3qLtk_S$C+<U3MTt*Avp%Lp
z^*`+09=%kVE9ltM&p1b3Gn{>hb9a>p9wfZ<fQ3HMMeZw@mxz2@4R@Mwp#J!20{Z#v
zDUOgUCWNKrz9s(%54TQO%aHR9yQ$)|xm|g2PGosc@N9Ue{m~x}<)5(OtDoIP^fddC
zI9FR(P*bf35EO2ix*mFW6wFOfhR%nbvv)KzBcV@Yk$5XdeTl!n5@S%NpQ!SOlXAvt
zOYJd<<-OukZeBj&S_e;igs4u<1V+RZwVd)%Nx5FfH1W#dr>N?uY*s|@=%7YgvM^;O
zDk^x9ZC1JxGAxIxnYtPqg!LH`GH2%841XOPyFN}1$lCM{`?H005&2rlC_Ah#T=Mgv
z1csIA>1Q;8%PZ``GpejTs`OgZ$FLRonKP<HCy6Tg<GeHA3zW)`I>;LFal1)FfT*q(
z62vLu3JFfcUKW;$BcweMRT`pD6*PKv$q9=cWAEVRQto*E{#U&~Hx-O($SCbH-zdH~
z*D=v8jWr@@rE}MiuFQRE5%(ogHT8~4z|#@9As5YNU^UV2reag>;dq>-G_DPMOQNI4
zpG)$<g6_F?KA6h3)z9dB0PT=O#<q!9LzpQg@sNMOYJ*j&1v9r}y`>H-p^;VVI?F9=
zJ}fAfkiwxv$iJ!c_#R(3J>o>jJ}YMa7}MtT8ZD06^i0l~kiqzinrYC}i0IR3{bQ~V
z*=7)0c8J*1+nY<N3}gvmH~Opb|Hq;i9!EBn<0d_9rY+S=&>Q30oGv-3Z0r3P@`@bL
z87v&gtfzMPcoItZUXPRT4rUc>{aBzT_&pd$M{<)vDG<hOyPKn=Dl}pCazO0l&&E$r
z%qf7vDT!n8#Vnl6SzONElq7u4g5h3bsXLJzc-vWAVAv@?$dLb&1sX$Mi(YIruD?6H
z(acA_ll;qzZYM)E;ps_k3su*L7D<5(hd|1Ns-B5`Cg<I|?mXCt7GN<$&dVM*^I%Ov
z<%^|n88f2zQV)#j&#iTL>&16}bdTfZ7G)m~<VvLi)|qOKV|Sr;_GRAu(BdL(Qj_qf
zYDXWgI3o-1q*S2SHVzPSgBVB(^!PU8me|quKJxST>*aYQU6)~`?=mSCsH%RA{wKcs
z5DUx1+wp9|-3W(`sZOU^T`GyglBzY2m^UUz^G394{m;g8-Z$X_L9>g5lZVDF1pcZ&
z{e5QkmL98o1>?(<(<%8GT6WHu<di4RjegyelR&nvwlY(}XbRBEi*g<5JD#9+Swy52
zw!rk-eooks$w>SYNy*q)-~$4{?y!>Y<@BEEF~3yoS}-=PymDT$^@gLrK>W1Q0;VaX
zCC&P13Zp_kd4mQj3*&vMm!(ol6lHzxnx^xLKxtF-93HyU1jdn!U4C{G{ze)Bv?R%@
zo&Nnh&5!r$E8SavKdxv~vT?M|EK5B4_wp>4Mfe?t<OlclzSe)AeLt|HA9KB5^d*G&
z@S-y%LzIQSiP{0JvqB+B1u76JAuyni^49FCNOLU(eCkK6VRPY&L`MMX@xL^0pUqmv
zF1iiX(%<t$hi565!W!0+Hcf(LUs3lLk8ShmJqVt)12g08KGLVxDAw8|4()2A!wF4w
z7(sq-&EI<7Nz9Uv*c7n)QyU^f2lL$to@DZBz8*7NXq~DlqF=Z^r7(+{Q>_8MB#mm+
z9EW$~pZBpqD}n;{w@aPAyz|~oFbSeUd_y@tDcmXO0QqO8_h%5f2|c6%Eu3r|vP9-1
zp1E%UQde3FYPFO2CG}5>IW3arCxc!^(^>(j*_i>;iWbujhWo{+sasK3MblA2iN;sZ
zob(qXX8OxH#+@?ROFoxE-$!!nNi;{?ChYiHjVsQt3cvvzCFqv|G%sMImXl<}K}7hJ
zEtCCGyv<E@>V^BHUsJ{{`60KiLWo9#$mW?X;H;%@0%hH~r>{a$qf0&z;7?Ijk8GCs
zQTp&myy~7om|t*C_RVWEmv-GW3qX=#({1$}vYsQlp<J=o^zFGf-y7Z{MY21k6w_Pg
z<#$!t^yt|oJ$QcVM1X}QYcYAVP|;Rvn_JOTRmSOergDTb!XzYvxuAz^FJrocrHUWV
zSS};)rZ_{J!5#bnzm9Xch4kTByi+N-oEzPM9`(miR`;!`JbyXFFMM4yy}#;sxHmCO
zgX=hRyNEm9ylLDxCEWY@%ih(n=Ft&V4(=SjyLMSC*;89t;;;(j8ZziyoNgR%tfM!y
zSDaMdr$|vwImlnYrKDlcx~Xx}bD%;j<p~Mhk)9Jyn!MZionqx!QaqPwQ{liyYL`@b
z@@}JhqpOQ7p!U;iw6zoXE<+db&qgEva9`UA3yYs%h<K$)p!Hf~g-dSKNuVydJ^yBr
z0A+QVTY<8-;QYz7On&KY$M4~Tz;j9#wv4-92;kW~e2@Lb2Ng<p_9p)xYl=M5y=bEp
zdDw6yjGm!rlbe^q-|V%qL%Q+Y&8F%p`7XUxr7)W{_gl(YK4B^`*fBi%z1E}w^E3=f
zk`a9z%8;a4Hk3B1^UvX~?BDa;xdT>JskgJw@~BDq;$y7_GCrk#gVBQ-vgE*#EfTKl
z@1)eDN88x?s#_|e(kxJ#CVxZJd}NE@a|ShS#FJ`TYjG5!FG*sYk|wTWdBNyr6oy`l
zX9<f`C%(Ej;uibWWNSPk*E<My%SlmIzqdgmHPw%l?D_kn0vOkM1zsAha~EmDl-0+8
z1e_0j%QvsA&Te|ryN*hpmaeOfi35mfI7&J)jh-GcA+)J5m7Iq&hY6(QMA<vnL%jKt
zyK1h7)rN~!<M&Fn=35U299&j+MpsLUDzFj0M*HXKjh<qB@;T)?t-d<1pVHf!;0lP+
z+GqVNimpDUcC1V4npFkAY_wszE@XRlg<~2G6aGKSKI*l3Af7$c$x1L$F|;?0nhOaD
z{q%7!5=yINnIB4zCM_-b_&ZP}NKzK!NkH^6BCAWh6kTauYd9o7pY#v8A;&2L)5`*f
zn5LUiD~^)BnJ4z@$BWs-QLD>0fgKs^Bkiv@BgMwIXXhx+LWNf27)tp3`)80X2aJ7x
zpXt|8b1@YPHwN#!@|Yf||1P!u-rX=RPQxD+kgMDNh}HRGh%Vs0{ltC_)&5<*$FFqN
zu<WY9plO8PxrS23hWxrq7aGeWie}?@)q$tsL_O>EcGgi2-a`reDC#xZ-0~(Q3RWg`
z?@LAO#0>Df$L=8Ep6b#o-oN83&XJrLS!ULXg4`zJ`gyun*4N95YuabB>}piQZ4?Oh
z|48~3V!m3;*rOG{gJ3=j#cGdJ;Exn;;69}c$Xl&s_+ETf%Ga0CWo0Rm-Rn1;3<CDl
zxd4IlS^C(`1on&N;+I1-yk6b7^*p=9@Ip)W-l8Ib8)2`+x%D>PD2qE%L;ToE>TzQ7
z2jEmwcXGQgBicDHy`N&2d74dZZumEW=v)^0t!RaHoKp*!AyFCZCr31meZQcpEY?Qo
zokOB-02Oo+)sK?&nds=wdiDXcg^%|b?wWdE%)mWG;M~yPw^ZmfVf_v`+s__s9fq+{
zCvWPwDn_=9mE+mU4i^CTBq9;B%58?NiwEZR$<JKU-71pT<G(YV#nLMd5#+nt4E5=8
z>uM$W@<=QTEHmT9kJ~B<I=e4=4Ab^RYwWpMk>Sl;4|pzG95hy3*$dH2amMKB)Q^M8
zI&x?Q7dWbe3VqB2D_Gf{`7MG}XDfo9@_#A@0M==Ju9p?PmzPH8UqQcF&sxx;3VP%G
z&4!sllKs@x57O=rrF(A8d>rvTPcGmLPD*vk5S6bnVMTQi=uXB<5W+}g)Y7^9JR^kg
z7#{pBP9mtK><%8v?A08S#@t4)%n!ZO6GicSIF3%4;vN#MiLj|KW}k5wQo+)Vsi_>k
zOkm67DeJU)z`2IJ9r1q34ePFF-~^e1)bn#R<~^6*M_UKltd*9q@Tl+wt`BZ?_X3$a
zf;_kA`ug8_qd5f4eoto-F6p^eLL%bk*-i)4`rj*VCj9bAX0~I>+nZsO_p<}ly6WvM
zDmV%YtzJ%sUS4ITh#%00(ha2(HuaW_sW)FqyiL<POB|di5>h?n9v0%~@abjatT+f)
zDj@NVudI|ZXtJrwGOWp5O=kdy5d;H7Vww3k`Lv+{I9&L9j*t+y8CseD^D@K8Cz|;z
zC8fOqb>`7z(W|G<qh%plFUP#CmXtJ7_ft>>XnFS+GOe0qPQG^F<>5oAm{3MzhD1Qn
z17VPEWHP16Yf)Rh(8~SM(VbCKkU!Ltl<n)L{*s8%z*3X=BXJQ~#>X|@Lo6Yts=w#%
z90}X<qq&mAcMufHkE;)yctl~Gi1h0>`$hX#)2)u@7V(Wf=Z(fBTl5mg&xml`i_5{-
zWn|o&9Kf9m?mwyLE#U7EAl8Q1iSiOU&14$>an`KuUOgSPIAnr4tTTHh6W|jxsH|Pa
zu1O9S?*c<f)!jlq14DIk;$Z-bNS(Etj)8=#8r>%;Q?XvrRk;NY7UX+m*H<?vK~-9=
z67;i6UBosQWQL-#>h}>gF>-=_XHb!-{+U>;8`9PRg02`BC(W;l%Z%nS`cZo%8;)$>
zyIB=e%Zq+B4TxFj4aIJ|QdS3OCL5CWSLo$J#|;T>%fVty!tQ9=%f)T9YW~EQlBUQJ
zIV2MmSIJ%ymo_<``_Do-0ww$xv!hE(ZJYWAW~7`uAxo-#Z104&`rt9Ae&Jg=0ZZ0N
zuFXW<kDrD;A8v^)xK*<pjm%SWZ`_H5L<G&pk@i=F6|*Ju+nl@u4SlXz=?`+9_}nkX
za(Jhv*YWK)%uC9>QNb>BDaEV;ROE|=`DMW#6$sHA?gCxT#SO1J`|7bGun1Q4FA&$z
z5(@@s)v#c>;&;8+UBm}5(*}`me9T-1AZr;piI~m!{0Be0aFicXBC_4Ye2e9tTq<ur
z4xov*Sj-$3BrLeCuc6)=8xjP~yJOehyOuq@XcdS<IV<6Iv%mUTF1+<q^~g0j*FuxD
zKxm$VM%856LBx9U@AR!y#|9k?kd}*wbs(z(p*3@?lXi1D)u!!OJu0d(UOnYA#o2@u
z%pv7Yllp+pm{V`=Y)U<30%lz;A3r&*b9s?Y$oAM3wcz#xGVCaBt$<e%`?_rJ^w@+C
zYe6518pQ7gAPJ{-9#@%u>vnk3SI>oPYd7mRo$JZfi<t~TC+tr()AviOa*>xbwG2UE
zhUPR04TWilPR-}vGgZybl@FnXkb=hcCCEk9Hu~^`-<5cyFJIy$TlY&wzMOQqZ{)vK
zt_gzHqe2=^j}|2e{rXYPvP%!!(D1`>l<AYVr?u<EmxNB@TQ}&t`nzF(#lKg9gb()X
zSJ5HFEtwcsI}HS^wkfU+TWH|=+9Bd82VAcW1x;Y3WRfpDf=dTSF{!-x&v$!A3&hE$
zb%@s>-1n*9fb5I|OvZ8HAR1*etEb*!QArEmHKPRA6uKZN96xQVDA-fb$Ue~xx%jp{
zV%l*75nF-=S7l=<W8%uEE5=m3(>d+rn?7xKiGFk9ni~F9iufZpJB-i6x9Xb14%ePH
zDU6ZDsZ#GYqJ5p_d=rkV{IL2x0vp?w*s8Bd3$oUfG%$Ft;+#q23Snq1z1hxo%=}K$
z=oY>X)~)e(6NS?Y<n;46U3>l-1ojFGg92KdjZYzb-LzcXdTf6Y*mBWS+jQ6bEXhOE
zN0CNeYA3FOfmOFbiFp7G|0p!g1UbUEY;>X(u9!*4=9!$zxJNsi$%JH)mFT^#@6pOd
z{@}itft@ems+nobk-|tnswnQi1^d#vltn`nWAhx9SLw0wfX`6x@gRms`mRx6rWB`r
z5y(6JP#SsjO>58HS4u6S#!<{E<JHq|Y`lT6z(=2DtCYHHy9BzUg#<dhuo+4bz)`Gq
z4Sd2;T%PeS3^GngKYgP)Xn$wBVz`ztoA~Z!5odNLB4VTyS*K5LNNVjaL=)Y`RsH6+
zYG0j$L%ubyc(_!1L-h+hJxjue?_%`ybR@mj)-3K`TLpG8y5$(N^<e(%n!3;45~AeI
ziP+^uDbCw#XA6t0nV$GvoR{PIRHLG6>Ne$8+XENC!abxkeY7!l8pK(1`Dh}!_NNJa
zHC5btBCR<%GXv9iih7FqX>^o?d5`%pz=KNVW4-~?UCJiLx0_5b65kUSd;hzofmwXr
z9<stFaR>1!wEVKlH|dBr_O0chlqksFq^`#L;XEZ@j=e@`(Y{hvM!uL*DI)P(hZ41a
zB_uq535fP<AKKnt!u9NSPj@h;fr|zXka$Z=SW)27ea+M7ycYWu%zFjvLH&ne+E0#R
zRzFMwEIc~g*Iva7B0E4<_@cUdyu!7rEWyPOWlMozXoZus*tgfEP^8Jrg5_pbu2)%=
zx?tN*0*5k*7dXK<skIFkCNa92l?fJp3pUKdkvj4>x4evd(hMP+@N{L2+U!c3Ze+Eo
z<3FkrU%q}#VQZp=v&o)>>e;%v+nU#SGy0Ti793~}e62k&e=_1=C@^Rg{mi&$R@*)N
zHKd4Cw(ba-!Sd+dJZ;6z{tF?l%z7tqUaf(vIB_;!`eOHN*`Za`n$)`XZ0Ls^VK?%j
z9TK}wRnt9i7JK~-hH!|?Z^z6fyWApRqmp^2u*7YDof6Qj9ajI<Acy2+;oy;?A2nD}
zKvAMJF|L)aNz(Q@T+%8)%W1@57p@YSo{l3lDcmB<;j7LzPNENS#Sr3}$w8V~)qi~)
zl3jaytbNE=ZSmuF_~Po`Yf!l{gG!w&)IR!@-%cU1uV&^}X4pwp`A2yCpTR@T0*0w3
zupCT6(0pp5bz|1n_N;gM>1g-UQ5Auw9T{v5?f`KW?xO>`zm8+#z59x0NH@r|ZkjdI
zZJG3C!!5zdGq;FrePlvj=6DP4>F&-ekWn){V$I5;b|eagiS8_^JY0_*HHPV(lU`~p
zr{z%u)vCTpynx?nn8^(X-26UNol~NG@u^)asShRgcNzBd<Rm)5;ojbvsDYuOSaz94
z(K#n<(iR2%PIe^#`Uwf?wJP~qr*^4<E7{}lnwV93JvK2D-oqaT%t<3V6}Q8E5?sNV
z3aDS%hJx{h07Yp+tup4;jdySZ{3LBa#gzs<K`GGZM^sF$iWwdQ$Fym@P9f(F8juhq
z;?8!~mTTPl;{<K-B*WtTVXfiz?oA#ff%C?W%JJ^<H`}UdWkoWxjDG-6K{-~CNFg(2
z+;MtCGFX;e!aOGw`;2HsKGk1n4LxJ8>9wh9pa^B?;Kj1;OxIBt)S3EZq;_}d#f8IC
zvBFPb-*anQ+ucl|1y=WFBaW1e<Q(xuv)y;<((;E!NxQJ4D_iY^Y_1}+Af=Q}-n0DP
zL!&InrA?zz52k79&UC5#mgP#SU(MYeo1^xgv#M&05(6F`IT=|-Z0w3@U1cQ?6I0*T
z@%hep-uLgK=n1G_Pr`2Q1iS897Otp#d*?N~`~GlX$EFif4YG|F%SWb+!1j(ar8USr
zaEq*$`m1J;Eq1^B%4E=Br#IdBU@P5OPt5zC%_k#0Q#zafnwM@NjWI1HQzsx6>a82@
z>el2zy2p95$1eI=i}`KGI+ib`imI~wyDwKlqV!xtXU7xgyhNr<4uZ=gg0Ibt+I9!h
z5?)Uf$Njk8E@b=+VW3Hg!y%Jzk-s}`61>4mUs~#nE;|>9v}aaaq;ldcc%?lQHe6BB
z`UT(DZ2m0IdYAI$q<u;^`KCnUYf}hO0p*F9{m4&m%FFfIHPh55ih8uh>t=7t61W%<
zMG7&QK)FBH<0(9T*#Gg~XKd_bu$j++c@x#C7FspXkz{kqh+Y(gEp!^uV*GHQ+ueHl
z$9SPe#H^o<AHA3Mk6XaR6{*5(DLtma)Ijg>v~t{g^AFBA8A++vSBqXbwXbiR7|MoQ
zCLfowC)R&``GPjAI(zzXJd38Q)ube=IgeXN*5fGbx_i3y<ab_6cRaB>ZAE8f7qI;!
z6zZ*)4E6raJGab+k;XNQm)6qKaul7TQ(-UDrl5s|Ez?hb&jWpJFrwbN^E0tqsPGb=
zTn`Zx#kl|Vr!!1*yx?^~zK`E`;{a%TTCGCjMVd;!re(ZsShbqf2s!LQPIGHVe`}L1
z+d^by2v#JTCj1aI9Q#J|vrLiJttI?f;8L+PYee+1uhf@jsR?~qqB1E9k1rm3H{Pt(
z-L21mh7bWcLkN+YDxK4<w@Os<ZK=`tVi0R`gVp(A?RHVnQE2`%gyxSVkQ;8lzS1+u
zry6o(pY8c6DMJcF?r~^?bzafe4TB6c<t#zuCA|w}2opyV0b#gt+I5A3?j(Yp?g6iJ
zg~A-~L<9)WME3&cglAZEE&sY;&yxNfk@7{!<4cw;XlaYWyLZl09CCW)83Yqtd_Q^l
zHLRkRm1?XSpAPp6qNOw+u*)H+sHn8Gw9R5Cx%>M}OF1$lJ0zhe8$w5G*h^6n5vNU3
z!!L|C-d)fR-U!$-ODX&maq)Vi`G8Smzcrkr`tHSo`xeh@RbGDn<4+QzVOlYE7Fsot
zdUliQFX>k)dn<lSh&iJnCpR<*C*$@J7)emR)J;;P=cUlFL;TvcnwW@xHbNQp<4e(#
z!s_EGPM&EgY9+xV@0$Q9|L5GIz@PQ?H@$JR;+gMYlb}-c%*s{Not>SQEJfr~x$ddh
zcbinVLPY6ebn)cD`M20`$o%3Y-=n{%m80d<YS-5Q!8q&PEKlsH%AZ&?A6s`04n_;X
zYr{QKl9tLVDo7U@l!qKKc0mNA6CAP<_(eU#uit7u^!~Vl>z$>%-KAYiq<QaiuT7)f
zI8a9kMGT>#6aLs9^8WoT<WuW%an#`L?l&1hhq6(vu}h$xf|gbycDlmnx%4*Cn67jf
zCQVKdc_V4QuBJSqH8aRmF?Jf60W$Ov33Wh`q%Kr@DrD5IJXw|JGM$v*UM^T3s~pl8
zu=^YHKD~{q<tf_d;APH@Os2eUN=&usA-`<ARBNhE<r)LQkBZ4GD5iP1l}a|XgI1Y@
z05Q?U*6`VLUnR!i9sTN1#yuxk;wikGW!Z!DThZG#t7Y56<wruv7O>qHXYm|!yZHE8
zI^6VKZOPtR3<fNOOSsYgxY$|!T{7D>P-j4e)eoD+2`;HA6|8m+#OFwVL)Y*f{Vbgd
z1rp5hK%}IN!q2c#jY|5F2^<sP)>K9^dltdb1=d;Yq%&}DrOD#`kbV{p(3QroXuc%w
zXuGidXSg{5(8j5fi?^CRpQu~FIMTrFCUGF1L*w$lgp2DLQGN#sS^rZ=^!Me1ipdHa
z-gs?<3UFa8hE)%LMaAU(cA?fsKWmf((8h5rwh=SVP{>#ln3L;dw)WOCFz|y#_3m+s
zgM-6I)|Y6CfVWe|yjTu;0xpXHLIQFPIGt9@yA{*MVNL|zDE`nkRA8Jxi2r_B0*(dI
z{*H`C1>DrD1ulMdKlg`Hn*cBVAYgXyffvMQ|DRUeTmevARqpg0R>iL_Ik=$gZ`Y8n
zzVMeXUk0*SNawv)4x*NrMt=K>K((cSaN`&Us!2~rcU_I2l}$oCihNi3ER3oA@j>hv
zC3XPx5DvcGX%L`N3R-74s_D{TPNMQZZZ8HyH8eFpJ%B+}uLRV8YTVQ$)W^`@+QK3J
z*GpqR6}JY`Xs_wxEKgjgO{PB-R|e5(utz0^t)2bUv!dpIYmg|)_R1Avn`yvI*o3Ar
zJ0!q6)R#(BhV8Mrj-CZko?{F$Um6ozSSqFS2n|`I*+95c!;3h4OHjmIbfP|<koQ1W
zUR}NQeGS)at!b%xv{dn+(TNu8(Vn3k(mbfmoWyQW$0;m4M@58*C{-DEci1>QkC)Q?
zc$;x^^Kqe1)T#?xBLNR(`0{<v8@D?XTmSX_syh9xu*M_LH$^+!nt_Jn+_XZ%ZnnW?
z%D6}Rm_J}cg9E2MQX0!;4V&*(e@IHMoBx5C7tz72^sU`PqaWjLp#f3fANTFzk&n){
z4-Vq`X&H|!CI#3pcRX{5y)COVk}>~YJWOZ<&UyCxHdTsrGWo>Xsk(KyC0o+Er&_Y#
zUMQy(bp-MNH59Tt_52dgtQZ*D>_n1P^6D&=qEuDSeL=A24Eauz4+;2vg#qt4R)`Q7
z#B#-*k{EkN8~BIjQpHfxZINukEAn6CZU}m|1W4m`uzgxNgA5xVP>_!<3QJI=+o~$~
z)7@CIdtlYLW24^b`OB60K&3OUrdgWVjEb}#AC7{KwzttPuR#8<?YH2#A|93s`&CRW
zb)3usV>Ic0Y#fd+dgV&}Gx?Jk=X7>-ePhPzLm7KKD&tl7JmTeW-ipf>4(mJYfw7{k
z``l8S5u}SlJS?o4jSgqCTt6#kQ)UC{(AYh6CBq~I>00xjFD(wpAkUMmya)9^J9*&Z
zWS>DeJYT%)dcVw@ROPw%_n)qkO=l0PMZ~N{$Ua+-V_dn=^Y0h;`T5@m?{G=$YU0ui
z8}1O$)y8Jm7LSq)8SUz3{_*y<bPW6>U~!kObVMq_4rLw~zG#W%0@MF<->~yeDOeLc
z5Nj1pwwa%4zl*zTV-KK%2M6@m{)MS$loA7N1t|f&xqvVl=Q`Fcr%^a?nRD{;&j-&7
zC3zJ>bI+(z7r|IQ!w>RA_4M=;vc6R(6;<JuZV+h>;}%gjMet<ufcoCYAK&3oi~T(*
zL_`^5PB3z@UFk5MLm*pQ;#Aew<BpI-CO4SqdWH_sUd_AU72zxKQ`^XJ`yCn*5<*b>
zWO9Gwt)k@~sa9z>WOz83dFcOwXmql;B1TyN{>K3PCm^#}Z#FuwHj&4iZR&>y;wh;n
zn3W;_pt+`mrwZ?&s+gJKa@H_1KwQPOrl@NDp!+>8y`Is+dg1=NdOAMwQ^_z+hRrbx
zp}r!UVDk<12iwjRBH0CoPryarVJGd97weoR3WCeK8zt?D*YB1eit6d_Dg>;enW=14
z6o30PFKEjWEM%GTS`}e*TMu#X$I;4>dTy-m+nS`s8<foU!xkNdC)CtxKK{<LJ*)R;
zw=_205q`9mdRaZ2OEHl4_IV|D<V_+0@9~Y6n$Nl(Gu1G3)*{kIM@_T;HI*AZy||8Q
z;^=j18t(XlxZtCc_%YgsJ|C7Rct|PQC7bR_{5$mSx}f+}BLSX%SG@E4^;KfyymC|*
zw$sp3Pmi;}FX6YN6`389ieN6YpwfC_&6;l?C7`}xQVu-Y1U!589HFj>F`qIIm>rO0
zl7Ks;I-9-u^(rmV^_pvB`gcfP1)t5-8&+3_EgO`dEi*eu0A$b#Qlj+S{;5^1WwHce
zGO^A@x4E9)AKRJXY9hyGY?46*JnaI1QBdVW6ZXu?EPxN(Fx1a0B&S!H`5oR3;kA1^
z#4Vm0S3Pp6^vGHg5Wtt>R9740iQ|fSTc4GjTAxuvlpZbEitF?)JZ9C(Dmr200`7Sp
z^P{_QCz<C8Nnb0eVpp<v;T}_FGC|>e!+c^VGFDmZ^p7F6JoO*NT9Z>TLZ<d$7tQ1V
zaZj$xq~u?l#5vSiQk41x+<hN3K7hFa7xF3;Sciz`5tjOLad~(od62lYK{$|=;W%sQ
z7{g``cX^|g<YeQGXO3Onu0CxS-N*5})#zd(WSzotNqFACD7@!bQ=&(LPS8C7YKTO8
zNY$nE(3V7%cq-P`-7+p}n=?yXEz#wGXzZ*3w)MI-N>=`9xHT%zbP^XV8r5ElA^8IE
zw_)r?FJzXBRffOFoO?rr0AO&u6q=lNeX!3|t~2{oggPVHolk4fdWbq@+pP<-#9k2O
zB($k`3*5qu_4MBhw#Xl{cKs}((DTF7o!&??(c|7uIJCqGoX6K|;n@6a(-8?esvz{d
zBJzp<fQ9zi`>6)R`NM~Dbn*>buhM|M!K)vvVb^*#KXKzA!`HrW!oSY8qlSP*a<o>V
z>XimNg({YtfJ4ElQm4R_IzeWAUm6oQpVDNHizy$O#EVERZ%xhB*nyGpH~A4K4SP<+
zKAXR|fs?VkV|RWl;pDNH2e#(C*M?vd?y>~m&6uPMB2=vfd^#&u#Gi?ntXITb&$O_(
z+42M&jYygeTy~6NfnCoW@L21HHNdR(b4zy1;+?_p8lp8Oafn`#Gz?D?f)p9n0*0Z#
z$i#KDL-fKf-Yvak)8_<_3~Sv8Hm}V+%dwOSK`Y2;z%?Ua@7b?=?LLkCc)xC;Vb$SQ
zZk<!Vz&9aKXv8bvlX;^w!1wWwK8gxJOoST?x3&EIs5v}V4{L=j)zF<I!dfQVRSpF1
z*k4=;^0_x~SPN%}>N$Y!;3|m!I32vHexa7g6@b7X+*Kjub-n=`|77>tE`4EpC&&0H
z`=<;{heko`%eWbR<@m4Z;cxlZ8wiYOth}q8;Y4?Lcay<vKUUFYmv=)J>RD?;NaUVu
zuiNe*S#b3Gu_@KzoaV8mQKs+otcr_%<EpDAFNX)?1`WT*%8lmSS8winrR)v6p`ZH(
zJhH`f6?6|8F$@l<|H>D<@RgP6F=?Gtv)ZX3f19uD_XQBve(ml{L*@qo<xbRLW;^!i
zD(sy^TZk2PtD~OuDE=TfzG8WmlC+%M$j-^?{;ax}0a>%Xr<R6vYM{;A6ZkWeR)F=j
zh#53qZhBmto(Y{D-S?z4$}8EyYi>epCFXO^)Z8Zvw(?~Le!9b-Jcl{3vmS%VDXhn}
zA4)ez$dEKklOC>7dca(qcktl85MV-AK<1~^5X)-0c&^RgNZ|g`E1)1FX%XpJxO65t
zOL_*4vO*$|0sj7jCjDoq`)zh$fLBhg!<(QML*sdF=auue)q(Bcj5Y1SugMY8(w;>)
zyruyFLv8f+_`va(Tn5fL5g<RCZka^W{RNwtRfgBtkr7wf4-*Wv4Q6`;bWT3I!{f+t
z5f-W_%3TTqX4R$^^w<QP|Fs4`K(gAI{`^EZ$S!SM65$7QB}Q%JD-TVw#V^+EJe}D5
zchT|v^t=vQit$=Mtwa)UZ}|sLHskUz`)?r|Td(hmGr+G?x*zr`e(jXwRRoPuh#&o<
zTn}NCdWnQ}ACIn<p1!T<3kAQyy?%g{ww^G!BZdj%xwV3?Az7}wyS>kovX-Y}%3#)i
zV7+%v;f-f=sk7lz4z)Hod~s9n(8WYl6pSP?sRDB4u6!Jx{CZG#_0OIBN5@BU@2~iF
zW{VJ6xp7SXMh%h_)4)G%kRvYJ7Pie6^>9SpKjs~-4fYe)Z-)tVJ*?OK+SjT#R7faN
z&{tXahr7l9_*_fR@jEi$VefEQ<su+ZK?t@#6KK49p(&-R8-UaT<~#xJ?|DC;LcS!q
zwGZ2^4>)+uUYPJ*<}-9H(9H{@v<NmU?g9F((aqGB$3&Rl7v$!2JAA055}8aPB5~T$
zleN`|B!FXp<8Op_Jv#}Na#uFNVKpd4hm94_-H|UCmq)6kb&8#MVGCwwCJ1)!NMd#z
z)?x&A{4&5JZUO5z$enlPc#=C&hJQ^K^R#mP;}Gup^69v}h}q$an%lPcG!Qc7YdwZv
zzrDqxDNS=5HQX4JN#(P1cDTGKz{k}wy{L|e^*30kyMzxldTxgGEKv}Xw#>MgN_UEF
z^eDaL(50we8A9{H54hQdc`XM*t1IDNb*j+uL6v?6^i9?{W3PhuQ_3pM1;+pgtmtDR
zxZ~eVm1lF<g<9bD#kj6g={t^1EWPZU@A2In{Gul`ebG;B)^k^pXrT1u-j(>O`mr?3
z7dumfJ#)#pj)qGs6s5CvS7Ji%GU15NDF|+BO;pgcGgbPf&MKTnd@kT9F3j3}->QJu
zDd?y0G_y+7lvo+f>eA1MAH?maMC5>e9|ZY)xKpETI1+EvdKjD(d7}5Vt=V9*ebB6p
z)ecIzy&L8rmsm*ja9dyX!~I?mGH?bBGdP@R)&6;VTxhGq((J=-=<N6FV3zwOo4MK8
zSRO~IMv$}CWNG}8U>Lhju1>ug1EK1|r7aLnFLD?WLs}-+v}J1^^Q!9&gQh!rDV`Fu
z2?sBzt1)eiAHLtgi(6)GBA)z$ZX<M;M6HMoOW_I!HMM$JU}$O9tJ$03@e<XHb(N{b
z0u}gR?{O~G%vRU)J3l{-o&)`h;nmMIFCsY!mWzHvd5Qdfu$q~iGso$ueBCJG+PzC=
zI&22VkqfY&kdc})s}?Soj`4cQ>x5dI(;7VD-Xt>e_1!;OL?n8D>;lJjJ!e`=ADF6`
zb8pCdG~c@6fm^8>U-z|&i=IJtChXY68nlNl;`8`=IQS;3;X1B&7qtb$M#ZsmddMr+
zTPeFLRlL~_N#XC0*y;|__075Z%t9bSqWDZHk;}EDAG)5)e?1>E1#h@i_v1K>M3qIV
zuzqEzy=>SSkXR%vzm@&0#BH=eoBrUKWVu`(XKKisM`rr&<rrgx#ilBcXqiE|Wx3=l
zyox!rYVX{owrd7xpkb5R{Q%E!oeJ08=lp%Go9{(S7s-rC{a#Bxuj%ROt8PCU-&E|W
zT{!E-U#IM8RE#S*oIlPzYD?@*Z5OtfF4jXP2ei8Q&?z~39h>a9xLvdo&#z@BH&i^T
zGF!x0_-CjlXnU2($;l%l&u?FusO#xf4WzK^W@VcaPle&NUfT!x``-&@^uCO0u~HK=
zTR2^b%zoRs#E~?7NFl67d!Wf33F+h38)6yW*8QYcl$71X2*37pHc3rOXN-tCZ6Meq
zvs`-AySb}<CLu<9KxT<Kb+b3goV7kdAOECwgp-iX7;z;YWaWMyCEZK!qJDZ}-Z7{z
z79{>^bfUS&RAy8lhZi{ciuyUGFQOlh`Fxm?Sm>;;S1slhgZz1SG}6=cSuW2q-)jX+
zQeOPL$bA^Z|L)Rxi~fHQ_Eu4KG+nePNeBc21c#sr?(Po3T{rIT4ncQt4{jR^t{ZnJ
zxVu|$clX=hf6g7_zTKxDqoum4yOz|dHRoy*?&p}(VHkNczKI>yO-@w0PWU~>(0l^H
zAf{r>n8L;7U{E88brc+Ku3@KFuZRSfJ3BwY6tgOa>3hBh6eoEi>DyIi^=^qy?kqD8
zc`sh0m(@hfn^!_OqxH4EI&Ck>Aq2B(hSJg2X11eVzv)VM=U~_=QG9$qSW^W}>k@nx
z`h28yJIt!n|1@F}3+&4E6W~skus_!JT-Z5+)YbcyNt*s1jd_!lI$io8SRJJ~GM0{)
zWo|+XoF2k^EiEncQc2%|bsC5bmg`(5+e<%4Q@qXfyw#8?8F|JS8t3K_k_H!`)TLm%
z-dZ0mvCZdEoAr4$%nn||YN|vxKgM~A4wtuo|1Qqq_ynxr%uYvAS+DlS?{0hW^?h6c
zw4H!Pslf1I-RE){xvysn#&3gGURfL9FEm*`*84|SmxfrwbvltJ@>ZhHxcrt@WV7l!
z#GsoSq-x8sP1y0~pcXi!w|l4UrUtk#vqQnEGeri=y9zyO(ByR6Sg`8s`kJ+*3@T+W
z;`tS(GzcFbzi^ZZxrXm{W5<8_Rl(YQ_~i2$kNeK?%8X6MZzUAma#d>{hJ7{F<;z9)
z;<`g^7U##1r(TjK9fI8XDnhwtXZ<Lh8qx9E-j#$VGG%ObTJkNY`CdzeuRMgy%Q?JY
z(F`u#IG*IEi-H0LT_!>6XX15*YR_t^tG(!imNnvXYjuk{h>~z!Uy*lYyM8{G&akg*
zFg_YLtJrbVj+T$`(`A1**jrz7xn#nkPCkNZ|8e%R<mx(GMf&oHOl%;3%eFl*PHjq@
znuH{`)!xcGem26VIfvB8jxhK2u<@G}p4AcU<T^(UboH_J=fTo3Zc}fD(0FL#D-EL>
zO@ZK}n-B?FmOY`zZQI=2laS{a9pho3jwn<c_i8rvHDa~7*-iIx#j#G<uL}rq72mqu
zgFKczk<W;fz&};li=vFKji%t5<;QW^w(~KE*92%D{#mR;(zXSg`B{uhrq?aiJ2qBn
zZs6C8o@US@_5SX!MuwAtey{yu4mBlCk2&F8bDxh24*`jfq;Zs=oWs7m0(lJl*txhm
zY-m>|E&<7GSHT%29_pOx^&_k^Sr$NeNZpfI-|nm5{C2{<lBkSG#m2_}$g^AC`WEy2
z6sM2t#k&?w)3uN3cM6x8O!g#k^XWN#DS3M(5PMY?OLrh75?}=aYYX<Xfm-7P*2*Zw
z#ShcD<ux^9(<I~_I`Pe?yBb<O(&TZ$ZYN;y!tIUN*)Ab{I(95KyOHQ9n;Tb#W$xV3
zAnk&F-%k&>n?uDFdo_oF+!t``+Ea%b+KaSS#VKiDQ3z#RQd}P8Xs-k%Y38%@-M`Rj
zWbOL4#g@IJflR|Vuwd@pHU7V=`ThMN*6{v_7O&vHN+W?w_G%hqx^pkjJ6+v3PDYZk
zUeb|D<6~P1<A1)kPSJZFOb_UuHF-8$+0FC67QQkbVbYPaU~g<-Uz2Tw3bRfu$s`km
zdbivBm9s{G0d}nkZ9g>cazx2WGo~{rD01z8l?lUqbFy7})Q-nQk5#29=_v87Z#{_!
z?yB-h%6l+g4t8O;Mai_-BqjfBE<TAgJ$3ZQgWL)Lr0x^8xYLqhn7X8lUx6B+8h#$7
zfwa1h1soZAvoc7EAqb(XLL;o^t7~~*S&KZq65<}Q`;qm%va;L7#&^y{EBOaH6pB@5
zbT29mZ%9QqP{22)-(=ELu0RT$*1grZmlNGAzq4GCklYnA)|B~`+Pe-Tc%rVfJ$L<+
z;x5JZb+I<`kS?#qdm49hK*hJc`lNIc9mR)-pZ19oGXLp;7R~p(TE+x~vlYv<>SzK%
zOidHHfJQgM+*};2FX_Y853IGgSUNJ!#Ue=};V8Y<iFj08g<&lSo`y=VUL_K0-_?6h
z7S$HJh?cS{n>u}*W#`-d#8^}l5ng}1-a%pf{$%9f%C{6@oZlS?BMIppw%rMGy_;X8
zgqZ)y)eNxx+|PtrB^shy22vn*_@bqg(t~>(shq?fnjc%2OxO?`1@%P65SCSVdY<ij
zX778Jdg3ZFl3@FNg(HQ@p6t(9>bLiZZx8u(bgZsFQ(boAW7PD$0<$S#TOeFaRfjBp
z3iqsHtcw++RK4Mv$+k^?bOjQ@vy@O8Kq6UBf>!m8s_ysaQbL^U1Kd9qE+O6>kcLn7
z>m~Mq>Gn5=F@}l?z2bw)=(d!WxWxR8VJz$?hw5LhZ&C0qAai&~r8wd*!&B7gw1w_R
zF{eR3CyDFP7RZ=Yrnz&4Ydl^f_sKI{j^4GR>{eQ+!ag_m7kgib?TCqXjX`4&tYiDX
z{y;=xy<CTzRzP4Onb_Nk(UQ6<a7q(GzUHkeS<G#jb7UT7H;6hahogI97|n?%&(4a&
zgPR{57hcT#fm-7>9b=K#OG+jpKf$ht2Ry|kO|Ck}rt+G4kW(*k%WM2PN;pypi3_DZ
zvivBjc|`H6Z0R1P-J&h{dK>T>+b*2ni%*|4`57d(>SDjWuAjH|V8!^LwUt|NjeM8a
zlj>`FWf!gCt+1WnM_UMKKf^zaj*$=>pvyfa#So2{6B})^++=u{Jz0fJ&y)1k_=Ks?
z3y)ZAT&~a_LfdXx9vV2VYxtWTcTCSr%Tx0*LkjvhKY+|W5$me%Qlm`BcINp(8?4sP
zMMJ{jKa@hF#V6sd5==!MT;4L|J#SD%A?D&N7Gw28JKTWE@w#ca`C&TXI58{bzhHok
zNG=Bx5=P-441%YP16JF^b?|~?s}wm_4U%;uEAQb!YjI5+9ceTJa>-j`$6owdh|~$G
zLPAebR6;~imDk_iq24MMgk1CEkBK2gXxyT*{OI2*eCr-ny`G+_Ri<)sAASnh5ZV*#
zB_v^2C@zHPX33Q2mA5Plw7Iq(olhN1W1%A;#1Fu@n<@Y?1#1Q?>OQBtrW<-{s~hA^
zf2=rs^9W2dwo*zn+O${(E!SL)iu^G>j@CD*;kvu$R9~2Q>38Fa%$6K-Xm*bs$oJ+W
zJ&^yjJ+3S`fc>`5F}TT{GaxDRN{bT~Hmc(l^l+Z?+HHT+Bh9g=5V_i1x`c*|Pn{){
zJN<S)w^fLuS0dnhPy_k0^i(cR8CKpQ$aBPDH|^wfJ(wZ*Z1>iBXwNXKHqYLmpPDJ~
z^vE7NznUM)CO??L1GW>HGA@kP5pX}eRIkhGk;s$Prb??5g~YOoD^mW0blSEB)9S({
z)ioj^!O>8}y%z4ot@Lh=6q8&=R!l2<2J15YsD9-b>_mOC<-fXPbfrxDTBUib0U}F6
zD|J5^Me#++c#(B(S@Z0y@XOA@oOv{jYfU4&Du}Q^%b!=`;rBXm8GIQg|IvNyjy$s7
zG37Hq5QE6|*x5ft!d$#|w<mi^ea``eBNz=OZB6n?#3`KqF>y`icy4Un#*bPRr*KpT
zt1T+M#U=~TPUaNjz|}IUx_LV)OGQ`&tW{db&(wQO<18Wj#7)(T(y=fd1NmvE_BOSQ
zp^^tlFHaG_iO4<YZin?>Pba>kQ#jp>DuAW`juQ&VVjgX8MGIbB^m|!br3V526&T28
zl@w@E$f!oSdf?O2)6-KoC#KkoJO8n``1bQ$SRl)bh4ro4Z1iPkM|AALd%(2ilf7QE
z%luNEpzmJB4;;qJ2iW6Nxy~1mS4c|43D2CtBn^pK#9lb|2r6L-bBvpV9UeazLPhU)
zx^I4{z3|9U;2tWc@F&?Mtb@-wCe1W@vhI#q-77_t+F0i`fb{rd%X3(ev|flcav>vb
zsIcs17DUn=r5YJJ@_^0oMqPD1^{~k}hHC<PxI=R6)~K#P*gcH)@$p$F6s$5?M0~ZK
zV(Tpdr%LGEQdh9KkEO&r4KG;_3~Sn5CFjTCh^=ns^dK~@A2tnZiDP#CM&aMOJ8d-1
z){w0^Bc7$~pPZM+i47sk@xP%TX~N!BhA*9~lGzJufm@*EFIzMtze~_4-Tpf4`zq-Z
zq1R8NF}E4HN8F3a@)%(JxXt7F>QWv;O5ty1V?3s7%HYOCig%bK>p1^yd1Y)!94ml%
ze@uT8efG;K(opWYYJP!&f;{pHPjTiy-$e3tCS0V|)zxh&#og&@7{9%`?lyaZIf{Xh
zxAXJJk5a~F9qElZ&o2@gg^VR8%9l<1YV%@tExfj7{&g889&Y;cerF+}`*C}n#|KIs
zV+w5^!2uGzHR=-e&nJg7c}1&&Y2s{=ROHNvP>gi1%R!jvY*%4d*E)Oa_fL`IrF5|&
zi5C?JbjLI@{rI(lZ&#?@`$bCXi!tFofYhG((se8hqIOqhC!P?I^wI4-MMmUEI!j@?
zudz)IV=Zk)yG|kwV=`9J?JkCpyRR|rQbTuhPOEYR>>y`F2h3$gSN4f~PnD6im37If
zj~w;ZzlO667aJu#?I0Fivho&hPC|Eoy|hZ7sjK+xtOZ{FArjMn5e8{i$EsP^k~T-b
zIh9=KXgmMVp3dJbmYUyQza3{ylH6lRq?Fx)JU~co<;<5D*<CWAc6MjSp8x7Y_UL6G
z4a!}_u72OF-+yi#nj&5!q~oPwFOu7ee`sG66rgBv&fY%83U1}%^n+l1#rdWXT^Q!*
zv5LgQ<L~=yIvQq1;dG576k(#oa?;WvB@<qE;^p;_+tuMqJ{yfKe3&V&z<*b1vnm&-
z)gJ0*W>Fies@$Xc*qoZvWAV5y&8Frmo42A9C`vKc(Z=s;mBZLfGeaX2@`d<T4&<Y4
zDpkqu=R>;fU5d_KOj)aJjH|pDiDRG*&xX@H!$v=M;OeeR{Bqq~%vv_*ZvpI=w^Upm
zu?8qtrPMmik47%IRT#^WBOM|ISgo>ceITm38W<MWVZ6OlAke&7Y(S(k{z6Z$q=+XI
zLi9j>be#a|N3St<&AAVWDEj^Ga2`Bs<0IsD;zHuf#w`j_iW;-Cw1iM3`9+n1^k*hE
zC5M=}D8O3>Qj^yi^AYOnLN_QXZ&lh?Gpkc#&Z2O^!|R<3d*e#ZN?SE$i2e~CrG&}B
z>u>9%oTh8&l#{PdFK^9vrK{ciBNy(8A#WTBOuF9v<3{V=8#SVuR>m^jCHV7%#_f|x
zHM37@>urJr>|!ok{IQ(npQD1-LW5MiG-Vc%X;mz_Yh3N{nAHZSNuMqpy9+6A82Lyj
z>#3X4w%LscjyZNSt3C7O-Cj!=%>7QD?;$cgN!ce6-_QkU6EivGL?Bh;3SZZtQ*YzO
zPE83BloZrbLRPyP(So_gq<|1UP?U-=10H`$gO!mM9Tq+LE$sBHxpREV?3FRNii4Xv
zSSyk6?z-8<T8?n;@a@vHe~%Kbhh$0UYaE8C!cGB0>c&j>JhRFEtRiCRmZ+wJz-yyN
zM=~R$9?~r*TAXaBN9oE>a*31>ojCQt1nKbnut8BRIHMr0jM>gZe63oyha-#F0moOQ
z<R<0rs3-{fuqLZj@<TlK<%(%WSK$rxefLaHF{e3wSa>DYz?j+U&NSpxkkJluY20R<
z%4WX?eVh7?#JUp?w?odT_Q_YHG_AVGF5$ZG?sBDt!BOr^9RBj**<l4JrPLw0{ZR*B
ztJuOZ4yurTSKg@CmBo{|^pQvkGv|eBXi-oA3rnZt%1_FcqUb?2(gK<QfbT3Nz9>{Z
z6i#&{h~bDjI4>JbOp;8noqGf9%jc@CcNqEes8EnYnMRL~*Hf!nbiCRqHihjNSv^5(
z&XJR%$~0|Rg3XG9eCYOJjINx+=WkcgN_%s2vw?n)glw%xDJfokw%T6hOLZ{oM-9r+
zBv+Pz^19?I?y7dN{>G84`l0nYgK9Wkndofj_^RtY#)vjKXF^I!`8?R*0e?u@j@VCQ
zPSKjPvn5-Nmx;tl8&=<TWezSbx~5qFo$-GgzUv4h0!KG-m8ze{wB@3cM`aTUi%m<k
zYkz1_^s(gx9Nm7y()f;Dk%DjQ%gfW8d?i%Y@jWv~tc6Ca<w+wSr1~h9<!44boJx|s
zU}fGh<nUMx$zQaTZ<f2a+b{rQVDs?urlqC%Xkc)i%htYtw40IX`SWz~NWJLxKJ4y_
z6hW6r(zwID-{XfK7b6>khEy#VWC%Ue3TD$gKxb^=s?aoF<21qCd8J7l-s|aj5z~+M
z?@}zDpqXuX<P-&qN0#Cg*?rg2mGyTCWZxQQ>sfGX_bQeITxWGBBX+7#B2c62DhaR+
zKX{bzuA}SCl>j>tVEV&>C(sYmR`l=EH0>S?mZ|yX6-Cy|W#XHTh(mbYY}Wb3Y~UWQ
z8M~L8s*YA(dUB;QPTXMjnWHS^)>qetA-mXwC6Mk9{L+}P-Mqj~|IUQT2E2g_>G&`V
zWV~3qB*JBTVZ4G{fqMNx*J{V8ges#{FH^A<TtrXNAAk>k0_RY@@~leh35Q%p)@Sye
zD9&6$aG7`H1_OdG?EFeLZt)R1siNLYu&of*V-6u?{D_77bKMG+@!Nj7&CJq@;?mD2
z1~;b$CS^Mt=f3hSA);)_jPHph_9=C-{C$6p2x@KDqUWtOTH4u^d-COzG>ViE<L?r(
z5c)_r!kOkuzk^I@+nR-4W74Yghn?PYBLRVSdqevS+Dr(Q<=Heb7iXU7L)Qsk!Q)7W
zXzs=JzT@Ti%i@LhTt2EPd7ZPQ`OhuIFCNI&bnGb_*om_N&=-hx!9ayvhQ>54<vWbg
z20VN*w)moX+$~0Baqx2I^ELS>{Q99sY;KdP&P!O_v=g;!rI!AEb@QgzkH8a5<)z(1
zn#2jZ;fWmP2Z@3G_)(qLGgU{yh5b(uNp^cz(IHEt5n_Qt@G}-W^{N2asW{IM<#vAe
zvs3ct_J|C7EcQw7QpebBipT@0Z?ivWvZVzkZGClBe8RpL)QJos5LudphQ@_ZCMNOq
z9KD{XjV2P!nUP(-*`LY&ODmb`0H4PBST;{#Yb7z*V4<1NG87H$vQYgkWzF3m{sbn(
zOi}NPa-W&Eoq2nP4|Ieh;B+B?cXTm<Rl*g@qp6mr4yvDczj{Y8n(4Lf>^#jTH^nAr
z=M;bY5U0T1)Wm&9*0lFL=A7v~_CvXLgi^%HKb%Z5Y@Yl)>h4r;nbaN<t<I#O`5;W}
ztsS>Q-WVJ0{uW@5Kl}g(nsYvbPsbALD;E?%|7Bmd9;ur1*E_X)%-bX9<v!on$K({$
zQS;64#P;if6zq|~5>n4x0KG(MGb^`CS7k*bGH1}VQ{s>A2o*wh0JX&Oxqu2su0e(6
zY<6v-l}me+@5S$Cl9OJ{oS-qW=cGU+*dg~}`L4`*t)7V9++xbBfPsEqmp?~>n42{0
zamQ7Im91#6iK`);XV;xr3*6T0^k;z~KQ`g7)9*1Iqs$d6-5d3zJM*tYykP7-LDRqu
zurA|n<RXxumFi!9ROGRfizCf|4R$vZ1jj5p9*Fl=k6Nmns-{7A-_~BAN`kLKq;K6*
zbhJAuQS$eolk{G>^W+3oyV@@&=&MZ7%s5N_2CQxDUzHYjj`9n7D|V%JW>t$r)KtRW
zz6<rw$it;sONUDujQ#IU?a}hCIX}0xoV}SV{Vg(SyQ)9-KzM(`fAI63F=_ABu)D8H
zc`W)7y)mR=6M1;}zL|b4xpV%T<sxZAI3Lm1w01R(hC?{_qe1)eqxsjig7QJ%;n~AI
z98-#+r!`1~qh?k4yDbHUy0%*n72VQ@->Hy(yRiX9XX1{<?VrzE5&9W6<1#8QubJ5@
z)mz5a=o$@pC~ojiM{=W-jI<f$Wtqdo8g>u{hBG;gqF@ee_g<7tw_4oF(QxnG+v-L%
zf=m-%Yu7mOgSL$oNJs6ngPtL0!~L#(?YCms(acWhrh)<)N`~V<*!nQ)_2>L0*^HY}
z30G=_?>r#VHoL?^=%lx|{mvk93B)SWeO-{zJXkjS=#>dM@li!=wh%=<L%?;TeEBSe
ziIUpbW<8N}ZVphUHrnk~qbB)ZTPBY<UB`&bB~ZS9t{$9|2Yn~M&DgXGpBks46CTFE
zkz=pWJvRR^`PuarUf=$VNyWRYfhgG^W^%+VKQ3N8R*tYtT=@89(C>^qXk<K`PAk*p
zi0rD_OJpV2#h^kvDxs|Jd;0jyrUA!m;RB;S`;f)vMw$w7Gc)<mmN;R$1A?ii<Am(8
zu0|K}OH^|8=@GZxC?90|Q)?%t<DsUn9qr#uQRO}#P=1gCG2ht!*0;5=-jCrb^W2_h
zyO5Er(ln@Z{@^%vbEmhwSxE*}l_msh78Azr>`k*D5q>GRhuXz+ml3u<IOCtX@0?}c
zig@l-0DaFQnv%uEYL1sh)f8K~w$x78g7!hmjN18(o>$lDR&o@<SFRTdVfOftP3-P}
zPZ`9>rw9@3HzhXHM_(vqJS{D5UranV2}!$|e1H7iNUv(=p=@{DJh?+p;H&yJeO;(e
zIhg;Q2L*^Tw*(;Au3A}Cd*;lw?ye*I{QeMNKZ|_#GDLNGY8f`&S9D{xyJ`;+eD12-
z{gzT5;&pibmv*MqUUrKeYyHpJ+eGz^LHy#7o*<~rM7jw39cqlm74#BmQt9n184tmd
zw1{Ywvpu8o-^Q&H!v=>#C&bGAH0d`+W}D6$^6fTyzP?;9nRU_L+3XNCEl8pw4RbI0
zjK66nQE(l5xb3RnNQU37kdHtvO5bR-VTkq2YG(>x((dPaZipBcuc3xO<=@FM-EZfN
z5l<#7WVx9yWY2wUi5E>?u5oMl5PS+MqIBB)JQ{EKd%gF>-Dka=WJ$88=qy>~DWVx=
zoyn4)G*z~MbkEx_?$)fbG8L)uEQW!#^`os9!@*FoQE~X`ie-3hLgl?tyIN*2|4gk1
zfGK>Z%Pn#<F#2O^mIU5=A4mg5&MI}vv-YLvA0<14=miEvk(|E>?dHX6oEPjlYqtV<
ze-Y-=Eb#-Ub<D8B((HHZLSq>O1Ex&Afi5Syh@y(8#Z=Gol^DVC9;sv;%7r`ecpqbv
zgy<l`=7pZy<0oM$4&$=dHD8&l5YWoBU9To=m;Umx(jO7&_wwh#lKX*&V6kG$Nz3u1
zrpO>%aXMU46nvENDo%KsSuN`E1xLAeucaOk{C-V7Mn877(tixGc@)YRp@ZBj<cPuX
zp9`lk516yk<6;MHN5<K^m5oU5rEMNT#pYQ)9Oqxh$K+E}7SFQL!*iylr!g=vs2$yn
zQ1BEsMr331C}qayQfct%1l2UPp~nNNQvQ4?Uql+6dDhK5eDsH(;33*P1Y0%R(QkCd
zRv_<2)m5EFhwRo?KFATs*3Hg>CXn+tA*ZjTR%4m~9{ueuiZf^-AXP7NIH|rib&S2}
z>mK%D<BRk(n);q13pE5H;R<Q;8F8f%q1i}cW^=84_BYqcR86tgxpO8IzMd=|CZ=J=
zqc5~p^=5L0kAP|zc?twwr3yd}YyU{)4kW;eh@eGzV(b4+735Uq@@TwR^ul=JM%oQ|
z1m%i|Qx^SY@fbC8mXkY~C~KE{myH`2%WWs?d;gGLVcmZh8HjB|MDp5O_&bS^Ycac_
zSOfl5u1T)CU^~9io{c7>$A>Y_q=Hysk)TXVK0(Lm{x_yy3#j(F!Cl&}m8HlHPJeTv
z_?Dv-(g9nqLb>PU_qAGOV53+^^56)O3ckApODB-a&RO&nos3$E-}5s&Sh`V8vt`n%
zeqlOZ)o|DOVpFV6yj1zF#d<&ez1*E<Q)`h;9aM0J$6A$`n0OBA*~KU;#<^?h>)u~k
zdZh|AdxD48@_o7+CMLACWV=1M-|)=~mVXKfNh5yJ9$oLSJY{2L6}Nsp%gLVq9m*;v
zR%xfkHAg3%k}@kb>{?z#HulvnGC;=Q3hk}e2O%Qr1d;o%9O=;1*USe~qnKIWopJPn
z9mxIjDvH($W}NOrO?p;hMBHG7SI<LXDQ{K_V{CXT_d%uIY`iG@!*iQfeh+`^xRZ50
zuD~s^_15Mi+CAf5*s0cz#2`Ahobw7dtA^hs)!<$-g+-oOS;DjJK`U%m2u>|`dNM%w
z74noAcVO2v^caEv@zg!|Lz#9I{!ixvh*Aj-wmCz3PNGy;PW4!_0Q7A%B)P$R+2uH{
zc+jHZdL^i5<PSye*8a{|2Z4>wRf7y8c<pE2N=|GxubD+=2W_qc7oBPpUDbiMD`|e%
z-sx<9iCp6esbsimQ>w_`;Q-h-I!eZ>AI+rzQf8A^qAiI~?@4C$(bo619X5kTW3v13
zeuNR71%t=2yMHIzR`;t<w%_wTuZek)ZvUhL&Y;ZbOs|<T&CX>qYSP}>bb*DjxN5-O
zQDPVb|J8f##rqC#bg1G%ok(rOBiCPn%&HOot(Mbhy5Z2wrvCau%t<t60ghY}BFy%B
za{C<kTQvsm^Gnye`cYBh4k0cL$R7)>OfKe@E6#{VPDW13AJwNsSi?M(KjX<xglc7_
z&v>KSX-OkNkM{5jN%D^-Scb+H-YOe1k;D7m-cq3|V0bv;N6=Fyf-IjV57j30RwQll
zwU@fPP(oX}WaNY*FOKDFSlkF^?}VynO1QFQ9-R{|ef=<8eSNRis!55pIS)ORu#{db
zd5d+4-RV6nlujVH%cr=a0^kv0gZKN9iO_m=1r8>*S36Jb)FY^<Ec03Zb5<)u9ZaSa
z602=yRac`No@Q@puJLtr6fS9aM}a=+qg(Ogj!UBJXxgJ&fUbyRg#Pl&Zgh++1^8Hg
z@nrfVzChU6dwe3gRNl#I_eoo5#kea`XLYl&pYQajh8<XNcVR7&bQR%rJ8}O;j`J>V
zR-r!{5#3&G0q8;N#o6yKx2$fZQsnMIvBG1HpM3o}Ipd^AlVVKr(bI_LkPn9Q50e|*
zj@BQS3~TUao&MTvRg-6|>3Ad9ppw3#lV!w;+CDQv6&Yr^bPX`bDk&X0$A8Dj%fA_g
zpDs-ft@fUTNJs5i(Yc=7mh8&cCy?KN=Z!NYpo>_RLg&-~BB^*8*{yDoX170YnB@56
z6fZyC!eS?tI+=LsMgB`)zUa=^Z;PS3EsUgUac{4&@q6XSTfDeAa&Eb~d@kU2&$0EC
zm*#JJxRHBz8D7Wl_i}j-T?(=9eUq3F*WpmFv9U8@WH$Kqv-JJH(?JvK{4dym&n%iB
zRaCpAvu0#J!D?osy~u5kB{wM@M91ofmngk!KGaVkacmvMfNGBwiuZ04>UMSW+nu=a
zB-(<((_mw)f^+qFYPKOshx;Wz{z+%tZmrff#3;_}BtbpA!;?$mIQpY#(n4gzlKWG~
zTdSjN37ak}QvwNHB|F=9EWs6i9q0o2dmT1*4&`Dg#E<ut@GSagKaXCQxjtO)E+^41
zRy{>?UTt*_pMw8E6*|g(7RiX(`>xJB@|+p&Y~N<<@qNgE<F{t*eG0`xl`~kSL1n14
z13D^ProGyBMR<LhF?Jy7-X65Jc;Pz#`LiBl`&PU^yZ#*)e#B9gI%?ALT6M&tYpKwA
z&u;T<yJ@12hb(xHHrsDgn{b<rjV+zu3v{du+k4`^g0<^SE~JyEY$<Kki9omV>D(OZ
z8GohpJT=qc=5}N;_QSs2?NQ!N`aFo!&f&<~<KS-V%99X2(_wb|e2@0sW?Vu7UA%;S
zWJ&ex?Qv#-fC7MqnV=0AZJ<e3+}%Hw;$?EEM4BBpy=gB}Enzn9|9B2<miU#iJ)+I_
zLTyLTc+^>xn5N%kIF;L?tq*>0=$s@NYI<*mX(<_JfJ^c0{R?$~n4bsEr__hB@*Tjc
z%r2s5Fg-WLM`p85(_P6Mt<z{qqtW)VwY+)gk2V-)I9?KU33|$aYf}~v5zM*uu{;^L
z4rJ4PKDi?yF`b2?1QVtuVwwT;@>YV90AA&K$lwaP$wQGX`5CwDrN^MYWM`w?E_|Ke
zj~%gCARKPGv(uu!)c;e<A|;TWyBR6GuT7YvGTU&&Kk%W^l0BuWAh?6nZoOSC8*Qio
z0%#_y=vBgYqxb?8m2ePDmPLY3DW%ou!r1W@+X4peexh(ArGr^@N&VtCH|ou>rCs^w
z{GhBaXWCd#(}C}k-~$HX0tmVST8vl_$Oqb0A95wEF&=Gi#PEQJaX)>kqjZ4CTh_2P
zE=9cfZGI>tucOZ(4e8No!A24}L6D8>8E~-`lS^A5rn2L5Z*sk^Y$O;61g1eF6305t
zcwj7bA#K`^2nEgss<wqVK{}-v58{g>?cRUC#Z*G5Au7sS$%hmHffPZIjgReWRaEOt
z@eVac>K*GH)*qRje|Wqx9zGQ4(mrMd?f+|6a(1p+$p3`+ZXTebG|?<RoL0NI=n~7z
zsYh;zHax97qww`99k8sFA5;(ot#zK5AzuHUH0o~{4Mg*QnfRxT75n$bl&*hlM_ccc
z_?l<v=JV)rwpx=Cbzw4Y1QK>hDyw<8E+QH(Gnp{O_vpm=fYBxVJ%$F{$oh-!kIRdK
zK<j+cU->y`4??E2DmA@wXAJ~Epy(&!_rc!q>sB_3F=wihHvY{U2_swFNpY>SVq&FN
zI`y^<a~=zAW9nS^F5Tg;3tem6Ke6)rUH$%XYip6%9FI(P$4$AGd?;j4=j=i%AYyY(
zX{Rsm3p>yC43qKEJ$bm=>mKiygUEZR$<x$pI%a(s0V&XNNJyz&9SrRj=T4Ji3N!Nj
zvY*8$1Q}x6Xtq1FUwz^bZlThyrjOS6<>tmO=(4Z4_$X57*W%GGLD2%*w$=Wt-F7Tr
z+euv~R@xBdOhlute{2iyuA9)|V9$N5wc%*lF^?6+bqUSnC#@_q3N9!rj2<kqKU(p6
zCb7fBTZ+_B>UsUM`RfGfc~OS3&fEFWX>n%`kcP(P@8{$>r`pg8Xp_T+f2BtW)|7Ss
zmtKTtF+$pkj)kKB^|a9VKx?F&)G_f0Lh$X-<1Ojlp@X0-Lw-3uE=~L=0&gA;01{2M
zMl(m_OE7;xxiif*7(saFX}FQ}u?PFk@^#^6F=^*WW4`nXhe7{b^Q%0aet*Yz&W=B!
zyfH_6Ib%m-e0zfMr*G{H^yn8m+EJpdYAZFF>AbL<sCD$gpIuLox_#%BNN>%t{6y>0
zNy27edwZ0M5lTV>Be8lL@WOtUl1cp&=r3|1JPiSAq?FKev<=dPS92^*67f5`8|Cr&
z_$dvMH9r2+;-(X0<yQZi{SujTrmcH*7A$}~*Huqhsg1%p;(`~JuBOp$xT}0k<VBTC
zoI|hG9<Pf(N@CdJQFAn<u{Mcb)j`Ucn;xo*c+my@As>t)*uyX&R4~r(xAhr84n<CB
zD<ssE%9{1;;dJU`8s2GQk?IVAfDBM{;mCb|9X-ZO=HGVoZD^g^AT5WeoTUe>9hq`v
z1E&x2JNSAIUnt=f{t(>D;9z0huqt$h0i1aTourNS>~px;iTs?TGRMkDRGkfnVauaU
ze}2Art!P-EmfUegmpDTdrG&FX@G<eL()RY&s$m~w2_YRG=6*+fV`6yzZ_^4WnWf<K
z{NcIWh16=c0iRMKwy!`O@!L>OfqmWCCywk52QCN%f{uY<Y!-z)Veg>dUSH1vv9=NU
zZSX_Igv`5CXr`0!qQ-P5*GWR+Dkt_F+J{0;Ux4G=_`LDVSM?cva9qPlJR=74FJ9UN
z$-*xHl>;mt-zypadH@-}lQJ<w=*0va$)KO5LP%)Uby`Xw9;=@7lvEFtKoMa5J~uxr
zE$L?9PGF5RCwn7A)awV_nEnpvq17)S<H!bSnR~)L9{@U{ngdOT;sJ_*;2a7EF!lW6
z`v05=7h9h@tnq?i|5jHR+1GDC0ciDMI~#aX-mRDX1A=m#qCgIML&Je+RDQ<;WOTR9
z>(0N0w)}q<qqBjAizC>UZLx<z%;di_oGB;AuU8o@@*sSqVCpULF}!@dc)ZvQgEoLn
z=nsH<^#9O43-jOGY1Z}G1S;EtO^XS1bI6?s4tSo<P;}eLwJ-X$L-x1d!~cPSAv%X5
zq5zOa046EKxgfHtIO9~^$HA^E!K#x{J36B=%hr`MhWO*+i|ZHpnKeOfN6{QIk&nQe
z3;?X;e{Wj*Z}gg#wmg@!)z5-DKaJEsk5UyD9!kO+X(SySI#t0c@0Jv<W?W^+a=%^m
z)xH&{T<m=&&alC0`M3JZo_+2Ad;>K)z@Ggv?5IfLCPRB@!zh>QoGZ!NI^ocD+~RdN
zMbt(=hoWfx_c4IAI}Cu}9LPzWLJ4_WQ?t+gO2(!6PWb<}<KW_S_!v7Rpm5}cdcVjo
zr;+pI<zWN-$$4!k^PVi6cUQQT`PYswRT0>9fcv!1_(5RJDpUS-eI5m;1@l8VT3DR9
zdEvDO9>CJtQ(cyE@g{`ki1z8rJ!p&Y|9-2SGhu_<9p>-bw8_Kv%?A`Isb6s%=4db|
z9~VD2tUKZWx8fD6LgFBJqqOpkR+pW(P@-Z^8$Kn@N}p0GsX>+|602mu(?F%8TP`i@
zYgl-H@!=lyQ9>&I!&)06FuBAxplWXcosRE;alWzuI1%-Nl2`97A-zO=AESW=EiJ7>
zlvX^GrBzY5cmdbL1jU1~u`w9S6&X~f(K~KWnJw0jvRA};4Qxh)9KknF`zLo%>}|Go
zR&1%VT#ic!;0acr;|1pIsnhz#hU@GfA%W8KGc&OATUr#VOS)*!1sC(Q29UQZzUj$3
zDBd+8fVk!I>wwikdNufD`RokbNUU1K);{{a@FMC^K8sGE?P!2{eM`9DWiI#AY=yv)
zs{M`i`6CF}vRN%v50JI4)4KC|lI3J$Bcr7J97n`qlOmmeNFOEV@NT-PscFD+?n%yA
z36p6QT-BD(PQ!76@<yx3+iq<MWqBk@mJUP6C9RuR{v?~>NdLNQ#x%`Bp4AEFpH>bE
zPm=s7Rg*{Npj9l7N@HtY+-V7AkSeNO9D|cwwsCtm4Og?exgT3k%EL^}4Y`w*U$c0<
z?bLtI0QctcLvkyN)B*49k4XN7EjCxwnFo-2=h7tiDuwSHKYsCT+V@B)@K8O=wWQ%O
ze`?=oq5-e?<l8T<&CF<q<pL9~1mC2b!!LDg>aLGOg?SdMatNRMEraN#29|{ZqH8g!
zhyzA*h<+Bg?6H3jNwzJ#(xR2uorPD{R%h%I25u<nZPuB0{a=X2Kl3HG<%Ut@M7Z@W
zvpL^K&fM+VP7D&DUWky8tQ+XN3ppWf&rW8i5COAw!jS5u{L-_{>pz1RE*)}~%QY#y
zE_N)(J03JIUu~FBnPa47oB9ad@Gi;q>Y;YN-Pb{&U<z6&BL|%%?c!el)mbOcp#dK;
zThKN3Fh&hYb<f12d*B#5%%{#lv*}XGqh1EFvcDubZv}^8T35*SddF9_?WS0`NV4M~
z2HC<i@TFd^KU9r&`o#cY#;UHZj*1k$fM(NV*0SO~3@QgA;-T_c;LH?klO5K7>f~y@
zIEV5}wn_{5X!r@QWQcb~K@D*;6+iwgt1LqCosC<_ppm%&9wE%9clRK#4|o6SXf*R!
z&aRLEQ6~~;<6L%Z?b0%KA_nL*zdjqF(#Gb5TG2T5xqp!Q2qWAH@yuDo^%eMlmQ+BB
z8vtOrg*crc3r%diCnBY<k+h;s0fuELcIuzP&E8zRv_#plxZ%yH!iBy;fu52>3+~42
zLUqG60?8z$BuTdc_gG{*qlKlykPfG#n3SL_K+Ni6egfLt;|^1odhw%}$d(t8oeaz;
zoR4A?AAA)4O&I*B0|8LHz~1CNr07#SHkKYNt<8*<-~wwBti-O*-n?!ukS@KCzs>=@
z#0V=qK$f6`*98YXEBm6uBtM>%i&WKt^sRYhSe<wbl)#};V1BpCi-EcVH(-kXSyt!$
zuX8}`S%Zsu7$nQOhDeHwsZxah`Ft_k!Ui2PzDIqRkse-Ma5-QRzWf3U6rlMFn4I<)
z*z6c7k@|I@TRqG)O@Vp;c42=_0Pn|vm6Ehn#_J<60Bqj{a(5+MO=4J9N(Bt6wTlL!
zmL;ruTn`#R_LU%l9mP%JgAWVOfO~XZSw)6wD;cLqn}><8%<xW#D&_e200g+rp$HDN
zB)J3o7Bv5rbs7FQ^anIV6$66V7o>zl{nI8-f65**t<|9r^4|aEQ>vtF5AzARtZ>1s
zju$t+x37|JxD)gYgNixm<jM2|dT`KSK?ouiv1LaA+=@Sj?!gmPO9b}?y>N7&zi-39
zocr%+!9hsK*?dD;r#>Em{2JfQqdhBf&8HiNVYP6<piVE~-dg<FyT0z)`AaG#;!>!z
z{=d3ysO|)fD^(AwFCkY~fH%~+Aqw>v?ZCg~Pa(W#)4&55&zWE*2dM_X-9p9xE3pIc
zA`8{}x&Bwj;zNvhyzO|eTa^qm?*Drx&TM+Q5Wk0^_t*PdfT0-%x3!2YPx(E4YYbp&
zfoEWHkpJWLhJpJAI064F>;r=Yl$ZI>UI9$@xUK*B3xJ9H@6JiUbOMJDKz+CH|B-<M
z50Q@+5bkOB{@48fE(YKv1|}$0Qda)|H81iATIXL9xST~4csb6b0F?UWO_HyH7u4Ky
ztVK=6JsICNa{j_#>K@G-uY)<|n(@tN<0>3`ee0eSHmgrR^xFY9m=Wy#W_suN9RE-d
zMkx~{eI{s+6jN?fhmg_-{*ZT(`o7@d3%V>G7=I&g73+ISZD=AxdaWWBeTvHrjh1~P
ztw<t+gV<-C1BTiKGEB6yM23;@xeDodb8^I~hVX@NMJJU$>ZaS%I9g>Q`O)(!?+eG-
zH29_^N}|Nr3ETSvq_!l^EuZ@groi`AZg2T+|DV25qUb$uP2&BZzTK(0AST+eFMi0A
z;}Gv;d&U12HU6K~hyg~o{E70U{8Lw+SeeU4UQmfeS6(h?(z8?tt;EHTcFCZ~#Sm2M
ztJZ8lqr`O0Z%SQI#H_(Ot6U|67V*y>?k$KB9tI{;JpRNa*U`<*f8pa-m!9eOY1JH8
z#_**}bX6>1D|OSOSkHike2477s3Bll0s?1*rhr@(Ww;79_RB@?D?y0>u3p?8^nuf@
zv0E@<V0sXN_$-}8)#r&XmoAsC)4};PWJWkWVg=H1=&V6u8Ee2as_LBmF?0XjjT(;h
zpElvQ|IH-@VA^0`uzf=MKYknx%>PbIpoRdB+B=v~&Hr8A)+WqOgr;%GQbr`Q>>X|!
z#|LQO5n%l{#eM;+eXIzLJE&0|*W$w9IsupNqT%55VB7Bx0|ydaU}JLupt!&!e8UIc
zv4*vTL?#_t=O<7U$8Nvp2RqiTaXdmJT@dq|b6I^}FP8|dLX7hI>|q6Ai6sZ`kd|Cc
zjqBZSxiBX~6rIx|3r+=jl_(j|Y12Zmsf|t?I?maDvgmS?SX^R(T~Ib!7O&KraLHi4
zme4<2Ji7Vs38;X81XNlX9Dh)pN{BLC+0tMfAL-MgbvuCjSjF-O@0VDUlmyCGX^5_u
z0a4l9RtI`qqiq7iV-WSo%=4B`jlIq%?~d|DBgur%q~u|0PqbCuyN8(l_()C=g0wt3
zdsf4yUNx#meH1_<yV+CZHQAR4PXpAyC<PRVM{%W82cE&Lcj?)bgm0Rh$c<e<>E<{C
z#9Y)(turP;i-uhY&zL2sFi2X@94R?$iUCPnF>2e+3ZbSYm-jTy>rWa9_7t6ffrmrT
zqldY!$(8jUC`q;p`|omib12Jh>AqqRj6uxSES-=b?@&)j8A&wn4;_`newBGKHnq0)
zuN?~SU~mH)m*4H1OJp_1sx^3qS(jY?ly2E)*)2W-9)=Mj8ui~tp7};*XM)9j7Olag
z=JC@NXH|8_ah{+Epm;z3HwW{$n1c#`1mgF2E9?u`s(CuN-hg-*=af`)z<ZT<{U+vs
zFJU@N#N;Ra!B3JZKOH(DY{|lO?^y6#yUJ5^oi0Dr9Fa9wAE=pTgpnKN2mPC?urhFX
zb_cTO($Fq!@F1M0-hZPZxEx70bmFOYAK#EZ@^d<hrJ)u6mXYV^_85YcLvxKGU#}a|
z@mH46Rk!?l?!AW#$3~fzqqmw7w}zc7v7x2Bj#{3{pvgm2ZZ;SZP^r$rxB6K$Q_Hp+
z<~zwI#mBjWoK_YKW%P8LLLeD@*)QIz7e0vso!rJ#m}e^)0a5dkm@vx)U_m3A;u^zM
zko2HwJZ(X&yRr@M-*p0+8Ob?c#fSY18PKyVEoHL2%E(AqSqWjAh0oS6wB^yZjF>d(
zie{z6Kfm;7V34R@wOns2aK^>2(d}ia(i2cmR*&Fts~AeNuo_mbd{Y<4V4W|saH5_o
z{<;``KA-)1HAgJ#7EDh-{`4>#j`_&e>_Y2QOL}7?YMxsUCeh}V_WGOoc;A3EHwus3
z_-B4^h$y`{GG_5{)nhmd#pTvxX#r_)`if*~5cr>TLZB`Gl(p7Md3!I5r-yIsST(!)
zYBf$6l{+-5@9GIzeVqR0CB;>&ln|EW#ylj*s9>o~RGzGSouXB|u~%HBWs5M|;rEr3
zpCZ29@1Sl_ZQ#v>lqyMm1c7oBecrr)6#7cY^z59%@2@y=;fXN3fNco~Od+DwxvG%X
zH@AYRgb_Sf3Q|;GcOUy}efZdd?rA|2Ebp8Vh|$_N+wO0rmo0U@%ni{-#Kelay?H|u
z`1^2c+=rbTV7O>Nl$F8u5tj<kR4^pM$6Eh=FmIRE;*PV&cIl4Sw58d3(?E}#&!e{u
z;gOBgz+NROCD6L~+efRPC{kC7FSMV~<SA)EbLtoRM*CZL@@g}+i_yCEKKHo?dn&L@
z8MJ99`dQ3bjV87;y#C<iAj9$5<$m+O$3X3pU;E$N%QCq<rml)rNeDUZ=;Up<H0Jlb
z82R`S-UuHyna2b0Q4qhCE=L<rC;PmD=nISMBly{{xW#H6`R|f9%;>q1L3`_m>S%Gf
z*`-8jP|a7vWt_s%&wax#LzTg>Zdn}dJ_D$bRZSgRpqSgQcipJPHaQ&C*3*fw<Ulyz
zt0#Fjo)UcNT>>htDyvUDei~l>F<e>Q>y*>%yg4!PBa5iKmZ-@hBb|Iy#@SaeYTVVD
z#y;gz`EXA4F5vq_zWQX$6E)99)#Blvo16D-{KM-(HZNC$Z^hfTg<`;<a=7HQa<cYG
zCcHbAI}4qcZKjb%&b=TT42+>u8;zy1v<dGJHA_ki8Uypvl98oL;WT?($9h^vOYO<s
zTQSP*2{g&U<fi2_$NTIz{@kP6zjHJq48(^XpPgiqmw)wa@<@k~)v9Ph2Q-3f)uZJK
zr)Re3^ON*tl>#|v8*9fNCpUf@jHSosYB)yyEwSgAu=E<k{gTe=s@3SBhwQoga>jdZ
zJU9!<Qka&^tuDZZ`Sq!*nywp`HwXhY0yj}@JXP8Wftyz1h`QFtKWa6G(bl<=l0jQd
znMHGz{U>dfKTmX{D4U<Sa<$h?@(H>+#3i5HQqt$+Tf26-V(W|U-j~EVYZ0x%$E8#3
zmfUC>Hc=TtPnDcG<(t{x#MV|;4vA@e9+z=q@iLGd{bZL{jf17w!*1fGG^E@9-OjmS
z7}S0PO;;`*47wRBSLtvVT0@7-#)Ha5o6|xg@K7VAxcU3}187@Y&#Pfydq}^;=@brx
zP#mAvKD}(YTE;6_Te3U)aY=KG1NduS1niFRV2N(<NOVbfxMlnm_*LekJ;Ybng<9Hj
zx{T^r-w`cJT?dPmK;m1z5DVC_;a#+R^1t5*A$~nyqTNIBc8~zg^4{gI=@-c<$KG#)
zvu41WbkEx+fDwYThh8csFv%;fSj3PWjA5IwdmGJYA;-H!v2EXh8XRf3SbDe8zMEKV
zqqw}fneYUm=M#;o<}BwAalP%@ic)`GIh&^8vb5VDzt-j4JEX5~msJZ2v?!}!PaAb=
zS}|eSAeAQPbclMYx&PNs43?eFl27Nl$X|?KJ{ZX;M0(?!W3CW-?gRul5H5+op^oOy
zD|dS6%LW|E=I~*ny8O8}O=4hqsNG-3GB>R%z8p+71x~WWU*bN$$MmA<TC-;9i{#mN
z64~8J@thj=(tajewQwi2yg8+fP9>LVW$0nAOkeZ-Zpp$!Zs=9EvpZd^F;~ds3(Jzv
zV6!|(mjdz9=67`?!Z?QQeXHy;=zOshzU*l`mn^#ZBj&A{@pC8fuNfCD=XYI<M-y(+
zh9<^K*1=D-)~9>>E8|?IuK2~Lfzbsdc6lkJwROz#)mU@wCbL96ZZd3g0KU0cwZ!M?
zmQcW(i=Ex|VzW0aENsJf7zRd^P{CU5O!QplS6Og0kRte0TEU-1gL!#W-Zpm?y4ZJI
zvCp+^u$i@a9cDFO(CB-&4)zcRaqUQ{ITJ;ou=38_v0HKsJ>l@M;%MS~T3BTg%k`dD
zr+oX;>&H)_TM&azxGO};>XyarC!RYw|8u9SAILP<)6!a6T0*Qwgt-Xall>RrHq0So
zeeXeo=F!0-Ce^dgm-bWCTN7G(RCN-db#n4tI=yW7bF22L*!(f`%TTMl?`A=^VPDlG
z^{28#9Bo45=@%dFYMX>-XVtcBuSu)N7hiTP*RSp0?ctftTX*dR;Yv6-%sZycYFypi
z0L)2OZN1~33Z@#sC5GYVwa=OZxQgt2@P5(SyyHu<{w7`la)}CqtI4QODt-K$!zI5W
zrBwJ>%{5X|BV`LNd~ULohgYiFpy9FKNdwA|l%=^ep%0(P$0P<hA2Z$C7k}%I%Ofd)
z=0_EtcD>C#j4Nm(Y{u+Ly9_Lf?74oPe;cmU(3glLh>eZ?9zT>IZR+8{Eg+naxH^pl
zBXs=F5{g&^MjLXQU~w?P!Y>94JccimvyIO0@tAbLylbl*aKa*YjPxA~Ir)MrgHGru
zp9c>MDP`}m+bAe|q%>F{_gTEGr@nVaUW`Aw+<L6o@Sq&o+1ZY3&mMJkb+E!Iqq`_=
z?NwEiCM=65zst(#>ZGH-7-7`s<h(ythY8i^^C@N7xK=ncxDc!oT<J9YHb9f4Y?CM8
zI6ZM*vzf}QtgLLl>^$f6g!M|XR2Aqf7Uisj9HB9bC3@?$Ub7S_YuU!nm?%FT*xqX6
zl(e}#%iZyyeu6{p+d9C3%{^aUMJn;T)6L4siKSjAU%7biSx5%~KMg`>Rx@j*Qk)P^
zA@{zY2BwEP(`@G^@6xl_03X@Ej^^71edz(-;9uG}b=@=ugGjZJGVjIPt=%tRwlRFl
ztD220XI<oo-q{WB;<gm%ib&)+Xbu`8hZJF#g*x;qoryF#0e&)_1A;Z?g}fz8$BEEY
zeA8{y0bm|Fuy-nln_{JvSX%1zG|$a}Z1R$llFZD_x7a#*@bN3y<g)nPu_=W#-+d#x
zxP~s_7UcZ+MJ<EwKO(hnhYD1@mjI-b*ZlXMO8BO@<6e{$Qfp$IynIj%7dw-NG+3?Z
zxm&MWM*k4pAS82(2}*K2d;6E5A@W<bNspVL$%5Bqjm5OlWhvCbG|}8Bm_X1wI*T8l
z>YJZ(@yyYUh6_2ml#kC#3bS$L91!sS<YNyAEvAC?&2Y)3!dNn5+{tvjnI{b`D#hlo
zmFFX>AUu1V!(3+Y_zc?A(WS|Hf;I=?zPAZzyzTn}gYeG$0#!}uc4}sYI>+*xSG0hz
zypb*T1yJ>ksq-8dTi`Oz;AUmF8|r(K_OkYd8=vt)t2)og4EKa&bpjfiOTNssG}f9*
zRN@{+52F6Qa(zRTEO>Jo>m`DPeKyV1elu&TI~}U};i{q45ZJ>aA#%oS|Gj&hs*G^<
zM3S(6vr_c#h*}yh@m#b+B$yt?%z)1K!PQ|CnV|vL7pClHvC2IvS8Vp)(;j(4&1PQ9
zKjw@3^LX!G;?2Lui8~FMLTRceiuAwl5#$5^RwMYoX4wVlrRVBb?Fud5I&$?YIMYVq
z0^X@(dE@!=_&)!1D0?rIzF7>OR-Ouq>qJTgA`;lBF|$HNc|A*uhqnEZZ;ykQ$73jU
z2|6sA%-q&hcKhx#`QUHxT{P8n(*gpk3GEH4;OFWn!^s5~&l}{!qQ&A|iD-^g*+PYu
z`horZ{m#oU=+u<**a1oMa7F9o(9F!t$jFFNu6WpsD-i0#&YZJ)PoJ6=ORqX+07d*X
zV6{${nwQQh-hR?}Ae4G@k~8Mc6>;N!M{V+B@H5!<sUs?@ND~x&*3+u`m`NS(A8FAN
zNGYG5l9dJi*ZIyS<<O=1`1m+75=l?G_jMO2D2iUEMQB-r?iP(e95ef8f_iX=Rqake
z9q_nbe@@QXnS9B0z5iK_m#?xvlzk0M3WvGE;4tOl^fS@pGX%g@iObCNeYu&}rb{}n
zx%_M=Wx`^J&4^^yldR^Q`%^%TYJ02$v0_UrD(UUWRfi@j)0HYe)Y{49{`=<q$N#6f
zEB}XjZNrvqISvvkk(83LMr0Qw$(D6&Gg@C;jO^P8*$$yiL$-vI7=(;r%pfK)89T!?
zWCmlK$v%jjuk-#9@B936KfgUcJokOw&wV}D=W}ti-M-EQFWYm(%icZ@IK%>-Qx5GM
zcepY3;0Ev=SP6j1?*CO3eNxvPT^2SQP%Aj_5(-Kc$2Qw*XumR_JEm{)pEI?Cz^z$e
zwq%cmHpX;VeHNN3pEkvLe85t<cg_Cj@%^LTkB~sy{8`l_uIm|dPt{n@HM35h0u%gg
z!@^y^n%kOda6ZNd=qO59LrPstWcy;QCQrKq2LEk*c-aF#%QGKho*40LBrT)<lUs(^
z`;$b2u@F&%j@M&`jaHE%zdqJQZY=FS(=}R-^1tHN8iv;>z%KUB?Z9@zXIuOT--M)`
zF~T&BHD^ijDiXafkb<RNsHs<wioz4=^oYWYqH1!RG}pQW2RPYbBq>i)WoqrDrzcL)
z&sJ|RcdMe+5WZr2EjG)hu}F)rU`dx($aJL>k7B_hM=qvkhR^GuO9=H^0ekczo-=wy
z%JQ!RrZly63FJCiIOWA<*s4f4h>?xDH?G1RywLOr>hyLm-QT-gd0$<W*e5O-)ymDt
zQte{2iYd=Gm!&(yr5O5dX#94PYJiR-8s9(8p6N-lb{H)I%VfXp!fw+iXQyr@8_~2j
zWCZ7wIZ~fGI5A3g0-%Hf|4BSJ3D>Ah-5h%##ufp4nV+t2ixkbO-1Q6IwrV=ZQ;AIY
z$ZPS9xX6-r{~5jZ{Pgec?-Z6^*cM7*)&(CEIe=De4gjGNUA&>vdZhbG-QiC0zbh+@
zFi{QFmQ#UDMa4_O;vJ!y+O2H})GsKg*>bpkW%B2m@`29r@-ILRD0@_->4#*O#B>O9
zLT|Blm)x<@pN>PHv=#1$4!h^k4QIxWaw0_5>lTUg1254kqu!bm1cGYyUoWcCTrnrv
zzt)=h?5NuBU-qu=D2k+2>}G$BrB4?ToPF*TF`}~%UY8@D174CGOYTTTm9|Ult1E;4
zmI;Mp(^TCZ1A$kU?K@jgcez8Ch*F^Zg|rM+I1aA4Tl(W(fEA|X-eaV=lyndT*NBgZ
zcW}{>Uq(YCuR;-bd=$`%Y!VOkPsjYAx!J`VG@FVsZ)^DROd@@1m4JTN=Cunl;^3fl
zxMt{4S^1kud$Kvm^0^F<k|E=b(duW3n$rnY)a{#4YhDxFCmm=?0z4_sC3~bQT<85c
zpQdcBU~PoQ$}pJWK<aK@c)pjwW(D;^21!8z0k7sIMt5u|4GgQ$>UGHRL4Gxo5QFHo
z`5Dt-W4=J*LJF3q*p6Y18<nnAU$VqJgv$4TF1bvy#SuNi9C2g}pceXZ6!uj(K|Hhx
zyc4@$5n8=<w&wm{ePqWU6Vz<c=>}B0XPyHl)<WQM?g)>b_LB-;f%s_fU1ag&W!MMm
zBlncxzwHTMT#5bec4$}bkA6H7gv&YWz<jJ0QA|)VZq3Ec5s)>5zWF%Ly9-;HE(4Cp
zz9Js$L(;jkv#8-;lv1|@)WHBb%^|A-OuC1-)ee|g{~J@Afin5PJgCb7YIiqAnB>wn
zs|Bm|#PnW%0!th`u#U$~GI0%XejZ+q+i{}L6(Gh(QqicOXwgZ?%ElR<aoN_C2@>`E
z%$CUaQ;u1<qpf7;;e&?$v&2fhPOuSrdP5R*K_9`#AsZH$+((m24wbKACQL|ofL)z+
zoN)d_{%n8hKv^XgLYlxlD)WjvMJfc8c>P1aH~2ey_-b>vhX+b*t%tp_w22ijdg2lj
zI_}e~jpTnL)9mI<vv-<OP&X_-@3Bx<IQ_unGp;EoTtChDnwUWvxt>EtT}3NV3=WXH
zcDb#QOr5DY0_e9@R*n{42x%*I?0&zLEdM)DrHxa;()VZmRh9GPp`xdTB(qYTReSYD
z>$6&VI}ulQGwJDuuA|B*D!h`sBM`NEB(`IwTeYA+JmPxo2Qp@PA%VF^SzV=qBulcO
zfN%*kk&#jz29Ftxesu!A=Df+TDt4^8mk>j<dl=y#+HL~@r_UO&4cnn^GfnHReOw^~
zj7x*sMg&0Iq#BQ1xM9;v-1LFP(E2t~EoO%TnQOkLTzojrU313=fY$Y^B?K!sJToJC
zT93H@1`BD{x|qK`tlq~C$7MK-m<jIvxvk4Hc8@!jrJQcMGAAbtW!4tB)Y#oUQtB68
z+b0p^^jTZR%%aUCn6WiT4e7$<sCu^mT~1E8CS&R5+MZ+J)V2mp{R5Y_2ja-#shSVO
zD;0zM8PQ|WUriy=w`w1a-tElGBcCo9reA?UxXUY4^O=-^RSCDhnNzZAK}!`W6<gXj
ztx{L;BX!k?eFV)8B@OusiRU3e2l}vrOjOj*;<D}8G71+0Ekb7kSt*A}Mpl_q@bg)$
z9W9SYL;oAMuEFEproKZ3p)36KB?RZvUq%f%C0@vwbB{t5bw%N6Prd4u;wt8pToU)J
zQhOrrKkn*cZ^oJ(T-8I=Y?5~;F5a|iyLIf&bF6QHMroq0{?V8PE{OPo|G^!V<yF$G
znHf%MxVVb~xSuZuR@<{XGhVz)*lUqd{q?12_2?$Kep+$e*HpGN`z_eknR>3x=HuSx
zyGos`mWFvTug+7wPF{kn^{8yY`>`lXCmo?sTi2l0{qA4QTt86XnT7a7*QbUoWU%-u
zdr?BzX;V!8g0X@?*2?8#^~cI%AZ2!@x!r5eA2Kzor-at>Q{u4iF%XI$r%6^L;6(hX
zT}a5SAKIYZ$M%JBeQ8<q!K}4VMEHH=&p&FsxWdYwK$@S)Dk#4q2Y>-1G;~x-sl;+1
zx|r}S9!Mdz8=~bxoO@z$(T7*_*xe`6+|KcmQxTkO(9T6-c=8DiJ{l8v;F#rT9hpzU
r)c+S1!r~3$58=UB4fuEdpT^%tt-=(TE@CU|5S=W{Y{1nfw-f#WmP6t4

literal 0
HcmV?d00001

diff --git a/samples/web-app-blob-storage/dotnet/scripts/00-variables.sh b/samples/web-app-blob-storage/dotnet/scripts/00-variables.sh
new file mode 100755
index 0000000..44c882d
--- /dev/null
+++ b/samples/web-app-blob-storage/dotnet/scripts/00-variables.sh
@@ -0,0 +1,30 @@
+# Variables
+
+# Azure Resources
+PREFIX='local'
+SUFFIX='test'
+LOCATION='italynorth'
+RESOURCE_GROUP_NAME="${PREFIX}-rg"
+ACR_NAME="${PREFIX,,}acr${SUFFIX,,}"
+ACR_SKU='Standard'
+SUBSCRIPTION_NAME=$(az account show --query name --output tsv)
+SUBSCRIPTION_ID=$(az account show --query id --output tsv)
+TENANT_ID=$(az account show --query tenantId --output tsv)
+CURRENT_DIR="$(cd "$(dirname "$0")" && pwd)"
+
+# Storage Account
+STORAGE_ACCOUNT_NAME="${PREFIX}storage${SUFFIX}"
+CONTAINER_NAME='activities'
+
+# Docker Image
+IMAGE_NAME="vacation-planner-blob-dotnet"
+IMAGE_PULL_POLICY="Always"
+IMAGE_TAG="v1"
+PORT="8080"
+
+# Kubernetes
+NAMESPACE="vacation-planner-blob"
+DEPLOYMENT_NAME="vacation-planner-blob"
+SERVICE_NAME="vacation-planner-blob"
+CONFIGMAP_NAME="vacation-planner-blob-config"
+SECRET_NAME="vacation-planner-blob-secrets"
diff --git a/samples/web-app-blob-storage/dotnet/scripts/01-deploy-resources.sh b/samples/web-app-blob-storage/dotnet/scripts/01-deploy-resources.sh
new file mode 100755
index 0000000..aa4c009
--- /dev/null
+++ b/samples/web-app-blob-storage/dotnet/scripts/01-deploy-resources.sh
@@ -0,0 +1,141 @@
+#!/bin/bash
+
+# Variables
+source ./00-variables.sh
+
+# Change the current directory to the script's directory
+cd "$CURRENT_DIR" || exit
+
+# Create a resource group
+echo "Checking if resource group [$RESOURCE_GROUP_NAME] exists in the subscription [$SUBSCRIPTION_NAME]..."
+az group show --name $RESOURCE_GROUP_NAME &>/dev/null
+
+if [[ $? != 0 ]]; then
+	echo "No resource group [$RESOURCE_GROUP_NAME] exists in the subscription [$SUBSCRIPTION_NAME]"
+	echo "Creating resource group [$RESOURCE_GROUP_NAME] in the subscription [$SUBSCRIPTION_NAME]..."
+
+	az group create \
+		--name $RESOURCE_GROUP_NAME \
+		--location "$LOCATION" \
+		--only-show-errors 1>/dev/null
+
+	if [[ $? == 0 ]]; then
+		echo "Resource group [$RESOURCE_GROUP_NAME] successfully created in the subscription [$SUBSCRIPTION_NAME]"
+	else
+		echo "Failed to create resource group [$RESOURCE_GROUP_NAME] in the subscription [$SUBSCRIPTION_NAME]"
+		exit 1
+	fi
+else
+	echo "Resource group [$RESOURCE_GROUP_NAME] already exists in the subscription [$SUBSCRIPTION_NAME]"
+fi
+
+# Create the Azure Container Registry
+echo "Checking if [$ACR_NAME] Azure Container Registry already exists in the [$RESOURCE_GROUP_NAME] resource group..."
+az acr show \
+	--name "$ACR_NAME" \
+	--resource-group "$RESOURCE_GROUP_NAME" \
+	--only-show-errors &>/dev/null
+
+if [[ $? != 0 ]]; then
+	echo "No [$ACR_NAME] Azure Container Registry exists in the [$RESOURCE_GROUP_NAME] resource group"
+	echo "Creating Azure Container Registry [$ACR_NAME]..."
+	az acr create \
+		--name "$ACR_NAME" \
+		--resource-group "$RESOURCE_GROUP_NAME" \
+		--location "$LOCATION" \
+		--sku "$ACR_SKU" \
+		--admin-enabled "true" \
+		--only-show-errors 1>/dev/null
+
+	if [ $? -eq 0 ]; then
+		echo "Azure Container Registry [$ACR_NAME] created successfully."
+	else
+		echo "Failed to create Azure Container Registry [$ACR_NAME]."
+		exit 1
+	fi
+else
+	echo "[$ACR_NAME] Azure Container Registry already exists in the [$RESOURCE_GROUP_NAME] resource group"
+fi
+
+# Create the Storage Account
+echo "Checking if storage account [$STORAGE_ACCOUNT_NAME] exists in the resource group [$RESOURCE_GROUP_NAME]..."
+az storage account show \
+	--name $STORAGE_ACCOUNT_NAME \
+	--resource-group $RESOURCE_GROUP_NAME &>/dev/null
+
+if [[ $? != 0 ]]; then
+	echo "Creating storage account [$STORAGE_ACCOUNT_NAME]..."
+	az storage account create \
+		--name $STORAGE_ACCOUNT_NAME \
+		--location "$LOCATION" \
+		--resource-group $RESOURCE_GROUP_NAME \
+		--sku Standard_LRS \
+		--allow-blob-public-access true \
+		--only-show-errors 1>/dev/null
+
+	if [ $? -eq 0 ]; then
+		echo "Storage account [$STORAGE_ACCOUNT_NAME] created successfully."
+	else
+		echo "Failed to create storage account [$STORAGE_ACCOUNT_NAME]."
+		exit 1
+	fi
+else
+	echo "Storage account [$STORAGE_ACCOUNT_NAME] already exists in the [$RESOURCE_GROUP_NAME] resource group"
+fi
+
+# Get the storage account key
+STORAGE_ACCOUNT_KEY=$(az storage account keys list \
+	--account-name $STORAGE_ACCOUNT_NAME \
+	--resource-group $RESOURCE_GROUP_NAME \
+	--query "[0].value" \
+	--output tsv)
+
+if [ -z "$STORAGE_ACCOUNT_KEY" ]; then
+	echo "Failed to retrieve storage account key."
+	exit 1
+fi
+
+# Create the blob container
+echo "Checking if blob container [$CONTAINER_NAME] exists in storage account [$STORAGE_ACCOUNT_NAME]..."
+EXISTS=$(az storage container exists \
+	--account-name $STORAGE_ACCOUNT_NAME \
+	--account-key $STORAGE_ACCOUNT_KEY \
+	--name $CONTAINER_NAME \
+	--query exists \
+	--output tsv 2>/dev/null)
+
+if [[ "$EXISTS" != "true" ]]; then
+	echo "Creating blob container [$CONTAINER_NAME]..."
+	az storage container create \
+		--account-name $STORAGE_ACCOUNT_NAME \
+		--account-key $STORAGE_ACCOUNT_KEY \
+		--name $CONTAINER_NAME \
+		--only-show-errors 1>/dev/null
+
+	if [ $? -eq 0 ]; then
+		echo "Blob container [$CONTAINER_NAME] created successfully."
+	else
+		echo "Failed to create blob container [$CONTAINER_NAME]."
+		exit 1
+	fi
+else
+	echo "Blob container [$CONTAINER_NAME] already exists."
+fi
+
+# Retrieve the storage account connection string
+echo "Retrieving storage account connection string for [$STORAGE_ACCOUNT_NAME]..."
+AZURE_STORAGE_ACCOUNT_CONNECTION_STRING=$(az storage account show-connection-string \
+	--name $STORAGE_ACCOUNT_NAME \
+	--resource-group $RESOURCE_GROUP_NAME \
+	--query "connectionString" \
+	--output tsv \
+	--only-show-errors)
+
+if [ -n "$AZURE_STORAGE_ACCOUNT_CONNECTION_STRING" ]; then
+	echo "Storage account connection string retrieved successfully."
+else
+	echo "Failed to retrieve storage account connection string."
+	exit 1
+fi
+
+export AZURE_STORAGE_ACCOUNT_CONNECTION_STRING
diff --git a/samples/web-app-blob-storage/dotnet/scripts/02-build-docker-image.sh b/samples/web-app-blob-storage/dotnet/scripts/02-build-docker-image.sh
new file mode 100755
index 0000000..4b497d8
--- /dev/null
+++ b/samples/web-app-blob-storage/dotnet/scripts/02-build-docker-image.sh
@@ -0,0 +1,18 @@
+#!/bin/bash
+
+# Variables
+source ./00-variables.sh
+
+# Change the current directory to the script's directory
+cd "$CURRENT_DIR" || exit
+
+# Build context: the src/ folder (contains VacationPlanner.csproj, Program.cs, Pages/, Services/, wwwroot/).
+# The Dockerfile lives alongside this script, so we point -f at it explicitly.
+BUILD_CONTEXT="../src"
+
+# Build the docker image
+docker build \
+	-t $IMAGE_NAME:$IMAGE_TAG \
+	-f Dockerfile \
+	--build-arg PORT=$PORT \
+	$BUILD_CONTEXT
diff --git a/samples/web-app-blob-storage/dotnet/scripts/03-run-docker-container.sh b/samples/web-app-blob-storage/dotnet/scripts/03-run-docker-container.sh
new file mode 100755
index 0000000..36aae71
--- /dev/null
+++ b/samples/web-app-blob-storage/dotnet/scripts/03-run-docker-container.sh
@@ -0,0 +1,31 @@
+#!/bin/bash
+
+# Variables
+source ./00-variables.sh
+
+# Retrieve the storage account connection string
+echo "Retrieving storage account connection string for [$STORAGE_ACCOUNT_NAME]..."
+AZURE_STORAGE_ACCOUNT_CONNECTION_STRING=$(az storage account show-connection-string \
+	--name $STORAGE_ACCOUNT_NAME \
+	--resource-group $RESOURCE_GROUP_NAME \
+	--query "connectionString" \
+	--output tsv \
+	--only-show-errors)
+
+if [ -n "$AZURE_STORAGE_ACCOUNT_CONNECTION_STRING" ]; then
+	echo "Storage account connection string retrieved successfully."
+else
+	echo "Failed to retrieve storage account connection string."
+	exit 1
+fi
+
+# --network=host so endpoints like *.localhost.localstack.cloud resolve to the
+# host's loopback (where LocalStack is listening), not the container's.
+docker run -it \
+	--rm \
+	--network=host \
+	-e PORT=$PORT \
+	-e AZURE_STORAGE_ACCOUNT_CONNECTION_STRING="$AZURE_STORAGE_ACCOUNT_CONNECTION_STRING" \
+	-e CONTAINER_NAME="$CONTAINER_NAME" \
+	--name "$IMAGE_NAME" \
+	"$IMAGE_NAME:$IMAGE_TAG"
diff --git a/samples/web-app-blob-storage/dotnet/scripts/04-push-docker-image.sh b/samples/web-app-blob-storage/dotnet/scripts/04-push-docker-image.sh
new file mode 100755
index 0000000..a1b7518
--- /dev/null
+++ b/samples/web-app-blob-storage/dotnet/scripts/04-push-docker-image.sh
@@ -0,0 +1,40 @@
+#!/bin/bash
+
+# Variables
+source ./00-variables.sh
+
+# Login to ACR
+echo "Logging into Azure Container Registry [$ACR_NAME]..."
+az acr login --name $ACR_NAME
+
+# Retrieve ACR login server. Each container image needs to be tagged with the loginServer name of the registry.
+ACR_LOGIN_SERVER=$(az acr show --name $ACR_NAME --query loginServer --output tsv)
+
+if [ $? -eq 0 ]; then
+	echo "Logged into Azure Container Registry [$ACR_NAME] successfully."
+else
+	echo "Failed to log into Azure Container Registry [$ACR_NAME]."
+	exit 1
+fi
+
+FULL_IMAGE="${ACR_LOGIN_SERVER}/${IMAGE_NAME}:${IMAGE_TAG}"
+
+# Tag the local image with the loginServer of ACR
+docker tag ${IMAGE_NAME,,}:$IMAGE_TAG $ACR_LOGIN_SERVER/${IMAGE_NAME,,}:$IMAGE_TAG
+
+if [ $? -eq 0 ]; then
+	echo "Docker image [$IMAGE_NAME] tagged as [$FULL_IMAGE] successfully."
+else
+	echo "Failed to tag Docker image [$IMAGE_NAME] as [$FULL_IMAGE]."
+	exit 1
+fi
+
+# Push the container image to ACR
+docker push $ACR_LOGIN_SERVER/${IMAGE_NAME,,}:$IMAGE_TAG
+
+if [ $? -eq 0 ]; then
+	echo "Docker image [$FULL_IMAGE] pushed to ACR successfully."
+else
+	echo "Failed to push Docker image [$FULL_IMAGE] to ACR."
+	exit 1
+fi
diff --git a/samples/web-app-blob-storage/dotnet/scripts/05-deploy-app.sh b/samples/web-app-blob-storage/dotnet/scripts/05-deploy-app.sh
new file mode 100755
index 0000000..9e635f7
--- /dev/null
+++ b/samples/web-app-blob-storage/dotnet/scripts/05-deploy-app.sh
@@ -0,0 +1,86 @@
+#!/bin/bash
+
+# Variables
+source ./00-variables.sh
+
+# Retrieve the storage account connection string
+echo "Retrieving storage account connection string for [$STORAGE_ACCOUNT_NAME]..."
+AZURE_STORAGE_ACCOUNT_CONNECTION_STRING=$(az storage account show-connection-string \
+	--name $STORAGE_ACCOUNT_NAME \
+	--resource-group $RESOURCE_GROUP_NAME \
+	--query "connectionString" \
+	--output tsv \
+	--only-show-errors)
+
+if [ -n "$AZURE_STORAGE_ACCOUNT_CONNECTION_STRING" ]; then
+	echo "Storage account connection string retrieved successfully."
+else
+	echo "Failed to retrieve storage account connection string."
+	exit 1
+fi
+
+# Generate a stable SECRET_KEY shared by all replicas: the app derives its Data Protection key ring from it,
+# so antiforgery tokens and flash messages are valid on every replica and survive pod restarts
+SECRET_KEY=$(openssl rand -hex 32)
+
+# Get the login server for the Azure Container Registry
+echo "Getting login server for Azure Container Registry [$ACR_NAME]..."
+ACR_LOGIN_SERVER=$(az acr show \
+	--name "$ACR_NAME" \
+	--resource-group "$RESOURCE_GROUP_NAME" \
+	--query "loginServer" \
+	--output tsv \
+	--only-show-errors)
+
+if [ -n "$ACR_LOGIN_SERVER" ]; then
+	echo "Login server retrieved successfully: $ACR_LOGIN_SERVER"
+else
+	echo "Failed to retrieve login server for Azure Container Registry [$ACR_NAME]."
+	exit 1
+fi
+
+FULL_IMAGE="${ACR_LOGIN_SERVER}/${IMAGE_NAME}:${IMAGE_TAG}"
+
+# Create namespace
+cat namespace.yml |
+yq "(.metadata.name)|="\""$NAMESPACE"\" |
+kubectl apply -f -
+
+# Create secret with the storage connection string and SECRET_KEY
+cat secret.yml |
+yq "(.metadata.namespace)|="\""$NAMESPACE"\" |
+yq "(.data.AZURE_STORAGE_ACCOUNT_CONNECTION_STRING)|="\""$(echo -n $AZURE_STORAGE_ACCOUNT_CONNECTION_STRING | base64 -w0)"\" |
+yq "(.data.SECRET_KEY)|="\""$(echo -n $SECRET_KEY | base64 -w0)"\" |
+kubectl apply -f -
+
+# Create configmap with environment variables
+cat configmap.yml |
+yq "(.metadata.namespace)|="\""$NAMESPACE"\" |
+yq "(.data.CONTAINER_NAME)|="\""$CONTAINER_NAME"\" |
+kubectl apply -f -
+
+# Create deployment
+cat deployment.yml |
+yq "(.metadata.namespace)|="\""$NAMESPACE"\" |
+yq "(.spec.template.spec.containers[0].image)|="\""$FULL_IMAGE"\" |
+yq "(.spec.template.spec.containers[0].imagePullPolicy)|="\""$IMAGE_PULL_POLICY"\" |
+yq "(.spec.template.spec.containers[0].ports[0].containerPort)|=$PORT" |
+kubectl apply -f -
+
+# Create service
+cat service.yml |
+yq "(.metadata.namespace)|="\""$NAMESPACE"\" |
+kubectl apply -f -
+
+# Wait for the rollout so a pod stuck in ImagePullBackOff or CrashLoopBackOff is reported here, not discovered later
+echo "Waiting for deployment [$DEPLOYMENT_NAME] to roll out..."
+if kubectl rollout status deployment/$DEPLOYMENT_NAME -n $NAMESPACE --timeout=600s; then
+	echo "Deployment [$DEPLOYMENT_NAME] is ready. To reach the web app, run:"
+	echo "  kubectl port-forward service/$SERVICE_NAME 8080:80 -n $NAMESPACE"
+	echo "and browse to http://localhost:8080 (health: http://localhost:8080/health)."
+else
+	echo "Deployment [$DEPLOYMENT_NAME] did not become ready. Inspect it with:"
+	echo "  kubectl get pods -n $NAMESPACE"
+	echo "  kubectl describe pod -n $NAMESPACE --selector app=$DEPLOYMENT_NAME"
+	exit 1
+fi
diff --git a/samples/web-app-blob-storage/dotnet/scripts/Dockerfile b/samples/web-app-blob-storage/dotnet/scripts/Dockerfile
new file mode 100644
index 0000000..d862da7
--- /dev/null
+++ b/samples/web-app-blob-storage/dotnet/scripts/Dockerfile
@@ -0,0 +1,28 @@
+# Build stage: restore and publish the ASP.NET Core app with the .NET SDK image.
+FROM mcr.microsoft.com/dotnet/sdk:10.0 AS build
+
+WORKDIR /src
+
+# Restore first so the package cache layer is reused when only sources change.
+COPY VacationPlanner.csproj ./
+RUN dotnet restore
+
+COPY . ./
+RUN dotnet publish -c Release -o /app/publish --no-restore
+
+# Runtime stage: the ASP.NET Core runtime image only, no SDK.
+FROM mcr.microsoft.com/dotnet/aspnet:10.0
+
+# Port Kestrel listens on; kept as a build argument (and a runtime variable) as in the Python image.
+ARG PORT=8080
+ENV PORT=${PORT}
+
+WORKDIR /app
+COPY --from=build /app/publish ./
+
+# Run as the runtime image's non-root `app` user, as the Python image runs as its own unprivileged `app` user.
+USER app
+
+EXPOSE ${PORT}
+
+ENTRYPOINT ["dotnet", "VacationPlanner.dll"]
diff --git a/samples/web-app-blob-storage/dotnet/scripts/configmap.yml b/samples/web-app-blob-storage/dotnet/scripts/configmap.yml
new file mode 100644
index 0000000..21b20c5
--- /dev/null
+++ b/samples/web-app-blob-storage/dotnet/scripts/configmap.yml
@@ -0,0 +1,9 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: vacation-planner-blob-config
+  namespace: vacation-planner-blob
+  labels:
+    app: vacation-planner-blob
+data:
+  CONTAINER_NAME: "activities"
diff --git a/samples/web-app-blob-storage/dotnet/scripts/deployment.yml b/samples/web-app-blob-storage/dotnet/scripts/deployment.yml
new file mode 100644
index 0000000..c3ef386
--- /dev/null
+++ b/samples/web-app-blob-storage/dotnet/scripts/deployment.yml
@@ -0,0 +1,71 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: vacation-planner-blob
+  namespace: vacation-planner-blob
+  labels:
+    app: vacation-planner-blob
+spec:
+  replicas: 3
+  selector:
+    matchLabels:
+      app: vacation-planner-blob
+  strategy:
+    rollingUpdate:
+      maxSurge: 1
+      maxUnavailable: 0
+    type: RollingUpdate
+  minReadySeconds: 5
+  template:
+    metadata:
+      labels:
+        app: vacation-planner-blob
+    spec:
+      nodeSelector:
+        kubernetes.io/os: linux
+      containers:
+        - name: vacation-planner-blob
+          image: <your-registry>.azurecr.io/vacation-planner-blob-dotnet:v1
+          imagePullPolicy: Always
+          ports:
+            - name: http
+              containerPort: 8080
+          env:
+            - name: CONTAINER_NAME
+              valueFrom:
+                configMapKeyRef:
+                  name: vacation-planner-blob-config
+                  key: CONTAINER_NAME
+            - name: AZURE_STORAGE_ACCOUNT_CONNECTION_STRING
+              valueFrom:
+                secretKeyRef:
+                  name: vacation-planner-blob-secrets
+                  key: AZURE_STORAGE_ACCOUNT_CONNECTION_STRING
+            - name: SECRET_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: vacation-planner-blob-secrets
+                  key: SECRET_KEY
+          resources:
+            requests:
+              cpu: "100m"
+              memory: "128Mi"
+            limits:
+              cpu: "500m"
+              memory: "256Mi"
+          livenessProbe:
+            httpGet:
+              path: /health
+              port: http
+            initialDelaySeconds: 15
+            periodSeconds: 30
+            timeoutSeconds: 5
+            failureThreshold: 3
+          readinessProbe:
+            httpGet:
+              path: /health
+              port: http
+            initialDelaySeconds: 5
+            periodSeconds: 10
+            timeoutSeconds: 3
+            failureThreshold: 3
diff --git a/samples/web-app-blob-storage/dotnet/scripts/namespace.yml b/samples/web-app-blob-storage/dotnet/scripts/namespace.yml
new file mode 100644
index 0000000..9e8b556
--- /dev/null
+++ b/samples/web-app-blob-storage/dotnet/scripts/namespace.yml
@@ -0,0 +1,4 @@
+kind: Namespace
+apiVersion: v1
+metadata:
+  name: vacation-planner-blob
diff --git a/samples/web-app-blob-storage/dotnet/scripts/secret.yml b/samples/web-app-blob-storage/dotnet/scripts/secret.yml
new file mode 100644
index 0000000..d450796
--- /dev/null
+++ b/samples/web-app-blob-storage/dotnet/scripts/secret.yml
@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: vacation-planner-blob-secrets
+  namespace: vacation-planner-blob
+  labels:
+    app: vacation-planner-blob
+type: Opaque
+data:
+  AZURE_STORAGE_ACCOUNT_CONNECTION_STRING: ""
+  SECRET_KEY: ""
diff --git a/samples/web-app-blob-storage/dotnet/scripts/service.yml b/samples/web-app-blob-storage/dotnet/scripts/service.yml
new file mode 100644
index 0000000..a757f13
--- /dev/null
+++ b/samples/web-app-blob-storage/dotnet/scripts/service.yml
@@ -0,0 +1,16 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: vacation-planner-blob
+  namespace: vacation-planner-blob
+  labels:
+    app: vacation-planner-blob
+spec:
+  type: ClusterIP
+  selector:
+    app: vacation-planner-blob
+  ports:
+    - name: http
+      protocol: TCP
+      port: 80
+      targetPort: http
diff --git a/samples/web-app-blob-storage/dotnet/src/.dockerignore b/samples/web-app-blob-storage/dotnet/src/.dockerignore
new file mode 100644
index 0000000..cd42ee3
--- /dev/null
+++ b/samples/web-app-blob-storage/dotnet/src/.dockerignore
@@ -0,0 +1,2 @@
+bin/
+obj/
diff --git a/samples/web-app-blob-storage/dotnet/src/Models/Activity.cs b/samples/web-app-blob-storage/dotnet/src/Models/Activity.cs
new file mode 100644
index 0000000..c39b073
--- /dev/null
+++ b/samples/web-app-blob-storage/dotnet/src/Models/Activity.cs
@@ -0,0 +1,4 @@
+namespace VacationPlanner.Models;
+
+/// <summary>A planned vacation activity: the store's identifier plus the free-text description.</summary>
+public sealed record Activity(string Id, string Text);
diff --git a/samples/web-app-blob-storage/dotnet/src/Pages/Delete.cshtml b/samples/web-app-blob-storage/dotnet/src/Pages/Delete.cshtml
new file mode 100644
index 0000000..386fa85
--- /dev/null
+++ b/samples/web-app-blob-storage/dotnet/src/Pages/Delete.cshtml
@@ -0,0 +1,2 @@
+@page "/delete/{id}"
+@model DeleteModel
diff --git a/samples/web-app-blob-storage/dotnet/src/Pages/Delete.cshtml.cs b/samples/web-app-blob-storage/dotnet/src/Pages/Delete.cshtml.cs
new file mode 100644
index 0000000..2460ba5
--- /dev/null
+++ b/samples/web-app-blob-storage/dotnet/src/Pages/Delete.cshtml.cs
@@ -0,0 +1,21 @@
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Mvc.RazorPages;
+using VacationPlanner.Services;
+
+namespace VacationPlanner.Pages;
+
+/// <summary>Handles <c>POST /delete/{id}</c>; the activity is addressed by its store id, never by its position in the list.</summary>
+public class DeleteModel(IActivityStore store) : PageModel
+{
+    public IActionResult OnGet() => RedirectToPage("/Index");
+
+    public async Task<IActionResult> OnPostAsync(string id, CancellationToken cancellationToken)
+    {
+        if (!string.IsNullOrWhiteSpace(id) && await store.DeleteAsync(id, cancellationToken))
+        {
+            TempData["Flash"] = "Activity deleted successfully.";
+        }
+
+        return RedirectToPage("/Index");
+    }
+}
diff --git a/samples/web-app-blob-storage/dotnet/src/Pages/Index.cshtml b/samples/web-app-blob-storage/dotnet/src/Pages/Index.cshtml
new file mode 100644
index 0000000..bd617e2
--- /dev/null
+++ b/samples/web-app-blob-storage/dotnet/src/Pages/Index.cshtml
@@ -0,0 +1,265 @@
+@page
+@model IndexModel
+<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8" />
+  <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+  <title>Vacation Planner</title>
+  <link rel="preconnect" href="https://fonts.googleapis.com" />
+  <link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700&display=swap" rel="stylesheet" />
+  <link rel="stylesheet" href="~/style.css" />
+  <link rel="icon" type="image/x-icon" href="~/favicon.ico" />
+  <script>
+    (function () {
+      try {
+        var dark = localStorage.getItem('vp_dark');
+        if (dark === 'true' || (dark === null && window.matchMedia('(prefers-color-scheme: dark)').matches)) {
+          document.documentElement.dataset.theme = 'dark';
+        }
+      } catch (_) {}
+    })();
+  </script>
+</head>
+<body>
+
+<!-- Header -->
+<header>
+  <div class="header-left">
+    <h1>&#127796; Vacation Planner</h1>
+    <p id="count-label">@Model.Activities.Count activit@(Model.Activities.Count != 1 ? "ies" : "y") planned</p>
+  </div>
+  <div class="header-right">
+    <button id="btn-dark-mode" aria-label="Toggle dark mode" title="Toggle dark mode">
+      <svg id="icon-dark" width="18" height="18" fill="none" stroke="currentColor" stroke-width="2" viewBox="0 0 24 24">
+        <path d="M21 12.79A9 9 0 1111.21 3a7 7 0 009.79 9.79z"/>
+      </svg>
+      <svg id="icon-light" width="18" height="18" fill="none" stroke="currentColor" stroke-width="2" viewBox="0 0 24 24" style="display:none">
+        <circle cx="12" cy="12" r="5"/>
+        <line x1="12" y1="1" x2="12" y2="3"/><line x1="12" y1="21" x2="12" y2="23"/>
+        <line x1="4.22" y1="4.22" x2="5.64" y2="5.64"/><line x1="18.36" y1="18.36" x2="19.78" y2="19.78"/>
+        <line x1="1" y1="12" x2="3" y2="12"/><line x1="21" y1="12" x2="23" y2="12"/>
+        <line x1="4.22" y1="19.78" x2="5.64" y2="18.36"/><line x1="18.36" y1="5.64" x2="19.78" y2="4.22"/>
+      </svg>
+    </button>
+    <button id="btn-add">
+      <svg width="16" height="16" fill="none" stroke="currentColor" stroke-width="2.5" viewBox="0 0 24 24"><line x1="12" y1="5" x2="12" y2="19"/><line x1="5" y1="12" x2="19" y2="12"/></svg>
+      Add Activity
+    </button>
+  </div>
+</header>
+
+<!-- Activity Table -->
+<div class="content">
+  <table id="activity-table">
+    <thead>
+      <tr>
+        <th>Activity</th>
+        <th class="col-actions" colspan="2">Actions</th>
+      </tr>
+    </thead>
+    <tbody>
+      @foreach (var activity in Model.Activities)
+      {
+      <tr data-id="@activity.Id" data-activity="@activity.Text">
+        <td>@activity.Text</td>
+        <td class="col-btn">
+          <button class="btn-edit" title="Edit activity" aria-label="Edit @activity.Text">
+            <svg width="14" height="14" fill="none" stroke="currentColor" stroke-width="2" viewBox="0 0 24 24">
+              <path d="M11 4H4a2 2 0 00-2 2v14a2 2 0 002 2h14a2 2 0 002-2v-7"/>
+              <path d="M18.5 2.5a2.121 2.121 0 013 3L12 15l-4 1 1-4 9.5-9.5z"/>
+            </svg>
+            Edit
+          </button>
+        </td>
+        <td class="col-btn">
+          <form method="post" asp-page="/Delete" asp-route-id="@activity.Id" class="delete-form">
+            <button type="button" class="btn-delete" title="Delete activity" aria-label="Delete @activity.Text">
+              <svg width="14" height="14" fill="none" stroke="currentColor" stroke-width="2" viewBox="0 0 24 24">
+                <polyline points="3 6 5 6 21 6"/><path d="M19 6l-1 14a2 2 0 01-2 2H8a2 2 0 01-2-2L5 6"/>
+                <path d="M10 11v6"/><path d="M14 11v6"/><path d="M9 6V4h6v2"/>
+              </svg>
+              Delete
+            </button>
+          </form>
+        </td>
+      </tr>
+      }
+      @if (Model.Activities.Count == 0)
+      {
+      <tr id="empty-row">
+        <td colspan="3" class="empty-cell">No vacation plans yet — add your first activity!</td>
+      </tr>
+      }
+    </tbody>
+  </table>
+</div>
+
+<!-- Add / Edit Activity Modal -->
+<div id="overlay">
+  <div class="modal" role="dialog" aria-modal="true" aria-labelledby="modal-title">
+    <div class="modal-header">
+      <h2 id="modal-title">&#127796; Add Activity</h2>
+      <button id="btn-close-modal" aria-label="Close">&times;</button>
+    </div>
+    <form id="activity-form" method="post" asp-page="/Index" novalidate>
+      <input type="hidden" id="f-row-id" name="row_id" value="" />
+      <div class="field">
+        <label for="f-activity">Activity <span style="color:#ef4444">*</span></label>
+        <input id="f-activity" name="activity" type="text" placeholder="e.g. Snorkelling at Coral Bay" required />
+      </div>
+    </form>
+    <div class="modal-actions">
+      <button class="btn-secondary" id="btn-cancel">Cancel</button>
+      <button class="btn-primary" id="btn-save">Save Activity</button>
+    </div>
+  </div>
+</div>
+
+<!-- Delete Confirmation Modal -->
+<div id="delete-overlay">
+  <div class="modal" role="dialog" aria-modal="true" aria-labelledby="delete-modal-title">
+    <div class="modal-header">
+      <h2 id="delete-modal-title">&#127796; Delete Activity</h2>
+      <button id="btn-close-delete-modal" aria-label="Close">&times;</button>
+    </div>
+    <div class="modal-body">
+      <p id="delete-confirm-msg">Are you sure you want to delete this activity?</p>
+    </div>
+    <div class="modal-actions">
+      <button class="btn-secondary" id="btn-cancel-delete">Cancel</button>
+      <button class="btn-primary" id="btn-confirm-delete">Delete</button>
+    </div>
+  </div>
+</div>
+
+<!-- Toast -->
+<div id="toast"></div>
+
+<script>
+  // ── Dark mode ────────────────────────────────────────────
+  function applyDark(dark) {
+    document.documentElement.dataset.theme = dark ? 'dark' : '';
+    document.getElementById('icon-dark').style.display  = dark ? 'none' : '';
+    document.getElementById('icon-light').style.display = dark ? ''     : 'none';
+  }
+  (function () {
+    var dark = localStorage.getItem('vp_dark');
+    var isDark = dark === 'true' || (dark === null && window.matchMedia('(prefers-color-scheme: dark)').matches);
+    applyDark(isDark);
+  })();
+  document.getElementById('btn-dark-mode').addEventListener('click', function () {
+    var isDark = document.documentElement.dataset.theme === 'dark';
+    applyDark(!isDark);
+    localStorage.setItem('vp_dark', String(!isDark));
+  });
+
+  // ── Toast ────────────────────────────────────────────────
+  var flashMessages = @Json.Serialize(Model.Flashes);
+  var toastTimer;
+  function showToast(msg) {
+    var el = document.getElementById('toast');
+    el.textContent = msg;
+    el.classList.add('show');
+    clearTimeout(toastTimer);
+    toastTimer = setTimeout(function () { el.classList.remove('show'); }, 2400);
+  }
+  if (flashMessages.length) showToast(flashMessages[0]);
+
+  // ── Activity Modal ───────────────────────────────────────
+  var overlay = document.getElementById('overlay');
+
+  function openActivityModal(data) {
+    var titleEl = document.getElementById('modal-title');
+    var saveEl  = document.getElementById('btn-save');
+    var rowId   = document.getElementById('f-row-id');
+    var input   = document.getElementById('f-activity');
+
+    if (data) {
+      titleEl.textContent = '🌴 Edit Activity';
+      saveEl.textContent  = 'Save Changes';
+      rowId.value         = data.id;
+      input.value         = data.activity;
+    } else {
+      titleEl.textContent = '🌴 Add Activity';
+      saveEl.textContent  = 'Save Activity';
+      rowId.value         = '';
+      input.value         = '';
+    }
+    overlay.classList.add('open');
+    input.focus();
+    var len = input.value.length;
+    input.setSelectionRange(len, len);
+  }
+
+  function closeActivityModal() {
+    overlay.classList.remove('open');
+    document.getElementById('activity-form').reset();
+    document.getElementById('f-row-id').value = '';
+    document.getElementById('modal-title').textContent = '🌴 Add Activity';
+    document.getElementById('btn-save').textContent    = 'Save Activity';
+  }
+
+  document.getElementById('btn-add').addEventListener('click', function () { openActivityModal(null); });
+  document.getElementById('btn-close-modal').addEventListener('click', closeActivityModal);
+  document.getElementById('btn-cancel').addEventListener('click', closeActivityModal);
+  overlay.addEventListener('click', function (e) { if (e.target === overlay) closeActivityModal(); });
+
+  document.getElementById('btn-save').addEventListener('click', function () {
+    var val = document.getElementById('f-activity').value.trim();
+    if (!val) { showToast('Activity cannot be empty.'); return; }
+    document.getElementById('activity-form').submit();
+  });
+
+  document.getElementById('f-activity').addEventListener('keydown', function (e) {
+    if (e.key === 'Enter') { e.preventDefault(); document.getElementById('btn-save').click(); }
+  });
+
+  // Edit buttons on rows
+  document.querySelectorAll('.btn-edit').forEach(function (btn) {
+    btn.addEventListener('click', function () {
+      var row = btn.closest('tr');
+      openActivityModal({ id: row.dataset.id, activity: row.dataset.activity });
+    });
+  });
+
+  // ── Delete confirmation modal ────────────────────────────
+  var deleteOverlay = document.getElementById('delete-overlay');
+  var pendingDeleteForm = null;
+
+  function openDeleteModal(form, activityName) {
+    pendingDeleteForm = form;
+    var msg = document.getElementById('delete-confirm-msg');
+    msg.textContent = 'Are you sure you want to delete "' + activityName + '"?';
+    deleteOverlay.classList.add('open');
+    document.getElementById('btn-confirm-delete').focus();
+  }
+
+  function closeDeleteModal() {
+    deleteOverlay.classList.remove('open');
+    pendingDeleteForm = null;
+  }
+
+  document.querySelectorAll('.btn-delete').forEach(function (btn) {
+    btn.addEventListener('click', function () {
+      var row = btn.closest('tr');
+      var form = btn.closest('form');
+      openDeleteModal(form, row.dataset.activity);
+    });
+  });
+
+  document.getElementById('btn-confirm-delete').addEventListener('click', function () {
+    if (pendingDeleteForm) pendingDeleteForm.submit();
+  });
+
+  document.getElementById('btn-cancel-delete').addEventListener('click', closeDeleteModal);
+  document.getElementById('btn-close-delete-modal').addEventListener('click', closeDeleteModal);
+  deleteOverlay.addEventListener('click', function (e) { if (e.target === deleteOverlay) closeDeleteModal(); });
+
+  // ── Escape closes any open modal ─────────────────────────
+  document.addEventListener('keydown', function (e) {
+    if (e.key === 'Escape') { closeActivityModal(); closeDeleteModal(); }
+  });
+</script>
+</body>
+</html>
diff --git a/samples/web-app-blob-storage/dotnet/src/Pages/Index.cshtml.cs b/samples/web-app-blob-storage/dotnet/src/Pages/Index.cshtml.cs
new file mode 100644
index 0000000..c077e52
--- /dev/null
+++ b/samples/web-app-blob-storage/dotnet/src/Pages/Index.cshtml.cs
@@ -0,0 +1,47 @@
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Mvc.RazorPages;
+using VacationPlanner.Models;
+using VacationPlanner.Services;
+
+namespace VacationPlanner.Pages;
+
+public class IndexModel(IActivityStore store) : PageModel
+{
+    public IReadOnlyList<Activity> Activities { get; private set; } = [];
+
+    /// <summary>Flash messages set by the previous request (the equivalent of Flask's <c>flash()</c>).</summary>
+    public IReadOnlyList<string> Flashes => TempData["Flash"] is string message ? [message] : [];
+
+    [BindProperty(Name = "activity")]
+    public string? Activity { get; set; }
+
+    [BindProperty(Name = "row_id")]
+    public string? RowId { get; set; }
+
+    public async Task OnGetAsync(CancellationToken cancellationToken)
+    {
+        Activities = await store.ListAsync(cancellationToken);
+    }
+
+    public async Task<IActionResult> OnPostAsync(CancellationToken cancellationToken)
+    {
+        var text = Activity?.Trim();
+        var id = RowId?.Trim();
+        if (!string.IsNullOrEmpty(text))
+        {
+            if (!string.IsNullOrEmpty(id))
+            {
+                if (await store.UpdateAsync(id, text, cancellationToken))
+                {
+                    TempData["Flash"] = "Activity updated successfully.";
+                }
+            }
+            else if (await store.AddAsync(text, cancellationToken))
+            {
+                TempData["Flash"] = "Activity added successfully.";
+            }
+        }
+
+        return RedirectToPage();
+    }
+}
diff --git a/samples/web-app-blob-storage/dotnet/src/Pages/_ViewImports.cshtml b/samples/web-app-blob-storage/dotnet/src/Pages/_ViewImports.cshtml
new file mode 100644
index 0000000..ec62511
--- /dev/null
+++ b/samples/web-app-blob-storage/dotnet/src/Pages/_ViewImports.cshtml
@@ -0,0 +1,4 @@
+@using VacationPlanner
+@using VacationPlanner.Models
+@namespace VacationPlanner.Pages
+@addTagHelper *, Microsoft.AspNetCore.Mvc.TagHelpers
diff --git a/samples/web-app-blob-storage/dotnet/src/Program.cs b/samples/web-app-blob-storage/dotnet/src/Program.cs
new file mode 100644
index 0000000..c8a8a85
--- /dev/null
+++ b/samples/web-app-blob-storage/dotnet/src/Program.cs
@@ -0,0 +1,48 @@
+using Microsoft.AspNetCore.DataProtection;
+using Microsoft.AspNetCore.DataProtection.KeyManagement;
+using VacationPlanner.Services;
+
+var builder = WebApplication.CreateBuilder(args);
+
+// Listen on PORT (8080 by default), the way the Python image binds gunicorn to 0.0.0.0:${PORT}. HTTP_PORTS is the
+// same setting the aspnet base image feeds through ASPNETCORE_HTTP_PORTS, so no URL override is involved.
+if (Environment.GetEnvironmentVariable("PORT") is { Length: > 0 } port)
+{
+    builder.WebHost.UseSetting(WebHostDefaults.HttpPortsKey, port);
+}
+
+// Read and validate the configuration up front so a misconfigured deployment fails at startup.
+var storeOptions = BlobStorageOptions.FromEnvironment();
+
+// SECRET_KEY is the Kubernetes Secret the Python sample signs its session cookie with. Deriving the Data Protection
+// key ring from it lets all replicas validate each other's antiforgery tokens and flash cookies; without it (a local
+// docker run) each process keeps its own keys.
+var secretKey = Environment.GetEnvironmentVariable("SECRET_KEY");
+if (!string.IsNullOrEmpty(secretKey))
+{
+    builder.Services.AddDataProtection().DisableAutomaticKeyGeneration();
+    builder.Services.Configure<KeyManagementOptions>(options => options.XmlRepository = new SecretKeyXmlRepository(secretKey));
+}
+
+builder.Services.AddRazorPages();
+builder.Services.AddSingleton<IActivityStore>(sp =>
+    new BlobActivityStore(storeOptions, sp.GetRequiredService<ILogger<BlobActivityStore>>()));
+builder.Services.AddHostedService(sp =>
+    new StoreInitializer(sp.GetRequiredService<IActivityStore>(), sp.GetRequiredService<ILogger<StoreInitializer>>()));
+
+var app = builder.Build();
+
+if (string.IsNullOrEmpty(secretKey))
+{
+    app.Logger.LogWarning("SECRET_KEY is not set: antiforgery tokens and flash messages are only valid on this replica.");
+}
+
+app.UseStaticFiles();
+app.MapRazorPages();
+
+app.MapGet("/health", async (IActivityStore store, CancellationToken cancellationToken) =>
+    await store.IsHealthyAsync(cancellationToken)
+        ? Results.Json(new { status = "ok" })
+        : Results.Json(new { status = "unavailable" }, statusCode: StatusCodes.Status503ServiceUnavailable));
+
+app.Run();
diff --git a/samples/web-app-blob-storage/dotnet/src/Services/BlobActivityStore.cs b/samples/web-app-blob-storage/dotnet/src/Services/BlobActivityStore.cs
new file mode 100644
index 0000000..05bebdf
--- /dev/null
+++ b/samples/web-app-blob-storage/dotnet/src/Services/BlobActivityStore.cs
@@ -0,0 +1,123 @@
+using System.Text;
+using Azure.Identity;
+using Azure.Storage;
+using Azure.Storage.Blobs;
+using VacationPlanner.Models;
+
+namespace VacationPlanner.Services;
+
+/// <summary>One blob per activity in a Blob Storage container; the blob name is the activity id and its content the text.</summary>
+public sealed class BlobActivityStore : IActivityStore
+{
+    private readonly BlobContainerClient _container;
+    private readonly ILogger<BlobActivityStore> _logger;
+
+    public BlobActivityStore(BlobStorageOptions options, ILogger<BlobActivityStore> logger)
+    {
+        _logger = logger;
+
+        // The same credential ladder as the Python sample: an explicit service principal, then a connection string,
+        // then the identity of the pod.
+        BlobServiceClient service;
+        if (options is { ClientId: { Length: > 0 }, ClientSecret: { Length: > 0 }, TenantId: { Length: > 0 }, AccountUrl: { Length: > 0 } })
+        {
+            logger.LogInformation("Using ClientSecretCredential with BlobServiceClient.");
+            var credential = new ClientSecretCredential(options.TenantId, options.ClientId, options.ClientSecret);
+            service = new BlobServiceClient(new Uri(options.AccountUrl), credential);
+        }
+        else if (!string.IsNullOrEmpty(options.ConnectionString))
+        {
+            logger.LogInformation("Using storage account connection string with BlobServiceClient.");
+            service = FromConnectionString(options.ConnectionString);
+        }
+        else if (!string.IsNullOrEmpty(options.AccountUrl))
+        {
+            // DefaultAzureCredential picks up the Microsoft Entra Workload ID the webhook projects into the pod
+            // (AZURE_CLIENT_ID, AZURE_TENANT_ID, AZURE_FEDERATED_TOKEN_FILE, AZURE_AUTHORITY_HOST).
+            logger.LogInformation("Using DefaultAzureCredential with BlobServiceClient.");
+            service = new BlobServiceClient(new Uri(options.AccountUrl), new DefaultAzureCredential());
+        }
+        else
+        {
+            throw new InvalidOperationException(
+                "Insufficient configuration for BlobServiceClient. Set AZURE_STORAGE_ACCOUNT_URL (workload identity) or AZURE_STORAGE_ACCOUNT_CONNECTION_STRING.");
+        }
+
+        _container = service.GetBlobContainerClient(options.ContainerName);
+    }
+
+    public async Task InitializeAsync(CancellationToken cancellationToken)
+    {
+        await _container.CreateIfNotExistsAsync(cancellationToken: cancellationToken);
+        _logger.LogInformation("Container '{Container}' is ready.", _container.Name);
+    }
+
+    public async Task<IReadOnlyList<Activity>> ListAsync(CancellationToken cancellationToken)
+    {
+        // Blobs come back sorted by name, which sorts by creation timestamp: the blob name is the timestamp.
+        var activities = new List<Activity>();
+        await foreach (var blob in _container.GetBlobsAsync(cancellationToken: cancellationToken))
+        {
+            var content = await _container.GetBlobClient(blob.Name).DownloadContentAsync(cancellationToken);
+            activities.Add(new Activity(blob.Name, content.Value.Content.ToString()));
+        }
+
+        return activities;
+    }
+
+    public Task<bool> AddAsync(string text, CancellationToken cancellationToken) =>
+        UploadAsync($"{DateTime.Now:yyyy-MM-dd-HH-mm-ss}-activity.txt", text, cancellationToken);
+
+    public Task<bool> UpdateAsync(string id, string text, CancellationToken cancellationToken) =>
+        UploadAsync(id, text, cancellationToken);
+
+    public async Task<bool> DeleteAsync(string id, CancellationToken cancellationToken)
+    {
+        // As in the Python sample, a blob that is already gone still counts as deleted.
+        var deleted = await _container.GetBlobClient(id).DeleteIfExistsAsync(cancellationToken: cancellationToken);
+        if (!deleted.Value)
+        {
+            _logger.LogInformation("Blob '{Name}' did not exist: already deleted.", id);
+        }
+
+        return true;
+    }
+
+    public async Task<bool> IsHealthyAsync(CancellationToken cancellationToken)
+    {
+        try
+        {
+            return await _container.ExistsAsync(cancellationToken);
+        }
+        catch (Exception ex)
+        {
+            _logger.LogWarning(ex, "Blob Storage health check failed");
+            return false;
+        }
+    }
+
+    private async Task<bool> UploadAsync(string name, string text, CancellationToken cancellationToken)
+    {
+        await _container.GetBlobClient(name).UploadAsync(new BinaryData(Encoding.UTF8.GetBytes(text)), overwrite: true, cancellationToken);
+        return true;
+    }
+
+    /// <summary>
+    /// Builds the client from the connection string's explicit <c>BlobEndpoint</c> and shared key when they are present,
+    /// as the Python SDK does. The .NET parser insists on a port-less <c>EndpointSuffix</c> and rejects the connection
+    /// string the LocalStack emulator returns, whose suffix carries the gateway port (<c>core.azure.localhost.localstack.cloud:4566</c>).
+    /// </summary>
+    private static BlobServiceClient FromConnectionString(string connectionString)
+    {
+        var parts = connectionString.Split(';', StringSplitOptions.RemoveEmptyEntries)
+            .Select(part => part.Split('=', 2))
+            .Where(kv => kv.Length == 2)
+            .ToDictionary(kv => kv[0].Trim(), kv => kv[1].Trim(), StringComparer.OrdinalIgnoreCase);
+
+        return parts.TryGetValue("BlobEndpoint", out var endpoint)
+            && parts.TryGetValue("AccountName", out var accountName)
+            && parts.TryGetValue("AccountKey", out var accountKey)
+            ? new BlobServiceClient(new Uri(endpoint), new StorageSharedKeyCredential(accountName, accountKey))
+            : new BlobServiceClient(connectionString);
+    }
+}
diff --git a/samples/web-app-blob-storage/dotnet/src/Services/BlobStorageOptions.cs b/samples/web-app-blob-storage/dotnet/src/Services/BlobStorageOptions.cs
new file mode 100644
index 0000000..c353256
--- /dev/null
+++ b/samples/web-app-blob-storage/dotnet/src/Services/BlobStorageOptions.cs
@@ -0,0 +1,19 @@
+namespace VacationPlanner.Services;
+
+/// <summary>Settings read from the same environment variables the Python sample uses.</summary>
+public sealed record BlobStorageOptions(
+    string? AccountUrl,
+    string? ConnectionString,
+    string ContainerName,
+    string? ClientId,
+    string? ClientSecret,
+    string? TenantId)
+{
+    public static BlobStorageOptions FromEnvironment() => new(
+        AccountUrl: Environment.GetEnvironmentVariable("AZURE_STORAGE_ACCOUNT_URL"),
+        ConnectionString: Environment.GetEnvironmentVariable("AZURE_STORAGE_ACCOUNT_CONNECTION_STRING"),
+        ContainerName: Environment.GetEnvironmentVariable("CONTAINER_NAME") ?? "activities",
+        ClientId: Environment.GetEnvironmentVariable("AZURE_CLIENT_ID"),
+        ClientSecret: Environment.GetEnvironmentVariable("AZURE_CLIENT_SECRET"),
+        TenantId: Environment.GetEnvironmentVariable("AZURE_TENANT_ID"));
+}
diff --git a/samples/web-app-blob-storage/dotnet/src/Services/IActivityStore.cs b/samples/web-app-blob-storage/dotnet/src/Services/IActivityStore.cs
new file mode 100644
index 0000000..167993e
--- /dev/null
+++ b/samples/web-app-blob-storage/dotnet/src/Services/IActivityStore.cs
@@ -0,0 +1,24 @@
+using VacationPlanner.Models;
+
+namespace VacationPlanner.Services;
+
+/// <summary>Persistence for the planner's activities. Every call goes to the backing store; nothing is cached in-process.</summary>
+public interface IActivityStore
+{
+    /// <summary>Creates whatever the store needs (container, table, collection, directory) before the first request.</summary>
+    Task InitializeAsync(CancellationToken cancellationToken);
+
+    Task<IReadOnlyList<Activity>> ListAsync(CancellationToken cancellationToken);
+
+    /// <summary>Adds an activity and returns whether the store confirmed the write; the page flashes only then.</summary>
+    Task<bool> AddAsync(string text, CancellationToken cancellationToken);
+
+    /// <summary>Updates an activity and returns whether the store reported a change, with the meaning the Python sample's driver gives it.</summary>
+    Task<bool> UpdateAsync(string id, string text, CancellationToken cancellationToken);
+
+    /// <summary>Deletes an activity by its store id and returns whether the store reported a deletion.</summary>
+    Task<bool> DeleteAsync(string id, CancellationToken cancellationToken);
+
+    /// <summary>Cheap connectivity probe used by <c>GET /health</c>.</summary>
+    Task<bool> IsHealthyAsync(CancellationToken cancellationToken);
+}
diff --git a/samples/web-app-blob-storage/dotnet/src/Services/SecretKeyXmlRepository.cs b/samples/web-app-blob-storage/dotnet/src/Services/SecretKeyXmlRepository.cs
new file mode 100644
index 0000000..e0cc5bb
--- /dev/null
+++ b/samples/web-app-blob-storage/dotnet/src/Services/SecretKeyXmlRepository.cs
@@ -0,0 +1,49 @@
+using System.Security.Cryptography;
+using System.Text;
+using System.Xml.Linq;
+using Microsoft.AspNetCore.DataProtection;
+using Microsoft.AspNetCore.DataProtection.AuthenticatedEncryption.ConfigurationModel;
+using Microsoft.AspNetCore.DataProtection.Repositories;
+
+namespace VacationPlanner.Services;
+
+/// <summary>
+/// A Data Protection key ring derived deterministically from <c>SECRET_KEY</c>, the Kubernetes Secret the Python
+/// sample signs its Flask session cookie with. ASP.NET Core protects its antiforgery tokens and TempData (flash)
+/// cookies with Data Protection instead of a signing key; deriving the one key of the ring from the same secret
+/// lets every replica of the Deployment validate what another replica issued, which the default per-process key
+/// ring cannot offer behind a load balancer.
+/// </summary>
+public sealed class SecretKeyXmlRepository : IXmlRepository
+{
+    private readonly XElement _key;
+
+    public SecretKeyXmlRepository(string secretKey)
+    {
+        var keyMaterial = Encoding.UTF8.GetBytes(secretKey);
+
+        // A 512-bit master key (the size Data Protection generates itself) and a stable key id, both from SECRET_KEY.
+        var masterKey = HKDF.DeriveKey(HashAlgorithmName.SHA256, keyMaterial, 64, info: "VacationPlanner.DataProtection.MasterKey"u8.ToArray());
+        var keyId = new Guid(HKDF.DeriveKey(HashAlgorithmName.SHA256, keyMaterial, 16, info: "VacationPlanner.DataProtection.KeyId"u8.ToArray()));
+
+        // AES-256-CBC + HMACSHA256, the default algorithms, serialized the way the key manager itself serializes a new key.
+        var descriptor = new AuthenticatedEncryptorDescriptor(new AuthenticatedEncryptorConfiguration(), new Secret(masterKey));
+        var serialized = descriptor.ExportToXml();
+
+        _key = new XElement("key",
+            new XAttribute("id", keyId),
+            new XAttribute("version", 1),
+            new XElement("creationDate", new DateTimeOffset(2000, 1, 1, 0, 0, 0, TimeSpan.Zero)),
+            new XElement("activationDate", new DateTimeOffset(2000, 1, 1, 0, 0, 0, TimeSpan.Zero)),
+            new XElement("expirationDate", new DateTimeOffset(2999, 12, 31, 0, 0, 0, TimeSpan.Zero)),
+            new XElement("descriptor",
+                new XAttribute("deserializerType", serialized.DeserializerType.AssemblyQualifiedName!),
+                serialized.SerializedDescriptorElement));
+    }
+
+    public IReadOnlyCollection<XElement> GetAllElements() => [new XElement(_key)];
+
+    /// <summary>Never called: automatic key generation is disabled, so the key manager has nothing to persist.</summary>
+    public void StoreElement(XElement element, string friendlyName) =>
+        throw new NotSupportedException("The key ring is derived from SECRET_KEY and cannot be modified.");
+}
diff --git a/samples/web-app-blob-storage/dotnet/src/Services/StoreInitializer.cs b/samples/web-app-blob-storage/dotnet/src/Services/StoreInitializer.cs
new file mode 100644
index 0000000..c74eb50
--- /dev/null
+++ b/samples/web-app-blob-storage/dotnet/src/Services/StoreInitializer.cs
@@ -0,0 +1,33 @@
+namespace VacationPlanner.Services;
+
+/// <summary>
+/// Runs <see cref="IActivityStore.InitializeAsync"/> at startup with a bounded retry, so the app fails fast
+/// (and the container exits) when the backing service never becomes reachable.
+/// </summary>
+public sealed class StoreInitializer(
+    IActivityStore store,
+    ILogger<StoreInitializer> logger,
+    int attempts = 1,
+    TimeSpan delay = default) : IHostedService
+{
+    public async Task StartAsync(CancellationToken cancellationToken)
+    {
+        for (var attempt = 1; ; attempt++)
+        {
+            try
+            {
+                await store.InitializeAsync(cancellationToken);
+                logger.LogInformation("Activity store initialized after {Attempts} attempt(s).", attempt);
+                return;
+            }
+            catch (Exception ex) when (attempt < attempts && !cancellationToken.IsCancellationRequested)
+            {
+                logger.LogWarning(ex, "Activity store not ready (attempt {Attempt}/{Attempts}); retrying in {Delay}s.",
+                    attempt, attempts, delay.TotalSeconds);
+                await Task.Delay(delay, cancellationToken);
+            }
+        }
+    }
+
+    public Task StopAsync(CancellationToken cancellationToken) => Task.CompletedTask;
+}
diff --git a/samples/web-app-blob-storage/dotnet/src/VacationPlanner.csproj b/samples/web-app-blob-storage/dotnet/src/VacationPlanner.csproj
new file mode 100644
index 0000000..835cd67
--- /dev/null
+++ b/samples/web-app-blob-storage/dotnet/src/VacationPlanner.csproj
@@ -0,0 +1,12 @@
+<Project Sdk="Microsoft.NET.Sdk.Web">
+  <PropertyGroup>
+    <TargetFramework>net10.0</TargetFramework>
+    <Nullable>enable</Nullable>
+    <ImplicitUsings>enable</ImplicitUsings>
+    <RootNamespace>VacationPlanner</RootNamespace>
+  </PropertyGroup>
+  <ItemGroup>
+    <PackageReference Include="Azure.Identity" Version="1.21.0" />
+    <PackageReference Include="Azure.Storage.Blobs" Version="12.29.2" />
+  </ItemGroup>
+</Project>
diff --git a/samples/web-app-blob-storage/dotnet/src/appsettings.json b/samples/web-app-blob-storage/dotnet/src/appsettings.json
new file mode 100644
index 0000000..10f68b8
--- /dev/null
+++ b/samples/web-app-blob-storage/dotnet/src/appsettings.json
@@ -0,0 +1,9 @@
+{
+  "Logging": {
+    "LogLevel": {
+      "Default": "Information",
+      "Microsoft.AspNetCore": "Warning"
+    }
+  },
+  "AllowedHosts": "*"
+}
diff --git a/samples/web-app-blob-storage/dotnet/src/wwwroot/favicon.ico b/samples/web-app-blob-storage/dotnet/src/wwwroot/favicon.ico
new file mode 100644
index 0000000000000000000000000000000000000000..5b1d5cf37d81c073dbacd66df3f69d9240359dda
GIT binary patch
literal 36791
zcmagEWmp_d(>6Q{i$hpk0}H_+c#vR=6Wrb1od6-g;x0iFoDJ?0f_tzeIKkZs9^B#M
zdhWm9alG?mrfYhnrmO3ms<R6KKmZy5fdJ1N6p%*-fcMWWQqup)Cnx~W^?VKr{hz#m
z4gj?n0Km!lKiTpH0L0=001Wm&nVJv){y_l%4*#G0g9QL^-~8A9Z-WBc8~`wG0sv8}
z%Cb0^<e1MVao)*EsXrh8(*S~w`n;z;dolw6WW0A$;+j5LR>?|=hE{~(xo1m$5$WOx
zbWKdfscH3)sLJu8Xzj(xu<713Y$3x$OfLQLhNy8}4uYlTL|y(QT@oUE8%0m6*lERg
z1z4=(8HnCaQ${&?+Zzf}>!bD+H;@yHKQSZYu^->grpOP5U0!8&*<K~jn<fjg9|H-E
z7vuwNu@j+x`=G0n*Q#dt(qKRua$cKUdDXg3#V1h^w0U-{V)E8A@9^~u&#`W~sdysM
z*gFit3~HA9y>$!7!B+yIi1l|oaJ(PxauD5x8~L*c^Ib0^4*b-W%Gu<d<%hfSSC8?Q
zcE<Sd=wpl1L8t2UwB3Z?<I;G4w2hJvVtuvZd!=Ic)d*A&pNQie9^*8{R^Hg$D_XNj
z;q9Kf^%PDnpM3qX8Do>9Sovk9&i(=hRu&Fz(W>Lscu7crQLUxrCM;>!e0m{r*JdLi
zX1#U$C?c6~)NA%5PB4y7HQH>;zWNGg*Ey4P&2YQ_)ul&FNMtBeU~#9Paylk8=aUY{
zNBfE9?{iK09V9WWab|*Lq!FiiDKA!9(<sNcn!_(kCmzQwHuA?m+#}-h5|&tyX-ARL
z487U+1pN^ppE5(t%8hhV`n!8?<j#A~VXW;vb>^k%@#WN!qU<{Fj+%hW*|2<vm@N*q
zOAsj>T4pa@@b<H-l4`u@_2#wD^c9zKGq>MiZZMnTL#@zEc1$?Q2pM5i^aK{)@f|5L
zgrL<vR!$YO8oI{3a_r7S=2-D~32n|#zZGdE2X1dgG4VXl<Bmzn2vWarlT8A>8(V|Z
z_P_K+c)0)doEohned9K=)z411+B%JG7yQb^y(oqU*iX!T=Xq{0W%1<+!dPDWy@E9!
zHs7r}y&k4(<WB*SQZC9>A>gj<i;+ACB&1u5l~0z14e#y!Ed1?D@jsrdF7%9A{jn<+
z`f|6@nMScBLwnwKEChHZ2;ZN-JZ#lyD3izYCPtLzOU?$*u?T~-iJDK(3TIf)&U|th
zjk!-2ioCIoUjH_g0R^k?)|LMWoBwG)tnc=^b9cUS;|U}irkN1*o6_#tM}T+I%2HJl
zrosO|p7fvZlK!73t$K@G0{}|X|2!#9%gE7i3h&W+r1|QoY6b%=SJN%ctSSBe9Zi@F
z9__y9xP0ZUr<#<Vs#d8weX@WZGoHGaKdY8-YG_H9q+KE5BD`8vGb(~9E?TD)1CMTO
zObYXz;#O|2Skz$!f2&{MNV=%ww18<|K!S(N*>2{I^^3JZggQ{)fHvVz&W+6pq)3ti
z!9XnJ{b2ma@Ik4GevGVKB5b^sp}QmS@Fj)Q762@%ewgc#XF?g<g3MV69h0lR5K|e7
zS9;wAKEzivr!cQ6zhA#D7YANQ&e9{TL`2i3Ia43Kyz&&m7{djc<K+55Z|TCSJB?lp
z&RMj!yx)o53v04Rfe83AWP%vDNW^&uGPE;?9*_RU5LDlY5`thcP97!$56;HNHp44n
zL~!(8055TJSdIHqaPVWA+$jW!YbuT_u(YpUEHl`9ZIZgE8U=Ly^W(tMt2_2M5Ktd2
zHor2pA#gqB^ryMP41_ch9#qd~VLef$ZkP1N@UW%tlGax+f$+?*DpBZXbUa&;591!I
zjx<avu`oyiR%mmqXH$7o{QgFscmr%&-ap%5Ui(kepw_2#LqK8(2~Rsdyhp!67diO7
zJEjzjc%hc<*L&O};r9r_6i-1m8wJVb(*vUwM2gOrtN6g#^@q9gLVw!JooRXHibPli
zO$~to>6f2_LO=15ljp$_1xD`Q%T-%Hi+CUcHxoLJ%bB8waM({HJ{AthxM&$4xpw>&
z)~qgo;6b1%I+Hx9$;au+f^H5XO#2udviAgAWfwD1>eIbLLwd0hXx=X$eo~*N8(gxX
z(2H!!ey+c2(Q&0JGf~0^pbS`FO7h1qr>93=$E++~b3R>P%D!Fsu-(4WAnqhbaE67a
z_`zwuHr?{KRq(e_<Y7V8KP$sIBK14tPR6ZuooY%Nv;uHT<IHl0nRQp&fjeZzs{?Y6
zq^AATzTICMySsOH#)29s@Jc`aN{{*grPkXByH`Bsh4}oK`}s?<ReX(vR#>1QtJYt!
z^!VX&+eDO0B@7(Yvu=)EFx$1dr}$}`YDCQkEt})^1aD--7vtNGE9<9|-OkIndnP-}
zY9YZ&m}kt!)HE`HHq&_Z>kEG%4gyWlT#s#avp#-*Zms+A>NY(5BMIE|qs>O&$Z)3X
zRS0fk>vlsNVA-?CKmcBaqF=`yzET;uIH$hRV&_r-0oRHNDgczsn|ZiOm+QCHZ*?9D
z{-k0MM44Ynm5d@+Um%dGjym_pWK{AMUw#j|q%IT;aG3{WO#UgWAM3i1L<Qn?Q9(%G
z=GEBJ{n>Aa(KHGX1xH=6DDVRH(*83nISQ^U^IDH)<Q~X0_32dR!$5Iei=##100`!t
zdqfOyR<LW>$8Oj$R#{Q6@CQ0}9^bKGzWQ_LjDUQuy<DKs^rJ}_BA?tlc@1zb)V;TJ
z$Y-QQ2H{Nn?ADI$2~q{1zrKxv(<Z5qLrH!>-WU0W13&+{^7vjRKUJg)-7yo77<Jvx
zdDzwMktB%Fp(8m9rieoVf9i}^FIP*teydH>u0}i@LsSLXC;-wIJ=;!<kJIZzZ1x%&
zwnL)>z-qPYbdPlhVEba-<2@N+Oq8S$ZeKt|HLaA4RAl5qSm#4Pw(bQYGWGpvp?oDC
zG8)(7k`k*cThNyeXsdCD1Ixxe<pJ%&e8OYpV8luOKx1!yeqZ0On0FheM3dImJI>lo
zVHAYCqX%Dod@D%WKdXMmJ!<nXP%mBG`$0>0oQGeWJRH0Bl#A&5vzH47X^_r)1Y#cj
z3A^9ukKWvSqjfI4>2QIu`Vwdde)GGGlhjxWooCSiP3Oldw+<vD<$Hy@Lj}w;<h6<a
zih(hqe^Y_iI?UIU0hXXd%Q+by{?XK1UcY#m*T1%Hc35pPKS(y~MWqsceD}hj^&;bw
zNX3P0g->w0i7zdS4n2C>XI5j-6LNO$Oi-?-O8EZ+@S)HB(EkH`j}ITt0RTPke}G@8
zWA_aBM2{owF6n(d%9M_(<^#%^u=Ro%DFaR71-yGXyt4T+i^;t2S|tbsgJn=SHDae&
z8(noFRGW~fH;*rJy)<+J>EREt3i^n;^lL&DTl{Z=<zHsgqilSSm;G)ntcM^%t7SVY
zepl@t9cS6cIexfnf8x3TbfBv)U`@O$;%4u2xq+cs^&7-OWGR_rKaE`%Q~SoDNe&rm
z2>X?!4)(sdCo=7Z<W$J+C6osqgsVZ_<}kSK7uuCiS4uQwiW&((g6ahaVi~!`sF#gN
zzEq<_Q-c+YzdDTai?#U#aBls5=oC#Ve?kQ&?EV_?)j#}>in%E3<;-}44y`dm{RAC!
z2OpHcxQdt2d5bTdg|y0A)&@ZkVaUg{Dztf>#NjLMYi&|CFb&-*6UMz(*!jfKA!7m(
zY^G@X?y%{?Q+JF8zydJdCB6`kz|Qv}9AX5uFj4B;BL(=erR#o?*6xldMT6y_o%*L$
z4aWr1vYlhZ<jHW&YDz)rplqN@#pO`zjj5>3__LdPbPT%h>+%v{xNAImV2Z@irtaoa
zY@lrgal!sq>A`;UIL2=Qd?g&9!dse&_Aw&^{XmQ6(~cTT!ZadKa1<RVm~3cBMoxDK
zz<xwpuf_vY&X_IK(iApr%Fre>zIF_ByPKaG3D^{)pJ=y>8;sp^2pBAyHtEec817Cf
z#YBe$Bam>k_#o<C-`LP;SXhV^8$1Q((&z@<U{a|q@`-BUG`7?f0oDWI-T}C9jR)p*
z<w7Md6D1q=KhN4^8q8oQ2;1;>{z63qsEDOnD4ED&WINO4dR-El)N~u9CD1vMP4f#A
zle+s!d$7@IX|1hkX$MmwNeJY2)+WNof2oysFZ^;CKd$g!U?=VbJ?6L=?Fd-UtWb%0
zl;q@jbsDvQjys9tI+Wqz(g{@nzC*#Bu5{f*_+|)@bsto14&9N|l;7HbWpXE&d*w1>
z_!xUCB&`-l;~|lBFGY4##<!2<>P9Z4j*p4S*2<m`8CwHCgP0J!BK(PvnlJR2Docmb
zTX)f1wy+Wz`K3KhA`p~@_g2j=!peV^`Sijmted$L7aJ+&*8k8K@=9_k<+85Zi*<2_
z7H4GMoE^K~ybAY4gcKV6u8@Yp_*5IFL#8wL!#<je7e=|Jp2+WhN{{shI`Q72aP;@8
znr3v)99XnIKd;QxcT>{3VP#_Uf7<Q*XBsm3WRfo%%tf)IOlPLk_4){^y!dkcHj2mJ
zL>Odd@W-R|aXK%&XBV6L<J<TJ1ou)|OheCG7sdDK{U$}r#H=JmNB2ovc<;0CE|vk>
zndulWat_+3Bc;q^m;ECMu?R6?N|C%p`irA}$8tl}yGLQSRRb(3%N<Rcgwww$JYMId
z3GG*p<f9=z<NNV#HC~*Z7ClFdspBT&Uzd0KoiJ*~f7iVH^jchM5e$@i$}1w1!Wx0D
zj2~!OC9(ESd+{%(m3zPa`1YY1657}!%bBtixHr4{XnN3om5nu^3}LOGzcLG0wfSwD
zc%|KV@jG0EnlNE+%1p0wyVns527PUA{m2b?@+Bzpz{te%r-keLt@2z-zL}|7#dXWf
ztJ^z`fUVqQKMXEo0e{Qra^HP#i09|%{EVN?I@V^twG-d|*GLlZ^QXEg=V6)3P1<$x
zi^(NhdN@Rs7&pGs?qy=&Y((zr0-$B*1i;Xrn?mq+2dhXH2ewGk-ZI0<QXT4#ezRvS
zuYr5|rwfU^{KFsj^oNmbx(NKU<XUx%K@h@aOCAaC>7wsP6}o~J-&`o9g?O@(rAObK
zP9p&ljnZiWNNC?@R*az*`S#lU&)9>vpLD1fd3;7iW)?bf)ed}-faq8G`Gse%e&Xa#
z+&qubNv<P(-PhvcJ|m6$x+^NCP<?+L6jX@tQc|%rDxglQzu;s#{k}IzT>N2UE6y)R
zSY*ygWZ#AmD5%pzf=7i!Fbp<Gbx^um^hzTp^9Jwa<D#6a7e07tY_A$EIDgED#0JjK
zHOa2!b~RV+zgW|jdFs@CLSOv$EzIFdq$UdrV5?s*VN~yql2K(8UaswxS6b&`wso9C
z2IUTr;R!*qppvi+Km{K6VjBR2M@cfM3*Ac}EeX^WrB9oN`M#sgZq&3=%<zc!ZRf8z
z#tlvl>1h65i1E;XwFTm{N!U`mG|)FMgazD-=B^>rY{g@|36#=Zw|{AGK_|v%(0W8c
zZVvp+7UshJ1;+du?&`GZar2J=n5=j|U^yv;j#RA9oc`!`i4Vq=A$PKnsM}A)@w@WN
zk-eDXfpr{b^3PPeaZriP1stvD#oFLbT#uop37nd}sS8p;>be*>`Hm{{R+c5AdF^|O
zL`~Njkq$ET9}M9H0O2%8^4a99Z?v)Rv!`oMo;2;;czAz&{2t2tBGf9&KO;N=MM;HY
zE}OCnPbm$)SOB+wdcsTxS}-V@m!UPofJEKm&RoQ0PMu9R;5GRdPsOigM^9uhr8N$*
z8ZjOARPCoDS-(+$ddhwt)f9cT_5iI>g;FeNeO3VFhEhJ6M6HRFD@uj6%gTEAG=2h?
zx+yZkhW$Cq`+22geU|Oiy=ghKJFZp(k&rWsj*n9i=fnp7W(tMQ0j^%b>0Brmzz;OV
zL9ZGA>h8SR<~1I9qUg_<$TWs%<KeTu0I8E*x_@xSD|q^MohjUvnTQ<yV|#<;I3MI~
ze?D4W2brymBDvB!AaU;?iwEF}aCxRvj2r3Tqg2AavOee6Nwph{o{584M4>f>aP8ZB
zTXt`9VD;{a5xGtm_XBof5Xc3GU76PVvF-C`r609kA^X2ep+n1U?VUfhvWKRQv&c&B
z)>OzP=*_tX>I+ugZCl?Gmg&yM&E57F&!!e{=vBP^cUpDV84wbBVD%42$`<rDl6!mk
z$mV@cnR1^8dv_qHSYGkVqdT4V|0A^dk7wfiztBbp=_UdIUa<ZzwCU6LcQu^yddl`Y
z_H)spZm@DBtHCCVRr<t5Q%DD{(aGj@nkb;RI^_i=jivLdDjt$b+D;_swUZTDGSKs7
zPtX(;ZkQ^LDfh_Q760*!CN_XcB2d^s;ip@;T@4*<hxX4QP0k;&_d1^|Qn6>>jf#;U
zE+?!U=Xi|XEWN@D2qV6fAZb|xR!@~|vI>PC^iVF|;TfZ<VoFyt_w^Odp{Nk%b%TLZ
z-x4OI(Rzl5=o$@C+-TZ=w@QOLpQ>F@{#g~)l1jnloCw9UU|?iOhmHBiC*0gt5<5}}
z5=^aiMg{l}$e!xXkgpLSiwA}ep#>~evhuO!EyT$V^O@Bkhggr$1gTSfx<u#O+7V2p
z@OD~yIy0myBJB>~MMA>FQuVqTwQ3ettVMGsXTp>$kpMYAd?vd3pm#C+ofbl@0A6wp
z3_|Y(xz1|@0rc-~ZW$YoR_1;ZFw$}QPgt#pR!(gU^}#y;T7`5vEmao>caD3TvmlX@
zK6`)Vhn<$;m)<C^tu@r&GlNli9Zc|okP#{2>KU+TC{iL)3PUf!QNpuES3MiYy&u6v
z${dYuzGx`+$$*Jkw05FkI1KEHffacP`xUa4)Ot17iu)q$M!6G$!?4d+-83;+ChIuF
z40tT&&?0G*>-%B;K*~HN1-k$OFxWd7h<O((P2wJXWVCQ8@>Yb5mjPNoijlN1aUxr=
z`(mq<o*l1-0M*(Og*I3_9D&na_-$0r`>d)G?UDJ5n9wWPo4^#=@@ygom=2?66sr<v
zkc7HhKHW8QC{=i#3E|W2;Z=OZdHQjdSG>|sj>pwQ9Vp^M8Xv9dLo{sPW%pW$;4ej4
z*BrhaziZ$U0XDpzCSN!>W@|tG=A~Hvo#W68I5A!%IuxP~hAo?IJ5{&c9Eo9zgrDs0
zhnc0a0fd;Vg802`oP^=3+1ZI5Cv^el8JcM+SttlwhJS*R)#Uh6KawQ=y|v3aRu7+u
z4(^ILMjPvooQ@WDdaNw0uZLz_^^f2jEY|pefgj7N-Y*C(WgbT*zoK!oIw(CA=9Eo4
z?KaH}{&kthRFQzd#FY|!(VMn0GTu(z2J<?-qgNfXb#jtcP{0yi$vkPlME|Yf8WmFK
z4o81F2n{&z>Ngsli6U&lI<xL5o!TSYh|Uz^v(z72V#iBFn#G)TW0AnXBZOC65*hAw
zDX;ocai?S7cSUfa$}<B1PfWcw_gw66Fd63=SKbsP43-8ECr)IfVDLH~P=at%7&kev
zR(1n-r0CH9{Jyv~c+1We^w_L$?T>el#zho%NX4}+BA|(=pixK<eU6bD8itiBhjpyl
z*zEF)U*x^`7BE4JWG3kLgBV?oGBkF@aTQ;56W^~VJ~KDKQWPH*Kt(Gb#M)pTn$XDc
z47@v7LW>|*n)R94Ayx#ZDnTA!+k~Z&4GDXd{fSBh;=yI|;UF^*Gm>UVJ{=qzJyM}`
zN~S)u;_BZUvFmdjp;oM`5oz;j`l^*n&QQ@w414NOM4bjnUiapn5XZ1@Q1i-Q29X<c
znClyQK5nE$7V)}2a$Sk=RSKLhoQ}UGrsnKNDp1X&>H25h#vgupAFy94OYte~jo?8T
zd*}eKJbNxrUx{sX``M}3nBIp(SddZ{J?$UTw*Z_qW6JjxX!_X2+-~Chqruj(i7jhk
zP|4`0uO8pk<Sfw48WQ_=^`I5?wCFM~_pzvFHH8z8OZUod)AXv?JgNV1o4J(4sEr%f
zU1;R;>#;<J9OLh7BdZ{p;qGlnDqXkt9O^DkvuBr2Pt+gkd>8qCQkto(aELOp&cpZq
z3dFs~?;FmGCq*8L#%wd^OSXhsyMio^iYA#MX#HYv=Zqzq_Hlk%C0ixu$prpgU{FG;
zZlf`PT#7PT!@=!#P-nk>r?>;j7d0B4z24dK<NCdd%j2WN#fizn`x`w=R}mOLxd}%+
zqeeL7rH%&}OoO7V?!P9<FLrb4DZ)!aDsk}xHE&4SswDOGneZwK9iJ^9%lpgLK<9wF
z!AX1|8ay5Ja-k2);35xYxRVv>cBYjN_4#{`R~DZ}5}pd4IC_6GI<7bP1*y#souZ0|
zK6H`h-@FC>N;+f8O2VG6%wt-oiFLuqXpfnQu7^&<^-uq6h3=>S_Hn;^m6`is{4{QJ
z)i?bTBN!XwQ<J>nE0@lYwQilj2=vpNwLZJAt*cV7=8q$qQ3sDbyxWj2yksu@Yf=nQ
zN<DVuN1EKxa&yhB+p14gj1aoE{pdo_wbq3FSKY78-%y}@wwH>+W}TfD9#2j;AB(A_
zLw<QQu3TG&TQ1H1RQsZ=%(6vU7%%&~a6HvyvDr_`KI29G+sTM578&WgDIpG#FWg0|
zzPEWzS<}hVMjiCf3kM;-!w+>-GIhd<`@igfe>5|wO2(N2+s!D3I3IsK+74_#F1X)h
z37#!g09}8dI!@GmpTrekBw#XP=nX7RWH}kQZ_j-JU^Ljpm+`c&TrBg3qBidrPlxtp
zapRtflpMKiFR`T@mA=)S)T@kCp~Ac0ObrUhz)VzzMS`7oq>2hIPFD2{#}3k)9I01M
zDj)ZImQ_joqMa|uULygOgDQdLRySm}A|7PK6@Ot1d#Q_VC(^p#Zx=5Bi1Xj9dgtdi
z*6>dz$Z*7-ZeEj2L?2##>xcDzf~7E^m%ac5cwKGzf<973qn};~aTqCw#u)wxl_AmT
z^(CwP6TRT!sa_QXe~X6srf~K-#1-+|3X(3@u~=(nwd<a<`D(YT9=s!t-uVLfYrkm6
z<Vj*k8vbFR(S$87fl;Sr_V7*6G?K15fbR5XU=+~t#&TG)`<QKImgA)YmXN^{id~ou
zOL*AT*f68Xl6Nq2m_`R8vxT!5FhbL31tZ}V!0$9ImCdtori}LY*-~FupP^Xn)MoSr
zJ+V&hPcU<#J@;T{GHmI!gnL7oD1}Wfe$?5=O2Z!%)NL2LI?qN)S6fCy1p_JFcc}uP
zv{VHRx{VFq78kK_lcm<7z^A^xu3G2chB-gCJhmAPZqX**HU7H(O+XwZXQhlZz-jK*
zqa~e{d!cBkOzmr`@O0TSlqOnGeChGG)8wVl`9zM7?I`p`Coi;zqceDIW(6k9J)Z;|
zPIce-zOjEW7xNkX^OUB!Xb~`-$n<8Tc`gw?sk!GyjY%fW=O$Y@l?g?#dk&wfs;JNb
zoMgqRmU)y5>KN?t-6NkOT@geyN}mCknd`q$qfhfx;9Tc;M)hJa8VKR9)C$DGk${p(
zII&;QxZAJgld;OytF3+yhUh%KxT2OS<BuZ)x;NpU`sG;ME^e%OIrP7)rV=z#UX!pL
zW@SgkH!_tir)E>U?{quN{$lb8Y>it+)9*n5Z8PwDJIx9>sFW8tu8>od-YbdX5?v6!
z%=3NkY$yKSj6is!TOSJ&gl_Bf`^SqoHetMfdd0K|w34Uv4P|?4^m<(Fr61GnTlf+7
z2BrG7->cCPLR1MktXDL}@qvajmBqyoK-Z|NHYu5n(}mzJ<?LHHS%H_<XHS20OfW`|
zt2Vz&I2vX<3Mwe&O|{#PSMue2?+?BgYpH*885mjOK%!+Cxsf>pK|re~>Kc1)GQogq
zG#HHjiaGT^Uia#&=occ)IulDC$w=spu;zEOtDicJMwh{tT3<3P9gv7-Q;wOR-Oh4m
zJPQ<!W8T^D?$DfS?r!?Ds7vx7G<6!Y-o|>4DON>U8Th}2tpqYY1Nq4U7OV#$W+Xgc
zw_nO&{Qzvhh-qZ591UKWJ*6*!sHZ|_e>d0X_J*Jkqt*g_x1eFJlu=bBE@wO9&%4ZP
zJxL_r`;Iu3m)L%iA}iDsz^d!(_Ii^h>!lxBtmBIvgpa}6X+;caio^j5Ji#cHXH{<M
z;AiaoC|cd%^5K?<m^lN6C+>s>yO0-2Q1kZg7Wvf4p3gm}l0mOfV|&qj`~6L}Zp(X|
z&lT-Jab-K8Fd|g_tReprugdGkNHAdPI&7+>J|?nN>*>SGb3+F(Uk>^Ef)I_3ET2ZN
zXZK<<zlqCIGGY&atLixjKY6^Uv8%+@7tp(p!<ejB`f!_`KwGrpb05C*yGwJyTiM{P
z>T5-d>f?us*x0T<qGv9Uyx>jB^d?wt-RE?&E4L1R6neUiW>mo%odultu6<=)p?E2Y
zlz55EG>T02Iyy3|z80k&4M0ZD?#zN@IN#hy4FE8g`k$-23soI-8-COrjM}qrvp)|;
z4)k;STB85@$GN^Xj`voW4+#)aJ0E0p&8yI8<ir+-v*|bQ^~cAs7ksul9I>oZ)z`5C
zL-m;xZNfP^k83d|?^+q{&cesg-r&*Dx^p<+9dTQoYnASpjhChBSA;3xH_?F%7%PYM
zQYwX>^8?Z95|+uwCyeup3tK?jX4or+q=B83j6;u;0wQk1%{j*g$a#1W?_T$2mP~Vo
z$>0{@+EFugs8|{qi5!v4m>lEaw%x~FU3J8NH`Im(Pqf@#1?!`wMRu`q=<H-gXR8FE
z74T0=ZN6W+zBBpVRUvx1ZJ<o1lIcin>_MQ&hjr)&eEKoYrOA>?0w7#{hTjc5G1I7)
z(0iacs!A!7je^GPN<%F_<~?@dRm$OTsiY)Fk$|AsttwGj0`xRsK>n{y5ZBwWc@m%?
zMI-0^Z&C)81;y1`F6(2GMv|3ed){n(+$`RpBZ>Nf=Eoe_r#(5lQwnTfHG;3dc-}h1
zzKGQhQa7$UW)8n61a428eQztMN0jFR%P0M^RW?2P#XinkNi1$r1|mrf@{Sh(Vs(X|
zoQxJ?PD+11dEJTm7jvwQdXpslKXOdib3g3=a?CP2w`Bkz*#2LRIc4CNn5C8al<jf+
z&~fC;u-W&D29h`+Wkw{9{_gE+mDJ3XRpSTkPhL81$o2Aa!NR@uALflFS;UQlQ49uI
zXh1vV-=y%Cru2CdzpyeJz5&s+NiNgP`JQjw9kts$UAHju{1X0vlz&vZmr;7uk#Kf5
za<g>Sq;&l%MFM09hSLfIhPPoFHqB*1CeR)9am7do^e)P>T;cu?#nJMGzQ5x$3`)Dk
zRY@lo^l%NTq7WMeo)%&^%cCFL<mnY~Iu5R*EZ>Ak`N+dv#C#XxkC7ASDXHMGjmy*o
zfF=_>TKZa=RXG5cxjFUCYb$BjT3A-3sy$u^GFTC_02>+jxXvF_$Z@fFGe7#gi0rx)
zEn{?ks0nc2gOqF?orc!67+2)vJ1Phx8ur=&2{4sKHLYCgWOxcX)c7bMpM1ILA?I-F
z#BjY5fZaHA0#ezs9I8z48IZ6Cg(am29U<(-39;m1Ek<fN#hCn!1kZ=IB+5|^Km(yD
z4e?!4lxaU&pS=`XCdCT10Krd}R$rwWyY_t7-UuE`jbm*kdoZAyO~QT<Ucn*qqC)9i
zHH^_7)+4aIi7q%G06rl35#XVtBLx9SwDKumE4)wJ>dw0_ygM${zXI&>t1k$UOqr5M
z2$fw1&vm}wyQafOh>lfgC5WMDKLU^%LM-dLo(_I3ymzi*74>}eMs;zWs1B=0+KV1p
z6x1DC%`F9>A#sU+qOHj@oA+TH1HEEyo@vX+%56ETH+tnJ(F07TjvDcMN82`LMT+)>
z??6E7;N_V%Jg_-j;9;L2C{h@C)ue9fUw7_eU3<oHxCB@VZ*hI!CU<lwvz-Jth}=U3
zi345}tRAjGXl_DmDkNphU|I~pfk=tlhQpM#L7g-7r{=Wo-P;W>wFqe>D^>a7d?1*V
zYmClF2c^FAADQ8^+Ai&Oh2a;9K#)45S3Fb-3PB>I_`vVbQY|rM6{9nxN9EP=s3{A2
zE&x(7v5-8dKp!WSV*DqcY%W<-yW&#*$cQ97!v5Ho?0x9##T)Ota;jlNb~u8ITeBJ;
z)dGjxFUCukZ!Z?%m~a@cR_G!T%B=juYmGo#_3F}ZYh=I7_1mlBKQg($X(r+NCF9cf
z%IX#`EDa$UUVf_sZkkD~c$k|pSrI%Jx)GjSj_<j%gMS<VA+|XbszpTDP^M&+!k@U=
z{l2&l{mp!-0Ctr!eaSud?T!_+Ou<`fu%6V|JC;bEA2rD*E1?Js8s|1uS9CheEL}9a
zhh>dWU4`2lbuPu1mcUQ5SEI6#kXSr}rYQxMvPd<ldB{50nBT~$TA-`h;|xhHE1<x{
zxQ73Y#6&{sBuG)wdms#)s`6N@wAKM4W8E4#mLypVED{tm6^qxcx6cWETlCxfaN158
z0AUC!D@Jd%ojN#1)tl1OFqVW$$Z|-OmXFDuMalif>RG0gNYXY%3i<q*n3tcw2aGDk
z>nO|`jQPy{T*1^EFu0uXP2-Mbzh7eQ<GujptqGe-0q!V&b7&9pi0Yo`ZPiT_SvuHY
zFmPYJQhvX7F!}BcFFP8O6>F|L4v(ZAN+oZKx@lEd#rj(I7rI(oXXm_2=0jEamwZoa
zc=S?G@JW4LPFH~^qANO4^I#v`(%5FQL_y?t%ZT}d6WEho%G<X#DUx`s^-1Ig<8}2{
zVRk!14v`9|B{0M#XujjQ;-e1;vSy@fF;L`{mSUKt1#yuN2_KYB=T=0*(;W~PB_}0P
z&~*^}4J!f5Y?<G*!PCtYE1#$u6Je7soBS(wE?##=NX@_P<l+*kfZ{rP8TC^R(4(06
zsfNpBwWgeqUv#y$Oor_V&e<|oef!N|dXb}zDH0?y0)O7}-Ja39CxRExlpt`wXORD1
z<JocFPto>rS#rMk=_P&vd@gs7!7SxxpG#fT_pc~!s(y;(dWN-WngL);<Dgb&x!yL2
z`&=uS%~e~jEs^)9tmYH>OXLuo53lSfgjA&P8`3x)4@I!H3B?*uj<JkTSn?uk*@EJ)
zP25>+a+k$c-#h!7>R`N4PHV=&_k!)IO(wd27WEwsrmeljXO%Fll}*1*%S3~CV5Xvq
z`@*1nI31A`aXjIXkzLjXai!S3xT0+zH?*21l&=W=9A5$0$!bX?llOx=o#_r3eWH}s
z!?NYbQ4x{wlCKAq$_Nas<#7rmso9skRhGgw8Q4)Iv$K*}D!(eaeR1>Qbbss>3;8?T
zhJVMIP{)uaph9urGIWWz$(?(bSP2Re4^6*HVptxc=<`k__rCrnpfT$XUK(yPRUuYx
zn@!w!${`B84J^7)Qlp|irNs(~wZEdO(L#$9fW&E$kOl*xq&b99y58M;`+OqFqdQuJ
zFL8d1Q&3k1(<0bm4Z}a{d)EUjCA`cER~V!weO&1v3dX&@9p@L?S$<401;3!SPF}@X
zZ~3zvcC#p|*%z@_J5-hf*4}Z|q@-6te-sw|Dk*TJF<xvU7Kff7y<{<p+hPZr<KyG;
zd=YBY`5(P=@<)Ce`OXAWhYxS}l%5hqVxu6Th6Qz7`Fm^{ow%iZ4@3W^WJ=(ZpFX&C
zn)Btd-SyI2S>Z!O#sT9|``?dSQ*V$yE{3vDe5s85?-yoK!K`faJ$mp+(m}`h`b4g3
zOjXfD=P_D{z2l7|217+#q>oct#r5N#vP0Gt{=<W$bU$J4N+)O`ly6PGaBtz;oL+H#
z_BYPG*u{q{4xVQdO2QmOTX(<U8nr&M=!%YNFE#4nDVC7Y<|i2#MM8VsUjm+vBJ-I2
zD2Vv^)Rm^c6VRT<UgX;Bl2dsetaqJ0Pb7_oSF_pvRrld|L3JbfRB!P82vGAfxC3#3
z!J@~~W9Ca;NP#MoYll#^cJ;^8xri#GC*~dh5re0}nz_H-(PKa7J=DES^AxI@T-Msm
zYyV<}t-VdKkU+#&e!5@k+~HRJ=u)P-A**5J%Xz!;?ctxd&ZD`JXs%B9bvh?H;`^y1
zudYL+_eawK<@u+Bvu4IBBXV_{;__D8THSLsn@voV|6V=KwsNiM`xF%BHs`NJ#!whp
zKuku30g}r4wFf7-fdZ2oU!JQzytXuJ(T{HrY<@8KYpZ(^+aAc_N80p(CFrY~5=7k}
zwsRI-Ms4z$+(%k$KH|SR+VAT+Y8SZv5i@(WzjAuyG#YihpS`diECzxfeGHg=d=5lP
zc-;TP)#!z!slk~Q^Xxk&bTq{hQe&AB(8T#VK9D9DxXtN6h6U^~UpCzzl34c*vQXTe
zyesa=fu&&#{cAWlO{khbH+eSI=v*u*u>A4p=Cx4HBhls4rJ(5d2kDf{qp$=5rb;6Z
z2D;oPN?_>ktWaM4R8)oP&)qjO&iCS!gXYIpt#%XgmICNV=3jgun^{&@xi<C|Xge>p
zz8caL19IV0XdxAXQw+-Fv`RsoJ<Rz6r7bFz5BEg_qpeTEf1WYNz(H2caL?ZtVJM&0
zWl9VYZwpZ{cQ-~X=yRaJ>2<laH6)|^s0^4k&-2Uq9Hsl%YoqSp{<MEHiH{CF1|wz7
zQbh2mau~&<!Im_I2L~ddQWoC2sA0Y771IrS&bqDkfA;=Us=+Y(^Uu}^Y@7;%t2D<y
znc^A*o_sMi?Knzx)?fXXg`Gw26cxqxhpt2)>NDp{b<a24lxt@#&X#;H#x62f<R1AS
z;c*Yz*;AO3Y~oU(QJJw{^nkHB-`RQ@WO&}l&#h;OqA~rdL@C~X<&Re@o;*GkbZvlZ
z(zw>}JP_1PAAAA<;POz?_x3*ifwAq5QZdjbLUCV!LPI$>;&ZYxo#i)t@OG0URyGQt
zmO?$Vx7YUXFG*nSfYxHJ-@bPVtdyK92_{9xfTRQhHgOYPx}ARXZm~7psM9;aSdNa(
zOp9!SmU|hx?<<R42aRsEo|P4s+oXx%LupZtVrdyem-P2N3$7pzH1CiEcDRFR%mYY(
zq1pNIu~Gsr8FrnYyY>8zAKt`2Y|%2+uJf`HqvM%|WhPMa(*k~t(?4b1B3=-3p5l4v
zdUw^CHPo)Wj;~@Oj_I&);B{xG8fF9_`!Ce=QIt%i03JE!zfkyZ>k(8qy#l$KSZa=W
z!Z4Bh?YI_2ZiALz+>12v2&15P@kkz0z@9_2sqyOvQXVavNC<%-Yp!wKUa8UZv?edb
zK>_xy9q9o?*TI-Lz$YW;0O9F<+w1?}`8QR^ZFO!(1qE1abds<Nety2l@#ERhyjG_6
z0R5fI^VkE1`W-!LeOY*QO<wh#n_L!)!SRt;8F4IEj8~OL%_jrTlU_D^{4dR3i|6IC
zj`2ce29Lm`iLwe@AgEf~Y=eb+s6^iz34lhEzgnUBW;I7_FsrvZV-VQF%|3Tkr{-a_
z4wh)&&5Gz0%0r=iL0sTlVZ#BbM(UgT=1)(su`ThnOZN7`R(-y`ywQ7rg6VKB<h0`<
z($8;gom5IO?~U%ho(kJDnhc9GgaYCX!z(hl0oE3|b-Go&pS+p;x<!G%e<M-r-xi?`
ztiHADl5`E&3gLG;Sl|n!h}&WJI-^xbriDXFjB$wYe0F|nTg(ciPkhL-e>>eir4lZy
z?R0IX-ms63Pgkch3j+GsV{y8m82G9Ef2ReL-<0V$i23?#6&>>%##hzq-`N#kU;28C
z^ZKLyxO@+;tVEyJ|CIigC|!?-%W9d~>F`+4ix@zt3KaQazchFSg1z`a22YUAR?E`H
z>bHw$2aP2cCHcv|KH>VLV3-%>^7iwvRgv;VrN%sTKuLwGDj5eaNG{e~>qtZZ1<1Qu
zh{u4x#S{Cs{)+@?Q}y$^H$*50|9ecu!-e6ISn>+(Q~TQX-I`D<$oBV5jWP0xJhf9F
z5JY-F9Ky0fVC{w4hDLjOn{v5vwxAHRnpNp9J}^YM7lcp^zm<ixg9wPzv?W#f&V4A)
z6{+XitM*C?S_sQq!Izz)uMf5D9hEUeYzwVIM)mgZ<haag{zBQ&-zd<I?>Wqf<sOfC
z)ap83mz1ILO}D)F$tAw5r+TE7e=WZL>#!`=8q`NC3_j;{n)lwyCJ`&=HA)oVU^Ytr
zR_oFGNHO3(U~BaHg+R^W+=h_?F*22DzIc{?i4U5~>sPgMNd?rv>42$O-0#1;t~wbn
zkpG$uLxUqCdB~*MKQZc<H14KLe1#EQJb2X;>a>aRRB1x4F4VV%k(rJcB2GK}OWJ&4
z>&v3OshD&pvh?aMjj{Tp)n{-f;Whlgkb)Ug`(3u@qGRiq$T&s6>Z=5ZVjjh+?(3|N
zm(r(np-}5S(s?o^mwBI^HHMdPwbzLEYw+`c_PPEetHLzBI{Dx42f7jWuL|6*LURH%
z2f26H1fGlrI_oxiP5V7DGBTr5%9dWc{~H0Vix1^+2O-0&8mo3nxV2?vpVNj%<=SHR
zEhDVXa_klCAc6hPtLrHP`HhQ3nWXzz-g^2%jvPLZx0-&f1UuhV*xHm<vqR7kgvb@D
z%*BF=B#8|IjN<*m)_e5KjQ5DjmRUa<V&Q1K=op+|N#fpmNpu(=lOTYrscA+gUPB{|
zql;uiJI>oo=64D{=)l<2#T}#g<nQsDkH#YZO(>~NS-wj&V<F1`y>e0|CItlwLFvvz
zA(Qm}pys9|T{u(w!H!6q$G_>qpidr&z50|D_iJ)B>}uYd;!x7&egTnk>q}2dIl(Ha
zZ0s)Fwtx3`MO1<JlLFXn+#rIp)v3{pNbU@L#x0*w1-IMjO(T2i&T<0<N~*^JB|p$X
zrHgwWmb4v|0r?L1W2m2>8vbcfbCee!Rw~BVSP(M`Jd`(ISarU2HNGTCe}ozz-hy5-
zriF--@{foJW{O@MJ!>Y0h^iBH(POkCqtUpV{+rPHK!}+UCvNg)83UF#qKv}(h?N*6
zzfsF49xv?+=zh5*h2(tv5uuOdAyKIA2IjQGAp)!R!|Rnd0;lt0gQl(dpCMkz-DC4G
zsgZt;RAsODR|?O_^}+X>m$o^ASd?JMm(M>8v$_`at!-cTGW=WaFs2YLooK?M%=g?m
zi;kAQ%4~Ic%a0urh5^+W6)?IHkWpu$VNP9T(YmG!^1+3Vao6LRKXiD8fABJQx10d|
z+&P00ij#RLc`&R>B3miI87lFV(}Ra5OC_C?Fr~U)&p{>@p11+Fbg@8no*(Z}5UPNN
zP4U9N3kT~m&TF4vE$2Tp4i89<BVIBl5r;N)c5bpFKL`PUL8CGYko+5@VBdbdxg|nf
zSKTqc-00o;3UB@UUM7{Fp+aaR5JXxC4Ssmg3Lr{bWP&8$*9qbS24}u?f%+Hxpg&|&
zy}o}Id(8~=fvGt*O~~YIE~x8`71GoSf6Z=1AQO8@AMhk*1UvODVsaPxvoUCZ<k1gv
zd`VI1*c@w#0MECh6%fvn){L*}LkJ^K{R@Bp0cxroqL4VhhC1YN+X0iTuEv`LiU;6-
zba|0v1@_^LNF)QUQ}%J_VV<N2eI-6*$@02n#^iob$V=P2T=KqX04FFclG-tHx_osA
zS{atQ_AOb8#|8BK-|TOLo;3U{0KwEgl<p?Eh`b-oeAo))i*_>L8~gf>wcYO6I4kn{
ze9LK?3ICJM`wlYaYMlfIhrp1#tOFGLIG3B7H(xq=Ca+VjzD>qtrE}>|1xRRgN@C#6
zCMi@IyRYC<9gOT~?V#%ztT^Aa-}`(h;a1@=u+H*5Ta;S7q2e|HGfG5$|1s!h-s$}d
zIidQ=zb4S=5trD`ZOR#n`|kfi55k}O;r~Yu_K2Dd0su?Y|LDO(f8R7Ct<+<e%J$J_
zNt}0ZFcOU!egSP<hBg^C5taF$IP^;Ya)Y(fzkW~_OCYDA<7%lT*J+`FJBr|D{u8*S
zs&dJ`k%@^}?uVr#nmP;8@03K)PgSj}Wsgha{Rg*^O3k7S7p<i2E4NNeul=0XQ9Xz1
z_HAh&lnsembYm1(Zw%)~enQVjFWGJH-kWXCf4;<Ad5Z&TRy!5a1}s}IuDb(`nYsX2
zGd2j3Tpy58!SQxdm8mPG6^aPe#j4VU@b2*ER>jtJ3%sN%X5u6nBZiPMp%>)9MNx7X
z^Tc2$X-UGH%{SxqxepH`xAhA#HB0o@zf41QNKI3ih`S5%zbj|)n|Kf9e#-YI*r0_g
z*OM_o5XN7TN{V<V&+Q0;&`p!?JwHiE^FhX!FmFaajS4>{y9<7L5r(AruoCx!6`NC?
zsbm&|B^3&|j(oEiMH`RMI{yJ3(9V*`lJGL!;Rb!5A(*}m{1t=#8M|9I*c&tQF&I4P
zec8M)^Lk}A0hQ;!XCPrSbO|cN8_C6XGD-&i3SXrSVxa_zLKpM>i!$6p8M|CzQsL0r
zdtyZ3!Q&ziYmLI`PpOrK=R0}PQ8<79!}>CmJ&Y<1tKNjKIpoPhkbG!!^X>D%8E|Ya
zgt1O@+T-zFX09GGJi5<F-In$rCh`HUH0Q)~eRGlp$2QD`H%PEsOInLYDr$O}lSv9R
zi(Q*A#r&@{Kj*nLevA8FiVCBev#TQ!VuFd1rgRqnz{_KVi_)ec3l>UOPzz&3T}Wh(
zzegtAM>~4DKMPD_V(<wAT}sK{KbPnqVaHz>@b$QOyg6Zk(*7f?l-Hu+>yc@5)cl0I
z7}#?rmVwTYRz^XN8AV&Ti`Cjr9&Ijvf4RT?vafd8iRZqdiS`91PgpM+KpX7#<^-If
zWEpV1Z8c!5#oqJE4H|bdr&te$5{e%JqZzoby|MRE@-NNZFW(~vi(g(hsWCo&o0Ekf
zBq;r?PAKQzr41A)k%$!U$G^$&Tn;?*C=~H0$nT!ygyAiAa9r8#sR>nVHFK(uNYgn6
zD`v$ws7<z&HdJ?Vcy=R%l}YUFH=cY3vJ~acbNPB=)}sa1kz=lrRhdZ5CHX{8pJx4g
zJaXj{Le#`U-dVvVKt+qFee68p%WVgLb%L%Pk(47QeigjMMWoCB6c-0aO58=+CYOog
z6b_J`vepRCFZi7&?|-h2*`IOY_)(N(#%qmF)YA3r17QmB5BiBagZa?{Ik(wj1$2rl
zB$>}KamU$XW-e=-G-Dbe>VK1Y<XjWYb!6SQnB~qJe|!P(uf!0L3`ZojsGuOT*I9-=
z6Srwy*pV7O#dw;zz}i5;^}7+P<JP-rM*G=_+yJIY>UqJKowk+DVI3pd%K@*dcu-je
zgzy&$4?6aIePj^DIEaAj#vnK&5sBoNELGD<Ge`Wi+2r5M#bLMc4$C8hpL?n67l(Wf
z5=3F%m_+CRD5#|B8pl}A{i+PCbZ>2H&Pjn}5ZsITTsTA1{=8^cd%JCu^8?+m<f86u
zSYexLw4xJQM0|nCYrIAQ6~JS2Bd6f}r4*wPsj~FDj0#MT!u*LQcx}?FBFYZ)g2nOY
zoh}yc;{8EqJ`jQ@9~{orwHndsIyY{^m97H+TOCW^q>JEYzha(9RwYVo!FuC1eESl7
z9~1NN+CjAQ<QXTj5&kc+E|$Kz?$%mmZgsk8oy2+mD=-$N34ilh)tf%%FQ57zXt(<7
zJ!6otQbp#w!@-e(2T+|2s|@eYsFt2pJ3b0Z+&()@Huyvv;@51+Xy4wqfr^fcsMjI!
zQ8eQa)DnVD|G9%#DUOVUI_ZgXvdG5YF}!k-T6<}EDlo{Fe_7)_Y$EduU!fdGl4Dn#
z%v%r#-Pr8Wz$7EZRt0%ML20Y@qDX6aKKdyA51;m0BAh=Q71kQIJ+z;FOQWeisW^s?
zeP@$?+R35dyHLVGW?~{*p7_rYrWY{`o5_sB{uxygL^(Km78vZOS1oCxO_$R)xs*fT
z*7r|YevaWQ>-KNQTTQfRhBz54uXVrX;Ub?K`P_CtGzvc~h=@G{t)sI;vEErLkrkp6
zN1yyW01u{uYwKYk(a6Qr=4bYU)U+{j?pw1o?dv3()053sm7q<yD$Mb7+*@D1vfq9)
z%eVLbhle$F*5U+xF3ahbR!ZdGa(}|(s|l8;3aGm}x$pUP>K&V0IJ@U#YU(~9N^ios
zGHNy1f<J7B%uh?oQZQwtWh$q}U-q39m0zsXka^UWN0%UJ9EgXoWYt;{k>AL%8~6{N
zZ8ex1%xdgK5gQ9#H9!kk*D>DSX)w$3^`ziGI)ER|ui{jmsvh}66sMv*%;S(Ztl_sK
zCO(IY8}AASt%q_4G%Vx~Nmw9!rsloupS`O)Zf=gVuGaE#6C?s+ai|OPxb+(a@NmGV
z`!!_Yn5z~y@fbs5i&yDl511Nh$Nc!QF|g;aTv~G7VaxGmK{=&%-1X7Pr2Qm@tx4k;
z8TEay>^nSG?6>uhicx{Q-_GH|4tdMMXtxVqkGPkTN&Rt)$w%M2mTni~7EJ52+u_Nj
zxkK6Y%rwQ=bkLsA(*ga!NF(vnukh`bzg=_zFW*VU&B~rCXbC&>6s^+YkxSf>yo=Yg
z4(CFho<FyO^_p6v1Vz@o${bvxnqO^HE}$I|BeT9gzO#ARSh%Q0<(RDDSGz>X^lWof
z(tkNd9z*4jv|O?nLG}#S*DYMCOk}ix>fF_t&bxc1X<f^2WR`V$mfSRskYK^DeB)FJ
z@ky`XX{#1N<-SZ~vR%}XwsDc7nBT;Vnw##LZ)Gu!Q2sP@C@B<9gcg5@Bh0r3rZ%q~
zI-Qr*RBy-(M5m<Vyby{4yg0naZcnuD#>6s*|6}Ew4T<^ClPI*8l+GES6c3D5-Ps`Y
z-7F|+FvTnZKgX_r%6PH?j1-G1#!pIuSM3YckGnA?5nt7MH93F$B{g-Oj6ETs$l#}z
zqxtjps|=PJh=3;7MMA*=>)YJHk(A1Cx*Dw&o-O&3skJo)Ck$qIkqJELn16h@ET4I#
zM2-b`X>U9NNr#Paq=rZI-tO%4*({Uj6y;p|F<aZQzxTH}x_T~U1i=m2BkcYZ(_{`a
zwEBw4_DHdjWQ4ZNeyb%5(eET+c!)1+w(46)o2C^Z|NV07T`j515a1Q}G(1Du%ImmJ
z5ixfYl^dY*4^^tHtkor7yi-Ae0W}yVS>;e;-ro<cAr^;pks@2*U}tV-S(8JiSTNOs
zuBev%nr6HG68^XPf*X1AE<{3nPuw!3BCPzamh_ji>rJD<>52h%836!Oa>6k^Y%pFl
zChjI369rNz&LyM;L#Wb{(n3zEAkNvn`riJN{5y!1Ql?%;9eMg{m0_L`@try@)Hy{|
zGlmdFz7VL^P?|UY#?|-nE6w@6_3SkA<_+0kDHcdN)Mm}TO6M#86zz@Y&3pt)oOSRT
z88ogadn!;q`Q#yiT%q_{Hw?W1lLr11KF1(5B8#b22|Guj7k($7N!Wr>*4|r$JC-4V
ztc?ktF9_|y5Qt6LW;zE$tVw&wGR>MaGp(&R-32$#d@VinbRDkp({`8VZ*m%Wf;-b`
znGiYZQ4ra0BeE^m@mA$CgfY_WUZ20?S#Q*+n0NhY^c)!$pJt19z(+PM>YaIQOrvb9
zJthe?!ul8Zj`FGB8JFKX@N9R_me}L5UY1XAWH>7C8tfHdT*T~W)=|1!Ijp2)MjB4=
zHSOiK+zXXjJ&Rrky5NM$ChH3&TUD>IF%`~>6ONVuWg*yAw2oO1jb3o|uNSoUkTS7z
zGVkL(mChQg+!?vErw{z>i0!#yOiyHB?@6q@*kI6UY#n;osL(o;@FnoXon+7pP{vo&
zo{~(QmxN7)%z??mWA6Ej6b8{;j6Qlh<)xcG;l8O)Sr8Mhdsmn4oXJ(K!sC;pHWdik
zq`+NlTAS;hvFG?Pv=>ygtJ_+|i;bG=@nz}b_Lik0*HF4|)%KdX2p#`zWFiwcJ|7B0
zRZFhstEZ~ddfay2Pl`1wvO>_?FO+xFHR*u|ECKl}{_F=h9UqQQiyM%C9kHLoWikRA
z88yXUzC>aFGT5<EXVbxeeqCoaZ3s19vp5E=`%lh1@`tu?QqSu5RSx$*=2a_039v6*
zG2k5!w><_8cmE$>Ul|Zb(}X#TED+q?g9LX7?oM!bcTI3x+}&M5a1ZV-3GNmkBtUR?
zyM4dA-}k$xXS#Yyo|3M97RZ|Lzx#DwR+dz1mVs<e?L#_jmUNU~cjxzd%-DZTh<)Bv
zz5^Ha7)XIvqe!T+Xn7eF$9Ni4ScxBS^VQxrsa))j8j4JF=Sa41&$7E(Qs9MBnX>cl
zUXH^^*Yq&V&5jsX1&igHWmYhb3Q^lf(wM5QBo)mJ+jou&<o;(v_ET>;`EKZG$h)qN
zLrEJH&G@FYR4<4jk;ZMmV^cVa4&HsgbyqbOwA|TD8K9@!8!EMgug1~=g>^{c^Si`T
zg>^Ux*Qe!OSfA>&+?t;Zd#oECZdRFCm1HjDRI=VSPWK!r<sx^)?zXEgdS?e4q66G`
zUAM!6pH}mSV{{`jBoZ<j(ewvaw3+#GT1$%0q4fw1vi>{#*>iv7kQhh^s2h6!-VWQp
z`3p)Fr;GsZJH|eLvhcHG+d~j*<ZxW=Bm*X*IeB=0$K~Vzfb=|_ebnQ&$0q0J^|wv7
z$!YHJDa=_;MU!|o%0U^JGdM^`g&8<3x<PTrJ>~a5_pRsiuQ}0qQbY<|u4;J3bg!Mx
zf=6a(4+1Jp9kLb-k!MLbSh<}=@YW7a(i71u^p#qwmPPcH57Z7VyNxHKlZNeIPON*~
zC$nQXj6S(0_41v@^!_vR4o0P%fM3$t8G^4(nVYp=_Qz0Q!m^rFWkGYYX+mRTS(twI
z47@$=<@)%@@}Y4v24lA5lmv`{jY0pr3zeDAQXfw<ohv#CoH2lrWn07XlKJ(c+1lk*
zTtc3o_kOQ4`7>lo-(k8V>(znp!5*f2(#ngBowC+jbWv<vF}+7rWqK)d<><lF;QQky
zY%Ndyr{|weAFr4=_MBk!x^k#?zEcr%vUs(?fA$2I*CTuf>BrQ!6J{OEC*}#G(q@EI
z%5M^Fwzwa48hyVHcdpY92z!}`&47niT3fv{wsA(I=@?7&&badtqjiSG_m0G_lU(@s
zM@*Auj3B=9^550^v2M%^^Vb_xE~a#2CcO3q)ypvADZZ%8-a$oXmdlh+elR6q<w<S{
z=XE~V(R;y-36#>^t9m6R#GK1*Hdr3G8yI)AN|h9({;ZA8D3=U8>!-`Kp9l=u&}6Oj
z07^G-3g@!l>CE@1$xce7uTWvo&m}YgUida@ZiOOBRFY)5EA-=2_(vi`HNEh&SRS91
z#ITBBegUy*GG8tA1)00`SnrxDKJ@$zPV#qRfH2C(F6_E~_Kj%1zweFvGT+y~KVWC0
zZ!3WiSw;V8Yxxs~uPpTE&Hs0T9uvn&jfHAaRbPnXg@Us_Uk>A?k);8l#fhshR-}EQ
zw)*0F?C-Wi^0+0k&sy5ry3&70?1r35;@yH2Xk;Df(j&Z|*4p+qEU=BG{CUV-j7dZ;
zm+ptAb5}TsU6&Zt#l51;%Rk@z?fFF&1D6=tMmYJPIDfqtGjDu$q-)#$^;m4i4AbBr
zLuQ(`aQ($Cjs2_K<G-8Q!&f6s9`HjS2KKifJ43-^ZL%if0p?b}Kc7g>h-;e;P5TTG
z7S3pHyUDCVB}Z4=Iy<;G=FwcHQ0^14I{scwROKn}%MNS%`EJUax6Fd^cZxZmTZGxf
z-xiuQb&!VJ696(bMH!{dAohdQ5*@x7fBl3su=jCyy-xQ^8S4s0J5B`E#yIi2G;VTw
zxbnuY%IIbkdVc^|TWXEFf5c`;KGgg7t(C>Eo6;YsB)rHpV9l;Xc3bMm4%8ueyZK>>
z?$Gskh|EFmpnrZ;n!cA(wI~}Ek-)l?0K%72b$n8&3plxX5(3|Pf*4X$CIR5A=O%Z4
zrE_{E_C*0RY$#x7W7D>>Gt%KZt?*3_x%YJ#m#MdobS58CVPOl;KipPk#D#I~*xj!8
zlX$cl_YZy2+`V|+vtf)GLiG(gOrfotKAv$|XX9Wz6C&L|aGF@Eyyiak1TCL>;ed4V
zZr8tXU$4DXREnxhPTL+|x2km-Z|l0QGQ@A%DV$Mp$gn9<5#d;c$JP!u!|-858@~HX
z+UK!>=}Yzlj03IYTE=@QYdhr7j^7V?a<`^`@Oe5R54;{02kjMqwWbH|%WrYQ6&|ZI
zkg$Vbkws^FZ={aB9#?rmeYnI{39l&1ghe`V_%TvFFNfTo3zc8A43f^kA5(CuzGV&k
z3BpQ^#Hq%A->b`2Z2xKOw0gg~`%D3O-;1snq+S(y__tkdF>Dn|?;VBem)R3-kw-Hj
zqgp9ThNS1m&&#<50>_c$Wkrg`La8EVV0H<~ZAM%T<IV6NF{~B0cj|v%Mo8n8+yB~c
zZDp;!Gv93Pr0LyoThbhQ{>YPhH_Mj*7uHB~`H7cY`l8Co@Odmgi7P6T4+fJf`h_ky
zH?P#lf+LFDq9)Gnf}dP-OE~i$fP7K|Y~0#q%=Ue2xFsd!mx4opA(V2e(<7O)@Hnpr
z&jj-$bD@=svNFuO+hhbT?9lIJ`xAr!MBLQij$4PQTBqywC)R;C)#DQdex|D~65ORx
zf4Eh5$sQ`8vanN6?6)DwV3(xuExG6D%DN{z3kpc{%o=lrDmSgF<Ln!a^4kAR9W6O3
zVJU&V2j^s5oF6s=;{I66!MPgOX|?o3=1mJlI4TQ9)g;`Q96gdb1Rf@o_grHw_$D?}
z3_=F>VPLTW$$;v$F7FMs?;63W@-!d5;7<IoUlzpaY!j+&Cl7x}MH(r`Ppm|41WP_k
z1ETwtrUz_JSJh=362Q=a-}|v_#RYQZsnr5L(b$A%>;_Ngr`yH|UZ@jOx}dt|h>uxl
z7#4g$pYdlASy=~Hf4-%=j-hhkkfuhr@GoM0OTdZPE9je!phklVsQA=Lq<Bw&S`?}n
zpo;Ocwv0D+blbg9M4rEW;&<|BJ0scK!!#a2dPlCZ$F;xszXlIMf7U97soFMFZ_j#f
zs=rG8ZEV{EaRuB}Rc6i*kROH9N3%TN&PBX&r6PZ^(r>i?`ugL{p9Ec_&CMhw&xn<Q
zQ1SlJGl=gJhKm2COdBu$)1#7NuBEyNmP)Xn{Y5tVsOFn1F&p*AEa_qEcV=hs6cem?
z>y8Xa5e7$Xk<IT;P=KV-Evripz2vz?o$tyZ_H<pTmiCpGo7Ott>x)~nPSPK5-R0Kl
zFc8#Zbxk_a?qqLrxGhvULcS<`Bt#{R^$S`+N0THgid!vJK5@t(RJXxvvdn)mFcNif
zF=dv|UA7BG{wiOPgCB*!NFy!=)S>XJr(6o`lI67+uK)aQ*8)qKJAU`<wClD=Mmia5
zaaBtTz=+EKLKPq7@lo!OtY1hdq*7&{!W9LW^BFSD^w_!BhwV#$fU1^T<ry~wzlIej
zZ6?DfOZ?%C6w2L_9@oEHW$zOAn(X!gsOXDf6+#1Bz+=Sp+qJuiPfbiHBs~8`KDWs`
z%KozV)ZlSDA%=P);)v<nx3z`q>gd2E4T?{NR4Qlc;&ekxV(p;zL3EiT*Uzpx>s3lu
z<7I^hV_EyZT1>=dW>r5K7@&$)ESy9Sd-#sdMf6f88BK+Yc2$je5F{e@jS%SY5(7Sa
z_~8conQ48K2kmwc<dEv!aK^w?o9E_$w+n%c8pEty*RP7<2EFas-t)Qm97`m+6;kp;
zlHn;`5H@K2r2`Lg&Sakjhl#z|h-g>DXEX}_y$R1;e}bi&^@XwA-~8CA=^lYcb2(E}
z@Vc+j3By%rTP7*8-3=CgL!SYYtH+|6ban;E>6BB#`yHQJuC@-XB9;kwp3070PbR~w
z199#CRQX?D<Gt$+Pt$Gb$c%-|0*KL^1#lx;yNM$5+&HXq{jf^&Tm<#@$znDps4=*B
zL#jz5iNsU8qAdm$$xLU^fV{lna6Nu^TAlVUla8vxfeTi#6|J*mSWyy)fECd9LFSGJ
z0*W@lxSk`%p9(*OA@}8)xYfQfU0N&O37AW*@h>SKe*Y@Wub|kh^B0Sv<l4&wB~sR-
zyZxw3d*5Rh(WKBGRCunmicv}v$N?C9xgH50<&*#BWDGUC0_im``)ymlu=ZeJ|0Sv^
zi^(zP+0D!Lm@7&$mh4A2>h~=*l{+hnTm0IHv40)Up0oT}XMq3pduYRZv04S#j}G@A
zQoihNz7RdB!FlSVjL~p-2?I=RW+<*fvl2hU8gZbZjN!Rvg|G6@-E8<eq(97M<uSsr
zvO(Lsgmfq$xJQNn$Aflp$+Gp>u;fSZHK`U4oTf%@nZnN)ZD%>jxBF=I9lIJTBQ`yn
zPeruRq>_K9JKs4{s>%_4Lp%isx74s!F_^sf3e<4#MdKJbW`$^Ysx_$bCI3uNbwKyZ
zT$>>{QWj$vA-YX^8Z%VT77@&?5h3w#%FN3Qu5Fq8h)y)vn1^5A%&GhogUorrKnMQ~
ztK{p~zAb~bZYA!349~_%g3_W12~yMEoCY>g4xm`a0-*Dun~A!8t&q<|S2VcV(rLf$
zulv^W+9r8g{2)}p3h0}k6;XHJi9H0vluw2;_hcv|K-|3jf{JDf4L)s*Fyf2M{h?})
zX2woBHO40@Iy0Hzb<w@LbA#jmB!%FEqzH$@z{5pb*|xQF?&S(ikEF`xx}LPUeS8=<
z;#n{&layn&x%}2K%J_nTIhOg}PFAu<Yu@Xp*5<|Y)fHf}$40v(`E?`dAFQX*)3%}O
zqCfit0=V%>Rb|?d#s!s{4OZq1fj(Fzm}9>Td8U#hC{Hi>v$0guUU$Iu)Z4>Yyg0sM
zyZJLV2eP3d4AoHk`N53KB0<VkfXY>r*e?-HEV`s2c7s58RcF@Xyl$87?qnJl=4idq
z&U|+9&UcmvOu@W+_HSjq1yk&VpVv+gZcA+OYx86$`%WoY`0T*+F!Z28lxdB+{*^OJ
zV-+Nhpo-g(g09c2YY22L5?bO0>S-qp*SG4l6T`MzE^|c_V#Nelqvxt{+7$!ZRT%pe
zn{*TX)ndZP9<O|Wm*1Zm9uMk7i<jV^q(_fi?(@3ZjfK#N8I}@&`JsX#)q)O~*qjk8
z`AZT)$7Twmv!SFCFpW;EY}GX{j(&RhU3yah&15WW77&z_G<Hu9>GLicO~Bork3E0_
z^Gj*WU=4>3v4RjuO8jaEKEY8;fFP*fmzBalwBi3CJrAo5ZvX!EdHWl0-pzxex{KpN
zhL;(xiR(KI9$3+7HrE){BS7fN7YkdZ{ex01X|FohxLuf6Ma7Q@C#a8)3LiVZxkY}6
ze0&f@Hzz#T-5HK%fwU+wbaO?yh^iq*1w%u^S%{*H+40Wu173d?;<s`v5hsptO-;n1
zP4C1RT0qqM-%+eC63&gsfQE=B630@Tj<Zqw-+meF6lb%MuV+#5ZmW!Kfdw8vO{82z
z&S6At_onM~Op^BSdCc+#gAmu|VIS9ImQQgO?bWr@u|PYRRfn9wOuDrAT?9L4AB5U3
z*H@#+j3eAW?fwJRT|!9HYt%@eJkmewnSW157)j;9ND=0@!AMJi(g|)KKfXKFx!gwo
zll_LCBlk{O_5zD^^O^)m<tI+VspQFzjMVwjTq3z#X8?s&`T635lJ>u>cMUgU`d<T%
zsaZ`#ykV$d&I}Yz#zlB|&EmdF=@%)1Fo+*R6S}8c;HpE*w7T~5U%4tA%m@pOJpSrb
zB@6a7l#Nw9QrIgQT#0o2$>!c-{(`I6zOk}52F!d}NW%GK53iU_keclWTPOAaf&~@x
zf7glGh#lnM^1O8gAUo$-t#Oi3@@h=MS_a?uw2L)xSe1iaI00t7h^>6{dYEK6kD{cL
zsebGf!m9}<+RG%#{A=u$;Yn0Usz$xN2_$`eJ&fZOka11F45lB6Se|leSb52>krX`;
z8jOpH=>Uo=?binf8xIHn13n<Z<n{T3GnuCH2YtCJ5%>N@I{#W>3GesGUlveQ$Sq_w
zuc)dMkSs=0hpQP(S=gGRpVkax$e-)Pi%jG-vPr)GP+<L>d}BWU8zU-nIq3FMbZuAg
zmn6RlQaM`^W*Q!#(;V=U$_XUuDZcB-$uD0l>xlhp{&g8za>!7&nt|99=k>4a$BXC~
zn~Y{FYJGwH;XC5)C(j^69$WP~sIg8WmoUqS^lkOcUODxKQAv>v!yI0x!$q2vQS^(I
zK{A;2RSuIapp}pf!J>|+1nWwu_}T96obJD~JhzzmNxAo)q9k?s7nZQ}y*yq4TD&+S
z5QE3<v-owSoM%plfP%1HBN*|Xa8OVWS7n7m=EVt{svSN%R*-a%UpnUT9s`4mlMI&D
z6*)(uIPE0Uso2OzaYlrO^UU^dr?#e}4OGR|?>r*#E>}g5HpVv;>cBD16ju`1lV4f@
z^2tEw>BUG{I5(EL8AS6Ykp5+9lq35HQGZWw*m0`99TjM<AzxGHRxJ-4r)r8A;v0Cf
z7?{kgm4FL=zDon#mGh#XG)cVW7#+juEIOW$eAbuo>o(Qs6?abS>YVoc6nJcYogl6-
zlADOs^;2ZeiAi9Gu`j}>swqJHex5B}J6lP}e8Vh%p+>rQ(THpPIHC>AxC9)An<y0A
zaM}m)c2&`H)u3)@<7s9;XLhl|L=FfbxUzsD@O0C{<%Fiki~aBP#O|&QeXdq}xzbrN
z&Mf}@D15&}uKg#?)3Dn^LT!BAtIn7-FHZ_aUOuOFdb7h)p9fLGg%%b&oXr+4v1XO=
zT{#uTSy4ksjM=?joM)s&U~>y0pjD&CJ;6)9Lcj=X<7?e{BHe0UylCOlU+)T{#nv{o
zNb3!iyLdc_pUNkb&(%3CfjD4j+eOQ#v9WnGW%+<j?%3E4L*9ET5r1U^yemK<xWysZ
z=IOxqIZ0U7SCGb+e*=j_`_s+Qy-&9^Rld=~R2epI`+sZY6;=!V{CMimv3zM-R#Ker
zFe!+bmJbK3aByJzigi)xaq=W%byJjNa)J%F_%Q{i$0bkwu{4oNigB=B;eo{zd0K4!
zIV@KUBPI8YK9^{++Y4Ucy)84j>AhbJEZHA+OPsJ^UDuboC(*W1tJp(fyJZbZ9yXHY
z=QF*TOYHZ*xaovaXyxEQplj;}L>&H7Uu9~rO0w6E_QwZ;4CeJso<z52=((1sp8QI7
z6sp&enwYcNZ;py|nhr}RDVk^9UfFzGcv9@(_it>Z5_cdqc$9lwaJe?3bzU!T?L$p?
zmM5dE>|B?UMwBn^tUQp(G&*gvAmB5RDRS2J)##;?u%%gZB{N76xCt=!c<nI**}6vc
z2~>haO|e3B;`;8pbZyOd>WrRd6eynitYS;ugAbk#9Y+{4PmS8|llE^9x4GqXQl%XR
zmeQ9e`A>C7JPtp&4cT7VKFZM*K4gByY-w4F5dkaq{`wl^q|Jo^5LVHmpxX^BvzsdA
z>Rzu4r~kZ@#kaT-f4=|^(K3ae1yXguK?LyJA8W<O%jeo(7KtQ79cf{6e$pIWlO4hf
z$N&CH#P!Jz^hG7xt2-tW2_|%v>Bey@2^Qiu{g<%`JIa+)wA+O`BOzc(yXc08%aJ9$
z#5mS8-v0GL5!DlR1`3Wv5>+|mFyJwhgwGGE^r9Y`#=J2iHE>;QD}*q|h~R?6W>OVW
z#BNKgO69^fecAC?fA_v%CKh+EIAs{OvuOQWj<b}P|1Z>}%I5!OPj1-xeMXZljv!E&
zMC)6gU@3h2tpU&cj+BMV$CXnf5z<r?tg{z4G+Pc^RN4(_x0z$VFwkK?Wl(h_!-bZ4
zW|0XwQq(_my3c~YUQM#yoTscM%2DP8oHIicH8_TFH9ShlGfM<)P-sIz@-(tVDr}z2
z-d-v1dThmM%_3uVy|H=SmD5hpAydq021NkuOjz2AY1f@1T>0Hj<!Xq}K6IzqPg+`d
zq&O%Ku2dJ#9P+YS6@BiakIoLNT2ph%&xk&7DXqTV>&7S}51f}Qyposg4nk~dvUp2r
z`$L)Bf3TUNs7xPp`j2N@qx^P$@?3C=+$o0x3=Iv{)g&@*;i>F7oE;sfbP0|!5#W8K
zb0+0W6d}>KPWJ~A=K0IM6sBg@4<))4TOC%D3Ba?>_Og1a;6;c<Ux<_Ma}=-1QOx<I
z5~9AIDF@}sT1g)Z_YFAHl!DohTm=$UIFmu%^Asg^IuwGBsv8I;K4+ar-P5|Y;N2v-
z9Hu}9(0(Qn_Epxd*W4r<UlUuWv7KpP&uYaFjVB{w(js~3d?ISHm;A0i`o7d*#9^!D
zL}Xp~z5;nv72Cb9kaE5Y{G*e0b&ot&YS@D%ts@QNO;epVbBSDFdP2Hers+F=^N9eK
z88Ivmm?WId6cLSS<^5-Pv0Uju9F?FUBmcgYhVPdMK-*cahp*G!icBjxV&-30r<4fI
zn;!AvGtuk?b~a)P8o|VH#=MXO^P%qUgSy*!PdQM^&qBQ#M*uRad_aS;7`RK(M>!7M
zTsT$L_577QyY7-du3sKo6T%V!$GlLMA|+D?>wSj@KE1xooM@wgNw6v=eW~I;QXJNG
zfB%SWp~>DTojzy*Uo|jf)W?<sGWjW%j~XhG2AX1a_dQ_<Z>LW1Q$B{@+0Ze6gH;jD
z0`|Kj?{ZxJ>q0}%(dU1MTLW`HIr4*Mv}bSO;UVQy>T`7#%3jm?XKlcy38kNczG%ez
zN)Ra2;QvRsoj4D|s|m&^JPJ8?qp~S=&$cR4me^QNSi3zbcU+HeYsKI3n?s=Be(^95
z70RNDf}zb*>~dJNT{q6ZCbq{w`v6v9=1`R*dpd4*<Y{s~sFE(B0*fPNUn1&f&k8=#
z4=pn6<aI|rJ#I7Lw#lO&{&M<M<Wm6YpD^XrRpEJ>%Mxmrpdv+yAc8H-^*9<sILld@
zvuM53B2ndN?-C{hOCmPvhAKTswklwY_~G=+%o>eTOrUUpadZ@O*hyc~^o;jW-wI`?
zrnTcCu<-9_4k_MLF6Oja`oFz26BG)4$@PiKVBjK4MKMDO_9GKh4=5O?kfVxxG+-G`
zqkok`!dPUHSYW4#qoTu#h{b9<?D+%>JPamyFJCY1ef_%fKzZg|XMwTm%n`|tZ~;@^
zH`)jSmY93*61_YkV&Qa}%I7_CeNfi788SRRlem|gBgTk=u!q@q^me6CvPE3#|0Hgk
zoiGqk4ODHqOn6UDKFn7cC7-UE+ZZ)XAJJ_Ly{IxVJQ4s72M69^AT)ya-N^2v<ZoYe
zw^EdCoBTT$WClxNQ%4rY?SOX#=G)!3@(O1@0R0ywx$ybWKZPPNhXHR0wLYUr#jm9L
z#w&^)wlU*PEmWTOC>Ev45pw$d6?dJZuQLDO)aaS8sqmcx4y~&g$E}IIwNoNOj9?b7
zF1zp1TP%WUEiWY{n;qBdp%B>Yzo6l51l`Qt0J6&>0{}TP>_@nRDK{r)2f%(d%$W~K
z@ovf`!&LK>CNMiD82~i9CLm7}xP|L108?^S#a9M<LOQQ{jy3vks|)@mrxg+chzUnf
zY{AW^N+kZI!xoQF0;@JJ^;JFNb*fDoeS|3`iqWds!J<f?^u5Y5*_+b)TOr)zk(gP>
z8RC<$7N1w{wBD0ok!bPdxYi;usD-U^b3KnC^6PyDaJ~?mfsVBEheBi=5h5IL1E013
z=X`m!ud5Qz_ZQ=7Z=JH~-Ox<GPk;V6#k+D#TDrzT?JBz5z$ay6#eEJ^ESWyBDp(sz
z!qpZ^v^OgI$??UNv%KquY4p=1Ou_QgI$?H;^Pf6ZS&E3*EBUQ{N1GWgk!_G8J{!Wq
z&C4*2eLX9sk;gdLCudYTN>1Pf9@AD^yPt$(L8P3Jf?38q<cVPli7xJmHWylo(trr~
z;Ha}P*3a^lJD27^{_<a>Dagr3uKl${{!!E$hAzuqPwrUq*><1h?f04VeDsS+pO_>3
z7no?XB>4N4mdW1C+2qNtUMyce)=wY_E+=qCAJ($j$?B!sDLO&>*}uYmN_T;~!1Ls)
zm2GULAfZw$U&&46p!b&G*xLY2Zl_7h;Jmc8niJ!PS8hFeg6z;Fo|LE%Ed&A-_;MYl
z%a6tnt*mzvn=8b_1(ytg6A>U@Ygl4}(k7S54+|3WQKL^wgj`C9(Xe}kBGH;sr*HrX
zj9j7bPGU0fUyxPS^PfLC0~hfSKKnIm*S4U!%_m{RLX{z-ZOOuSV=SE_Sv^v4gQ3;U
z<-;tMk)4l$eh&ygQ(mQ0);HWZTx8jSx#vkYnIHjh)S<DFukL*O>!!#ZgEN<8S<DU>
zMtqnZHf9(tVJm8Z2D+xEJ2v)~x~to|en#Ni{taY)VN=)KWsF^v^xaIQS*LEOR3qI*
zK)^7rSX}Ew<cEBjZQWuU_KEjY{^<u<1i!KO11dIR#AZi6bS8oSyusd#3HRMBw*Ob5
z`u}MN4uXz?fd5sn8n~5P0RU^w|Epll^Y+7CTpbOZ&dTbvgxA$*=~z~4USeo`U)ZeW
zc%;>@<#JHG5av**v(@A1U|*#vI@96){r&7xQ{7?<%L0QqR!L2?o`EV(@E8_M5Yyde
z)>T*FdwMD)-tmdttemSCzk9!Hj?ej9mR13G6CbC&(F$j6z)U525b1gHk&J{`Vl}id
zHl==?G%y{a4PA@pkI43_(>?deN^UTrBaq$4+2ZD4aUM@vK)p?X$WIhI4I>CH3;}SC
z_rDN}QbUi>dS%em@lY6r)@w88-MwlR^oX0xf(wzz(lAn56A0+S_~QCfKt$*izkNtX
z^Z}8<LMU_)<i<c1BZkltXo%yS5a>!u;sbo>eTW6Pd;l}`HfzgxVCCEJ<DGwe9h@UT
z^i467(=T&;);YwR7NT6SG#>`LN2e3{)VjMX)Y0MQF5gU1Hv=wI6<1x&oK8vn4)P-v
z)o9KqTR|K#bSOJB3>Zbw*NAZ?hQ7);%RsnN7R!lZ8)Z??M-Cw*z_Ouh_W(YQ82SM6
ze-C5|`YuE<Jy>DnRq82-9GJ}1QOWI(1irdSq}Z{)ND)Iu)IW85ESR<oP4{JHTi&hn
zSiL5x&Uj7F$*)unU#B^AP-Fw_J$@D&RP6ZM?SNV3jTby-H)!nAdY@akR!_kgx>VP^
zo#-TM&=&-Vgr@yPQiN`FRmRrqru3q?PY4eXXCIs6?iH|b+=eTefj;AFFA!qQT(G56
zqbFO6G89vC0V%#rN{RaS3QX=+{RI&g*$>pCiIw9OA_;MM-<A_c{wsL={gxOb8Eu@U
zCj7{?D1IAp3bJ{exW7yaVaCz~3cl$nh`Neihge=M{eppL#;oG60bKq&3-&UkRszqw
z5aAj<g>A}bZZkc65%-@00vZad(A~>6;%xWRz(f{A839!`hej^L5$?0*-JKp)h8;(d
z!OmPq7k@PG83?6${C&nPqu`;1la`QMtv8l$13P1(==$)__WkbQYVOJ(_Atq&k~Y7;
zQqYOgP&S~B{vqQJJA@9@YuF=w#Kh3V%}B_u(L=l@fY4%>rX~nVU<tuc6zeHy_4{2l
z!pCiCe}HmNsSIsK9Kp1>;I5n;3#w>ltHb8w$HM`8pW&gS@V`m2nZ5yd;jwi+E{Dew
zBP+SD_@aXv_Tx@ovyBgNmJDw2O`zjp+t29C^?3^y6FahCa=8f^b~YGA2{D4XL14uL
zm;`v(>$L!T(d+co%Qypp+qplU)pC!|nvcV&RpEPXOj@ITu9eLw7*6^;fiKMg2&Cs=
zHq)tdQ#_eoCPFDVGW2auGL-nzJ}=B6#(td-l=)Tq^{1p6=56v9$EtyF=Gk_nu(9?T
zlg5EL1t5eHkYXi)Yl#UvYM-_kpX#^+;@2dkK=|KD8ya716MYa<7^RJ-3ZFEN2q0{j
zhL6Wx?wSGcBy3=|gU8vBSe(F+AO!%r-P5B*c|(_Sa$fIQ=FnN&9o4HCXofA#<HHl*
zW<vsg$in)aLN_4c0h8$nwb17F-!z679sxe=m}(6jtOrmIzUuyo$JMiAy<MSh>OjO@
z3F?yz7+LfS*7|TC<KD_$d(E%1MAVlWjY+3~Cj$37_B=q@2^i|G=?oXXfA*g)>yFpb
zVDE_SL+*<IIvyDpAI0j`EhZ;R9(#IFEgVBE#;4wlhwqJ0NE}gTtgWt(JQ@S!sR!I1
zCSE5$zen8`0xtnN3Wbx3jdG9{m?lm6EHg@v6YpR-4)l07nhVf`AdWZ+%^oH|`fiU}
zlpssj#z`lAOD9xbHlauVmY^^7NIKSH{r+P}nf3hLTFi3hzlfjvHBaByKaULKezgPO
zXk`pB^?^rT>{sgduM&xMCk~{q`Rm<v^Lu1^CS}LiH1`%%WTSm@zjpNyKO`9YJcVmI
zjcldNh|rrej!J`Dn<i+sA3<C$H_k}j-oKtvS=(n<{;q!gWHIu?p^e;U{0WZ9bT2S-
zpfb>BbL~z8>0skS)HLmRJNd5B`JM&8$IuUfr6w<2-Ua-wHnR!1;I4$AhRSAo3Z=fu
zs4v&0ub(LK(h_{a5!E+R@N`H3WzK)><M%Qz!R}R>$ZPmgpQXtZ&_3bdiL_ti6BBjE
z;>yGFeO~%K%ftEbnKl*e8aEEE+5;}Itd4pl<);iTyJ^<b510_R`do;}k1vnPt8Kl;
zfrxn^9Akk?M7Mup;7=+wG@^Va6NW7&FI}7YItJ{ANPzLJbh?_+$=c64o}Amu&p9fD
zq8G<W^Zh$ckSnN&Qo&W0`nf*L{qPjv_}Bxb;sWB=?`zp(ihX4)>bLy;ikAu1j&h2^
z)XF8+?Nb4#Al(OQPmVtv(Dqaj{hV#XAMJj)Q%_C*{gu?GZ8_e%Ck;9Mtk_fciXWFh
zm19jDbOyqiCj5+8@~pp1MXF@wU{O4uKCORe=ZTQZb2k&L!QV~!_v-Zsv_W+lw`H+*
zH0zfuie8ADmLQ0vRy%_pSobk9vw($#`12P}gp&D#n1RQ0&U+!M?A6qQ!28CBqreLC
z*B)#gSo&<CLjx)waGwjbU(*j4MC*g0%h{(~Doc}&x8z49MrfzJhrP0byw=m6#k4B*
zO8Brm(H<C_Nixk(vFpJODwJkl|L~P9u=>5l{UTRvcN&tljky!QK0AUu@TNBf+)szu
z^H$)cD8Ze83wNSbkt5kfAZr6Z#0J=2h5r*;kHGDf5qQ&wJDP3p^qmq*WFqUsh%Nu%
zFW4%o!~ep79~#KxJcxXXCHD#HWdr}7-&Brwm%%ePgG+Vft<Sf2jkc8>Dsa2FkZ9|K
z4&>Og3cTb+wyj)nfCDBsD6%S*N>-ErCU}VMRGe}sdPDNq$9x9Fx?t4(McdQS<}tws
zwmg*Hj?f=Hh*g`}66iB|#f_{z=f?oCF(W6*!j;+%G%045!q0P=Ac9mzT8#uClYlUA
zPKK=o`^;d{m5uG_d(@M)xhywkr9lkfYR5j}LeA)yiVo-`Lv^^KZ3M$@-or3rg<<4x
z8QEg=iYKSD$5@k&mixL)&D9toOwy(ji9+erNA$~+N6qdrC!ocO;@i0(C~hF2zcO~O
zGokHbAW#<Q8$1X>Gtv^MSxSLnSPgDu<Z1U?&{VwtR(YS@Lm4V6NG3x?7v#mXlvCSv
zhEcB+{Kg`?;Nf5&(5SVK>IXxkUDsx|5C)JTt}um`A`~alyIp-wl6@b1uCRsQ0{aXx
z`Lj7}`O{d7nU?-OfQC*xmM@Hw3<2XtprteegOV;u)F^<AD(QF?KNX2lc1}p{U|~tC
z+D5xZhNg!|ba@~@5Ja$JZJ=~U0psT8mT0U3%%cnk&kBq6@nF2MC~>`^e?LU{%OJjm
zVzT2daj7WKV+Kh-dxrq`9t#Nv56|i*q!*nZc&*_&k3p!lRnfv%fe#=Alvv0gFt81`
z)diJUqolvmlW0WRd=c%<`UYqa4vD<^%MGqq4&Mi{f>pSDuj7WEB}B|DvBePyN<s5%
zrUc+f#P^7jFya`Ih{=SBhL%EziSeP-G&=Hp@u8_`4(s5n9)&<eN;Vr6O6Zywt;66D
za{6L)iA2g-jC)j@30N<llRZ%%g}%u=cLpJ*+YU4;>LejnN5cP%?PEjH#<nFH4f?|;
zTQ;8;sAh{OQCMG(5pLRsNB46Deq?$Q#{TtXOD{W(8$pm8!kSLTA?UbL1(5u+%w-b;
zsAlQS8VJlT2$&dmWJYpJ$=S|XK%c7=j>y$&h8?>)uNWw!^`(VC+Y0%^h)AWjR7okK
zOhgjz4;7-TM~KO=<GajUhoh@2IF48IbTrr>pWt4zv`@|uP8FX;efJSrXKvo9)sM1=
z83nxkvTcl#EdFewByyz-b3(D*QJLIf95i5Dw3M>$X7=!}0eo>qM)TwVcV&-p&Ckh=
zRWHW2=?S;VYvLSVh9$tc_Mr^RY@qhH1WG&_<vE5G8AE2c#7tSA9~`U<h_8uvD=0E?
zY+TIA2(36h;NN$mkv}a#XW>GDeK-0GlR|rhUOA97#b=U+i>}yndw1SCdk>j|SLjLT
zky3VZY0jV2QLZSW1=Q#J9TUF?qud7B5_2+Qy1EPyix3vT82WvgMuu8%=!@cy(MMo5
z@7uAX%!72{{2sDCEH>tbxW9AZ>pYGgy7`Q;tmK5eLFSjpmu0kAAMqu>E@g_=MbCOg
zN%XyGr7dicjA+AXJFk8CE^=c#J{1F)5f%)2Wg!J}z>yjGtUtbWRE#o~ZVCUEq<Z`S
znb)+Rg@c88tD#QMRTa2;Agye^2H&9+VimVp{&j=U9^dImQ^TERFjXDyIeX1>qmps@
ztIk>@He$shYb>kHz@gJt^JGrx8R)fsYED;lJ)vc(B@n{i_VwWpM^Z*Qe>OcL%2-&U
z;tC^T$r1?&<r<m<SmuzFvhyhheAo&!HP<krH>(-{FQ}1>-a58QD|mlyo_vwAi%j&k
zD=pYtULC5V&Ue9p;RKUdr<Xv><q%PFRr&KMy%Mic#DE<FMb;uP<!*Heq%be>C2h6`
zCucoJ(j+47e{YM;X~um)P>d8qo7%+rciB!}`&qp?G2g{<l8znse6;4T9GmgeaqvxD
z+iXvPVxEXF8Fy?u*5wn>SoSV_#CZqq;-3^UUBFGy+@rNd%mJFV4<Kb}jz*Q-3o=Cv
za`N|h?a<?0yUB^cQ@qc`xRwEADwm4KiS)$yzIT)awA)cWi6>ZivYXF_GWK)zYO7}w
zDOoik;z@~BOYv=^Zm+j0PAEt{7-9HBF_Mzjm2iqsZK;LjS362yjzUzEk>KL#!Nfqg
zKTvbU1sjZ?QmRQ(axw)z&b_@3!)6UjM1B0dd_Q)9DPV|-Hido$;ersx&`#29dv<WO
zk2oXpS&xun@0Tw%<n-|+kt<f@n#Gf(_Q;$`-MdOR>GHLFh%e0y*(;ALEe|=tL`W8I
zZJ}W*(T!BMvtq8(X13@f=xcS(%FKxVO$k_+FJZk$bB-$ZGG~eH#`;KN#x?BV5Wl*D
z^}XSPlezVKuGRIR2*jh4)En=`oGi4+oik269MV**%QGNeyM{)Vq?0*5rRA@QvB)(T
zJG@z+V9Ck<UN`4}Yl)=894{$%B2*n9;Z!lEenRGyCQQ0E1WGFwl5T_`Kk;&(E1KBy
zDYw-to8jPLOgHx6;#cv`23P&2{&tf4;{Yt}S0%6|j-O16)e-qn^TO1)x`Q5q4;#Zp
zs@@eWf?a0wutyLh@<A?<cFbb^CgK+(1|*wvtryBL`3yZzN&a{~-S_c35)```zymkf
zUk<&|Y6vf8Xk{ynX{(sZ3krUvkYf@s5|v>E)tb`_F_J>(iLTg+Yt9r%ilL3?qv(3B
zAIN{L|Dnn_h#A>Mw)M}7ng+YH7%8n%_tvr0^eReiS93w2V{vdfKiym3sCRgNPmI8j
z%*;lZl2Z+V(Z#2N22E+OWO<wePghp2My-7wtEH@=X|Vl+<XsJzJOql?JE}$^E6Qk%
ziFX!xAit|y*FjW{j01Qfa@9-@m%T^7zoov~^$U@bi3I#`7ex{j)d^r&OMYgNl{Vr1
z)E`g2-TG6*t@-&OW3_d1GrWj=>UC|$p-7B&R*TBlowX)fgngFCr8sL;-8lbwIB;R6
zC$v2qI*`ni)o*y=K{lq8W+4cadYM}%%yTWaS8=0(Z&Te+KPfuqET0YKgTY9jCy2jT
z#L*HKCEG|{?+#MH{(S@})ryakM8FqD8o^oA3mzyp#LT@7AX8kuvcyY|vIzkF_fEA$
zgyNU!V;axX4Ht)ln$y@iHk*-?6xx*SpM-pYK;4)h>uT4_*xHZ954|u}5g_Pjaa0Uw
zLWP-zo}`g8T7C1)A{ZS&oR@shimqkEQta)`_NT!}o7;L^*6DeBe)Q$+mvb9EvHE@j
zISJ-SYh)W-pAGLi8tjChl#=dX-E(vXE|~4*7D<G%n7n)m69;VzbNFwZHwF-D*&jP<
zO0!dsg_QXbDRZ`*ah;%vn_I~5xfyxdQ|j92e*#5dp-i3pz5m*q)eJ7RIZ9_#^={Hn
z_(Z0DhPdxKEQN*2CC-ji>^Gk^eNU)_sZ=qW8D?UH0PZR&DXDqgqpopdl+W<6ry^e(
zX*TQt;i}8@DY}_oYi0E-Z_m&rb)>dIqs{Y0vJ@#K6w16Nx$N=*A6%O#$XV^zpK{7b
z-$DfZKY%<h29OFYM^Gs`*gDk{51J2?I~oEe5JPXtFOmh6`9&M=zX#lRn)FyU3fa{Z
zpo;)18w@v$TAH?lfmJ_=Sj@0SAu8+5$Y1aVWTtiaF1SRf!sY-5M#>ULp%Qh!pea}C
zY<0sWm+lnBr3X^M?6HrtXPMkIKaFcxDhftIkpP5_V~+yLiA!olderTc{uC$Rx5gqr
z3<U1?kL<<{@4UC1Ykww5N$Mp0K%YsC-ajy+N^&os7r&vFC2h09czp^3qd)u@_Qdgh
zg~jKGZM(mf`;++)QRxl`L`3$g8>$7KoubDV_@0TZe0u7!*_vL4_^WbP{XRIHd%TeR
z!h^X~wXj1K{LMdVU#tsln>K?vQ;k0A4e0x^eeOUDzlU5UPjtHV#5(6V9v2W3^&X4v
zf%LPnM%uy)?s)E3PzNT&d7NugEW^i8giQl%5_4U514G^f`tr%se(YP`WjCV()Wlx#
z8rC$`4?9)X8qVn%>S=$_$wj0{%yGRAmSEB4vMtU4iJJqQP6g-gfU$Os1iNG6b=u)v
z2VI8%B*m7dlOyXwHY&R9S3{e_!_P&Uo0R@99|&?Zj}92oygD*YA_jm`R-z2_;;>40
z`qDVKK*vCVDZPWDz$CTDGCR)=FE%4sVQ^5@&qF+YaX-Ai!OGohc$lfG>g&^wsA16Z
zlU5jlBE1OlHQDp!N-J)`?q1kYEv-@uj)SKW?75bjKx5yEvR{immz~MG`jrYt({!b_
zKsNOAG=p12g0q~TQM*7BI$RBig+DcqRAfic-<)zaE`^+F+$jl3*RyA@ABk;zZrqzr
z*MwIy+Wbo@t82B0`~*QkziK><5l24eH=k$@I;rR)fkuk!%b4y$j6|M+?UKCx?i9GO
zFGMxOB7N!FuQ4ak*521sQ)m%D!GWa#uh({V_#K*ktw<aJF5qK0BMHBu%QuV-;|MsT
zW_z(irYn|;B0a(dJ6oYVOTckcvTl}1!=Ihg;6J&((shV??63jQ-CShxfa3xW53kT%
z1X|WLw8XX27FiRMM`68Wn)6ZkZgW}_h)<;kgSa6TSEHjy_YHQW(Xt#D?cCoOA5-`2
zzRY}OdMcouW=h(a4JNhU8cxSI9=YW{EBxy1tNh_UeB95c7xrlgb{DlOIbIO6&%Cnv
z7y*k-=))JNLm8Pp0%1Y~^`&nk+shNBUpEIeq<Nk+rc|`_<Q~0Ow^?5c-Qzwpxk6?w
zdYEjT>1jrq8)xfJ+|~7us)}BV#$88qu6-lwO9P$@gvT)`|HT+J5s!HuRovyPV4OsD
zBNwVP;}s-PWUCsg-I)Xu`*`=~E`No85OP}RXEJSVrv9}SeqF0o;&J*c+1i8d@T-a2
zZM$i0ZRUiU$NYB*Cr}H<Xj>+rt*-r0@m9Tl0&YaWP#Wpw1;_)yZ1Zsu<iN4U<M5Og
z;V1sMh1$ITmTO47IU3)(B{qM!Tz~MO`M<y3)rxkaq~s*{46ywzG_7E5n@!x($XF5*
z8{oq%T-LB(B{m}w@}K2fzSBa?1x@IEvBH^<$IqbO>3~Y8ap$6roBq{KO<na!DZZBJ
z&&rI3lV;x8##_T<pFrxhR&MHFOW=Cmp9kMU)CFx<5Gt*h^%<EJQMNUTM6G?k|BM62
zS~VGfw<#9+pF{hh9!pK{<RVXNOI?!yf8V=C7_r~b%Wl24D?9e$_fD+Y+T@$l6U;4I
zL0`TJPN~)mY7?|BrSfe2_4tk*px%ipnzDXkHCD2yUKZ{%m;f~^71_z*3Y}Vb;Nr_f
zfc#HD4#;e>P_8V*wat!H`0@!#L3@7lC$IVMExxp~Uqt8b<i%<wwxOae5AK2Q(_)Sg
zTXh5`1R-hx2WN4UOP<|K&tq7%OUGxL$BDh*V>u<;m$N9BqDLZFzXja8{B1ktSSYZv
z?9Fwf!0aj2i%_mE(byUImZl)|qDfiK35Z%iZ@3iIlzVvteL;hGgmF+g)+Dhz@emNe
z*3Ta}qbJIX)X|c9Yb`b_=yjtFy+eh-DS6pW4S%fM@fCBo{e_+UfC30;+9rk*>{|H-
zu>%-_b%CWsRMoAHe`5b*x#vi0qPaVEfH6sQ^Peh#&jvd?3ERJ%fYG~bgdardNaM!f
zdP6Bcw~qom7+{zGObh&s`I6oWrAbaG-yihv84p@bjZ!Q2fLDH!_1^nL-*Yhnw+S5*
zwp*LODCA(%Y!d~);iDA>9fQsK;LOx(xW+kvU<YQANRXD9vTQMxDR6PR(E8Vf7nVte
zJuF6bF3DdKK9Z1lK9s?D5i|+m&s=UYBq*G>7fSwNww5RP0h*TXj393?Fm1eh8yacg
z56||?q58~)XZg{b&A+v@+L`g`5jkknVtb}1*IoxN){8_-5X?yykrg=@JIb-?JQFL8
zeyXrhuVUCy{5x4HWh!kV@Wx)@^MM<>XgkQDss0|Z&(%Lk0&;KbuKUYOvmbjff_9vZ
z!V&3Ug<Ro{28&`If&m`Gz(|LuHtUa+q@cn~{AY|X8!0`Z9pJV&JNkTP81%EoGiI2^
zU3pSR<yr|*_h|G=a$<E6mW@IgT{1fjpG`!^aP6F$-eA>acaN~4KO_}u^sjP&Mjz^o
z!^_>ktOlDMOB0QU`hlgzwCEqB0KxG%zx6KL;bibw>&wdTX1bCun_7egOq^AhppLH{
zB|YI{y!RLk(~~2qM12bpr9^;W#h2pDW}Mxtv$rL+UGDv{q`InDR;ndyjgh;Q?75B{
zv9|d?Y!|irBe<zVkQ=c-NWj94a(B@%=4EvyBQZ<^Av}_G+K+oJLH<Za#<V-G7b@@V
zeoMI5oCr#K>p{F_ACNq2ETt61(byeq`nCdDZnOA7-D$pqy|eK!S<TZl9EYM${{~K%
zl7wKfhh9yH#wl;#eS$XooV0JPzT*dO02~oGyh4WYhYmfJN3d9LG(T6(I}m|H-`1N2
z3+f<>|0+COqp2}*<$<6YHL=QBM1Uaw;J#h_+HDwYS>7tw8|rbHYxx1s#8y4Vmv*74
zV%X#NHBk^(bnc`@j;OY#LB$GCKNBhf`Y<bZI+0+{-ckF@Sz5AH{orrumaz0|oT&bE
zbs9gsi^|ydC2aj9`)`{^!3R!=jsEj}p%%?4O%2B7@$mAqg62)$%O5^{&2V0-B#`Eg
zqjDwG?qa({<T%O`{N@D+a&dd#!M!?7R^!%{FU?}BHL_NrcMeACL@lPJ6|rD0k?%Cb
zuPW;N*7D6o6#`uDwcjxBTQ$F-2CCGUzsY`6Pks-lcEKF9$+w_zn)BedCP$19<MNHp
zs#FS(Ky)SJ4Qok<RHIZ+nzsI=t4<F#^OHKW7)@Yiw}TKUqeIn1!%7Mr;!@JM@<InM
zV{pITe)EH2@EUA(uN7iaz$U@ZF|oXkTPc4;Za!1<;wVEf(7YCEhXN5ZiPgYb$Gv}A
z-2G{+QbVQgFrwFM&cQh+;8|p8NX^rG&EdiAWOJb}fw4N{@QMyed$FZXi*Dno`Z@%Z
zvJi-j)!odK)t7XXm<HKlcK7e08MpL#%-J?M{|f)lurssvgqA`tK3FeRO0*?5@%w>}
zDrRlFt41833o_9*Ua$9bbe&X8BM=?pLf61--D2Yra4;_R2{U$1y69@{S^-bUmCp3I
z6YFj2N7TIe<LYa5$CBDF7n|!}(RpIilI(Oq64eYF%uqqgw-?v(P}OZ32wyM3&pM$k
zq|@S-Vu#ypDLx$Rk^ZTGRFofW&e74v*=}I!hIr<AL>~$lEFHWbaF2C5@f>qn`<%9%
z8-GXEpW*$b)ug$(gYl|HFYCx&_*P1R7(+>^2=XcKsQx`&DRrH8%RD(rWrjvO4`GX)
zGPW5v`Ou%-&jdQ?lUq+bz{%Ah`ow^mCEwoMTeu>~^^vHLh?fXi2(D$HaEnvP+TD5S
z9((4v6om#X`qxPnmV8AXGyj{OWT1_1@2L<FqG`t_8#@a=$NcZ_zCfM&*9g%V4xxzt
zS{637%XgwAEU*-%Rl$utz2w*4GvnOvk6a<$e8ug*GfWn&eFR}^_rB1x10M#=0Te+s
zO)c#zJ()MtU2vZd?KU<P3Gs(NJC#;};pvfmfMjfjo!g)qs)5?NJv9*LgI;fdF$QJT
z&(OOx1nU~FJc3q>FKidmyylEQ;7U|dBh5@c;eC1W{Mv&6ps3eSmg7V}7hu+J$*ZZo
z)BeoAAQ*`g{SnfUo$O<I^ZY9u?gK9Xfnw%CQkn$1D4Sl`Nw|QYlWlfJpvVv>z!t`s
zuqCu0UsVJwYT^h8)wh+LeqbXz`;B3pI2O1(nOXENn$g7cKZis!#s$}E*Bp4nHF?7j
z_zqh6^?Z{pAW!DmJd|0iC|cBI6mX|vKGy`JyIv=PQ9%v|hf()*yIPb5QWMjB_*@s{
zqRboklDvMgpa?6@z^t~4t=QOgd-&}~=T9eU*z<SLq`mq-qrL!&n83zqG5sklSPF_n
za9^J~Hw|i_TFoG_Bn3(zmv@^Ts#ux*-T}U^{|4v-xtl<Gb~7MZ10pf{OkojbhiQ}~
zaJW54J<F#i;7Qf|8Gr7?5pumxMKFt4y<s5f_W3to1r>nW1Bb>A#RStbD4(z)wnHnl
zLF7Uz4Ffk^c2Y4x8-_F6?_!M+y4$P+*~VOo!{8(F@V*4}p>%e`diWC0Ig+}l$?+X<
zS#ZFQe!BZX5(y_c6dEaMqLa5ClhZ&D>xE(^h-T{7lxFypUc*n!2Ai(M(hPcTJ4&!F
z*F|~n#rRWn67H0Xxk{}Wk=3+)S%3y}LXyOaDt={?_!DOcDZ*TmiB+E~MOOb@5C#ke
z%mABMaK~#WzON=xs-v%1I1x8^n?OGcrYQnEt8{1FeGR+F(KS5ohX+Bl$Y$$m6Uclg
zWTQDRvoHa})>0nX$x7h0Ji&=yx%8V`5^-pO5p%a{sqg`j2JCVlzncT;+eqZyc&qsq
zG_yl9(O=##3%!=mSU~Ab)eJ~WON497o?GGlmp0hC_@dhUP6PwIQwfE2{oQ$v+%Gb^
z3~V8rTDVUVsIkPs9Ytm9vU2_RyEJp|AlOh2Sc-bqZ<U=1%5Rk)YMwgfQ3I%S;J$)k
zi}2OKM0KiGKyu*%KyrSw+Pqe0t>Z#50yKf(kS)O!3q3GQ-i1xCgkcx{5uu191OSpF
z01`Ju7cBx|%%f`#Yr(U_|HXx}H5{TPII;1hS*Y6g7KPTQ5$gUJ`+g6@qLeOAhfFn)
z|2HiQv;fT#ApGO*{eyK++iMO6aRjTyQj^?JAiR@j1#^m=SqsACSFltVpIT28iiWp)
zj`R|NXZq|3RG>-9dpiK_99!fMJQ7y1XfwFbe#=G4L}eWo<31tbcRsNV^_#DFDPgRb
z=sz;iMCb&q{N{I}YY93NTohX`p5~e1-}GSlIYkj9_bhdw!-g>~&jg5me<DxZ{a2$u
zGTP7=5Gl7Dzwe|*qCW}Z<V*YU7^ZD1t|V2MaODh)`j9{)*~wSEtjQ<0rU%@4Q5o;y
zswGLJnZVR||EH-dkB74D{`VNh&I}&LK1$X+CRwr%CQF3!C`&X$r6Ez4k#!6*h?x)(
zAxp@f<#}kazLpfy$WHNOS0cN-m*4N7_s{#j&gb0s`J8iouXBCRx$i3mmDoaaz~*0I
zkf_CPW1P^|YP|A~7R%I9ty)&+DHB6{x+AdUS3QqZ3-7Q2=;^hLo7bIWYrgTaxpcGa
z0EvnAlWp8|BPu=|WpXW#lEaY1Ok~=K<60*&x5Cpf<kA5VT0SFPFF&YRFoPQ<Rjq6k
z$3&(kTs=Q%lPXS$Ugw9)k*&G@<`+~I<5)Tfp`y*MkFKTH^O8c+b2`d+G3E+3Jwa8s
z{*{w^wRmBD<vx+z(A`QgQj;ukYP(GX&g1+S0YQun8`aDcKcW&UcP^)hc*k-IoH<u_
ze*!tZICLrVH;My9kvsx2B8PmuJxpLNVs9o~Eeg}f00T7HwFhH65bN$`W?8VIU?Pjf
zgocMS4+c$Y&b|jVvLi7pMCfg{^IJgznVcX~5^(?<P6kz0q7BV~4r8U^&^Y<8L=kbX
zB(s!?@A<-}=0E4`y@mzdCg2<bAU`kK$Z_cvJbWK^I>*Paq}<m;NC8ebrjG!6-64$=
z%Ho_sEipw7=nZ9&(QaXuUtG;)S7B5<fd|SC8Qwb7psclj^;(?tKWp1nayWUf4Pt#J
z(0|)s3RlIE3gb{b?2Ea92>sf3`zt&DlZR+cp=(Mu+xy5NcPR3hEyC9R_qZ42x@ac&
zM6AIX9>|=UL~Cn{e4~pd5<4ZMTHE-})>a`)6MiO#vvCNu?2xvRt~~v(-eg&{GhOyd
zy&&`e_{ye^1*;i^1aw|xAwGESPg(LZuBMPJTorZWfD5U>;sFU6X*~BmO>q^eBG8n4
z{)(YrzO5vAyTd(aIF=rbE5JxUq=wGI7)en_yV)_Phm%Z1Q#r3%_Ga;2k(L@3@;ly}
zEM$$+id(~aU|)LziYU~YJ4FmQZ{ZT*DqX|X>H8*zXK0hV4F{;P0jhrBN*a&+BWku)
zt3_b*s=3i9srgQ0+JO#X0jDGV$N_2WUoj`UHjwN#NF`=q-A_GUJJajHQ|??Z@r6kq
z+IZS53hAU*{(j2&S`Bg=|DOHqhY@P&MVNu3tw%M(K?oO)kiW(UcfR6nJE+Q{!SVN#
zq!rNLJp3uauE2LTO6nY!<PF*22cEop#%ezH<wonMNOj5)gNY0uOt4EkS>aIKVq%f!
z_G|xVi>cnXRhtG&hxXT}0uwt~KSB@=J2B?i6LE<3OWcZYHK{osAj;+smy+)W^knW1
zjWBrv5>6i~cc1nVmB_T}NQwAmbnzzk*Z?Th&+`e6LLfAFp=`J*_f~|EzWq^2Cw!ih
z`;wk;@%|y5AmMzEF2%}&jMSu5WQPWicc-`1{Z`~MP~G?cCi1{Ry~3&U4WX0xQ5Vh@
zj}wP<UUdCA|D|$J(QI+`P>S(KW!JUeSJ{?*P2F|G4mn=I3iu4RZJ<WyiH6#Gw+_vm
z6KrCqrL^tq?ynLQ12O}ffygK87Xgp|dEyeb@I8EqQ|-lEI=`l1+?Ub-e|FtX%4CiV
zjTIaKg9-RSV~34~@EbWpx6@GE`U?eia(G|WlH-n-NnGfb*Up={U{i6tE5kbamy2`&
zcHKU~a%o60O;`axzT4=@tKVv!;K`Xu7vzFNl#Ub1t`E#~`P^mb*K1-wr)tdCTn%Z4
zGOF=}#l!D{u?;WMa(B)|Ug7y9c|_OpPXEEwp_)%H=dz-im6-!nmLpca7CZG~MR<=#
zH&_za&+!O$v$6AzuZ)E_;6gxVNhLbc_>}MkxzNC?aenfSJ!eXO3WepqCgmgr=484(
zy!ST6I^TO;xYm1;g@Wupk4es<o4ZPtjY}}7Eyjw4)^I-bC{#o7sMPZifaNzCQUOB7
zf2z0yi5q?TXL8C)mT*F#>aIZ5S5C%)x2n;({DDExl9kVk;l?~8y)Iem?5!HpB{Yz8
z^B3~<l!$2Tvw;dj6na1*`nr(=BAOU@Y4?;B&fl=U`6A0j<8$n48TV7HO^WP%FOs_c
z3budyw(LLlwXo={*dl8Ua2lD`XmS#KWaz&C*ze~{ajb;pH8Gj%b8S<0dl!P4yxC$~
z{Rre;K8duatpaa64o_J&ukJ)nB_t^}9G<Nl<w56l!~2)T(?a7sc}0Ilx^klRfbPfg
zb6HQ})1gcqHEPv`I@b5{0|=y>TX{7%6#8s40ykhsf#Jn*#d((Y%3bJ^5XcBzneWUo
z=jbr3V_lM!3}Y3>iu8tLI#M?~@*2b20p8+T{oo{nXl3P&>3qX56SsM!E$&^!3a{Wo
z;TQ}*2a9H;KXa}~oa3XL-Sq>A$D^xt3wPHnp|WXzQ<$VX3bD{MDM&Y2ftP`Y4H-1|
zepGDR0yr&iNUqj<gsUFz5Zw1*ApnBON*tKIk1g9@>z&~;lXz9y)bn=v%n?U6TYsa#
z$vNty^04O4su`cHit)OIKR@PLyFlDM{YM9KZ8*>q)+K7d^RfQn_$2k(x~6|^Ep#za
z6dM$Vh$RW-@?!A&bMeY2m9?~HN(_maG=9+s+l&^%n5o%2>jGyd#%LXPU{fVqa2<?Q
z2pDfHA$Aans^0Z~-=&U{*5g=fiGm<CZ$SUW`#Xy-*J}=YuT-Td{+&@_V~j~oXK$+s
zuJbgXksgJN@v^9#g-gz@YABVHxZ0}eeEy6tvUXJ|lD;}R(*?HxIs4JtWR!2Xx}}$3
zM%7(HQdlF+aSn2z`T=syb~o(I9sFHEh(mI0V^YQFEbz{DAH5Ro@ohG!X}RIWMFuK?
zg^f)#iy^w)m43y`YDP&1r6B7Nm&Hc3*c}nK)&?YQ?uZs}8;k4S2$MY*^ZgoAXO{)u
z6@bt7l*|mv4}oMbr1+RttjW&0Y6@wO)}y<TgoA-cH4`aiS+BVNTAEk>XuY6DfSH1O
z_ZB=p_iD^k7kf&EogJ-rWkVCd8ZU8N>q3Q-NdzP5rD+}F{MJo42Uc}|_UB;P_&BjN
zV1r#IJKf%^-=D5Yf!y(a;Zi*h-|G7&-!1gy&0GaBX)E^Tbij|KIxqU<?;)|_^1Z3z
z<20;g?HvB;g>sWYeI0&GZo#n<FOIH-;WuzeT_>b+m)VCF_LiRR3o0t^*VLE>d2U8c
zz@Q^-IH@NAH&Sn1+4;f_&O89}V`NNb4t={{2Bi23BVQV{&Mega$tvax-kg!;KdXl1
z8~;3Y0yzE_DH6+b1U~x|IN@J5KQAcb-0LEzs3H#_%7eHmn&%(UY0+skmR5dqtmcm!
zdP&<1I8sG{B1+#mt`2`(Z49jM1J<M8RqAa?Q0S}gwF5(R11o&mKm1C>K11Qx*HPVl
zmw#vCs-*3NucV;BbU;MSZOnzrXY5va^gA++i#!~^;-IY!pa(OUWBDQJeW%OTJCRV%
zqJ`5yxV`3kc8EZfd?QoJGHy00?L+bx7j!kcEDQf!Mphtu=}_feIYZh_J|&nJ#{nP%
z^BDVi32klWQJ0fcL@(XoXrrJKT4<&^%DecJH1mR&J#-?~3be8?h@lr>rczQFNy}vt
zsn%^4g+#KydeDK3`hl4^4j1&T^d&$0y0(&=WoP6q@3W0{8u>G1x^mU>n@`fG4_Y)L
z#rnYGkkLY)DcdQA)v$u+>=9b`jda+~utw`M^^}2vl7FaniO{%m`}4Gw4zi)z<METH
z%GRO@&y#tP(N^dCp2bRIb{oRC+ra9G!Ff&|=tt!>9m*Jq<1o2xe<}Nl?D#Ob)HCvU
zF%Xh*-r2)Xr#u8Af?<fzno_FqH{wg;VEDnj98>N8h0s)Kh%q7?+D~*Xa-z!l0UuH<
z$OgLxk3m|{COPkTqzwQ%hKCgYTLOP*Tb@6KOap6Ew*=Ty5N~;VD_wWCYY94Amlpox
z+ia7RW2IB{|EZy=PF!v}?pY`o`J>8HC5*aohbf@`+62sxGdoG0&hfF55iqzR%XIP3
zpm+hp24oHklEErC%Dv6f^(4eQXILoE$#b*s&MZT9eCxCC5LP-DL=CL(gWlXp;cYgU
zyS>*!q@gvakNXr0=PgJAC}Dxu?l1b;#I#!>a=4oh)C|I&pBIoO_qfm(!ypr|@F9Qp
z+IvVU5W-?bMFf3Q-Lw@gLO&>y^-HG?O#tLF*1@p!?W%31=Bvb9zyo#uIM34<)H4w=
zkbfux=DYBPt(BMS*YH^%+MiQMdNlg4;zc{I>AgYHzU|yWEa*sf>`n2r?u)DIv?d74
zb1NEl;&Tu`NYI*rdb(WhQ_cu2@PC%Ir?FZg7{?h9tO)cKN5w_W*FP1_iumDia89&o
zbd+d~SH!7!)HL*|m+>CsBrh4R@#yo~Xu6McvLtt!x>%wqeBUsnQaU!*C(`bJyZrwP
D<sSsO

literal 0
HcmV?d00001

diff --git a/samples/web-app-blob-storage/dotnet/src/wwwroot/style.css b/samples/web-app-blob-storage/dotnet/src/wwwroot/style.css
new file mode 100644
index 0000000..67508fa
--- /dev/null
+++ b/samples/web-app-blob-storage/dotnet/src/wwwroot/style.css
@@ -0,0 +1,341 @@
+*, *::before, *::after { box-sizing: border-box; margin: 0; padding: 0; }
+
+:root {
+  --teal-50:   #f0fafb;
+  --teal-100:  #d0f0f5;
+  --teal-500:  #0e9db0;
+  --teal-600:  #0e6ba8;
+  --teal-700:  #0a5a8e;
+  --teal-800:  #074d78;
+  --gray-50:   #f9fafb;
+  --gray-100:  #f3f4f6;
+  --gray-200:  #e5e7eb;
+  --gray-400:  #9ca3af;
+  --gray-500:  #6b7280;
+  --gray-700:  #374151;
+  --gray-900:  #111827;
+  --white:     #ffffff;
+  --bg:        #f0f8ff;
+  --shadow-sm: 0 1px 2px rgba(0,0,0,.06);
+  --shadow:    0 4px 6px -1px rgba(0,0,0,.10), 0 2px 4px -2px rgba(0,0,0,.06);
+  --shadow-lg: 0 10px 15px -3px rgba(0,0,0,.10), 0 4px 6px -4px rgba(0,0,0,.06);
+  --radius:    12px;
+  --toast-bg:  #111827;
+  --toast-fg:  #ffffff;
+}
+
+html[data-theme="dark"] {
+  --gray-50:   #0f172a;
+  --gray-100:  #1e293b;
+  --gray-200:  #334155;
+  --gray-400:  #94a3b8;
+  --gray-500:  #cbd5e1;
+  --gray-700:  #e2e8f0;
+  --gray-900:  #f8fafc;
+  --white:     #1e293b;
+  --bg:        #0a1929;
+  --teal-50:   #0e2a38;
+  --teal-700:  #7dd3e8;
+  --shadow-sm: 0 1px 2px rgba(0,0,0,.4);
+  --shadow:    0 4px 6px -1px rgba(0,0,0,.5), 0 2px 4px -2px rgba(0,0,0,.4);
+  --shadow-lg: 0 10px 15px -3px rgba(0,0,0,.6), 0 4px 6px -4px rgba(0,0,0,.4);
+  --toast-bg:  #334155;
+  --toast-fg:  #f8fafc;
+}
+
+body {
+  font-family: 'Inter', system-ui, sans-serif;
+  background: var(--bg);
+  color: var(--gray-900);
+  min-height: 100vh;
+  transition: background 0.2s, color 0.2s;
+}
+
+/* ── Header ─────────────────────────────────────────── */
+header {
+  background: linear-gradient(135deg, var(--teal-800) 0%, var(--teal-600) 100%);
+  color: #ffffff;
+  padding: 1.5rem 2rem;
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  flex-wrap: wrap;
+  gap: 1rem;
+  box-shadow: var(--shadow-lg);
+}
+
+.header-left h1 { font-size: 1.6rem; font-weight: 700; letter-spacing: -0.02em; }
+.header-left p  { font-size: 0.85rem; opacity: 0.8; margin-top: 2px; }
+
+.header-right { display: flex; align-items: center; gap: 0.6rem; }
+
+#btn-dark-mode {
+  background: rgba(255,255,255,.15);
+  color: #ffffff;
+  border: 1.5px solid rgba(255,255,255,.3);
+  border-radius: 8px;
+  padding: 0.5rem;
+  cursor: pointer;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  transition: background 0.15s, transform 0.1s;
+}
+#btn-dark-mode:hover { background: rgba(255,255,255,.25); transform: translateY(-1px); }
+
+#btn-add {
+  background: #ffffff;
+  color: var(--teal-700);
+  border: none;
+  border-radius: 8px;
+  padding: 0.55rem 1.2rem;
+  font-size: 0.9rem;
+  font-weight: 600;
+  cursor: pointer;
+  display: flex;
+  align-items: center;
+  gap: 0.4rem;
+  transition: background 0.15s, transform 0.1s;
+  white-space: nowrap;
+}
+#btn-add:hover { background: var(--teal-50); transform: translateY(-1px); }
+
+/* ── Content area ────────────────────────────────────── */
+.content {
+  max-width: 820px;
+  margin: 2rem auto;
+  padding: 0 1.5rem 3rem;
+}
+
+/* ── Table ───────────────────────────────────────────── */
+#activity-table {
+  width: 100%;
+  border-collapse: collapse;
+  background: var(--white);
+  border-radius: var(--radius);
+  box-shadow: var(--shadow);
+  overflow: hidden;
+  transition: background 0.2s;
+}
+
+#activity-table thead tr {
+  background: linear-gradient(135deg, var(--teal-800) 0%, var(--teal-600) 100%);
+  color: #ffffff;
+}
+
+#activity-table th {
+  padding: 0.85rem 1.1rem;
+  font-size: 0.85rem;
+  font-weight: 600;
+  letter-spacing: 0.02em;
+  text-align: left;
+}
+
+#activity-table th.col-actions { text-align: center; }
+
+#activity-table td {
+  padding: 0.75rem 1.1rem;
+  font-size: 0.93rem;
+  color: var(--gray-900);
+  border-bottom: 1px solid var(--gray-200);
+  transition: background 0.15s, color 0.2s, border-color 0.2s;
+}
+
+#activity-table tbody tr:last-child td { border-bottom: none; }
+#activity-table tbody tr:hover td { background: var(--teal-50); }
+
+.col-btn {
+  width: 1px;
+  text-align: center;
+  padding-left: 0.3rem !important;
+  padding-right: 0.3rem !important;
+  white-space: nowrap;
+}
+
+#activity-table td.col-btn:last-child { padding-right: 0.6rem !important; }
+
+/* ── Row action buttons ──────────────────────────────── */
+.btn-edit, .btn-delete {
+  display: inline-flex;
+  align-items: center;
+  gap: 0.3rem;
+  padding: 0.55rem 0.75rem;
+  border-radius: 6px;
+  font-size: 0.8rem;
+  font-weight: 600;
+  cursor: pointer;
+  transition: background 0.15s, color 0.2s, border-color 0.2s, transform 0.1s;
+  white-space: nowrap;
+  width: 90px;
+  justify-content: center;
+}
+
+.btn-edit {
+  border: 1.5px solid var(--teal-700);
+  background: var(--white);
+  color: var(--teal-700);
+}
+
+.btn-edit:hover {
+  background: var(--teal-50);
+  transform: translateY(-1px);
+}
+
+.btn-delete {
+  border: none;
+  background: var(--teal-600);
+  color: #ffffff;
+}
+
+.btn-delete:hover {
+  background: var(--teal-700);
+  transform: translateY(-1px);
+}
+
+/* ── Empty cell ──────────────────────────────────────── */
+.empty-cell {
+  text-align: center;
+  color: var(--gray-400) !important;
+  font-style: italic;
+  padding: 3rem 1rem !important;
+}
+
+/* ── Modal overlay ───────────────────────────────────── */
+#overlay, #delete-overlay {
+  display: none;
+  position: fixed;
+  inset: 0;
+  background: rgba(0,0,0,.45);
+  z-index: 100;
+  align-items: center;
+  justify-content: center;
+  padding: 1rem;
+}
+#overlay.open, #delete-overlay.open { display: flex; }
+
+.modal {
+  background: var(--white);
+  border-radius: var(--radius);
+  box-shadow: var(--shadow-lg);
+  width: 100%;
+  max-width: 460px;
+  overflow: hidden;
+  transition: background 0.2s;
+}
+
+.modal-header {
+  background: linear-gradient(135deg, var(--teal-800) 0%, var(--teal-600) 100%);
+  color: #ffffff;
+  padding: 1.1rem 1.4rem;
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+}
+.modal-header h2 { font-size: 1rem; font-weight: 600; }
+
+#btn-close-modal, #btn-close-delete-modal {
+  background: none;
+  border: none;
+  color: rgba(255,255,255,.8);
+  cursor: pointer;
+  font-size: 1.4rem;
+  line-height: 1;
+  padding: 2px;
+  transition: color 0.15s;
+}
+#btn-close-modal:hover, #btn-close-delete-modal:hover { color: #ffffff; }
+
+.modal-body {
+  padding: 1.4rem;
+  color: var(--gray-700);
+  font-size: 0.93rem;
+  line-height: 1.5;
+  transition: color 0.2s;
+}
+
+.modal form {
+  padding: 1.4rem;
+  display: flex;
+  flex-direction: column;
+  gap: 1rem;
+}
+
+.field { display: flex; flex-direction: column; gap: 0.3rem; }
+
+.field label { font-size: 0.82rem; font-weight: 600; color: var(--gray-700); }
+
+.field input {
+  padding: 0.55rem 0.8rem;
+  border: 1.5px solid var(--gray-200);
+  border-radius: 7px;
+  font-size: 0.9rem;
+  font-family: inherit;
+  color: var(--gray-900);
+  background: var(--white);
+  outline: none;
+  transition: border-color 0.15s, box-shadow 0.15s, background 0.2s, color 0.2s;
+}
+.field input:focus {
+  border-color: var(--teal-500);
+  box-shadow: 0 0 0 3px rgba(14,109,168,.15);
+}
+
+.modal-actions {
+  display: flex;
+  justify-content: flex-end;
+  gap: 0.6rem;
+  padding: 0 1.4rem 1.4rem;
+}
+
+.btn-secondary {
+  padding: 0.55rem 1.1rem;
+  border-radius: 7px;
+  border: 1.5px solid var(--teal-700);
+  background: var(--white);
+  color: var(--teal-700);
+  font-size: 0.88rem;
+  font-weight: 600;
+  cursor: pointer;
+  transition: background 0.15s, color 0.2s, border-color 0.2s;
+}
+.btn-secondary:hover { background: var(--teal-50); }
+
+.btn-primary {
+  padding: 0.55rem 1.3rem;
+  border-radius: 7px;
+  border: none;
+  background: var(--teal-600);
+  color: #ffffff;
+  font-size: 0.88rem;
+  font-weight: 600;
+  cursor: pointer;
+  transition: background 0.15s;
+}
+.btn-primary:hover { background: var(--teal-700); }
+
+/* ── Toast ───────────────────────────────────────────── */
+#toast {
+  position: fixed;
+  bottom: 1.5rem;
+  right: 1.5rem;
+  background: var(--toast-bg);
+  color: var(--toast-fg);
+  padding: 0.65rem 1.1rem;
+  border-radius: 8px;
+  font-size: 0.85rem;
+  opacity: 0;
+  transform: translateY(8px);
+  pointer-events: none;
+  transition: opacity 0.2s, transform 0.2s;
+  z-index: 200;
+}
+#toast.show { opacity: 1; transform: none; }
+
+/* ── Responsive ──────────────────────────────────────── */
+@media (max-width: 600px) {
+  header   { padding: 1.2rem 1rem; }
+  .content { padding: 1rem 0.75rem 3rem; }
+  .col-btn { white-space: nowrap; }
+  .btn-edit, .btn-delete { width: auto; padding: 0.55rem 0.5rem; }
+}
+

From 6bea654835a9eda58439a132c55eb8a2b54b2d08 Mon Sep 17 00:00:00 2001
From: Paolo Salvatori <leprino@hotmail.com>
Date: Tue, 8 Sep 2026 14:02:07 +0200
Subject: [PATCH 04/20] Add the .NET version of web-app-managed-identity

Same ASP.NET Core Vacation Planner as web-app-blob-storage, authenticating
to Blob Storage with Microsoft Entra Workload ID through
DefaultAzureCredential: the pod's service account carries the federated
identity, and the emulator's webhook injects the token file, the authority
host and the trust bundle (SSL_CERT_FILE), so the app needs no
identity-specific code. Verified on the emulator's AKS: rollout,
port-forward and in-cluster smoke tests, then the Python image rolled over
the same Deployment.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
---
 .../web-app-managed-identity/dotnet/README.md |  75 ++++
 .../dotnet/images/architecture.png            | Bin 0 -> 41535 bytes
 .../dotnet/scripts/00-variables.sh            |  41 +++
 .../dotnet/scripts/01-deploy-resources.sh     | 242 +++++++++++++
 .../dotnet/scripts/02-build-docker-image.sh   |  18 +
 .../dotnet/scripts/03-run-docker-container.sh |  31 ++
 .../dotnet/scripts/04-push-docker-image.sh    |  40 ++
 .../dotnet/scripts/05-deploy-app.sh           | 307 ++++++++++++++++
 .../dotnet/scripts/Dockerfile                 |  28 ++
 .../dotnet/scripts/configmap.yml              |  12 +
 .../dotnet/scripts/deployment.yml             |  86 +++++
 .../dotnet/scripts/gateway.yml                |  30 ++
 .../dotnet/scripts/httproute.yml              |  21 ++
 .../dotnet/scripts/issuer.yml                 |  25 ++
 .../dotnet/scripts/namespace.yml              |   4 +
 .../dotnet/scripts/secret.yml                 |  12 +
 .../dotnet/scripts/service.yml                |  16 +
 .../dotnet/src/.dockerignore                  |   2 +
 .../dotnet/src/Models/Activity.cs             |   4 +
 .../dotnet/src/Pages/Delete.cshtml            |   2 +
 .../dotnet/src/Pages/Delete.cshtml.cs         |  21 ++
 .../dotnet/src/Pages/Index.cshtml             | 265 ++++++++++++++
 .../dotnet/src/Pages/Index.cshtml.cs          |  47 +++
 .../dotnet/src/Pages/_ViewImports.cshtml      |   4 +
 .../dotnet/src/Program.cs                     |  48 +++
 .../dotnet/src/Services/BlobActivityStore.cs  | 123 +++++++
 .../dotnet/src/Services/BlobStorageOptions.cs |  19 +
 .../dotnet/src/Services/IActivityStore.cs     |  24 ++
 .../src/Services/SecretKeyXmlRepository.cs    |  49 +++
 .../dotnet/src/Services/StoreInitializer.cs   |  33 ++
 .../dotnet/src/VacationPlanner.csproj         |  12 +
 .../dotnet/src/appsettings.json               |   9 +
 .../dotnet/src/wwwroot/favicon.ico            | Bin 0 -> 36791 bytes
 .../dotnet/src/wwwroot/style.css              | 341 ++++++++++++++++++
 34 files changed, 1991 insertions(+)
 create mode 100644 samples/web-app-managed-identity/dotnet/README.md
 create mode 100644 samples/web-app-managed-identity/dotnet/images/architecture.png
 create mode 100755 samples/web-app-managed-identity/dotnet/scripts/00-variables.sh
 create mode 100755 samples/web-app-managed-identity/dotnet/scripts/01-deploy-resources.sh
 create mode 100755 samples/web-app-managed-identity/dotnet/scripts/02-build-docker-image.sh
 create mode 100755 samples/web-app-managed-identity/dotnet/scripts/03-run-docker-container.sh
 create mode 100755 samples/web-app-managed-identity/dotnet/scripts/04-push-docker-image.sh
 create mode 100755 samples/web-app-managed-identity/dotnet/scripts/05-deploy-app.sh
 create mode 100644 samples/web-app-managed-identity/dotnet/scripts/Dockerfile
 create mode 100644 samples/web-app-managed-identity/dotnet/scripts/configmap.yml
 create mode 100644 samples/web-app-managed-identity/dotnet/scripts/deployment.yml
 create mode 100644 samples/web-app-managed-identity/dotnet/scripts/gateway.yml
 create mode 100644 samples/web-app-managed-identity/dotnet/scripts/httproute.yml
 create mode 100644 samples/web-app-managed-identity/dotnet/scripts/issuer.yml
 create mode 100644 samples/web-app-managed-identity/dotnet/scripts/namespace.yml
 create mode 100644 samples/web-app-managed-identity/dotnet/scripts/secret.yml
 create mode 100644 samples/web-app-managed-identity/dotnet/scripts/service.yml
 create mode 100644 samples/web-app-managed-identity/dotnet/src/.dockerignore
 create mode 100644 samples/web-app-managed-identity/dotnet/src/Models/Activity.cs
 create mode 100644 samples/web-app-managed-identity/dotnet/src/Pages/Delete.cshtml
 create mode 100644 samples/web-app-managed-identity/dotnet/src/Pages/Delete.cshtml.cs
 create mode 100644 samples/web-app-managed-identity/dotnet/src/Pages/Index.cshtml
 create mode 100644 samples/web-app-managed-identity/dotnet/src/Pages/Index.cshtml.cs
 create mode 100644 samples/web-app-managed-identity/dotnet/src/Pages/_ViewImports.cshtml
 create mode 100644 samples/web-app-managed-identity/dotnet/src/Program.cs
 create mode 100644 samples/web-app-managed-identity/dotnet/src/Services/BlobActivityStore.cs
 create mode 100644 samples/web-app-managed-identity/dotnet/src/Services/BlobStorageOptions.cs
 create mode 100644 samples/web-app-managed-identity/dotnet/src/Services/IActivityStore.cs
 create mode 100644 samples/web-app-managed-identity/dotnet/src/Services/SecretKeyXmlRepository.cs
 create mode 100644 samples/web-app-managed-identity/dotnet/src/Services/StoreInitializer.cs
 create mode 100644 samples/web-app-managed-identity/dotnet/src/VacationPlanner.csproj
 create mode 100644 samples/web-app-managed-identity/dotnet/src/appsettings.json
 create mode 100644 samples/web-app-managed-identity/dotnet/src/wwwroot/favicon.ico
 create mode 100644 samples/web-app-managed-identity/dotnet/src/wwwroot/style.css

diff --git a/samples/web-app-managed-identity/dotnet/README.md b/samples/web-app-managed-identity/dotnet/README.md
new file mode 100644
index 0000000..5739197
--- /dev/null
+++ b/samples/web-app-managed-identity/dotnet/README.md
@@ -0,0 +1,75 @@
+# Vacation Planner: Azure Blob Storage with Microsoft Entra Workload ID
+
+> A Python version of this sample lives in [../python](../python/README.md).
+
+This sample demonstrates a ASP.NET Core Razor Pages single-page web application called *Vacation Planner* hosted on an [Azure Kubernetes Service (AKS)](https://learn.microsoft.com/en-us/azure/aks/what-is-aks) cluster in the cloud on Azure or locally in the LocalStack emulator for Azure. The app runs in a dedicated namespace and stores activity data in the `activities` container of an [Azure Blob Storage](https://learn.microsoft.com/en-us/azure/storage/blobs/storage-blobs-introduction) account.
+
+Unlike the [`web-app-blob-storage`](../../web-app-blob-storage/dotnet/) sample, which uses a connection string, this sample authenticates to the storage account without any secret, using [Microsoft Entra Workload ID](https://learn.microsoft.com/en-us/azure/aks/workload-identity-overview). A [user-assigned managed identity](https://learn.microsoft.com/en-us/entra/identity/managed-identities-azure-resources/overview) is federated with a Kubernetes service account, so the pod obtains Microsoft Entra tokens through the cluster's OIDC issuer and accesses the storage account with its RBAC role assignment.
+
+Optionally, when `DEPLOY_GATEWAY="true"` in [`00-variables.sh`](scripts/00-variables.sh), the sample also exposes the app on a public hostname through the [Gateway API](https://gateway-api.sigs.k8s.io/), with an A record created in an [Azure DNS](https://learn.microsoft.com/en-us/azure/dns/dns-overview) zone and a TLS certificate issued via [cert-manager](https://cert-manager.io/).
+
+Before installing the sample, make sure to create an [Azure Kubernetes Service (AKS)](https://learn.microsoft.com/en-us/azure/aks/what-is-aks) cluster by using one of the following scripts:
+
+- [scripts/01-system-assigned-managed-identity.sh](../../../scripts/01-system-assigned-managed-identity.sh): creates the cluster using a system-assigned managed identity as its cluster identity.
+- [scripts/01-user-assigned-managed-identity.sh](../../../scripts/01-user-assigned-managed-identity.sh): creates the cluster using a user-assigned managed identity as its cluster identity.
+
+Both scripts enable the OIDC issuer and workload identity that this sample relies on. If you enable the Gateway path, also install the [Gateway API](https://gateway-api.sigs.k8s.io/) and [cert-manager](https://cert-manager.io/) add-ons from the root `scripts/` folder. All commands below are run from this sample's `scripts/` folder.
+
+> **Running on LocalStack?** Install the [lstk CLI](https://docs.localstack.cloud/aws/developer-tools/running-localstack/lstk/) and run `lstk az start-interception` to route Azure CLI calls to the emulator. See [Run against LocalStack](../../../README.md#run-against-localstack) for the full setup.
+
+## Architecture
+
+The following diagram illustrates the architecture of the solution:
+
+![Architecture Diagram](./images/architecture.png)
+
+## Deployment workflow
+
+Run the numbered scripts in order from the `scripts/` folder:
+
+```bash
+cd scripts
+./01-deploy-resources.sh
+./02-build-docker-image.sh
+./03-run-docker-container.sh   # optional local smoke test
+./04-push-docker-image.sh
+./05-deploy-app.sh
+```
+
+## Scripts and manifests
+
+| File | Description |
+| ---- | ----------- |
+| [`00-variables.sh`](scripts/00-variables.sh) | Defines the variables shared across the other scripts (resource names, image tag, managed identity and federated credential names, storage account, optional DNS/Gateway settings, Kubernetes namespace, …). The other scripts load these values by sourcing this file. |
+| [`01-deploy-resources.sh`](scripts/01-deploy-resources.sh) | Deploys the Azure resources used by this sample: the resource group, the [Azure Container Registry (ACR)](https://learn.microsoft.com/en-us/azure/container-registry/container-registry-intro), the [Azure Blob Storage](https://learn.microsoft.com/en-us/azure/storage/blobs/storage-blobs-introduction) account and `activities` container, and the [user-assigned managed identity](https://learn.microsoft.com/en-us/entra/identity/managed-identities-azure-resources/overview) with its role assignment on the storage account. |
+| [`02-build-docker-image.sh`](scripts/02-build-docker-image.sh) | Builds the Docker image for the web app from the [`src/`](src/) folder. |
+| [`03-run-docker-container.sh`](scripts/03-run-docker-container.sh) | Runs the web app in a local Docker container (no Kubernetes) to validate that it starts and connects to the storage account as expected. |
+| [`04-push-docker-image.sh`](scripts/04-push-docker-image.sh) | Tags and pushes the Docker image to the Azure Container Registry, on Azure or in the LocalStack emulator. |
+| [`05-deploy-app.sh`](scripts/05-deploy-app.sh) | Creates the workload-identity service account and the [federated identity credential](https://learn.microsoft.com/en-us/entra/workload-id/workload-identity-federation) that links it to the managed identity, then uses the YAML manifests below (templated with `yq`) to deploy the app. When `DEPLOY_GATEWAY="true"`, it also applies the Issuer, Gateway, and HTTPRoute and updates the [Azure DNS](https://learn.microsoft.com/en-us/azure/dns/dns-overview) A record. |
+| [`Dockerfile`](scripts/Dockerfile) | Builds the Docker image of the web app. |
+| [`namespace.yml`](scripts/namespace.yml) | Creates the Kubernetes namespace. |
+| [`configmap.yml`](scripts/configmap.yml) | Creates the ConfigMap holding non-secret input values (blob container name, storage account URL, managed identity client ID, tenant ID) passed to the app as environment variables. |
+| [`secret.yml`](scripts/secret.yml) | Creates the Secret holding sensitive values (the `SECRET_KEY` the app derives its Data Protection key ring from (so antiforgery tokens and flash messages are valid on every replica), and the optional connection string / client secret fallback) passed to the app as environment variables. |
+| [`deployment.yml`](scripts/deployment.yml) | Creates the Kubernetes Deployment, including the pod specification and the workload-identity service account reference. The liveness and readiness probes call `GET /health`. |
+| [`service.yml`](scripts/service.yml) | Creates the `ClusterIP` Service that exposes the web app inside the cluster. |
+| [`issuer.yml`](scripts/issuer.yml) | (Gateway path) cert-manager Issuer that solves the ACME HTTP-01 challenge through a Gateway API HTTPRoute. |
+| [`gateway.yml`](scripts/gateway.yml) | (Gateway path) Gateway API Gateway that exposes the app on the configured public hostname. |
+| [`httproute.yml`](scripts/httproute.yml) | (Gateway path) Gateway API HTTPRoute that routes the hostname's traffic to the Service. |
+
+## Accessing the web app
+
+By default the app is exposed through a `ClusterIP` service, which is only reachable from inside the cluster. Port-forward it to a local port to open it from your machine:
+
+```bash
+kubectl port-forward service/vacation-planner-blob 8080:80 -n vacation-planner-blob
+```
+
+Then browse to [http://localhost:8080](http://localhost:8080). Alternatively, use a tool such as [k9s](https://k9scli.io/) to start the port-forward interactively.
+
+The app also exposes `GET /health`, the endpoint the liveness and readiness probes call: it returns `{"status": "ok"}` when the blob container is reachable and `503` with `{"status": "unavailable"}` otherwise.
+
+```bash
+curl http://localhost:8080/health
+```
+
+If you deployed the Gateway path (`DEPLOY_GATEWAY="true"`), the app is instead reachable directly at the public hostname configured in [`00-variables.sh`](scripts/00-variables.sh) (`https://<subdomain>.<dns-zone>`), with no port-forward required.
diff --git a/samples/web-app-managed-identity/dotnet/images/architecture.png b/samples/web-app-managed-identity/dotnet/images/architecture.png
new file mode 100644
index 0000000000000000000000000000000000000000..188f5dad127033e8dacffc62c451b088717e6b84
GIT binary patch
literal 41535
zcmaI7WmH^Evj#d4Bm{yb*bv-;yIT@qaCdiicMb0D65QP#LU0Qn+}+*b?!51J&beo;
zbMKE?8}{toT~%H6)Kk?xAu>|J@85ynfk2@5q9THFAP}?`@PT~`4crNTXRr-is2zk<
z90cqPbsbEttq2uNEe%1&rq+aPgu2GogiH)fY=n#qTr6x{%*=$;42%p62GL&%fY;z1
zL?wmb58lGPrKe;lcU}W-A=rqh+Jiud=zl*@lgnODz)cwAuaaLupz0{ZCtX+&C_711
z@T-E$!chi-hr-PA?P&(@BZQ4jH5Qfea}F^~-DedMn~;sTh23Kkv&A2tWnGt)w8!FE
z3*$ZVSec2x)L3Pyua2kmmNvfmA^N>TLo*P4ON5I$&_N$Jf9g4&!JXns&Kx&b)>)~~
zVSm!RyOiR-`!x3YH2$rYMjQ$dN9U7oCp~Zly`>?H04_eT(GcL$1ua4XTy&uF(11%7
zX!0#^Q307EF_*AST!qGx3-_}rHb?u$UE<+EgM0{~C$Y5@6yq^4wk_sav!S_2E8}@v
zID57QB*~~X;>G9Wp+Q~K(56V#9ELQXX+KkyGMJJW3m?oY=(=>~<o!ZzEDn8}$Y-EX
zZVSsSZN$J9v0*e4Tfp3?plm%jT}T+jo?tU?8!{4Wb2`Xa8}Ff2r@Di=E0-uFVX+TP
zul@zxgV4^jBkO9kpi)oS+0Yb2#zI#{ySZ7?IE`V$m>^_$pW?{fq~9A~p0C=T??L2k
zWP2>d>>gzxs#pUD4zss!eiFZI5-{AJ)>5)oLr0uS&a3j+e7P1Ll~=MHqM^6gLQ$5x
zrxpW`j@MK9je|j;Hn=>-aE8w$h6NEC)5skkSoAL=iTO0G&e_@*4CqE!VVG;|j<$?>
zn5hd}DkiW;w==C*b5qotR{pG;)jb9`o9upb4tE}nJt{c_(~LXH!GJ&#U=jVhFEBwH
zFagoh-!SB7Q3loh-HRjg@*=jK;#d;O7#2K#X{0Nl?a9D`TyRA6|8%A3?L4QuS&{~>
zH$m7Ej%Y58TyfH(Y7&HIW@eBhcj-p9hL^RiGW?m}^|zWd4^vU8oaO~nesl$WaRF8X
zE4;nfjcFF^fR$1Ia%DqpC3Z>V_^ivLw$}pmUXn&&Oftn(e<8*WahUo3Wx6GuxQ7f!
zekVa`$Aa+_9lb@}4Y?WylragYtM&Jv_`gBL0I&3ax(%Qlh{lKIZ<Jwv0Sh2-BZjrK
zm^7{{R7zwusu9dYOjWhL2N9zBumoa1mA&+BEIfrMjD2J2pL=sQ`|<1M26Uv;e%1Fl
zUS7a8lYkM>tsvf(-<x4~ED90rXtJ~gB3B7|hA!$B7<=|RJ|R~v7xZ|{cFgqQIo(__
zNLzg#rs}gZM?M;c0wp6w_eJ}wd(cu0FG1TkOu=$0sphd?iBTTX(z^^YuU`Mm_vAz}
zuTN!}GE0jr(Nwpiy4Mito^2?(&cs(tyYuU-%uKh&)9+w~zX9Mv0$D^qxZ6CoeP$;8
z$U#?3zjhn8Gdu9U0*mf=m~kcB?10FzN;1fk<^wzHG`L==6Ut!OD-HXyoU@7^9;9Oj
z=z{c}T$THnymcy|aXpcBPF&rq{Htk3ochv0>Ss-B`aYO{=6MG!_nJW=B1wa~mV~6U
zLC?#@C*0OaqV!{xj?O{T@b;;{19mYJMyz+kaBE_x=nNw!G2S>WG%nQC*hx^5pWKa5
zTYl<v6G&`eB>!jfSe@PXYw$ooW57PW#UVDpEpAV)hXTDN6nyCbp+;_5Qm=?w@V!XN
zk|AosfMC$8z<&_~an1aHFXulu{~J8MsM6l>4#FB}EW;rJ(25~Kvc^c))@NxFuss6;
zts~{3sl-&@o8;>@a|}mhm9Wh(63#odejeiTdZMvvEG{`WIiiIHy;UKM=)&|Ge}5Q}
z1;&h|7g?z5Oy6j1u3DxG9oOxA9xX3vJlbN5+#t4Z(6Ocjeer=dg+Vr{n!lqg^_hdj
zF)dhO^;)wlYFT;PQ*T<ydyw8FLW5vPqaixtibAR<KWWk;vMw&J7EI(I$cHRem;vqi
zAdoLSAf0?YWmfI|#gWBR-fEp$t|$(kC9<N*o{oL#xeA{h^FQMdM?<>g+YLRUD8_pF
zRlRT6yfz-bmX2CLgwq7dovWG^Wu-L9SKU*4j{h_8+e9pQz8(u|DgbD8bXflhgf6px
z?KtxvZ2dp1`p-fbI7FJDG=|UI7VVM-Cyho9NG0Aqh5~^w`~~cbd&JHB^y^Xc`@0NA
zqsNjw<5}{@#}?qrG@T1Ln*{yx&~19{h6svD5tzwUWq1%s>rDq_jY|F2c`@SkxmznA
z^F0md%O1!ShVJXHQ-{{cWdRTfH5?dO{BwQyhp8%ig~L-sK(tCI;1M+X4_r9mEfz}t
zo%E>xU?5u4&<+NI(<VU+5gRR>Kn4^j`%NBjbF-2BqXw2fMze*}uaj%amkt&X=!`tM
z4Qfe$HD&#FJjyB3#E`h#6EQbf>*2q&fnqJ1etywetyY3XYwMjdOiS!59}d0w)_`>V
z3MmQ$i}lFa_f9XzC}1j$L4jc2MEBVgb_jd+mzE2D93^QilSnsUH!V+fbMlF0#*B&T
zmov|OdiI3^=@1h}=tjs5(|O<5EUSjRdYC*2u>VpM$~=+Dv{KI4SBR0{Aq}<`Nuo=`
zsJ3XhK2yjE=0DAb!#?C8W4SIgokl{M2j*id%Kw?FU;a+G_WIU~-GVOSyV&w<RLgDp
zry5Doyz>b7snJ3wkKDT4Fc?;GPaX&_CXiyk5PnB1(S2VHjfcnOB&7SUk*eZ(N~pDE
zfS~<6Agt1ZStq=C%LU4Zt?WJE8!mvLl4^AW=R`yVgf|<{-qy8t5Vh>-8fgUww1}<M
zK5nnFUv-`Q%mDJh<S~|2JAPQef4KJ5+HEn}3b}2)>)lEZ7i>rSt^fssLIEB~i6d-i
z%~J62k6sO^?hv+Ikv~YEIv(PsfEOhc{<dr+ZND2@%uVwAobs=k*2hkjq-*8+j|@a-
zNSN>ISHnH?=q^SvzF*qOm({<ci;;Ux2}V`~eL?j>D_M_}5d84Qb~Bbk?@|-|n<i~k
zvX3z4X@WU}s?m;nSyzOB?1vYAzvN|SQT7&1{g?3j7m&{ns7tUf^G*6EVz>QSO6kg!
zozqe{kdG+fU*y5>#zaxw*`+xJOw%J(VL?7$-r$w2k5wxP?Voo~;Zb>=czgKU*tT4C
z1WZJ&rs^Ciu@-)n^eoI7Gc9T+rV^JZcVPH+9Usb-x8^2ac>v!?{<aBu2A53bGcpJj
zrppXTJ6`SP7T!IJcggtH#HnTrShI2?=Of(gl~45|4T55p(pA_R0wcdVBW1Fp=II@L
z{V%`jm2&{A_{J1TKA3Lh?q}}<e*L9^ARa+8Wh4rLtc>@kx;P`vkL>sf#?jd?x&1Fx
zwh&U5>qS8;KOo#-$ZenkDAoB7GG(w3fJFrFK6X+!X6^Va)%Emc!BhMe66=hm5-s=|
zhXg_`0(eYJ53N3()D}hGcCNK^EJ(H{EK<0HZ4bqhudkU%Gh4miu>~6RMF+^<!eS+w
znrneJKXj*i?{Nttnq!B$c27v*Kp^eE-+r<b+-C3$l9R9>ZsQ~tA4y5DIxfkE1W|zq
zWqerzNlwN#c9Xmx8?hgS*#+&*S2d=;9D_ha(2$})k|6b^!%>Mav~z9@@6UxVe0oH_
z&Jek%e!Dn!IGmo3khyL`zy$yyU`{5=H<$d6xy)Lk)24$HWP$hxKom$5RiKW4i6qS*
z*rl~#zm~jwI+G$b40atyU;k8+twh;~ZyyjrsNa4FU^EG)B|coDI(Dx-a3Vk-?4D0Y
z$a!lMgFr3_A|%P!dNk;o4t(sJnV%1;Rg{@w0Jng{)7627O9^p|nH)d7>uV1H5Q^}N
zFN+_--Q|x``+M;qiNo+Wpf6{Dh+|DfwvN3vKS2VX6=$~?Z$MpnzAVtjED~+j39u0-
z<zIkh@_n0!#*y1STE9xyL<wX9R39BJ5}Q6pJu1$HRV*OGb->2416qL)e`o(CIsg@h
z$^6a9rM9|wcv=e3W=g2Zw>;~&K`7R|HeIXAz#H<=|FJ`ljSq!GWF%Gn0_XYpO9z0P
zXM9y)-yl@et6MSvspJ2S1=1z~5&8pi0fS?9&AsJ;0?ha2?VD0Gm$x1fARif6VEq5w
zGyOMHRHC^+|NROTPKo3U^$tkR+3)huTz;OS5O{6mMm>3A0ECPTK=Pmg!9Vc0Ak@^q
z<Lb&3E11=rPE7odBowHcqz8NdqsD(vlS%j?<Zrh3r#fSWmiDPc1EKx|vR3Aoyz|Mm
zADxweumvz8BxnA+k)Q6bjkE3_f&8W;1`xgfdiZ}S@*ipc--`T~-v3J%n7_IZ0Zie)
z^aI`?(jx!<cm9&UI(#jjiN!(_@zw@1rwf5fMAru{Vc|n}_vimsnF4qW^i~%j5g-0h
zfB{fInbYZ->b})tM`CDl&c)Owx=m>`W%HlpcIp$zZ<7Elk9}C!p!S6tgXKbz+A=%a
zEGL&3>E-lh)Z^m;uu|rL@>W&XUA`Oo{bj_6HMOhmdqm#aKsDg<{tn2+PiEU<>R6kn
zO63=~j!+;Uc3?f(MZzMzo_5kk^@9hSIA}*#=U_pg6`0AlOFct2{)2#&ynvLvBkzTi
z!$CgLf4}H6;rM9)Se^85x(sChME@T7zyIgSws(kc1K8F-kN)F{fam-lmD+#UL?E+b
z+MX?&BBzx8u8RC%C<dA27WVyN9*8f+92Uq<KY*IfK9oxJo4&1O2YhOR@(})V`ucZ2
zKwE%kLlNnF>RMR}#N|hrykn0qTa)CY#<gAgyaio>6VL}dL}&x3_-*Rt;vk(y_(ofm
zvp$LW{?AZ4E$*?y54Hr0rPy5dcd896*64pH`|@|Pp$krR`r5XtiRvPZV}`5L9gL5P
zbF69v<aWXs*7kHE6&Qf%P*Afn?*X|en6CWF2|=J_8X#ggQxN+#eI?1bhmm3oxy8d}
zg<#np6019+7itjo%>nEJm`8G4wX5)0qJ-z1v8JwV1s`2wQ&nWtLae;$_yq|C#`$x8
zavDH!VXN9W{;^uw|6jHH9~(mRF0EikI!#n9d-S|GeFD${446h3;E}Sj$mAz)Kp<FC
z7`OkaY;$d+dL=P#^i#!@EU4BSmKfC13f^-d+3q~DSpCcdmW~hr3#6gs{&IY)>An)l
z`}*F92U<+5*~IxMoYlCVDr5bbf{_-yrx#oceck)M*jUN?cwGVHhFB`*!0KcGz^eeH
zvo*{csf!6?I%@2uePhfX7!A~xP2CFe0<^3h8lN(n^IKZzO22e^rLXvmFe3t3sPo1Y
zM)0bSl{U+tis$rrWV>7}*D_go=(#m%L8PYQGef`xfNgJ001AR)j0|q&!VR;(UPx|c
zaMmDsuWs|FPbDTML0+?CHBvUY`u?-JDTDB64`7TRK-R+3w=T&HzYcJN9r@GN*p%2v
z$}Y#<M9X2JUp7c>NkcQv5>Zdd_<m?2Eq61c{9b`99WcWeIBsiT5dggVmkFcZKSKMw
z;wT&d<lvLSo`=jV2|L+{DC*<mhc_S}W&nAMD5$u!?h97g4QbQx?yo=CKR<^+fx2*j
zf>^;bYRK5oG1BDu*%qKO(7@AW_x;}oosETDs2gXAG{>|To}N<xzkUz!Z}Sbq6%Q(-
zeuU>|U*Oi?5CrGXrkxn;u|7P$0YcXuNJ}c0T^&~5+5pPkeNg$gIRcbGjsi{=4xuCL
zhGc?2Sm8i#9S9?Q<VHfxq_1LF<j@yZ39vvQa*(78pxFOc7sVm2M3SXFCvWiSxqzzQ
zbTp1Fq0A<IwzG=Q<8Mg5F?EP439ZS=NvCbqkZWr5%Q?7s-dy-o*V)!m)YW@@91@;d
zdhl`cOK+msyyw(>Pi;z)+&mJRdARgP8SX;c^V2b%lL)==^9h#gtcSZOBPRZEUBXDf
z?_ekQFw>bZ<1s%bD5{u~7)#ob6Wvz&N-AP5{82HM0eq2KOpFcZ!#;`~X1*^5nIaiA
z(?30!yk`?bqu}`rN{iIsxS9aDn|p;>j$=JzrdFodFzJtSuQ7t>x<7A7Z=^gq)V^4X
z{g@RJfP(^kMaY}Ly8=92^?Txih(B#siGlcK37hRJ`12@pBkud%gW?srj;a{(NfnLO
zIP4(BG^Rr*>@hPMnpM$bOPaA!TC3^Zb;KiVXTh_PLPB&54RCkwhiXzWQ?HAb&vblh
zU0~MO-LcQ_jDYNk?aR{QE4xfnUrm$sp<(j;&Hc`pNG@9{HHi?$@t^eW=d{1>JNIW=
zM%=b=fBmSp1>)_k5DGRt>gNbmu3Z}b#QFxn9vHG{$Q;oDTZPU&sljw#&c?=qhrqb8
z7Nzn1aXwq*Z34J%LJr4rA}zQqrG4MrLZWqi+o5wl6GsyKQ0Es$Fe3{Op_TG<4-Qji
zo`xsEq+V|0mFO`61}2GyB&|=6{!v{}NjIPDD;pK2F7~L^W&WpQ1J@Hf)z_jal@L>l
zC)wlp<X`W1efWnqV>*WMAUyO%Cw^s8m+PvK?;xv(C4|4?hu7>^g((}idC+iw+#G#t
z(Ue$t4^X3!sR+y{-l1`9o&tTH9joFZrc`Iw`~-}vK1oLfRn>Z;(7mFU&l7!59yulX
zk(XoCmKG{8qSlNVsx2MSL!^uvHV2X-iQ8IibtT1kn(^hy#i}KB<5F(I=d*@@Z|Vrt
z7M1+WlpMYIkgK*D&#Fm$cea4-?X3p_*}#=Sel%`j8(qvd`Bx4B3@8f74WUy)S)wFi
zlEnbWLIyb26|0n@DgYXP0A8|UHoZ@t6(N3C0$}PHwurvXZ-p8?lKR`voiaXif4Ptk
zPV(Fy=0m>JC^<uFB454g(R680>P?b-z#*q5OZmh>`*uHBnHJdd@*+k40|>+eI5?MJ
z0-GFnsC@*QBpGhw)}As{5e?O%X|}=&uYp2eL2O2SZ{UnFCD!e0a&oIYF)7UiZTVs4
z$*?hNC|aY`x^^jg-b+UmK%LNNY{JeRJ88dT>Q)jk1sn%FL0`A7;<dO;SoZ=XQUSV@
z@r?1hKn^GE7BkWKK$)m=kx?;ISUEUp(14hu1fXLGd5mj}@({7kLlQ;6_=2j}y${L0
z$BRj$>HDXZ08t0nll~9=ig2Jy>O^M&#KwhKvnL+=gY>5?Ub{Sd2ZxJ$5a<gC+Vm<N
z0M|_c-4Z8D#@eGc*MUi+yw96jk?Hq){9e!V#@FrbUTpy4B!7E4K0+d<3LEKY%n=Lw
zJhhg5{$mbVHN3%;<$d(^?&nWV=fm__2YYAQz{m^%I=c}*1;qxv6=k_zf9A14pr6<d
zMQ}`#kHhxwpyjY`)A`>2C8i3#GjDl(y&m=jqIhb|#y<Vayt1mQz(EQlc&{ej2U8(I
z5z#E9WTL01;>Zp=zxw-!4PH6`s+^4eZPkpFOZiO7*fJ{BfA}KybUf59zUFHBERz0F
zl#oJIu9}Ee3XFLS*aM{G?{aKi5hi$c(nkJMbmQqhrdGchLrcWX4%0%I;_0Dw{9itr
zO%tKi!jVnHL9HY>`2|mNeV#;^;U9kJU&hi>8pb0djOF_eU-d7joM6^uu`^T=m$Js2
zb#vkZ*!mB07;_JM%@K)@?t~UqcoZ=IknIm<lYg>xX4@@)3*}f^uOx{%$QI+?Tdiem
zdcI=M+~CMJP?~idP?C5@Fp{b|p5k8+Ls2_wJUSUyq92$*|7QsG6VKD~F<+?fbm*38
z`Ew29i?1Fzx0dKdQJhaU5F7-gl11&xRT1c*BIVGU*A&cZAAjn~r);M+ee@<SIeCuT
zs5Y((-qO+b1MbyhuE)y#mlqG;f0=V&E%?->-f?`8=;ayZww}NQ+mTmdEJNbXA!xGK
zW;b|Nv`IUgWW5CquQCixHs`gY|3{erLPO<80j>)(3;uFL1=51%S9QL?wgdObi@{Vb
z=}Sgd<&F(~5#-Jh={O<VdxtBaLQ7xg$YUoE-OtmId+^ugqZZb^uymo8I0?ICXdYg9
zhh^|`xKYQ#*XHQm$hcy4H{atKhY*)^sB4$g__L27AeZ6(TN_5^0YT~^Ki4ili*wHt
zN_RrlA^+!bFB77(+%(`Db$%}Gm)~u7x%QgNO=7R^_9Q@S>;6sSSZsc8um(z;J;jH}
zBm_;Q;a_!eRe~aMXFsuZS0c`Xzz}<-{Pt{&{E{Nvd=2ujO@g~0M(hYQY4(jGT|%@H
zE%MxV@Bv1o-#*onZfkXv9TlB=+ifeN-+A4Tc#Q1oPxC?QOcd2d*T-711ji%S)X?>w
z^J6AOoAa&^dOVaOe{L<FDJ3sq?dsYkwPScaKE;epoaPG&<7R#0Te0Hc7K$y<;XzK@
zW!Ak5WHI&d@1oY-6t?+Dt{vR?Q~p`N{#khUDQL$k`IV>%-RT*Adme=r#>=5E$RpIt
z#Ois^<6hu$Bg*P0!GfP@>;wLFOPS24><0+JrEluv3K>g1Z}*Q#JONs8xtY^seV+k1
zqa^=vq%9uz*SBKESW*)2sm&c(H_fNo?E0^~nB7Ys2+X|Z2Ypz9UQc%adSW%VmZf3V
zAo5pJ(!ULj>Bat?gFVchmb*)igE0|r?>x|EB(J+x$K%P7>C}@a5eT%#3YX9_bzGu&
zNz7@Q=dJnL_kBNV>ErHc=>>V5tneN&2;|SKL9q_Bgw%PKJ$tCCTt5dsd}YCsshzHU
zGfkOLO7RU#bA7)ji1BZ%>7kaM+YDp(if>Mt7tl(fbo<`n7m+wj2zhzmG3)?M&u`&V
z$5dW0cEKpL)pGr6^|il*KmHa{R%Np{Qgf*Lr=DyZEOCuFVxIp<A8}QA7{Sc{4aMH^
zXqHRd)$!@GgYCDDmqBR;IC!8Cw29;VHaTa4EZhI_`HFVePdHWxp((yGQ0KHJ$+a$L
z!?{#xG$bl(QqBPhH<qLb3Y1Co@!ekW$f}-yNhd$eTfPDlEs~xpaE6rRi*ZwbY~~~Z
z6o_z7XV5#(=tnPcw#vZswbf0ZYeaTKAl2D>ty@-f*-!GO4oLbPvfxxp5J+7FBYW1Q
zPOUpxj5^`1p<X3I%ETOY%_aCN>eo!`i)4YfP@t1<G$N@vImExd`LYWq1Rk|P81i}4
zWNl4tY%cDj6X%Qk%wNA^ef@lKKATLz?|3&$#^*^zOcdzu`I>JuCx$>Tg7>qkOe0&?
z+%ayPmS%_5uULP4e=05sav>4*d0MR;x#q2pC!c4{*;2(R<l`HXP|NGq_Hyr0`pS;Y
zZA@=(i1n9g+3d-Z=>^f94|JE{?vISF+9WXo&2l{qG;oVP48Kee$x**oZug${C#M8%
z9m~^qv~dyZUWZ|gN;Mw_V4ZHfur{Jet`{VoRI$+Uue3b$CiRQY4^h;7-rG!4-hJA+
zt6p6~jX9g{e|h0+1DTppv$lvXMC!6sqDjEUWzBIEC>-k0`JMUy@l)vaS;72--CTGP
z_+S}mbNqbzv}H(aY27B!UV_bWx3$!&Mbl}uh;H0o%v0GZ++HxAz0som{7dI8{_2gE
z6D^jj(Ok1}$dFgtOwJGEVrBE!Du;Q3vCnW?Du<`mzqqU17G+EI$+HxT?!cx0?o(PD
z&MDORvDFk0#SNct%)k)FU9p<gag|5Tp!6U!Y1lm7mHnu?VSr_KUcMZ_g+*X|7#m6K
zv!6Z;fYXm;-UNdw&GrKwFZ-rCx^4@0uqPLH`xm{~v<XzwUiYd4jfMwYQ|9n0t!rpa
z%m{Q}e<%w_^s|Z=-GfW1hC)N_8jkF=e|?GtwsJ<<jj6+ioLX}11SKWSfU4_nnSE+)
z_%0={GN$gx&+c3KVkCjIC#U?L?mN6&xoDe;!Li16Cw6Ch?OZQ#j7?92brSf5^>v|r
zOo~pBu+u%#?X+uadZgq>>(leH#Cs%h*CPicMs1S9aM*lUAw!Hdwp1L?HVriDF_Xvr
z9@5?dbUF<0r5zYVyBa1Wipibgk(El7YGQkF$LmCi?-8bxqP6MQK&!F*Gv)kNGcTA>
zqHnGUA;gy5x&4gzdb$a*U&4CCL&Vu*btp-HTdw8|F6EPyl2HyfenFKzJuFZ9``a|V
z9%aw-eB)alx2P2SQSXf(IZv{oTrXo#@DT}N^vjGd;j)s~{T0KcN;;5Px$jGMIAG+C
zjxcWvHLa!VzNpJ%GkjxiE}GBrgrimoeF9PXCimd$p=9B0oO)n~Qg&r6*A8)xn`vce
zsJOjsrKxlwUbXT2wkc396k)NpkD*;$yV|45N3-S+<y{sJo!<&a;R98~3~p+^>yB~*
zWo=t@Bj3Cjl{S6SjQSAPK`uDVT(d^_P0ZjOcu*cUo}8q6^4xxomw)AwsM1yORQ3U%
z0g+%bTN*j_(XNb#*DdJxx#jy?8^-OZ4y^$K-rBH-nG<Q=8-{=^cgijxS{C@zsn^oT
z#aHIfGG5F(IaYoU(VzHo)~>hXjzG4PGx%<e7mMK~D6gGXo+ui$Z*e^z$gXi;suZ%U
z_A4Hn@s-Em+E13T@KnB=JF8={crU|I2`-8rk@7}nR|Qg8Gsl7e<{nxy$)lB?D&{nc
zc}nZ}r`%Lwv>;Heq%53{8K2TD57Q2>#3QR{#d;t}l);-v)ym3Bl~2=1VrOs2sVXq{
zq11e<X0<yj8YqTFg<$miOZ&}>&_$=2x{JfyIQqvC+e}4Zj2=m>J?{1q&6$zg1T0-F
z>GE%hcx9r`;5Z%jLR<l|%ggJor^OE8nH-rhk=`$@4nHz%<Y`Pmj4j|*w3d&Sw1OMq
zm4Hncjn8-A7tmAxgPFR0dde`eCecGdle_bB^t)?(gk;u>=_2p`u@yNL`50gJsA1@$
z0t+6ZRVN|+@ph0xt7^dhc0ld$tc{}lT~1jgsh|#ySgyX{x5ieX2=k&qpURj$6d}RT
z#<S1zSqFU=KiexF9{cdZcrXJAC`@M@BOWSbb2CIF1WRn_u@=NFkq$CtQO^I&6-_ZZ
zphk97>n)wf#k}qvCS<XFFl_VA_?jcZN4m(!bmH#Twx;_I<rW=;`8&QZmv093g4HfD
zrCL8uBvA{uJb=+2Xo-FAzHO`>p@JWCqh4Lz%JW$YNO@Sh>ja2%X}|P}M?7w^ysk2C
zGu_HLpM1sIdByzNZcJ|&?<Ff!w*}Jzmsb<tjIp=go+NAcV|1`tYH#!AzUf6`5T(VE
zI7nq(Rp<j(2jqL!#FxH@Z&J9N``}xQgZC}rquh3Pw<(SRzcy+~D-}+;>(a{@z4$V;
z)yuHv!$;lw<qc=Ix4=<T=~LA#Q6D97g4UDmDp=yh?WOuBWn>`-5q{9)9uX2UQu7Qt
z{eL|@>JvZ2av-f#T4!5e!856uzJGRVGa9MVHTmaIJB$xb9PUIHExlKhAq}@`EarDj
z4xdsBUK^du8bka$aKD0DJ*4N_+5atpb%ZP1a5k_fxJF=-8X6M)ZfR*{;^&;mi!U8?
z<7Ymn5oYb&4l*pJ77^JjucqCJ<KIH4c^V%3k;PhV#7%FBv`Nn3Vdv*pmMa-mnh%9W
z{6JEs4QlUarVp*A3N5`6NS{X(YLkr?w-qTy=DUe5(F_{qz1kc-0<G@K(9i%|tzoUW
z?`4ZtWWW1@{bhQaV){n25t{^nm8;Ujp=)_r0@qDd#6eTnYC8`pD)vT4o`<Oo=M(Rf
zeq?3`TI0u{@Jric1M&D8AGbLM0d}NEAr4cXtEu_Jnw%$3GQ#90@70cn6)kUVSP<0M
z!m^<9PTGn#sS%jpH$m+&ex@$nRr-W&Oq7+5zMq!3`Z+`*2&W~sHdjESO&2CbvLW3J
zOuih5foWd!bMEa@eojY+y~8xHOYr6M<fO}3Rh!G@@VMNz{EWW!N}8E_)yv}MlAFYb
z$O2@>HS;Sx%)`i_cW10{<k*U6Pb{5JQ-I*tgUw6JPlN8b4N?i)MhB9PUAci|D8mGJ
zS$w!~{>hcqgLN`Z`|Z!LZ4u^v>H`Uea5qyD4g+7a0S~4066I13MaKO3XKrs>7UKjZ
z!^ZAyE|p)Vbk>lob&t8*Dt>cXf5&rz*UG`0N_(hEDIwNF$qXML$X{NRp1!=j1BYx_
z<T)jeZdy~#H<1-io&?HCl3{F$yUQD?t0*2*(bLe`Wg7hyxItv4%B2>9M_E5Gzq%=U
zhY~0y11RxpM6*%%N%!t9KwI_N*seT9bG|+cd$xCbR)MMP?Dize+O=Z#Ud4ohbCG+i
zjy-{z=P{9;Z#wHIWt|sqK^0-VN5n%rnxvIkJ2r;(R3&#@V|j9o3N)R*eX*^n^-z_=
zr-@k)v;G~LG?sW%Lk{CYZrW)B<`y}JGt`O>2z^w^na&<efGmdmNL6ZkW6o{0G~9Gz
zT4DRy@}8r6Ye!3o9R+iHzE=<1igiEj3;XGyWz@wZ0#>>^P(j+Yzjfn&nOg4Tl)@Pi
z3`(o`V_?FwEIQ_dta@Fr&^$J|JBD$QhOe!R#wUIX_KfH*4UWq#&Sq=0!KF|Hde_B6
zxvmO|0q1LXaJWJVW#1#XB?_fwkP5@ynLnkQ7w+i*yD#j&qe@(cI7&9w)DEUl3V&d?
z<DHen$zoK}hs+mvUv6H+VD%JK*rVix@s}KNuNLM%)DhHwCKw1`+gyY=dh_+x!xHdw
z+zlPvEgH2nDaK@YGT-qkN?<$pBpbJ91<rHQd)X!BB1xv1a*WLHpqdJ4Ha<tIT9;%T
zrsL+M*>O<(@`yOmQ}fgySTL%uE7sNT>kHsM=7!Q-ndt%SsOC_G+SdVb?k)=b;hP+y
zj*Mal#Pu9`$gGC`LX-)l?rfLc&hl%0;<DX9G`R^;dC}p;1c%)_V^;i!{i7p;5bGiN
z{Xdpjx4mMp+}6@{Tr7Ed7em}uQgIzNbJMfUPcJ`(ubprkkzF0h+XMLJAajbT4S7R<
z+Hy_8jsruD3Z;F@NB7JopvIpcZ+L5s-cQ?pyUL|9<7bR4;mC|Tqkb7UM7YLSHFPik
z5!S~`LP5+UtSIqzLP!tI%Q4`PJ_C#X!QD%)?3bQUPhq0Xq=<#^N)0JOu*bt=39tUk
z2YBst4?3a{?^zkLmb)|I<<~M?T3*(+&0(+7TwMMGtE0K-Txn0P;&Z$QT82AYI>puo
z6;;b6m){wP5v?fp>S8!WG#hM|q#FwLK#f>D@1$@e?W|RlFuM0`qFbQr9;~UQpEd2{
zl=eg#tKdp!7*loiXkNMfJ?@j@`p$0ziXes(J-Ot=jS-V|?KyIlePR?@;T0#A>sG(t
zKlv}gA#`3|qTNA3is88iRwcP!Qi3~}URYF8GaTkotBWok{FG7&SDLwk4JDF`lJi+i
zG0I=IaoN+jxVrcI1f1U0D?otY$LCq8v@Nl*?6vEFYXd@H84}>i<0?)pYPcKAMNXsH
zpmCG|K*RftuA)%NZZWLa4nA8*-EUdFoXDsxK{=Uz)ZRVwEw=oe|E?O@^M%msNmBcR
zPSZb}H@3>>eG7ZA5b6EcHl@0lyR-UYqkE-rTP8&*$l`2>_nu1rH`YJ`IAS(#xsf8u
z^}Wj?&AxVLmJZKV?Km7?`$(^L8mZf3CTR%6zztmU-6S5p0lwdwYhPl|_s6t^c*GVH
zgU2L+(>-<NDPq_yU)$}EYx+Ek@k7B;JFHSgVg4M&KlB9D#+v5h@>W%O8S<4`6HwC_
z3ke+@&nH4d*HY(93~`>6t;+5vjIE<~pCP~A5)PI@j^TN*71udY2=I3t8I`^*9_W>B
z{Gn*?EKO2Y%eX!|w#B{ruI%2Q>^;A#&Hb}UgYd0M_$7FM@Yw$dy<#s1je5~`vHZMK
zW9P=JS*IjB%j@AcNmN-XbN}*(XFb-INqwUgeu%}8vQj^M#_`*w?ZVXol(|TmHo66*
zQk+?*r{hT!M<it|%jElwkpVKLLR`!KqR+C|-$i4Hc^IJljg?3ydjGBRGwrl<o9QZ&
zDeWu5;#ZtVO^y1&nG>3;NPONSakTc`@#q?t;MdE&GyhCdInItYa@~R#RMAiV4J0;c
z<enciNHNPaGt9V`9AqZw2(aamO$QGTWFn6Do#~||M0PEN1LT~Aj!#kEwD|%Cwc?&O
zp6*RI7+eW)h%r_wE7B7HPcud%<hVxk6+HWA=HWcR$n>ABkFSP>g(cCnkd%`^Zd&9l
z939*YB5g=ro78jhqiKU1PpV#|s7VVoT8RUSHuW3(=!5+SvE^*=N`Co|NF};>zQ9c|
z=a_jU?-9##>!G!HJtXK_c5`Qx_XI-ew4O+~8OVlrcGBsr0V}9ouCedS_0S|RQxx{=
zv&Z2|o~!K#{w>Sg7J}o`POc%%t-z6BW9zJib<?iStC}l&JA`}jpVYlA1j8&l!u4D;
z+b^lViuMs=rbai->;16e(IYz61*M269v<yM<~)Zo85gb*DBhgabPW+RPx<SauNCd4
z(!(TT%fU0UD^3z2Om*jto-4PlQ@$)QbZztY4-Pt`=5_sn0wfU4C-;tex`uGi>(>gt
zJ11e;%9aV9l_e+A!Z?YiXU?vVOc6%j_}L+OoC(}HXlnD3#MusB7o$=Rwz(f$u;pBg
zwe*#hmBqt!=e-k#>JCmS>@P~>KP-k3Xub%Xiliy^YT<LZmmLx`AOv%DxN4gn-8IvD
zPCVKMWeaN;GV?@kK@S-I2|PSJY{$UI#<t<rke6ppsnVcxW-L=GZAZUBT73iu1qDiF
z@QejjYBlrd-tkLcWmvBB>EsEX^`|K)7-uk!-rF0CuE{K(tgJUszhTvOZilR}v1_eu
zA`C?q6f(CChLB1y-S<u)^R4hiC?>b12Z`!g2Mh|^@Je(<5Bj^eaA~4=%RkTf>k<fr
zl1n2a6vd07lY3kC;H`R8D{`1A^fNX4c&~(;j`XY|QH%8nw$WASZ=+ElFBYu#Ji#`h
zlWUI|{OmJcNvNXk#KY?8+g+9YGkDrtUPaIN0B&}wGrk04yz8yj@0XL8-yPjF0-M*X
z6;D@fouu#y6#CPMIouv72tOAoyQkKNe_e;ucRMOjWstPHO|83-=Bfu<xi}pEaI)lL
zZ|&iza<cio707~edwnfRieBljudn|B9bE&-+1Z(bjLh{@Ca1lTf<ipC?j%RDM{;M>
z)Y2)I=V^8j`T3pe&lq~-SPELcRP|Z81Z?^o)!lX1kS){c;9q{QrIUIewu<$M^;1QP
zll`{^LK!jUG%L|d1{bHdNGJ8yrlM_}b4<S4>5USdbPtQggEvQ~l7j|ULw-&T2y7=X
zG=HxMnv$1CN8jK@mKG1U=jGw$9TioPIHY4?8y!|zt2N#^DvlHDRgv>>P>7eHMT;I5
z363CL&9ij*n(ja$dAg_Hukv6HVamuqiJHTiil*M}*;N_ThGi=6IJy7I;uz&)RxPTJ
zbeXlBz)%_@AL)ueYbvLK(t5FI%Q*5HneLzQq@{r}H<J++DIOkiS+Ct=uT9c?f`~;I
zy%1ViGrBLsu<BkapKXL$E*1v~8DPGO=A~bEXC240dcY-kxwmv@Dp=M_@L?Iv#QV`9
zFMIKowK%WFNZ6~vD;0ai>h!CHu%6kf^Qz}b=H5BD1pg5X|M(~u_ko0%ScBj2&^dRP
zm{j&09YNAk`iE8B63x29q4BHxku&Mpbn2WDnU=ZNUVNzg*)+}V8m)4%cPEEQ-v%7h
zn>TM(GdY?a?!~eaJ`>=D#E0HF6;f+V%XA(WZar{@Hq<Ac7gxD|lt2@X{3I%wm6D#i
za}omdg`{TMAUToJ&dkf`-<K9VV_CRnvRk~_oU@u8y<TEDXWw*%w+zG;PrTgHpgBym
z4s6?vmqAv?%|9Z*PM}%Q`*m9TyUCxT*Ox{*F;+qmMCH%IoszHm_9u(w&fZNk_ooq7
z$d?wpl&;#`5`^WS;B-D(svYpVWrulvDb<HyWR8TVY_;`Kre8>dwHF_YN;k!kTCRCi
z_czcfl`Fquy@6j<kH{1y*)HJv$&@SytqrEEHSW>?w>qY?#B#lt4v0FhW&xw|Jzq@$
zty7?(jwS7UibFixm!$2L5*@u(6csit$Ua=ODJE7?X)?CYuNi61?Q;Uollp>Hh_A<r
zjDjKzfwZ`92yk*vE%Ar_m|#NM6g5A}y<H6fdRguEBX3^^V)~;L2DPb+kr)$Bx*S28
z>2d=-PU}Ad`~_DfgLvH!4CLiW__2RF4s6<%`wzv)9FA}y<-lm<0%!A<zmGYt%4utl
z%Rv{99Frr*K#Elar}(r56hD6~$jieHD*ZzyB=W3`ew!4;vU1zZfc`QrFwHI|fZf88
zUsqT6iPvrV`-hO3y-ijHdu1<rUf$(e`;dX>FWR|i^N*W^yK*%Fg0TX>dy56im2PjY
zB=`vCQnFI&4F=Isq)1y_3MG52EB;84CYwDxJ}QXyZe7}<WmRM^l;?Ua_CIgio^%qm
z+}$S=No4l!#{LMC7a4d2kKP|LTxWZ=ysHMiP{+8pgmVyhL$wLXI28H${M7D%XdeMY
zg1dvs0-c|_%pqo4`*$xT85Pyg8_hgF%lC?z{d(`qy@-9iYcyPc7ln~RIiUGe^&$cd
z7xT@v?(cp32V?6qjJg`Zqh!B>%jqEZ4!PSl{wfje_}5_%Uhij6R@@hxI{f>ec*cH2
zQqx$5v|h(-{T{ETT8jUQ-|%qh*g<m+KtNvP#qBO!T+aGWSg#2<0_OS-h<z~E%dEul
zN}YybnL51Y)f*tVE?-`52`^Yv1%912lbTOOw~@vC6*t%;g3#uyy7GL|XJ>!BDRmSJ
zcs*PSPd$pnn)MsjcR!sgR_M+*+9WnfsOfWiZ}kX~4~l5q>ov+#Q>p#v;Gon|KK*I4
zm``_UbWRCm31p6jtkJ!s&h3$C=W<ehdu$Qe@0Sq3@(k(k=vzLVb^Q?**G&yn?83lS
z9zN<r2L#o}<;dKlE{9meGonlT?*T7D4L~Lq;J}#+h)cn@)&HUmg6hUo<5C^Ptq{_k
zEpu0K{`MQ_elHjvp8$32&P|Kttpv{vYlp1Nn!afn--VE{a1gyX%u4TVN8e6g;AzL>
z*lHH8#5>@S7Qxw{xu&Q3Ibd=tD4^{Cx&wb@_|G4{t-$2K5km0SwZH0O0q4-*JtDe{
z|B3`0XIz5^UgG<Eej4hG)lUc5@%#G+wDWmVrR=ZHL8-*N-r%QaGM^va^c@ggJ3T?c
zU-5}d1(UG{i%D73U!p?-vga<Mqav%oLf^jqj8Dv&U=q-$^7dAGWuSF3^N#B12PkzJ
z<YDgGnkV^XK=Q<LkR)k%)%*2%rc}AGpy1(g6NEy<E}Jdm(vVgiMCNA3s^oQcQe!y0
zGn%%0El#YcZa!`^9-ZTELnB8O86T*RD_cAf)8MKR&q7ONCuNqdK$Gr~sT3V_{7rwV
zEgY8bQN~z0W4b6IFETZBWYJBS8-9B$g=oD=q<EZ9;mZVf8DW%|naA|V)*fZ-U`xy8
zgl$N*t<@<u``~tOv)bBkY2y#26U)rKdgnPpVL9I|OPzJ3!ZIIETE~|^Bz4{_;KIUo
zERAwFZ{Gr_-ky1!Uy+?Swmy9~&}?ekXcW{+Z!c1D0FL%nTx6r><g$13>z@hLbkWYG
z&$sn5npI$NfP*B|Cp{1w5)&hY?U05E>GF<g=TA7kk7U)rGeJk%(TLl+?g#=l9;#XV
z?6kqWo0C39<Ad3Sa}vO5L6>hprvfLCcV?0n^IfeGxkNzB$F^wef@04f)+(;@MkUUj
zDX3?xu?-6DSv>AedeCjji4KRbO!{sfZaItJxiZ$qT_d(6cY~d%I$2Q7U>@5ba*qV1
zr)z4@_Jv=u$_eX5XGa8qTb;i-3*K#{b{}4X={1fC@TZniGmtgw$jJC&J(!bPg8<7u
zd(vj=Ggig~Z~4MCx2g_oUwA)l5@>2_zP!+M+5dFXBB{nQF8no?yc5Fx!|Vg?kLEex
zS5{dbS0(+X0wI2qiWT|Jlo|FS$KK27c~hgyc{u9{QD{e(VD5+Q9(}XP#2Qw?0TSI8
z29~5Un`0@?9x7=p>6*u)=)?2TS}IHgt3ff60}h6gE2YeC_DZylK2$=UT~@6FFgjvD
z=00(8_3Rubdksxb4flalv&<{2Ypxd6!g#`;rdGDs^TDvpVN^#6(O@3${8j2^*y}b(
z0>t^mZZ#I^Q2_b!U1$g0>Z*my+?A}WqwLqr#{d-`D%bp@iBX&r<Bcrg-nXXgOAP$m
z3ieTrY6<`{42Y6267eQC6UB%Gvp|GgYt?b?u<hV^vA+v&I9;3V7D=~C7LZZ68}0<I
z#IVJ)P9eT|xD*pFmb`L-H7J=2H_G?Xs@4<QnLRitPuVPYi4A3A=PJe5mX*^J=`1#T
zDtbdZ+SJO>SdcwPMbHDQU<qc&q6()-)(i<!8d;idTG0(K9>b?bM@Ls$d1)Wq-Q<#;
zU|dOUw(Y3rw=dYV6&1uS9p-0Rs_VO)5xTV<GBN6jSd|<5!J_K8gD^0>A<LNJHha79
zl#-3Nmo=ZOr_(vw`)6m9(6}@xv29u5TMi7hSn6>C9wkP8pRm@^MPzZKg{zgFS*mi4
zUBK7;ld!O*B7FdhD4wilsI-x#^V@dKEsk-dLZYsgI+K-K_>IMPn%rWjs>}T5+Mc%+
z)|YYIYGX?bu8hcf(9_y%ovltzAc>Ttn<bgRF~LBAh=6U}W}cG9bow>D8?1!#-6%Fp
zdG(`(+;q;G&(s20(yqEBS<++)(iQm!=T8gE56OK2^@bjHVbqk@U7^`mkglWnWFRmH
zy)QfZ)jJ^1gcA2hTiE@g7bheOO<C4Bit#uWeQnA}+I-E0OUqVPRIV=KV_tlLtwcKr
zp-H=#7%BJ|Bn`Kz?nXmcY!}8eM|GvreZsv1ZiivnN89=o#%VzfF*$#CZD{NrE<ND2
z`=9pDC6B*%v`($)+qN75Kq7y}8psJGsVuE}s?kQz{gn&W8zjntUdf?{5$bJsdFJL>
z=Yp@eX`F@{<1-)A)pih%z+RH?Srz8pm_MxZ6dT%wHSU}LEDLBJz6Um!h!2_XYn!+(
z5_mc;mKj&(`xJ+Eoq=D=S+B?%aBSR(EfJCNg=V$0i~7yY{bA)u1oMBrO|F)n$qSE9
zq0DODHV-u;L<w29l6U&>r~5`L&NvVpMI0sOsQJAYAu(zQ#&CW||AYSH@7O;Yp47h?
z^Y$s@f&;g-R1kpn-5NZQi&m<QrK2Cf*E1ShTbD%8qGhcY&ndSU3GLcK;C(@y`vpIC
z*c&<AV@LfR@KgNLA%?Of=Zf!E#pU3BLK6}{tIdUg;&(tcW)?PE`=Q^3YS&&kt7#>t
zK_i7XxDnqL<;f-15RmZ`S~N4046lDzIPd4h--%S#6#+TQt4m*db6q^iZ(^=!g6SI+
zZ%WG1C>eD)UveN<#dv7#sFM}TRYB^&ACLG$63<nQn5M+02@+O>D<QB&H*i8Kk8Y*G
zra4<bNn?GCDQx<t;+JGFmz39Y+uAj2$uw87!B2db+<PlFXbNZD#Fy2b=j~rI!)n?l
z%ZgShU0M}vw+pqIw#q{_VTCB=Dx@;zIMS6fFhE96{?lP+$nXFbea5H6kR}hhPji;J
z4<tf3EEXF(+8hZm6R<A1=Rg$j3vWd%KCi}btz-dCR!KRTASFo~jw$gGRP2_q(Cc5W
zhMM1NRR$H~wb~zRh3safdYE=|bWZ@Ddoi!+YQcd)%`6YGlW%Gr^?Xfn<P>^H#uM7i
zh}+sxr%-Xp+LvYAHuJ3HeMCZRRMieIb-DW;D)cRaJ#V5P+cQE%fVB*vkyXJx2;;pn
zd?J1N$;`OIHAnm90wfBu0FPjt>W;2&DAk`WA#qlb{V-pwbTQ(;yU~I_wZP28P^Q7d
z?;3l5XZ~LC4%`Ed@{9mZluJ81JzU7WaqfhK`J#6b(LI2JT4%IRJ2@71f3NMe7adqR
znL;>k%#om;w#~N|zLxH|GEw>7vOXMzdP0&SOPa;%olGl{O5yuIXC&ssmdTKc#3M}U
z3)xTk&yD94xZ2Mcde?|V!Bc2~fpfENmfeWTzaPPG?B?>?<c!cg6V~6Hnmg159)vCO
zHQSts87nvXU{=#Oo=WmZwn8}gm6^PYCBQ=7PmK%qs|{=#Yv?BR3x4YOVbT$4ts3bm
z)M1jgd$8f5k=<Sq-D5S|%~~l+hr|$Vk{ffD-?_iNmU-Ov(%Wt(Rd$0R6$Y$a7l`?=
zA0;Pf1gbxZi^DiLz+~XlkEGx__Sa7g??T9g{P&Y~u(WegZp>j`HquBO53RIT3EQL7
zJa_p!{|M+U98S|xV8H+BUJA-7<>%xl(c{ZEeZ6(}vb`JG-P)50YIyKg4ALe@^(x;A
z8ejDO=vk{x@|G;T15#nsxj8dybHhsIIAVOAYwgKxQy{d$o%bQcf3Vu`o^m5kP*kpr
zRE*|_s+nN!G4AvY@*Y=U9Tr!;qon}+I1=q(I9(g3*R`KX^_MSsaqqs#PXckoY(9H;
zCs!Kf!6@{|3cb3vG>1(Tk{rj?*u3oa(jql_qq&YWn$9`Lu4P%rTYX*DGiW~=@m{_W
z;Fj;-W6`<nn5UDjw*mX|MoB@_?wtp&w|4_wRczlN^n<}FnP{~JnHIXKG@N2I7!!3`
z=OS_eiN~?#xLgVpYJHKcL%0juSsCCWQ`vMi%v<Z>55|3P2HLBFE^XSIOB)-v_--b)
zsi$y?tM0Ggvm4)gs;oaggDX4F$$?XR+%F52jAfn?g_V)K+B46RJ=nwVFh@h$UK5+R
zD<e|UOtfCXN&{pU*pxZDeIbK~kMk2)k1Sa;?>pS}ihzBhhh5JI&5Ku+w9L4JfRHUd
z^1p?`AKMdim@c|A)(7-4EgoCfBNT$0Op};?5!lsE%9H*^vYk9JOF6IvWWj-W*F8On
zl&*!=)z#?8T>IL~&26oA>O$6aF7i>XG7I11U=Ii2(OvKWV$$h$1X6ich@T(5jKyIk
zh)($Bu-bOEa|g@`&6-dw_!>4RQTFDr>|38ozV2rXhD^k6V)bRd7CnBeJcYw?hmD$(
z@iZDuCDataxI^4EFQS?b9fRV&RsNhUzhhf|vqJRvfgjzNGd=ut`5El1eKrR!S>H21
z!kbF;m~_lBq@h#0_>(ax)JP@<3;m2Hg<~qFli;;vu=N~Sc5jnrD%U-(l>Zjy>M-jX
zzn$S`!??Y()7ni>@b?iI1z2aCG0zCZij3#(bLT(^gx*o}le{hMb+YNteDfU46&#|7
z9QDdE*WGgV#a8YIVfbnA=u+ONSe+HQeMje^ou#ecX>Yal--5JrqkhXArS(5{6yYTV
z3-S*{cv}Q~#d_>_u*N%8XP`El@z^aTP>B>Uq%4kp85}Yt5j$Q*z9rzH)n>7;GBMPv
zLQ)Q>v^|h1nUCs}Z@*5+sg_U1FPyJp+Q`hWxijhBvfq(4{Ua@1y7C}r+o72ZE_c;2
z{M9~eAj+sUyn4uS%X)Hm_+}{xJmvAYznxlHxpJSox6fIS_&c!Bim0+1f7>}rlgBoX
z^KfT??3Pqe8ZnivD6G!Oe6?K3!$yL!1ap-qi>{4#<K|O{&yA7c<ZNMiky3}Z1Y;5E
zDn}HZ2Bmtv2=PZaD^K7@sU(du8Y=f-X$_pkoAH}OsbkGBV&@leH#L?y+$qK!ukFhf
z_EPwrg29*5=Y8tkrYWW0t;CDl2glY8coni*+~ReI+Qu4Lm>W|4yoJ)0!vkkOq-Qn*
zHsF9362-B3dTPK%84g&Vs#8%(p_J}AL>1C+f&rZ!k0~avAAd`mwCr9=!)YZ4&BoNH
zkfG3_TyD0HR*f`l(%<wXG-)a;7JL6ZY)E;og(*@=^HF$zu8K9OZ--g)ePIiIx+TB!
z&PLSh@%nsYXrZ?G0baXZN7kouUfbs84*l)P#mY`z&l9E;mPv(>th*z-=fQ>o`(yO4
zN9_TPn)YF&<n!NXwsT2h<R-Q}BluK4M^1}a6UZuL$WS><aE)RQoA}3?*qK+R4L%K9
zqM2L8iwedm(&x0EDwN(35a7-TGN&>Iek6*_Q6YB^Jn_Y-sTVh33SlR}wWj@8IK!AJ
zx=D%^`r&UM$Ue(@Of-Qm^F(X>y9S;2<8h<BoSa{&^z}Bq8}eLu0U3gKH6IzpsLVKi
z5w6GflvY9@7<(q&T6sh&K{Iacf_VDDnh!!89*UmTlxK3R1QFj~tkrvd{;KJ>^lN>6
zeL$o!z{6Het?pOciDX2gF81vA5B#rJUpzdXNK2a;6B?{lIL#*&+ejV)9UnWQ`D?AW
zbjn@6j4_yT4i|CKv*sE)iZ!cw9K<$Vq^)Pm8oA{VvJD-ln&`y49#Y>EtbBUeDs$0^
zpGn!RRHS0bnMx9UA$cZ|03KU;e!`nzWxyoD=oJ#Bh(lnnJpbE->e(xgpbqPNX}WiD
z)TBvRSy@gjQ+GI7`!gTa4|#B41n8bK{?o2Da@KPLnJkNXVGg#dfpf%BS|g;D-rNz~
zP~7nUF!j|@ZG2I;Rjd?>LvVK|xVux_-3jgvr8oqNI}~?!FYZt@xVsj&058AqTkoxx
zKeIBEd+*HLbIzW#_iilNR02xr`snN_-!xR66SeK6CtSdKrZtXmIhoWc;vI#?o?II3
zG^^$PnQY|_zIj>n=h4;<<1aT9s++!DS9RQ#sTD4;0C)zDTYSn?<KCWk>zHjC4d;hL
zJ{+fG<}Q-|u(g47c?)-)5I&}9l!_LbbL3a#A^;z|1LU9737-eFt1x`r>x9YfCWi<B
zs`Tp14gDkb6Kek#Ig4>31FKy5dD*zQ%skwrTc013c@%w5O-`09qeD;K4ZFv(Ely`z
z4{(#7#9U2(2uP-iME;7z$tk-EECQXYAX$st|8DCNb5lsSb?@-e<rtU$#c@vyVxk|K
zJ59$&H=+2kB4r$`rfxZvJux}ye&3I8=w-e%o<^hvCX(A}{8BBakan87Seh_6`F`z<
zC|>A#e^?WzARj5Y+z<CeKQla#RYyfX+@?xasD$Vc-(nU$1hLAk_73^z^>JXa-T{TU
zDj}Mt#A&*5G6$hRg`O8e^-|+qQ*W4(Od=n7+dDO@JF_@9$6>l)`+9bXs`JI+S?H|O
zu9>;*1e)Y>t?I%7kQ6LvSIIwaD^dSWNWZ^cs7CKFGEPW9h>297VjQi}=MDr-2JpB~
zs4&i=xv1{XNXyJ+CPpu0%dw-gaR8dS6<oGT*qn-J+yw7;6clp0SolC!!~u~7mumIL
z%*3M}-CQ~ww5sLmJ9$<y2A#NPzeU{(VqUHoxJDh^BmcU6soT$cDvXtUyUFgT(l1ge
zC&bR3MW!p9$2sgP-rI%9ME;7T*7fs}1IQ3kMukT^cb8qt1DL;BMaH63q~jcU;k;Mw
zH`0X<do2pFyO=K;h=T0(ODn9M+*D{?R$r+Oh(7f>go=}Gh1}IzuG_tJqZS-YI_-4H
zex7@hU^UDp?3gPry_hSQ%25;8#)lOf+2^Oh)p5o7hWC@od+<Y;eaAGC^c1(L*Ei9M
z5(dt>yOpMS_px6qI%S@Iu8^}A@j)r?kdN0(HM-s!orUpwtR$k{gQmUvm;WBC@#gNn
zB*ec^!=1M&-~BBM|IAL+h?S!Gr$drxhK1ir<Z(Y`v=1m7$DturAqJk!s^`80P|mBl
zc<fdo?dKRG3)YCbPpN3z7W}!yn>(_Y?_$Obo22_3ua%X2Sbjaxs-*~|eS)<`o}(`L
z8KSJ`(9>&CMO_;V{TzB2gWyU&1L+#aFD)L!<43dc+_Jz)nb@>X1Iu%_TthP-G#Jo<
z?qzS!KVzzyTDgkNr=!EikI+nIi%Q3~7*Gl|<P2V4*{H@~Dch$Vf3QIqM{U5P&fA-Y
z6!NHbrE?%|2vfGS4PSgVbXSNU>vGr7J8X!+o}=~!{0b|}?!fU-c)ZH;jdwZSvSON9
zNdg8lD_rO?LA#YNfX=Z;jfp7(fZz-XCEVB6;(i*}Gk(QR*Rn18&LAA2h}D;>dTbTB
z;{8h@RDWe=Q`#S02sq8TRER^aWx03$Z8t`{E_?o|Y+D|^P6nn!zlsXQDA8u4EMzgv
z+`ZFO$U?fcQku3FDAJ@!u)hGR=yFOAA3B^C>)vA3jBSU)i<(TwIl~^Lr}LJSIr<uI
zS4znu$gqj|+=sFS*pz=qdtP}O?A#^M!w@FNLaCM2+-bU}2vRGq_txDQ>?6uJY^9N|
zk*|WSCAky+d-FWMK~}TQk9^<sajuAefy{0-^(qL8zvZb&bwPVmDB<=y2H6>Haw$SN
z^t1;3eI$k)@8`A{=h1HgRjmceJY9vB%w@E!hQSNkXegs3j4Wg&jVW`^h16ZB7tW_A
z$JtCd=K(`~GUU(lP3@p43^TT+<N5NRR)rB!e#bwQsU)c~Gi)p6qhBSYqp+*m1vz!7
zjA%{xBBz>ZQ6Z?T*h;i(Ob~v}`9?d#l>-Ima`>=AJIOL}x_oa*#+ZM3+|4bXCqF)d
z*gsfV3dP=o<UQ|}Of{=vCDujfThBW^-OR(}m>3JUg+|Q2@BL&1$~88ONq>OJEi4h!
zOSoYS<rtCVCpu>k7lkt&EDRBO;T34o6IA^PDnrOsVKk(6ca0Nn)|m3b4DLF3!goOW
z(>MTPD%D<i60BYQE+4rn;!GU!fsQF&rR3&b)3kW4&nC&vPhP59%%%P=K9qCUrWhf<
zQdoHTGEt>3B<U{dyW7`kP4Ayw0b}|Mcc7c--`79`!s)M|(nT5>*}U6N@BG4exe)W4
zR3ArsUSE|76=rR+>?iU{h#51e*j#p-Vy&__HneZoQgx)zGT3ayjw@Xl2VDyW5qI(>
zA}^@~(FQaXGd<6TVO#}eL5ulJp4V3@c^IM&T`N;}+1`2adweZEuS-Xdqyd-OY)x>d
zrKYD)wfM(uCL{MiU3=yQ@5B?%UB9^0M#YuW)c&f&CHPZ!Kqw7q9kbD)DdI5Qe@sA9
zWXP+tz`dH1$8klj**Ly-I5Lq;N|csPL)E4})*^m4W3>mey|8;b%(#aif(zZFx~TXr
z%B)A|HrpBZ=J~_>dCYGY1ddJTWLZu@w|q!qY!NUS5r|94sLHf|wKp<j5d~n8vV!4a
z<-ai)5CboY{$%Y}&(whJ0LiugwpgEh0K^hgO2rQ8%pKNUfx%OT#xY#SlZ|Y4FAR^9
z{T45JyP?O2!%y_-Jf-e*j+HTXEoH{1SZMen=JGfUY1AFGV!trOAcp2$c60N;$h=$0
zhE2sXB8_N_Zyq%i?&O7hN^3)p6Z2J$aYG{#rV;P_#%`8S_J{=!d8aGBebEk`UrWQd
zJ%Jv%#LMSfGojMIx&FS`xsV*e5Z7_<Z;4Jsq8WQBF)8fTiU^-(YswoI!wexHqryS_
z1^KPw)mG2$v)s^dXeF49nlZEzic?%TFlN?dd~gs?UwU!YsNg_!!QTPnrKd@Y_fpIZ
zt@ZwB4YfI=1P-L03pOW{NL03pXtk)g?&$qs2(oDG_cddm`CRURX){09s<Gy?ad;O{
zPI;SX1Z6dIJ-*hQE0Dxk8t<rTEh*B9ka%Ud?IhSjwZ~vgqYjVe*z2~b{k2%-rkRQw
z0}^_Wl&erTeeFN2=q@8tt&N*`2LQela}f*q9Xd}$jO8qJZSXh(d1V}5UZ%C1o$zrI
z@|Dh?UYp^u=Y0KIyNbFBuSdskS|Qcoj&mmM0{_wdo6|=`nb<6zW$#zllN2}NA*q6K
zEsC^ywahpWY2^EsP#dZ4bJ^G!bA`1FUP3GknYS?{<#lx9eb@Ka#h|&wWMiC3bh{P>
z4vt>`*+0;oFB7HMl2(aK$yf-K{ZD!x^;tP$_aw73r9k5FGSd<oyhh_znm4NHptKJ<
z!q&h<$uR>yRo6G9>0z2@JM!yTX5a=V>+X93hlbh)VQHd^XBRQw$R;e~Rzq^JY#I#)
zBZ?1vgoo5Cm{S3BUS$%r*fYEu&AimdDUU}k=n8F~PSP*F>X3ut-G;ygYqzKa3A=7C
zzqkoUB36Z{;17g->)j3;KZ>YUg2D;x1ss1rEVAaw5OzNdz(g3RjLCQm-*%}fpr>)<
z;%<rpuMZf+eht-43(74de9xU>L}ZVrJbugk;|JGP5)u-Aop!02a=oZ~yU^<%_($LK
zk#XqBa^t<G+Bcc~Ytoc6iVpLoI@lYumw#u?sD^F*2RrrcIDyZ=yI7VKUSP#!0hjo%
z<Z&E^OiFIOa&osNC<m`kC<)__bATCOc`+2FC?Hrt>350+VmEhj0-!Kz+7*RG^Es6#
z8Givawid_kiaMFhi?DPytF?qYly)S*n`}*BoU@4?XSoGhJTNm>7m|}RFEf61fxi`M
zv8%T;m2?LO2iGOw<a~6M1YIe>tD6_n5jJR|t!{9gN>6bfYXc3BDcdiNsg6YD**mG2
zygP?@cBxMwkS$(rsX_fedoZ9QS>JV<F7I+bEvJ2$`AaIh@OLoN!Ia6PR`zSV?T;GE
z@XnbbfSr`HQpEhQU6cLnvbEK$jTYWmdgiRJi!4>{hESD4RdKzgv%ptYG&NOtmsdKM
z(kMJt<z_P^pU|abMGdy~ZFAT3FPd}WtuK6h7mJYj(j)c+RljB`O4MdRjHTtVYuoy|
z!3<e~Crq{FzQeoV?Uwxb)6pR@adsoih>69(2>q3i@1oy+yeJt}PLzS4{_b7-tOa%I
zN>rKU-8})+J{W=8I(Bb7`bk0Lc%uH4V`);KaOLT~d^REP4(bXwO`7N4&&{sn_&P%E
z$KN!I2m}JND|3%oiK;`z00aq!V)O0gTbWjBZ>P-U$oaX0`cmXbceyL#-EX-!DqLd7
zErae&9>KUtnanIqk!0#b$`ha2KQXJ9$qCMgkIB!51;?ja5@D}-{gjX^zl-0m-F|Nm
zIBY>=DKq+Fk0o$j6Fe91Rw*wAzrx<XH&tV+M<F1jP~*r+og5%g;`OTEsQsGw9nf4E
z=<iq<h8?J>(N`NU=`v@U9{cLucH}E1XDW5QmwY4x!Cbwou1}6UU{0VK-z+;`&L^C(
z<YVT#%PhA(Iz9K=Yzo6+P|~T99VB)O(p>m{yKTcA;A`0eP1P#qh|bu1=6SnG-JO)k
zbJ4`T+HPA-su1ora`EO@i0(MCn4U(v*<mhKY+{Mq>3*j}5)ogr@o1-`QsG9tC`XL)
zb|zQr-hps+TG}vIk1DsYK~c67b!a9z7$r?9Azxgb!6+SF^wz1Su0JI%3zi6{5Ixi7
zQz@qQ&I7OOd_5SBBhQw}w=Cb%s>nUY6FC53%8Yat?a{4;_m09(Hlda>-O*U<luX;4
zw+TK$PKu}4GA=eaetTI2+-q8f4TzGK7FJ~t*1j0P-e%)29EK*P<2{99*ESE2$&$e2
zIpAVAyiY-&61$ocut#W;N?oF%0HBU+rLoL)fI{BC=cv*u(qpawRXZPH=QDXSBMu(%
zGSQ?#3tEG8Dn?g&>x$NbypXs=`$e*Vmm`_!n=Hr|$g1#dtV;K4zW1^H<+c}WtJ$kI
zwY@$l=`6U?0(1r?c!Bj(q&A*6^0~~{(WzD5hF;#9F2)4%{l+6acBNhg<5^Tahm=e=
zJYQ$UWo%S+caHHP#Fkwe;5r~Y=0+D60I1-&BM`?`g&Om@HJnfdQdVReDoZ<;`N%B<
zPK_@3JnZi(dOt#Yb{#7n0hT_e@&X^hJ8G}0YS2TZne^s&nHsW%^nJAZ*c$B6#6u4X
zX1-X2O9Stgtk?MFm*2eP>9AZb`#C5OhZC%i-dl3m_J_~|rV6HYjSO}Y*~yb5u@l?{
zX4#EyCD=iArU6|{JhY)YSs3>xw@3SJ++_=|w^3D7iYSPm8)9ZCsS&bA<@9;Sa)-)6
z;*jb*GmD`J-fVBE(~cmPp<dhWg##H4;vX;YDlUN!ZrF!-&EQno$ij#tQUA4mfFrj_
z_B>}(sofRi?}r~RP&_7=)=2ydcE;p-x<tim>c-Va4e(^XTexrEP5%*>B_lYp2D|kf
zTj2yxJy^c!ICNgdX@vF?dqM0?{j8RYP?7&jgBRG3+}5Q%eR|2uc358(RI2<!7!CfN
zU}BXQl`lJbUSi?rElCrz9lQ{~#oDx0mhSdFSkmwlElnsUnw(tlZrWC8?=oW$KgWl-
z@o6!lvf!PLL9d89&om?H9=%i6oFGZMFCxLxH+>lxuLohX%?HJkkz5WTwQ(j}@vYPB
z@e(@8SV+MI&h{N-n)P?>pCS~NW_XHJ>S&c0&KUBAb#AMlaGalyPflQ(I810(*D$h%
zt!ew9J)s#2gu;?gO<;e-HT}+i@VGye^Xm>rz%oO?LEg|Yhn-(r%#VmFQ@WlGNoTQ$
z(gWWZp|Oqc$>}wCeRXZT89#==XUDm$J;4(HVkd%?K8_4cH<0CQReOQ;!swo(SLCcz
zM7XP21q|5u)SVk*O0896OVV)rXg*hc`N1E|mg~3&wc1&^R4&$wg@)p9)9Tc;*L8XX
zCY66S&p|!3x~pBaR*7qT{YvL*sguMoG3ogCbB{;u({l#P^xE3m%*=KVpsb7f?;XhY
zWWMn>u5CcHO>2^R6kM;FK2NRTviR^x<J*zSF@pxBTFK&=zE1h^bZWQG2}?k3V8*g>
zmQeou_vw_j2KIy?^8r)lZ&uI1?Dh((qU`A}R^nuN4BqfsCqA<1zgBEsSPtiKs&tw&
zkE^XhX0+NR5E%JLPO*(YTc_z;ePJ%2J_OzPM)0pga2ZS;5tL1~Caz`9=mb3^v?0cv
zqS2}%8pK7~?D_?d<WHnV_*Jnl18df_5u%lfTxEF%&#s4!)!tZ~QQC8jAON3Mnm7wH
zB?9*M!W&piQA`gar6On9r+BS}y0<_zrmT;rzcWv2w&?&bKh00KFdcV39I|4$HO4mL
zX$?DH<4hdlFVyDYmVZ{2&es2F`$hvfu&5Z0eoWxcH*b)Y(?6<B5Tg8+ZCBfE7VEI-
z2Zjj+bi0(v*tv;WznrztO|11wmv&9oW|k|Zi@>@+Q0M>9fGG8&6=wx(^?&48eXr&8
z(<ulaTVtrj%r}E`AQKu3m+HsL4XBdT`qAiX6Pn~-HJZ#gb-VX(&hZ8qkMDQlyLBV3
zd=PlI`G^J_L(SZ0<xhahu@EW65>vme=3sQY`5`GwT?K=!T&s!C$*Yx<j%X<up=Ie?
zcOvt^*#bxr+`>)!H<G`;;96zz`|uCixW;klPZ^T?)XZh;Z<1qQuqFz(vvX)@8L?Eu
zY#Jn(Y3aLXCA5@S3%=4TMU!JsGmQQH5CtWtxGBYEdTTCkCAM|_q_CUp@FFE^ZK6iZ
zQ|$*er=(ru3~(+jh`+su>?5iaN9lbbba2A3>Kbg3cE(^}@V@f=hS7avI*|-f1E%1a
zY>)P5TE)qRB9L0Yqn#@tt$KuIW|~i0<!E&ua;0tR`%Lr_1F^#^BS}!#vwx=NbeHkZ
zkAHL9<ue>MrQM9&^d`CURV2b!m*b*u%-m3_Lr3}m5fZ=(&aaMR;ff!fh(B%^|1m38
zT-9<L*E)3jBeTWszMz<LrXmK9pz!TZ{cU8dNIu4ZKtPR8x~yK8oy=0+zFH^ey<z^)
z?go0Rahe8AWA<11^hccK)VF7kTh;2avZ)hk1*zjM1X>BYF2i$mhnMmvGYoQctymJQ
zk!^=;(^@(Q@4SCf%?aK@p>^_d&Y*L%*8m^O55y8)ua_PcmKWq1!NI}gA9z~woWrgD
zVpj$s+9-3(H$_$gA0c_alXMs>pO|eb-<rfLuyjDmAiItdOfrK&X*F>aMAF@Ny>ZX0
z6YK5lZypxzTs~A8ofcePT{&1AS>qkolc(d)J~{VZ8~2YBCkr`tO{b-`ax@fZ#xjya
zQ!}w0Ci*X2CpgqraSpG@lL0-6KQ8=qhvPEE9sq^TWeSk1ar_g|)SR!sFIRV*KHh=N
z<5~tA&T0jl?!?>u!bLit;(7U6B|A?_r(%}0{(a!xIZluwsx*h;4zp}y0*7~;+D>aQ
zK3{8~2p?+g_RX$t)AbrMC$TmbMfm;Q%BVpN^i^M1mw0CuF?L1%6RnqHs{;n~fL^7j
z@T7HU<{9(T(?j^qIu4@}bR`t577~3SLg`3f3H>}a`_LiKRs83Gg!ae}@@18oCb8NH
zc>=V%AVVp{S8DiNo!rFqTqmd2t<OrT&Ix6cZkSDXb?@r(X}DOrZ(H`B;9^t}a<y}B
zitL2iC+uu-P5C+&2nne^wy#h#4a>w(QWzPSQY;dVPi0>SIxF_Hx_5*vu%G@@)?2^O
zgUPs=I=a|guu4t6Ya)!>NL7W?G{Y%KGt@~a(s*Dxzx@*>V3?h_G9mE#h|efZCJE8&
zpPZYNrMx5b*!<L_Ao2Pr$AQtX(7j$wn1WuE&$@68@Ot8%2on_a+a24l!rrm-&`<Gc
zRjVTGNR63&%AY@oJ$DdvznNp?T6dj}Z#Yfs>+Xo)tiJ5$(Onu8Oi0Q*lg!yj#GfCR
zCse}T|J4a6$wcZ-Xug3d5lEyE6kk}?GS_jp@Gc6NZBxH-t=B!tu)QPil@%l@$<EI6
zGm{H^I>TxM6K3N=fijE~zPEV(Ue|DPkOo;J+V}o7B3RApYb`ITMVvPv;s7mp9zf+S
z#B{o7#1rcD{&cPZV5NWvG~FHwi-kGu?H%p32Bui>z4TVabe|tP{~a$YToP)xS;Yk$
zvxrJ2aF{GV69|<ap8Sm<)DXBTH+Y~8ZSk^itk2R}B>?5@$>GMU&``wSXj)syqd2;)
zc@GKTdr#fV5Nc!vyq=QnR6*Coc%(O=dn%Ey*Gls^3STy?F|n-0PiqWxGk1Vg=^Q5O
zLPpRDA;!~!9^oD7OQi^6eA#}*hCfq$8}-Luf4Vu@#~ii#%npdqrR#5``ajmieFYHF
z5MWK>fhf3Aqp&sui@%Mie4$Q#h1PRuw~#L7Q-a;$3D-LY{}o(1mOuV@b3bjPwv>Ma
zEcsAi#Wgd^>vM}0a?QRyG(6ujXYDMBS(CJcH86F5Z`?nYH^8|RyE{%1s6IVo(@k@j
zQcGe&Xf{VdmdSercnyLi-k!x8Qyb98s_Afr6tx;038^va6K-mmmRqs%oO<gSN83Y)
zXw^T>NyxY9+^q0%u*G4~XHJPlUJp%W%Wse8R4bWxJ(~7l3b@w8^c&?3&?g|nE^CyL
zNt$uCnypgw5t{%Ntq(P_%B%7L(6McIEI!A<_R62A<7$AM7BPAhgK0gtIB0eudYpJf
z&bv3&O}hszsIbYBsS@ceNHIeF$k{hCvBr(n3oi=BMFX?ShzZn~txBj;RQm0MFFZO_
z*6dvWl6!x0JTdGQsFB2fY4+345IjG|6UI?eUiUbAU`YD6H75pZ@Qh>U(!BcPVct?E
zRz=FLl_~zopJ;fM0X=HL{PSsis&;9AWmG@L%y5qv&L<JsIS+jarYs?~`{z^I_{Qd8
zG*V~O>P^kbj>8XZ0Usj310kOabQH~szR@!kJG1d$SweE;TK&+T&i4>&wUEa_uGh2p
z91@Qfvb>9$5xP9INFUx3X=Tae<i@jPRVdQglk~cNk@3UxM44gM2|9)Gs`ANyfl@<C
ztFz57`9Cj6fHMUo(j$kZN%s%xifK9m_5ATD$pi*@q6#SL1n&H93lJ7$qsT-b0TQvM
zRd`&Mz2WVI;$+Gi8X7h>WzviDmSTgdP^yCPdRSJyEMLsWu)(40Q#n3|>=en6_=R+p
zC+oDHzq$NiUSLgtcj$DaF04Dl?`U_|k+qG-?N|*)j({}|E}z<RDdECTW&(YDEegJz
z;xXRYXL&jI6aEw&AC0@YNjv6K<7l?!sQSs)*iYF?R{BXlotZ6lsWGEbR+P*lY}n%n
z*I$%@QjUI<z3RCunIzOY6-yoyADnE;C@c88_Gixmg_HIVgael)*SMabeFgHN!fz&M
z)1{XGXj`C5_RWttxWwJ$Zo&Gp@2xI?qlIdbY-F>uww%ok4T_nW7;70qpLXi0$J3R+
zc?nXlJYBMr7v*s_p}cLUD5jkA<jt-mMt^)OIyI5}f+W4#m6j~AeTN~#wvo+P$Ag;`
zT_PZN4JQ4-6-%?kY>#c|=OlfLEI81W|Kg{C6@X;RJUL~GlRt$gW$>#fwBSV}cUXj-
zjt4(0Qa?OK;Im9*(mgW<7ISz5-3gb@1h$VxI$N*rWF}9(3Mi2rHFNUoL}933t1tH&
zXr-pw<C0?l7uGBtl+zMkHL3ZwUnG;VOYbvr2f4d}ZW|t~KeQFka#xTCcTN++J)b<c
z6F*swbqk(xrXGzImj`s3Y$vJ4%j2MpgQAI0E2PudmxM<eCasWGOBk1XsA}-S-UiOz
zM}eI}WR1cG<rh%+@A~Gx8Lp{sC}^izZeM%wF*vzNwq03jb(7<p$L8RKT~DdtWw)@a
zC$g9p8XM$Om(pD|dstzbcxdwUP4?wJwwOkP!L*W_0oqd)Ah<N?^g5H=oqdVi$Y33j
zS9kMB9g{(uA)(||S_Hv{w27Xq-X9f2=hAU%?Y337@S0MsXSj$g)vQ(jEXJ^A6Hgqn
zYJ7i4(vg<oBP(^Tyl$Qxa0V>6{i`S)vugIN#x^cePMN;E<>`y^;Uj)HSSsE);s0x;
zEH|x?QXb$V=RW<JC62X;0;cf<4kpWP5zEMB+j@#3kwET?@h^2C-+26h@0Di<|M&8G
z_egR2kw_)F617%VF%6dFL~7ubIU0xfoWj#$s35monOqNX7ANw~i*!Bm)XnCVi5+IJ
z?=IO-r`fBJ8DHaIByX&j;uXu_8Y5?+Y8IANKaI)U-)EtgX!;Gm?fE~(<D@@`m!-e_
zGyEBs3Zw9{yHKE3{~`_QZz2&<;mG^va6ip;D2%~llxwikcav5kR*V2IhDH_{UpP6!
z%HLvQwj<$EKX78N$rk<b3yX{jint8rT$SnJHC(S%;cIKy5$kuUbVPiGtuUk<6OE>=
ztr=Frywx+1nN$gS>>N146D)GbzS2xg=y`vVy=>vqjYv!B>R#sA%l+7oY!k0Sfg^{z
z%c5g@0GGNzbn?igsw;$FA|N4Rz^&~)R=8YPugWpAd#G|(+}TM8A-p{O{?#Y=IOcvm
zg5SV&PO9X|v1Fv~?&72OPkpjH8T6y*Qx5U+thn$+r$G1gIF(Zx^)&gr!^)Xl{pj~R
z3$}in)laYQ+qL=?V@^?1g+x_KPjfR0xeTxy?V}&$*Ef6Wnm?|+pt_1(xX87B)dDmp
z9p-dn%k5uS5I{ZW)jWdMys*5_A3;COZYOf9^U<qW+sM`YJh!^rAnvp7<ubG`q20oI
z0q=zVrJi9Gd=m?&w){4=QBEk78O2J%d^Xp8liOzjEHevU8nlpeURUr%vP~s>#iU5e
zqFR0sO1EmoO>n&m&0uW^wGpm)EJ;!p()!)$+-72_@Ycm^>K9d5xv{=#XLO7kbn!}N
zz1+jnQbq1m_>)ale6}7-bMm_(yDm^BOa7-l^aoHae{5CnNJ?qYk>T+43k7k763!Ey
z>F6XO^M-z2_xsXjzlYTskqN#>XnclpVRn+3QkCENBk7fF15oXw^TlntPxa7SY;L9d
zy~^#HoT*Qwa-UW-1oxXq6qyuxYcY+fIa=9?xZA-5Sl|vtz;2K;ChK<nJDDtLilQ`{
z!WhXHs$q+w{9xP;EY@$;XyN!`{UCzfKD)Pv>8}Bza?`QN7Z3j)L0QWWDn|n;0&Zq0
z*DH-vn)V4(s@3}c<R{?o_mTXxg>BL349Io+E(EPJ<48wTVq=yC$!gS{mEm4nbkhO3
za-X=5j!!Yo3r6-fX9*{KTh0pG?Tx<nfE-%dT~{WB^vCW?*Zm-|2Hy8CMLBK3|CSHr
zJEty*q%_z900k*)EWa&ni_9*TK5UO@WkL`hKEg!6ThMwt2DA7KB;Q)n@J(E<<qr4k
zh}&MjU+GOKIN%8W%Z03Kk)R6xtTBTdV=_Jfe#j-C>yXp{q!n96yCS0i7`p~p6{Vzx
zA~2|fnIxoFJ!cuwVtU>OOOVAykKsChhg->LYt(eu76dBkKh4C5Fpj?*8RiJMv-7Fl
z&VA8r1=iJ`M=d>yJgYIM^9fzCatGEF6c);vU!KtOu7P}@`AorNj%i>N!yR19ibsIC
zNgPiX$TJ3o0GSc6HD?`=D7zP(Rv-Eg*yf|k<6N!lw3Kg~QwHj5P|wJ2wON1R^T~Op
z?6simMw2^gq*?eyAu{W_`}ofIJBwc%NtdMi6&$PwyanxU7u=P7eu?%Buuflc+MKJC
z>v<x;%bCw)&Wz6nTv|<WGc()c{-rNa+ZE6?oNH8^kR6$$+DIq*Fyq(-5n*SiE|y4D
z%1puW_y}8&39W13_Psa*8KV(*%&+(L>XcEg`|?*+xn;?6H%=USlJJuC`go$l-NrD|
z3&}gvzYuPNa@z}b$?U1cT#rA|Zmd^W;$ind$qbnG4!g>({!2tVx~j=cAv<_hyhjSx
z64qI)!QO-wM?a~;O>qV&`$J;t_;nufXmsKHeXd-be1kjwKZPiM;&lkk&3y33s%?0A
z&O=)S!qv?9NC{<ap%SAfSB24V#^zzXd{D^;8L5Va?-O%$w(fxLHc`Xx&VjeT8;4lj
zI^Mad?ux_uXyYl0EUeRYo`So67v#R`UEIjXEaf6x1Kuas?t^w)t&Uqvi`)C6z`%tP
zzFAckTHt9dayCVEHQG;nczs?~{xDf8=7V;)eoVYdWw}jIbnsxLL~zDc85*&nx*|iF
z6~Uv70BRW>u@`pG&lN5h$RwIVMv(`@uq0@+GIMzsG6`^)NE9mlT4JIc)t$ITPC(+B
zTP?pyPK-?9+np)C5#$fV5NAXciJyhR8JY%T+F2QCxhL8g5J!r8A?jXIS!^74v?R_-
zeg6y>H36f^1T%%algG;;!%Be1U+Hm2mV9Z=exGl5_gPtYg5S#z%#TD1ba7rzajP`q
zgUk2$<6DzU*i4#-dxz%>p3bicROPWnYBQc6-r-CB2?fs2gRZhT_kSCBE#|BmYU$SG
z!K^My98d%$E_s>1!Cqw9<m3A|JQXxBR60*hyBxF|sm0*v^UhiV51h!Z!bN*$))&05
zc1MP<of1mb$0sKKG?CkL1wI}|4D6TKoeR3RJ<l9zvqr9C5liM&$Iar)kL=g&4Xk3r
z24O{0IZiG67X@<f_k0JmrP)TFP#7ReQ%gF~Ouky6uK$?i=&apY<c!^1YAgn>7C7dm
z4cIo~QA_g4<lXf8OdjD2rjC))2C!lbl`>_-t*u)=Jp9Fjnt0sc)zTsO<@N@yJU=X-
zOy2o=-{|$VuJ_U&wH$rhQ|(`aEUqs*AJ3H@?w7{PRb>jGQU3$;E-v~Psm5Mp`1~sy
zSrBE<Un=5QJ`{|ajbYO{eOOj%z9%km=(D3u6L&S=5-;T*?E!^c0b|lV!CDRvg36N)
z!^KYVI1G0e5)v75;S=X;ACw#2T$XqTA0gX&=9Ielj(N6(0m23%#=v$`=07s6*Gy%o
znIE6uwiFq^jqHJ<B|0Qmd$V%5h`M(x1wIxpKUt?g>OshE8j*y{WU0s^qA?#ct?_6_
zQ-d=x`ysedo?r@@P4~VA21a{1x4Vo<U0d&jBu%M^tM~1<?G1KL{LJjx1Z-rm%~p2+
zWlTkS;NiB%VXwgH_|Yq}Bzpde`n78i{&nTY*P-d=&@$Z_I&7yw04NKn!Jre-#PWRg
za6WllM>xLhiH*2Yosn5Qhz^zw>5{T9azfBY+Ujxev~R)=2xc0#vRDMFC46C(P$Ves
zC7uH303(YPCo@Y38<i>AW87TRPq_@(NbN0QN(W{3u$ur4-(I5rs<q(c4ZK2Mo)s{m
z+Zjt(S`YkPj9OmigREpa;OzmiJw#6W7;p^xpzR|%imyQsqP_FZK?KQB)B-?*POZa}
z7*ei-!WU0>XP@6;7B^3Ti1_rcx{Ll}9rL<csN`HXg-tcXeT?DY5rqM-G1<5c$JA{F
zKBTPYTBbf0=#Tf#|1!0Ml-6qAQ%<sEvcj5@w?__PWIRqOJ$Sb-dmuA%hhUF_zOBRK
zV_5|Sh15s<KjA%g#|sM!o|790d{=OkWTsoNgW&AtbF8c~leq-4sll-3Sp-457E-Q!
z+q}C_&uort=!=$AR8Q0SOoS7ksoj~Ax~vZFHCJy`2WupZs|ah^CI7}HnO4n8V#3Bd
zMoz(C5|24#(W1Z-d<7KkkR+)JwgYkk=M*xWMS7#d;d)6YF99nnIs+6KQ-e7J>x|f?
zGA48G4vSWUMlM!6+%9O_zz-i_OhXd;=+B1a6Ixcw=u_;2co{!gm$%y%-dE%zAqYE9
zfP%X=3aCmU-@nFHXIy|F7cmETJLCAb`T^Bv(Fb@TI$~J9U{e5WHJnTt9sp7TrelzY
z2PyqA%kq7*SX&yL=<lC<-@$&8rhEb7Skft&Yf(N0aV%TWE5u?M?qCpm5ZdE8y|paa
zzCP^4_Piv_!I+rg_@+G&tGcEbdqY#$(5)j+o>*XttKsw(eD%)-xyQqgKYsl9TwlbL
zU6dJzmXO5m7w82x#ZHBABQ3f%5XzB{g9u<EMpVp(nXIpemDr(Zdp4?!7=y&1`ZtS>
zR&$;!A$=hO`lzekN0^Hdwl6rpg+5729(@x;09OM@K(nRQP`f9vuGLR3EVQ~qYi3l@
zRmbch5t|jBNU^&gpI!wDxyhDsOMZT5xT6K<3m!pv0EEGcdznv7XvMExxtplP{@U|m
z(~)Cr4Fw;kk;U5EX7N7IUa5U?7<<txqw%k1zm8Q%dE1-AmwF0edLY>Z$-Do7jUINs
ze}VI<;_^@Wvw4@LG@A~7=15I|kG2=h)*xQPF3Qnq7(tZV;=SPx4Qx^SU_qEdlsuO}
zWMPc@CxK|tELu1nY!aWtWkf~d;tnu)o$i1(=6McE>LgtzzOW>NA&GqAgD&{&>`bHl
z9g2!kfsuLxyX&9WzY<@t!eP%%;=>RqGoWYiG_g?B&;z-((rEQC2Et9L4t)Ubz<eKu
z5Rm&8kNyy2!Z@v4uzxp$%{o6&FsgF{U9;Vg#*lm^ca&d%Jeu72>pVqJBjAW)`VYx}
z$r5aaHlMV`fRkN=>B&P<&DBmTv`t<*{>D%}>r2D`xrq=$5$V7qjH$v`EU-&r;>;mc
zAUf#<hRp{Zb}i95=5brZfHJVhfJJ5d0;I=cK6?nGKC!azG#wqm;%KP&5=2W=^8jTP
z*JN3LA|zhW`^Kta2JWYEIETg)P0^#fSPjQId!+TNXiy>APR+FZAElZNu4#_?_VQUX
zwyl0v6#sn7Cm2<FTDJXU*60WpXe8)iuYuTH0o~@X?+k+jt$ls+Q}+WHrd*+Z;E&$=
zhK9t7n;C&oJr2m^;DDIi*$4Q&*^kMyU<Ij{=CJI+*rmVL(BG2ug#QEpPcO$D%Q|os
zwVuU6orWW4pwshn_bGd1*2-zC)ghFO^TR`FC8bzd@0kJ_*+MogKt`{!{K4KH>0}2=
z>R>PS07ro7&%$|Gs_UXZ?3ivj_cxp{oJo$NUt-p@kxCI)&-*dyVWaCkJEi(RL}<08
z4w<HkiHzC|GA$8r<@Z8ydOJ&Tv0~tIgH_>#yG3}zghi~0_aED4?v5FE@xr2k`OV>p
zoJk>~2dYhze-M00z#D;B@g?eLF=|c#g@kLlC~(8l=g=CO`Za5CieF4cSq9!WHq^g+
zz3QU(sNCeA;%A@kM4L*IuEBrB(2p|xXAYV5jKl6UALP~NE>4c@IUgKwWd62Y6fooz
zM%c^rW?!Mci<pW_zEF~VbZWZ-<bFY?f1Mw8M_$cN`IOJxmvI%)2Dyu^hEZNE^dA1p
z-ullILWeRcN<-cg9d=E%@hPG{IB>DwnW8EtC@UMt;ufIc4saj7M=M2d!({EB^fvy*
zzdSF>@XhwCI!S~Uzk;>RF}2-$st3N*cPP@ei5;fdyvJ?fiw8;4{6bXk#NiVv@yhf6
z7KW3qS@69g=tp|~ktK(9wYKladWP_lw3g6}RIFkB$vFF?bNE|8C=ua^G1-tQW(1R?
z>TAj;1w|wIK3vMS6wEC1(U|sv&HxHReNrOG;;mNfk!r3Sv6vut@y2`}P8()!4~fYx
z6)d&ARu2&P`C!cbM{Bc=VBo6ahu_9ck>T!qWn`sf`4G2yZTMm1@~hiQuvThxc#`CT
z{U>;?UoC$>Mot3J_l8bQkA+S4?41tm`&tx`lLSt4KarA7TV+F}2e`CM#T^CI$Oi<f
z(O`RT)OJcn>EljmbkD}qYE{g>WY%-JiXy+e+mrrvBP(6t#5s%hDTfvLuV3GyW!7(h
zi$8T$2E<doAcm@qd1s^3qb|w2DBv;A<QZf0;C<<mOr-b_p}Per<bd{}!S)37i}ko2
z?m1&S*4AdnE=fRuRev}oO;KBT%c2TNl(2~?i-i|tigHfTOj1LkRo|&mtm#ks6U&-Z
zBxTrcmJsFHnb^T^cH%m2osg~=+!>38oH^<NHfCfA2~0i&*zmvLNt|k>C3ux-2CU*0
zEsD%)z^`CpDv#$lj7OI;kyRy#Q3MgGlWdXv(q4G{6};GUvvSFW-rA;e=nwsTgj;(E
z@`7|0bee|Cr~A;?@FMxqvYKf|y^gty?LPJc;z<Vb9OZSJVK`Cw)_cU>v1a*}pr*{n
z2CyRw3S8+fSxDl;6e_iZAGWD*Kc>I^R?kOtgrHiOi5w|qGy6wm1=Evh((@ID`4{!P
zx8?>90Wty<z_d5?(7*CfM`E%4=RP|uM955Mj0S^%LDgu&7ZB9d?)q723>=&A6o<6b
z!kF1q23wY6WQ!X7AN@aOx(n-GKCDDF^hKVD>#;_PBdbI%_RL9!_3f{MNhr-C7i~Iw
z6B{E)F<&18t69-V5Jc&)M<~$LtxkJ<6!DnH;&Qjb4BzKRo*=0`yX?9VCXYE|#vNeu
zK2*lb3}E9%f22T0Kk+xKnMRf=!6B#nInRB+p$0W04+2s|8&1DiQl|TH?oe~?-M&5^
zj)!5+@RwT6X%yK>woi-T6a))(P%^R147;LT5|*`}kMuMa{Kff*5U4>FS<iGOO^enp
z`&pX&7m4(@J|#08>u*4mh?x(*C9dMqi%CE{cxyY9RG59u=P(L{RyBeq^)Im6>WA`Z
zzc+>$wUQcx5oVtjji@LIy@@<<*qco{A1r)Fq(ad<U!>2=ZX^iH3TRx>LW4*UBf=BK
zSvX;-N8mpreF7F;5yJO9xyZyN@_W%eJy!N&Gqg+?GZ;ZY>8A}+iXp}uyCNqgayH>&
zGT46y&q~DU0SJ9iVMiPNqR5SxL#EOo6d`*5zLq{EmC>B-(J=0aec6*`ldW3|1;ML*
zz&)R5M@IaUdlT5(kX)#g^}QdMqGvg(j^>DLyHYZj83}iG^8mFx|Kl#&H-Ohvg35~F
zuaWZ_ALg5}8e;<KuhtS=se|e);(t+^`VJh@N?x2o>%<S`BCzmd+>7KSJTMCo^?!*x
zgnxD}<&O7P<2v_*MZHg-;DjKH?hSla2?L>fak<8iPQtkI*0F5*?rGb^1#$X>qhCeH
zR3x-gDT|`NhU1Q2QWVy~0;@736-F^v5{^WvR<MvUV=CYsEIEq^&-(IW+{p9KR0jRi
z$F1@}&pzq)oL@@@xnLAaF1R1!Y;j2)qnX-0(KbRRGk<D;A1TQOFki!mX(IAaVPio@
zfM)K*W@aRqdHh8?fPY7Bxvd(bkuiL!wA|a4Ax^gYyM827h^A!A2h9fzzqieh<{9)C
z@{K;`KK-(rT{Wa3UphWKj=;NjK?HWwp#9^0PeP(a9>Vm21>4x_<AhcV?JL63nRN8`
z$k2GJZz3k_&LC5d9Izg%LM0-{_KxQYMk}5<-4aDEGnoeTz|0{uv&}K{T|(~8&lLzl
zBPz`PghYNQM`BlFxj*I$xh--YUO%oEyysrT<gtNFr^F*9U9l4=T;mh}Ycuw*<~K1F
z3NokO2Y~7O|LmXMeK6)3$?V2iLYdVFJ*`KxK?A&DB);5a-1^OT?l#W=W+*%P+ObE^
z+Mf5#3Z?T|=+LEwwaT5QXiYQLiJUZGUIHViN&7||rzL9WXg26F_C0M6il%SHYn;6%
zqw{|sb;9N>_<4l|Jxb<>-1#?}CyaO)Z$9_`BF_p96|9Fv9C(=G?z><`bsl8{tQ$~^
zHhL5tKx~a`PG8EGRIt#hLMxa{!q;sJCxY?E#z3f7pOovy;biysnJFs_g<+XQXZrNo
z%Ph$?_%jqURwcDXpNjhSQ^@yVAec44^p`#VjCBKQ3=Zgcb=8s=(Cvfm(Uf)kyldP2
zU#x?{c<<1I$|^I)Mv)-=_$ncW9T7{-yv&@RY3W3hR@SbjTRP*{;yXMM%TKyKtLO?1
zJKg_n3NfRTNsuE@eZ85ao&90(JdgJ@fKkHvGk@Obl=UmY38x{4qW8-~Hj~axakcI(
zCwxFfs#>hKVLlmv{R9KMxjHUsa7gI5SB2I!?j1?Q);Lr472W#wwh_n#+Sn1ahWT5^
zBFX8oXwN*OS>yBg=rbs!-sYbB$823WouQht@_Fk3i1{FG%`3?PCRNxwGb3WxKdRMY
zub&$bk;(IzGZ{eqCK}Tq?eEdw8S5Y@xYrXfX{f5-Nwwi+qKID3&*hz()8#$#S2DDT
zER<qaL(6JusF-(XtaJd6c(-ISd%iy3ssGaw+vcxGxT+lJ9kSO2Vn$onN<XoW*ZIj3
ztz3vduIaF!OWk=YkK&<9|1a9o?V)O8=5H{Qv~R5Hdz4o2J7$jy&}FwtS263o(MY&p
zPR%?<`FByVs)HtK{3T!mZ9BTV*S2x5xq1*%E0}Ne`%;X;!0O;JFsUBU;$mN-9b5iX
z=A2`~vE5<A`LBJvZ0Xbk?eo~`@-W@bmC3zf&GdjLOo`Cd|M?TmZg|vg8@b@~!@-Vf
z_Sx8f012H*?DB3`G<2Q_AO3<HM4ZBO{a~D$4Us4l8{YoizLAKwUpPD1jB9t%tWS@=
zr=Udcrm-x_&SRsT&AHRJFk@QOfQRlUlAbB_Uws4z+e3u=Yq0DhW&^D&szpw5P!{A%
zE2T<?wIACm3D?b>=*X}BN={WkyHO;Tcn!R+k&wzk_|T|J2AKI*%KXVFl>LwHW46A=
zJbxmZ*P<PFabWS6j#w^Z%n`5Hj{D20V$$zkp>HFLeCNe5qRj*GpiWT1rx9Q2CPB{~
zwe32!t9r%xc522HOM1&f`dRb3nWH1ahO~9w6t?V|>a>i)WbS9&9!Toxf6j5e`9*?(
zvX`8**bVXJ<x!sGLqiLuBf6ba=BQ*<3m)^Al-zrBgFO{m?{A;lvZg2lG|&QYIg1yt
z;TcPnSd&o$>^cluKCd7yxHKO{o>c`(JzZeb{32&okxtPdki>>IKGBnlk}<N@1{I~$
zeaZW-t9+2-Fsj6uCY)6t-#*3Xyi07M!rTN1XMPHAwK;ilVZ+)M*}#7QBoO|$j<}mo
z4a)*%MYSfK&7n2D%^z2Q^F%w^p@B&x9+tEV7^ngH?DY582ar+O^NtnzFIhvMi4*$(
zO6vngjW*?Dd(DE57nGI-$)1K-a?=&QyZmlOQGXqB;NC<-H7VZwpx21^&8r>$h23m*
zzhv1CrW$r+C3B)UY-cUJvhR-Nm8r$%?_{S?tQ1ovLS%>hT!zXi40zxFZ!!1o8_GZi
zfOC$U@A`^f4xjtyfXg355Fap6WB(aN_;P54drVhjR5nma19Z~aWly{3&Pd~WPYrir
zGeCLEB)NXfSd~{TeiEb=pv7Dxvu_u<{ZXH14}uMMes{A%EhJ3ZN2e0#2fadcU93~t
zB?`sxBwv{<MJb79D2Pn$h!`#vuhWLYF(7Id=`^|NT}lq2&NsZ~%GGh8Z!~VhN?)5m
zPw=~6W@<?ox+&~T$_5cl{kEb*G|UuCJ5SnQ$!Tz_7&l5z&TDgtF$-WU<u}6rhq1ur
zGBavaYy=33DJB_m8yp7pBf%=(cO$Zw%U@5f^>g7z-B}Q+d1O?i?E|O6kwO*bR>Dpd
zKN*_VeS{SsusvSb=s%;sci#yAXBb}pnRHFR-v?6hb-~mxFWuheHn=X2V4GT`M!L|@
zw<F@t`QtQ$tJwV{K726evZW7=H55?*jEYS8()X6_U0pg9z}FT0clIGvoU(J*5R7^u
zc(5K5!1l&*DXrfy)2;*vlg>GBlwbwF5t4!LqfOGge|?{MuosVa??%Wi`0RT`CL?ts
z@r9DG8HaIk3~N;Geoy;sefEx~%PQh-Cc<jkQ1Bx5Tn=X|iZd_8elcbE3?vR6&)3L0
zyS5<D5u7&#Ydn3AvOc`IM2WI|`r~El7Bw00|BW)NTE`>j?0zGLne>LEi&R<W&G{lt
z$Zu`?e@1yzMJ3iS(@FLG%{l=bV*+^N69-)2!HQJU+=9!saEdd3G*Ou^4>J<+F$+=H
zvb^@pIyEWulFVy=nU}RZkH~zdC2wXzuFx+jR(HY4?@vC>TM=zzaXw6L25jxW6YibK
zU8zh|>>>WIEKGO9rk~gaNxh{`^y|=6<xWBWuI~%V<wYZw@viy&_7gr-;Z_cpfuglx
z!dy@bt6os^S0E2I`VbgE&?Zw+hMlo_9)R(qnlHK~iNcjO6Na=Mbf2_`Fv08*MeuH6
z>W-LcWP}*?TNo!~wOL*ETLs9i+*cKOy`Ks_^?EU>oOF<3=iR+pg@iDP+Il$}H2swb
z$A~ZoM#_lN%lt0H_UGrjUP<5(P3avWWFK5(0jeLWyc7EqVt%DFmuQIIxQZ3YTCl0I
zmBsmBQu!(pnjfeMHM~PUudh!ba9z`?R`EL9!~gF235S@4xLSBL7n6oA`pF9nzYK5V
zBM-wih$xadf?$B*A4n=PCKhSz?{Bul`DFKbO9L6HS_~A&NSn2#+$CKtAALXZy@iL2
zus?mq7jk0J&=j+4G~7fnc9g2x)(DP`;*Eiw^@8jELZBL>4fFC{*>diGc#0^JoE&^(
z9GIvP7C=uN>|gL2tQ`Ho-HDnt_`YwPT4_FuetYWce49c^|3rwF<QH4I{I{r}rT-g>
z)AEOY80;b1JJlJ}KZN(3s@pGaw%K^_qrH8(Y@O)=T{Bf({P;1txvtR#3?`;@xa}e|
z&wvc|n%uvKMV8S1_(590QCmnt1ER~xbwgd+5mK()7EHoLMx=+WnX@h(?T^1rg;whz
z*61(P-u6~>yDdhTYBuK#)>|`SNw8{AnX|_)qfqUxd7rSSM%!TN1-jJ+@7u1>uM(N1
zyZ9>*ETYj$nRyVMC6N1T+3iZoBLTM-k>D>j2k#_}svArkK};5t32_b(9w!-3Za+2!
zPBZJ@5YN5S4lKQQW>ecw#D|7(zEU=xQ8mUI3Y#>sUC4A^@_4tG0OHIPKV6Zw|MIt9
zIr6GY0Y1h73N*)dlFcw9jdZ<5wwA}s)98%rnP8^RECgQV5G?2EnDT6WjPH2Onq)bF
z;SyD;KlB(7QtVr7T$nm)R2M#+v+$ey$HnTm?zVC;8hQN+^9%hdchPxeiB;QK(jp!5
z*-J6kj5$VtTZ>1)WiTkquzgZ$@FUToDqO7JzX=oqA-0&zGp`fh4bFC$eU>lS`#J){
zE}&*nN{nkt%JOLgbiDPV2SZhhM?$%XjyMqX+q6hK{6ZW5&0as@#5O5S535k*P3hih
zDyn&85Pt0}0y#INM91E5SNTjHr9VwvvnSQhU=e2>js1$UETpyZi8l1WWg1h_&&-Xs
zGzL74>y(BQ*PYmNkes)k)^iW`_OF<If*exnmM7;=n2&L7Me<)kYnB=!E-d>;zc=yw
zYi>6j<9f_VC@r@9p>NhqT5wE>$ixB5LQJNS6l%C^OK54Uuj-vTORKdSsI2fr;l`||
zD;il_WpoBY<`p)ow`M44N#ptz>+PN{(+5;+IB>O6qBX15{hq!~W{?+32Z>m~PZ+c$
zmTB=z9L@|NZB<H+M|N=JgR9OsP4xQ>@3SF09Ez(f3ixlmm<r#Ct+@DIew*)24r<1F
zyj&WcC<)s1zGW|HZ&yU&BFb!rUDZxaZO20|a1Q(fet)L^r`e&rotr3Z(zE16nej1J
za*J$2NEhoyI7O}k7Tz^cyvpxu{fcQ0QEGpj5J_a#o|po!#GDp1$^20l!u7hd8%e@i
ze~BPzTwEX8eszXVeoT6w6LB%R=YhCIRyHcfA3aTzpR6!MH(YGJJbFS##U<wWlatp7
zv0nozr)kmJ00&J|C`!tKG4b1s=MTwa2f}S)v2VrXueBd#uaHQ2*&q3S+6|S>cG^ke
zCtGIzF}#$77C)rGBYf5C$tTM(Q020v{yp}1z-Lh8IU6JD&W*g{rKP?6XIVA7{+kxY
zqyzj^h4#`{7G#(e^zV<ZK?JGI-g4H3*S3uz{y>41Ep2e7Ux6+5{CQ95dnSs1Stj?_
zH^xtduqUP?gwT1k4!v^aJ0=B4?QA@(+abebG5nvV2t%?Ko2kbj_fB<Cwl@!*Od?P%
z!!23rF3TxkK<Fdqd<Y=cG#}44*=v%thxg_tFH^jQoxg<z=0p37n?UgS+I`Lb9+I~T
zk%F~R8VIb1tn8gvdyErk@|$xg)hi;Dqdnrqh^9sJzlP?MP?`SW`?**Zz=HRlr1l>N
zfmGVa@QyWijCTSWWemsv>Fq1uqWYq?2PpwbrBh0jl15s(5hNvs4jDkYq+uwB4vC>9
zq(neMLg^a1yN1r8VHlqA_rCwY^X1uJ_J?!reeH9tz1CT0-S=9HnfL~8`Wv;DMEx7{
zplT*>_EiJ4o$sC45dGNlCC6uAZRe67!I~i0Os;I0oY?z52Rofv%LykL{m1mwj8y4c
ze_to(y5VbTZCMqTb$Jd_bwviVd~6YF-$evhqb4SRgk<>>T`D^ZF>j33Uu*ejfhWDN
z@)Zx^`phLD?{Arar7w-IzQO)Zde5HrZpmmUw#v$z=2T`TY1(|pwpa8Z9KCjLfn<To
zkJF-}dSlqT+R;t(!aGh;sEn5{|3$pdjSf_69vAUdA&)lB$o-8M&V_RiKfJk+R@h)P
z=2ubd*3Z7o{dMF}$6)`93~M|_yt>~Hs#w5&ub_0>7U43ERk>sAo3u}0W2r5{5WB_D
zi(8-83emr!09#_~sKlsk4_4(61$+l27}EXBYtS;Xd-L^pM6-D2%mwxW<+UY$fB*_h
zZO>r4hqn!oCX<XC&RE=z(P{t%_akTR6pNAY1-BYf>exr-w5LE^^?E1aidK9)-z#Ks
z#3qcnm~qX&lZ1P{z8c#0Flxk!Do#w~q#U4x_gs!W+@f0$N-BcdaTcEQhJ6UA=U2!v
zyk7&nwteHGMC@JovUR$7qxfg6jao4qL~Pl=?$#V=aDW&|d%0}-2{LN%#!^0B8rArN
zZT7>2`(bRa))mpy)q+9upxwbZuKMewe(g(Sz^6szqO)A&a*ciF`I_TY1EsJg!!?h}
z70Z;6aub!2W?5zKsx&vy!>Ra#ZooJ~p|<k9)<^~`MR&2m+F5eiwih*>;DRmQ<*x8(
zNi+S*fLi7ZF+h<IhemQ9a%-Pr;p*W%Pvk9zs4D>JJ&MSo4?U!}Gluod!mEqB8Z@%m
z&-LP{LSS*it%oHpP{D;=lB=LqY1nMn7fXy+#F=KdiyYsgq!+W@9xUOadsJfnl5XcL
zH;)8&xl=BbQf{aWM(s-D>?pR?%vw2}mRV0rAZfkcJA~6aw2O+IXM2>2nYQ42I&qhP
zJM$-u_5gtF-=4gci+rNUGfo&&IVA9spz{rsrQkEhTT(+B#_JJ>pzU=MbJBaX0LR4c
zs{95QA~jy&HLazkM1LUVXY|}-1`l`~g+Fb1^h+x2Lr%W(c`VzWO$4G?^A4<4z(}=O
z8P>zV;>ZU^%=vW*%9n5g0IsVF^xs`Cd~2X$2fw4w^>1smE?T$V(ca4xJTDS-uH5zA
z7>&AXY`33wxvmpJ)aLH}YS(q@nu+(+=4NT}AT3;p6U&has4kpVB4y6L|619uw4M8$
zq<KT<W>IC`<pZcXh@AfErANbkbuJ<D04Vuz&(4Z&v||YJ2>30Ds6}fa!|{_mEr~m4
zQPZNP$L5uoaW5|SDo1@ZG}rlRQ77n3Js_K9e}$2NYk{T9!jImZ+bId;@#G6)Kj(_s
zh2|~eInuPfO1W7qn?V0o@RY&=HLt0BHi?(B`NOxlMA7WEzI%Vv)#Lurt|?;ELLUEC
zmpeZ9eo&b{sWyStHs8j|6=AsD!&G*|P!3bv2|7|lf&<JPD_^$4ox=~CP%vYP_nt=`
z$A&0Tc3YpA*YzcrJBWd&oti~oM#^`|(Zti;^qiHee(M;YwflMOd_c_GIU$+WxlQQK
z4rXNj_~5V~A~1cE%yyHpNWb&h@*O4A%Jea>sYj6gBj~*(O;CE2s_zcX)KhT}<95Ck
z&kW{+q!vU3>abdF?`vvQlsaU`q&hvrP|xa*%WCQkLZz%Dav3YQrt>B3tyS)dJ`P_P
znC0%c_k~6V{`w2|2%s=4mG{S5ZUhw%tE{$)kr1A~J(tUoN7@HuwK%@l^u_&A@>xE^
zvSYM7jkL543(4&%oJXbBHJ{t3_OJ-M3Eu0}XAzQJEMpn-UWt=mm<h%vP+O`_eq#ZJ
z;}UGHX?RsQ*0$9EDF<@Ww+9BR6O1pGFm<<-dLjOM8aM<Cqx+*1)q(k)x#Mb+E5OpU
zE}LOCz!%qB`}5yso6<z_wKS&9$^tFeH}l$^^7W;nT09<Qn4KSexhi|U+A@e^B`c1M
ziSY9^i5hIYOzRAV4FAw_a(^8;Vw6h8ZwlXgoXRZ&#?*YSo}Um-cktH6<dI6^aGmJW
zGM>$NW3PPVaV~9}gi|YXMMm7n(Ls$k*w?wovGlGz`Fo9E(2v9Nv@{B2HY``V-J=^h
z?>rY-53be}Hz4x6A4FAQ+{vk#Q@;U3aUUd1F8_UAmeVMvi|d)V^$Q8~3`)}x6ftJ@
zn8RFMU7g6t$iP>)4ls8fvUNAkngA-2sLYvBf~YjJmT3;Oh8THPJdY1%p|`pXo%U8$
zS#0#kZhl6&Bm$^psTa7Obg8*7tYN`~{`*9ZLecxj+gcPGrtu9C0;<2!Ji|$gn)%)5
zQg0k|yYX!X6QOrk$09UF-qL}?ZAiqRw8WkIea?(?<{}aSrS>Lw7*AnczG+uFKc0~f
z8s!22azF=4FG8oxKD&H3rfeccjezVJP^BeJyrj6WQ+<|rc{2LbVvd+gnH{w!`()uf
zGGDFBIv?;xu4+_;J+pi3pXvyD(u(=A@Y5@lkr8h*^X*s`H3glC6u7b-Z3w#Qn~9&V
zDO&~n?iSAO=b(HFJ*;fRV^8i^XZI51S}E?VlxR7HiL4ZrdT$S9oJ|Uy-Id{q#}T!-
zzw<V=SoaeGFwOaD#9!htrVUS1m^F*;_)Qw^+^rl39&SCUXRV>A=@^IqqA9Ewr5Wyp
zzEEMGz5pvr6rHZe@*<G0NR{#}$f66!%)7}VdtSD}K5OG=UNVTCI$5vX$2n_nK1(#{
zZGqS$opNwbd3plfMMox@q_S*89qQZ&c^>Qt7UDh%i63zD@*a0ZKSfu2{|n@Winzd&
zeD%dy@{@kzVgksrN7Q!?W$yVcA33<D$}+!+u;wp^DH<MPX*^|+bDNcq9rjv@tAdGG
zvrc{mj1cKTHD9DF{e2O$aLNSf6xd#mEzDY5Z%N_uycVGNl6@ud=MQy7obPe|?eWjO
z9bt+kJZV#TP&KET&l%4aysxrTr4Y&>WfxO0K0c1-4_2A}zC2#ZO-yv%uWTqTE>`qQ
z#{it<Ef08oYffZN(Jat?^zEtg#&@-5ws2j`bT>#47leY=qJ~VLli%vw=H~>Zd9HR;
z(RPO8L_}NWTZu}=hOpN$QS$vY<~hWt2|ZB8&pS7IJm~@Z1Dui#U!Bg6*q88T@IQ$L
zT(^X1;hMN3ca!=PQ(lA_FTAs}WxsvUND4zdgvIeHOcU{%4iV?YQkl)`Sg#4j+FGl?
z$z<&qz6(qr&1kp?(uCD_oLmy{H0D)RRW&qF7Lfu9lq19F{p9%UB|>x*9&={#=dEpz
zrLd_e@^mu_L$VqTSs)bFKlA7>FpWNrVWzXm>wegjl=W;-@czRP0e|r#IqA5GJsgdn
zaY%8KrVh+dPZu|sUUcwX8H}7CRtsGpAP0}tzr03)^)**<uhpxqZ1wX7)3@@@j|<Pp
z!;)!gkMK)l`)q>2lJKB@(1mpS9=#<lExMX^?c5U_%sVXcon<MnphXf#2Zz6Sza>fO
z?*Oj{W`%;cq7x)c?jl(ejM@1ZbElRh4GI(4<+Td!BKPjnP|jlbdINaY%?e5D!$7nS
zMY7U@1z6srW|LG%ZTW?u9WiGrP@CN$a{->BK4lh8$TLfQ8slY|vTlz1j}P~nUJIuy
z?mC^HyJpDk0{zBEXQ@4=V<3($gioG$)OjB){Z7xPu1I`etl2+2oTgfYA5l<KLwcO2
z3qJP62AJEU4QcDMy58WA8umLOWcfb&<E-lstzu92*JoPeZpu2mg?sGH3dOa4&{z=(
zQvlnzMG(O~vwc}mZmDJ4PT^cxvQp#l+ztybCTi&qQyo+^(K6%LM;1@@=Q!Ou=?q!X
z{>*ZAz=HJfIqt50J&R(czN6qvdV1&#IdEovUX>(#4m7=c0fj=*I`8bQo+DxOO?M44
zn*#dy@sT(gprDVPUYzy9maW++f+sEC+an5ny)5n5dm|hM5xR!Yj)U4)^4yV#SFlv-
zM+O}^ZHjMVhOe2h-!`9NIed9;NK{jE{ZFbAoH>IfF^&r$M(B@4pM0)AxzwRqm47v6
z%}EMd68c`At(1=_&(trR36!dPUTd`9B*Swn`vXp-D;FFwee|539Cz6kYeGX0yU))(
zKyOu9$udAcX0J&P4)%V2h3S`Tl<5v-i4fDFp#bt<)T4KcKOzk-?Ax)I(nABYV~D86
z0$FIrXc!wYBqbFtcM6^?)&*?lon|Qt9OgOTNVXb?w6Y4lXWtCg8!3x)EGw;~exz>&
z>eq=)2Yzk49jKtr7&EbTa1A-Hl-rtV=Qk5kqcLX^60r;W`)GF+H3{s@URGB>)$295
z%sS}|*icC1$q_fxxIc?bCT_@VV3-iPnnU};nlFY&(k?G9_@0EpNz_;ZtN8`y?2TGm
zTW1X`%F74)`~Ny1Pu2o{kg8};M&CXa#n^icNOZ5KgZ>h?a?Jiwfcty&O1I+1kVEca
zI-f+`UKxzM33VlS(I;(R+kP???E7b!w^~)TPkg&Pd`e-{N$ApO$cbHU(>E@8ptm1d
zzV}b})Y7?5k*~;VBnxI>%JhEyw3X`5`Zv4t|GHf#Gj}seG5G8S+`Fg>7F~7rj~=~2
zWvi3%7Y&{Dul=E3XiHARrc|cTj2>=Axc{`d-e|w?iq5C7FyMIR*UCUpV#wv};*!f}
zg)^;IJ4aV|hXb&}XY2nEW6(F+BQ>d38(VC7=9(V8)TlEU16T56B{(wgA~Q_+c6-xt
zu1VnTQom+h8x6z?7Gf^xXUr;jW<r_RFm>I_0?ZkUq`vt36q_v&HGr<vkdR{0wEi4o
zWVC?^(v4-w$fA0au9^6m6L{-T2)~g8-%<F-ciEa0^o^{%Q)eHi^hMpH9o7e_@sd8}
zit0yZ=+LsOdDSzgA(?7IQE`Kjxv|bA`-qr&rl7Pqvtv1&-;Vtn#N-LdlTQt-)hAR@
z0X@y|a*W^Ie`#aM*y{cAZ=1uT*|r^oXh73_{O*=@3yZ#?Q&cJ3)h&BBdf#*^8*hqx
zdWr+4rg9d}5N?#@<ZF;?t(=9LG3s|FEZaE>F=<k`!YFn9+kD4K=BsOl9=N@A(ECTb
znePtYm!9CE;%CjenmL%GBdfHF6)DR2_NX8|tWJd(GR$GHUN^#K)t=#7>E4UNHpxFd
zj$B%ASGHkF^ln!-qk=Weyl~uzmoUZKU&Nl0^q>^FX?@lxg0p8@rUkm}<9>QM<5UVV
zG|5!aQ9kEl7X-O9M1sbQKIO+HD>|^g^&F!)Yk3`IcDD}@M8EyK7KzBwR_Z-F*SCKM
zGEAT@@ycCtCZ;%3ub#<*ZH0tjAeYycPG;t6?ZOI40hVt=u<l*yZm)vfn?x%T+m93t
zI7j2BcI-Ar{lz9V1(H*L0(sOKs|x~wR=17Qt3SkM-s{<S$D8J(BX4WpO|%?Z;Gsx&
zFh@9ta`J$A_(!+G6cWd3Z9N7-)HdzlhPcNoJR>onR1l(aJ~}sc7)AT$v7*%6&l8xH
zsS)GME-|!r>`7(@x}K6Mxro2(?fEWy^6o6(HveNWD3Kb|FQWauy%U2Bb+6NIN;_+7
z^{=lj=Ib0}S2O`s@F=`<IiY4<F?*>%OZmv59VzZ+?J#Nn6khSseU6o7kx@r?#bu_b
z0;7QvUX@YL2gwrT$aK+~R^3l@Qz1$#QyO2@?U!jo33?3thYmkbt@9`Rj&D#~noS<e
zzI!eK?MG;q?`uDh<d)sL2Hpfp+ujA0*LK6%p`oFY{+H&M+T~MQo14~lc4uxJ=TOYx
zn#V3umJ6q*nBu}E>52~vVO1%G$1lIexO~Cght!3|w!9T^$Vie7Fc#O#FwCLUdWNrH
zXJ>bSpp1RmT`tBfLj$!Zx1M8$o2I`+ha&<#d!}8iFAF_={G0J@qDQ-*mZ_B}GiS6@
zJ-<HX-Xgh`!T|gUh4n5>R?szfiW~{$Yh@0BH*loPSjb3MO!Iv0y$a$dIk~vHG!AFs
zxkV`G^_O=rv;&tu*cb$tS`hk3_)tCK70nt5A&QP_WHyMAb`@tqL-d34`1d^Ytpb0<
zm?{qdx@aZ?QD%l)2(mw7uk6*@Ob9{5`8ie$RuU7*>pW5bfJt_E!RYMtL}fz;iVC9m
zhWwPtg^<9&z;M6<0HTOo>gKA)lQueIbZ}Xpp<`3%v5H;i{BQn4kf8W)K6!+8RL}$6
zs2aTl0N|DRM>hCBdMr!gu-K$p`>|xy;7H>iu>h{h{oVcx?4?gZM!=9N0l<pzi15M>
zO2bL9romT5olPEg#>LmxW@v&Dl%9Q(9wLJMX2M(}Yc+UkM?=q71qS9WKP!Op2I`_&
z_~38(b%?pqT*&GOl@dDb0C=v3-Y~g<S+{BFzFEk*+PXnBdhEA8n$%8hEC71NaAXtT
z5sfAoe91%LK??{8P2j%@L1(wx<GNZ;96<AphK1VhpSD=<Ob?j@aoDSYN4+bBeBq3S
z@zcY7xvSspX7UIfW1Bpd_X4tF0ubJC6TP<5f`Y|X(&NPT;$}Y$srJZ)BRbHcn?l)%
z)WC+D#8nS)kaJeU-1d=-`G4pJDW}z1vu8wAdlT^PFC{@cNUB;dIDP)C6~62cPk)lD
zDqIL-yH<<18f5S^v@vOO@SWSL)T<gitx}gbe8WSJ90z}w#V2UVBo1*_Zgn(fHc*IW
zf`}Wy0{pw5Lv!HV9{cMM+K2P<4v{7o&gfJZ$#y}h?pc#0AUd2{PGQLyhb99&+2B9d
zpB{0O)CC#;^q5o5jE7tZDYPlAB2Ra(k=}V^GjclrB{9@n$iZ&^ACSNP!5Y-`sW$bL
zBeB;C?)j{JsR2n&cumGRMu9V=4tT8iA4)RN*fQ%9-xHJSh<`)G1g_@B0hY_~dg?Wm
zw?D4^Tz*A#;aHO&fhMg?>`j^R`q!<c)KHQCt|t{4^A#s1$F7F8@W6gcostP@j`6WA
zsz?mel%{P6*fcz=GRpX|{uMCZ=)S<|E#(H}d9c|f^k$H7l}&I<Nln!w_9`|P+Msc#
z136ax`g8LRVnU7iSE_8^geD?)W^W$HjxXC7O$Jz6z=?mw$d%~577&l%4U(kUqerVk
zO-xPPu}6iUmxhc@S9N<iW?%GOJ^r;$t)=d|U_xly1z&I3mp(b#rt&gF=_1Vj00-1X
zv_Zcq{r8+oq`63!sZsY8(U%mg1jV3Yt=y}D%8&IQ+#O-b#9jTiU0f^S#&S1dQ0k-H
zg*ll`#_yj}`0|DzRK!7SzldVNODiS+Qo&g;(DaiP_l7k297goF1G~~1@+zbX4+v44
zn<X;w&fOar7*9~rzn+f#>uk3EeJM&A;LrtL=hSimt&eNa<_5xtcXtjuMCMR>Q0Ioh
z%rC^g<qc@qVy!DtPk=a50{3pX0!SSP>#L{3rH>KqhQmQ-YsJP<)fQ;z9u;+%Iwf~Z
zU5W$%o)BOCO2hJHJ4;I~Fqbm|`<2b12I*}cN1RS8#W|M7mm9&ngKi#Mp(+Y8Zxs#3
zKJ$uq-D2hT>#1P3KCjX^ZNX$w;&Av3r*MvffT7(r=Qkn*jL^;i8))3fiov@^IK?&<
z9n7-Cz9;&vE7ulC`IxUClw2xSv8<a-JDfi9@xG!yd*hQ*er?$DVDGLm)1}6y<XI!A
ziVO|krx6Azwj(eBuO+S}dxgj6|5RHq?|Ir(RVl1Ay!xYd_@*}G@SJ+D^2%qfFs1?f
z%ZN^wcaYw1lkgUyKVEFxXH#lr!0O4-i)c=k4!hu>ybo3Oat_=<nL-ibmTUSDA}nWx
z$EG+yuc~p-@3*~>Hi!AfYv*&FY^UDmrLTHBrU4s<=<A{=kTQz>_|G_Q&S$?WMVNzd
z4T9UWV5eZBd?=U)?MHq2NH+HIKU0gL5^N!gUI9o@4i@|e-Un0ue;cjvq{wyq6|Aqs
zM9|4Z;($+dgF_R3Vx*KyZ$*#zy4#nAaY;8U846<R!vS=~0`|$3unnfx$SY+_%k=p0
za0EX@wF&;*Z(B0DE|*rY(f-8SZF2irFdbmN&EZ!;(9rtRZ?jgbGfnwQ_JYMw{`F|b
zLyhToMnKQ&BNfD7c1MNl%O->LwPJ~0Abk^u+-K71DJf&@)MydybVYq?7atT@95}Z%
z-UBVCa9L~|5cq-PXdq^H?!OSi5JGpeO6$&Wf4i@=T`E-NLx)@zU6WW$h5CKM2uU~{
z?*V@(;lFL5xTh%cE~YK`q0{DX#I~Y$7>OUUr7eH_$fqI&NUD-e0swrb=6@AukPwsj
zAsdZP;n5A1`Ap3FJ<Jciu<v<2vtwWrK~=`09sNttZJ;s57zwL{?5tKV=LAMUid?VD
zXuMQJL8wz#;qzuW&gC}$cXYVKj`OF&eu&pn<|t$d(Y|NSm`JAZ@_l(n!*%EBCA8dG
z!9~n{0>Ysh87WM}LrE&p9Km~|ZTNDfsUm6R`z85^80FP=8hmB5HLbN*78Qv7sWPSA
z&-dC@7EQZ2nyOp6xP7PXDiNj|ZWh@{YPqXDqbjs`0l%5D4SXv=18(VgmHWzZN10wl
zCgs~0+F~ftnkEXl5#ST&n7fP(>kUV&Zb|r!p83pJRPa}E;LZ9DL>KoKY#cmq0Iw~{
zGtBSQC+LjsP-u76SB+1@58SufzXu#9M0oLT9>@ECL#~(h;9&&wMV8BX{*d<UD;3SL
za9Y=nl*ceznV#ChE!9GX*-pl9(nLm2CSu7O(A4lVZzD<?KyT4ID@^osH!v?BblR>-
zpqnMki-z;xcFyOCEvfA|!}`Q@6OCylQ(TM2xI4nV1q2(X`LB$p0uL*gQBAMPPK^h~
zteyv1+Q8q<P}u&HT*r%Su`YkTqw7%46fj|_+nsXV-~-Ls{r8FlW=~cgZ8S;T*5lI2
za?Ib&?6s4;{jx{fuO1qo(K}ufy13tw?|K%K$T|Kn<u2ZN?Ju_oTvKCq)`N2{h@>}Y
zmn{3RcUeM>OML<q3eiFVk?6Ivmmk+0$fBmE{?dM1>&3$WFp<f|Cv<A-nXOwCbmL8X
z?l6dG8=D%gRt}-w3Vbe@_XS#oX{Dwj6N3s~LXMVoiMTA@*704nrR%rA6z1QJNNW3(
zi~#4%dvHw$`u6htsp9TVl#V>Gj|}T4Bw2CYIsM$_hZVb|0a=nMd@>%f&nb%Heb54^
z2f0^{dF$PQLuI|~!nF({M`TfrO_X(j|4wCoLjD91i0gYV2T9n7)Bmfm8TDH)VqZv?
z-!NFCTPj_^+McQ1ap<b@XOa{`>rqvHvwP~+?rtR6i+M0WH?`JG`N*P6r;*GFk9Qik
z>)&fK$d?VMGLi8ja2)-ml4Qn&!vVC(`>tWJ4?4eCh71`=USI)&8%dzAI1`m+%K!87
l!m*~`q4^~LYd3HG0fSI@T}4uUYU|%>6$MTCDp~W;{{eO%IiUam

literal 0
HcmV?d00001

diff --git a/samples/web-app-managed-identity/dotnet/scripts/00-variables.sh b/samples/web-app-managed-identity/dotnet/scripts/00-variables.sh
new file mode 100755
index 0000000..64e3499
--- /dev/null
+++ b/samples/web-app-managed-identity/dotnet/scripts/00-variables.sh
@@ -0,0 +1,41 @@
+# Variables
+
+# Azure Resources
+PREFIX='local'
+SUFFIX='test'
+LOCATION='italynorth'
+RESOURCE_GROUP_NAME="${PREFIX}-rg"
+AKS_CLUSTER_NAME="${PREFIX}-aks-${SUFFIX}"
+ACR_NAME="${PREFIX,,}acr${SUFFIX,,}"
+ACR_SKU='Standard'
+MANAGED_IDENTITY_NAME="${PREFIX}-app-identity-${SUFFIX}"
+FEDERATED_IDENTITY_NAME="${PREFIX}-federated-identity-${SUFFIX}"
+SUBSCRIPTION_NAME=$(az account show --query name --output tsv)
+SUBSCRIPTION_ID=$(az account show --query id --output tsv)
+TENANT_ID=$(az account show --query tenantId --output tsv)
+CURRENT_DIR="$(cd "$(dirname "$0")" && pwd)"
+
+# DNS
+DNS_ZONE_RESOURCE_GROUP_NAME="dns-rg"
+DNS_ZONE_NAME="babosbird.com"
+SUBDOMAIN="planner.local"
+
+# Storage Account
+STORAGE_ACCOUNT_NAME="${PREFIX}storage${SUFFIX}"
+CONTAINER_NAME='activities'
+
+# Docker Image
+IMAGE_NAME="vacation-planner-blob-dotnet"
+IMAGE_PULL_POLICY="Always"
+IMAGE_TAG="v1"
+PORT="8080"
+
+# Kubernetes
+NAME="vacation-planner-blob"
+NAMESPACE="vacation-planner-blob"
+DEPLOYMENT_NAME="vacation-planner-blob"
+SERVICE_NAME="vacation-planner-blob"
+CONFIGMAP_NAME="vacation-planner-blob-config"
+SECRET_NAME="vacation-planner-blob-secrets"
+SERVICE_ACCOUNT_NAME="vacation-planner-blob-sa"
+DEPLOY_GATEWAY="false"
diff --git a/samples/web-app-managed-identity/dotnet/scripts/01-deploy-resources.sh b/samples/web-app-managed-identity/dotnet/scripts/01-deploy-resources.sh
new file mode 100755
index 0000000..f954dfc
--- /dev/null
+++ b/samples/web-app-managed-identity/dotnet/scripts/01-deploy-resources.sh
@@ -0,0 +1,242 @@
+#!/bin/bash
+
+# Variables
+source ./00-variables.sh
+
+# Change the current directory to the script's directory
+cd "$CURRENT_DIR" || exit
+
+# Create a resource group
+echo "Checking if resource group [$RESOURCE_GROUP_NAME] exists in the subscription [$SUBSCRIPTION_NAME]..."
+az group show --name $RESOURCE_GROUP_NAME &>/dev/null
+
+if [[ $? != 0 ]]; then
+	echo "No resource group [$RESOURCE_GROUP_NAME] exists in the subscription [$SUBSCRIPTION_NAME]"
+	echo "Creating resource group [$RESOURCE_GROUP_NAME] in the subscription [$SUBSCRIPTION_NAME]..."
+
+	az group create \
+		--name $RESOURCE_GROUP_NAME \
+		--location "$LOCATION" \
+		--only-show-errors 1>/dev/null
+
+	if [[ $? == 0 ]]; then
+		echo "Resource group [$RESOURCE_GROUP_NAME] successfully created in the subscription [$SUBSCRIPTION_NAME]"
+	else
+		echo "Failed to create resource group [$RESOURCE_GROUP_NAME] in the subscription [$SUBSCRIPTION_NAME]"
+		exit 1
+	fi
+else
+	echo "Resource group [$RESOURCE_GROUP_NAME] already exists in the subscription [$SUBSCRIPTION_NAME]"
+fi
+
+# Create the Azure Container Registry
+echo "Checking if [$ACR_NAME] Azure Container Registry already exists in the [$RESOURCE_GROUP_NAME] resource group..."
+az acr show \
+	--name "$ACR_NAME" \
+	--resource-group "$RESOURCE_GROUP_NAME" \
+	--only-show-errors &>/dev/null
+
+if [[ $? != 0 ]]; then
+	echo "No [$ACR_NAME] Azure Container Registry exists in the [$RESOURCE_GROUP_NAME] resource group"
+	echo "Creating Azure Container Registry [$ACR_NAME]..."
+	az acr create \
+		--name "$ACR_NAME" \
+		--resource-group "$RESOURCE_GROUP_NAME" \
+		--location "$LOCATION" \
+		--sku "$ACR_SKU" \
+		--admin-enabled "true" \
+		--only-show-errors 1>/dev/null
+
+	if [ $? -eq 0 ]; then
+		echo "Azure Container Registry [$ACR_NAME] created successfully."
+	else
+		echo "Failed to create Azure Container Registry [$ACR_NAME]."
+		exit 1
+	fi
+else
+	echo "[$ACR_NAME] Azure Container Registry already exists in the [$RESOURCE_GROUP_NAME] resource group"
+fi
+
+# Create the Storage Account
+echo "Checking if storage account [$STORAGE_ACCOUNT_NAME] exists in the resource group [$RESOURCE_GROUP_NAME]..."
+az storage account show \
+	--name $STORAGE_ACCOUNT_NAME \
+	--resource-group $RESOURCE_GROUP_NAME &>/dev/null
+
+if [[ $? != 0 ]]; then
+	echo "Creating storage account [$STORAGE_ACCOUNT_NAME]..."
+	az storage account create \
+		--name $STORAGE_ACCOUNT_NAME \
+		--location "$LOCATION" \
+		--resource-group $RESOURCE_GROUP_NAME \
+		--sku Standard_LRS \
+		--allow-blob-public-access true \
+		--only-show-errors 1>/dev/null
+
+	if [ $? -eq 0 ]; then
+		echo "Storage account [$STORAGE_ACCOUNT_NAME] created successfully."
+	else
+		echo "Failed to create storage account [$STORAGE_ACCOUNT_NAME]."
+		exit 1
+	fi
+else
+	echo "Storage account [$STORAGE_ACCOUNT_NAME] already exists in the [$RESOURCE_GROUP_NAME] resource group"
+fi
+
+# Get the storage account key
+STORAGE_ACCOUNT_KEY=$(az storage account keys list \
+	--account-name $STORAGE_ACCOUNT_NAME \
+	--resource-group $RESOURCE_GROUP_NAME \
+	--query "[0].value" \
+	--output tsv)
+
+if [ -z "$STORAGE_ACCOUNT_KEY" ]; then
+	echo "Failed to retrieve storage account key."
+	exit 1
+fi
+
+# Get the storage account resource ID
+STORAGE_ACCOUNT_RESOURCE_ID=$(az storage account show \
+	--name $STORAGE_ACCOUNT_NAME \
+	--resource-group $RESOURCE_GROUP_NAME \
+	--query "id" \
+	--output tsv \
+	--only-show-errors)
+
+if [ -n "$STORAGE_ACCOUNT_RESOURCE_ID" ]; then
+	echo "Storage account resource ID retrieved successfully: $STORAGE_ACCOUNT_RESOURCE_ID"
+else
+	echo "Failed to retrieve storage account resource ID."
+	exit 1
+fi
+
+# Create the blob container
+echo "Checking if blob container [$CONTAINER_NAME] exists in storage account [$STORAGE_ACCOUNT_NAME]..."
+EXISTS=$(az storage container exists \
+	--account-name $STORAGE_ACCOUNT_NAME \
+	--account-key $STORAGE_ACCOUNT_KEY \
+	--name $CONTAINER_NAME \
+	--query exists \
+	--output tsv 2>/dev/null)
+
+if [[ "$EXISTS" != "true" ]]; then
+	echo "Creating blob container [$CONTAINER_NAME]..."
+	az storage container create \
+		--account-name $STORAGE_ACCOUNT_NAME \
+		--account-key $STORAGE_ACCOUNT_KEY \
+		--name $CONTAINER_NAME \
+		--only-show-errors 1>/dev/null
+
+	if [ $? -eq 0 ]; then
+		echo "Blob container [$CONTAINER_NAME] created successfully."
+	else
+		echo "Failed to create blob container [$CONTAINER_NAME]."
+		exit 1
+	fi
+else
+	echo "Blob container [$CONTAINER_NAME] already exists."
+fi
+
+# Check if the user-assigned managed identity already exists
+echo "Checking if [$MANAGED_IDENTITY_NAME] user-assigned managed identity actually exists in the [$RESOURCE_GROUP_NAME] resource group..."
+
+az identity show \
+  --name $MANAGED_IDENTITY_NAME \
+  --resource-group $RESOURCE_GROUP_NAME &>/dev/null
+
+if [[ $? != 0 ]]; then
+  echo "No [$MANAGED_IDENTITY_NAME] user-assigned managed identity actually exists in the [$RESOURCE_GROUP_NAME] resource group"
+  echo "Creating [$MANAGED_IDENTITY_NAME] user-assigned managed identity in the [$RESOURCE_GROUP_NAME] resource group..."
+
+  # Create the user-assigned managed identity
+  az identity create \
+    --name $MANAGED_IDENTITY_NAME \
+    --resource-group $RESOURCE_GROUP_NAME \
+    --location $LOCATION \
+    --subscription $SUBSCRIPTION_ID 1>/dev/null
+
+  if [[ $? == 0 ]]; then
+    echo "[$MANAGED_IDENTITY_NAME] user-assigned managed identity successfully created in the [$RESOURCE_GROUP_NAME] resource group"
+  else
+    echo "Failed to create [$MANAGED_IDENTITY_NAME] user-assigned managed identity in the [$RESOURCE_GROUP_NAME] resource group"
+    exit
+  fi
+else
+  echo "[$MANAGED_IDENTITY_NAME] user-assigned managed identity already exists in the [$RESOURCE_GROUP_NAME] resource group"
+fi
+
+# Retrieve the clientId of the user-assigned managed identity
+echo "Retrieving clientId for [$MANAGED_IDENTITY_NAME] managed identity..."
+CLIENT_ID=$(az identity show \
+  --name $MANAGED_IDENTITY_NAME \
+  --resource-group $RESOURCE_GROUP_NAME \
+  --query clientId \
+  --output tsv)
+
+if [[ -n $CLIENT_ID ]]; then
+  echo "[$CLIENT_ID] clientId  for the [$MANAGED_IDENTITY_NAME] managed identity successfully retrieved"
+else
+  echo "Failed to retrieve clientId for the [$MANAGED_IDENTITY_NAME] managed identity"
+  exit
+fi
+
+# Retrieve the principalId of the user-assigned managed identity
+echo "Retrieving principalId for [$MANAGED_IDENTITY_NAME] managed identity..."
+PRINCIPAL_ID=$(az identity show \
+  --name $MANAGED_IDENTITY_NAME \
+  --resource-group $RESOURCE_GROUP_NAME \
+  --query principalId \
+  --output tsv)
+
+if [[ -n $PRINCIPAL_ID ]]; then
+  echo "[$PRINCIPAL_ID] principalId  for the [$MANAGED_IDENTITY_NAME] managed identity successfully retrieved"
+else
+  echo "Failed to retrieve principalId for the [$MANAGED_IDENTITY_NAME] managed identity"
+  exit
+fi
+
+# Assign the Storage Blob Data Contributor role to the managed identity with the storage account as scope
+ROLE="Storage Blob Data Contributor"
+SCOPE_ID="$STORAGE_ACCOUNT_RESOURCE_ID"
+SCOPE_NAME="$STORAGE_ACCOUNT_NAME"
+SCOPE_TYPE="storage account"
+echo "Checking if the [$MANAGED_IDENTITY_NAME] managed identity has the [$ROLE] role assignment on the [$SCOPE_NAME] $SCOPE_TYPE..."
+current=$(az role assignment list \
+  --assignee "$PRINCIPAL_ID" \
+  --scope "$SCOPE_ID" \
+  --query "[?roleDefinitionName=='$ROLE'].roleDefinitionName" \
+  --output tsv 2>/dev/null)
+
+if [[ $current == "$ROLE" ]]; then
+  echo "Managed identity [$MANAGED_IDENTITY_NAME] already has the [$ROLE] role assignment on the [$SCOPE_NAME] $SCOPE_TYPE"
+else
+  echo "Managed identity [$MANAGED_IDENTITY_NAME] does not have the [$ROLE] role assignment on the [$SCOPE_NAME] $SCOPE_TYPE"
+  echo "Creating role assignment: assigning [$ROLE] role to managed identity [$MANAGED_IDENTITY_NAME] on the [$SCOPE_NAME] $SCOPE_TYPE..."
+  ATTEMPT=1
+	RETRY_COUNT=5
+	SLEEP=3
+  while [ $ATTEMPT -le $RETRY_COUNT ]; do
+    echo "Attempt $ATTEMPT of $RETRY_COUNT to assign role..."
+    az role assignment create \
+      --assignee "$PRINCIPAL_ID" \
+      --role "$ROLE" \
+      --scope "$SCOPE_ID" 1>/dev/null
+
+    if [[ $? == 0 ]]; then
+      break
+    else
+      if [ $ATTEMPT -lt $RETRY_COUNT ]; then
+        echo "Role assignment failed. Waiting [$SLEEP] seconds before retry..."
+        sleep $SLEEP
+      fi
+      ATTEMPT=$((ATTEMPT + 1))
+    fi
+  done
+
+  if [[ $? == 0 ]]; then
+    echo "Successfully assigned [$ROLE] role to managed identity [$MANAGED_IDENTITY_NAME] on the [$SCOPE_NAME] $SCOPE_TYPE"
+  else
+    echo "Failed to assign [$ROLE] role to managed identity [$MANAGED_IDENTITY_NAME] on the [$SCOPE_NAME] $SCOPE_TYPE"
+    exit 1
+  fi
+fi
\ No newline at end of file
diff --git a/samples/web-app-managed-identity/dotnet/scripts/02-build-docker-image.sh b/samples/web-app-managed-identity/dotnet/scripts/02-build-docker-image.sh
new file mode 100755
index 0000000..4b497d8
--- /dev/null
+++ b/samples/web-app-managed-identity/dotnet/scripts/02-build-docker-image.sh
@@ -0,0 +1,18 @@
+#!/bin/bash
+
+# Variables
+source ./00-variables.sh
+
+# Change the current directory to the script's directory
+cd "$CURRENT_DIR" || exit
+
+# Build context: the src/ folder (contains VacationPlanner.csproj, Program.cs, Pages/, Services/, wwwroot/).
+# The Dockerfile lives alongside this script, so we point -f at it explicitly.
+BUILD_CONTEXT="../src"
+
+# Build the docker image
+docker build \
+	-t $IMAGE_NAME:$IMAGE_TAG \
+	-f Dockerfile \
+	--build-arg PORT=$PORT \
+	$BUILD_CONTEXT
diff --git a/samples/web-app-managed-identity/dotnet/scripts/03-run-docker-container.sh b/samples/web-app-managed-identity/dotnet/scripts/03-run-docker-container.sh
new file mode 100755
index 0000000..36aae71
--- /dev/null
+++ b/samples/web-app-managed-identity/dotnet/scripts/03-run-docker-container.sh
@@ -0,0 +1,31 @@
+#!/bin/bash
+
+# Variables
+source ./00-variables.sh
+
+# Retrieve the storage account connection string
+echo "Retrieving storage account connection string for [$STORAGE_ACCOUNT_NAME]..."
+AZURE_STORAGE_ACCOUNT_CONNECTION_STRING=$(az storage account show-connection-string \
+	--name $STORAGE_ACCOUNT_NAME \
+	--resource-group $RESOURCE_GROUP_NAME \
+	--query "connectionString" \
+	--output tsv \
+	--only-show-errors)
+
+if [ -n "$AZURE_STORAGE_ACCOUNT_CONNECTION_STRING" ]; then
+	echo "Storage account connection string retrieved successfully."
+else
+	echo "Failed to retrieve storage account connection string."
+	exit 1
+fi
+
+# --network=host so endpoints like *.localhost.localstack.cloud resolve to the
+# host's loopback (where LocalStack is listening), not the container's.
+docker run -it \
+	--rm \
+	--network=host \
+	-e PORT=$PORT \
+	-e AZURE_STORAGE_ACCOUNT_CONNECTION_STRING="$AZURE_STORAGE_ACCOUNT_CONNECTION_STRING" \
+	-e CONTAINER_NAME="$CONTAINER_NAME" \
+	--name "$IMAGE_NAME" \
+	"$IMAGE_NAME:$IMAGE_TAG"
diff --git a/samples/web-app-managed-identity/dotnet/scripts/04-push-docker-image.sh b/samples/web-app-managed-identity/dotnet/scripts/04-push-docker-image.sh
new file mode 100755
index 0000000..a1b7518
--- /dev/null
+++ b/samples/web-app-managed-identity/dotnet/scripts/04-push-docker-image.sh
@@ -0,0 +1,40 @@
+#!/bin/bash
+
+# Variables
+source ./00-variables.sh
+
+# Login to ACR
+echo "Logging into Azure Container Registry [$ACR_NAME]..."
+az acr login --name $ACR_NAME
+
+# Retrieve ACR login server. Each container image needs to be tagged with the loginServer name of the registry.
+ACR_LOGIN_SERVER=$(az acr show --name $ACR_NAME --query loginServer --output tsv)
+
+if [ $? -eq 0 ]; then
+	echo "Logged into Azure Container Registry [$ACR_NAME] successfully."
+else
+	echo "Failed to log into Azure Container Registry [$ACR_NAME]."
+	exit 1
+fi
+
+FULL_IMAGE="${ACR_LOGIN_SERVER}/${IMAGE_NAME}:${IMAGE_TAG}"
+
+# Tag the local image with the loginServer of ACR
+docker tag ${IMAGE_NAME,,}:$IMAGE_TAG $ACR_LOGIN_SERVER/${IMAGE_NAME,,}:$IMAGE_TAG
+
+if [ $? -eq 0 ]; then
+	echo "Docker image [$IMAGE_NAME] tagged as [$FULL_IMAGE] successfully."
+else
+	echo "Failed to tag Docker image [$IMAGE_NAME] as [$FULL_IMAGE]."
+	exit 1
+fi
+
+# Push the container image to ACR
+docker push $ACR_LOGIN_SERVER/${IMAGE_NAME,,}:$IMAGE_TAG
+
+if [ $? -eq 0 ]; then
+	echo "Docker image [$FULL_IMAGE] pushed to ACR successfully."
+else
+	echo "Failed to push Docker image [$FULL_IMAGE] to ACR."
+	exit 1
+fi
diff --git a/samples/web-app-managed-identity/dotnet/scripts/05-deploy-app.sh b/samples/web-app-managed-identity/dotnet/scripts/05-deploy-app.sh
new file mode 100755
index 0000000..24633fd
--- /dev/null
+++ b/samples/web-app-managed-identity/dotnet/scripts/05-deploy-app.sh
@@ -0,0 +1,307 @@
+#!/bin/bash
+
+# Variables
+source ./00-variables.sh
+
+# Generate a stable SECRET_KEY shared by all replicas: the app derives its Data Protection key ring from it,
+# so antiforgery tokens and flash messages are valid on every replica and survive pod restarts
+SECRET_KEY=$(openssl rand -hex 32)
+
+# Optional client secret for the ClientSecretCredential auth path.
+# Leave empty when using Microsoft Entra Workload ID (the recommended option).
+AZURE_CLIENT_SECRET="${AZURE_CLIENT_SECRET:-}"
+
+# Get the storage account blob primary endpoint
+AZURE_STORAGE_ACCOUNT_URL=$(az storage account show \
+	--name $STORAGE_ACCOUNT_NAME \
+	--resource-group $RESOURCE_GROUP_NAME \
+	--query "primaryEndpoints.blob" \
+	--output tsv \
+	--only-show-errors)
+
+if [ -n "$AZURE_STORAGE_ACCOUNT_URL" ]; then
+	echo "Storage account blob primary endpoint retrieved successfully: $AZURE_STORAGE_ACCOUNT_URL"
+else
+	echo "Failed to retrieve storage account blob primary endpoint."
+	exit 1
+fi
+
+# Get the login server for the Azure Container Registry
+echo "Getting login server for Azure Container Registry [$ACR_NAME]..."
+ACR_LOGIN_SERVER=$(az acr show \
+	--name "$ACR_NAME" \
+	--resource-group "$RESOURCE_GROUP_NAME" \
+	--query "loginServer" \
+	--output tsv \
+	--only-show-errors)
+
+if [ -n "$ACR_LOGIN_SERVER" ]; then
+	echo "Login server retrieved successfully: $ACR_LOGIN_SERVER"
+else
+	echo "Failed to retrieve login server for Azure Container Registry [$ACR_NAME]."
+	exit 1
+fi
+
+FULL_IMAGE="${ACR_LOGIN_SERVER}/${IMAGE_NAME}:${IMAGE_TAG}"
+
+# Create namespace
+cat namespace.yml |
+yq "(.metadata.name)|="\""$NAMESPACE"\" |
+kubectl apply -f -
+
+# Check if the service account already exists
+RESULT=$(kubectl get sa -n $NAMESPACE -o 'jsonpath={.items[?(@.metadata.name=="'$SERVICE_ACCOUNT_NAME'")].metadata.name}')
+
+if [[ -n $RESULT ]]; then
+  echo "[$SERVICE_ACCOUNT_NAME] service account already exists"
+else
+  # Retrieve the resource id of the user-assigned managed identity
+  echo "Retrieving clientId for [$MANAGED_IDENTITY_NAME] managed identity..."
+  CLIENT_ID=$(az identity show \
+    --name $MANAGED_IDENTITY_NAME \
+    --resource-group $RESOURCE_GROUP_NAME \
+    --query clientId \
+    --output tsv)
+
+  if [[ -n $CLIENT_ID ]]; then
+    echo "[$CLIENT_ID] clientId  for the [$MANAGED_IDENTITY_NAME] managed identity successfully retrieved"
+  else
+    echo "Failed to retrieve clientId for the [$MANAGED_IDENTITY_NAME] managed identity"
+    exit
+  fi
+
+  # Create the service account
+  echo "[$SERVICE_ACCOUNT_NAME] service account does not exist"
+  echo "Creating [$SERVICE_ACCOUNT_NAME] service account..."
+  cat <<EOF | kubectl apply -f -
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  annotations:
+    azure.workload.identity/client-id: $CLIENT_ID
+    azure.workload.identity/tenant-id: $TENANT_ID
+  labels:
+    azure.workload.identity/use: "true"
+  name: $SERVICE_ACCOUNT_NAME
+  namespace: $NAMESPACE
+EOF
+fi
+
+# Show service account YAML manifest
+echo "Service Account YAML manifest"
+echo "-----------------------------"
+kubectl get sa $SERVICE_ACCOUNT_NAME -n $NAMESPACE -o yaml
+
+# Check if the federated identity credential already exists
+echo "Checking if [$FEDERATED_IDENTITY_NAME] federated identity credential actually exists in the [$RESOURCE_GROUP_NAME] resource group..."
+
+az identity federated-credential show \
+  --name $FEDERATED_IDENTITY_NAME \
+  --resource-group $RESOURCE_GROUP_NAME \
+  --identity-name $MANAGED_IDENTITY_NAME &>/dev/null
+
+if [[ $? != 0 ]]; then
+  echo "No [$FEDERATED_IDENTITY_NAME] federated identity credential actually exists in the [$RESOURCE_GROUP_NAME] resource group"
+
+  # Get the OIDC Issuer URL
+  OIDC_ISSUER_URL="$(az aks show \
+    --only-show-errors \
+    --name $AKS_CLUSTER_NAME \
+    --resource-group $RESOURCE_GROUP_NAME \
+    --query oidcIssuerProfile.issuerUrl \
+    --output tsv)"
+
+  # Show OIDC Issuer URL
+  if [[ -n $OIDC_ISSUER_URL ]]; then
+    echo "The OIDC Issuer URL of the $AKS_CLUSTER_NAME cluster is $OIDC_ISSUER_URL"
+  fi
+
+  echo "Creating [$FEDERATED_IDENTITY_NAME] federated identity credential in the [$RESOURCE_GROUP_NAME] resource group..."
+
+  # Establish the federated identity credential between the managed identity, the service account issuer, and the subject.
+  az identity federated-credential create \
+    --name $FEDERATED_IDENTITY_NAME \
+    --identity-name $MANAGED_IDENTITY_NAME \
+    --resource-group $RESOURCE_GROUP_NAME \
+    --issuer $OIDC_ISSUER_URL \
+    --subject system:serviceaccount:$NAMESPACE:$SERVICE_ACCOUNT_NAME 1>/dev/null
+
+  if [[ $? == 0 ]]; then
+    echo "[$FEDERATED_IDENTITY_NAME] federated identity credential successfully created in the [$RESOURCE_GROUP_NAME] resource group"
+  else
+    echo "Failed to create [$FEDERATED_IDENTITY_NAME] federated identity credential in the [$RESOURCE_GROUP_NAME] resource group"
+    exit
+  fi
+else
+  echo "[$FEDERATED_IDENTITY_NAME] federated identity credential already exists in the [$RESOURCE_GROUP_NAME] resource group"
+fi
+
+# Create secret with the storage connection string, client secret and SECRET_KEY
+cat secret.yml |
+yq "(.metadata.namespace)|="\""$NAMESPACE"\" |
+yq "(.data.AZURE_STORAGE_ACCOUNT_CONNECTION_STRING)|="\""$(echo -n $AZURE_STORAGE_ACCOUNT_CONNECTION_STRING | base64 -w0)"\" |
+yq "(.data.AZURE_CLIENT_SECRET)|="\""$(echo -n $AZURE_CLIENT_SECRET | base64 -w0)"\" |
+yq "(.data.SECRET_KEY)|="\""$(echo -n $SECRET_KEY | base64 -w0)"\" |
+kubectl apply -f -
+
+# Retrieve the clientId of the user-assigned managed identity for the configmap
+echo "Retrieving clientId for [$MANAGED_IDENTITY_NAME] managed identity..."
+CLIENT_ID=$(az identity show \
+  --name $MANAGED_IDENTITY_NAME \
+  --resource-group $RESOURCE_GROUP_NAME \
+  --query clientId \
+  --output tsv)
+
+if [[ -z $CLIENT_ID ]]; then
+  echo "Failed to retrieve clientId for the [$MANAGED_IDENTITY_NAME] managed identity"
+  exit 1
+fi
+
+# Create configmap with environment variables
+cat configmap.yml |
+yq "(.metadata.namespace)|="\""$NAMESPACE"\" |
+yq "(.data.CONTAINER_NAME)|="\""$CONTAINER_NAME"\" |
+yq "(.data.AZURE_CLIENT_ID)|="\""$CLIENT_ID"\" |
+yq "(.data.AZURE_TENANT_ID)|="\""$TENANT_ID"\" |
+yq "(.data.AZURE_STORAGE_ACCOUNT_URL)|="\""$AZURE_STORAGE_ACCOUNT_URL"\" |
+kubectl apply -f -
+
+if [[ $DEPLOY_GATEWAY == "true" ]]; then
+	# Create Issuer for Gateway API HTTP-01 solver (before gateway to avoid race condition)
+	cat issuer.yml |
+	yq "(.spec.acme.solvers[0].http01.gatewayHTTPRoute.parentRefs[0].name)|=\"$NAME\"" |
+	yq "(.spec.acme.solvers[0].http01.gatewayHTTPRoute.parentRefs[0].namespace)|=\"$NAMESPACE\"" |
+	kubectl apply -f -
+fi
+
+# Create deployment
+cat deployment.yml |
+yq "(.metadata.namespace)|="\""$NAMESPACE"\" |
+yq "(.spec.template.spec.containers[0].image)|="\""$FULL_IMAGE"\" |
+yq "(.spec.template.spec.containers[0].imagePullPolicy)|="\""$IMAGE_PULL_POLICY"\" |
+yq "(.spec.template.spec.serviceAccountName)|="\""$SERVICE_ACCOUNT_NAME"\" |
+yq "(.spec.template.spec.containers[0].ports[0].containerPort)|=$PORT" |
+kubectl apply -f -
+
+# Create service
+cat service.yml |
+yq "(.metadata.namespace)|="\""$NAMESPACE"\" |
+kubectl apply -f -
+
+if [[ $DEPLOY_GATEWAY == "true" ]]; then
+	# Create gateway
+	cat gateway.yml |
+	yq "(.metadata.namespace)|="\""$NAMESPACE"\" |
+	yq "(.spec.listeners[0].hostname)|="\""$SUBDOMAIN.$DNS_ZONE_NAME"\" |
+	yq "(.spec.listeners[1].hostname)|="\""$SUBDOMAIN.$DNS_ZONE_NAME"\" |
+	kubectl apply -f -
+
+	# Create httproute
+	cat httproute.yml |
+	yq "(.metadata.namespace)|="\""$NAMESPACE"\" |
+	yq "(.spec.hostnames[0])|="\""$SUBDOMAIN.$DNS_ZONE_NAME"\" |
+	kubectl apply -f -
+
+	# Retrieve the public IP address from the gateway
+	echo -n "Retrieving the external IP address from the [$NAME] gateway..."
+	while [[ -z $PUBLIC_IP_ADDRESS ]]; do
+		PUBLIC_IP_ADDRESS=$(kubectl get gateway $NAME -n $NAMESPACE -o jsonpath='{.status.addresses[0].value}')
+		if [[ -n $PUBLIC_IP_ADDRESS ]]; then
+			echo ''
+			break
+		else
+			echo -n "." # Progress indicator
+			sleep 1
+		fi
+	done
+
+	if [[ -n $PUBLIC_IP_ADDRESS ]]; then
+		echo "[$PUBLIC_IP_ADDRESS] external IP address successfully retrieved from the [$NAME] gateway"
+	else
+		echo "Failed to retrieve the external IP address from the [$NAME] gateway"
+		exit
+	fi
+
+	# Check if an A record for todolist subdomain exists in the DNS Zone
+	echo "Retrieving the A record for the [$SUBDOMAIN] subdomain from the [$DNS_ZONE_NAME] DNS zone..."
+	IPV4_ADDRESS=$(az network dns record-set a list \
+		--zone-name $DNS_ZONE_NAME \
+		--resource-group $DNS_ZONE_RESOURCE_GROUP_NAME \
+		--query "[?name=='$SUBDOMAIN'].ARecords[].ipv4Address" \
+		--output tsv \
+		--only-show-errors)
+
+	if [[ -n $IPV4_ADDRESS ]]; then
+		echo "An A record already exists in [$DNS_ZONE_NAME] DNS zone for the [$SUBDOMAIN] subdomain with [$IPV4_ADDRESS] IP address"
+
+		if [[ $IPV4_ADDRESS == "$PUBLIC_IP_ADDRESS" ]]; then
+			echo "The [$IPV4_ADDRESS] ip address of the existing A record is equal to the ip address of the [$NAME] gateway"
+			echo "No additional step is required"
+			exit
+		else
+			echo "The [$IPV4_ADDRESS] ip address of the existing A record is different than the ip address of the [$NAME] gateway"
+		fi
+
+		# Retrieving name of the record set relative to the zone
+		echo "Retrieving the name of the record set relative to the [$DNS_ZONE_NAME] zone..."
+
+		RECORD_SET_NAME=$(az network dns record-set a list \
+			--zone-name $DNS_ZONE_NAME \
+			--resource-group $DNS_ZONE_RESOURCE_GROUP_NAME \
+			--query "[?name=='$SUBDOMAIN'].name" \
+			--output tsv \
+			--only-show-errors 2>/dev/null)
+
+		if [[ -n $RECORD_SET_NAME ]]; then
+			echo "[$RECORD_SET_NAME] record set name successfully retrieved"
+		else
+			echo "Failed to retrieve the name of the record set relative to the [$DNS_ZONE_NAME] zone"
+			exit
+		fi
+
+		# Remove the a record
+		echo "Removing the A record from the record set relative to the [$DNS_ZONE_NAME] zone..."
+
+		az network dns record-set a remove-record \
+			--ipv4-address "$IPV4_ADDRESS" \
+			--record-set-name "$RECORD_SET_NAME" \
+			--zone-name "$DNS_ZONE_NAME" \
+			--resource-group "$DNS_ZONE_RESOURCE_GROUP_NAME" \
+			--only-show-errors 2>/dev/null
+
+		if [[ $? == 0 ]]; then
+			echo "[$IPV4_ADDRESS] ip address successfully removed from the [$RECORD_SET_NAME] record set"
+		else
+			echo "Failed to remove the [$IPV4_ADDRESS] ip address from the [$RECORD_SET_NAME] record set"
+			exit
+		fi
+	fi
+
+	# Create the a record
+	echo "Creating an A record in [$DNS_ZONE_NAME] DNS zone for the [$SUBDOMAIN] subdomain with [$PUBLIC_IP_ADDRESS] IP address..."
+	az network dns record-set a add-record \
+		--zone-name "$DNS_ZONE_NAME" \
+		--resource-group "$DNS_ZONE_RESOURCE_GROUP_NAME" \
+		--record-set-name "$SUBDOMAIN" \
+		--ipv4-address "$PUBLIC_IP_ADDRESS" \
+		--only-show-errors 1>/dev/null
+
+	if [[ $? == 0 ]]; then
+		echo "A record for the [$SUBDOMAIN] subdomain with [$PUBLIC_IP_ADDRESS] IP address successfully created in [$DNS_ZONE_NAME] DNS zone"
+	else
+		echo "Failed to create an A record for the [$SUBDOMAIN] subdomain with [$PUBLIC_IP_ADDRESS] IP address in [$DNS_ZONE_NAME] DNS zone"
+	fi
+fi
+
+# Wait for the rollout so a pod stuck in ImagePullBackOff or CrashLoopBackOff is reported here, not discovered later
+echo "Waiting for deployment [$DEPLOYMENT_NAME] to roll out..."
+if kubectl rollout status deployment/$DEPLOYMENT_NAME -n $NAMESPACE --timeout=600s; then
+	echo "Deployment [$DEPLOYMENT_NAME] is ready. To reach the web app, run:"
+	echo "  kubectl port-forward service/$SERVICE_NAME 8080:80 -n $NAMESPACE"
+	echo "and browse to http://localhost:8080 (health: http://localhost:8080/health)."
+else
+	echo "Deployment [$DEPLOYMENT_NAME] did not become ready. Inspect it with:"
+	echo "  kubectl get pods -n $NAMESPACE"
+	echo "  kubectl describe pod -n $NAMESPACE --selector app=$DEPLOYMENT_NAME"
+	exit 1
+fi
diff --git a/samples/web-app-managed-identity/dotnet/scripts/Dockerfile b/samples/web-app-managed-identity/dotnet/scripts/Dockerfile
new file mode 100644
index 0000000..d862da7
--- /dev/null
+++ b/samples/web-app-managed-identity/dotnet/scripts/Dockerfile
@@ -0,0 +1,28 @@
+# Build stage: restore and publish the ASP.NET Core app with the .NET SDK image.
+FROM mcr.microsoft.com/dotnet/sdk:10.0 AS build
+
+WORKDIR /src
+
+# Restore first so the package cache layer is reused when only sources change.
+COPY VacationPlanner.csproj ./
+RUN dotnet restore
+
+COPY . ./
+RUN dotnet publish -c Release -o /app/publish --no-restore
+
+# Runtime stage: the ASP.NET Core runtime image only, no SDK.
+FROM mcr.microsoft.com/dotnet/aspnet:10.0
+
+# Port Kestrel listens on; kept as a build argument (and a runtime variable) as in the Python image.
+ARG PORT=8080
+ENV PORT=${PORT}
+
+WORKDIR /app
+COPY --from=build /app/publish ./
+
+# Run as the runtime image's non-root `app` user, as the Python image runs as its own unprivileged `app` user.
+USER app
+
+EXPOSE ${PORT}
+
+ENTRYPOINT ["dotnet", "VacationPlanner.dll"]
diff --git a/samples/web-app-managed-identity/dotnet/scripts/configmap.yml b/samples/web-app-managed-identity/dotnet/scripts/configmap.yml
new file mode 100644
index 0000000..5f40ea9
--- /dev/null
+++ b/samples/web-app-managed-identity/dotnet/scripts/configmap.yml
@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: vacation-planner-blob-config
+  namespace: vacation-planner-blob
+  labels:
+    app: vacation-planner-blob
+data:
+  CONTAINER_NAME: "activities"
+  AZURE_CLIENT_ID: ""
+  AZURE_TENANT_ID: ""
+  AZURE_STORAGE_ACCOUNT_URL: ""
diff --git a/samples/web-app-managed-identity/dotnet/scripts/deployment.yml b/samples/web-app-managed-identity/dotnet/scripts/deployment.yml
new file mode 100644
index 0000000..aab24d0
--- /dev/null
+++ b/samples/web-app-managed-identity/dotnet/scripts/deployment.yml
@@ -0,0 +1,86 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: vacation-planner-blob
+  namespace: vacation-planner-blob
+  labels:
+    app: vacation-planner-blob
+spec:
+  replicas: 3
+  selector:
+    matchLabels:
+      app: vacation-planner-blob
+  strategy:
+    rollingUpdate:
+      maxSurge: 1
+      maxUnavailable: 0
+    type: RollingUpdate
+  minReadySeconds: 5
+  template:
+    metadata:
+      labels:
+        app: vacation-planner-blob
+        azure.workload.identity/use: "true"
+    spec:
+      serviceAccountName: vacation-planner-blob-sa
+      topologySpreadConstraints:
+      - maxSkew: 1
+        topologyKey: topology.kubernetes.io/zone
+        whenUnsatisfiable: ScheduleAnyway
+        labelSelector:
+          matchLabels:
+            app: vacation-planner-blob
+      - maxSkew: 1
+        topologyKey: kubernetes.io/hostname
+        whenUnsatisfiable: ScheduleAnyway
+        labelSelector:
+          matchLabels:
+            app: vacation-planner-blob
+      nodeSelector:
+        kubernetes.io/os: linux
+      containers:
+        - name: vacation-planner-blob
+          image: <your-registry>.azurecr.io/vacation-planner-blob-dotnet:v1
+          imagePullPolicy: Always
+          ports:
+            - name: http
+              containerPort: 8080
+          env:
+            - name: CONTAINER_NAME
+              valueFrom:
+                configMapKeyRef:
+                  name: vacation-planner-blob-config
+                  key: CONTAINER_NAME
+            - name: AZURE_STORAGE_ACCOUNT_URL
+              valueFrom:
+                configMapKeyRef:
+                  name: vacation-planner-blob-config
+                  key: AZURE_STORAGE_ACCOUNT_URL
+            - name: SECRET_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: vacation-planner-blob-secrets
+                  key: SECRET_KEY
+          resources:
+            requests:
+              cpu: "100m"
+              memory: "128Mi"
+            limits:
+              cpu: "500m"
+              memory: "256Mi"
+          livenessProbe:
+            httpGet:
+              path: /health
+              port: http
+            initialDelaySeconds: 15
+            periodSeconds: 30
+            timeoutSeconds: 5
+            failureThreshold: 3
+          readinessProbe:
+            httpGet:
+              path: /health
+              port: http
+            initialDelaySeconds: 5
+            periodSeconds: 10
+            timeoutSeconds: 3
+            failureThreshold: 3
diff --git a/samples/web-app-managed-identity/dotnet/scripts/gateway.yml b/samples/web-app-managed-identity/dotnet/scripts/gateway.yml
new file mode 100644
index 0000000..8cf9697
--- /dev/null
+++ b/samples/web-app-managed-identity/dotnet/scripts/gateway.yml
@@ -0,0 +1,30 @@
+apiVersion: gateway.networking.k8s.io/v1
+kind: Gateway
+metadata:
+  annotations:
+    gateway.networking.k8s.io/generator: ingress2gateway-1.1.0
+    cert-manager.io/issuer: vacation-planner-blob-issuer
+  name: vacation-planner-blob
+spec:
+  gatewayClassName: nginx
+  listeners:
+  - hostname: local.echo.babosbird.com
+    name: http
+    port: 80
+    protocol: HTTP
+    allowedRoutes:
+      namespaces:
+        from: All
+  - hostname: local.echo.babosbird.com
+    name: https
+    port: 443
+    protocol: HTTPS
+    allowedRoutes:
+      namespaces:
+        from: All
+    tls:
+      mode: Terminate
+      certificateRefs:
+      - group: ""
+        kind: Secret
+        name: vacation-planner-blob-tls-secret
\ No newline at end of file
diff --git a/samples/web-app-managed-identity/dotnet/scripts/httproute.yml b/samples/web-app-managed-identity/dotnet/scripts/httproute.yml
new file mode 100644
index 0000000..b2d7a36
--- /dev/null
+++ b/samples/web-app-managed-identity/dotnet/scripts/httproute.yml
@@ -0,0 +1,21 @@
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+  annotations:
+    gateway.networking.k8s.io/generator: ingress2gateway-1.1.0
+  name: vacation-planner-blob
+spec:
+  hostnames:
+  - planner.local.babosbird.com
+  parentRefs:
+  - name: vacation-planner-blob
+    port: 443
+    sectionName: https
+  rules:
+  - backendRefs:
+    - name: vacation-planner-blob
+      port: 80
+    matches:
+    - path:
+        type: PathPrefix
+        value: /
\ No newline at end of file
diff --git a/samples/web-app-managed-identity/dotnet/scripts/issuer.yml b/samples/web-app-managed-identity/dotnet/scripts/issuer.yml
new file mode 100644
index 0000000..2d200b1
--- /dev/null
+++ b/samples/web-app-managed-identity/dotnet/scripts/issuer.yml
@@ -0,0 +1,25 @@
+apiVersion: cert-manager.io/v1
+kind: Issuer
+metadata:
+  name: vacation-planner-blob-issuer
+  namespace: vacation-planner-blob
+spec:
+  acme:
+    # Registration address for the Let's Encrypt account: expiry notices go here
+    email: paolo.salvatori@localstack.cloud
+    privateKeySecretRef:
+      name: vacation-planner-blob-issuer
+    server: https://acme-v02.api.letsencrypt.org/directory
+    solvers:
+    - http01:
+        gatewayHTTPRoute:
+          parentRefs:
+          - name: vacation-planner-blob
+            namespace: vacation-planner-blob
+            kind: Gateway
+            group: gateway.networking.k8s.io
+            sectionName: vacation-planner-blob-http
+          podTemplate:
+            spec:
+              nodeSelector:
+                kubernetes.io/os: linux
diff --git a/samples/web-app-managed-identity/dotnet/scripts/namespace.yml b/samples/web-app-managed-identity/dotnet/scripts/namespace.yml
new file mode 100644
index 0000000..9e8b556
--- /dev/null
+++ b/samples/web-app-managed-identity/dotnet/scripts/namespace.yml
@@ -0,0 +1,4 @@
+kind: Namespace
+apiVersion: v1
+metadata:
+  name: vacation-planner-blob
diff --git a/samples/web-app-managed-identity/dotnet/scripts/secret.yml b/samples/web-app-managed-identity/dotnet/scripts/secret.yml
new file mode 100644
index 0000000..6e45b31
--- /dev/null
+++ b/samples/web-app-managed-identity/dotnet/scripts/secret.yml
@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: vacation-planner-blob-secrets
+  namespace: vacation-planner-blob
+  labels:
+    app: vacation-planner-blob
+type: Opaque
+data:
+  AZURE_STORAGE_ACCOUNT_CONNECTION_STRING: ""
+  AZURE_CLIENT_SECRET: ""
+  SECRET_KEY: ""
diff --git a/samples/web-app-managed-identity/dotnet/scripts/service.yml b/samples/web-app-managed-identity/dotnet/scripts/service.yml
new file mode 100644
index 0000000..a757f13
--- /dev/null
+++ b/samples/web-app-managed-identity/dotnet/scripts/service.yml
@@ -0,0 +1,16 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: vacation-planner-blob
+  namespace: vacation-planner-blob
+  labels:
+    app: vacation-planner-blob
+spec:
+  type: ClusterIP
+  selector:
+    app: vacation-planner-blob
+  ports:
+    - name: http
+      protocol: TCP
+      port: 80
+      targetPort: http
diff --git a/samples/web-app-managed-identity/dotnet/src/.dockerignore b/samples/web-app-managed-identity/dotnet/src/.dockerignore
new file mode 100644
index 0000000..cd42ee3
--- /dev/null
+++ b/samples/web-app-managed-identity/dotnet/src/.dockerignore
@@ -0,0 +1,2 @@
+bin/
+obj/
diff --git a/samples/web-app-managed-identity/dotnet/src/Models/Activity.cs b/samples/web-app-managed-identity/dotnet/src/Models/Activity.cs
new file mode 100644
index 0000000..c39b073
--- /dev/null
+++ b/samples/web-app-managed-identity/dotnet/src/Models/Activity.cs
@@ -0,0 +1,4 @@
+namespace VacationPlanner.Models;
+
+/// <summary>A planned vacation activity: the store's identifier plus the free-text description.</summary>
+public sealed record Activity(string Id, string Text);
diff --git a/samples/web-app-managed-identity/dotnet/src/Pages/Delete.cshtml b/samples/web-app-managed-identity/dotnet/src/Pages/Delete.cshtml
new file mode 100644
index 0000000..386fa85
--- /dev/null
+++ b/samples/web-app-managed-identity/dotnet/src/Pages/Delete.cshtml
@@ -0,0 +1,2 @@
+@page "/delete/{id}"
+@model DeleteModel
diff --git a/samples/web-app-managed-identity/dotnet/src/Pages/Delete.cshtml.cs b/samples/web-app-managed-identity/dotnet/src/Pages/Delete.cshtml.cs
new file mode 100644
index 0000000..2460ba5
--- /dev/null
+++ b/samples/web-app-managed-identity/dotnet/src/Pages/Delete.cshtml.cs
@@ -0,0 +1,21 @@
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Mvc.RazorPages;
+using VacationPlanner.Services;
+
+namespace VacationPlanner.Pages;
+
+/// <summary>Handles <c>POST /delete/{id}</c>; the activity is addressed by its store id, never by its position in the list.</summary>
+public class DeleteModel(IActivityStore store) : PageModel
+{
+    public IActionResult OnGet() => RedirectToPage("/Index");
+
+    public async Task<IActionResult> OnPostAsync(string id, CancellationToken cancellationToken)
+    {
+        if (!string.IsNullOrWhiteSpace(id) && await store.DeleteAsync(id, cancellationToken))
+        {
+            TempData["Flash"] = "Activity deleted successfully.";
+        }
+
+        return RedirectToPage("/Index");
+    }
+}
diff --git a/samples/web-app-managed-identity/dotnet/src/Pages/Index.cshtml b/samples/web-app-managed-identity/dotnet/src/Pages/Index.cshtml
new file mode 100644
index 0000000..bd617e2
--- /dev/null
+++ b/samples/web-app-managed-identity/dotnet/src/Pages/Index.cshtml
@@ -0,0 +1,265 @@
+@page
+@model IndexModel
+<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8" />
+  <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+  <title>Vacation Planner</title>
+  <link rel="preconnect" href="https://fonts.googleapis.com" />
+  <link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700&display=swap" rel="stylesheet" />
+  <link rel="stylesheet" href="~/style.css" />
+  <link rel="icon" type="image/x-icon" href="~/favicon.ico" />
+  <script>
+    (function () {
+      try {
+        var dark = localStorage.getItem('vp_dark');
+        if (dark === 'true' || (dark === null && window.matchMedia('(prefers-color-scheme: dark)').matches)) {
+          document.documentElement.dataset.theme = 'dark';
+        }
+      } catch (_) {}
+    })();
+  </script>
+</head>
+<body>
+
+<!-- Header -->
+<header>
+  <div class="header-left">
+    <h1>&#127796; Vacation Planner</h1>
+    <p id="count-label">@Model.Activities.Count activit@(Model.Activities.Count != 1 ? "ies" : "y") planned</p>
+  </div>
+  <div class="header-right">
+    <button id="btn-dark-mode" aria-label="Toggle dark mode" title="Toggle dark mode">
+      <svg id="icon-dark" width="18" height="18" fill="none" stroke="currentColor" stroke-width="2" viewBox="0 0 24 24">
+        <path d="M21 12.79A9 9 0 1111.21 3a7 7 0 009.79 9.79z"/>
+      </svg>
+      <svg id="icon-light" width="18" height="18" fill="none" stroke="currentColor" stroke-width="2" viewBox="0 0 24 24" style="display:none">
+        <circle cx="12" cy="12" r="5"/>
+        <line x1="12" y1="1" x2="12" y2="3"/><line x1="12" y1="21" x2="12" y2="23"/>
+        <line x1="4.22" y1="4.22" x2="5.64" y2="5.64"/><line x1="18.36" y1="18.36" x2="19.78" y2="19.78"/>
+        <line x1="1" y1="12" x2="3" y2="12"/><line x1="21" y1="12" x2="23" y2="12"/>
+        <line x1="4.22" y1="19.78" x2="5.64" y2="18.36"/><line x1="18.36" y1="5.64" x2="19.78" y2="4.22"/>
+      </svg>
+    </button>
+    <button id="btn-add">
+      <svg width="16" height="16" fill="none" stroke="currentColor" stroke-width="2.5" viewBox="0 0 24 24"><line x1="12" y1="5" x2="12" y2="19"/><line x1="5" y1="12" x2="19" y2="12"/></svg>
+      Add Activity
+    </button>
+  </div>
+</header>
+
+<!-- Activity Table -->
+<div class="content">
+  <table id="activity-table">
+    <thead>
+      <tr>
+        <th>Activity</th>
+        <th class="col-actions" colspan="2">Actions</th>
+      </tr>
+    </thead>
+    <tbody>
+      @foreach (var activity in Model.Activities)
+      {
+      <tr data-id="@activity.Id" data-activity="@activity.Text">
+        <td>@activity.Text</td>
+        <td class="col-btn">
+          <button class="btn-edit" title="Edit activity" aria-label="Edit @activity.Text">
+            <svg width="14" height="14" fill="none" stroke="currentColor" stroke-width="2" viewBox="0 0 24 24">
+              <path d="M11 4H4a2 2 0 00-2 2v14a2 2 0 002 2h14a2 2 0 002-2v-7"/>
+              <path d="M18.5 2.5a2.121 2.121 0 013 3L12 15l-4 1 1-4 9.5-9.5z"/>
+            </svg>
+            Edit
+          </button>
+        </td>
+        <td class="col-btn">
+          <form method="post" asp-page="/Delete" asp-route-id="@activity.Id" class="delete-form">
+            <button type="button" class="btn-delete" title="Delete activity" aria-label="Delete @activity.Text">
+              <svg width="14" height="14" fill="none" stroke="currentColor" stroke-width="2" viewBox="0 0 24 24">
+                <polyline points="3 6 5 6 21 6"/><path d="M19 6l-1 14a2 2 0 01-2 2H8a2 2 0 01-2-2L5 6"/>
+                <path d="M10 11v6"/><path d="M14 11v6"/><path d="M9 6V4h6v2"/>
+              </svg>
+              Delete
+            </button>
+          </form>
+        </td>
+      </tr>
+      }
+      @if (Model.Activities.Count == 0)
+      {
+      <tr id="empty-row">
+        <td colspan="3" class="empty-cell">No vacation plans yet — add your first activity!</td>
+      </tr>
+      }
+    </tbody>
+  </table>
+</div>
+
+<!-- Add / Edit Activity Modal -->
+<div id="overlay">
+  <div class="modal" role="dialog" aria-modal="true" aria-labelledby="modal-title">
+    <div class="modal-header">
+      <h2 id="modal-title">&#127796; Add Activity</h2>
+      <button id="btn-close-modal" aria-label="Close">&times;</button>
+    </div>
+    <form id="activity-form" method="post" asp-page="/Index" novalidate>
+      <input type="hidden" id="f-row-id" name="row_id" value="" />
+      <div class="field">
+        <label for="f-activity">Activity <span style="color:#ef4444">*</span></label>
+        <input id="f-activity" name="activity" type="text" placeholder="e.g. Snorkelling at Coral Bay" required />
+      </div>
+    </form>
+    <div class="modal-actions">
+      <button class="btn-secondary" id="btn-cancel">Cancel</button>
+      <button class="btn-primary" id="btn-save">Save Activity</button>
+    </div>
+  </div>
+</div>
+
+<!-- Delete Confirmation Modal -->
+<div id="delete-overlay">
+  <div class="modal" role="dialog" aria-modal="true" aria-labelledby="delete-modal-title">
+    <div class="modal-header">
+      <h2 id="delete-modal-title">&#127796; Delete Activity</h2>
+      <button id="btn-close-delete-modal" aria-label="Close">&times;</button>
+    </div>
+    <div class="modal-body">
+      <p id="delete-confirm-msg">Are you sure you want to delete this activity?</p>
+    </div>
+    <div class="modal-actions">
+      <button class="btn-secondary" id="btn-cancel-delete">Cancel</button>
+      <button class="btn-primary" id="btn-confirm-delete">Delete</button>
+    </div>
+  </div>
+</div>
+
+<!-- Toast -->
+<div id="toast"></div>
+
+<script>
+  // ── Dark mode ────────────────────────────────────────────
+  function applyDark(dark) {
+    document.documentElement.dataset.theme = dark ? 'dark' : '';
+    document.getElementById('icon-dark').style.display  = dark ? 'none' : '';
+    document.getElementById('icon-light').style.display = dark ? ''     : 'none';
+  }
+  (function () {
+    var dark = localStorage.getItem('vp_dark');
+    var isDark = dark === 'true' || (dark === null && window.matchMedia('(prefers-color-scheme: dark)').matches);
+    applyDark(isDark);
+  })();
+  document.getElementById('btn-dark-mode').addEventListener('click', function () {
+    var isDark = document.documentElement.dataset.theme === 'dark';
+    applyDark(!isDark);
+    localStorage.setItem('vp_dark', String(!isDark));
+  });
+
+  // ── Toast ────────────────────────────────────────────────
+  var flashMessages = @Json.Serialize(Model.Flashes);
+  var toastTimer;
+  function showToast(msg) {
+    var el = document.getElementById('toast');
+    el.textContent = msg;
+    el.classList.add('show');
+    clearTimeout(toastTimer);
+    toastTimer = setTimeout(function () { el.classList.remove('show'); }, 2400);
+  }
+  if (flashMessages.length) showToast(flashMessages[0]);
+
+  // ── Activity Modal ───────────────────────────────────────
+  var overlay = document.getElementById('overlay');
+
+  function openActivityModal(data) {
+    var titleEl = document.getElementById('modal-title');
+    var saveEl  = document.getElementById('btn-save');
+    var rowId   = document.getElementById('f-row-id');
+    var input   = document.getElementById('f-activity');
+
+    if (data) {
+      titleEl.textContent = '🌴 Edit Activity';
+      saveEl.textContent  = 'Save Changes';
+      rowId.value         = data.id;
+      input.value         = data.activity;
+    } else {
+      titleEl.textContent = '🌴 Add Activity';
+      saveEl.textContent  = 'Save Activity';
+      rowId.value         = '';
+      input.value         = '';
+    }
+    overlay.classList.add('open');
+    input.focus();
+    var len = input.value.length;
+    input.setSelectionRange(len, len);
+  }
+
+  function closeActivityModal() {
+    overlay.classList.remove('open');
+    document.getElementById('activity-form').reset();
+    document.getElementById('f-row-id').value = '';
+    document.getElementById('modal-title').textContent = '🌴 Add Activity';
+    document.getElementById('btn-save').textContent    = 'Save Activity';
+  }
+
+  document.getElementById('btn-add').addEventListener('click', function () { openActivityModal(null); });
+  document.getElementById('btn-close-modal').addEventListener('click', closeActivityModal);
+  document.getElementById('btn-cancel').addEventListener('click', closeActivityModal);
+  overlay.addEventListener('click', function (e) { if (e.target === overlay) closeActivityModal(); });
+
+  document.getElementById('btn-save').addEventListener('click', function () {
+    var val = document.getElementById('f-activity').value.trim();
+    if (!val) { showToast('Activity cannot be empty.'); return; }
+    document.getElementById('activity-form').submit();
+  });
+
+  document.getElementById('f-activity').addEventListener('keydown', function (e) {
+    if (e.key === 'Enter') { e.preventDefault(); document.getElementById('btn-save').click(); }
+  });
+
+  // Edit buttons on rows
+  document.querySelectorAll('.btn-edit').forEach(function (btn) {
+    btn.addEventListener('click', function () {
+      var row = btn.closest('tr');
+      openActivityModal({ id: row.dataset.id, activity: row.dataset.activity });
+    });
+  });
+
+  // ── Delete confirmation modal ────────────────────────────
+  var deleteOverlay = document.getElementById('delete-overlay');
+  var pendingDeleteForm = null;
+
+  function openDeleteModal(form, activityName) {
+    pendingDeleteForm = form;
+    var msg = document.getElementById('delete-confirm-msg');
+    msg.textContent = 'Are you sure you want to delete "' + activityName + '"?';
+    deleteOverlay.classList.add('open');
+    document.getElementById('btn-confirm-delete').focus();
+  }
+
+  function closeDeleteModal() {
+    deleteOverlay.classList.remove('open');
+    pendingDeleteForm = null;
+  }
+
+  document.querySelectorAll('.btn-delete').forEach(function (btn) {
+    btn.addEventListener('click', function () {
+      var row = btn.closest('tr');
+      var form = btn.closest('form');
+      openDeleteModal(form, row.dataset.activity);
+    });
+  });
+
+  document.getElementById('btn-confirm-delete').addEventListener('click', function () {
+    if (pendingDeleteForm) pendingDeleteForm.submit();
+  });
+
+  document.getElementById('btn-cancel-delete').addEventListener('click', closeDeleteModal);
+  document.getElementById('btn-close-delete-modal').addEventListener('click', closeDeleteModal);
+  deleteOverlay.addEventListener('click', function (e) { if (e.target === deleteOverlay) closeDeleteModal(); });
+
+  // ── Escape closes any open modal ─────────────────────────
+  document.addEventListener('keydown', function (e) {
+    if (e.key === 'Escape') { closeActivityModal(); closeDeleteModal(); }
+  });
+</script>
+</body>
+</html>
diff --git a/samples/web-app-managed-identity/dotnet/src/Pages/Index.cshtml.cs b/samples/web-app-managed-identity/dotnet/src/Pages/Index.cshtml.cs
new file mode 100644
index 0000000..c077e52
--- /dev/null
+++ b/samples/web-app-managed-identity/dotnet/src/Pages/Index.cshtml.cs
@@ -0,0 +1,47 @@
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Mvc.RazorPages;
+using VacationPlanner.Models;
+using VacationPlanner.Services;
+
+namespace VacationPlanner.Pages;
+
+public class IndexModel(IActivityStore store) : PageModel
+{
+    public IReadOnlyList<Activity> Activities { get; private set; } = [];
+
+    /// <summary>Flash messages set by the previous request (the equivalent of Flask's <c>flash()</c>).</summary>
+    public IReadOnlyList<string> Flashes => TempData["Flash"] is string message ? [message] : [];
+
+    [BindProperty(Name = "activity")]
+    public string? Activity { get; set; }
+
+    [BindProperty(Name = "row_id")]
+    public string? RowId { get; set; }
+
+    public async Task OnGetAsync(CancellationToken cancellationToken)
+    {
+        Activities = await store.ListAsync(cancellationToken);
+    }
+
+    public async Task<IActionResult> OnPostAsync(CancellationToken cancellationToken)
+    {
+        var text = Activity?.Trim();
+        var id = RowId?.Trim();
+        if (!string.IsNullOrEmpty(text))
+        {
+            if (!string.IsNullOrEmpty(id))
+            {
+                if (await store.UpdateAsync(id, text, cancellationToken))
+                {
+                    TempData["Flash"] = "Activity updated successfully.";
+                }
+            }
+            else if (await store.AddAsync(text, cancellationToken))
+            {
+                TempData["Flash"] = "Activity added successfully.";
+            }
+        }
+
+        return RedirectToPage();
+    }
+}
diff --git a/samples/web-app-managed-identity/dotnet/src/Pages/_ViewImports.cshtml b/samples/web-app-managed-identity/dotnet/src/Pages/_ViewImports.cshtml
new file mode 100644
index 0000000..ec62511
--- /dev/null
+++ b/samples/web-app-managed-identity/dotnet/src/Pages/_ViewImports.cshtml
@@ -0,0 +1,4 @@
+@using VacationPlanner
+@using VacationPlanner.Models
+@namespace VacationPlanner.Pages
+@addTagHelper *, Microsoft.AspNetCore.Mvc.TagHelpers
diff --git a/samples/web-app-managed-identity/dotnet/src/Program.cs b/samples/web-app-managed-identity/dotnet/src/Program.cs
new file mode 100644
index 0000000..c8a8a85
--- /dev/null
+++ b/samples/web-app-managed-identity/dotnet/src/Program.cs
@@ -0,0 +1,48 @@
+using Microsoft.AspNetCore.DataProtection;
+using Microsoft.AspNetCore.DataProtection.KeyManagement;
+using VacationPlanner.Services;
+
+var builder = WebApplication.CreateBuilder(args);
+
+// Listen on PORT (8080 by default), the way the Python image binds gunicorn to 0.0.0.0:${PORT}. HTTP_PORTS is the
+// same setting the aspnet base image feeds through ASPNETCORE_HTTP_PORTS, so no URL override is involved.
+if (Environment.GetEnvironmentVariable("PORT") is { Length: > 0 } port)
+{
+    builder.WebHost.UseSetting(WebHostDefaults.HttpPortsKey, port);
+}
+
+// Read and validate the configuration up front so a misconfigured deployment fails at startup.
+var storeOptions = BlobStorageOptions.FromEnvironment();
+
+// SECRET_KEY is the Kubernetes Secret the Python sample signs its session cookie with. Deriving the Data Protection
+// key ring from it lets all replicas validate each other's antiforgery tokens and flash cookies; without it (a local
+// docker run) each process keeps its own keys.
+var secretKey = Environment.GetEnvironmentVariable("SECRET_KEY");
+if (!string.IsNullOrEmpty(secretKey))
+{
+    builder.Services.AddDataProtection().DisableAutomaticKeyGeneration();
+    builder.Services.Configure<KeyManagementOptions>(options => options.XmlRepository = new SecretKeyXmlRepository(secretKey));
+}
+
+builder.Services.AddRazorPages();
+builder.Services.AddSingleton<IActivityStore>(sp =>
+    new BlobActivityStore(storeOptions, sp.GetRequiredService<ILogger<BlobActivityStore>>()));
+builder.Services.AddHostedService(sp =>
+    new StoreInitializer(sp.GetRequiredService<IActivityStore>(), sp.GetRequiredService<ILogger<StoreInitializer>>()));
+
+var app = builder.Build();
+
+if (string.IsNullOrEmpty(secretKey))
+{
+    app.Logger.LogWarning("SECRET_KEY is not set: antiforgery tokens and flash messages are only valid on this replica.");
+}
+
+app.UseStaticFiles();
+app.MapRazorPages();
+
+app.MapGet("/health", async (IActivityStore store, CancellationToken cancellationToken) =>
+    await store.IsHealthyAsync(cancellationToken)
+        ? Results.Json(new { status = "ok" })
+        : Results.Json(new { status = "unavailable" }, statusCode: StatusCodes.Status503ServiceUnavailable));
+
+app.Run();
diff --git a/samples/web-app-managed-identity/dotnet/src/Services/BlobActivityStore.cs b/samples/web-app-managed-identity/dotnet/src/Services/BlobActivityStore.cs
new file mode 100644
index 0000000..05bebdf
--- /dev/null
+++ b/samples/web-app-managed-identity/dotnet/src/Services/BlobActivityStore.cs
@@ -0,0 +1,123 @@
+using System.Text;
+using Azure.Identity;
+using Azure.Storage;
+using Azure.Storage.Blobs;
+using VacationPlanner.Models;
+
+namespace VacationPlanner.Services;
+
+/// <summary>One blob per activity in a Blob Storage container; the blob name is the activity id and its content the text.</summary>
+public sealed class BlobActivityStore : IActivityStore
+{
+    private readonly BlobContainerClient _container;
+    private readonly ILogger<BlobActivityStore> _logger;
+
+    public BlobActivityStore(BlobStorageOptions options, ILogger<BlobActivityStore> logger)
+    {
+        _logger = logger;
+
+        // The same credential ladder as the Python sample: an explicit service principal, then a connection string,
+        // then the identity of the pod.
+        BlobServiceClient service;
+        if (options is { ClientId: { Length: > 0 }, ClientSecret: { Length: > 0 }, TenantId: { Length: > 0 }, AccountUrl: { Length: > 0 } })
+        {
+            logger.LogInformation("Using ClientSecretCredential with BlobServiceClient.");
+            var credential = new ClientSecretCredential(options.TenantId, options.ClientId, options.ClientSecret);
+            service = new BlobServiceClient(new Uri(options.AccountUrl), credential);
+        }
+        else if (!string.IsNullOrEmpty(options.ConnectionString))
+        {
+            logger.LogInformation("Using storage account connection string with BlobServiceClient.");
+            service = FromConnectionString(options.ConnectionString);
+        }
+        else if (!string.IsNullOrEmpty(options.AccountUrl))
+        {
+            // DefaultAzureCredential picks up the Microsoft Entra Workload ID the webhook projects into the pod
+            // (AZURE_CLIENT_ID, AZURE_TENANT_ID, AZURE_FEDERATED_TOKEN_FILE, AZURE_AUTHORITY_HOST).
+            logger.LogInformation("Using DefaultAzureCredential with BlobServiceClient.");
+            service = new BlobServiceClient(new Uri(options.AccountUrl), new DefaultAzureCredential());
+        }
+        else
+        {
+            throw new InvalidOperationException(
+                "Insufficient configuration for BlobServiceClient. Set AZURE_STORAGE_ACCOUNT_URL (workload identity) or AZURE_STORAGE_ACCOUNT_CONNECTION_STRING.");
+        }
+
+        _container = service.GetBlobContainerClient(options.ContainerName);
+    }
+
+    public async Task InitializeAsync(CancellationToken cancellationToken)
+    {
+        await _container.CreateIfNotExistsAsync(cancellationToken: cancellationToken);
+        _logger.LogInformation("Container '{Container}' is ready.", _container.Name);
+    }
+
+    public async Task<IReadOnlyList<Activity>> ListAsync(CancellationToken cancellationToken)
+    {
+        // Blobs come back sorted by name, which sorts by creation timestamp: the blob name is the timestamp.
+        var activities = new List<Activity>();
+        await foreach (var blob in _container.GetBlobsAsync(cancellationToken: cancellationToken))
+        {
+            var content = await _container.GetBlobClient(blob.Name).DownloadContentAsync(cancellationToken);
+            activities.Add(new Activity(blob.Name, content.Value.Content.ToString()));
+        }
+
+        return activities;
+    }
+
+    public Task<bool> AddAsync(string text, CancellationToken cancellationToken) =>
+        UploadAsync($"{DateTime.Now:yyyy-MM-dd-HH-mm-ss}-activity.txt", text, cancellationToken);
+
+    public Task<bool> UpdateAsync(string id, string text, CancellationToken cancellationToken) =>
+        UploadAsync(id, text, cancellationToken);
+
+    public async Task<bool> DeleteAsync(string id, CancellationToken cancellationToken)
+    {
+        // As in the Python sample, a blob that is already gone still counts as deleted.
+        var deleted = await _container.GetBlobClient(id).DeleteIfExistsAsync(cancellationToken: cancellationToken);
+        if (!deleted.Value)
+        {
+            _logger.LogInformation("Blob '{Name}' did not exist: already deleted.", id);
+        }
+
+        return true;
+    }
+
+    public async Task<bool> IsHealthyAsync(CancellationToken cancellationToken)
+    {
+        try
+        {
+            return await _container.ExistsAsync(cancellationToken);
+        }
+        catch (Exception ex)
+        {
+            _logger.LogWarning(ex, "Blob Storage health check failed");
+            return false;
+        }
+    }
+
+    private async Task<bool> UploadAsync(string name, string text, CancellationToken cancellationToken)
+    {
+        await _container.GetBlobClient(name).UploadAsync(new BinaryData(Encoding.UTF8.GetBytes(text)), overwrite: true, cancellationToken);
+        return true;
+    }
+
+    /// <summary>
+    /// Builds the client from the connection string's explicit <c>BlobEndpoint</c> and shared key when they are present,
+    /// as the Python SDK does. The .NET parser insists on a port-less <c>EndpointSuffix</c> and rejects the connection
+    /// string the LocalStack emulator returns, whose suffix carries the gateway port (<c>core.azure.localhost.localstack.cloud:4566</c>).
+    /// </summary>
+    private static BlobServiceClient FromConnectionString(string connectionString)
+    {
+        var parts = connectionString.Split(';', StringSplitOptions.RemoveEmptyEntries)
+            .Select(part => part.Split('=', 2))
+            .Where(kv => kv.Length == 2)
+            .ToDictionary(kv => kv[0].Trim(), kv => kv[1].Trim(), StringComparer.OrdinalIgnoreCase);
+
+        return parts.TryGetValue("BlobEndpoint", out var endpoint)
+            && parts.TryGetValue("AccountName", out var accountName)
+            && parts.TryGetValue("AccountKey", out var accountKey)
+            ? new BlobServiceClient(new Uri(endpoint), new StorageSharedKeyCredential(accountName, accountKey))
+            : new BlobServiceClient(connectionString);
+    }
+}
diff --git a/samples/web-app-managed-identity/dotnet/src/Services/BlobStorageOptions.cs b/samples/web-app-managed-identity/dotnet/src/Services/BlobStorageOptions.cs
new file mode 100644
index 0000000..c353256
--- /dev/null
+++ b/samples/web-app-managed-identity/dotnet/src/Services/BlobStorageOptions.cs
@@ -0,0 +1,19 @@
+namespace VacationPlanner.Services;
+
+/// <summary>Settings read from the same environment variables the Python sample uses.</summary>
+public sealed record BlobStorageOptions(
+    string? AccountUrl,
+    string? ConnectionString,
+    string ContainerName,
+    string? ClientId,
+    string? ClientSecret,
+    string? TenantId)
+{
+    public static BlobStorageOptions FromEnvironment() => new(
+        AccountUrl: Environment.GetEnvironmentVariable("AZURE_STORAGE_ACCOUNT_URL"),
+        ConnectionString: Environment.GetEnvironmentVariable("AZURE_STORAGE_ACCOUNT_CONNECTION_STRING"),
+        ContainerName: Environment.GetEnvironmentVariable("CONTAINER_NAME") ?? "activities",
+        ClientId: Environment.GetEnvironmentVariable("AZURE_CLIENT_ID"),
+        ClientSecret: Environment.GetEnvironmentVariable("AZURE_CLIENT_SECRET"),
+        TenantId: Environment.GetEnvironmentVariable("AZURE_TENANT_ID"));
+}
diff --git a/samples/web-app-managed-identity/dotnet/src/Services/IActivityStore.cs b/samples/web-app-managed-identity/dotnet/src/Services/IActivityStore.cs
new file mode 100644
index 0000000..167993e
--- /dev/null
+++ b/samples/web-app-managed-identity/dotnet/src/Services/IActivityStore.cs
@@ -0,0 +1,24 @@
+using VacationPlanner.Models;
+
+namespace VacationPlanner.Services;
+
+/// <summary>Persistence for the planner's activities. Every call goes to the backing store; nothing is cached in-process.</summary>
+public interface IActivityStore
+{
+    /// <summary>Creates whatever the store needs (container, table, collection, directory) before the first request.</summary>
+    Task InitializeAsync(CancellationToken cancellationToken);
+
+    Task<IReadOnlyList<Activity>> ListAsync(CancellationToken cancellationToken);
+
+    /// <summary>Adds an activity and returns whether the store confirmed the write; the page flashes only then.</summary>
+    Task<bool> AddAsync(string text, CancellationToken cancellationToken);
+
+    /// <summary>Updates an activity and returns whether the store reported a change, with the meaning the Python sample's driver gives it.</summary>
+    Task<bool> UpdateAsync(string id, string text, CancellationToken cancellationToken);
+
+    /// <summary>Deletes an activity by its store id and returns whether the store reported a deletion.</summary>
+    Task<bool> DeleteAsync(string id, CancellationToken cancellationToken);
+
+    /// <summary>Cheap connectivity probe used by <c>GET /health</c>.</summary>
+    Task<bool> IsHealthyAsync(CancellationToken cancellationToken);
+}
diff --git a/samples/web-app-managed-identity/dotnet/src/Services/SecretKeyXmlRepository.cs b/samples/web-app-managed-identity/dotnet/src/Services/SecretKeyXmlRepository.cs
new file mode 100644
index 0000000..e0cc5bb
--- /dev/null
+++ b/samples/web-app-managed-identity/dotnet/src/Services/SecretKeyXmlRepository.cs
@@ -0,0 +1,49 @@
+using System.Security.Cryptography;
+using System.Text;
+using System.Xml.Linq;
+using Microsoft.AspNetCore.DataProtection;
+using Microsoft.AspNetCore.DataProtection.AuthenticatedEncryption.ConfigurationModel;
+using Microsoft.AspNetCore.DataProtection.Repositories;
+
+namespace VacationPlanner.Services;
+
+/// <summary>
+/// A Data Protection key ring derived deterministically from <c>SECRET_KEY</c>, the Kubernetes Secret the Python
+/// sample signs its Flask session cookie with. ASP.NET Core protects its antiforgery tokens and TempData (flash)
+/// cookies with Data Protection instead of a signing key; deriving the one key of the ring from the same secret
+/// lets every replica of the Deployment validate what another replica issued, which the default per-process key
+/// ring cannot offer behind a load balancer.
+/// </summary>
+public sealed class SecretKeyXmlRepository : IXmlRepository
+{
+    private readonly XElement _key;
+
+    public SecretKeyXmlRepository(string secretKey)
+    {
+        var keyMaterial = Encoding.UTF8.GetBytes(secretKey);
+
+        // A 512-bit master key (the size Data Protection generates itself) and a stable key id, both from SECRET_KEY.
+        var masterKey = HKDF.DeriveKey(HashAlgorithmName.SHA256, keyMaterial, 64, info: "VacationPlanner.DataProtection.MasterKey"u8.ToArray());
+        var keyId = new Guid(HKDF.DeriveKey(HashAlgorithmName.SHA256, keyMaterial, 16, info: "VacationPlanner.DataProtection.KeyId"u8.ToArray()));
+
+        // AES-256-CBC + HMACSHA256, the default algorithms, serialized the way the key manager itself serializes a new key.
+        var descriptor = new AuthenticatedEncryptorDescriptor(new AuthenticatedEncryptorConfiguration(), new Secret(masterKey));
+        var serialized = descriptor.ExportToXml();
+
+        _key = new XElement("key",
+            new XAttribute("id", keyId),
+            new XAttribute("version", 1),
+            new XElement("creationDate", new DateTimeOffset(2000, 1, 1, 0, 0, 0, TimeSpan.Zero)),
+            new XElement("activationDate", new DateTimeOffset(2000, 1, 1, 0, 0, 0, TimeSpan.Zero)),
+            new XElement("expirationDate", new DateTimeOffset(2999, 12, 31, 0, 0, 0, TimeSpan.Zero)),
+            new XElement("descriptor",
+                new XAttribute("deserializerType", serialized.DeserializerType.AssemblyQualifiedName!),
+                serialized.SerializedDescriptorElement));
+    }
+
+    public IReadOnlyCollection<XElement> GetAllElements() => [new XElement(_key)];
+
+    /// <summary>Never called: automatic key generation is disabled, so the key manager has nothing to persist.</summary>
+    public void StoreElement(XElement element, string friendlyName) =>
+        throw new NotSupportedException("The key ring is derived from SECRET_KEY and cannot be modified.");
+}
diff --git a/samples/web-app-managed-identity/dotnet/src/Services/StoreInitializer.cs b/samples/web-app-managed-identity/dotnet/src/Services/StoreInitializer.cs
new file mode 100644
index 0000000..c74eb50
--- /dev/null
+++ b/samples/web-app-managed-identity/dotnet/src/Services/StoreInitializer.cs
@@ -0,0 +1,33 @@
+namespace VacationPlanner.Services;
+
+/// <summary>
+/// Runs <see cref="IActivityStore.InitializeAsync"/> at startup with a bounded retry, so the app fails fast
+/// (and the container exits) when the backing service never becomes reachable.
+/// </summary>
+public sealed class StoreInitializer(
+    IActivityStore store,
+    ILogger<StoreInitializer> logger,
+    int attempts = 1,
+    TimeSpan delay = default) : IHostedService
+{
+    public async Task StartAsync(CancellationToken cancellationToken)
+    {
+        for (var attempt = 1; ; attempt++)
+        {
+            try
+            {
+                await store.InitializeAsync(cancellationToken);
+                logger.LogInformation("Activity store initialized after {Attempts} attempt(s).", attempt);
+                return;
+            }
+            catch (Exception ex) when (attempt < attempts && !cancellationToken.IsCancellationRequested)
+            {
+                logger.LogWarning(ex, "Activity store not ready (attempt {Attempt}/{Attempts}); retrying in {Delay}s.",
+                    attempt, attempts, delay.TotalSeconds);
+                await Task.Delay(delay, cancellationToken);
+            }
+        }
+    }
+
+    public Task StopAsync(CancellationToken cancellationToken) => Task.CompletedTask;
+}
diff --git a/samples/web-app-managed-identity/dotnet/src/VacationPlanner.csproj b/samples/web-app-managed-identity/dotnet/src/VacationPlanner.csproj
new file mode 100644
index 0000000..835cd67
--- /dev/null
+++ b/samples/web-app-managed-identity/dotnet/src/VacationPlanner.csproj
@@ -0,0 +1,12 @@
+<Project Sdk="Microsoft.NET.Sdk.Web">
+  <PropertyGroup>
+    <TargetFramework>net10.0</TargetFramework>
+    <Nullable>enable</Nullable>
+    <ImplicitUsings>enable</ImplicitUsings>
+    <RootNamespace>VacationPlanner</RootNamespace>
+  </PropertyGroup>
+  <ItemGroup>
+    <PackageReference Include="Azure.Identity" Version="1.21.0" />
+    <PackageReference Include="Azure.Storage.Blobs" Version="12.29.2" />
+  </ItemGroup>
+</Project>
diff --git a/samples/web-app-managed-identity/dotnet/src/appsettings.json b/samples/web-app-managed-identity/dotnet/src/appsettings.json
new file mode 100644
index 0000000..10f68b8
--- /dev/null
+++ b/samples/web-app-managed-identity/dotnet/src/appsettings.json
@@ -0,0 +1,9 @@
+{
+  "Logging": {
+    "LogLevel": {
+      "Default": "Information",
+      "Microsoft.AspNetCore": "Warning"
+    }
+  },
+  "AllowedHosts": "*"
+}
diff --git a/samples/web-app-managed-identity/dotnet/src/wwwroot/favicon.ico b/samples/web-app-managed-identity/dotnet/src/wwwroot/favicon.ico
new file mode 100644
index 0000000000000000000000000000000000000000..5b1d5cf37d81c073dbacd66df3f69d9240359dda
GIT binary patch
literal 36791
zcmagEWmp_d(>6Q{i$hpk0}H_+c#vR=6Wrb1od6-g;x0iFoDJ?0f_tzeIKkZs9^B#M
zdhWm9alG?mrfYhnrmO3ms<R6KKmZy5fdJ1N6p%*-fcMWWQqup)Cnx~W^?VKr{hz#m
z4gj?n0Km!lKiTpH0L0=001Wm&nVJv){y_l%4*#G0g9QL^-~8A9Z-WBc8~`wG0sv8}
z%Cb0^<e1MVao)*EsXrh8(*S~w`n;z;dolw6WW0A$;+j5LR>?|=hE{~(xo1m$5$WOx
zbWKdfscH3)sLJu8Xzj(xu<713Y$3x$OfLQLhNy8}4uYlTL|y(QT@oUE8%0m6*lERg
z1z4=(8HnCaQ${&?+Zzf}>!bD+H;@yHKQSZYu^->grpOP5U0!8&*<K~jn<fjg9|H-E
z7vuwNu@j+x`=G0n*Q#dt(qKRua$cKUdDXg3#V1h^w0U-{V)E8A@9^~u&#`W~sdysM
z*gFit3~HA9y>$!7!B+yIi1l|oaJ(PxauD5x8~L*c^Ib0^4*b-W%Gu<d<%hfSSC8?Q
zcE<Sd=wpl1L8t2UwB3Z?<I;G4w2hJvVtuvZd!=Ic)d*A&pNQie9^*8{R^Hg$D_XNj
z;q9Kf^%PDnpM3qX8Do>9Sovk9&i(=hRu&Fz(W>Lscu7crQLUxrCM;>!e0m{r*JdLi
zX1#U$C?c6~)NA%5PB4y7HQH>;zWNGg*Ey4P&2YQ_)ul&FNMtBeU~#9Paylk8=aUY{
zNBfE9?{iK09V9WWab|*Lq!FiiDKA!9(<sNcn!_(kCmzQwHuA?m+#}-h5|&tyX-ARL
z487U+1pN^ppE5(t%8hhV`n!8?<j#A~VXW;vb>^k%@#WN!qU<{Fj+%hW*|2<vm@N*q
zOAsj>T4pa@@b<H-l4`u@_2#wD^c9zKGq>MiZZMnTL#@zEc1$?Q2pM5i^aK{)@f|5L
zgrL<vR!$YO8oI{3a_r7S=2-D~32n|#zZGdE2X1dgG4VXl<Bmzn2vWarlT8A>8(V|Z
z_P_K+c)0)doEohned9K=)z411+B%JG7yQb^y(oqU*iX!T=Xq{0W%1<+!dPDWy@E9!
zHs7r}y&k4(<WB*SQZC9>A>gj<i;+ACB&1u5l~0z14e#y!Ed1?D@jsrdF7%9A{jn<+
z`f|6@nMScBLwnwKEChHZ2;ZN-JZ#lyD3izYCPtLzOU?$*u?T~-iJDK(3TIf)&U|th
zjk!-2ioCIoUjH_g0R^k?)|LMWoBwG)tnc=^b9cUS;|U}irkN1*o6_#tM}T+I%2HJl
zrosO|p7fvZlK!73t$K@G0{}|X|2!#9%gE7i3h&W+r1|QoY6b%=SJN%ctSSBe9Zi@F
z9__y9xP0ZUr<#<Vs#d8weX@WZGoHGaKdY8-YG_H9q+KE5BD`8vGb(~9E?TD)1CMTO
zObYXz;#O|2Skz$!f2&{MNV=%ww18<|K!S(N*>2{I^^3JZggQ{)fHvVz&W+6pq)3ti
z!9XnJ{b2ma@Ik4GevGVKB5b^sp}QmS@Fj)Q762@%ewgc#XF?g<g3MV69h0lR5K|e7
zS9;wAKEzivr!cQ6zhA#D7YANQ&e9{TL`2i3Ia43Kyz&&m7{djc<K+55Z|TCSJB?lp
z&RMj!yx)o53v04Rfe83AWP%vDNW^&uGPE;?9*_RU5LDlY5`thcP97!$56;HNHp44n
zL~!(8055TJSdIHqaPVWA+$jW!YbuT_u(YpUEHl`9ZIZgE8U=Ly^W(tMt2_2M5Ktd2
zHor2pA#gqB^ryMP41_ch9#qd~VLef$ZkP1N@UW%tlGax+f$+?*DpBZXbUa&;591!I
zjx<avu`oyiR%mmqXH$7o{QgFscmr%&-ap%5Ui(kepw_2#LqK8(2~Rsdyhp!67diO7
zJEjzjc%hc<*L&O};r9r_6i-1m8wJVb(*vUwM2gOrtN6g#^@q9gLVw!JooRXHibPli
zO$~to>6f2_LO=15ljp$_1xD`Q%T-%Hi+CUcHxoLJ%bB8waM({HJ{AthxM&$4xpw>&
z)~qgo;6b1%I+Hx9$;au+f^H5XO#2udviAgAWfwD1>eIbLLwd0hXx=X$eo~*N8(gxX
z(2H!!ey+c2(Q&0JGf~0^pbS`FO7h1qr>93=$E++~b3R>P%D!Fsu-(4WAnqhbaE67a
z_`zwuHr?{KRq(e_<Y7V8KP$sIBK14tPR6ZuooY%Nv;uHT<IHl0nRQp&fjeZzs{?Y6
zq^AATzTICMySsOH#)29s@Jc`aN{{*grPkXByH`Bsh4}oK`}s?<ReX(vR#>1QtJYt!
z^!VX&+eDO0B@7(Yvu=)EFx$1dr}$}`YDCQkEt})^1aD--7vtNGE9<9|-OkIndnP-}
zY9YZ&m}kt!)HE`HHq&_Z>kEG%4gyWlT#s#avp#-*Zms+A>NY(5BMIE|qs>O&$Z)3X
zRS0fk>vlsNVA-?CKmcBaqF=`yzET;uIH$hRV&_r-0oRHNDgczsn|ZiOm+QCHZ*?9D
z{-k0MM44Ynm5d@+Um%dGjym_pWK{AMUw#j|q%IT;aG3{WO#UgWAM3i1L<Qn?Q9(%G
z=GEBJ{n>Aa(KHGX1xH=6DDVRH(*83nISQ^U^IDH)<Q~X0_32dR!$5Iei=##100`!t
zdqfOyR<LW>$8Oj$R#{Q6@CQ0}9^bKGzWQ_LjDUQuy<DKs^rJ}_BA?tlc@1zb)V;TJ
z$Y-QQ2H{Nn?ADI$2~q{1zrKxv(<Z5qLrH!>-WU0W13&+{^7vjRKUJg)-7yo77<Jvx
zdDzwMktB%Fp(8m9rieoVf9i}^FIP*teydH>u0}i@LsSLXC;-wIJ=;!<kJIZzZ1x%&
zwnL)>z-qPYbdPlhVEba-<2@N+Oq8S$ZeKt|HLaA4RAl5qSm#4Pw(bQYGWGpvp?oDC
zG8)(7k`k*cThNyeXsdCD1Ixxe<pJ%&e8OYpV8luOKx1!yeqZ0On0FheM3dImJI>lo
zVHAYCqX%Dod@D%WKdXMmJ!<nXP%mBG`$0>0oQGeWJRH0Bl#A&5vzH47X^_r)1Y#cj
z3A^9ukKWvSqjfI4>2QIu`Vwdde)GGGlhjxWooCSiP3Oldw+<vD<$Hy@Lj}w;<h6<a
zih(hqe^Y_iI?UIU0hXXd%Q+by{?XK1UcY#m*T1%Hc35pPKS(y~MWqsceD}hj^&;bw
zNX3P0g->w0i7zdS4n2C>XI5j-6LNO$Oi-?-O8EZ+@S)HB(EkH`j}ITt0RTPke}G@8
zWA_aBM2{owF6n(d%9M_(<^#%^u=Ro%DFaR71-yGXyt4T+i^;t2S|tbsgJn=SHDae&
z8(noFRGW~fH;*rJy)<+J>EREt3i^n;^lL&DTl{Z=<zHsgqilSSm;G)ntcM^%t7SVY
zepl@t9cS6cIexfnf8x3TbfBv)U`@O$;%4u2xq+cs^&7-OWGR_rKaE`%Q~SoDNe&rm
z2>X?!4)(sdCo=7Z<W$J+C6osqgsVZ_<}kSK7uuCiS4uQwiW&((g6ahaVi~!`sF#gN
zzEq<_Q-c+YzdDTai?#U#aBls5=oC#Ve?kQ&?EV_?)j#}>in%E3<;-}44y`dm{RAC!
z2OpHcxQdt2d5bTdg|y0A)&@ZkVaUg{Dztf>#NjLMYi&|CFb&-*6UMz(*!jfKA!7m(
zY^G@X?y%{?Q+JF8zydJdCB6`kz|Qv}9AX5uFj4B;BL(=erR#o?*6xldMT6y_o%*L$
z4aWr1vYlhZ<jHW&YDz)rplqN@#pO`zjj5>3__LdPbPT%h>+%v{xNAImV2Z@irtaoa
zY@lrgal!sq>A`;UIL2=Qd?g&9!dse&_Aw&^{XmQ6(~cTT!ZadKa1<RVm~3cBMoxDK
zz<xwpuf_vY&X_IK(iApr%Fre>zIF_ByPKaG3D^{)pJ=y>8;sp^2pBAyHtEec817Cf
z#YBe$Bam>k_#o<C-`LP;SXhV^8$1Q((&z@<U{a|q@`-BUG`7?f0oDWI-T}C9jR)p*
z<w7Md6D1q=KhN4^8q8oQ2;1;>{z63qsEDOnD4ED&WINO4dR-El)N~u9CD1vMP4f#A
zle+s!d$7@IX|1hkX$MmwNeJY2)+WNof2oysFZ^;CKd$g!U?=VbJ?6L=?Fd-UtWb%0
zl;q@jbsDvQjys9tI+Wqz(g{@nzC*#Bu5{f*_+|)@bsto14&9N|l;7HbWpXE&d*w1>
z_!xUCB&`-l;~|lBFGY4##<!2<>P9Z4j*p4S*2<m`8CwHCgP0J!BK(PvnlJR2Docmb
zTX)f1wy+Wz`K3KhA`p~@_g2j=!peV^`Sijmted$L7aJ+&*8k8K@=9_k<+85Zi*<2_
z7H4GMoE^K~ybAY4gcKV6u8@Yp_*5IFL#8wL!#<je7e=|Jp2+WhN{{shI`Q72aP;@8
znr3v)99XnIKd;QxcT>{3VP#_Uf7<Q*XBsm3WRfo%%tf)IOlPLk_4){^y!dkcHj2mJ
zL>Odd@W-R|aXK%&XBV6L<J<TJ1ou)|OheCG7sdDK{U$}r#H=JmNB2ovc<;0CE|vk>
zndulWat_+3Bc;q^m;ECMu?R6?N|C%p`irA}$8tl}yGLQSRRb(3%N<Rcgwww$JYMId
z3GG*p<f9=z<NNV#HC~*Z7ClFdspBT&Uzd0KoiJ*~f7iVH^jchM5e$@i$}1w1!Wx0D
zj2~!OC9(ESd+{%(m3zPa`1YY1657}!%bBtixHr4{XnN3om5nu^3}LOGzcLG0wfSwD
zc%|KV@jG0EnlNE+%1p0wyVns527PUA{m2b?@+Bzpz{te%r-keLt@2z-zL}|7#dXWf
ztJ^z`fUVqQKMXEo0e{Qra^HP#i09|%{EVN?I@V^twG-d|*GLlZ^QXEg=V6)3P1<$x
zi^(NhdN@Rs7&pGs?qy=&Y((zr0-$B*1i;Xrn?mq+2dhXH2ewGk-ZI0<QXT4#ezRvS
zuYr5|rwfU^{KFsj^oNmbx(NKU<XUx%K@h@aOCAaC>7wsP6}o~J-&`o9g?O@(rAObK
zP9p&ljnZiWNNC?@R*az*`S#lU&)9>vpLD1fd3;7iW)?bf)ed}-faq8G`Gse%e&Xa#
z+&qubNv<P(-PhvcJ|m6$x+^NCP<?+L6jX@tQc|%rDxglQzu;s#{k}IzT>N2UE6y)R
zSY*ygWZ#AmD5%pzf=7i!Fbp<Gbx^um^hzTp^9Jwa<D#6a7e07tY_A$EIDgED#0JjK
zHOa2!b~RV+zgW|jdFs@CLSOv$EzIFdq$UdrV5?s*VN~yql2K(8UaswxS6b&`wso9C
z2IUTr;R!*qppvi+Km{K6VjBR2M@cfM3*Ac}EeX^WrB9oN`M#sgZq&3=%<zc!ZRf8z
z#tlvl>1h65i1E;XwFTm{N!U`mG|)FMgazD-=B^>rY{g@|36#=Zw|{AGK_|v%(0W8c
zZVvp+7UshJ1;+du?&`GZar2J=n5=j|U^yv;j#RA9oc`!`i4Vq=A$PKnsM}A)@w@WN
zk-eDXfpr{b^3PPeaZriP1stvD#oFLbT#uop37nd}sS8p;>be*>`Hm{{R+c5AdF^|O
zL`~Njkq$ET9}M9H0O2%8^4a99Z?v)Rv!`oMo;2;;czAz&{2t2tBGf9&KO;N=MM;HY
zE}OCnPbm$)SOB+wdcsTxS}-V@m!UPofJEKm&RoQ0PMu9R;5GRdPsOigM^9uhr8N$*
z8ZjOARPCoDS-(+$ddhwt)f9cT_5iI>g;FeNeO3VFhEhJ6M6HRFD@uj6%gTEAG=2h?
zx+yZkhW$Cq`+22geU|Oiy=ghKJFZp(k&rWsj*n9i=fnp7W(tMQ0j^%b>0Brmzz;OV
zL9ZGA>h8SR<~1I9qUg_<$TWs%<KeTu0I8E*x_@xSD|q^MohjUvnTQ<yV|#<;I3MI~
ze?D4W2brymBDvB!AaU;?iwEF}aCxRvj2r3Tqg2AavOee6Nwph{o{584M4>f>aP8ZB
zTXt`9VD;{a5xGtm_XBof5Xc3GU76PVvF-C`r609kA^X2ep+n1U?VUfhvWKRQv&c&B
z)>OzP=*_tX>I+ugZCl?Gmg&yM&E57F&!!e{=vBP^cUpDV84wbBVD%42$`<rDl6!mk
z$mV@cnR1^8dv_qHSYGkVqdT4V|0A^dk7wfiztBbp=_UdIUa<ZzwCU6LcQu^yddl`Y
z_H)spZm@DBtHCCVRr<t5Q%DD{(aGj@nkb;RI^_i=jivLdDjt$b+D;_swUZTDGSKs7
zPtX(;ZkQ^LDfh_Q760*!CN_XcB2d^s;ip@;T@4*<hxX4QP0k;&_d1^|Qn6>>jf#;U
zE+?!U=Xi|XEWN@D2qV6fAZb|xR!@~|vI>PC^iVF|;TfZ<VoFyt_w^Odp{Nk%b%TLZ
z-x4OI(Rzl5=o$@C+-TZ=w@QOLpQ>F@{#g~)l1jnloCw9UU|?iOhmHBiC*0gt5<5}}
z5=^aiMg{l}$e!xXkgpLSiwA}ep#>~evhuO!EyT$V^O@Bkhggr$1gTSfx<u#O+7V2p
z@OD~yIy0myBJB>~MMA>FQuVqTwQ3ettVMGsXTp>$kpMYAd?vd3pm#C+ofbl@0A6wp
z3_|Y(xz1|@0rc-~ZW$YoR_1;ZFw$}QPgt#pR!(gU^}#y;T7`5vEmao>caD3TvmlX@
zK6`)Vhn<$;m)<C^tu@r&GlNli9Zc|okP#{2>KU+TC{iL)3PUf!QNpuES3MiYy&u6v
z${dYuzGx`+$$*Jkw05FkI1KEHffacP`xUa4)Ot17iu)q$M!6G$!?4d+-83;+ChIuF
z40tT&&?0G*>-%B;K*~HN1-k$OFxWd7h<O((P2wJXWVCQ8@>Yb5mjPNoijlN1aUxr=
z`(mq<o*l1-0M*(Og*I3_9D&na_-$0r`>d)G?UDJ5n9wWPo4^#=@@ygom=2?66sr<v
zkc7HhKHW8QC{=i#3E|W2;Z=OZdHQjdSG>|sj>pwQ9Vp^M8Xv9dLo{sPW%pW$;4ej4
z*BrhaziZ$U0XDpzCSN!>W@|tG=A~Hvo#W68I5A!%IuxP~hAo?IJ5{&c9Eo9zgrDs0
zhnc0a0fd;Vg802`oP^=3+1ZI5Cv^el8JcM+SttlwhJS*R)#Uh6KawQ=y|v3aRu7+u
z4(^ILMjPvooQ@WDdaNw0uZLz_^^f2jEY|pefgj7N-Y*C(WgbT*zoK!oIw(CA=9Eo4
z?KaH}{&kthRFQzd#FY|!(VMn0GTu(z2J<?-qgNfXb#jtcP{0yi$vkPlME|Yf8WmFK
z4o81F2n{&z>Ngsli6U&lI<xL5o!TSYh|Uz^v(z72V#iBFn#G)TW0AnXBZOC65*hAw
zDX;ocai?S7cSUfa$}<B1PfWcw_gw66Fd63=SKbsP43-8ECr)IfVDLH~P=at%7&kev
zR(1n-r0CH9{Jyv~c+1We^w_L$?T>el#zho%NX4}+BA|(=pixK<eU6bD8itiBhjpyl
z*zEF)U*x^`7BE4JWG3kLgBV?oGBkF@aTQ;56W^~VJ~KDKQWPH*Kt(Gb#M)pTn$XDc
z47@v7LW>|*n)R94Ayx#ZDnTA!+k~Z&4GDXd{fSBh;=yI|;UF^*Gm>UVJ{=qzJyM}`
zN~S)u;_BZUvFmdjp;oM`5oz;j`l^*n&QQ@w414NOM4bjnUiapn5XZ1@Q1i-Q29X<c
znClyQK5nE$7V)}2a$Sk=RSKLhoQ}UGrsnKNDp1X&>H25h#vgupAFy94OYte~jo?8T
zd*}eKJbNxrUx{sX``M}3nBIp(SddZ{J?$UTw*Z_qW6JjxX!_X2+-~Chqruj(i7jhk
zP|4`0uO8pk<Sfw48WQ_=^`I5?wCFM~_pzvFHH8z8OZUod)AXv?JgNV1o4J(4sEr%f
zU1;R;>#;<J9OLh7BdZ{p;qGlnDqXkt9O^DkvuBr2Pt+gkd>8qCQkto(aELOp&cpZq
z3dFs~?;FmGCq*8L#%wd^OSXhsyMio^iYA#MX#HYv=Zqzq_Hlk%C0ixu$prpgU{FG;
zZlf`PT#7PT!@=!#P-nk>r?>;j7d0B4z24dK<NCdd%j2WN#fizn`x`w=R}mOLxd}%+
zqeeL7rH%&}OoO7V?!P9<FLrb4DZ)!aDsk}xHE&4SswDOGneZwK9iJ^9%lpgLK<9wF
z!AX1|8ay5Ja-k2);35xYxRVv>cBYjN_4#{`R~DZ}5}pd4IC_6GI<7bP1*y#souZ0|
zK6H`h-@FC>N;+f8O2VG6%wt-oiFLuqXpfnQu7^&<^-uq6h3=>S_Hn;^m6`is{4{QJ
z)i?bTBN!XwQ<J>nE0@lYwQilj2=vpNwLZJAt*cV7=8q$qQ3sDbyxWj2yksu@Yf=nQ
zN<DVuN1EKxa&yhB+p14gj1aoE{pdo_wbq3FSKY78-%y}@wwH>+W}TfD9#2j;AB(A_
zLw<QQu3TG&TQ1H1RQsZ=%(6vU7%%&~a6HvyvDr_`KI29G+sTM578&WgDIpG#FWg0|
zzPEWzS<}hVMjiCf3kM;-!w+>-GIhd<`@igfe>5|wO2(N2+s!D3I3IsK+74_#F1X)h
z37#!g09}8dI!@GmpTrekBw#XP=nX7RWH}kQZ_j-JU^Ljpm+`c&TrBg3qBidrPlxtp
zapRtflpMKiFR`T@mA=)S)T@kCp~Ac0ObrUhz)VzzMS`7oq>2hIPFD2{#}3k)9I01M
zDj)ZImQ_joqMa|uULygOgDQdLRySm}A|7PK6@Ot1d#Q_VC(^p#Zx=5Bi1Xj9dgtdi
z*6>dz$Z*7-ZeEj2L?2##>xcDzf~7E^m%ac5cwKGzf<973qn};~aTqCw#u)wxl_AmT
z^(CwP6TRT!sa_QXe~X6srf~K-#1-+|3X(3@u~=(nwd<a<`D(YT9=s!t-uVLfYrkm6
z<Vj*k8vbFR(S$87fl;Sr_V7*6G?K15fbR5XU=+~t#&TG)`<QKImgA)YmXN^{id~ou
zOL*AT*f68Xl6Nq2m_`R8vxT!5FhbL31tZ}V!0$9ImCdtori}LY*-~FupP^Xn)MoSr
zJ+V&hPcU<#J@;T{GHmI!gnL7oD1}Wfe$?5=O2Z!%)NL2LI?qN)S6fCy1p_JFcc}uP
zv{VHRx{VFq78kK_lcm<7z^A^xu3G2chB-gCJhmAPZqX**HU7H(O+XwZXQhlZz-jK*
zqa~e{d!cBkOzmr`@O0TSlqOnGeChGG)8wVl`9zM7?I`p`Coi;zqceDIW(6k9J)Z;|
zPIce-zOjEW7xNkX^OUB!Xb~`-$n<8Tc`gw?sk!GyjY%fW=O$Y@l?g?#dk&wfs;JNb
zoMgqRmU)y5>KN?t-6NkOT@geyN}mCknd`q$qfhfx;9Tc;M)hJa8VKR9)C$DGk${p(
zII&;QxZAJgld;OytF3+yhUh%KxT2OS<BuZ)x;NpU`sG;ME^e%OIrP7)rV=z#UX!pL
zW@SgkH!_tir)E>U?{quN{$lb8Y>it+)9*n5Z8PwDJIx9>sFW8tu8>od-YbdX5?v6!
z%=3NkY$yKSj6is!TOSJ&gl_Bf`^SqoHetMfdd0K|w34Uv4P|?4^m<(Fr61GnTlf+7
z2BrG7->cCPLR1MktXDL}@qvajmBqyoK-Z|NHYu5n(}mzJ<?LHHS%H_<XHS20OfW`|
zt2Vz&I2vX<3Mwe&O|{#PSMue2?+?BgYpH*885mjOK%!+Cxsf>pK|re~>Kc1)GQogq
zG#HHjiaGT^Uia#&=occ)IulDC$w=spu;zEOtDicJMwh{tT3<3P9gv7-Q;wOR-Oh4m
zJPQ<!W8T^D?$DfS?r!?Ds7vx7G<6!Y-o|>4DON>U8Th}2tpqYY1Nq4U7OV#$W+Xgc
zw_nO&{Qzvhh-qZ591UKWJ*6*!sHZ|_e>d0X_J*Jkqt*g_x1eFJlu=bBE@wO9&%4ZP
zJxL_r`;Iu3m)L%iA}iDsz^d!(_Ii^h>!lxBtmBIvgpa}6X+;caio^j5Ji#cHXH{<M
z;AiaoC|cd%^5K?<m^lN6C+>s>yO0-2Q1kZg7Wvf4p3gm}l0mOfV|&qj`~6L}Zp(X|
z&lT-Jab-K8Fd|g_tReprugdGkNHAdPI&7+>J|?nN>*>SGb3+F(Uk>^Ef)I_3ET2ZN
zXZK<<zlqCIGGY&atLixjKY6^Uv8%+@7tp(p!<ejB`f!_`KwGrpb05C*yGwJyTiM{P
z>T5-d>f?us*x0T<qGv9Uyx>jB^d?wt-RE?&E4L1R6neUiW>mo%odultu6<=)p?E2Y
zlz55EG>T02Iyy3|z80k&4M0ZD?#zN@IN#hy4FE8g`k$-23soI-8-COrjM}qrvp)|;
z4)k;STB85@$GN^Xj`voW4+#)aJ0E0p&8yI8<ir+-v*|bQ^~cAs7ksul9I>oZ)z`5C
zL-m;xZNfP^k83d|?^+q{&cesg-r&*Dx^p<+9dTQoYnASpjhChBSA;3xH_?F%7%PYM
zQYwX>^8?Z95|+uwCyeup3tK?jX4or+q=B83j6;u;0wQk1%{j*g$a#1W?_T$2mP~Vo
z$>0{@+EFugs8|{qi5!v4m>lEaw%x~FU3J8NH`Im(Pqf@#1?!`wMRu`q=<H-gXR8FE
z74T0=ZN6W+zBBpVRUvx1ZJ<o1lIcin>_MQ&hjr)&eEKoYrOA>?0w7#{hTjc5G1I7)
z(0iacs!A!7je^GPN<%F_<~?@dRm$OTsiY)Fk$|AsttwGj0`xRsK>n{y5ZBwWc@m%?
zMI-0^Z&C)81;y1`F6(2GMv|3ed){n(+$`RpBZ>Nf=Eoe_r#(5lQwnTfHG;3dc-}h1
zzKGQhQa7$UW)8n61a428eQztMN0jFR%P0M^RW?2P#XinkNi1$r1|mrf@{Sh(Vs(X|
zoQxJ?PD+11dEJTm7jvwQdXpslKXOdib3g3=a?CP2w`Bkz*#2LRIc4CNn5C8al<jf+
z&~fC;u-W&D29h`+Wkw{9{_gE+mDJ3XRpSTkPhL81$o2Aa!NR@uALflFS;UQlQ49uI
zXh1vV-=y%Cru2CdzpyeJz5&s+NiNgP`JQjw9kts$UAHju{1X0vlz&vZmr;7uk#Kf5
za<g>Sq;&l%MFM09hSLfIhPPoFHqB*1CeR)9am7do^e)P>T;cu?#nJMGzQ5x$3`)Dk
zRY@lo^l%NTq7WMeo)%&^%cCFL<mnY~Iu5R*EZ>Ak`N+dv#C#XxkC7ASDXHMGjmy*o
zfF=_>TKZa=RXG5cxjFUCYb$BjT3A-3sy$u^GFTC_02>+jxXvF_$Z@fFGe7#gi0rx)
zEn{?ks0nc2gOqF?orc!67+2)vJ1Phx8ur=&2{4sKHLYCgWOxcX)c7bMpM1ILA?I-F
z#BjY5fZaHA0#ezs9I8z48IZ6Cg(am29U<(-39;m1Ek<fN#hCn!1kZ=IB+5|^Km(yD
z4e?!4lxaU&pS=`XCdCT10Krd}R$rwWyY_t7-UuE`jbm*kdoZAyO~QT<Ucn*qqC)9i
zHH^_7)+4aIi7q%G06rl35#XVtBLx9SwDKumE4)wJ>dw0_ygM${zXI&>t1k$UOqr5M
z2$fw1&vm}wyQafOh>lfgC5WMDKLU^%LM-dLo(_I3ymzi*74>}eMs;zWs1B=0+KV1p
z6x1DC%`F9>A#sU+qOHj@oA+TH1HEEyo@vX+%56ETH+tnJ(F07TjvDcMN82`LMT+)>
z??6E7;N_V%Jg_-j;9;L2C{h@C)ue9fUw7_eU3<oHxCB@VZ*hI!CU<lwvz-Jth}=U3
zi345}tRAjGXl_DmDkNphU|I~pfk=tlhQpM#L7g-7r{=Wo-P;W>wFqe>D^>a7d?1*V
zYmClF2c^FAADQ8^+Ai&Oh2a;9K#)45S3Fb-3PB>I_`vVbQY|rM6{9nxN9EP=s3{A2
zE&x(7v5-8dKp!WSV*DqcY%W<-yW&#*$cQ97!v5Ho?0x9##T)Ota;jlNb~u8ITeBJ;
z)dGjxFUCukZ!Z?%m~a@cR_G!T%B=juYmGo#_3F}ZYh=I7_1mlBKQg($X(r+NCF9cf
z%IX#`EDa$UUVf_sZkkD~c$k|pSrI%Jx)GjSj_<j%gMS<VA+|XbszpTDP^M&+!k@U=
z{l2&l{mp!-0Ctr!eaSud?T!_+Ou<`fu%6V|JC;bEA2rD*E1?Js8s|1uS9CheEL}9a
zhh>dWU4`2lbuPu1mcUQ5SEI6#kXSr}rYQxMvPd<ldB{50nBT~$TA-`h;|xhHE1<x{
zxQ73Y#6&{sBuG)wdms#)s`6N@wAKM4W8E4#mLypVED{tm6^qxcx6cWETlCxfaN158
z0AUC!D@Jd%ojN#1)tl1OFqVW$$Z|-OmXFDuMalif>RG0gNYXY%3i<q*n3tcw2aGDk
z>nO|`jQPy{T*1^EFu0uXP2-Mbzh7eQ<GujptqGe-0q!V&b7&9pi0Yo`ZPiT_SvuHY
zFmPYJQhvX7F!}BcFFP8O6>F|L4v(ZAN+oZKx@lEd#rj(I7rI(oXXm_2=0jEamwZoa
zc=S?G@JW4LPFH~^qANO4^I#v`(%5FQL_y?t%ZT}d6WEho%G<X#DUx`s^-1Ig<8}2{
zVRk!14v`9|B{0M#XujjQ;-e1;vSy@fF;L`{mSUKt1#yuN2_KYB=T=0*(;W~PB_}0P
z&~*^}4J!f5Y?<G*!PCtYE1#$u6Je7soBS(wE?##=NX@_P<l+*kfZ{rP8TC^R(4(06
zsfNpBwWgeqUv#y$Oor_V&e<|oef!N|dXb}zDH0?y0)O7}-Ja39CxRExlpt`wXORD1
z<JocFPto>rS#rMk=_P&vd@gs7!7SxxpG#fT_pc~!s(y;(dWN-WngL);<Dgb&x!yL2
z`&=uS%~e~jEs^)9tmYH>OXLuo53lSfgjA&P8`3x)4@I!H3B?*uj<JkTSn?uk*@EJ)
zP25>+a+k$c-#h!7>R`N4PHV=&_k!)IO(wd27WEwsrmeljXO%Fll}*1*%S3~CV5Xvq
z`@*1nI31A`aXjIXkzLjXai!S3xT0+zH?*21l&=W=9A5$0$!bX?llOx=o#_r3eWH}s
z!?NYbQ4x{wlCKAq$_Nas<#7rmso9skRhGgw8Q4)Iv$K*}D!(eaeR1>Qbbss>3;8?T
zhJVMIP{)uaph9urGIWWz$(?(bSP2Re4^6*HVptxc=<`k__rCrnpfT$XUK(yPRUuYx
zn@!w!${`B84J^7)Qlp|irNs(~wZEdO(L#$9fW&E$kOl*xq&b99y58M;`+OqFqdQuJ
zFL8d1Q&3k1(<0bm4Z}a{d)EUjCA`cER~V!weO&1v3dX&@9p@L?S$<401;3!SPF}@X
zZ~3zvcC#p|*%z@_J5-hf*4}Z|q@-6te-sw|Dk*TJF<xvU7Kff7y<{<p+hPZr<KyG;
zd=YBY`5(P=@<)Ce`OXAWhYxS}l%5hqVxu6Th6Qz7`Fm^{ow%iZ4@3W^WJ=(ZpFX&C
zn)Btd-SyI2S>Z!O#sT9|``?dSQ*V$yE{3vDe5s85?-yoK!K`faJ$mp+(m}`h`b4g3
zOjXfD=P_D{z2l7|217+#q>oct#r5N#vP0Gt{=<W$bU$J4N+)O`ly6PGaBtz;oL+H#
z_BYPG*u{q{4xVQdO2QmOTX(<U8nr&M=!%YNFE#4nDVC7Y<|i2#MM8VsUjm+vBJ-I2
zD2Vv^)Rm^c6VRT<UgX;Bl2dsetaqJ0Pb7_oSF_pvRrld|L3JbfRB!P82vGAfxC3#3
z!J@~~W9Ca;NP#MoYll#^cJ;^8xri#GC*~dh5re0}nz_H-(PKa7J=DES^AxI@T-Msm
zYyV<}t-VdKkU+#&e!5@k+~HRJ=u)P-A**5J%Xz!;?ctxd&ZD`JXs%B9bvh?H;`^y1
zudYL+_eawK<@u+Bvu4IBBXV_{;__D8THSLsn@voV|6V=KwsNiM`xF%BHs`NJ#!whp
zKuku30g}r4wFf7-fdZ2oU!JQzytXuJ(T{HrY<@8KYpZ(^+aAc_N80p(CFrY~5=7k}
zwsRI-Ms4z$+(%k$KH|SR+VAT+Y8SZv5i@(WzjAuyG#YihpS`diECzxfeGHg=d=5lP
zc-;TP)#!z!slk~Q^Xxk&bTq{hQe&AB(8T#VK9D9DxXtN6h6U^~UpCzzl34c*vQXTe
zyesa=fu&&#{cAWlO{khbH+eSI=v*u*u>A4p=Cx4HBhls4rJ(5d2kDf{qp$=5rb;6Z
z2D;oPN?_>ktWaM4R8)oP&)qjO&iCS!gXYIpt#%XgmICNV=3jgun^{&@xi<C|Xge>p
zz8caL19IV0XdxAXQw+-Fv`RsoJ<Rz6r7bFz5BEg_qpeTEf1WYNz(H2caL?ZtVJM&0
zWl9VYZwpZ{cQ-~X=yRaJ>2<laH6)|^s0^4k&-2Uq9Hsl%YoqSp{<MEHiH{CF1|wz7
zQbh2mau~&<!Im_I2L~ddQWoC2sA0Y771IrS&bqDkfA;=Us=+Y(^Uu}^Y@7;%t2D<y
znc^A*o_sMi?Knzx)?fXXg`Gw26cxqxhpt2)>NDp{b<a24lxt@#&X#;H#x62f<R1AS
z;c*Yz*;AO3Y~oU(QJJw{^nkHB-`RQ@WO&}l&#h;OqA~rdL@C~X<&Re@o;*GkbZvlZ
z(zw>}JP_1PAAAA<;POz?_x3*ifwAq5QZdjbLUCV!LPI$>;&ZYxo#i)t@OG0URyGQt
zmO?$Vx7YUXFG*nSfYxHJ-@bPVtdyK92_{9xfTRQhHgOYPx}ARXZm~7psM9;aSdNa(
zOp9!SmU|hx?<<R42aRsEo|P4s+oXx%LupZtVrdyem-P2N3$7pzH1CiEcDRFR%mYY(
zq1pNIu~Gsr8FrnYyY>8zAKt`2Y|%2+uJf`HqvM%|WhPMa(*k~t(?4b1B3=-3p5l4v
zdUw^CHPo)Wj;~@Oj_I&);B{xG8fF9_`!Ce=QIt%i03JE!zfkyZ>k(8qy#l$KSZa=W
z!Z4Bh?YI_2ZiALz+>12v2&15P@kkz0z@9_2sqyOvQXVavNC<%-Yp!wKUa8UZv?edb
zK>_xy9q9o?*TI-Lz$YW;0O9F<+w1?}`8QR^ZFO!(1qE1abds<Nety2l@#ERhyjG_6
z0R5fI^VkE1`W-!LeOY*QO<wh#n_L!)!SRt;8F4IEj8~OL%_jrTlU_D^{4dR3i|6IC
zj`2ce29Lm`iLwe@AgEf~Y=eb+s6^iz34lhEzgnUBW;I7_FsrvZV-VQF%|3Tkr{-a_
z4wh)&&5Gz0%0r=iL0sTlVZ#BbM(UgT=1)(su`ThnOZN7`R(-y`ywQ7rg6VKB<h0`<
z($8;gom5IO?~U%ho(kJDnhc9GgaYCX!z(hl0oE3|b-Go&pS+p;x<!G%e<M-r-xi?`
ztiHADl5`E&3gLG;Sl|n!h}&WJI-^xbriDXFjB$wYe0F|nTg(ciPkhL-e>>eir4lZy
z?R0IX-ms63Pgkch3j+GsV{y8m82G9Ef2ReL-<0V$i23?#6&>>%##hzq-`N#kU;28C
z^ZKLyxO@+;tVEyJ|CIigC|!?-%W9d~>F`+4ix@zt3KaQazchFSg1z`a22YUAR?E`H
z>bHw$2aP2cCHcv|KH>VLV3-%>^7iwvRgv;VrN%sTKuLwGDj5eaNG{e~>qtZZ1<1Qu
zh{u4x#S{Cs{)+@?Q}y$^H$*50|9ecu!-e6ISn>+(Q~TQX-I`D<$oBV5jWP0xJhf9F
z5JY-F9Ky0fVC{w4hDLjOn{v5vwxAHRnpNp9J}^YM7lcp^zm<ixg9wPzv?W#f&V4A)
z6{+XitM*C?S_sQq!Izz)uMf5D9hEUeYzwVIM)mgZ<haag{zBQ&-zd<I?>Wqf<sOfC
z)ap83mz1ILO}D)F$tAw5r+TE7e=WZL>#!`=8q`NC3_j;{n)lwyCJ`&=HA)oVU^Ytr
zR_oFGNHO3(U~BaHg+R^W+=h_?F*22DzIc{?i4U5~>sPgMNd?rv>42$O-0#1;t~wbn
zkpG$uLxUqCdB~*MKQZc<H14KLe1#EQJb2X;>a>aRRB1x4F4VV%k(rJcB2GK}OWJ&4
z>&v3OshD&pvh?aMjj{Tp)n{-f;Whlgkb)Ug`(3u@qGRiq$T&s6>Z=5ZVjjh+?(3|N
zm(r(np-}5S(s?o^mwBI^HHMdPwbzLEYw+`c_PPEetHLzBI{Dx42f7jWuL|6*LURH%
z2f26H1fGlrI_oxiP5V7DGBTr5%9dWc{~H0Vix1^+2O-0&8mo3nxV2?vpVNj%<=SHR
zEhDVXa_klCAc6hPtLrHP`HhQ3nWXzz-g^2%jvPLZx0-&f1UuhV*xHm<vqR7kgvb@D
z%*BF=B#8|IjN<*m)_e5KjQ5DjmRUa<V&Q1K=op+|N#fpmNpu(=lOTYrscA+gUPB{|
zql;uiJI>oo=64D{=)l<2#T}#g<nQsDkH#YZO(>~NS-wj&V<F1`y>e0|CItlwLFvvz
zA(Qm}pys9|T{u(w!H!6q$G_>qpidr&z50|D_iJ)B>}uYd;!x7&egTnk>q}2dIl(Ha
zZ0s)Fwtx3`MO1<JlLFXn+#rIp)v3{pNbU@L#x0*w1-IMjO(T2i&T<0<N~*^JB|p$X
zrHgwWmb4v|0r?L1W2m2>8vbcfbCee!Rw~BVSP(M`Jd`(ISarU2HNGTCe}ozz-hy5-
zriF--@{foJW{O@MJ!>Y0h^iBH(POkCqtUpV{+rPHK!}+UCvNg)83UF#qKv}(h?N*6
zzfsF49xv?+=zh5*h2(tv5uuOdAyKIA2IjQGAp)!R!|Rnd0;lt0gQl(dpCMkz-DC4G
zsgZt;RAsODR|?O_^}+X>m$o^ASd?JMm(M>8v$_`at!-cTGW=WaFs2YLooK?M%=g?m
zi;kAQ%4~Ic%a0urh5^+W6)?IHkWpu$VNP9T(YmG!^1+3Vao6LRKXiD8fABJQx10d|
z+&P00ij#RLc`&R>B3miI87lFV(}Ra5OC_C?Fr~U)&p{>@p11+Fbg@8no*(Z}5UPNN
zP4U9N3kT~m&TF4vE$2Tp4i89<BVIBl5r;N)c5bpFKL`PUL8CGYko+5@VBdbdxg|nf
zSKTqc-00o;3UB@UUM7{Fp+aaR5JXxC4Ssmg3Lr{bWP&8$*9qbS24}u?f%+Hxpg&|&
zy}o}Id(8~=fvGt*O~~YIE~x8`71GoSf6Z=1AQO8@AMhk*1UvODVsaPxvoUCZ<k1gv
zd`VI1*c@w#0MECh6%fvn){L*}LkJ^K{R@Bp0cxroqL4VhhC1YN+X0iTuEv`LiU;6-
zba|0v1@_^LNF)QUQ}%J_VV<N2eI-6*$@02n#^iob$V=P2T=KqX04FFclG-tHx_osA
zS{atQ_AOb8#|8BK-|TOLo;3U{0KwEgl<p?Eh`b-oeAo))i*_>L8~gf>wcYO6I4kn{
ze9LK?3ICJM`wlYaYMlfIhrp1#tOFGLIG3B7H(xq=Ca+VjzD>qtrE}>|1xRRgN@C#6
zCMi@IyRYC<9gOT~?V#%ztT^Aa-}`(h;a1@=u+H*5Ta;S7q2e|HGfG5$|1s!h-s$}d
zIidQ=zb4S=5trD`ZOR#n`|kfi55k}O;r~Yu_K2Dd0su?Y|LDO(f8R7Ct<+<e%J$J_
zNt}0ZFcOU!egSP<hBg^C5taF$IP^;Ya)Y(fzkW~_OCYDA<7%lT*J+`FJBr|D{u8*S
zs&dJ`k%@^}?uVr#nmP;8@03K)PgSj}Wsgha{Rg*^O3k7S7p<i2E4NNeul=0XQ9Xz1
z_HAh&lnsembYm1(Zw%)~enQVjFWGJH-kWXCf4;<Ad5Z&TRy!5a1}s}IuDb(`nYsX2
zGd2j3Tpy58!SQxdm8mPG6^aPe#j4VU@b2*ER>jtJ3%sN%X5u6nBZiPMp%>)9MNx7X
z^Tc2$X-UGH%{SxqxepH`xAhA#HB0o@zf41QNKI3ih`S5%zbj|)n|Kf9e#-YI*r0_g
z*OM_o5XN7TN{V<V&+Q0;&`p!?JwHiE^FhX!FmFaajS4>{y9<7L5r(AruoCx!6`NC?
zsbm&|B^3&|j(oEiMH`RMI{yJ3(9V*`lJGL!;Rb!5A(*}m{1t=#8M|9I*c&tQF&I4P
zec8M)^Lk}A0hQ;!XCPrSbO|cN8_C6XGD-&i3SXrSVxa_zLKpM>i!$6p8M|CzQsL0r
zdtyZ3!Q&ziYmLI`PpOrK=R0}PQ8<79!}>CmJ&Y<1tKNjKIpoPhkbG!!^X>D%8E|Ya
zgt1O@+T-zFX09GGJi5<F-In$rCh`HUH0Q)~eRGlp$2QD`H%PEsOInLYDr$O}lSv9R
zi(Q*A#r&@{Kj*nLevA8FiVCBev#TQ!VuFd1rgRqnz{_KVi_)ec3l>UOPzz&3T}Wh(
zzegtAM>~4DKMPD_V(<wAT}sK{KbPnqVaHz>@b$QOyg6Zk(*7f?l-Hu+>yc@5)cl0I
z7}#?rmVwTYRz^XN8AV&Ti`Cjr9&Ijvf4RT?vafd8iRZqdiS`91PgpM+KpX7#<^-If
zWEpV1Z8c!5#oqJE4H|bdr&te$5{e%JqZzoby|MRE@-NNZFW(~vi(g(hsWCo&o0Ekf
zBq;r?PAKQzr41A)k%$!U$G^$&Tn;?*C=~H0$nT!ygyAiAa9r8#sR>nVHFK(uNYgn6
zD`v$ws7<z&HdJ?Vcy=R%l}YUFH=cY3vJ~acbNPB=)}sa1kz=lrRhdZ5CHX{8pJx4g
zJaXj{Le#`U-dVvVKt+qFee68p%WVgLb%L%Pk(47QeigjMMWoCB6c-0aO58=+CYOog
z6b_J`vepRCFZi7&?|-h2*`IOY_)(N(#%qmF)YA3r17QmB5BiBagZa?{Ik(wj1$2rl
zB$>}KamU$XW-e=-G-Dbe>VK1Y<XjWYb!6SQnB~qJe|!P(uf!0L3`ZojsGuOT*I9-=
z6Srwy*pV7O#dw;zz}i5;^}7+P<JP-rM*G=_+yJIY>UqJKowk+DVI3pd%K@*dcu-je
zgzy&$4?6aIePj^DIEaAj#vnK&5sBoNELGD<Ge`Wi+2r5M#bLMc4$C8hpL?n67l(Wf
z5=3F%m_+CRD5#|B8pl}A{i+PCbZ>2H&Pjn}5ZsITTsTA1{=8^cd%JCu^8?+m<f86u
zSYexLw4xJQM0|nCYrIAQ6~JS2Bd6f}r4*wPsj~FDj0#MT!u*LQcx}?FBFYZ)g2nOY
zoh}yc;{8EqJ`jQ@9~{orwHndsIyY{^m97H+TOCW^q>JEYzha(9RwYVo!FuC1eESl7
z9~1NN+CjAQ<QXTj5&kc+E|$Kz?$%mmZgsk8oy2+mD=-$N34ilh)tf%%FQ57zXt(<7
zJ!6otQbp#w!@-e(2T+|2s|@eYsFt2pJ3b0Z+&()@Huyvv;@51+Xy4wqfr^fcsMjI!
zQ8eQa)DnVD|G9%#DUOVUI_ZgXvdG5YF}!k-T6<}EDlo{Fe_7)_Y$EduU!fdGl4Dn#
z%v%r#-Pr8Wz$7EZRt0%ML20Y@qDX6aKKdyA51;m0BAh=Q71kQIJ+z;FOQWeisW^s?
zeP@$?+R35dyHLVGW?~{*p7_rYrWY{`o5_sB{uxygL^(Km78vZOS1oCxO_$R)xs*fT
z*7r|YevaWQ>-KNQTTQfRhBz54uXVrX;Ub?K`P_CtGzvc~h=@G{t)sI;vEErLkrkp6
zN1yyW01u{uYwKYk(a6Qr=4bYU)U+{j?pw1o?dv3()053sm7q<yD$Mb7+*@D1vfq9)
z%eVLbhle$F*5U+xF3ahbR!ZdGa(}|(s|l8;3aGm}x$pUP>K&V0IJ@U#YU(~9N^ios
zGHNy1f<J7B%uh?oQZQwtWh$q}U-q39m0zsXka^UWN0%UJ9EgXoWYt;{k>AL%8~6{N
zZ8ex1%xdgK5gQ9#H9!kk*D>DSX)w$3^`ziGI)ER|ui{jmsvh}66sMv*%;S(Ztl_sK
zCO(IY8}AASt%q_4G%Vx~Nmw9!rsloupS`O)Zf=gVuGaE#6C?s+ai|OPxb+(a@NmGV
z`!!_Yn5z~y@fbs5i&yDl511Nh$Nc!QF|g;aTv~G7VaxGmK{=&%-1X7Pr2Qm@tx4k;
z8TEay>^nSG?6>uhicx{Q-_GH|4tdMMXtxVqkGPkTN&Rt)$w%M2mTni~7EJ52+u_Nj
zxkK6Y%rwQ=bkLsA(*ga!NF(vnukh`bzg=_zFW*VU&B~rCXbC&>6s^+YkxSf>yo=Yg
z4(CFho<FyO^_p6v1Vz@o${bvxnqO^HE}$I|BeT9gzO#ARSh%Q0<(RDDSGz>X^lWof
z(tkNd9z*4jv|O?nLG}#S*DYMCOk}ix>fF_t&bxc1X<f^2WR`V$mfSRskYK^DeB)FJ
z@ky`XX{#1N<-SZ~vR%}XwsDc7nBT;Vnw##LZ)Gu!Q2sP@C@B<9gcg5@Bh0r3rZ%q~
zI-Qr*RBy-(M5m<Vyby{4yg0naZcnuD#>6s*|6}Ew4T<^ClPI*8l+GES6c3D5-Ps`Y
z-7F|+FvTnZKgX_r%6PH?j1-G1#!pIuSM3YckGnA?5nt7MH93F$B{g-Oj6ETs$l#}z
zqxtjps|=PJh=3;7MMA*=>)YJHk(A1Cx*Dw&o-O&3skJo)Ck$qIkqJELn16h@ET4I#
zM2-b`X>U9NNr#Paq=rZI-tO%4*({Uj6y;p|F<aZQzxTH}x_T~U1i=m2BkcYZ(_{`a
zwEBw4_DHdjWQ4ZNeyb%5(eET+c!)1+w(46)o2C^Z|NV07T`j515a1Q}G(1Du%ImmJ
z5ixfYl^dY*4^^tHtkor7yi-Ae0W}yVS>;e;-ro<cAr^;pks@2*U}tV-S(8JiSTNOs
zuBev%nr6HG68^XPf*X1AE<{3nPuw!3BCPzamh_ji>rJD<>52h%836!Oa>6k^Y%pFl
zChjI369rNz&LyM;L#Wb{(n3zEAkNvn`riJN{5y!1Ql?%;9eMg{m0_L`@try@)Hy{|
zGlmdFz7VL^P?|UY#?|-nE6w@6_3SkA<_+0kDHcdN)Mm}TO6M#86zz@Y&3pt)oOSRT
z88ogadn!;q`Q#yiT%q_{Hw?W1lLr11KF1(5B8#b22|Guj7k($7N!Wr>*4|r$JC-4V
ztc?ktF9_|y5Qt6LW;zE$tVw&wGR>MaGp(&R-32$#d@VinbRDkp({`8VZ*m%Wf;-b`
znGiYZQ4ra0BeE^m@mA$CgfY_WUZ20?S#Q*+n0NhY^c)!$pJt19z(+PM>YaIQOrvb9
zJthe?!ul8Zj`FGB8JFKX@N9R_me}L5UY1XAWH>7C8tfHdT*T~W)=|1!Ijp2)MjB4=
zHSOiK+zXXjJ&Rrky5NM$ChH3&TUD>IF%`~>6ONVuWg*yAw2oO1jb3o|uNSoUkTS7z
zGVkL(mChQg+!?vErw{z>i0!#yOiyHB?@6q@*kI6UY#n;osL(o;@FnoXon+7pP{vo&
zo{~(QmxN7)%z??mWA6Ej6b8{;j6Qlh<)xcG;l8O)Sr8Mhdsmn4oXJ(K!sC;pHWdik
zq`+NlTAS;hvFG?Pv=>ygtJ_+|i;bG=@nz}b_Lik0*HF4|)%KdX2p#`zWFiwcJ|7B0
zRZFhstEZ~ddfay2Pl`1wvO>_?FO+xFHR*u|ECKl}{_F=h9UqQQiyM%C9kHLoWikRA
z88yXUzC>aFGT5<EXVbxeeqCoaZ3s19vp5E=`%lh1@`tu?QqSu5RSx$*=2a_039v6*
zG2k5!w><_8cmE$>Ul|Zb(}X#TED+q?g9LX7?oM!bcTI3x+}&M5a1ZV-3GNmkBtUR?
zyM4dA-}k$xXS#Yyo|3M97RZ|Lzx#DwR+dz1mVs<e?L#_jmUNU~cjxzd%-DZTh<)Bv
zz5^Ha7)XIvqe!T+Xn7eF$9Ni4ScxBS^VQxrsa))j8j4JF=Sa41&$7E(Qs9MBnX>cl
zUXH^^*Yq&V&5jsX1&igHWmYhb3Q^lf(wM5QBo)mJ+jou&<o;(v_ET>;`EKZG$h)qN
zLrEJH&G@FYR4<4jk;ZMmV^cVa4&HsgbyqbOwA|TD8K9@!8!EMgug1~=g>^{c^Si`T
zg>^Ux*Qe!OSfA>&+?t;Zd#oECZdRFCm1HjDRI=VSPWK!r<sx^)?zXEgdS?e4q66G`
zUAM!6pH}mSV{{`jBoZ<j(ewvaw3+#GT1$%0q4fw1vi>{#*>iv7kQhh^s2h6!-VWQp
z`3p)Fr;GsZJH|eLvhcHG+d~j*<ZxW=Bm*X*IeB=0$K~Vzfb=|_ebnQ&$0q0J^|wv7
z$!YHJDa=_;MU!|o%0U^JGdM^`g&8<3x<PTrJ>~a5_pRsiuQ}0qQbY<|u4;J3bg!Mx
zf=6a(4+1Jp9kLb-k!MLbSh<}=@YW7a(i71u^p#qwmPPcH57Z7VyNxHKlZNeIPON*~
zC$nQXj6S(0_41v@^!_vR4o0P%fM3$t8G^4(nVYp=_Qz0Q!m^rFWkGYYX+mRTS(twI
z47@$=<@)%@@}Y4v24lA5lmv`{jY0pr3zeDAQXfw<ohv#CoH2lrWn07XlKJ(c+1lk*
zTtc3o_kOQ4`7>lo-(k8V>(znp!5*f2(#ngBowC+jbWv<vF}+7rWqK)d<><lF;QQky
zY%Ndyr{|weAFr4=_MBk!x^k#?zEcr%vUs(?fA$2I*CTuf>BrQ!6J{OEC*}#G(q@EI
z%5M^Fwzwa48hyVHcdpY92z!}`&47niT3fv{wsA(I=@?7&&badtqjiSG_m0G_lU(@s
zM@*Auj3B=9^550^v2M%^^Vb_xE~a#2CcO3q)ypvADZZ%8-a$oXmdlh+elR6q<w<S{
z=XE~V(R;y-36#>^t9m6R#GK1*Hdr3G8yI)AN|h9({;ZA8D3=U8>!-`Kp9l=u&}6Oj
z07^G-3g@!l>CE@1$xce7uTWvo&m}YgUida@ZiOOBRFY)5EA-=2_(vi`HNEh&SRS91
z#ITBBegUy*GG8tA1)00`SnrxDKJ@$zPV#qRfH2C(F6_E~_Kj%1zweFvGT+y~KVWC0
zZ!3WiSw;V8Yxxs~uPpTE&Hs0T9uvn&jfHAaRbPnXg@Us_Uk>A?k);8l#fhshR-}EQ
zw)*0F?C-Wi^0+0k&sy5ry3&70?1r35;@yH2Xk;Df(j&Z|*4p+qEU=BG{CUV-j7dZ;
zm+ptAb5}TsU6&Zt#l51;%Rk@z?fFF&1D6=tMmYJPIDfqtGjDu$q-)#$^;m4i4AbBr
zLuQ(`aQ($Cjs2_K<G-8Q!&f6s9`HjS2KKifJ43-^ZL%if0p?b}Kc7g>h-;e;P5TTG
z7S3pHyUDCVB}Z4=Iy<;G=FwcHQ0^14I{scwROKn}%MNS%`EJUax6Fd^cZxZmTZGxf
z-xiuQb&!VJ696(bMH!{dAohdQ5*@x7fBl3su=jCyy-xQ^8S4s0J5B`E#yIi2G;VTw
zxbnuY%IIbkdVc^|TWXEFf5c`;KGgg7t(C>Eo6;YsB)rHpV9l;Xc3bMm4%8ueyZK>>
z?$Gskh|EFmpnrZ;n!cA(wI~}Ek-)l?0K%72b$n8&3plxX5(3|Pf*4X$CIR5A=O%Z4
zrE_{E_C*0RY$#x7W7D>>Gt%KZt?*3_x%YJ#m#MdobS58CVPOl;KipPk#D#I~*xj!8
zlX$cl_YZy2+`V|+vtf)GLiG(gOrfotKAv$|XX9Wz6C&L|aGF@Eyyiak1TCL>;ed4V
zZr8tXU$4DXREnxhPTL+|x2km-Z|l0QGQ@A%DV$Mp$gn9<5#d;c$JP!u!|-858@~HX
z+UK!>=}Yzlj03IYTE=@QYdhr7j^7V?a<`^`@Oe5R54;{02kjMqwWbH|%WrYQ6&|ZI
zkg$Vbkws^FZ={aB9#?rmeYnI{39l&1ghe`V_%TvFFNfTo3zc8A43f^kA5(CuzGV&k
z3BpQ^#Hq%A->b`2Z2xKOw0gg~`%D3O-;1snq+S(y__tkdF>Dn|?;VBem)R3-kw-Hj
zqgp9ThNS1m&&#<50>_c$Wkrg`La8EVV0H<~ZAM%T<IV6NF{~B0cj|v%Mo8n8+yB~c
zZDp;!Gv93Pr0LyoThbhQ{>YPhH_Mj*7uHB~`H7cY`l8Co@Odmgi7P6T4+fJf`h_ky
zH?P#lf+LFDq9)Gnf}dP-OE~i$fP7K|Y~0#q%=Ue2xFsd!mx4opA(V2e(<7O)@Hnpr
z&jj-$bD@=svNFuO+hhbT?9lIJ`xAr!MBLQij$4PQTBqywC)R;C)#DQdex|D~65ORx
zf4Eh5$sQ`8vanN6?6)DwV3(xuExG6D%DN{z3kpc{%o=lrDmSgF<Ln!a^4kAR9W6O3
zVJU&V2j^s5oF6s=;{I66!MPgOX|?o3=1mJlI4TQ9)g;`Q96gdb1Rf@o_grHw_$D?}
z3_=F>VPLTW$$;v$F7FMs?;63W@-!d5;7<IoUlzpaY!j+&Cl7x}MH(r`Ppm|41WP_k
z1ETwtrUz_JSJh=362Q=a-}|v_#RYQZsnr5L(b$A%>;_Ngr`yH|UZ@jOx}dt|h>uxl
z7#4g$pYdlASy=~Hf4-%=j-hhkkfuhr@GoM0OTdZPE9je!phklVsQA=Lq<Bw&S`?}n
zpo;Ocwv0D+blbg9M4rEW;&<|BJ0scK!!#a2dPlCZ$F;xszXlIMf7U97soFMFZ_j#f
zs=rG8ZEV{EaRuB}Rc6i*kROH9N3%TN&PBX&r6PZ^(r>i?`ugL{p9Ec_&CMhw&xn<Q
zQ1SlJGl=gJhKm2COdBu$)1#7NuBEyNmP)Xn{Y5tVsOFn1F&p*AEa_qEcV=hs6cem?
z>y8Xa5e7$Xk<IT;P=KV-Evripz2vz?o$tyZ_H<pTmiCpGo7Ott>x)~nPSPK5-R0Kl
zFc8#Zbxk_a?qqLrxGhvULcS<`Bt#{R^$S`+N0THgid!vJK5@t(RJXxvvdn)mFcNif
zF=dv|UA7BG{wiOPgCB*!NFy!=)S>XJr(6o`lI67+uK)aQ*8)qKJAU`<wClD=Mmia5
zaaBtTz=+EKLKPq7@lo!OtY1hdq*7&{!W9LW^BFSD^w_!BhwV#$fU1^T<ry~wzlIej
zZ6?DfOZ?%C6w2L_9@oEHW$zOAn(X!gsOXDf6+#1Bz+=Sp+qJuiPfbiHBs~8`KDWs`
z%KozV)ZlSDA%=P);)v<nx3z`q>gd2E4T?{NR4Qlc;&ekxV(p;zL3EiT*Uzpx>s3lu
z<7I^hV_EyZT1>=dW>r5K7@&$)ESy9Sd-#sdMf6f88BK+Yc2$je5F{e@jS%SY5(7Sa
z_~8conQ48K2kmwc<dEv!aK^w?o9E_$w+n%c8pEty*RP7<2EFas-t)Qm97`m+6;kp;
zlHn;`5H@K2r2`Lg&Sakjhl#z|h-g>DXEX}_y$R1;e}bi&^@XwA-~8CA=^lYcb2(E}
z@Vc+j3By%rTP7*8-3=CgL!SYYtH+|6ban;E>6BB#`yHQJuC@-XB9;kwp3070PbR~w
z199#CRQX?D<Gt$+Pt$Gb$c%-|0*KL^1#lx;yNM$5+&HXq{jf^&Tm<#@$znDps4=*B
zL#jz5iNsU8qAdm$$xLU^fV{lna6Nu^TAlVUla8vxfeTi#6|J*mSWyy)fECd9LFSGJ
z0*W@lxSk`%p9(*OA@}8)xYfQfU0N&O37AW*@h>SKe*Y@Wub|kh^B0Sv<l4&wB~sR-
zyZxw3d*5Rh(WKBGRCunmicv}v$N?C9xgH50<&*#BWDGUC0_im``)ymlu=ZeJ|0Sv^
zi^(zP+0D!Lm@7&$mh4A2>h~=*l{+hnTm0IHv40)Up0oT}XMq3pduYRZv04S#j}G@A
zQoihNz7RdB!FlSVjL~p-2?I=RW+<*fvl2hU8gZbZjN!Rvg|G6@-E8<eq(97M<uSsr
zvO(Lsgmfq$xJQNn$Aflp$+Gp>u;fSZHK`U4oTf%@nZnN)ZD%>jxBF=I9lIJTBQ`yn
zPeruRq>_K9JKs4{s>%_4Lp%isx74s!F_^sf3e<4#MdKJbW`$^Ysx_$bCI3uNbwKyZ
zT$>>{QWj$vA-YX^8Z%VT77@&?5h3w#%FN3Qu5Fq8h)y)vn1^5A%&GhogUorrKnMQ~
ztK{p~zAb~bZYA!349~_%g3_W12~yMEoCY>g4xm`a0-*Dun~A!8t&q<|S2VcV(rLf$
zulv^W+9r8g{2)}p3h0}k6;XHJi9H0vluw2;_hcv|K-|3jf{JDf4L)s*Fyf2M{h?})
zX2woBHO40@Iy0Hzb<w@LbA#jmB!%FEqzH$@z{5pb*|xQF?&S(ikEF`xx}LPUeS8=<
z;#n{&layn&x%}2K%J_nTIhOg}PFAu<Yu@Xp*5<|Y)fHf}$40v(`E?`dAFQX*)3%}O
zqCfit0=V%>Rb|?d#s!s{4OZq1fj(Fzm}9>Td8U#hC{Hi>v$0guUU$Iu)Z4>Yyg0sM
zyZJLV2eP3d4AoHk`N53KB0<VkfXY>r*e?-HEV`s2c7s58RcF@Xyl$87?qnJl=4idq
z&U|+9&UcmvOu@W+_HSjq1yk&VpVv+gZcA+OYx86$`%WoY`0T*+F!Z28lxdB+{*^OJ
zV-+Nhpo-g(g09c2YY22L5?bO0>S-qp*SG4l6T`MzE^|c_V#Nelqvxt{+7$!ZRT%pe
zn{*TX)ndZP9<O|Wm*1Zm9uMk7i<jV^q(_fi?(@3ZjfK#N8I}@&`JsX#)q)O~*qjk8
z`AZT)$7Twmv!SFCFpW;EY}GX{j(&RhU3yah&15WW77&z_G<Hu9>GLicO~Bork3E0_
z^Gj*WU=4>3v4RjuO8jaEKEY8;fFP*fmzBalwBi3CJrAo5ZvX!EdHWl0-pzxex{KpN
zhL;(xiR(KI9$3+7HrE){BS7fN7YkdZ{ex01X|FohxLuf6Ma7Q@C#a8)3LiVZxkY}6
ze0&f@Hzz#T-5HK%fwU+wbaO?yh^iq*1w%u^S%{*H+40Wu173d?;<s`v5hsptO-;n1
zP4C1RT0qqM-%+eC63&gsfQE=B630@Tj<Zqw-+meF6lb%MuV+#5ZmW!Kfdw8vO{82z
z&S6At_onM~Op^BSdCc+#gAmu|VIS9ImQQgO?bWr@u|PYRRfn9wOuDrAT?9L4AB5U3
z*H@#+j3eAW?fwJRT|!9HYt%@eJkmewnSW157)j;9ND=0@!AMJi(g|)KKfXKFx!gwo
zll_LCBlk{O_5zD^^O^)m<tI+VspQFzjMVwjTq3z#X8?s&`T635lJ>u>cMUgU`d<T%
zsaZ`#ykV$d&I}Yz#zlB|&EmdF=@%)1Fo+*R6S}8c;HpE*w7T~5U%4tA%m@pOJpSrb
zB@6a7l#Nw9QrIgQT#0o2$>!c-{(`I6zOk}52F!d}NW%GK53iU_keclWTPOAaf&~@x
zf7glGh#lnM^1O8gAUo$-t#Oi3@@h=MS_a?uw2L)xSe1iaI00t7h^>6{dYEK6kD{cL
zsebGf!m9}<+RG%#{A=u$;Yn0Usz$xN2_$`eJ&fZOka11F45lB6Se|leSb52>krX`;
z8jOpH=>Uo=?binf8xIHn13n<Z<n{T3GnuCH2YtCJ5%>N@I{#W>3GesGUlveQ$Sq_w
zuc)dMkSs=0hpQP(S=gGRpVkax$e-)Pi%jG-vPr)GP+<L>d}BWU8zU-nIq3FMbZuAg
zmn6RlQaM`^W*Q!#(;V=U$_XUuDZcB-$uD0l>xlhp{&g8za>!7&nt|99=k>4a$BXC~
zn~Y{FYJGwH;XC5)C(j^69$WP~sIg8WmoUqS^lkOcUODxKQAv>v!yI0x!$q2vQS^(I
zK{A;2RSuIapp}pf!J>|+1nWwu_}T96obJD~JhzzmNxAo)q9k?s7nZQ}y*yq4TD&+S
z5QE3<v-owSoM%plfP%1HBN*|Xa8OVWS7n7m=EVt{svSN%R*-a%UpnUT9s`4mlMI&D
z6*)(uIPE0Uso2OzaYlrO^UU^dr?#e}4OGR|?>r*#E>}g5HpVv;>cBD16ju`1lV4f@
z^2tEw>BUG{I5(EL8AS6Ykp5+9lq35HQGZWw*m0`99TjM<AzxGHRxJ-4r)r8A;v0Cf
z7?{kgm4FL=zDon#mGh#XG)cVW7#+juEIOW$eAbuo>o(Qs6?abS>YVoc6nJcYogl6-
zlADOs^;2ZeiAi9Gu`j}>swqJHex5B}J6lP}e8Vh%p+>rQ(THpPIHC>AxC9)An<y0A
zaM}m)c2&`H)u3)@<7s9;XLhl|L=FfbxUzsD@O0C{<%Fiki~aBP#O|&QeXdq}xzbrN
z&Mf}@D15&}uKg#?)3Dn^LT!BAtIn7-FHZ_aUOuOFdb7h)p9fLGg%%b&oXr+4v1XO=
zT{#uTSy4ksjM=?joM)s&U~>y0pjD&CJ;6)9Lcj=X<7?e{BHe0UylCOlU+)T{#nv{o
zNb3!iyLdc_pUNkb&(%3CfjD4j+eOQ#v9WnGW%+<j?%3E4L*9ET5r1U^yemK<xWysZ
z=IOxqIZ0U7SCGb+e*=j_`_s+Qy-&9^Rld=~R2epI`+sZY6;=!V{CMimv3zM-R#Ker
zFe!+bmJbK3aByJzigi)xaq=W%byJjNa)J%F_%Q{i$0bkwu{4oNigB=B;eo{zd0K4!
zIV@KUBPI8YK9^{++Y4Ucy)84j>AhbJEZHA+OPsJ^UDuboC(*W1tJp(fyJZbZ9yXHY
z=QF*TOYHZ*xaovaXyxEQplj;}L>&H7Uu9~rO0w6E_QwZ;4CeJso<z52=((1sp8QI7
z6sp&enwYcNZ;py|nhr}RDVk^9UfFzGcv9@(_it>Z5_cdqc$9lwaJe?3bzU!T?L$p?
zmM5dE>|B?UMwBn^tUQp(G&*gvAmB5RDRS2J)##;?u%%gZB{N76xCt=!c<nI**}6vc
z2~>haO|e3B;`;8pbZyOd>WrRd6eynitYS;ugAbk#9Y+{4PmS8|llE^9x4GqXQl%XR
zmeQ9e`A>C7JPtp&4cT7VKFZM*K4gByY-w4F5dkaq{`wl^q|Jo^5LVHmpxX^BvzsdA
z>Rzu4r~kZ@#kaT-f4=|^(K3ae1yXguK?LyJA8W<O%jeo(7KtQ79cf{6e$pIWlO4hf
z$N&CH#P!Jz^hG7xt2-tW2_|%v>Bey@2^Qiu{g<%`JIa+)wA+O`BOzc(yXc08%aJ9$
z#5mS8-v0GL5!DlR1`3Wv5>+|mFyJwhgwGGE^r9Y`#=J2iHE>;QD}*q|h~R?6W>OVW
z#BNKgO69^fecAC?fA_v%CKh+EIAs{OvuOQWj<b}P|1Z>}%I5!OPj1-xeMXZljv!E&
zMC)6gU@3h2tpU&cj+BMV$CXnf5z<r?tg{z4G+Pc^RN4(_x0z$VFwkK?Wl(h_!-bZ4
zW|0XwQq(_my3c~YUQM#yoTscM%2DP8oHIicH8_TFH9ShlGfM<)P-sIz@-(tVDr}z2
z-d-v1dThmM%_3uVy|H=SmD5hpAydq021NkuOjz2AY1f@1T>0Hj<!Xq}K6IzqPg+`d
zq&O%Ku2dJ#9P+YS6@BiakIoLNT2ph%&xk&7DXqTV>&7S}51f}Qyposg4nk~dvUp2r
z`$L)Bf3TUNs7xPp`j2N@qx^P$@?3C=+$o0x3=Iv{)g&@*;i>F7oE;sfbP0|!5#W8K
zb0+0W6d}>KPWJ~A=K0IM6sBg@4<))4TOC%D3Ba?>_Og1a;6;c<Ux<_Ma}=-1QOx<I
z5~9AIDF@}sT1g)Z_YFAHl!DohTm=$UIFmu%^Asg^IuwGBsv8I;K4+ar-P5|Y;N2v-
z9Hu}9(0(Qn_Epxd*W4r<UlUuWv7KpP&uYaFjVB{w(js~3d?ISHm;A0i`o7d*#9^!D
zL}Xp~z5;nv72Cb9kaE5Y{G*e0b&ot&YS@D%ts@QNO;epVbBSDFdP2Hers+F=^N9eK
z88Ivmm?WId6cLSS<^5-Pv0Uju9F?FUBmcgYhVPdMK-*cahp*G!icBjxV&-30r<4fI
zn;!AvGtuk?b~a)P8o|VH#=MXO^P%qUgSy*!PdQM^&qBQ#M*uRad_aS;7`RK(M>!7M
zTsT$L_577QyY7-du3sKo6T%V!$GlLMA|+D?>wSj@KE1xooM@wgNw6v=eW~I;QXJNG
zfB%SWp~>DTojzy*Uo|jf)W?<sGWjW%j~XhG2AX1a_dQ_<Z>LW1Q$B{@+0Ze6gH;jD
z0`|Kj?{ZxJ>q0}%(dU1MTLW`HIr4*Mv}bSO;UVQy>T`7#%3jm?XKlcy38kNczG%ez
zN)Ra2;QvRsoj4D|s|m&^JPJ8?qp~S=&$cR4me^QNSi3zbcU+HeYsKI3n?s=Be(^95
z70RNDf}zb*>~dJNT{q6ZCbq{w`v6v9=1`R*dpd4*<Y{s~sFE(B0*fPNUn1&f&k8=#
z4=pn6<aI|rJ#I7Lw#lO&{&M<M<Wm6YpD^XrRpEJ>%Mxmrpdv+yAc8H-^*9<sILld@
zvuM53B2ndN?-C{hOCmPvhAKTswklwY_~G=+%o>eTOrUUpadZ@O*hyc~^o;jW-wI`?
zrnTcCu<-9_4k_MLF6Oja`oFz26BG)4$@PiKVBjK4MKMDO_9GKh4=5O?kfVxxG+-G`
zqkok`!dPUHSYW4#qoTu#h{b9<?D+%>JPamyFJCY1ef_%fKzZg|XMwTm%n`|tZ~;@^
zH`)jSmY93*61_YkV&Qa}%I7_CeNfi788SRRlem|gBgTk=u!q@q^me6CvPE3#|0Hgk
zoiGqk4ODHqOn6UDKFn7cC7-UE+ZZ)XAJJ_Ly{IxVJQ4s72M69^AT)ya-N^2v<ZoYe
zw^EdCoBTT$WClxNQ%4rY?SOX#=G)!3@(O1@0R0ywx$ybWKZPPNhXHR0wLYUr#jm9L
z#w&^)wlU*PEmWTOC>Ev45pw$d6?dJZuQLDO)aaS8sqmcx4y~&g$E}IIwNoNOj9?b7
zF1zp1TP%WUEiWY{n;qBdp%B>Yzo6l51l`Qt0J6&>0{}TP>_@nRDK{r)2f%(d%$W~K
z@ovf`!&LK>CNMiD82~i9CLm7}xP|L108?^S#a9M<LOQQ{jy3vks|)@mrxg+chzUnf
zY{AW^N+kZI!xoQF0;@JJ^;JFNb*fDoeS|3`iqWds!J<f?^u5Y5*_+b)TOr)zk(gP>
z8RC<$7N1w{wBD0ok!bPdxYi;usD-U^b3KnC^6PyDaJ~?mfsVBEheBi=5h5IL1E013
z=X`m!ud5Qz_ZQ=7Z=JH~-Ox<GPk;V6#k+D#TDrzT?JBz5z$ay6#eEJ^ESWyBDp(sz
z!qpZ^v^OgI$??UNv%KquY4p=1Ou_QgI$?H;^Pf6ZS&E3*EBUQ{N1GWgk!_G8J{!Wq
z&C4*2eLX9sk;gdLCudYTN>1Pf9@AD^yPt$(L8P3Jf?38q<cVPli7xJmHWylo(trr~
z;Ha}P*3a^lJD27^{_<a>Dagr3uKl${{!!E$hAzuqPwrUq*><1h?f04VeDsS+pO_>3
z7no?XB>4N4mdW1C+2qNtUMyce)=wY_E+=qCAJ($j$?B!sDLO&>*}uYmN_T;~!1Ls)
zm2GULAfZw$U&&46p!b&G*xLY2Zl_7h;Jmc8niJ!PS8hFeg6z;Fo|LE%Ed&A-_;MYl
z%a6tnt*mzvn=8b_1(ytg6A>U@Ygl4}(k7S54+|3WQKL^wgj`C9(Xe}kBGH;sr*HrX
zj9j7bPGU0fUyxPS^PfLC0~hfSKKnIm*S4U!%_m{RLX{z-ZOOuSV=SE_Sv^v4gQ3;U
z<-;tMk)4l$eh&ygQ(mQ0);HWZTx8jSx#vkYnIHjh)S<DFukL*O>!!#ZgEN<8S<DU>
zMtqnZHf9(tVJm8Z2D+xEJ2v)~x~to|en#Ni{taY)VN=)KWsF^v^xaIQS*LEOR3qI*
zK)^7rSX}Ew<cEBjZQWuU_KEjY{^<u<1i!KO11dIR#AZi6bS8oSyusd#3HRMBw*Ob5
z`u}MN4uXz?fd5sn8n~5P0RU^w|Epll^Y+7CTpbOZ&dTbvgxA$*=~z~4USeo`U)ZeW
zc%;>@<#JHG5av**v(@A1U|*#vI@96){r&7xQ{7?<%L0QqR!L2?o`EV(@E8_M5Yyde
z)>T*FdwMD)-tmdttemSCzk9!Hj?ej9mR13G6CbC&(F$j6z)U525b1gHk&J{`Vl}id
zHl==?G%y{a4PA@pkI43_(>?deN^UTrBaq$4+2ZD4aUM@vK)p?X$WIhI4I>CH3;}SC
z_rDN}QbUi>dS%em@lY6r)@w88-MwlR^oX0xf(wzz(lAn56A0+S_~QCfKt$*izkNtX
z^Z}8<LMU_)<i<c1BZkltXo%yS5a>!u;sbo>eTW6Pd;l}`HfzgxVCCEJ<DGwe9h@UT
z^i467(=T&;);YwR7NT6SG#>`LN2e3{)VjMX)Y0MQF5gU1Hv=wI6<1x&oK8vn4)P-v
z)o9KqTR|K#bSOJB3>Zbw*NAZ?hQ7);%RsnN7R!lZ8)Z??M-Cw*z_Ouh_W(YQ82SM6
ze-C5|`YuE<Jy>DnRq82-9GJ}1QOWI(1irdSq}Z{)ND)Iu)IW85ESR<oP4{JHTi&hn
zSiL5x&Uj7F$*)unU#B^AP-Fw_J$@D&RP6ZM?SNV3jTby-H)!nAdY@akR!_kgx>VP^
zo#-TM&=&-Vgr@yPQiN`FRmRrqru3q?PY4eXXCIs6?iH|b+=eTefj;AFFA!qQT(G56
zqbFO6G89vC0V%#rN{RaS3QX=+{RI&g*$>pCiIw9OA_;MM-<A_c{wsL={gxOb8Eu@U
zCj7{?D1IAp3bJ{exW7yaVaCz~3cl$nh`Neihge=M{eppL#;oG60bKq&3-&UkRszqw
z5aAj<g>A}bZZkc65%-@00vZad(A~>6;%xWRz(f{A839!`hej^L5$?0*-JKp)h8;(d
z!OmPq7k@PG83?6${C&nPqu`;1la`QMtv8l$13P1(==$)__WkbQYVOJ(_Atq&k~Y7;
zQqYOgP&S~B{vqQJJA@9@YuF=w#Kh3V%}B_u(L=l@fY4%>rX~nVU<tuc6zeHy_4{2l
z!pCiCe}HmNsSIsK9Kp1>;I5n;3#w>ltHb8w$HM`8pW&gS@V`m2nZ5yd;jwi+E{Dew
zBP+SD_@aXv_Tx@ovyBgNmJDw2O`zjp+t29C^?3^y6FahCa=8f^b~YGA2{D4XL14uL
zm;`v(>$L!T(d+co%Qypp+qplU)pC!|nvcV&RpEPXOj@ITu9eLw7*6^;fiKMg2&Cs=
zHq)tdQ#_eoCPFDVGW2auGL-nzJ}=B6#(td-l=)Tq^{1p6=56v9$EtyF=Gk_nu(9?T
zlg5EL1t5eHkYXi)Yl#UvYM-_kpX#^+;@2dkK=|KD8ya716MYa<7^RJ-3ZFEN2q0{j
zhL6Wx?wSGcBy3=|gU8vBSe(F+AO!%r-P5B*c|(_Sa$fIQ=FnN&9o4HCXofA#<HHl*
zW<vsg$in)aLN_4c0h8$nwb17F-!z679sxe=m}(6jtOrmIzUuyo$JMiAy<MSh>OjO@
z3F?yz7+LfS*7|TC<KD_$d(E%1MAVlWjY+3~Cj$37_B=q@2^i|G=?oXXfA*g)>yFpb
zVDE_SL+*<IIvyDpAI0j`EhZ;R9(#IFEgVBE#;4wlhwqJ0NE}gTtgWt(JQ@S!sR!I1
zCSE5$zen8`0xtnN3Wbx3jdG9{m?lm6EHg@v6YpR-4)l07nhVf`AdWZ+%^oH|`fiU}
zlpssj#z`lAOD9xbHlauVmY^^7NIKSH{r+P}nf3hLTFi3hzlfjvHBaByKaULKezgPO
zXk`pB^?^rT>{sgduM&xMCk~{q`Rm<v^Lu1^CS}LiH1`%%WTSm@zjpNyKO`9YJcVmI
zjcldNh|rrej!J`Dn<i+sA3<C$H_k}j-oKtvS=(n<{;q!gWHIu?p^e;U{0WZ9bT2S-
zpfb>BbL~z8>0skS)HLmRJNd5B`JM&8$IuUfr6w<2-Ua-wHnR!1;I4$AhRSAo3Z=fu
zs4v&0ub(LK(h_{a5!E+R@N`H3WzK)><M%Qz!R}R>$ZPmgpQXtZ&_3bdiL_ti6BBjE
z;>yGFeO~%K%ftEbnKl*e8aEEE+5;}Itd4pl<);iTyJ^<b510_R`do;}k1vnPt8Kl;
zfrxn^9Akk?M7Mup;7=+wG@^Va6NW7&FI}7YItJ{ANPzLJbh?_+$=c64o}Amu&p9fD
zq8G<W^Zh$ckSnN&Qo&W0`nf*L{qPjv_}Bxb;sWB=?`zp(ihX4)>bLy;ikAu1j&h2^
z)XF8+?Nb4#Al(OQPmVtv(Dqaj{hV#XAMJj)Q%_C*{gu?GZ8_e%Ck;9Mtk_fciXWFh
zm19jDbOyqiCj5+8@~pp1MXF@wU{O4uKCORe=ZTQZb2k&L!QV~!_v-Zsv_W+lw`H+*
zH0zfuie8ADmLQ0vRy%_pSobk9vw($#`12P}gp&D#n1RQ0&U+!M?A6qQ!28CBqreLC
z*B)#gSo&<CLjx)waGwjbU(*j4MC*g0%h{(~Doc}&x8z49MrfzJhrP0byw=m6#k4B*
zO8Brm(H<C_Nixk(vFpJODwJkl|L~P9u=>5l{UTRvcN&tljky!QK0AUu@TNBf+)szu
z^H$)cD8Ze83wNSbkt5kfAZr6Z#0J=2h5r*;kHGDf5qQ&wJDP3p^qmq*WFqUsh%Nu%
zFW4%o!~ep79~#KxJcxXXCHD#HWdr}7-&Brwm%%ePgG+Vft<Sf2jkc8>Dsa2FkZ9|K
z4&>Og3cTb+wyj)nfCDBsD6%S*N>-ErCU}VMRGe}sdPDNq$9x9Fx?t4(McdQS<}tws
zwmg*Hj?f=Hh*g`}66iB|#f_{z=f?oCF(W6*!j;+%G%045!q0P=Ac9mzT8#uClYlUA
zPKK=o`^;d{m5uG_d(@M)xhywkr9lkfYR5j}LeA)yiVo-`Lv^^KZ3M$@-or3rg<<4x
z8QEg=iYKSD$5@k&mixL)&D9toOwy(ji9+erNA$~+N6qdrC!ocO;@i0(C~hF2zcO~O
zGokHbAW#<Q8$1X>Gtv^MSxSLnSPgDu<Z1U?&{VwtR(YS@Lm4V6NG3x?7v#mXlvCSv
zhEcB+{Kg`?;Nf5&(5SVK>IXxkUDsx|5C)JTt}um`A`~alyIp-wl6@b1uCRsQ0{aXx
z`Lj7}`O{d7nU?-OfQC*xmM@Hw3<2XtprteegOV;u)F^<AD(QF?KNX2lc1}p{U|~tC
z+D5xZhNg!|ba@~@5Ja$JZJ=~U0psT8mT0U3%%cnk&kBq6@nF2MC~>`^e?LU{%OJjm
zVzT2daj7WKV+Kh-dxrq`9t#Nv56|i*q!*nZc&*_&k3p!lRnfv%fe#=Alvv0gFt81`
z)diJUqolvmlW0WRd=c%<`UYqa4vD<^%MGqq4&Mi{f>pSDuj7WEB}B|DvBePyN<s5%
zrUc+f#P^7jFya`Ih{=SBhL%EziSeP-G&=Hp@u8_`4(s5n9)&<eN;Vr6O6Zywt;66D
za{6L)iA2g-jC)j@30N<llRZ%%g}%u=cLpJ*+YU4;>LejnN5cP%?PEjH#<nFH4f?|;
zTQ;8;sAh{OQCMG(5pLRsNB46Deq?$Q#{TtXOD{W(8$pm8!kSLTA?UbL1(5u+%w-b;
zsAlQS8VJlT2$&dmWJYpJ$=S|XK%c7=j>y$&h8?>)uNWw!^`(VC+Y0%^h)AWjR7okK
zOhgjz4;7-TM~KO=<GajUhoh@2IF48IbTrr>pWt4zv`@|uP8FX;efJSrXKvo9)sM1=
z83nxkvTcl#EdFewByyz-b3(D*QJLIf95i5Dw3M>$X7=!}0eo>qM)TwVcV&-p&Ckh=
zRWHW2=?S;VYvLSVh9$tc_Mr^RY@qhH1WG&_<vE5G8AE2c#7tSA9~`U<h_8uvD=0E?
zY+TIA2(36h;NN$mkv}a#XW>GDeK-0GlR|rhUOA97#b=U+i>}yndw1SCdk>j|SLjLT
zky3VZY0jV2QLZSW1=Q#J9TUF?qud7B5_2+Qy1EPyix3vT82WvgMuu8%=!@cy(MMo5
z@7uAX%!72{{2sDCEH>tbxW9AZ>pYGgy7`Q;tmK5eLFSjpmu0kAAMqu>E@g_=MbCOg
zN%XyGr7dicjA+AXJFk8CE^=c#J{1F)5f%)2Wg!J}z>yjGtUtbWRE#o~ZVCUEq<Z`S
znb)+Rg@c88tD#QMRTa2;Agye^2H&9+VimVp{&j=U9^dImQ^TERFjXDyIeX1>qmps@
ztIk>@He$shYb>kHz@gJt^JGrx8R)fsYED;lJ)vc(B@n{i_VwWpM^Z*Qe>OcL%2-&U
z;tC^T$r1?&<r<m<SmuzFvhyhheAo&!HP<krH>(-{FQ}1>-a58QD|mlyo_vwAi%j&k
zD=pYtULC5V&Ue9p;RKUdr<Xv><q%PFRr&KMy%Mic#DE<FMb;uP<!*Heq%be>C2h6`
zCucoJ(j+47e{YM;X~um)P>d8qo7%+rciB!}`&qp?G2g{<l8znse6;4T9GmgeaqvxD
z+iXvPVxEXF8Fy?u*5wn>SoSV_#CZqq;-3^UUBFGy+@rNd%mJFV4<Kb}jz*Q-3o=Cv
za`N|h?a<?0yUB^cQ@qc`xRwEADwm4KiS)$yzIT)awA)cWi6>ZivYXF_GWK)zYO7}w
zDOoik;z@~BOYv=^Zm+j0PAEt{7-9HBF_Mzjm2iqsZK;LjS362yjzUzEk>KL#!Nfqg
zKTvbU1sjZ?QmRQ(axw)z&b_@3!)6UjM1B0dd_Q)9DPV|-Hido$;ersx&`#29dv<WO
zk2oXpS&xun@0Tw%<n-|+kt<f@n#Gf(_Q;$`-MdOR>GHLFh%e0y*(;ALEe|=tL`W8I
zZJ}W*(T!BMvtq8(X13@f=xcS(%FKxVO$k_+FJZk$bB-$ZGG~eH#`;KN#x?BV5Wl*D
z^}XSPlezVKuGRIR2*jh4)En=`oGi4+oik269MV**%QGNeyM{)Vq?0*5rRA@QvB)(T
zJG@z+V9Ck<UN`4}Yl)=894{$%B2*n9;Z!lEenRGyCQQ0E1WGFwl5T_`Kk;&(E1KBy
zDYw-to8jPLOgHx6;#cv`23P&2{&tf4;{Yt}S0%6|j-O16)e-qn^TO1)x`Q5q4;#Zp
zs@@eWf?a0wutyLh@<A?<cFbb^CgK+(1|*wvtryBL`3yZzN&a{~-S_c35)```zymkf
zUk<&|Y6vf8Xk{ynX{(sZ3krUvkYf@s5|v>E)tb`_F_J>(iLTg+Yt9r%ilL3?qv(3B
zAIN{L|Dnn_h#A>Mw)M}7ng+YH7%8n%_tvr0^eReiS93w2V{vdfKiym3sCRgNPmI8j
z%*;lZl2Z+V(Z#2N22E+OWO<wePghp2My-7wtEH@=X|Vl+<XsJzJOql?JE}$^E6Qk%
ziFX!xAit|y*FjW{j01Qfa@9-@m%T^7zoov~^$U@bi3I#`7ex{j)d^r&OMYgNl{Vr1
z)E`g2-TG6*t@-&OW3_d1GrWj=>UC|$p-7B&R*TBlowX)fgngFCr8sL;-8lbwIB;R6
zC$v2qI*`ni)o*y=K{lq8W+4cadYM}%%yTWaS8=0(Z&Te+KPfuqET0YKgTY9jCy2jT
z#L*HKCEG|{?+#MH{(S@})ryakM8FqD8o^oA3mzyp#LT@7AX8kuvcyY|vIzkF_fEA$
zgyNU!V;axX4Ht)ln$y@iHk*-?6xx*SpM-pYK;4)h>uT4_*xHZ954|u}5g_Pjaa0Uw
zLWP-zo}`g8T7C1)A{ZS&oR@shimqkEQta)`_NT!}o7;L^*6DeBe)Q$+mvb9EvHE@j
zISJ-SYh)W-pAGLi8tjChl#=dX-E(vXE|~4*7D<G%n7n)m69;VzbNFwZHwF-D*&jP<
zO0!dsg_QXbDRZ`*ah;%vn_I~5xfyxdQ|j92e*#5dp-i3pz5m*q)eJ7RIZ9_#^={Hn
z_(Z0DhPdxKEQN*2CC-ji>^Gk^eNU)_sZ=qW8D?UH0PZR&DXDqgqpopdl+W<6ry^e(
zX*TQt;i}8@DY}_oYi0E-Z_m&rb)>dIqs{Y0vJ@#K6w16Nx$N=*A6%O#$XV^zpK{7b
z-$DfZKY%<h29OFYM^Gs`*gDk{51J2?I~oEe5JPXtFOmh6`9&M=zX#lRn)FyU3fa{Z
zpo;)18w@v$TAH?lfmJ_=Sj@0SAu8+5$Y1aVWTtiaF1SRf!sY-5M#>ULp%Qh!pea}C
zY<0sWm+lnBr3X^M?6HrtXPMkIKaFcxDhftIkpP5_V~+yLiA!olderTc{uC$Rx5gqr
z3<U1?kL<<{@4UC1Ykww5N$Mp0K%YsC-ajy+N^&os7r&vFC2h09czp^3qd)u@_Qdgh
zg~jKGZM(mf`;++)QRxl`L`3$g8>$7KoubDV_@0TZe0u7!*_vL4_^WbP{XRIHd%TeR
z!h^X~wXj1K{LMdVU#tsln>K?vQ;k0A4e0x^eeOUDzlU5UPjtHV#5(6V9v2W3^&X4v
zf%LPnM%uy)?s)E3PzNT&d7NugEW^i8giQl%5_4U514G^f`tr%se(YP`WjCV()Wlx#
z8rC$`4?9)X8qVn%>S=$_$wj0{%yGRAmSEB4vMtU4iJJqQP6g-gfU$Os1iNG6b=u)v
z2VI8%B*m7dlOyXwHY&R9S3{e_!_P&Uo0R@99|&?Zj}92oygD*YA_jm`R-z2_;;>40
z`qDVKK*vCVDZPWDz$CTDGCR)=FE%4sVQ^5@&qF+YaX-Ai!OGohc$lfG>g&^wsA16Z
zlU5jlBE1OlHQDp!N-J)`?q1kYEv-@uj)SKW?75bjKx5yEvR{immz~MG`jrYt({!b_
zKsNOAG=p12g0q~TQM*7BI$RBig+DcqRAfic-<)zaE`^+F+$jl3*RyA@ABk;zZrqzr
z*MwIy+Wbo@t82B0`~*QkziK><5l24eH=k$@I;rR)fkuk!%b4y$j6|M+?UKCx?i9GO
zFGMxOB7N!FuQ4ak*521sQ)m%D!GWa#uh({V_#K*ktw<aJF5qK0BMHBu%QuV-;|MsT
zW_z(irYn|;B0a(dJ6oYVOTckcvTl}1!=Ihg;6J&((shV??63jQ-CShxfa3xW53kT%
z1X|WLw8XX27FiRMM`68Wn)6ZkZgW}_h)<;kgSa6TSEHjy_YHQW(Xt#D?cCoOA5-`2
zzRY}OdMcouW=h(a4JNhU8cxSI9=YW{EBxy1tNh_UeB95c7xrlgb{DlOIbIO6&%Cnv
z7y*k-=))JNLm8Pp0%1Y~^`&nk+shNBUpEIeq<Nk+rc|`_<Q~0Ow^?5c-Qzwpxk6?w
zdYEjT>1jrq8)xfJ+|~7us)}BV#$88qu6-lwO9P$@gvT)`|HT+J5s!HuRovyPV4OsD
zBNwVP;}s-PWUCsg-I)Xu`*`=~E`No85OP}RXEJSVrv9}SeqF0o;&J*c+1i8d@T-a2
zZM$i0ZRUiU$NYB*Cr}H<Xj>+rt*-r0@m9Tl0&YaWP#Wpw1;_)yZ1Zsu<iN4U<M5Og
z;V1sMh1$ITmTO47IU3)(B{qM!Tz~MO`M<y3)rxkaq~s*{46ywzG_7E5n@!x($XF5*
z8{oq%T-LB(B{m}w@}K2fzSBa?1x@IEvBH^<$IqbO>3~Y8ap$6roBq{KO<na!DZZBJ
z&&rI3lV;x8##_T<pFrxhR&MHFOW=Cmp9kMU)CFx<5Gt*h^%<EJQMNUTM6G?k|BM62
zS~VGfw<#9+pF{hh9!pK{<RVXNOI?!yf8V=C7_r~b%Wl24D?9e$_fD+Y+T@$l6U;4I
zL0`TJPN~)mY7?|BrSfe2_4tk*px%ipnzDXkHCD2yUKZ{%m;f~^71_z*3Y}Vb;Nr_f
zfc#HD4#;e>P_8V*wat!H`0@!#L3@7lC$IVMExxp~Uqt8b<i%<wwxOae5AK2Q(_)Sg
zTXh5`1R-hx2WN4UOP<|K&tq7%OUGxL$BDh*V>u<;m$N9BqDLZFzXja8{B1ktSSYZv
z?9Fwf!0aj2i%_mE(byUImZl)|qDfiK35Z%iZ@3iIlzVvteL;hGgmF+g)+Dhz@emNe
z*3Ta}qbJIX)X|c9Yb`b_=yjtFy+eh-DS6pW4S%fM@fCBo{e_+UfC30;+9rk*>{|H-
zu>%-_b%CWsRMoAHe`5b*x#vi0qPaVEfH6sQ^Peh#&jvd?3ERJ%fYG~bgdardNaM!f
zdP6Bcw~qom7+{zGObh&s`I6oWrAbaG-yihv84p@bjZ!Q2fLDH!_1^nL-*Yhnw+S5*
zwp*LODCA(%Y!d~);iDA>9fQsK;LOx(xW+kvU<YQANRXD9vTQMxDR6PR(E8Vf7nVte
zJuF6bF3DdKK9Z1lK9s?D5i|+m&s=UYBq*G>7fSwNww5RP0h*TXj393?Fm1eh8yacg
z56||?q58~)XZg{b&A+v@+L`g`5jkknVtb}1*IoxN){8_-5X?yykrg=@JIb-?JQFL8
zeyXrhuVUCy{5x4HWh!kV@Wx)@^MM<>XgkQDss0|Z&(%Lk0&;KbuKUYOvmbjff_9vZ
z!V&3Ug<Ro{28&`If&m`Gz(|LuHtUa+q@cn~{AY|X8!0`Z9pJV&JNkTP81%EoGiI2^
zU3pSR<yr|*_h|G=a$<E6mW@IgT{1fjpG`!^aP6F$-eA>acaN~4KO_}u^sjP&Mjz^o
z!^_>ktOlDMOB0QU`hlgzwCEqB0KxG%zx6KL;bibw>&wdTX1bCun_7egOq^AhppLH{
zB|YI{y!RLk(~~2qM12bpr9^;W#h2pDW}Mxtv$rL+UGDv{q`InDR;ndyjgh;Q?75B{
zv9|d?Y!|irBe<zVkQ=c-NWj94a(B@%=4EvyBQZ<^Av}_G+K+oJLH<Za#<V-G7b@@V
zeoMI5oCr#K>p{F_ACNq2ETt61(byeq`nCdDZnOA7-D$pqy|eK!S<TZl9EYM${{~K%
zl7wKfhh9yH#wl;#eS$XooV0JPzT*dO02~oGyh4WYhYmfJN3d9LG(T6(I}m|H-`1N2
z3+f<>|0+COqp2}*<$<6YHL=QBM1Uaw;J#h_+HDwYS>7tw8|rbHYxx1s#8y4Vmv*74
zV%X#NHBk^(bnc`@j;OY#LB$GCKNBhf`Y<bZI+0+{-ckF@Sz5AH{orrumaz0|oT&bE
zbs9gsi^|ydC2aj9`)`{^!3R!=jsEj}p%%?4O%2B7@$mAqg62)$%O5^{&2V0-B#`Eg
zqjDwG?qa({<T%O`{N@D+a&dd#!M!?7R^!%{FU?}BHL_NrcMeACL@lPJ6|rD0k?%Cb
zuPW;N*7D6o6#`uDwcjxBTQ$F-2CCGUzsY`6Pks-lcEKF9$+w_zn)BedCP$19<MNHp
zs#FS(Ky)SJ4Qok<RHIZ+nzsI=t4<F#^OHKW7)@Yiw}TKUqeIn1!%7Mr;!@JM@<InM
zV{pITe)EH2@EUA(uN7iaz$U@ZF|oXkTPc4;Za!1<;wVEf(7YCEhXN5ZiPgYb$Gv}A
z-2G{+QbVQgFrwFM&cQh+;8|p8NX^rG&EdiAWOJb}fw4N{@QMyed$FZXi*Dno`Z@%Z
zvJi-j)!odK)t7XXm<HKlcK7e08MpL#%-J?M{|f)lurssvgqA`tK3FeRO0*?5@%w>}
zDrRlFt41833o_9*Ua$9bbe&X8BM=?pLf61--D2Yra4;_R2{U$1y69@{S^-bUmCp3I
z6YFj2N7TIe<LYa5$CBDF7n|!}(RpIilI(Oq64eYF%uqqgw-?v(P}OZ32wyM3&pM$k
zq|@S-Vu#ypDLx$Rk^ZTGRFofW&e74v*=}I!hIr<AL>~$lEFHWbaF2C5@f>qn`<%9%
z8-GXEpW*$b)ug$(gYl|HFYCx&_*P1R7(+>^2=XcKsQx`&DRrH8%RD(rWrjvO4`GX)
zGPW5v`Ou%-&jdQ?lUq+bz{%Ah`ow^mCEwoMTeu>~^^vHLh?fXi2(D$HaEnvP+TD5S
z9((4v6om#X`qxPnmV8AXGyj{OWT1_1@2L<FqG`t_8#@a=$NcZ_zCfM&*9g%V4xxzt
zS{637%XgwAEU*-%Rl$utz2w*4GvnOvk6a<$e8ug*GfWn&eFR}^_rB1x10M#=0Te+s
zO)c#zJ()MtU2vZd?KU<P3Gs(NJC#;};pvfmfMjfjo!g)qs)5?NJv9*LgI;fdF$QJT
z&(OOx1nU~FJc3q>FKidmyylEQ;7U|dBh5@c;eC1W{Mv&6ps3eSmg7V}7hu+J$*ZZo
z)BeoAAQ*`g{SnfUo$O<I^ZY9u?gK9Xfnw%CQkn$1D4Sl`Nw|QYlWlfJpvVv>z!t`s
zuqCu0UsVJwYT^h8)wh+LeqbXz`;B3pI2O1(nOXENn$g7cKZis!#s$}E*Bp4nHF?7j
z_zqh6^?Z{pAW!DmJd|0iC|cBI6mX|vKGy`JyIv=PQ9%v|hf()*yIPb5QWMjB_*@s{
zqRboklDvMgpa?6@z^t~4t=QOgd-&}~=T9eU*z<SLq`mq-qrL!&n83zqG5sklSPF_n
za9^J~Hw|i_TFoG_Bn3(zmv@^Ts#ux*-T}U^{|4v-xtl<Gb~7MZ10pf{OkojbhiQ}~
zaJW54J<F#i;7Qf|8Gr7?5pumxMKFt4y<s5f_W3to1r>nW1Bb>A#RStbD4(z)wnHnl
zLF7Uz4Ffk^c2Y4x8-_F6?_!M+y4$P+*~VOo!{8(F@V*4}p>%e`diWC0Ig+}l$?+X<
zS#ZFQe!BZX5(y_c6dEaMqLa5ClhZ&D>xE(^h-T{7lxFypUc*n!2Ai(M(hPcTJ4&!F
z*F|~n#rRWn67H0Xxk{}Wk=3+)S%3y}LXyOaDt={?_!DOcDZ*TmiB+E~MOOb@5C#ke
z%mABMaK~#WzON=xs-v%1I1x8^n?OGcrYQnEt8{1FeGR+F(KS5ohX+Bl$Y$$m6Uclg
zWTQDRvoHa})>0nX$x7h0Ji&=yx%8V`5^-pO5p%a{sqg`j2JCVlzncT;+eqZyc&qsq
zG_yl9(O=##3%!=mSU~Ab)eJ~WON497o?GGlmp0hC_@dhUP6PwIQwfE2{oQ$v+%Gb^
z3~V8rTDVUVsIkPs9Ytm9vU2_RyEJp|AlOh2Sc-bqZ<U=1%5Rk)YMwgfQ3I%S;J$)k
zi}2OKM0KiGKyu*%KyrSw+Pqe0t>Z#50yKf(kS)O!3q3GQ-i1xCgkcx{5uu191OSpF
z01`Ju7cBx|%%f`#Yr(U_|HXx}H5{TPII;1hS*Y6g7KPTQ5$gUJ`+g6@qLeOAhfFn)
z|2HiQv;fT#ApGO*{eyK++iMO6aRjTyQj^?JAiR@j1#^m=SqsACSFltVpIT28iiWp)
zj`R|NXZq|3RG>-9dpiK_99!fMJQ7y1XfwFbe#=G4L}eWo<31tbcRsNV^_#DFDPgRb
z=sz;iMCb&q{N{I}YY93NTohX`p5~e1-}GSlIYkj9_bhdw!-g>~&jg5me<DxZ{a2$u
zGTP7=5Gl7Dzwe|*qCW}Z<V*YU7^ZD1t|V2MaODh)`j9{)*~wSEtjQ<0rU%@4Q5o;y
zswGLJnZVR||EH-dkB74D{`VNh&I}&LK1$X+CRwr%CQF3!C`&X$r6Ez4k#!6*h?x)(
zAxp@f<#}kazLpfy$WHNOS0cN-m*4N7_s{#j&gb0s`J8iouXBCRx$i3mmDoaaz~*0I
zkf_CPW1P^|YP|A~7R%I9ty)&+DHB6{x+AdUS3QqZ3-7Q2=;^hLo7bIWYrgTaxpcGa
z0EvnAlWp8|BPu=|WpXW#lEaY1Ok~=K<60*&x5Cpf<kA5VT0SFPFF&YRFoPQ<Rjq6k
z$3&(kTs=Q%lPXS$Ugw9)k*&G@<`+~I<5)Tfp`y*MkFKTH^O8c+b2`d+G3E+3Jwa8s
z{*{w^wRmBD<vx+z(A`QgQj;ukYP(GX&g1+S0YQun8`aDcKcW&UcP^)hc*k-IoH<u_
ze*!tZICLrVH;My9kvsx2B8PmuJxpLNVs9o~Eeg}f00T7HwFhH65bN$`W?8VIU?Pjf
zgocMS4+c$Y&b|jVvLi7pMCfg{^IJgznVcX~5^(?<P6kz0q7BV~4r8U^&^Y<8L=kbX
zB(s!?@A<-}=0E4`y@mzdCg2<bAU`kK$Z_cvJbWK^I>*Paq}<m;NC8ebrjG!6-64$=
z%Ho_sEipw7=nZ9&(QaXuUtG;)S7B5<fd|SC8Qwb7psclj^;(?tKWp1nayWUf4Pt#J
z(0|)s3RlIE3gb{b?2Ea92>sf3`zt&DlZR+cp=(Mu+xy5NcPR3hEyC9R_qZ42x@ac&
zM6AIX9>|=UL~Cn{e4~pd5<4ZMTHE-})>a`)6MiO#vvCNu?2xvRt~~v(-eg&{GhOyd
zy&&`e_{ye^1*;i^1aw|xAwGESPg(LZuBMPJTorZWfD5U>;sFU6X*~BmO>q^eBG8n4
z{)(YrzO5vAyTd(aIF=rbE5JxUq=wGI7)en_yV)_Phm%Z1Q#r3%_Ga;2k(L@3@;ly}
zEM$$+id(~aU|)LziYU~YJ4FmQZ{ZT*DqX|X>H8*zXK0hV4F{;P0jhrBN*a&+BWku)
zt3_b*s=3i9srgQ0+JO#X0jDGV$N_2WUoj`UHjwN#NF`=q-A_GUJJajHQ|??Z@r6kq
z+IZS53hAU*{(j2&S`Bg=|DOHqhY@P&MVNu3tw%M(K?oO)kiW(UcfR6nJE+Q{!SVN#
zq!rNLJp3uauE2LTO6nY!<PF*22cEop#%ezH<wonMNOj5)gNY0uOt4EkS>aIKVq%f!
z_G|xVi>cnXRhtG&hxXT}0uwt~KSB@=J2B?i6LE<3OWcZYHK{osAj;+smy+)W^knW1
zjWBrv5>6i~cc1nVmB_T}NQwAmbnzzk*Z?Th&+`e6LLfAFp=`J*_f~|EzWq^2Cw!ih
z`;wk;@%|y5AmMzEF2%}&jMSu5WQPWicc-`1{Z`~MP~G?cCi1{Ry~3&U4WX0xQ5Vh@
zj}wP<UUdCA|D|$J(QI+`P>S(KW!JUeSJ{?*P2F|G4mn=I3iu4RZJ<WyiH6#Gw+_vm
z6KrCqrL^tq?ynLQ12O}ffygK87Xgp|dEyeb@I8EqQ|-lEI=`l1+?Ub-e|FtX%4CiV
zjTIaKg9-RSV~34~@EbWpx6@GE`U?eia(G|WlH-n-NnGfb*Up={U{i6tE5kbamy2`&
zcHKU~a%o60O;`axzT4=@tKVv!;K`Xu7vzFNl#Ub1t`E#~`P^mb*K1-wr)tdCTn%Z4
zGOF=}#l!D{u?;WMa(B)|Ug7y9c|_OpPXEEwp_)%H=dz-im6-!nmLpca7CZG~MR<=#
zH&_za&+!O$v$6AzuZ)E_;6gxVNhLbc_>}MkxzNC?aenfSJ!eXO3WepqCgmgr=484(
zy!ST6I^TO;xYm1;g@Wupk4es<o4ZPtjY}}7Eyjw4)^I-bC{#o7sMPZifaNzCQUOB7
zf2z0yi5q?TXL8C)mT*F#>aIZ5S5C%)x2n;({DDExl9kVk;l?~8y)Iem?5!HpB{Yz8
z^B3~<l!$2Tvw;dj6na1*`nr(=BAOU@Y4?;B&fl=U`6A0j<8$n48TV7HO^WP%FOs_c
z3budyw(LLlwXo={*dl8Ua2lD`XmS#KWaz&C*ze~{ajb;pH8Gj%b8S<0dl!P4yxC$~
z{Rre;K8duatpaa64o_J&ukJ)nB_t^}9G<Nl<w56l!~2)T(?a7sc}0Ilx^klRfbPfg
zb6HQ})1gcqHEPv`I@b5{0|=y>TX{7%6#8s40ykhsf#Jn*#d((Y%3bJ^5XcBzneWUo
z=jbr3V_lM!3}Y3>iu8tLI#M?~@*2b20p8+T{oo{nXl3P&>3qX56SsM!E$&^!3a{Wo
z;TQ}*2a9H;KXa}~oa3XL-Sq>A$D^xt3wPHnp|WXzQ<$VX3bD{MDM&Y2ftP`Y4H-1|
zepGDR0yr&iNUqj<gsUFz5Zw1*ApnBON*tKIk1g9@>z&~;lXz9y)bn=v%n?U6TYsa#
z$vNty^04O4su`cHit)OIKR@PLyFlDM{YM9KZ8*>q)+K7d^RfQn_$2k(x~6|^Ep#za
z6dM$Vh$RW-@?!A&bMeY2m9?~HN(_maG=9+s+l&^%n5o%2>jGyd#%LXPU{fVqa2<?Q
z2pDfHA$Aans^0Z~-=&U{*5g=fiGm<CZ$SUW`#Xy-*J}=YuT-Td{+&@_V~j~oXK$+s
zuJbgXksgJN@v^9#g-gz@YABVHxZ0}eeEy6tvUXJ|lD;}R(*?HxIs4JtWR!2Xx}}$3
zM%7(HQdlF+aSn2z`T=syb~o(I9sFHEh(mI0V^YQFEbz{DAH5Ro@ohG!X}RIWMFuK?
zg^f)#iy^w)m43y`YDP&1r6B7Nm&Hc3*c}nK)&?YQ?uZs}8;k4S2$MY*^ZgoAXO{)u
z6@bt7l*|mv4}oMbr1+RttjW&0Y6@wO)}y<TgoA-cH4`aiS+BVNTAEk>XuY6DfSH1O
z_ZB=p_iD^k7kf&EogJ-rWkVCd8ZU8N>q3Q-NdzP5rD+}F{MJo42Uc}|_UB;P_&BjN
zV1r#IJKf%^-=D5Yf!y(a;Zi*h-|G7&-!1gy&0GaBX)E^Tbij|KIxqU<?;)|_^1Z3z
z<20;g?HvB;g>sWYeI0&GZo#n<FOIH-;WuzeT_>b+m)VCF_LiRR3o0t^*VLE>d2U8c
zz@Q^-IH@NAH&Sn1+4;f_&O89}V`NNb4t={{2Bi23BVQV{&Mega$tvax-kg!;KdXl1
z8~;3Y0yzE_DH6+b1U~x|IN@J5KQAcb-0LEzs3H#_%7eHmn&%(UY0+skmR5dqtmcm!
zdP&<1I8sG{B1+#mt`2`(Z49jM1J<M8RqAa?Q0S}gwF5(R11o&mKm1C>K11Qx*HPVl
zmw#vCs-*3NucV;BbU;MSZOnzrXY5va^gA++i#!~^;-IY!pa(OUWBDQJeW%OTJCRV%
zqJ`5yxV`3kc8EZfd?QoJGHy00?L+bx7j!kcEDQf!Mphtu=}_feIYZh_J|&nJ#{nP%
z^BDVi32klWQJ0fcL@(XoXrrJKT4<&^%DecJH1mR&J#-?~3be8?h@lr>rczQFNy}vt
zsn%^4g+#KydeDK3`hl4^4j1&T^d&$0y0(&=WoP6q@3W0{8u>G1x^mU>n@`fG4_Y)L
z#rnYGkkLY)DcdQA)v$u+>=9b`jda+~utw`M^^}2vl7FaniO{%m`}4Gw4zi)z<METH
z%GRO@&y#tP(N^dCp2bRIb{oRC+ra9G!Ff&|=tt!>9m*Jq<1o2xe<}Nl?D#Ob)HCvU
zF%Xh*-r2)Xr#u8Af?<fzno_FqH{wg;VEDnj98>N8h0s)Kh%q7?+D~*Xa-z!l0UuH<
z$OgLxk3m|{COPkTqzwQ%hKCgYTLOP*Tb@6KOap6Ew*=Ty5N~;VD_wWCYY94Amlpox
z+ia7RW2IB{|EZy=PF!v}?pY`o`J>8HC5*aohbf@`+62sxGdoG0&hfF55iqzR%XIP3
zpm+hp24oHklEErC%Dv6f^(4eQXILoE$#b*s&MZT9eCxCC5LP-DL=CL(gWlXp;cYgU
zyS>*!q@gvakNXr0=PgJAC}Dxu?l1b;#I#!>a=4oh)C|I&pBIoO_qfm(!ypr|@F9Qp
z+IvVU5W-?bMFf3Q-Lw@gLO&>y^-HG?O#tLF*1@p!?W%31=Bvb9zyo#uIM34<)H4w=
zkbfux=DYBPt(BMS*YH^%+MiQMdNlg4;zc{I>AgYHzU|yWEa*sf>`n2r?u)DIv?d74
zb1NEl;&Tu`NYI*rdb(WhQ_cu2@PC%Ir?FZg7{?h9tO)cKN5w_W*FP1_iumDia89&o
zbd+d~SH!7!)HL*|m+>CsBrh4R@#yo~Xu6McvLtt!x>%wqeBUsnQaU!*C(`bJyZrwP
D<sSsO

literal 0
HcmV?d00001

diff --git a/samples/web-app-managed-identity/dotnet/src/wwwroot/style.css b/samples/web-app-managed-identity/dotnet/src/wwwroot/style.css
new file mode 100644
index 0000000..67508fa
--- /dev/null
+++ b/samples/web-app-managed-identity/dotnet/src/wwwroot/style.css
@@ -0,0 +1,341 @@
+*, *::before, *::after { box-sizing: border-box; margin: 0; padding: 0; }
+
+:root {
+  --teal-50:   #f0fafb;
+  --teal-100:  #d0f0f5;
+  --teal-500:  #0e9db0;
+  --teal-600:  #0e6ba8;
+  --teal-700:  #0a5a8e;
+  --teal-800:  #074d78;
+  --gray-50:   #f9fafb;
+  --gray-100:  #f3f4f6;
+  --gray-200:  #e5e7eb;
+  --gray-400:  #9ca3af;
+  --gray-500:  #6b7280;
+  --gray-700:  #374151;
+  --gray-900:  #111827;
+  --white:     #ffffff;
+  --bg:        #f0f8ff;
+  --shadow-sm: 0 1px 2px rgba(0,0,0,.06);
+  --shadow:    0 4px 6px -1px rgba(0,0,0,.10), 0 2px 4px -2px rgba(0,0,0,.06);
+  --shadow-lg: 0 10px 15px -3px rgba(0,0,0,.10), 0 4px 6px -4px rgba(0,0,0,.06);
+  --radius:    12px;
+  --toast-bg:  #111827;
+  --toast-fg:  #ffffff;
+}
+
+html[data-theme="dark"] {
+  --gray-50:   #0f172a;
+  --gray-100:  #1e293b;
+  --gray-200:  #334155;
+  --gray-400:  #94a3b8;
+  --gray-500:  #cbd5e1;
+  --gray-700:  #e2e8f0;
+  --gray-900:  #f8fafc;
+  --white:     #1e293b;
+  --bg:        #0a1929;
+  --teal-50:   #0e2a38;
+  --teal-700:  #7dd3e8;
+  --shadow-sm: 0 1px 2px rgba(0,0,0,.4);
+  --shadow:    0 4px 6px -1px rgba(0,0,0,.5), 0 2px 4px -2px rgba(0,0,0,.4);
+  --shadow-lg: 0 10px 15px -3px rgba(0,0,0,.6), 0 4px 6px -4px rgba(0,0,0,.4);
+  --toast-bg:  #334155;
+  --toast-fg:  #f8fafc;
+}
+
+body {
+  font-family: 'Inter', system-ui, sans-serif;
+  background: var(--bg);
+  color: var(--gray-900);
+  min-height: 100vh;
+  transition: background 0.2s, color 0.2s;
+}
+
+/* ── Header ─────────────────────────────────────────── */
+header {
+  background: linear-gradient(135deg, var(--teal-800) 0%, var(--teal-600) 100%);
+  color: #ffffff;
+  padding: 1.5rem 2rem;
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  flex-wrap: wrap;
+  gap: 1rem;
+  box-shadow: var(--shadow-lg);
+}
+
+.header-left h1 { font-size: 1.6rem; font-weight: 700; letter-spacing: -0.02em; }
+.header-left p  { font-size: 0.85rem; opacity: 0.8; margin-top: 2px; }
+
+.header-right { display: flex; align-items: center; gap: 0.6rem; }
+
+#btn-dark-mode {
+  background: rgba(255,255,255,.15);
+  color: #ffffff;
+  border: 1.5px solid rgba(255,255,255,.3);
+  border-radius: 8px;
+  padding: 0.5rem;
+  cursor: pointer;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  transition: background 0.15s, transform 0.1s;
+}
+#btn-dark-mode:hover { background: rgba(255,255,255,.25); transform: translateY(-1px); }
+
+#btn-add {
+  background: #ffffff;
+  color: var(--teal-700);
+  border: none;
+  border-radius: 8px;
+  padding: 0.55rem 1.2rem;
+  font-size: 0.9rem;
+  font-weight: 600;
+  cursor: pointer;
+  display: flex;
+  align-items: center;
+  gap: 0.4rem;
+  transition: background 0.15s, transform 0.1s;
+  white-space: nowrap;
+}
+#btn-add:hover { background: var(--teal-50); transform: translateY(-1px); }
+
+/* ── Content area ────────────────────────────────────── */
+.content {
+  max-width: 820px;
+  margin: 2rem auto;
+  padding: 0 1.5rem 3rem;
+}
+
+/* ── Table ───────────────────────────────────────────── */
+#activity-table {
+  width: 100%;
+  border-collapse: collapse;
+  background: var(--white);
+  border-radius: var(--radius);
+  box-shadow: var(--shadow);
+  overflow: hidden;
+  transition: background 0.2s;
+}
+
+#activity-table thead tr {
+  background: linear-gradient(135deg, var(--teal-800) 0%, var(--teal-600) 100%);
+  color: #ffffff;
+}
+
+#activity-table th {
+  padding: 0.85rem 1.1rem;
+  font-size: 0.85rem;
+  font-weight: 600;
+  letter-spacing: 0.02em;
+  text-align: left;
+}
+
+#activity-table th.col-actions { text-align: center; }
+
+#activity-table td {
+  padding: 0.75rem 1.1rem;
+  font-size: 0.93rem;
+  color: var(--gray-900);
+  border-bottom: 1px solid var(--gray-200);
+  transition: background 0.15s, color 0.2s, border-color 0.2s;
+}
+
+#activity-table tbody tr:last-child td { border-bottom: none; }
+#activity-table tbody tr:hover td { background: var(--teal-50); }
+
+.col-btn {
+  width: 1px;
+  text-align: center;
+  padding-left: 0.3rem !important;
+  padding-right: 0.3rem !important;
+  white-space: nowrap;
+}
+
+#activity-table td.col-btn:last-child { padding-right: 0.6rem !important; }
+
+/* ── Row action buttons ──────────────────────────────── */
+.btn-edit, .btn-delete {
+  display: inline-flex;
+  align-items: center;
+  gap: 0.3rem;
+  padding: 0.55rem 0.75rem;
+  border-radius: 6px;
+  font-size: 0.8rem;
+  font-weight: 600;
+  cursor: pointer;
+  transition: background 0.15s, color 0.2s, border-color 0.2s, transform 0.1s;
+  white-space: nowrap;
+  width: 90px;
+  justify-content: center;
+}
+
+.btn-edit {
+  border: 1.5px solid var(--teal-700);
+  background: var(--white);
+  color: var(--teal-700);
+}
+
+.btn-edit:hover {
+  background: var(--teal-50);
+  transform: translateY(-1px);
+}
+
+.btn-delete {
+  border: none;
+  background: var(--teal-600);
+  color: #ffffff;
+}
+
+.btn-delete:hover {
+  background: var(--teal-700);
+  transform: translateY(-1px);
+}
+
+/* ── Empty cell ──────────────────────────────────────── */
+.empty-cell {
+  text-align: center;
+  color: var(--gray-400) !important;
+  font-style: italic;
+  padding: 3rem 1rem !important;
+}
+
+/* ── Modal overlay ───────────────────────────────────── */
+#overlay, #delete-overlay {
+  display: none;
+  position: fixed;
+  inset: 0;
+  background: rgba(0,0,0,.45);
+  z-index: 100;
+  align-items: center;
+  justify-content: center;
+  padding: 1rem;
+}
+#overlay.open, #delete-overlay.open { display: flex; }
+
+.modal {
+  background: var(--white);
+  border-radius: var(--radius);
+  box-shadow: var(--shadow-lg);
+  width: 100%;
+  max-width: 460px;
+  overflow: hidden;
+  transition: background 0.2s;
+}
+
+.modal-header {
+  background: linear-gradient(135deg, var(--teal-800) 0%, var(--teal-600) 100%);
+  color: #ffffff;
+  padding: 1.1rem 1.4rem;
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+}
+.modal-header h2 { font-size: 1rem; font-weight: 600; }
+
+#btn-close-modal, #btn-close-delete-modal {
+  background: none;
+  border: none;
+  color: rgba(255,255,255,.8);
+  cursor: pointer;
+  font-size: 1.4rem;
+  line-height: 1;
+  padding: 2px;
+  transition: color 0.15s;
+}
+#btn-close-modal:hover, #btn-close-delete-modal:hover { color: #ffffff; }
+
+.modal-body {
+  padding: 1.4rem;
+  color: var(--gray-700);
+  font-size: 0.93rem;
+  line-height: 1.5;
+  transition: color 0.2s;
+}
+
+.modal form {
+  padding: 1.4rem;
+  display: flex;
+  flex-direction: column;
+  gap: 1rem;
+}
+
+.field { display: flex; flex-direction: column; gap: 0.3rem; }
+
+.field label { font-size: 0.82rem; font-weight: 600; color: var(--gray-700); }
+
+.field input {
+  padding: 0.55rem 0.8rem;
+  border: 1.5px solid var(--gray-200);
+  border-radius: 7px;
+  font-size: 0.9rem;
+  font-family: inherit;
+  color: var(--gray-900);
+  background: var(--white);
+  outline: none;
+  transition: border-color 0.15s, box-shadow 0.15s, background 0.2s, color 0.2s;
+}
+.field input:focus {
+  border-color: var(--teal-500);
+  box-shadow: 0 0 0 3px rgba(14,109,168,.15);
+}
+
+.modal-actions {
+  display: flex;
+  justify-content: flex-end;
+  gap: 0.6rem;
+  padding: 0 1.4rem 1.4rem;
+}
+
+.btn-secondary {
+  padding: 0.55rem 1.1rem;
+  border-radius: 7px;
+  border: 1.5px solid var(--teal-700);
+  background: var(--white);
+  color: var(--teal-700);
+  font-size: 0.88rem;
+  font-weight: 600;
+  cursor: pointer;
+  transition: background 0.15s, color 0.2s, border-color 0.2s;
+}
+.btn-secondary:hover { background: var(--teal-50); }
+
+.btn-primary {
+  padding: 0.55rem 1.3rem;
+  border-radius: 7px;
+  border: none;
+  background: var(--teal-600);
+  color: #ffffff;
+  font-size: 0.88rem;
+  font-weight: 600;
+  cursor: pointer;
+  transition: background 0.15s;
+}
+.btn-primary:hover { background: var(--teal-700); }
+
+/* ── Toast ───────────────────────────────────────────── */
+#toast {
+  position: fixed;
+  bottom: 1.5rem;
+  right: 1.5rem;
+  background: var(--toast-bg);
+  color: var(--toast-fg);
+  padding: 0.65rem 1.1rem;
+  border-radius: 8px;
+  font-size: 0.85rem;
+  opacity: 0;
+  transform: translateY(8px);
+  pointer-events: none;
+  transition: opacity 0.2s, transform 0.2s;
+  z-index: 200;
+}
+#toast.show { opacity: 1; transform: none; }
+
+/* ── Responsive ──────────────────────────────────────── */
+@media (max-width: 600px) {
+  header   { padding: 1.2rem 1rem; }
+  .content { padding: 1rem 0.75rem 3rem; }
+  .col-btn { white-space: nowrap; }
+  .btn-edit, .btn-delete { width: auto; padding: 0.55rem 0.5rem; }
+}
+

From 75d33ecccec69247ea1ec0693ca0ee5939c2ab01 Mon Sep 17 00:00:00 2001
From: Paolo Salvatori <leprino@hotmail.com>
Date: Tue, 8 Sep 2026 14:05:11 +0200
Subject: [PATCH 05/20] Add the .NET version of web-app-file-storage

ASP.NET Core Vacation Planner storing one text file per activity on an
Azure Files share mounted by the CSI driver, with no Azure SDK, under
samples/web-app-file-storage/dotnet. It keeps the Python behaviour: files
named yyyy-MM-dd-HH-mm-ss-activity.txt, listed by name, deletes posted by
file name with the same path-traversal guard, failure flashes when the
share rejects a write, the serving pod shown in the header, and the app
user pinned to uid/gid 1000 (the runtime image's default ubuntu account,
which owns 1000, is dropped first). Verified on the emulator's AKS with a
static SMB share: seeded activities listed, rollout, port-forward and
in-cluster smoke tests, then the Python image rolled over the same
Deployment.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
---
 samples/web-app-file-storage/dotnet/README.md | 155 ++++++++
 .../dotnet/images/architecture.png            | Bin 0 -> 38170 bytes
 .../dotnet/scripts/00-variables.sh            |  67 ++++
 .../dotnet/scripts/01-deploy-resources.sh     | 308 ++++++++++++++++
 .../dotnet/scripts/02-build-docker-image.sh   |  18 +
 .../dotnet/scripts/03-run-docker-container.sh |  45 +++
 .../dotnet/scripts/04-push-docker-image.sh    |  40 ++
 .../dotnet/scripts/05-deploy-app.sh           | 210 +++++++++++
 .../dotnet/scripts/Dockerfile                 |  41 +++
 .../dotnet/scripts/configmap.yml              |  11 +
 .../dotnet/scripts/deployment.yml             | 165 +++++++++
 .../dotnet/scripts/namespace.yml              |   4 +
 .../dotnet/scripts/persistentvolume-nfs.yml   |  42 +++
 .../dotnet/scripts/persistentvolume-smb.yml   |  45 +++
 .../dotnet/scripts/persistentvolumeclaim.yml  |  24 ++
 .../dotnet/scripts/secret.yml                 |  10 +
 .../dotnet/scripts/seed-configmap.yml         |  24 ++
 .../dotnet/scripts/service.yml                |  16 +
 .../dotnet/scripts/storage-secret.yml         |  15 +
 .../dotnet/scripts/storageclass-nfs.yml       |  26 ++
 .../dotnet/src/.dockerignore                  |   2 +
 .../dotnet/src/Models/Activity.cs             |   4 +
 .../dotnet/src/Pages/Delete.cshtml            |   2 +
 .../dotnet/src/Pages/Delete.cshtml.cs         |  27 ++
 .../dotnet/src/Pages/Index.cshtml             | 268 ++++++++++++++
 .../dotnet/src/Pages/Index.cshtml.cs          |  51 +++
 .../dotnet/src/Pages/_ViewImports.cshtml      |   4 +
 .../dotnet/src/Program.cs                     |  49 +++
 .../dotnet/src/Services/FileActivityStore.cs  | 163 +++++++++
 .../dotnet/src/Services/FileStorageOptions.cs |  20 +
 .../dotnet/src/Services/IActivityStore.cs     |  24 ++
 .../src/Services/SecretKeyXmlRepository.cs    |  49 +++
 .../dotnet/src/Services/StoreInitializer.cs   |  33 ++
 .../dotnet/src/VacationPlanner.csproj         |   8 +
 .../dotnet/src/appsettings.json               |   9 +
 .../dotnet/src/wwwroot/favicon.ico            | Bin 0 -> 36791 bytes
 .../dotnet/src/wwwroot/style.css              | 341 ++++++++++++++++++
 37 files changed, 2320 insertions(+)
 create mode 100644 samples/web-app-file-storage/dotnet/README.md
 create mode 100644 samples/web-app-file-storage/dotnet/images/architecture.png
 create mode 100755 samples/web-app-file-storage/dotnet/scripts/00-variables.sh
 create mode 100755 samples/web-app-file-storage/dotnet/scripts/01-deploy-resources.sh
 create mode 100755 samples/web-app-file-storage/dotnet/scripts/02-build-docker-image.sh
 create mode 100755 samples/web-app-file-storage/dotnet/scripts/03-run-docker-container.sh
 create mode 100755 samples/web-app-file-storage/dotnet/scripts/04-push-docker-image.sh
 create mode 100755 samples/web-app-file-storage/dotnet/scripts/05-deploy-app.sh
 create mode 100644 samples/web-app-file-storage/dotnet/scripts/Dockerfile
 create mode 100644 samples/web-app-file-storage/dotnet/scripts/configmap.yml
 create mode 100644 samples/web-app-file-storage/dotnet/scripts/deployment.yml
 create mode 100644 samples/web-app-file-storage/dotnet/scripts/namespace.yml
 create mode 100644 samples/web-app-file-storage/dotnet/scripts/persistentvolume-nfs.yml
 create mode 100644 samples/web-app-file-storage/dotnet/scripts/persistentvolume-smb.yml
 create mode 100644 samples/web-app-file-storage/dotnet/scripts/persistentvolumeclaim.yml
 create mode 100644 samples/web-app-file-storage/dotnet/scripts/secret.yml
 create mode 100644 samples/web-app-file-storage/dotnet/scripts/seed-configmap.yml
 create mode 100644 samples/web-app-file-storage/dotnet/scripts/service.yml
 create mode 100644 samples/web-app-file-storage/dotnet/scripts/storage-secret.yml
 create mode 100644 samples/web-app-file-storage/dotnet/scripts/storageclass-nfs.yml
 create mode 100644 samples/web-app-file-storage/dotnet/src/.dockerignore
 create mode 100644 samples/web-app-file-storage/dotnet/src/Models/Activity.cs
 create mode 100644 samples/web-app-file-storage/dotnet/src/Pages/Delete.cshtml
 create mode 100644 samples/web-app-file-storage/dotnet/src/Pages/Delete.cshtml.cs
 create mode 100644 samples/web-app-file-storage/dotnet/src/Pages/Index.cshtml
 create mode 100644 samples/web-app-file-storage/dotnet/src/Pages/Index.cshtml.cs
 create mode 100644 samples/web-app-file-storage/dotnet/src/Pages/_ViewImports.cshtml
 create mode 100644 samples/web-app-file-storage/dotnet/src/Program.cs
 create mode 100644 samples/web-app-file-storage/dotnet/src/Services/FileActivityStore.cs
 create mode 100644 samples/web-app-file-storage/dotnet/src/Services/FileStorageOptions.cs
 create mode 100644 samples/web-app-file-storage/dotnet/src/Services/IActivityStore.cs
 create mode 100644 samples/web-app-file-storage/dotnet/src/Services/SecretKeyXmlRepository.cs
 create mode 100644 samples/web-app-file-storage/dotnet/src/Services/StoreInitializer.cs
 create mode 100644 samples/web-app-file-storage/dotnet/src/VacationPlanner.csproj
 create mode 100644 samples/web-app-file-storage/dotnet/src/appsettings.json
 create mode 100644 samples/web-app-file-storage/dotnet/src/wwwroot/favicon.ico
 create mode 100644 samples/web-app-file-storage/dotnet/src/wwwroot/style.css

diff --git a/samples/web-app-file-storage/dotnet/README.md b/samples/web-app-file-storage/dotnet/README.md
new file mode 100644
index 0000000..cc32468
--- /dev/null
+++ b/samples/web-app-file-storage/dotnet/README.md
@@ -0,0 +1,155 @@
+# Vacation Planner: Azure Files
+
+> A Python version of this sample lives in [../python](../python/README.md).
+
+This sample demonstrates a ASP.NET Core Razor Pages single-page web application called *Vacation Planner* hosted on an [Azure Kubernetes Service (AKS)](https://learn.microsoft.com/en-us/azure/aks/what-is-aks) cluster in the cloud on Azure or locally in the LocalStack emulator for Azure. The app runs in a dedicated namespace and stores each activity as a text file on an [Azure Files](https://learn.microsoft.com/en-us/azure/storage/files/storage-files-introduction) share, mounted into every pod by the [Azure Files CSI driver](https://learn.microsoft.com/en-us/azure/aks/azure-files-csi).
+
+Unlike every other sample in this repository, the app uses **no Azure SDK at all**: no client library, no connection string, no account key, not a single line of authentication code. It calls `File.WriteAllText`, `Directory.EnumerateFiles` and `File.Delete` on a directory, and the CSI driver turns that directory into an Azure file share. That is the point of the sample, and it is what makes Azure Files the shortest path to persistence for an application that already speaks the file system.
+
+The three replicas of the deployment mount the same share at the same time (`ReadWriteMany`), so an activity added through one pod is served by all of them. The UI shows the name of the pod that served the page, which makes that visible.
+
+Before installing the sample, make sure to create an [Azure Kubernetes Service (AKS)](https://learn.microsoft.com/en-us/azure/aks/what-is-aks) cluster by using one of the following scripts:
+
+- [scripts/01-system-assigned-managed-identity.sh](../../../scripts/01-system-assigned-managed-identity.sh): creates the cluster using a system-assigned managed identity as its cluster identity.
+- [scripts/01-user-assigned-managed-identity.sh](../../../scripts/01-user-assigned-managed-identity.sh): creates the cluster using a user-assigned managed identity as its cluster identity.
+
+Both scripts check that the Azure Files CSI driver and the CSI snapshot controller are enabled on the cluster, and enable the `Microsoft.Storage` service endpoint on the node subnets, which an NFS share requires. They print the cluster's `storageProfile` and its storage classes when they are done.
+
+All commands below are run from this sample's `scripts/` folder.
+
+> **Running on LocalStack?** Install the [lstk CLI](https://docs.localstack.cloud/aws/developer-tools/running-localstack/lstk/) and run `lstk az start-interception` to route Azure CLI calls to the emulator. See [Run against LocalStack](../../../README.md#run-against-localstack) for the full setup.
+
+## Architecture
+
+The following diagram illustrates the architecture of the solution:
+
+![Architecture Diagram](./images/architecture.png)
+
+## Provisioning mode and protocol
+
+The first script asks two questions and remembers the answers, so the sample covers four combinations with one set of scripts:
+
+| | **Static**: the file share is created by `01-deploy-resources.sh` | **Dynamic**: the file share is created by the CSI driver |
+| --- | --- | --- |
+| **SMB** | A `StorageV2` account with a `Standard_LRS` SMB share, a `PersistentVolume` that points at it, and a Secret holding the account key for the mount. | A claim on the built-in `azurefile-csi` storage class. The driver creates the storage account and the share in the node resource group. |
+| **NFS** | A premium `FileStorage` account with an NFS share, restricted to the node subnets, and a `PersistentVolume` with `protocol: nfs` and no Secret. | A claim on the `vacation-planner-file-nfs` storage class created from [`storageclass-nfs.yml`](scripts/storageclass-nfs.yml), because none of the built-in classes provisions an NFS share. |
+
+Static provisioning is the better default: it works unchanged on Azure, needs no premium account, and produces a share you can inspect with `az storage file list`. Dynamic provisioning is the better demonstration of the driver itself, since the driver creates the storage account and the share on its own, in the cluster's node resource group.
+
+Both answers are stored in `scripts/.deploy-options.env` (git-ignored), so `05-deploy-app.sh` deploys the app for the same combination without asking again. Exporting the two variables skips the menus, which is what an unattended run does:
+
+```bash
+PROVISIONING_MODE=dynamic FILE_SHARE_PROTOCOL=nfs ./01-deploy-resources.sh
+```
+
+An exported variable always wins over the stored answer, so make sure the two agree: deploying a static volume for a share that was never created leaves the pods in `ContainerCreating` with a mount error. Both scripts print the combination they are working on.
+
+## SMB or NFS
+
+The two protocols are not interchangeable, and the differences are what the sample makes visible:
+
+| | SMB | NFS |
+| --- | --- | --- |
+| Authentication | The storage account key (NTLMv2), which the driver reads from a Kubernetes Secret with the fixed keys `azurestorageaccountname` and `azurestorageaccountkey`. | None. Access is granted by the network rules of the storage account, which is why the account has to be restricted to the node subnets. |
+| Storage account | Any account kind, `Standard_LRS` is enough. | A premium `FileStorage` account: [NFS shares are only available on SSD file shares](https://learn.microsoft.com/en-us/azure/storage/files/files-nfs-protocol), with a 100 GiB minimum. |
+| Permissions | Synthesized by the client from the `uid`, `gid`, `file_mode` and `dir_mode` mount options: no ownership is stored on the share. | Real POSIX ownership stored on the share, and the mount options above are ignored. The share arrives owned by `root`, so the init container of the deployment takes ownership of it as uid 1000. |
+| Network | Reachable over the public endpoint. | Reachable only from a private endpoint or from a virtual network with the `Microsoft.Storage` service endpoint. |
+| Secure transfer | Required, and on by default. | Must be off, unless the client uses the AZNFS TLS helper. |
+| Interoperability | The same share is reachable over the file data plane REST API, so `az storage file list` shows the files the pods write. | Not reachable over the file data plane REST API on Azure: use `kubectl exec` to look at the share. |
+
+`securityContext.fsGroup` is deliberately **not** used to make the NFS share writable. The `file.csi.azure.com` CSIDriver object declares `fsGroupPolicy: ReadWriteOnceWithFSType`, so the kubelet applies `fsGroup` only to a `ReadWriteOnce` volume with a file system type. This volume is `ReadWriteMany`, so setting `fsGroup` would silently do nothing. The init container chowning the mount point is the documented way out.
+
+## Deployment workflow
+
+Run the numbered scripts in order from the `scripts/` folder:
+
+```bash
+cd scripts
+./01-deploy-resources.sh
+./02-build-docker-image.sh
+./03-run-docker-container.sh   # optional local smoke test
+./04-push-docker-image.sh
+./05-deploy-app.sh
+```
+
+## Scripts and manifests
+
+| File | Description |
+| ---- | ----------- |
+| [`00-variables.sh`](scripts/00-variables.sh) | Defines the variables shared across the other scripts (resource names, image tag, storage account and file share names, Kubernetes namespace, mount path, …). The other scripts load these values by sourcing this file. |
+| [`01-deploy-resources.sh`](scripts/01-deploy-resources.sh) | Asks for the provisioning mode and the protocol, then deploys the Azure resources used by this sample: the resource group, the [Azure Container Registry (ACR)](https://learn.microsoft.com/en-us/azure/container-registry/container-registry-intro), and, in static mode, the storage account and the [Azure file share](https://learn.microsoft.com/en-us/azure/storage/files/storage-files-introduction) for the chosen protocol. |
+| [`02-build-docker-image.sh`](scripts/02-build-docker-image.sh) | Builds the Docker image for the web app from the [`src/`](src/) folder. |
+| [`03-run-docker-container.sh`](scripts/03-run-docker-container.sh) | Runs the web app in a local Docker container (no Kubernetes, no Azure resource) with a directory on the host mounted where the Azure file share goes, to validate that it starts and stores the activities as expected. |
+| [`04-push-docker-image.sh`](scripts/04-push-docker-image.sh) | Tags and pushes the Docker image to the Azure Container Registry, on Azure or in the LocalStack emulator. |
+| [`05-deploy-app.sh`](scripts/05-deploy-app.sh) | Uses the YAML manifests below (templated with `yq`) to deploy the app to the AKS cluster, applying only the ones the chosen combination needs, and waits for the rollout to complete. |
+| [`Dockerfile`](scripts/Dockerfile) | Builds the Docker image of the web app. Unlike the other samples it pins the app user to uid and gid 1000, because that identity appears in the mount options of the SMB volume and in the ownership of the NFS share. |
+| [`namespace.yml`](scripts/namespace.yml) | Creates the Kubernetes namespace. |
+| [`configmap.yml`](scripts/configmap.yml) | Creates the ConfigMap holding non-secret input values (the directory where the file share is mounted) passed to the app as environment variables. |
+| [`seed-configmap.yml`](scripts/seed-configmap.yml) | Holds the sample activities the init container copies into the file share when they are missing, so the app is never empty on the first page load. |
+| [`secret.yml`](scripts/secret.yml) | Creates the Secret holding the `SECRET_KEY` the app derives its Data Protection key ring from (so antiforgery tokens and flash messages are valid on every replica). It holds no storage credential: the app never authenticates to Azure. |
+| [`storage-secret.yml`](scripts/storage-secret.yml) | Creates the Secret holding the storage account name and key the CSI driver uses to mount the SMB share. Applied for the static SMB combination only. |
+| [`persistentvolume-smb.yml`](scripts/persistentvolume-smb.yml) | Creates the `PersistentVolume` bound to a pre-created SMB file share, with the account key secret and the `uid`, `gid` and mode mount options. |
+| [`persistentvolume-nfs.yml`](scripts/persistentvolume-nfs.yml) | Creates the `PersistentVolume` bound to a pre-created NFS file share, with `protocol: nfs`, the NFS mount options, and no secret. |
+| [`persistentvolumeclaim.yml`](scripts/persistentvolumeclaim.yml) | Creates the `ReadWriteMany` claim the pods mount. Committed in its static shape (pre-bound by name, empty storage class); `05-deploy-app.sh` rewrites those two fields for dynamic provisioning. |
+| [`storageclass-nfs.yml`](scripts/storageclass-nfs.yml) | Creates the storage class that provisions an NFS file share on demand (`protocol: nfs`, `skuName: Premium_LRS`). Applied for the dynamic NFS combination only. |
+| [`deployment.yml`](scripts/deployment.yml) | Creates the Kubernetes Deployment: three replicas mounting the same share, plus the init container that prepares and seeds it. The liveness and readiness probes call `GET /health`. |
+| [`service.yml`](scripts/service.yml) | Creates the `ClusterIP` Service that exposes the web app inside the cluster. |
+
+## Accessing the web app
+
+The app is exposed through a `ClusterIP` service, which is only reachable from inside the cluster. Port-forward it to a local port to open it from your machine:
+
+```bash
+kubectl port-forward service/vacation-planner-file 8080:80 -n vacation-planner-file
+```
+
+Then browse to [http://localhost:8080](http://localhost:8080). Alternatively, use a tool such as [k9s](https://k9scli.io/) to start the port-forward interactively.
+
+The app also exposes `GET /health`, the endpoint the liveness and readiness probes call: it returns `{"status": "ok"}` when the mounted file share is reachable and `503` with `{"status": "unavailable"}` otherwise.
+
+```bash
+curl http://localhost:8080/health
+```
+
+## Looking at the file share
+
+Every activity is one UTF-8 text file named `YYYY-MM-DD-HH-MM-SS-activity.txt`. From inside the cluster, on any of the three replicas and for any of the four combinations:
+
+```bash
+kubectl exec -n vacation-planner-file deployment/vacation-planner-file -- ls -l /data
+```
+
+An SMB share is reachable over the file data plane REST API as well, so the files the pods write can also be listed from your machine, which is a neat way to see that the volume really is an Azure file share:
+
+```bash
+az storage file list --account-name localfilesmbtest --share-name activities --output table
+```
+
+The same command does not work for an NFS share on Azure, which has no REST data plane, and it needs the account key or a role assignment on the account.
+
+## Cleaning up
+
+The namespace holds the app, but the `PersistentVolume` and the storage class are cluster-scoped and survive `kubectl delete namespace`. They also have to go before switching to another combination, because the fields of a claim cannot be changed after it is created:
+
+```bash
+kubectl delete namespace vacation-planner-file
+kubectl delete pv vacation-planner-file-pv --ignore-not-found
+kubectl delete storageclass vacation-planner-file-nfs --ignore-not-found
+```
+
+The volume is created with `persistentVolumeReclaimPolicy: Retain`, so deleting it leaves the file share and the activities in place: the same share is picked up again the next time the sample is deployed. In dynamic mode the storage class reclaim policy is `Delete`, so the share the driver created goes away with the claim, while the storage account it created in the node resource group stays behind (the driver never deletes an account). Delete it by hand, or delete the whole resource group, when you are done:
+
+```bash
+az storage account list \
+  --resource-group $(az aks show --name local-aks-test --resource-group local-rg --query nodeResourceGroup --output tsv) \
+  --output table
+```
+
+## Running on Azure
+
+The sample runs unchanged against Azure, with two things to keep in mind for the NFS combinations:
+
+- The mount needs the storage account to be restricted to the node subnets. `01-deploy-resources.sh` reads the node subnets from the cluster and configures them for the static combination, and the CSI driver does it for the dynamic one. When it cannot, it says so with a warning instead of leaving you to discover it from a mount timeout.
+- A premium file share is provisioned capacity, so the 100 GiB minimum is billed whether it holds three text files or a hundred gigabytes.
+
+One behaviour is worth knowing in both protocols: `actimeo=30` caches directory metadata for 30 seconds, so an activity added through one replica can take a few seconds to show up on another. That is the ordinary trade-off of a shared file system, not a bug in the sample.
diff --git a/samples/web-app-file-storage/dotnet/images/architecture.png b/samples/web-app-file-storage/dotnet/images/architecture.png
new file mode 100644
index 0000000000000000000000000000000000000000..1987668093155907fda0a64ff2912d101b089978
GIT binary patch
literal 38170
zcmbTdbyQr>6DK-YkOT?t5G=U6CTMV-!7aGETS5o~g1Zw!g3S!>E<uC4LvVN3z4`uR
z-#hQT-97uqoO|ip-PK)P{i#n?H{oh3a+nyT7$6V`Q~sT_1_*@c3j9dW5P=eSkc>X?
zU~!kxahGznFm<<aa-`O>aj*bc**H=2Q=3{jQFC*0^HXzi3iI*_^9oS2aB^{Sy0A@^
z0?km}<&|YnchR1qu@h}i>;Dyj?)*;I4Fr0Q`}c=1witL16e3%_RelQsmB&24H$?$~
z5?$q`-)ec!?PsC;Yi%@N4X26S$@25-#(yBjSAU79htEn^Cw-EC*>V*z$8TLqP?zKS
zHDCw+VBlz2#}-~~`yH}9KmUGVRWkT_FviQ5=JIH-$m}iy(gp&D?lOfE()#v!gm@DA
z?pvb&q-}|A`3w#CY~Ex&odpr5Tj>5BBuJ7P;}RGM2$X=@%M3iIiDSXQ;|(V@6nK0v
zc>_TJp6wrCe{~d$p!>HjGE&9gwrJ1H34jOAi~pO3I_mXt`6)yK!Xh>0W1n6aWFGC~
zfIv#5)X+9b3m+R()62~)$H{S~diwo1WfDp%TUMjP+zH=oK%2qn<^-vKwD?--TFa^y
zzC$w~Y|YK;cOFhx-)k;(E6{j$$LgNQP7VvF_4V>S&l6HiA6hT~R|}1&29q!83|REg
zS15EezwUu)ocfGH(qe>CNcBVfo|6F+L$1J(<tnyiPqO<7O(Hw9jUd&L><muV5HGQH
za}X!eRM$yQ(QV8Ufk@Bl*MT#B6CPU;PVSdg@W>}?q1b)TWqcj>yOl0QL`zThz%+`1
zt=xW49;2UsU*GGOu*F9AKt=GgM`x6z+NQepTZ0UmYZwBE`pp~2NA!eZ4M;=3jKh|Q
zBM-j=$NKmNz5^dKcr%z>larQZ{%znUPh|zvmTX|u;Ls;ptWF4JZy@WJrC&m75f;1q
zowXNtUrBLI;C?-O1h6C$NV+JZ(lADqNHiZht;5<D%_ZDLDF<qL2S&HlALZWlvrBZA
zyLAz7UUPz|zX9@J4k1?^X7KGYbG?(hs4n-GD~jE)uov!t;6uP*A))L_>I4oi<1`1{
zA!3RH$R<0KGbrmT&HeQUK-eW<B4PEYGw-?^5c9Gv?dLSLI`zxQ3J=6nqb_wY`M-zD
z^w(SP94IMhIKI_oSVlF-Ftl!<bL(G-kJul~@3cU{tXa~`pjk0M0U_h2&oH#NJOjEl
zi3i#JpO{xDHWp$3g*$@Zcu_Db+@x};l&HXTmJZbR3$=n2a?B#mi$A$uui48LEYbi8
zQPX@g_*_+R{-7Iy{jwVY^dTI{obSaSh+kn*ZOy&G0kKr{#>pP(>D|DLP7}Y#aNWXk
zH~QuLqE6|yNhLz`r)C#eLPmc@I7wp{=4CAc=o-7%mbilrEj7!+;ii6$E0i3{$V-|^
zpLj6E)nuS|M7cKl$e&*w#^!5Rxv0D`G&oD(&;G+ipKR9CDYHMy|81VO>QHS|`O@mM
zyLk}k9^IS|wsJ8r8WF_q8Cm|Ld|o(oIknsOia6%7mgE4r=6qLp_OP4F3{PNcI@M#Y
z?xWp-cq8#1n`2okCa5jv4WttzA$wMssi)B_a>QBjp3H))wEM?cNgtD~30oq}4c`pm
zA312|1jH`oW|1U!aI^dI&w8z;tn)+J9vD`Y$p?1sBx~Ee`%XxpW7Jsiif0cok7G^r
z39%bC+{})Pg=IdzBf!eRQND9~GNYm@ru@T$0|*p|A~N#<U2a3RK{SU-Sz6i|sT!5X
z4g`AjiEf4n^ntBj|EnjCenOC@PP?Qg0w@;=_Ai)O(f?l}%1ScV^W_*fQySIU??|8z
zBftg~ZEqr`t}P-@zDELqtN`QHHn$hnFxBgD-ruxKBBOAKc5JmEvmlf3C9GZ3->~Mr
z^g;rKFak4SyI<m~$ta!VAT~6qbulLCaw0MVs^)Zx_mB;M9hTZ1mbzsuow^?#K_6lP
zN&erL9M7s@{zlqt#kN4j)(w5#v^C7l0g;xIxS3^45Kb^4zE&$aWs|kHV&0!kV7d@W
z2;L}DUb9gD=esTN-Al`HV9kEe05zkOL?C+JL>+8JRz-j>IBVj_n;f$c@~{X3<)WGs
zcuP)hjs{E##xPiU2+#RP?KQ$HD!^F|BQ-;P&)h!GR;T&LIPuq-k^M6tN*!A&B^+4I
zCqOH)C{zD}?y`S_b@l%Op6S|KK%7O^RAW@Oltp`ELkh9%StMK%x`g{Ih@cN25Oq<4
z%dgH?@TlC+p)WR59as{w4HL-s_kfRWAJO^W5Jww9*!(u)14QG%G$rjV!hj>dIff&e
z&Qz3+o8BK`xkE3!-2sh1j|EeMqy<&0i<`xe0sn&C%Zvl6&UP`4ufg8?6z~!79Msg%
zH=tF5_e7rpQ-;2vU7{d@-h2RDjp<C4XuIjXl)$h2E|WGP5VgVILht*jko&#&_B1I&
zku%lo^fM^{PJBedv;PpgFD7=~UjOIvRkI{bgVS65(K!?2mjIsQ_cA+6way(kB8kay
zK)>j)rx(xE(K$Lmsz9^c6HjE{*|!-f6bF+vyyP@=b>h%LIJdxxvFtWfc{O>ap%r_q
zZxV#B?a#qSHHI(L6)ct3*UBf-3r&JdKp<i&z@+f2vkfo%>BA~jo=!$4!W_R;hl@_;
zi%%8{Etb407*L2^ie)zzrhUJoG;i7_tsFEebHP>P({H^SqgiM}yo3xwvlt0QC?Ic!
zxz@yYW*?!#Evk(jW=>tU4)KsKnZjW$Hzo}i=NV3uSiDK!EQ(ZR3wz!(0V+4-#3dH|
ztdlc@MbZ4dB7_54^00;ymfla*eA4y2G;rQ3x_;Z=<qIK<3;~4Z0(ey>n^D}YuwVWk
zW{R$!;9cD}wx9Hd#nqSIo+ky79W{-~@0bKx{%2NxwS^D41y^2;Q(8Q#{v+)i&fD*Q
z9Yqnpc=7MfDsg{cUAcda!8vOzobs@N`*|6<6@#1aq$SYJe;3Y^?_Ah3d03g3N$`L`
zk-*A3cR6V*m#a_R^i}lB<)7`nOuzFGTc2lPusZ10(MK_4EqLU4nbii^GAixIk1Y7O
z>BRYDggr0y&)(-a?kG8Sya->9$#$IfPMR;`*SuwXdGS@y5&g?^VTC@8vmZLo5kZ{t
zZB5`6kw(=QIPi<zL@S6Y`Xw0H98@1+h^ntJgjwD)+h;3;j@6Tsy#O{GiZCDsFy$oj
zJ&DQuKhvMT#Nco!q%7A`-=65>4H&jhP1qG3@lEJb@aaoh$QKc)gyQB*sG))lu#drO
z)T_uZr_ufMUVJ4&1W8irK-;)%#qJuB7KbTzUA)}`EA|Ib#~mzJ_9?zEky0kumuJo;
zb6Qg4a;ZLXO9ybR){XdZ4{b$UJO_~QxjBL02kYG^4x_@ou?7{{#EZC$)$3zZf{U;~
zRGTSTm$g8jTaw-7M)FbvYgt*%R{3>?KLA5xL@Xe5ZcC04S+r&T6MpJ>riXLHL{TtX
zTD7lrRuCwVu0W#wjG@ondj{By46$I7-?^JFv59=BWe@U>suDoz?azngkf+J81GqZs
z4aIWD+dS}*{&uU2QiHGU)8LG28uU;W=4LNWc|w;I&e0?f=nW5GiDg~0md+~UwM9R9
zYtO&&RQ$*k+M7J&)pJKg0!iZi{XS1Xc}<W0#MgZ?dNI0?u0Z6jrT}`Q^C7OSEm>-C
z>7p&a>)o|szl4TH5E&_Lj+d-POphy`{VmBjK6tp@#N=P2kQ}pFS@;frW?P(^Q5BIC
zhyeQYAI5q8FQ9AVc6q~z1ugvQyW139JnD?}X{)bL_r0U;3ZrNf0;uB|FeC))QOzLI
zZ$lz_DNJvrA84{0)G7BBkpZX!>7uNCCN7fJG#t*Ue;wh=IyL?R;A8G@ugHms9wPme
ze@41FwOlv?umD1nr-qss+!rm6dr&GoW3@X(0=1c=04`!HcxZg`3_ak*#b@RjZ9qeT
z&w$c`rH3UKGwWkVur$zC4A_2NyUhkM$4x2RK$Tahn{dSCdKCqFIn+BEfa=fyzzR^F
z4<_I6h=J!{Mvaqw`R7l=;h~8!;2)6@{uV4#2v=D=J^r@@s7XysT!9=?5a6u?pB|2g
z!M^+q7{<4c)fo4Pag!#-0B8TFDdk^%nF5CPPv_T=kH>Ab7$7u#6F6ckXqg#AEedRs
zKOdb4KsYu3A^c7RXxRQx(1$X>xg0+S03Or<tnELeIRDi{g?b0L9BMQGEsfRQ0X_vl
zcr-+y)}I}1=%jCep1XS)2T+EH2?JA$N^6E!Jo|5he+vh&-y0tn{jZE;<QAaTKQah)
zfZ{JOqx~c7OMoG~!2yu}kI&=rp8|;|(HU(Z7<mh-zz9KY0fXMmATBfG{CjSH#r&%S
zV37Zv?|-K7|L*=T=Llf~+|&PTk?s8%@o$&j|8!Yxq-rE>@G0OGuol*UlK$9GQI_l-
zV*Sq%{YO{-(In7ihx7R^_|$9Xd}l&udAI8^@KjI84pPPegf)l=N*L5HDp%L6hzR0Z
z*ZG|K6HVbYR^~qfyi<D*`g*9aFDDWHy1r@*WV7Fo4>EEwbJCl`IZuyL*eG{nfTG_3
z3x>R=%>tQe)Cy{JwJ0ln4s;8!1~gec_wzM@WqS%KrAZkZoAwrVU?s?b$<gsYV^IR8
zR0jlYlJ6bLI<$aUzXCpRT7DwP2NwNBJ2DwHXH&axc`Ma_{}w&y>|93y!o0s#0dsl7
z`M+amk^NEUjASfX1uo98a_^hdRaw`_dk=L`&Ol`_FmhgC0g3P-Wg(&8(?zMy*=s|@
zDwt?NC<p*UN2tJ9h%YapF34|jfjQWsPZM!$DJzrByH5~rAZC-~ZT{^*3$V>v-a{5>
z|B$PtS8}qtpP*&}ymzUo{cVAh*-7Z&tgKn0g`#VZI-uzg5a5)9$3%y^2UuCGo!P&9
zo>vxYuD|&VuEwkh3)j++(Kq~EWCcingZ6>%<HzS1EDI#5xe%b~H4y;gZrntX4dP^9
zy%N)D6us~>@-WU0s<_My5vqM&cfSH41-X~`I5SdtzEZ%7w9(G)d4y}Ei;xUTwg1HC
zK876OYoVgpqqVMk5>VSZs^S5_P=TQN|0s?@#9p~fb*UkXdSKv>uB`?_6KBBC7c_N^
z^mJ0AWGFzOHo#<82vxvmil@&Nf3r2%F420J)vu*?uWpcit%utUKuRoV$uu)B#Gz#6
zTg)I64FKT|Ie~DtHoiqyn?+!A5}%K__MM@c=B}WnyA#=XHW1|U*wvoh&6HuHSdc}0
z71&hIk8+s7D4rniUIo0d8USVsCK}*=1?_sq@fN;?u@EdXw7<b;MibxEv|64b@mN|0
zwAi-tG|G;Y6m!}D$_Xq2H!x6An$$esR5{6wmaCD?<0;rI!ywzA$G=giZpxN^$2Rga
zPzWbb4|nJVpVu%y{syrJpWEA^!j|-!it?E9SF|jR#r8Q!X1r$OFKar?pXrAI*h~l5
zf_AFkhbVIx3um!acfObmUlU5>$GIT~3o|M+MMrt5x4QWj1{&oSpoGyEln2y9dCY$U
z%MkXN_P<dj&I_G?<u%>~2OyYyA1~$K7av_N<wpJnlXFx^O`^uUd=1oFe*2o!xf5^0
z0bo*OsTIjXk@uV7v+a++K%f;7VCas3t44;wE?)(dNdWsT@;TsWj;`-M^?6yzpe4<3
zAV^*2=m$Tf{oOwRejI(#M$@&j><<6*0MOny?*M-wGU59w>*SXn<|QhC(yst{$I+;l
zp3m-p1c%8g;=fG>ut-dSftV;2b>w_l2%6{?0!We!U{jxLWwq?ye=tvqA8miE1A#c%
zO~`@S{r@Itioa<&{@B^*ikdnSfC#JFWmN%5fU~Oh&zLI!jsRU2#{y9dA)%$y(oUT4
z<|Yv&>40o<vOB;6{Q0InJ4uReMlbFm5)Z|I#_CGN0(;QhNX3GO4kje7E`5;N(bXyt
zRWA_1)gw1P5k$Hskv()T82Ygc5yU_r3r6^Fss^Gh#FES-Qy-*k4<pZmVpcPN;R|(5
zb>4YGaVOMPed#(z2D(k6Zf@YoO(o$kQx2hti*X(K@`5A=)K<ptECw~rJn1S~XzH(}
zxh{_6@u?W>72hB6hUUpkbR*k3@Y3OfIMF}CFv8TqZbB^Xuo7JLfjs7!_=Wzcg;oXy
zSNH*Vyk54LKZVVDB_2o%>{H9y07;p-gZxTTjDAlwKhg+S*9g)`A7n&SS^AfXdrbM#
zZ&Re5Po%BG`}J~~_#?i?5SCj8Y}E5a1lMDLQvKgRP&#3eW**hNF?e0^qewneL)w)k
zdQfH=0>|aV_J@qPBt!80h>o$8O99EB{fW6ylOU}KQcLn4!LQR53%^O(kWf%SN|Mx2
z$+w9vS`Vl1dSTGdGBSKV`Ac&PxI?Q8QVzri%X~Y#I^gOa>+}kUr{lMB9;Q~cv1W+h
zFz@cRCNq2B%$ox$O1E7RB!i~pTyb*J%HT1PPrQ*}0E3V!m~k?>(?z_=B3xM;(yMpg
zp(I)H{bKyrrW$c=&}$t3S?tOWwXoKVEd#e2AvM-#35!Z*O^r}tjc3fWhCR+mJ($HZ
zob+f-49|aAO;_PKFuU<Sy^X=zO(Zo-1_C=A7&_~Vd+VR0UL<=MuKX$5>4SfBJFdQ+
z-Fn4URsHxfyffa3+qOoO>g%{$K3mDW6CA@o1oVekb+zAE#1pe`2aP9L)TdCSR8L%D
z^&6p8vx3LgsGBRj=PLmGPt4WjHE*LQ%Sh}AyZFdtSFChCTFv$Ey;uhMDAN0hs54T6
zECx+W2-u#lfz3rBt%<|{W#tbAm@hwoF<7r#z(Gj>k;;8xPEhwLwfI@*b>+#IH%S0K
z2O?GolUTDFwS1g&3o(|KbpD(8T;WQsWv1@_=?7;h)Js0C)^E}tk&3$OFAVm`%-5SD
zCv;>AB(Y1JY->W?`~~#;1kxqI_-+j(y<~(ozjUu+W>iM8NNeFI9}?%ec2IIdZOu-i
z(`m+SI}*e0w(GVI6VXT%c~y^Ypl4$wS+>1U&FkrYWS_Dl+P~ovAzJS?>9yG>vyNb@
ziV%v=!H5_0%al#dudKTOf`0s=nsisk_d`*nvL8l2cNEL%wBuDu!6e=)0mf%!M?cUT
zK}20l7noKO_u-rZ0YnR5ga4riA>V1f=I3|;>KzntEz}@gOa~Yk$n@PrqhQ+0J36A*
za_oh!pzpbbVb@|~$4F2CEJBDH`bcAD*uGts+n<#IXH|HG9aRlx>Te=qv8s6%12D3t
zl17m)L;&!-rJWgCl$VmpovhW<;bQ3Lj<x1xoXO>)O(11Oiu)w=KHTuUpXK%ZT(Gt{
zKuR(9P4GH+2|1S2Jm}CG(}87hMil-il>z|H><ylVrdN(I%D;GNHAYBS;AYyV7|{yX
zDVT{d8qk_l2RiW~w0`Xft{Siz_ytp5N+bTfy=6Uo2zGt#{h8)pG?97%4*ni@b5t|!
zZX;jED{%7&W3*yYRKaq5Do#PJNU+%08(&@brU59WiK33(r|Nv%@}{$NG@|gcP1&Ky
z4G0#^PM>a>uHo_dR!-+%zO34z4RPR|gd+&kLL|rD=!*TR?+oMm%bK%8ieSFbB2hI6
z_P>~6NS@QAfHI$(g_^2Lt7zfXfjgk2gw(QeBs=9nrNmq6h%((pfNO%N?a?`O9W=S@
zmbq-0N4shd73tH9`CkMqUmccbw_@-44KV3zO&WV8#kXz}$HR*K1bpH?L{*gd6g2B&
zT2%kT-tEy#mAQhBJ^hSx<Tb<Dhd6gviQqxPOAlD+6J6xKf_aI^x7Bc`2?y$rpC+K6
z&z|B4xne?CO72_okMMBogtZJg@35OHPMh167w1Hl_XN*|ciJEQ@lgH=8@~G4T|`f_
zABl6dg#|U$dH_M;mZ|HZcSph81ZC)a*g1PgGcywUG!}`sa@3dj`ztX9W%`LKe>f>;
zthUr1lUUv>F6HLs6Rvgev`2{Q)J$MROi{}zAC;8rbxael41S8Le#&M=1dk4Cq$LYe
zR-&SU7ujZ|D<Q*jsG6y(u|Zg$At7^S&du=Gv9asp<bbSA@322xSQnA6m5j2(`obkY
z4@zKInVx<|Be=Z69z3JU+M`OZHGK?Qk)JuEN_3K_l0VKn1HM4145@>x5g)gkGz5t1
zY9T?KBCe3&MC@f@sW?K~6H%oh3ROX)SC^cy*fI7FZZ74H=kI^j3v^S#sD_NvF7u7z
zi*p?l-O^Yif>t_r4e83<rxtNv5>-?0s02J6fg5tsYz9^n{cb8Y<sOd5SxV#Du(u>S
zdi=R04=m`OYv+ThY+L<|&IiyANn~uBcr}EXQW6jO2dp+&m0B=!JJwt3uo4<swXU<=
z!sf$*VhJf6N`(BII*;%1b<-nGgzU3o=8rLLPOs78s7=r0oCz6>zo?l8J&lMyjn+Tr
z`jBk~p=F1NJ-xlTl*&Ms5O$-#8vlPxdf{<oQ#o$Z!)Dr2y#&26uFdI^lghT<k0Gzf
z0iD6Zfy{bphmR+rgzxn@3GZN5!PbujYJ%T`adad%8I%HH+_t+pN~%H=W-kZCPX28C
z^u(M3D4dcw7GKQ5$(+UI>`h6+=PVfRC6>Aq$$__>#RZ0)@`DWdKUttL<hAI<M&tUs
z!yC<f<U7f~yy$i^R1=<_<hD?CeQ1#s*l-A>OsMLa*k^Lyz3a|{jc5ToX2^Nj<7OVL
zNvM3W^etmX6kqCrG5xu<?ry#K?vL(qyxgMf<AGeMRA6_en&a4AsGWV8H$SwvNSo9o
z{HfZ}hbzv=!aFGy=(UXlgxnwok^()x&A26Yw7rk~{QY`)9!b|_80ouAiUq2wU!(tt
z?>@xBGVyjin{YS6VPmS(X;zm?;;^J@%_HWG$<e$Kty=%H@tpTfxIobCBH`qraSMUJ
z>Q8^4nZ2dQDqq3)GUaqieukEvGbTCZ$#bJ$_v9pyt*fofR4|$XwDO`{NBWK@s9hEj
zX@xB?y|$kdHe@mq|3p$UHWv7R0I)l(<a;^2XL`&p6}uLUO)IaQmu$V^=r0gIt+aq?
z3Ta8RKAOU)kWb#Afy%;oU+QJ4loCZ*pSz~%ydqHA6g`KB?lggMBx9GK-Gsl9MgT2I
zvTCP)|4#Gcz4}V`*58jS+LUY@tuxCKkN&+p%ViOMhavgFeZ8;s-)G+s?C8f_?-zXu
zAwIn5Ovw;sp>LvgK<lhfNK%0cL`nz@=%c(fyDHLLO97wy5o_37_#)8}fO`Bd&D&?Q
zma&U&L$&nxJkjA<%B8S|wWLjxAlX;c{l#P3e0mRpXYIhqc)O4E={1VA_J~8f+URgX
zQyoT--&^yyo_7+nBqTNk?Ech-$k4%jcY-IGyqd4a3>R9bYKrI=u1_h<qUKa<fG<g-
z8a2n^-T3EyEYOOefc@=Kr!VikcN0v4s1V;!j!z1A3OYdk8R`8QL~cS4X+R4n8;2~B
z`G{xkTY%J+)`D8?Bz{T#(_&7Gr1{C9SJAXq0BUw-z_g;pw1eS(F>2~o)K$@Rlu)Aa
z6*MRP#fX{ya*lDQO!kt`rO@}09D5SY5w{6DzE<Ok^Q!`I07nV>r2x$f*r??s8F3I1
zK4r^fe-v+XQ=NL@KIzw#aZ7&4t*a2C(IB#UW(zoL>6<`Vckbz{P}Jy>4+QvAl+`1f
zC4Q7XJQA<EXAtHWoRfX?+RUY0H_ZZ&WY~0DJ%_C4h;ArX>@|IR?#=gxw@8ufPASFo
zmU;PIRW?0(c1aJOpE?m>VaZxd-YitK)!OD(G*y*x`kkp9p^PvI$zU$%A=}HC?qI3n
z$1|48$h#@d&}MK4Kftf!Ty7zKcoy$e3NGhHH=sxTF_hJPYbwuQ4)F_L*G%uPIv(y#
z4AbB`&fG5IjyG=_H%<xne*Us|HLQ7bM3sX(hwrXk)=Ku&R+c!d0=b3^Iv1xK#~bVD
z4eb>tmG>!9lv57!7jP+Q*t2eGob(*15KDPNLU*L+gp(%kHh!mAIhGX9W!h9Yu#ws&
zRi3=t=-%k+A`7Vf^crpL1is7AMf|hT$UofIcEZBqCm14LDH3SC)>z?^8+8(>OK#7<
zStLMNUFKGx>@7HdGA)x|dfV}P_#p6{l7%hf?iT`hHV@xpfAK+u(w)7@zsH&)k905E
zC`BGN90{XmDB9%arSLa<ZS0V4Ja@CHdP=@aZ&fMGX3hPUa+Xh+N(^=kkAAN;X}~-U
zgOX%KABQp|X_gJ8jq3b!xGVejJa_JZRaNTk?6W*-Qoi_DtAUJ9so!AqV1_I?aAb>w
z>-sw>_2|(yw!Z3?il{UTl%~nw5H%m!BKVv^O&jr~n$}tzh3HF?7^kF(>sVeex*3I`
z*Wy{iBGrkn?v1#`el^(|kI3~7g57dbl-2KTkVsASBPDzO{-^-PbzXs&M(f-~+AwAH
zF`xnGL*MevE331cp7gGxlBcEXYGdL6Vj7N;j!dJcM@$H9DoiEk;mlzIDLGO0&h-#)
zzT~c&>tVIwqSg4lQmy&cg8>JZ)t%ARlA;Q1gs;*5d3vL#7@vGjxlXIE&g-Z2wkEg&
zqO|r|KZ~NPkEtE&lDcM9!7m$an63-io?YRXM#F^vkFt+?Z61hc4|TE<OjHc*O{3;Q
zLP9@%+>3<LDp}@-(xXXBOFsS%6bX`)g?JJWy^P4}5-&wpTGtv5$<HVKLvF}%%E0up
zz#*pTX4HzKq;KYlz54NDHgVMI@=ahz#`;M6>&-~9@$K0;inCCm)i{O{KL7q1WXl0#
z-`{8Yb<|u;g~E-&`>s5u2kO5|t-p6SjEmFoM+M~Swm)KZz8InlcyB+kpF_2OSMTvF
zT{SGbDlljo;dic~RIwqy?$U+E@`$3@I9_$&X*f~OdcB=>l!NzB0zZm+jW)Nu35kN0
z3Elfr5j!yhJnykPNVuoE^osZI_=<BRCq|Z;wW1)miMW2A?v?fRvf`TdnJl{+)o>dH
zg8e^|eubE?7Blu}#qS`P&qA@<;}rNKg&Vj}DFgCWD;d5QUzPIpWpr6tN@Vx?4JU(u
zHFYjP;Cz-ob~AzfV!8O`5Dl+aH*P)8ZZW*jlD)U6NZ>};D{*eUO*hKoj?@r8wvu|B
znEU}a)zqEb?#qaF&P(s7*kzt(6Pp|UO&~g#MSd$<VIAkx0%k~52K&hoO=I6Ls49!K
z5qjs4s2e~9okaDcBz-12y0e~rz--~;J%+oc-WM})PZ2mb^!F_lI!#!=1J3rd2U~|>
zY}Cn{I<AV5Eo0?)wz9(oz&(jb#H@0gVe8_7xqb38mvpy^<n{RPOlPt5ibDkXt~Nt`
zdfd8NNxnQ1%L2>Hc=6-5N`lVriyp(YJ<%F_ZdPP?GuH#2ixvls6<78`^irHLdOG#v
zpt6n}TEPX5>Yzd&^S}yLwr75eAl2E5pr`zwiUGjxv_99%ir&jhqw}wz->hdXXi){d
zasFn*%pl2r>goq+_lMFww`M+$_?{;ha0Vx(I%SB;*O;)PItX+p<0S}TBr<C0Tz;Mr
zLU;@h{uU<@)KYc_4`udh4oPEfqgUpK-sy>=cs?9Qr%Z7ViPl8eR2Z|*I1H&^>BiJl
z4qqm)<?)ntT0P)gL*9;fKjnsX*E4W}OhM}TIU4hxOYftt18vqyOIUbR_yX4lx4L_Q
z%pF0VTXcQ>@4V3*f@Z&`GYOaUTq_|Far11a18V*66*m)p`6M&jG3D*eFv|Pcfofg#
z_7)W!g@slxCqpl<vQoqk=tJp-(g~Y-OUBfjuO!~4>76AGP812L9&!&0@pJg}vT;@%
zgew)0_{LXON*OfSRAm{~WUi(&fWrua0V1)?e4KpR&;T4R{5?lVh}#UU%>Q|rVdN9d
ze3p{Z-hevuXtL<lQ|HmL5UrPE-d0OW8map!r~<US`wN*?O)@86JMi-Gp;SyLqcKAw
zAn1WGNH;Q>(&V+MtzKy5{^;n=s42)FYDvoWbyI&y#AsltN&Jzxh%Dpd8t);N5L4CP
zb9at}ZTZn$N#Z*Q3gySu2TnYqFiu4J^_%^o{j2F#$8(GLMxXOWW0Ea;iQ{KPIPS&e
zVC*t7?oAHh&IR|M)bkebcL)$`L+nI(37uv#4gWZ6)^@L+j#?ZtK^@kay^;y=2^v(^
zE@Rgu2a9(BQBrlckk5dqPEI@wU=pdbcGEGCP*tP*BxNerE4nJTz`=rikL>#D1|_IU
z%T<DYcBzZl=7P*nG*<mS!X`#e(C-W?64gHwi*-ZVIzZ4B<Km?GRdJcoTt+`?k7UD<
z?Rz(?VrqHOuciSp3%#M(ZCA?b0L^4W(*6p)T<EwVp=~)>j7iuXO?$bxjaJQ{*izCI
zIU<K-qT(vqOXAWd$8-N#C`X`#|6+D@X{l{f-@uHNb0=g;wU6zc&{iKj=F~5ID<@#d
zI?1(}sQdBLu;;@qu?4qkmZOn*O74w2k&uX>`8d-4im+m~gnpZocc7uqH7or=t`nd8
z#aIsS)bu*O{f2o-xi>1<g)XI-Re*|ou`s_Z*rNg=dc$3y%elDWb!T5aRs<Hoiv9)S
z8d_q(0IeDpELZ%l7rTr2AZFSi@{Ny~%K&68BPS8F8K3{)hZm0WLrO%po0xC0+>=Y?
z?Z*K$@fM4j<AQ_*xAisDTVq3lpm}%f+I!csrx&dPaVTdc+-~+)Kg)%;eySe1Cg)mc
zk`@TfQ_!fIOgo5JPyQXgmFn1_g8|ZV@vshLRUouxj&;&*PN&+m9jix0HO8x_e5N>?
zkb*g++-XuDuo-je&7DoDhfH8wSIfswPU~D=q!Y3|c110?{eTQRid!q-Rm8q7+dDlr
z;lo<choT1Yy8%eTsh!7Frr)|9p7hmoA=}!``c3D0a`j>+L(mEPQ_b}K(yCnKB~2|u
z5SXDkO+rIq8lqG4`S(m!vvcJ`Xd$Gav3&`0QMHXe{NQ&b-ssDhILX%il94YbUG5wC
zZ<T9;p!KMbhSQ@(2|~Yql(X#8!!|VhFdSw2<n3wgI`Ji;llayR`mX+N7_j5tt3bjB
z`}M2n5aO0hjH{gn0#@4;*M==LaDD9%@stCu*M@>7uu?L~7aqZ-gQJ*KUi{~~y`u%<
zWYaptYY^`H)Nep`#sMbdxNs1SvYFLW@35$(h3}eCf@=z05EPD|wpA4DDQIM$=!RT;
z+a59PxPgc*L4&KZv6L}!<<k{oD&FawcJfW1w!1{XIdM%5|0+fNk((XH=iys*&0&XY
z&zls+$l_F~cN@{ZPIJBq$5nn<{T_jhZA)y`*Q5nmYf2gzyjO9~q;Z8Xw3gm%XFFzo
zCuwvGUkB^f_`8Y1=>>B7d7Q32e+>d_g@r)@EzZWL5Wa3&E^a-xzX)u(XsT_xYkrpG
zA?l+@BQLcRSHZxl+n~fefQEk*nr4C=VO%yk(F#}0BxLhUPG#Jqoy}xIvdBvG-q!bM
z<syG@U(CSHmvGh0H0DTQq#soj_uqnjX<f>qA&Rkij>@a_*m%HasP}jfLnM9IC@@os
z)4mAgoqi~dy!ocJ=k6<|7E$9U=9Ka3={GjsKv>|T&$3lY-L+i;-O)k<9bVWBr3m0C
z*185h;V3T8_!kBlC#0Xg(HykDvt2P<OPEc3_p*pHI};Hx(uu6or#B?Eb{C?F?&7L`
zb6d5q&cPwynpZqrs=cB51)iQI;lp<^dU`sNUTbR>cdxAiyBOVajM;iH|8-5>XKx8n
z^5#VB@}d;y?X|OoMb=DD{4UPR@qDUL(KU6Oa;xou3t-_MQkp*67&{H(thszNkzD)J
z1iqRoZatCK9Gsbf={rR|#r!lnO2WLyd>G(CrSdV~faxw}6XV-WCK!qDiHp7e-O|7;
zzHSd$VUxIn_!L@xS>>B_L>v3oa!^VXWN%VeWBqWRk}t<zBeZB=DJvsiOsN!+_^m^U
z+P@MKp1%Y{`?U{kZ!h6`cDtuL7}LN-0|!XFr6sH=@aVqg>2qF-eG2Big7u*O!!Ye9
zM=`4(rU4cn9qwzd;suc%AS--P-9296T2+?d;)k-OKrpnzNm}gN>ryDv<YmEfGb`7t
ztV&(5Z6|?4nZyg6V4T$2h6|GzUCqh_3%>;$=HW;k`I}o_#yx3<kWF~HGDdB7rA;@o
z+SKtMRf#WOzoxJ?(ZbnePeS!<-P~=>YrGkK$}|fOGzY%c9+*EFaWE7ZG>U#^+%v1~
z9{w6qL@HZ%gv?-hbZ?%v;%5Ja5Lafs6F9Hdz*U?$8!vsad$#P*Dr!w?U3)h4LyoW;
z`OprD-KVPQ9yp7={su!hMCP|+=8|1*5wKCoyi-`>w!cmZXx0v^|7ws!a<XvnNYRfP
ztSF!;QJNUnO4lT5dmS!m6`<ubVz3KWiA+z&5t<Zkk>&7JXB#Kchqz)0an0l)&8+Ib
zJ`TyQy*<`G<g2#$aXWl*b?-H(+?YY7P8Mn(eadgAkl0r<b1O6Kq^kTQJpRw%p=JTY
zR1;VZCLw4(HPN~;YioPfJN<OD`{}5Pz|)Qlwgz{AxC-~t0o`B6G4bAgMKh!uWLh`P
zn(4Mo`m*7c;N+QGM7BOMAun^h1^0A!=M~7P86L4_Wl=j4g~CL4mQ)_D$Br7q^v+2y
zHI~!zD1vHL-y~kZ?=;Nhh68SXAF9qNQNH-pu9eh>68pOhdwOybo#1e9?@ZLd&`>P9
zOrz+W6E<m!f_^8v5&->#g!EdKe63Tv)WDVOad=J4D!m??m<jLU4+G|;k)4X$;XVnj
z;7kS7uWUoX_(Fi9G@(`*bL+-CxB-5WHlX54gPx!i=<_2grdGuakAY*_G+w8W^9Bt_
z2oiB;J8R1|ZvAnBws?|ZasIH@aC`SA50b!nV@Kt9cln!b)wHrAnOVj^fTy4wD@de}
znKJG;y&)MaOD<ua6N-ICv?8DCFSLf9vDft4R5eh9GIa1_S$C%Es0->$eKJzJyY%A1
zVX0W*r?Bt2wXN-LrqBYbd$SQoN=9;y_@deFJ9TOKL!+c!*wK}(c0x8+ky(&ZN+<7G
ze(#}C7Ua^V(WnR0v~*{>RDR2HCDpIy?vBk-d(T-_HAaa6kB*#-EF(5{#k8)nl81?@
zZ|nGcXFTuwcTw~N)UPLDH+O<vcP$H7RKC6Qn%#YWIIv^W38@Cz#*5`6Q$}EW$C=U^
zWFELh)=T|WGsqUZUw&mWXt2|pZhWwn?yM)~eb45Tk)A1?&40~Hw~)q|mXfIx5DWFz
z4R>{G@*v&gyxC(H{jA0OwqqU3mr_MlS^nLZD<M&OuA#HziE~~eQzi$&<q^TxW=3th
z18E7bCyL{KTyGaLeugm6q{QKn$+yVg9XAQyV5KiDbw-z+3q;y8D=tzwaTdJN9ts<-
zsA&Cy?`t-HmS??7`Et@erJH<HqVcsUgs6b>M9hBVr#I#0dhMEN>JvphTH|%IH)RQ2
zjEEwIm`tGDpX>1y9zX2=c<(bdb~4z^=fJ#)>QoD@8t6!}Ib}pI3c?mTjc74`xX<lw
zJ^f?6P$Od2&&H45OZ&$yVB(5YVYZYW(_m_#cX(Pk?!Ea3XPk_r)a$E7ubkS~w@nOX
z!!47KOW70azrK7y8&;h?eK?*))75HHlGU8YEhOu46n5P`-FosnucbSl*qyebGqMZV
z{t*iG)=P$Z|K^=rX2VG18pca&X=yo%&e5r`muXYb!ors6r@!ZczBU+9Z{7Ks*ez6e
z2~Vzv2#R9d|N7Gzra4~lx**@j@4ImTv^}j>A@L$jC12Ar-ZrdS&1!@k_8_OZwWGha
z$(C&)GBN}!5=|3+2pW!kqxo5;NbA-T{w#2*Sei8=`q)?MOS9C3zARChl!eC^kG&gj
z*6Qxo=RZS;fSe(ONKKW_>DF5%D*3k5XnZk<HMzm+{IGVrDCj6O{~1E_M-s>lw_jiB
z8RSz9IkM08{FIa-g(3Giw81*B=<9|-2AXn~Ao7ylg))SRBZ+`8+&JyJLP2*D!A|#p
z*SSJrj&~vgglD3Afpfw$EV`C|U9e|K|BgucqU7-<%NDe>Md95$=P3?3z48o#2`;{$
zy!;wgQOim-R*g@G`vuWbnh)6J5L8rDT3Xs>v6I~WeWs-xnUNim(31_Jqc!ZMsECNu
zCaK{U#vAW0Xa{cuY?-ALeu}twz0rKYD6-!g&QX2$V!?fj=d~&?KmYM33DGdE7&{BC
znn*pnN%fcXtCYPJKPJSS(U6lH8ibQ^`v{CAC|~L(Dbn*&XxJfs?OIJt#6KIM4Eyn=
z=t*Jq@f0V|v=p_H;F0%D0F?i8Zc*UR`udyRI9l<{cd$uNDSBq*D(cS8PD_>|@~K?+
zRP4J=s#_tVbTPVk^5FbiY&c|oagy)RU)0Lca%#2fYk**!^=_6Yc2wn0ESit4I|m1&
zh2XW}9w|vn<rNjAiww#`ju^Wjg3$>MSqc22p5fPTH6MC^T*39uQr_;;t|ijE_qo@m
z(QX{5ql6-c(9j8gY!7+={uc77b-6fd@OJl`jG#l=sMgpe&`v>1D-k<g;qzR2n`lf|
zIt-I0Cy2a}G+$R!9?_Z^WU3fDjm!WU`iO)&ph!{|sy!7lYFD1D%5#}cN^mb1ERR(V
zX$;u?jd`EmM%D5Z?Q`%l=SC(|UN<GC+VqfLHeRYVRi|=|f#65QWEK?DJlskpo7zFE
zOhSN|=wfU5?76QJWAKiCbtvPW6D;u*Ue2=YLHe!eZJX7y?cwqxp=1l#?u)Z{j=5cY
zd@UVr`mVNQZ!HD`7Q!XmXn$Pnto|;U?HZ^vpu*~h&Ef=?)RYQVI|t%(q`#qS_>O*-
zPK5#q=6E1d(njHD*r-M&{m2B432<vFBbhym;OGMDEOycvxVO?|@qS1@3kT>*<5x6a
z5_hy+SpGBIoB(L!RLR9#&7M!xEnpmJ;C7QZ5YM4;`Cr1t^^7RL1BI;rDJ1&)@<GL9
zg$-}KHbMosFc!nAhrgm?@_xHe>!Y7FN&;x(I2PN88D}VDtO?A?buwFfYZ(~$!J>Ni
zIK{!i;UnuyG)2JMDPvwN2R#9oMF1rMxdxn0tL5E_Y2z>_0&f(5Xd5aZ=MUn)UzUJl
zLA1Y;@u+~CdbPmCukPpmP-+w4#UBKW?mh5=`0W4Fikm9{imS?<p2Mp6)g=cPl>O}*
z($yFK^5x4wHVf&z*UCZE64S_UUlFLb6cBD4<3Kg(>FBPj@w2i?h)0p{DxZZhl|Md+
zJ)^`9fF8oZw>u32R7yeX3`aFx8q7&l{>SabV5o+s=BEcRi0YMq`cI9UnuPio`deE#
z#Q%C}?5E<^KpO2eeVpZq>$J)AhvLd0It})y#IUuqpL$l*{BI2sMcH1tLTob)m<gNE
zG-ihcc!&B@iOR4&HrLU!Aj)%$LFP+iVhc;9bRMB0Ycv}OcWQVMhi?grn2S!-#}o1%
z=*p|Bx4y68nyoc0Rgab`9yB`9Vm;b3ltY>awV9LH4eB_Bh3BY<FcGCH<L(X{hv)H9
znjdd7Zf-s<^od$^VQVDdp$uQX?|I{PXJYHWzF$?RzZKSa<oTv(XInGSaGaY~NZ8Fb
zxJ()MNFVbDY-n)cv`0!~xvXLHz3LB1$#wHTF!Lfhn3cY@dua4y+$}U9>igrqT|Dy9
z+4jLfTt6-2k;S9{`{j;j4zagobw)Dg-;0L{ZNNFte&41_kxnL`SUXj>?zUu0TK7~-
z_S*~Pw4#nc9-xLocBh_S;+Yi#Lz|sQvPxc^rBalt>bWln_M9Q#Y4RZfzppUh9mfh0
z0)tqtxKk2i&u9bx&|In*O1dqQO?XBAYupV%&z1mbybiWcD`${l;{yuv(M4eiiga65
z1%J95OLh;e8h32eJ3W87G9RdP=G8PyGn-M7*5kub(9!lb+T|6<|F!)V99P7{QenS}
zsilsSSzwGN-H(mK@kOs(sedMa662iCj;?RaSbZpCk4I&^3ZF;39L`&D*}`FchdnS>
zv~{0bYBPd#afpY7HM7y-Y?kY1<!s7qARQXJhpuFpq##{u{_~~90U6|Zl9l(M{%0o-
zT%7DP2#4p3cU|w7d6TL<_x}FVRkG>qLA8jOwFuc~>v4=L7kd8v;yyqB``{feX<bcR
znqk8o0=nAR?Aqc{k|CpA-ONAU-j<Gme*`S<(v^-#CD@_N1H%_Bv0PyKf9@N0-YErZ
zf(K%)qRBS%GwpYAcWvwebnxJS{@TAV^^8(tpsgS!pf?u~M&n$^y5%$q2QG6?UjF&u
zd7&h)LTK(8HR>W5%V+pOo~WLlenQr_>ZGD7+|msq&0*Xk>ZS;uOde3*`}pHKJZiDO
zCxwV8W6TLgF19Nj#&ZZ{YfGG}`g+_ElE~x+6J5{HA=;~X7rY{TC4Oof8E(HrLqb9b
zYM)H*Z@g8s+#}U0?S>2w2Qv@-Ul5H>7FWb53&8&vfd2$!7VFJM=hY_in6pj&@IX8z
z)daIL<R3KGl<-vH9aI%FGhEIZMh1whxYiU^tsiv1$EDXZT39dKe^*b(Cw?j!#>ucb
zW+Bv9WD{(@f&O6InL;GH!0-vU=sWDBUGid`(?mgVd3U3vJ@NY8@<UNQ{auBCRWvh|
zjf&!LpXLQ^S%QTuQ(mhgjBe{8?)^AgIa1G!^?h5Dw0MJ(*?!ofqws{9TFuAbdA4Wu
z{_K{<raQuq)>1F4XLBhA(%wF=<c_>aB;Y;1(NgnS*JGv{hR#|<+UTfh_P?fbqo)_w
zQB54ZPEErdUl133bP_*C+tBC3@&pelMZ09vU5S5(-dz_IpK2t))9;FRe!sp-Y@An)
z>cVy!TI%U>7WgIncC;e1LsAjUWfoLgFRWSf?V|+LH%!WbN1K3W&z>XHH8JK><^i(<
zl1vhChg4^?H@{w`CAwa7jZFUz$*bVAnR>(O%CKdF^0Q@T=LmodT0u&bp4&gQs<lj(
zAWSCKx#%|6)B9sPGh9vN*o;jwsDP(k;4ccQd}zX+S(yd!fg6VUd4=Tk3NydMyCJ-G
zZ-=<WQ{$>fE|nfxO9BG;Qk?2)V?1$OF>mX$l2hw5YKYRK1zT~Q-i61kT3JOWj9kDy
z&tracH|`|!Tp{UeB~|Q7_AcCG%1kCGyl<FK>_o;YYn}cvq?V`tqgZQlDn`iE9_*r-
z93bw=b(xg>Ym+#KI!lUDpMbmXgT@CiH{e2Eg#z;s@jSv(UoI{Wk0cKgmo^9ovN9ZJ
zEgfUn%;7F?w33``yz$JjtJ~G5?V|fQezzK3OoXgcSS|_A8yJQ69BWGSNYDwo2S5#x
zXb-8nlpflWs1i@b+PYiDMQw9tiK`{L91xA2HNduBw?@gzKMl7=<(W?6f<>d+YcV8W
z0RA?N-ROnPa<R(r7nyT!h!6k_j+a7{)2<KpnaXu$pNddtB)juz4O$OTr);}*L6+DH
zf}Dgl6>ouCxUru8d%+g@L)NaJMHG5|c)HUYNhW&S+X;u3IDzx{dMzBApKUrKK}QvY
zo>xRZ@gK0zK6^jafH;5nP>xQ%Ve3^Ius3-1gEj10&*mp?9Ax;~7f$%s*>=<rut<*9
zDpbAFV5d;UauaYUI92Ktm{KRmtnW)>0_Rhj>~S&WBa?U$spYMyxf(k#GX5q%;-q2E
ziP&fJ7dLP+mUryVZzY^O7W2T?ocG!gY{FfZ;JX=<bU}owwSZ4&#ftbd5tH?bnCqDq
z7B^d-fTIyfvw_QwQ7o|QnFAhc-LM9jwSI2NZdtrD7+yoP#v~5WE0TucNkWh!!&<;F
z^cR`9j&_J%*u}f0mu&i+;E`di8^Pwaxo0_+QXyys84b8*1nfQgb+6s0kst5ZEi|k;
z+{&$U>KFJX1PYCK1$;7Zlm_@d{?SKK0f>okW8t=zpC2`c$Le9Nu%#Nhb3|CnWV_0N
zz#aRGD?vW@1`ccC3{gD?&>dU_@gJvyH`OoH61f5p7=*hjguKo-VB??cUfZQFZ13b4
zKV|=vf$7jFXnh$sqpuwQH9h<-|9S&~5sj61wKJUP?(S|fnC-_Zy6p09$U;49Z3v0n
zlkIie9V82mem^#)I-JuywlvE0ot{;3(QjOJwdCdSVBDbL_gJ~nocrp{eXo?gVK?-1
z-+)K9n685EK_iC20rg+`f)~EBGCd}(lWJBw736R8mHoZ|%G$5peQC)2AfVidI?Qax
z9$kgKlV}UEqHcB6lODw%<i=MluTqkhlN;GNS>2yi_c9=Bw)fQ1kWLM>d3yqXX3`3<
zz7{cq#>-8Qi_<fqv!nZ-lty_aJ9y1ah^@qY&Y7C~WWiRx%)n1~_><=_2X@wDFgb<w
zxb{Qo<_H;*W@*yHHA)Ydi}Ma1+!q22=nBaElp11LEf>$V`5Ot`UwQ=;WF##jJqwr4
zBxgy_pix#x1Tw(if6%1=40XTF4h-<h$#r-W)M98n&+WW&-nKfh9h|YIJ@_>_LR#9h
z2#41+0AQ$%z8)Vq{*ueUIVS?-XVWc{Xu7{(6SK<j8ap!LD*IuAp|-(nkATj}XLooU
zIWEFN6-BvALBOcm)Pf$Hfb+lB;0H)nJJX+^2nX4vjY}f@fUU%+jeO;yNw)aKnw_T;
zoBu94zMr1gK}#`S>!+1S;_WT};K^oO9%lb7WMk{~U2z8ZbxQZcUd6ASa=eP5F$(dc
ze~jxPj8ZR=u<qm0)zZ_q6@8)LH@MdikkZx@26x0TVLZ21@HHgMb$7S-c~aK$R7@Gn
z`VXx4&MCa{Y%X;+e9EEL28S<h>K(e6h>C)dL?%^0uH2Q6!;@bR>aPB|lmF=WNbda=
z-_C3iA}cqJ$=|3!l42V8rwww%W!u8G*`gkfsQbsf!?nSF;`;3{fv$)3nqT``^@a)w
zMGE>V>;7=J_#dBZ={bH!20ZK?4y#-Q1S$x@_Gbc(cP})hRCNQ8TELtq!2Lb%=Tpd+
zB)9fqyY&GFuh|O|zRP@ut_8YzVU!lZX2m@~zcsp<+VYqP^ZSC_oNk8?l~f{=DMTbr
zJ9@IV8j%EW3~>C7@UCYkp;GS3COE7HrRcD+;<-EW1>^Eam9$Q=6EAGR?92qg&K*h2
zj>B4v;ErDgc*HGW{RX-7t{hKtC(7`z$zq;Xu74cDU0*&Ow-+%xTv2n|7M}(}rhKi(
z@awm?STv<+Zli`9V=}3HcFqo$7X|pZI;I!Z5wZRT3w4+9p+?Wmu%0CfV$zlw7gOm@
zv5g+3mmInj)hk12KKKDQyD+ciKxlO(+^bF%IzFh<&w#$k8fWZP@P0~JrMci30D%>K
zOayoQyQ%VQ4!ckb+`bssRVsbQv5BRZo%21un}c8Ugr+b0iOqWMDiRHpp4__<UsXSr
zhWTP=YOrT68Q0NpX@#P6*6vD7=v^ip@i_&-ZLNt4dUmEtztmZU(}>Rn9L0rMyYE{S
z@Hz$k6rN^QiJB5Cqgh@08S#U-{gj9tu<wH)pAUCxv<*k%jam<blOj*_zP2?ROtuf2
zwXxbkDYtjS9OM!Ui5_n2tA4oO3ql6YpkW4w6Rp}mZ;uOYby%8x*bSZiejUtmzhpBv
z8ym~xDAfpZ)|xDhUlI&s*U8nXS7RVlUAVLb!s$g0BVtI)<eIi@&0}75y<yOFM=!-w
zVm9I61$8y1jq$_xJ9u%+tWCs|U(juY?vkh#v0*7(;h?5g4+{(}&3ZL^Gdy0Rnz61j
zwOF76AM8EOrJC95dVc5Ur_pnue=)rJx#mSAC&6;jZzwO3-w#$ZlXK=c9hI*eMO?dg
z$xMgM;5c#t_7gHvQ)bn|<<c=;FL|9%i*s6oN8Fo4M!vrLM~jF=?~h&J*skYHYv}`1
z6?5(ld5`8>H#~4FRpaZvR&miY$j*cvn^=SP&_#S6Uk?Z0WHnsJ_3om!VA!ZQR!$Fj
z<$5b+SEY(K+aW3Z{SjN;LAt&<SD#r3L`W2$DJ62bmh?l{bNR35L#E&jm+F2ThmokV
zNEOzv47HaHI|CAngypxgpOv_cHfYly9Fr`U%i~N9dGp9j-@P1TjIh{L<q<72D7P$^
ze1%srhgR*KyVQ2g01Y&3QoA4E8Lm^|y8E2JuXXdiXz3!EF{$5c$>%jaJ$=>fN8_7{
zJ+%vGz4+^tJ&lTSC5Q9Jxkqh@y{YZO7SqLg$mD=l7auw$N3Ua(9T&HYR^s`!%;biO
zM^$Ev7z_Ul)dX#?GC4VUWaRnnD-(4+y{dr}cHOLOQ{t&Gyw+>`Ab<aR!HnLQQ7u+#
zVrC1cE0Ni6JC`_;h7T!()o2eixg#Nc+<HSS!`r%_^oo+Qn;7BOp3WwzY3Ym+QKt<A
zdt{bNk9s$Ewa+BPXb;FNF{f_!CYiI=C+Op!)Q)fxvKb?;#DlEd&!eP!>0Q)MPs}?8
z^~Hk3UyV*Q*O<zT3gqwtCtp!N$Mi+?<1wEPQxXfE_4TU7ykd|)?~X=#x<1S0S>}7K
zU`fi0pBK3ggZSTFI&aZ8{|~0VGOUd*>Xx<?DOTK}cyadv#oZxDaEBnp9g4fV7nk7f
z?(XjH?t1fnSDyPTPbM>G&ScKsXKh`A103^O45J^0cQGT{NePO#@sZ;U&1b3T#6KA`
zrg3mM7*t7PYz0P|YuM@4D#E?X?d@NnidmIHblpBf6emRj*~d+0^?r#~?i@1@MIT<H
zyTxSmhkJY|Bj{FFjkb^UI2EI6mde)3a;~FZx9LWE?`Xs>L2TkMP(vA2^V<6&`1M5d
zeuPzP;APY(1`?GUAi$X_VSldey|T6isHqJokv4UojC+uR?XErHEl$#G8Nm~!ncHOr
zc2A*w=H}*kDP*6#wHk=^R_Yw4+QDC>C_m<VKWfMo4cwyj4RiAd$pQ<I>yoh???ETa
zYzukRCjIUWb3?b#8p=`4&#`VIBjxQRBw`%4FAxjP<a{)R_2yvW;l3AN*V7SFZO5+;
z<{vq(LnxP)#l2WG{1~!u&)V`vp~><D9iH4=>tl}8X@#H3S%|#i@R?hX&#CPZ1Mcn+
ztIb2Up(mOHT3`@A9_@CU8emZ7h67b*i}Y6Z<$G1jlG3eWyjA8l)<F`|->Le(UEW|w
z0r2th3&)s{YJS~s?fI^}%Y&Rp&JZqmocB&wXDu@#6_IhuRX{uphpH+o*GtaDb;m#!
z`{$sSKGG&Fg4~5FLfK|}-3YB3k%`*A)%YfIB`kJYiXFR!K67|n9>SHC9A0mc3@+_h
zo}`znf&zJMCIQeZ@rHc0TealPK~#LpI&nEj&8#j}QLwJR$RoU6H=j#u#LF=dAC;R`
z^t5SD(^K%}dZ5SKLsw&^WYVloE{y5$dG5O8<~Cbd>iUFSbTEI%s@*?Uby|#?lr*>1
z#=;|RF3htzhs@KOF!%kq@rMPT#R=`y21iZV+H<YT(ef!yQ(wmKiQt5H8b(!`0)c0z
z-=wHnHiWMCZSx;5zum^^7?1t6M9P3TH*+cPVQbCJPTJ3_wsnF&T@V*n@x9X{z;)RT
z>4Hen+eL-FD8k^@U>c@bZUTpGHy>kUouB4u(`+L(ZC9X~kHxTLX2V>qV{47(4tAsH
zWfnDDr~7a%Jd_*|x&Dti*qAsy`iytoc_AV+2p~3^#!-HD3H|8?;5sP0cXe~z(5^&W
z0+8OVf-y)q);iZ2fZt#;FG%Gfb53Oac&z^L*$Z_~{AoZYIzI7Fj@|s;tC+_{j6Svx
z?^YyD+a`LzE>wCd$&J*>v-kY1<l~({^j%3b{SP4#KP$wswrDfwuQ@>gQbH~+ewxWG
zuc;ZIA*JZhifcaKSJ&*7qKFN2I`j5kyuTB@*e9e<$BN-*HxL<PbK=S{&z(ORqFvPO
zcX4&PJ62e=QT;QR`{v!c{?eg}`X;4WaZc7>6hsx97@J2m)+bIymicP`uo*mq1gvjc
zYB@L=%+!zd7RY_L#oxSHI6NF?4IKz;aS!ZP9Q9weQB@z;o_~AY>*~3)GmwaJmkL*$
z7~hGX_=np%P49LzGpK#h<koCqy}<Wg_|ABOK}W%YwY7zHOTHB>$U3<!okS4q(Qer-
z3xbD&M6C&}zBKQ1M94@nrZdPZa2?`GhhTizSuH;U<1o--RA@>%O1$b@&%y$`syq|(
zo(xw49oVgqGtIWiC=g7=rVwYQPyV@5SU?I=4+&eGY01%z9g-(*01aj8KCWPYTJ7fo
zjtreSX+(t}_~5nQqpYTD>v_1WMQ-l#vCmioNV@J>+3lhedlw>=e1jeG#mckVSC#sA
zWFlM0-gm}7q|=jc0P>umzG|H7$sU%-EJs8{XZehEB|gRWuH!JCh#R2WzHegewdkQX
z=2jl!^{rTM<9-gH_`Xk<j843x`1ly^kSIQLQwOkQdf?tN&M%m)P^wu+;}2kJn#_f0
zbOVg-rJ?$gejHu@TC=O=6T@6g(nL}Y@U2$Zv%(q_YeC>lnbg`%0wM6B-ean$w%9=g
z%&KH;_jQi_*FGF$QB7EA{pm&rrQzqZ(W4tLF#H6cGsKPbTj#j#L4fPi!V*=g>AzeJ
zKP!X*CX6bPAeB;pJjEXrO|9f!oYQcnME2nPn7SmwhM0&lHzagH8Tpsjx&Bx7{#VHt
zt|9|*w#XZ7NeuQRUq-Oc!85*1>fe)7HQm|j(lbwkCXxz_Ccj<&P*D{v^89I>i;D3s
zR&=mh!!46lo7~uHY8cOQJlKy^qMj7B>eJ7<NCYq;cJ>j@zY2#SkB-y^xcZF}8~=2h
zyW?nm1^GU)Atf{`DsvoSzQzz1_OoL(l-qk`e6!SfJVY?I*xSf7H5zT9^GWo1fah7l
zMwA&6MwM~yeBnBe`{-lRESIfEtq8k?=66BQyT_{o6k=;)qJ2Zacq-<pO}8(^Be7Ag
z#ZAl4znDbqVZmrlUFAQmkxH@dp(0VtZJu*t8e%>4eM}Zx`%FKI6Hktv6`KbqKQK15
znE4B}`h7b360f_YbXb18buW+iG?x^G$~>F$d&*HxJ^wwg;rkfjXk}__F!hP~R}qa9
z%D<({j{sl`P~iRE?>(knFuxC<K5+^GAiCyYv%8_2xBg_o_@ud$TX2i?kk^~yWqe~D
zrS2iWo8M1cnA(1Ue;gGpE;>k;drpQf5;iY7)?~iT@F{z$3W=U45!djHsox!sSad?R
z&?c3(-Ml>5e?nV7k{xGU$3)Xj<2pmK?0I1jiG4E0QO%)7iIDBW?F-Obb%2Y8l*4y8
znMU)MxQBA!PwK$(mSK+ty&_6c2Yb<I3t?cW-cQ@xrjh2S8NbtntmOZk0hU6!988Gl
zh5yhAUbc={t&TUm7j0W5DKKjgL5-}u$49NjHL-MLQ4B~WAB`OcaTh_7XJqp6y+sl6
zVMSH$-F?G-RV?tirl(&Mf{IYNMP&HUepGnXJ*&9CyizMq=j1-Q@LLkv5bMMzVpS+C
z25DzWm*<tYtnjxvww_#0AI)H*!NbQ5LOC1DLwpJ#1`FzbyN9MbdTNV1q-|f!SbWnk
z3{*BSl?iQH41=a)u6jlOxDH3_N16VHv)gokh!~i}a5A$choUUI*Ban;_mv)!|Fk=y
zBru5eamX>W&7CtSA^lE^9TGC8<sR^Knf%^kbJr`yaUdVQ)(l=oMZ%}f`kg!T@i@Oz
zh^$k>?{!p@in9DtE=Cnn-XXwq!eKpQXLmc4A@FMb(RysdFsHh}-k_V3$^Y`q9<#8P
zAIv5<l)>X|Ei`Rd7^TJUe0;4|m(?qtCj<PMRwt4g!z!jgwVB#!)fPyr4U<^ch=>S7
zLmB&CxEH(Hw>?@+dL3RdqvRH-%_Lm?&N0;a{l$v!=7G_XDh;<v<6a#=o`?!|J{v>!
zLe6-Tv2R&->#Xp}&cT>{HjZsgBflvKGegZ^P~_orKXVv*8=(;HIdw)F-RPM1To{c0
z#`WAeFipx_y#8<?b4~ro0dYq#>PuJ|<&%n0+HEp%P35?4?cB$WSrjL8R0gUpDSpHx
z@zYM_6l25GGO9Rv*eXeenfa|(n#s-9yU$=RBYDP7*NV`wFr7m3)6Q)yYZ-$jjuPKq
z!Xk+%+~)5`bl=Y>Nzf?m?#AT3rMf2w`DHLpc6Xu#uC4~$K^Ex&5Pang$!C?|Z;{Wa
zM!tFarKzK%qh?A>c@TRkytMS;aw*84<<7$TQEf8zwznrT{^T)e+yZB#)9kRYTqodl
zkRgoCc>M%@dM?}f25=8b4m;zS*PEgtH3>Ti#TxxiSi&6b^v4>H&pY)ez0dif=`nEe
znWMltSXTaDl2J&<FHm%vanw}Z1GAcYvIe!G*1I3s>DQLmkN_#2AP`a^BTlfO%ym|(
zgfntAQrYMe7Q+X1)$R1tHsd&s5#Z?o(Y8mux&nUxILg!0bAwQz%4q4^yVW#XUx{~$
zxXwLw1)KADa-7}BGH7r_!}=yEKNeebZ9AtIzH#HYX+%>Dqbm}bZ|C8>(J)(Grsjfp
zj%r|PK@K}6h&;#lj()TWYhMW#JYOY!5Yhs(NXu8cWJ2)}uMXbD9r1dX@C?%#pi!US
z4nH97!(e&#Gko6VaeH?t4<e)VwXifC*EVKwVj{ykPL#1-__4A&J}idm$9y=hJB2of
za*jBhyP=X_ATKY6w8~SQx#^WavB89cxVE;oE2*$QQw`;FP}kFDLoiP{81!*@8U9t$
z(4-^1G3WJ7Jfo1Y#7OD7=}>h+)VhV&%EY%Wqr}xocfsc(DEKh;p!4)dv144m%{9<Z
zyst)0y#Dp<cs8$SO(0E-E&L}1^S3heboc8asHkj5K}W|r8_?&M@Ch(oOi;pA1w7p;
zjr0J1t-#04_nyNdMYW~qP)~@|UU<=UEDn9|sme|`BO>jmJ9r5X%aO2`#Bg3`n;OAf
z-i~sd`Zj{WSVgzL6hz^?&a_Wmwx4remBVkHdQo)5TxxJ*lkn@MGQ763E-B@iqaO5k
zBujs(QNqnS)vQZK&g{eP_d~b4Cis=Q>X$W$|84UdF+GYPK%+WF6;w;s9Q9#Wa-{{d
z7Y5Gc?-xrh>~7pouqH|zFeFgP?4&-Wl3B@`E;F(_WRzK3U!1ya)(0KXOQ$v{brC!I
z`~ZDMXdIp<UMHmErC~3U-HCf@UlQP_Y_ZSYJ;e-c<>K^7#l*$_As<y3V(Yqw$iw67
z^=dp8VnS(mi~T#yNRj2Nr9)CWwC>E^{VBJr!;4}r3QO=fQ%s)kq0(|qHdeDe*vZ7K
zHdsZeSLL}mC8yWyc|(d#)lnvIRm)$5a=xRD&(R`>v6*I;Mmh+E_+A#^2{e|hWcTqT
z+w}mWaTin7DjDJ^Ernz20b$v&n`hbR=Z_qnwTa(un~PaX=Y7o}@$#06n-f+)rK;rG
zKMP~wi%u1WvJ{BNh<+ApY&&0ws%{2H#IzXiALI!%?v@(9{WL_Or&m<KlMW(!qByyY
z2MnOq7&_)W289(xemY+8p0o7)?R4fq>cz$_lByUnZf$O!N}1>rQ3}wVo!pifX5yms
z-Z_$-y3JS!Q``7`hphZj1-zMEn-;Yffe9Sh=v+LQP_$RvsVV*D8|DfoObXoi*dXIH
zUPq&vdVhKQXnp{%_3({eIVS{taKtlddkjn%Y<O(dh-g?CO81oDFAy5GPa)RKy{K-q
z2@tT0I_&VpaF!!P1gr-KD7$M&FCoz?n{(GVTH`UR4$Y9gT-o*%Qr$8BBBiRQZc5u_
zHy}9W*w3tX%a?O{FJUnCIeUFfmF7vzJ`4MS#!s7&$tf$8S~Ve$yIwZ^F=1%e6dy)K
zNiF%?VqZN<AlHx#B7{$rU?FA*;!kd{FwmsKq^G!to|!YXk4v7rG4!tD;HD1LOdx!?
zZFT_363!ogTpJG@P{H()F8{`jMHi9ZD_}_3n(bL&HaeVB_y*n)(U9kVZ*=WQVr0}o
zyyrxXmFaW^uewl(CkJW8s`<xDh31D0iD<$Y1aM`{bspnu);c|%n8gg*z9S|zDfL7|
zq@s;zuv#QN#bI5q8fSDB-j#jsne8p+G^Gy-t;8H0H(A@8NrekA*h2!xZpSKb52(|(
zsojZh*zs`x$r%Hl;ToiA)`fQo){!{Nf(rv9oS8U$<wCPV3Xs9nLAe7FN4QmNq3B0d
zh>?|dYIUV?qz?V05`xTm!Rnfnln}$x?z9q4$y@|2phk*c15&_uksMbPtQHKTG8({e
zLLHcwjVdZZF3`@s<?Z#$5vX$<?s8Hnz@bE=^NZI_vsz@L+8`#G?G#BZUUS}-ld{S<
zZAF~Tf`elC{%M@9oWrxbD`2&~xw%<SH$Ysb))h>KSD&qVQ2ACJ$of^CYAn%_#jm_B
zsfxR*U38#vG^>7iqfW0HMq4^6yKG|3@ezF#NWmGOoLs)(t@ngKtYl5>qdu<y;_Ph6
zR^??PwF5%yTCL8*#75N=>wYr)FW|cYKgxe{7h9<UHx87IN*a?%AS^a60oDp@Quedu
z_?_JUz*Hx}sz}DS^5W%bPP+MB+Ch?;Bicfv+47>E4^Vj)&GIoJ9!VihTC_0j82<BI
zotnR7F4rvkXuYN9jgG~`%bS*#=BbX(btzN(1^_lA(eveL<B_@39eml}7b+@SCQaiG
z_4te*d|HfT2pCo|Uz8?vODmX5?*Lq|c~=Fec^Re&<Sr;qVe{V3#0eRHwfU56_EMJF
zmPbKZuykTBMw#7zD^*$l5KsQ2VXmG9r}m&?ncs0vdn#<N3OVe1R9z(jmi`yl65b6o
zo%s?-B*L5ic<==vY}|@QB1O~g%3z+7Z(30VS}7IVw*5AY*TV+NFJ|-Z<(jpAyQ}JG
z<)x=kEak)rWS>3BLTY_?Y#6qViC+e23*&>ML-zChJAFIjryB4EucYEa(2?+B=n@H6
zYy|NN?)mF=ha9VIBjT$JQrwM2S8=|%i3me5{29!j>eW{jS~nP^Qu2Ni5~5gBae)=y
z(L3~1d_ntn@(HuAWmC#(%>=vhA-$%lgp6M?aa=YmzBB$fOt+j}UR79jd0}v}YhY5c
zwzTgr-}z0HEs;TzP-2r@7sJ>8?}VV%YCUQJq~6lbrqr7+m#AK(_$}@sJ`28|Y%7#$
z9!vr-qHSvybc{}`&L6S+%#8?fwA<+0WYA`&{xrXsA?D)DGk)qi`&IBf+98sAb$e)g
zJ@K}51)R_SZcI^UFJbDkqk!Uy1fpY4R>w-1^DBEx1r-cd$Y!X|&{BOuA8WwF7iEhp
zTEN+1R1))E>3qGV7=zt7c8$qxQqg(~iJh^dcC6IYeXMTYb{F<P!%$k@FQiGBq#K#c
zVSW-HJd7LDdcRPy6<9okOO;@^aTFOgHy9=6FZ6!JWT#%^_qHp}^Fh8}*hjESLTC@m
zu)$=X@&Mb$>{5mwN&c7<rpcD#pR)4OR`v`bDX0?~h9@#N3J#79qDn~o)qC=OraG2D
zG;czF{b6$<vzhzzg8zN=^wiTRE;<?-&WAt?6;<R%Q6D<mEa}gRdYbz>A&}y~irHM1
zE6lnw8(O$JAuyaKNRf6fHQ3-&LeU^K33Tl5M!Su)(>B%%R^GHRlM6#9Q_d%Effvcl
zlnmGXlqJ{9jT`Ux3Bk~x#RK1pC8c72^jRl$GOpui0g2wjt|aIq5)weST@@5VI=)s<
zE;|B`b<7#&CV5{DygC&_1|RPR#J^mY1&-o;rJ;#lF1@7^Z;8}`J4#$q^VHX$J_fR~
zD#7)OIp2R@>97=VC>Mx*Gj+dLaoEoJBbI3(VsxT1fC#x<cF3VGCj}5Q>siam!6>Jl
z<NcQS6w{GBEWiARI%Gt)31ds>Mr~yjtiwrMl1)9`R>(jxqm#n=FETxawD~}@6xV|7
zQk?*3MfNtkvaf5&d<L$R`bmze&n-^HI4N(*S@8&dN>i>K<nw|V5a263=<xbs6r~~1
zu3DUKaa#Vd#(P3Dq2}Rf$Jh{;VSD8E^d)VkkWmG9tpCIPqTwKQ;<RFQ#p;jDr>tMT
zsSQ#uowWQxe|pnw?$pBS$k=&eRCajEe(*y13${d7cHghMCrVo(asV~HQUs%*s3*1?
zJioyv_RIB;+5SBNLQ_BOeSSE8`Jj`+ODn1ANc_Sm_-`U=iO6m4c2t0Fkqa=`2+;k!
zaGBU<;Py$kVeJj=5s#e0^AXEug=}Z0;oA-%W7C4~X%2VoxMP8{Uh_b=*v&~1P)&C^
zt5w?*>d1!U{ipS&4+V(N8{RMh5O7mADF|(Q<M2DHa-Q&ZE2S0Cep+b}mzj_YFP79>
zwIElw8fE0DBWx+EY^jDp_SRdpZsuy^l)++mW@)6k--8Fbqtt7}h;Qh?VEg7OhgX!z
zDAKM{r33FQUK&hy0fsH6uWsnE!BY`&ONy_!L%r{D90Z*lRfDWvA(Yaf_YtyXeMx;D
zKrWwkLT*i;%kE9H;YKE?Y+=Lkqjgn7sj2?MB=y8$V1$uS;LmyQRgLqi)5~s}G7A;-
zc<U91_1&!K$aF*o467*c&bp(x?SYHcgi9k?*6EhT4!-JuD@_?gM^hhODzWvDX6Kl<
zP3DJN{nYd3i1wNoYQy}>U+GB+8zZs&80CT3vbAtcIgj@?qz-Aj;v`g!c)GpB;(m7L
zAa3!aO`--odJWm%>RH7@Vm7bxE8whp3F__av}rG|x5~{kDLm%9Hc6X<tIT7Qw^)th
z9!yI)R?Q=|d$tc_d2obD;>6f%pJPv;LPPX-T$$=n^W)k#2VqnDhDDQklBk>ze4)^>
z&ov2F!8K7G&S_XdB-8;y2JVhcCa*skofisf_!`@HlnQ4}&hNvsGX8WhdYLw0PxE;-
z#pit7+TZO~ZSfAd#HjW<W!3k(w9UE1sg6>?-pRj>^&)?}o7ctuh<~ih7CF_!d2P2Z
z>-wT!S)dbR<?@uRQWfQEGVu^N&~R*?df!Y=5Q%#NZrj19UDshGiKW0c!F|6C!$={Q
z8Th1IZBaM16#+z&2Sjn;sJ*pt>+v!{qQI3CYBZ!5sWHC{Tcu3%HXd`%&TI$`k$sEZ
zxLS}I8)fRQpB?0suMnR18_pnN&Yqe=ETcf5NmMQh^$2kkfeCu*az5I`=_%>`&3<1+
z=u*+SG<w8`EWs007HFQ;<nR0i(I?sa@l~mBsVXxUTTInFSQwGA0>m4VFb1MF_)>aN
z1=O%cR(A#rXx$vL>Cj|lwYJ9^hM6y<`eIKc>RmVT14S2U_0{<+yA|&>eq1t!ofuhC
z<@(%_dl)n;eT=qgR$ch+HxFII9!QCxQFwj%#pv^}Wq*YbLJ`;IKbuQK3CJJ5qKNID
zpY4TYcxG?WS&3N`sdA#ErIVQ-vRS|8xw^Zit&0WSKI?&n4ZN4`u%0VkfSlgz%j<p&
z6N>yEGna@7oe2E?(2oGJgHWxZ65`=M%puRs*!ueDsE?jM>{%t~Tv!nnsdZRmLwHTY
zYLo`wtC*n$rDh*=#m6)DCybe>#jBr@xk*LF%YUxQRK|(NJ!z0b60b3$Ex2PcMd(sR
zjSHK4C&ojP9Ud%ido*mB;ZehZj@LIpcF`v>spXCKP>_V=x6dE(l2W9?(pt=cc@k{K
zh)sGhqK!_J*h4>!y!Le*n>l`;y%pZfF37Vr>3jy2h>h!zii+k@pw8GWNn=D(VvpvD
z<Vkzm#l(vw7JBCqanmti>4wN}l$f0@*S$xnyYEy|Ymjgz1dHT^hllU(8pTwyGQ&oI
z|CmsOuqsg$;vqSX6<kcD@Q#iqv)RVdCF7H%GiMw@`YRN^jd@y~t<_8B8b!S^-IOSX
zY$-X~-JdR{rlzV#0_)V53W}NJ(wS_hFK;ENJZIBNt=9S#Q8`VTnVEsp>*ic*r8#HH
zMLXBD+R|Dnw6Ri?s!usOWV}&L07;47Q>MUq>p=WVnIWan>sydl9z`%zLbETbLEE}R
zj?NIhiM3%Rrt~P?_bnHbNc6kZ$=RyiN^&7OQcVZMc7Hyv`r<#!W^c>xal)1`H$uum
zIt=--@u(@SV!2iA?fSh%odr<3h!dl!T<t%uUB=m*ww%ReuI5otKep8(;?8;J%W8h&
z;=ju-NmdtNM>krtarpH*GR7KtF-aO#G1K5Gy87(XC_$HNDpu>#W9WLjD(oS)_rC9F
zXP96*!&?^0jTmB^3=)Y&${8lbx7RBe<>Dr!Ym-D~5X7`WONJ&yjbdZUN7ep3nNEwK
z1c`;Rbi0ga2~;S7;!C2zf%goPDxITyV%kB*Z|{-ZhF@0sAuGcVKRL8~LQTN&Wsnx)
z1s6L3zASs+J%n8lSlCR#I=og2DA`xsoqe&2dM|sw(5=10JJQ&h?a*M`PECiNQGwn8
zJQ>dA<Wc9kQK!sT(S)=G;aeGgS@h`jw$<)7(tl1Q&~HJFn7;qzDQ_3O<n@FSXR?di
z_?UsLsf7{idBs|qm7q-#hyM_~Gof(DZ?9YZ)A~8Dr%_ccR&^I5;1~v`H~c-32{}!5
zA2<jt<-|T8)tQIwie9AV(>b{H0X2S@ICZ`rPLi>j2E9^4ZHf2N-&e1FvC`hqIE<WZ
zJ3{l8pVX4QJ@_W>#wGsRg5kfIGHCMwn$E{dzs|5L!7J*ly}ZK8c6hvOCst^p=rYwF
zmlgQbMB|vxmNXDHFTNZn(SzTewgOOq$n(jwN)9h{cQwvNSP_9fB~ujqo?tn0jH}VM
zWwwM*NuJQu1~~PFlSg9LSsQvgO1D#j4%cWJ3#84na-mgoWPl;+otg&<^MtNYBEUeQ
zcY1unY#0JRhnMAvRB_GNZi_A%Ej<mdZ@YlJjv0D}4H*R*hZnQH+dcmnlk94+#id96
zFAdMNtO>3L=Q1V6kMNg$)TgnESvwyi_LnUVPt>e-RVwsqiYWS665n2qpMpwkIhQsK
zFYXSNiKonpHfM%BNV73D{t?-5sG>u$g+>qWc8X?icJ{1&pmP9AI8qp=q!NdSB*knd
z`r(O%kWImReU$k{eq;t29b14djYmjGN?Q~?a?Q!b<`0Pti_Of=UUXGqgEm!S2fQ+3
z;)|zE1@}E}!=z8t6b>fUT%cqR5j=J!>ew&}#Ofp2#4tV?;g%;QaCTMLIeRwwSJ$PV
zM}%tT2Xa!=66m?Ot8oPdlv?M#)u>#jnVtE>@2uB%0M`rn)BYIEnd1d_hc-Y+Fs0;d
znQ2f;YFW5Q?|nn<ba=dh`<D@;YO0I)XXj$Ky<YB{l8(b>w^9RC-p9HT&?}r|eziEZ
zlug<Y@J7-SX7P{S5S=JWtB>`Wi)*<jY~oy$ltY?zx82LiRgi!#e?P7sicX}?x<g!4
z5v18iaMB&%=?pRj+K+QD5Tg}4emu(n3(Md-a+l+!36O=l_xrY@d2c~bZO@k`mA30;
zhBZ*u5}iq#lo$@ZWo_PCS{S1bl0mPwZyt-X2)=j0)<}Npzb}@)(EHH$?iX<8#<Nj{
zpbFf=Mb)Xg4k_>E_1Q&ZzJ>V_6=vuKBk}3l2>n0YlG~pV@~J}ljcLkpE81;iE%JC`
zcz(Kmw*P!Hg4r~^HX&Lyah5j~E5DHc%`-{SSnX&YR?4A)^iDjh?N@^?<Ai0iE6H-U
zVg77Fn$G$zRk=$V`XVjLT8`@>)~i4$$MzTdIh4_ea|#%w%5@qPE)dHS-jJWDxpb(4
zDnd!KQK@+Y$B7wPeOYN~LnxZ!w<b1PNj8oMy1`gkiHK#x2ztm>-&tQv8<r<bA+5^e
zfVx8VQ}S5xUiC+mLFMiBkJl*^#49_C&E_+aQM<}>;KGmc?U^9EfOh&H&AkV1V4snX
zHq+ak8FJj?u51icpR(*B^T(aiEen4+)Xjf&`J(ZOq)C1#?o2mJ;uUM&w4lH14kus2
z1eWinWwm%OzdU^G)}inhzqw`wuisW@?--Bw3=f}8c)Gy2xjTgSMIX{z{HF7<1^>?L
zY*hVW0?lmgsCERn?H6))&I_o>E+h7we-IrS!EETzZ9J~|ByMQS_sZ+PH?QVk%WI7Z
zm-$H0fTs>f!R`-Q)`dsH+Bp7R2q_(!EmjsPB>idK@)imALi?$kG)5vY|LLr=yB_M|
zbQ1S8EA*hkt*lm8+}`^=30t1ds0BL9bC0L6eO|?rm3qUJ_i~rEKy+Of{(EA4yh<^h
zla-1iVPahi@Cy-4yJ{zu@K^&4dRTZ>MjRw##n4PKxaXKpktSh>O6GP4=vWW6GL+F^
zwjXE7`)4DvYJ~ISytz2)^w{Oe)_+XHnksQCO`(=V(zoDfaOYF^KfTpPuG=ygB0Wex
z+z%6fzRrT0HY=CjcGXl9DU{3%Z%p;J>?_s2{O<JG-C*~*ewUKBb)pO*Dbe+uds)?<
z<nTNPtL?D|(jRk4JeF*%`YKZXSG|yvetg=X*^JBH2llzj(2>gORR&5#O_j!q@-$Q1
z9zX*|D4KEbWc<FgO_d-TERFsBYlA7l6!_1^u@SH|i`y6j`)7K}us0R&DZJ6g6YSBG
zWW!D`xxS3q!RpaRRkjwWk4NN@!+c*xWW{8_%etx0M8&ijN5Vz*2T)R-T_%30LXL)H
z)%KVzN`!I%#C*2y{xl*S)%7`opvw<zpi~u{<O<1bkC-73u)Gt+Pe#YVLA+$A`qK>1
zubSpsLGTm~`7|FJc)!lvvs12x0Mot?O(|(06If8+u6&3ug(IhXio?l5g3qGAO7oo>
z@;-){T}La?9j&&?<T+=Hcs6vHSW=R_h(k_*eVd`8pazmeZ6)+1=`ucp&|Pp4_9Gx5
z$E3%yd#JiPdV&!sHoC5W{w%63PXokq!|?Sx5rb3{{kMc%2pUrJ;v=P$Gq{p)I2j;m
zX&H?k;eP@>sURbZI{7)e3HEQLnmBPNcXGPLVRmrD*}J@CcR{*Yik^UR6Q}cm^Iyqq
zzKB%0u-15s>c~tVQTBiK3$TE|CZR$hD7!!^$-dpKRLV*XPuph$_o#Iib2b~+7piib
z1YweV%5bTt`jStU09}V$927Oqt!LOM>2^OGcK)Aqm9*p>f*F-k`_&Qo<le@vPs1KT
zRx1^b3{Dkq`13Gpm2?=qi+nH*d5Db+-+vXB&^&4L+OH1ABbM21T!kfRX2Z@vX|^Eg
zs%mxn465CsB^LAtvYL*I5Jkl~lx>HuvRT$_^S~yTl_%5H58GQ&9WR&TC86eH-Wq&)
z1ZY=*Fbj-EroZ;x^DRQ3<+@!(dgMSS+*@62bac3R#;kR&X`P};E>*u0hH-<Fs6{E9
zis^Nm40Aly?w-Fn^EO`OtOj`YDb$bdP3u(9;=u0$`5a?SHTuGF3R1cGYl>?gZpaR7
zvnN-J2SQ12Bffp9XT5Aw(>D9qe(XCABMjg!Zd~rVp)fcHT3HkcxZl%t*p}?Zf+!<8
zKfV4#USP|xnc6y_)T7#ZChC$gZ5s-`Xe%#1**p@{LWz?US-^;l4t3S>;DMk7VWT$H
zQdKS9@-_M40NZGE-usuF9D0ggtONb^pDRtqM|k~LR#(3H6ue+ty(7GH|5o2_J16nX
zq_E`*-j~`3oW&0x2Kw(Id%%c(H*li~AH5A1!w<Y=_i+xVDYhF&=eEfQ8mJ+flwk7d
z*j?rR0t)KfYNOI0?Q>?O4N|et<@VuYliP0U(n(vfLpiL;Ulr#8w993=7gCXlg%bkb
zig8Sd(`m(#mE}j2Ma=ng7heGX8Fv4=cxLyZorbppmz>CA>b`+EMs<AanO|-iDVMMF
z^GA=>DdAVf(g>6KuOqP#-on$v>&P5v{9%)jn^H7iQF%!GQvTY1rou7^C192b5cph>
z-8|Fya)Qt>Mlc#S-tQu}`2*LYUDc8aOLnvY_T_!SqcwN+%4$9I&9b5(Lx(R-JtpHV
z!-AvKo`VWDsspD{Iw>hB2!~29$a#Z?>2PbU0ncXFEN@~IkHUcl2GZojvF~V~u2{Vz
z!U{A7tctiRT5f??#lmW86s$sRY2vbZH`twWEON0o&)(sh7sU(wn2|;-&-K2{2QTD4
z9#ymTdV+t`;SxY}WPfj=4g2LcjxGI~B~2hOE-r4zBpm5GOC!U^<mC4eW)A%dJ>if+
zGe|jKvJdTcVF{>zKO$^TG<ORaK}@rPbkg4T=w#bI2_Lf02gp>R$oFUNr)<TvgcSOT
zeEaVr=0Oke)n6{2HvjF=$J?@QH}G!))cQJ2pf)>)sl)2+FW7F9{*y8ec8*|4lRs(%
zkglN`C0(nbUrx$C!^8YH!l!oC^{Ppk3%#raNS)ztU&!|#CVy=boI4wiVIh6<yCIc@
z|Mvh5hELfXWN*QiQIZ`(EYpOYr}+-E2_zi;Kj$Mr)bE7Hx?Al!h6Ti&xw@GUfOS?A
z`k&q6zf<VgW(+FfGC~hOL&nr+(oAVHbsLG)K0Z21;kO-4uNuBGS4@GQN4hLS)_|18
z@ooa|AQJ48d_Cs+Cch3g#ZfHhSc+$V70JCTe#1U69nozzZUpq-e8zz4{O>tFZImcL
zHitu4U=jZCO4J;%e0WlcEscu4X3hjtl&PqpzHob`AGXl!JS#ChjxJK^b7uojJY@5^
z_-ixwUtwhqLcQ$3YkTu1iYYN8sL-r$l#Sk8n5}2hQ<Wj`cj&LV@D{s{M4C_mOUVzz
zvr>U9&ja<ON%#v`4{!)FB%uxRDFm4aRK%;*+3D8M;7QsaS+sgU+v!EM8LejhdQ6{<
z6y%mh|L2w{|J^c7OlZk+9i-N-$tv-u`g1Gfzkxgm&4rn94sp05^e?(UWS7fpW$HP?
zZNKUPX{o8B`;GRLUo!PX>sV?Rq9!E~u+$-yS_y(3>lW>Rd+&vCEFMh1&~&4#W&EJ8
zzYrlb3I;g+QtluBiW=b_|NohyHlilG>U-c^4I5SCTQ`1kGogeot&^e(_Ilo|U%7zV
zun;2q502#bU5Cb1By%)+f??C#IEbtWR@>+PLmM(gH6xI$csQ)UD{62Eef{rk$YNPn
zRM`FJT;Xej8LZ3&nsX=n<NMzdQh{l+xw~fD%c>wA&9yU>CwKyYOG?raDqwJ(uwuIW
zqlg8@)fyWb7UXdj&|DDh9g%hQJ;<Z<&&50fPz`G)!xy3|HaORB>&xo;^q4j~;dxi(
z7A_%$@=xD*M+|hg-d-MVFv}|{9*Fy!!Ye9S$y|_j21X2%U#hfvsvgSj51V;;d2OKt
zpwkhpO>y*J?H^Hgh~q1myvAOGuELHHiNRcoPM3`b?>~BUZWQCM)jEIe(Rw3kZ&(0<
zY4*1k(fSc$JHI&f8k?H9+1V44E+IwV2~znLOdMUVhzEOnBrO^j?BSv@156Kko&j@G
zly6QKWC|@E))!ob537tZ-{S^ELFM^OjTZClk2a=JF|jm_Q12&riGvC8>fO@GBz^Ba
z-&E0b^=ZkjiRaCfAHU(3g=bav8SF8y8rG&-e(45?P!#6%UuO)B5f8KxJ(6r1{dvF_
z!}%b1?|FpXqYc+({m_3MXC?0o0MS)H@E+m+x`)NRPmRin@A$k=t@|WhJl_xL`lLA{
z2nFA}cA-@(Gf_+3iYPjFW@E#<aMGkpE(o%g&}35Vv61S|M20k<=Y*)BicCv)*L#U<
zbhIdcPC^mwpuGrT?N2K{x$IO-(Z5gmW?Jg!)3pxsSDX&iti~MqGG8LX?|K;rhJR-A
zia;11prUX}!_zNhc(^16xqW<~4aU{;v+KiZT~c1V`dw@rL-Tjrl;>JOGzJ@vr0=iw
zP|?xq<^^MBm^_%mF`d=JtxWIl<|Gr1aO7C{Qq!~#E?2KBm66M43n&yqJaI=?+={pc
zW)-|bdw5VTo9by>4+E+Ga-yx>KS&*v@67zJnmf`_T-5b6z6O3~t-(ZKDXPC%8z|BP
z&B;7?<9v2ZrmvtM4i792RoAFnf%Nwl3D<&l9pcnaU=xf4LOM-P%3saf&(?0KXnxpu
z+REQFrCJ{pD9Qcu^gMo>sa2Hv+h@U=T*~H<`vnS8EndR-2T3P4UX1qoulQdZ$HU96
zwxxQqv3)l``>3@BsU4IEoGNHhRpl5@PtIr+sLijX#o{ZsF$1hP`afwxL4P2^bSN%{
znlD{FGvRb7$CLQ8VXAhifBYLsPO`vSB9W@B=zSn=Oz`g?Wl-Ol69@x2<r@$(LS6jH
zC2ZB{cOmMe+vtQ)Lv5zuMwbnZqrd-0f>vHM+DEe~`9-cu8)?BMFG>Xklt`$Sh=QM|
z+~%cTcO3vyjVIDeRp?H%G?!BtGQ!q7&nsqBlv_vRhyUn!dd}|K_6;fqqQm9ke4|4}
zStKzKYC9D#c)?jI^uj4Z0*F8AM`;xZ2NTuU(@acY%QLRv7`_-ORl)NxeEMzlr+rSN
zCqamcd|fYZYE}h9hU_vEw#F8o_SO#y`Zq0lpSm)4UVL!I8#IK2h7{5tE;AaMBq_9~
zegiTsawe&iWQ?v6c&IJN{W;-cqZRVVefc{f&xwYgYT_1d!ecw{@%67u?uzA%L=IOh
zxsM*ZDtWB5;gmRerC{YnX}cmUy7cF&Kyvs5EmBhbWeO-bSic1BDSZqcOxsTkqIsk&
z9I2s@?X;Jbi?s+t2~~m?%71){gYOXl|Kd@^LQN5OUCHkd-9Cp?%n9WWJFje6qiI#!
zWt5E@n5|Fa1qBzXg3BK730}2RSE_>ZeoVC>fE3{C^;qZ%4OmufC1K%LBGQq-LjA=@
z1hOcQD#>g`G0|%?Sz}7z{2}ThZt@((O;pd0`vPSf5nzJM{xCj@qsj0qmK@p{?`!>k
zTt<KW4LADE#|F~Y8OE_8SSTnLsbBTOdi_SP{-a0F><5JX<A(?>W=K$_4LcrW^Mmw8
zhB813|BpNm$G;Ybu4Td*J|i?6?!O~H+NptJ-)lH$FNti%0+&RHEngpbR*f&QNpzxQ
zb6ANOS9G==+IR%%Xm9Y$$s4qnOkCbXSTE$QetxlsP&hH+{13{U?oMD#6eUW4{m*XT
zeNo%Z-X6R6Ch_}P4V|!@TddRirLe|QLo$GDn?1p6`mELM?l}}q-WZ9K4>{gIi6js$
zQ{ES1MS2~AoEr>6u%4YDGfk~5Y1X^(%?CQ!Rqq(=+13+q9H)mGq3n<)TIogEEob_-
zoE>5^ij_2kHQ^^4GnR{-s9~@4xYFL+FgQj0bGhlXy4akNO0w2y$hQ1F+;rQxs-ydP
zO=-`m!&8e}>uv$xKH&Wc29tYeyN(kX!3F2P2Ij$rrzM)<p&8Ag6v6D5Qb{>EeK(#<
zc0i|pR_XAX^>iI}NIkbpvC=TdCJ>WlBcd|%z*>FYG|_;-O~byqn~$U~O&Vb-SlGO~
zk5gU8b(wwdO_%Gub$^EtPIrh*bxvnoXcLHu{2%$y_YN+VIaO_S2nq$OcZ@kB6e}NA
z9%j>1AkQ#BEFxFqyT3cnsrqe8@tFr$n<DYhWJ!H#O<0@X>*gS%+H#+-W|w3Z^F*}H
zGyQL11bLZLT_wwfBoth`masb2hFA4^YmstCx5ZgqStCPx9JP5Hony2=9cC=39uJT2
z%mxO!4r$tFazehY=T@DR2&=Z`S+qakbo~#^f{fOsZ>4IQ3%YwI9k;MYpL-1v#VkA<
z4zOCJw`Q))!A>uC-M-PPCv2WI|5a0>w(U^Mu;bC<>E!5W?5Z!Q_r?eWR2v_qV)9dp
z7*teRhX||swUb?zT|-dOCnyQabox%G>wQLs?b7;d{-h%9wrfBs^=|zQEp`Q?U0AM*
z{oOX<lNW6DWAEE45`&?El!AHIRv3z*`}ML0r>!Hi+;^I*U!&-Srb&FGS%hOeIwLQZ
zb9xtW|KY9wmL?RU(7pEQyQ%C;AUC%VmC+^C|30b>S#fl}+&)hbSJ{6oFMrh`iUjf@
z2nR8%Klel44CG3h6-45Uqwf&Z^o@U@tlhQ<G<pGQ`VVw@1Y{iDV7?EzBb9HZZE!Uh
zsYR>{wVa_)h6{8BU4?Y{Upzf5p@3HS9(I6m{NcoKj9Y0RIyZ~!VdHO)R5ys|@{n-(
zy1Uo~mDYm(7IXN=GyD#jE22FonhcIWghcmv_;(rgP8n>;<ce@C87>ptF}3|rrGlHR
zsaMnHnlr4bV2N89Y<)2V>Y1;jB7)BVRCH*hwZw{vqo&IxCsy4pvOAcMt++ADh08AK
z=j&(diMKBQE2>8(e&*y$;&#xYd-jOEKzqPu&!f*Jn%C>d4I^QR^Z9^4im8jd6{GGJ
zvfrHiqF%Nu;!cNG_oD<+&uRoTdcQnbECfJ7qhm46h@$P&=6*$w)DXK#Xv&E{dNr-h
zjy@tCH6t-@)?-m*B430`dnU3^lp=MY*+zXey3}>yf^arK6wiR>EvE?;d`2{hI4M$P
z@i`m+^Insja_emt4fup>aTa3Z5&YE4VS$3uf^3`$<Vu2;*|-NAE}IH9?^+F#hbmkU
z<uf86*8raZA+6m0iqk-Y5kCnJ=i^akITjvcZdWx4ZyTMDffAP1+beGcA@p<E9NwaV
z7>t<0s1OSR4WiYd{?bAuFjT|>8fK$}`2QXF_A|H#0)(NUdg=e?=j*b4vpkSV_^i|p
z#h9z+lK<?FK$rpO{{(jvVrB)9u6u&j=_BiI?HFN^7aY^B>sT7zpsHUKFE<{KCcZ-b
zKJD7;6gTCu#z|n)By)TQKw@?+1w>jVzFF)Xy)C5%?=Fqm)!JFPF%*&_x}1mQxY^dM
z%O$*soF<@)jPEYlPF_pSRW0=+T=d%9%&Ju{9#n}{A=KZ}TZPBkSXot)3aJfKl8@zb
z0W{lr@%G&I1;57SGAQxYJ|GMg5<Unr<r6`^Xc}hAOObcor<SF4LWR~6-x-lgywu~9
z?EZMm8>bl}k1{eIUFtGRuJQozUwSc&i$83e$LzJ?UfUU3EM3CU$w)#l-A^h#_RaUi
zQ{9a)xJg76XUse8!fF&wiIE`;LOoc?P8xGStMLpqWHq0H{&48SYX1$GiGCf+l5g8a
zcN7PYs#wQEdZ_f^6SG<1akDJfUrrK)Po2?yARlUpPwYmLP#U5{7yb$bG(m+q?w(O!
zU0J-GAOwvfe`r6g9xr{&W^dG1Wre!n4lpfBAZj?y&}Yl2BFigcEA;=uB!p0w;cPcz
zB9wofE!Vj%h{RNRb*(34U+E4ZzLYl@q_J~l^=DV*)^gPTtvq)&<gx}0r3bf72MZY)
zR*O!B^$QG0MFK~|u_UPyG68Tc0)t_BGcttV3~Df6{SWQGY0<$6%1#7$GVtKLSFd03
za9455Cge=k1Gw@l$XbDKWV<XiWsF{Ckr;?h1ML=lr`b~c@u|P8`Fj6>z79$3V1IP#
z*mcLSq#6s~zIiEB01Lll?gWF>0#HChl^~^tpde^|mVI?#M8<1y_pe-*lr)oJIMfp&
z0m1UOSj$!=mv>nz{4ZM}DD!KH*|Aui-2_u4`bKvRS-Q)Y#=^Pd+x5D%g<b%**P}G?
z;iAKDD?U6o?RYm`_9ni+HEl;CaBXHJRKRH-r8k<da5c3#pd0cAj9~*-_=6^=mBNGq
zM$qUuA7Wo9I2MC3ld{E&Kt=Eq)Stqt5hne+4lJ#dHb?WANpsv$^1r13c6_gENC$ue
z2d_xnEQSp?H3kly+!!d!wD-4v+0|3NjzAI;;$#4?pVm)<=I>s1h>DClZ-6y2afalp
zL@_aj6q2kAd~H=;hxONCe!luNPr~RVv9d;;6mt1IEH5aioUxJyWCPIMpnZc3F4B6=
zPqd5b=9-+hb53vsfG64Sqt$G5B9!G(wzH5bVx@x}VicH_-ioUY2Pslb1^}bW5Q?ou
zR5*@bsj3~aZwJcEqdZkX>#xQra)&6_c_`xmks-^s=kO!>7q>4&93;xGC$5UcMo>`E
z!32B@{2;58DT9|Ad6U=EKwBXyQzrC<>gA#ut*aozOr(zXXvN)_kCbqFwRW`1oyx7Z
zT$lv^*A3t-SuLs2uk%TjCkM7?*8AZ5vcqXcRM~%9QQ6@GmCqmg4d;WR($;u)yIOTh
z-8I$6W23njj!t;KB}R13LhWW2t#p-;y{bc{F4?Q0;w-~317ebBHXU9gn#)y_Q)&F7
zkS<8z=6N)rUUNPCjO=hkZ{wjjQ|#Orao)jUbIUXUy^kx&qM+dw0@7%EDLZzKtPOM+
zhAg@YV(Q(!V|TeUowpKf(D5^G>?});t}^rSlUeV^;_runqI06&?{Kt)fcesa%NdW8
zzgs)sdW<z*SHf00j_Avnpk0|bl5{&5zhY@Y{}miMv(ZjwR^qowFPYKfUDi8gnRcJJ
zwbOq+o6Frh06HF=q{WPdmzo$&kuAT>qHvp+)G*RxJX^zHUh&SokB8nXuw&kgaj!iy
z;sJEhaJS|r>NRv}7vkVtr&Pkv4QF2wV|Q~4HnvJa)`mhAdM>VX4SEe9bSNq=YKhv-
zTwi#5q6%*Gcoyn31bEGVxpl4PAn40sppT_nSIZ6i=5IskRVps%Kkc`^`?-tRrrGyb
z7aYuR=5cqFoiKUZ>&zGrKkm0?E1LEd(7yyo2I1h{)suJzO*%6rqpoZ6xt%7T6o}BJ
zaM^xF)_OP?Ze!PepWu5rDSo_2K0t0cAC-);dm-EETjL8FPs?f(jmwfF8F5u{mhC7Y
zZ3&)sV$YB1QQ3Rno(L|S494WZqxWo?F*AOz<&p#k7oAL&qdzY^JUkx#+YS0?R(jH%
z2_Oa_K>haDI%Qt7Q({zFY!QZ0G~0+F^&$mzLgAH`s_Rw_zn>UAa2Db#N+UH8m#VJ+
zH%+Hg_XXJmsQ}};89k(;;`SmCCt=$xud&FZbQVz&EAcOzOb)4T3z~wx6ffC5MCE=_
zW!%}1E=~8X2eZdFQktVFeAS6~r;FEhmygj)!t|AnsW$H-s$?<>Qc`WQ=0$zSH4VU&
zH0vn)({;>H_s1lJo=?^@N|ihbnyiT6q7Ep7sL7k7t1(b0c?G*tM_VB$>(y^|8cj+o
zqm6^PU0d5XeTZmU)aTvNpr@vKVDn*5y*R@w6Eg_ufJhH5^uY&~N3N<1JuM00HWZRO
zvTNT`*BYRSPOhc};~s%y_J`qdRhmOzONVcFj;=2W(p4k&osk`2?RQJHo~prnCfY!h
zg!Y#_uMKnIijcGU+0xvN*8+TREZySwDa1PH*HWnHBLCIONBtJuEQhcLnmP{Ubw8z;
zh%+RqMc*^@Z_twI!zG{#-IV0?IIu0|@?Ske&Qoci<>*wHNxr{~>K*&~a6#_6A2O<J
zPPBh*koKtxq9{-IwnJWXIIqpS@%2K-`CI+Chod@~hVJT|b=}v)TV5?;K0D#+euwj!
zsCIBgMWMOda;<q7wk+5(&J(coqMcy~F;P0sEY7O<-B=L;U;g@2I0O*_001q%!B#gM
zp&o*&)E-9qPZhmK;h!RSYAPy{1xA-|Ci4!ppDoj5ZS?nL<L`k^NAhGt#*qMB+MeYC
zIoZ9=7kbZ#PD5RhJYkW-2(%qxd5*xEdnLo9y80!f`e`rzCF<Eg(cx#q7Gwghe+ws9
z8qk6sFJ}$jE?3Tl4{eSwMfSi8>6Q+OxE%7Ut`Gi#mpsy<dx$dJMx_HQK7Kbyw$3u$
zp4E(qMs$3P)7CjQQvEZ^ltd*gF_j!OnX(eS#U+*4$fX?Ol|*Cpk=B8VL~EN_7*jL7
zN+9*1O;wmCllZ%!L`$ZYjU6XKEJenIsq%{r#<%*dWs{n%jEnXc22oEY<Kg%NoAh~6
z;{>9Mr-Q9?*MLbscqlaVjrkH?UJkDy1!RDK(%cAR)@d^}>J8JIJ$dAu4r`(~n+*3P
z619|&p@2xC*I$|RtU2nUafUAF;g#UPjXgKC1En*Tz#C27)7s?ELnSFDC_f}0C}AyY
zO6E?Zms(p}l?&wvd7Th#bl4q_W77&DL4W_xD6~-IMBxpeec&6(f^DF@P;~%>T3*~8
zsN+M@!wNwH>dF&x=V7f5EZxJY4<tNq!T=52BxVkNHq0veKDw=lh?G=%PS{vgT0$<9
z&>STtrFf~mOg?wWzaO2L=yZ_bOi4v0{u~c6F)0uY%)Gw}Jql9@T0e=oXsq2GnU<&7
zHJvVl%5B#SYbV`7E%NNVCfMCuxk&_Z+in@&9|5t7F?m$7eQtQo5u<Pu7vxJnKXeaw
zwT!HZ{uMvzuwnKL8N|{Nz}`P17HbJP;J>l|0P<C*=u|wg>2P1ZPvwfMsj50UI6%B_
zzjL}8)xlrlnf}uGTJ#fa8P`=+O*ty(+d03pAJZ+g*>yJ^;kCb%Sv2?&cj$}wpDdc~
zL3^Q0I4@EfxwvypTgE?=IhYH7{F@7ZX|td?X7%XFMBd()Jnry3uwlUnYxA<GQg?HA
zx7ALlpCZgSy&{b%YHufkEd?Czz(V;!x76_{kiS`d4VF1<!5xKT1pi{;*M7epBO?np
zlA#HhI~GtaXhQdh2#q1-ix_273SLU8c_)n53RkLl_;oImhUuM^K~PXyPA&JbEn_1a
zHW4F=<-S)}SXkIp{4~PYVPpn#0vb<FA03q`7AaBqX<@M#q7pxR$u|Z8Y+n%#EFqMR
z4K_WADwAsOxWB4HBWBB-_r%(hxj7i9j6>x)G%L%BFPotuRGR%}!Yt)#l_5uEB&|co
zu;NIMRvkQ?qjKs>p^rP=qb=)P8+*Cbi=jAmnq^bu?3@jww3!Q&lfS?FPnn(0A8Bf8
zBEtC1S>Ur<#7h--^H#wFfk1?NT8N3!;x_dOorTpb9eOS2w`NidV<~9vxQ+mB$N*`h
z^{cNb(;!Wvl4TyhS5NT&D(*_dp=|&5SW4C`S+e92mF#~RM3FM4q{T9Z!B~eU`!@D1
zX@rJSV_%9QhG9(heHdgJp|O*FeI_JB5&v7q`+RvnzsK=@`hB?X<36tYxUc(n{eI_p
zUFX@AKbHnJupaw+EWF!)0;Q^KOBy=jPt*hNq2NdZC*_@M#ikG7V9V{H5B})AHgW+r
zIkHl9Hx-aisu@fW9wV328#VbHI~MG;!C<hU6@foa|Kj?Csy=78M;_p_SZ5L-4r`RH
zB`A&u@p{cP9Av8d7kkx2JZ1k4P0G0kk^bkxkLg!ft0tXJr_-k?a*Oy{kyGjIDKxIi
zpjK3oJmJ%f4;I#&#k?8{eeM-mn5$vDh9c|k*NC1>!1o=(;3rJ0pLY4chv{rwYEL{f
z#i<8|1TMH~WWCFmfs^x8fvIJ!QnbWx0n~zvA%Mr9#k88lqXaXH0m;;$NGOy|-2@;7
zDo7-sw1P)rT<XZn@mlC#XLzD2m~U8bCFKAM9bh@QoZ*2P+z2@LVf{-cMedQOd2#>t
z*^xK415V8DEH9-SN~n!LodG4^XC9Pn4V|$gGebnWY;tSSVXMinq4N|;osHl_fhp4q
zqP}m+RX_S2vh8c%>3X5suZVfFthnEwR*;m^+ZAVKezm}<d$ZH;sL1qCNamsJ8Le!d
z1cHTvr>m=|Zp5`=ME-!t`{k2>HFQ|fZUu=cjv63R2&nj^rw-dYGRDOovv8Slw`QEs
z!wQjmTn#$Bm9=Sew>xqSsIaTaZrkr|zoe<t*TaLTEwxf<I(my8qp}8kMI@W%GB?uU
zS5KSd=k4PPGm1dTDyz0Ha;N&y&n!G$(dR4jpI`lN6IhzIl@pB0w{NQ0m4C->R@8ay
zXA&~yaIOR72{%{Q-PF|jZ~Z+z**0b|fpcZnyN-?{coiu12}y7#TixAXwD(88Mlpoi
z^w22R5!c7gx<-KD`t!*yHOj>7crZ+#KWX}dQKI{M*z~~qPP8)MDjju6`m+Ckl^2<h
z$}j3-lTfL=67V|m32y7RAg>^hx@#anLz7h)v6wLZWVshVy?*esvUuw(BlyTEpZAVb
zdY64^H}ox07sAjnoH#8~&gG~r=;o>y^1Q?YPct;0j)Z34cTp1!4GHm1X^)-lyYuSe
zV@E;I9Cm$S<z5mp?x~4dLD?DmQ0C0*=HA=*GOilq6U<IDNkeu(c7~SN_A4^n3t=^0
zn*1W6@KYhS&QyEOZQyC-Ut+CY&~)d9&^++`w%pXq1fdK)0o4z<ks=4@!bC9*s+~%f
z=4{&e{Q7#ao=a7Rzy#bZFuGWO@V#efaIm7Hq9aj4{>MBks70HT_JJDTr1oQ@m9gH2
zNR<}Rw^ATvvanOy*7B;~d>jBdfmIR;<val()u+9@Z2TZ3c*A_yA$(1z)}J+)QI_5O
zDA<;wqID3kRA?OdAXV78WBkH3U}21ojt<{v*tePCY0fS#F3!%rCUQRjQ1~y4i1g=#
z<hMgYU+(6MbM%>>C%WbGU}l93xW5c&M0+vi0Ct@mrP0<}R>4O`6rddpTvoIRSpp%R
z>=qV3#GJCxiLR4_@_*X<a>`it3?(2Y;yzI3_0xR)D>vRovy{Nj{0-Lp44>sinqN^>
zwboelP5)gs>CtRZI(t}0PrdEnB4McCPOCLJ;M??J0;#Z`eJPWF&skrS+ag!uW!g-r
z%2>6&o<hut7*-~mTL4^*IaOWuwSIf%CvN*<lYc+%W+Cb`zpeC*W9)5(h<-G%SMm<7
zs|$mD6%2Ndg8%W9$8aE?E<C~c$)+z9#V3BP%8y(dJ!b-Hz99`*Mz`?h4Pnj|Rj=wN
zDy4in|D)5M#k_~<JZs4@j3?Eu8}h;wpi}N2jnqHAKQzO9>|}3uYPQNOapd|9ppQKU
z_@t7rkB8#kurx3y2^?SbA$5`w)%tGOJ}C}=OW+O>!~rx(Jy7aO+j!AYsoqE%M@j>8
z1%Nt%Kn+aTmgCqWcI^K8e;Ivb@%1TgDI5G+d@KMguOPq9*#~Ux$-e8oc{cou3D7ba
z*>Ph2cACrJCb5&>_xhv=?s3YhotNQ3ffFxVnVS$JCgQIF?h{_V>~biJV&RP-qQYx|
z->AoPeZ3KfroaQ9|BKg4y=HGU{n#{)TpHzMmz58a;d81Cm>0(ycyxMpR7|YtIJk`Z
zjxUGpSi6Q=jQygIsknyzFOWT<S$U}fMbdD$SelGW>aw*&HmT-nlOJs`G8-80+(m*?
zdgwLhuo|fzc7b~LfZz6nIZW6cS?=F+UunK>5ix>MgN`anhi1)iDpSlqFEe|#H<x@v
zL{NaU=l<&!)3*YtV>MgvZH1fMz9Mca1bYolj><URy>pmIp=HfUF}SH^)@`sI3l_gm
zt8w985q+K7pXY!h2m7w~;b&@dAJ2ED&d(`BE`)obe|Ad<&_nSf@RI$Y!^5>52t)2t
zrjqrPleNi0^68UV6nfx;BaCZUg7#<ilf@+<Ugc3(rHG(5T5zO}4k4SEE!4kQ?e97_
z78a#B?zX@pKS3B_geuJ>)uhsFBt4op;$r=3v9;CHfqP#r>kSh9R|mgKNbWXTTCfv8
zYq|QCe6p~d3EI8|hk2EcJ-V0MG;0JyTGDT09KDcwZ~bhKEPH;Ls;O*!a|tduQv052
z4AhBNd0-Hwx^5GaeYUOb>nqZs&f82742f^_kzx(+jCG47pq-TSTucMKpY2+S@N=Q~
z;T@dt4npo7u&RT@knHVj|Aw^5Ov%LJ5M0*_pRIle{72cDEzi|lNfI0TvDr9`Zd%1J
z?pwv8JVw-9;W_t>VkSG1v@rSh-eixQ`orqxa^mng!qgs_vET7_m-8!XBBs86mtjdH
zN_kPLb_6d3*rRaeUjr8H(CDdTZ+94@H#ve$j%RG%_ha2mT~R(&^jTiq&&jir8?w8R
z@2Y>WfOw(hRjx%tWu&HOZruNp3K9~Rhdq1}q>|lvAo{HBg(aTNZPOBW+7dse*RM{I
zFBOhzSYBE$h~?y{o|;`LdzU`XJ1H`tTtW$$pp8Mg2yyO?9>ErhEt=}$%EGj|I6OUZ
zaPVgAvSZYPk?VTf!qU*x3t3f7XBOc?O59<Pq~mdDXj(<lXR?s(l^EP^t$r=XVLUi7
z`h2r55h@Ln8556xwkhQexxJzm(?M9wNb;mt?V1%&X)ZJUKs@&_*L|(nmS@2o4xm;b
zjM6a%onDL237zG@jw8kXN@*C8P|jFeacPe#IL<cq{QU@kd;>+*9PjKt&KWOW{K-Qg
zkk`Ml-P$}*aU@1Zp&(#BD{6V>S+Kb0d=-OJTif~b^<HT!W^y<xZj+x2;P#~D@YYPm
ze+^f3Qz1dNvt_n(sOSSGSM5N7+@V|Ljt^~?<PL(M!QNL?Yxt`g7=4~5h#J+Ebj?P^
z8%%evF}2vWHiZenRZ5D&h+Mvb;sTDADA>;Mz3S=e-}yQ=Q<Y)V4s4H&@CSRkWvBaT
z7W#wKrxvvk_kwG|E1zGPe#vM;d(`CnwD^SB`mY^+x)ALgMKFhJnbG`kB1wWW;<Iay
zdwOD?`l;IOzL&99L_mK~jh2$zAG3Q~jyv3vS*HU&-LjNScrHT$IXT=QTK*dA(z<Aj
zX$b)z@L5?_;@7PAV`A>xKw=|*AJ$0!6R!r%Ewd}U-0pm-8i^(BcjfI$t_Tkw4!Pd_
z3hkGmTr$dJ92nbFugj@dib?LFXG14fgN_J`fq8)vM0D)OaclyC(H}S$iW3R^4(GB!
zUR2mbkNrG#JtcW`bFQ0g(s@(p?p-$hB>cxNG@106eZ^|rffBtrGQkA80s3_jNpeHx
zK)2?IOSC9((KQZ&YPBlsFn;z`S~tL%z04#qN*}(mdKk2KX5Z}_;#*plclWDUoBj=L
zEQ|)ZfD{X(N3W|g>4tV^+Xwl*Od#;2L3)?v{&Q_mLwk&R!aZfv+Awd>D{ss(+)N|;
zuGN|Cx@iDgABY|50ONilRcn?r;GS+KKb33j8by(D?@JtDki^xnjZuuXKN?giwmcc9
z=_inxZ^{<dxmqj<+li?Rudlbgb^7m{Zmb6PZP3QFhwwOd0ctg3N~5f~(}W*?Nyx|Y
z&AU9Wo$W*Y3DUIsN7l$jr`YCDPQOM8z%rY4dGilD_;w}7r4_gFKVRmSCCUQ^4OI~8
zT`u@F2#YC5oHq<9$&F=;aJ21TV$v<nu&Ou}yvmE)-<<vyxUn4$*%*}%SLR9E8h6Br
zG|S)C*Po6DGf?i=Qj%LzmHeIfY`0I7fMfqkipskl4`Z8;-}*nXXq=X|r&)@y(8B4x
zalbzK>i6f^gsf?vs8c2IHhJPJm<wmQghHf_KX`X`M5xirmS_-8DI)JrHlc)7btemp
zOE6mX3RfRQ&NVfi@J`wA4X`Co#!Yj7s*SG+L?<K^hge?d=;z>90_G@m%eBfJG2irB
zAFcP6)Ywr9?y8hzCgjW^O8Z%3{tSqCQdsT7J6$(`Q<g^_5P}zty%+0KrOJ`qxiXVk
zEx>Y(6bY1xFfZkcsz8;D&~m)WpDXE2kgcw;4NovdNpU<totnwkw`#>y0=vlbVQw)X
zG2*&+WAcOrLUbwPYB})MT(G^%w?L9IS(Sh4i!IJxcCO<j(ZKX?!SVkTw~mrr{jQhE
SP4*rS=MLn)KH;Wa^nU?%7b->o

literal 0
HcmV?d00001

diff --git a/samples/web-app-file-storage/dotnet/scripts/00-variables.sh b/samples/web-app-file-storage/dotnet/scripts/00-variables.sh
new file mode 100755
index 0000000..938e702
--- /dev/null
+++ b/samples/web-app-file-storage/dotnet/scripts/00-variables.sh
@@ -0,0 +1,67 @@
+# Variables
+
+# Azure Resources
+PREFIX='local'
+SUFFIX='test'
+LOCATION='italynorth'
+RESOURCE_GROUP_NAME="${PREFIX}-rg"
+ACR_NAME="${PREFIX,,}acr${SUFFIX,,}"
+ACR_SKU='Standard'
+AKS_CLUSTER_NAME="${PREFIX}-aks-${SUFFIX}"
+SUBSCRIPTION_NAME=$(az account show --query name --output tsv)
+SUBSCRIPTION_ID=$(az account show --query id --output tsv)
+TENANT_ID=$(az account show --query tenantId --output tsv)
+CURRENT_DIR="$(cd "$(dirname "$0")" && pwd)"
+
+# Storage Accounts
+# An SMB share needs a general-purpose v2 account, an NFS share needs a premium FileStorage account
+# (NFS Azure file shares are only available on SSD file shares), and the kind of an account cannot be
+# changed after creation. Each protocol therefore gets its own account, so switching protocol never
+# collides with the account created for the other one.
+SMB_STORAGE_ACCOUNT_NAME="${PREFIX}filesmb${SUFFIX}"
+SMB_STORAGE_ACCOUNT_KIND='StorageV2'
+SMB_STORAGE_ACCOUNT_SKU='Standard_LRS'
+NFS_STORAGE_ACCOUNT_NAME="${PREFIX}filenfs${SUFFIX}"
+NFS_STORAGE_ACCOUNT_KIND='FileStorage'
+NFS_STORAGE_ACCOUNT_SKU='Premium_LRS'
+
+# Azure file share
+FILE_SHARE_NAME='activities'
+# A premium file share is provisioned storage with a 100 GiB minimum, so both protocols use the same
+# size to keep a single PersistentVolumeClaim for all the combinations.
+FILE_SHARE_QUOTA_GB='100'
+
+# Docker Image
+IMAGE_NAME="vacation-planner-file-dotnet"
+IMAGE_PULL_POLICY="Always"
+IMAGE_TAG="v1"
+PORT="8080"
+
+# Kubernetes
+NAMESPACE="vacation-planner-file"
+DEPLOYMENT_NAME="vacation-planner-file"
+SERVICE_NAME="vacation-planner-file"
+CONFIGMAP_NAME="vacation-planner-file-config"
+SEED_CONFIGMAP_NAME="vacation-planner-file-seed"
+SECRET_NAME="vacation-planner-file-secrets"
+STORAGE_SECRET_NAME="vacation-planner-file-storage"
+PERSISTENT_VOLUME_NAME="vacation-planner-file-pv"
+PERSISTENT_VOLUME_CLAIM_NAME="vacation-planner-file-pvc"
+
+# Storage class used to provision the volume on demand.
+# SMB uses azurefile-csi, one of the four azurefile* classes the Azure Files CSI driver installs on
+# every AKS cluster. NFS needs a class of its own, because none of the built-in ones sets
+# protocol: nfs, and it is created by 05-deploy-app.sh from storageclass-nfs.yml.
+SMB_STORAGE_CLASS_NAME='azurefile-csi'
+NFS_STORAGE_CLASS_NAME="vacation-planner-file-nfs"
+
+# Directory where the Azure file share is mounted in the pods
+ACTIVITIES_DIR='/data'
+
+# Deployment options chosen interactively in 01-deploy-resources.sh, or exported beforehand for an
+# unattended run. The generated file assigns each value with ${VAR:-value} syntax, so an exported
+# environment variable always takes precedence over the persisted choice.
+DEPLOY_OPTIONS_FILE="$CURRENT_DIR/.deploy-options.env"
+[ -f "$DEPLOY_OPTIONS_FILE" ] && source "$DEPLOY_OPTIONS_FILE"
+PROVISIONING_MODE="${PROVISIONING_MODE:-}"
+FILE_SHARE_PROTOCOL="${FILE_SHARE_PROTOCOL:-}"
diff --git a/samples/web-app-file-storage/dotnet/scripts/01-deploy-resources.sh b/samples/web-app-file-storage/dotnet/scripts/01-deploy-resources.sh
new file mode 100755
index 0000000..0a35f6c
--- /dev/null
+++ b/samples/web-app-file-storage/dotnet/scripts/01-deploy-resources.sh
@@ -0,0 +1,308 @@
+#!/bin/bash
+
+# Variables
+source ./00-variables.sh
+
+# Change the current directory to the script's directory
+cd "$CURRENT_DIR" || exit
+
+# Ask how the Azure file share holding the activities should be provisioned.
+# Both answers are persisted below, so 05-deploy-app.sh deploys the app for the same combination
+# without asking again. Export PROVISIONING_MODE and FILE_SHARE_PROTOCOL beforehand to skip the
+# menus altogether, for example in an unattended run:
+#
+#   PROVISIONING_MODE=dynamic FILE_SHARE_PROTOCOL=nfs ./01-deploy-resources.sh
+if [[ -z "$PROVISIONING_MODE" ]]; then
+	# Print the menu
+	echo "===================================="
+	echo "Provisioning Mode (1-3): "
+	echo "===================================="
+	options=(
+		"Static: use a file share created by this script"
+		"Dynamic: let the CSI driver create the file share"
+		"Quit"
+	)
+	# Select an option
+	COLUMNS=0
+	select option in "${options[@]}"; do
+		case $option in
+		"Static: use a file share created by this script")
+			PROVISIONING_MODE='static'
+			break
+			;;
+		"Dynamic: let the CSI driver create the file share")
+			PROVISIONING_MODE='dynamic'
+			break
+			;;
+		"Quit")
+			exit
+			;;
+		*) echo "invalid option $REPLY" ;;
+		esac
+	done
+fi
+
+PROVISIONING_MODE="${PROVISIONING_MODE,,}"
+
+if [[ "$PROVISIONING_MODE" != 'static' && "$PROVISIONING_MODE" != 'dynamic' ]]; then
+	echo "Invalid provisioning mode [$PROVISIONING_MODE]: expected [static] or [dynamic]"
+	exit 1
+fi
+
+# Ask which protocol the Azure file share should use.
+if [[ -z "$FILE_SHARE_PROTOCOL" ]]; then
+	# Print the menu
+	echo "===================================="
+	echo "File Share Protocol (1-3): "
+	echo "===================================="
+	options=(
+		"SMB: mounted with the storage account key"
+		"NFS: mounted from a virtual network, no key"
+		"Quit"
+	)
+	# Select an option
+	COLUMNS=0
+	select option in "${options[@]}"; do
+		case $option in
+		"SMB: mounted with the storage account key")
+			FILE_SHARE_PROTOCOL='smb'
+			break
+			;;
+		"NFS: mounted from a virtual network, no key")
+			FILE_SHARE_PROTOCOL='nfs'
+			break
+			;;
+		"Quit")
+			exit
+			;;
+		*) echo "invalid option $REPLY" ;;
+		esac
+	done
+fi
+
+FILE_SHARE_PROTOCOL="${FILE_SHARE_PROTOCOL,,}"
+
+if [[ "$FILE_SHARE_PROTOCOL" != 'smb' && "$FILE_SHARE_PROTOCOL" != 'nfs' ]]; then
+	echo "Invalid file share protocol [$FILE_SHARE_PROTOCOL]: expected [smb] or [nfs]"
+	exit 1
+fi
+
+# Persist both answers so 05-deploy-app.sh deploys the app for the same combination.
+# Each value is written with ${VAR:-value} syntax, so an exported environment variable still takes
+# precedence when 00-variables.sh sources this file.
+cat <<EOF >"$DEPLOY_OPTIONS_FILE"
+# Generated by 01-deploy-resources.sh - do not edit.
+# An exported environment variable takes precedence over the value stored here.
+PROVISIONING_MODE="\${PROVISIONING_MODE:-$PROVISIONING_MODE}"
+FILE_SHARE_PROTOCOL="\${FILE_SHARE_PROTOCOL:-$FILE_SHARE_PROTOCOL}"
+EOF
+
+if [[ $? == 0 ]]; then
+	echo "Deployment options saved to [$DEPLOY_OPTIONS_FILE]"
+else
+	echo "Failed to save the deployment options to [$DEPLOY_OPTIONS_FILE]"
+	exit 1
+fi
+
+echo "Deploying the resources for [$PROVISIONING_MODE] provisioning over [${FILE_SHARE_PROTOCOL^^}]..."
+
+# Create a resource group
+echo "Checking if resource group [$RESOURCE_GROUP_NAME] exists in the subscription [$SUBSCRIPTION_NAME]..."
+az group show --name $RESOURCE_GROUP_NAME &>/dev/null
+
+if [[ $? != 0 ]]; then
+	echo "No resource group [$RESOURCE_GROUP_NAME] exists in the subscription [$SUBSCRIPTION_NAME]"
+	echo "Creating resource group [$RESOURCE_GROUP_NAME] in the subscription [$SUBSCRIPTION_NAME]..."
+
+	az group create \
+		--name $RESOURCE_GROUP_NAME \
+		--location "$LOCATION" \
+		--only-show-errors 1>/dev/null
+
+	if [[ $? == 0 ]]; then
+		echo "Resource group [$RESOURCE_GROUP_NAME] successfully created in the subscription [$SUBSCRIPTION_NAME]"
+	else
+		echo "Failed to create resource group [$RESOURCE_GROUP_NAME] in the subscription [$SUBSCRIPTION_NAME]"
+		exit 1
+	fi
+else
+	echo "Resource group [$RESOURCE_GROUP_NAME] already exists in the subscription [$SUBSCRIPTION_NAME]"
+fi
+
+# Create the Azure Container Registry
+echo "Checking if [$ACR_NAME] Azure Container Registry already exists in the [$RESOURCE_GROUP_NAME] resource group..."
+az acr show \
+	--name "$ACR_NAME" \
+	--resource-group "$RESOURCE_GROUP_NAME" \
+	--only-show-errors &>/dev/null
+
+if [[ $? != 0 ]]; then
+	echo "No [$ACR_NAME] Azure Container Registry exists in the [$RESOURCE_GROUP_NAME] resource group"
+	echo "Creating Azure Container Registry [$ACR_NAME]..."
+	az acr create \
+		--name "$ACR_NAME" \
+		--resource-group "$RESOURCE_GROUP_NAME" \
+		--location "$LOCATION" \
+		--sku "$ACR_SKU" \
+		--admin-enabled "true" \
+		--only-show-errors 1>/dev/null
+
+	if [ $? -eq 0 ]; then
+		echo "Azure Container Registry [$ACR_NAME] created successfully."
+	else
+		echo "Failed to create Azure Container Registry [$ACR_NAME]."
+		exit 1
+	fi
+else
+	echo "[$ACR_NAME] Azure Container Registry already exists in the [$RESOURCE_GROUP_NAME] resource group"
+fi
+
+# In dynamic mode there is nothing else to create: the Azure Files CSI driver creates the storage
+# account and the file share in the node resource group when the PersistentVolumeClaim is bound.
+if [[ "$PROVISIONING_MODE" == 'dynamic' ]]; then
+	echo "Dynamic provisioning selected: the Azure Files CSI driver creates the storage account and the [$FILE_SHARE_NAME] file share when the [$PERSISTENT_VOLUME_CLAIM_NAME] persistent volume claim is bound by 05-deploy-app.sh."
+	exit 0
+fi
+
+# Static provisioning: create the storage account and the file share the PersistentVolume points at.
+if [[ "$FILE_SHARE_PROTOCOL" == 'smb' ]]; then
+	STORAGE_ACCOUNT_NAME="$SMB_STORAGE_ACCOUNT_NAME"
+	STORAGE_ACCOUNT_KIND="$SMB_STORAGE_ACCOUNT_KIND"
+	STORAGE_ACCOUNT_SKU="$SMB_STORAGE_ACCOUNT_SKU"
+	ENABLED_PROTOCOLS='SMB'
+
+	# An SMB share is mounted with the account key over an encrypted connection, so secure transfer
+	# stays on and the account keeps its default network access.
+	STORAGE_ACCOUNT_EXTRA_ARGS=(--https-only true)
+	FILE_SHARE_EXTRA_ARGS=()
+else
+	STORAGE_ACCOUNT_NAME="$NFS_STORAGE_ACCOUNT_NAME"
+	STORAGE_ACCOUNT_KIND="$NFS_STORAGE_ACCOUNT_KIND"
+	STORAGE_ACCOUNT_SKU="$NFS_STORAGE_ACCOUNT_SKU"
+	ENABLED_PROTOCOLS='NFS'
+
+	# An NFSv4.1 mount is not encrypted in transit unless the client uses the AZNFS TLS helper, so
+	# secure transfer has to be off for the CSI driver to mount the share
+	# (https://learn.microsoft.com/en-us/azure/storage/files/files-nfs-protocol).
+	STORAGE_ACCOUNT_EXTRA_ARGS=(--https-only false)
+
+	# NoRootSquash lets the init container of the deployment chown the mount point as root, which is
+	# how the NFS variant makes the share writable by the non-root user of the app.
+	FILE_SHARE_EXTRA_ARGS=(--root-squash NoRootSquash)
+fi
+
+echo "Checking if storage account [$STORAGE_ACCOUNT_NAME] exists in the resource group [$RESOURCE_GROUP_NAME]..."
+az storage account show \
+	--name $STORAGE_ACCOUNT_NAME \
+	--resource-group $RESOURCE_GROUP_NAME &>/dev/null
+
+if [[ $? != 0 ]]; then
+	echo "Creating [$STORAGE_ACCOUNT_KIND] storage account [$STORAGE_ACCOUNT_NAME] with the [$STORAGE_ACCOUNT_SKU] sku..."
+	az storage account create \
+		--name $STORAGE_ACCOUNT_NAME \
+		--location "$LOCATION" \
+		--resource-group $RESOURCE_GROUP_NAME \
+		--kind $STORAGE_ACCOUNT_KIND \
+		--sku $STORAGE_ACCOUNT_SKU \
+		"${STORAGE_ACCOUNT_EXTRA_ARGS[@]}" \
+		--only-show-errors 1>/dev/null
+
+	if [ $? -eq 0 ]; then
+		echo "Storage account [$STORAGE_ACCOUNT_NAME] created successfully."
+	else
+		echo "Failed to create storage account [$STORAGE_ACCOUNT_NAME]."
+		exit 1
+	fi
+else
+	echo "Storage account [$STORAGE_ACCOUNT_NAME] already exists in the [$RESOURCE_GROUP_NAME] resource group"
+fi
+
+# An NFS share has no user-based authentication: access is granted by network rules only, so the
+# account must be restricted to the subnets of the AKS nodes that mount the share. The subnets are
+# read from the cluster itself, so this works with either of the two cluster provisioning scripts.
+# The Microsoft.Storage service endpoint on those subnets is enabled by the cluster script.
+if [[ "$FILE_SHARE_PROTOCOL" == 'nfs' ]]; then
+	echo "Retrieving the node subnets of the [$AKS_CLUSTER_NAME] AKS cluster..."
+	node_subnet_ids=$(az aks show \
+		--name $AKS_CLUSTER_NAME \
+		--resource-group $RESOURCE_GROUP_NAME \
+		--query "agentPoolProfiles[?vnetSubnetId!=null].vnetSubnetId" \
+		--output tsv \
+		--only-show-errors 2>/dev/null | sort --unique)
+
+	if [[ -z "$node_subnet_ids" ]]; then
+		echo "WARNING: no node subnet found for the [$AKS_CLUSTER_NAME] AKS cluster: the [$STORAGE_ACCOUNT_NAME] storage account is left open to all networks."
+		echo "WARNING: on Azure the NFS mount will fail, because an NFS share can only be reached from a restricted network."
+	else
+		network_rules_added='true'
+
+		for node_subnet_id in $node_subnet_ids; do
+			echo "Allowing access to the [$STORAGE_ACCOUNT_NAME] storage account from the [$(basename "$node_subnet_id")] subnet..."
+			az storage account network-rule add \
+				--account-name $STORAGE_ACCOUNT_NAME \
+				--resource-group $RESOURCE_GROUP_NAME \
+				--subnet "$node_subnet_id" \
+				--only-show-errors 1>/dev/null
+
+			if [[ $? != 0 ]]; then
+				network_rules_added='false'
+				echo "WARNING: failed to allow access from the [$(basename "$node_subnet_id")] subnet to the [$STORAGE_ACCOUNT_NAME] storage account."
+			fi
+		done
+
+		# The account is closed to every other network only once every subnet rule is in place:
+		# denying by default while a rule is missing would lock the nodes out of their own share.
+		if [[ "$network_rules_added" == 'true' ]]; then
+			echo "Restricting the [$STORAGE_ACCOUNT_NAME] storage account to the node subnets..."
+			az storage account update \
+				--name $STORAGE_ACCOUNT_NAME \
+				--resource-group $RESOURCE_GROUP_NAME \
+				--default-action Deny \
+				--only-show-errors 1>/dev/null
+
+			if [[ $? == 0 ]]; then
+				echo "The [$STORAGE_ACCOUNT_NAME] storage account is now reachable from the node subnets only."
+			else
+				echo "WARNING: failed to restrict the [$STORAGE_ACCOUNT_NAME] storage account to the node subnets."
+				echo "WARNING: on Azure the NFS mount will fail, because an NFS share can only be reached from a restricted network."
+			fi
+		else
+			echo "WARNING: the [$STORAGE_ACCOUNT_NAME] storage account is left open to all networks, because at least one subnet rule could not be created."
+			echo "WARNING: on Azure the NFS mount will fail, because an NFS share can only be reached from a restricted network."
+		fi
+	fi
+fi
+
+# Create the Azure file share.
+# az storage share-rm talks to the storage resource provider (the control plane) instead of the file
+# data plane, which is what makes --enabled-protocols and --root-squash available and lets the share
+# be created without an account key.
+echo "Checking if file share [$FILE_SHARE_NAME] exists in storage account [$STORAGE_ACCOUNT_NAME]..."
+az storage share-rm show \
+	--name $FILE_SHARE_NAME \
+	--storage-account $STORAGE_ACCOUNT_NAME \
+	--resource-group $RESOURCE_GROUP_NAME \
+	--only-show-errors &>/dev/null
+
+if [[ $? != 0 ]]; then
+	echo "Creating [$ENABLED_PROTOCOLS] file share [$FILE_SHARE_NAME] with a quota of [$FILE_SHARE_QUOTA_GB] GiB..."
+	az storage share-rm create \
+		--name $FILE_SHARE_NAME \
+		--storage-account $STORAGE_ACCOUNT_NAME \
+		--resource-group $RESOURCE_GROUP_NAME \
+		--enabled-protocols $ENABLED_PROTOCOLS \
+		--quota $FILE_SHARE_QUOTA_GB \
+		"${FILE_SHARE_EXTRA_ARGS[@]}" \
+		--only-show-errors 1>/dev/null
+
+	if [ $? -eq 0 ]; then
+		echo "File share [$FILE_SHARE_NAME] created successfully."
+	else
+		echo "Failed to create file share [$FILE_SHARE_NAME]."
+		exit 1
+	fi
+else
+	echo "File share [$FILE_SHARE_NAME] already exists in the [$STORAGE_ACCOUNT_NAME] storage account"
+fi
+
+echo "The [$FILE_SHARE_NAME] $ENABLED_PROTOCOLS file share of the [$STORAGE_ACCOUNT_NAME] storage account is ready to be mounted by the app."
diff --git a/samples/web-app-file-storage/dotnet/scripts/02-build-docker-image.sh b/samples/web-app-file-storage/dotnet/scripts/02-build-docker-image.sh
new file mode 100755
index 0000000..4b497d8
--- /dev/null
+++ b/samples/web-app-file-storage/dotnet/scripts/02-build-docker-image.sh
@@ -0,0 +1,18 @@
+#!/bin/bash
+
+# Variables
+source ./00-variables.sh
+
+# Change the current directory to the script's directory
+cd "$CURRENT_DIR" || exit
+
+# Build context: the src/ folder (contains VacationPlanner.csproj, Program.cs, Pages/, Services/, wwwroot/).
+# The Dockerfile lives alongside this script, so we point -f at it explicitly.
+BUILD_CONTEXT="../src"
+
+# Build the docker image
+docker build \
+	-t $IMAGE_NAME:$IMAGE_TAG \
+	-f Dockerfile \
+	--build-arg PORT=$PORT \
+	$BUILD_CONTEXT
diff --git a/samples/web-app-file-storage/dotnet/scripts/03-run-docker-container.sh b/samples/web-app-file-storage/dotnet/scripts/03-run-docker-container.sh
new file mode 100755
index 0000000..071a1a9
--- /dev/null
+++ b/samples/web-app-file-storage/dotnet/scripts/03-run-docker-container.sh
@@ -0,0 +1,45 @@
+#!/bin/bash
+
+# Variables
+source ./00-variables.sh
+
+# Change the current directory to the script's directory
+cd "$CURRENT_DIR" || exit
+
+# Local smoke test: no Azure resource is involved. In the cluster the app writes to an Azure file
+# share mounted by the Azure Files CSI driver, and here it writes to a directory on the host mounted
+# at the same path, which is all the app knows about its storage.
+#
+# Under the user's cache directory rather than /tmp: the directory has to be world-writable for the
+# container's non-root user to write to it, and /tmp is shared with every other user on the machine.
+# A private cache directory is also shared with the Docker daemon by default on Docker Desktop.
+ACTIVITIES_HOST_DIR="${XDG_CACHE_HOME:-$HOME/.cache}/${IMAGE_NAME}/activities"
+
+echo "Creating the local activities directory [$ACTIVITIES_HOST_DIR]..."
+mkdir -p "$ACTIVITIES_HOST_DIR"
+
+if [[ $? != 0 ]]; then
+	echo "Failed to create the local activities directory [$ACTIVITIES_HOST_DIR]."
+	exit 1
+fi
+
+# The container runs as uid 1000, which is not necessarily the owner of a directory on the host
+chmod 0777 "$ACTIVITIES_HOST_DIR"
+
+if [[ $? != 0 ]]; then
+	echo "Failed to make the local activities directory [$ACTIVITIES_HOST_DIR] writable."
+	exit 1
+fi
+
+echo "The activities are stored as text files in [$ACTIVITIES_HOST_DIR]."
+
+# --network=host so endpoints like *.localhost.localstack.cloud resolve to the
+# host's loopback (where LocalStack is listening), not the container's.
+docker run -it \
+	--rm \
+	--network=host \
+	-e PORT=$PORT \
+	-e ACTIVITIES_DIR="$ACTIVITIES_DIR" \
+	-v "$ACTIVITIES_HOST_DIR:$ACTIVITIES_DIR" \
+	--name "$IMAGE_NAME" \
+	"$IMAGE_NAME:$IMAGE_TAG"
diff --git a/samples/web-app-file-storage/dotnet/scripts/04-push-docker-image.sh b/samples/web-app-file-storage/dotnet/scripts/04-push-docker-image.sh
new file mode 100755
index 0000000..a1b7518
--- /dev/null
+++ b/samples/web-app-file-storage/dotnet/scripts/04-push-docker-image.sh
@@ -0,0 +1,40 @@
+#!/bin/bash
+
+# Variables
+source ./00-variables.sh
+
+# Login to ACR
+echo "Logging into Azure Container Registry [$ACR_NAME]..."
+az acr login --name $ACR_NAME
+
+# Retrieve ACR login server. Each container image needs to be tagged with the loginServer name of the registry.
+ACR_LOGIN_SERVER=$(az acr show --name $ACR_NAME --query loginServer --output tsv)
+
+if [ $? -eq 0 ]; then
+	echo "Logged into Azure Container Registry [$ACR_NAME] successfully."
+else
+	echo "Failed to log into Azure Container Registry [$ACR_NAME]."
+	exit 1
+fi
+
+FULL_IMAGE="${ACR_LOGIN_SERVER}/${IMAGE_NAME}:${IMAGE_TAG}"
+
+# Tag the local image with the loginServer of ACR
+docker tag ${IMAGE_NAME,,}:$IMAGE_TAG $ACR_LOGIN_SERVER/${IMAGE_NAME,,}:$IMAGE_TAG
+
+if [ $? -eq 0 ]; then
+	echo "Docker image [$IMAGE_NAME] tagged as [$FULL_IMAGE] successfully."
+else
+	echo "Failed to tag Docker image [$IMAGE_NAME] as [$FULL_IMAGE]."
+	exit 1
+fi
+
+# Push the container image to ACR
+docker push $ACR_LOGIN_SERVER/${IMAGE_NAME,,}:$IMAGE_TAG
+
+if [ $? -eq 0 ]; then
+	echo "Docker image [$FULL_IMAGE] pushed to ACR successfully."
+else
+	echo "Failed to push Docker image [$FULL_IMAGE] to ACR."
+	exit 1
+fi
diff --git a/samples/web-app-file-storage/dotnet/scripts/05-deploy-app.sh b/samples/web-app-file-storage/dotnet/scripts/05-deploy-app.sh
new file mode 100755
index 0000000..d8af933
--- /dev/null
+++ b/samples/web-app-file-storage/dotnet/scripts/05-deploy-app.sh
@@ -0,0 +1,210 @@
+#!/bin/bash
+
+# Variables
+source ./00-variables.sh
+
+# Change the current directory to the script's directory
+cd "$CURRENT_DIR" || exit
+
+# The combination to deploy is the one chosen in 01-deploy-resources.sh, which persisted it to
+# .deploy-options.env, or the one exported in the environment. It is never guessed here: deploying a
+# static volume for a file share that was never created, or an NFS volume against an SMB share, leaves
+# the pods stuck in ContainerCreating with a mount error.
+if [[ -z "$PROVISIONING_MODE" || -z "$FILE_SHARE_PROTOCOL" ]]; then
+	echo "The provisioning mode and the file share protocol are not set."
+	echo "Run ./01-deploy-resources.sh first, or export PROVISIONING_MODE (static|dynamic) and FILE_SHARE_PROTOCOL (smb|nfs)."
+	exit 1
+fi
+
+if [[ "$PROVISIONING_MODE" != 'static' && "$PROVISIONING_MODE" != 'dynamic' ]]; then
+	echo "Invalid provisioning mode [$PROVISIONING_MODE]: expected [static] or [dynamic]"
+	exit 1
+fi
+
+if [[ "$FILE_SHARE_PROTOCOL" != 'smb' && "$FILE_SHARE_PROTOCOL" != 'nfs' ]]; then
+	echo "Invalid file share protocol [$FILE_SHARE_PROTOCOL]: expected [smb] or [nfs]"
+	exit 1
+fi
+
+echo "Deploying the app with [$PROVISIONING_MODE] provisioning over [${FILE_SHARE_PROTOCOL^^}]..."
+
+# Pick the storage account that holds the file share for the selected protocol
+if [[ "$FILE_SHARE_PROTOCOL" == 'nfs' ]]; then
+	STORAGE_ACCOUNT_NAME="$NFS_STORAGE_ACCOUNT_NAME"
+else
+	STORAGE_ACCOUNT_NAME="$SMB_STORAGE_ACCOUNT_NAME"
+fi
+
+# Generate a stable SECRET_KEY shared by all replicas: the app derives its Data Protection key ring from it,
+# so antiforgery tokens and flash messages are valid on every replica and survive pod restarts
+SECRET_KEY=$(openssl rand -hex 32)
+
+# Get the login server for the Azure Container Registry
+echo "Getting login server for Azure Container Registry [$ACR_NAME]..."
+ACR_LOGIN_SERVER=$(az acr show \
+	--name "$ACR_NAME" \
+	--resource-group "$RESOURCE_GROUP_NAME" \
+	--query "loginServer" \
+	--output tsv \
+	--only-show-errors)
+
+if [ -n "$ACR_LOGIN_SERVER" ]; then
+	echo "Login server retrieved successfully: $ACR_LOGIN_SERVER"
+else
+	echo "Failed to retrieve login server for Azure Container Registry [$ACR_NAME]."
+	exit 1
+fi
+
+FULL_IMAGE="${ACR_LOGIN_SERVER}/${IMAGE_NAME}:${IMAGE_TAG}"
+
+# Create namespace
+cat namespace.yml |
+yq "(.metadata.name)|="\""$NAMESPACE"\" |
+kubectl apply -f -
+
+# Create secret with the SECRET_KEY. Unlike the sibling samples, no storage credential is
+# passed to the app: it reads and writes files on the mounted share and never authenticates to Azure.
+cat secret.yml |
+yq "(.metadata.namespace)|="\""$NAMESPACE"\" |
+yq "(.metadata.name)|="\""$SECRET_NAME"\" |
+yq "(.data.SECRET_KEY)|="\""$(echo -n $SECRET_KEY | base64 -w0)"\" |
+kubectl apply -f -
+
+# Create configmap with environment variables
+cat configmap.yml |
+yq "(.metadata.namespace)|="\""$NAMESPACE"\" |
+yq "(.metadata.name)|="\""$CONFIGMAP_NAME"\" |
+yq "(.data.ACTIVITIES_DIR)|="\""$ACTIVITIES_DIR"\" |
+kubectl apply -f -
+
+# Create the configmap holding the sample activities used to seed the file share
+cat seed-configmap.yml |
+yq "(.metadata.namespace)|="\""$NAMESPACE"\" |
+yq "(.metadata.name)|="\""$SEED_CONFIGMAP_NAME"\" |
+kubectl apply -f -
+
+if [[ "$PROVISIONING_MODE" == 'static' ]]; then
+	# Static provisioning: bind the claim to a volume that points at the file share created by
+	# 01-deploy-resources.sh.
+	if [[ "$FILE_SHARE_PROTOCOL" == 'smb' ]]; then
+		# The driver mounts an SMB share with the storage account key, so it needs the key in a secret
+		echo "Retrieving the key of the [$STORAGE_ACCOUNT_NAME] storage account..."
+		STORAGE_ACCOUNT_KEY=$(az storage account keys list \
+			--account-name $STORAGE_ACCOUNT_NAME \
+			--resource-group $RESOURCE_GROUP_NAME \
+			--query "[0].value" \
+			--output tsv \
+			--only-show-errors)
+
+		if [ -z "$STORAGE_ACCOUNT_KEY" ]; then
+			echo "Failed to retrieve the key of the [$STORAGE_ACCOUNT_NAME] storage account."
+			exit 1
+		fi
+
+		cat storage-secret.yml |
+		yq "(.metadata.namespace)|="\""$NAMESPACE"\" |
+		yq "(.metadata.name)|="\""$STORAGE_SECRET_NAME"\" |
+		yq "(.data.azurestorageaccountname)|="\""$(echo -n $STORAGE_ACCOUNT_NAME | base64 -w0)"\" |
+		yq "(.data.azurestorageaccountkey)|="\""$(echo -n $STORAGE_ACCOUNT_KEY | base64 -w0)"\" |
+		kubectl apply -f -
+
+		# The SMB and NFS volumes are applied by two separate pipelines on purpose: yq's |= operator
+		# creates a missing path, so setting nodeStageSecretRef.namespace on the NFS volume would add a
+		# secret reference to a volume that must not have one.
+		cat persistentvolume-smb.yml |
+		yq "(.metadata.name)|="\""$PERSISTENT_VOLUME_NAME"\" |
+		yq "(.spec.csi.volumeHandle)|="\""${RESOURCE_GROUP_NAME}#${STORAGE_ACCOUNT_NAME}#${FILE_SHARE_NAME}"\" |
+		yq "(.spec.csi.volumeAttributes.resourceGroup)|="\""$RESOURCE_GROUP_NAME"\" |
+		yq "(.spec.csi.volumeAttributes.storageAccount)|="\""$STORAGE_ACCOUNT_NAME"\" |
+		yq "(.spec.csi.volumeAttributes.shareName)|="\""$FILE_SHARE_NAME"\" |
+		yq "(.spec.csi.nodeStageSecretRef.name)|="\""$STORAGE_SECRET_NAME"\" |
+		yq "(.spec.csi.nodeStageSecretRef.namespace)|="\""$NAMESPACE"\" |
+		kubectl apply -f -
+	else
+		cat persistentvolume-nfs.yml |
+		yq "(.metadata.name)|="\""$PERSISTENT_VOLUME_NAME"\" |
+		yq "(.spec.csi.volumeHandle)|="\""${RESOURCE_GROUP_NAME}#${STORAGE_ACCOUNT_NAME}#${FILE_SHARE_NAME}"\" |
+		yq "(.spec.csi.volumeAttributes.resourceGroup)|="\""$RESOURCE_GROUP_NAME"\" |
+		yq "(.spec.csi.volumeAttributes.storageAccount)|="\""$STORAGE_ACCOUNT_NAME"\" |
+		yq "(.spec.csi.volumeAttributes.shareName)|="\""$FILE_SHARE_NAME"\" |
+		kubectl apply -f -
+	fi
+
+	# The claim is committed in its static shape, so it is applied as it is
+	cat persistentvolumeclaim.yml |
+	yq "(.metadata.namespace)|="\""$NAMESPACE"\" |
+	yq "(.metadata.name)|="\""$PERSISTENT_VOLUME_CLAIM_NAME"\" |
+	yq "(.spec.volumeName)|="\""$PERSISTENT_VOLUME_NAME"\" |
+	kubectl apply -f -
+else
+	# Dynamic provisioning: the CSI driver creates the storage account and the file share when the
+	# claim is bound, so there is no volume to create, only a storage class to select.
+	if [[ "$FILE_SHARE_PROTOCOL" == 'nfs' ]]; then
+		# None of the built-in azurefile* classes provisions an NFS share
+		cat storageclass-nfs.yml |
+		yq "(.metadata.name)|="\""$NFS_STORAGE_CLASS_NAME"\" |
+		kubectl apply -f -
+
+		STORAGE_CLASS_NAME="$NFS_STORAGE_CLASS_NAME"
+	else
+		STORAGE_CLASS_NAME="$SMB_STORAGE_CLASS_NAME"
+
+		echo "Checking if the [$STORAGE_CLASS_NAME] storage class exists in the cluster..."
+		kubectl get storageclass "$STORAGE_CLASS_NAME" &>/dev/null
+
+		if [[ $? != 0 ]]; then
+			echo "No [$STORAGE_CLASS_NAME] storage class exists in the cluster."
+			echo "It is installed with the Azure Files CSI driver: check that the driver is enabled with"
+			echo "  az aks show --name $AKS_CLUSTER_NAME --resource-group $RESOURCE_GROUP_NAME --query storageProfile.fileCsiDriver"
+			exit 1
+		fi
+	fi
+
+	# Drop the static binding and let the storage class provision the volume
+	cat persistentvolumeclaim.yml |
+	yq "(.metadata.namespace)|="\""$NAMESPACE"\" |
+	yq "(.metadata.name)|="\""$PERSISTENT_VOLUME_CLAIM_NAME"\" |
+	yq "del(.spec.volumeName)" |
+	yq "(.spec.storageClassName)|="\""$STORAGE_CLASS_NAME"\" |
+	kubectl apply -f -
+fi
+
+# Create deployment
+cat deployment.yml |
+yq "(.metadata.namespace)|="\""$NAMESPACE"\" |
+yq "(.metadata.name)|="\""$DEPLOYMENT_NAME"\" |
+yq "(.spec.template.spec.volumes[0].persistentVolumeClaim.claimName)|="\""$PERSISTENT_VOLUME_CLAIM_NAME"\" |
+yq "(.spec.template.spec.volumes[1].configMap.name)|="\""$SEED_CONFIGMAP_NAME"\" |
+yq "(.spec.template.spec.initContainers[0].image)|="\""$FULL_IMAGE"\" |
+yq "(.spec.template.spec.initContainers[0].imagePullPolicy)|="\""$IMAGE_PULL_POLICY"\" |
+yq "(.spec.template.spec.initContainers[0].env[0].value)|="\""$FILE_SHARE_PROTOCOL"\" |
+yq "(.spec.template.spec.initContainers[0].env[1].valueFrom.configMapKeyRef.name)|="\""$CONFIGMAP_NAME"\" |
+yq "(.spec.template.spec.initContainers[0].volumeMounts[0].mountPath)|="\""$ACTIVITIES_DIR"\" |
+yq "(.spec.template.spec.containers[0].image)|="\""$FULL_IMAGE"\" |
+yq "(.spec.template.spec.containers[0].imagePullPolicy)|="\""$IMAGE_PULL_POLICY"\" |
+yq "(.spec.template.spec.containers[0].ports[0].containerPort)|=$PORT" |
+yq "(.spec.template.spec.containers[0].env[0].valueFrom.configMapKeyRef.name)|="\""$CONFIGMAP_NAME"\" |
+yq "(.spec.template.spec.containers[0].env[1].valueFrom.secretKeyRef.name)|="\""$SECRET_NAME"\" |
+yq "(.spec.template.spec.containers[0].volumeMounts[0].mountPath)|="\""$ACTIVITIES_DIR"\" |
+kubectl apply -f -
+
+# Create service
+cat service.yml |
+yq "(.metadata.namespace)|="\""$NAMESPACE"\" |
+yq "(.metadata.name)|="\""$SERVICE_NAME"\" |
+kubectl apply -f -
+
+# Wait for the rollout, so an unattended run of the scripts fails here instead of appearing to succeed
+# while the pods are unable to mount the file share.
+echo "Waiting for the [$DEPLOYMENT_NAME] deployment to roll out..."
+kubectl rollout status "deployment/$DEPLOYMENT_NAME" --namespace "$NAMESPACE" --timeout=600s
+
+if [[ $? == 0 ]]; then
+	echo "The app is running. Browse to it with:"
+	echo "  kubectl port-forward service/$SERVICE_NAME 8080:80 --namespace $NAMESPACE"
+else
+	echo "The [$DEPLOYMENT_NAME] deployment did not roll out. Inspect the pods with:"
+	echo "  kubectl get pods --namespace $NAMESPACE"
+	echo "  kubectl describe pod --selector app=$DEPLOYMENT_NAME --namespace $NAMESPACE"
+	exit 1
+fi
diff --git a/samples/web-app-file-storage/dotnet/scripts/Dockerfile b/samples/web-app-file-storage/dotnet/scripts/Dockerfile
new file mode 100644
index 0000000..98f0977
--- /dev/null
+++ b/samples/web-app-file-storage/dotnet/scripts/Dockerfile
@@ -0,0 +1,41 @@
+# Build stage: restore and publish the ASP.NET Core app with the .NET SDK image.
+FROM mcr.microsoft.com/dotnet/sdk:10.0 AS build
+
+WORKDIR /src
+
+# Restore first so the package cache layer is reused when only sources change.
+COPY VacationPlanner.csproj ./
+RUN dotnet restore
+
+COPY . ./
+RUN dotnet publish -c Release -o /app/publish --no-restore
+
+# Runtime stage: the ASP.NET Core runtime image only, no SDK.
+FROM mcr.microsoft.com/dotnet/aspnet:10.0
+
+# Port Kestrel listens on; kept as a build argument (and a runtime variable) as in the Python image.
+ARG PORT=8080
+
+# The app runs as a non-root user whose uid/gid are pinned to a known value: the app writes to an Azure file
+# share, and the identity that must be able to write to it appears in the mount options of the SMB volume
+# (uid=1000,gid=1000) and in the ownership of the NFS share. The runtime image ships a non-root `app` user
+# (uid 1654) and, being Ubuntu-based, a default `ubuntu` account that already owns uid/gid 1000: the latter is
+# dropped and `app` is re-numbered instead of adding a third account.
+ARG APP_USER_UID=1000
+ARG APP_USER_GID=1000
+
+ENV PORT=${PORT}
+
+WORKDIR /app
+COPY --from=build /app/publish ./
+
+RUN userdel --remove ubuntu \
+    && groupmod --gid ${APP_USER_GID} app \
+    && usermod --uid ${APP_USER_UID} --gid ${APP_USER_GID} app \
+    && chown -R app:app /app /home/app
+USER app
+ENV HOME=/home/app
+
+EXPOSE ${PORT}
+
+ENTRYPOINT ["dotnet", "VacationPlanner.dll"]
diff --git a/samples/web-app-file-storage/dotnet/scripts/configmap.yml b/samples/web-app-file-storage/dotnet/scripts/configmap.yml
new file mode 100644
index 0000000..1b178c4
--- /dev/null
+++ b/samples/web-app-file-storage/dotnet/scripts/configmap.yml
@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: vacation-planner-file-config
+  namespace: vacation-planner-file
+  labels:
+    app: vacation-planner-file
+data:
+  # Directory where the Azure file share is mounted in the pods. It is the only thing the app knows
+  # about its storage: the app reads and writes plain files and uses no Azure SDK at all.
+  ACTIVITIES_DIR: "/data"
diff --git a/samples/web-app-file-storage/dotnet/scripts/deployment.yml b/samples/web-app-file-storage/dotnet/scripts/deployment.yml
new file mode 100644
index 0000000..1bfb957
--- /dev/null
+++ b/samples/web-app-file-storage/dotnet/scripts/deployment.yml
@@ -0,0 +1,165 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: vacation-planner-file
+  namespace: vacation-planner-file
+  labels:
+    app: vacation-planner-file
+spec:
+  replicas: 3
+  selector:
+    matchLabels:
+      app: vacation-planner-file
+  strategy:
+    rollingUpdate:
+      maxSurge: 1
+      maxUnavailable: 0
+    type: RollingUpdate
+  minReadySeconds: 5
+  template:
+    metadata:
+      labels:
+        app: vacation-planner-file
+    spec:
+      nodeSelector:
+        kubernetes.io/os: linux
+      volumes:
+        # The Azure file share, mounted by the Azure Files CSI driver. All three replicas mount the
+        # same share, which is what makes the activities they serve identical.
+        - name: activities
+          persistentVolumeClaim:
+            claimName: vacation-planner-file-pvc
+        # The sample activities the init container copies into the share when they are missing
+        - name: seed
+          configMap:
+            name: vacation-planner-file-seed
+      # Prepares the file share before the app starts, and runs as root, which is why the app
+      # container declares its own securityContext instead of the pod declaring it for both.
+      #
+      # On NFS it takes ownership of the mount point: an NFS share carries real POSIX ownership,
+      # arrives owned by root, and ignores the uid and gid mount options that solve this for SMB.
+      # securityContext.fsGroup is not an alternative: the file.csi.azure.com CSIDriver object
+      # declares fsGroupPolicy: ReadWriteOnceWithFSType, so the kubelet applies fsGroup only to a
+      # ReadWriteOnce volume with a file system type, and this volume is ReadWriteMany. Setting
+      # fsGroup here would silently do nothing. The chown is not recursive: files created by the app
+      # already belong to it, and a recursive chown over NFS would make every pod start slower as the
+      # share fills up.
+      #
+      # It then seeds the share with the sample activities, skipping the files that are already there,
+      # so the three replicas starting at the same time cannot conflict.
+      initContainers:
+        - name: init-file-share
+          image: <your-registry>.azurecr.io/vacation-planner-file-dotnet:v1
+          imagePullPolicy: Always
+          securityContext:
+            runAsUser: 0
+            runAsGroup: 0
+          env:
+            # Set to smb or nfs by 05-deploy-app.sh. The chown must not run on an SMB mount, where it
+            # fails with EPERM because the CIFS client synthesizes ownership from the mount options.
+            - name: FILE_SHARE_PROTOCOL
+              value: smb
+            - name: ACTIVITIES_DIR
+              valueFrom:
+                configMapKeyRef:
+                  name: vacation-planner-file-config
+                  key: ACTIVITIES_DIR
+          command:
+            - /bin/sh
+            - -c
+            - |
+              set -e
+
+              # A no-op when ACTIVITIES_DIR is the mount point itself, which is the default. It
+              # matters when it points at a subdirectory of the share: that directory has to exist
+              # before it can be chowned or seeded, and the app is not able to create it as uid 1000
+              # on an NFS share owned by root.
+              mkdir -p "$ACTIVITIES_DIR"
+
+              if [ "$FILE_SHARE_PROTOCOL" = "nfs" ]; then
+                echo "Taking ownership of $ACTIVITIES_DIR as uid 1000..."
+                chown 1000:1000 "$ACTIVITIES_DIR"
+                chmod 0755 "$ACTIVITIES_DIR"
+              fi
+
+              for file in /seed/*-activity.txt; do
+                [ -e "$file" ] || continue
+
+                name=$(basename "$file")
+
+                if [ -e "$ACTIVITIES_DIR/$name" ]; then
+                  echo "Activity file [$name] already exists in the file share, skipping it..."
+                  continue
+                fi
+
+                echo "Seeding the file share with the activity file [$name]..."
+                cp "$file" "$ACTIVITIES_DIR/$name"
+
+                if [ "$FILE_SHARE_PROTOCOL" = "nfs" ]; then
+                  chown 1000:1000 "$ACTIVITIES_DIR/$name"
+                fi
+              done
+
+              echo "The file share is ready."
+          volumeMounts:
+            - name: activities
+              mountPath: /data
+            - name: seed
+              mountPath: /seed
+              readOnly: true
+          resources:
+            requests:
+              cpu: "100m"
+              memory: "128Mi"
+            limits:
+              cpu: "500m"
+              memory: "256Mi"
+      containers:
+        - name: vacation-planner-file
+          image: <your-registry>.azurecr.io/vacation-planner-file-dotnet:v1
+          imagePullPolicy: Always
+          # The image already runs as this user, declared here as well because it is the identity the
+          # mount options of the SMB volume and the ownership of the NFS share are aligned with.
+          securityContext:
+            runAsUser: 1000
+            runAsGroup: 1000
+          ports:
+            - name: http
+              containerPort: 8080
+          env:
+            - name: ACTIVITIES_DIR
+              valueFrom:
+                configMapKeyRef:
+                  name: vacation-planner-file-config
+                  key: ACTIVITIES_DIR
+            - name: SECRET_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: vacation-planner-file-secrets
+                  key: SECRET_KEY
+          volumeMounts:
+            - name: activities
+              mountPath: /data
+          resources:
+            requests:
+              cpu: "100m"
+              memory: "128Mi"
+            limits:
+              cpu: "500m"
+              memory: "256Mi"
+          livenessProbe:
+            httpGet:
+              path: /health
+              port: http
+            initialDelaySeconds: 15
+            periodSeconds: 30
+            timeoutSeconds: 5
+            failureThreshold: 3
+          readinessProbe:
+            httpGet:
+              path: /health
+              port: http
+            initialDelaySeconds: 5
+            periodSeconds: 10
+            timeoutSeconds: 3
+            failureThreshold: 3
diff --git a/samples/web-app-file-storage/dotnet/scripts/namespace.yml b/samples/web-app-file-storage/dotnet/scripts/namespace.yml
new file mode 100644
index 0000000..d19adf9
--- /dev/null
+++ b/samples/web-app-file-storage/dotnet/scripts/namespace.yml
@@ -0,0 +1,4 @@
+kind: Namespace
+apiVersion: v1
+metadata:
+  name: vacation-planner-file
diff --git a/samples/web-app-file-storage/dotnet/scripts/persistentvolume-nfs.yml b/samples/web-app-file-storage/dotnet/scripts/persistentvolume-nfs.yml
new file mode 100644
index 0000000..2c20104
--- /dev/null
+++ b/samples/web-app-file-storage/dotnet/scripts/persistentvolume-nfs.yml
@@ -0,0 +1,42 @@
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: vacation-planner-file-pv
+  annotations:
+    pv.kubernetes.io/provisioned-by: file.csi.azure.com
+  labels:
+    app: vacation-planner-file
+spec:
+  capacity:
+    storage: 100Gi
+  accessModes:
+    # Every replica of the deployment mounts the same share at the same time
+    - ReadWriteMany
+  # Retain, so deleting the claim leaves the file share and its activities untouched
+  persistentVolumeReclaimPolicy: Retain
+  # No storage class on purpose: the claim in persistentvolumeclaim.yml sets storageClassName to the
+  # empty string and binds to this volume by name, so no provisioner ever looks at it.
+  mountOptions:
+    # Mount options recommended by the Azure Files CSI driver documentation for NFS
+    # (https://learn.microsoft.com/en-us/azure/aks/azure-csi-files-storage-provision): four
+    # connections to the share, no reserved source port, and a 30 second attribute cache.
+    #
+    # Unlike the SMB volume, there are no uid, gid or mode options here: an NFS share carries real
+    # POSIX ownership and ignores them. The init container of the deployment chowns the mount point
+    # to uid 1000 instead.
+    - nconnect=4
+    - noresvport
+    - actimeo=30
+  csi:
+    driver: file.csi.azure.com
+    # Must be unique per share in the cluster: {resource group}#{storage account}#{file share}
+    volumeHandle: "resource-group#storage-account#file-share"
+    volumeAttributes:
+      # Without this the driver mounts the share over SMB and the mount fails, because the share of a
+      # premium FileStorage account created with --enabled-protocols NFS speaks NFSv4.1 only.
+      protocol: nfs
+      resourceGroup: resource-group
+      storageAccount: storage-account
+      shareName: file-share
+    # No nodeStageSecretRef: an NFS share has no key-based authentication. Access is granted by the
+    # network rules of the storage account, which 01-deploy-resources.sh restricts to the node subnets.
diff --git a/samples/web-app-file-storage/dotnet/scripts/persistentvolume-smb.yml b/samples/web-app-file-storage/dotnet/scripts/persistentvolume-smb.yml
new file mode 100644
index 0000000..e8ae7f6
--- /dev/null
+++ b/samples/web-app-file-storage/dotnet/scripts/persistentvolume-smb.yml
@@ -0,0 +1,45 @@
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: vacation-planner-file-pv
+  annotations:
+    pv.kubernetes.io/provisioned-by: file.csi.azure.com
+  labels:
+    app: vacation-planner-file
+spec:
+  capacity:
+    storage: 100Gi
+  accessModes:
+    # Every replica of the deployment mounts the same share at the same time
+    - ReadWriteMany
+  # Retain, so deleting the claim leaves the file share and its activities untouched
+  persistentVolumeReclaimPolicy: Retain
+  # No storage class on purpose: the claim in persistentvolumeclaim.yml sets storageClassName to the
+  # empty string and binds to this volume by name, so no provisioner ever looks at it.
+  mountOptions:
+    # Permissions recommended by the Azure Files CSI driver documentation for a static SMB volume
+    # (https://learn.microsoft.com/en-us/azure/aks/azure-csi-files-storage-provision). The app runs as
+    # uid 1000, so the volume is mounted with that identity: the CIFS client synthesizes the ownership
+    # of every file and directory from these options, which is why the SMB variant needs no chown.
+    - dir_mode=0755
+    - file_mode=0755
+    - uid=1000
+    - gid=1000
+    - mfsymlinks
+    - cache=strict
+    - nosharesock
+    # Reduce the latency of the metadata-heavy directory listing the app does on every page load.
+    # It also caps how long a file created by one replica can stay invisible to the others.
+    - actimeo=30
+  csi:
+    driver: file.csi.azure.com
+    # Must be unique per share in the cluster: {resource group}#{storage account}#{file share}
+    volumeHandle: "resource-group#storage-account#file-share"
+    volumeAttributes:
+      resourceGroup: resource-group
+      storageAccount: storage-account
+      shareName: file-share
+    # The driver mounts an SMB share with the storage account key, which it reads from this secret
+    nodeStageSecretRef:
+      name: vacation-planner-file-storage
+      namespace: vacation-planner-file
diff --git a/samples/web-app-file-storage/dotnet/scripts/persistentvolumeclaim.yml b/samples/web-app-file-storage/dotnet/scripts/persistentvolumeclaim.yml
new file mode 100644
index 0000000..ce470d8
--- /dev/null
+++ b/samples/web-app-file-storage/dotnet/scripts/persistentvolumeclaim.yml
@@ -0,0 +1,24 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: vacation-planner-file-pvc
+  namespace: vacation-planner-file
+  labels:
+    app: vacation-planner-file
+spec:
+  # Committed in the shape used by static provisioning: the claim is bound by name to the volume
+  # created from persistentvolume-smb.yml or persistentvolume-nfs.yml, and the empty storage class
+  # keeps any provisioner (including the cluster's default storage class) from stepping in.
+  #
+  # For dynamic provisioning, 05-deploy-app.sh removes volumeName and sets storageClassName to the
+  # class that provisions the share: the built-in azurefile-csi for SMB, or the class created from
+  # storageclass-nfs.yml for NFS.
+  accessModes:
+    - ReadWriteMany
+  storageClassName: ""
+  volumeName: vacation-planner-file-pv
+  resources:
+    requests:
+      # 100 GiB is the minimum size of a premium file share, which the NFS variants need, so all four
+      # combinations of the sample can share this single claim.
+      storage: 100Gi
diff --git a/samples/web-app-file-storage/dotnet/scripts/secret.yml b/samples/web-app-file-storage/dotnet/scripts/secret.yml
new file mode 100644
index 0000000..6afdf57
--- /dev/null
+++ b/samples/web-app-file-storage/dotnet/scripts/secret.yml
@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: vacation-planner-file-secrets
+  namespace: vacation-planner-file
+  labels:
+    app: vacation-planner-file
+type: Opaque
+data:
+  SECRET_KEY: ""
diff --git a/samples/web-app-file-storage/dotnet/scripts/seed-configmap.yml b/samples/web-app-file-storage/dotnet/scripts/seed-configmap.yml
new file mode 100644
index 0000000..17c6b75
--- /dev/null
+++ b/samples/web-app-file-storage/dotnet/scripts/seed-configmap.yml
@@ -0,0 +1,24 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: vacation-planner-file-seed
+  namespace: vacation-planner-file
+  labels:
+    app: vacation-planner-file
+data:
+  # Sample activities the init container of the deployment copies into the Azure file share the first
+  # time the app is deployed, so the share is never empty on the first page load.
+  #
+  # Each key is the name of an activity file, in the same YYYY-MM-DD-HH-MM-SS-activity.txt format the
+  # app itself uses, and the value is the content of the file. The names are fixed rather than
+  # generated at runtime, which is what makes the seeding safe when the three replicas start at once:
+  # every pod would copy the same name with the same content, and the init container skips a file
+  # that is already there.
+  #
+  # This is the only seeding mechanism, and it covers all four combinations of the sample: it runs
+  # inside the cluster on the mounted share, so it works for a share the CSI driver has just created
+  # (whose name is not known to the host) and for an NFS share (which is not reachable over the file
+  # data plane REST API on Azure).
+  2026-01-05-09-00-00-activity.txt: "Snorkelling at Coral Bay"
+  2026-01-05-09-05-00-activity.txt: "Sunset hike to the Cape lighthouse"
+  2026-01-05-09-10-00-activity.txt: "Cooking class: pasta from scratch"
diff --git a/samples/web-app-file-storage/dotnet/scripts/service.yml b/samples/web-app-file-storage/dotnet/scripts/service.yml
new file mode 100644
index 0000000..a1fbe7a
--- /dev/null
+++ b/samples/web-app-file-storage/dotnet/scripts/service.yml
@@ -0,0 +1,16 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: vacation-planner-file
+  namespace: vacation-planner-file
+  labels:
+    app: vacation-planner-file
+spec:
+  type: ClusterIP
+  selector:
+    app: vacation-planner-file
+  ports:
+    - name: http
+      protocol: TCP
+      port: 80
+      targetPort: http
diff --git a/samples/web-app-file-storage/dotnet/scripts/storage-secret.yml b/samples/web-app-file-storage/dotnet/scripts/storage-secret.yml
new file mode 100644
index 0000000..35ff3b5
--- /dev/null
+++ b/samples/web-app-file-storage/dotnet/scripts/storage-secret.yml
@@ -0,0 +1,15 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: vacation-planner-file-storage
+  namespace: vacation-planner-file
+  labels:
+    app: vacation-planner-file
+type: Opaque
+data:
+  # Credentials the Azure Files CSI driver uses to mount the SMB share, referenced by the
+  # nodeStageSecretRef of persistentvolume-smb.yml. The two key names are fixed by the driver.
+  # An SMB share is mounted with the storage account key (NTLMv2), so a static SMB volume needs this
+  # secret; an NFS share is not authenticated by a key at all and needs no secret.
+  azurestorageaccountname: ""
+  azurestorageaccountkey: ""
diff --git a/samples/web-app-file-storage/dotnet/scripts/storageclass-nfs.yml b/samples/web-app-file-storage/dotnet/scripts/storageclass-nfs.yml
new file mode 100644
index 0000000..ff0c940
--- /dev/null
+++ b/samples/web-app-file-storage/dotnet/scripts/storageclass-nfs.yml
@@ -0,0 +1,26 @@
+apiVersion: storage.k8s.io/v1
+kind: StorageClass
+metadata:
+  name: vacation-planner-file-nfs
+  labels:
+    app: vacation-planner-file
+# The Azure Files CSI driver installed on every AKS cluster
+provisioner: file.csi.azure.com
+parameters:
+  # None of the four built-in azurefile* storage classes sets this, which is the only reason this
+  # sample ships a storage class of its own: without it the driver provisions an SMB share.
+  protocol: nfs
+  # NFS Azure file shares are only available on SSD (premium) file shares
+  # (https://learn.microsoft.com/en-us/azure/storage/files/files-nfs-protocol). Premium accounts also
+  # accept PremiumV2_LRS, the provisioned v2 billing model.
+  skuName: Premium_LRS
+mountOptions:
+  # Same options as the static NFS volume in persistentvolume-nfs.yml. Mount options belong to the
+  # storage class when the volume is provisioned dynamically, and to the volume when it is static.
+  - nconnect=4
+  - noresvport
+  - actimeo=30
+# Delete, so removing the claim also removes the file share and the account the driver created for it
+reclaimPolicy: Delete
+volumeBindingMode: Immediate
+allowVolumeExpansion: true
diff --git a/samples/web-app-file-storage/dotnet/src/.dockerignore b/samples/web-app-file-storage/dotnet/src/.dockerignore
new file mode 100644
index 0000000..cd42ee3
--- /dev/null
+++ b/samples/web-app-file-storage/dotnet/src/.dockerignore
@@ -0,0 +1,2 @@
+bin/
+obj/
diff --git a/samples/web-app-file-storage/dotnet/src/Models/Activity.cs b/samples/web-app-file-storage/dotnet/src/Models/Activity.cs
new file mode 100644
index 0000000..c39b073
--- /dev/null
+++ b/samples/web-app-file-storage/dotnet/src/Models/Activity.cs
@@ -0,0 +1,4 @@
+namespace VacationPlanner.Models;
+
+/// <summary>A planned vacation activity: the store's identifier plus the free-text description.</summary>
+public sealed record Activity(string Id, string Text);
diff --git a/samples/web-app-file-storage/dotnet/src/Pages/Delete.cshtml b/samples/web-app-file-storage/dotnet/src/Pages/Delete.cshtml
new file mode 100644
index 0000000..6023eef
--- /dev/null
+++ b/samples/web-app-file-storage/dotnet/src/Pages/Delete.cshtml
@@ -0,0 +1,2 @@
+@page "/delete"
+@model DeleteModel
diff --git a/samples/web-app-file-storage/dotnet/src/Pages/Delete.cshtml.cs b/samples/web-app-file-storage/dotnet/src/Pages/Delete.cshtml.cs
new file mode 100644
index 0000000..89929bc
--- /dev/null
+++ b/samples/web-app-file-storage/dotnet/src/Pages/Delete.cshtml.cs
@@ -0,0 +1,27 @@
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Mvc.RazorPages;
+using VacationPlanner.Services;
+
+namespace VacationPlanner.Pages;
+
+/// <summary>
+/// Handles <c>POST /delete</c>. The activity is identified by its file name, posted in the <c>activity_id</c> form
+/// field, never by its position in the rendered page: every replica mounts the same share and reloads it on each
+/// GET, so the list can change between rendering a page and submitting a delete from it.
+/// </summary>
+public class DeleteModel(IActivityStore store) : PageModel
+{
+    [BindProperty(Name = "activity_id")]
+    public string? ActivityId { get; set; }
+
+    public IActionResult OnGet() => RedirectToPage("/Index");
+
+    public async Task<IActionResult> OnPostAsync(CancellationToken cancellationToken)
+    {
+        TempData["Flash"] = await store.DeleteAsync(ActivityId?.Trim() ?? "", cancellationToken)
+            ? "Activity deleted successfully."
+            : "Failed to delete the activity from the file share.";
+
+        return RedirectToPage("/Index");
+    }
+}
diff --git a/samples/web-app-file-storage/dotnet/src/Pages/Index.cshtml b/samples/web-app-file-storage/dotnet/src/Pages/Index.cshtml
new file mode 100644
index 0000000..2ad5de1
--- /dev/null
+++ b/samples/web-app-file-storage/dotnet/src/Pages/Index.cshtml
@@ -0,0 +1,268 @@
+@page
+@model IndexModel
+<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8" />
+  <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+  <title>Vacation Planner</title>
+  <link rel="preconnect" href="https://fonts.googleapis.com" />
+  <link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700&display=swap" rel="stylesheet" />
+  <link rel="stylesheet" href="~/style.css" />
+  <link rel="icon" type="image/x-icon" href="~/favicon.ico" />
+  <script>
+    (function () {
+      try {
+        var dark = localStorage.getItem('vp_dark');
+        if (dark === 'true' || (dark === null && window.matchMedia('(prefers-color-scheme: dark)').matches)) {
+          document.documentElement.dataset.theme = 'dark';
+        }
+      } catch (_) {}
+    })();
+  </script>
+</head>
+<body>
+
+<!-- Header -->
+<header>
+  <div class="header-left">
+    <h1>&#127796; Vacation Planner</h1>
+    <p id="count-label">@Model.Activities.Count activit@(Model.Activities.Count != 1 ? "ies" : "y") planned@(string.IsNullOrEmpty(Model.PodName) ? "" : $" · served by {Model.PodName}")</p>
+  </div>
+  <div class="header-right">
+    <button id="btn-dark-mode" aria-label="Toggle dark mode" title="Toggle dark mode">
+      <svg id="icon-dark" width="18" height="18" fill="none" stroke="currentColor" stroke-width="2" viewBox="0 0 24 24">
+        <path d="M21 12.79A9 9 0 1111.21 3a7 7 0 009.79 9.79z"/>
+      </svg>
+      <svg id="icon-light" width="18" height="18" fill="none" stroke="currentColor" stroke-width="2" viewBox="0 0 24 24" style="display:none">
+        <circle cx="12" cy="12" r="5"/>
+        <line x1="12" y1="1" x2="12" y2="3"/><line x1="12" y1="21" x2="12" y2="23"/>
+        <line x1="4.22" y1="4.22" x2="5.64" y2="5.64"/><line x1="18.36" y1="18.36" x2="19.78" y2="19.78"/>
+        <line x1="1" y1="12" x2="3" y2="12"/><line x1="21" y1="12" x2="23" y2="12"/>
+        <line x1="4.22" y1="19.78" x2="5.64" y2="18.36"/><line x1="18.36" y1="5.64" x2="19.78" y2="4.22"/>
+      </svg>
+    </button>
+    <button id="btn-add">
+      <svg width="16" height="16" fill="none" stroke="currentColor" stroke-width="2.5" viewBox="0 0 24 24"><line x1="12" y1="5" x2="12" y2="19"/><line x1="5" y1="12" x2="19" y2="12"/></svg>
+      Add Activity
+    </button>
+  </div>
+</header>
+
+<!-- Activity Table -->
+<div class="content">
+  <table id="activity-table">
+    <thead>
+      <tr>
+        <th>Activity</th>
+        <th class="col-actions" colspan="2">Actions</th>
+      </tr>
+    </thead>
+    <tbody>
+      @foreach (var activity in Model.Activities)
+      {
+      <tr data-id="@activity.Id" data-activity="@activity.Text">
+        <td>@activity.Text</td>
+        <td class="col-btn">
+          <button class="btn-edit" title="Edit activity" aria-label="Edit @activity.Text">
+            <svg width="14" height="14" fill="none" stroke="currentColor" stroke-width="2" viewBox="0 0 24 24">
+              <path d="M11 4H4a2 2 0 00-2 2v14a2 2 0 002 2h14a2 2 0 002-2v-7"/>
+              <path d="M18.5 2.5a2.121 2.121 0 013 3L12 15l-4 1 1-4 9.5-9.5z"/>
+            </svg>
+            Edit
+          </button>
+        </td>
+        <td class="col-btn">
+          <form method="post" asp-page="/Delete" class="delete-form">
+            <!-- The activity is identified by its file name, which is stable across replicas,
+                 rather than by its row position, which is not -->
+            <input type="hidden" name="activity_id" value="@activity.Id" />
+            <button type="button" class="btn-delete" title="Delete activity" aria-label="Delete @activity.Text">
+              <svg width="14" height="14" fill="none" stroke="currentColor" stroke-width="2" viewBox="0 0 24 24">
+                <polyline points="3 6 5 6 21 6"/><path d="M19 6l-1 14a2 2 0 01-2 2H8a2 2 0 01-2-2L5 6"/>
+                <path d="M10 11v6"/><path d="M14 11v6"/><path d="M9 6V4h6v2"/>
+              </svg>
+              Delete
+            </button>
+          </form>
+        </td>
+      </tr>
+      }
+      @if (Model.Activities.Count == 0)
+      {
+      <tr id="empty-row">
+        <td colspan="3" class="empty-cell">No vacation plans yet — add your first activity!</td>
+      </tr>
+      }
+    </tbody>
+  </table>
+</div>
+
+<!-- Add / Edit Activity Modal -->
+<div id="overlay">
+  <div class="modal" role="dialog" aria-modal="true" aria-labelledby="modal-title">
+    <div class="modal-header">
+      <h2 id="modal-title">&#127796; Add Activity</h2>
+      <button id="btn-close-modal" aria-label="Close">&times;</button>
+    </div>
+    <form id="activity-form" method="post" asp-page="/Index" novalidate>
+      <input type="hidden" id="f-row-id" name="row_id" value="" />
+      <div class="field">
+        <label for="f-activity">Activity <span style="color:#ef4444">*</span></label>
+        <input id="f-activity" name="activity" type="text" placeholder="e.g. Snorkelling at Coral Bay" required />
+      </div>
+    </form>
+    <div class="modal-actions">
+      <button class="btn-secondary" id="btn-cancel">Cancel</button>
+      <button class="btn-primary" id="btn-save">Save Activity</button>
+    </div>
+  </div>
+</div>
+
+<!-- Delete Confirmation Modal -->
+<div id="delete-overlay">
+  <div class="modal" role="dialog" aria-modal="true" aria-labelledby="delete-modal-title">
+    <div class="modal-header">
+      <h2 id="delete-modal-title">&#127796; Delete Activity</h2>
+      <button id="btn-close-delete-modal" aria-label="Close">&times;</button>
+    </div>
+    <div class="modal-body">
+      <p id="delete-confirm-msg">Are you sure you want to delete this activity?</p>
+    </div>
+    <div class="modal-actions">
+      <button class="btn-secondary" id="btn-cancel-delete">Cancel</button>
+      <button class="btn-primary" id="btn-confirm-delete">Delete</button>
+    </div>
+  </div>
+</div>
+
+<!-- Toast -->
+<div id="toast"></div>
+
+<script>
+  // ── Dark mode ────────────────────────────────────────────
+  function applyDark(dark) {
+    document.documentElement.dataset.theme = dark ? 'dark' : '';
+    document.getElementById('icon-dark').style.display  = dark ? 'none' : '';
+    document.getElementById('icon-light').style.display = dark ? ''     : 'none';
+  }
+  (function () {
+    var dark = localStorage.getItem('vp_dark');
+    var isDark = dark === 'true' || (dark === null && window.matchMedia('(prefers-color-scheme: dark)').matches);
+    applyDark(isDark);
+  })();
+  document.getElementById('btn-dark-mode').addEventListener('click', function () {
+    var isDark = document.documentElement.dataset.theme === 'dark';
+    applyDark(!isDark);
+    localStorage.setItem('vp_dark', String(!isDark));
+  });
+
+  // ── Toast ────────────────────────────────────────────────
+  var flashMessages = @Json.Serialize(Model.Flashes);
+  var toastTimer;
+  function showToast(msg) {
+    var el = document.getElementById('toast');
+    el.textContent = msg;
+    el.classList.add('show');
+    clearTimeout(toastTimer);
+    toastTimer = setTimeout(function () { el.classList.remove('show'); }, 2400);
+  }
+  if (flashMessages.length) showToast(flashMessages[0]);
+
+  // ── Activity Modal ───────────────────────────────────────
+  var overlay = document.getElementById('overlay');
+
+  function openActivityModal(data) {
+    var titleEl = document.getElementById('modal-title');
+    var saveEl  = document.getElementById('btn-save');
+    var rowId   = document.getElementById('f-row-id');
+    var input   = document.getElementById('f-activity');
+
+    if (data) {
+      titleEl.textContent = '🌴 Edit Activity';
+      saveEl.textContent  = 'Save Changes';
+      rowId.value         = data.id;
+      input.value         = data.activity;
+    } else {
+      titleEl.textContent = '🌴 Add Activity';
+      saveEl.textContent  = 'Save Activity';
+      rowId.value         = '';
+      input.value         = '';
+    }
+    overlay.classList.add('open');
+    input.focus();
+    var len = input.value.length;
+    input.setSelectionRange(len, len);
+  }
+
+  function closeActivityModal() {
+    overlay.classList.remove('open');
+    document.getElementById('activity-form').reset();
+    document.getElementById('f-row-id').value = '';
+    document.getElementById('modal-title').textContent = '🌴 Add Activity';
+    document.getElementById('btn-save').textContent    = 'Save Activity';
+  }
+
+  document.getElementById('btn-add').addEventListener('click', function () { openActivityModal(null); });
+  document.getElementById('btn-close-modal').addEventListener('click', closeActivityModal);
+  document.getElementById('btn-cancel').addEventListener('click', closeActivityModal);
+  overlay.addEventListener('click', function (e) { if (e.target === overlay) closeActivityModal(); });
+
+  document.getElementById('btn-save').addEventListener('click', function () {
+    var val = document.getElementById('f-activity').value.trim();
+    if (!val) { showToast('Activity cannot be empty.'); return; }
+    document.getElementById('activity-form').submit();
+  });
+
+  document.getElementById('f-activity').addEventListener('keydown', function (e) {
+    if (e.key === 'Enter') { e.preventDefault(); document.getElementById('btn-save').click(); }
+  });
+
+  // Edit buttons on rows
+  document.querySelectorAll('.btn-edit').forEach(function (btn) {
+    btn.addEventListener('click', function () {
+      var row = btn.closest('tr');
+      openActivityModal({ id: row.dataset.id, activity: row.dataset.activity });
+    });
+  });
+
+  // ── Delete confirmation modal ────────────────────────────
+  var deleteOverlay = document.getElementById('delete-overlay');
+  var pendingDeleteForm = null;
+
+  function openDeleteModal(form, activityName) {
+    pendingDeleteForm = form;
+    var msg = document.getElementById('delete-confirm-msg');
+    msg.textContent = 'Are you sure you want to delete "' + activityName + '"?';
+    deleteOverlay.classList.add('open');
+    document.getElementById('btn-confirm-delete').focus();
+  }
+
+  function closeDeleteModal() {
+    deleteOverlay.classList.remove('open');
+    pendingDeleteForm = null;
+  }
+
+  document.querySelectorAll('.btn-delete').forEach(function (btn) {
+    btn.addEventListener('click', function () {
+      var row = btn.closest('tr');
+      var form = btn.closest('form');
+      openDeleteModal(form, row.dataset.activity);
+    });
+  });
+
+  document.getElementById('btn-confirm-delete').addEventListener('click', function () {
+    if (pendingDeleteForm) pendingDeleteForm.submit();
+  });
+
+  document.getElementById('btn-cancel-delete').addEventListener('click', closeDeleteModal);
+  document.getElementById('btn-close-delete-modal').addEventListener('click', closeDeleteModal);
+  deleteOverlay.addEventListener('click', function (e) { if (e.target === deleteOverlay) closeDeleteModal(); });
+
+  // ── Escape closes any open modal ─────────────────────────
+  document.addEventListener('keydown', function (e) {
+    if (e.key === 'Escape') { closeActivityModal(); closeDeleteModal(); }
+  });
+</script>
+</body>
+</html>
diff --git a/samples/web-app-file-storage/dotnet/src/Pages/Index.cshtml.cs b/samples/web-app-file-storage/dotnet/src/Pages/Index.cshtml.cs
new file mode 100644
index 0000000..78018b1
--- /dev/null
+++ b/samples/web-app-file-storage/dotnet/src/Pages/Index.cshtml.cs
@@ -0,0 +1,51 @@
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Mvc.RazorPages;
+using VacationPlanner.Models;
+using VacationPlanner.Services;
+
+namespace VacationPlanner.Pages;
+
+public class IndexModel(IActivityStore store, FileStorageOptions options) : PageModel
+{
+    public IReadOnlyList<Activity> Activities { get; private set; } = [];
+
+    /// <summary>Name of the pod serving the request, shown next to the activity count.</summary>
+    public string PodName => options.PodName;
+
+    /// <summary>Flash messages set by the previous request (the equivalent of Flask's <c>flash()</c>).</summary>
+    public IReadOnlyList<string> Flashes => TempData["Flash"] is string message ? [message] : [];
+
+    [BindProperty(Name = "activity")]
+    public string? Activity { get; set; }
+
+    [BindProperty(Name = "row_id")]
+    public string? RowId { get; set; }
+
+    public async Task OnGetAsync(CancellationToken cancellationToken)
+    {
+        Activities = await store.ListAsync(cancellationToken);
+    }
+
+    public async Task<IActionResult> OnPostAsync(CancellationToken cancellationToken)
+    {
+        var text = Activity?.Trim();
+        var id = RowId?.Trim();
+        if (!string.IsNullOrEmpty(text))
+        {
+            if (!string.IsNullOrEmpty(id))
+            {
+                TempData["Flash"] = await store.UpdateAsync(id, text, cancellationToken)
+                    ? "Activity updated successfully."
+                    : "Failed to update the activity on the file share.";
+            }
+            else
+            {
+                TempData["Flash"] = await store.AddAsync(text, cancellationToken)
+                    ? "Activity added successfully."
+                    : "Failed to add the activity to the file share.";
+            }
+        }
+
+        return RedirectToPage();
+    }
+}
diff --git a/samples/web-app-file-storage/dotnet/src/Pages/_ViewImports.cshtml b/samples/web-app-file-storage/dotnet/src/Pages/_ViewImports.cshtml
new file mode 100644
index 0000000..ec62511
--- /dev/null
+++ b/samples/web-app-file-storage/dotnet/src/Pages/_ViewImports.cshtml
@@ -0,0 +1,4 @@
+@using VacationPlanner
+@using VacationPlanner.Models
+@namespace VacationPlanner.Pages
+@addTagHelper *, Microsoft.AspNetCore.Mvc.TagHelpers
diff --git a/samples/web-app-file-storage/dotnet/src/Program.cs b/samples/web-app-file-storage/dotnet/src/Program.cs
new file mode 100644
index 0000000..f84b421
--- /dev/null
+++ b/samples/web-app-file-storage/dotnet/src/Program.cs
@@ -0,0 +1,49 @@
+using Microsoft.AspNetCore.DataProtection;
+using Microsoft.AspNetCore.DataProtection.KeyManagement;
+using VacationPlanner.Services;
+
+var builder = WebApplication.CreateBuilder(args);
+
+// Listen on PORT (8080 by default), the way the Python image binds gunicorn to 0.0.0.0:${PORT}. HTTP_PORTS is the
+// same setting the aspnet base image feeds through ASPNETCORE_HTTP_PORTS, so no URL override is involved.
+if (Environment.GetEnvironmentVariable("PORT") is { Length: > 0 } port)
+{
+    builder.WebHost.UseSetting(WebHostDefaults.HttpPortsKey, port);
+}
+
+// Read and validate the configuration up front so a misconfigured deployment fails at startup.
+var storageOptions = FileStorageOptions.FromEnvironment();
+
+// SECRET_KEY is the Kubernetes Secret the Python sample signs its session cookie with. Deriving the Data Protection
+// key ring from it lets all replicas validate each other's antiforgery tokens and flash cookies; without it (a local
+// docker run) each process keeps its own keys.
+var secretKey = Environment.GetEnvironmentVariable("SECRET_KEY");
+if (!string.IsNullOrEmpty(secretKey))
+{
+    builder.Services.AddDataProtection().DisableAutomaticKeyGeneration();
+    builder.Services.Configure<KeyManagementOptions>(options => options.XmlRepository = new SecretKeyXmlRepository(secretKey));
+}
+
+builder.Services.AddRazorPages();
+builder.Services.AddSingleton(storageOptions);
+builder.Services.AddSingleton<IActivityStore>(sp =>
+    new FileActivityStore(storageOptions, sp.GetRequiredService<ILogger<FileActivityStore>>()));
+builder.Services.AddHostedService(sp =>
+    new StoreInitializer(sp.GetRequiredService<IActivityStore>(), sp.GetRequiredService<ILogger<StoreInitializer>>()));
+
+var app = builder.Build();
+
+if (string.IsNullOrEmpty(secretKey))
+{
+    app.Logger.LogWarning("SECRET_KEY is not set: antiforgery tokens and flash messages are only valid on this replica.");
+}
+
+app.UseStaticFiles();
+app.MapRazorPages();
+
+app.MapGet("/health", async (IActivityStore store, CancellationToken cancellationToken) =>
+    await store.IsHealthyAsync(cancellationToken)
+        ? Results.Json(new { status = "ok" })
+        : Results.Json(new { status = "unavailable" }, statusCode: StatusCodes.Status503ServiceUnavailable));
+
+app.Run();
diff --git a/samples/web-app-file-storage/dotnet/src/Services/FileActivityStore.cs b/samples/web-app-file-storage/dotnet/src/Services/FileActivityStore.cs
new file mode 100644
index 0000000..4a8df22
--- /dev/null
+++ b/samples/web-app-file-storage/dotnet/src/Services/FileActivityStore.cs
@@ -0,0 +1,163 @@
+using VacationPlanner.Models;
+
+namespace VacationPlanner.Services;
+
+/// <summary>
+/// One text file per activity in the directory where the Azure file share is mounted: the file name is the
+/// activity id and its content the text. The app talks to the share through the file system only: no Azure SDK,
+/// no connection string, no account key. Everything that makes the share reachable (SMB or NFS, pre-created or
+/// provisioned on demand) is handled by the Azure Files CSI driver when it mounts the volume into the pod.
+/// </summary>
+public sealed class FileActivityStore(FileStorageOptions options, ILogger<FileActivityStore> logger) : IActivityStore
+{
+    /// <summary>Suffix of the files holding the activities, one file per activity.</summary>
+    public const string ActivityFileSuffix = "-activity.txt";
+
+    private readonly string _directory = options.ActivitiesDir;
+
+    public Task InitializeAsync(CancellationToken cancellationToken)
+    {
+        // A missing directory means the Azure file share was not mounted into the container: the app must not
+        // create the mount point itself and write to the container file system, where the data would be invisible
+        // to the other replicas and lost on restart.
+        if (!Directory.Exists(_directory))
+        {
+            throw new DirectoryNotFoundException($"Activities directory '{_directory}' does not exist. Is the Azure file share mounted?");
+        }
+
+        ProbeWritable();
+        logger.LogInformation("Activities directory '{Directory}' is ready.", _directory);
+        return Task.CompletedTask;
+    }
+
+    public Task<IReadOnlyList<Activity>> ListAsync(CancellationToken cancellationToken)
+    {
+        // Sorted by name, which sorts by creation timestamp: the file name is the timestamp.
+        var names = Directory.EnumerateFiles(_directory)
+            .Select(path => Path.GetFileName(path))
+            .Where(IsActivityName)
+            .Order(StringComparer.Ordinal);
+
+        var activities = new List<Activity>();
+        foreach (var name in names)
+        {
+            var path = Path.Combine(_directory, name);
+            if (File.Exists(path))
+            {
+                activities.Add(new Activity(name, File.ReadAllText(path)));
+            }
+        }
+
+        return Task.FromResult<IReadOnlyList<Activity>>(activities);
+    }
+
+    public Task<bool> AddAsync(string text, CancellationToken cancellationToken) =>
+        Task.FromResult(Write($"{DateTime.Now:yyyy-MM-dd-HH-mm-ss}{ActivityFileSuffix}", text));
+
+    public Task<bool> UpdateAsync(string id, string text, CancellationToken cancellationToken) =>
+        Task.FromResult(Write(id, text));
+
+    /// <summary>
+    /// Returns whether the activity is gone from the share. A file that is already gone counts as gone: every
+    /// replica mounts the same share, so another replica may have deleted it a moment earlier. A missing
+    /// directory is not a deleted activity, though: the share itself is gone and success would hide that.
+    /// </summary>
+    public Task<bool> DeleteAsync(string id, CancellationToken cancellationToken)
+    {
+        if (!IsActivityName(id))
+        {
+            logger.LogWarning("Invalid activity name '{Name}'.", id);
+            return Task.FromResult(false);
+        }
+
+        try
+        {
+            var path = Path.Combine(_directory, id);
+            if (!File.Exists(path))
+            {
+                if (!Directory.Exists(_directory))
+                {
+                    logger.LogError("Activities directory '{Directory}' does not exist. Is the Azure file share mounted?", _directory);
+                    return Task.FromResult(false);
+                }
+
+                logger.LogInformation("Activity file '{Name}' does not exist in directory '{Directory}': already deleted.", id, _directory);
+                return Task.FromResult(true);
+            }
+
+            File.Delete(path);
+            logger.LogInformation("Activity file '{Name}' deleted successfully.", id);
+            return Task.FromResult(true);
+        }
+        catch (Exception ex) when (ex is IOException or UnauthorizedAccessException)
+        {
+            logger.LogError(ex, "An error occurred while deleting the activity file '{Name}'.", id);
+            return Task.FromResult(false);
+        }
+    }
+
+    public Task<bool> IsHealthyAsync(CancellationToken cancellationToken)
+    {
+        try
+        {
+            if (!Directory.Exists(_directory))
+            {
+                logger.LogWarning("Activities directory '{Directory}' does not exist. Is the Azure file share mounted?", _directory);
+                return Task.FromResult(false);
+            }
+
+            ProbeWritable();
+            return Task.FromResult(true);
+        }
+        catch (Exception ex) when (ex is IOException or UnauthorizedAccessException)
+        {
+            logger.LogWarning(ex, "Activities directory '{Directory}' is not writable.", _directory);
+            return Task.FromResult(false);
+        }
+    }
+
+    /// <summary>Creates or overwrites an activity file; returns whether the activity is on the share, so the caller never reports a success that did not happen.</summary>
+    private bool Write(string name, string text)
+    {
+        if (!IsActivityName(name))
+        {
+            logger.LogWarning("Invalid activity name '{Name}'.", name);
+            return false;
+        }
+
+        try
+        {
+            File.WriteAllText(Path.Combine(_directory, name), text);
+            logger.LogInformation("Activity file '{Name}' written successfully.", name);
+            return true;
+        }
+        catch (Exception ex) when (ex is IOException or UnauthorizedAccessException)
+        {
+            logger.LogError(ex, "An error occurred while writing the activity file '{Name}'.", name);
+            return false;
+        }
+    }
+
+    /// <summary>
+    /// Whether the name is one of this app's activity files, and nothing else: a file called
+    /// yyyy-MM-dd-HH-mm-ss-activity.txt directly inside the mounted share. Names arrive from a form field, so
+    /// this rejects an empty name, '.' and '..', anything carrying a path separator, and any name the app did not create.
+    /// </summary>
+    private static bool IsActivityName(string? name) =>
+        !string.IsNullOrEmpty(name)
+        && name is not ("." or "..")
+        && Path.GetFileName(name) == name
+        && !name.Contains('/') && !name.Contains('\\')
+        && name.EndsWith(ActivityFileSuffix, StringComparison.Ordinal);
+
+    /// <summary>
+    /// The equivalent of the Python sample's os.access(W_OK | X_OK): the only portable proof that the mounted
+    /// share accepts writes from this uid is to write to it. The probe is a dot file the listing never shows.
+    /// </summary>
+    private void ProbeWritable()
+    {
+        var probe = Path.Combine(_directory, $".write-probe-{Environment.ProcessId}");
+        File.WriteAllText(probe, string.Empty);
+        File.Delete(probe);
+    }
+}
diff --git a/samples/web-app-file-storage/dotnet/src/Services/FileStorageOptions.cs b/samples/web-app-file-storage/dotnet/src/Services/FileStorageOptions.cs
new file mode 100644
index 0000000..7981eeb
--- /dev/null
+++ b/samples/web-app-file-storage/dotnet/src/Services/FileStorageOptions.cs
@@ -0,0 +1,20 @@
+namespace VacationPlanner.Services;
+
+/// <summary>Settings read from the same environment variables the Python sample uses.</summary>
+public sealed record FileStorageOptions(string ActivitiesDir, string PodName)
+{
+    public static FileStorageOptions FromEnvironment()
+    {
+        // Directory where the Azure file share is mounted in the container.
+        var activitiesDir = Environment.GetEnvironmentVariable("ACTIVITIES_DIR") ?? "/data";
+        if (string.IsNullOrWhiteSpace(activitiesDir))
+        {
+            throw new InvalidOperationException("The ACTIVITIES_DIR environment variable is set to an empty value.");
+        }
+
+        // Name of the pod serving the request, shown in the UI. All replicas mount the same file share, so an
+        // activity added through one pod is served by every other pod as well.
+        var podName = Environment.GetEnvironmentVariable("HOSTNAME") is { Length: > 0 } hostname ? hostname : Environment.MachineName;
+        return new FileStorageOptions(activitiesDir, podName);
+    }
+}
diff --git a/samples/web-app-file-storage/dotnet/src/Services/IActivityStore.cs b/samples/web-app-file-storage/dotnet/src/Services/IActivityStore.cs
new file mode 100644
index 0000000..167993e
--- /dev/null
+++ b/samples/web-app-file-storage/dotnet/src/Services/IActivityStore.cs
@@ -0,0 +1,24 @@
+using VacationPlanner.Models;
+
+namespace VacationPlanner.Services;
+
+/// <summary>Persistence for the planner's activities. Every call goes to the backing store; nothing is cached in-process.</summary>
+public interface IActivityStore
+{
+    /// <summary>Creates whatever the store needs (container, table, collection, directory) before the first request.</summary>
+    Task InitializeAsync(CancellationToken cancellationToken);
+
+    Task<IReadOnlyList<Activity>> ListAsync(CancellationToken cancellationToken);
+
+    /// <summary>Adds an activity and returns whether the store confirmed the write; the page flashes only then.</summary>
+    Task<bool> AddAsync(string text, CancellationToken cancellationToken);
+
+    /// <summary>Updates an activity and returns whether the store reported a change, with the meaning the Python sample's driver gives it.</summary>
+    Task<bool> UpdateAsync(string id, string text, CancellationToken cancellationToken);
+
+    /// <summary>Deletes an activity by its store id and returns whether the store reported a deletion.</summary>
+    Task<bool> DeleteAsync(string id, CancellationToken cancellationToken);
+
+    /// <summary>Cheap connectivity probe used by <c>GET /health</c>.</summary>
+    Task<bool> IsHealthyAsync(CancellationToken cancellationToken);
+}
diff --git a/samples/web-app-file-storage/dotnet/src/Services/SecretKeyXmlRepository.cs b/samples/web-app-file-storage/dotnet/src/Services/SecretKeyXmlRepository.cs
new file mode 100644
index 0000000..e0cc5bb
--- /dev/null
+++ b/samples/web-app-file-storage/dotnet/src/Services/SecretKeyXmlRepository.cs
@@ -0,0 +1,49 @@
+using System.Security.Cryptography;
+using System.Text;
+using System.Xml.Linq;
+using Microsoft.AspNetCore.DataProtection;
+using Microsoft.AspNetCore.DataProtection.AuthenticatedEncryption.ConfigurationModel;
+using Microsoft.AspNetCore.DataProtection.Repositories;
+
+namespace VacationPlanner.Services;
+
+/// <summary>
+/// A Data Protection key ring derived deterministically from <c>SECRET_KEY</c>, the Kubernetes Secret the Python
+/// sample signs its Flask session cookie with. ASP.NET Core protects its antiforgery tokens and TempData (flash)
+/// cookies with Data Protection instead of a signing key; deriving the one key of the ring from the same secret
+/// lets every replica of the Deployment validate what another replica issued, which the default per-process key
+/// ring cannot offer behind a load balancer.
+/// </summary>
+public sealed class SecretKeyXmlRepository : IXmlRepository
+{
+    private readonly XElement _key;
+
+    public SecretKeyXmlRepository(string secretKey)
+    {
+        var keyMaterial = Encoding.UTF8.GetBytes(secretKey);
+
+        // A 512-bit master key (the size Data Protection generates itself) and a stable key id, both from SECRET_KEY.
+        var masterKey = HKDF.DeriveKey(HashAlgorithmName.SHA256, keyMaterial, 64, info: "VacationPlanner.DataProtection.MasterKey"u8.ToArray());
+        var keyId = new Guid(HKDF.DeriveKey(HashAlgorithmName.SHA256, keyMaterial, 16, info: "VacationPlanner.DataProtection.KeyId"u8.ToArray()));
+
+        // AES-256-CBC + HMACSHA256, the default algorithms, serialized the way the key manager itself serializes a new key.
+        var descriptor = new AuthenticatedEncryptorDescriptor(new AuthenticatedEncryptorConfiguration(), new Secret(masterKey));
+        var serialized = descriptor.ExportToXml();
+
+        _key = new XElement("key",
+            new XAttribute("id", keyId),
+            new XAttribute("version", 1),
+            new XElement("creationDate", new DateTimeOffset(2000, 1, 1, 0, 0, 0, TimeSpan.Zero)),
+            new XElement("activationDate", new DateTimeOffset(2000, 1, 1, 0, 0, 0, TimeSpan.Zero)),
+            new XElement("expirationDate", new DateTimeOffset(2999, 12, 31, 0, 0, 0, TimeSpan.Zero)),
+            new XElement("descriptor",
+                new XAttribute("deserializerType", serialized.DeserializerType.AssemblyQualifiedName!),
+                serialized.SerializedDescriptorElement));
+    }
+
+    public IReadOnlyCollection<XElement> GetAllElements() => [new XElement(_key)];
+
+    /// <summary>Never called: automatic key generation is disabled, so the key manager has nothing to persist.</summary>
+    public void StoreElement(XElement element, string friendlyName) =>
+        throw new NotSupportedException("The key ring is derived from SECRET_KEY and cannot be modified.");
+}
diff --git a/samples/web-app-file-storage/dotnet/src/Services/StoreInitializer.cs b/samples/web-app-file-storage/dotnet/src/Services/StoreInitializer.cs
new file mode 100644
index 0000000..c74eb50
--- /dev/null
+++ b/samples/web-app-file-storage/dotnet/src/Services/StoreInitializer.cs
@@ -0,0 +1,33 @@
+namespace VacationPlanner.Services;
+
+/// <summary>
+/// Runs <see cref="IActivityStore.InitializeAsync"/> at startup with a bounded retry, so the app fails fast
+/// (and the container exits) when the backing service never becomes reachable.
+/// </summary>
+public sealed class StoreInitializer(
+    IActivityStore store,
+    ILogger<StoreInitializer> logger,
+    int attempts = 1,
+    TimeSpan delay = default) : IHostedService
+{
+    public async Task StartAsync(CancellationToken cancellationToken)
+    {
+        for (var attempt = 1; ; attempt++)
+        {
+            try
+            {
+                await store.InitializeAsync(cancellationToken);
+                logger.LogInformation("Activity store initialized after {Attempts} attempt(s).", attempt);
+                return;
+            }
+            catch (Exception ex) when (attempt < attempts && !cancellationToken.IsCancellationRequested)
+            {
+                logger.LogWarning(ex, "Activity store not ready (attempt {Attempt}/{Attempts}); retrying in {Delay}s.",
+                    attempt, attempts, delay.TotalSeconds);
+                await Task.Delay(delay, cancellationToken);
+            }
+        }
+    }
+
+    public Task StopAsync(CancellationToken cancellationToken) => Task.CompletedTask;
+}
diff --git a/samples/web-app-file-storage/dotnet/src/VacationPlanner.csproj b/samples/web-app-file-storage/dotnet/src/VacationPlanner.csproj
new file mode 100644
index 0000000..f1ee0c1
--- /dev/null
+++ b/samples/web-app-file-storage/dotnet/src/VacationPlanner.csproj
@@ -0,0 +1,8 @@
+<Project Sdk="Microsoft.NET.Sdk.Web">
+  <PropertyGroup>
+    <TargetFramework>net10.0</TargetFramework>
+    <Nullable>enable</Nullable>
+    <ImplicitUsings>enable</ImplicitUsings>
+    <RootNamespace>VacationPlanner</RootNamespace>
+  </PropertyGroup>
+</Project>
diff --git a/samples/web-app-file-storage/dotnet/src/appsettings.json b/samples/web-app-file-storage/dotnet/src/appsettings.json
new file mode 100644
index 0000000..10f68b8
--- /dev/null
+++ b/samples/web-app-file-storage/dotnet/src/appsettings.json
@@ -0,0 +1,9 @@
+{
+  "Logging": {
+    "LogLevel": {
+      "Default": "Information",
+      "Microsoft.AspNetCore": "Warning"
+    }
+  },
+  "AllowedHosts": "*"
+}
diff --git a/samples/web-app-file-storage/dotnet/src/wwwroot/favicon.ico b/samples/web-app-file-storage/dotnet/src/wwwroot/favicon.ico
new file mode 100644
index 0000000000000000000000000000000000000000..5b1d5cf37d81c073dbacd66df3f69d9240359dda
GIT binary patch
literal 36791
zcmagEWmp_d(>6Q{i$hpk0}H_+c#vR=6Wrb1od6-g;x0iFoDJ?0f_tzeIKkZs9^B#M
zdhWm9alG?mrfYhnrmO3ms<R6KKmZy5fdJ1N6p%*-fcMWWQqup)Cnx~W^?VKr{hz#m
z4gj?n0Km!lKiTpH0L0=001Wm&nVJv){y_l%4*#G0g9QL^-~8A9Z-WBc8~`wG0sv8}
z%Cb0^<e1MVao)*EsXrh8(*S~w`n;z;dolw6WW0A$;+j5LR>?|=hE{~(xo1m$5$WOx
zbWKdfscH3)sLJu8Xzj(xu<713Y$3x$OfLQLhNy8}4uYlTL|y(QT@oUE8%0m6*lERg
z1z4=(8HnCaQ${&?+Zzf}>!bD+H;@yHKQSZYu^->grpOP5U0!8&*<K~jn<fjg9|H-E
z7vuwNu@j+x`=G0n*Q#dt(qKRua$cKUdDXg3#V1h^w0U-{V)E8A@9^~u&#`W~sdysM
z*gFit3~HA9y>$!7!B+yIi1l|oaJ(PxauD5x8~L*c^Ib0^4*b-W%Gu<d<%hfSSC8?Q
zcE<Sd=wpl1L8t2UwB3Z?<I;G4w2hJvVtuvZd!=Ic)d*A&pNQie9^*8{R^Hg$D_XNj
z;q9Kf^%PDnpM3qX8Do>9Sovk9&i(=hRu&Fz(W>Lscu7crQLUxrCM;>!e0m{r*JdLi
zX1#U$C?c6~)NA%5PB4y7HQH>;zWNGg*Ey4P&2YQ_)ul&FNMtBeU~#9Paylk8=aUY{
zNBfE9?{iK09V9WWab|*Lq!FiiDKA!9(<sNcn!_(kCmzQwHuA?m+#}-h5|&tyX-ARL
z487U+1pN^ppE5(t%8hhV`n!8?<j#A~VXW;vb>^k%@#WN!qU<{Fj+%hW*|2<vm@N*q
zOAsj>T4pa@@b<H-l4`u@_2#wD^c9zKGq>MiZZMnTL#@zEc1$?Q2pM5i^aK{)@f|5L
zgrL<vR!$YO8oI{3a_r7S=2-D~32n|#zZGdE2X1dgG4VXl<Bmzn2vWarlT8A>8(V|Z
z_P_K+c)0)doEohned9K=)z411+B%JG7yQb^y(oqU*iX!T=Xq{0W%1<+!dPDWy@E9!
zHs7r}y&k4(<WB*SQZC9>A>gj<i;+ACB&1u5l~0z14e#y!Ed1?D@jsrdF7%9A{jn<+
z`f|6@nMScBLwnwKEChHZ2;ZN-JZ#lyD3izYCPtLzOU?$*u?T~-iJDK(3TIf)&U|th
zjk!-2ioCIoUjH_g0R^k?)|LMWoBwG)tnc=^b9cUS;|U}irkN1*o6_#tM}T+I%2HJl
zrosO|p7fvZlK!73t$K@G0{}|X|2!#9%gE7i3h&W+r1|QoY6b%=SJN%ctSSBe9Zi@F
z9__y9xP0ZUr<#<Vs#d8weX@WZGoHGaKdY8-YG_H9q+KE5BD`8vGb(~9E?TD)1CMTO
zObYXz;#O|2Skz$!f2&{MNV=%ww18<|K!S(N*>2{I^^3JZggQ{)fHvVz&W+6pq)3ti
z!9XnJ{b2ma@Ik4GevGVKB5b^sp}QmS@Fj)Q762@%ewgc#XF?g<g3MV69h0lR5K|e7
zS9;wAKEzivr!cQ6zhA#D7YANQ&e9{TL`2i3Ia43Kyz&&m7{djc<K+55Z|TCSJB?lp
z&RMj!yx)o53v04Rfe83AWP%vDNW^&uGPE;?9*_RU5LDlY5`thcP97!$56;HNHp44n
zL~!(8055TJSdIHqaPVWA+$jW!YbuT_u(YpUEHl`9ZIZgE8U=Ly^W(tMt2_2M5Ktd2
zHor2pA#gqB^ryMP41_ch9#qd~VLef$ZkP1N@UW%tlGax+f$+?*DpBZXbUa&;591!I
zjx<avu`oyiR%mmqXH$7o{QgFscmr%&-ap%5Ui(kepw_2#LqK8(2~Rsdyhp!67diO7
zJEjzjc%hc<*L&O};r9r_6i-1m8wJVb(*vUwM2gOrtN6g#^@q9gLVw!JooRXHibPli
zO$~to>6f2_LO=15ljp$_1xD`Q%T-%Hi+CUcHxoLJ%bB8waM({HJ{AthxM&$4xpw>&
z)~qgo;6b1%I+Hx9$;au+f^H5XO#2udviAgAWfwD1>eIbLLwd0hXx=X$eo~*N8(gxX
z(2H!!ey+c2(Q&0JGf~0^pbS`FO7h1qr>93=$E++~b3R>P%D!Fsu-(4WAnqhbaE67a
z_`zwuHr?{KRq(e_<Y7V8KP$sIBK14tPR6ZuooY%Nv;uHT<IHl0nRQp&fjeZzs{?Y6
zq^AATzTICMySsOH#)29s@Jc`aN{{*grPkXByH`Bsh4}oK`}s?<ReX(vR#>1QtJYt!
z^!VX&+eDO0B@7(Yvu=)EFx$1dr}$}`YDCQkEt})^1aD--7vtNGE9<9|-OkIndnP-}
zY9YZ&m}kt!)HE`HHq&_Z>kEG%4gyWlT#s#avp#-*Zms+A>NY(5BMIE|qs>O&$Z)3X
zRS0fk>vlsNVA-?CKmcBaqF=`yzET;uIH$hRV&_r-0oRHNDgczsn|ZiOm+QCHZ*?9D
z{-k0MM44Ynm5d@+Um%dGjym_pWK{AMUw#j|q%IT;aG3{WO#UgWAM3i1L<Qn?Q9(%G
z=GEBJ{n>Aa(KHGX1xH=6DDVRH(*83nISQ^U^IDH)<Q~X0_32dR!$5Iei=##100`!t
zdqfOyR<LW>$8Oj$R#{Q6@CQ0}9^bKGzWQ_LjDUQuy<DKs^rJ}_BA?tlc@1zb)V;TJ
z$Y-QQ2H{Nn?ADI$2~q{1zrKxv(<Z5qLrH!>-WU0W13&+{^7vjRKUJg)-7yo77<Jvx
zdDzwMktB%Fp(8m9rieoVf9i}^FIP*teydH>u0}i@LsSLXC;-wIJ=;!<kJIZzZ1x%&
zwnL)>z-qPYbdPlhVEba-<2@N+Oq8S$ZeKt|HLaA4RAl5qSm#4Pw(bQYGWGpvp?oDC
zG8)(7k`k*cThNyeXsdCD1Ixxe<pJ%&e8OYpV8luOKx1!yeqZ0On0FheM3dImJI>lo
zVHAYCqX%Dod@D%WKdXMmJ!<nXP%mBG`$0>0oQGeWJRH0Bl#A&5vzH47X^_r)1Y#cj
z3A^9ukKWvSqjfI4>2QIu`Vwdde)GGGlhjxWooCSiP3Oldw+<vD<$Hy@Lj}w;<h6<a
zih(hqe^Y_iI?UIU0hXXd%Q+by{?XK1UcY#m*T1%Hc35pPKS(y~MWqsceD}hj^&;bw
zNX3P0g->w0i7zdS4n2C>XI5j-6LNO$Oi-?-O8EZ+@S)HB(EkH`j}ITt0RTPke}G@8
zWA_aBM2{owF6n(d%9M_(<^#%^u=Ro%DFaR71-yGXyt4T+i^;t2S|tbsgJn=SHDae&
z8(noFRGW~fH;*rJy)<+J>EREt3i^n;^lL&DTl{Z=<zHsgqilSSm;G)ntcM^%t7SVY
zepl@t9cS6cIexfnf8x3TbfBv)U`@O$;%4u2xq+cs^&7-OWGR_rKaE`%Q~SoDNe&rm
z2>X?!4)(sdCo=7Z<W$J+C6osqgsVZ_<}kSK7uuCiS4uQwiW&((g6ahaVi~!`sF#gN
zzEq<_Q-c+YzdDTai?#U#aBls5=oC#Ve?kQ&?EV_?)j#}>in%E3<;-}44y`dm{RAC!
z2OpHcxQdt2d5bTdg|y0A)&@ZkVaUg{Dztf>#NjLMYi&|CFb&-*6UMz(*!jfKA!7m(
zY^G@X?y%{?Q+JF8zydJdCB6`kz|Qv}9AX5uFj4B;BL(=erR#o?*6xldMT6y_o%*L$
z4aWr1vYlhZ<jHW&YDz)rplqN@#pO`zjj5>3__LdPbPT%h>+%v{xNAImV2Z@irtaoa
zY@lrgal!sq>A`;UIL2=Qd?g&9!dse&_Aw&^{XmQ6(~cTT!ZadKa1<RVm~3cBMoxDK
zz<xwpuf_vY&X_IK(iApr%Fre>zIF_ByPKaG3D^{)pJ=y>8;sp^2pBAyHtEec817Cf
z#YBe$Bam>k_#o<C-`LP;SXhV^8$1Q((&z@<U{a|q@`-BUG`7?f0oDWI-T}C9jR)p*
z<w7Md6D1q=KhN4^8q8oQ2;1;>{z63qsEDOnD4ED&WINO4dR-El)N~u9CD1vMP4f#A
zle+s!d$7@IX|1hkX$MmwNeJY2)+WNof2oysFZ^;CKd$g!U?=VbJ?6L=?Fd-UtWb%0
zl;q@jbsDvQjys9tI+Wqz(g{@nzC*#Bu5{f*_+|)@bsto14&9N|l;7HbWpXE&d*w1>
z_!xUCB&`-l;~|lBFGY4##<!2<>P9Z4j*p4S*2<m`8CwHCgP0J!BK(PvnlJR2Docmb
zTX)f1wy+Wz`K3KhA`p~@_g2j=!peV^`Sijmted$L7aJ+&*8k8K@=9_k<+85Zi*<2_
z7H4GMoE^K~ybAY4gcKV6u8@Yp_*5IFL#8wL!#<je7e=|Jp2+WhN{{shI`Q72aP;@8
znr3v)99XnIKd;QxcT>{3VP#_Uf7<Q*XBsm3WRfo%%tf)IOlPLk_4){^y!dkcHj2mJ
zL>Odd@W-R|aXK%&XBV6L<J<TJ1ou)|OheCG7sdDK{U$}r#H=JmNB2ovc<;0CE|vk>
zndulWat_+3Bc;q^m;ECMu?R6?N|C%p`irA}$8tl}yGLQSRRb(3%N<Rcgwww$JYMId
z3GG*p<f9=z<NNV#HC~*Z7ClFdspBT&Uzd0KoiJ*~f7iVH^jchM5e$@i$}1w1!Wx0D
zj2~!OC9(ESd+{%(m3zPa`1YY1657}!%bBtixHr4{XnN3om5nu^3}LOGzcLG0wfSwD
zc%|KV@jG0EnlNE+%1p0wyVns527PUA{m2b?@+Bzpz{te%r-keLt@2z-zL}|7#dXWf
ztJ^z`fUVqQKMXEo0e{Qra^HP#i09|%{EVN?I@V^twG-d|*GLlZ^QXEg=V6)3P1<$x
zi^(NhdN@Rs7&pGs?qy=&Y((zr0-$B*1i;Xrn?mq+2dhXH2ewGk-ZI0<QXT4#ezRvS
zuYr5|rwfU^{KFsj^oNmbx(NKU<XUx%K@h@aOCAaC>7wsP6}o~J-&`o9g?O@(rAObK
zP9p&ljnZiWNNC?@R*az*`S#lU&)9>vpLD1fd3;7iW)?bf)ed}-faq8G`Gse%e&Xa#
z+&qubNv<P(-PhvcJ|m6$x+^NCP<?+L6jX@tQc|%rDxglQzu;s#{k}IzT>N2UE6y)R
zSY*ygWZ#AmD5%pzf=7i!Fbp<Gbx^um^hzTp^9Jwa<D#6a7e07tY_A$EIDgED#0JjK
zHOa2!b~RV+zgW|jdFs@CLSOv$EzIFdq$UdrV5?s*VN~yql2K(8UaswxS6b&`wso9C
z2IUTr;R!*qppvi+Km{K6VjBR2M@cfM3*Ac}EeX^WrB9oN`M#sgZq&3=%<zc!ZRf8z
z#tlvl>1h65i1E;XwFTm{N!U`mG|)FMgazD-=B^>rY{g@|36#=Zw|{AGK_|v%(0W8c
zZVvp+7UshJ1;+du?&`GZar2J=n5=j|U^yv;j#RA9oc`!`i4Vq=A$PKnsM}A)@w@WN
zk-eDXfpr{b^3PPeaZriP1stvD#oFLbT#uop37nd}sS8p;>be*>`Hm{{R+c5AdF^|O
zL`~Njkq$ET9}M9H0O2%8^4a99Z?v)Rv!`oMo;2;;czAz&{2t2tBGf9&KO;N=MM;HY
zE}OCnPbm$)SOB+wdcsTxS}-V@m!UPofJEKm&RoQ0PMu9R;5GRdPsOigM^9uhr8N$*
z8ZjOARPCoDS-(+$ddhwt)f9cT_5iI>g;FeNeO3VFhEhJ6M6HRFD@uj6%gTEAG=2h?
zx+yZkhW$Cq`+22geU|Oiy=ghKJFZp(k&rWsj*n9i=fnp7W(tMQ0j^%b>0Brmzz;OV
zL9ZGA>h8SR<~1I9qUg_<$TWs%<KeTu0I8E*x_@xSD|q^MohjUvnTQ<yV|#<;I3MI~
ze?D4W2brymBDvB!AaU;?iwEF}aCxRvj2r3Tqg2AavOee6Nwph{o{584M4>f>aP8ZB
zTXt`9VD;{a5xGtm_XBof5Xc3GU76PVvF-C`r609kA^X2ep+n1U?VUfhvWKRQv&c&B
z)>OzP=*_tX>I+ugZCl?Gmg&yM&E57F&!!e{=vBP^cUpDV84wbBVD%42$`<rDl6!mk
z$mV@cnR1^8dv_qHSYGkVqdT4V|0A^dk7wfiztBbp=_UdIUa<ZzwCU6LcQu^yddl`Y
z_H)spZm@DBtHCCVRr<t5Q%DD{(aGj@nkb;RI^_i=jivLdDjt$b+D;_swUZTDGSKs7
zPtX(;ZkQ^LDfh_Q760*!CN_XcB2d^s;ip@;T@4*<hxX4QP0k;&_d1^|Qn6>>jf#;U
zE+?!U=Xi|XEWN@D2qV6fAZb|xR!@~|vI>PC^iVF|;TfZ<VoFyt_w^Odp{Nk%b%TLZ
z-x4OI(Rzl5=o$@C+-TZ=w@QOLpQ>F@{#g~)l1jnloCw9UU|?iOhmHBiC*0gt5<5}}
z5=^aiMg{l}$e!xXkgpLSiwA}ep#>~evhuO!EyT$V^O@Bkhggr$1gTSfx<u#O+7V2p
z@OD~yIy0myBJB>~MMA>FQuVqTwQ3ettVMGsXTp>$kpMYAd?vd3pm#C+ofbl@0A6wp
z3_|Y(xz1|@0rc-~ZW$YoR_1;ZFw$}QPgt#pR!(gU^}#y;T7`5vEmao>caD3TvmlX@
zK6`)Vhn<$;m)<C^tu@r&GlNli9Zc|okP#{2>KU+TC{iL)3PUf!QNpuES3MiYy&u6v
z${dYuzGx`+$$*Jkw05FkI1KEHffacP`xUa4)Ot17iu)q$M!6G$!?4d+-83;+ChIuF
z40tT&&?0G*>-%B;K*~HN1-k$OFxWd7h<O((P2wJXWVCQ8@>Yb5mjPNoijlN1aUxr=
z`(mq<o*l1-0M*(Og*I3_9D&na_-$0r`>d)G?UDJ5n9wWPo4^#=@@ygom=2?66sr<v
zkc7HhKHW8QC{=i#3E|W2;Z=OZdHQjdSG>|sj>pwQ9Vp^M8Xv9dLo{sPW%pW$;4ej4
z*BrhaziZ$U0XDpzCSN!>W@|tG=A~Hvo#W68I5A!%IuxP~hAo?IJ5{&c9Eo9zgrDs0
zhnc0a0fd;Vg802`oP^=3+1ZI5Cv^el8JcM+SttlwhJS*R)#Uh6KawQ=y|v3aRu7+u
z4(^ILMjPvooQ@WDdaNw0uZLz_^^f2jEY|pefgj7N-Y*C(WgbT*zoK!oIw(CA=9Eo4
z?KaH}{&kthRFQzd#FY|!(VMn0GTu(z2J<?-qgNfXb#jtcP{0yi$vkPlME|Yf8WmFK
z4o81F2n{&z>Ngsli6U&lI<xL5o!TSYh|Uz^v(z72V#iBFn#G)TW0AnXBZOC65*hAw
zDX;ocai?S7cSUfa$}<B1PfWcw_gw66Fd63=SKbsP43-8ECr)IfVDLH~P=at%7&kev
zR(1n-r0CH9{Jyv~c+1We^w_L$?T>el#zho%NX4}+BA|(=pixK<eU6bD8itiBhjpyl
z*zEF)U*x^`7BE4JWG3kLgBV?oGBkF@aTQ;56W^~VJ~KDKQWPH*Kt(Gb#M)pTn$XDc
z47@v7LW>|*n)R94Ayx#ZDnTA!+k~Z&4GDXd{fSBh;=yI|;UF^*Gm>UVJ{=qzJyM}`
zN~S)u;_BZUvFmdjp;oM`5oz;j`l^*n&QQ@w414NOM4bjnUiapn5XZ1@Q1i-Q29X<c
znClyQK5nE$7V)}2a$Sk=RSKLhoQ}UGrsnKNDp1X&>H25h#vgupAFy94OYte~jo?8T
zd*}eKJbNxrUx{sX``M}3nBIp(SddZ{J?$UTw*Z_qW6JjxX!_X2+-~Chqruj(i7jhk
zP|4`0uO8pk<Sfw48WQ_=^`I5?wCFM~_pzvFHH8z8OZUod)AXv?JgNV1o4J(4sEr%f
zU1;R;>#;<J9OLh7BdZ{p;qGlnDqXkt9O^DkvuBr2Pt+gkd>8qCQkto(aELOp&cpZq
z3dFs~?;FmGCq*8L#%wd^OSXhsyMio^iYA#MX#HYv=Zqzq_Hlk%C0ixu$prpgU{FG;
zZlf`PT#7PT!@=!#P-nk>r?>;j7d0B4z24dK<NCdd%j2WN#fizn`x`w=R}mOLxd}%+
zqeeL7rH%&}OoO7V?!P9<FLrb4DZ)!aDsk}xHE&4SswDOGneZwK9iJ^9%lpgLK<9wF
z!AX1|8ay5Ja-k2);35xYxRVv>cBYjN_4#{`R~DZ}5}pd4IC_6GI<7bP1*y#souZ0|
zK6H`h-@FC>N;+f8O2VG6%wt-oiFLuqXpfnQu7^&<^-uq6h3=>S_Hn;^m6`is{4{QJ
z)i?bTBN!XwQ<J>nE0@lYwQilj2=vpNwLZJAt*cV7=8q$qQ3sDbyxWj2yksu@Yf=nQ
zN<DVuN1EKxa&yhB+p14gj1aoE{pdo_wbq3FSKY78-%y}@wwH>+W}TfD9#2j;AB(A_
zLw<QQu3TG&TQ1H1RQsZ=%(6vU7%%&~a6HvyvDr_`KI29G+sTM578&WgDIpG#FWg0|
zzPEWzS<}hVMjiCf3kM;-!w+>-GIhd<`@igfe>5|wO2(N2+s!D3I3IsK+74_#F1X)h
z37#!g09}8dI!@GmpTrekBw#XP=nX7RWH}kQZ_j-JU^Ljpm+`c&TrBg3qBidrPlxtp
zapRtflpMKiFR`T@mA=)S)T@kCp~Ac0ObrUhz)VzzMS`7oq>2hIPFD2{#}3k)9I01M
zDj)ZImQ_joqMa|uULygOgDQdLRySm}A|7PK6@Ot1d#Q_VC(^p#Zx=5Bi1Xj9dgtdi
z*6>dz$Z*7-ZeEj2L?2##>xcDzf~7E^m%ac5cwKGzf<973qn};~aTqCw#u)wxl_AmT
z^(CwP6TRT!sa_QXe~X6srf~K-#1-+|3X(3@u~=(nwd<a<`D(YT9=s!t-uVLfYrkm6
z<Vj*k8vbFR(S$87fl;Sr_V7*6G?K15fbR5XU=+~t#&TG)`<QKImgA)YmXN^{id~ou
zOL*AT*f68Xl6Nq2m_`R8vxT!5FhbL31tZ}V!0$9ImCdtori}LY*-~FupP^Xn)MoSr
zJ+V&hPcU<#J@;T{GHmI!gnL7oD1}Wfe$?5=O2Z!%)NL2LI?qN)S6fCy1p_JFcc}uP
zv{VHRx{VFq78kK_lcm<7z^A^xu3G2chB-gCJhmAPZqX**HU7H(O+XwZXQhlZz-jK*
zqa~e{d!cBkOzmr`@O0TSlqOnGeChGG)8wVl`9zM7?I`p`Coi;zqceDIW(6k9J)Z;|
zPIce-zOjEW7xNkX^OUB!Xb~`-$n<8Tc`gw?sk!GyjY%fW=O$Y@l?g?#dk&wfs;JNb
zoMgqRmU)y5>KN?t-6NkOT@geyN}mCknd`q$qfhfx;9Tc;M)hJa8VKR9)C$DGk${p(
zII&;QxZAJgld;OytF3+yhUh%KxT2OS<BuZ)x;NpU`sG;ME^e%OIrP7)rV=z#UX!pL
zW@SgkH!_tir)E>U?{quN{$lb8Y>it+)9*n5Z8PwDJIx9>sFW8tu8>od-YbdX5?v6!
z%=3NkY$yKSj6is!TOSJ&gl_Bf`^SqoHetMfdd0K|w34Uv4P|?4^m<(Fr61GnTlf+7
z2BrG7->cCPLR1MktXDL}@qvajmBqyoK-Z|NHYu5n(}mzJ<?LHHS%H_<XHS20OfW`|
zt2Vz&I2vX<3Mwe&O|{#PSMue2?+?BgYpH*885mjOK%!+Cxsf>pK|re~>Kc1)GQogq
zG#HHjiaGT^Uia#&=occ)IulDC$w=spu;zEOtDicJMwh{tT3<3P9gv7-Q;wOR-Oh4m
zJPQ<!W8T^D?$DfS?r!?Ds7vx7G<6!Y-o|>4DON>U8Th}2tpqYY1Nq4U7OV#$W+Xgc
zw_nO&{Qzvhh-qZ591UKWJ*6*!sHZ|_e>d0X_J*Jkqt*g_x1eFJlu=bBE@wO9&%4ZP
zJxL_r`;Iu3m)L%iA}iDsz^d!(_Ii^h>!lxBtmBIvgpa}6X+;caio^j5Ji#cHXH{<M
z;AiaoC|cd%^5K?<m^lN6C+>s>yO0-2Q1kZg7Wvf4p3gm}l0mOfV|&qj`~6L}Zp(X|
z&lT-Jab-K8Fd|g_tReprugdGkNHAdPI&7+>J|?nN>*>SGb3+F(Uk>^Ef)I_3ET2ZN
zXZK<<zlqCIGGY&atLixjKY6^Uv8%+@7tp(p!<ejB`f!_`KwGrpb05C*yGwJyTiM{P
z>T5-d>f?us*x0T<qGv9Uyx>jB^d?wt-RE?&E4L1R6neUiW>mo%odultu6<=)p?E2Y
zlz55EG>T02Iyy3|z80k&4M0ZD?#zN@IN#hy4FE8g`k$-23soI-8-COrjM}qrvp)|;
z4)k;STB85@$GN^Xj`voW4+#)aJ0E0p&8yI8<ir+-v*|bQ^~cAs7ksul9I>oZ)z`5C
zL-m;xZNfP^k83d|?^+q{&cesg-r&*Dx^p<+9dTQoYnASpjhChBSA;3xH_?F%7%PYM
zQYwX>^8?Z95|+uwCyeup3tK?jX4or+q=B83j6;u;0wQk1%{j*g$a#1W?_T$2mP~Vo
z$>0{@+EFugs8|{qi5!v4m>lEaw%x~FU3J8NH`Im(Pqf@#1?!`wMRu`q=<H-gXR8FE
z74T0=ZN6W+zBBpVRUvx1ZJ<o1lIcin>_MQ&hjr)&eEKoYrOA>?0w7#{hTjc5G1I7)
z(0iacs!A!7je^GPN<%F_<~?@dRm$OTsiY)Fk$|AsttwGj0`xRsK>n{y5ZBwWc@m%?
zMI-0^Z&C)81;y1`F6(2GMv|3ed){n(+$`RpBZ>Nf=Eoe_r#(5lQwnTfHG;3dc-}h1
zzKGQhQa7$UW)8n61a428eQztMN0jFR%P0M^RW?2P#XinkNi1$r1|mrf@{Sh(Vs(X|
zoQxJ?PD+11dEJTm7jvwQdXpslKXOdib3g3=a?CP2w`Bkz*#2LRIc4CNn5C8al<jf+
z&~fC;u-W&D29h`+Wkw{9{_gE+mDJ3XRpSTkPhL81$o2Aa!NR@uALflFS;UQlQ49uI
zXh1vV-=y%Cru2CdzpyeJz5&s+NiNgP`JQjw9kts$UAHju{1X0vlz&vZmr;7uk#Kf5
za<g>Sq;&l%MFM09hSLfIhPPoFHqB*1CeR)9am7do^e)P>T;cu?#nJMGzQ5x$3`)Dk
zRY@lo^l%NTq7WMeo)%&^%cCFL<mnY~Iu5R*EZ>Ak`N+dv#C#XxkC7ASDXHMGjmy*o
zfF=_>TKZa=RXG5cxjFUCYb$BjT3A-3sy$u^GFTC_02>+jxXvF_$Z@fFGe7#gi0rx)
zEn{?ks0nc2gOqF?orc!67+2)vJ1Phx8ur=&2{4sKHLYCgWOxcX)c7bMpM1ILA?I-F
z#BjY5fZaHA0#ezs9I8z48IZ6Cg(am29U<(-39;m1Ek<fN#hCn!1kZ=IB+5|^Km(yD
z4e?!4lxaU&pS=`XCdCT10Krd}R$rwWyY_t7-UuE`jbm*kdoZAyO~QT<Ucn*qqC)9i
zHH^_7)+4aIi7q%G06rl35#XVtBLx9SwDKumE4)wJ>dw0_ygM${zXI&>t1k$UOqr5M
z2$fw1&vm}wyQafOh>lfgC5WMDKLU^%LM-dLo(_I3ymzi*74>}eMs;zWs1B=0+KV1p
z6x1DC%`F9>A#sU+qOHj@oA+TH1HEEyo@vX+%56ETH+tnJ(F07TjvDcMN82`LMT+)>
z??6E7;N_V%Jg_-j;9;L2C{h@C)ue9fUw7_eU3<oHxCB@VZ*hI!CU<lwvz-Jth}=U3
zi345}tRAjGXl_DmDkNphU|I~pfk=tlhQpM#L7g-7r{=Wo-P;W>wFqe>D^>a7d?1*V
zYmClF2c^FAADQ8^+Ai&Oh2a;9K#)45S3Fb-3PB>I_`vVbQY|rM6{9nxN9EP=s3{A2
zE&x(7v5-8dKp!WSV*DqcY%W<-yW&#*$cQ97!v5Ho?0x9##T)Ota;jlNb~u8ITeBJ;
z)dGjxFUCukZ!Z?%m~a@cR_G!T%B=juYmGo#_3F}ZYh=I7_1mlBKQg($X(r+NCF9cf
z%IX#`EDa$UUVf_sZkkD~c$k|pSrI%Jx)GjSj_<j%gMS<VA+|XbszpTDP^M&+!k@U=
z{l2&l{mp!-0Ctr!eaSud?T!_+Ou<`fu%6V|JC;bEA2rD*E1?Js8s|1uS9CheEL}9a
zhh>dWU4`2lbuPu1mcUQ5SEI6#kXSr}rYQxMvPd<ldB{50nBT~$TA-`h;|xhHE1<x{
zxQ73Y#6&{sBuG)wdms#)s`6N@wAKM4W8E4#mLypVED{tm6^qxcx6cWETlCxfaN158
z0AUC!D@Jd%ojN#1)tl1OFqVW$$Z|-OmXFDuMalif>RG0gNYXY%3i<q*n3tcw2aGDk
z>nO|`jQPy{T*1^EFu0uXP2-Mbzh7eQ<GujptqGe-0q!V&b7&9pi0Yo`ZPiT_SvuHY
zFmPYJQhvX7F!}BcFFP8O6>F|L4v(ZAN+oZKx@lEd#rj(I7rI(oXXm_2=0jEamwZoa
zc=S?G@JW4LPFH~^qANO4^I#v`(%5FQL_y?t%ZT}d6WEho%G<X#DUx`s^-1Ig<8}2{
zVRk!14v`9|B{0M#XujjQ;-e1;vSy@fF;L`{mSUKt1#yuN2_KYB=T=0*(;W~PB_}0P
z&~*^}4J!f5Y?<G*!PCtYE1#$u6Je7soBS(wE?##=NX@_P<l+*kfZ{rP8TC^R(4(06
zsfNpBwWgeqUv#y$Oor_V&e<|oef!N|dXb}zDH0?y0)O7}-Ja39CxRExlpt`wXORD1
z<JocFPto>rS#rMk=_P&vd@gs7!7SxxpG#fT_pc~!s(y;(dWN-WngL);<Dgb&x!yL2
z`&=uS%~e~jEs^)9tmYH>OXLuo53lSfgjA&P8`3x)4@I!H3B?*uj<JkTSn?uk*@EJ)
zP25>+a+k$c-#h!7>R`N4PHV=&_k!)IO(wd27WEwsrmeljXO%Fll}*1*%S3~CV5Xvq
z`@*1nI31A`aXjIXkzLjXai!S3xT0+zH?*21l&=W=9A5$0$!bX?llOx=o#_r3eWH}s
z!?NYbQ4x{wlCKAq$_Nas<#7rmso9skRhGgw8Q4)Iv$K*}D!(eaeR1>Qbbss>3;8?T
zhJVMIP{)uaph9urGIWWz$(?(bSP2Re4^6*HVptxc=<`k__rCrnpfT$XUK(yPRUuYx
zn@!w!${`B84J^7)Qlp|irNs(~wZEdO(L#$9fW&E$kOl*xq&b99y58M;`+OqFqdQuJ
zFL8d1Q&3k1(<0bm4Z}a{d)EUjCA`cER~V!weO&1v3dX&@9p@L?S$<401;3!SPF}@X
zZ~3zvcC#p|*%z@_J5-hf*4}Z|q@-6te-sw|Dk*TJF<xvU7Kff7y<{<p+hPZr<KyG;
zd=YBY`5(P=@<)Ce`OXAWhYxS}l%5hqVxu6Th6Qz7`Fm^{ow%iZ4@3W^WJ=(ZpFX&C
zn)Btd-SyI2S>Z!O#sT9|``?dSQ*V$yE{3vDe5s85?-yoK!K`faJ$mp+(m}`h`b4g3
zOjXfD=P_D{z2l7|217+#q>oct#r5N#vP0Gt{=<W$bU$J4N+)O`ly6PGaBtz;oL+H#
z_BYPG*u{q{4xVQdO2QmOTX(<U8nr&M=!%YNFE#4nDVC7Y<|i2#MM8VsUjm+vBJ-I2
zD2Vv^)Rm^c6VRT<UgX;Bl2dsetaqJ0Pb7_oSF_pvRrld|L3JbfRB!P82vGAfxC3#3
z!J@~~W9Ca;NP#MoYll#^cJ;^8xri#GC*~dh5re0}nz_H-(PKa7J=DES^AxI@T-Msm
zYyV<}t-VdKkU+#&e!5@k+~HRJ=u)P-A**5J%Xz!;?ctxd&ZD`JXs%B9bvh?H;`^y1
zudYL+_eawK<@u+Bvu4IBBXV_{;__D8THSLsn@voV|6V=KwsNiM`xF%BHs`NJ#!whp
zKuku30g}r4wFf7-fdZ2oU!JQzytXuJ(T{HrY<@8KYpZ(^+aAc_N80p(CFrY~5=7k}
zwsRI-Ms4z$+(%k$KH|SR+VAT+Y8SZv5i@(WzjAuyG#YihpS`diECzxfeGHg=d=5lP
zc-;TP)#!z!slk~Q^Xxk&bTq{hQe&AB(8T#VK9D9DxXtN6h6U^~UpCzzl34c*vQXTe
zyesa=fu&&#{cAWlO{khbH+eSI=v*u*u>A4p=Cx4HBhls4rJ(5d2kDf{qp$=5rb;6Z
z2D;oPN?_>ktWaM4R8)oP&)qjO&iCS!gXYIpt#%XgmICNV=3jgun^{&@xi<C|Xge>p
zz8caL19IV0XdxAXQw+-Fv`RsoJ<Rz6r7bFz5BEg_qpeTEf1WYNz(H2caL?ZtVJM&0
zWl9VYZwpZ{cQ-~X=yRaJ>2<laH6)|^s0^4k&-2Uq9Hsl%YoqSp{<MEHiH{CF1|wz7
zQbh2mau~&<!Im_I2L~ddQWoC2sA0Y771IrS&bqDkfA;=Us=+Y(^Uu}^Y@7;%t2D<y
znc^A*o_sMi?Knzx)?fXXg`Gw26cxqxhpt2)>NDp{b<a24lxt@#&X#;H#x62f<R1AS
z;c*Yz*;AO3Y~oU(QJJw{^nkHB-`RQ@WO&}l&#h;OqA~rdL@C~X<&Re@o;*GkbZvlZ
z(zw>}JP_1PAAAA<;POz?_x3*ifwAq5QZdjbLUCV!LPI$>;&ZYxo#i)t@OG0URyGQt
zmO?$Vx7YUXFG*nSfYxHJ-@bPVtdyK92_{9xfTRQhHgOYPx}ARXZm~7psM9;aSdNa(
zOp9!SmU|hx?<<R42aRsEo|P4s+oXx%LupZtVrdyem-P2N3$7pzH1CiEcDRFR%mYY(
zq1pNIu~Gsr8FrnYyY>8zAKt`2Y|%2+uJf`HqvM%|WhPMa(*k~t(?4b1B3=-3p5l4v
zdUw^CHPo)Wj;~@Oj_I&);B{xG8fF9_`!Ce=QIt%i03JE!zfkyZ>k(8qy#l$KSZa=W
z!Z4Bh?YI_2ZiALz+>12v2&15P@kkz0z@9_2sqyOvQXVavNC<%-Yp!wKUa8UZv?edb
zK>_xy9q9o?*TI-Lz$YW;0O9F<+w1?}`8QR^ZFO!(1qE1abds<Nety2l@#ERhyjG_6
z0R5fI^VkE1`W-!LeOY*QO<wh#n_L!)!SRt;8F4IEj8~OL%_jrTlU_D^{4dR3i|6IC
zj`2ce29Lm`iLwe@AgEf~Y=eb+s6^iz34lhEzgnUBW;I7_FsrvZV-VQF%|3Tkr{-a_
z4wh)&&5Gz0%0r=iL0sTlVZ#BbM(UgT=1)(su`ThnOZN7`R(-y`ywQ7rg6VKB<h0`<
z($8;gom5IO?~U%ho(kJDnhc9GgaYCX!z(hl0oE3|b-Go&pS+p;x<!G%e<M-r-xi?`
ztiHADl5`E&3gLG;Sl|n!h}&WJI-^xbriDXFjB$wYe0F|nTg(ciPkhL-e>>eir4lZy
z?R0IX-ms63Pgkch3j+GsV{y8m82G9Ef2ReL-<0V$i23?#6&>>%##hzq-`N#kU;28C
z^ZKLyxO@+;tVEyJ|CIigC|!?-%W9d~>F`+4ix@zt3KaQazchFSg1z`a22YUAR?E`H
z>bHw$2aP2cCHcv|KH>VLV3-%>^7iwvRgv;VrN%sTKuLwGDj5eaNG{e~>qtZZ1<1Qu
zh{u4x#S{Cs{)+@?Q}y$^H$*50|9ecu!-e6ISn>+(Q~TQX-I`D<$oBV5jWP0xJhf9F
z5JY-F9Ky0fVC{w4hDLjOn{v5vwxAHRnpNp9J}^YM7lcp^zm<ixg9wPzv?W#f&V4A)
z6{+XitM*C?S_sQq!Izz)uMf5D9hEUeYzwVIM)mgZ<haag{zBQ&-zd<I?>Wqf<sOfC
z)ap83mz1ILO}D)F$tAw5r+TE7e=WZL>#!`=8q`NC3_j;{n)lwyCJ`&=HA)oVU^Ytr
zR_oFGNHO3(U~BaHg+R^W+=h_?F*22DzIc{?i4U5~>sPgMNd?rv>42$O-0#1;t~wbn
zkpG$uLxUqCdB~*MKQZc<H14KLe1#EQJb2X;>a>aRRB1x4F4VV%k(rJcB2GK}OWJ&4
z>&v3OshD&pvh?aMjj{Tp)n{-f;Whlgkb)Ug`(3u@qGRiq$T&s6>Z=5ZVjjh+?(3|N
zm(r(np-}5S(s?o^mwBI^HHMdPwbzLEYw+`c_PPEetHLzBI{Dx42f7jWuL|6*LURH%
z2f26H1fGlrI_oxiP5V7DGBTr5%9dWc{~H0Vix1^+2O-0&8mo3nxV2?vpVNj%<=SHR
zEhDVXa_klCAc6hPtLrHP`HhQ3nWXzz-g^2%jvPLZx0-&f1UuhV*xHm<vqR7kgvb@D
z%*BF=B#8|IjN<*m)_e5KjQ5DjmRUa<V&Q1K=op+|N#fpmNpu(=lOTYrscA+gUPB{|
zql;uiJI>oo=64D{=)l<2#T}#g<nQsDkH#YZO(>~NS-wj&V<F1`y>e0|CItlwLFvvz
zA(Qm}pys9|T{u(w!H!6q$G_>qpidr&z50|D_iJ)B>}uYd;!x7&egTnk>q}2dIl(Ha
zZ0s)Fwtx3`MO1<JlLFXn+#rIp)v3{pNbU@L#x0*w1-IMjO(T2i&T<0<N~*^JB|p$X
zrHgwWmb4v|0r?L1W2m2>8vbcfbCee!Rw~BVSP(M`Jd`(ISarU2HNGTCe}ozz-hy5-
zriF--@{foJW{O@MJ!>Y0h^iBH(POkCqtUpV{+rPHK!}+UCvNg)83UF#qKv}(h?N*6
zzfsF49xv?+=zh5*h2(tv5uuOdAyKIA2IjQGAp)!R!|Rnd0;lt0gQl(dpCMkz-DC4G
zsgZt;RAsODR|?O_^}+X>m$o^ASd?JMm(M>8v$_`at!-cTGW=WaFs2YLooK?M%=g?m
zi;kAQ%4~Ic%a0urh5^+W6)?IHkWpu$VNP9T(YmG!^1+3Vao6LRKXiD8fABJQx10d|
z+&P00ij#RLc`&R>B3miI87lFV(}Ra5OC_C?Fr~U)&p{>@p11+Fbg@8no*(Z}5UPNN
zP4U9N3kT~m&TF4vE$2Tp4i89<BVIBl5r;N)c5bpFKL`PUL8CGYko+5@VBdbdxg|nf
zSKTqc-00o;3UB@UUM7{Fp+aaR5JXxC4Ssmg3Lr{bWP&8$*9qbS24}u?f%+Hxpg&|&
zy}o}Id(8~=fvGt*O~~YIE~x8`71GoSf6Z=1AQO8@AMhk*1UvODVsaPxvoUCZ<k1gv
zd`VI1*c@w#0MECh6%fvn){L*}LkJ^K{R@Bp0cxroqL4VhhC1YN+X0iTuEv`LiU;6-
zba|0v1@_^LNF)QUQ}%J_VV<N2eI-6*$@02n#^iob$V=P2T=KqX04FFclG-tHx_osA
zS{atQ_AOb8#|8BK-|TOLo;3U{0KwEgl<p?Eh`b-oeAo))i*_>L8~gf>wcYO6I4kn{
ze9LK?3ICJM`wlYaYMlfIhrp1#tOFGLIG3B7H(xq=Ca+VjzD>qtrE}>|1xRRgN@C#6
zCMi@IyRYC<9gOT~?V#%ztT^Aa-}`(h;a1@=u+H*5Ta;S7q2e|HGfG5$|1s!h-s$}d
zIidQ=zb4S=5trD`ZOR#n`|kfi55k}O;r~Yu_K2Dd0su?Y|LDO(f8R7Ct<+<e%J$J_
zNt}0ZFcOU!egSP<hBg^C5taF$IP^;Ya)Y(fzkW~_OCYDA<7%lT*J+`FJBr|D{u8*S
zs&dJ`k%@^}?uVr#nmP;8@03K)PgSj}Wsgha{Rg*^O3k7S7p<i2E4NNeul=0XQ9Xz1
z_HAh&lnsembYm1(Zw%)~enQVjFWGJH-kWXCf4;<Ad5Z&TRy!5a1}s}IuDb(`nYsX2
zGd2j3Tpy58!SQxdm8mPG6^aPe#j4VU@b2*ER>jtJ3%sN%X5u6nBZiPMp%>)9MNx7X
z^Tc2$X-UGH%{SxqxepH`xAhA#HB0o@zf41QNKI3ih`S5%zbj|)n|Kf9e#-YI*r0_g
z*OM_o5XN7TN{V<V&+Q0;&`p!?JwHiE^FhX!FmFaajS4>{y9<7L5r(AruoCx!6`NC?
zsbm&|B^3&|j(oEiMH`RMI{yJ3(9V*`lJGL!;Rb!5A(*}m{1t=#8M|9I*c&tQF&I4P
zec8M)^Lk}A0hQ;!XCPrSbO|cN8_C6XGD-&i3SXrSVxa_zLKpM>i!$6p8M|CzQsL0r
zdtyZ3!Q&ziYmLI`PpOrK=R0}PQ8<79!}>CmJ&Y<1tKNjKIpoPhkbG!!^X>D%8E|Ya
zgt1O@+T-zFX09GGJi5<F-In$rCh`HUH0Q)~eRGlp$2QD`H%PEsOInLYDr$O}lSv9R
zi(Q*A#r&@{Kj*nLevA8FiVCBev#TQ!VuFd1rgRqnz{_KVi_)ec3l>UOPzz&3T}Wh(
zzegtAM>~4DKMPD_V(<wAT}sK{KbPnqVaHz>@b$QOyg6Zk(*7f?l-Hu+>yc@5)cl0I
z7}#?rmVwTYRz^XN8AV&Ti`Cjr9&Ijvf4RT?vafd8iRZqdiS`91PgpM+KpX7#<^-If
zWEpV1Z8c!5#oqJE4H|bdr&te$5{e%JqZzoby|MRE@-NNZFW(~vi(g(hsWCo&o0Ekf
zBq;r?PAKQzr41A)k%$!U$G^$&Tn;?*C=~H0$nT!ygyAiAa9r8#sR>nVHFK(uNYgn6
zD`v$ws7<z&HdJ?Vcy=R%l}YUFH=cY3vJ~acbNPB=)}sa1kz=lrRhdZ5CHX{8pJx4g
zJaXj{Le#`U-dVvVKt+qFee68p%WVgLb%L%Pk(47QeigjMMWoCB6c-0aO58=+CYOog
z6b_J`vepRCFZi7&?|-h2*`IOY_)(N(#%qmF)YA3r17QmB5BiBagZa?{Ik(wj1$2rl
zB$>}KamU$XW-e=-G-Dbe>VK1Y<XjWYb!6SQnB~qJe|!P(uf!0L3`ZojsGuOT*I9-=
z6Srwy*pV7O#dw;zz}i5;^}7+P<JP-rM*G=_+yJIY>UqJKowk+DVI3pd%K@*dcu-je
zgzy&$4?6aIePj^DIEaAj#vnK&5sBoNELGD<Ge`Wi+2r5M#bLMc4$C8hpL?n67l(Wf
z5=3F%m_+CRD5#|B8pl}A{i+PCbZ>2H&Pjn}5ZsITTsTA1{=8^cd%JCu^8?+m<f86u
zSYexLw4xJQM0|nCYrIAQ6~JS2Bd6f}r4*wPsj~FDj0#MT!u*LQcx}?FBFYZ)g2nOY
zoh}yc;{8EqJ`jQ@9~{orwHndsIyY{^m97H+TOCW^q>JEYzha(9RwYVo!FuC1eESl7
z9~1NN+CjAQ<QXTj5&kc+E|$Kz?$%mmZgsk8oy2+mD=-$N34ilh)tf%%FQ57zXt(<7
zJ!6otQbp#w!@-e(2T+|2s|@eYsFt2pJ3b0Z+&()@Huyvv;@51+Xy4wqfr^fcsMjI!
zQ8eQa)DnVD|G9%#DUOVUI_ZgXvdG5YF}!k-T6<}EDlo{Fe_7)_Y$EduU!fdGl4Dn#
z%v%r#-Pr8Wz$7EZRt0%ML20Y@qDX6aKKdyA51;m0BAh=Q71kQIJ+z;FOQWeisW^s?
zeP@$?+R35dyHLVGW?~{*p7_rYrWY{`o5_sB{uxygL^(Km78vZOS1oCxO_$R)xs*fT
z*7r|YevaWQ>-KNQTTQfRhBz54uXVrX;Ub?K`P_CtGzvc~h=@G{t)sI;vEErLkrkp6
zN1yyW01u{uYwKYk(a6Qr=4bYU)U+{j?pw1o?dv3()053sm7q<yD$Mb7+*@D1vfq9)
z%eVLbhle$F*5U+xF3ahbR!ZdGa(}|(s|l8;3aGm}x$pUP>K&V0IJ@U#YU(~9N^ios
zGHNy1f<J7B%uh?oQZQwtWh$q}U-q39m0zsXka^UWN0%UJ9EgXoWYt;{k>AL%8~6{N
zZ8ex1%xdgK5gQ9#H9!kk*D>DSX)w$3^`ziGI)ER|ui{jmsvh}66sMv*%;S(Ztl_sK
zCO(IY8}AASt%q_4G%Vx~Nmw9!rsloupS`O)Zf=gVuGaE#6C?s+ai|OPxb+(a@NmGV
z`!!_Yn5z~y@fbs5i&yDl511Nh$Nc!QF|g;aTv~G7VaxGmK{=&%-1X7Pr2Qm@tx4k;
z8TEay>^nSG?6>uhicx{Q-_GH|4tdMMXtxVqkGPkTN&Rt)$w%M2mTni~7EJ52+u_Nj
zxkK6Y%rwQ=bkLsA(*ga!NF(vnukh`bzg=_zFW*VU&B~rCXbC&>6s^+YkxSf>yo=Yg
z4(CFho<FyO^_p6v1Vz@o${bvxnqO^HE}$I|BeT9gzO#ARSh%Q0<(RDDSGz>X^lWof
z(tkNd9z*4jv|O?nLG}#S*DYMCOk}ix>fF_t&bxc1X<f^2WR`V$mfSRskYK^DeB)FJ
z@ky`XX{#1N<-SZ~vR%}XwsDc7nBT;Vnw##LZ)Gu!Q2sP@C@B<9gcg5@Bh0r3rZ%q~
zI-Qr*RBy-(M5m<Vyby{4yg0naZcnuD#>6s*|6}Ew4T<^ClPI*8l+GES6c3D5-Ps`Y
z-7F|+FvTnZKgX_r%6PH?j1-G1#!pIuSM3YckGnA?5nt7MH93F$B{g-Oj6ETs$l#}z
zqxtjps|=PJh=3;7MMA*=>)YJHk(A1Cx*Dw&o-O&3skJo)Ck$qIkqJELn16h@ET4I#
zM2-b`X>U9NNr#Paq=rZI-tO%4*({Uj6y;p|F<aZQzxTH}x_T~U1i=m2BkcYZ(_{`a
zwEBw4_DHdjWQ4ZNeyb%5(eET+c!)1+w(46)o2C^Z|NV07T`j515a1Q}G(1Du%ImmJ
z5ixfYl^dY*4^^tHtkor7yi-Ae0W}yVS>;e;-ro<cAr^;pks@2*U}tV-S(8JiSTNOs
zuBev%nr6HG68^XPf*X1AE<{3nPuw!3BCPzamh_ji>rJD<>52h%836!Oa>6k^Y%pFl
zChjI369rNz&LyM;L#Wb{(n3zEAkNvn`riJN{5y!1Ql?%;9eMg{m0_L`@try@)Hy{|
zGlmdFz7VL^P?|UY#?|-nE6w@6_3SkA<_+0kDHcdN)Mm}TO6M#86zz@Y&3pt)oOSRT
z88ogadn!;q`Q#yiT%q_{Hw?W1lLr11KF1(5B8#b22|Guj7k($7N!Wr>*4|r$JC-4V
ztc?ktF9_|y5Qt6LW;zE$tVw&wGR>MaGp(&R-32$#d@VinbRDkp({`8VZ*m%Wf;-b`
znGiYZQ4ra0BeE^m@mA$CgfY_WUZ20?S#Q*+n0NhY^c)!$pJt19z(+PM>YaIQOrvb9
zJthe?!ul8Zj`FGB8JFKX@N9R_me}L5UY1XAWH>7C8tfHdT*T~W)=|1!Ijp2)MjB4=
zHSOiK+zXXjJ&Rrky5NM$ChH3&TUD>IF%`~>6ONVuWg*yAw2oO1jb3o|uNSoUkTS7z
zGVkL(mChQg+!?vErw{z>i0!#yOiyHB?@6q@*kI6UY#n;osL(o;@FnoXon+7pP{vo&
zo{~(QmxN7)%z??mWA6Ej6b8{;j6Qlh<)xcG;l8O)Sr8Mhdsmn4oXJ(K!sC;pHWdik
zq`+NlTAS;hvFG?Pv=>ygtJ_+|i;bG=@nz}b_Lik0*HF4|)%KdX2p#`zWFiwcJ|7B0
zRZFhstEZ~ddfay2Pl`1wvO>_?FO+xFHR*u|ECKl}{_F=h9UqQQiyM%C9kHLoWikRA
z88yXUzC>aFGT5<EXVbxeeqCoaZ3s19vp5E=`%lh1@`tu?QqSu5RSx$*=2a_039v6*
zG2k5!w><_8cmE$>Ul|Zb(}X#TED+q?g9LX7?oM!bcTI3x+}&M5a1ZV-3GNmkBtUR?
zyM4dA-}k$xXS#Yyo|3M97RZ|Lzx#DwR+dz1mVs<e?L#_jmUNU~cjxzd%-DZTh<)Bv
zz5^Ha7)XIvqe!T+Xn7eF$9Ni4ScxBS^VQxrsa))j8j4JF=Sa41&$7E(Qs9MBnX>cl
zUXH^^*Yq&V&5jsX1&igHWmYhb3Q^lf(wM5QBo)mJ+jou&<o;(v_ET>;`EKZG$h)qN
zLrEJH&G@FYR4<4jk;ZMmV^cVa4&HsgbyqbOwA|TD8K9@!8!EMgug1~=g>^{c^Si`T
zg>^Ux*Qe!OSfA>&+?t;Zd#oECZdRFCm1HjDRI=VSPWK!r<sx^)?zXEgdS?e4q66G`
zUAM!6pH}mSV{{`jBoZ<j(ewvaw3+#GT1$%0q4fw1vi>{#*>iv7kQhh^s2h6!-VWQp
z`3p)Fr;GsZJH|eLvhcHG+d~j*<ZxW=Bm*X*IeB=0$K~Vzfb=|_ebnQ&$0q0J^|wv7
z$!YHJDa=_;MU!|o%0U^JGdM^`g&8<3x<PTrJ>~a5_pRsiuQ}0qQbY<|u4;J3bg!Mx
zf=6a(4+1Jp9kLb-k!MLbSh<}=@YW7a(i71u^p#qwmPPcH57Z7VyNxHKlZNeIPON*~
zC$nQXj6S(0_41v@^!_vR4o0P%fM3$t8G^4(nVYp=_Qz0Q!m^rFWkGYYX+mRTS(twI
z47@$=<@)%@@}Y4v24lA5lmv`{jY0pr3zeDAQXfw<ohv#CoH2lrWn07XlKJ(c+1lk*
zTtc3o_kOQ4`7>lo-(k8V>(znp!5*f2(#ngBowC+jbWv<vF}+7rWqK)d<><lF;QQky
zY%Ndyr{|weAFr4=_MBk!x^k#?zEcr%vUs(?fA$2I*CTuf>BrQ!6J{OEC*}#G(q@EI
z%5M^Fwzwa48hyVHcdpY92z!}`&47niT3fv{wsA(I=@?7&&badtqjiSG_m0G_lU(@s
zM@*Auj3B=9^550^v2M%^^Vb_xE~a#2CcO3q)ypvADZZ%8-a$oXmdlh+elR6q<w<S{
z=XE~V(R;y-36#>^t9m6R#GK1*Hdr3G8yI)AN|h9({;ZA8D3=U8>!-`Kp9l=u&}6Oj
z07^G-3g@!l>CE@1$xce7uTWvo&m}YgUida@ZiOOBRFY)5EA-=2_(vi`HNEh&SRS91
z#ITBBegUy*GG8tA1)00`SnrxDKJ@$zPV#qRfH2C(F6_E~_Kj%1zweFvGT+y~KVWC0
zZ!3WiSw;V8Yxxs~uPpTE&Hs0T9uvn&jfHAaRbPnXg@Us_Uk>A?k);8l#fhshR-}EQ
zw)*0F?C-Wi^0+0k&sy5ry3&70?1r35;@yH2Xk;Df(j&Z|*4p+qEU=BG{CUV-j7dZ;
zm+ptAb5}TsU6&Zt#l51;%Rk@z?fFF&1D6=tMmYJPIDfqtGjDu$q-)#$^;m4i4AbBr
zLuQ(`aQ($Cjs2_K<G-8Q!&f6s9`HjS2KKifJ43-^ZL%if0p?b}Kc7g>h-;e;P5TTG
z7S3pHyUDCVB}Z4=Iy<;G=FwcHQ0^14I{scwROKn}%MNS%`EJUax6Fd^cZxZmTZGxf
z-xiuQb&!VJ696(bMH!{dAohdQ5*@x7fBl3su=jCyy-xQ^8S4s0J5B`E#yIi2G;VTw
zxbnuY%IIbkdVc^|TWXEFf5c`;KGgg7t(C>Eo6;YsB)rHpV9l;Xc3bMm4%8ueyZK>>
z?$Gskh|EFmpnrZ;n!cA(wI~}Ek-)l?0K%72b$n8&3plxX5(3|Pf*4X$CIR5A=O%Z4
zrE_{E_C*0RY$#x7W7D>>Gt%KZt?*3_x%YJ#m#MdobS58CVPOl;KipPk#D#I~*xj!8
zlX$cl_YZy2+`V|+vtf)GLiG(gOrfotKAv$|XX9Wz6C&L|aGF@Eyyiak1TCL>;ed4V
zZr8tXU$4DXREnxhPTL+|x2km-Z|l0QGQ@A%DV$Mp$gn9<5#d;c$JP!u!|-858@~HX
z+UK!>=}Yzlj03IYTE=@QYdhr7j^7V?a<`^`@Oe5R54;{02kjMqwWbH|%WrYQ6&|ZI
zkg$Vbkws^FZ={aB9#?rmeYnI{39l&1ghe`V_%TvFFNfTo3zc8A43f^kA5(CuzGV&k
z3BpQ^#Hq%A->b`2Z2xKOw0gg~`%D3O-;1snq+S(y__tkdF>Dn|?;VBem)R3-kw-Hj
zqgp9ThNS1m&&#<50>_c$Wkrg`La8EVV0H<~ZAM%T<IV6NF{~B0cj|v%Mo8n8+yB~c
zZDp;!Gv93Pr0LyoThbhQ{>YPhH_Mj*7uHB~`H7cY`l8Co@Odmgi7P6T4+fJf`h_ky
zH?P#lf+LFDq9)Gnf}dP-OE~i$fP7K|Y~0#q%=Ue2xFsd!mx4opA(V2e(<7O)@Hnpr
z&jj-$bD@=svNFuO+hhbT?9lIJ`xAr!MBLQij$4PQTBqywC)R;C)#DQdex|D~65ORx
zf4Eh5$sQ`8vanN6?6)DwV3(xuExG6D%DN{z3kpc{%o=lrDmSgF<Ln!a^4kAR9W6O3
zVJU&V2j^s5oF6s=;{I66!MPgOX|?o3=1mJlI4TQ9)g;`Q96gdb1Rf@o_grHw_$D?}
z3_=F>VPLTW$$;v$F7FMs?;63W@-!d5;7<IoUlzpaY!j+&Cl7x}MH(r`Ppm|41WP_k
z1ETwtrUz_JSJh=362Q=a-}|v_#RYQZsnr5L(b$A%>;_Ngr`yH|UZ@jOx}dt|h>uxl
z7#4g$pYdlASy=~Hf4-%=j-hhkkfuhr@GoM0OTdZPE9je!phklVsQA=Lq<Bw&S`?}n
zpo;Ocwv0D+blbg9M4rEW;&<|BJ0scK!!#a2dPlCZ$F;xszXlIMf7U97soFMFZ_j#f
zs=rG8ZEV{EaRuB}Rc6i*kROH9N3%TN&PBX&r6PZ^(r>i?`ugL{p9Ec_&CMhw&xn<Q
zQ1SlJGl=gJhKm2COdBu$)1#7NuBEyNmP)Xn{Y5tVsOFn1F&p*AEa_qEcV=hs6cem?
z>y8Xa5e7$Xk<IT;P=KV-Evripz2vz?o$tyZ_H<pTmiCpGo7Ott>x)~nPSPK5-R0Kl
zFc8#Zbxk_a?qqLrxGhvULcS<`Bt#{R^$S`+N0THgid!vJK5@t(RJXxvvdn)mFcNif
zF=dv|UA7BG{wiOPgCB*!NFy!=)S>XJr(6o`lI67+uK)aQ*8)qKJAU`<wClD=Mmia5
zaaBtTz=+EKLKPq7@lo!OtY1hdq*7&{!W9LW^BFSD^w_!BhwV#$fU1^T<ry~wzlIej
zZ6?DfOZ?%C6w2L_9@oEHW$zOAn(X!gsOXDf6+#1Bz+=Sp+qJuiPfbiHBs~8`KDWs`
z%KozV)ZlSDA%=P);)v<nx3z`q>gd2E4T?{NR4Qlc;&ekxV(p;zL3EiT*Uzpx>s3lu
z<7I^hV_EyZT1>=dW>r5K7@&$)ESy9Sd-#sdMf6f88BK+Yc2$je5F{e@jS%SY5(7Sa
z_~8conQ48K2kmwc<dEv!aK^w?o9E_$w+n%c8pEty*RP7<2EFas-t)Qm97`m+6;kp;
zlHn;`5H@K2r2`Lg&Sakjhl#z|h-g>DXEX}_y$R1;e}bi&^@XwA-~8CA=^lYcb2(E}
z@Vc+j3By%rTP7*8-3=CgL!SYYtH+|6ban;E>6BB#`yHQJuC@-XB9;kwp3070PbR~w
z199#CRQX?D<Gt$+Pt$Gb$c%-|0*KL^1#lx;yNM$5+&HXq{jf^&Tm<#@$znDps4=*B
zL#jz5iNsU8qAdm$$xLU^fV{lna6Nu^TAlVUla8vxfeTi#6|J*mSWyy)fECd9LFSGJ
z0*W@lxSk`%p9(*OA@}8)xYfQfU0N&O37AW*@h>SKe*Y@Wub|kh^B0Sv<l4&wB~sR-
zyZxw3d*5Rh(WKBGRCunmicv}v$N?C9xgH50<&*#BWDGUC0_im``)ymlu=ZeJ|0Sv^
zi^(zP+0D!Lm@7&$mh4A2>h~=*l{+hnTm0IHv40)Up0oT}XMq3pduYRZv04S#j}G@A
zQoihNz7RdB!FlSVjL~p-2?I=RW+<*fvl2hU8gZbZjN!Rvg|G6@-E8<eq(97M<uSsr
zvO(Lsgmfq$xJQNn$Aflp$+Gp>u;fSZHK`U4oTf%@nZnN)ZD%>jxBF=I9lIJTBQ`yn
zPeruRq>_K9JKs4{s>%_4Lp%isx74s!F_^sf3e<4#MdKJbW`$^Ysx_$bCI3uNbwKyZ
zT$>>{QWj$vA-YX^8Z%VT77@&?5h3w#%FN3Qu5Fq8h)y)vn1^5A%&GhogUorrKnMQ~
ztK{p~zAb~bZYA!349~_%g3_W12~yMEoCY>g4xm`a0-*Dun~A!8t&q<|S2VcV(rLf$
zulv^W+9r8g{2)}p3h0}k6;XHJi9H0vluw2;_hcv|K-|3jf{JDf4L)s*Fyf2M{h?})
zX2woBHO40@Iy0Hzb<w@LbA#jmB!%FEqzH$@z{5pb*|xQF?&S(ikEF`xx}LPUeS8=<
z;#n{&layn&x%}2K%J_nTIhOg}PFAu<Yu@Xp*5<|Y)fHf}$40v(`E?`dAFQX*)3%}O
zqCfit0=V%>Rb|?d#s!s{4OZq1fj(Fzm}9>Td8U#hC{Hi>v$0guUU$Iu)Z4>Yyg0sM
zyZJLV2eP3d4AoHk`N53KB0<VkfXY>r*e?-HEV`s2c7s58RcF@Xyl$87?qnJl=4idq
z&U|+9&UcmvOu@W+_HSjq1yk&VpVv+gZcA+OYx86$`%WoY`0T*+F!Z28lxdB+{*^OJ
zV-+Nhpo-g(g09c2YY22L5?bO0>S-qp*SG4l6T`MzE^|c_V#Nelqvxt{+7$!ZRT%pe
zn{*TX)ndZP9<O|Wm*1Zm9uMk7i<jV^q(_fi?(@3ZjfK#N8I}@&`JsX#)q)O~*qjk8
z`AZT)$7Twmv!SFCFpW;EY}GX{j(&RhU3yah&15WW77&z_G<Hu9>GLicO~Bork3E0_
z^Gj*WU=4>3v4RjuO8jaEKEY8;fFP*fmzBalwBi3CJrAo5ZvX!EdHWl0-pzxex{KpN
zhL;(xiR(KI9$3+7HrE){BS7fN7YkdZ{ex01X|FohxLuf6Ma7Q@C#a8)3LiVZxkY}6
ze0&f@Hzz#T-5HK%fwU+wbaO?yh^iq*1w%u^S%{*H+40Wu173d?;<s`v5hsptO-;n1
zP4C1RT0qqM-%+eC63&gsfQE=B630@Tj<Zqw-+meF6lb%MuV+#5ZmW!Kfdw8vO{82z
z&S6At_onM~Op^BSdCc+#gAmu|VIS9ImQQgO?bWr@u|PYRRfn9wOuDrAT?9L4AB5U3
z*H@#+j3eAW?fwJRT|!9HYt%@eJkmewnSW157)j;9ND=0@!AMJi(g|)KKfXKFx!gwo
zll_LCBlk{O_5zD^^O^)m<tI+VspQFzjMVwjTq3z#X8?s&`T635lJ>u>cMUgU`d<T%
zsaZ`#ykV$d&I}Yz#zlB|&EmdF=@%)1Fo+*R6S}8c;HpE*w7T~5U%4tA%m@pOJpSrb
zB@6a7l#Nw9QrIgQT#0o2$>!c-{(`I6zOk}52F!d}NW%GK53iU_keclWTPOAaf&~@x
zf7glGh#lnM^1O8gAUo$-t#Oi3@@h=MS_a?uw2L)xSe1iaI00t7h^>6{dYEK6kD{cL
zsebGf!m9}<+RG%#{A=u$;Yn0Usz$xN2_$`eJ&fZOka11F45lB6Se|leSb52>krX`;
z8jOpH=>Uo=?binf8xIHn13n<Z<n{T3GnuCH2YtCJ5%>N@I{#W>3GesGUlveQ$Sq_w
zuc)dMkSs=0hpQP(S=gGRpVkax$e-)Pi%jG-vPr)GP+<L>d}BWU8zU-nIq3FMbZuAg
zmn6RlQaM`^W*Q!#(;V=U$_XUuDZcB-$uD0l>xlhp{&g8za>!7&nt|99=k>4a$BXC~
zn~Y{FYJGwH;XC5)C(j^69$WP~sIg8WmoUqS^lkOcUODxKQAv>v!yI0x!$q2vQS^(I
zK{A;2RSuIapp}pf!J>|+1nWwu_}T96obJD~JhzzmNxAo)q9k?s7nZQ}y*yq4TD&+S
z5QE3<v-owSoM%plfP%1HBN*|Xa8OVWS7n7m=EVt{svSN%R*-a%UpnUT9s`4mlMI&D
z6*)(uIPE0Uso2OzaYlrO^UU^dr?#e}4OGR|?>r*#E>}g5HpVv;>cBD16ju`1lV4f@
z^2tEw>BUG{I5(EL8AS6Ykp5+9lq35HQGZWw*m0`99TjM<AzxGHRxJ-4r)r8A;v0Cf
z7?{kgm4FL=zDon#mGh#XG)cVW7#+juEIOW$eAbuo>o(Qs6?abS>YVoc6nJcYogl6-
zlADOs^;2ZeiAi9Gu`j}>swqJHex5B}J6lP}e8Vh%p+>rQ(THpPIHC>AxC9)An<y0A
zaM}m)c2&`H)u3)@<7s9;XLhl|L=FfbxUzsD@O0C{<%Fiki~aBP#O|&QeXdq}xzbrN
z&Mf}@D15&}uKg#?)3Dn^LT!BAtIn7-FHZ_aUOuOFdb7h)p9fLGg%%b&oXr+4v1XO=
zT{#uTSy4ksjM=?joM)s&U~>y0pjD&CJ;6)9Lcj=X<7?e{BHe0UylCOlU+)T{#nv{o
zNb3!iyLdc_pUNkb&(%3CfjD4j+eOQ#v9WnGW%+<j?%3E4L*9ET5r1U^yemK<xWysZ
z=IOxqIZ0U7SCGb+e*=j_`_s+Qy-&9^Rld=~R2epI`+sZY6;=!V{CMimv3zM-R#Ker
zFe!+bmJbK3aByJzigi)xaq=W%byJjNa)J%F_%Q{i$0bkwu{4oNigB=B;eo{zd0K4!
zIV@KUBPI8YK9^{++Y4Ucy)84j>AhbJEZHA+OPsJ^UDuboC(*W1tJp(fyJZbZ9yXHY
z=QF*TOYHZ*xaovaXyxEQplj;}L>&H7Uu9~rO0w6E_QwZ;4CeJso<z52=((1sp8QI7
z6sp&enwYcNZ;py|nhr}RDVk^9UfFzGcv9@(_it>Z5_cdqc$9lwaJe?3bzU!T?L$p?
zmM5dE>|B?UMwBn^tUQp(G&*gvAmB5RDRS2J)##;?u%%gZB{N76xCt=!c<nI**}6vc
z2~>haO|e3B;`;8pbZyOd>WrRd6eynitYS;ugAbk#9Y+{4PmS8|llE^9x4GqXQl%XR
zmeQ9e`A>C7JPtp&4cT7VKFZM*K4gByY-w4F5dkaq{`wl^q|Jo^5LVHmpxX^BvzsdA
z>Rzu4r~kZ@#kaT-f4=|^(K3ae1yXguK?LyJA8W<O%jeo(7KtQ79cf{6e$pIWlO4hf
z$N&CH#P!Jz^hG7xt2-tW2_|%v>Bey@2^Qiu{g<%`JIa+)wA+O`BOzc(yXc08%aJ9$
z#5mS8-v0GL5!DlR1`3Wv5>+|mFyJwhgwGGE^r9Y`#=J2iHE>;QD}*q|h~R?6W>OVW
z#BNKgO69^fecAC?fA_v%CKh+EIAs{OvuOQWj<b}P|1Z>}%I5!OPj1-xeMXZljv!E&
zMC)6gU@3h2tpU&cj+BMV$CXnf5z<r?tg{z4G+Pc^RN4(_x0z$VFwkK?Wl(h_!-bZ4
zW|0XwQq(_my3c~YUQM#yoTscM%2DP8oHIicH8_TFH9ShlGfM<)P-sIz@-(tVDr}z2
z-d-v1dThmM%_3uVy|H=SmD5hpAydq021NkuOjz2AY1f@1T>0Hj<!Xq}K6IzqPg+`d
zq&O%Ku2dJ#9P+YS6@BiakIoLNT2ph%&xk&7DXqTV>&7S}51f}Qyposg4nk~dvUp2r
z`$L)Bf3TUNs7xPp`j2N@qx^P$@?3C=+$o0x3=Iv{)g&@*;i>F7oE;sfbP0|!5#W8K
zb0+0W6d}>KPWJ~A=K0IM6sBg@4<))4TOC%D3Ba?>_Og1a;6;c<Ux<_Ma}=-1QOx<I
z5~9AIDF@}sT1g)Z_YFAHl!DohTm=$UIFmu%^Asg^IuwGBsv8I;K4+ar-P5|Y;N2v-
z9Hu}9(0(Qn_Epxd*W4r<UlUuWv7KpP&uYaFjVB{w(js~3d?ISHm;A0i`o7d*#9^!D
zL}Xp~z5;nv72Cb9kaE5Y{G*e0b&ot&YS@D%ts@QNO;epVbBSDFdP2Hers+F=^N9eK
z88Ivmm?WId6cLSS<^5-Pv0Uju9F?FUBmcgYhVPdMK-*cahp*G!icBjxV&-30r<4fI
zn;!AvGtuk?b~a)P8o|VH#=MXO^P%qUgSy*!PdQM^&qBQ#M*uRad_aS;7`RK(M>!7M
zTsT$L_577QyY7-du3sKo6T%V!$GlLMA|+D?>wSj@KE1xooM@wgNw6v=eW~I;QXJNG
zfB%SWp~>DTojzy*Uo|jf)W?<sGWjW%j~XhG2AX1a_dQ_<Z>LW1Q$B{@+0Ze6gH;jD
z0`|Kj?{ZxJ>q0}%(dU1MTLW`HIr4*Mv}bSO;UVQy>T`7#%3jm?XKlcy38kNczG%ez
zN)Ra2;QvRsoj4D|s|m&^JPJ8?qp~S=&$cR4me^QNSi3zbcU+HeYsKI3n?s=Be(^95
z70RNDf}zb*>~dJNT{q6ZCbq{w`v6v9=1`R*dpd4*<Y{s~sFE(B0*fPNUn1&f&k8=#
z4=pn6<aI|rJ#I7Lw#lO&{&M<M<Wm6YpD^XrRpEJ>%Mxmrpdv+yAc8H-^*9<sILld@
zvuM53B2ndN?-C{hOCmPvhAKTswklwY_~G=+%o>eTOrUUpadZ@O*hyc~^o;jW-wI`?
zrnTcCu<-9_4k_MLF6Oja`oFz26BG)4$@PiKVBjK4MKMDO_9GKh4=5O?kfVxxG+-G`
zqkok`!dPUHSYW4#qoTu#h{b9<?D+%>JPamyFJCY1ef_%fKzZg|XMwTm%n`|tZ~;@^
zH`)jSmY93*61_YkV&Qa}%I7_CeNfi788SRRlem|gBgTk=u!q@q^me6CvPE3#|0Hgk
zoiGqk4ODHqOn6UDKFn7cC7-UE+ZZ)XAJJ_Ly{IxVJQ4s72M69^AT)ya-N^2v<ZoYe
zw^EdCoBTT$WClxNQ%4rY?SOX#=G)!3@(O1@0R0ywx$ybWKZPPNhXHR0wLYUr#jm9L
z#w&^)wlU*PEmWTOC>Ev45pw$d6?dJZuQLDO)aaS8sqmcx4y~&g$E}IIwNoNOj9?b7
zF1zp1TP%WUEiWY{n;qBdp%B>Yzo6l51l`Qt0J6&>0{}TP>_@nRDK{r)2f%(d%$W~K
z@ovf`!&LK>CNMiD82~i9CLm7}xP|L108?^S#a9M<LOQQ{jy3vks|)@mrxg+chzUnf
zY{AW^N+kZI!xoQF0;@JJ^;JFNb*fDoeS|3`iqWds!J<f?^u5Y5*_+b)TOr)zk(gP>
z8RC<$7N1w{wBD0ok!bPdxYi;usD-U^b3KnC^6PyDaJ~?mfsVBEheBi=5h5IL1E013
z=X`m!ud5Qz_ZQ=7Z=JH~-Ox<GPk;V6#k+D#TDrzT?JBz5z$ay6#eEJ^ESWyBDp(sz
z!qpZ^v^OgI$??UNv%KquY4p=1Ou_QgI$?H;^Pf6ZS&E3*EBUQ{N1GWgk!_G8J{!Wq
z&C4*2eLX9sk;gdLCudYTN>1Pf9@AD^yPt$(L8P3Jf?38q<cVPli7xJmHWylo(trr~
z;Ha}P*3a^lJD27^{_<a>Dagr3uKl${{!!E$hAzuqPwrUq*><1h?f04VeDsS+pO_>3
z7no?XB>4N4mdW1C+2qNtUMyce)=wY_E+=qCAJ($j$?B!sDLO&>*}uYmN_T;~!1Ls)
zm2GULAfZw$U&&46p!b&G*xLY2Zl_7h;Jmc8niJ!PS8hFeg6z;Fo|LE%Ed&A-_;MYl
z%a6tnt*mzvn=8b_1(ytg6A>U@Ygl4}(k7S54+|3WQKL^wgj`C9(Xe}kBGH;sr*HrX
zj9j7bPGU0fUyxPS^PfLC0~hfSKKnIm*S4U!%_m{RLX{z-ZOOuSV=SE_Sv^v4gQ3;U
z<-;tMk)4l$eh&ygQ(mQ0);HWZTx8jSx#vkYnIHjh)S<DFukL*O>!!#ZgEN<8S<DU>
zMtqnZHf9(tVJm8Z2D+xEJ2v)~x~to|en#Ni{taY)VN=)KWsF^v^xaIQS*LEOR3qI*
zK)^7rSX}Ew<cEBjZQWuU_KEjY{^<u<1i!KO11dIR#AZi6bS8oSyusd#3HRMBw*Ob5
z`u}MN4uXz?fd5sn8n~5P0RU^w|Epll^Y+7CTpbOZ&dTbvgxA$*=~z~4USeo`U)ZeW
zc%;>@<#JHG5av**v(@A1U|*#vI@96){r&7xQ{7?<%L0QqR!L2?o`EV(@E8_M5Yyde
z)>T*FdwMD)-tmdttemSCzk9!Hj?ej9mR13G6CbC&(F$j6z)U525b1gHk&J{`Vl}id
zHl==?G%y{a4PA@pkI43_(>?deN^UTrBaq$4+2ZD4aUM@vK)p?X$WIhI4I>CH3;}SC
z_rDN}QbUi>dS%em@lY6r)@w88-MwlR^oX0xf(wzz(lAn56A0+S_~QCfKt$*izkNtX
z^Z}8<LMU_)<i<c1BZkltXo%yS5a>!u;sbo>eTW6Pd;l}`HfzgxVCCEJ<DGwe9h@UT
z^i467(=T&;);YwR7NT6SG#>`LN2e3{)VjMX)Y0MQF5gU1Hv=wI6<1x&oK8vn4)P-v
z)o9KqTR|K#bSOJB3>Zbw*NAZ?hQ7);%RsnN7R!lZ8)Z??M-Cw*z_Ouh_W(YQ82SM6
ze-C5|`YuE<Jy>DnRq82-9GJ}1QOWI(1irdSq}Z{)ND)Iu)IW85ESR<oP4{JHTi&hn
zSiL5x&Uj7F$*)unU#B^AP-Fw_J$@D&RP6ZM?SNV3jTby-H)!nAdY@akR!_kgx>VP^
zo#-TM&=&-Vgr@yPQiN`FRmRrqru3q?PY4eXXCIs6?iH|b+=eTefj;AFFA!qQT(G56
zqbFO6G89vC0V%#rN{RaS3QX=+{RI&g*$>pCiIw9OA_;MM-<A_c{wsL={gxOb8Eu@U
zCj7{?D1IAp3bJ{exW7yaVaCz~3cl$nh`Neihge=M{eppL#;oG60bKq&3-&UkRszqw
z5aAj<g>A}bZZkc65%-@00vZad(A~>6;%xWRz(f{A839!`hej^L5$?0*-JKp)h8;(d
z!OmPq7k@PG83?6${C&nPqu`;1la`QMtv8l$13P1(==$)__WkbQYVOJ(_Atq&k~Y7;
zQqYOgP&S~B{vqQJJA@9@YuF=w#Kh3V%}B_u(L=l@fY4%>rX~nVU<tuc6zeHy_4{2l
z!pCiCe}HmNsSIsK9Kp1>;I5n;3#w>ltHb8w$HM`8pW&gS@V`m2nZ5yd;jwi+E{Dew
zBP+SD_@aXv_Tx@ovyBgNmJDw2O`zjp+t29C^?3^y6FahCa=8f^b~YGA2{D4XL14uL
zm;`v(>$L!T(d+co%Qypp+qplU)pC!|nvcV&RpEPXOj@ITu9eLw7*6^;fiKMg2&Cs=
zHq)tdQ#_eoCPFDVGW2auGL-nzJ}=B6#(td-l=)Tq^{1p6=56v9$EtyF=Gk_nu(9?T
zlg5EL1t5eHkYXi)Yl#UvYM-_kpX#^+;@2dkK=|KD8ya716MYa<7^RJ-3ZFEN2q0{j
zhL6Wx?wSGcBy3=|gU8vBSe(F+AO!%r-P5B*c|(_Sa$fIQ=FnN&9o4HCXofA#<HHl*
zW<vsg$in)aLN_4c0h8$nwb17F-!z679sxe=m}(6jtOrmIzUuyo$JMiAy<MSh>OjO@
z3F?yz7+LfS*7|TC<KD_$d(E%1MAVlWjY+3~Cj$37_B=q@2^i|G=?oXXfA*g)>yFpb
zVDE_SL+*<IIvyDpAI0j`EhZ;R9(#IFEgVBE#;4wlhwqJ0NE}gTtgWt(JQ@S!sR!I1
zCSE5$zen8`0xtnN3Wbx3jdG9{m?lm6EHg@v6YpR-4)l07nhVf`AdWZ+%^oH|`fiU}
zlpssj#z`lAOD9xbHlauVmY^^7NIKSH{r+P}nf3hLTFi3hzlfjvHBaByKaULKezgPO
zXk`pB^?^rT>{sgduM&xMCk~{q`Rm<v^Lu1^CS}LiH1`%%WTSm@zjpNyKO`9YJcVmI
zjcldNh|rrej!J`Dn<i+sA3<C$H_k}j-oKtvS=(n<{;q!gWHIu?p^e;U{0WZ9bT2S-
zpfb>BbL~z8>0skS)HLmRJNd5B`JM&8$IuUfr6w<2-Ua-wHnR!1;I4$AhRSAo3Z=fu
zs4v&0ub(LK(h_{a5!E+R@N`H3WzK)><M%Qz!R}R>$ZPmgpQXtZ&_3bdiL_ti6BBjE
z;>yGFeO~%K%ftEbnKl*e8aEEE+5;}Itd4pl<);iTyJ^<b510_R`do;}k1vnPt8Kl;
zfrxn^9Akk?M7Mup;7=+wG@^Va6NW7&FI}7YItJ{ANPzLJbh?_+$=c64o}Amu&p9fD
zq8G<W^Zh$ckSnN&Qo&W0`nf*L{qPjv_}Bxb;sWB=?`zp(ihX4)>bLy;ikAu1j&h2^
z)XF8+?Nb4#Al(OQPmVtv(Dqaj{hV#XAMJj)Q%_C*{gu?GZ8_e%Ck;9Mtk_fciXWFh
zm19jDbOyqiCj5+8@~pp1MXF@wU{O4uKCORe=ZTQZb2k&L!QV~!_v-Zsv_W+lw`H+*
zH0zfuie8ADmLQ0vRy%_pSobk9vw($#`12P}gp&D#n1RQ0&U+!M?A6qQ!28CBqreLC
z*B)#gSo&<CLjx)waGwjbU(*j4MC*g0%h{(~Doc}&x8z49MrfzJhrP0byw=m6#k4B*
zO8Brm(H<C_Nixk(vFpJODwJkl|L~P9u=>5l{UTRvcN&tljky!QK0AUu@TNBf+)szu
z^H$)cD8Ze83wNSbkt5kfAZr6Z#0J=2h5r*;kHGDf5qQ&wJDP3p^qmq*WFqUsh%Nu%
zFW4%o!~ep79~#KxJcxXXCHD#HWdr}7-&Brwm%%ePgG+Vft<Sf2jkc8>Dsa2FkZ9|K
z4&>Og3cTb+wyj)nfCDBsD6%S*N>-ErCU}VMRGe}sdPDNq$9x9Fx?t4(McdQS<}tws
zwmg*Hj?f=Hh*g`}66iB|#f_{z=f?oCF(W6*!j;+%G%045!q0P=Ac9mzT8#uClYlUA
zPKK=o`^;d{m5uG_d(@M)xhywkr9lkfYR5j}LeA)yiVo-`Lv^^KZ3M$@-or3rg<<4x
z8QEg=iYKSD$5@k&mixL)&D9toOwy(ji9+erNA$~+N6qdrC!ocO;@i0(C~hF2zcO~O
zGokHbAW#<Q8$1X>Gtv^MSxSLnSPgDu<Z1U?&{VwtR(YS@Lm4V6NG3x?7v#mXlvCSv
zhEcB+{Kg`?;Nf5&(5SVK>IXxkUDsx|5C)JTt}um`A`~alyIp-wl6@b1uCRsQ0{aXx
z`Lj7}`O{d7nU?-OfQC*xmM@Hw3<2XtprteegOV;u)F^<AD(QF?KNX2lc1}p{U|~tC
z+D5xZhNg!|ba@~@5Ja$JZJ=~U0psT8mT0U3%%cnk&kBq6@nF2MC~>`^e?LU{%OJjm
zVzT2daj7WKV+Kh-dxrq`9t#Nv56|i*q!*nZc&*_&k3p!lRnfv%fe#=Alvv0gFt81`
z)diJUqolvmlW0WRd=c%<`UYqa4vD<^%MGqq4&Mi{f>pSDuj7WEB}B|DvBePyN<s5%
zrUc+f#P^7jFya`Ih{=SBhL%EziSeP-G&=Hp@u8_`4(s5n9)&<eN;Vr6O6Zywt;66D
za{6L)iA2g-jC)j@30N<llRZ%%g}%u=cLpJ*+YU4;>LejnN5cP%?PEjH#<nFH4f?|;
zTQ;8;sAh{OQCMG(5pLRsNB46Deq?$Q#{TtXOD{W(8$pm8!kSLTA?UbL1(5u+%w-b;
zsAlQS8VJlT2$&dmWJYpJ$=S|XK%c7=j>y$&h8?>)uNWw!^`(VC+Y0%^h)AWjR7okK
zOhgjz4;7-TM~KO=<GajUhoh@2IF48IbTrr>pWt4zv`@|uP8FX;efJSrXKvo9)sM1=
z83nxkvTcl#EdFewByyz-b3(D*QJLIf95i5Dw3M>$X7=!}0eo>qM)TwVcV&-p&Ckh=
zRWHW2=?S;VYvLSVh9$tc_Mr^RY@qhH1WG&_<vE5G8AE2c#7tSA9~`U<h_8uvD=0E?
zY+TIA2(36h;NN$mkv}a#XW>GDeK-0GlR|rhUOA97#b=U+i>}yndw1SCdk>j|SLjLT
zky3VZY0jV2QLZSW1=Q#J9TUF?qud7B5_2+Qy1EPyix3vT82WvgMuu8%=!@cy(MMo5
z@7uAX%!72{{2sDCEH>tbxW9AZ>pYGgy7`Q;tmK5eLFSjpmu0kAAMqu>E@g_=MbCOg
zN%XyGr7dicjA+AXJFk8CE^=c#J{1F)5f%)2Wg!J}z>yjGtUtbWRE#o~ZVCUEq<Z`S
znb)+Rg@c88tD#QMRTa2;Agye^2H&9+VimVp{&j=U9^dImQ^TERFjXDyIeX1>qmps@
ztIk>@He$shYb>kHz@gJt^JGrx8R)fsYED;lJ)vc(B@n{i_VwWpM^Z*Qe>OcL%2-&U
z;tC^T$r1?&<r<m<SmuzFvhyhheAo&!HP<krH>(-{FQ}1>-a58QD|mlyo_vwAi%j&k
zD=pYtULC5V&Ue9p;RKUdr<Xv><q%PFRr&KMy%Mic#DE<FMb;uP<!*Heq%be>C2h6`
zCucoJ(j+47e{YM;X~um)P>d8qo7%+rciB!}`&qp?G2g{<l8znse6;4T9GmgeaqvxD
z+iXvPVxEXF8Fy?u*5wn>SoSV_#CZqq;-3^UUBFGy+@rNd%mJFV4<Kb}jz*Q-3o=Cv
za`N|h?a<?0yUB^cQ@qc`xRwEADwm4KiS)$yzIT)awA)cWi6>ZivYXF_GWK)zYO7}w
zDOoik;z@~BOYv=^Zm+j0PAEt{7-9HBF_Mzjm2iqsZK;LjS362yjzUzEk>KL#!Nfqg
zKTvbU1sjZ?QmRQ(axw)z&b_@3!)6UjM1B0dd_Q)9DPV|-Hido$;ersx&`#29dv<WO
zk2oXpS&xun@0Tw%<n-|+kt<f@n#Gf(_Q;$`-MdOR>GHLFh%e0y*(;ALEe|=tL`W8I
zZJ}W*(T!BMvtq8(X13@f=xcS(%FKxVO$k_+FJZk$bB-$ZGG~eH#`;KN#x?BV5Wl*D
z^}XSPlezVKuGRIR2*jh4)En=`oGi4+oik269MV**%QGNeyM{)Vq?0*5rRA@QvB)(T
zJG@z+V9Ck<UN`4}Yl)=894{$%B2*n9;Z!lEenRGyCQQ0E1WGFwl5T_`Kk;&(E1KBy
zDYw-to8jPLOgHx6;#cv`23P&2{&tf4;{Yt}S0%6|j-O16)e-qn^TO1)x`Q5q4;#Zp
zs@@eWf?a0wutyLh@<A?<cFbb^CgK+(1|*wvtryBL`3yZzN&a{~-S_c35)```zymkf
zUk<&|Y6vf8Xk{ynX{(sZ3krUvkYf@s5|v>E)tb`_F_J>(iLTg+Yt9r%ilL3?qv(3B
zAIN{L|Dnn_h#A>Mw)M}7ng+YH7%8n%_tvr0^eReiS93w2V{vdfKiym3sCRgNPmI8j
z%*;lZl2Z+V(Z#2N22E+OWO<wePghp2My-7wtEH@=X|Vl+<XsJzJOql?JE}$^E6Qk%
ziFX!xAit|y*FjW{j01Qfa@9-@m%T^7zoov~^$U@bi3I#`7ex{j)d^r&OMYgNl{Vr1
z)E`g2-TG6*t@-&OW3_d1GrWj=>UC|$p-7B&R*TBlowX)fgngFCr8sL;-8lbwIB;R6
zC$v2qI*`ni)o*y=K{lq8W+4cadYM}%%yTWaS8=0(Z&Te+KPfuqET0YKgTY9jCy2jT
z#L*HKCEG|{?+#MH{(S@})ryakM8FqD8o^oA3mzyp#LT@7AX8kuvcyY|vIzkF_fEA$
zgyNU!V;axX4Ht)ln$y@iHk*-?6xx*SpM-pYK;4)h>uT4_*xHZ954|u}5g_Pjaa0Uw
zLWP-zo}`g8T7C1)A{ZS&oR@shimqkEQta)`_NT!}o7;L^*6DeBe)Q$+mvb9EvHE@j
zISJ-SYh)W-pAGLi8tjChl#=dX-E(vXE|~4*7D<G%n7n)m69;VzbNFwZHwF-D*&jP<
zO0!dsg_QXbDRZ`*ah;%vn_I~5xfyxdQ|j92e*#5dp-i3pz5m*q)eJ7RIZ9_#^={Hn
z_(Z0DhPdxKEQN*2CC-ji>^Gk^eNU)_sZ=qW8D?UH0PZR&DXDqgqpopdl+W<6ry^e(
zX*TQt;i}8@DY}_oYi0E-Z_m&rb)>dIqs{Y0vJ@#K6w16Nx$N=*A6%O#$XV^zpK{7b
z-$DfZKY%<h29OFYM^Gs`*gDk{51J2?I~oEe5JPXtFOmh6`9&M=zX#lRn)FyU3fa{Z
zpo;)18w@v$TAH?lfmJ_=Sj@0SAu8+5$Y1aVWTtiaF1SRf!sY-5M#>ULp%Qh!pea}C
zY<0sWm+lnBr3X^M?6HrtXPMkIKaFcxDhftIkpP5_V~+yLiA!olderTc{uC$Rx5gqr
z3<U1?kL<<{@4UC1Ykww5N$Mp0K%YsC-ajy+N^&os7r&vFC2h09czp^3qd)u@_Qdgh
zg~jKGZM(mf`;++)QRxl`L`3$g8>$7KoubDV_@0TZe0u7!*_vL4_^WbP{XRIHd%TeR
z!h^X~wXj1K{LMdVU#tsln>K?vQ;k0A4e0x^eeOUDzlU5UPjtHV#5(6V9v2W3^&X4v
zf%LPnM%uy)?s)E3PzNT&d7NugEW^i8giQl%5_4U514G^f`tr%se(YP`WjCV()Wlx#
z8rC$`4?9)X8qVn%>S=$_$wj0{%yGRAmSEB4vMtU4iJJqQP6g-gfU$Os1iNG6b=u)v
z2VI8%B*m7dlOyXwHY&R9S3{e_!_P&Uo0R@99|&?Zj}92oygD*YA_jm`R-z2_;;>40
z`qDVKK*vCVDZPWDz$CTDGCR)=FE%4sVQ^5@&qF+YaX-Ai!OGohc$lfG>g&^wsA16Z
zlU5jlBE1OlHQDp!N-J)`?q1kYEv-@uj)SKW?75bjKx5yEvR{immz~MG`jrYt({!b_
zKsNOAG=p12g0q~TQM*7BI$RBig+DcqRAfic-<)zaE`^+F+$jl3*RyA@ABk;zZrqzr
z*MwIy+Wbo@t82B0`~*QkziK><5l24eH=k$@I;rR)fkuk!%b4y$j6|M+?UKCx?i9GO
zFGMxOB7N!FuQ4ak*521sQ)m%D!GWa#uh({V_#K*ktw<aJF5qK0BMHBu%QuV-;|MsT
zW_z(irYn|;B0a(dJ6oYVOTckcvTl}1!=Ihg;6J&((shV??63jQ-CShxfa3xW53kT%
z1X|WLw8XX27FiRMM`68Wn)6ZkZgW}_h)<;kgSa6TSEHjy_YHQW(Xt#D?cCoOA5-`2
zzRY}OdMcouW=h(a4JNhU8cxSI9=YW{EBxy1tNh_UeB95c7xrlgb{DlOIbIO6&%Cnv
z7y*k-=))JNLm8Pp0%1Y~^`&nk+shNBUpEIeq<Nk+rc|`_<Q~0Ow^?5c-Qzwpxk6?w
zdYEjT>1jrq8)xfJ+|~7us)}BV#$88qu6-lwO9P$@gvT)`|HT+J5s!HuRovyPV4OsD
zBNwVP;}s-PWUCsg-I)Xu`*`=~E`No85OP}RXEJSVrv9}SeqF0o;&J*c+1i8d@T-a2
zZM$i0ZRUiU$NYB*Cr}H<Xj>+rt*-r0@m9Tl0&YaWP#Wpw1;_)yZ1Zsu<iN4U<M5Og
z;V1sMh1$ITmTO47IU3)(B{qM!Tz~MO`M<y3)rxkaq~s*{46ywzG_7E5n@!x($XF5*
z8{oq%T-LB(B{m}w@}K2fzSBa?1x@IEvBH^<$IqbO>3~Y8ap$6roBq{KO<na!DZZBJ
z&&rI3lV;x8##_T<pFrxhR&MHFOW=Cmp9kMU)CFx<5Gt*h^%<EJQMNUTM6G?k|BM62
zS~VGfw<#9+pF{hh9!pK{<RVXNOI?!yf8V=C7_r~b%Wl24D?9e$_fD+Y+T@$l6U;4I
zL0`TJPN~)mY7?|BrSfe2_4tk*px%ipnzDXkHCD2yUKZ{%m;f~^71_z*3Y}Vb;Nr_f
zfc#HD4#;e>P_8V*wat!H`0@!#L3@7lC$IVMExxp~Uqt8b<i%<wwxOae5AK2Q(_)Sg
zTXh5`1R-hx2WN4UOP<|K&tq7%OUGxL$BDh*V>u<;m$N9BqDLZFzXja8{B1ktSSYZv
z?9Fwf!0aj2i%_mE(byUImZl)|qDfiK35Z%iZ@3iIlzVvteL;hGgmF+g)+Dhz@emNe
z*3Ta}qbJIX)X|c9Yb`b_=yjtFy+eh-DS6pW4S%fM@fCBo{e_+UfC30;+9rk*>{|H-
zu>%-_b%CWsRMoAHe`5b*x#vi0qPaVEfH6sQ^Peh#&jvd?3ERJ%fYG~bgdardNaM!f
zdP6Bcw~qom7+{zGObh&s`I6oWrAbaG-yihv84p@bjZ!Q2fLDH!_1^nL-*Yhnw+S5*
zwp*LODCA(%Y!d~);iDA>9fQsK;LOx(xW+kvU<YQANRXD9vTQMxDR6PR(E8Vf7nVte
zJuF6bF3DdKK9Z1lK9s?D5i|+m&s=UYBq*G>7fSwNww5RP0h*TXj393?Fm1eh8yacg
z56||?q58~)XZg{b&A+v@+L`g`5jkknVtb}1*IoxN){8_-5X?yykrg=@JIb-?JQFL8
zeyXrhuVUCy{5x4HWh!kV@Wx)@^MM<>XgkQDss0|Z&(%Lk0&;KbuKUYOvmbjff_9vZ
z!V&3Ug<Ro{28&`If&m`Gz(|LuHtUa+q@cn~{AY|X8!0`Z9pJV&JNkTP81%EoGiI2^
zU3pSR<yr|*_h|G=a$<E6mW@IgT{1fjpG`!^aP6F$-eA>acaN~4KO_}u^sjP&Mjz^o
z!^_>ktOlDMOB0QU`hlgzwCEqB0KxG%zx6KL;bibw>&wdTX1bCun_7egOq^AhppLH{
zB|YI{y!RLk(~~2qM12bpr9^;W#h2pDW}Mxtv$rL+UGDv{q`InDR;ndyjgh;Q?75B{
zv9|d?Y!|irBe<zVkQ=c-NWj94a(B@%=4EvyBQZ<^Av}_G+K+oJLH<Za#<V-G7b@@V
zeoMI5oCr#K>p{F_ACNq2ETt61(byeq`nCdDZnOA7-D$pqy|eK!S<TZl9EYM${{~K%
zl7wKfhh9yH#wl;#eS$XooV0JPzT*dO02~oGyh4WYhYmfJN3d9LG(T6(I}m|H-`1N2
z3+f<>|0+COqp2}*<$<6YHL=QBM1Uaw;J#h_+HDwYS>7tw8|rbHYxx1s#8y4Vmv*74
zV%X#NHBk^(bnc`@j;OY#LB$GCKNBhf`Y<bZI+0+{-ckF@Sz5AH{orrumaz0|oT&bE
zbs9gsi^|ydC2aj9`)`{^!3R!=jsEj}p%%?4O%2B7@$mAqg62)$%O5^{&2V0-B#`Eg
zqjDwG?qa({<T%O`{N@D+a&dd#!M!?7R^!%{FU?}BHL_NrcMeACL@lPJ6|rD0k?%Cb
zuPW;N*7D6o6#`uDwcjxBTQ$F-2CCGUzsY`6Pks-lcEKF9$+w_zn)BedCP$19<MNHp
zs#FS(Ky)SJ4Qok<RHIZ+nzsI=t4<F#^OHKW7)@Yiw}TKUqeIn1!%7Mr;!@JM@<InM
zV{pITe)EH2@EUA(uN7iaz$U@ZF|oXkTPc4;Za!1<;wVEf(7YCEhXN5ZiPgYb$Gv}A
z-2G{+QbVQgFrwFM&cQh+;8|p8NX^rG&EdiAWOJb}fw4N{@QMyed$FZXi*Dno`Z@%Z
zvJi-j)!odK)t7XXm<HKlcK7e08MpL#%-J?M{|f)lurssvgqA`tK3FeRO0*?5@%w>}
zDrRlFt41833o_9*Ua$9bbe&X8BM=?pLf61--D2Yra4;_R2{U$1y69@{S^-bUmCp3I
z6YFj2N7TIe<LYa5$CBDF7n|!}(RpIilI(Oq64eYF%uqqgw-?v(P}OZ32wyM3&pM$k
zq|@S-Vu#ypDLx$Rk^ZTGRFofW&e74v*=}I!hIr<AL>~$lEFHWbaF2C5@f>qn`<%9%
z8-GXEpW*$b)ug$(gYl|HFYCx&_*P1R7(+>^2=XcKsQx`&DRrH8%RD(rWrjvO4`GX)
zGPW5v`Ou%-&jdQ?lUq+bz{%Ah`ow^mCEwoMTeu>~^^vHLh?fXi2(D$HaEnvP+TD5S
z9((4v6om#X`qxPnmV8AXGyj{OWT1_1@2L<FqG`t_8#@a=$NcZ_zCfM&*9g%V4xxzt
zS{637%XgwAEU*-%Rl$utz2w*4GvnOvk6a<$e8ug*GfWn&eFR}^_rB1x10M#=0Te+s
zO)c#zJ()MtU2vZd?KU<P3Gs(NJC#;};pvfmfMjfjo!g)qs)5?NJv9*LgI;fdF$QJT
z&(OOx1nU~FJc3q>FKidmyylEQ;7U|dBh5@c;eC1W{Mv&6ps3eSmg7V}7hu+J$*ZZo
z)BeoAAQ*`g{SnfUo$O<I^ZY9u?gK9Xfnw%CQkn$1D4Sl`Nw|QYlWlfJpvVv>z!t`s
zuqCu0UsVJwYT^h8)wh+LeqbXz`;B3pI2O1(nOXENn$g7cKZis!#s$}E*Bp4nHF?7j
z_zqh6^?Z{pAW!DmJd|0iC|cBI6mX|vKGy`JyIv=PQ9%v|hf()*yIPb5QWMjB_*@s{
zqRboklDvMgpa?6@z^t~4t=QOgd-&}~=T9eU*z<SLq`mq-qrL!&n83zqG5sklSPF_n
za9^J~Hw|i_TFoG_Bn3(zmv@^Ts#ux*-T}U^{|4v-xtl<Gb~7MZ10pf{OkojbhiQ}~
zaJW54J<F#i;7Qf|8Gr7?5pumxMKFt4y<s5f_W3to1r>nW1Bb>A#RStbD4(z)wnHnl
zLF7Uz4Ffk^c2Y4x8-_F6?_!M+y4$P+*~VOo!{8(F@V*4}p>%e`diWC0Ig+}l$?+X<
zS#ZFQe!BZX5(y_c6dEaMqLa5ClhZ&D>xE(^h-T{7lxFypUc*n!2Ai(M(hPcTJ4&!F
z*F|~n#rRWn67H0Xxk{}Wk=3+)S%3y}LXyOaDt={?_!DOcDZ*TmiB+E~MOOb@5C#ke
z%mABMaK~#WzON=xs-v%1I1x8^n?OGcrYQnEt8{1FeGR+F(KS5ohX+Bl$Y$$m6Uclg
zWTQDRvoHa})>0nX$x7h0Ji&=yx%8V`5^-pO5p%a{sqg`j2JCVlzncT;+eqZyc&qsq
zG_yl9(O=##3%!=mSU~Ab)eJ~WON497o?GGlmp0hC_@dhUP6PwIQwfE2{oQ$v+%Gb^
z3~V8rTDVUVsIkPs9Ytm9vU2_RyEJp|AlOh2Sc-bqZ<U=1%5Rk)YMwgfQ3I%S;J$)k
zi}2OKM0KiGKyu*%KyrSw+Pqe0t>Z#50yKf(kS)O!3q3GQ-i1xCgkcx{5uu191OSpF
z01`Ju7cBx|%%f`#Yr(U_|HXx}H5{TPII;1hS*Y6g7KPTQ5$gUJ`+g6@qLeOAhfFn)
z|2HiQv;fT#ApGO*{eyK++iMO6aRjTyQj^?JAiR@j1#^m=SqsACSFltVpIT28iiWp)
zj`R|NXZq|3RG>-9dpiK_99!fMJQ7y1XfwFbe#=G4L}eWo<31tbcRsNV^_#DFDPgRb
z=sz;iMCb&q{N{I}YY93NTohX`p5~e1-}GSlIYkj9_bhdw!-g>~&jg5me<DxZ{a2$u
zGTP7=5Gl7Dzwe|*qCW}Z<V*YU7^ZD1t|V2MaODh)`j9{)*~wSEtjQ<0rU%@4Q5o;y
zswGLJnZVR||EH-dkB74D{`VNh&I}&LK1$X+CRwr%CQF3!C`&X$r6Ez4k#!6*h?x)(
zAxp@f<#}kazLpfy$WHNOS0cN-m*4N7_s{#j&gb0s`J8iouXBCRx$i3mmDoaaz~*0I
zkf_CPW1P^|YP|A~7R%I9ty)&+DHB6{x+AdUS3QqZ3-7Q2=;^hLo7bIWYrgTaxpcGa
z0EvnAlWp8|BPu=|WpXW#lEaY1Ok~=K<60*&x5Cpf<kA5VT0SFPFF&YRFoPQ<Rjq6k
z$3&(kTs=Q%lPXS$Ugw9)k*&G@<`+~I<5)Tfp`y*MkFKTH^O8c+b2`d+G3E+3Jwa8s
z{*{w^wRmBD<vx+z(A`QgQj;ukYP(GX&g1+S0YQun8`aDcKcW&UcP^)hc*k-IoH<u_
ze*!tZICLrVH;My9kvsx2B8PmuJxpLNVs9o~Eeg}f00T7HwFhH65bN$`W?8VIU?Pjf
zgocMS4+c$Y&b|jVvLi7pMCfg{^IJgznVcX~5^(?<P6kz0q7BV~4r8U^&^Y<8L=kbX
zB(s!?@A<-}=0E4`y@mzdCg2<bAU`kK$Z_cvJbWK^I>*Paq}<m;NC8ebrjG!6-64$=
z%Ho_sEipw7=nZ9&(QaXuUtG;)S7B5<fd|SC8Qwb7psclj^;(?tKWp1nayWUf4Pt#J
z(0|)s3RlIE3gb{b?2Ea92>sf3`zt&DlZR+cp=(Mu+xy5NcPR3hEyC9R_qZ42x@ac&
zM6AIX9>|=UL~Cn{e4~pd5<4ZMTHE-})>a`)6MiO#vvCNu?2xvRt~~v(-eg&{GhOyd
zy&&`e_{ye^1*;i^1aw|xAwGESPg(LZuBMPJTorZWfD5U>;sFU6X*~BmO>q^eBG8n4
z{)(YrzO5vAyTd(aIF=rbE5JxUq=wGI7)en_yV)_Phm%Z1Q#r3%_Ga;2k(L@3@;ly}
zEM$$+id(~aU|)LziYU~YJ4FmQZ{ZT*DqX|X>H8*zXK0hV4F{;P0jhrBN*a&+BWku)
zt3_b*s=3i9srgQ0+JO#X0jDGV$N_2WUoj`UHjwN#NF`=q-A_GUJJajHQ|??Z@r6kq
z+IZS53hAU*{(j2&S`Bg=|DOHqhY@P&MVNu3tw%M(K?oO)kiW(UcfR6nJE+Q{!SVN#
zq!rNLJp3uauE2LTO6nY!<PF*22cEop#%ezH<wonMNOj5)gNY0uOt4EkS>aIKVq%f!
z_G|xVi>cnXRhtG&hxXT}0uwt~KSB@=J2B?i6LE<3OWcZYHK{osAj;+smy+)W^knW1
zjWBrv5>6i~cc1nVmB_T}NQwAmbnzzk*Z?Th&+`e6LLfAFp=`J*_f~|EzWq^2Cw!ih
z`;wk;@%|y5AmMzEF2%}&jMSu5WQPWicc-`1{Z`~MP~G?cCi1{Ry~3&U4WX0xQ5Vh@
zj}wP<UUdCA|D|$J(QI+`P>S(KW!JUeSJ{?*P2F|G4mn=I3iu4RZJ<WyiH6#Gw+_vm
z6KrCqrL^tq?ynLQ12O}ffygK87Xgp|dEyeb@I8EqQ|-lEI=`l1+?Ub-e|FtX%4CiV
zjTIaKg9-RSV~34~@EbWpx6@GE`U?eia(G|WlH-n-NnGfb*Up={U{i6tE5kbamy2`&
zcHKU~a%o60O;`axzT4=@tKVv!;K`Xu7vzFNl#Ub1t`E#~`P^mb*K1-wr)tdCTn%Z4
zGOF=}#l!D{u?;WMa(B)|Ug7y9c|_OpPXEEwp_)%H=dz-im6-!nmLpca7CZG~MR<=#
zH&_za&+!O$v$6AzuZ)E_;6gxVNhLbc_>}MkxzNC?aenfSJ!eXO3WepqCgmgr=484(
zy!ST6I^TO;xYm1;g@Wupk4es<o4ZPtjY}}7Eyjw4)^I-bC{#o7sMPZifaNzCQUOB7
zf2z0yi5q?TXL8C)mT*F#>aIZ5S5C%)x2n;({DDExl9kVk;l?~8y)Iem?5!HpB{Yz8
z^B3~<l!$2Tvw;dj6na1*`nr(=BAOU@Y4?;B&fl=U`6A0j<8$n48TV7HO^WP%FOs_c
z3budyw(LLlwXo={*dl8Ua2lD`XmS#KWaz&C*ze~{ajb;pH8Gj%b8S<0dl!P4yxC$~
z{Rre;K8duatpaa64o_J&ukJ)nB_t^}9G<Nl<w56l!~2)T(?a7sc}0Ilx^klRfbPfg
zb6HQ})1gcqHEPv`I@b5{0|=y>TX{7%6#8s40ykhsf#Jn*#d((Y%3bJ^5XcBzneWUo
z=jbr3V_lM!3}Y3>iu8tLI#M?~@*2b20p8+T{oo{nXl3P&>3qX56SsM!E$&^!3a{Wo
z;TQ}*2a9H;KXa}~oa3XL-Sq>A$D^xt3wPHnp|WXzQ<$VX3bD{MDM&Y2ftP`Y4H-1|
zepGDR0yr&iNUqj<gsUFz5Zw1*ApnBON*tKIk1g9@>z&~;lXz9y)bn=v%n?U6TYsa#
z$vNty^04O4su`cHit)OIKR@PLyFlDM{YM9KZ8*>q)+K7d^RfQn_$2k(x~6|^Ep#za
z6dM$Vh$RW-@?!A&bMeY2m9?~HN(_maG=9+s+l&^%n5o%2>jGyd#%LXPU{fVqa2<?Q
z2pDfHA$Aans^0Z~-=&U{*5g=fiGm<CZ$SUW`#Xy-*J}=YuT-Td{+&@_V~j~oXK$+s
zuJbgXksgJN@v^9#g-gz@YABVHxZ0}eeEy6tvUXJ|lD;}R(*?HxIs4JtWR!2Xx}}$3
zM%7(HQdlF+aSn2z`T=syb~o(I9sFHEh(mI0V^YQFEbz{DAH5Ro@ohG!X}RIWMFuK?
zg^f)#iy^w)m43y`YDP&1r6B7Nm&Hc3*c}nK)&?YQ?uZs}8;k4S2$MY*^ZgoAXO{)u
z6@bt7l*|mv4}oMbr1+RttjW&0Y6@wO)}y<TgoA-cH4`aiS+BVNTAEk>XuY6DfSH1O
z_ZB=p_iD^k7kf&EogJ-rWkVCd8ZU8N>q3Q-NdzP5rD+}F{MJo42Uc}|_UB;P_&BjN
zV1r#IJKf%^-=D5Yf!y(a;Zi*h-|G7&-!1gy&0GaBX)E^Tbij|KIxqU<?;)|_^1Z3z
z<20;g?HvB;g>sWYeI0&GZo#n<FOIH-;WuzeT_>b+m)VCF_LiRR3o0t^*VLE>d2U8c
zz@Q^-IH@NAH&Sn1+4;f_&O89}V`NNb4t={{2Bi23BVQV{&Mega$tvax-kg!;KdXl1
z8~;3Y0yzE_DH6+b1U~x|IN@J5KQAcb-0LEzs3H#_%7eHmn&%(UY0+skmR5dqtmcm!
zdP&<1I8sG{B1+#mt`2`(Z49jM1J<M8RqAa?Q0S}gwF5(R11o&mKm1C>K11Qx*HPVl
zmw#vCs-*3NucV;BbU;MSZOnzrXY5va^gA++i#!~^;-IY!pa(OUWBDQJeW%OTJCRV%
zqJ`5yxV`3kc8EZfd?QoJGHy00?L+bx7j!kcEDQf!Mphtu=}_feIYZh_J|&nJ#{nP%
z^BDVi32klWQJ0fcL@(XoXrrJKT4<&^%DecJH1mR&J#-?~3be8?h@lr>rczQFNy}vt
zsn%^4g+#KydeDK3`hl4^4j1&T^d&$0y0(&=WoP6q@3W0{8u>G1x^mU>n@`fG4_Y)L
z#rnYGkkLY)DcdQA)v$u+>=9b`jda+~utw`M^^}2vl7FaniO{%m`}4Gw4zi)z<METH
z%GRO@&y#tP(N^dCp2bRIb{oRC+ra9G!Ff&|=tt!>9m*Jq<1o2xe<}Nl?D#Ob)HCvU
zF%Xh*-r2)Xr#u8Af?<fzno_FqH{wg;VEDnj98>N8h0s)Kh%q7?+D~*Xa-z!l0UuH<
z$OgLxk3m|{COPkTqzwQ%hKCgYTLOP*Tb@6KOap6Ew*=Ty5N~;VD_wWCYY94Amlpox
z+ia7RW2IB{|EZy=PF!v}?pY`o`J>8HC5*aohbf@`+62sxGdoG0&hfF55iqzR%XIP3
zpm+hp24oHklEErC%Dv6f^(4eQXILoE$#b*s&MZT9eCxCC5LP-DL=CL(gWlXp;cYgU
zyS>*!q@gvakNXr0=PgJAC}Dxu?l1b;#I#!>a=4oh)C|I&pBIoO_qfm(!ypr|@F9Qp
z+IvVU5W-?bMFf3Q-Lw@gLO&>y^-HG?O#tLF*1@p!?W%31=Bvb9zyo#uIM34<)H4w=
zkbfux=DYBPt(BMS*YH^%+MiQMdNlg4;zc{I>AgYHzU|yWEa*sf>`n2r?u)DIv?d74
zb1NEl;&Tu`NYI*rdb(WhQ_cu2@PC%Ir?FZg7{?h9tO)cKN5w_W*FP1_iumDia89&o
zbd+d~SH!7!)HL*|m+>CsBrh4R@#yo~Xu6McvLtt!x>%wqeBUsnQaU!*C(`bJyZrwP
D<sSsO

literal 0
HcmV?d00001

diff --git a/samples/web-app-file-storage/dotnet/src/wwwroot/style.css b/samples/web-app-file-storage/dotnet/src/wwwroot/style.css
new file mode 100644
index 0000000..67508fa
--- /dev/null
+++ b/samples/web-app-file-storage/dotnet/src/wwwroot/style.css
@@ -0,0 +1,341 @@
+*, *::before, *::after { box-sizing: border-box; margin: 0; padding: 0; }
+
+:root {
+  --teal-50:   #f0fafb;
+  --teal-100:  #d0f0f5;
+  --teal-500:  #0e9db0;
+  --teal-600:  #0e6ba8;
+  --teal-700:  #0a5a8e;
+  --teal-800:  #074d78;
+  --gray-50:   #f9fafb;
+  --gray-100:  #f3f4f6;
+  --gray-200:  #e5e7eb;
+  --gray-400:  #9ca3af;
+  --gray-500:  #6b7280;
+  --gray-700:  #374151;
+  --gray-900:  #111827;
+  --white:     #ffffff;
+  --bg:        #f0f8ff;
+  --shadow-sm: 0 1px 2px rgba(0,0,0,.06);
+  --shadow:    0 4px 6px -1px rgba(0,0,0,.10), 0 2px 4px -2px rgba(0,0,0,.06);
+  --shadow-lg: 0 10px 15px -3px rgba(0,0,0,.10), 0 4px 6px -4px rgba(0,0,0,.06);
+  --radius:    12px;
+  --toast-bg:  #111827;
+  --toast-fg:  #ffffff;
+}
+
+html[data-theme="dark"] {
+  --gray-50:   #0f172a;
+  --gray-100:  #1e293b;
+  --gray-200:  #334155;
+  --gray-400:  #94a3b8;
+  --gray-500:  #cbd5e1;
+  --gray-700:  #e2e8f0;
+  --gray-900:  #f8fafc;
+  --white:     #1e293b;
+  --bg:        #0a1929;
+  --teal-50:   #0e2a38;
+  --teal-700:  #7dd3e8;
+  --shadow-sm: 0 1px 2px rgba(0,0,0,.4);
+  --shadow:    0 4px 6px -1px rgba(0,0,0,.5), 0 2px 4px -2px rgba(0,0,0,.4);
+  --shadow-lg: 0 10px 15px -3px rgba(0,0,0,.6), 0 4px 6px -4px rgba(0,0,0,.4);
+  --toast-bg:  #334155;
+  --toast-fg:  #f8fafc;
+}
+
+body {
+  font-family: 'Inter', system-ui, sans-serif;
+  background: var(--bg);
+  color: var(--gray-900);
+  min-height: 100vh;
+  transition: background 0.2s, color 0.2s;
+}
+
+/* ── Header ─────────────────────────────────────────── */
+header {
+  background: linear-gradient(135deg, var(--teal-800) 0%, var(--teal-600) 100%);
+  color: #ffffff;
+  padding: 1.5rem 2rem;
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  flex-wrap: wrap;
+  gap: 1rem;
+  box-shadow: var(--shadow-lg);
+}
+
+.header-left h1 { font-size: 1.6rem; font-weight: 700; letter-spacing: -0.02em; }
+.header-left p  { font-size: 0.85rem; opacity: 0.8; margin-top: 2px; }
+
+.header-right { display: flex; align-items: center; gap: 0.6rem; }
+
+#btn-dark-mode {
+  background: rgba(255,255,255,.15);
+  color: #ffffff;
+  border: 1.5px solid rgba(255,255,255,.3);
+  border-radius: 8px;
+  padding: 0.5rem;
+  cursor: pointer;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  transition: background 0.15s, transform 0.1s;
+}
+#btn-dark-mode:hover { background: rgba(255,255,255,.25); transform: translateY(-1px); }
+
+#btn-add {
+  background: #ffffff;
+  color: var(--teal-700);
+  border: none;
+  border-radius: 8px;
+  padding: 0.55rem 1.2rem;
+  font-size: 0.9rem;
+  font-weight: 600;
+  cursor: pointer;
+  display: flex;
+  align-items: center;
+  gap: 0.4rem;
+  transition: background 0.15s, transform 0.1s;
+  white-space: nowrap;
+}
+#btn-add:hover { background: var(--teal-50); transform: translateY(-1px); }
+
+/* ── Content area ────────────────────────────────────── */
+.content {
+  max-width: 820px;
+  margin: 2rem auto;
+  padding: 0 1.5rem 3rem;
+}
+
+/* ── Table ───────────────────────────────────────────── */
+#activity-table {
+  width: 100%;
+  border-collapse: collapse;
+  background: var(--white);
+  border-radius: var(--radius);
+  box-shadow: var(--shadow);
+  overflow: hidden;
+  transition: background 0.2s;
+}
+
+#activity-table thead tr {
+  background: linear-gradient(135deg, var(--teal-800) 0%, var(--teal-600) 100%);
+  color: #ffffff;
+}
+
+#activity-table th {
+  padding: 0.85rem 1.1rem;
+  font-size: 0.85rem;
+  font-weight: 600;
+  letter-spacing: 0.02em;
+  text-align: left;
+}
+
+#activity-table th.col-actions { text-align: center; }
+
+#activity-table td {
+  padding: 0.75rem 1.1rem;
+  font-size: 0.93rem;
+  color: var(--gray-900);
+  border-bottom: 1px solid var(--gray-200);
+  transition: background 0.15s, color 0.2s, border-color 0.2s;
+}
+
+#activity-table tbody tr:last-child td { border-bottom: none; }
+#activity-table tbody tr:hover td { background: var(--teal-50); }
+
+.col-btn {
+  width: 1px;
+  text-align: center;
+  padding-left: 0.3rem !important;
+  padding-right: 0.3rem !important;
+  white-space: nowrap;
+}
+
+#activity-table td.col-btn:last-child { padding-right: 0.6rem !important; }
+
+/* ── Row action buttons ──────────────────────────────── */
+.btn-edit, .btn-delete {
+  display: inline-flex;
+  align-items: center;
+  gap: 0.3rem;
+  padding: 0.55rem 0.75rem;
+  border-radius: 6px;
+  font-size: 0.8rem;
+  font-weight: 600;
+  cursor: pointer;
+  transition: background 0.15s, color 0.2s, border-color 0.2s, transform 0.1s;
+  white-space: nowrap;
+  width: 90px;
+  justify-content: center;
+}
+
+.btn-edit {
+  border: 1.5px solid var(--teal-700);
+  background: var(--white);
+  color: var(--teal-700);
+}
+
+.btn-edit:hover {
+  background: var(--teal-50);
+  transform: translateY(-1px);
+}
+
+.btn-delete {
+  border: none;
+  background: var(--teal-600);
+  color: #ffffff;
+}
+
+.btn-delete:hover {
+  background: var(--teal-700);
+  transform: translateY(-1px);
+}
+
+/* ── Empty cell ──────────────────────────────────────── */
+.empty-cell {
+  text-align: center;
+  color: var(--gray-400) !important;
+  font-style: italic;
+  padding: 3rem 1rem !important;
+}
+
+/* ── Modal overlay ───────────────────────────────────── */
+#overlay, #delete-overlay {
+  display: none;
+  position: fixed;
+  inset: 0;
+  background: rgba(0,0,0,.45);
+  z-index: 100;
+  align-items: center;
+  justify-content: center;
+  padding: 1rem;
+}
+#overlay.open, #delete-overlay.open { display: flex; }
+
+.modal {
+  background: var(--white);
+  border-radius: var(--radius);
+  box-shadow: var(--shadow-lg);
+  width: 100%;
+  max-width: 460px;
+  overflow: hidden;
+  transition: background 0.2s;
+}
+
+.modal-header {
+  background: linear-gradient(135deg, var(--teal-800) 0%, var(--teal-600) 100%);
+  color: #ffffff;
+  padding: 1.1rem 1.4rem;
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+}
+.modal-header h2 { font-size: 1rem; font-weight: 600; }
+
+#btn-close-modal, #btn-close-delete-modal {
+  background: none;
+  border: none;
+  color: rgba(255,255,255,.8);
+  cursor: pointer;
+  font-size: 1.4rem;
+  line-height: 1;
+  padding: 2px;
+  transition: color 0.15s;
+}
+#btn-close-modal:hover, #btn-close-delete-modal:hover { color: #ffffff; }
+
+.modal-body {
+  padding: 1.4rem;
+  color: var(--gray-700);
+  font-size: 0.93rem;
+  line-height: 1.5;
+  transition: color 0.2s;
+}
+
+.modal form {
+  padding: 1.4rem;
+  display: flex;
+  flex-direction: column;
+  gap: 1rem;
+}
+
+.field { display: flex; flex-direction: column; gap: 0.3rem; }
+
+.field label { font-size: 0.82rem; font-weight: 600; color: var(--gray-700); }
+
+.field input {
+  padding: 0.55rem 0.8rem;
+  border: 1.5px solid var(--gray-200);
+  border-radius: 7px;
+  font-size: 0.9rem;
+  font-family: inherit;
+  color: var(--gray-900);
+  background: var(--white);
+  outline: none;
+  transition: border-color 0.15s, box-shadow 0.15s, background 0.2s, color 0.2s;
+}
+.field input:focus {
+  border-color: var(--teal-500);
+  box-shadow: 0 0 0 3px rgba(14,109,168,.15);
+}
+
+.modal-actions {
+  display: flex;
+  justify-content: flex-end;
+  gap: 0.6rem;
+  padding: 0 1.4rem 1.4rem;
+}
+
+.btn-secondary {
+  padding: 0.55rem 1.1rem;
+  border-radius: 7px;
+  border: 1.5px solid var(--teal-700);
+  background: var(--white);
+  color: var(--teal-700);
+  font-size: 0.88rem;
+  font-weight: 600;
+  cursor: pointer;
+  transition: background 0.15s, color 0.2s, border-color 0.2s;
+}
+.btn-secondary:hover { background: var(--teal-50); }
+
+.btn-primary {
+  padding: 0.55rem 1.3rem;
+  border-radius: 7px;
+  border: none;
+  background: var(--teal-600);
+  color: #ffffff;
+  font-size: 0.88rem;
+  font-weight: 600;
+  cursor: pointer;
+  transition: background 0.15s;
+}
+.btn-primary:hover { background: var(--teal-700); }
+
+/* ── Toast ───────────────────────────────────────────── */
+#toast {
+  position: fixed;
+  bottom: 1.5rem;
+  right: 1.5rem;
+  background: var(--toast-bg);
+  color: var(--toast-fg);
+  padding: 0.65rem 1.1rem;
+  border-radius: 8px;
+  font-size: 0.85rem;
+  opacity: 0;
+  transform: translateY(8px);
+  pointer-events: none;
+  transition: opacity 0.2s, transform 0.2s;
+  z-index: 200;
+}
+#toast.show { opacity: 1; transform: none; }
+
+/* ── Responsive ──────────────────────────────────────── */
+@media (max-width: 600px) {
+  header   { padding: 1.2rem 1rem; }
+  .content { padding: 1rem 0.75rem 3rem; }
+  .col-btn { white-space: nowrap; }
+  .btn-edit, .btn-delete { width: auto; padding: 0.55rem 0.5rem; }
+}
+

From c4a5c9203e9527a51f688cae1d4d24b8da094bf9 Mon Sep 17 00:00:00 2001
From: Paolo Salvatori <leprino@hotmail.com>
Date: Tue, 8 Sep 2026 14:08:46 +0200
Subject: [PATCH 06/20] Add the .NET version of web-app-cosmosdb-mongodb-api

ASP.NET Core Vacation Planner storing activities as {_id, username,
activity, timestamp} documents in an Azure Cosmos DB for MongoDB
collection through MongoDB.Driver, under
samples/web-app-cosmosdb-mongodb-api/dotnet. Same connection string,
database, collection and index setup as the Python version, md5 ids,
deletes keyed by document id, and the update flash only when the document
changed. Verified on the emulator's AKS: rollout, port-forward and
in-cluster smoke tests, then the Python image rolled over the same
Deployment.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
---
 .../dotnet/README.md                          |  68 ++++
 .../dotnet/images/architecture.png            | Bin 0 -> 38698 bytes
 .../dotnet/scripts/00-variables.sh            |  38 ++
 .../dotnet/scripts/01-deploy-resources.sh     | 162 +++++++++
 .../dotnet/scripts/02-build-docker-image.sh   |  18 +
 .../dotnet/scripts/03-run-docker-container.sh |  33 ++
 .../dotnet/scripts/04-push-docker-image.sh    |  40 ++
 .../dotnet/scripts/05-deploy-app.sh           |  89 +++++
 .../dotnet/scripts/Dockerfile                 |  28 ++
 .../dotnet/scripts/configmap.yml              |  11 +
 .../dotnet/scripts/deployment.yml             |  81 +++++
 .../dotnet/scripts/namespace.yml              |   4 +
 .../dotnet/scripts/secret.yml                 |  11 +
 .../dotnet/scripts/service.yml                |  16 +
 .../dotnet/src/.dockerignore                  |   2 +
 .../dotnet/src/Models/Activity.cs             |   4 +
 .../dotnet/src/Pages/Delete.cshtml            |   2 +
 .../dotnet/src/Pages/Delete.cshtml.cs         |  21 ++
 .../dotnet/src/Pages/Index.cshtml             | 265 ++++++++++++++
 .../dotnet/src/Pages/Index.cshtml.cs          |  47 +++
 .../dotnet/src/Pages/_ViewImports.cshtml      |   4 +
 .../dotnet/src/Program.cs                     |  48 +++
 .../dotnet/src/Services/ActivityId.cs         |  15 +
 .../dotnet/src/Services/IActivityStore.cs     |  24 ++
 .../dotnet/src/Services/MongoActivityStore.cs |  98 +++++
 .../dotnet/src/Services/MongoOptions.cs       |  32 ++
 .../src/Services/SecretKeyXmlRepository.cs    |  49 +++
 .../dotnet/src/Services/StoreInitializer.cs   |  33 ++
 .../dotnet/src/VacationPlanner.csproj         |  11 +
 .../dotnet/src/appsettings.json               |   9 +
 .../dotnet/src/wwwroot/favicon.ico            | Bin 0 -> 36791 bytes
 .../dotnet/src/wwwroot/style.css              | 341 ++++++++++++++++++
 32 files changed, 1604 insertions(+)
 create mode 100644 samples/web-app-cosmosdb-mongodb-api/dotnet/README.md
 create mode 100644 samples/web-app-cosmosdb-mongodb-api/dotnet/images/architecture.png
 create mode 100755 samples/web-app-cosmosdb-mongodb-api/dotnet/scripts/00-variables.sh
 create mode 100755 samples/web-app-cosmosdb-mongodb-api/dotnet/scripts/01-deploy-resources.sh
 create mode 100755 samples/web-app-cosmosdb-mongodb-api/dotnet/scripts/02-build-docker-image.sh
 create mode 100755 samples/web-app-cosmosdb-mongodb-api/dotnet/scripts/03-run-docker-container.sh
 create mode 100755 samples/web-app-cosmosdb-mongodb-api/dotnet/scripts/04-push-docker-image.sh
 create mode 100755 samples/web-app-cosmosdb-mongodb-api/dotnet/scripts/05-deploy-app.sh
 create mode 100644 samples/web-app-cosmosdb-mongodb-api/dotnet/scripts/Dockerfile
 create mode 100644 samples/web-app-cosmosdb-mongodb-api/dotnet/scripts/configmap.yml
 create mode 100644 samples/web-app-cosmosdb-mongodb-api/dotnet/scripts/deployment.yml
 create mode 100644 samples/web-app-cosmosdb-mongodb-api/dotnet/scripts/namespace.yml
 create mode 100644 samples/web-app-cosmosdb-mongodb-api/dotnet/scripts/secret.yml
 create mode 100644 samples/web-app-cosmosdb-mongodb-api/dotnet/scripts/service.yml
 create mode 100644 samples/web-app-cosmosdb-mongodb-api/dotnet/src/.dockerignore
 create mode 100644 samples/web-app-cosmosdb-mongodb-api/dotnet/src/Models/Activity.cs
 create mode 100644 samples/web-app-cosmosdb-mongodb-api/dotnet/src/Pages/Delete.cshtml
 create mode 100644 samples/web-app-cosmosdb-mongodb-api/dotnet/src/Pages/Delete.cshtml.cs
 create mode 100644 samples/web-app-cosmosdb-mongodb-api/dotnet/src/Pages/Index.cshtml
 create mode 100644 samples/web-app-cosmosdb-mongodb-api/dotnet/src/Pages/Index.cshtml.cs
 create mode 100644 samples/web-app-cosmosdb-mongodb-api/dotnet/src/Pages/_ViewImports.cshtml
 create mode 100644 samples/web-app-cosmosdb-mongodb-api/dotnet/src/Program.cs
 create mode 100644 samples/web-app-cosmosdb-mongodb-api/dotnet/src/Services/ActivityId.cs
 create mode 100644 samples/web-app-cosmosdb-mongodb-api/dotnet/src/Services/IActivityStore.cs
 create mode 100644 samples/web-app-cosmosdb-mongodb-api/dotnet/src/Services/MongoActivityStore.cs
 create mode 100644 samples/web-app-cosmosdb-mongodb-api/dotnet/src/Services/MongoOptions.cs
 create mode 100644 samples/web-app-cosmosdb-mongodb-api/dotnet/src/Services/SecretKeyXmlRepository.cs
 create mode 100644 samples/web-app-cosmosdb-mongodb-api/dotnet/src/Services/StoreInitializer.cs
 create mode 100644 samples/web-app-cosmosdb-mongodb-api/dotnet/src/VacationPlanner.csproj
 create mode 100644 samples/web-app-cosmosdb-mongodb-api/dotnet/src/appsettings.json
 create mode 100644 samples/web-app-cosmosdb-mongodb-api/dotnet/src/wwwroot/favicon.ico
 create mode 100644 samples/web-app-cosmosdb-mongodb-api/dotnet/src/wwwroot/style.css

diff --git a/samples/web-app-cosmosdb-mongodb-api/dotnet/README.md b/samples/web-app-cosmosdb-mongodb-api/dotnet/README.md
new file mode 100644
index 0000000..e730db8
--- /dev/null
+++ b/samples/web-app-cosmosdb-mongodb-api/dotnet/README.md
@@ -0,0 +1,68 @@
+# Vacation Planner: Azure Cosmos DB for MongoDB
+
+> A Python version of this sample lives in [../python](../python/README.md).
+
+This sample demonstrates a ASP.NET Core Razor Pages single-page web application called *Vacation Planner* hosted on an [Azure Kubernetes Service (AKS)](https://learn.microsoft.com/en-us/azure/aks/what-is-aks) cluster in the cloud on Azure or locally in the LocalStack emulator for Azure. The app runs in a dedicated namespace and stores activity data in the `activities` collection of the `sampledb` database on an [Azure Cosmos DB for MongoDB](https://learn.microsoft.com/en-us/azure/cosmos-db/mongodb/introduction) account.
+
+The application talks to Cosmos DB through the MongoDB wire protocol, so it uses a standard MongoDB driver and connection string.
+
+Before installing the sample, make sure to create an [Azure Kubernetes Service (AKS)](https://learn.microsoft.com/en-us/azure/aks/what-is-aks) cluster by using one of the following scripts:
+
+- [scripts/01-system-assigned-managed-identity.sh](../../../scripts/01-system-assigned-managed-identity.sh): creates the cluster using a system-assigned managed identity as its cluster identity.
+- [scripts/01-user-assigned-managed-identity.sh](../../../scripts/01-user-assigned-managed-identity.sh): creates the cluster using a user-assigned managed identity as its cluster identity.
+
+All commands below are run from this sample's `scripts/` folder.
+
+> **Running on LocalStack?** Install the [lstk CLI](https://docs.localstack.cloud/aws/developer-tools/running-localstack/lstk/) and run `lstk az start-interception` to route Azure CLI calls to the emulator. See [Run against LocalStack](../../../README.md#run-against-localstack) for the full setup.
+
+## Architecture
+
+The following diagram illustrates the architecture of the solution:
+
+![Architecture Diagram](./images/architecture.png)
+
+## Deployment workflow
+
+Run the numbered scripts in order from the `scripts/` folder:
+
+```bash
+cd scripts
+./01-deploy-resources.sh
+./02-build-docker-image.sh
+./03-run-docker-container.sh   # optional local smoke test
+./04-push-docker-image.sh
+./05-deploy-app.sh
+```
+
+## Scripts and manifests
+
+| File | Description |
+| ---- | ----------- |
+| [`00-variables.sh`](scripts/00-variables.sh) | Defines the variables shared across the other scripts (resource names, image tag, Cosmos DB account/database/collection, Kubernetes namespace, …). The other scripts load these values by sourcing this file. |
+| [`01-deploy-resources.sh`](scripts/01-deploy-resources.sh) | Deploys the Azure resources used by this sample: the resource group, the [Azure Container Registry (ACR)](https://learn.microsoft.com/en-us/azure/container-registry/container-registry-intro), the [Azure Cosmos DB for MongoDB](https://learn.microsoft.com/en-us/azure/cosmos-db/mongodb/overview) account, the `sampledb` database, and the `activities` collection (with its shard key and indexes). |
+| [`02-build-docker-image.sh`](scripts/02-build-docker-image.sh) | Builds the Docker image for the web app from the [`src/`](src/) folder. |
+| [`03-run-docker-container.sh`](scripts/03-run-docker-container.sh) | Runs the web app in a local Docker container (no Kubernetes) to validate that it starts and connects to the database as expected. |
+| [`04-push-docker-image.sh`](scripts/04-push-docker-image.sh) | Tags and pushes the Docker image to the Azure Container Registry, on Azure or in the LocalStack emulator. |
+| [`05-deploy-app.sh`](scripts/05-deploy-app.sh) | Uses the YAML manifests below (templated with `yq`) to deploy the app to the AKS cluster. |
+| [`Dockerfile`](scripts/Dockerfile) | Builds the Docker image of the web app. |
+| [`namespace.yml`](scripts/namespace.yml) | Creates the Kubernetes namespace. |
+| [`configmap.yml`](scripts/configmap.yml) | Creates the ConfigMap holding non-secret input values (database name, collection name, login name) passed to the app as environment variables. |
+| [`secret.yml`](scripts/secret.yml) | Creates the Secret holding sensitive values (the Cosmos DB MongoDB connection string and the `SECRET_KEY` the app derives its Data Protection key ring from (so antiforgery tokens and flash messages are valid on every replica)) passed to the app as environment variables. |
+| [`deployment.yml`](scripts/deployment.yml) | Creates the Kubernetes Deployment, including the pod specification for the web app. The liveness and readiness probes call `GET /health`. |
+| [`service.yml`](scripts/service.yml) | Creates the `ClusterIP` Service that exposes the web app inside the cluster. |
+
+## Accessing the web app
+
+The app is exposed through a `ClusterIP` service, which is only reachable from inside the cluster. Port-forward it to a local port to open it from your machine:
+
+```bash
+kubectl port-forward service/vacation-planner-mongodb 8080:80 -n vacation-planner-mongodb
+```
+
+Then browse to [http://localhost:8080](http://localhost:8080). Alternatively, use a tool such as [k9s](https://k9scli.io/) to start the port-forward interactively.
+
+The app also exposes `GET /health`, the endpoint the liveness and readiness probes call: it returns `{"status": "ok"}` when the Cosmos DB for MongoDB account is reachable and `503` with `{"status": "unavailable"}` otherwise.
+
+```bash
+curl http://localhost:8080/health
+```
diff --git a/samples/web-app-cosmosdb-mongodb-api/dotnet/images/architecture.png b/samples/web-app-cosmosdb-mongodb-api/dotnet/images/architecture.png
new file mode 100644
index 0000000000000000000000000000000000000000..2fb4dca88c8729e949d07396f9eb6c43b956f8ed
GIT binary patch
literal 38698
zcmbTdWmH^S(=OUTf+Qh9LV^WIaEIVdaQDXDz471@2oT&|0t9Plym5!%?hZkNyW3gp
z{l4d%dw+c6j{AeL=+(XEtXZ?_si$hz`k^2vj{XAw1qcK}my{4u0)Y@6fImD`MBon0
zM^p>A&^n2#I|)0O7&uu#Y)MosY)n8lCJrQQBnD;>lFv+^*-4mLxLKLGSvW{&nV6ZF
zUQ~750gs_LNy>_%?4Uk>NrScb$%7rZg=QzA;Rph~#CrNe7+dsy`rR|LFS1`ipz_F<
zcLvWvpoDLdB41Qo=l0UkJXIzaFAw)(y-3LnV#(1k{XfwN35NO#eUpBh$$Oz8Vv|}>
zisQ<k`@8w9@Sc|!XTw6W7>o@UTIQ!08!d=hc|jv05=H(oz`9tYHzRq#`_SWHp?ARe
zB6%UX*Vubm?s$E{ak!4faqI5j@oxB<7@>pdEg%r+N)UJN<<mbDucN@g#g~Jm=;<Rw
zP!$2VEcq5cX{QlE0}vPFid6BWy(45}9N@Bo-a`XiS_%IDJXn?ul^{{q99!R0SByu&
zspVXr{RjdjF$t>reTRlrw72ht^DIE~l^vv$NeRaI_$O2<CWH&m8_57AV)xK6bwDk>
zExZjhzKg19+)hd;e&0UKB`42o%%=I|(iNw1EH*J*pVZsK_A;kV%8$gz$oahMl@Xdl
zZ9xDmg5DS$aGy$8Nz*$?UIz7?sGImpv7j{rEQK@*%=AqW>{zHxs{^CyE26hGMh!o;
z?5}Oy33tA>mNPNX&=p%$y-;U1f&5X0&}DX~YiKtN_6?DNmEyyGbgiZlRzHksUnppB
z!Bd%2syZv!-cwWQwfO8~?#6&c@iv}^FZ_|Bfmlf9oY%3-+JTWkg1&%?u_?g0#ZK{q
zbA9Lwd5{^+p7?(1C2JLEm>XA~vAb!t|IL7zsj1pDTT12Z+$o`lo#TtC6qFx>7Zl9O
zAGH5YMgK8Y(s9=5`0J>{3T&G<a>WbIV0Fb}T+9;*XgkCxKaIRTRa0J5Q}3WmLb+F|
zvPp7af|<?li#|wD(61Pgv>45tkKJklY#0^s*Gjp!`ZNE$^s-$*Azg7viHifTnJ)75
z!Gpv6r($OA&&30}ss<05?`5x!5rE0|fal+xqLxLU!Jmuq$u5^Q)FxEwPb+JAF%j&S
zr&yDbyrbSt7%XF<mTY*wfwzEbr{j{f9Wy}gC{0_*k@7n6J?osiyiJO)BMt~d;#ns<
z+65b6Rv_$W>i=IXk<HT%gKBylbdjg*h6dBeKAa96$6!YTF+KPd2jXaV26e5@@qT^5
zC1odWD0&2cHbLmxK5NVI+OC}AH3$?&Oj2ZkO0b_*-8OgP2se7gmC*g0ZT%v-yxi5s
zCBwe1B^-ONrlCCIuYM&$gnyHLacJsXMK4~{Z}f{A1klx+9!uPI<YxmzRn>Re`?$gp
z;CJ}w14?}^ySQ=;u&<HF<~{_<dj_FPbJky#;YLO-<Z3T1W~Rid7YXvA!B*z$JH6M{
zTvJ*L`aT38Ux6o)(=xb1uC@%jai#GZU`Dm!7RCPzlN$X+zrUa)cHfqerQS|i7^aaQ
zPEb3wU(;W{w2FK?4+7nx8M75LZ70KG9g2Cnj?f8Km#ISC;1uyLvU2vMMp;g<9Kx3~
z%gCS=agw6e;Ls0712d2hYndM>0`E6wT`r21)l=b~KC%6T;`s*uhyz$=4Nq5+eWi0)
zcapgI2d&WL<k<wQ0~9MqX#(+*C6!#Si069{B+wD<OdE0-4>aT%&h>)zr%&H@3m4Tj
zkU*$-oo&q^kah2(c4PQV$^!BC_*bmJHgmUX{);Eg|1;*;;^AC*hxz^BT?_#>O9*iM
zqi2pxf-cHj0e46skQsm$YQG?yN)|5+INeX-&`;v2IrETNvDwYYwBH9;s%$ag_lqFV
z#}~#pt}ko8hVO4$p`VH&?y>JP=GX2U?$ubYS<W1~`q%A*&(93b&kXE^&n%;ZFk*m#
z<ymKJniG<Tx1ploec*@Hp0tc#8{5*{x;YrIZyOLmLKuKJ2>@87xh1=#mTqj~J5Odq
z>8ec{tzZ1}J%Eo#5zuVjsi^_yvg;K4wc7J{VCU*DT3`HP(Kp2$>ITsNnav%TjZy_d
zIBOPuZeF39pEEc;Q$BA=t2H@`Y-5#f&7_v3lh_u1Wm?HoZQ#QJ68!6@aI2rD5C1?2
z0tL{O{RgSx|6+6T|De*3uP>haqKS4#Jt*|s-LvfvJnLP>!_?><)7QfUfc0$;%}O|5
zK1$|IS*4x{)0VYH###H$y1w3f;LF!^We9h6XBC#cR*8G3KZ>#J(Jv+up70BTbJUS{
zuk-rU=TfvrGg2Iouok58oL4a5R3&w8UKj*oItEOMNMYCFJ%vS(5b@s2XCPk?5L0+D
z7~j_=oi(_+i<B{90Kxc~F)&tOF52r;;yP+}He~D}1kfMEr<<`gl<UhFMzM9SVx2?q
zSbr}I5D0^_tQGmFH)GtNI78X#)%J$rAEeXl;3?$W5D<vuC!kh>o5{dsuTjUdijd%q
zZ`3E*qV`swbKD9N@*b8koWF=~<60&J)N{o2iHJ}DdPUNBUQ*DK*R&hnFQNcr;b4#^
zTpO{4CCn{}Q*SFK%XcXi<$SvjL;&eq1A{A1xSImXAS~g&?<Q3ys-vEwI8|x5QAyo&
z3JOg7%<{!SImP<;EciEzbv^<%+x;~gG_o3|O!M=B^G8a^wk*h30oe=Ju5YxT#w?o9
z<&nvpzUbbvBhO2xLGIN|B3Z@FMTf;yKcrciXGG;&LKZ(>UPf>(urjAM8U2;FhF;t}
zPG=!~G0nyG50UQ)Eor`<Z6-1{KImj}ZDpUXV8DV25J0H*fU{E<jv8(SiD-YDDSYz)
zo9w!_^w%8b1&>Oe#ow|lUCUBpKD*^Z0=3Qn+mt`kAiDpC@9WQbcwUOzPKO*rYgQ;;
z3y0BXCJ;#{0QUI<GEtlh<MjMOo%`9EKC)JP^}8v`Haj|$H<F*Uq!#~3l$uEv;6%51
z4+A^T4or{JqQliIrcoJ_3yzdsTg6Q2cII1eprtUgQ7ndiV~A6HOb&huMLqt>t*tl?
z<-WLiyYIU&wN4E)ZI55Mw7u$GkH|O}aRtv8x+q^$eLO$qWPjHA{6nsBK^<1-HxNh$
zqs$iPYN!MoNyMs&d*d1$`^{?-U?@*OryTrkNG9q?D?cXBiD3&Fh`8oJ+*=9BNd)J1
z-^jzQYHKl$F|(grRG@5%3b=WEbEBF`L8d?V59BV&G5t{}g9abyRauS2-}xEx0ioG4
zO(c!P7{w2g@X7Tfh-BRl{(>-PilyZ?+v7HiC`cSwBt#(1v=Y&57~?#`P^J9)XG`h!
zf*%r{y!ZVW=Nn~fVp~!gnY63#5kW%lduZ%HqZ6rm%?duUyY;w=Q{A>d*2aRs6T~+k
z;xw>-58ZD3%`bec-Q;x0!YlN>k^R(wiUJ@ZCMVn%iG6?9p{Ot*pN4y&oMcIjo54}g
zVzzKo{@#`~{<9b|#cwCq86;2uMHE=SKP$oDjXy6&&c*R1x5T%CmFHV5-w48jnh8x8
zOEN}G^ie_(KqPO0-PMwU@}Z}RaE|;uvI`$<HjtM}z8Xty2X@jMFb=IW8|1Aj&j!s;
z`oeFxNtN4EDs}hea(<Hlw!!-JbYu8Y>vyudOWbbpY0*mNc!s|}<3PS;AQnGA`XJ3l
z0zcVsOvi>epW<H+?5tA!Y9dPVT@^2_Z!E^Kz{73EfDuq3YCQKGGtpnnwn4TG3D&6!
zk!S(=+WnV$dj3laNMs0C!aHbovNO0#b1d2RI#=qHEc1fVUlM)~0`O<X_ltfj63l%^
z9%;f&+&&pAU}AW!Fx8~3Sp)<^MFnV{YH+j^>*V=O@@;kjr6C^-Kp&y^uZI1YN97x)
zRr+c#HhB)e$$&tD5`a8LtMd05U2aq#$~qTNK)yeKcycxLJUxH(6wQnEJeOuh?bW}m
z%QL_2e#t(^{EUI-6M)S`QQ#FGblome-oxBifaUf0ITy8lwT)8f9c^ny1%Yto_5INQ
z;n29xkb&zH!M@5D&MG)OczprjxF80g^M~ujEaBAGgsA`f4)DuHKWb@TAMUp=;JN}V
z{QNV3HG%w)r)Z8|im3W~p#j+VjHJldXGQBdD1iPy1ReNrhqO!sBC!UH_6`xyr0>x)
zU_uli3JcBv%lt=zW^k*(5eyO3{!YE9m9e$v1qfCCX(;cne@B#WFP`55q@M&8fIq#c
z(BEy%&j5WQ0>6LQRx6rx_p)?yDq{rhA)*%p<A^B#s6hVj0|<}*45sxo*t#L}ztjKU
zv-$c27whgFzWLwld~iEH`m@FV$UCD35X~>3|0C-%%?j}q5cdpTK27tlxIpmw&pjYs
zym=bF?D_w5`2T9-|9T?RwT|#<`L2jhL&A0Cbw#xOy?|5%!(9JqQ3_N$4GsQYIR9^j
z{&xsK2m!(-_xQU8*Ev?pD#*E^kANF}CKt=hdtiV4Korkcf|8GqD?>tiTh`gWj*)#=
zooC@)$Wp+l<GWsuZENNR^oIe2aELXx-OsDPim3y4#l>%k+{k7U0gFID1Xe)MqFFt#
zlzTJ3(eLl2^Az>~6>=!$<YYFUtL_pSLK!4v(J!2VSiAz53x7GYx&ai}KY)I$U|ad)
z<N-VW3h>PgW`bfSFrYKkcQc@jKd+`j@9+Qj=ckqSyaduaRN?<5fKQwCKjeC?cwo_Q
zm?6-#M0>m9LgVeR7z&55yWMPrk|Z;9KooO;0WeS%1NqZ$xEudp9b0NgV_|m?J|f8X
z7|9r?mfXwci=2({xcU4<j4hQ$Uvdh2^>#3G9|bRq*x=Iu1%N@?TFmL`rl)TY9MI9`
zyHw^;C?_}BH~D{A&WkxGs0{C->WJHn$O3i?6#+o{=O%8&;mL}+BY(9qUe=_DxjUY|
zEZW7ld4pZ}D}<vVL3#LTb_@`+pWn+Dw2OF2SyO=5U%dzH-0|~fcrAabRCRpv=l<&W
zq{<hk`&G<dHVANgl+BL_p!R0~mrFZC*Q(?&#SOCBeG%da<YvF0J8MsM?MaEhqvR@#
zB3S!<g9mEuM9I1UtQAO||3k?B=VaLrrOac1b3VMw8=Iheeh%<?PC#=9g-|M5x&bi-
z0PO8v0_yq>p1d2oYp-|_T9R@pK@YV{8&|2QDhODt@3P*|WUpY}&^WBr4B!JC1sf5F
zDnURNJ1cQx`kyqG)i#>Dw0gjPsAq{ik58>A<nvCo!|e=H`16fjX{nGCs_`y%8FH|x
z94RM&<Z*zta3rb3SB!z#`>P=61Sum1uRrGN!`xzP@&Yw2$pW&TQfg-%(`M$ptWmo`
zxD)_xR8Q>b<2SDCAU87bpIcO$*Jgt$He(A)7cC8i=f8GBJf-pdTY(J#vQzE$l&sA^
zvt6r%IVGk8{dl8l<ErczT<pKhOw|$(zv_qOK{(r0QU>&QSpgU&17P&Ue^bnJng5ew
z&cdws9IbolZRn_m%Lb%r%4PIFr?inGb-JmLrvU&k@|*`q>!0cuR)7Zs6$|?^Mo`#S
zfD{5`<rW+Wsyd&cM`OVzYxC{~zUBc?*wz)AeSd!Fjx;{CiWj}i&qh0QhzkOFqWHJA
zqMuK*B3Km}Nf7VV07VlcMBpCJ!-L&PQ!=LKq>Ec?)cw|!ehcN(On_1GtZsNNv9PR)
zw0Q#@xRnxE#Rp5i%pq4p81gM(;-E}@3|!Z4VUPN6Pl(Or4Zt!W<q>i*cqK5k!Z3%j
zA8A}w=vl@o2$Y2m7{M1dJ}5o2V1<<A^EU4W;0X$SAOrXx$}^=ZIB3tLrBjL@8K4fj
zQ}yOR?!RT?{}Q_uVDtg(QDFXm?QE&GgVcFokg=FySs=Se_O`$1<*6f|Rggp({L?KS
z<%?R0uD#@T!jvy9Deb>P@f^LgqvqIu4Ep%cc=^1w8H#+T@Mtlx%n|-z{|X%_Y{^KF
z6!EtIw?YFesZgb}3aNNxQ&eG-QX|-vfog)Qs($_I(e81Lf*Z@y(HGKaq?DJ}yBh_P
z1W(!22h6f3OX5_1=9KShjB8Iy?6Q_NO%ScP{_$x?Acl%Tb|$8?m?<ykyNV(roB|)~
z1t`f^Q1!Z_09sd!!>y_IgKASTUdF-}jCrevom)3`0o~Rnoh0brVyh6v54Ebn%&CG>
z<=7T&7k7O-v6(mk$~I}MVn!eQTKyCyJICCAP%DmzVp{WKYGzkVQI`HNJk9wYrlH5B
zDx%2r<X>-kXdp@P_EjYb8|B&R+zuqebJvzrU@LHLK|73KZ1yn^u;OVpcD4znJqs~)
z9(W1!3?x4LZPgl~*|lb%mqt!*)=!Wx8me(TWANvQ0zD$hWM_C;Z7usSt7fWJpJp21
zFQjV?6gnSZ&<k8y<*vRVbXFINjYO$0rISl6vfORdIH{#f3Mg-L<h&rhgVSRZ;=(zf
zsG2yae9HlCxC*MeeFKY~f*?lr5u$1=9E63xPKxtzbN_LwSDLD7yDqgV;3-qMjLi$I
z>YZsTeRdaxprFEW{5J6yZCx(?SppXdkGOB6?u=-5wq3Go^Tzvca2YZiy=NuUm5he4
zK>CQ^l3MRt2UYQ}X#pf3>I$K$)JWFS)cB~bry?F74^FKJMka{F(i!Y04bk3dJXjd(
z3e3g(7M{Q&J^fArk1R;`X4%OE_rj#xgdPr$t#~g)FC2ftNp(oKTul!Ey2-Ow+@Dus
zvQ0Pazw<NM$VR^qXy&K*k1tNq*rB)`Wp9_Otzr6E0vLG*B#yQI=9aC-@oimpfa3!g
zv+$?0W~a0oU@K2}_7y{UQXkiYjR>>A1#m`rK~+jbS#s%V<%USRFJ!JLPnAs~f9E1z
z!&i$|aKTBezG((m#?qjai$vw;RvNPKPQp#bw=HqZeU|#V2#%{jB=PYrK6$QKbv`k*
zO6Vx2+<Ox~+l7i5|J`I>tdOuJXaG8=QUR-;c`KWAVn_Vpa)F0Ss1IXs+~Z-V-bpMU
z|77Rw0i5^CyS+mo_wGVQay2GHe)zjyz<L-&XCYqrQ}F(x28B@@RTFT33|@U$Aa??$
zK8;t$!MBrFMj{XOu!oZ>ccDgYhW8ydZ$PL(uJbV>9;(!(qgB}6*C*6xddJy%W;0vi
zI#;Fd1HkALBg_hiL)qi$7THUqsRsw?O)gDzh<Obby|3(ogqSbf0bQ;87T<&dr99H{
zK&Xp#RRz^GFYBCYF4d`Saq%oZZ^rH2>CM3bi7o&;&%*V2zEZx5|E`*8X|Pd1*DsPC
zO$G@P8<erEk`Z~m8Afi}W>uPQ4SAz`3rx>i<}Zs1L@g)r&1jN6OQ4|BiiZ2_wGN<R
zv#m&J*+u7_xBrsDDS(Q#oemRw?v-z_m?7T^0dkGBYUU!dp6U2NJT6!+m8~W4lw#uE
zT#!e8HSOx|?%!x@1~w2C@sBMGD|}#iUeQBVdd#G*_l>C-7p;c7gWc|Q6IpaR9ZWqD
zpRxlRfLoAOyCy*~TYT_F$nGcYw?nDeT%-x%gd%;hmHL(SD|N#HK@gx+l@U-{JZBEo
zLUM91PKxuZaBsip2r9Sz=bOS}_o6~V1=TlxPrs}V$bn39$g(+_D9FpT@D^O|I{~v`
zCzXvOS;-Dc#9fhulxZviJQE<`Xp9;*YNJ+5EEY7QzrPYmd`y9|zq%i(xl|us#<?MK
z>{SI1a!mL2v}_V871w*bcZ&`PuPE^@&Cx<PfrI`XqEwdI=gd}IFH=(a2ZJ2P&T68K
z5BJhNk>o@-p*w3+7}*Wn1~OSn`NMx=_q)cUM0k?)SiG9I-uxw+r1l3Wb<#PCoJQT~
z%BJmp$R*G4owR1z^0F(!Kgq!AlIBwp1gJyUZ4)0_@BrB$uk6qV=^K@Xxell9s3p;Q
zH4~EU`j1HYg_w$~kIlos3Ipb*ASy`6CzjScx%q5l`E{2b3_*=Mr62x;usNr#I#`x?
zc5Fo9dnYH-L>lf|wB*$l8=_Ak<jhKGQtro0E#}oh({g+B+tgA#8B503wKi$fGmjZx
zDk;~U0oA2V&!Fx7Aos2q3dZ5_b&=+=P2%sBtk;59Qn$B3o7a&;=Whn*Sucf;$o8+_
z^wkj0J-Zsc2ELh$WQY=ACGv67Elhp6pj9N0g2Tn~r9Bst$siw&>5)OP6+!-i@x5D8
zg7h<nF{NnVUt7O}9Uu_`Ge3KDGj6JN)3UQ{6UyW1f_?txq@<ITyKXiaeoSR!wD{iq
zcuBLU5I|=7XZ^OWx+44F`mB$D%wB%VNP8%;V}eMN*T>CrFe}1iOKdn;KU0ycOPUlG
z>ms>pJFX2L8e1P<p_OfZKW%YBe;V(7xbWxo??`~u4}N`}c*vB_rjY{8_L9?@USs!C
zhSKp1^+?a%y#o}4(ylhQEWkSK<5c2fzLZx-{EgCL*hiuHeuSbma>z6GcKiQYw5^Z1
zBc<eSsl~LhQVCi^ax3I=gxF&CP=@AbHCa*|-0P=k{`7!E{gSqf*+`XBdIsM$#SaP7
zA+p~+Ef)5b)H!(%y=QU4e3)OB-xKTVT27NtFoE<}?F&q<N;nu;7>(-~-nmpr&9I0x
z8C9*p;wNc~+0M7@CqjDkTXOBYbQ)ZmTn?KwVkw?KIk7JXz`T@gQZ_0V&#n$kz(?Bm
z^KbI`T%@(jmN7HKL^ZMs0gp-h<Nf!fhL(~(X|?GKN3$DQ;LVmfdzMMTzSo3gcs`|&
zGT)zT;UJ*m17d0;nc4wL8#TWd`gcx?DCi|peM8AT6;#ckL3aluAB%zXSB6OrZZW{p
zq=PYqZDSn=SKWmk8Q`!^D!-FYO~C)~VehG+z^}p2Gq&$Z-iNJ$!>b0-on<*LQ=MXH
zDvD7Pj}TH`JlU7`3AvU666VhP`bo5HEqEZ+uJPIl@3f(0h$z}@OpSairhSH6WA<uI
zf8uah<fRoYatd09+a6G*4i*ve6WHCd0aUlNn(ti1I{5b$GX1r{;8GQ0%Y!dapGFaW
z5O+uR6QPR<p7FVcEp<2-{lUQo*yxg1k%&SN8#j`ymH_Ii9|lPO&Gx4%?sQ#7!l}O|
zO3~WwsRM3*wa~|%i%0@UTF_6h{elrejo;Nv5JN&jqJjhbQZotic7bI5Ni;*B$C=%a
z!=5j2ZWqvGpJPYMv;XEjO&%BETdg!B#WI|k<|}3Qn38h+a)Xg#5J!`)3c>ZTQLlON
zt*b;izl))0{gUa|*v>h!1Pv(SdN27~C670*(m8q|`}E<u7Eh|4mfN%yeVccrr(hg7
zchsuthItAIsU+rMi#1ZeR0^j?S^a-VlDuM`|B2Q)V(qq(flC`3cXz!<TM7%4P`~bb
zUZi~BeI4I0`=~jem*6yB^fjE_Qed{~Bz{^<bG8!)e{zJf6gKd1UY^s^O#SK4to*lo
zw<D07jN0xiqbdymmY;=}muh`bwL)i7{^BZRtpLp)Hut|kUsQ8bzBg5_zi4X`@Cxr)
zo%bl@Q1Q~^W!XJY>x0ZRj!dF5b!!nTK=7>!YX7JSu;KmeX7`B#_nT%c*}L#4{*`AB
zw>0ND7u!F4PycXl0bcGe^1uIagapibjy$)F{yhi+|Mx_*Q_UIR70*pWpq_PvM5U&L
zpT(A;a*z=M+%=VJj1DAmwO0HWR*{<Kj+b7MP3f5!MufgL7QE6;VExaZG)~L2qO;$@
zv{*cT?e#C9+Eo`e8hKY-Z*z5Z?lg8sva?1GrKQ_<l;2R?2HttRL_x`^*zr8jSkZzj
zfE88MlbY;<E)oC60eqJI9fGokdi5aocQPq!MIa5^><K*6_o4AN4r>OVh~UNa7dE*#
zUGFrU<cQm>){YAWRLZ{Q-=E}}WxSN#F~daTuzB!~-fq~`<(cLz_#V9bhEa)_5H}TT
zj@9XFnE=6~AWPh^oa&Y8U>P(;FGWvXwQU<3U*0SEp`2)tJ)c=t>TP^kZta>2W!NVk
zmPM!R*7~@~W$8qQ!5MX(Cgu*~c}><SsOefXG#fa%6>XkxTMH<^Qgy~Qj2K&FY!Tw)
zS*@rTqoK{5)w!IxDzVl!&uP?qhmsoZwi7N+zqeqqMl|Je=Ul#>(|ojZp%b}mmTTge
zaU%qN;1vBZ@6p=pKlEMg5WlXwAnzuJ!x&?ih0ifs5<2@r7G-&^ZIPY6bkFsc((Uzm
z3|u3foi&;yat}W}k_cFkI1|*8A>L|g@(f*^Q#iJdT77rG{HXxJB9>F}lsV9LjH)X%
zFHr@Hg_Eu0?V5h1pfaM4|Jaj5BmTheur2|x?$K8IL3ndTcGwBx(2faBA#cva(|NJk
zfF)hYdCzO2$gtlvQU_O2tYEa94?16$FJpCx9o;p~5ljf-1RE?oSKIHWnrR7!6GjnS
ztQ|YNtmUrPAUJm7@`pdY;ioK_e3pN<<OsGF?j80Ihc_J~*<N0j+_qhn>*2cLeqy``
z<Z3$bPc1fO(n#mu-KL)qPKXh^br@3Cvb}<r-?iU3x9Azu)tGnt?@=*Z-7XzH(8?8$
zO!C+eq*R)IVEd9;j@#m{PU$V9Kcq^ImR;nA1J12WD`ShdE}~!3*>R$pDz249hpT8L
z{~YlARTiDn{Tk76tyWBcI+3EcG1`!ei_66A+h<2+Gqvh?<_~PTI;2|nss{mQ1ACV2
zq;F9|y&}+L)>Y(#^78NvKIkwyQcz>&(?>SlADc0j$_bPuYF=*A_5Ee>pc43F<M4My
zxl%mS;>>zK#H~N=Se<2_fZu8lalG=~^2I6zyQItu=u*kYhB+B^kBJl7)WXq&s>mO*
zM$6`=Wda>c{%n$&_~~rB+x}kiT4u!$PJi)sTMi%E9n80)Ec0dKzqX8Vob~-Z5rJj8
z?QAGI9}sHVq-NZQ$qL8q$ID>gri|g4m-p<pX}&Q+ly_aG8D$7TB{b7eO0Zu!-+11@
zcMgf*RN@lDODiT+oo2%iavZ#%W|l4dwrFk10q6fE?&#HNwhV0(d?{p?7lTe3QF7MU
zy$ro8PA=H-w~{$AJx-n-raW1y{OvDJ&%0m&3KJ6C_QXdCgiNAZVWyxM{aC<ro>Wy~
z+1!|5Px4Hk@3XelhjpFY%QE2iBqtikMBLR___&?-^b$mrRi@Ao?$Gei@qHfZXXpK#
zMtH+pt?vhE26M;Bf<46F^So}n&(Fiuf0;HMMpXjN;K+bcH1k>-tjQs@A}@2}U#V)y
zc!ROGtzN3@n3zC1IV@Sp#yPA9Hy?%yXh{+_%^jq}o5x09T8a(5U!QzO@SGb+N1~PR
zoM*W<*AS<AHB+Qh@&=R>=-AX!=5Wg7rpA6`Lnr31ubZz`x1+RGjoSTkb`NfecwFK%
z6M6d8Tf5AvPi?K1<D1O-ska;5CffVbk$rI<(%Sy;PdsEL{3$lJuzYn<kC0KZ-Rg%P
z`u=uB>%-JvIQIu0F_te^#>xX1GWpH&AVE6})Pf|`<dOb;4YyNR49(BNR@#tAqVvHT
zOV6HErW7f~Os~e>WBL&ljBIV!a|Rz2b~JjR9Q=h;fHrjbUR5~0L9a~;XC=lo^>6b#
zdA~)@#<da6uJ~?MuEC2x-xjC#)}zj?d2WGV#9D#K<GC6Hlt;gHp+xe2?n-I}1t5qd
zdrR5O+NW~mY{X~lEh^Y*Ti(sg&x`kh`)T7zts-XO{iL&*IEP+GzcV>uBb6y1h(DLs
zxG2yo&U)^6jlZxC>z-NBReked-IX#>psz=XN=~#;ncv*N1Ju4-InB=HvLzkqeDp{*
zKh_8)Yu*<Rjup-h@3EG0u?O)QBZXPJ(R5gR&zRWT!$^gs*qEu&7uDv8P8vLiF#G+{
zdcLHjsJEP@@C>NMCk0orX0UyqgLvEUfDafM{m)U$?%Qq-Bg^fZ7lt%5^;>K3@xwye
z1QdNC&Ys`!sIufwtpw(8R|tj&3|j^>y~}K4Tj<34QOmH2IKKa(^YJuxbHW8JLz5|_
zM?CwNBm8Gm*VZCq>PK-n8P*P>V#QK{6k0n;L_Xy;PWwzv-|4Hjhxy61oB?=LABW9`
zO?}D^WOEo}JyXS79^>tGPJ|)lXu65`TH&CEk9=14WdiZ`-2s;{EV!n;4Lsy{M5V&p
z$R)Q!b}>bYMy!27S#`b#yidhQ#o(mVwg0g@JOw-%n<pG(cMdz@L;4+LLGjk~X8=>>
zR53vv9>3eQ8oN>1UhGIj@tnM@ea5W1PF_Lm;p2Msdn=t`uCI!fIl>I$zO!AGwjQ@e
zYt+T{1Z$q(pC7>-a4*^6wP)c%s*SU_!&F}#nb~OQ3~mCI9Fsiy-VR0mbs&N}3+L(J
z^<lwACbt;~;4{z+)(_kPMUeO{JSu(}mMkWu-@~sglW%G3Gq0-TdEAjY5`7dF${J2n
zi|`>dED;zBRmrEy6$sR30+rYHwv5Mjm5lf>C6}{yPVb}HAwA+8na#rS!O%S#*35%!
zQ<NZUG2ai`X4|1=FKf|<AqA+J3S&e!s={iF_maxOHgavIs+%cN)r#@r4u#Mcr)|;U
zmM>`WC<#{7<-U%;DuOnQr>E`y+*SZmK1QY?LANPhq>a$Y2{Yo`EWDii<G@fnDhPep
zto7X*<%V!+fULmw2NC5*SjCohWX8_up_QUQ9A?`_4b3Yb?p}Uz{%g_4UD~z7q|HAG
zdao}s|6EX1=r4gytM{8(Rks>XwikzJs;s5fs!SV%*U|O@=}}-$;%^nB)z^hvt!SO&
zNt1aSSysvx=#F<m!%wTZT-@Coc_MzRo>y%vd<^p{S^|vmBNDSb2holhTYPqjJXUG_
zP(|tVg!$+&#59u>?rysFML9X@JFnkjR1iuL^U9JY-&G|Z(BIIi9p2Sy{ZK)vO0nQ#
zmOYq-fS#_k<ZT7r+i19-*K_m;C1#!rwU&9<dDSL%Ad&pDWUPW-`z8?fonW6s1kSyP
zeo+n0myPrQoO0_sxaeoGE%T6I;r#@lGIf{s(ppjo`Gnft%0u~#GDFg(r!$J_PtE{y
znsSkry7q|Up@{d7^o-Q1+%$cgl`l0k$k}PlMq>~~-2J^Ko0+!?8FleI=&@r)LeXSc
z&quv<9t)J?G6)xLoJ$8s&u{DTJ)GD7R%V7<FofCD;@Qe6Oh$yWPkrJ!beZQp9a`I~
zwxytXIV-F7qYR7_KClj-!x}o?E+K%IgZa$4op8T4gCj4YBu)9k%KpYN2V*%jSnn1q
zZ`>KUy6~uU<yh?PQCSqa0^oUaq3`ZZoWF(VIbfJ<SgZD{GbgDBEY*Xv3-xqW?6<$5
z?-wT}_E~Dz#FR(RqeXy4rux<|*obGx!@;a;b_~&tmi-Bkh(!4Mrn1{6`f@}q*P>_7
zmz<n`91<n-QtSMEhUnpz`!L`F%McZftylp`ift-BrKteX&_s!=WWUu#R_p=6<Cp9y
zH#P7d$~mG#FR)F#=u+8Ceimb6z40nK;0VO#ReJ;)BO({Ewx;{Zr6kW{q)U_Vj;B2+
z`$ckY+JT*IsmZxWNw_`jKFz-8!{1X2UODLD#Zsa$CsBYpb2ojYlGVD*_$rflzmf6m
zG%H`=@OBR?)yFI5s_8c7S2o7H(N=rW*QPXk48v^#f;Z=f5LIO&b7(TX-kUu({$$yZ
zw=o1=vC4wJ$2LZsZ}8slsxDg6e3YXoR!>afTiqbvr~zMIpF{7^%E6VVlqGrmx{8>Z
zyQ(&HF^_#e;QaOXL#{*eVqtHT224$U*P^f}cy5gf`={k~Nj<+vao2D@8$Vc{qNTMN
zn)5bW;9ev9b6{|jd2u=QdX$I*wTq3YM9UchyCINgoeT>ftiQgv(qp)AFSTBQJR279
zIV$f?7*5;X|M8_<l@D*Dl4zW?dJphR;UUxKODC0waY2?rRC3Duc_ipN^N;Sw-N-5X
zp;NLRCYtL)spEs}Rw{9|H-COfFxw{C2SBE1MkgAUYWG|SIeVJHR<b(WvIm;V)H#Dv
zeFMR4i_1LCyFS|mjPoW)Em*)3A5VLJY7OIUtLtgSGYz^1zkU5B6~|RJ_V`$b4zolz
z*-!vhqc@qiN1*!VZ}0AoVEFy^C4;1lgprME{G6RA!5#<F70I(Hm@WT|(bUAA@wV;P
zls;xYRqb*HoIdUhv@GW$)7W;{mNm2-6vyUyH6FRTx|(}>C}k5F-IALyLzs@0Oph-`
zv^QpPyY9GVgEH$g652yO&6q9|cm893ZA+|O1)X%^4I*|W2dzfmEj~f^cM;4w)=`!0
zxK6C|yE9t<o4ckDi72wz`!2;2?$+KiEBx#$G2OH@-f-*WH+}dkU-T>Uu#C<YZ(~in
z>sorXZ~}eimp#C3y6g2}!TVotzS0n*GAxFzh~~!KNsslD1!nd*Pl=x+59ThVbQVyf
zMJpGdTAjBiPAa9Bn~~>7Vf)|n`_ea~BS!8z7e#vS>ndvnSv@S+E&EI_RTOP7!wq^i
zsmv<nB0kT)OKsV^-Y-0^Quy3B>%22@rCGBR?2HmL05}V;maGll!{(!o*HzO+yRA)*
zb2EHUN{%xA*{v5y;Im}w9k0-PYJHrOGC5<T$`H{CuHKsZk%{xq<~sqOu69*<czCol
zW#-MySrbqvc!p?-<mzjbFLiFbE)|M&JG6Ir9IH+bFP;ZiG@lAe?e)}^dQaX<HuU-%
zFeTZVI3TQl-WxwZKljYNy}99)pPrZqBZsNb@X1)gHFd|DF<qB;R$5zovAb)}CTSBF
z@*YoJhm+r3po>X;_o)>XcAiM?Pvh|jBzs+but#LwG^TcHvz59&yxDcC&HrU_>C98?
zJy-NEN%9uXv7rsE#B#~l#9dbE0kxFI=Rh$K2~YY)(=2Ff`w-e<pZc2VmxaStRDc+a
z!s4XVtNy;Bl>NtBQxkgS7j?IT+FjiDi$9^p>H`)#_+ohWcTrw=41+qplols{!pLo!
zxA-JIPUer9Y?>d_b9L@?8>LYGft^8x<tZ3c1)3usnfL40K*nH+(Dd&4=Va=;vu&br
z!4O_4&%?gAW=1V)rEI$vvD_Ek+K%d`2V~n#MN0hw`y;zE)O+yzn@Nkk7lfxhE<P>4
z_bt;8wzs3DavOgc85v<?Ve!g*b#^8vC%;b1V7Jj!QHcX&(r3P4z2uWS@us`<7biNt
zh+}rRDq`$Oe@8qRXfa9F75Y4E_iRtZfn%o=>(9bQVL4h~oI!b=%r6<Cu|9;!vOs5M
za}muGGbslwx4D(RC?~aSS6c_e!7mqG{W5XMr?7tY{N9#>vDhBj-_j|b{u%k>N)(i2
zowsQjakyJ<?oyi2&?*sq&gB_a9xvP0gJc#;`2ui<<ngGYq617tf`RlSdyHqy#de*2
zg$-ic6p?8Xrl+)YKGTH%F|s3`!-n<^9qE0jLJ7wO-y@;yBIPg5y}qRJ1&>Rz!N02$
z9nJaZ^}QMSeAoM~Nt@o{3}X!5j2Zd6J42$~<Xv6ijCx@$o<-|?nF2l;XHME*A+il2
z52FnqXz2NT+@N$)G6yZ<gl?h&1#ZU*<9c;x!-q5R{M+oQi0jdI9>hQkm(qomBuXL|
z>B%WPmMjUcmAKQCoZ<oL4e!eS5B~0F7qc~U%k!}@X}Fk}f3B%hy%o~Jqr`qo=OS84
zBRZe{l@*uMdARe5d`KY6&^g~c>)eICNuMa=$Vf1NG?L@*AHEA1NZUG=(bHSL?3Sm~
ztf14Ur@;}9{>*$iu!HvAX#(O-ookN{^(r-KrX?hL?!9{Sr-RyJJVsfmiEp&Dd2*##
zi@fi~^Zg<@n<TuWLBVW<u=rNoae8}xYn?vLf@gH7xR4N!``$<Xy|D7NXraoDDGb?r
z5vooW7IEY*9Ly&?!6Wv*OxVOZ*!l3<m<~SI;-}OeY7j10^s<05hQ*6FUsd{Et#o_d
z=TkyGWPKhosr)#KE{l%njs#P<u5j-y-BtB}_xc;}nay@qNkqWF*^X}2=*0KW)$##(
z5yXf<prI&=OYD0Q+F2Urqmf&DfMBJu|GBI}>V|az2Z5rsV&`M_R;JIA?CJ32uuK$P
z((2;9cyU^3%LDhvk8QKHgxkMu<CVK7;>Knq)7iW~&t~jDG~{G*zm`20=+yi`NEj9t
zc6QMzUQtQu=JW1Le!j(A;#Q*<@j-Y<$cd-m@T;%=(esf`Tg%WwC$#v@&P4>-bJ}%N
z9-jwKA;Xmfo=h&c?83t6)Vn`i>ld}UQYO-cY^q2&ib5BDbjm`DC_#eyg{7rtR9P|y
z=WCeJ;A9axi~toG{b&hRw-e*j38EmGcZ!ekoe%wA!UFk-idC=1LFegnae;X^@d*hD
zq~Z}*cAv^skqEIl&1NIV#>PB(5>eL$2t0&8CHwp}(=oq@l5s#y*%7GHw7G;^8I^WB
zZW<diXxEMeVgJZ0Df2K-Be#!2yOV`LBE?|%9(+VtpPBs{UIC^t<HMzWTNIq<&2^I3
z<8^0<#X1=&<GKuG^TGSY&(1*oDWThkyy9yj-n1haq!-Xh!i1|9CckWXbg2a|*U%%b
zLd{2KPm#LeH;3x|0JQZ*xlkb#ZQxj>xOa}^<hpxwlxZ+U>V=>(0;<+GLhK}UE<MlV
z?_6<yR-7iXxOMNWu33#r3l-aZ$dXnttl;zc<qNId&mR8zUk;Rudv0#oQ<&&*&jr>^
zCrQ4(_w<BCq$)(E!XC7BNVIqzPo8Z9t+35)N#>kB8881bm!RfBCh@b2TgsLCzKV%A
z?|v3k_V*obo?K|Trw{Nfn!@<w$=o|dM(z_M1IUZ^ahV2J;Mq)#d%67O-PVCe^~$X(
zjG3o=kFPil{z4WVO=uLzuwQ!?wQ6<c1BqxajR~vFExJlx4pD`w^dOe7vaqi#%4=)&
zMpx6uX`TUL)egL;e(d8qTW9SnRai2eLvdl8y)F+cTh!H_)?%G$_?r~&cdo~<ZzRAO
z+!4Z+>X+a@m5}q}kPwV>*f)KI|J<wvj@OP5ULhhu@G_ghub_wzZq{wzKmcbD7SDaL
zAWWMCqQVj8cP$j;#FpAsZMy=>J3By$10i8@r$Y~3Q-e|=+REs631jDAzdP!9)8@Ub
zF9TEygkEKO6-h67VmE_VaDa|AVxVt2;N^e*aee7oM4}Dc343bUTLJ{cr9Fau^Zl<-
z!I-MeVE;BIUS3`%CcBcaM|NtD9O+)m7q4`7ch#ug;)hd29g_0`=a5&Rr;$*(fI`*K
zyIfOZZ0C^Z?E=Mv1QjWtBEeH%bsS=1#&@Cj53}Eyfyw__<mKYCLMmE~6ny{J&t0Vy
zJd3i|JA;E!iHG*pEUP*?=)>+j0{4x7{IDF^j$6EsMl1hR7$7CdJ)~gus_y_n)Y^%4
z`v&Q{xeLwVhxzItsxnO=ZaNL%{iU$KXJ@T;Nf9nGA?F*HoEgU>H9Je1zzNI01b%g~
zT3sslq~nc%cAbNXl$2DNz>5{qb!nACmF9ip1EbJp&7yeXrWV)Z)!9n3Tf2kbwi^ef
z1fdDCe0)Fovwq>%2h}^tv?#H$P#8K`8;ku~c`$a9uDLn)fA8b4wI`v$$*%`>MmEIm
z6zx^Q{$!Td*-Q3mDV2m{{<<q~cH0r@B5x>-H)|X!NxTu+r`3S-;l8iL+eM(iRzjn7
zX`(jULqXIwKJKc(qIc9gW~RR0an$}txxMb;+}~-1+k@L+e}U95#bC&8yad_l)^KD*
z#6`ELf9r_hx*rPB(M2aYr1{##+neO;=V6VDoVaz7OnIM&oSUs823UjhjWCC7Ju}xs
zJ*Q-q%E*G*U*aj%Ok&N7Eki4{L!+Afl14YN)}>KSW5L4hJ!Nm@d2T)~ZX+qg79FfD
zE%aZ-L%ls`-NH(lLOLGhlu8T~4xfEYD?|vVis)Inh0PxAIwqSb416w}B^x8%&Mqz_
zj4|UbD|QIp-#P)Oy1XrYvct$g%VXxq2@K21d5V!gj|?+TT~2a+uf-6LJVpWegUN^z
zH(Rc<q9%FtWXs#lXBYm2kt3|*6I0VH1<mB7-}Ne;5wBDkU0zq6Q&pOhQM6j|q%h>v
z=E?t%mp*exEPe_2?c{yz+rk1PiQzRA1PWgD8g9Rje2SY@BH4u9LtkH63DugdcrET+
z7d82J)X!Ir{VcqYiHIc29LOzco3a%xEB*b|RjWp-^IFh<Y<@FdYGe8F;c{qbNZ;pm
z>(_S6#hs?p*ihmW(nM6C_5Z?yg3n7U3~~-MJp~|Mz^i^ylR%nwB>f6S4HV<eHuz|^
z@Usay24uJ=7evF<beF^mO0{eb!LMIiZ4IXwLqO45?Kh_83>rJL92+lEx%qf||G<Pw
zD48yyB6N-PEb&xUnL>kV>3`t1IL(u2g6c3WubZK5c{({aOUaYD;=lQj$cC@B>n%%f
z9U-bRY1(HCi{oZw?xsE}I4~ISDj9ByLG{%B(a%Hc)f{=+h2iR%+Di7r-tw1u-54h6
zX&7z?QjCo7?`QSk@FBYkrQvp`?r|2Nhp~lzdD;4=$U@J}*}%KxGCZsv{O@aVO{HX<
zH6eH>1NP%-y_Bh?$LFl<{L`@dM6lt-O<BDdO+1!Hc*v?F?uTc%C+Ig!dOz&Wb|zno
z3I@4TkW=1P*LS4^GE6$sj%75^*5$>XPu=axmRpG%pVxOvK&<-d>2pJ#k)|i+%Cn|c
z3bl>pO0%$o)gXPi<wO$He(-Xw^YyV9EamHLXmpO86X*TXx3rW%id1)*_X=QE!#tHF
z`LcQ}VpzTgwf&+$&2pL+I~f@nUBjvPQ;^KgHoDT(aXfH<bg^zZ)&`fTCLXeQS%hyv
zUlQwsC;MCoucb7ErwnB^-;<Oo)`a}-thz6O9pd?6?^o4>Wq_BmaBtnyCafLDV+2B_
zBogc_Br9{ONljMcu6kak-z6o5Ca#m^|2k2Mr#ve{*VDmu(R%gN4cwyB%o{cCOP%3a
zbh~>~A9oXH-s=GuULThGo}pd@5%@eFO5-4XX$Bd<RpcK_PXODw*R`b4)N(AE4=Kf0
zji%)$1Dt^MV4!z)wr3=_&blUEv1Zb#p!}yNpO*M}m*chd&_jC#d||Z9&@xAuCyC8}
z(=3l*mzoiH*$ZgH>Vd29C95@zCyjHKR)^8@??_2`m1R)n95Wj^$VhjS4C|Q*uJqSf
zrtLw~qW9XZqHaN>llKeCVA14W)j_Ytvp=ziarf1!sZvCXNllsk1}zx7h`*&BUc96S
zOyTx0rOB*si_O7o(%P}WW>f3;faZK?7UAUDPt%6f>gepgzQV;<UdA1Sl*HX>)W@<m
z_kOo|*G6Ab?pB5u7*T)-#Q7VDXQ%y%`N%GJK6}lRdR`+(Q#JcF@1_@T^7C3U74LS&
zmzvCQ*wQV-Gd{p}2v3|ueQc>Y5YyWD&&`sY;K|@gxHV%3jZMZ#R@>}^f^a+x{#kY?
znusRfwX*#EU|M2jfOMYOPz_%!Pw2j$-tY$Z0gMzWz&gm=Hi+D82q?Pckq(u15>RxD
z+ZVBPOZ>f2<+%+~UR`|EpWN+750%nD|7dJ|mynI$BWrk5O&#={Q2$XU)*}$V_fw4&
z@ET+Rw%9U_?Oa7^H$(SB9(f&C7p25j580<W72cogAEl6i2-$fwTjM@mqVsV}3ud9L
zeK20&%*w3PTa*_Xo_99*e1n5t__3m)IcvOuQu<R#CzNhE^H|VeHVE9wNdoOVXH7$^
zNYy+v|I60Bp17e~>R~D5@R|jZZo^R8X;hn=X_SdYSl>Kph13zdy1+#uv(^eGPOv9!
z?J6JVwQQNig$w+)LC~{vD4N(mYNAg~b%BXf%0@)4Z&(0EieU&47CxtAL#i89o0+e=
z*X>yc@0<5#zD|v6a1D}65Ax>+a=WC3!_jJB9N{1>3E)l557YM}nuF>uTlf43kh&;j
z*@0G1_OVDvMolLxu55{&)@;F8L`kP~a76@Po)Mr?Hcfw-9hdtOx0zPUYNeq@nKhr(
z%S3D>W=9*p{iBD!h!K|X+Y&E=!OLItL09hMQk_DujEi$kdVtEbf2Z$H_#OoTGaOUB
zj#%&?L2+ca&OMPC=a^E8FRtrNp`HW|nRdCT^ANW$-zkuuDmdstfEHccUDi+48GU=Q
z+I)NFdKR`ffi3T*9Y~!cm9)NYayDWu3*1R0lf8XkcCw*GewglwXd7DoLfteMx-M<d
zVsmjiT+q+Jx@k>Mh^IiV*KFhG_D0<nM;cbW42K*VESb)S9=|1qX#P<DwI-~J1iah=
z?tF$UhZdXE8j$Zo>~n8d6iOvsh#A-i93*LP343-zDWA`mK+Y`KM1t+=uQd&e7dFy9
zTn5<6tPIQR>VAeuxgv*NB==7T-XKrD+$4)E&p5`z#s&D>TY$;|E&cM&PR~x1y8mi<
z+1$gn9;`Mt!PASp<c6l%)J*l-blMq2{atjPtPLB#C;2U)gTJs=-U1~|f1NqVrJlkW
zC!13}qj`M_UkJPJy(%SWZM<gZ0nO^#x>RjXk+gZzw`tyY)Z(XQiBclZxf(M3z9a6-
zFls=U1f5J==$PT}N+nSaxqOQ24FoFG0gly<AMbB(Zzmg{D;+<}fjG-3HdZR-__$p<
zUr%3R_WKXh_S5HfGd1J$+cksDnEmu-@3yZi)wsDE0uY%y6fT!fVrzFr936f+zUwtn
z{3idP>2Yz}kG?gF=-$NtSWUUAylP4xZM@!NM9K4^J~AYt&ATXTXqB9+kuLQD16bA!
zWRkR`@NAi#_H_n$N|*2ecZ_;6Y)H_15%DAW&u6b>nctE|y?8!~`K`)T@uIk(p(IlG
zGc67ECmDgNpI540OHbstnMb>3a|(`LamuAZ`*1wT5HqftZ^M<v-Fmjgi=}hFT~~<d
zNToCXSa<k7NX|zx;&s(-(W9E<Uzi{Dw6xD%%$gQ6(=F`Vj{sozFYh08Alk2i)7Lpc
zAKg;d%iHF0dVsL{tJ6tE;0z_xNlL|0{Fcfg6G9M1-#+8Jzd7I+zV&_Z3~DZMUI`sX
zddZUg(l%U=i$n9%Tddh!p^<>|*_xYnC>Wu60^s`Lzkv)T!fM$vfYs2nuXvMveg+wt
ze%$dpn_Z>Z(u^y7^r5rgER7+;+SdAL*}I5@i8W2&Fcs*@({BNrl}Wi;2sYfNS{)J-
z><~<d_dI_&PMYwmn=Xw$Gm%C<BBrMk(NB?HQZYVbTV;n}j;&iOFp`~yU@k5*bFauk
zF<qPR@=zKp|My8_zrOyFTg#-z@886{Cq3ULT4g<39@~Q4misWD#k3yQxUUV?=wonB
z;AP&z+G}>=l+}XtpgT7u21y11r)FaOu38HryGEwunwN`tk`p4Dq`$vu*khg4Q_|iD
zMIM~iKU_w>VXfL(zNyGBSH31L8n00HyvFsHM!i=3Qm{5x^TJnnMGGBAo#*^2_s_D=
zf>)y`9x3*cqx6FOfy97Z^lUt9G8D1@M{%jMOU$pMh;?$ja)|f%{cK_Lusk(R-w^E0
zuLVx>v$#nPAp2PZ-s17AA)zQ6Mjdj2Rv#X6+J8xZOHZebbD8Qv>6p@&w6Bc9^vXmV
zkypvk8@k7FnSXCB>R?!PHgo+a@xnR%@O8OYHPB&j2kg|x_dpxf`)OuBuqIeM)BjM7
z3`ZtokpKAW8&2J{Sk6U@pUB>qz&WsiXV){}$UWh}z^gYu9Z>aJcCLJ}1VbaKBE>op
zzd9IahA%iQ37VD}U!IY|DoNq#er=qka5S~GC_eP2<;3mskSHkz_Yc4NFeh-HhQXwL
ztGcBtu$E)wffD%kJrCn6tC{?}B*|>iqU=praFi$-gI;>w<>J@5`Z*6AFU@pYRV8+6
zCXeX7K%A508qV{K_8M*kUkKZ?5yb(XZue#=SmO7p&(IGa!$L`Ak0A6zqTOU3KFe#u
z>1bxL;Y$;$WQn73li0wCn--#-`_(vyhpLBmlOI{1=>foc%$oX~dH2)pk^pQJL`5%G
zW2@2W6}o;rO7vav>{&R_%N4h|SPI^n6QLfh4@wYSXi?92+o5&e2yAZsIpdphh^6}F
zy;-7Vb5s55a(2G4Rz~&|p9g{4xt{Xl(e?MWpi~w}xVEdF(AlpjH}CVPew~}kA~5j>
zFm+Xo))wlEgRoi_Et<DSv&mH#e`%qU#6;lpA~KHQcW>!p88aDiesn>6*!Y3t9sl=%
z@sRVY_&<Y>=2qJy%X|V3^8&fKVwI#4`@(b6EqmVi^$=C)-6MZewRIlHFrL`7RjN|M
zM*5U6+s<x&=-0dc2?Axx+F0l5LS?J5aW7ny3ocg!ABcQkl2_59KQyq&GswTpNI$9M
zPFF_}RyRXxV2%V+Llgb%Cy{`a<E{VW?qPnT*WL)LCCi|GC*a24QnsIsS(v5DI|-&o
zm-;rBB3__Ygr6(J%zlI1_2X~k=}C=#%hT<lz*wEF;i_~#uRoNJ4}Zhv$(2iL!v5-V
zO-n~i5w%QcFE?9{rgJPMvs;yGzq7#fUCY#i3XIM<Rm;+ZHMOin?Ape5kws!@<{DBd
zQ4lpi*g$PBB_q$448W82@IDNi5p<R+IkIpHy?ylYzdrS(hLeL1g|5YY;;bGJxaniL
z!FPs~DfIDQXp(P#k7y{PzoCyW)ul?5zHYR+dZAmuG1A-%)${*fT)kyf98J_UN(d4>
z1cwmZ-Gf7dyAJLU+}(o&cXxuz;I2b(cLs+E?hs^f`Q~}wd)If@{nfo%s;j$C9jV&;
z9D=C4z*p}jnjhT@Ik}X2?1P=NpGwpoHhnJ?^Mv@DhJuWqj#mqaC2f)p32f;s%d#F1
z-@Cum1};|5s`{gDwDW>va39=J&Z%s(*#m4j)KoQ6cJC#@d#vtF3Qm?k?CK!p(g|$N
zPEPEcb0^_H5i2TY)r`W--F>o3iO7_muNvQ9US67=Qik(9=7~dZIL1S`e2_4FL295n
z%fo10+5Du^X1TD%219S%X~G4$>fK#Q**(vY_ozN{h3vdzCx%tZ;yq8XS9cfa0X|Z5
zWya`>&=W9Y?)?Id+MCM7$J{jfm^)B_rQ0or^vHm-YD2w7UyYt{pa{h*cUMb*&Sh&p
zHyN-dx@2y(LpK@YdOCo^Z$Ejf;LCS~q<_`+M$bFb;ZuH)B>Fs)8I>l^2B6gIMrTxw
zyiZ7+b!E4H#@jF~+^jVKNTJZWdl=v}8F_Ah-z!lkem^--5;3TDYpE01(gHnBt*>==
zI3gs!i;*}@Py87M@V5s4d+VyL>Smm`a&J<S<v_X><gprg^G&&`wShtw=q0}$cZ^a-
zDsQhYlm_nnbQw0>I~wOql~O*zjj2Fkc?i6yJIxl@2XdYMd5SSFSZMTTSm$J~(zLy)
zh&0>St^$Gb3PL&CmqH#S02aH~+u%jM9Ya9A5znZeqQwbbq?)?AET8nJ*ER>yKW<it
zgHN@X^heKYIB)K%h08bO{R2|60^t~wxi*Pn%i!8-$0hxA#(eCH`Uc|6G;;fM)g^s3
zEZa;?KAHiU;fuB?qPfXjepgy1rtvi#$AA~;;C$(WarGlJaA~@e!s1H%;LDRTK=2X$
z%~$22Pw+b=C!Ik9ea&^YMX&<<vItrX#9q=*_1D-~;u<NYjrt@+f)C;~z8}`=UxN?{
zY0#0XsZs^o>xp7(H5>Z1Xx=)z2TIpc@QA12j`vR|!_f0KHdz82+>=+!(&=dD_e(A3
zi-HFb|MRgGeufnR((2Fb`W3TohBLtO+mgm}fGxPyV)usWQSw`+0&dX~NA6^Ys}Yt_
ztBi8%@On}`y&5r(tIOk_EkPM=@rj#)Bk=qg+kKncdF=D;aCQ=}g&|;n83M{ThnhF;
zPm?iu2K+9+NU&|r!WM5HD)(yw8PSO95BvFt<zn-jHH^59H}41Eg8idJ1AbT8CfhdY
zmMIdtz1ZkLy?YDP<*rVs6-TJe&OrA`nsd^lRFp+s7dC#$;AsDjZ7P2U(xO-5HgX$c
zo6A%LNHe?r#^Zw5Xx1rV=3p*)#uugsO~WV&>ihf7clFwCAp84YcWbW~->vz%y4&c?
zzuBBUXVgyL7@aPHJrC#hV=Ayv(M6sBFi-VQ>)7n3?Xs`L%d9H+H*eHpv<%r{hmieD
zLb@8Y|6Tcge~~}XG4bU(H}Ob4=T)f|N^%PTiarB2%Hn=QO?5AR0I2I-ZjfTdsbBtu
zy1iY3IvvwQ8-z^HH7@e7U*0WNyCj5<?HqtF{HjGXitxuxF$NgH?d#ofcp`{LrCFVn
zo*FZ6_myu2C09@Qqh?gUrlx-@@z~z_l?ZrAv7`(U-$-N|I3^6&MaiSELM2Y0GghwM
z-$MAWo(HeKz9I?v{qTDP)I%y!n)5^!t3Io#>&zEA)HP12Qw{cL=Qi9fY6m4GMhwQ1
zuD-pNzhp;mRtsi{@=%(|4b){h9J_VQNmVZ;Yt@Oy)L;GQ7&JjD-^k-{d;A*j0)bSI
zsqoz$@q|TR@??DE)biX2$ns;n_NO;O`jz<XR<1lQ&K)Uzaf@FAbT5wR{(x&|Q7WfK
z@|lm$iBP3Ec5Hhz1Nc34?rwk~;Uwk*36u~94k=;5cukRzAOGZ9|D`HZd4evEk19*P
z-|gl<_Ee^GrOYgchU?8F2lpdQis{w<zKI?o7$4qfNQ3+74&0m-`E6^xBtsMYFmI0H
zf=p$WOeNW)o!oJLOWm$bpZI~KrqZa~>aD@q=_Z5b=r!Y(!oa>Wgf8n|=JJ_H6+X-1
z%zdW&6Az1s&rOX%=kE3;r{KhaJ5Vo;rN2Y7FV*&O-y_!$ERU`dju^2aHo;}tzgbMe
zRqo@PvK<B(CN+}IFDTHQUc8W~6E5#ju1H=ox~wyUQb}xK2EJ&L>wV5Y0VuaxNzM^o
z&GgU2<-4PEKjjL%$U!9@kZf6xxu<&OxCok3LT$fYRHD$?CzSC~4mA@r%QdsT5(n@<
z+C!VCex8dTp`2T!dQ*(AeSJb`*9W=mjeU$Vb}5ivEBkG>Tc|VIQYl4Z6beK4WRaK^
z?R^WQ<OS~P10Pjh;DnDc37Qz(*#PbioAZwr$#eUqRJyr&l&PZ?wo$6mU&V7Z^}Aq*
zLGaOzm8B94c%rxrdN~9GgSr-;$o#xM53SH;S$>q@LR$M0SIS@-iCIBdohN5Z*0jt$
z%CSsTf^POvmhyyE@SG}p^@dm=I0F{>0%M`JG0@~!XO%&8+s{jExZ}2Lh(>_-)3JOI
zPRyOtCH)1?n6tZqI(0*aD~zNIRqEnxN`};-`<LU-LR=g^?zUJPn<ons)!pSd88+@S
z2o(T&YF@aK#d_=J9a`?(_rXjX6rwfzEL~@<$0V?MiEaUN!Ugqu)w$8gmT2yn_%Em5
zGFLI7Cq_57jOg$|Vz%s6S!7VhXu8PioK5@h9qG588ZYcsJSqcevAXFlPgSbdMrzv<
zm$Rne2y1Z!D0FAoNXW14d%<597(#^TRJku0wmbu2H4^zRfj~N$-!ZE-Lt@69P6y4D
zUy6MBN<|-uC90!5!IUhH;h9MsACXe?41s`kNmx=uxhf6=;eHOzilDD7(??nQjXL+2
zV%L<2iiwKSN3OZhGyjRZp+`Ld>t9))qUld85G8a@hJ&hB?*VHaYq$P)CT~uV-*els
z__B!C0I3a^z+H$@>E@FU)`Rv=5iOL#hjutKz{2$+M%&A1x1^M*EGzJk<TyS-Qc{Mc
z@tg`L6m3yz5@hil_H*ViV+cU{J-)%iYR8k9j3y(Qw#_2$Fpd9Pl8EOokwvSozL^eZ
z79*Cl^~6S0M&;rkbpj>%xCX`VYWUbOwA`DDXicfgZy5T1HA=P?qa~XnK(&r8NHBPc
zBOO{$T-H7?E6$|QKdxICEH;t*?hThY;&B8iS}h=DmG0~YBMb+4^=5iNFGP=pHmi~%
z2(vh<M&f)}9mgi9$0v&9Lykqi96szKBep+{;Lvc`P+5Glxyf^?=TxoIP&l#n72hMb
zk-)@OkEb318dZycXA^m>)ok3j)2B<Sug~UT<folIm#3x^*U{7kPtUdV)+x_iLm~St
zeP&wgB%;3sr?3f$w%fwALKcV!2_&fyutCkJO$+i)Q~5$+d^2EYF*hH|<cNRNys$DJ
zh6Um}eKS;k{JJ$_FGJFFP-7+QNZ+EDYUC;|&oQS8<yweukbLtC_u8^EF)uE8-9wWY
z_)*jOEznKjZPwGrlqUOxZph(9^Q<l`G9|WX<tWhaU{oEM4g9(1M&~S?)L*M8Ih0R?
zFxMNo)0&_EaU#waB+A~pza|gmfwGWlm6l9)IJ@s+c#c!W%Da@APs+;pY~Lh~AHWvb
zJI<5uBSzH^<Ski~iVtEwEjSb6v~@2z?PUd-Ftff735trueV$iyKL4gVgiGN)v}Da7
zJUNlgYUmm6WgPKP6ZHC|)sf87G{WqQPK7HQ3GUnnAd80A1ay>qcNE@Q5>r=ovDx_K
zyvefNJ|7BCQL>~eAnf|WeHkJ@_#JisN$T;!=mg|gIEwN0>d)|pP)ZkH(G0HM^uKGc
zxtZ=zT2Cq}>^Zf9_u;*f0I>X%fKp324P{UeN7Y2!qlMw>ghX_yA>j;21N^WjTOvl!
zeu#ngL)yMw)E>04Ko==Sj*o)Def>927&$BJl!Q{P1E!p|i=-p-n%}kwdIa4fiX-*?
zpXT$EZeZ-fNYh-utI@LCvo&?S6Xx9fRA?_%e1eZhu7E}E{xOWmQ&<Sv6j7X_IfAX4
zzg_<8*B8FCFn_jy9wRd`M&!7{!Y_}+%{H&gDIVK^=S|;mR>R$6l;u`F%sag^(n2<m
zL&6YAU_=H>4pk1HfmivW*kdn$MQ~L`-vWZTrRc`Y7<bcr_jd)|U}M$NLtrCPrp~RE
zfi#(ab9f%VcglF6Q%1Y7mT0}o=!sMA)(zr&jtJQo^-qWfAqr+B{-D(AK(#7k=d{Cd
zE~E<07vb-x+-avL!9*|hwY3*dJ9PLgIzum++?t>($bM3~|0olS!Mvq1$bQm&cdx3Y
ziiTlVQnj_+%K7totIv5u8om@emHKpBx8Qje+b5I^thnRk9fT!ioTPB-!eET*n|8pX
z8eP#MNAy8d4F<cG4`Jh^97x@?I?0mx2}*@g?L$gsNf^zQ=Zl*xk4W}qo^A=Pp|qar
zGY7VYx}g6#qknz!mqnFUi-;NwP8QM_Hwg}_kn?9e7S)%(HNS-(?cL>8n|4$F49Y?g
z?o`wK`i<G$JUx@?#4D6d-oa0kg!@7SsuU9#UjH55c*_<6dUDzdpI?Rz%GfH4KV5+k
zm>eV4T^x^N5NriCulrtYjh@*hB+`YDe<(*kx(AF^&yxx<=5-5n9XV>1QA?gZu4ojR
zNH9dIS{eLZ=bA?F!mLKKv9a-sMmgmYk=CKaVls<InQ%-g*@;~(dlQnF7qA)7<SjP+
z(*FIqlWd&TV|KvF&d#hOJc48VQDmo(e$L?2V6LF%y-i7rc|NPIgU&Wh(oomGa<4(f
zqP#g9w&OhdbF=h^xQs8Tc*%jC_rIh|io>fr75JLCmXMYot-~UtaVKQ)rm}lc&x}Ab
z-8Z1c$^bd)=(QX+FR#q_G-Ni_G&^%J@mZY%#7K!J*VfV6&Jnc0NpsZkEcj~iNI9A_
z*brJ_$7keQ-2I?1Try;9X{#&HQ6ua&T;!TgJ!!yt5ZCcDJ>!p%l+I)SX75$er;t@{
z(M*!;mmQoryz4>B+L_(K4wQwM8N#1JEQVq+<0PeMg;WU2pi2JPZ_;tk@Ce_mQ#3m7
z_$p-UTg)751BC9EYH1!5X-B%tX4TioQfs;;^@n+8#j#?!6Tf9;P_~(bv2*DD3zXvl
zL*0re)<d-!=XyGMEaVE=I>xk8O8UdGo@jv}Nu6yL+B(P397j!Ns=G+B3J&xNyL~iv
z`}bLBOAGKpGG$8}{$@9>wq**fQHZk(WxghXOMI3{G?ds!TMil6^?L!sS#pF6L`dL{
ziXmhn(}TqH*fv;(8#2*`<3>k3l_6~1AZ;aU=J!6k=~eUUx}@JH;xr=*eeqRt-!Ig@
zRjxcI+&o%KJR|IWJd)xO=$x5@e^-xgXWqPDC`BGsj2=>S%$Jvk%c2d-I0RPIs11JH
zW1Vcglf$3DC$?${cyDhcDt{&!JKZpb#=2PTVW{T!uSeQpw2ein>Lnie&3}5S6Ib}=
zvU{vQkVGznw&TRI-VvtC3%N@wnw|G1ZR2MlHn<9t@4$Ct^o6u2jv%(H{pJGf!&vRF
z?&-}b8%><4X*_xd#h=tug@ieu;z&e<D*}%=i0TzbTV)OVhejQWK<ZMp3$oKj;Jt}P
z12Q9D+2I-ZC)$Y6X$9<wTt?cB<%2SGUm*1DI#hwy<T_GT4mAM=H5|@g<iI|tJ@iY~
z1QEhe7*%>a96V`JX&-%qL5r5xG_$}4(?Ad{KSP*qCX86W%5AHtX$1{@sJy<$c~4pJ
zM~o;5Cv<whlsW5sp?`_r{1B|-0^E_%Q5Jb9_U=iqWi>><rNd5&f$=O){b-~!%Jh@8
zLPO=E@IEF--k=YlI(JkC&GNO_oE<Nrgnk=_&fD$DVF>css4?44mK!W8`;54zyCdaq
z>mi0QM5;SX>f_>>FeMnUbc~nrV7okAWdmpjX_Vv0EShf&!DRl!N85icTO67#Bdi_f
z=a7(FF&-A1eB?}?k<6$NWI5mqD^Pj%oNn9dg;<g#>M4b@dQD2VD$|_jLZ_Aytm(tJ
zv6&L0Muhv7_&t^p+O0!P+Z(g}3WH&B0*9dL7d8US@<X(xs&vAnI4MF3{I~nX(6@)n
z6c%rW`JL+g*9@6RtF5ZTicwSH{)kY@xq3cBRU4w={)~Y%`y;}|^2|}ymTAu)&do$P
zn5?@ez}i|^1}3io*uuL&l?m~h8|D+6t+x74=Q(>F0<ObVAM0!!5?%ME@kc}ev=d)p
z=(p_|N7G$<CuSh5N4sb=w52EaSm<}ZI8)Z7$-_7nRuum^*v(_2qiyiQXm<`5NNVwo
zB}VVe{9rg{(GL?{f8AxY84;GMO9$mGi)G>$W_hYtDOgC&vSxcReG^EuSwFF4<JiBt
zntQOF1ZjJ!3(<T$ud+KiH%rkqSxNUtdUq``MV+|}TO-sAn@<PF{LDNyUk)X~$GoL8
zDF6b2B_)I58GnK-VSe@Ms=d`2#mgN1ikUVUdnf)kdoaODmFh0)vY5HDJs}>0dWi|E
z`>}lo!1YD9dmc7j;PDV^|I%bAEopSRpe&D?`e9Ruee+gN*jH9wL7{PJK1M?!mN?be
zu18(%r(bmoUx>KxYvq}`)(c*@4E{+S%B&UIxCst#LRrUk^_E4o&!HYvOGSFBm6-85
z^}}0FH`lwE!j8B5Y_kih?9fnZv9=^9Nr{g^fBl`ka3$+nG*2O@)!X84y48C|&ARcr
zdLM10t6RbN&AJujjEEY+<Yl2BW#Hd^JNM=Dy_k5LoH+l{=;=Wx*qIF(=IP4K^}hb$
zx$h6Tc-g!Vj*Srr6spOzke<?JBJr2nc19h$vJQsMYJ9s7C9`Sus(cNyy>@A&FB`XL
zDCqIud}*y+Wqy}jtik)Wl0>H@=W}{CJPth7W^2~SrQFc~$cBVrsqy8B#c6P1VblZa
zl53|=GYHY%G}K8V`7WMeUk=K}ApA4xa#<nLbl0Y>d%%Z{HPzT2ea7zm61pijlPx->
z4y3kIax3MLd5tIr31a&(mJg8M18A6k?tU(>e|q_i@OBMub`mYn?Oo!3IdJ}?NbfiO
zH@k9v;BoZJj!V<cz1D?q{MzzQ5Vv2HItz1)3Xfdtokj!#&hK{he|M>gG%qDfvu3Gn
zjM>6v%!&O!ds_ummUVV2f|)xi=G&p=vs0)cYl!Q2jsGZx*HESp?(<3HFn~3qgJV$_
zN=5z9v0IO4&Xvb=V>=x?k@fi*3ld=k4r?!$Us|Q_M)&o=wsk*Dp~sfb6?+5cHv4pJ
ztFPT_3=yAu&jvR{i4hAD3hcvk$Bh~sRxi{Z!V^9P#8<}9YNt_*1UvwD2ZC_)UoX;K
zv8n))#ufNgn9ad|hMt$Cb46bo@$!Y)1NAlZ#pPd`2ZJe3LoYNAOA3=FTeAv=M8Eaq
zA^7=@STzMi@4WV`VCI|FSy!hx2Zu8eF&DO7n%D10b?uz@EKfBx22dr+Mgb7260!;?
zP}KH4QT=whL15=;qiSRuqN=KIWmq5<*>ha|>EV;N!PeL_2{hoL=-vCND9Yp|GEqVp
z0qjqVW>LeZU*n^GK6OujGT#|+dIBNZS(ks^AG~!CPE0!#2C|LZPX)p0qf^PH_IL(u
zj5(UcU$7wpV3hZMK#oSIQlCpZx{`nKw?q4b^^Fs?n=OzhExiX-f*Km<?g}+>ee2h4
zjHgPivnLzEtQ)clc_xg5_@gDMsp-N1H;zSg(&HYssp^)<2dLm}r%}sUxzm_6by;0b
zQITba5y-md!tvHIjw2=Tm3b;~pKyLMU54M3H^x!3pfKBqIPYaRIkk+*gLH${Zuf_N
zhravp<9a5aO|{3#1tf4^V>~i9b<LOgoZ&B*^vtyu(YY6c`3LES2S8x`0=t@HF|H59
z8nGSjBfdTVACxsmh-Z$yW&O$+1HHIk*Kqwa&Dw>C8@GFXK-~NFO-h-EX@Unn$eXA0
zP@5f9px&)0Vo=K$mklVv+RmGs@s4&iu8%*;dY|59(wVj2Cgz*^U)O}D?L1qW^LPa%
z2;)GtPw%A9)d|iJGQ{4>#?{ajbQ?K{m^n70?#ki7w76mNytP$xAmU(q+_cHAb@xZ}
z;X(KOYK^5Pd{gjcrQm#9f0C;;CPOEKSUp*6-A3rE!RZED3t6Ssbxqal78Wy~0zvv+
zRE35-L3FmM5vj9#M%`o-{LpPf+o#XD7XEv$%(<(9eeIfoN6Y@-_L@8p_8nU&+R+X8
zQ=_-1$EiKOxNjk}L{|KH-g|@(d8xf44zn0I)FwS`(+sKsoCH<7hkNAP*s=${-9GFb
z&})Q&qOB{qzOah=dQDeQg)48my<n)<PL1W`K5Qwrw1Lf_aeF5n%pO_JSuX+V0XJU-
zJ-+Jb%6Qy1F!I-*vELP!hurjiYT|UgL|jBpN5~YrF;BjpBIxj~N~v4a>rrPPv9plg
zOPC){v=^>YlC*o7`gK8*N+~0OUp>*`(cund;h0j*+H?kn&;S`e9B?(aXSl!Fzl~c~
zqh__8z?Sk1M3{X#lf;=vJ&*j|mNhm^4SDH&+p>J;s+9Ii>{$Xg7WYk;Q?IWsKz7R?
ziSaqb=41gJlLj^URcAIwiS4ISxGFp-6vfNTb%O12UqxOw9d$pa6@zWsPuQ5CIMRsi
z9Ues|Q#`qrow%&N%Eqtjp-*|w-Tj6#Z_k>jSr7BmZtBB>=hQfo0Bk<L)x^J0K(Zo$
zBmbP|?eT(_m7aUq%ivjkdo8TA&6v=y2d%sJ#iYJ8Ps_@CtHw?zBI?JQXIi)s7Z*B?
zo9x#du0^eYza(^<;>zL-T=HnlfgOVK4Dqwh<Y`p`1`2l0!1~eSUa6DHw<d{GWF$x>
z!TFP>%I=+|#Z*=~k8b8tk6oZ;tKdF)R%y8B;lD!HraPlNCM!meIAnF>a$n0HAm}?v
zeKwa_uZtk24O2yo?CWAL`_ckLN95%JU_MZ8-QTT8RfZi}r$1T8yO#39C=fu+U!<o!
zHFp)oLGzPxItMTlgCIb<CmZ)5{zAB9J-0`Nfa&FW*i>HFsfhE7qN2h7H2dZUZ5WrS
z@r9KAlKdCT&P=AgWfg$`;dy+UmxynqJWvpYECa|P8UPf>?<j1yt300ac9E;;^%VQd
z@Q>Gz8AMTU?oy_Lz&&WbYKJExDK(Lm)dACF#$LABi9SAHaDQoBBA<uOlK<+}5AV*E
zLG;7hUO;$G&&nj`zN6sUqNDu@dx7h))p@&(R~}#+kqimp9<X!Jb$O);QQx-t<Q+y}
zVp8<MPc&iYT87!HQNE4A@R~D{#?=B*$K1#cT|B{M<19V#`bVfMkpdA_;6GYCO8N^G
zToc;milWhN_)jDijdC)%Q6rP&_|pYwu6|bs`w|mv7Oan(ImH>FAGQJA&!+<ZI`yf5
z8))q|zFJt;A5n|2uo1402eCBPpA<>tS+gW@Kp~?HG_j}gkjil$39IfmbI|$KC@)0a
zSP=|tQ#ZGc%t1FD@;b*YDH@e*w2rzVQdVM++4Z_X?nvxUGQCXQy{T4<7rxcL7yi=e
zvfLE>&NEd7H#I#yJu_2QRuIQ^;U3jeJdBx5FQ95vZOQcMJf(YnDsD2-g1)HzV_)`s
zB<mX5n!x7j?B?uF7N^|9%-t0mVJb1JCL5h{UR6bftoeFn|ERm-pwr*tQT4EcA;F`f
zm3_O5`naf0uKD=UUsrLg<Cpj>{mKP#C$;+TonO7=D5ME+)w=->UtB}N62{xu!&<%o
zK6sU;>R3qbgGJdtN`y)ojDE;mu@jv8jg8OcS-%`b^CMm5YyJvOxgklGNZjW%@e%q$
z@W{6MzXw-?UtChzWSu;&KR1lUt<JfDxNc#ztjS9@&Ai;)afEm)xF4gp9uSl1(gyOU
zBTF6prbn!1hbXp<o`X@MNW*<%FfmU0dKma*7biY_YK<M*OKdxnOgg1erw@+?Ge(Ya
z#mpp7I?YD`Ubm%I_70>pr~j&-3axKgETNYD@i>m5bTA3)Gub`->>zs-EzdyEZ=<=6
z>b$-ivCbf)R@#0?Y|}g81#EC=+^})ox3J!xIJh~Q*UdF7B6XTiAcI$w_G^1CKXI#C
zS@Aw<`;d<13=H@XRB?D^x>4&$=p9gBI)CivD?QA%S^YK)iUYVx3}f9<HQxw8R_0&-
zKu9)U8oHOpCNh6N^$b$65+|ExMUgvb3ISNAGI%S~0mSRTq<>WFgaqk-_NiW@*FNzg
zpXj)Rl1Oon8T;HwXR3<aGWDc$07ocyFWhIgD-&*Zr(FU74yg(h=hz4NWoQ1+Eeed*
zL&e|ME7>x2uOjuJHkqxy`Fo}%geGUAi@nt+(tmq$=vHy|q!~Ezr(HI_^63W6R*cf6
zSsd;Hs#5ywNArU}rV+Tc-K)1HYz)81F`zHySiWuTQML;1yxRt-BlYTcIOXh*(jZ3v
zIL31+?CQ9yz{(DMReBjWYCRJ*v*r@Cf3c*f=PaK*UDbj-rPu0ey}V4!leL~#*B{{?
zhVggMIgGK9U<6f$$h$lOx<{<HFZD3^b<t{`J|vmyI26xZ(q0)sjCYb&+XzU7<rkaP
zECpqVT71lP@$CJ#ThK#jb!YpJ?+>xKP&s{^2Z#6K?F|t98-DpY61Z?K?7u(koZrp#
zICc|cNOyf0|FDMBdK7+?ETvI&aGjdjG5+e;_Y^SBxG^^UOZi;W;6<%EVPwIXZOfiM
z2?qAEP%C&Y7?hJpSVp3e$r9&&g{=r;o>kK*@;;uC+NJ*zaY}Nk=N6xZSwLNri)jKZ
zJN@%}zm;P>ZswD|ZN;P}v{_XC?z0c8nu-}`HxSP{((aoA_0W)lOT}Nx9Q-|Z1tlDq
zFN#=&H`P*KP!ygUY-FlhiGx{z*U9~*Sa<Fkc?}+V2~tzLmSd=46;iu1R6Hqiw3dnE
zcCHKA%R`t?E4=dReDk*7iEOTNRHL$4*(b7-3bcx)_`Jv`CnwuBWzFfFCa8k={GV&@
zm-O)bsq4s)ZS1i?Hk`Ktd$`||%7-U@Wv=E{<!le>2@nCqU5kQX7;Y+g+%1DjaekLE
z&~fdML$bP*b8qd2__ef5fr^Mz(e~p?p?f|IPA&x}zfbEnd~(<^MX-NKQdi}mZ{>H%
z$lN-uu-@aor|lTL=1t?XH3<A>4&4ayFRW^1JeM&RHGEW_URxt7+bC4+NKX{^6Afkm
zlYKH;j4eMRwfB*2(}M8JXbEwORturg!}?xbcC%dH@!tj-Z%0-UMBa!*C)6aE=ehWz
z!Imb^Bl+I05Mdty)A#HHQOXULB{6H(?@hJY?#3~{uHMCkGa>NiIG{ds#zLAiCfdST
zSaur~ZSRK)&J~zIalwFJQcx{j?tKb;5P#6%Ue{$5TYzAMnL}AjTHvjD%Yqhvx!uam
zDk)m*62->Qv{A-VSvs9z*P~QZ?}%&#n^yNf(~Pbpd!@g>*WIgMYiuujLaeAZIg~wz
zyLyEsSK&^oqkgv1sF$ZhbkZ8D&^4P2D;pQHFfF4K>rL0jM!kVnQ2-z=BGE$I=Z0c2
zeg@we(Bc66Ni{qQ)r1ew-w$*NB{RB{=Ei#Qnk}6+>KdyC)-nrw-l~VUv_lM_+hMVl
zM;*wPB6^oA20JAnW@9JWDJXzy>1|CpgKmH1+U=+S*Ey)Vpo0H?&wlH;gcbX5X?1hz
z*r-~?pYYr%So^7KwL9oDz?x38qal{SF1bTw(9SJc&(&60v*>lip(dNQfYC>xs+{##
z=1|MuOXlXJX&M)*??0goRKs7wI|Ie~A}Af)$4i%HPWZ0+6CL~zyIU?@r;*W&U`d)n
z<}~x~)<~jHUM;cH)>Kw#?AIAT3Xc-C66*j~%IGlNx<1JfK#o6_m6Yr)*PE%OQ!>`{
zY?Xc;W_mYAnLZxA7fSl44+<B!VBPeuHmZ!(%R)UrF79o`C|}TpijVq!S3cbv+FW{^
z%`iyu6jYYSNA-Fs_p`~|!h$I!@}#Kp#7*c{Qg2`bhKCI`FMj}}a*ky!^IOlqCm2_G
zj}F9=D4JEs;pUHV1h2iH;0k!%UWs>l`ICpS1E>kSZ8*AfIP%*v37yn2p-S5V&KQ4B
zLg;6|Ja|7KHX4c|d#D%t+4wz3liXzBv++E5Rz%1F!q{JzeVf;{4`1hlJhX%d^RUb<
zhlDG6d)3eGvSMryNdx0o`7~qAt~p&WD)=DLp&I#TZXBn@syfd5$$u+uixB*PVlrV_
zj(DPGoKa0dy#itifKC9BqnrBi6iSu)Xe<hM#@zcxa7Co)%47r#3NFJD_S@0DO?-YG
zuRR(0-<)-WsbXxP)H;j`UXMNAnw4B&bE33K1WHP7`7+Ml{Xt|F;R%4nt6QH-<jj|W
zL-=9zV-8Lmx!(M;LsAEBg@l<e+w0u+wDiAfIe(t|pL@OL&SG@ZH-AerzDY%LvT4HJ
z{4wU8o_`3&1PXfbd(%mj99tE^9Q1(G6437jI9pjW>5JtpS*=>h5N%iZWNHpxWuvtj
z8Yp53`tXS$U5vtLoI->i;<g3scOaI=k$M!@2)96w!iY7?1m&cDL~))|x%&eN*XyiK
z>Zx61Y>r)8CaH^L>!rMc95oqj7N=;ss+NWR?(o%;@7Gil-OKu8t#+CI)sew;Ab}CP
z<PD<AKXN$md@mwQEfRKN<YCqSW<%2H^g?)m{$!}O)Eea#;{HQ+^EC_KfmfZJ`$sko
zgjany;`V!pqvp4<MUBSK*=aq`=G<3{%D4nomY$nhDG4r*k@W+{1zCcgH47yPKRNoj
za5-H96}gtH3ceabOgIHgWAN>Nye&YhQOogeU_Y}HNZk7aL$YkNqo;$YRa8R%iqsD{
zDsGKZo3M-k?PJKC_GP9Syh~4q7@fA*KQ&DapYMro+08UFA(<jS9sJcw2{=G3JkZuG
zX|uIdBFs#+oH_lfAJ~E+#SSg19=>uP)X9km)MT@^cCZn0-j;ZN@EYYQpC-u<u?MX0
z!!?2lvimi?D_>*`o)B@akgO5A2jD=OMqbr@%zoYvg^17icELX7h8+bN+7Z0on-}Zt
zjXsJ*j(=;6{w9y^;|-Fep#s=CQCN0MTAp7qk{=Yowv5kb#?!LDaKgt-u2J*Vk%eo`
zixV87%c_YMcwD9#9=8L}`!$=@$VxkM1tsG#c#_9xsYrH~e{E|8<}dfQ9*-ZV<~UZ`
zRw%9*KAr2?JJ@~ozAA3>w$Z$bE{*wv@+^5)Yb~;2GXTjB4GAStNXndo{Td@*1J}FF
z9mO`%(iC-q)Hsz92}3^tet+P1^KQ*5&2OTt7j$@YUl}4u@4R(Z#?d0vyE_rhuBF-7
zj3zro4eG2O`r<2{O&@HweikOpxj1}RO-Q~v$n_QS!d&l3RARxd*wZ78fdZVzeWYfc
z^u@V7GL(4TxzIa-W#Y%SsXrB}lPF<6I=IQ1pD0UQhZFD#a%^1HDwl-d;2JZ|_18n&
zwso&+(xhpbMs<;w?y+ygPt>(e$bU<f$^8DZS9x#5q=QKESUhW*{t^V%e6x<Us>5vN
z59)Sl^I&zPb^(}7uC|ZQkep6Y7DTuBJ<#6vO5mfcO`dF&4PC{h$-R(z6Ae?jGZZ5)
zVeVXG+|#&=&t*oq!k6K5W_{*Rh&K9^R?sp2I9S8AG_7<XX^A65=ahoZ17YMP9H%9?
zmYwe5$+x5T4AgalC^=}%ON$F<YbSQ^<k~EX9Gxk}<vH<xC}U+~BQwr}i$8>EvNP<B
z)-1c2S*9=fTyn>1#dxrkFM}uh`r7sT7&W!chakSM@r<Gh<qb^}!x&Mq%TTna8l5Qk
zFiaNho{EKTvIEN4-Zvs@WXK^5sc_6g?;XaB;S6C+keTamMWxPwg)>ryy|ldgtXg_{
zdOv>rm>XDzdymw*M?yk^Lu7_?jmpa{i5Uh{YJ_bR0aYD8^k+jQ^4!>AW9Pd?_}=IS
z^n#f_t%E$oJ2q9inMj9YV0oY=7y|}H_JWZx6WHe_TC>nckStSF)Dm+*n%c02C{0@c
zwm{%eEKx2u)pU@y%s(ICq+%>*lHx^}S;(m2Z^Z+{&;MP>0kaX*=>Mvt;zCS(=lubw
zFybWx60GS^7*u%n9mIwZc7e?M|9hZPL!t#h_Ecy;i+k4e9K>@1tCwU7BX)i#f;ED9
z5BN?|4<oKt+ar_My`O}|GY%Uac<TlX|Mm8NnsjEj0}fKSGawQC_oNW;sDtQi=fjLn
z@+i0K)w2AsHSIq7m_l6uEG!;@RT%hxyFi`dsFWS}9PoZzZ3iQ>C3s6ZE2n2uCs48A
zIDQF}k6zO7Cp;X&pH@bJzj~?vy@bCpn!COCZ~@XVqBm03R-Wvzey)K$4)bv}kLIaE
zhilgBEm5W!r$vYc+`no}i~qe70}<BEUc|Lhvp_9_tLM>hKF^sLACI^oH;OO|BIV?0
znuHD+!IP&QPlg3F5r@f_?`Jup`Om`z4i#vd$oBws(*OMkCI3~hAbwCdTi?p0Kg@Mf
zMQQ<r*j;!KGU^(2R*0=9{r}z$oz;i`%mvZW;MegadG9D{1nNCN5*bEzHB(VbkI|G~
zXK|tXXJ*u768YuusJ?l1eci5=E|-hw0|HZJvPCecm{qswj}P#VnCuf25REYgG2+(!
zPmW>l7jMANyzKzPu74bFP@=s@!-$F&^ZV19b^Oy&69&9v#7h(mg83vv3AJh!UE5Ji
z#^yid{^$S|q7E%Tz?>4=f7PYjF71BWN=lT|U!h$@M`wB)Yj(PxbqwA9KpmYG)DlLM
zGFa)3k1Wh2Y5;XTyP$=4u#Oj%jy8GL2E!yw4Z)Vji_R$uriqPz7k4{C*FR6@vnd~x
zuMZ?kfWVcNj2C@C)zWTFbM7P9>SlE6`Pmsp@=!Gb_WZYODh=Wb22<U(1QqLnj?d^M
zH+aW)ioD(Sj<(I(%wL^DrI!!0H+uqmw5=TtJ~MW^9w^n%VPIfv&EGTNFrE2-3@*J~
zVlvgeulJjeysOTN5jHR|_!`uMppR~1hHm}r8mhcQrcuQWn(QmPj6GH)tNhyFeX;fD
zOtmybL^|ZgPtvdSo3PRMrPkHW&GT5pSkCIDlkQ<Dh1RAfb4$zUq%Zs~#ZpBmsYA4F
z5l4lElmppN@p)}rNd+_`yYeQb{{795Lh#L&TG9s$u75q+b20=>>h^V`g3$K$L*G0y
ztD3&CQ2#T6H0hTVSh%RpF*Bg$18lhl<OFpX{d65iJ~7$5H<-*}hN}-WjUG3(KbGW1
zOihd_?Fw^&yn>y4|FXR!_};cjICp>WA%94;T-(|&`<L>LZyt>`g~5(Wz|5dNcAfB;
z+suJgLSAjev_|=Xd=VFQfunm}X$YKJgx;&_MMma@8ZwF`&-tm9D43)zH>n7$WzL*c
zMbJvkp^W?v?k8C)X<E-``#_U(nF_R|m;qi=34^j7sQ(7`QxLMPk}>(O<$%JwdR^Zi
z)(IwS21c!|3z_h(dO8P*`SI#=lvok4q7iV|^<Q;Tm$9sU5|Uiu-!lx9>~N>8I?Q34
zUm+8a3~Vu~C$uUpMb=bAbS_2iUa!H6$!(i2djQps)zBp=#~Gh)2G%Umy@n*oo3%UH
zTV3=%PWPallt*9s&*E~f+F=<9&{Kr@tzi={!I8s<ud?(AE-<?@B;ny>zvt70xqWO;
zCr1&Tl4+X8^z5A~-SqJeZ&RXDh<ZSe(u=`Q<@4uW7S6B68I=*qnwy4*aO4gexI*#;
zkrkzpoDO&}-;@l^P*8H3Q0d_2Wf8ijs|3FBg4k#b6s222MEcof5S_jn;AbZXnYh7`
zBf<D4hz`9cJW;)4Lfc<pSpfz7yle|j#G<=<w>SEp07TEGADNPi#K9T^wHHW9sBncp
zd7#Ff{I7m<*lDH6&KRu!sV{nK)A@$J_2k^4qH~%t19US_=f-a;+)rgEuE?6|*bt8I
zstEAbh(FsZPMf;iyS^W*QBzTikC`4*Aj1YDRqcj`6NQ=Jiv`Y>sR8p`C4F=7{aw6N
z)Rz)sT%y<u?>3fq<c1o!;$=@cf9iXOY^q^HH6mI$KKp!Q&gMsi>&<{IU+l;{#$qLU
zz~8m{vL)18Mz{g2d%$~&58o(?Qm(|SW+*MYcZ$6|3O?=0zgWOUS_DLTC>K;#4)S)g
zyPPOUIFbI=7_nn_LV?@<{;zt9s3x(4d=v>tsGul0>jv-G+4ym(PAw4oCjw!LMlg@2
zn7I1-DIKiB%SU9`7YwETkopb3@dXoRo`22KTTmnN(ZLPC?8^(e%r~XvtFJ?FAu#1)
zPZ-9dbEa@y^?(XDDiyy`l8$9cEsNS~%_v!c8%ap@X@z{*d2Zc2G?FGr;(JmkfTm0)
z!vh7*w0GM)-c7fJRZ{JzEjFSgt&}=8O!b>1iK6Q^2mkk7gIw!2V1&oud@Rk1->InB
zi{Wu|ty$zyq@T-we4^|DWzqG^pV7w~&=m%;;8YW<i^CfnHMKG2DT@BdS5*x4wxSl3
zC<UO9cJ}{r)V2H5P!|fThY?VxKPjeO95cjb?bAW-fG0!rk1N=SQDh%ozG`9c-Ou8o
z-nu7UAIk#_7J@IbpOOS)DfRx#0WCIGUj(vz+1mHS$CWooxY;r;at8<MwruDS2Jn5r
zfE6{8`Hqe%#~TWx@WHZ2{8!_Jd{%6o5q2l>oQ<=ebBEr40}1v-*a?gZyVfqBV#)su
z1Unr&EZ6;vBo!5yvwUk17KXuYg-fu48GYC$3}z!3|L-o$T)>X9yS;-{9>PMf|E~N5
zv+J;@&3%N$O)%T}-)_Q~$M_IVE-a|6{x2K+|F&*{JAuMX3$sG7dwxp5qDR<<8}>9c
zn3wVY>=sg$IznMu1!j7gieV0hVpUVCU%{McK+i0nKlG$5&Ax&|kg(@$w)m3ikz0g4
z>n8ry^=fA|?$6o%r$Xf&Hi?uQ@WrA~Q}<>k>6>|w^)`%aUecP+9xl7&E+C<>(_=E{
zrHnn__e&yq2qGn9eG&3eQMWIgHLpn<OPBj7RM@KEOO3eCVV|hg7FkC!DJGF*@#A-b
zgAm@|;jG)=aZ4QW>Q!f!cb479n2VJ?mIvj?tm;CQ$?WSNO7HS`()n%>9O7wXjb_U(
zgJz5K-&&lXGSB}%o$EKsecb^eU3fevBbK&;Z=+Jro4)oJvtUXMaKDn!#@^v_u;|Nh
zTR+<mB;SgBm@TI9JKUCyhW?gJR$30hKi(oP4rhH1;l=&Z@s+IUov_=iki_gq?-4b%
zS>px*t3B8kC+dZuzoHqz>KDLQ;|~`Au2X*zsS%iuB+9+x1sg0Pg9N}9@@bdq*(U;b
zyxGO9zeso#G?3taV!@oID2>VpQuLFTZ1huGj{M_#Sp!tQ+Ar2G2bUfd^01;u4RFpt
zHF0@^pYK%cRBG~gIHhTlVKR)$-C!cCp0R6f4-**l98vvfBeir>dUz0+8|DYVY8b(s
zxC)sPCF6h9VgL8Q&#12+|4EbB-2a@WfgBTdn?kD+kt7>Z+DCrpq>xHlIeq&d`2qbW
zgh?B%QQ&PA+gc~rzitNc)yuzc)-cI8<AdL5r@dHVa)?!f%$s-EWvVe`)!lcZ$0L~G
zn6210g&=BcD&wIu_-qnrW)bckW0*-%=D|bEMqFUq+EFRUqJ>ZFkju^7`)frNqP}LI
zn+VLzseavdBS@<s)v?j<@@MI8yly(!xB8@$am)%77e`TJY|BAZ|01enz?(kv3I}H_
z6U3xoG7+9t`Wb!aY}m)gfnrg&LY|LWCJhtJ&dfTt+BvVWa-R488rUfHtR?knDVB>G
z#BPDu5%|RsOP>H9Qp+?&l=ru9M0Oi==B_Ogjb8blg_cH9X-sX&O{Z>sTblmzzdxGP
zubI(Rm6gkSF?1bnE3S?sg^I4z=lR{(l8slB#<?LZ$<>cZ9y)1^y`jIfV(zg3U3P-+
z`6c}UE{s{6NkNveoI)OTgb}rku9#C35gt$Y(4Tpf59bFJ9Nc$=9%8uF6%<+?bFgyj
z|D2XI_(p`L;pP<zXB@Gk#Udss*jpS{MVT-7T~}T6kJb_mx8@5d^S9$WIKp7BlXq5@
zba^R>nzcT%ww0*&a-F-J`@oZbA7I{tUnSxwQ#pmq*a+kHMZ7t?CL)4+`nm?*KN0@_
z&XfPNeQ#wc{|$AZ`tfSfv${DJaIv;h<bF*@t6@RPdg~R9)AN~C!<M&_!AA+?p}?C9
zO#U4-_rvtxi4_h(eaF%=YgvT!IO-=OSeZNO;=VY!@67ck9_;LzUfZ%nI{rUSR+^1?
zc!@{@)-V_!%PjiIx_ye1zN~jzD(Cu3$NFC|2#S-3R6)nOJP9Sh#ARQOI|u`RAtD`b
zQ$948j14ICc~|yBbxO{F#GRgK@~+#J6c+N9^lbTXXX<c-jL*tky7|%O>`#t!3GfZN
zVAF?7QJWrq3-re60e!G7ge*RGsh1wEMG>-LTVdy7ya5;=75uR<Md?_)>=4?+pJtUH
zeDAT*jXbq{DcGH)&nwU4`TVzX6*PaF?vYWy@!2N4@be>RoQH_fssvsvD?}0eW-EPX
z{(C&x!pDXD$O2jv6{ojZ*&>i><?(vGT`$Tqj?)U4PudJ>UxRs24bD+yIkm)6Wa5@J
zk~I#+-JfQEm7f@m%*MKqdF%__xL5nXXwmA=$VcINPHAE#t#q7(p270JQl0ZM7~KLN
zLgq$b7DM*yk=V3bAwI!e!r|6Lf<doXu&j-aJ*U8w@2iUOup@m6xA)(`GShL*DtNnP
z$A`baC7I{~U8@~JgT5{HJ1A;SN)(A6+#Y&i<i7Bme&BwlNV)q6csuA}|5EN5GhINI
zSvEf+2>>+a`u}~YVU^d2jTt<sz*i2(XND`Lc;hL`1vK@%b)?|z9&*xTEd`oh`9lFD
zkj7MCK~z}#ue&N7(nePw{R4?^=03e>3oGhaR^00I&vVq!oIk)<1A^{S(>m3soxp|j
zj#iD7Mn^#h9B%hXMIr&3*|G{kfu(L7r4N%yLzdVfhr!_i&duj%!fDEk%(kz#pEeBr
z0(;u~PorE8;xTn<M70pnSmDJUgYXu5T{^Tc+#E-#XZ2|q_efPX0Q>zg0;AULxqwCQ
zw5aSy>Yxwn_e*n)QQQknRr8@e;W8?RtuZ-ZLHxzuD6Hf9;V;P@=)Di+g*$J&`9z1R
z&<&4}s5r=|Ps7H;^P(YhW?;w4-`WaTVIWhxk=dVF0U`RrUCDS9X8f=6hipQgp;awl
z?|)VOTM`E`AGa{8Z9PG)kmqBi`CcxMG)YyEKDzJJ2k)A=Pj9U-^{sY8&6rdKTsSNb
z!O^m_dNm;|tAHh$*DTF`+x+KTa%9(<O!*;-TIQ28N^qUPY~&ALXu<g`w{t*{Urkn<
zQol~?JYM-vsj}SiXmMn_Ll?YHokjLm6#jJodcTMJLB=euMw98b1}p+=)(z)LUzd}6
zvf|$2Ud{p_v1SdpeYaj-=V<dVv8Jm56CBKqI1_^n7Ro9j2vo!VzPS{oJ-%))MHm%f
z-?bAqJ?F9llV9fN&_e`j3cl;bIRz8{_^C$dAY$Ztt#H(D1JgOwb)_{{;>zZoq`+wh
z$G4YsQfkKnwXVct4owsjsurCGPb+hzm(|IBY4aO*ZBxY;MdX9pU++|$DPN3dzlVda
z{bBX1`bavNry{b5qdG9xdK(jwp`j))rEp>WbffB`q|Q+te`j4uUINNu%&4rAww->)
z<nLtoB<xgzzZOmAZy8%eemLnE!)AZcBB0M2hVoYUfmbx-X05Hg@NPqR=uyd1$O1NY
ztVc`QMD)bfA;QZq&*`MNL3O|6(4-h;KX@=sW>=ph^b*xh3fE*qYy=kP2#PJqXDzxM
zp(AiYj$$8^7Fwf9X0xZ}M>o5h&E++hxZZ?G&bD$}tf@?mRQ;A@k%MO5CN8;`>zbny
z*1~=I!nzpuc*yJ9;?${#CYgYwnZU%?XIXEznzZMxvD^Mk4uP-0tkbvUd7Q~S*C8N4
zzr2BDP0{U~KzdRzPS3}Fy{;6W>Uxn+_`dnZZv*Sc(e7VM#Gg$&C;>J+RTXyu>y$FI
zjs-4PvR?Lp1<OVs3_x_Q!KLBJN$YOhsLNBO&%<m2|D2v)g<{fJ<%JAQNlcep*QS;g
zRdDP^hVq$HJ@UyJF@I(?bX|Wev)r>*PlC&en(m<~J~ygB)>Ahvy6ND<uz_pbG1#EH
z^W>CZ2zT^xJq@#rsqZ&r%ja>Ei4)qQo^Su$Qcw_Nl0n4vgV{i+sKMaD+v1|t-9hgm
zcVokz_Tar%|3VmCf`gUJf~m{q^##5@iZ=py<3;|m8{|;1hnRYTEal)o=$-*95!y6=
z-+8jm)BgpOMw(gNkibc8-B>(og$2cadd{);R3z$B&$si;Bt3l|jS?AWy;G$Y9o{%O
zG3Q@f09L?zb@tDr2%YmwbV#}l(L3xX7b(uhZJga<xCz?o*?G|6>}zI7)*4h<e{Hgu
z&J+I8NOY+@e!kI}A9%j9Be)4NS*TcY7;o=Z$S<L|oO<Ioe{SmI_JWYW!Kq#LO|eF`
ziu)^QdS=~f*Z7n6eGA?dDU@|NkUa_VQBsOu;~%cf5o=6QGg6L9&YMgUGB|afwe0+g
z_Zdc~%cj7!I+b$U_A%#=;oK9M(kPrRVf?Bey;NX=);)ZrnZw;mXqE`xndFtGR@bDV
z(#<BR1_0G6nzWg{qID<T^*i-hyDq!$Hj9q1$`rG27gD)8j)E1#72j4NTs^o_?C->M
zO<WrsPfxDu6%&^<pp80?jHwV_10C?O?n~w`r#mFG2z#EEIqWF+XSk#jZgwowE*Uo9
zL7pJ^u3DeAPl4j{E5P?m`^zl5;+tUfnAnbp)G(_!Z}0Rmp2o#L8hE_w@BKX&z6pQT
z&RT{zBU(Y@CehSDkFd2M>X**X|G0|hohhUwB_)UBNCn*vKL+^r-W-kB<T-dYxDbCK
zhLa(?UDP9G1(l^^6<^+~^D9CXC)g4pJlP~kZm%C6`(_(9EOY!?N$!juWPztb{@uwW
zaPC~(T{}`fI=LR_?b|=RtW~A*SZ}RVx%k@IP&r3FFxk!yAKu@6wXpCvwfknp`0bng
z$3c7&u5J~Jcxs>$t;-a*qNRm}HFuW%TFco=BOM)`<!BO3W@hGPz&Ok|K^DxmFE%cq
zEbN(#`jwWh9h#S0%MTg0@VV6XaqN~S><oph(w@B9?so)UaQv)bgr6HfPMa3F^9QOi
zuz?OKAuIso#_pB_?Py7_==sh2%-`1+qTNm!LVKgLF4uH7+AG*W`J-s6mp!wy-XoiH
z%IeV}R*X^!gXk8_n5U86sHr)J^<gJs9-OZow!GQzW3}FO`QIGQYHDic=H|lU?u0LP
zN0Mb4sNyQWoMmysRo{FIN*jK8`}cs4OzYPxt*&yq0>FI*Qem_x1<2YWlJa<!brkT8
zsL{V}8det;cAo%1=tYPXrvR((QN&%f<6~MY@WmtGJ__4esoq=#TboJQvx9aI@yP}E
z7yT3R;pr;qH@Isp#D?*T5CofQa)#n=Kzh#58$&|!$NIONV42|>n8({PrdS;UqY8<M
ziJkh6LL)TcWb`nXXN-IjdV4<@s!fX-nfe6T`Ml$++(|aWtZGw2vafR4&=}K{;HA4>
zPrv<+!90kCQc7!6Vd@|@#8P!F^y|hY;Y%_2?kk5D^bkz7GhuGW8w)<}(QNTf{w6s{
zpO7i;fmC6UQ^ouI-hx$ZB^~+Pvv4C)lx-qL6`;j7@^U5NsAxMfLW%5Hm8DRcwx3oD
zdW^EruBtT~iW{At)*8XHY3?X3MY{MsJ8*7|1V_$)WIEHq%9?l*3B>+pHG$dcczC`t
zhD~&1`_#s|&3C)9x#@WKsMD_UdBPlnBQ76q`?odgL<8FwSz=?H_scRb|Auk4jV3;m
zq^n<9lnLYpR}&#nObi`wBg5g0SeyCU2A|(=iK77y(T0bY>kEHJimqqW0uq)PF&<qg
z0cG<?P@;R2tRCanrlWb*uKPX{{(hgBAsjlT&lO+Q{JVy1>bDkwV4Fc&J9~SU<yx2|
zbghO65IG1y+FjD}l_4xOinO<4@9#30%y%c%_q+ul<s^6Hw7Syj1jGo6G+3D_inkN@
z``U<pvdFf0@(jFcWFS+CXC0IYA|{}ni=Xp^#|wWie4BP3OS!%%yD87X$6x=axa<CE
zYU!duKm<hO3DN~o1nG)2X@Y=)bO}Y8bOogM5}HwZHGop2NhgqiLPF>z4?<If-~)jG
zp_9NP^pfxT{)z9WnKkRKb!O(yIdj(Dd(FYo9<1M&1rLub@I5RXAh{)*Mn+N(KT}(G
zvIYh1oM*)P921!D1#NP9R=B#kIpM%kIpVO$z95uM-J3V^H4|RJuO6(gjaS4uaezz<
zvaV2I(7a0vH)#F-2A4Ho%T<8c&A32Z5I4x?6YK7>jBGWLCJH~fIIOB2c6fOoZ^>r<
zhU*^Pw_MlLGPO3}4M1wIIL`%}6vlhhI!Z~JV4^yYN1B(9vN$yEoGvc9TS~yC&Pz#5
z-$*Ww$sNdc6t=rz^|%T#RKJAt;XgYNNO?H*>TLDtXqA+kt=pUyci&MW94?jZg81NQ
zC45OpA;%g4Z*27cS!n|J8x#sv9G1B}i*-bdJ&4>qyq6Dhp^yHsEDNDqA&Pkk*_VA;
zPBxDU@7MD~1m@ohE6HkeD`o7c^KzpTs1~ejN-QZ~Gluiw9hR)}YJcdXTbx|4cbob+
z3boaav>v<9HM95aX%BtQ<%Wm}$7LppD9Wi=>P4BBLm)M4RYoZtc9kM0%;LC^m8f~)
zY-1sV4ErnLM#@2j4a0nrpXKh@S#jiM*Z0<UZedfQ*6EMx%z0CEB+&Oi)}m0M3%v=J
z9(9u~u2crlBR{c2HqM;T+JtcF2Q&L#S;{u=sMZtRmm2S)e#7<j%uDWID-}y827bU?
z(Oq}+**%S)TNtuee7ZnamNS9D5H#f1op*W*`$y@WmN+@Z+iMYREu{yA&rU{Jy29wd
z@d%SNA>_(2#12n7J>%@ZES&Jws{0v`RoT8K+#+K#DjS(#c*9B0s{5_)>2~?M<EhW?
z>JsTBRkJzGFkgO2DLdZTN-k=ddfRg1C`SP$B~g&a{dwL;?Gx@_le{s-<>f(cp(yfx
zNy&~sZg5-YG=m)Exp|Re`4Hs~M;GIuDTYY}q4RqD#J$zV8(6Vmw`-LZ*THH~JpoR&
z-XO6_v&7psT1>M%OF=`fjZ3(V3!tm&7c-wvW?eB`;J$kFGuFX1d>Z~Rsi9I#J7X{c
zdf)yo@78s*Zv#5!)~`yF*eB&zl;1}MA;KIBDPrlaot!*>&7_6{ddV-+;Rl7t`ml}-
zH%^b8GwkoeL6i8hj7&f4nrf3*Ge%d{b=HPeuS@hy8TNg8k(npxF})V>BVc>(`>O{p
z>ddnS-cGQS-_03*yid;ug!XltGEITpv0dBMC<^K04#xw;a(K^;U*Fs2-kF8!LDNR#
zUpFDJLuCoq%<K#qyGm^3t>tJj)p4M|-4!4BEp&;0<=xMto)v5%3{+nzp#t8y_g4zP
zV{5IHrD{pVf>V&gVdSUQvy)<rF<}fnCAy)Mvz*u0Tq_K7Wx5;@d`b(2LZuZI3^<W*
zdNqd=^MKR}wNjXumG#`%SjKBcv8uxm1nMO`dFbr+z2A;<S=}LdjMs*Id(1hmt1+#n
zhv3<OGzcoeYctAA_yx0ha4ePh!*YyP{i_^%f}1%a)!|hEAO*pi46BE>k$YOiceL63
z6Z;mpaQj8C5&OAv(_}%T^STY{3-vK%Et_>+pAtn<7X0NX!RyQ*Prk0K%o)fdrex%}
zE(5N4baWK^LGNss1|(zoQu(XayV?7GZC!hXJ`@`!0}G+H?>l>Tiy5-=<oiCcWOiy+
zmC#D6g-vj((Bp~vwKTcCBL2vzA}A=92Fb&5Q4SRWU*7+<t{S-SZKRAI-n`Mo<2^cA
zqQX?59NYdfS*7ssr=m&C1anB)c_9Gf@^MxhZx3Wpkk&fRA3cYP8~3km89MlVk&si8
zw>Hn@EgPZMb4O0$K6cda7g-0&Ohf+URiUAw?Ep$9Otm03+t!aWN1c7c5fd7(5ZQeR
zA@mU4L!bgXNGr}<V}!pVpLg=ee==b*u+*vW<zY%&{;%~t`~`$Y=a?~o#1;?vDjyq&
zth==InRm7EsQ*`S{V~611qo3sf-IAI@<K534`vJ!lpOE+DtrT|ME?iUeRUiE;1SRP
zrT+lxy#F`y|7vd+*Lqo1*`u`AH7RbpOpbl7M((74K6NQUqjP_;zIYAnMD#rH(VcsF
z7813VyZw>cjw{xUK_tzl1R@{~A)tn7m1Oe0q%22C>>W+OS{^+$)iC$K+g9T@LPBJ-
z!|Qj`6?@Fb)avyK&03#hez}e6WTFK<AtXrCau<CBdbPb^gY%F`9thn{M0w!h+g`ol
z>~r>ZkSIjMd;IK{ETBcH-HQ4!N<1W`%)u>jZ!YX!2X^#IroDM{tqM7=k0C6Xk6bF8
z1GhfF+QZth9o9M$;ncp+guDGX<|GA)y6fz$zC7kOs824c7nhNXSvei2Y|>VM>fzC|
zdhYlHOMgts5cN{Nx>`Xx^-j}RX&~{yJ9o&t&hGink_djY*6z9aw~OBMgHVI#lNDNO
z>r-S=ht{Ygy!qm@ndsS<T^InUkADvYX-VEW%vR1pGUx12E9u)AHdWU&m59s9@jmRm
z1-4{FjG<FhN1SUVtZuKacY@`(^3=mZkKEJRB`upU800^;mk%aOGEK?f+DpwTu*xXH
zSsIfB)%We-g0uoa4H%28xyYq6UMufFX#r_Uj@fAtIMx$9RI)c!El%3dBGze1Z*WS?
z2g+RsvxsHT_G8tP>V6>OPflRePj4eLfS<Fb{{tr`Z#)+fW-Iv_ZhJt<Yc_Z!@Sz>M
z$9O>TJg`J06a)H=Ni&HhDC~K++B7(Nd_p9r&#}huiPWZl(E|JDoL1gu*R3o-JkunY
z7%_N<lle&mvRLJ`uxpSNFwkq{H@Kdsu+x)4u_+tIaL$QGI`dGo{gLe<M!IXf3Mj1j
znsgwuSM2JwNqWqd9);JeH*hi=`;#`=zvqa_N>%AdW7Y&+MS<L;Ley-j7i=5ZQST)P
z$WT2q8!NQRzudHdoi&CPZtgONkhs6tIqB6(SxyRnLwHZrN81HhDl1Rv_mwsO)}yRD
z7FjGw7I+gP`aS#ABFt`2nJtdD1_noo-S)6+S<2*eFOxDB$jd$n1iVu4?%_w9c0Ou{
z?q;&mlO$z}e0Fu}cE$drET-eVa_guLHSF(TY78XQ#ibqVrv!r~P~TjkB+g79Q;~Tp
z-p7znx%DcBnd2{5uo!Shouv@nl>P~LP5Rn2D_=HbF&Xf6KGH{<CP;=`ZhMsFN3y;&
zsmZ>~s*|QLvh;G|2Iqke1&ZDg`4=ZYzb&|*qkcG(cg&|_r}s?g=VQnU6SutuI^gcV
z=p=WwU&iRLz}J=fr?)_~LH`zt&w#Z<wa+_hy|3UUBx@9<z9fn7Idi0RxP_-(^>*6S
zH48B?ldv3xr}fhV6oTgb#w`7-nCAVyz;D=N#;v-wqzBCLk9QgA<Hbb1cA3bEnxtCd
zfrZpxrqa^vesH@uQk0kfSP%aA25-6Rjt<j@*55kJv{=UwwSU*Y&Y?81c$m%N1lSN9
zdH+gKTMQzi<;(;<;Gqw<zbX{qQ)I!ujXUm4kxZC^bD5bM{~^6fI&BYxI{x`{j2uLs
z?J~K(<a-f#m_<+5w^Pb?;@Nq>ImTKAHB=xWc9$hEM3?GxYjKNw`GYw52}XsXP+UL4
z_B-$Zdnj>*?uP|9?jp^*6p)sKCIdr|_DzTt0n4PoBYf{qJWbD@N8?KqnSBSRSuvhH
zKPue>_tHxJy;C2G8s?S}S(@}kd!x5i<%dLXMtm&f0*%IGEV)M$=fB`;oM~yB1>erS
zbbwZjs|c~xiylfRsic|@R5Z~5^t>QHA)s?Q;YC}yelEPv$jrBn9Mt0*;|WoEoA8*|
z(wGl_fVq3RdYb;88GF(9X4puZ%*&@wiX^ljS{yb6o;#i?JC-tESbCWHTm6D`kO?2h
zQDW>lazLxwB@m}~*4g9ej<@C6;mSwE6XYQt9X@vZl}}(;g=*#g@7oQQETF?5bLfS4
zh)d&NKZNrIY0^E!_gP82{UXVdt1Yb0_rgrWx1DuYvq`14;aI?KhCF3(7B1J;Zc4h9
z#<umF%U2^^bn)PL-@a*PI!3iY-v`$_oic(qE>7j?<e)!uVc1ejOrT3sS?+csk(e_Q
zGOuPlh~s`a?)|iR^yRVWcJg}an}FcA4#az|K-^3Bk>7)MUM^l2?V1!*=phG6+XYYO
z@v1V9dRm39p##MuIV%a9RtKJ}XIn;}p_Wi>&vI3y_uQ@VfUr@teD|y(K@H&T;og1;
zm4t`8ZD;BeFrwzJs1GbRn&y}k5J)AuICgIsZwn9wZX5sOA#}oyh@y$;AFEGsYvTuQ
zr&Y`CB7C`Ydq+TJufQF1^H6XB*68W#1h|Q6A)v3=3B~b6RLAC(`^+W*FaT|mdP}L1
z<;j(r-xQkTEscoIWNst=O##>Et)x`o@*uNx{6hLMhK&|XcXs<m1bnR@zey3hcg{YC
z_YVD->!ZwmLFWi~QLB*@9#1YhjlK}lKQ`Aay1y3$1iz9#{vW-v&I_#9#A>|2+7R@*
zRk3S??%KIizVREYwZeR#e{P*brXBG0SFJBVHCAHg>G5tCAf$BRdm;WAY4H7xK~|Jr
za(svilYr#H%xO&Nsd&%zheJgXWUgcS5_mH$U?k*eS*;^jo3s|;9Y%Y!>aGqP7Bn5>
z@*Vjn6$dB!V-qsfJeS-~_9>WH(im&)HLlRWi6>wNw4Q$Qr5o|?qnLA=(o=!UvaY{_
zjn9!R1h{1Xf0K`vxovE&WIgd)Ac=mrdHnI3nC7_1B{|i}(X%sk0=^M-E4ez=zJ=>-
zJ&lIjUskp)*m_m=;`@U)YIt=UTof#~ftIpZvf4gzYDtMUIX`!rjJttj8I+c0ePfJm
zp9MHM(A7`91J%t8xePe_OSb$`qvA>G^A@$=3xaDY@*PGf=+Hs98Eo8`oGwfzbYO-X
zK_i2bvxH~4!mDjDBY}Uv9>u9u^EktDWoRjp**OU*^sI2gGRv+2(SA$awJq(O_E^DJ
zwiGJ%Xmeu=FbBGMvti&?Aos=IY}j#y2;b9fy_$i(WsZD2EST!VZToIE{*5VH{%}@S
zjqvAmKo%faSM)`y6GZTwwco$&V4#g*JGuQ$1FC>iKp@tH)Ro+lv466)n@^QI{^RpA
oIRS0-A46KS&i@Vk-`Yhg%@u9Gk@R&U?9Y63wGFl4nlEGj2WztQ^8f$<

literal 0
HcmV?d00001

diff --git a/samples/web-app-cosmosdb-mongodb-api/dotnet/scripts/00-variables.sh b/samples/web-app-cosmosdb-mongodb-api/dotnet/scripts/00-variables.sh
new file mode 100755
index 0000000..efbb92c
--- /dev/null
+++ b/samples/web-app-cosmosdb-mongodb-api/dotnet/scripts/00-variables.sh
@@ -0,0 +1,38 @@
+# Variables
+
+# Azure Resources
+PREFIX='local'
+SUFFIX='test'
+LOCATION='italynorth'
+RESOURCE_GROUP_NAME="${PREFIX}-rg"
+ACR_NAME="${PREFIX,,}acr${SUFFIX,,}"
+ACR_SKU='Standard'
+SUBSCRIPTION_NAME=$(az account show --query name --output tsv)
+SUBSCRIPTION_ID=$(az account show --query id --output tsv)
+TENANT_ID=$(az account show --query tenantId --output tsv)
+CURRENT_DIR="$(cd "$(dirname "$0")" && pwd)"
+
+# Cosmos DB (MongoDB API)
+COSMOSDB_ACCOUNT_NAME="${PREFIX}-mongodb-${SUFFIX}"
+MONGODB_API_VERSION='7.0'
+COSMOSDB_DATABASE_NAME='sampledb'
+COSMOSDB_COLLECTION_NAME='activities'
+INDEXES='[{"key":{"keys":["_id"]}},{"key":{"keys":["username"]}},{"key":{"keys":["activity"]}},{"key":{"keys":["timestamp"]}}]'
+SHARD='username'
+THROUGHPUT=400
+
+# Application config
+LOGIN_NAME='paolo'
+
+# Docker Image
+IMAGE_NAME="vacation-planner-mongodb-dotnet"
+IMAGE_PULL_POLICY="Always"
+IMAGE_TAG="v1"
+PORT="8080"
+
+# Kubernetes
+NAMESPACE="vacation-planner-mongodb"
+DEPLOYMENT_NAME="vacation-planner-mongodb"
+SERVICE_NAME="vacation-planner-mongodb"
+CONFIGMAP_NAME="vacation-planner-mongodb-config"
+SECRET_NAME="vacation-planner-mongodb-secrets"
diff --git a/samples/web-app-cosmosdb-mongodb-api/dotnet/scripts/01-deploy-resources.sh b/samples/web-app-cosmosdb-mongodb-api/dotnet/scripts/01-deploy-resources.sh
new file mode 100755
index 0000000..4a20921
--- /dev/null
+++ b/samples/web-app-cosmosdb-mongodb-api/dotnet/scripts/01-deploy-resources.sh
@@ -0,0 +1,162 @@
+#!/bin/bash
+
+# Variables
+source ./00-variables.sh
+
+# Change the current directory to the script's directory
+cd "$CURRENT_DIR" || exit
+
+# Create a resource group
+echo "Checking if resource group [$RESOURCE_GROUP_NAME] exists in the subscription [$SUBSCRIPTION_NAME]..."
+az group show --name $RESOURCE_GROUP_NAME &>/dev/null
+
+if [[ $? != 0 ]]; then
+	echo "No resource group [$RESOURCE_GROUP_NAME] exists in the subscription [$SUBSCRIPTION_NAME]"
+	echo "Creating resource group [$RESOURCE_GROUP_NAME] in the subscription [$SUBSCRIPTION_NAME]..."
+
+	az group create \
+		--name $RESOURCE_GROUP_NAME \
+		--location "$LOCATION" \
+		--only-show-errors 1>/dev/null
+
+	if [[ $? == 0 ]]; then
+		echo "Resource group [$RESOURCE_GROUP_NAME] successfully created in the subscription [$SUBSCRIPTION_NAME]"
+	else
+		echo "Failed to create resource group [$RESOURCE_GROUP_NAME] in the subscription [$SUBSCRIPTION_NAME]"
+		exit 1
+	fi
+else
+	echo "Resource group [$RESOURCE_GROUP_NAME] already exists in the subscription [$SUBSCRIPTION_NAME]"
+fi
+
+# Create the Azure Container Registry
+echo "Checking if [$ACR_NAME] Azure Container Registry already exists in the [$RESOURCE_GROUP_NAME] resource group..."
+az acr show \
+	--name "$ACR_NAME" \
+	--resource-group "$RESOURCE_GROUP_NAME" \
+	--only-show-errors &>/dev/null
+
+if [[ $? != 0 ]]; then
+	echo "No [$ACR_NAME] Azure Container Registry exists in the [$RESOURCE_GROUP_NAME] resource group"
+	echo "Creating Azure Container Registry [$ACR_NAME]..."
+	az acr create \
+		--name "$ACR_NAME" \
+		--resource-group "$RESOURCE_GROUP_NAME" \
+		--location "$LOCATION" \
+		--sku "$ACR_SKU" \
+		--admin-enabled "true" \
+		--only-show-errors 1>/dev/null
+
+	if [ $? -eq 0 ]; then
+		echo "Azure Container Registry [$ACR_NAME] created successfully."
+	else
+		echo "Failed to create Azure Container Registry [$ACR_NAME]."
+		exit 1
+	fi
+else
+	echo "[$ACR_NAME] Azure Container Registry already exists in the [$RESOURCE_GROUP_NAME] resource group"
+fi
+
+# Create the Cosmos DB account (MongoDB API)
+echo "Checking if Cosmos DB account [$COSMOSDB_ACCOUNT_NAME] exists in the [$RESOURCE_GROUP_NAME] resource group..."
+az cosmosdb show \
+	--name "$COSMOSDB_ACCOUNT_NAME" \
+	--resource-group "$RESOURCE_GROUP_NAME" \
+	--only-show-errors &>/dev/null
+
+if [[ $? != 0 ]]; then
+	echo "No Cosmos DB account [$COSMOSDB_ACCOUNT_NAME] exists in the [$RESOURCE_GROUP_NAME] resource group"
+	echo "Creating Cosmos DB account [$COSMOSDB_ACCOUNT_NAME] with MongoDB API..."
+	az cosmosdb create \
+		--name "$COSMOSDB_ACCOUNT_NAME" \
+		--resource-group "$RESOURCE_GROUP_NAME" \
+		--kind MongoDB \
+		--server-version "$MONGODB_API_VERSION" \
+		--default-consistency-level Session \
+		--locations regionName="$LOCATION" \
+		--only-show-errors 1>/dev/null
+
+	if [ $? -eq 0 ]; then
+		echo "Cosmos DB account [$COSMOSDB_ACCOUNT_NAME] created successfully."
+	else
+		echo "Failed to create Cosmos DB account [$COSMOSDB_ACCOUNT_NAME]."
+		exit 1
+	fi
+else
+	echo "Cosmos DB account [$COSMOSDB_ACCOUNT_NAME] already exists in the [$RESOURCE_GROUP_NAME] resource group"
+fi
+
+# Create the MongoDB database
+echo "Checking if MongoDB database [$COSMOSDB_DATABASE_NAME] exists in account [$COSMOSDB_ACCOUNT_NAME]..."
+az cosmosdb mongodb database show \
+	--account-name "$COSMOSDB_ACCOUNT_NAME" \
+	--name "$COSMOSDB_DATABASE_NAME" \
+	--resource-group "$RESOURCE_GROUP_NAME" \
+	--only-show-errors &>/dev/null
+
+if [[ $? != 0 ]]; then
+	echo "Creating MongoDB database [$COSMOSDB_DATABASE_NAME]..."
+	az cosmosdb mongodb database create \
+		--account-name "$COSMOSDB_ACCOUNT_NAME" \
+		--name "$COSMOSDB_DATABASE_NAME" \
+		--resource-group "$RESOURCE_GROUP_NAME" \
+		--only-show-errors 1>/dev/null
+
+	if [ $? -eq 0 ]; then
+		echo "MongoDB database [$COSMOSDB_DATABASE_NAME] created successfully."
+	else
+		echo "Failed to create MongoDB database [$COSMOSDB_DATABASE_NAME]."
+		exit 1
+	fi
+else
+	echo "MongoDB database [$COSMOSDB_DATABASE_NAME] already exists in account [$COSMOSDB_ACCOUNT_NAME]"
+fi
+
+# Create the MongoDB collection
+echo "Checking if MongoDB collection [$COSMOSDB_COLLECTION_NAME] exists in database [$COSMOSDB_DATABASE_NAME]..."
+az cosmosdb mongodb collection show \
+	--account-name "$COSMOSDB_ACCOUNT_NAME" \
+	--database-name "$COSMOSDB_DATABASE_NAME" \
+	--name "$COSMOSDB_COLLECTION_NAME" \
+	--resource-group "$RESOURCE_GROUP_NAME" \
+	--only-show-errors &>/dev/null
+
+if [[ $? != 0 ]]; then
+	echo "Creating MongoDB collection [$COSMOSDB_COLLECTION_NAME]..."
+	az cosmosdb mongodb collection create \
+		--account-name "$COSMOSDB_ACCOUNT_NAME" \
+		--database-name "$COSMOSDB_DATABASE_NAME" \
+		--name "$COSMOSDB_COLLECTION_NAME" \
+		--resource-group "$RESOURCE_GROUP_NAME" \
+		--shard "$SHARD" \
+		--throughput "$THROUGHPUT" \
+		--idx "$INDEXES" \
+		--only-show-errors 1>/dev/null
+
+	if [ $? -eq 0 ]; then
+		echo "MongoDB collection [$COSMOSDB_COLLECTION_NAME] created successfully."
+	else
+		echo "Failed to create MongoDB collection [$COSMOSDB_COLLECTION_NAME]."
+		exit 1
+	fi
+else
+	echo "MongoDB collection [$COSMOSDB_COLLECTION_NAME] already exists in database [$COSMOSDB_DATABASE_NAME]"
+fi
+
+# Retrieve the Cosmos DB MongoDB connection string
+echo "Retrieving Cosmos DB MongoDB connection string for [$COSMOSDB_ACCOUNT_NAME]..."
+COSMOSDB_CONNECTION_STRING=$(az cosmosdb keys list \
+	--name "$COSMOSDB_ACCOUNT_NAME" \
+	--resource-group "$RESOURCE_GROUP_NAME" \
+	--type connection-strings \
+	--query "connectionStrings[0].connectionString" \
+	--output tsv)
+
+if [ -n "$COSMOSDB_CONNECTION_STRING" ]; then
+	echo "Cosmos DB connection string retrieved successfully."
+else
+	echo "Failed to retrieve Cosmos DB connection string."
+	exit 1
+fi
+
+export COSMOSDB_CONNECTION_STRING
diff --git a/samples/web-app-cosmosdb-mongodb-api/dotnet/scripts/02-build-docker-image.sh b/samples/web-app-cosmosdb-mongodb-api/dotnet/scripts/02-build-docker-image.sh
new file mode 100755
index 0000000..4b497d8
--- /dev/null
+++ b/samples/web-app-cosmosdb-mongodb-api/dotnet/scripts/02-build-docker-image.sh
@@ -0,0 +1,18 @@
+#!/bin/bash
+
+# Variables
+source ./00-variables.sh
+
+# Change the current directory to the script's directory
+cd "$CURRENT_DIR" || exit
+
+# Build context: the src/ folder (contains VacationPlanner.csproj, Program.cs, Pages/, Services/, wwwroot/).
+# The Dockerfile lives alongside this script, so we point -f at it explicitly.
+BUILD_CONTEXT="../src"
+
+# Build the docker image
+docker build \
+	-t $IMAGE_NAME:$IMAGE_TAG \
+	-f Dockerfile \
+	--build-arg PORT=$PORT \
+	$BUILD_CONTEXT
diff --git a/samples/web-app-cosmosdb-mongodb-api/dotnet/scripts/03-run-docker-container.sh b/samples/web-app-cosmosdb-mongodb-api/dotnet/scripts/03-run-docker-container.sh
new file mode 100755
index 0000000..c8e39b3
--- /dev/null
+++ b/samples/web-app-cosmosdb-mongodb-api/dotnet/scripts/03-run-docker-container.sh
@@ -0,0 +1,33 @@
+#!/bin/bash
+
+# Variables
+source ./00-variables.sh
+
+# Retrieve the Cosmos DB MongoDB connection string
+echo "Retrieving Cosmos DB connection string for [$COSMOSDB_ACCOUNT_NAME]..."
+COSMOSDB_CONNECTION_STRING=$(az cosmosdb keys list \
+	--name "$COSMOSDB_ACCOUNT_NAME" \
+	--resource-group "$RESOURCE_GROUP_NAME" \
+	--type connection-strings \
+	--query "connectionStrings[0].connectionString" \
+	--output tsv)
+
+if [ -n "$COSMOSDB_CONNECTION_STRING" ]; then
+	echo "Cosmos DB connection string retrieved successfully."
+else
+	echo "Failed to retrieve Cosmos DB connection string."
+	exit 1
+fi
+
+# --network=host so endpoints like *.localhost.localstack.cloud resolve to the
+# host's loopback (where LocalStack is listening), not the container's.
+docker run -it \
+	--rm \
+	--network=host \
+	-e PORT=$PORT \
+	-e COSMOSDB_CONNECTION_STRING="$COSMOSDB_CONNECTION_STRING" \
+	-e COSMOSDB_DATABASE_NAME="$COSMOSDB_DATABASE_NAME" \
+	-e COSMOSDB_COLLECTION_NAME="$COSMOSDB_COLLECTION_NAME" \
+	-e LOGIN_NAME="$LOGIN_NAME" \
+	--name "$IMAGE_NAME" \
+	"$IMAGE_NAME:$IMAGE_TAG"
diff --git a/samples/web-app-cosmosdb-mongodb-api/dotnet/scripts/04-push-docker-image.sh b/samples/web-app-cosmosdb-mongodb-api/dotnet/scripts/04-push-docker-image.sh
new file mode 100755
index 0000000..a1b7518
--- /dev/null
+++ b/samples/web-app-cosmosdb-mongodb-api/dotnet/scripts/04-push-docker-image.sh
@@ -0,0 +1,40 @@
+#!/bin/bash
+
+# Variables
+source ./00-variables.sh
+
+# Login to ACR
+echo "Logging into Azure Container Registry [$ACR_NAME]..."
+az acr login --name $ACR_NAME
+
+# Retrieve ACR login server. Each container image needs to be tagged with the loginServer name of the registry.
+ACR_LOGIN_SERVER=$(az acr show --name $ACR_NAME --query loginServer --output tsv)
+
+if [ $? -eq 0 ]; then
+	echo "Logged into Azure Container Registry [$ACR_NAME] successfully."
+else
+	echo "Failed to log into Azure Container Registry [$ACR_NAME]."
+	exit 1
+fi
+
+FULL_IMAGE="${ACR_LOGIN_SERVER}/${IMAGE_NAME}:${IMAGE_TAG}"
+
+# Tag the local image with the loginServer of ACR
+docker tag ${IMAGE_NAME,,}:$IMAGE_TAG $ACR_LOGIN_SERVER/${IMAGE_NAME,,}:$IMAGE_TAG
+
+if [ $? -eq 0 ]; then
+	echo "Docker image [$IMAGE_NAME] tagged as [$FULL_IMAGE] successfully."
+else
+	echo "Failed to tag Docker image [$IMAGE_NAME] as [$FULL_IMAGE]."
+	exit 1
+fi
+
+# Push the container image to ACR
+docker push $ACR_LOGIN_SERVER/${IMAGE_NAME,,}:$IMAGE_TAG
+
+if [ $? -eq 0 ]; then
+	echo "Docker image [$FULL_IMAGE] pushed to ACR successfully."
+else
+	echo "Failed to push Docker image [$FULL_IMAGE] to ACR."
+	exit 1
+fi
diff --git a/samples/web-app-cosmosdb-mongodb-api/dotnet/scripts/05-deploy-app.sh b/samples/web-app-cosmosdb-mongodb-api/dotnet/scripts/05-deploy-app.sh
new file mode 100755
index 0000000..1efe50a
--- /dev/null
+++ b/samples/web-app-cosmosdb-mongodb-api/dotnet/scripts/05-deploy-app.sh
@@ -0,0 +1,89 @@
+#!/bin/bash
+
+# Variables
+source ./00-variables.sh
+
+# Retrieve the Cosmos DB MongoDB connection string
+echo "Retrieving Cosmos DB connection string for [$COSMOSDB_ACCOUNT_NAME]..."
+COSMOSDB_CONNECTION_STRING=$(az cosmosdb keys list \
+	--name "$COSMOSDB_ACCOUNT_NAME" \
+	--resource-group "$RESOURCE_GROUP_NAME" \
+	--type connection-strings \
+	--query "connectionStrings[0].connectionString" \
+	--output tsv)
+
+if [ -n "$COSMOSDB_CONNECTION_STRING" ]; then
+	echo "Cosmos DB connection string retrieved successfully."
+else
+	echo "Failed to retrieve Cosmos DB connection string."
+	exit 1
+fi
+
+# Generate a stable SECRET_KEY shared by all replicas: the app derives its Data Protection key ring from it,
+# so antiforgery tokens and flash messages are valid on every replica and survive pod restarts
+SECRET_KEY=$(openssl rand -hex 32)
+
+# Get the login server for the Azure Container Registry
+echo "Getting login server for Azure Container Registry [$ACR_NAME]..."
+ACR_LOGIN_SERVER=$(az acr show \
+	--name "$ACR_NAME" \
+	--resource-group "$RESOURCE_GROUP_NAME" \
+	--query "loginServer" \
+	--output tsv \
+	--only-show-errors)
+
+if [ -n "$ACR_LOGIN_SERVER" ]; then
+	echo "Login server retrieved successfully: $ACR_LOGIN_SERVER"
+else
+	echo "Failed to retrieve login server for Azure Container Registry [$ACR_NAME]."
+	exit 1
+fi
+
+# Create full image name with login server, image name, and tag
+FULL_IMAGE="${ACR_LOGIN_SERVER}/${IMAGE_NAME}:${IMAGE_TAG}"
+
+# Create namespace
+cat namespace.yml |
+yq "(.metadata.name)|="\""$NAMESPACE"\" |
+kubectl apply -f -
+
+# Create secret with the Cosmos DB connection string and SECRET_KEY
+cat secret.yml |
+yq "(.metadata.namespace)|="\""$NAMESPACE"\" |
+yq "(.data.COSMOSDB_CONNECTION_STRING)|="\""$(echo -n $COSMOSDB_CONNECTION_STRING | base64 -w0)"\" |
+yq "(.data.SECRET_KEY)|="\""$(echo -n $SECRET_KEY | base64 -w0)"\" |
+kubectl apply -f -
+
+# Create configmap with environment variables
+cat configmap.yml |
+yq "(.metadata.namespace)|="\""$NAMESPACE"\" |
+yq "(.data.COSMOSDB_DATABASE_NAME)|="\""$COSMOSDB_DATABASE_NAME"\" |
+yq "(.data.COSMOSDB_COLLECTION_NAME)|="\""$COSMOSDB_COLLECTION_NAME"\" |
+yq "(.data.LOGIN_NAME)|="\""$LOGIN_NAME"\" |
+kubectl apply -f -
+
+# Create deployment
+cat deployment.yml |
+yq "(.metadata.namespace)|="\""$NAMESPACE"\" |
+yq "(.spec.template.spec.containers[0].image)|="\""$FULL_IMAGE"\" |
+yq "(.spec.template.spec.containers[0].imagePullPolicy)|="\""$IMAGE_PULL_POLICY"\" |
+yq "(.spec.template.spec.containers[0].ports[0].containerPort)|=$PORT" |
+kubectl apply -f -
+
+# Create service
+cat service.yml |
+yq "(.metadata.namespace)|="\""$NAMESPACE"\" |
+kubectl apply -f -
+
+# Wait for the rollout so a pod stuck in ImagePullBackOff or CrashLoopBackOff is reported here, not discovered later
+echo "Waiting for deployment [$DEPLOYMENT_NAME] to roll out..."
+if kubectl rollout status deployment/$DEPLOYMENT_NAME -n $NAMESPACE --timeout=600s; then
+	echo "Deployment [$DEPLOYMENT_NAME] is ready. To reach the web app, run:"
+	echo "  kubectl port-forward service/$SERVICE_NAME 8080:80 -n $NAMESPACE"
+	echo "and browse to http://localhost:8080 (health: http://localhost:8080/health)."
+else
+	echo "Deployment [$DEPLOYMENT_NAME] did not become ready. Inspect it with:"
+	echo "  kubectl get pods -n $NAMESPACE"
+	echo "  kubectl describe pod -n $NAMESPACE --selector app=$DEPLOYMENT_NAME"
+	exit 1
+fi
diff --git a/samples/web-app-cosmosdb-mongodb-api/dotnet/scripts/Dockerfile b/samples/web-app-cosmosdb-mongodb-api/dotnet/scripts/Dockerfile
new file mode 100644
index 0000000..d862da7
--- /dev/null
+++ b/samples/web-app-cosmosdb-mongodb-api/dotnet/scripts/Dockerfile
@@ -0,0 +1,28 @@
+# Build stage: restore and publish the ASP.NET Core app with the .NET SDK image.
+FROM mcr.microsoft.com/dotnet/sdk:10.0 AS build
+
+WORKDIR /src
+
+# Restore first so the package cache layer is reused when only sources change.
+COPY VacationPlanner.csproj ./
+RUN dotnet restore
+
+COPY . ./
+RUN dotnet publish -c Release -o /app/publish --no-restore
+
+# Runtime stage: the ASP.NET Core runtime image only, no SDK.
+FROM mcr.microsoft.com/dotnet/aspnet:10.0
+
+# Port Kestrel listens on; kept as a build argument (and a runtime variable) as in the Python image.
+ARG PORT=8080
+ENV PORT=${PORT}
+
+WORKDIR /app
+COPY --from=build /app/publish ./
+
+# Run as the runtime image's non-root `app` user, as the Python image runs as its own unprivileged `app` user.
+USER app
+
+EXPOSE ${PORT}
+
+ENTRYPOINT ["dotnet", "VacationPlanner.dll"]
diff --git a/samples/web-app-cosmosdb-mongodb-api/dotnet/scripts/configmap.yml b/samples/web-app-cosmosdb-mongodb-api/dotnet/scripts/configmap.yml
new file mode 100644
index 0000000..ffa2b15
--- /dev/null
+++ b/samples/web-app-cosmosdb-mongodb-api/dotnet/scripts/configmap.yml
@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: vacation-planner-mongodb-config
+  namespace: vacation-planner-mongodb
+  labels:
+    app: vacation-planner-mongodb
+data:
+  COSMOSDB_DATABASE_NAME: "sampledb"
+  COSMOSDB_COLLECTION_NAME: "activities"
+  LOGIN_NAME: "paolo"
diff --git a/samples/web-app-cosmosdb-mongodb-api/dotnet/scripts/deployment.yml b/samples/web-app-cosmosdb-mongodb-api/dotnet/scripts/deployment.yml
new file mode 100644
index 0000000..7d6f788
--- /dev/null
+++ b/samples/web-app-cosmosdb-mongodb-api/dotnet/scripts/deployment.yml
@@ -0,0 +1,81 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: vacation-planner-mongodb
+  namespace: vacation-planner-mongodb
+  labels:
+    app: vacation-planner-mongodb
+spec:
+  replicas: 3
+  selector:
+    matchLabels:
+      app: vacation-planner-mongodb
+  strategy:
+    rollingUpdate:
+      maxSurge: 1
+      maxUnavailable: 0
+    type: RollingUpdate
+  minReadySeconds: 5
+  template:
+    metadata:
+      labels:
+        app: vacation-planner-mongodb
+    spec:
+      nodeSelector:
+        kubernetes.io/os: linux
+      containers:
+        - name: vacation-planner-mongodb
+          image: <your-registry>.azurecr.io/vacation-planner-mongodb-dotnet:v1
+          imagePullPolicy: Always
+          ports:
+            - name: http
+              containerPort: 8080
+          env:
+            - name: COSMOSDB_DATABASE_NAME
+              valueFrom:
+                configMapKeyRef:
+                  name: vacation-planner-mongodb-config
+                  key: COSMOSDB_DATABASE_NAME
+            - name: COSMOSDB_COLLECTION_NAME
+              valueFrom:
+                configMapKeyRef:
+                  name: vacation-planner-mongodb-config
+                  key: COSMOSDB_COLLECTION_NAME
+            - name: LOGIN_NAME
+              valueFrom:
+                configMapKeyRef:
+                  name: vacation-planner-mongodb-config
+                  key: LOGIN_NAME
+            - name: COSMOSDB_CONNECTION_STRING
+              valueFrom:
+                secretKeyRef:
+                  name: vacation-planner-mongodb-secrets
+                  key: COSMOSDB_CONNECTION_STRING
+            - name: SECRET_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: vacation-planner-mongodb-secrets
+                  key: SECRET_KEY
+          resources:
+            requests:
+              cpu: "100m"
+              memory: "128Mi"
+            limits:
+              cpu: "500m"
+              memory: "256Mi"
+          livenessProbe:
+            httpGet:
+              path: /health
+              port: http
+            initialDelaySeconds: 15
+            periodSeconds: 30
+            timeoutSeconds: 5
+            failureThreshold: 3
+          readinessProbe:
+            httpGet:
+              path: /health
+              port: http
+            initialDelaySeconds: 5
+            periodSeconds: 10
+            timeoutSeconds: 3
+            failureThreshold: 3
diff --git a/samples/web-app-cosmosdb-mongodb-api/dotnet/scripts/namespace.yml b/samples/web-app-cosmosdb-mongodb-api/dotnet/scripts/namespace.yml
new file mode 100644
index 0000000..86d5f20
--- /dev/null
+++ b/samples/web-app-cosmosdb-mongodb-api/dotnet/scripts/namespace.yml
@@ -0,0 +1,4 @@
+kind: Namespace
+apiVersion: v1
+metadata:
+  name: vacation-planner-mongodb
diff --git a/samples/web-app-cosmosdb-mongodb-api/dotnet/scripts/secret.yml b/samples/web-app-cosmosdb-mongodb-api/dotnet/scripts/secret.yml
new file mode 100644
index 0000000..19103cd
--- /dev/null
+++ b/samples/web-app-cosmosdb-mongodb-api/dotnet/scripts/secret.yml
@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: vacation-planner-mongodb-secrets
+  namespace: vacation-planner-mongodb
+  labels:
+    app: vacation-planner-mongodb
+type: Opaque
+data:
+  COSMOSDB_CONNECTION_STRING: ""
+  SECRET_KEY: ""
diff --git a/samples/web-app-cosmosdb-mongodb-api/dotnet/scripts/service.yml b/samples/web-app-cosmosdb-mongodb-api/dotnet/scripts/service.yml
new file mode 100644
index 0000000..d08ef11
--- /dev/null
+++ b/samples/web-app-cosmosdb-mongodb-api/dotnet/scripts/service.yml
@@ -0,0 +1,16 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: vacation-planner-mongodb
+  namespace: vacation-planner-mongodb
+  labels:
+    app: vacation-planner-mongodb
+spec:
+  type: ClusterIP
+  selector:
+    app: vacation-planner-mongodb
+  ports:
+    - name: http
+      protocol: TCP
+      port: 80
+      targetPort: http
diff --git a/samples/web-app-cosmosdb-mongodb-api/dotnet/src/.dockerignore b/samples/web-app-cosmosdb-mongodb-api/dotnet/src/.dockerignore
new file mode 100644
index 0000000..cd42ee3
--- /dev/null
+++ b/samples/web-app-cosmosdb-mongodb-api/dotnet/src/.dockerignore
@@ -0,0 +1,2 @@
+bin/
+obj/
diff --git a/samples/web-app-cosmosdb-mongodb-api/dotnet/src/Models/Activity.cs b/samples/web-app-cosmosdb-mongodb-api/dotnet/src/Models/Activity.cs
new file mode 100644
index 0000000..c39b073
--- /dev/null
+++ b/samples/web-app-cosmosdb-mongodb-api/dotnet/src/Models/Activity.cs
@@ -0,0 +1,4 @@
+namespace VacationPlanner.Models;
+
+/// <summary>A planned vacation activity: the store's identifier plus the free-text description.</summary>
+public sealed record Activity(string Id, string Text);
diff --git a/samples/web-app-cosmosdb-mongodb-api/dotnet/src/Pages/Delete.cshtml b/samples/web-app-cosmosdb-mongodb-api/dotnet/src/Pages/Delete.cshtml
new file mode 100644
index 0000000..386fa85
--- /dev/null
+++ b/samples/web-app-cosmosdb-mongodb-api/dotnet/src/Pages/Delete.cshtml
@@ -0,0 +1,2 @@
+@page "/delete/{id}"
+@model DeleteModel
diff --git a/samples/web-app-cosmosdb-mongodb-api/dotnet/src/Pages/Delete.cshtml.cs b/samples/web-app-cosmosdb-mongodb-api/dotnet/src/Pages/Delete.cshtml.cs
new file mode 100644
index 0000000..88cfe41
--- /dev/null
+++ b/samples/web-app-cosmosdb-mongodb-api/dotnet/src/Pages/Delete.cshtml.cs
@@ -0,0 +1,21 @@
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Mvc.RazorPages;
+using VacationPlanner.Services;
+
+namespace VacationPlanner.Pages;
+
+/// <summary>Handles <c>POST /delete/{id}</c>; the activity is addressed by its store id, never by its position in the list.</summary>
+public class DeleteModel(IActivityStore store) : PageModel
+{
+    public IActionResult OnGet() => RedirectToPage("/Index");
+
+    public async Task<IActionResult> OnPostAsync(string id, CancellationToken cancellationToken)
+    {
+        if (!string.IsNullOrWhiteSpace(id) && await store.DeleteAsync(id, cancellationToken))
+        {
+            TempData["Flash"] = "Activity deleted.";
+        }
+
+        return RedirectToPage("/Index");
+    }
+}
diff --git a/samples/web-app-cosmosdb-mongodb-api/dotnet/src/Pages/Index.cshtml b/samples/web-app-cosmosdb-mongodb-api/dotnet/src/Pages/Index.cshtml
new file mode 100644
index 0000000..bd617e2
--- /dev/null
+++ b/samples/web-app-cosmosdb-mongodb-api/dotnet/src/Pages/Index.cshtml
@@ -0,0 +1,265 @@
+@page
+@model IndexModel
+<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8" />
+  <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+  <title>Vacation Planner</title>
+  <link rel="preconnect" href="https://fonts.googleapis.com" />
+  <link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700&display=swap" rel="stylesheet" />
+  <link rel="stylesheet" href="~/style.css" />
+  <link rel="icon" type="image/x-icon" href="~/favicon.ico" />
+  <script>
+    (function () {
+      try {
+        var dark = localStorage.getItem('vp_dark');
+        if (dark === 'true' || (dark === null && window.matchMedia('(prefers-color-scheme: dark)').matches)) {
+          document.documentElement.dataset.theme = 'dark';
+        }
+      } catch (_) {}
+    })();
+  </script>
+</head>
+<body>
+
+<!-- Header -->
+<header>
+  <div class="header-left">
+    <h1>&#127796; Vacation Planner</h1>
+    <p id="count-label">@Model.Activities.Count activit@(Model.Activities.Count != 1 ? "ies" : "y") planned</p>
+  </div>
+  <div class="header-right">
+    <button id="btn-dark-mode" aria-label="Toggle dark mode" title="Toggle dark mode">
+      <svg id="icon-dark" width="18" height="18" fill="none" stroke="currentColor" stroke-width="2" viewBox="0 0 24 24">
+        <path d="M21 12.79A9 9 0 1111.21 3a7 7 0 009.79 9.79z"/>
+      </svg>
+      <svg id="icon-light" width="18" height="18" fill="none" stroke="currentColor" stroke-width="2" viewBox="0 0 24 24" style="display:none">
+        <circle cx="12" cy="12" r="5"/>
+        <line x1="12" y1="1" x2="12" y2="3"/><line x1="12" y1="21" x2="12" y2="23"/>
+        <line x1="4.22" y1="4.22" x2="5.64" y2="5.64"/><line x1="18.36" y1="18.36" x2="19.78" y2="19.78"/>
+        <line x1="1" y1="12" x2="3" y2="12"/><line x1="21" y1="12" x2="23" y2="12"/>
+        <line x1="4.22" y1="19.78" x2="5.64" y2="18.36"/><line x1="18.36" y1="5.64" x2="19.78" y2="4.22"/>
+      </svg>
+    </button>
+    <button id="btn-add">
+      <svg width="16" height="16" fill="none" stroke="currentColor" stroke-width="2.5" viewBox="0 0 24 24"><line x1="12" y1="5" x2="12" y2="19"/><line x1="5" y1="12" x2="19" y2="12"/></svg>
+      Add Activity
+    </button>
+  </div>
+</header>
+
+<!-- Activity Table -->
+<div class="content">
+  <table id="activity-table">
+    <thead>
+      <tr>
+        <th>Activity</th>
+        <th class="col-actions" colspan="2">Actions</th>
+      </tr>
+    </thead>
+    <tbody>
+      @foreach (var activity in Model.Activities)
+      {
+      <tr data-id="@activity.Id" data-activity="@activity.Text">
+        <td>@activity.Text</td>
+        <td class="col-btn">
+          <button class="btn-edit" title="Edit activity" aria-label="Edit @activity.Text">
+            <svg width="14" height="14" fill="none" stroke="currentColor" stroke-width="2" viewBox="0 0 24 24">
+              <path d="M11 4H4a2 2 0 00-2 2v14a2 2 0 002 2h14a2 2 0 002-2v-7"/>
+              <path d="M18.5 2.5a2.121 2.121 0 013 3L12 15l-4 1 1-4 9.5-9.5z"/>
+            </svg>
+            Edit
+          </button>
+        </td>
+        <td class="col-btn">
+          <form method="post" asp-page="/Delete" asp-route-id="@activity.Id" class="delete-form">
+            <button type="button" class="btn-delete" title="Delete activity" aria-label="Delete @activity.Text">
+              <svg width="14" height="14" fill="none" stroke="currentColor" stroke-width="2" viewBox="0 0 24 24">
+                <polyline points="3 6 5 6 21 6"/><path d="M19 6l-1 14a2 2 0 01-2 2H8a2 2 0 01-2-2L5 6"/>
+                <path d="M10 11v6"/><path d="M14 11v6"/><path d="M9 6V4h6v2"/>
+              </svg>
+              Delete
+            </button>
+          </form>
+        </td>
+      </tr>
+      }
+      @if (Model.Activities.Count == 0)
+      {
+      <tr id="empty-row">
+        <td colspan="3" class="empty-cell">No vacation plans yet — add your first activity!</td>
+      </tr>
+      }
+    </tbody>
+  </table>
+</div>
+
+<!-- Add / Edit Activity Modal -->
+<div id="overlay">
+  <div class="modal" role="dialog" aria-modal="true" aria-labelledby="modal-title">
+    <div class="modal-header">
+      <h2 id="modal-title">&#127796; Add Activity</h2>
+      <button id="btn-close-modal" aria-label="Close">&times;</button>
+    </div>
+    <form id="activity-form" method="post" asp-page="/Index" novalidate>
+      <input type="hidden" id="f-row-id" name="row_id" value="" />
+      <div class="field">
+        <label for="f-activity">Activity <span style="color:#ef4444">*</span></label>
+        <input id="f-activity" name="activity" type="text" placeholder="e.g. Snorkelling at Coral Bay" required />
+      </div>
+    </form>
+    <div class="modal-actions">
+      <button class="btn-secondary" id="btn-cancel">Cancel</button>
+      <button class="btn-primary" id="btn-save">Save Activity</button>
+    </div>
+  </div>
+</div>
+
+<!-- Delete Confirmation Modal -->
+<div id="delete-overlay">
+  <div class="modal" role="dialog" aria-modal="true" aria-labelledby="delete-modal-title">
+    <div class="modal-header">
+      <h2 id="delete-modal-title">&#127796; Delete Activity</h2>
+      <button id="btn-close-delete-modal" aria-label="Close">&times;</button>
+    </div>
+    <div class="modal-body">
+      <p id="delete-confirm-msg">Are you sure you want to delete this activity?</p>
+    </div>
+    <div class="modal-actions">
+      <button class="btn-secondary" id="btn-cancel-delete">Cancel</button>
+      <button class="btn-primary" id="btn-confirm-delete">Delete</button>
+    </div>
+  </div>
+</div>
+
+<!-- Toast -->
+<div id="toast"></div>
+
+<script>
+  // ── Dark mode ────────────────────────────────────────────
+  function applyDark(dark) {
+    document.documentElement.dataset.theme = dark ? 'dark' : '';
+    document.getElementById('icon-dark').style.display  = dark ? 'none' : '';
+    document.getElementById('icon-light').style.display = dark ? ''     : 'none';
+  }
+  (function () {
+    var dark = localStorage.getItem('vp_dark');
+    var isDark = dark === 'true' || (dark === null && window.matchMedia('(prefers-color-scheme: dark)').matches);
+    applyDark(isDark);
+  })();
+  document.getElementById('btn-dark-mode').addEventListener('click', function () {
+    var isDark = document.documentElement.dataset.theme === 'dark';
+    applyDark(!isDark);
+    localStorage.setItem('vp_dark', String(!isDark));
+  });
+
+  // ── Toast ────────────────────────────────────────────────
+  var flashMessages = @Json.Serialize(Model.Flashes);
+  var toastTimer;
+  function showToast(msg) {
+    var el = document.getElementById('toast');
+    el.textContent = msg;
+    el.classList.add('show');
+    clearTimeout(toastTimer);
+    toastTimer = setTimeout(function () { el.classList.remove('show'); }, 2400);
+  }
+  if (flashMessages.length) showToast(flashMessages[0]);
+
+  // ── Activity Modal ───────────────────────────────────────
+  var overlay = document.getElementById('overlay');
+
+  function openActivityModal(data) {
+    var titleEl = document.getElementById('modal-title');
+    var saveEl  = document.getElementById('btn-save');
+    var rowId   = document.getElementById('f-row-id');
+    var input   = document.getElementById('f-activity');
+
+    if (data) {
+      titleEl.textContent = '🌴 Edit Activity';
+      saveEl.textContent  = 'Save Changes';
+      rowId.value         = data.id;
+      input.value         = data.activity;
+    } else {
+      titleEl.textContent = '🌴 Add Activity';
+      saveEl.textContent  = 'Save Activity';
+      rowId.value         = '';
+      input.value         = '';
+    }
+    overlay.classList.add('open');
+    input.focus();
+    var len = input.value.length;
+    input.setSelectionRange(len, len);
+  }
+
+  function closeActivityModal() {
+    overlay.classList.remove('open');
+    document.getElementById('activity-form').reset();
+    document.getElementById('f-row-id').value = '';
+    document.getElementById('modal-title').textContent = '🌴 Add Activity';
+    document.getElementById('btn-save').textContent    = 'Save Activity';
+  }
+
+  document.getElementById('btn-add').addEventListener('click', function () { openActivityModal(null); });
+  document.getElementById('btn-close-modal').addEventListener('click', closeActivityModal);
+  document.getElementById('btn-cancel').addEventListener('click', closeActivityModal);
+  overlay.addEventListener('click', function (e) { if (e.target === overlay) closeActivityModal(); });
+
+  document.getElementById('btn-save').addEventListener('click', function () {
+    var val = document.getElementById('f-activity').value.trim();
+    if (!val) { showToast('Activity cannot be empty.'); return; }
+    document.getElementById('activity-form').submit();
+  });
+
+  document.getElementById('f-activity').addEventListener('keydown', function (e) {
+    if (e.key === 'Enter') { e.preventDefault(); document.getElementById('btn-save').click(); }
+  });
+
+  // Edit buttons on rows
+  document.querySelectorAll('.btn-edit').forEach(function (btn) {
+    btn.addEventListener('click', function () {
+      var row = btn.closest('tr');
+      openActivityModal({ id: row.dataset.id, activity: row.dataset.activity });
+    });
+  });
+
+  // ── Delete confirmation modal ────────────────────────────
+  var deleteOverlay = document.getElementById('delete-overlay');
+  var pendingDeleteForm = null;
+
+  function openDeleteModal(form, activityName) {
+    pendingDeleteForm = form;
+    var msg = document.getElementById('delete-confirm-msg');
+    msg.textContent = 'Are you sure you want to delete "' + activityName + '"?';
+    deleteOverlay.classList.add('open');
+    document.getElementById('btn-confirm-delete').focus();
+  }
+
+  function closeDeleteModal() {
+    deleteOverlay.classList.remove('open');
+    pendingDeleteForm = null;
+  }
+
+  document.querySelectorAll('.btn-delete').forEach(function (btn) {
+    btn.addEventListener('click', function () {
+      var row = btn.closest('tr');
+      var form = btn.closest('form');
+      openDeleteModal(form, row.dataset.activity);
+    });
+  });
+
+  document.getElementById('btn-confirm-delete').addEventListener('click', function () {
+    if (pendingDeleteForm) pendingDeleteForm.submit();
+  });
+
+  document.getElementById('btn-cancel-delete').addEventListener('click', closeDeleteModal);
+  document.getElementById('btn-close-delete-modal').addEventListener('click', closeDeleteModal);
+  deleteOverlay.addEventListener('click', function (e) { if (e.target === deleteOverlay) closeDeleteModal(); });
+
+  // ── Escape closes any open modal ─────────────────────────
+  document.addEventListener('keydown', function (e) {
+    if (e.key === 'Escape') { closeActivityModal(); closeDeleteModal(); }
+  });
+</script>
+</body>
+</html>
diff --git a/samples/web-app-cosmosdb-mongodb-api/dotnet/src/Pages/Index.cshtml.cs b/samples/web-app-cosmosdb-mongodb-api/dotnet/src/Pages/Index.cshtml.cs
new file mode 100644
index 0000000..ca4aa73
--- /dev/null
+++ b/samples/web-app-cosmosdb-mongodb-api/dotnet/src/Pages/Index.cshtml.cs
@@ -0,0 +1,47 @@
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Mvc.RazorPages;
+using VacationPlanner.Models;
+using VacationPlanner.Services;
+
+namespace VacationPlanner.Pages;
+
+public class IndexModel(IActivityStore store) : PageModel
+{
+    public IReadOnlyList<Activity> Activities { get; private set; } = [];
+
+    /// <summary>Flash messages set by the previous request (the equivalent of Flask's <c>flash()</c>).</summary>
+    public IReadOnlyList<string> Flashes => TempData["Flash"] is string message ? [message] : [];
+
+    [BindProperty(Name = "activity")]
+    public string? Activity { get; set; }
+
+    [BindProperty(Name = "row_id")]
+    public string? RowId { get; set; }
+
+    public async Task OnGetAsync(CancellationToken cancellationToken)
+    {
+        Activities = await store.ListAsync(cancellationToken);
+    }
+
+    public async Task<IActionResult> OnPostAsync(CancellationToken cancellationToken)
+    {
+        var text = Activity?.Trim();
+        var id = RowId?.Trim();
+        if (!string.IsNullOrEmpty(text))
+        {
+            if (!string.IsNullOrEmpty(id))
+            {
+                if (await store.UpdateAsync(id, text, cancellationToken))
+                {
+                    TempData["Flash"] = "Activity updated!";
+                }
+            }
+            else if (await store.AddAsync(text, cancellationToken))
+            {
+                TempData["Flash"] = "Activity added!";
+            }
+        }
+
+        return RedirectToPage();
+    }
+}
diff --git a/samples/web-app-cosmosdb-mongodb-api/dotnet/src/Pages/_ViewImports.cshtml b/samples/web-app-cosmosdb-mongodb-api/dotnet/src/Pages/_ViewImports.cshtml
new file mode 100644
index 0000000..ec62511
--- /dev/null
+++ b/samples/web-app-cosmosdb-mongodb-api/dotnet/src/Pages/_ViewImports.cshtml
@@ -0,0 +1,4 @@
+@using VacationPlanner
+@using VacationPlanner.Models
+@namespace VacationPlanner.Pages
+@addTagHelper *, Microsoft.AspNetCore.Mvc.TagHelpers
diff --git a/samples/web-app-cosmosdb-mongodb-api/dotnet/src/Program.cs b/samples/web-app-cosmosdb-mongodb-api/dotnet/src/Program.cs
new file mode 100644
index 0000000..b3f0e5d
--- /dev/null
+++ b/samples/web-app-cosmosdb-mongodb-api/dotnet/src/Program.cs
@@ -0,0 +1,48 @@
+using Microsoft.AspNetCore.DataProtection;
+using Microsoft.AspNetCore.DataProtection.KeyManagement;
+using VacationPlanner.Services;
+
+var builder = WebApplication.CreateBuilder(args);
+
+// Listen on PORT (8080 by default), the way the Python image binds gunicorn to 0.0.0.0:${PORT}. HTTP_PORTS is the
+// same setting the aspnet base image feeds through ASPNETCORE_HTTP_PORTS, so no URL override is involved.
+if (Environment.GetEnvironmentVariable("PORT") is { Length: > 0 } port)
+{
+    builder.WebHost.UseSetting(WebHostDefaults.HttpPortsKey, port);
+}
+
+// Read and validate the configuration up front so a misconfigured deployment fails at startup.
+var storeOptions = MongoOptions.FromEnvironment();
+
+// SECRET_KEY is the Kubernetes Secret the Python sample signs its session cookie with. Deriving the Data Protection
+// key ring from it lets all replicas validate each other's antiforgery tokens and flash cookies; without it (a local
+// docker run) each process keeps its own keys.
+var secretKey = Environment.GetEnvironmentVariable("SECRET_KEY");
+if (!string.IsNullOrEmpty(secretKey))
+{
+    builder.Services.AddDataProtection().DisableAutomaticKeyGeneration();
+    builder.Services.Configure<KeyManagementOptions>(options => options.XmlRepository = new SecretKeyXmlRepository(secretKey));
+}
+
+builder.Services.AddRazorPages();
+builder.Services.AddSingleton<IActivityStore>(sp =>
+    new MongoActivityStore(storeOptions, sp.GetRequiredService<ILogger<MongoActivityStore>>()));
+builder.Services.AddHostedService(sp =>
+    new StoreInitializer(sp.GetRequiredService<IActivityStore>(), sp.GetRequiredService<ILogger<StoreInitializer>>()));
+
+var app = builder.Build();
+
+if (string.IsNullOrEmpty(secretKey))
+{
+    app.Logger.LogWarning("SECRET_KEY is not set: antiforgery tokens and flash messages are only valid on this replica.");
+}
+
+app.UseStaticFiles();
+app.MapRazorPages();
+
+app.MapGet("/health", async (IActivityStore store, CancellationToken cancellationToken) =>
+    await store.IsHealthyAsync(cancellationToken)
+        ? Results.Json(new { status = "ok" })
+        : Results.Json(new { status = "unavailable" }, statusCode: StatusCodes.Status503ServiceUnavailable));
+
+app.Run();
diff --git a/samples/web-app-cosmosdb-mongodb-api/dotnet/src/Services/ActivityId.cs b/samples/web-app-cosmosdb-mongodb-api/dotnet/src/Services/ActivityId.cs
new file mode 100644
index 0000000..8654aaf
--- /dev/null
+++ b/samples/web-app-cosmosdb-mongodb-api/dotnet/src/Services/ActivityId.cs
@@ -0,0 +1,15 @@
+using System.Security.Cryptography;
+using System.Text;
+
+namespace VacationPlanner.Services;
+
+/// <summary>MD5 of username + activity + timestamp: the id scheme shared by the Vacation Planner samples.</summary>
+public static class ActivityId
+{
+    public static string Create(string username, string activity)
+    {
+        var timestamp = DateTime.Now.ToString("yyyy-MM-ddTHH:mm:ss.ffffff");
+        var hash = MD5.HashData(Encoding.UTF8.GetBytes($"{username}_{activity}_{timestamp}"));
+        return Convert.ToHexStringLower(hash);
+    }
+}
diff --git a/samples/web-app-cosmosdb-mongodb-api/dotnet/src/Services/IActivityStore.cs b/samples/web-app-cosmosdb-mongodb-api/dotnet/src/Services/IActivityStore.cs
new file mode 100644
index 0000000..167993e
--- /dev/null
+++ b/samples/web-app-cosmosdb-mongodb-api/dotnet/src/Services/IActivityStore.cs
@@ -0,0 +1,24 @@
+using VacationPlanner.Models;
+
+namespace VacationPlanner.Services;
+
+/// <summary>Persistence for the planner's activities. Every call goes to the backing store; nothing is cached in-process.</summary>
+public interface IActivityStore
+{
+    /// <summary>Creates whatever the store needs (container, table, collection, directory) before the first request.</summary>
+    Task InitializeAsync(CancellationToken cancellationToken);
+
+    Task<IReadOnlyList<Activity>> ListAsync(CancellationToken cancellationToken);
+
+    /// <summary>Adds an activity and returns whether the store confirmed the write; the page flashes only then.</summary>
+    Task<bool> AddAsync(string text, CancellationToken cancellationToken);
+
+    /// <summary>Updates an activity and returns whether the store reported a change, with the meaning the Python sample's driver gives it.</summary>
+    Task<bool> UpdateAsync(string id, string text, CancellationToken cancellationToken);
+
+    /// <summary>Deletes an activity by its store id and returns whether the store reported a deletion.</summary>
+    Task<bool> DeleteAsync(string id, CancellationToken cancellationToken);
+
+    /// <summary>Cheap connectivity probe used by <c>GET /health</c>.</summary>
+    Task<bool> IsHealthyAsync(CancellationToken cancellationToken);
+}
diff --git a/samples/web-app-cosmosdb-mongodb-api/dotnet/src/Services/MongoActivityStore.cs b/samples/web-app-cosmosdb-mongodb-api/dotnet/src/Services/MongoActivityStore.cs
new file mode 100644
index 0000000..695f249
--- /dev/null
+++ b/samples/web-app-cosmosdb-mongodb-api/dotnet/src/Services/MongoActivityStore.cs
@@ -0,0 +1,98 @@
+using MongoDB.Bson;
+using MongoDB.Driver;
+using VacationPlanner.Models;
+
+namespace VacationPlanner.Services;
+
+/// <summary>Activities as documents <c>{_id, username, activity, timestamp}</c> in an Azure Cosmos DB for MongoDB collection.</summary>
+public sealed class MongoActivityStore : IActivityStore
+{
+    private readonly IMongoDatabase _database;
+    private readonly IMongoCollection<BsonDocument> _collection;
+    private readonly MongoOptions _options;
+    private readonly ILogger<MongoActivityStore> _logger;
+
+    public MongoActivityStore(MongoOptions options, ILogger<MongoActivityStore> logger)
+    {
+        _options = options;
+        _logger = logger;
+        var client = new MongoClient(options.ConnectionString);
+        _database = client.GetDatabase(options.DatabaseName);
+        _collection = _database.GetCollection<BsonDocument>(options.CollectionName);
+    }
+
+    public async Task InitializeAsync(CancellationToken cancellationToken)
+    {
+        var existing = await (await _database.ListCollectionNamesAsync(cancellationToken: cancellationToken)).ToListAsync(cancellationToken);
+        if (existing.Contains(_options.CollectionName))
+        {
+            _logger.LogInformation("Collection '{Collection}' already exists in database '{Database}'", _options.CollectionName, _options.DatabaseName);
+            return;
+        }
+
+        await _database.CreateCollectionAsync(_options.CollectionName, cancellationToken: cancellationToken);
+        var keys = Builders<BsonDocument>.IndexKeys;
+        await _collection.Indexes.CreateManyAsync(
+        [
+            new CreateIndexModel<BsonDocument>(keys.Ascending("username")),
+            new CreateIndexModel<BsonDocument>(keys.Ascending("activity")),
+            new CreateIndexModel<BsonDocument>(keys.Ascending("timestamp")),
+        ], cancellationToken);
+        _logger.LogInformation("Created collection '{Collection}' in database '{Database}'", _options.CollectionName, _options.DatabaseName);
+    }
+
+    public async Task<IReadOnlyList<Activity>> ListAsync(CancellationToken cancellationToken)
+    {
+        var filter = Builders<BsonDocument>.Filter.Eq("username", _options.Username);
+        var documents = await _collection.Find(filter).ToListAsync(cancellationToken);
+        return documents.Select(d => new Activity(d["_id"].AsString, d["activity"].AsString)).ToList();
+    }
+
+    public async Task<bool> AddAsync(string text, CancellationToken cancellationToken)
+    {
+        var document = new BsonDocument
+        {
+            ["_id"] = ActivityId.Create(_options.Username, text),
+            ["username"] = _options.Username,
+            ["activity"] = text,
+            ["timestamp"] = DateTime.Now.ToString("yyyy-MM-ddTHH:mm:ss.ffffff"),
+        };
+        await _collection.InsertOneAsync(document, cancellationToken: cancellationToken);
+        return true;
+    }
+
+    /// <summary>Reports a change only when the document was modified, as the Python sample's <c>modified_count</c> check does.</summary>
+    public async Task<bool> UpdateAsync(string id, string text, CancellationToken cancellationToken)
+    {
+        var result = await _collection.UpdateOneAsync(
+            Builders<BsonDocument>.Filter.Eq("_id", id),
+            Builders<BsonDocument>.Update.Set("activity", text),
+            cancellationToken: cancellationToken);
+        return result.ModifiedCount > 0;
+    }
+
+    public async Task<bool> DeleteAsync(string id, CancellationToken cancellationToken)
+    {
+        var result = await _collection.DeleteOneAsync(Builders<BsonDocument>.Filter.Eq("_id", id), cancellationToken);
+        if (result.DeletedCount == 0)
+        {
+            _logger.LogInformation("Document '{Id}' did not exist: already deleted.", id);
+        }
+
+        return true;
+    }
+
+    public async Task<bool> IsHealthyAsync(CancellationToken cancellationToken)
+    {
+        try
+        {
+            await _database.RunCommandAsync<BsonDocument>(new BsonDocument("ping", 1), cancellationToken: cancellationToken);
+            return true;
+        }
+        catch (Exception ex)
+        {
+            _logger.LogWarning(ex, "MongoDB health check failed");
+            return false;
+        }
+    }
+}
diff --git a/samples/web-app-cosmosdb-mongodb-api/dotnet/src/Services/MongoOptions.cs b/samples/web-app-cosmosdb-mongodb-api/dotnet/src/Services/MongoOptions.cs
new file mode 100644
index 0000000..871c308
--- /dev/null
+++ b/samples/web-app-cosmosdb-mongodb-api/dotnet/src/Services/MongoOptions.cs
@@ -0,0 +1,32 @@
+namespace VacationPlanner.Services;
+
+/// <summary>Settings read from the same environment variables the Python sample uses.</summary>
+public sealed record MongoOptions(string ConnectionString, string DatabaseName, string CollectionName, string Username)
+{
+    public static MongoOptions FromEnvironment()
+    {
+        var connectionString = Environment.GetEnvironmentVariable("COSMOSDB_CONNECTION_STRING")
+            ?? Environment.GetEnvironmentVariable("MONGODB_CONNECTION_STRING");
+        if (string.IsNullOrEmpty(connectionString))
+        {
+            throw new InvalidOperationException("Missing required environment variable: COSMOSDB_CONNECTION_STRING or MONGODB_CONNECTION_STRING");
+        }
+
+        var username = Environment.GetEnvironmentVariable("LOGIN_NAME") ?? "paolo";
+        if (string.IsNullOrWhiteSpace(username))
+        {
+            throw new InvalidOperationException("Username cannot be None or empty");
+        }
+
+        return new MongoOptions(
+            ConnectionString: connectionString,
+            DatabaseName: Require("COSMOSDB_DATABASE_NAME"),
+            CollectionName: Require("COSMOSDB_COLLECTION_NAME"),
+            Username: username);
+    }
+
+    private static string Require(string name) =>
+        Environment.GetEnvironmentVariable(name) is { Length: > 0 } value
+            ? value
+            : throw new InvalidOperationException($"Missing required environment variable: {name}");
+}
diff --git a/samples/web-app-cosmosdb-mongodb-api/dotnet/src/Services/SecretKeyXmlRepository.cs b/samples/web-app-cosmosdb-mongodb-api/dotnet/src/Services/SecretKeyXmlRepository.cs
new file mode 100644
index 0000000..e0cc5bb
--- /dev/null
+++ b/samples/web-app-cosmosdb-mongodb-api/dotnet/src/Services/SecretKeyXmlRepository.cs
@@ -0,0 +1,49 @@
+using System.Security.Cryptography;
+using System.Text;
+using System.Xml.Linq;
+using Microsoft.AspNetCore.DataProtection;
+using Microsoft.AspNetCore.DataProtection.AuthenticatedEncryption.ConfigurationModel;
+using Microsoft.AspNetCore.DataProtection.Repositories;
+
+namespace VacationPlanner.Services;
+
+/// <summary>
+/// A Data Protection key ring derived deterministically from <c>SECRET_KEY</c>, the Kubernetes Secret the Python
+/// sample signs its Flask session cookie with. ASP.NET Core protects its antiforgery tokens and TempData (flash)
+/// cookies with Data Protection instead of a signing key; deriving the one key of the ring from the same secret
+/// lets every replica of the Deployment validate what another replica issued, which the default per-process key
+/// ring cannot offer behind a load balancer.
+/// </summary>
+public sealed class SecretKeyXmlRepository : IXmlRepository
+{
+    private readonly XElement _key;
+
+    public SecretKeyXmlRepository(string secretKey)
+    {
+        var keyMaterial = Encoding.UTF8.GetBytes(secretKey);
+
+        // A 512-bit master key (the size Data Protection generates itself) and a stable key id, both from SECRET_KEY.
+        var masterKey = HKDF.DeriveKey(HashAlgorithmName.SHA256, keyMaterial, 64, info: "VacationPlanner.DataProtection.MasterKey"u8.ToArray());
+        var keyId = new Guid(HKDF.DeriveKey(HashAlgorithmName.SHA256, keyMaterial, 16, info: "VacationPlanner.DataProtection.KeyId"u8.ToArray()));
+
+        // AES-256-CBC + HMACSHA256, the default algorithms, serialized the way the key manager itself serializes a new key.
+        var descriptor = new AuthenticatedEncryptorDescriptor(new AuthenticatedEncryptorConfiguration(), new Secret(masterKey));
+        var serialized = descriptor.ExportToXml();
+
+        _key = new XElement("key",
+            new XAttribute("id", keyId),
+            new XAttribute("version", 1),
+            new XElement("creationDate", new DateTimeOffset(2000, 1, 1, 0, 0, 0, TimeSpan.Zero)),
+            new XElement("activationDate", new DateTimeOffset(2000, 1, 1, 0, 0, 0, TimeSpan.Zero)),
+            new XElement("expirationDate", new DateTimeOffset(2999, 12, 31, 0, 0, 0, TimeSpan.Zero)),
+            new XElement("descriptor",
+                new XAttribute("deserializerType", serialized.DeserializerType.AssemblyQualifiedName!),
+                serialized.SerializedDescriptorElement));
+    }
+
+    public IReadOnlyCollection<XElement> GetAllElements() => [new XElement(_key)];
+
+    /// <summary>Never called: automatic key generation is disabled, so the key manager has nothing to persist.</summary>
+    public void StoreElement(XElement element, string friendlyName) =>
+        throw new NotSupportedException("The key ring is derived from SECRET_KEY and cannot be modified.");
+}
diff --git a/samples/web-app-cosmosdb-mongodb-api/dotnet/src/Services/StoreInitializer.cs b/samples/web-app-cosmosdb-mongodb-api/dotnet/src/Services/StoreInitializer.cs
new file mode 100644
index 0000000..c74eb50
--- /dev/null
+++ b/samples/web-app-cosmosdb-mongodb-api/dotnet/src/Services/StoreInitializer.cs
@@ -0,0 +1,33 @@
+namespace VacationPlanner.Services;
+
+/// <summary>
+/// Runs <see cref="IActivityStore.InitializeAsync"/> at startup with a bounded retry, so the app fails fast
+/// (and the container exits) when the backing service never becomes reachable.
+/// </summary>
+public sealed class StoreInitializer(
+    IActivityStore store,
+    ILogger<StoreInitializer> logger,
+    int attempts = 1,
+    TimeSpan delay = default) : IHostedService
+{
+    public async Task StartAsync(CancellationToken cancellationToken)
+    {
+        for (var attempt = 1; ; attempt++)
+        {
+            try
+            {
+                await store.InitializeAsync(cancellationToken);
+                logger.LogInformation("Activity store initialized after {Attempts} attempt(s).", attempt);
+                return;
+            }
+            catch (Exception ex) when (attempt < attempts && !cancellationToken.IsCancellationRequested)
+            {
+                logger.LogWarning(ex, "Activity store not ready (attempt {Attempt}/{Attempts}); retrying in {Delay}s.",
+                    attempt, attempts, delay.TotalSeconds);
+                await Task.Delay(delay, cancellationToken);
+            }
+        }
+    }
+
+    public Task StopAsync(CancellationToken cancellationToken) => Task.CompletedTask;
+}
diff --git a/samples/web-app-cosmosdb-mongodb-api/dotnet/src/VacationPlanner.csproj b/samples/web-app-cosmosdb-mongodb-api/dotnet/src/VacationPlanner.csproj
new file mode 100644
index 0000000..9a89b96
--- /dev/null
+++ b/samples/web-app-cosmosdb-mongodb-api/dotnet/src/VacationPlanner.csproj
@@ -0,0 +1,11 @@
+<Project Sdk="Microsoft.NET.Sdk.Web">
+  <PropertyGroup>
+    <TargetFramework>net10.0</TargetFramework>
+    <Nullable>enable</Nullable>
+    <ImplicitUsings>enable</ImplicitUsings>
+    <RootNamespace>VacationPlanner</RootNamespace>
+  </PropertyGroup>
+  <ItemGroup>
+    <PackageReference Include="MongoDB.Driver" Version="3.11.1" />
+  </ItemGroup>
+</Project>
diff --git a/samples/web-app-cosmosdb-mongodb-api/dotnet/src/appsettings.json b/samples/web-app-cosmosdb-mongodb-api/dotnet/src/appsettings.json
new file mode 100644
index 0000000..10f68b8
--- /dev/null
+++ b/samples/web-app-cosmosdb-mongodb-api/dotnet/src/appsettings.json
@@ -0,0 +1,9 @@
+{
+  "Logging": {
+    "LogLevel": {
+      "Default": "Information",
+      "Microsoft.AspNetCore": "Warning"
+    }
+  },
+  "AllowedHosts": "*"
+}
diff --git a/samples/web-app-cosmosdb-mongodb-api/dotnet/src/wwwroot/favicon.ico b/samples/web-app-cosmosdb-mongodb-api/dotnet/src/wwwroot/favicon.ico
new file mode 100644
index 0000000000000000000000000000000000000000..5b1d5cf37d81c073dbacd66df3f69d9240359dda
GIT binary patch
literal 36791
zcmagEWmp_d(>6Q{i$hpk0}H_+c#vR=6Wrb1od6-g;x0iFoDJ?0f_tzeIKkZs9^B#M
zdhWm9alG?mrfYhnrmO3ms<R6KKmZy5fdJ1N6p%*-fcMWWQqup)Cnx~W^?VKr{hz#m
z4gj?n0Km!lKiTpH0L0=001Wm&nVJv){y_l%4*#G0g9QL^-~8A9Z-WBc8~`wG0sv8}
z%Cb0^<e1MVao)*EsXrh8(*S~w`n;z;dolw6WW0A$;+j5LR>?|=hE{~(xo1m$5$WOx
zbWKdfscH3)sLJu8Xzj(xu<713Y$3x$OfLQLhNy8}4uYlTL|y(QT@oUE8%0m6*lERg
z1z4=(8HnCaQ${&?+Zzf}>!bD+H;@yHKQSZYu^->grpOP5U0!8&*<K~jn<fjg9|H-E
z7vuwNu@j+x`=G0n*Q#dt(qKRua$cKUdDXg3#V1h^w0U-{V)E8A@9^~u&#`W~sdysM
z*gFit3~HA9y>$!7!B+yIi1l|oaJ(PxauD5x8~L*c^Ib0^4*b-W%Gu<d<%hfSSC8?Q
zcE<Sd=wpl1L8t2UwB3Z?<I;G4w2hJvVtuvZd!=Ic)d*A&pNQie9^*8{R^Hg$D_XNj
z;q9Kf^%PDnpM3qX8Do>9Sovk9&i(=hRu&Fz(W>Lscu7crQLUxrCM;>!e0m{r*JdLi
zX1#U$C?c6~)NA%5PB4y7HQH>;zWNGg*Ey4P&2YQ_)ul&FNMtBeU~#9Paylk8=aUY{
zNBfE9?{iK09V9WWab|*Lq!FiiDKA!9(<sNcn!_(kCmzQwHuA?m+#}-h5|&tyX-ARL
z487U+1pN^ppE5(t%8hhV`n!8?<j#A~VXW;vb>^k%@#WN!qU<{Fj+%hW*|2<vm@N*q
zOAsj>T4pa@@b<H-l4`u@_2#wD^c9zKGq>MiZZMnTL#@zEc1$?Q2pM5i^aK{)@f|5L
zgrL<vR!$YO8oI{3a_r7S=2-D~32n|#zZGdE2X1dgG4VXl<Bmzn2vWarlT8A>8(V|Z
z_P_K+c)0)doEohned9K=)z411+B%JG7yQb^y(oqU*iX!T=Xq{0W%1<+!dPDWy@E9!
zHs7r}y&k4(<WB*SQZC9>A>gj<i;+ACB&1u5l~0z14e#y!Ed1?D@jsrdF7%9A{jn<+
z`f|6@nMScBLwnwKEChHZ2;ZN-JZ#lyD3izYCPtLzOU?$*u?T~-iJDK(3TIf)&U|th
zjk!-2ioCIoUjH_g0R^k?)|LMWoBwG)tnc=^b9cUS;|U}irkN1*o6_#tM}T+I%2HJl
zrosO|p7fvZlK!73t$K@G0{}|X|2!#9%gE7i3h&W+r1|QoY6b%=SJN%ctSSBe9Zi@F
z9__y9xP0ZUr<#<Vs#d8weX@WZGoHGaKdY8-YG_H9q+KE5BD`8vGb(~9E?TD)1CMTO
zObYXz;#O|2Skz$!f2&{MNV=%ww18<|K!S(N*>2{I^^3JZggQ{)fHvVz&W+6pq)3ti
z!9XnJ{b2ma@Ik4GevGVKB5b^sp}QmS@Fj)Q762@%ewgc#XF?g<g3MV69h0lR5K|e7
zS9;wAKEzivr!cQ6zhA#D7YANQ&e9{TL`2i3Ia43Kyz&&m7{djc<K+55Z|TCSJB?lp
z&RMj!yx)o53v04Rfe83AWP%vDNW^&uGPE;?9*_RU5LDlY5`thcP97!$56;HNHp44n
zL~!(8055TJSdIHqaPVWA+$jW!YbuT_u(YpUEHl`9ZIZgE8U=Ly^W(tMt2_2M5Ktd2
zHor2pA#gqB^ryMP41_ch9#qd~VLef$ZkP1N@UW%tlGax+f$+?*DpBZXbUa&;591!I
zjx<avu`oyiR%mmqXH$7o{QgFscmr%&-ap%5Ui(kepw_2#LqK8(2~Rsdyhp!67diO7
zJEjzjc%hc<*L&O};r9r_6i-1m8wJVb(*vUwM2gOrtN6g#^@q9gLVw!JooRXHibPli
zO$~to>6f2_LO=15ljp$_1xD`Q%T-%Hi+CUcHxoLJ%bB8waM({HJ{AthxM&$4xpw>&
z)~qgo;6b1%I+Hx9$;au+f^H5XO#2udviAgAWfwD1>eIbLLwd0hXx=X$eo~*N8(gxX
z(2H!!ey+c2(Q&0JGf~0^pbS`FO7h1qr>93=$E++~b3R>P%D!Fsu-(4WAnqhbaE67a
z_`zwuHr?{KRq(e_<Y7V8KP$sIBK14tPR6ZuooY%Nv;uHT<IHl0nRQp&fjeZzs{?Y6
zq^AATzTICMySsOH#)29s@Jc`aN{{*grPkXByH`Bsh4}oK`}s?<ReX(vR#>1QtJYt!
z^!VX&+eDO0B@7(Yvu=)EFx$1dr}$}`YDCQkEt})^1aD--7vtNGE9<9|-OkIndnP-}
zY9YZ&m}kt!)HE`HHq&_Z>kEG%4gyWlT#s#avp#-*Zms+A>NY(5BMIE|qs>O&$Z)3X
zRS0fk>vlsNVA-?CKmcBaqF=`yzET;uIH$hRV&_r-0oRHNDgczsn|ZiOm+QCHZ*?9D
z{-k0MM44Ynm5d@+Um%dGjym_pWK{AMUw#j|q%IT;aG3{WO#UgWAM3i1L<Qn?Q9(%G
z=GEBJ{n>Aa(KHGX1xH=6DDVRH(*83nISQ^U^IDH)<Q~X0_32dR!$5Iei=##100`!t
zdqfOyR<LW>$8Oj$R#{Q6@CQ0}9^bKGzWQ_LjDUQuy<DKs^rJ}_BA?tlc@1zb)V;TJ
z$Y-QQ2H{Nn?ADI$2~q{1zrKxv(<Z5qLrH!>-WU0W13&+{^7vjRKUJg)-7yo77<Jvx
zdDzwMktB%Fp(8m9rieoVf9i}^FIP*teydH>u0}i@LsSLXC;-wIJ=;!<kJIZzZ1x%&
zwnL)>z-qPYbdPlhVEba-<2@N+Oq8S$ZeKt|HLaA4RAl5qSm#4Pw(bQYGWGpvp?oDC
zG8)(7k`k*cThNyeXsdCD1Ixxe<pJ%&e8OYpV8luOKx1!yeqZ0On0FheM3dImJI>lo
zVHAYCqX%Dod@D%WKdXMmJ!<nXP%mBG`$0>0oQGeWJRH0Bl#A&5vzH47X^_r)1Y#cj
z3A^9ukKWvSqjfI4>2QIu`Vwdde)GGGlhjxWooCSiP3Oldw+<vD<$Hy@Lj}w;<h6<a
zih(hqe^Y_iI?UIU0hXXd%Q+by{?XK1UcY#m*T1%Hc35pPKS(y~MWqsceD}hj^&;bw
zNX3P0g->w0i7zdS4n2C>XI5j-6LNO$Oi-?-O8EZ+@S)HB(EkH`j}ITt0RTPke}G@8
zWA_aBM2{owF6n(d%9M_(<^#%^u=Ro%DFaR71-yGXyt4T+i^;t2S|tbsgJn=SHDae&
z8(noFRGW~fH;*rJy)<+J>EREt3i^n;^lL&DTl{Z=<zHsgqilSSm;G)ntcM^%t7SVY
zepl@t9cS6cIexfnf8x3TbfBv)U`@O$;%4u2xq+cs^&7-OWGR_rKaE`%Q~SoDNe&rm
z2>X?!4)(sdCo=7Z<W$J+C6osqgsVZ_<}kSK7uuCiS4uQwiW&((g6ahaVi~!`sF#gN
zzEq<_Q-c+YzdDTai?#U#aBls5=oC#Ve?kQ&?EV_?)j#}>in%E3<;-}44y`dm{RAC!
z2OpHcxQdt2d5bTdg|y0A)&@ZkVaUg{Dztf>#NjLMYi&|CFb&-*6UMz(*!jfKA!7m(
zY^G@X?y%{?Q+JF8zydJdCB6`kz|Qv}9AX5uFj4B;BL(=erR#o?*6xldMT6y_o%*L$
z4aWr1vYlhZ<jHW&YDz)rplqN@#pO`zjj5>3__LdPbPT%h>+%v{xNAImV2Z@irtaoa
zY@lrgal!sq>A`;UIL2=Qd?g&9!dse&_Aw&^{XmQ6(~cTT!ZadKa1<RVm~3cBMoxDK
zz<xwpuf_vY&X_IK(iApr%Fre>zIF_ByPKaG3D^{)pJ=y>8;sp^2pBAyHtEec817Cf
z#YBe$Bam>k_#o<C-`LP;SXhV^8$1Q((&z@<U{a|q@`-BUG`7?f0oDWI-T}C9jR)p*
z<w7Md6D1q=KhN4^8q8oQ2;1;>{z63qsEDOnD4ED&WINO4dR-El)N~u9CD1vMP4f#A
zle+s!d$7@IX|1hkX$MmwNeJY2)+WNof2oysFZ^;CKd$g!U?=VbJ?6L=?Fd-UtWb%0
zl;q@jbsDvQjys9tI+Wqz(g{@nzC*#Bu5{f*_+|)@bsto14&9N|l;7HbWpXE&d*w1>
z_!xUCB&`-l;~|lBFGY4##<!2<>P9Z4j*p4S*2<m`8CwHCgP0J!BK(PvnlJR2Docmb
zTX)f1wy+Wz`K3KhA`p~@_g2j=!peV^`Sijmted$L7aJ+&*8k8K@=9_k<+85Zi*<2_
z7H4GMoE^K~ybAY4gcKV6u8@Yp_*5IFL#8wL!#<je7e=|Jp2+WhN{{shI`Q72aP;@8
znr3v)99XnIKd;QxcT>{3VP#_Uf7<Q*XBsm3WRfo%%tf)IOlPLk_4){^y!dkcHj2mJ
zL>Odd@W-R|aXK%&XBV6L<J<TJ1ou)|OheCG7sdDK{U$}r#H=JmNB2ovc<;0CE|vk>
zndulWat_+3Bc;q^m;ECMu?R6?N|C%p`irA}$8tl}yGLQSRRb(3%N<Rcgwww$JYMId
z3GG*p<f9=z<NNV#HC~*Z7ClFdspBT&Uzd0KoiJ*~f7iVH^jchM5e$@i$}1w1!Wx0D
zj2~!OC9(ESd+{%(m3zPa`1YY1657}!%bBtixHr4{XnN3om5nu^3}LOGzcLG0wfSwD
zc%|KV@jG0EnlNE+%1p0wyVns527PUA{m2b?@+Bzpz{te%r-keLt@2z-zL}|7#dXWf
ztJ^z`fUVqQKMXEo0e{Qra^HP#i09|%{EVN?I@V^twG-d|*GLlZ^QXEg=V6)3P1<$x
zi^(NhdN@Rs7&pGs?qy=&Y((zr0-$B*1i;Xrn?mq+2dhXH2ewGk-ZI0<QXT4#ezRvS
zuYr5|rwfU^{KFsj^oNmbx(NKU<XUx%K@h@aOCAaC>7wsP6}o~J-&`o9g?O@(rAObK
zP9p&ljnZiWNNC?@R*az*`S#lU&)9>vpLD1fd3;7iW)?bf)ed}-faq8G`Gse%e&Xa#
z+&qubNv<P(-PhvcJ|m6$x+^NCP<?+L6jX@tQc|%rDxglQzu;s#{k}IzT>N2UE6y)R
zSY*ygWZ#AmD5%pzf=7i!Fbp<Gbx^um^hzTp^9Jwa<D#6a7e07tY_A$EIDgED#0JjK
zHOa2!b~RV+zgW|jdFs@CLSOv$EzIFdq$UdrV5?s*VN~yql2K(8UaswxS6b&`wso9C
z2IUTr;R!*qppvi+Km{K6VjBR2M@cfM3*Ac}EeX^WrB9oN`M#sgZq&3=%<zc!ZRf8z
z#tlvl>1h65i1E;XwFTm{N!U`mG|)FMgazD-=B^>rY{g@|36#=Zw|{AGK_|v%(0W8c
zZVvp+7UshJ1;+du?&`GZar2J=n5=j|U^yv;j#RA9oc`!`i4Vq=A$PKnsM}A)@w@WN
zk-eDXfpr{b^3PPeaZriP1stvD#oFLbT#uop37nd}sS8p;>be*>`Hm{{R+c5AdF^|O
zL`~Njkq$ET9}M9H0O2%8^4a99Z?v)Rv!`oMo;2;;czAz&{2t2tBGf9&KO;N=MM;HY
zE}OCnPbm$)SOB+wdcsTxS}-V@m!UPofJEKm&RoQ0PMu9R;5GRdPsOigM^9uhr8N$*
z8ZjOARPCoDS-(+$ddhwt)f9cT_5iI>g;FeNeO3VFhEhJ6M6HRFD@uj6%gTEAG=2h?
zx+yZkhW$Cq`+22geU|Oiy=ghKJFZp(k&rWsj*n9i=fnp7W(tMQ0j^%b>0Brmzz;OV
zL9ZGA>h8SR<~1I9qUg_<$TWs%<KeTu0I8E*x_@xSD|q^MohjUvnTQ<yV|#<;I3MI~
ze?D4W2brymBDvB!AaU;?iwEF}aCxRvj2r3Tqg2AavOee6Nwph{o{584M4>f>aP8ZB
zTXt`9VD;{a5xGtm_XBof5Xc3GU76PVvF-C`r609kA^X2ep+n1U?VUfhvWKRQv&c&B
z)>OzP=*_tX>I+ugZCl?Gmg&yM&E57F&!!e{=vBP^cUpDV84wbBVD%42$`<rDl6!mk
z$mV@cnR1^8dv_qHSYGkVqdT4V|0A^dk7wfiztBbp=_UdIUa<ZzwCU6LcQu^yddl`Y
z_H)spZm@DBtHCCVRr<t5Q%DD{(aGj@nkb;RI^_i=jivLdDjt$b+D;_swUZTDGSKs7
zPtX(;ZkQ^LDfh_Q760*!CN_XcB2d^s;ip@;T@4*<hxX4QP0k;&_d1^|Qn6>>jf#;U
zE+?!U=Xi|XEWN@D2qV6fAZb|xR!@~|vI>PC^iVF|;TfZ<VoFyt_w^Odp{Nk%b%TLZ
z-x4OI(Rzl5=o$@C+-TZ=w@QOLpQ>F@{#g~)l1jnloCw9UU|?iOhmHBiC*0gt5<5}}
z5=^aiMg{l}$e!xXkgpLSiwA}ep#>~evhuO!EyT$V^O@Bkhggr$1gTSfx<u#O+7V2p
z@OD~yIy0myBJB>~MMA>FQuVqTwQ3ettVMGsXTp>$kpMYAd?vd3pm#C+ofbl@0A6wp
z3_|Y(xz1|@0rc-~ZW$YoR_1;ZFw$}QPgt#pR!(gU^}#y;T7`5vEmao>caD3TvmlX@
zK6`)Vhn<$;m)<C^tu@r&GlNli9Zc|okP#{2>KU+TC{iL)3PUf!QNpuES3MiYy&u6v
z${dYuzGx`+$$*Jkw05FkI1KEHffacP`xUa4)Ot17iu)q$M!6G$!?4d+-83;+ChIuF
z40tT&&?0G*>-%B;K*~HN1-k$OFxWd7h<O((P2wJXWVCQ8@>Yb5mjPNoijlN1aUxr=
z`(mq<o*l1-0M*(Og*I3_9D&na_-$0r`>d)G?UDJ5n9wWPo4^#=@@ygom=2?66sr<v
zkc7HhKHW8QC{=i#3E|W2;Z=OZdHQjdSG>|sj>pwQ9Vp^M8Xv9dLo{sPW%pW$;4ej4
z*BrhaziZ$U0XDpzCSN!>W@|tG=A~Hvo#W68I5A!%IuxP~hAo?IJ5{&c9Eo9zgrDs0
zhnc0a0fd;Vg802`oP^=3+1ZI5Cv^el8JcM+SttlwhJS*R)#Uh6KawQ=y|v3aRu7+u
z4(^ILMjPvooQ@WDdaNw0uZLz_^^f2jEY|pefgj7N-Y*C(WgbT*zoK!oIw(CA=9Eo4
z?KaH}{&kthRFQzd#FY|!(VMn0GTu(z2J<?-qgNfXb#jtcP{0yi$vkPlME|Yf8WmFK
z4o81F2n{&z>Ngsli6U&lI<xL5o!TSYh|Uz^v(z72V#iBFn#G)TW0AnXBZOC65*hAw
zDX;ocai?S7cSUfa$}<B1PfWcw_gw66Fd63=SKbsP43-8ECr)IfVDLH~P=at%7&kev
zR(1n-r0CH9{Jyv~c+1We^w_L$?T>el#zho%NX4}+BA|(=pixK<eU6bD8itiBhjpyl
z*zEF)U*x^`7BE4JWG3kLgBV?oGBkF@aTQ;56W^~VJ~KDKQWPH*Kt(Gb#M)pTn$XDc
z47@v7LW>|*n)R94Ayx#ZDnTA!+k~Z&4GDXd{fSBh;=yI|;UF^*Gm>UVJ{=qzJyM}`
zN~S)u;_BZUvFmdjp;oM`5oz;j`l^*n&QQ@w414NOM4bjnUiapn5XZ1@Q1i-Q29X<c
znClyQK5nE$7V)}2a$Sk=RSKLhoQ}UGrsnKNDp1X&>H25h#vgupAFy94OYte~jo?8T
zd*}eKJbNxrUx{sX``M}3nBIp(SddZ{J?$UTw*Z_qW6JjxX!_X2+-~Chqruj(i7jhk
zP|4`0uO8pk<Sfw48WQ_=^`I5?wCFM~_pzvFHH8z8OZUod)AXv?JgNV1o4J(4sEr%f
zU1;R;>#;<J9OLh7BdZ{p;qGlnDqXkt9O^DkvuBr2Pt+gkd>8qCQkto(aELOp&cpZq
z3dFs~?;FmGCq*8L#%wd^OSXhsyMio^iYA#MX#HYv=Zqzq_Hlk%C0ixu$prpgU{FG;
zZlf`PT#7PT!@=!#P-nk>r?>;j7d0B4z24dK<NCdd%j2WN#fizn`x`w=R}mOLxd}%+
zqeeL7rH%&}OoO7V?!P9<FLrb4DZ)!aDsk}xHE&4SswDOGneZwK9iJ^9%lpgLK<9wF
z!AX1|8ay5Ja-k2);35xYxRVv>cBYjN_4#{`R~DZ}5}pd4IC_6GI<7bP1*y#souZ0|
zK6H`h-@FC>N;+f8O2VG6%wt-oiFLuqXpfnQu7^&<^-uq6h3=>S_Hn;^m6`is{4{QJ
z)i?bTBN!XwQ<J>nE0@lYwQilj2=vpNwLZJAt*cV7=8q$qQ3sDbyxWj2yksu@Yf=nQ
zN<DVuN1EKxa&yhB+p14gj1aoE{pdo_wbq3FSKY78-%y}@wwH>+W}TfD9#2j;AB(A_
zLw<QQu3TG&TQ1H1RQsZ=%(6vU7%%&~a6HvyvDr_`KI29G+sTM578&WgDIpG#FWg0|
zzPEWzS<}hVMjiCf3kM;-!w+>-GIhd<`@igfe>5|wO2(N2+s!D3I3IsK+74_#F1X)h
z37#!g09}8dI!@GmpTrekBw#XP=nX7RWH}kQZ_j-JU^Ljpm+`c&TrBg3qBidrPlxtp
zapRtflpMKiFR`T@mA=)S)T@kCp~Ac0ObrUhz)VzzMS`7oq>2hIPFD2{#}3k)9I01M
zDj)ZImQ_joqMa|uULygOgDQdLRySm}A|7PK6@Ot1d#Q_VC(^p#Zx=5Bi1Xj9dgtdi
z*6>dz$Z*7-ZeEj2L?2##>xcDzf~7E^m%ac5cwKGzf<973qn};~aTqCw#u)wxl_AmT
z^(CwP6TRT!sa_QXe~X6srf~K-#1-+|3X(3@u~=(nwd<a<`D(YT9=s!t-uVLfYrkm6
z<Vj*k8vbFR(S$87fl;Sr_V7*6G?K15fbR5XU=+~t#&TG)`<QKImgA)YmXN^{id~ou
zOL*AT*f68Xl6Nq2m_`R8vxT!5FhbL31tZ}V!0$9ImCdtori}LY*-~FupP^Xn)MoSr
zJ+V&hPcU<#J@;T{GHmI!gnL7oD1}Wfe$?5=O2Z!%)NL2LI?qN)S6fCy1p_JFcc}uP
zv{VHRx{VFq78kK_lcm<7z^A^xu3G2chB-gCJhmAPZqX**HU7H(O+XwZXQhlZz-jK*
zqa~e{d!cBkOzmr`@O0TSlqOnGeChGG)8wVl`9zM7?I`p`Coi;zqceDIW(6k9J)Z;|
zPIce-zOjEW7xNkX^OUB!Xb~`-$n<8Tc`gw?sk!GyjY%fW=O$Y@l?g?#dk&wfs;JNb
zoMgqRmU)y5>KN?t-6NkOT@geyN}mCknd`q$qfhfx;9Tc;M)hJa8VKR9)C$DGk${p(
zII&;QxZAJgld;OytF3+yhUh%KxT2OS<BuZ)x;NpU`sG;ME^e%OIrP7)rV=z#UX!pL
zW@SgkH!_tir)E>U?{quN{$lb8Y>it+)9*n5Z8PwDJIx9>sFW8tu8>od-YbdX5?v6!
z%=3NkY$yKSj6is!TOSJ&gl_Bf`^SqoHetMfdd0K|w34Uv4P|?4^m<(Fr61GnTlf+7
z2BrG7->cCPLR1MktXDL}@qvajmBqyoK-Z|NHYu5n(}mzJ<?LHHS%H_<XHS20OfW`|
zt2Vz&I2vX<3Mwe&O|{#PSMue2?+?BgYpH*885mjOK%!+Cxsf>pK|re~>Kc1)GQogq
zG#HHjiaGT^Uia#&=occ)IulDC$w=spu;zEOtDicJMwh{tT3<3P9gv7-Q;wOR-Oh4m
zJPQ<!W8T^D?$DfS?r!?Ds7vx7G<6!Y-o|>4DON>U8Th}2tpqYY1Nq4U7OV#$W+Xgc
zw_nO&{Qzvhh-qZ591UKWJ*6*!sHZ|_e>d0X_J*Jkqt*g_x1eFJlu=bBE@wO9&%4ZP
zJxL_r`;Iu3m)L%iA}iDsz^d!(_Ii^h>!lxBtmBIvgpa}6X+;caio^j5Ji#cHXH{<M
z;AiaoC|cd%^5K?<m^lN6C+>s>yO0-2Q1kZg7Wvf4p3gm}l0mOfV|&qj`~6L}Zp(X|
z&lT-Jab-K8Fd|g_tReprugdGkNHAdPI&7+>J|?nN>*>SGb3+F(Uk>^Ef)I_3ET2ZN
zXZK<<zlqCIGGY&atLixjKY6^Uv8%+@7tp(p!<ejB`f!_`KwGrpb05C*yGwJyTiM{P
z>T5-d>f?us*x0T<qGv9Uyx>jB^d?wt-RE?&E4L1R6neUiW>mo%odultu6<=)p?E2Y
zlz55EG>T02Iyy3|z80k&4M0ZD?#zN@IN#hy4FE8g`k$-23soI-8-COrjM}qrvp)|;
z4)k;STB85@$GN^Xj`voW4+#)aJ0E0p&8yI8<ir+-v*|bQ^~cAs7ksul9I>oZ)z`5C
zL-m;xZNfP^k83d|?^+q{&cesg-r&*Dx^p<+9dTQoYnASpjhChBSA;3xH_?F%7%PYM
zQYwX>^8?Z95|+uwCyeup3tK?jX4or+q=B83j6;u;0wQk1%{j*g$a#1W?_T$2mP~Vo
z$>0{@+EFugs8|{qi5!v4m>lEaw%x~FU3J8NH`Im(Pqf@#1?!`wMRu`q=<H-gXR8FE
z74T0=ZN6W+zBBpVRUvx1ZJ<o1lIcin>_MQ&hjr)&eEKoYrOA>?0w7#{hTjc5G1I7)
z(0iacs!A!7je^GPN<%F_<~?@dRm$OTsiY)Fk$|AsttwGj0`xRsK>n{y5ZBwWc@m%?
zMI-0^Z&C)81;y1`F6(2GMv|3ed){n(+$`RpBZ>Nf=Eoe_r#(5lQwnTfHG;3dc-}h1
zzKGQhQa7$UW)8n61a428eQztMN0jFR%P0M^RW?2P#XinkNi1$r1|mrf@{Sh(Vs(X|
zoQxJ?PD+11dEJTm7jvwQdXpslKXOdib3g3=a?CP2w`Bkz*#2LRIc4CNn5C8al<jf+
z&~fC;u-W&D29h`+Wkw{9{_gE+mDJ3XRpSTkPhL81$o2Aa!NR@uALflFS;UQlQ49uI
zXh1vV-=y%Cru2CdzpyeJz5&s+NiNgP`JQjw9kts$UAHju{1X0vlz&vZmr;7uk#Kf5
za<g>Sq;&l%MFM09hSLfIhPPoFHqB*1CeR)9am7do^e)P>T;cu?#nJMGzQ5x$3`)Dk
zRY@lo^l%NTq7WMeo)%&^%cCFL<mnY~Iu5R*EZ>Ak`N+dv#C#XxkC7ASDXHMGjmy*o
zfF=_>TKZa=RXG5cxjFUCYb$BjT3A-3sy$u^GFTC_02>+jxXvF_$Z@fFGe7#gi0rx)
zEn{?ks0nc2gOqF?orc!67+2)vJ1Phx8ur=&2{4sKHLYCgWOxcX)c7bMpM1ILA?I-F
z#BjY5fZaHA0#ezs9I8z48IZ6Cg(am29U<(-39;m1Ek<fN#hCn!1kZ=IB+5|^Km(yD
z4e?!4lxaU&pS=`XCdCT10Krd}R$rwWyY_t7-UuE`jbm*kdoZAyO~QT<Ucn*qqC)9i
zHH^_7)+4aIi7q%G06rl35#XVtBLx9SwDKumE4)wJ>dw0_ygM${zXI&>t1k$UOqr5M
z2$fw1&vm}wyQafOh>lfgC5WMDKLU^%LM-dLo(_I3ymzi*74>}eMs;zWs1B=0+KV1p
z6x1DC%`F9>A#sU+qOHj@oA+TH1HEEyo@vX+%56ETH+tnJ(F07TjvDcMN82`LMT+)>
z??6E7;N_V%Jg_-j;9;L2C{h@C)ue9fUw7_eU3<oHxCB@VZ*hI!CU<lwvz-Jth}=U3
zi345}tRAjGXl_DmDkNphU|I~pfk=tlhQpM#L7g-7r{=Wo-P;W>wFqe>D^>a7d?1*V
zYmClF2c^FAADQ8^+Ai&Oh2a;9K#)45S3Fb-3PB>I_`vVbQY|rM6{9nxN9EP=s3{A2
zE&x(7v5-8dKp!WSV*DqcY%W<-yW&#*$cQ97!v5Ho?0x9##T)Ota;jlNb~u8ITeBJ;
z)dGjxFUCukZ!Z?%m~a@cR_G!T%B=juYmGo#_3F}ZYh=I7_1mlBKQg($X(r+NCF9cf
z%IX#`EDa$UUVf_sZkkD~c$k|pSrI%Jx)GjSj_<j%gMS<VA+|XbszpTDP^M&+!k@U=
z{l2&l{mp!-0Ctr!eaSud?T!_+Ou<`fu%6V|JC;bEA2rD*E1?Js8s|1uS9CheEL}9a
zhh>dWU4`2lbuPu1mcUQ5SEI6#kXSr}rYQxMvPd<ldB{50nBT~$TA-`h;|xhHE1<x{
zxQ73Y#6&{sBuG)wdms#)s`6N@wAKM4W8E4#mLypVED{tm6^qxcx6cWETlCxfaN158
z0AUC!D@Jd%ojN#1)tl1OFqVW$$Z|-OmXFDuMalif>RG0gNYXY%3i<q*n3tcw2aGDk
z>nO|`jQPy{T*1^EFu0uXP2-Mbzh7eQ<GujptqGe-0q!V&b7&9pi0Yo`ZPiT_SvuHY
zFmPYJQhvX7F!}BcFFP8O6>F|L4v(ZAN+oZKx@lEd#rj(I7rI(oXXm_2=0jEamwZoa
zc=S?G@JW4LPFH~^qANO4^I#v`(%5FQL_y?t%ZT}d6WEho%G<X#DUx`s^-1Ig<8}2{
zVRk!14v`9|B{0M#XujjQ;-e1;vSy@fF;L`{mSUKt1#yuN2_KYB=T=0*(;W~PB_}0P
z&~*^}4J!f5Y?<G*!PCtYE1#$u6Je7soBS(wE?##=NX@_P<l+*kfZ{rP8TC^R(4(06
zsfNpBwWgeqUv#y$Oor_V&e<|oef!N|dXb}zDH0?y0)O7}-Ja39CxRExlpt`wXORD1
z<JocFPto>rS#rMk=_P&vd@gs7!7SxxpG#fT_pc~!s(y;(dWN-WngL);<Dgb&x!yL2
z`&=uS%~e~jEs^)9tmYH>OXLuo53lSfgjA&P8`3x)4@I!H3B?*uj<JkTSn?uk*@EJ)
zP25>+a+k$c-#h!7>R`N4PHV=&_k!)IO(wd27WEwsrmeljXO%Fll}*1*%S3~CV5Xvq
z`@*1nI31A`aXjIXkzLjXai!S3xT0+zH?*21l&=W=9A5$0$!bX?llOx=o#_r3eWH}s
z!?NYbQ4x{wlCKAq$_Nas<#7rmso9skRhGgw8Q4)Iv$K*}D!(eaeR1>Qbbss>3;8?T
zhJVMIP{)uaph9urGIWWz$(?(bSP2Re4^6*HVptxc=<`k__rCrnpfT$XUK(yPRUuYx
zn@!w!${`B84J^7)Qlp|irNs(~wZEdO(L#$9fW&E$kOl*xq&b99y58M;`+OqFqdQuJ
zFL8d1Q&3k1(<0bm4Z}a{d)EUjCA`cER~V!weO&1v3dX&@9p@L?S$<401;3!SPF}@X
zZ~3zvcC#p|*%z@_J5-hf*4}Z|q@-6te-sw|Dk*TJF<xvU7Kff7y<{<p+hPZr<KyG;
zd=YBY`5(P=@<)Ce`OXAWhYxS}l%5hqVxu6Th6Qz7`Fm^{ow%iZ4@3W^WJ=(ZpFX&C
zn)Btd-SyI2S>Z!O#sT9|``?dSQ*V$yE{3vDe5s85?-yoK!K`faJ$mp+(m}`h`b4g3
zOjXfD=P_D{z2l7|217+#q>oct#r5N#vP0Gt{=<W$bU$J4N+)O`ly6PGaBtz;oL+H#
z_BYPG*u{q{4xVQdO2QmOTX(<U8nr&M=!%YNFE#4nDVC7Y<|i2#MM8VsUjm+vBJ-I2
zD2Vv^)Rm^c6VRT<UgX;Bl2dsetaqJ0Pb7_oSF_pvRrld|L3JbfRB!P82vGAfxC3#3
z!J@~~W9Ca;NP#MoYll#^cJ;^8xri#GC*~dh5re0}nz_H-(PKa7J=DES^AxI@T-Msm
zYyV<}t-VdKkU+#&e!5@k+~HRJ=u)P-A**5J%Xz!;?ctxd&ZD`JXs%B9bvh?H;`^y1
zudYL+_eawK<@u+Bvu4IBBXV_{;__D8THSLsn@voV|6V=KwsNiM`xF%BHs`NJ#!whp
zKuku30g}r4wFf7-fdZ2oU!JQzytXuJ(T{HrY<@8KYpZ(^+aAc_N80p(CFrY~5=7k}
zwsRI-Ms4z$+(%k$KH|SR+VAT+Y8SZv5i@(WzjAuyG#YihpS`diECzxfeGHg=d=5lP
zc-;TP)#!z!slk~Q^Xxk&bTq{hQe&AB(8T#VK9D9DxXtN6h6U^~UpCzzl34c*vQXTe
zyesa=fu&&#{cAWlO{khbH+eSI=v*u*u>A4p=Cx4HBhls4rJ(5d2kDf{qp$=5rb;6Z
z2D;oPN?_>ktWaM4R8)oP&)qjO&iCS!gXYIpt#%XgmICNV=3jgun^{&@xi<C|Xge>p
zz8caL19IV0XdxAXQw+-Fv`RsoJ<Rz6r7bFz5BEg_qpeTEf1WYNz(H2caL?ZtVJM&0
zWl9VYZwpZ{cQ-~X=yRaJ>2<laH6)|^s0^4k&-2Uq9Hsl%YoqSp{<MEHiH{CF1|wz7
zQbh2mau~&<!Im_I2L~ddQWoC2sA0Y771IrS&bqDkfA;=Us=+Y(^Uu}^Y@7;%t2D<y
znc^A*o_sMi?Knzx)?fXXg`Gw26cxqxhpt2)>NDp{b<a24lxt@#&X#;H#x62f<R1AS
z;c*Yz*;AO3Y~oU(QJJw{^nkHB-`RQ@WO&}l&#h;OqA~rdL@C~X<&Re@o;*GkbZvlZ
z(zw>}JP_1PAAAA<;POz?_x3*ifwAq5QZdjbLUCV!LPI$>;&ZYxo#i)t@OG0URyGQt
zmO?$Vx7YUXFG*nSfYxHJ-@bPVtdyK92_{9xfTRQhHgOYPx}ARXZm~7psM9;aSdNa(
zOp9!SmU|hx?<<R42aRsEo|P4s+oXx%LupZtVrdyem-P2N3$7pzH1CiEcDRFR%mYY(
zq1pNIu~Gsr8FrnYyY>8zAKt`2Y|%2+uJf`HqvM%|WhPMa(*k~t(?4b1B3=-3p5l4v
zdUw^CHPo)Wj;~@Oj_I&);B{xG8fF9_`!Ce=QIt%i03JE!zfkyZ>k(8qy#l$KSZa=W
z!Z4Bh?YI_2ZiALz+>12v2&15P@kkz0z@9_2sqyOvQXVavNC<%-Yp!wKUa8UZv?edb
zK>_xy9q9o?*TI-Lz$YW;0O9F<+w1?}`8QR^ZFO!(1qE1abds<Nety2l@#ERhyjG_6
z0R5fI^VkE1`W-!LeOY*QO<wh#n_L!)!SRt;8F4IEj8~OL%_jrTlU_D^{4dR3i|6IC
zj`2ce29Lm`iLwe@AgEf~Y=eb+s6^iz34lhEzgnUBW;I7_FsrvZV-VQF%|3Tkr{-a_
z4wh)&&5Gz0%0r=iL0sTlVZ#BbM(UgT=1)(su`ThnOZN7`R(-y`ywQ7rg6VKB<h0`<
z($8;gom5IO?~U%ho(kJDnhc9GgaYCX!z(hl0oE3|b-Go&pS+p;x<!G%e<M-r-xi?`
ztiHADl5`E&3gLG;Sl|n!h}&WJI-^xbriDXFjB$wYe0F|nTg(ciPkhL-e>>eir4lZy
z?R0IX-ms63Pgkch3j+GsV{y8m82G9Ef2ReL-<0V$i23?#6&>>%##hzq-`N#kU;28C
z^ZKLyxO@+;tVEyJ|CIigC|!?-%W9d~>F`+4ix@zt3KaQazchFSg1z`a22YUAR?E`H
z>bHw$2aP2cCHcv|KH>VLV3-%>^7iwvRgv;VrN%sTKuLwGDj5eaNG{e~>qtZZ1<1Qu
zh{u4x#S{Cs{)+@?Q}y$^H$*50|9ecu!-e6ISn>+(Q~TQX-I`D<$oBV5jWP0xJhf9F
z5JY-F9Ky0fVC{w4hDLjOn{v5vwxAHRnpNp9J}^YM7lcp^zm<ixg9wPzv?W#f&V4A)
z6{+XitM*C?S_sQq!Izz)uMf5D9hEUeYzwVIM)mgZ<haag{zBQ&-zd<I?>Wqf<sOfC
z)ap83mz1ILO}D)F$tAw5r+TE7e=WZL>#!`=8q`NC3_j;{n)lwyCJ`&=HA)oVU^Ytr
zR_oFGNHO3(U~BaHg+R^W+=h_?F*22DzIc{?i4U5~>sPgMNd?rv>42$O-0#1;t~wbn
zkpG$uLxUqCdB~*MKQZc<H14KLe1#EQJb2X;>a>aRRB1x4F4VV%k(rJcB2GK}OWJ&4
z>&v3OshD&pvh?aMjj{Tp)n{-f;Whlgkb)Ug`(3u@qGRiq$T&s6>Z=5ZVjjh+?(3|N
zm(r(np-}5S(s?o^mwBI^HHMdPwbzLEYw+`c_PPEetHLzBI{Dx42f7jWuL|6*LURH%
z2f26H1fGlrI_oxiP5V7DGBTr5%9dWc{~H0Vix1^+2O-0&8mo3nxV2?vpVNj%<=SHR
zEhDVXa_klCAc6hPtLrHP`HhQ3nWXzz-g^2%jvPLZx0-&f1UuhV*xHm<vqR7kgvb@D
z%*BF=B#8|IjN<*m)_e5KjQ5DjmRUa<V&Q1K=op+|N#fpmNpu(=lOTYrscA+gUPB{|
zql;uiJI>oo=64D{=)l<2#T}#g<nQsDkH#YZO(>~NS-wj&V<F1`y>e0|CItlwLFvvz
zA(Qm}pys9|T{u(w!H!6q$G_>qpidr&z50|D_iJ)B>}uYd;!x7&egTnk>q}2dIl(Ha
zZ0s)Fwtx3`MO1<JlLFXn+#rIp)v3{pNbU@L#x0*w1-IMjO(T2i&T<0<N~*^JB|p$X
zrHgwWmb4v|0r?L1W2m2>8vbcfbCee!Rw~BVSP(M`Jd`(ISarU2HNGTCe}ozz-hy5-
zriF--@{foJW{O@MJ!>Y0h^iBH(POkCqtUpV{+rPHK!}+UCvNg)83UF#qKv}(h?N*6
zzfsF49xv?+=zh5*h2(tv5uuOdAyKIA2IjQGAp)!R!|Rnd0;lt0gQl(dpCMkz-DC4G
zsgZt;RAsODR|?O_^}+X>m$o^ASd?JMm(M>8v$_`at!-cTGW=WaFs2YLooK?M%=g?m
zi;kAQ%4~Ic%a0urh5^+W6)?IHkWpu$VNP9T(YmG!^1+3Vao6LRKXiD8fABJQx10d|
z+&P00ij#RLc`&R>B3miI87lFV(}Ra5OC_C?Fr~U)&p{>@p11+Fbg@8no*(Z}5UPNN
zP4U9N3kT~m&TF4vE$2Tp4i89<BVIBl5r;N)c5bpFKL`PUL8CGYko+5@VBdbdxg|nf
zSKTqc-00o;3UB@UUM7{Fp+aaR5JXxC4Ssmg3Lr{bWP&8$*9qbS24}u?f%+Hxpg&|&
zy}o}Id(8~=fvGt*O~~YIE~x8`71GoSf6Z=1AQO8@AMhk*1UvODVsaPxvoUCZ<k1gv
zd`VI1*c@w#0MECh6%fvn){L*}LkJ^K{R@Bp0cxroqL4VhhC1YN+X0iTuEv`LiU;6-
zba|0v1@_^LNF)QUQ}%J_VV<N2eI-6*$@02n#^iob$V=P2T=KqX04FFclG-tHx_osA
zS{atQ_AOb8#|8BK-|TOLo;3U{0KwEgl<p?Eh`b-oeAo))i*_>L8~gf>wcYO6I4kn{
ze9LK?3ICJM`wlYaYMlfIhrp1#tOFGLIG3B7H(xq=Ca+VjzD>qtrE}>|1xRRgN@C#6
zCMi@IyRYC<9gOT~?V#%ztT^Aa-}`(h;a1@=u+H*5Ta;S7q2e|HGfG5$|1s!h-s$}d
zIidQ=zb4S=5trD`ZOR#n`|kfi55k}O;r~Yu_K2Dd0su?Y|LDO(f8R7Ct<+<e%J$J_
zNt}0ZFcOU!egSP<hBg^C5taF$IP^;Ya)Y(fzkW~_OCYDA<7%lT*J+`FJBr|D{u8*S
zs&dJ`k%@^}?uVr#nmP;8@03K)PgSj}Wsgha{Rg*^O3k7S7p<i2E4NNeul=0XQ9Xz1
z_HAh&lnsembYm1(Zw%)~enQVjFWGJH-kWXCf4;<Ad5Z&TRy!5a1}s}IuDb(`nYsX2
zGd2j3Tpy58!SQxdm8mPG6^aPe#j4VU@b2*ER>jtJ3%sN%X5u6nBZiPMp%>)9MNx7X
z^Tc2$X-UGH%{SxqxepH`xAhA#HB0o@zf41QNKI3ih`S5%zbj|)n|Kf9e#-YI*r0_g
z*OM_o5XN7TN{V<V&+Q0;&`p!?JwHiE^FhX!FmFaajS4>{y9<7L5r(AruoCx!6`NC?
zsbm&|B^3&|j(oEiMH`RMI{yJ3(9V*`lJGL!;Rb!5A(*}m{1t=#8M|9I*c&tQF&I4P
zec8M)^Lk}A0hQ;!XCPrSbO|cN8_C6XGD-&i3SXrSVxa_zLKpM>i!$6p8M|CzQsL0r
zdtyZ3!Q&ziYmLI`PpOrK=R0}PQ8<79!}>CmJ&Y<1tKNjKIpoPhkbG!!^X>D%8E|Ya
zgt1O@+T-zFX09GGJi5<F-In$rCh`HUH0Q)~eRGlp$2QD`H%PEsOInLYDr$O}lSv9R
zi(Q*A#r&@{Kj*nLevA8FiVCBev#TQ!VuFd1rgRqnz{_KVi_)ec3l>UOPzz&3T}Wh(
zzegtAM>~4DKMPD_V(<wAT}sK{KbPnqVaHz>@b$QOyg6Zk(*7f?l-Hu+>yc@5)cl0I
z7}#?rmVwTYRz^XN8AV&Ti`Cjr9&Ijvf4RT?vafd8iRZqdiS`91PgpM+KpX7#<^-If
zWEpV1Z8c!5#oqJE4H|bdr&te$5{e%JqZzoby|MRE@-NNZFW(~vi(g(hsWCo&o0Ekf
zBq;r?PAKQzr41A)k%$!U$G^$&Tn;?*C=~H0$nT!ygyAiAa9r8#sR>nVHFK(uNYgn6
zD`v$ws7<z&HdJ?Vcy=R%l}YUFH=cY3vJ~acbNPB=)}sa1kz=lrRhdZ5CHX{8pJx4g
zJaXj{Le#`U-dVvVKt+qFee68p%WVgLb%L%Pk(47QeigjMMWoCB6c-0aO58=+CYOog
z6b_J`vepRCFZi7&?|-h2*`IOY_)(N(#%qmF)YA3r17QmB5BiBagZa?{Ik(wj1$2rl
zB$>}KamU$XW-e=-G-Dbe>VK1Y<XjWYb!6SQnB~qJe|!P(uf!0L3`ZojsGuOT*I9-=
z6Srwy*pV7O#dw;zz}i5;^}7+P<JP-rM*G=_+yJIY>UqJKowk+DVI3pd%K@*dcu-je
zgzy&$4?6aIePj^DIEaAj#vnK&5sBoNELGD<Ge`Wi+2r5M#bLMc4$C8hpL?n67l(Wf
z5=3F%m_+CRD5#|B8pl}A{i+PCbZ>2H&Pjn}5ZsITTsTA1{=8^cd%JCu^8?+m<f86u
zSYexLw4xJQM0|nCYrIAQ6~JS2Bd6f}r4*wPsj~FDj0#MT!u*LQcx}?FBFYZ)g2nOY
zoh}yc;{8EqJ`jQ@9~{orwHndsIyY{^m97H+TOCW^q>JEYzha(9RwYVo!FuC1eESl7
z9~1NN+CjAQ<QXTj5&kc+E|$Kz?$%mmZgsk8oy2+mD=-$N34ilh)tf%%FQ57zXt(<7
zJ!6otQbp#w!@-e(2T+|2s|@eYsFt2pJ3b0Z+&()@Huyvv;@51+Xy4wqfr^fcsMjI!
zQ8eQa)DnVD|G9%#DUOVUI_ZgXvdG5YF}!k-T6<}EDlo{Fe_7)_Y$EduU!fdGl4Dn#
z%v%r#-Pr8Wz$7EZRt0%ML20Y@qDX6aKKdyA51;m0BAh=Q71kQIJ+z;FOQWeisW^s?
zeP@$?+R35dyHLVGW?~{*p7_rYrWY{`o5_sB{uxygL^(Km78vZOS1oCxO_$R)xs*fT
z*7r|YevaWQ>-KNQTTQfRhBz54uXVrX;Ub?K`P_CtGzvc~h=@G{t)sI;vEErLkrkp6
zN1yyW01u{uYwKYk(a6Qr=4bYU)U+{j?pw1o?dv3()053sm7q<yD$Mb7+*@D1vfq9)
z%eVLbhle$F*5U+xF3ahbR!ZdGa(}|(s|l8;3aGm}x$pUP>K&V0IJ@U#YU(~9N^ios
zGHNy1f<J7B%uh?oQZQwtWh$q}U-q39m0zsXka^UWN0%UJ9EgXoWYt;{k>AL%8~6{N
zZ8ex1%xdgK5gQ9#H9!kk*D>DSX)w$3^`ziGI)ER|ui{jmsvh}66sMv*%;S(Ztl_sK
zCO(IY8}AASt%q_4G%Vx~Nmw9!rsloupS`O)Zf=gVuGaE#6C?s+ai|OPxb+(a@NmGV
z`!!_Yn5z~y@fbs5i&yDl511Nh$Nc!QF|g;aTv~G7VaxGmK{=&%-1X7Pr2Qm@tx4k;
z8TEay>^nSG?6>uhicx{Q-_GH|4tdMMXtxVqkGPkTN&Rt)$w%M2mTni~7EJ52+u_Nj
zxkK6Y%rwQ=bkLsA(*ga!NF(vnukh`bzg=_zFW*VU&B~rCXbC&>6s^+YkxSf>yo=Yg
z4(CFho<FyO^_p6v1Vz@o${bvxnqO^HE}$I|BeT9gzO#ARSh%Q0<(RDDSGz>X^lWof
z(tkNd9z*4jv|O?nLG}#S*DYMCOk}ix>fF_t&bxc1X<f^2WR`V$mfSRskYK^DeB)FJ
z@ky`XX{#1N<-SZ~vR%}XwsDc7nBT;Vnw##LZ)Gu!Q2sP@C@B<9gcg5@Bh0r3rZ%q~
zI-Qr*RBy-(M5m<Vyby{4yg0naZcnuD#>6s*|6}Ew4T<^ClPI*8l+GES6c3D5-Ps`Y
z-7F|+FvTnZKgX_r%6PH?j1-G1#!pIuSM3YckGnA?5nt7MH93F$B{g-Oj6ETs$l#}z
zqxtjps|=PJh=3;7MMA*=>)YJHk(A1Cx*Dw&o-O&3skJo)Ck$qIkqJELn16h@ET4I#
zM2-b`X>U9NNr#Paq=rZI-tO%4*({Uj6y;p|F<aZQzxTH}x_T~U1i=m2BkcYZ(_{`a
zwEBw4_DHdjWQ4ZNeyb%5(eET+c!)1+w(46)o2C^Z|NV07T`j515a1Q}G(1Du%ImmJ
z5ixfYl^dY*4^^tHtkor7yi-Ae0W}yVS>;e;-ro<cAr^;pks@2*U}tV-S(8JiSTNOs
zuBev%nr6HG68^XPf*X1AE<{3nPuw!3BCPzamh_ji>rJD<>52h%836!Oa>6k^Y%pFl
zChjI369rNz&LyM;L#Wb{(n3zEAkNvn`riJN{5y!1Ql?%;9eMg{m0_L`@try@)Hy{|
zGlmdFz7VL^P?|UY#?|-nE6w@6_3SkA<_+0kDHcdN)Mm}TO6M#86zz@Y&3pt)oOSRT
z88ogadn!;q`Q#yiT%q_{Hw?W1lLr11KF1(5B8#b22|Guj7k($7N!Wr>*4|r$JC-4V
ztc?ktF9_|y5Qt6LW;zE$tVw&wGR>MaGp(&R-32$#d@VinbRDkp({`8VZ*m%Wf;-b`
znGiYZQ4ra0BeE^m@mA$CgfY_WUZ20?S#Q*+n0NhY^c)!$pJt19z(+PM>YaIQOrvb9
zJthe?!ul8Zj`FGB8JFKX@N9R_me}L5UY1XAWH>7C8tfHdT*T~W)=|1!Ijp2)MjB4=
zHSOiK+zXXjJ&Rrky5NM$ChH3&TUD>IF%`~>6ONVuWg*yAw2oO1jb3o|uNSoUkTS7z
zGVkL(mChQg+!?vErw{z>i0!#yOiyHB?@6q@*kI6UY#n;osL(o;@FnoXon+7pP{vo&
zo{~(QmxN7)%z??mWA6Ej6b8{;j6Qlh<)xcG;l8O)Sr8Mhdsmn4oXJ(K!sC;pHWdik
zq`+NlTAS;hvFG?Pv=>ygtJ_+|i;bG=@nz}b_Lik0*HF4|)%KdX2p#`zWFiwcJ|7B0
zRZFhstEZ~ddfay2Pl`1wvO>_?FO+xFHR*u|ECKl}{_F=h9UqQQiyM%C9kHLoWikRA
z88yXUzC>aFGT5<EXVbxeeqCoaZ3s19vp5E=`%lh1@`tu?QqSu5RSx$*=2a_039v6*
zG2k5!w><_8cmE$>Ul|Zb(}X#TED+q?g9LX7?oM!bcTI3x+}&M5a1ZV-3GNmkBtUR?
zyM4dA-}k$xXS#Yyo|3M97RZ|Lzx#DwR+dz1mVs<e?L#_jmUNU~cjxzd%-DZTh<)Bv
zz5^Ha7)XIvqe!T+Xn7eF$9Ni4ScxBS^VQxrsa))j8j4JF=Sa41&$7E(Qs9MBnX>cl
zUXH^^*Yq&V&5jsX1&igHWmYhb3Q^lf(wM5QBo)mJ+jou&<o;(v_ET>;`EKZG$h)qN
zLrEJH&G@FYR4<4jk;ZMmV^cVa4&HsgbyqbOwA|TD8K9@!8!EMgug1~=g>^{c^Si`T
zg>^Ux*Qe!OSfA>&+?t;Zd#oECZdRFCm1HjDRI=VSPWK!r<sx^)?zXEgdS?e4q66G`
zUAM!6pH}mSV{{`jBoZ<j(ewvaw3+#GT1$%0q4fw1vi>{#*>iv7kQhh^s2h6!-VWQp
z`3p)Fr;GsZJH|eLvhcHG+d~j*<ZxW=Bm*X*IeB=0$K~Vzfb=|_ebnQ&$0q0J^|wv7
z$!YHJDa=_;MU!|o%0U^JGdM^`g&8<3x<PTrJ>~a5_pRsiuQ}0qQbY<|u4;J3bg!Mx
zf=6a(4+1Jp9kLb-k!MLbSh<}=@YW7a(i71u^p#qwmPPcH57Z7VyNxHKlZNeIPON*~
zC$nQXj6S(0_41v@^!_vR4o0P%fM3$t8G^4(nVYp=_Qz0Q!m^rFWkGYYX+mRTS(twI
z47@$=<@)%@@}Y4v24lA5lmv`{jY0pr3zeDAQXfw<ohv#CoH2lrWn07XlKJ(c+1lk*
zTtc3o_kOQ4`7>lo-(k8V>(znp!5*f2(#ngBowC+jbWv<vF}+7rWqK)d<><lF;QQky
zY%Ndyr{|weAFr4=_MBk!x^k#?zEcr%vUs(?fA$2I*CTuf>BrQ!6J{OEC*}#G(q@EI
z%5M^Fwzwa48hyVHcdpY92z!}`&47niT3fv{wsA(I=@?7&&badtqjiSG_m0G_lU(@s
zM@*Auj3B=9^550^v2M%^^Vb_xE~a#2CcO3q)ypvADZZ%8-a$oXmdlh+elR6q<w<S{
z=XE~V(R;y-36#>^t9m6R#GK1*Hdr3G8yI)AN|h9({;ZA8D3=U8>!-`Kp9l=u&}6Oj
z07^G-3g@!l>CE@1$xce7uTWvo&m}YgUida@ZiOOBRFY)5EA-=2_(vi`HNEh&SRS91
z#ITBBegUy*GG8tA1)00`SnrxDKJ@$zPV#qRfH2C(F6_E~_Kj%1zweFvGT+y~KVWC0
zZ!3WiSw;V8Yxxs~uPpTE&Hs0T9uvn&jfHAaRbPnXg@Us_Uk>A?k);8l#fhshR-}EQ
zw)*0F?C-Wi^0+0k&sy5ry3&70?1r35;@yH2Xk;Df(j&Z|*4p+qEU=BG{CUV-j7dZ;
zm+ptAb5}TsU6&Zt#l51;%Rk@z?fFF&1D6=tMmYJPIDfqtGjDu$q-)#$^;m4i4AbBr
zLuQ(`aQ($Cjs2_K<G-8Q!&f6s9`HjS2KKifJ43-^ZL%if0p?b}Kc7g>h-;e;P5TTG
z7S3pHyUDCVB}Z4=Iy<;G=FwcHQ0^14I{scwROKn}%MNS%`EJUax6Fd^cZxZmTZGxf
z-xiuQb&!VJ696(bMH!{dAohdQ5*@x7fBl3su=jCyy-xQ^8S4s0J5B`E#yIi2G;VTw
zxbnuY%IIbkdVc^|TWXEFf5c`;KGgg7t(C>Eo6;YsB)rHpV9l;Xc3bMm4%8ueyZK>>
z?$Gskh|EFmpnrZ;n!cA(wI~}Ek-)l?0K%72b$n8&3plxX5(3|Pf*4X$CIR5A=O%Z4
zrE_{E_C*0RY$#x7W7D>>Gt%KZt?*3_x%YJ#m#MdobS58CVPOl;KipPk#D#I~*xj!8
zlX$cl_YZy2+`V|+vtf)GLiG(gOrfotKAv$|XX9Wz6C&L|aGF@Eyyiak1TCL>;ed4V
zZr8tXU$4DXREnxhPTL+|x2km-Z|l0QGQ@A%DV$Mp$gn9<5#d;c$JP!u!|-858@~HX
z+UK!>=}Yzlj03IYTE=@QYdhr7j^7V?a<`^`@Oe5R54;{02kjMqwWbH|%WrYQ6&|ZI
zkg$Vbkws^FZ={aB9#?rmeYnI{39l&1ghe`V_%TvFFNfTo3zc8A43f^kA5(CuzGV&k
z3BpQ^#Hq%A->b`2Z2xKOw0gg~`%D3O-;1snq+S(y__tkdF>Dn|?;VBem)R3-kw-Hj
zqgp9ThNS1m&&#<50>_c$Wkrg`La8EVV0H<~ZAM%T<IV6NF{~B0cj|v%Mo8n8+yB~c
zZDp;!Gv93Pr0LyoThbhQ{>YPhH_Mj*7uHB~`H7cY`l8Co@Odmgi7P6T4+fJf`h_ky
zH?P#lf+LFDq9)Gnf}dP-OE~i$fP7K|Y~0#q%=Ue2xFsd!mx4opA(V2e(<7O)@Hnpr
z&jj-$bD@=svNFuO+hhbT?9lIJ`xAr!MBLQij$4PQTBqywC)R;C)#DQdex|D~65ORx
zf4Eh5$sQ`8vanN6?6)DwV3(xuExG6D%DN{z3kpc{%o=lrDmSgF<Ln!a^4kAR9W6O3
zVJU&V2j^s5oF6s=;{I66!MPgOX|?o3=1mJlI4TQ9)g;`Q96gdb1Rf@o_grHw_$D?}
z3_=F>VPLTW$$;v$F7FMs?;63W@-!d5;7<IoUlzpaY!j+&Cl7x}MH(r`Ppm|41WP_k
z1ETwtrUz_JSJh=362Q=a-}|v_#RYQZsnr5L(b$A%>;_Ngr`yH|UZ@jOx}dt|h>uxl
z7#4g$pYdlASy=~Hf4-%=j-hhkkfuhr@GoM0OTdZPE9je!phklVsQA=Lq<Bw&S`?}n
zpo;Ocwv0D+blbg9M4rEW;&<|BJ0scK!!#a2dPlCZ$F;xszXlIMf7U97soFMFZ_j#f
zs=rG8ZEV{EaRuB}Rc6i*kROH9N3%TN&PBX&r6PZ^(r>i?`ugL{p9Ec_&CMhw&xn<Q
zQ1SlJGl=gJhKm2COdBu$)1#7NuBEyNmP)Xn{Y5tVsOFn1F&p*AEa_qEcV=hs6cem?
z>y8Xa5e7$Xk<IT;P=KV-Evripz2vz?o$tyZ_H<pTmiCpGo7Ott>x)~nPSPK5-R0Kl
zFc8#Zbxk_a?qqLrxGhvULcS<`Bt#{R^$S`+N0THgid!vJK5@t(RJXxvvdn)mFcNif
zF=dv|UA7BG{wiOPgCB*!NFy!=)S>XJr(6o`lI67+uK)aQ*8)qKJAU`<wClD=Mmia5
zaaBtTz=+EKLKPq7@lo!OtY1hdq*7&{!W9LW^BFSD^w_!BhwV#$fU1^T<ry~wzlIej
zZ6?DfOZ?%C6w2L_9@oEHW$zOAn(X!gsOXDf6+#1Bz+=Sp+qJuiPfbiHBs~8`KDWs`
z%KozV)ZlSDA%=P);)v<nx3z`q>gd2E4T?{NR4Qlc;&ekxV(p;zL3EiT*Uzpx>s3lu
z<7I^hV_EyZT1>=dW>r5K7@&$)ESy9Sd-#sdMf6f88BK+Yc2$je5F{e@jS%SY5(7Sa
z_~8conQ48K2kmwc<dEv!aK^w?o9E_$w+n%c8pEty*RP7<2EFas-t)Qm97`m+6;kp;
zlHn;`5H@K2r2`Lg&Sakjhl#z|h-g>DXEX}_y$R1;e}bi&^@XwA-~8CA=^lYcb2(E}
z@Vc+j3By%rTP7*8-3=CgL!SYYtH+|6ban;E>6BB#`yHQJuC@-XB9;kwp3070PbR~w
z199#CRQX?D<Gt$+Pt$Gb$c%-|0*KL^1#lx;yNM$5+&HXq{jf^&Tm<#@$znDps4=*B
zL#jz5iNsU8qAdm$$xLU^fV{lna6Nu^TAlVUla8vxfeTi#6|J*mSWyy)fECd9LFSGJ
z0*W@lxSk`%p9(*OA@}8)xYfQfU0N&O37AW*@h>SKe*Y@Wub|kh^B0Sv<l4&wB~sR-
zyZxw3d*5Rh(WKBGRCunmicv}v$N?C9xgH50<&*#BWDGUC0_im``)ymlu=ZeJ|0Sv^
zi^(zP+0D!Lm@7&$mh4A2>h~=*l{+hnTm0IHv40)Up0oT}XMq3pduYRZv04S#j}G@A
zQoihNz7RdB!FlSVjL~p-2?I=RW+<*fvl2hU8gZbZjN!Rvg|G6@-E8<eq(97M<uSsr
zvO(Lsgmfq$xJQNn$Aflp$+Gp>u;fSZHK`U4oTf%@nZnN)ZD%>jxBF=I9lIJTBQ`yn
zPeruRq>_K9JKs4{s>%_4Lp%isx74s!F_^sf3e<4#MdKJbW`$^Ysx_$bCI3uNbwKyZ
zT$>>{QWj$vA-YX^8Z%VT77@&?5h3w#%FN3Qu5Fq8h)y)vn1^5A%&GhogUorrKnMQ~
ztK{p~zAb~bZYA!349~_%g3_W12~yMEoCY>g4xm`a0-*Dun~A!8t&q<|S2VcV(rLf$
zulv^W+9r8g{2)}p3h0}k6;XHJi9H0vluw2;_hcv|K-|3jf{JDf4L)s*Fyf2M{h?})
zX2woBHO40@Iy0Hzb<w@LbA#jmB!%FEqzH$@z{5pb*|xQF?&S(ikEF`xx}LPUeS8=<
z;#n{&layn&x%}2K%J_nTIhOg}PFAu<Yu@Xp*5<|Y)fHf}$40v(`E?`dAFQX*)3%}O
zqCfit0=V%>Rb|?d#s!s{4OZq1fj(Fzm}9>Td8U#hC{Hi>v$0guUU$Iu)Z4>Yyg0sM
zyZJLV2eP3d4AoHk`N53KB0<VkfXY>r*e?-HEV`s2c7s58RcF@Xyl$87?qnJl=4idq
z&U|+9&UcmvOu@W+_HSjq1yk&VpVv+gZcA+OYx86$`%WoY`0T*+F!Z28lxdB+{*^OJ
zV-+Nhpo-g(g09c2YY22L5?bO0>S-qp*SG4l6T`MzE^|c_V#Nelqvxt{+7$!ZRT%pe
zn{*TX)ndZP9<O|Wm*1Zm9uMk7i<jV^q(_fi?(@3ZjfK#N8I}@&`JsX#)q)O~*qjk8
z`AZT)$7Twmv!SFCFpW;EY}GX{j(&RhU3yah&15WW77&z_G<Hu9>GLicO~Bork3E0_
z^Gj*WU=4>3v4RjuO8jaEKEY8;fFP*fmzBalwBi3CJrAo5ZvX!EdHWl0-pzxex{KpN
zhL;(xiR(KI9$3+7HrE){BS7fN7YkdZ{ex01X|FohxLuf6Ma7Q@C#a8)3LiVZxkY}6
ze0&f@Hzz#T-5HK%fwU+wbaO?yh^iq*1w%u^S%{*H+40Wu173d?;<s`v5hsptO-;n1
zP4C1RT0qqM-%+eC63&gsfQE=B630@Tj<Zqw-+meF6lb%MuV+#5ZmW!Kfdw8vO{82z
z&S6At_onM~Op^BSdCc+#gAmu|VIS9ImQQgO?bWr@u|PYRRfn9wOuDrAT?9L4AB5U3
z*H@#+j3eAW?fwJRT|!9HYt%@eJkmewnSW157)j;9ND=0@!AMJi(g|)KKfXKFx!gwo
zll_LCBlk{O_5zD^^O^)m<tI+VspQFzjMVwjTq3z#X8?s&`T635lJ>u>cMUgU`d<T%
zsaZ`#ykV$d&I}Yz#zlB|&EmdF=@%)1Fo+*R6S}8c;HpE*w7T~5U%4tA%m@pOJpSrb
zB@6a7l#Nw9QrIgQT#0o2$>!c-{(`I6zOk}52F!d}NW%GK53iU_keclWTPOAaf&~@x
zf7glGh#lnM^1O8gAUo$-t#Oi3@@h=MS_a?uw2L)xSe1iaI00t7h^>6{dYEK6kD{cL
zsebGf!m9}<+RG%#{A=u$;Yn0Usz$xN2_$`eJ&fZOka11F45lB6Se|leSb52>krX`;
z8jOpH=>Uo=?binf8xIHn13n<Z<n{T3GnuCH2YtCJ5%>N@I{#W>3GesGUlveQ$Sq_w
zuc)dMkSs=0hpQP(S=gGRpVkax$e-)Pi%jG-vPr)GP+<L>d}BWU8zU-nIq3FMbZuAg
zmn6RlQaM`^W*Q!#(;V=U$_XUuDZcB-$uD0l>xlhp{&g8za>!7&nt|99=k>4a$BXC~
zn~Y{FYJGwH;XC5)C(j^69$WP~sIg8WmoUqS^lkOcUODxKQAv>v!yI0x!$q2vQS^(I
zK{A;2RSuIapp}pf!J>|+1nWwu_}T96obJD~JhzzmNxAo)q9k?s7nZQ}y*yq4TD&+S
z5QE3<v-owSoM%plfP%1HBN*|Xa8OVWS7n7m=EVt{svSN%R*-a%UpnUT9s`4mlMI&D
z6*)(uIPE0Uso2OzaYlrO^UU^dr?#e}4OGR|?>r*#E>}g5HpVv;>cBD16ju`1lV4f@
z^2tEw>BUG{I5(EL8AS6Ykp5+9lq35HQGZWw*m0`99TjM<AzxGHRxJ-4r)r8A;v0Cf
z7?{kgm4FL=zDon#mGh#XG)cVW7#+juEIOW$eAbuo>o(Qs6?abS>YVoc6nJcYogl6-
zlADOs^;2ZeiAi9Gu`j}>swqJHex5B}J6lP}e8Vh%p+>rQ(THpPIHC>AxC9)An<y0A
zaM}m)c2&`H)u3)@<7s9;XLhl|L=FfbxUzsD@O0C{<%Fiki~aBP#O|&QeXdq}xzbrN
z&Mf}@D15&}uKg#?)3Dn^LT!BAtIn7-FHZ_aUOuOFdb7h)p9fLGg%%b&oXr+4v1XO=
zT{#uTSy4ksjM=?joM)s&U~>y0pjD&CJ;6)9Lcj=X<7?e{BHe0UylCOlU+)T{#nv{o
zNb3!iyLdc_pUNkb&(%3CfjD4j+eOQ#v9WnGW%+<j?%3E4L*9ET5r1U^yemK<xWysZ
z=IOxqIZ0U7SCGb+e*=j_`_s+Qy-&9^Rld=~R2epI`+sZY6;=!V{CMimv3zM-R#Ker
zFe!+bmJbK3aByJzigi)xaq=W%byJjNa)J%F_%Q{i$0bkwu{4oNigB=B;eo{zd0K4!
zIV@KUBPI8YK9^{++Y4Ucy)84j>AhbJEZHA+OPsJ^UDuboC(*W1tJp(fyJZbZ9yXHY
z=QF*TOYHZ*xaovaXyxEQplj;}L>&H7Uu9~rO0w6E_QwZ;4CeJso<z52=((1sp8QI7
z6sp&enwYcNZ;py|nhr}RDVk^9UfFzGcv9@(_it>Z5_cdqc$9lwaJe?3bzU!T?L$p?
zmM5dE>|B?UMwBn^tUQp(G&*gvAmB5RDRS2J)##;?u%%gZB{N76xCt=!c<nI**}6vc
z2~>haO|e3B;`;8pbZyOd>WrRd6eynitYS;ugAbk#9Y+{4PmS8|llE^9x4GqXQl%XR
zmeQ9e`A>C7JPtp&4cT7VKFZM*K4gByY-w4F5dkaq{`wl^q|Jo^5LVHmpxX^BvzsdA
z>Rzu4r~kZ@#kaT-f4=|^(K3ae1yXguK?LyJA8W<O%jeo(7KtQ79cf{6e$pIWlO4hf
z$N&CH#P!Jz^hG7xt2-tW2_|%v>Bey@2^Qiu{g<%`JIa+)wA+O`BOzc(yXc08%aJ9$
z#5mS8-v0GL5!DlR1`3Wv5>+|mFyJwhgwGGE^r9Y`#=J2iHE>;QD}*q|h~R?6W>OVW
z#BNKgO69^fecAC?fA_v%CKh+EIAs{OvuOQWj<b}P|1Z>}%I5!OPj1-xeMXZljv!E&
zMC)6gU@3h2tpU&cj+BMV$CXnf5z<r?tg{z4G+Pc^RN4(_x0z$VFwkK?Wl(h_!-bZ4
zW|0XwQq(_my3c~YUQM#yoTscM%2DP8oHIicH8_TFH9ShlGfM<)P-sIz@-(tVDr}z2
z-d-v1dThmM%_3uVy|H=SmD5hpAydq021NkuOjz2AY1f@1T>0Hj<!Xq}K6IzqPg+`d
zq&O%Ku2dJ#9P+YS6@BiakIoLNT2ph%&xk&7DXqTV>&7S}51f}Qyposg4nk~dvUp2r
z`$L)Bf3TUNs7xPp`j2N@qx^P$@?3C=+$o0x3=Iv{)g&@*;i>F7oE;sfbP0|!5#W8K
zb0+0W6d}>KPWJ~A=K0IM6sBg@4<))4TOC%D3Ba?>_Og1a;6;c<Ux<_Ma}=-1QOx<I
z5~9AIDF@}sT1g)Z_YFAHl!DohTm=$UIFmu%^Asg^IuwGBsv8I;K4+ar-P5|Y;N2v-
z9Hu}9(0(Qn_Epxd*W4r<UlUuWv7KpP&uYaFjVB{w(js~3d?ISHm;A0i`o7d*#9^!D
zL}Xp~z5;nv72Cb9kaE5Y{G*e0b&ot&YS@D%ts@QNO;epVbBSDFdP2Hers+F=^N9eK
z88Ivmm?WId6cLSS<^5-Pv0Uju9F?FUBmcgYhVPdMK-*cahp*G!icBjxV&-30r<4fI
zn;!AvGtuk?b~a)P8o|VH#=MXO^P%qUgSy*!PdQM^&qBQ#M*uRad_aS;7`RK(M>!7M
zTsT$L_577QyY7-du3sKo6T%V!$GlLMA|+D?>wSj@KE1xooM@wgNw6v=eW~I;QXJNG
zfB%SWp~>DTojzy*Uo|jf)W?<sGWjW%j~XhG2AX1a_dQ_<Z>LW1Q$B{@+0Ze6gH;jD
z0`|Kj?{ZxJ>q0}%(dU1MTLW`HIr4*Mv}bSO;UVQy>T`7#%3jm?XKlcy38kNczG%ez
zN)Ra2;QvRsoj4D|s|m&^JPJ8?qp~S=&$cR4me^QNSi3zbcU+HeYsKI3n?s=Be(^95
z70RNDf}zb*>~dJNT{q6ZCbq{w`v6v9=1`R*dpd4*<Y{s~sFE(B0*fPNUn1&f&k8=#
z4=pn6<aI|rJ#I7Lw#lO&{&M<M<Wm6YpD^XrRpEJ>%Mxmrpdv+yAc8H-^*9<sILld@
zvuM53B2ndN?-C{hOCmPvhAKTswklwY_~G=+%o>eTOrUUpadZ@O*hyc~^o;jW-wI`?
zrnTcCu<-9_4k_MLF6Oja`oFz26BG)4$@PiKVBjK4MKMDO_9GKh4=5O?kfVxxG+-G`
zqkok`!dPUHSYW4#qoTu#h{b9<?D+%>JPamyFJCY1ef_%fKzZg|XMwTm%n`|tZ~;@^
zH`)jSmY93*61_YkV&Qa}%I7_CeNfi788SRRlem|gBgTk=u!q@q^me6CvPE3#|0Hgk
zoiGqk4ODHqOn6UDKFn7cC7-UE+ZZ)XAJJ_Ly{IxVJQ4s72M69^AT)ya-N^2v<ZoYe
zw^EdCoBTT$WClxNQ%4rY?SOX#=G)!3@(O1@0R0ywx$ybWKZPPNhXHR0wLYUr#jm9L
z#w&^)wlU*PEmWTOC>Ev45pw$d6?dJZuQLDO)aaS8sqmcx4y~&g$E}IIwNoNOj9?b7
zF1zp1TP%WUEiWY{n;qBdp%B>Yzo6l51l`Qt0J6&>0{}TP>_@nRDK{r)2f%(d%$W~K
z@ovf`!&LK>CNMiD82~i9CLm7}xP|L108?^S#a9M<LOQQ{jy3vks|)@mrxg+chzUnf
zY{AW^N+kZI!xoQF0;@JJ^;JFNb*fDoeS|3`iqWds!J<f?^u5Y5*_+b)TOr)zk(gP>
z8RC<$7N1w{wBD0ok!bPdxYi;usD-U^b3KnC^6PyDaJ~?mfsVBEheBi=5h5IL1E013
z=X`m!ud5Qz_ZQ=7Z=JH~-Ox<GPk;V6#k+D#TDrzT?JBz5z$ay6#eEJ^ESWyBDp(sz
z!qpZ^v^OgI$??UNv%KquY4p=1Ou_QgI$?H;^Pf6ZS&E3*EBUQ{N1GWgk!_G8J{!Wq
z&C4*2eLX9sk;gdLCudYTN>1Pf9@AD^yPt$(L8P3Jf?38q<cVPli7xJmHWylo(trr~
z;Ha}P*3a^lJD27^{_<a>Dagr3uKl${{!!E$hAzuqPwrUq*><1h?f04VeDsS+pO_>3
z7no?XB>4N4mdW1C+2qNtUMyce)=wY_E+=qCAJ($j$?B!sDLO&>*}uYmN_T;~!1Ls)
zm2GULAfZw$U&&46p!b&G*xLY2Zl_7h;Jmc8niJ!PS8hFeg6z;Fo|LE%Ed&A-_;MYl
z%a6tnt*mzvn=8b_1(ytg6A>U@Ygl4}(k7S54+|3WQKL^wgj`C9(Xe}kBGH;sr*HrX
zj9j7bPGU0fUyxPS^PfLC0~hfSKKnIm*S4U!%_m{RLX{z-ZOOuSV=SE_Sv^v4gQ3;U
z<-;tMk)4l$eh&ygQ(mQ0);HWZTx8jSx#vkYnIHjh)S<DFukL*O>!!#ZgEN<8S<DU>
zMtqnZHf9(tVJm8Z2D+xEJ2v)~x~to|en#Ni{taY)VN=)KWsF^v^xaIQS*LEOR3qI*
zK)^7rSX}Ew<cEBjZQWuU_KEjY{^<u<1i!KO11dIR#AZi6bS8oSyusd#3HRMBw*Ob5
z`u}MN4uXz?fd5sn8n~5P0RU^w|Epll^Y+7CTpbOZ&dTbvgxA$*=~z~4USeo`U)ZeW
zc%;>@<#JHG5av**v(@A1U|*#vI@96){r&7xQ{7?<%L0QqR!L2?o`EV(@E8_M5Yyde
z)>T*FdwMD)-tmdttemSCzk9!Hj?ej9mR13G6CbC&(F$j6z)U525b1gHk&J{`Vl}id
zHl==?G%y{a4PA@pkI43_(>?deN^UTrBaq$4+2ZD4aUM@vK)p?X$WIhI4I>CH3;}SC
z_rDN}QbUi>dS%em@lY6r)@w88-MwlR^oX0xf(wzz(lAn56A0+S_~QCfKt$*izkNtX
z^Z}8<LMU_)<i<c1BZkltXo%yS5a>!u;sbo>eTW6Pd;l}`HfzgxVCCEJ<DGwe9h@UT
z^i467(=T&;);YwR7NT6SG#>`LN2e3{)VjMX)Y0MQF5gU1Hv=wI6<1x&oK8vn4)P-v
z)o9KqTR|K#bSOJB3>Zbw*NAZ?hQ7);%RsnN7R!lZ8)Z??M-Cw*z_Ouh_W(YQ82SM6
ze-C5|`YuE<Jy>DnRq82-9GJ}1QOWI(1irdSq}Z{)ND)Iu)IW85ESR<oP4{JHTi&hn
zSiL5x&Uj7F$*)unU#B^AP-Fw_J$@D&RP6ZM?SNV3jTby-H)!nAdY@akR!_kgx>VP^
zo#-TM&=&-Vgr@yPQiN`FRmRrqru3q?PY4eXXCIs6?iH|b+=eTefj;AFFA!qQT(G56
zqbFO6G89vC0V%#rN{RaS3QX=+{RI&g*$>pCiIw9OA_;MM-<A_c{wsL={gxOb8Eu@U
zCj7{?D1IAp3bJ{exW7yaVaCz~3cl$nh`Neihge=M{eppL#;oG60bKq&3-&UkRszqw
z5aAj<g>A}bZZkc65%-@00vZad(A~>6;%xWRz(f{A839!`hej^L5$?0*-JKp)h8;(d
z!OmPq7k@PG83?6${C&nPqu`;1la`QMtv8l$13P1(==$)__WkbQYVOJ(_Atq&k~Y7;
zQqYOgP&S~B{vqQJJA@9@YuF=w#Kh3V%}B_u(L=l@fY4%>rX~nVU<tuc6zeHy_4{2l
z!pCiCe}HmNsSIsK9Kp1>;I5n;3#w>ltHb8w$HM`8pW&gS@V`m2nZ5yd;jwi+E{Dew
zBP+SD_@aXv_Tx@ovyBgNmJDw2O`zjp+t29C^?3^y6FahCa=8f^b~YGA2{D4XL14uL
zm;`v(>$L!T(d+co%Qypp+qplU)pC!|nvcV&RpEPXOj@ITu9eLw7*6^;fiKMg2&Cs=
zHq)tdQ#_eoCPFDVGW2auGL-nzJ}=B6#(td-l=)Tq^{1p6=56v9$EtyF=Gk_nu(9?T
zlg5EL1t5eHkYXi)Yl#UvYM-_kpX#^+;@2dkK=|KD8ya716MYa<7^RJ-3ZFEN2q0{j
zhL6Wx?wSGcBy3=|gU8vBSe(F+AO!%r-P5B*c|(_Sa$fIQ=FnN&9o4HCXofA#<HHl*
zW<vsg$in)aLN_4c0h8$nwb17F-!z679sxe=m}(6jtOrmIzUuyo$JMiAy<MSh>OjO@
z3F?yz7+LfS*7|TC<KD_$d(E%1MAVlWjY+3~Cj$37_B=q@2^i|G=?oXXfA*g)>yFpb
zVDE_SL+*<IIvyDpAI0j`EhZ;R9(#IFEgVBE#;4wlhwqJ0NE}gTtgWt(JQ@S!sR!I1
zCSE5$zen8`0xtnN3Wbx3jdG9{m?lm6EHg@v6YpR-4)l07nhVf`AdWZ+%^oH|`fiU}
zlpssj#z`lAOD9xbHlauVmY^^7NIKSH{r+P}nf3hLTFi3hzlfjvHBaByKaULKezgPO
zXk`pB^?^rT>{sgduM&xMCk~{q`Rm<v^Lu1^CS}LiH1`%%WTSm@zjpNyKO`9YJcVmI
zjcldNh|rrej!J`Dn<i+sA3<C$H_k}j-oKtvS=(n<{;q!gWHIu?p^e;U{0WZ9bT2S-
zpfb>BbL~z8>0skS)HLmRJNd5B`JM&8$IuUfr6w<2-Ua-wHnR!1;I4$AhRSAo3Z=fu
zs4v&0ub(LK(h_{a5!E+R@N`H3WzK)><M%Qz!R}R>$ZPmgpQXtZ&_3bdiL_ti6BBjE
z;>yGFeO~%K%ftEbnKl*e8aEEE+5;}Itd4pl<);iTyJ^<b510_R`do;}k1vnPt8Kl;
zfrxn^9Akk?M7Mup;7=+wG@^Va6NW7&FI}7YItJ{ANPzLJbh?_+$=c64o}Amu&p9fD
zq8G<W^Zh$ckSnN&Qo&W0`nf*L{qPjv_}Bxb;sWB=?`zp(ihX4)>bLy;ikAu1j&h2^
z)XF8+?Nb4#Al(OQPmVtv(Dqaj{hV#XAMJj)Q%_C*{gu?GZ8_e%Ck;9Mtk_fciXWFh
zm19jDbOyqiCj5+8@~pp1MXF@wU{O4uKCORe=ZTQZb2k&L!QV~!_v-Zsv_W+lw`H+*
zH0zfuie8ADmLQ0vRy%_pSobk9vw($#`12P}gp&D#n1RQ0&U+!M?A6qQ!28CBqreLC
z*B)#gSo&<CLjx)waGwjbU(*j4MC*g0%h{(~Doc}&x8z49MrfzJhrP0byw=m6#k4B*
zO8Brm(H<C_Nixk(vFpJODwJkl|L~P9u=>5l{UTRvcN&tljky!QK0AUu@TNBf+)szu
z^H$)cD8Ze83wNSbkt5kfAZr6Z#0J=2h5r*;kHGDf5qQ&wJDP3p^qmq*WFqUsh%Nu%
zFW4%o!~ep79~#KxJcxXXCHD#HWdr}7-&Brwm%%ePgG+Vft<Sf2jkc8>Dsa2FkZ9|K
z4&>Og3cTb+wyj)nfCDBsD6%S*N>-ErCU}VMRGe}sdPDNq$9x9Fx?t4(McdQS<}tws
zwmg*Hj?f=Hh*g`}66iB|#f_{z=f?oCF(W6*!j;+%G%045!q0P=Ac9mzT8#uClYlUA
zPKK=o`^;d{m5uG_d(@M)xhywkr9lkfYR5j}LeA)yiVo-`Lv^^KZ3M$@-or3rg<<4x
z8QEg=iYKSD$5@k&mixL)&D9toOwy(ji9+erNA$~+N6qdrC!ocO;@i0(C~hF2zcO~O
zGokHbAW#<Q8$1X>Gtv^MSxSLnSPgDu<Z1U?&{VwtR(YS@Lm4V6NG3x?7v#mXlvCSv
zhEcB+{Kg`?;Nf5&(5SVK>IXxkUDsx|5C)JTt}um`A`~alyIp-wl6@b1uCRsQ0{aXx
z`Lj7}`O{d7nU?-OfQC*xmM@Hw3<2XtprteegOV;u)F^<AD(QF?KNX2lc1}p{U|~tC
z+D5xZhNg!|ba@~@5Ja$JZJ=~U0psT8mT0U3%%cnk&kBq6@nF2MC~>`^e?LU{%OJjm
zVzT2daj7WKV+Kh-dxrq`9t#Nv56|i*q!*nZc&*_&k3p!lRnfv%fe#=Alvv0gFt81`
z)diJUqolvmlW0WRd=c%<`UYqa4vD<^%MGqq4&Mi{f>pSDuj7WEB}B|DvBePyN<s5%
zrUc+f#P^7jFya`Ih{=SBhL%EziSeP-G&=Hp@u8_`4(s5n9)&<eN;Vr6O6Zywt;66D
za{6L)iA2g-jC)j@30N<llRZ%%g}%u=cLpJ*+YU4;>LejnN5cP%?PEjH#<nFH4f?|;
zTQ;8;sAh{OQCMG(5pLRsNB46Deq?$Q#{TtXOD{W(8$pm8!kSLTA?UbL1(5u+%w-b;
zsAlQS8VJlT2$&dmWJYpJ$=S|XK%c7=j>y$&h8?>)uNWw!^`(VC+Y0%^h)AWjR7okK
zOhgjz4;7-TM~KO=<GajUhoh@2IF48IbTrr>pWt4zv`@|uP8FX;efJSrXKvo9)sM1=
z83nxkvTcl#EdFewByyz-b3(D*QJLIf95i5Dw3M>$X7=!}0eo>qM)TwVcV&-p&Ckh=
zRWHW2=?S;VYvLSVh9$tc_Mr^RY@qhH1WG&_<vE5G8AE2c#7tSA9~`U<h_8uvD=0E?
zY+TIA2(36h;NN$mkv}a#XW>GDeK-0GlR|rhUOA97#b=U+i>}yndw1SCdk>j|SLjLT
zky3VZY0jV2QLZSW1=Q#J9TUF?qud7B5_2+Qy1EPyix3vT82WvgMuu8%=!@cy(MMo5
z@7uAX%!72{{2sDCEH>tbxW9AZ>pYGgy7`Q;tmK5eLFSjpmu0kAAMqu>E@g_=MbCOg
zN%XyGr7dicjA+AXJFk8CE^=c#J{1F)5f%)2Wg!J}z>yjGtUtbWRE#o~ZVCUEq<Z`S
znb)+Rg@c88tD#QMRTa2;Agye^2H&9+VimVp{&j=U9^dImQ^TERFjXDyIeX1>qmps@
ztIk>@He$shYb>kHz@gJt^JGrx8R)fsYED;lJ)vc(B@n{i_VwWpM^Z*Qe>OcL%2-&U
z;tC^T$r1?&<r<m<SmuzFvhyhheAo&!HP<krH>(-{FQ}1>-a58QD|mlyo_vwAi%j&k
zD=pYtULC5V&Ue9p;RKUdr<Xv><q%PFRr&KMy%Mic#DE<FMb;uP<!*Heq%be>C2h6`
zCucoJ(j+47e{YM;X~um)P>d8qo7%+rciB!}`&qp?G2g{<l8znse6;4T9GmgeaqvxD
z+iXvPVxEXF8Fy?u*5wn>SoSV_#CZqq;-3^UUBFGy+@rNd%mJFV4<Kb}jz*Q-3o=Cv
za`N|h?a<?0yUB^cQ@qc`xRwEADwm4KiS)$yzIT)awA)cWi6>ZivYXF_GWK)zYO7}w
zDOoik;z@~BOYv=^Zm+j0PAEt{7-9HBF_Mzjm2iqsZK;LjS362yjzUzEk>KL#!Nfqg
zKTvbU1sjZ?QmRQ(axw)z&b_@3!)6UjM1B0dd_Q)9DPV|-Hido$;ersx&`#29dv<WO
zk2oXpS&xun@0Tw%<n-|+kt<f@n#Gf(_Q;$`-MdOR>GHLFh%e0y*(;ALEe|=tL`W8I
zZJ}W*(T!BMvtq8(X13@f=xcS(%FKxVO$k_+FJZk$bB-$ZGG~eH#`;KN#x?BV5Wl*D
z^}XSPlezVKuGRIR2*jh4)En=`oGi4+oik269MV**%QGNeyM{)Vq?0*5rRA@QvB)(T
zJG@z+V9Ck<UN`4}Yl)=894{$%B2*n9;Z!lEenRGyCQQ0E1WGFwl5T_`Kk;&(E1KBy
zDYw-to8jPLOgHx6;#cv`23P&2{&tf4;{Yt}S0%6|j-O16)e-qn^TO1)x`Q5q4;#Zp
zs@@eWf?a0wutyLh@<A?<cFbb^CgK+(1|*wvtryBL`3yZzN&a{~-S_c35)```zymkf
zUk<&|Y6vf8Xk{ynX{(sZ3krUvkYf@s5|v>E)tb`_F_J>(iLTg+Yt9r%ilL3?qv(3B
zAIN{L|Dnn_h#A>Mw)M}7ng+YH7%8n%_tvr0^eReiS93w2V{vdfKiym3sCRgNPmI8j
z%*;lZl2Z+V(Z#2N22E+OWO<wePghp2My-7wtEH@=X|Vl+<XsJzJOql?JE}$^E6Qk%
ziFX!xAit|y*FjW{j01Qfa@9-@m%T^7zoov~^$U@bi3I#`7ex{j)d^r&OMYgNl{Vr1
z)E`g2-TG6*t@-&OW3_d1GrWj=>UC|$p-7B&R*TBlowX)fgngFCr8sL;-8lbwIB;R6
zC$v2qI*`ni)o*y=K{lq8W+4cadYM}%%yTWaS8=0(Z&Te+KPfuqET0YKgTY9jCy2jT
z#L*HKCEG|{?+#MH{(S@})ryakM8FqD8o^oA3mzyp#LT@7AX8kuvcyY|vIzkF_fEA$
zgyNU!V;axX4Ht)ln$y@iHk*-?6xx*SpM-pYK;4)h>uT4_*xHZ954|u}5g_Pjaa0Uw
zLWP-zo}`g8T7C1)A{ZS&oR@shimqkEQta)`_NT!}o7;L^*6DeBe)Q$+mvb9EvHE@j
zISJ-SYh)W-pAGLi8tjChl#=dX-E(vXE|~4*7D<G%n7n)m69;VzbNFwZHwF-D*&jP<
zO0!dsg_QXbDRZ`*ah;%vn_I~5xfyxdQ|j92e*#5dp-i3pz5m*q)eJ7RIZ9_#^={Hn
z_(Z0DhPdxKEQN*2CC-ji>^Gk^eNU)_sZ=qW8D?UH0PZR&DXDqgqpopdl+W<6ry^e(
zX*TQt;i}8@DY}_oYi0E-Z_m&rb)>dIqs{Y0vJ@#K6w16Nx$N=*A6%O#$XV^zpK{7b
z-$DfZKY%<h29OFYM^Gs`*gDk{51J2?I~oEe5JPXtFOmh6`9&M=zX#lRn)FyU3fa{Z
zpo;)18w@v$TAH?lfmJ_=Sj@0SAu8+5$Y1aVWTtiaF1SRf!sY-5M#>ULp%Qh!pea}C
zY<0sWm+lnBr3X^M?6HrtXPMkIKaFcxDhftIkpP5_V~+yLiA!olderTc{uC$Rx5gqr
z3<U1?kL<<{@4UC1Ykww5N$Mp0K%YsC-ajy+N^&os7r&vFC2h09czp^3qd)u@_Qdgh
zg~jKGZM(mf`;++)QRxl`L`3$g8>$7KoubDV_@0TZe0u7!*_vL4_^WbP{XRIHd%TeR
z!h^X~wXj1K{LMdVU#tsln>K?vQ;k0A4e0x^eeOUDzlU5UPjtHV#5(6V9v2W3^&X4v
zf%LPnM%uy)?s)E3PzNT&d7NugEW^i8giQl%5_4U514G^f`tr%se(YP`WjCV()Wlx#
z8rC$`4?9)X8qVn%>S=$_$wj0{%yGRAmSEB4vMtU4iJJqQP6g-gfU$Os1iNG6b=u)v
z2VI8%B*m7dlOyXwHY&R9S3{e_!_P&Uo0R@99|&?Zj}92oygD*YA_jm`R-z2_;;>40
z`qDVKK*vCVDZPWDz$CTDGCR)=FE%4sVQ^5@&qF+YaX-Ai!OGohc$lfG>g&^wsA16Z
zlU5jlBE1OlHQDp!N-J)`?q1kYEv-@uj)SKW?75bjKx5yEvR{immz~MG`jrYt({!b_
zKsNOAG=p12g0q~TQM*7BI$RBig+DcqRAfic-<)zaE`^+F+$jl3*RyA@ABk;zZrqzr
z*MwIy+Wbo@t82B0`~*QkziK><5l24eH=k$@I;rR)fkuk!%b4y$j6|M+?UKCx?i9GO
zFGMxOB7N!FuQ4ak*521sQ)m%D!GWa#uh({V_#K*ktw<aJF5qK0BMHBu%QuV-;|MsT
zW_z(irYn|;B0a(dJ6oYVOTckcvTl}1!=Ihg;6J&((shV??63jQ-CShxfa3xW53kT%
z1X|WLw8XX27FiRMM`68Wn)6ZkZgW}_h)<;kgSa6TSEHjy_YHQW(Xt#D?cCoOA5-`2
zzRY}OdMcouW=h(a4JNhU8cxSI9=YW{EBxy1tNh_UeB95c7xrlgb{DlOIbIO6&%Cnv
z7y*k-=))JNLm8Pp0%1Y~^`&nk+shNBUpEIeq<Nk+rc|`_<Q~0Ow^?5c-Qzwpxk6?w
zdYEjT>1jrq8)xfJ+|~7us)}BV#$88qu6-lwO9P$@gvT)`|HT+J5s!HuRovyPV4OsD
zBNwVP;}s-PWUCsg-I)Xu`*`=~E`No85OP}RXEJSVrv9}SeqF0o;&J*c+1i8d@T-a2
zZM$i0ZRUiU$NYB*Cr}H<Xj>+rt*-r0@m9Tl0&YaWP#Wpw1;_)yZ1Zsu<iN4U<M5Og
z;V1sMh1$ITmTO47IU3)(B{qM!Tz~MO`M<y3)rxkaq~s*{46ywzG_7E5n@!x($XF5*
z8{oq%T-LB(B{m}w@}K2fzSBa?1x@IEvBH^<$IqbO>3~Y8ap$6roBq{KO<na!DZZBJ
z&&rI3lV;x8##_T<pFrxhR&MHFOW=Cmp9kMU)CFx<5Gt*h^%<EJQMNUTM6G?k|BM62
zS~VGfw<#9+pF{hh9!pK{<RVXNOI?!yf8V=C7_r~b%Wl24D?9e$_fD+Y+T@$l6U;4I
zL0`TJPN~)mY7?|BrSfe2_4tk*px%ipnzDXkHCD2yUKZ{%m;f~^71_z*3Y}Vb;Nr_f
zfc#HD4#;e>P_8V*wat!H`0@!#L3@7lC$IVMExxp~Uqt8b<i%<wwxOae5AK2Q(_)Sg
zTXh5`1R-hx2WN4UOP<|K&tq7%OUGxL$BDh*V>u<;m$N9BqDLZFzXja8{B1ktSSYZv
z?9Fwf!0aj2i%_mE(byUImZl)|qDfiK35Z%iZ@3iIlzVvteL;hGgmF+g)+Dhz@emNe
z*3Ta}qbJIX)X|c9Yb`b_=yjtFy+eh-DS6pW4S%fM@fCBo{e_+UfC30;+9rk*>{|H-
zu>%-_b%CWsRMoAHe`5b*x#vi0qPaVEfH6sQ^Peh#&jvd?3ERJ%fYG~bgdardNaM!f
zdP6Bcw~qom7+{zGObh&s`I6oWrAbaG-yihv84p@bjZ!Q2fLDH!_1^nL-*Yhnw+S5*
zwp*LODCA(%Y!d~);iDA>9fQsK;LOx(xW+kvU<YQANRXD9vTQMxDR6PR(E8Vf7nVte
zJuF6bF3DdKK9Z1lK9s?D5i|+m&s=UYBq*G>7fSwNww5RP0h*TXj393?Fm1eh8yacg
z56||?q58~)XZg{b&A+v@+L`g`5jkknVtb}1*IoxN){8_-5X?yykrg=@JIb-?JQFL8
zeyXrhuVUCy{5x4HWh!kV@Wx)@^MM<>XgkQDss0|Z&(%Lk0&;KbuKUYOvmbjff_9vZ
z!V&3Ug<Ro{28&`If&m`Gz(|LuHtUa+q@cn~{AY|X8!0`Z9pJV&JNkTP81%EoGiI2^
zU3pSR<yr|*_h|G=a$<E6mW@IgT{1fjpG`!^aP6F$-eA>acaN~4KO_}u^sjP&Mjz^o
z!^_>ktOlDMOB0QU`hlgzwCEqB0KxG%zx6KL;bibw>&wdTX1bCun_7egOq^AhppLH{
zB|YI{y!RLk(~~2qM12bpr9^;W#h2pDW}Mxtv$rL+UGDv{q`InDR;ndyjgh;Q?75B{
zv9|d?Y!|irBe<zVkQ=c-NWj94a(B@%=4EvyBQZ<^Av}_G+K+oJLH<Za#<V-G7b@@V
zeoMI5oCr#K>p{F_ACNq2ETt61(byeq`nCdDZnOA7-D$pqy|eK!S<TZl9EYM${{~K%
zl7wKfhh9yH#wl;#eS$XooV0JPzT*dO02~oGyh4WYhYmfJN3d9LG(T6(I}m|H-`1N2
z3+f<>|0+COqp2}*<$<6YHL=QBM1Uaw;J#h_+HDwYS>7tw8|rbHYxx1s#8y4Vmv*74
zV%X#NHBk^(bnc`@j;OY#LB$GCKNBhf`Y<bZI+0+{-ckF@Sz5AH{orrumaz0|oT&bE
zbs9gsi^|ydC2aj9`)`{^!3R!=jsEj}p%%?4O%2B7@$mAqg62)$%O5^{&2V0-B#`Eg
zqjDwG?qa({<T%O`{N@D+a&dd#!M!?7R^!%{FU?}BHL_NrcMeACL@lPJ6|rD0k?%Cb
zuPW;N*7D6o6#`uDwcjxBTQ$F-2CCGUzsY`6Pks-lcEKF9$+w_zn)BedCP$19<MNHp
zs#FS(Ky)SJ4Qok<RHIZ+nzsI=t4<F#^OHKW7)@Yiw}TKUqeIn1!%7Mr;!@JM@<InM
zV{pITe)EH2@EUA(uN7iaz$U@ZF|oXkTPc4;Za!1<;wVEf(7YCEhXN5ZiPgYb$Gv}A
z-2G{+QbVQgFrwFM&cQh+;8|p8NX^rG&EdiAWOJb}fw4N{@QMyed$FZXi*Dno`Z@%Z
zvJi-j)!odK)t7XXm<HKlcK7e08MpL#%-J?M{|f)lurssvgqA`tK3FeRO0*?5@%w>}
zDrRlFt41833o_9*Ua$9bbe&X8BM=?pLf61--D2Yra4;_R2{U$1y69@{S^-bUmCp3I
z6YFj2N7TIe<LYa5$CBDF7n|!}(RpIilI(Oq64eYF%uqqgw-?v(P}OZ32wyM3&pM$k
zq|@S-Vu#ypDLx$Rk^ZTGRFofW&e74v*=}I!hIr<AL>~$lEFHWbaF2C5@f>qn`<%9%
z8-GXEpW*$b)ug$(gYl|HFYCx&_*P1R7(+>^2=XcKsQx`&DRrH8%RD(rWrjvO4`GX)
zGPW5v`Ou%-&jdQ?lUq+bz{%Ah`ow^mCEwoMTeu>~^^vHLh?fXi2(D$HaEnvP+TD5S
z9((4v6om#X`qxPnmV8AXGyj{OWT1_1@2L<FqG`t_8#@a=$NcZ_zCfM&*9g%V4xxzt
zS{637%XgwAEU*-%Rl$utz2w*4GvnOvk6a<$e8ug*GfWn&eFR}^_rB1x10M#=0Te+s
zO)c#zJ()MtU2vZd?KU<P3Gs(NJC#;};pvfmfMjfjo!g)qs)5?NJv9*LgI;fdF$QJT
z&(OOx1nU~FJc3q>FKidmyylEQ;7U|dBh5@c;eC1W{Mv&6ps3eSmg7V}7hu+J$*ZZo
z)BeoAAQ*`g{SnfUo$O<I^ZY9u?gK9Xfnw%CQkn$1D4Sl`Nw|QYlWlfJpvVv>z!t`s
zuqCu0UsVJwYT^h8)wh+LeqbXz`;B3pI2O1(nOXENn$g7cKZis!#s$}E*Bp4nHF?7j
z_zqh6^?Z{pAW!DmJd|0iC|cBI6mX|vKGy`JyIv=PQ9%v|hf()*yIPb5QWMjB_*@s{
zqRboklDvMgpa?6@z^t~4t=QOgd-&}~=T9eU*z<SLq`mq-qrL!&n83zqG5sklSPF_n
za9^J~Hw|i_TFoG_Bn3(zmv@^Ts#ux*-T}U^{|4v-xtl<Gb~7MZ10pf{OkojbhiQ}~
zaJW54J<F#i;7Qf|8Gr7?5pumxMKFt4y<s5f_W3to1r>nW1Bb>A#RStbD4(z)wnHnl
zLF7Uz4Ffk^c2Y4x8-_F6?_!M+y4$P+*~VOo!{8(F@V*4}p>%e`diWC0Ig+}l$?+X<
zS#ZFQe!BZX5(y_c6dEaMqLa5ClhZ&D>xE(^h-T{7lxFypUc*n!2Ai(M(hPcTJ4&!F
z*F|~n#rRWn67H0Xxk{}Wk=3+)S%3y}LXyOaDt={?_!DOcDZ*TmiB+E~MOOb@5C#ke
z%mABMaK~#WzON=xs-v%1I1x8^n?OGcrYQnEt8{1FeGR+F(KS5ohX+Bl$Y$$m6Uclg
zWTQDRvoHa})>0nX$x7h0Ji&=yx%8V`5^-pO5p%a{sqg`j2JCVlzncT;+eqZyc&qsq
zG_yl9(O=##3%!=mSU~Ab)eJ~WON497o?GGlmp0hC_@dhUP6PwIQwfE2{oQ$v+%Gb^
z3~V8rTDVUVsIkPs9Ytm9vU2_RyEJp|AlOh2Sc-bqZ<U=1%5Rk)YMwgfQ3I%S;J$)k
zi}2OKM0KiGKyu*%KyrSw+Pqe0t>Z#50yKf(kS)O!3q3GQ-i1xCgkcx{5uu191OSpF
z01`Ju7cBx|%%f`#Yr(U_|HXx}H5{TPII;1hS*Y6g7KPTQ5$gUJ`+g6@qLeOAhfFn)
z|2HiQv;fT#ApGO*{eyK++iMO6aRjTyQj^?JAiR@j1#^m=SqsACSFltVpIT28iiWp)
zj`R|NXZq|3RG>-9dpiK_99!fMJQ7y1XfwFbe#=G4L}eWo<31tbcRsNV^_#DFDPgRb
z=sz;iMCb&q{N{I}YY93NTohX`p5~e1-}GSlIYkj9_bhdw!-g>~&jg5me<DxZ{a2$u
zGTP7=5Gl7Dzwe|*qCW}Z<V*YU7^ZD1t|V2MaODh)`j9{)*~wSEtjQ<0rU%@4Q5o;y
zswGLJnZVR||EH-dkB74D{`VNh&I}&LK1$X+CRwr%CQF3!C`&X$r6Ez4k#!6*h?x)(
zAxp@f<#}kazLpfy$WHNOS0cN-m*4N7_s{#j&gb0s`J8iouXBCRx$i3mmDoaaz~*0I
zkf_CPW1P^|YP|A~7R%I9ty)&+DHB6{x+AdUS3QqZ3-7Q2=;^hLo7bIWYrgTaxpcGa
z0EvnAlWp8|BPu=|WpXW#lEaY1Ok~=K<60*&x5Cpf<kA5VT0SFPFF&YRFoPQ<Rjq6k
z$3&(kTs=Q%lPXS$Ugw9)k*&G@<`+~I<5)Tfp`y*MkFKTH^O8c+b2`d+G3E+3Jwa8s
z{*{w^wRmBD<vx+z(A`QgQj;ukYP(GX&g1+S0YQun8`aDcKcW&UcP^)hc*k-IoH<u_
ze*!tZICLrVH;My9kvsx2B8PmuJxpLNVs9o~Eeg}f00T7HwFhH65bN$`W?8VIU?Pjf
zgocMS4+c$Y&b|jVvLi7pMCfg{^IJgznVcX~5^(?<P6kz0q7BV~4r8U^&^Y<8L=kbX
zB(s!?@A<-}=0E4`y@mzdCg2<bAU`kK$Z_cvJbWK^I>*Paq}<m;NC8ebrjG!6-64$=
z%Ho_sEipw7=nZ9&(QaXuUtG;)S7B5<fd|SC8Qwb7psclj^;(?tKWp1nayWUf4Pt#J
z(0|)s3RlIE3gb{b?2Ea92>sf3`zt&DlZR+cp=(Mu+xy5NcPR3hEyC9R_qZ42x@ac&
zM6AIX9>|=UL~Cn{e4~pd5<4ZMTHE-})>a`)6MiO#vvCNu?2xvRt~~v(-eg&{GhOyd
zy&&`e_{ye^1*;i^1aw|xAwGESPg(LZuBMPJTorZWfD5U>;sFU6X*~BmO>q^eBG8n4
z{)(YrzO5vAyTd(aIF=rbE5JxUq=wGI7)en_yV)_Phm%Z1Q#r3%_Ga;2k(L@3@;ly}
zEM$$+id(~aU|)LziYU~YJ4FmQZ{ZT*DqX|X>H8*zXK0hV4F{;P0jhrBN*a&+BWku)
zt3_b*s=3i9srgQ0+JO#X0jDGV$N_2WUoj`UHjwN#NF`=q-A_GUJJajHQ|??Z@r6kq
z+IZS53hAU*{(j2&S`Bg=|DOHqhY@P&MVNu3tw%M(K?oO)kiW(UcfR6nJE+Q{!SVN#
zq!rNLJp3uauE2LTO6nY!<PF*22cEop#%ezH<wonMNOj5)gNY0uOt4EkS>aIKVq%f!
z_G|xVi>cnXRhtG&hxXT}0uwt~KSB@=J2B?i6LE<3OWcZYHK{osAj;+smy+)W^knW1
zjWBrv5>6i~cc1nVmB_T}NQwAmbnzzk*Z?Th&+`e6LLfAFp=`J*_f~|EzWq^2Cw!ih
z`;wk;@%|y5AmMzEF2%}&jMSu5WQPWicc-`1{Z`~MP~G?cCi1{Ry~3&U4WX0xQ5Vh@
zj}wP<UUdCA|D|$J(QI+`P>S(KW!JUeSJ{?*P2F|G4mn=I3iu4RZJ<WyiH6#Gw+_vm
z6KrCqrL^tq?ynLQ12O}ffygK87Xgp|dEyeb@I8EqQ|-lEI=`l1+?Ub-e|FtX%4CiV
zjTIaKg9-RSV~34~@EbWpx6@GE`U?eia(G|WlH-n-NnGfb*Up={U{i6tE5kbamy2`&
zcHKU~a%o60O;`axzT4=@tKVv!;K`Xu7vzFNl#Ub1t`E#~`P^mb*K1-wr)tdCTn%Z4
zGOF=}#l!D{u?;WMa(B)|Ug7y9c|_OpPXEEwp_)%H=dz-im6-!nmLpca7CZG~MR<=#
zH&_za&+!O$v$6AzuZ)E_;6gxVNhLbc_>}MkxzNC?aenfSJ!eXO3WepqCgmgr=484(
zy!ST6I^TO;xYm1;g@Wupk4es<o4ZPtjY}}7Eyjw4)^I-bC{#o7sMPZifaNzCQUOB7
zf2z0yi5q?TXL8C)mT*F#>aIZ5S5C%)x2n;({DDExl9kVk;l?~8y)Iem?5!HpB{Yz8
z^B3~<l!$2Tvw;dj6na1*`nr(=BAOU@Y4?;B&fl=U`6A0j<8$n48TV7HO^WP%FOs_c
z3budyw(LLlwXo={*dl8Ua2lD`XmS#KWaz&C*ze~{ajb;pH8Gj%b8S<0dl!P4yxC$~
z{Rre;K8duatpaa64o_J&ukJ)nB_t^}9G<Nl<w56l!~2)T(?a7sc}0Ilx^klRfbPfg
zb6HQ})1gcqHEPv`I@b5{0|=y>TX{7%6#8s40ykhsf#Jn*#d((Y%3bJ^5XcBzneWUo
z=jbr3V_lM!3}Y3>iu8tLI#M?~@*2b20p8+T{oo{nXl3P&>3qX56SsM!E$&^!3a{Wo
z;TQ}*2a9H;KXa}~oa3XL-Sq>A$D^xt3wPHnp|WXzQ<$VX3bD{MDM&Y2ftP`Y4H-1|
zepGDR0yr&iNUqj<gsUFz5Zw1*ApnBON*tKIk1g9@>z&~;lXz9y)bn=v%n?U6TYsa#
z$vNty^04O4su`cHit)OIKR@PLyFlDM{YM9KZ8*>q)+K7d^RfQn_$2k(x~6|^Ep#za
z6dM$Vh$RW-@?!A&bMeY2m9?~HN(_maG=9+s+l&^%n5o%2>jGyd#%LXPU{fVqa2<?Q
z2pDfHA$Aans^0Z~-=&U{*5g=fiGm<CZ$SUW`#Xy-*J}=YuT-Td{+&@_V~j~oXK$+s
zuJbgXksgJN@v^9#g-gz@YABVHxZ0}eeEy6tvUXJ|lD;}R(*?HxIs4JtWR!2Xx}}$3
zM%7(HQdlF+aSn2z`T=syb~o(I9sFHEh(mI0V^YQFEbz{DAH5Ro@ohG!X}RIWMFuK?
zg^f)#iy^w)m43y`YDP&1r6B7Nm&Hc3*c}nK)&?YQ?uZs}8;k4S2$MY*^ZgoAXO{)u
z6@bt7l*|mv4}oMbr1+RttjW&0Y6@wO)}y<TgoA-cH4`aiS+BVNTAEk>XuY6DfSH1O
z_ZB=p_iD^k7kf&EogJ-rWkVCd8ZU8N>q3Q-NdzP5rD+}F{MJo42Uc}|_UB;P_&BjN
zV1r#IJKf%^-=D5Yf!y(a;Zi*h-|G7&-!1gy&0GaBX)E^Tbij|KIxqU<?;)|_^1Z3z
z<20;g?HvB;g>sWYeI0&GZo#n<FOIH-;WuzeT_>b+m)VCF_LiRR3o0t^*VLE>d2U8c
zz@Q^-IH@NAH&Sn1+4;f_&O89}V`NNb4t={{2Bi23BVQV{&Mega$tvax-kg!;KdXl1
z8~;3Y0yzE_DH6+b1U~x|IN@J5KQAcb-0LEzs3H#_%7eHmn&%(UY0+skmR5dqtmcm!
zdP&<1I8sG{B1+#mt`2`(Z49jM1J<M8RqAa?Q0S}gwF5(R11o&mKm1C>K11Qx*HPVl
zmw#vCs-*3NucV;BbU;MSZOnzrXY5va^gA++i#!~^;-IY!pa(OUWBDQJeW%OTJCRV%
zqJ`5yxV`3kc8EZfd?QoJGHy00?L+bx7j!kcEDQf!Mphtu=}_feIYZh_J|&nJ#{nP%
z^BDVi32klWQJ0fcL@(XoXrrJKT4<&^%DecJH1mR&J#-?~3be8?h@lr>rczQFNy}vt
zsn%^4g+#KydeDK3`hl4^4j1&T^d&$0y0(&=WoP6q@3W0{8u>G1x^mU>n@`fG4_Y)L
z#rnYGkkLY)DcdQA)v$u+>=9b`jda+~utw`M^^}2vl7FaniO{%m`}4Gw4zi)z<METH
z%GRO@&y#tP(N^dCp2bRIb{oRC+ra9G!Ff&|=tt!>9m*Jq<1o2xe<}Nl?D#Ob)HCvU
zF%Xh*-r2)Xr#u8Af?<fzno_FqH{wg;VEDnj98>N8h0s)Kh%q7?+D~*Xa-z!l0UuH<
z$OgLxk3m|{COPkTqzwQ%hKCgYTLOP*Tb@6KOap6Ew*=Ty5N~;VD_wWCYY94Amlpox
z+ia7RW2IB{|EZy=PF!v}?pY`o`J>8HC5*aohbf@`+62sxGdoG0&hfF55iqzR%XIP3
zpm+hp24oHklEErC%Dv6f^(4eQXILoE$#b*s&MZT9eCxCC5LP-DL=CL(gWlXp;cYgU
zyS>*!q@gvakNXr0=PgJAC}Dxu?l1b;#I#!>a=4oh)C|I&pBIoO_qfm(!ypr|@F9Qp
z+IvVU5W-?bMFf3Q-Lw@gLO&>y^-HG?O#tLF*1@p!?W%31=Bvb9zyo#uIM34<)H4w=
zkbfux=DYBPt(BMS*YH^%+MiQMdNlg4;zc{I>AgYHzU|yWEa*sf>`n2r?u)DIv?d74
zb1NEl;&Tu`NYI*rdb(WhQ_cu2@PC%Ir?FZg7{?h9tO)cKN5w_W*FP1_iumDia89&o
zbd+d~SH!7!)HL*|m+>CsBrh4R@#yo~Xu6McvLtt!x>%wqeBUsnQaU!*C(`bJyZrwP
D<sSsO

literal 0
HcmV?d00001

diff --git a/samples/web-app-cosmosdb-mongodb-api/dotnet/src/wwwroot/style.css b/samples/web-app-cosmosdb-mongodb-api/dotnet/src/wwwroot/style.css
new file mode 100644
index 0000000..67508fa
--- /dev/null
+++ b/samples/web-app-cosmosdb-mongodb-api/dotnet/src/wwwroot/style.css
@@ -0,0 +1,341 @@
+*, *::before, *::after { box-sizing: border-box; margin: 0; padding: 0; }
+
+:root {
+  --teal-50:   #f0fafb;
+  --teal-100:  #d0f0f5;
+  --teal-500:  #0e9db0;
+  --teal-600:  #0e6ba8;
+  --teal-700:  #0a5a8e;
+  --teal-800:  #074d78;
+  --gray-50:   #f9fafb;
+  --gray-100:  #f3f4f6;
+  --gray-200:  #e5e7eb;
+  --gray-400:  #9ca3af;
+  --gray-500:  #6b7280;
+  --gray-700:  #374151;
+  --gray-900:  #111827;
+  --white:     #ffffff;
+  --bg:        #f0f8ff;
+  --shadow-sm: 0 1px 2px rgba(0,0,0,.06);
+  --shadow:    0 4px 6px -1px rgba(0,0,0,.10), 0 2px 4px -2px rgba(0,0,0,.06);
+  --shadow-lg: 0 10px 15px -3px rgba(0,0,0,.10), 0 4px 6px -4px rgba(0,0,0,.06);
+  --radius:    12px;
+  --toast-bg:  #111827;
+  --toast-fg:  #ffffff;
+}
+
+html[data-theme="dark"] {
+  --gray-50:   #0f172a;
+  --gray-100:  #1e293b;
+  --gray-200:  #334155;
+  --gray-400:  #94a3b8;
+  --gray-500:  #cbd5e1;
+  --gray-700:  #e2e8f0;
+  --gray-900:  #f8fafc;
+  --white:     #1e293b;
+  --bg:        #0a1929;
+  --teal-50:   #0e2a38;
+  --teal-700:  #7dd3e8;
+  --shadow-sm: 0 1px 2px rgba(0,0,0,.4);
+  --shadow:    0 4px 6px -1px rgba(0,0,0,.5), 0 2px 4px -2px rgba(0,0,0,.4);
+  --shadow-lg: 0 10px 15px -3px rgba(0,0,0,.6), 0 4px 6px -4px rgba(0,0,0,.4);
+  --toast-bg:  #334155;
+  --toast-fg:  #f8fafc;
+}
+
+body {
+  font-family: 'Inter', system-ui, sans-serif;
+  background: var(--bg);
+  color: var(--gray-900);
+  min-height: 100vh;
+  transition: background 0.2s, color 0.2s;
+}
+
+/* ── Header ─────────────────────────────────────────── */
+header {
+  background: linear-gradient(135deg, var(--teal-800) 0%, var(--teal-600) 100%);
+  color: #ffffff;
+  padding: 1.5rem 2rem;
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  flex-wrap: wrap;
+  gap: 1rem;
+  box-shadow: var(--shadow-lg);
+}
+
+.header-left h1 { font-size: 1.6rem; font-weight: 700; letter-spacing: -0.02em; }
+.header-left p  { font-size: 0.85rem; opacity: 0.8; margin-top: 2px; }
+
+.header-right { display: flex; align-items: center; gap: 0.6rem; }
+
+#btn-dark-mode {
+  background: rgba(255,255,255,.15);
+  color: #ffffff;
+  border: 1.5px solid rgba(255,255,255,.3);
+  border-radius: 8px;
+  padding: 0.5rem;
+  cursor: pointer;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  transition: background 0.15s, transform 0.1s;
+}
+#btn-dark-mode:hover { background: rgba(255,255,255,.25); transform: translateY(-1px); }
+
+#btn-add {
+  background: #ffffff;
+  color: var(--teal-700);
+  border: none;
+  border-radius: 8px;
+  padding: 0.55rem 1.2rem;
+  font-size: 0.9rem;
+  font-weight: 600;
+  cursor: pointer;
+  display: flex;
+  align-items: center;
+  gap: 0.4rem;
+  transition: background 0.15s, transform 0.1s;
+  white-space: nowrap;
+}
+#btn-add:hover { background: var(--teal-50); transform: translateY(-1px); }
+
+/* ── Content area ────────────────────────────────────── */
+.content {
+  max-width: 820px;
+  margin: 2rem auto;
+  padding: 0 1.5rem 3rem;
+}
+
+/* ── Table ───────────────────────────────────────────── */
+#activity-table {
+  width: 100%;
+  border-collapse: collapse;
+  background: var(--white);
+  border-radius: var(--radius);
+  box-shadow: var(--shadow);
+  overflow: hidden;
+  transition: background 0.2s;
+}
+
+#activity-table thead tr {
+  background: linear-gradient(135deg, var(--teal-800) 0%, var(--teal-600) 100%);
+  color: #ffffff;
+}
+
+#activity-table th {
+  padding: 0.85rem 1.1rem;
+  font-size: 0.85rem;
+  font-weight: 600;
+  letter-spacing: 0.02em;
+  text-align: left;
+}
+
+#activity-table th.col-actions { text-align: center; }
+
+#activity-table td {
+  padding: 0.75rem 1.1rem;
+  font-size: 0.93rem;
+  color: var(--gray-900);
+  border-bottom: 1px solid var(--gray-200);
+  transition: background 0.15s, color 0.2s, border-color 0.2s;
+}
+
+#activity-table tbody tr:last-child td { border-bottom: none; }
+#activity-table tbody tr:hover td { background: var(--teal-50); }
+
+.col-btn {
+  width: 1px;
+  text-align: center;
+  padding-left: 0.3rem !important;
+  padding-right: 0.3rem !important;
+  white-space: nowrap;
+}
+
+#activity-table td.col-btn:last-child { padding-right: 0.6rem !important; }
+
+/* ── Row action buttons ──────────────────────────────── */
+.btn-edit, .btn-delete {
+  display: inline-flex;
+  align-items: center;
+  gap: 0.3rem;
+  padding: 0.55rem 0.75rem;
+  border-radius: 6px;
+  font-size: 0.8rem;
+  font-weight: 600;
+  cursor: pointer;
+  transition: background 0.15s, color 0.2s, border-color 0.2s, transform 0.1s;
+  white-space: nowrap;
+  width: 90px;
+  justify-content: center;
+}
+
+.btn-edit {
+  border: 1.5px solid var(--teal-700);
+  background: var(--white);
+  color: var(--teal-700);
+}
+
+.btn-edit:hover {
+  background: var(--teal-50);
+  transform: translateY(-1px);
+}
+
+.btn-delete {
+  border: none;
+  background: var(--teal-600);
+  color: #ffffff;
+}
+
+.btn-delete:hover {
+  background: var(--teal-700);
+  transform: translateY(-1px);
+}
+
+/* ── Empty cell ──────────────────────────────────────── */
+.empty-cell {
+  text-align: center;
+  color: var(--gray-400) !important;
+  font-style: italic;
+  padding: 3rem 1rem !important;
+}
+
+/* ── Modal overlay ───────────────────────────────────── */
+#overlay, #delete-overlay {
+  display: none;
+  position: fixed;
+  inset: 0;
+  background: rgba(0,0,0,.45);
+  z-index: 100;
+  align-items: center;
+  justify-content: center;
+  padding: 1rem;
+}
+#overlay.open, #delete-overlay.open { display: flex; }
+
+.modal {
+  background: var(--white);
+  border-radius: var(--radius);
+  box-shadow: var(--shadow-lg);
+  width: 100%;
+  max-width: 460px;
+  overflow: hidden;
+  transition: background 0.2s;
+}
+
+.modal-header {
+  background: linear-gradient(135deg, var(--teal-800) 0%, var(--teal-600) 100%);
+  color: #ffffff;
+  padding: 1.1rem 1.4rem;
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+}
+.modal-header h2 { font-size: 1rem; font-weight: 600; }
+
+#btn-close-modal, #btn-close-delete-modal {
+  background: none;
+  border: none;
+  color: rgba(255,255,255,.8);
+  cursor: pointer;
+  font-size: 1.4rem;
+  line-height: 1;
+  padding: 2px;
+  transition: color 0.15s;
+}
+#btn-close-modal:hover, #btn-close-delete-modal:hover { color: #ffffff; }
+
+.modal-body {
+  padding: 1.4rem;
+  color: var(--gray-700);
+  font-size: 0.93rem;
+  line-height: 1.5;
+  transition: color 0.2s;
+}
+
+.modal form {
+  padding: 1.4rem;
+  display: flex;
+  flex-direction: column;
+  gap: 1rem;
+}
+
+.field { display: flex; flex-direction: column; gap: 0.3rem; }
+
+.field label { font-size: 0.82rem; font-weight: 600; color: var(--gray-700); }
+
+.field input {
+  padding: 0.55rem 0.8rem;
+  border: 1.5px solid var(--gray-200);
+  border-radius: 7px;
+  font-size: 0.9rem;
+  font-family: inherit;
+  color: var(--gray-900);
+  background: var(--white);
+  outline: none;
+  transition: border-color 0.15s, box-shadow 0.15s, background 0.2s, color 0.2s;
+}
+.field input:focus {
+  border-color: var(--teal-500);
+  box-shadow: 0 0 0 3px rgba(14,109,168,.15);
+}
+
+.modal-actions {
+  display: flex;
+  justify-content: flex-end;
+  gap: 0.6rem;
+  padding: 0 1.4rem 1.4rem;
+}
+
+.btn-secondary {
+  padding: 0.55rem 1.1rem;
+  border-radius: 7px;
+  border: 1.5px solid var(--teal-700);
+  background: var(--white);
+  color: var(--teal-700);
+  font-size: 0.88rem;
+  font-weight: 600;
+  cursor: pointer;
+  transition: background 0.15s, color 0.2s, border-color 0.2s;
+}
+.btn-secondary:hover { background: var(--teal-50); }
+
+.btn-primary {
+  padding: 0.55rem 1.3rem;
+  border-radius: 7px;
+  border: none;
+  background: var(--teal-600);
+  color: #ffffff;
+  font-size: 0.88rem;
+  font-weight: 600;
+  cursor: pointer;
+  transition: background 0.15s;
+}
+.btn-primary:hover { background: var(--teal-700); }
+
+/* ── Toast ───────────────────────────────────────────── */
+#toast {
+  position: fixed;
+  bottom: 1.5rem;
+  right: 1.5rem;
+  background: var(--toast-bg);
+  color: var(--toast-fg);
+  padding: 0.65rem 1.1rem;
+  border-radius: 8px;
+  font-size: 0.85rem;
+  opacity: 0;
+  transform: translateY(8px);
+  pointer-events: none;
+  transition: opacity 0.2s, transform 0.2s;
+  z-index: 200;
+}
+#toast.show { opacity: 1; transform: none; }
+
+/* ── Responsive ──────────────────────────────────────── */
+@media (max-width: 600px) {
+  header   { padding: 1.2rem 1rem; }
+  .content { padding: 1rem 0.75rem 3rem; }
+  .col-btn { white-space: nowrap; }
+  .btn-edit, .btn-delete { width: auto; padding: 0.55rem 0.5rem; }
+}
+

From de9c1d6564bb29efef5eef1597e21f98174877af Mon Sep 17 00:00:00 2001
From: Paolo Salvatori <leprino@hotmail.com>
Date: Tue, 8 Sep 2026 14:24:45 +0200
Subject: [PATCH 07/20] Add the .NET version of web-app-cosmosdb-nosql-api

ASP.NET Core Vacation Planner storing activities as {id, username,
activity, timestamp} items in an Azure Cosmos DB for NoSQL container
partitioned by /username, through Microsoft.Azure.Cosmos in Gateway mode,
under samples/web-app-cosmosdb-nosql-api/dotnet. Same endpoint, key,
database and container variables as the Python version, md5 ids and
deletes keyed by item id. Against the emulator the LocalStack root CA is
mounted from the localstack-ca ConfigMap and exposed through SSL_CERT_FILE,
the .NET counterpart of REQUESTS_CA_BUNDLE. Verified on the emulator's
AKS: rollout, port-forward and in-cluster smoke tests.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
---
 .../dotnet/README.md                          |  70 ++++
 .../dotnet/images/architecture.png            | Bin 0 -> 42039 bytes
 .../dotnet/scripts/00-variables.sh            |  40 ++
 .../dotnet/scripts/01-deploy-resources.sh     | 174 +++++++++
 .../dotnet/scripts/02-build-docker-image.sh   |  18 +
 .../dotnet/scripts/03-run-docker-container.sh |  92 +++++
 .../dotnet/scripts/04-push-docker-image.sh    |  40 ++
 .../dotnet/scripts/05-deploy-app.sh           | 132 +++++++
 .../dotnet/scripts/Dockerfile                 |  28 ++
 .../dotnet/scripts/configmap.yml              |  12 +
 .../dotnet/scripts/deployment.yml             | 104 ++++++
 .../dotnet/scripts/namespace.yml              |   4 +
 .../dotnet/scripts/secret.yml                 |  11 +
 .../dotnet/scripts/service.yml                |  16 +
 .../dotnet/src/.dockerignore                  |   2 +
 .../dotnet/src/Models/Activity.cs             |   4 +
 .../dotnet/src/Pages/Delete.cshtml            |   2 +
 .../dotnet/src/Pages/Delete.cshtml.cs         |  21 ++
 .../dotnet/src/Pages/Index.cshtml             | 265 ++++++++++++++
 .../dotnet/src/Pages/Index.cshtml.cs          |  47 +++
 .../dotnet/src/Pages/_ViewImports.cshtml      |   4 +
 .../dotnet/src/Program.cs                     |  48 +++
 .../dotnet/src/Services/ActivityDocument.cs   |  19 +
 .../dotnet/src/Services/ActivityId.cs         |  15 +
 .../src/Services/CosmosActivityStore.cs       | 112 ++++++
 .../dotnet/src/Services/CosmosOptions.cs      |  26 ++
 .../dotnet/src/Services/IActivityStore.cs     |  24 ++
 .../src/Services/SecretKeyXmlRepository.cs    |  49 +++
 .../dotnet/src/Services/StoreInitializer.cs   |  33 ++
 .../dotnet/src/VacationPlanner.csproj         |  12 +
 .../dotnet/src/appsettings.json               |   9 +
 .../dotnet/src/wwwroot/favicon.ico            | Bin 0 -> 36791 bytes
 .../dotnet/src/wwwroot/style.css              | 341 ++++++++++++++++++
 33 files changed, 1774 insertions(+)
 create mode 100644 samples/web-app-cosmosdb-nosql-api/dotnet/README.md
 create mode 100644 samples/web-app-cosmosdb-nosql-api/dotnet/images/architecture.png
 create mode 100755 samples/web-app-cosmosdb-nosql-api/dotnet/scripts/00-variables.sh
 create mode 100755 samples/web-app-cosmosdb-nosql-api/dotnet/scripts/01-deploy-resources.sh
 create mode 100755 samples/web-app-cosmosdb-nosql-api/dotnet/scripts/02-build-docker-image.sh
 create mode 100755 samples/web-app-cosmosdb-nosql-api/dotnet/scripts/03-run-docker-container.sh
 create mode 100755 samples/web-app-cosmosdb-nosql-api/dotnet/scripts/04-push-docker-image.sh
 create mode 100755 samples/web-app-cosmosdb-nosql-api/dotnet/scripts/05-deploy-app.sh
 create mode 100644 samples/web-app-cosmosdb-nosql-api/dotnet/scripts/Dockerfile
 create mode 100644 samples/web-app-cosmosdb-nosql-api/dotnet/scripts/configmap.yml
 create mode 100644 samples/web-app-cosmosdb-nosql-api/dotnet/scripts/deployment.yml
 create mode 100644 samples/web-app-cosmosdb-nosql-api/dotnet/scripts/namespace.yml
 create mode 100644 samples/web-app-cosmosdb-nosql-api/dotnet/scripts/secret.yml
 create mode 100644 samples/web-app-cosmosdb-nosql-api/dotnet/scripts/service.yml
 create mode 100644 samples/web-app-cosmosdb-nosql-api/dotnet/src/.dockerignore
 create mode 100644 samples/web-app-cosmosdb-nosql-api/dotnet/src/Models/Activity.cs
 create mode 100644 samples/web-app-cosmosdb-nosql-api/dotnet/src/Pages/Delete.cshtml
 create mode 100644 samples/web-app-cosmosdb-nosql-api/dotnet/src/Pages/Delete.cshtml.cs
 create mode 100644 samples/web-app-cosmosdb-nosql-api/dotnet/src/Pages/Index.cshtml
 create mode 100644 samples/web-app-cosmosdb-nosql-api/dotnet/src/Pages/Index.cshtml.cs
 create mode 100644 samples/web-app-cosmosdb-nosql-api/dotnet/src/Pages/_ViewImports.cshtml
 create mode 100644 samples/web-app-cosmosdb-nosql-api/dotnet/src/Program.cs
 create mode 100644 samples/web-app-cosmosdb-nosql-api/dotnet/src/Services/ActivityDocument.cs
 create mode 100644 samples/web-app-cosmosdb-nosql-api/dotnet/src/Services/ActivityId.cs
 create mode 100644 samples/web-app-cosmosdb-nosql-api/dotnet/src/Services/CosmosActivityStore.cs
 create mode 100644 samples/web-app-cosmosdb-nosql-api/dotnet/src/Services/CosmosOptions.cs
 create mode 100644 samples/web-app-cosmosdb-nosql-api/dotnet/src/Services/IActivityStore.cs
 create mode 100644 samples/web-app-cosmosdb-nosql-api/dotnet/src/Services/SecretKeyXmlRepository.cs
 create mode 100644 samples/web-app-cosmosdb-nosql-api/dotnet/src/Services/StoreInitializer.cs
 create mode 100644 samples/web-app-cosmosdb-nosql-api/dotnet/src/VacationPlanner.csproj
 create mode 100644 samples/web-app-cosmosdb-nosql-api/dotnet/src/appsettings.json
 create mode 100644 samples/web-app-cosmosdb-nosql-api/dotnet/src/wwwroot/favicon.ico
 create mode 100644 samples/web-app-cosmosdb-nosql-api/dotnet/src/wwwroot/style.css

diff --git a/samples/web-app-cosmosdb-nosql-api/dotnet/README.md b/samples/web-app-cosmosdb-nosql-api/dotnet/README.md
new file mode 100644
index 0000000..9475de4
--- /dev/null
+++ b/samples/web-app-cosmosdb-nosql-api/dotnet/README.md
@@ -0,0 +1,70 @@
+# Vacation Planner: Azure Cosmos DB for NoSQL
+
+> A Python version of this sample lives in [../python](../python/README.md).
+
+This sample demonstrates a ASP.NET Core Razor Pages single-page web application called *Vacation Planner* hosted on an [Azure Kubernetes Service (AKS)](https://learn.microsoft.com/en-us/azure/aks/what-is-aks) cluster in the cloud on Azure or locally in the LocalStack emulator for Azure. The app runs in a dedicated namespace and stores activity data in the `activities` container of the `vacationplanner` database on an [Azure Cosmos DB for NoSQL](https://learn.microsoft.com/en-us/azure/cosmos-db/nosql/) account.
+
+The application uses the native Cosmos DB NoSQL (SQL) API, with `/username` as the container's partition key.
+
+Before installing the sample, make sure to create an [Azure Kubernetes Service (AKS)](https://learn.microsoft.com/en-us/azure/aks/what-is-aks) cluster by using one of the following scripts:
+
+- [scripts/01-system-assigned-managed-identity.sh](../../../scripts/01-system-assigned-managed-identity.sh): creates the cluster using a system-assigned managed identity as its cluster identity.
+- [scripts/01-user-assigned-managed-identity.sh](../../../scripts/01-user-assigned-managed-identity.sh): creates the cluster using a user-assigned managed identity as its cluster identity.
+
+All commands below are run from this sample's `scripts/` folder.
+
+> LocalStack note: when running against the emulator, the `LOCALSTACK_URL` variable in [`00-variables.sh`](scripts/00-variables.sh) triggers installation of the LocalStack root CA so the app trusts the emulated endpoint. Set it to an empty value when targeting real Azure.
+
+> **Running on LocalStack?** Install the [lstk CLI](https://docs.localstack.cloud/aws/developer-tools/running-localstack/lstk/) and run `lstk az start-interception` to route Azure CLI calls to the emulator. See [Run against LocalStack](../../../README.md#run-against-localstack) for the full setup.
+
+## Architecture
+
+The following diagram illustrates the architecture of the solution:
+
+![Architecture Diagram](./images/architecture.png)
+
+## Deployment workflow
+
+Run the numbered scripts in order from the `scripts/` folder:
+
+```bash
+cd scripts
+./01-deploy-resources.sh
+./02-build-docker-image.sh
+./03-run-docker-container.sh   # optional local smoke test
+./04-push-docker-image.sh
+./05-deploy-app.sh
+```
+
+## Scripts and manifests
+
+| File | Description |
+| ---- | ----------- |
+| [`00-variables.sh`](scripts/00-variables.sh) | Defines the variables shared across the other scripts (resource names, image tag, Cosmos DB account/database/container, partition key, Kubernetes namespace, …). The other scripts load these values by sourcing this file. |
+| [`01-deploy-resources.sh`](scripts/01-deploy-resources.sh) | Deploys the Azure resources used by this sample: the resource group, the [Azure Container Registry (ACR)](https://learn.microsoft.com/en-us/azure/container-registry/container-registry-intro), the [Azure Cosmos DB for NoSQL](https://learn.microsoft.com/en-us/azure/cosmos-db/overview) account, the `vacationplanner` database, and the `activities` container (partitioned by `/username`). |
+| [`02-build-docker-image.sh`](scripts/02-build-docker-image.sh) | Builds the Docker image for the web app from the [`src/`](src/) folder. |
+| [`03-run-docker-container.sh`](scripts/03-run-docker-container.sh) | Runs the web app in a local Docker container (no Kubernetes) to validate that it starts and connects to the database as expected. |
+| [`04-push-docker-image.sh`](scripts/04-push-docker-image.sh) | Tags and pushes the Docker image to the Azure Container Registry, on Azure or in the LocalStack emulator. |
+| [`05-deploy-app.sh`](scripts/05-deploy-app.sh) | Uses the YAML manifests below (templated with `yq`) to deploy the app to the AKS cluster. |
+| [`Dockerfile`](scripts/Dockerfile) | Builds the Docker image of the web app. |
+| [`namespace.yml`](scripts/namespace.yml) | Creates the Kubernetes namespace. |
+| [`configmap.yml`](scripts/configmap.yml) | Creates the ConfigMap holding non-secret input values (Cosmos DB endpoint, database, container, login name) passed to the app as environment variables. |
+| [`secret.yml`](scripts/secret.yml) | Creates the Secret holding sensitive values (the Cosmos DB key and the `SECRET_KEY` the app derives its Data Protection key ring from (so antiforgery tokens and flash messages are valid on every replica)) passed to the app as environment variables. |
+| [`deployment.yml`](scripts/deployment.yml) | Creates the Kubernetes Deployment, including the pod specification for the web app. The liveness and readiness probes call `GET /health`. |
+| [`service.yml`](scripts/service.yml) | Creates the `ClusterIP` Service that exposes the web app inside the cluster. |
+
+## Accessing the web app
+
+The app is exposed through a `ClusterIP` service, which is only reachable from inside the cluster. Port-forward it to a local port to open it from your machine:
+
+```bash
+kubectl port-forward service/vacation-planner-nosql 8080:80 -n vacation-planner-nosql
+```
+
+Then browse to [http://localhost:8080](http://localhost:8080). Alternatively, use a tool such as [k9s](https://k9scli.io/) to start the port-forward interactively.
+
+The app also exposes `GET /health`, the endpoint the liveness and readiness probes call: it returns `{"status": "ok"}` when the Cosmos DB for NoSQL container is reachable and `503` with `{"status": "unavailable"}` otherwise.
+
+```bash
+curl http://localhost:8080/health
+```
diff --git a/samples/web-app-cosmosdb-nosql-api/dotnet/images/architecture.png b/samples/web-app-cosmosdb-nosql-api/dotnet/images/architecture.png
new file mode 100644
index 0000000000000000000000000000000000000000..dec8134b34ec7f6d246de07ea6f1fecf9946a978
GIT binary patch
literal 42039
zcmb5WbyOVB_UJo62mt~lAwUQgJPZMXCuoAZ53a$T;4Z-uoWb3l!5Q2kxVsKPgS*>p
zzUSO?f9tJ#-g@s3R<Ew9?yjodwdJ#S^Gi-f6bs`m1_%Vg5*HIv0D+Kgfj`1$$UqCs
zOIQOqpxKK{3!`m6Lw%0&&hR#C253UJ5mU1Rfk@jQ|B$Rk9Qc67C&pi;zk)#J;h492
zs31_*Z*ifoO3rh;i)ikO>(^+9b`@M>yj$L}0{z7peM=R15`<t1?bm2Q>BuVUV6U&j
zZAIRFB1e5q&w8|fJoiCn5ST?(uh+oP8d=Ou*nG&%3y8=a{A)VK)^b35=;CIp42?Qj
zb3xcG#VIpC2c8GgTvl^K1CHw0eh}a=^sX3~gw0buJP^p6^;r?nl>Ai{=(zm69Socp
zzfeX3fj;?`0h4bf{Qr3gPR{N#Yzy4RcVE>m3femdqbRkPl*rAUu{4aXu+&raw-rGk
zhNtadp4ViQ!C{_%4(C{nO7;2*f5g|diSSX=iR-XA$1lAv>A3ui1S-bV!!wI?w|^Lo
zJSC!R54WB$$f5GWGQs;oI$TmOcHbEB-FCwp3o*DWlWYGh?egRb!grsVT`VrRs(dJ(
zP%Obp<PtJZG0G!6nGM@LEepGwqFr40#B<r3kax`Vft2f{8|SH0IC0habT&W54}n=1
zvGc}TnWenZC^kDNdql$QUIqQM_PKkGlpC%AEtV1RiirhO{ne>CH}amlSvsus<i8Yk
zJW$#6r{Wrl-?^A8PhMzTIG8JKY*&i>)ji(AHOn6>rS|D~U|La@QL?|K{(<D``ZL#P
z@BlpT&Xa}61#YoO!!ak%{@pdfj5|SwbW6OPmCKQQr=`m1qYL<Eqz0RQ75CecXTfUz
zT0_DvkBVcn!*Wg&rPJ=jfcW`#*RKWymuDJ}+ua)HI@#I0HeRtBJWe&c>DN46LvG#A
z;=3tiZ<4RTkdK%vmhYRyGP>W%56zw^NvAWAG`N4KN{j9gwcHlrj%qI}3+E@zOMNxB
z|Fx*5h4yRk=G(b|?-OboPDkEb*4L59E>rwW9KQ-u_D3B|ubNd(;mc2J5?DEk9W!Yp
zJt@r2JQ7D!rQJ&1xurckG>2eRG3OOn7RaFV0`lS?Z^e-a_P#fN<O~t2@TrW!>sIEF
zU!+6#qr#PL@Kon&5N+swn)>o@0_{WliYeyx2kF6YQCegH9B#PzPo9D>1yxbmp~&@N
zH^PdXM0nBVZY^UBYYc(>DwTS4>*1yr)E{Y+dD@#lJ6z4bSNmoQT_PmD4RkC<&owQ_
zbf|zpL+Z)m`;9WGK&4z9`Jy$2*Bs?GYlLtCB2X*K3+1oUiYQW(PqL3zOV*Ql4-j^3
zHP(Bn2tL2;vNWz#mtOw#BcdRUHe++AUi}2Ko1xEjiI|aWJ&rBJ4>I=LXO0Nj6y7gg
zP7c_l%==W_wBjPuOib?#k1cA%cT$(?_SEXLeWZ7jRt)x>2td2fVBg|@mp*RG_Xdw!
z50Iz-zV+PX<7?H%M@u#W@TK{iu=H<uR<g}e_ZB}EP*OejMgegk=}m^&6X2*OCdQ<`
zzBz@}SzKJ4jS@1`@QF;>xp1l6?Nl^GCdIiiaR=`Cj=aGN2}J>oxW6l&BZ1chLL1Q%
z>9`29hki0sNhjAtdFffb;T{S(A7NIK<`<o#9A@Kb4%K!DY#{%dQY<%~<9iPJ<l6mv
zbcx<kgG<pqptkLj12kg)LU|7xUES@RcYm}`gVldesHXX)zF1<d1r%yf<TWrfO2`!;
zZOoq49iqEW#M(T#-p6V&ES>m$!9Jj&&h7pNHzh8LU$%4&O=hNWTpBtwKo#4<dB!pO
zVt#KW;;z&^(pkYc===qzc3}I*W-JgJ$=6jCB>0cc%J_5g6FTrp$7Q^zKBO;f*{9OH
z$lZg>z0m0>F+-oj9E*hYqUH(Vq&Dkui0d^V-+8=T&C(gJ?n(1=J6nvTAFq!^q<QEK
z@_2~%H^iQ{Ku}5rjEzhSR-CuKo;#Fh>a*AbKdl6mk|H+lRFHANxeuv^?s#k<@5l()
z+)L@KTp3D3O3{!%3nbGK#agSAXEi7Jqt-YdKY1AhQoD^;%sh$a!FOm;aSAdr3b953
zNn_~YO}u@>ERwZ9!i<}lNHt&7Y+Hc{aud-Wx9|O&JTznT?(UBTRq$kj0>SSZByXA@
zWf)IILPiIao&LT#c}v4?S(IoVX75*nqc7??Y2^iz9fk|S_Y=#k;=?z<*@CdN>4anM
z)r<tP)p^jDsP<<ZBfAy}>lYe`53dfXsJC=PTMATNo`j}@bm?CxXUz7tl-2gn7z)fq
zMx)SLG*uauRbM;<wW|KxD9rzNbMOO+iv(eg=rwyv8JLLzDwBU!q#GZ9?7F9lJ#Tk6
zUbDf$Qh^Mr(gm84X~WBKriTn0K28w2TlRn8hxb$Mm8<Vy&;BmtZYAbknLnzQe}ljR
zS-for$LAXDCMLI|d2Ky!R-Q9-1$31`K*bsZbD_9?M>Lhf_CUvP^~e+XCX@jZ*@tb+
z-nWhvUc#?`JE4Fy{Cxhj5;tbgbNQAEJ6wNo@2Z!^^XSkgD9o&M{Uv<0p1^f-Diy&i
zC|{VOA<@k^O`=;e-|-SL^UL^SGZAR!ok5ZATd41S6;rL9XzI|i`3~Ae@Z0ZeN}8ji
z9)eGw<LDYsC3H`C?lC|1Cia7T94w!-6EFEZt0U)hSWW6H6o)UXXYO5ajb^ecotWw5
zUDqFD?71YDp3t*H;CHkLYTZbG_2zj|b`S>+&XTGkc5+$D-i_x@$pB-AJI9p$&x4J*
zi&c7!w5|FoE=wP?rFiXc4wAIu?{|i9W#lUgU-C0N*y|2rn7;J7K2RIiy!2<!DsDie
zz8%@-NT}O9KAnt|xoTLcCU`J8c`?Y?1zVQAoeLk^eFdzJ_Xd*Io?xY1e67oQEoByy
zb!V3-NOxQg{rRJj|3?!ge}(@yi(hMvSF7|MvR6mfr1cK-=+!w6p5q0sx?4C1^Z`Q!
z8O4}GGxoN&R89>xCbh-g>M{97*8G3~<h>5exAr@aWb=NF`(C_6XA0fjnsZ&X6Bek|
z_Jy(!QQAREsnazXEvZtU5>3f-P^&U|F*2Iia`8aSwnvb>!lvyg4j*U+(+{%j{X;o$
z_<AjtvKZOB>5D2Vb}gn$7~h%pDL0t7X%pq2Hmi_>gA6Cv`R+vz5}SA=@21u(?AoKR
zWZ&gfoKk)<wqftk)F)K~E?JV_jk1p<5u;=n6@(zJ*AMx=j8TSa>faO6!+ZWdrfB0%
z8|p3!E|R-`8vHQYaa9+F9jaqlB30Kcm5{MQ_a5w*7i636+K`Ek53(R_2eYl&`rN|K
zu7WW9&pY=$7CeK_%?8Y5<9cHyE+@lDT}!#&=Q&eUAbVR1s`|S^`jjYDHX-Z1+k9tJ
znD^F>PGbqq=c%{0VYk;!+owErEqP^j>H29L?Rw<(D$fXdW5$E?E4aE-ymOoF<Q?#{
zi1a{ZdVkHxwjC%mGB|TzH884}1x_l|ZNnC+Ynb9pbE6H!deYp?O4P6SQOWlBE*^^I
zVwrF2ca%O(985|XSN%rzX6T4%l`Ac(3%X7P*DL1Gkqtv}bX;Y*bIpo+BAbsE7p;dN
zX1NAah#0-FAozLkQ;^APKS+LDOYPD-TKfWNPVv<1BQFOc9fyw+W;;s)uRLb?d0oy*
z@#XPA7R2q~33JsO*ZF4xa}!gb;U$eR8>vavs)mR?JN_R!)^?sweCpRot#I;Ufu{Ba
zKM%COTLV4^JvZd)i+N+~$XB7kh9V^}uq=E7>i7C-{V!L{)6-WAiQPgCndM|43!=v*
z-+8&u6*)O7T5I46nkV}+D^(|M-jJ-t-8aa;c!fe1S{&&<sem)5=8f_SxWcLosY6WJ
zm02_rlKq!t`_P`qM^%aFRvV#Vf0bN53;wepVecrDzA;RXcdYbTQCyw`^)DteNd4JF
zosZt)o!^{Oj|mU{-@kl**4Ni&4t6gcE6*iSK+E_QkdMl)2|NR#tIcnN)+FczQGX7E
z4}w607!?qco}&*}zgzka7K)5+{Fk|pHBpEI?7yeX_sc8d74MbW&Kjboq^Gw#OFc;=
z+{|dXSjIK1SY-iAcJ;&R<R?Rw;hRPECxrIe&p>eOS@2&KIz<orDz<&8f+b@T55F}2
zgS>I(KZ)P2WVR^FIiRKLE4|arFMeg`@kfJY=}+_W^mryUnf>oEky;%APmGi*7yE&)
z=DOJj(?ciW?}e4DF}$%<=-Q(?wJ$t_Vx3mI`m;%i)Rkj->XLUgx`~-jlx;fEm@=qL
zyfzK#)Y(nvS6jS<#hixRd)Qu(O^uWn@^xN_EQ=Dnu}TSI^j9VMM~1S5GXw(<6{PD6
zI9Jm?N(qrEJb;93KLm;S2(@vaIc>T@GO>%egACCnvchW6o;PI<<fkTqK#4?tkdf-I
zMH=qD7>eMr{*dk0E9nb<z6>H^=DtX+G{E>v+KF-7!7r0w_V|bDC)=<kkM>`(W3!sS
z{X9?cOpee%^L}L*^#;_rkk-^;rHfPUL3uCpzn>!eBzsyI<=-hFd-Jx&w5IQTDICbY
z@?9{2<K*fD8EP1~?;U=YOTQfv{9-$+nZS~xZaQZ6o%thZh5}GN3W-ABvlDyeS=!v|
z8@#{Dwt#f4{~aa4{|TwmWp$SanqQgb2E}D(ThUJvJQaPWWNB&^jfs%_*<c82)dn=-
zCz~RL=0>Q5%2vUxO;&+ZO0?|iH6^GF=ULH+DwVhv10I|E!+=S~F^aX2GRWj=1db63
zrB{3#QqZaQ`N5`OVvZXVG_nR5Zu!{Q!jRofJ&)=y<C}b-FOvRc7#j@=<eU{3?wKJO
z=PE#m_XRT$Xq1djn);X)l8*smAOWoF@WjW2Z}w)GAl)n*1USAFGwpa)zwtZBJJ7}#
z>oN9|qXQzv$Ea^vTPBApqjq4<4GE-+`mCt6iD_8ta&1^~Y6%krq6akaW5CF$hP=P7
zBta!%Seq1F?eqlHIu-#Fh{{)9`Aq~W69q2gt%4zYFaF!fom2L4Gtoc=HTYZLB|e!`
zMr!2)6#fM;QII1L>pjM!z|Z>`mUy6DU{jgAdhC1yywHW4;{|`5aN?SCZ4gKm3E2AR
z8DDhwv_POTWZ(f87)6E(IV`HX274q(pfWZC;JL39gAHxX4^Tngc))7>=NYw|?_Xy=
z-XHgW4yIOxBFa!jqPU3w1XA_}o~PmYXN-VWM$L^01S$sU;nfBLFS<<Qe~xaM^l<`K
z|8oNWAA4>7S@V0mo$TZ7#G?x_>e{E}|Ig5ylKTpyD=_{qWB<<}tUB>tM?TzKyU2&b
zVY$(eH6`(Ys^jW&Y-ErsvI54k2vPaCUD5PsXO{*SXTPg!B{4&4XyMp#(DClTB&(6C
z+W}y?p8(T(`N45}v1qz(rg9S11+`awyusdMY<_VL00z3`!0?6!+zN>pUTjO<syuj3
zEdi_153quvGV~ov#fU;=?-bySaf_;041(0U1gvvh6|Qo2AxJk6Fz@<_es~37&<wdI
z`g3A^+$nBq>c?)_8QjnQk**f?0Dv(#KKsv$|E~yQr1ax=J0UrfFGZkZXWNZ}>x~5B
zqvKqRgrU<~yxXt+cJP5?$_LIebVm+-jwk<eZnYP?P-1h9a%j8wJk0lN8D1$8q*WBY
zGqNf}1-d*2K|hdWNcC2`wdi}@(o>Qu)`c<7me*pEbPVjIQx>A7MP`36_vRZ3PI-2L
zKpQ{^iUN4h{|<8wD&y#fZ<WtHthD#fq7a8FLJVSZ+XE3^dPn@z((iiTCv1)-wi#Ii
z&NNN>i9kL9dIIyF;D(}7XW$XDVloEq*}%9KkM3!bXZG^E>Gsa*#(nI&EQ*vWW3gbZ
z_sNm$gTe;40mXOqNT2~=8=olz4)hZdh5dwAlY_i-10-}m#!7xcg!$Cb5xOhLT<Oo@
z<pvdsvw1DaeVJ4`FX7@a5qPa*T;O=e7gd_3cwwdo^2SG>1;6R<rQFSNf<DE@SrU`?
z!JTei^Wsg*4Dk0Lj(m$Z0*)IPv2$@<3>k0P{Grxyw=p?!^i*bM&gKLR@`eej+yELP
z`78CuM@8}f28o_a&b}m`p{cd%_KR-*YOzf;^%T@f3M{xDKq3DACBQD_)qmWmCi^dx
z+dxo{eSR*er@qkTQD`D@^jhg|Ivap@@|}W?Hv%$Py>4}FE_%M2533Z$^|h4EbR!hq
zijx>BZ)f<q{bZAw^~-WYqzFJ31g>hxC=yl!vV?FKjkRS4O6_~g7TdYk4(Tb((+Ac1
zN5Pa=-{~()Nkh+vKGkiF(ow#D<SQQ73lcw-oQ%crU97kF3{9`bHHDzi)6y&*wVl%m
z*}}a#7vF-!2%f7oBlvT`V~&9RK>EM46zRt2WYq;kd&DVTn#LG(PyT@;@XyMSRF}rn
z<=b;|Dl)8{8EcQR!J?Gku?KGcmKA4z>y;GY=l!UFV`We@@&aneIJc_V%=$sM<XV<<
zIwlExea>zUi6n{rz{}GVr&=_=+>k(JcgI#Q`p{s>Uzc**ND&y#y<mBB6a#xR_!MOE
z8qk{0#HF;l@1RL>l8-n^{wra_1^uGHlI^7(`#f?VwxL}&yO43vkgIb^hW+mVl&$*J
z`A;r>9(LQu?UBYkX4U;uo{J!mkpLV6Yjgsn$WCr^TWel9oO+Q~u{>XMiEI8eXRG3H
zK=NMWQfuk<9ClHa_qVvaW_$wHz|!#iWLAt@VY|5I!0jZT3BT*^jwkJ!n;eLB?p}$o
zpn;P7Us?e2^T}627dQ+(21J0ft$a^SSD>J(tHFBnDX<P5b{F(0_<)$}&Xu5{ALYc(
z#!8lrZ>b^udoxmhd}FiOyzp%v8mD0euvlrNm{#3Hwc#rnud$e-YU<Zwc?>P)d((hH
z0)iXew>YAS9o53upH**Akw7-+dU#TbgQhB2R2tRifP=UE3hdLyhOnZ0hx4d(zpw)4
z>CqPTD7Se#rYy2}FiadZC9$>~(F4W>@CQDo7sApPR4fuKncvg^i%tyo`LDz@Mv{*E
z2g>{tCb9fI=8TWuPu70MaYA}dhZ+rI5$Wrn6ZrvFnU?I*H&^<FEFi<APXGr5A_^?)
z%ej1`W`BwqIGxIDv;hQ{!Z+B-rAla8;^Nn-9^q&g2ZjSb3^s&)15JN8MN!H_ayCcX
zB4=kL&Q#C>OFbaX$RezZzl``!je1TQd<wrZ;^YOt-?&TMa+{YMt}i$(iTd_J{U7h!
zHefCHCOj+~@#dwcdzMUqM8ypDAKYFcXvWhjjCVN4n@%L0*SQbQ@3cJfjD)QgQrxs?
zgpPV8jId`87YFutEmq-TJ(X7k_&1ks6^a3{&>J?_vFq$4qChka=7zJE%=9Qvv=&mt
zTq5GeFFc<g9C+9E1STx6iec!L$mpPbc6>P<#&g-s$zEsVN>3a3fN8V67xWSxDIHZn
zbzQ1A^op)STZ7~?i&<yn;tg3Yv@eM$m*MXTAn_hJfeeb4!-M_Q;Q;RJNiGfV|7`a`
zrE-^z;LI`!z^`-Tp8N@$+xJd=Q<m54Tj3YEOWLuqvbou`UFQ#b<K7P>iKFHH=H0f8
zFhUETY2l((>a3GD?{XJ}aI9TvURFg_y4I`qM7%F*x@2V^_rIM}Ejp^gRdlLme|$*+
zWqk>kZwNJl=k+7rZ|=G{t^jCDN0#^V>R2h2fvdfidh-F^-ftCY-ZCS#%m(MyQ_edv
zpUt=1X$15P(!AQPHl8;xpoIYryQ0SvenRFgN<m<iEg)1#L}$T+7}sCFQ7p`7Nf2<W
zCq{Y=QU?Uj>NSm(c2)OP`@+Xpw@-(Zm5DWar%<BaTrKfz2jZ-X%>tVcz{IB0vXaIZ
zx;uX2>1WapM<$ND_gR#*LX-2>I{yY!Y;inOr^OYg{rV;;-Ltk_O`4f5eDHj5r2?;3
zN&17zWluUAw*<tXUP9QK(KDObSrk>vsXDr^hXfg9lKVorPTp3(d8bxqrYtV?H9%xD
z3efOn7rDYO8aFa^0N!IQqow`n_<4fQley{c^|cb-`~sws9jM)>lyV=-AJwt-NOFbQ
zMjMI^2a;iU;-2+PceN3DE@pQqlNYE8EO!@Z&|iem8<xbB=A2qbE*Gi(!lA;kO7%n$
zY)lXw%LCa?umL~r$q+zn2l?Dmx0P>p51nEk*eJ|IY%lMd@@DCLaN#<MnO45L%wlZT
z=dr2%1k*Jesg{B6_2vR`dVEBt4)fVb=7{i83lir2wa!0nfwUIYLMPxXY-b1Bxc+>@
zYLw0bJE=kH#*m;n&j-D!0=4tetuw9TV0s^5*NlRnULmm=m^nI#)cJ#ryC|+rY86+f
zQ9!y3fYJaZW;o;DY~{3v^MJ}M0R#q;7D&m-Bnbs{UfFlx{K+G5`3<;Eg3(|J(+rdD
zZY&Ov?&=F=jURwN<HfATZ0DQwZM~{qRu|KsTiyThI?Gz?7*@bC{VQV;yT_YW_{-5k
zwAq3CVEvG;VlnF`;Q1TUFOwlb9Yg6&M4?m)1#fc3Sa9CPwElDJI)Ei#&Gv{};y3M_
zTwo;t8}`9&(J!Y!ZCciI)l;|R+?#cQ4-(r*Ey8YU5f2?WTs<4U$Tb8UsIW}0TQf3F
z!3CaGhGk}|4Z0AoeA|+uY&;r<cD`$8^~z~XkoRvv>W`cN{OA2{3`VzTpd)jXP~R2!
z6Y{|UA)b=Un99AU(`{SOvz+T3B&8y3eD*3B@K;5pT!ck}LKbhHhF*N9z=^`&x|_VB
zzT?6%T{myS0kk*Q3uQ|UORPf)2dpx$VN{*4P0^a0kZ3nXSp<P;^+5Q+-`!ThC3MjF
zvzS&m!0`v}6B0H^KI!dLi1(eIwb)F;%>riXDzC3y)NYyp?Tu_u^w>>mQgft=@52uC
z+I9KI2;MEubhu@vxi6Nw>(<;v*vqzW_JYqqj%c%Hil);CtU$^p32fm1D~aHPS8|g=
z+<abDDUuN+JGTNA3Rgd>KH#;b%4uv5;s$|q*}(yASx4cw8V}}VZ&nTvK^`G@)j?7V
zw_!{-o8E>_J!y5DEhYr7j*c8q17)$^mYr+*M=u8UtyH=A)|a!|6V?KH`#7Au<@T*t
zOXoHj2C4J1PvAP)o3`Hp0MYZ>(<!&c*j7gZC1NTe&w~MLaHM4|`_n9pV8Kd4roSLs
z^<N>&EZC;>Lghi5<qon?^XO&If+1iP-n*7e6`Z)Y$x#D>8&oG6ZgEN6k#RLi5lKVu
zK_H9ZCgUP1kuZd^f|{yypLO`TXHJx$hn=ULe8q`9Gu=-Qk_)MG8-f)AbP(uo#m-DR
ziK2KJF+zK$bzs=xHOAs3Ys6KrLXR5JVd)I!Ke3xZiynkF_pQ_yL9HiAI)_3A?7w^C
z6#<?I+KoyHfGFyNF(W6%9=kRehFcbGbSZ@nV029&g4T0vPw>$Iw{>8D#m7;~;neXX
z<$DTa_GgwwAl;f>`eGv`a3&nDk~yZcOB#1kTnd(7vfycVu(310ufj7j;F7gGRewp=
z`;bUy01u6OkR;7c$5rdLqGycw&T8b`@BL3acMd^cxQV04&F9F4){13P(s_AY7ukJo
z5GNlwJ7U-8gbG-hF3q=u>k(WTbz1-7+Y{4kE61^Zo%+t-rt}^WavkPc#Sy=`X>V1S
zSFNLC$859s8*f<J^)ZCvMh5Ac22@VwO|L)LWCStDE+{loikrD7e3*|vo^`XO?DtoI
zpsYg^CFW`=2#FL;3I6Qn&&5k*6Wp&4;6{q7K`Jy0-YJ%B=;-A|h~B2CI>Os4s2nA%
zwx}I3)H<q|Qw=P$i@_08%K0^_xpEIu<QlZ|)Eb<sMk)}UghnFGnBL7Xn*{eh%@|7c
zP-A^CT}yL~7^{}`Rn+QwC|y+GkzvI<6~n=}%w`rB!CElq8NuKslU9cgn_~YiL0f#q
zk<R;*W)p^G$>|9lwy0+N*xStSmpQC-_3W*O&P9s?B=fG5L+3)~fgsLQ;9eH`eLjrQ
zk%lizGgwM#$Pad?G4}UeIP2P7@~1`c)-`C{=A=EUw|_bglhil)ysoc#%eYpgv(*~W
zhF0Ri1c7iJc4krjE}wrp;yTeA0?YoGy%)S2P102Xd!AMd+aAt53}Z|&TcL+hAPo3s
zxn@i9H*(lC|DTi1fziqI(N^Hvg5915r<jEiiw@d1t%t$<?ji1#{fQ`(@yGf;VW~qr
zGJT0m!XAdlzilB_+f0c^I`si9Cb_Y*Oh1?nS6k#ZJVw=9<4OuzOlUl|K3oZ}9!eS?
z2IFscNrIIWND2aGRj5CfuQcC!3*3<cl&m=l8d^Ln{8=KV5hklKXhCJ!l#({n)`Cl9
zqGrHx>_x<MHnU8XTM{!xYFvr|VRFNio(;yw_CQAY(r@<;0zd3_i)+EQbmr)oHN#}>
z7X2&t0YSG;_r|QiuT$7zs82+~k}A;=D`X-eKS7#1w|Ot!eF*o$gs+{oxGCIM@X_>)
zxIcgX(*0Z{y>0fnanT}wpSxiuqJcLBaHeaka%n0Q!Z(UV1f&2Ua{Z>+z_jPZ@O~Qu
zEWj=|&j#vyZTpnNm{*>L)%I(rlKuxSFTx8LfRGfyDkNg;#2=mqP8wz{+@Qg$$|Mr-
z)Ltrvo_42oe@B2pRUh*zUt@YT8ryK(Y-0-q${6r2>KZJnPzX!0L(P-q06OyplNH|7
zvwS8I&8$~_Bbt!N?WRt;*OQ3Q6%}_%n7hDWo=n$QObb7?ulxt^`23;w(J+`V<anj#
z5j^Q)*3kwX*wFlNvdNsa7#T?T@vi5W*Vz`~{>IoPg#C-DPE7!kHxk=o6<%46?c~-6
z)Lu2L-GHXW8Vvjq`wLhfBwDjTVI>{ao9mKoFqQZTPwG$E6VtHi@Eheev&2lxYKbrt
z3=r06GR12!^kbo5@y}tqWyX3ak3;cG%OXct1bF7fuOIUHA5Td^@xIw*VFIbtr9;)@
zH_92}()_j*IUz|z7Glu8cjErB`JePJ=(TdKil94p<6_)K4nZckQl!JhJsd{#jz8Cm
zCvEX)eZQ?XL&_30;utrSzK@UyxeUIC=ii`??CdX%(pxp1%<rA9?Ix>OF|Bhr_R&|i
z5VLFtKk={Dp+=jCgk&gja8;~4UjMrWR%mvtgu#rr3#CExsOaxRFqT?P|JI3uDr@U}
zcAUDF4LJRKa|*7rGajTEF4bV2Rm*?G9P5+YFD?2!UF5k7sAUI9D$WBFnr40}))a^i
zP?=9zyf>2`$YjRl%vrodRAvY+U5(Ejpm7$y?h^sTXQ{^Q5=vbK`%w@k?a>@*9s!m+
z!*mQ<OE-^)^v((vBwlhF59~8V*^2d0ZLPL+H`Z;HZ?c4a*sJ4aW>oMvPpxbj$0Uh`
zr{Ox8$Ru4WJ43Ejd`^XI9f>O7aRI_!%)9L$2(~*@41MIce^Dj!J>1LQq?*-icAd--
z+1?o*RH<ky-q{>JP-qOrz^IJZ(XWzq$csA|=ady4pP<3fwIk9kZVR6QRuRp&0j&x{
zmuwXtuQ^}$uUKo!QzcQ3a$Y$m<XV6a&(Q7rq^@9G7l$7{`~3RtB~h2Ckx&)pJ;hgY
zaEn{+?MxoYJao8TGOwA+L#i3}-1KfK{=C|B+OFtTRHdD^G*RzRsgu9#r_=lH5Rk&5
z1^1uHQRqA;-W;xB$=Bv9FGyU@j>TU`=$;2sD7j@PYJ`b~$9p~ze3HBNKh?&y>KXr}
zOJx9pv=ws;_$tYzY=<IIVvQz;AEh<_jjH|(&J>HlVbIm3xzbkRTn_t$MaM~d1~Z0&
z&x16tl@Jo*<I*W&hYg8|t|zXVXAK_pp;vP)cMs)h>^GMcEmixjVm6ECCEaza0ZDgn
zM~+6ZJf;yeEdfvI2t`b-0{r2V>VR8wK}I6p!c1{{`CA%q`;wsM$1qKz1%{+iJn<3B
z&1;SOtJ^|=!%)$guBBH~8EojN?yes6GAeNPzjoM~ko-V_De}bMtTZ+|JCPra|77J~
zu^<2Elh+L>yRKE!QWe@2&;%3?ch1U&Sr;4D(RernS_t<(pV*v+{qeedGjEVXQpBc4
z)5{<d;x5y$C(&RSyp}!()0xAv;MyuUVlX?OO`b|FuUq})z`UDAc*8&V_7;4_Hp}n7
z!l9EI^1#w}<~cRyTW~Eq5!Z6i=NTrX9yCVZI^1<oVAFDAkxxS}l|Hc<Q8d<a-@q4F
zcvU-{vduyhq~iqPOrB#=<Dag{z|Wmqs14%tF^^e@Ph;7wo{Xf-5+R;#(z&xbPsuXC
zl|F!{g<y?8+#8WyPw5%D3k=Nb&CVl|T;0^v`P8U*=^T6RRi<LORTPA&M4&yKHgJ|&
zFD8~2>%4+qC)Qq`weN<T8an}39~3Q(9~$FQ?6yay2uT_uo?HN+Fi|?<-StZ6qBTj2
z>_(mEanf=4H7x5#Se{q)W0}zUzam(ccr;Gg&@J2<5k&~a`|HExp(35XFMf+OH+Kje
zr2e8tRhw)6<T?<4Uf41}U{>K%m7FE&C}lo<wvJ$xEg_Zow#3cOps`kv^y~ZGdCL`9
z-SjW+e#Yk^<cb?Ob!P{0vJu9m#J6Jg-}e(<-c)lck=e2=(rd}!^OK#RRD%<>{*e9Q
z?s;92x`M^OC&^pfG^))Vd-+hIQYks*$-O6VIxTv=lsJ4}oKSrLTSs80oBc4{vo7Um
zTl21~*v!&N#TwIWvzI$M%wFW!J|V)aH``d?nT>q1s<M>Ti$lp`sNGlGtG%sWo~JQP
z6mv|RAYhB|MonUm)X<2F_``kPSlE=IW#9VuZ*uH4QIU89pXHSYa(8#nOwY7_gvo60
z$wYLUk~D0$w1_)Q<IISOxkV14&}O+YA*9({$aCVn)%I90^5AKvM1hxC@+3@$xR*BL
z$p7UXzEEL50BOXd4L8wuM;OefFI#<AwpxrM^G^5Q{JO}|=d2ut=HFh|)-hjY?yn$a
zAx<e30eE)rA_|S)YAU{an%K6>=L6Yh#)+qCPEAMWtpOj^LD=a`8;)zRt+B7x@+=`J
zlrkm8ze%?@sKB1Lp(|cPKTTBbj+dlT`oGN3RMm!A^541j{Us*-Ow`OH<AH5SFmz#E
zBajkP|FqhO*nvZ6ibE2?edi~5AdjOl!S^|-V_d4hRAydFOJv8w-uV@-$==0C$wY2;
zxXkYTQs~-67438B{#4lA1tzT-Ci`R;uKkp_=MuFjKi3x3)x~*(IjPJ$%zInAA68f8
zvs^@(_7~ay%kov4UGd-7p^+ZQHHUD>t8@H+6>SZEpbvu?(7To1(%u?OFrA_DkN`|_
zSGxb3qU^Ei_=(=WHZHc^t5*|vUE}ztYKe(mG>J<SCoOrKd0PAoDT`Txmz~vk=aZ_2
zj`QFSIXICb`%FN|YD*w5_u5zj>s8>z(+k4fFy%Q*BPya9C3#p=v`qh0Cj26FK~7(N
zVmJFU)|aH9Z%SahF-R4xFfwGsVS&lwlay>wC`R8*la9E+GOe5PgIfR@cliJ2;@dBh
zj=QVq2PoN>sLZojIf%uk$-Kp9?oD-U46?7ggMA-H!q}O~865w3sNW@g{tp0sWwllC
z5&*LkcdeS|Tr?GuMPXR4oNFR7TDbYIq7y8O;0yWcH5o+*Wg|NXDPwbQ_R4bfzFYE|
z5={^1@weh+q1LnDn{{DU^@#;!`*6kvGZ~Z-qa{@0T5HI^3eD>Ng)R6Pyz~?*bnF|3
zdpcA5$1kMO-L_J)eL8$O6_l1ctC_BJrnOOeMQir^c3B3DDPbk<c6NK*t7}k+LKC~e
zTOlBoz^-=igQ@#u)&ZXSiJNn4^{-=ErTH@ewT}H%{>~{YLrm)K+^#Hr0#-Y@UO$=L
z8>6^CMN}@~TBKM`^qcK_l3rE0U_x~w5}Dsygw<!5J5T?_nM7hT+0BiLA_-<)dOv(S
za+Z>BC9_SYO|>tht=v9ToT_JVxSpNdI~<VuZhaEhakuVfrt<4U)&#p?Nl8=c?3KC)
zQ9Y}{b!d6G#m~$M1~b7_tUI!VSJk=|D&N$kgVpovh4&Z}V4E$9n_Q%cCx2b*{hp__
z&`P^yk#$-Vk-%oD*-8b1g@;%RX(Z{foT|OvL8cn2Tc?ruP1{uMzO5KJx($TDC-J9>
zJO>vqf^T-4Mxa*tXeNZ3!XoU*W~;@PF~!Ktcv7~E=f%M5np(26f@s~yvuqP}DwW9t
z_F-;<Bxwd8aAGE(IBoS^ITyj-zrX%isE~nl+-CuILeN9!G`85BrYD+U!q(I3yD8m?
zbPg){qpgW&e8S2(b#o>AX2GnE{G-jhZfNkkQ?ehAo}^=#+wa{QWu)CFzob@4gR#{Q
zV>c0sVj;K7-C=38hRNYqZCl|uRULRP+d?z)=c)Qzzv~i9s<C17H-AJ+r)mWHYT0)@
zB<xxo7AK+aZ}v{9wFnTp2dyF=A=n*yXO*1DI_?Xjb2sR4gRy2o^e#gn5$kO<Sh?pX
zXd0Jy#V4h1m8N-cICtDTByc>j;$%2iBlC+asmamGyl^A)JDNC`+hk3>@5}2|=C9M+
z8X3&yB?krb+c&UDmHA06hF`TRTc#(!XSEDzjXjXFEb*jb>`s1r6jUAUAc06Sj~ncJ
z?4d%?=<od%KM4`fErMVs)1YYx)bl;H!xkn<`^<g(uCWkW6>RRQ^g}BH`kZnSt)|bn
z9kHsL{U(H)*8{#d1+J&-#+sjts~d#{k2IEz2kVp2#ZE_Z7Ox(L^K%n7Z@?Sb{bXg4
zceVRkTII%~`(lpmZq+=H3ohtB_`2!jjl0BwNN+RABBw#?A&8RGl71I%8FNA}C)G5N
z?UQGNDuG#ckri1kPjt_u@P)5U%PmDg<rL!8cR&+?T*G@|X6B7GG|RZKHm{`Kh`$6^
z{~tiiNwktm?(RQ4ENg2`>|`Pm9yhauw!X7jwn+S{`@!xoSeW%~YWK3DE2sMZ=44~>
z((^BFEHu_{F<!GWvS!$z1~Ke>G<fRvF=E)H4ToZnOZ7Z%#A}X3FOc5&X8YSoR}{Yx
z;Qvk^vTtG)*X=7}O@nYr^@b0>O+kfc{_f)~8}B&{35>uCH-N<8FYdTBC(ro3oG!-K
zL#oV!!a}L)JQs5b`Zz^Qw{DCxY_cBmpkeljaxe_e-9ggUzm)@&lI;u#nw}}ow60)T
zM+2-ae2W^Nu+o(1TbgB2vX0NU--a}=OTL(XGqj~K)95{Mle8}sC3t}Fx@)zyDdA$f
z!2{Cg<4b29`wHd@d*zR&mXp#PE#}Qf8YYUH)-JHFA}82+l5aV{pE&eI)ftmgr#Rg`
z7V*sRt#t<-(#8sqrW(=^jgdn5TVn;*nwvREwDV?5hG4+&KB`p0fw<6&pG!l9BqS=}
zo@96XWF7?_IBAP4{nkq|&Ho~@)Gy0@y66fswj<}>F2^AKww_Z?x14mYS4k%(6eGEd
zJ%LSZknytt@4Fp{B^11z^k#$@9N}S|69o+tMf;MyvQQl>u{<XjZ;zs6Odew_wEd#H
z_hDauj>zF~hr}y@BuUKoNf{9xyH=ve6k*(k_1DoroXLjv7J|nqq*AoB@*o-kVhv1W
zQRDA22NtFHhH4co(MPDEnk;p@<{Il2%cChAMn4gcE#U2lhM;c$QTN(|*P3TLlGrYG
z5iLdJKApLgp2ujg)L_Re`BF~4*5r2Q<RC?DXiOF;PD1L*Ip1)C#=kCu5%S~ekI<~Y
zCaY+#6?PBv)#gx!YakaICE<`VzZ+$llQ|}JHN<w3yStw^*`NOD*7>duSVh>94*LZ6
z*0{<oYQG~DwMkY)E9}==)VmsE#A>fNFY^5$-}q|pL?Frf&4uRSY&@B#WQ2UAj4J_W
zZARkT<qvy*&DV01TEuU#8Hi`dA}7-m>E*(R$25JQQ=H#WZ=?|91xc~OHt>vjukb4~
z8<{h__Y8R|Mne%b2FFX#OkxKqhr`#Fsekur+zp<0pf*k7Wl$MIdX+G-Uo(*IOtQAp
zP)5luZ1}PwG~AdH>E?HE<2xrdF9;A4#UTw!EVLq={GNJF;%6vyF6WaSIia%>4W4P`
z(@*e#{6^XB_j9l&zT4p8by+_E!V6jg9rV#+xSOD4M|wQy7J#ePZ7F}@Sj0<}yaX(D
z{yBTAh}9f28Inq(#yoiVue@gOtfF<{SDM(~(CzY>%5nauI0r+qL@ua7;&BOVhmXQf
zwHFVz|Kr8~TbeevLd?L>PMM=(&VC5Pb#}?4h$<J~Xficea=WEvCc8(XT~$c#FRpx1
z6qG;Mia>yZqL;-OD?9<gw^mM01|)s}M{>BO>=RE_$B!q5L*+h6QMOSJi&@P{2Kk9!
z6>$0g3Z+s9H+YiFAFd?kZCfejJ)L<}8YkTvmT$qU*N4W#sbmNB4=16bp12YGy`6v*
zhyE&N$#8r4ik%GT&@n@rTI8Hxe>*2)R(a<erjr7oJ=X@=@d5^x86l0<lZUM~v4qw!
zLK3f-W-F|JcAUSLHU2|Mo@Rhpt%*^>p9))AsEevCF!xPTTEMuUzQ?=C{lxAGVGxh`
zA+K(#`)RK-Po=Em+yrM(@!^x4EmIL(*z&+2+~`zs;uByl>lYp<e&o31k}(d-D5g0+
z|E&~S^YC80ppGh@X`?h%cY;FK#pwBS<7}hvh(e$?3@FTWqjCG`VSeE^@KCC17eH!`
z4OC8aJ2mlUtZTmp@D2KWy)}fE^2+RI(RpQ&NL`e-1P0_HCu(OwZFJxdM)dDDUI36i
z7HX_#J{xPoOiR1{YcfZkk~0-{{H(O@jjCFKyRo(S0?Jx3gJ0wY?Cp?pQX(@m<OX88
zSxo8X=D9?Gu2VUFQ{=^zaK9a)+?>m35@RtLug*7^f~O?S*uXG%ZmaxpGME|SkG`%X
zEd_H!SNLjp&mS(8{l>wXi0oWvdh!81rHlPD{T{`qOB^P&)N-s_T|y%RKr|R{k5b!Q
zb?MWHtMm(vBlJ6%V+woKyhsmd>`R-_|Mci|rTv~Y8=CtuJLOSyaI06lJ|Hc|M7Aek
z^v;l_a&Wy^Hvr9lo1Vvne9@}bc(LF0KxK_fF`AX(U3k?Ga|Z&l#bIGWxsxoN%tq~i
z)g0<FA3h&rQl{xnrSj5MYh0eUVFkr<1Z^7xJTKLfSc!m@j8b@G@tIOKlJJGvUUw!r
zV^yGUhg_Q5{*Tg~&Mukz@T*|4nb-9vi#L8@Q!eMub>FfympNuag{DY7c-)-RUoC~b
zDS1L;YJD(;JakY_ULGMN1ef}@o!U#fFVgvccziX%b6LWbD{an+r<?@i;mPsiCv>b7
zMgH_Y?94H=D<0f!C(L9W7sh$9VB-V2Se1N@{`Pt9Vv=<|o0nx;gp)x`g_k&HRwLW=
zavp2vJ)eUzlxj|_oP#y4>iKLX#}Y8QoNRqEHwLZ~<zB7_4ecgUvVwh*&OC~6WeLLy
zYL2a?=Z<z~U`^VK+|`-&3Y%&i#_Pf6;nNJX!H5>s!9AHDvsPO5GsXKFlRF8%hKcd@
z&c$&uQoK%_j@QlkPB_y2VDa(Pl9WnlSFc3z9alPfwZrSigLL~sQ@l{cLwj50#1#jN
zGgTDkGrY)G%+=JU_!lr`iPP-%G|i|rO^)O|M*fRB3Hf)~N;%N^`B$DWZj@ieh_I98
z&lC46pPcGVx_KAr_p6+~G`P1YnZ_J13iuDk4C-FNAqgRM-zifV5KOUzA0AFhZPjw?
z_q_3s`2KcZ_VlrxWE&UY4Cyd2PzUNHtesEMn@?DaS+R4c*c3v&PMtri$u%uX^>XJ0
zn<3a>F7|zEqc#Zx1CWHqC#(HySf)~Sg%XDDS7ZJ=Py6vjIHbdf9e!nqCw%L!bFKQ&
z;<BTkv8!jmAn%pZtB~kY)z54=c931o?C?QnbYp6;{$wK7{EZ@wwTymWqW)5R1v7$#
zvOjUPrP&q*K@im!YhW-B_WF}4j5R!ZmnBuukgpQas})1aWgGO$`O;-;YOq8`A$mF)
z)r8<r1T$&Y;;He<e5uE9o(a+*Ee?NP`Vu+H&d}<fSlWfHa|F3wg9dJmt@GSNBqHE5
zs%>NhZQ<4{;f7?W3j(q`AU-=RDK+iB9zsXEAccW_$lkC(lYc&^E*U#`=-zGPMQhhy
zs42{Bq?PD-I`U_VoW$27h2)Y)mLMalGB7V5@#S-d(synx2~5+#3_e*j^ahuPx=+V5
zE}AJRVpn1-%A}M8qwdz--jO7!XEu0s!6`E?VxOg{J|X&~6LR<tukCH$lJ0iOOs9%A
z?5@+;zT!}#Av!x*%ikrZLZt+j8vPhQLF@eF#Ty-buB)fcm_+Z5*Cn*NV$FS}BnIdh
zhTIzM;$1nPu+3tTaW*g65|9NBMIVPG)9`Z~eB}A1z}~5qpU|z=so!576J*Fje&cHo
z_1)I8mS1$K>O-dNXAHaj9nId|$ZV+J%q<c-dmxXp{<N9tcU-XKn;@f0ce|1bnjO<j
z!6Ni|W%1v*Yejj;R9Ol~D`6}Wx%Q;n!oMcF5mK_e%r~2M{rZ&`W$PDc#bM9grHli>
z{@XfTeNU)m)v}@YE@=e2&hEtxl^{+&n*jG8(~M~zMr*o?1Z)kmx|Q?F>nwf!T~(~d
z<^(wfLp;p{vR@QWfKt^4-Z5=kK2}HbMpvP@i-6masXW-ZB5j|6B(*y<G6JPkBj&gv
zZ)6ae^V>>^gI8fu7e{ygdrnc@umqr-S{Cdw$-dcNZ_F?#pK+mPLZM>4{`AT9C+;M>
zIqP~jWM`p9f?}r|C*NIuPxg6}XohCNCs%W8v-?TyJ&_BmdD%@hX(_{p5V?>28b>b_
zlhFGSHGO%e`izv*<+-ZOiiO$|)&`T3H@jE$zP3Sm(%8%sJP>-qy0Ogaw%k-zpbQ`X
z;cn}p<Lgx)BJCa~adm^o)2Y<2$f6XpFtEgtxZeyZazK-(QW;`2vV~v?PhA7%R;=0V
z7cCic^;MZW+)P_FM=GSaM=Vk41g9u^iaDJ`d7LU}){sry;JcD)ynjbwWMY{m`*}O;
z>D*@WWh1R~;U_}sf;#8BSZGN!z1t_kGp+|nc5OiXT!>n;<=KdjV1^~7kU&(DY7e<6
zHjnLPff=J1x&qxC*I)i;FBOy2uba#;YhXr32-dT=$hOXY`L9!)2PD<;@U#WAjU{Ho
zl$(CcVfKUHD{yqcAsu?`Ww4XK&mvWIk3CO>Q>|74&Xb6PWsjx9ii7w2?-eG7eB<Y`
z_wm6)sk|ghd=nF>;_$g%1R|uz%uyA~l4zfi<K*K=STVut?GybkDQV>@;I-hQOP0=w
zT>I7EFz+w@q2il+d-$X)*1vy{W8X45$SAJGZ++8L1`$gP4iE&V_ygZZ<qlvJ0a=*x
z=PqbWC}j4yOErZTuGA!Z$xkE~-&@z8OVum(%_}U(iT<X_O}*#Ng>NwbERYUz|6!zA
zDx{|02oVhwaj2DOUo*+52Nxt}@D;2@zAL=5=$I}9skolG79Y_wlZLVe0;$2*x=Uvg
z8;?r*tsrg1J=OX_K5fNz=LB9V+c&cl0}T)4O1?vUtk)AFQ`SYK=wpfT5=LL7P|Gx?
z4sbu6w=+;~8c-I^Bl0S$uPMwI<F~1WVkB7&ulRg$_8+vY5tKA)Yl=i_H|S()lW!ug
zx!xYXPH2NN^(`4}s#j%IWp@&<4$F`5;NjDmbDx^X6x$%oJgSQ3#E$C)i}VB8eyxO#
z&E*Hjn=u<9YTj1cJ;Vv3ah}{L@0_UA71tE?#Q$oA8F?bWY=ZdB*6dAE&0HmBv+pkg
zj4N&D3*lCb?Mz+Z?!>>JwNHEMVzMhO-ulFwi5u0x@Tq8Lm4Vz?(;r;sNo1gMI=8}R
zetQskV@<pxg+|@$jU5RUGlNq8X=;~DTyH(s5g<t|pP9e2Ht^!_Z+zSS5!+&omxz-D
zq~H@{He3*9l_naKBCp1;S$uu0C_0sr%D&0zuzoYsw;6+DO!>nhA0a0e8tlZ6!N_4(
z_u$qUTa~3>wGIheA7I~H8=s6n=D;#$GAVPhh^|6repR~amIW>B8c14|2nH^D@^Wk3
z2n%MdtrNU|9gA7CWq9o375z3DMpz9Ku+w*(FI?}|STD20D@L^}(k<MWg$Ge$)=ppb
z=KV-XdD}v|3Xx3G5`MvE7vk{S8I{OL@&YD+d2-T|$FKl*z3m|fcmo%(NtT*J;gBSt
zJi3e-SR-siBMERf@ME3|SRszzyYR{5U8#Sc<_gS%XE3W^0w+NKk9czcy8${GeVGTx
zV*pp_?^ar#NqnD7!<h)j?SkOh`cv!prw9VS7P`P;Z>{dBOiNt=Rsqov<!gJ_V5-q{
zoBl0O!T#4D`ZqB0y=)~A?C+q;(0O_J_k9cbQtfcHiW7k<7#tLtf;_O_IP$#OvM8W_
zj+6LmfVA!DZY*R@Ic1RKS+!KIJ?>Ey;k^q)dOE&KK_VlXAQrPp^F2BL^!yPMwO682
ziJZKQfX_lPW3XjPI<;e+MFJc`EeKIRY(x~-R@XAdi9<h6{RC8j)}GVD`;(Yoo(Jdl
z91b|}1Fpl{&hjZwvewx6#mW0WD1oUSMj<X|t+VSvX);C(&K$d)O)DqsQf7LSD5#2R
z<fiKzyE_}N|47K1uX<8v8QlFUHbt4M|5RPY>d#!5-PdQ9(@>cn+G74QF#VV7hRjgp
zlS?(L>~vsLBve)W+V%;iDm)bs*N*gy=Iz|LU#a}=pTmMiPO`i=HY7VEM9y*Gqwu%&
zr_hG`QBq0Koe|p-n2pmYyoSsD<a~WNtRm(}SzI;c<K_!$dyFm8S7(0VMU?yt(`}*y
zE%u@cjPl9-`JbGszd)S%D^x~?$0><!Qs*i#5-PlJcWX7K_<CSXoEJKKvCK<m2~sX}
zumQ*ij57yYf}_jxOV(ZTI;hJ#`P@zAW9L&`OU+NECnl+@FyNbjZ9^5yBB71y+XL%Z
z1$WV)gD*!<q9xk$4XPRwl_fr0sV6cJyhL;*neD8{$Y*~_QkbJ3NSUvyMy-NvD1*oM
zA@<gr0py#i0(^^o!Xw~?Ce2))H1#=#fkof(^G-mt%`Wkv7S(cQ;d|n`91AsbKStT`
zHW+?B|Nc2i^F#TvaD4J=qb2*9PiDH(QeG4HH#4m@-Yv2}F7$bsV&6JO{VH#i3GSV(
zci8RrY3G}FysHsU%CI#Wt=T_TOh%)>T$^U6UKYi=*q`c{Y&^3_ngr)VKrYYKBK3U;
z?%y3vhkec1#djOvF&wy6q|m<CsVk10r#2RcMrrjeA9H|{nyssa3c=vgu;=#KI}=F}
zf&w?Xm*%L5c-cZdt{pZJk3fuBvVP(scfLvbfjwmzmxPeY+p+z9jXh4Asz;3wq_tRc
zeeJ#MB71YOvq~`5W;kkdV9d=W%(IU_(H83X>NyF1`w7c7w5cjZPx2N1zI1<mQXDt$
z5v%WLQ9adNWn0I?fk@U6%Ri<2207F~>Av0mB|~gcDNQ8%%<z?nwmxN5z}`{~SVh5W
zk<o=k=s~uZ)Hfygob+d@Qj7c=E~4_{2>8xjYSC{fgT)21)cd(Dx1>`&FzD&k;E~YJ
z9i83)>pM1ulSXSi4`jinU6}0h<!%tQKJo*5`=)^__0`E$cUMP4?GcIdLzva-HXVn9
zC6o1~{ADS}Zm;A`a=y5+@B9-S(z}&_Y$ARfOry%cc1)e?D>pN!7F2uSZP}ljgvH*p
zly=&CcTc>V;-!W5QA!K<(`x7~8rP1VlXs`v`LMA{mpT6EF1lKs%ayq~r`}h2!<ghG
zGv4_<+)ELwGkrZPd*1GJ(Ksgeaj%86j1t0<0bVECnts1>_q~NkV)WheudhU<ISP1D
zT&i|vWN+j~v*Wqas?V9Tu1+0H$iN>W$K_K}3K~+cr;6=Hp!|VNC*z{N_56G$3^$Sj
zft5cA{;oo``lLna@%M2rwNV|Y$8AzD9>0gl3c$v6sx|?>r?)J+!Ih|#Sl83eB$)>H
zr1?VzBxP&e&%gaVGB@F*yVHqG6RyG3lXanz?)~hR`noTw=661gNHqj{2$!l3U8`7&
zi~^FJhf|!~jwzlzw4Q^ywsWr5W@8l-?#HitX`ddrIWXWk^V}6F-s$&7`%~(-B)CF(
z+#DW0%+_D*h<xS1IzGIh*>U;4QbOppL@TMqe`R?kdWTP&n#|noYvC_-RdUxyA5zbx
zu*WMdHG5W3^jU=l`eiJm+FXL%7`=%4`y^aKVR8Wt52m?2NYTjMbb4LuW*oi_we1~z
zkR&{R>r&I(nGO6?g&Qx!&G~XxuSN&MvqpziaSrj^h}ExdPmeQ1?MZJeoT=RMO{O$2
zDviPun*Q9(=15Fi781>~1qK-fNwEkR8;6Z8aqSdv`vWxh>y3t?-1!0Gr*gMWuuDUr
z>cdyOefq}#Mb}#f#nl80ph$oK0fIXOcL)+(g1fW06I_Ek!QI_mm&M%)?he7-T^5(O
z-@W(8t5@~*$JW+4b7uSW^t4WQ$7>mbraD=l5s(x+_U#=w|4UiI0iTdCHXTvPM%(M?
z)p6~|b~_rpKTOQXsxs?WYx)*F{uCKVkD@QveX}tQu8lXjso-~vNRPkAdRpji92>ma
zC6xXw7x|WiFBFnxDz&2mIcqHMS|I;_*#=i%<*gjK3^*9ic4LRi>$9d^gCXjMqQVgW
z()8DZ_=kJPef&Bstv!*ucLCL`;qZ3nvm2JSid198BM)mdtCFDDXL~Mfz5Ml_oV5OR
z|5UHdEWy6hx|ya0@^ZGG)t*=>c>#yla(a1`ni8b#@G=0J1@%KUML~1d+`G^1@R#S9
zi?-Y!JZ5c?2y%Ywv2tXgGQf_1lpq5%-q48q3TM}ligMOPeZ|VGs`i661lt{3fI}wF
z9_}yL%aAxlKBT98-G&+nPqv9#wgnb8pEtEO0iHTl0JT9yB%?CH1u9yAJk(Ni_6lQm
z`ocwO`Wty`6!Kn|!>l!-kI%6Lzt84d3n*T4E`<31RPa2+H+%y>TQ2hn@CGaDs*)|~
zS6GKq*|amhXrAR-jyL^-XJ_k{j<)6XGQJm=n<NMG1SQG_*f!XLC*MvMH{cz8nn)g{
z{yRn8M-v5*?1k+3_ua&cGX%*5A$y63qlIk$NRsMPJ~bkhZd-SAf;^{b=93)jaTRF6
zotI=HqW_ZG2qC(T)o;%VrY6uyi(C6nfBB2wyT|3l#ES&;%@R^q$pjty#8Tg8W)a>0
zrje6gfF%Ddv8Lk2M0I+cZlgF*!fu(`80u^h1ZMTFqm7$7DLGo{dsO;8q^?A~>khzA
zCJDXws>7U~ja<MUl%g^#cq=?RH$Ya*s$8Up%fW0(jj-lN&zTs)hY_*$JsH!zYQi`8
zJCbtM&JW0XH7PyRA9!h`J<vP54h|QO3tD6o9mz1S;AEPw(m#KKzd*s~_;+IqG<!fi
zGu8zb1fu(p{zoJ`H44H`3qo`-G&YgBJ9po%BTpI>)BIwLR@0@{vL72s`RYAG&_VBQ
z9>zO0TSC+}(FV7(i+bsLA<wUJK!(sY-51pLH)?S}#<SxvzV}<i2O&4(qd5kT*sBJb
zsr=>W<?EssX5W9gQ-{H&rH{4?^)#yE)eX3OJW^Omnfq<Td+-pkjg3+KhwT*@^V*Za
zWi30kAGs{#<K=s^;O+~FuS&Io`<G$WUPr^0%+NlJ^(Tg~$^=PB(v9*8ZXfA9KFS2t
z;OiO6U$nZXHaS=CQoq@LOi`VSHn<HA!;PRG5jBw7kQk2#kP9+t{L|MMfgH#wP&BlV
zsGOzwetmGTnrc#y-$g;;Fuyv6F{Rab|CX~3D<30(hT-R9)L$nUy1NWtgLAB{;F6a*
zz1dpJGA;4)>3!Ez`6GtJ#*`b6u39ACpx_9{M&Wjc;?y$bf1+<EkVyGSj|(A-z}DF!
zhY3fWtxMlLYPUD5#nyDw&d=KEde<-98H!$wZkMwRTNA0IeBga3c4K<*kvP@#cas%$
z(!JSQuS=Z6C9j=PxiW=rvw7llJo`pCiyT|v5#~P*I>3#r+b23V%3y$;G@R%Se!{}l
zV?!t`!~^5@#l@RVb7rzU_=~2IYi>_n0fMPx<c9OiW79&FV8K)lN=wfE3fEd^JaBf=
zPQ~+;Qnm||vl8N`TpH)ec4w!k=8x2H8YMV-h>+wnT75_D%)Q>@p^tsdO2G4@VdW{z
zBNy$Jl7#QtJv(1(>aH1cVCmlSoNE0Kyc&nx9=~RgaR-1IOA31^alaJe3M<u61H{=g
z576Sv_;eD9UR%9u%uu#It;aipw?dn-(N50zI|7H>!{Mi`?rng!*cshUxXgmYtjr8T
z-^V|~G3i!ElDxui#!nMWfU?h>Tdo&V{ptZq+UcyvwLIZksU!8K9-~e=MdqBz%~mX)
zx25WyOP1-^>iJZxb+!u*ntG4B0$z4Hpg15Z^~k*eqoN{{MoKxYpyJlx?H#uJ3vVm;
z+$2nfS(*%$s{SArmdw}~px9$H(oMEXmq7q;o8T>J?4LpmDnA>txRYP8)oo*ufg-Z~
z^<%ume^yXjwvL{`YDHqtz{pIZ;_17BX_A^zNSl6tpTMwyP~$~_o9YSZN2^ae;*bv9
z7%d}Pw{7Dw9x5=m6J4qfz^=Xy13CUSwomxZ$U|&U&Zu!iM4Ri1su;xc5a!@p(Ks#H
z?}Rnokzr9@fgi!vteqTJ7@=6zlA*1aMbqlj_)E)bA$fzD9lpI8ef5`5%knM=Rk!)~
zfKy`5-9a5^qmfBLjtdTFbu~^JJr^HO&y?dX$n^{>D&NdTPv2MgXI|{UU;05E+sYQA
zr<*|W<&os1h<lseD>=nj)>ys<w<Xnu;X+z2^jv;k=MrjXS1AT%q84f%ECcNn3L)1D
zj+d^pPV<i3o5sc$G@A-rY;7py*k&ZApAf54Jh$gLdnAErLq9HAO&a;gu5(?;Z{*|6
zpV`x-Vp2zRW7+|&cTKp;K<?VFAeNBHFriA_w-$8uD!_-tu5JlQ?uvvb4E)c?d;Y|^
zSq!tx^@5CCzvs=$;u-Xk5Ps1KI}Z&2(1cm3vPDH0aWq3eAY%CnZkUXJwePCm(su+m
zzeH5wF3bMXo2@RL03&`;U;3HbgCQQQTUGk;Ekp5XNv)J_|2fs=wxW45YV}&Zmp;Qh
zw+CWS11L2>uZ5IcqJQ1cB~ZZLZh4WKN-w*C{c^t9vauXOawmcdGX1$+{n1mU55!(^
z$&6Z0lFM9E9v+`<4>GJEmMYbc>86!(y&;okx8$)1w$TJi8E|x9RgQCLd{v<S)iw`(
zq^!up`Ff5)vZI0eH&q!Op3p@66~X;~E<xOmQk_fMkdv)&KUXVI%HkM&c~yU(dg4zU
zqFtOmy9$|emZZ?7k(!M1HvA^QwENpG%%)*Zc9{*$Yznx+WTjfFR<rryn8h_*&{!Dl
z-?UId5zpG46Hmm=G%^*}{&+oviqp+Ao8Cv5Q|xFaTlvdR4&2F+9*O36_w%qh2c2+P
zzOa#Fx(QMnA~(Ox++D_ZJSQsi@B)SCa-&s<52mV3&vvI{Xt?l5@Z%(ZZ|wK+cJ_ck
z&g}z|g=KO_Yw>(WplPWw!+x@yh2%_8{tlu*mU|X_5&~fS<PF<z5CBN65aA6QM03no
zTWaOm9GK=`RY!5tx6pV1<&38Iwect>lpfu+jB%-Uz7o$1ncY?-Z@%k$ALy26cK3CJ
z`xgF{i>%zs8?Q*3_yAFYWrB4Gw>4N^9;_BR6z!v%=y+@`l=ASwJ!WqDQUNWgvL@`Y
zZ0R?i>Tu2L!t+$hDul7>Z@z66M>z?`Y8>+Khpb-=&V~pVHa(~jeNm&eyVZo>Ud<PJ
z*%Mye_L3s<J${^)!YORrT?r~&innq&zPbEf@Gxpjm_Y@O;6|!cW0g?v=_^X*aNM_U
z2^LiOkf2iM`hqy#P6GR7m+7Q=1Snn_FL#%nD!Hb%xAE_*MIUCF4@)-MXbRR|Vk6GD
z=U2Io;zc8smF;4PegScgI==5h*Sq>@>2`?e3;!(>@mVPuR{Rcd;G1a?R$#eva{S7{
zc^9A7>1eQ=?jBy5RJHzzqKFP)$TySbAHxE6bKPp-3<FLgCx0<@)wFGELwf%!9!Ze1
zJ5YW3xr4|PF8x*1^Q8(_kJrtj;LVO)=v6DrRh0bhV2WsWeWLoF>QW}|j90y%*21!Q
z=R~huk)hN<(L@OCJ~SsZOpy<f`Ink3QZXAedu8Fj;Q`xu%nf}zawj&H)(GP-Z<BMU
zNBRHb7ma>7kWH5JEw5~JGwD77mnW$(_*Fl8n@GQUloyGN6k>6J3KkF$MFSY5h3%;5
znsY(p%*rk(E)JXmkATtg#!v>Km)5&ip7J8K-oj+GB}F=HjDvgIefv^|S<*7zpoldh
z9zNNFR65=4N9Jg|b*XNRbNZ?`vp18Th}$6*7X7vpYD=GL@^!FpX;I?rquxH6Bep_L
zfI)ZE`u*I@X{stewk?27TZ_8OP2AzcZ(uomwgSo2)wnmxkFgEit@JxkrSfWwVG>XT
zH*m=;ACs7*K^L$Z?g0a4b>*X@VSmxj{I)4^;cC@Y6dhX_w@JyfKA~$i(o{$Ku9FpC
zK`zAW-q3L{S7hOmF`0xtbFBeHGe`xLrz!M`+}@M%<Z88bIxm;(G_2Amt65|2A&^ca
z;VR=+kD}=(rZAK-+kVpR97js8sME&YTKq>a5kL-BxS3dCK=4(4!(by)H~;eRouUMT
z6IXQ(m~;xs?gXmcdyKv{>Kji$?`@CDGMGCeS6D_!PO57-Rru)eG;#6P)vdJLVvx{Y
znn_=dl^H3vwJnQ?Zmo+9EZ3Lzt%hc_ZB5JTv^Cjb9@#j0v+-5Bp5c+%IS0$k1ur<#
z)!Wz)?BvQ;>nDr=htp++ms+2rQL2y-lM^ad&{Y#0b1j!vdgqqQc8f%0eBAz2cJHZl
z$Z2cU`?gI!(}ACp7u2-dtd>S*`@I2Dd4aLW2t#BVM&Q9{9ccf?z?1&V@k>m>wu+7p
zQKi_kf~0SUF-TNY<tlq?3H#I|_@M~d>j(+Ae%9SFj^#-u;{1cs`M)mA=@O;@&6o1*
z<z4Z;o&DZ!Ld{!ib$o)TWWTNxU_4IX(t7~tvjDx=o!!&LuIOzbFN#$`4MA#wZe62u
zUrNE*mk^bT`I#8cJs_lZ;f=5cmTGF%2%3I;3Pbs1iC9-8{+H$c6@y5&Ioc4L02PFJ
z-b|%<NmE28D&ejVW0&--2pa}04qlSq*y^h6w*$uJ`C6r_?0>C1)4i`pBI3_cvdC?!
zpX!f^WQ{A3_C?&b%V>178z<58nFHXINo3vc29WnTay1e(I=#&WKRiCR^Qq_e6A~xc
zW5cVdlK^X}L*~E$-hV%f+aNYnvYXR%(<pti(&jmUOI=!a1Yf3i7r(4VC6`v(Olv^s
zw}>Y%bF&88VROM6#p|hnwVE0b_T*YKyeKUn-zCIq{5e_WJ$<gO<@O=RQ{{D#yLtGJ
z*>4U=DuT#>QYq&C2cL@XtrfOtxJAan3<|1VrJWf$dTN)SBsg~>Vx6X9@QbsrQ&7Fh
zTdC_!A6PfyCbiELQG*^36~+kM5EJb-!@m)YCgKx+P|IveNtEYj@3A~!Hy$$kDv$v&
zKrVDZ04fbV`NXn{@@d20)tqfZvNef@MoEW>imgigAqTgzH~X6xbdMB$4Z|}ma#&bf
zWeIHMPhej~N}1&T`zgj53P}j80p1DKzHeI(o4{Wu^jenk1KG;MS-*UXlXwX!GOq!?
zjRhM#r7R3<-HIxDjEBl9D@t+;THP`dxv_~8ul&t_nf+jXOueXAuNxhFv|kNk!-c1u
zOeL}2umdCo6J}D@lkGQDc>GMHVe3l-3=e#g-OeH9SlmzK@w_zI_#<pY)Z<xJn>wv7
zR>-Zp0qTEV)a4U3irW$yN`sxnzD=nbxTNI5+HZ4L3knEWK*!?TL|n?GUNUn#v}>2U
z2%4X=+yVi(w|g#2TjQk^0YtRP^bh_y4~b%Pm(`mQD{XV-BUZ0WX77oykPH*@>a3Bm
z@||mJlu!H;TK3d3lWyK!aw-M9xg~zrj&x33I-|QIgxu_$9lnk!NgA`In3>|b0)Fpp
zR9s8^mpaky$^&JePDqWw!9F2XAMB<UIROWBiS<|s&zA>Lt?I=pNb{lcKCJEe^7Cr$
zSJ-q~5mr2=E{Nf+0Kmk>L;N=T<9@a1#F2S!4aoQ2evf{16uSYIg<q+8L$_DyEX?;k
zrbBsM7w&|UKcOB;=3>McV+>2%*8fbrJNMns>kt}Gy!PXoY3Xv7kS>To>ND|i=Vuu}
z1ol|H(Jq~4&N&NCP5@kc!1Mf}sM1e#C1EjW|DQ)+rC`W9AND+#Z*n^Ym{Z57c$hQW
zWp7?uLRvdlms>m6pC;{nyVIXq51yh;`IvcDA5~y3Noj^mHM8?)Ob_9}&r@ChUdLE=
zF`u8GWjMC3J%PJRK3OW;3xj8CPfo86Id6fMo-2%YCldP=Ovt@ypHu#d(-+xsr%J%n
ztllx?t;#xcj=8ko_lUEbQf9U(XWyEGo-#8hKGu?P+VT15!lmC^HcsHG(8iO=XStu@
zW-i0FE2YA(E$?19-@Yk)ciAtY*Sjqp-Ui3n?qj8xDGD1lG>tlz|GgxrJC8Oz1-YUl
z{rDojYaGnY*v}(4M$(?6ZS~}64-%Jj+NR>j=Fs%G>^Cg$>#4<n1s}vb*OxYY3GVFf
zWIJjari*^7UJsCtS1DRrJ`tuY%QYBZdww93v3)70emJ@~WtjOh)U}{vCKvfo)p(Mt
zOP>b<dU96y#1a3Ati8IJ?a%2?qnxSv1Tgbw{*frtE|Q9ikB1qP7;VjvGBGY*cS!EZ
z&opFXi_djIA>j%?5^@)Zaugh^kPs!MWQuJWYo=tm?2JFU`HvEkL_5Aux^)U%7;e@s
z8X0gJCUAn=|L%jKfH9ItS!j>4+(@#TT8r%y{nJA;yOvkYuASRwa5QASsEnbUN7bV&
z)i+PBG9eCSNxp(|Xj}s|9Veu9o$%6B4yP%vf8dwhQ4SflrcH;th0sV4bV8YumQ@?)
zk3MIf+!^(ZR=&|~u6^%AoEd+PH@!sNHFl2ZecZV!MY18|9V*f1h(Q|J9rC^M^p)M?
zgK-!MRWnCkxBw$D8n!!8V;}yqULhY~%|-=EqCc`o^2qh~;#2B>GZ<ql=L=Lk63$+=
zc<c^RJr!{I0z~A?bsPuHeluBo#ljCi6pWGZORO+ha3}|;j1y|7<>8WP6v!m)iGh_8
z;XywE#WUXdRf1$cu}d4y59eZDGD{HP5yXcn<>#14b&A-3SvJTEUAA=Z-=&3p=aJ64
z+Zz5%cf9aq{p!>SP(W>sAB%QHC1UP+2>DZsh>`HqKAxlRE?j9Gf3gNIULEW1oHT<%
z@=mwW?*}#JLIRICcLhqO{>&W%ym@BezzYga{wobiTmpBl&^nEZN8fjaEfy>Uzh*_J
ztGJkAg8f{LaRR2w@!W#BrT5EROTPotEJQi!O+BMFtgmz=+~HX*+yQaFU5*Mb<z?2F
zxpp;`J+;lM?q`E)az^HoOj3hrMIQ;&@xQ)WJl7`39wMnA`61#Axe|)qr{@v*Qe0j(
zFZ}gA(g95y|0ssf`bOXjAfUnemvvmhR|0?k#iUiGo_lQet(5*UhkgigW@@N$^ZW;n
zKAVy2^6op;oD-c*LZoV$yrxzyx?7fbzyKmXr*+*<%rTh{g{3oho4rMbbXt)vuXK!E
z{-(mod-GIWrlo5b<^fDG^TD$)OO2a9SiKr$aYYUXGinxa?p-r{^A0IEpbI;>5PX;C
z@6W>c`S<+1tktbf_oBhi44JRPanUDqIv%QfF6&vh3Gv**J6L@iZEvX&W9jmWK}F63
zy-9_VsF5&%s6t(5(esJ4#9udWV~d+RT+jC20}+yHfBS7X4Pp9`4D+}(wL0tG^w=Vs
zeVlG>->K3N&v^^RzIIg~?F5$`(>$C@9&d<-*k!OMPSH@a9+w8+zSsJsmVAqyD&4>P
zca6D`$$!zS*KX}pb@k+aet6plR(C0Tr*GuO2`j#8d7s_W-w~jZr#mk3{k<0i4NZn5
zXWOqb8+{z?3<`-xrFy20sGns-k&VPiYn#=rG}{#=@ZqBfPFAmp5g4caIQq0a{b|O)
ze1e8K^JOq$HvxuRjn?n}kxEsY1W;(!7kKqPvJ=IQ`m|eFo6@E^8WZ+#y&x+uAoR++
zx)(enFmm+rGT#4e`0rO}tV4umoOQ${6|sO2ye%H*=&@douxj5-h*2P`jh$2Je~_c)
zEU|M~qO^A+`9~9wK@y@hx|bwB8Bt*TD#Y9yRv$0#S7jk|jI?wnj3W3}0W#s($7vT1
zzlb;!i5xS{`QW!dN8hGKY;B9|mH3i4R`l5HHy;dF*Y`X;2-eu*1}H_6PJBN|Qu3s5
z)hj4ck6yw~C$Le+X&h{6)%l!DplgX=Jj1$;6zr$v1DdLv7k7X7b1(!eQ9SxM*r`m>
zM+jacq35Vx*Vl@-|2v?&`+Mu#0uWhrM=knnp3BveC8u(T2i6}oHbtPF+fk+i*+)=S
z1oT?LO)l28Upq_;H$ZwJRK~#U_}YUT%g;|sIlYA27c%4o;}tbj&lt~LWpUdgZDg*+
z8z(LFAi*;zKWymLkB7<XTVb;vNM>sFIt^!Q1`PlieXmLlA|%ZIDj7qZcY-<D)v4Ec
zE-64(Yk-ht)UPOj<1m&cA-|f~dbV4gk{5XXR8MW(&pkpD8wxnB4Loc(7MBAMPwdCm
z3e(rwbMSC#C4Ys;h<dwQH2Bb0){x}2W)8z;IYklL@7rctylIY;%)pp9j#h9VJ5Q=i
zeO<)OiGoWajpBJXw{K;`N7A2vU2D>cA6m-pwQW~2`%lQJ^v+LC&jRx%a)vjItL;qR
zhWYtmChPA0`kj8f&h2p*gcM)nrXoxbmh&4(kxtF;C)M%7MpLX))}$%1wbJnT)X2~q
z<8<q*dM`&s+IG{8B^bli9|m%pCQ6H|f8=d|fwePqwB7@K!p$)nCAjQEY}0gj(HpK2
zc1Kv(dwar2#c7?lpo|V=oYxcEzUZ*H@7>;C33rrr)XTI|CQH1Sfh4cb0TYO8;$O$4
zqYR^|oAfWeQ<LVkDuCQHIBcQ_Xo&9MgE-Al(~-H;ar=u|UBOU}<QGedogxN%S5SEv
z0j3GtOiLr5y|DLLfY*fs#*%U8hTpFRlTG?R+{u=Ptj>zu+`bOuBCH$}5^y!hL&M><
zEh|AnR|?<?zaYw?t;)uBJi4NpGc2wC^C|kg8rJB0lBxN6UH;N#RzJ)EB`i#G8k{Kg
zHGX(5<$gVDU{1S$p%^Lpl5TJ7GUs?wq_qAV&qGCM9X-}Wv`%N1db`hR*Y*siDB@g;
zaP_;3X=GD^V5@v;ofa_>RnDu$mfPh!zJ!GNLW%s*j}LF73Vl(7M}VJIy97EpLB~&C
z7t1pH?$j4ux&{suhdKP#;9B@W3|JG`&oCeFajtF^@4)2kPcbVxjL#-Uh$Yudedios
z5!lD;LwRFC&F|BbB}p5@OkK%Xfix1p&jITmx*vT8gO@qT=9(8m&h24h<STTXX{Htw
zwU?DfBbo*qobSgv!M}l=JAvQh(~7^y0c;DQzB)Hg$R}*_@QGlB(V!vu7T1<6rk78B
zR8H}04Z*P*HE;yEyDRM7J(_iTn_6YC)kpjZA&P5x_n0D{V(C=HCk)jm8E3cxCm+Q<
zZnrFqcO3k+)(ZGGK#m@hD9lDKH4udG&4f_$M`{?Qt{cg=oNK(3-7$|@lmq_fi2kgf
zPlffv{q9oV2#IKo($sIJ=!{=II-IlW+?;=r2KRe>cLszPA606RB|gLu5|KqFOA&}q
z&jYj-yzMQR75#2ORuh_*@#uYeSdqv}IPn&R_|%%=p$OseB?**tIE4nwro=HPOf$hm
zhrd-NkQnG41&ENdVN8d!1I$EW`;CM@$>cdj3>c@D_JD#%$L)QkT+BZWg7gWcm5qy|
z@}lJwJPN(g7u;mfuVYWKfEQ;?Cna0lrW7xNO5_A9l2j-(T2Z}-vjyhWSOm^EOF7>2
z-^Q62Yb6*pPhR)_4S<a;)2pk+C@N0gILu}d{Ro?_8fxH*oq@3DbQy&0rX|{RJQaT{
zP6z}lq+o8x(o!h2wN5SkGK}a5tUb^%lKkXb^9Pr3Ya(NH1d=S997Hd*)x1(Nb#t23
zsX@O&>+xGB<!do{8pQjy+!;`ioToJHE7eztZEkHPS)g~--!f>aNC=rs<;VBg+BRm7
z+(cO7>LyPZ&he#gSd@PZYc4TKre0p;-@F`(O9zS{nf)67mm+j3D9f5=fy>pIVay&$
z=iELN(thD3xzpx!?QLKX4j;i#zB`2a)P`lZZNIDT1pMyOS}y$-obmB#*}V;|=^7;R
z)qRdf?|0P95rNORh{?hLd?~)}3^HP!K7lOl9Hn1;m~DoTDORbO3#dl{f)da72*mU>
z_e2uy@|NG4UnAM0SB+FKD6UGn>GYJ&Y-Dmejg2*>=M)UX@n{Ghyt&s?u*97pnY#+g
znzN0S0Ing>vj$W$8e&RVf|rbPa$<6+kPFy#k3oFLYNe@GcazY6c~CyDUqEypZ6Y!*
zC_;&N5U<wO>qL-S$-vyTswifE_DLLzdGJNdB`SE^m_lqLO5;TCOvu_0@9-I!rsjqq
z!)eyZUyBh#+>SXOsLvYGYeBG#sA&Wj%!3Sc3N;0h6w=ksiScvysxKN*BkfP+z1l*m
zxN~V$If~IRGn!`}#GWnJrwSY=VZ_Z8BD^#~b?p<iz02Dw;fyiw%Sj>+DDux~p0~t!
z-OIoM7r&>~pRu+P98N~f;lqEi_eA1v##;W&D872oB<vRZHn@|(s9HjO@+0k*&S6mZ
za+f4VSbApT3vAbkjxF33i1WJ%6dei`Q{#LWG6C^`kLeIlRCish#kPB$@h8hAL8ZHc
zT?=KBm>Z4g%qrS^l~CSX8lj!_ukH)MQr4x+WTV+yfmi!5Q-q;SZy>bHqBb-qDkXX?
z&+)-Bi`x6;pUIOq<45QSZ*j@Fc@`RQq(QY{vQ=HE^9q`2x`Y;8O9*~*T7~Mnc&hxZ
zLB*?8?n+x=WW@pdPRevqdFSC>bElTqSzNy5J8k{XVvSG&<lu$@eWZ?H{KL0Ob!3sH
zZfSFYXL-Lh$k^=BIUXG6zBo!F+qL>dcdAd<8>nEP>QtVXs#Z@*VGjH-qB6>i`?G?~
z?WOg$_Kk90-*jWVj7#}i)XCbM04l*}fX@(vY2$#|T6r#Pa)IauTMlg3g0-1ao`ris
zR`Idup>z4b(qgOs#ou-W29gX?DwN$dtp@m2kCqE1g}~lt^PDF&UaQMmQOv#dSDPdN
z@*n#J_KS?7EKbqE?~~^=Y7Yy0nL<w@PN#$bzZ`a{&+3dKU^=g^KV2Vh6@Gqd1_{eW
zz742<@C9m=;czI2%r^6W;m0RBnot6no4ntXeXma{)=TfO#HGdDYhb2mdsBQg-$uQ_
zaJWoqPH$uTx!=PyImd?LdnTULi;<*j$=v2fxaO=C_mZ;feUw=@{0h$AS&U28No~Fp
zHf8y;Xt<HJ-{}ef2K>Hp%W%A1_Z&74ak=qA*ksqOgM|g7ihQ_}0ZgQMPRYlU8F=oa
zT$S+p8yp$-?^|TMwd$M)$AyQ@Q@O^dIf1|x9jSoJ_5}~Q-W3FqHZacbw;qMkp5;pR
z`G_CMioW_9`BX3f<MOb~<Bw2^HaK7fr`;?e(DG0<&&1)Tit2Ba#4X;(9q4Zhfbezt
zxRd8VgDXY5qKvFCU~vtD2;$*|!f<I+Ogr>DL^*BN&^eK(p!w9{ZekIYHI_g4xALEE
zx^I&{KDD2zWiuUdzcxf_+4`5%7F#noG1oF{tQ*Twk{Q9Hq|VQ8Z|DDea+1)N{ED&I
z8ar9xvHiOsS05#jvkSj<|My0DhqFJ`XIzLXhJncn8yb1qAm;u(#kE(g{P)rmdqR(0
z|5UXkZMDy~bIv_U^Qfw-c+R>H&$+viX}s&=-`{<QAq=7fcF6@}gX4u%$23S&1|1yc
zCu{FZ2q<`~&mErcoOVAzK|YUQHtiwKj4J=oL40K9Sn}t4N)At5a<lqLM|nTp**lMI
zcwWU^GOt|{TsKGGA5C}rj`b<q)Y%R>RG8-SEgUe4GGCV}SX+}I)qWU4fT|A76G0=h
zZls^@&oW&vegnS&qo-BJGdfQMUaTC@edq4t%+25<*J1+mHB<KJnOt{0oLpPC<E1O?
z7U2-VI0xB2F5M)RrueSC;CMwvv^Wf3EZtoVXKJm17BbAUSKNv_Yz_rYUAf#z`LHSZ
zMyqV9G?(qWzpPcOivE80e(Uf<J5@JBIBy1~dUSo!`nEiNzpUb_Zp`D`b}xlUe^fLd
zYADib{g|yxUD5$_X^GqL7ri`2dPcEJ>Y)VYEAxFm^v*is61Rd(vtl$W82-346(pNk
z-r>t%<@Ykjd+K1J;iJrP_`8P(L12;xIfF;s8|LY}KHo7s6p*e|CsUs`w5u-g2u4fQ
z)ZfsWvl9CLs7{#w6&+0hF--A`Vbs~AC^(mN;hNR$!rL!?fkkBNake+XycF&xBf|F@
zWyrakxZHHYX7<k?1Zp~A)m2!?9=Iu^d^{cds{{_6pE+hq+1ZJX%g|<ENdbyT+abM6
z<o31{l61276qjh<4sCc->Qb6iGVy9WIh8gYOtp>YW+p%OuEMSsloR9rHyLAgSr(t<
zfXgM<F_Ib6r$ad!&5Zyt7DW6-i!-(*R7~LC>nRNhsZ6fVIMFJMS){|p<cHHgPU$pZ
z>aFSBkjiiA@Fa>p4+!dPx0bl-_B4Ci{v)luK)Sgm4CwQWpo_NLy{G_7HZ)S7WLOdZ
z<(<c-;xK!D6U|_Hsjy_iAz|@yHj_$f2yA`qZC;TWr1|==PSBqo5wk7+iOa)YDhmry
ze+t@IjYp<$I9)Y4U->4)rKN>lg~P4sWHOwI>9bG=&HFU5zwQIE1m|dXHDhJymqxIs
z=56XHO!g953S*+1!*Q~iar_8Bx!Y@UO4qi>762d18V0vvS(p(K@4i-+nu8EkdB17?
zFPi|Yw|>^QB6e!d=X0e~6wB>Xw9pFe(<wjKe5-yJ^2M2lSOv1aX}W%Bh~PQPp%pF-
zJ7LIXl@90o1m(0&Ncpn!Mz$@}J*@^|7zsdqkK%nr#&$t>=SrHco;~O{pSSZW=pnBn
z^RM`L^a46oY-$-Sd+E0*n#Nh&!_f*PL)={u55bDSNvGe^ECDsG`ZFb0q0tbYhDm8l
z0<X`GgUDu%K3`#Q=C>tG7dg4JQkz?HS?Ua?YA!c4YwMvTOp0fzs(BTU)-+pICxX<_
z@X&kAL~_qzs8$I@G}#m&R+^ZI+I;P^cEplFNc<N(nJO>ZqJ`Jc`y{N>^h(Cn?|ziE
zv)>%uG1#bRlj^k<(G-#p5O$3d%GB#u2&~^1eLK2F`Vr7Vn|vzn9DiVcqXF1n1WmCp
z#>RwW-S0I2bQd$+d|YITRc}?X3qwo&L2P@*T1L?N&ihm~C(#Lic!~e($GrlEcu3qe
z>(21^d9lL5FUj~5Niqrtd&_UgWtLQ)4whR1@pe2T=23B%g66aHTBYmFIR)kg+`PJ2
z#AFfC<dz`>0%~SWO3*USNVkA`SaYqJSshq=!p%i<F>5nt32NRNQ2k*FzzP-y%QzOt
zAR%GNd+4By3HV@b4z}GtbsLx@bxYecxF7#(xBg6TK>>c)ex~W7`<Rl}OI`+<p+En_
zEpJOU01(NSo6FnS7!1@mi>?1_545C*-&GIZZEO$pq#>J0yqVxy<E;uQX%S|}K>}oF
zMGlWQ(p8@GS>q{NxXqL*2DPVue5~UnanIvyTUHy=W{4+9&*)0g$eKv7o1EV7^(B#C
zqcBi(w0j#cIA8w;#?TJ@%a9alZR~%#@X5-&^53RD8sJ7?2u7zg%I7AXTiDD*R?XlA
zxPE+bdm$+zKU=2}p@J^+H$8QrZUGdvZpl06I<PzCt4>$WtWA%Lm*Q~=KR?>|9dGm)
zu2~@jd^B<0#dmmm^@k}7w|ru0Gk$y>ijeHC(sfgEDw|d@F=~i5H&)5CY`DD?x#dIn
z5&K&DI(CkYy^JFgpvR@&_#AVUF2E;oWIr?jabLO?k-tWk{!K>bRuN3eeEOUkaowR}
zd<iWu@%06juny^8he}h$d=UDlzA!Nvvx&ld$L7o%DPkcl5*(t)nEe}bEtusl@%{ds
z?mH}bA}Q9Q!<t}h8}V>Niq=<YMDT&hc16t6Y+r<5SFJ&A%hH_9?xvNKUmKUl@q?!w
z<?7;4qFJ{_56$zyP=2)EG7-cYY-BIudmlchx27Z<A%96ClZvMW2VJjGNtk0?u7Fet
z#SZH%Qph!l-b!{hV8b*nAsIuw&mp@E7byL$0Fo9}O*|DwYK1J;oXNZ|)HBuXE@0m4
zV4{@TI7ZyH(O^2zQ)sN@{38yR4-g~?gZ81Juc2w*$aBJYcc3~bP<k?U6Wst!QB=vO
zNkl>&9r4WsD@cq|q~y=cFXox;<R2-cR)w`OW^!2+lqK!Xz5ntu5k>=o!Z`1+0bpnM
zxQEfp-;`GudN7sE^zM{3m~>iq-GY?`4OnCnKgbl0HFf)!<FhU!bTSEc;g=|!RLOnM
z6immM0jXJZhPm#gvjw#cNkUwGe~$cDVJ|Qzi%+tlIr*j7ViW48l<FV+*of;#Pa;}{
z)*W_E!@Uk!o*X7=x&^VGUSI@S<(QXmt_sK7(Cn<u{9neu7%l2xb7K4pU(lKFK3m*o
zq)Na{3f~uXYc=G!8&gqdQ15Rn2q-MpF+c=(V2R#MPOaGTad1mS{^GVB#EZy$h!ld8
z`0d}bM)zG8pZU!fkfy}EfXdr5C~x>jUiQ1j#1j$7^pI!w`irP<Ejl3bi@3uBaobW0
z8E{R_886y|GDMbD8fuwAf~T(A_+80T(R4`P4Q&tvbFuY9YhS$KrHKy-*Iq;=;x1v+
zY4>B$*Z1KaA=X~PD~`uHbwPdVC=}MF?K82Ox=|+py5>W@6R<-w6uD4{O*8g=esBV0
zR58zCZN`KZxGSZDs1oIZOz!1|363Tkl0d()b_;nStJ$F6lF!hwUx;~M!+lcCd8f8~
zUMyEU|0liaN@yOE^MhDc%W<nJ_ts9;p;7BhzFp%?wyp6aql-bsR|oy_pxhrd!mp}%
zrLFR!&6s3P4{PS&`<TMdys#{sQ2EHjm$q+z*d;K5P#-SlG^PgnXZ_c-tacJpiXYqo
z>w{oewB#7XEKOHu14PbY>H=B8NzI$ug}xQZz`gqq_|~fZS4b(&N3!pB*k7UWnvvY2
zQ-(l`2k&>60x7#w_vg5zT;N>G6WH9Fc$u)?YF}QP!-C>Xu8NYl7T=F4Lj}9cUi%>k
zE_ZWx|3gromSHELCsS<b!FpTot(8T@%(g{WDX1wDpN>lm=e2Hb@jw;s&T~7kT~@=1
zthZDM&thrmjFFe4ZP~x(y$OOT==B0}@e9T8t7edy@<7gwzk%dLOPRbOE*BcpUzi5r
z%2sv?b&w2eAD}4uM<2zx@FUQOYrBC&9k1sI>|Fe}Zq-lKdhV9rgnABC?{}k{5&2ss
zRV#rn!iwScVV|j}^s_`~CVv07=K}4quLwvaVRXhd%VhqPO%j(f9HPWtflZGLiN?!_
zXK23HOei<%=UC;M*8EI|dXST8;%#lOdy}wsmT|PEWgnmvZ*n<mNG)A)!@L5)FwHD@
z1C247rwu)H33)L=SjbAEF4H{zu*r4Wft#%luSAVG7)8Wqxm^GVqB&$W2%96gRewbx
z;kc;w_OQFnq#e&KpOj03ru5e6QzO63*m4?FAqt-*dt&<3N^zA;HBLCp4=j6ince*P
z>XEr#V7kztIqJEHb~YBg{fAjr;}%5jDH(P<3hrVSmn^6WxxmEyCZ*2wqW+fhjjnuA
zd3t19u#Aoxd)IbJZTz$gz~#^5??3rR$qA;Ae)d<%jLGFG%RK8(Z56frXta~K!OlOs
z>IiqA$155hpOIbgm~l=*9xmbr1)_A|KIH+Q)X|r~i2T_g_{}iBqSTBKFt$zA5bBAJ
zcwUIOc(einh?T31^*aVDKIQc29E6{qzwWA|xbRHL;ghU0Wo+Wuu<2T(W|G8abyOW`
zD?X1V;j<Jklhlt!MaL?<@&nB8!2>OvaZ1>!>MszF3fWf60u*989;ti&d}7J3)PlSX
zavXHqT%>;rW4r2blK*}KO<v$~TM9~qHFd=7%_a{Q(N3BFv7zacG<&x6v)TH107*|V
zx&Tx-o*$&*#iqr6eqskUk0k&PCyW6;!7A<+wn^lDXWr^5VUZt{GhSmdFK9C|Ds<S{
z%+vl8D?~gCYM>C3fAYhh3n4GLA0K&z?gN8nPz9IS$OBP7#asof{607D@I9)(!Ad*M
zS`>duk9{-ty1BQO^CnVZ`<1X_ppfqK5;7k7(JE-yUx+YGMt2$C(Wvd~?c%N$wtlj2
zI}Is%chN<BmIT{9=X<gdzDqoX+@h%5+B0an`Ca+)^HVOawUyzSn901^v!Mi&OoPu8
z`ld>CesJ~`o0Lq<1!0hl`uqV@{Q^4jL`iD8qB)S}4)fddQs^K1MrdO7zy_q_#iD)Z
zwV)XbMX}l0u>p@^U-8v+TeRw2^mpcZNQgm2$$6`JVhkfO-rwtFj_zJAE^MRgs5JBe
zkUy2R`O$P>u)AbZ`{KCqZ^Mmd#mV*1<OKZT(hzt~Bfh#-K1D=+#1QPqv;Sw0-`YCs
zZJsAxG9zcH*%@o|WO-f)E*FzqO+ilX%LtI;Ou!(J9&Ub7-3=fb^l_0&KaMbK&9Y}5
zuN9I(9FRLO*0nHOFk5el|M#H$E9M-$gGsbf;F+_3m7Hw;=|SJOZIMl$oI5jkp9d8b
z7dFNA4`bWBth5X)^8Tv>iN{j=MzHzr-AYc5={ZdoV0;nL+Zg-}LwXm)KGe+-CQBh8
zN<ZfJt>mNTmDE1wN!(+z`ss)%HGN*sy~=k(;$5$36pc~Sqehoam*;vgw8c(^JkMNh
z`7-^?r!X@Mt6t`&BJ{2h!fG;`Cs{*DXUBW{7A<l*xDIfUvY!Voy1G=Nw|#)y!o+!`
z?ia5-NVQiW!}+={W_`;rWwn!|$Y9<OBZgDHv_Rdj0m<aGVPPm5F=vGTe4XapH=9=!
zHsKn1JcC0P3DaM#>L(3VPMN49(UKY?2H(p{?a;vTSxvek6??z_sI0JPqpzthD45qi
zt9QEDt`jw{kWuUk3^JSThqzsOSe|7tY_1n3B#|2Utj=v4?49A;(0M+U#J@#)F|B@-
za78+|x|ioOBV@NJDu}Ce_t$oH$+)&v+AkndR$U7hJm#VDQ0Bp+lQP{N>;<1Ag*$Z;
z=j#f!PPL7)%x8W`fx4dBCi(Hr#b}Qw!0PKo)=%p33y=FTEy95<+{l*mcVa+~M4w*(
z?8!#Az244EK?l!;N>R&WX8P$Zf9n8O(B5u%9ERWP&@bh*`;5t)m0gKaBAm(QA1P0&
z-RzrLzj@}CaLYx>A$g%kcb_jH)-;CNPO4-m#KW461aapXx;dfdJb&plK0FcrHD8tr
z$?`Da0w4Rk3VN7&SRNpI6WCs|>2&2R+a3hGDddX|SFY7m1x%U$+X2rt`Fuo_K`i2#
z<`<4qqBv024T&Y`YoJ1>t$4XXFr$m<CjFKvuRlaYu>BVqfN)APVG$Rq?%B+@9>H8p
zyel$dX9dIVeKnBBdH4wvd!dhBoa?89Pw>2WTRLzZ(xD{HC!x;41N?7JYxI>65sOZu
z11!ddL_BlG;ou+9^!4o<^+iKz`$gm@_j9rE8Gk$0R?E)B^mqb)4#9c@|13dmR@9_f
zG)=CJkV0M-hWHEQYvYqQ@Gnf)LJBklJlGzHyoN{~Bv}oIH5awb6IHJhdy>kuuXE{q
zN6<ph-atKk$X(P&b)BBnu7$T3Yeig-IuVvfbw23-V1$2E4;~P!7w7H1<wHV#RQE>>
zoE(2mF<JJjm8qVidWdZAigmXL;#%q0(m5afV-L{mX<lJFKh!zbc7lPuxRUJJPX?JX
z%G1LBdbTi?h__tbUfEbTJ;e?A<nIi9E@7U5`H%F7ybB<dg^A}4{0ZBw%WBVEQO?LA
z7KDI-rO}&S3X~J(o-`h(irjWz2qJ@yjRD-D+Ei!$zd?tBJjv(yf(D6XG2%5hxt~|j
zFMf;otZsxwV|PywGr-EPT-m|?oTTP?$O%4ji=gq*eI7_(OtpO=fPnq!f5ARsfZ)oo
zPy;tOwBoyl8w@)Ilon9_0rQ8AnD*O&4xBzI1m*vOEeIZT;Q#wekqE>LM<%n0bx=zI
zyIVH2AOt7~>H)ps%0_*jO@eK0VC0Ya98by_eFm;AOp7R&)~7bz3z$<7%#uv0fxU}i
z+^_Y12ZPiC)fqme*9#P3knb07AQXZ;J2O{Fpc>!*7rNa=EZKpob?5{hqZC8jx6UGT
zWJM6{CjGZ>TRPY&-J|lSQwtDA&I5Uq1`5Vin^U9}-T$Q$S}8d(=Nr7w5CZW<9%D-z
z0~JDb0k*V{@46OPw`Wlj$-VU=6oN^g)QJz1ZDXB(Q^6fK72}8W>e@|g+czp(_L_Dz
znEv2cdCZPE&N8l7vh>nh(|y)83s$mxQJmI&9=>+YpS_Pf1~#Pn0JTBI9U;KwY4IA|
zzCey=9&Lp}QnfOUwh71&!iAhk=7r04&1vWEOv}_MWj+A|kf7>>fB|F^*>+++{tr*~
z87uJcE@)}cW)9ynXaCJkOz>6uYg*=U$J*G85$q@FA&D<rV{65;1wVB=hFyS*-alpc
zThs3Szt-2nzFDXjZZDzCDzB-^)UFvsH#$1V?UH902TNNs;fW?N6`9H;FB+p$>H$mL
zyOo`e<AyIpich1kq&YIpwA6bVR>ZbjoOsDgnz=61HBWh+3D|8pod$j)-p&5+yPPsL
zC|NpZHfBjYbO`vgNwhbra2AgEa?LU47P@+NY5SC9cy;YT3zNq`@V2erfkcKe{xGem
zf$*{A%5^)$KZ+aojx#Q3iXQ8<dfiZxkaaL(MN=THt#{OlJwzqm4yV!9zK{el?w2v;
z79HuFBfvxAvu`G9e*|SW*V-$A(VVKtFVa4G4v@xkreZ;Rs?%!1*PRglM>~GbK<4ON
z1SCxt|2|1b);olTrX~|aIz2nmhXdUcnRj5{wQ{NMc8t`Z&z_^ddYfDLIvfe#fbhY^
zCHEq!H}@uQ5{QUlZt=WO4t=it1s(M-64YOZqP32Do9JrU?b0~z3;*V0hj7!C=Nok)
zc#0$Fm{YGXNwJ-f#FY|zo|SUENfj*cPQmc~cK~{}PZBYdI~vdY#e`^mB|_>DM5Bh-
zInzBTALV%=2<$T`Io`MW(Z>*xm7uoerhu%sVb_Vv5t&XK67roF>MIPA*{fxUYj!Hi
ze|$k`1DlywBNmtAX6Pz}zD^Ypaj_~R;`akDd;$_wz#k5<Vfe^W@s;Y;{T&yCBU}8W
zBfDQCL{A4A&Dtd5kcpduZb!C_@2@let^!m&rq>k$Lb0J%#%mpKOU59|aIjE-6&~WT
zG!<+YphuK*lfac&6#u<q$a1n)W>i`v;^U<XuUE3XO-v4B8q#~zR#L%`QjDPmX5o9z
zkM&;2ZVLycmpt67v46oKqI}+*z4~kq3XhUA$;Ov}6fTE?1U{(P60n*NSHwXEx9lE+
ztWvoq-ab@NmvxlNy!DFByHs~zfsT~|krO6ic!s`!2_z_6{|AsltiPpB7TKzYz|XXf
zuUC?HIFtFvqexIBPAzM%E)wg0C1THQ-+VuXL;Ph|+@JnU@c2W3d89yMb=QQ>lZX5*
zBD_hl?X((%tNf(-39A6<&j)LTjQP*5kev@lO4T$->I7TE=~UxYE~i!vB{Bj^5P~>q
zqR?wjs4Zx$knFM`Is|Sd;sOj0X;oIYU*PJ{!W7DYIl?RGql+YA9YQGn9m8<MLC{T@
zbO2TX`EQ6I6ElGIMKQXqU!nd%`8}(*=MV`Bgh@@&(@cM+NdRF#*(j7%I3bOi=04=V
ziHtKKbRS^vaf{wPECQA`$AuUUyk96|;whQyQF#l6RiN|4qp+MBM%fy5mK?XYTP}y1
zds-m93;!q#Us9EP=$0+Bv9Bz_9rOS1)hgMzPna$q5V80N(yIaT=|F+Z2<iF|l$6QX
zjYa6A7g6>3|E^?#%(^-?Pft~x=^=I`WXh^Yk*E>M^A2@cTnMZG@98aD2q%Stnnr})
ztf+>9l#Pe_NdpnD0T3$rZ#+a0z#;tqkKD8Qacdp3xKw<k_CL_%ofdpGF-D)i5`oBw
z|E9m<gvi+cfP*ZQ#{Uk%{7-zK&o)1A|9(s3ihR6-2<%{))v+br=X+8sqB-{NsumN2
z^g%hkb2pl3&WE|9pKi0wuj;iwrly^Ro{=s}XW-B&1#VvwXwVjx9}06TEj=H*Z-Qhl
z+l=kVvJ0C&r%CwfNEIp~r5$vK@mV_mSV?FS`g~F3^Ell|#WWvyps-?%rtO5L!6)F%
zBxIo(iKeGsEY3*I`z*RNh;W`k(xy&I4sl4~_0@sw_9Z;+bJ7(J%DIq}-`iV~??!GU
zj=PcMUq++kAKDWoGG8p6^Z1UJ6c;a<IXTy3y8<8=gg;4Fb8Ej0rhC5l-X;E!zZ_;m
zOs@LToV1u`0X=tQk8F7-4L$dY`<o`ZN<wG$9-%k80gbe+sVLZUdQIBvT-f?z+p09Q
zY99f_!0&A9JzaI2?{rA!Xl^a=YowZ%O><}OEB`)>v+1-!3pWJGkd>#YIBKo6)71Er
z=UjAkiVQwT4y~{nPpU>X-aQoQ%a=*4mNgO;-m$oKp@Tet+tYl)z?)E+QF%R#)6H6~
z2uMTXXn+hc@o9Va)41zmhAi4UOq327o7@0*ivSOg_I+u%hPJ%>&Pjq{#38+V{Fkj!
zTFinJq>a2@Iv$yLCPZz+hTgQIfhY)&CSs5^HkgS&BfNr?*LYNiboPSKR96ATNJTgF
ze}wUha|L>ih}qMTSNh$xpcLMn)aq8l&Dw8(^gnb*^dB)^xouX2o5e1rJ!Qfc*Egj2
z3uBbNL79OI^Sa+LryxA%K^WW<+d6n^Qj7?V(QXegDN(JUMIH;tUEq6+tX&{d!4Oij
zdEPPhiG`BROXF59AtVG=va&5V4$`eBZ=^14%E~QU-CjA2)O;Pez%WUR!Xu#M)ltl@
z;)sq(ia~s^@?f6Nr1-_nQf%DOTN^=ADnl{WECeBD-n^B(NelODiyty$;zhwmU7Z%}
zS?>az<4eV-^pEY8<SBRYo$hLG<tshi{Mwbfqw-skUL&0bX>`g7Oj;+faFhN}>w&)%
zzg#s9$|Bl4^;UF|)#dmX+$K}ErpbNA*)K0=Xq0ddg37ZFpdYWt)}^w{BOn(Fk)V%%
zJ2@?I!RGzLg}RP%l;f}xE(gfv)`|!7S2tH2zh`<fc)OU!g<Xs-sUI;tfpuXzgCsvg
zwJ|a?$Q3nqF>Bx!zz)+d?&Vx1mybG`L^1wck(!AwKVe|09xH_-A%i*^<z9fAp1fxx
z7FEw)G3a6gcw`V%3bF$9^zpy^cmIYPfc$^=Sws2ynoH<o3wuvQRTqv&Tf7mWe&Y7)
zqy6MteR0OqYHaTIwywD0hCI&!$gcVVANv*3!t-narlG!5F*F`9?&<d!SU%cESSiQ_
z@HkUM<rjfaX5I?a%CcbZW@(^<@tcQ>UHS66<1e>?9ccX@I7}R_B~iQvHmq7TjwuNk
zdq=d#F6$$P25W5u$gag1g7IT|abuNQA{h2js8_-~klBd+fD?%@dKy0o*onVgrvjSV
zP>ChfHQuydR<~8OPx+?=$tY-|!re{GT13{mQXaZ&JU7Mrp1j%pca?kFTCats@zOzr
z-n3qLZ6WI-V!O}bm-uA3Ui&1>)6;~p1hM8?XI@e~T*N^^y{S?0EJUB3n4o`ZY?nBC
zs^V4sIre)CLH!0iq@PgqHmGEtZn(nt2zqVQ*)4srNPYj;AagPn_*}^r(xVxi<ZY&|
z^{*8l4>-h1na_dwc86OWYe2h&#r#uYLqPerN%y_W8_9T~(7T@O%*4Bc0Qv9&7hKs-
z9q7FJK)D5tyFCgOPwCIj_s_`h%)m_MqmA{nzF9l$n+x&I93lz_mZOy0gG<y?%MjuX
z$(!*n#ZeVZj}-Vr<1Nmg=%PzGx=o_AaT@uJ_fEU@3%Xuq`wSn`K3(6kC!POlde0H}
zY15cH8G4pTyk!1jlZpWm8>Cq?+8fi`3yjQtwTFAoPI|q6Qm?JGKpd>~OTReJA8qf)
z;vO{=!K4^u|2n}V=zZ1Za`bf9*D8RbtQtI<jEL~(ha8_zK6yK9r7In{aTD~B+W71T
z0OaV-yT}7$GHg=mE*JJXTsVCwfVmMw;VxflcM(3&r!nAMWck|;1@$!r)OgT`l_SA*
z@^~))eXjqEIC^3+5Do{kk7@^|7COI)xzag%zaSmde?>$vSBuA+*ZnziARVr^3$5qu
z|0(V&-=g}WHK;#9X;4s7K|o2#ksJZ(?(UM3ZWs_0B!})27=}g~grQ;R?(Xgy1_tJi
z_rv`c?x%g8=bUGs9c#UN@3r2w*OQy8j5e?XtE;g(NpGS5`rZ2D0pDjX*V&wE%>^KT
z#~igtzOO7HB=ifBP2)MDsKd6Nb9YFQ*X6GEvH|hwGWPugUV&y4Z_q*nRrIU<#R-kB
zES{b_Deu028MgqkNvq_MWoC0~J<}dUU6s$wJPLpK78T4oD!slgpz6Q4nyz=ow|1tE
zf8Un{v)oK+d$c%5lHM~!r(n+pHBzbSZ2LaRkDAe2auY)g2ULrEa_VcQ9Z`O6yD?XN
zu$Q=E^EKq&RQFeW!MRN5apDt3n~P<uJ#LG#T!N*Rs&6ComXaqAcA-pVF<E>%=Uwlx
zA0=K)UT$khNRb%oIyM$OHr6K<=AN$5SHi;bip(<0Du!^5ec^2fy$A}`qZ&)+OcT9@
z^yfmIziG0j=g{|U8lU|j!lVAAM$2jCOA<*6w|mVGehaE6mLkXNoFn*MSBf=q3M<`C
zN~JNTzbMv!g@_oQRZ($;ly8{_pjxqaPjY7_XguYD7~w_=_U1)d3q>#$6J1|@6PHhY
zqZ-E*XVGc>IIO>)45;}9C2J;GYB*PXF+xxenbijr@$01w4Fn}RGy&_gc>G;In>*`7
zcKCmzr8(_=LN|h0TRz{#I^@un!i`mDsY^JICQzV4a>mlMa9v1^n2Pg5KoXg*WXw&|
zop@6pRWVeJ=iY!uzju`wYf8$GE<V%c6aYW++Q+V`Uhb$VE*df|=Yb}qhzKQF8}s|O
z1X8}@lu8RXB0p}OC@+#xDMLW<6t~7+!iGQc-j4FPzQFGU-PX6TGkT+QzID>^F-80|
zO-%yCwV8KVC<!5qc|k5Z#^u&eZp$!e#Ch8*x%4b)W^zP%Pe8F-fU)+WcD}H=uV0?c
z>K<NP9pW><o~@NpV!w+OkrboeZD8m;7SAs{8hBzk#Yn+QCHyO2uI6^_A)ZOPDZtBU
zsMbA6@C?Do@V%0A`D=Ps3_pb_zZfI?{BuLetEn;!1E==e(<J^k>WOx^+){eR(V{?Z
zsTZ`LY5PCw3&W&Gl2nD%rg(#E{}Svmq8}>%aGpH(v9{?-_|8(4vWd{1POpPZu3S4K
zeec|v5V=LzSi3sS6dli)#wR&Fw49&YR;!a}sdiI6Ndy>#mC)r3%>rA?hBW~ibv`9x
zRI<;h?dGOV)#3WGnZc#uzvle&y=%`~mqeSFcN_gfG(N(9smaK0Y1YF&nLN?-4Ff1h
za!0=5f=9b10bjODjym_tg^-?qL+JzX6a9T<S^?>48)GulwXKD7(=F0oF*g_*1WqVf
zljk7|#|JU~{mn75ERg-_@<5Wm&Fw{FUF}M&@XXhunVs6HEqtuNRuUE_JGMg#q2ky?
zH%;|tO|kt{#m!ao50zmYJ06e^9z!Q-1oGlH_eJE#k1Ic2I@Ue|)@rd{4W)TOS7;+6
zXRd|Ztq351YV~+3CWmku1g(_IST~#e+f3J^$O6U1`(8DYPS6|Kh2O4EWn!j$IaW5s
zxNL{)RU2aq=E&=2arX*BJ1&!n&@H~nMvg}gJ!hTLgw5Cc`^98H4m#%hv#@XV3b^=c
zvAdl(!v}R)JasGXkFnaco2#H%c#0i|9{ZY#-S&F66RIGbik9Zh^_y;kiQnSGkpcx=
z6x<EC@bXZZ)w(t4v@KPbiWe<Yf?@mp5#7>iC9_NwoIn~6l-;Yx?Nk|Fv*beXFj=zH
zniR7+RD5G|{h09yv~7w~+2^}@)lgYl@$+ZDr>dU@8*#+{Zv6^YYcJCko2Y63in_h<
z{6ar=YT5}{0$$iN!Zz})W^C@`-hQM2V!5&4zex9yG6$<xxueccNE*xojwgRtK?|Nz
z_wiNCLF$fo6rcDx{&oIRv(E6?nrM)O=Q&BQZ8`=rqSJ*J&LD3dvoqJ5zNIJ&lVY+u
z`6DItOzj2mK&AcoExw`2lIeuTG>gABpS!vYTAv0?s&Dv$GM+g)yhAVCRBuc(V#<l>
z*$!(+R!L4^n;HH=@+jwq+IDKS^`l3RccLh>g<0pmn5wOyx3RErd)mb{v~>uSC!;+f
zMa@M%h5={$RE@*Sjk38b94Q=|sSU*uTahypjobD6?;!ZEL#m0Mc8sRgt>3ZKX#>79
zG)mk(m6j1XS=6Eu*iaj@2zr-aDq@vAf@V*x{b0wM7H)WC3Kb52Nx2|>JCvnG=*Dba
zDU*+jr~X0H7x9o5=kk%Be!a!_o8!RNe^_l5G9RF2w|#=RHWDkGR`+)(RGR={gumh*
zGc3h%op)C6XUbC?lp+Z|wLXV*LGg*?@4SsWR<G65*YITQ_BDp59-fO5>VuAR1p}6K
zyHp9H+V&SD$0HtVY<>?Rg>?zcOt^i`A6k>b5`^q{lww4-EjEwBEmJ8YDKwHyby?nd
zyQ(X0$$f)aYN{!hPQ6v7R|`_@NfM0NV_NDGghjtI0DQm=+8xW2mXZn?Ze!UZ-owGl
z{H|ELP5sQ#Z9W6~J2q}B{)LU@;P8fC(srb3kOh>9cfU<Y(`3!Rj4e7|A~<FFiQ1zS
zO`Z3CoF(1e$Y{>TlYGNf#SkOCfWC)uuKTkBYUm=9;@)(RyM2eotKhY{#KGQI6eqd*
zs^re#-zbqtGL3xiQeG5Ea$5LDz0TC&1lqJ=2AucmN=5oNf!!=6RuQ_;iAuH}6$J+x
zDB_(gdGZTax}165QCuvnfNjoNq&(Scxe4tJuzj`YVoG5%7fDGWfNtQ=n{LZjhXWe-
zKxQX~rx-rmUiQI6ML$a{bsLi_i&Of4=}*&Gh+C31v16rsS5jUt_b7zG!#;ka|8K%U
z!eGVX(_3?PrjQ;PE{d1-#i&W0hd?%4oeAZv4|y@-@KB%kC62>Hja=FlCAM0W$kgN-
zJqK^^?z4>#g&+5C=WlM7RhM$v$s@#z2K)QP=~Rj}j$9hCG22y$)vd(i9UKDqthjFm
zXLPDU9Y^_8wFD4v>fTEu0(0Y%bS;o};vCkoc%%8q;RzR8%szZd>5yb87x`y3(d1?i
zi;4(0lIZ4=PGr6%r7^CHG*_~lFJX8*V<%25O)lMm!6Bx*kX>l~+*M!wYWGNA%BvwV
z(%?sH-MjD@QZ`Q(3aTjcb~*ZwA76>QSBDy9CnN}49d?bLeyo+sOioXa1#t;6FMQ?w
zz0>=ZH;#TR@z6f}ZwLerv$*Mts!iCEQ+?qkYkXKLDPW1F;=RmL_+}8O5LuB@_?(d3
zn8v_7)2}a__e+Q(-a6k)`LUw@*OEK2k5(pLmuhBo?HJJ^_AiNlb5pM<CutU}_$>RK
z;3nVqO<&X4MJO>_%C1S!I^MpeiLy){gVA@3IpAt#zu<g0`gtSWQZcOLIYy;WnKBjI
ze|<b951k148ERKc8KyxW&wr!(HLbX`n3pQb3J;>vD~(Tw9j%Fl$yPL`7p?lPe$bZq
zH!gXA1z4l1>fzT~$QO>!donFWEyLmlnM^?xnsv#8!gB4TuS~nTr18DjCz#U$i?065
zHy>arA|;@Fb={Ruj6I_x$tFYY2o$pyDsJ^J{IYLL%Q+0~n=jRr%U1Q?4*q4T{K?<y
z$cU!13IMi02#1=I`VB0tg~|tklqM)<RJYs-{5zagEut{Vz_eLncik2l$X@m-o@%J;
zPvrUf`AGTrfoW@NYw?4hcTisX#L6Uie~35z_(-n+Ycv))G&m)yF6mbDqvZB4LgVGO
z9oIC!vZ>`yWOS7KrwEFKeHv@6xc87t_vcJWR4Saq=3P5i4XKijU|S50DCa{<@|4iG
z#=bMg03tTp{6muQaSge47e509UxC@!gk_*)<8l41b-mp*`*XLqrKLl9mSqU%&x7xv
z2y{P0*-HN@B4%)xeeh)#F+&#dh8ZS;wS=7-qV~R)GD?R&_7|h2m8+VX8U{n!pTxFd
zjaJG+8w$=MOY-oO6g5zEahe_c8Bg!o-*fBDXw<r+!xKo&0>|S%yZCp%2+1Cmm$O-%
z?;unmmVYYtCobm3NXuE9&ktkk!kG<)q>Y6Nk1MC8S$eyJj}xgf&Ac5V_Rjj{WVY5%
z-$py`6z#dU76)%`%DcYN!r;ML(PpGVY3ty$yHFm~OFmBcC~iztWeO8oXr3>wfRAf(
z8;|nYu^?d(vhHY*b^L@#O=;6w&iO%WVtNKE1tB^|FaY-G(e_A|5!4cN?+)E~_$~n_
z*rW44R_p#*{UQ1;wlbm~ymz&T-`y|B&Mla|^4r@S^f`E_f8C&&*gV~0C6_0G4#aJB
z9*RouRg%QSE8aw0ykr43>0bGW92{)9V`F_45__c|wYEbrnSz!68`&NdW4SOn*N9qN
zWm8)HQffe5VRB3CA@<Vp)u|xm2X5I@Bdx>A)MC>mRB6`!O<;VPZvML#46o9u`F&ZN
z3%Y)vjPb?F3Jc!xNG&#FMyX4ueZJ0RKG8?J$nk+D_Y+j{vzT~CHdTViQ?>Y?x#^kQ
zxkh>XucG*-rXUbT@(9VYX?*HW#6E%8Ie9!{gSFt5DYB*m2UhQ1$(xYw@3In_ZULzl
zdMP*MxGrhod-89p6W?2O`CiVF@afCXh0HqjM=bHlazQA*7N6cM>s?uEnE4I)O+i20
zidYYofX0jSyE;^>1Rj6WPCA?-59s`uq7!mu^yOs490aUr)sf+1TL9=?_6&VDs#ceH
z{Hv188cI9Y*{V@;!2SX<vp3E&J|^F&z;D0%r-4@X8SL-(v`3$zYhfytjq}Y5;w=uu
zFo&ExOt^FceYIOku4#COO9%(AY`;zMau?|nVCCEI&Uj1jAzh0kRX-n7NqzW-33`8|
zB~0S{v9WX=GNs`kj$fDEn6w_xS`O3)*a2w8J$L>xo0I0w4$#?ZzXa)x-0AsBhM%Op
zp(8sulAq_%TXa2Z1`_2{M(&-jt{TB^ulIm#9O6&bTChgLyqOfnD~4;vzGzi@eK5D<
z4P84_;UX($P>;4fzlf5NWhb=jaE@?#-+SN_K}%iXq=zD~*|$lFSA6qXYe`(zjB`*W
zt)S|zYR_C-;Y!eo8Ag3X!TRR``*4(Y92pF8c%41(QK0-fir?6n8DklS2bt_WN_PBV
z26iKwPD|}X4nkabNHrh9=^uZQUHT<fo}sR9Hv~+V4ewqq=LeF%Q~Q-8yUgU&GsDHk
z0iCZ`nT<7%x<>2)3Vrhn{{;27WNbGC^#3qD&cK)lv7G1)t#zTDE-6oGB(IPCxo>;k
z7!!8w?qYNl8}pjZMZp}Ts7$GAUzvc7uwB5`{bvZ?_fxl1f}D=fe^&nw<J81_XPBu<
zy2w8uFlyDN_pe&4_P}49|4L%~nE$mQ|NoV(@l*YSLkK3(8dbY%cQNYlgvzrzkmvo3
zUcMq&TFFRzk`}s4vB2|J-%Y`9QQoFTWv))$2GjY#?NcG$E9<Jd9$4!2zWxCH&!K6R
z<cn#BgSh44_w1}9)kkX#+4&6ttE}o)HE%jS{S2I)EHj8IUSaI-+If$AZINLBGvBW6
z?(STNF~m~||7Cfe@(ts2-)43E+w~npGw=1D@d;g7f)hlrMNpXK$z1YR3G%m9cog>Q
za^uC5e2`tRtnVz2vCijQHw-D@x*~fw0hrBG^_4F326+c2-0^%ccbpplurJ4Wp8;p!
zQC^pUOUv%O-s;N?6~^eq4OKra#R0I9Qov<|bpbvdFS1%Alg|AmW?tObP=;EpJOH5E
zK?MS>rJ|wXXSE_UiO17&zcwK9cv+eg(MmV%uto%2W<rQ_DIE~PYAl9o99CBH)_Gsr
z%#z7-!qN?+4+k;^8Pq+O^|Sqq$JR71lWxxof(O^VVHILptPye&6oVU6^L5PT8%Gf!
zA1~vV{b<xfJs+BKWMH!;15k%p3iHTXLh3B<XIncg)v<9QAAsRX{(_A3HhWv^!k0-y
zoBoG*O@e~75F@m4O{)#Ees|+J$XEJyEUYFN{3+=PrYj9hUs^amvtk%8)n3O?p*R5~
zSf=@Y7|9B@P&x&1g|IR|Rb&^wl>Wf~>p<O-*ZXciKw!2W?y3#^2;7_cftW^X3vsOV
zvTPS%vM#AF{oL8#aWD}1Rc#z=B>Kl>i^#^x{*`tl72W#ZoUp(wRm;|FfTF7~i=EwK
z{uaLg(FwZBe2oU&Z*g)kmyZHiayy@~mX=|U-z8IEVdYG$o=n@S&vxaH)6`=GVc0J#
z4Q8J)GrWLCi_+D)w!p~TRnUNd;o+S!i5iC#ZqUQv3Q_*#;S!ho`qkJ>g6kK9n(O{V
ze)0;`&AzV@Wz)8tsAFPCwbwwlCkvXjQ@+`Q5hJUDTo{XC`{Qiz{gyGOvBk%d_^SyR
zPkiM{Pw5Z~3(N43Tmbu=?-mi>G4fI$kJT7<*Q&?EeRsMz;<?4keJG`rl%eMjuf4|7
zZ{46AiuOGsoU|lDM_oTT((Cg?(Zf(T;6A*a`fp$4@(P&sx_R$<i&-)p*5Ww^h%hry
zLlclNrEv7HL+bn1msen~d}V_ic9FDQqPsLUz~yP5QFC=*^E<Uj8L_pI7@~j{);xjT
zq!p@i!Y)pg=|s~>V{6<lz<4twxH}S{TV^(Ky@;C8l+4aWUWA@+pz62KI-rw<B!0hb
zZ|M#_Efx6MUPt>Z`(R@<%QRwU!T+z)8%TDe36QSpNB{LnI$cwdGLc(vympeZMQ_r`
zuEvA$oJobD6xOLLMwg!nO%5pu5kTx-N*E6FsM|Y7e3jsnn#jB^{{*csFDgV))JTg8
zMl0F(7r+^gRO6MH-Fa|;KTYSNYyHt*>eB%Ss^Z$ocl(#RoQ666M(;qZ%IKAZ22;)q
zsGkw(tVwVg`$7+#p4O<vWtQRY=a80m`u*gl=|#&%amD!L3^V85g53&k=IvJB1adx%
z^XaWev=FC5m}1uDo@!aq-cE(hMoD|Dx%8Pa8LXMnbZ>@IeL`6<>+AsMBmjC!$}-jE
ziHGzgs$jVB)bDL~1O(J*>06y=4uJ1ju~Unm^=)|Kd-Y+MJ?!RDJbG~WYiz7hF|qBj
zVOaGkjy2Qa9g*WZNVBxyyhHRgS@r|Vl{x&(Mk#ORP@qX5fzb8ihF4P*-J2PpDTyEn
z+SIpBk*J<-0FldgA9TLDJOZlY{yNh?!uuS4AGevG<U5}+JhfQZEaQE?Kf|<Tf74@A
zm^I+o?>e$$JS-$gU`Tyeiq-iLTZ@aX3>GX#NyaZS+iv1@BPAszyT1w{e-q^fr8Ag5
z1B`ahKrqUpm~-ts9eD?Q&1;8IgMj%ycTlvxSaMS0!#&CC>4WZVdgjB82_Fi3XG)mW
ziI}_Vd&BAJ2G3M>Keo5?Hh-%;&_5X7!)&L2*UBUEGDeR52CGc}iyJHm4Y;0jy*B5x
zyx$%7{xR1>@d9FLB3K&Y$*-uV1Xp}@bo2U7zgZX{qK%h#F4u#)LyDCw&x+NbDx%X<
zz@o0|*|dIS*oM^7hSKvZj;qL;8p0`rZ(=m_zoqX89u{n6WP(wl)8H|#l7*8dWl{=1
zl#1*1;?$W<-I(Xd)mARG4|DWNjCbXK4o-*bRkDU@sbJF@Uta4=(0727?{(4fbuW(0
z2MoNNl@4yLS;ub+&@QmZv0Y-|Frx=91nVAfop6N!BKuw2FPqRsM(7oomlxj3Wi*&o
z<zc`jB<~R#F>YpzJ`cjK!gzvB9>3PCu-B$Go=XR;)&%%<A@Z`2f~IJc<D%QyrzoQZ
z=TL`!N<irNnR=5&HhQ7PZ}WdSkL7Qxib^dS?q|0JzauM<|M+jRQA+*tnJU`cwv+Ni
zgdmI`uME5>vHsUVaxal}YCGcfHOO558IF5zk<I6STL$|#c`PRFfM)7#3))n=^t%bA
zzZm4As1GpnyerCuGxj7{ZMl%9*Y0HTlrD3Hl1o(>PN)caJDt=MWq>@L<<sUD*HD!u
zRy6BEm6#Nx%&f6TH!`0k`t%bk3w9_46u`B(+&UwrKH;sRibUBEBU{9uZOhOr|2@r#
z#9B;ST7J;*YIHADrPVq(Rs6t4ebPV(+=`t}BJ_2`EC=Gp%0NB-8PgzHZ}6tX_!74N
z?1sC!aI{@$w=GuA(X4MESIMWP=2e5SwaG(<5^m1cez1{*T;TNzQitip(*U$pEtE&8
zh+cQO%)Dp!3>lwe$RE8H^_9j8-b$m*I{mo_I&2ywZ~7f6a3hDTzxhmjr({7s!Rk@>
z#$0iP52wNoX+|IHzT>*TO=!%G+>W%4JKUQ4Xo-sTFFEqfnwOeydX8CZ&ocMfXICD6
zCNqFr19BJ6UycwOgLc!R1<ygFn~3L`5<Ls9fl=nC_2xRwLJMo|T^LXhiBNIG<iTTq
zd-bRNDV05q9jl^0Oc@NKseF1-T&tJbh^!a6IK8vNU%X>)&1IRt*i5Jp1-Uf%3sBZr
zD;PXNkN1^JUcYZOB53`kD1LrJkZNN*v=3SW5}6Z{v&)@^UfhkTq6Rken--0G_`Fur
zer0gpWKlcV$eGHXcOWe$G|kdN<}Yk2o7<edUypE5ut>Pr$T1x>&qof3Eqaj6(Hf0}
z%Fp7hz9K+lu6h<Ra>T*HYQuYD4q!b|lRm_`E-sxm^t$L6Y+9l7x<91ya6or!CDJvW
zZ-YfV$zQ(Ao`2A}-&xt};uO?M=muvC)Y;hdpI01SyeCK}j?H#?UR_S=8tHwrz!RFx
zNci^zAr3d?-(p_&0(A!Qr8c5Y(@PzKSIp|p8x03<R@4%k2%VO{j|`Os@U1@3Cg$(4
za9w`_Ftdf+%z(b>81+mHTrGC*I_KuLW~^Ve&Y_UTkEhQ_&|G)`q3erJA=`OGLND8B
z34qqNKj8;Q7#zT2U)9tVac!uAH;|+Rf2JqZR6hv_G&Y848}yyAg<Q0rUvK?N2Nrcv
zl}@dGAGxslrqr*0iK6O}GZ<t7FL%)0)*FhBz0J*jSo;p3s1CtI6U-(S^9cRbkNI|1
zw>pZ<t`R;dhtI-j>W@}_y>kk=&3A1Eg+Ln3GsQ15|44V{fzKqCsvEC7%Dw9(G406_
zXl5=+OiiD0P(PbMD*0E<pTeIe8&+xDCKI&?M*;w`_mpd+iZroaLfo!sQLQG&nUt^@
zc!R5&8*Y{Vgz`g=FxP&X;P=Xs`!-*^=)*;!2yjKyw5FMGFdavT{gBNbE3#Y<>UFOv
zFL55woO(bEdfs#v8y3}4A@LQI-5yWKSA9%(oAQ6dBcfZ@bjnnFYS#kfKUj}VH|IIT
z#2f$mtEliN2`@D(dYZ+G&sDj+5%H$lONq08s}cqm82~-x#{2aL`;;$xx=fY&4`q%q
z`T?ExtXoe-+E7YRO|#sN+gf7V6><zMm(Hh@-ntWT_o%`(d`22di#B>TJ`)#2pB#-N
z+We4-QMZBAp{<iMA0f=}e8%%q);bbtOVQlf9&9o@!SVRQyZU{GLKs#^S06MKzK8=I
zkHRm<OqD!$#ps3OtFo9J1*<_JD<a+XFiK=c9uMLiZ#C!s`joK-)@^@(#xLN({^n?|
z#WEg-(|{2t?C^$d@uS$fx#Z-t!|-lHG=d%l#~-*-I=lTV#)@3qk3JAS#Yj@?fc;!u
zZcXDOujXY!Ov6SWed?@>2>z2<IJk&vI|PRw3T^^<4t=vR$CZbV9070|7tGdWKAkpK
z^mZxOq!ANlP(N${IIbt7;TpwM(B?=|D}v{!=D9Ys-k5#7+kx?-?QkG>np1WY7xQy4
z5}bW5Ls6#g_U(xx=B!4XL}*p^2=m`S-~?ny6!U;ZO#c6TXp2PSpv^u-HJICC+|*cD
NvXV+)%Ee8B{s&t1i2DEl

literal 0
HcmV?d00001

diff --git a/samples/web-app-cosmosdb-nosql-api/dotnet/scripts/00-variables.sh b/samples/web-app-cosmosdb-nosql-api/dotnet/scripts/00-variables.sh
new file mode 100755
index 0000000..3d6dea2
--- /dev/null
+++ b/samples/web-app-cosmosdb-nosql-api/dotnet/scripts/00-variables.sh
@@ -0,0 +1,40 @@
+# Variables
+
+# Azure Resources
+PREFIX='local'
+SUFFIX='test'
+LOCATION='italynorth'
+RESOURCE_GROUP_NAME="${PREFIX}-rg"
+ACR_NAME="${PREFIX,,}acr${SUFFIX,,}"
+ACR_SKU='Standard'
+SUBSCRIPTION_NAME=$(az account show --query name --output tsv)
+SUBSCRIPTION_ID=$(az account show --query id --output tsv)
+TENANT_ID=$(az account show --query tenantId --output tsv)
+CURRENT_DIR="$(cd "$(dirname "$0")" && pwd)"
+
+# Cosmos DB (NoSQL / SQL API)
+COSMOSDB_ACCOUNT_NAME="${PREFIX}-nosql-${SUFFIX}"
+AZURECOSMOSDB_DATABASENAME='vacationplanner'
+AZURECOSMOSDB_CONTAINERNAME='activities'
+AZURECOSMOSDB_PARTITION_KEY='/username'
+THROUGHPUT=400
+
+# LocalStack runtime URL. Set to empty when running against real Azure to skip
+# the LocalStack root-CA install step in 03-run-docker-container.sh / 05-deploy-app.sh.
+LOCALSTACK_URL='http://localhost:4566'
+
+# Application config
+LOGIN_NAME='paolo'
+
+# Docker Image
+IMAGE_NAME="vacation-planner-nosql-dotnet"
+IMAGE_PULL_POLICY="Always"
+IMAGE_TAG="v1"
+PORT="8080"
+
+# Kubernetes
+NAMESPACE="vacation-planner-nosql"
+DEPLOYMENT_NAME="vacation-planner-nosql"
+SERVICE_NAME="vacation-planner-nosql"
+CONFIGMAP_NAME="vacation-planner-nosql-config"
+SECRET_NAME="vacation-planner-nosql-secrets"
diff --git a/samples/web-app-cosmosdb-nosql-api/dotnet/scripts/01-deploy-resources.sh b/samples/web-app-cosmosdb-nosql-api/dotnet/scripts/01-deploy-resources.sh
new file mode 100755
index 0000000..e7f2049
--- /dev/null
+++ b/samples/web-app-cosmosdb-nosql-api/dotnet/scripts/01-deploy-resources.sh
@@ -0,0 +1,174 @@
+#!/bin/bash
+
+# Variables
+source ./00-variables.sh
+
+# Change the current directory to the script's directory
+cd "$CURRENT_DIR" || exit
+
+# Create a resource group
+echo "Checking if resource group [$RESOURCE_GROUP_NAME] exists in the subscription [$SUBSCRIPTION_NAME]..."
+az group show --name $RESOURCE_GROUP_NAME &>/dev/null
+
+if [[ $? != 0 ]]; then
+	echo "No resource group [$RESOURCE_GROUP_NAME] exists in the subscription [$SUBSCRIPTION_NAME]"
+	echo "Creating resource group [$RESOURCE_GROUP_NAME] in the subscription [$SUBSCRIPTION_NAME]..."
+
+	az group create \
+		--name $RESOURCE_GROUP_NAME \
+		--location "$LOCATION" \
+		--only-show-errors 1>/dev/null
+
+	if [[ $? == 0 ]]; then
+		echo "Resource group [$RESOURCE_GROUP_NAME] successfully created in the subscription [$SUBSCRIPTION_NAME]"
+	else
+		echo "Failed to create resource group [$RESOURCE_GROUP_NAME] in the subscription [$SUBSCRIPTION_NAME]"
+		exit 1
+	fi
+else
+	echo "Resource group [$RESOURCE_GROUP_NAME] already exists in the subscription [$SUBSCRIPTION_NAME]"
+fi
+
+# Create the Azure Container Registry
+echo "Checking if [$ACR_NAME] Azure Container Registry already exists in the [$RESOURCE_GROUP_NAME] resource group..."
+az acr show \
+	--name "$ACR_NAME" \
+	--resource-group "$RESOURCE_GROUP_NAME" \
+	--only-show-errors &>/dev/null
+
+if [[ $? != 0 ]]; then
+	echo "No [$ACR_NAME] Azure Container Registry exists in the [$RESOURCE_GROUP_NAME] resource group"
+	echo "Creating Azure Container Registry [$ACR_NAME]..."
+	az acr create \
+		--name "$ACR_NAME" \
+		--resource-group "$RESOURCE_GROUP_NAME" \
+		--location "$LOCATION" \
+		--sku "$ACR_SKU" \
+		--admin-enabled "true" \
+		--only-show-errors 1>/dev/null
+
+	if [ $? -eq 0 ]; then
+		echo "Azure Container Registry [$ACR_NAME] created successfully."
+	else
+		echo "Failed to create Azure Container Registry [$ACR_NAME]."
+		exit 1
+	fi
+else
+	echo "[$ACR_NAME] Azure Container Registry already exists in the [$RESOURCE_GROUP_NAME] resource group"
+fi
+
+# Create the Cosmos DB account (NoSQL / SQL API - default kind GlobalDocumentDB)
+echo "Checking if Cosmos DB account [$COSMOSDB_ACCOUNT_NAME] exists in the [$RESOURCE_GROUP_NAME] resource group..."
+az cosmosdb show \
+	--name "$COSMOSDB_ACCOUNT_NAME" \
+	--resource-group "$RESOURCE_GROUP_NAME" \
+	--only-show-errors &>/dev/null
+
+if [[ $? != 0 ]]; then
+	echo "No Cosmos DB account [$COSMOSDB_ACCOUNT_NAME] exists in the [$RESOURCE_GROUP_NAME] resource group"
+	echo "Creating Cosmos DB account [$COSMOSDB_ACCOUNT_NAME] with NoSQL API..."
+	az cosmosdb create \
+		--name "$COSMOSDB_ACCOUNT_NAME" \
+		--resource-group "$RESOURCE_GROUP_NAME" \
+		--locations regionName="$LOCATION" \
+		--default-consistency-level Session \
+		--only-show-errors 1>/dev/null
+
+	if [ $? -eq 0 ]; then
+		echo "Cosmos DB account [$COSMOSDB_ACCOUNT_NAME] created successfully."
+	else
+		echo "Failed to create Cosmos DB account [$COSMOSDB_ACCOUNT_NAME]."
+		exit 1
+	fi
+else
+	echo "Cosmos DB account [$COSMOSDB_ACCOUNT_NAME] already exists in the [$RESOURCE_GROUP_NAME] resource group"
+fi
+
+# Retrieve the document endpoint
+echo "Retrieving document endpoint for Cosmos DB account [$COSMOSDB_ACCOUNT_NAME]..."
+AZURECOSMOSDB_ENDPOINT=$(az cosmosdb show \
+	--name "$COSMOSDB_ACCOUNT_NAME" \
+	--resource-group "$RESOURCE_GROUP_NAME" \
+	--query "documentEndpoint" \
+	--output tsv)
+
+if [ -n "$AZURECOSMOSDB_ENDPOINT" ]; then
+	echo "Document endpoint retrieved successfully: $AZURECOSMOSDB_ENDPOINT"
+else
+	echo "Failed to retrieve document endpoint."
+	exit 1
+fi
+
+# Create the SQL database
+echo "Checking if SQL database [$AZURECOSMOSDB_DATABASENAME] exists in account [$COSMOSDB_ACCOUNT_NAME]..."
+az cosmosdb sql database show \
+	--account-name "$COSMOSDB_ACCOUNT_NAME" \
+	--name "$AZURECOSMOSDB_DATABASENAME" \
+	--resource-group "$RESOURCE_GROUP_NAME" \
+	--only-show-errors &>/dev/null
+
+if [[ $? != 0 ]]; then
+	echo "Creating SQL database [$AZURECOSMOSDB_DATABASENAME]..."
+	az cosmosdb sql database create \
+		--account-name "$COSMOSDB_ACCOUNT_NAME" \
+		--name "$AZURECOSMOSDB_DATABASENAME" \
+		--resource-group "$RESOURCE_GROUP_NAME" \
+		--only-show-errors 1>/dev/null
+
+	if [ $? -eq 0 ]; then
+		echo "SQL database [$AZURECOSMOSDB_DATABASENAME] created successfully."
+	else
+		echo "Failed to create SQL database [$AZURECOSMOSDB_DATABASENAME]."
+		exit 1
+	fi
+else
+	echo "SQL database [$AZURECOSMOSDB_DATABASENAME] already exists in account [$COSMOSDB_ACCOUNT_NAME]"
+fi
+
+# Create the SQL container
+echo "Checking if SQL container [$AZURECOSMOSDB_CONTAINERNAME] exists in database [$AZURECOSMOSDB_DATABASENAME]..."
+az cosmosdb sql container show \
+	--account-name "$COSMOSDB_ACCOUNT_NAME" \
+	--database-name "$AZURECOSMOSDB_DATABASENAME" \
+	--name "$AZURECOSMOSDB_CONTAINERNAME" \
+	--resource-group "$RESOURCE_GROUP_NAME" \
+	--only-show-errors &>/dev/null
+
+if [[ $? != 0 ]]; then
+	echo "Creating SQL container [$AZURECOSMOSDB_CONTAINERNAME]..."
+	az cosmosdb sql container create \
+		--account-name "$COSMOSDB_ACCOUNT_NAME" \
+		--database-name "$AZURECOSMOSDB_DATABASENAME" \
+		--name "$AZURECOSMOSDB_CONTAINERNAME" \
+		--resource-group "$RESOURCE_GROUP_NAME" \
+		--partition-key-path "$AZURECOSMOSDB_PARTITION_KEY" \
+		--throughput "$THROUGHPUT" \
+		--only-show-errors 1>/dev/null
+
+	if [ $? -eq 0 ]; then
+		echo "SQL container [$AZURECOSMOSDB_CONTAINERNAME] created successfully."
+	else
+		echo "Failed to create SQL container [$AZURECOSMOSDB_CONTAINERNAME]."
+		exit 1
+	fi
+else
+	echo "SQL container [$AZURECOSMOSDB_CONTAINERNAME] already exists in database [$AZURECOSMOSDB_DATABASENAME]"
+fi
+
+# Retrieve the primary master key
+echo "Retrieving primary master key for Cosmos DB account [$COSMOSDB_ACCOUNT_NAME]..."
+AZURECOSMOSDB_PRIMARY_KEY=$(az cosmosdb keys list \
+	--name "$COSMOSDB_ACCOUNT_NAME" \
+	--resource-group "$RESOURCE_GROUP_NAME" \
+	--query "primaryMasterKey" \
+	--output tsv)
+
+if [ -n "$AZURECOSMOSDB_PRIMARY_KEY" ]; then
+	echo "Primary master key retrieved successfully."
+else
+	echo "Failed to retrieve primary master key."
+	exit 1
+fi
+
+export AZURECOSMOSDB_ENDPOINT
+export AZURECOSMOSDB_PRIMARY_KEY
diff --git a/samples/web-app-cosmosdb-nosql-api/dotnet/scripts/02-build-docker-image.sh b/samples/web-app-cosmosdb-nosql-api/dotnet/scripts/02-build-docker-image.sh
new file mode 100755
index 0000000..4b497d8
--- /dev/null
+++ b/samples/web-app-cosmosdb-nosql-api/dotnet/scripts/02-build-docker-image.sh
@@ -0,0 +1,18 @@
+#!/bin/bash
+
+# Variables
+source ./00-variables.sh
+
+# Change the current directory to the script's directory
+cd "$CURRENT_DIR" || exit
+
+# Build context: the src/ folder (contains VacationPlanner.csproj, Program.cs, Pages/, Services/, wwwroot/).
+# The Dockerfile lives alongside this script, so we point -f at it explicitly.
+BUILD_CONTEXT="../src"
+
+# Build the docker image
+docker build \
+	-t $IMAGE_NAME:$IMAGE_TAG \
+	-f Dockerfile \
+	--build-arg PORT=$PORT \
+	$BUILD_CONTEXT
diff --git a/samples/web-app-cosmosdb-nosql-api/dotnet/scripts/03-run-docker-container.sh b/samples/web-app-cosmosdb-nosql-api/dotnet/scripts/03-run-docker-container.sh
new file mode 100755
index 0000000..fb0dd98
--- /dev/null
+++ b/samples/web-app-cosmosdb-nosql-api/dotnet/scripts/03-run-docker-container.sh
@@ -0,0 +1,92 @@
+#!/bin/bash
+
+# Variables
+source ./00-variables.sh
+
+# Retrieve the document endpoint
+echo "Retrieving document endpoint for Cosmos DB account [$COSMOSDB_ACCOUNT_NAME]..."
+AZURECOSMOSDB_ENDPOINT=$(az cosmosdb show \
+	--name "$COSMOSDB_ACCOUNT_NAME" \
+	--resource-group "$RESOURCE_GROUP_NAME" \
+	--query "documentEndpoint" \
+	--output tsv)
+
+if [ -n "$AZURECOSMOSDB_ENDPOINT" ]; then
+	echo "Document endpoint retrieved successfully: $AZURECOSMOSDB_ENDPOINT"
+else
+	echo "Failed to retrieve document endpoint."
+	exit 1
+fi
+
+# Retrieve the primary master key
+echo "Retrieving primary master key for Cosmos DB account [$COSMOSDB_ACCOUNT_NAME]..."
+AZURECOSMOSDB_PRIMARY_KEY=$(az cosmosdb keys list \
+	--name "$COSMOSDB_ACCOUNT_NAME" \
+	--resource-group "$RESOURCE_GROUP_NAME" \
+	--query "primaryMasterKey" \
+	--output tsv)
+
+if [ -n "$AZURECOSMOSDB_PRIMARY_KEY" ]; then
+	echo "Primary master key retrieved successfully."
+else
+	echo "Failed to retrieve primary master key."
+	exit 1
+fi
+
+# When running against LocalStack, fetch its root CA so the container can verify
+# the cosmos endpoint's TLS chain (cert is signed by LocalStack's root CA — see
+# localstack-pro-azure/.../cosmos/nosql/emulator.py default_cert_store().get_or_create).
+CA_MOUNT_ARGS=()
+EXTRA_ENV_ARGS=()
+if [ -n "$LOCALSTACK_URL" ]; then
+	echo "Fetching LocalStack root CA from $LOCALSTACK_URL..."
+
+	# Fetch the target CA URL
+	CA_URL=$(curl -sf "$LOCALSTACK_URL/_localstack/certs" | jq -r .ca.url)
+
+	if [ -z "$CA_URL" ] || [ "$CA_URL" = "null" ]; then
+		echo "Error: Failed to extract CA URL from LocalStack endpoint." >&2
+		exit 1
+	fi
+
+	# Fetch the actual PEM payload
+	PEM_DATA=$(curl -sf "$CA_URL")
+
+	if [ -z "$PEM_DATA" ]; then
+		echo "Error: Retrieved empty CA certificate payload." >&2
+		exit 1
+	fi
+
+	# Write next to the script (in $CURRENT_DIR exported by 00-variables.sh). Avoid /tmp:
+	# on rootless / Docker Desktop / WSL2 setups, /tmp may be outside the daemon's reachable
+	# filesystem — in that case `-v` silently creates an empty directory at the destination
+	# instead of bind-mounting the file, and SSL_CERT_FILE ends up pointing at a dir.
+	HOST_CA_PATH="$CURRENT_DIR/.localstack-ca.crt"
+	# Remove the CA file on script exit (Ctrl-C, normal exit, error) so we don't leave
+	# it lying next to the script after the container stops.
+	trap 'rm -f "$HOST_CA_PATH"' EXIT
+	printf '%s\n' "$PEM_DATA" > "$HOST_CA_PATH"
+	# Container runs as a non-root `app` user; make sure it can read the bind-mounted file.
+	chmod 644 "$HOST_CA_PATH"
+	echo "LocalStack root CA written to $HOST_CA_PATH"
+	# Use `--mount type=bind` instead of `-v`: if the source is unreachable the daemon
+	# errors out instead of creating a phantom empty directory at the target.
+	CA_MOUNT_ARGS=(--mount "type=bind,source=$HOST_CA_PATH,target=/etc/ssl/certs/localstack.crt,readonly")
+	EXTRA_ENV_ARGS=(-e SSL_CERT_FILE=/etc/ssl/certs/localstack.crt)
+fi
+
+# --network=host so endpoints like *.localhost.localstack.cloud resolve to the
+# host's loopback (where LocalStack is listening), not the container's.
+docker run -it \
+	--rm \
+	--network=host \
+	-e PORT=$PORT \
+	-e AZURECOSMOSDB_ENDPOINT="$AZURECOSMOSDB_ENDPOINT" \
+	-e AZURECOSMOSDB_PRIMARY_KEY="$AZURECOSMOSDB_PRIMARY_KEY" \
+	-e AZURECOSMOSDB_DATABASENAME="$AZURECOSMOSDB_DATABASENAME" \
+	-e AZURECOSMOSDB_CONTAINERNAME="$AZURECOSMOSDB_CONTAINERNAME" \
+	-e LOGIN_NAME="$LOGIN_NAME" \
+	"${EXTRA_ENV_ARGS[@]}" \
+	"${CA_MOUNT_ARGS[@]}" \
+	--name "$IMAGE_NAME" \
+	"$IMAGE_NAME:$IMAGE_TAG"
diff --git a/samples/web-app-cosmosdb-nosql-api/dotnet/scripts/04-push-docker-image.sh b/samples/web-app-cosmosdb-nosql-api/dotnet/scripts/04-push-docker-image.sh
new file mode 100755
index 0000000..a1b7518
--- /dev/null
+++ b/samples/web-app-cosmosdb-nosql-api/dotnet/scripts/04-push-docker-image.sh
@@ -0,0 +1,40 @@
+#!/bin/bash
+
+# Variables
+source ./00-variables.sh
+
+# Login to ACR
+echo "Logging into Azure Container Registry [$ACR_NAME]..."
+az acr login --name $ACR_NAME
+
+# Retrieve ACR login server. Each container image needs to be tagged with the loginServer name of the registry.
+ACR_LOGIN_SERVER=$(az acr show --name $ACR_NAME --query loginServer --output tsv)
+
+if [ $? -eq 0 ]; then
+	echo "Logged into Azure Container Registry [$ACR_NAME] successfully."
+else
+	echo "Failed to log into Azure Container Registry [$ACR_NAME]."
+	exit 1
+fi
+
+FULL_IMAGE="${ACR_LOGIN_SERVER}/${IMAGE_NAME}:${IMAGE_TAG}"
+
+# Tag the local image with the loginServer of ACR
+docker tag ${IMAGE_NAME,,}:$IMAGE_TAG $ACR_LOGIN_SERVER/${IMAGE_NAME,,}:$IMAGE_TAG
+
+if [ $? -eq 0 ]; then
+	echo "Docker image [$IMAGE_NAME] tagged as [$FULL_IMAGE] successfully."
+else
+	echo "Failed to tag Docker image [$IMAGE_NAME] as [$FULL_IMAGE]."
+	exit 1
+fi
+
+# Push the container image to ACR
+docker push $ACR_LOGIN_SERVER/${IMAGE_NAME,,}:$IMAGE_TAG
+
+if [ $? -eq 0 ]; then
+	echo "Docker image [$FULL_IMAGE] pushed to ACR successfully."
+else
+	echo "Failed to push Docker image [$FULL_IMAGE] to ACR."
+	exit 1
+fi
diff --git a/samples/web-app-cosmosdb-nosql-api/dotnet/scripts/05-deploy-app.sh b/samples/web-app-cosmosdb-nosql-api/dotnet/scripts/05-deploy-app.sh
new file mode 100755
index 0000000..51507f7
--- /dev/null
+++ b/samples/web-app-cosmosdb-nosql-api/dotnet/scripts/05-deploy-app.sh
@@ -0,0 +1,132 @@
+#!/bin/bash
+
+# Variables
+source ./00-variables.sh
+
+# Retrieve the document endpoint
+echo "Retrieving document endpoint for Cosmos DB account [$COSMOSDB_ACCOUNT_NAME]..."
+AZURECOSMOSDB_ENDPOINT=$(az cosmosdb show \
+	--name "$COSMOSDB_ACCOUNT_NAME" \
+	--resource-group "$RESOURCE_GROUP_NAME" \
+	--query "documentEndpoint" \
+	--output tsv)
+
+if [ -n "$AZURECOSMOSDB_ENDPOINT" ]; then
+	echo "Document endpoint retrieved successfully: $AZURECOSMOSDB_ENDPOINT"
+else
+	echo "Failed to retrieve document endpoint."
+	exit 1
+fi
+
+# Retrieve the primary master key
+echo "Retrieving primary master key for Cosmos DB account [$COSMOSDB_ACCOUNT_NAME]..."
+AZURECOSMOSDB_PRIMARY_KEY=$(az cosmosdb keys list \
+	--name "$COSMOSDB_ACCOUNT_NAME" \
+	--resource-group "$RESOURCE_GROUP_NAME" \
+	--query "primaryMasterKey" \
+	--output tsv)
+
+if [ -n "$AZURECOSMOSDB_PRIMARY_KEY" ]; then
+	echo "Primary master key retrieved successfully."
+else
+	echo "Failed to retrieve primary master key."
+	exit 1
+fi
+
+# Generate a stable SECRET_KEY shared by all replicas: the app derives its Data Protection key ring from it,
+# so antiforgery tokens and flash messages are valid on every replica and survive pod restarts
+SECRET_KEY=$(openssl rand -hex 32)
+
+# Get the login server for the Azure Container Registry
+echo "Getting login server for Azure Container Registry [$ACR_NAME]..."
+ACR_LOGIN_SERVER=$(az acr show \
+	--name "$ACR_NAME" \
+	--resource-group "$RESOURCE_GROUP_NAME" \
+	--query "loginServer" \
+	--output tsv \
+	--only-show-errors)
+
+if [ -n "$ACR_LOGIN_SERVER" ]; then
+	echo "Login server retrieved successfully: $ACR_LOGIN_SERVER"
+else
+	echo "Failed to retrieve login server for Azure Container Registry [$ACR_NAME]."
+	exit 1
+fi
+
+FULL_IMAGE="${ACR_LOGIN_SERVER}/${IMAGE_NAME}:${IMAGE_TAG}"
+
+# Create namespace
+cat namespace.yml |
+yq "(.metadata.name)|="\""$NAMESPACE"\" |
+kubectl apply -f -
+
+# Create the LocalStack root CA configmap so the app can verify the cosmos endpoint's
+# TLS chain. The cert is signed by LocalStack's root CA at emulator startup — see
+# localstack-pro-azure/.../cosmos/nosql/emulator.py default_cert_store().get_or_create.
+# Skipped when LOCALSTACK_URL is empty (real-Azure mode).
+if [ -n "$LOCALSTACK_URL" ]; then
+	echo "Fetching LocalStack root CA from $LOCALSTACK_URL..."
+
+	# Fetch the target CA URL
+	CA_URL=$(curl -sf "$LOCALSTACK_URL/_localstack/certs" | jq -r .ca.url)
+
+	if [ -z "$CA_URL" ] || [ "$CA_URL" = "null" ]; then
+		echo "Error: Failed to extract CA URL from LocalStack endpoint." >&2
+		exit 1
+	fi
+
+	# Fetch the actual PEM payload
+	PEM_DATA=$(curl -sf "$CA_URL")
+
+	if [ -z "$PEM_DATA" ]; then
+		echo "Error: Retrieved empty CA certificate payload." >&2
+		exit 1
+	fi
+
+	# Generate and apply the configmap from a literal string (avoid issues with newlines in the PEM data when using --from-file or --from-env-file)
+	kubectl -n "$NAMESPACE" create configmap localstack-ca \
+		--from-literal=localstack.crt="$PEM_DATA" \
+		--dry-run=client -o yaml | kubectl apply -f -
+fi
+
+# Create secret with the Cosmos DB primary key and SECRET_KEY
+cat secret.yml |
+yq "(.metadata.namespace)|="\""$NAMESPACE"\" |
+yq "(.data.AZURECOSMOSDB_PRIMARY_KEY)|="\""$(echo -n $AZURECOSMOSDB_PRIMARY_KEY | base64 -w0)"\" |
+yq "(.data.SECRET_KEY)|="\""$(echo -n $SECRET_KEY | base64 -w0)"\" |
+kubectl apply -f -
+
+# Create configmap with environment variables
+cat configmap.yml |
+yq "(.metadata.namespace)|="\""$NAMESPACE"\" |
+yq "(.data.AZURECOSMOSDB_ENDPOINT)|="\""$AZURECOSMOSDB_ENDPOINT"\" |
+yq "(.data.AZURECOSMOSDB_DATABASENAME)|="\""$AZURECOSMOSDB_DATABASENAME"\" |
+yq "(.data.AZURECOSMOSDB_CONTAINERNAME)|="\""$AZURECOSMOSDB_CONTAINERNAME"\" |
+yq "(.data.LOGIN_NAME)|="\""$LOGIN_NAME"\" |
+kubectl apply -f -
+
+# Create deployment
+cat deployment.yml |
+yq "(.metadata.namespace)|="\""$NAMESPACE"\" |
+yq "(.spec.template.spec.containers[0].image)|="\""$FULL_IMAGE"\" |
+yq "(.spec.template.spec.containers[0].imagePullPolicy)|="\""$IMAGE_PULL_POLICY"\" |
+yq "(.spec.template.spec.containers[0].ports[0].containerPort)|=$PORT" |
+kubectl apply -f -
+
+# Create service
+cat service.yml |
+yq "(.metadata.namespace)|="\""$NAMESPACE"\" |
+kubectl apply -f -
+
+# Wait for the rollout so a pod stuck in ImagePullBackOff or CrashLoopBackOff is reported here, not discovered later
+echo "Waiting for deployment [$DEPLOYMENT_NAME] to roll out..."
+if kubectl rollout status deployment/$DEPLOYMENT_NAME -n $NAMESPACE --timeout=600s; then
+	echo "Deployment [$DEPLOYMENT_NAME] is ready. To reach the web app, run:"
+	echo "  kubectl port-forward service/$SERVICE_NAME 8080:80 -n $NAMESPACE"
+	echo "and browse to http://localhost:8080 (health: http://localhost:8080/health)."
+else
+	echo "Deployment [$DEPLOYMENT_NAME] did not become ready. Inspect it with:"
+	echo "  kubectl get pods -n $NAMESPACE"
+	echo "  kubectl describe pod -n $NAMESPACE --selector app=$DEPLOYMENT_NAME"
+	exit 1
+fi
diff --git a/samples/web-app-cosmosdb-nosql-api/dotnet/scripts/Dockerfile b/samples/web-app-cosmosdb-nosql-api/dotnet/scripts/Dockerfile
new file mode 100644
index 0000000..d862da7
--- /dev/null
+++ b/samples/web-app-cosmosdb-nosql-api/dotnet/scripts/Dockerfile
@@ -0,0 +1,28 @@
+# Build stage: restore and publish the ASP.NET Core app with the .NET SDK image.
+FROM mcr.microsoft.com/dotnet/sdk:10.0 AS build
+
+WORKDIR /src
+
+# Restore first so the package cache layer is reused when only sources change.
+COPY VacationPlanner.csproj ./
+RUN dotnet restore
+
+COPY . ./
+RUN dotnet publish -c Release -o /app/publish --no-restore
+
+# Runtime stage: the ASP.NET Core runtime image only, no SDK.
+FROM mcr.microsoft.com/dotnet/aspnet:10.0
+
+# Port Kestrel listens on; kept as a build argument (and a runtime variable) as in the Python image.
+ARG PORT=8080
+ENV PORT=${PORT}
+
+WORKDIR /app
+COPY --from=build /app/publish ./
+
+# Run as the runtime image's non-root `app` user, as the Python image runs as its own unprivileged `app` user.
+USER app
+
+EXPOSE ${PORT}
+
+ENTRYPOINT ["dotnet", "VacationPlanner.dll"]
diff --git a/samples/web-app-cosmosdb-nosql-api/dotnet/scripts/configmap.yml b/samples/web-app-cosmosdb-nosql-api/dotnet/scripts/configmap.yml
new file mode 100644
index 0000000..5ea8e75
--- /dev/null
+++ b/samples/web-app-cosmosdb-nosql-api/dotnet/scripts/configmap.yml
@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: vacation-planner-nosql-config
+  namespace: vacation-planner-nosql
+  labels:
+    app: vacation-planner-nosql
+data:
+  AZURECOSMOSDB_ENDPOINT: ""
+  AZURECOSMOSDB_DATABASENAME: "vacationplanner"
+  AZURECOSMOSDB_CONTAINERNAME: "activities"
+  LOGIN_NAME: "alex"
diff --git a/samples/web-app-cosmosdb-nosql-api/dotnet/scripts/deployment.yml b/samples/web-app-cosmosdb-nosql-api/dotnet/scripts/deployment.yml
new file mode 100644
index 0000000..6eec136
--- /dev/null
+++ b/samples/web-app-cosmosdb-nosql-api/dotnet/scripts/deployment.yml
@@ -0,0 +1,104 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: vacation-planner-nosql
+  namespace: vacation-planner-nosql
+  labels:
+    app: vacation-planner-nosql
+spec:
+  replicas: 3
+  selector:
+    matchLabels:
+      app: vacation-planner-nosql
+  strategy:
+    rollingUpdate:
+      maxSurge: 1
+      maxUnavailable: 0
+    type: RollingUpdate
+  minReadySeconds: 5
+  template:
+    metadata:
+      labels:
+        app: vacation-planner-nosql
+    spec:
+      nodeSelector:
+        kubernetes.io/os: linux
+      containers:
+        - name: vacation-planner-nosql
+          image: <your-registry>.azurecr.io/vacation-planner-nosql-dotnet:v1
+          imagePullPolicy: Always
+          ports:
+            - name: http
+              containerPort: 8080
+          env:
+            - name: AZURECOSMOSDB_ENDPOINT
+              valueFrom:
+                configMapKeyRef:
+                  name: vacation-planner-nosql-config
+                  key: AZURECOSMOSDB_ENDPOINT
+            - name: AZURECOSMOSDB_DATABASENAME
+              valueFrom:
+                configMapKeyRef:
+                  name: vacation-planner-nosql-config
+                  key: AZURECOSMOSDB_DATABASENAME
+            - name: AZURECOSMOSDB_CONTAINERNAME
+              valueFrom:
+                configMapKeyRef:
+                  name: vacation-planner-nosql-config
+                  key: AZURECOSMOSDB_CONTAINERNAME
+            - name: LOGIN_NAME
+              valueFrom:
+                configMapKeyRef:
+                  name: vacation-planner-nosql-config
+                  key: LOGIN_NAME
+            - name: AZURECOSMOSDB_PRIMARY_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: vacation-planner-nosql-secrets
+                  key: AZURECOSMOSDB_PRIMARY_KEY
+            - name: SECRET_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: vacation-planner-nosql-secrets
+                  key: SECRET_KEY
+            # Add the LocalStack root CA to the trust store .NET uses on Linux (OpenSSL honours
+            # SSL_CERT_FILE next to the system roots) so TLS verification of the Cosmos endpoint
+            # succeeds. The file is mounted from the `localstack-ca` ConfigMap created by 05-deploy-app.sh.
+            - name: SSL_CERT_FILE
+              value: /etc/ssl/certs/localstack.crt
+          volumeMounts:
+            - name: localstack-ca
+              mountPath: /etc/ssl/certs/localstack.crt
+              subPath: localstack.crt
+              readOnly: true
+          resources:
+            requests:
+              cpu: "100m"
+              memory: "128Mi"
+            limits:
+              cpu: "500m"
+              memory: "256Mi"
+          livenessProbe:
+            httpGet:
+              path: /health
+              port: http
+            initialDelaySeconds: 15
+            periodSeconds: 30
+            timeoutSeconds: 5
+            failureThreshold: 3
+          readinessProbe:
+            httpGet:
+              path: /health
+              port: http
+            initialDelaySeconds: 5
+            periodSeconds: 10
+            timeoutSeconds: 3
+            failureThreshold: 3
+      volumes:
+        - name: localstack-ca
+          configMap:
+            name: localstack-ca
+            # `optional: true` lets the Deployment apply even in real-Azure mode where
+            # 05-deploy-app.sh skips creating the ConfigMap. In that case drop the
+            # SSL_CERT_FILE env (and the volumeMount) when switching off LocalStack.
+            optional: true
diff --git a/samples/web-app-cosmosdb-nosql-api/dotnet/scripts/namespace.yml b/samples/web-app-cosmosdb-nosql-api/dotnet/scripts/namespace.yml
new file mode 100644
index 0000000..f5e8700
--- /dev/null
+++ b/samples/web-app-cosmosdb-nosql-api/dotnet/scripts/namespace.yml
@@ -0,0 +1,4 @@
+kind: Namespace
+apiVersion: v1
+metadata:
+  name: vacation-planner-nosql
diff --git a/samples/web-app-cosmosdb-nosql-api/dotnet/scripts/secret.yml b/samples/web-app-cosmosdb-nosql-api/dotnet/scripts/secret.yml
new file mode 100644
index 0000000..b2476e6
--- /dev/null
+++ b/samples/web-app-cosmosdb-nosql-api/dotnet/scripts/secret.yml
@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: vacation-planner-nosql-secrets
+  namespace: vacation-planner-nosql
+  labels:
+    app: vacation-planner-nosql
+type: Opaque
+data:
+  AZURECOSMOSDB_PRIMARY_KEY: ""
+  SECRET_KEY: ""
diff --git a/samples/web-app-cosmosdb-nosql-api/dotnet/scripts/service.yml b/samples/web-app-cosmosdb-nosql-api/dotnet/scripts/service.yml
new file mode 100644
index 0000000..d6d0e79
--- /dev/null
+++ b/samples/web-app-cosmosdb-nosql-api/dotnet/scripts/service.yml
@@ -0,0 +1,16 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: vacation-planner-nosql
+  namespace: vacation-planner-nosql
+  labels:
+    app: vacation-planner-nosql
+spec:
+  type: ClusterIP
+  selector:
+    app: vacation-planner-nosql
+  ports:
+    - name: http
+      protocol: TCP
+      port: 80
+      targetPort: http
diff --git a/samples/web-app-cosmosdb-nosql-api/dotnet/src/.dockerignore b/samples/web-app-cosmosdb-nosql-api/dotnet/src/.dockerignore
new file mode 100644
index 0000000..cd42ee3
--- /dev/null
+++ b/samples/web-app-cosmosdb-nosql-api/dotnet/src/.dockerignore
@@ -0,0 +1,2 @@
+bin/
+obj/
diff --git a/samples/web-app-cosmosdb-nosql-api/dotnet/src/Models/Activity.cs b/samples/web-app-cosmosdb-nosql-api/dotnet/src/Models/Activity.cs
new file mode 100644
index 0000000..c39b073
--- /dev/null
+++ b/samples/web-app-cosmosdb-nosql-api/dotnet/src/Models/Activity.cs
@@ -0,0 +1,4 @@
+namespace VacationPlanner.Models;
+
+/// <summary>A planned vacation activity: the store's identifier plus the free-text description.</summary>
+public sealed record Activity(string Id, string Text);
diff --git a/samples/web-app-cosmosdb-nosql-api/dotnet/src/Pages/Delete.cshtml b/samples/web-app-cosmosdb-nosql-api/dotnet/src/Pages/Delete.cshtml
new file mode 100644
index 0000000..386fa85
--- /dev/null
+++ b/samples/web-app-cosmosdb-nosql-api/dotnet/src/Pages/Delete.cshtml
@@ -0,0 +1,2 @@
+@page "/delete/{id}"
+@model DeleteModel
diff --git a/samples/web-app-cosmosdb-nosql-api/dotnet/src/Pages/Delete.cshtml.cs b/samples/web-app-cosmosdb-nosql-api/dotnet/src/Pages/Delete.cshtml.cs
new file mode 100644
index 0000000..88cfe41
--- /dev/null
+++ b/samples/web-app-cosmosdb-nosql-api/dotnet/src/Pages/Delete.cshtml.cs
@@ -0,0 +1,21 @@
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Mvc.RazorPages;
+using VacationPlanner.Services;
+
+namespace VacationPlanner.Pages;
+
+/// <summary>Handles <c>POST /delete/{id}</c>; the activity is addressed by its store id, never by its position in the list.</summary>
+public class DeleteModel(IActivityStore store) : PageModel
+{
+    public IActionResult OnGet() => RedirectToPage("/Index");
+
+    public async Task<IActionResult> OnPostAsync(string id, CancellationToken cancellationToken)
+    {
+        if (!string.IsNullOrWhiteSpace(id) && await store.DeleteAsync(id, cancellationToken))
+        {
+            TempData["Flash"] = "Activity deleted.";
+        }
+
+        return RedirectToPage("/Index");
+    }
+}
diff --git a/samples/web-app-cosmosdb-nosql-api/dotnet/src/Pages/Index.cshtml b/samples/web-app-cosmosdb-nosql-api/dotnet/src/Pages/Index.cshtml
new file mode 100644
index 0000000..bd617e2
--- /dev/null
+++ b/samples/web-app-cosmosdb-nosql-api/dotnet/src/Pages/Index.cshtml
@@ -0,0 +1,265 @@
+@page
+@model IndexModel
+<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8" />
+  <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+  <title>Vacation Planner</title>
+  <link rel="preconnect" href="https://fonts.googleapis.com" />
+  <link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700&display=swap" rel="stylesheet" />
+  <link rel="stylesheet" href="~/style.css" />
+  <link rel="icon" type="image/x-icon" href="~/favicon.ico" />
+  <script>
+    (function () {
+      try {
+        var dark = localStorage.getItem('vp_dark');
+        if (dark === 'true' || (dark === null && window.matchMedia('(prefers-color-scheme: dark)').matches)) {
+          document.documentElement.dataset.theme = 'dark';
+        }
+      } catch (_) {}
+    })();
+  </script>
+</head>
+<body>
+
+<!-- Header -->
+<header>
+  <div class="header-left">
+    <h1>&#127796; Vacation Planner</h1>
+    <p id="count-label">@Model.Activities.Count activit@(Model.Activities.Count != 1 ? "ies" : "y") planned</p>
+  </div>
+  <div class="header-right">
+    <button id="btn-dark-mode" aria-label="Toggle dark mode" title="Toggle dark mode">
+      <svg id="icon-dark" width="18" height="18" fill="none" stroke="currentColor" stroke-width="2" viewBox="0 0 24 24">
+        <path d="M21 12.79A9 9 0 1111.21 3a7 7 0 009.79 9.79z"/>
+      </svg>
+      <svg id="icon-light" width="18" height="18" fill="none" stroke="currentColor" stroke-width="2" viewBox="0 0 24 24" style="display:none">
+        <circle cx="12" cy="12" r="5"/>
+        <line x1="12" y1="1" x2="12" y2="3"/><line x1="12" y1="21" x2="12" y2="23"/>
+        <line x1="4.22" y1="4.22" x2="5.64" y2="5.64"/><line x1="18.36" y1="18.36" x2="19.78" y2="19.78"/>
+        <line x1="1" y1="12" x2="3" y2="12"/><line x1="21" y1="12" x2="23" y2="12"/>
+        <line x1="4.22" y1="19.78" x2="5.64" y2="18.36"/><line x1="18.36" y1="5.64" x2="19.78" y2="4.22"/>
+      </svg>
+    </button>
+    <button id="btn-add">
+      <svg width="16" height="16" fill="none" stroke="currentColor" stroke-width="2.5" viewBox="0 0 24 24"><line x1="12" y1="5" x2="12" y2="19"/><line x1="5" y1="12" x2="19" y2="12"/></svg>
+      Add Activity
+    </button>
+  </div>
+</header>
+
+<!-- Activity Table -->
+<div class="content">
+  <table id="activity-table">
+    <thead>
+      <tr>
+        <th>Activity</th>
+        <th class="col-actions" colspan="2">Actions</th>
+      </tr>
+    </thead>
+    <tbody>
+      @foreach (var activity in Model.Activities)
+      {
+      <tr data-id="@activity.Id" data-activity="@activity.Text">
+        <td>@activity.Text</td>
+        <td class="col-btn">
+          <button class="btn-edit" title="Edit activity" aria-label="Edit @activity.Text">
+            <svg width="14" height="14" fill="none" stroke="currentColor" stroke-width="2" viewBox="0 0 24 24">
+              <path d="M11 4H4a2 2 0 00-2 2v14a2 2 0 002 2h14a2 2 0 002-2v-7"/>
+              <path d="M18.5 2.5a2.121 2.121 0 013 3L12 15l-4 1 1-4 9.5-9.5z"/>
+            </svg>
+            Edit
+          </button>
+        </td>
+        <td class="col-btn">
+          <form method="post" asp-page="/Delete" asp-route-id="@activity.Id" class="delete-form">
+            <button type="button" class="btn-delete" title="Delete activity" aria-label="Delete @activity.Text">
+              <svg width="14" height="14" fill="none" stroke="currentColor" stroke-width="2" viewBox="0 0 24 24">
+                <polyline points="3 6 5 6 21 6"/><path d="M19 6l-1 14a2 2 0 01-2 2H8a2 2 0 01-2-2L5 6"/>
+                <path d="M10 11v6"/><path d="M14 11v6"/><path d="M9 6V4h6v2"/>
+              </svg>
+              Delete
+            </button>
+          </form>
+        </td>
+      </tr>
+      }
+      @if (Model.Activities.Count == 0)
+      {
+      <tr id="empty-row">
+        <td colspan="3" class="empty-cell">No vacation plans yet — add your first activity!</td>
+      </tr>
+      }
+    </tbody>
+  </table>
+</div>
+
+<!-- Add / Edit Activity Modal -->
+<div id="overlay">
+  <div class="modal" role="dialog" aria-modal="true" aria-labelledby="modal-title">
+    <div class="modal-header">
+      <h2 id="modal-title">&#127796; Add Activity</h2>
+      <button id="btn-close-modal" aria-label="Close">&times;</button>
+    </div>
+    <form id="activity-form" method="post" asp-page="/Index" novalidate>
+      <input type="hidden" id="f-row-id" name="row_id" value="" />
+      <div class="field">
+        <label for="f-activity">Activity <span style="color:#ef4444">*</span></label>
+        <input id="f-activity" name="activity" type="text" placeholder="e.g. Snorkelling at Coral Bay" required />
+      </div>
+    </form>
+    <div class="modal-actions">
+      <button class="btn-secondary" id="btn-cancel">Cancel</button>
+      <button class="btn-primary" id="btn-save">Save Activity</button>
+    </div>
+  </div>
+</div>
+
+<!-- Delete Confirmation Modal -->
+<div id="delete-overlay">
+  <div class="modal" role="dialog" aria-modal="true" aria-labelledby="delete-modal-title">
+    <div class="modal-header">
+      <h2 id="delete-modal-title">&#127796; Delete Activity</h2>
+      <button id="btn-close-delete-modal" aria-label="Close">&times;</button>
+    </div>
+    <div class="modal-body">
+      <p id="delete-confirm-msg">Are you sure you want to delete this activity?</p>
+    </div>
+    <div class="modal-actions">
+      <button class="btn-secondary" id="btn-cancel-delete">Cancel</button>
+      <button class="btn-primary" id="btn-confirm-delete">Delete</button>
+    </div>
+  </div>
+</div>
+
+<!-- Toast -->
+<div id="toast"></div>
+
+<script>
+  // ── Dark mode ────────────────────────────────────────────
+  function applyDark(dark) {
+    document.documentElement.dataset.theme = dark ? 'dark' : '';
+    document.getElementById('icon-dark').style.display  = dark ? 'none' : '';
+    document.getElementById('icon-light').style.display = dark ? ''     : 'none';
+  }
+  (function () {
+    var dark = localStorage.getItem('vp_dark');
+    var isDark = dark === 'true' || (dark === null && window.matchMedia('(prefers-color-scheme: dark)').matches);
+    applyDark(isDark);
+  })();
+  document.getElementById('btn-dark-mode').addEventListener('click', function () {
+    var isDark = document.documentElement.dataset.theme === 'dark';
+    applyDark(!isDark);
+    localStorage.setItem('vp_dark', String(!isDark));
+  });
+
+  // ── Toast ────────────────────────────────────────────────
+  var flashMessages = @Json.Serialize(Model.Flashes);
+  var toastTimer;
+  function showToast(msg) {
+    var el = document.getElementById('toast');
+    el.textContent = msg;
+    el.classList.add('show');
+    clearTimeout(toastTimer);
+    toastTimer = setTimeout(function () { el.classList.remove('show'); }, 2400);
+  }
+  if (flashMessages.length) showToast(flashMessages[0]);
+
+  // ── Activity Modal ───────────────────────────────────────
+  var overlay = document.getElementById('overlay');
+
+  function openActivityModal(data) {
+    var titleEl = document.getElementById('modal-title');
+    var saveEl  = document.getElementById('btn-save');
+    var rowId   = document.getElementById('f-row-id');
+    var input   = document.getElementById('f-activity');
+
+    if (data) {
+      titleEl.textContent = '🌴 Edit Activity';
+      saveEl.textContent  = 'Save Changes';
+      rowId.value         = data.id;
+      input.value         = data.activity;
+    } else {
+      titleEl.textContent = '🌴 Add Activity';
+      saveEl.textContent  = 'Save Activity';
+      rowId.value         = '';
+      input.value         = '';
+    }
+    overlay.classList.add('open');
+    input.focus();
+    var len = input.value.length;
+    input.setSelectionRange(len, len);
+  }
+
+  function closeActivityModal() {
+    overlay.classList.remove('open');
+    document.getElementById('activity-form').reset();
+    document.getElementById('f-row-id').value = '';
+    document.getElementById('modal-title').textContent = '🌴 Add Activity';
+    document.getElementById('btn-save').textContent    = 'Save Activity';
+  }
+
+  document.getElementById('btn-add').addEventListener('click', function () { openActivityModal(null); });
+  document.getElementById('btn-close-modal').addEventListener('click', closeActivityModal);
+  document.getElementById('btn-cancel').addEventListener('click', closeActivityModal);
+  overlay.addEventListener('click', function (e) { if (e.target === overlay) closeActivityModal(); });
+
+  document.getElementById('btn-save').addEventListener('click', function () {
+    var val = document.getElementById('f-activity').value.trim();
+    if (!val) { showToast('Activity cannot be empty.'); return; }
+    document.getElementById('activity-form').submit();
+  });
+
+  document.getElementById('f-activity').addEventListener('keydown', function (e) {
+    if (e.key === 'Enter') { e.preventDefault(); document.getElementById('btn-save').click(); }
+  });
+
+  // Edit buttons on rows
+  document.querySelectorAll('.btn-edit').forEach(function (btn) {
+    btn.addEventListener('click', function () {
+      var row = btn.closest('tr');
+      openActivityModal({ id: row.dataset.id, activity: row.dataset.activity });
+    });
+  });
+
+  // ── Delete confirmation modal ────────────────────────────
+  var deleteOverlay = document.getElementById('delete-overlay');
+  var pendingDeleteForm = null;
+
+  function openDeleteModal(form, activityName) {
+    pendingDeleteForm = form;
+    var msg = document.getElementById('delete-confirm-msg');
+    msg.textContent = 'Are you sure you want to delete "' + activityName + '"?';
+    deleteOverlay.classList.add('open');
+    document.getElementById('btn-confirm-delete').focus();
+  }
+
+  function closeDeleteModal() {
+    deleteOverlay.classList.remove('open');
+    pendingDeleteForm = null;
+  }
+
+  document.querySelectorAll('.btn-delete').forEach(function (btn) {
+    btn.addEventListener('click', function () {
+      var row = btn.closest('tr');
+      var form = btn.closest('form');
+      openDeleteModal(form, row.dataset.activity);
+    });
+  });
+
+  document.getElementById('btn-confirm-delete').addEventListener('click', function () {
+    if (pendingDeleteForm) pendingDeleteForm.submit();
+  });
+
+  document.getElementById('btn-cancel-delete').addEventListener('click', closeDeleteModal);
+  document.getElementById('btn-close-delete-modal').addEventListener('click', closeDeleteModal);
+  deleteOverlay.addEventListener('click', function (e) { if (e.target === deleteOverlay) closeDeleteModal(); });
+
+  // ── Escape closes any open modal ─────────────────────────
+  document.addEventListener('keydown', function (e) {
+    if (e.key === 'Escape') { closeActivityModal(); closeDeleteModal(); }
+  });
+</script>
+</body>
+</html>
diff --git a/samples/web-app-cosmosdb-nosql-api/dotnet/src/Pages/Index.cshtml.cs b/samples/web-app-cosmosdb-nosql-api/dotnet/src/Pages/Index.cshtml.cs
new file mode 100644
index 0000000..be6bc47
--- /dev/null
+++ b/samples/web-app-cosmosdb-nosql-api/dotnet/src/Pages/Index.cshtml.cs
@@ -0,0 +1,47 @@
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Mvc.RazorPages;
+using VacationPlanner.Models;
+using VacationPlanner.Services;
+
+namespace VacationPlanner.Pages;
+
+public class IndexModel(IActivityStore store) : PageModel
+{
+    public IReadOnlyList<Activity> Activities { get; private set; } = [];
+
+    /// <summary>Flash messages set by the previous request (the equivalent of Flask's <c>flash()</c>).</summary>
+    public IReadOnlyList<string> Flashes => TempData["Flash"] is string message ? [message] : [];
+
+    [BindProperty(Name = "activity")]
+    public string? Activity { get; set; }
+
+    [BindProperty(Name = "row_id")]
+    public string? RowId { get; set; }
+
+    public async Task OnGetAsync(CancellationToken cancellationToken)
+    {
+        Activities = await store.ListAsync(cancellationToken);
+    }
+
+    public async Task<IActionResult> OnPostAsync(CancellationToken cancellationToken)
+    {
+        var text = Activity?.Trim();
+        var id = RowId?.Trim();
+        if (!string.IsNullOrEmpty(text))
+        {
+            if (!string.IsNullOrEmpty(id))
+            {
+                if (await store.UpdateAsync(id, text, cancellationToken))
+                {
+                    TempData["Flash"] = "Activity updated.";
+                }
+            }
+            else if (await store.AddAsync(text, cancellationToken))
+            {
+                TempData["Flash"] = "Activity added.";
+            }
+        }
+
+        return RedirectToPage();
+    }
+}
diff --git a/samples/web-app-cosmosdb-nosql-api/dotnet/src/Pages/_ViewImports.cshtml b/samples/web-app-cosmosdb-nosql-api/dotnet/src/Pages/_ViewImports.cshtml
new file mode 100644
index 0000000..ec62511
--- /dev/null
+++ b/samples/web-app-cosmosdb-nosql-api/dotnet/src/Pages/_ViewImports.cshtml
@@ -0,0 +1,4 @@
+@using VacationPlanner
+@using VacationPlanner.Models
+@namespace VacationPlanner.Pages
+@addTagHelper *, Microsoft.AspNetCore.Mvc.TagHelpers
diff --git a/samples/web-app-cosmosdb-nosql-api/dotnet/src/Program.cs b/samples/web-app-cosmosdb-nosql-api/dotnet/src/Program.cs
new file mode 100644
index 0000000..92b0ad0
--- /dev/null
+++ b/samples/web-app-cosmosdb-nosql-api/dotnet/src/Program.cs
@@ -0,0 +1,48 @@
+using Microsoft.AspNetCore.DataProtection;
+using Microsoft.AspNetCore.DataProtection.KeyManagement;
+using VacationPlanner.Services;
+
+var builder = WebApplication.CreateBuilder(args);
+
+// Listen on PORT (8080 by default), the way the Python image binds gunicorn to 0.0.0.0:${PORT}. HTTP_PORTS is the
+// same setting the aspnet base image feeds through ASPNETCORE_HTTP_PORTS, so no URL override is involved.
+if (Environment.GetEnvironmentVariable("PORT") is { Length: > 0 } port)
+{
+    builder.WebHost.UseSetting(WebHostDefaults.HttpPortsKey, port);
+}
+
+// Read and validate the configuration up front so a misconfigured deployment fails at startup.
+var storeOptions = CosmosOptions.FromEnvironment();
+
+// SECRET_KEY is the Kubernetes Secret the Python sample signs its session cookie with. Deriving the Data Protection
+// key ring from it lets all replicas validate each other's antiforgery tokens and flash cookies; without it (a local
+// docker run) each process keeps its own keys.
+var secretKey = Environment.GetEnvironmentVariable("SECRET_KEY");
+if (!string.IsNullOrEmpty(secretKey))
+{
+    builder.Services.AddDataProtection().DisableAutomaticKeyGeneration();
+    builder.Services.Configure<KeyManagementOptions>(options => options.XmlRepository = new SecretKeyXmlRepository(secretKey));
+}
+
+builder.Services.AddRazorPages();
+builder.Services.AddSingleton<IActivityStore>(sp =>
+    new CosmosActivityStore(storeOptions, sp.GetRequiredService<ILogger<CosmosActivityStore>>()));
+builder.Services.AddHostedService(sp =>
+    new StoreInitializer(sp.GetRequiredService<IActivityStore>(), sp.GetRequiredService<ILogger<StoreInitializer>>()));
+
+var app = builder.Build();
+
+if (string.IsNullOrEmpty(secretKey))
+{
+    app.Logger.LogWarning("SECRET_KEY is not set: antiforgery tokens and flash messages are only valid on this replica.");
+}
+
+app.UseStaticFiles();
+app.MapRazorPages();
+
+app.MapGet("/health", async (IActivityStore store, CancellationToken cancellationToken) =>
+    await store.IsHealthyAsync(cancellationToken)
+        ? Results.Json(new { status = "ok" })
+        : Results.Json(new { status = "unavailable" }, statusCode: StatusCodes.Status503ServiceUnavailable));
+
+app.Run();
diff --git a/samples/web-app-cosmosdb-nosql-api/dotnet/src/Services/ActivityDocument.cs b/samples/web-app-cosmosdb-nosql-api/dotnet/src/Services/ActivityDocument.cs
new file mode 100644
index 0000000..c3e2552
--- /dev/null
+++ b/samples/web-app-cosmosdb-nosql-api/dotnet/src/Services/ActivityDocument.cs
@@ -0,0 +1,19 @@
+using Newtonsoft.Json;
+
+namespace VacationPlanner.Services;
+
+/// <summary>The Cosmos DB item shape shared with the Python sample: <c>{id, username, activity, timestamp}</c>.</summary>
+public sealed class ActivityDocument
+{
+    [JsonProperty("id")]
+    public string Id { get; set; } = "";
+
+    [JsonProperty("username")]
+    public string Username { get; set; } = "";
+
+    [JsonProperty("activity")]
+    public string Activity { get; set; } = "";
+
+    [JsonProperty("timestamp")]
+    public string Timestamp { get; set; } = "";
+}
diff --git a/samples/web-app-cosmosdb-nosql-api/dotnet/src/Services/ActivityId.cs b/samples/web-app-cosmosdb-nosql-api/dotnet/src/Services/ActivityId.cs
new file mode 100644
index 0000000..8654aaf
--- /dev/null
+++ b/samples/web-app-cosmosdb-nosql-api/dotnet/src/Services/ActivityId.cs
@@ -0,0 +1,15 @@
+using System.Security.Cryptography;
+using System.Text;
+
+namespace VacationPlanner.Services;
+
+/// <summary>MD5 of username + activity + timestamp: the id scheme shared by the Vacation Planner samples.</summary>
+public static class ActivityId
+{
+    public static string Create(string username, string activity)
+    {
+        var timestamp = DateTime.Now.ToString("yyyy-MM-ddTHH:mm:ss.ffffff");
+        var hash = MD5.HashData(Encoding.UTF8.GetBytes($"{username}_{activity}_{timestamp}"));
+        return Convert.ToHexStringLower(hash);
+    }
+}
diff --git a/samples/web-app-cosmosdb-nosql-api/dotnet/src/Services/CosmosActivityStore.cs b/samples/web-app-cosmosdb-nosql-api/dotnet/src/Services/CosmosActivityStore.cs
new file mode 100644
index 0000000..981b69a
--- /dev/null
+++ b/samples/web-app-cosmosdb-nosql-api/dotnet/src/Services/CosmosActivityStore.cs
@@ -0,0 +1,112 @@
+using System.Net;
+using Microsoft.Azure.Cosmos;
+using VacationPlanner.Models;
+
+namespace VacationPlanner.Services;
+
+/// <summary>Activities as items in an Azure Cosmos DB for NoSQL container partitioned by <c>/username</c>.</summary>
+public sealed class CosmosActivityStore : IActivityStore
+{
+    private readonly CosmosClient _client;
+    private readonly CosmosOptions _options;
+    private readonly ILogger<CosmosActivityStore> _logger;
+    private Container? _container;
+
+    public CosmosActivityStore(CosmosOptions options, ILogger<CosmosActivityStore> logger)
+    {
+        _options = options;
+        _logger = logger;
+        // Gateway mode talks plain HTTPS to the account endpoint, which is what the LocalStack emulator
+        // exposes; Direct mode (the SDK default) needs the TCP replica endpoints of a real account.
+        _client = new CosmosClient(options.Endpoint, options.Key, new CosmosClientOptions
+        {
+            ConnectionMode = ConnectionMode.Gateway,
+            LimitToEndpoint = true,
+        });
+    }
+
+    public async Task InitializeAsync(CancellationToken cancellationToken)
+    {
+        var database = await _client.CreateDatabaseIfNotExistsAsync(_options.DatabaseName, cancellationToken: cancellationToken);
+        var container = await database.Database.CreateContainerIfNotExistsAsync(
+            new ContainerProperties(_options.ContainerName, "/username"), throughput: 400, cancellationToken: cancellationToken);
+        _container = container.Container;
+        _logger.LogInformation("Cosmos DB database '{Database}' and container '{Container}' are ready", _options.DatabaseName, _options.ContainerName);
+    }
+
+    public async Task<IReadOnlyList<Activity>> ListAsync(CancellationToken cancellationToken)
+    {
+        var query = new QueryDefinition("SELECT * FROM c WHERE c.username = @username").WithParameter("@username", _options.Username);
+        var activities = new List<Activity>();
+        using var iterator = Container.GetItemQueryIterator<ActivityDocument>(query);
+        while (iterator.HasMoreResults)
+        {
+            foreach (var document in await iterator.ReadNextAsync(cancellationToken))
+            {
+                activities.Add(new Activity(document.Id, document.Activity));
+            }
+        }
+
+        return activities;
+    }
+
+    public async Task<bool> AddAsync(string text, CancellationToken cancellationToken)
+    {
+        var document = new ActivityDocument
+        {
+            Id = ActivityId.Create(_options.Username, text),
+            Username = _options.Username,
+            Activity = text,
+            Timestamp = DateTime.Now.ToString("yyyy-MM-ddTHH:mm:ss.ffffff"),
+        };
+        await Container.CreateItemAsync(document, new PartitionKey(_options.Username), cancellationToken: cancellationToken);
+        return true;
+    }
+
+    /// <summary>Like the Python sample, an update of a missing item is logged and still reported as done.</summary>
+    public async Task<bool> UpdateAsync(string id, string text, CancellationToken cancellationToken)
+    {
+        try
+        {
+            var item = await Container.ReadItemAsync<ActivityDocument>(id, new PartitionKey(_options.Username), cancellationToken: cancellationToken);
+            item.Resource.Activity = text;
+            await Container.ReplaceItemAsync(item.Resource, id, new PartitionKey(_options.Username), cancellationToken: cancellationToken);
+        }
+        catch (CosmosException ex) when (ex.StatusCode == HttpStatusCode.NotFound)
+        {
+            _logger.LogWarning("Activity {Id} was not found; nothing to update", id);
+        }
+
+        return true;
+    }
+
+    public async Task<bool> DeleteAsync(string id, CancellationToken cancellationToken)
+    {
+        try
+        {
+            await Container.DeleteItemAsync<ActivityDocument>(id, new PartitionKey(_options.Username), cancellationToken: cancellationToken);
+            return true;
+        }
+        catch (CosmosException ex) when (ex.StatusCode == HttpStatusCode.NotFound)
+        {
+            _logger.LogWarning("Activity {Id} was not found; nothing to delete", id);
+            return false;
+        }
+    }
+
+    public async Task<bool> IsHealthyAsync(CancellationToken cancellationToken)
+    {
+        try
+        {
+            await Container.ReadContainerAsync(cancellationToken: cancellationToken);
+            return true;
+        }
+        catch (Exception ex)
+        {
+            _logger.LogWarning(ex, "Cosmos DB health check failed");
+            return false;
+        }
+    }
+
+    private Container Container => _container ?? _client.GetContainer(_options.DatabaseName, _options.ContainerName);
+}
diff --git a/samples/web-app-cosmosdb-nosql-api/dotnet/src/Services/CosmosOptions.cs b/samples/web-app-cosmosdb-nosql-api/dotnet/src/Services/CosmosOptions.cs
new file mode 100644
index 0000000..4412f8f
--- /dev/null
+++ b/samples/web-app-cosmosdb-nosql-api/dotnet/src/Services/CosmosOptions.cs
@@ -0,0 +1,26 @@
+namespace VacationPlanner.Services;
+
+/// <summary>Settings read from the same environment variables the Python sample uses.</summary>
+public sealed record CosmosOptions(string Endpoint, string Key, string DatabaseName, string ContainerName, string Username)
+{
+    public static CosmosOptions FromEnvironment()
+    {
+        var username = Environment.GetEnvironmentVariable("LOGIN_NAME") ?? "alex";
+        if (string.IsNullOrWhiteSpace(username))
+        {
+            throw new InvalidOperationException("Username cannot be empty");
+        }
+
+        return new CosmosOptions(
+            Endpoint: Require("AZURECOSMOSDB_ENDPOINT"),
+            Key: Require("AZURECOSMOSDB_PRIMARY_KEY"),
+            DatabaseName: Require("AZURECOSMOSDB_DATABASENAME"),
+            ContainerName: Require("AZURECOSMOSDB_CONTAINERNAME"),
+            Username: username);
+    }
+
+    private static string Require(string name) =>
+        Environment.GetEnvironmentVariable(name) is { Length: > 0 } value
+            ? value
+            : throw new InvalidOperationException($"Missing required environment variable: {name}");
+}
diff --git a/samples/web-app-cosmosdb-nosql-api/dotnet/src/Services/IActivityStore.cs b/samples/web-app-cosmosdb-nosql-api/dotnet/src/Services/IActivityStore.cs
new file mode 100644
index 0000000..167993e
--- /dev/null
+++ b/samples/web-app-cosmosdb-nosql-api/dotnet/src/Services/IActivityStore.cs
@@ -0,0 +1,24 @@
+using VacationPlanner.Models;
+
+namespace VacationPlanner.Services;
+
+/// <summary>Persistence for the planner's activities. Every call goes to the backing store; nothing is cached in-process.</summary>
+public interface IActivityStore
+{
+    /// <summary>Creates whatever the store needs (container, table, collection, directory) before the first request.</summary>
+    Task InitializeAsync(CancellationToken cancellationToken);
+
+    Task<IReadOnlyList<Activity>> ListAsync(CancellationToken cancellationToken);
+
+    /// <summary>Adds an activity and returns whether the store confirmed the write; the page flashes only then.</summary>
+    Task<bool> AddAsync(string text, CancellationToken cancellationToken);
+
+    /// <summary>Updates an activity and returns whether the store reported a change, with the meaning the Python sample's driver gives it.</summary>
+    Task<bool> UpdateAsync(string id, string text, CancellationToken cancellationToken);
+
+    /// <summary>Deletes an activity by its store id and returns whether the store reported a deletion.</summary>
+    Task<bool> DeleteAsync(string id, CancellationToken cancellationToken);
+
+    /// <summary>Cheap connectivity probe used by <c>GET /health</c>.</summary>
+    Task<bool> IsHealthyAsync(CancellationToken cancellationToken);
+}
diff --git a/samples/web-app-cosmosdb-nosql-api/dotnet/src/Services/SecretKeyXmlRepository.cs b/samples/web-app-cosmosdb-nosql-api/dotnet/src/Services/SecretKeyXmlRepository.cs
new file mode 100644
index 0000000..e0cc5bb
--- /dev/null
+++ b/samples/web-app-cosmosdb-nosql-api/dotnet/src/Services/SecretKeyXmlRepository.cs
@@ -0,0 +1,49 @@
+using System.Security.Cryptography;
+using System.Text;
+using System.Xml.Linq;
+using Microsoft.AspNetCore.DataProtection;
+using Microsoft.AspNetCore.DataProtection.AuthenticatedEncryption.ConfigurationModel;
+using Microsoft.AspNetCore.DataProtection.Repositories;
+
+namespace VacationPlanner.Services;
+
+/// <summary>
+/// A Data Protection key ring derived deterministically from <c>SECRET_KEY</c>, the Kubernetes Secret the Python
+/// sample signs its Flask session cookie with. ASP.NET Core protects its antiforgery tokens and TempData (flash)
+/// cookies with Data Protection instead of a signing key; deriving the one key of the ring from the same secret
+/// lets every replica of the Deployment validate what another replica issued, which the default per-process key
+/// ring cannot offer behind a load balancer.
+/// </summary>
+public sealed class SecretKeyXmlRepository : IXmlRepository
+{
+    private readonly XElement _key;
+
+    public SecretKeyXmlRepository(string secretKey)
+    {
+        var keyMaterial = Encoding.UTF8.GetBytes(secretKey);
+
+        // A 512-bit master key (the size Data Protection generates itself) and a stable key id, both from SECRET_KEY.
+        var masterKey = HKDF.DeriveKey(HashAlgorithmName.SHA256, keyMaterial, 64, info: "VacationPlanner.DataProtection.MasterKey"u8.ToArray());
+        var keyId = new Guid(HKDF.DeriveKey(HashAlgorithmName.SHA256, keyMaterial, 16, info: "VacationPlanner.DataProtection.KeyId"u8.ToArray()));
+
+        // AES-256-CBC + HMACSHA256, the default algorithms, serialized the way the key manager itself serializes a new key.
+        var descriptor = new AuthenticatedEncryptorDescriptor(new AuthenticatedEncryptorConfiguration(), new Secret(masterKey));
+        var serialized = descriptor.ExportToXml();
+
+        _key = new XElement("key",
+            new XAttribute("id", keyId),
+            new XAttribute("version", 1),
+            new XElement("creationDate", new DateTimeOffset(2000, 1, 1, 0, 0, 0, TimeSpan.Zero)),
+            new XElement("activationDate", new DateTimeOffset(2000, 1, 1, 0, 0, 0, TimeSpan.Zero)),
+            new XElement("expirationDate", new DateTimeOffset(2999, 12, 31, 0, 0, 0, TimeSpan.Zero)),
+            new XElement("descriptor",
+                new XAttribute("deserializerType", serialized.DeserializerType.AssemblyQualifiedName!),
+                serialized.SerializedDescriptorElement));
+    }
+
+    public IReadOnlyCollection<XElement> GetAllElements() => [new XElement(_key)];
+
+    /// <summary>Never called: automatic key generation is disabled, so the key manager has nothing to persist.</summary>
+    public void StoreElement(XElement element, string friendlyName) =>
+        throw new NotSupportedException("The key ring is derived from SECRET_KEY and cannot be modified.");
+}
diff --git a/samples/web-app-cosmosdb-nosql-api/dotnet/src/Services/StoreInitializer.cs b/samples/web-app-cosmosdb-nosql-api/dotnet/src/Services/StoreInitializer.cs
new file mode 100644
index 0000000..c74eb50
--- /dev/null
+++ b/samples/web-app-cosmosdb-nosql-api/dotnet/src/Services/StoreInitializer.cs
@@ -0,0 +1,33 @@
+namespace VacationPlanner.Services;
+
+/// <summary>
+/// Runs <see cref="IActivityStore.InitializeAsync"/> at startup with a bounded retry, so the app fails fast
+/// (and the container exits) when the backing service never becomes reachable.
+/// </summary>
+public sealed class StoreInitializer(
+    IActivityStore store,
+    ILogger<StoreInitializer> logger,
+    int attempts = 1,
+    TimeSpan delay = default) : IHostedService
+{
+    public async Task StartAsync(CancellationToken cancellationToken)
+    {
+        for (var attempt = 1; ; attempt++)
+        {
+            try
+            {
+                await store.InitializeAsync(cancellationToken);
+                logger.LogInformation("Activity store initialized after {Attempts} attempt(s).", attempt);
+                return;
+            }
+            catch (Exception ex) when (attempt < attempts && !cancellationToken.IsCancellationRequested)
+            {
+                logger.LogWarning(ex, "Activity store not ready (attempt {Attempt}/{Attempts}); retrying in {Delay}s.",
+                    attempt, attempts, delay.TotalSeconds);
+                await Task.Delay(delay, cancellationToken);
+            }
+        }
+    }
+
+    public Task StopAsync(CancellationToken cancellationToken) => Task.CompletedTask;
+}
diff --git a/samples/web-app-cosmosdb-nosql-api/dotnet/src/VacationPlanner.csproj b/samples/web-app-cosmosdb-nosql-api/dotnet/src/VacationPlanner.csproj
new file mode 100644
index 0000000..ee66710
--- /dev/null
+++ b/samples/web-app-cosmosdb-nosql-api/dotnet/src/VacationPlanner.csproj
@@ -0,0 +1,12 @@
+<Project Sdk="Microsoft.NET.Sdk.Web">
+  <PropertyGroup>
+    <TargetFramework>net10.0</TargetFramework>
+    <Nullable>enable</Nullable>
+    <ImplicitUsings>enable</ImplicitUsings>
+    <RootNamespace>VacationPlanner</RootNamespace>
+  </PropertyGroup>
+  <ItemGroup>
+    <PackageReference Include="Microsoft.Azure.Cosmos" Version="3.62.1" />
+    <PackageReference Include="Newtonsoft.Json" Version="13.0.4" />
+  </ItemGroup>
+</Project>
diff --git a/samples/web-app-cosmosdb-nosql-api/dotnet/src/appsettings.json b/samples/web-app-cosmosdb-nosql-api/dotnet/src/appsettings.json
new file mode 100644
index 0000000..10f68b8
--- /dev/null
+++ b/samples/web-app-cosmosdb-nosql-api/dotnet/src/appsettings.json
@@ -0,0 +1,9 @@
+{
+  "Logging": {
+    "LogLevel": {
+      "Default": "Information",
+      "Microsoft.AspNetCore": "Warning"
+    }
+  },
+  "AllowedHosts": "*"
+}
diff --git a/samples/web-app-cosmosdb-nosql-api/dotnet/src/wwwroot/favicon.ico b/samples/web-app-cosmosdb-nosql-api/dotnet/src/wwwroot/favicon.ico
new file mode 100644
index 0000000000000000000000000000000000000000..5b1d5cf37d81c073dbacd66df3f69d9240359dda
GIT binary patch
literal 36791
zcmagEWmp_d(>6Q{i$hpk0}H_+c#vR=6Wrb1od6-g;x0iFoDJ?0f_tzeIKkZs9^B#M
zdhWm9alG?mrfYhnrmO3ms<R6KKmZy5fdJ1N6p%*-fcMWWQqup)Cnx~W^?VKr{hz#m
z4gj?n0Km!lKiTpH0L0=001Wm&nVJv){y_l%4*#G0g9QL^-~8A9Z-WBc8~`wG0sv8}
z%Cb0^<e1MVao)*EsXrh8(*S~w`n;z;dolw6WW0A$;+j5LR>?|=hE{~(xo1m$5$WOx
zbWKdfscH3)sLJu8Xzj(xu<713Y$3x$OfLQLhNy8}4uYlTL|y(QT@oUE8%0m6*lERg
z1z4=(8HnCaQ${&?+Zzf}>!bD+H;@yHKQSZYu^->grpOP5U0!8&*<K~jn<fjg9|H-E
z7vuwNu@j+x`=G0n*Q#dt(qKRua$cKUdDXg3#V1h^w0U-{V)E8A@9^~u&#`W~sdysM
z*gFit3~HA9y>$!7!B+yIi1l|oaJ(PxauD5x8~L*c^Ib0^4*b-W%Gu<d<%hfSSC8?Q
zcE<Sd=wpl1L8t2UwB3Z?<I;G4w2hJvVtuvZd!=Ic)d*A&pNQie9^*8{R^Hg$D_XNj
z;q9Kf^%PDnpM3qX8Do>9Sovk9&i(=hRu&Fz(W>Lscu7crQLUxrCM;>!e0m{r*JdLi
zX1#U$C?c6~)NA%5PB4y7HQH>;zWNGg*Ey4P&2YQ_)ul&FNMtBeU~#9Paylk8=aUY{
zNBfE9?{iK09V9WWab|*Lq!FiiDKA!9(<sNcn!_(kCmzQwHuA?m+#}-h5|&tyX-ARL
z487U+1pN^ppE5(t%8hhV`n!8?<j#A~VXW;vb>^k%@#WN!qU<{Fj+%hW*|2<vm@N*q
zOAsj>T4pa@@b<H-l4`u@_2#wD^c9zKGq>MiZZMnTL#@zEc1$?Q2pM5i^aK{)@f|5L
zgrL<vR!$YO8oI{3a_r7S=2-D~32n|#zZGdE2X1dgG4VXl<Bmzn2vWarlT8A>8(V|Z
z_P_K+c)0)doEohned9K=)z411+B%JG7yQb^y(oqU*iX!T=Xq{0W%1<+!dPDWy@E9!
zHs7r}y&k4(<WB*SQZC9>A>gj<i;+ACB&1u5l~0z14e#y!Ed1?D@jsrdF7%9A{jn<+
z`f|6@nMScBLwnwKEChHZ2;ZN-JZ#lyD3izYCPtLzOU?$*u?T~-iJDK(3TIf)&U|th
zjk!-2ioCIoUjH_g0R^k?)|LMWoBwG)tnc=^b9cUS;|U}irkN1*o6_#tM}T+I%2HJl
zrosO|p7fvZlK!73t$K@G0{}|X|2!#9%gE7i3h&W+r1|QoY6b%=SJN%ctSSBe9Zi@F
z9__y9xP0ZUr<#<Vs#d8weX@WZGoHGaKdY8-YG_H9q+KE5BD`8vGb(~9E?TD)1CMTO
zObYXz;#O|2Skz$!f2&{MNV=%ww18<|K!S(N*>2{I^^3JZggQ{)fHvVz&W+6pq)3ti
z!9XnJ{b2ma@Ik4GevGVKB5b^sp}QmS@Fj)Q762@%ewgc#XF?g<g3MV69h0lR5K|e7
zS9;wAKEzivr!cQ6zhA#D7YANQ&e9{TL`2i3Ia43Kyz&&m7{djc<K+55Z|TCSJB?lp
z&RMj!yx)o53v04Rfe83AWP%vDNW^&uGPE;?9*_RU5LDlY5`thcP97!$56;HNHp44n
zL~!(8055TJSdIHqaPVWA+$jW!YbuT_u(YpUEHl`9ZIZgE8U=Ly^W(tMt2_2M5Ktd2
zHor2pA#gqB^ryMP41_ch9#qd~VLef$ZkP1N@UW%tlGax+f$+?*DpBZXbUa&;591!I
zjx<avu`oyiR%mmqXH$7o{QgFscmr%&-ap%5Ui(kepw_2#LqK8(2~Rsdyhp!67diO7
zJEjzjc%hc<*L&O};r9r_6i-1m8wJVb(*vUwM2gOrtN6g#^@q9gLVw!JooRXHibPli
zO$~to>6f2_LO=15ljp$_1xD`Q%T-%Hi+CUcHxoLJ%bB8waM({HJ{AthxM&$4xpw>&
z)~qgo;6b1%I+Hx9$;au+f^H5XO#2udviAgAWfwD1>eIbLLwd0hXx=X$eo~*N8(gxX
z(2H!!ey+c2(Q&0JGf~0^pbS`FO7h1qr>93=$E++~b3R>P%D!Fsu-(4WAnqhbaE67a
z_`zwuHr?{KRq(e_<Y7V8KP$sIBK14tPR6ZuooY%Nv;uHT<IHl0nRQp&fjeZzs{?Y6
zq^AATzTICMySsOH#)29s@Jc`aN{{*grPkXByH`Bsh4}oK`}s?<ReX(vR#>1QtJYt!
z^!VX&+eDO0B@7(Yvu=)EFx$1dr}$}`YDCQkEt})^1aD--7vtNGE9<9|-OkIndnP-}
zY9YZ&m}kt!)HE`HHq&_Z>kEG%4gyWlT#s#avp#-*Zms+A>NY(5BMIE|qs>O&$Z)3X
zRS0fk>vlsNVA-?CKmcBaqF=`yzET;uIH$hRV&_r-0oRHNDgczsn|ZiOm+QCHZ*?9D
z{-k0MM44Ynm5d@+Um%dGjym_pWK{AMUw#j|q%IT;aG3{WO#UgWAM3i1L<Qn?Q9(%G
z=GEBJ{n>Aa(KHGX1xH=6DDVRH(*83nISQ^U^IDH)<Q~X0_32dR!$5Iei=##100`!t
zdqfOyR<LW>$8Oj$R#{Q6@CQ0}9^bKGzWQ_LjDUQuy<DKs^rJ}_BA?tlc@1zb)V;TJ
z$Y-QQ2H{Nn?ADI$2~q{1zrKxv(<Z5qLrH!>-WU0W13&+{^7vjRKUJg)-7yo77<Jvx
zdDzwMktB%Fp(8m9rieoVf9i}^FIP*teydH>u0}i@LsSLXC;-wIJ=;!<kJIZzZ1x%&
zwnL)>z-qPYbdPlhVEba-<2@N+Oq8S$ZeKt|HLaA4RAl5qSm#4Pw(bQYGWGpvp?oDC
zG8)(7k`k*cThNyeXsdCD1Ixxe<pJ%&e8OYpV8luOKx1!yeqZ0On0FheM3dImJI>lo
zVHAYCqX%Dod@D%WKdXMmJ!<nXP%mBG`$0>0oQGeWJRH0Bl#A&5vzH47X^_r)1Y#cj
z3A^9ukKWvSqjfI4>2QIu`Vwdde)GGGlhjxWooCSiP3Oldw+<vD<$Hy@Lj}w;<h6<a
zih(hqe^Y_iI?UIU0hXXd%Q+by{?XK1UcY#m*T1%Hc35pPKS(y~MWqsceD}hj^&;bw
zNX3P0g->w0i7zdS4n2C>XI5j-6LNO$Oi-?-O8EZ+@S)HB(EkH`j}ITt0RTPke}G@8
zWA_aBM2{owF6n(d%9M_(<^#%^u=Ro%DFaR71-yGXyt4T+i^;t2S|tbsgJn=SHDae&
z8(noFRGW~fH;*rJy)<+J>EREt3i^n;^lL&DTl{Z=<zHsgqilSSm;G)ntcM^%t7SVY
zepl@t9cS6cIexfnf8x3TbfBv)U`@O$;%4u2xq+cs^&7-OWGR_rKaE`%Q~SoDNe&rm
z2>X?!4)(sdCo=7Z<W$J+C6osqgsVZ_<}kSK7uuCiS4uQwiW&((g6ahaVi~!`sF#gN
zzEq<_Q-c+YzdDTai?#U#aBls5=oC#Ve?kQ&?EV_?)j#}>in%E3<;-}44y`dm{RAC!
z2OpHcxQdt2d5bTdg|y0A)&@ZkVaUg{Dztf>#NjLMYi&|CFb&-*6UMz(*!jfKA!7m(
zY^G@X?y%{?Q+JF8zydJdCB6`kz|Qv}9AX5uFj4B;BL(=erR#o?*6xldMT6y_o%*L$
z4aWr1vYlhZ<jHW&YDz)rplqN@#pO`zjj5>3__LdPbPT%h>+%v{xNAImV2Z@irtaoa
zY@lrgal!sq>A`;UIL2=Qd?g&9!dse&_Aw&^{XmQ6(~cTT!ZadKa1<RVm~3cBMoxDK
zz<xwpuf_vY&X_IK(iApr%Fre>zIF_ByPKaG3D^{)pJ=y>8;sp^2pBAyHtEec817Cf
z#YBe$Bam>k_#o<C-`LP;SXhV^8$1Q((&z@<U{a|q@`-BUG`7?f0oDWI-T}C9jR)p*
z<w7Md6D1q=KhN4^8q8oQ2;1;>{z63qsEDOnD4ED&WINO4dR-El)N~u9CD1vMP4f#A
zle+s!d$7@IX|1hkX$MmwNeJY2)+WNof2oysFZ^;CKd$g!U?=VbJ?6L=?Fd-UtWb%0
zl;q@jbsDvQjys9tI+Wqz(g{@nzC*#Bu5{f*_+|)@bsto14&9N|l;7HbWpXE&d*w1>
z_!xUCB&`-l;~|lBFGY4##<!2<>P9Z4j*p4S*2<m`8CwHCgP0J!BK(PvnlJR2Docmb
zTX)f1wy+Wz`K3KhA`p~@_g2j=!peV^`Sijmted$L7aJ+&*8k8K@=9_k<+85Zi*<2_
z7H4GMoE^K~ybAY4gcKV6u8@Yp_*5IFL#8wL!#<je7e=|Jp2+WhN{{shI`Q72aP;@8
znr3v)99XnIKd;QxcT>{3VP#_Uf7<Q*XBsm3WRfo%%tf)IOlPLk_4){^y!dkcHj2mJ
zL>Odd@W-R|aXK%&XBV6L<J<TJ1ou)|OheCG7sdDK{U$}r#H=JmNB2ovc<;0CE|vk>
zndulWat_+3Bc;q^m;ECMu?R6?N|C%p`irA}$8tl}yGLQSRRb(3%N<Rcgwww$JYMId
z3GG*p<f9=z<NNV#HC~*Z7ClFdspBT&Uzd0KoiJ*~f7iVH^jchM5e$@i$}1w1!Wx0D
zj2~!OC9(ESd+{%(m3zPa`1YY1657}!%bBtixHr4{XnN3om5nu^3}LOGzcLG0wfSwD
zc%|KV@jG0EnlNE+%1p0wyVns527PUA{m2b?@+Bzpz{te%r-keLt@2z-zL}|7#dXWf
ztJ^z`fUVqQKMXEo0e{Qra^HP#i09|%{EVN?I@V^twG-d|*GLlZ^QXEg=V6)3P1<$x
zi^(NhdN@Rs7&pGs?qy=&Y((zr0-$B*1i;Xrn?mq+2dhXH2ewGk-ZI0<QXT4#ezRvS
zuYr5|rwfU^{KFsj^oNmbx(NKU<XUx%K@h@aOCAaC>7wsP6}o~J-&`o9g?O@(rAObK
zP9p&ljnZiWNNC?@R*az*`S#lU&)9>vpLD1fd3;7iW)?bf)ed}-faq8G`Gse%e&Xa#
z+&qubNv<P(-PhvcJ|m6$x+^NCP<?+L6jX@tQc|%rDxglQzu;s#{k}IzT>N2UE6y)R
zSY*ygWZ#AmD5%pzf=7i!Fbp<Gbx^um^hzTp^9Jwa<D#6a7e07tY_A$EIDgED#0JjK
zHOa2!b~RV+zgW|jdFs@CLSOv$EzIFdq$UdrV5?s*VN~yql2K(8UaswxS6b&`wso9C
z2IUTr;R!*qppvi+Km{K6VjBR2M@cfM3*Ac}EeX^WrB9oN`M#sgZq&3=%<zc!ZRf8z
z#tlvl>1h65i1E;XwFTm{N!U`mG|)FMgazD-=B^>rY{g@|36#=Zw|{AGK_|v%(0W8c
zZVvp+7UshJ1;+du?&`GZar2J=n5=j|U^yv;j#RA9oc`!`i4Vq=A$PKnsM}A)@w@WN
zk-eDXfpr{b^3PPeaZriP1stvD#oFLbT#uop37nd}sS8p;>be*>`Hm{{R+c5AdF^|O
zL`~Njkq$ET9}M9H0O2%8^4a99Z?v)Rv!`oMo;2;;czAz&{2t2tBGf9&KO;N=MM;HY
zE}OCnPbm$)SOB+wdcsTxS}-V@m!UPofJEKm&RoQ0PMu9R;5GRdPsOigM^9uhr8N$*
z8ZjOARPCoDS-(+$ddhwt)f9cT_5iI>g;FeNeO3VFhEhJ6M6HRFD@uj6%gTEAG=2h?
zx+yZkhW$Cq`+22geU|Oiy=ghKJFZp(k&rWsj*n9i=fnp7W(tMQ0j^%b>0Brmzz;OV
zL9ZGA>h8SR<~1I9qUg_<$TWs%<KeTu0I8E*x_@xSD|q^MohjUvnTQ<yV|#<;I3MI~
ze?D4W2brymBDvB!AaU;?iwEF}aCxRvj2r3Tqg2AavOee6Nwph{o{584M4>f>aP8ZB
zTXt`9VD;{a5xGtm_XBof5Xc3GU76PVvF-C`r609kA^X2ep+n1U?VUfhvWKRQv&c&B
z)>OzP=*_tX>I+ugZCl?Gmg&yM&E57F&!!e{=vBP^cUpDV84wbBVD%42$`<rDl6!mk
z$mV@cnR1^8dv_qHSYGkVqdT4V|0A^dk7wfiztBbp=_UdIUa<ZzwCU6LcQu^yddl`Y
z_H)spZm@DBtHCCVRr<t5Q%DD{(aGj@nkb;RI^_i=jivLdDjt$b+D;_swUZTDGSKs7
zPtX(;ZkQ^LDfh_Q760*!CN_XcB2d^s;ip@;T@4*<hxX4QP0k;&_d1^|Qn6>>jf#;U
zE+?!U=Xi|XEWN@D2qV6fAZb|xR!@~|vI>PC^iVF|;TfZ<VoFyt_w^Odp{Nk%b%TLZ
z-x4OI(Rzl5=o$@C+-TZ=w@QOLpQ>F@{#g~)l1jnloCw9UU|?iOhmHBiC*0gt5<5}}
z5=^aiMg{l}$e!xXkgpLSiwA}ep#>~evhuO!EyT$V^O@Bkhggr$1gTSfx<u#O+7V2p
z@OD~yIy0myBJB>~MMA>FQuVqTwQ3ettVMGsXTp>$kpMYAd?vd3pm#C+ofbl@0A6wp
z3_|Y(xz1|@0rc-~ZW$YoR_1;ZFw$}QPgt#pR!(gU^}#y;T7`5vEmao>caD3TvmlX@
zK6`)Vhn<$;m)<C^tu@r&GlNli9Zc|okP#{2>KU+TC{iL)3PUf!QNpuES3MiYy&u6v
z${dYuzGx`+$$*Jkw05FkI1KEHffacP`xUa4)Ot17iu)q$M!6G$!?4d+-83;+ChIuF
z40tT&&?0G*>-%B;K*~HN1-k$OFxWd7h<O((P2wJXWVCQ8@>Yb5mjPNoijlN1aUxr=
z`(mq<o*l1-0M*(Og*I3_9D&na_-$0r`>d)G?UDJ5n9wWPo4^#=@@ygom=2?66sr<v
zkc7HhKHW8QC{=i#3E|W2;Z=OZdHQjdSG>|sj>pwQ9Vp^M8Xv9dLo{sPW%pW$;4ej4
z*BrhaziZ$U0XDpzCSN!>W@|tG=A~Hvo#W68I5A!%IuxP~hAo?IJ5{&c9Eo9zgrDs0
zhnc0a0fd;Vg802`oP^=3+1ZI5Cv^el8JcM+SttlwhJS*R)#Uh6KawQ=y|v3aRu7+u
z4(^ILMjPvooQ@WDdaNw0uZLz_^^f2jEY|pefgj7N-Y*C(WgbT*zoK!oIw(CA=9Eo4
z?KaH}{&kthRFQzd#FY|!(VMn0GTu(z2J<?-qgNfXb#jtcP{0yi$vkPlME|Yf8WmFK
z4o81F2n{&z>Ngsli6U&lI<xL5o!TSYh|Uz^v(z72V#iBFn#G)TW0AnXBZOC65*hAw
zDX;ocai?S7cSUfa$}<B1PfWcw_gw66Fd63=SKbsP43-8ECr)IfVDLH~P=at%7&kev
zR(1n-r0CH9{Jyv~c+1We^w_L$?T>el#zho%NX4}+BA|(=pixK<eU6bD8itiBhjpyl
z*zEF)U*x^`7BE4JWG3kLgBV?oGBkF@aTQ;56W^~VJ~KDKQWPH*Kt(Gb#M)pTn$XDc
z47@v7LW>|*n)R94Ayx#ZDnTA!+k~Z&4GDXd{fSBh;=yI|;UF^*Gm>UVJ{=qzJyM}`
zN~S)u;_BZUvFmdjp;oM`5oz;j`l^*n&QQ@w414NOM4bjnUiapn5XZ1@Q1i-Q29X<c
znClyQK5nE$7V)}2a$Sk=RSKLhoQ}UGrsnKNDp1X&>H25h#vgupAFy94OYte~jo?8T
zd*}eKJbNxrUx{sX``M}3nBIp(SddZ{J?$UTw*Z_qW6JjxX!_X2+-~Chqruj(i7jhk
zP|4`0uO8pk<Sfw48WQ_=^`I5?wCFM~_pzvFHH8z8OZUod)AXv?JgNV1o4J(4sEr%f
zU1;R;>#;<J9OLh7BdZ{p;qGlnDqXkt9O^DkvuBr2Pt+gkd>8qCQkto(aELOp&cpZq
z3dFs~?;FmGCq*8L#%wd^OSXhsyMio^iYA#MX#HYv=Zqzq_Hlk%C0ixu$prpgU{FG;
zZlf`PT#7PT!@=!#P-nk>r?>;j7d0B4z24dK<NCdd%j2WN#fizn`x`w=R}mOLxd}%+
zqeeL7rH%&}OoO7V?!P9<FLrb4DZ)!aDsk}xHE&4SswDOGneZwK9iJ^9%lpgLK<9wF
z!AX1|8ay5Ja-k2);35xYxRVv>cBYjN_4#{`R~DZ}5}pd4IC_6GI<7bP1*y#souZ0|
zK6H`h-@FC>N;+f8O2VG6%wt-oiFLuqXpfnQu7^&<^-uq6h3=>S_Hn;^m6`is{4{QJ
z)i?bTBN!XwQ<J>nE0@lYwQilj2=vpNwLZJAt*cV7=8q$qQ3sDbyxWj2yksu@Yf=nQ
zN<DVuN1EKxa&yhB+p14gj1aoE{pdo_wbq3FSKY78-%y}@wwH>+W}TfD9#2j;AB(A_
zLw<QQu3TG&TQ1H1RQsZ=%(6vU7%%&~a6HvyvDr_`KI29G+sTM578&WgDIpG#FWg0|
zzPEWzS<}hVMjiCf3kM;-!w+>-GIhd<`@igfe>5|wO2(N2+s!D3I3IsK+74_#F1X)h
z37#!g09}8dI!@GmpTrekBw#XP=nX7RWH}kQZ_j-JU^Ljpm+`c&TrBg3qBidrPlxtp
zapRtflpMKiFR`T@mA=)S)T@kCp~Ac0ObrUhz)VzzMS`7oq>2hIPFD2{#}3k)9I01M
zDj)ZImQ_joqMa|uULygOgDQdLRySm}A|7PK6@Ot1d#Q_VC(^p#Zx=5Bi1Xj9dgtdi
z*6>dz$Z*7-ZeEj2L?2##>xcDzf~7E^m%ac5cwKGzf<973qn};~aTqCw#u)wxl_AmT
z^(CwP6TRT!sa_QXe~X6srf~K-#1-+|3X(3@u~=(nwd<a<`D(YT9=s!t-uVLfYrkm6
z<Vj*k8vbFR(S$87fl;Sr_V7*6G?K15fbR5XU=+~t#&TG)`<QKImgA)YmXN^{id~ou
zOL*AT*f68Xl6Nq2m_`R8vxT!5FhbL31tZ}V!0$9ImCdtori}LY*-~FupP^Xn)MoSr
zJ+V&hPcU<#J@;T{GHmI!gnL7oD1}Wfe$?5=O2Z!%)NL2LI?qN)S6fCy1p_JFcc}uP
zv{VHRx{VFq78kK_lcm<7z^A^xu3G2chB-gCJhmAPZqX**HU7H(O+XwZXQhlZz-jK*
zqa~e{d!cBkOzmr`@O0TSlqOnGeChGG)8wVl`9zM7?I`p`Coi;zqceDIW(6k9J)Z;|
zPIce-zOjEW7xNkX^OUB!Xb~`-$n<8Tc`gw?sk!GyjY%fW=O$Y@l?g?#dk&wfs;JNb
zoMgqRmU)y5>KN?t-6NkOT@geyN}mCknd`q$qfhfx;9Tc;M)hJa8VKR9)C$DGk${p(
zII&;QxZAJgld;OytF3+yhUh%KxT2OS<BuZ)x;NpU`sG;ME^e%OIrP7)rV=z#UX!pL
zW@SgkH!_tir)E>U?{quN{$lb8Y>it+)9*n5Z8PwDJIx9>sFW8tu8>od-YbdX5?v6!
z%=3NkY$yKSj6is!TOSJ&gl_Bf`^SqoHetMfdd0K|w34Uv4P|?4^m<(Fr61GnTlf+7
z2BrG7->cCPLR1MktXDL}@qvajmBqyoK-Z|NHYu5n(}mzJ<?LHHS%H_<XHS20OfW`|
zt2Vz&I2vX<3Mwe&O|{#PSMue2?+?BgYpH*885mjOK%!+Cxsf>pK|re~>Kc1)GQogq
zG#HHjiaGT^Uia#&=occ)IulDC$w=spu;zEOtDicJMwh{tT3<3P9gv7-Q;wOR-Oh4m
zJPQ<!W8T^D?$DfS?r!?Ds7vx7G<6!Y-o|>4DON>U8Th}2tpqYY1Nq4U7OV#$W+Xgc
zw_nO&{Qzvhh-qZ591UKWJ*6*!sHZ|_e>d0X_J*Jkqt*g_x1eFJlu=bBE@wO9&%4ZP
zJxL_r`;Iu3m)L%iA}iDsz^d!(_Ii^h>!lxBtmBIvgpa}6X+;caio^j5Ji#cHXH{<M
z;AiaoC|cd%^5K?<m^lN6C+>s>yO0-2Q1kZg7Wvf4p3gm}l0mOfV|&qj`~6L}Zp(X|
z&lT-Jab-K8Fd|g_tReprugdGkNHAdPI&7+>J|?nN>*>SGb3+F(Uk>^Ef)I_3ET2ZN
zXZK<<zlqCIGGY&atLixjKY6^Uv8%+@7tp(p!<ejB`f!_`KwGrpb05C*yGwJyTiM{P
z>T5-d>f?us*x0T<qGv9Uyx>jB^d?wt-RE?&E4L1R6neUiW>mo%odultu6<=)p?E2Y
zlz55EG>T02Iyy3|z80k&4M0ZD?#zN@IN#hy4FE8g`k$-23soI-8-COrjM}qrvp)|;
z4)k;STB85@$GN^Xj`voW4+#)aJ0E0p&8yI8<ir+-v*|bQ^~cAs7ksul9I>oZ)z`5C
zL-m;xZNfP^k83d|?^+q{&cesg-r&*Dx^p<+9dTQoYnASpjhChBSA;3xH_?F%7%PYM
zQYwX>^8?Z95|+uwCyeup3tK?jX4or+q=B83j6;u;0wQk1%{j*g$a#1W?_T$2mP~Vo
z$>0{@+EFugs8|{qi5!v4m>lEaw%x~FU3J8NH`Im(Pqf@#1?!`wMRu`q=<H-gXR8FE
z74T0=ZN6W+zBBpVRUvx1ZJ<o1lIcin>_MQ&hjr)&eEKoYrOA>?0w7#{hTjc5G1I7)
z(0iacs!A!7je^GPN<%F_<~?@dRm$OTsiY)Fk$|AsttwGj0`xRsK>n{y5ZBwWc@m%?
zMI-0^Z&C)81;y1`F6(2GMv|3ed){n(+$`RpBZ>Nf=Eoe_r#(5lQwnTfHG;3dc-}h1
zzKGQhQa7$UW)8n61a428eQztMN0jFR%P0M^RW?2P#XinkNi1$r1|mrf@{Sh(Vs(X|
zoQxJ?PD+11dEJTm7jvwQdXpslKXOdib3g3=a?CP2w`Bkz*#2LRIc4CNn5C8al<jf+
z&~fC;u-W&D29h`+Wkw{9{_gE+mDJ3XRpSTkPhL81$o2Aa!NR@uALflFS;UQlQ49uI
zXh1vV-=y%Cru2CdzpyeJz5&s+NiNgP`JQjw9kts$UAHju{1X0vlz&vZmr;7uk#Kf5
za<g>Sq;&l%MFM09hSLfIhPPoFHqB*1CeR)9am7do^e)P>T;cu?#nJMGzQ5x$3`)Dk
zRY@lo^l%NTq7WMeo)%&^%cCFL<mnY~Iu5R*EZ>Ak`N+dv#C#XxkC7ASDXHMGjmy*o
zfF=_>TKZa=RXG5cxjFUCYb$BjT3A-3sy$u^GFTC_02>+jxXvF_$Z@fFGe7#gi0rx)
zEn{?ks0nc2gOqF?orc!67+2)vJ1Phx8ur=&2{4sKHLYCgWOxcX)c7bMpM1ILA?I-F
z#BjY5fZaHA0#ezs9I8z48IZ6Cg(am29U<(-39;m1Ek<fN#hCn!1kZ=IB+5|^Km(yD
z4e?!4lxaU&pS=`XCdCT10Krd}R$rwWyY_t7-UuE`jbm*kdoZAyO~QT<Ucn*qqC)9i
zHH^_7)+4aIi7q%G06rl35#XVtBLx9SwDKumE4)wJ>dw0_ygM${zXI&>t1k$UOqr5M
z2$fw1&vm}wyQafOh>lfgC5WMDKLU^%LM-dLo(_I3ymzi*74>}eMs;zWs1B=0+KV1p
z6x1DC%`F9>A#sU+qOHj@oA+TH1HEEyo@vX+%56ETH+tnJ(F07TjvDcMN82`LMT+)>
z??6E7;N_V%Jg_-j;9;L2C{h@C)ue9fUw7_eU3<oHxCB@VZ*hI!CU<lwvz-Jth}=U3
zi345}tRAjGXl_DmDkNphU|I~pfk=tlhQpM#L7g-7r{=Wo-P;W>wFqe>D^>a7d?1*V
zYmClF2c^FAADQ8^+Ai&Oh2a;9K#)45S3Fb-3PB>I_`vVbQY|rM6{9nxN9EP=s3{A2
zE&x(7v5-8dKp!WSV*DqcY%W<-yW&#*$cQ97!v5Ho?0x9##T)Ota;jlNb~u8ITeBJ;
z)dGjxFUCukZ!Z?%m~a@cR_G!T%B=juYmGo#_3F}ZYh=I7_1mlBKQg($X(r+NCF9cf
z%IX#`EDa$UUVf_sZkkD~c$k|pSrI%Jx)GjSj_<j%gMS<VA+|XbszpTDP^M&+!k@U=
z{l2&l{mp!-0Ctr!eaSud?T!_+Ou<`fu%6V|JC;bEA2rD*E1?Js8s|1uS9CheEL}9a
zhh>dWU4`2lbuPu1mcUQ5SEI6#kXSr}rYQxMvPd<ldB{50nBT~$TA-`h;|xhHE1<x{
zxQ73Y#6&{sBuG)wdms#)s`6N@wAKM4W8E4#mLypVED{tm6^qxcx6cWETlCxfaN158
z0AUC!D@Jd%ojN#1)tl1OFqVW$$Z|-OmXFDuMalif>RG0gNYXY%3i<q*n3tcw2aGDk
z>nO|`jQPy{T*1^EFu0uXP2-Mbzh7eQ<GujptqGe-0q!V&b7&9pi0Yo`ZPiT_SvuHY
zFmPYJQhvX7F!}BcFFP8O6>F|L4v(ZAN+oZKx@lEd#rj(I7rI(oXXm_2=0jEamwZoa
zc=S?G@JW4LPFH~^qANO4^I#v`(%5FQL_y?t%ZT}d6WEho%G<X#DUx`s^-1Ig<8}2{
zVRk!14v`9|B{0M#XujjQ;-e1;vSy@fF;L`{mSUKt1#yuN2_KYB=T=0*(;W~PB_}0P
z&~*^}4J!f5Y?<G*!PCtYE1#$u6Je7soBS(wE?##=NX@_P<l+*kfZ{rP8TC^R(4(06
zsfNpBwWgeqUv#y$Oor_V&e<|oef!N|dXb}zDH0?y0)O7}-Ja39CxRExlpt`wXORD1
z<JocFPto>rS#rMk=_P&vd@gs7!7SxxpG#fT_pc~!s(y;(dWN-WngL);<Dgb&x!yL2
z`&=uS%~e~jEs^)9tmYH>OXLuo53lSfgjA&P8`3x)4@I!H3B?*uj<JkTSn?uk*@EJ)
zP25>+a+k$c-#h!7>R`N4PHV=&_k!)IO(wd27WEwsrmeljXO%Fll}*1*%S3~CV5Xvq
z`@*1nI31A`aXjIXkzLjXai!S3xT0+zH?*21l&=W=9A5$0$!bX?llOx=o#_r3eWH}s
z!?NYbQ4x{wlCKAq$_Nas<#7rmso9skRhGgw8Q4)Iv$K*}D!(eaeR1>Qbbss>3;8?T
zhJVMIP{)uaph9urGIWWz$(?(bSP2Re4^6*HVptxc=<`k__rCrnpfT$XUK(yPRUuYx
zn@!w!${`B84J^7)Qlp|irNs(~wZEdO(L#$9fW&E$kOl*xq&b99y58M;`+OqFqdQuJ
zFL8d1Q&3k1(<0bm4Z}a{d)EUjCA`cER~V!weO&1v3dX&@9p@L?S$<401;3!SPF}@X
zZ~3zvcC#p|*%z@_J5-hf*4}Z|q@-6te-sw|Dk*TJF<xvU7Kff7y<{<p+hPZr<KyG;
zd=YBY`5(P=@<)Ce`OXAWhYxS}l%5hqVxu6Th6Qz7`Fm^{ow%iZ4@3W^WJ=(ZpFX&C
zn)Btd-SyI2S>Z!O#sT9|``?dSQ*V$yE{3vDe5s85?-yoK!K`faJ$mp+(m}`h`b4g3
zOjXfD=P_D{z2l7|217+#q>oct#r5N#vP0Gt{=<W$bU$J4N+)O`ly6PGaBtz;oL+H#
z_BYPG*u{q{4xVQdO2QmOTX(<U8nr&M=!%YNFE#4nDVC7Y<|i2#MM8VsUjm+vBJ-I2
zD2Vv^)Rm^c6VRT<UgX;Bl2dsetaqJ0Pb7_oSF_pvRrld|L3JbfRB!P82vGAfxC3#3
z!J@~~W9Ca;NP#MoYll#^cJ;^8xri#GC*~dh5re0}nz_H-(PKa7J=DES^AxI@T-Msm
zYyV<}t-VdKkU+#&e!5@k+~HRJ=u)P-A**5J%Xz!;?ctxd&ZD`JXs%B9bvh?H;`^y1
zudYL+_eawK<@u+Bvu4IBBXV_{;__D8THSLsn@voV|6V=KwsNiM`xF%BHs`NJ#!whp
zKuku30g}r4wFf7-fdZ2oU!JQzytXuJ(T{HrY<@8KYpZ(^+aAc_N80p(CFrY~5=7k}
zwsRI-Ms4z$+(%k$KH|SR+VAT+Y8SZv5i@(WzjAuyG#YihpS`diECzxfeGHg=d=5lP
zc-;TP)#!z!slk~Q^Xxk&bTq{hQe&AB(8T#VK9D9DxXtN6h6U^~UpCzzl34c*vQXTe
zyesa=fu&&#{cAWlO{khbH+eSI=v*u*u>A4p=Cx4HBhls4rJ(5d2kDf{qp$=5rb;6Z
z2D;oPN?_>ktWaM4R8)oP&)qjO&iCS!gXYIpt#%XgmICNV=3jgun^{&@xi<C|Xge>p
zz8caL19IV0XdxAXQw+-Fv`RsoJ<Rz6r7bFz5BEg_qpeTEf1WYNz(H2caL?ZtVJM&0
zWl9VYZwpZ{cQ-~X=yRaJ>2<laH6)|^s0^4k&-2Uq9Hsl%YoqSp{<MEHiH{CF1|wz7
zQbh2mau~&<!Im_I2L~ddQWoC2sA0Y771IrS&bqDkfA;=Us=+Y(^Uu}^Y@7;%t2D<y
znc^A*o_sMi?Knzx)?fXXg`Gw26cxqxhpt2)>NDp{b<a24lxt@#&X#;H#x62f<R1AS
z;c*Yz*;AO3Y~oU(QJJw{^nkHB-`RQ@WO&}l&#h;OqA~rdL@C~X<&Re@o;*GkbZvlZ
z(zw>}JP_1PAAAA<;POz?_x3*ifwAq5QZdjbLUCV!LPI$>;&ZYxo#i)t@OG0URyGQt
zmO?$Vx7YUXFG*nSfYxHJ-@bPVtdyK92_{9xfTRQhHgOYPx}ARXZm~7psM9;aSdNa(
zOp9!SmU|hx?<<R42aRsEo|P4s+oXx%LupZtVrdyem-P2N3$7pzH1CiEcDRFR%mYY(
zq1pNIu~Gsr8FrnYyY>8zAKt`2Y|%2+uJf`HqvM%|WhPMa(*k~t(?4b1B3=-3p5l4v
zdUw^CHPo)Wj;~@Oj_I&);B{xG8fF9_`!Ce=QIt%i03JE!zfkyZ>k(8qy#l$KSZa=W
z!Z4Bh?YI_2ZiALz+>12v2&15P@kkz0z@9_2sqyOvQXVavNC<%-Yp!wKUa8UZv?edb
zK>_xy9q9o?*TI-Lz$YW;0O9F<+w1?}`8QR^ZFO!(1qE1abds<Nety2l@#ERhyjG_6
z0R5fI^VkE1`W-!LeOY*QO<wh#n_L!)!SRt;8F4IEj8~OL%_jrTlU_D^{4dR3i|6IC
zj`2ce29Lm`iLwe@AgEf~Y=eb+s6^iz34lhEzgnUBW;I7_FsrvZV-VQF%|3Tkr{-a_
z4wh)&&5Gz0%0r=iL0sTlVZ#BbM(UgT=1)(su`ThnOZN7`R(-y`ywQ7rg6VKB<h0`<
z($8;gom5IO?~U%ho(kJDnhc9GgaYCX!z(hl0oE3|b-Go&pS+p;x<!G%e<M-r-xi?`
ztiHADl5`E&3gLG;Sl|n!h}&WJI-^xbriDXFjB$wYe0F|nTg(ciPkhL-e>>eir4lZy
z?R0IX-ms63Pgkch3j+GsV{y8m82G9Ef2ReL-<0V$i23?#6&>>%##hzq-`N#kU;28C
z^ZKLyxO@+;tVEyJ|CIigC|!?-%W9d~>F`+4ix@zt3KaQazchFSg1z`a22YUAR?E`H
z>bHw$2aP2cCHcv|KH>VLV3-%>^7iwvRgv;VrN%sTKuLwGDj5eaNG{e~>qtZZ1<1Qu
zh{u4x#S{Cs{)+@?Q}y$^H$*50|9ecu!-e6ISn>+(Q~TQX-I`D<$oBV5jWP0xJhf9F
z5JY-F9Ky0fVC{w4hDLjOn{v5vwxAHRnpNp9J}^YM7lcp^zm<ixg9wPzv?W#f&V4A)
z6{+XitM*C?S_sQq!Izz)uMf5D9hEUeYzwVIM)mgZ<haag{zBQ&-zd<I?>Wqf<sOfC
z)ap83mz1ILO}D)F$tAw5r+TE7e=WZL>#!`=8q`NC3_j;{n)lwyCJ`&=HA)oVU^Ytr
zR_oFGNHO3(U~BaHg+R^W+=h_?F*22DzIc{?i4U5~>sPgMNd?rv>42$O-0#1;t~wbn
zkpG$uLxUqCdB~*MKQZc<H14KLe1#EQJb2X;>a>aRRB1x4F4VV%k(rJcB2GK}OWJ&4
z>&v3OshD&pvh?aMjj{Tp)n{-f;Whlgkb)Ug`(3u@qGRiq$T&s6>Z=5ZVjjh+?(3|N
zm(r(np-}5S(s?o^mwBI^HHMdPwbzLEYw+`c_PPEetHLzBI{Dx42f7jWuL|6*LURH%
z2f26H1fGlrI_oxiP5V7DGBTr5%9dWc{~H0Vix1^+2O-0&8mo3nxV2?vpVNj%<=SHR
zEhDVXa_klCAc6hPtLrHP`HhQ3nWXzz-g^2%jvPLZx0-&f1UuhV*xHm<vqR7kgvb@D
z%*BF=B#8|IjN<*m)_e5KjQ5DjmRUa<V&Q1K=op+|N#fpmNpu(=lOTYrscA+gUPB{|
zql;uiJI>oo=64D{=)l<2#T}#g<nQsDkH#YZO(>~NS-wj&V<F1`y>e0|CItlwLFvvz
zA(Qm}pys9|T{u(w!H!6q$G_>qpidr&z50|D_iJ)B>}uYd;!x7&egTnk>q}2dIl(Ha
zZ0s)Fwtx3`MO1<JlLFXn+#rIp)v3{pNbU@L#x0*w1-IMjO(T2i&T<0<N~*^JB|p$X
zrHgwWmb4v|0r?L1W2m2>8vbcfbCee!Rw~BVSP(M`Jd`(ISarU2HNGTCe}ozz-hy5-
zriF--@{foJW{O@MJ!>Y0h^iBH(POkCqtUpV{+rPHK!}+UCvNg)83UF#qKv}(h?N*6
zzfsF49xv?+=zh5*h2(tv5uuOdAyKIA2IjQGAp)!R!|Rnd0;lt0gQl(dpCMkz-DC4G
zsgZt;RAsODR|?O_^}+X>m$o^ASd?JMm(M>8v$_`at!-cTGW=WaFs2YLooK?M%=g?m
zi;kAQ%4~Ic%a0urh5^+W6)?IHkWpu$VNP9T(YmG!^1+3Vao6LRKXiD8fABJQx10d|
z+&P00ij#RLc`&R>B3miI87lFV(}Ra5OC_C?Fr~U)&p{>@p11+Fbg@8no*(Z}5UPNN
zP4U9N3kT~m&TF4vE$2Tp4i89<BVIBl5r;N)c5bpFKL`PUL8CGYko+5@VBdbdxg|nf
zSKTqc-00o;3UB@UUM7{Fp+aaR5JXxC4Ssmg3Lr{bWP&8$*9qbS24}u?f%+Hxpg&|&
zy}o}Id(8~=fvGt*O~~YIE~x8`71GoSf6Z=1AQO8@AMhk*1UvODVsaPxvoUCZ<k1gv
zd`VI1*c@w#0MECh6%fvn){L*}LkJ^K{R@Bp0cxroqL4VhhC1YN+X0iTuEv`LiU;6-
zba|0v1@_^LNF)QUQ}%J_VV<N2eI-6*$@02n#^iob$V=P2T=KqX04FFclG-tHx_osA
zS{atQ_AOb8#|8BK-|TOLo;3U{0KwEgl<p?Eh`b-oeAo))i*_>L8~gf>wcYO6I4kn{
ze9LK?3ICJM`wlYaYMlfIhrp1#tOFGLIG3B7H(xq=Ca+VjzD>qtrE}>|1xRRgN@C#6
zCMi@IyRYC<9gOT~?V#%ztT^Aa-}`(h;a1@=u+H*5Ta;S7q2e|HGfG5$|1s!h-s$}d
zIidQ=zb4S=5trD`ZOR#n`|kfi55k}O;r~Yu_K2Dd0su?Y|LDO(f8R7Ct<+<e%J$J_
zNt}0ZFcOU!egSP<hBg^C5taF$IP^;Ya)Y(fzkW~_OCYDA<7%lT*J+`FJBr|D{u8*S
zs&dJ`k%@^}?uVr#nmP;8@03K)PgSj}Wsgha{Rg*^O3k7S7p<i2E4NNeul=0XQ9Xz1
z_HAh&lnsembYm1(Zw%)~enQVjFWGJH-kWXCf4;<Ad5Z&TRy!5a1}s}IuDb(`nYsX2
zGd2j3Tpy58!SQxdm8mPG6^aPe#j4VU@b2*ER>jtJ3%sN%X5u6nBZiPMp%>)9MNx7X
z^Tc2$X-UGH%{SxqxepH`xAhA#HB0o@zf41QNKI3ih`S5%zbj|)n|Kf9e#-YI*r0_g
z*OM_o5XN7TN{V<V&+Q0;&`p!?JwHiE^FhX!FmFaajS4>{y9<7L5r(AruoCx!6`NC?
zsbm&|B^3&|j(oEiMH`RMI{yJ3(9V*`lJGL!;Rb!5A(*}m{1t=#8M|9I*c&tQF&I4P
zec8M)^Lk}A0hQ;!XCPrSbO|cN8_C6XGD-&i3SXrSVxa_zLKpM>i!$6p8M|CzQsL0r
zdtyZ3!Q&ziYmLI`PpOrK=R0}PQ8<79!}>CmJ&Y<1tKNjKIpoPhkbG!!^X>D%8E|Ya
zgt1O@+T-zFX09GGJi5<F-In$rCh`HUH0Q)~eRGlp$2QD`H%PEsOInLYDr$O}lSv9R
zi(Q*A#r&@{Kj*nLevA8FiVCBev#TQ!VuFd1rgRqnz{_KVi_)ec3l>UOPzz&3T}Wh(
zzegtAM>~4DKMPD_V(<wAT}sK{KbPnqVaHz>@b$QOyg6Zk(*7f?l-Hu+>yc@5)cl0I
z7}#?rmVwTYRz^XN8AV&Ti`Cjr9&Ijvf4RT?vafd8iRZqdiS`91PgpM+KpX7#<^-If
zWEpV1Z8c!5#oqJE4H|bdr&te$5{e%JqZzoby|MRE@-NNZFW(~vi(g(hsWCo&o0Ekf
zBq;r?PAKQzr41A)k%$!U$G^$&Tn;?*C=~H0$nT!ygyAiAa9r8#sR>nVHFK(uNYgn6
zD`v$ws7<z&HdJ?Vcy=R%l}YUFH=cY3vJ~acbNPB=)}sa1kz=lrRhdZ5CHX{8pJx4g
zJaXj{Le#`U-dVvVKt+qFee68p%WVgLb%L%Pk(47QeigjMMWoCB6c-0aO58=+CYOog
z6b_J`vepRCFZi7&?|-h2*`IOY_)(N(#%qmF)YA3r17QmB5BiBagZa?{Ik(wj1$2rl
zB$>}KamU$XW-e=-G-Dbe>VK1Y<XjWYb!6SQnB~qJe|!P(uf!0L3`ZojsGuOT*I9-=
z6Srwy*pV7O#dw;zz}i5;^}7+P<JP-rM*G=_+yJIY>UqJKowk+DVI3pd%K@*dcu-je
zgzy&$4?6aIePj^DIEaAj#vnK&5sBoNELGD<Ge`Wi+2r5M#bLMc4$C8hpL?n67l(Wf
z5=3F%m_+CRD5#|B8pl}A{i+PCbZ>2H&Pjn}5ZsITTsTA1{=8^cd%JCu^8?+m<f86u
zSYexLw4xJQM0|nCYrIAQ6~JS2Bd6f}r4*wPsj~FDj0#MT!u*LQcx}?FBFYZ)g2nOY
zoh}yc;{8EqJ`jQ@9~{orwHndsIyY{^m97H+TOCW^q>JEYzha(9RwYVo!FuC1eESl7
z9~1NN+CjAQ<QXTj5&kc+E|$Kz?$%mmZgsk8oy2+mD=-$N34ilh)tf%%FQ57zXt(<7
zJ!6otQbp#w!@-e(2T+|2s|@eYsFt2pJ3b0Z+&()@Huyvv;@51+Xy4wqfr^fcsMjI!
zQ8eQa)DnVD|G9%#DUOVUI_ZgXvdG5YF}!k-T6<}EDlo{Fe_7)_Y$EduU!fdGl4Dn#
z%v%r#-Pr8Wz$7EZRt0%ML20Y@qDX6aKKdyA51;m0BAh=Q71kQIJ+z;FOQWeisW^s?
zeP@$?+R35dyHLVGW?~{*p7_rYrWY{`o5_sB{uxygL^(Km78vZOS1oCxO_$R)xs*fT
z*7r|YevaWQ>-KNQTTQfRhBz54uXVrX;Ub?K`P_CtGzvc~h=@G{t)sI;vEErLkrkp6
zN1yyW01u{uYwKYk(a6Qr=4bYU)U+{j?pw1o?dv3()053sm7q<yD$Mb7+*@D1vfq9)
z%eVLbhle$F*5U+xF3ahbR!ZdGa(}|(s|l8;3aGm}x$pUP>K&V0IJ@U#YU(~9N^ios
zGHNy1f<J7B%uh?oQZQwtWh$q}U-q39m0zsXka^UWN0%UJ9EgXoWYt;{k>AL%8~6{N
zZ8ex1%xdgK5gQ9#H9!kk*D>DSX)w$3^`ziGI)ER|ui{jmsvh}66sMv*%;S(Ztl_sK
zCO(IY8}AASt%q_4G%Vx~Nmw9!rsloupS`O)Zf=gVuGaE#6C?s+ai|OPxb+(a@NmGV
z`!!_Yn5z~y@fbs5i&yDl511Nh$Nc!QF|g;aTv~G7VaxGmK{=&%-1X7Pr2Qm@tx4k;
z8TEay>^nSG?6>uhicx{Q-_GH|4tdMMXtxVqkGPkTN&Rt)$w%M2mTni~7EJ52+u_Nj
zxkK6Y%rwQ=bkLsA(*ga!NF(vnukh`bzg=_zFW*VU&B~rCXbC&>6s^+YkxSf>yo=Yg
z4(CFho<FyO^_p6v1Vz@o${bvxnqO^HE}$I|BeT9gzO#ARSh%Q0<(RDDSGz>X^lWof
z(tkNd9z*4jv|O?nLG}#S*DYMCOk}ix>fF_t&bxc1X<f^2WR`V$mfSRskYK^DeB)FJ
z@ky`XX{#1N<-SZ~vR%}XwsDc7nBT;Vnw##LZ)Gu!Q2sP@C@B<9gcg5@Bh0r3rZ%q~
zI-Qr*RBy-(M5m<Vyby{4yg0naZcnuD#>6s*|6}Ew4T<^ClPI*8l+GES6c3D5-Ps`Y
z-7F|+FvTnZKgX_r%6PH?j1-G1#!pIuSM3YckGnA?5nt7MH93F$B{g-Oj6ETs$l#}z
zqxtjps|=PJh=3;7MMA*=>)YJHk(A1Cx*Dw&o-O&3skJo)Ck$qIkqJELn16h@ET4I#
zM2-b`X>U9NNr#Paq=rZI-tO%4*({Uj6y;p|F<aZQzxTH}x_T~U1i=m2BkcYZ(_{`a
zwEBw4_DHdjWQ4ZNeyb%5(eET+c!)1+w(46)o2C^Z|NV07T`j515a1Q}G(1Du%ImmJ
z5ixfYl^dY*4^^tHtkor7yi-Ae0W}yVS>;e;-ro<cAr^;pks@2*U}tV-S(8JiSTNOs
zuBev%nr6HG68^XPf*X1AE<{3nPuw!3BCPzamh_ji>rJD<>52h%836!Oa>6k^Y%pFl
zChjI369rNz&LyM;L#Wb{(n3zEAkNvn`riJN{5y!1Ql?%;9eMg{m0_L`@try@)Hy{|
zGlmdFz7VL^P?|UY#?|-nE6w@6_3SkA<_+0kDHcdN)Mm}TO6M#86zz@Y&3pt)oOSRT
z88ogadn!;q`Q#yiT%q_{Hw?W1lLr11KF1(5B8#b22|Guj7k($7N!Wr>*4|r$JC-4V
ztc?ktF9_|y5Qt6LW;zE$tVw&wGR>MaGp(&R-32$#d@VinbRDkp({`8VZ*m%Wf;-b`
znGiYZQ4ra0BeE^m@mA$CgfY_WUZ20?S#Q*+n0NhY^c)!$pJt19z(+PM>YaIQOrvb9
zJthe?!ul8Zj`FGB8JFKX@N9R_me}L5UY1XAWH>7C8tfHdT*T~W)=|1!Ijp2)MjB4=
zHSOiK+zXXjJ&Rrky5NM$ChH3&TUD>IF%`~>6ONVuWg*yAw2oO1jb3o|uNSoUkTS7z
zGVkL(mChQg+!?vErw{z>i0!#yOiyHB?@6q@*kI6UY#n;osL(o;@FnoXon+7pP{vo&
zo{~(QmxN7)%z??mWA6Ej6b8{;j6Qlh<)xcG;l8O)Sr8Mhdsmn4oXJ(K!sC;pHWdik
zq`+NlTAS;hvFG?Pv=>ygtJ_+|i;bG=@nz}b_Lik0*HF4|)%KdX2p#`zWFiwcJ|7B0
zRZFhstEZ~ddfay2Pl`1wvO>_?FO+xFHR*u|ECKl}{_F=h9UqQQiyM%C9kHLoWikRA
z88yXUzC>aFGT5<EXVbxeeqCoaZ3s19vp5E=`%lh1@`tu?QqSu5RSx$*=2a_039v6*
zG2k5!w><_8cmE$>Ul|Zb(}X#TED+q?g9LX7?oM!bcTI3x+}&M5a1ZV-3GNmkBtUR?
zyM4dA-}k$xXS#Yyo|3M97RZ|Lzx#DwR+dz1mVs<e?L#_jmUNU~cjxzd%-DZTh<)Bv
zz5^Ha7)XIvqe!T+Xn7eF$9Ni4ScxBS^VQxrsa))j8j4JF=Sa41&$7E(Qs9MBnX>cl
zUXH^^*Yq&V&5jsX1&igHWmYhb3Q^lf(wM5QBo)mJ+jou&<o;(v_ET>;`EKZG$h)qN
zLrEJH&G@FYR4<4jk;ZMmV^cVa4&HsgbyqbOwA|TD8K9@!8!EMgug1~=g>^{c^Si`T
zg>^Ux*Qe!OSfA>&+?t;Zd#oECZdRFCm1HjDRI=VSPWK!r<sx^)?zXEgdS?e4q66G`
zUAM!6pH}mSV{{`jBoZ<j(ewvaw3+#GT1$%0q4fw1vi>{#*>iv7kQhh^s2h6!-VWQp
z`3p)Fr;GsZJH|eLvhcHG+d~j*<ZxW=Bm*X*IeB=0$K~Vzfb=|_ebnQ&$0q0J^|wv7
z$!YHJDa=_;MU!|o%0U^JGdM^`g&8<3x<PTrJ>~a5_pRsiuQ}0qQbY<|u4;J3bg!Mx
zf=6a(4+1Jp9kLb-k!MLbSh<}=@YW7a(i71u^p#qwmPPcH57Z7VyNxHKlZNeIPON*~
zC$nQXj6S(0_41v@^!_vR4o0P%fM3$t8G^4(nVYp=_Qz0Q!m^rFWkGYYX+mRTS(twI
z47@$=<@)%@@}Y4v24lA5lmv`{jY0pr3zeDAQXfw<ohv#CoH2lrWn07XlKJ(c+1lk*
zTtc3o_kOQ4`7>lo-(k8V>(znp!5*f2(#ngBowC+jbWv<vF}+7rWqK)d<><lF;QQky
zY%Ndyr{|weAFr4=_MBk!x^k#?zEcr%vUs(?fA$2I*CTuf>BrQ!6J{OEC*}#G(q@EI
z%5M^Fwzwa48hyVHcdpY92z!}`&47niT3fv{wsA(I=@?7&&badtqjiSG_m0G_lU(@s
zM@*Auj3B=9^550^v2M%^^Vb_xE~a#2CcO3q)ypvADZZ%8-a$oXmdlh+elR6q<w<S{
z=XE~V(R;y-36#>^t9m6R#GK1*Hdr3G8yI)AN|h9({;ZA8D3=U8>!-`Kp9l=u&}6Oj
z07^G-3g@!l>CE@1$xce7uTWvo&m}YgUida@ZiOOBRFY)5EA-=2_(vi`HNEh&SRS91
z#ITBBegUy*GG8tA1)00`SnrxDKJ@$zPV#qRfH2C(F6_E~_Kj%1zweFvGT+y~KVWC0
zZ!3WiSw;V8Yxxs~uPpTE&Hs0T9uvn&jfHAaRbPnXg@Us_Uk>A?k);8l#fhshR-}EQ
zw)*0F?C-Wi^0+0k&sy5ry3&70?1r35;@yH2Xk;Df(j&Z|*4p+qEU=BG{CUV-j7dZ;
zm+ptAb5}TsU6&Zt#l51;%Rk@z?fFF&1D6=tMmYJPIDfqtGjDu$q-)#$^;m4i4AbBr
zLuQ(`aQ($Cjs2_K<G-8Q!&f6s9`HjS2KKifJ43-^ZL%if0p?b}Kc7g>h-;e;P5TTG
z7S3pHyUDCVB}Z4=Iy<;G=FwcHQ0^14I{scwROKn}%MNS%`EJUax6Fd^cZxZmTZGxf
z-xiuQb&!VJ696(bMH!{dAohdQ5*@x7fBl3su=jCyy-xQ^8S4s0J5B`E#yIi2G;VTw
zxbnuY%IIbkdVc^|TWXEFf5c`;KGgg7t(C>Eo6;YsB)rHpV9l;Xc3bMm4%8ueyZK>>
z?$Gskh|EFmpnrZ;n!cA(wI~}Ek-)l?0K%72b$n8&3plxX5(3|Pf*4X$CIR5A=O%Z4
zrE_{E_C*0RY$#x7W7D>>Gt%KZt?*3_x%YJ#m#MdobS58CVPOl;KipPk#D#I~*xj!8
zlX$cl_YZy2+`V|+vtf)GLiG(gOrfotKAv$|XX9Wz6C&L|aGF@Eyyiak1TCL>;ed4V
zZr8tXU$4DXREnxhPTL+|x2km-Z|l0QGQ@A%DV$Mp$gn9<5#d;c$JP!u!|-858@~HX
z+UK!>=}Yzlj03IYTE=@QYdhr7j^7V?a<`^`@Oe5R54;{02kjMqwWbH|%WrYQ6&|ZI
zkg$Vbkws^FZ={aB9#?rmeYnI{39l&1ghe`V_%TvFFNfTo3zc8A43f^kA5(CuzGV&k
z3BpQ^#Hq%A->b`2Z2xKOw0gg~`%D3O-;1snq+S(y__tkdF>Dn|?;VBem)R3-kw-Hj
zqgp9ThNS1m&&#<50>_c$Wkrg`La8EVV0H<~ZAM%T<IV6NF{~B0cj|v%Mo8n8+yB~c
zZDp;!Gv93Pr0LyoThbhQ{>YPhH_Mj*7uHB~`H7cY`l8Co@Odmgi7P6T4+fJf`h_ky
zH?P#lf+LFDq9)Gnf}dP-OE~i$fP7K|Y~0#q%=Ue2xFsd!mx4opA(V2e(<7O)@Hnpr
z&jj-$bD@=svNFuO+hhbT?9lIJ`xAr!MBLQij$4PQTBqywC)R;C)#DQdex|D~65ORx
zf4Eh5$sQ`8vanN6?6)DwV3(xuExG6D%DN{z3kpc{%o=lrDmSgF<Ln!a^4kAR9W6O3
zVJU&V2j^s5oF6s=;{I66!MPgOX|?o3=1mJlI4TQ9)g;`Q96gdb1Rf@o_grHw_$D?}
z3_=F>VPLTW$$;v$F7FMs?;63W@-!d5;7<IoUlzpaY!j+&Cl7x}MH(r`Ppm|41WP_k
z1ETwtrUz_JSJh=362Q=a-}|v_#RYQZsnr5L(b$A%>;_Ngr`yH|UZ@jOx}dt|h>uxl
z7#4g$pYdlASy=~Hf4-%=j-hhkkfuhr@GoM0OTdZPE9je!phklVsQA=Lq<Bw&S`?}n
zpo;Ocwv0D+blbg9M4rEW;&<|BJ0scK!!#a2dPlCZ$F;xszXlIMf7U97soFMFZ_j#f
zs=rG8ZEV{EaRuB}Rc6i*kROH9N3%TN&PBX&r6PZ^(r>i?`ugL{p9Ec_&CMhw&xn<Q
zQ1SlJGl=gJhKm2COdBu$)1#7NuBEyNmP)Xn{Y5tVsOFn1F&p*AEa_qEcV=hs6cem?
z>y8Xa5e7$Xk<IT;P=KV-Evripz2vz?o$tyZ_H<pTmiCpGo7Ott>x)~nPSPK5-R0Kl
zFc8#Zbxk_a?qqLrxGhvULcS<`Bt#{R^$S`+N0THgid!vJK5@t(RJXxvvdn)mFcNif
zF=dv|UA7BG{wiOPgCB*!NFy!=)S>XJr(6o`lI67+uK)aQ*8)qKJAU`<wClD=Mmia5
zaaBtTz=+EKLKPq7@lo!OtY1hdq*7&{!W9LW^BFSD^w_!BhwV#$fU1^T<ry~wzlIej
zZ6?DfOZ?%C6w2L_9@oEHW$zOAn(X!gsOXDf6+#1Bz+=Sp+qJuiPfbiHBs~8`KDWs`
z%KozV)ZlSDA%=P);)v<nx3z`q>gd2E4T?{NR4Qlc;&ekxV(p;zL3EiT*Uzpx>s3lu
z<7I^hV_EyZT1>=dW>r5K7@&$)ESy9Sd-#sdMf6f88BK+Yc2$je5F{e@jS%SY5(7Sa
z_~8conQ48K2kmwc<dEv!aK^w?o9E_$w+n%c8pEty*RP7<2EFas-t)Qm97`m+6;kp;
zlHn;`5H@K2r2`Lg&Sakjhl#z|h-g>DXEX}_y$R1;e}bi&^@XwA-~8CA=^lYcb2(E}
z@Vc+j3By%rTP7*8-3=CgL!SYYtH+|6ban;E>6BB#`yHQJuC@-XB9;kwp3070PbR~w
z199#CRQX?D<Gt$+Pt$Gb$c%-|0*KL^1#lx;yNM$5+&HXq{jf^&Tm<#@$znDps4=*B
zL#jz5iNsU8qAdm$$xLU^fV{lna6Nu^TAlVUla8vxfeTi#6|J*mSWyy)fECd9LFSGJ
z0*W@lxSk`%p9(*OA@}8)xYfQfU0N&O37AW*@h>SKe*Y@Wub|kh^B0Sv<l4&wB~sR-
zyZxw3d*5Rh(WKBGRCunmicv}v$N?C9xgH50<&*#BWDGUC0_im``)ymlu=ZeJ|0Sv^
zi^(zP+0D!Lm@7&$mh4A2>h~=*l{+hnTm0IHv40)Up0oT}XMq3pduYRZv04S#j}G@A
zQoihNz7RdB!FlSVjL~p-2?I=RW+<*fvl2hU8gZbZjN!Rvg|G6@-E8<eq(97M<uSsr
zvO(Lsgmfq$xJQNn$Aflp$+Gp>u;fSZHK`U4oTf%@nZnN)ZD%>jxBF=I9lIJTBQ`yn
zPeruRq>_K9JKs4{s>%_4Lp%isx74s!F_^sf3e<4#MdKJbW`$^Ysx_$bCI3uNbwKyZ
zT$>>{QWj$vA-YX^8Z%VT77@&?5h3w#%FN3Qu5Fq8h)y)vn1^5A%&GhogUorrKnMQ~
ztK{p~zAb~bZYA!349~_%g3_W12~yMEoCY>g4xm`a0-*Dun~A!8t&q<|S2VcV(rLf$
zulv^W+9r8g{2)}p3h0}k6;XHJi9H0vluw2;_hcv|K-|3jf{JDf4L)s*Fyf2M{h?})
zX2woBHO40@Iy0Hzb<w@LbA#jmB!%FEqzH$@z{5pb*|xQF?&S(ikEF`xx}LPUeS8=<
z;#n{&layn&x%}2K%J_nTIhOg}PFAu<Yu@Xp*5<|Y)fHf}$40v(`E?`dAFQX*)3%}O
zqCfit0=V%>Rb|?d#s!s{4OZq1fj(Fzm}9>Td8U#hC{Hi>v$0guUU$Iu)Z4>Yyg0sM
zyZJLV2eP3d4AoHk`N53KB0<VkfXY>r*e?-HEV`s2c7s58RcF@Xyl$87?qnJl=4idq
z&U|+9&UcmvOu@W+_HSjq1yk&VpVv+gZcA+OYx86$`%WoY`0T*+F!Z28lxdB+{*^OJ
zV-+Nhpo-g(g09c2YY22L5?bO0>S-qp*SG4l6T`MzE^|c_V#Nelqvxt{+7$!ZRT%pe
zn{*TX)ndZP9<O|Wm*1Zm9uMk7i<jV^q(_fi?(@3ZjfK#N8I}@&`JsX#)q)O~*qjk8
z`AZT)$7Twmv!SFCFpW;EY}GX{j(&RhU3yah&15WW77&z_G<Hu9>GLicO~Bork3E0_
z^Gj*WU=4>3v4RjuO8jaEKEY8;fFP*fmzBalwBi3CJrAo5ZvX!EdHWl0-pzxex{KpN
zhL;(xiR(KI9$3+7HrE){BS7fN7YkdZ{ex01X|FohxLuf6Ma7Q@C#a8)3LiVZxkY}6
ze0&f@Hzz#T-5HK%fwU+wbaO?yh^iq*1w%u^S%{*H+40Wu173d?;<s`v5hsptO-;n1
zP4C1RT0qqM-%+eC63&gsfQE=B630@Tj<Zqw-+meF6lb%MuV+#5ZmW!Kfdw8vO{82z
z&S6At_onM~Op^BSdCc+#gAmu|VIS9ImQQgO?bWr@u|PYRRfn9wOuDrAT?9L4AB5U3
z*H@#+j3eAW?fwJRT|!9HYt%@eJkmewnSW157)j;9ND=0@!AMJi(g|)KKfXKFx!gwo
zll_LCBlk{O_5zD^^O^)m<tI+VspQFzjMVwjTq3z#X8?s&`T635lJ>u>cMUgU`d<T%
zsaZ`#ykV$d&I}Yz#zlB|&EmdF=@%)1Fo+*R6S}8c;HpE*w7T~5U%4tA%m@pOJpSrb
zB@6a7l#Nw9QrIgQT#0o2$>!c-{(`I6zOk}52F!d}NW%GK53iU_keclWTPOAaf&~@x
zf7glGh#lnM^1O8gAUo$-t#Oi3@@h=MS_a?uw2L)xSe1iaI00t7h^>6{dYEK6kD{cL
zsebGf!m9}<+RG%#{A=u$;Yn0Usz$xN2_$`eJ&fZOka11F45lB6Se|leSb52>krX`;
z8jOpH=>Uo=?binf8xIHn13n<Z<n{T3GnuCH2YtCJ5%>N@I{#W>3GesGUlveQ$Sq_w
zuc)dMkSs=0hpQP(S=gGRpVkax$e-)Pi%jG-vPr)GP+<L>d}BWU8zU-nIq3FMbZuAg
zmn6RlQaM`^W*Q!#(;V=U$_XUuDZcB-$uD0l>xlhp{&g8za>!7&nt|99=k>4a$BXC~
zn~Y{FYJGwH;XC5)C(j^69$WP~sIg8WmoUqS^lkOcUODxKQAv>v!yI0x!$q2vQS^(I
zK{A;2RSuIapp}pf!J>|+1nWwu_}T96obJD~JhzzmNxAo)q9k?s7nZQ}y*yq4TD&+S
z5QE3<v-owSoM%plfP%1HBN*|Xa8OVWS7n7m=EVt{svSN%R*-a%UpnUT9s`4mlMI&D
z6*)(uIPE0Uso2OzaYlrO^UU^dr?#e}4OGR|?>r*#E>}g5HpVv;>cBD16ju`1lV4f@
z^2tEw>BUG{I5(EL8AS6Ykp5+9lq35HQGZWw*m0`99TjM<AzxGHRxJ-4r)r8A;v0Cf
z7?{kgm4FL=zDon#mGh#XG)cVW7#+juEIOW$eAbuo>o(Qs6?abS>YVoc6nJcYogl6-
zlADOs^;2ZeiAi9Gu`j}>swqJHex5B}J6lP}e8Vh%p+>rQ(THpPIHC>AxC9)An<y0A
zaM}m)c2&`H)u3)@<7s9;XLhl|L=FfbxUzsD@O0C{<%Fiki~aBP#O|&QeXdq}xzbrN
z&Mf}@D15&}uKg#?)3Dn^LT!BAtIn7-FHZ_aUOuOFdb7h)p9fLGg%%b&oXr+4v1XO=
zT{#uTSy4ksjM=?joM)s&U~>y0pjD&CJ;6)9Lcj=X<7?e{BHe0UylCOlU+)T{#nv{o
zNb3!iyLdc_pUNkb&(%3CfjD4j+eOQ#v9WnGW%+<j?%3E4L*9ET5r1U^yemK<xWysZ
z=IOxqIZ0U7SCGb+e*=j_`_s+Qy-&9^Rld=~R2epI`+sZY6;=!V{CMimv3zM-R#Ker
zFe!+bmJbK3aByJzigi)xaq=W%byJjNa)J%F_%Q{i$0bkwu{4oNigB=B;eo{zd0K4!
zIV@KUBPI8YK9^{++Y4Ucy)84j>AhbJEZHA+OPsJ^UDuboC(*W1tJp(fyJZbZ9yXHY
z=QF*TOYHZ*xaovaXyxEQplj;}L>&H7Uu9~rO0w6E_QwZ;4CeJso<z52=((1sp8QI7
z6sp&enwYcNZ;py|nhr}RDVk^9UfFzGcv9@(_it>Z5_cdqc$9lwaJe?3bzU!T?L$p?
zmM5dE>|B?UMwBn^tUQp(G&*gvAmB5RDRS2J)##;?u%%gZB{N76xCt=!c<nI**}6vc
z2~>haO|e3B;`;8pbZyOd>WrRd6eynitYS;ugAbk#9Y+{4PmS8|llE^9x4GqXQl%XR
zmeQ9e`A>C7JPtp&4cT7VKFZM*K4gByY-w4F5dkaq{`wl^q|Jo^5LVHmpxX^BvzsdA
z>Rzu4r~kZ@#kaT-f4=|^(K3ae1yXguK?LyJA8W<O%jeo(7KtQ79cf{6e$pIWlO4hf
z$N&CH#P!Jz^hG7xt2-tW2_|%v>Bey@2^Qiu{g<%`JIa+)wA+O`BOzc(yXc08%aJ9$
z#5mS8-v0GL5!DlR1`3Wv5>+|mFyJwhgwGGE^r9Y`#=J2iHE>;QD}*q|h~R?6W>OVW
z#BNKgO69^fecAC?fA_v%CKh+EIAs{OvuOQWj<b}P|1Z>}%I5!OPj1-xeMXZljv!E&
zMC)6gU@3h2tpU&cj+BMV$CXnf5z<r?tg{z4G+Pc^RN4(_x0z$VFwkK?Wl(h_!-bZ4
zW|0XwQq(_my3c~YUQM#yoTscM%2DP8oHIicH8_TFH9ShlGfM<)P-sIz@-(tVDr}z2
z-d-v1dThmM%_3uVy|H=SmD5hpAydq021NkuOjz2AY1f@1T>0Hj<!Xq}K6IzqPg+`d
zq&O%Ku2dJ#9P+YS6@BiakIoLNT2ph%&xk&7DXqTV>&7S}51f}Qyposg4nk~dvUp2r
z`$L)Bf3TUNs7xPp`j2N@qx^P$@?3C=+$o0x3=Iv{)g&@*;i>F7oE;sfbP0|!5#W8K
zb0+0W6d}>KPWJ~A=K0IM6sBg@4<))4TOC%D3Ba?>_Og1a;6;c<Ux<_Ma}=-1QOx<I
z5~9AIDF@}sT1g)Z_YFAHl!DohTm=$UIFmu%^Asg^IuwGBsv8I;K4+ar-P5|Y;N2v-
z9Hu}9(0(Qn_Epxd*W4r<UlUuWv7KpP&uYaFjVB{w(js~3d?ISHm;A0i`o7d*#9^!D
zL}Xp~z5;nv72Cb9kaE5Y{G*e0b&ot&YS@D%ts@QNO;epVbBSDFdP2Hers+F=^N9eK
z88Ivmm?WId6cLSS<^5-Pv0Uju9F?FUBmcgYhVPdMK-*cahp*G!icBjxV&-30r<4fI
zn;!AvGtuk?b~a)P8o|VH#=MXO^P%qUgSy*!PdQM^&qBQ#M*uRad_aS;7`RK(M>!7M
zTsT$L_577QyY7-du3sKo6T%V!$GlLMA|+D?>wSj@KE1xooM@wgNw6v=eW~I;QXJNG
zfB%SWp~>DTojzy*Uo|jf)W?<sGWjW%j~XhG2AX1a_dQ_<Z>LW1Q$B{@+0Ze6gH;jD
z0`|Kj?{ZxJ>q0}%(dU1MTLW`HIr4*Mv}bSO;UVQy>T`7#%3jm?XKlcy38kNczG%ez
zN)Ra2;QvRsoj4D|s|m&^JPJ8?qp~S=&$cR4me^QNSi3zbcU+HeYsKI3n?s=Be(^95
z70RNDf}zb*>~dJNT{q6ZCbq{w`v6v9=1`R*dpd4*<Y{s~sFE(B0*fPNUn1&f&k8=#
z4=pn6<aI|rJ#I7Lw#lO&{&M<M<Wm6YpD^XrRpEJ>%Mxmrpdv+yAc8H-^*9<sILld@
zvuM53B2ndN?-C{hOCmPvhAKTswklwY_~G=+%o>eTOrUUpadZ@O*hyc~^o;jW-wI`?
zrnTcCu<-9_4k_MLF6Oja`oFz26BG)4$@PiKVBjK4MKMDO_9GKh4=5O?kfVxxG+-G`
zqkok`!dPUHSYW4#qoTu#h{b9<?D+%>JPamyFJCY1ef_%fKzZg|XMwTm%n`|tZ~;@^
zH`)jSmY93*61_YkV&Qa}%I7_CeNfi788SRRlem|gBgTk=u!q@q^me6CvPE3#|0Hgk
zoiGqk4ODHqOn6UDKFn7cC7-UE+ZZ)XAJJ_Ly{IxVJQ4s72M69^AT)ya-N^2v<ZoYe
zw^EdCoBTT$WClxNQ%4rY?SOX#=G)!3@(O1@0R0ywx$ybWKZPPNhXHR0wLYUr#jm9L
z#w&^)wlU*PEmWTOC>Ev45pw$d6?dJZuQLDO)aaS8sqmcx4y~&g$E}IIwNoNOj9?b7
zF1zp1TP%WUEiWY{n;qBdp%B>Yzo6l51l`Qt0J6&>0{}TP>_@nRDK{r)2f%(d%$W~K
z@ovf`!&LK>CNMiD82~i9CLm7}xP|L108?^S#a9M<LOQQ{jy3vks|)@mrxg+chzUnf
zY{AW^N+kZI!xoQF0;@JJ^;JFNb*fDoeS|3`iqWds!J<f?^u5Y5*_+b)TOr)zk(gP>
z8RC<$7N1w{wBD0ok!bPdxYi;usD-U^b3KnC^6PyDaJ~?mfsVBEheBi=5h5IL1E013
z=X`m!ud5Qz_ZQ=7Z=JH~-Ox<GPk;V6#k+D#TDrzT?JBz5z$ay6#eEJ^ESWyBDp(sz
z!qpZ^v^OgI$??UNv%KquY4p=1Ou_QgI$?H;^Pf6ZS&E3*EBUQ{N1GWgk!_G8J{!Wq
z&C4*2eLX9sk;gdLCudYTN>1Pf9@AD^yPt$(L8P3Jf?38q<cVPli7xJmHWylo(trr~
z;Ha}P*3a^lJD27^{_<a>Dagr3uKl${{!!E$hAzuqPwrUq*><1h?f04VeDsS+pO_>3
z7no?XB>4N4mdW1C+2qNtUMyce)=wY_E+=qCAJ($j$?B!sDLO&>*}uYmN_T;~!1Ls)
zm2GULAfZw$U&&46p!b&G*xLY2Zl_7h;Jmc8niJ!PS8hFeg6z;Fo|LE%Ed&A-_;MYl
z%a6tnt*mzvn=8b_1(ytg6A>U@Ygl4}(k7S54+|3WQKL^wgj`C9(Xe}kBGH;sr*HrX
zj9j7bPGU0fUyxPS^PfLC0~hfSKKnIm*S4U!%_m{RLX{z-ZOOuSV=SE_Sv^v4gQ3;U
z<-;tMk)4l$eh&ygQ(mQ0);HWZTx8jSx#vkYnIHjh)S<DFukL*O>!!#ZgEN<8S<DU>
zMtqnZHf9(tVJm8Z2D+xEJ2v)~x~to|en#Ni{taY)VN=)KWsF^v^xaIQS*LEOR3qI*
zK)^7rSX}Ew<cEBjZQWuU_KEjY{^<u<1i!KO11dIR#AZi6bS8oSyusd#3HRMBw*Ob5
z`u}MN4uXz?fd5sn8n~5P0RU^w|Epll^Y+7CTpbOZ&dTbvgxA$*=~z~4USeo`U)ZeW
zc%;>@<#JHG5av**v(@A1U|*#vI@96){r&7xQ{7?<%L0QqR!L2?o`EV(@E8_M5Yyde
z)>T*FdwMD)-tmdttemSCzk9!Hj?ej9mR13G6CbC&(F$j6z)U525b1gHk&J{`Vl}id
zHl==?G%y{a4PA@pkI43_(>?deN^UTrBaq$4+2ZD4aUM@vK)p?X$WIhI4I>CH3;}SC
z_rDN}QbUi>dS%em@lY6r)@w88-MwlR^oX0xf(wzz(lAn56A0+S_~QCfKt$*izkNtX
z^Z}8<LMU_)<i<c1BZkltXo%yS5a>!u;sbo>eTW6Pd;l}`HfzgxVCCEJ<DGwe9h@UT
z^i467(=T&;);YwR7NT6SG#>`LN2e3{)VjMX)Y0MQF5gU1Hv=wI6<1x&oK8vn4)P-v
z)o9KqTR|K#bSOJB3>Zbw*NAZ?hQ7);%RsnN7R!lZ8)Z??M-Cw*z_Ouh_W(YQ82SM6
ze-C5|`YuE<Jy>DnRq82-9GJ}1QOWI(1irdSq}Z{)ND)Iu)IW85ESR<oP4{JHTi&hn
zSiL5x&Uj7F$*)unU#B^AP-Fw_J$@D&RP6ZM?SNV3jTby-H)!nAdY@akR!_kgx>VP^
zo#-TM&=&-Vgr@yPQiN`FRmRrqru3q?PY4eXXCIs6?iH|b+=eTefj;AFFA!qQT(G56
zqbFO6G89vC0V%#rN{RaS3QX=+{RI&g*$>pCiIw9OA_;MM-<A_c{wsL={gxOb8Eu@U
zCj7{?D1IAp3bJ{exW7yaVaCz~3cl$nh`Neihge=M{eppL#;oG60bKq&3-&UkRszqw
z5aAj<g>A}bZZkc65%-@00vZad(A~>6;%xWRz(f{A839!`hej^L5$?0*-JKp)h8;(d
z!OmPq7k@PG83?6${C&nPqu`;1la`QMtv8l$13P1(==$)__WkbQYVOJ(_Atq&k~Y7;
zQqYOgP&S~B{vqQJJA@9@YuF=w#Kh3V%}B_u(L=l@fY4%>rX~nVU<tuc6zeHy_4{2l
z!pCiCe}HmNsSIsK9Kp1>;I5n;3#w>ltHb8w$HM`8pW&gS@V`m2nZ5yd;jwi+E{Dew
zBP+SD_@aXv_Tx@ovyBgNmJDw2O`zjp+t29C^?3^y6FahCa=8f^b~YGA2{D4XL14uL
zm;`v(>$L!T(d+co%Qypp+qplU)pC!|nvcV&RpEPXOj@ITu9eLw7*6^;fiKMg2&Cs=
zHq)tdQ#_eoCPFDVGW2auGL-nzJ}=B6#(td-l=)Tq^{1p6=56v9$EtyF=Gk_nu(9?T
zlg5EL1t5eHkYXi)Yl#UvYM-_kpX#^+;@2dkK=|KD8ya716MYa<7^RJ-3ZFEN2q0{j
zhL6Wx?wSGcBy3=|gU8vBSe(F+AO!%r-P5B*c|(_Sa$fIQ=FnN&9o4HCXofA#<HHl*
zW<vsg$in)aLN_4c0h8$nwb17F-!z679sxe=m}(6jtOrmIzUuyo$JMiAy<MSh>OjO@
z3F?yz7+LfS*7|TC<KD_$d(E%1MAVlWjY+3~Cj$37_B=q@2^i|G=?oXXfA*g)>yFpb
zVDE_SL+*<IIvyDpAI0j`EhZ;R9(#IFEgVBE#;4wlhwqJ0NE}gTtgWt(JQ@S!sR!I1
zCSE5$zen8`0xtnN3Wbx3jdG9{m?lm6EHg@v6YpR-4)l07nhVf`AdWZ+%^oH|`fiU}
zlpssj#z`lAOD9xbHlauVmY^^7NIKSH{r+P}nf3hLTFi3hzlfjvHBaByKaULKezgPO
zXk`pB^?^rT>{sgduM&xMCk~{q`Rm<v^Lu1^CS}LiH1`%%WTSm@zjpNyKO`9YJcVmI
zjcldNh|rrej!J`Dn<i+sA3<C$H_k}j-oKtvS=(n<{;q!gWHIu?p^e;U{0WZ9bT2S-
zpfb>BbL~z8>0skS)HLmRJNd5B`JM&8$IuUfr6w<2-Ua-wHnR!1;I4$AhRSAo3Z=fu
zs4v&0ub(LK(h_{a5!E+R@N`H3WzK)><M%Qz!R}R>$ZPmgpQXtZ&_3bdiL_ti6BBjE
z;>yGFeO~%K%ftEbnKl*e8aEEE+5;}Itd4pl<);iTyJ^<b510_R`do;}k1vnPt8Kl;
zfrxn^9Akk?M7Mup;7=+wG@^Va6NW7&FI}7YItJ{ANPzLJbh?_+$=c64o}Amu&p9fD
zq8G<W^Zh$ckSnN&Qo&W0`nf*L{qPjv_}Bxb;sWB=?`zp(ihX4)>bLy;ikAu1j&h2^
z)XF8+?Nb4#Al(OQPmVtv(Dqaj{hV#XAMJj)Q%_C*{gu?GZ8_e%Ck;9Mtk_fciXWFh
zm19jDbOyqiCj5+8@~pp1MXF@wU{O4uKCORe=ZTQZb2k&L!QV~!_v-Zsv_W+lw`H+*
zH0zfuie8ADmLQ0vRy%_pSobk9vw($#`12P}gp&D#n1RQ0&U+!M?A6qQ!28CBqreLC
z*B)#gSo&<CLjx)waGwjbU(*j4MC*g0%h{(~Doc}&x8z49MrfzJhrP0byw=m6#k4B*
zO8Brm(H<C_Nixk(vFpJODwJkl|L~P9u=>5l{UTRvcN&tljky!QK0AUu@TNBf+)szu
z^H$)cD8Ze83wNSbkt5kfAZr6Z#0J=2h5r*;kHGDf5qQ&wJDP3p^qmq*WFqUsh%Nu%
zFW4%o!~ep79~#KxJcxXXCHD#HWdr}7-&Brwm%%ePgG+Vft<Sf2jkc8>Dsa2FkZ9|K
z4&>Og3cTb+wyj)nfCDBsD6%S*N>-ErCU}VMRGe}sdPDNq$9x9Fx?t4(McdQS<}tws
zwmg*Hj?f=Hh*g`}66iB|#f_{z=f?oCF(W6*!j;+%G%045!q0P=Ac9mzT8#uClYlUA
zPKK=o`^;d{m5uG_d(@M)xhywkr9lkfYR5j}LeA)yiVo-`Lv^^KZ3M$@-or3rg<<4x
z8QEg=iYKSD$5@k&mixL)&D9toOwy(ji9+erNA$~+N6qdrC!ocO;@i0(C~hF2zcO~O
zGokHbAW#<Q8$1X>Gtv^MSxSLnSPgDu<Z1U?&{VwtR(YS@Lm4V6NG3x?7v#mXlvCSv
zhEcB+{Kg`?;Nf5&(5SVK>IXxkUDsx|5C)JTt}um`A`~alyIp-wl6@b1uCRsQ0{aXx
z`Lj7}`O{d7nU?-OfQC*xmM@Hw3<2XtprteegOV;u)F^<AD(QF?KNX2lc1}p{U|~tC
z+D5xZhNg!|ba@~@5Ja$JZJ=~U0psT8mT0U3%%cnk&kBq6@nF2MC~>`^e?LU{%OJjm
zVzT2daj7WKV+Kh-dxrq`9t#Nv56|i*q!*nZc&*_&k3p!lRnfv%fe#=Alvv0gFt81`
z)diJUqolvmlW0WRd=c%<`UYqa4vD<^%MGqq4&Mi{f>pSDuj7WEB}B|DvBePyN<s5%
zrUc+f#P^7jFya`Ih{=SBhL%EziSeP-G&=Hp@u8_`4(s5n9)&<eN;Vr6O6Zywt;66D
za{6L)iA2g-jC)j@30N<llRZ%%g}%u=cLpJ*+YU4;>LejnN5cP%?PEjH#<nFH4f?|;
zTQ;8;sAh{OQCMG(5pLRsNB46Deq?$Q#{TtXOD{W(8$pm8!kSLTA?UbL1(5u+%w-b;
zsAlQS8VJlT2$&dmWJYpJ$=S|XK%c7=j>y$&h8?>)uNWw!^`(VC+Y0%^h)AWjR7okK
zOhgjz4;7-TM~KO=<GajUhoh@2IF48IbTrr>pWt4zv`@|uP8FX;efJSrXKvo9)sM1=
z83nxkvTcl#EdFewByyz-b3(D*QJLIf95i5Dw3M>$X7=!}0eo>qM)TwVcV&-p&Ckh=
zRWHW2=?S;VYvLSVh9$tc_Mr^RY@qhH1WG&_<vE5G8AE2c#7tSA9~`U<h_8uvD=0E?
zY+TIA2(36h;NN$mkv}a#XW>GDeK-0GlR|rhUOA97#b=U+i>}yndw1SCdk>j|SLjLT
zky3VZY0jV2QLZSW1=Q#J9TUF?qud7B5_2+Qy1EPyix3vT82WvgMuu8%=!@cy(MMo5
z@7uAX%!72{{2sDCEH>tbxW9AZ>pYGgy7`Q;tmK5eLFSjpmu0kAAMqu>E@g_=MbCOg
zN%XyGr7dicjA+AXJFk8CE^=c#J{1F)5f%)2Wg!J}z>yjGtUtbWRE#o~ZVCUEq<Z`S
znb)+Rg@c88tD#QMRTa2;Agye^2H&9+VimVp{&j=U9^dImQ^TERFjXDyIeX1>qmps@
ztIk>@He$shYb>kHz@gJt^JGrx8R)fsYED;lJ)vc(B@n{i_VwWpM^Z*Qe>OcL%2-&U
z;tC^T$r1?&<r<m<SmuzFvhyhheAo&!HP<krH>(-{FQ}1>-a58QD|mlyo_vwAi%j&k
zD=pYtULC5V&Ue9p;RKUdr<Xv><q%PFRr&KMy%Mic#DE<FMb;uP<!*Heq%be>C2h6`
zCucoJ(j+47e{YM;X~um)P>d8qo7%+rciB!}`&qp?G2g{<l8znse6;4T9GmgeaqvxD
z+iXvPVxEXF8Fy?u*5wn>SoSV_#CZqq;-3^UUBFGy+@rNd%mJFV4<Kb}jz*Q-3o=Cv
za`N|h?a<?0yUB^cQ@qc`xRwEADwm4KiS)$yzIT)awA)cWi6>ZivYXF_GWK)zYO7}w
zDOoik;z@~BOYv=^Zm+j0PAEt{7-9HBF_Mzjm2iqsZK;LjS362yjzUzEk>KL#!Nfqg
zKTvbU1sjZ?QmRQ(axw)z&b_@3!)6UjM1B0dd_Q)9DPV|-Hido$;ersx&`#29dv<WO
zk2oXpS&xun@0Tw%<n-|+kt<f@n#Gf(_Q;$`-MdOR>GHLFh%e0y*(;ALEe|=tL`W8I
zZJ}W*(T!BMvtq8(X13@f=xcS(%FKxVO$k_+FJZk$bB-$ZGG~eH#`;KN#x?BV5Wl*D
z^}XSPlezVKuGRIR2*jh4)En=`oGi4+oik269MV**%QGNeyM{)Vq?0*5rRA@QvB)(T
zJG@z+V9Ck<UN`4}Yl)=894{$%B2*n9;Z!lEenRGyCQQ0E1WGFwl5T_`Kk;&(E1KBy
zDYw-to8jPLOgHx6;#cv`23P&2{&tf4;{Yt}S0%6|j-O16)e-qn^TO1)x`Q5q4;#Zp
zs@@eWf?a0wutyLh@<A?<cFbb^CgK+(1|*wvtryBL`3yZzN&a{~-S_c35)```zymkf
zUk<&|Y6vf8Xk{ynX{(sZ3krUvkYf@s5|v>E)tb`_F_J>(iLTg+Yt9r%ilL3?qv(3B
zAIN{L|Dnn_h#A>Mw)M}7ng+YH7%8n%_tvr0^eReiS93w2V{vdfKiym3sCRgNPmI8j
z%*;lZl2Z+V(Z#2N22E+OWO<wePghp2My-7wtEH@=X|Vl+<XsJzJOql?JE}$^E6Qk%
ziFX!xAit|y*FjW{j01Qfa@9-@m%T^7zoov~^$U@bi3I#`7ex{j)d^r&OMYgNl{Vr1
z)E`g2-TG6*t@-&OW3_d1GrWj=>UC|$p-7B&R*TBlowX)fgngFCr8sL;-8lbwIB;R6
zC$v2qI*`ni)o*y=K{lq8W+4cadYM}%%yTWaS8=0(Z&Te+KPfuqET0YKgTY9jCy2jT
z#L*HKCEG|{?+#MH{(S@})ryakM8FqD8o^oA3mzyp#LT@7AX8kuvcyY|vIzkF_fEA$
zgyNU!V;axX4Ht)ln$y@iHk*-?6xx*SpM-pYK;4)h>uT4_*xHZ954|u}5g_Pjaa0Uw
zLWP-zo}`g8T7C1)A{ZS&oR@shimqkEQta)`_NT!}o7;L^*6DeBe)Q$+mvb9EvHE@j
zISJ-SYh)W-pAGLi8tjChl#=dX-E(vXE|~4*7D<G%n7n)m69;VzbNFwZHwF-D*&jP<
zO0!dsg_QXbDRZ`*ah;%vn_I~5xfyxdQ|j92e*#5dp-i3pz5m*q)eJ7RIZ9_#^={Hn
z_(Z0DhPdxKEQN*2CC-ji>^Gk^eNU)_sZ=qW8D?UH0PZR&DXDqgqpopdl+W<6ry^e(
zX*TQt;i}8@DY}_oYi0E-Z_m&rb)>dIqs{Y0vJ@#K6w16Nx$N=*A6%O#$XV^zpK{7b
z-$DfZKY%<h29OFYM^Gs`*gDk{51J2?I~oEe5JPXtFOmh6`9&M=zX#lRn)FyU3fa{Z
zpo;)18w@v$TAH?lfmJ_=Sj@0SAu8+5$Y1aVWTtiaF1SRf!sY-5M#>ULp%Qh!pea}C
zY<0sWm+lnBr3X^M?6HrtXPMkIKaFcxDhftIkpP5_V~+yLiA!olderTc{uC$Rx5gqr
z3<U1?kL<<{@4UC1Ykww5N$Mp0K%YsC-ajy+N^&os7r&vFC2h09czp^3qd)u@_Qdgh
zg~jKGZM(mf`;++)QRxl`L`3$g8>$7KoubDV_@0TZe0u7!*_vL4_^WbP{XRIHd%TeR
z!h^X~wXj1K{LMdVU#tsln>K?vQ;k0A4e0x^eeOUDzlU5UPjtHV#5(6V9v2W3^&X4v
zf%LPnM%uy)?s)E3PzNT&d7NugEW^i8giQl%5_4U514G^f`tr%se(YP`WjCV()Wlx#
z8rC$`4?9)X8qVn%>S=$_$wj0{%yGRAmSEB4vMtU4iJJqQP6g-gfU$Os1iNG6b=u)v
z2VI8%B*m7dlOyXwHY&R9S3{e_!_P&Uo0R@99|&?Zj}92oygD*YA_jm`R-z2_;;>40
z`qDVKK*vCVDZPWDz$CTDGCR)=FE%4sVQ^5@&qF+YaX-Ai!OGohc$lfG>g&^wsA16Z
zlU5jlBE1OlHQDp!N-J)`?q1kYEv-@uj)SKW?75bjKx5yEvR{immz~MG`jrYt({!b_
zKsNOAG=p12g0q~TQM*7BI$RBig+DcqRAfic-<)zaE`^+F+$jl3*RyA@ABk;zZrqzr
z*MwIy+Wbo@t82B0`~*QkziK><5l24eH=k$@I;rR)fkuk!%b4y$j6|M+?UKCx?i9GO
zFGMxOB7N!FuQ4ak*521sQ)m%D!GWa#uh({V_#K*ktw<aJF5qK0BMHBu%QuV-;|MsT
zW_z(irYn|;B0a(dJ6oYVOTckcvTl}1!=Ihg;6J&((shV??63jQ-CShxfa3xW53kT%
z1X|WLw8XX27FiRMM`68Wn)6ZkZgW}_h)<;kgSa6TSEHjy_YHQW(Xt#D?cCoOA5-`2
zzRY}OdMcouW=h(a4JNhU8cxSI9=YW{EBxy1tNh_UeB95c7xrlgb{DlOIbIO6&%Cnv
z7y*k-=))JNLm8Pp0%1Y~^`&nk+shNBUpEIeq<Nk+rc|`_<Q~0Ow^?5c-Qzwpxk6?w
zdYEjT>1jrq8)xfJ+|~7us)}BV#$88qu6-lwO9P$@gvT)`|HT+J5s!HuRovyPV4OsD
zBNwVP;}s-PWUCsg-I)Xu`*`=~E`No85OP}RXEJSVrv9}SeqF0o;&J*c+1i8d@T-a2
zZM$i0ZRUiU$NYB*Cr}H<Xj>+rt*-r0@m9Tl0&YaWP#Wpw1;_)yZ1Zsu<iN4U<M5Og
z;V1sMh1$ITmTO47IU3)(B{qM!Tz~MO`M<y3)rxkaq~s*{46ywzG_7E5n@!x($XF5*
z8{oq%T-LB(B{m}w@}K2fzSBa?1x@IEvBH^<$IqbO>3~Y8ap$6roBq{KO<na!DZZBJ
z&&rI3lV;x8##_T<pFrxhR&MHFOW=Cmp9kMU)CFx<5Gt*h^%<EJQMNUTM6G?k|BM62
zS~VGfw<#9+pF{hh9!pK{<RVXNOI?!yf8V=C7_r~b%Wl24D?9e$_fD+Y+T@$l6U;4I
zL0`TJPN~)mY7?|BrSfe2_4tk*px%ipnzDXkHCD2yUKZ{%m;f~^71_z*3Y}Vb;Nr_f
zfc#HD4#;e>P_8V*wat!H`0@!#L3@7lC$IVMExxp~Uqt8b<i%<wwxOae5AK2Q(_)Sg
zTXh5`1R-hx2WN4UOP<|K&tq7%OUGxL$BDh*V>u<;m$N9BqDLZFzXja8{B1ktSSYZv
z?9Fwf!0aj2i%_mE(byUImZl)|qDfiK35Z%iZ@3iIlzVvteL;hGgmF+g)+Dhz@emNe
z*3Ta}qbJIX)X|c9Yb`b_=yjtFy+eh-DS6pW4S%fM@fCBo{e_+UfC30;+9rk*>{|H-
zu>%-_b%CWsRMoAHe`5b*x#vi0qPaVEfH6sQ^Peh#&jvd?3ERJ%fYG~bgdardNaM!f
zdP6Bcw~qom7+{zGObh&s`I6oWrAbaG-yihv84p@bjZ!Q2fLDH!_1^nL-*Yhnw+S5*
zwp*LODCA(%Y!d~);iDA>9fQsK;LOx(xW+kvU<YQANRXD9vTQMxDR6PR(E8Vf7nVte
zJuF6bF3DdKK9Z1lK9s?D5i|+m&s=UYBq*G>7fSwNww5RP0h*TXj393?Fm1eh8yacg
z56||?q58~)XZg{b&A+v@+L`g`5jkknVtb}1*IoxN){8_-5X?yykrg=@JIb-?JQFL8
zeyXrhuVUCy{5x4HWh!kV@Wx)@^MM<>XgkQDss0|Z&(%Lk0&;KbuKUYOvmbjff_9vZ
z!V&3Ug<Ro{28&`If&m`Gz(|LuHtUa+q@cn~{AY|X8!0`Z9pJV&JNkTP81%EoGiI2^
zU3pSR<yr|*_h|G=a$<E6mW@IgT{1fjpG`!^aP6F$-eA>acaN~4KO_}u^sjP&Mjz^o
z!^_>ktOlDMOB0QU`hlgzwCEqB0KxG%zx6KL;bibw>&wdTX1bCun_7egOq^AhppLH{
zB|YI{y!RLk(~~2qM12bpr9^;W#h2pDW}Mxtv$rL+UGDv{q`InDR;ndyjgh;Q?75B{
zv9|d?Y!|irBe<zVkQ=c-NWj94a(B@%=4EvyBQZ<^Av}_G+K+oJLH<Za#<V-G7b@@V
zeoMI5oCr#K>p{F_ACNq2ETt61(byeq`nCdDZnOA7-D$pqy|eK!S<TZl9EYM${{~K%
zl7wKfhh9yH#wl;#eS$XooV0JPzT*dO02~oGyh4WYhYmfJN3d9LG(T6(I}m|H-`1N2
z3+f<>|0+COqp2}*<$<6YHL=QBM1Uaw;J#h_+HDwYS>7tw8|rbHYxx1s#8y4Vmv*74
zV%X#NHBk^(bnc`@j;OY#LB$GCKNBhf`Y<bZI+0+{-ckF@Sz5AH{orrumaz0|oT&bE
zbs9gsi^|ydC2aj9`)`{^!3R!=jsEj}p%%?4O%2B7@$mAqg62)$%O5^{&2V0-B#`Eg
zqjDwG?qa({<T%O`{N@D+a&dd#!M!?7R^!%{FU?}BHL_NrcMeACL@lPJ6|rD0k?%Cb
zuPW;N*7D6o6#`uDwcjxBTQ$F-2CCGUzsY`6Pks-lcEKF9$+w_zn)BedCP$19<MNHp
zs#FS(Ky)SJ4Qok<RHIZ+nzsI=t4<F#^OHKW7)@Yiw}TKUqeIn1!%7Mr;!@JM@<InM
zV{pITe)EH2@EUA(uN7iaz$U@ZF|oXkTPc4;Za!1<;wVEf(7YCEhXN5ZiPgYb$Gv}A
z-2G{+QbVQgFrwFM&cQh+;8|p8NX^rG&EdiAWOJb}fw4N{@QMyed$FZXi*Dno`Z@%Z
zvJi-j)!odK)t7XXm<HKlcK7e08MpL#%-J?M{|f)lurssvgqA`tK3FeRO0*?5@%w>}
zDrRlFt41833o_9*Ua$9bbe&X8BM=?pLf61--D2Yra4;_R2{U$1y69@{S^-bUmCp3I
z6YFj2N7TIe<LYa5$CBDF7n|!}(RpIilI(Oq64eYF%uqqgw-?v(P}OZ32wyM3&pM$k
zq|@S-Vu#ypDLx$Rk^ZTGRFofW&e74v*=}I!hIr<AL>~$lEFHWbaF2C5@f>qn`<%9%
z8-GXEpW*$b)ug$(gYl|HFYCx&_*P1R7(+>^2=XcKsQx`&DRrH8%RD(rWrjvO4`GX)
zGPW5v`Ou%-&jdQ?lUq+bz{%Ah`ow^mCEwoMTeu>~^^vHLh?fXi2(D$HaEnvP+TD5S
z9((4v6om#X`qxPnmV8AXGyj{OWT1_1@2L<FqG`t_8#@a=$NcZ_zCfM&*9g%V4xxzt
zS{637%XgwAEU*-%Rl$utz2w*4GvnOvk6a<$e8ug*GfWn&eFR}^_rB1x10M#=0Te+s
zO)c#zJ()MtU2vZd?KU<P3Gs(NJC#;};pvfmfMjfjo!g)qs)5?NJv9*LgI;fdF$QJT
z&(OOx1nU~FJc3q>FKidmyylEQ;7U|dBh5@c;eC1W{Mv&6ps3eSmg7V}7hu+J$*ZZo
z)BeoAAQ*`g{SnfUo$O<I^ZY9u?gK9Xfnw%CQkn$1D4Sl`Nw|QYlWlfJpvVv>z!t`s
zuqCu0UsVJwYT^h8)wh+LeqbXz`;B3pI2O1(nOXENn$g7cKZis!#s$}E*Bp4nHF?7j
z_zqh6^?Z{pAW!DmJd|0iC|cBI6mX|vKGy`JyIv=PQ9%v|hf()*yIPb5QWMjB_*@s{
zqRboklDvMgpa?6@z^t~4t=QOgd-&}~=T9eU*z<SLq`mq-qrL!&n83zqG5sklSPF_n
za9^J~Hw|i_TFoG_Bn3(zmv@^Ts#ux*-T}U^{|4v-xtl<Gb~7MZ10pf{OkojbhiQ}~
zaJW54J<F#i;7Qf|8Gr7?5pumxMKFt4y<s5f_W3to1r>nW1Bb>A#RStbD4(z)wnHnl
zLF7Uz4Ffk^c2Y4x8-_F6?_!M+y4$P+*~VOo!{8(F@V*4}p>%e`diWC0Ig+}l$?+X<
zS#ZFQe!BZX5(y_c6dEaMqLa5ClhZ&D>xE(^h-T{7lxFypUc*n!2Ai(M(hPcTJ4&!F
z*F|~n#rRWn67H0Xxk{}Wk=3+)S%3y}LXyOaDt={?_!DOcDZ*TmiB+E~MOOb@5C#ke
z%mABMaK~#WzON=xs-v%1I1x8^n?OGcrYQnEt8{1FeGR+F(KS5ohX+Bl$Y$$m6Uclg
zWTQDRvoHa})>0nX$x7h0Ji&=yx%8V`5^-pO5p%a{sqg`j2JCVlzncT;+eqZyc&qsq
zG_yl9(O=##3%!=mSU~Ab)eJ~WON497o?GGlmp0hC_@dhUP6PwIQwfE2{oQ$v+%Gb^
z3~V8rTDVUVsIkPs9Ytm9vU2_RyEJp|AlOh2Sc-bqZ<U=1%5Rk)YMwgfQ3I%S;J$)k
zi}2OKM0KiGKyu*%KyrSw+Pqe0t>Z#50yKf(kS)O!3q3GQ-i1xCgkcx{5uu191OSpF
z01`Ju7cBx|%%f`#Yr(U_|HXx}H5{TPII;1hS*Y6g7KPTQ5$gUJ`+g6@qLeOAhfFn)
z|2HiQv;fT#ApGO*{eyK++iMO6aRjTyQj^?JAiR@j1#^m=SqsACSFltVpIT28iiWp)
zj`R|NXZq|3RG>-9dpiK_99!fMJQ7y1XfwFbe#=G4L}eWo<31tbcRsNV^_#DFDPgRb
z=sz;iMCb&q{N{I}YY93NTohX`p5~e1-}GSlIYkj9_bhdw!-g>~&jg5me<DxZ{a2$u
zGTP7=5Gl7Dzwe|*qCW}Z<V*YU7^ZD1t|V2MaODh)`j9{)*~wSEtjQ<0rU%@4Q5o;y
zswGLJnZVR||EH-dkB74D{`VNh&I}&LK1$X+CRwr%CQF3!C`&X$r6Ez4k#!6*h?x)(
zAxp@f<#}kazLpfy$WHNOS0cN-m*4N7_s{#j&gb0s`J8iouXBCRx$i3mmDoaaz~*0I
zkf_CPW1P^|YP|A~7R%I9ty)&+DHB6{x+AdUS3QqZ3-7Q2=;^hLo7bIWYrgTaxpcGa
z0EvnAlWp8|BPu=|WpXW#lEaY1Ok~=K<60*&x5Cpf<kA5VT0SFPFF&YRFoPQ<Rjq6k
z$3&(kTs=Q%lPXS$Ugw9)k*&G@<`+~I<5)Tfp`y*MkFKTH^O8c+b2`d+G3E+3Jwa8s
z{*{w^wRmBD<vx+z(A`QgQj;ukYP(GX&g1+S0YQun8`aDcKcW&UcP^)hc*k-IoH<u_
ze*!tZICLrVH;My9kvsx2B8PmuJxpLNVs9o~Eeg}f00T7HwFhH65bN$`W?8VIU?Pjf
zgocMS4+c$Y&b|jVvLi7pMCfg{^IJgznVcX~5^(?<P6kz0q7BV~4r8U^&^Y<8L=kbX
zB(s!?@A<-}=0E4`y@mzdCg2<bAU`kK$Z_cvJbWK^I>*Paq}<m;NC8ebrjG!6-64$=
z%Ho_sEipw7=nZ9&(QaXuUtG;)S7B5<fd|SC8Qwb7psclj^;(?tKWp1nayWUf4Pt#J
z(0|)s3RlIE3gb{b?2Ea92>sf3`zt&DlZR+cp=(Mu+xy5NcPR3hEyC9R_qZ42x@ac&
zM6AIX9>|=UL~Cn{e4~pd5<4ZMTHE-})>a`)6MiO#vvCNu?2xvRt~~v(-eg&{GhOyd
zy&&`e_{ye^1*;i^1aw|xAwGESPg(LZuBMPJTorZWfD5U>;sFU6X*~BmO>q^eBG8n4
z{)(YrzO5vAyTd(aIF=rbE5JxUq=wGI7)en_yV)_Phm%Z1Q#r3%_Ga;2k(L@3@;ly}
zEM$$+id(~aU|)LziYU~YJ4FmQZ{ZT*DqX|X>H8*zXK0hV4F{;P0jhrBN*a&+BWku)
zt3_b*s=3i9srgQ0+JO#X0jDGV$N_2WUoj`UHjwN#NF`=q-A_GUJJajHQ|??Z@r6kq
z+IZS53hAU*{(j2&S`Bg=|DOHqhY@P&MVNu3tw%M(K?oO)kiW(UcfR6nJE+Q{!SVN#
zq!rNLJp3uauE2LTO6nY!<PF*22cEop#%ezH<wonMNOj5)gNY0uOt4EkS>aIKVq%f!
z_G|xVi>cnXRhtG&hxXT}0uwt~KSB@=J2B?i6LE<3OWcZYHK{osAj;+smy+)W^knW1
zjWBrv5>6i~cc1nVmB_T}NQwAmbnzzk*Z?Th&+`e6LLfAFp=`J*_f~|EzWq^2Cw!ih
z`;wk;@%|y5AmMzEF2%}&jMSu5WQPWicc-`1{Z`~MP~G?cCi1{Ry~3&U4WX0xQ5Vh@
zj}wP<UUdCA|D|$J(QI+`P>S(KW!JUeSJ{?*P2F|G4mn=I3iu4RZJ<WyiH6#Gw+_vm
z6KrCqrL^tq?ynLQ12O}ffygK87Xgp|dEyeb@I8EqQ|-lEI=`l1+?Ub-e|FtX%4CiV
zjTIaKg9-RSV~34~@EbWpx6@GE`U?eia(G|WlH-n-NnGfb*Up={U{i6tE5kbamy2`&
zcHKU~a%o60O;`axzT4=@tKVv!;K`Xu7vzFNl#Ub1t`E#~`P^mb*K1-wr)tdCTn%Z4
zGOF=}#l!D{u?;WMa(B)|Ug7y9c|_OpPXEEwp_)%H=dz-im6-!nmLpca7CZG~MR<=#
zH&_za&+!O$v$6AzuZ)E_;6gxVNhLbc_>}MkxzNC?aenfSJ!eXO3WepqCgmgr=484(
zy!ST6I^TO;xYm1;g@Wupk4es<o4ZPtjY}}7Eyjw4)^I-bC{#o7sMPZifaNzCQUOB7
zf2z0yi5q?TXL8C)mT*F#>aIZ5S5C%)x2n;({DDExl9kVk;l?~8y)Iem?5!HpB{Yz8
z^B3~<l!$2Tvw;dj6na1*`nr(=BAOU@Y4?;B&fl=U`6A0j<8$n48TV7HO^WP%FOs_c
z3budyw(LLlwXo={*dl8Ua2lD`XmS#KWaz&C*ze~{ajb;pH8Gj%b8S<0dl!P4yxC$~
z{Rre;K8duatpaa64o_J&ukJ)nB_t^}9G<Nl<w56l!~2)T(?a7sc}0Ilx^klRfbPfg
zb6HQ})1gcqHEPv`I@b5{0|=y>TX{7%6#8s40ykhsf#Jn*#d((Y%3bJ^5XcBzneWUo
z=jbr3V_lM!3}Y3>iu8tLI#M?~@*2b20p8+T{oo{nXl3P&>3qX56SsM!E$&^!3a{Wo
z;TQ}*2a9H;KXa}~oa3XL-Sq>A$D^xt3wPHnp|WXzQ<$VX3bD{MDM&Y2ftP`Y4H-1|
zepGDR0yr&iNUqj<gsUFz5Zw1*ApnBON*tKIk1g9@>z&~;lXz9y)bn=v%n?U6TYsa#
z$vNty^04O4su`cHit)OIKR@PLyFlDM{YM9KZ8*>q)+K7d^RfQn_$2k(x~6|^Ep#za
z6dM$Vh$RW-@?!A&bMeY2m9?~HN(_maG=9+s+l&^%n5o%2>jGyd#%LXPU{fVqa2<?Q
z2pDfHA$Aans^0Z~-=&U{*5g=fiGm<CZ$SUW`#Xy-*J}=YuT-Td{+&@_V~j~oXK$+s
zuJbgXksgJN@v^9#g-gz@YABVHxZ0}eeEy6tvUXJ|lD;}R(*?HxIs4JtWR!2Xx}}$3
zM%7(HQdlF+aSn2z`T=syb~o(I9sFHEh(mI0V^YQFEbz{DAH5Ro@ohG!X}RIWMFuK?
zg^f)#iy^w)m43y`YDP&1r6B7Nm&Hc3*c}nK)&?YQ?uZs}8;k4S2$MY*^ZgoAXO{)u
z6@bt7l*|mv4}oMbr1+RttjW&0Y6@wO)}y<TgoA-cH4`aiS+BVNTAEk>XuY6DfSH1O
z_ZB=p_iD^k7kf&EogJ-rWkVCd8ZU8N>q3Q-NdzP5rD+}F{MJo42Uc}|_UB;P_&BjN
zV1r#IJKf%^-=D5Yf!y(a;Zi*h-|G7&-!1gy&0GaBX)E^Tbij|KIxqU<?;)|_^1Z3z
z<20;g?HvB;g>sWYeI0&GZo#n<FOIH-;WuzeT_>b+m)VCF_LiRR3o0t^*VLE>d2U8c
zz@Q^-IH@NAH&Sn1+4;f_&O89}V`NNb4t={{2Bi23BVQV{&Mega$tvax-kg!;KdXl1
z8~;3Y0yzE_DH6+b1U~x|IN@J5KQAcb-0LEzs3H#_%7eHmn&%(UY0+skmR5dqtmcm!
zdP&<1I8sG{B1+#mt`2`(Z49jM1J<M8RqAa?Q0S}gwF5(R11o&mKm1C>K11Qx*HPVl
zmw#vCs-*3NucV;BbU;MSZOnzrXY5va^gA++i#!~^;-IY!pa(OUWBDQJeW%OTJCRV%
zqJ`5yxV`3kc8EZfd?QoJGHy00?L+bx7j!kcEDQf!Mphtu=}_feIYZh_J|&nJ#{nP%
z^BDVi32klWQJ0fcL@(XoXrrJKT4<&^%DecJH1mR&J#-?~3be8?h@lr>rczQFNy}vt
zsn%^4g+#KydeDK3`hl4^4j1&T^d&$0y0(&=WoP6q@3W0{8u>G1x^mU>n@`fG4_Y)L
z#rnYGkkLY)DcdQA)v$u+>=9b`jda+~utw`M^^}2vl7FaniO{%m`}4Gw4zi)z<METH
z%GRO@&y#tP(N^dCp2bRIb{oRC+ra9G!Ff&|=tt!>9m*Jq<1o2xe<}Nl?D#Ob)HCvU
zF%Xh*-r2)Xr#u8Af?<fzno_FqH{wg;VEDnj98>N8h0s)Kh%q7?+D~*Xa-z!l0UuH<
z$OgLxk3m|{COPkTqzwQ%hKCgYTLOP*Tb@6KOap6Ew*=Ty5N~;VD_wWCYY94Amlpox
z+ia7RW2IB{|EZy=PF!v}?pY`o`J>8HC5*aohbf@`+62sxGdoG0&hfF55iqzR%XIP3
zpm+hp24oHklEErC%Dv6f^(4eQXILoE$#b*s&MZT9eCxCC5LP-DL=CL(gWlXp;cYgU
zyS>*!q@gvakNXr0=PgJAC}Dxu?l1b;#I#!>a=4oh)C|I&pBIoO_qfm(!ypr|@F9Qp
z+IvVU5W-?bMFf3Q-Lw@gLO&>y^-HG?O#tLF*1@p!?W%31=Bvb9zyo#uIM34<)H4w=
zkbfux=DYBPt(BMS*YH^%+MiQMdNlg4;zc{I>AgYHzU|yWEa*sf>`n2r?u)DIv?d74
zb1NEl;&Tu`NYI*rdb(WhQ_cu2@PC%Ir?FZg7{?h9tO)cKN5w_W*FP1_iumDia89&o
zbd+d~SH!7!)HL*|m+>CsBrh4R@#yo~Xu6McvLtt!x>%wqeBUsnQaU!*C(`bJyZrwP
D<sSsO

literal 0
HcmV?d00001

diff --git a/samples/web-app-cosmosdb-nosql-api/dotnet/src/wwwroot/style.css b/samples/web-app-cosmosdb-nosql-api/dotnet/src/wwwroot/style.css
new file mode 100644
index 0000000..67508fa
--- /dev/null
+++ b/samples/web-app-cosmosdb-nosql-api/dotnet/src/wwwroot/style.css
@@ -0,0 +1,341 @@
+*, *::before, *::after { box-sizing: border-box; margin: 0; padding: 0; }
+
+:root {
+  --teal-50:   #f0fafb;
+  --teal-100:  #d0f0f5;
+  --teal-500:  #0e9db0;
+  --teal-600:  #0e6ba8;
+  --teal-700:  #0a5a8e;
+  --teal-800:  #074d78;
+  --gray-50:   #f9fafb;
+  --gray-100:  #f3f4f6;
+  --gray-200:  #e5e7eb;
+  --gray-400:  #9ca3af;
+  --gray-500:  #6b7280;
+  --gray-700:  #374151;
+  --gray-900:  #111827;
+  --white:     #ffffff;
+  --bg:        #f0f8ff;
+  --shadow-sm: 0 1px 2px rgba(0,0,0,.06);
+  --shadow:    0 4px 6px -1px rgba(0,0,0,.10), 0 2px 4px -2px rgba(0,0,0,.06);
+  --shadow-lg: 0 10px 15px -3px rgba(0,0,0,.10), 0 4px 6px -4px rgba(0,0,0,.06);
+  --radius:    12px;
+  --toast-bg:  #111827;
+  --toast-fg:  #ffffff;
+}
+
+html[data-theme="dark"] {
+  --gray-50:   #0f172a;
+  --gray-100:  #1e293b;
+  --gray-200:  #334155;
+  --gray-400:  #94a3b8;
+  --gray-500:  #cbd5e1;
+  --gray-700:  #e2e8f0;
+  --gray-900:  #f8fafc;
+  --white:     #1e293b;
+  --bg:        #0a1929;
+  --teal-50:   #0e2a38;
+  --teal-700:  #7dd3e8;
+  --shadow-sm: 0 1px 2px rgba(0,0,0,.4);
+  --shadow:    0 4px 6px -1px rgba(0,0,0,.5), 0 2px 4px -2px rgba(0,0,0,.4);
+  --shadow-lg: 0 10px 15px -3px rgba(0,0,0,.6), 0 4px 6px -4px rgba(0,0,0,.4);
+  --toast-bg:  #334155;
+  --toast-fg:  #f8fafc;
+}
+
+body {
+  font-family: 'Inter', system-ui, sans-serif;
+  background: var(--bg);
+  color: var(--gray-900);
+  min-height: 100vh;
+  transition: background 0.2s, color 0.2s;
+}
+
+/* ── Header ─────────────────────────────────────────── */
+header {
+  background: linear-gradient(135deg, var(--teal-800) 0%, var(--teal-600) 100%);
+  color: #ffffff;
+  padding: 1.5rem 2rem;
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  flex-wrap: wrap;
+  gap: 1rem;
+  box-shadow: var(--shadow-lg);
+}
+
+.header-left h1 { font-size: 1.6rem; font-weight: 700; letter-spacing: -0.02em; }
+.header-left p  { font-size: 0.85rem; opacity: 0.8; margin-top: 2px; }
+
+.header-right { display: flex; align-items: center; gap: 0.6rem; }
+
+#btn-dark-mode {
+  background: rgba(255,255,255,.15);
+  color: #ffffff;
+  border: 1.5px solid rgba(255,255,255,.3);
+  border-radius: 8px;
+  padding: 0.5rem;
+  cursor: pointer;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  transition: background 0.15s, transform 0.1s;
+}
+#btn-dark-mode:hover { background: rgba(255,255,255,.25); transform: translateY(-1px); }
+
+#btn-add {
+  background: #ffffff;
+  color: var(--teal-700);
+  border: none;
+  border-radius: 8px;
+  padding: 0.55rem 1.2rem;
+  font-size: 0.9rem;
+  font-weight: 600;
+  cursor: pointer;
+  display: flex;
+  align-items: center;
+  gap: 0.4rem;
+  transition: background 0.15s, transform 0.1s;
+  white-space: nowrap;
+}
+#btn-add:hover { background: var(--teal-50); transform: translateY(-1px); }
+
+/* ── Content area ────────────────────────────────────── */
+.content {
+  max-width: 820px;
+  margin: 2rem auto;
+  padding: 0 1.5rem 3rem;
+}
+
+/* ── Table ───────────────────────────────────────────── */
+#activity-table {
+  width: 100%;
+  border-collapse: collapse;
+  background: var(--white);
+  border-radius: var(--radius);
+  box-shadow: var(--shadow);
+  overflow: hidden;
+  transition: background 0.2s;
+}
+
+#activity-table thead tr {
+  background: linear-gradient(135deg, var(--teal-800) 0%, var(--teal-600) 100%);
+  color: #ffffff;
+}
+
+#activity-table th {
+  padding: 0.85rem 1.1rem;
+  font-size: 0.85rem;
+  font-weight: 600;
+  letter-spacing: 0.02em;
+  text-align: left;
+}
+
+#activity-table th.col-actions { text-align: center; }
+
+#activity-table td {
+  padding: 0.75rem 1.1rem;
+  font-size: 0.93rem;
+  color: var(--gray-900);
+  border-bottom: 1px solid var(--gray-200);
+  transition: background 0.15s, color 0.2s, border-color 0.2s;
+}
+
+#activity-table tbody tr:last-child td { border-bottom: none; }
+#activity-table tbody tr:hover td { background: var(--teal-50); }
+
+.col-btn {
+  width: 1px;
+  text-align: center;
+  padding-left: 0.3rem !important;
+  padding-right: 0.3rem !important;
+  white-space: nowrap;
+}
+
+#activity-table td.col-btn:last-child { padding-right: 0.6rem !important; }
+
+/* ── Row action buttons ──────────────────────────────── */
+.btn-edit, .btn-delete {
+  display: inline-flex;
+  align-items: center;
+  gap: 0.3rem;
+  padding: 0.55rem 0.75rem;
+  border-radius: 6px;
+  font-size: 0.8rem;
+  font-weight: 600;
+  cursor: pointer;
+  transition: background 0.15s, color 0.2s, border-color 0.2s, transform 0.1s;
+  white-space: nowrap;
+  width: 90px;
+  justify-content: center;
+}
+
+.btn-edit {
+  border: 1.5px solid var(--teal-700);
+  background: var(--white);
+  color: var(--teal-700);
+}
+
+.btn-edit:hover {
+  background: var(--teal-50);
+  transform: translateY(-1px);
+}
+
+.btn-delete {
+  border: none;
+  background: var(--teal-600);
+  color: #ffffff;
+}
+
+.btn-delete:hover {
+  background: var(--teal-700);
+  transform: translateY(-1px);
+}
+
+/* ── Empty cell ──────────────────────────────────────── */
+.empty-cell {
+  text-align: center;
+  color: var(--gray-400) !important;
+  font-style: italic;
+  padding: 3rem 1rem !important;
+}
+
+/* ── Modal overlay ───────────────────────────────────── */
+#overlay, #delete-overlay {
+  display: none;
+  position: fixed;
+  inset: 0;
+  background: rgba(0,0,0,.45);
+  z-index: 100;
+  align-items: center;
+  justify-content: center;
+  padding: 1rem;
+}
+#overlay.open, #delete-overlay.open { display: flex; }
+
+.modal {
+  background: var(--white);
+  border-radius: var(--radius);
+  box-shadow: var(--shadow-lg);
+  width: 100%;
+  max-width: 460px;
+  overflow: hidden;
+  transition: background 0.2s;
+}
+
+.modal-header {
+  background: linear-gradient(135deg, var(--teal-800) 0%, var(--teal-600) 100%);
+  color: #ffffff;
+  padding: 1.1rem 1.4rem;
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+}
+.modal-header h2 { font-size: 1rem; font-weight: 600; }
+
+#btn-close-modal, #btn-close-delete-modal {
+  background: none;
+  border: none;
+  color: rgba(255,255,255,.8);
+  cursor: pointer;
+  font-size: 1.4rem;
+  line-height: 1;
+  padding: 2px;
+  transition: color 0.15s;
+}
+#btn-close-modal:hover, #btn-close-delete-modal:hover { color: #ffffff; }
+
+.modal-body {
+  padding: 1.4rem;
+  color: var(--gray-700);
+  font-size: 0.93rem;
+  line-height: 1.5;
+  transition: color 0.2s;
+}
+
+.modal form {
+  padding: 1.4rem;
+  display: flex;
+  flex-direction: column;
+  gap: 1rem;
+}
+
+.field { display: flex; flex-direction: column; gap: 0.3rem; }
+
+.field label { font-size: 0.82rem; font-weight: 600; color: var(--gray-700); }
+
+.field input {
+  padding: 0.55rem 0.8rem;
+  border: 1.5px solid var(--gray-200);
+  border-radius: 7px;
+  font-size: 0.9rem;
+  font-family: inherit;
+  color: var(--gray-900);
+  background: var(--white);
+  outline: none;
+  transition: border-color 0.15s, box-shadow 0.15s, background 0.2s, color 0.2s;
+}
+.field input:focus {
+  border-color: var(--teal-500);
+  box-shadow: 0 0 0 3px rgba(14,109,168,.15);
+}
+
+.modal-actions {
+  display: flex;
+  justify-content: flex-end;
+  gap: 0.6rem;
+  padding: 0 1.4rem 1.4rem;
+}
+
+.btn-secondary {
+  padding: 0.55rem 1.1rem;
+  border-radius: 7px;
+  border: 1.5px solid var(--teal-700);
+  background: var(--white);
+  color: var(--teal-700);
+  font-size: 0.88rem;
+  font-weight: 600;
+  cursor: pointer;
+  transition: background 0.15s, color 0.2s, border-color 0.2s;
+}
+.btn-secondary:hover { background: var(--teal-50); }
+
+.btn-primary {
+  padding: 0.55rem 1.3rem;
+  border-radius: 7px;
+  border: none;
+  background: var(--teal-600);
+  color: #ffffff;
+  font-size: 0.88rem;
+  font-weight: 600;
+  cursor: pointer;
+  transition: background 0.15s;
+}
+.btn-primary:hover { background: var(--teal-700); }
+
+/* ── Toast ───────────────────────────────────────────── */
+#toast {
+  position: fixed;
+  bottom: 1.5rem;
+  right: 1.5rem;
+  background: var(--toast-bg);
+  color: var(--toast-fg);
+  padding: 0.65rem 1.1rem;
+  border-radius: 8px;
+  font-size: 0.85rem;
+  opacity: 0;
+  transform: translateY(8px);
+  pointer-events: none;
+  transition: opacity 0.2s, transform 0.2s;
+  z-index: 200;
+}
+#toast.show { opacity: 1; transform: none; }
+
+/* ── Responsive ──────────────────────────────────────── */
+@media (max-width: 600px) {
+  header   { padding: 1.2rem 1rem; }
+  .content { padding: 1rem 0.75rem 3rem; }
+  .col-btn { white-space: nowrap; }
+  .btn-edit, .btn-delete { width: auto; padding: 0.55rem 0.5rem; }
+}
+

From a4bd6de804ce1ef30a8a680e5e0ed038a3d6fdc1 Mon Sep 17 00:00:00 2001
From: Paolo Salvatori <leprino@hotmail.com>
Date: Tue, 8 Sep 2026 14:53:49 +0200
Subject: [PATCH 08/20] Log requests and store operations in the .NET samples

The Python apps write one access log line per request, because their gunicorn
command passes --access-logfile -, plus a line per store operation and a line
per activity added, updated or deleted. The .NET ports only logged startup and
error paths, so `kubectl logs` showed almost nothing while the app was serving.

Add the request-log middleware, the per-operation store lines and the per-action
page lines, with the wording of the .NET samples for Azure App Services, and
configure the console writer to emit single timestamped lines like the Python
logging format does. Document the output in every sample README, both versions.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
---
 samples/web-app-blob-storage/dotnet/README.md |  8 +++++
 .../dotnet/src/Pages/Delete.cshtml.cs         |  3 +-
 .../dotnet/src/Pages/Index.cshtml.cs          |  4 ++-
 .../dotnet/src/Program.cs                     | 19 +++++++++++
 .../dotnet/src/Services/BlobActivityStore.cs  | 11 +++++--
 .../dotnet/src/appsettings.json               |  7 ++++
 samples/web-app-blob-storage/python/README.md |  8 +++++
 .../dotnet/README.md                          |  8 +++++
 .../dotnet/src/Pages/Delete.cshtml.cs         |  3 +-
 .../dotnet/src/Pages/Index.cshtml.cs          |  4 ++-
 .../dotnet/src/Program.cs                     | 19 +++++++++++
 .../dotnet/src/Services/MongoActivityStore.cs | 32 ++++++++++++++++---
 .../dotnet/src/appsettings.json               |  7 ++++
 .../python/README.md                          |  8 +++++
 .../dotnet/README.md                          |  8 +++++
 .../dotnet/src/Pages/Delete.cshtml.cs         |  3 +-
 .../dotnet/src/Pages/Index.cshtml.cs          |  4 ++-
 .../dotnet/src/Program.cs                     | 19 +++++++++++
 .../src/Services/CosmosActivityStore.cs       | 14 ++++++++
 .../dotnet/src/appsettings.json               |  7 ++++
 .../python/README.md                          |  8 +++++
 samples/web-app-file-storage/dotnet/README.md |  8 +++++
 .../dotnet/src/Pages/Delete.cshtml.cs         | 15 ++++++---
 .../dotnet/src/Pages/Index.cshtml.cs          | 26 +++++++++++----
 .../dotnet/src/Program.cs                     | 19 +++++++++++
 .../dotnet/src/Services/FileActivityStore.cs  |  4 +++
 .../dotnet/src/appsettings.json               |  7 ++++
 samples/web-app-file-storage/python/README.md |  8 +++++
 .../python/README.md                          |  8 +++++
 .../web-app-managed-identity/dotnet/README.md |  8 +++++
 .../dotnet/src/Pages/Delete.cshtml.cs         |  3 +-
 .../dotnet/src/Pages/Index.cshtml.cs          |  4 ++-
 .../dotnet/src/Program.cs                     | 19 +++++++++++
 .../dotnet/src/Services/BlobActivityStore.cs  | 11 +++++--
 .../dotnet/src/appsettings.json               |  7 ++++
 .../web-app-managed-identity/python/README.md |  8 +++++
 .../python/README.md                          |  8 +++++
 .../python/README.md                          |  8 +++++
 samples/web-app-sql-database/python/README.md |  8 +++++
 39 files changed, 355 insertions(+), 28 deletions(-)

diff --git a/samples/web-app-blob-storage/dotnet/README.md b/samples/web-app-blob-storage/dotnet/README.md
index 4bca8a1..5b57046 100644
--- a/samples/web-app-blob-storage/dotnet/README.md
+++ b/samples/web-app-blob-storage/dotnet/README.md
@@ -66,3 +66,11 @@ The app also exposes `GET /health`, the endpoint the liveness and readiness prob
 ```bash
 curl http://localhost:8080/health
 ```
+
+## Logs
+
+The app logs one line per request — the `VacationPlanner.Requests` middleware is the equivalent of the gunicorn access log of the [Python version](../python/README.md), and it covers the probes too — plus one line per blob read, uploaded or deleted and one line for every activity added, updated or deleted. [`src/appsettings.json`](src/appsettings.json) keeps every entry on a single timestamped line and holds the framework categories at warning level, so the request and store lines stand out.
+
+```bash
+kubectl logs deployment/vacation-planner-blob -n vacation-planner-blob --tail=50
+```
diff --git a/samples/web-app-blob-storage/dotnet/src/Pages/Delete.cshtml.cs b/samples/web-app-blob-storage/dotnet/src/Pages/Delete.cshtml.cs
index 2460ba5..b296ad4 100644
--- a/samples/web-app-blob-storage/dotnet/src/Pages/Delete.cshtml.cs
+++ b/samples/web-app-blob-storage/dotnet/src/Pages/Delete.cshtml.cs
@@ -5,7 +5,7 @@
 namespace VacationPlanner.Pages;
 
 /// <summary>Handles <c>POST /delete/{id}</c>; the activity is addressed by its store id, never by its position in the list.</summary>
-public class DeleteModel(IActivityStore store) : PageModel
+public class DeleteModel(IActivityStore store, ILogger<DeleteModel> logger) : PageModel
 {
     public IActionResult OnGet() => RedirectToPage("/Index");
 
@@ -13,6 +13,7 @@ public async Task<IActionResult> OnPostAsync(string id, CancellationToken cancel
     {
         if (!string.IsNullOrWhiteSpace(id) && await store.DeleteAsync(id, cancellationToken))
         {
+            logger.LogInformation("Activity deleted: {Id}", id);
             TempData["Flash"] = "Activity deleted successfully.";
         }
 
diff --git a/samples/web-app-blob-storage/dotnet/src/Pages/Index.cshtml.cs b/samples/web-app-blob-storage/dotnet/src/Pages/Index.cshtml.cs
index c077e52..afd8549 100644
--- a/samples/web-app-blob-storage/dotnet/src/Pages/Index.cshtml.cs
+++ b/samples/web-app-blob-storage/dotnet/src/Pages/Index.cshtml.cs
@@ -5,7 +5,7 @@
 
 namespace VacationPlanner.Pages;
 
-public class IndexModel(IActivityStore store) : PageModel
+public class IndexModel(IActivityStore store, ILogger<IndexModel> logger) : PageModel
 {
     public IReadOnlyList<Activity> Activities { get; private set; } = [];
 
@@ -33,11 +33,13 @@ public async Task<IActionResult> OnPostAsync(CancellationToken cancellationToken
             {
                 if (await store.UpdateAsync(id, text, cancellationToken))
                 {
+                    logger.LogInformation("Activity updated: {Id}", id);
                     TempData["Flash"] = "Activity updated successfully.";
                 }
             }
             else if (await store.AddAsync(text, cancellationToken))
             {
+                logger.LogInformation("Activity added: {Activity}", text);
                 TempData["Flash"] = "Activity added successfully.";
             }
         }
diff --git a/samples/web-app-blob-storage/dotnet/src/Program.cs b/samples/web-app-blob-storage/dotnet/src/Program.cs
index c8a8a85..768568c 100644
--- a/samples/web-app-blob-storage/dotnet/src/Program.cs
+++ b/samples/web-app-blob-storage/dotnet/src/Program.cs
@@ -1,3 +1,4 @@
+using System.Diagnostics;
 using Microsoft.AspNetCore.DataProtection;
 using Microsoft.AspNetCore.DataProtection.KeyManagement;
 using VacationPlanner.Services;
@@ -37,6 +38,24 @@
     app.Logger.LogWarning("SECRET_KEY is not set: antiforgery tokens and flash messages are only valid on this replica.");
 }
 
+// One log line per request, the equivalent of the access log the Python image produces (its gunicorn
+// command passes --access-logfile -). Kubernetes probes show up here too, exactly as they do for Python.
+var requestLogger = app.Services.GetRequiredService<ILoggerFactory>().CreateLogger("VacationPlanner.Requests");
+app.Use(
+    async (context, next) =>
+    {
+        var started = Stopwatch.GetTimestamp();
+        await next();
+        requestLogger.LogInformation(
+            "{Method} {Path} -> {StatusCode} in {Elapsed:0.0}ms",
+            context.Request.Method,
+            context.Request.Path,
+            context.Response.StatusCode,
+            Stopwatch.GetElapsedTime(started).TotalMilliseconds
+        );
+    }
+);
+
 app.UseStaticFiles();
 app.MapRazorPages();
 
diff --git a/samples/web-app-blob-storage/dotnet/src/Services/BlobActivityStore.cs b/samples/web-app-blob-storage/dotnet/src/Services/BlobActivityStore.cs
index 05bebdf..38cfaff 100644
--- a/samples/web-app-blob-storage/dotnet/src/Services/BlobActivityStore.cs
+++ b/samples/web-app-blob-storage/dotnet/src/Services/BlobActivityStore.cs
@@ -59,9 +59,11 @@ public async Task<IReadOnlyList<Activity>> ListAsync(CancellationToken cancellat
         await foreach (var blob in _container.GetBlobsAsync(cancellationToken: cancellationToken))
         {
             var content = await _container.GetBlobClient(blob.Name).DownloadContentAsync(cancellationToken);
+            _logger.LogInformation("Found blob '{Blob}' with size {Size} bytes", blob.Name, blob.Properties.ContentLength);
             activities.Add(new Activity(blob.Name, content.Value.Content.ToString()));
         }
 
+        _logger.LogInformation("Retrieved {Count} blob(s) from container '{Container}'", activities.Count, _container.Name);
         return activities;
     }
 
@@ -75,9 +77,13 @@ public async Task<bool> DeleteAsync(string id, CancellationToken cancellationTok
     {
         // As in the Python sample, a blob that is already gone still counts as deleted.
         var deleted = await _container.GetBlobClient(id).DeleteIfExistsAsync(cancellationToken: cancellationToken);
-        if (!deleted.Value)
+        if (deleted.Value)
         {
-            _logger.LogInformation("Blob '{Name}' did not exist: already deleted.", id);
+            _logger.LogInformation("Deleted blob '{Blob}' from container '{Container}'", id, _container.Name);
+        }
+        else
+        {
+            _logger.LogInformation("Blob '{Blob}' did not exist: already deleted.", id);
         }
 
         return true;
@@ -99,6 +105,7 @@ public async Task<bool> IsHealthyAsync(CancellationToken cancellationToken)
     private async Task<bool> UploadAsync(string name, string text, CancellationToken cancellationToken)
     {
         await _container.GetBlobClient(name).UploadAsync(new BinaryData(Encoding.UTF8.GetBytes(text)), overwrite: true, cancellationToken);
+        _logger.LogInformation("Uploaded blob '{Blob}' to container '{Container}'", name, _container.Name);
         return true;
     }
 
diff --git a/samples/web-app-blob-storage/dotnet/src/appsettings.json b/samples/web-app-blob-storage/dotnet/src/appsettings.json
index 10f68b8..6e5c6b2 100644
--- a/samples/web-app-blob-storage/dotnet/src/appsettings.json
+++ b/samples/web-app-blob-storage/dotnet/src/appsettings.json
@@ -3,6 +3,13 @@
     "LogLevel": {
       "Default": "Information",
       "Microsoft.AspNetCore": "Warning"
+    },
+    "Console": {
+      "FormatterName": "simple",
+      "FormatterOptions": {
+        "SingleLine": true,
+        "TimestampFormat": "yyyy-MM-dd HH:mm:ss "
+      }
     }
   },
   "AllowedHosts": "*"
diff --git a/samples/web-app-blob-storage/python/README.md b/samples/web-app-blob-storage/python/README.md
index 1b33427..a70b195 100644
--- a/samples/web-app-blob-storage/python/README.md
+++ b/samples/web-app-blob-storage/python/README.md
@@ -66,3 +66,11 @@ The app also exposes `GET /health`, the endpoint the liveness and readiness prob
 ```bash
 curl http://localhost:8080/health
 ```
+
+## Logs
+
+The app logs one line per request — gunicorn writes an access log line for every call, the probes included, because its command passes `--access-logfile -` — plus one line per blob read, uploaded or deleted and one line for every activity added, updated or deleted. The store operations are printed to stdout, so `kubectl logs` shows them interleaved with the access log. The [.NET version](../dotnet/README.md) writes the same trace, timestamped.
+
+```bash
+kubectl logs deployment/vacation-planner-blob -n vacation-planner-blob --tail=50
+```
diff --git a/samples/web-app-cosmosdb-mongodb-api/dotnet/README.md b/samples/web-app-cosmosdb-mongodb-api/dotnet/README.md
index e730db8..356b0ab 100644
--- a/samples/web-app-cosmosdb-mongodb-api/dotnet/README.md
+++ b/samples/web-app-cosmosdb-mongodb-api/dotnet/README.md
@@ -66,3 +66,11 @@ The app also exposes `GET /health`, the endpoint the liveness and readiness prob
 ```bash
 curl http://localhost:8080/health
 ```
+
+## Logs
+
+The app logs one line per request — the `VacationPlanner.Requests` middleware is the equivalent of the gunicorn access log of the [Python version](../python/README.md), and it covers the probes too — plus one line per document read, inserted, updated or deleted and one line for every activity added, updated or deleted. [`src/appsettings.json`](src/appsettings.json) keeps every entry on a single timestamped line and holds the framework categories at warning level, so the request and store lines stand out.
+
+```bash
+kubectl logs deployment/vacation-planner-mongodb -n vacation-planner-mongodb --tail=50
+```
diff --git a/samples/web-app-cosmosdb-mongodb-api/dotnet/src/Pages/Delete.cshtml.cs b/samples/web-app-cosmosdb-mongodb-api/dotnet/src/Pages/Delete.cshtml.cs
index 88cfe41..6272570 100644
--- a/samples/web-app-cosmosdb-mongodb-api/dotnet/src/Pages/Delete.cshtml.cs
+++ b/samples/web-app-cosmosdb-mongodb-api/dotnet/src/Pages/Delete.cshtml.cs
@@ -5,7 +5,7 @@
 namespace VacationPlanner.Pages;
 
 /// <summary>Handles <c>POST /delete/{id}</c>; the activity is addressed by its store id, never by its position in the list.</summary>
-public class DeleteModel(IActivityStore store) : PageModel
+public class DeleteModel(IActivityStore store, ILogger<DeleteModel> logger) : PageModel
 {
     public IActionResult OnGet() => RedirectToPage("/Index");
 
@@ -13,6 +13,7 @@ public async Task<IActionResult> OnPostAsync(string id, CancellationToken cancel
     {
         if (!string.IsNullOrWhiteSpace(id) && await store.DeleteAsync(id, cancellationToken))
         {
+            logger.LogInformation("Activity deleted: {Id}", id);
             TempData["Flash"] = "Activity deleted.";
         }
 
diff --git a/samples/web-app-cosmosdb-mongodb-api/dotnet/src/Pages/Index.cshtml.cs b/samples/web-app-cosmosdb-mongodb-api/dotnet/src/Pages/Index.cshtml.cs
index ca4aa73..4a8e59c 100644
--- a/samples/web-app-cosmosdb-mongodb-api/dotnet/src/Pages/Index.cshtml.cs
+++ b/samples/web-app-cosmosdb-mongodb-api/dotnet/src/Pages/Index.cshtml.cs
@@ -5,7 +5,7 @@
 
 namespace VacationPlanner.Pages;
 
-public class IndexModel(IActivityStore store) : PageModel
+public class IndexModel(IActivityStore store, ILogger<IndexModel> logger) : PageModel
 {
     public IReadOnlyList<Activity> Activities { get; private set; } = [];
 
@@ -33,11 +33,13 @@ public async Task<IActionResult> OnPostAsync(CancellationToken cancellationToken
             {
                 if (await store.UpdateAsync(id, text, cancellationToken))
                 {
+                    logger.LogInformation("Activity updated: {Id}", id);
                     TempData["Flash"] = "Activity updated!";
                 }
             }
             else if (await store.AddAsync(text, cancellationToken))
             {
+                logger.LogInformation("Activity added: {Activity}", text);
                 TempData["Flash"] = "Activity added!";
             }
         }
diff --git a/samples/web-app-cosmosdb-mongodb-api/dotnet/src/Program.cs b/samples/web-app-cosmosdb-mongodb-api/dotnet/src/Program.cs
index b3f0e5d..9d948f9 100644
--- a/samples/web-app-cosmosdb-mongodb-api/dotnet/src/Program.cs
+++ b/samples/web-app-cosmosdb-mongodb-api/dotnet/src/Program.cs
@@ -1,3 +1,4 @@
+using System.Diagnostics;
 using Microsoft.AspNetCore.DataProtection;
 using Microsoft.AspNetCore.DataProtection.KeyManagement;
 using VacationPlanner.Services;
@@ -37,6 +38,24 @@
     app.Logger.LogWarning("SECRET_KEY is not set: antiforgery tokens and flash messages are only valid on this replica.");
 }
 
+// One log line per request, the equivalent of the access log the Python image produces (its gunicorn
+// command passes --access-logfile -). Kubernetes probes show up here too, exactly as they do for Python.
+var requestLogger = app.Services.GetRequiredService<ILoggerFactory>().CreateLogger("VacationPlanner.Requests");
+app.Use(
+    async (context, next) =>
+    {
+        var started = Stopwatch.GetTimestamp();
+        await next();
+        requestLogger.LogInformation(
+            "{Method} {Path} -> {StatusCode} in {Elapsed:0.0}ms",
+            context.Request.Method,
+            context.Request.Path,
+            context.Response.StatusCode,
+            Stopwatch.GetElapsedTime(started).TotalMilliseconds
+        );
+    }
+);
+
 app.UseStaticFiles();
 app.MapRazorPages();
 
diff --git a/samples/web-app-cosmosdb-mongodb-api/dotnet/src/Services/MongoActivityStore.cs b/samples/web-app-cosmosdb-mongodb-api/dotnet/src/Services/MongoActivityStore.cs
index 695f249..aac64f9 100644
--- a/samples/web-app-cosmosdb-mongodb-api/dotnet/src/Services/MongoActivityStore.cs
+++ b/samples/web-app-cosmosdb-mongodb-api/dotnet/src/Services/MongoActivityStore.cs
@@ -1,4 +1,5 @@
 using MongoDB.Bson;
+using MongoDB.Bson.IO;
 using MongoDB.Driver;
 using VacationPlanner.Models;
 
@@ -12,6 +13,9 @@ public sealed class MongoActivityStore : IActivityStore
     private readonly MongoOptions _options;
     private readonly ILogger<MongoActivityStore> _logger;
 
+    /// <summary>Documents are logged indented, like the Python sample's <c>json.dumps(indent=3)</c> output.</summary>
+    private static readonly JsonWriterSettings Indented = new() { Indent = true };
+
     public MongoActivityStore(MongoOptions options, ILogger<MongoActivityStore> logger)
     {
         _options = options;
@@ -45,6 +49,12 @@ public async Task<IReadOnlyList<Activity>> ListAsync(CancellationToken cancellat
     {
         var filter = Builders<BsonDocument>.Filter.Eq("username", _options.Username);
         var documents = await _collection.Find(filter).ToListAsync(cancellationToken);
+        _logger.LogInformation(
+            "Retrieved {Count} document(s) from collection '{Collection}': {Documents}",
+            documents.Count,
+            _options.CollectionName,
+            documents.ToJson(Indented)
+        );
         return documents.Select(d => new Activity(d["_id"].AsString, d["activity"].AsString)).ToList();
     }
 
@@ -58,6 +68,11 @@ public async Task<bool> AddAsync(string text, CancellationToken cancellationToke
             ["timestamp"] = DateTime.Now.ToString("yyyy-MM-ddTHH:mm:ss.ffffff"),
         };
         await _collection.InsertOneAsync(document, cancellationToken: cancellationToken);
+        _logger.LogInformation(
+            "Inserted document into collection '{Collection}': {Document}",
+            _options.CollectionName,
+            document.ToJson(Indented)
+        );
         return true;
     }
 
@@ -68,17 +83,24 @@ public async Task<bool> UpdateAsync(string id, string text, CancellationToken ca
             Builders<BsonDocument>.Filter.Eq("_id", id),
             Builders<BsonDocument>.Update.Set("activity", text),
             cancellationToken: cancellationToken);
+        _logger.LogInformation(
+            "Updated {Count} document(s) with id {Id} in collection '{Collection}'",
+            result.ModifiedCount,
+            id,
+            _options.CollectionName
+        );
         return result.ModifiedCount > 0;
     }
 
     public async Task<bool> DeleteAsync(string id, CancellationToken cancellationToken)
     {
         var result = await _collection.DeleteOneAsync(Builders<BsonDocument>.Filter.Eq("_id", id), cancellationToken);
-        if (result.DeletedCount == 0)
-        {
-            _logger.LogInformation("Document '{Id}' did not exist: already deleted.", id);
-        }
-
+        _logger.LogInformation(
+            "Deleted {Count} document(s) with id {Id} from collection '{Collection}'",
+            result.DeletedCount,
+            id,
+            _options.CollectionName
+        );
         return true;
     }
 
diff --git a/samples/web-app-cosmosdb-mongodb-api/dotnet/src/appsettings.json b/samples/web-app-cosmosdb-mongodb-api/dotnet/src/appsettings.json
index 10f68b8..6e5c6b2 100644
--- a/samples/web-app-cosmosdb-mongodb-api/dotnet/src/appsettings.json
+++ b/samples/web-app-cosmosdb-mongodb-api/dotnet/src/appsettings.json
@@ -3,6 +3,13 @@
     "LogLevel": {
       "Default": "Information",
       "Microsoft.AspNetCore": "Warning"
+    },
+    "Console": {
+      "FormatterName": "simple",
+      "FormatterOptions": {
+        "SingleLine": true,
+        "TimestampFormat": "yyyy-MM-dd HH:mm:ss "
+      }
     }
   },
   "AllowedHosts": "*"
diff --git a/samples/web-app-cosmosdb-mongodb-api/python/README.md b/samples/web-app-cosmosdb-mongodb-api/python/README.md
index ffa8165..48a4cea 100644
--- a/samples/web-app-cosmosdb-mongodb-api/python/README.md
+++ b/samples/web-app-cosmosdb-mongodb-api/python/README.md
@@ -66,3 +66,11 @@ The app also exposes `GET /health`, the endpoint the liveness and readiness prob
 ```bash
 curl http://localhost:8080/health
 ```
+
+## Logs
+
+The app logs one line per request — gunicorn writes an access log line for every call, the probes included, because its command passes `--access-logfile -` — plus one line per document read, inserted, updated or deleted and one line for every activity added, updated or deleted. Every entry carries a timestamp, the logger name and the level; the Azure SDK and `urllib3` stay at warning level. The [.NET version](../dotnet/README.md) writes the same trace.
+
+```bash
+kubectl logs deployment/vacation-planner-mongodb -n vacation-planner-mongodb --tail=50
+```
diff --git a/samples/web-app-cosmosdb-nosql-api/dotnet/README.md b/samples/web-app-cosmosdb-nosql-api/dotnet/README.md
index 9475de4..ae4af19 100644
--- a/samples/web-app-cosmosdb-nosql-api/dotnet/README.md
+++ b/samples/web-app-cosmosdb-nosql-api/dotnet/README.md
@@ -68,3 +68,11 @@ The app also exposes `GET /health`, the endpoint the liveness and readiness prob
 ```bash
 curl http://localhost:8080/health
 ```
+
+## Logs
+
+The app logs one line per request — the `VacationPlanner.Requests` middleware is the equivalent of the gunicorn access log of the [Python version](../python/README.md), and it covers the probes too — plus one line per item read, created, updated or deleted and one line for every activity added, updated or deleted. [`src/appsettings.json`](src/appsettings.json) keeps every entry on a single timestamped line and holds the framework categories at warning level, so the request and store lines stand out.
+
+```bash
+kubectl logs deployment/vacation-planner-nosql -n vacation-planner-nosql --tail=50
+```
diff --git a/samples/web-app-cosmosdb-nosql-api/dotnet/src/Pages/Delete.cshtml.cs b/samples/web-app-cosmosdb-nosql-api/dotnet/src/Pages/Delete.cshtml.cs
index 88cfe41..6272570 100644
--- a/samples/web-app-cosmosdb-nosql-api/dotnet/src/Pages/Delete.cshtml.cs
+++ b/samples/web-app-cosmosdb-nosql-api/dotnet/src/Pages/Delete.cshtml.cs
@@ -5,7 +5,7 @@
 namespace VacationPlanner.Pages;
 
 /// <summary>Handles <c>POST /delete/{id}</c>; the activity is addressed by its store id, never by its position in the list.</summary>
-public class DeleteModel(IActivityStore store) : PageModel
+public class DeleteModel(IActivityStore store, ILogger<DeleteModel> logger) : PageModel
 {
     public IActionResult OnGet() => RedirectToPage("/Index");
 
@@ -13,6 +13,7 @@ public async Task<IActionResult> OnPostAsync(string id, CancellationToken cancel
     {
         if (!string.IsNullOrWhiteSpace(id) && await store.DeleteAsync(id, cancellationToken))
         {
+            logger.LogInformation("Activity deleted: {Id}", id);
             TempData["Flash"] = "Activity deleted.";
         }
 
diff --git a/samples/web-app-cosmosdb-nosql-api/dotnet/src/Pages/Index.cshtml.cs b/samples/web-app-cosmosdb-nosql-api/dotnet/src/Pages/Index.cshtml.cs
index be6bc47..b012b42 100644
--- a/samples/web-app-cosmosdb-nosql-api/dotnet/src/Pages/Index.cshtml.cs
+++ b/samples/web-app-cosmosdb-nosql-api/dotnet/src/Pages/Index.cshtml.cs
@@ -5,7 +5,7 @@
 
 namespace VacationPlanner.Pages;
 
-public class IndexModel(IActivityStore store) : PageModel
+public class IndexModel(IActivityStore store, ILogger<IndexModel> logger) : PageModel
 {
     public IReadOnlyList<Activity> Activities { get; private set; } = [];
 
@@ -33,11 +33,13 @@ public async Task<IActionResult> OnPostAsync(CancellationToken cancellationToken
             {
                 if (await store.UpdateAsync(id, text, cancellationToken))
                 {
+                    logger.LogInformation("Activity updated: {Id}", id);
                     TempData["Flash"] = "Activity updated.";
                 }
             }
             else if (await store.AddAsync(text, cancellationToken))
             {
+                logger.LogInformation("Activity added: {Activity}", text);
                 TempData["Flash"] = "Activity added.";
             }
         }
diff --git a/samples/web-app-cosmosdb-nosql-api/dotnet/src/Program.cs b/samples/web-app-cosmosdb-nosql-api/dotnet/src/Program.cs
index 92b0ad0..f67b85e 100644
--- a/samples/web-app-cosmosdb-nosql-api/dotnet/src/Program.cs
+++ b/samples/web-app-cosmosdb-nosql-api/dotnet/src/Program.cs
@@ -1,3 +1,4 @@
+using System.Diagnostics;
 using Microsoft.AspNetCore.DataProtection;
 using Microsoft.AspNetCore.DataProtection.KeyManagement;
 using VacationPlanner.Services;
@@ -37,6 +38,24 @@
     app.Logger.LogWarning("SECRET_KEY is not set: antiforgery tokens and flash messages are only valid on this replica.");
 }
 
+// One log line per request, the equivalent of the access log the Python image produces (its gunicorn
+// command passes --access-logfile -). Kubernetes probes show up here too, exactly as they do for Python.
+var requestLogger = app.Services.GetRequiredService<ILoggerFactory>().CreateLogger("VacationPlanner.Requests");
+app.Use(
+    async (context, next) =>
+    {
+        var started = Stopwatch.GetTimestamp();
+        await next();
+        requestLogger.LogInformation(
+            "{Method} {Path} -> {StatusCode} in {Elapsed:0.0}ms",
+            context.Request.Method,
+            context.Request.Path,
+            context.Response.StatusCode,
+            Stopwatch.GetElapsedTime(started).TotalMilliseconds
+        );
+    }
+);
+
 app.UseStaticFiles();
 app.MapRazorPages();
 
diff --git a/samples/web-app-cosmosdb-nosql-api/dotnet/src/Services/CosmosActivityStore.cs b/samples/web-app-cosmosdb-nosql-api/dotnet/src/Services/CosmosActivityStore.cs
index 981b69a..d1c8a97 100644
--- a/samples/web-app-cosmosdb-nosql-api/dotnet/src/Services/CosmosActivityStore.cs
+++ b/samples/web-app-cosmosdb-nosql-api/dotnet/src/Services/CosmosActivityStore.cs
@@ -47,6 +47,12 @@ public async Task<IReadOnlyList<Activity>> ListAsync(CancellationToken cancellat
             }
         }
 
+        _logger.LogInformation(
+            "Retrieved {Count} item(s) for user: {Username} from container '{Container}'",
+            activities.Count,
+            _options.Username,
+            _options.ContainerName
+        );
         return activities;
     }
 
@@ -60,6 +66,12 @@ public async Task<bool> AddAsync(string text, CancellationToken cancellationToke
             Timestamp = DateTime.Now.ToString("yyyy-MM-ddTHH:mm:ss.ffffff"),
         };
         await Container.CreateItemAsync(document, new PartitionKey(_options.Username), cancellationToken: cancellationToken);
+        _logger.LogInformation(
+            "Created item {Id} in container '{Container}': {Activity}",
+            document.Id,
+            _options.ContainerName,
+            text
+        );
         return true;
     }
 
@@ -71,6 +83,7 @@ public async Task<bool> UpdateAsync(string id, string text, CancellationToken ca
             var item = await Container.ReadItemAsync<ActivityDocument>(id, new PartitionKey(_options.Username), cancellationToken: cancellationToken);
             item.Resource.Activity = text;
             await Container.ReplaceItemAsync(item.Resource, id, new PartitionKey(_options.Username), cancellationToken: cancellationToken);
+            _logger.LogInformation("Updated item {Id} in container '{Container}'", id, _options.ContainerName);
         }
         catch (CosmosException ex) when (ex.StatusCode == HttpStatusCode.NotFound)
         {
@@ -84,6 +97,7 @@ public async Task<bool> DeleteAsync(string id, CancellationToken cancellationTok
     {
         try
         {
+            _logger.LogInformation("Deleting item {Id} from container '{Container}'", id, _options.ContainerName);
             await Container.DeleteItemAsync<ActivityDocument>(id, new PartitionKey(_options.Username), cancellationToken: cancellationToken);
             return true;
         }
diff --git a/samples/web-app-cosmosdb-nosql-api/dotnet/src/appsettings.json b/samples/web-app-cosmosdb-nosql-api/dotnet/src/appsettings.json
index 10f68b8..6e5c6b2 100644
--- a/samples/web-app-cosmosdb-nosql-api/dotnet/src/appsettings.json
+++ b/samples/web-app-cosmosdb-nosql-api/dotnet/src/appsettings.json
@@ -3,6 +3,13 @@
     "LogLevel": {
       "Default": "Information",
       "Microsoft.AspNetCore": "Warning"
+    },
+    "Console": {
+      "FormatterName": "simple",
+      "FormatterOptions": {
+        "SingleLine": true,
+        "TimestampFormat": "yyyy-MM-dd HH:mm:ss "
+      }
     }
   },
   "AllowedHosts": "*"
diff --git a/samples/web-app-cosmosdb-nosql-api/python/README.md b/samples/web-app-cosmosdb-nosql-api/python/README.md
index 7e474d3..aacabbb 100644
--- a/samples/web-app-cosmosdb-nosql-api/python/README.md
+++ b/samples/web-app-cosmosdb-nosql-api/python/README.md
@@ -68,3 +68,11 @@ The app also exposes `GET /health`, the endpoint the liveness and readiness prob
 ```bash
 curl http://localhost:8080/health
 ```
+
+## Logs
+
+The app logs one line per request — gunicorn writes an access log line for every call, the probes included, because its command passes `--access-logfile -` — plus one line per item read, created, updated or deleted and one line for every activity added, updated or deleted. Every entry carries a timestamp, the logger name and the level; the Azure SDK and `urllib3` stay at warning level. The [.NET version](../dotnet/README.md) writes the same trace.
+
+```bash
+kubectl logs deployment/vacation-planner-nosql -n vacation-planner-nosql --tail=50
+```
diff --git a/samples/web-app-file-storage/dotnet/README.md b/samples/web-app-file-storage/dotnet/README.md
index cc32468..bc59a8f 100644
--- a/samples/web-app-file-storage/dotnet/README.md
+++ b/samples/web-app-file-storage/dotnet/README.md
@@ -111,6 +111,14 @@ The app also exposes `GET /health`, the endpoint the liveness and readiness prob
 curl http://localhost:8080/health
 ```
 
+## Logs
+
+The app logs one line per request — the `VacationPlanner.Requests` middleware is the equivalent of the gunicorn access log of the [Python version](../python/README.md), and it covers the probes too — plus one line per activity file read, written or deleted and one line for every activity added, updated or deleted. [`src/appsettings.json`](src/appsettings.json) keeps every entry on a single timestamped line and holds the framework categories at warning level, so the request and store lines stand out.
+
+```bash
+kubectl logs deployment/vacation-planner-file -n vacation-planner-file --tail=50
+```
+
 ## Looking at the file share
 
 Every activity is one UTF-8 text file named `YYYY-MM-DD-HH-MM-SS-activity.txt`. From inside the cluster, on any of the three replicas and for any of the four combinations:
diff --git a/samples/web-app-file-storage/dotnet/src/Pages/Delete.cshtml.cs b/samples/web-app-file-storage/dotnet/src/Pages/Delete.cshtml.cs
index 89929bc..1d77ded 100644
--- a/samples/web-app-file-storage/dotnet/src/Pages/Delete.cshtml.cs
+++ b/samples/web-app-file-storage/dotnet/src/Pages/Delete.cshtml.cs
@@ -9,7 +9,7 @@ namespace VacationPlanner.Pages;
 /// field, never by its position in the rendered page: every replica mounts the same share and reloads it on each
 /// GET, so the list can change between rendering a page and submitting a delete from it.
 /// </summary>
-public class DeleteModel(IActivityStore store) : PageModel
+public class DeleteModel(IActivityStore store, ILogger<DeleteModel> logger) : PageModel
 {
     [BindProperty(Name = "activity_id")]
     public string? ActivityId { get; set; }
@@ -18,9 +18,16 @@ public class DeleteModel(IActivityStore store) : PageModel
 
     public async Task<IActionResult> OnPostAsync(CancellationToken cancellationToken)
     {
-        TempData["Flash"] = await store.DeleteAsync(ActivityId?.Trim() ?? "", cancellationToken)
-            ? "Activity deleted successfully."
-            : "Failed to delete the activity from the file share.";
+        var id = ActivityId?.Trim() ?? "";
+        if (await store.DeleteAsync(id, cancellationToken))
+        {
+            logger.LogInformation("Activity deleted: {Id}", id);
+            TempData["Flash"] = "Activity deleted successfully.";
+        }
+        else
+        {
+            TempData["Flash"] = "Failed to delete the activity from the file share.";
+        }
 
         return RedirectToPage("/Index");
     }
diff --git a/samples/web-app-file-storage/dotnet/src/Pages/Index.cshtml.cs b/samples/web-app-file-storage/dotnet/src/Pages/Index.cshtml.cs
index 78018b1..5e2f65f 100644
--- a/samples/web-app-file-storage/dotnet/src/Pages/Index.cshtml.cs
+++ b/samples/web-app-file-storage/dotnet/src/Pages/Index.cshtml.cs
@@ -5,7 +5,7 @@
 
 namespace VacationPlanner.Pages;
 
-public class IndexModel(IActivityStore store, FileStorageOptions options) : PageModel
+public class IndexModel(IActivityStore store, FileStorageOptions options, ILogger<IndexModel> logger) : PageModel
 {
     public IReadOnlyList<Activity> Activities { get; private set; } = [];
 
@@ -34,15 +34,27 @@ public async Task<IActionResult> OnPostAsync(CancellationToken cancellationToken
         {
             if (!string.IsNullOrEmpty(id))
             {
-                TempData["Flash"] = await store.UpdateAsync(id, text, cancellationToken)
-                    ? "Activity updated successfully."
-                    : "Failed to update the activity on the file share.";
+                if (await store.UpdateAsync(id, text, cancellationToken))
+                {
+                    logger.LogInformation("Activity updated: {Id}", id);
+                    TempData["Flash"] = "Activity updated successfully.";
+                }
+                else
+                {
+                    TempData["Flash"] = "Failed to update the activity on the file share.";
+                }
             }
             else
             {
-                TempData["Flash"] = await store.AddAsync(text, cancellationToken)
-                    ? "Activity added successfully."
-                    : "Failed to add the activity to the file share.";
+                if (await store.AddAsync(text, cancellationToken))
+                {
+                    logger.LogInformation("Activity added: {Activity}", text);
+                    TempData["Flash"] = "Activity added successfully.";
+                }
+                else
+                {
+                    TempData["Flash"] = "Failed to add the activity to the file share.";
+                }
             }
         }
 
diff --git a/samples/web-app-file-storage/dotnet/src/Program.cs b/samples/web-app-file-storage/dotnet/src/Program.cs
index f84b421..0d1f87d 100644
--- a/samples/web-app-file-storage/dotnet/src/Program.cs
+++ b/samples/web-app-file-storage/dotnet/src/Program.cs
@@ -1,3 +1,4 @@
+using System.Diagnostics;
 using Microsoft.AspNetCore.DataProtection;
 using Microsoft.AspNetCore.DataProtection.KeyManagement;
 using VacationPlanner.Services;
@@ -38,6 +39,24 @@
     app.Logger.LogWarning("SECRET_KEY is not set: antiforgery tokens and flash messages are only valid on this replica.");
 }
 
+// One log line per request, the equivalent of the access log the Python image produces (its gunicorn
+// command passes --access-logfile -). Kubernetes probes show up here too, exactly as they do for Python.
+var requestLogger = app.Services.GetRequiredService<ILoggerFactory>().CreateLogger("VacationPlanner.Requests");
+app.Use(
+    async (context, next) =>
+    {
+        var started = Stopwatch.GetTimestamp();
+        await next();
+        requestLogger.LogInformation(
+            "{Method} {Path} -> {StatusCode} in {Elapsed:0.0}ms",
+            context.Request.Method,
+            context.Request.Path,
+            context.Response.StatusCode,
+            Stopwatch.GetElapsedTime(started).TotalMilliseconds
+        );
+    }
+);
+
 app.UseStaticFiles();
 app.MapRazorPages();
 
diff --git a/samples/web-app-file-storage/dotnet/src/Services/FileActivityStore.cs b/samples/web-app-file-storage/dotnet/src/Services/FileActivityStore.cs
index 4a8df22..3086160 100644
--- a/samples/web-app-file-storage/dotnet/src/Services/FileActivityStore.cs
+++ b/samples/web-app-file-storage/dotnet/src/Services/FileActivityStore.cs
@@ -44,10 +44,12 @@ public Task<IReadOnlyList<Activity>> ListAsync(CancellationToken cancellationTok
             var path = Path.Combine(_directory, name);
             if (File.Exists(path))
             {
+                logger.LogInformation("Found activity file '{Name}' with size {Size} bytes", name, new FileInfo(path).Length);
                 activities.Add(new Activity(name, File.ReadAllText(path)));
             }
         }
 
+        logger.LogInformation("Retrieved {Count} activity file(s) from directory '{Directory}'", activities.Count, _directory);
         return Task.FromResult<IReadOnlyList<Activity>>(activities);
     }
 
@@ -85,6 +87,7 @@ public Task<bool> DeleteAsync(string id, CancellationToken cancellationToken)
                 return Task.FromResult(true);
             }
 
+            logger.LogInformation("Deleting activity file '{Name}' from directory '{Directory}'.", id, _directory);
             File.Delete(path);
             logger.LogInformation("Activity file '{Name}' deleted successfully.", id);
             return Task.FromResult(true);
@@ -127,6 +130,7 @@ private bool Write(string name, string text)
 
         try
         {
+            logger.LogInformation("Writing activity file '{Name}' in directory '{Directory}'.", name, _directory);
             File.WriteAllText(Path.Combine(_directory, name), text);
             logger.LogInformation("Activity file '{Name}' written successfully.", name);
             return true;
diff --git a/samples/web-app-file-storage/dotnet/src/appsettings.json b/samples/web-app-file-storage/dotnet/src/appsettings.json
index 10f68b8..6e5c6b2 100644
--- a/samples/web-app-file-storage/dotnet/src/appsettings.json
+++ b/samples/web-app-file-storage/dotnet/src/appsettings.json
@@ -3,6 +3,13 @@
     "LogLevel": {
       "Default": "Information",
       "Microsoft.AspNetCore": "Warning"
+    },
+    "Console": {
+      "FormatterName": "simple",
+      "FormatterOptions": {
+        "SingleLine": true,
+        "TimestampFormat": "yyyy-MM-dd HH:mm:ss "
+      }
     }
   },
   "AllowedHosts": "*"
diff --git a/samples/web-app-file-storage/python/README.md b/samples/web-app-file-storage/python/README.md
index e9ee2db..c5b6ded 100644
--- a/samples/web-app-file-storage/python/README.md
+++ b/samples/web-app-file-storage/python/README.md
@@ -111,6 +111,14 @@ The app also exposes `GET /health`, the endpoint the liveness and readiness prob
 curl http://localhost:8080/health
 ```
 
+## Logs
+
+The app logs one line per request — gunicorn writes an access log line for every call, the probes included, because its command passes `--access-logfile -` — plus one line per activity file read, written or deleted and one line for every activity added, updated or deleted. The store operations are printed to stdout, so `kubectl logs` shows them interleaved with the access log. The [.NET version](../dotnet/README.md) writes the same trace, timestamped.
+
+```bash
+kubectl logs deployment/vacation-planner-file -n vacation-planner-file --tail=50
+```
+
 ## Looking at the file share
 
 Every activity is one UTF-8 text file named `YYYY-MM-DD-HH-MM-SS-activity.txt`. From inside the cluster, on any of the three replicas and for any of the four combinations:
diff --git a/samples/web-app-in-cluster-postgresql/python/README.md b/samples/web-app-in-cluster-postgresql/python/README.md
index 75e56f1..de0ea5f 100644
--- a/samples/web-app-in-cluster-postgresql/python/README.md
+++ b/samples/web-app-in-cluster-postgresql/python/README.md
@@ -70,3 +70,11 @@ The app also exposes `GET /health`, the endpoint the liveness and readiness prob
 ```bash
 curl http://localhost:8080/health
 ```
+
+## Logs
+
+The app logs one line per request — gunicorn writes an access log line for every call, the probes included, because its command passes `--access-logfile -` — plus one line per database read and write and one line for every activity added, updated or deleted. Every entry carries a timestamp, the logger name and the level; the Azure SDK and `urllib3` stay at warning level. The [.NET version](../dotnet/README.md) writes the same trace.
+
+```bash
+kubectl logs deployment/vacation-planner-postgres -n vacation-planner-postgres --tail=50
+```
diff --git a/samples/web-app-managed-identity/dotnet/README.md b/samples/web-app-managed-identity/dotnet/README.md
index 5739197..82116c2 100644
--- a/samples/web-app-managed-identity/dotnet/README.md
+++ b/samples/web-app-managed-identity/dotnet/README.md
@@ -73,3 +73,11 @@ curl http://localhost:8080/health
 ```
 
 If you deployed the Gateway path (`DEPLOY_GATEWAY="true"`), the app is instead reachable directly at the public hostname configured in [`00-variables.sh`](scripts/00-variables.sh) (`https://<subdomain>.<dns-zone>`), with no port-forward required.
+
+## Logs
+
+The app logs one line per request — the `VacationPlanner.Requests` middleware is the equivalent of the gunicorn access log of the [Python version](../python/README.md), and it covers the probes too — plus one line per blob read, uploaded or deleted and one line for every activity added, updated or deleted. [`src/appsettings.json`](src/appsettings.json) keeps every entry on a single timestamped line and holds the framework categories at warning level, so the request and store lines stand out.
+
+```bash
+kubectl logs deployment/vacation-planner-blob -n vacation-planner-blob --tail=50
+```
diff --git a/samples/web-app-managed-identity/dotnet/src/Pages/Delete.cshtml.cs b/samples/web-app-managed-identity/dotnet/src/Pages/Delete.cshtml.cs
index 2460ba5..b296ad4 100644
--- a/samples/web-app-managed-identity/dotnet/src/Pages/Delete.cshtml.cs
+++ b/samples/web-app-managed-identity/dotnet/src/Pages/Delete.cshtml.cs
@@ -5,7 +5,7 @@
 namespace VacationPlanner.Pages;
 
 /// <summary>Handles <c>POST /delete/{id}</c>; the activity is addressed by its store id, never by its position in the list.</summary>
-public class DeleteModel(IActivityStore store) : PageModel
+public class DeleteModel(IActivityStore store, ILogger<DeleteModel> logger) : PageModel
 {
     public IActionResult OnGet() => RedirectToPage("/Index");
 
@@ -13,6 +13,7 @@ public async Task<IActionResult> OnPostAsync(string id, CancellationToken cancel
     {
         if (!string.IsNullOrWhiteSpace(id) && await store.DeleteAsync(id, cancellationToken))
         {
+            logger.LogInformation("Activity deleted: {Id}", id);
             TempData["Flash"] = "Activity deleted successfully.";
         }
 
diff --git a/samples/web-app-managed-identity/dotnet/src/Pages/Index.cshtml.cs b/samples/web-app-managed-identity/dotnet/src/Pages/Index.cshtml.cs
index c077e52..afd8549 100644
--- a/samples/web-app-managed-identity/dotnet/src/Pages/Index.cshtml.cs
+++ b/samples/web-app-managed-identity/dotnet/src/Pages/Index.cshtml.cs
@@ -5,7 +5,7 @@
 
 namespace VacationPlanner.Pages;
 
-public class IndexModel(IActivityStore store) : PageModel
+public class IndexModel(IActivityStore store, ILogger<IndexModel> logger) : PageModel
 {
     public IReadOnlyList<Activity> Activities { get; private set; } = [];
 
@@ -33,11 +33,13 @@ public async Task<IActionResult> OnPostAsync(CancellationToken cancellationToken
             {
                 if (await store.UpdateAsync(id, text, cancellationToken))
                 {
+                    logger.LogInformation("Activity updated: {Id}", id);
                     TempData["Flash"] = "Activity updated successfully.";
                 }
             }
             else if (await store.AddAsync(text, cancellationToken))
             {
+                logger.LogInformation("Activity added: {Activity}", text);
                 TempData["Flash"] = "Activity added successfully.";
             }
         }
diff --git a/samples/web-app-managed-identity/dotnet/src/Program.cs b/samples/web-app-managed-identity/dotnet/src/Program.cs
index c8a8a85..768568c 100644
--- a/samples/web-app-managed-identity/dotnet/src/Program.cs
+++ b/samples/web-app-managed-identity/dotnet/src/Program.cs
@@ -1,3 +1,4 @@
+using System.Diagnostics;
 using Microsoft.AspNetCore.DataProtection;
 using Microsoft.AspNetCore.DataProtection.KeyManagement;
 using VacationPlanner.Services;
@@ -37,6 +38,24 @@
     app.Logger.LogWarning("SECRET_KEY is not set: antiforgery tokens and flash messages are only valid on this replica.");
 }
 
+// One log line per request, the equivalent of the access log the Python image produces (its gunicorn
+// command passes --access-logfile -). Kubernetes probes show up here too, exactly as they do for Python.
+var requestLogger = app.Services.GetRequiredService<ILoggerFactory>().CreateLogger("VacationPlanner.Requests");
+app.Use(
+    async (context, next) =>
+    {
+        var started = Stopwatch.GetTimestamp();
+        await next();
+        requestLogger.LogInformation(
+            "{Method} {Path} -> {StatusCode} in {Elapsed:0.0}ms",
+            context.Request.Method,
+            context.Request.Path,
+            context.Response.StatusCode,
+            Stopwatch.GetElapsedTime(started).TotalMilliseconds
+        );
+    }
+);
+
 app.UseStaticFiles();
 app.MapRazorPages();
 
diff --git a/samples/web-app-managed-identity/dotnet/src/Services/BlobActivityStore.cs b/samples/web-app-managed-identity/dotnet/src/Services/BlobActivityStore.cs
index 05bebdf..38cfaff 100644
--- a/samples/web-app-managed-identity/dotnet/src/Services/BlobActivityStore.cs
+++ b/samples/web-app-managed-identity/dotnet/src/Services/BlobActivityStore.cs
@@ -59,9 +59,11 @@ public async Task<IReadOnlyList<Activity>> ListAsync(CancellationToken cancellat
         await foreach (var blob in _container.GetBlobsAsync(cancellationToken: cancellationToken))
         {
             var content = await _container.GetBlobClient(blob.Name).DownloadContentAsync(cancellationToken);
+            _logger.LogInformation("Found blob '{Blob}' with size {Size} bytes", blob.Name, blob.Properties.ContentLength);
             activities.Add(new Activity(blob.Name, content.Value.Content.ToString()));
         }
 
+        _logger.LogInformation("Retrieved {Count} blob(s) from container '{Container}'", activities.Count, _container.Name);
         return activities;
     }
 
@@ -75,9 +77,13 @@ public async Task<bool> DeleteAsync(string id, CancellationToken cancellationTok
     {
         // As in the Python sample, a blob that is already gone still counts as deleted.
         var deleted = await _container.GetBlobClient(id).DeleteIfExistsAsync(cancellationToken: cancellationToken);
-        if (!deleted.Value)
+        if (deleted.Value)
         {
-            _logger.LogInformation("Blob '{Name}' did not exist: already deleted.", id);
+            _logger.LogInformation("Deleted blob '{Blob}' from container '{Container}'", id, _container.Name);
+        }
+        else
+        {
+            _logger.LogInformation("Blob '{Blob}' did not exist: already deleted.", id);
         }
 
         return true;
@@ -99,6 +105,7 @@ public async Task<bool> IsHealthyAsync(CancellationToken cancellationToken)
     private async Task<bool> UploadAsync(string name, string text, CancellationToken cancellationToken)
     {
         await _container.GetBlobClient(name).UploadAsync(new BinaryData(Encoding.UTF8.GetBytes(text)), overwrite: true, cancellationToken);
+        _logger.LogInformation("Uploaded blob '{Blob}' to container '{Container}'", name, _container.Name);
         return true;
     }
 
diff --git a/samples/web-app-managed-identity/dotnet/src/appsettings.json b/samples/web-app-managed-identity/dotnet/src/appsettings.json
index 10f68b8..6e5c6b2 100644
--- a/samples/web-app-managed-identity/dotnet/src/appsettings.json
+++ b/samples/web-app-managed-identity/dotnet/src/appsettings.json
@@ -3,6 +3,13 @@
     "LogLevel": {
       "Default": "Information",
       "Microsoft.AspNetCore": "Warning"
+    },
+    "Console": {
+      "FormatterName": "simple",
+      "FormatterOptions": {
+        "SingleLine": true,
+        "TimestampFormat": "yyyy-MM-dd HH:mm:ss "
+      }
     }
   },
   "AllowedHosts": "*"
diff --git a/samples/web-app-managed-identity/python/README.md b/samples/web-app-managed-identity/python/README.md
index 79de032..117adfb 100644
--- a/samples/web-app-managed-identity/python/README.md
+++ b/samples/web-app-managed-identity/python/README.md
@@ -73,3 +73,11 @@ curl http://localhost:8080/health
 ```
 
 If you deployed the Gateway path (`DEPLOY_GATEWAY="true"`), the app is instead reachable directly at the public hostname configured in [`00-variables.sh`](scripts/00-variables.sh) (`https://<subdomain>.<dns-zone>`), with no port-forward required.
+
+## Logs
+
+The app logs one line per request — gunicorn writes an access log line for every call, the probes included, because its command passes `--access-logfile -` — plus one line per blob read, uploaded or deleted and one line for every activity added, updated or deleted. The store operations are printed to stdout, so `kubectl logs` shows them interleaved with the access log. The [.NET version](../dotnet/README.md) writes the same trace, timestamped.
+
+```bash
+kubectl logs deployment/vacation-planner-blob -n vacation-planner-blob --tail=50
+```
diff --git a/samples/web-app-mysql-flexible-server/python/README.md b/samples/web-app-mysql-flexible-server/python/README.md
index 6976089..5c7c527 100644
--- a/samples/web-app-mysql-flexible-server/python/README.md
+++ b/samples/web-app-mysql-flexible-server/python/README.md
@@ -68,3 +68,11 @@ The app also exposes `GET /health`, the endpoint the liveness and readiness prob
 ```bash
 curl http://localhost:8080/health
 ```
+
+## Logs
+
+The app logs one line per request — gunicorn writes an access log line for every call, the probes included, because its command passes `--access-logfile -` — plus one line per database read and write and one line for every activity added, updated or deleted. Every entry carries a timestamp, the logger name and the level; the Azure SDK and `urllib3` stay at warning level. The [.NET version](../dotnet/README.md) writes the same trace.
+
+```bash
+kubectl logs deployment/vacation-planner-mysql -n vacation-planner-mysql --tail=50
+```
diff --git a/samples/web-app-postgresql-flexible-server/python/README.md b/samples/web-app-postgresql-flexible-server/python/README.md
index 99fe9df..25819fb 100644
--- a/samples/web-app-postgresql-flexible-server/python/README.md
+++ b/samples/web-app-postgresql-flexible-server/python/README.md
@@ -66,3 +66,11 @@ The app also exposes `GET /health`, the endpoint the liveness and readiness prob
 ```bash
 curl http://localhost:8080/health
 ```
+
+## Logs
+
+The app logs one line per request — gunicorn writes an access log line for every call, the probes included, because its command passes `--access-logfile -` — plus one line per database read and write and one line for every activity added, updated or deleted. Every entry carries a timestamp, the logger name and the level; the Azure SDK and `urllib3` stay at warning level. The [.NET version](../dotnet/README.md) writes the same trace.
+
+```bash
+kubectl logs deployment/vacation-planner-postgres -n vacation-planner-postgres --tail=50
+```
diff --git a/samples/web-app-sql-database/python/README.md b/samples/web-app-sql-database/python/README.md
index 9c19693..8927b34 100644
--- a/samples/web-app-sql-database/python/README.md
+++ b/samples/web-app-sql-database/python/README.md
@@ -66,3 +66,11 @@ The app also exposes `GET /health`, the endpoint the liveness and readiness prob
 ```bash
 curl http://localhost:8080/health
 ```
+
+## Logs
+
+The app logs one line per request — gunicorn writes an access log line for every call, the probes included, because its command passes `--access-logfile -` — plus one line per database read and write and one line for every activity added, updated or deleted. Every entry carries a timestamp, the logger name and the level; the Azure SDK and `urllib3` stay at warning level. The [.NET version](../dotnet/README.md) writes the same trace.
+
+```bash
+kubectl logs deployment/vacation-planner-sql -n vacation-planner-sql --tail=50
+```

From 50150b5809b5411caacc68f67fe8ac81ee3b000b Mon Sep 17 00:00:00 2001
From: Paolo Salvatori <leprino@hotmail.com>
Date: Tue, 8 Sep 2026 17:54:07 +0200
Subject: [PATCH 09/20] Add the .NET version of
 web-app-postgresql-flexible-server

ASP.NET Core Razor Pages port of the Python Flask sample, with the same
behaviour, the same environment variables and the same deployment artifacts:
only the container image name carries the -dotnet suffix, so both versions
roll over the same Deployment, Service, ConfigMap and Secret.

Npgsql over the flexible server with SslMode=Prefer, the 30 x 2s startup
retry of the Python version, activities keyed by their store id, GET /health
behind both probes, and the Data Protection key ring derived from SECRET_KEY
so the three replicas validate each other's antiforgery tokens and flashes.

Validated on the LocalStack AKS emulator: 3/3 pods Ready through the /health
probes, add/list/update/delete through a port-forward and from inside the
cluster across all replicas, and the expected request, store and page log lines.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
---
 .../dotnet/README.md                          |  76 ++++
 .../dotnet/images/architecture.png            | Bin 0 -> 38251 bytes
 .../dotnet/scripts/00-variables.sh            |  45 +++
 .../dotnet/scripts/01-deploy-resources.sh     | 286 +++++++++++++++
 .../dotnet/scripts/02-build-docker-image.sh   |  18 +
 .../dotnet/scripts/03-run-docker-container.sh |  38 ++
 .../dotnet/scripts/04-push-docker-image.sh    |  40 ++
 .../dotnet/scripts/05-deploy-app.sh           |  93 +++++
 .../dotnet/scripts/Dockerfile                 |  28 ++
 .../dotnet/scripts/configmap.yml              |  14 +
 .../dotnet/scripts/deployment.yml             |  96 +++++
 .../dotnet/scripts/namespace.yml              |   4 +
 .../dotnet/scripts/secret.yml                 |  11 +
 .../dotnet/scripts/service.yml                |  16 +
 .../dotnet/src/.dockerignore                  |   2 +
 .../dotnet/src/Models/Activity.cs             |   4 +
 .../dotnet/src/Pages/Delete.cshtml            |   2 +
 .../dotnet/src/Pages/Delete.cshtml.cs         |  22 ++
 .../dotnet/src/Pages/Index.cshtml             | 265 ++++++++++++++
 .../dotnet/src/Pages/Index.cshtml.cs          |  49 +++
 .../dotnet/src/Pages/_ViewImports.cshtml      |   4 +
 .../dotnet/src/Program.cs                     |  69 ++++
 .../dotnet/src/Services/ActivityId.cs         |  15 +
 .../dotnet/src/Services/IActivityStore.cs     |  24 ++
 .../src/Services/PostgresActivityStore.cs     | 126 +++++++
 .../dotnet/src/Services/PostgresOptions.cs    |  28 ++
 .../src/Services/SecretKeyXmlRepository.cs    |  49 +++
 .../dotnet/src/Services/StoreInitializer.cs   |  33 ++
 .../dotnet/src/VacationPlanner.csproj         |  11 +
 .../dotnet/src/appsettings.json               |  16 +
 .../dotnet/src/wwwroot/favicon.ico            | Bin 0 -> 36791 bytes
 .../dotnet/src/wwwroot/style.css              | 341 ++++++++++++++++++
 32 files changed, 1825 insertions(+)
 create mode 100644 samples/web-app-postgresql-flexible-server/dotnet/README.md
 create mode 100644 samples/web-app-postgresql-flexible-server/dotnet/images/architecture.png
 create mode 100644 samples/web-app-postgresql-flexible-server/dotnet/scripts/00-variables.sh
 create mode 100755 samples/web-app-postgresql-flexible-server/dotnet/scripts/01-deploy-resources.sh
 create mode 100755 samples/web-app-postgresql-flexible-server/dotnet/scripts/02-build-docker-image.sh
 create mode 100755 samples/web-app-postgresql-flexible-server/dotnet/scripts/03-run-docker-container.sh
 create mode 100755 samples/web-app-postgresql-flexible-server/dotnet/scripts/04-push-docker-image.sh
 create mode 100755 samples/web-app-postgresql-flexible-server/dotnet/scripts/05-deploy-app.sh
 create mode 100644 samples/web-app-postgresql-flexible-server/dotnet/scripts/Dockerfile
 create mode 100644 samples/web-app-postgresql-flexible-server/dotnet/scripts/configmap.yml
 create mode 100644 samples/web-app-postgresql-flexible-server/dotnet/scripts/deployment.yml
 create mode 100644 samples/web-app-postgresql-flexible-server/dotnet/scripts/namespace.yml
 create mode 100644 samples/web-app-postgresql-flexible-server/dotnet/scripts/secret.yml
 create mode 100644 samples/web-app-postgresql-flexible-server/dotnet/scripts/service.yml
 create mode 100644 samples/web-app-postgresql-flexible-server/dotnet/src/.dockerignore
 create mode 100644 samples/web-app-postgresql-flexible-server/dotnet/src/Models/Activity.cs
 create mode 100644 samples/web-app-postgresql-flexible-server/dotnet/src/Pages/Delete.cshtml
 create mode 100644 samples/web-app-postgresql-flexible-server/dotnet/src/Pages/Delete.cshtml.cs
 create mode 100644 samples/web-app-postgresql-flexible-server/dotnet/src/Pages/Index.cshtml
 create mode 100644 samples/web-app-postgresql-flexible-server/dotnet/src/Pages/Index.cshtml.cs
 create mode 100644 samples/web-app-postgresql-flexible-server/dotnet/src/Pages/_ViewImports.cshtml
 create mode 100644 samples/web-app-postgresql-flexible-server/dotnet/src/Program.cs
 create mode 100644 samples/web-app-postgresql-flexible-server/dotnet/src/Services/ActivityId.cs
 create mode 100644 samples/web-app-postgresql-flexible-server/dotnet/src/Services/IActivityStore.cs
 create mode 100644 samples/web-app-postgresql-flexible-server/dotnet/src/Services/PostgresActivityStore.cs
 create mode 100644 samples/web-app-postgresql-flexible-server/dotnet/src/Services/PostgresOptions.cs
 create mode 100644 samples/web-app-postgresql-flexible-server/dotnet/src/Services/SecretKeyXmlRepository.cs
 create mode 100644 samples/web-app-postgresql-flexible-server/dotnet/src/Services/StoreInitializer.cs
 create mode 100644 samples/web-app-postgresql-flexible-server/dotnet/src/VacationPlanner.csproj
 create mode 100644 samples/web-app-postgresql-flexible-server/dotnet/src/appsettings.json
 create mode 100644 samples/web-app-postgresql-flexible-server/dotnet/src/wwwroot/favicon.ico
 create mode 100644 samples/web-app-postgresql-flexible-server/dotnet/src/wwwroot/style.css

diff --git a/samples/web-app-postgresql-flexible-server/dotnet/README.md b/samples/web-app-postgresql-flexible-server/dotnet/README.md
new file mode 100644
index 0000000..13700cd
--- /dev/null
+++ b/samples/web-app-postgresql-flexible-server/dotnet/README.md
@@ -0,0 +1,76 @@
+# Vacation Planner: Azure Database for PostgreSQL flexible server
+
+> A Python version of this sample lives in [../python](../python/README.md).
+
+This sample demonstrates a ASP.NET Core Razor Pages single-page web application called *Vacation Planner* hosted on an [Azure Kubernetes Service (AKS)](https://learn.microsoft.com/en-us/azure/aks/what-is-aks) cluster in the cloud on Azure or locally in the LocalStack emulator for Azure. The app runs in a dedicated namespace and stores activity data in the `activities` table of the `PlannerDB` database on an [Azure Database for PostgreSQL flexible server](https://learn.microsoft.com/en-us/azure/postgresql/flexible-server/overview).
+
+The application connects to PostgreSQL using a dedicated application user (rather than the server admin), and the deployment scripts seed the `activities` table with a handful of sample plans so the app shows data on first load.
+
+Before installing the sample, make sure to create an [Azure Kubernetes Service (AKS)](https://learn.microsoft.com/en-us/azure/aks/what-is-aks) cluster by using one of the following scripts:
+
+- [scripts/01-system-assigned-managed-identity.sh](../../../scripts/01-system-assigned-managed-identity.sh): creates the cluster using a system-assigned managed identity as its cluster identity.
+- [scripts/01-user-assigned-managed-identity.sh](../../../scripts/01-user-assigned-managed-identity.sh): creates the cluster using a user-assigned managed identity as its cluster identity.
+
+All commands below are run from this sample's `scripts/` folder.
+
+> **Running on LocalStack?** Install the [lstk CLI](https://docs.localstack.cloud/aws/developer-tools/running-localstack/lstk/) and run `lstk az start-interception` to route Azure CLI calls to the emulator. See [Run against LocalStack](../../../README.md#run-against-localstack) for the full setup.
+
+## Architecture
+
+The following diagram illustrates the architecture of the solution:
+
+![Architecture Diagram](./images/architecture.png)
+
+## Deployment workflow
+
+Run the numbered scripts in order from the `scripts/` folder:
+
+```bash
+cd scripts
+./01-deploy-resources.sh
+./02-build-docker-image.sh
+./03-run-docker-container.sh   # optional local smoke test
+./04-push-docker-image.sh
+./05-deploy-app.sh
+```
+
+## Scripts and manifests
+
+| File | Description |
+| ---- | ----------- |
+| [`00-variables.sh`](scripts/00-variables.sh) | Defines the variables shared across the other scripts (resource names, image tag, PostgreSQL credentials, Kubernetes namespace, …). The other scripts load these values by sourcing this file. |
+| [`01-deploy-resources.sh`](scripts/01-deploy-resources.sh) | Deploys the Azure resources used by this sample: the resource group, the [Azure Container Registry (ACR)](https://learn.microsoft.com/en-us/azure/container-registry/container-registry-intro), the [Azure Database for PostgreSQL flexible server](https://learn.microsoft.com/en-us/azure/postgresql/flexible-server/overview) and the `PlannerDB` database, a permissive firewall rule (dev/test only), a dedicated application user, and the `activities` table, which it also seeds with sample data. Requires `psql` on the host. |
+| [`02-build-docker-image.sh`](scripts/02-build-docker-image.sh) | Builds the Docker image for the web app from the [`src/`](src/) folder. |
+| [`03-run-docker-container.sh`](scripts/03-run-docker-container.sh) | Runs the web app in a local Docker container (no Kubernetes) to validate that it starts and connects to the database as expected. |
+| [`04-push-docker-image.sh`](scripts/04-push-docker-image.sh) | Tags and pushes the Docker image to the Azure Container Registry, on Azure or in the LocalStack emulator. |
+| [`05-deploy-app.sh`](scripts/05-deploy-app.sh) | Uses the YAML manifests below (templated with `yq`) to deploy the app to the AKS cluster. |
+| [`Dockerfile`](scripts/Dockerfile) | Builds the Docker image of the web app. |
+| [`namespace.yml`](scripts/namespace.yml) | Creates the Kubernetes namespace. |
+| [`configmap.yml`](scripts/configmap.yml) | Creates the ConfigMap holding non-secret input values (PostgreSQL host, database, user, login name) passed to the app as environment variables. |
+| [`secret.yml`](scripts/secret.yml) | Creates the Secret holding sensitive values (the PostgreSQL password and the `SECRET_KEY` the app derives its Data Protection key ring from (so antiforgery tokens and flash messages are valid on every replica)) passed to the app as environment variables. |
+| [`deployment.yml`](scripts/deployment.yml) | Creates the Kubernetes Deployment, including the pod specification for the web app. The liveness and readiness probes call `GET /health`. |
+| [`service.yml`](scripts/service.yml) | Creates the `ClusterIP` Service that exposes the web app inside the cluster. |
+
+## Accessing the web app
+
+The app is exposed through a `ClusterIP` service, which is only reachable from inside the cluster. Port-forward it to a local port to open it from your machine:
+
+```bash
+kubectl port-forward service/vacation-planner-postgres 8080:80 -n vacation-planner-postgres
+```
+
+Then browse to [http://localhost:8080](http://localhost:8080). Alternatively, use a tool such as [k9s](https://k9scli.io/) to start the port-forward interactively.
+
+The app also exposes `GET /health`, the endpoint the liveness and readiness probes call: it returns `{"status": "ok"}` when the PostgreSQL flexible server is reachable and `503` with `{"status": "unavailable"}` otherwise.
+
+```bash
+curl http://localhost:8080/health
+```
+
+## Logs
+
+The app logs one line per request — the `VacationPlanner.Requests` middleware is the equivalent of the gunicorn access log of the [Python version](../python/README.md), and it covers the probes too — plus one line per database read and write and one line for every activity added, updated or deleted. [`src/appsettings.json`](src/appsettings.json) keeps every entry on a single timestamped line and holds the framework categories at warning level, so the request and store lines stand out.
+
+```bash
+kubectl logs deployment/vacation-planner-postgres -n vacation-planner-postgres --tail=50
+```
diff --git a/samples/web-app-postgresql-flexible-server/dotnet/images/architecture.png b/samples/web-app-postgresql-flexible-server/dotnet/images/architecture.png
new file mode 100644
index 0000000000000000000000000000000000000000..f84b79560706b1ad72543e879b50e1c7be1c9410
GIT binary patch
literal 38251
zcmbTdWmH^U6DHbNkOT?t5G=U6CTMW&#x1zJTS5o~g1Zw!f^|3UE<uC4LvVN3Ie9;s
zd)HleX4d@Zbq@P%tzGrhQ?)nYYASM=7^D~=5C~KLowNoBgy;(VNYD_05_ph|KJZ|1
zm(g*Ta<wpZw{dc$*0OQ106AE=Qu9%pS~*d3b8_=jbMXlC@(6PYQnPS!adI}WnuCF6
zsP6L0GN`*~D9>4#q`C7nfg*J0ce-vM&~x0sKZLQxz<Zz&+3KzGTM(!`=J~xT3J8?g
zDKGt2%X@A=3*BF9qxot$P3%sVpI<lr12Mk(OGG_<R=PUrll;q;tB5&%>r#Tc9M`V_
zJMaesN5eX{@M_!dknQ>T_Y13%!Ow#+UcNM!M|(wPcNvg25IA&~DU^`bx6dQQlhAkH
z68$G_OLWU;XuxOlChO@eh%ntk_pcm4lGGTNz(hcx1k_$;;6Y6s`*%HWIH{q)<Acc?
z2m<hI{{Z_dqhJKxzjcw3D*m=bduC1mJaAt8-!#-wuaC=5ArcT4sVN`(^ui$XXdedz
zQX-{>wn<v}*qEALZe}@7jx*KM@5d>VP*T~l8Xe|N_+|sr3`RF6Nd2S5*Gkt~R<-aQ
zn)zUBZdSkZaJu?lbD>*-#<M$C_e6GbSU9b(m+yI=kYf7Kf&sW%XgoETd`V}(qKCdh
zp`-bA4@~3KXB3haBa}j_AL93%3|JU)1%@nFu`PR&-A`x|*_mwwsg7i4aJq(giLIN1
zIFY8hPI`)NW0nX+dRD&<obj9R*ots+zpR2sK3NOJ?t3od>#*OgbSWZQda?(mQ4DP5
z_Ji^m{rvm-UcZDbHo6BYf}cG)qa@Wf)wSOmWYAp05J1##-atO0ClqTy8v11%wnQ9x
z_#HUb$2agD_?W?)!Q`5pv@G*)12=gpE1<Sy1EU6qKG9-zLMVF!S-&j(5>kt>*xm1}
zy}0{IifaP*>)9iKEs;RdMG=*TF{(tO`Os+{*0yLa;Vw!!P}4gwx~2Xo_pYB^qO;ts
zi+J;z6GZ(D82{xEa@Ao5-!3!PJGqPMa&Nh!*bNJN;SLBs1Pm4u%C4kN;P5g|bHE)U
zrZ|9XvO_t8vcA&XUw;4wy987utR8jdU3UXwUbdzEoTgT%ei>Qefp}`vr4A<l_i&m1
zdJCQdB?S$~x4I0=s0JB^)(v!S{R{CC`-AzN7ATlCOPU!pD+VYaWZd)_hW3_cK({9G
zAiMt)^$NwtBJ96#NAMdj3TB0yR4$bg6`0P_f!cndR**uDS;TqqC)evWd%1!|8XzHR
znr{Z5s|wB^bR)1|b|Zj3gd>^rz4!z1D=ez5xi>f<mWtju*&{u@8<^2);ujgNTUhQ!
zznovxDcv@yM2P;>>;g;3=&uMTY3#zhtVIA_WB1w;cd((QW?4Ag)X#B+l0zAJNmJ<)
z52m=94D^mD*G3=t^Q*(yeC;Y1l{bb4X9@h-f0*c#&3Zaz_DA`@&C^yLs*NgNT77mm
z4+7nzoAbd|E(S&;g4jJH%YT&53x_VJcKcot$6VHu93a=6?+VWzc5|8G2~16=dd$^*
zv^x-QB;I3lENjICwdK5lbYdiA&k8g3G@3<@I4j<hS#Xth{}?OjW3n}2ON6=Mn<4x&
z4w^Xuu}isGB*`7z?0)>SUTZ1q{7|+BhE-+qft@?a+BWaL6B6hcH5R<$*+b0ZSQC9h
z?1l|Dv*Ti6nUC)XuySye@7$iusHlo5|M1`d0tKRo%zQwX+mLM#&7o43mUc#}M&+>s
zfnI&0n;`;yV5`^v>WQPD5TvQoE~$wC%0+_x3uadI|CflelFapdImXSDMz!`k66nJS
zV4$MyO~ll-MdZo%NFb0EpuF1V_QD#bdL7RDn|4WL6b{jjtrlb!WD>rFwQKqt*1VTq
zNT3i#U?pt#OMEpMrIQ@Qh9<Qx#w1-%L}ozMoKEo`vH`HeQoF-aw~VDz_oE}|Lo6_o
z|Mw-wvuc>Xkv3bgEl{y_Lti&-4Rdoqq~#=TW*HNN6ATPrtCgIx$=X{n@6RSMT?i!v
zZ<HyoS*ZW>-4^)nrR6xVW<O|vno&w35It|A4z?nzBET1%HF4xkj#&tKSOkG`QOyaw
zB_}sW1EvIH7_2;m=lrAg8sQZc;4FucnxVdDZl7nX)BIzc_-oC`{#g&DjxCiE4y@)A
zAeC5@seeIt*}uWM`hNk>bnPu5&LV57F)CZiqP?*pg;@415-tf{!hIG*(1#C*x+uZr
zSLZ8uRPN`{7n`XLED70$3FP~Gz{j?a==^Vpqm3YJejD)tqH$oFlJ*v1z!Bga!x2qq
zDoV#q?~kzDp%>onfW)82f~i5$f~wWU&0@%af5Gl$#sO7lyO_q;VDEhj_y~9oYHH{k
z&?>=uqECS-LtoG?Q4m3IJ^-%9bf!wQ-Sl2c;8%W^Nt+Oe+Td@Y_x)7J{oZ?fnv|i)
znQC_WnG^sgJ|f}Se~8@|6T5D&|8x1OS(2u~=`H@~oQd&E0MGGznVqFt=Z+hZ#N;@j
zUv${hi)ZTS933E4pjqyTC$jJC+l&;7gUK3RavHiiap)kNTVTgnb{nd^nmp6ciapjh
z3BuR*=is9n!x!obmP+eu<rC?JCP5}35HS^?Qux)`hL`>HVU;RRCnFPKj$f+7MJMyc
zCyRv^OI{TWD8w$svKtH2zTZ)rH*J$v4jPrY;HvTIx89A>EVLnBLI$B(jD#W-kT=6z
zYvMbzk5J(j)y57pr!HHEcu1E_;joq)lZK1)45vvf-lT69MXIueJ@1(SksEU25(|FT
z$r-|;X#QRi!T~LLSVIX*@26@$>3UuoIBykQzwPhxg%C!D077#CyegB;DDGC+FaHlS
zMORPouI?M#PkO`R>Pv6WlY+>On#SaJOoA-`vns#Z!iU^~E3d{WEgn_>k#-K}?f1Wq
zqKIF-_;+WOxIeJ2+`q=)oHZ6sdDy`HybRrn!OeHl66of?3+KsqF6@~+tjx<KctD^?
zVCS8?oV1n8)u(RyD*EN}&-PxX-+73w&$BRC9dzsHqZqOlJo3EEY6El`mG<LD7JS@v
z;(Ri~o|pP(?{ge?lpH%=gs;bBJ5GBi%@^@&-ZH+t_$ug#{^hx_LZ8Oj51r?TAWr$V
zCh&?#qv{JB_{DCb6+{*N5)2pz)khej>MIOkmbc9I*$Sa!_2gtP0E0sj28IDtIf;Bv
zVlw~F^ye=zI2;No%eB<EC;E5;hV4@mc11^g6S@?9`jQs%MFc9LxH%JQs9*!^WAGaF
zD)P%|bpN~;Ux^Swl9W2oHZEJSyGEqNVTxTBZ}-58{Xx`m2g{XxitkILlnM6bnRCgU
zmejahs!!a~0bHwfBR<?iTM-w}0VI5GP9XTfdN+#0sBmwrK}9z4A}(X~`q-4<A}kQq
zW=hs&EzswdWOuodywt#2R#vlBex2bDz|a^G3kaRtl4C>`ZJGaspL(9@;T$nh6wH=Z
z?Q5MC1PY`pkZ3<+=yUg;0gRC$7Hsl6ck?ASkq@=(LEceS0!Y36`H&p)G#PdPS4X{}
zSnhb62R_o@Zgo*=@U?v!oN-Nq9?HVp?8PZh=#s)Yn&bhw;Q=hMtZUZNS!KMo=qGRO
z`8S@5ADKdXlZU)|?ubYrNxZ+`=LsmU>CvC~x=%(gMi<f*h}_i_KyP$D#I?00OARhv
zwB>ibyEg2X(9j4XBc;vplGTXmamBO0B^k#D54W3`{A(7HV>T-b-{H?}i&HbIB9a0T
zK!5(jIIsT&bZy)&Z#c1_g<pMlo1%+Hosm9m^%d&Achp^B6m3EPbvy&6gkU|Y8ASSR
zNJKA%>8<nwO?HDi<-Q^^0CgZ;l(o;qMbesv!#VY@BYat>#$Nz@%>C^ZIWf^gq@VK7
zNH?dJ3r7GJKxp#RP!oguqUCW9N`+^vc85ryHggofMQjBRjZdDT2fVoW%sitFNGR|b
zP+G9`u;gN9ee4L92HJ`N=I6EBY!GwYl)?>Ed4;+OM_jH~QJ|MYy`urB4h;aT0Ok2$
z@(qs|c>ZP7IN6tf{xlpOnivEA5gFlc!7_z#mBrKJe@lRx)WpOU$RPy*-a7E<;fNUQ
z%g=yfeEV39agP``X<`g;_J5jE{*{+0plJVeehv9}+*XSLLen>aBesH;nL*T|fRX(9
z=tKa*sre7#cOpQ;_J@K#lmX7=_&EUZpblVf|Cz=4uO2GYJHX{oqXB4Xto9D@DFDKw
zAp*7j>}W$LeFOB|-OD(DGDJ)mm|9d?GrZ#2e;fRJZ~*(g@o~}rj&Y3K0@V6v3_=~C
z_zTQv{|NgMU<hw;0ObGU^LYHHK;lVsMjHr5-hwJHLQq@4pf@v!%gi|cUfbVc{?!36
z$^WkRKTG(3cmJ1jgs=hb>3_D!_Wq3cw@dGTx~w)*HIg>?6z~ez3u{0~e{85IOZE=2
z{^yMTBdh;N66mtS`Ft0A>a}yeGoiD*+w~ZDswZRzDdPab8bkyo4C)t^t7}$71aYnF
zd`|s|rtlgo^B)1;sl5k%Jyh72lL&uZUo{4@+3&{(8M&A_>CNGsr$;Gll)EuN&~JbZ
zLtfKnfy^{&1vR=_l$AaQx&>GRnyjAt`I^A8J%yCgq>PPCdkZ_T6Xd|+==h(pC;>~V
z1A;cm_YP$pTEMDb0UtOmKM~{uoBpC5nT(pVsol4{mFmBLiym}#uA=~9-ruT#y1e21
z-!Zhv{-|?CGM20Y7iU<x_s!|5tZU@GhdL-{pfVVkIWMq*MEH=hkkIexqEzSXwIN~^
zOtc^r1c0F<RA4N`mzPi%<hQuM9Bk32i8!{DmC5GaCx|x?vq|zc|8}4S=w>bNAq%vB
z$koy-Ia%FLP%{DEyVTVFw!q2kBy@0A)-2IN(X~e%kaP$LaLU1BqC?#StSr{f>|Z|5
zD~mPP-+TsFW7dR)YiY>n8~!e`0!Dv>_JQx?$LAO<3nZzz5TNNb5dh<E+(eNL;$&aF
z64PlEz3?;gFwPFDxXcU@s(oH}zXBiyxtIAkGg5iJQoxF|(a!F9glnXWkPJ$-|HS4#
zh8*E*p`zHMwXS;-P}@4H;sL-=fuQ;SD2_qIUb#$lsUeGcVBn9gtp-99XF$;xG<A*i
zbW)>aC_tb#KxJ15RlsM8r_U9Cvo+W*(R!HGucdacZjgPghuaN6N-Su}G&3*6p=9M-
z%pemD0O1ZffpE4qzC~A?MPPFhpO3iqouQiMuArs66WMq+5ajaM)t=qWlwqP+kVSkI
z*i_Gta+tv=o*?gD1-!8u0A>p&8sL5f?Rv)X7QThC5G*sazrkll6W`RdTAm{DSXu_O
z*tYUC%8ry2bJ_sP32Xv4Fi}#P)I8r*ImwNdtC7v)DcCH-AlskEzfq`e%9eh|Hu5u2
z2q#bvcjyJ5*Dyc+2C)a9+uNbSmh_s6@|f~hv@DIq_Blvqyk_GsYdXxI>4yQ>Ob6(K
zcB<cpD03JKXR%dxzL*SO6H4R9xgiG&Gb%GhM|r8Yy7?9c8s!$CgwYq22h>A(%zp#R
z5cZk&zfmR53!Q)EHQogWAeej~FXi7CA6+ixM*aqqb5ux8qQ<;@4b)qH`<m0a6K}%-
zU{YkM70E-9_nYCf?T^1epcN5d>W+Y`Mux#IUj>v&0QMI79B?#8*LR=#ysTu<lIAxM
zq%L#xgCElV+7EyqM_;tjbgeAA!#_O$wD-+Bz#oWA_`b?I`K5<>i3*_fD`33iXw*y3
zXLmq?!(<il-zo!WB&NVXOq7Z`ay~2sO>_$ZBuNIasZX}DT6XV0m?y=Lwm;T^K%DF*
z<iP6we-kvt-?SWm>}+&JO&tk9gjMabs(>WGSylUI%oPAffG&$;fhdNM(9&sXCr)^C
zlL(S@KsGtq9bf_ed{dvDBt<u)7xxf}hhjiub){l~J!o#EV!=ZP6B1XKK1l88Y88m8
z7l`2MksF@~B3+Zn9=aC{{aA(wVxW%&Bm6g21JM>@N#>EM4^p;=k>^1%s~N!Xg}SCX
z?>wQn6KbozbR8oD-6l~tH}K@9lJJ))htR~uxQ={zK@tOME8}+-gPLZZbd@YL_1Dr|
z7f15=R1Eft?~iyx^JFHvk!>A#>F`0E=pSJiVd`KvAr^O739kA;9`j86LVwgkD}#b7
z`~W;&FI&u?!e+e^52OY5sby_|q|DqwekCbJzo(iXX@sk51ZkuXG9s!h{Y%9?rhMtQ
zDbmg-($?YqdO1z}5np2n%Pj*o>Uko9>oGv7{%;^Cov=tVk80i+ysr3BB%i4v?aC58
zD6<TK<8osALq=SZA$Wd7$5_gxfaK5q#9XLJkX8h#C3%nF*XfFd-=u6vC@3H$NouI%
z+e8<whtqexFz9C)89tx<rMU&%q16Q`2jYWezMWkiaCMJ$dIiMO@mo0$Q>)roGsJJ0
zcXwNpnLTjk%>fmq+pY+bK~r+BI5}x$@R-Oa-bgTjK}Z$MIGNn(BHm;XuB;8|)jRJ{
zlC1cCG5*V_MqC^88pnSYyYfRVtTkiHz^z6|jrCc=qLNutBUD)98S|`Rk26vaX0Z$>
zJz5jP^IuleRX7gJZoE%#W3YA;NzIahzzzq7&idls`sb(@$sUF)e~Nbc;NRSit8Ztw
zUU5}bKfVm_jCbO;tr4aAI_{RwRx<Ad$M6pU{UKIe?Kc+j#O&Ka<4G3vDHJKy6PH;1
zMrhTn;ITF8=1TAR3IP8Tb9H&m+vv$M5_`ffJ~G)AE1i#4bN$;E%OD>`dOs0$MoN&y
zplJyK=J^^hE(&Q)BnBuee<;9w`2mc<dffsJN&<*f?hA8*x=*Ra&pNLwPrkfK0`NHy
zu|k-{n$@V~<D6TFv9zS~-^Aw%S86RYb@xv{I76Xc@@chxllF*I)LnmJut#RT-V`~Z
zBU2!WUE*Y06XNDCpx-BuE&;}OYar<*BeeOYdlfUIGKxi73qSdgIM20%k{fDkb`qUV
zGj7|F7<RW^w{@6^Mxw~8dUOLl8zafG?S*PyPxmAHlpWFj4VMVfdbdfh%|4lR1XERn
zP<#$XyqI66Y;t~O-31Wz;}6xOyE?ufiXxT$F#5TpSWc%MuTlyo@m2{iJ|jE&f!+ur
z>SDUUw34_F=M)GaTKF3L4?PI^PV+TC#|u#Jpnz+k2I*otz`#JJ?<N`r(_Y@u5xtgU
zFLVWc&n*nQ78^T8f(l>}Le$Vl8Z*Q8?XukdtPD7-!Yk~kYA{oO6A_D5&9fMQku{Yx
zihLmgfafjk%+R8|luYhqt)31SLqB({H80~#E*EVADJxRkC!zP@hUfh(ujl82wZ#Ea
zin(us*TGB3v7F{Xht`-5Y=bkR@JFc>0B~k+@H8~Na)eR-#Y?L(Lc#(!(>}$BR=7^V
zOpMWh)}%Vni4URmYe#U^fX%=!nDSB@@#pO=>)}JN>uc}NH2<QB)C+L%_qdy*nrU|%
z`8r;Kn@1R<6_cV0mg7@#3UWn)#m3(F>bf@#Kq*ZWb?iP>=i`<)ou#7@g`aK84n=N2
zuxNJrbjx%NkI%PqI{)%z)edcl1MegpL6{aIIrc_Z>`#4X7}sCcoE=gG^Mw|PszI>-
z#SBC8oF)a7`P?kjR8?9<3$G5`0U;%%mW?CXDGw?o-cm=D=`I3X6GUx~&Y|m|$z`|9
zWy3t$RePvNpI*%WB4GLIuspjJd(UrxNndNy*efZ%b(1(AR_rI>6ZaviqQs}5Ss&A)
z`XBagk6x<G6?E+BXPhIi8O}b$xw}dP4-#H_z(SwsBKH-{OGLh{hC59-P=EY10sVaT
z6i3Jv6T(t*-;#fXhg&DCWypDl-BfYf+^)PhC$hXJcs9J#{^*Z~@=w_C)z9uCdYb)6
zoU1J?sHxTi2nx4MT@SrG3g#v#L+8WJ**lt<k<h2HNW7J!zQo^Oi7_bCPgMECNjYP+
zrS_P_@?LQ%H!q)Xt%IjMLR6<_0wZFIT2A?>q+G9Kns{aKQ&ja+HY*}{bWkHLS(vgC
z6&1Y5HY;5T8J0uUOkIr)!ukvenKN^4hQE%DT^}b0WNmtf{n^60h<vSNlpWR=F8O&-
z0>jGm^fMa4<rVhe8CBLEReG)IW7vxP%o$aplSGyLao!p51xjT|9b}F8xZR{7KvY)?
z3E~uSg#;&JFAGb>5z?NBDh*Mn3L3q-<b=hJv3GEDDR(@7|Epf0n+irXWR!N9Zxmmg
z>zL@4#u^c{(z$C$SLQyoi2IVLntDei;OPk5kc(zBu$t(1Q?V)ca6HaZ8rO!sCDGC2
z&n0<aLHArcA53N2>SuI5fObeCW81{5A<UGLc*s9swZW>?f|=W~-cpB^(8#KFo#hrb
z9~Kl#Na0W-<loeJe2=f29&sXMpA|EIjA?UvjTT33dM4*g$YA_M%{1s~MD%I2{xR2w
zY%>TgJ4Ed1?aifB2C{^(8~xSz|6|b$k0YDPag!c4)0XNb=#6o0PM4fiw)K7tc|{KB
z3>FS#)>AutJP9Ryug6Jv2eS&cek@QE{2q*>Be}_-6bR$C-OW)_6`C-6IUsiOXXB?Q
z<`h8Tl*F<4Vir#3EG}nnN)kS2!Ei6J)SXBUyzMM5Fzl2cWXS)?0*xWBMK3lQ*WVr9
zXyzl|N&e+Ux09io@bo0Ng{tdAi=@DYLm*{BRnNpelk@IfcOGm+3$U0W=VgzZd9Ws-
z^2O4(j2TgUsRzdN=hnKr_2Rofy2tTyi?WXga-~uM>r6GrvAa+^`!a8SXmOD?sY&=#
zwWAMLoRNihQYz4E8wUuvK@21XdVHI4OYCTSANl$F_3}KDuFEjecbOCmR8_x5{}bPR
zh=pb1?RYlfZiK_eRHxIdE|tV#N!6N1%o~%Vc_Ui2{%7Mk@0)OepxH&j$wT870)N$?
z{ysB%OOI8)g7Ia_>6H8oEjwpSa>|qEM!)XKNg!KSTbZd~GzDnoMY)dj9ZyiZEF#hh
zTVQ%^KPPO+WF-EHq-1O?@Bsl}cUZ~ya(d77m|rS(Ef||tUO6w>dc)CQAbwhD0n-%H
zl4gB0g;61&yg>t%h4H@B%Tg&Nin2a;P1AWrptLD^4iDXF0^>-=E<d{oe<O_mT9Rbd
zPXGR$=Er;WmF}&-A6K*~**IEfmL(qjdwG`2BK!_R@`L+&U+cfmz8~1pkGbA2`VvBX
zc+r`XA<9DEMD2jqS)q`m0u_jq5E#%$d24o6q`8&?KJ_Eku(|L>q9XwH_+Og0&t@%S
z7u|+x>F;@>!?To2VGV0Zn<hcBuc-Tr$F}+O9t6+Yftm4kAL-L;6l?7fhjz8m;e@6-
zj3B?a=5IakBxXrSYzo-@sSS~#gZb_RPcnHmUym6sv`*C&(Jx$|QkX@}sn!5rl14RZ
zj>Eh0&-+-Q6+r>}+oeul-g)mPm;_NFzM&kS6z&vsfc!Jl`!k5#gdWm>7EU$}St9ch
z&)l~FsVl7owc1JilKQ8`oEAy*lR>YdX{`X%?96~^MT=<%!~J5^)UBwiqUk81MB^)H
zPWp=xGyUZp<4&3EC7(;7?;|<(B$^{`6Lx&9#uevR1>gXV67)*}nisH9%SkfgAR>Iq
zmdXAo-sYw{^}>D9uPNh}{E%B$Aw;7=Wb@1xaMsc{fwJ!0(^sLW(Ip=U@TVxNM>b3R
zD1CS&UUknP%r7`6`{uQoOS^8G1t7_=>9%?fS<eyOP_Ec(`u5zL?+tH}BH5i%is>!$
z^1G^Rdi3m)9y~vFBEZ6uwV1qFsA#LT&8=vvD&zD!Q#nEzVG@$TT+l<dmoeSJQpJyF
zESHgYQ=FmA;0}I(U&p!JLi+G5-l-H^&W&zBkNRUMtNYeep1&O87rw5U-d}Y*+?yDt
z!F8OuUBn%4-ZXBU67K!{W$$WO^XP~w2X_wNUAwH6?5V9RaaaX%4H<MUPB)G>*3lc<
zD^4o!Q=}-T9ON(HQqr(z-PAbgIZz>%@`Qx$NY4o;P2O$%PO)+<DW1!;sc>K;wM(iz
zdAHHM(bYv3Q2XgM+S&<xm!XUJXQPpSxUcPmg~d-WM7&ZY(0Z-0!X-EABv6;!o`17Q
zfU>&Gtw7mZaQ<XkCcpHy<M;4E;5j7=TgKfl1n_JgzQ_LJg9@cPdy{{UHANojUbIn)
zJZv};M$b^R$<0gQZ}!^QA>DZHW>fW)e3#y;Qkcz}`z_@xpD>je>=+*XUTe~Tc^U>K
z$%sA<Wk}L28%i71`R8y~_V0P_+ySeq)Z5u-dDNtQ@v&9|8J|+W!RWyZS#sdW775q&
zcT(!nqit+`)h!iKX%;9=lfNNqKC(sdIfI%u;z>2FwKxjVmn1PxNfXzxykK-Q3PZ2O
zvxG&e6JOmMaf|(GvNax&>m3BU<)kR9-`gOOn(9YN_Wb=(0gUUs0xyl$xr?-6%Iaf4
z0?voN<(pSlXE#0RT}LHPOV`!L!~w)K93>r@Mo*8J5ZY9jO3uTX!vs=tqU@dPA>Mq+
zT{YLkYQsgV@q49O^Q{L14lb)ZqpKxF71#)0qy6*rMo%$5`J8f{R$rahPw8z<a0NtZ
z?X!LsMOPnFJJuz2&8mW5Hrg;<7qUIO!ZD483I88uANATi5YHa!WF?rW7}}dg&4q-7
ze)_l<38huC%nzkUla`iz{2eF~Bq<B=Bp`Yjk<}$$imtS-H5`(kPx^=4kmHnr>1BaK
zOw-M%6-P<m%oBU{<Hc;^sMY10z>bXdk@nY{kz(W9vvU+@p+c*13?+R2{WHjx1IE6;
z&-Cl4xtI!t8-w><c}x$~f0tT+?`{|ur{RwZ$klCs#Oi!8L>KVhequj|YX7d@<5#+B
zSawxl&@{sDTtlg1Lw?<*3ytLwMYD0d>cG=*qMr47JL@P1@1X>K6!jWyZg~?D1uGM}
z_oX6sVg`8LV|S2nPj%@P@89ti=SWVBEHi6GL2eUq{XE?(>+5C3HSIH5b~UQuHVOp$
ze<b}1F<&ia?9qzfK`@_%VztL9@J9+aaGz2J<gHdRd@sH#<?GAnva*!O?)4i^1_68O
zT!6s&EPd=|0{g{s@yj6^UaxN4dY;{4c%dbGZ&8uJjj&hZ+<KdCl*JvXA%1Kn^*Ay4
z18}OTJGtGL5$&9p-cPa1Jk2IHH~gDGbS{hhR<y!8&Zz~=kf;pylOvkOzF$yP7HcE)
z&LL4ZfC@T^>PJcXOmuW-J^O&!!pD0IcTK%7X5gM8aBk@DTPk##uzm-e?Pm|R4#U`}
zlQ(r-6(d{5%JFPvhYNsv5|M~m<u=3C#RGHu<YzAFZWYPv@!y%wV(Ar!2=ZNRhWhll
zb+wXwc_fwvmYMP5$8D7ao!u8bhG~1EHTK-B$na*a2Rs)o4jL=2?1kv1IAip5>c>H4
z9XYgu3mnx!g+Ati6|8K}{1!o~vlT&4`9Bo{0PD0q*UO6D%S)s4ub|(oXDw(^1-)_p
zX2Z-N$$skU2Wj_*(ml6kK92aFCl_!AC#5=Nh|1TPu%bE$bSL8_2w@~LYUx~lo)JQL
z3=jSmClS<Ab_Wk-_G%7EV{W5Y=7-+tiK2Ku97m^2aSw^sMA%dqv(GpTsbJ~G)Km^%
zCa~r4lyzD?;9NuAj(9)ihIQ97aDq%h>iIbu^PWrZqpbsN)=EoQcvScT*9W({dx6Xy
zL7rQ5ef{se(Hw$izo#<^m-JjKArW!&Y^MWi{qGew6Mp$5Gutuc?aeUC``LkNUG?@B
z6&!_yRxc+*FR!vv#1H60>4wq?n|e#e)SIs)-lplDB@Rv$38@}(4-4^g`1G=IRvd&Y
z6_EJGS5`_HG}%;T8P;U3rZa%U2!a73vCMp&eA>_e94`DlM@Wd<46V%nd6{A46U}^<
zlG5IQI`e3<=+#r_(XtS&mt)>mOG+B4`zfdbw7mNZnO03QCto}8^6;TlOemu<Ln0vP
zfiOrnGMUokwWzILXyyLs=+3Aq$RBD+%Jy|re@Vn>V5v#`k+_H~<Kr6dA(jwR)!%b>
zj)ZOb(OgO5I|vHp$JGZ;Jfbj8MEdoc{i6M==~l;ci}*&L^G0KmEqaOLXGA#e#pPh^
zGBWN>4&crO_n*}B7Vvin5Nkv1M0p9FW-<-`IBV8+ubz%t95O*2)|tJM3GfLTRMswI
z*CYpvcY&d#>TV&QfuTA%@i2fzq|Vw+$3Q|=jqa0_saUV*s@wtx3-Ud(>#G}-peij_
z3HsTkE@GPtGDFc=_4^2$7&$?|GpI;Z|4b~_4QcBDL0626ljc{&Wkz!u{ir>X4M(=`
z-K>hK<wd`m2E;7%hGMr}DXRlClMPAxEA(=q<A#K`<zO);VRtm`<>EG4HGg7DNmJyA
z9FmEOt7I>UOPd_e{b!*ZffD|U+0mt?woQElGg8i-kR{bVws%5Xeejr5zwoV`fF<iB
z*Jh&b$4|qa54Xe?+^SiQM&>EGH||72B7)}QNc$_oirEtSZBE{ShCbJ<^ar_4eC`)x
zIlNQT>-hE?<|XCcs9+bmlwwu^D)Pm`{IXz=3WVqlcY!YF;)d6qef3xoSOhEj7l><U
zi3J0+YFMyb@w;B^F5-ijX@kf&K4vZhkhP4QM9gM<{(~Q0ILZ$x5!r5HzQuA+E|s?*
z2hhY@EM|@i5*FOn*HCYb4GDtg-LY%$UCW+cv<k$boRx69*<bxE7vB1*dgPj%YoSS6
zAT&=wqiQnkAYwiFcluVUV}lL`NXx~;I*?U?(3&~cNxM0nYSVVC9u?IXub%Rm;%q_+
z=8$ryNqs<P%&9kbHl-di0kf`_kDr{@xx7dxWP9w2T5$UT8Fm!6R=}%>eO<P9dThdn
zwV)404dQnLkc3k^kE=|-bvr!itLH+twVU;u&h_N##Y~2v6ZWT?>HDQsxyVbJT81Dn
zLvxyhhQc&Nr{?qTnW|>z%7@TGNI_%!66B(48-4h}?@GMUmoIUWt@|Y-UrxH*H}c;q
z*91Z9Q6UYdM~f1Ke*GwC*`<eVX!v0`%Jj+G)7o|7OF}2{tsC@R{oOFY;@_)4!Uy~H
ztLPBomQ0MRodyC{+Z5M^Ei`a_?GW*l1FqMGf+nz1GRYSn!KH(vm{eZ;=exb51>$7W
zI>c)b?)%hlKz7CfCgZqp5RI~#)l=`VsHBDOno)vl3SAHsj-R$w6znNzWS{7UTzuOe
zG3~g4h%G^btFp0_F>&S76=N#i>6~`*O`o>AM87$4O%4AlMf{PQ9meP3TXoH0hilK9
z6voKnRH=6x(Y{V|z6r-wepvk;fsJiTY}MDK1zBrK8W_A+an7W1g)p?1-fU+(W_~AW
zbPHbx>(=<YiNfgxa{76ku04MZ0(*spK>;n!#-|XzZdxvGJ+{9HY`JKvZMtiImgFJo
zqevq!wG&stz^dDz#5{n8e-xT#f*fI7HagJ?SIi`2^Gr@<+@qb%WJ0pYO7z~=_h{uJ
ze{f&Sz|NO&)yy>JNMWQORTTH%f_-US%Az5Pv3ZWltMu4-z-OrUco0J*eb*>3Q;O5R
z2;`l9D2=@NrnTqpE2S1u<0$5o@#^U}Hr_y3;G@s7RZ88pT>{<FLINFL*bJoz;3(F*
z20q~^F3<QE1{o)$pT5x?w7;`mF<eWSO?>yVh%-AA5i!z<tkb7AB(-)IqKWR}s(y1@
zwXe>>A>W!;JY1^1q51`$o+aVKcQJZ;I+9*%YZiB}tpd9k-ExfCdNBWWP2Fd22~qOq
zMC|gS6zA==vxP<0Oi%nS&dc$9s!`E3b(?al?STtm;T}?&KH3;N4dSf1d^C|<`_lxz
znksHRk=7iXnStp$MLos*G&)McyvKYP;6bJGG2ejcE@czr+f61IiSLPvz5m_Pz%0IQ
z4_RT8xP$l<T7FsOn{-4Q`_^($N)%*oQdeXBaGsJc$6h0}XkRHSBVSCZ6p{F?Ly6kI
z5)z)j1VsC_4{dKR;d*wvr#l$az(oTGNW7&btSIp4zUJw3UW<JS=DmXTp#H-!?I%Yu
zs~@HT79Jh$Yp>!3ksTl_d{Ny!Ug26*mf+%tvZX*Uw8BYR?Az;7DAMF*!E!Sz*Q=~b
zU9fE@fkT<Z3!Gq_)Y^s%lNepi$^;9)1smq!NFDi`TVBRJX@-zZc)Bu1ZFZ$iH?rE)
z@gG%*FJHf=ur<-b*<?>b^=#eTZOv=E8GXt$3l1~~zSbU?KN)c_6c{v$erDV=tL+~C
z8d5|mTX%%aV0m<Jp0?s<|Ai1&X1x<Quhzg-oH!dVeX)DC?9eJ|O=?|xHuOV|up9Z%
z4vF2Ts_7m$i@p8^LpVg{w`1m#U2YMuQOUehSmL(7P6=q%4y*rakVA5^aPUacj~c8f
zpeRwA7}rYIBx!pcE@>5@<uqcj3s;FuPsb6O6mF5_@Kt9UC((zvVhC}~<RHzg>c2h?
z$*#RU);{E`w)k;7d~tQ}HK^Q}L8VR>Y9D>dZ>NyhS2J@fGwh_Q{3AU6&)}hE0mD=i
zSPmv3Xg)R3x-n~Od)7PsbhP{FsEWYTjtsU2cYwGG_t62}U&k@=-hD+gq#I;fH_e*q
zwoLl6;g;a!nOj7*J~AOMbG!xjba&?!$fy|}v1VmaI}(M$M0b`{9<IlZ8pHI?NiQ{)
z)AA^SYE|DPUcm1(%;bgxZhjxC&M8s8_|&eI)Q1xLy9|4JauS{3aBuHS)WFbCEW1pj
z=$sQaX^Vn>C%X~={e*<{T9tgQQ@hl_mF#hNP0T929-Ej6@8J&v=A@CGire8n39jHw
z1=O!>L&5k$fTA>^RvB~a#yhwHev&qz;!1;_pcLryBPym=#SD*uW7;%cr;zgo4M+$Q
zac4Vg%QbHOae}sZl3{WFu-0&U_a+aLz<Faw<#>1bn{Cy!vLcyT#y^0kpd2emq>!01
z?l`?687xaKVV)C;eMYn*pXx8PhMuw4^x9N4P=qpc@M2kart7E+>P&qyQoFnK;=*C6
zSmCFz@42<D?QW*f0;_wo5l2c!a*p_-+3q`aY57B=q+Qt2m92I{Hdm2ZkWxw~?^%BD
zp-~p((x%a<2h+54XS!5=%W@^vujcNK%~5;LSyeSgi2;v}oQy0ZHg?6duCkJciK%bv
z_<UzP@B4RA^aRweCt){tf?anl3s+RWz4MygeSbKxW77$#2HD1o<s(x@V0*`z(i&tQ
zxJA}W{Z%u_7Q0`5Win{6)0=L5u$AttC+2<6=97`0DV@!K%}ckC#+a6psS^+j_0|n{
zb!+k<-Q&F3V;B9b#r(Eo9m|(eMO9h;-IpsNQF^YSv*U?#ULsQ_2f^hL!PjO+ZMy?$
z39l!L<9=Lk7czc^FwmsL;gHF<$lo0|3Ep6(FD-ROmz@hl+A}LIQaN!JywV;D8?LBm
z{etgnHh-39y-WFW(mth|d{d(FwJC(CfbvAle&nY&<>h+qnrZ42MLk;Mb+b2R30#bb
zB88YtpxmG9@f03E?EiT0Gd6ZI*v#j^you^m3#}UHNU}L)L@x@$7CMb+F@Ctu?QT8&
zW4ur!V%E>bkKRlB$1Pyuid12?lpfPyYM^&`S~>2$`3Gm5jHJ}-t3|Jz+Sj*D3}wSD
zlaEW;6YIaed_fylojrXxo<-BuYEqKboX0IB>v0rz-96oU@;k4kJD%8`wxTn#3)ub<
z3iZ}YhI;?zom*zZNaGsDOKWLqIf~BFsj!!6Q_#Y~mg%Rz=YhU97*TKC`I*=)RCozb
zu7?PUV%-1w(;22YUhujg-^cH}aR9VEtyUrNB26V<(=y&RtXj=#gdFxDr@6JGzqQGh
zZ6Pu;1S=9v6MhI9j(wx~S*A$q))M|KaH&|DH6r@hSL#c%)P%k)QJIv5#}|*i8*kR?
z?$+l&Lx_N!A%sXxmCotbTO}&_w$x~RF^Dy}!Rq|5cDpF(C^Y{WLi0xw$PKq&U+Ed-
zQw=$?&-VP3lp%#7_c*k{I<M&KhCv3Ja+V<SlHP?fgoz`GfH2%R?YcricM`!)_kh>A
zLSc?~A_9bGqI-dJ!ZR$omVaHaXG#B#Ncp1V@g>U^w6sOx-8<(g4mrK@41x(RzMs7O
z8dg!uN;OuEPlx*j(NdZZ*yRvZR8(48+Geqn-2Hu~r5u@&9g@(K4WXko?4_uPh|?yi
z;TOgm?=ENuZv<?ar4)XOxOlzMe84EO-x|(QefMI)eT(O{Dlb3(@h1t<Fs&Fn3$2<+
zJ-bQum-MTYy%j$u#GKKPlN%a@lX3e9j3g*u>Lw}D^HONoA%5*zO-#f;8=(yQ@ulcV
zVfFD8C(pDLwUXeG_e}tl|8s6p;LrN{o8CBD@yvIyNl+<zX5}jC&dyFtmLl@0T=!J$
zyG^QFA)<6Kx_I*7{99}|WPWjy@6lh>%F%Lawd-quV4U@CmM3;p<xeb{kF7fg2cw1H
zwc#EqNlWDw6{L#{%0rGAyC8zm2@Y8a{Gy)W*Kai+dVgHO_0Ce>?$WL$(!BS%*QU{K
z9H^s&B8Je=34d%4dH?<v@~L&XIBM{A_nVBML)oa-*d@?TK}#zUJ6+-PTzZ>mOjkM#
zlO`vKypc3tS5qF*ni*uO7(0#302%s-ggT%|QWvT{6*6j9o~+7qnNCV@FBdG2RSszk
z*!_)ppWa5*@)YfJ@G|E{CR1KFC8pZ+kY6@lsx?)oa*cuDN5y0o6w^H1N+p}xL90wc
zfSBlFYxwNBuM%VMj(&A0<DL^N@f2Rpvg|?nt>|r=)w1p3@*|;S3)t?9vv`iVU3`2k
z9d7!rwq$QD1_KttCERF#T<om=E}88bs579#>W9tZ1ees53RXJ@;&Y_Gp=<b#ewI#!
z0tx1LAX3ss;b+*WMkW2o1da)CYbqm|J&WMz0_!Yx(iyn7(q!>|NIwe)=t|>PG+z>T
zv|U*KGu)g2Xya7L#aqpuPt+}79BJTolQ<C1p>g?N!o~HBD8B=Rtp6z_`up-h#bkvI
zZ@e}_1-LL4!>WhBqGIxXyHM++pEXJXXyZ5*+lU!wC}gY&%*k~!TYGC682G`WdiOZR
z!NK7p>q|66z}qQfUMvSa0hdJpApyAtoKCCd-HK`BFed_U6n|(NDlpC;#DBjm0mp)9
ze@Din0&eQn0vEr!pZi0pO@J4F5HP#<zzgED|4%D!t^g>mDtCGgtKwIe99&TLw`)jO
zU--+HF9X>ur1M@Y2T@B*Bfot`pxRPExN(dF)ugARyROF1$|fNmMZT+i7RFTm_#pO-
z5<38T2nXNpGzd^B1+6n2)pThvCsFwyw-<w<8k(A)9>5@~R|4ukHEwDW>SO3{ZQ&6A
z>!q=uidzF|wAb`;mM5;$Cet5^D}(4X*rO7|*3N$FSyA)9HAoa?d*uqT%`{*pY(mqR
z9TMOj>Psam!}i!*N6&&N&oKs>FO7*UES1uEgodoqY#`jJ;YA$2B`9JpI#C}_$a|nG
zudd$uzJ_bI*0fYTTB>-^=tPV4XwOg%X&%&OPGUEx;}jO2qawmYl&XxoJ8T@D$4hB`
zyv?||`MA(0YSo3Uk${IXeEGiTjoY1xt^fLdRh|A;SmTlBo1&d<%|OF(ZdxH>H{0Mc
zW!xiu%pb6!!GY5rDUIc_hRye?KO`mB&Hup6i|Alh`qu8D(T{Pr(157#kNbA<$VX?}
z2M2New2Vg<lLG9QJDxej-j>xF$(VmH9wxK_=REs;n<_;*nS5gHRNcDUk}YZ7Q!UwV
zFO<`YIs$os8VcE+dVYy#RtyYnb|T3td3BabQL3uvz986hhJ2^VhXnk-!hm-iD?|tk
zV!7f@NsK+C4g5oMsbVPUwn#SN75T4mHv~Of0;KUe*gmbCL57VFD9A?_g(WD`ZB-Tg
z>2569J+Nxru~F~z{N>7gpwgLF(=5$wMnzhW4@W^q+uLZDS0Mk__FHgV5f4j+{VJxG
zI!<PRF`9HgHV(%Zy>g}gnfytNb2>Y^zA<C<p^QBqmGLTk9`SNGZ^dN`hxHxyz*y1N
zeQv4E2-3wN9v0TjMu)RmuAh~&DYJoeXzU)kl3|j9bglW%mlg+PkmpHO-h=v|ojh=H
zvd<tKo-f{Yy<g@{s`A|X`%hQNrn3jtB4XAeWS_0aF|J(b`S*+a{QU2Ocetc=HF0T%
z4R;9WYGbo&i$_U@jCOT1|9E>_ItKm`u((TCIwF-|hcXWgU$n$>f$9IbZ`gUK6s!pz
zh_#9)+sx0j-^Javu?Nt>g9G|&|H9NWN{NBCf|P*XTtFC&a~<oJ(<mIc%sF}a=Y!{k
zlDrC`xo6a<i(o9D;Rku5dV2Z^S>LLYimGr+H;6Qcaf_&%B6u=+Kz;AykMHoP#r~cY
zBBG2jCm6Zdu5=jBA&{*tajNR;aYslZlN(HQJwu0RujXCwitv^AscmGq{SFNY2_dL`
zGP%F;R?%{gRI9WbGCUm2JoJA-G&)&a5u+>s|6>6D6OdV~HyfQ-o5*9%Hub{;@sv~(
z%*v2|&|Fi(Q-ya>Rm{wAIcpdhAg<zCQ&hEn(ET2lUe9P@y>S0sJsqF;sbm-@!{(TU
zP+yTvu=xi1gKcLDk?aD)C*Y#*u#<Mli*-&D1;ORrjgt1n>vzi!MfLP|6#`b#%v3fi
zioboD7qn#w7P3rvt%@+Zt%tbx<7nkbJvY|(ZB5eR4N7MFVT+E!6KZNTAAjfBp4I!a
zTN<102tQg&y{w+ir5H$i`@E7n@+Ogh_xMIj&1YSYnQ9n1YY}Oqqo&#an#zryUR*~t
zar8Ph4R?G&T=3CJ{1|ORpAX9uJfsxul1+Cd{vCRET~K_gkpNG>E8hA2`YN$;UOB1@
z+i7U2r^i{~m+;%sip&m4MKG6HP-(reX3e*c5>VeTDF+^H0-im4j!@Ucm`|Ap%nnF0
zNx&Uaoz33-dX<*wdd)R5{W~PDg3o5^4XZ1|mJQ0!mYJO+05WI=DN%ZE|J171GFgH!
znONtd+gwlYkL}EGHIZX8Hp!p@o_2x1D5&zG343N`7QhE?80zO0lG7{9{0{Gi@Y=l{
z;ucShs~)*jdSopL2;fU`s;iCh#Bs&Et<OqMt<R_-N{<$7#dUfY9<yp?6`e400rxzQ
z`O)3Dlgx94q_34!u`AiTaE~c7nV|5#VLq`F8LO;y`p1x3p8Ahst;wkvAya#>i)M0w
zxF^?TQu41&;vDKMDN20;?!FHiAHdvz3wad^tV6`}2upprxI8?PJV;#HARNfbaGbSt
zjA1i}yS&j#a<cKpGsmuOSD&_v?&J8~YIHFXvQA;SBs_0m6y9^JDbXWAC+HpkHAJF4
zr0P<7XiK6>JQZu}ZW$M~&6y>xmgsUoG<Mbi+j`v^B`g0l+!~c<I*AJwjcTvOkbD97
z+c0*c7c$GmD#Kr7&b=W*05CXS3QbPCKG<g}*O`4PLY<N9&ZjkKJw%<d?bZcZVlN1C
z653R}1#aQSdiw7LTjUQ}yM7i?==tI4PH!Zc=y7i+99rT8&g1K~aBP0I>4*d!RS<e!
z5&6V_z(V`%{Zs?u{NY16I{AjJS82fB;MEV-uxmY=pSW?5;cH(w;a_LlQA5BYIa;ew
z^-6=CLKVwRz@gw&sZ(G|oglNmFO3PDPieBp#gvas;zgvEx2EQ5?7+zQoBW8AhCL@@
zpUq#~z{yzNu{*z&aPnBp16y<6YeTRJcUgk(W=zrr5vtY#KAjaS;?G1()+=JJXIfa?
zY<U8XMkLJ!E;~lCz^-Qwc&v598erD?xh1=0@y=j)4bd8tI7F{V8ipqcL5d7(0mIN=
zWa2v7A$nmK@0MP&>2rcdhP7@4o7d)^<ycCEpcP~^;F=Mz_w3ibcArLmykED_u<CFt
zx6Y|w;F}OAG~yNT$-Ge-;QRPTA4LTqCc=${+gg5p)EpkGhqc0%YUs`pVJ(yGDhC30
z>@Tha`P>^gtc5c~^&CKVa23RVoDSYpzfeo$3P4~G?y3;-I^Teef3kaRm%gyQlVkjp
z{Zj^}L!+SeW!#Lua{Sly@VETy4FpCsR^HXlaH6}ryUAd-AFJrH%ex^9^{llaByvx-
z*KK!@EI9i8*p%vUPV?B(DARX(R>eiXan;q5m&1c`gNEN@<wkSvt2g((Quc=3(9eAX
z9@%2L3c3f47zPK_f8`5a_{z%kn6yr+S?yGizs*<n`vM4SzjpVfA@hTPawqCAvmJYM
z74}Y|EyRkt)lpA+6n~H#U$MMONm@>BWangce^%YgfUMcxQ%gfSHPGhm3H+H!E5Q0%
z#0(lQH$5&+&xFp7?t4-i<(2H<H8&x)67xA{YVMN-Tlq2rKi%O^p2Hm2S&zZw6xQR~
z52c$UWJsE&Ne|a3Jzy@*J9uzk2r!{5AoEjdh-I~0JlE!LByfM}6;P0ow21U9Tso7S
zB|U>iSs@X~0Du2Mlm0W*{Wd!=z$+)$;Z0DBq47Mo^U8VK>cDnz#+vrv*W?IkY0n}Y
zUef@8p*H$@eBk&?E(7PB2#}vmw@jkx{(?=+D#L5+$cU@#hY5z-2D3c^Iwzmq;c?`+
z2n$sd<t_yQvuaZddTavD|5}3|AX)89e|{nyWS2HBiSPru5~DWqm4_zT;umXno=$B3
zyXg3SdR_-D#dxisRw9YFxBP=An{j!V{kM>ft=D(O8Q|9`-4A;ezjn&;DuTu+#E<?_
zu7@y6y+p#gk4INaPv2Jbg@WJUUOzxeTTd9=5yOP>+*-lckSy2T-QMR(S<6!~WiabM
zu--eT@W!*b)Y<SUhgusPzPPD(=wc!&3Puu{Q~|kiS3V9;em$tW`sYsmqvIpF_g8#7
zvqgxk+&CtGqXtQeY2cqW$Pt%q3)^OkdN`u)AM*~^2K$NYx5EUw9@cAq?Q7K=DkKys
z=&P*z!`<S4e6FSE_#GMWuy;7DauE=yAOzc=2{hil(3Dcu4M1uEbDjYA_q?A^AzzZ*
z+K27d2OPX+FHHC@^BKAp=;nn{S_GRF_W=FY=w@omV<OD&3vzS19X?c2iA<&tkvQ$>
z$=Yf}62LLQ@i)S|o}GkBxhtFCuo{%2!^Vo|?#LI6%Oh3NI>k=Bum!U-69hYVBr!V<
zYcYa5ei`5qw}AB<<j%WtJjtCX!@nkrd0M&taR_&P`E=Y~#O!cI&23wJ8VH&4wI0K-
z-`--;l%~0j8g7iqr1IH0J6v8A;N$9;UQ|cK`Wr0NUBZVNJvYO8mMDlxTV`BLr8~to
zdX!#r=u%X#459hp2i)w!yp{u@)s=9sI#uZSph`aj`X+0fu~)(SDP@)Bf@1&#R`f9u
z-0|<G%CkA_LM?FnVq90L^c}}0mR@$w_xNrOe$f+}zUU`5>$$5)G*EhS?@D}C{a702
zi=C;#p1EXPN5iERiqcuTD>0#WnQ+AC6a=@mCMxLJnJWEKXBAE(J{NEl7iR6gZ&kqS
z6!cSgnpq`kO00}#b?Ils590PyB62{#4}yF?+^Nwv9Emq-Jq%8YJkk5w)@(4@K4{j)
zY6qp<-VJk*ODrUMxUH}H;eIa&890N685~ZuYX7`FF0|EQY4%|^boTpoFw6at&D?Bk
zERUm9Bgk26vNV24FpOO%SEpW$flzhf(iRA(7decGAuW?@+Ojo|dDZoXLDL<*6i<oS
zgo78<)tENM58v<L#VxZo5l?<Ww-LHaqE^I)rErCVnp!<9Ftjx5)$Gmic!_Gpy2{jI
zfeL)E_c)hoW~=M@ou8jZ&w>8M@apH97m=I<%SFGTyhMIKSj|k%nd5X+zHSt8?cOCb
z9X5mG$OYI>$Vg3@RSTC($9TQubwVx9X$>B6ZxR{#`tBbsA`-nnc7bENo-?hb4@_0e
zxi{oJns43kz^zn`ulriXMb98R6LxH34cbE&@p*hb9DI}2a2?mXi`s%=qvBXOJ>-?^
zt(0ArD&A~|r11AgY;_0e`sQ4HW+4zEQGBM9$mLqn4_(jYzn%}7f;U{M`*9pbqRJvw
zSidsVUN-CuNGuYT-^zYg;x^i#O@DAqvRp2YGd1MRBQt&Xa*Q#;VpEkzw9KH~vRv{N
zUd0?*wRi4P+cg6;(6CAEet>7VPKE34bN;^8&G(|Ei)6;6ey=5;*Yx!CRkt6FZz}fG
zE}Zq^uT%CkD#n!@&L8I<wI%kZwhLQK7waLD16o~t=#(72j!kx4+%8&)=hrfm8!8@E
znJr>0{4-P&w7tsY<m8c&=eMs+)b;eL22$8{v$9Qzr^4`BukC~U{qF@cdS6DhSgDDb
zEu5}IX20!R;z$}kq!3o4J<#Nig!FOi4Y3Sw>weNJO3H3xgkO6)o1~_tGe$(6HW2KQ
zSuQ>5-Q3kalMtglAhX1ry4jm#&RU<KkAG4-!b!+xjJOgHvT{F<lJ2E<Q9nH~?-<k<
z3le`dI?-HXDl;mO!wZ~zMg1Jp7txQ$d_GJ`EOge_s}}Q$LH@iu8tLi!ESG1Q@3n#@
zDKCCr<US1Ie|PD;Mc@2Cn0o85Hohlrlp4h;?ozb4LxJM%9vq50!Ci{Gd$8i}1b26e
z1P@x=iaXqVfA4$mbN|XdyE%Jg=giC*`HaXg_ktet#GA=Y!nl4~ipq6z>=bj`DF}<~
z8%y>qK0Y_I21SCS(0E$|7n5d9w12g;^AlVdhiZhO*LxV_q)wrHyUMBGE7vQ4u<=n3
z61I3-|A~L|PL5=;xi-{f7^FA?Vb{&mI@;Mnx|<AJuk?2h$DL9nrw>B4)i87}{m;Xn
zk9BUxIrN5~CQK7xUb$gn{F!pD$HsvRdq;q#=CCS7Yv1vd4@HI3r7xoOai$|n#dKxP
zc2%*{L*$^9l~rK|<vV}9X0o5FV3(P$iVw0hZwmu&4OA+|UhzgI1%)J(p~Yz6bX?b4
zo8uME#X>ssA@63$==Dc!wYav&L@)92>aMR}CAl4+U?({9vxy9jtNrP_+W{g&UsqVR
zouF2Q;P??3xmr$v;C#vCZPeO3cgr80KG)ag;P~p&2xlCu7k#Q|E&hxzU}a4O(cC2i
z+}xnlTSaVtoNfzghevt4clz7f437>O3ss*l{kgiQG@wzHmSvaVuMXK*w~?0nLOY1`
z?+RNMKtx1TGRcbC@Z)xCH*ob;$;N&B6#1ObefMN--Znc{1r5Ji-G-0(Ktp}?a@oBM
ze5A|n{22B$NYScCT(DS2qR{4S7^Bx9KHWIDmfT9Eip#}7z2mevXoX0?N3yz_&+jju
z{artiFYW1~xL8S_RmkR<Y(uHut6t`6KQ6g_ovhkM(-I6)5djaC`b2jb7Jb(n_j3&;
z!r<kQIBDJ0@fCTx9Pan`G1Oiy|6>VOjAA`_gj|+iUFWIEULI3Pj1=wIbp<DC%u3Qx
zP!x0kt$mUpQNC^Yl)m;P1+Paf<kp1N#|$$Y+znOG$3~CCl@t8d!EE8_@RV1277hAh
zp+`4i3XEJJiRW$S!rPOu*AyemQLvtPl`j4jB;z#-+ScZ#|G4G|776HunYhYs-R=RN
zD_*GQq$>U%>RhEU#@EKP@NJ6I_?&->u*cU0=^r*NH$a(xh1vwzP0HsstTel~p!7GN
zH%g!8F`^Cn4xrJIRDjs^-)!M#WLfd2{Oj(EF_B>a$%#zv>eGK8-(3MbN5pn7u8x|!
zRLRN#a)0aKjZ=>F&J2bTH(0HTL41_%sT^<j^=|>Yk>07_j436irhhAPS>5`T@p(ux
zB@Pl^i)ZQs<A<Fh<z~{nDBOGp&R)vjUWp}MRVA_<NJs@aV1~6NAS764n%G7at*q=}
zuAsW1VQP+ox?3-)?QBm=XF!%ZG1TqU-+$@$M&f*rgeeO*ftSlze3H}cd$v`<!tp4>
zlHrhtr`yeu@)}UXVWi;2zhnKWTLa@oR;T8Sa;P+nHZe7^kaluVik33x+4*iWd=6E&
zsdKq~|9B+FDA8Z2;O?4e^J?+nV2mSjII7({v`=Lscm=4THKo7s^1R#If8%5<o!~7S
ztuj5elRW*KpktQF>u_#F|Gd?!&DwrZ;I-tH<rtfhnjLp*3-_98D_n%*&x%|cakx*H
zZJ&Y-A{@+XO=9<<ZI3%fUX~?`SxNc(0fAfu_M4O4%A;-)HfDl4eR+4eUsK0vRA_IV
zZ))L#$!e$zmmOM;<u)ZXvW4Uf%G~VnZ%=A#SVHOnNxM4(6_%Mx`t%i`xk@X*vm%&5
z|FM`m+W;bmq8x@84i%o@uz;=?5^$7yc_$}6;tr!4dgtbKNlfpai`NQ_bSssq&Ff#(
z8r@KeZ=w0$n32n6rC$M*cx(pi@h|`Mv&ZJTqM*1dWv{CWsC4xnMe)U4>3Z!2rY2rW
z9O&b06{1{TOAfT`<pauY2MsA1rMk<Gjt~w=lXEr=0LvEp-tAL@B6-S{I$-)>0Bh@?
z0vJa(#@=2YZ7LtaHw<pHyjVFlDZrsfrQoi(){A;nhQe_aht5^WLa$OtbnlvcW=b2&
zT*NClRLz_|LAZYGA+VG-L`628Y;@C@yg!{dyz;9+oEC70nURDIjymszzQ0>srUhC2
zF3=9LLmp<ut`iSauLLMjJD}_6r4QhrM60H9g%>4&(@2^VVye7Qu|(vRo}M8?&s;;#
zGEd)2jioqaukd8BxzYkzDgyQ&iGZMA$0wSG^YxXdzQ(OzYp`2`{t8A)sOwP`&ElWe
zO!abLRcJO}v)XkkPOgEX_*RlDf+(b$C@|{YeFMiLSCHW49peA4aS8M31~nrzZIlCp
zvw$~8@kYu@gOa1Fn0B;Q_+$bt5$s&2N1Eu@w`fF`panvd3Ovb|@mV@dh7$MV__Gk-
z)0B-kOH}MSvx0?^bw2Nj`?UG*jy{dzT-G{YM0{`VFZR*N?8!*?OaN0LoD*PQAj~4M
zQLV?zASk$$M&@J9VntUMJgW_&UiVR#F5|VzKemXlAN?|^fTw?I6vsoT$i;!jhhG$$
z7+J>lflli-3u~F*TShLbDA|61&wuv2EVcRqr`l`AVSba~Ex*a@B*{cAC^4Mw*y@wG
z_A$+`%9VS7Zo96~>uu0$LYGL<AQ4mQ3^G6h>H_?`VOY5SV9oNNvr|xfje1u&kl|-`
zWgn;Iqx83Eh@k}3bxw2?7cV6-!dP%di6tJjATil$waxr4Z>A2Fi7%DF<dk*Dn~+Rm
zTA>68V(7A}4iBEzH;U!LpE5Al@zTD`mZ^GN96{y!li;f9(x6JhdG7T=*I#4!J3R$=
z;8;4n&JQUcwa{;Lq1EkUK8rs~X(U{nCE~5cbR&O$bG&XHZ+n;vI!Vb*|IZj;D_X$K
zih@=08;kg9>yX3lXv2TWu|tL$rvb&Lg@ga-u%oOYk&!Zv8MXYarF%c=JWS@4QYm?$
zG$uK!w9dP4aBQ%S9kIaT<WovmDF&~&yZ|P7jUV_?-TUd8PHi^7;K4)CmIO#<kerHJ
zqr4QRpDR~gSlzxV*y-AF{BQPf4hItvF=+(O-AoB)Q?OySrW<m)YrSEjv%W#y4#Y_$
zvWUXQ;H;oEXUI%o)^RP+swtW>;O=;<GTLzWnjMOetoUm3C#OB1x+-tL9^iNLi3t|}
z^mkfSXax7|fO~YCH-AK0?v(*AB4Sd{JLKVC`fES%W<ZvEUnv^eR<VMCN<^0{Trl@`
zzpzt+W>7BZch~?zUwNvQq>ZTV7UDbRwx4ryx*p9IdbWS-I07<5G#0s<4Ks2CpB}jq
z7NJGqoQk8_eE#;LvnC~RdV=mpmzv<*0jWZH-EWy-aZmz>q%!R$sK>4|ltCXp72JY?
z0#8qq_*$}?xHh;wQATkYT{EZZ6{^oFR{zR9+VkbfPT=Z}#g#UbpicW%3qX~MQQ>|%
ziROov{UYz&zV6ji6OfmWJ^yHy*pW$fRUBoBQM9PSC*XbRGWs%3E!KbHjykc?J?pzT
z5|8x#v1fRef~{=*ZeRYA?w%WFj$kp8wlgiFkfd?iWc@yq@3pman>1-%md;%ps<Eu{
zmXIdMFq2<~2j9q|?&jmDDidWHv|ekeIN#(whqr?2n>gDj&dAPs0*g;O1KKvSgi9Z$
zzC1<6l2Usu+>RT*p8ffXN#k@gspK!)H%%fakA3`iCr;?%V%XcpIx7UGU-`r0S)~Qr
zm9p#6t{#5q7#J96T9DD~C;k&#UViiVCnA{Z&Cc;wZ$A05yDL8R;4@;@jsP@hb6H#g
z3;FG5i{Y_cK72emQ|NgCc!#A&o$@XGoS~;MkJ^vKo%ljh&KB?HU{5IE5BkOwaCTsE
zq`UOUUF;sNp!7S<G@|>5O?;+V+zj}RP18GFo6bb<HHh-$Q~Ps7h^#@F4QdGsez=JI
zWiCkC9jzX<YT^Nx`HimbdiG(PWeVRE@NkFX*soPzgSdAT=j-dcK_XOVx{UN{H_JI#
z?w=uLa7$Oi={}X7<TSowGcvAif0b60h$jKv&L2Q***Iz)*OA2TjYSjKxjSny$<vZ=
zI46V94$mwq;w6Mp<p<s{O|;_fseZ0lsFT}|Xop{75U5->r@l+ps`yJV?)NI~8)Yy|
zueGopy-zlX&Hfl<^7xm}>(!+?jFKkM+SX)B-;CLfm6Gr%Ro-!te06PVOcE!E?O@7q
z1`~pQhB8*Lp<Yz1q@;+t##ffJ>6b#i!HSOpg+l+zDDTbH!v*Yv`#XWe3p68PZ~y*9
zf08jV@6Kw;e}0k5E@3G*RlRII&{&kPZ|Ao&4+LkId%77e2Aqe5A0+PgoE)ljPbqbJ
zh6YIuHfTyUJ)a)U7nVYWG9@{qzfrRxRbgd$Uyj1X<++Nux`Kf=@1LTlD;N{PQZ8x`
z8BgfthKU-5-mbp%AC#(SF2_gu!glSsA7l5@=$HPwyp&T?iXq1Rr|77BX=fR1_jS&h
zah#RyIM*4Zacq`4#=Ye*YWH>4J-VvB{Ij}zL3_}7=^<OC@f9%T$5U-|V=Xu><B_|`
z=GS<x(Q=Elmp#a`S6<Qb%}MyK&s(SBnXc}Ky^Y|@CK4GFx(GnKK0(8#k+LoB&8hrC
zPuE#Ycdlr!OlI-##_cpms`Nf{3a$JO=mA7&r(m(d!sU`(Wp96e;<ecnw$CI7YF6zf
za}6N3d5_#OHcPfn!pKk0RjRO)^w6~|BuLZlocH$xC$!@`PXGvq0FPWLt|Y?I6N<ve
z7wGqFHW^_~<8+ND9A&D)e%jtGBNqui_4a-!=<W8ShQ#5D9OXzV3Eb7%LKPBqy29Pe
zEgQqtRR`1`+cNS8EFU*yIW=763)l35#c3A0I|W>=^I6*H=jr9b(8+EU0KU3rGPPU*
zzLbA`DlmD=Xd6{c@Ku+i@qX%l=EQ58=VV$qbamG!d%12a<EUH+w1oM~+iR|lIf7K{
z(i<HXC!?3#YD^TUQI1f8tf8DcA4u!2M#d%eSZ?o>h_!E)n~}bmpffS4C=<$skv>o#
zUnc{GF&j)=^Y6o=N@L$0E&4-jeTCglT`2rGdBs60F;n(dRv?<xfS5{v;ryR%=`q&t
zH2yn>GBelNi&2^z!Z&DYZ*{s?^UzrdXL0z@@r|CP{b?0vm7Ru4q`)Z83X-(YjkgU-
z9<y~!+L_m<m$$aN3TVH;#D#lG*c*2;tG>_hwDE?|R)e^<wTWDRIng4CN!JWY1LR3#
zqf>~OOTuMGAc3bEIVNO1JVeb~TW%SZLCuP{!PTCSO=EP9^6A2{zl8RN<p%|A6J2ZO
zUoK<f6Yjm7daoiyx7TuJi-6PTdypJoYTjuSIi?^(N)C^LD5!2)iD12I_HEk4sWmx@
zmWED7*m_SZPN=|y61E8+Xevb6U>bjVv$e4fBMuYw?Z-KYg>zCm<jTaqj+>V*R40Yx
z?z+vzMuBAE=<U*Mc%K%2fMP|MAQ4MkX}6d;V{5*Dk<Ih~qKs6rBd)C^_}b#xoyNjq
zfO5-&ktpBeS+V9pEtMXom#7(>EE`!AF)FSDZyfSH8`5(`q|@m3aBP_{;`oY^)~ebc
z69d8=*XFQJdq~2)Tr<n=ExD<B-#<T4#$&-05m}2fGGz|kodY3+81JH1ByK0FZ4YZP
zb!y&7Z8-7qI^<94o)Q>m>VTtrMZjO(6)H+XW87J}0~I6lB8t%}=)wwyV-5-GI3uwR
z>ri5AZ#2P`Nfa(a6w)GWh2dH{G&Hb-rPE0*f~u7`W=Mmqpf)Ul?>s%JG+Z+rUVS2j
z`Is)WFb_jQno6jPcgx@JhpVo^QMAW#i4eCcy}=KDFP(bv>3ZXYbj}l0&19VgM;@9w
zv&>Z~PHS%JvD=3!#%gZgzTS|vuC}(epN1h)@{OJql!Q%r8vC^`^`RV}v}h+&UD<=G
z!D)58bzKs}Efcv-V;kU~_3-*~ad}nKP}h5`30-QQ<n;9FMgN}<L}RM<WC2<W$~HVb
z?RgsftQ1bV9}Vr+7T^=(8p;gcnf&MQ-9VfWJibY+RY#c8RftQQlusckGb`6^6w{#@
z;>-^^z9q-e`ifhVPGslD&)1fAC0yD4H78%9onEK?NvjB;{wR?fU`{rkL6Np(ZP7jE
z@K_HjTDDSbQ@FR^`st5_%g4{3nVIRUh4uZPeB%p1w+)p^pirNX(wlMr!`_}~Y1Ilv
zCU2zAd!q1@GE@`5n7Y-H9En$EF(j)SaL(yp7oO>7k||WMs4|1ce?6BZYW4~EF5U8}
zDyOrMnx=U9*h-QnZ|GXKw&^aJio6-p#E##%U$Y|U3elg5+O0#2`Vt4OCB`-S;91VU
zfoZT%4)a9#GaZdQ0mRHYFu%&ucX={fWfWP|l-jITN^UzMjS=>9+7y*>`VV}cw|}{*
z>+axZqE@No!4Kt{Kh8z%cy(<avrkA~0qBbnRm4Z^6$bYN_9V|V6OLTSCPiSO5+*RF
zlB@zn2#aq8n+!)?>m6f~>x?tJ%_P?Fk-WskU^@IMyhHukvpRzpJZdG?koi~AL<=dQ
zRsM+^ED({1^DEV~<)^9{HO)5Sze*7U79bLqPdNA<8`fV~$Pcn?=U3L0S3I7W-JF_P
zRqbt^hpKmkN%N$$zowJ})4>S>L%)xS8|~KP7HzcJyEs(`iWF0|N>z}O?vis6hbXrq
zSr;n40!$e?+eBRBGwX}So!;}Jzzpp`BVaZ|4(OZJ`5f7Io<g&S-qRn&j}zVE1sB%`
zj+fIf%NM!}MPJOQ!Oqea9y`kDo~SmAT<Kc4DUhJ57m!WyNR2|a)*J)vJFLlOLLv#y
zq|!zF9Trtd|J9!7YwF3*8%LfA1+D6OFA<4zPIRudI)?Z4ZQI^r!Kc`&D|;pMDSsHp
z|KzhhNR1pMP3pa#t2+uU9Uy?Dxqz<XV^+o!WP&CB&p2FkP(gpEvcdqg+r>R(r!?fQ
zsB9n(*NjhvW5QpW=tCKDh!}mItl*5DpT3%J#Mff5=oliYm1%f*Vi;{o>W_ir*Hewj
z6w(EAs>?Uvx%_6~x2ab{=$tbdfBSe&&wFo2rf~AeC_?qWmk5!UUg9&02r3c61~H(2
zarf3gwlg)q6a;kSunql|q(GwhBK+|$e1MseyOH+Kb8qwgoHPHM>xq+-HU2pc0gfjh
zp-I)bIemTToJP0TQCSeSifS&7>Rd9FNMt8-fMLg7v$p>O-dqA9Ap^tWL6D(bV&})z
z%Zu0U3mX%`)d}gRsh3{`m<bWbadDqEbx(OHu}eGDt(#{yh)?;P@(i0Nx{lnFiv(P4
z4D8{1mkt$SN$AzLV*B2d%f5=;FXFV!NHz2Tlvw-hqn3AFknju+Z8l(}0@V%aY0PBQ
zT-w2gpQ-0I%bq~VNlWs;Zn0jZL*BzNI^*~{n7F){ZnnLInR?EEtwV`~mqqNl;keek
zRAs}&(UvRb`dqN-N7q8fRj`8S*9e4hUOv|Vzgw~K#J7fL2N163@bu<AE&Afyuu|{|
z8__^BeTrHP^rpt|(pUl-(OKf=z`sn8W*;xqLF0W%LZ38vEtK2o)b((37D)n?+{gZR
z7*wV`-iY3f<A5NQ{{Zk8Fyt36z>?w0nM11oAdKJmfWTne{WjrM7Sn6aQ1ScY#jf9R
zU-N|jec#H`s0S~agKrc$bvNi(-}kM?(<&r`Z`fw}4)f!R+r;Zq?&S1ae`JhFNVLrj
zwF4?}Mt3jm!gaNiC7?z`b=Gj5!ok}V=JzmKD<{&cqU{!{@IE@fiK&8tq$+o^vIyzp
zdRa5CSPk+KMR$K+e^^PYiXkapEh*3Kpkq-QT=&bIdA%-i-5@=t9|d$dO>d5V8fD``
zjMj~T&&>9Go@_F~!$H#oY;2*UtSaD@+znmi?<vA-4!UJGHXqkbM*2M7vbTI8PBrqf
zunN`L64+X+7ivD|XK2n?@!jD`PY{nTj<b-u*e}LvS6X(2TOFX-xTgmBRPC}TS$-~(
zIM9l@Y0-$C!ktU70}tP31FLw}UN$T9D~g=#&L=q+k7CbTU3}gil7^?Do~x%j7N&n=
z(6T+T?ADGBqZUFc_+xM*n+Q7m)TGWG&Bf8Q0m5$AtWJn^FW)oOu>Ew55M@&Z&t>P-
z+#fQ8uk{K}6L{L%6e#Sgng!E-C-e@WOj6L|CRRbCbrfx%W@0y}Tj!_48D&!)$HnI^
zy(zK^IKjhJL$ZLRFAEmdO>-4*(A#~WZXx!?l7e>JI_o!|_C!gPL(5rRe?3Ept(JqU
zd2HaM6%EnL!tGwSEf736v7O-=XDDO|=ZbttTSirpUaa^ut?A0`9(9UKa!Chj`C7Qd
zSi7_o`hED`yT-~9KT-7?)vXZALNwvg{@IGltrWmb?<jeN3EFkhfOXcs?e6aVwR0y;
zj_y$@u6!6z@{DRn0)VmVyF$2s1He)Mux$`?KA!>2-IPnaU)%0W25L~LjX(Eq-eudM
zo*@Tu-CVxkA&N7L{D955>dz^7l@m~G)h*Yzm0s7y$JbT2eR_vUq3xyJb)ghzF+zpG
zhjyQ+k(nK9yJl@#@737bcv7(!f7-LD>)J19SQg&#RDN9{S>{6X_;S7?xV}&9{6!Jc
z4|Vl8`wp2Us^?W0WH~Ur1N*mBKunGN*mb!4oeFW^eMuI-s&e{kDe?Bg0Zwnk%oiNw
z@yo8=+`3euF{gFt0a-gwq{e>80qaen-k$h`7%B{!mP@d#)g(kPYLRprs1ghL-I-!q
zJnLyQUd56{RUM4-o6cBTUnW|1X~b%4e#6yMs-Ju!<znnpLF~T_z=?I5cpu=etw(FZ
zPjFL3yM@(|61soB82JH@b1^PWh+T~$@!JK_rZ-{-dTx}VG-JjIb)ldJTOGYxEK34z
zT`>&{jGK|2&6<aY>TsL<x!+0*Rh&Blf`r!Q%xmXfynJgRUmZJ6;2B>0+jSRhZR{2c
z#zPtWJ=GMeWj8;OJ;Fd(3idB4M(cCO9M~fCpi#B85eUzM@e-|6xE*vwC)hQuhXeX*
zgAW9z=S%p3<kUx>YiKPLk@nc}`SmX6vz^4l*Ys6dGJX!DQ_5Y+*cKXS$d>PlyAiUT
zTbGlMQ~J3n4m5ff=jR$^e@Xh%+oHh}w_Z-i!lp92eygD;Cad=4zC>OPvsGvN5`#)2
zACYpTRZ}I{!on#bS~PY4T+_lvY<}HeP|mj>zhR%cw%Gdb2{pUAIDn9?EWA^EnbqkG
zTUOlbnifw+#?<%B;3i%KvF=_L#&jeY0F?-S1CfV8G=J~f%fzWLclY*+OG=`Gvm<zI
ze}r%dDP(2R@j@*t?YQ4O)@O~3BuyjcOt;n$wqg%$OCDlQPyM0G3+r}d{OY&YN>|my
zAYx_>p8cupit6gv{T7Xi7&}np=D>`}(4MIj|6xI|t<5nvYD^p3Tol`<#9PIk40D{*
zbWxHt!)2ZANQwmYz-mT}oAf2m39zgvg?SiTqZ`NCFALdJ6$4u>znWBXQS~F)&rzuG
zSEF9k&FQV#y#PkGBK6>%40hFd6G<%OQ4y<PE%C+!d>=%qXIr(cLZeWeyOO&Gf(dj5
z68P3+Sv5(sOOSl=<6~&Am{{g}pM<0|A#-)B>x(SAlfLul^zAA#ir2v!Vmhd2rLKhr
zyW4YSeUhmHGqoeMlr?R@l_k;Cj~!qN=Ab7~aSYg_SN&M6qf&3U@wIEKzIKejCjvU$
z&c{T5hPkAetv<m#q0AaioI1!%=c}JFqR2td+b&AX&r9Krn261g+oH|s?bIltoz`p2
zzUsu0tTLpgsac|GlU(kniAtjXyDUCqJZc5)cnnH1ha|Qp7_EB~NR%FF|4rrX?Dnf>
z@;83@rZ~5zx5sllA>R3QV}!$dBmcrZ($(Ro)tqPDmyK?lW40O1IQ6$~&!8HT98*x_
z&oz2~#>_NsBTIDZIX+El$7_dzQ(L&qxO<jrx%8@Nn^BA=q8a6?*Vf#ku#8i@H_p>?
zV@ka4RgtJD(ODd!{zvU)4fa;YxbLre8q-(kg;AKrN_?<^QRz!`Idn^Yb>lhbIMJd5
z=|08P)gM1%+_M}<xW!yz$;|EPn{}I5x4bU^#IrC;tI5f0(X}qlIwA(@8vL<#*XxUA
zBt6qiQ1`ytO?|T8Y+WZnWwqzB+MFn|K}um+PZ4sjm!$uCtA5jQEiqRk*wu3Tw9t<i
zT?L=ndd^5iLkK2331hx}_S77&@7DKt7*7p?n1ivQF!O2%|J7JnuP|gO5oX2Z!Ho2H
z^|MPI3m+E@#AZWTRXdQUe3&Myb);Ky_>$cwzR(oT3{En(y$RQF8oTcMV5MW$k{<@S
zXnmT!obz(%9Uh9a)2DN-&UkiVsh`PLkoptn`Zt7IMW2W+q4pvQ@d_E;65a|^QoY||
zeB0&b2AJ#WzuqC=>4AJViFHW;gg6AaaJ4&<eMtCkGzG|1O4CVS0|&UjiKues{{uGP
zNV(L8&S#dzxv^(U9*yw!O(_S5=bIj4A$j?6)%d?SMO_YzpR2G(lSJ{zsJe;EP|x2c
zSpsp4YL)$0M;q^yho`UrpgtCyu7UK9oRWR1r5heDgt=zIHd@vT+udJUKrXm!n$^YO
z8$)92n(x3Pc8a3lDLK4-^hETj{LpU_PIbW|Zb8dlD$|^ey3AlgqV@w)4q3JMolx2H
z4pn|<TaYA(cyhCglZ$K1i8d#u2jlMJ`u(m@fgv#EE~m$UxQtEcrrKc9Bq`i7Q5*{I
zmR>eEBrR_1FGn;fP1nRzD^K$@sXx2PtkIqI1E_tAr=PY?gIgD5*#0~e7q3q5eTjBx
zr{-ZJ7%>e;gvOXbG}C`xpv%9Wez+81=GspT&Ezp^^);K{vWt>x`Eb%3HA4hk$0jc)
zizD7P>(ub`e(!y;pa~^A{cVR^pt`3g3D3LowFPb6R*ohFU-SoOl*bjDo#MB&a>MoI
zN^grOs5M)uY4GTnq#R#I>pkWYx#SwPG(C%0<0BqnmtMIHUk{D^PsPpOcd_vRNhpuD
z_o?*Y9+rMP1FFT*WQ=~(m7Rb*wU~o~8<oN;0eo5#6?3h!8_3c$XM08E=+Hz%Y<_fJ
zWE3wQE8UQpCDH!H7v*U!mW1Zvc2GX=oW0m~{eHdQ*`=A{CX@*{aRM1{08X`hsG6%&
zJsMR2b`Vfii)UgjvBW|1Jx_3-{ZZ@&!Ys<katK!C3Q=m;>Cszk*gp}DQtoOakExg;
zmv@+!+c$F^TVgd;*;Y13VyYmuatbM^r%R;njZ0b#ozxBCX#sJ<i9{B3PtC?d@5tJ2
zTsg4>INf(rd4RCUF#ao+%*)xj(<vpM&Q|*%pZv$N(VCq5+d7IoAaXcUMC-cs!KMGO
zc7G|OOf?@@G6j7t7pEXH@Qkop@&NmtqK>YPxHf?k?|rRW1{2Y`=Rd##T<76J*gkOS
z`B6cS|6f14;Pn*V#{7>X%$dw}R=18`Pc7|MU(R0^zolwSDu+ygDj&9C3hbx+PeWDj
z9Vw$7D>8Yy!q&U{XGjiX-T!zKHMMl5Ukyd93bE)m6;01*>7jQ=)~>-vG8+xUaDtQ4
zcK~AJ^jDXqueX|_W!t(Wo18p6xq`kr2kOCtcFh|EX8zQ|T2z>$zbk)}Xf5Gx-jMJW
znDAfBrkvZJKxXo#-Y!>0`Ine`_t)Fjt7;%ALeWf!OK3k{FJ)%#G~WkPQ&OtYM;Q`n
z*oC<cE-b`{!NS!LMue}b#s(<VeD(_!P)|^pj`nN443lMdOJ__1?*UMz9<)gF$;?Zl
zCXyv^fx`tzvnKa`U@w*@M`S5$*Ugxq3vrMzk;)PjD@aQIUREkrUU<X$;2k$CPIg;z
z;DasS>Z()zZPhGi!^LK6X3fWnW`7_5ZPn#}6W68QkRi|V7t&6}uSNMlm8ZOVBXN73
zChmtlZ;beIITAMzfdD7vn8)@Hh+q1z|2x#}A2hfL=B!#z5$mQZqxmGz<PPWe6}y=F
z#HhvdJwNN|`nB9Rs9?P(M!!4Iot&Z1<P+n$gtO<nrl~BOnGPpfX&&S8c>pxb{;krF
z;P2Noo?WpcF5K#+C4|Ks%)nzcafp$^JHw#A34S@h-?yMATDcZ2p~$ebJnltjdi40d
zQU1pr3sH;oT9Sd&DHy#vQf83CV6TXtgjY3b0a(GZ(3908Oy9GZ)w8S<0+HOYWw}PB
z{;VZOxZ*AOmrAb{7tLo9Q9f}XTu(v4x8x5`GG|un5}T8>Dz|B0iw3z4JP4R#@*FNg
zYqLtBn`{4DMSIbJk19LOk8Jc<cW^UO!ls!mM_)B5O|Hs|P2v*L56kZnRq2GmxSP)u
z`{j09VX(PsxW2I*dCnF~yu^t*I6zCQsuW-(^eJu!Fqb@=r(K@3pR_adsjxT?D=kiC
zs`i}5)3;*8s8*4AQa}$nF=dYQap-5$)}r~d!@8g4zbYi@hcWt4vz<OLODHAKSKRTI
z(EKiOyQOeWF8UKZGGx9?EkrQ{4rN*<DRQ(QqVTf;etTljt+SWU4IjwyL|X$)5&K#s
zi9WfcxeUi`L(X?y+^?a~^4hzTc)qEtfHEdaf)t^k%u|`@=`*CNTJJKQQ$($}+N62>
z<HTT?rxLZzTE+k5=Q(~y;_QB#@O@Tw<)-`TM1mN*6L>6pn8m<4gjC+w@|4@pe;X4`
zyt_QDmXnJ+OTe4^(PPcj1}6>A%qSCQk+;Y8X22G#nFZw6UUl0YS;MdTjYrngd=w#8
z!RoxgoW;Ld_c`-7bNOBk!`HpvG1b%U?&sAy+Gnf|ixaourgQm;u2;MjY0Kez-wWNQ
zXI)K*+sgqt|C)mI@phSszlAD9{a`-5YYR*e?}E&gc%*7fY>JfA6<mV&yqieM`a?vW
zOWrX={^6lVS(@s(Gw{rNY2U%CV0KGJogRRo<*;D5Z&<5|y|g;--^Zv?r|I##v7&8$
zc5P`ZtCk4M&HR-ee0&p_F$Ld%y5Vi7w%E%N(?Uv<6kg3l#E5g%aqj}ti$9NeRcKYT
zxao!ECL`~V)4HA9?e5y_f3bmvJ($crf|1iWrhpdH`rj>lanKm`rm~gwbeh7TDkuB-
zvB!!6J3{ccZ^~)7;eRiyhKxHk^cr&1vx1PrL)~6lhnPX;w{DBbzBTXTs}m!nDHs$4
z^H>=a2$HBxK3)9p?}=0n*#)ecQO8D1`a^Q&6;qZN;@Y})mKCvG`~rZSuFY?S##z1&
z)x_-50%ckl1rO2N=eqj08qU%|uD>S{Pg46e)JP;LY;XWIpf)()o)hLhkmViY+Q<)_
zX)2?3&zP%Ot@Rn7yxfFL(a)kKq8<*1%E={znST&v%tWUUv-HC0oc@vHtbddj(<rez
zUPo?LklB^6*!e;0kdDH+LC=jpKAikLu==f{+n{;)!R{gvYFkr$<0p`*l>mLoF4ycl
zuvbLO{mJH#w%%Z&B((F9_}`iCCsopQ--?JKhnVY!iZG<?$YfZyT}}%$%UQAV`Insy
zlfmV?V-;5ytnzORcMd_ulx~wJ+nM{6xz%C~i?)o;q{D5}l>hu6BYK^$(YstAvdQ1|
zQ{h`+vW&J27GA$C5BqLnH9xTk+}b<AU@idx0i&TMxEJ`vT_QrlZQdc8Z5-Qg7zD^L
zym}r7iDwrLSEGv&4+BozF33P$KJ<ROD~fEI8H4X@UB_^wT6tqM!qAd<Qy?lV0nqZ@
ze~nZpnn4KRCUbJ%@}%WA=qsC%sJ>w6R&Z&gg!G3|%TGI#V{Uh>TdSD_rJJg@Z)?>w
z|E*AM#reDd<Dw`qTztn5J{27%MHxBjxhb%z3n#vVWv1Ex0;agb5Pm+w{?G?YE&P9P
z&|~LSL2z_+_hU5_Mve`^XfSa7_dU&g@vxzs{{nJ-dH)2+-B|EyTwmMpP@tJ>vRmze
zrp&|mdpOai?k)+#WFvkRjN>-J?no2LbDIw@=O_#_AKpBUnn=nssK<^)j>^{>`~tf6
zz(Duc-@%N%u$;z$6tW`}bYH+UYd(ct8?Vs5X~C&`JIlHrx&KQlaaHvGr*Ck-{+k9Y
zOgj&jviS$ONm=vMN(cb#WY?6NvCU~z)X-JO?){xZ_!8k86DR-Y$9FnkkGAiUh%oRX
zVOYi_tR+PFzfm$Rag$txmCp+0c$=&7OE46hTFLO|6NI{HwBo;~i`3AB>NjeZr@xrV
z-M%g8z1+4c#kwM9|1;=m2A%w$HKWId$)`W@n%2d8g_PaEKCso2&P_x2c)7sL<$CtR
zbMZ%?iVrYYsY|qbK+u0n+hj?V3_a_1!ztwo`bf*r!|>li!JfwgXdXuqBu4s0dEVD7
ztwd6{b*Bw4SgWZe4JJBFnfBmSmU4&Qwj*XYIt1JR0$vj@kE>EG&EA|(S@YBqR8f@h
zYSIP2{WXFO=Sx2;_sUzS@ixUK*}p0p{{PbhlEi`J&%Iq0i~)wEQTvVy$%Bjx?AitT
zY^q0sU#s@rSUwdpG2#>i$tgI~46)rls@6{cbnZh<GCO&@4QolsVs)Ch)m_;42}bV!
zm<;)gt4r<)TmAEI-`IDd6|inGv8QxyHW0F?U@LpTLU*p)$td@5i(2-Bp68V+9tf_l
zpY8l-oo?igL7;elf3f2e;_c-X80^RtFwCmCkAOWSb&0=cPo<2{=Eg924}JgA6;a%5
z2Se~E!1%1lx9R2;icTgtp}C}w`x)tcy)(1M0p`^I$2w)^69OgZ1>y@CkoK>|?GnUx
z12t-n&rVJT-aUVDU~kFB2)>xc_z~@|+|_r_g-klcQqJ#lGBB#}IqvBUo#TXuZ19_Z
z$b?$J<zmlGRTCK8DpeCouwcn~<}4NpbK-DtaCjo36R?Yysly|gU}X(EI6AU9rQi7V
zYhin$IHPkbYgL)n1Mh_1gS~;?!=6Fsei6a=LhJx%CW)RDO~a@+w<CpQ_1;ha45w?w
zs|yD(4f;^%&`1HLv-e1=_$vQuB{O?9mrP9pgR1~UaYmh^=1q5qt6x%b5(uW<i%U(Z
z?z}d`ekJunfgg>Yoj;=QkR{i!`b`FgUGPuGW8+mfjR~F?0<V|J%$I<Ikt(l9871#`
zS&DQre|15$6h6PB!npHsn&IP}uKve?t<l`xdFm5)?w9b9shiF23?H?dF2aKk2B+Ln
zYRU8ZpuS3^7KV@=FHTi|NN&wvc}{kOw2Vev!5a`jWenTDI9#dM>_X5c{%)X6HRS1x
zhpj28n?70PhkH1z$^aZG+X_DKMg}LB^w|Ge=;Y06%}MCI$iM!yc>b<8sCxMtVZF|U
zQ+Ljn;NhnWCoOBsIcHvvm>n4)ZK-W$Kzg%T=r`ShK!sPaXR2v?xAV|!LIR%4A)*%L
zYk0`8Vk3a1T=R?W62f_GYGq!a4}*dgCGz{o^WTbL8sFTFe;Kl;mZkP5`1fi^*v`&n
zO=O+Jr9W*TqIdQv0ep-L?t8m~ed-dGm3$|#suuZ@%z+))>EW^<*5Rr^7}=WLdheIX
z@TvpOfxeF3R}V+_cTz=J9%rEwpJ}a3lHn>Q?KxL14<tXs!BVgx!kdI0l5{Z|f4|1T
zI7`n~)D!ZF6o~0Y@{TkNm@-5ZgJ1V?P+cv-#Fr;t9d7eeWtr3}%FJ+5Br7&fKUWKE
zFI`g<gvTHw)la(~DDtL#Yo2QyoSH)Vnx8HNO(juNkcbT>NC+1uuY&u+g+nsbonwW^
zhZBJy6Tcm<GXhJi6Cd$*-!l};JnpigI*HB}p>LJ`O8t7%@U<gO^(HF4@BBwcD%=+)
zCk&CI$E==&UUBRHW*Hs{oI1!|S~LC~;YhgM$^Uu3+yqP?gm>?Ha>f?Wi3B$T<E(}V
zf$@<N>@q0Gjek_me^{iel8bqY3Zam9P0(wcvczk0XO>_GS7%=!Fn=&rts~%LekbhW
z&;_Y*P8Ox5n)z8+H?NMZNcrzp3dsSH;W`NJqc8*3ptc%sVRCr(%STuVntT{MTvz<Z
zuW6B#O&hSuP_fBoq+|DvBf=%X`e#8%j8`tCiWG#|i9aP0fy}RIkh6c-biEhOpRud6
zp<*MJNffUI(PNGlT^vwiu8=QzPW>qjil7eg5K9b}WyVNgJ;j6*51bjwI$?#8S1?=}
zg(?OCnS#WBtcoCuKpm+Jp%4e|ae9XP!#x0T*r$}8jymbGR?sEA3-Y~;2TmM*LCv;d
z<)m@Owum4!&xqa+4k1dOfGgg&V$DfQwGIL3qrim*W9g7u-qb&JTBr9#gYb+W<VN1X
zK6QU8N^&^1ng>>K5i;xqDf3~9(j$p~D9b1UhmRL7{*RW`p0e|F@>;-dAEk__Ly3yz
z|0+F5^SK$E7&vzv?krQomeKY5%1@nJjVst929m*xeSkrftA43cry}iv?QEDdfgvNq
zh4Zl5<G|qYKUuNqG%vu!Q)B=F?BEIqCoMw15`CUyi_3>Y_h|wVR&R*aK_yZq1Yg!e
z5GKI?Ydb*nU#T3pLh?;r9Hjs6@;`Y5yNjX+%U6d957?{VetEz?3G4?OCeB1*D#L%5
zh53^$Tee|;%B1OFl>C3+UWc&vaS!W%?cszw{@0B#5=^-NC#Ydy&;MPnZ_PD7zUEb9
z_?K?=F*G$@;<%NtDBtHz6aMJuSQqO4=?w0b^*%+Xjc)$ee?Q>RC-ii*md173^>o1$
zOg4lboc1reTT`fWC*ND>b=0SSpdrO4#664aBjTc)mM6+iw@BZ;G)xr41Y->;QG#mu
zDTA?aS?46M_81C6uwr#3k&|1ElMe$e8aFe}^x8ETDG~+dBr;|mQw~MV^I3f>!V!Z)
z?T^>5;F*1@p?#Y7(w%G`_v#JH96tXNjg)+w&tDz-JdlN=l~8D(hd-e5GrK&T4L5)B
z!x#Eu&^LWj?){?N`G1DCYU6c}<c@DA(kIC<X@dWTiur$qTo$Vz;Y=`;;A>XxuMB1o
zt04hXmctsm&hH7F0(rb21*pODcxIBvn#IVpSRrBu%yNhlo$HA;i3r(|;va<wp7BW0
z;NXavB#-NG`>z8z^RU=ArHkKjYh)MGx@Vtr(#pP-DS$~nXTr|AeG%_z=wVf=KEMut
z66`nw0FdLG!bdbNqAB-G*ikRZU8(7LM?UjU8H|QhemTMlP#|Xi@>9-FVd}P)PSs;{
z5zYF`Fc^eM!xo_it4v9b(Lx~=!jq@Q_64S|MgETnf4ti$SEf><Wc@!n4jkP7ZU~DI
z^ZrLY<VOE{oCI`jk!*V||Egn^U)ZX}K$J}|^k=i>|M!A6AWp?#T`K9>ZqL?=y>kR$
z4@@SECWQ2w`TeC8M(9E<#7hoMJ41O^{hX@JK*-M`bk0M^3`D<$`}l+U$cK%7RGib$
zEkbROcw@7O`{_^D%uxe~QI^5)PXFuQ-)YVF2hTvvbA`6M>GFdMZHkO0ChXYXJ;OlW
z#ed70VYz%9Y#P}#Rq6vWbo)+w@}61Qe3Nd~udo6|zux1e>*b<<qOPB9Y$rM1E&HTp
z6QT(HMXo}q9>iMneP`3&S0d9HZ9+fI<-R7J%ARR{NQiCs;mAMB>PjE)eRoaN(Cz>)
z8)l+beF5&cMIFGeP@AP-WQHK}NRcvCH!EcO%>h=FhPbK6Wu&~<-2J?RLh2KUkSFo?
zIHn(w50Q6W8GU#XSA5ovrgkZ9kc5kxom4@u&Z^zeyJw90FK{SY&$#J<*vcPLsp2*M
zUMV7&l{?+jw{6^M#nWP$(!#-g_*jDpceLzC!)pqWYYt}D;PsKv7bdvUa2XMWW9_-1
z$Nil{Vv#5YNEpuiT3I%>Rd)OyRBoU&bS?!42Ty+H1Z#XjYh?<lGUx-96X(n_w?um$
z@tJ;wgNv7{Blmd61t&wOEfIT1i6O6nrU?DSqrtnz`x!PgIN}!0UtUe*R4|v4((9v%
zoI=p(i{lvUO{I#XhIU0Z@0@LaCM4Dxg)bz$jZcZ|N75JoSy{viGUve$8Hv>rD78rn
z58ofV+R25nFwBpclah0sXj+UXD?|WLZ!v--qq$Ub5|xaK3~MR-GHejOW~)US?SzD`
zfSMN_-kYe)tbKEo1eH3RrWbH(HY7D@pXp;j<96y{E7_d1dI6Dt<rUvE!WB6GIFh<K
zd32itasR>XsTpTaAA);F8frYKArrZ;ln7<TJSu@>Rqj!>X3zL%$XIlC*?}7IZzv>;
z74T_mEiMI?ef85ZMYf2%j*SA*6kNZ2|A&@KC~NT(ueo~Db7y;0?FC`f$Dga$=bvM6
zVgQw^NQe*r3PBYk{NnO>eM+%kj|P=|)t?3uka3@7C@JyusB?9&bv5|aEj(>X-mOjs
zpnaRlPhI;hpG2#MECdJlGHA<vcYUo@RasY;mS8A8|4BUC=(z?hBE=P<K9%Aa!IVI*
zmdmNK#u`jGkm8Q14_M5#?B1`@pdlie>IF^{T|`~#`C<J#rJD<TislB<u_Uj1hxmMP
z#nf;4wA>zV&6kg)yf2ghMm7^N8TWd8A{+<ldu9E}#g-$>C=X9qZo8{|P~!I%CFSN*
zdS2CLD>H==1Hw-c$no-Wa#z7_X2PspW~dl*Jyh;U7K5Q$rwUiMT69A}HsMeGN@;_^
z>##`|YIi`q%HM=H!Z;?)F3j4q+Ka0K$&}#dbKUtMFoh}K*}VFLDW@&6xA>Fy!EDVJ
zh2L2vDra+AFK;ax?tk;a-=ZET<-w|b4fTYK6G^$QZiM~irW5UYf<WVZ##&fCk+@B#
z_SRN{&&;gz=NS_S#$PDSxkiVC6HNhtRG7t1m8$Wf`@|5uWkU~71V;B&ZMchIH>mD<
ziO!gtPjN3UGZU{VHZHZ@7x~_!AxCH+!I^)V`+9?NBlQ$xn9ExI+??a?ebLY#>J}t0
z5wu9gvF?^ZjH~zY*Zj_XNGx$!NQTrBa>5Pcj$YeXC65aaSlcVQt3;W-jD|<8+A&tI
zCB%W-i@Me*rIM<;vRY{7bu?k&HRq<^6FPQIm}-!Qw+opDFRw3~kYijHl;J}cOCLO`
z=tLB1jH5QTOb5pvKR>78KVQFSjve#cg|X-e3I6PGXGbq~w#&2|r<<EWPQ}%40Y$RS
zO=QrlF8OHDqrs`h+>*kgK%n!YTp{U(Sf~5(_otv(-x6jw_k+OP^z2+$wdFryPShDA
z+UXsg$9>LMJvzHsTSNhIr2KmiDio>F1RR8)tNq)JrCc@tIZwa1QM~eR--QXdqfN&<
zJr!($s~*K%Q}OI)l1<e{bi%A_P9f@lzo@L_6?3lIl-;qc!@r@S8W@+%^u_TjaPKKy
z%{4}rwxQVxT6wrP3rc@3B7Yvn8GB1-e6H1jm18p-E-OAZTyHWyTar+_B9VwoBFr|^
zb)Kfq*4S`Y3``)jN=*duN>~5;*F$JKp!W9T<spD?um35yD=%5p!{%nGj!ZzPT%De=
zB3n{dS^-tuuKnSlC<if!((uv6ziRhqw%M#QVntbc>b^Hu3Wq!ax`LVVc_{d{k4$+g
zh=Trf^ss!N$F1gV=6W-Egd~gX_4m_rykHh3H3fw(W!sX`)mrPJIQk^(V(Lg(A@Z9T
zOxUt8aAz4@xK0LM=D8c>aBxdi|307qe+2eUeGNzBD7WOSdgyvxO^O+@N4zr@UZS$J
ziYl5RnbL@Q^YcI48=KO6^`%>z<DZxrIa+rHyw7{<SfLJE(vcWB6cezKv_Etrir3OZ
z#*voiO@;)bXh=H`9_Z2QO4yfiZt(Dmezq_x*iCwYZV`LBCiu*7IYm_~D478T%$7Wd
zmQ2hUYA5*~YlK{O>|Sw>ylYhDdZv-!=!QQ(5ek0)6Df@pQ94{bDi&<%(&XaN_OWg`
z`^BP;W7Rr3Jg-7GW&_|xzA|Lr<maOM?olFetlUD0IwL&`P<Vm8693bLXIoD9bYdn7
zw<vf*y;VoWG)ZMzq$IppMOu`vkJODmlp@>6ky|xpXR6&Z>lxZ9@MO)jD9)L91D-tP
z_6}F<<|RCeAe!UayV|h-u54(iG<RJnle9OTsXjxqsygHRdx4h{GW^u0bJIj?(K8<k
z7eCekF8P#TEFPIf^wn67I#iM~2A{uP%77K-h55|^&w2EoTY=TT!|Tb!#Kis3+0HE}
zC4)<H#b((|D2!?+tE!7T6s!ORjRoB4>c{ki)O?+#%TEf8yvQpde43dqy+d?awgye&
z5|NlPjQj>nsx6SMcKE;f1@-<~f+scJ=<@aVIfZcW3$^(kJlv6vc-879<xySq8j{TU
zI#X2M!gwMaxiRLvPE6w3=6c9)y(3c%hXL|9S~2OFaMXhnyAcoKBDo(~W#Tn*DQ?e9
z+A;8xj=3cX4YO-&xo7S6Q=A!9dGZ>q>6TX3tQqp`855SK?eh%Sw*6qJ{V>1K%e7kM
zqj6s_B8x)qyu>c>NA=tO)|s~1pCCjyc%&Vtf#FOotlgEZOULEy53Y|NT>sn>IR~df
z#+ixEVVgNt4+AQ`qjg&M(^EVs*%un0&#8V-&G&+3y7ydZFXHNsNTYmVo$TDaFOww)
z9><oUU60BJIDgXyf8U#@kvXUNY}-%{If-B1-rk-oQ6l4aL-Fr$+8+4CL8D_E9sC}h
z0j>~x=Q5?{wecP#%Dw2GaU$1k?c?Dz#MPfw@YJ+`-(5ccvX8T(X>JCrniY6lUM^;~
zM2-F0H+~d6&b-6ZXEkWmdNlIchHz=rHz8M1QcF9kTin8LjGkeKZHVSqF-3LruYPSJ
z5q28f5vDv-h-6r7Mt*5@G)j?btMAk8%hR2OnHkh|Q6GlWHzQ~UQz1TNr2CwAsT5T&
z?}DzIo@gwgpvVjZs$rsqmEqz-B^DJjJpi}G<me6_1+n$JU~vy^=<_M=bevP`Nt;d0
z&6-L5EWdS|5)c1AYVTG-TGmz2eYXGGF0WXDj8bYO$r8lQ82-tRmQI-ZO|-<ELe7~?
zf$0LqycKchOcTD>O6|(-V&<=6SH4@8^ggcc{rQi}fcM|4QGcig006^Vh1JOv9&=F0
zYnnG1T5v~q>0n=-o<EpYByu?)c3s7VflY|d$;}A^Ov3)vuPiMcJg5|1y1jB8RW5eB
z&c4iW_)JS_7<?9T-r4-NST{4aOr3nhcT(W|B0y~Q4py>DUkAc($#o~v4T{tY1rE%K
zOyF0%t_H-Cf7T*V^VF(Z$jKoMHL~P~&Ww_>U`8ArA19a$mRgd+j)4(MvBhyaD63!Z
z&o5}kTe1Y79A8M0t@TTagc;aYe-8EGQ*=~bj+ELyICF%G6O4w-BUM1U874WTJ`>_l
zO289pTNZw4sMmQzl+BG{2mTW{vn6`E#4VKiRxxg2;qTs5(nh^GLLqf4;?>#JTIRV}
zt&cMK)0afh*u%geN1a0B8#V+2xrZxacT$4YlSWib8}<;b1nE}Xu$)^mNvCyyyN^$G
zvl}qGz%^GrpTq(HdW%+r^<JCrQINvFmQhwLN&B9k<saa23=i!t{kSNTWN6~T@k{%?
z6}p^$B0Y42#LXc92^P|R*)GLkxaN|;aO+D{9e7($aKC$U)qe*Hv<p|MfDkI^I6IG5
zE;kSo5+Ve`HYJo#UrsJ+#<FqwL@W$VgHFSPmfOh2+PcT@(=Y6uo(I9Cp*8o`+hwaD
z7`?a2cVeB90XcWFwOkxqWGn>Me}3VEl*tFi>Yn0h$r|RU)xuPeuGHXmuVDP~-G#Y#
z6XI@<hJ9S6@NAKe;=Q691$?M3W=U04QDcBR6B2P28q^g3?#6@S8EfPqA0CGOrn~Kr
zG5Bo6nS~h{8JH2`1v7;uHqKX0QrNNI=$LTjN>djWuE6`pQ-+pS_H;~ipN8q-3NaP<
z<n+TDY7^TYbre}tJ#LSB+^o|g_9|oJ;u;-M2Zf`h?QOU;nR57<okzi~KdS2@GXV52
zC*g-XA40WF3jJuFouey^YFk!F3|+H-S}$Vucc$F*zes{anq%VJd^d@?ZklsZ1z-jZ
z|N1ANlB%Wx_x$L@A66C?wEe7F3NTx6Z5b$gvRZ3#W+otJer#+kFz`Kbu@xa%P>g0|
zzG5zK%!l8VaPhLlrN_+D7OURQ?@<D^xHX>6@~SU*RT)cxr}mh9opiDP>iL|9P^RN3
zFm!W4T=W9>>asc+-$1=(y}hcBS5AXu&4-4Ml6URAg!MJG?2X>9pTh<)*$WwOBe#BL
zyWVME{WVIg2$f=}AjY~h^|*riKf2VO`5=XemdqK=;6x27C@2(2#`NjfuxA)wufa}j
z!TONwD`w|56*FUtE3Kri#hswj`C0kVR1PRFy^5MYZXG;@u!r{K<m5$z8dI$KiPg0p
zubz{B#C5y%RVKf;A8*z9+LvfK<yJQC|EIVse}}T|-y@_#wnWzKWtXyzrV`nDD4Ma&
zko^&leVK_d$Pz*&Ga)8C5yp%qV}`M03CWhmkg;b8jeXy~<2}BA!~6d9xqrJq_kG;Q
zd7amJUiarr$}^mO)Vu6G;&WUD#>mT5XmP@s$(&rg4WQwMz+6pb!HO7rnwKbMw8*A?
z!(}F#^Ck*Nmk)NamYj6oe8zLUz=Q*<?z-u%g@vrq@GUq)O;t6^-Z3?7ilD#k>PjQ1
z8~4gs3vT9w`UH!pY@`oRrE9P;0lJXkR717}{2f8HyvjMUT18IM4X`1<rG-tQam{zd
zWnr$<pD{FcKvY;(Fq&XN9KVK!nHStvYMAP-(iQnlf@XGp>CpE80|#6{V`oyp8VVI(
z4`U6ar6V=Xkw($KR@fISdzrht+W4oP@s-}{oo+bhmm<lDN)<!C85`<f{|U*tcMqg(
z49*f)@CKU9Ip$b+Ud#MBGQu3SPzF&t(g|I%^=BgELd8@zr@T@Mc)ee3q3-?$rK04w
zQBv8Bd%dpZQ@#g?&adQ_?{2TQ3)l>#Db-mWSL9l)2f&NxMUOTM5N%(4Gh*M}G6i|f
z!+w4aHxfFEUSgAxeA2KmkX}X}Q4BFwwf8!m((?iBNJz@g(PIYp6!gQ_{tZfc!C?5}
zDu)!yaJW`U_iMxM7#KPuBLj<dvbDXkG0g_J40-3J<+!?+SnI22EOXr3`CDFT{TrHS
z<G~du+4pZv{Sk6xar}nfphJq=A<yOew;^{mQTZ-kt_;`8e8~Z$!?rgl?Zn~(1`9b@
z9l<!(J9g@tQ;hF-zDtx%uJx>>D65UBPM#Hze}hId=wt!WLi;k}`}ddC)Y8(e^03U*
z*VSj@XfrEZ1j9EBU-NU$LAXjn;Wnhjp!Bkk1sJ4bRM9vX_`c_-`{S*G891u&+)PrR
z`?F%D1oQk$SP{8%aV|vGJgfi{R%7SZ>_T9DEIJlv)Jn-@q(>aO%RRL*kZ>qc9lyU=
z?IfLu4Y|U{N4sFUDnBvJlnT$JvtsU_(Va6H55XJH|Khs9Bp8{RzH6hpaDUKP#CDpf
zO}utqI&=SiS+=FBS)>|8>GaAA&73D#?qk5)IyO;iv6vGz^Su+7<iA-rK*!nX-Jf}Y
z10MCe1z%#W_Yamx^bSkuBUbF^zjbJ`ak;TE^-aC|ko_vGxD$C(ng8L^%Uf1-(TP2!
z$&|-)T%Mls1zxQ~uSVnlE-g?f=N`s&_#!+Y{as<H0(%fE?vqICD7OzpYWc$WT<D_^
zv3fTyCrA;Ob&nWxdc|V=Y++}<CF=xx$BAh9ow?xKLQy(|cB|TTD37#>;cNU^R5|Wi
zL8Yv&89(R3r>X0i!t$q*q)sA3nfc734?LMlEdVff;)wh=tI2J<QHpI9ys9s8zN^rv
zHUBSs-w!agg3QK&?Qd7E2D~&V&s4j3>BCd%qkJJxKK?sX()yZBIa^9s8G%=)HjLji
zjg7ZVU)nk{q=3?eUq)4CHTl?IpKJZfgTAmXt`-@>JWIi4PCW=A#2q(J2s{(ysG_OY
z?OLiZSzh)a0Y)nK@w&AJ+j&F4xsYDeueH7d*z-yYtw$93=vH}z-m(aMH)(=`TU~7X
zqjS!d5v@XKYUD^QaT|@G3A}5>%bMb1-Ck0&r~}tUs#z15ztKYKo@1T6ys!?1dxQD<
zC6<S%QmuO8g|djG@PTB^((D)_Z3m{|XMa6}T4Kb=SpwGl=fnw}Ph!)|roQLZ8!)nW
zjU?V%u-a}^Is`Lan>q!sEVtJT>!!zf(}FTv+CgidQpB7I-==8q*G_vbrEt<3=C3H~
zuY1iyU+7NP#<*gzu9OrrlxcJOH@oD)o`8%~j&k>(^S|Gj-JMbBd9<%v(Mv6|_!9&~
zE`{8(IeRegL9o*td8l67{dP)D5@)#BV39PHXsXkIfFAB>BSA;MQl6x(h~k&)&%clo
z6{<}83S0fP<)5JwU)G+1AwbD}uu`RMeRZyboapJW<)DONH=S+0-n0H1G+&#ql%6%r
zQHoO6!&?K~fU8kTN^p;}bCI_)+xYNn-;_ai#o7W0Ps?TV*o@?xfk>>&=V{?vrrTKA
zG_?pb;bXa`duf5)hwt`sN#BoQo4R$D*FQ_-cs^WgaO)UX>^FgXhpaPgR`?dih@OyH
z1M=V5@VfK8!hf>)X8ny13z`aIR1k;HA6)(qyOFY^r{Y<tpikTcANHr@QnXe$qxq&F
zxQE&8MGTs}y_sA6QQHV9u#7}AXQNGo>Fx!y-hMq<4j$gh8?N6{bm{&m^lUGjp4q0Y
z1dgM)y^j!?cL=kaP&`LTbxsGhw}@Z5_d3G-ZIm29NN_~Bi&(ImYx{G1LF()t^A$V0
zdm-3~p+yZ4zB=qpqAUfscP;Q&E6=i3DK)Fk;vjPP8wnQ55F!54Si@KC*XG;pqiS<6
zza&zwavZ+nDNdz4fPXliCEYXun242|k&;4*aX&`SQyz~Vlmj2ah1l=l!JyOZ-9?kX
zrZgMc{arR#>?fXJxV23uCq8kqZhv1P*Ji)gn4!1i1U1jhoLlUl6fTA23n=gg5`p3R
zO|SoE$XPJEa$#jADB93;ns1ak9j!#anqRN9tP9bDg>9e52#QJ$5s^hBxnP53NF>C@
z3Cf#Tw(!wsOYcEI2Op+RiJsiE7kmXu5F6aO`8jO^6A2LZC+)3}t|xg1tnq`D&-)Ul
zlD+F)&H$DEvA>>By>4bOV|{D9_UkG96_V})t~T>fP0@gv2E`Y$yJ&T12#)pQU-;7S
zc|{Ay%=O=U0`6Gjc0ET}kqvn1szXD>WbRn5TMx(E3o1_xY7F+*x~HF1e~r#s&xu?o
zEf%zNF6?zM0>WXg=6=?ZenBW~?Y|?@yv3+WZ7rUfSek^BWZJ%dJ7Y}eqAGN#y=DQ4
z#%^qn%W(lZQ!#0&U8A|WExTnvO;sqllCDs-bM@Ro#H7L;;@3bE89r@*N5vY8Ikx+3
z)JI0iZjzk{{9jOKCwh~Iw++Y5H^(fNUr8K&f1K7c&9-d34Ew$pK9P7T`nc^85#hP+
z(jD(mH}2+u@`hN33)c&HX5ToIeUVQswKzsfg$cku(WFRK+NWghe)joiAG_|&J<m2&
zb4|B|*lE-s)Fg;?%3qB5!knxzvC7W`ZmwWb|6QoCLk4T1&wYdcKzNj)++>~d38>#*
z15`52E~Z`1^8b}D>;!ZRGH1mSM6_;{7RBjv7}J;Gtkcz7oWKzGA#-^{?I7Zua@OJV
z(-%uwqJDh_W+yoPO$w~Vf}zccvhwEcEXc$fTxAd+=)u+q4Uu`dG3{qhM0)RUsUbVE
z{;cA`)6v`&54ROr7eojTOvR!0GX2bf3PhkWLjwSqS75AWABw8-Q!5{hnYRKoq<Sj9
zmMoO{jqNohh(c>?5v!l5r9$DV4_ba!(T&yW23@5fzI@qd8+C){wFQ2N&}y~l{W=r+
zqk=g~#3NkjfU!-f;=7WCy3p9(g^NA@;PJSt(#<z7m2d0ufEEqlCLfLY_vM>h|2zlx
z<7!v|x0hDzL`uWTglJRO8Db-0?%7eVcIwa98FHN?zRozdIt6Js_iX2D$z8Cgp1f@E
zqN3ixNUyO(zjJCsa7<1iZ+6ZSJ$7j$)_4|q<WDHy%7s*|25syY?8KU;JL;7zY6e$(
zY_>G2?7sktFOO4pR5yw>iAUT4n|<JIA9~NQ8hQ85EP>O*46Qu;C+mUiRKI=CRdsC@
z#bR3qf(j<6s4T*S@+~(=T1ol}u8Y}G)r)-`J~Qyda7aKT<TR6XH0qR4kT%|ipv=Q>
z*3fLKyjE{GMiv^m^$%_Bss`Pu+wmEX%5T9tSeeoo4FBiU1gqA+pzhS-k`8kln9`36
z8EA1(_tDR6A)t_T&PsMm?p&RPD>!6KtdYCn{O8TLQP`U^_%jr8$6cFnuwa}$GDZ@*
z`_CbC%Y73zC)Lq>zUmoXe$o->qD5Hz0|4~-(Nmfvp8WQFh#9slGc-3p=m9TRRsPjv
z^0apqD(yine6M7;i{>w11H)UbAr&S0JdEJ^nH<T>Jg`4^yBEB|q<ZMBv-7Q>@qk(p
zLom|$pK%5wtgj{O=*B6T8vN6bPf#|AiM+I>Oa<ura(LPL%A=PdQu;ROw&kir^+u#I
zrn#sQi)r&TFltuet73XveHplejFTG*w?2f}IZ%fslG)d{1z3M88VDE%HcAclwjdh=
zaGvY_ykM0qO`hG~yx@&4@lh;@cPHs6;0KG7!?@?6@N%_G4BnSdu+1C|986kaKKxEC
zFP*&fgg<<XP3xnKlOG2lN_etP!eX<89oN<Fx82sDH1h4dn5mx|67xJ0sJ&yaJ@$bO
z7a=IInhp-*EN4|lu>@DoW0t?|N5r%g)*l29vpSAfa%M_~7AuzKF;vYN16brl3lIiF
z(?>DtVR@GOK$QAEq-+!JoQ#Q3M~TyJJ6Js=z8tBhyzs74DSkUni&AMofRgZC->pdo
zyCIuC?Pi2}*qaiwE;_e{V|RTnGP4{8tG?!cYDlj|;sF?7B1_TSmoBoT_Fq_{hSWsN
z9Gt_?uddZSHJ$=-V<3N9`0bW^gf_{*G!Pm5d8r&?vZL>svW2`IB@nU!kTO0%?qFQh
zW+)R>b`tpYSPo;W5!gQxO<74|_m+}L%^gTv(yPS#LUx$dwKKgZjPlgW;6Wxc1ps7K
n)fLoFE>=#TP}Too{c_BKXSpP|q^s$C(ub*$g(2SHam@b#T@p;}

literal 0
HcmV?d00001

diff --git a/samples/web-app-postgresql-flexible-server/dotnet/scripts/00-variables.sh b/samples/web-app-postgresql-flexible-server/dotnet/scripts/00-variables.sh
new file mode 100644
index 0000000..ea65004
--- /dev/null
+++ b/samples/web-app-postgresql-flexible-server/dotnet/scripts/00-variables.sh
@@ -0,0 +1,45 @@
+# Variables
+
+# Azure Resources
+PREFIX='local'
+SUFFIX='test'
+LOCATION='italynorth'
+RESOURCE_GROUP_NAME="${PREFIX}-rg"
+ACR_NAME="${PREFIX,,}acr${SUFFIX,,}"
+ACR_SKU='Standard'
+SUBSCRIPTION_NAME=$(az account show --query name --output tsv)
+SUBSCRIPTION_ID=$(az account show --query id --output tsv)
+TENANT_ID=$(az account show --query tenantId --output tsv)
+CURRENT_DIR="$(cd "$(dirname "$0")" && pwd)"
+
+# Azure Database for PostgreSQL flexible server
+PG_SERVER_NAME="${PREFIX}-pgflex-${SUFFIX}"
+PG_VERSION='16'
+PG_SKU_TIER='Burstable'
+PG_SKU_NAME='Standard_B1ms'
+PG_STORAGE_SIZE_GB=32
+PG_BACKUP_RETENTION_DAYS=7
+PG_PORT='5432'
+FIREWALL_RULE_NAME='AllowAllIPs'
+PG_ADMIN_USER='pgadmin'
+PG_ADMIN_PASSWORD='P@ssw0rd1234!'
+PG_USER_NAME='testuser'
+PG_USER_PASSWORD='TestP@ssw0rd123'
+PG_DATABASE_NAME='PlannerDB'
+
+# Application config — must match the seed-row `username` in 01-deploy-resources.sh.
+# PostgreSQL `=` is case-sensitive (unlike SQL Server), so this stays lowercase.
+LOGIN_NAME='paolo'
+
+# Docker Image
+IMAGE_NAME="vacation-planner-postgres-dotnet"
+IMAGE_PULL_POLICY="Always"
+IMAGE_TAG="v1"
+PORT="8080"
+
+# Kubernetes
+NAMESPACE="vacation-planner-postgres"
+DEPLOYMENT_NAME="vacation-planner-postgres"
+SERVICE_NAME="vacation-planner-postgres"
+CONFIGMAP_NAME="vacation-planner-postgres-config"
+K8S_SECRET_NAME="vacation-planner-postgres-secrets"
diff --git a/samples/web-app-postgresql-flexible-server/dotnet/scripts/01-deploy-resources.sh b/samples/web-app-postgresql-flexible-server/dotnet/scripts/01-deploy-resources.sh
new file mode 100755
index 0000000..955cf4b
--- /dev/null
+++ b/samples/web-app-postgresql-flexible-server/dotnet/scripts/01-deploy-resources.sh
@@ -0,0 +1,286 @@
+#!/bin/bash
+
+# Variables
+source ./00-variables.sh
+
+# Change the current directory to the script's directory
+cd "$CURRENT_DIR" || exit
+
+# Create a resource group
+echo "Checking if resource group [$RESOURCE_GROUP_NAME] exists in the subscription [$SUBSCRIPTION_NAME]..."
+az group show --name $RESOURCE_GROUP_NAME &>/dev/null
+
+if [[ $? != 0 ]]; then
+	echo "Creating resource group [$RESOURCE_GROUP_NAME]..."
+	az group create \
+		--name $RESOURCE_GROUP_NAME \
+		--location "$LOCATION" \
+		--only-show-errors 1>/dev/null
+
+	if [[ $? == 0 ]]; then
+		echo "Resource group [$RESOURCE_GROUP_NAME] created."
+	else
+		echo "Failed to create resource group [$RESOURCE_GROUP_NAME]."
+		exit 1
+	fi
+else
+	echo "Resource group [$RESOURCE_GROUP_NAME] already exists."
+fi
+
+# Create the Azure Container Registry
+echo "Checking if [$ACR_NAME] Azure Container Registry exists..."
+az acr show \
+	--name "$ACR_NAME" \
+	--resource-group "$RESOURCE_GROUP_NAME" \
+	--only-show-errors &>/dev/null
+
+if [[ $? != 0 ]]; then
+	echo "Creating Azure Container Registry [$ACR_NAME]..."
+	az acr create \
+		--name "$ACR_NAME" \
+		--resource-group "$RESOURCE_GROUP_NAME" \
+		--location "$LOCATION" \
+		--sku "$ACR_SKU" \
+		--admin-enabled "true" \
+		--only-show-errors 1>/dev/null
+
+	if [ $? -eq 0 ]; then
+		echo "Azure Container Registry [$ACR_NAME] created."
+	else
+		echo "Failed to create Azure Container Registry [$ACR_NAME]."
+		exit 1
+	fi
+else
+	echo "[$ACR_NAME] Azure Container Registry already exists."
+fi
+
+# Create the Azure Database for PostgreSQL flexible server
+echo "Checking if PostgreSQL flexible server [$PG_SERVER_NAME] exists..."
+az postgres flexible-server show \
+	--name "$PG_SERVER_NAME" \
+	--resource-group "$RESOURCE_GROUP_NAME" \
+	--only-show-errors &>/dev/null
+
+if [[ $? != 0 ]]; then
+	echo "Creating PostgreSQL flexible server [$PG_SERVER_NAME]..."
+	az postgres flexible-server create \
+		--name "$PG_SERVER_NAME" \
+		--resource-group "$RESOURCE_GROUP_NAME" \
+		--location "$LOCATION" \
+		--admin-user "$PG_ADMIN_USER" \
+		--admin-password "$PG_ADMIN_PASSWORD" \
+		--version "$PG_VERSION" \
+		--tier "$PG_SKU_TIER" \
+		--sku-name "$PG_SKU_NAME" \
+		--storage-size "$PG_STORAGE_SIZE_GB" \
+		--backup-retention "$PG_BACKUP_RETENTION_DAYS" \
+		--public-access Enabled \
+		--yes \
+		--only-show-errors 1>/dev/null
+
+	if [ $? -eq 0 ]; then
+		echo "PostgreSQL flexible server [$PG_SERVER_NAME] created."
+	else
+		echo "Failed to create PostgreSQL flexible server [$PG_SERVER_NAME]."
+		exit 1
+	fi
+else
+	echo "PostgreSQL flexible server [$PG_SERVER_NAME] already exists."
+fi
+
+# Add a permissive firewall rule (dev/test only)
+echo "Ensuring firewall rule [$FIREWALL_RULE_NAME] exists on PostgreSQL flexible server [$PG_SERVER_NAME]..."
+az postgres flexible-server firewall-rule create \
+	--resource-group "$RESOURCE_GROUP_NAME" \
+	--server-name "$PG_SERVER_NAME" \
+	--name "$FIREWALL_RULE_NAME" \
+	--start-ip-address 0.0.0.0 \
+	--end-ip-address 255.255.255.255 \
+	--only-show-errors 1>/dev/null
+
+# Create the PostgreSQL database
+echo "Checking if PostgreSQL database [$PG_DATABASE_NAME] exists..."
+az postgres flexible-server db show \
+	--name "$PG_DATABASE_NAME" \
+	--server-name "$PG_SERVER_NAME" \
+	--resource-group "$RESOURCE_GROUP_NAME" \
+	--only-show-errors &>/dev/null
+
+if [[ $? != 0 ]]; then
+	echo "Creating PostgreSQL database [$PG_DATABASE_NAME]..."
+	az postgres flexible-server db create \
+		--name "$PG_DATABASE_NAME" \
+		--server-name "$PG_SERVER_NAME" \
+		--resource-group "$RESOURCE_GROUP_NAME" \
+		--charset UTF8 \
+		--collation en_US.utf8 \
+		--only-show-errors 1>/dev/null
+
+	if [ $? -eq 0 ]; then
+		echo "PostgreSQL database [$PG_DATABASE_NAME] created."
+	else
+		echo "Failed to create PostgreSQL database [$PG_DATABASE_NAME]."
+		exit 1
+	fi
+else
+	echo "PostgreSQL database [$PG_DATABASE_NAME] already exists."
+fi
+
+# Retrieve PostgreSQL server FQDN
+PG_FQDN_FULL=$(az postgres flexible-server show \
+	--name "$PG_SERVER_NAME" \
+	--resource-group "$RESOURCE_GROUP_NAME" \
+	--query "fullyQualifiedDomainName" \
+	--output tsv)
+
+if [ -z "$PG_FQDN_FULL" ]; then
+	echo "Failed to retrieve PostgreSQL server FQDN."
+	exit 1
+fi
+
+# Split host:port — the LocalStack emulator embeds the dynamically allocated TCP-proxy port
+# directly in fullyQualifiedDomainName, mirroring the storage / container registry emulators.
+# Real Azure returns just the bare host so PG_PORT stays at the value from 00-variables.sh (5432).
+PG_FQDN="${PG_FQDN_FULL%%:*}"
+if [[ "$PG_FQDN_FULL" == *:* ]]; then
+	PG_PORT="${PG_FQDN_FULL##*:}"
+fi
+echo "PostgreSQL host = $PG_FQDN, port = $PG_PORT"
+
+# Create application role + grants + schema + seed data.
+# psql must be available on the host machine.
+if ! command -v psql &>/dev/null; then
+	echo "psql is not installed on the host. Install the PostgreSQL client (postgresql-client) and re-run."
+	exit 1
+fi
+
+echo "Creating login [$PG_USER_NAME] on the [$PG_SERVER_NAME] PostgreSQL flexible server..."
+PGPASSWORD="$PG_ADMIN_PASSWORD" psql \
+	--host="$PG_FQDN" \
+	--port="$PG_PORT" \
+	--username="$PG_ADMIN_USER" \
+	--dbname=postgres \
+	--no-password \
+	--set=ON_ERROR_STOP=on \
+	-c "DO \$\$
+BEGIN
+	IF NOT EXISTS (SELECT 1 FROM pg_roles WHERE rolname = '$PG_USER_NAME') THEN
+		CREATE ROLE \"$PG_USER_NAME\" WITH LOGIN PASSWORD '$PG_USER_PASSWORD';
+	END IF;
+END
+\$\$;"
+
+if [ $? -eq 0 ]; then
+	echo "Login [$PG_USER_NAME] created successfully"
+else
+	echo "Failed to create login [$PG_USER_NAME]"
+	exit 1
+fi
+
+# Grant CONNECT on the database to [$PG_USER_NAME]
+echo "Granting CONNECT on [$PG_DATABASE_NAME] to [$PG_USER_NAME]..."
+PGPASSWORD="$PG_ADMIN_PASSWORD" psql \
+	--host="$PG_FQDN" \
+	--port="$PG_PORT" \
+	--username="$PG_ADMIN_USER" \
+	--dbname=postgres \
+	--no-password \
+	--set=ON_ERROR_STOP=on \
+	-c "GRANT CONNECT ON DATABASE \"$PG_DATABASE_NAME\" TO \"$PG_USER_NAME\";"
+
+if [ $? -eq 0 ]; then
+	echo "CONNECT granted successfully to [$PG_USER_NAME]"
+else
+	echo "Failed to grant CONNECT to [$PG_USER_NAME]"
+	exit 1
+fi
+
+# Grant schema privileges to [$PG_USER_NAME]
+echo "Granting schema privileges on [$PG_DATABASE_NAME] to [$PG_USER_NAME]..."
+PGPASSWORD="$PG_ADMIN_PASSWORD" psql \
+	--host="$PG_FQDN" \
+	--port="$PG_PORT" \
+	--username="$PG_ADMIN_USER" \
+	--dbname="$PG_DATABASE_NAME" \
+	--no-password \
+	--set=ON_ERROR_STOP=on \
+	-c "GRANT USAGE, CREATE ON SCHEMA public TO \"$PG_USER_NAME\";
+		ALTER DEFAULT PRIVILEGES IN SCHEMA public GRANT ALL ON TABLES TO \"$PG_USER_NAME\";
+		ALTER DEFAULT PRIVILEGES IN SCHEMA public GRANT ALL ON SEQUENCES TO \"$PG_USER_NAME\";"
+
+if [ $? -eq 0 ]; then
+	echo "Schema privileges granted successfully to [$PG_USER_NAME]"
+else
+	echo "Failed to grant schema privileges to [$PG_USER_NAME]"
+	exit 1
+fi
+
+# Create [activities] table
+echo "Creating [activities] table in the [$PG_DATABASE_NAME] database..."
+PGPASSWORD="$PG_USER_PASSWORD" psql \
+	--host="$PG_FQDN" \
+	--port="$PG_PORT" \
+	--username="$PG_USER_NAME" \
+	--dbname="$PG_DATABASE_NAME" \
+	--no-password \
+	--set=ON_ERROR_STOP=on \
+	-c "CREATE TABLE IF NOT EXISTS activities (
+			id           TEXT PRIMARY KEY,
+			username     TEXT NOT NULL,
+			activity     TEXT NOT NULL,
+			created_at   TIMESTAMPTZ NOT NULL DEFAULT NOW()
+		);
+		CREATE INDEX IF NOT EXISTS idx_activities_username ON activities(username);
+		CREATE INDEX IF NOT EXISTS idx_activities_created_at ON activities(created_at DESC);"
+
+if [ $? -eq 0 ]; then
+	echo "[activities] table created successfully"
+else
+	echo "Failed to create [activities] table"
+	exit 1
+fi
+
+# Insert sample data
+echo "Inserting sample data into [activities] table..."
+PGPASSWORD="$PG_USER_PASSWORD" psql \
+	--host="$PG_FQDN" \
+	--port="$PG_PORT" \
+	--username="$PG_USER_NAME" \
+	--dbname="$PG_DATABASE_NAME" \
+	--no-password \
+	--set=ON_ERROR_STOP=on \
+	-c "INSERT INTO activities (id, username, activity) VALUES
+			(md5('paolo_pisa_seed'), 'paolo', 'Visit the Leaning Tower in Pisa'),
+			(md5('paolo_volterra_seed'), 'paolo', 'Explore Etruscan walls in Volterra'),
+			(md5('paolo_san_gimignano_seed'), 'paolo', 'Climb Torre Grossa in San Gimignano'),
+			(md5('paolo_siena_seed'), 'paolo', 'Walk across Piazza del Campo in Siena'),
+			(md5('paolo_montalcino_seed'), 'paolo', 'Taste Brunello wine in Montalcino'),
+			(md5('paolo_pienza_seed'), 'paolo', 'Sample Pecorino cheese in Pienza'),
+			(md5('paolo_florence_seed'), 'paolo', 'Admire Michelangelo''s David in Florence'),
+			(md5('paolo_viareggio_beach_seed'), 'paolo', 'Relax by the beach in Viareggio'),
+			(md5('paolo_viareggio_promenade_seed'), 'paolo', 'Stroll along the Viareggio promenade')
+		ON CONFLICT (id) DO NOTHING;"
+
+if [ $? -eq 0 ]; then
+	echo "Test data inserted successfully into [activities] table"
+else
+	echo "Failed to insert test data into [activities] table"
+	exit 1
+fi
+
+# Query data
+echo "Querying test data from [activities] table..."
+PGPASSWORD="$PG_USER_PASSWORD" psql \
+	--host="$PG_FQDN" \
+	--port="$PG_PORT" \
+	--username="$PG_USER_NAME" \
+	--dbname="$PG_DATABASE_NAME" \
+	--no-password \
+	-c "SELECT id, username, activity, created_at FROM activities;"
+
+if [ $? -eq 0 ]; then
+	echo "Test data queried successfully from [activities] table"
+else
+	echo "Failed to query test data from [activities] table"
+	exit 1
+fi
diff --git a/samples/web-app-postgresql-flexible-server/dotnet/scripts/02-build-docker-image.sh b/samples/web-app-postgresql-flexible-server/dotnet/scripts/02-build-docker-image.sh
new file mode 100755
index 0000000..4b497d8
--- /dev/null
+++ b/samples/web-app-postgresql-flexible-server/dotnet/scripts/02-build-docker-image.sh
@@ -0,0 +1,18 @@
+#!/bin/bash
+
+# Variables
+source ./00-variables.sh
+
+# Change the current directory to the script's directory
+cd "$CURRENT_DIR" || exit
+
+# Build context: the src/ folder (contains VacationPlanner.csproj, Program.cs, Pages/, Services/, wwwroot/).
+# The Dockerfile lives alongside this script, so we point -f at it explicitly.
+BUILD_CONTEXT="../src"
+
+# Build the docker image
+docker build \
+	-t $IMAGE_NAME:$IMAGE_TAG \
+	-f Dockerfile \
+	--build-arg PORT=$PORT \
+	$BUILD_CONTEXT
diff --git a/samples/web-app-postgresql-flexible-server/dotnet/scripts/03-run-docker-container.sh b/samples/web-app-postgresql-flexible-server/dotnet/scripts/03-run-docker-container.sh
new file mode 100755
index 0000000..c73d923
--- /dev/null
+++ b/samples/web-app-postgresql-flexible-server/dotnet/scripts/03-run-docker-container.sh
@@ -0,0 +1,38 @@
+#!/bin/bash
+
+# Variables
+source ./00-variables.sh
+
+# Retrieve the PostgreSQL server FQDN
+PG_FQDN_FULL=$(az postgres flexible-server show \
+	--name "$PG_SERVER_NAME" \
+	--resource-group "$RESOURCE_GROUP_NAME" \
+	--query "fullyQualifiedDomainName" \
+	--output tsv)
+
+if [ -z "$PG_FQDN_FULL" ]; then
+	echo "Failed to retrieve PostgreSQL server FQDN. Run 01-deploy-resources.sh first."
+	exit 1
+fi
+
+# Split host:port (LocalStack emulator embeds the dynamic TCP-proxy port in fullyQualifiedDomainName;
+# real Azure returns just the bare host).
+PG_FQDN="${PG_FQDN_FULL%%:*}"
+if [[ "$PG_FQDN_FULL" == *:* ]]; then
+	PG_PORT="${PG_FQDN_FULL##*:}"
+fi
+
+# --network=host so endpoints like *.localhost.localstack.cloud resolve to the
+# host's loopback (where LocalStack is listening), not the container's.
+docker run -it \
+	--rm \
+	--network=host \
+	-e PORT=$PORT \
+	-e PG_HOST="$PG_FQDN" \
+	-e PG_PORT="$PG_PORT" \
+	-e PG_DATABASE="$PG_DATABASE_NAME" \
+	-e PG_USER="$PG_USER_NAME" \
+	-e PG_PASSWORD="$PG_USER_PASSWORD" \
+	-e LOGIN_NAME="$LOGIN_NAME" \
+	--name "$IMAGE_NAME" \
+	"$IMAGE_NAME:$IMAGE_TAG"
diff --git a/samples/web-app-postgresql-flexible-server/dotnet/scripts/04-push-docker-image.sh b/samples/web-app-postgresql-flexible-server/dotnet/scripts/04-push-docker-image.sh
new file mode 100755
index 0000000..a1b7518
--- /dev/null
+++ b/samples/web-app-postgresql-flexible-server/dotnet/scripts/04-push-docker-image.sh
@@ -0,0 +1,40 @@
+#!/bin/bash
+
+# Variables
+source ./00-variables.sh
+
+# Login to ACR
+echo "Logging into Azure Container Registry [$ACR_NAME]..."
+az acr login --name $ACR_NAME
+
+# Retrieve ACR login server. Each container image needs to be tagged with the loginServer name of the registry.
+ACR_LOGIN_SERVER=$(az acr show --name $ACR_NAME --query loginServer --output tsv)
+
+if [ $? -eq 0 ]; then
+	echo "Logged into Azure Container Registry [$ACR_NAME] successfully."
+else
+	echo "Failed to log into Azure Container Registry [$ACR_NAME]."
+	exit 1
+fi
+
+FULL_IMAGE="${ACR_LOGIN_SERVER}/${IMAGE_NAME}:${IMAGE_TAG}"
+
+# Tag the local image with the loginServer of ACR
+docker tag ${IMAGE_NAME,,}:$IMAGE_TAG $ACR_LOGIN_SERVER/${IMAGE_NAME,,}:$IMAGE_TAG
+
+if [ $? -eq 0 ]; then
+	echo "Docker image [$IMAGE_NAME] tagged as [$FULL_IMAGE] successfully."
+else
+	echo "Failed to tag Docker image [$IMAGE_NAME] as [$FULL_IMAGE]."
+	exit 1
+fi
+
+# Push the container image to ACR
+docker push $ACR_LOGIN_SERVER/${IMAGE_NAME,,}:$IMAGE_TAG
+
+if [ $? -eq 0 ]; then
+	echo "Docker image [$FULL_IMAGE] pushed to ACR successfully."
+else
+	echo "Failed to push Docker image [$FULL_IMAGE] to ACR."
+	exit 1
+fi
diff --git a/samples/web-app-postgresql-flexible-server/dotnet/scripts/05-deploy-app.sh b/samples/web-app-postgresql-flexible-server/dotnet/scripts/05-deploy-app.sh
new file mode 100755
index 0000000..36cf487
--- /dev/null
+++ b/samples/web-app-postgresql-flexible-server/dotnet/scripts/05-deploy-app.sh
@@ -0,0 +1,93 @@
+#!/bin/bash
+
+# Variables
+source ./00-variables.sh
+
+# Retrieve the PostgreSQL server FQDN
+PG_FQDN_FULL=$(az postgres flexible-server show \
+	--name "$PG_SERVER_NAME" \
+	--resource-group "$RESOURCE_GROUP_NAME" \
+	--query "fullyQualifiedDomainName" \
+	--output tsv)
+
+if [ -z "$PG_FQDN_FULL" ]; then
+	echo "Failed to retrieve PostgreSQL server FQDN. Run 01-deploy-resources.sh first."
+	exit 1
+fi
+
+# Split host:port (LocalStack emulator embeds the dynamic TCP-proxy port in fullyQualifiedDomainName;
+# real Azure returns just the bare host).
+PG_FQDN="${PG_FQDN_FULL%%:*}"
+if [[ "$PG_FQDN_FULL" == *:* ]]; then
+	PG_PORT="${PG_FQDN_FULL##*:}"
+fi
+
+# Generate a stable SECRET_KEY shared by all replicas: the app derives its Data Protection key ring from it,
+# so antiforgery tokens and flash messages are valid on every replica and survive pod restarts
+SECRET_KEY=$(openssl rand -hex 32)
+
+# Get the login server for the Azure Container Registry
+echo "Getting login server for Azure Container Registry [$ACR_NAME]..."
+ACR_LOGIN_SERVER=$(az acr show \
+	--name "$ACR_NAME" \
+	--resource-group "$RESOURCE_GROUP_NAME" \
+	--query "loginServer" \
+	--output tsv \
+	--only-show-errors)
+
+if [ -n "$ACR_LOGIN_SERVER" ]; then
+	echo "Login server retrieved successfully: $ACR_LOGIN_SERVER"
+else
+	echo "Failed to retrieve login server for Azure Container Registry [$ACR_NAME]."
+	exit 1
+fi
+
+FULL_IMAGE="${ACR_LOGIN_SERVER}/${IMAGE_NAME}:${IMAGE_TAG}"
+
+# Create namespace
+cat namespace.yml |
+yq "(.metadata.name)|="\""$NAMESPACE"\" |
+kubectl apply -f -
+
+# Create secret with the PostgreSQL password and the SECRET_KEY
+cat secret.yml |
+yq "(.metadata.namespace)|="\""$NAMESPACE"\" |
+yq "(.data.PG_PASSWORD)|="\""$(echo -n $PG_USER_PASSWORD | base64 -w0)"\" |
+yq "(.data.SECRET_KEY)|="\""$(echo -n $SECRET_KEY | base64 -w0)"\" |
+kubectl apply -f -
+
+# Create configmap with environment variables
+cat configmap.yml |
+yq "(.metadata.namespace)|="\""$NAMESPACE"\" |
+yq "(.data.PG_HOST)|="\""$PG_FQDN"\" |
+yq "(.data.PG_PORT)|="\""$PG_PORT"\" |
+yq "(.data.PG_DATABASE)|="\""$PG_DATABASE_NAME"\" |
+yq "(.data.PG_USER)|="\""$PG_USER_NAME"\" |
+yq "(.data.LOGIN_NAME)|="\""$LOGIN_NAME"\" |
+kubectl apply -f -
+
+# Create deployment
+cat deployment.yml |
+yq "(.metadata.namespace)|="\""$NAMESPACE"\" |
+yq "(.spec.template.spec.containers[0].image)|="\""$FULL_IMAGE"\" |
+yq "(.spec.template.spec.containers[0].imagePullPolicy)|="\""$IMAGE_PULL_POLICY"\" |
+yq "(.spec.template.spec.containers[0].ports[0].containerPort)|=$PORT" |
+kubectl apply -f -
+
+# Create service
+cat service.yml |
+yq "(.metadata.namespace)|="\""$NAMESPACE"\" |
+kubectl apply -f -
+
+# Wait for the rollout so a pod stuck in ImagePullBackOff or CrashLoopBackOff is reported here, not discovered later
+echo "Waiting for deployment [$DEPLOYMENT_NAME] to roll out..."
+if kubectl rollout status deployment/$DEPLOYMENT_NAME -n $NAMESPACE --timeout=600s; then
+	echo "Deployment [$DEPLOYMENT_NAME] is ready. To reach the web app, run:"
+	echo "  kubectl port-forward service/$SERVICE_NAME 8080:80 -n $NAMESPACE"
+	echo "and browse to http://localhost:8080 (health: http://localhost:8080/health)."
+else
+	echo "Deployment [$DEPLOYMENT_NAME] did not become ready. Inspect it with:"
+	echo "  kubectl get pods -n $NAMESPACE"
+	echo "  kubectl describe pod -n $NAMESPACE --selector app=$DEPLOYMENT_NAME"
+	exit 1
+fi
diff --git a/samples/web-app-postgresql-flexible-server/dotnet/scripts/Dockerfile b/samples/web-app-postgresql-flexible-server/dotnet/scripts/Dockerfile
new file mode 100644
index 0000000..d862da7
--- /dev/null
+++ b/samples/web-app-postgresql-flexible-server/dotnet/scripts/Dockerfile
@@ -0,0 +1,28 @@
+# Build stage: restore and publish the ASP.NET Core app with the .NET SDK image.
+FROM mcr.microsoft.com/dotnet/sdk:10.0 AS build
+
+WORKDIR /src
+
+# Restore first so the package cache layer is reused when only sources change.
+COPY VacationPlanner.csproj ./
+RUN dotnet restore
+
+COPY . ./
+RUN dotnet publish -c Release -o /app/publish --no-restore
+
+# Runtime stage: the ASP.NET Core runtime image only, no SDK.
+FROM mcr.microsoft.com/dotnet/aspnet:10.0
+
+# Port Kestrel listens on; kept as a build argument (and a runtime variable) as in the Python image.
+ARG PORT=8080
+ENV PORT=${PORT}
+
+WORKDIR /app
+COPY --from=build /app/publish ./
+
+# Run as the runtime image's non-root `app` user, as the Python image runs as its own unprivileged `app` user.
+USER app
+
+EXPOSE ${PORT}
+
+ENTRYPOINT ["dotnet", "VacationPlanner.dll"]
diff --git a/samples/web-app-postgresql-flexible-server/dotnet/scripts/configmap.yml b/samples/web-app-postgresql-flexible-server/dotnet/scripts/configmap.yml
new file mode 100644
index 0000000..4064c51
--- /dev/null
+++ b/samples/web-app-postgresql-flexible-server/dotnet/scripts/configmap.yml
@@ -0,0 +1,14 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: vacation-planner-postgres-config
+  namespace: vacation-planner-postgres
+  labels:
+    app: vacation-planner-postgres
+data:
+  PG_HOST: ""
+  PG_PORT: "5432"
+  PG_DATABASE: ""
+  PG_USER: ""
+  LOGIN_NAME: "paolo"
+  DEBUG: "false"
diff --git a/samples/web-app-postgresql-flexible-server/dotnet/scripts/deployment.yml b/samples/web-app-postgresql-flexible-server/dotnet/scripts/deployment.yml
new file mode 100644
index 0000000..1f33e69
--- /dev/null
+++ b/samples/web-app-postgresql-flexible-server/dotnet/scripts/deployment.yml
@@ -0,0 +1,96 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: vacation-planner-postgres
+  namespace: vacation-planner-postgres
+  labels:
+    app: vacation-planner-postgres
+spec:
+  replicas: 3
+  selector:
+    matchLabels:
+      app: vacation-planner-postgres
+  strategy:
+    rollingUpdate:
+      maxSurge: 1
+      maxUnavailable: 0
+    type: RollingUpdate
+  minReadySeconds: 5
+  template:
+    metadata:
+      labels:
+        app: vacation-planner-postgres
+    spec:
+      nodeSelector:
+        kubernetes.io/os: linux
+      containers:
+        - name: vacation-planner-postgres
+          image: <your-registry>.azurecr.io/vacation-planner-postgres-dotnet:v1
+          imagePullPolicy: Always
+          ports:
+            - name: http
+              containerPort: 8080
+          env:
+            - name: PG_HOST
+              valueFrom:
+                configMapKeyRef:
+                  name: vacation-planner-postgres-config
+                  key: PG_HOST
+            - name: PG_PORT
+              valueFrom:
+                configMapKeyRef:
+                  name: vacation-planner-postgres-config
+                  key: PG_PORT
+            - name: PG_DATABASE
+              valueFrom:
+                configMapKeyRef:
+                  name: vacation-planner-postgres-config
+                  key: PG_DATABASE
+            - name: PG_USER
+              valueFrom:
+                configMapKeyRef:
+                  name: vacation-planner-postgres-config
+                  key: PG_USER
+            - name: LOGIN_NAME
+              valueFrom:
+                configMapKeyRef:
+                  name: vacation-planner-postgres-config
+                  key: LOGIN_NAME
+            - name: DEBUG
+              valueFrom:
+                configMapKeyRef:
+                  name: vacation-planner-postgres-config
+                  key: DEBUG
+            - name: PG_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: vacation-planner-postgres-secrets
+                  key: PG_PASSWORD
+            - name: SECRET_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: vacation-planner-postgres-secrets
+                  key: SECRET_KEY
+          resources:
+            requests:
+              cpu: "200m"
+              memory: "256Mi"
+            limits:
+              cpu: "1000m"
+              memory: "512Mi"
+          livenessProbe:
+            httpGet:
+              path: /health
+              port: http
+            initialDelaySeconds: 30
+            periodSeconds: 30
+            timeoutSeconds: 5
+            failureThreshold: 3
+          readinessProbe:
+            httpGet:
+              path: /health
+              port: http
+            initialDelaySeconds: 10
+            periodSeconds: 10
+            timeoutSeconds: 3
+            failureThreshold: 3
diff --git a/samples/web-app-postgresql-flexible-server/dotnet/scripts/namespace.yml b/samples/web-app-postgresql-flexible-server/dotnet/scripts/namespace.yml
new file mode 100644
index 0000000..275d4f9
--- /dev/null
+++ b/samples/web-app-postgresql-flexible-server/dotnet/scripts/namespace.yml
@@ -0,0 +1,4 @@
+kind: Namespace
+apiVersion: v1
+metadata:
+  name: vacation-planner-postgres
diff --git a/samples/web-app-postgresql-flexible-server/dotnet/scripts/secret.yml b/samples/web-app-postgresql-flexible-server/dotnet/scripts/secret.yml
new file mode 100644
index 0000000..13629f2
--- /dev/null
+++ b/samples/web-app-postgresql-flexible-server/dotnet/scripts/secret.yml
@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: vacation-planner-postgres-secrets
+  namespace: vacation-planner-postgres
+  labels:
+    app: vacation-planner-postgres
+type: Opaque
+data:
+  PG_PASSWORD: ""
+  SECRET_KEY: ""
diff --git a/samples/web-app-postgresql-flexible-server/dotnet/scripts/service.yml b/samples/web-app-postgresql-flexible-server/dotnet/scripts/service.yml
new file mode 100644
index 0000000..ec8e47f
--- /dev/null
+++ b/samples/web-app-postgresql-flexible-server/dotnet/scripts/service.yml
@@ -0,0 +1,16 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: vacation-planner-postgres
+  namespace: vacation-planner-postgres
+  labels:
+    app: vacation-planner-postgres
+spec:
+  type: ClusterIP
+  selector:
+    app: vacation-planner-postgres
+  ports:
+    - name: http
+      protocol: TCP
+      port: 80
+      targetPort: http
diff --git a/samples/web-app-postgresql-flexible-server/dotnet/src/.dockerignore b/samples/web-app-postgresql-flexible-server/dotnet/src/.dockerignore
new file mode 100644
index 0000000..cd42ee3
--- /dev/null
+++ b/samples/web-app-postgresql-flexible-server/dotnet/src/.dockerignore
@@ -0,0 +1,2 @@
+bin/
+obj/
diff --git a/samples/web-app-postgresql-flexible-server/dotnet/src/Models/Activity.cs b/samples/web-app-postgresql-flexible-server/dotnet/src/Models/Activity.cs
new file mode 100644
index 0000000..c39b073
--- /dev/null
+++ b/samples/web-app-postgresql-flexible-server/dotnet/src/Models/Activity.cs
@@ -0,0 +1,4 @@
+namespace VacationPlanner.Models;
+
+/// <summary>A planned vacation activity: the store's identifier plus the free-text description.</summary>
+public sealed record Activity(string Id, string Text);
diff --git a/samples/web-app-postgresql-flexible-server/dotnet/src/Pages/Delete.cshtml b/samples/web-app-postgresql-flexible-server/dotnet/src/Pages/Delete.cshtml
new file mode 100644
index 0000000..386fa85
--- /dev/null
+++ b/samples/web-app-postgresql-flexible-server/dotnet/src/Pages/Delete.cshtml
@@ -0,0 +1,2 @@
+@page "/delete/{id}"
+@model DeleteModel
diff --git a/samples/web-app-postgresql-flexible-server/dotnet/src/Pages/Delete.cshtml.cs b/samples/web-app-postgresql-flexible-server/dotnet/src/Pages/Delete.cshtml.cs
new file mode 100644
index 0000000..6272570
--- /dev/null
+++ b/samples/web-app-postgresql-flexible-server/dotnet/src/Pages/Delete.cshtml.cs
@@ -0,0 +1,22 @@
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Mvc.RazorPages;
+using VacationPlanner.Services;
+
+namespace VacationPlanner.Pages;
+
+/// <summary>Handles <c>POST /delete/{id}</c>; the activity is addressed by its store id, never by its position in the list.</summary>
+public class DeleteModel(IActivityStore store, ILogger<DeleteModel> logger) : PageModel
+{
+    public IActionResult OnGet() => RedirectToPage("/Index");
+
+    public async Task<IActionResult> OnPostAsync(string id, CancellationToken cancellationToken)
+    {
+        if (!string.IsNullOrWhiteSpace(id) && await store.DeleteAsync(id, cancellationToken))
+        {
+            logger.LogInformation("Activity deleted: {Id}", id);
+            TempData["Flash"] = "Activity deleted.";
+        }
+
+        return RedirectToPage("/Index");
+    }
+}
diff --git a/samples/web-app-postgresql-flexible-server/dotnet/src/Pages/Index.cshtml b/samples/web-app-postgresql-flexible-server/dotnet/src/Pages/Index.cshtml
new file mode 100644
index 0000000..bd617e2
--- /dev/null
+++ b/samples/web-app-postgresql-flexible-server/dotnet/src/Pages/Index.cshtml
@@ -0,0 +1,265 @@
+@page
+@model IndexModel
+<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8" />
+  <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+  <title>Vacation Planner</title>
+  <link rel="preconnect" href="https://fonts.googleapis.com" />
+  <link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700&display=swap" rel="stylesheet" />
+  <link rel="stylesheet" href="~/style.css" />
+  <link rel="icon" type="image/x-icon" href="~/favicon.ico" />
+  <script>
+    (function () {
+      try {
+        var dark = localStorage.getItem('vp_dark');
+        if (dark === 'true' || (dark === null && window.matchMedia('(prefers-color-scheme: dark)').matches)) {
+          document.documentElement.dataset.theme = 'dark';
+        }
+      } catch (_) {}
+    })();
+  </script>
+</head>
+<body>
+
+<!-- Header -->
+<header>
+  <div class="header-left">
+    <h1>&#127796; Vacation Planner</h1>
+    <p id="count-label">@Model.Activities.Count activit@(Model.Activities.Count != 1 ? "ies" : "y") planned</p>
+  </div>
+  <div class="header-right">
+    <button id="btn-dark-mode" aria-label="Toggle dark mode" title="Toggle dark mode">
+      <svg id="icon-dark" width="18" height="18" fill="none" stroke="currentColor" stroke-width="2" viewBox="0 0 24 24">
+        <path d="M21 12.79A9 9 0 1111.21 3a7 7 0 009.79 9.79z"/>
+      </svg>
+      <svg id="icon-light" width="18" height="18" fill="none" stroke="currentColor" stroke-width="2" viewBox="0 0 24 24" style="display:none">
+        <circle cx="12" cy="12" r="5"/>
+        <line x1="12" y1="1" x2="12" y2="3"/><line x1="12" y1="21" x2="12" y2="23"/>
+        <line x1="4.22" y1="4.22" x2="5.64" y2="5.64"/><line x1="18.36" y1="18.36" x2="19.78" y2="19.78"/>
+        <line x1="1" y1="12" x2="3" y2="12"/><line x1="21" y1="12" x2="23" y2="12"/>
+        <line x1="4.22" y1="19.78" x2="5.64" y2="18.36"/><line x1="18.36" y1="5.64" x2="19.78" y2="4.22"/>
+      </svg>
+    </button>
+    <button id="btn-add">
+      <svg width="16" height="16" fill="none" stroke="currentColor" stroke-width="2.5" viewBox="0 0 24 24"><line x1="12" y1="5" x2="12" y2="19"/><line x1="5" y1="12" x2="19" y2="12"/></svg>
+      Add Activity
+    </button>
+  </div>
+</header>
+
+<!-- Activity Table -->
+<div class="content">
+  <table id="activity-table">
+    <thead>
+      <tr>
+        <th>Activity</th>
+        <th class="col-actions" colspan="2">Actions</th>
+      </tr>
+    </thead>
+    <tbody>
+      @foreach (var activity in Model.Activities)
+      {
+      <tr data-id="@activity.Id" data-activity="@activity.Text">
+        <td>@activity.Text</td>
+        <td class="col-btn">
+          <button class="btn-edit" title="Edit activity" aria-label="Edit @activity.Text">
+            <svg width="14" height="14" fill="none" stroke="currentColor" stroke-width="2" viewBox="0 0 24 24">
+              <path d="M11 4H4a2 2 0 00-2 2v14a2 2 0 002 2h14a2 2 0 002-2v-7"/>
+              <path d="M18.5 2.5a2.121 2.121 0 013 3L12 15l-4 1 1-4 9.5-9.5z"/>
+            </svg>
+            Edit
+          </button>
+        </td>
+        <td class="col-btn">
+          <form method="post" asp-page="/Delete" asp-route-id="@activity.Id" class="delete-form">
+            <button type="button" class="btn-delete" title="Delete activity" aria-label="Delete @activity.Text">
+              <svg width="14" height="14" fill="none" stroke="currentColor" stroke-width="2" viewBox="0 0 24 24">
+                <polyline points="3 6 5 6 21 6"/><path d="M19 6l-1 14a2 2 0 01-2 2H8a2 2 0 01-2-2L5 6"/>
+                <path d="M10 11v6"/><path d="M14 11v6"/><path d="M9 6V4h6v2"/>
+              </svg>
+              Delete
+            </button>
+          </form>
+        </td>
+      </tr>
+      }
+      @if (Model.Activities.Count == 0)
+      {
+      <tr id="empty-row">
+        <td colspan="3" class="empty-cell">No vacation plans yet — add your first activity!</td>
+      </tr>
+      }
+    </tbody>
+  </table>
+</div>
+
+<!-- Add / Edit Activity Modal -->
+<div id="overlay">
+  <div class="modal" role="dialog" aria-modal="true" aria-labelledby="modal-title">
+    <div class="modal-header">
+      <h2 id="modal-title">&#127796; Add Activity</h2>
+      <button id="btn-close-modal" aria-label="Close">&times;</button>
+    </div>
+    <form id="activity-form" method="post" asp-page="/Index" novalidate>
+      <input type="hidden" id="f-row-id" name="row_id" value="" />
+      <div class="field">
+        <label for="f-activity">Activity <span style="color:#ef4444">*</span></label>
+        <input id="f-activity" name="activity" type="text" placeholder="e.g. Snorkelling at Coral Bay" required />
+      </div>
+    </form>
+    <div class="modal-actions">
+      <button class="btn-secondary" id="btn-cancel">Cancel</button>
+      <button class="btn-primary" id="btn-save">Save Activity</button>
+    </div>
+  </div>
+</div>
+
+<!-- Delete Confirmation Modal -->
+<div id="delete-overlay">
+  <div class="modal" role="dialog" aria-modal="true" aria-labelledby="delete-modal-title">
+    <div class="modal-header">
+      <h2 id="delete-modal-title">&#127796; Delete Activity</h2>
+      <button id="btn-close-delete-modal" aria-label="Close">&times;</button>
+    </div>
+    <div class="modal-body">
+      <p id="delete-confirm-msg">Are you sure you want to delete this activity?</p>
+    </div>
+    <div class="modal-actions">
+      <button class="btn-secondary" id="btn-cancel-delete">Cancel</button>
+      <button class="btn-primary" id="btn-confirm-delete">Delete</button>
+    </div>
+  </div>
+</div>
+
+<!-- Toast -->
+<div id="toast"></div>
+
+<script>
+  // ── Dark mode ────────────────────────────────────────────
+  function applyDark(dark) {
+    document.documentElement.dataset.theme = dark ? 'dark' : '';
+    document.getElementById('icon-dark').style.display  = dark ? 'none' : '';
+    document.getElementById('icon-light').style.display = dark ? ''     : 'none';
+  }
+  (function () {
+    var dark = localStorage.getItem('vp_dark');
+    var isDark = dark === 'true' || (dark === null && window.matchMedia('(prefers-color-scheme: dark)').matches);
+    applyDark(isDark);
+  })();
+  document.getElementById('btn-dark-mode').addEventListener('click', function () {
+    var isDark = document.documentElement.dataset.theme === 'dark';
+    applyDark(!isDark);
+    localStorage.setItem('vp_dark', String(!isDark));
+  });
+
+  // ── Toast ────────────────────────────────────────────────
+  var flashMessages = @Json.Serialize(Model.Flashes);
+  var toastTimer;
+  function showToast(msg) {
+    var el = document.getElementById('toast');
+    el.textContent = msg;
+    el.classList.add('show');
+    clearTimeout(toastTimer);
+    toastTimer = setTimeout(function () { el.classList.remove('show'); }, 2400);
+  }
+  if (flashMessages.length) showToast(flashMessages[0]);
+
+  // ── Activity Modal ───────────────────────────────────────
+  var overlay = document.getElementById('overlay');
+
+  function openActivityModal(data) {
+    var titleEl = document.getElementById('modal-title');
+    var saveEl  = document.getElementById('btn-save');
+    var rowId   = document.getElementById('f-row-id');
+    var input   = document.getElementById('f-activity');
+
+    if (data) {
+      titleEl.textContent = '🌴 Edit Activity';
+      saveEl.textContent  = 'Save Changes';
+      rowId.value         = data.id;
+      input.value         = data.activity;
+    } else {
+      titleEl.textContent = '🌴 Add Activity';
+      saveEl.textContent  = 'Save Activity';
+      rowId.value         = '';
+      input.value         = '';
+    }
+    overlay.classList.add('open');
+    input.focus();
+    var len = input.value.length;
+    input.setSelectionRange(len, len);
+  }
+
+  function closeActivityModal() {
+    overlay.classList.remove('open');
+    document.getElementById('activity-form').reset();
+    document.getElementById('f-row-id').value = '';
+    document.getElementById('modal-title').textContent = '🌴 Add Activity';
+    document.getElementById('btn-save').textContent    = 'Save Activity';
+  }
+
+  document.getElementById('btn-add').addEventListener('click', function () { openActivityModal(null); });
+  document.getElementById('btn-close-modal').addEventListener('click', closeActivityModal);
+  document.getElementById('btn-cancel').addEventListener('click', closeActivityModal);
+  overlay.addEventListener('click', function (e) { if (e.target === overlay) closeActivityModal(); });
+
+  document.getElementById('btn-save').addEventListener('click', function () {
+    var val = document.getElementById('f-activity').value.trim();
+    if (!val) { showToast('Activity cannot be empty.'); return; }
+    document.getElementById('activity-form').submit();
+  });
+
+  document.getElementById('f-activity').addEventListener('keydown', function (e) {
+    if (e.key === 'Enter') { e.preventDefault(); document.getElementById('btn-save').click(); }
+  });
+
+  // Edit buttons on rows
+  document.querySelectorAll('.btn-edit').forEach(function (btn) {
+    btn.addEventListener('click', function () {
+      var row = btn.closest('tr');
+      openActivityModal({ id: row.dataset.id, activity: row.dataset.activity });
+    });
+  });
+
+  // ── Delete confirmation modal ────────────────────────────
+  var deleteOverlay = document.getElementById('delete-overlay');
+  var pendingDeleteForm = null;
+
+  function openDeleteModal(form, activityName) {
+    pendingDeleteForm = form;
+    var msg = document.getElementById('delete-confirm-msg');
+    msg.textContent = 'Are you sure you want to delete "' + activityName + '"?';
+    deleteOverlay.classList.add('open');
+    document.getElementById('btn-confirm-delete').focus();
+  }
+
+  function closeDeleteModal() {
+    deleteOverlay.classList.remove('open');
+    pendingDeleteForm = null;
+  }
+
+  document.querySelectorAll('.btn-delete').forEach(function (btn) {
+    btn.addEventListener('click', function () {
+      var row = btn.closest('tr');
+      var form = btn.closest('form');
+      openDeleteModal(form, row.dataset.activity);
+    });
+  });
+
+  document.getElementById('btn-confirm-delete').addEventListener('click', function () {
+    if (pendingDeleteForm) pendingDeleteForm.submit();
+  });
+
+  document.getElementById('btn-cancel-delete').addEventListener('click', closeDeleteModal);
+  document.getElementById('btn-close-delete-modal').addEventListener('click', closeDeleteModal);
+  deleteOverlay.addEventListener('click', function (e) { if (e.target === deleteOverlay) closeDeleteModal(); });
+
+  // ── Escape closes any open modal ─────────────────────────
+  document.addEventListener('keydown', function (e) {
+    if (e.key === 'Escape') { closeActivityModal(); closeDeleteModal(); }
+  });
+</script>
+</body>
+</html>
diff --git a/samples/web-app-postgresql-flexible-server/dotnet/src/Pages/Index.cshtml.cs b/samples/web-app-postgresql-flexible-server/dotnet/src/Pages/Index.cshtml.cs
new file mode 100644
index 0000000..4a8e59c
--- /dev/null
+++ b/samples/web-app-postgresql-flexible-server/dotnet/src/Pages/Index.cshtml.cs
@@ -0,0 +1,49 @@
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Mvc.RazorPages;
+using VacationPlanner.Models;
+using VacationPlanner.Services;
+
+namespace VacationPlanner.Pages;
+
+public class IndexModel(IActivityStore store, ILogger<IndexModel> logger) : PageModel
+{
+    public IReadOnlyList<Activity> Activities { get; private set; } = [];
+
+    /// <summary>Flash messages set by the previous request (the equivalent of Flask's <c>flash()</c>).</summary>
+    public IReadOnlyList<string> Flashes => TempData["Flash"] is string message ? [message] : [];
+
+    [BindProperty(Name = "activity")]
+    public string? Activity { get; set; }
+
+    [BindProperty(Name = "row_id")]
+    public string? RowId { get; set; }
+
+    public async Task OnGetAsync(CancellationToken cancellationToken)
+    {
+        Activities = await store.ListAsync(cancellationToken);
+    }
+
+    public async Task<IActionResult> OnPostAsync(CancellationToken cancellationToken)
+    {
+        var text = Activity?.Trim();
+        var id = RowId?.Trim();
+        if (!string.IsNullOrEmpty(text))
+        {
+            if (!string.IsNullOrEmpty(id))
+            {
+                if (await store.UpdateAsync(id, text, cancellationToken))
+                {
+                    logger.LogInformation("Activity updated: {Id}", id);
+                    TempData["Flash"] = "Activity updated!";
+                }
+            }
+            else if (await store.AddAsync(text, cancellationToken))
+            {
+                logger.LogInformation("Activity added: {Activity}", text);
+                TempData["Flash"] = "Activity added!";
+            }
+        }
+
+        return RedirectToPage();
+    }
+}
diff --git a/samples/web-app-postgresql-flexible-server/dotnet/src/Pages/_ViewImports.cshtml b/samples/web-app-postgresql-flexible-server/dotnet/src/Pages/_ViewImports.cshtml
new file mode 100644
index 0000000..ec62511
--- /dev/null
+++ b/samples/web-app-postgresql-flexible-server/dotnet/src/Pages/_ViewImports.cshtml
@@ -0,0 +1,4 @@
+@using VacationPlanner
+@using VacationPlanner.Models
+@namespace VacationPlanner.Pages
+@addTagHelper *, Microsoft.AspNetCore.Mvc.TagHelpers
diff --git a/samples/web-app-postgresql-flexible-server/dotnet/src/Program.cs b/samples/web-app-postgresql-flexible-server/dotnet/src/Program.cs
new file mode 100644
index 0000000..35261e6
--- /dev/null
+++ b/samples/web-app-postgresql-flexible-server/dotnet/src/Program.cs
@@ -0,0 +1,69 @@
+using System.Diagnostics;
+using Microsoft.AspNetCore.DataProtection;
+using Microsoft.AspNetCore.DataProtection.KeyManagement;
+using VacationPlanner.Services;
+
+var builder = WebApplication.CreateBuilder(args);
+
+// Listen on PORT (8080 by default), the way the Python image binds gunicorn to 0.0.0.0:${PORT}. HTTP_PORTS is the
+// same setting the aspnet base image feeds through ASPNETCORE_HTTP_PORTS, so no URL override is involved.
+if (Environment.GetEnvironmentVariable("PORT") is { Length: > 0 } port)
+{
+    builder.WebHost.UseSetting(WebHostDefaults.HttpPortsKey, port);
+}
+
+// Read and validate the configuration up front so a misconfigured deployment fails at startup.
+var storeOptions = PostgresOptions.FromEnvironment();
+
+// SECRET_KEY is the Kubernetes Secret the Python sample signs its session cookie with. Deriving the Data Protection
+// key ring from it lets all replicas validate each other's antiforgery tokens and flash cookies; without it (a local
+// docker run) each process keeps its own keys.
+var secretKey = Environment.GetEnvironmentVariable("SECRET_KEY");
+if (!string.IsNullOrEmpty(secretKey))
+{
+    builder.Services.AddDataProtection().DisableAutomaticKeyGeneration();
+    builder.Services.Configure<KeyManagementOptions>(options => options.XmlRepository = new SecretKeyXmlRepository(secretKey));
+}
+
+builder.Services.AddRazorPages();
+builder.Services.AddSingleton<IActivityStore>(sp =>
+    new PostgresActivityStore(storeOptions, sp.GetRequiredService<ILogger<PostgresActivityStore>>()));
+// The Python sample waits up to 30 x 2 s for the database at startup; the same values apply here.
+builder.Services.AddHostedService(sp =>
+    new StoreInitializer(sp.GetRequiredService<IActivityStore>(), sp.GetRequiredService<ILogger<StoreInitializer>>(),
+        attempts: 30, delay: TimeSpan.FromSeconds(2)));
+
+var app = builder.Build();
+
+if (string.IsNullOrEmpty(secretKey))
+{
+    app.Logger.LogWarning("SECRET_KEY is not set: antiforgery tokens and flash messages are only valid on this replica.");
+}
+
+// One log line per request, the equivalent of the access log the Python image produces (its gunicorn
+// command passes --access-logfile -). Kubernetes probes show up here too, exactly as they do for Python.
+var requestLogger = app.Services.GetRequiredService<ILoggerFactory>().CreateLogger("VacationPlanner.Requests");
+app.Use(
+    async (context, next) =>
+    {
+        var started = Stopwatch.GetTimestamp();
+        await next();
+        requestLogger.LogInformation(
+            "{Method} {Path} -> {StatusCode} in {Elapsed:0.0}ms",
+            context.Request.Method,
+            context.Request.Path,
+            context.Response.StatusCode,
+            Stopwatch.GetElapsedTime(started).TotalMilliseconds
+        );
+    }
+);
+
+app.UseStaticFiles();
+app.MapRazorPages();
+
+app.MapGet("/health", async (IActivityStore store, CancellationToken cancellationToken) =>
+    await store.IsHealthyAsync(cancellationToken)
+        ? Results.Json(new { status = "ok" })
+        : Results.Json(new { status = "unavailable" }, statusCode: StatusCodes.Status503ServiceUnavailable));
+
+app.Run();
diff --git a/samples/web-app-postgresql-flexible-server/dotnet/src/Services/ActivityId.cs b/samples/web-app-postgresql-flexible-server/dotnet/src/Services/ActivityId.cs
new file mode 100644
index 0000000..8654aaf
--- /dev/null
+++ b/samples/web-app-postgresql-flexible-server/dotnet/src/Services/ActivityId.cs
@@ -0,0 +1,15 @@
+using System.Security.Cryptography;
+using System.Text;
+
+namespace VacationPlanner.Services;
+
+/// <summary>MD5 of username + activity + timestamp: the id scheme shared by the Vacation Planner samples.</summary>
+public static class ActivityId
+{
+    public static string Create(string username, string activity)
+    {
+        var timestamp = DateTime.Now.ToString("yyyy-MM-ddTHH:mm:ss.ffffff");
+        var hash = MD5.HashData(Encoding.UTF8.GetBytes($"{username}_{activity}_{timestamp}"));
+        return Convert.ToHexStringLower(hash);
+    }
+}
diff --git a/samples/web-app-postgresql-flexible-server/dotnet/src/Services/IActivityStore.cs b/samples/web-app-postgresql-flexible-server/dotnet/src/Services/IActivityStore.cs
new file mode 100644
index 0000000..167993e
--- /dev/null
+++ b/samples/web-app-postgresql-flexible-server/dotnet/src/Services/IActivityStore.cs
@@ -0,0 +1,24 @@
+using VacationPlanner.Models;
+
+namespace VacationPlanner.Services;
+
+/// <summary>Persistence for the planner's activities. Every call goes to the backing store; nothing is cached in-process.</summary>
+public interface IActivityStore
+{
+    /// <summary>Creates whatever the store needs (container, table, collection, directory) before the first request.</summary>
+    Task InitializeAsync(CancellationToken cancellationToken);
+
+    Task<IReadOnlyList<Activity>> ListAsync(CancellationToken cancellationToken);
+
+    /// <summary>Adds an activity and returns whether the store confirmed the write; the page flashes only then.</summary>
+    Task<bool> AddAsync(string text, CancellationToken cancellationToken);
+
+    /// <summary>Updates an activity and returns whether the store reported a change, with the meaning the Python sample's driver gives it.</summary>
+    Task<bool> UpdateAsync(string id, string text, CancellationToken cancellationToken);
+
+    /// <summary>Deletes an activity by its store id and returns whether the store reported a deletion.</summary>
+    Task<bool> DeleteAsync(string id, CancellationToken cancellationToken);
+
+    /// <summary>Cheap connectivity probe used by <c>GET /health</c>.</summary>
+    Task<bool> IsHealthyAsync(CancellationToken cancellationToken);
+}
diff --git a/samples/web-app-postgresql-flexible-server/dotnet/src/Services/PostgresActivityStore.cs b/samples/web-app-postgresql-flexible-server/dotnet/src/Services/PostgresActivityStore.cs
new file mode 100644
index 0000000..bb0bbbb
--- /dev/null
+++ b/samples/web-app-postgresql-flexible-server/dotnet/src/Services/PostgresActivityStore.cs
@@ -0,0 +1,126 @@
+using Npgsql;
+using VacationPlanner.Models;
+
+namespace VacationPlanner.Services;
+
+/// <summary>
+/// Activities in a PostgreSQL <c>activities</c> table. Like the Python sample, the store is low-throughput
+/// and opens a fresh connection per call instead of managing a pool explicitly.
+/// </summary>
+public sealed class PostgresActivityStore(PostgresOptions options, ILogger<PostgresActivityStore> logger) : IActivityStore
+{
+    private const string SchemaDdl = """
+        CREATE TABLE IF NOT EXISTS activities (
+            id           TEXT PRIMARY KEY,
+            username     TEXT NOT NULL,
+            activity     TEXT NOT NULL,
+            created_at   TIMESTAMPTZ NOT NULL DEFAULT NOW()
+        );
+        CREATE INDEX IF NOT EXISTS idx_activities_username ON activities(username);
+        CREATE INDEX IF NOT EXISTS idx_activities_created_at ON activities(created_at DESC);
+        """;
+
+    // Negotiate TLS when the server offers it, without certificate verification (libpq's "prefer", which the
+    // Python sample relies on): the flexible server's certificate is publicly trusted on Azure but self-signed
+    // under LocalStack, and the in-cluster StatefulSet offers no TLS at all. Npgsql only validates certificates
+    // with SslMode VerifyCA/VerifyFull.
+    private readonly string _connectionString = new NpgsqlConnectionStringBuilder
+    {
+        Host = options.Host,
+        Port = options.Port,
+        Username = options.User,
+        Password = options.Password,
+        Database = options.Database,
+        Timeout = 10,
+        SslMode = SslMode.Prefer,
+    }.ConnectionString;
+
+    public async Task InitializeAsync(CancellationToken cancellationToken)
+    {
+        await using var connection = await OpenAsync(cancellationToken);
+        await using var command = new NpgsqlCommand(SchemaDdl, connection);
+        await command.ExecuteNonQueryAsync(cancellationToken);
+        logger.LogInformation("PostgreSQL schema initialized");
+    }
+
+    public async Task<IReadOnlyList<Activity>> ListAsync(CancellationToken cancellationToken)
+    {
+        await using var connection = await OpenAsync(cancellationToken);
+        await using var command = new NpgsqlCommand(
+            "SELECT id, activity FROM activities WHERE username = @username ORDER BY created_at DESC", connection);
+        command.Parameters.AddWithValue("username", options.Username);
+
+        var activities = new List<Activity>();
+        await using var reader = await command.ExecuteReaderAsync(cancellationToken);
+        while (await reader.ReadAsync(cancellationToken))
+        {
+            activities.Add(new Activity(reader.GetString(0), reader.GetString(1)));
+        }
+
+        logger.LogInformation(
+            "Retrieved {Count} activities for user: {Username}",
+            activities.Count,
+            options.Username
+        );
+        return activities;
+    }
+
+    public async Task<bool> AddAsync(string text, CancellationToken cancellationToken)
+    {
+        await using var connection = await OpenAsync(cancellationToken);
+        await using var command = new NpgsqlCommand(
+            "INSERT INTO activities (id, username, activity) VALUES (@id, @username, @activity) ON CONFLICT (id) DO NOTHING",
+            connection);
+        command.Parameters.AddWithValue("id", ActivityId.Create(options.Username, text));
+        command.Parameters.AddWithValue("username", options.Username);
+        command.Parameters.AddWithValue("activity", text);
+        await command.ExecuteNonQueryAsync(cancellationToken);
+        return true;
+    }
+
+    /// <summary>Reports a change when a row matched, as the Python sample's psycopg2 <c>rowcount</c> check does.</summary>
+    public async Task<bool> UpdateAsync(string id, string text, CancellationToken cancellationToken)
+    {
+        await using var connection = await OpenAsync(cancellationToken);
+        await using var command = new NpgsqlCommand("UPDATE activities SET activity = @activity WHERE id = @id", connection);
+        command.Parameters.AddWithValue("activity", text);
+        command.Parameters.AddWithValue("id", id);
+        return await command.ExecuteNonQueryAsync(cancellationToken) > 0;
+    }
+
+    public async Task<bool> DeleteAsync(string id, CancellationToken cancellationToken)
+    {
+        await using var connection = await OpenAsync(cancellationToken);
+        await using var command = new NpgsqlCommand("DELETE FROM activities WHERE id = @id", connection);
+        command.Parameters.AddWithValue("id", id);
+        if (await command.ExecuteNonQueryAsync(cancellationToken) == 0)
+        {
+            logger.LogInformation("Activity '{Id}' did not exist: already deleted.", id);
+        }
+
+        return true;
+    }
+
+    public async Task<bool> IsHealthyAsync(CancellationToken cancellationToken)
+    {
+        try
+        {
+            await using var connection = await OpenAsync(cancellationToken);
+            await using var command = new NpgsqlCommand("SELECT 1", connection);
+            await command.ExecuteScalarAsync(cancellationToken);
+            return true;
+        }
+        catch (Exception ex)
+        {
+            logger.LogWarning(ex, "PostgreSQL health check failed");
+            return false;
+        }
+    }
+
+    private async Task<NpgsqlConnection> OpenAsync(CancellationToken cancellationToken)
+    {
+        var connection = new NpgsqlConnection(_connectionString);
+        await connection.OpenAsync(cancellationToken);
+        return connection;
+    }
+}
diff --git a/samples/web-app-postgresql-flexible-server/dotnet/src/Services/PostgresOptions.cs b/samples/web-app-postgresql-flexible-server/dotnet/src/Services/PostgresOptions.cs
new file mode 100644
index 0000000..cc824d0
--- /dev/null
+++ b/samples/web-app-postgresql-flexible-server/dotnet/src/Services/PostgresOptions.cs
@@ -0,0 +1,28 @@
+namespace VacationPlanner.Services;
+
+/// <summary>Connection settings read from the same environment variables the Python sample uses.</summary>
+public sealed record PostgresOptions(string Host, int Port, string User, string Password, string Database, string Username)
+{
+    public static PostgresOptions FromEnvironment()
+    {
+        var username = Environment.GetEnvironmentVariable("LOGIN_NAME") ?? "paolo";
+        if (string.IsNullOrWhiteSpace(username))
+        {
+            throw new InvalidOperationException("LOGIN_NAME cannot be empty");
+        }
+
+        return new PostgresOptions(
+            Host: Require("PG_HOST"),
+            Port: int.Parse(Environment.GetEnvironmentVariable("PG_PORT") ?? "5432"),
+            User: Require("PG_USER"),
+            Password: Require("PG_PASSWORD"),
+            Database: Environment.GetEnvironmentVariable("PG_DATABASE") ?? "sampledb",
+            Username: username);
+    }
+
+    private static string Require(string name) =>
+        Environment.GetEnvironmentVariable(name) is { Length: > 0 } value
+            ? value
+            : throw new InvalidOperationException(
+                $"Missing required environment variable: {name}. Set PG_HOST, PG_USER, PG_PASSWORD (and optionally PG_PORT, PG_DATABASE).");
+}
diff --git a/samples/web-app-postgresql-flexible-server/dotnet/src/Services/SecretKeyXmlRepository.cs b/samples/web-app-postgresql-flexible-server/dotnet/src/Services/SecretKeyXmlRepository.cs
new file mode 100644
index 0000000..e0cc5bb
--- /dev/null
+++ b/samples/web-app-postgresql-flexible-server/dotnet/src/Services/SecretKeyXmlRepository.cs
@@ -0,0 +1,49 @@
+using System.Security.Cryptography;
+using System.Text;
+using System.Xml.Linq;
+using Microsoft.AspNetCore.DataProtection;
+using Microsoft.AspNetCore.DataProtection.AuthenticatedEncryption.ConfigurationModel;
+using Microsoft.AspNetCore.DataProtection.Repositories;
+
+namespace VacationPlanner.Services;
+
+/// <summary>
+/// A Data Protection key ring derived deterministically from <c>SECRET_KEY</c>, the Kubernetes Secret the Python
+/// sample signs its Flask session cookie with. ASP.NET Core protects its antiforgery tokens and TempData (flash)
+/// cookies with Data Protection instead of a signing key; deriving the one key of the ring from the same secret
+/// lets every replica of the Deployment validate what another replica issued, which the default per-process key
+/// ring cannot offer behind a load balancer.
+/// </summary>
+public sealed class SecretKeyXmlRepository : IXmlRepository
+{
+    private readonly XElement _key;
+
+    public SecretKeyXmlRepository(string secretKey)
+    {
+        var keyMaterial = Encoding.UTF8.GetBytes(secretKey);
+
+        // A 512-bit master key (the size Data Protection generates itself) and a stable key id, both from SECRET_KEY.
+        var masterKey = HKDF.DeriveKey(HashAlgorithmName.SHA256, keyMaterial, 64, info: "VacationPlanner.DataProtection.MasterKey"u8.ToArray());
+        var keyId = new Guid(HKDF.DeriveKey(HashAlgorithmName.SHA256, keyMaterial, 16, info: "VacationPlanner.DataProtection.KeyId"u8.ToArray()));
+
+        // AES-256-CBC + HMACSHA256, the default algorithms, serialized the way the key manager itself serializes a new key.
+        var descriptor = new AuthenticatedEncryptorDescriptor(new AuthenticatedEncryptorConfiguration(), new Secret(masterKey));
+        var serialized = descriptor.ExportToXml();
+
+        _key = new XElement("key",
+            new XAttribute("id", keyId),
+            new XAttribute("version", 1),
+            new XElement("creationDate", new DateTimeOffset(2000, 1, 1, 0, 0, 0, TimeSpan.Zero)),
+            new XElement("activationDate", new DateTimeOffset(2000, 1, 1, 0, 0, 0, TimeSpan.Zero)),
+            new XElement("expirationDate", new DateTimeOffset(2999, 12, 31, 0, 0, 0, TimeSpan.Zero)),
+            new XElement("descriptor",
+                new XAttribute("deserializerType", serialized.DeserializerType.AssemblyQualifiedName!),
+                serialized.SerializedDescriptorElement));
+    }
+
+    public IReadOnlyCollection<XElement> GetAllElements() => [new XElement(_key)];
+
+    /// <summary>Never called: automatic key generation is disabled, so the key manager has nothing to persist.</summary>
+    public void StoreElement(XElement element, string friendlyName) =>
+        throw new NotSupportedException("The key ring is derived from SECRET_KEY and cannot be modified.");
+}
diff --git a/samples/web-app-postgresql-flexible-server/dotnet/src/Services/StoreInitializer.cs b/samples/web-app-postgresql-flexible-server/dotnet/src/Services/StoreInitializer.cs
new file mode 100644
index 0000000..c74eb50
--- /dev/null
+++ b/samples/web-app-postgresql-flexible-server/dotnet/src/Services/StoreInitializer.cs
@@ -0,0 +1,33 @@
+namespace VacationPlanner.Services;
+
+/// <summary>
+/// Runs <see cref="IActivityStore.InitializeAsync"/> at startup with a bounded retry, so the app fails fast
+/// (and the container exits) when the backing service never becomes reachable.
+/// </summary>
+public sealed class StoreInitializer(
+    IActivityStore store,
+    ILogger<StoreInitializer> logger,
+    int attempts = 1,
+    TimeSpan delay = default) : IHostedService
+{
+    public async Task StartAsync(CancellationToken cancellationToken)
+    {
+        for (var attempt = 1; ; attempt++)
+        {
+            try
+            {
+                await store.InitializeAsync(cancellationToken);
+                logger.LogInformation("Activity store initialized after {Attempts} attempt(s).", attempt);
+                return;
+            }
+            catch (Exception ex) when (attempt < attempts && !cancellationToken.IsCancellationRequested)
+            {
+                logger.LogWarning(ex, "Activity store not ready (attempt {Attempt}/{Attempts}); retrying in {Delay}s.",
+                    attempt, attempts, delay.TotalSeconds);
+                await Task.Delay(delay, cancellationToken);
+            }
+        }
+    }
+
+    public Task StopAsync(CancellationToken cancellationToken) => Task.CompletedTask;
+}
diff --git a/samples/web-app-postgresql-flexible-server/dotnet/src/VacationPlanner.csproj b/samples/web-app-postgresql-flexible-server/dotnet/src/VacationPlanner.csproj
new file mode 100644
index 0000000..afa176e
--- /dev/null
+++ b/samples/web-app-postgresql-flexible-server/dotnet/src/VacationPlanner.csproj
@@ -0,0 +1,11 @@
+<Project Sdk="Microsoft.NET.Sdk.Web">
+  <PropertyGroup>
+    <TargetFramework>net10.0</TargetFramework>
+    <Nullable>enable</Nullable>
+    <ImplicitUsings>enable</ImplicitUsings>
+    <RootNamespace>VacationPlanner</RootNamespace>
+  </PropertyGroup>
+  <ItemGroup>
+    <PackageReference Include="Npgsql" Version="10.0.3" />
+  </ItemGroup>
+</Project>
diff --git a/samples/web-app-postgresql-flexible-server/dotnet/src/appsettings.json b/samples/web-app-postgresql-flexible-server/dotnet/src/appsettings.json
new file mode 100644
index 0000000..6e5c6b2
--- /dev/null
+++ b/samples/web-app-postgresql-flexible-server/dotnet/src/appsettings.json
@@ -0,0 +1,16 @@
+{
+  "Logging": {
+    "LogLevel": {
+      "Default": "Information",
+      "Microsoft.AspNetCore": "Warning"
+    },
+    "Console": {
+      "FormatterName": "simple",
+      "FormatterOptions": {
+        "SingleLine": true,
+        "TimestampFormat": "yyyy-MM-dd HH:mm:ss "
+      }
+    }
+  },
+  "AllowedHosts": "*"
+}
diff --git a/samples/web-app-postgresql-flexible-server/dotnet/src/wwwroot/favicon.ico b/samples/web-app-postgresql-flexible-server/dotnet/src/wwwroot/favicon.ico
new file mode 100644
index 0000000000000000000000000000000000000000..5b1d5cf37d81c073dbacd66df3f69d9240359dda
GIT binary patch
literal 36791
zcmagEWmp_d(>6Q{i$hpk0}H_+c#vR=6Wrb1od6-g;x0iFoDJ?0f_tzeIKkZs9^B#M
zdhWm9alG?mrfYhnrmO3ms<R6KKmZy5fdJ1N6p%*-fcMWWQqup)Cnx~W^?VKr{hz#m
z4gj?n0Km!lKiTpH0L0=001Wm&nVJv){y_l%4*#G0g9QL^-~8A9Z-WBc8~`wG0sv8}
z%Cb0^<e1MVao)*EsXrh8(*S~w`n;z;dolw6WW0A$;+j5LR>?|=hE{~(xo1m$5$WOx
zbWKdfscH3)sLJu8Xzj(xu<713Y$3x$OfLQLhNy8}4uYlTL|y(QT@oUE8%0m6*lERg
z1z4=(8HnCaQ${&?+Zzf}>!bD+H;@yHKQSZYu^->grpOP5U0!8&*<K~jn<fjg9|H-E
z7vuwNu@j+x`=G0n*Q#dt(qKRua$cKUdDXg3#V1h^w0U-{V)E8A@9^~u&#`W~sdysM
z*gFit3~HA9y>$!7!B+yIi1l|oaJ(PxauD5x8~L*c^Ib0^4*b-W%Gu<d<%hfSSC8?Q
zcE<Sd=wpl1L8t2UwB3Z?<I;G4w2hJvVtuvZd!=Ic)d*A&pNQie9^*8{R^Hg$D_XNj
z;q9Kf^%PDnpM3qX8Do>9Sovk9&i(=hRu&Fz(W>Lscu7crQLUxrCM;>!e0m{r*JdLi
zX1#U$C?c6~)NA%5PB4y7HQH>;zWNGg*Ey4P&2YQ_)ul&FNMtBeU~#9Paylk8=aUY{
zNBfE9?{iK09V9WWab|*Lq!FiiDKA!9(<sNcn!_(kCmzQwHuA?m+#}-h5|&tyX-ARL
z487U+1pN^ppE5(t%8hhV`n!8?<j#A~VXW;vb>^k%@#WN!qU<{Fj+%hW*|2<vm@N*q
zOAsj>T4pa@@b<H-l4`u@_2#wD^c9zKGq>MiZZMnTL#@zEc1$?Q2pM5i^aK{)@f|5L
zgrL<vR!$YO8oI{3a_r7S=2-D~32n|#zZGdE2X1dgG4VXl<Bmzn2vWarlT8A>8(V|Z
z_P_K+c)0)doEohned9K=)z411+B%JG7yQb^y(oqU*iX!T=Xq{0W%1<+!dPDWy@E9!
zHs7r}y&k4(<WB*SQZC9>A>gj<i;+ACB&1u5l~0z14e#y!Ed1?D@jsrdF7%9A{jn<+
z`f|6@nMScBLwnwKEChHZ2;ZN-JZ#lyD3izYCPtLzOU?$*u?T~-iJDK(3TIf)&U|th
zjk!-2ioCIoUjH_g0R^k?)|LMWoBwG)tnc=^b9cUS;|U}irkN1*o6_#tM}T+I%2HJl
zrosO|p7fvZlK!73t$K@G0{}|X|2!#9%gE7i3h&W+r1|QoY6b%=SJN%ctSSBe9Zi@F
z9__y9xP0ZUr<#<Vs#d8weX@WZGoHGaKdY8-YG_H9q+KE5BD`8vGb(~9E?TD)1CMTO
zObYXz;#O|2Skz$!f2&{MNV=%ww18<|K!S(N*>2{I^^3JZggQ{)fHvVz&W+6pq)3ti
z!9XnJ{b2ma@Ik4GevGVKB5b^sp}QmS@Fj)Q762@%ewgc#XF?g<g3MV69h0lR5K|e7
zS9;wAKEzivr!cQ6zhA#D7YANQ&e9{TL`2i3Ia43Kyz&&m7{djc<K+55Z|TCSJB?lp
z&RMj!yx)o53v04Rfe83AWP%vDNW^&uGPE;?9*_RU5LDlY5`thcP97!$56;HNHp44n
zL~!(8055TJSdIHqaPVWA+$jW!YbuT_u(YpUEHl`9ZIZgE8U=Ly^W(tMt2_2M5Ktd2
zHor2pA#gqB^ryMP41_ch9#qd~VLef$ZkP1N@UW%tlGax+f$+?*DpBZXbUa&;591!I
zjx<avu`oyiR%mmqXH$7o{QgFscmr%&-ap%5Ui(kepw_2#LqK8(2~Rsdyhp!67diO7
zJEjzjc%hc<*L&O};r9r_6i-1m8wJVb(*vUwM2gOrtN6g#^@q9gLVw!JooRXHibPli
zO$~to>6f2_LO=15ljp$_1xD`Q%T-%Hi+CUcHxoLJ%bB8waM({HJ{AthxM&$4xpw>&
z)~qgo;6b1%I+Hx9$;au+f^H5XO#2udviAgAWfwD1>eIbLLwd0hXx=X$eo~*N8(gxX
z(2H!!ey+c2(Q&0JGf~0^pbS`FO7h1qr>93=$E++~b3R>P%D!Fsu-(4WAnqhbaE67a
z_`zwuHr?{KRq(e_<Y7V8KP$sIBK14tPR6ZuooY%Nv;uHT<IHl0nRQp&fjeZzs{?Y6
zq^AATzTICMySsOH#)29s@Jc`aN{{*grPkXByH`Bsh4}oK`}s?<ReX(vR#>1QtJYt!
z^!VX&+eDO0B@7(Yvu=)EFx$1dr}$}`YDCQkEt})^1aD--7vtNGE9<9|-OkIndnP-}
zY9YZ&m}kt!)HE`HHq&_Z>kEG%4gyWlT#s#avp#-*Zms+A>NY(5BMIE|qs>O&$Z)3X
zRS0fk>vlsNVA-?CKmcBaqF=`yzET;uIH$hRV&_r-0oRHNDgczsn|ZiOm+QCHZ*?9D
z{-k0MM44Ynm5d@+Um%dGjym_pWK{AMUw#j|q%IT;aG3{WO#UgWAM3i1L<Qn?Q9(%G
z=GEBJ{n>Aa(KHGX1xH=6DDVRH(*83nISQ^U^IDH)<Q~X0_32dR!$5Iei=##100`!t
zdqfOyR<LW>$8Oj$R#{Q6@CQ0}9^bKGzWQ_LjDUQuy<DKs^rJ}_BA?tlc@1zb)V;TJ
z$Y-QQ2H{Nn?ADI$2~q{1zrKxv(<Z5qLrH!>-WU0W13&+{^7vjRKUJg)-7yo77<Jvx
zdDzwMktB%Fp(8m9rieoVf9i}^FIP*teydH>u0}i@LsSLXC;-wIJ=;!<kJIZzZ1x%&
zwnL)>z-qPYbdPlhVEba-<2@N+Oq8S$ZeKt|HLaA4RAl5qSm#4Pw(bQYGWGpvp?oDC
zG8)(7k`k*cThNyeXsdCD1Ixxe<pJ%&e8OYpV8luOKx1!yeqZ0On0FheM3dImJI>lo
zVHAYCqX%Dod@D%WKdXMmJ!<nXP%mBG`$0>0oQGeWJRH0Bl#A&5vzH47X^_r)1Y#cj
z3A^9ukKWvSqjfI4>2QIu`Vwdde)GGGlhjxWooCSiP3Oldw+<vD<$Hy@Lj}w;<h6<a
zih(hqe^Y_iI?UIU0hXXd%Q+by{?XK1UcY#m*T1%Hc35pPKS(y~MWqsceD}hj^&;bw
zNX3P0g->w0i7zdS4n2C>XI5j-6LNO$Oi-?-O8EZ+@S)HB(EkH`j}ITt0RTPke}G@8
zWA_aBM2{owF6n(d%9M_(<^#%^u=Ro%DFaR71-yGXyt4T+i^;t2S|tbsgJn=SHDae&
z8(noFRGW~fH;*rJy)<+J>EREt3i^n;^lL&DTl{Z=<zHsgqilSSm;G)ntcM^%t7SVY
zepl@t9cS6cIexfnf8x3TbfBv)U`@O$;%4u2xq+cs^&7-OWGR_rKaE`%Q~SoDNe&rm
z2>X?!4)(sdCo=7Z<W$J+C6osqgsVZ_<}kSK7uuCiS4uQwiW&((g6ahaVi~!`sF#gN
zzEq<_Q-c+YzdDTai?#U#aBls5=oC#Ve?kQ&?EV_?)j#}>in%E3<;-}44y`dm{RAC!
z2OpHcxQdt2d5bTdg|y0A)&@ZkVaUg{Dztf>#NjLMYi&|CFb&-*6UMz(*!jfKA!7m(
zY^G@X?y%{?Q+JF8zydJdCB6`kz|Qv}9AX5uFj4B;BL(=erR#o?*6xldMT6y_o%*L$
z4aWr1vYlhZ<jHW&YDz)rplqN@#pO`zjj5>3__LdPbPT%h>+%v{xNAImV2Z@irtaoa
zY@lrgal!sq>A`;UIL2=Qd?g&9!dse&_Aw&^{XmQ6(~cTT!ZadKa1<RVm~3cBMoxDK
zz<xwpuf_vY&X_IK(iApr%Fre>zIF_ByPKaG3D^{)pJ=y>8;sp^2pBAyHtEec817Cf
z#YBe$Bam>k_#o<C-`LP;SXhV^8$1Q((&z@<U{a|q@`-BUG`7?f0oDWI-T}C9jR)p*
z<w7Md6D1q=KhN4^8q8oQ2;1;>{z63qsEDOnD4ED&WINO4dR-El)N~u9CD1vMP4f#A
zle+s!d$7@IX|1hkX$MmwNeJY2)+WNof2oysFZ^;CKd$g!U?=VbJ?6L=?Fd-UtWb%0
zl;q@jbsDvQjys9tI+Wqz(g{@nzC*#Bu5{f*_+|)@bsto14&9N|l;7HbWpXE&d*w1>
z_!xUCB&`-l;~|lBFGY4##<!2<>P9Z4j*p4S*2<m`8CwHCgP0J!BK(PvnlJR2Docmb
zTX)f1wy+Wz`K3KhA`p~@_g2j=!peV^`Sijmted$L7aJ+&*8k8K@=9_k<+85Zi*<2_
z7H4GMoE^K~ybAY4gcKV6u8@Yp_*5IFL#8wL!#<je7e=|Jp2+WhN{{shI`Q72aP;@8
znr3v)99XnIKd;QxcT>{3VP#_Uf7<Q*XBsm3WRfo%%tf)IOlPLk_4){^y!dkcHj2mJ
zL>Odd@W-R|aXK%&XBV6L<J<TJ1ou)|OheCG7sdDK{U$}r#H=JmNB2ovc<;0CE|vk>
zndulWat_+3Bc;q^m;ECMu?R6?N|C%p`irA}$8tl}yGLQSRRb(3%N<Rcgwww$JYMId
z3GG*p<f9=z<NNV#HC~*Z7ClFdspBT&Uzd0KoiJ*~f7iVH^jchM5e$@i$}1w1!Wx0D
zj2~!OC9(ESd+{%(m3zPa`1YY1657}!%bBtixHr4{XnN3om5nu^3}LOGzcLG0wfSwD
zc%|KV@jG0EnlNE+%1p0wyVns527PUA{m2b?@+Bzpz{te%r-keLt@2z-zL}|7#dXWf
ztJ^z`fUVqQKMXEo0e{Qra^HP#i09|%{EVN?I@V^twG-d|*GLlZ^QXEg=V6)3P1<$x
zi^(NhdN@Rs7&pGs?qy=&Y((zr0-$B*1i;Xrn?mq+2dhXH2ewGk-ZI0<QXT4#ezRvS
zuYr5|rwfU^{KFsj^oNmbx(NKU<XUx%K@h@aOCAaC>7wsP6}o~J-&`o9g?O@(rAObK
zP9p&ljnZiWNNC?@R*az*`S#lU&)9>vpLD1fd3;7iW)?bf)ed}-faq8G`Gse%e&Xa#
z+&qubNv<P(-PhvcJ|m6$x+^NCP<?+L6jX@tQc|%rDxglQzu;s#{k}IzT>N2UE6y)R
zSY*ygWZ#AmD5%pzf=7i!Fbp<Gbx^um^hzTp^9Jwa<D#6a7e07tY_A$EIDgED#0JjK
zHOa2!b~RV+zgW|jdFs@CLSOv$EzIFdq$UdrV5?s*VN~yql2K(8UaswxS6b&`wso9C
z2IUTr;R!*qppvi+Km{K6VjBR2M@cfM3*Ac}EeX^WrB9oN`M#sgZq&3=%<zc!ZRf8z
z#tlvl>1h65i1E;XwFTm{N!U`mG|)FMgazD-=B^>rY{g@|36#=Zw|{AGK_|v%(0W8c
zZVvp+7UshJ1;+du?&`GZar2J=n5=j|U^yv;j#RA9oc`!`i4Vq=A$PKnsM}A)@w@WN
zk-eDXfpr{b^3PPeaZriP1stvD#oFLbT#uop37nd}sS8p;>be*>`Hm{{R+c5AdF^|O
zL`~Njkq$ET9}M9H0O2%8^4a99Z?v)Rv!`oMo;2;;czAz&{2t2tBGf9&KO;N=MM;HY
zE}OCnPbm$)SOB+wdcsTxS}-V@m!UPofJEKm&RoQ0PMu9R;5GRdPsOigM^9uhr8N$*
z8ZjOARPCoDS-(+$ddhwt)f9cT_5iI>g;FeNeO3VFhEhJ6M6HRFD@uj6%gTEAG=2h?
zx+yZkhW$Cq`+22geU|Oiy=ghKJFZp(k&rWsj*n9i=fnp7W(tMQ0j^%b>0Brmzz;OV
zL9ZGA>h8SR<~1I9qUg_<$TWs%<KeTu0I8E*x_@xSD|q^MohjUvnTQ<yV|#<;I3MI~
ze?D4W2brymBDvB!AaU;?iwEF}aCxRvj2r3Tqg2AavOee6Nwph{o{584M4>f>aP8ZB
zTXt`9VD;{a5xGtm_XBof5Xc3GU76PVvF-C`r609kA^X2ep+n1U?VUfhvWKRQv&c&B
z)>OzP=*_tX>I+ugZCl?Gmg&yM&E57F&!!e{=vBP^cUpDV84wbBVD%42$`<rDl6!mk
z$mV@cnR1^8dv_qHSYGkVqdT4V|0A^dk7wfiztBbp=_UdIUa<ZzwCU6LcQu^yddl`Y
z_H)spZm@DBtHCCVRr<t5Q%DD{(aGj@nkb;RI^_i=jivLdDjt$b+D;_swUZTDGSKs7
zPtX(;ZkQ^LDfh_Q760*!CN_XcB2d^s;ip@;T@4*<hxX4QP0k;&_d1^|Qn6>>jf#;U
zE+?!U=Xi|XEWN@D2qV6fAZb|xR!@~|vI>PC^iVF|;TfZ<VoFyt_w^Odp{Nk%b%TLZ
z-x4OI(Rzl5=o$@C+-TZ=w@QOLpQ>F@{#g~)l1jnloCw9UU|?iOhmHBiC*0gt5<5}}
z5=^aiMg{l}$e!xXkgpLSiwA}ep#>~evhuO!EyT$V^O@Bkhggr$1gTSfx<u#O+7V2p
z@OD~yIy0myBJB>~MMA>FQuVqTwQ3ettVMGsXTp>$kpMYAd?vd3pm#C+ofbl@0A6wp
z3_|Y(xz1|@0rc-~ZW$YoR_1;ZFw$}QPgt#pR!(gU^}#y;T7`5vEmao>caD3TvmlX@
zK6`)Vhn<$;m)<C^tu@r&GlNli9Zc|okP#{2>KU+TC{iL)3PUf!QNpuES3MiYy&u6v
z${dYuzGx`+$$*Jkw05FkI1KEHffacP`xUa4)Ot17iu)q$M!6G$!?4d+-83;+ChIuF
z40tT&&?0G*>-%B;K*~HN1-k$OFxWd7h<O((P2wJXWVCQ8@>Yb5mjPNoijlN1aUxr=
z`(mq<o*l1-0M*(Og*I3_9D&na_-$0r`>d)G?UDJ5n9wWPo4^#=@@ygom=2?66sr<v
zkc7HhKHW8QC{=i#3E|W2;Z=OZdHQjdSG>|sj>pwQ9Vp^M8Xv9dLo{sPW%pW$;4ej4
z*BrhaziZ$U0XDpzCSN!>W@|tG=A~Hvo#W68I5A!%IuxP~hAo?IJ5{&c9Eo9zgrDs0
zhnc0a0fd;Vg802`oP^=3+1ZI5Cv^el8JcM+SttlwhJS*R)#Uh6KawQ=y|v3aRu7+u
z4(^ILMjPvooQ@WDdaNw0uZLz_^^f2jEY|pefgj7N-Y*C(WgbT*zoK!oIw(CA=9Eo4
z?KaH}{&kthRFQzd#FY|!(VMn0GTu(z2J<?-qgNfXb#jtcP{0yi$vkPlME|Yf8WmFK
z4o81F2n{&z>Ngsli6U&lI<xL5o!TSYh|Uz^v(z72V#iBFn#G)TW0AnXBZOC65*hAw
zDX;ocai?S7cSUfa$}<B1PfWcw_gw66Fd63=SKbsP43-8ECr)IfVDLH~P=at%7&kev
zR(1n-r0CH9{Jyv~c+1We^w_L$?T>el#zho%NX4}+BA|(=pixK<eU6bD8itiBhjpyl
z*zEF)U*x^`7BE4JWG3kLgBV?oGBkF@aTQ;56W^~VJ~KDKQWPH*Kt(Gb#M)pTn$XDc
z47@v7LW>|*n)R94Ayx#ZDnTA!+k~Z&4GDXd{fSBh;=yI|;UF^*Gm>UVJ{=qzJyM}`
zN~S)u;_BZUvFmdjp;oM`5oz;j`l^*n&QQ@w414NOM4bjnUiapn5XZ1@Q1i-Q29X<c
znClyQK5nE$7V)}2a$Sk=RSKLhoQ}UGrsnKNDp1X&>H25h#vgupAFy94OYte~jo?8T
zd*}eKJbNxrUx{sX``M}3nBIp(SddZ{J?$UTw*Z_qW6JjxX!_X2+-~Chqruj(i7jhk
zP|4`0uO8pk<Sfw48WQ_=^`I5?wCFM~_pzvFHH8z8OZUod)AXv?JgNV1o4J(4sEr%f
zU1;R;>#;<J9OLh7BdZ{p;qGlnDqXkt9O^DkvuBr2Pt+gkd>8qCQkto(aELOp&cpZq
z3dFs~?;FmGCq*8L#%wd^OSXhsyMio^iYA#MX#HYv=Zqzq_Hlk%C0ixu$prpgU{FG;
zZlf`PT#7PT!@=!#P-nk>r?>;j7d0B4z24dK<NCdd%j2WN#fizn`x`w=R}mOLxd}%+
zqeeL7rH%&}OoO7V?!P9<FLrb4DZ)!aDsk}xHE&4SswDOGneZwK9iJ^9%lpgLK<9wF
z!AX1|8ay5Ja-k2);35xYxRVv>cBYjN_4#{`R~DZ}5}pd4IC_6GI<7bP1*y#souZ0|
zK6H`h-@FC>N;+f8O2VG6%wt-oiFLuqXpfnQu7^&<^-uq6h3=>S_Hn;^m6`is{4{QJ
z)i?bTBN!XwQ<J>nE0@lYwQilj2=vpNwLZJAt*cV7=8q$qQ3sDbyxWj2yksu@Yf=nQ
zN<DVuN1EKxa&yhB+p14gj1aoE{pdo_wbq3FSKY78-%y}@wwH>+W}TfD9#2j;AB(A_
zLw<QQu3TG&TQ1H1RQsZ=%(6vU7%%&~a6HvyvDr_`KI29G+sTM578&WgDIpG#FWg0|
zzPEWzS<}hVMjiCf3kM;-!w+>-GIhd<`@igfe>5|wO2(N2+s!D3I3IsK+74_#F1X)h
z37#!g09}8dI!@GmpTrekBw#XP=nX7RWH}kQZ_j-JU^Ljpm+`c&TrBg3qBidrPlxtp
zapRtflpMKiFR`T@mA=)S)T@kCp~Ac0ObrUhz)VzzMS`7oq>2hIPFD2{#}3k)9I01M
zDj)ZImQ_joqMa|uULygOgDQdLRySm}A|7PK6@Ot1d#Q_VC(^p#Zx=5Bi1Xj9dgtdi
z*6>dz$Z*7-ZeEj2L?2##>xcDzf~7E^m%ac5cwKGzf<973qn};~aTqCw#u)wxl_AmT
z^(CwP6TRT!sa_QXe~X6srf~K-#1-+|3X(3@u~=(nwd<a<`D(YT9=s!t-uVLfYrkm6
z<Vj*k8vbFR(S$87fl;Sr_V7*6G?K15fbR5XU=+~t#&TG)`<QKImgA)YmXN^{id~ou
zOL*AT*f68Xl6Nq2m_`R8vxT!5FhbL31tZ}V!0$9ImCdtori}LY*-~FupP^Xn)MoSr
zJ+V&hPcU<#J@;T{GHmI!gnL7oD1}Wfe$?5=O2Z!%)NL2LI?qN)S6fCy1p_JFcc}uP
zv{VHRx{VFq78kK_lcm<7z^A^xu3G2chB-gCJhmAPZqX**HU7H(O+XwZXQhlZz-jK*
zqa~e{d!cBkOzmr`@O0TSlqOnGeChGG)8wVl`9zM7?I`p`Coi;zqceDIW(6k9J)Z;|
zPIce-zOjEW7xNkX^OUB!Xb~`-$n<8Tc`gw?sk!GyjY%fW=O$Y@l?g?#dk&wfs;JNb
zoMgqRmU)y5>KN?t-6NkOT@geyN}mCknd`q$qfhfx;9Tc;M)hJa8VKR9)C$DGk${p(
zII&;QxZAJgld;OytF3+yhUh%KxT2OS<BuZ)x;NpU`sG;ME^e%OIrP7)rV=z#UX!pL
zW@SgkH!_tir)E>U?{quN{$lb8Y>it+)9*n5Z8PwDJIx9>sFW8tu8>od-YbdX5?v6!
z%=3NkY$yKSj6is!TOSJ&gl_Bf`^SqoHetMfdd0K|w34Uv4P|?4^m<(Fr61GnTlf+7
z2BrG7->cCPLR1MktXDL}@qvajmBqyoK-Z|NHYu5n(}mzJ<?LHHS%H_<XHS20OfW`|
zt2Vz&I2vX<3Mwe&O|{#PSMue2?+?BgYpH*885mjOK%!+Cxsf>pK|re~>Kc1)GQogq
zG#HHjiaGT^Uia#&=occ)IulDC$w=spu;zEOtDicJMwh{tT3<3P9gv7-Q;wOR-Oh4m
zJPQ<!W8T^D?$DfS?r!?Ds7vx7G<6!Y-o|>4DON>U8Th}2tpqYY1Nq4U7OV#$W+Xgc
zw_nO&{Qzvhh-qZ591UKWJ*6*!sHZ|_e>d0X_J*Jkqt*g_x1eFJlu=bBE@wO9&%4ZP
zJxL_r`;Iu3m)L%iA}iDsz^d!(_Ii^h>!lxBtmBIvgpa}6X+;caio^j5Ji#cHXH{<M
z;AiaoC|cd%^5K?<m^lN6C+>s>yO0-2Q1kZg7Wvf4p3gm}l0mOfV|&qj`~6L}Zp(X|
z&lT-Jab-K8Fd|g_tReprugdGkNHAdPI&7+>J|?nN>*>SGb3+F(Uk>^Ef)I_3ET2ZN
zXZK<<zlqCIGGY&atLixjKY6^Uv8%+@7tp(p!<ejB`f!_`KwGrpb05C*yGwJyTiM{P
z>T5-d>f?us*x0T<qGv9Uyx>jB^d?wt-RE?&E4L1R6neUiW>mo%odultu6<=)p?E2Y
zlz55EG>T02Iyy3|z80k&4M0ZD?#zN@IN#hy4FE8g`k$-23soI-8-COrjM}qrvp)|;
z4)k;STB85@$GN^Xj`voW4+#)aJ0E0p&8yI8<ir+-v*|bQ^~cAs7ksul9I>oZ)z`5C
zL-m;xZNfP^k83d|?^+q{&cesg-r&*Dx^p<+9dTQoYnASpjhChBSA;3xH_?F%7%PYM
zQYwX>^8?Z95|+uwCyeup3tK?jX4or+q=B83j6;u;0wQk1%{j*g$a#1W?_T$2mP~Vo
z$>0{@+EFugs8|{qi5!v4m>lEaw%x~FU3J8NH`Im(Pqf@#1?!`wMRu`q=<H-gXR8FE
z74T0=ZN6W+zBBpVRUvx1ZJ<o1lIcin>_MQ&hjr)&eEKoYrOA>?0w7#{hTjc5G1I7)
z(0iacs!A!7je^GPN<%F_<~?@dRm$OTsiY)Fk$|AsttwGj0`xRsK>n{y5ZBwWc@m%?
zMI-0^Z&C)81;y1`F6(2GMv|3ed){n(+$`RpBZ>Nf=Eoe_r#(5lQwnTfHG;3dc-}h1
zzKGQhQa7$UW)8n61a428eQztMN0jFR%P0M^RW?2P#XinkNi1$r1|mrf@{Sh(Vs(X|
zoQxJ?PD+11dEJTm7jvwQdXpslKXOdib3g3=a?CP2w`Bkz*#2LRIc4CNn5C8al<jf+
z&~fC;u-W&D29h`+Wkw{9{_gE+mDJ3XRpSTkPhL81$o2Aa!NR@uALflFS;UQlQ49uI
zXh1vV-=y%Cru2CdzpyeJz5&s+NiNgP`JQjw9kts$UAHju{1X0vlz&vZmr;7uk#Kf5
za<g>Sq;&l%MFM09hSLfIhPPoFHqB*1CeR)9am7do^e)P>T;cu?#nJMGzQ5x$3`)Dk
zRY@lo^l%NTq7WMeo)%&^%cCFL<mnY~Iu5R*EZ>Ak`N+dv#C#XxkC7ASDXHMGjmy*o
zfF=_>TKZa=RXG5cxjFUCYb$BjT3A-3sy$u^GFTC_02>+jxXvF_$Z@fFGe7#gi0rx)
zEn{?ks0nc2gOqF?orc!67+2)vJ1Phx8ur=&2{4sKHLYCgWOxcX)c7bMpM1ILA?I-F
z#BjY5fZaHA0#ezs9I8z48IZ6Cg(am29U<(-39;m1Ek<fN#hCn!1kZ=IB+5|^Km(yD
z4e?!4lxaU&pS=`XCdCT10Krd}R$rwWyY_t7-UuE`jbm*kdoZAyO~QT<Ucn*qqC)9i
zHH^_7)+4aIi7q%G06rl35#XVtBLx9SwDKumE4)wJ>dw0_ygM${zXI&>t1k$UOqr5M
z2$fw1&vm}wyQafOh>lfgC5WMDKLU^%LM-dLo(_I3ymzi*74>}eMs;zWs1B=0+KV1p
z6x1DC%`F9>A#sU+qOHj@oA+TH1HEEyo@vX+%56ETH+tnJ(F07TjvDcMN82`LMT+)>
z??6E7;N_V%Jg_-j;9;L2C{h@C)ue9fUw7_eU3<oHxCB@VZ*hI!CU<lwvz-Jth}=U3
zi345}tRAjGXl_DmDkNphU|I~pfk=tlhQpM#L7g-7r{=Wo-P;W>wFqe>D^>a7d?1*V
zYmClF2c^FAADQ8^+Ai&Oh2a;9K#)45S3Fb-3PB>I_`vVbQY|rM6{9nxN9EP=s3{A2
zE&x(7v5-8dKp!WSV*DqcY%W<-yW&#*$cQ97!v5Ho?0x9##T)Ota;jlNb~u8ITeBJ;
z)dGjxFUCukZ!Z?%m~a@cR_G!T%B=juYmGo#_3F}ZYh=I7_1mlBKQg($X(r+NCF9cf
z%IX#`EDa$UUVf_sZkkD~c$k|pSrI%Jx)GjSj_<j%gMS<VA+|XbszpTDP^M&+!k@U=
z{l2&l{mp!-0Ctr!eaSud?T!_+Ou<`fu%6V|JC;bEA2rD*E1?Js8s|1uS9CheEL}9a
zhh>dWU4`2lbuPu1mcUQ5SEI6#kXSr}rYQxMvPd<ldB{50nBT~$TA-`h;|xhHE1<x{
zxQ73Y#6&{sBuG)wdms#)s`6N@wAKM4W8E4#mLypVED{tm6^qxcx6cWETlCxfaN158
z0AUC!D@Jd%ojN#1)tl1OFqVW$$Z|-OmXFDuMalif>RG0gNYXY%3i<q*n3tcw2aGDk
z>nO|`jQPy{T*1^EFu0uXP2-Mbzh7eQ<GujptqGe-0q!V&b7&9pi0Yo`ZPiT_SvuHY
zFmPYJQhvX7F!}BcFFP8O6>F|L4v(ZAN+oZKx@lEd#rj(I7rI(oXXm_2=0jEamwZoa
zc=S?G@JW4LPFH~^qANO4^I#v`(%5FQL_y?t%ZT}d6WEho%G<X#DUx`s^-1Ig<8}2{
zVRk!14v`9|B{0M#XujjQ;-e1;vSy@fF;L`{mSUKt1#yuN2_KYB=T=0*(;W~PB_}0P
z&~*^}4J!f5Y?<G*!PCtYE1#$u6Je7soBS(wE?##=NX@_P<l+*kfZ{rP8TC^R(4(06
zsfNpBwWgeqUv#y$Oor_V&e<|oef!N|dXb}zDH0?y0)O7}-Ja39CxRExlpt`wXORD1
z<JocFPto>rS#rMk=_P&vd@gs7!7SxxpG#fT_pc~!s(y;(dWN-WngL);<Dgb&x!yL2
z`&=uS%~e~jEs^)9tmYH>OXLuo53lSfgjA&P8`3x)4@I!H3B?*uj<JkTSn?uk*@EJ)
zP25>+a+k$c-#h!7>R`N4PHV=&_k!)IO(wd27WEwsrmeljXO%Fll}*1*%S3~CV5Xvq
z`@*1nI31A`aXjIXkzLjXai!S3xT0+zH?*21l&=W=9A5$0$!bX?llOx=o#_r3eWH}s
z!?NYbQ4x{wlCKAq$_Nas<#7rmso9skRhGgw8Q4)Iv$K*}D!(eaeR1>Qbbss>3;8?T
zhJVMIP{)uaph9urGIWWz$(?(bSP2Re4^6*HVptxc=<`k__rCrnpfT$XUK(yPRUuYx
zn@!w!${`B84J^7)Qlp|irNs(~wZEdO(L#$9fW&E$kOl*xq&b99y58M;`+OqFqdQuJ
zFL8d1Q&3k1(<0bm4Z}a{d)EUjCA`cER~V!weO&1v3dX&@9p@L?S$<401;3!SPF}@X
zZ~3zvcC#p|*%z@_J5-hf*4}Z|q@-6te-sw|Dk*TJF<xvU7Kff7y<{<p+hPZr<KyG;
zd=YBY`5(P=@<)Ce`OXAWhYxS}l%5hqVxu6Th6Qz7`Fm^{ow%iZ4@3W^WJ=(ZpFX&C
zn)Btd-SyI2S>Z!O#sT9|``?dSQ*V$yE{3vDe5s85?-yoK!K`faJ$mp+(m}`h`b4g3
zOjXfD=P_D{z2l7|217+#q>oct#r5N#vP0Gt{=<W$bU$J4N+)O`ly6PGaBtz;oL+H#
z_BYPG*u{q{4xVQdO2QmOTX(<U8nr&M=!%YNFE#4nDVC7Y<|i2#MM8VsUjm+vBJ-I2
zD2Vv^)Rm^c6VRT<UgX;Bl2dsetaqJ0Pb7_oSF_pvRrld|L3JbfRB!P82vGAfxC3#3
z!J@~~W9Ca;NP#MoYll#^cJ;^8xri#GC*~dh5re0}nz_H-(PKa7J=DES^AxI@T-Msm
zYyV<}t-VdKkU+#&e!5@k+~HRJ=u)P-A**5J%Xz!;?ctxd&ZD`JXs%B9bvh?H;`^y1
zudYL+_eawK<@u+Bvu4IBBXV_{;__D8THSLsn@voV|6V=KwsNiM`xF%BHs`NJ#!whp
zKuku30g}r4wFf7-fdZ2oU!JQzytXuJ(T{HrY<@8KYpZ(^+aAc_N80p(CFrY~5=7k}
zwsRI-Ms4z$+(%k$KH|SR+VAT+Y8SZv5i@(WzjAuyG#YihpS`diECzxfeGHg=d=5lP
zc-;TP)#!z!slk~Q^Xxk&bTq{hQe&AB(8T#VK9D9DxXtN6h6U^~UpCzzl34c*vQXTe
zyesa=fu&&#{cAWlO{khbH+eSI=v*u*u>A4p=Cx4HBhls4rJ(5d2kDf{qp$=5rb;6Z
z2D;oPN?_>ktWaM4R8)oP&)qjO&iCS!gXYIpt#%XgmICNV=3jgun^{&@xi<C|Xge>p
zz8caL19IV0XdxAXQw+-Fv`RsoJ<Rz6r7bFz5BEg_qpeTEf1WYNz(H2caL?ZtVJM&0
zWl9VYZwpZ{cQ-~X=yRaJ>2<laH6)|^s0^4k&-2Uq9Hsl%YoqSp{<MEHiH{CF1|wz7
zQbh2mau~&<!Im_I2L~ddQWoC2sA0Y771IrS&bqDkfA;=Us=+Y(^Uu}^Y@7;%t2D<y
znc^A*o_sMi?Knzx)?fXXg`Gw26cxqxhpt2)>NDp{b<a24lxt@#&X#;H#x62f<R1AS
z;c*Yz*;AO3Y~oU(QJJw{^nkHB-`RQ@WO&}l&#h;OqA~rdL@C~X<&Re@o;*GkbZvlZ
z(zw>}JP_1PAAAA<;POz?_x3*ifwAq5QZdjbLUCV!LPI$>;&ZYxo#i)t@OG0URyGQt
zmO?$Vx7YUXFG*nSfYxHJ-@bPVtdyK92_{9xfTRQhHgOYPx}ARXZm~7psM9;aSdNa(
zOp9!SmU|hx?<<R42aRsEo|P4s+oXx%LupZtVrdyem-P2N3$7pzH1CiEcDRFR%mYY(
zq1pNIu~Gsr8FrnYyY>8zAKt`2Y|%2+uJf`HqvM%|WhPMa(*k~t(?4b1B3=-3p5l4v
zdUw^CHPo)Wj;~@Oj_I&);B{xG8fF9_`!Ce=QIt%i03JE!zfkyZ>k(8qy#l$KSZa=W
z!Z4Bh?YI_2ZiALz+>12v2&15P@kkz0z@9_2sqyOvQXVavNC<%-Yp!wKUa8UZv?edb
zK>_xy9q9o?*TI-Lz$YW;0O9F<+w1?}`8QR^ZFO!(1qE1abds<Nety2l@#ERhyjG_6
z0R5fI^VkE1`W-!LeOY*QO<wh#n_L!)!SRt;8F4IEj8~OL%_jrTlU_D^{4dR3i|6IC
zj`2ce29Lm`iLwe@AgEf~Y=eb+s6^iz34lhEzgnUBW;I7_FsrvZV-VQF%|3Tkr{-a_
z4wh)&&5Gz0%0r=iL0sTlVZ#BbM(UgT=1)(su`ThnOZN7`R(-y`ywQ7rg6VKB<h0`<
z($8;gom5IO?~U%ho(kJDnhc9GgaYCX!z(hl0oE3|b-Go&pS+p;x<!G%e<M-r-xi?`
ztiHADl5`E&3gLG;Sl|n!h}&WJI-^xbriDXFjB$wYe0F|nTg(ciPkhL-e>>eir4lZy
z?R0IX-ms63Pgkch3j+GsV{y8m82G9Ef2ReL-<0V$i23?#6&>>%##hzq-`N#kU;28C
z^ZKLyxO@+;tVEyJ|CIigC|!?-%W9d~>F`+4ix@zt3KaQazchFSg1z`a22YUAR?E`H
z>bHw$2aP2cCHcv|KH>VLV3-%>^7iwvRgv;VrN%sTKuLwGDj5eaNG{e~>qtZZ1<1Qu
zh{u4x#S{Cs{)+@?Q}y$^H$*50|9ecu!-e6ISn>+(Q~TQX-I`D<$oBV5jWP0xJhf9F
z5JY-F9Ky0fVC{w4hDLjOn{v5vwxAHRnpNp9J}^YM7lcp^zm<ixg9wPzv?W#f&V4A)
z6{+XitM*C?S_sQq!Izz)uMf5D9hEUeYzwVIM)mgZ<haag{zBQ&-zd<I?>Wqf<sOfC
z)ap83mz1ILO}D)F$tAw5r+TE7e=WZL>#!`=8q`NC3_j;{n)lwyCJ`&=HA)oVU^Ytr
zR_oFGNHO3(U~BaHg+R^W+=h_?F*22DzIc{?i4U5~>sPgMNd?rv>42$O-0#1;t~wbn
zkpG$uLxUqCdB~*MKQZc<H14KLe1#EQJb2X;>a>aRRB1x4F4VV%k(rJcB2GK}OWJ&4
z>&v3OshD&pvh?aMjj{Tp)n{-f;Whlgkb)Ug`(3u@qGRiq$T&s6>Z=5ZVjjh+?(3|N
zm(r(np-}5S(s?o^mwBI^HHMdPwbzLEYw+`c_PPEetHLzBI{Dx42f7jWuL|6*LURH%
z2f26H1fGlrI_oxiP5V7DGBTr5%9dWc{~H0Vix1^+2O-0&8mo3nxV2?vpVNj%<=SHR
zEhDVXa_klCAc6hPtLrHP`HhQ3nWXzz-g^2%jvPLZx0-&f1UuhV*xHm<vqR7kgvb@D
z%*BF=B#8|IjN<*m)_e5KjQ5DjmRUa<V&Q1K=op+|N#fpmNpu(=lOTYrscA+gUPB{|
zql;uiJI>oo=64D{=)l<2#T}#g<nQsDkH#YZO(>~NS-wj&V<F1`y>e0|CItlwLFvvz
zA(Qm}pys9|T{u(w!H!6q$G_>qpidr&z50|D_iJ)B>}uYd;!x7&egTnk>q}2dIl(Ha
zZ0s)Fwtx3`MO1<JlLFXn+#rIp)v3{pNbU@L#x0*w1-IMjO(T2i&T<0<N~*^JB|p$X
zrHgwWmb4v|0r?L1W2m2>8vbcfbCee!Rw~BVSP(M`Jd`(ISarU2HNGTCe}ozz-hy5-
zriF--@{foJW{O@MJ!>Y0h^iBH(POkCqtUpV{+rPHK!}+UCvNg)83UF#qKv}(h?N*6
zzfsF49xv?+=zh5*h2(tv5uuOdAyKIA2IjQGAp)!R!|Rnd0;lt0gQl(dpCMkz-DC4G
zsgZt;RAsODR|?O_^}+X>m$o^ASd?JMm(M>8v$_`at!-cTGW=WaFs2YLooK?M%=g?m
zi;kAQ%4~Ic%a0urh5^+W6)?IHkWpu$VNP9T(YmG!^1+3Vao6LRKXiD8fABJQx10d|
z+&P00ij#RLc`&R>B3miI87lFV(}Ra5OC_C?Fr~U)&p{>@p11+Fbg@8no*(Z}5UPNN
zP4U9N3kT~m&TF4vE$2Tp4i89<BVIBl5r;N)c5bpFKL`PUL8CGYko+5@VBdbdxg|nf
zSKTqc-00o;3UB@UUM7{Fp+aaR5JXxC4Ssmg3Lr{bWP&8$*9qbS24}u?f%+Hxpg&|&
zy}o}Id(8~=fvGt*O~~YIE~x8`71GoSf6Z=1AQO8@AMhk*1UvODVsaPxvoUCZ<k1gv
zd`VI1*c@w#0MECh6%fvn){L*}LkJ^K{R@Bp0cxroqL4VhhC1YN+X0iTuEv`LiU;6-
zba|0v1@_^LNF)QUQ}%J_VV<N2eI-6*$@02n#^iob$V=P2T=KqX04FFclG-tHx_osA
zS{atQ_AOb8#|8BK-|TOLo;3U{0KwEgl<p?Eh`b-oeAo))i*_>L8~gf>wcYO6I4kn{
ze9LK?3ICJM`wlYaYMlfIhrp1#tOFGLIG3B7H(xq=Ca+VjzD>qtrE}>|1xRRgN@C#6
zCMi@IyRYC<9gOT~?V#%ztT^Aa-}`(h;a1@=u+H*5Ta;S7q2e|HGfG5$|1s!h-s$}d
zIidQ=zb4S=5trD`ZOR#n`|kfi55k}O;r~Yu_K2Dd0su?Y|LDO(f8R7Ct<+<e%J$J_
zNt}0ZFcOU!egSP<hBg^C5taF$IP^;Ya)Y(fzkW~_OCYDA<7%lT*J+`FJBr|D{u8*S
zs&dJ`k%@^}?uVr#nmP;8@03K)PgSj}Wsgha{Rg*^O3k7S7p<i2E4NNeul=0XQ9Xz1
z_HAh&lnsembYm1(Zw%)~enQVjFWGJH-kWXCf4;<Ad5Z&TRy!5a1}s}IuDb(`nYsX2
zGd2j3Tpy58!SQxdm8mPG6^aPe#j4VU@b2*ER>jtJ3%sN%X5u6nBZiPMp%>)9MNx7X
z^Tc2$X-UGH%{SxqxepH`xAhA#HB0o@zf41QNKI3ih`S5%zbj|)n|Kf9e#-YI*r0_g
z*OM_o5XN7TN{V<V&+Q0;&`p!?JwHiE^FhX!FmFaajS4>{y9<7L5r(AruoCx!6`NC?
zsbm&|B^3&|j(oEiMH`RMI{yJ3(9V*`lJGL!;Rb!5A(*}m{1t=#8M|9I*c&tQF&I4P
zec8M)^Lk}A0hQ;!XCPrSbO|cN8_C6XGD-&i3SXrSVxa_zLKpM>i!$6p8M|CzQsL0r
zdtyZ3!Q&ziYmLI`PpOrK=R0}PQ8<79!}>CmJ&Y<1tKNjKIpoPhkbG!!^X>D%8E|Ya
zgt1O@+T-zFX09GGJi5<F-In$rCh`HUH0Q)~eRGlp$2QD`H%PEsOInLYDr$O}lSv9R
zi(Q*A#r&@{Kj*nLevA8FiVCBev#TQ!VuFd1rgRqnz{_KVi_)ec3l>UOPzz&3T}Wh(
zzegtAM>~4DKMPD_V(<wAT}sK{KbPnqVaHz>@b$QOyg6Zk(*7f?l-Hu+>yc@5)cl0I
z7}#?rmVwTYRz^XN8AV&Ti`Cjr9&Ijvf4RT?vafd8iRZqdiS`91PgpM+KpX7#<^-If
zWEpV1Z8c!5#oqJE4H|bdr&te$5{e%JqZzoby|MRE@-NNZFW(~vi(g(hsWCo&o0Ekf
zBq;r?PAKQzr41A)k%$!U$G^$&Tn;?*C=~H0$nT!ygyAiAa9r8#sR>nVHFK(uNYgn6
zD`v$ws7<z&HdJ?Vcy=R%l}YUFH=cY3vJ~acbNPB=)}sa1kz=lrRhdZ5CHX{8pJx4g
zJaXj{Le#`U-dVvVKt+qFee68p%WVgLb%L%Pk(47QeigjMMWoCB6c-0aO58=+CYOog
z6b_J`vepRCFZi7&?|-h2*`IOY_)(N(#%qmF)YA3r17QmB5BiBagZa?{Ik(wj1$2rl
zB$>}KamU$XW-e=-G-Dbe>VK1Y<XjWYb!6SQnB~qJe|!P(uf!0L3`ZojsGuOT*I9-=
z6Srwy*pV7O#dw;zz}i5;^}7+P<JP-rM*G=_+yJIY>UqJKowk+DVI3pd%K@*dcu-je
zgzy&$4?6aIePj^DIEaAj#vnK&5sBoNELGD<Ge`Wi+2r5M#bLMc4$C8hpL?n67l(Wf
z5=3F%m_+CRD5#|B8pl}A{i+PCbZ>2H&Pjn}5ZsITTsTA1{=8^cd%JCu^8?+m<f86u
zSYexLw4xJQM0|nCYrIAQ6~JS2Bd6f}r4*wPsj~FDj0#MT!u*LQcx}?FBFYZ)g2nOY
zoh}yc;{8EqJ`jQ@9~{orwHndsIyY{^m97H+TOCW^q>JEYzha(9RwYVo!FuC1eESl7
z9~1NN+CjAQ<QXTj5&kc+E|$Kz?$%mmZgsk8oy2+mD=-$N34ilh)tf%%FQ57zXt(<7
zJ!6otQbp#w!@-e(2T+|2s|@eYsFt2pJ3b0Z+&()@Huyvv;@51+Xy4wqfr^fcsMjI!
zQ8eQa)DnVD|G9%#DUOVUI_ZgXvdG5YF}!k-T6<}EDlo{Fe_7)_Y$EduU!fdGl4Dn#
z%v%r#-Pr8Wz$7EZRt0%ML20Y@qDX6aKKdyA51;m0BAh=Q71kQIJ+z;FOQWeisW^s?
zeP@$?+R35dyHLVGW?~{*p7_rYrWY{`o5_sB{uxygL^(Km78vZOS1oCxO_$R)xs*fT
z*7r|YevaWQ>-KNQTTQfRhBz54uXVrX;Ub?K`P_CtGzvc~h=@G{t)sI;vEErLkrkp6
zN1yyW01u{uYwKYk(a6Qr=4bYU)U+{j?pw1o?dv3()053sm7q<yD$Mb7+*@D1vfq9)
z%eVLbhle$F*5U+xF3ahbR!ZdGa(}|(s|l8;3aGm}x$pUP>K&V0IJ@U#YU(~9N^ios
zGHNy1f<J7B%uh?oQZQwtWh$q}U-q39m0zsXka^UWN0%UJ9EgXoWYt;{k>AL%8~6{N
zZ8ex1%xdgK5gQ9#H9!kk*D>DSX)w$3^`ziGI)ER|ui{jmsvh}66sMv*%;S(Ztl_sK
zCO(IY8}AASt%q_4G%Vx~Nmw9!rsloupS`O)Zf=gVuGaE#6C?s+ai|OPxb+(a@NmGV
z`!!_Yn5z~y@fbs5i&yDl511Nh$Nc!QF|g;aTv~G7VaxGmK{=&%-1X7Pr2Qm@tx4k;
z8TEay>^nSG?6>uhicx{Q-_GH|4tdMMXtxVqkGPkTN&Rt)$w%M2mTni~7EJ52+u_Nj
zxkK6Y%rwQ=bkLsA(*ga!NF(vnukh`bzg=_zFW*VU&B~rCXbC&>6s^+YkxSf>yo=Yg
z4(CFho<FyO^_p6v1Vz@o${bvxnqO^HE}$I|BeT9gzO#ARSh%Q0<(RDDSGz>X^lWof
z(tkNd9z*4jv|O?nLG}#S*DYMCOk}ix>fF_t&bxc1X<f^2WR`V$mfSRskYK^DeB)FJ
z@ky`XX{#1N<-SZ~vR%}XwsDc7nBT;Vnw##LZ)Gu!Q2sP@C@B<9gcg5@Bh0r3rZ%q~
zI-Qr*RBy-(M5m<Vyby{4yg0naZcnuD#>6s*|6}Ew4T<^ClPI*8l+GES6c3D5-Ps`Y
z-7F|+FvTnZKgX_r%6PH?j1-G1#!pIuSM3YckGnA?5nt7MH93F$B{g-Oj6ETs$l#}z
zqxtjps|=PJh=3;7MMA*=>)YJHk(A1Cx*Dw&o-O&3skJo)Ck$qIkqJELn16h@ET4I#
zM2-b`X>U9NNr#Paq=rZI-tO%4*({Uj6y;p|F<aZQzxTH}x_T~U1i=m2BkcYZ(_{`a
zwEBw4_DHdjWQ4ZNeyb%5(eET+c!)1+w(46)o2C^Z|NV07T`j515a1Q}G(1Du%ImmJ
z5ixfYl^dY*4^^tHtkor7yi-Ae0W}yVS>;e;-ro<cAr^;pks@2*U}tV-S(8JiSTNOs
zuBev%nr6HG68^XPf*X1AE<{3nPuw!3BCPzamh_ji>rJD<>52h%836!Oa>6k^Y%pFl
zChjI369rNz&LyM;L#Wb{(n3zEAkNvn`riJN{5y!1Ql?%;9eMg{m0_L`@try@)Hy{|
zGlmdFz7VL^P?|UY#?|-nE6w@6_3SkA<_+0kDHcdN)Mm}TO6M#86zz@Y&3pt)oOSRT
z88ogadn!;q`Q#yiT%q_{Hw?W1lLr11KF1(5B8#b22|Guj7k($7N!Wr>*4|r$JC-4V
ztc?ktF9_|y5Qt6LW;zE$tVw&wGR>MaGp(&R-32$#d@VinbRDkp({`8VZ*m%Wf;-b`
znGiYZQ4ra0BeE^m@mA$CgfY_WUZ20?S#Q*+n0NhY^c)!$pJt19z(+PM>YaIQOrvb9
zJthe?!ul8Zj`FGB8JFKX@N9R_me}L5UY1XAWH>7C8tfHdT*T~W)=|1!Ijp2)MjB4=
zHSOiK+zXXjJ&Rrky5NM$ChH3&TUD>IF%`~>6ONVuWg*yAw2oO1jb3o|uNSoUkTS7z
zGVkL(mChQg+!?vErw{z>i0!#yOiyHB?@6q@*kI6UY#n;osL(o;@FnoXon+7pP{vo&
zo{~(QmxN7)%z??mWA6Ej6b8{;j6Qlh<)xcG;l8O)Sr8Mhdsmn4oXJ(K!sC;pHWdik
zq`+NlTAS;hvFG?Pv=>ygtJ_+|i;bG=@nz}b_Lik0*HF4|)%KdX2p#`zWFiwcJ|7B0
zRZFhstEZ~ddfay2Pl`1wvO>_?FO+xFHR*u|ECKl}{_F=h9UqQQiyM%C9kHLoWikRA
z88yXUzC>aFGT5<EXVbxeeqCoaZ3s19vp5E=`%lh1@`tu?QqSu5RSx$*=2a_039v6*
zG2k5!w><_8cmE$>Ul|Zb(}X#TED+q?g9LX7?oM!bcTI3x+}&M5a1ZV-3GNmkBtUR?
zyM4dA-}k$xXS#Yyo|3M97RZ|Lzx#DwR+dz1mVs<e?L#_jmUNU~cjxzd%-DZTh<)Bv
zz5^Ha7)XIvqe!T+Xn7eF$9Ni4ScxBS^VQxrsa))j8j4JF=Sa41&$7E(Qs9MBnX>cl
zUXH^^*Yq&V&5jsX1&igHWmYhb3Q^lf(wM5QBo)mJ+jou&<o;(v_ET>;`EKZG$h)qN
zLrEJH&G@FYR4<4jk;ZMmV^cVa4&HsgbyqbOwA|TD8K9@!8!EMgug1~=g>^{c^Si`T
zg>^Ux*Qe!OSfA>&+?t;Zd#oECZdRFCm1HjDRI=VSPWK!r<sx^)?zXEgdS?e4q66G`
zUAM!6pH}mSV{{`jBoZ<j(ewvaw3+#GT1$%0q4fw1vi>{#*>iv7kQhh^s2h6!-VWQp
z`3p)Fr;GsZJH|eLvhcHG+d~j*<ZxW=Bm*X*IeB=0$K~Vzfb=|_ebnQ&$0q0J^|wv7
z$!YHJDa=_;MU!|o%0U^JGdM^`g&8<3x<PTrJ>~a5_pRsiuQ}0qQbY<|u4;J3bg!Mx
zf=6a(4+1Jp9kLb-k!MLbSh<}=@YW7a(i71u^p#qwmPPcH57Z7VyNxHKlZNeIPON*~
zC$nQXj6S(0_41v@^!_vR4o0P%fM3$t8G^4(nVYp=_Qz0Q!m^rFWkGYYX+mRTS(twI
z47@$=<@)%@@}Y4v24lA5lmv`{jY0pr3zeDAQXfw<ohv#CoH2lrWn07XlKJ(c+1lk*
zTtc3o_kOQ4`7>lo-(k8V>(znp!5*f2(#ngBowC+jbWv<vF}+7rWqK)d<><lF;QQky
zY%Ndyr{|weAFr4=_MBk!x^k#?zEcr%vUs(?fA$2I*CTuf>BrQ!6J{OEC*}#G(q@EI
z%5M^Fwzwa48hyVHcdpY92z!}`&47niT3fv{wsA(I=@?7&&badtqjiSG_m0G_lU(@s
zM@*Auj3B=9^550^v2M%^^Vb_xE~a#2CcO3q)ypvADZZ%8-a$oXmdlh+elR6q<w<S{
z=XE~V(R;y-36#>^t9m6R#GK1*Hdr3G8yI)AN|h9({;ZA8D3=U8>!-`Kp9l=u&}6Oj
z07^G-3g@!l>CE@1$xce7uTWvo&m}YgUida@ZiOOBRFY)5EA-=2_(vi`HNEh&SRS91
z#ITBBegUy*GG8tA1)00`SnrxDKJ@$zPV#qRfH2C(F6_E~_Kj%1zweFvGT+y~KVWC0
zZ!3WiSw;V8Yxxs~uPpTE&Hs0T9uvn&jfHAaRbPnXg@Us_Uk>A?k);8l#fhshR-}EQ
zw)*0F?C-Wi^0+0k&sy5ry3&70?1r35;@yH2Xk;Df(j&Z|*4p+qEU=BG{CUV-j7dZ;
zm+ptAb5}TsU6&Zt#l51;%Rk@z?fFF&1D6=tMmYJPIDfqtGjDu$q-)#$^;m4i4AbBr
zLuQ(`aQ($Cjs2_K<G-8Q!&f6s9`HjS2KKifJ43-^ZL%if0p?b}Kc7g>h-;e;P5TTG
z7S3pHyUDCVB}Z4=Iy<;G=FwcHQ0^14I{scwROKn}%MNS%`EJUax6Fd^cZxZmTZGxf
z-xiuQb&!VJ696(bMH!{dAohdQ5*@x7fBl3su=jCyy-xQ^8S4s0J5B`E#yIi2G;VTw
zxbnuY%IIbkdVc^|TWXEFf5c`;KGgg7t(C>Eo6;YsB)rHpV9l;Xc3bMm4%8ueyZK>>
z?$Gskh|EFmpnrZ;n!cA(wI~}Ek-)l?0K%72b$n8&3plxX5(3|Pf*4X$CIR5A=O%Z4
zrE_{E_C*0RY$#x7W7D>>Gt%KZt?*3_x%YJ#m#MdobS58CVPOl;KipPk#D#I~*xj!8
zlX$cl_YZy2+`V|+vtf)GLiG(gOrfotKAv$|XX9Wz6C&L|aGF@Eyyiak1TCL>;ed4V
zZr8tXU$4DXREnxhPTL+|x2km-Z|l0QGQ@A%DV$Mp$gn9<5#d;c$JP!u!|-858@~HX
z+UK!>=}Yzlj03IYTE=@QYdhr7j^7V?a<`^`@Oe5R54;{02kjMqwWbH|%WrYQ6&|ZI
zkg$Vbkws^FZ={aB9#?rmeYnI{39l&1ghe`V_%TvFFNfTo3zc8A43f^kA5(CuzGV&k
z3BpQ^#Hq%A->b`2Z2xKOw0gg~`%D3O-;1snq+S(y__tkdF>Dn|?;VBem)R3-kw-Hj
zqgp9ThNS1m&&#<50>_c$Wkrg`La8EVV0H<~ZAM%T<IV6NF{~B0cj|v%Mo8n8+yB~c
zZDp;!Gv93Pr0LyoThbhQ{>YPhH_Mj*7uHB~`H7cY`l8Co@Odmgi7P6T4+fJf`h_ky
zH?P#lf+LFDq9)Gnf}dP-OE~i$fP7K|Y~0#q%=Ue2xFsd!mx4opA(V2e(<7O)@Hnpr
z&jj-$bD@=svNFuO+hhbT?9lIJ`xAr!MBLQij$4PQTBqywC)R;C)#DQdex|D~65ORx
zf4Eh5$sQ`8vanN6?6)DwV3(xuExG6D%DN{z3kpc{%o=lrDmSgF<Ln!a^4kAR9W6O3
zVJU&V2j^s5oF6s=;{I66!MPgOX|?o3=1mJlI4TQ9)g;`Q96gdb1Rf@o_grHw_$D?}
z3_=F>VPLTW$$;v$F7FMs?;63W@-!d5;7<IoUlzpaY!j+&Cl7x}MH(r`Ppm|41WP_k
z1ETwtrUz_JSJh=362Q=a-}|v_#RYQZsnr5L(b$A%>;_Ngr`yH|UZ@jOx}dt|h>uxl
z7#4g$pYdlASy=~Hf4-%=j-hhkkfuhr@GoM0OTdZPE9je!phklVsQA=Lq<Bw&S`?}n
zpo;Ocwv0D+blbg9M4rEW;&<|BJ0scK!!#a2dPlCZ$F;xszXlIMf7U97soFMFZ_j#f
zs=rG8ZEV{EaRuB}Rc6i*kROH9N3%TN&PBX&r6PZ^(r>i?`ugL{p9Ec_&CMhw&xn<Q
zQ1SlJGl=gJhKm2COdBu$)1#7NuBEyNmP)Xn{Y5tVsOFn1F&p*AEa_qEcV=hs6cem?
z>y8Xa5e7$Xk<IT;P=KV-Evripz2vz?o$tyZ_H<pTmiCpGo7Ott>x)~nPSPK5-R0Kl
zFc8#Zbxk_a?qqLrxGhvULcS<`Bt#{R^$S`+N0THgid!vJK5@t(RJXxvvdn)mFcNif
zF=dv|UA7BG{wiOPgCB*!NFy!=)S>XJr(6o`lI67+uK)aQ*8)qKJAU`<wClD=Mmia5
zaaBtTz=+EKLKPq7@lo!OtY1hdq*7&{!W9LW^BFSD^w_!BhwV#$fU1^T<ry~wzlIej
zZ6?DfOZ?%C6w2L_9@oEHW$zOAn(X!gsOXDf6+#1Bz+=Sp+qJuiPfbiHBs~8`KDWs`
z%KozV)ZlSDA%=P);)v<nx3z`q>gd2E4T?{NR4Qlc;&ekxV(p;zL3EiT*Uzpx>s3lu
z<7I^hV_EyZT1>=dW>r5K7@&$)ESy9Sd-#sdMf6f88BK+Yc2$je5F{e@jS%SY5(7Sa
z_~8conQ48K2kmwc<dEv!aK^w?o9E_$w+n%c8pEty*RP7<2EFas-t)Qm97`m+6;kp;
zlHn;`5H@K2r2`Lg&Sakjhl#z|h-g>DXEX}_y$R1;e}bi&^@XwA-~8CA=^lYcb2(E}
z@Vc+j3By%rTP7*8-3=CgL!SYYtH+|6ban;E>6BB#`yHQJuC@-XB9;kwp3070PbR~w
z199#CRQX?D<Gt$+Pt$Gb$c%-|0*KL^1#lx;yNM$5+&HXq{jf^&Tm<#@$znDps4=*B
zL#jz5iNsU8qAdm$$xLU^fV{lna6Nu^TAlVUla8vxfeTi#6|J*mSWyy)fECd9LFSGJ
z0*W@lxSk`%p9(*OA@}8)xYfQfU0N&O37AW*@h>SKe*Y@Wub|kh^B0Sv<l4&wB~sR-
zyZxw3d*5Rh(WKBGRCunmicv}v$N?C9xgH50<&*#BWDGUC0_im``)ymlu=ZeJ|0Sv^
zi^(zP+0D!Lm@7&$mh4A2>h~=*l{+hnTm0IHv40)Up0oT}XMq3pduYRZv04S#j}G@A
zQoihNz7RdB!FlSVjL~p-2?I=RW+<*fvl2hU8gZbZjN!Rvg|G6@-E8<eq(97M<uSsr
zvO(Lsgmfq$xJQNn$Aflp$+Gp>u;fSZHK`U4oTf%@nZnN)ZD%>jxBF=I9lIJTBQ`yn
zPeruRq>_K9JKs4{s>%_4Lp%isx74s!F_^sf3e<4#MdKJbW`$^Ysx_$bCI3uNbwKyZ
zT$>>{QWj$vA-YX^8Z%VT77@&?5h3w#%FN3Qu5Fq8h)y)vn1^5A%&GhogUorrKnMQ~
ztK{p~zAb~bZYA!349~_%g3_W12~yMEoCY>g4xm`a0-*Dun~A!8t&q<|S2VcV(rLf$
zulv^W+9r8g{2)}p3h0}k6;XHJi9H0vluw2;_hcv|K-|3jf{JDf4L)s*Fyf2M{h?})
zX2woBHO40@Iy0Hzb<w@LbA#jmB!%FEqzH$@z{5pb*|xQF?&S(ikEF`xx}LPUeS8=<
z;#n{&layn&x%}2K%J_nTIhOg}PFAu<Yu@Xp*5<|Y)fHf}$40v(`E?`dAFQX*)3%}O
zqCfit0=V%>Rb|?d#s!s{4OZq1fj(Fzm}9>Td8U#hC{Hi>v$0guUU$Iu)Z4>Yyg0sM
zyZJLV2eP3d4AoHk`N53KB0<VkfXY>r*e?-HEV`s2c7s58RcF@Xyl$87?qnJl=4idq
z&U|+9&UcmvOu@W+_HSjq1yk&VpVv+gZcA+OYx86$`%WoY`0T*+F!Z28lxdB+{*^OJ
zV-+Nhpo-g(g09c2YY22L5?bO0>S-qp*SG4l6T`MzE^|c_V#Nelqvxt{+7$!ZRT%pe
zn{*TX)ndZP9<O|Wm*1Zm9uMk7i<jV^q(_fi?(@3ZjfK#N8I}@&`JsX#)q)O~*qjk8
z`AZT)$7Twmv!SFCFpW;EY}GX{j(&RhU3yah&15WW77&z_G<Hu9>GLicO~Bork3E0_
z^Gj*WU=4>3v4RjuO8jaEKEY8;fFP*fmzBalwBi3CJrAo5ZvX!EdHWl0-pzxex{KpN
zhL;(xiR(KI9$3+7HrE){BS7fN7YkdZ{ex01X|FohxLuf6Ma7Q@C#a8)3LiVZxkY}6
ze0&f@Hzz#T-5HK%fwU+wbaO?yh^iq*1w%u^S%{*H+40Wu173d?;<s`v5hsptO-;n1
zP4C1RT0qqM-%+eC63&gsfQE=B630@Tj<Zqw-+meF6lb%MuV+#5ZmW!Kfdw8vO{82z
z&S6At_onM~Op^BSdCc+#gAmu|VIS9ImQQgO?bWr@u|PYRRfn9wOuDrAT?9L4AB5U3
z*H@#+j3eAW?fwJRT|!9HYt%@eJkmewnSW157)j;9ND=0@!AMJi(g|)KKfXKFx!gwo
zll_LCBlk{O_5zD^^O^)m<tI+VspQFzjMVwjTq3z#X8?s&`T635lJ>u>cMUgU`d<T%
zsaZ`#ykV$d&I}Yz#zlB|&EmdF=@%)1Fo+*R6S}8c;HpE*w7T~5U%4tA%m@pOJpSrb
zB@6a7l#Nw9QrIgQT#0o2$>!c-{(`I6zOk}52F!d}NW%GK53iU_keclWTPOAaf&~@x
zf7glGh#lnM^1O8gAUo$-t#Oi3@@h=MS_a?uw2L)xSe1iaI00t7h^>6{dYEK6kD{cL
zsebGf!m9}<+RG%#{A=u$;Yn0Usz$xN2_$`eJ&fZOka11F45lB6Se|leSb52>krX`;
z8jOpH=>Uo=?binf8xIHn13n<Z<n{T3GnuCH2YtCJ5%>N@I{#W>3GesGUlveQ$Sq_w
zuc)dMkSs=0hpQP(S=gGRpVkax$e-)Pi%jG-vPr)GP+<L>d}BWU8zU-nIq3FMbZuAg
zmn6RlQaM`^W*Q!#(;V=U$_XUuDZcB-$uD0l>xlhp{&g8za>!7&nt|99=k>4a$BXC~
zn~Y{FYJGwH;XC5)C(j^69$WP~sIg8WmoUqS^lkOcUODxKQAv>v!yI0x!$q2vQS^(I
zK{A;2RSuIapp}pf!J>|+1nWwu_}T96obJD~JhzzmNxAo)q9k?s7nZQ}y*yq4TD&+S
z5QE3<v-owSoM%plfP%1HBN*|Xa8OVWS7n7m=EVt{svSN%R*-a%UpnUT9s`4mlMI&D
z6*)(uIPE0Uso2OzaYlrO^UU^dr?#e}4OGR|?>r*#E>}g5HpVv;>cBD16ju`1lV4f@
z^2tEw>BUG{I5(EL8AS6Ykp5+9lq35HQGZWw*m0`99TjM<AzxGHRxJ-4r)r8A;v0Cf
z7?{kgm4FL=zDon#mGh#XG)cVW7#+juEIOW$eAbuo>o(Qs6?abS>YVoc6nJcYogl6-
zlADOs^;2ZeiAi9Gu`j}>swqJHex5B}J6lP}e8Vh%p+>rQ(THpPIHC>AxC9)An<y0A
zaM}m)c2&`H)u3)@<7s9;XLhl|L=FfbxUzsD@O0C{<%Fiki~aBP#O|&QeXdq}xzbrN
z&Mf}@D15&}uKg#?)3Dn^LT!BAtIn7-FHZ_aUOuOFdb7h)p9fLGg%%b&oXr+4v1XO=
zT{#uTSy4ksjM=?joM)s&U~>y0pjD&CJ;6)9Lcj=X<7?e{BHe0UylCOlU+)T{#nv{o
zNb3!iyLdc_pUNkb&(%3CfjD4j+eOQ#v9WnGW%+<j?%3E4L*9ET5r1U^yemK<xWysZ
z=IOxqIZ0U7SCGb+e*=j_`_s+Qy-&9^Rld=~R2epI`+sZY6;=!V{CMimv3zM-R#Ker
zFe!+bmJbK3aByJzigi)xaq=W%byJjNa)J%F_%Q{i$0bkwu{4oNigB=B;eo{zd0K4!
zIV@KUBPI8YK9^{++Y4Ucy)84j>AhbJEZHA+OPsJ^UDuboC(*W1tJp(fyJZbZ9yXHY
z=QF*TOYHZ*xaovaXyxEQplj;}L>&H7Uu9~rO0w6E_QwZ;4CeJso<z52=((1sp8QI7
z6sp&enwYcNZ;py|nhr}RDVk^9UfFzGcv9@(_it>Z5_cdqc$9lwaJe?3bzU!T?L$p?
zmM5dE>|B?UMwBn^tUQp(G&*gvAmB5RDRS2J)##;?u%%gZB{N76xCt=!c<nI**}6vc
z2~>haO|e3B;`;8pbZyOd>WrRd6eynitYS;ugAbk#9Y+{4PmS8|llE^9x4GqXQl%XR
zmeQ9e`A>C7JPtp&4cT7VKFZM*K4gByY-w4F5dkaq{`wl^q|Jo^5LVHmpxX^BvzsdA
z>Rzu4r~kZ@#kaT-f4=|^(K3ae1yXguK?LyJA8W<O%jeo(7KtQ79cf{6e$pIWlO4hf
z$N&CH#P!Jz^hG7xt2-tW2_|%v>Bey@2^Qiu{g<%`JIa+)wA+O`BOzc(yXc08%aJ9$
z#5mS8-v0GL5!DlR1`3Wv5>+|mFyJwhgwGGE^r9Y`#=J2iHE>;QD}*q|h~R?6W>OVW
z#BNKgO69^fecAC?fA_v%CKh+EIAs{OvuOQWj<b}P|1Z>}%I5!OPj1-xeMXZljv!E&
zMC)6gU@3h2tpU&cj+BMV$CXnf5z<r?tg{z4G+Pc^RN4(_x0z$VFwkK?Wl(h_!-bZ4
zW|0XwQq(_my3c~YUQM#yoTscM%2DP8oHIicH8_TFH9ShlGfM<)P-sIz@-(tVDr}z2
z-d-v1dThmM%_3uVy|H=SmD5hpAydq021NkuOjz2AY1f@1T>0Hj<!Xq}K6IzqPg+`d
zq&O%Ku2dJ#9P+YS6@BiakIoLNT2ph%&xk&7DXqTV>&7S}51f}Qyposg4nk~dvUp2r
z`$L)Bf3TUNs7xPp`j2N@qx^P$@?3C=+$o0x3=Iv{)g&@*;i>F7oE;sfbP0|!5#W8K
zb0+0W6d}>KPWJ~A=K0IM6sBg@4<))4TOC%D3Ba?>_Og1a;6;c<Ux<_Ma}=-1QOx<I
z5~9AIDF@}sT1g)Z_YFAHl!DohTm=$UIFmu%^Asg^IuwGBsv8I;K4+ar-P5|Y;N2v-
z9Hu}9(0(Qn_Epxd*W4r<UlUuWv7KpP&uYaFjVB{w(js~3d?ISHm;A0i`o7d*#9^!D
zL}Xp~z5;nv72Cb9kaE5Y{G*e0b&ot&YS@D%ts@QNO;epVbBSDFdP2Hers+F=^N9eK
z88Ivmm?WId6cLSS<^5-Pv0Uju9F?FUBmcgYhVPdMK-*cahp*G!icBjxV&-30r<4fI
zn;!AvGtuk?b~a)P8o|VH#=MXO^P%qUgSy*!PdQM^&qBQ#M*uRad_aS;7`RK(M>!7M
zTsT$L_577QyY7-du3sKo6T%V!$GlLMA|+D?>wSj@KE1xooM@wgNw6v=eW~I;QXJNG
zfB%SWp~>DTojzy*Uo|jf)W?<sGWjW%j~XhG2AX1a_dQ_<Z>LW1Q$B{@+0Ze6gH;jD
z0`|Kj?{ZxJ>q0}%(dU1MTLW`HIr4*Mv}bSO;UVQy>T`7#%3jm?XKlcy38kNczG%ez
zN)Ra2;QvRsoj4D|s|m&^JPJ8?qp~S=&$cR4me^QNSi3zbcU+HeYsKI3n?s=Be(^95
z70RNDf}zb*>~dJNT{q6ZCbq{w`v6v9=1`R*dpd4*<Y{s~sFE(B0*fPNUn1&f&k8=#
z4=pn6<aI|rJ#I7Lw#lO&{&M<M<Wm6YpD^XrRpEJ>%Mxmrpdv+yAc8H-^*9<sILld@
zvuM53B2ndN?-C{hOCmPvhAKTswklwY_~G=+%o>eTOrUUpadZ@O*hyc~^o;jW-wI`?
zrnTcCu<-9_4k_MLF6Oja`oFz26BG)4$@PiKVBjK4MKMDO_9GKh4=5O?kfVxxG+-G`
zqkok`!dPUHSYW4#qoTu#h{b9<?D+%>JPamyFJCY1ef_%fKzZg|XMwTm%n`|tZ~;@^
zH`)jSmY93*61_YkV&Qa}%I7_CeNfi788SRRlem|gBgTk=u!q@q^me6CvPE3#|0Hgk
zoiGqk4ODHqOn6UDKFn7cC7-UE+ZZ)XAJJ_Ly{IxVJQ4s72M69^AT)ya-N^2v<ZoYe
zw^EdCoBTT$WClxNQ%4rY?SOX#=G)!3@(O1@0R0ywx$ybWKZPPNhXHR0wLYUr#jm9L
z#w&^)wlU*PEmWTOC>Ev45pw$d6?dJZuQLDO)aaS8sqmcx4y~&g$E}IIwNoNOj9?b7
zF1zp1TP%WUEiWY{n;qBdp%B>Yzo6l51l`Qt0J6&>0{}TP>_@nRDK{r)2f%(d%$W~K
z@ovf`!&LK>CNMiD82~i9CLm7}xP|L108?^S#a9M<LOQQ{jy3vks|)@mrxg+chzUnf
zY{AW^N+kZI!xoQF0;@JJ^;JFNb*fDoeS|3`iqWds!J<f?^u5Y5*_+b)TOr)zk(gP>
z8RC<$7N1w{wBD0ok!bPdxYi;usD-U^b3KnC^6PyDaJ~?mfsVBEheBi=5h5IL1E013
z=X`m!ud5Qz_ZQ=7Z=JH~-Ox<GPk;V6#k+D#TDrzT?JBz5z$ay6#eEJ^ESWyBDp(sz
z!qpZ^v^OgI$??UNv%KquY4p=1Ou_QgI$?H;^Pf6ZS&E3*EBUQ{N1GWgk!_G8J{!Wq
z&C4*2eLX9sk;gdLCudYTN>1Pf9@AD^yPt$(L8P3Jf?38q<cVPli7xJmHWylo(trr~
z;Ha}P*3a^lJD27^{_<a>Dagr3uKl${{!!E$hAzuqPwrUq*><1h?f04VeDsS+pO_>3
z7no?XB>4N4mdW1C+2qNtUMyce)=wY_E+=qCAJ($j$?B!sDLO&>*}uYmN_T;~!1Ls)
zm2GULAfZw$U&&46p!b&G*xLY2Zl_7h;Jmc8niJ!PS8hFeg6z;Fo|LE%Ed&A-_;MYl
z%a6tnt*mzvn=8b_1(ytg6A>U@Ygl4}(k7S54+|3WQKL^wgj`C9(Xe}kBGH;sr*HrX
zj9j7bPGU0fUyxPS^PfLC0~hfSKKnIm*S4U!%_m{RLX{z-ZOOuSV=SE_Sv^v4gQ3;U
z<-;tMk)4l$eh&ygQ(mQ0);HWZTx8jSx#vkYnIHjh)S<DFukL*O>!!#ZgEN<8S<DU>
zMtqnZHf9(tVJm8Z2D+xEJ2v)~x~to|en#Ni{taY)VN=)KWsF^v^xaIQS*LEOR3qI*
zK)^7rSX}Ew<cEBjZQWuU_KEjY{^<u<1i!KO11dIR#AZi6bS8oSyusd#3HRMBw*Ob5
z`u}MN4uXz?fd5sn8n~5P0RU^w|Epll^Y+7CTpbOZ&dTbvgxA$*=~z~4USeo`U)ZeW
zc%;>@<#JHG5av**v(@A1U|*#vI@96){r&7xQ{7?<%L0QqR!L2?o`EV(@E8_M5Yyde
z)>T*FdwMD)-tmdttemSCzk9!Hj?ej9mR13G6CbC&(F$j6z)U525b1gHk&J{`Vl}id
zHl==?G%y{a4PA@pkI43_(>?deN^UTrBaq$4+2ZD4aUM@vK)p?X$WIhI4I>CH3;}SC
z_rDN}QbUi>dS%em@lY6r)@w88-MwlR^oX0xf(wzz(lAn56A0+S_~QCfKt$*izkNtX
z^Z}8<LMU_)<i<c1BZkltXo%yS5a>!u;sbo>eTW6Pd;l}`HfzgxVCCEJ<DGwe9h@UT
z^i467(=T&;);YwR7NT6SG#>`LN2e3{)VjMX)Y0MQF5gU1Hv=wI6<1x&oK8vn4)P-v
z)o9KqTR|K#bSOJB3>Zbw*NAZ?hQ7);%RsnN7R!lZ8)Z??M-Cw*z_Ouh_W(YQ82SM6
ze-C5|`YuE<Jy>DnRq82-9GJ}1QOWI(1irdSq}Z{)ND)Iu)IW85ESR<oP4{JHTi&hn
zSiL5x&Uj7F$*)unU#B^AP-Fw_J$@D&RP6ZM?SNV3jTby-H)!nAdY@akR!_kgx>VP^
zo#-TM&=&-Vgr@yPQiN`FRmRrqru3q?PY4eXXCIs6?iH|b+=eTefj;AFFA!qQT(G56
zqbFO6G89vC0V%#rN{RaS3QX=+{RI&g*$>pCiIw9OA_;MM-<A_c{wsL={gxOb8Eu@U
zCj7{?D1IAp3bJ{exW7yaVaCz~3cl$nh`Neihge=M{eppL#;oG60bKq&3-&UkRszqw
z5aAj<g>A}bZZkc65%-@00vZad(A~>6;%xWRz(f{A839!`hej^L5$?0*-JKp)h8;(d
z!OmPq7k@PG83?6${C&nPqu`;1la`QMtv8l$13P1(==$)__WkbQYVOJ(_Atq&k~Y7;
zQqYOgP&S~B{vqQJJA@9@YuF=w#Kh3V%}B_u(L=l@fY4%>rX~nVU<tuc6zeHy_4{2l
z!pCiCe}HmNsSIsK9Kp1>;I5n;3#w>ltHb8w$HM`8pW&gS@V`m2nZ5yd;jwi+E{Dew
zBP+SD_@aXv_Tx@ovyBgNmJDw2O`zjp+t29C^?3^y6FahCa=8f^b~YGA2{D4XL14uL
zm;`v(>$L!T(d+co%Qypp+qplU)pC!|nvcV&RpEPXOj@ITu9eLw7*6^;fiKMg2&Cs=
zHq)tdQ#_eoCPFDVGW2auGL-nzJ}=B6#(td-l=)Tq^{1p6=56v9$EtyF=Gk_nu(9?T
zlg5EL1t5eHkYXi)Yl#UvYM-_kpX#^+;@2dkK=|KD8ya716MYa<7^RJ-3ZFEN2q0{j
zhL6Wx?wSGcBy3=|gU8vBSe(F+AO!%r-P5B*c|(_Sa$fIQ=FnN&9o4HCXofA#<HHl*
zW<vsg$in)aLN_4c0h8$nwb17F-!z679sxe=m}(6jtOrmIzUuyo$JMiAy<MSh>OjO@
z3F?yz7+LfS*7|TC<KD_$d(E%1MAVlWjY+3~Cj$37_B=q@2^i|G=?oXXfA*g)>yFpb
zVDE_SL+*<IIvyDpAI0j`EhZ;R9(#IFEgVBE#;4wlhwqJ0NE}gTtgWt(JQ@S!sR!I1
zCSE5$zen8`0xtnN3Wbx3jdG9{m?lm6EHg@v6YpR-4)l07nhVf`AdWZ+%^oH|`fiU}
zlpssj#z`lAOD9xbHlauVmY^^7NIKSH{r+P}nf3hLTFi3hzlfjvHBaByKaULKezgPO
zXk`pB^?^rT>{sgduM&xMCk~{q`Rm<v^Lu1^CS}LiH1`%%WTSm@zjpNyKO`9YJcVmI
zjcldNh|rrej!J`Dn<i+sA3<C$H_k}j-oKtvS=(n<{;q!gWHIu?p^e;U{0WZ9bT2S-
zpfb>BbL~z8>0skS)HLmRJNd5B`JM&8$IuUfr6w<2-Ua-wHnR!1;I4$AhRSAo3Z=fu
zs4v&0ub(LK(h_{a5!E+R@N`H3WzK)><M%Qz!R}R>$ZPmgpQXtZ&_3bdiL_ti6BBjE
z;>yGFeO~%K%ftEbnKl*e8aEEE+5;}Itd4pl<);iTyJ^<b510_R`do;}k1vnPt8Kl;
zfrxn^9Akk?M7Mup;7=+wG@^Va6NW7&FI}7YItJ{ANPzLJbh?_+$=c64o}Amu&p9fD
zq8G<W^Zh$ckSnN&Qo&W0`nf*L{qPjv_}Bxb;sWB=?`zp(ihX4)>bLy;ikAu1j&h2^
z)XF8+?Nb4#Al(OQPmVtv(Dqaj{hV#XAMJj)Q%_C*{gu?GZ8_e%Ck;9Mtk_fciXWFh
zm19jDbOyqiCj5+8@~pp1MXF@wU{O4uKCORe=ZTQZb2k&L!QV~!_v-Zsv_W+lw`H+*
zH0zfuie8ADmLQ0vRy%_pSobk9vw($#`12P}gp&D#n1RQ0&U+!M?A6qQ!28CBqreLC
z*B)#gSo&<CLjx)waGwjbU(*j4MC*g0%h{(~Doc}&x8z49MrfzJhrP0byw=m6#k4B*
zO8Brm(H<C_Nixk(vFpJODwJkl|L~P9u=>5l{UTRvcN&tljky!QK0AUu@TNBf+)szu
z^H$)cD8Ze83wNSbkt5kfAZr6Z#0J=2h5r*;kHGDf5qQ&wJDP3p^qmq*WFqUsh%Nu%
zFW4%o!~ep79~#KxJcxXXCHD#HWdr}7-&Brwm%%ePgG+Vft<Sf2jkc8>Dsa2FkZ9|K
z4&>Og3cTb+wyj)nfCDBsD6%S*N>-ErCU}VMRGe}sdPDNq$9x9Fx?t4(McdQS<}tws
zwmg*Hj?f=Hh*g`}66iB|#f_{z=f?oCF(W6*!j;+%G%045!q0P=Ac9mzT8#uClYlUA
zPKK=o`^;d{m5uG_d(@M)xhywkr9lkfYR5j}LeA)yiVo-`Lv^^KZ3M$@-or3rg<<4x
z8QEg=iYKSD$5@k&mixL)&D9toOwy(ji9+erNA$~+N6qdrC!ocO;@i0(C~hF2zcO~O
zGokHbAW#<Q8$1X>Gtv^MSxSLnSPgDu<Z1U?&{VwtR(YS@Lm4V6NG3x?7v#mXlvCSv
zhEcB+{Kg`?;Nf5&(5SVK>IXxkUDsx|5C)JTt}um`A`~alyIp-wl6@b1uCRsQ0{aXx
z`Lj7}`O{d7nU?-OfQC*xmM@Hw3<2XtprteegOV;u)F^<AD(QF?KNX2lc1}p{U|~tC
z+D5xZhNg!|ba@~@5Ja$JZJ=~U0psT8mT0U3%%cnk&kBq6@nF2MC~>`^e?LU{%OJjm
zVzT2daj7WKV+Kh-dxrq`9t#Nv56|i*q!*nZc&*_&k3p!lRnfv%fe#=Alvv0gFt81`
z)diJUqolvmlW0WRd=c%<`UYqa4vD<^%MGqq4&Mi{f>pSDuj7WEB}B|DvBePyN<s5%
zrUc+f#P^7jFya`Ih{=SBhL%EziSeP-G&=Hp@u8_`4(s5n9)&<eN;Vr6O6Zywt;66D
za{6L)iA2g-jC)j@30N<llRZ%%g}%u=cLpJ*+YU4;>LejnN5cP%?PEjH#<nFH4f?|;
zTQ;8;sAh{OQCMG(5pLRsNB46Deq?$Q#{TtXOD{W(8$pm8!kSLTA?UbL1(5u+%w-b;
zsAlQS8VJlT2$&dmWJYpJ$=S|XK%c7=j>y$&h8?>)uNWw!^`(VC+Y0%^h)AWjR7okK
zOhgjz4;7-TM~KO=<GajUhoh@2IF48IbTrr>pWt4zv`@|uP8FX;efJSrXKvo9)sM1=
z83nxkvTcl#EdFewByyz-b3(D*QJLIf95i5Dw3M>$X7=!}0eo>qM)TwVcV&-p&Ckh=
zRWHW2=?S;VYvLSVh9$tc_Mr^RY@qhH1WG&_<vE5G8AE2c#7tSA9~`U<h_8uvD=0E?
zY+TIA2(36h;NN$mkv}a#XW>GDeK-0GlR|rhUOA97#b=U+i>}yndw1SCdk>j|SLjLT
zky3VZY0jV2QLZSW1=Q#J9TUF?qud7B5_2+Qy1EPyix3vT82WvgMuu8%=!@cy(MMo5
z@7uAX%!72{{2sDCEH>tbxW9AZ>pYGgy7`Q;tmK5eLFSjpmu0kAAMqu>E@g_=MbCOg
zN%XyGr7dicjA+AXJFk8CE^=c#J{1F)5f%)2Wg!J}z>yjGtUtbWRE#o~ZVCUEq<Z`S
znb)+Rg@c88tD#QMRTa2;Agye^2H&9+VimVp{&j=U9^dImQ^TERFjXDyIeX1>qmps@
ztIk>@He$shYb>kHz@gJt^JGrx8R)fsYED;lJ)vc(B@n{i_VwWpM^Z*Qe>OcL%2-&U
z;tC^T$r1?&<r<m<SmuzFvhyhheAo&!HP<krH>(-{FQ}1>-a58QD|mlyo_vwAi%j&k
zD=pYtULC5V&Ue9p;RKUdr<Xv><q%PFRr&KMy%Mic#DE<FMb;uP<!*Heq%be>C2h6`
zCucoJ(j+47e{YM;X~um)P>d8qo7%+rciB!}`&qp?G2g{<l8znse6;4T9GmgeaqvxD
z+iXvPVxEXF8Fy?u*5wn>SoSV_#CZqq;-3^UUBFGy+@rNd%mJFV4<Kb}jz*Q-3o=Cv
za`N|h?a<?0yUB^cQ@qc`xRwEADwm4KiS)$yzIT)awA)cWi6>ZivYXF_GWK)zYO7}w
zDOoik;z@~BOYv=^Zm+j0PAEt{7-9HBF_Mzjm2iqsZK;LjS362yjzUzEk>KL#!Nfqg
zKTvbU1sjZ?QmRQ(axw)z&b_@3!)6UjM1B0dd_Q)9DPV|-Hido$;ersx&`#29dv<WO
zk2oXpS&xun@0Tw%<n-|+kt<f@n#Gf(_Q;$`-MdOR>GHLFh%e0y*(;ALEe|=tL`W8I
zZJ}W*(T!BMvtq8(X13@f=xcS(%FKxVO$k_+FJZk$bB-$ZGG~eH#`;KN#x?BV5Wl*D
z^}XSPlezVKuGRIR2*jh4)En=`oGi4+oik269MV**%QGNeyM{)Vq?0*5rRA@QvB)(T
zJG@z+V9Ck<UN`4}Yl)=894{$%B2*n9;Z!lEenRGyCQQ0E1WGFwl5T_`Kk;&(E1KBy
zDYw-to8jPLOgHx6;#cv`23P&2{&tf4;{Yt}S0%6|j-O16)e-qn^TO1)x`Q5q4;#Zp
zs@@eWf?a0wutyLh@<A?<cFbb^CgK+(1|*wvtryBL`3yZzN&a{~-S_c35)```zymkf
zUk<&|Y6vf8Xk{ynX{(sZ3krUvkYf@s5|v>E)tb`_F_J>(iLTg+Yt9r%ilL3?qv(3B
zAIN{L|Dnn_h#A>Mw)M}7ng+YH7%8n%_tvr0^eReiS93w2V{vdfKiym3sCRgNPmI8j
z%*;lZl2Z+V(Z#2N22E+OWO<wePghp2My-7wtEH@=X|Vl+<XsJzJOql?JE}$^E6Qk%
ziFX!xAit|y*FjW{j01Qfa@9-@m%T^7zoov~^$U@bi3I#`7ex{j)d^r&OMYgNl{Vr1
z)E`g2-TG6*t@-&OW3_d1GrWj=>UC|$p-7B&R*TBlowX)fgngFCr8sL;-8lbwIB;R6
zC$v2qI*`ni)o*y=K{lq8W+4cadYM}%%yTWaS8=0(Z&Te+KPfuqET0YKgTY9jCy2jT
z#L*HKCEG|{?+#MH{(S@})ryakM8FqD8o^oA3mzyp#LT@7AX8kuvcyY|vIzkF_fEA$
zgyNU!V;axX4Ht)ln$y@iHk*-?6xx*SpM-pYK;4)h>uT4_*xHZ954|u}5g_Pjaa0Uw
zLWP-zo}`g8T7C1)A{ZS&oR@shimqkEQta)`_NT!}o7;L^*6DeBe)Q$+mvb9EvHE@j
zISJ-SYh)W-pAGLi8tjChl#=dX-E(vXE|~4*7D<G%n7n)m69;VzbNFwZHwF-D*&jP<
zO0!dsg_QXbDRZ`*ah;%vn_I~5xfyxdQ|j92e*#5dp-i3pz5m*q)eJ7RIZ9_#^={Hn
z_(Z0DhPdxKEQN*2CC-ji>^Gk^eNU)_sZ=qW8D?UH0PZR&DXDqgqpopdl+W<6ry^e(
zX*TQt;i}8@DY}_oYi0E-Z_m&rb)>dIqs{Y0vJ@#K6w16Nx$N=*A6%O#$XV^zpK{7b
z-$DfZKY%<h29OFYM^Gs`*gDk{51J2?I~oEe5JPXtFOmh6`9&M=zX#lRn)FyU3fa{Z
zpo;)18w@v$TAH?lfmJ_=Sj@0SAu8+5$Y1aVWTtiaF1SRf!sY-5M#>ULp%Qh!pea}C
zY<0sWm+lnBr3X^M?6HrtXPMkIKaFcxDhftIkpP5_V~+yLiA!olderTc{uC$Rx5gqr
z3<U1?kL<<{@4UC1Ykww5N$Mp0K%YsC-ajy+N^&os7r&vFC2h09czp^3qd)u@_Qdgh
zg~jKGZM(mf`;++)QRxl`L`3$g8>$7KoubDV_@0TZe0u7!*_vL4_^WbP{XRIHd%TeR
z!h^X~wXj1K{LMdVU#tsln>K?vQ;k0A4e0x^eeOUDzlU5UPjtHV#5(6V9v2W3^&X4v
zf%LPnM%uy)?s)E3PzNT&d7NugEW^i8giQl%5_4U514G^f`tr%se(YP`WjCV()Wlx#
z8rC$`4?9)X8qVn%>S=$_$wj0{%yGRAmSEB4vMtU4iJJqQP6g-gfU$Os1iNG6b=u)v
z2VI8%B*m7dlOyXwHY&R9S3{e_!_P&Uo0R@99|&?Zj}92oygD*YA_jm`R-z2_;;>40
z`qDVKK*vCVDZPWDz$CTDGCR)=FE%4sVQ^5@&qF+YaX-Ai!OGohc$lfG>g&^wsA16Z
zlU5jlBE1OlHQDp!N-J)`?q1kYEv-@uj)SKW?75bjKx5yEvR{immz~MG`jrYt({!b_
zKsNOAG=p12g0q~TQM*7BI$RBig+DcqRAfic-<)zaE`^+F+$jl3*RyA@ABk;zZrqzr
z*MwIy+Wbo@t82B0`~*QkziK><5l24eH=k$@I;rR)fkuk!%b4y$j6|M+?UKCx?i9GO
zFGMxOB7N!FuQ4ak*521sQ)m%D!GWa#uh({V_#K*ktw<aJF5qK0BMHBu%QuV-;|MsT
zW_z(irYn|;B0a(dJ6oYVOTckcvTl}1!=Ihg;6J&((shV??63jQ-CShxfa3xW53kT%
z1X|WLw8XX27FiRMM`68Wn)6ZkZgW}_h)<;kgSa6TSEHjy_YHQW(Xt#D?cCoOA5-`2
zzRY}OdMcouW=h(a4JNhU8cxSI9=YW{EBxy1tNh_UeB95c7xrlgb{DlOIbIO6&%Cnv
z7y*k-=))JNLm8Pp0%1Y~^`&nk+shNBUpEIeq<Nk+rc|`_<Q~0Ow^?5c-Qzwpxk6?w
zdYEjT>1jrq8)xfJ+|~7us)}BV#$88qu6-lwO9P$@gvT)`|HT+J5s!HuRovyPV4OsD
zBNwVP;}s-PWUCsg-I)Xu`*`=~E`No85OP}RXEJSVrv9}SeqF0o;&J*c+1i8d@T-a2
zZM$i0ZRUiU$NYB*Cr}H<Xj>+rt*-r0@m9Tl0&YaWP#Wpw1;_)yZ1Zsu<iN4U<M5Og
z;V1sMh1$ITmTO47IU3)(B{qM!Tz~MO`M<y3)rxkaq~s*{46ywzG_7E5n@!x($XF5*
z8{oq%T-LB(B{m}w@}K2fzSBa?1x@IEvBH^<$IqbO>3~Y8ap$6roBq{KO<na!DZZBJ
z&&rI3lV;x8##_T<pFrxhR&MHFOW=Cmp9kMU)CFx<5Gt*h^%<EJQMNUTM6G?k|BM62
zS~VGfw<#9+pF{hh9!pK{<RVXNOI?!yf8V=C7_r~b%Wl24D?9e$_fD+Y+T@$l6U;4I
zL0`TJPN~)mY7?|BrSfe2_4tk*px%ipnzDXkHCD2yUKZ{%m;f~^71_z*3Y}Vb;Nr_f
zfc#HD4#;e>P_8V*wat!H`0@!#L3@7lC$IVMExxp~Uqt8b<i%<wwxOae5AK2Q(_)Sg
zTXh5`1R-hx2WN4UOP<|K&tq7%OUGxL$BDh*V>u<;m$N9BqDLZFzXja8{B1ktSSYZv
z?9Fwf!0aj2i%_mE(byUImZl)|qDfiK35Z%iZ@3iIlzVvteL;hGgmF+g)+Dhz@emNe
z*3Ta}qbJIX)X|c9Yb`b_=yjtFy+eh-DS6pW4S%fM@fCBo{e_+UfC30;+9rk*>{|H-
zu>%-_b%CWsRMoAHe`5b*x#vi0qPaVEfH6sQ^Peh#&jvd?3ERJ%fYG~bgdardNaM!f
zdP6Bcw~qom7+{zGObh&s`I6oWrAbaG-yihv84p@bjZ!Q2fLDH!_1^nL-*Yhnw+S5*
zwp*LODCA(%Y!d~);iDA>9fQsK;LOx(xW+kvU<YQANRXD9vTQMxDR6PR(E8Vf7nVte
zJuF6bF3DdKK9Z1lK9s?D5i|+m&s=UYBq*G>7fSwNww5RP0h*TXj393?Fm1eh8yacg
z56||?q58~)XZg{b&A+v@+L`g`5jkknVtb}1*IoxN){8_-5X?yykrg=@JIb-?JQFL8
zeyXrhuVUCy{5x4HWh!kV@Wx)@^MM<>XgkQDss0|Z&(%Lk0&;KbuKUYOvmbjff_9vZ
z!V&3Ug<Ro{28&`If&m`Gz(|LuHtUa+q@cn~{AY|X8!0`Z9pJV&JNkTP81%EoGiI2^
zU3pSR<yr|*_h|G=a$<E6mW@IgT{1fjpG`!^aP6F$-eA>acaN~4KO_}u^sjP&Mjz^o
z!^_>ktOlDMOB0QU`hlgzwCEqB0KxG%zx6KL;bibw>&wdTX1bCun_7egOq^AhppLH{
zB|YI{y!RLk(~~2qM12bpr9^;W#h2pDW}Mxtv$rL+UGDv{q`InDR;ndyjgh;Q?75B{
zv9|d?Y!|irBe<zVkQ=c-NWj94a(B@%=4EvyBQZ<^Av}_G+K+oJLH<Za#<V-G7b@@V
zeoMI5oCr#K>p{F_ACNq2ETt61(byeq`nCdDZnOA7-D$pqy|eK!S<TZl9EYM${{~K%
zl7wKfhh9yH#wl;#eS$XooV0JPzT*dO02~oGyh4WYhYmfJN3d9LG(T6(I}m|H-`1N2
z3+f<>|0+COqp2}*<$<6YHL=QBM1Uaw;J#h_+HDwYS>7tw8|rbHYxx1s#8y4Vmv*74
zV%X#NHBk^(bnc`@j;OY#LB$GCKNBhf`Y<bZI+0+{-ckF@Sz5AH{orrumaz0|oT&bE
zbs9gsi^|ydC2aj9`)`{^!3R!=jsEj}p%%?4O%2B7@$mAqg62)$%O5^{&2V0-B#`Eg
zqjDwG?qa({<T%O`{N@D+a&dd#!M!?7R^!%{FU?}BHL_NrcMeACL@lPJ6|rD0k?%Cb
zuPW;N*7D6o6#`uDwcjxBTQ$F-2CCGUzsY`6Pks-lcEKF9$+w_zn)BedCP$19<MNHp
zs#FS(Ky)SJ4Qok<RHIZ+nzsI=t4<F#^OHKW7)@Yiw}TKUqeIn1!%7Mr;!@JM@<InM
zV{pITe)EH2@EUA(uN7iaz$U@ZF|oXkTPc4;Za!1<;wVEf(7YCEhXN5ZiPgYb$Gv}A
z-2G{+QbVQgFrwFM&cQh+;8|p8NX^rG&EdiAWOJb}fw4N{@QMyed$FZXi*Dno`Z@%Z
zvJi-j)!odK)t7XXm<HKlcK7e08MpL#%-J?M{|f)lurssvgqA`tK3FeRO0*?5@%w>}
zDrRlFt41833o_9*Ua$9bbe&X8BM=?pLf61--D2Yra4;_R2{U$1y69@{S^-bUmCp3I
z6YFj2N7TIe<LYa5$CBDF7n|!}(RpIilI(Oq64eYF%uqqgw-?v(P}OZ32wyM3&pM$k
zq|@S-Vu#ypDLx$Rk^ZTGRFofW&e74v*=}I!hIr<AL>~$lEFHWbaF2C5@f>qn`<%9%
z8-GXEpW*$b)ug$(gYl|HFYCx&_*P1R7(+>^2=XcKsQx`&DRrH8%RD(rWrjvO4`GX)
zGPW5v`Ou%-&jdQ?lUq+bz{%Ah`ow^mCEwoMTeu>~^^vHLh?fXi2(D$HaEnvP+TD5S
z9((4v6om#X`qxPnmV8AXGyj{OWT1_1@2L<FqG`t_8#@a=$NcZ_zCfM&*9g%V4xxzt
zS{637%XgwAEU*-%Rl$utz2w*4GvnOvk6a<$e8ug*GfWn&eFR}^_rB1x10M#=0Te+s
zO)c#zJ()MtU2vZd?KU<P3Gs(NJC#;};pvfmfMjfjo!g)qs)5?NJv9*LgI;fdF$QJT
z&(OOx1nU~FJc3q>FKidmyylEQ;7U|dBh5@c;eC1W{Mv&6ps3eSmg7V}7hu+J$*ZZo
z)BeoAAQ*`g{SnfUo$O<I^ZY9u?gK9Xfnw%CQkn$1D4Sl`Nw|QYlWlfJpvVv>z!t`s
zuqCu0UsVJwYT^h8)wh+LeqbXz`;B3pI2O1(nOXENn$g7cKZis!#s$}E*Bp4nHF?7j
z_zqh6^?Z{pAW!DmJd|0iC|cBI6mX|vKGy`JyIv=PQ9%v|hf()*yIPb5QWMjB_*@s{
zqRboklDvMgpa?6@z^t~4t=QOgd-&}~=T9eU*z<SLq`mq-qrL!&n83zqG5sklSPF_n
za9^J~Hw|i_TFoG_Bn3(zmv@^Ts#ux*-T}U^{|4v-xtl<Gb~7MZ10pf{OkojbhiQ}~
zaJW54J<F#i;7Qf|8Gr7?5pumxMKFt4y<s5f_W3to1r>nW1Bb>A#RStbD4(z)wnHnl
zLF7Uz4Ffk^c2Y4x8-_F6?_!M+y4$P+*~VOo!{8(F@V*4}p>%e`diWC0Ig+}l$?+X<
zS#ZFQe!BZX5(y_c6dEaMqLa5ClhZ&D>xE(^h-T{7lxFypUc*n!2Ai(M(hPcTJ4&!F
z*F|~n#rRWn67H0Xxk{}Wk=3+)S%3y}LXyOaDt={?_!DOcDZ*TmiB+E~MOOb@5C#ke
z%mABMaK~#WzON=xs-v%1I1x8^n?OGcrYQnEt8{1FeGR+F(KS5ohX+Bl$Y$$m6Uclg
zWTQDRvoHa})>0nX$x7h0Ji&=yx%8V`5^-pO5p%a{sqg`j2JCVlzncT;+eqZyc&qsq
zG_yl9(O=##3%!=mSU~Ab)eJ~WON497o?GGlmp0hC_@dhUP6PwIQwfE2{oQ$v+%Gb^
z3~V8rTDVUVsIkPs9Ytm9vU2_RyEJp|AlOh2Sc-bqZ<U=1%5Rk)YMwgfQ3I%S;J$)k
zi}2OKM0KiGKyu*%KyrSw+Pqe0t>Z#50yKf(kS)O!3q3GQ-i1xCgkcx{5uu191OSpF
z01`Ju7cBx|%%f`#Yr(U_|HXx}H5{TPII;1hS*Y6g7KPTQ5$gUJ`+g6@qLeOAhfFn)
z|2HiQv;fT#ApGO*{eyK++iMO6aRjTyQj^?JAiR@j1#^m=SqsACSFltVpIT28iiWp)
zj`R|NXZq|3RG>-9dpiK_99!fMJQ7y1XfwFbe#=G4L}eWo<31tbcRsNV^_#DFDPgRb
z=sz;iMCb&q{N{I}YY93NTohX`p5~e1-}GSlIYkj9_bhdw!-g>~&jg5me<DxZ{a2$u
zGTP7=5Gl7Dzwe|*qCW}Z<V*YU7^ZD1t|V2MaODh)`j9{)*~wSEtjQ<0rU%@4Q5o;y
zswGLJnZVR||EH-dkB74D{`VNh&I}&LK1$X+CRwr%CQF3!C`&X$r6Ez4k#!6*h?x)(
zAxp@f<#}kazLpfy$WHNOS0cN-m*4N7_s{#j&gb0s`J8iouXBCRx$i3mmDoaaz~*0I
zkf_CPW1P^|YP|A~7R%I9ty)&+DHB6{x+AdUS3QqZ3-7Q2=;^hLo7bIWYrgTaxpcGa
z0EvnAlWp8|BPu=|WpXW#lEaY1Ok~=K<60*&x5Cpf<kA5VT0SFPFF&YRFoPQ<Rjq6k
z$3&(kTs=Q%lPXS$Ugw9)k*&G@<`+~I<5)Tfp`y*MkFKTH^O8c+b2`d+G3E+3Jwa8s
z{*{w^wRmBD<vx+z(A`QgQj;ukYP(GX&g1+S0YQun8`aDcKcW&UcP^)hc*k-IoH<u_
ze*!tZICLrVH;My9kvsx2B8PmuJxpLNVs9o~Eeg}f00T7HwFhH65bN$`W?8VIU?Pjf
zgocMS4+c$Y&b|jVvLi7pMCfg{^IJgznVcX~5^(?<P6kz0q7BV~4r8U^&^Y<8L=kbX
zB(s!?@A<-}=0E4`y@mzdCg2<bAU`kK$Z_cvJbWK^I>*Paq}<m;NC8ebrjG!6-64$=
z%Ho_sEipw7=nZ9&(QaXuUtG;)S7B5<fd|SC8Qwb7psclj^;(?tKWp1nayWUf4Pt#J
z(0|)s3RlIE3gb{b?2Ea92>sf3`zt&DlZR+cp=(Mu+xy5NcPR3hEyC9R_qZ42x@ac&
zM6AIX9>|=UL~Cn{e4~pd5<4ZMTHE-})>a`)6MiO#vvCNu?2xvRt~~v(-eg&{GhOyd
zy&&`e_{ye^1*;i^1aw|xAwGESPg(LZuBMPJTorZWfD5U>;sFU6X*~BmO>q^eBG8n4
z{)(YrzO5vAyTd(aIF=rbE5JxUq=wGI7)en_yV)_Phm%Z1Q#r3%_Ga;2k(L@3@;ly}
zEM$$+id(~aU|)LziYU~YJ4FmQZ{ZT*DqX|X>H8*zXK0hV4F{;P0jhrBN*a&+BWku)
zt3_b*s=3i9srgQ0+JO#X0jDGV$N_2WUoj`UHjwN#NF`=q-A_GUJJajHQ|??Z@r6kq
z+IZS53hAU*{(j2&S`Bg=|DOHqhY@P&MVNu3tw%M(K?oO)kiW(UcfR6nJE+Q{!SVN#
zq!rNLJp3uauE2LTO6nY!<PF*22cEop#%ezH<wonMNOj5)gNY0uOt4EkS>aIKVq%f!
z_G|xVi>cnXRhtG&hxXT}0uwt~KSB@=J2B?i6LE<3OWcZYHK{osAj;+smy+)W^knW1
zjWBrv5>6i~cc1nVmB_T}NQwAmbnzzk*Z?Th&+`e6LLfAFp=`J*_f~|EzWq^2Cw!ih
z`;wk;@%|y5AmMzEF2%}&jMSu5WQPWicc-`1{Z`~MP~G?cCi1{Ry~3&U4WX0xQ5Vh@
zj}wP<UUdCA|D|$J(QI+`P>S(KW!JUeSJ{?*P2F|G4mn=I3iu4RZJ<WyiH6#Gw+_vm
z6KrCqrL^tq?ynLQ12O}ffygK87Xgp|dEyeb@I8EqQ|-lEI=`l1+?Ub-e|FtX%4CiV
zjTIaKg9-RSV~34~@EbWpx6@GE`U?eia(G|WlH-n-NnGfb*Up={U{i6tE5kbamy2`&
zcHKU~a%o60O;`axzT4=@tKVv!;K`Xu7vzFNl#Ub1t`E#~`P^mb*K1-wr)tdCTn%Z4
zGOF=}#l!D{u?;WMa(B)|Ug7y9c|_OpPXEEwp_)%H=dz-im6-!nmLpca7CZG~MR<=#
zH&_za&+!O$v$6AzuZ)E_;6gxVNhLbc_>}MkxzNC?aenfSJ!eXO3WepqCgmgr=484(
zy!ST6I^TO;xYm1;g@Wupk4es<o4ZPtjY}}7Eyjw4)^I-bC{#o7sMPZifaNzCQUOB7
zf2z0yi5q?TXL8C)mT*F#>aIZ5S5C%)x2n;({DDExl9kVk;l?~8y)Iem?5!HpB{Yz8
z^B3~<l!$2Tvw;dj6na1*`nr(=BAOU@Y4?;B&fl=U`6A0j<8$n48TV7HO^WP%FOs_c
z3budyw(LLlwXo={*dl8Ua2lD`XmS#KWaz&C*ze~{ajb;pH8Gj%b8S<0dl!P4yxC$~
z{Rre;K8duatpaa64o_J&ukJ)nB_t^}9G<Nl<w56l!~2)T(?a7sc}0Ilx^klRfbPfg
zb6HQ})1gcqHEPv`I@b5{0|=y>TX{7%6#8s40ykhsf#Jn*#d((Y%3bJ^5XcBzneWUo
z=jbr3V_lM!3}Y3>iu8tLI#M?~@*2b20p8+T{oo{nXl3P&>3qX56SsM!E$&^!3a{Wo
z;TQ}*2a9H;KXa}~oa3XL-Sq>A$D^xt3wPHnp|WXzQ<$VX3bD{MDM&Y2ftP`Y4H-1|
zepGDR0yr&iNUqj<gsUFz5Zw1*ApnBON*tKIk1g9@>z&~;lXz9y)bn=v%n?U6TYsa#
z$vNty^04O4su`cHit)OIKR@PLyFlDM{YM9KZ8*>q)+K7d^RfQn_$2k(x~6|^Ep#za
z6dM$Vh$RW-@?!A&bMeY2m9?~HN(_maG=9+s+l&^%n5o%2>jGyd#%LXPU{fVqa2<?Q
z2pDfHA$Aans^0Z~-=&U{*5g=fiGm<CZ$SUW`#Xy-*J}=YuT-Td{+&@_V~j~oXK$+s
zuJbgXksgJN@v^9#g-gz@YABVHxZ0}eeEy6tvUXJ|lD;}R(*?HxIs4JtWR!2Xx}}$3
zM%7(HQdlF+aSn2z`T=syb~o(I9sFHEh(mI0V^YQFEbz{DAH5Ro@ohG!X}RIWMFuK?
zg^f)#iy^w)m43y`YDP&1r6B7Nm&Hc3*c}nK)&?YQ?uZs}8;k4S2$MY*^ZgoAXO{)u
z6@bt7l*|mv4}oMbr1+RttjW&0Y6@wO)}y<TgoA-cH4`aiS+BVNTAEk>XuY6DfSH1O
z_ZB=p_iD^k7kf&EogJ-rWkVCd8ZU8N>q3Q-NdzP5rD+}F{MJo42Uc}|_UB;P_&BjN
zV1r#IJKf%^-=D5Yf!y(a;Zi*h-|G7&-!1gy&0GaBX)E^Tbij|KIxqU<?;)|_^1Z3z
z<20;g?HvB;g>sWYeI0&GZo#n<FOIH-;WuzeT_>b+m)VCF_LiRR3o0t^*VLE>d2U8c
zz@Q^-IH@NAH&Sn1+4;f_&O89}V`NNb4t={{2Bi23BVQV{&Mega$tvax-kg!;KdXl1
z8~;3Y0yzE_DH6+b1U~x|IN@J5KQAcb-0LEzs3H#_%7eHmn&%(UY0+skmR5dqtmcm!
zdP&<1I8sG{B1+#mt`2`(Z49jM1J<M8RqAa?Q0S}gwF5(R11o&mKm1C>K11Qx*HPVl
zmw#vCs-*3NucV;BbU;MSZOnzrXY5va^gA++i#!~^;-IY!pa(OUWBDQJeW%OTJCRV%
zqJ`5yxV`3kc8EZfd?QoJGHy00?L+bx7j!kcEDQf!Mphtu=}_feIYZh_J|&nJ#{nP%
z^BDVi32klWQJ0fcL@(XoXrrJKT4<&^%DecJH1mR&J#-?~3be8?h@lr>rczQFNy}vt
zsn%^4g+#KydeDK3`hl4^4j1&T^d&$0y0(&=WoP6q@3W0{8u>G1x^mU>n@`fG4_Y)L
z#rnYGkkLY)DcdQA)v$u+>=9b`jda+~utw`M^^}2vl7FaniO{%m`}4Gw4zi)z<METH
z%GRO@&y#tP(N^dCp2bRIb{oRC+ra9G!Ff&|=tt!>9m*Jq<1o2xe<}Nl?D#Ob)HCvU
zF%Xh*-r2)Xr#u8Af?<fzno_FqH{wg;VEDnj98>N8h0s)Kh%q7?+D~*Xa-z!l0UuH<
z$OgLxk3m|{COPkTqzwQ%hKCgYTLOP*Tb@6KOap6Ew*=Ty5N~;VD_wWCYY94Amlpox
z+ia7RW2IB{|EZy=PF!v}?pY`o`J>8HC5*aohbf@`+62sxGdoG0&hfF55iqzR%XIP3
zpm+hp24oHklEErC%Dv6f^(4eQXILoE$#b*s&MZT9eCxCC5LP-DL=CL(gWlXp;cYgU
zyS>*!q@gvakNXr0=PgJAC}Dxu?l1b;#I#!>a=4oh)C|I&pBIoO_qfm(!ypr|@F9Qp
z+IvVU5W-?bMFf3Q-Lw@gLO&>y^-HG?O#tLF*1@p!?W%31=Bvb9zyo#uIM34<)H4w=
zkbfux=DYBPt(BMS*YH^%+MiQMdNlg4;zc{I>AgYHzU|yWEa*sf>`n2r?u)DIv?d74
zb1NEl;&Tu`NYI*rdb(WhQ_cu2@PC%Ir?FZg7{?h9tO)cKN5w_W*FP1_iumDia89&o
zbd+d~SH!7!)HL*|m+>CsBrh4R@#yo~Xu6McvLtt!x>%wqeBUsnQaU!*C(`bJyZrwP
D<sSsO

literal 0
HcmV?d00001

diff --git a/samples/web-app-postgresql-flexible-server/dotnet/src/wwwroot/style.css b/samples/web-app-postgresql-flexible-server/dotnet/src/wwwroot/style.css
new file mode 100644
index 0000000..67508fa
--- /dev/null
+++ b/samples/web-app-postgresql-flexible-server/dotnet/src/wwwroot/style.css
@@ -0,0 +1,341 @@
+*, *::before, *::after { box-sizing: border-box; margin: 0; padding: 0; }
+
+:root {
+  --teal-50:   #f0fafb;
+  --teal-100:  #d0f0f5;
+  --teal-500:  #0e9db0;
+  --teal-600:  #0e6ba8;
+  --teal-700:  #0a5a8e;
+  --teal-800:  #074d78;
+  --gray-50:   #f9fafb;
+  --gray-100:  #f3f4f6;
+  --gray-200:  #e5e7eb;
+  --gray-400:  #9ca3af;
+  --gray-500:  #6b7280;
+  --gray-700:  #374151;
+  --gray-900:  #111827;
+  --white:     #ffffff;
+  --bg:        #f0f8ff;
+  --shadow-sm: 0 1px 2px rgba(0,0,0,.06);
+  --shadow:    0 4px 6px -1px rgba(0,0,0,.10), 0 2px 4px -2px rgba(0,0,0,.06);
+  --shadow-lg: 0 10px 15px -3px rgba(0,0,0,.10), 0 4px 6px -4px rgba(0,0,0,.06);
+  --radius:    12px;
+  --toast-bg:  #111827;
+  --toast-fg:  #ffffff;
+}
+
+html[data-theme="dark"] {
+  --gray-50:   #0f172a;
+  --gray-100:  #1e293b;
+  --gray-200:  #334155;
+  --gray-400:  #94a3b8;
+  --gray-500:  #cbd5e1;
+  --gray-700:  #e2e8f0;
+  --gray-900:  #f8fafc;
+  --white:     #1e293b;
+  --bg:        #0a1929;
+  --teal-50:   #0e2a38;
+  --teal-700:  #7dd3e8;
+  --shadow-sm: 0 1px 2px rgba(0,0,0,.4);
+  --shadow:    0 4px 6px -1px rgba(0,0,0,.5), 0 2px 4px -2px rgba(0,0,0,.4);
+  --shadow-lg: 0 10px 15px -3px rgba(0,0,0,.6), 0 4px 6px -4px rgba(0,0,0,.4);
+  --toast-bg:  #334155;
+  --toast-fg:  #f8fafc;
+}
+
+body {
+  font-family: 'Inter', system-ui, sans-serif;
+  background: var(--bg);
+  color: var(--gray-900);
+  min-height: 100vh;
+  transition: background 0.2s, color 0.2s;
+}
+
+/* ── Header ─────────────────────────────────────────── */
+header {
+  background: linear-gradient(135deg, var(--teal-800) 0%, var(--teal-600) 100%);
+  color: #ffffff;
+  padding: 1.5rem 2rem;
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  flex-wrap: wrap;
+  gap: 1rem;
+  box-shadow: var(--shadow-lg);
+}
+
+.header-left h1 { font-size: 1.6rem; font-weight: 700; letter-spacing: -0.02em; }
+.header-left p  { font-size: 0.85rem; opacity: 0.8; margin-top: 2px; }
+
+.header-right { display: flex; align-items: center; gap: 0.6rem; }
+
+#btn-dark-mode {
+  background: rgba(255,255,255,.15);
+  color: #ffffff;
+  border: 1.5px solid rgba(255,255,255,.3);
+  border-radius: 8px;
+  padding: 0.5rem;
+  cursor: pointer;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  transition: background 0.15s, transform 0.1s;
+}
+#btn-dark-mode:hover { background: rgba(255,255,255,.25); transform: translateY(-1px); }
+
+#btn-add {
+  background: #ffffff;
+  color: var(--teal-700);
+  border: none;
+  border-radius: 8px;
+  padding: 0.55rem 1.2rem;
+  font-size: 0.9rem;
+  font-weight: 600;
+  cursor: pointer;
+  display: flex;
+  align-items: center;
+  gap: 0.4rem;
+  transition: background 0.15s, transform 0.1s;
+  white-space: nowrap;
+}
+#btn-add:hover { background: var(--teal-50); transform: translateY(-1px); }
+
+/* ── Content area ────────────────────────────────────── */
+.content {
+  max-width: 820px;
+  margin: 2rem auto;
+  padding: 0 1.5rem 3rem;
+}
+
+/* ── Table ───────────────────────────────────────────── */
+#activity-table {
+  width: 100%;
+  border-collapse: collapse;
+  background: var(--white);
+  border-radius: var(--radius);
+  box-shadow: var(--shadow);
+  overflow: hidden;
+  transition: background 0.2s;
+}
+
+#activity-table thead tr {
+  background: linear-gradient(135deg, var(--teal-800) 0%, var(--teal-600) 100%);
+  color: #ffffff;
+}
+
+#activity-table th {
+  padding: 0.85rem 1.1rem;
+  font-size: 0.85rem;
+  font-weight: 600;
+  letter-spacing: 0.02em;
+  text-align: left;
+}
+
+#activity-table th.col-actions { text-align: center; }
+
+#activity-table td {
+  padding: 0.75rem 1.1rem;
+  font-size: 0.93rem;
+  color: var(--gray-900);
+  border-bottom: 1px solid var(--gray-200);
+  transition: background 0.15s, color 0.2s, border-color 0.2s;
+}
+
+#activity-table tbody tr:last-child td { border-bottom: none; }
+#activity-table tbody tr:hover td { background: var(--teal-50); }
+
+.col-btn {
+  width: 1px;
+  text-align: center;
+  padding-left: 0.3rem !important;
+  padding-right: 0.3rem !important;
+  white-space: nowrap;
+}
+
+#activity-table td.col-btn:last-child { padding-right: 0.6rem !important; }
+
+/* ── Row action buttons ──────────────────────────────── */
+.btn-edit, .btn-delete {
+  display: inline-flex;
+  align-items: center;
+  gap: 0.3rem;
+  padding: 0.55rem 0.75rem;
+  border-radius: 6px;
+  font-size: 0.8rem;
+  font-weight: 600;
+  cursor: pointer;
+  transition: background 0.15s, color 0.2s, border-color 0.2s, transform 0.1s;
+  white-space: nowrap;
+  width: 90px;
+  justify-content: center;
+}
+
+.btn-edit {
+  border: 1.5px solid var(--teal-700);
+  background: var(--white);
+  color: var(--teal-700);
+}
+
+.btn-edit:hover {
+  background: var(--teal-50);
+  transform: translateY(-1px);
+}
+
+.btn-delete {
+  border: none;
+  background: var(--teal-600);
+  color: #ffffff;
+}
+
+.btn-delete:hover {
+  background: var(--teal-700);
+  transform: translateY(-1px);
+}
+
+/* ── Empty cell ──────────────────────────────────────── */
+.empty-cell {
+  text-align: center;
+  color: var(--gray-400) !important;
+  font-style: italic;
+  padding: 3rem 1rem !important;
+}
+
+/* ── Modal overlay ───────────────────────────────────── */
+#overlay, #delete-overlay {
+  display: none;
+  position: fixed;
+  inset: 0;
+  background: rgba(0,0,0,.45);
+  z-index: 100;
+  align-items: center;
+  justify-content: center;
+  padding: 1rem;
+}
+#overlay.open, #delete-overlay.open { display: flex; }
+
+.modal {
+  background: var(--white);
+  border-radius: var(--radius);
+  box-shadow: var(--shadow-lg);
+  width: 100%;
+  max-width: 460px;
+  overflow: hidden;
+  transition: background 0.2s;
+}
+
+.modal-header {
+  background: linear-gradient(135deg, var(--teal-800) 0%, var(--teal-600) 100%);
+  color: #ffffff;
+  padding: 1.1rem 1.4rem;
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+}
+.modal-header h2 { font-size: 1rem; font-weight: 600; }
+
+#btn-close-modal, #btn-close-delete-modal {
+  background: none;
+  border: none;
+  color: rgba(255,255,255,.8);
+  cursor: pointer;
+  font-size: 1.4rem;
+  line-height: 1;
+  padding: 2px;
+  transition: color 0.15s;
+}
+#btn-close-modal:hover, #btn-close-delete-modal:hover { color: #ffffff; }
+
+.modal-body {
+  padding: 1.4rem;
+  color: var(--gray-700);
+  font-size: 0.93rem;
+  line-height: 1.5;
+  transition: color 0.2s;
+}
+
+.modal form {
+  padding: 1.4rem;
+  display: flex;
+  flex-direction: column;
+  gap: 1rem;
+}
+
+.field { display: flex; flex-direction: column; gap: 0.3rem; }
+
+.field label { font-size: 0.82rem; font-weight: 600; color: var(--gray-700); }
+
+.field input {
+  padding: 0.55rem 0.8rem;
+  border: 1.5px solid var(--gray-200);
+  border-radius: 7px;
+  font-size: 0.9rem;
+  font-family: inherit;
+  color: var(--gray-900);
+  background: var(--white);
+  outline: none;
+  transition: border-color 0.15s, box-shadow 0.15s, background 0.2s, color 0.2s;
+}
+.field input:focus {
+  border-color: var(--teal-500);
+  box-shadow: 0 0 0 3px rgba(14,109,168,.15);
+}
+
+.modal-actions {
+  display: flex;
+  justify-content: flex-end;
+  gap: 0.6rem;
+  padding: 0 1.4rem 1.4rem;
+}
+
+.btn-secondary {
+  padding: 0.55rem 1.1rem;
+  border-radius: 7px;
+  border: 1.5px solid var(--teal-700);
+  background: var(--white);
+  color: var(--teal-700);
+  font-size: 0.88rem;
+  font-weight: 600;
+  cursor: pointer;
+  transition: background 0.15s, color 0.2s, border-color 0.2s;
+}
+.btn-secondary:hover { background: var(--teal-50); }
+
+.btn-primary {
+  padding: 0.55rem 1.3rem;
+  border-radius: 7px;
+  border: none;
+  background: var(--teal-600);
+  color: #ffffff;
+  font-size: 0.88rem;
+  font-weight: 600;
+  cursor: pointer;
+  transition: background 0.15s;
+}
+.btn-primary:hover { background: var(--teal-700); }
+
+/* ── Toast ───────────────────────────────────────────── */
+#toast {
+  position: fixed;
+  bottom: 1.5rem;
+  right: 1.5rem;
+  background: var(--toast-bg);
+  color: var(--toast-fg);
+  padding: 0.65rem 1.1rem;
+  border-radius: 8px;
+  font-size: 0.85rem;
+  opacity: 0;
+  transform: translateY(8px);
+  pointer-events: none;
+  transition: opacity 0.2s, transform 0.2s;
+  z-index: 200;
+}
+#toast.show { opacity: 1; transform: none; }
+
+/* ── Responsive ──────────────────────────────────────── */
+@media (max-width: 600px) {
+  header   { padding: 1.2rem 1rem; }
+  .content { padding: 1rem 0.75rem 3rem; }
+  .col-btn { white-space: nowrap; }
+  .btn-edit, .btn-delete { width: auto; padding: 0.55rem 0.5rem; }
+}
+

From 0bffaeeb03a82788039350dc4f9f0d343996cef4 Mon Sep 17 00:00:00 2001
From: Paolo Salvatori <leprino@hotmail.com>
Date: Tue, 8 Sep 2026 17:58:20 +0200
Subject: [PATCH 10/20] Add the .NET version of web-app-mysql-flexible-server

ASP.NET Core Razor Pages port of the Python Flask sample, with the same
behaviour, environment variables and deployment artifacts; only the container
image name carries the -dotnet suffix, so both versions roll over the same
Deployment, Service, ConfigMap and Secret.

MySqlConnector with SslMode=Required when MYSQL_SSL=true and, as in PyMySQL,
UseAffectedRows=true so an update that changes nothing reports no change and
flashes nothing. Same 30 x 2s startup retry, activities keyed by their store
id, GET /health behind both probes, and the Data Protection key ring derived
from SECRET_KEY so all three replicas share antiforgery tokens and flashes.

Validated on the LocalStack AKS emulator: 3/3 pods Ready through the /health
probes, add/list/update/delete through a port-forward and from inside the
cluster across all replicas, identical no-op-update behaviour to the Python
version, and the expected request, store and page log lines.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
---
 .../dotnet/README.md                          |  78 ++++
 .../dotnet/images/architecture.png            | Bin 0 -> 38479 bytes
 .../dotnet/scripts/00-variables.sh            |  48 +++
 .../dotnet/scripts/01-deploy-resources.sh     | 273 ++++++++++++++
 .../dotnet/scripts/02-build-docker-image.sh   |  18 +
 .../dotnet/scripts/03-run-docker-container.sh |  39 ++
 .../dotnet/scripts/04-push-docker-image.sh    |  40 ++
 .../dotnet/scripts/05-deploy-app.sh           |  94 +++++
 .../dotnet/scripts/Dockerfile                 |  28 ++
 .../dotnet/scripts/configmap.yml              |  15 +
 .../dotnet/scripts/deployment.yml             | 101 ++++++
 .../dotnet/scripts/namespace.yml              |   4 +
 .../dotnet/scripts/secret.yml                 |  11 +
 .../dotnet/scripts/service.yml                |  16 +
 .../dotnet/src/.dockerignore                  |   2 +
 .../dotnet/src/Models/Activity.cs             |   4 +
 .../dotnet/src/Pages/Delete.cshtml            |   2 +
 .../dotnet/src/Pages/Delete.cshtml.cs         |  22 ++
 .../dotnet/src/Pages/Index.cshtml             | 265 ++++++++++++++
 .../dotnet/src/Pages/Index.cshtml.cs          |  49 +++
 .../dotnet/src/Pages/_ViewImports.cshtml      |   4 +
 .../dotnet/src/Program.cs                     |  69 ++++
 .../dotnet/src/Services/ActivityId.cs         |  15 +
 .../dotnet/src/Services/IActivityStore.cs     |  24 ++
 .../dotnet/src/Services/MySqlActivityStore.cs | 131 +++++++
 .../dotnet/src/Services/MySqlOptions.cs       |  30 ++
 .../src/Services/SecretKeyXmlRepository.cs    |  49 +++
 .../dotnet/src/Services/StoreInitializer.cs   |  33 ++
 .../dotnet/src/VacationPlanner.csproj         |  11 +
 .../dotnet/src/appsettings.json               |  16 +
 .../dotnet/src/wwwroot/favicon.ico            | Bin 0 -> 36791 bytes
 .../dotnet/src/wwwroot/style.css              | 341 ++++++++++++++++++
 32 files changed, 1832 insertions(+)
 create mode 100644 samples/web-app-mysql-flexible-server/dotnet/README.md
 create mode 100644 samples/web-app-mysql-flexible-server/dotnet/images/architecture.png
 create mode 100755 samples/web-app-mysql-flexible-server/dotnet/scripts/00-variables.sh
 create mode 100755 samples/web-app-mysql-flexible-server/dotnet/scripts/01-deploy-resources.sh
 create mode 100755 samples/web-app-mysql-flexible-server/dotnet/scripts/02-build-docker-image.sh
 create mode 100755 samples/web-app-mysql-flexible-server/dotnet/scripts/03-run-docker-container.sh
 create mode 100755 samples/web-app-mysql-flexible-server/dotnet/scripts/04-push-docker-image.sh
 create mode 100755 samples/web-app-mysql-flexible-server/dotnet/scripts/05-deploy-app.sh
 create mode 100644 samples/web-app-mysql-flexible-server/dotnet/scripts/Dockerfile
 create mode 100644 samples/web-app-mysql-flexible-server/dotnet/scripts/configmap.yml
 create mode 100644 samples/web-app-mysql-flexible-server/dotnet/scripts/deployment.yml
 create mode 100644 samples/web-app-mysql-flexible-server/dotnet/scripts/namespace.yml
 create mode 100644 samples/web-app-mysql-flexible-server/dotnet/scripts/secret.yml
 create mode 100644 samples/web-app-mysql-flexible-server/dotnet/scripts/service.yml
 create mode 100644 samples/web-app-mysql-flexible-server/dotnet/src/.dockerignore
 create mode 100644 samples/web-app-mysql-flexible-server/dotnet/src/Models/Activity.cs
 create mode 100644 samples/web-app-mysql-flexible-server/dotnet/src/Pages/Delete.cshtml
 create mode 100644 samples/web-app-mysql-flexible-server/dotnet/src/Pages/Delete.cshtml.cs
 create mode 100644 samples/web-app-mysql-flexible-server/dotnet/src/Pages/Index.cshtml
 create mode 100644 samples/web-app-mysql-flexible-server/dotnet/src/Pages/Index.cshtml.cs
 create mode 100644 samples/web-app-mysql-flexible-server/dotnet/src/Pages/_ViewImports.cshtml
 create mode 100644 samples/web-app-mysql-flexible-server/dotnet/src/Program.cs
 create mode 100644 samples/web-app-mysql-flexible-server/dotnet/src/Services/ActivityId.cs
 create mode 100644 samples/web-app-mysql-flexible-server/dotnet/src/Services/IActivityStore.cs
 create mode 100644 samples/web-app-mysql-flexible-server/dotnet/src/Services/MySqlActivityStore.cs
 create mode 100644 samples/web-app-mysql-flexible-server/dotnet/src/Services/MySqlOptions.cs
 create mode 100644 samples/web-app-mysql-flexible-server/dotnet/src/Services/SecretKeyXmlRepository.cs
 create mode 100644 samples/web-app-mysql-flexible-server/dotnet/src/Services/StoreInitializer.cs
 create mode 100644 samples/web-app-mysql-flexible-server/dotnet/src/VacationPlanner.csproj
 create mode 100644 samples/web-app-mysql-flexible-server/dotnet/src/appsettings.json
 create mode 100644 samples/web-app-mysql-flexible-server/dotnet/src/wwwroot/favicon.ico
 create mode 100644 samples/web-app-mysql-flexible-server/dotnet/src/wwwroot/style.css

diff --git a/samples/web-app-mysql-flexible-server/dotnet/README.md b/samples/web-app-mysql-flexible-server/dotnet/README.md
new file mode 100644
index 0000000..00cccf7
--- /dev/null
+++ b/samples/web-app-mysql-flexible-server/dotnet/README.md
@@ -0,0 +1,78 @@
+# Vacation Planner: Azure Database for MySQL flexible server
+
+> A Python version of this sample lives in [../python](../python/README.md).
+
+This sample demonstrates a ASP.NET Core Razor Pages single-page web application called *Vacation Planner* hosted on an [Azure Kubernetes Service (AKS)](https://learn.microsoft.com/en-us/azure/aks/what-is-aks) cluster in the cloud on Azure or locally in the LocalStack emulator for Azure. The app runs in a dedicated namespace and stores activity data in the `activities` table of the `plannerdb` database on an [Azure Database for MySQL flexible server](https://learn.microsoft.com/en-us/azure/mysql/flexible-server/overview).
+
+The application connects to MySQL using a dedicated application user (rather than the server admin) over TLS, and the deployment scripts seed the `activities` table with a handful of sample plans so the app shows data on first load.
+
+Before installing the sample, make sure to create an [Azure Kubernetes Service (AKS)](https://learn.microsoft.com/en-us/azure/aks/what-is-aks) cluster by using one of the following scripts:
+
+- [scripts/01-system-assigned-managed-identity.sh](../../../scripts/01-system-assigned-managed-identity.sh): creates the cluster using a system-assigned managed identity as its cluster identity.
+- [scripts/01-user-assigned-managed-identity.sh](../../../scripts/01-user-assigned-managed-identity.sh): creates the cluster using a user-assigned managed identity as its cluster identity.
+
+The `01-deploy-resources.sh` script needs the `mysql` client installed on the host (for example `sudo apt install -y mysql-client`) to bootstrap the application user, schema, and seed data.
+
+All commands below are run from this sample's `scripts/` folder.
+
+> **Running on LocalStack?** Install the [lstk CLI](https://docs.localstack.cloud/aws/developer-tools/running-localstack/lstk/) and run `lstk az start-interception` to route Azure CLI calls to the emulator. See [Run against LocalStack](../../../README.md#run-against-localstack) for the full setup.
+
+## Architecture
+
+The following diagram illustrates the architecture of the solution:
+
+![Architecture Diagram](./images/architecture.png)
+
+## Deployment workflow
+
+Run the numbered scripts in order from the `scripts/` folder:
+
+```bash
+cd scripts
+./01-deploy-resources.sh
+./02-build-docker-image.sh
+./03-run-docker-container.sh   # optional local smoke test
+./04-push-docker-image.sh
+./05-deploy-app.sh
+```
+
+## Scripts and manifests
+
+| File | Description |
+| ---- | ----------- |
+| [`00-variables.sh`](scripts/00-variables.sh) | Defines the variables shared across the other scripts (resource names, image tag, MySQL credentials, Kubernetes namespace, …). The other scripts load these values by sourcing this file. |
+| [`01-deploy-resources.sh`](scripts/01-deploy-resources.sh) | Deploys the Azure resources used by this sample: the resource group, the [Azure Container Registry (ACR)](https://learn.microsoft.com/en-us/azure/container-registry/container-registry-intro), the [Azure Database for MySQL flexible server](https://learn.microsoft.com/en-us/azure/mysql/flexible-server/overview) and the `plannerdb` database, a permissive firewall rule (dev/test only), a dedicated application user, and the `activities` table, which it also seeds with sample data. Requires the `mysql` client on the host. |
+| [`02-build-docker-image.sh`](scripts/02-build-docker-image.sh) | Builds the Docker image for the web app from the [`src/`](src/) folder. |
+| [`03-run-docker-container.sh`](scripts/03-run-docker-container.sh) | Runs the web app in a local Docker container (no Kubernetes) to validate that it starts and connects to the database as expected. |
+| [`04-push-docker-image.sh`](scripts/04-push-docker-image.sh) | Tags and pushes the Docker image to the Azure Container Registry, on Azure or in the LocalStack emulator. |
+| [`05-deploy-app.sh`](scripts/05-deploy-app.sh) | Uses the YAML manifests below (templated with `yq`) to deploy the app to the AKS cluster. |
+| [`Dockerfile`](scripts/Dockerfile) | Builds the Docker image of the web app. |
+| [`namespace.yml`](scripts/namespace.yml) | Creates the Kubernetes namespace. |
+| [`configmap.yml`](scripts/configmap.yml) | Creates the ConfigMap holding non-secret input values (MySQL host, port, database, user, TLS flag, login name) passed to the app as environment variables. |
+| [`secret.yml`](scripts/secret.yml) | Creates the Secret holding sensitive values (the MySQL password and the `SECRET_KEY` the app derives its Data Protection key ring from (so antiforgery tokens and flash messages are valid on every replica)) passed to the app as environment variables. |
+| [`deployment.yml`](scripts/deployment.yml) | Creates the Kubernetes Deployment, including the pod specification for the web app. The liveness and readiness probes call `GET /health`. |
+| [`service.yml`](scripts/service.yml) | Creates the `ClusterIP` Service that exposes the web app inside the cluster. |
+
+## Accessing the web app
+
+The app is exposed through a `ClusterIP` service, which is only reachable from inside the cluster. Port-forward it to a local port to open it from your machine:
+
+```bash
+kubectl port-forward service/vacation-planner-mysql 8080:80 -n vacation-planner-mysql
+```
+
+Then browse to [http://localhost:8080](http://localhost:8080). Alternatively, use a tool such as [k9s](https://k9scli.io/) to start the port-forward interactively.
+
+The app also exposes `GET /health`, the endpoint the liveness and readiness probes call: it returns `{"status": "ok"}` when the MySQL flexible server is reachable and `503` with `{"status": "unavailable"}` otherwise.
+
+```bash
+curl http://localhost:8080/health
+```
+
+## Logs
+
+The app logs one line per request — the `VacationPlanner.Requests` middleware is the equivalent of the gunicorn access log of the [Python version](../python/README.md), and it covers the probes too — plus one line per database read and write and one line for every activity added, updated or deleted. [`src/appsettings.json`](src/appsettings.json) keeps every entry on a single timestamped line and holds the framework categories at warning level, so the request and store lines stand out.
+
+```bash
+kubectl logs deployment/vacation-planner-mysql -n vacation-planner-mysql --tail=50
+```
diff --git a/samples/web-app-mysql-flexible-server/dotnet/images/architecture.png b/samples/web-app-mysql-flexible-server/dotnet/images/architecture.png
new file mode 100644
index 0000000000000000000000000000000000000000..432dd12a42659440171f5d4f26695b677ad4987d
GIT binary patch
literal 38479
zcmbTdWmH^S(=OUTf+Qh9LV^WIaEIVdaQDXDz471@2oT&|0t9Plym5!%?hZkNyW3gp
z{l4d%dw+c6j{AeL=+(XEtXZ?_si$hz`k^2vj{XAw1qcK}my{4u0)Y@6fImD`MBon0
zM^p>A&^n2#I|)0O7&uu#Y)MosY)n8lCJrQQBnD;>lFv+^*-4mLxLH4Qvv85nGBGnT
zl{X?~1COCNNy>_%?4Uk>NsD~Amhm(Nnw^A(BM9^o>*)_+Y|;A;xcSWNi|iK=s66uJ
zoxyVuC_Z0O<co^y++I4Gr^@8w<>6ke7b%%REIAsc|0fzD!BAhJZ_;lwc`r0XY*GtK
zaa{Rxe>a~M-t+R}Y*<JZgR$X4%l!0WqXkhbFK9$WqR2l6SQl&bW+V@IA9@@t^bQzb
zBrhcQ8hbCx9j`Aq4%e|bZrvR`-VI+9BXlsm1q1?J3F7X(eENstbrcx5_;QdGJ$-}-
zsv-cFCEwyF?KC220OEpNkt&{+c7$w<16)?nduV`5E5ZMt2g|ad5+v%HW9xhBit#8o
zwVcbdA3>lbCP7ud@6eEn_V&GSo&{*WvV(LoDZv;Y|Ab1#gmB?`BN?DX>>e7X4ydKK
zg|~smcTqKs+erz<@7ssD<m7pc*)*SAy5cmB#U_U9lX`pDUgp$E`H>hIIiGjEGD35x
zEeL=`&>MpT?o$aXX?iEg%b=bUbrXLn7PMx7rI1E}nZ7B49SgN-bzn4oMfA4DsNtuU
z{k4rd;m+6AawY~Ex?+o}7wXI=kUy#ry3Fo$4ef@(z9BNOQheBtuGKWc>W4Ay3k3}>
zcq(&BRc8g;dul4Z7N330-59Va-p2Frg+Ed>5DUqi^E!4}J1`PR&=*iKHU&7h*eQN+
zt`B`74>F_K6W>q0WUT@XbK}Z0b~ml|zZozyHC3BtOR1clJ0<k6b9^zCg7RbVf`VE3
zgZAI4=s(6vI?g&Be;svLfo=0fu6V&2tgcv$i+LgeZHE};r;*pEYRYSB>K&9xDEBH=
zHc1XlFtho6(FX|%`V}LR7NeQ-v0F`m4WlCdS}FHdf99W;UbYJ;q$@5dadF@^(?y;>
zcyO5iRLso%xp+WV)!;$%z3kO70x;Pg@cg?|)UxO^_;WEn+2yi^+Js8|X=N=hCW8I)
z6l*e)chtKHgJmq#k`2!{@D_0GbX>BwV+P0_rD-cUQeG#%XPtAGw@LAJ!~tPQJnLjf
zyI=#%3WWVk{r`(4vU%EJP)(16F7lM!&|v!5htr|s80=^urU$>`KpgGPpsv+9-mfpX
zr0m2EMUUXmCJ0^IXKguN+m&;?27$teNs0_m3HGz9+vZLj;YP2x61so0tzRUUm%G}y
zWZ2iWgk$g3G?YjD)vrW|@Ncp&4o#h_=*4ULjeb#s0J?h9V~N|2{A^&Ts`^fQA6Ga6
z{0<*|K&j7V7gvq}_BHa@+=oDU&meSZ&ibn|+{nm<T<xXB%#>L5B0)Yh*vfo;r}w&=
zYf5WD--iI?EAS+8S_W6h)s|s5t~6c)%&0cpqWGU-Qlr1<_ZO7J?%NWw)Y~Zw!!+{4
z32LYIYx>KVR*`S#L7+P{W42<Z?POT2LorX+5jw%@GF7M>oFd*uR?eQ(D9Z_!L-=xL
z85y)9PEynw9Qwg%U<UGGE%W0<;Qhv|%SExWdMe!0C$^tZJm26SaRAG#;ps}UuXGOU
zP7*i&pcR^&Jez=ZfMVq+O(0&fq>}3u@q7=01UjOfX+sX<frdQ8xn8jT^y%Af;i9?*
z5(pKqv#l8fvhH2fZVaDESs?x%|B4mZX6{zafAOUGf5seJJe(`<FuxzXiy^>f2?36O
z^vsb-&_$Um;0_4{G6T>;?H7bo$>N0pr~4@!`bj)BXC5*uHoF;__WR&Ul`SUxeh~!v
z_`(>+^<~Z1@cm6I^iwg!J@$RZ{MvoPy&CH^%b7!0|GJ&<`I*7_nSs6VnPqekMhq~p
zJnM{2b3*d)HdGY65B#v&la}#oV_TYAHwOduZ36;G2m=r&0RXEsw`7;p(v3}g=gDj+
zUA0N0^^1SL2k`MI0-DV`H8tQ|cAa9sR(t*q>|Fgt>x*A3`lgse-2nPOv$+GaQK~=)
zXU)RT%_~&%a|Wkp%I7U<wI*kgZLHF*nbeYW65GPBOe=Y+4SYC2f`9!KZuQgj;U5S=
zpa8nE{~$H|Uu-V^A5{AB^~G~vG|}#;2ZesSd$#?7XT7U<m>Ruf`g)iEu)gh~SqbOM
zN6EY?tJE`L+OpQjIBVZo*VlUweEFKL4B^i1tirO_Dsk`hM=_Q?`o$!|6MjK(jym%0
zbzYzPT#D9cMv4Ox)`B#i^9lx>s-(`%3xhyR$ABpjDePLjr?3bTBHnxX4CD&}VhS$?
z<NLa#vj$gpkupXMAQ(S02F41^MSFcpTu05$hKxOg0Q!UYbThVwa(x-YD7Ma3taAt+
z>+fX&0%35LwIUz&W{mq2XDB<p+TJkygLIl5JcWE40s@iz1k_4!Ga0z-HR^a)5fZ%d
zjrt^8)ZXfIj$1)O-orA6^B3`LT+4)jdXAVr5fKVNuSgotOA1=@ns&qcMHFBx91PNg
zYa_O>gt;Yg>TShj`7WiRoNxDm2q1lHU~uILcT+$ageBbf-K5Gyb<|T7rz#CMDyf@J
zL4j$XS-v<Zr&u4K1^;HT&PTvzyT4|GMpna=X?{L%{zwVgmIe7LAba83^^Nw^m_-x1
zJTjTn7u{QS<ay~d$i13LB&)c&=&+dThcqkmjHrA|$l}M#%LvW|R_4?uqrdXj(2JYL
z=`5r#rn$KOA@V(;CC%5f%|yn=2c1l=t?bhk3|KG$0tnR}aCYj#QNyhu5$$g?g>N2U
zlU>)A{+h$Q;8Dr5_*<5xYgtOnXSaMvpw<~+oAPHGMEBqDef>EP&r5OJ>5yY+%?ib9
z;V}Bl1S07Kz&?LKCW>=moSt8(b3a?tN7jn3em6zgW=DteM)H%E)Z!nBQZvZ{oai?1
zVPNOkf$4EtbhvuOG%90q!I83StC%U>&V1_)v=nAGip8*R3~`E&$-z&dsK-CKwH3#q
z+!r@*_k9<p)~R8p?eQy@wpYFD5g7*~uHgAX7v*cJkLRbH?9V!%f5<g1sKe^~1_H@o
zl-c534V7RciC8spZ(M_8zj;jp4CM*vl!Lzw$wVD#<;UbXF>E0N5!W1udn+M1iQwGs
z8+o`@Z7s$zX7+Q73Y1Mz0XL6tZd5ZV$n@v_f!sworaua0(BK2TDyy;hJ3m7{AT(R1
ziKLMjqxeA*KDmAbk*xc{Ul8U@v9#P~d)#Ib1&ITTgb1XWRw9}WW1L4As+52KY$@Gd
z@I#`L_r4$Fe4}hlY)eWblXmqzB1q_c4~-pYbRt!+S;0qkw;oq<s@wL*+E@^Hg81e`
zoCfyqq1%nW`Gt?Qo16|=c!j<<vY#4IQ2->w<b?YovG4CX6cq;K({K-zlPsxmGdK!b
z%oc9S-`ldre-=Zg`0eC6g9Hkohyv^PXC)ZC@#n?Jxj4S$miSh%@_dWs8$no5Gok5X
zNydnYK1v7zh~zD>yIN9EKJ+vZ&XJ!-cHx7~2J%wLS7WK|z)pGt#-WvFgS=Jc*`WDJ
zU-%6-sd9TtrS865&TkUHHdvpYZVW$a{Z4jwiQ6qcEn3MO&+zwW9LTo}#Ny{iAEenx
z;3pf7>DUnGQ~c|JomGloO+-n)tKy~gjm0<?c(~0NFajz>jpv?YCi;unHprGC!8%nT
z5-lKKyZ=&8&woh)i45UNcn8f+b_RE8jwRb(=SrQDWnM7)OTzC#0RGJQe$j75g1PU=
zBTcx8+b3fMObo9Trkb=hi-16=r~u7V4UU##ojkuuzRfP6G~|N;=p*$0)vzD)sC>h;
zN?+~8CePtF84yTN0+7dORsKGs%Z=(oS?2-@$oB^jPp*cZr{|BJqIt2N=hDomz517R
zdFHp>FWKjqpE1yU0<f7V3cSLDuG>Y*dzkwQu)H2W=c3lHwowYbqixNoAP}y+z90HO
z92)l-GH`t&*jM?&Sp|m&uP*=`7sLQ`{&2mRC7k-25cPlG0e;!&M=kB^!~OOJTvvdF
zpMM6hCXgTU6wT2~5mkRLGyof)kres*tY|$41<?P8paUQ7kd|pcB-Vh@-XQ{-^gVh8
zOo#$RVZj+-ng2-83~m)Tf+2$1->Db1GPc&d0HMl14dwmy?}+m4#q(Q$^pl_h@TV6Q
z`n#?98K6%@;P(&PYDJUoUY1TyWsJZ*MD$`{91-Oo70Ca60O9eU!L*(RTQ_9>cl!T(
zHea9MV%@#NH~)K`4{patf42A^d1urBqWJ~%e`H;zSs}gx;-10Fr)mBb7YJVexd+6H
zH&4TtJ^z0W|6gtVUr%JZ))77}-xcv`NVu-Nu86k37m$iznCm|+N`Y#pp~2q^=l`wH
z{|*5NAwbyV9)H*1I>%~R1vxkL5pbi=<YJk55A3fWh~oK5Q1bC{Wk_gm%R1ZFF|zNf
z^DMjzSqd0+eAnx-ZOz<({xE<L4zcF8`+4<OF?HasxcCi`8`(@EU=aw2zzPUjG^+=e
za&P80`u)9hp28lWLJp;zoXo~^)m=hED1(G7`h_zPi&p@1;V)-aH-G~B2hfidY%719
zJYdIP0lt~ROi;`O26Tq{ZU&U`=hal`{r&&`{It@Zmq2=lD*T@W@M*LDhg`1}4=nl(
zGX$EJXm3|sXuLfZL*Wp1x0{Vnl4OPsh++;f00ydJAb<J|cjN!7V@vI5EbI=#M+EsE
zBN^k=l6%>Fk+TsVH=mz~v8B@JOHN_0-VSE&qu^x`8+;m|05C{fi#a{r^z`k413KD#
zm&!Z}<>V&&CjT$Xc`@e%mEm1f9dVlxS-@_gA^=GL+{CRoJXuk9<gYfy%bFB1cgNG0
zMZ5SmZ?Fr0g>W<^C=Wl)jsar!^LzP%b`dWrYYOoCtM`DNJAU2_ujNmbs*X?o++Q7^
zRQcj`zlzz*1_5r5viT7K)cy?Ma%pGiT9q88xItFCFG3uF-0b&rXYHx3Jt^^blw5^T
z1Z%%<@IbAdC|MVPwF0U0e+b$CoGkmHlz9wr&WCq-V-s}G&jCKq325%15K2W$Hz1|}
zfW6&IKwaO#lXqix?G-OVOHwW+=%IFL<0=(Z1p$loUDg|#>=n!#8i$pd0epa?U?T!i
zB?!o3XC-b-|C7eD+D3DiRu9+@^(?XH@u?MseBP;cxSe4Nf4;FREfsP?HQvQ8Lk>2T
zBjp5;JPxoHjwF@%iZL*Ie-#9sAZ5hh^~ZdDm|JX3UZAEWSwPlPO6{y;+RU7nHEK5q
zmjb|z>WMvl{Kl0X<VFVmbBk*8+H5ezW^6&}qNSnm{MSy1r!>BQE3g4TcB<W;lC}9~
zwriCzr^IxiA8%A`T$TNTi~X0GsaoRUSN*U&2xq%W%7FeZD*&Tp0F1u)Z;E*?^M6vz
zS(x>nqjfL64IR~R*?=@nxs3kjlr~bNPB#_uGynibp7Q`{{ZswI3h-c{Vqss#2nzcO
zkV1g0+=2r^Rp&GGXe`)dZQk9$*E|3U+qy!t@6Qk2k;bQ1@uHXc*=T1DaX}zY6#v#%
z^z&&}1gjz=3F5sPplD)*2;Ad&c(6NZO2+h@ba88qy5E}8Z=rme2{0<2)eX-j7M4|!
zHgA9fw^9PD_+ZJGIpk^xL%sz}9F(b#f$Q2W>{0*i39*^H0aym4JVGu8uLP!680Jv+
zBaN#HJ<B)+fwIs6BlyC`2c>5gtdNp?-sar^JVBukWB~s|d8Ska2kn`(bV~6f1Jprx
zs@@#P{kKf~Ut+fcj6Q%p3e5knoh{XNkU9?xG8Qu|3uG6`-u4&0Jay!=3X&*;f4aq^
zd{HaWwU^vZnDV71rTteZo}+hm)ExVdK_4F)FQ2zILy_+k9xVozIl>?8U!enqEg1=t
zBHs4@R%l=)6{>VrAr+5oiYjbUY6QD7P)%@E)vsSY+C8pOaAR3I`a&9wl=AX=ccVa(
z;3=E>fLZorNu0{hobp|baqUToUDnd338EF(KR)dU#85HF&ct*UGv(!cS5ZWSQ{ZF0
z044bfs$O>#K<kQexHZ*&P;Dy4%UIZgF>m#-bL*xqpxfG{lLY-+Y!#yTp;k4RIaN@q
z9NVJp;;wHeHWLRx*(PmO%;<w(tDmA|=a~BsYQ+&zOly8j&FqRP%F-W(r#aulH1xPs
zMHHEy{Oe5*4J0YvzN#c)qdZ%k+ks?w?%Hw+Yz59OXonGu%|7M<Ry@td&NiX6XCbD}
z1218ofy8IOty&{AyVeZ!(#Xlp`U&zyLp6?P4E`KZphqN`><llftz{o()lAju(@X>W
zg><cfLgxbvdVwpe+|@UP&gw$3ktp@0baIJBmb;A_C$*GG0p)FuoEOA*aC&S)TsY?w
zRTBr5Z#ke1S3y;`Z(y-g5X8tnLR5`~gRt<|NpT)-?mtfTN>f#B*QHhkJY@=(v3Y@2
zy)$j4&+eiS6jV5l-zNT|t;?l9OW;D`5%+D>oe|B>wo7(x-gy5FE<<Lc_pD^PlF<+r
zNFVWAQtMsopep_~Er8@hT_H4;8p&Fk8Xwj5RK(-s!KoF&$OMsCI)nYBA=*2Q2Mc3e
zfw_3!!V_4er{5{ykp;=#EIXOtUYK;7(8J-e74L=Uh2t+csSfFutLXtiH+lAo`}0an
zw&{lbcYY=t+2|Jn&HNPq@x>_`I~2F0?Co;3HB3KC03+{!#Ie@j+_Kd;zOBm+aC`t`
z7XEbB?37jmY~=~hzG5g(>f?H_5n&d%0L~~cs7i?_OD;XF+z@H^h0GP@sj^Ar?_9)d
z_-fG#E;xzRH_hP6SQ?aak*NIKN<$XjNw~@Qwk3|a&r)9(!EqIcBtE{yC(jkD&L^f;
z2_40hdvC&LyHGLXznjd96%w`t4M68qDqz(!Z)KBC?1(>HF7R*(^<fN-dpzvaJBj7v
zpX|Infb)KNw|5BS-d)H@uEu1@4}aGSSPz5fEW`_c3f^DTpfGBqY69+$!K)7o<W9iU
zr}64I_;&KjNaUd&_Ha_=F4U;a@V>+54G0y;bv{PKLzTL8v<ln%`h@yS?>Jk}Y-TH5
z=c@F502qB@gjwNmD0@8JB712x_23}A$)$-7F|Wa*_my3c5c7pQpsRJ?;+s&Qlt(%q
z2z9Zps-U{&Wt~&ar8?CuE}q5b&A7cgy*W4_(FI`VS-3vWSISrM-&Hd$4K@ns`bDy%
z$sj>ugEE#?G9s@x!^lnBtV+|ZA#ZeVf$3Sx{AE#rsO2QS8BMZh2^4f%(Qu!=)&VqZ
zwiPKYyXd_0_Fqys1yHfJ(_v!Iz48qfGvr$#K(3Ki&0J*GGaVm@#|6u!vb6-BQcT>N
z3-ZXXrd{3L{Tpq~zy_is{;`E&g%2#xD|*OEkD1i<zA+W!qSbJBu-lz(B8yI^gQ+Lt
zQ+8kja0}9E*CZ%rix1ui+5M#bb|@8_i!>peP^2%mQopi(rEXXt2m+L<G6G7A=ggs6
zNKWp>NpXG^?(G*HLFKmpd{bELUQ|e^p!&w|>6g_3Igm*XSvE%#1$ns^-h#`0Ctw!r
zq_S}&E7?JbxGR#7GL1!mX95HqjZwo!ZPaRs#e!z^_g5l`k10_0SN9_|m+HgII5$L&
zy{h0rj_JOhmQ6yX;(CwwZqWhZ6(!!KIa=r@aL~U)l*%&uoY{)&WlAdlV36b3SxvO@
z;a<8YlAP!!bZ2b}BfEjyKqgBmfA~-Ae%E-E2v3q8i&yj3o4-Vp)cydaPC7@C)2JI=
z*|gmcx#StXlh!O-UUo(JCmC2>(tIj{0CfnvZQ?@<9v~a!l^yyZeWTJa*WuJ1wIo`v
zW<s)E{}Cy_5L0pWv3dAcVZhuJL<I@?#L}84H=m6xzwXk5A*gYu^uwPJHs`ce2g?%A
zj*TdM@8m?9NW)!=mb|)RL-Z+xoLMPN%KezB#k@LbT5fNCn_7w|W6Ais)+TLw<}u?-
zCFQy^pt`i_8MM70<lYrS!8km=F48=<N&LN%^;+;s>h?Bh^Ez_q{LSDz>!t7!+5YvL
zz8d1WXIG=wz&DeT3{e8CL_SWsg{dzWw2A~$aJX2$wC6%H8RWw;Ju)b^BFH~5zIRJX
zkbcH6rWEb_YwLHg10+IV=4X#?#!a<uT6UIgLU}x0u+QI|lytIk*UcuwkEv{o7T=p6
zFKHGP0?17Ntl!pES7aYtpY;)t*~?EEX%8iKOb}`E`nXvRW<_{xi46zqXDX6)Nt422
zT_ksH$F;#jW9#E9w6e|br!7wCPvgB07yi8d9SM;7!LP3q51G>0G*Y11UUFK~YwTXi
zP&$609_hKecYuOW+STTk1z3lDoJxGmm-6a}zfoEY`zSQuk5IHm4td7jZvS74w)HW0
zq?Ft(wU{<mDnV;VZiQTq5L?V1%Fz6*CQFKgd;Jv6pB|8?U(%K_8>w<i&)~bJ_#t6B
zME1L<#lpUlIw$X;_bg7B5A)0NdtzN(%V`n{CXoKBeSyhU2?qlUqj4R>JC_Qn85WTy
zqpCGn{3LBL+xeFLL`aW*ORjyFPJ>I6%VCp7EXDIDC-&t4n3u9m%0}hl+0}sw_(=PH
z{!Kogi?nvxGG=C&s76*H;4x``y#Jom&{EPTtu}q(Xm%qDyxB5m&oU|4_nMFl&!-ep
z=KFIk90XK+Kum2UQ#(LuqvrQQ|ITR<1-(S7Zz#E^f~q+*=<Z<TV=<8a$}q{nEe2Sc
zbTFo{ZLH(qs=Lr5102>#<#+O_3HTpA>^&6}_%-->#`ZnQ`>-`|c-0`fvn<DDs#6S2
zMKNmP5kks~C;Rd~A=gqs!rXaZKZ&-j1rMa!HC{X6oi>yV5k;GgsgZBRw9jyB%wDbO
zPaF=5ytJZ4PC@H%+XJf9!6HI_0=ru_fa;c3^PP)W2mii8roR>#T&hBBdGH15(<s6Z
z;_k?PB6KmqGd|a_r4Hw!KRDO`8(s1$5>W_Z<3^Iz5<p$`!vN{O+5S|;ovzDBIQ7>=
zDO$Tdb-?Yf7W%kz5lH|^3;GGRUoax5@w<8nVn|3xRB(V_Y9>M6E|9E0iDu~YIJ5h4
z*z*O>?E;$YbL?n&_TRjx$>RcitCeP?ScWsxe5LFjQ&O&9ZZJ{|;%L%UA-Enk>NPLE
zb(JXRcQF*LUo!m~+c`&;paDf(?<Ie$<nhK;I!7;LpFUjI;z`xha+|iIZ}X1y6pRDs
zj#^dSFi!y?mBc)3u}12bO5xNftN#y4l2^?0KhZiztlc&;aA{-X?ymP}OJQLW>eqeG
zi<A$%uj3nLA2sLm5}d}1zJ{|~3d~lW#7~Q9&UWJ9PmWNQ!Ui7B%X3<qsXzUhmH&3{
zb_8;hQQLiGRHXsH^0V;rQmqfFR_IL1UtEQ(6`<L}=KdGxi)wDl_omAA7i~=fUg15f
z^B#p9DqecLEV~D4eUO>Pkx5jhZY^R32)<Q8?H@G(HoTwR>^@Q8e$$L4dlw$Xzw+$i
zmgYR?V*7{h=^ySbz{~wb{`WtQkbqgwk>{4tzXw6!|DI@esyPF^;<;%E)U%F|sMM73
zv)D3J4l+W3yQXrD(Sanc){6haDpJ$j@zN`@DLoUzh|t%@f>*i;tpE9w#%Xz0boM)#
z7K_KPz5WGMyXwM5BkzjqZLY4)oyP7+cGk$Dv~>H9@*9fVz&nqZC@47<JDvv`D_U>`
zu%fDZQj>kqCF0*WfX}kOLr~UGuO7tyP9|lo2&7?~J%MNXJ~ZCOVa?zZ5xkiG!X_7|
z>z#&^9C4e~+Hs+PO4--^`;$DgjF+-IW|(LkHV@v>+YOt#Jky*7--CDGFe(uf;-+HF
zu{wP%6CijLWQiM=Q@v6hEQ6-#rRb@vwrxY>%X=k1loJiI=QGPny^Sx+tzC1W4Ew~x
zvgnlES|2yLES<<OIHRu9#N1&#ugN+EHC>B_W&<a;qRsPdYXRj~s?OMk5o3#tEkb-e
zs}&VvG_;wsI+rt7CDz*JIgNVnP*TI)cEZK!_ZBSHh^AcboXfX!nvZrabRw6{a!njF
zZiK)OoT4A*Jz9JHhrX*F;@5Q-<lW?O7-Q_R@Hs|HLT6vdqAbs~Ewa;>?z!Gly1hP+
zfor6*vqqCd?%}6L5&;VmXM$QX#9K{Go}r6#3di<QtM3k&KNTQY#BwU0G6&j@QFVpp
zC8}VtaI$s0UDJ;gR7TYCAA53W#2@$_)+GSeJ=#h?2yd>)4m&{{+A*Oi<jt9QIxjXG
zu%s(F?|DrW8TPwI>fkDh6^xeiLFeo8WvmXdqr1jAf(ap<V1tF{YWw|EGcCbz!YG1^
zwPS~uwcPa@1jkNX{_v+a{FEh=&+^Zf9KqJYy~F<D@TOxV+sn(6+qSE6JzO{3PmC9V
zTulf5sl}#D8tMGI+w>E{2{B@~4nxXXwpZ}-yY?IB7CmFS8uM=dJt}6a+ohuiTDjtp
zNgf-5luFYNY+o|Vaa-KgDZOR%hg8YYvWwhsz`1p4Wo+@*Mf6KLJ5E$n#kI2Na21W@
zp97x1%A!-cUn4rM)rtvFCsOn_MjLW*ahbS%`|QYUrdA!#{DDnZhg9oc^&sGEV9%1B
z^esxLR|J~Ox{7>IULL-|2OUO73Tn)J`pBmHV>8B5If1f7&C5-?zP~IUR04l&9R98-
zSBhs^oLTROxb>$UtFz1#@LTO6j#s{0zF4JTmy~${T`Kw5Fejt#F>ykhS~z-875PKf
zXxZGfOrV3wpG`6oKb>uN+uuuG%dGgp=`Y@H%i%-2gZWmJWxj0u*OoDkv%bG4BCt%i
zoef3j142!k)QtNuS>d?-co_`blrcQ>@}Au`%{NAf@~+D?qYNRagk~B_3HB@J8_yf~
z&LI(;N?c-iX~l%9(`@)bj)ND}%(8{w7OgEg;QYVD9lbiumZ5EeFNN&#V$ew=O3oU)
zm!WsX$pt(9Rx&51$H}w9lqXA-zx~DOc^51|VM2o2p7<z%kV#Z4%oG%(9}9TSld38#
zn;R4CNuKHReb$!xu&$GPSqA)`<U|9Rh`SmKAGh<KUV@0S$`l&H9U2}wzRyGb?7W}T
z2yb|+_5C2tVD30su!s12p4W}{`FWW7FVlv@s7k;Y92qc*W?oB!H94eK<YjLBD^(2{
zZ!q?@)k}396B9@$hb1f7IEVG%=EG0{ElI+rxr20g^VsN1OR=H%>yz&Yo^u1~NVF23
z^DNiq8sb#1W{Px5-hgrf9h+Lp98Q_s)Yy+~=*0Z>b@R3Ac9gcNQM+Hx?!he)k4v0p
zB2T}1YnNH|sjby=e3Mx}^>(A%M0;O4vM<g<TH7D~iHEF&KgGrtmai`A5i%;aTm8^O
z-`}oieVF<S=l;MW#`5LLSb5+=Ccjx8Bxr|$T9AaAJkr0f;dTm(q4`<ZN*fYMbUs*P
z>DiOYlp>{=>D9P<Oh2N6k*)1|&ftT>jz$lZgTIgp(1tGGs|v?A=(S1Vti+h6{%w9I
z@3+X=xHh8M72mDOHF)vo+v3#Tdepf!&n*y)SSt{DJXeE&^60lNlt|vsT}iE=00fa_
zZz-Eu`&6!+jreT6MFm@J%e$HRdGTIwKW#jzRm3d3pL8}8=g{lucP1xnq%!3L@#oSS
z7X^C7S<fA>@fX%%-7_n?s&5{wyHW-U^z|rF$%z&!^P3xZfZBH}r`fq&wxlDSj~>b9
z#~Q(8&HLiPvBKHmJ=Rh#_8?wkq%dnYnhuNa854VZ7^#pH8#6WfqS`#sNrUGQX1_mL
z&zF=G^_H^~o&mM^q~I#n47Trc5N{hE@Bt&E|2b;eecR1pWVwCw!jNXBerpXreppDG
zfTAzN+4CD7RhImzmB9S%3c>JzVas5qcbRQ$3!PX$Y8f^W$M-*UKAy&IPPm|DXflQL
zh-d$Dg#T>n+FE2x{U{D6!`eYqtXL|LLTe|9$fvx<X`iX-JAL)`Fh9ALGXRh3<FMJV
zsZZH~Yz||rXR3J1W4yi2i7=!bO*au=D;(7Dk<ZG$Od#IAJKz$A1=p0ffrlKAs8o0x
zx#V`pE~ZG)h_x>$tIqd;_o*1E7@Tyv_CI!qr+_D8^Mr%!&S58fNWX(DDBha>3}C99
zDkiAI<9EAOV>c?>iyet5o|Big&zM!$$t#FGd|a=7Z>2NL^;NMlN0>p}cebn2*5lS_
zjk>s=V9oRU^COr8?j<|C_AFdTwQ&}AnChz|GaC(^!A+o&W0FVT+o7nx4n%Ng;XEC@
zJ}lVC<Te8Vd<L4q`hh#32ok@AN5wD0lEsAdd-#=Q@-1zB=2ewEk2_LFqL0EtS;J{+
z5k7>5B?4oiD*05o0)g60pz_+@mht$mk`W)K<Z{-|>3uXiq(_`1vspMk7`jKpnt70I
ziV|ck=KDe0Y&+EKWi9$JqyRNjVT|ZTRalMjUQ$`uMy}0Nbu&e(S}|VSp%D7wv@JT^
z@&zp(CBcfi+}H6}MbL)v^t9cd+X_I+$H+7!=r+ZRv=KTvVMctLg_m=G92km61)&d{
zwZ2=U+z>7ekQLbeAfo&TtJu<x%-9({v{Dp^!))8Ap?T%Q-ODe|e=YjBOS^WMwD~7N
z@AXCIp9_i#{Uxwz^?oy}>Q>{)_Tmstm9^Abm1%?UI@(?!Jqqke{H<cN`nqtd6|HkT
zX)<pk%Szb--SIAH_-Qqli@SRxPsDH4^Qvuyk6~U#OMo$cL}HfbAlflwi_b2R$11HK
zswkbFFdrR;m}Zi~-A&iNC?`jK=k;5R3PLGjURl!QyQ;(k`Wsrc!@F9oA1WwSDHdGJ
zvInye(9^Y+yse;n8x8mKdX65U#LRP{)-n$}uiC^8B$9uYj8)KU-vq+G6YO({z_}OE
zFRG#WvXLHuQ*M0+7yT@@WgZeNyq^G6rtZ>ST1yHcpHRD7c_^PzW=Oj9bVf1#$r)fy
zQ!dg{*B)^^6!HF%o{?IWo2GBG@}-6bIXkV{Xbhr=yT8|DGxJs<qb{BYJ$B4UD4GoG
z`KXu9V}Wv92I0bubLrsd`E5PEhx7X1%FJ*JhA?|tJX<-1$%t_FsZTtIF7v#nLu-50
zwiGlkXJyrXl!0-=2iD<pSVPC#B?RztFrPWM6Yke$aO5SFq$yum+21(kU@V6Q>)m4I
zjXMKZ7ao<a9E-g@DvLr_06b4F^xeIQ^SAIk2Mm)9Yt?>r<|OrirFw97p`Naa{q`61
z{o<s=K1=PInDXd(v<R@sRNwjq8}aOTIGA<Kjv>0yvOfV5kqBSkRCe1$Uyi8dTJ-Gs
zl9Tg~L!x9}YMsB&5Ix*-9|l}t8KR=G6)PY~u}#ING!-BknkaFV?6<neiaj8B{E|K8
zrUw2)IY)Hp1-6M7T`HT&&thz>H(o^t9D&%pYL7r;MC2mY)^tC)l;l~AbZHXa@w5kJ
zzevtaJFv4YH8~e43Ad-+r`h*>_<L%>D+fKiSV|P;BnnVx?xv4avRaoJUu6>SH!_}`
zX5|YU-tJ+g`gp}$HQmPi%Ep*C+G;QQ+LUIGVYp2|@aFswqN+?}4o#-ld$Y&JpDY{l
zHin=pR$0*Z*v5$S4c_}*)kRC1k8%{n>WL|Qs~hASHQ>wZbLbsfIk@tavLugRR}oWl
zSJj3t=CSVwoWK5l$aP3wEbNWafT_vvS`-!q&#h5m|Fpa=spl6d?i$W#;|I%Aw6r!u
zbKYhP+-qci4h(KGFD|EEj}md9cCitaXgNb*Hw5ymlVRb5_170ydJGrtrPeEuXTt(M
zN9ElK!)e?5KfaW!^5Jb%5{;8q?*V=(JY@QO>7?>7F32*7N=|t{j|6>Z{?Yxo8#!e^
zbV}C4L~~szb$pQBN+quL=Fcw)X4@qD0LT>0=tRR(?VbxEXHPTON>+zk_CQmaI%iO-
zZy=a$aha!i*Jrzcaoz-}1q)c><7v-Ntzo=vbv><kra{->x39mX;<(Dj9v|z_VV3A7
z8w$W`^d|H62vpzv?cLoG48PyLWRR4RFtSmNpR*Gs*yBLDB6&6iv*n*Lnwr=%-nRXk
z(#OoFs$I^2)5o2GmgQVz8ru%rvWAv};@CW|#v@l(S94DfrEDUjTXGX-2-C5W>G7qA
z_Qou3*B#evP-cBbLVKvE8PjFr&VS6WZHcw3pp!1VLBy`)pw;NR#V5%AE`nLdI;xT#
z*NJt0cSh@fbJz4C5k(ez-=$c>-P&7bg`a&Trkj?=8*ZKarVoGRi+*JumeJYbZLDc`
zT}!VPPN2{HvIn?LcfCF=c>n9oR~lkehQ+WI(cHK@>9KyYz|0=!De-gU!Q7>k&H`$*
zXyxKltMm56Nu~61GxGc>Z2x<HU;1Wr#K>LeqDb$3U1hBxtA_=<WuNJ#ilPl>xIxb*
zm06`+#OK*}sV#fg`-R6<3ZENiop&a#G;4N(ol$}Y0B7OVlC{Bm*nHISx@x*;x3$S}
zZiWv^$x+5XyY&JIe3opz;}v>Ot&ek3CTDC^86sN2)mu|PGI9Rdd?(=3)vhWJ5093n
z%)FU7YXa&7&k#+KTz!r5rOu7lr9zQzhxQJSW7X;5#q;2b=2Jnby`H*K@5y_~hF*UI
zrX*Vv2ZZ&{d*kQl=bpK@H#fZU(-RY6<S-Q)J{c>xrtVlXrt9*~N^5H`c6aUBByHkC
z-s7q3aPqqgbTO&#KDDC4&J)S~X*?c*WUs3a_K2*T#?(%2wo=!JH@i-?`M)eKoq3AA
z=ZgL%N#4RaHngFYSS}fxxXVgCpqA4394H1N;Yr_UngwlbA3|H~Q(rUvvT)dn3J`-)
zSe%r4)!#Rivj2E%YC^C4qV9H3yNmmN@h8++eZXP|UkuOwF3Jm!VNl1H(&FS#7`aXJ
z7N4ZY$^0>sP4i=VuFjoqqZG<NursKzJOzWQKy$<+^M3sr$QUdUn%+JCoJ@UpwoNoH
z7{V*%dD!>X%&0}Jlx^1{miwYx+fm*0fNZ;|NU2|7e`I%tdJleoGikB+g7CD*#i!->
zzGeEs_I9*XZsRW_BO`1qEMA$f&d%iI<kx8#>^7PzDsg~J`pg%smwa+3-gKA#;zY+6
zam)@^MT|Y^?}!HjEhfpjLZ652p6!V^aO`wq{aM&3EJy2$Gbpc<`6VMX)`u`z7U;}u
zE~0s2Cgp(THn-9j<)oJFYU^M)_~oLjUnVa36xOev-`jF97TY8HTRO$lKO=u!iGq@>
z^ENFb4tLAVT}l%gS|y^-xje(l<7L}=kjz3UUjXiqJRVh4bbzTyFpz#^kMWGT*sim$
zut98_A~H?F^puv)XPWRoMs~z=*wDVABfSq*DB-x^dnA-yr2M71*OxTD;BiSd_;+=p
zqd6bFzBePE?|R=gY13PrVT{3>F(ZF>XGpZ0ysImmQ7^2;vuK?!Q@|(V%t`wzM7AO1
zVYJ}`4LzTa8<b8;=AcEK&`ngJ!0lLJT(9nI_;4nkf15oOaXs43gBWPxQo68`L`mc#
zJvoKPk|p7_5_g)CQ#>HO;a%DP!QcJtVzy>(c|JBK4Hpyh&oy<bw?bNYl-O_STtrK0
zMCa4Lvf^?&4|hJ14+&%$I_H~box89%=@Vrf83_iEMsoc9!*>A#X<NrKdV0&3-STvr
z6?FRaG&sW1pP4TQcF^8CO+ehKbM4WgUZp0@w1h;@y;qO^bWmH2$0#c`@r{-?Pp%Ye
zk@wwrzF#C~lZ1CPD42~97T=0HPH)d|t<$Gj@Qe->7ZT!e-}}hF7goL&EmXNNg&}({
zLe<H_B97dJgZYFfc*Ne937a?vJ0D&f)4}Ij{FK^54Z`J$UKUWsuz2z2t4iOim2S`b
zd`hT?tj|Lxl^;jZWziAckzfkf74E&IyQ=>0UVq~~v)Rrni3k`t+tIBWo%sH_T0S5z
zf*279G!#W~iG43ZJ4?fSG;)g%5Ue!zKbKWV-LNj;AW*bc?0n4L%Jf;1JsqALmWiTE
zT3x&sFHS3MdEox|v2C`NaQnAyymI$M+}Mm{I-B?B*^K>%hMY|9*RtmVothsA3B$s|
z&MrE|D=I17eBOP@&$pOM+-me9J_rv9Iq?)6e)Y9KdOp%=YZ+STgciTqxriWpPP=Z(
z<MZGtWVn*RlgZ_lU04{MdiRHG{i0S^%0#-5O%(}8QRu>tPFZLXB}h=eu(Z^SDof_z
zd<`=ioGe0z5uhTYA1%S^c4B-wK@=qOPVq6m^P&GsSRfx!vFg=0=sbNcE->#VJ|Q82
zR6OF!?o+uc5+OFH*=*$4*qA3zBI>#Tfrs#?WS_rgI_4KqG7hLII|5ajHkWWKqtb52
zO=DvQ?b?wb>>qh0Wgg~f<n~c$cd`&jq!<j}gO3R7GqYdAE5I~ne7Ll4i-PmKxlZzW
zyzUIKSSKT8T$iD2K6t<Q*%_!mC3O3cSA0#xn|1_)^a46bm~hp?<d-dvF16t08hXT4
zsQKvZDN;B5=1{#KfVRFU7b=9J4IGOU_s)@=Tz8L-G7Y9ky%1DJK-Kz2h@GU)rRRD4
zoh#1Iiqk|Ex9*+QHLFo+p<<g4S<(uI6?{Iwe4(}b*~4G|%Ykxn&&@4+3KJdfxxl*V
zB+1wJo}RFXRE4Ni*n_qXi59Qp$+K;s6}Gu8$(++C<K<uG64X4%Bz|^rOSw|tS26MC
z-Oqx`{=UP_lM5~P^Z}klQy70dnR}<m$bDjD0C~|qF4N!&Je#R;FPFc(+dA;5Ub$6;
zG4qt~@fD}RU&x}P35^07_G{0gR;{jlAQA1QF=3UtMOVqoA*xW79>fw>7WS1zd2OxU
z=xW+H%`+gZ+JX1fk9}Nc>#TjH3QMMQC@ze%*X3bli@Ms=TC6h-f0M%f&h;4fjRZJ@
zJ3_cp{Sy4A5^{bV5`u9K`=*cZpPRM7@!Ao>D?}s+US>1+6%_Ho&AROy2;dCD;<+yt
zglUsNR5-%?u7!e}*iyTyZC5~fX9p;8AS6ugbm+lrYEUXfTN(W>VeB02cSjv>+Ps(b
zWq@jd(5p<ZBIzYh>}K!^4$!ei4D?M0y!_8Ut}i`{NVI`FVNWf4OMrm5v`4USzW)^}
z7*n+w?BB-3%gf8eWLNU_$WHB%Bi(EH;+4+st{T-_{BVk>Lvmi=9P$eEG!iNoP^cPu
zmupIl?Hm%lU7&c7pd#f{BzWqpjzdh$_%8JRVfH&SF!?`=yj*-%NJXoWg75$OxvP|d
zXHoWgXK*ko@zB1SWmQK9eb}8x;J)#XAC@EAaf|oSXyu;@1EeImhZL+{^&KFHT060B
z-ymH#ccD4_Fkc-+Ri+8VO{W38zZCZO?5x!;DZ)i2<b30jGvj!qW@kwgIAQshz^^V=
zt4rmcbi5JJu5&Pvl9DPDc(FpdF0E3i(!6hcU=-S{Srkv))Z%))I$LRWYj^P5cH^Lw
zAT&XikMAdc)-U|}pn4~n79}<o3PT5LW3gW=55{iNH8<z}?|mG$_9Qeo`SqaA$cEUR
zqP<GkpUm<)d&xd6rIK*WUw7rrZaX4f<PD|qW{pE7i8mtqv>I?e-1n7uy9o5xN@%n$
zP1I(4D2Up|$6Xaz^p1MR%+%LAj@thyx7R(K`#Y_0dvF`<FOd4B7!28smmoXc8jg&J
zxab!3ZyhmQ_d_8%y67Z_G+(=Tdy{<qJgjk%6SppsDev=;bF)>%0Bdl*5$2GsXXbjS
z=aj5c8Cfv<OFX5TNvv71WoV^#XjGG5(&#4Ex-`mZELga`r|hjf&&|ihZ6t-*qJy=i
zh5oB}sJG{=TUaSmNXMg`Qi*}W;j@ovg$UtP5j`unu-T(s$7C~wfzO4rWMib;*~Nu~
zF=pIl#SX#yTPNUDm$#))b{H9GdCVL+fnixWPcic6kzvNE%So>9wHV@&$0#6wFd0$e
zX3JGp)Fh9dY<au+?82Wga)fn!VrrVDpqZTXyI!R;;*~0+%j>Fhs!CHbidHM06o#DI
zJoz8;(r507#V-NBoxG2ITUcNuF}#L?K*6hC!|nHxPjRzKB%82%=<6#hp<1&Quf?6~
zq9*^2`uWPSpM@7P5s_q>1Gyz_Q?{aIrN6(rYSl<}UJLq<&2Pp_Z7e@NTn-Hl>HEBH
z{n~E1xYKkR8%mr)nurRt{$F@d@Of#4LC%4urvStYc-1dz5=hgIq+g+^fnvPb1|Q89
zel{V;fDHHKf@qkU?vhwRsg}(l`1Nb6t>F}72q;>s{l?UsL1Sl@W8+0CHy>~BADB=H
zCDSETgszdEC7#MEQ)o~v{SVw0r+E@hP#vb_bu+XrPbcSQDS0wi{5KyG+3?kNy=CdG
zBScjuP5W$Naomi|-PA_~2L=OPCBscIsGizC`gv%*nj=rUFkC%TTgiUdTmCYy8^a_$
z4a4m~ijfii{j44wK4f>HG~DjgJ<bC3Ft*SyFI(RfS?IYr8+eyohKJRI|9vg4sg#Vf
zCIs(fz<xZfmol~V_?(rUe;QVw2sXU9DXSNwiO13i4_S4@{qPL;1pS6d?}y#l&g5%R
z!60`Ea?0E4`mU5fhDk@-v5W@Vy1dx)sk>d-aw~D;^ZHH+h*dv5eQwAz()7e!dDhfQ
zp|-JHX%=>{8l(@moJfM&4_>ZyzCIR%rF@+Yjn0vC;=Et_mX;Dok?Jn<UIEN%n5U8?
zUsjJr49nM`wqNw8Sx(bpCnF=HYd95u3X<8`Mpv3Tjt35qF4ir_+Taq^#6uP@i|{Sz
zOJaTSWS<M+wUmbNl%cHVdy-Pcnvma}Rre*ZLp(q1{i=Gf4DeDG?yY;;gtg;%j6kTA
zM1q}#WMxh@smW^GRnN=xyQHMh#C5X#UnffOlxIcgdOEl+TCbkEfm?K%d85XCsWUu_
zZg+3$<8I>2dp+R7>%(&2Gt`S90-wi2X&j_4%^(A~iu_~g31B<-x|TGWT8>5YA*J}L
z(X`xTfD^DD4D`;<_Kf7#S=YoX)=WATl>hYP(-J@La=f-4dT6hJFN}5>TILAzB(eE#
zn&lDfQZoWCdjV}&J#ZDiWVMFzq;byD>M&aV9VscVvJ9%6V`d`<8R>44VLda!mHryb
zv^{8A^j^DF)GcUq@_s=XESlV_I_R}{_9yl*?!G!TRf=dasVTGHpao+W@wc?Yi<k6(
zDcl~WG@12nu{oGcT00ilY-;@;(3}s=BAi_NY1)ul9i83RSGf4f%eaG(lDIpK`dHTH
z-tRW=+UQHl-OBI+BMK0KIDZ52?6f~IAKB&3XRmou&uipps%F3D-Spy3eqKwa;@!^p
zQj-}DTe@X<#s}CA;fa%|k1aI^Vp<#jxml7EJQ+L*w`T01vB?<8YMY%<5RQkzKg$k9
z6Vc?mR+hgXOiQc`kj^t3s^N>}3EkJz8{XhPfRQ2vSO<CA29cW$0Y$ew(xK8$0*Y>N
z`y!TZiN80hJhws0tBbGtle_)sp;8*?AC0Z=60-4oWDResse_&q>ObnldIaM4eyWiI
zUV|*a7F(vVovSGAX6Sy%Bd_D?qLkR`A^TLP!uxamqZBd_Av=#|Yuu+xbUtor!7P-u
z55^0eS(%l3i}FIl^UemJZ*b5HKUOp}XN@;dN`ETpgwic%9t#@G27x;{NuYh_tZ8T!
zshWr8f7!a%6E}2AJuHPBUb8^bZ5T>BjcRi<jWV$a>zgO7kUC;l7r01d)>^^D3HGF|
zUFGAvmMycmaDm@82zqu7MHBl+P4ua$E--OQ*@(#X4GX|XF$@91!sm2sNOhxXGxJsV
zx;^XQee>ST*Qs$0u0e9?LH_(eZkM!hI9d&iBOIh90lcaCVfubVb5Q+d>z*G0QWu3R
zJJ9OMJ{AedsOe<Il`XN;nk^WMDCv|Au882vGXgZqrs*%U<8oi(Hq&ZZtu)jqv*wd}
znTU<V>}cb+fAsJdF~SmlTjE79c=?My=*oRus#6G-adECm4^Wx*@AUl%-=iR4hGVMN
z5exn!D30vbxhFE?98*g1#dW<Y)RVv=(=Hcv9^&@pI|b5H1qVF{(4vdG%lfH0qi;`E
zn{Urt&%*X5u;tyf1F3VQlGfKv&PJ?dfjfz0vbXQcPByg257RvnZ9~gnsGH_O*QE_w
zY%WfR3;G#YH?8Rj@f67Qnr-~t-l*H+NW-d^;gCavCDZxP<F~{R%^&K&)`V4&fR|gq
zozIZv&|;HX1M*#neeUgwLaC$+F$4R6gCy-OVb4w|<@5Ox$e9J3NU&Y~wWeY5!baMM
z%K%%Mm0@{Z-OmsySLD!(<o@Zv8|2BCn`DvY8OM0oxB!293s5<rrC;9J>Dh@=_g^h9
zn|s*SgVn|+czThS+|V?enyFr!PCJ9Bzl+Y3wPEA;B)<i8@E6v~TcCvLuQLa^)KfU)
zWOJ%#G_OzL3t{)YSEU54jo0ivpjlm8m#Xb4k~UBJHqHBvTKu#uQA*@FS3`#1cf@@e
zMhys)pp%IU9W(r0sU*rFmrrrMfk1^iz_Hr#<NfXJ?PTL~rQ>Hg5N8?1#!96eAGb^A
z>*-6(e*a<Ge)`;Qre=J8yJoN%v!CAV-S%~*8aH=C03vgT!sYTwZ0)Xyqr)%9cfBTx
z-{c=OJuYth(YIz1-JAFyt0`BNS54`ojn{jOD0x2AM}|bSc^733t&(#!(xqNt0Lz+z
zOp=xqo-MP}zRmzo=@K5`j!{pB4GDTLB7P+Q`RtV}^IOuW7tcpAzg4*^UKAHJltk)&
zrlq0&BqLDu^Gelg>52R{^Jv#>PQlSDPPsH_AC4y(V#ZbTZMd?yThF$5v2^aY>k2U)
zsdVNa>ki)s$@xe|ysp|UdQ@}#3-hC%miD=eS<_->x`loF5diG|<^6*WMEf;x`Z_1*
zqg(2FdD}cr4-i&=bvmgCoS|eoNvSxB-%>ebLI}d>+h=_DHwXN}x4sXaLCq!3E1}~^
zFIlo*+J@_KacF*ei#3}oG!k$=TXWM61tT<109-%(H;|!3SS?!yuo{~76>qZ7&mbey
zk2`*6v#T^)nsJ4XK6Lh*r7=WU+gcwjdl!)~v8D+erUE^A`Ym9yGAUOJ!G_yZt3zUf
z9fAq*p64&eNfUl`)1}d8Cep}9#PoC``YF;&D#mAQtLzZWv2|+&MzYfo%*AD9?iE=m
zrfU;k9!g{7|2}E#*VjLCYnjye{hOHgr03g2tE^|sV_T5hav$cinAXD@_qD+qeGJYC
zyv$ozd(BRqvRaTHbmykTAju%$)J%-uRcj$+*T|Gy^KvmyazaFt^!GOnd#sasO4=Kt
z$b-}Rhs($}tW`V9Hx>Ei%Gbn2;}y!D*SP-DsMo4r3fAUoUib>HXrbe%^PFGh{#o`}
z@M;vrBgI~FlwOcOkQk7Qo{eWsh9dU=C@yt&iTQODu}+Rx4)GqppDk=2mZ!$)8-l(0
zwZKV!7B|TOWIt=bTReU>Bot-Cs6#H$>cc}$`!DHl>FKm_E>k@y9aH*}_LWhXUYTek
z@+uj6L-#l?^Y5)i9Sp0^X0HDvUO1;8zApEw209GxfSvmI9%!R_Kh5k1)&z@Z`X8#1
z;mBkR@*jVF!>OAV%eiRr6WRL`I0rWH?0N<qxhEVLc=hI|1FBxj&Xq5gU}z*&q*y27
zR|n(F@CAn@LDMqh%QI3~B`G}JuZ^=5j;6L2#fRRsoVZ;c5+%jp{^3_2<^;~uFqpJ&
zRkw5n)^dzIPy*k+=V5$hHIsjrB$+K*l)VWHjuJ&<&`YnoT>Ls$Kj(qtrI~K4s>Dvs
z<Pp6Wh;x!$!+D<3Uc-&x3t@XUqBy|Q?cNLpOZ;B-8T#R4SSYFN5rlq7w42PsXL(IH
z9nCB@d}%_JEO9h$5*s*i(?Ya!zZ&Q8Q1#Gm@+0drJpfpbSyP`g?|!;n5`c|@sOaTt
zY&AN)Lf4N+iM}hIJqrhVx#Bh#OTk-nBGjYxK?$M@E$SI>JGAZ_fz7QyXM9r*u~fgj
zH%qi^ZmM5h&dxX1%E+GL^B{0L*HeBxy8gZvl*$4L*LKwtI{Ovn=6xR3uXA%*1Sb9f
zrml+7+CqJC5LU~gMf3J(Ho5BJFD-PEm<W7cM8+}v?k!y`V<scck1mK08$WQo<NrP|
z9&&ya|7Y;g+-iGdnNPrBULZGDtddk>UwCf1WzRdm9-<1pd*n~5w$9@i#uJ;iN>ysu
zNS_jB+u6+z{d(6wL7+@o8|yq>sBASh?uCnT!R2b;1Cj4b@+w;NhXxjT2Kkp6=_i%k
z>FOxL>Sjm{%#mPfXriC}BoeT4y!C(FJ<M<P+8bfDWEs@&1l;&r%J#D{3$s*tC&BdS
zQs3rM#0%7l@N;FD*>8}$e*BF*J*m-edAdCm7^|~2T$Rq}^@sBD;cwVHxpGNO*k4_)
zY3Yb5qLvBm<!0;AbdIHDcB^vjcNUnwYnggbfzdgqYFV1Frk0h6UEA0$vPdk=Ttg})
z3Ze!G8>sE2WaQbB0eI3L-iKi`g3eMUM;1<@w~s#l*QcJ;aB|S0(6zWvoYeyYH+?KO
z_|A|rg+BfZP4eyU5e;SZH}vtPx>SkM*Nrw;FLVnyMw)w}dj9{5u6GQN>x=q^lO|0X
z+l_6bVH-P*Cbr$!wrv}eiH%9y*tQzm_A~$MzOVOvzC82kTxaI&S!eIPuor#{FDlRf
z-E)!Jyn8MumqLfFzjGS1ROM;I`$8d4@LSVBpux-WN+F?yb<!c84Xs6a*7G5Z>szh=
z0%%&<7jeCvXFdk|$ra(8(k7eD&xTz^SuJJvQDT0N#kEQPmxZ})-DZVU0;}V%Uu+yR
zC*c8~D=Vi}48lxZy|T&(NEKhN8)2@lu1roT!nvRGe%#%%j|Ovk!J&AARls!?htb+H
z`AKEXvSAAi`kva8_;a$L-CYTpJ@;T3L@(JQHlC3a{c5EjJuk7>4;RROUXnBAhR6$d
zC-V%sk8{*2A3rb9bJOTz9>9JUF83%>Lw%0Q4fSe&YjlMCg~_M6x?23Su3GcCNP#uc
zr86rX+Q}$4lYZ<z`^j5{Bx3SOmmoWX*PY4m37^d*x;&$)pG_PMK*{&@&ZrtWui!YV
zs&3tkk3q<BvsMovi9qA(riayJ;Jz)kSE@<~Gu~Gk(XVoEq2=Gwa(A3sU+ZdrgirPm
zBYv8m7!U^VwVJ>D=&G&mW|*~fZBmqBhr1WxwjBEKPPwkNzT2FmlMp@b7^a9++FqF}
z^WO<@8r0uA8s$ipR64<qsYGCY^1rA%&F0?+a-RNvi7_plYxJdG<6x^+x4Es1G+E!S
z27~hoLpa(OgP+6!X1h1r^9#H?`ha``?qMATvlE<16;)LkUMbA?HhYoZE|#DBUuse5
zj$T)>K3tWHmTt*<`y^%f!%@a_trNd5&DVk)7Io7Z@-Z&z8wfMg$n4IQ7j;$8Y%<k(
zsr#e{FWRCAX2x^BInyvQj;>-k_`Tir&z3zIf}WXxi<6z?X4jerBri$;foJ3o@1IY9
z1;jRU(&^QZSDmL@1S&DEitkE*7>l~8zG~}>oI@ovQJ8{6xL_W`$3czW)lC9HHCkd7
zWy&Bs9T5zTW__O)^?OHGf2mq>?jI@GqrH>KknDMD>n#3tuJP+7sdS|C$HkWO1%ZQ2
z-}8~>Z}iLj#GtQix|P!|`cuG)`_jg9fX#fX+3qdlvxI1-Ja+LSd+vCLvjLhxtF%(<
z;962WoeCkhv(xjQ4PH4-$%%`+1MvJ6!*!d>apdd$V0IFZnLc2DX%n1pdS}|WKS|2y
z?pIK8kzmuDh4G_#pu(pKY(OodJLuyZmW%Ptq+!T;w0S@1e%?1q#IK;*CfTM*yIcX^
z<;_~_&ht;9s_gX%mBJ8}$r<=DNqt6Yn3AHn>%!V6c|O{=W1G^~p1Am(u#L=`(E2JB
zcC(qyZvA=AV>s&+KeIoVEQ5scNnJlmoa*th6S`j01#I^i`mp+bA!hZBv%8JfRMh(H
zHKTU&*5Gtu-u-Z9Kc*555n1>J0I^hmw~kD2*erRAzfCL87w|+aL`#z%b_m){C8VoR
z`94%U_7?jB9TMMeaubhKbKVte?}+XJK#^C#dU;&Iow4?XIe@C(=@u^b2i4nUh|9+n
zxYHp`q(RX5T<szc;|+QN<dhITvU4zh;R6y@E5;o)M(JaiZ(r+<!x8>`RF>6A;jT9I
z@mTdySbF_}J8VK3Ix$(G$Zd1)Q_All$(%Akcq^W*=a4X17bS<lawmTJnz4N2`Vsu?
z`nCU>?;TFi$K2-`P`_D)(3~f{Q2kX!Rcp4$zOHdXm9oD_Gq>S>K{GHRF`_?~c;(~0
z;w?LR10;|o!cAc!+gF!mf9%pRBMDke)~FMSslWcuFlgGW`XGzH@9}AT@CQ;pr+(`0
zh{rD`$&>byRmpR~Bh8QT*q>Yv?p5TqUA}g^ICr4%#x8mH)4n*O{XJhhjZif)l+Sc@
zPJk%IzGKs)?)S}I>){p{98P4~mq4*e&n_t>5U(yAY<?-*dYP(3=?=a)KB_7ed)Uo?
z?x{-WOqp5=3D=oQ4(f#)|E^P8a2q{@H#)f9kOmdt3f!0$F0ip$l%@`Pnl(jmf~Pb|
zrj+Q>Ozt?pr)t-vOZ-AqQ)N(L`O)C`>o$Y>=sn|}T+gmEm^SNC`s$TH`BRqtnd?+H
zCO5ON*KLhn=kE3uhrrl@D^Mqmxwk|8Z>r7nzFV&Tyd3h+@XrzJ-^VyDdN)dlI4iuo
zQ?|nZgTw|>`Gtk*lM5H(bwU+AN|nir23K_^ca-8=sQz#2WIA8-PXJ1-mJ&1g*HgVy
zarv&uTrau&Z?bpdPjEIY$6OOVGn{x$DIqqZ7gY$fb_wOY6a&q8&9cp`?}UEep6%|M
zCj!oY93h;WrFxQ&uJXOWw(EkO_D0a744n$4R?7=ac8j!zTdE|93_>8;Jy}F1#e1S*
z6g<FPUEuT2Hz=WFRJ<m7S5|<l{l@IGS@O(&8Krh^9!2VKrA?Hw6yJ|rb=@vV#^C(X
zj-`bnB=JOH3H)|A4-D*@dm;7l_&Tsmn`MD6&Iz|l5?4lV9En<q56Y7@ByC#a8fIT2
zC`C3wm!UXe5jdyJUb!XY56Xa?e1WldHZga}?~XtFk!`*%vSN?guzofGz)Z&SZgQaR
zoG$9lam1WG^wp{A(_f<`T_{tPY*Wyu4m`dce--3p_j0vCTi-aD8v}J$U}adlPQg|J
z=%{$0N*C&_ns;cpa$$lP*U3d{_L;lRT91h!eu-{=Q~WvAdgYnn$d+iXn0S&?(aaUp
zyAy-kdj{lBf!}S|s<TM%9HMC>K{*?CVjb!C?rLvr)!aY((qgsKonESyZwyqn#jmD~
z=Oe6sz~0^M3>pafw22k|bAn`u5S%Lg4T6McHdzdW{{s+6C-pgIv7%4Rn9=H>p72SL
zt5~l5OJsrQAcr?0gQb6F6vs=T*gS>DZ&ezW6j7m!MUTIqgS9N+EyIW|L$_Y%`c~qc
z5>Yu;S@z616LRJ|_Av0Q!*3Oug&9qEV)j{F>tryndgT$Y+Oc}?`(X6(YqMZxI~G^w
z^9?|9-N}D<)1YkQ#S868bElZ*j^2xAFw@V>`65Qs!(g|xjIlh+|B&c7K0!i4nz`|u
z5-S90L2?{y_8Jy2b(k>#AQp>naI@TTCnTlLNTz8si#tsFCYmJd9xA+G$>*JEe`Yph
zK~qm?Kxt6%16|8sf|s-Z$3qP-8;XW&Q!$M(WyLN1-_S;h))J&-W7s>5qYEMw?vhCR
z76hl&FH8zkDRj?kW_k-vWZrv&<qkOPfeMy$a9L$LyFsvneja}^-R>?#js-WWlOpi5
z*sF))yjUDY#;8WeisgcjMMw^xcHuv_zYJkfvs+V|iCW+0{i^3su2z#jvGV@0M`kUK
zilG`$H3T#O3C~X_a$BibyKtpXmV$21W+BB-J9|zqO()L7sdMh`tLd#1?z#Gcc3HYi
zG*(Fj{|Zkb4vDt=qO>CBO<|(Vq$0pN6@w-X*fZ@X3Ay2IpRL)<YzU(R?ospH@@N<u
znDg{QU+I}|YsgNTsOg}_QpSO<MJLt3`G*|)jPf1lTzrGXhflc2maUO#N$L9@l6aqa
zO{b{8i~Ps5yO%L__6hBP{hRt(U07sFZ1M7uzt6$2Dm?4_*PdIgvv6WxjpF1GUSa%P
zPxwx&Z{MEB;=I8kY_0pNa(CQ!%)}aHrQ;oruDdAiqm;37PUWWKGSXh#w~3<%kRW@<
zdGce#u<C)F1xr%NK@8@cBR*DJ_u{X;tUx0s7MS3`s7UPBSrx}~QRM+_a?gQ9D|(^v
zv1}H7_izuxh^Lys_ZN+hWag$JCU0a)Y?;XU&V2y9NO+B3N2!>D(AMI2Rb?mZbxg+%
z=I!>`kWb{Li^}{$&Tm{-!E*g#i2E;+&ld(KV27e%6u#@<gI_`@oV-OcIRB*oTZQ;$
zx<hE(DJd~#R0?6j|3m`j<zDy|TPmn20t4Br$KsyN^jF5jqs#R1r@(6SPkS<@-|5&6
zQIO1~?Ak@_!0U6gk>AO15m2~p{^be5XJwrdQK)o4gwuAhRAgTB$2MM%fJ;P4q^|GF
zY<|)$q`ENDIM?TTxcvTXRaNJNDK|g$?hj>rf|pw^zgh17F{F^Es0h3vtS~`+1c{n|
zTwV6+3O$&azM9<~!!t5O<Tyi)Uv7yTZ5~$>+%|r%8{Xk8`n$&nORc=94?1VWMXYXz
z_`wpuhz#Z&${b!jkBWuw&wsvE231%7orC>hA+kO-!qqg}EheuWWT;$r2yBGQ)VjCS
zlOpwP4$u4MnKJ7CE2G^|L!|!a@X4>-t=rEq>=80=s+gbkg5^z!e8H(8f0b%O$F##y
zPPj_-HzBc8uC&vWAcD90+S-ek9a>ywt%0{pE_Lwr=6+JT?=T~?-mHZZ*lyf)cdxpo
znwoxBLb<iw((&tgtJir$8m=T8rRro`x4?N8D<(n)THJB+4(y^5R#G@sQ4k8~wjJ=S
zLR-AR9(@p1gTkiah2J<X3syA-C0Q`N+)<){yof0+@S{2Nys?wzK9iEn(k>!3l+{yy
zWyerc74SW0@U2fKS@_v%7Ey!3!Au<EBF=6ZeEy2Vto-(`ra<u7&Q*4$X*cC}zsw!%
zgL0ZruOXX@yL&S2k4hyY=ueYG;oh74)d~sp@0W+So-)ONo}9L#*SA5va@ML6%xf?#
zqeH}+lf!Wgtc`&B&EIz$gI6|j@pM6WbEW8KSHBU^EU_R%UN?W&k%LA#mBiWevRaXm
zIDMqDrQW|a&PiAgR1lK2wY5()!YQY)lokaVqe(o%m_thGPV7qghoJZ@zjdEFPl+)}
zyVz?d=_rfabl)#qTa%9P2=>uu;hiG789mJYTmkh*>(Um}d=_nct!?V0fv(F6kA8*X
zycuiO<2<@^lk}&!3=%|~WdF{`P^r?Aa8Rc_ZxiPt+|sjESY$Nzm<-ND_8-JE1MpP$
zEqI~IPnIfrHHX#1BQrh?o>e)`)^wimtj>PZK#@Dw#=*+g0X)Y+ebn(P@NV`@F`U!i
z5K?K&Yv5hd{UkqFI$&dAqs`w@Bjhqz?3_+DuE%l^*AbAO@mo+*>$!L1&vh|o@Cuhm
zCQ<g=4%Q6LO}|C$)NX$V!d%Q0et;me{`Z(sqB5i+N?0Xu)wgL;skqlqu%cEeYMl?f
zl`{1$CJwcJf{%-})X#}DL*3=ms;i`_HQf@rgWS_U&|<j~MYA#}+Kj^3*tIYHWx40?
zTuR2)LNpm>dOEqyWQ$lkMl@1Nd&ALQXn<e|t!-wSI){)P2X!XOhsf`h?8ue2`$%kd
zFj+{8bDsjG%NN&uO>UiS%H><5K2Oh;dmH&L@>;-AQ(zoz*=JzX@A(a8$>Pruz|D75
z4!{c<A0(#7wm}eXNJScs8y#?d4q#{pYARYW!FcVaSI??y6N`<-sYe!h<NnNrnXCP%
zT7FHqeYO&Rh22FzlH}&^oSOLrU5{*Q+Pq&RNfuRt99(?No0o^ptO-FJnpaS(4SL>V
z8E<@$#T~;Xv~2N%u`>{nJClf=Y#2deSpd1|tN2{@NZAj!F)LQT#lwI2PA+z03*BCI
zkM#Nz$!5@WoLJO5Kty>FS7~Ll<KDPU{Pd<Zw){Bs`~xXn5e<R^nDu(Uxe((pR+G;)
zy*XvQi6b?QTj!tzQ#Dmkh~p)WNLZ-S|A?KSUSYUZM!$Dp*uEI7Dp@-xGifltH`b^}
zYTzw1IQ8j;CL&}~9%C$*fo6T_pd8s7c=vG=B2Qy<6DcE$m;gyN9L!%}$2h1x^hs6+
z<3qAAs&%;8xznQ3(7l7e3l=xj)4&E}e=yBA`Y`QGNMZd7myLqD<(>ai)y)kS3`ODZ
z?*vI$A(Q)MOj+l1y^G&W59fb60e8f;l!Tv3JbTh>S@e<bX)%&wAa$0fKGaef<+@24
zAtAC+IOxfdx5#~njvZBj)4VO#XUB^OA)<qKv$lJ(C<46JDoi%x6?zLwUPI35u5kI=
zI-kSnBUSCkb+K`b7!&lEJ4Va7F`S;RvjH^y)Jk!rX3e+y^Q69mN87)zTI`!GBCPCZ
zXW-ylQJxl>ykw1D;Y=uDW!OIzRU&fl{km_f7i3Nnucr{o`eRhKRh8yA6Ed*`Yeg5v
zg~6B*H6+xl_|0tzw%sbkxV<skrzi+=PGA>MCSk=xtvEzltWL*Iij%}A$NhL*2>E!r
zN@4b-pWOlFzh_8CT5eSzRt_5r^+tqH%+&MhD_au`_Ga{@*&X38RAde-w@kX5J2n$w
zp|b3r0BdU@2uvP*kia{CwGrW}3+fB2jizdV<BXja9_QhTmsK_vk+y5o=<{d5T_>*m
zK!ME}d(%UEC#pY$qFp3vnzEBeG~|a+j+9j?vM~0!Wra(7+gVg(q;(!h*`56boJxFS
zsR6W!4<wIS<jYvsKUZl@2G~VVS-+e`iFEwjG&g94oSE1pYx)nWcLI?n3np_mmfgFv
zsT=D_pr*U3AT|1Vwe88dNs6}7a=I@Z^o{rgRpt^TMyMV(n?4^Cka=vn6hefHdQWRq
z2m}I4OZ&q!eg|4W?CO;jJIgcjw;8%+6HQXKPFzvDdA#Ln<z2+3@1{z2_&D^crA92S
z$95e6=Qr){S%|y9?J3sotw~=>!r*jHNe(gf%Z4D^#=VY^w~U;;eB<J5jGBBbVXC2R
zkE%+552%GV_=op<)tRcs8&0=0?nxcOv?bE05f)EEdB+WC%M9dosB@?BQ);4>kl`lv
z%STT)XJCAh^ozf%(xk6xQUVqx8J@;>*l)<dA_}RWct1Q{-En;Nj9itCK05SY-S28o
z>d(PQ+a1xJ8-pDcwKeceh)59uWaS~~PT&6~zU0X7=biiC-I{V_3UCU|awZ?VWGbo5
z&g$vS&Z_tL9amOK(c|g?B6Q5JhHuJ7Xj&6Js)IP<xc;<RG5qn}#<y;@joL3fY2=(0
z=jqgQko5oPIJod$iPeuTQRC6J$->VJVH%PT_#Bwn+e$ckB|F@=MaW4%%@+K^{Hu3v
zt>5LLKG)Wka<8pkx4VH#AS{S2V>%Rdzy^x8cS6avSj@tLu6a;YkZ&^0zD#xU9;<`!
zhsHafQfds_>eLet=@X^OZ7;#5+>d^^iB<+fXxIZwQ2!1*^;Z!CU&a?KhLSiQi%Wjg
zM-0SG&d0Lj8BUT0sZ|h&e{%orXLIJ&v0QJtrKMS2XjRI$?(#KxHq<Dg&>irxnY7YT
z^RfIVUb9A4*62Mp!%Gk<jya%^jyKl&yy1**-o~iy&)L_BmrU=(x7En^$*Z1h*=8F&
z3uCi>cZ=Hj_mvvd*O_eib3<D#TcJXmQ=WJd^4tU*gIUJp0FN7xb&4iuy%!3{J2vL_
zca*oA^zjdV!yWNB!w2IF($bWKsObr;meksemap}rLgfjVB<kw&7|3E+y9KX%nA?X0
zJRkA*^*8`(+B!97K)9%^p~?HIYKy^Zf5_x{t_TZ*eL*PLc8d(9?O*4Re?<l4AIs=2
z<Jl@`p*Km45$#sY^={m6BH;+L7dY4%J=zlgP(+dD#o)f8JG|`~j2{T#$0rVzL?n4h
zNGm8O!P4LJeFk4`tQmEGIFuE;asdD}v+$c~RNja!2Rq{*|5gWl%2E?i^<SVZs3~?9
zNl8(DxAL0~F#ObtoU<?f@U1>Ld?NQXy9XF(XI)>Sd|S4HH7W1B>s$5aN8?2{ZFs2m
zvykAmN3_79mz2aU=QoGMFl<LG=+eepB1`fbyX!q2pDEt@I@93a%{Saf;&f!z>_<w!
z@MiV+jW*o7j&5mZQ3y#Lt8ko|nZOBA9+X7-xlu15a}##4PJn7M-^X9l48YbKdPd1V
zr78Y8#VO{NlX|aS|J!8V%q^41d*bB#ATYW8a7|61G>3TvlsZ*uEk6E*pH#~OF8N#I
zwI=F09uYpRXLDFEsb?~kiTK?5h@E71r*^tX9$;QpQdWlAG`sg~yCX_<Jpuf?bp>Q+
z8I!En(s4{_1K2EAl>tkB4~cii@WJB%zz>A&#^43W()xcyHn(SA{rdXvfH^4T)jINE
z=jB5yO(kLDq>ULqKj^za-0H;(@Tt;YyWX)n!Lb_*>-SgZF6!x<&xYcp>Obd%l-u`{
z&*$-w^iGB`9oIn8lVOL+TjAIEfql2t?NK!))=`Dj&jwl1Zrb$|s5?rEE<KN0-p=Vq
zW#5j&Yet8a>kWE(E&X?UoehXD=qJ>K{a1$wo+9hH5XN+3VY73e_C|>ZS?RvkRR5VJ
z#dphKVYz5l6$h;&`(dv-&uml<@-SW#u8#hb{N<8$)XZ&V9eNPtZ1b_=`7dV8{P=ca
z(@+wVJ&QLqw?98u_EgAh5WyBJy6Yz0(y2MEN2q`}5wpyMd*uf3tz%VQ%6*PhWNK=|
zvh8jnG&EgqZzYg*R(sRic(Wf1o=7o|&-*5pS0OV$jg#DCFSgYaSk9`cVSmb_O}Aox
z`KUl#JeXOpWojk7JU=)@-8X?{tDyXN7)nj2b=;6y7VdCWA8@#AzAD6ecPLN6vanj9
zIyGcye9bXr_1UyDPI)wvSY+v{n=1V|BT-^_rY7H9+g&HaCWYpqYu<9$`qSTM`EfU|
z9e@7!XZ7q9it|pEoedkw5POZ82y$XQul&5J#U?_4ZeCugp-tAXWKTomorA#Y8CRp%
zj|tXV684y|P~=3@Bz1YY*0%$q4jotH&Qd&2ZiO{$6<b_QTU)6dllShy20mmNdTh)W
z0}Y#jgQrI~;_iFz1$VvEv=wIli`V7P4=*?FDBk2kH|cWp&yx>T<=7z?R67y?3;~}N
z!W|Fb6%8=MpOoWuUx-tHes0l2?^ShsH4L*p+350Z;tmci>`#`L75J+3Wv1VcFe_IC
zpVYVa`)t!>!Y@9H>e{$KhiZ=(!BFWm?JS$u8`fFVBsOArpW&);#c*B+Zb2=f1yk)8
z37aWDh%D?dtgTfO-{5C-UGPw^jr6<8j(b4kJNO!MeYi!)-(}ihJ<gq(Q?^ZXn+ucc
zaAC!(l>wxwNSpk!NCEW;6H;3o#{@e3c#~(Q0fkupyoq(7W%6kAO^ICo{I#xZ<twms
zC*(yH0=(*N+y1w_%y?$LsN7+3NF291j)a$ff^^fHBa+j<hB?i1KfWJuJEfvUm6g@j
zm+g>hvSk*9qmgX;0A9ty-SYU-dmV@q=T!YE&|m9SegKt&@HHm{ZA^_YuS1XVesfA!
zNWyROQ>1iJpL@Uq{UwhN6PUc-w4pq~ODHN*{m98DDy5E_+Yx&6c<NU(Pchfr$`fT-
zOd^+SHqU$K-I*^joPbctD!dLc=HR$}-HiX{D%eWOyPQOiL(=oZRco0c5Jngo;SwY{
zQ5u@mERwcmj(La1`u8sl#pT;~T=QhjOY`(Pxi0f^%+@iCgR(>zXOk~MDHRu8S-NaO
z38RKH_`|)tqZs5)C=y$Mpj?hDrU~l$M1Ek1+Gyk$w(;_wnqQdC`)O7Lee3uS5wIW&
zE_skAkmbDlhbq9fs08K>_=rF+@#9}UhlGr&O{Cml5_V)+9Ci9w(U*rmyA%YWOiJrD
z6LWB$ULQ}QcidRx=jFe%suCN^rByKq==*L(@3BjZhp8LsF^+ihbg8Hl?^;Ea;|VeF
z{%CB^wla8K57WY2T<vyYs5*zQsZ(G^HZ(S>s;Wx-t?B#9asD?mn_@ySJ;$DBp*73j
zvd%>-qn=<JTZ_&h<ky}{+3M@e#Du$>yUX!u^0jIFE1!kAzHytHUXGA=OG^t++6@52
z(_+IA14ApHlafksR1^=_2okdxiEiVZ4UT+Dny@!<1xC3s6~?XB$}>A^6-qPw;Ea~=
zrEw#61|=m#EL$O;@rPw!$`8+sL?NH}6;Vf!p}A61_QM4~nHDD@ncG{`;mD1#U~KuA
z$79`PPB(pW5=SJ*#jxu}77nHKZvp;#wuE3vm!sAbjlnbP!L_HzDodJPXUUfh43s5$
z{!xGi4~-1x@`0(YeI~db{&`EvU-6(~d~9<L%D9s*-f5@C5Py`NQfP6?O268wB`9oL
zuqK(-WKlJ&5TwRb2r4<FslfU*6`A(vGl2J#5>^O&qPl6lI+z*Gv6mEc_50w=he&_K
zO&E&F8fY;z%*M!0NJg08Ntr7BNHX4oiI#{q7hg%a!)KytWEM~$FcLnP$W^W6mYq)^
zMIja|s4Pew4Sr@hdG6M8Mhf!r&1gM_=4HpxQ>}g<S14v-1h{3|UYwu5-ifgI{Az0)
zN1waueU}FLwmhJ@3Et}Oh=7j{Ij7U(RX;Y(C~NVP4YQ&QHyHe@_0l-FYvYrwa+PJi
zQm$DFWdGi$e2>nj9s`t#?0yl5p;H2WoK32TRo?^sb2xxQLwgraQ`=<;r<3_cZ`HOb
z^7b2)6CyhE4|BwoMQsGhs5gLh8TCY^%^Kwhz4aGl0gb4A;}3QKPYr3{M?>D>yOtk?
z)kuTZeW|l34t{fxkC#N0w((!t;q|mQRdijCAHa1-M1h93b^{5Ovu!zMk?ydAg9+&X
zPapz}1<PB-_op%Db~$s)5=>(Qh0VtNrq|;)q*}jKzum6-bwf@x{m?$~Vz=P8%TRF7
zxs}e##?yhYjewdBKyF$g9heXPR&L8BuNKR4b)@4;UKmkszi3_&({@HFjnP|28CsP+
z{PBiLlwLH6R;Y?M{LC}muc#6OBB_^E%*+E*N&u17Z|nHq@5|}i>3!R_Ol}5SYEt-D
zW&PSnmo29kiVwq`cb`zF+fh|0jBfC-_RBA(Vy60HE5argfvWQwAA2z;Z!OKo^9IiO
zf@Jw0vc&1q>W!@DAQ1=y9vh2-cN5Jx#1od_sHLMMvER>HJ_1nZ6TLX^&h5)qrHO^)
zmI$KIl~b5pt^GD@(@^Ym?Tz9**6n1&>P@a_WJcoXAP`)hm}j-*$hgPd>+%+)u3dq3
zGuYtDOM069TcHNQvBI9=9}$qMBg(+Y!KyHcE_D%?Y+Hl8DSxN7#)dz0CgQRPxycL@
z#N?!zKVns)c8w8&PvIKxg7U16n{;h?c^;;G%~OiVXb)r@@+$S%=p`r>V(fo8XlrZ#
z>ckpV{8uOS$>HhLpEAC6<VD&LEp8!`)K717)gn2<GD(~tMqqr-*o2D0t*bQFyaZc-
zP?IKE$S<0!PHvu-mWavbV_~(pHB#bqcabFjiIOUHghZR6+mXj%owh#Hus4v}8L8t%
z!9{FQ4(TgVUA3S7#>=&<rhPuCzv<v{eGP2qjrHx!=;G7xad>gKXJqTh1%w3sC((y<
zmKAe$2D1q^j-hF^KPZ>x-W>FO=-XY$+j}ofT7Pt_ggxzaE^G`|LAb%Pk{Q*uEhW9#
z(Mo|R#(lX#B~CNqME-?aqor8|Shk|D3$Un<>lia575NiW`s|AJpdt&0)WVMGwKWr)
z!$XrQ{GgKtN~@I#wzga<$KX&7Rq-7sY>gO=$?OusQpFNz*^S>>zh9lK3SC|<ium^3
zW-Ny_CQFdsn2SeRm>t&iHoRd}{NL~7kl=2w$3}0`i^jXFQ#zd2<yhf|7&jJR?}vRC
zZO%JMKH`gFJsv*Yts@nAN0mTtgRTQkWM~X1+sm0uBnYak#nkZ>nsZwg^jAXc7>Q0m
zMdB%<EaM6oIHn2I?F|S=%AM8qpSMAu*eSnv%|nCVU&lM`AF;Fp&b1r%PSR_gkB@Ce
zSu@{GuW~2c7rVQjoS(SvdO7tg9*@DIg*~|FdfS{E)|dDGiv+!o$TBVb-%=<j>bSY6
zVS03x+6W8fVEL>ZY_QBqhWGyUDw;#aZx(PcM439VZ}WaSSbcXPUPSYG$aU|&AMQCh
zKf{|o(dTgM?(@{tYVTf*w<u8B9Mz1C+$e_Y!^~(!6h|D>`D`rt<p$7d=Lyr@KF9vm
z>d59WcCzREqu{kPDqEOE@8zzbyS|OY6WXZ#E?sYJLg%w6t?&T|E?s@U{Ys3uHYBOP
zm4D32&Q8epxoN8OOC*s)$G5*%vH^9{R7n^F(C~G2LcjCf?g)u%qbw}IEoR@PkS^X<
zqiNF{#2|q(r)D_=8z4Aa?X;EDW2AJJlC&1~i=4K0hZ=6Da1}%}C$FvspTj{?%vpQK
zTN$vT<?Hp5dA`+gHd#i@9(OA<r0&qlBmdKJy@L{<(`~c8-?0_>^$`{{pRM2KwF0x+
zq3?xl<eat|VfM(6Z6}>nV8ws!6Tn7Cz{`T_3;aX71WC<~ATUy@J32odidt%wogGUP
zv%s5#1-e`M=s4E9$a`7$6<eEh&H3enHONaTE|gzts;q3?WXpK27Q8VMvZD3evN99W
zagBu8^{qw3A$h!yW^GRZM`EmKX-@oVF>!~63e&_1d)YPaz<DPb2V|78-QR`{^kQE+
z39uohLI?wFw;*$?ROa<R0-jKKdR|xyb3+<^DCatRL|`8v0sZxT-lN_Yqp;N?ft01k
zW#j;)x~qCP<ZP^<^H0|A0E4ittl#ZNBW0-FQ>D^WS^UqJ648RBkfZ)>D*`+dnpZIn
z|2I*1ktmsd3jKvr1_EBiWDZjx>k5QnzH|Iu%=(?F9Xc<$W6gStCyQK{#^rh+J08{P
z#*F=_jg>(aS-+gsF<@WV^Yiad-$I+UijdQx5KrLu5@g;@hQXA2O2q~D5WIZ*Hf7hE
zMpHEg)*WHY#nz}lXt-zmCQRWaG%R?lcg9h>HX(SAfY2hh-micAt3YDHekTmZ6JaZb
z`EzdtAYfQt=)Zp!#c^?{g>o2}f)hFl%Ca{cYP3X{JJCqedaAtkq?Ecwn-bg4fW%(I
zT;(L+l9p7xaqP?ZKeoNC<0<T2Z&Uwta1t8sxRFQGQfq~=qPkEp`z5k7y3ug^OL9nz
znb<Td_Qx_QUFcyA<pEJ@@+6gZ(Ao2(^LYGsa3>|xU7*waHn2KsXi8Q>x?4dNf-S(`
z<w!xwTKn<_KAwE@Pb(p5N*W(FW_AIKCbhG7d})ctIM~-FD!1h<V4;1vJ5EWH$fdWc
zaOqFpHxF#HDbK*EZ+hy(4yR*|#WM}fBkQy*y0+mM^1+si1U;a(2&_b@JIu7S{W4CA
z3Gux6XnD}~%wJ^N#%&8!Hl1~LowHOFV%ie{^SIGC71-`2D6qQwSM5-Gf7iVvi8$sZ
z*t2r;r+wq1uXacNJ?<A9S$AfrFz&Myt@1533>#fJjb53|6>H?pFAKJLhf8XW;J>q|
z=OXm(#{S=I_4eGX^AB)hV6Q=W!u^fa#*%SA$4T;MXVzPH4!^C@HMtSh6@7V=2!&oH
zc<j{3y?EX43(Z2(D>a$9GJ&5gk7##jF0H&eU2c5cuS}Aw$>74Iy$t17S#_!b;TiBk
z!z1t>f9A|ZF(-OIzhf2(ugbo1&XA|*C~_%L8*{!qdb|apCVK!ifo*=e;rS_YJ5;o8
zrw3+cwP{$j9d0-M3rYrh?QxEN9hSo**Ge|Oj3K2A0YynOzNcXnq_nO%?uyM9Uza}q
zC^Dl*?&-uzcB#Lb3U$*V@uDl_J~xgFagCoYawER!eI`?<#!3{IjPkMmAsNNNKyLE+
z3M5In!61YAm|0Aw6P@3?;uV88zMx+$fo^8kT6ord3#y#HzWppoj<W;7k=m=kI6jhy
zq61lAdv6}EuxbYrR`=Q|7^Z)<&)8wZ)B@JI_2%FlGMhVKEJ}1b?BVWjY2qTRj%VkT
z4_wEkA^FDYV)LPQVE+x)3IF?**$+W4!Ib7O>vv>m28C4I&#m+Tvx*}gyG{T1f#u<^
zE<6J^pTdWJ-GGdP>urteDVINb?nlR8a`JJ7+R};VZ!481X#l2+9_1@2lWiTzVzfU|
z*D4>*R(bmbq2aq;0D&dp?wi(K?2?qe$Jc^|a*1jI4)et6*^OPsZ#uRHHq*fl^(5+p
zY=t8;9K5`AJjT4t4BA~^JyD3Yo2=w2okbQT2*W;RrBKfs{VywR7K$GU8o0)Mf!~>A
zP&XOSO(6CZp<s}L$I{t7<TE!n*OqAlgG}(sv^h72J^GEuNUE+-+?2})_<ig*+IG2(
zHB!_-|8>dqC1?OGHFv-QRoBB`xqj+%<i2~gV5zJOl1ZF`2Zk*~WQrp~l9MwMO~LaX
z-@oQ6i#kd`l9I?b7|^9c>_7|iYB(_j#JrS~fxjXgyXMpOY1oIU9)eAZH<Ey|`}$ua
zS`n%6At}zraE}1bL0L}UVKBpI$bhgg|B(VIJiUN;%b*}X2!a0pZ>ZA+=>V1N9Sk^R
zxVbGX<6R+*35=k?^IOP}LEwFW@90ad&vSA2Cb9d4`!*bzZl_Do=QSaaDwqEmQq!tz
z+!Ch)d-^lv&R@d@_Rfi0J0U;i+QrEXJ~#V7Cm%^QK+qkeZnPKo5_FCF2!Mg`Fj<+8
z`^2wBsaRx6hPkpV=SD@IRlmlEzuP`f`8AU>BOa*Vp`pJ1)7c}w1R?(S4$yU>9YzKR
zSCS`Vw#*WZt~2~ncFM}I!OzFHIPh5)nN{u1UdI_~jwy)$H|>yjM%Sye<G+94ruG+n
zIb2YT0*p;eCAo=nBCmf8^`lEGmt?uxZ246hPg~e!eyF-X8BF;7>XJGPLW7JW4tf7B
z7_fRFWSjs=Ap>4oMx3WEtQzS*3sv!FLI697RU+PlYaL98&sPVM0Ve>-Q-^{OdsvkC
z)2;KOoYB9VfQnBGS|3tq3z_>=_a=^MbrYN)?noO5ue<kdOw(dQLM;FtZEdEsHfI``
z4MT}$_NK}7DG4MT$YLU=mc+MeSEs&hMNNyQQ&i$7Gx#}eL=<#F3UR+9_byp(vSQ=l
zL4QD2b^3q)0kW9xpExID(I^cv<=xJj7yk~8g#<JMj$o&iMAkfJ$N%XlSW;mQN5sTv
z<~c&_jO5i;uL_BtD@|vo7r^YyOeu%wm?Au6ebn#=YO85lmOe#7+?<|LKN4jw^glyp
zv;5aW)rI0eSjZ0g{Zqzk^O%}oq(?V-tkKCt>FW~!SXHGPs39ibnKkrthE_4>ALIJs
zA|6?6KBkAf^W@j}84o3r*)_bYbjg@?Sx#YtcfU=K+10pvp5o~UEL!4UMC-FsabLF>
z&#a^0N*~VGM>RU?>)C%1E^>fpYNGye#<H@;Tb&O&DGhG4R$a`yy1Vbdg1@xkuMM!x
zJRW?>84#f}u=2_NthhropDL{H=yXzuwXrHD|57cbTxIa%B&Fw>+s7A3OiWy}3?wh(
zCX78<DmYqLSh&4)(Vr=nj8$PseV<u^Jz&>UQw#ZO-aW~MD*>T6^e!F1m^qg1Gx>e~
z?Bdj#&BGyGI)Z+usChvJf2`{j@wHXQp{N9rCGex8oZ5++I_)yaT-xzplV~agP<J5W
zQ#tnv7kGw-2#d_FdBsEiM1iN#_vcDj#az>^<_2eI|4!Q~i~+1J^7%_x;(&<MKd$#5
zPqI6!Ouq;>Z;)jikF<fOJND1owP)mIz6-^4^R)%8BL;6ORn3lvI<X5*=-)p%uEOJ0
zb2^<OlBz0uKe)MZ-FiCU$xL<FsHVx!UFsy&r3XVWv4ckxcMOzVySOY;AOcA0uMTPv
zc=UOHE3e?~_p~+^zBHLz?vZ!HM3VNg$&%YcD>3NK>*9=N!0lS&Ge^_`GzO%9$8SnW
zBFcl#BpP^xb{e*X?_<nA2~WJFf${yMr!i>ZKuuXl{>XS|8O6Om?e?St5)?vYtU13t
zPoW(9R|FQ|nDfp>j_@uHUSOZGn5X%kB59t#z=E>C*?W<A#iFgBi@jPIK7StZ))pa@
z$3KtotA|0I5EhB9zhuUTWyke2v-AD}crLB~8W54;%?}vUOjU_RJSLPOJQ+&j!47-e
z0Ko@J!$MKTsc$&0gCOch;J1G{PV)b2Z6%u1iU?LW43Kc(`Z?QJ5fixi{C8p@Ogr}k
zq@wtGpLHuxZd0rV1su2MTD8QNgopBhh${bov>vf4grKqDb7+WI?4@lzSdDMdCXB6N
zhG>IW11{q}Ol)-piMU65vP!7mNSdnguJ{y_v;;<U3{mWD5UGw#Rvf|1c+ENKc9-WA
zM%Oyq)IU*!NM4j7vYA2f-;;3!i4ot)Kv3xHsd@wMRRW<b5`v<bC4AK+P7ur3=z3th
zU8HFI0Bl8b8k75jp<SAs`u(m^xocA8E;8fqgWy^k6gs^V#t-V3tlwLILTo@m5Nkfd
zU*m*yX~Dc8a+q*CHe1RZSd5eU2gXO>_*vet_S5%Wh*Bg9A}cXYl*jCcWA<3+oFp_q
z82uSHg$EPCj3lQ9f3v3!+FyS91L-LN+X~H5xr7Xp4n@Ynw|Ts$C0mGu>A*H)Y0ZFG
zisf-2^wbuL^DGMWsUS7d7y>GyBHLHv_X&b}j{%uM2kD>$xqhS73yA8$#4nYXkNUR{
z8*mA|Sp^R(BTc7*`3E23DgG3RqQL2u9IBX;Q459caLD8qOBKZ_gZTxZDnZfCg=-=n
zL<9?=G0WS?NQP`7fvPY`P8?G33k$Vn*u+lTDGw2mEWbe!YT^Tusu&O{>;b0%mnzEe
z$?9`Jp>uUFgpj}WBvtaV!zF@!;i%KCgp_x10hhnMqU-?Kxjb1Qu3k1SrhYUi@<f*6
zuttYeq;P7S=*#HZ(t$q^#Y)5@^@TWkKF&eg_BRK*C<I>~4Zp>#K)fX5FRPJP2gKi%
z!1j+n$iQhZhm)yZ6b~M1n~-t*tNmGau27e*2bIj1b1p=CNarI+^VY$0qz(mI?F|Dp
zCYK*c;U)@Y%?3^9U9=*X_H5jcrZHp))3OrVMyEQlaF8j3JQ1J?bMs#xzN7@6V%L{;
zlK(g<(DOfNX&Gs=@T<FI(0}?NfIATKn=n>c_DXayq)FQU?^y`wI#d7^tPfE1Km7Io
zx%^MBK`ytD{zuJ2hJr%3foxVNsDzLJ2X(sty;O6<7ZI7IcA-x~ge(yh6tY2zu?kZV
zci<Cbxc}Ef|EW5NaSQfrvpBstX}g6SUY}$;M-Eth7o`-=kDeTOs+RyZbu%QZVlq1#
zhgLp@bVvEVj`xiniWg^(j3Idgcp>Sxul{qw4JSc10`J3JvwbG&KBext?6A^{?pmJm
zJ3Y|<t4a{4V{0X;tTZIPP%|5rMpKPzNFY%YH%9H(I!RQ{e6Fz!WL#fX1Zs*?d6h=j
z6`?@xfyBw50T@`H6!=fx;b78*SFN@feVeB7`FyM9PxFLbrt4~z54wd?xcox%2H?Yz
z-gh1pIwu}H90m=@Z@Iu^T_vRJ&gV+uM0%@NO8dDRT8o1k9ix^=2|U_XB(skW0bCo&
zgIo_1qB1)`44D;m3{e>*%_9n#8}(^XnZfF!C!nr!l}jMw%C8C+3_ugPddE)&Wja{W
z25b$kW9D{-$f?o@sms(q{#)A+i9K!JMB>0XHmZctLDm~5o@J;yYv*ODB-Z*(e?Z9&
zbiqGYgx7(sh+X%S01C?fzoo;hByX9CIdKsD)iys>z=@=XNL!n4`(oi5K2-|YT>21y
zr|1s^y#Vr`)v2ItZU!+H+zv8Dr_^l>N7al+Pe_*_GLkkXxljYqbYs3x;CU*DvWJ3d
z`_B-PE>VQADjdX```;S@VSGOSZI$n9kX}-S(o~zr_^~eQ)ympdT`BF-jM)h!f9L*X
zKzI)dY7N5hKl?fzaDe?+EyCyfzmL3f+cg<)mQcyUNk4zY=3nVTLG_WWq5Alhovd`F
zOcPc@D%I;|Hd_xJvl09jme4O6qMq_86;gA<*a@|w#G865AEFYEQIosNM)_C`yk9~v
z*jdIPywyQ6dn>=!=hA=gyskMwQ%3*m3bplqd;*}CR2XAsWZj{lT^W(AGO;(7dELhE
zntir*1L^Y7i@0X!WFm~6G9)`&<5zvKziR@*>2T={@;Lg5^1Gp^NzD5$m3V@i?Lqgn
z-@l*AQ7n+>K9qh`{iCs?SAYc;Y@neq5#?w^MRoPB#)~OmLi=eN&>cfTTS9N$8LMgU
zh!geJ4{1I1YYA?a90-@a-h9=-gkxzvCLKU7_h^54e%fDFMWzVwcZzc`E384rod(_M
zjl<b=PsCt7GOLk8;kP{6vVFEH2xCSd0}h?!p^vETT>@P4AL_|8XnspVSRa9e8A{M%
zFrzO)9c>-+zprs!q0Pp0rVA0Ff3po1YXuyf;wR%bM6I188!4!xy6fRhsok}42ycFZ
zVncRphPlik_QsS1=p9p6SB`A4oCS?$bk>OBKp4NB8!3qQXKzACqWW%|$o3z#y?=9h
zzf@Cu)tw6<gZ~<^Zq{bPZCtKiJo&I`+ODB+<+nOJIcempTi!O?Tim6ArdewHO~}Ja
zYxY({vzWGAJdZRusAdLoE9;mKGXMyTB-7zgxz=rP(BzJ&AzcQ{)RbSHsB!A34^&}e
zVn9Rsj3M*Zr5F=8^ZzmkFMy9UCA3n_SBAI|B$KG9F(WmZ2K?z65?4N8DWKDW|9SWg
z_M>=bWqE^0R-2uU@yxV(az$h%B{Y`me9mi{zgpL!!_Gvl?wj=}Q7Y?Qr0lF~Y|CW;
zarCsP+QDkL*%Ew2{AUL0Sr2pCx;prfNFg=7zObI#I3KzOl(e5b4OWZnnVXy6F}tJ}
zbR;kl|AU)NSi2Bg`~ahceMnnWQx<*I#n4fmAytK*3r{c^szH0+y6Ysk<ATr&29j&3
z`aS>(UGj*Pgs!uDju#skF=t$`3k~V=_F89hs*E`L@i@XRUi`S_enQIUwGp&wWx5-s
zb^R@Lx?2G)zp<-fHQ>zLUjW<eCz^h-d?Kw1ng|q>m}vPdL9ArX(g58@FP&G|_VlP^
z%Sj}7^b3}viJ5w3$b%_0))fmdAK<cauNXTl8QySXkQVzUp~chl`SCdA=nO`ZXgmc+
z+TSVD2i6rcw})ieJHeWy=vw*VgTe-F#Ahz;YN*vUO~L!Ntv~}u<|4B=B5AqfBj#zc
z^Cjq<hg|Bl?{9^mDMWtonK!m~b`sHo3->N46+AN6lw1@jG#j~vgdmu;o>VogX3n*D
z8}Sn%6_pvyAJ!Q<DM8E{V8ptoh^rkF$<z>^Ew6ED(3ea_K5lhknAqotbukVCy;mG-
zzd+-uwQVUswT%10v+m8gEY|xaQiB43tOo!P9O`)>07EQVmz9jiOiIeml#R;@4Qa>o
z52Jhf2x^4V);O%5!a`MS)yh|Z$Yg%0xHU7!h|!ENRdd3v(5hiZ?^_9_fN+`|uiM?8
z#czh!E{w&7j(dZ<jfpuZLufE$_1@4@uAT04=gk#W7dLZ?(lB7Mq6#^31-4+z9Tix~
z2$kF8U%kN3>%jx8j4>x4#Ru#9uZIzZvxaDn2TJio4qf7?(0I^fPmc$M(Q>rqSP>+0
zn*LHv7xglm-_{pAYT8?wrPrJ!s?4`b>RaPw=qVLaimy19rXKJ*AWfI3{LJoVqbAVe
zTF~w)ARB4Xf3|6VB<IVdUrX=(iZD!M0-8eqtzV>ezG#y1-1VowlabZQIE*J3R|dwr
zl&zB~yl$&;x^>`>?kieO54PMB0b7H74q^cZs}mG;Rd(~NO8a_+k<g!xPzkn8$773j
ze2-gIqbg?7!H4}Rj#pIbcZbv7+MJB8xXJTwHF6hO^2xbH(#f*YeJOht_CqRsb8|z!
zYMW*{;G-#3xhHlBDAX;pyQQn0a|deU;l4<$U&g(8`vrq}zQ%;_0{8AxYrOVLy}{Lf
zF4)=NvDrl%O@-z>qLRuX@*=yF<sL2p>*1@hgGcYHhcClZL-3?o<@!&459zcDd&wo*
z65?XvExBA>U=32k02L?(maHEDXfpcBwu<b_Io=z&#zkf(I_dPE5iH7)SBy)Js7UjQ
zB;A&ez4u{n+@K-h5RxBc*dgijJA?ke{DCT!b=7V}cAeJVe@E-Uvp%QBn{$a<;le_i
z4&PiRIE0i`a*o=B?UYa~87wlKRE}rV7NcpVo;HiC1tio)#BS7-?52I6gO4Vbw*>e$
z-)kOrdY^yZr$j`^#~z9<794HpFg{y`wHIj$GpIk35<>d-JykWl0jo$tbiS6FnrWS<
zezty%5TRGyuFuYtY$nze&IGA<Xn^e`n_|^f(dQ1)%R$U(k{bLv%<qF|)T>n;`5%-0
zKhZ8Yq$q$dliCO&?=RPW-})99L={Po2{@f((nkaOwzUhs8%rG^+WiP4ENQnD<w>oi
z=&9lOaFNVFov1P&g@<=7JoWS}^qG&}P1`^fN^O5jF>-INpB#(3u|6x^d{PWI7-d!c
zFiq3`<OhI~R`H6t$8+cDY3n3T#HNs#z#}(ar4KVVXv$SrCB)T^;&)^Ko>Qip8avq+
z4(M412gR<}K~S|h2U#>zFgf(*H$54%1D{d9NpOXVRwsW#X;W)I!#<La=1jEaa9`UV
zzFvHIAg*YArK`@YX0<<QS`Lm0nwa^Crkh>G&g*mc^bi{x%cY={FYNo&aFj~iP|NrN
zuH|*??Dj7x*K_c;6lSu6w8ex3k6ii#_VuHC;xk0_!8c%;X@R?C)XqO6OgWGqtEU|P
zqlzV4UcPq7HrX9qsW1+$_wJwYx+0{@BNQjGcJ!3E(TsAYf8!k1&o^f=^YH&>6p3A_
zlVA4mS^X0Xj{*lH97PrZ1CRQ8)sI)@-s7#R-%I3fx~5eoqnhM#z#8}P-bqpN4v~V8
zPE6Z#+OY|?%~Yo*tZt1Ad~PADspKV=rw4~)u|po8N@dq_D*FQDQr%veHzFicI^$-C
zw5;rjM=tg7=9$fH*i_Y7XjZhd<Y|)SX?7NLl<Ah@Y&zHDc>Nx?!m;m$=PFh6b9uYN
zN7kK0KYFBGkmQWM;XsUfI*P7peWzjUhgM9-$EZUJ%t7n?&!d!tg<ns@uuBVqCZ~>o
z37I#I9kBC-WjPJFcH&yC9i)BjYToi&$lKjhcHHpE>PX|~-;?t6P?yZrfy?xb5)u;S
zkeT;;<?|D8UTMO)Dc7=%3HgM^2<a)=gsu-L*LOnbA(&v69R`Gp0Q-KkoJad0bNn6A
zz9p!7X9rfZP|l}b&ZvdtAmxYf@|tUd*D&P)cH~U0;>v2;+F2@<YwgYlkoo20;IMDs
zOM`e-rE58$pd5ei>dvRlr<V>@9<&&EoQp88NfJoB@0I14C9BO7FO+^*ep|GQJf-?Q
z1tFr<_pbRxr(M@=4@aZTfnDoJ&$VL~H1Rab=X+Y@tgM@Vav`FThbQC7p+@nlVPP!k
z<xev#)&C({j!PzYLZ-lcUs#E+h^uP4#aB0IA-9JqYJoTxXj?4gx@gGeK~($I<K=L=
z7~<sW=zs`hXtHmQM`OCxm3&uAUCNsVZ1%NggPLmsa?#v4w6Zh(i}9*mPEe-YWnWl<
z<Kw|;zL#;OQ)@Qe&#B2Zt>;Ip8=$MDr)e80N&G=cM%p?+-bsVf(7mf;$rIfh?csJ<
zpbT)?{drDp&fzhv`)l8;%<%&ltqD7G9)sqOwOKDVC$iY;QH{Nuf1>o<(ozH#dNV#$
zQa1L}_sKO?BuTqk&_HCT1+tet*e}P)sSKa}mholP8@a^?v|B#gfUe-Lv)X>(5<Rs^
zhJc|D@HF))du_dulE@fdazO;n`&W%2(L843P)fiNYFU<`H#V$1Ld)uf%+y|OT*!x`
z_~+#lmQ~m2q&$shf>(HYIHRjkP1I`_TU(mWmm9+i394&N2I7W?hZAK>5JQVvT5!L8
z5|P+4hJiw7&8TjYmsgxfG!P;GoLJ-o2^`&L9QIR3<?H_?B)T9zJ7q7Jwo<WO*>0U=
zcT1SJOb~2{ik;)NXO0of_{PIRyBDFvty2%Gyd($;%QiP@pd{dBSQ@*X#{`?+C7VcA
zPl+%fJENziP`q1MO@JKoPOfHgY{g=<K?{~D+B&PaEZR$RbK>YB!=^KL_btuM5UVMB
zJTE=HT&3z#()RDd{CwaWBGm9;;mz|lvS*t1>+AN~v0KaNgLt%=6E0e>NFZCptS3<H
zliZQ>-qQ;y-5w*=+MY?jCQEDny$KCRh>0W$ZzUXi)Uf!w>_vA6ii>(Qh%b0VE&4CZ
z@U7res|{jpc0mi<(2JSb(!0KHLA}YKVKSGHkRC;%C0Ev*nw^{C{ZdeUKedE0!u-O<
z#?Q@PHCsM9Haaqn2z-!z_vG;gW#hhYLwysaDYD|+DbV#mkc%ivgoL@OJr0OYmsj+^
zjIt#$sW#qElNRB(_WJPd{Tr!5iuC?%f1XWK_be{niy`A#Ba%ID<oW&w<#+*6c}OET
zNkGf`xI2H3*oMQ`OJ#A&4tPO`@B1@{^6dQF93KvX5obWkqt3~>9O0^`r?(^xs;U~9
zoE)^uD!UT?KgC^VS5sZL4Im(05KwxTCcQ~l1bH3{NDG7zL5j4{L5fuA1Pv(If+8S-
zgqC0+G(!(fq!>D(3DP@+?mc+#xIf{2Kdn!D>^a6+d(D0JDswm_Uur3E*F6j5LK`hk
z(<L*6L%8>ieJkX(IiiJ@+Rb!n6VJoCAI5B8YaC9)DOIBEp4S!lvw1_LB}(pccKrI;
z;2?bx`gR7Xz4PM~Xt$Z;^)D}1{_1%`pV-2o{ORge`*g47GFfGwCr_fH%}@r-ZxP_U
zKUaUUvv{3~fs@h5$47x1hOrs%?^ljI4k^Z6c`1E+2++UIaa+Xc9nKy6zErU-{9&9t
zf7-Wf9JtLmx6Sw-kwtm4B8}as?T!8joYIjIh@N^;YkIftv#hsH;?~@E2w&6)b+zlK
z)v-ef4u`avD5t!3vHsuqs0Wh|kDB+$oIJ@mNJAMA1pBuO1a{Yjyn)f)n%kY^K?RdV
z7Y@Im0+#gL)^$~pr^RdKoCOF1!Qt?<E(RK)f5+&A(#_tk)cfzkjHF~!*Amo+FnbEl
zH<yEkS$KI(kRy)9t1fYI^+?M$^KBZhjbSj$7H`CUf6z>6^VU|^dd7X26Y7!P#qxbe
z8$1$Yc&?w6)9GrqXfd8RY|{EpMl?BbUfMzo@wHQ%E;i<269ff_O74HE!660m#QhCR
zZY04DVm?*xe4rD%)cEK@%oYZ%(+qdGcY@7@{VyVqaZz@5q=F@3>)vDzUDqhGX1(5A
zO>YddmVFh;QZIf{v&1S?P-b7#Kh-Sk=p%cVVx<M<^DF1J_R-1_IOp6^@XG3{+S|Kf
z^@3<=G7I6osyheZy$&{gxm6Kk4*rHoPIv;TB!R-JK20#VB&SIQVTm(0(9to)9VAWL
z>%Yk!&$alseQscGVB5Rz`M84CA5&+^%b_1a2NNa7DuOL{1?wI1c~nJEwgEVqM~|2A
zezU2!W;<T?NGJzt3A{3eXM(M)rmK|SuDrM--_hRQ4v11pNnJSfrv?dw#+FmZJdfyR
zN=ChU6z8u8f*>qCTka_bvo0tkZ}5=KgUKNZohRmWp0zqqJalh;;!oA86Ib&NAkH$w
zyj01v)t_Zk8&_cR-qze4`-I{Rf8&80Jw86p%HlV<9skWA;QwaUG*VixOnYWPMsN?9
zzql$qs%O;6fi*WM<Vg*q3!+y-><i##>D{K!F2oyP+GBc$0O?2vyjWfFBUjg2LS~oC
zbAmr|l^2(Aw2Xm?Cch7oVrSQv$(VT^{hA5bAjuWD!P0J*ZIiG0JIhCg`ef@=a}wg@
z0pg5KOXX?&U3{V>W|{6vjZZ4$5e61qzyHeamA+bbw#Z2ZlX15^uLw}>AOlbt2*kl$
zVu0Poct-jKJ&Ze;;;+;T%)HBtkl$pWTBZS(ic9UT0!_X?<6u%Xx{^NK@$qflMH}9y
zPc(twZEkD-d*$irJ1c#iw6kBUdfI_vJ=w-hK+6``Q@I@d`H6K2E4wrDt>&P!fq2KR
zai^53tZBmKTe1@K-0rzm@3b1I&NNcb)P~RAiq15S|LV&B=j^j<86+>X8oG)BmedG`
z85NI?X1}Y*QP(P%no>C`%;W|ou)s;Fx73Oz6caBuj5NfV;T4fP+xHSJIf+!Ur7V>E
z<M}C4cQq_7COqWC+~7hYmX`>JSv|m<me3>idoE2v=iHc@%`3vU5jm4)`wiE*BKxj9
zQuvck8~w25Z?Yd7`2B*1%R)v;*+aYs;al!FGUMErS)C}0O0LnbZc_F+%wDJcR&}Ea
z8Wqsv_t9SZ)joBl9QOB*Nhul%>x6S%8kZyy>}lt*wpD(mxAGoODLRc%mLeTphy6!?
zzxdLKgn0k3zF9^GwYQ5M)bF0?GGbesTl1(oJ_;b$c=RN&pzZiZQ2u`lI;wT;*q+j`
zMLy4kUk=Y08}ggvBfxMm6B$>7)j=CnXtg`)a*%_i0z1;Ca@qJjS>w?>nS-xHokmh*
zSEqHhpQ`v8?plZd(UOwgi0L5ed87D^cCEzgOb^ftq^(o+CO`ycOfLf%5bzOgV|8b!
zL{<RLUHIo+s9>erz-Oc9kAJx2bL#F7h6Tr)IM3LFt4hA@%(@r{)n66LfzEr6?-xkk
z)(@<M-YDK*n4`r=x1r}&0y391y_bt-I)hS|l{}4hTTa7>dS!C<I-D0Vl{LBD+vl?g
z%Szr%GV26sO38>0rtKi`sQWd7GFYq-ptFIUYx*ob3l^;!3+XjG;qvl5(D*r3hUcko
zjSgi3(Ok0(Vz>R(Z*?{L`R!_s%!9Id8mkU;?m;F?cuGX3njr34hE~t}R5^=9-ntG?
zA-I@UZPT?oKZDaZ9`0*n24$XzmhBOvj_zZJ^U=jc@(|UH2pv?55z3bx0sFy6;wt>w
zB3G6B!aSTd?zHtlc+Dkf?6=S4=I}}UIEq$d-0#<p`;ATvFvuc;25G(`(5N@8=^!L2
zdnZeyuh)un3GVV>DC&>@?so|DZ*X?-$K@Q(*KWSky2vg0C^g2PcR>y1EnkY(L>tX(
zr{6}Cg{`f&O5JX_H2cWyQNEz_7ks32_8uZ0tj&LC&iRMDY8t(lv(Ol1C!|@aM{gN4
z^`crMIcvTQ?Tp)Pz1<i&=ynkp`1>92H$eVoR08(&{<1$YdU>SijRb1A=TD4@<!flm
z!G-n-!|6g9eKvRRQwTis745`i-Z8@Iu?Us0S;JPp!VNgv7qn1F>-?Mu8)gG8MV*C)
zi!$0EZho01k&k?B_qc8QCK>oW(hcH0kL-}bu^LBi9DXq#gLx^8aWX{{#lb`_srgmn
z#WehDEBME6C*y5e#x>rv0X~yTtPysHB4d)p1FK6_j!raV2li%bcm;^WP9ROWMxTmo
z6UIsa`I3g!GRyzh9Iq@TmAJZuJbl73*?vU5zKA{savix*%%+4}er>N43%O0N2BgqH
zEp+|QSLb@cta^BpS{pquNYf)IV`+}fiUNHlC5&mX`rU<;UlXTSS!<#~tF2Y$`oyuP
zBas!KKKt7*)&$8?SeR)89>jcFP(+wQB90yreZ^U{2Oc$c3BA(OBW=D4!hQ>n`gakk
zp-q%^pVy+*xW#;aSu}A~D+J&x2v(t3&>@RYo1?c;<)Y97)v0)gBlq!$nh&%<^@?Vq
z$`p3@bs-)b=(3>_mMH`RY0#nU@uiu5ZI?9S3JIgv4zDAs!>Y!+;+XCF4po}k6e|_|
z<S1r{SkfkTw@bEqpiFuK>z+QOr{=vKvH?+-W6WPm96n`UAvjCOw>Kl|G-}n7_iyKH
zHA*}bs5*geh;>}ouSKJ@L{L|#^%EFi2{{-q-266Q;Pdp`L43c-Kx-f7J8yIex?F0o
z;SGQYr26YhpXTh9X;g2^ODphQg@~E*yy2D<WFUr@k)J=DDWWEh-W14qUFT4=L$#dC
z_)7&zXDtMO$$^34j8M)*?ElZ+>IM#p$M@cX)}LNkd^?x3l#l~nI*x>LCg%j5er+rc
zGcjw+EW&pls5(iGbyZ`l?^`Ha)N87Xd-1QOfeTe^GOifw$xb#qY{?FR2uG!j%7?uD
zF()$2VD0V66<Hl>?<T8^zgStfr|`6?WRu4+CgL1A8MXqDZ$gr1NnXx($z-XknXb${
z!ZIy3V2D-y^c>$>$kBErY@#x3t?e0lg63!WUU2{}v2m{eDh!rS`u>y1CKMT7WIG@<
zlrY98nUzR!EfBP^6LqFr^thLAVO5`ZGo-c5_p>Km;)nB0Lyip}*d^(VJOXL6e7Op<
z8)<zJH!vbELbO33L$<PB8=4s3!{#4&kCmxmwMdoCP(k$sW=77A&R|)p^fCkCO6<~o
z676$Z23SqXbDhmid>-8Jozo9+c^9W+#Y=?s09w0dWww?+E@-N}MouViQlOdsZuaR4
zhJ3@qdRd)(Vz_8LJ{@vYNvitD_P(0MD+P@zWi76p(Z8K4*~-SssLRgXqo!OhY61`O
zySK>gdihx<l+Hz8$~NAb>d@)F4qp8D4C_XWXR-w4w>N;8Eg%BCqPz#yfpQ?vF!SuY
z`7*z4NG}e@aa=f%5qAXiVXTY<Yet1~K9_&mX?NcnB3F)9Uz`3(MB;@eqb{S1x;i5s
z?`xeK@}i2|OM^CT%!_Kk1imIfruI3Gd+jInU`^y=GP@+TVdO><csfRw4k-GZT?K&@
zo$cN?czZ00)ph444&|w}&T*0N(1a07H&Go8N^45a>Ts6J9i6qA(e2hb>~|ooMJZWb
z2jpXJ{{hksz{Q?0&2-;`KR4mq;VD2<S(5k$_ehHmZU%cM3^JtJ)hvB3y7`Rb;uX6H
z^rHRHr0h&f^TjUwlQCmh01}LG4EVUt{isd=1j;?HFzxcxrKvS-<k;P%;UDlfTZW`?
zE^4I=t3hzk9?`M!ctSO*CZ+eQ-?&fG?sof>DgP#XjrC(u{9IQWlFBTevfdvNlK4mE
zux*ohe`d<p_(Puvbz50dQZD_FX45|*w2cn2v_1?v!!Zaj#wR-}R_pIqFl1Oy(!lY7
z%jJc#n=jE5OCi7XU&eIP5z`=8abH!wA7E-x`}kWc&Lk4e3aBev2qste2j?QBEjn1J
zpbHC2Bo@Ghx5ZA1Iz0+K+g~hi5Z4yiqAS8sp8Fj0+&k0vhu9vi7g<ku+t_bP923iY
znRM9&;S{!S$+}`DKQl6Fv>bJ6o_Nw5qYEMH1kf~bj0z+Syxs3vnPeB`$qqX$lp3$_
z{&|aM-Dbae<^KU0HkB~c0imVZ&v;hS;~5BFV*kt~kTy)Vu8;bH50JZyj*`k@QZ%$d
zQIsYW2Q7aoI%YSrrH-RAp>H+<(}Q@*n6_<zxY5AI;QBWOfBl%+lltsd3-XCBKFi7f
b_v~?$3hAzjgNEzi8H|68Obkm69G?CUJU>%q

literal 0
HcmV?d00001

diff --git a/samples/web-app-mysql-flexible-server/dotnet/scripts/00-variables.sh b/samples/web-app-mysql-flexible-server/dotnet/scripts/00-variables.sh
new file mode 100755
index 0000000..6ba4c8a
--- /dev/null
+++ b/samples/web-app-mysql-flexible-server/dotnet/scripts/00-variables.sh
@@ -0,0 +1,48 @@
+# Variables
+
+# Azure Resources
+PREFIX='local'
+SUFFIX='test'
+LOCATION='italynorth'
+RESOURCE_GROUP_NAME="${PREFIX}-rg"
+ACR_NAME="${PREFIX,,}acr${SUFFIX,,}"
+ACR_SKU='Standard'
+SUBSCRIPTION_NAME=$(az account show --query name --output tsv)
+SUBSCRIPTION_ID=$(az account show --query id --output tsv)
+TENANT_ID=$(az account show --query tenantId --output tsv)
+CURRENT_DIR="$(cd "$(dirname "$0")" && pwd)"
+
+# Azure Database for MySQL flexible server
+MYSQL_SERVER_NAME="${PREFIX}-mysqlflex-${SUFFIX}"
+MYSQL_VERSION='8.0.21'
+MYSQL_SKU_TIER='Burstable'
+MYSQL_SKU_NAME='Standard_B1ms'
+MYSQL_STORAGE_SIZE_GB=32
+MYSQL_BACKUP_RETENTION_DAYS=7
+MYSQL_PORT='3306'
+FIREWALL_RULE_NAME='AllowAllIPs'
+MYSQL_ADMIN_USER='myadmin'
+MYSQL_ADMIN_PASSWORD='P@ssw0rd1234!'
+MYSQL_USER_NAME='testuser'
+MYSQL_USER_PASSWORD='TestP@ssw0rd123'
+MYSQL_DATABASE_NAME='plannerdb'
+# Azure MySQL Flexible Server (and the LocalStack emulator) default require_secure_transport=ON,
+# so the app must connect over TLS. The app enables TLS without certificate verification when
+# MYSQL_SSL is truthy, which works against both LocalStack (self-signed cert) and real Azure.
+MYSQL_SSL='true'
+
+# Application config — must match the seed-row `username` in 01-deploy-resources.sh.
+LOGIN_NAME='paolo'
+
+# Docker Image
+IMAGE_NAME="vacation-planner-mysql-dotnet"
+IMAGE_PULL_POLICY="Always"
+IMAGE_TAG="v1"
+PORT="8080"
+
+# Kubernetes
+NAMESPACE="vacation-planner-mysql"
+DEPLOYMENT_NAME="vacation-planner-mysql"
+SERVICE_NAME="vacation-planner-mysql"
+CONFIGMAP_NAME="vacation-planner-mysql-config"
+K8S_SECRET_NAME="vacation-planner-mysql-secrets"
diff --git a/samples/web-app-mysql-flexible-server/dotnet/scripts/01-deploy-resources.sh b/samples/web-app-mysql-flexible-server/dotnet/scripts/01-deploy-resources.sh
new file mode 100755
index 0000000..ca56172
--- /dev/null
+++ b/samples/web-app-mysql-flexible-server/dotnet/scripts/01-deploy-resources.sh
@@ -0,0 +1,273 @@
+#!/bin/bash
+
+# Variables
+source ./00-variables.sh
+
+# Change the current directory to the script's directory
+cd "$CURRENT_DIR" || exit
+
+# Create a resource group
+echo "Checking if resource group [$RESOURCE_GROUP_NAME] exists in the subscription [$SUBSCRIPTION_NAME]..."
+az group show --name $RESOURCE_GROUP_NAME &>/dev/null
+
+if [[ $? != 0 ]]; then
+	echo "Creating resource group [$RESOURCE_GROUP_NAME]..."
+	az group create \
+		--name $RESOURCE_GROUP_NAME \
+		--location "$LOCATION" \
+		--only-show-errors 1>/dev/null
+
+	if [[ $? == 0 ]]; then
+		echo "Resource group [$RESOURCE_GROUP_NAME] created."
+	else
+		echo "Failed to create resource group [$RESOURCE_GROUP_NAME]."
+		exit 1
+	fi
+else
+	echo "Resource group [$RESOURCE_GROUP_NAME] already exists."
+fi
+
+# Create the Azure Container Registry
+echo "Checking if [$ACR_NAME] Azure Container Registry exists..."
+az acr show \
+	--name "$ACR_NAME" \
+	--resource-group "$RESOURCE_GROUP_NAME" \
+	--only-show-errors &>/dev/null
+
+if [[ $? != 0 ]]; then
+	echo "Creating Azure Container Registry [$ACR_NAME]..."
+	az acr create \
+		--name "$ACR_NAME" \
+		--resource-group "$RESOURCE_GROUP_NAME" \
+		--location "$LOCATION" \
+		--sku "$ACR_SKU" \
+		--admin-enabled "true" \
+		--only-show-errors 1>/dev/null
+
+	if [ $? -eq 0 ]; then
+		echo "Azure Container Registry [$ACR_NAME] created."
+	else
+		echo "Failed to create Azure Container Registry [$ACR_NAME]."
+		exit 1
+	fi
+else
+	echo "[$ACR_NAME] Azure Container Registry already exists."
+fi
+
+# Create the Azure Database for MySQL flexible server
+echo "Checking if MySQL flexible server [$MYSQL_SERVER_NAME] exists..."
+az mysql flexible-server show \
+	--name "$MYSQL_SERVER_NAME" \
+	--resource-group "$RESOURCE_GROUP_NAME" \
+	--only-show-errors &>/dev/null
+
+if [[ $? != 0 ]]; then
+	echo "Creating MySQL flexible server [$MYSQL_SERVER_NAME]..."
+	az mysql flexible-server create \
+		--name "$MYSQL_SERVER_NAME" \
+		--resource-group "$RESOURCE_GROUP_NAME" \
+		--location "$LOCATION" \
+		--tier "$MYSQL_SKU_TIER" \
+		--sku-name "$MYSQL_SKU_NAME" \
+		--version "$MYSQL_VERSION" \
+		--storage-size "$MYSQL_STORAGE_SIZE_GB" \
+		--backup-retention "$MYSQL_BACKUP_RETENTION_DAYS" \
+		--geo-redundant-backup Disabled \
+		--admin-user "$MYSQL_ADMIN_USER" \
+		--admin-password "$MYSQL_ADMIN_PASSWORD" \
+		--public-access Enabled \
+		--high-availability Disabled \
+		--yes \
+		--only-show-errors 1>/dev/null
+
+	if [ $? -eq 0 ]; then
+		echo "MySQL flexible server [$MYSQL_SERVER_NAME] created."
+	else
+		echo "Failed to create MySQL flexible server [$MYSQL_SERVER_NAME]."
+		exit 1
+	fi
+else
+	echo "MySQL flexible server [$MYSQL_SERVER_NAME] already exists."
+fi
+
+# Add a permissive firewall rule (dev/test only)
+echo "Ensuring firewall rule [$FIREWALL_RULE_NAME] exists on MySQL flexible server [$MYSQL_SERVER_NAME]..."
+az mysql flexible-server firewall-rule create \
+	--resource-group "$RESOURCE_GROUP_NAME" \
+	--name "$MYSQL_SERVER_NAME" \
+	--rule-name "$FIREWALL_RULE_NAME" \
+	--start-ip-address 0.0.0.0 \
+	--end-ip-address 255.255.255.255 \
+	--only-show-errors 1>/dev/null
+
+# Create the MySQL database
+echo "Checking if MySQL database [$MYSQL_DATABASE_NAME] exists..."
+az mysql flexible-server db show \
+	--database-name "$MYSQL_DATABASE_NAME" \
+	--server-name "$MYSQL_SERVER_NAME" \
+	--resource-group "$RESOURCE_GROUP_NAME" \
+	--only-show-errors &>/dev/null
+
+if [[ $? != 0 ]]; then
+	echo "Creating MySQL database [$MYSQL_DATABASE_NAME]..."
+	az mysql flexible-server db create \
+		--database-name "$MYSQL_DATABASE_NAME" \
+		--server-name "$MYSQL_SERVER_NAME" \
+		--resource-group "$RESOURCE_GROUP_NAME" \
+		--charset utf8mb4 \
+		--collation utf8mb4_unicode_ci \
+		--only-show-errors 1>/dev/null
+
+	if [ $? -eq 0 ]; then
+		echo "MySQL database [$MYSQL_DATABASE_NAME] created."
+	else
+		echo "Failed to create MySQL database [$MYSQL_DATABASE_NAME]."
+		exit 1
+	fi
+else
+	echo "MySQL database [$MYSQL_DATABASE_NAME] already exists."
+fi
+
+# Retrieve MySQL server FQDN
+MYSQL_FQDN_FULL=$(az mysql flexible-server show \
+	--name "$MYSQL_SERVER_NAME" \
+	--resource-group "$RESOURCE_GROUP_NAME" \
+	--query "fullyQualifiedDomainName" \
+	--output tsv)
+
+if [ -z "$MYSQL_FQDN_FULL" ]; then
+	echo "Failed to retrieve MySQL server FQDN."
+	exit 1
+fi
+
+# Split host:port — the LocalStack emulator embeds the dynamically allocated TCP-proxy port
+# directly in fullyQualifiedDomainName, mirroring the storage / container registry emulators.
+# Real Azure returns just the bare host so MYSQL_PORT stays at the value from 00-variables.sh (3306).
+MYSQL_FQDN="${MYSQL_FQDN_FULL%%:*}"
+if [[ "$MYSQL_FQDN_FULL" == *:* ]]; then
+	MYSQL_PORT="${MYSQL_FQDN_FULL##*:}"
+fi
+echo "MySQL host = $MYSQL_FQDN, port = $MYSQL_PORT"
+
+# The mysql client must be available on the host machine for the bootstrap below.
+if ! command -v mysql &>/dev/null; then
+	echo "mysql is not installed on the host. Install the MySQL client (mysql-client) and re-run." >&2
+	exit 1
+fi
+
+# Wait for the MySQL flexible server to accept connections.
+# --ssl-mode=REQUIRED: Azure (and the LocalStack emulator) enforce require_secure_transport=ON,
+# so every connection must negotiate TLS.
+echo "Waiting for the [$MYSQL_SERVER_NAME] MySQL flexible server to accept connections..."
+MYSQL_READY=0
+for attempt in $(seq 1 30); do
+	if MYSQL_PWD="$MYSQL_ADMIN_PASSWORD" mysql \
+		--host="$MYSQL_FQDN" \
+		--port="$MYSQL_PORT" \
+		--user="$MYSQL_ADMIN_USER" \
+		--protocol=TCP \
+		--ssl-mode=REQUIRED \
+		--connect-timeout=5 \
+		-e "SELECT 1;" &>/dev/null; then
+		MYSQL_READY=1
+		echo "MySQL flexible server is accepting connections (attempt $attempt/30)"
+		break
+	fi
+	echo "MySQL flexible server not ready yet (attempt $attempt/30)..."
+	sleep 2
+done
+
+if [ "$MYSQL_READY" -ne 1 ]; then
+	echo "MySQL flexible server did not become reachable after 30 attempts. Exiting."
+	exit 1
+fi
+
+# Create the application user [$MYSQL_USER_NAME] and grant it access to the database
+echo "Creating login [$MYSQL_USER_NAME] on the [$MYSQL_SERVER_NAME] MySQL flexible server..."
+MYSQL_PWD="$MYSQL_ADMIN_PASSWORD" mysql \
+	--host="$MYSQL_FQDN" \
+	--port="$MYSQL_PORT" \
+	--user="$MYSQL_ADMIN_USER" \
+	--protocol=TCP \
+	--ssl-mode=REQUIRED \
+	-e "CREATE USER IF NOT EXISTS '$MYSQL_USER_NAME'@'%' IDENTIFIED BY '$MYSQL_USER_PASSWORD';
+		GRANT ALL PRIVILEGES ON \`$MYSQL_DATABASE_NAME\`.* TO '$MYSQL_USER_NAME'@'%';
+		FLUSH PRIVILEGES;"
+
+if [ $? -eq 0 ]; then
+	echo "Login [$MYSQL_USER_NAME] created successfully"
+else
+	echo "Failed to create login [$MYSQL_USER_NAME]"
+	exit 1
+fi
+
+# Create [activities] table
+echo "Creating [activities] table in the [$MYSQL_DATABASE_NAME] database..."
+MYSQL_PWD="$MYSQL_USER_PASSWORD" mysql \
+	--host="$MYSQL_FQDN" \
+	--port="$MYSQL_PORT" \
+	--user="$MYSQL_USER_NAME" \
+	--protocol=TCP \
+	--ssl-mode=REQUIRED \
+	--database="$MYSQL_DATABASE_NAME" \
+	-e "CREATE TABLE IF NOT EXISTS activities (
+			id           VARCHAR(32)  NOT NULL,
+			username     VARCHAR(255) NOT NULL,
+			activity     TEXT         NOT NULL,
+			created_at   TIMESTAMP    NOT NULL DEFAULT CURRENT_TIMESTAMP,
+			PRIMARY KEY (id),
+			INDEX idx_activities_username (username),
+			INDEX idx_activities_created_at (created_at DESC)
+		);"
+
+if [ $? -eq 0 ]; then
+	echo "[activities] table created successfully"
+else
+	echo "Failed to create [activities] table"
+	exit 1
+fi
+
+# Insert sample data
+echo "Inserting sample data into [activities] table..."
+MYSQL_PWD="$MYSQL_USER_PASSWORD" mysql \
+	--host="$MYSQL_FQDN" \
+	--port="$MYSQL_PORT" \
+	--user="$MYSQL_USER_NAME" \
+	--protocol=TCP \
+	--ssl-mode=REQUIRED \
+	--database="$MYSQL_DATABASE_NAME" \
+	-e "INSERT IGNORE INTO activities (id, username, activity) VALUES
+			(MD5('paolo_pisa_seed'), 'paolo', 'Visit the Leaning Tower in Pisa'),
+			(MD5('paolo_volterra_seed'), 'paolo', 'Explore Etruscan walls in Volterra'),
+			(MD5('paolo_san_gimignano_seed'), 'paolo', 'Climb Torre Grossa in San Gimignano'),
+			(MD5('paolo_siena_seed'), 'paolo', 'Walk across Piazza del Campo in Siena'),
+			(MD5('paolo_montalcino_seed'), 'paolo', 'Taste Brunello wine in Montalcino'),
+			(MD5('paolo_pienza_seed'), 'paolo', 'Sample Pecorino cheese in Pienza'),
+			(MD5('paolo_florence_seed'), 'paolo', 'Admire Michelangelo''s David in Florence'),
+			(MD5('paolo_viareggio_beach_seed'), 'paolo', 'Relax by the beach in Viareggio'),
+			(MD5('paolo_viareggio_promenade_seed'), 'paolo', 'Stroll along the Viareggio promenade');"
+
+if [ $? -eq 0 ]; then
+	echo "Test data inserted successfully into [activities] table"
+else
+	echo "Failed to insert test data into [activities] table"
+	exit 1
+fi
+
+# Query data
+echo "Querying test data from [activities] table..."
+MYSQL_PWD="$MYSQL_USER_PASSWORD" mysql \
+	--host="$MYSQL_FQDN" \
+	--port="$MYSQL_PORT" \
+	--user="$MYSQL_USER_NAME" \
+	--protocol=TCP \
+	--ssl-mode=REQUIRED \
+	--database="$MYSQL_DATABASE_NAME" \
+	-e "SELECT id, username, activity, created_at FROM activities;"
+
+if [ $? -eq 0 ]; then
+	echo "Test data queried successfully from [activities] table"
+else
+	echo "Failed to query test data from [activities] table"
+	exit 1
+fi
diff --git a/samples/web-app-mysql-flexible-server/dotnet/scripts/02-build-docker-image.sh b/samples/web-app-mysql-flexible-server/dotnet/scripts/02-build-docker-image.sh
new file mode 100755
index 0000000..4b497d8
--- /dev/null
+++ b/samples/web-app-mysql-flexible-server/dotnet/scripts/02-build-docker-image.sh
@@ -0,0 +1,18 @@
+#!/bin/bash
+
+# Variables
+source ./00-variables.sh
+
+# Change the current directory to the script's directory
+cd "$CURRENT_DIR" || exit
+
+# Build context: the src/ folder (contains VacationPlanner.csproj, Program.cs, Pages/, Services/, wwwroot/).
+# The Dockerfile lives alongside this script, so we point -f at it explicitly.
+BUILD_CONTEXT="../src"
+
+# Build the docker image
+docker build \
+	-t $IMAGE_NAME:$IMAGE_TAG \
+	-f Dockerfile \
+	--build-arg PORT=$PORT \
+	$BUILD_CONTEXT
diff --git a/samples/web-app-mysql-flexible-server/dotnet/scripts/03-run-docker-container.sh b/samples/web-app-mysql-flexible-server/dotnet/scripts/03-run-docker-container.sh
new file mode 100755
index 0000000..d136b31
--- /dev/null
+++ b/samples/web-app-mysql-flexible-server/dotnet/scripts/03-run-docker-container.sh
@@ -0,0 +1,39 @@
+#!/bin/bash
+
+# Variables
+source ./00-variables.sh
+
+# Retrieve the MySQL server FQDN
+MYSQL_FQDN_FULL=$(az mysql flexible-server show \
+	--name "$MYSQL_SERVER_NAME" \
+	--resource-group "$RESOURCE_GROUP_NAME" \
+	--query "fullyQualifiedDomainName" \
+	--output tsv)
+
+if [ -z "$MYSQL_FQDN_FULL" ]; then
+	echo "Failed to retrieve MySQL server FQDN. Run 01-deploy-resources.sh first."
+	exit 1
+fi
+
+# Split host:port (LocalStack emulator embeds the dynamic TCP-proxy port in fullyQualifiedDomainName;
+# real Azure returns just the bare host, so MYSQL_PORT stays at the value from 00-variables.sh (3306)).
+MYSQL_FQDN="${MYSQL_FQDN_FULL%%:*}"
+if [[ "$MYSQL_FQDN_FULL" == *:* ]]; then
+	MYSQL_PORT="${MYSQL_FQDN_FULL##*:}"
+fi
+
+# --network=host so endpoints like *.localhost.localstack.cloud resolve to the
+# host's loopback (where LocalStack is listening), not the container's.
+docker run -it \
+	--rm \
+	--network=host \
+	-e PORT=$PORT \
+	-e MYSQL_HOST="$MYSQL_FQDN" \
+	-e MYSQL_PORT="$MYSQL_PORT" \
+	-e MYSQL_DATABASE="$MYSQL_DATABASE_NAME" \
+	-e MYSQL_USER="$MYSQL_USER_NAME" \
+	-e MYSQL_PASSWORD="$MYSQL_USER_PASSWORD" \
+	-e MYSQL_SSL="$MYSQL_SSL" \
+	-e LOGIN_NAME="$LOGIN_NAME" \
+	--name "$IMAGE_NAME" \
+	"$IMAGE_NAME:$IMAGE_TAG"
diff --git a/samples/web-app-mysql-flexible-server/dotnet/scripts/04-push-docker-image.sh b/samples/web-app-mysql-flexible-server/dotnet/scripts/04-push-docker-image.sh
new file mode 100755
index 0000000..a1b7518
--- /dev/null
+++ b/samples/web-app-mysql-flexible-server/dotnet/scripts/04-push-docker-image.sh
@@ -0,0 +1,40 @@
+#!/bin/bash
+
+# Variables
+source ./00-variables.sh
+
+# Login to ACR
+echo "Logging into Azure Container Registry [$ACR_NAME]..."
+az acr login --name $ACR_NAME
+
+# Retrieve ACR login server. Each container image needs to be tagged with the loginServer name of the registry.
+ACR_LOGIN_SERVER=$(az acr show --name $ACR_NAME --query loginServer --output tsv)
+
+if [ $? -eq 0 ]; then
+	echo "Logged into Azure Container Registry [$ACR_NAME] successfully."
+else
+	echo "Failed to log into Azure Container Registry [$ACR_NAME]."
+	exit 1
+fi
+
+FULL_IMAGE="${ACR_LOGIN_SERVER}/${IMAGE_NAME}:${IMAGE_TAG}"
+
+# Tag the local image with the loginServer of ACR
+docker tag ${IMAGE_NAME,,}:$IMAGE_TAG $ACR_LOGIN_SERVER/${IMAGE_NAME,,}:$IMAGE_TAG
+
+if [ $? -eq 0 ]; then
+	echo "Docker image [$IMAGE_NAME] tagged as [$FULL_IMAGE] successfully."
+else
+	echo "Failed to tag Docker image [$IMAGE_NAME] as [$FULL_IMAGE]."
+	exit 1
+fi
+
+# Push the container image to ACR
+docker push $ACR_LOGIN_SERVER/${IMAGE_NAME,,}:$IMAGE_TAG
+
+if [ $? -eq 0 ]; then
+	echo "Docker image [$FULL_IMAGE] pushed to ACR successfully."
+else
+	echo "Failed to push Docker image [$FULL_IMAGE] to ACR."
+	exit 1
+fi
diff --git a/samples/web-app-mysql-flexible-server/dotnet/scripts/05-deploy-app.sh b/samples/web-app-mysql-flexible-server/dotnet/scripts/05-deploy-app.sh
new file mode 100755
index 0000000..11fea8a
--- /dev/null
+++ b/samples/web-app-mysql-flexible-server/dotnet/scripts/05-deploy-app.sh
@@ -0,0 +1,94 @@
+#!/bin/bash
+
+# Variables
+source ./00-variables.sh
+
+# Retrieve the MySQL server FQDN
+MYSQL_FQDN_FULL=$(az mysql flexible-server show \
+	--name "$MYSQL_SERVER_NAME" \
+	--resource-group "$RESOURCE_GROUP_NAME" \
+	--query "fullyQualifiedDomainName" \
+	--output tsv)
+
+if [ -z "$MYSQL_FQDN_FULL" ]; then
+	echo "Failed to retrieve MySQL server FQDN. Run 01-deploy-resources.sh first."
+	exit 1
+fi
+
+# Split host:port (LocalStack emulator embeds the dynamic TCP-proxy port in fullyQualifiedDomainName;
+# real Azure returns just the bare host, so MYSQL_PORT stays at the value from 00-variables.sh (3306)).
+MYSQL_FQDN="${MYSQL_FQDN_FULL%%:*}"
+if [[ "$MYSQL_FQDN_FULL" == *:* ]]; then
+	MYSQL_PORT="${MYSQL_FQDN_FULL##*:}"
+fi
+
+# Generate a stable SECRET_KEY shared by all replicas: the app derives its Data Protection key ring from it,
+# so antiforgery tokens and flash messages are valid on every replica and survive pod restarts
+SECRET_KEY=$(openssl rand -hex 32)
+
+# Get the login server for the Azure Container Registry
+echo "Getting login server for Azure Container Registry [$ACR_NAME]..."
+ACR_LOGIN_SERVER=$(az acr show \
+	--name "$ACR_NAME" \
+	--resource-group "$RESOURCE_GROUP_NAME" \
+	--query "loginServer" \
+	--output tsv \
+	--only-show-errors)
+
+if [ -n "$ACR_LOGIN_SERVER" ]; then
+	echo "Login server retrieved successfully: $ACR_LOGIN_SERVER"
+else
+	echo "Failed to retrieve login server for Azure Container Registry [$ACR_NAME]."
+	exit 1
+fi
+
+FULL_IMAGE="${ACR_LOGIN_SERVER}/${IMAGE_NAME}:${IMAGE_TAG}"
+
+# Create namespace
+cat namespace.yml |
+yq "(.metadata.name)|="\""$NAMESPACE"\" |
+kubectl apply -f -
+
+# Create secret with the MySQL password and the SECRET_KEY
+cat secret.yml |
+yq "(.metadata.namespace)|="\""$NAMESPACE"\" |
+yq "(.data.MYSQL_PASSWORD)|="\""$(echo -n $MYSQL_USER_PASSWORD | base64 -w0)"\" |
+yq "(.data.SECRET_KEY)|="\""$(echo -n $SECRET_KEY | base64 -w0)"\" |
+kubectl apply -f -
+
+# Create configmap with environment variables
+cat configmap.yml |
+yq "(.metadata.namespace)|="\""$NAMESPACE"\" |
+yq "(.data.MYSQL_HOST)|="\""$MYSQL_FQDN"\" |
+yq "(.data.MYSQL_PORT)|="\""$MYSQL_PORT"\" |
+yq "(.data.MYSQL_DATABASE)|="\""$MYSQL_DATABASE_NAME"\" |
+yq "(.data.MYSQL_USER)|="\""$MYSQL_USER_NAME"\" |
+yq "(.data.MYSQL_SSL)|="\""$MYSQL_SSL"\" |
+yq "(.data.LOGIN_NAME)|="\""$LOGIN_NAME"\" |
+kubectl apply -f -
+
+# Create deployment
+cat deployment.yml |
+yq "(.metadata.namespace)|="\""$NAMESPACE"\" |
+yq "(.spec.template.spec.containers[0].image)|="\""$FULL_IMAGE"\" |
+yq "(.spec.template.spec.containers[0].imagePullPolicy)|="\""$IMAGE_PULL_POLICY"\" |
+yq "(.spec.template.spec.containers[0].ports[0].containerPort)|=$PORT" |
+kubectl apply -f -
+
+# Create service
+cat service.yml |
+yq "(.metadata.namespace)|="\""$NAMESPACE"\" |
+kubectl apply -f -
+
+# Wait for the rollout so a pod stuck in ImagePullBackOff or CrashLoopBackOff is reported here, not discovered later
+echo "Waiting for deployment [$DEPLOYMENT_NAME] to roll out..."
+if kubectl rollout status deployment/$DEPLOYMENT_NAME -n $NAMESPACE --timeout=600s; then
+	echo "Deployment [$DEPLOYMENT_NAME] is ready. To reach the web app, run:"
+	echo "  kubectl port-forward service/$SERVICE_NAME 8080:80 -n $NAMESPACE"
+	echo "and browse to http://localhost:8080 (health: http://localhost:8080/health)."
+else
+	echo "Deployment [$DEPLOYMENT_NAME] did not become ready. Inspect it with:"
+	echo "  kubectl get pods -n $NAMESPACE"
+	echo "  kubectl describe pod -n $NAMESPACE --selector app=$DEPLOYMENT_NAME"
+	exit 1
+fi
diff --git a/samples/web-app-mysql-flexible-server/dotnet/scripts/Dockerfile b/samples/web-app-mysql-flexible-server/dotnet/scripts/Dockerfile
new file mode 100644
index 0000000..d862da7
--- /dev/null
+++ b/samples/web-app-mysql-flexible-server/dotnet/scripts/Dockerfile
@@ -0,0 +1,28 @@
+# Build stage: restore and publish the ASP.NET Core app with the .NET SDK image.
+FROM mcr.microsoft.com/dotnet/sdk:10.0 AS build
+
+WORKDIR /src
+
+# Restore first so the package cache layer is reused when only sources change.
+COPY VacationPlanner.csproj ./
+RUN dotnet restore
+
+COPY . ./
+RUN dotnet publish -c Release -o /app/publish --no-restore
+
+# Runtime stage: the ASP.NET Core runtime image only, no SDK.
+FROM mcr.microsoft.com/dotnet/aspnet:10.0
+
+# Port Kestrel listens on; kept as a build argument (and a runtime variable) as in the Python image.
+ARG PORT=8080
+ENV PORT=${PORT}
+
+WORKDIR /app
+COPY --from=build /app/publish ./
+
+# Run as the runtime image's non-root `app` user, as the Python image runs as its own unprivileged `app` user.
+USER app
+
+EXPOSE ${PORT}
+
+ENTRYPOINT ["dotnet", "VacationPlanner.dll"]
diff --git a/samples/web-app-mysql-flexible-server/dotnet/scripts/configmap.yml b/samples/web-app-mysql-flexible-server/dotnet/scripts/configmap.yml
new file mode 100644
index 0000000..7a97f63
--- /dev/null
+++ b/samples/web-app-mysql-flexible-server/dotnet/scripts/configmap.yml
@@ -0,0 +1,15 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: vacation-planner-mysql-config
+  namespace: vacation-planner-mysql
+  labels:
+    app: vacation-planner-mysql
+data:
+  MYSQL_HOST: ""
+  MYSQL_PORT: "3306"
+  MYSQL_DATABASE: ""
+  MYSQL_USER: ""
+  MYSQL_SSL: "true"
+  LOGIN_NAME: "paolo"
+  DEBUG: "false"
diff --git a/samples/web-app-mysql-flexible-server/dotnet/scripts/deployment.yml b/samples/web-app-mysql-flexible-server/dotnet/scripts/deployment.yml
new file mode 100644
index 0000000..6ee75df
--- /dev/null
+++ b/samples/web-app-mysql-flexible-server/dotnet/scripts/deployment.yml
@@ -0,0 +1,101 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: vacation-planner-mysql
+  namespace: vacation-planner-mysql
+  labels:
+    app: vacation-planner-mysql
+spec:
+  replicas: 3
+  selector:
+    matchLabels:
+      app: vacation-planner-mysql
+  strategy:
+    rollingUpdate:
+      maxSurge: 1
+      maxUnavailable: 0
+    type: RollingUpdate
+  minReadySeconds: 5
+  template:
+    metadata:
+      labels:
+        app: vacation-planner-mysql
+    spec:
+      nodeSelector:
+        kubernetes.io/os: linux
+      containers:
+        - name: vacation-planner-mysql
+          image: <your-registry>.azurecr.io/vacation-planner-mysql-dotnet:v1
+          imagePullPolicy: Always
+          ports:
+            - name: http
+              containerPort: 8080
+          env:
+            - name: MYSQL_HOST
+              valueFrom:
+                configMapKeyRef:
+                  name: vacation-planner-mysql-config
+                  key: MYSQL_HOST
+            - name: MYSQL_PORT
+              valueFrom:
+                configMapKeyRef:
+                  name: vacation-planner-mysql-config
+                  key: MYSQL_PORT
+            - name: MYSQL_DATABASE
+              valueFrom:
+                configMapKeyRef:
+                  name: vacation-planner-mysql-config
+                  key: MYSQL_DATABASE
+            - name: MYSQL_USER
+              valueFrom:
+                configMapKeyRef:
+                  name: vacation-planner-mysql-config
+                  key: MYSQL_USER
+            - name: MYSQL_SSL
+              valueFrom:
+                configMapKeyRef:
+                  name: vacation-planner-mysql-config
+                  key: MYSQL_SSL
+            - name: LOGIN_NAME
+              valueFrom:
+                configMapKeyRef:
+                  name: vacation-planner-mysql-config
+                  key: LOGIN_NAME
+            - name: DEBUG
+              valueFrom:
+                configMapKeyRef:
+                  name: vacation-planner-mysql-config
+                  key: DEBUG
+            - name: MYSQL_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: vacation-planner-mysql-secrets
+                  key: MYSQL_PASSWORD
+            - name: SECRET_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: vacation-planner-mysql-secrets
+                  key: SECRET_KEY
+          resources:
+            requests:
+              cpu: "200m"
+              memory: "256Mi"
+            limits:
+              cpu: "1000m"
+              memory: "512Mi"
+          livenessProbe:
+            httpGet:
+              path: /health
+              port: http
+            initialDelaySeconds: 30
+            periodSeconds: 30
+            timeoutSeconds: 5
+            failureThreshold: 3
+          readinessProbe:
+            httpGet:
+              path: /health
+              port: http
+            initialDelaySeconds: 10
+            periodSeconds: 10
+            timeoutSeconds: 3
+            failureThreshold: 3
diff --git a/samples/web-app-mysql-flexible-server/dotnet/scripts/namespace.yml b/samples/web-app-mysql-flexible-server/dotnet/scripts/namespace.yml
new file mode 100644
index 0000000..92b20ac
--- /dev/null
+++ b/samples/web-app-mysql-flexible-server/dotnet/scripts/namespace.yml
@@ -0,0 +1,4 @@
+kind: Namespace
+apiVersion: v1
+metadata:
+  name: vacation-planner-mysql
diff --git a/samples/web-app-mysql-flexible-server/dotnet/scripts/secret.yml b/samples/web-app-mysql-flexible-server/dotnet/scripts/secret.yml
new file mode 100644
index 0000000..e21d7fe
--- /dev/null
+++ b/samples/web-app-mysql-flexible-server/dotnet/scripts/secret.yml
@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: vacation-planner-mysql-secrets
+  namespace: vacation-planner-mysql
+  labels:
+    app: vacation-planner-mysql
+type: Opaque
+data:
+  MYSQL_PASSWORD: ""
+  SECRET_KEY: ""
diff --git a/samples/web-app-mysql-flexible-server/dotnet/scripts/service.yml b/samples/web-app-mysql-flexible-server/dotnet/scripts/service.yml
new file mode 100644
index 0000000..0217de1
--- /dev/null
+++ b/samples/web-app-mysql-flexible-server/dotnet/scripts/service.yml
@@ -0,0 +1,16 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: vacation-planner-mysql
+  namespace: vacation-planner-mysql
+  labels:
+    app: vacation-planner-mysql
+spec:
+  type: ClusterIP
+  selector:
+    app: vacation-planner-mysql
+  ports:
+    - name: http
+      protocol: TCP
+      port: 80
+      targetPort: http
diff --git a/samples/web-app-mysql-flexible-server/dotnet/src/.dockerignore b/samples/web-app-mysql-flexible-server/dotnet/src/.dockerignore
new file mode 100644
index 0000000..cd42ee3
--- /dev/null
+++ b/samples/web-app-mysql-flexible-server/dotnet/src/.dockerignore
@@ -0,0 +1,2 @@
+bin/
+obj/
diff --git a/samples/web-app-mysql-flexible-server/dotnet/src/Models/Activity.cs b/samples/web-app-mysql-flexible-server/dotnet/src/Models/Activity.cs
new file mode 100644
index 0000000..c39b073
--- /dev/null
+++ b/samples/web-app-mysql-flexible-server/dotnet/src/Models/Activity.cs
@@ -0,0 +1,4 @@
+namespace VacationPlanner.Models;
+
+/// <summary>A planned vacation activity: the store's identifier plus the free-text description.</summary>
+public sealed record Activity(string Id, string Text);
diff --git a/samples/web-app-mysql-flexible-server/dotnet/src/Pages/Delete.cshtml b/samples/web-app-mysql-flexible-server/dotnet/src/Pages/Delete.cshtml
new file mode 100644
index 0000000..386fa85
--- /dev/null
+++ b/samples/web-app-mysql-flexible-server/dotnet/src/Pages/Delete.cshtml
@@ -0,0 +1,2 @@
+@page "/delete/{id}"
+@model DeleteModel
diff --git a/samples/web-app-mysql-flexible-server/dotnet/src/Pages/Delete.cshtml.cs b/samples/web-app-mysql-flexible-server/dotnet/src/Pages/Delete.cshtml.cs
new file mode 100644
index 0000000..6272570
--- /dev/null
+++ b/samples/web-app-mysql-flexible-server/dotnet/src/Pages/Delete.cshtml.cs
@@ -0,0 +1,22 @@
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Mvc.RazorPages;
+using VacationPlanner.Services;
+
+namespace VacationPlanner.Pages;
+
+/// <summary>Handles <c>POST /delete/{id}</c>; the activity is addressed by its store id, never by its position in the list.</summary>
+public class DeleteModel(IActivityStore store, ILogger<DeleteModel> logger) : PageModel
+{
+    public IActionResult OnGet() => RedirectToPage("/Index");
+
+    public async Task<IActionResult> OnPostAsync(string id, CancellationToken cancellationToken)
+    {
+        if (!string.IsNullOrWhiteSpace(id) && await store.DeleteAsync(id, cancellationToken))
+        {
+            logger.LogInformation("Activity deleted: {Id}", id);
+            TempData["Flash"] = "Activity deleted.";
+        }
+
+        return RedirectToPage("/Index");
+    }
+}
diff --git a/samples/web-app-mysql-flexible-server/dotnet/src/Pages/Index.cshtml b/samples/web-app-mysql-flexible-server/dotnet/src/Pages/Index.cshtml
new file mode 100644
index 0000000..bd617e2
--- /dev/null
+++ b/samples/web-app-mysql-flexible-server/dotnet/src/Pages/Index.cshtml
@@ -0,0 +1,265 @@
+@page
+@model IndexModel
+<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8" />
+  <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+  <title>Vacation Planner</title>
+  <link rel="preconnect" href="https://fonts.googleapis.com" />
+  <link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700&display=swap" rel="stylesheet" />
+  <link rel="stylesheet" href="~/style.css" />
+  <link rel="icon" type="image/x-icon" href="~/favicon.ico" />
+  <script>
+    (function () {
+      try {
+        var dark = localStorage.getItem('vp_dark');
+        if (dark === 'true' || (dark === null && window.matchMedia('(prefers-color-scheme: dark)').matches)) {
+          document.documentElement.dataset.theme = 'dark';
+        }
+      } catch (_) {}
+    })();
+  </script>
+</head>
+<body>
+
+<!-- Header -->
+<header>
+  <div class="header-left">
+    <h1>&#127796; Vacation Planner</h1>
+    <p id="count-label">@Model.Activities.Count activit@(Model.Activities.Count != 1 ? "ies" : "y") planned</p>
+  </div>
+  <div class="header-right">
+    <button id="btn-dark-mode" aria-label="Toggle dark mode" title="Toggle dark mode">
+      <svg id="icon-dark" width="18" height="18" fill="none" stroke="currentColor" stroke-width="2" viewBox="0 0 24 24">
+        <path d="M21 12.79A9 9 0 1111.21 3a7 7 0 009.79 9.79z"/>
+      </svg>
+      <svg id="icon-light" width="18" height="18" fill="none" stroke="currentColor" stroke-width="2" viewBox="0 0 24 24" style="display:none">
+        <circle cx="12" cy="12" r="5"/>
+        <line x1="12" y1="1" x2="12" y2="3"/><line x1="12" y1="21" x2="12" y2="23"/>
+        <line x1="4.22" y1="4.22" x2="5.64" y2="5.64"/><line x1="18.36" y1="18.36" x2="19.78" y2="19.78"/>
+        <line x1="1" y1="12" x2="3" y2="12"/><line x1="21" y1="12" x2="23" y2="12"/>
+        <line x1="4.22" y1="19.78" x2="5.64" y2="18.36"/><line x1="18.36" y1="5.64" x2="19.78" y2="4.22"/>
+      </svg>
+    </button>
+    <button id="btn-add">
+      <svg width="16" height="16" fill="none" stroke="currentColor" stroke-width="2.5" viewBox="0 0 24 24"><line x1="12" y1="5" x2="12" y2="19"/><line x1="5" y1="12" x2="19" y2="12"/></svg>
+      Add Activity
+    </button>
+  </div>
+</header>
+
+<!-- Activity Table -->
+<div class="content">
+  <table id="activity-table">
+    <thead>
+      <tr>
+        <th>Activity</th>
+        <th class="col-actions" colspan="2">Actions</th>
+      </tr>
+    </thead>
+    <tbody>
+      @foreach (var activity in Model.Activities)
+      {
+      <tr data-id="@activity.Id" data-activity="@activity.Text">
+        <td>@activity.Text</td>
+        <td class="col-btn">
+          <button class="btn-edit" title="Edit activity" aria-label="Edit @activity.Text">
+            <svg width="14" height="14" fill="none" stroke="currentColor" stroke-width="2" viewBox="0 0 24 24">
+              <path d="M11 4H4a2 2 0 00-2 2v14a2 2 0 002 2h14a2 2 0 002-2v-7"/>
+              <path d="M18.5 2.5a2.121 2.121 0 013 3L12 15l-4 1 1-4 9.5-9.5z"/>
+            </svg>
+            Edit
+          </button>
+        </td>
+        <td class="col-btn">
+          <form method="post" asp-page="/Delete" asp-route-id="@activity.Id" class="delete-form">
+            <button type="button" class="btn-delete" title="Delete activity" aria-label="Delete @activity.Text">
+              <svg width="14" height="14" fill="none" stroke="currentColor" stroke-width="2" viewBox="0 0 24 24">
+                <polyline points="3 6 5 6 21 6"/><path d="M19 6l-1 14a2 2 0 01-2 2H8a2 2 0 01-2-2L5 6"/>
+                <path d="M10 11v6"/><path d="M14 11v6"/><path d="M9 6V4h6v2"/>
+              </svg>
+              Delete
+            </button>
+          </form>
+        </td>
+      </tr>
+      }
+      @if (Model.Activities.Count == 0)
+      {
+      <tr id="empty-row">
+        <td colspan="3" class="empty-cell">No vacation plans yet — add your first activity!</td>
+      </tr>
+      }
+    </tbody>
+  </table>
+</div>
+
+<!-- Add / Edit Activity Modal -->
+<div id="overlay">
+  <div class="modal" role="dialog" aria-modal="true" aria-labelledby="modal-title">
+    <div class="modal-header">
+      <h2 id="modal-title">&#127796; Add Activity</h2>
+      <button id="btn-close-modal" aria-label="Close">&times;</button>
+    </div>
+    <form id="activity-form" method="post" asp-page="/Index" novalidate>
+      <input type="hidden" id="f-row-id" name="row_id" value="" />
+      <div class="field">
+        <label for="f-activity">Activity <span style="color:#ef4444">*</span></label>
+        <input id="f-activity" name="activity" type="text" placeholder="e.g. Snorkelling at Coral Bay" required />
+      </div>
+    </form>
+    <div class="modal-actions">
+      <button class="btn-secondary" id="btn-cancel">Cancel</button>
+      <button class="btn-primary" id="btn-save">Save Activity</button>
+    </div>
+  </div>
+</div>
+
+<!-- Delete Confirmation Modal -->
+<div id="delete-overlay">
+  <div class="modal" role="dialog" aria-modal="true" aria-labelledby="delete-modal-title">
+    <div class="modal-header">
+      <h2 id="delete-modal-title">&#127796; Delete Activity</h2>
+      <button id="btn-close-delete-modal" aria-label="Close">&times;</button>
+    </div>
+    <div class="modal-body">
+      <p id="delete-confirm-msg">Are you sure you want to delete this activity?</p>
+    </div>
+    <div class="modal-actions">
+      <button class="btn-secondary" id="btn-cancel-delete">Cancel</button>
+      <button class="btn-primary" id="btn-confirm-delete">Delete</button>
+    </div>
+  </div>
+</div>
+
+<!-- Toast -->
+<div id="toast"></div>
+
+<script>
+  // ── Dark mode ────────────────────────────────────────────
+  function applyDark(dark) {
+    document.documentElement.dataset.theme = dark ? 'dark' : '';
+    document.getElementById('icon-dark').style.display  = dark ? 'none' : '';
+    document.getElementById('icon-light').style.display = dark ? ''     : 'none';
+  }
+  (function () {
+    var dark = localStorage.getItem('vp_dark');
+    var isDark = dark === 'true' || (dark === null && window.matchMedia('(prefers-color-scheme: dark)').matches);
+    applyDark(isDark);
+  })();
+  document.getElementById('btn-dark-mode').addEventListener('click', function () {
+    var isDark = document.documentElement.dataset.theme === 'dark';
+    applyDark(!isDark);
+    localStorage.setItem('vp_dark', String(!isDark));
+  });
+
+  // ── Toast ────────────────────────────────────────────────
+  var flashMessages = @Json.Serialize(Model.Flashes);
+  var toastTimer;
+  function showToast(msg) {
+    var el = document.getElementById('toast');
+    el.textContent = msg;
+    el.classList.add('show');
+    clearTimeout(toastTimer);
+    toastTimer = setTimeout(function () { el.classList.remove('show'); }, 2400);
+  }
+  if (flashMessages.length) showToast(flashMessages[0]);
+
+  // ── Activity Modal ───────────────────────────────────────
+  var overlay = document.getElementById('overlay');
+
+  function openActivityModal(data) {
+    var titleEl = document.getElementById('modal-title');
+    var saveEl  = document.getElementById('btn-save');
+    var rowId   = document.getElementById('f-row-id');
+    var input   = document.getElementById('f-activity');
+
+    if (data) {
+      titleEl.textContent = '🌴 Edit Activity';
+      saveEl.textContent  = 'Save Changes';
+      rowId.value         = data.id;
+      input.value         = data.activity;
+    } else {
+      titleEl.textContent = '🌴 Add Activity';
+      saveEl.textContent  = 'Save Activity';
+      rowId.value         = '';
+      input.value         = '';
+    }
+    overlay.classList.add('open');
+    input.focus();
+    var len = input.value.length;
+    input.setSelectionRange(len, len);
+  }
+
+  function closeActivityModal() {
+    overlay.classList.remove('open');
+    document.getElementById('activity-form').reset();
+    document.getElementById('f-row-id').value = '';
+    document.getElementById('modal-title').textContent = '🌴 Add Activity';
+    document.getElementById('btn-save').textContent    = 'Save Activity';
+  }
+
+  document.getElementById('btn-add').addEventListener('click', function () { openActivityModal(null); });
+  document.getElementById('btn-close-modal').addEventListener('click', closeActivityModal);
+  document.getElementById('btn-cancel').addEventListener('click', closeActivityModal);
+  overlay.addEventListener('click', function (e) { if (e.target === overlay) closeActivityModal(); });
+
+  document.getElementById('btn-save').addEventListener('click', function () {
+    var val = document.getElementById('f-activity').value.trim();
+    if (!val) { showToast('Activity cannot be empty.'); return; }
+    document.getElementById('activity-form').submit();
+  });
+
+  document.getElementById('f-activity').addEventListener('keydown', function (e) {
+    if (e.key === 'Enter') { e.preventDefault(); document.getElementById('btn-save').click(); }
+  });
+
+  // Edit buttons on rows
+  document.querySelectorAll('.btn-edit').forEach(function (btn) {
+    btn.addEventListener('click', function () {
+      var row = btn.closest('tr');
+      openActivityModal({ id: row.dataset.id, activity: row.dataset.activity });
+    });
+  });
+
+  // ── Delete confirmation modal ────────────────────────────
+  var deleteOverlay = document.getElementById('delete-overlay');
+  var pendingDeleteForm = null;
+
+  function openDeleteModal(form, activityName) {
+    pendingDeleteForm = form;
+    var msg = document.getElementById('delete-confirm-msg');
+    msg.textContent = 'Are you sure you want to delete "' + activityName + '"?';
+    deleteOverlay.classList.add('open');
+    document.getElementById('btn-confirm-delete').focus();
+  }
+
+  function closeDeleteModal() {
+    deleteOverlay.classList.remove('open');
+    pendingDeleteForm = null;
+  }
+
+  document.querySelectorAll('.btn-delete').forEach(function (btn) {
+    btn.addEventListener('click', function () {
+      var row = btn.closest('tr');
+      var form = btn.closest('form');
+      openDeleteModal(form, row.dataset.activity);
+    });
+  });
+
+  document.getElementById('btn-confirm-delete').addEventListener('click', function () {
+    if (pendingDeleteForm) pendingDeleteForm.submit();
+  });
+
+  document.getElementById('btn-cancel-delete').addEventListener('click', closeDeleteModal);
+  document.getElementById('btn-close-delete-modal').addEventListener('click', closeDeleteModal);
+  deleteOverlay.addEventListener('click', function (e) { if (e.target === deleteOverlay) closeDeleteModal(); });
+
+  // ── Escape closes any open modal ─────────────────────────
+  document.addEventListener('keydown', function (e) {
+    if (e.key === 'Escape') { closeActivityModal(); closeDeleteModal(); }
+  });
+</script>
+</body>
+</html>
diff --git a/samples/web-app-mysql-flexible-server/dotnet/src/Pages/Index.cshtml.cs b/samples/web-app-mysql-flexible-server/dotnet/src/Pages/Index.cshtml.cs
new file mode 100644
index 0000000..4a8e59c
--- /dev/null
+++ b/samples/web-app-mysql-flexible-server/dotnet/src/Pages/Index.cshtml.cs
@@ -0,0 +1,49 @@
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Mvc.RazorPages;
+using VacationPlanner.Models;
+using VacationPlanner.Services;
+
+namespace VacationPlanner.Pages;
+
+public class IndexModel(IActivityStore store, ILogger<IndexModel> logger) : PageModel
+{
+    public IReadOnlyList<Activity> Activities { get; private set; } = [];
+
+    /// <summary>Flash messages set by the previous request (the equivalent of Flask's <c>flash()</c>).</summary>
+    public IReadOnlyList<string> Flashes => TempData["Flash"] is string message ? [message] : [];
+
+    [BindProperty(Name = "activity")]
+    public string? Activity { get; set; }
+
+    [BindProperty(Name = "row_id")]
+    public string? RowId { get; set; }
+
+    public async Task OnGetAsync(CancellationToken cancellationToken)
+    {
+        Activities = await store.ListAsync(cancellationToken);
+    }
+
+    public async Task<IActionResult> OnPostAsync(CancellationToken cancellationToken)
+    {
+        var text = Activity?.Trim();
+        var id = RowId?.Trim();
+        if (!string.IsNullOrEmpty(text))
+        {
+            if (!string.IsNullOrEmpty(id))
+            {
+                if (await store.UpdateAsync(id, text, cancellationToken))
+                {
+                    logger.LogInformation("Activity updated: {Id}", id);
+                    TempData["Flash"] = "Activity updated!";
+                }
+            }
+            else if (await store.AddAsync(text, cancellationToken))
+            {
+                logger.LogInformation("Activity added: {Activity}", text);
+                TempData["Flash"] = "Activity added!";
+            }
+        }
+
+        return RedirectToPage();
+    }
+}
diff --git a/samples/web-app-mysql-flexible-server/dotnet/src/Pages/_ViewImports.cshtml b/samples/web-app-mysql-flexible-server/dotnet/src/Pages/_ViewImports.cshtml
new file mode 100644
index 0000000..ec62511
--- /dev/null
+++ b/samples/web-app-mysql-flexible-server/dotnet/src/Pages/_ViewImports.cshtml
@@ -0,0 +1,4 @@
+@using VacationPlanner
+@using VacationPlanner.Models
+@namespace VacationPlanner.Pages
+@addTagHelper *, Microsoft.AspNetCore.Mvc.TagHelpers
diff --git a/samples/web-app-mysql-flexible-server/dotnet/src/Program.cs b/samples/web-app-mysql-flexible-server/dotnet/src/Program.cs
new file mode 100644
index 0000000..04e5caf
--- /dev/null
+++ b/samples/web-app-mysql-flexible-server/dotnet/src/Program.cs
@@ -0,0 +1,69 @@
+using System.Diagnostics;
+using Microsoft.AspNetCore.DataProtection;
+using Microsoft.AspNetCore.DataProtection.KeyManagement;
+using VacationPlanner.Services;
+
+var builder = WebApplication.CreateBuilder(args);
+
+// Listen on PORT (8080 by default), the way the Python image binds gunicorn to 0.0.0.0:${PORT}. HTTP_PORTS is the
+// same setting the aspnet base image feeds through ASPNETCORE_HTTP_PORTS, so no URL override is involved.
+if (Environment.GetEnvironmentVariable("PORT") is { Length: > 0 } port)
+{
+    builder.WebHost.UseSetting(WebHostDefaults.HttpPortsKey, port);
+}
+
+// Read and validate the configuration up front so a misconfigured deployment fails at startup.
+var storeOptions = MySqlOptions.FromEnvironment();
+
+// SECRET_KEY is the Kubernetes Secret the Python sample signs its session cookie with. Deriving the Data Protection
+// key ring from it lets all replicas validate each other's antiforgery tokens and flash cookies; without it (a local
+// docker run) each process keeps its own keys.
+var secretKey = Environment.GetEnvironmentVariable("SECRET_KEY");
+if (!string.IsNullOrEmpty(secretKey))
+{
+    builder.Services.AddDataProtection().DisableAutomaticKeyGeneration();
+    builder.Services.Configure<KeyManagementOptions>(options => options.XmlRepository = new SecretKeyXmlRepository(secretKey));
+}
+
+builder.Services.AddRazorPages();
+builder.Services.AddSingleton<IActivityStore>(sp =>
+    new MySqlActivityStore(storeOptions, sp.GetRequiredService<ILogger<MySqlActivityStore>>()));
+// The Python sample waits up to 30 x 2 s for the database at startup; the same values apply here.
+builder.Services.AddHostedService(sp =>
+    new StoreInitializer(sp.GetRequiredService<IActivityStore>(), sp.GetRequiredService<ILogger<StoreInitializer>>(),
+        attempts: 30, delay: TimeSpan.FromSeconds(2)));
+
+var app = builder.Build();
+
+if (string.IsNullOrEmpty(secretKey))
+{
+    app.Logger.LogWarning("SECRET_KEY is not set: antiforgery tokens and flash messages are only valid on this replica.");
+}
+
+// One log line per request, the equivalent of the access log the Python image produces (its gunicorn
+// command passes --access-logfile -). Kubernetes probes show up here too, exactly as they do for Python.
+var requestLogger = app.Services.GetRequiredService<ILoggerFactory>().CreateLogger("VacationPlanner.Requests");
+app.Use(
+    async (context, next) =>
+    {
+        var started = Stopwatch.GetTimestamp();
+        await next();
+        requestLogger.LogInformation(
+            "{Method} {Path} -> {StatusCode} in {Elapsed:0.0}ms",
+            context.Request.Method,
+            context.Request.Path,
+            context.Response.StatusCode,
+            Stopwatch.GetElapsedTime(started).TotalMilliseconds
+        );
+    }
+);
+
+app.UseStaticFiles();
+app.MapRazorPages();
+
+app.MapGet("/health", async (IActivityStore store, CancellationToken cancellationToken) =>
+    await store.IsHealthyAsync(cancellationToken)
+        ? Results.Json(new { status = "ok" })
+        : Results.Json(new { status = "unavailable" }, statusCode: StatusCodes.Status503ServiceUnavailable));
+
+app.Run();
diff --git a/samples/web-app-mysql-flexible-server/dotnet/src/Services/ActivityId.cs b/samples/web-app-mysql-flexible-server/dotnet/src/Services/ActivityId.cs
new file mode 100644
index 0000000..8654aaf
--- /dev/null
+++ b/samples/web-app-mysql-flexible-server/dotnet/src/Services/ActivityId.cs
@@ -0,0 +1,15 @@
+using System.Security.Cryptography;
+using System.Text;
+
+namespace VacationPlanner.Services;
+
+/// <summary>MD5 of username + activity + timestamp: the id scheme shared by the Vacation Planner samples.</summary>
+public static class ActivityId
+{
+    public static string Create(string username, string activity)
+    {
+        var timestamp = DateTime.Now.ToString("yyyy-MM-ddTHH:mm:ss.ffffff");
+        var hash = MD5.HashData(Encoding.UTF8.GetBytes($"{username}_{activity}_{timestamp}"));
+        return Convert.ToHexStringLower(hash);
+    }
+}
diff --git a/samples/web-app-mysql-flexible-server/dotnet/src/Services/IActivityStore.cs b/samples/web-app-mysql-flexible-server/dotnet/src/Services/IActivityStore.cs
new file mode 100644
index 0000000..167993e
--- /dev/null
+++ b/samples/web-app-mysql-flexible-server/dotnet/src/Services/IActivityStore.cs
@@ -0,0 +1,24 @@
+using VacationPlanner.Models;
+
+namespace VacationPlanner.Services;
+
+/// <summary>Persistence for the planner's activities. Every call goes to the backing store; nothing is cached in-process.</summary>
+public interface IActivityStore
+{
+    /// <summary>Creates whatever the store needs (container, table, collection, directory) before the first request.</summary>
+    Task InitializeAsync(CancellationToken cancellationToken);
+
+    Task<IReadOnlyList<Activity>> ListAsync(CancellationToken cancellationToken);
+
+    /// <summary>Adds an activity and returns whether the store confirmed the write; the page flashes only then.</summary>
+    Task<bool> AddAsync(string text, CancellationToken cancellationToken);
+
+    /// <summary>Updates an activity and returns whether the store reported a change, with the meaning the Python sample's driver gives it.</summary>
+    Task<bool> UpdateAsync(string id, string text, CancellationToken cancellationToken);
+
+    /// <summary>Deletes an activity by its store id and returns whether the store reported a deletion.</summary>
+    Task<bool> DeleteAsync(string id, CancellationToken cancellationToken);
+
+    /// <summary>Cheap connectivity probe used by <c>GET /health</c>.</summary>
+    Task<bool> IsHealthyAsync(CancellationToken cancellationToken);
+}
diff --git a/samples/web-app-mysql-flexible-server/dotnet/src/Services/MySqlActivityStore.cs b/samples/web-app-mysql-flexible-server/dotnet/src/Services/MySqlActivityStore.cs
new file mode 100644
index 0000000..e94ef4c
--- /dev/null
+++ b/samples/web-app-mysql-flexible-server/dotnet/src/Services/MySqlActivityStore.cs
@@ -0,0 +1,131 @@
+using MySqlConnector;
+using VacationPlanner.Models;
+
+namespace VacationPlanner.Services;
+
+/// <summary>
+/// Activities in a MySQL <c>activities</c> table. Like the Python sample, the store is low-throughput
+/// and opens a fresh connection per call instead of managing a pool explicitly.
+/// </summary>
+public sealed class MySqlActivityStore(MySqlOptions options, ILogger<MySqlActivityStore> logger) : IActivityStore
+{
+    // Single statement on purpose: MySQL has no CREATE INDEX IF NOT EXISTS, so the indexes are declared
+    // inline and the whole DDL stays idempotent. `id` is VARCHAR(32) because the ids are MD5 hex digests.
+    private const string SchemaDdl = """
+        CREATE TABLE IF NOT EXISTS activities (
+            id           VARCHAR(32)  NOT NULL,
+            username     VARCHAR(255) NOT NULL,
+            activity     TEXT         NOT NULL,
+            created_at   TIMESTAMP    NOT NULL DEFAULT CURRENT_TIMESTAMP,
+            PRIMARY KEY (id),
+            INDEX idx_activities_username (username),
+            INDEX idx_activities_created_at (created_at DESC)
+        )
+        """;
+
+    // Azure MySQL Flexible Server defaults to require_secure_transport=ON (the LocalStack emulator mirrors
+    // this), so the connection must use TLS or the server rejects it. The server certificate is publicly
+    // trusted on Azure but self-signed under LocalStack, so TLS is enabled without certificate verification
+    // (MySqlSslMode.Required) and the same code path works against both targets. MYSQL_SSL=false disables it.
+    // UseAffectedRows makes UPDATE report changed rows rather than matched rows, as PyMySQL does by default.
+    private readonly string _connectionString = new MySqlConnectionStringBuilder
+    {
+        Server = options.Host,
+        Port = (uint)options.Port,
+        UserID = options.User,
+        Password = options.Password,
+        Database = options.Database,
+        CharacterSet = "utf8mb4",
+        ConnectionTimeout = 10,
+        SslMode = options.SslEnabled ? MySqlSslMode.Required : MySqlSslMode.Disabled,
+        UseAffectedRows = true,
+    }.ConnectionString;
+
+    public async Task InitializeAsync(CancellationToken cancellationToken)
+    {
+        await using var connection = await OpenAsync(cancellationToken);
+        await using var command = new MySqlCommand(SchemaDdl, connection);
+        await command.ExecuteNonQueryAsync(cancellationToken);
+        logger.LogInformation("MySQL schema initialized");
+    }
+
+    public async Task<IReadOnlyList<Activity>> ListAsync(CancellationToken cancellationToken)
+    {
+        await using var connection = await OpenAsync(cancellationToken);
+        await using var command = new MySqlCommand(
+            "SELECT id, activity FROM activities WHERE username = @username ORDER BY created_at DESC", connection);
+        command.Parameters.AddWithValue("@username", options.Username);
+
+        var activities = new List<Activity>();
+        await using var reader = await command.ExecuteReaderAsync(cancellationToken);
+        while (await reader.ReadAsync(cancellationToken))
+        {
+            activities.Add(new Activity(reader.GetString(0), reader.GetString(1)));
+        }
+
+        logger.LogInformation(
+            "Retrieved {Count} activities for user: {Username}",
+            activities.Count,
+            options.Username
+        );
+        return activities;
+    }
+
+    public async Task<bool> AddAsync(string text, CancellationToken cancellationToken)
+    {
+        await using var connection = await OpenAsync(cancellationToken);
+        await using var command = new MySqlCommand(
+            "INSERT IGNORE INTO activities (id, username, activity) VALUES (@id, @username, @activity)", connection);
+        command.Parameters.AddWithValue("@id", ActivityId.Create(options.Username, text));
+        command.Parameters.AddWithValue("@username", options.Username);
+        command.Parameters.AddWithValue("@activity", text);
+        await command.ExecuteNonQueryAsync(cancellationToken);
+        return true;
+    }
+
+    /// <summary>Reports a change only when a row actually changed, as the Python sample's PyMySQL <c>rowcount</c> check does.</summary>
+    public async Task<bool> UpdateAsync(string id, string text, CancellationToken cancellationToken)
+    {
+        await using var connection = await OpenAsync(cancellationToken);
+        await using var command = new MySqlCommand("UPDATE activities SET activity = @activity WHERE id = @id", connection);
+        command.Parameters.AddWithValue("@activity", text);
+        command.Parameters.AddWithValue("@id", id);
+        return await command.ExecuteNonQueryAsync(cancellationToken) > 0;
+    }
+
+    public async Task<bool> DeleteAsync(string id, CancellationToken cancellationToken)
+    {
+        await using var connection = await OpenAsync(cancellationToken);
+        await using var command = new MySqlCommand("DELETE FROM activities WHERE id = @id", connection);
+        command.Parameters.AddWithValue("@id", id);
+        if (await command.ExecuteNonQueryAsync(cancellationToken) == 0)
+        {
+            logger.LogInformation("Activity '{Id}' did not exist: already deleted.", id);
+        }
+
+        return true;
+    }
+
+    public async Task<bool> IsHealthyAsync(CancellationToken cancellationToken)
+    {
+        try
+        {
+            await using var connection = await OpenAsync(cancellationToken);
+            await using var command = new MySqlCommand("SELECT 1", connection);
+            await command.ExecuteScalarAsync(cancellationToken);
+            return true;
+        }
+        catch (Exception ex)
+        {
+            logger.LogWarning(ex, "MySQL health check failed");
+            return false;
+        }
+    }
+
+    private async Task<MySqlConnection> OpenAsync(CancellationToken cancellationToken)
+    {
+        var connection = new MySqlConnection(_connectionString);
+        await connection.OpenAsync(cancellationToken);
+        return connection;
+    }
+}
diff --git a/samples/web-app-mysql-flexible-server/dotnet/src/Services/MySqlOptions.cs b/samples/web-app-mysql-flexible-server/dotnet/src/Services/MySqlOptions.cs
new file mode 100644
index 0000000..355d924
--- /dev/null
+++ b/samples/web-app-mysql-flexible-server/dotnet/src/Services/MySqlOptions.cs
@@ -0,0 +1,30 @@
+namespace VacationPlanner.Services;
+
+/// <summary>Connection settings read from the same environment variables the Python sample uses.</summary>
+public sealed record MySqlOptions(string Host, int Port, string User, string Password, string Database, bool SslEnabled, string Username)
+{
+    public static MySqlOptions FromEnvironment()
+    {
+        var username = Environment.GetEnvironmentVariable("LOGIN_NAME") ?? "paolo";
+        if (string.IsNullOrWhiteSpace(username))
+        {
+            throw new InvalidOperationException("LOGIN_NAME cannot be empty");
+        }
+
+        var ssl = (Environment.GetEnvironmentVariable("MYSQL_SSL") ?? "true").ToLowerInvariant();
+        return new MySqlOptions(
+            Host: Require("MYSQL_HOST"),
+            Port: int.Parse(Environment.GetEnvironmentVariable("MYSQL_PORT") ?? "3306"),
+            User: Require("MYSQL_USER"),
+            Password: Require("MYSQL_PASSWORD"),
+            Database: Environment.GetEnvironmentVariable("MYSQL_DATABASE") ?? "sampledb",
+            SslEnabled: ssl is "true" or "1" or "yes",
+            Username: username);
+    }
+
+    private static string Require(string name) =>
+        Environment.GetEnvironmentVariable(name) is { Length: > 0 } value
+            ? value
+            : throw new InvalidOperationException(
+                $"Missing required environment variable: {name}. Set MYSQL_HOST, MYSQL_USER, MYSQL_PASSWORD (and optionally MYSQL_PORT, MYSQL_DATABASE, MYSQL_SSL).");
+}
diff --git a/samples/web-app-mysql-flexible-server/dotnet/src/Services/SecretKeyXmlRepository.cs b/samples/web-app-mysql-flexible-server/dotnet/src/Services/SecretKeyXmlRepository.cs
new file mode 100644
index 0000000..e0cc5bb
--- /dev/null
+++ b/samples/web-app-mysql-flexible-server/dotnet/src/Services/SecretKeyXmlRepository.cs
@@ -0,0 +1,49 @@
+using System.Security.Cryptography;
+using System.Text;
+using System.Xml.Linq;
+using Microsoft.AspNetCore.DataProtection;
+using Microsoft.AspNetCore.DataProtection.AuthenticatedEncryption.ConfigurationModel;
+using Microsoft.AspNetCore.DataProtection.Repositories;
+
+namespace VacationPlanner.Services;
+
+/// <summary>
+/// A Data Protection key ring derived deterministically from <c>SECRET_KEY</c>, the Kubernetes Secret the Python
+/// sample signs its Flask session cookie with. ASP.NET Core protects its antiforgery tokens and TempData (flash)
+/// cookies with Data Protection instead of a signing key; deriving the one key of the ring from the same secret
+/// lets every replica of the Deployment validate what another replica issued, which the default per-process key
+/// ring cannot offer behind a load balancer.
+/// </summary>
+public sealed class SecretKeyXmlRepository : IXmlRepository
+{
+    private readonly XElement _key;
+
+    public SecretKeyXmlRepository(string secretKey)
+    {
+        var keyMaterial = Encoding.UTF8.GetBytes(secretKey);
+
+        // A 512-bit master key (the size Data Protection generates itself) and a stable key id, both from SECRET_KEY.
+        var masterKey = HKDF.DeriveKey(HashAlgorithmName.SHA256, keyMaterial, 64, info: "VacationPlanner.DataProtection.MasterKey"u8.ToArray());
+        var keyId = new Guid(HKDF.DeriveKey(HashAlgorithmName.SHA256, keyMaterial, 16, info: "VacationPlanner.DataProtection.KeyId"u8.ToArray()));
+
+        // AES-256-CBC + HMACSHA256, the default algorithms, serialized the way the key manager itself serializes a new key.
+        var descriptor = new AuthenticatedEncryptorDescriptor(new AuthenticatedEncryptorConfiguration(), new Secret(masterKey));
+        var serialized = descriptor.ExportToXml();
+
+        _key = new XElement("key",
+            new XAttribute("id", keyId),
+            new XAttribute("version", 1),
+            new XElement("creationDate", new DateTimeOffset(2000, 1, 1, 0, 0, 0, TimeSpan.Zero)),
+            new XElement("activationDate", new DateTimeOffset(2000, 1, 1, 0, 0, 0, TimeSpan.Zero)),
+            new XElement("expirationDate", new DateTimeOffset(2999, 12, 31, 0, 0, 0, TimeSpan.Zero)),
+            new XElement("descriptor",
+                new XAttribute("deserializerType", serialized.DeserializerType.AssemblyQualifiedName!),
+                serialized.SerializedDescriptorElement));
+    }
+
+    public IReadOnlyCollection<XElement> GetAllElements() => [new XElement(_key)];
+
+    /// <summary>Never called: automatic key generation is disabled, so the key manager has nothing to persist.</summary>
+    public void StoreElement(XElement element, string friendlyName) =>
+        throw new NotSupportedException("The key ring is derived from SECRET_KEY and cannot be modified.");
+}
diff --git a/samples/web-app-mysql-flexible-server/dotnet/src/Services/StoreInitializer.cs b/samples/web-app-mysql-flexible-server/dotnet/src/Services/StoreInitializer.cs
new file mode 100644
index 0000000..c74eb50
--- /dev/null
+++ b/samples/web-app-mysql-flexible-server/dotnet/src/Services/StoreInitializer.cs
@@ -0,0 +1,33 @@
+namespace VacationPlanner.Services;
+
+/// <summary>
+/// Runs <see cref="IActivityStore.InitializeAsync"/> at startup with a bounded retry, so the app fails fast
+/// (and the container exits) when the backing service never becomes reachable.
+/// </summary>
+public sealed class StoreInitializer(
+    IActivityStore store,
+    ILogger<StoreInitializer> logger,
+    int attempts = 1,
+    TimeSpan delay = default) : IHostedService
+{
+    public async Task StartAsync(CancellationToken cancellationToken)
+    {
+        for (var attempt = 1; ; attempt++)
+        {
+            try
+            {
+                await store.InitializeAsync(cancellationToken);
+                logger.LogInformation("Activity store initialized after {Attempts} attempt(s).", attempt);
+                return;
+            }
+            catch (Exception ex) when (attempt < attempts && !cancellationToken.IsCancellationRequested)
+            {
+                logger.LogWarning(ex, "Activity store not ready (attempt {Attempt}/{Attempts}); retrying in {Delay}s.",
+                    attempt, attempts, delay.TotalSeconds);
+                await Task.Delay(delay, cancellationToken);
+            }
+        }
+    }
+
+    public Task StopAsync(CancellationToken cancellationToken) => Task.CompletedTask;
+}
diff --git a/samples/web-app-mysql-flexible-server/dotnet/src/VacationPlanner.csproj b/samples/web-app-mysql-flexible-server/dotnet/src/VacationPlanner.csproj
new file mode 100644
index 0000000..5034f28
--- /dev/null
+++ b/samples/web-app-mysql-flexible-server/dotnet/src/VacationPlanner.csproj
@@ -0,0 +1,11 @@
+<Project Sdk="Microsoft.NET.Sdk.Web">
+  <PropertyGroup>
+    <TargetFramework>net10.0</TargetFramework>
+    <Nullable>enable</Nullable>
+    <ImplicitUsings>enable</ImplicitUsings>
+    <RootNamespace>VacationPlanner</RootNamespace>
+  </PropertyGroup>
+  <ItemGroup>
+    <PackageReference Include="MySqlConnector" Version="2.6.2" />
+  </ItemGroup>
+</Project>
diff --git a/samples/web-app-mysql-flexible-server/dotnet/src/appsettings.json b/samples/web-app-mysql-flexible-server/dotnet/src/appsettings.json
new file mode 100644
index 0000000..6e5c6b2
--- /dev/null
+++ b/samples/web-app-mysql-flexible-server/dotnet/src/appsettings.json
@@ -0,0 +1,16 @@
+{
+  "Logging": {
+    "LogLevel": {
+      "Default": "Information",
+      "Microsoft.AspNetCore": "Warning"
+    },
+    "Console": {
+      "FormatterName": "simple",
+      "FormatterOptions": {
+        "SingleLine": true,
+        "TimestampFormat": "yyyy-MM-dd HH:mm:ss "
+      }
+    }
+  },
+  "AllowedHosts": "*"
+}
diff --git a/samples/web-app-mysql-flexible-server/dotnet/src/wwwroot/favicon.ico b/samples/web-app-mysql-flexible-server/dotnet/src/wwwroot/favicon.ico
new file mode 100644
index 0000000000000000000000000000000000000000..5b1d5cf37d81c073dbacd66df3f69d9240359dda
GIT binary patch
literal 36791
zcmagEWmp_d(>6Q{i$hpk0}H_+c#vR=6Wrb1od6-g;x0iFoDJ?0f_tzeIKkZs9^B#M
zdhWm9alG?mrfYhnrmO3ms<R6KKmZy5fdJ1N6p%*-fcMWWQqup)Cnx~W^?VKr{hz#m
z4gj?n0Km!lKiTpH0L0=001Wm&nVJv){y_l%4*#G0g9QL^-~8A9Z-WBc8~`wG0sv8}
z%Cb0^<e1MVao)*EsXrh8(*S~w`n;z;dolw6WW0A$;+j5LR>?|=hE{~(xo1m$5$WOx
zbWKdfscH3)sLJu8Xzj(xu<713Y$3x$OfLQLhNy8}4uYlTL|y(QT@oUE8%0m6*lERg
z1z4=(8HnCaQ${&?+Zzf}>!bD+H;@yHKQSZYu^->grpOP5U0!8&*<K~jn<fjg9|H-E
z7vuwNu@j+x`=G0n*Q#dt(qKRua$cKUdDXg3#V1h^w0U-{V)E8A@9^~u&#`W~sdysM
z*gFit3~HA9y>$!7!B+yIi1l|oaJ(PxauD5x8~L*c^Ib0^4*b-W%Gu<d<%hfSSC8?Q
zcE<Sd=wpl1L8t2UwB3Z?<I;G4w2hJvVtuvZd!=Ic)d*A&pNQie9^*8{R^Hg$D_XNj
z;q9Kf^%PDnpM3qX8Do>9Sovk9&i(=hRu&Fz(W>Lscu7crQLUxrCM;>!e0m{r*JdLi
zX1#U$C?c6~)NA%5PB4y7HQH>;zWNGg*Ey4P&2YQ_)ul&FNMtBeU~#9Paylk8=aUY{
zNBfE9?{iK09V9WWab|*Lq!FiiDKA!9(<sNcn!_(kCmzQwHuA?m+#}-h5|&tyX-ARL
z487U+1pN^ppE5(t%8hhV`n!8?<j#A~VXW;vb>^k%@#WN!qU<{Fj+%hW*|2<vm@N*q
zOAsj>T4pa@@b<H-l4`u@_2#wD^c9zKGq>MiZZMnTL#@zEc1$?Q2pM5i^aK{)@f|5L
zgrL<vR!$YO8oI{3a_r7S=2-D~32n|#zZGdE2X1dgG4VXl<Bmzn2vWarlT8A>8(V|Z
z_P_K+c)0)doEohned9K=)z411+B%JG7yQb^y(oqU*iX!T=Xq{0W%1<+!dPDWy@E9!
zHs7r}y&k4(<WB*SQZC9>A>gj<i;+ACB&1u5l~0z14e#y!Ed1?D@jsrdF7%9A{jn<+
z`f|6@nMScBLwnwKEChHZ2;ZN-JZ#lyD3izYCPtLzOU?$*u?T~-iJDK(3TIf)&U|th
zjk!-2ioCIoUjH_g0R^k?)|LMWoBwG)tnc=^b9cUS;|U}irkN1*o6_#tM}T+I%2HJl
zrosO|p7fvZlK!73t$K@G0{}|X|2!#9%gE7i3h&W+r1|QoY6b%=SJN%ctSSBe9Zi@F
z9__y9xP0ZUr<#<Vs#d8weX@WZGoHGaKdY8-YG_H9q+KE5BD`8vGb(~9E?TD)1CMTO
zObYXz;#O|2Skz$!f2&{MNV=%ww18<|K!S(N*>2{I^^3JZggQ{)fHvVz&W+6pq)3ti
z!9XnJ{b2ma@Ik4GevGVKB5b^sp}QmS@Fj)Q762@%ewgc#XF?g<g3MV69h0lR5K|e7
zS9;wAKEzivr!cQ6zhA#D7YANQ&e9{TL`2i3Ia43Kyz&&m7{djc<K+55Z|TCSJB?lp
z&RMj!yx)o53v04Rfe83AWP%vDNW^&uGPE;?9*_RU5LDlY5`thcP97!$56;HNHp44n
zL~!(8055TJSdIHqaPVWA+$jW!YbuT_u(YpUEHl`9ZIZgE8U=Ly^W(tMt2_2M5Ktd2
zHor2pA#gqB^ryMP41_ch9#qd~VLef$ZkP1N@UW%tlGax+f$+?*DpBZXbUa&;591!I
zjx<avu`oyiR%mmqXH$7o{QgFscmr%&-ap%5Ui(kepw_2#LqK8(2~Rsdyhp!67diO7
zJEjzjc%hc<*L&O};r9r_6i-1m8wJVb(*vUwM2gOrtN6g#^@q9gLVw!JooRXHibPli
zO$~to>6f2_LO=15ljp$_1xD`Q%T-%Hi+CUcHxoLJ%bB8waM({HJ{AthxM&$4xpw>&
z)~qgo;6b1%I+Hx9$;au+f^H5XO#2udviAgAWfwD1>eIbLLwd0hXx=X$eo~*N8(gxX
z(2H!!ey+c2(Q&0JGf~0^pbS`FO7h1qr>93=$E++~b3R>P%D!Fsu-(4WAnqhbaE67a
z_`zwuHr?{KRq(e_<Y7V8KP$sIBK14tPR6ZuooY%Nv;uHT<IHl0nRQp&fjeZzs{?Y6
zq^AATzTICMySsOH#)29s@Jc`aN{{*grPkXByH`Bsh4}oK`}s?<ReX(vR#>1QtJYt!
z^!VX&+eDO0B@7(Yvu=)EFx$1dr}$}`YDCQkEt})^1aD--7vtNGE9<9|-OkIndnP-}
zY9YZ&m}kt!)HE`HHq&_Z>kEG%4gyWlT#s#avp#-*Zms+A>NY(5BMIE|qs>O&$Z)3X
zRS0fk>vlsNVA-?CKmcBaqF=`yzET;uIH$hRV&_r-0oRHNDgczsn|ZiOm+QCHZ*?9D
z{-k0MM44Ynm5d@+Um%dGjym_pWK{AMUw#j|q%IT;aG3{WO#UgWAM3i1L<Qn?Q9(%G
z=GEBJ{n>Aa(KHGX1xH=6DDVRH(*83nISQ^U^IDH)<Q~X0_32dR!$5Iei=##100`!t
zdqfOyR<LW>$8Oj$R#{Q6@CQ0}9^bKGzWQ_LjDUQuy<DKs^rJ}_BA?tlc@1zb)V;TJ
z$Y-QQ2H{Nn?ADI$2~q{1zrKxv(<Z5qLrH!>-WU0W13&+{^7vjRKUJg)-7yo77<Jvx
zdDzwMktB%Fp(8m9rieoVf9i}^FIP*teydH>u0}i@LsSLXC;-wIJ=;!<kJIZzZ1x%&
zwnL)>z-qPYbdPlhVEba-<2@N+Oq8S$ZeKt|HLaA4RAl5qSm#4Pw(bQYGWGpvp?oDC
zG8)(7k`k*cThNyeXsdCD1Ixxe<pJ%&e8OYpV8luOKx1!yeqZ0On0FheM3dImJI>lo
zVHAYCqX%Dod@D%WKdXMmJ!<nXP%mBG`$0>0oQGeWJRH0Bl#A&5vzH47X^_r)1Y#cj
z3A^9ukKWvSqjfI4>2QIu`Vwdde)GGGlhjxWooCSiP3Oldw+<vD<$Hy@Lj}w;<h6<a
zih(hqe^Y_iI?UIU0hXXd%Q+by{?XK1UcY#m*T1%Hc35pPKS(y~MWqsceD}hj^&;bw
zNX3P0g->w0i7zdS4n2C>XI5j-6LNO$Oi-?-O8EZ+@S)HB(EkH`j}ITt0RTPke}G@8
zWA_aBM2{owF6n(d%9M_(<^#%^u=Ro%DFaR71-yGXyt4T+i^;t2S|tbsgJn=SHDae&
z8(noFRGW~fH;*rJy)<+J>EREt3i^n;^lL&DTl{Z=<zHsgqilSSm;G)ntcM^%t7SVY
zepl@t9cS6cIexfnf8x3TbfBv)U`@O$;%4u2xq+cs^&7-OWGR_rKaE`%Q~SoDNe&rm
z2>X?!4)(sdCo=7Z<W$J+C6osqgsVZ_<}kSK7uuCiS4uQwiW&((g6ahaVi~!`sF#gN
zzEq<_Q-c+YzdDTai?#U#aBls5=oC#Ve?kQ&?EV_?)j#}>in%E3<;-}44y`dm{RAC!
z2OpHcxQdt2d5bTdg|y0A)&@ZkVaUg{Dztf>#NjLMYi&|CFb&-*6UMz(*!jfKA!7m(
zY^G@X?y%{?Q+JF8zydJdCB6`kz|Qv}9AX5uFj4B;BL(=erR#o?*6xldMT6y_o%*L$
z4aWr1vYlhZ<jHW&YDz)rplqN@#pO`zjj5>3__LdPbPT%h>+%v{xNAImV2Z@irtaoa
zY@lrgal!sq>A`;UIL2=Qd?g&9!dse&_Aw&^{XmQ6(~cTT!ZadKa1<RVm~3cBMoxDK
zz<xwpuf_vY&X_IK(iApr%Fre>zIF_ByPKaG3D^{)pJ=y>8;sp^2pBAyHtEec817Cf
z#YBe$Bam>k_#o<C-`LP;SXhV^8$1Q((&z@<U{a|q@`-BUG`7?f0oDWI-T}C9jR)p*
z<w7Md6D1q=KhN4^8q8oQ2;1;>{z63qsEDOnD4ED&WINO4dR-El)N~u9CD1vMP4f#A
zle+s!d$7@IX|1hkX$MmwNeJY2)+WNof2oysFZ^;CKd$g!U?=VbJ?6L=?Fd-UtWb%0
zl;q@jbsDvQjys9tI+Wqz(g{@nzC*#Bu5{f*_+|)@bsto14&9N|l;7HbWpXE&d*w1>
z_!xUCB&`-l;~|lBFGY4##<!2<>P9Z4j*p4S*2<m`8CwHCgP0J!BK(PvnlJR2Docmb
zTX)f1wy+Wz`K3KhA`p~@_g2j=!peV^`Sijmted$L7aJ+&*8k8K@=9_k<+85Zi*<2_
z7H4GMoE^K~ybAY4gcKV6u8@Yp_*5IFL#8wL!#<je7e=|Jp2+WhN{{shI`Q72aP;@8
znr3v)99XnIKd;QxcT>{3VP#_Uf7<Q*XBsm3WRfo%%tf)IOlPLk_4){^y!dkcHj2mJ
zL>Odd@W-R|aXK%&XBV6L<J<TJ1ou)|OheCG7sdDK{U$}r#H=JmNB2ovc<;0CE|vk>
zndulWat_+3Bc;q^m;ECMu?R6?N|C%p`irA}$8tl}yGLQSRRb(3%N<Rcgwww$JYMId
z3GG*p<f9=z<NNV#HC~*Z7ClFdspBT&Uzd0KoiJ*~f7iVH^jchM5e$@i$}1w1!Wx0D
zj2~!OC9(ESd+{%(m3zPa`1YY1657}!%bBtixHr4{XnN3om5nu^3}LOGzcLG0wfSwD
zc%|KV@jG0EnlNE+%1p0wyVns527PUA{m2b?@+Bzpz{te%r-keLt@2z-zL}|7#dXWf
ztJ^z`fUVqQKMXEo0e{Qra^HP#i09|%{EVN?I@V^twG-d|*GLlZ^QXEg=V6)3P1<$x
zi^(NhdN@Rs7&pGs?qy=&Y((zr0-$B*1i;Xrn?mq+2dhXH2ewGk-ZI0<QXT4#ezRvS
zuYr5|rwfU^{KFsj^oNmbx(NKU<XUx%K@h@aOCAaC>7wsP6}o~J-&`o9g?O@(rAObK
zP9p&ljnZiWNNC?@R*az*`S#lU&)9>vpLD1fd3;7iW)?bf)ed}-faq8G`Gse%e&Xa#
z+&qubNv<P(-PhvcJ|m6$x+^NCP<?+L6jX@tQc|%rDxglQzu;s#{k}IzT>N2UE6y)R
zSY*ygWZ#AmD5%pzf=7i!Fbp<Gbx^um^hzTp^9Jwa<D#6a7e07tY_A$EIDgED#0JjK
zHOa2!b~RV+zgW|jdFs@CLSOv$EzIFdq$UdrV5?s*VN~yql2K(8UaswxS6b&`wso9C
z2IUTr;R!*qppvi+Km{K6VjBR2M@cfM3*Ac}EeX^WrB9oN`M#sgZq&3=%<zc!ZRf8z
z#tlvl>1h65i1E;XwFTm{N!U`mG|)FMgazD-=B^>rY{g@|36#=Zw|{AGK_|v%(0W8c
zZVvp+7UshJ1;+du?&`GZar2J=n5=j|U^yv;j#RA9oc`!`i4Vq=A$PKnsM}A)@w@WN
zk-eDXfpr{b^3PPeaZriP1stvD#oFLbT#uop37nd}sS8p;>be*>`Hm{{R+c5AdF^|O
zL`~Njkq$ET9}M9H0O2%8^4a99Z?v)Rv!`oMo;2;;czAz&{2t2tBGf9&KO;N=MM;HY
zE}OCnPbm$)SOB+wdcsTxS}-V@m!UPofJEKm&RoQ0PMu9R;5GRdPsOigM^9uhr8N$*
z8ZjOARPCoDS-(+$ddhwt)f9cT_5iI>g;FeNeO3VFhEhJ6M6HRFD@uj6%gTEAG=2h?
zx+yZkhW$Cq`+22geU|Oiy=ghKJFZp(k&rWsj*n9i=fnp7W(tMQ0j^%b>0Brmzz;OV
zL9ZGA>h8SR<~1I9qUg_<$TWs%<KeTu0I8E*x_@xSD|q^MohjUvnTQ<yV|#<;I3MI~
ze?D4W2brymBDvB!AaU;?iwEF}aCxRvj2r3Tqg2AavOee6Nwph{o{584M4>f>aP8ZB
zTXt`9VD;{a5xGtm_XBof5Xc3GU76PVvF-C`r609kA^X2ep+n1U?VUfhvWKRQv&c&B
z)>OzP=*_tX>I+ugZCl?Gmg&yM&E57F&!!e{=vBP^cUpDV84wbBVD%42$`<rDl6!mk
z$mV@cnR1^8dv_qHSYGkVqdT4V|0A^dk7wfiztBbp=_UdIUa<ZzwCU6LcQu^yddl`Y
z_H)spZm@DBtHCCVRr<t5Q%DD{(aGj@nkb;RI^_i=jivLdDjt$b+D;_swUZTDGSKs7
zPtX(;ZkQ^LDfh_Q760*!CN_XcB2d^s;ip@;T@4*<hxX4QP0k;&_d1^|Qn6>>jf#;U
zE+?!U=Xi|XEWN@D2qV6fAZb|xR!@~|vI>PC^iVF|;TfZ<VoFyt_w^Odp{Nk%b%TLZ
z-x4OI(Rzl5=o$@C+-TZ=w@QOLpQ>F@{#g~)l1jnloCw9UU|?iOhmHBiC*0gt5<5}}
z5=^aiMg{l}$e!xXkgpLSiwA}ep#>~evhuO!EyT$V^O@Bkhggr$1gTSfx<u#O+7V2p
z@OD~yIy0myBJB>~MMA>FQuVqTwQ3ettVMGsXTp>$kpMYAd?vd3pm#C+ofbl@0A6wp
z3_|Y(xz1|@0rc-~ZW$YoR_1;ZFw$}QPgt#pR!(gU^}#y;T7`5vEmao>caD3TvmlX@
zK6`)Vhn<$;m)<C^tu@r&GlNli9Zc|okP#{2>KU+TC{iL)3PUf!QNpuES3MiYy&u6v
z${dYuzGx`+$$*Jkw05FkI1KEHffacP`xUa4)Ot17iu)q$M!6G$!?4d+-83;+ChIuF
z40tT&&?0G*>-%B;K*~HN1-k$OFxWd7h<O((P2wJXWVCQ8@>Yb5mjPNoijlN1aUxr=
z`(mq<o*l1-0M*(Og*I3_9D&na_-$0r`>d)G?UDJ5n9wWPo4^#=@@ygom=2?66sr<v
zkc7HhKHW8QC{=i#3E|W2;Z=OZdHQjdSG>|sj>pwQ9Vp^M8Xv9dLo{sPW%pW$;4ej4
z*BrhaziZ$U0XDpzCSN!>W@|tG=A~Hvo#W68I5A!%IuxP~hAo?IJ5{&c9Eo9zgrDs0
zhnc0a0fd;Vg802`oP^=3+1ZI5Cv^el8JcM+SttlwhJS*R)#Uh6KawQ=y|v3aRu7+u
z4(^ILMjPvooQ@WDdaNw0uZLz_^^f2jEY|pefgj7N-Y*C(WgbT*zoK!oIw(CA=9Eo4
z?KaH}{&kthRFQzd#FY|!(VMn0GTu(z2J<?-qgNfXb#jtcP{0yi$vkPlME|Yf8WmFK
z4o81F2n{&z>Ngsli6U&lI<xL5o!TSYh|Uz^v(z72V#iBFn#G)TW0AnXBZOC65*hAw
zDX;ocai?S7cSUfa$}<B1PfWcw_gw66Fd63=SKbsP43-8ECr)IfVDLH~P=at%7&kev
zR(1n-r0CH9{Jyv~c+1We^w_L$?T>el#zho%NX4}+BA|(=pixK<eU6bD8itiBhjpyl
z*zEF)U*x^`7BE4JWG3kLgBV?oGBkF@aTQ;56W^~VJ~KDKQWPH*Kt(Gb#M)pTn$XDc
z47@v7LW>|*n)R94Ayx#ZDnTA!+k~Z&4GDXd{fSBh;=yI|;UF^*Gm>UVJ{=qzJyM}`
zN~S)u;_BZUvFmdjp;oM`5oz;j`l^*n&QQ@w414NOM4bjnUiapn5XZ1@Q1i-Q29X<c
znClyQK5nE$7V)}2a$Sk=RSKLhoQ}UGrsnKNDp1X&>H25h#vgupAFy94OYte~jo?8T
zd*}eKJbNxrUx{sX``M}3nBIp(SddZ{J?$UTw*Z_qW6JjxX!_X2+-~Chqruj(i7jhk
zP|4`0uO8pk<Sfw48WQ_=^`I5?wCFM~_pzvFHH8z8OZUod)AXv?JgNV1o4J(4sEr%f
zU1;R;>#;<J9OLh7BdZ{p;qGlnDqXkt9O^DkvuBr2Pt+gkd>8qCQkto(aELOp&cpZq
z3dFs~?;FmGCq*8L#%wd^OSXhsyMio^iYA#MX#HYv=Zqzq_Hlk%C0ixu$prpgU{FG;
zZlf`PT#7PT!@=!#P-nk>r?>;j7d0B4z24dK<NCdd%j2WN#fizn`x`w=R}mOLxd}%+
zqeeL7rH%&}OoO7V?!P9<FLrb4DZ)!aDsk}xHE&4SswDOGneZwK9iJ^9%lpgLK<9wF
z!AX1|8ay5Ja-k2);35xYxRVv>cBYjN_4#{`R~DZ}5}pd4IC_6GI<7bP1*y#souZ0|
zK6H`h-@FC>N;+f8O2VG6%wt-oiFLuqXpfnQu7^&<^-uq6h3=>S_Hn;^m6`is{4{QJ
z)i?bTBN!XwQ<J>nE0@lYwQilj2=vpNwLZJAt*cV7=8q$qQ3sDbyxWj2yksu@Yf=nQ
zN<DVuN1EKxa&yhB+p14gj1aoE{pdo_wbq3FSKY78-%y}@wwH>+W}TfD9#2j;AB(A_
zLw<QQu3TG&TQ1H1RQsZ=%(6vU7%%&~a6HvyvDr_`KI29G+sTM578&WgDIpG#FWg0|
zzPEWzS<}hVMjiCf3kM;-!w+>-GIhd<`@igfe>5|wO2(N2+s!D3I3IsK+74_#F1X)h
z37#!g09}8dI!@GmpTrekBw#XP=nX7RWH}kQZ_j-JU^Ljpm+`c&TrBg3qBidrPlxtp
zapRtflpMKiFR`T@mA=)S)T@kCp~Ac0ObrUhz)VzzMS`7oq>2hIPFD2{#}3k)9I01M
zDj)ZImQ_joqMa|uULygOgDQdLRySm}A|7PK6@Ot1d#Q_VC(^p#Zx=5Bi1Xj9dgtdi
z*6>dz$Z*7-ZeEj2L?2##>xcDzf~7E^m%ac5cwKGzf<973qn};~aTqCw#u)wxl_AmT
z^(CwP6TRT!sa_QXe~X6srf~K-#1-+|3X(3@u~=(nwd<a<`D(YT9=s!t-uVLfYrkm6
z<Vj*k8vbFR(S$87fl;Sr_V7*6G?K15fbR5XU=+~t#&TG)`<QKImgA)YmXN^{id~ou
zOL*AT*f68Xl6Nq2m_`R8vxT!5FhbL31tZ}V!0$9ImCdtori}LY*-~FupP^Xn)MoSr
zJ+V&hPcU<#J@;T{GHmI!gnL7oD1}Wfe$?5=O2Z!%)NL2LI?qN)S6fCy1p_JFcc}uP
zv{VHRx{VFq78kK_lcm<7z^A^xu3G2chB-gCJhmAPZqX**HU7H(O+XwZXQhlZz-jK*
zqa~e{d!cBkOzmr`@O0TSlqOnGeChGG)8wVl`9zM7?I`p`Coi;zqceDIW(6k9J)Z;|
zPIce-zOjEW7xNkX^OUB!Xb~`-$n<8Tc`gw?sk!GyjY%fW=O$Y@l?g?#dk&wfs;JNb
zoMgqRmU)y5>KN?t-6NkOT@geyN}mCknd`q$qfhfx;9Tc;M)hJa8VKR9)C$DGk${p(
zII&;QxZAJgld;OytF3+yhUh%KxT2OS<BuZ)x;NpU`sG;ME^e%OIrP7)rV=z#UX!pL
zW@SgkH!_tir)E>U?{quN{$lb8Y>it+)9*n5Z8PwDJIx9>sFW8tu8>od-YbdX5?v6!
z%=3NkY$yKSj6is!TOSJ&gl_Bf`^SqoHetMfdd0K|w34Uv4P|?4^m<(Fr61GnTlf+7
z2BrG7->cCPLR1MktXDL}@qvajmBqyoK-Z|NHYu5n(}mzJ<?LHHS%H_<XHS20OfW`|
zt2Vz&I2vX<3Mwe&O|{#PSMue2?+?BgYpH*885mjOK%!+Cxsf>pK|re~>Kc1)GQogq
zG#HHjiaGT^Uia#&=occ)IulDC$w=spu;zEOtDicJMwh{tT3<3P9gv7-Q;wOR-Oh4m
zJPQ<!W8T^D?$DfS?r!?Ds7vx7G<6!Y-o|>4DON>U8Th}2tpqYY1Nq4U7OV#$W+Xgc
zw_nO&{Qzvhh-qZ591UKWJ*6*!sHZ|_e>d0X_J*Jkqt*g_x1eFJlu=bBE@wO9&%4ZP
zJxL_r`;Iu3m)L%iA}iDsz^d!(_Ii^h>!lxBtmBIvgpa}6X+;caio^j5Ji#cHXH{<M
z;AiaoC|cd%^5K?<m^lN6C+>s>yO0-2Q1kZg7Wvf4p3gm}l0mOfV|&qj`~6L}Zp(X|
z&lT-Jab-K8Fd|g_tReprugdGkNHAdPI&7+>J|?nN>*>SGb3+F(Uk>^Ef)I_3ET2ZN
zXZK<<zlqCIGGY&atLixjKY6^Uv8%+@7tp(p!<ejB`f!_`KwGrpb05C*yGwJyTiM{P
z>T5-d>f?us*x0T<qGv9Uyx>jB^d?wt-RE?&E4L1R6neUiW>mo%odultu6<=)p?E2Y
zlz55EG>T02Iyy3|z80k&4M0ZD?#zN@IN#hy4FE8g`k$-23soI-8-COrjM}qrvp)|;
z4)k;STB85@$GN^Xj`voW4+#)aJ0E0p&8yI8<ir+-v*|bQ^~cAs7ksul9I>oZ)z`5C
zL-m;xZNfP^k83d|?^+q{&cesg-r&*Dx^p<+9dTQoYnASpjhChBSA;3xH_?F%7%PYM
zQYwX>^8?Z95|+uwCyeup3tK?jX4or+q=B83j6;u;0wQk1%{j*g$a#1W?_T$2mP~Vo
z$>0{@+EFugs8|{qi5!v4m>lEaw%x~FU3J8NH`Im(Pqf@#1?!`wMRu`q=<H-gXR8FE
z74T0=ZN6W+zBBpVRUvx1ZJ<o1lIcin>_MQ&hjr)&eEKoYrOA>?0w7#{hTjc5G1I7)
z(0iacs!A!7je^GPN<%F_<~?@dRm$OTsiY)Fk$|AsttwGj0`xRsK>n{y5ZBwWc@m%?
zMI-0^Z&C)81;y1`F6(2GMv|3ed){n(+$`RpBZ>Nf=Eoe_r#(5lQwnTfHG;3dc-}h1
zzKGQhQa7$UW)8n61a428eQztMN0jFR%P0M^RW?2P#XinkNi1$r1|mrf@{Sh(Vs(X|
zoQxJ?PD+11dEJTm7jvwQdXpslKXOdib3g3=a?CP2w`Bkz*#2LRIc4CNn5C8al<jf+
z&~fC;u-W&D29h`+Wkw{9{_gE+mDJ3XRpSTkPhL81$o2Aa!NR@uALflFS;UQlQ49uI
zXh1vV-=y%Cru2CdzpyeJz5&s+NiNgP`JQjw9kts$UAHju{1X0vlz&vZmr;7uk#Kf5
za<g>Sq;&l%MFM09hSLfIhPPoFHqB*1CeR)9am7do^e)P>T;cu?#nJMGzQ5x$3`)Dk
zRY@lo^l%NTq7WMeo)%&^%cCFL<mnY~Iu5R*EZ>Ak`N+dv#C#XxkC7ASDXHMGjmy*o
zfF=_>TKZa=RXG5cxjFUCYb$BjT3A-3sy$u^GFTC_02>+jxXvF_$Z@fFGe7#gi0rx)
zEn{?ks0nc2gOqF?orc!67+2)vJ1Phx8ur=&2{4sKHLYCgWOxcX)c7bMpM1ILA?I-F
z#BjY5fZaHA0#ezs9I8z48IZ6Cg(am29U<(-39;m1Ek<fN#hCn!1kZ=IB+5|^Km(yD
z4e?!4lxaU&pS=`XCdCT10Krd}R$rwWyY_t7-UuE`jbm*kdoZAyO~QT<Ucn*qqC)9i
zHH^_7)+4aIi7q%G06rl35#XVtBLx9SwDKumE4)wJ>dw0_ygM${zXI&>t1k$UOqr5M
z2$fw1&vm}wyQafOh>lfgC5WMDKLU^%LM-dLo(_I3ymzi*74>}eMs;zWs1B=0+KV1p
z6x1DC%`F9>A#sU+qOHj@oA+TH1HEEyo@vX+%56ETH+tnJ(F07TjvDcMN82`LMT+)>
z??6E7;N_V%Jg_-j;9;L2C{h@C)ue9fUw7_eU3<oHxCB@VZ*hI!CU<lwvz-Jth}=U3
zi345}tRAjGXl_DmDkNphU|I~pfk=tlhQpM#L7g-7r{=Wo-P;W>wFqe>D^>a7d?1*V
zYmClF2c^FAADQ8^+Ai&Oh2a;9K#)45S3Fb-3PB>I_`vVbQY|rM6{9nxN9EP=s3{A2
zE&x(7v5-8dKp!WSV*DqcY%W<-yW&#*$cQ97!v5Ho?0x9##T)Ota;jlNb~u8ITeBJ;
z)dGjxFUCukZ!Z?%m~a@cR_G!T%B=juYmGo#_3F}ZYh=I7_1mlBKQg($X(r+NCF9cf
z%IX#`EDa$UUVf_sZkkD~c$k|pSrI%Jx)GjSj_<j%gMS<VA+|XbszpTDP^M&+!k@U=
z{l2&l{mp!-0Ctr!eaSud?T!_+Ou<`fu%6V|JC;bEA2rD*E1?Js8s|1uS9CheEL}9a
zhh>dWU4`2lbuPu1mcUQ5SEI6#kXSr}rYQxMvPd<ldB{50nBT~$TA-`h;|xhHE1<x{
zxQ73Y#6&{sBuG)wdms#)s`6N@wAKM4W8E4#mLypVED{tm6^qxcx6cWETlCxfaN158
z0AUC!D@Jd%ojN#1)tl1OFqVW$$Z|-OmXFDuMalif>RG0gNYXY%3i<q*n3tcw2aGDk
z>nO|`jQPy{T*1^EFu0uXP2-Mbzh7eQ<GujptqGe-0q!V&b7&9pi0Yo`ZPiT_SvuHY
zFmPYJQhvX7F!}BcFFP8O6>F|L4v(ZAN+oZKx@lEd#rj(I7rI(oXXm_2=0jEamwZoa
zc=S?G@JW4LPFH~^qANO4^I#v`(%5FQL_y?t%ZT}d6WEho%G<X#DUx`s^-1Ig<8}2{
zVRk!14v`9|B{0M#XujjQ;-e1;vSy@fF;L`{mSUKt1#yuN2_KYB=T=0*(;W~PB_}0P
z&~*^}4J!f5Y?<G*!PCtYE1#$u6Je7soBS(wE?##=NX@_P<l+*kfZ{rP8TC^R(4(06
zsfNpBwWgeqUv#y$Oor_V&e<|oef!N|dXb}zDH0?y0)O7}-Ja39CxRExlpt`wXORD1
z<JocFPto>rS#rMk=_P&vd@gs7!7SxxpG#fT_pc~!s(y;(dWN-WngL);<Dgb&x!yL2
z`&=uS%~e~jEs^)9tmYH>OXLuo53lSfgjA&P8`3x)4@I!H3B?*uj<JkTSn?uk*@EJ)
zP25>+a+k$c-#h!7>R`N4PHV=&_k!)IO(wd27WEwsrmeljXO%Fll}*1*%S3~CV5Xvq
z`@*1nI31A`aXjIXkzLjXai!S3xT0+zH?*21l&=W=9A5$0$!bX?llOx=o#_r3eWH}s
z!?NYbQ4x{wlCKAq$_Nas<#7rmso9skRhGgw8Q4)Iv$K*}D!(eaeR1>Qbbss>3;8?T
zhJVMIP{)uaph9urGIWWz$(?(bSP2Re4^6*HVptxc=<`k__rCrnpfT$XUK(yPRUuYx
zn@!w!${`B84J^7)Qlp|irNs(~wZEdO(L#$9fW&E$kOl*xq&b99y58M;`+OqFqdQuJ
zFL8d1Q&3k1(<0bm4Z}a{d)EUjCA`cER~V!weO&1v3dX&@9p@L?S$<401;3!SPF}@X
zZ~3zvcC#p|*%z@_J5-hf*4}Z|q@-6te-sw|Dk*TJF<xvU7Kff7y<{<p+hPZr<KyG;
zd=YBY`5(P=@<)Ce`OXAWhYxS}l%5hqVxu6Th6Qz7`Fm^{ow%iZ4@3W^WJ=(ZpFX&C
zn)Btd-SyI2S>Z!O#sT9|``?dSQ*V$yE{3vDe5s85?-yoK!K`faJ$mp+(m}`h`b4g3
zOjXfD=P_D{z2l7|217+#q>oct#r5N#vP0Gt{=<W$bU$J4N+)O`ly6PGaBtz;oL+H#
z_BYPG*u{q{4xVQdO2QmOTX(<U8nr&M=!%YNFE#4nDVC7Y<|i2#MM8VsUjm+vBJ-I2
zD2Vv^)Rm^c6VRT<UgX;Bl2dsetaqJ0Pb7_oSF_pvRrld|L3JbfRB!P82vGAfxC3#3
z!J@~~W9Ca;NP#MoYll#^cJ;^8xri#GC*~dh5re0}nz_H-(PKa7J=DES^AxI@T-Msm
zYyV<}t-VdKkU+#&e!5@k+~HRJ=u)P-A**5J%Xz!;?ctxd&ZD`JXs%B9bvh?H;`^y1
zudYL+_eawK<@u+Bvu4IBBXV_{;__D8THSLsn@voV|6V=KwsNiM`xF%BHs`NJ#!whp
zKuku30g}r4wFf7-fdZ2oU!JQzytXuJ(T{HrY<@8KYpZ(^+aAc_N80p(CFrY~5=7k}
zwsRI-Ms4z$+(%k$KH|SR+VAT+Y8SZv5i@(WzjAuyG#YihpS`diECzxfeGHg=d=5lP
zc-;TP)#!z!slk~Q^Xxk&bTq{hQe&AB(8T#VK9D9DxXtN6h6U^~UpCzzl34c*vQXTe
zyesa=fu&&#{cAWlO{khbH+eSI=v*u*u>A4p=Cx4HBhls4rJ(5d2kDf{qp$=5rb;6Z
z2D;oPN?_>ktWaM4R8)oP&)qjO&iCS!gXYIpt#%XgmICNV=3jgun^{&@xi<C|Xge>p
zz8caL19IV0XdxAXQw+-Fv`RsoJ<Rz6r7bFz5BEg_qpeTEf1WYNz(H2caL?ZtVJM&0
zWl9VYZwpZ{cQ-~X=yRaJ>2<laH6)|^s0^4k&-2Uq9Hsl%YoqSp{<MEHiH{CF1|wz7
zQbh2mau~&<!Im_I2L~ddQWoC2sA0Y771IrS&bqDkfA;=Us=+Y(^Uu}^Y@7;%t2D<y
znc^A*o_sMi?Knzx)?fXXg`Gw26cxqxhpt2)>NDp{b<a24lxt@#&X#;H#x62f<R1AS
z;c*Yz*;AO3Y~oU(QJJw{^nkHB-`RQ@WO&}l&#h;OqA~rdL@C~X<&Re@o;*GkbZvlZ
z(zw>}JP_1PAAAA<;POz?_x3*ifwAq5QZdjbLUCV!LPI$>;&ZYxo#i)t@OG0URyGQt
zmO?$Vx7YUXFG*nSfYxHJ-@bPVtdyK92_{9xfTRQhHgOYPx}ARXZm~7psM9;aSdNa(
zOp9!SmU|hx?<<R42aRsEo|P4s+oXx%LupZtVrdyem-P2N3$7pzH1CiEcDRFR%mYY(
zq1pNIu~Gsr8FrnYyY>8zAKt`2Y|%2+uJf`HqvM%|WhPMa(*k~t(?4b1B3=-3p5l4v
zdUw^CHPo)Wj;~@Oj_I&);B{xG8fF9_`!Ce=QIt%i03JE!zfkyZ>k(8qy#l$KSZa=W
z!Z4Bh?YI_2ZiALz+>12v2&15P@kkz0z@9_2sqyOvQXVavNC<%-Yp!wKUa8UZv?edb
zK>_xy9q9o?*TI-Lz$YW;0O9F<+w1?}`8QR^ZFO!(1qE1abds<Nety2l@#ERhyjG_6
z0R5fI^VkE1`W-!LeOY*QO<wh#n_L!)!SRt;8F4IEj8~OL%_jrTlU_D^{4dR3i|6IC
zj`2ce29Lm`iLwe@AgEf~Y=eb+s6^iz34lhEzgnUBW;I7_FsrvZV-VQF%|3Tkr{-a_
z4wh)&&5Gz0%0r=iL0sTlVZ#BbM(UgT=1)(su`ThnOZN7`R(-y`ywQ7rg6VKB<h0`<
z($8;gom5IO?~U%ho(kJDnhc9GgaYCX!z(hl0oE3|b-Go&pS+p;x<!G%e<M-r-xi?`
ztiHADl5`E&3gLG;Sl|n!h}&WJI-^xbriDXFjB$wYe0F|nTg(ciPkhL-e>>eir4lZy
z?R0IX-ms63Pgkch3j+GsV{y8m82G9Ef2ReL-<0V$i23?#6&>>%##hzq-`N#kU;28C
z^ZKLyxO@+;tVEyJ|CIigC|!?-%W9d~>F`+4ix@zt3KaQazchFSg1z`a22YUAR?E`H
z>bHw$2aP2cCHcv|KH>VLV3-%>^7iwvRgv;VrN%sTKuLwGDj5eaNG{e~>qtZZ1<1Qu
zh{u4x#S{Cs{)+@?Q}y$^H$*50|9ecu!-e6ISn>+(Q~TQX-I`D<$oBV5jWP0xJhf9F
z5JY-F9Ky0fVC{w4hDLjOn{v5vwxAHRnpNp9J}^YM7lcp^zm<ixg9wPzv?W#f&V4A)
z6{+XitM*C?S_sQq!Izz)uMf5D9hEUeYzwVIM)mgZ<haag{zBQ&-zd<I?>Wqf<sOfC
z)ap83mz1ILO}D)F$tAw5r+TE7e=WZL>#!`=8q`NC3_j;{n)lwyCJ`&=HA)oVU^Ytr
zR_oFGNHO3(U~BaHg+R^W+=h_?F*22DzIc{?i4U5~>sPgMNd?rv>42$O-0#1;t~wbn
zkpG$uLxUqCdB~*MKQZc<H14KLe1#EQJb2X;>a>aRRB1x4F4VV%k(rJcB2GK}OWJ&4
z>&v3OshD&pvh?aMjj{Tp)n{-f;Whlgkb)Ug`(3u@qGRiq$T&s6>Z=5ZVjjh+?(3|N
zm(r(np-}5S(s?o^mwBI^HHMdPwbzLEYw+`c_PPEetHLzBI{Dx42f7jWuL|6*LURH%
z2f26H1fGlrI_oxiP5V7DGBTr5%9dWc{~H0Vix1^+2O-0&8mo3nxV2?vpVNj%<=SHR
zEhDVXa_klCAc6hPtLrHP`HhQ3nWXzz-g^2%jvPLZx0-&f1UuhV*xHm<vqR7kgvb@D
z%*BF=B#8|IjN<*m)_e5KjQ5DjmRUa<V&Q1K=op+|N#fpmNpu(=lOTYrscA+gUPB{|
zql;uiJI>oo=64D{=)l<2#T}#g<nQsDkH#YZO(>~NS-wj&V<F1`y>e0|CItlwLFvvz
zA(Qm}pys9|T{u(w!H!6q$G_>qpidr&z50|D_iJ)B>}uYd;!x7&egTnk>q}2dIl(Ha
zZ0s)Fwtx3`MO1<JlLFXn+#rIp)v3{pNbU@L#x0*w1-IMjO(T2i&T<0<N~*^JB|p$X
zrHgwWmb4v|0r?L1W2m2>8vbcfbCee!Rw~BVSP(M`Jd`(ISarU2HNGTCe}ozz-hy5-
zriF--@{foJW{O@MJ!>Y0h^iBH(POkCqtUpV{+rPHK!}+UCvNg)83UF#qKv}(h?N*6
zzfsF49xv?+=zh5*h2(tv5uuOdAyKIA2IjQGAp)!R!|Rnd0;lt0gQl(dpCMkz-DC4G
zsgZt;RAsODR|?O_^}+X>m$o^ASd?JMm(M>8v$_`at!-cTGW=WaFs2YLooK?M%=g?m
zi;kAQ%4~Ic%a0urh5^+W6)?IHkWpu$VNP9T(YmG!^1+3Vao6LRKXiD8fABJQx10d|
z+&P00ij#RLc`&R>B3miI87lFV(}Ra5OC_C?Fr~U)&p{>@p11+Fbg@8no*(Z}5UPNN
zP4U9N3kT~m&TF4vE$2Tp4i89<BVIBl5r;N)c5bpFKL`PUL8CGYko+5@VBdbdxg|nf
zSKTqc-00o;3UB@UUM7{Fp+aaR5JXxC4Ssmg3Lr{bWP&8$*9qbS24}u?f%+Hxpg&|&
zy}o}Id(8~=fvGt*O~~YIE~x8`71GoSf6Z=1AQO8@AMhk*1UvODVsaPxvoUCZ<k1gv
zd`VI1*c@w#0MECh6%fvn){L*}LkJ^K{R@Bp0cxroqL4VhhC1YN+X0iTuEv`LiU;6-
zba|0v1@_^LNF)QUQ}%J_VV<N2eI-6*$@02n#^iob$V=P2T=KqX04FFclG-tHx_osA
zS{atQ_AOb8#|8BK-|TOLo;3U{0KwEgl<p?Eh`b-oeAo))i*_>L8~gf>wcYO6I4kn{
ze9LK?3ICJM`wlYaYMlfIhrp1#tOFGLIG3B7H(xq=Ca+VjzD>qtrE}>|1xRRgN@C#6
zCMi@IyRYC<9gOT~?V#%ztT^Aa-}`(h;a1@=u+H*5Ta;S7q2e|HGfG5$|1s!h-s$}d
zIidQ=zb4S=5trD`ZOR#n`|kfi55k}O;r~Yu_K2Dd0su?Y|LDO(f8R7Ct<+<e%J$J_
zNt}0ZFcOU!egSP<hBg^C5taF$IP^;Ya)Y(fzkW~_OCYDA<7%lT*J+`FJBr|D{u8*S
zs&dJ`k%@^}?uVr#nmP;8@03K)PgSj}Wsgha{Rg*^O3k7S7p<i2E4NNeul=0XQ9Xz1
z_HAh&lnsembYm1(Zw%)~enQVjFWGJH-kWXCf4;<Ad5Z&TRy!5a1}s}IuDb(`nYsX2
zGd2j3Tpy58!SQxdm8mPG6^aPe#j4VU@b2*ER>jtJ3%sN%X5u6nBZiPMp%>)9MNx7X
z^Tc2$X-UGH%{SxqxepH`xAhA#HB0o@zf41QNKI3ih`S5%zbj|)n|Kf9e#-YI*r0_g
z*OM_o5XN7TN{V<V&+Q0;&`p!?JwHiE^FhX!FmFaajS4>{y9<7L5r(AruoCx!6`NC?
zsbm&|B^3&|j(oEiMH`RMI{yJ3(9V*`lJGL!;Rb!5A(*}m{1t=#8M|9I*c&tQF&I4P
zec8M)^Lk}A0hQ;!XCPrSbO|cN8_C6XGD-&i3SXrSVxa_zLKpM>i!$6p8M|CzQsL0r
zdtyZ3!Q&ziYmLI`PpOrK=R0}PQ8<79!}>CmJ&Y<1tKNjKIpoPhkbG!!^X>D%8E|Ya
zgt1O@+T-zFX09GGJi5<F-In$rCh`HUH0Q)~eRGlp$2QD`H%PEsOInLYDr$O}lSv9R
zi(Q*A#r&@{Kj*nLevA8FiVCBev#TQ!VuFd1rgRqnz{_KVi_)ec3l>UOPzz&3T}Wh(
zzegtAM>~4DKMPD_V(<wAT}sK{KbPnqVaHz>@b$QOyg6Zk(*7f?l-Hu+>yc@5)cl0I
z7}#?rmVwTYRz^XN8AV&Ti`Cjr9&Ijvf4RT?vafd8iRZqdiS`91PgpM+KpX7#<^-If
zWEpV1Z8c!5#oqJE4H|bdr&te$5{e%JqZzoby|MRE@-NNZFW(~vi(g(hsWCo&o0Ekf
zBq;r?PAKQzr41A)k%$!U$G^$&Tn;?*C=~H0$nT!ygyAiAa9r8#sR>nVHFK(uNYgn6
zD`v$ws7<z&HdJ?Vcy=R%l}YUFH=cY3vJ~acbNPB=)}sa1kz=lrRhdZ5CHX{8pJx4g
zJaXj{Le#`U-dVvVKt+qFee68p%WVgLb%L%Pk(47QeigjMMWoCB6c-0aO58=+CYOog
z6b_J`vepRCFZi7&?|-h2*`IOY_)(N(#%qmF)YA3r17QmB5BiBagZa?{Ik(wj1$2rl
zB$>}KamU$XW-e=-G-Dbe>VK1Y<XjWYb!6SQnB~qJe|!P(uf!0L3`ZojsGuOT*I9-=
z6Srwy*pV7O#dw;zz}i5;^}7+P<JP-rM*G=_+yJIY>UqJKowk+DVI3pd%K@*dcu-je
zgzy&$4?6aIePj^DIEaAj#vnK&5sBoNELGD<Ge`Wi+2r5M#bLMc4$C8hpL?n67l(Wf
z5=3F%m_+CRD5#|B8pl}A{i+PCbZ>2H&Pjn}5ZsITTsTA1{=8^cd%JCu^8?+m<f86u
zSYexLw4xJQM0|nCYrIAQ6~JS2Bd6f}r4*wPsj~FDj0#MT!u*LQcx}?FBFYZ)g2nOY
zoh}yc;{8EqJ`jQ@9~{orwHndsIyY{^m97H+TOCW^q>JEYzha(9RwYVo!FuC1eESl7
z9~1NN+CjAQ<QXTj5&kc+E|$Kz?$%mmZgsk8oy2+mD=-$N34ilh)tf%%FQ57zXt(<7
zJ!6otQbp#w!@-e(2T+|2s|@eYsFt2pJ3b0Z+&()@Huyvv;@51+Xy4wqfr^fcsMjI!
zQ8eQa)DnVD|G9%#DUOVUI_ZgXvdG5YF}!k-T6<}EDlo{Fe_7)_Y$EduU!fdGl4Dn#
z%v%r#-Pr8Wz$7EZRt0%ML20Y@qDX6aKKdyA51;m0BAh=Q71kQIJ+z;FOQWeisW^s?
zeP@$?+R35dyHLVGW?~{*p7_rYrWY{`o5_sB{uxygL^(Km78vZOS1oCxO_$R)xs*fT
z*7r|YevaWQ>-KNQTTQfRhBz54uXVrX;Ub?K`P_CtGzvc~h=@G{t)sI;vEErLkrkp6
zN1yyW01u{uYwKYk(a6Qr=4bYU)U+{j?pw1o?dv3()053sm7q<yD$Mb7+*@D1vfq9)
z%eVLbhle$F*5U+xF3ahbR!ZdGa(}|(s|l8;3aGm}x$pUP>K&V0IJ@U#YU(~9N^ios
zGHNy1f<J7B%uh?oQZQwtWh$q}U-q39m0zsXka^UWN0%UJ9EgXoWYt;{k>AL%8~6{N
zZ8ex1%xdgK5gQ9#H9!kk*D>DSX)w$3^`ziGI)ER|ui{jmsvh}66sMv*%;S(Ztl_sK
zCO(IY8}AASt%q_4G%Vx~Nmw9!rsloupS`O)Zf=gVuGaE#6C?s+ai|OPxb+(a@NmGV
z`!!_Yn5z~y@fbs5i&yDl511Nh$Nc!QF|g;aTv~G7VaxGmK{=&%-1X7Pr2Qm@tx4k;
z8TEay>^nSG?6>uhicx{Q-_GH|4tdMMXtxVqkGPkTN&Rt)$w%M2mTni~7EJ52+u_Nj
zxkK6Y%rwQ=bkLsA(*ga!NF(vnukh`bzg=_zFW*VU&B~rCXbC&>6s^+YkxSf>yo=Yg
z4(CFho<FyO^_p6v1Vz@o${bvxnqO^HE}$I|BeT9gzO#ARSh%Q0<(RDDSGz>X^lWof
z(tkNd9z*4jv|O?nLG}#S*DYMCOk}ix>fF_t&bxc1X<f^2WR`V$mfSRskYK^DeB)FJ
z@ky`XX{#1N<-SZ~vR%}XwsDc7nBT;Vnw##LZ)Gu!Q2sP@C@B<9gcg5@Bh0r3rZ%q~
zI-Qr*RBy-(M5m<Vyby{4yg0naZcnuD#>6s*|6}Ew4T<^ClPI*8l+GES6c3D5-Ps`Y
z-7F|+FvTnZKgX_r%6PH?j1-G1#!pIuSM3YckGnA?5nt7MH93F$B{g-Oj6ETs$l#}z
zqxtjps|=PJh=3;7MMA*=>)YJHk(A1Cx*Dw&o-O&3skJo)Ck$qIkqJELn16h@ET4I#
zM2-b`X>U9NNr#Paq=rZI-tO%4*({Uj6y;p|F<aZQzxTH}x_T~U1i=m2BkcYZ(_{`a
zwEBw4_DHdjWQ4ZNeyb%5(eET+c!)1+w(46)o2C^Z|NV07T`j515a1Q}G(1Du%ImmJ
z5ixfYl^dY*4^^tHtkor7yi-Ae0W}yVS>;e;-ro<cAr^;pks@2*U}tV-S(8JiSTNOs
zuBev%nr6HG68^XPf*X1AE<{3nPuw!3BCPzamh_ji>rJD<>52h%836!Oa>6k^Y%pFl
zChjI369rNz&LyM;L#Wb{(n3zEAkNvn`riJN{5y!1Ql?%;9eMg{m0_L`@try@)Hy{|
zGlmdFz7VL^P?|UY#?|-nE6w@6_3SkA<_+0kDHcdN)Mm}TO6M#86zz@Y&3pt)oOSRT
z88ogadn!;q`Q#yiT%q_{Hw?W1lLr11KF1(5B8#b22|Guj7k($7N!Wr>*4|r$JC-4V
ztc?ktF9_|y5Qt6LW;zE$tVw&wGR>MaGp(&R-32$#d@VinbRDkp({`8VZ*m%Wf;-b`
znGiYZQ4ra0BeE^m@mA$CgfY_WUZ20?S#Q*+n0NhY^c)!$pJt19z(+PM>YaIQOrvb9
zJthe?!ul8Zj`FGB8JFKX@N9R_me}L5UY1XAWH>7C8tfHdT*T~W)=|1!Ijp2)MjB4=
zHSOiK+zXXjJ&Rrky5NM$ChH3&TUD>IF%`~>6ONVuWg*yAw2oO1jb3o|uNSoUkTS7z
zGVkL(mChQg+!?vErw{z>i0!#yOiyHB?@6q@*kI6UY#n;osL(o;@FnoXon+7pP{vo&
zo{~(QmxN7)%z??mWA6Ej6b8{;j6Qlh<)xcG;l8O)Sr8Mhdsmn4oXJ(K!sC;pHWdik
zq`+NlTAS;hvFG?Pv=>ygtJ_+|i;bG=@nz}b_Lik0*HF4|)%KdX2p#`zWFiwcJ|7B0
zRZFhstEZ~ddfay2Pl`1wvO>_?FO+xFHR*u|ECKl}{_F=h9UqQQiyM%C9kHLoWikRA
z88yXUzC>aFGT5<EXVbxeeqCoaZ3s19vp5E=`%lh1@`tu?QqSu5RSx$*=2a_039v6*
zG2k5!w><_8cmE$>Ul|Zb(}X#TED+q?g9LX7?oM!bcTI3x+}&M5a1ZV-3GNmkBtUR?
zyM4dA-}k$xXS#Yyo|3M97RZ|Lzx#DwR+dz1mVs<e?L#_jmUNU~cjxzd%-DZTh<)Bv
zz5^Ha7)XIvqe!T+Xn7eF$9Ni4ScxBS^VQxrsa))j8j4JF=Sa41&$7E(Qs9MBnX>cl
zUXH^^*Yq&V&5jsX1&igHWmYhb3Q^lf(wM5QBo)mJ+jou&<o;(v_ET>;`EKZG$h)qN
zLrEJH&G@FYR4<4jk;ZMmV^cVa4&HsgbyqbOwA|TD8K9@!8!EMgug1~=g>^{c^Si`T
zg>^Ux*Qe!OSfA>&+?t;Zd#oECZdRFCm1HjDRI=VSPWK!r<sx^)?zXEgdS?e4q66G`
zUAM!6pH}mSV{{`jBoZ<j(ewvaw3+#GT1$%0q4fw1vi>{#*>iv7kQhh^s2h6!-VWQp
z`3p)Fr;GsZJH|eLvhcHG+d~j*<ZxW=Bm*X*IeB=0$K~Vzfb=|_ebnQ&$0q0J^|wv7
z$!YHJDa=_;MU!|o%0U^JGdM^`g&8<3x<PTrJ>~a5_pRsiuQ}0qQbY<|u4;J3bg!Mx
zf=6a(4+1Jp9kLb-k!MLbSh<}=@YW7a(i71u^p#qwmPPcH57Z7VyNxHKlZNeIPON*~
zC$nQXj6S(0_41v@^!_vR4o0P%fM3$t8G^4(nVYp=_Qz0Q!m^rFWkGYYX+mRTS(twI
z47@$=<@)%@@}Y4v24lA5lmv`{jY0pr3zeDAQXfw<ohv#CoH2lrWn07XlKJ(c+1lk*
zTtc3o_kOQ4`7>lo-(k8V>(znp!5*f2(#ngBowC+jbWv<vF}+7rWqK)d<><lF;QQky
zY%Ndyr{|weAFr4=_MBk!x^k#?zEcr%vUs(?fA$2I*CTuf>BrQ!6J{OEC*}#G(q@EI
z%5M^Fwzwa48hyVHcdpY92z!}`&47niT3fv{wsA(I=@?7&&badtqjiSG_m0G_lU(@s
zM@*Auj3B=9^550^v2M%^^Vb_xE~a#2CcO3q)ypvADZZ%8-a$oXmdlh+elR6q<w<S{
z=XE~V(R;y-36#>^t9m6R#GK1*Hdr3G8yI)AN|h9({;ZA8D3=U8>!-`Kp9l=u&}6Oj
z07^G-3g@!l>CE@1$xce7uTWvo&m}YgUida@ZiOOBRFY)5EA-=2_(vi`HNEh&SRS91
z#ITBBegUy*GG8tA1)00`SnrxDKJ@$zPV#qRfH2C(F6_E~_Kj%1zweFvGT+y~KVWC0
zZ!3WiSw;V8Yxxs~uPpTE&Hs0T9uvn&jfHAaRbPnXg@Us_Uk>A?k);8l#fhshR-}EQ
zw)*0F?C-Wi^0+0k&sy5ry3&70?1r35;@yH2Xk;Df(j&Z|*4p+qEU=BG{CUV-j7dZ;
zm+ptAb5}TsU6&Zt#l51;%Rk@z?fFF&1D6=tMmYJPIDfqtGjDu$q-)#$^;m4i4AbBr
zLuQ(`aQ($Cjs2_K<G-8Q!&f6s9`HjS2KKifJ43-^ZL%if0p?b}Kc7g>h-;e;P5TTG
z7S3pHyUDCVB}Z4=Iy<;G=FwcHQ0^14I{scwROKn}%MNS%`EJUax6Fd^cZxZmTZGxf
z-xiuQb&!VJ696(bMH!{dAohdQ5*@x7fBl3su=jCyy-xQ^8S4s0J5B`E#yIi2G;VTw
zxbnuY%IIbkdVc^|TWXEFf5c`;KGgg7t(C>Eo6;YsB)rHpV9l;Xc3bMm4%8ueyZK>>
z?$Gskh|EFmpnrZ;n!cA(wI~}Ek-)l?0K%72b$n8&3plxX5(3|Pf*4X$CIR5A=O%Z4
zrE_{E_C*0RY$#x7W7D>>Gt%KZt?*3_x%YJ#m#MdobS58CVPOl;KipPk#D#I~*xj!8
zlX$cl_YZy2+`V|+vtf)GLiG(gOrfotKAv$|XX9Wz6C&L|aGF@Eyyiak1TCL>;ed4V
zZr8tXU$4DXREnxhPTL+|x2km-Z|l0QGQ@A%DV$Mp$gn9<5#d;c$JP!u!|-858@~HX
z+UK!>=}Yzlj03IYTE=@QYdhr7j^7V?a<`^`@Oe5R54;{02kjMqwWbH|%WrYQ6&|ZI
zkg$Vbkws^FZ={aB9#?rmeYnI{39l&1ghe`V_%TvFFNfTo3zc8A43f^kA5(CuzGV&k
z3BpQ^#Hq%A->b`2Z2xKOw0gg~`%D3O-;1snq+S(y__tkdF>Dn|?;VBem)R3-kw-Hj
zqgp9ThNS1m&&#<50>_c$Wkrg`La8EVV0H<~ZAM%T<IV6NF{~B0cj|v%Mo8n8+yB~c
zZDp;!Gv93Pr0LyoThbhQ{>YPhH_Mj*7uHB~`H7cY`l8Co@Odmgi7P6T4+fJf`h_ky
zH?P#lf+LFDq9)Gnf}dP-OE~i$fP7K|Y~0#q%=Ue2xFsd!mx4opA(V2e(<7O)@Hnpr
z&jj-$bD@=svNFuO+hhbT?9lIJ`xAr!MBLQij$4PQTBqywC)R;C)#DQdex|D~65ORx
zf4Eh5$sQ`8vanN6?6)DwV3(xuExG6D%DN{z3kpc{%o=lrDmSgF<Ln!a^4kAR9W6O3
zVJU&V2j^s5oF6s=;{I66!MPgOX|?o3=1mJlI4TQ9)g;`Q96gdb1Rf@o_grHw_$D?}
z3_=F>VPLTW$$;v$F7FMs?;63W@-!d5;7<IoUlzpaY!j+&Cl7x}MH(r`Ppm|41WP_k
z1ETwtrUz_JSJh=362Q=a-}|v_#RYQZsnr5L(b$A%>;_Ngr`yH|UZ@jOx}dt|h>uxl
z7#4g$pYdlASy=~Hf4-%=j-hhkkfuhr@GoM0OTdZPE9je!phklVsQA=Lq<Bw&S`?}n
zpo;Ocwv0D+blbg9M4rEW;&<|BJ0scK!!#a2dPlCZ$F;xszXlIMf7U97soFMFZ_j#f
zs=rG8ZEV{EaRuB}Rc6i*kROH9N3%TN&PBX&r6PZ^(r>i?`ugL{p9Ec_&CMhw&xn<Q
zQ1SlJGl=gJhKm2COdBu$)1#7NuBEyNmP)Xn{Y5tVsOFn1F&p*AEa_qEcV=hs6cem?
z>y8Xa5e7$Xk<IT;P=KV-Evripz2vz?o$tyZ_H<pTmiCpGo7Ott>x)~nPSPK5-R0Kl
zFc8#Zbxk_a?qqLrxGhvULcS<`Bt#{R^$S`+N0THgid!vJK5@t(RJXxvvdn)mFcNif
zF=dv|UA7BG{wiOPgCB*!NFy!=)S>XJr(6o`lI67+uK)aQ*8)qKJAU`<wClD=Mmia5
zaaBtTz=+EKLKPq7@lo!OtY1hdq*7&{!W9LW^BFSD^w_!BhwV#$fU1^T<ry~wzlIej
zZ6?DfOZ?%C6w2L_9@oEHW$zOAn(X!gsOXDf6+#1Bz+=Sp+qJuiPfbiHBs~8`KDWs`
z%KozV)ZlSDA%=P);)v<nx3z`q>gd2E4T?{NR4Qlc;&ekxV(p;zL3EiT*Uzpx>s3lu
z<7I^hV_EyZT1>=dW>r5K7@&$)ESy9Sd-#sdMf6f88BK+Yc2$je5F{e@jS%SY5(7Sa
z_~8conQ48K2kmwc<dEv!aK^w?o9E_$w+n%c8pEty*RP7<2EFas-t)Qm97`m+6;kp;
zlHn;`5H@K2r2`Lg&Sakjhl#z|h-g>DXEX}_y$R1;e}bi&^@XwA-~8CA=^lYcb2(E}
z@Vc+j3By%rTP7*8-3=CgL!SYYtH+|6ban;E>6BB#`yHQJuC@-XB9;kwp3070PbR~w
z199#CRQX?D<Gt$+Pt$Gb$c%-|0*KL^1#lx;yNM$5+&HXq{jf^&Tm<#@$znDps4=*B
zL#jz5iNsU8qAdm$$xLU^fV{lna6Nu^TAlVUla8vxfeTi#6|J*mSWyy)fECd9LFSGJ
z0*W@lxSk`%p9(*OA@}8)xYfQfU0N&O37AW*@h>SKe*Y@Wub|kh^B0Sv<l4&wB~sR-
zyZxw3d*5Rh(WKBGRCunmicv}v$N?C9xgH50<&*#BWDGUC0_im``)ymlu=ZeJ|0Sv^
zi^(zP+0D!Lm@7&$mh4A2>h~=*l{+hnTm0IHv40)Up0oT}XMq3pduYRZv04S#j}G@A
zQoihNz7RdB!FlSVjL~p-2?I=RW+<*fvl2hU8gZbZjN!Rvg|G6@-E8<eq(97M<uSsr
zvO(Lsgmfq$xJQNn$Aflp$+Gp>u;fSZHK`U4oTf%@nZnN)ZD%>jxBF=I9lIJTBQ`yn
zPeruRq>_K9JKs4{s>%_4Lp%isx74s!F_^sf3e<4#MdKJbW`$^Ysx_$bCI3uNbwKyZ
zT$>>{QWj$vA-YX^8Z%VT77@&?5h3w#%FN3Qu5Fq8h)y)vn1^5A%&GhogUorrKnMQ~
ztK{p~zAb~bZYA!349~_%g3_W12~yMEoCY>g4xm`a0-*Dun~A!8t&q<|S2VcV(rLf$
zulv^W+9r8g{2)}p3h0}k6;XHJi9H0vluw2;_hcv|K-|3jf{JDf4L)s*Fyf2M{h?})
zX2woBHO40@Iy0Hzb<w@LbA#jmB!%FEqzH$@z{5pb*|xQF?&S(ikEF`xx}LPUeS8=<
z;#n{&layn&x%}2K%J_nTIhOg}PFAu<Yu@Xp*5<|Y)fHf}$40v(`E?`dAFQX*)3%}O
zqCfit0=V%>Rb|?d#s!s{4OZq1fj(Fzm}9>Td8U#hC{Hi>v$0guUU$Iu)Z4>Yyg0sM
zyZJLV2eP3d4AoHk`N53KB0<VkfXY>r*e?-HEV`s2c7s58RcF@Xyl$87?qnJl=4idq
z&U|+9&UcmvOu@W+_HSjq1yk&VpVv+gZcA+OYx86$`%WoY`0T*+F!Z28lxdB+{*^OJ
zV-+Nhpo-g(g09c2YY22L5?bO0>S-qp*SG4l6T`MzE^|c_V#Nelqvxt{+7$!ZRT%pe
zn{*TX)ndZP9<O|Wm*1Zm9uMk7i<jV^q(_fi?(@3ZjfK#N8I}@&`JsX#)q)O~*qjk8
z`AZT)$7Twmv!SFCFpW;EY}GX{j(&RhU3yah&15WW77&z_G<Hu9>GLicO~Bork3E0_
z^Gj*WU=4>3v4RjuO8jaEKEY8;fFP*fmzBalwBi3CJrAo5ZvX!EdHWl0-pzxex{KpN
zhL;(xiR(KI9$3+7HrE){BS7fN7YkdZ{ex01X|FohxLuf6Ma7Q@C#a8)3LiVZxkY}6
ze0&f@Hzz#T-5HK%fwU+wbaO?yh^iq*1w%u^S%{*H+40Wu173d?;<s`v5hsptO-;n1
zP4C1RT0qqM-%+eC63&gsfQE=B630@Tj<Zqw-+meF6lb%MuV+#5ZmW!Kfdw8vO{82z
z&S6At_onM~Op^BSdCc+#gAmu|VIS9ImQQgO?bWr@u|PYRRfn9wOuDrAT?9L4AB5U3
z*H@#+j3eAW?fwJRT|!9HYt%@eJkmewnSW157)j;9ND=0@!AMJi(g|)KKfXKFx!gwo
zll_LCBlk{O_5zD^^O^)m<tI+VspQFzjMVwjTq3z#X8?s&`T635lJ>u>cMUgU`d<T%
zsaZ`#ykV$d&I}Yz#zlB|&EmdF=@%)1Fo+*R6S}8c;HpE*w7T~5U%4tA%m@pOJpSrb
zB@6a7l#Nw9QrIgQT#0o2$>!c-{(`I6zOk}52F!d}NW%GK53iU_keclWTPOAaf&~@x
zf7glGh#lnM^1O8gAUo$-t#Oi3@@h=MS_a?uw2L)xSe1iaI00t7h^>6{dYEK6kD{cL
zsebGf!m9}<+RG%#{A=u$;Yn0Usz$xN2_$`eJ&fZOka11F45lB6Se|leSb52>krX`;
z8jOpH=>Uo=?binf8xIHn13n<Z<n{T3GnuCH2YtCJ5%>N@I{#W>3GesGUlveQ$Sq_w
zuc)dMkSs=0hpQP(S=gGRpVkax$e-)Pi%jG-vPr)GP+<L>d}BWU8zU-nIq3FMbZuAg
zmn6RlQaM`^W*Q!#(;V=U$_XUuDZcB-$uD0l>xlhp{&g8za>!7&nt|99=k>4a$BXC~
zn~Y{FYJGwH;XC5)C(j^69$WP~sIg8WmoUqS^lkOcUODxKQAv>v!yI0x!$q2vQS^(I
zK{A;2RSuIapp}pf!J>|+1nWwu_}T96obJD~JhzzmNxAo)q9k?s7nZQ}y*yq4TD&+S
z5QE3<v-owSoM%plfP%1HBN*|Xa8OVWS7n7m=EVt{svSN%R*-a%UpnUT9s`4mlMI&D
z6*)(uIPE0Uso2OzaYlrO^UU^dr?#e}4OGR|?>r*#E>}g5HpVv;>cBD16ju`1lV4f@
z^2tEw>BUG{I5(EL8AS6Ykp5+9lq35HQGZWw*m0`99TjM<AzxGHRxJ-4r)r8A;v0Cf
z7?{kgm4FL=zDon#mGh#XG)cVW7#+juEIOW$eAbuo>o(Qs6?abS>YVoc6nJcYogl6-
zlADOs^;2ZeiAi9Gu`j}>swqJHex5B}J6lP}e8Vh%p+>rQ(THpPIHC>AxC9)An<y0A
zaM}m)c2&`H)u3)@<7s9;XLhl|L=FfbxUzsD@O0C{<%Fiki~aBP#O|&QeXdq}xzbrN
z&Mf}@D15&}uKg#?)3Dn^LT!BAtIn7-FHZ_aUOuOFdb7h)p9fLGg%%b&oXr+4v1XO=
zT{#uTSy4ksjM=?joM)s&U~>y0pjD&CJ;6)9Lcj=X<7?e{BHe0UylCOlU+)T{#nv{o
zNb3!iyLdc_pUNkb&(%3CfjD4j+eOQ#v9WnGW%+<j?%3E4L*9ET5r1U^yemK<xWysZ
z=IOxqIZ0U7SCGb+e*=j_`_s+Qy-&9^Rld=~R2epI`+sZY6;=!V{CMimv3zM-R#Ker
zFe!+bmJbK3aByJzigi)xaq=W%byJjNa)J%F_%Q{i$0bkwu{4oNigB=B;eo{zd0K4!
zIV@KUBPI8YK9^{++Y4Ucy)84j>AhbJEZHA+OPsJ^UDuboC(*W1tJp(fyJZbZ9yXHY
z=QF*TOYHZ*xaovaXyxEQplj;}L>&H7Uu9~rO0w6E_QwZ;4CeJso<z52=((1sp8QI7
z6sp&enwYcNZ;py|nhr}RDVk^9UfFzGcv9@(_it>Z5_cdqc$9lwaJe?3bzU!T?L$p?
zmM5dE>|B?UMwBn^tUQp(G&*gvAmB5RDRS2J)##;?u%%gZB{N76xCt=!c<nI**}6vc
z2~>haO|e3B;`;8pbZyOd>WrRd6eynitYS;ugAbk#9Y+{4PmS8|llE^9x4GqXQl%XR
zmeQ9e`A>C7JPtp&4cT7VKFZM*K4gByY-w4F5dkaq{`wl^q|Jo^5LVHmpxX^BvzsdA
z>Rzu4r~kZ@#kaT-f4=|^(K3ae1yXguK?LyJA8W<O%jeo(7KtQ79cf{6e$pIWlO4hf
z$N&CH#P!Jz^hG7xt2-tW2_|%v>Bey@2^Qiu{g<%`JIa+)wA+O`BOzc(yXc08%aJ9$
z#5mS8-v0GL5!DlR1`3Wv5>+|mFyJwhgwGGE^r9Y`#=J2iHE>;QD}*q|h~R?6W>OVW
z#BNKgO69^fecAC?fA_v%CKh+EIAs{OvuOQWj<b}P|1Z>}%I5!OPj1-xeMXZljv!E&
zMC)6gU@3h2tpU&cj+BMV$CXnf5z<r?tg{z4G+Pc^RN4(_x0z$VFwkK?Wl(h_!-bZ4
zW|0XwQq(_my3c~YUQM#yoTscM%2DP8oHIicH8_TFH9ShlGfM<)P-sIz@-(tVDr}z2
z-d-v1dThmM%_3uVy|H=SmD5hpAydq021NkuOjz2AY1f@1T>0Hj<!Xq}K6IzqPg+`d
zq&O%Ku2dJ#9P+YS6@BiakIoLNT2ph%&xk&7DXqTV>&7S}51f}Qyposg4nk~dvUp2r
z`$L)Bf3TUNs7xPp`j2N@qx^P$@?3C=+$o0x3=Iv{)g&@*;i>F7oE;sfbP0|!5#W8K
zb0+0W6d}>KPWJ~A=K0IM6sBg@4<))4TOC%D3Ba?>_Og1a;6;c<Ux<_Ma}=-1QOx<I
z5~9AIDF@}sT1g)Z_YFAHl!DohTm=$UIFmu%^Asg^IuwGBsv8I;K4+ar-P5|Y;N2v-
z9Hu}9(0(Qn_Epxd*W4r<UlUuWv7KpP&uYaFjVB{w(js~3d?ISHm;A0i`o7d*#9^!D
zL}Xp~z5;nv72Cb9kaE5Y{G*e0b&ot&YS@D%ts@QNO;epVbBSDFdP2Hers+F=^N9eK
z88Ivmm?WId6cLSS<^5-Pv0Uju9F?FUBmcgYhVPdMK-*cahp*G!icBjxV&-30r<4fI
zn;!AvGtuk?b~a)P8o|VH#=MXO^P%qUgSy*!PdQM^&qBQ#M*uRad_aS;7`RK(M>!7M
zTsT$L_577QyY7-du3sKo6T%V!$GlLMA|+D?>wSj@KE1xooM@wgNw6v=eW~I;QXJNG
zfB%SWp~>DTojzy*Uo|jf)W?<sGWjW%j~XhG2AX1a_dQ_<Z>LW1Q$B{@+0Ze6gH;jD
z0`|Kj?{ZxJ>q0}%(dU1MTLW`HIr4*Mv}bSO;UVQy>T`7#%3jm?XKlcy38kNczG%ez
zN)Ra2;QvRsoj4D|s|m&^JPJ8?qp~S=&$cR4me^QNSi3zbcU+HeYsKI3n?s=Be(^95
z70RNDf}zb*>~dJNT{q6ZCbq{w`v6v9=1`R*dpd4*<Y{s~sFE(B0*fPNUn1&f&k8=#
z4=pn6<aI|rJ#I7Lw#lO&{&M<M<Wm6YpD^XrRpEJ>%Mxmrpdv+yAc8H-^*9<sILld@
zvuM53B2ndN?-C{hOCmPvhAKTswklwY_~G=+%o>eTOrUUpadZ@O*hyc~^o;jW-wI`?
zrnTcCu<-9_4k_MLF6Oja`oFz26BG)4$@PiKVBjK4MKMDO_9GKh4=5O?kfVxxG+-G`
zqkok`!dPUHSYW4#qoTu#h{b9<?D+%>JPamyFJCY1ef_%fKzZg|XMwTm%n`|tZ~;@^
zH`)jSmY93*61_YkV&Qa}%I7_CeNfi788SRRlem|gBgTk=u!q@q^me6CvPE3#|0Hgk
zoiGqk4ODHqOn6UDKFn7cC7-UE+ZZ)XAJJ_Ly{IxVJQ4s72M69^AT)ya-N^2v<ZoYe
zw^EdCoBTT$WClxNQ%4rY?SOX#=G)!3@(O1@0R0ywx$ybWKZPPNhXHR0wLYUr#jm9L
z#w&^)wlU*PEmWTOC>Ev45pw$d6?dJZuQLDO)aaS8sqmcx4y~&g$E}IIwNoNOj9?b7
zF1zp1TP%WUEiWY{n;qBdp%B>Yzo6l51l`Qt0J6&>0{}TP>_@nRDK{r)2f%(d%$W~K
z@ovf`!&LK>CNMiD82~i9CLm7}xP|L108?^S#a9M<LOQQ{jy3vks|)@mrxg+chzUnf
zY{AW^N+kZI!xoQF0;@JJ^;JFNb*fDoeS|3`iqWds!J<f?^u5Y5*_+b)TOr)zk(gP>
z8RC<$7N1w{wBD0ok!bPdxYi;usD-U^b3KnC^6PyDaJ~?mfsVBEheBi=5h5IL1E013
z=X`m!ud5Qz_ZQ=7Z=JH~-Ox<GPk;V6#k+D#TDrzT?JBz5z$ay6#eEJ^ESWyBDp(sz
z!qpZ^v^OgI$??UNv%KquY4p=1Ou_QgI$?H;^Pf6ZS&E3*EBUQ{N1GWgk!_G8J{!Wq
z&C4*2eLX9sk;gdLCudYTN>1Pf9@AD^yPt$(L8P3Jf?38q<cVPli7xJmHWylo(trr~
z;Ha}P*3a^lJD27^{_<a>Dagr3uKl${{!!E$hAzuqPwrUq*><1h?f04VeDsS+pO_>3
z7no?XB>4N4mdW1C+2qNtUMyce)=wY_E+=qCAJ($j$?B!sDLO&>*}uYmN_T;~!1Ls)
zm2GULAfZw$U&&46p!b&G*xLY2Zl_7h;Jmc8niJ!PS8hFeg6z;Fo|LE%Ed&A-_;MYl
z%a6tnt*mzvn=8b_1(ytg6A>U@Ygl4}(k7S54+|3WQKL^wgj`C9(Xe}kBGH;sr*HrX
zj9j7bPGU0fUyxPS^PfLC0~hfSKKnIm*S4U!%_m{RLX{z-ZOOuSV=SE_Sv^v4gQ3;U
z<-;tMk)4l$eh&ygQ(mQ0);HWZTx8jSx#vkYnIHjh)S<DFukL*O>!!#ZgEN<8S<DU>
zMtqnZHf9(tVJm8Z2D+xEJ2v)~x~to|en#Ni{taY)VN=)KWsF^v^xaIQS*LEOR3qI*
zK)^7rSX}Ew<cEBjZQWuU_KEjY{^<u<1i!KO11dIR#AZi6bS8oSyusd#3HRMBw*Ob5
z`u}MN4uXz?fd5sn8n~5P0RU^w|Epll^Y+7CTpbOZ&dTbvgxA$*=~z~4USeo`U)ZeW
zc%;>@<#JHG5av**v(@A1U|*#vI@96){r&7xQ{7?<%L0QqR!L2?o`EV(@E8_M5Yyde
z)>T*FdwMD)-tmdttemSCzk9!Hj?ej9mR13G6CbC&(F$j6z)U525b1gHk&J{`Vl}id
zHl==?G%y{a4PA@pkI43_(>?deN^UTrBaq$4+2ZD4aUM@vK)p?X$WIhI4I>CH3;}SC
z_rDN}QbUi>dS%em@lY6r)@w88-MwlR^oX0xf(wzz(lAn56A0+S_~QCfKt$*izkNtX
z^Z}8<LMU_)<i<c1BZkltXo%yS5a>!u;sbo>eTW6Pd;l}`HfzgxVCCEJ<DGwe9h@UT
z^i467(=T&;);YwR7NT6SG#>`LN2e3{)VjMX)Y0MQF5gU1Hv=wI6<1x&oK8vn4)P-v
z)o9KqTR|K#bSOJB3>Zbw*NAZ?hQ7);%RsnN7R!lZ8)Z??M-Cw*z_Ouh_W(YQ82SM6
ze-C5|`YuE<Jy>DnRq82-9GJ}1QOWI(1irdSq}Z{)ND)Iu)IW85ESR<oP4{JHTi&hn
zSiL5x&Uj7F$*)unU#B^AP-Fw_J$@D&RP6ZM?SNV3jTby-H)!nAdY@akR!_kgx>VP^
zo#-TM&=&-Vgr@yPQiN`FRmRrqru3q?PY4eXXCIs6?iH|b+=eTefj;AFFA!qQT(G56
zqbFO6G89vC0V%#rN{RaS3QX=+{RI&g*$>pCiIw9OA_;MM-<A_c{wsL={gxOb8Eu@U
zCj7{?D1IAp3bJ{exW7yaVaCz~3cl$nh`Neihge=M{eppL#;oG60bKq&3-&UkRszqw
z5aAj<g>A}bZZkc65%-@00vZad(A~>6;%xWRz(f{A839!`hej^L5$?0*-JKp)h8;(d
z!OmPq7k@PG83?6${C&nPqu`;1la`QMtv8l$13P1(==$)__WkbQYVOJ(_Atq&k~Y7;
zQqYOgP&S~B{vqQJJA@9@YuF=w#Kh3V%}B_u(L=l@fY4%>rX~nVU<tuc6zeHy_4{2l
z!pCiCe}HmNsSIsK9Kp1>;I5n;3#w>ltHb8w$HM`8pW&gS@V`m2nZ5yd;jwi+E{Dew
zBP+SD_@aXv_Tx@ovyBgNmJDw2O`zjp+t29C^?3^y6FahCa=8f^b~YGA2{D4XL14uL
zm;`v(>$L!T(d+co%Qypp+qplU)pC!|nvcV&RpEPXOj@ITu9eLw7*6^;fiKMg2&Cs=
zHq)tdQ#_eoCPFDVGW2auGL-nzJ}=B6#(td-l=)Tq^{1p6=56v9$EtyF=Gk_nu(9?T
zlg5EL1t5eHkYXi)Yl#UvYM-_kpX#^+;@2dkK=|KD8ya716MYa<7^RJ-3ZFEN2q0{j
zhL6Wx?wSGcBy3=|gU8vBSe(F+AO!%r-P5B*c|(_Sa$fIQ=FnN&9o4HCXofA#<HHl*
zW<vsg$in)aLN_4c0h8$nwb17F-!z679sxe=m}(6jtOrmIzUuyo$JMiAy<MSh>OjO@
z3F?yz7+LfS*7|TC<KD_$d(E%1MAVlWjY+3~Cj$37_B=q@2^i|G=?oXXfA*g)>yFpb
zVDE_SL+*<IIvyDpAI0j`EhZ;R9(#IFEgVBE#;4wlhwqJ0NE}gTtgWt(JQ@S!sR!I1
zCSE5$zen8`0xtnN3Wbx3jdG9{m?lm6EHg@v6YpR-4)l07nhVf`AdWZ+%^oH|`fiU}
zlpssj#z`lAOD9xbHlauVmY^^7NIKSH{r+P}nf3hLTFi3hzlfjvHBaByKaULKezgPO
zXk`pB^?^rT>{sgduM&xMCk~{q`Rm<v^Lu1^CS}LiH1`%%WTSm@zjpNyKO`9YJcVmI
zjcldNh|rrej!J`Dn<i+sA3<C$H_k}j-oKtvS=(n<{;q!gWHIu?p^e;U{0WZ9bT2S-
zpfb>BbL~z8>0skS)HLmRJNd5B`JM&8$IuUfr6w<2-Ua-wHnR!1;I4$AhRSAo3Z=fu
zs4v&0ub(LK(h_{a5!E+R@N`H3WzK)><M%Qz!R}R>$ZPmgpQXtZ&_3bdiL_ti6BBjE
z;>yGFeO~%K%ftEbnKl*e8aEEE+5;}Itd4pl<);iTyJ^<b510_R`do;}k1vnPt8Kl;
zfrxn^9Akk?M7Mup;7=+wG@^Va6NW7&FI}7YItJ{ANPzLJbh?_+$=c64o}Amu&p9fD
zq8G<W^Zh$ckSnN&Qo&W0`nf*L{qPjv_}Bxb;sWB=?`zp(ihX4)>bLy;ikAu1j&h2^
z)XF8+?Nb4#Al(OQPmVtv(Dqaj{hV#XAMJj)Q%_C*{gu?GZ8_e%Ck;9Mtk_fciXWFh
zm19jDbOyqiCj5+8@~pp1MXF@wU{O4uKCORe=ZTQZb2k&L!QV~!_v-Zsv_W+lw`H+*
zH0zfuie8ADmLQ0vRy%_pSobk9vw($#`12P}gp&D#n1RQ0&U+!M?A6qQ!28CBqreLC
z*B)#gSo&<CLjx)waGwjbU(*j4MC*g0%h{(~Doc}&x8z49MrfzJhrP0byw=m6#k4B*
zO8Brm(H<C_Nixk(vFpJODwJkl|L~P9u=>5l{UTRvcN&tljky!QK0AUu@TNBf+)szu
z^H$)cD8Ze83wNSbkt5kfAZr6Z#0J=2h5r*;kHGDf5qQ&wJDP3p^qmq*WFqUsh%Nu%
zFW4%o!~ep79~#KxJcxXXCHD#HWdr}7-&Brwm%%ePgG+Vft<Sf2jkc8>Dsa2FkZ9|K
z4&>Og3cTb+wyj)nfCDBsD6%S*N>-ErCU}VMRGe}sdPDNq$9x9Fx?t4(McdQS<}tws
zwmg*Hj?f=Hh*g`}66iB|#f_{z=f?oCF(W6*!j;+%G%045!q0P=Ac9mzT8#uClYlUA
zPKK=o`^;d{m5uG_d(@M)xhywkr9lkfYR5j}LeA)yiVo-`Lv^^KZ3M$@-or3rg<<4x
z8QEg=iYKSD$5@k&mixL)&D9toOwy(ji9+erNA$~+N6qdrC!ocO;@i0(C~hF2zcO~O
zGokHbAW#<Q8$1X>Gtv^MSxSLnSPgDu<Z1U?&{VwtR(YS@Lm4V6NG3x?7v#mXlvCSv
zhEcB+{Kg`?;Nf5&(5SVK>IXxkUDsx|5C)JTt}um`A`~alyIp-wl6@b1uCRsQ0{aXx
z`Lj7}`O{d7nU?-OfQC*xmM@Hw3<2XtprteegOV;u)F^<AD(QF?KNX2lc1}p{U|~tC
z+D5xZhNg!|ba@~@5Ja$JZJ=~U0psT8mT0U3%%cnk&kBq6@nF2MC~>`^e?LU{%OJjm
zVzT2daj7WKV+Kh-dxrq`9t#Nv56|i*q!*nZc&*_&k3p!lRnfv%fe#=Alvv0gFt81`
z)diJUqolvmlW0WRd=c%<`UYqa4vD<^%MGqq4&Mi{f>pSDuj7WEB}B|DvBePyN<s5%
zrUc+f#P^7jFya`Ih{=SBhL%EziSeP-G&=Hp@u8_`4(s5n9)&<eN;Vr6O6Zywt;66D
za{6L)iA2g-jC)j@30N<llRZ%%g}%u=cLpJ*+YU4;>LejnN5cP%?PEjH#<nFH4f?|;
zTQ;8;sAh{OQCMG(5pLRsNB46Deq?$Q#{TtXOD{W(8$pm8!kSLTA?UbL1(5u+%w-b;
zsAlQS8VJlT2$&dmWJYpJ$=S|XK%c7=j>y$&h8?>)uNWw!^`(VC+Y0%^h)AWjR7okK
zOhgjz4;7-TM~KO=<GajUhoh@2IF48IbTrr>pWt4zv`@|uP8FX;efJSrXKvo9)sM1=
z83nxkvTcl#EdFewByyz-b3(D*QJLIf95i5Dw3M>$X7=!}0eo>qM)TwVcV&-p&Ckh=
zRWHW2=?S;VYvLSVh9$tc_Mr^RY@qhH1WG&_<vE5G8AE2c#7tSA9~`U<h_8uvD=0E?
zY+TIA2(36h;NN$mkv}a#XW>GDeK-0GlR|rhUOA97#b=U+i>}yndw1SCdk>j|SLjLT
zky3VZY0jV2QLZSW1=Q#J9TUF?qud7B5_2+Qy1EPyix3vT82WvgMuu8%=!@cy(MMo5
z@7uAX%!72{{2sDCEH>tbxW9AZ>pYGgy7`Q;tmK5eLFSjpmu0kAAMqu>E@g_=MbCOg
zN%XyGr7dicjA+AXJFk8CE^=c#J{1F)5f%)2Wg!J}z>yjGtUtbWRE#o~ZVCUEq<Z`S
znb)+Rg@c88tD#QMRTa2;Agye^2H&9+VimVp{&j=U9^dImQ^TERFjXDyIeX1>qmps@
ztIk>@He$shYb>kHz@gJt^JGrx8R)fsYED;lJ)vc(B@n{i_VwWpM^Z*Qe>OcL%2-&U
z;tC^T$r1?&<r<m<SmuzFvhyhheAo&!HP<krH>(-{FQ}1>-a58QD|mlyo_vwAi%j&k
zD=pYtULC5V&Ue9p;RKUdr<Xv><q%PFRr&KMy%Mic#DE<FMb;uP<!*Heq%be>C2h6`
zCucoJ(j+47e{YM;X~um)P>d8qo7%+rciB!}`&qp?G2g{<l8znse6;4T9GmgeaqvxD
z+iXvPVxEXF8Fy?u*5wn>SoSV_#CZqq;-3^UUBFGy+@rNd%mJFV4<Kb}jz*Q-3o=Cv
za`N|h?a<?0yUB^cQ@qc`xRwEADwm4KiS)$yzIT)awA)cWi6>ZivYXF_GWK)zYO7}w
zDOoik;z@~BOYv=^Zm+j0PAEt{7-9HBF_Mzjm2iqsZK;LjS362yjzUzEk>KL#!Nfqg
zKTvbU1sjZ?QmRQ(axw)z&b_@3!)6UjM1B0dd_Q)9DPV|-Hido$;ersx&`#29dv<WO
zk2oXpS&xun@0Tw%<n-|+kt<f@n#Gf(_Q;$`-MdOR>GHLFh%e0y*(;ALEe|=tL`W8I
zZJ}W*(T!BMvtq8(X13@f=xcS(%FKxVO$k_+FJZk$bB-$ZGG~eH#`;KN#x?BV5Wl*D
z^}XSPlezVKuGRIR2*jh4)En=`oGi4+oik269MV**%QGNeyM{)Vq?0*5rRA@QvB)(T
zJG@z+V9Ck<UN`4}Yl)=894{$%B2*n9;Z!lEenRGyCQQ0E1WGFwl5T_`Kk;&(E1KBy
zDYw-to8jPLOgHx6;#cv`23P&2{&tf4;{Yt}S0%6|j-O16)e-qn^TO1)x`Q5q4;#Zp
zs@@eWf?a0wutyLh@<A?<cFbb^CgK+(1|*wvtryBL`3yZzN&a{~-S_c35)```zymkf
zUk<&|Y6vf8Xk{ynX{(sZ3krUvkYf@s5|v>E)tb`_F_J>(iLTg+Yt9r%ilL3?qv(3B
zAIN{L|Dnn_h#A>Mw)M}7ng+YH7%8n%_tvr0^eReiS93w2V{vdfKiym3sCRgNPmI8j
z%*;lZl2Z+V(Z#2N22E+OWO<wePghp2My-7wtEH@=X|Vl+<XsJzJOql?JE}$^E6Qk%
ziFX!xAit|y*FjW{j01Qfa@9-@m%T^7zoov~^$U@bi3I#`7ex{j)d^r&OMYgNl{Vr1
z)E`g2-TG6*t@-&OW3_d1GrWj=>UC|$p-7B&R*TBlowX)fgngFCr8sL;-8lbwIB;R6
zC$v2qI*`ni)o*y=K{lq8W+4cadYM}%%yTWaS8=0(Z&Te+KPfuqET0YKgTY9jCy2jT
z#L*HKCEG|{?+#MH{(S@})ryakM8FqD8o^oA3mzyp#LT@7AX8kuvcyY|vIzkF_fEA$
zgyNU!V;axX4Ht)ln$y@iHk*-?6xx*SpM-pYK;4)h>uT4_*xHZ954|u}5g_Pjaa0Uw
zLWP-zo}`g8T7C1)A{ZS&oR@shimqkEQta)`_NT!}o7;L^*6DeBe)Q$+mvb9EvHE@j
zISJ-SYh)W-pAGLi8tjChl#=dX-E(vXE|~4*7D<G%n7n)m69;VzbNFwZHwF-D*&jP<
zO0!dsg_QXbDRZ`*ah;%vn_I~5xfyxdQ|j92e*#5dp-i3pz5m*q)eJ7RIZ9_#^={Hn
z_(Z0DhPdxKEQN*2CC-ji>^Gk^eNU)_sZ=qW8D?UH0PZR&DXDqgqpopdl+W<6ry^e(
zX*TQt;i}8@DY}_oYi0E-Z_m&rb)>dIqs{Y0vJ@#K6w16Nx$N=*A6%O#$XV^zpK{7b
z-$DfZKY%<h29OFYM^Gs`*gDk{51J2?I~oEe5JPXtFOmh6`9&M=zX#lRn)FyU3fa{Z
zpo;)18w@v$TAH?lfmJ_=Sj@0SAu8+5$Y1aVWTtiaF1SRf!sY-5M#>ULp%Qh!pea}C
zY<0sWm+lnBr3X^M?6HrtXPMkIKaFcxDhftIkpP5_V~+yLiA!olderTc{uC$Rx5gqr
z3<U1?kL<<{@4UC1Ykww5N$Mp0K%YsC-ajy+N^&os7r&vFC2h09czp^3qd)u@_Qdgh
zg~jKGZM(mf`;++)QRxl`L`3$g8>$7KoubDV_@0TZe0u7!*_vL4_^WbP{XRIHd%TeR
z!h^X~wXj1K{LMdVU#tsln>K?vQ;k0A4e0x^eeOUDzlU5UPjtHV#5(6V9v2W3^&X4v
zf%LPnM%uy)?s)E3PzNT&d7NugEW^i8giQl%5_4U514G^f`tr%se(YP`WjCV()Wlx#
z8rC$`4?9)X8qVn%>S=$_$wj0{%yGRAmSEB4vMtU4iJJqQP6g-gfU$Os1iNG6b=u)v
z2VI8%B*m7dlOyXwHY&R9S3{e_!_P&Uo0R@99|&?Zj}92oygD*YA_jm`R-z2_;;>40
z`qDVKK*vCVDZPWDz$CTDGCR)=FE%4sVQ^5@&qF+YaX-Ai!OGohc$lfG>g&^wsA16Z
zlU5jlBE1OlHQDp!N-J)`?q1kYEv-@uj)SKW?75bjKx5yEvR{immz~MG`jrYt({!b_
zKsNOAG=p12g0q~TQM*7BI$RBig+DcqRAfic-<)zaE`^+F+$jl3*RyA@ABk;zZrqzr
z*MwIy+Wbo@t82B0`~*QkziK><5l24eH=k$@I;rR)fkuk!%b4y$j6|M+?UKCx?i9GO
zFGMxOB7N!FuQ4ak*521sQ)m%D!GWa#uh({V_#K*ktw<aJF5qK0BMHBu%QuV-;|MsT
zW_z(irYn|;B0a(dJ6oYVOTckcvTl}1!=Ihg;6J&((shV??63jQ-CShxfa3xW53kT%
z1X|WLw8XX27FiRMM`68Wn)6ZkZgW}_h)<;kgSa6TSEHjy_YHQW(Xt#D?cCoOA5-`2
zzRY}OdMcouW=h(a4JNhU8cxSI9=YW{EBxy1tNh_UeB95c7xrlgb{DlOIbIO6&%Cnv
z7y*k-=))JNLm8Pp0%1Y~^`&nk+shNBUpEIeq<Nk+rc|`_<Q~0Ow^?5c-Qzwpxk6?w
zdYEjT>1jrq8)xfJ+|~7us)}BV#$88qu6-lwO9P$@gvT)`|HT+J5s!HuRovyPV4OsD
zBNwVP;}s-PWUCsg-I)Xu`*`=~E`No85OP}RXEJSVrv9}SeqF0o;&J*c+1i8d@T-a2
zZM$i0ZRUiU$NYB*Cr}H<Xj>+rt*-r0@m9Tl0&YaWP#Wpw1;_)yZ1Zsu<iN4U<M5Og
z;V1sMh1$ITmTO47IU3)(B{qM!Tz~MO`M<y3)rxkaq~s*{46ywzG_7E5n@!x($XF5*
z8{oq%T-LB(B{m}w@}K2fzSBa?1x@IEvBH^<$IqbO>3~Y8ap$6roBq{KO<na!DZZBJ
z&&rI3lV;x8##_T<pFrxhR&MHFOW=Cmp9kMU)CFx<5Gt*h^%<EJQMNUTM6G?k|BM62
zS~VGfw<#9+pF{hh9!pK{<RVXNOI?!yf8V=C7_r~b%Wl24D?9e$_fD+Y+T@$l6U;4I
zL0`TJPN~)mY7?|BrSfe2_4tk*px%ipnzDXkHCD2yUKZ{%m;f~^71_z*3Y}Vb;Nr_f
zfc#HD4#;e>P_8V*wat!H`0@!#L3@7lC$IVMExxp~Uqt8b<i%<wwxOae5AK2Q(_)Sg
zTXh5`1R-hx2WN4UOP<|K&tq7%OUGxL$BDh*V>u<;m$N9BqDLZFzXja8{B1ktSSYZv
z?9Fwf!0aj2i%_mE(byUImZl)|qDfiK35Z%iZ@3iIlzVvteL;hGgmF+g)+Dhz@emNe
z*3Ta}qbJIX)X|c9Yb`b_=yjtFy+eh-DS6pW4S%fM@fCBo{e_+UfC30;+9rk*>{|H-
zu>%-_b%CWsRMoAHe`5b*x#vi0qPaVEfH6sQ^Peh#&jvd?3ERJ%fYG~bgdardNaM!f
zdP6Bcw~qom7+{zGObh&s`I6oWrAbaG-yihv84p@bjZ!Q2fLDH!_1^nL-*Yhnw+S5*
zwp*LODCA(%Y!d~);iDA>9fQsK;LOx(xW+kvU<YQANRXD9vTQMxDR6PR(E8Vf7nVte
zJuF6bF3DdKK9Z1lK9s?D5i|+m&s=UYBq*G>7fSwNww5RP0h*TXj393?Fm1eh8yacg
z56||?q58~)XZg{b&A+v@+L`g`5jkknVtb}1*IoxN){8_-5X?yykrg=@JIb-?JQFL8
zeyXrhuVUCy{5x4HWh!kV@Wx)@^MM<>XgkQDss0|Z&(%Lk0&;KbuKUYOvmbjff_9vZ
z!V&3Ug<Ro{28&`If&m`Gz(|LuHtUa+q@cn~{AY|X8!0`Z9pJV&JNkTP81%EoGiI2^
zU3pSR<yr|*_h|G=a$<E6mW@IgT{1fjpG`!^aP6F$-eA>acaN~4KO_}u^sjP&Mjz^o
z!^_>ktOlDMOB0QU`hlgzwCEqB0KxG%zx6KL;bibw>&wdTX1bCun_7egOq^AhppLH{
zB|YI{y!RLk(~~2qM12bpr9^;W#h2pDW}Mxtv$rL+UGDv{q`InDR;ndyjgh;Q?75B{
zv9|d?Y!|irBe<zVkQ=c-NWj94a(B@%=4EvyBQZ<^Av}_G+K+oJLH<Za#<V-G7b@@V
zeoMI5oCr#K>p{F_ACNq2ETt61(byeq`nCdDZnOA7-D$pqy|eK!S<TZl9EYM${{~K%
zl7wKfhh9yH#wl;#eS$XooV0JPzT*dO02~oGyh4WYhYmfJN3d9LG(T6(I}m|H-`1N2
z3+f<>|0+COqp2}*<$<6YHL=QBM1Uaw;J#h_+HDwYS>7tw8|rbHYxx1s#8y4Vmv*74
zV%X#NHBk^(bnc`@j;OY#LB$GCKNBhf`Y<bZI+0+{-ckF@Sz5AH{orrumaz0|oT&bE
zbs9gsi^|ydC2aj9`)`{^!3R!=jsEj}p%%?4O%2B7@$mAqg62)$%O5^{&2V0-B#`Eg
zqjDwG?qa({<T%O`{N@D+a&dd#!M!?7R^!%{FU?}BHL_NrcMeACL@lPJ6|rD0k?%Cb
zuPW;N*7D6o6#`uDwcjxBTQ$F-2CCGUzsY`6Pks-lcEKF9$+w_zn)BedCP$19<MNHp
zs#FS(Ky)SJ4Qok<RHIZ+nzsI=t4<F#^OHKW7)@Yiw}TKUqeIn1!%7Mr;!@JM@<InM
zV{pITe)EH2@EUA(uN7iaz$U@ZF|oXkTPc4;Za!1<;wVEf(7YCEhXN5ZiPgYb$Gv}A
z-2G{+QbVQgFrwFM&cQh+;8|p8NX^rG&EdiAWOJb}fw4N{@QMyed$FZXi*Dno`Z@%Z
zvJi-j)!odK)t7XXm<HKlcK7e08MpL#%-J?M{|f)lurssvgqA`tK3FeRO0*?5@%w>}
zDrRlFt41833o_9*Ua$9bbe&X8BM=?pLf61--D2Yra4;_R2{U$1y69@{S^-bUmCp3I
z6YFj2N7TIe<LYa5$CBDF7n|!}(RpIilI(Oq64eYF%uqqgw-?v(P}OZ32wyM3&pM$k
zq|@S-Vu#ypDLx$Rk^ZTGRFofW&e74v*=}I!hIr<AL>~$lEFHWbaF2C5@f>qn`<%9%
z8-GXEpW*$b)ug$(gYl|HFYCx&_*P1R7(+>^2=XcKsQx`&DRrH8%RD(rWrjvO4`GX)
zGPW5v`Ou%-&jdQ?lUq+bz{%Ah`ow^mCEwoMTeu>~^^vHLh?fXi2(D$HaEnvP+TD5S
z9((4v6om#X`qxPnmV8AXGyj{OWT1_1@2L<FqG`t_8#@a=$NcZ_zCfM&*9g%V4xxzt
zS{637%XgwAEU*-%Rl$utz2w*4GvnOvk6a<$e8ug*GfWn&eFR}^_rB1x10M#=0Te+s
zO)c#zJ()MtU2vZd?KU<P3Gs(NJC#;};pvfmfMjfjo!g)qs)5?NJv9*LgI;fdF$QJT
z&(OOx1nU~FJc3q>FKidmyylEQ;7U|dBh5@c;eC1W{Mv&6ps3eSmg7V}7hu+J$*ZZo
z)BeoAAQ*`g{SnfUo$O<I^ZY9u?gK9Xfnw%CQkn$1D4Sl`Nw|QYlWlfJpvVv>z!t`s
zuqCu0UsVJwYT^h8)wh+LeqbXz`;B3pI2O1(nOXENn$g7cKZis!#s$}E*Bp4nHF?7j
z_zqh6^?Z{pAW!DmJd|0iC|cBI6mX|vKGy`JyIv=PQ9%v|hf()*yIPb5QWMjB_*@s{
zqRboklDvMgpa?6@z^t~4t=QOgd-&}~=T9eU*z<SLq`mq-qrL!&n83zqG5sklSPF_n
za9^J~Hw|i_TFoG_Bn3(zmv@^Ts#ux*-T}U^{|4v-xtl<Gb~7MZ10pf{OkojbhiQ}~
zaJW54J<F#i;7Qf|8Gr7?5pumxMKFt4y<s5f_W3to1r>nW1Bb>A#RStbD4(z)wnHnl
zLF7Uz4Ffk^c2Y4x8-_F6?_!M+y4$P+*~VOo!{8(F@V*4}p>%e`diWC0Ig+}l$?+X<
zS#ZFQe!BZX5(y_c6dEaMqLa5ClhZ&D>xE(^h-T{7lxFypUc*n!2Ai(M(hPcTJ4&!F
z*F|~n#rRWn67H0Xxk{}Wk=3+)S%3y}LXyOaDt={?_!DOcDZ*TmiB+E~MOOb@5C#ke
z%mABMaK~#WzON=xs-v%1I1x8^n?OGcrYQnEt8{1FeGR+F(KS5ohX+Bl$Y$$m6Uclg
zWTQDRvoHa})>0nX$x7h0Ji&=yx%8V`5^-pO5p%a{sqg`j2JCVlzncT;+eqZyc&qsq
zG_yl9(O=##3%!=mSU~Ab)eJ~WON497o?GGlmp0hC_@dhUP6PwIQwfE2{oQ$v+%Gb^
z3~V8rTDVUVsIkPs9Ytm9vU2_RyEJp|AlOh2Sc-bqZ<U=1%5Rk)YMwgfQ3I%S;J$)k
zi}2OKM0KiGKyu*%KyrSw+Pqe0t>Z#50yKf(kS)O!3q3GQ-i1xCgkcx{5uu191OSpF
z01`Ju7cBx|%%f`#Yr(U_|HXx}H5{TPII;1hS*Y6g7KPTQ5$gUJ`+g6@qLeOAhfFn)
z|2HiQv;fT#ApGO*{eyK++iMO6aRjTyQj^?JAiR@j1#^m=SqsACSFltVpIT28iiWp)
zj`R|NXZq|3RG>-9dpiK_99!fMJQ7y1XfwFbe#=G4L}eWo<31tbcRsNV^_#DFDPgRb
z=sz;iMCb&q{N{I}YY93NTohX`p5~e1-}GSlIYkj9_bhdw!-g>~&jg5me<DxZ{a2$u
zGTP7=5Gl7Dzwe|*qCW}Z<V*YU7^ZD1t|V2MaODh)`j9{)*~wSEtjQ<0rU%@4Q5o;y
zswGLJnZVR||EH-dkB74D{`VNh&I}&LK1$X+CRwr%CQF3!C`&X$r6Ez4k#!6*h?x)(
zAxp@f<#}kazLpfy$WHNOS0cN-m*4N7_s{#j&gb0s`J8iouXBCRx$i3mmDoaaz~*0I
zkf_CPW1P^|YP|A~7R%I9ty)&+DHB6{x+AdUS3QqZ3-7Q2=;^hLo7bIWYrgTaxpcGa
z0EvnAlWp8|BPu=|WpXW#lEaY1Ok~=K<60*&x5Cpf<kA5VT0SFPFF&YRFoPQ<Rjq6k
z$3&(kTs=Q%lPXS$Ugw9)k*&G@<`+~I<5)Tfp`y*MkFKTH^O8c+b2`d+G3E+3Jwa8s
z{*{w^wRmBD<vx+z(A`QgQj;ukYP(GX&g1+S0YQun8`aDcKcW&UcP^)hc*k-IoH<u_
ze*!tZICLrVH;My9kvsx2B8PmuJxpLNVs9o~Eeg}f00T7HwFhH65bN$`W?8VIU?Pjf
zgocMS4+c$Y&b|jVvLi7pMCfg{^IJgznVcX~5^(?<P6kz0q7BV~4r8U^&^Y<8L=kbX
zB(s!?@A<-}=0E4`y@mzdCg2<bAU`kK$Z_cvJbWK^I>*Paq}<m;NC8ebrjG!6-64$=
z%Ho_sEipw7=nZ9&(QaXuUtG;)S7B5<fd|SC8Qwb7psclj^;(?tKWp1nayWUf4Pt#J
z(0|)s3RlIE3gb{b?2Ea92>sf3`zt&DlZR+cp=(Mu+xy5NcPR3hEyC9R_qZ42x@ac&
zM6AIX9>|=UL~Cn{e4~pd5<4ZMTHE-})>a`)6MiO#vvCNu?2xvRt~~v(-eg&{GhOyd
zy&&`e_{ye^1*;i^1aw|xAwGESPg(LZuBMPJTorZWfD5U>;sFU6X*~BmO>q^eBG8n4
z{)(YrzO5vAyTd(aIF=rbE5JxUq=wGI7)en_yV)_Phm%Z1Q#r3%_Ga;2k(L@3@;ly}
zEM$$+id(~aU|)LziYU~YJ4FmQZ{ZT*DqX|X>H8*zXK0hV4F{;P0jhrBN*a&+BWku)
zt3_b*s=3i9srgQ0+JO#X0jDGV$N_2WUoj`UHjwN#NF`=q-A_GUJJajHQ|??Z@r6kq
z+IZS53hAU*{(j2&S`Bg=|DOHqhY@P&MVNu3tw%M(K?oO)kiW(UcfR6nJE+Q{!SVN#
zq!rNLJp3uauE2LTO6nY!<PF*22cEop#%ezH<wonMNOj5)gNY0uOt4EkS>aIKVq%f!
z_G|xVi>cnXRhtG&hxXT}0uwt~KSB@=J2B?i6LE<3OWcZYHK{osAj;+smy+)W^knW1
zjWBrv5>6i~cc1nVmB_T}NQwAmbnzzk*Z?Th&+`e6LLfAFp=`J*_f~|EzWq^2Cw!ih
z`;wk;@%|y5AmMzEF2%}&jMSu5WQPWicc-`1{Z`~MP~G?cCi1{Ry~3&U4WX0xQ5Vh@
zj}wP<UUdCA|D|$J(QI+`P>S(KW!JUeSJ{?*P2F|G4mn=I3iu4RZJ<WyiH6#Gw+_vm
z6KrCqrL^tq?ynLQ12O}ffygK87Xgp|dEyeb@I8EqQ|-lEI=`l1+?Ub-e|FtX%4CiV
zjTIaKg9-RSV~34~@EbWpx6@GE`U?eia(G|WlH-n-NnGfb*Up={U{i6tE5kbamy2`&
zcHKU~a%o60O;`axzT4=@tKVv!;K`Xu7vzFNl#Ub1t`E#~`P^mb*K1-wr)tdCTn%Z4
zGOF=}#l!D{u?;WMa(B)|Ug7y9c|_OpPXEEwp_)%H=dz-im6-!nmLpca7CZG~MR<=#
zH&_za&+!O$v$6AzuZ)E_;6gxVNhLbc_>}MkxzNC?aenfSJ!eXO3WepqCgmgr=484(
zy!ST6I^TO;xYm1;g@Wupk4es<o4ZPtjY}}7Eyjw4)^I-bC{#o7sMPZifaNzCQUOB7
zf2z0yi5q?TXL8C)mT*F#>aIZ5S5C%)x2n;({DDExl9kVk;l?~8y)Iem?5!HpB{Yz8
z^B3~<l!$2Tvw;dj6na1*`nr(=BAOU@Y4?;B&fl=U`6A0j<8$n48TV7HO^WP%FOs_c
z3budyw(LLlwXo={*dl8Ua2lD`XmS#KWaz&C*ze~{ajb;pH8Gj%b8S<0dl!P4yxC$~
z{Rre;K8duatpaa64o_J&ukJ)nB_t^}9G<Nl<w56l!~2)T(?a7sc}0Ilx^klRfbPfg
zb6HQ})1gcqHEPv`I@b5{0|=y>TX{7%6#8s40ykhsf#Jn*#d((Y%3bJ^5XcBzneWUo
z=jbr3V_lM!3}Y3>iu8tLI#M?~@*2b20p8+T{oo{nXl3P&>3qX56SsM!E$&^!3a{Wo
z;TQ}*2a9H;KXa}~oa3XL-Sq>A$D^xt3wPHnp|WXzQ<$VX3bD{MDM&Y2ftP`Y4H-1|
zepGDR0yr&iNUqj<gsUFz5Zw1*ApnBON*tKIk1g9@>z&~;lXz9y)bn=v%n?U6TYsa#
z$vNty^04O4su`cHit)OIKR@PLyFlDM{YM9KZ8*>q)+K7d^RfQn_$2k(x~6|^Ep#za
z6dM$Vh$RW-@?!A&bMeY2m9?~HN(_maG=9+s+l&^%n5o%2>jGyd#%LXPU{fVqa2<?Q
z2pDfHA$Aans^0Z~-=&U{*5g=fiGm<CZ$SUW`#Xy-*J}=YuT-Td{+&@_V~j~oXK$+s
zuJbgXksgJN@v^9#g-gz@YABVHxZ0}eeEy6tvUXJ|lD;}R(*?HxIs4JtWR!2Xx}}$3
zM%7(HQdlF+aSn2z`T=syb~o(I9sFHEh(mI0V^YQFEbz{DAH5Ro@ohG!X}RIWMFuK?
zg^f)#iy^w)m43y`YDP&1r6B7Nm&Hc3*c}nK)&?YQ?uZs}8;k4S2$MY*^ZgoAXO{)u
z6@bt7l*|mv4}oMbr1+RttjW&0Y6@wO)}y<TgoA-cH4`aiS+BVNTAEk>XuY6DfSH1O
z_ZB=p_iD^k7kf&EogJ-rWkVCd8ZU8N>q3Q-NdzP5rD+}F{MJo42Uc}|_UB;P_&BjN
zV1r#IJKf%^-=D5Yf!y(a;Zi*h-|G7&-!1gy&0GaBX)E^Tbij|KIxqU<?;)|_^1Z3z
z<20;g?HvB;g>sWYeI0&GZo#n<FOIH-;WuzeT_>b+m)VCF_LiRR3o0t^*VLE>d2U8c
zz@Q^-IH@NAH&Sn1+4;f_&O89}V`NNb4t={{2Bi23BVQV{&Mega$tvax-kg!;KdXl1
z8~;3Y0yzE_DH6+b1U~x|IN@J5KQAcb-0LEzs3H#_%7eHmn&%(UY0+skmR5dqtmcm!
zdP&<1I8sG{B1+#mt`2`(Z49jM1J<M8RqAa?Q0S}gwF5(R11o&mKm1C>K11Qx*HPVl
zmw#vCs-*3NucV;BbU;MSZOnzrXY5va^gA++i#!~^;-IY!pa(OUWBDQJeW%OTJCRV%
zqJ`5yxV`3kc8EZfd?QoJGHy00?L+bx7j!kcEDQf!Mphtu=}_feIYZh_J|&nJ#{nP%
z^BDVi32klWQJ0fcL@(XoXrrJKT4<&^%DecJH1mR&J#-?~3be8?h@lr>rczQFNy}vt
zsn%^4g+#KydeDK3`hl4^4j1&T^d&$0y0(&=WoP6q@3W0{8u>G1x^mU>n@`fG4_Y)L
z#rnYGkkLY)DcdQA)v$u+>=9b`jda+~utw`M^^}2vl7FaniO{%m`}4Gw4zi)z<METH
z%GRO@&y#tP(N^dCp2bRIb{oRC+ra9G!Ff&|=tt!>9m*Jq<1o2xe<}Nl?D#Ob)HCvU
zF%Xh*-r2)Xr#u8Af?<fzno_FqH{wg;VEDnj98>N8h0s)Kh%q7?+D~*Xa-z!l0UuH<
z$OgLxk3m|{COPkTqzwQ%hKCgYTLOP*Tb@6KOap6Ew*=Ty5N~;VD_wWCYY94Amlpox
z+ia7RW2IB{|EZy=PF!v}?pY`o`J>8HC5*aohbf@`+62sxGdoG0&hfF55iqzR%XIP3
zpm+hp24oHklEErC%Dv6f^(4eQXILoE$#b*s&MZT9eCxCC5LP-DL=CL(gWlXp;cYgU
zyS>*!q@gvakNXr0=PgJAC}Dxu?l1b;#I#!>a=4oh)C|I&pBIoO_qfm(!ypr|@F9Qp
z+IvVU5W-?bMFf3Q-Lw@gLO&>y^-HG?O#tLF*1@p!?W%31=Bvb9zyo#uIM34<)H4w=
zkbfux=DYBPt(BMS*YH^%+MiQMdNlg4;zc{I>AgYHzU|yWEa*sf>`n2r?u)DIv?d74
zb1NEl;&Tu`NYI*rdb(WhQ_cu2@PC%Ir?FZg7{?h9tO)cKN5w_W*FP1_iumDia89&o
zbd+d~SH!7!)HL*|m+>CsBrh4R@#yo~Xu6McvLtt!x>%wqeBUsnQaU!*C(`bJyZrwP
D<sSsO

literal 0
HcmV?d00001

diff --git a/samples/web-app-mysql-flexible-server/dotnet/src/wwwroot/style.css b/samples/web-app-mysql-flexible-server/dotnet/src/wwwroot/style.css
new file mode 100644
index 0000000..67508fa
--- /dev/null
+++ b/samples/web-app-mysql-flexible-server/dotnet/src/wwwroot/style.css
@@ -0,0 +1,341 @@
+*, *::before, *::after { box-sizing: border-box; margin: 0; padding: 0; }
+
+:root {
+  --teal-50:   #f0fafb;
+  --teal-100:  #d0f0f5;
+  --teal-500:  #0e9db0;
+  --teal-600:  #0e6ba8;
+  --teal-700:  #0a5a8e;
+  --teal-800:  #074d78;
+  --gray-50:   #f9fafb;
+  --gray-100:  #f3f4f6;
+  --gray-200:  #e5e7eb;
+  --gray-400:  #9ca3af;
+  --gray-500:  #6b7280;
+  --gray-700:  #374151;
+  --gray-900:  #111827;
+  --white:     #ffffff;
+  --bg:        #f0f8ff;
+  --shadow-sm: 0 1px 2px rgba(0,0,0,.06);
+  --shadow:    0 4px 6px -1px rgba(0,0,0,.10), 0 2px 4px -2px rgba(0,0,0,.06);
+  --shadow-lg: 0 10px 15px -3px rgba(0,0,0,.10), 0 4px 6px -4px rgba(0,0,0,.06);
+  --radius:    12px;
+  --toast-bg:  #111827;
+  --toast-fg:  #ffffff;
+}
+
+html[data-theme="dark"] {
+  --gray-50:   #0f172a;
+  --gray-100:  #1e293b;
+  --gray-200:  #334155;
+  --gray-400:  #94a3b8;
+  --gray-500:  #cbd5e1;
+  --gray-700:  #e2e8f0;
+  --gray-900:  #f8fafc;
+  --white:     #1e293b;
+  --bg:        #0a1929;
+  --teal-50:   #0e2a38;
+  --teal-700:  #7dd3e8;
+  --shadow-sm: 0 1px 2px rgba(0,0,0,.4);
+  --shadow:    0 4px 6px -1px rgba(0,0,0,.5), 0 2px 4px -2px rgba(0,0,0,.4);
+  --shadow-lg: 0 10px 15px -3px rgba(0,0,0,.6), 0 4px 6px -4px rgba(0,0,0,.4);
+  --toast-bg:  #334155;
+  --toast-fg:  #f8fafc;
+}
+
+body {
+  font-family: 'Inter', system-ui, sans-serif;
+  background: var(--bg);
+  color: var(--gray-900);
+  min-height: 100vh;
+  transition: background 0.2s, color 0.2s;
+}
+
+/* ── Header ─────────────────────────────────────────── */
+header {
+  background: linear-gradient(135deg, var(--teal-800) 0%, var(--teal-600) 100%);
+  color: #ffffff;
+  padding: 1.5rem 2rem;
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  flex-wrap: wrap;
+  gap: 1rem;
+  box-shadow: var(--shadow-lg);
+}
+
+.header-left h1 { font-size: 1.6rem; font-weight: 700; letter-spacing: -0.02em; }
+.header-left p  { font-size: 0.85rem; opacity: 0.8; margin-top: 2px; }
+
+.header-right { display: flex; align-items: center; gap: 0.6rem; }
+
+#btn-dark-mode {
+  background: rgba(255,255,255,.15);
+  color: #ffffff;
+  border: 1.5px solid rgba(255,255,255,.3);
+  border-radius: 8px;
+  padding: 0.5rem;
+  cursor: pointer;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  transition: background 0.15s, transform 0.1s;
+}
+#btn-dark-mode:hover { background: rgba(255,255,255,.25); transform: translateY(-1px); }
+
+#btn-add {
+  background: #ffffff;
+  color: var(--teal-700);
+  border: none;
+  border-radius: 8px;
+  padding: 0.55rem 1.2rem;
+  font-size: 0.9rem;
+  font-weight: 600;
+  cursor: pointer;
+  display: flex;
+  align-items: center;
+  gap: 0.4rem;
+  transition: background 0.15s, transform 0.1s;
+  white-space: nowrap;
+}
+#btn-add:hover { background: var(--teal-50); transform: translateY(-1px); }
+
+/* ── Content area ────────────────────────────────────── */
+.content {
+  max-width: 820px;
+  margin: 2rem auto;
+  padding: 0 1.5rem 3rem;
+}
+
+/* ── Table ───────────────────────────────────────────── */
+#activity-table {
+  width: 100%;
+  border-collapse: collapse;
+  background: var(--white);
+  border-radius: var(--radius);
+  box-shadow: var(--shadow);
+  overflow: hidden;
+  transition: background 0.2s;
+}
+
+#activity-table thead tr {
+  background: linear-gradient(135deg, var(--teal-800) 0%, var(--teal-600) 100%);
+  color: #ffffff;
+}
+
+#activity-table th {
+  padding: 0.85rem 1.1rem;
+  font-size: 0.85rem;
+  font-weight: 600;
+  letter-spacing: 0.02em;
+  text-align: left;
+}
+
+#activity-table th.col-actions { text-align: center; }
+
+#activity-table td {
+  padding: 0.75rem 1.1rem;
+  font-size: 0.93rem;
+  color: var(--gray-900);
+  border-bottom: 1px solid var(--gray-200);
+  transition: background 0.15s, color 0.2s, border-color 0.2s;
+}
+
+#activity-table tbody tr:last-child td { border-bottom: none; }
+#activity-table tbody tr:hover td { background: var(--teal-50); }
+
+.col-btn {
+  width: 1px;
+  text-align: center;
+  padding-left: 0.3rem !important;
+  padding-right: 0.3rem !important;
+  white-space: nowrap;
+}
+
+#activity-table td.col-btn:last-child { padding-right: 0.6rem !important; }
+
+/* ── Row action buttons ──────────────────────────────── */
+.btn-edit, .btn-delete {
+  display: inline-flex;
+  align-items: center;
+  gap: 0.3rem;
+  padding: 0.55rem 0.75rem;
+  border-radius: 6px;
+  font-size: 0.8rem;
+  font-weight: 600;
+  cursor: pointer;
+  transition: background 0.15s, color 0.2s, border-color 0.2s, transform 0.1s;
+  white-space: nowrap;
+  width: 90px;
+  justify-content: center;
+}
+
+.btn-edit {
+  border: 1.5px solid var(--teal-700);
+  background: var(--white);
+  color: var(--teal-700);
+}
+
+.btn-edit:hover {
+  background: var(--teal-50);
+  transform: translateY(-1px);
+}
+
+.btn-delete {
+  border: none;
+  background: var(--teal-600);
+  color: #ffffff;
+}
+
+.btn-delete:hover {
+  background: var(--teal-700);
+  transform: translateY(-1px);
+}
+
+/* ── Empty cell ──────────────────────────────────────── */
+.empty-cell {
+  text-align: center;
+  color: var(--gray-400) !important;
+  font-style: italic;
+  padding: 3rem 1rem !important;
+}
+
+/* ── Modal overlay ───────────────────────────────────── */
+#overlay, #delete-overlay {
+  display: none;
+  position: fixed;
+  inset: 0;
+  background: rgba(0,0,0,.45);
+  z-index: 100;
+  align-items: center;
+  justify-content: center;
+  padding: 1rem;
+}
+#overlay.open, #delete-overlay.open { display: flex; }
+
+.modal {
+  background: var(--white);
+  border-radius: var(--radius);
+  box-shadow: var(--shadow-lg);
+  width: 100%;
+  max-width: 460px;
+  overflow: hidden;
+  transition: background 0.2s;
+}
+
+.modal-header {
+  background: linear-gradient(135deg, var(--teal-800) 0%, var(--teal-600) 100%);
+  color: #ffffff;
+  padding: 1.1rem 1.4rem;
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+}
+.modal-header h2 { font-size: 1rem; font-weight: 600; }
+
+#btn-close-modal, #btn-close-delete-modal {
+  background: none;
+  border: none;
+  color: rgba(255,255,255,.8);
+  cursor: pointer;
+  font-size: 1.4rem;
+  line-height: 1;
+  padding: 2px;
+  transition: color 0.15s;
+}
+#btn-close-modal:hover, #btn-close-delete-modal:hover { color: #ffffff; }
+
+.modal-body {
+  padding: 1.4rem;
+  color: var(--gray-700);
+  font-size: 0.93rem;
+  line-height: 1.5;
+  transition: color 0.2s;
+}
+
+.modal form {
+  padding: 1.4rem;
+  display: flex;
+  flex-direction: column;
+  gap: 1rem;
+}
+
+.field { display: flex; flex-direction: column; gap: 0.3rem; }
+
+.field label { font-size: 0.82rem; font-weight: 600; color: var(--gray-700); }
+
+.field input {
+  padding: 0.55rem 0.8rem;
+  border: 1.5px solid var(--gray-200);
+  border-radius: 7px;
+  font-size: 0.9rem;
+  font-family: inherit;
+  color: var(--gray-900);
+  background: var(--white);
+  outline: none;
+  transition: border-color 0.15s, box-shadow 0.15s, background 0.2s, color 0.2s;
+}
+.field input:focus {
+  border-color: var(--teal-500);
+  box-shadow: 0 0 0 3px rgba(14,109,168,.15);
+}
+
+.modal-actions {
+  display: flex;
+  justify-content: flex-end;
+  gap: 0.6rem;
+  padding: 0 1.4rem 1.4rem;
+}
+
+.btn-secondary {
+  padding: 0.55rem 1.1rem;
+  border-radius: 7px;
+  border: 1.5px solid var(--teal-700);
+  background: var(--white);
+  color: var(--teal-700);
+  font-size: 0.88rem;
+  font-weight: 600;
+  cursor: pointer;
+  transition: background 0.15s, color 0.2s, border-color 0.2s;
+}
+.btn-secondary:hover { background: var(--teal-50); }
+
+.btn-primary {
+  padding: 0.55rem 1.3rem;
+  border-radius: 7px;
+  border: none;
+  background: var(--teal-600);
+  color: #ffffff;
+  font-size: 0.88rem;
+  font-weight: 600;
+  cursor: pointer;
+  transition: background 0.15s;
+}
+.btn-primary:hover { background: var(--teal-700); }
+
+/* ── Toast ───────────────────────────────────────────── */
+#toast {
+  position: fixed;
+  bottom: 1.5rem;
+  right: 1.5rem;
+  background: var(--toast-bg);
+  color: var(--toast-fg);
+  padding: 0.65rem 1.1rem;
+  border-radius: 8px;
+  font-size: 0.85rem;
+  opacity: 0;
+  transform: translateY(8px);
+  pointer-events: none;
+  transition: opacity 0.2s, transform 0.2s;
+  z-index: 200;
+}
+#toast.show { opacity: 1; transform: none; }
+
+/* ── Responsive ──────────────────────────────────────── */
+@media (max-width: 600px) {
+  header   { padding: 1.2rem 1rem; }
+  .content { padding: 1rem 0.75rem 3rem; }
+  .col-btn { white-space: nowrap; }
+  .btn-edit, .btn-delete { width: auto; padding: 0.55rem 0.5rem; }
+}
+

From 5b02df696c7a940d55692165efce6a37f8db64e9 Mon Sep 17 00:00:00 2001
From: Paolo Salvatori <leprino@hotmail.com>
Date: Tue, 8 Sep 2026 18:02:40 +0200
Subject: [PATCH 11/20] Add the .NET version of web-app-sql-database

ASP.NET Core Razor Pages port of the Python Flask sample, with the same
behaviour, environment variables and deployment artifacts; only the container
image name carries the -dotnet suffix, so both versions roll over the same
Deployment, Service, ConfigMap and Secret. FLASK_SECRET_KEY is renamed to
SECRET_KEY in the .NET copies of the Secret and the Deployment, the only
deliberate contract change, because the name is language-specific.

Microsoft.Data.SqlClient with Encrypt=Mandatory and TrustServerCertificate,
an optional Entra token through SqlConnection.AccessToken, no DDL (the table
comes from 01-deploy-resources.sh) and no startup retry, matching the Python
version. Activities are addressed by their UNIQUEIDENTIFIER, /update/{id} is
kept for route parity, GET /health sits behind both probes, and the Data
Protection key ring is derived from SECRET_KEY so the replicas share
antiforgery tokens and flashes.

Validated on the LocalStack AKS emulator: 3/3 pods Ready through the /health
probes, add/list/update/delete through a port-forward and from inside the
cluster across all replicas, /update/{id} redirecting to the edit form, and
the expected request, store and page log lines.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
---
 samples/web-app-sql-database/dotnet/README.md |  76 ++++
 .../dotnet/images/architecture.png            | Bin 0 -> 37713 bytes
 .../dotnet/scripts/00-variables.sh            |  38 ++
 .../dotnet/scripts/01-deploy-resources.sh     | 247 +++++++++++++
 .../dotnet/scripts/02-build-docker-image.sh   |  18 +
 .../dotnet/scripts/03-run-docker-container.sh |  30 ++
 .../dotnet/scripts/04-push-docker-image.sh    |  40 ++
 .../dotnet/scripts/05-deploy-app.sh           |  85 +++++
 .../dotnet/scripts/Dockerfile                 |  28 ++
 .../dotnet/scripts/configmap.yml              |  12 +
 .../dotnet/scripts/deployment.yml             |  86 +++++
 .../dotnet/scripts/namespace.yml              |   4 +
 .../dotnet/scripts/secret.yml                 |  11 +
 .../dotnet/scripts/service.yml                |  16 +
 .../dotnet/src/.dockerignore                  |   2 +
 .../dotnet/src/Models/Activity.cs             |   4 +
 .../dotnet/src/Pages/Delete.cshtml            |   2 +
 .../dotnet/src/Pages/Delete.cshtml.cs         |  22 ++
 .../dotnet/src/Pages/Index.cshtml             | 265 ++++++++++++++
 .../dotnet/src/Pages/Index.cshtml.cs          |  49 +++
 .../dotnet/src/Pages/Update.cshtml            |   2 +
 .../dotnet/src/Pages/Update.cshtml.cs         |  17 +
 .../dotnet/src/Pages/_ViewImports.cshtml      |   4 +
 .../dotnet/src/Program.cs                     |  67 ++++
 .../dotnet/src/Services/IActivityStore.cs     |  24 ++
 .../src/Services/SecretKeyXmlRepository.cs    |  49 +++
 .../dotnet/src/Services/SqlActivityStore.cs   | 142 ++++++++
 .../dotnet/src/Services/SqlOptions.cs         |  34 ++
 .../dotnet/src/Services/StoreInitializer.cs   |  33 ++
 .../dotnet/src/VacationPlanner.csproj         |  12 +
 .../dotnet/src/appsettings.json               |  16 +
 .../dotnet/src/wwwroot/favicon.ico            | Bin 0 -> 36791 bytes
 .../dotnet/src/wwwroot/style.css              | 341 ++++++++++++++++++
 33 files changed, 1776 insertions(+)
 create mode 100644 samples/web-app-sql-database/dotnet/README.md
 create mode 100644 samples/web-app-sql-database/dotnet/images/architecture.png
 create mode 100755 samples/web-app-sql-database/dotnet/scripts/00-variables.sh
 create mode 100755 samples/web-app-sql-database/dotnet/scripts/01-deploy-resources.sh
 create mode 100755 samples/web-app-sql-database/dotnet/scripts/02-build-docker-image.sh
 create mode 100755 samples/web-app-sql-database/dotnet/scripts/03-run-docker-container.sh
 create mode 100755 samples/web-app-sql-database/dotnet/scripts/04-push-docker-image.sh
 create mode 100755 samples/web-app-sql-database/dotnet/scripts/05-deploy-app.sh
 create mode 100644 samples/web-app-sql-database/dotnet/scripts/Dockerfile
 create mode 100644 samples/web-app-sql-database/dotnet/scripts/configmap.yml
 create mode 100644 samples/web-app-sql-database/dotnet/scripts/deployment.yml
 create mode 100644 samples/web-app-sql-database/dotnet/scripts/namespace.yml
 create mode 100644 samples/web-app-sql-database/dotnet/scripts/secret.yml
 create mode 100644 samples/web-app-sql-database/dotnet/scripts/service.yml
 create mode 100644 samples/web-app-sql-database/dotnet/src/.dockerignore
 create mode 100644 samples/web-app-sql-database/dotnet/src/Models/Activity.cs
 create mode 100644 samples/web-app-sql-database/dotnet/src/Pages/Delete.cshtml
 create mode 100644 samples/web-app-sql-database/dotnet/src/Pages/Delete.cshtml.cs
 create mode 100644 samples/web-app-sql-database/dotnet/src/Pages/Index.cshtml
 create mode 100644 samples/web-app-sql-database/dotnet/src/Pages/Index.cshtml.cs
 create mode 100644 samples/web-app-sql-database/dotnet/src/Pages/Update.cshtml
 create mode 100644 samples/web-app-sql-database/dotnet/src/Pages/Update.cshtml.cs
 create mode 100644 samples/web-app-sql-database/dotnet/src/Pages/_ViewImports.cshtml
 create mode 100644 samples/web-app-sql-database/dotnet/src/Program.cs
 create mode 100644 samples/web-app-sql-database/dotnet/src/Services/IActivityStore.cs
 create mode 100644 samples/web-app-sql-database/dotnet/src/Services/SecretKeyXmlRepository.cs
 create mode 100644 samples/web-app-sql-database/dotnet/src/Services/SqlActivityStore.cs
 create mode 100644 samples/web-app-sql-database/dotnet/src/Services/SqlOptions.cs
 create mode 100644 samples/web-app-sql-database/dotnet/src/Services/StoreInitializer.cs
 create mode 100644 samples/web-app-sql-database/dotnet/src/VacationPlanner.csproj
 create mode 100644 samples/web-app-sql-database/dotnet/src/appsettings.json
 create mode 100644 samples/web-app-sql-database/dotnet/src/wwwroot/favicon.ico
 create mode 100644 samples/web-app-sql-database/dotnet/src/wwwroot/style.css

diff --git a/samples/web-app-sql-database/dotnet/README.md b/samples/web-app-sql-database/dotnet/README.md
new file mode 100644
index 0000000..f2b1616
--- /dev/null
+++ b/samples/web-app-sql-database/dotnet/README.md
@@ -0,0 +1,76 @@
+# Vacation Planner: Azure SQL Database
+
+> A Python version of this sample lives in [../python](../python/README.md).
+
+This sample demonstrates a ASP.NET Core Razor Pages single-page web application called *Vacation Planner* hosted on an [Azure Kubernetes Service (AKS)](https://learn.microsoft.com/en-us/azure/aks/what-is-aks) cluster in the cloud on Azure or locally in the LocalStack emulator for Azure. The app runs in a dedicated namespace and stores activity data in the `dbo.Activities` table of the `PlannerDB` database on an [Azure SQL Database](https://learn.microsoft.com/en-us/azure/azure-sql/database/sql-database-paas-overview).
+
+The application connects to Azure SQL using a dedicated SQL login (rather than the server admin), and the deployment scripts seed the `Activities` table with a handful of sample plans so the app shows data on first load.
+
+Before installing the sample, make sure to create an [Azure Kubernetes Service (AKS)](https://learn.microsoft.com/en-us/azure/aks/what-is-aks) cluster by using one of the following scripts:
+
+- [scripts/01-system-assigned-managed-identity.sh](../../../scripts/01-system-assigned-managed-identity.sh): creates the cluster using a system-assigned managed identity as its cluster identity.
+- [scripts/01-user-assigned-managed-identity.sh](../../../scripts/01-user-assigned-managed-identity.sh): creates the cluster using a user-assigned managed identity as its cluster identity.
+
+All commands below are run from this sample's `scripts/` folder.
+
+> **Running on LocalStack?** Install the [lstk CLI](https://docs.localstack.cloud/aws/developer-tools/running-localstack/lstk/) and run `lstk az start-interception` to route Azure CLI calls to the emulator. See [Run against LocalStack](../../../README.md#run-against-localstack) for the full setup.
+
+## Architecture
+
+The following diagram illustrates the architecture of the solution:
+
+![Architecture Diagram](./images/architecture.png)
+
+## Deployment workflow
+
+Run the numbered scripts in order from the `scripts/` folder:
+
+```bash
+cd scripts
+./01-deploy-resources.sh
+./02-build-docker-image.sh
+./03-run-docker-container.sh   # optional local smoke test
+./04-push-docker-image.sh
+./05-deploy-app.sh
+```
+
+## Scripts and manifests
+
+| File | Description |
+| ---- | ----------- |
+| [`00-variables.sh`](scripts/00-variables.sh) | Defines the variables shared across the other scripts (resource names, image tag, SQL credentials, Kubernetes namespace, …). The other scripts load these values by sourcing this file. |
+| [`01-deploy-resources.sh`](scripts/01-deploy-resources.sh) | Deploys the Azure resources used by this sample: the resource group, the [Azure Container Registry (ACR)](https://learn.microsoft.com/en-us/azure/container-registry/container-registry-intro), the [Azure SQL Database](https://learn.microsoft.com/en-us/azure/azure-sql/database/sql-database-paas-overview) logical server and database, a permissive firewall rule (dev/test only), a dedicated SQL login and database user with the appropriate roles, and the `Activities` table, which it also seeds with sample data. Requires `sqlcmd` on the host. |
+| [`02-build-docker-image.sh`](scripts/02-build-docker-image.sh) | Builds the Docker image for the web app from the [`src/`](src/) folder. |
+| [`03-run-docker-container.sh`](scripts/03-run-docker-container.sh) | Runs the web app in a local Docker container (no Kubernetes) to validate that it starts and connects to the database as expected. |
+| [`04-push-docker-image.sh`](scripts/04-push-docker-image.sh) | Tags and pushes the Docker image to the Azure Container Registry, on Azure or in the LocalStack emulator. |
+| [`05-deploy-app.sh`](scripts/05-deploy-app.sh) | Uses the YAML manifests below (templated with `yq`) to deploy the app to the AKS cluster. |
+| [`Dockerfile`](scripts/Dockerfile) | Builds the Docker image of the web app. |
+| [`namespace.yml`](scripts/namespace.yml) | Creates the Kubernetes namespace. |
+| [`configmap.yml`](scripts/configmap.yml) | Creates the ConfigMap holding non-secret input values (SQL server FQDN, database, username, login name) passed to the app as environment variables. |
+| [`secret.yml`](scripts/secret.yml) | Creates the Secret holding sensitive values (the SQL password and the `SECRET_KEY` the app derives its Data Protection key ring from (so antiforgery tokens and flash messages are valid on every replica)) passed to the app as environment variables. |
+| [`deployment.yml`](scripts/deployment.yml) | Creates the Kubernetes Deployment, including the pod specification for the web app. The liveness and readiness probes call `GET /health`. |
+| [`service.yml`](scripts/service.yml) | Creates the `ClusterIP` Service that exposes the web app inside the cluster. |
+
+## Accessing the web app
+
+The app is exposed through a `ClusterIP` service, which is only reachable from inside the cluster. Port-forward it to a local port to open it from your machine:
+
+```bash
+kubectl port-forward service/vacation-planner-sql 8080:80 -n vacation-planner-sql
+```
+
+Then browse to [http://localhost:8080](http://localhost:8080). Alternatively, use a tool such as [k9s](https://k9scli.io/) to start the port-forward interactively.
+
+The app also exposes `GET /health`, the endpoint the liveness and readiness probes call: it returns `{"status": "ok"}` when the Azure SQL database is reachable and `503` with `{"status": "unavailable"}` otherwise.
+
+```bash
+curl http://localhost:8080/health
+```
+
+## Logs
+
+The app logs one line per request — the `VacationPlanner.Requests` middleware is the equivalent of the gunicorn access log of the [Python version](../python/README.md), and it covers the probes too — plus one line per database read and write and one line for every activity added, updated or deleted. [`src/appsettings.json`](src/appsettings.json) keeps every entry on a single timestamped line and holds the framework categories at warning level, so the request and store lines stand out.
+
+```bash
+kubectl logs deployment/vacation-planner-sql -n vacation-planner-sql --tail=50
+```
diff --git a/samples/web-app-sql-database/dotnet/images/architecture.png b/samples/web-app-sql-database/dotnet/images/architecture.png
new file mode 100644
index 0000000000000000000000000000000000000000..4a0eee03768eb5d60d627b37e053b308dec59b18
GIT binary patch
literal 37713
zcmbTdWmH^U6DHbNkOT?t5G=U6CTMW&#x1zJTS5o~g1Zw!f^|3UE<uC4LvVN3Ie9;s
zd)HleX4d@Zbq@P%tzGrhQ?)nYYASM=7^D~=5C~KLowNoBgy;(VNYD_05_ph|KJZ|1
zm(g*Ta<wpZw{dc$*0OQ106AE=Qu9%pS~*d3b8_=jbMXlC3JCM@QL}JzadJZRpaeiO
zRCjr08Pr`gl;@nU)|OZ9fFg9~ce-vM&~x0sKZLQxz<Zz&+3KzGTM(!`=J~xT3J4Tm
zBrp9|%X@A=3*BF9qxot$P3%sVpI<lr12Mk(OGG_<R=PUrll;q;tB5&%>r#Tc9M`V_
zJMaesN5eX{@M_!dknQ>T_Y13%!Ow#+UcNM!M|(wPcNvg25IA&~DU^`bx6dQQlhAkH
z68$G_OLWU;XuxOlChO@eh%ntk_pcm4lGGTNz(hcx1k_$;;6Y6s3kDu<IH{q)<Acc?
z2m<hI{{Z_dqhJKxzjcw3D*m=bduIN3={PU`ZyM^T*T?0j5D5s2)Rd2XdSQ@xw2uP<
zDUnh`+axV~Y)nlrH?tfk$C>Ks_v4gFD5-2&jSh1se6s;*2BVu3r2f(3Yo%)~t6KOD
z&3v#mH>=-yI9+|OxzMdZ<Jldndm=kIES%QY%lAA_NHKkA!2nz>G@cqvzN9l?(L-OM
z(9!(52c~iAGYUzI5lSJ|5Al0W1}qG@0z;Oo*p@xX?k6;f?94WTR7bKiI9)@$#MaG0
zoJdn$Cp|^CF-rs@J*!^_&iGAuY(+S^Usk~*pR9#q_dS>Kb=dD#x)c#DJ=p`(C<eB2
z`$2h(e*S%ZuV2Cz8{GpH!OtF@QIcw#>e_D&GH9-02q5Y=Zy+Dh6N)t;4gE3>TOy7;
z{0<!J;~V%6e9Yj@U~)}PT9)~@ftx&)6;NBUfl-4)pJ=f<A(Xv=tY4OX38_U`?Cy8g
zUfg{p#WjKZ_3RPAmPjD!qKHbv7*!(CeCV_eYg;sza2KT<sOcRT-BN#)d)Ln{(OK@+
zMZ9^<38MZ6jQ?^7x#}>3Z<m?to!murxwl+V?1qKCa0dh*0tO2SWmi%saCjM~Ip7Wv
zQyf4x*`b_4Szl@HuRj2TT>>f+R*yRKuDby-FWb_7PE)H>zl^N#Ks+_-QU{a&d$>%0
zy#>#Kl7fcgTU~}_RD%pd>jpZv{)PC6{lWZB3lz+nCCv<)6$2CyGH&_|Lwn0Jpj(r8
zklp`@dWB+R5%yoWBlwLM1+&6UDwj%$3QT9|KyANJD@Y;7EaJTQlk4@Gy<EW}4UiBu
z%{PP3RR!k{x)InfyAePi!ja7RUi^Xh6&BUj+#4JaOGR&-?2(?{4b12?@rw-CEi8AV
zU(PS;lx~|;B1C^`c7Y{i^jCzFG<IQL)*^tev3qTaJJ`@tvn(8L>gTvZ$)SwAq^b0Y
z2UA>426{)7Yom|+`PE@;zIK(1${Rz2vjqO^KTPz=W<8xU`=k8d=4q=A)kc*stv<V(
z2Z8R<&G}#}7XzaaLF}H9<v+^jg+rH9yM3>SV=ik+4v=fkcZFvUySdEp1g54_J?82@
z+8u~D67R7&mbGGn+H&4NIx!NmXN8%18qFd{oE7iMEVxR$e~gv%G1;21CBoeB%@F<>
z2hE&-*rnVolH?9<c0c}EueFqQekj`m!>Tg*z|NgyZJT%B2?=zJ8Vg?W>>=iHtcgA$
zcEg67*>SP3%*S^GSUEV#cWzH+R8+;3e|T^JfdWxPW<H?HZOAr==1?h1OFJV~qw?5+
zK(9X0%@Bb;u+{5-^~BLn2-4JPm()Z6<s!lU1v4x9|4T$!N#=UK9OGt6qgwkN3G`tE
zFi_F<CSvN^BJ$*WBoN37P+o0wdtnVzy$<L7O}ivA3WsRNRtqu<G6`S8+BN+RYu-yQ
zBv1$=uoAZWCBB-B(n$_tLz7w;W0Ec>A~T?BPN#Se*#OvKsoi0zTgK9<`_U2fAr=_P
z|ND~TSvAbxNSm$L7O2>|p|6{^hPgQ)(sB|vvy2JC2?mC*)k;p;WbLh(_h%EBE`$<-
zH_DXPEY$z`ZVP<((sCSFvmZ1-%_t=ih@Ll52V0R<5#S5XnmF<%$1H?AEP_C}sOALT
zl9QXG0aJo83|1b(bN*3#jqr*JaF)YJ%~0Pnx6iZHY5p-z{IzCe|Ez~n$CgS72Uhb5
zkV-7d)W4v+?B8Hr{l9=`y7m?jXOT747?mw$(cajQLM(e0373Q};XVr@=)(s@U6kPR
ztMe5+D))2fi_KIAmV|7>1oHho;A7iIbpAKQ(MAw9zm50+(Ks+oNqdVh;0SPz;fSU)
z6{X{*_eWUn&<k&OK;qA1!PFpWLDlNwW-(;IzhL(=<AAEOT}<O^u=hR%d;~lPH8u1N
zXqDhS(Wk(ap)Y8cD2Sjp9{^WlI#VUuZh9{z@GHN|q)iA!ZSc3y`+h3qe($|KP0CQ@
zOf@_GObUP#ACd6vKg8~fiCwqX|G9kCEJ@Sg^cH_~&cyg7famzV%+6A+bH|NHVsaeN
zFFNe$#WQtujt-D2&@A`F6WMq6ZAJ>k!DJ0DISpN%ICK!sEwE!OyA4%dO`d6J#UAUM
z1mSD@bMR4(;R|&IOQrR-@`?09lOPiih?ojcDg5ee!^?j9uu7GulaYxq$1m04qLcaJ
zlf^=dC9etw6k?ZR*^Py1-|r~Ro3=?S2aU>HaMk$qTkpnb7TORmA%oB?MnVw^$eUrV
zHSwL<N2qX%YGa3)Q<tqnJfusea9GQYNyEi?hSMY#Z_+o5B30SKp7%_E$PGDhi3LCF
z<P2d^G=HxM;eeJrtf7RZ_fs{WbUiN(oVSXu-}ZO;LI@*60HL`6UX{sa6n87^m;Z;E
zqN^u(SNDzWC%s{D^`*DxNkL>sO=I#qCP9|}S(RUH;X`i0l~?1G7LTg`NIQq~_WNH)
zQN%A^{JXPC+#gt1?q6eY&Ke7+JZ#{8UWRVP;O0AN33T({h4bV)7xqjZR_0|AJRndc
zu=CDcPTI=l>Qgs;75#GgXL~Qx?>xlT=UEu64!U*pQ4CoN9(i77wE?<}O8fC63qEc-
zaXuMg&rAKY_c@L`N{$^b!q;Q69jCpM=8O0>Zy8@+d=+#=|MFZ|p-<!Nht6|E5T|@w
z6L>|WQS}85{9-rJ3ZjaB2?mUV>LUzM^%aIN%UfpqY=zLVdUCQCfWe^%1H%BSoJ77S
zF`55o`tz3<91ew)<yz|76Meh^!}h5OyP_k$30(?4eMt-XA_A3A+?)wDRImZ|F?fx7
z75U{fx_{n_uSAF-NlG1P8<(xvT_e)sFvYHmw|ij4{vhhOgXPLT#rGvr$^`rJ%(-Mv
zOKMy$)hBN00It=#5g+cMt%!@~01`eoClLH#y&J`0RJb?Rpdy=i5tp%geQZi_5f+GQ
zGbQV?7U*+Jvb)?!UTR=1E34Tmzs~RnU}%hp1%%FR$uS~}w#<LRPd(4{aE_QL3T8{I
z_O;Fm0tM0)NVK0Z^tpS_0LI7=3pV+kyZI8E$cI|?An&Lu0i@pkd`J#?nhZODtE1jf
zEO)%k10U&cx4I}b_}V@V&bX#Q4`pF)_TrQ$bV=bHP4a-;@Bo%r)-`MCtTJ9(^pm&t
z{2Ncjk4&Mx$wOW}cSIzRB;Mce^8}RF^yp7~-6x|LqYLQ@MDA(|pf@@n;@aAhr3RNS
z+VZ>JT^sgGXlMkHk<#XP$!f&(xZ>I0l8obnhucj|{xu89F`Jcz@9<}~#i<!p5lMjv
zpg;d%oY(&Xx;Ac?H=J0|!mqx&P0_`p&PboO`U-X5JL;}5iZ&sDI-UVjLa-jy3?ltD
zB%+tX^j7+TCc8nMa$gY{fI5&a%Gzh*B56&-;hg%{5x%Tb<1YX{=Kl7IoS5h#(ogwk
zq?=RAg(Cn9AT)VusENUS(ek(lrNT2-yF(;Un>h;LBDR8u#wX9v172KwW}eXoBoz1z
zC@oleSaLD5K6V6418v0s^YhwmHi$WHO5p~oyh7cCBQDpgDA3EH-q8S5hXw#vfbx7W
z`G!XfJpVFkob1a#e;N)CO^gBmh>Y;JV3|U=%Hrwqza>CTYGUFF<dA{@Zyosba6}CD
z<!3-KzJ095xJQheG%*G^`#()7|H{i0P_%zKzlMA~ZmY!rq3N5z5nDma%pht}z)1dl
zbRq!Z)cl9=I}xB^`$It=$^hqb{2TyyPzSKL|IFh2R}U5H9pG}P(EzkGR(l8d6aeAT
z5P@2McC?|Bz5#mf?qwW686qYOOf4#{8D8=1zYYF9IDq}$__*kQ$2dlA0c!m-2B8j6
z`~_yTe}sJrFoZWa0P_Fwc|878An_zRqYVTjZ$T9pA*d~2(3=^=WoDdzukG(J|LOpk
z<bT)upC$aiyZ_5MLf8QJ^gml<dw)j!+oktET~-^Z8c7>`3U~$Vg*70gKQ>g9C3}Zh
z|8qwFk=1`B33S=ve7*}l_1Zb#nb29@?RpG6)f2LVlyLxI4I+XP2K9@|)io<3g1FXo
zKBxXfQ+SP)`Huka)ZT->9xCk1Nrb<yuNni{?Dyk?j9ko|^yYBR)1wqN%H0?s=r_QI
zA+Kq(KxP`Xf*M^d%1WOD-2$uuO;*qSd`)24o<d4#QpU!ny@egv336a@bo|d)lz=7G
z0YRJOdxx?PEnwBJfDfFOp9u1SO@GmjOh(Pw)b3l}O7-8rMGrbV*HM5l?{8H=UEXm1
z?-*KSf7Cf68B11yi!-d;`{s02);03pLmiYeP#Fx&oEO+YB78_$Na*);QL1zH+7Ph{
zCRz{*0>ID_Dlit}%S)&W@>^VB4z}piL>ybn%4GBI6T};c*(7<Je>>0ubhDQCkOkU5
z<Z9`aoUHCAsF?uoU21B7Ti|4N5;{05YnEuC=-Q(WNIC=rIOX6m(V^}ERu*e#_Aj63
zmBpItZ$5*oF>AuYwKQb(4SyF|0i(Y``@r|{<8us_1(MWU2+;JJ2!L@nZlcHrak8&o
ziRm<oUicY#7-t7nTxNy{)jqGgUjdMU+{=8N8L2#9DPTp~XlM64!Zp%GNCu_ae`0eV
zLyqvZP*LpBTGu@ZsBIlp@c>|`K+ybu6vrT9uUw|O)R09zFz`p$Rs*4lGoa`Tnz}}M
zI;l}I6d+I=pt383D&RB4)8~r6*&1w@Xg$p8*HXJzH^{!$!|etjB^I<~nwb~kP_ptZ
zW{`;nfN+PLKsZ|)-=eF{BCt7$&qrMQ&QMKrSJ2YkiEKO@2y%JsYR~Rw$}mwZ$RfT9
zY^vu+Im}=bPmp)70^V2+0J8-X4RF7Lc0J>G3*W+62$mVz-{3Q&iEnCJEl-hnEG+|C
zY+HF6Wk*ViIc)&t1U7*im?$YtYMyVZoa9E!)yU@Y6l|7ZknPXo-zZc!WlO(f8~GV1
zgcGQTJM@CjYnUH@gV=-5?d?!uOL|R3c})2$T9(FQ`y3=QUbFF+H67;9^uqvbrUP_A
zJJs()lsSxrv)HOTUrdIt38nGl+>nEX8I_r$qrB8x-FyoJjdBZ6!srXi1L~nX=D&eu
z2>VR?->4Gjh0ee78t;Mw5KO+0m-6q6k1m&TBY%U*IVz+kQDa`d2I?)pea-3IiMQbZ
zFe$RsisYfl`_1s#_Qzi!(258!bw|KeBg0^quL8;>0DFsk4mg^l>$^{VURE+_N%I>B
zQkOaU!4GMF?FYb*qc7TMx>lCm;h!D=+WY1m;15J5d|zdq{L;g`L<La#6)@g$H0q`2
zvpXQcVX}(&Z<PTw5>sFxCQ3yeIUg2+Cc1?Hk|YDz)F)e6ExY$0%#-3r+aK#dAWn7@
za$t4;zX_V+Z(5E&b~d`Arj7(4!m4&zRX`Hptg8Jp<_dr#K$pd_KomnrXz8@H6DPd6
zNd!qcAe)@*4zK`!zNybnlA@c@i+hN~LouMSx>B*g9yB*nvEZSD35lyqAEb74wF*Sl
z3q)}B$c;|~k*-N(58Vrfek?--G0?|?5&oO1foKb{B=gAB2Pxab$n&6>)eK<xLS0jx
zcb-t(3AI&Ux{i^7Zj-2+8+dY4N%+f@Lule+Tt~jVAc+CBmGL`^K}|DHx=I$B`fF*f
ziz9h_Dh7MS_eZ>;c`_5-$hHo=bod}n^p7x%Fm<q-5Q{sk1Xq0^k9j73p+9P&l|jK3
zegGb?mo4T`VY6O|2hsxj)Uq}}QfBTTzmgQA-&4(xG{V(2f;7?x84*>M{-xp`Q@-@u
z6lv!ZY3uNQy__cgh_5k(<(2^(^*j;5^%$U3|2GhnPFSRwM>TH@URV4mlF!tTc4dhk
zlv#$raXGR5AtNry5IjGkV=U!TK=NmQVlLDqNGpQWlDtRo>vYA!Z&EfS6cmt>BsEm>
zZK8|T!|A(T81%D@44+T_(%b^>(CUJe1M$H!-_EWMxVpzWy#nIt_^q6Wsa0*P8R9q0
zySuH)%pN%N=75UQZC3=zpeZ?5oSd{WcueFIZzLGNAfyUroJ{U?5pS{xSJsB~>YaBe
zNmhKn82@EdBd!g4jpILyUHPFF)|#<p;8r7~#`-K_QOT^S5h|?ljCt0u#~G;yvsi|c
z9<7Pt`7f*KDjWx9H{PeWF<85aq-M!LV21-kXMJ&R{d3fdWDmoYKSeuz@NaI%)wi=-
zuehqJA76%d#yfG_)`(Jl9e2xTE17qKWB7-F{t&CK_8W_MV)pHz@g$4-6pEDUiA$`0
zBeZH(@You4bEWru1%UsFxw^dOZS-Uri9KN#ADQfmmCi@2x&Cd7Wsr{|y`P9WBPGaU
z(6odA^Lz~$7lpJY5(AW#KNMiT`~b#ay>0;qB>_Y#_k}q@-KW&zXPwuTCtuzq0r(t<
zSRqVe&1%&0an3EoSX$EgZ{l->E47xHy8EXeoS{%J`LtTUNqa;p>aM>q*dsGvZ;G7I
zktvYGE^)H0332lm(C-sSmjL6tHIVd@5!(FHy^5Jp8O0*4g`a##oafp>$qltNJBd!G
z8Mp0747=N|+d51{BT?j4J-UIOjge&8_ChtUr~8q8%8qFNhD(HKz1yVMW}nPDf~hJ(
zC_V=xUd%63HaWkt?g9w<@rP>CT^-*KMUl#W82#K)ET_|sS1ARPc&h{$pOGE?KyL&Q
zbunFFT1ni8a|#3yEqo3BhaQA{r}>(n;{~X9P{6fNgLE++U|=BAcN2|*X)o{Sh+fOF
z7rKJJ=N5)ti;W#4K?Se~A!_I&jhSKlc3EzJRtB6^;T3jNHJGWtiHOCj=2;BD$eKzT
zMZORL!1I=NW@u4fN+x%*R!@hEp`Sa}nwN1Vmy0%mlocuNlhFHc!}ETY*Yk71+Ts8y
z#oRZ+>)<8iSWfexLu*V2w!s-u_@h(`064QZcp92sIl?Ia;-%FXAz^`=X`f<5D_o~w
zCdOz$Yf>HP#D~!OwIjG{z-HhVOnE7d`1AIb_3$Cs^|kkBnt#zm>IFFXd)&=Y&9u9X
zd>yaA%_EG_ib+ug%kil=1-T-@Vq<T7b={i=pp+(xI(DC`^Kr|Y&eG9{!p}Bkhaxv1
zSTs9*x@EeC$LCu)oqzeVYKJz&fp-#)AWRF99DAcH_NTrxjO#CJ&JHPp`9h0C)gaja
zVum4kPLl%4d~OzMsw%Cbg;xjefRGYW%f^xHln0d(Z>b~7bQb}x38J<~=g@V~<g#1l
zvSA+Wsy$SsPcP<w5wLu9Sf1UAz2`T;q^~t;?3EPXx=9=lEA|uciTe;$QQ}k3tdD6?
z{SSM$M=w?83Oe@mGtQCM3}+wW++8Jt2MI4dV4+WRk^2hfB_iKe!<{A^s6T$1fPOxE
ziX-HT31KO@Z^=Kx!>tq6GUU9&ZmKwKZdYEM6ItF9JR9C=fAq&g`6q1n>SuQmJ<Wb3
z&eawc)Ku#M1ch6su7}<o1#=UWq4Qzq>>bU_Na)j8B;LwVU*hkt#2A$6C#wA6q@1zZ
zQhQ8dd9S#Xo0m_x*1^*rA*xd|fe|r9EvI}`Qm)rAO}sMrDXRJ@n-vi}I;fGBEKFI6
ziV9w2o0YDF49lTvrmn^YVSR>#%$Yei!(Ye7u8)%gvNpZL{%m1gM7~xs$`0!bm;5{^
zfnjBO`WcPj@(O$Kj4Er7D!tb9F>FPC=8P)QNuo;rIPVPj0;Mvf4zfmk+-}kkAgZf{
z1aXSELV^>qmxZO`2x(75m4+x(1&v-^a>8QA*gLqnlslfk|5Y#0O$DPGGD^G5H;OOL
zbxd?iV~q$}>D)D>D|4S(#C=IrO}(QM@N@)j$VIamSWWc1so0czI38yyjcdc+lIZC1
z=aM|IpnI;J52mth^)osjKszLnv2Ehj5N1kAJmep++F(^`!OZPgZ>hsdXk^v8&T<Qz
z4-1MVq;Mz^@^9)qzQ@;1k2n#s&x)Bp#<V%TMvJ31J(F`LWHA1sW*YP~BKkC1|CsAT
zwi$$$9U}Jh_U2M516e}Yjs9x<|FP(W$B|9txJeJ2X-oAI^v1Y0r%O&M+j>8Sydnp5
z1`7u=>!}?+o`e#<*W)C-gINVzKNhG7eh<dck=$fZ3WRan?&c_|3Qd^391uJCv+>gt
za|)nvO5#|2F$*Vi7MHU(B?+IiV7Ql9>P{pF-gXuj7<S4JGUWecfyR*6q8A&D>+cS4
zH1m<~B>(cF+sRN(czTlCLe=%5MN(kHA&@ems%K)K$$9s#I}bLZ1z60G^RmayJXn)Z
z`C{o?#*8Sw)B|Jsb8Fq*dhy*K-Q#$<McKy#xl*Zsb*7r**j=cdeVI2uw75u{)Fk|=
z+R=wA&d9<$DHZ6ojRS<-AO?~GJ-*GjC3dvEkNo`odU+m6*JT*#yG)7&s;Xb3|B3HD
z#KJQ1c08MKH^O0Ks?%v!mrCNWq-xD0=8ehGyb-Nh|FiL&_f5D!(Ci}N<e_m3fxqfc
zf1jDXrN=5?!T2)ebV`1PmYp*uIpxW7qhI&rB#^DEt;|#~ngX=)qFhJ%jwh&H77=NM
zEik>dpA$A@G7|qpQZhCc_<#VgJFMh;IlX6k%r6zY7K}|Rubh``z2WFD5I?Q7fN2V8
zNwYqh!l;l>-k^cX!gycmWvP@BMOmM_rs=#QP}&qdhllPofpH{bm!I8)zmY}&ElIL!
zr+@!W^W(kxO83^^k1N`gY#gmK%My?Ny*$fh5q^gu`N4g?ul3(&-w*8Q$6W6heF-5x
zyy#5H5M`lnqIN**tWZc&feJ)Q2n^_>yfwQj(p*acpZXDN*j)G`(Gh@p{4dShXS0^E
zi*7@;^!Gf`;aSS1u!gmyO_LzmSJeH*W7~Xs4}xdyz|45NkM!v^inaELL%Z7Oa6(fZ
zMv&iI^S7RN60;;EHU;ed)P~5=!F+duCz-sOug44*TBmA?=ohX}Da@kgRBM1QNuwGy
z$Kl=h=Y1^DilBh~?NX;N@4R;tOoFHo-%yTE3U>-RK>nHO{TW1VLJw&`3nv?gERp$$
zXYN~o)RoqPTJ0o$N&VAePK%`Z$)H!!v{nFWc4ok|qQ$g>;eIh{>Q>ZM(R7qhqVW|p
zC;i2Unf`K)ai>i7lFy~k_mLcX63r2}2|K=4<BIdE0&oCF3Hqe~%?sG5<s=z#5D`9Q
z%Vd8PZ*x<fdf`6l*OYNfe#ot>5Tel_vUz3;IBV&fKv{S0>8nuG=#mcv_*0bCBbz0D
zls-HXuexUt<`<lkee>GPrCm480+3|bbXz@#tmlYsC|B$?eS7ZB_lCDfk?c+>#q^eW
z`CU~uJ$iOY51yYo5ny4-T1?(7RJ7IF=2kRSm2vu=sT`q<FbT<EF6bfK%b4z9sp7{o
zmdnVyDbCPla0frYuj5>9A$@oj?^Fsd=SDZ6NBuFB)qQI!&tDGl3t!hv@2@%@?oABS
z;5yFSF5-?iZyGmF3HN^fvUfGCd2~dTgFA=su3gqj_S9CEIIIG>h739vryIu`>*x*b
z6(^PVDN>YE4)PapDQVcVZfczL9H<aWc|t;Wr00Z_Chs<Wr&u|b6whVaR5-Aa+9g$<
zyxZvB=;|U1sQvUBZS4fU%g{yqv(d;u+}C!(!r~_wB3>yHXuZ~0;gTD55~xdV&%aqD
zKv`YpR-o)HIDaxNlV5t<@q73n@SKu`E#vMN0(dqL-(!FAL50$ty~)4Fnj(*MFWM+Y
z9yS~aqh~1E<mRRDH+yaDkZwG8v#EMYzDsXaDa>Zg{g!f;Pnb#!b_|bxuQh4FJPm`A
zWJDi_G9+o14W*6h{ByV~`}aI|?toQQ>h0{aJZe(D_*kofj8CcGVDw;yEIDvwi-ha?
zJ1O<((Kfce>XwSAGz*lb$=?t)AK4=KoIy<+@uZs8S{#MwOOhC;q>1ZTUNE{Dg`wBt
zS;8XKiLdUBxW#@o*&2_?^$vpFa#EDl?`@DsP4y!sd;b2Y0LFD*ftN<>+(p_jW%V&2
z0p~;C^35x&vzwmuuA`EtrR!>A;s9bAj*^Z{qo+qq2yH4%CFkMHVFD>RQTERD5O2QZ
zuA1v%wc(=G_`OoC`PPF02ba~I(bbZo3T%Y0(f)aQqo)|3d``JetFO-Mr}VZaxB{ZI
z_E|rRqN|Uo9qW?1W>vv28*P}b3)!As;h09lg#VASk9ut$h-VLVvJy;G4DC&$=0ZY3
zKYiSbgwiTm=7-XwNlQyU{tgrgl9Yvb5)i$N$m$X=MORwa8V<?NC;dZi$Z^WR^s>Mq
zrs-zXild}&=83)f@nSY{)avq0U`NLKNc-!}NU`zl**S`{P@&a0h7vyi{uyM;0b}3a
zXZm&2Tug<+jluh_Jf;Wgze}yZcQ=fS)9^<H<m$FRVs*Y4q6>I$Ke3-fwSQOd@he?5
zEW0W&Xd2;nuAx-1A;0d@g~sxTqS-iJb>L|@QO|n4opqFh_fP^qih7MUx4a37f|Uu~
z`%)1*F#|mBu{%h(r@Hit_wV?Mb0jB5mYKDpAh(IQexB}?_4Tsin)aD2yBgJS8wG;>
zKazfhn6DNy_GrcLAehfWvD)Jl_#=fIxKAkq@>VMuz87DW^7UnOSy@VC_xcSdgMdAC
zE<oUXmOgeff&F5+_~j4{uU9v2J<o12ywH-px2Q<qM%XKHZoN%6%HodH5I?q(dYqX2
z0XWsvo!surh<46P@2A*ho@Nu98~#loI+sO$D_UV4=hOmbNK^*<$q`Ls-!G^ti?tDY
z=a8ryKn0yd^`j(xCOW#ao_)Y<;p07qyQbb3GjLB4I5+h7EfqRVSib|#_Ol0Dhhc2g
z$(uT^ijgg2<#@KT!v(-SiAcn(a+_i6;(@t+@-vrow~FNT`0q?-vGj^V1o^HuLw$PO
zx>`xTJQB+S%glK3<F-nI&hCpI!?Zoo8hdV5WOy^z1D=Z(2aOe1_CoYhoH2Sj_2Zzj
zjvQLS1&->VLLc+M3Rbpfev2U0*@~d2{GW;efOT4*>t#jn<)zX2SI}?Pvlg_dg5EfP
zvteeCWIuKFgS7iY>7H9NA4h!8lM6V5lTw{BMCEHtSWz7Wx|8t|gfJ2rwRA2&&j=wr
zh6jI(lL%@lyMu=^do_ooF}Kkx^F#0SL{U5+j-ykixQ9e*B5W#**=HPvRIqeoYAS~>
z6WH>2$~vtcaIPV5N4%eM!@BDkI6<Z$_52)-dC#Ty(bj=BYo#SDJSu#F>w{a}y+G!U
zAkQtjzW#UKXbwTM-_x0dOM0%AkchZ>w$lN%{`ZQT3BP=jneCYJ_GTF6{p>)su6lcm
z3XZ};tCy3ZmseRS;s^AhbVKQcO}!;!>djXYZ`1V75(g)Wgj5f?hlTh#e0te9D-Oby
z3P^n8D=Vc8nry1F3~Mr1(;2{F1i=82SY|#>K5b|K4j2BOBP7IahF0ePyv#82iDo`a
zNoj9Doq04_^y;beXjzEX%Q0`OB_)m2{S;IITHgJIOsgiDldm0kdH7H&CX~^bArTPt
zKp3POnM`T&TGUoAv~quRbZ68Q<PWtZW&66Rza(Nbu+${}NL)mg@o|m!5KD-u>hHNb
zN5Z!JXs#sj9R!8)<LUz^9#I%4BK`W!e$oEbbgSdJMSP>rd80AO7QMvrGa?-K;&L!{
z85#E`2XN<t`%mh53-~((h_xYhqP&DoGns~eoHc8^S5HSR4w;}1>&#xs1o#9EDr=Xq
zYm$S-yTDLVb+?euz)+o>co@JUQfKX^V<4fbM)yg|RIFEYRc?WU1^FJ?_0<hZP?eUe
z1pVw%7qQI+nW1Q``hA2=jGUm~8B`>ye<l{|hO~8npex43N%O1XGNZYSe$*bxh9lee
zZdS$A@}gf&17a3>L$TYgl+^*6$%dr;6?(bQaYI7ea<CYausfRea&a52nm@6nq$zSl
z4#`BtRkD}FrA?0K{<BbyKnefF?C8=`+oryO87b#Z$dYOw+dHAHK6uQjU-(u|z>;;6
zYco;z<ELTIhg)I`Zq+PDBlDEp8+Rfh5kd2Dr2Q3P#cT=vHYe{uL!WC_`h#32KKF~U
z9Nwwvb$t5`^OACJRIm$ON-?Vd75QReep#?b1w!<OyFiz7al`A*zIv<(EP@sN3&b_F
z#DW1@H7r=J_+2k{7x6*Nv_a$>A2XK$$XZ5DB4#r_|G^J09OZ|Uh-^18-(tBZm&)6Z
z18Cwc7Bj~M2@7uPYpA!zh6F+L?%1{Wu4PXzS_R@z&Pur5?5}>73vc~YJ#tOXwa_Fj
z5Spi;Q8k%%5V4;8JAEtFu|Wp|q~+pa9muLcXw4k!q}`lOwP`z6kBVxHS5Ns&aW)|Z
zb4a<<q&}cC=G2=zn^F&%fLT||$4^e{TwbITvORW1Ex7%F3_FTjE8tbczAoE4JvQOP
zTF{502JyQANW!U|$5p1^x*eYM)pH@++Rge+=X!GWVkSe-3Hwvc^!?JRT;wH9Ekh8P
zp*c-LLtz@CQ}g-vOjWaU<wIy8q@b~V335@jjXwO~cO~BF%a=IG*8P%^FDG5@8~JaQ
zYl5KlsE~%!qeTfqzkZan?9#(FH2g3eW%}gpY3(}kC83k})(!fu{%#mx@$Xe2;e-A9
zRdfh(OD4wEP6Gj}ZHjBd78<y|c8GY&0oQ9oK@(UhndA$P;L^cSOe!z_^WEOj0&%iw
z9pW_z_kHR&AUop#lW|-)h(_7W>Zx~FRMNtC%_zY&g)RsR$4}cT3icE<vQKnFF1~G#
zn0DMi#Fn7JRoPg|n7H!kiZK=MbWS_@rcc{lqTigjriOo&BL2wD4&(Fit-9v0!?ov4
z3S(q(s?@uUXkVu}--P2TKdgR_z{a*Ew(4urf~++q4Gi9^IA_whLKs?0Z?>}?GryBG
zx`nTUb!+_HMB(%TIsH6N*Pg!yfxW`Qpnw)<<5LJ<H!T;p9@}38wp=vTHr+KpOY#u)
zQKXTV+KH=RVAX9<Vje)lKMGAVL5?sk8=Yu{D`pb1c_yba?$OR>G9g)HC3<h`d$e+q
zKe#VuVCPG?YGxX9q%hKtDvJAW!M?OEWzi7D*gQw&ReEeZ;4{>FJcuEZzH1biDaC1D
z1oBQllt$is)7o?Ql~RkSaTIgPc=hxf8*d;i@X=@4Dy8n)E`jc7A%PArY=%+<a1?7@
z1D|jdmuLJ7gNzf>Pv2+`+TYo(7_KGECcb-F#F?Fmh#2Wa*6Gt5l3Ke9(L{G~Rlm8d
z+E?e`kZ;W^9xm11Q2hc=&yw)ryBIw^9Z9dXHH*8~R)JlNZaKzmJ(&NxrtY)1geZA)
zB6fLEiu3l`*}@`grYC+E=jC`l)u`y2x=p#&_P_<Oa1SX>A8m}C265J0KAK3b{b>SU
zO%=DENNWzx%)s=WqMl-Y8XYBJ-eW!t@Ssxpm~X&zm$HfR?Ish9#P`I--v4fCU>0Au
zhpezk+(CQ_Ex)YtO**2DeQP-=B?_`PsjIPmI8Vu!W3Lffw6BzvkuRoHib(v{p+xOp
z2?@_%0;2uehqkwua6P--(;bXy;G%&8B;L{zRup)2U-R@iuf;wE^IpMvQ2$|=_LHNS
z)eqAE3y%)>wO8?i$PSPdzNqdVuW+p@OK|Z+*-{`FTHz!u_U&~k6lwCZV7Zx<>s3~z
zF4(q{z@bdy1x_$dYHh=XNsO*$WrBs@f(`R<q>lW}EidDqG(*THJY5;1HoMZM8(D4Y
z_>Zc@m#<$_*qUhJY_cbzdbV!vw&pe7j6P+W1qYe~UuzG{pNu#d3Je-WKQr!`)piem
z4Jjg(tvf<yuspgqPg`-b|3Zi>v)&1uS8L!ZPMnRGzSuomc4!r~Cbh0T8~Pzf*o}N>
zhs5qv)pQS>#a@4dAsiy}+c9&=F1HBSsAS$LEOFakrvx->ht+>I$RRmdIC!M!M-5gK
zP?RW5jBBN9lC-@Jm$VAdavCw%g{wrSr{f4s3b)8|_^PvwljuWSF@(5ga*$?L^<N){
zWY^vvYajAeTl}~kzPP&g8dPq~pi(CbwU0jKw^K;$tC_i#8Fo@t{t+JkXYf$7fMKc$
zEC-ViG@qJi-I%qtJ?ou*I@<koR7K!vM+RGiJ3w58`{;n~uj80_@4liL(hV}Ln`X^)
zTPA(ka7%FV%q=2YADNJsIo^VMy1VlVWYi3gShKRI9f?9=qB~0}57%QyjbVD{q?a1Y
zX?YYuwW@CtFW`3?W^%&;H@^>6=aeX4d}`N9>O+bBU4}h9If+hixVLvEYG7z6mR+V%
zbj}Hzv_(O`lU)gbenLWetxCSusa<N|O7=LsCT5jhk4?;k_wa`SbJEC8#qDsP1XpmT
z0_s<`p<sL=Kv9}dtBkpI;~m@pKS>)<aiu{|Pzv<<5fxLbVur`SF>M;JQ^<LP1|$TD
zxU-$L<r=sCI6+%H$*?$oSZlbwdy@xA;JmS;a=g3z&9-V<S&_^v;~&6NP>vNOQpijh
zcbwjk43;IAFwY6aJ|kL@PxTjCL(kZ2dTpv2C_))Jc(JTI({<DZb*4TUsoh<AapAC3
ztngFV_uSgnb~jUKfz`d)h$AH<IY)faZ1<hIwEUq_(k|@i%2qoeo2$qyNGYY0_bk8n
z&?pOXY13%bgK1j2GhHgbWx0~-S95pA=BT~rtg0HL#DGUfPDYjy8@pm!S6Ru!#MHNS
ze7-ZD_x-yldIIX#ldzjR!LGZOg)1uG-g(XLzCRq;vFU_VgKXo)@{uVcu)X6<X$>+D
z+#>6x{;C;di`_53G8r`3=}k92*h+WS6Z5`j^T|lhl+NbA=A~OmV@ylQ)Cq`%dh3R}
zx;1%_?s4Aiv5S7zVt(7Pj^#_KqN*(a?#q>sC_UHE+400VFOeyegW&Rr;A=CZw%viW
zgx3?raX+rN3mHE{7-&-BaLD9a<nNA~1aGj?mzFxC%gzNN?U@x9shl_qUTF`74OdjO
ze!=%On?K95-lcpwX`j+fzA4f8+7v=mKzSl&Kl0O?@^Za)%{29iq8_dBy4jnu1TIEI
zkwQ!+Q0~w5cnXgn_J6$h85=tpZ02)d-b8h(g;ou8B-xxYq89~W3!O%^7(d+ScDJ7X
zF<z(<G3#gJNAIQm;}$S+MXE4cN{?wUHPAaetsM8>{DU)2MpEka)uLBU?d#hnhO*(7
z$;YMaiS=J!zMu`O&YnIT&!XvSH7Utz&f^x6^*9Q<?w)Qv`JLC&9Z&2|ThSTW1#JHa
zg?j5HL%o0V&MmWHq;U=7rM0xQ97X5oRM^Y3DQIC~%k<OV^FUu4jHtKn{7mc?D!haz
z*FywFG46l;=?v2xFL+&$@8kE~H~`w7R;!SBk*1QbX&G-DR;^|=LJoV7)7;w8-`Zr$
zwh$Q^f)$CT2|ol4$G*}0EK{U)YYBfAxKu378WDZ$EA^#WYC>O@s7%Vj<BP}MjW=s`
zckA<?Aw)pV5JIG;O6PRztrC@dTWU1E7{r>~V0C_2yImA?6q^4Gq4^^T<c8a?uk;M^
zsfHZcXM281%8<g4dmP$eomcdA!yp4qIZF_EN$)}#!o-n8Kp1YEc3q*MJBeVYd%){l
zp)kig5dp$8(Y?Sq;TaZP%fBwzv!s7Vq<m5G_>yG{TH2!U?w#`#hn!w{2Ehau-%nnC
z4XdbSr5dZor^Ee%XerGH>~aVyDk?24ZL`=(?*2a0QjW~X4oT?AhS1R(_EJ<t#A%b%
z@C)OOcNesSHv+cIQVKssT)f_BK428tZw=?DzI(CYzQyxem6xCY_>+Wam{yFPg;q_Z
zp53JSOZrvH-ijX+V$NvD$qfy{$+&$4MiP`Sb(0k7c_}pP5WjY<CMM#ajZlXD_)_$w
zu=;q4lV@6rT1oK8`z8R&|2elP@MnGfO>Z2nc;-9UB&ZZUvvL)6XJ@A+OA+~0u6ru>
z-6qwo5K+1qT|9Yk{w+2fGQT*<_vkNb<!Cvz+VwR+FwS~6%M&}Q@+TI}$JU*LgV93p
z+HjAQq^0tT3erUe<snCmT@b<O1c$5yeo@cx>$jQ@y+5wtdS@wbcWKuWY2N$XYtv{q
z4%AUX5kqL`gg>^2ynlZS`P8~x95r~m`%OmBp=?xZ>=J0Fprw_Fov!eCF1<}OrYjwW
zNs|*q-bk9St0|9Y%?vVCjGabifDC;^LLE>fsSDMf3K_L4Pgdo*OeZC{mkXB1Du*-%
z?Ec2QPj91Yd5ZQqc$sq}lPRy85>st@$S)f&)tahPxyC^7qhc}(ifJBhrIJnUpj9Rz
zKumP8HGKBmSBWurN549hanA{scnU9PS@t0PR`j;bYT5R1`H@hv1#I`lSv<$wE<V1N
z4mW*QTe7zng8>WS5^l6VE_PObm&|qz)EQ7=^}}Xyf=g;j1*@F{@j24p&^3HVKTD@V
zfdq3r5GiS+@H1>wqmq7P0>=cnHI<Rfo<(qUfpr!;=?vUkX|i}fq@RTYbfxhtnlFhv
z+Ab{r8E#Ghv~jBB;;m-SC+Ze3jx=z)NgRmh(760B;o^Eml;43u*8da|{eAhMVzR=9
zH(nc|0$do2Vb#N5Q89VHU8wcZ&l)8Gv~e7ZZN!W-6f)KX=Hxn=t-ZAj4E$hGy?dPE
z;Nb9)^(C4j;O&$#FP4LzfXgC)kbqnRPN&uKZpE~5m=l3Fia)ds6&U9a;=f;(fMY?l
zza!&O0XOw(fs0?=&;6m)Ccuk72$<b_;05v7|ECo<R{#`Ol{-C$Rq?A!4lXGB+cl)C
zFZ|`pmw{{+(s{3ygQz8@k>9=|P;Dt7+&IR8YSPouU0360Ws?w(BHvX$3u7vOd=Ps^
zi5&nvgoAH)8U(16g4P+1YPvL-lc@ZU+l#?a4Nc8Y4`2}0D*^SN8aFiw^)d9fws465
z_0rf+#jSxf+H3ka%M;gWlj#q|l|ghG>`{qfYiB?8tf=|l8YGIcy>f-vW*RUPHlb<E
z4hirM^`#P(VS8+@qh~>s=NN;`m&U{vmP+Y7LPOSQHW2RA@FEW15)?5Pov4o|<UP=p
zS66R+U&A$9Yg(!vEmb^dbfU$2v}Y)XG!JSsC$SsUaS991Q4wJxN>#?)9X1Zn<E1n|
z-e%m~d|c=gwd%swNWeoGzI@;F#_i6;)_;A!s!o3^tntY6P0`M_W}x9XH?5Gcn{9BJ
zGVYN+<`3A=;J|5*l*V#d!{&R{ACi*m=6_)3MRYJLeQWp7=*PHQXh78W$9=na<fF6g
zgM+w!TE-)bNdflD9nTzMZ_Db8WX!)84-?vebDsUaO_d^@Og^!8s&3tF$(FS4sg~@w
z7s_cx9f3SR4TbDZJ-@^=D+Y!(JCS6SygEyzC{@*SUl8m$L%!4GLjrzZVZb|%6(R%%
zv0QPdB*vc62L7SBR56rvTO^zCiu~8O8-kuK0n&IKY@b%nAj8H76y&3e!V(newyFyL
zbT^jl9#}Q**r<1U{&HnLQ0dI8X_jU-qav-xhohjQ?QOKnE0F(d`z<)Gh=--Zeic(o
z9VfHE7)`n#8;9eIUb#~LO#URsIh`F{-<YxbP{tmQ%6Jt%k9awpx8kye!}<<;V615C
zKDX3n1nJ@s4-0E%qr=%O*U!q?l-WQ!G<FYN$uLPly4L*XON#?C$nzvC??L^~P9C^8
z*=G<A&lm5y-Y@eeReA3H{imyB)7gV+5ix5Kvd`Az7*{Uz{QJdye*X8tJ6zJbnz%H>
zhC2jwwXxZ?#iJxcM!UM1f4sdd9RvReSlp#69g#|~LzxGLFIr-`!1VvzH|)Gq3f2S<
z#9Bp@ZRTg%@8a&-*aPU`!2$iXe_`qwrNls6K}tYxE+CA?xsG+qX%r4z=A69z^TG2%
zNnVA}+%sy_MKG4n@Pj;2Jw5$|tZ&sxMOC<^8$_DJxJA@W5j>eZpuYF<$9H(tVt-Ex
z5mCmN6O3GJS2~R65Xjb+I92uaxFaNy$qgpDo}ojuSMx4-Mfghm)HX8QeusvHgb>s|
zncUxat7y4Ls#V$z86FO19{Rr^8l5bzh*1`R|1kjn3CJwgn~lz^P2@3WoBH8_cuJ}X
zW@X4fXs#*Yslq#`DrRQ5oHdLL5La=nDXLmO=zfn&uV=KdUbz3Ro{mraR5FZ{VROtv
zsISN-*n9*1!L~DnNOpnY6L8UY*h#zO#X6^ng5dJ*MoD|(^}FSVqI&wf3IVHVW-1#M
z#os>73)->-3t6VTRz(=y)<fL;akO%zo*V1?wkB!u1|_routi7V2{pBvkH7P5&+7fz
zEsafggdeS?URKZMQVgWMeO}2Od6P)Mdwip%=CiKHOf?LhwTQIQQPb>yP31;UFRr7S
zIC`C$hC99>F8JsqevG!E&xhp+9#V>S$)>v!{|>#oE+{_LNPwr`74Q6heU;cauN>8d
z?KHI1)8j1gOZe?*MP`SjBACl8sI*>Kv*z1J38-(Flmm}80neU2N2qIJ%%{u)W(Oph
zB;XFI&Sr0Zy-G`Tz2+L3{vDE6!Dln|hSil}%Le6V%goLZ02#D`lqfy7e`-~0nJht=
zOssR!ZLX*H$9878n#i#kn`BS{PrJZh6jb@pggvt|3*ZAc4E6I0$>|kleusBMc<tT}
zaf_$MRgYXMJ+hVr1n{Le)z!v$;<#eo)@LQB)@RfZrAG_4;yS$xk6E>{icT20fP0?D
z{OE4nN#?mi($`9=*p=*ExW|;4Oi*~=FrV0oj8)b;{bNWiPyI)+*5p)-kf}Y`MKd`-
z+>`4vDf!nXaSnBs6s0}^ci#t%4`6P<g}e#{)*<3~gr&Y*Tpk`t9waVp5DsKzIL=x+
z#;}>gUEXLVIoWvQnPXSCt54fS_i_AgHM*DxS*NgE5}r3O3hz1Al<1M56Lb%N8Y0mi
zQgtakv?Wm`o{F_~w~UM0=FAdTOLRFP8ar!%ZM|-dl9hiNZjH(_ox}x;Mzz;sNWK94
zZ5X@J3z_9&mEkWk=iU$@02mxEg(jz6AM7)g>&!kCq0UHl=hGUr9->a!cI$#Hu@?k6
z32iFg0=IBuJ^lBBE%Jw~T|bK`^!)I2r#F&J^tiVZ4lQv4=kfJgI5t1qbVP!VDhNHV
zh<xHdV4;2XeyRa+{_vq3oqWUAt2AJ5@ahL^*tMR`Puw`j@U<_T@UOG&s3BmH9IaKT
zdZocmp^D`u;81X?)G08fPLNsOm&OFnr!?8)V#-G*@gh>oTT^p2c3@=uO@72l!=4kd
z&*m>~;AAZC*qz@>IC(7Qfvq|3wISGqyDY(XGbZVR2vutVpU#RE@n<3?>lHEAGc7D`
zwmbnxBa&tVmmQ;6VAnGTJl48l4KQo{+>+h0cxN!YhG>mR9HLhw4a1X!AVr3?fMMt_
zGI1U45WTRAcS|qX^f|#J!&*0j&1-YdaxA4n&<ZjdaLowVd-m&IyH6uO-mhC|SarCS
zTj$g-@J$F58u1GFWZozZ@O}KFkD>w)6XC|fZ7n}PY7URp!&+fWHFW2Qu$IYol>>o0
z_7_)zeC`b#*1{R0dJdpFxC-JwP6uzQU#KN=1t2g8cU1^^oo~R#KiR#uOJCUD$uWM)
z{wV{~p;6HKGHym+IsR*U_*?$<1_C1*EAMJ&IMLnR-DEJ^k5zQp<=v2lde+(y61gYa
z>$W>c799P4Y)W-Fr+I8?l<7M?tKy>Hxaw-j%i+PeLBsE{a-%u-)tmcXDSN|i=;yux
zk8Ckr1>J*241)vezw!kyd}U>NOj;+^tad8M-{vd(eF22EU%UI#koiGCxf6Am*^WKB
z3VSEf7Gg!+>Zm6@ia*GWuUKBCBrPX5vU9S!KdbI#K-O&Usih&E8ff$O1pdsV6<~cW
zVg`+un;sXZXF_L3_dO|%@=A8_nwt<?iTRu}HTTJat$dk*pYHG{&tVSitjAz-3hQz0
zhtkavG9=B?q=##i9xxZ@9Xz-%1enkjkohS!#Ijm0o@?_r61czg3Mj}(T10vlE}cov
zlAb}MtdIy~fWQBsN&gw@ew!T_;FXi>@Fu9m(0HEPdF8xqbznO<V@-STYjT9Nv}X|x
zuW10lP#b+cK5+acmw|Im1jx^(TPD$Tf59eZmEkpZWW-hW!vsTZgV`Pdos-Y*@Hlc@
zgoP@Ka+iXDS+%JJJvIU7f33j}kgRs5KR*!;vP&D6MEC(+iBTK*%0rWE@ryM(PbW72
zU37duJ+Fh7V!YN*E0M(8TmHe5&A2?w{#(e#*6X|C4Djoe?uWgKUpwV^6+vSZ;z$1|
z*FzYkULs-L$D^yIr*A9zLcwovuOA?#ttSlbh+)EbZmr;JNS5pFZtwG?tmUbgGMM!r
zSnr)vc;nez>TLLwL#+)CU)<C?bTJVX1tW<}s(@U%D<6j^zaG?G{c|V((eaVo`zyYk
z*&;+%ZXA=pQG+DKH1JOw<cQ0*g>AD%JseT@k9mh{gZ;$y+hGD-59>9*_O<E_6%vXR
z^i|gV;coFiKG)K7{EiHG*gG6nxd;eU5Q6Q`1RC#NXiBN-1|YS7IZuH5d*08dkS|GY
z?ZbBK0}fuZ7bbj{`3zkPbo0U}ErQL8dw_mxbThT(F%jnX1-Uuh4j(G1L?%;+NSt=`
zWNkGf3E&vu_#5F}&rU+6+?7pmSPe?iVPnN}cjODk<&i3Bonj|m*n-)a34)zFl9(Nb
zwHU!2zYOq*Tfq7aa_3z+p5#uH;a`)*Jgr>+IE1^td^&C~Vs^Nq=C&<94TMbjT94t^
zZ*Q?^O4Hm%4L8PQQu*wh9WE~l@NsoaFRCMA{S6lCF5yFso||DkOBBSUEi*2r(w$-(
zJxVV*bSbJ=hR}TQ18#O<Udw^d>Pom*oho#EP^F&%eUmlL*sI|El(I^5!7%^=EBcrS
z?)Z08<=Gr|p%%D(F|Mmr`i^50OD{X;dwe$szvu}~U-T23_1sk?8Yn%vcO|~6ek=|1
z#m>}V&s;LDqv6sDMd_^Fm6*`GOgQ3m3WD2O6BYFAOqG7AvkIpXp9?sO3$u3Lw<_Ru
z3i>HL&8!kNC00hWy7V*R2XXr;5jmjW2SGj`?$l@-j>H?a9tI~xp6GpTYc`l{A2e%Y
zwS!V_?}j<ZB^DAr+}2n9aK9IX44gs33=St+wSV3o7uxEuH2bg{I{W=PnB{)SW^Oh%
zmd8=55#+2jSsK427{;!Xt5dJWK&ZNKX$yqYiyTJ8ke10cZP}W~yy|+xpy`fYil@YE
z!odsbYD^pBhwpdr;+9#Ph$p|G+X&qyQ7dA@Qn<oFO|2dl7+RY3YW8M$yhJr)U1e&q
zKm|V7dz?!(v(@$d&d*Py=Rp5rc=dD5i%3p_<)YtEULwCAtY#+X%yBv@UpI=lcJGpz
z4x7Po<O1v`WTd9ds)fs?W4vDSI-wTlv<8p3H;IgVefN(R5sBU(yTGws&zaWJ2c|0K
z+#B*9&9`oN;8v=}*L|(xqGynu2|G5i2JNAX_&mNI4!+51xQ^@HMQy>bQE{xC9`efd
zR?4nQ6>qjfQuzBLwz`9KeRHlpvk-`oC_Yn4<Z><Phpy-HU(bh3!5c2s{WuOIQDu=T
ztX~;wFB^6SBo+zFZ)HC#aT{&Wraw3)SuU5ynHuuuk(s`GImQ@av8l=<T4qpgSuXhs
zuVN0Z+B<it?V14^XxOB7Kfp6wr^0pjIe%a4=6li7MKWVjzt@t_YkGS6s@spoHx+wo
z7tVU|*C~4%72`?{=Z|xb+7f$H+l4Kri}jGn0j(}RbV`n1$0j>2ZWpb@^J|&O4Hb{7
z%oZ^g{u!zX+FoUHa`MQ?^V?S@>Uw%r11apfS=pw<Q(<_m*Y-jF{`Z0zy)UC$tklHJ
z7EV_pv)^_uaU=~NQV6Tj9%yn$Li)J%hFFHTbwBA9C1p1;!mmA@O;Xd+86%=j8wmEu
zESDbjZtiNINr=%NkXd3*-Rw;=XRS}r$3LkZ;Ur`;MqG&pS-GD_N%zvbsGpvgcMR%_
z1&O~JooKExl^GSt;RQ~<qJEC)i|EH=J|Cte7CP(eRf~DWAb;K+jr4SVmdmru_gcY{
zlovlQavuiqzq@qaqHq2mT)lNv98I(bND@K<!3h%F-CY8N;O>Kaa2ebsKyY`5;4Xu^
z1b25C+})k+@4dI@?AgDjPWM!Gm-O{}e?tA7bJ~m}Z$>vU!#YU`ir4XxV~ouwsTf4m
zOc_%+IGl{Cq%n4a!_74u3~H6(J{1lQPcX%7N+Ejg?*YO|kwEr#m07)8qMbX-!b{PM
z+vs625&h;7AIfBTt*1uUOM0046*5C*XKgjxQLoo@rL%J|Y@Z-Dz8|QejHY?%a~Ax3
zq<K5crrrNE@+$`L%Jt*pOqOsw*7jW3*n!m4`jtqV{vC~Zl9t+Edcj*9rP(o+j+bR_
zmKWGRg!Y=7o9CsFz4Os-Akts1bDV51{UAm8HrMl3L#}A(9&KQhn@2zvSb$uYjOBD|
zd9=hnpGRZT=g}}bcnzze9M$|7>n<`}(N01l#%cEiXmBQ{BPncGd*gSvJ$QOvPC&Mu
zfO@IG@L}DT3TfGIXA4GegBBiH8$KwsSzea=M^~2yn8S72;U{tyBF{Md<`(3$YCA-r
zn;XPx^N>y0@#cUQIK;Pm`|YL%IF#9;K$V#y{pDTx9@X-sbn6%&m09STrGzvpRWHK%
z)mJGH9v)udC^J&c_uGvfzvWkXOPAr3FK4_iJI5<CRvD3s$T$@$mb{Gnsw&Hui!Q}=
zhgz%-k3mnpq)poRx$_VL*=7g52<;k?@!H;%_$G2CEDkz~E&KUibNFw(1k1}gd_E!>
z+&ZzmNlzCA1@bz~f|k!jQ2A>2YRRj;sQ8vOq6$kjv$|A8p}M{z&+vA=d~WSwZ>K;!
zG#)n5<E9-=FQKQ){%#*nJ&om(39~x6Fy{To*~^lv>uhDI%Oi5pf&4A&_CK+zQ(`ov
zq`9qN3(vUOFt6quGA|o~+}FcKVhdc0Bf3c_XHEI)W3B7K(lJg`Z^n=D;DlFNCRN%3
z!AIvGq-a@S0=L_?xwoeu?ql>!hkvw1%C&H=W>a3nR-2ohbsksj>V$l|025d7t@Ay|
zZOI+!j8M_XRfVG{!tmN~3a(jh9EW{7|LgFY0PVxN88kI*Td<j*)u?0|YOdC?u}XXM
z30m|tgBGs)Z+|sBlpGYf_Ln8tm?%B^gm2AdJ|Z*-BsP-9S#fd>`|b+lHXyunadp_x
zu0&J<lHP{E873TRpX&C*Lz&GBQhCW-64~DFtKWQgLOl|x4ar2u#{bH3nBRIA^SX*L
z#P;G|i=^p*qx<bcr6-fzNu9lVPG3siUhzd=l|<8R2?zz)0K?h>c=nIxIKHJ4a&hs)
zbZ$jW&Db<4MTd4=^Xaa-W{(s_Y@qXrkI%yGjp*4f0Yf@g3=fB)$SAurcZPZH+|eN2
zf?l7ioAb?~!U|Z`b|Ck~r*-YALlx~sO0)8mtgk4DDmF1Tk7~46oQf>-+2L+Icp6Eo
zzHPB(?`R;?Al64P_wE{R{c3)He~2x#Kdi+g@SozypCz!W`k2n#%kxfG_l>=wM2v@2
zxZ?QOR{Z$iZ>>`d?g!HYI%iGp%@#KE{I7+tOh;eoDOj;KHn6VAH-d%OCYGd=@Pj?u
zt^Ubc!ovVwYXa*J&AXftGEz+GjPeTH``@HPzP{O8FFk6-eMOH^p)Khs@vd(@2@C9k
zcqQgN7%c}na#$m0nr)I%d@&W9M4X;F`s+qv0VJgE6STO{kz*J;CXZi%8p_pu-Aez^
z={y#2X6VjJBPs;J2e1AZVKZG_%lpPw<n9q4`-s(#r00>9-7Y%5b0$*7KhPmxtURN0
zQDtyLCbEI-b7M>_ot}IJlIODQt;V^W=w^+~azaFOk<VCD;#X|%It=5DxYBap^-GMs
z6y4Xs+{i<`ycX+e+|2<M-}dT}(TjH!A0B?*CydWr*99$_?s>F~2?%8?lxfz{{sA#J
zP2>U;-SF$?;$VGAACBIiTC<C#BcohQ(nM0u(rfLoM}<`wwt~Rva;ep;1OlzQde6zC
z+G0nMQZ^-H`;W66-*-PV71e}=)*nMVD2?8qj2v8fm%@+py8vdSAG(KacY@sS<`=0_
zP5<U<_*;MJXZ{Ki2~sHo$y3;(Xlf_-;2ei5C2|Dk$J8YeG{i)dyCY!;$;dxF&-OiY
z^gT;HaTghivqxTGOMc}@@?$FX-Fw6Xr~W=VR@0lQE<5ouY$B=r+T_125GtyoO`bo6
zb5=Rl#fDL;)^N>i-6l7>k{ZUl6kqC3Dp60026;za7x|@>06Y5t=WnHBkY`6~!{>Tv
z3HVPs_~tO$KtaA&Y)}c^n#vr9h`%v}mE+`44dwb48P6<r4i~W$TkK_ciUyso(B&xl
zG{Ea50UBk7^c7;9J6E{I>oIblG{bG@Su4U}p@}Nwb#s5QheBjSM7V1N8cW4I2LJN|
zEE3QPZ5}!SfrTU@PYWh<8pxk1jZ}&?PZfz`9`l?d(-50M)KOV%ofCs7E?hYdHf&y;
z{J_}IVwMjy>bL0_i+moE(qZ}WHa)yPQ`}M%Ds$}0uPFyP^#ZqiMz5m;BUP!f!8Awa
zA4N2dD1VnN-Gj7Rv;<#o{a<6+h4Opx7!oJHfJ9dv!P`*1ytM}lrU%Wf+=6SQyS$zh
zZ{sVQD0NTy?fgEv!qoONyu+wyanS+#+*2|Pk+3<@(I)dv#&_A15F`fP#BW9?%zYlX
zM55!eh2T`WcJqqhKjS(EksLT<x+a?L8kZT8<&X0NNE{O}PHK)dN(Ag@?jN*#RQtJU
zNjd$7l4&)+i+d^uQqu%hv<!L9>laaqIy#6(TL^1~>QmcYHw`yGO#2@vWF`M+46yo{
z%gKz0QTP`F|7qiZ&H51PvtZXMNr72|XxYfdcX-fRToX%A7R88E^48d~7k3sUc|s;1
z-%}J3A65kM_}4qs3t@%NH9h{A5LAT5BO=3(PF(3-_o(9W^h~2Xm6QA6DquwbCen>h
z#Hv(S2-3-tuE?usSr%w>YCSriI+(^phlh_FfN?RF2W$$Kj21L~_IFJ;3^W!uNSl6`
zv3RCoU(wi0sZ8k7Vi+}@a@8yI$8<Sc-^vZ3F78u(A!4N@MiZGWITYpDJvJckn~w}Y
z{L}WhlHdT=+dk*uCQr_Qg!C&Nc1XymwnxCjdGc#F_@+mSb5A~ewYhW&4GE7X>qqYN
z+x^^DA+m0XfcHU7D$3GRg&0*xMTa2o5vR?xz5VrIhTyZ!Tk9d1aaMJnqd_kvQ{d^5
zBW8XzKbT!^FoV~}=I4}AVU)Ij%i*P3T~?2Ho{ScCTAfI044aq&)p}~Dbz2~v4qReg
zBO)RkEoJO$;ZE#I@8(D`>1BB3w32(E4zqCeE9YP*>XSA9)g6-)RoXX*#;rPtJQ1zb
z<zy7u8#&`e#-U}+y|dCcJLl`nqj79&8u?X0m>F9Bydp2Z$BE<M%P@s-_puAo2()9$
zYknXaf%~zue~Of)c<pXa=91=~6EH_G8Aw?F$|n`0v|nfDp3HII*t(4ywJ1*JtO`_J
zRD6p`5}=#RDaMAYWm0kWv{RA{GxJ}oGLxIB_n5|BLh_28suiJUWj+St(@w!wwM@Yh
z2Z=9FVUdIs?sK=pdatJwB<Pg(H>2`CQvb#Y1Z2J*ZEr;hUR?BhSX!h90P>X&5YH+h
z&?28vjePa+T~k+ASIv}&axeB=cyaN~^;}3G%Y&8et=eStWoJiZ?7?%uxaBigx7l%i
zsZP*)FGCoc>GA>g_*Ay@1>_Nw9CpGxr$0$cY7({=iZy~tP{I=JY-@wd?~_W+;Cs4n
zdZ@MV$XVbLEGz#v=~qa{cgyHB<EY8HI~FyMWDOc4?N@)Y<Bu)RApuglL6%5`OgO<p
zGM8DY5-!NqNaZ6BSd4Epkn5?3O{OuNU!aFOM7wVF>Pq<C!zeE=FDQW^<kup?tMwFn
zZ;4Nexb7`YCA-U5a-99}lI6g#hRsz{ek``=>Sj(4d?WO*X;@S2YgZ&P|JL1UqfxfH
zOwAe5ELH#Hyc~8+5P6Q@4Z}zi)~?d0(m9CqUPuev0v&(Zq6x)ayn5;Ow_)#B39m5S
zep>ap&G0><-mk2W{zi}6yzZ}#6+vW_eil|nV>-r+&dg-Ehlw(F^Tf+5V?$z?{w(`r
zdXwn0D5r=+xlon-0(p5kq!r%c%ysVs3MexU;_B+^wxq)DbTy3cUR`$^7=Mm(An5J<
zJp7}ikx55-W6tx7ct#;p$uFhLrhV0UQJWS%YZJe^j1o6zy?NiWpy2)3z0TtU#f~xg
zHn%{3@!lFW@%rbJ!<oFIRlzhd_Hb$n7KCz)bdSqHn5b+gAt$Fgu;u%w@bOamn4pA<
zN_hHXTIqhgTEVv~)b9NvMYYA~P%q%CJ@cmTSQtd@hGZw45R&%M?>&Ww<w!V4esx)6
zpB%<q+Kh6VL>T_c1fkzu45DyZW8S4H-_1FN<OtZLo)sOilo?)u6TUxHh1XWqC8a!a
z)?5A_&N5hRlyJ96HS3a*GkdfDare(dv-Ft;^4-Q#;AI_whyg_iq){ECYFSIx9Q9^j
za-pr|Agnc=zgsLhzYV<|XG@gWV@#lu*-Cv#C9{?_U1H*J%qX|9IXiY=uMgT|kWOt-
z>LPOTCANJ3rEzGAXpMlLkCvlIb}R0oeNj+=vc(~L`xrB@m7B{q74sW5v3yivh@IOi
zA}_C>_p|Y6hzX_rHTI9NUy7_JEgh25p>-!79uK))9o`hPQCLEUnPT$%cU4xavay=&
z!OkXTwZSS%Jt~jQDLFl6k5DOgRVSIe741JFlye<z{7x1*OwF`2w9-K+M7OdaFD+xq
zDh^*SvTe^&be>|WS|uYKrNwY;eXURI*v&KS408ugE;>Xn*UiOjWpjRJfWN$@^6H4q
zUkQ?2Ydb$0zTjMGBujyKi0E&z%D(l15OOszET+wLdnb>takJQfKy8G=z@VsrD;-4m
zKyh>(59&v+F>=be4+<-ae0MnSGi&Ab!}-LK)SI10BvmnD%*Nb2l`_#cq70-rGqEW#
z#LP|UvvnXjd7UvIrUw0SgRJ}p(Yl&hof35rfeRdlb}sCVD>^7{)s!Llg}IdyBn3j>
zpk!ReYv@#yuTL*;&3C1%-TWgLE(t+zobk*$p8ey7P|uAT5e*9?>FyG|c><&MNyM7j
zCsk;hAU=nv;}(AmSH+izfVJQNWe*MMMI<_9bDkO}8(bFE!D+Im3%l+@svD;7q*V1Z
zO=;U4hWN*vyP4JQ`Et&$C5)!NC(rk((!7b;Ct<|s0(1$PT(Un?A>;Dj*2<^e#*OTo
z;=`yYX(WGG?5alz<{FU!AK?RK=}#6w;!kd{Fw~^SWT3c(ot`yyh)bTmGV+0N^3Vio
zCJ@|RH#=I&63iXGT^jfAQNi_)F8%lxiy<PvQ^1(AG1EQI@@s!q0ikqDL_=QSwb893
ziHS)U@s<lMR;JUfbj6iIJUK`^R_#x`RA_$4pok`%VE}i=Z08}KX07wXky*@u-78{J
zlTvp?L@N5Q2Af6FLmbxSig89);Z6Db?wOuqE>nh(&??M<F_YDu>D12whC4{5v752V
zoBiqxZE82-P<vh;+niCYlW&G;nswn_LUklAvZaNA5iZP}esZDNAqB{#G(oxj5eMHO
z?4cM35X8u;8@0N!I8w(xQVAiJykK=rN=iVnv_G!;tYj{N9#A7CpaCTCoh8Q=1*-+a
zsf+|L9?=BmWuu8okPEi+Z1{M8chb^540k;$6y#K*)&0)ru30TIUTqkY%zlid7Oy#H
z$3+P-PFogdx8S50x_ua<ui*6h*A=kR-rU@*uNNRLQ|nerhFhPlx>xm59mw`kooY1E
ziPgWNE(yW|X&3Ep9LcI5g4XF*!|6yzWtWeyI^AQ8Xi;#*Cns0T`{+O54Jp|W`Kr$;
zSaNl?WUKNqliF*+>RGSM!No?^6zjb+`p@ADg&z?(x{0k)`8=j28<jLFlR!{xT%uJg
ztV!9&p5uRXON^;bf>oJ}XYI|$+njXuqpX7@Ge@+AR<q?vJs+g<D4OMKLNuI0nzUeH
z+A(DNSe=@`XfD?*dvCL$?}LHG%g2|Nmgc37!F?`M`vTHxMq=R4)4?V4px^tjyZf`K
ze2FxTC)D#jUhr`-k`ZV~#e6}Uz&)*CHoXIM#_j_NPV+WO6U?1goW$n4o{sxz{1N;v
z+3cx2vn`K;vS9JZT#Pci?^>#={w|)JxM8-Q6{mKua!J5xR%bG72Z9`i8dX<?k7e+|
zt%MJXt~*x(cp`il4hNn<!p5!WBvQ2PZj9zB`KFacmdj;gn|268xZUiQ`Nix$J=`-k
zFE@~mRz3y_#WF6OK#rNCETq;~r-mV$nD`}-jxb(nbjWVrpH9Ed_{j#`feWd)5DX;T
z82UtlWv~!#!L2~O-k?*pT|_*@FvY`IbOi^&T|^j=;ZNXft5=>?=-lCu%E<dnNC;z1
z#RZr7Ms6@t@q`>+$;Zt;mQO0HHREr~hxC}H5-@$l#BqgMpfVBfr(4Y|ttc$HJ~2Am
zH!v&NSUL1nZ2ch2mdGGUC;=ze#qjt2J;JZGUW=NyRBvf#SL(@^OH?mXM2NeK&w}qG
z+X!WzD<uK_qHAjwa*9r?&L6ga&w~gU+QA0k47$uzYV)&cB5tlc<A<)3?*)$|9U{3G
z*ZX#t<1dRBT66iR#uRl95~i+O3Mg(!mh>FS>R1W0{^c*JmIVWqvKi{rbX4y!MjLSP
zMA_qt=5e-|l*D|NJD;y9Mn6Fh-C}Z^RJ310VyEqCoT@bS?yH+OJ%s<9d{tW7Eu>AD
zpdX&dVR;ZA*pD04emzsM6I|H;oGQTqb`lvfHyj}nDD-*8<e*s<@Ubt>^F_X$-~D2r
z^rby41B}Tr=~-$QvrQR(AW1wcOq(qwFlp_rqwEzzQc(AE2%gaVS8#A_5LH6r_nxEI
z6V=fK!Z{Q2%Qx_u%z7^M+1uL)<Su4Z5?zAZ-d0ouwQJosRGUx~&AYBVN6@k;^!<x@
z+r8S0dEMMCRZv~;T-aQ$E64)%<GX~S0Ze$3?cXpYcTH)>ZESC*&YWqZCN+!4W2eV9
z?Pv3-nHd>wyD5t)du-6XC$G$)JhR2$-;^*^$c3a@k$u6fT+Yj<Z)pz_Nd5^4;Onji
zia`QD%LmsjY0qVKIgXm@S0lmoGHO=$mx~P`g{a%46&-VT7~grfCRay%4CyGoN$X|T
z?@y4;fP_4$`lsndS*w@kmx+{incJ+>HRZXG(tnFhLzCH~$^<Mx-V(dC2~E-{M49z$
zZEc~I+bz@WIcx6Is|gLyMrR#)1s5jkAG%R!tGUiy>Wu=2aNJr<bFH?^MWgrGz&FVm
zri#wgY@wHi-lkc0)()>_cPL$=m$5TVMBdj#2ggnPt9{T>YKK+_-=M<ULk;(v##Zy&
zkrWG=$;&;+7@=8F@9nu|JU)xz>9$ALn}Ta|YBsc`K5w*H!@558?f&&_oIPtvuU!pn
zkMu5!J5{$<&Sies-+3dL6M6^+?f01>#mgM=lo8Lr`y<L1W&7{8<<5F<S>3AM9zhB<
z3%?4p&FZ0ByuMFvZrJWOwBfVT<5B)v<=I;ey}{4wE;p@PL0DhsB;M1P(w$<T#VWh9
z_^a}ESnqDFo9Z1N&lTr0;dP_v+T+(FQJbi6IVkP5mXp8U(I8mv8=-q)J7m^-wfC?v
z$(V8|h%hzGP6JW_w-puX)P62$X%zHO(3JYAa&$n!p%7|f|NVJwaa_9Pa!RG6!|57u
zr{Sc+K9&dit#+;5DQTH!OdSjzLSKA${yEyYRi=n>xK!V(9v^K*-r88z<h+Bl(O1Cs
zQ>N(Yq~$5Pqi{EzR-Qn!lom!$K3s8WMyvSk%5S+}6jGr-$#dJjU+$Ude9m8z$+!Wd
z>?@)BIhF;sKxySo!yX1sm!{6fYv=HM-1~FVrHv7Epo8r5xRD9zg3jwB7e<BPri%je
zFR`qYC@<$?S{<`-PW3sX8I*LR3lX{<#cb~B1cIUT1C)I3>H+Z!4&fe3@dBC#@S2&8
z$LLqW!(NEQ?#+|lcLj`XDVuxlM=qb?zKvReXnBm@FP4~cAQ;|7A$u~>{1R~gHF=qL
zWSTq=#oflqzgPuxXjkL<+X^U$`7b^jFY5_{V<vmr<_p#woTS#BDg4!^7W3{dAg3iJ
zTSL-u;xtWEqgJN6YtzpS{N>1jI&I8b?WIa$3hD#QAygW@>`uJiO^_N5COdT`vmdiP
zE+oAszO!Q-Jv>iP52Uc}*jgnTr)Q@+XQjlb8cR0r)3ph^cIDlw!%w^8NR8064!+}n
z>oGl&+!R4*ZVD%fD^&_{b!g+cxz?XOtq4wyUQg$V`{f3D?Lq~;i{|^no(3dYy9|T#
zm$3%8yP)1wcg1@1>9)aGA=*@a!Bj%G)dA-4aheU=F?GERUvRqX(|1@3dHMnNmxp%p
zCU%K_UxjK57v`=TEhITm6le1MOQG9<v;KK`^F~EwIH?aWpWQ8aUDrtKh3fJ$wB->W
z_VRE8nLyXw*ZpMHytQBx@0tkO0DftnwKA?uFVkhAQxAhVm#%#PxrrSVy}bm8{apH7
zqIVMkrlNOk^p2Nqe1~6Eu#}OTzXi;P@eIzxF<`2&z%Z6$X1c+ACmypjcV0I1s{bxi
z`*0|$GHhq<!3dI1*s4JoTF}QhxvRCK;RvzcQ6-;mJ-Y}L<<|RG<*6T#o00otT@R}x
z&Q3_|1sZoAX->PP+;Bkdug0z>tGv>tASJ1KkBsB`xfS^=3@kyPvO@CfgKjVR;jfPZ
zB0ncmaa(?aom?9&(^xd!SN-D6xAKrOc1N=~zzpVWyvYWu0t<)HykO_th=-@wIffRk
z<(A2SEtNYxK3W}y%ReaHKwN0HgJPuPs{D3isz}?0sQLo+dnn2;Io^<uU^xM<9!qyp
zh-U>kTgdSdo-k^jibKEZ_P>-@Z8+tANup*^-_Jt?q5q;_`K;+vk|YhuoSX%U6;aLM
zd#a@mj#Z+bn^@2=Y%;>U?afsXf5N_iR#zPS>zT)8h98&IF7TB6Vmk$m{X!+?(Xb<^
z%+Y0u<QX$$F*3Wh<I~0F3T>wI4gy_0-gZbwXO-zQgE~`7RBeMKlrW0ndq(h2Q9l|D
z<~x{$UI$YZ{vxmDzhE0pjxS2~q~P@`or#kdIPeLh+AEY9$9GnS7gYozszX9T;v30W
zK7|+Bnovqi#pP4s$<~b~5{;|#l^x%!Ncw$`#vobY$vCXFTAF^1^0Gd0@1LQ6=oTDo
zB&XxlF0qlz6424nAsF;7<>Z@Z$LxuWE0iHfz&iXJB^K5u3m!vgVwn!3S)96+Q#P(i
zwL{L1JgQ_Tu(Ly^h|7__EFxs%ifob-m7vh(3Iy>FySNtYNCq_Z-3U&j^`J62J>*h|
z<?gt)g=UScbQ#hmCdbKdc<##Nxzn5V!Lm~LMk|Pf`Su3c?v8U{j^SH+Ue@;*aQZ*|
zE$%Lgo`f%nmeH+Q)YgMC^IDoI|DYB#{w0?ZPvkC8h}&|`PnP{LOt`1xo&v-8N$LhJ
zE!1fp8jnYA2@(i_Mo{L(-LHm`FVYn%aegXI#Ms%xc@+)qtOV6Qb8$&mv@`#8ha)n4
zgH*_srV7H=E1T}xW3c@yj5bnkqRFqM{)>-T3bJMEvGXUh4<eQfIrKd$>aF=%KGYlz
zs_D(l%tK(wsxcie;m}NQU#JWmLp5_B2pSGsLS7DhA-JMMw0oQY&wgn)qHX4tzgkY~
z(@rluWL|!2s(j%(n`!eXYU}0B+X{M$N%c4e6PbCOmp{6+TO6^lCCSY^cNpg~5n&sp
zhW>??*p_J}GV_-PB_3(l#B!6Z;CxEz+$DPrgHq6Q*1HU$F@{r1&%g9Ap?~l^R(m5i
zaIOd$ho1cHRV7(W6C8ffXwqPP@Q&hsb95S4ZlF?9#E3(F0r5+!#K}VoRHar%pXle+
zLO1qajjUH%y<uO6-EsikT(SC(aSZ|2IFgD!yVT`D0z7W<H#!O*EnXC%^XV^3_+!G{
z(X-tzQiG23I=@~XX5V+X1iru4iumU0a8M0jVwz~mn310#84_EPX)0*(c(d$O={fCw
zpI$s`)^JS}&@=KE1cZp`jO%sSXxz;;?FpFks9R4COvol#WVTb}+R{6!ATdoIXgQJP
zhX5Z;eu-@3DVap5ag#*$kl1DSS(TlnwP3JZI+dkX(bY*FtQJ3dogb&5mxrGmX3@TZ
zljr6hd<r~&<L1_7e|<%`z^Y999YZzSOeEQUf6aCi=b;rIO@jS{^ylH}2215yMY0m#
ztKLJAQB@zFo!3@}43it|XD$?KtXA!ADs+yOe?Iu(``6{oDd`Met||Cv<n==Eu_mYy
zJ}o+eIsP2K8UkMT1nQ?nh<IeV)l>hPX=ZZsx9rUi2Vy6s#gS<El!h7;sJBYSIumPB
z=HKCqLqTX_bT4xP^=(0n{K5-3xKNdQRAp9oLS3|9`(RJhzhI|*3H{B<P&5|kA+clX
zNfzPJ>%M}=!#9T{_~JYnu^e(XQ5N0=!rYv%=rm#YVqxVKY1U>9nP3hMXBK{}_`l>#
z1F@_2AvPN`u;uiesa>C@W@i2zWk_(o|3m<<{X7_yJ>Ed;N?wI6Zb6UIHfOyLk){bG
zk69aVVyj!ypy}<^TKWbObC~S3Z+eF8u)Z;>X5kAO>D+M%t2OBSw9C+I@!XAymZ9`H
zH(88ufVC6|k@<v2NT1TXU%@qjM39EXtER89+TL?MRi|#_BY1FrI=i(BZ?iRPHZ47m
z96K8&jttKVEvbs>)NOqxdJ(*1buN{paFHbg;!ROKe{;>pN|Gf;|H?;aS}n!nh?kzF
zsyt<HeGKR};V9Ypv)E@W&D+*=kGeoC_DmwdOBS;9OjoYJIE!<lk3q~#Sp{_vm!K;2
z5s-Fy5ZM{4u6V)h8*-O6N_vseLec6%_lzSLWJXTxy&(^wqmNJgAv>a=D<H|{Q{o;@
znfN{)?!D3bFT<id)jAztj7CmoAXDR6l2}jl-9uxW^Jkidjql9seIVurS-P3-=3S#^
zX})nv@)fJsv01G-)-w88D;{mPYeyGv2DNBsnng{P2CgV*T%De!@7KNK2Ir*C7-e)c
zf@w7sdfgnHTG|#nlOfi|d#$SMqI8(mBd``fX;ZRjveNPEhjBIZfoOQc`xJ0p6jObN
z-5wHCPQd<Hey?7uW4W}No{rr{x~cSCqkzuSRQ*Zlx6~jLe!bg=HXg$)EL7bbhxXa*
zqqnxg@HnOXgVcM4(CE&&iCUG`MyPF_VbW*Y$)%~E`IIzY*SjN4+ZSFB3Ak+G_UpJ-
z>I|R8uq$_#eb1V=#?%BK%XTw$(b}Bjij6SN40g6}Gljl?;9rHCGYP%H;vkOw(V<GL
z@)xKp%<_J}p}FSX>AG)p%r-AgPqY&JmU9<Ikv3%W_*Z`w`=!2b)BWD<&yI7|aZWwZ
zfqQZh>|~~4oR!87Sa`lNwa=o-IXGMm#!>Y$ivCz}on|2EqkFeWnjodD^a599%g{;W
zf+I7Qf4nHI%Wyh9neOp=`|l#HDSCaHNpELv{xI~cU>9i#`TI#uN_IccGd4b+K2E$M
zqNKk2cDrJZgbT=sVWuV<ZJ<q3*d2(J#3SNX55zTTc=Rn&DUpmTyuT=K*7}{XO|Qwh
z$5KJi=+gUVRx7i^qVEGAA1A+G70+;G5345w0vEX?;8=1O_<_1DpN<m%tTO=R0LBc)
z5pt<Iuma;@R)Z4^7B>A0D_da8);2C=7a#oW217{1XT@BLUNUX`mBfP9a&C1*yYH|6
zu<IO0+>w&1?(yLx^6}8o^mvkfpYi?;jE55+v#ZrRp8SWDLB9$)&Zb6{0j17G`8X23
zOi=;}jXinuL+)Y)g8tGd$va><jlzFG52-UsiXHaF2s>rP8@^du?2~OGpJ-v?W_y+v
z!-vjQ>=SIz@tV)3Db>Ee7a=>=;$PD5bKZ?k>q_qI{2SiM;>#ANie$ZNm_(XrW_Hwt
z&2a7M3N2YM#XwXiY?kFT+y0FIOiLN3;1@2PAZVAvX|Mp&YxHID^>zJG#Ns>cD3zAc
z71g#t^%YN_!QAZZn;`AsVcic@3mN@b^1eb#%R|0if$Ze$>I$RH<YcRXKi;K3io)5U
zwBxlGH2s##erZ`Yd5U)R{5~={#CAlGBdy+b>@ZLpO)N<<WcXpu23{5cbK_&XDx_$Q
zJIS`jqQB}63JFbafw<p)x>+&rFWE39;k{oiDleBkR)YQW`vrudQeCEUbHN6&+ay(*
zo(MVWM-^Xi!Dwk$-DX!e-6<rhu-O%3`v})>2H9FRS>o>UHajm5mDmWRP0VfFPcVHS
z)8L)c==!C_N7hDU=zyY+)IY%Dbfw8K=_hPogjBTTK=-VyehpAdO2?yNlGCY7pX{l>
z0-PXDlS^ev;iWeT!+E6d=$MA0#<6jS@~+VH6V$>{A^J>3!pg6CBYtFyEityWj)KDS
zO1s`VYtC(<Z4Atf=eSj}vCy@~<BFLNwe#)d(NJVOUP-~|C(l1pd5WCP00(?7@UA_S
zg~n&}hfJ8>peGgd1u7TH1!P90v1eT7q^nrfY`P#bYw<%C@OMm?BIoOMSXuaG*!D%?
z&dc35XJ|)a)j|^)oh!O1&6rf_>UYqj73|LTUY_pMtf?Jw8?~@JepMT(uGM1#C77^s
zDddV7G+L}ffkLx^tYE&zyT8xApN0+kX`_UnzE_y_M1ya(;eCxU*?2|yO_juyO~+5k
zOzrX~R?K@sNpC|!Kh(3GH>sstz8$LTsOpG!HU4^DA~`1^J=L<dC=&E~tgUh@!JHZ{
zjO>H=%tlt@%CKfxKcX~@w)JW-E2x<??BCN}o^h(GM(YR~%%9o$m}`vgOO+KV2R;0p
z0>-q&ghn1+$6cDIZ}&z%wO5@dQ1sB9j(S42w$wuBYAV3kObnWrc9?Qs%lBLcMwzHL
zK--VpMOTdubY6R%FM>1KqNMenr5nj$%npt55rP1^;K19{=?ERfZtv1c>?dteVnv2R
z2~rLr7O$Tcezf$;eW9CLNc}*y9LaT;NcaQZXTrHDV_q=in+!-XzHT<s`CD=pW#I7i
z9#OuG9}&^BN~GlE$cSp7`S)DFwD_M|C*kju7Xg2q*d5`JAx3J72?D3LptlX4j_;(I
zNr#3m29auzTXBKy2yln_G)Znb?Af|P7V=SvwE4Dw?Vpo63vH&5^utCnkhAmfibi0g
z4J*u=uicz9;qCQY<<+1OVsQTuO9f-%g$F2KrVp;Yl?twcHXk`%M!gwJ4vexgWy=Om
zT?-E*#v9Y(KJ@D$KW9rzNd=}*t&7+KwB+vdDWKl=nH$UNq*6H3Y$E)3Xq+7wX_n6^
z=jT#ec4fzM4-qkFnW(RA{SC>Shc{P_K!4w53x_p)#cr(M(#{jQ7xda*UwryR)NJt~
zG&4FM?NsX{siY^6q4yah10b2ERq)6`-IGg8smaMW99~wx4g8@yc(}Nvi~W@Q->l3+
z5rJgCV4Qo==U=Kfe^x?bzMFA-mQD)0wH&0J9j)o6Q#lL$bBo-ent_)Tx`x2pz~KSq
z?6ZNQ^u&feDPRuV=s#3a)Fr`yt!AVFK?F@mtCT|(6Qd7s5ezsG<B)!bS|}U&|M|7`
z)C*}}PA!hy1K|S)AQ-TOA&4NJmm@?*7<g=YsQ^=d&jJU$cJRA))vkBY5+dLa!5{uV
z7t|50%LSTBoeorPuERIl<^VJS*mw6JaUh=r6aO5rN({8m7CJW&mNy`B>D4T@dfeIA
zy7aOGSrw$fxF7rbsu(EK7V<wc0apy+YBE+mN=(HM9!^hBHI)0t)BdK$<0i)Fw*du(
zf`QyeKOpE@@IP)t4b9+Kd+_ETR^n+Ek=`xZinxWIR<<x|U2NXuI@<eE{e^)c1m=MZ
zq%{I6@eiVfpR4Lqx|-k?avgED6*lv<Qb>uppC~`asxg#njbF#3f27AQB$gQyuqBdx
z``@0QJ^(#kyXp__1yy$54z9`gmdwR?s8q#yQM;>U&gihEiH$4VZ{;1@6KJq~rebe>
zIFep>u3PeT46$2L&dd9F|925W|0|8kzI(^vAWlJ=<??R_enImF(mq^3XX*BmC}SY~
z9^n38fYtcqS?Ud>m!j&{DlKiCzc_QKTf)K1fqp1-HqdhaH&#Y^vwf@mz-XWithc=y
zUE=-*A)!{OtgI}^a)u|)*H>S(t|ok3^f>1u0<iChNsU=x4tc7#tsNsks?cU(RJ`1N
zj{hG~;J12W9a}s0S1fGb^WR{OIbd(se}h%&fsswJ(!Pqc1JZA*Wrgp+Nb>I*PzuiE
zxKQIoffisXotDU-il3R0AhcT&W!qYAaIY%%xSH&{zb&Vvpcvi`4JH6$%76T=I{sUY
zyKMNS2l>Ajr;zPy^S}hI$N$qRZO8L9f(1@iH^r$}DRx20tG(0ryP=5hirZS{MMbvq
zt+@J2I-+o~0?x<D3I~~)go5VJiNyM;K6^Oy5e;9NN3#a>&3kyQ5RV+b9p6Q8wpm+R
zv!uvy+pWNNOtE<ZXeilJr_HWa*RL;60aEkx^H1_yg)&98PeSJ@eMxGa>~BVH1!QMh
zC!G6ye0+BA^<cFTy^T@LpB?Vyw}@1V*xN^+3ojxL<&qK!pmygAoj30ayadDz+}i^^
z3*bE3#VWvc<>jNR9vq#upi-wZzF*BvO+e{7jp*xS79$nfS$%UWzc0ySqobm7HEX80
zVL89eU;iN|&J``xrg`4|nDtp+v+LuwZBvnwNyDjtB>Jt#N;CEQ@U@KA$_!GS>y6i{
zWam&Q2~E+{Tx5YtF#bp_YYh2lmP(`3TG!WjPjRN{bUHRH+Spx7FQa87$KwxrP*Q<O
zeLU8~eus5sf&c$g;UAA>&#I^&6x{z+@vTarvvz!sT4sDcdVEHIJV`1y>?hQsG0-2z
zFjxy(UNbsmOYP+-%5e+^^G&na@>7T&RZ6P!iqct0`Vk@n<>#4(mSuhTC+p2maUfsN
zBVf7kMXZBPB7}8>>puip%IFgZE_jse4dPlF`bJfqjDeR@En7ZSaMj#ybz~A3enbui
zfCgaRu`Fr?OrV&1qQ)7$|G?7I3Qwyni*0_za_{edvtgSsFtBW520O3Pvw9?Q{b2o$
zm=eNfmA1&}Oe01rJWTtvlE-I)?9n4iTn|7rm3u~^jCXuED)PV3HbeMEpD4Z?kRO(P
zwTh-&@$LtV)Uu2ZwKaOn*GYu1;El8ral8?=my_e@G$e-7P6>UvdV6!;)!SSbB224t
z&6M^43WcEA+r#Q`+vJkqIMu>71ehNK)YPtta8yO9l%3wC0I7OZe}4StzDvzpch*p`
zJndPadG=bQgetF{;n^>vlZ>EW!zY8q_rbssh8T8TivaN%u2OaIU&2GQ7GU1nKA*H+
zj3gVKbC2_gm~I$a4-hI73H?`6Jiya|CqWB9qs-0ZTK7#{g@~)CB5&bq|M$S?X_1Se
z<JxJ0K#U5SAp%4rC)?bg3hYmNc+>y&Tx1qjgne)R@pm-M8S_hSwa&4U2pQl?@v|WL
z1W*+6N@%RxHzS@WRk96z0(vDn>iqEgJEp$RYk+=<jtjlA)q4M<h??3j@{YyV-ydmC
z6R4<-ik_wFELc_3JAjI97BUb1mQeveUxui=zN`o}g7d(H`3VrL4<w&|Qf6;YF@wy6
zP20|D?d0n5jf1^deh*Yr>v<7tDNb6Y#PMG*r~F>${lOTgPHYPg^V9#XT$fjh!dWN>
z34|plE9%Ss{;Y`)Z@$V<@AD5>M|;|TsY7JBG&a{50IbO8cK{#xL;g8H2EFzL8DMdN
zih~s7AGxStU{UTtZNw5krQ)Vg4Sxd}ggu;y-Og#{GRGqi2r!d@Yljn3-3xK#f$QuE
zIbW+KdV&$HQIGkot=Ky|V}In4Nd7F3Rw74ifraVPudeCm8v$g0+RnP*a8k0|;?DrJ
zV)rM4t5Xv5t$p8l&a-3!3#Hw_M^R<W-C=#V8-zU3fJ<@%_j|q5J=7Z1;?JUCg*aS|
zh}eq)^Dc(IP#jQ%vXG@Iv(HIq6t;jZ+(c?|0Lod7`hqpBI;)uj01O7*D(%r9%6WhK
z!nhf9CIG(n?VQaIJD_I#TcSE7>;sHqM1%nf$K8k|kp|=USaJ~;TqJ9tGBFGcOMg4>
zOQMl1m}v~7h4`X-67H(`jU8CS<u{WF4gjBo7<qD#dhqjYdEkftfNp>i%6Y!t|AAT9
zNrVm7A6X?W<l}?@>MMXF#GThVdcAaE0+B{j>rCzh{zHbH@JB`JZy+}M|JxVPv4A1)
z0RaO7FsT1)0s;Zh>>T(%#td|X3I30>13$t5$NDdI^1tTLvdpr)Q?O2GBfyFOZ}fNt
zz*G?paPt2;ks|$9Ivi#b0EYV?R{6h8gvjXjSuSL!h&N%REP&gUDww-Gz)3?Ny!}nx
zyYNgwr)8W=IF&cPc^BxexMw&LkJxWKFOsrPoj3Pi-^*`(A(e3N;+sV|D|e{u7hLRQ
zzc33>H~>rn-cxl1obRUZE3??wlsegcNP!V%KU17|qrR66yPpV%#X1!FLQVkrWL*_R
zCxepl_G$D@*rj=uGCNq^XaA??MBvQ?(gW(peJxQd81{W@XeP_$!So3zdrJIJ_H~*n
zl_B%Me=maK=F#`)gX9*)Ir|z*^mUfE*@8!f<+{5kf^Xr)M>O)6fq7HC?<!}yQ9jka
z2mBoTKlAxyoCVF}BG8y4-X0~l7(U8eQK3uV>P09_oqi&Tt_?=fp*GJZto<>C<}m^1
z(fIFr;=yM^?4L09raxy{5My)@HEJNTMkwuJOL>Y#@j`yE*m**i&&DRONz;ba3H3O8
zrc}W?(P-lIPF2N+?1J||{TS)m9{H1^6Yhl>24@;=YJ<P5FfiX?pe5=(N}^Uq>UU7H
zb%mOX@HJB4ZmV<aj$VSbVG;oEXZG$9*ewR<cY#8ga_!!?$tnRN$9|0iDw0Y$1<aFI
z^#EuNyX^%vhi(sJuLLaMgns|uE}sJ}Lp14#&ULLDK#u&s3-2)P04W3$=64ZrmVn#s
zvv!(`kBdf*)n+sf6><VRJijZt(BA!bd|dxKgTc;FT2R<jBH`<9=YeJ$g*?@rCJJ#O
z(Z{!lOjiJ6g%qXYQ+?K9BPE?d8EE&m9M^gTMHZ;W2rFp$E7)11_Zhkoc<H>wUH)B2
z%4=D_(X+N-^tkAdd31bkm6M0!U%;YTVdVkqxQw!_B<PfPImFmXDi$64Ou=D1-SH-%
zxI_Z0pk%r%PO&xqlF@W6zCTL2u(zwj2f$Xz>BOWYy2{R@!Ru~ZhGeFtMbv?gry@S*
z<O|KB4BN*cpPn&-9U^=mZrnb+(vgJVQSOuKCI6Ed?Vw$T8~fsWHm`~u9%^flM-DLo
zGbD~{XKYG1G^A5fQPGt0$*S92kbQjsD8ui4Tg(DwP=s@k$4+nV%->=(GPs|K=c~+B
z5bU&)9Bz$IaSonzVNS+X!KXzhX6#EAH(2SNL>p-Df1`zsBPhosSoENOs1Ai&!7xlI
z`ThZOb<c}_DB+?89p*QhpBfU(*&-Sx=dW4mh8|W`H@MK|U{+3r$^YpdsaE%YcQM^o
zzHO$Ke9vrV%qc!}GWPU_h0%xItoXFf&v)4qUe-J-t*xBUue>Ch#3HW~Bo4qaY%4MZ
z>k38uFeFA_Kx!A1(sCE!Qgy3p1`E!n5a;G(pOx|5q7ah6;6N5moJ(him{$-txV<bB
z9lb+AN6gNSI27m=c!ZL%O2zR7M#W1}qK1H@fa>iYl3&nu{K{=wW-^%<Tv9gL1>#)3
zFm(8fn=2$anPgJbPcdzdi+21vX9LGXh1*0}`U%NeDbzKGneDO{AZPTpA8k0(7_h!z
zsie=5U4Er27GCTA7cLHh_q{~pBKgEr!I~n&7*ug$Kw|Ri=B{NN{M?*9seh$esXWm^
zi+|JO$70Xh`p^0ATyy1;`+0Z*akShNtKf?@oFYe{d47i4x^!}JZpA=?t{!pJ2ywdU
z5<ymyR(nN#^L!OMRRyh5wPC^YVaNnBBFqH}NV!cnYIK@Y#4A$8IQ%Qs^I5Fu0+UE0
z-RE2^mIbR>i@H{lFP|k42P{Nu4#r$8+xd*nYew_fdyfQ1yZS7-5q?`wyCA0y;aRIU
zBq&{0q;S*>rqR@Y*`Vu3zljZc)p+WRaR5C_(ow06fksB*D@zD?Exp{b(3VI2t)tVV
zDw{MD{sw>R2LMvKdrfMb939sYJgG__g9$R}r2G~V{=6Fg3ul<m%OelX39RE=&oWDz
zjT&A8zlbL+j=@%6=p{zHsTwp_eY}7E<92jM$=8h~7yWW<D2m{PpV30d(;V$CkW-_$
z7c?*zFhvL{6nK`6a2lRpZTzdYJ9L^^iWs-}ctSIrb$5f<w788pxE1#AGWI`mGEvN>
zF0-=WP+1KxSk-MarXzAqPto`rF+eGQHkgPQU0$TFj1$)i`=!`Xzxzyo!2ELHO{P1s
zRN>=-^TKtPVw|Sb>)B1}BrifrR1>=@%a@23zvY}4C&$<MV3LWVAjQXS^_REWVcWd1
z#5gIzdWGCrgt9U*x~KK0jEsWcx~z#hdFq^Gnv@H`+o%gL@p~BX&NG|*3XzX-H%-dT
z&95meSB5T_Og$xk(#%#ZRmM;qY!09KLm`PyU&?L>??-K2tIKB{4%igcM4b3GntkTs
zDvEKeX4W2TA{4}-%H|s!PTdUfFYK7Yg-x9Q;9u+VHr!O+zRTu7=_j<+{uY@-!1qe`
z-^QSVR#sfRIEhHV9vWx13$t-xekbo{d~j+hy;jFgfNe=<epa+@6*V7DBF#{WO<iJ&
zR!%CCl$XbkD@%>bX{3r+innUZ-0w>b{k&PcIsH^>kZIx@vL<l^>?4$aig%?AI8+Pg
zs@+R;tUtd$9&kRDQiwfI`Esa|Q9YW|_MOvMcq2$&DNJ82Y`XAjK&oGTTNK3wJ(np$
zALX7lc$b$2lf5~mVWykvM_+s4uO=Plu>8r++vpLs7Jp@>!e4xbLCt!8J_|zVBX4gs
z9GX$ICm3Df)eOM?GZnZLRma@JRoHUoRa#cMeBUEa8RkWJ5qMwiURyhJm8(LU!5Z+C
z!sWfnz1?0&l;!&t`L=2>o`BbZ^#cSI^pn-QJvgdMFIXD8omScYI+=*Hq8AvZX^&er
z*0J~YI~qSi_iEi!c5*o*i;#;cg?5@o*aCgQZRLLH^>qDstojNI5ITd6h7OVDZ3Mz4
zn)Sm^6T_4$$7UlZm9(AyMEjY*CmMVnvU0K3p0;^vReF<>G*XND##1&R5MKX-*tREW
zc4~@<U$A7>g1$6^@@eg`Vx6_jx&fab%I4*GuAD_!R7d#TG9!gzRN6r|E3xpAJ%LNc
zjmF8c#KYjT<0*>S48hlo^L5V~<=)3AA9g4UmFuUyxidr}e1swv4JkBp&60}l(<Xay
z4V3Qcq&=EG^3XTo4=|_#L%8lksr2%(=pvKq#%PjuUxe&1F@}lzHngo)^!k}`+kO)V
zPc30d=kjG##I!nSy^e*BL4Di=CRX|Avj+|v3a#&r&pMb+5`?YFNw+VvGpmUk9Gj3N
z=qoVdC4TZH%!Y=mN_bpsJMzlPdMg?{JkX2UDt2K;%(<ZKe^|Vn!tX5^{t6P-;>xH$
z`eUb;U)=vMfP(`s*~hc6e>gOZLols8Ml4UB0gy)|D5Z>N*_0$1N%nTk_ye3JsvvmR
z+1ALnW*Mp!6mhd{5e=6bMSFjxMKH|BDV{XF7Ip3NCDk-z181<$pLAS&H|xM2?Ui-9
zSSs>!*v|FK1j4W{kyBGB+Hpm7=?|VyC^tabX7@-sk3(;D%8vCV(~yUEkyC`k&F!5|
z`ReT_?9PcmK=$0AkRtQNLz?SqH+*wE$n+=-Jew$7#uvkDF$*mlua@?BFUe$E_qe1n
z#_429i=qoYvWCq(e^07I%F8D0$HhO1BNGRB*V+me4eQvv6OYN=w^&uZ4#qxwLdJ>E
zM&a}$Zhw1y5^Ov7+-dh&i+9?+Syn!yo}nz3Xua@}Ldr^jCrSrEK4DzZ^XDvr^DOg(
z&OF-Vl)Ely2-O0kvoDq>i}7L(aHQhhxs^i%l4!S{(;B|z)7zaDs@hJid`~~u;YyIj
zT2?41`T4V!og;bFq)FR`HRT*PKi0C*nH%4A$K$L`e40o$OW<YkfvshKWYcJsh;WXH
z_O~|_c&>qnr$*cPKl4nY{MdEONm=U1Swgx*@%Ws>v%oy`i9hlagLE+gcQwr)XNwD3
zt9Nb0a=j0mFwT@tSU+L(Xw93~AX1cq0+)Z2x254%jRLT$!t^`4yP4nJs%vY%`n3M)
z3s3lBqJB~q4~Ier(}S5LJF(*8R-pZJww5n*ZF$XDlr=Ott1vySyz^$J>uMJzss+yH
zWjpdhF!N0J4G1_6!ygZ3DxGF(RaijW+o8;}^gB~E+=jao74QqMs^0bXqxJbmQ@SkS
zL<MI?yXn7@F}6e;%0i}PKp+J=8JXajX3vO^&r>SCJzjKJ@ARFSnE{|As3<7|-4ouy
z1S3;MD78Q8@sx}0y4LIzygw;8;~ho5o(sLUq@*rcI&uHvF-||)n=;k!%()e@7pYo}
zDDplC`@-01Z%@zFTZMXCP20O^54R>_Q7cz)(P~q0^Lp~CLdec5vg2(fwoG9tu4Gp%
zV=irR@<T_QNp7o8F2<Lbx~8mx-G>PkM5ZwKOMU!>xG7@<nryBo518ZdhEv>#KHok%
z6kS2*<Au=B(8x&S|L74Omh2P-_5Pdp*~}{&<@T}u)qrYlRl)1o+8B1nQD4H0rL^*C
zM)|VNYFkT5m@TPu%ohHIaUBE#twOP=Yq+YM)NeW5**cBNJkWa6*r~f9n-52}BgD(_
z>(q3s?`Gjyo$rk?&fU(+zQTLrEiZs>C@U*gZs1+pqJAl`SbNOw9*5)Ha~<PMD=#bz
zGQQxWo}L`EmRD5q^5VCbv&0|D2b9joMb*Wd{r8&*z=PfzPluJY&)-%c2xS>yB8LF#
z(-M}o?;36|<VXV+zk;VE*4LBc3tSC_ij2gf<O?90UK#*yYZT(QZ+Q)5R+5|fuR1fg
z`Qs;Yb&HTwV=6een0Y3-VW~t-9OtUuU3O4QOG_GVn!xjVH<OFc!>Af`CZn`Qv&=b7
zr&tBZG&frQ3jXcHg)Ru3a<sy-?7g}21n!Hq6CR)TkWv`&;sZuDe{666UBXX^Q&t3s
zjaVd`;vh)O<75VgaMlPuUXn5!xhd~)Yx%*4_Oyt_4MZ5q=+%F>Do-otxw({O6G=O;
z-~LeKhP<`#2-A>3R1X~>WT4zhvpV=-Vk`z-cCWtc;fh9j3Jy^)b2_inq3hyB$&f|O
z;7{UzR-8r{^#uiR$7(Rag6(C8v@0sFiW+<6(@xk?ApGxOx#&1-(`NU_(eVx5&z{Pb
zUt5yNK3?GY3V)KO;Z!1OGI8A3xX|X+Ra!G!cAB!^`q*y5@(VucFYB0HmkKuOqUeW)
zLv~h7+1pkXURjLiuU%|4U!i5A4>uin0t|N>qV<pgo;PMb?`LkSC_u3=>Q<pm7~1jb
z1?UAsc{x_iqD5V?%Fs79lix;|Fq<K11^HF5i-w#36wdn<aUYqWF4|m*FH5rKOy0{J
zAgZP-QjU6ULH+{^paM`)(-ucCgv04th3j8c=Rb_)>ePxD`Zi*>(Vc_$W0264Bqooy
z;D-~U@UVgbPsIDZW3_HWJ16drLs}zCJ(4~*x}&)dl!2mLa$ih5Ddf+EFXx!5BRP`=
z1u6um%_~p#@u<m|gy$9)2dn85mFP=hh4S+4;?x`+9e)`ctE#B{GBw>|?`C$ziyIV~
zz8)Nk<9;`U0AuGLPRYeMOd^Rs57ScG;-c!LrG8ium73Ye`*1gJ|Dlw?vikKdC?cV}
zqGZbtvA5$aHMlgu1%-qETrOpyH%b`b=>cD`T)p$CD==Lq^F-c+X%4nks56vb{PVAq
z0)_-nPQ7p0y1_|igRlRFSWhpA($S>{Vrb{-g8WUbpX4=6A`-?3u}jJ>WyYhojMpFI
zs9t0x{;JR-!F|Be2@wHeRM^d@$jj<XYItPkkzjrgT%B(05>VZI%&q%0p2mQ9f^U)a
zMS00-DK?AL=dDBOT+2zhVfZQTzK3PIiU*snT1%LZbsg`*n1kOdJ}LqC|0(XeznV&$
zFo+;RXi|km6lEzvfkk>-KwwcRE=E91zyP9j2qA=OV`(B5ii9izA|Sy~VnPC;_ZktU
z1wt=DdI>@(-_`Gr*!#<zbI*IvyziMgbKiMp&OFviQFi9@uY$gSH#}S+F0he7#1Zw-
z-Mp;kapz9?je8;;2&1}EKf+N^#yL}4xSzzj7(nNKE+lh_Z6|{j9o%wp9lpojJ#mp9
zV8dR_aQ7d&jUvfnBF{hiQL#5S5Cg<M+_x_O+7DG#_hPIQ=J!TNv6R@@FonZTgpqb=
z6dz(?)X33!oLO&K*wJaI>uOF}btDazcWx^yyr|_#GfCpho~mmORT;RMc;O7T^eV`&
z0Mei#ovbR;Jp^o}S*Z=<I}J0O$4Cjr^Y%ejt;B(J&G+TplrM7<K|-#gvhRPY7PHQ7
zsS)p-#gg^0a*F$>^xRXmmzU9ZGfcsXZ=Ldb?UG&)mler_Zt8D(=2$FNYpZ2e&p#%%
z|LTkX_7jSlG>`Pr!rZV<h?~Pz%4#37t-4;fgcDQmXgFwS`cVA0D!)=<&YfsbsZb@1
z8!#}n)r~-I&{}psSigp)f^1&;njor(xn3~c1~vCs*bXnL7*YXB81-_q!Mm}Nus0YC
zCNop-ZsYNCHANuH+~=y$zYM;oBzgT+fB}5O(KG5}{yeg`Z;wtFujrd$)}apT(uKaN
z`qcm93sZ^uu4-XwnGbF3FSMi4Xh3hPoc493J~T8m)Y6hi?LFKTNYEaNoM`v{b0O8E
z@6I<_MCu9ek0w|m^7Js*eIwZ05=*97Rp8~Q4&4Vz2M*>}KHR(%D$hb5<2Y;9o&92?
z^^lMYOu^NGEIB0T03N=z6+%nliyhr{oFu|<eH$?~1J~ZaBnZA23vzxAQj>=P$O=by
zDZWGPWB(Bn7;=_b0@V%byL^A(l+-aZa{$7Fr_!El`R`Y-2pig0tg*7b7kZ;{VY%ek
z9ISbR2L3O%*46_g%LN*4`UQh)>&ZG^P`m~(J_F{~9$m_WEVGNNfxM&SKJjuW!PpaN
zONwM1?@80cpwS7zCquYSO8%tV1RzYmI3lS@TN#p$7a1Sc$@^JQ0G@`2p+5yc+Y9_K
z|4aEyDHWJ@OT?iPq49@HP8KC2eOZ|5a(%<N36Ve8WoZ(?=GJV)I=#gR?%!Tj2n66e
z#P!D)lMxv?@bq`yEhNcMke5|V6$NO$aQ*S+Cw%+l6o18S0y_H^E@<kqJB5aU$$JfL
zjLfGi@4sBoRA(;@=jQjGFn~EFX&ZhT%It*_V!Gg^`w<96x%WzIGHw*SE`j#Bc6DHG
z-G#h7X8d~4IW_rUXG2$(_Hn%pB13_=F#tVJ|J>?Y?ENMgRkjq*s9!g}Z5*&UCn={E
zM%#U$P`+`HAz@h{RjS%SC*>tN8a6+0g6)Q<FKekg-m+B=pLH+vfW%Y@d?fqp{tica
zI_K`3(T$1JH9mrW%6I&Jb-+Js>W&LBcPZ1Zl<rE*Eeqs=HKg%p6_i*d7=A4uhwX>2
zZUmGx7Lo;OIv%6>0Za1TP{SEi2Gkt%u@OIn_yfoXYaOriQr{I76?xDLYyOT+6XyTe
zH8g#_bz}cM6))%tiTZ!z!_Fdo>b-@+ECdfH4*(R!<iYJ_VsYt}1OC;T!TJqH`I}PV
z6u@IG^#KiBnYux(1GCb}metfH)OUFg96a5>;T9C;dcL^-Y6!t|9bSm%c~@+#5Ihw2
z!>b%}TX%*9o2|P9mjnoy&t@ltJGbyG4$Ny0>h^18y`_h<uWXq%MBK?LgVj|ICMJU@
zK8#U&QnPXi_7rOvZ-~Vk6aJ8LNuwjI-*Sl;V$l>#5KhN<^J?Fh7S0(5U4@kK>3%<j
z!^$m4G+_I)A$bnBDj8ECt1rPueiF4?um<=3f93QPzhB##m!zVTz%XkAngUrQ&(2BG
zz|S$y)m~)K$>r2de)V2~`7W>R?$kK!^Dk46iIIl~kyQ-tDu3?aSk=i2V5CwhHRt}q
zc|j%Mmh`xu;@)_Qt&<~{?KqPg0e)-usjaoaWb28iU|4;t^xLsQ%BrTZa}Bc-tOH4c
z<`^d?Q8565D}|m&%qikM0!tW=Gx!R~yz{+!5u;kq+v287pO48*4pr}-RoEKs-sw0Q
z1z)!exs5w?BCnu4yLJV&`vKRwT(Mjq&6M;y4wMp};&{{jok!?8ZaEgr2Wxu$urYch
zCg;GJ>e&VNYBNOXgyWS3xL1ZdpoF?1=7WvJH##AeM%O(9IRC{(`c9X3q6;{&Hw;B0
zDiVWN#&Pp(y42RoMVP2?Qe~OTv7krCIE3qTAxMqeO9PM+H|)u#Va${2_`Rx1frb6K
z^jz5Bi))eKE_>5jtLUcWsF`Z1Fl0A>KK+dAt(8>1fhh<VX}G*o)`;2dxu%)u0JjIu
z&ygpdQ7kV6oh@Sgcs4FFGMZ>mwwV?8_XZ!S7TZ4{*%_;{?k2m*!yXt@8l>;gd}O>p
z1#w4%<EL8`e#JAhM-ZZ;dHO_ZwQSfdNt{zCVsQ*jV@IgsAu{&Pr_DUmz8wgT(NCZK
zoF`#x8f`Gg{l%{|ctV@HSC?>$rF~2YX&J=R4wPaZ{uxLru09Y=0-0Do%P5+&Q4V3A
z8;s}$$2Az#1)Uj!eXlI0=DQv2<-H=RZRtJ80D(zO#3+Wn>}F&noxYp0%0`X3=>;Z_
zw+z8crO{)%^0Mc*hohu>%9>DICwE&;^GiuAiGS^?dCL9U;hf2fOAl+tOnTKT9w~Wn
z2+NkLJJ&MSBJ-i+5<9Gi;E}T2&y-jca=OOqXpHCH3}pcE9u>qB-Cs#6Dr$EI4NA}R
zaMfOHjnNU??rQSMntIeCxAko5^<P~ogGO_;wU_?j{3E{PAHowGlT7LK;wn!qUG(-4
z_~r+Y%{Y*{UEJFyb6z>$m|Q=~Tc<+}X<Bxv+_5zzAhxMJS&k95_5=iSHBxKju*oRw
zdUK~8T=SsZJnl>uzK_-G(-e>_iXV$0^lu4V5>dx$GR6XLKwynl=RhC@IbrbXRmbfV
z2O+*4w|d4T^Pmd32@KciSyzG|9Sb|Y9su&Jl?BW$iXRrA>lA+5-dXGbk<>qNA>_M?
z{{D{>qA7u6p3jY4S_K@)YYM2N%=2BwWSpH7I~1pU$Z@cu#JD@x?Ulk>z2`vK#kcV@
zP^h|LO1NG)EsefbH66B4Y(S#XR5chgADIBtff!!+Dd!|p#?{H?GkwV6=BOGwI(M0i
z@3TyE-Mt5Eo6A6m;E0YdDyh0Dj%IqVg0%E@x#R4D&4>u1PhcZ6MV19Hg6Y^oGA^#`
z2|jfQG~$_<4|T>1c)u{O#IruANUKOerLNv-l8C0JMr{8kmA#@^#sGgB<3|Y}!A<As
zfQxg4C*+sFAr|<_$N;n`dcoVoTbt(cJPaY4^-gmys_lER97LAai@msAnpgd)$>+GG
zKXlvv+hp%4(F;^melhCK5pV<{8|4{fsI~Lz(tK1bi`UPU(lbus)*BZD6imeNcB**c
zsz%()-46X*-Kr8lKTC+TN!i{EJPN>W4v)@SK@jPx<|%c$XWjih3U>VE_Ty`V_OxAp
zkjM8m7`Zdi?z86dsGjio2{_lWmGxZyJ0r$#<YI;V)Ra$;<_Jdrv>At6pu8e(MZ!(d
z>5!-I8<y<~Wj#W)O7~bO^84@XrDwJ82bLBGOD_sK2d^G3EZ2xmlrWfru8pczs{*JJ
zbK3~mx;;dW(CoI3u+e($SesYJ`CX&tdZ21_yIy<Yj;|(UmwUzXZs{D1=JdO-qobb`
zm7{@H32;_(fcPHSoGI^8R}IAv80)P6_0;Qj@}<y{DJs5K_k!v>a9>tK%i*MNcIMyQ
zK~I47W@bsyhj$x?sVR$AWd-tuB5V-JbXUlt#W%2O0UMy$9t9ZYp=rFH&#x+Ko}`qh
l6!00xaW0QvFa9$*eZ=MNq)<dXSow7yv$n9kf;V$}{6Ck^cZvW2

literal 0
HcmV?d00001

diff --git a/samples/web-app-sql-database/dotnet/scripts/00-variables.sh b/samples/web-app-sql-database/dotnet/scripts/00-variables.sh
new file mode 100755
index 0000000..36b9722
--- /dev/null
+++ b/samples/web-app-sql-database/dotnet/scripts/00-variables.sh
@@ -0,0 +1,38 @@
+# Variables
+
+# Azure Resources
+PREFIX='local'
+SUFFIX='test'
+LOCATION='italynorth'
+RESOURCE_GROUP_NAME="${PREFIX}-rg"
+ACR_NAME="${PREFIX,,}acr${SUFFIX,,}"
+ACR_SKU='Standard'
+SUBSCRIPTION_NAME=$(az account show --query name --output tsv)
+SUBSCRIPTION_ID=$(az account show --query id --output tsv)
+TENANT_ID=$(az account show --query tenantId --output tsv)
+CURRENT_DIR="$(cd "$(dirname "$0")" && pwd)"
+
+# Azure SQL
+SQL_SERVER_NAME="${PREFIX}-sqlserver-${SUFFIX}"
+FIREWALL_RULE_NAME='AllowAllIPs'
+ADMIN_USER='sqladmin'
+ADMIN_PASSWORD='P@ssw0rd1234!'
+DATABASE_USER_NAME='testuser'
+DATABASE_USER_PASSWORD='TestP@ssw0rd123'
+SQL_DATABASE_NAME='PlannerDB'
+
+# Application config
+LOGIN_NAME='Paolo'
+
+# Docker Image
+IMAGE_NAME="vacation-planner-sql-dotnet"
+IMAGE_PULL_POLICY="Always"
+IMAGE_TAG="v1"
+PORT="8080"
+
+# Kubernetes
+NAMESPACE="vacation-planner-sql"
+DEPLOYMENT_NAME="vacation-planner-sql"
+SERVICE_NAME="vacation-planner-sql"
+CONFIGMAP_NAME="vacation-planner-sql-config"
+K8S_SECRET_NAME="vacation-planner-sql-secrets"
diff --git a/samples/web-app-sql-database/dotnet/scripts/01-deploy-resources.sh b/samples/web-app-sql-database/dotnet/scripts/01-deploy-resources.sh
new file mode 100755
index 0000000..d1da94d
--- /dev/null
+++ b/samples/web-app-sql-database/dotnet/scripts/01-deploy-resources.sh
@@ -0,0 +1,247 @@
+#!/bin/bash
+
+# Variables
+source ./00-variables.sh
+
+# Change the current directory to the script's directory
+cd "$CURRENT_DIR" || exit
+
+# Create a resource group
+echo "Checking if resource group [$RESOURCE_GROUP_NAME] exists in the subscription [$SUBSCRIPTION_NAME]..."
+az group show --name $RESOURCE_GROUP_NAME &>/dev/null
+
+if [[ $? != 0 ]]; then
+	echo "Creating resource group [$RESOURCE_GROUP_NAME]..."
+	az group create \
+		--name $RESOURCE_GROUP_NAME \
+		--location "$LOCATION" \
+		--only-show-errors 1>/dev/null
+
+	if [[ $? == 0 ]]; then
+		echo "Resource group [$RESOURCE_GROUP_NAME] created."
+	else
+		echo "Failed to create resource group [$RESOURCE_GROUP_NAME]."
+		exit 1
+	fi
+else
+	echo "Resource group [$RESOURCE_GROUP_NAME] already exists."
+fi
+
+# Create the Azure Container Registry
+echo "Checking if [$ACR_NAME] Azure Container Registry exists..."
+az acr show \
+	--name "$ACR_NAME" \
+	--resource-group "$RESOURCE_GROUP_NAME" \
+	--only-show-errors &>/dev/null
+
+if [[ $? != 0 ]]; then
+	echo "Creating Azure Container Registry [$ACR_NAME]..."
+	az acr create \
+		--name "$ACR_NAME" \
+		--resource-group "$RESOURCE_GROUP_NAME" \
+		--location "$LOCATION" \
+		--sku "$ACR_SKU" \
+		--admin-enabled "true" \
+		--only-show-errors 1>/dev/null
+
+	if [ $? -eq 0 ]; then
+		echo "Azure Container Registry [$ACR_NAME] created."
+	else
+		echo "Failed to create Azure Container Registry [$ACR_NAME]."
+		exit 1
+	fi
+else
+	echo "[$ACR_NAME] Azure Container Registry already exists."
+fi
+
+# Create the Azure SQL Server
+echo "Checking if SQL server [$SQL_SERVER_NAME] exists..."
+az sql server show \
+	--name "$SQL_SERVER_NAME" \
+	--resource-group "$RESOURCE_GROUP_NAME" \
+	--only-show-errors &>/dev/null
+
+if [[ $? != 0 ]]; then
+	echo "Creating SQL server [$SQL_SERVER_NAME]..."
+	az sql server create \
+		--name "$SQL_SERVER_NAME" \
+		--resource-group "$RESOURCE_GROUP_NAME" \
+		--location "$LOCATION" \
+		--admin-user "$ADMIN_USER" \
+		--admin-password "$ADMIN_PASSWORD" \
+		--minimal-tls-version 1.2 \
+		--only-show-errors 1>/dev/null
+
+	if [ $? -eq 0 ]; then
+		echo "SQL server [$SQL_SERVER_NAME] created."
+	else
+		echo "Failed to create SQL server [$SQL_SERVER_NAME]."
+		exit 1
+	fi
+else
+	echo "SQL server [$SQL_SERVER_NAME] already exists."
+fi
+
+# Add a permissive firewall rule (dev/test only)
+echo "Ensuring firewall rule [$FIREWALL_RULE_NAME] exists on SQL server [$SQL_SERVER_NAME]..."
+az sql server firewall-rule create \
+	--resource-group "$RESOURCE_GROUP_NAME" \
+	--server "$SQL_SERVER_NAME" \
+	--name "$FIREWALL_RULE_NAME" \
+	--start-ip-address 0.0.0.0 \
+	--end-ip-address 255.255.255.255 \
+	--only-show-errors 1>/dev/null
+
+# Create the SQL Database
+echo "Checking if SQL database [$SQL_DATABASE_NAME] exists..."
+az sql db show \
+	--name "$SQL_DATABASE_NAME" \
+	--server "$SQL_SERVER_NAME" \
+	--resource-group "$RESOURCE_GROUP_NAME" \
+	--only-show-errors &>/dev/null
+
+if [[ $? != 0 ]]; then
+	echo "Creating SQL database [$SQL_DATABASE_NAME]..."
+	az sql db create \
+		--name "$SQL_DATABASE_NAME" \
+		--server "$SQL_SERVER_NAME" \
+		--resource-group "$RESOURCE_GROUP_NAME" \
+		--service-objective S0 \
+		--compute-model Provisioned \
+		--zone-redundant false \
+		--only-show-errors 1>/dev/null
+
+	if [ $? -eq 0 ]; then
+		echo "SQL database [$SQL_DATABASE_NAME] created."
+	else
+		echo "Failed to create SQL database [$SQL_DATABASE_NAME]."
+		exit 1
+	fi
+else
+	echo "SQL database [$SQL_DATABASE_NAME] already exists."
+fi
+
+# Retrieve SQL Server FQDN
+SQL_SERVER_FQDN=$(az sql server show \
+	--name "$SQL_SERVER_NAME" \
+	--resource-group "$RESOURCE_GROUP_NAME" \
+	--query "fullyQualifiedDomainName" \
+	--output tsv)
+
+if [ -z "$SQL_SERVER_FQDN" ]; then
+	echo "Failed to retrieve SQL server FQDN."
+	exit 1
+fi
+echo "SQL server FQDN: $SQL_SERVER_FQDN"
+
+# Create a SQL login + database user + grant roles + create the Activities table.
+# sqlcmd must be available on the host machine.
+if ! command -v sqlcmd &>/dev/null; then
+	echo "sqlcmd is not installed on the host. Install Microsoft sqlcmd tools (mssql-tools / go-sqlcmd) and re-run."
+	exit 1
+fi
+
+echo "Creating SQL login [$DATABASE_USER_NAME] on server [$SQL_SERVER_FQDN]..."
+sqlcmd -S "$SQL_SERVER_FQDN" \
+	-U "$ADMIN_USER" \
+	-P "$ADMIN_PASSWORD" \
+	-d master \
+	-Q "IF NOT EXISTS (SELECT name FROM sys.sql_logins WHERE name = '$DATABASE_USER_NAME') CREATE LOGIN [$DATABASE_USER_NAME] WITH PASSWORD = '$DATABASE_USER_PASSWORD';"
+
+if [ $? -eq 0 ]; then
+	echo "Login [$DATABASE_USER_NAME] created successfully"
+else
+	echo "Failed to create login [$DATABASE_USER_NAME]"
+	exit 1
+fi
+
+echo "Creating database user [$DATABASE_USER_NAME] in database [$SQL_DATABASE_NAME]..."
+sqlcmd -S "$SQL_SERVER_FQDN" \
+	-U "$ADMIN_USER" \
+	-P "$ADMIN_PASSWORD" \
+	-d "$SQL_DATABASE_NAME" \
+	-Q "IF NOT EXISTS (SELECT name FROM sys.database_principals WHERE name = '$DATABASE_USER_NAME') CREATE USER [$DATABASE_USER_NAME] FOR LOGIN [$DATABASE_USER_NAME];"
+
+if [ $? -eq 0 ]; then
+	echo "User [$DATABASE_USER_NAME] created successfully in database [$SQL_DATABASE_NAME]"
+else
+	echo "Failed to create user [$DATABASE_USER_NAME]"
+	exit 1
+fi
+
+echo "Granting roles db_datareader, db_datawriter, db_ddladmin to [$DATABASE_USER_NAME]..."
+sqlcmd -S "$SQL_SERVER_FQDN" \
+	-U "$ADMIN_USER" \
+	-P "$ADMIN_PASSWORD" \
+	-d "$SQL_DATABASE_NAME" \
+	-Q "ALTER ROLE db_datareader ADD MEMBER [$DATABASE_USER_NAME]; ALTER ROLE db_datawriter ADD MEMBER [$DATABASE_USER_NAME]; ALTER ROLE db_ddladmin ADD MEMBER [$DATABASE_USER_NAME];"
+
+if [ $? -eq 0 ]; then
+	echo "Permissions granted successfully to [$DATABASE_USER_NAME]"
+else
+	echo "Failed to grant permissions to [$DATABASE_USER_NAME]"
+	exit 1
+fi
+
+echo "Creating table dbo.Activities in database [$SQL_DATABASE_NAME]..."
+sqlcmd -S "$SQL_SERVER_FQDN" \
+	-U "$ADMIN_USER" \
+	-P "$ADMIN_PASSWORD" \
+	-d "$SQL_DATABASE_NAME" \
+	-Q "IF NOT EXISTS (SELECT * FROM sysobjects WHERE name = 'Activities' AND xtype = 'U') CREATE TABLE dbo.Activities (id UNIQUEIDENTIFIER PRIMARY KEY DEFAULT NEWSEQUENTIALID(), username VARCHAR(32) NOT NULL, activity VARCHAR(128) NOT NULL, timestamp DATETIME NOT NULL);"
+
+if [ $? -eq 0 ]; then
+	echo "Test [Activities] table created successfully"
+else
+	echo "Failed to create test [Activities] table"
+	exit 1
+fi
+
+# Insert data
+echo "Inserting test data into [Activities] table..."
+sqlcmd -S "$SQL_SERVER_FQDN" \
+	-d "$SQL_DATABASE_NAME" \
+	-U "$DATABASE_USER_NAME" \
+	-P "$DATABASE_USER_PASSWORD" \
+  -N -C \
+	-Q "INSERT INTO Activities (username, activity, timestamp) 
+			VALUES 
+      ('paolo', 'Visit the Leaning Tower in Pisa', GETDATE()),
+      ('paolo', 'Explore Etruscan walls in Volterra', GETDATE()),
+      ('paolo', 'Climb Torre Grossa in San Gimignano', GETDATE()),
+      ('paolo', 'Walk across Piazza del Campo in Siena', GETDATE()),
+      ('paolo', 'Taste Brunello wine in Montalcino', GETDATE()),
+      ('paolo', 'Sample Pecorino cheese in Pienza', GETDATE()),
+      ('paolo', 'Admire Michelangelo''s David in Florence', GETDATE()),
+      ('paolo', 'Relax by the beach in Viareggio', GETDATE()),
+      ('paolo', 'Stroll along the Viareggio promenade', GETDATE());" \
+	-V 1
+
+if [ $? -eq 0 ]; then
+	echo "Test data inserted successfully into [Activities] table"
+else
+	echo "Failed to insert test data into [Activities] table"
+	exit 1
+fi
+
+# Query data
+echo "Querying test data from [Activities] table..."
+sqlcmd -S "$SQL_SERVER_FQDN" \
+	-d "$SQL_DATABASE_NAME" \
+	-U "$DATABASE_USER_NAME" \
+	-P "$DATABASE_USER_PASSWORD" \
+  -N -C \
+	-Q "SELECT 
+    		id, 
+    		CAST(username AS VARCHAR(8)) AS username, 
+    		CAST(activity AS VARCHAR(50)) AS activity, 
+    		timestamp 
+			FROM Activities;" \
+	-V 1
+
+if [ $? -eq 0 ]; then
+	echo "Test data queried successfully from [Activities] table"
+else
+	echo "Failed to query test data from [Activities] table"
+	exit 1
+fi
\ No newline at end of file
diff --git a/samples/web-app-sql-database/dotnet/scripts/02-build-docker-image.sh b/samples/web-app-sql-database/dotnet/scripts/02-build-docker-image.sh
new file mode 100755
index 0000000..4b497d8
--- /dev/null
+++ b/samples/web-app-sql-database/dotnet/scripts/02-build-docker-image.sh
@@ -0,0 +1,18 @@
+#!/bin/bash
+
+# Variables
+source ./00-variables.sh
+
+# Change the current directory to the script's directory
+cd "$CURRENT_DIR" || exit
+
+# Build context: the src/ folder (contains VacationPlanner.csproj, Program.cs, Pages/, Services/, wwwroot/).
+# The Dockerfile lives alongside this script, so we point -f at it explicitly.
+BUILD_CONTEXT="../src"
+
+# Build the docker image
+docker build \
+	-t $IMAGE_NAME:$IMAGE_TAG \
+	-f Dockerfile \
+	--build-arg PORT=$PORT \
+	$BUILD_CONTEXT
diff --git a/samples/web-app-sql-database/dotnet/scripts/03-run-docker-container.sh b/samples/web-app-sql-database/dotnet/scripts/03-run-docker-container.sh
new file mode 100755
index 0000000..8fd863b
--- /dev/null
+++ b/samples/web-app-sql-database/dotnet/scripts/03-run-docker-container.sh
@@ -0,0 +1,30 @@
+#!/bin/bash
+
+# Variables
+source ./00-variables.sh
+
+# Retrieve the SQL server FQDN
+SQL_SERVER_FQDN=$(az sql server show \
+	--name "$SQL_SERVER_NAME" \
+	--resource-group "$RESOURCE_GROUP_NAME" \
+	--query "fullyQualifiedDomainName" \
+	--output tsv)
+
+if [ -z "$SQL_SERVER_FQDN" ]; then
+	echo "Failed to retrieve SQL server FQDN. Run 01-deploy-resources.sh first."
+	exit 1
+fi
+
+# --network=host so endpoints like *.localhost.localstack.cloud resolve to the
+# host's loopback (where LocalStack is listening), not the container's.
+docker run -it \
+	--rm \
+	--network=host \
+	-e PORT=$PORT \
+	-e SQL_SERVER="$SQL_SERVER_FQDN" \
+	-e SQL_DATABASE="$SQL_DATABASE_NAME" \
+	-e SQL_USERNAME="$DATABASE_USER_NAME" \
+	-e SQL_PASSWORD="$DATABASE_USER_PASSWORD" \
+	-e LOGIN_NAME="$LOGIN_NAME" \
+	--name "$IMAGE_NAME" \
+	"$IMAGE_NAME:$IMAGE_TAG"
diff --git a/samples/web-app-sql-database/dotnet/scripts/04-push-docker-image.sh b/samples/web-app-sql-database/dotnet/scripts/04-push-docker-image.sh
new file mode 100755
index 0000000..a1b7518
--- /dev/null
+++ b/samples/web-app-sql-database/dotnet/scripts/04-push-docker-image.sh
@@ -0,0 +1,40 @@
+#!/bin/bash
+
+# Variables
+source ./00-variables.sh
+
+# Login to ACR
+echo "Logging into Azure Container Registry [$ACR_NAME]..."
+az acr login --name $ACR_NAME
+
+# Retrieve ACR login server. Each container image needs to be tagged with the loginServer name of the registry.
+ACR_LOGIN_SERVER=$(az acr show --name $ACR_NAME --query loginServer --output tsv)
+
+if [ $? -eq 0 ]; then
+	echo "Logged into Azure Container Registry [$ACR_NAME] successfully."
+else
+	echo "Failed to log into Azure Container Registry [$ACR_NAME]."
+	exit 1
+fi
+
+FULL_IMAGE="${ACR_LOGIN_SERVER}/${IMAGE_NAME}:${IMAGE_TAG}"
+
+# Tag the local image with the loginServer of ACR
+docker tag ${IMAGE_NAME,,}:$IMAGE_TAG $ACR_LOGIN_SERVER/${IMAGE_NAME,,}:$IMAGE_TAG
+
+if [ $? -eq 0 ]; then
+	echo "Docker image [$IMAGE_NAME] tagged as [$FULL_IMAGE] successfully."
+else
+	echo "Failed to tag Docker image [$IMAGE_NAME] as [$FULL_IMAGE]."
+	exit 1
+fi
+
+# Push the container image to ACR
+docker push $ACR_LOGIN_SERVER/${IMAGE_NAME,,}:$IMAGE_TAG
+
+if [ $? -eq 0 ]; then
+	echo "Docker image [$FULL_IMAGE] pushed to ACR successfully."
+else
+	echo "Failed to push Docker image [$FULL_IMAGE] to ACR."
+	exit 1
+fi
diff --git a/samples/web-app-sql-database/dotnet/scripts/05-deploy-app.sh b/samples/web-app-sql-database/dotnet/scripts/05-deploy-app.sh
new file mode 100755
index 0000000..009dbce
--- /dev/null
+++ b/samples/web-app-sql-database/dotnet/scripts/05-deploy-app.sh
@@ -0,0 +1,85 @@
+#!/bin/bash
+
+# Variables
+source ./00-variables.sh
+
+# Retrieve the SQL server FQDN
+SQL_SERVER_FQDN=$(az sql server show \
+	--name "$SQL_SERVER_NAME" \
+	--resource-group "$RESOURCE_GROUP_NAME" \
+	--query "fullyQualifiedDomainName" \
+	--output tsv)
+
+if [ -z "$SQL_SERVER_FQDN" ]; then
+	echo "Failed to retrieve SQL server FQDN. Run 01-deploy-resources.sh first."
+	exit 1
+fi
+
+# Generate a stable SECRET_KEY shared by all replicas: the app derives its Data Protection key ring from it,
+# so antiforgery tokens and flash messages are valid on every replica and survive pod restarts
+SECRET_KEY=$(openssl rand -hex 32)
+
+# Get the login server for the Azure Container Registry
+echo "Getting login server for Azure Container Registry [$ACR_NAME]..."
+ACR_LOGIN_SERVER=$(az acr show \
+	--name "$ACR_NAME" \
+	--resource-group "$RESOURCE_GROUP_NAME" \
+	--query "loginServer" \
+	--output tsv \
+	--only-show-errors)
+
+if [ -n "$ACR_LOGIN_SERVER" ]; then
+	echo "Login server retrieved successfully: $ACR_LOGIN_SERVER"
+else
+	echo "Failed to retrieve login server for Azure Container Registry [$ACR_NAME]."
+	exit 1
+fi
+
+FULL_IMAGE="${ACR_LOGIN_SERVER}/${IMAGE_NAME}:${IMAGE_TAG}"
+
+# Create namespace
+cat namespace.yml |
+yq "(.metadata.name)|="\""$NAMESPACE"\" |
+kubectl apply -f -
+
+# Create secret with the SQL password and the SECRET_KEY
+cat secret.yml |
+yq "(.metadata.namespace)|="\""$NAMESPACE"\" |
+yq "(.data.SQL_PASSWORD)|="\""$(echo -n $DATABASE_USER_PASSWORD | base64 -w0)"\" |
+yq "(.data.SECRET_KEY)|="\""$(echo -n $SECRET_KEY | base64 -w0)"\" |
+kubectl apply -f -
+
+# Create configmap with environment variables
+cat configmap.yml |
+yq "(.metadata.namespace)|="\""$NAMESPACE"\" |
+yq "(.data.SQL_SERVER)|="\""$SQL_SERVER_FQDN"\" |
+yq "(.data.SQL_DATABASE)|="\""$SQL_DATABASE_NAME"\" |
+yq "(.data.SQL_USERNAME)|="\""$DATABASE_USER_NAME"\" |
+yq "(.data.LOGIN_NAME)|="\""$LOGIN_NAME"\" |
+kubectl apply -f -
+
+# Create deployment
+cat deployment.yml |
+yq "(.metadata.namespace)|="\""$NAMESPACE"\" |
+yq "(.spec.template.spec.containers[0].image)|="\""$FULL_IMAGE"\" |
+yq "(.spec.template.spec.containers[0].imagePullPolicy)|="\""$IMAGE_PULL_POLICY"\" |
+yq "(.spec.template.spec.containers[0].ports[0].containerPort)|=$PORT" |
+kubectl apply -f -
+
+# Create service
+cat service.yml |
+yq "(.metadata.namespace)|="\""$NAMESPACE"\" |
+kubectl apply -f -
+
+# Wait for the rollout so a pod stuck in ImagePullBackOff or CrashLoopBackOff is reported here, not discovered later
+echo "Waiting for deployment [$DEPLOYMENT_NAME] to roll out..."
+if kubectl rollout status deployment/$DEPLOYMENT_NAME -n $NAMESPACE --timeout=600s; then
+	echo "Deployment [$DEPLOYMENT_NAME] is ready. To reach the web app, run:"
+	echo "  kubectl port-forward service/$SERVICE_NAME 8080:80 -n $NAMESPACE"
+	echo "and browse to http://localhost:8080 (health: http://localhost:8080/health)."
+else
+	echo "Deployment [$DEPLOYMENT_NAME] did not become ready. Inspect it with:"
+	echo "  kubectl get pods -n $NAMESPACE"
+	echo "  kubectl describe pod -n $NAMESPACE --selector app=$DEPLOYMENT_NAME"
+	exit 1
+fi
diff --git a/samples/web-app-sql-database/dotnet/scripts/Dockerfile b/samples/web-app-sql-database/dotnet/scripts/Dockerfile
new file mode 100644
index 0000000..d862da7
--- /dev/null
+++ b/samples/web-app-sql-database/dotnet/scripts/Dockerfile
@@ -0,0 +1,28 @@
+# Build stage: restore and publish the ASP.NET Core app with the .NET SDK image.
+FROM mcr.microsoft.com/dotnet/sdk:10.0 AS build
+
+WORKDIR /src
+
+# Restore first so the package cache layer is reused when only sources change.
+COPY VacationPlanner.csproj ./
+RUN dotnet restore
+
+COPY . ./
+RUN dotnet publish -c Release -o /app/publish --no-restore
+
+# Runtime stage: the ASP.NET Core runtime image only, no SDK.
+FROM mcr.microsoft.com/dotnet/aspnet:10.0
+
+# Port Kestrel listens on; kept as a build argument (and a runtime variable) as in the Python image.
+ARG PORT=8080
+ENV PORT=${PORT}
+
+WORKDIR /app
+COPY --from=build /app/publish ./
+
+# Run as the runtime image's non-root `app` user, as the Python image runs as its own unprivileged `app` user.
+USER app
+
+EXPOSE ${PORT}
+
+ENTRYPOINT ["dotnet", "VacationPlanner.dll"]
diff --git a/samples/web-app-sql-database/dotnet/scripts/configmap.yml b/samples/web-app-sql-database/dotnet/scripts/configmap.yml
new file mode 100644
index 0000000..e7a7a87
--- /dev/null
+++ b/samples/web-app-sql-database/dotnet/scripts/configmap.yml
@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: vacation-planner-sql-config
+  namespace: vacation-planner-sql
+  labels:
+    app: vacation-planner-sql
+data:
+  SQL_SERVER: ""
+  SQL_DATABASE: ""
+  SQL_USERNAME: ""
+  LOGIN_NAME: "Paolo"
diff --git a/samples/web-app-sql-database/dotnet/scripts/deployment.yml b/samples/web-app-sql-database/dotnet/scripts/deployment.yml
new file mode 100644
index 0000000..8679cd1
--- /dev/null
+++ b/samples/web-app-sql-database/dotnet/scripts/deployment.yml
@@ -0,0 +1,86 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: vacation-planner-sql
+  namespace: vacation-planner-sql
+  labels:
+    app: vacation-planner-sql
+spec:
+  replicas: 3
+  selector:
+    matchLabels:
+      app: vacation-planner-sql
+  strategy:
+    rollingUpdate:
+      maxSurge: 1
+      maxUnavailable: 0
+    type: RollingUpdate
+  minReadySeconds: 5
+  template:
+    metadata:
+      labels:
+        app: vacation-planner-sql
+    spec:
+      nodeSelector:
+        kubernetes.io/os: linux
+      containers:
+        - name: vacation-planner-sql
+          image: <your-registry>.azurecr.io/vacation-planner-sql-dotnet:v1
+          imagePullPolicy: Always
+          ports:
+            - name: http
+              containerPort: 8080
+          env:
+            - name: SQL_SERVER
+              valueFrom:
+                configMapKeyRef:
+                  name: vacation-planner-sql-config
+                  key: SQL_SERVER
+            - name: SQL_DATABASE
+              valueFrom:
+                configMapKeyRef:
+                  name: vacation-planner-sql-config
+                  key: SQL_DATABASE
+            - name: SQL_USERNAME
+              valueFrom:
+                configMapKeyRef:
+                  name: vacation-planner-sql-config
+                  key: SQL_USERNAME
+            - name: LOGIN_NAME
+              valueFrom:
+                configMapKeyRef:
+                  name: vacation-planner-sql-config
+                  key: LOGIN_NAME
+            - name: SQL_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: vacation-planner-sql-secrets
+                  key: SQL_PASSWORD
+            - name: SECRET_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: vacation-planner-sql-secrets
+                  key: SECRET_KEY
+          resources:
+            requests:
+              cpu: "200m"
+              memory: "256Mi"
+            limits:
+              cpu: "1000m"
+              memory: "512Mi"
+          livenessProbe:
+            httpGet:
+              path: /health
+              port: http
+            initialDelaySeconds: 30
+            periodSeconds: 30
+            timeoutSeconds: 5
+            failureThreshold: 3
+          readinessProbe:
+            httpGet:
+              path: /health
+              port: http
+            initialDelaySeconds: 10
+            periodSeconds: 10
+            timeoutSeconds: 3
+            failureThreshold: 3
diff --git a/samples/web-app-sql-database/dotnet/scripts/namespace.yml b/samples/web-app-sql-database/dotnet/scripts/namespace.yml
new file mode 100644
index 0000000..ea0aca4
--- /dev/null
+++ b/samples/web-app-sql-database/dotnet/scripts/namespace.yml
@@ -0,0 +1,4 @@
+kind: Namespace
+apiVersion: v1
+metadata:
+  name: vacation-planner-sql
diff --git a/samples/web-app-sql-database/dotnet/scripts/secret.yml b/samples/web-app-sql-database/dotnet/scripts/secret.yml
new file mode 100644
index 0000000..6cd4fb5
--- /dev/null
+++ b/samples/web-app-sql-database/dotnet/scripts/secret.yml
@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: vacation-planner-sql-secrets
+  namespace: vacation-planner-sql
+  labels:
+    app: vacation-planner-sql
+type: Opaque
+data:
+  SQL_PASSWORD: ""
+  SECRET_KEY: ""
diff --git a/samples/web-app-sql-database/dotnet/scripts/service.yml b/samples/web-app-sql-database/dotnet/scripts/service.yml
new file mode 100644
index 0000000..31fa2e6
--- /dev/null
+++ b/samples/web-app-sql-database/dotnet/scripts/service.yml
@@ -0,0 +1,16 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: vacation-planner-sql
+  namespace: vacation-planner-sql
+  labels:
+    app: vacation-planner-sql
+spec:
+  type: ClusterIP
+  selector:
+    app: vacation-planner-sql
+  ports:
+    - name: http
+      protocol: TCP
+      port: 80
+      targetPort: http
diff --git a/samples/web-app-sql-database/dotnet/src/.dockerignore b/samples/web-app-sql-database/dotnet/src/.dockerignore
new file mode 100644
index 0000000..cd42ee3
--- /dev/null
+++ b/samples/web-app-sql-database/dotnet/src/.dockerignore
@@ -0,0 +1,2 @@
+bin/
+obj/
diff --git a/samples/web-app-sql-database/dotnet/src/Models/Activity.cs b/samples/web-app-sql-database/dotnet/src/Models/Activity.cs
new file mode 100644
index 0000000..c39b073
--- /dev/null
+++ b/samples/web-app-sql-database/dotnet/src/Models/Activity.cs
@@ -0,0 +1,4 @@
+namespace VacationPlanner.Models;
+
+/// <summary>A planned vacation activity: the store's identifier plus the free-text description.</summary>
+public sealed record Activity(string Id, string Text);
diff --git a/samples/web-app-sql-database/dotnet/src/Pages/Delete.cshtml b/samples/web-app-sql-database/dotnet/src/Pages/Delete.cshtml
new file mode 100644
index 0000000..386fa85
--- /dev/null
+++ b/samples/web-app-sql-database/dotnet/src/Pages/Delete.cshtml
@@ -0,0 +1,2 @@
+@page "/delete/{id}"
+@model DeleteModel
diff --git a/samples/web-app-sql-database/dotnet/src/Pages/Delete.cshtml.cs b/samples/web-app-sql-database/dotnet/src/Pages/Delete.cshtml.cs
new file mode 100644
index 0000000..6272570
--- /dev/null
+++ b/samples/web-app-sql-database/dotnet/src/Pages/Delete.cshtml.cs
@@ -0,0 +1,22 @@
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Mvc.RazorPages;
+using VacationPlanner.Services;
+
+namespace VacationPlanner.Pages;
+
+/// <summary>Handles <c>POST /delete/{id}</c>; the activity is addressed by its store id, never by its position in the list.</summary>
+public class DeleteModel(IActivityStore store, ILogger<DeleteModel> logger) : PageModel
+{
+    public IActionResult OnGet() => RedirectToPage("/Index");
+
+    public async Task<IActionResult> OnPostAsync(string id, CancellationToken cancellationToken)
+    {
+        if (!string.IsNullOrWhiteSpace(id) && await store.DeleteAsync(id, cancellationToken))
+        {
+            logger.LogInformation("Activity deleted: {Id}", id);
+            TempData["Flash"] = "Activity deleted.";
+        }
+
+        return RedirectToPage("/Index");
+    }
+}
diff --git a/samples/web-app-sql-database/dotnet/src/Pages/Index.cshtml b/samples/web-app-sql-database/dotnet/src/Pages/Index.cshtml
new file mode 100644
index 0000000..bd617e2
--- /dev/null
+++ b/samples/web-app-sql-database/dotnet/src/Pages/Index.cshtml
@@ -0,0 +1,265 @@
+@page
+@model IndexModel
+<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8" />
+  <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+  <title>Vacation Planner</title>
+  <link rel="preconnect" href="https://fonts.googleapis.com" />
+  <link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700&display=swap" rel="stylesheet" />
+  <link rel="stylesheet" href="~/style.css" />
+  <link rel="icon" type="image/x-icon" href="~/favicon.ico" />
+  <script>
+    (function () {
+      try {
+        var dark = localStorage.getItem('vp_dark');
+        if (dark === 'true' || (dark === null && window.matchMedia('(prefers-color-scheme: dark)').matches)) {
+          document.documentElement.dataset.theme = 'dark';
+        }
+      } catch (_) {}
+    })();
+  </script>
+</head>
+<body>
+
+<!-- Header -->
+<header>
+  <div class="header-left">
+    <h1>&#127796; Vacation Planner</h1>
+    <p id="count-label">@Model.Activities.Count activit@(Model.Activities.Count != 1 ? "ies" : "y") planned</p>
+  </div>
+  <div class="header-right">
+    <button id="btn-dark-mode" aria-label="Toggle dark mode" title="Toggle dark mode">
+      <svg id="icon-dark" width="18" height="18" fill="none" stroke="currentColor" stroke-width="2" viewBox="0 0 24 24">
+        <path d="M21 12.79A9 9 0 1111.21 3a7 7 0 009.79 9.79z"/>
+      </svg>
+      <svg id="icon-light" width="18" height="18" fill="none" stroke="currentColor" stroke-width="2" viewBox="0 0 24 24" style="display:none">
+        <circle cx="12" cy="12" r="5"/>
+        <line x1="12" y1="1" x2="12" y2="3"/><line x1="12" y1="21" x2="12" y2="23"/>
+        <line x1="4.22" y1="4.22" x2="5.64" y2="5.64"/><line x1="18.36" y1="18.36" x2="19.78" y2="19.78"/>
+        <line x1="1" y1="12" x2="3" y2="12"/><line x1="21" y1="12" x2="23" y2="12"/>
+        <line x1="4.22" y1="19.78" x2="5.64" y2="18.36"/><line x1="18.36" y1="5.64" x2="19.78" y2="4.22"/>
+      </svg>
+    </button>
+    <button id="btn-add">
+      <svg width="16" height="16" fill="none" stroke="currentColor" stroke-width="2.5" viewBox="0 0 24 24"><line x1="12" y1="5" x2="12" y2="19"/><line x1="5" y1="12" x2="19" y2="12"/></svg>
+      Add Activity
+    </button>
+  </div>
+</header>
+
+<!-- Activity Table -->
+<div class="content">
+  <table id="activity-table">
+    <thead>
+      <tr>
+        <th>Activity</th>
+        <th class="col-actions" colspan="2">Actions</th>
+      </tr>
+    </thead>
+    <tbody>
+      @foreach (var activity in Model.Activities)
+      {
+      <tr data-id="@activity.Id" data-activity="@activity.Text">
+        <td>@activity.Text</td>
+        <td class="col-btn">
+          <button class="btn-edit" title="Edit activity" aria-label="Edit @activity.Text">
+            <svg width="14" height="14" fill="none" stroke="currentColor" stroke-width="2" viewBox="0 0 24 24">
+              <path d="M11 4H4a2 2 0 00-2 2v14a2 2 0 002 2h14a2 2 0 002-2v-7"/>
+              <path d="M18.5 2.5a2.121 2.121 0 013 3L12 15l-4 1 1-4 9.5-9.5z"/>
+            </svg>
+            Edit
+          </button>
+        </td>
+        <td class="col-btn">
+          <form method="post" asp-page="/Delete" asp-route-id="@activity.Id" class="delete-form">
+            <button type="button" class="btn-delete" title="Delete activity" aria-label="Delete @activity.Text">
+              <svg width="14" height="14" fill="none" stroke="currentColor" stroke-width="2" viewBox="0 0 24 24">
+                <polyline points="3 6 5 6 21 6"/><path d="M19 6l-1 14a2 2 0 01-2 2H8a2 2 0 01-2-2L5 6"/>
+                <path d="M10 11v6"/><path d="M14 11v6"/><path d="M9 6V4h6v2"/>
+              </svg>
+              Delete
+            </button>
+          </form>
+        </td>
+      </tr>
+      }
+      @if (Model.Activities.Count == 0)
+      {
+      <tr id="empty-row">
+        <td colspan="3" class="empty-cell">No vacation plans yet — add your first activity!</td>
+      </tr>
+      }
+    </tbody>
+  </table>
+</div>
+
+<!-- Add / Edit Activity Modal -->
+<div id="overlay">
+  <div class="modal" role="dialog" aria-modal="true" aria-labelledby="modal-title">
+    <div class="modal-header">
+      <h2 id="modal-title">&#127796; Add Activity</h2>
+      <button id="btn-close-modal" aria-label="Close">&times;</button>
+    </div>
+    <form id="activity-form" method="post" asp-page="/Index" novalidate>
+      <input type="hidden" id="f-row-id" name="row_id" value="" />
+      <div class="field">
+        <label for="f-activity">Activity <span style="color:#ef4444">*</span></label>
+        <input id="f-activity" name="activity" type="text" placeholder="e.g. Snorkelling at Coral Bay" required />
+      </div>
+    </form>
+    <div class="modal-actions">
+      <button class="btn-secondary" id="btn-cancel">Cancel</button>
+      <button class="btn-primary" id="btn-save">Save Activity</button>
+    </div>
+  </div>
+</div>
+
+<!-- Delete Confirmation Modal -->
+<div id="delete-overlay">
+  <div class="modal" role="dialog" aria-modal="true" aria-labelledby="delete-modal-title">
+    <div class="modal-header">
+      <h2 id="delete-modal-title">&#127796; Delete Activity</h2>
+      <button id="btn-close-delete-modal" aria-label="Close">&times;</button>
+    </div>
+    <div class="modal-body">
+      <p id="delete-confirm-msg">Are you sure you want to delete this activity?</p>
+    </div>
+    <div class="modal-actions">
+      <button class="btn-secondary" id="btn-cancel-delete">Cancel</button>
+      <button class="btn-primary" id="btn-confirm-delete">Delete</button>
+    </div>
+  </div>
+</div>
+
+<!-- Toast -->
+<div id="toast"></div>
+
+<script>
+  // ── Dark mode ────────────────────────────────────────────
+  function applyDark(dark) {
+    document.documentElement.dataset.theme = dark ? 'dark' : '';
+    document.getElementById('icon-dark').style.display  = dark ? 'none' : '';
+    document.getElementById('icon-light').style.display = dark ? ''     : 'none';
+  }
+  (function () {
+    var dark = localStorage.getItem('vp_dark');
+    var isDark = dark === 'true' || (dark === null && window.matchMedia('(prefers-color-scheme: dark)').matches);
+    applyDark(isDark);
+  })();
+  document.getElementById('btn-dark-mode').addEventListener('click', function () {
+    var isDark = document.documentElement.dataset.theme === 'dark';
+    applyDark(!isDark);
+    localStorage.setItem('vp_dark', String(!isDark));
+  });
+
+  // ── Toast ────────────────────────────────────────────────
+  var flashMessages = @Json.Serialize(Model.Flashes);
+  var toastTimer;
+  function showToast(msg) {
+    var el = document.getElementById('toast');
+    el.textContent = msg;
+    el.classList.add('show');
+    clearTimeout(toastTimer);
+    toastTimer = setTimeout(function () { el.classList.remove('show'); }, 2400);
+  }
+  if (flashMessages.length) showToast(flashMessages[0]);
+
+  // ── Activity Modal ───────────────────────────────────────
+  var overlay = document.getElementById('overlay');
+
+  function openActivityModal(data) {
+    var titleEl = document.getElementById('modal-title');
+    var saveEl  = document.getElementById('btn-save');
+    var rowId   = document.getElementById('f-row-id');
+    var input   = document.getElementById('f-activity');
+
+    if (data) {
+      titleEl.textContent = '🌴 Edit Activity';
+      saveEl.textContent  = 'Save Changes';
+      rowId.value         = data.id;
+      input.value         = data.activity;
+    } else {
+      titleEl.textContent = '🌴 Add Activity';
+      saveEl.textContent  = 'Save Activity';
+      rowId.value         = '';
+      input.value         = '';
+    }
+    overlay.classList.add('open');
+    input.focus();
+    var len = input.value.length;
+    input.setSelectionRange(len, len);
+  }
+
+  function closeActivityModal() {
+    overlay.classList.remove('open');
+    document.getElementById('activity-form').reset();
+    document.getElementById('f-row-id').value = '';
+    document.getElementById('modal-title').textContent = '🌴 Add Activity';
+    document.getElementById('btn-save').textContent    = 'Save Activity';
+  }
+
+  document.getElementById('btn-add').addEventListener('click', function () { openActivityModal(null); });
+  document.getElementById('btn-close-modal').addEventListener('click', closeActivityModal);
+  document.getElementById('btn-cancel').addEventListener('click', closeActivityModal);
+  overlay.addEventListener('click', function (e) { if (e.target === overlay) closeActivityModal(); });
+
+  document.getElementById('btn-save').addEventListener('click', function () {
+    var val = document.getElementById('f-activity').value.trim();
+    if (!val) { showToast('Activity cannot be empty.'); return; }
+    document.getElementById('activity-form').submit();
+  });
+
+  document.getElementById('f-activity').addEventListener('keydown', function (e) {
+    if (e.key === 'Enter') { e.preventDefault(); document.getElementById('btn-save').click(); }
+  });
+
+  // Edit buttons on rows
+  document.querySelectorAll('.btn-edit').forEach(function (btn) {
+    btn.addEventListener('click', function () {
+      var row = btn.closest('tr');
+      openActivityModal({ id: row.dataset.id, activity: row.dataset.activity });
+    });
+  });
+
+  // ── Delete confirmation modal ────────────────────────────
+  var deleteOverlay = document.getElementById('delete-overlay');
+  var pendingDeleteForm = null;
+
+  function openDeleteModal(form, activityName) {
+    pendingDeleteForm = form;
+    var msg = document.getElementById('delete-confirm-msg');
+    msg.textContent = 'Are you sure you want to delete "' + activityName + '"?';
+    deleteOverlay.classList.add('open');
+    document.getElementById('btn-confirm-delete').focus();
+  }
+
+  function closeDeleteModal() {
+    deleteOverlay.classList.remove('open');
+    pendingDeleteForm = null;
+  }
+
+  document.querySelectorAll('.btn-delete').forEach(function (btn) {
+    btn.addEventListener('click', function () {
+      var row = btn.closest('tr');
+      var form = btn.closest('form');
+      openDeleteModal(form, row.dataset.activity);
+    });
+  });
+
+  document.getElementById('btn-confirm-delete').addEventListener('click', function () {
+    if (pendingDeleteForm) pendingDeleteForm.submit();
+  });
+
+  document.getElementById('btn-cancel-delete').addEventListener('click', closeDeleteModal);
+  document.getElementById('btn-close-delete-modal').addEventListener('click', closeDeleteModal);
+  deleteOverlay.addEventListener('click', function (e) { if (e.target === deleteOverlay) closeDeleteModal(); });
+
+  // ── Escape closes any open modal ─────────────────────────
+  document.addEventListener('keydown', function (e) {
+    if (e.key === 'Escape') { closeActivityModal(); closeDeleteModal(); }
+  });
+</script>
+</body>
+</html>
diff --git a/samples/web-app-sql-database/dotnet/src/Pages/Index.cshtml.cs b/samples/web-app-sql-database/dotnet/src/Pages/Index.cshtml.cs
new file mode 100644
index 0000000..b012b42
--- /dev/null
+++ b/samples/web-app-sql-database/dotnet/src/Pages/Index.cshtml.cs
@@ -0,0 +1,49 @@
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Mvc.RazorPages;
+using VacationPlanner.Models;
+using VacationPlanner.Services;
+
+namespace VacationPlanner.Pages;
+
+public class IndexModel(IActivityStore store, ILogger<IndexModel> logger) : PageModel
+{
+    public IReadOnlyList<Activity> Activities { get; private set; } = [];
+
+    /// <summary>Flash messages set by the previous request (the equivalent of Flask's <c>flash()</c>).</summary>
+    public IReadOnlyList<string> Flashes => TempData["Flash"] is string message ? [message] : [];
+
+    [BindProperty(Name = "activity")]
+    public string? Activity { get; set; }
+
+    [BindProperty(Name = "row_id")]
+    public string? RowId { get; set; }
+
+    public async Task OnGetAsync(CancellationToken cancellationToken)
+    {
+        Activities = await store.ListAsync(cancellationToken);
+    }
+
+    public async Task<IActionResult> OnPostAsync(CancellationToken cancellationToken)
+    {
+        var text = Activity?.Trim();
+        var id = RowId?.Trim();
+        if (!string.IsNullOrEmpty(text))
+        {
+            if (!string.IsNullOrEmpty(id))
+            {
+                if (await store.UpdateAsync(id, text, cancellationToken))
+                {
+                    logger.LogInformation("Activity updated: {Id}", id);
+                    TempData["Flash"] = "Activity updated.";
+                }
+            }
+            else if (await store.AddAsync(text, cancellationToken))
+            {
+                logger.LogInformation("Activity added: {Activity}", text);
+                TempData["Flash"] = "Activity added.";
+            }
+        }
+
+        return RedirectToPage();
+    }
+}
diff --git a/samples/web-app-sql-database/dotnet/src/Pages/Update.cshtml b/samples/web-app-sql-database/dotnet/src/Pages/Update.cshtml
new file mode 100644
index 0000000..5e64f03
--- /dev/null
+++ b/samples/web-app-sql-database/dotnet/src/Pages/Update.cshtml
@@ -0,0 +1,2 @@
+@page "/update/{id}"
+@model UpdateModel
diff --git a/samples/web-app-sql-database/dotnet/src/Pages/Update.cshtml.cs b/samples/web-app-sql-database/dotnet/src/Pages/Update.cshtml.cs
new file mode 100644
index 0000000..9c09407
--- /dev/null
+++ b/samples/web-app-sql-database/dotnet/src/Pages/Update.cshtml.cs
@@ -0,0 +1,17 @@
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Mvc.RazorPages;
+using VacationPlanner.Services;
+
+namespace VacationPlanner.Pages;
+
+/// <summary>Handles <c>GET /update/{id}</c>: bounces to the index page with the activity to edit in the query string, as the Python sample does.</summary>
+public class UpdateModel(IActivityStore store) : PageModel
+{
+    public async Task<IActionResult> OnGetAsync(string id, CancellationToken cancellationToken)
+    {
+        var activity = (await store.ListAsync(cancellationToken)).FirstOrDefault(a => a.Id == id);
+        return activity is null
+            ? RedirectToPage("/Index")
+            : RedirectToPage("/Index", new { edit_id = activity.Id, edit_activity = activity.Text });
+    }
+}
diff --git a/samples/web-app-sql-database/dotnet/src/Pages/_ViewImports.cshtml b/samples/web-app-sql-database/dotnet/src/Pages/_ViewImports.cshtml
new file mode 100644
index 0000000..ec62511
--- /dev/null
+++ b/samples/web-app-sql-database/dotnet/src/Pages/_ViewImports.cshtml
@@ -0,0 +1,4 @@
+@using VacationPlanner
+@using VacationPlanner.Models
+@namespace VacationPlanner.Pages
+@addTagHelper *, Microsoft.AspNetCore.Mvc.TagHelpers
diff --git a/samples/web-app-sql-database/dotnet/src/Program.cs b/samples/web-app-sql-database/dotnet/src/Program.cs
new file mode 100644
index 0000000..21021bf
--- /dev/null
+++ b/samples/web-app-sql-database/dotnet/src/Program.cs
@@ -0,0 +1,67 @@
+using System.Diagnostics;
+using Microsoft.AspNetCore.DataProtection;
+using Microsoft.AspNetCore.DataProtection.KeyManagement;
+using VacationPlanner.Services;
+
+var builder = WebApplication.CreateBuilder(args);
+
+// Listen on PORT (8080 by default), the way the Python image binds gunicorn to 0.0.0.0:${PORT}. HTTP_PORTS is the
+// same setting the aspnet base image feeds through ASPNETCORE_HTTP_PORTS, so no URL override is involved.
+if (Environment.GetEnvironmentVariable("PORT") is { Length: > 0 } port)
+{
+    builder.WebHost.UseSetting(WebHostDefaults.HttpPortsKey, port);
+}
+
+// Read and validate the configuration up front so a misconfigured deployment fails at startup.
+var storeOptions = SqlOptions.FromEnvironment();
+
+// SECRET_KEY is the Kubernetes Secret the Python sample signs its session cookie with. Deriving the Data Protection
+// key ring from it lets all replicas validate each other's antiforgery tokens and flash cookies; without it (a local
+// docker run) each process keeps its own keys.
+var secretKey = Environment.GetEnvironmentVariable("SECRET_KEY");
+if (!string.IsNullOrEmpty(secretKey))
+{
+    builder.Services.AddDataProtection().DisableAutomaticKeyGeneration();
+    builder.Services.Configure<KeyManagementOptions>(options => options.XmlRepository = new SecretKeyXmlRepository(secretKey));
+}
+
+builder.Services.AddRazorPages();
+builder.Services.AddSingleton<IActivityStore>(sp =>
+    new SqlActivityStore(storeOptions, sp.GetRequiredService<ILogger<SqlActivityStore>>()));
+builder.Services.AddHostedService(sp =>
+    new StoreInitializer(sp.GetRequiredService<IActivityStore>(), sp.GetRequiredService<ILogger<StoreInitializer>>()));
+
+var app = builder.Build();
+
+if (string.IsNullOrEmpty(secretKey))
+{
+    app.Logger.LogWarning("SECRET_KEY is not set: antiforgery tokens and flash messages are only valid on this replica.");
+}
+
+// One log line per request, the equivalent of the access log the Python image produces (its gunicorn
+// command passes --access-logfile -). Kubernetes probes show up here too, exactly as they do for Python.
+var requestLogger = app.Services.GetRequiredService<ILoggerFactory>().CreateLogger("VacationPlanner.Requests");
+app.Use(
+    async (context, next) =>
+    {
+        var started = Stopwatch.GetTimestamp();
+        await next();
+        requestLogger.LogInformation(
+            "{Method} {Path} -> {StatusCode} in {Elapsed:0.0}ms",
+            context.Request.Method,
+            context.Request.Path,
+            context.Response.StatusCode,
+            Stopwatch.GetElapsedTime(started).TotalMilliseconds
+        );
+    }
+);
+
+app.UseStaticFiles();
+app.MapRazorPages();
+
+app.MapGet("/health", async (IActivityStore store, CancellationToken cancellationToken) =>
+    await store.IsHealthyAsync(cancellationToken)
+        ? Results.Json(new { status = "ok" })
+        : Results.Json(new { status = "unavailable" }, statusCode: StatusCodes.Status503ServiceUnavailable));
+
+app.Run();
diff --git a/samples/web-app-sql-database/dotnet/src/Services/IActivityStore.cs b/samples/web-app-sql-database/dotnet/src/Services/IActivityStore.cs
new file mode 100644
index 0000000..167993e
--- /dev/null
+++ b/samples/web-app-sql-database/dotnet/src/Services/IActivityStore.cs
@@ -0,0 +1,24 @@
+using VacationPlanner.Models;
+
+namespace VacationPlanner.Services;
+
+/// <summary>Persistence for the planner's activities. Every call goes to the backing store; nothing is cached in-process.</summary>
+public interface IActivityStore
+{
+    /// <summary>Creates whatever the store needs (container, table, collection, directory) before the first request.</summary>
+    Task InitializeAsync(CancellationToken cancellationToken);
+
+    Task<IReadOnlyList<Activity>> ListAsync(CancellationToken cancellationToken);
+
+    /// <summary>Adds an activity and returns whether the store confirmed the write; the page flashes only then.</summary>
+    Task<bool> AddAsync(string text, CancellationToken cancellationToken);
+
+    /// <summary>Updates an activity and returns whether the store reported a change, with the meaning the Python sample's driver gives it.</summary>
+    Task<bool> UpdateAsync(string id, string text, CancellationToken cancellationToken);
+
+    /// <summary>Deletes an activity by its store id and returns whether the store reported a deletion.</summary>
+    Task<bool> DeleteAsync(string id, CancellationToken cancellationToken);
+
+    /// <summary>Cheap connectivity probe used by <c>GET /health</c>.</summary>
+    Task<bool> IsHealthyAsync(CancellationToken cancellationToken);
+}
diff --git a/samples/web-app-sql-database/dotnet/src/Services/SecretKeyXmlRepository.cs b/samples/web-app-sql-database/dotnet/src/Services/SecretKeyXmlRepository.cs
new file mode 100644
index 0000000..e0cc5bb
--- /dev/null
+++ b/samples/web-app-sql-database/dotnet/src/Services/SecretKeyXmlRepository.cs
@@ -0,0 +1,49 @@
+using System.Security.Cryptography;
+using System.Text;
+using System.Xml.Linq;
+using Microsoft.AspNetCore.DataProtection;
+using Microsoft.AspNetCore.DataProtection.AuthenticatedEncryption.ConfigurationModel;
+using Microsoft.AspNetCore.DataProtection.Repositories;
+
+namespace VacationPlanner.Services;
+
+/// <summary>
+/// A Data Protection key ring derived deterministically from <c>SECRET_KEY</c>, the Kubernetes Secret the Python
+/// sample signs its Flask session cookie with. ASP.NET Core protects its antiforgery tokens and TempData (flash)
+/// cookies with Data Protection instead of a signing key; deriving the one key of the ring from the same secret
+/// lets every replica of the Deployment validate what another replica issued, which the default per-process key
+/// ring cannot offer behind a load balancer.
+/// </summary>
+public sealed class SecretKeyXmlRepository : IXmlRepository
+{
+    private readonly XElement _key;
+
+    public SecretKeyXmlRepository(string secretKey)
+    {
+        var keyMaterial = Encoding.UTF8.GetBytes(secretKey);
+
+        // A 512-bit master key (the size Data Protection generates itself) and a stable key id, both from SECRET_KEY.
+        var masterKey = HKDF.DeriveKey(HashAlgorithmName.SHA256, keyMaterial, 64, info: "VacationPlanner.DataProtection.MasterKey"u8.ToArray());
+        var keyId = new Guid(HKDF.DeriveKey(HashAlgorithmName.SHA256, keyMaterial, 16, info: "VacationPlanner.DataProtection.KeyId"u8.ToArray()));
+
+        // AES-256-CBC + HMACSHA256, the default algorithms, serialized the way the key manager itself serializes a new key.
+        var descriptor = new AuthenticatedEncryptorDescriptor(new AuthenticatedEncryptorConfiguration(), new Secret(masterKey));
+        var serialized = descriptor.ExportToXml();
+
+        _key = new XElement("key",
+            new XAttribute("id", keyId),
+            new XAttribute("version", 1),
+            new XElement("creationDate", new DateTimeOffset(2000, 1, 1, 0, 0, 0, TimeSpan.Zero)),
+            new XElement("activationDate", new DateTimeOffset(2000, 1, 1, 0, 0, 0, TimeSpan.Zero)),
+            new XElement("expirationDate", new DateTimeOffset(2999, 12, 31, 0, 0, 0, TimeSpan.Zero)),
+            new XElement("descriptor",
+                new XAttribute("deserializerType", serialized.DeserializerType.AssemblyQualifiedName!),
+                serialized.SerializedDescriptorElement));
+    }
+
+    public IReadOnlyCollection<XElement> GetAllElements() => [new XElement(_key)];
+
+    /// <summary>Never called: automatic key generation is disabled, so the key manager has nothing to persist.</summary>
+    public void StoreElement(XElement element, string friendlyName) =>
+        throw new NotSupportedException("The key ring is derived from SECRET_KEY and cannot be modified.");
+}
diff --git a/samples/web-app-sql-database/dotnet/src/Services/SqlActivityStore.cs b/samples/web-app-sql-database/dotnet/src/Services/SqlActivityStore.cs
new file mode 100644
index 0000000..c528b2e
--- /dev/null
+++ b/samples/web-app-sql-database/dotnet/src/Services/SqlActivityStore.cs
@@ -0,0 +1,142 @@
+using Azure.Core;
+using Azure.Identity;
+using Microsoft.Data.SqlClient;
+using VacationPlanner.Models;
+
+namespace VacationPlanner.Services;
+
+/// <summary>
+/// Activities in the <c>dbo.Activities</c> table of an Azure SQL Database. The table is created by the
+/// deployment scripts, so the store only reads and writes it.
+/// </summary>
+public sealed class SqlActivityStore(SqlOptions options, ILogger<SqlActivityStore> logger) : IActivityStore
+{
+    private readonly TokenCredential? _credential = options.UseAzureCredential ? new DefaultAzureCredential() : null;
+
+    // Encrypt + TrustServerCertificate, like the Python sample's ODBC connection string: the emulator's SQL Server
+    // presents a self-signed certificate, so the connection is encrypted without validating the certificate chain.
+    private readonly string _connectionString = new SqlConnectionStringBuilder
+    {
+        DataSource = $"tcp:{options.Server},1433",
+        InitialCatalog = options.Database,
+        Encrypt = SqlConnectionEncryptOption.Mandatory,
+        TrustServerCertificate = true,
+        ConnectTimeout = 30,
+        UserID = options.UseAzureCredential ? "" : options.User!,
+        Password = options.UseAzureCredential ? "" : options.Password!,
+    }.ConnectionString;
+
+    public async Task InitializeAsync(CancellationToken cancellationToken)
+    {
+        // The table is provisioned by the deployment scripts; just prove the database is reachable.
+        await using var connection = await OpenAsync(cancellationToken);
+        logger.LogInformation("Connected to SQL Database [{Database}] on [{Server}]", options.Database, options.Server);
+    }
+
+    public async Task<IReadOnlyList<Activity>> ListAsync(CancellationToken cancellationToken)
+    {
+        await using var connection = await OpenAsync(cancellationToken);
+        await using var command = new SqlCommand(
+            "SELECT id, activity FROM dbo.Activities WHERE username = @username ORDER BY timestamp DESC", connection);
+        command.Parameters.AddWithValue("@username", options.Username);
+
+        var activities = new List<Activity>();
+        await using var reader = await command.ExecuteReaderAsync(cancellationToken);
+        while (await reader.ReadAsync(cancellationToken))
+        {
+            activities.Add(new Activity(reader.GetGuid(0).ToString(), reader.GetString(1)));
+        }
+
+        logger.LogInformation(
+            "Retrieved {Count} activities for user: {Username}",
+            activities.Count,
+            options.Username
+        );
+        return activities;
+    }
+
+    /// <summary>Reports success when the INSERT returned the new row, as the Python sample's <c>OUTPUT INSERTED</c> check does.</summary>
+    public async Task<bool> AddAsync(string text, CancellationToken cancellationToken)
+    {
+        await using var connection = await OpenAsync(cancellationToken);
+        await using var command = new SqlCommand(
+            """
+            INSERT INTO dbo.Activities (username, activity, timestamp)
+            OUTPUT INSERTED.id
+            VALUES (@username, @activity, GETDATE())
+            """, connection);
+        command.Parameters.AddWithValue("@username", options.Username);
+        command.Parameters.AddWithValue("@activity", text);
+        var id = await command.ExecuteScalarAsync(cancellationToken);
+        logger.LogInformation("Activity created: {Id}", id);
+        return id is not null;
+    }
+
+    public async Task<bool> UpdateAsync(string id, string text, CancellationToken cancellationToken)
+    {
+        await using var connection = await OpenAsync(cancellationToken);
+        await using var command = new SqlCommand(
+            "UPDATE dbo.Activities SET activity = @activity, timestamp = GETDATE() WHERE id = CAST(@id AS UNIQUEIDENTIFIER)", connection);
+        command.Parameters.AddWithValue("@activity", text);
+        command.Parameters.AddWithValue("@id", id);
+        var rows = await command.ExecuteNonQueryAsync(cancellationToken);
+        if (rows == 0)
+        {
+            logger.LogWarning("No activity found with ID: {Id}", id);
+        }
+        else
+        {
+            logger.LogInformation("Updated activity with ID: {Id}", id);
+        }
+
+        return rows > 0;
+    }
+
+    public async Task<bool> DeleteAsync(string id, CancellationToken cancellationToken)
+    {
+        await using var connection = await OpenAsync(cancellationToken);
+        await using var command = new SqlCommand("DELETE FROM dbo.Activities WHERE id = CAST(@id AS UNIQUEIDENTIFIER)", connection);
+        command.Parameters.AddWithValue("@id", id);
+        var rows = await command.ExecuteNonQueryAsync(cancellationToken);
+        if (rows == 0)
+        {
+            logger.LogWarning("No activity found with ID: {Id}", id);
+        }
+        else
+        {
+            logger.LogInformation("Deleted activity with ID: {Id}", id);
+        }
+
+        return rows > 0;
+    }
+
+    public async Task<bool> IsHealthyAsync(CancellationToken cancellationToken)
+    {
+        try
+        {
+            await using var connection = await OpenAsync(cancellationToken);
+            await using var command = new SqlCommand("SELECT 1", connection);
+            await command.ExecuteScalarAsync(cancellationToken);
+            return true;
+        }
+        catch (Exception ex)
+        {
+            logger.LogWarning(ex, "SQL Database health check failed");
+            return false;
+        }
+    }
+
+    private async Task<SqlConnection> OpenAsync(CancellationToken cancellationToken)
+    {
+        var connection = new SqlConnection(_connectionString);
+        if (_credential is not null)
+        {
+            // Passwordless: present a Microsoft Entra access token for Azure SQL Database.
+            var token = await _credential.GetTokenAsync(new TokenRequestContext(["https://database.windows.net/.default"]), cancellationToken);
+            connection.AccessToken = token.Token;
+        }
+
+        await connection.OpenAsync(cancellationToken);
+        return connection;
+    }
+}
diff --git a/samples/web-app-sql-database/dotnet/src/Services/SqlOptions.cs b/samples/web-app-sql-database/dotnet/src/Services/SqlOptions.cs
new file mode 100644
index 0000000..e15f9bb
--- /dev/null
+++ b/samples/web-app-sql-database/dotnet/src/Services/SqlOptions.cs
@@ -0,0 +1,34 @@
+namespace VacationPlanner.Services;
+
+/// <summary>
+/// Connection settings read from the same environment variables the Python sample uses: <c>SQL_SERVER</c> and
+/// <c>SQL_DATABASE</c>, with either <c>SQL_USERNAME</c>/<c>SQL_PASSWORD</c> (SQL authentication) or the
+/// <c>AZURE_CLIENT_ID</c>/<c>AZURE_CLIENT_SECRET</c>/<c>AZURE_TENANT_ID</c> service principal (Microsoft Entra token).
+/// </summary>
+public sealed record SqlOptions(string Server, string Database, string? User, string? Password, bool UseAzureCredential, string Username)
+{
+    public static SqlOptions FromEnvironment()
+    {
+        var username = Environment.GetEnvironmentVariable("LOGIN_NAME") ?? "paolo";
+        if (string.IsNullOrWhiteSpace(username))
+        {
+            throw new InvalidOperationException("Username cannot be None or empty");
+        }
+
+        var server = Environment.GetEnvironmentVariable("SQL_SERVER");
+        var database = Environment.GetEnvironmentVariable("SQL_DATABASE");
+        var user = Environment.GetEnvironmentVariable("SQL_USERNAME");
+        var password = Environment.GetEnvironmentVariable("SQL_PASSWORD");
+        var useAzureCredential = Environment.GetEnvironmentVariable("AZURE_CLIENT_ID") is { Length: > 0 }
+            && Environment.GetEnvironmentVariable("AZURE_CLIENT_SECRET") is { Length: > 0 }
+            && Environment.GetEnvironmentVariable("AZURE_TENANT_ID") is { Length: > 0 };
+
+        if (string.IsNullOrEmpty(server) || string.IsNullOrEmpty(database) || (!useAzureCredential && (string.IsNullOrEmpty(user) || string.IsNullOrEmpty(password))))
+        {
+            throw new InvalidOperationException(
+                "Set SQL_SERVER and SQL_DATABASE, with SQL_USERNAME and SQL_PASSWORD or the AZURE_CLIENT_ID, AZURE_CLIENT_SECRET and AZURE_TENANT_ID service principal variables.");
+        }
+
+        return new SqlOptions(server, database, user, password, useAzureCredential, username);
+    }
+}
diff --git a/samples/web-app-sql-database/dotnet/src/Services/StoreInitializer.cs b/samples/web-app-sql-database/dotnet/src/Services/StoreInitializer.cs
new file mode 100644
index 0000000..c74eb50
--- /dev/null
+++ b/samples/web-app-sql-database/dotnet/src/Services/StoreInitializer.cs
@@ -0,0 +1,33 @@
+namespace VacationPlanner.Services;
+
+/// <summary>
+/// Runs <see cref="IActivityStore.InitializeAsync"/> at startup with a bounded retry, so the app fails fast
+/// (and the container exits) when the backing service never becomes reachable.
+/// </summary>
+public sealed class StoreInitializer(
+    IActivityStore store,
+    ILogger<StoreInitializer> logger,
+    int attempts = 1,
+    TimeSpan delay = default) : IHostedService
+{
+    public async Task StartAsync(CancellationToken cancellationToken)
+    {
+        for (var attempt = 1; ; attempt++)
+        {
+            try
+            {
+                await store.InitializeAsync(cancellationToken);
+                logger.LogInformation("Activity store initialized after {Attempts} attempt(s).", attempt);
+                return;
+            }
+            catch (Exception ex) when (attempt < attempts && !cancellationToken.IsCancellationRequested)
+            {
+                logger.LogWarning(ex, "Activity store not ready (attempt {Attempt}/{Attempts}); retrying in {Delay}s.",
+                    attempt, attempts, delay.TotalSeconds);
+                await Task.Delay(delay, cancellationToken);
+            }
+        }
+    }
+
+    public Task StopAsync(CancellationToken cancellationToken) => Task.CompletedTask;
+}
diff --git a/samples/web-app-sql-database/dotnet/src/VacationPlanner.csproj b/samples/web-app-sql-database/dotnet/src/VacationPlanner.csproj
new file mode 100644
index 0000000..f99d0de
--- /dev/null
+++ b/samples/web-app-sql-database/dotnet/src/VacationPlanner.csproj
@@ -0,0 +1,12 @@
+<Project Sdk="Microsoft.NET.Sdk.Web">
+  <PropertyGroup>
+    <TargetFramework>net10.0</TargetFramework>
+    <Nullable>enable</Nullable>
+    <ImplicitUsings>enable</ImplicitUsings>
+    <RootNamespace>VacationPlanner</RootNamespace>
+  </PropertyGroup>
+  <ItemGroup>
+    <PackageReference Include="Azure.Identity" Version="1.21.0" />
+    <PackageReference Include="Microsoft.Data.SqlClient" Version="7.0.2" />
+  </ItemGroup>
+</Project>
diff --git a/samples/web-app-sql-database/dotnet/src/appsettings.json b/samples/web-app-sql-database/dotnet/src/appsettings.json
new file mode 100644
index 0000000..6e5c6b2
--- /dev/null
+++ b/samples/web-app-sql-database/dotnet/src/appsettings.json
@@ -0,0 +1,16 @@
+{
+  "Logging": {
+    "LogLevel": {
+      "Default": "Information",
+      "Microsoft.AspNetCore": "Warning"
+    },
+    "Console": {
+      "FormatterName": "simple",
+      "FormatterOptions": {
+        "SingleLine": true,
+        "TimestampFormat": "yyyy-MM-dd HH:mm:ss "
+      }
+    }
+  },
+  "AllowedHosts": "*"
+}
diff --git a/samples/web-app-sql-database/dotnet/src/wwwroot/favicon.ico b/samples/web-app-sql-database/dotnet/src/wwwroot/favicon.ico
new file mode 100644
index 0000000000000000000000000000000000000000..5b1d5cf37d81c073dbacd66df3f69d9240359dda
GIT binary patch
literal 36791
zcmagEWmp_d(>6Q{i$hpk0}H_+c#vR=6Wrb1od6-g;x0iFoDJ?0f_tzeIKkZs9^B#M
zdhWm9alG?mrfYhnrmO3ms<R6KKmZy5fdJ1N6p%*-fcMWWQqup)Cnx~W^?VKr{hz#m
z4gj?n0Km!lKiTpH0L0=001Wm&nVJv){y_l%4*#G0g9QL^-~8A9Z-WBc8~`wG0sv8}
z%Cb0^<e1MVao)*EsXrh8(*S~w`n;z;dolw6WW0A$;+j5LR>?|=hE{~(xo1m$5$WOx
zbWKdfscH3)sLJu8Xzj(xu<713Y$3x$OfLQLhNy8}4uYlTL|y(QT@oUE8%0m6*lERg
z1z4=(8HnCaQ${&?+Zzf}>!bD+H;@yHKQSZYu^->grpOP5U0!8&*<K~jn<fjg9|H-E
z7vuwNu@j+x`=G0n*Q#dt(qKRua$cKUdDXg3#V1h^w0U-{V)E8A@9^~u&#`W~sdysM
z*gFit3~HA9y>$!7!B+yIi1l|oaJ(PxauD5x8~L*c^Ib0^4*b-W%Gu<d<%hfSSC8?Q
zcE<Sd=wpl1L8t2UwB3Z?<I;G4w2hJvVtuvZd!=Ic)d*A&pNQie9^*8{R^Hg$D_XNj
z;q9Kf^%PDnpM3qX8Do>9Sovk9&i(=hRu&Fz(W>Lscu7crQLUxrCM;>!e0m{r*JdLi
zX1#U$C?c6~)NA%5PB4y7HQH>;zWNGg*Ey4P&2YQ_)ul&FNMtBeU~#9Paylk8=aUY{
zNBfE9?{iK09V9WWab|*Lq!FiiDKA!9(<sNcn!_(kCmzQwHuA?m+#}-h5|&tyX-ARL
z487U+1pN^ppE5(t%8hhV`n!8?<j#A~VXW;vb>^k%@#WN!qU<{Fj+%hW*|2<vm@N*q
zOAsj>T4pa@@b<H-l4`u@_2#wD^c9zKGq>MiZZMnTL#@zEc1$?Q2pM5i^aK{)@f|5L
zgrL<vR!$YO8oI{3a_r7S=2-D~32n|#zZGdE2X1dgG4VXl<Bmzn2vWarlT8A>8(V|Z
z_P_K+c)0)doEohned9K=)z411+B%JG7yQb^y(oqU*iX!T=Xq{0W%1<+!dPDWy@E9!
zHs7r}y&k4(<WB*SQZC9>A>gj<i;+ACB&1u5l~0z14e#y!Ed1?D@jsrdF7%9A{jn<+
z`f|6@nMScBLwnwKEChHZ2;ZN-JZ#lyD3izYCPtLzOU?$*u?T~-iJDK(3TIf)&U|th
zjk!-2ioCIoUjH_g0R^k?)|LMWoBwG)tnc=^b9cUS;|U}irkN1*o6_#tM}T+I%2HJl
zrosO|p7fvZlK!73t$K@G0{}|X|2!#9%gE7i3h&W+r1|QoY6b%=SJN%ctSSBe9Zi@F
z9__y9xP0ZUr<#<Vs#d8weX@WZGoHGaKdY8-YG_H9q+KE5BD`8vGb(~9E?TD)1CMTO
zObYXz;#O|2Skz$!f2&{MNV=%ww18<|K!S(N*>2{I^^3JZggQ{)fHvVz&W+6pq)3ti
z!9XnJ{b2ma@Ik4GevGVKB5b^sp}QmS@Fj)Q762@%ewgc#XF?g<g3MV69h0lR5K|e7
zS9;wAKEzivr!cQ6zhA#D7YANQ&e9{TL`2i3Ia43Kyz&&m7{djc<K+55Z|TCSJB?lp
z&RMj!yx)o53v04Rfe83AWP%vDNW^&uGPE;?9*_RU5LDlY5`thcP97!$56;HNHp44n
zL~!(8055TJSdIHqaPVWA+$jW!YbuT_u(YpUEHl`9ZIZgE8U=Ly^W(tMt2_2M5Ktd2
zHor2pA#gqB^ryMP41_ch9#qd~VLef$ZkP1N@UW%tlGax+f$+?*DpBZXbUa&;591!I
zjx<avu`oyiR%mmqXH$7o{QgFscmr%&-ap%5Ui(kepw_2#LqK8(2~Rsdyhp!67diO7
zJEjzjc%hc<*L&O};r9r_6i-1m8wJVb(*vUwM2gOrtN6g#^@q9gLVw!JooRXHibPli
zO$~to>6f2_LO=15ljp$_1xD`Q%T-%Hi+CUcHxoLJ%bB8waM({HJ{AthxM&$4xpw>&
z)~qgo;6b1%I+Hx9$;au+f^H5XO#2udviAgAWfwD1>eIbLLwd0hXx=X$eo~*N8(gxX
z(2H!!ey+c2(Q&0JGf~0^pbS`FO7h1qr>93=$E++~b3R>P%D!Fsu-(4WAnqhbaE67a
z_`zwuHr?{KRq(e_<Y7V8KP$sIBK14tPR6ZuooY%Nv;uHT<IHl0nRQp&fjeZzs{?Y6
zq^AATzTICMySsOH#)29s@Jc`aN{{*grPkXByH`Bsh4}oK`}s?<ReX(vR#>1QtJYt!
z^!VX&+eDO0B@7(Yvu=)EFx$1dr}$}`YDCQkEt})^1aD--7vtNGE9<9|-OkIndnP-}
zY9YZ&m}kt!)HE`HHq&_Z>kEG%4gyWlT#s#avp#-*Zms+A>NY(5BMIE|qs>O&$Z)3X
zRS0fk>vlsNVA-?CKmcBaqF=`yzET;uIH$hRV&_r-0oRHNDgczsn|ZiOm+QCHZ*?9D
z{-k0MM44Ynm5d@+Um%dGjym_pWK{AMUw#j|q%IT;aG3{WO#UgWAM3i1L<Qn?Q9(%G
z=GEBJ{n>Aa(KHGX1xH=6DDVRH(*83nISQ^U^IDH)<Q~X0_32dR!$5Iei=##100`!t
zdqfOyR<LW>$8Oj$R#{Q6@CQ0}9^bKGzWQ_LjDUQuy<DKs^rJ}_BA?tlc@1zb)V;TJ
z$Y-QQ2H{Nn?ADI$2~q{1zrKxv(<Z5qLrH!>-WU0W13&+{^7vjRKUJg)-7yo77<Jvx
zdDzwMktB%Fp(8m9rieoVf9i}^FIP*teydH>u0}i@LsSLXC;-wIJ=;!<kJIZzZ1x%&
zwnL)>z-qPYbdPlhVEba-<2@N+Oq8S$ZeKt|HLaA4RAl5qSm#4Pw(bQYGWGpvp?oDC
zG8)(7k`k*cThNyeXsdCD1Ixxe<pJ%&e8OYpV8luOKx1!yeqZ0On0FheM3dImJI>lo
zVHAYCqX%Dod@D%WKdXMmJ!<nXP%mBG`$0>0oQGeWJRH0Bl#A&5vzH47X^_r)1Y#cj
z3A^9ukKWvSqjfI4>2QIu`Vwdde)GGGlhjxWooCSiP3Oldw+<vD<$Hy@Lj}w;<h6<a
zih(hqe^Y_iI?UIU0hXXd%Q+by{?XK1UcY#m*T1%Hc35pPKS(y~MWqsceD}hj^&;bw
zNX3P0g->w0i7zdS4n2C>XI5j-6LNO$Oi-?-O8EZ+@S)HB(EkH`j}ITt0RTPke}G@8
zWA_aBM2{owF6n(d%9M_(<^#%^u=Ro%DFaR71-yGXyt4T+i^;t2S|tbsgJn=SHDae&
z8(noFRGW~fH;*rJy)<+J>EREt3i^n;^lL&DTl{Z=<zHsgqilSSm;G)ntcM^%t7SVY
zepl@t9cS6cIexfnf8x3TbfBv)U`@O$;%4u2xq+cs^&7-OWGR_rKaE`%Q~SoDNe&rm
z2>X?!4)(sdCo=7Z<W$J+C6osqgsVZ_<}kSK7uuCiS4uQwiW&((g6ahaVi~!`sF#gN
zzEq<_Q-c+YzdDTai?#U#aBls5=oC#Ve?kQ&?EV_?)j#}>in%E3<;-}44y`dm{RAC!
z2OpHcxQdt2d5bTdg|y0A)&@ZkVaUg{Dztf>#NjLMYi&|CFb&-*6UMz(*!jfKA!7m(
zY^G@X?y%{?Q+JF8zydJdCB6`kz|Qv}9AX5uFj4B;BL(=erR#o?*6xldMT6y_o%*L$
z4aWr1vYlhZ<jHW&YDz)rplqN@#pO`zjj5>3__LdPbPT%h>+%v{xNAImV2Z@irtaoa
zY@lrgal!sq>A`;UIL2=Qd?g&9!dse&_Aw&^{XmQ6(~cTT!ZadKa1<RVm~3cBMoxDK
zz<xwpuf_vY&X_IK(iApr%Fre>zIF_ByPKaG3D^{)pJ=y>8;sp^2pBAyHtEec817Cf
z#YBe$Bam>k_#o<C-`LP;SXhV^8$1Q((&z@<U{a|q@`-BUG`7?f0oDWI-T}C9jR)p*
z<w7Md6D1q=KhN4^8q8oQ2;1;>{z63qsEDOnD4ED&WINO4dR-El)N~u9CD1vMP4f#A
zle+s!d$7@IX|1hkX$MmwNeJY2)+WNof2oysFZ^;CKd$g!U?=VbJ?6L=?Fd-UtWb%0
zl;q@jbsDvQjys9tI+Wqz(g{@nzC*#Bu5{f*_+|)@bsto14&9N|l;7HbWpXE&d*w1>
z_!xUCB&`-l;~|lBFGY4##<!2<>P9Z4j*p4S*2<m`8CwHCgP0J!BK(PvnlJR2Docmb
zTX)f1wy+Wz`K3KhA`p~@_g2j=!peV^`Sijmted$L7aJ+&*8k8K@=9_k<+85Zi*<2_
z7H4GMoE^K~ybAY4gcKV6u8@Yp_*5IFL#8wL!#<je7e=|Jp2+WhN{{shI`Q72aP;@8
znr3v)99XnIKd;QxcT>{3VP#_Uf7<Q*XBsm3WRfo%%tf)IOlPLk_4){^y!dkcHj2mJ
zL>Odd@W-R|aXK%&XBV6L<J<TJ1ou)|OheCG7sdDK{U$}r#H=JmNB2ovc<;0CE|vk>
zndulWat_+3Bc;q^m;ECMu?R6?N|C%p`irA}$8tl}yGLQSRRb(3%N<Rcgwww$JYMId
z3GG*p<f9=z<NNV#HC~*Z7ClFdspBT&Uzd0KoiJ*~f7iVH^jchM5e$@i$}1w1!Wx0D
zj2~!OC9(ESd+{%(m3zPa`1YY1657}!%bBtixHr4{XnN3om5nu^3}LOGzcLG0wfSwD
zc%|KV@jG0EnlNE+%1p0wyVns527PUA{m2b?@+Bzpz{te%r-keLt@2z-zL}|7#dXWf
ztJ^z`fUVqQKMXEo0e{Qra^HP#i09|%{EVN?I@V^twG-d|*GLlZ^QXEg=V6)3P1<$x
zi^(NhdN@Rs7&pGs?qy=&Y((zr0-$B*1i;Xrn?mq+2dhXH2ewGk-ZI0<QXT4#ezRvS
zuYr5|rwfU^{KFsj^oNmbx(NKU<XUx%K@h@aOCAaC>7wsP6}o~J-&`o9g?O@(rAObK
zP9p&ljnZiWNNC?@R*az*`S#lU&)9>vpLD1fd3;7iW)?bf)ed}-faq8G`Gse%e&Xa#
z+&qubNv<P(-PhvcJ|m6$x+^NCP<?+L6jX@tQc|%rDxglQzu;s#{k}IzT>N2UE6y)R
zSY*ygWZ#AmD5%pzf=7i!Fbp<Gbx^um^hzTp^9Jwa<D#6a7e07tY_A$EIDgED#0JjK
zHOa2!b~RV+zgW|jdFs@CLSOv$EzIFdq$UdrV5?s*VN~yql2K(8UaswxS6b&`wso9C
z2IUTr;R!*qppvi+Km{K6VjBR2M@cfM3*Ac}EeX^WrB9oN`M#sgZq&3=%<zc!ZRf8z
z#tlvl>1h65i1E;XwFTm{N!U`mG|)FMgazD-=B^>rY{g@|36#=Zw|{AGK_|v%(0W8c
zZVvp+7UshJ1;+du?&`GZar2J=n5=j|U^yv;j#RA9oc`!`i4Vq=A$PKnsM}A)@w@WN
zk-eDXfpr{b^3PPeaZriP1stvD#oFLbT#uop37nd}sS8p;>be*>`Hm{{R+c5AdF^|O
zL`~Njkq$ET9}M9H0O2%8^4a99Z?v)Rv!`oMo;2;;czAz&{2t2tBGf9&KO;N=MM;HY
zE}OCnPbm$)SOB+wdcsTxS}-V@m!UPofJEKm&RoQ0PMu9R;5GRdPsOigM^9uhr8N$*
z8ZjOARPCoDS-(+$ddhwt)f9cT_5iI>g;FeNeO3VFhEhJ6M6HRFD@uj6%gTEAG=2h?
zx+yZkhW$Cq`+22geU|Oiy=ghKJFZp(k&rWsj*n9i=fnp7W(tMQ0j^%b>0Brmzz;OV
zL9ZGA>h8SR<~1I9qUg_<$TWs%<KeTu0I8E*x_@xSD|q^MohjUvnTQ<yV|#<;I3MI~
ze?D4W2brymBDvB!AaU;?iwEF}aCxRvj2r3Tqg2AavOee6Nwph{o{584M4>f>aP8ZB
zTXt`9VD;{a5xGtm_XBof5Xc3GU76PVvF-C`r609kA^X2ep+n1U?VUfhvWKRQv&c&B
z)>OzP=*_tX>I+ugZCl?Gmg&yM&E57F&!!e{=vBP^cUpDV84wbBVD%42$`<rDl6!mk
z$mV@cnR1^8dv_qHSYGkVqdT4V|0A^dk7wfiztBbp=_UdIUa<ZzwCU6LcQu^yddl`Y
z_H)spZm@DBtHCCVRr<t5Q%DD{(aGj@nkb;RI^_i=jivLdDjt$b+D;_swUZTDGSKs7
zPtX(;ZkQ^LDfh_Q760*!CN_XcB2d^s;ip@;T@4*<hxX4QP0k;&_d1^|Qn6>>jf#;U
zE+?!U=Xi|XEWN@D2qV6fAZb|xR!@~|vI>PC^iVF|;TfZ<VoFyt_w^Odp{Nk%b%TLZ
z-x4OI(Rzl5=o$@C+-TZ=w@QOLpQ>F@{#g~)l1jnloCw9UU|?iOhmHBiC*0gt5<5}}
z5=^aiMg{l}$e!xXkgpLSiwA}ep#>~evhuO!EyT$V^O@Bkhggr$1gTSfx<u#O+7V2p
z@OD~yIy0myBJB>~MMA>FQuVqTwQ3ettVMGsXTp>$kpMYAd?vd3pm#C+ofbl@0A6wp
z3_|Y(xz1|@0rc-~ZW$YoR_1;ZFw$}QPgt#pR!(gU^}#y;T7`5vEmao>caD3TvmlX@
zK6`)Vhn<$;m)<C^tu@r&GlNli9Zc|okP#{2>KU+TC{iL)3PUf!QNpuES3MiYy&u6v
z${dYuzGx`+$$*Jkw05FkI1KEHffacP`xUa4)Ot17iu)q$M!6G$!?4d+-83;+ChIuF
z40tT&&?0G*>-%B;K*~HN1-k$OFxWd7h<O((P2wJXWVCQ8@>Yb5mjPNoijlN1aUxr=
z`(mq<o*l1-0M*(Og*I3_9D&na_-$0r`>d)G?UDJ5n9wWPo4^#=@@ygom=2?66sr<v
zkc7HhKHW8QC{=i#3E|W2;Z=OZdHQjdSG>|sj>pwQ9Vp^M8Xv9dLo{sPW%pW$;4ej4
z*BrhaziZ$U0XDpzCSN!>W@|tG=A~Hvo#W68I5A!%IuxP~hAo?IJ5{&c9Eo9zgrDs0
zhnc0a0fd;Vg802`oP^=3+1ZI5Cv^el8JcM+SttlwhJS*R)#Uh6KawQ=y|v3aRu7+u
z4(^ILMjPvooQ@WDdaNw0uZLz_^^f2jEY|pefgj7N-Y*C(WgbT*zoK!oIw(CA=9Eo4
z?KaH}{&kthRFQzd#FY|!(VMn0GTu(z2J<?-qgNfXb#jtcP{0yi$vkPlME|Yf8WmFK
z4o81F2n{&z>Ngsli6U&lI<xL5o!TSYh|Uz^v(z72V#iBFn#G)TW0AnXBZOC65*hAw
zDX;ocai?S7cSUfa$}<B1PfWcw_gw66Fd63=SKbsP43-8ECr)IfVDLH~P=at%7&kev
zR(1n-r0CH9{Jyv~c+1We^w_L$?T>el#zho%NX4}+BA|(=pixK<eU6bD8itiBhjpyl
z*zEF)U*x^`7BE4JWG3kLgBV?oGBkF@aTQ;56W^~VJ~KDKQWPH*Kt(Gb#M)pTn$XDc
z47@v7LW>|*n)R94Ayx#ZDnTA!+k~Z&4GDXd{fSBh;=yI|;UF^*Gm>UVJ{=qzJyM}`
zN~S)u;_BZUvFmdjp;oM`5oz;j`l^*n&QQ@w414NOM4bjnUiapn5XZ1@Q1i-Q29X<c
znClyQK5nE$7V)}2a$Sk=RSKLhoQ}UGrsnKNDp1X&>H25h#vgupAFy94OYte~jo?8T
zd*}eKJbNxrUx{sX``M}3nBIp(SddZ{J?$UTw*Z_qW6JjxX!_X2+-~Chqruj(i7jhk
zP|4`0uO8pk<Sfw48WQ_=^`I5?wCFM~_pzvFHH8z8OZUod)AXv?JgNV1o4J(4sEr%f
zU1;R;>#;<J9OLh7BdZ{p;qGlnDqXkt9O^DkvuBr2Pt+gkd>8qCQkto(aELOp&cpZq
z3dFs~?;FmGCq*8L#%wd^OSXhsyMio^iYA#MX#HYv=Zqzq_Hlk%C0ixu$prpgU{FG;
zZlf`PT#7PT!@=!#P-nk>r?>;j7d0B4z24dK<NCdd%j2WN#fizn`x`w=R}mOLxd}%+
zqeeL7rH%&}OoO7V?!P9<FLrb4DZ)!aDsk}xHE&4SswDOGneZwK9iJ^9%lpgLK<9wF
z!AX1|8ay5Ja-k2);35xYxRVv>cBYjN_4#{`R~DZ}5}pd4IC_6GI<7bP1*y#souZ0|
zK6H`h-@FC>N;+f8O2VG6%wt-oiFLuqXpfnQu7^&<^-uq6h3=>S_Hn;^m6`is{4{QJ
z)i?bTBN!XwQ<J>nE0@lYwQilj2=vpNwLZJAt*cV7=8q$qQ3sDbyxWj2yksu@Yf=nQ
zN<DVuN1EKxa&yhB+p14gj1aoE{pdo_wbq3FSKY78-%y}@wwH>+W}TfD9#2j;AB(A_
zLw<QQu3TG&TQ1H1RQsZ=%(6vU7%%&~a6HvyvDr_`KI29G+sTM578&WgDIpG#FWg0|
zzPEWzS<}hVMjiCf3kM;-!w+>-GIhd<`@igfe>5|wO2(N2+s!D3I3IsK+74_#F1X)h
z37#!g09}8dI!@GmpTrekBw#XP=nX7RWH}kQZ_j-JU^Ljpm+`c&TrBg3qBidrPlxtp
zapRtflpMKiFR`T@mA=)S)T@kCp~Ac0ObrUhz)VzzMS`7oq>2hIPFD2{#}3k)9I01M
zDj)ZImQ_joqMa|uULygOgDQdLRySm}A|7PK6@Ot1d#Q_VC(^p#Zx=5Bi1Xj9dgtdi
z*6>dz$Z*7-ZeEj2L?2##>xcDzf~7E^m%ac5cwKGzf<973qn};~aTqCw#u)wxl_AmT
z^(CwP6TRT!sa_QXe~X6srf~K-#1-+|3X(3@u~=(nwd<a<`D(YT9=s!t-uVLfYrkm6
z<Vj*k8vbFR(S$87fl;Sr_V7*6G?K15fbR5XU=+~t#&TG)`<QKImgA)YmXN^{id~ou
zOL*AT*f68Xl6Nq2m_`R8vxT!5FhbL31tZ}V!0$9ImCdtori}LY*-~FupP^Xn)MoSr
zJ+V&hPcU<#J@;T{GHmI!gnL7oD1}Wfe$?5=O2Z!%)NL2LI?qN)S6fCy1p_JFcc}uP
zv{VHRx{VFq78kK_lcm<7z^A^xu3G2chB-gCJhmAPZqX**HU7H(O+XwZXQhlZz-jK*
zqa~e{d!cBkOzmr`@O0TSlqOnGeChGG)8wVl`9zM7?I`p`Coi;zqceDIW(6k9J)Z;|
zPIce-zOjEW7xNkX^OUB!Xb~`-$n<8Tc`gw?sk!GyjY%fW=O$Y@l?g?#dk&wfs;JNb
zoMgqRmU)y5>KN?t-6NkOT@geyN}mCknd`q$qfhfx;9Tc;M)hJa8VKR9)C$DGk${p(
zII&;QxZAJgld;OytF3+yhUh%KxT2OS<BuZ)x;NpU`sG;ME^e%OIrP7)rV=z#UX!pL
zW@SgkH!_tir)E>U?{quN{$lb8Y>it+)9*n5Z8PwDJIx9>sFW8tu8>od-YbdX5?v6!
z%=3NkY$yKSj6is!TOSJ&gl_Bf`^SqoHetMfdd0K|w34Uv4P|?4^m<(Fr61GnTlf+7
z2BrG7->cCPLR1MktXDL}@qvajmBqyoK-Z|NHYu5n(}mzJ<?LHHS%H_<XHS20OfW`|
zt2Vz&I2vX<3Mwe&O|{#PSMue2?+?BgYpH*885mjOK%!+Cxsf>pK|re~>Kc1)GQogq
zG#HHjiaGT^Uia#&=occ)IulDC$w=spu;zEOtDicJMwh{tT3<3P9gv7-Q;wOR-Oh4m
zJPQ<!W8T^D?$DfS?r!?Ds7vx7G<6!Y-o|>4DON>U8Th}2tpqYY1Nq4U7OV#$W+Xgc
zw_nO&{Qzvhh-qZ591UKWJ*6*!sHZ|_e>d0X_J*Jkqt*g_x1eFJlu=bBE@wO9&%4ZP
zJxL_r`;Iu3m)L%iA}iDsz^d!(_Ii^h>!lxBtmBIvgpa}6X+;caio^j5Ji#cHXH{<M
z;AiaoC|cd%^5K?<m^lN6C+>s>yO0-2Q1kZg7Wvf4p3gm}l0mOfV|&qj`~6L}Zp(X|
z&lT-Jab-K8Fd|g_tReprugdGkNHAdPI&7+>J|?nN>*>SGb3+F(Uk>^Ef)I_3ET2ZN
zXZK<<zlqCIGGY&atLixjKY6^Uv8%+@7tp(p!<ejB`f!_`KwGrpb05C*yGwJyTiM{P
z>T5-d>f?us*x0T<qGv9Uyx>jB^d?wt-RE?&E4L1R6neUiW>mo%odultu6<=)p?E2Y
zlz55EG>T02Iyy3|z80k&4M0ZD?#zN@IN#hy4FE8g`k$-23soI-8-COrjM}qrvp)|;
z4)k;STB85@$GN^Xj`voW4+#)aJ0E0p&8yI8<ir+-v*|bQ^~cAs7ksul9I>oZ)z`5C
zL-m;xZNfP^k83d|?^+q{&cesg-r&*Dx^p<+9dTQoYnASpjhChBSA;3xH_?F%7%PYM
zQYwX>^8?Z95|+uwCyeup3tK?jX4or+q=B83j6;u;0wQk1%{j*g$a#1W?_T$2mP~Vo
z$>0{@+EFugs8|{qi5!v4m>lEaw%x~FU3J8NH`Im(Pqf@#1?!`wMRu`q=<H-gXR8FE
z74T0=ZN6W+zBBpVRUvx1ZJ<o1lIcin>_MQ&hjr)&eEKoYrOA>?0w7#{hTjc5G1I7)
z(0iacs!A!7je^GPN<%F_<~?@dRm$OTsiY)Fk$|AsttwGj0`xRsK>n{y5ZBwWc@m%?
zMI-0^Z&C)81;y1`F6(2GMv|3ed){n(+$`RpBZ>Nf=Eoe_r#(5lQwnTfHG;3dc-}h1
zzKGQhQa7$UW)8n61a428eQztMN0jFR%P0M^RW?2P#XinkNi1$r1|mrf@{Sh(Vs(X|
zoQxJ?PD+11dEJTm7jvwQdXpslKXOdib3g3=a?CP2w`Bkz*#2LRIc4CNn5C8al<jf+
z&~fC;u-W&D29h`+Wkw{9{_gE+mDJ3XRpSTkPhL81$o2Aa!NR@uALflFS;UQlQ49uI
zXh1vV-=y%Cru2CdzpyeJz5&s+NiNgP`JQjw9kts$UAHju{1X0vlz&vZmr;7uk#Kf5
za<g>Sq;&l%MFM09hSLfIhPPoFHqB*1CeR)9am7do^e)P>T;cu?#nJMGzQ5x$3`)Dk
zRY@lo^l%NTq7WMeo)%&^%cCFL<mnY~Iu5R*EZ>Ak`N+dv#C#XxkC7ASDXHMGjmy*o
zfF=_>TKZa=RXG5cxjFUCYb$BjT3A-3sy$u^GFTC_02>+jxXvF_$Z@fFGe7#gi0rx)
zEn{?ks0nc2gOqF?orc!67+2)vJ1Phx8ur=&2{4sKHLYCgWOxcX)c7bMpM1ILA?I-F
z#BjY5fZaHA0#ezs9I8z48IZ6Cg(am29U<(-39;m1Ek<fN#hCn!1kZ=IB+5|^Km(yD
z4e?!4lxaU&pS=`XCdCT10Krd}R$rwWyY_t7-UuE`jbm*kdoZAyO~QT<Ucn*qqC)9i
zHH^_7)+4aIi7q%G06rl35#XVtBLx9SwDKumE4)wJ>dw0_ygM${zXI&>t1k$UOqr5M
z2$fw1&vm}wyQafOh>lfgC5WMDKLU^%LM-dLo(_I3ymzi*74>}eMs;zWs1B=0+KV1p
z6x1DC%`F9>A#sU+qOHj@oA+TH1HEEyo@vX+%56ETH+tnJ(F07TjvDcMN82`LMT+)>
z??6E7;N_V%Jg_-j;9;L2C{h@C)ue9fUw7_eU3<oHxCB@VZ*hI!CU<lwvz-Jth}=U3
zi345}tRAjGXl_DmDkNphU|I~pfk=tlhQpM#L7g-7r{=Wo-P;W>wFqe>D^>a7d?1*V
zYmClF2c^FAADQ8^+Ai&Oh2a;9K#)45S3Fb-3PB>I_`vVbQY|rM6{9nxN9EP=s3{A2
zE&x(7v5-8dKp!WSV*DqcY%W<-yW&#*$cQ97!v5Ho?0x9##T)Ota;jlNb~u8ITeBJ;
z)dGjxFUCukZ!Z?%m~a@cR_G!T%B=juYmGo#_3F}ZYh=I7_1mlBKQg($X(r+NCF9cf
z%IX#`EDa$UUVf_sZkkD~c$k|pSrI%Jx)GjSj_<j%gMS<VA+|XbszpTDP^M&+!k@U=
z{l2&l{mp!-0Ctr!eaSud?T!_+Ou<`fu%6V|JC;bEA2rD*E1?Js8s|1uS9CheEL}9a
zhh>dWU4`2lbuPu1mcUQ5SEI6#kXSr}rYQxMvPd<ldB{50nBT~$TA-`h;|xhHE1<x{
zxQ73Y#6&{sBuG)wdms#)s`6N@wAKM4W8E4#mLypVED{tm6^qxcx6cWETlCxfaN158
z0AUC!D@Jd%ojN#1)tl1OFqVW$$Z|-OmXFDuMalif>RG0gNYXY%3i<q*n3tcw2aGDk
z>nO|`jQPy{T*1^EFu0uXP2-Mbzh7eQ<GujptqGe-0q!V&b7&9pi0Yo`ZPiT_SvuHY
zFmPYJQhvX7F!}BcFFP8O6>F|L4v(ZAN+oZKx@lEd#rj(I7rI(oXXm_2=0jEamwZoa
zc=S?G@JW4LPFH~^qANO4^I#v`(%5FQL_y?t%ZT}d6WEho%G<X#DUx`s^-1Ig<8}2{
zVRk!14v`9|B{0M#XujjQ;-e1;vSy@fF;L`{mSUKt1#yuN2_KYB=T=0*(;W~PB_}0P
z&~*^}4J!f5Y?<G*!PCtYE1#$u6Je7soBS(wE?##=NX@_P<l+*kfZ{rP8TC^R(4(06
zsfNpBwWgeqUv#y$Oor_V&e<|oef!N|dXb}zDH0?y0)O7}-Ja39CxRExlpt`wXORD1
z<JocFPto>rS#rMk=_P&vd@gs7!7SxxpG#fT_pc~!s(y;(dWN-WngL);<Dgb&x!yL2
z`&=uS%~e~jEs^)9tmYH>OXLuo53lSfgjA&P8`3x)4@I!H3B?*uj<JkTSn?uk*@EJ)
zP25>+a+k$c-#h!7>R`N4PHV=&_k!)IO(wd27WEwsrmeljXO%Fll}*1*%S3~CV5Xvq
z`@*1nI31A`aXjIXkzLjXai!S3xT0+zH?*21l&=W=9A5$0$!bX?llOx=o#_r3eWH}s
z!?NYbQ4x{wlCKAq$_Nas<#7rmso9skRhGgw8Q4)Iv$K*}D!(eaeR1>Qbbss>3;8?T
zhJVMIP{)uaph9urGIWWz$(?(bSP2Re4^6*HVptxc=<`k__rCrnpfT$XUK(yPRUuYx
zn@!w!${`B84J^7)Qlp|irNs(~wZEdO(L#$9fW&E$kOl*xq&b99y58M;`+OqFqdQuJ
zFL8d1Q&3k1(<0bm4Z}a{d)EUjCA`cER~V!weO&1v3dX&@9p@L?S$<401;3!SPF}@X
zZ~3zvcC#p|*%z@_J5-hf*4}Z|q@-6te-sw|Dk*TJF<xvU7Kff7y<{<p+hPZr<KyG;
zd=YBY`5(P=@<)Ce`OXAWhYxS}l%5hqVxu6Th6Qz7`Fm^{ow%iZ4@3W^WJ=(ZpFX&C
zn)Btd-SyI2S>Z!O#sT9|``?dSQ*V$yE{3vDe5s85?-yoK!K`faJ$mp+(m}`h`b4g3
zOjXfD=P_D{z2l7|217+#q>oct#r5N#vP0Gt{=<W$bU$J4N+)O`ly6PGaBtz;oL+H#
z_BYPG*u{q{4xVQdO2QmOTX(<U8nr&M=!%YNFE#4nDVC7Y<|i2#MM8VsUjm+vBJ-I2
zD2Vv^)Rm^c6VRT<UgX;Bl2dsetaqJ0Pb7_oSF_pvRrld|L3JbfRB!P82vGAfxC3#3
z!J@~~W9Ca;NP#MoYll#^cJ;^8xri#GC*~dh5re0}nz_H-(PKa7J=DES^AxI@T-Msm
zYyV<}t-VdKkU+#&e!5@k+~HRJ=u)P-A**5J%Xz!;?ctxd&ZD`JXs%B9bvh?H;`^y1
zudYL+_eawK<@u+Bvu4IBBXV_{;__D8THSLsn@voV|6V=KwsNiM`xF%BHs`NJ#!whp
zKuku30g}r4wFf7-fdZ2oU!JQzytXuJ(T{HrY<@8KYpZ(^+aAc_N80p(CFrY~5=7k}
zwsRI-Ms4z$+(%k$KH|SR+VAT+Y8SZv5i@(WzjAuyG#YihpS`diECzxfeGHg=d=5lP
zc-;TP)#!z!slk~Q^Xxk&bTq{hQe&AB(8T#VK9D9DxXtN6h6U^~UpCzzl34c*vQXTe
zyesa=fu&&#{cAWlO{khbH+eSI=v*u*u>A4p=Cx4HBhls4rJ(5d2kDf{qp$=5rb;6Z
z2D;oPN?_>ktWaM4R8)oP&)qjO&iCS!gXYIpt#%XgmICNV=3jgun^{&@xi<C|Xge>p
zz8caL19IV0XdxAXQw+-Fv`RsoJ<Rz6r7bFz5BEg_qpeTEf1WYNz(H2caL?ZtVJM&0
zWl9VYZwpZ{cQ-~X=yRaJ>2<laH6)|^s0^4k&-2Uq9Hsl%YoqSp{<MEHiH{CF1|wz7
zQbh2mau~&<!Im_I2L~ddQWoC2sA0Y771IrS&bqDkfA;=Us=+Y(^Uu}^Y@7;%t2D<y
znc^A*o_sMi?Knzx)?fXXg`Gw26cxqxhpt2)>NDp{b<a24lxt@#&X#;H#x62f<R1AS
z;c*Yz*;AO3Y~oU(QJJw{^nkHB-`RQ@WO&}l&#h;OqA~rdL@C~X<&Re@o;*GkbZvlZ
z(zw>}JP_1PAAAA<;POz?_x3*ifwAq5QZdjbLUCV!LPI$>;&ZYxo#i)t@OG0URyGQt
zmO?$Vx7YUXFG*nSfYxHJ-@bPVtdyK92_{9xfTRQhHgOYPx}ARXZm~7psM9;aSdNa(
zOp9!SmU|hx?<<R42aRsEo|P4s+oXx%LupZtVrdyem-P2N3$7pzH1CiEcDRFR%mYY(
zq1pNIu~Gsr8FrnYyY>8zAKt`2Y|%2+uJf`HqvM%|WhPMa(*k~t(?4b1B3=-3p5l4v
zdUw^CHPo)Wj;~@Oj_I&);B{xG8fF9_`!Ce=QIt%i03JE!zfkyZ>k(8qy#l$KSZa=W
z!Z4Bh?YI_2ZiALz+>12v2&15P@kkz0z@9_2sqyOvQXVavNC<%-Yp!wKUa8UZv?edb
zK>_xy9q9o?*TI-Lz$YW;0O9F<+w1?}`8QR^ZFO!(1qE1abds<Nety2l@#ERhyjG_6
z0R5fI^VkE1`W-!LeOY*QO<wh#n_L!)!SRt;8F4IEj8~OL%_jrTlU_D^{4dR3i|6IC
zj`2ce29Lm`iLwe@AgEf~Y=eb+s6^iz34lhEzgnUBW;I7_FsrvZV-VQF%|3Tkr{-a_
z4wh)&&5Gz0%0r=iL0sTlVZ#BbM(UgT=1)(su`ThnOZN7`R(-y`ywQ7rg6VKB<h0`<
z($8;gom5IO?~U%ho(kJDnhc9GgaYCX!z(hl0oE3|b-Go&pS+p;x<!G%e<M-r-xi?`
ztiHADl5`E&3gLG;Sl|n!h}&WJI-^xbriDXFjB$wYe0F|nTg(ciPkhL-e>>eir4lZy
z?R0IX-ms63Pgkch3j+GsV{y8m82G9Ef2ReL-<0V$i23?#6&>>%##hzq-`N#kU;28C
z^ZKLyxO@+;tVEyJ|CIigC|!?-%W9d~>F`+4ix@zt3KaQazchFSg1z`a22YUAR?E`H
z>bHw$2aP2cCHcv|KH>VLV3-%>^7iwvRgv;VrN%sTKuLwGDj5eaNG{e~>qtZZ1<1Qu
zh{u4x#S{Cs{)+@?Q}y$^H$*50|9ecu!-e6ISn>+(Q~TQX-I`D<$oBV5jWP0xJhf9F
z5JY-F9Ky0fVC{w4hDLjOn{v5vwxAHRnpNp9J}^YM7lcp^zm<ixg9wPzv?W#f&V4A)
z6{+XitM*C?S_sQq!Izz)uMf5D9hEUeYzwVIM)mgZ<haag{zBQ&-zd<I?>Wqf<sOfC
z)ap83mz1ILO}D)F$tAw5r+TE7e=WZL>#!`=8q`NC3_j;{n)lwyCJ`&=HA)oVU^Ytr
zR_oFGNHO3(U~BaHg+R^W+=h_?F*22DzIc{?i4U5~>sPgMNd?rv>42$O-0#1;t~wbn
zkpG$uLxUqCdB~*MKQZc<H14KLe1#EQJb2X;>a>aRRB1x4F4VV%k(rJcB2GK}OWJ&4
z>&v3OshD&pvh?aMjj{Tp)n{-f;Whlgkb)Ug`(3u@qGRiq$T&s6>Z=5ZVjjh+?(3|N
zm(r(np-}5S(s?o^mwBI^HHMdPwbzLEYw+`c_PPEetHLzBI{Dx42f7jWuL|6*LURH%
z2f26H1fGlrI_oxiP5V7DGBTr5%9dWc{~H0Vix1^+2O-0&8mo3nxV2?vpVNj%<=SHR
zEhDVXa_klCAc6hPtLrHP`HhQ3nWXzz-g^2%jvPLZx0-&f1UuhV*xHm<vqR7kgvb@D
z%*BF=B#8|IjN<*m)_e5KjQ5DjmRUa<V&Q1K=op+|N#fpmNpu(=lOTYrscA+gUPB{|
zql;uiJI>oo=64D{=)l<2#T}#g<nQsDkH#YZO(>~NS-wj&V<F1`y>e0|CItlwLFvvz
zA(Qm}pys9|T{u(w!H!6q$G_>qpidr&z50|D_iJ)B>}uYd;!x7&egTnk>q}2dIl(Ha
zZ0s)Fwtx3`MO1<JlLFXn+#rIp)v3{pNbU@L#x0*w1-IMjO(T2i&T<0<N~*^JB|p$X
zrHgwWmb4v|0r?L1W2m2>8vbcfbCee!Rw~BVSP(M`Jd`(ISarU2HNGTCe}ozz-hy5-
zriF--@{foJW{O@MJ!>Y0h^iBH(POkCqtUpV{+rPHK!}+UCvNg)83UF#qKv}(h?N*6
zzfsF49xv?+=zh5*h2(tv5uuOdAyKIA2IjQGAp)!R!|Rnd0;lt0gQl(dpCMkz-DC4G
zsgZt;RAsODR|?O_^}+X>m$o^ASd?JMm(M>8v$_`at!-cTGW=WaFs2YLooK?M%=g?m
zi;kAQ%4~Ic%a0urh5^+W6)?IHkWpu$VNP9T(YmG!^1+3Vao6LRKXiD8fABJQx10d|
z+&P00ij#RLc`&R>B3miI87lFV(}Ra5OC_C?Fr~U)&p{>@p11+Fbg@8no*(Z}5UPNN
zP4U9N3kT~m&TF4vE$2Tp4i89<BVIBl5r;N)c5bpFKL`PUL8CGYko+5@VBdbdxg|nf
zSKTqc-00o;3UB@UUM7{Fp+aaR5JXxC4Ssmg3Lr{bWP&8$*9qbS24}u?f%+Hxpg&|&
zy}o}Id(8~=fvGt*O~~YIE~x8`71GoSf6Z=1AQO8@AMhk*1UvODVsaPxvoUCZ<k1gv
zd`VI1*c@w#0MECh6%fvn){L*}LkJ^K{R@Bp0cxroqL4VhhC1YN+X0iTuEv`LiU;6-
zba|0v1@_^LNF)QUQ}%J_VV<N2eI-6*$@02n#^iob$V=P2T=KqX04FFclG-tHx_osA
zS{atQ_AOb8#|8BK-|TOLo;3U{0KwEgl<p?Eh`b-oeAo))i*_>L8~gf>wcYO6I4kn{
ze9LK?3ICJM`wlYaYMlfIhrp1#tOFGLIG3B7H(xq=Ca+VjzD>qtrE}>|1xRRgN@C#6
zCMi@IyRYC<9gOT~?V#%ztT^Aa-}`(h;a1@=u+H*5Ta;S7q2e|HGfG5$|1s!h-s$}d
zIidQ=zb4S=5trD`ZOR#n`|kfi55k}O;r~Yu_K2Dd0su?Y|LDO(f8R7Ct<+<e%J$J_
zNt}0ZFcOU!egSP<hBg^C5taF$IP^;Ya)Y(fzkW~_OCYDA<7%lT*J+`FJBr|D{u8*S
zs&dJ`k%@^}?uVr#nmP;8@03K)PgSj}Wsgha{Rg*^O3k7S7p<i2E4NNeul=0XQ9Xz1
z_HAh&lnsembYm1(Zw%)~enQVjFWGJH-kWXCf4;<Ad5Z&TRy!5a1}s}IuDb(`nYsX2
zGd2j3Tpy58!SQxdm8mPG6^aPe#j4VU@b2*ER>jtJ3%sN%X5u6nBZiPMp%>)9MNx7X
z^Tc2$X-UGH%{SxqxepH`xAhA#HB0o@zf41QNKI3ih`S5%zbj|)n|Kf9e#-YI*r0_g
z*OM_o5XN7TN{V<V&+Q0;&`p!?JwHiE^FhX!FmFaajS4>{y9<7L5r(AruoCx!6`NC?
zsbm&|B^3&|j(oEiMH`RMI{yJ3(9V*`lJGL!;Rb!5A(*}m{1t=#8M|9I*c&tQF&I4P
zec8M)^Lk}A0hQ;!XCPrSbO|cN8_C6XGD-&i3SXrSVxa_zLKpM>i!$6p8M|CzQsL0r
zdtyZ3!Q&ziYmLI`PpOrK=R0}PQ8<79!}>CmJ&Y<1tKNjKIpoPhkbG!!^X>D%8E|Ya
zgt1O@+T-zFX09GGJi5<F-In$rCh`HUH0Q)~eRGlp$2QD`H%PEsOInLYDr$O}lSv9R
zi(Q*A#r&@{Kj*nLevA8FiVCBev#TQ!VuFd1rgRqnz{_KVi_)ec3l>UOPzz&3T}Wh(
zzegtAM>~4DKMPD_V(<wAT}sK{KbPnqVaHz>@b$QOyg6Zk(*7f?l-Hu+>yc@5)cl0I
z7}#?rmVwTYRz^XN8AV&Ti`Cjr9&Ijvf4RT?vafd8iRZqdiS`91PgpM+KpX7#<^-If
zWEpV1Z8c!5#oqJE4H|bdr&te$5{e%JqZzoby|MRE@-NNZFW(~vi(g(hsWCo&o0Ekf
zBq;r?PAKQzr41A)k%$!U$G^$&Tn;?*C=~H0$nT!ygyAiAa9r8#sR>nVHFK(uNYgn6
zD`v$ws7<z&HdJ?Vcy=R%l}YUFH=cY3vJ~acbNPB=)}sa1kz=lrRhdZ5CHX{8pJx4g
zJaXj{Le#`U-dVvVKt+qFee68p%WVgLb%L%Pk(47QeigjMMWoCB6c-0aO58=+CYOog
z6b_J`vepRCFZi7&?|-h2*`IOY_)(N(#%qmF)YA3r17QmB5BiBagZa?{Ik(wj1$2rl
zB$>}KamU$XW-e=-G-Dbe>VK1Y<XjWYb!6SQnB~qJe|!P(uf!0L3`ZojsGuOT*I9-=
z6Srwy*pV7O#dw;zz}i5;^}7+P<JP-rM*G=_+yJIY>UqJKowk+DVI3pd%K@*dcu-je
zgzy&$4?6aIePj^DIEaAj#vnK&5sBoNELGD<Ge`Wi+2r5M#bLMc4$C8hpL?n67l(Wf
z5=3F%m_+CRD5#|B8pl}A{i+PCbZ>2H&Pjn}5ZsITTsTA1{=8^cd%JCu^8?+m<f86u
zSYexLw4xJQM0|nCYrIAQ6~JS2Bd6f}r4*wPsj~FDj0#MT!u*LQcx}?FBFYZ)g2nOY
zoh}yc;{8EqJ`jQ@9~{orwHndsIyY{^m97H+TOCW^q>JEYzha(9RwYVo!FuC1eESl7
z9~1NN+CjAQ<QXTj5&kc+E|$Kz?$%mmZgsk8oy2+mD=-$N34ilh)tf%%FQ57zXt(<7
zJ!6otQbp#w!@-e(2T+|2s|@eYsFt2pJ3b0Z+&()@Huyvv;@51+Xy4wqfr^fcsMjI!
zQ8eQa)DnVD|G9%#DUOVUI_ZgXvdG5YF}!k-T6<}EDlo{Fe_7)_Y$EduU!fdGl4Dn#
z%v%r#-Pr8Wz$7EZRt0%ML20Y@qDX6aKKdyA51;m0BAh=Q71kQIJ+z;FOQWeisW^s?
zeP@$?+R35dyHLVGW?~{*p7_rYrWY{`o5_sB{uxygL^(Km78vZOS1oCxO_$R)xs*fT
z*7r|YevaWQ>-KNQTTQfRhBz54uXVrX;Ub?K`P_CtGzvc~h=@G{t)sI;vEErLkrkp6
zN1yyW01u{uYwKYk(a6Qr=4bYU)U+{j?pw1o?dv3()053sm7q<yD$Mb7+*@D1vfq9)
z%eVLbhle$F*5U+xF3ahbR!ZdGa(}|(s|l8;3aGm}x$pUP>K&V0IJ@U#YU(~9N^ios
zGHNy1f<J7B%uh?oQZQwtWh$q}U-q39m0zsXka^UWN0%UJ9EgXoWYt;{k>AL%8~6{N
zZ8ex1%xdgK5gQ9#H9!kk*D>DSX)w$3^`ziGI)ER|ui{jmsvh}66sMv*%;S(Ztl_sK
zCO(IY8}AASt%q_4G%Vx~Nmw9!rsloupS`O)Zf=gVuGaE#6C?s+ai|OPxb+(a@NmGV
z`!!_Yn5z~y@fbs5i&yDl511Nh$Nc!QF|g;aTv~G7VaxGmK{=&%-1X7Pr2Qm@tx4k;
z8TEay>^nSG?6>uhicx{Q-_GH|4tdMMXtxVqkGPkTN&Rt)$w%M2mTni~7EJ52+u_Nj
zxkK6Y%rwQ=bkLsA(*ga!NF(vnukh`bzg=_zFW*VU&B~rCXbC&>6s^+YkxSf>yo=Yg
z4(CFho<FyO^_p6v1Vz@o${bvxnqO^HE}$I|BeT9gzO#ARSh%Q0<(RDDSGz>X^lWof
z(tkNd9z*4jv|O?nLG}#S*DYMCOk}ix>fF_t&bxc1X<f^2WR`V$mfSRskYK^DeB)FJ
z@ky`XX{#1N<-SZ~vR%}XwsDc7nBT;Vnw##LZ)Gu!Q2sP@C@B<9gcg5@Bh0r3rZ%q~
zI-Qr*RBy-(M5m<Vyby{4yg0naZcnuD#>6s*|6}Ew4T<^ClPI*8l+GES6c3D5-Ps`Y
z-7F|+FvTnZKgX_r%6PH?j1-G1#!pIuSM3YckGnA?5nt7MH93F$B{g-Oj6ETs$l#}z
zqxtjps|=PJh=3;7MMA*=>)YJHk(A1Cx*Dw&o-O&3skJo)Ck$qIkqJELn16h@ET4I#
zM2-b`X>U9NNr#Paq=rZI-tO%4*({Uj6y;p|F<aZQzxTH}x_T~U1i=m2BkcYZ(_{`a
zwEBw4_DHdjWQ4ZNeyb%5(eET+c!)1+w(46)o2C^Z|NV07T`j515a1Q}G(1Du%ImmJ
z5ixfYl^dY*4^^tHtkor7yi-Ae0W}yVS>;e;-ro<cAr^;pks@2*U}tV-S(8JiSTNOs
zuBev%nr6HG68^XPf*X1AE<{3nPuw!3BCPzamh_ji>rJD<>52h%836!Oa>6k^Y%pFl
zChjI369rNz&LyM;L#Wb{(n3zEAkNvn`riJN{5y!1Ql?%;9eMg{m0_L`@try@)Hy{|
zGlmdFz7VL^P?|UY#?|-nE6w@6_3SkA<_+0kDHcdN)Mm}TO6M#86zz@Y&3pt)oOSRT
z88ogadn!;q`Q#yiT%q_{Hw?W1lLr11KF1(5B8#b22|Guj7k($7N!Wr>*4|r$JC-4V
ztc?ktF9_|y5Qt6LW;zE$tVw&wGR>MaGp(&R-32$#d@VinbRDkp({`8VZ*m%Wf;-b`
znGiYZQ4ra0BeE^m@mA$CgfY_WUZ20?S#Q*+n0NhY^c)!$pJt19z(+PM>YaIQOrvb9
zJthe?!ul8Zj`FGB8JFKX@N9R_me}L5UY1XAWH>7C8tfHdT*T~W)=|1!Ijp2)MjB4=
zHSOiK+zXXjJ&Rrky5NM$ChH3&TUD>IF%`~>6ONVuWg*yAw2oO1jb3o|uNSoUkTS7z
zGVkL(mChQg+!?vErw{z>i0!#yOiyHB?@6q@*kI6UY#n;osL(o;@FnoXon+7pP{vo&
zo{~(QmxN7)%z??mWA6Ej6b8{;j6Qlh<)xcG;l8O)Sr8Mhdsmn4oXJ(K!sC;pHWdik
zq`+NlTAS;hvFG?Pv=>ygtJ_+|i;bG=@nz}b_Lik0*HF4|)%KdX2p#`zWFiwcJ|7B0
zRZFhstEZ~ddfay2Pl`1wvO>_?FO+xFHR*u|ECKl}{_F=h9UqQQiyM%C9kHLoWikRA
z88yXUzC>aFGT5<EXVbxeeqCoaZ3s19vp5E=`%lh1@`tu?QqSu5RSx$*=2a_039v6*
zG2k5!w><_8cmE$>Ul|Zb(}X#TED+q?g9LX7?oM!bcTI3x+}&M5a1ZV-3GNmkBtUR?
zyM4dA-}k$xXS#Yyo|3M97RZ|Lzx#DwR+dz1mVs<e?L#_jmUNU~cjxzd%-DZTh<)Bv
zz5^Ha7)XIvqe!T+Xn7eF$9Ni4ScxBS^VQxrsa))j8j4JF=Sa41&$7E(Qs9MBnX>cl
zUXH^^*Yq&V&5jsX1&igHWmYhb3Q^lf(wM5QBo)mJ+jou&<o;(v_ET>;`EKZG$h)qN
zLrEJH&G@FYR4<4jk;ZMmV^cVa4&HsgbyqbOwA|TD8K9@!8!EMgug1~=g>^{c^Si`T
zg>^Ux*Qe!OSfA>&+?t;Zd#oECZdRFCm1HjDRI=VSPWK!r<sx^)?zXEgdS?e4q66G`
zUAM!6pH}mSV{{`jBoZ<j(ewvaw3+#GT1$%0q4fw1vi>{#*>iv7kQhh^s2h6!-VWQp
z`3p)Fr;GsZJH|eLvhcHG+d~j*<ZxW=Bm*X*IeB=0$K~Vzfb=|_ebnQ&$0q0J^|wv7
z$!YHJDa=_;MU!|o%0U^JGdM^`g&8<3x<PTrJ>~a5_pRsiuQ}0qQbY<|u4;J3bg!Mx
zf=6a(4+1Jp9kLb-k!MLbSh<}=@YW7a(i71u^p#qwmPPcH57Z7VyNxHKlZNeIPON*~
zC$nQXj6S(0_41v@^!_vR4o0P%fM3$t8G^4(nVYp=_Qz0Q!m^rFWkGYYX+mRTS(twI
z47@$=<@)%@@}Y4v24lA5lmv`{jY0pr3zeDAQXfw<ohv#CoH2lrWn07XlKJ(c+1lk*
zTtc3o_kOQ4`7>lo-(k8V>(znp!5*f2(#ngBowC+jbWv<vF}+7rWqK)d<><lF;QQky
zY%Ndyr{|weAFr4=_MBk!x^k#?zEcr%vUs(?fA$2I*CTuf>BrQ!6J{OEC*}#G(q@EI
z%5M^Fwzwa48hyVHcdpY92z!}`&47niT3fv{wsA(I=@?7&&badtqjiSG_m0G_lU(@s
zM@*Auj3B=9^550^v2M%^^Vb_xE~a#2CcO3q)ypvADZZ%8-a$oXmdlh+elR6q<w<S{
z=XE~V(R;y-36#>^t9m6R#GK1*Hdr3G8yI)AN|h9({;ZA8D3=U8>!-`Kp9l=u&}6Oj
z07^G-3g@!l>CE@1$xce7uTWvo&m}YgUida@ZiOOBRFY)5EA-=2_(vi`HNEh&SRS91
z#ITBBegUy*GG8tA1)00`SnrxDKJ@$zPV#qRfH2C(F6_E~_Kj%1zweFvGT+y~KVWC0
zZ!3WiSw;V8Yxxs~uPpTE&Hs0T9uvn&jfHAaRbPnXg@Us_Uk>A?k);8l#fhshR-}EQ
zw)*0F?C-Wi^0+0k&sy5ry3&70?1r35;@yH2Xk;Df(j&Z|*4p+qEU=BG{CUV-j7dZ;
zm+ptAb5}TsU6&Zt#l51;%Rk@z?fFF&1D6=tMmYJPIDfqtGjDu$q-)#$^;m4i4AbBr
zLuQ(`aQ($Cjs2_K<G-8Q!&f6s9`HjS2KKifJ43-^ZL%if0p?b}Kc7g>h-;e;P5TTG
z7S3pHyUDCVB}Z4=Iy<;G=FwcHQ0^14I{scwROKn}%MNS%`EJUax6Fd^cZxZmTZGxf
z-xiuQb&!VJ696(bMH!{dAohdQ5*@x7fBl3su=jCyy-xQ^8S4s0J5B`E#yIi2G;VTw
zxbnuY%IIbkdVc^|TWXEFf5c`;KGgg7t(C>Eo6;YsB)rHpV9l;Xc3bMm4%8ueyZK>>
z?$Gskh|EFmpnrZ;n!cA(wI~}Ek-)l?0K%72b$n8&3plxX5(3|Pf*4X$CIR5A=O%Z4
zrE_{E_C*0RY$#x7W7D>>Gt%KZt?*3_x%YJ#m#MdobS58CVPOl;KipPk#D#I~*xj!8
zlX$cl_YZy2+`V|+vtf)GLiG(gOrfotKAv$|XX9Wz6C&L|aGF@Eyyiak1TCL>;ed4V
zZr8tXU$4DXREnxhPTL+|x2km-Z|l0QGQ@A%DV$Mp$gn9<5#d;c$JP!u!|-858@~HX
z+UK!>=}Yzlj03IYTE=@QYdhr7j^7V?a<`^`@Oe5R54;{02kjMqwWbH|%WrYQ6&|ZI
zkg$Vbkws^FZ={aB9#?rmeYnI{39l&1ghe`V_%TvFFNfTo3zc8A43f^kA5(CuzGV&k
z3BpQ^#Hq%A->b`2Z2xKOw0gg~`%D3O-;1snq+S(y__tkdF>Dn|?;VBem)R3-kw-Hj
zqgp9ThNS1m&&#<50>_c$Wkrg`La8EVV0H<~ZAM%T<IV6NF{~B0cj|v%Mo8n8+yB~c
zZDp;!Gv93Pr0LyoThbhQ{>YPhH_Mj*7uHB~`H7cY`l8Co@Odmgi7P6T4+fJf`h_ky
zH?P#lf+LFDq9)Gnf}dP-OE~i$fP7K|Y~0#q%=Ue2xFsd!mx4opA(V2e(<7O)@Hnpr
z&jj-$bD@=svNFuO+hhbT?9lIJ`xAr!MBLQij$4PQTBqywC)R;C)#DQdex|D~65ORx
zf4Eh5$sQ`8vanN6?6)DwV3(xuExG6D%DN{z3kpc{%o=lrDmSgF<Ln!a^4kAR9W6O3
zVJU&V2j^s5oF6s=;{I66!MPgOX|?o3=1mJlI4TQ9)g;`Q96gdb1Rf@o_grHw_$D?}
z3_=F>VPLTW$$;v$F7FMs?;63W@-!d5;7<IoUlzpaY!j+&Cl7x}MH(r`Ppm|41WP_k
z1ETwtrUz_JSJh=362Q=a-}|v_#RYQZsnr5L(b$A%>;_Ngr`yH|UZ@jOx}dt|h>uxl
z7#4g$pYdlASy=~Hf4-%=j-hhkkfuhr@GoM0OTdZPE9je!phklVsQA=Lq<Bw&S`?}n
zpo;Ocwv0D+blbg9M4rEW;&<|BJ0scK!!#a2dPlCZ$F;xszXlIMf7U97soFMFZ_j#f
zs=rG8ZEV{EaRuB}Rc6i*kROH9N3%TN&PBX&r6PZ^(r>i?`ugL{p9Ec_&CMhw&xn<Q
zQ1SlJGl=gJhKm2COdBu$)1#7NuBEyNmP)Xn{Y5tVsOFn1F&p*AEa_qEcV=hs6cem?
z>y8Xa5e7$Xk<IT;P=KV-Evripz2vz?o$tyZ_H<pTmiCpGo7Ott>x)~nPSPK5-R0Kl
zFc8#Zbxk_a?qqLrxGhvULcS<`Bt#{R^$S`+N0THgid!vJK5@t(RJXxvvdn)mFcNif
zF=dv|UA7BG{wiOPgCB*!NFy!=)S>XJr(6o`lI67+uK)aQ*8)qKJAU`<wClD=Mmia5
zaaBtTz=+EKLKPq7@lo!OtY1hdq*7&{!W9LW^BFSD^w_!BhwV#$fU1^T<ry~wzlIej
zZ6?DfOZ?%C6w2L_9@oEHW$zOAn(X!gsOXDf6+#1Bz+=Sp+qJuiPfbiHBs~8`KDWs`
z%KozV)ZlSDA%=P);)v<nx3z`q>gd2E4T?{NR4Qlc;&ekxV(p;zL3EiT*Uzpx>s3lu
z<7I^hV_EyZT1>=dW>r5K7@&$)ESy9Sd-#sdMf6f88BK+Yc2$je5F{e@jS%SY5(7Sa
z_~8conQ48K2kmwc<dEv!aK^w?o9E_$w+n%c8pEty*RP7<2EFas-t)Qm97`m+6;kp;
zlHn;`5H@K2r2`Lg&Sakjhl#z|h-g>DXEX}_y$R1;e}bi&^@XwA-~8CA=^lYcb2(E}
z@Vc+j3By%rTP7*8-3=CgL!SYYtH+|6ban;E>6BB#`yHQJuC@-XB9;kwp3070PbR~w
z199#CRQX?D<Gt$+Pt$Gb$c%-|0*KL^1#lx;yNM$5+&HXq{jf^&Tm<#@$znDps4=*B
zL#jz5iNsU8qAdm$$xLU^fV{lna6Nu^TAlVUla8vxfeTi#6|J*mSWyy)fECd9LFSGJ
z0*W@lxSk`%p9(*OA@}8)xYfQfU0N&O37AW*@h>SKe*Y@Wub|kh^B0Sv<l4&wB~sR-
zyZxw3d*5Rh(WKBGRCunmicv}v$N?C9xgH50<&*#BWDGUC0_im``)ymlu=ZeJ|0Sv^
zi^(zP+0D!Lm@7&$mh4A2>h~=*l{+hnTm0IHv40)Up0oT}XMq3pduYRZv04S#j}G@A
zQoihNz7RdB!FlSVjL~p-2?I=RW+<*fvl2hU8gZbZjN!Rvg|G6@-E8<eq(97M<uSsr
zvO(Lsgmfq$xJQNn$Aflp$+Gp>u;fSZHK`U4oTf%@nZnN)ZD%>jxBF=I9lIJTBQ`yn
zPeruRq>_K9JKs4{s>%_4Lp%isx74s!F_^sf3e<4#MdKJbW`$^Ysx_$bCI3uNbwKyZ
zT$>>{QWj$vA-YX^8Z%VT77@&?5h3w#%FN3Qu5Fq8h)y)vn1^5A%&GhogUorrKnMQ~
ztK{p~zAb~bZYA!349~_%g3_W12~yMEoCY>g4xm`a0-*Dun~A!8t&q<|S2VcV(rLf$
zulv^W+9r8g{2)}p3h0}k6;XHJi9H0vluw2;_hcv|K-|3jf{JDf4L)s*Fyf2M{h?})
zX2woBHO40@Iy0Hzb<w@LbA#jmB!%FEqzH$@z{5pb*|xQF?&S(ikEF`xx}LPUeS8=<
z;#n{&layn&x%}2K%J_nTIhOg}PFAu<Yu@Xp*5<|Y)fHf}$40v(`E?`dAFQX*)3%}O
zqCfit0=V%>Rb|?d#s!s{4OZq1fj(Fzm}9>Td8U#hC{Hi>v$0guUU$Iu)Z4>Yyg0sM
zyZJLV2eP3d4AoHk`N53KB0<VkfXY>r*e?-HEV`s2c7s58RcF@Xyl$87?qnJl=4idq
z&U|+9&UcmvOu@W+_HSjq1yk&VpVv+gZcA+OYx86$`%WoY`0T*+F!Z28lxdB+{*^OJ
zV-+Nhpo-g(g09c2YY22L5?bO0>S-qp*SG4l6T`MzE^|c_V#Nelqvxt{+7$!ZRT%pe
zn{*TX)ndZP9<O|Wm*1Zm9uMk7i<jV^q(_fi?(@3ZjfK#N8I}@&`JsX#)q)O~*qjk8
z`AZT)$7Twmv!SFCFpW;EY}GX{j(&RhU3yah&15WW77&z_G<Hu9>GLicO~Bork3E0_
z^Gj*WU=4>3v4RjuO8jaEKEY8;fFP*fmzBalwBi3CJrAo5ZvX!EdHWl0-pzxex{KpN
zhL;(xiR(KI9$3+7HrE){BS7fN7YkdZ{ex01X|FohxLuf6Ma7Q@C#a8)3LiVZxkY}6
ze0&f@Hzz#T-5HK%fwU+wbaO?yh^iq*1w%u^S%{*H+40Wu173d?;<s`v5hsptO-;n1
zP4C1RT0qqM-%+eC63&gsfQE=B630@Tj<Zqw-+meF6lb%MuV+#5ZmW!Kfdw8vO{82z
z&S6At_onM~Op^BSdCc+#gAmu|VIS9ImQQgO?bWr@u|PYRRfn9wOuDrAT?9L4AB5U3
z*H@#+j3eAW?fwJRT|!9HYt%@eJkmewnSW157)j;9ND=0@!AMJi(g|)KKfXKFx!gwo
zll_LCBlk{O_5zD^^O^)m<tI+VspQFzjMVwjTq3z#X8?s&`T635lJ>u>cMUgU`d<T%
zsaZ`#ykV$d&I}Yz#zlB|&EmdF=@%)1Fo+*R6S}8c;HpE*w7T~5U%4tA%m@pOJpSrb
zB@6a7l#Nw9QrIgQT#0o2$>!c-{(`I6zOk}52F!d}NW%GK53iU_keclWTPOAaf&~@x
zf7glGh#lnM^1O8gAUo$-t#Oi3@@h=MS_a?uw2L)xSe1iaI00t7h^>6{dYEK6kD{cL
zsebGf!m9}<+RG%#{A=u$;Yn0Usz$xN2_$`eJ&fZOka11F45lB6Se|leSb52>krX`;
z8jOpH=>Uo=?binf8xIHn13n<Z<n{T3GnuCH2YtCJ5%>N@I{#W>3GesGUlveQ$Sq_w
zuc)dMkSs=0hpQP(S=gGRpVkax$e-)Pi%jG-vPr)GP+<L>d}BWU8zU-nIq3FMbZuAg
zmn6RlQaM`^W*Q!#(;V=U$_XUuDZcB-$uD0l>xlhp{&g8za>!7&nt|99=k>4a$BXC~
zn~Y{FYJGwH;XC5)C(j^69$WP~sIg8WmoUqS^lkOcUODxKQAv>v!yI0x!$q2vQS^(I
zK{A;2RSuIapp}pf!J>|+1nWwu_}T96obJD~JhzzmNxAo)q9k?s7nZQ}y*yq4TD&+S
z5QE3<v-owSoM%plfP%1HBN*|Xa8OVWS7n7m=EVt{svSN%R*-a%UpnUT9s`4mlMI&D
z6*)(uIPE0Uso2OzaYlrO^UU^dr?#e}4OGR|?>r*#E>}g5HpVv;>cBD16ju`1lV4f@
z^2tEw>BUG{I5(EL8AS6Ykp5+9lq35HQGZWw*m0`99TjM<AzxGHRxJ-4r)r8A;v0Cf
z7?{kgm4FL=zDon#mGh#XG)cVW7#+juEIOW$eAbuo>o(Qs6?abS>YVoc6nJcYogl6-
zlADOs^;2ZeiAi9Gu`j}>swqJHex5B}J6lP}e8Vh%p+>rQ(THpPIHC>AxC9)An<y0A
zaM}m)c2&`H)u3)@<7s9;XLhl|L=FfbxUzsD@O0C{<%Fiki~aBP#O|&QeXdq}xzbrN
z&Mf}@D15&}uKg#?)3Dn^LT!BAtIn7-FHZ_aUOuOFdb7h)p9fLGg%%b&oXr+4v1XO=
zT{#uTSy4ksjM=?joM)s&U~>y0pjD&CJ;6)9Lcj=X<7?e{BHe0UylCOlU+)T{#nv{o
zNb3!iyLdc_pUNkb&(%3CfjD4j+eOQ#v9WnGW%+<j?%3E4L*9ET5r1U^yemK<xWysZ
z=IOxqIZ0U7SCGb+e*=j_`_s+Qy-&9^Rld=~R2epI`+sZY6;=!V{CMimv3zM-R#Ker
zFe!+bmJbK3aByJzigi)xaq=W%byJjNa)J%F_%Q{i$0bkwu{4oNigB=B;eo{zd0K4!
zIV@KUBPI8YK9^{++Y4Ucy)84j>AhbJEZHA+OPsJ^UDuboC(*W1tJp(fyJZbZ9yXHY
z=QF*TOYHZ*xaovaXyxEQplj;}L>&H7Uu9~rO0w6E_QwZ;4CeJso<z52=((1sp8QI7
z6sp&enwYcNZ;py|nhr}RDVk^9UfFzGcv9@(_it>Z5_cdqc$9lwaJe?3bzU!T?L$p?
zmM5dE>|B?UMwBn^tUQp(G&*gvAmB5RDRS2J)##;?u%%gZB{N76xCt=!c<nI**}6vc
z2~>haO|e3B;`;8pbZyOd>WrRd6eynitYS;ugAbk#9Y+{4PmS8|llE^9x4GqXQl%XR
zmeQ9e`A>C7JPtp&4cT7VKFZM*K4gByY-w4F5dkaq{`wl^q|Jo^5LVHmpxX^BvzsdA
z>Rzu4r~kZ@#kaT-f4=|^(K3ae1yXguK?LyJA8W<O%jeo(7KtQ79cf{6e$pIWlO4hf
z$N&CH#P!Jz^hG7xt2-tW2_|%v>Bey@2^Qiu{g<%`JIa+)wA+O`BOzc(yXc08%aJ9$
z#5mS8-v0GL5!DlR1`3Wv5>+|mFyJwhgwGGE^r9Y`#=J2iHE>;QD}*q|h~R?6W>OVW
z#BNKgO69^fecAC?fA_v%CKh+EIAs{OvuOQWj<b}P|1Z>}%I5!OPj1-xeMXZljv!E&
zMC)6gU@3h2tpU&cj+BMV$CXnf5z<r?tg{z4G+Pc^RN4(_x0z$VFwkK?Wl(h_!-bZ4
zW|0XwQq(_my3c~YUQM#yoTscM%2DP8oHIicH8_TFH9ShlGfM<)P-sIz@-(tVDr}z2
z-d-v1dThmM%_3uVy|H=SmD5hpAydq021NkuOjz2AY1f@1T>0Hj<!Xq}K6IzqPg+`d
zq&O%Ku2dJ#9P+YS6@BiakIoLNT2ph%&xk&7DXqTV>&7S}51f}Qyposg4nk~dvUp2r
z`$L)Bf3TUNs7xPp`j2N@qx^P$@?3C=+$o0x3=Iv{)g&@*;i>F7oE;sfbP0|!5#W8K
zb0+0W6d}>KPWJ~A=K0IM6sBg@4<))4TOC%D3Ba?>_Og1a;6;c<Ux<_Ma}=-1QOx<I
z5~9AIDF@}sT1g)Z_YFAHl!DohTm=$UIFmu%^Asg^IuwGBsv8I;K4+ar-P5|Y;N2v-
z9Hu}9(0(Qn_Epxd*W4r<UlUuWv7KpP&uYaFjVB{w(js~3d?ISHm;A0i`o7d*#9^!D
zL}Xp~z5;nv72Cb9kaE5Y{G*e0b&ot&YS@D%ts@QNO;epVbBSDFdP2Hers+F=^N9eK
z88Ivmm?WId6cLSS<^5-Pv0Uju9F?FUBmcgYhVPdMK-*cahp*G!icBjxV&-30r<4fI
zn;!AvGtuk?b~a)P8o|VH#=MXO^P%qUgSy*!PdQM^&qBQ#M*uRad_aS;7`RK(M>!7M
zTsT$L_577QyY7-du3sKo6T%V!$GlLMA|+D?>wSj@KE1xooM@wgNw6v=eW~I;QXJNG
zfB%SWp~>DTojzy*Uo|jf)W?<sGWjW%j~XhG2AX1a_dQ_<Z>LW1Q$B{@+0Ze6gH;jD
z0`|Kj?{ZxJ>q0}%(dU1MTLW`HIr4*Mv}bSO;UVQy>T`7#%3jm?XKlcy38kNczG%ez
zN)Ra2;QvRsoj4D|s|m&^JPJ8?qp~S=&$cR4me^QNSi3zbcU+HeYsKI3n?s=Be(^95
z70RNDf}zb*>~dJNT{q6ZCbq{w`v6v9=1`R*dpd4*<Y{s~sFE(B0*fPNUn1&f&k8=#
z4=pn6<aI|rJ#I7Lw#lO&{&M<M<Wm6YpD^XrRpEJ>%Mxmrpdv+yAc8H-^*9<sILld@
zvuM53B2ndN?-C{hOCmPvhAKTswklwY_~G=+%o>eTOrUUpadZ@O*hyc~^o;jW-wI`?
zrnTcCu<-9_4k_MLF6Oja`oFz26BG)4$@PiKVBjK4MKMDO_9GKh4=5O?kfVxxG+-G`
zqkok`!dPUHSYW4#qoTu#h{b9<?D+%>JPamyFJCY1ef_%fKzZg|XMwTm%n`|tZ~;@^
zH`)jSmY93*61_YkV&Qa}%I7_CeNfi788SRRlem|gBgTk=u!q@q^me6CvPE3#|0Hgk
zoiGqk4ODHqOn6UDKFn7cC7-UE+ZZ)XAJJ_Ly{IxVJQ4s72M69^AT)ya-N^2v<ZoYe
zw^EdCoBTT$WClxNQ%4rY?SOX#=G)!3@(O1@0R0ywx$ybWKZPPNhXHR0wLYUr#jm9L
z#w&^)wlU*PEmWTOC>Ev45pw$d6?dJZuQLDO)aaS8sqmcx4y~&g$E}IIwNoNOj9?b7
zF1zp1TP%WUEiWY{n;qBdp%B>Yzo6l51l`Qt0J6&>0{}TP>_@nRDK{r)2f%(d%$W~K
z@ovf`!&LK>CNMiD82~i9CLm7}xP|L108?^S#a9M<LOQQ{jy3vks|)@mrxg+chzUnf
zY{AW^N+kZI!xoQF0;@JJ^;JFNb*fDoeS|3`iqWds!J<f?^u5Y5*_+b)TOr)zk(gP>
z8RC<$7N1w{wBD0ok!bPdxYi;usD-U^b3KnC^6PyDaJ~?mfsVBEheBi=5h5IL1E013
z=X`m!ud5Qz_ZQ=7Z=JH~-Ox<GPk;V6#k+D#TDrzT?JBz5z$ay6#eEJ^ESWyBDp(sz
z!qpZ^v^OgI$??UNv%KquY4p=1Ou_QgI$?H;^Pf6ZS&E3*EBUQ{N1GWgk!_G8J{!Wq
z&C4*2eLX9sk;gdLCudYTN>1Pf9@AD^yPt$(L8P3Jf?38q<cVPli7xJmHWylo(trr~
z;Ha}P*3a^lJD27^{_<a>Dagr3uKl${{!!E$hAzuqPwrUq*><1h?f04VeDsS+pO_>3
z7no?XB>4N4mdW1C+2qNtUMyce)=wY_E+=qCAJ($j$?B!sDLO&>*}uYmN_T;~!1Ls)
zm2GULAfZw$U&&46p!b&G*xLY2Zl_7h;Jmc8niJ!PS8hFeg6z;Fo|LE%Ed&A-_;MYl
z%a6tnt*mzvn=8b_1(ytg6A>U@Ygl4}(k7S54+|3WQKL^wgj`C9(Xe}kBGH;sr*HrX
zj9j7bPGU0fUyxPS^PfLC0~hfSKKnIm*S4U!%_m{RLX{z-ZOOuSV=SE_Sv^v4gQ3;U
z<-;tMk)4l$eh&ygQ(mQ0);HWZTx8jSx#vkYnIHjh)S<DFukL*O>!!#ZgEN<8S<DU>
zMtqnZHf9(tVJm8Z2D+xEJ2v)~x~to|en#Ni{taY)VN=)KWsF^v^xaIQS*LEOR3qI*
zK)^7rSX}Ew<cEBjZQWuU_KEjY{^<u<1i!KO11dIR#AZi6bS8oSyusd#3HRMBw*Ob5
z`u}MN4uXz?fd5sn8n~5P0RU^w|Epll^Y+7CTpbOZ&dTbvgxA$*=~z~4USeo`U)ZeW
zc%;>@<#JHG5av**v(@A1U|*#vI@96){r&7xQ{7?<%L0QqR!L2?o`EV(@E8_M5Yyde
z)>T*FdwMD)-tmdttemSCzk9!Hj?ej9mR13G6CbC&(F$j6z)U525b1gHk&J{`Vl}id
zHl==?G%y{a4PA@pkI43_(>?deN^UTrBaq$4+2ZD4aUM@vK)p?X$WIhI4I>CH3;}SC
z_rDN}QbUi>dS%em@lY6r)@w88-MwlR^oX0xf(wzz(lAn56A0+S_~QCfKt$*izkNtX
z^Z}8<LMU_)<i<c1BZkltXo%yS5a>!u;sbo>eTW6Pd;l}`HfzgxVCCEJ<DGwe9h@UT
z^i467(=T&;);YwR7NT6SG#>`LN2e3{)VjMX)Y0MQF5gU1Hv=wI6<1x&oK8vn4)P-v
z)o9KqTR|K#bSOJB3>Zbw*NAZ?hQ7);%RsnN7R!lZ8)Z??M-Cw*z_Ouh_W(YQ82SM6
ze-C5|`YuE<Jy>DnRq82-9GJ}1QOWI(1irdSq}Z{)ND)Iu)IW85ESR<oP4{JHTi&hn
zSiL5x&Uj7F$*)unU#B^AP-Fw_J$@D&RP6ZM?SNV3jTby-H)!nAdY@akR!_kgx>VP^
zo#-TM&=&-Vgr@yPQiN`FRmRrqru3q?PY4eXXCIs6?iH|b+=eTefj;AFFA!qQT(G56
zqbFO6G89vC0V%#rN{RaS3QX=+{RI&g*$>pCiIw9OA_;MM-<A_c{wsL={gxOb8Eu@U
zCj7{?D1IAp3bJ{exW7yaVaCz~3cl$nh`Neihge=M{eppL#;oG60bKq&3-&UkRszqw
z5aAj<g>A}bZZkc65%-@00vZad(A~>6;%xWRz(f{A839!`hej^L5$?0*-JKp)h8;(d
z!OmPq7k@PG83?6${C&nPqu`;1la`QMtv8l$13P1(==$)__WkbQYVOJ(_Atq&k~Y7;
zQqYOgP&S~B{vqQJJA@9@YuF=w#Kh3V%}B_u(L=l@fY4%>rX~nVU<tuc6zeHy_4{2l
z!pCiCe}HmNsSIsK9Kp1>;I5n;3#w>ltHb8w$HM`8pW&gS@V`m2nZ5yd;jwi+E{Dew
zBP+SD_@aXv_Tx@ovyBgNmJDw2O`zjp+t29C^?3^y6FahCa=8f^b~YGA2{D4XL14uL
zm;`v(>$L!T(d+co%Qypp+qplU)pC!|nvcV&RpEPXOj@ITu9eLw7*6^;fiKMg2&Cs=
zHq)tdQ#_eoCPFDVGW2auGL-nzJ}=B6#(td-l=)Tq^{1p6=56v9$EtyF=Gk_nu(9?T
zlg5EL1t5eHkYXi)Yl#UvYM-_kpX#^+;@2dkK=|KD8ya716MYa<7^RJ-3ZFEN2q0{j
zhL6Wx?wSGcBy3=|gU8vBSe(F+AO!%r-P5B*c|(_Sa$fIQ=FnN&9o4HCXofA#<HHl*
zW<vsg$in)aLN_4c0h8$nwb17F-!z679sxe=m}(6jtOrmIzUuyo$JMiAy<MSh>OjO@
z3F?yz7+LfS*7|TC<KD_$d(E%1MAVlWjY+3~Cj$37_B=q@2^i|G=?oXXfA*g)>yFpb
zVDE_SL+*<IIvyDpAI0j`EhZ;R9(#IFEgVBE#;4wlhwqJ0NE}gTtgWt(JQ@S!sR!I1
zCSE5$zen8`0xtnN3Wbx3jdG9{m?lm6EHg@v6YpR-4)l07nhVf`AdWZ+%^oH|`fiU}
zlpssj#z`lAOD9xbHlauVmY^^7NIKSH{r+P}nf3hLTFi3hzlfjvHBaByKaULKezgPO
zXk`pB^?^rT>{sgduM&xMCk~{q`Rm<v^Lu1^CS}LiH1`%%WTSm@zjpNyKO`9YJcVmI
zjcldNh|rrej!J`Dn<i+sA3<C$H_k}j-oKtvS=(n<{;q!gWHIu?p^e;U{0WZ9bT2S-
zpfb>BbL~z8>0skS)HLmRJNd5B`JM&8$IuUfr6w<2-Ua-wHnR!1;I4$AhRSAo3Z=fu
zs4v&0ub(LK(h_{a5!E+R@N`H3WzK)><M%Qz!R}R>$ZPmgpQXtZ&_3bdiL_ti6BBjE
z;>yGFeO~%K%ftEbnKl*e8aEEE+5;}Itd4pl<);iTyJ^<b510_R`do;}k1vnPt8Kl;
zfrxn^9Akk?M7Mup;7=+wG@^Va6NW7&FI}7YItJ{ANPzLJbh?_+$=c64o}Amu&p9fD
zq8G<W^Zh$ckSnN&Qo&W0`nf*L{qPjv_}Bxb;sWB=?`zp(ihX4)>bLy;ikAu1j&h2^
z)XF8+?Nb4#Al(OQPmVtv(Dqaj{hV#XAMJj)Q%_C*{gu?GZ8_e%Ck;9Mtk_fciXWFh
zm19jDbOyqiCj5+8@~pp1MXF@wU{O4uKCORe=ZTQZb2k&L!QV~!_v-Zsv_W+lw`H+*
zH0zfuie8ADmLQ0vRy%_pSobk9vw($#`12P}gp&D#n1RQ0&U+!M?A6qQ!28CBqreLC
z*B)#gSo&<CLjx)waGwjbU(*j4MC*g0%h{(~Doc}&x8z49MrfzJhrP0byw=m6#k4B*
zO8Brm(H<C_Nixk(vFpJODwJkl|L~P9u=>5l{UTRvcN&tljky!QK0AUu@TNBf+)szu
z^H$)cD8Ze83wNSbkt5kfAZr6Z#0J=2h5r*;kHGDf5qQ&wJDP3p^qmq*WFqUsh%Nu%
zFW4%o!~ep79~#KxJcxXXCHD#HWdr}7-&Brwm%%ePgG+Vft<Sf2jkc8>Dsa2FkZ9|K
z4&>Og3cTb+wyj)nfCDBsD6%S*N>-ErCU}VMRGe}sdPDNq$9x9Fx?t4(McdQS<}tws
zwmg*Hj?f=Hh*g`}66iB|#f_{z=f?oCF(W6*!j;+%G%045!q0P=Ac9mzT8#uClYlUA
zPKK=o`^;d{m5uG_d(@M)xhywkr9lkfYR5j}LeA)yiVo-`Lv^^KZ3M$@-or3rg<<4x
z8QEg=iYKSD$5@k&mixL)&D9toOwy(ji9+erNA$~+N6qdrC!ocO;@i0(C~hF2zcO~O
zGokHbAW#<Q8$1X>Gtv^MSxSLnSPgDu<Z1U?&{VwtR(YS@Lm4V6NG3x?7v#mXlvCSv
zhEcB+{Kg`?;Nf5&(5SVK>IXxkUDsx|5C)JTt}um`A`~alyIp-wl6@b1uCRsQ0{aXx
z`Lj7}`O{d7nU?-OfQC*xmM@Hw3<2XtprteegOV;u)F^<AD(QF?KNX2lc1}p{U|~tC
z+D5xZhNg!|ba@~@5Ja$JZJ=~U0psT8mT0U3%%cnk&kBq6@nF2MC~>`^e?LU{%OJjm
zVzT2daj7WKV+Kh-dxrq`9t#Nv56|i*q!*nZc&*_&k3p!lRnfv%fe#=Alvv0gFt81`
z)diJUqolvmlW0WRd=c%<`UYqa4vD<^%MGqq4&Mi{f>pSDuj7WEB}B|DvBePyN<s5%
zrUc+f#P^7jFya`Ih{=SBhL%EziSeP-G&=Hp@u8_`4(s5n9)&<eN;Vr6O6Zywt;66D
za{6L)iA2g-jC)j@30N<llRZ%%g}%u=cLpJ*+YU4;>LejnN5cP%?PEjH#<nFH4f?|;
zTQ;8;sAh{OQCMG(5pLRsNB46Deq?$Q#{TtXOD{W(8$pm8!kSLTA?UbL1(5u+%w-b;
zsAlQS8VJlT2$&dmWJYpJ$=S|XK%c7=j>y$&h8?>)uNWw!^`(VC+Y0%^h)AWjR7okK
zOhgjz4;7-TM~KO=<GajUhoh@2IF48IbTrr>pWt4zv`@|uP8FX;efJSrXKvo9)sM1=
z83nxkvTcl#EdFewByyz-b3(D*QJLIf95i5Dw3M>$X7=!}0eo>qM)TwVcV&-p&Ckh=
zRWHW2=?S;VYvLSVh9$tc_Mr^RY@qhH1WG&_<vE5G8AE2c#7tSA9~`U<h_8uvD=0E?
zY+TIA2(36h;NN$mkv}a#XW>GDeK-0GlR|rhUOA97#b=U+i>}yndw1SCdk>j|SLjLT
zky3VZY0jV2QLZSW1=Q#J9TUF?qud7B5_2+Qy1EPyix3vT82WvgMuu8%=!@cy(MMo5
z@7uAX%!72{{2sDCEH>tbxW9AZ>pYGgy7`Q;tmK5eLFSjpmu0kAAMqu>E@g_=MbCOg
zN%XyGr7dicjA+AXJFk8CE^=c#J{1F)5f%)2Wg!J}z>yjGtUtbWRE#o~ZVCUEq<Z`S
znb)+Rg@c88tD#QMRTa2;Agye^2H&9+VimVp{&j=U9^dImQ^TERFjXDyIeX1>qmps@
ztIk>@He$shYb>kHz@gJt^JGrx8R)fsYED;lJ)vc(B@n{i_VwWpM^Z*Qe>OcL%2-&U
z;tC^T$r1?&<r<m<SmuzFvhyhheAo&!HP<krH>(-{FQ}1>-a58QD|mlyo_vwAi%j&k
zD=pYtULC5V&Ue9p;RKUdr<Xv><q%PFRr&KMy%Mic#DE<FMb;uP<!*Heq%be>C2h6`
zCucoJ(j+47e{YM;X~um)P>d8qo7%+rciB!}`&qp?G2g{<l8znse6;4T9GmgeaqvxD
z+iXvPVxEXF8Fy?u*5wn>SoSV_#CZqq;-3^UUBFGy+@rNd%mJFV4<Kb}jz*Q-3o=Cv
za`N|h?a<?0yUB^cQ@qc`xRwEADwm4KiS)$yzIT)awA)cWi6>ZivYXF_GWK)zYO7}w
zDOoik;z@~BOYv=^Zm+j0PAEt{7-9HBF_Mzjm2iqsZK;LjS362yjzUzEk>KL#!Nfqg
zKTvbU1sjZ?QmRQ(axw)z&b_@3!)6UjM1B0dd_Q)9DPV|-Hido$;ersx&`#29dv<WO
zk2oXpS&xun@0Tw%<n-|+kt<f@n#Gf(_Q;$`-MdOR>GHLFh%e0y*(;ALEe|=tL`W8I
zZJ}W*(T!BMvtq8(X13@f=xcS(%FKxVO$k_+FJZk$bB-$ZGG~eH#`;KN#x?BV5Wl*D
z^}XSPlezVKuGRIR2*jh4)En=`oGi4+oik269MV**%QGNeyM{)Vq?0*5rRA@QvB)(T
zJG@z+V9Ck<UN`4}Yl)=894{$%B2*n9;Z!lEenRGyCQQ0E1WGFwl5T_`Kk;&(E1KBy
zDYw-to8jPLOgHx6;#cv`23P&2{&tf4;{Yt}S0%6|j-O16)e-qn^TO1)x`Q5q4;#Zp
zs@@eWf?a0wutyLh@<A?<cFbb^CgK+(1|*wvtryBL`3yZzN&a{~-S_c35)```zymkf
zUk<&|Y6vf8Xk{ynX{(sZ3krUvkYf@s5|v>E)tb`_F_J>(iLTg+Yt9r%ilL3?qv(3B
zAIN{L|Dnn_h#A>Mw)M}7ng+YH7%8n%_tvr0^eReiS93w2V{vdfKiym3sCRgNPmI8j
z%*;lZl2Z+V(Z#2N22E+OWO<wePghp2My-7wtEH@=X|Vl+<XsJzJOql?JE}$^E6Qk%
ziFX!xAit|y*FjW{j01Qfa@9-@m%T^7zoov~^$U@bi3I#`7ex{j)d^r&OMYgNl{Vr1
z)E`g2-TG6*t@-&OW3_d1GrWj=>UC|$p-7B&R*TBlowX)fgngFCr8sL;-8lbwIB;R6
zC$v2qI*`ni)o*y=K{lq8W+4cadYM}%%yTWaS8=0(Z&Te+KPfuqET0YKgTY9jCy2jT
z#L*HKCEG|{?+#MH{(S@})ryakM8FqD8o^oA3mzyp#LT@7AX8kuvcyY|vIzkF_fEA$
zgyNU!V;axX4Ht)ln$y@iHk*-?6xx*SpM-pYK;4)h>uT4_*xHZ954|u}5g_Pjaa0Uw
zLWP-zo}`g8T7C1)A{ZS&oR@shimqkEQta)`_NT!}o7;L^*6DeBe)Q$+mvb9EvHE@j
zISJ-SYh)W-pAGLi8tjChl#=dX-E(vXE|~4*7D<G%n7n)m69;VzbNFwZHwF-D*&jP<
zO0!dsg_QXbDRZ`*ah;%vn_I~5xfyxdQ|j92e*#5dp-i3pz5m*q)eJ7RIZ9_#^={Hn
z_(Z0DhPdxKEQN*2CC-ji>^Gk^eNU)_sZ=qW8D?UH0PZR&DXDqgqpopdl+W<6ry^e(
zX*TQt;i}8@DY}_oYi0E-Z_m&rb)>dIqs{Y0vJ@#K6w16Nx$N=*A6%O#$XV^zpK{7b
z-$DfZKY%<h29OFYM^Gs`*gDk{51J2?I~oEe5JPXtFOmh6`9&M=zX#lRn)FyU3fa{Z
zpo;)18w@v$TAH?lfmJ_=Sj@0SAu8+5$Y1aVWTtiaF1SRf!sY-5M#>ULp%Qh!pea}C
zY<0sWm+lnBr3X^M?6HrtXPMkIKaFcxDhftIkpP5_V~+yLiA!olderTc{uC$Rx5gqr
z3<U1?kL<<{@4UC1Ykww5N$Mp0K%YsC-ajy+N^&os7r&vFC2h09czp^3qd)u@_Qdgh
zg~jKGZM(mf`;++)QRxl`L`3$g8>$7KoubDV_@0TZe0u7!*_vL4_^WbP{XRIHd%TeR
z!h^X~wXj1K{LMdVU#tsln>K?vQ;k0A4e0x^eeOUDzlU5UPjtHV#5(6V9v2W3^&X4v
zf%LPnM%uy)?s)E3PzNT&d7NugEW^i8giQl%5_4U514G^f`tr%se(YP`WjCV()Wlx#
z8rC$`4?9)X8qVn%>S=$_$wj0{%yGRAmSEB4vMtU4iJJqQP6g-gfU$Os1iNG6b=u)v
z2VI8%B*m7dlOyXwHY&R9S3{e_!_P&Uo0R@99|&?Zj}92oygD*YA_jm`R-z2_;;>40
z`qDVKK*vCVDZPWDz$CTDGCR)=FE%4sVQ^5@&qF+YaX-Ai!OGohc$lfG>g&^wsA16Z
zlU5jlBE1OlHQDp!N-J)`?q1kYEv-@uj)SKW?75bjKx5yEvR{immz~MG`jrYt({!b_
zKsNOAG=p12g0q~TQM*7BI$RBig+DcqRAfic-<)zaE`^+F+$jl3*RyA@ABk;zZrqzr
z*MwIy+Wbo@t82B0`~*QkziK><5l24eH=k$@I;rR)fkuk!%b4y$j6|M+?UKCx?i9GO
zFGMxOB7N!FuQ4ak*521sQ)m%D!GWa#uh({V_#K*ktw<aJF5qK0BMHBu%QuV-;|MsT
zW_z(irYn|;B0a(dJ6oYVOTckcvTl}1!=Ihg;6J&((shV??63jQ-CShxfa3xW53kT%
z1X|WLw8XX27FiRMM`68Wn)6ZkZgW}_h)<;kgSa6TSEHjy_YHQW(Xt#D?cCoOA5-`2
zzRY}OdMcouW=h(a4JNhU8cxSI9=YW{EBxy1tNh_UeB95c7xrlgb{DlOIbIO6&%Cnv
z7y*k-=))JNLm8Pp0%1Y~^`&nk+shNBUpEIeq<Nk+rc|`_<Q~0Ow^?5c-Qzwpxk6?w
zdYEjT>1jrq8)xfJ+|~7us)}BV#$88qu6-lwO9P$@gvT)`|HT+J5s!HuRovyPV4OsD
zBNwVP;}s-PWUCsg-I)Xu`*`=~E`No85OP}RXEJSVrv9}SeqF0o;&J*c+1i8d@T-a2
zZM$i0ZRUiU$NYB*Cr}H<Xj>+rt*-r0@m9Tl0&YaWP#Wpw1;_)yZ1Zsu<iN4U<M5Og
z;V1sMh1$ITmTO47IU3)(B{qM!Tz~MO`M<y3)rxkaq~s*{46ywzG_7E5n@!x($XF5*
z8{oq%T-LB(B{m}w@}K2fzSBa?1x@IEvBH^<$IqbO>3~Y8ap$6roBq{KO<na!DZZBJ
z&&rI3lV;x8##_T<pFrxhR&MHFOW=Cmp9kMU)CFx<5Gt*h^%<EJQMNUTM6G?k|BM62
zS~VGfw<#9+pF{hh9!pK{<RVXNOI?!yf8V=C7_r~b%Wl24D?9e$_fD+Y+T@$l6U;4I
zL0`TJPN~)mY7?|BrSfe2_4tk*px%ipnzDXkHCD2yUKZ{%m;f~^71_z*3Y}Vb;Nr_f
zfc#HD4#;e>P_8V*wat!H`0@!#L3@7lC$IVMExxp~Uqt8b<i%<wwxOae5AK2Q(_)Sg
zTXh5`1R-hx2WN4UOP<|K&tq7%OUGxL$BDh*V>u<;m$N9BqDLZFzXja8{B1ktSSYZv
z?9Fwf!0aj2i%_mE(byUImZl)|qDfiK35Z%iZ@3iIlzVvteL;hGgmF+g)+Dhz@emNe
z*3Ta}qbJIX)X|c9Yb`b_=yjtFy+eh-DS6pW4S%fM@fCBo{e_+UfC30;+9rk*>{|H-
zu>%-_b%CWsRMoAHe`5b*x#vi0qPaVEfH6sQ^Peh#&jvd?3ERJ%fYG~bgdardNaM!f
zdP6Bcw~qom7+{zGObh&s`I6oWrAbaG-yihv84p@bjZ!Q2fLDH!_1^nL-*Yhnw+S5*
zwp*LODCA(%Y!d~);iDA>9fQsK;LOx(xW+kvU<YQANRXD9vTQMxDR6PR(E8Vf7nVte
zJuF6bF3DdKK9Z1lK9s?D5i|+m&s=UYBq*G>7fSwNww5RP0h*TXj393?Fm1eh8yacg
z56||?q58~)XZg{b&A+v@+L`g`5jkknVtb}1*IoxN){8_-5X?yykrg=@JIb-?JQFL8
zeyXrhuVUCy{5x4HWh!kV@Wx)@^MM<>XgkQDss0|Z&(%Lk0&;KbuKUYOvmbjff_9vZ
z!V&3Ug<Ro{28&`If&m`Gz(|LuHtUa+q@cn~{AY|X8!0`Z9pJV&JNkTP81%EoGiI2^
zU3pSR<yr|*_h|G=a$<E6mW@IgT{1fjpG`!^aP6F$-eA>acaN~4KO_}u^sjP&Mjz^o
z!^_>ktOlDMOB0QU`hlgzwCEqB0KxG%zx6KL;bibw>&wdTX1bCun_7egOq^AhppLH{
zB|YI{y!RLk(~~2qM12bpr9^;W#h2pDW}Mxtv$rL+UGDv{q`InDR;ndyjgh;Q?75B{
zv9|d?Y!|irBe<zVkQ=c-NWj94a(B@%=4EvyBQZ<^Av}_G+K+oJLH<Za#<V-G7b@@V
zeoMI5oCr#K>p{F_ACNq2ETt61(byeq`nCdDZnOA7-D$pqy|eK!S<TZl9EYM${{~K%
zl7wKfhh9yH#wl;#eS$XooV0JPzT*dO02~oGyh4WYhYmfJN3d9LG(T6(I}m|H-`1N2
z3+f<>|0+COqp2}*<$<6YHL=QBM1Uaw;J#h_+HDwYS>7tw8|rbHYxx1s#8y4Vmv*74
zV%X#NHBk^(bnc`@j;OY#LB$GCKNBhf`Y<bZI+0+{-ckF@Sz5AH{orrumaz0|oT&bE
zbs9gsi^|ydC2aj9`)`{^!3R!=jsEj}p%%?4O%2B7@$mAqg62)$%O5^{&2V0-B#`Eg
zqjDwG?qa({<T%O`{N@D+a&dd#!M!?7R^!%{FU?}BHL_NrcMeACL@lPJ6|rD0k?%Cb
zuPW;N*7D6o6#`uDwcjxBTQ$F-2CCGUzsY`6Pks-lcEKF9$+w_zn)BedCP$19<MNHp
zs#FS(Ky)SJ4Qok<RHIZ+nzsI=t4<F#^OHKW7)@Yiw}TKUqeIn1!%7Mr;!@JM@<InM
zV{pITe)EH2@EUA(uN7iaz$U@ZF|oXkTPc4;Za!1<;wVEf(7YCEhXN5ZiPgYb$Gv}A
z-2G{+QbVQgFrwFM&cQh+;8|p8NX^rG&EdiAWOJb}fw4N{@QMyed$FZXi*Dno`Z@%Z
zvJi-j)!odK)t7XXm<HKlcK7e08MpL#%-J?M{|f)lurssvgqA`tK3FeRO0*?5@%w>}
zDrRlFt41833o_9*Ua$9bbe&X8BM=?pLf61--D2Yra4;_R2{U$1y69@{S^-bUmCp3I
z6YFj2N7TIe<LYa5$CBDF7n|!}(RpIilI(Oq64eYF%uqqgw-?v(P}OZ32wyM3&pM$k
zq|@S-Vu#ypDLx$Rk^ZTGRFofW&e74v*=}I!hIr<AL>~$lEFHWbaF2C5@f>qn`<%9%
z8-GXEpW*$b)ug$(gYl|HFYCx&_*P1R7(+>^2=XcKsQx`&DRrH8%RD(rWrjvO4`GX)
zGPW5v`Ou%-&jdQ?lUq+bz{%Ah`ow^mCEwoMTeu>~^^vHLh?fXi2(D$HaEnvP+TD5S
z9((4v6om#X`qxPnmV8AXGyj{OWT1_1@2L<FqG`t_8#@a=$NcZ_zCfM&*9g%V4xxzt
zS{637%XgwAEU*-%Rl$utz2w*4GvnOvk6a<$e8ug*GfWn&eFR}^_rB1x10M#=0Te+s
zO)c#zJ()MtU2vZd?KU<P3Gs(NJC#;};pvfmfMjfjo!g)qs)5?NJv9*LgI;fdF$QJT
z&(OOx1nU~FJc3q>FKidmyylEQ;7U|dBh5@c;eC1W{Mv&6ps3eSmg7V}7hu+J$*ZZo
z)BeoAAQ*`g{SnfUo$O<I^ZY9u?gK9Xfnw%CQkn$1D4Sl`Nw|QYlWlfJpvVv>z!t`s
zuqCu0UsVJwYT^h8)wh+LeqbXz`;B3pI2O1(nOXENn$g7cKZis!#s$}E*Bp4nHF?7j
z_zqh6^?Z{pAW!DmJd|0iC|cBI6mX|vKGy`JyIv=PQ9%v|hf()*yIPb5QWMjB_*@s{
zqRboklDvMgpa?6@z^t~4t=QOgd-&}~=T9eU*z<SLq`mq-qrL!&n83zqG5sklSPF_n
za9^J~Hw|i_TFoG_Bn3(zmv@^Ts#ux*-T}U^{|4v-xtl<Gb~7MZ10pf{OkojbhiQ}~
zaJW54J<F#i;7Qf|8Gr7?5pumxMKFt4y<s5f_W3to1r>nW1Bb>A#RStbD4(z)wnHnl
zLF7Uz4Ffk^c2Y4x8-_F6?_!M+y4$P+*~VOo!{8(F@V*4}p>%e`diWC0Ig+}l$?+X<
zS#ZFQe!BZX5(y_c6dEaMqLa5ClhZ&D>xE(^h-T{7lxFypUc*n!2Ai(M(hPcTJ4&!F
z*F|~n#rRWn67H0Xxk{}Wk=3+)S%3y}LXyOaDt={?_!DOcDZ*TmiB+E~MOOb@5C#ke
z%mABMaK~#WzON=xs-v%1I1x8^n?OGcrYQnEt8{1FeGR+F(KS5ohX+Bl$Y$$m6Uclg
zWTQDRvoHa})>0nX$x7h0Ji&=yx%8V`5^-pO5p%a{sqg`j2JCVlzncT;+eqZyc&qsq
zG_yl9(O=##3%!=mSU~Ab)eJ~WON497o?GGlmp0hC_@dhUP6PwIQwfE2{oQ$v+%Gb^
z3~V8rTDVUVsIkPs9Ytm9vU2_RyEJp|AlOh2Sc-bqZ<U=1%5Rk)YMwgfQ3I%S;J$)k
zi}2OKM0KiGKyu*%KyrSw+Pqe0t>Z#50yKf(kS)O!3q3GQ-i1xCgkcx{5uu191OSpF
z01`Ju7cBx|%%f`#Yr(U_|HXx}H5{TPII;1hS*Y6g7KPTQ5$gUJ`+g6@qLeOAhfFn)
z|2HiQv;fT#ApGO*{eyK++iMO6aRjTyQj^?JAiR@j1#^m=SqsACSFltVpIT28iiWp)
zj`R|NXZq|3RG>-9dpiK_99!fMJQ7y1XfwFbe#=G4L}eWo<31tbcRsNV^_#DFDPgRb
z=sz;iMCb&q{N{I}YY93NTohX`p5~e1-}GSlIYkj9_bhdw!-g>~&jg5me<DxZ{a2$u
zGTP7=5Gl7Dzwe|*qCW}Z<V*YU7^ZD1t|V2MaODh)`j9{)*~wSEtjQ<0rU%@4Q5o;y
zswGLJnZVR||EH-dkB74D{`VNh&I}&LK1$X+CRwr%CQF3!C`&X$r6Ez4k#!6*h?x)(
zAxp@f<#}kazLpfy$WHNOS0cN-m*4N7_s{#j&gb0s`J8iouXBCRx$i3mmDoaaz~*0I
zkf_CPW1P^|YP|A~7R%I9ty)&+DHB6{x+AdUS3QqZ3-7Q2=;^hLo7bIWYrgTaxpcGa
z0EvnAlWp8|BPu=|WpXW#lEaY1Ok~=K<60*&x5Cpf<kA5VT0SFPFF&YRFoPQ<Rjq6k
z$3&(kTs=Q%lPXS$Ugw9)k*&G@<`+~I<5)Tfp`y*MkFKTH^O8c+b2`d+G3E+3Jwa8s
z{*{w^wRmBD<vx+z(A`QgQj;ukYP(GX&g1+S0YQun8`aDcKcW&UcP^)hc*k-IoH<u_
ze*!tZICLrVH;My9kvsx2B8PmuJxpLNVs9o~Eeg}f00T7HwFhH65bN$`W?8VIU?Pjf
zgocMS4+c$Y&b|jVvLi7pMCfg{^IJgznVcX~5^(?<P6kz0q7BV~4r8U^&^Y<8L=kbX
zB(s!?@A<-}=0E4`y@mzdCg2<bAU`kK$Z_cvJbWK^I>*Paq}<m;NC8ebrjG!6-64$=
z%Ho_sEipw7=nZ9&(QaXuUtG;)S7B5<fd|SC8Qwb7psclj^;(?tKWp1nayWUf4Pt#J
z(0|)s3RlIE3gb{b?2Ea92>sf3`zt&DlZR+cp=(Mu+xy5NcPR3hEyC9R_qZ42x@ac&
zM6AIX9>|=UL~Cn{e4~pd5<4ZMTHE-})>a`)6MiO#vvCNu?2xvRt~~v(-eg&{GhOyd
zy&&`e_{ye^1*;i^1aw|xAwGESPg(LZuBMPJTorZWfD5U>;sFU6X*~BmO>q^eBG8n4
z{)(YrzO5vAyTd(aIF=rbE5JxUq=wGI7)en_yV)_Phm%Z1Q#r3%_Ga;2k(L@3@;ly}
zEM$$+id(~aU|)LziYU~YJ4FmQZ{ZT*DqX|X>H8*zXK0hV4F{;P0jhrBN*a&+BWku)
zt3_b*s=3i9srgQ0+JO#X0jDGV$N_2WUoj`UHjwN#NF`=q-A_GUJJajHQ|??Z@r6kq
z+IZS53hAU*{(j2&S`Bg=|DOHqhY@P&MVNu3tw%M(K?oO)kiW(UcfR6nJE+Q{!SVN#
zq!rNLJp3uauE2LTO6nY!<PF*22cEop#%ezH<wonMNOj5)gNY0uOt4EkS>aIKVq%f!
z_G|xVi>cnXRhtG&hxXT}0uwt~KSB@=J2B?i6LE<3OWcZYHK{osAj;+smy+)W^knW1
zjWBrv5>6i~cc1nVmB_T}NQwAmbnzzk*Z?Th&+`e6LLfAFp=`J*_f~|EzWq^2Cw!ih
z`;wk;@%|y5AmMzEF2%}&jMSu5WQPWicc-`1{Z`~MP~G?cCi1{Ry~3&U4WX0xQ5Vh@
zj}wP<UUdCA|D|$J(QI+`P>S(KW!JUeSJ{?*P2F|G4mn=I3iu4RZJ<WyiH6#Gw+_vm
z6KrCqrL^tq?ynLQ12O}ffygK87Xgp|dEyeb@I8EqQ|-lEI=`l1+?Ub-e|FtX%4CiV
zjTIaKg9-RSV~34~@EbWpx6@GE`U?eia(G|WlH-n-NnGfb*Up={U{i6tE5kbamy2`&
zcHKU~a%o60O;`axzT4=@tKVv!;K`Xu7vzFNl#Ub1t`E#~`P^mb*K1-wr)tdCTn%Z4
zGOF=}#l!D{u?;WMa(B)|Ug7y9c|_OpPXEEwp_)%H=dz-im6-!nmLpca7CZG~MR<=#
zH&_za&+!O$v$6AzuZ)E_;6gxVNhLbc_>}MkxzNC?aenfSJ!eXO3WepqCgmgr=484(
zy!ST6I^TO;xYm1;g@Wupk4es<o4ZPtjY}}7Eyjw4)^I-bC{#o7sMPZifaNzCQUOB7
zf2z0yi5q?TXL8C)mT*F#>aIZ5S5C%)x2n;({DDExl9kVk;l?~8y)Iem?5!HpB{Yz8
z^B3~<l!$2Tvw;dj6na1*`nr(=BAOU@Y4?;B&fl=U`6A0j<8$n48TV7HO^WP%FOs_c
z3budyw(LLlwXo={*dl8Ua2lD`XmS#KWaz&C*ze~{ajb;pH8Gj%b8S<0dl!P4yxC$~
z{Rre;K8duatpaa64o_J&ukJ)nB_t^}9G<Nl<w56l!~2)T(?a7sc}0Ilx^klRfbPfg
zb6HQ})1gcqHEPv`I@b5{0|=y>TX{7%6#8s40ykhsf#Jn*#d((Y%3bJ^5XcBzneWUo
z=jbr3V_lM!3}Y3>iu8tLI#M?~@*2b20p8+T{oo{nXl3P&>3qX56SsM!E$&^!3a{Wo
z;TQ}*2a9H;KXa}~oa3XL-Sq>A$D^xt3wPHnp|WXzQ<$VX3bD{MDM&Y2ftP`Y4H-1|
zepGDR0yr&iNUqj<gsUFz5Zw1*ApnBON*tKIk1g9@>z&~;lXz9y)bn=v%n?U6TYsa#
z$vNty^04O4su`cHit)OIKR@PLyFlDM{YM9KZ8*>q)+K7d^RfQn_$2k(x~6|^Ep#za
z6dM$Vh$RW-@?!A&bMeY2m9?~HN(_maG=9+s+l&^%n5o%2>jGyd#%LXPU{fVqa2<?Q
z2pDfHA$Aans^0Z~-=&U{*5g=fiGm<CZ$SUW`#Xy-*J}=YuT-Td{+&@_V~j~oXK$+s
zuJbgXksgJN@v^9#g-gz@YABVHxZ0}eeEy6tvUXJ|lD;}R(*?HxIs4JtWR!2Xx}}$3
zM%7(HQdlF+aSn2z`T=syb~o(I9sFHEh(mI0V^YQFEbz{DAH5Ro@ohG!X}RIWMFuK?
zg^f)#iy^w)m43y`YDP&1r6B7Nm&Hc3*c}nK)&?YQ?uZs}8;k4S2$MY*^ZgoAXO{)u
z6@bt7l*|mv4}oMbr1+RttjW&0Y6@wO)}y<TgoA-cH4`aiS+BVNTAEk>XuY6DfSH1O
z_ZB=p_iD^k7kf&EogJ-rWkVCd8ZU8N>q3Q-NdzP5rD+}F{MJo42Uc}|_UB;P_&BjN
zV1r#IJKf%^-=D5Yf!y(a;Zi*h-|G7&-!1gy&0GaBX)E^Tbij|KIxqU<?;)|_^1Z3z
z<20;g?HvB;g>sWYeI0&GZo#n<FOIH-;WuzeT_>b+m)VCF_LiRR3o0t^*VLE>d2U8c
zz@Q^-IH@NAH&Sn1+4;f_&O89}V`NNb4t={{2Bi23BVQV{&Mega$tvax-kg!;KdXl1
z8~;3Y0yzE_DH6+b1U~x|IN@J5KQAcb-0LEzs3H#_%7eHmn&%(UY0+skmR5dqtmcm!
zdP&<1I8sG{B1+#mt`2`(Z49jM1J<M8RqAa?Q0S}gwF5(R11o&mKm1C>K11Qx*HPVl
zmw#vCs-*3NucV;BbU;MSZOnzrXY5va^gA++i#!~^;-IY!pa(OUWBDQJeW%OTJCRV%
zqJ`5yxV`3kc8EZfd?QoJGHy00?L+bx7j!kcEDQf!Mphtu=}_feIYZh_J|&nJ#{nP%
z^BDVi32klWQJ0fcL@(XoXrrJKT4<&^%DecJH1mR&J#-?~3be8?h@lr>rczQFNy}vt
zsn%^4g+#KydeDK3`hl4^4j1&T^d&$0y0(&=WoP6q@3W0{8u>G1x^mU>n@`fG4_Y)L
z#rnYGkkLY)DcdQA)v$u+>=9b`jda+~utw`M^^}2vl7FaniO{%m`}4Gw4zi)z<METH
z%GRO@&y#tP(N^dCp2bRIb{oRC+ra9G!Ff&|=tt!>9m*Jq<1o2xe<}Nl?D#Ob)HCvU
zF%Xh*-r2)Xr#u8Af?<fzno_FqH{wg;VEDnj98>N8h0s)Kh%q7?+D~*Xa-z!l0UuH<
z$OgLxk3m|{COPkTqzwQ%hKCgYTLOP*Tb@6KOap6Ew*=Ty5N~;VD_wWCYY94Amlpox
z+ia7RW2IB{|EZy=PF!v}?pY`o`J>8HC5*aohbf@`+62sxGdoG0&hfF55iqzR%XIP3
zpm+hp24oHklEErC%Dv6f^(4eQXILoE$#b*s&MZT9eCxCC5LP-DL=CL(gWlXp;cYgU
zyS>*!q@gvakNXr0=PgJAC}Dxu?l1b;#I#!>a=4oh)C|I&pBIoO_qfm(!ypr|@F9Qp
z+IvVU5W-?bMFf3Q-Lw@gLO&>y^-HG?O#tLF*1@p!?W%31=Bvb9zyo#uIM34<)H4w=
zkbfux=DYBPt(BMS*YH^%+MiQMdNlg4;zc{I>AgYHzU|yWEa*sf>`n2r?u)DIv?d74
zb1NEl;&Tu`NYI*rdb(WhQ_cu2@PC%Ir?FZg7{?h9tO)cKN5w_W*FP1_iumDia89&o
zbd+d~SH!7!)HL*|m+>CsBrh4R@#yo~Xu6McvLtt!x>%wqeBUsnQaU!*C(`bJyZrwP
D<sSsO

literal 0
HcmV?d00001

diff --git a/samples/web-app-sql-database/dotnet/src/wwwroot/style.css b/samples/web-app-sql-database/dotnet/src/wwwroot/style.css
new file mode 100644
index 0000000..67508fa
--- /dev/null
+++ b/samples/web-app-sql-database/dotnet/src/wwwroot/style.css
@@ -0,0 +1,341 @@
+*, *::before, *::after { box-sizing: border-box; margin: 0; padding: 0; }
+
+:root {
+  --teal-50:   #f0fafb;
+  --teal-100:  #d0f0f5;
+  --teal-500:  #0e9db0;
+  --teal-600:  #0e6ba8;
+  --teal-700:  #0a5a8e;
+  --teal-800:  #074d78;
+  --gray-50:   #f9fafb;
+  --gray-100:  #f3f4f6;
+  --gray-200:  #e5e7eb;
+  --gray-400:  #9ca3af;
+  --gray-500:  #6b7280;
+  --gray-700:  #374151;
+  --gray-900:  #111827;
+  --white:     #ffffff;
+  --bg:        #f0f8ff;
+  --shadow-sm: 0 1px 2px rgba(0,0,0,.06);
+  --shadow:    0 4px 6px -1px rgba(0,0,0,.10), 0 2px 4px -2px rgba(0,0,0,.06);
+  --shadow-lg: 0 10px 15px -3px rgba(0,0,0,.10), 0 4px 6px -4px rgba(0,0,0,.06);
+  --radius:    12px;
+  --toast-bg:  #111827;
+  --toast-fg:  #ffffff;
+}
+
+html[data-theme="dark"] {
+  --gray-50:   #0f172a;
+  --gray-100:  #1e293b;
+  --gray-200:  #334155;
+  --gray-400:  #94a3b8;
+  --gray-500:  #cbd5e1;
+  --gray-700:  #e2e8f0;
+  --gray-900:  #f8fafc;
+  --white:     #1e293b;
+  --bg:        #0a1929;
+  --teal-50:   #0e2a38;
+  --teal-700:  #7dd3e8;
+  --shadow-sm: 0 1px 2px rgba(0,0,0,.4);
+  --shadow:    0 4px 6px -1px rgba(0,0,0,.5), 0 2px 4px -2px rgba(0,0,0,.4);
+  --shadow-lg: 0 10px 15px -3px rgba(0,0,0,.6), 0 4px 6px -4px rgba(0,0,0,.4);
+  --toast-bg:  #334155;
+  --toast-fg:  #f8fafc;
+}
+
+body {
+  font-family: 'Inter', system-ui, sans-serif;
+  background: var(--bg);
+  color: var(--gray-900);
+  min-height: 100vh;
+  transition: background 0.2s, color 0.2s;
+}
+
+/* ── Header ─────────────────────────────────────────── */
+header {
+  background: linear-gradient(135deg, var(--teal-800) 0%, var(--teal-600) 100%);
+  color: #ffffff;
+  padding: 1.5rem 2rem;
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  flex-wrap: wrap;
+  gap: 1rem;
+  box-shadow: var(--shadow-lg);
+}
+
+.header-left h1 { font-size: 1.6rem; font-weight: 700; letter-spacing: -0.02em; }
+.header-left p  { font-size: 0.85rem; opacity: 0.8; margin-top: 2px; }
+
+.header-right { display: flex; align-items: center; gap: 0.6rem; }
+
+#btn-dark-mode {
+  background: rgba(255,255,255,.15);
+  color: #ffffff;
+  border: 1.5px solid rgba(255,255,255,.3);
+  border-radius: 8px;
+  padding: 0.5rem;
+  cursor: pointer;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  transition: background 0.15s, transform 0.1s;
+}
+#btn-dark-mode:hover { background: rgba(255,255,255,.25); transform: translateY(-1px); }
+
+#btn-add {
+  background: #ffffff;
+  color: var(--teal-700);
+  border: none;
+  border-radius: 8px;
+  padding: 0.55rem 1.2rem;
+  font-size: 0.9rem;
+  font-weight: 600;
+  cursor: pointer;
+  display: flex;
+  align-items: center;
+  gap: 0.4rem;
+  transition: background 0.15s, transform 0.1s;
+  white-space: nowrap;
+}
+#btn-add:hover { background: var(--teal-50); transform: translateY(-1px); }
+
+/* ── Content area ────────────────────────────────────── */
+.content {
+  max-width: 820px;
+  margin: 2rem auto;
+  padding: 0 1.5rem 3rem;
+}
+
+/* ── Table ───────────────────────────────────────────── */
+#activity-table {
+  width: 100%;
+  border-collapse: collapse;
+  background: var(--white);
+  border-radius: var(--radius);
+  box-shadow: var(--shadow);
+  overflow: hidden;
+  transition: background 0.2s;
+}
+
+#activity-table thead tr {
+  background: linear-gradient(135deg, var(--teal-800) 0%, var(--teal-600) 100%);
+  color: #ffffff;
+}
+
+#activity-table th {
+  padding: 0.85rem 1.1rem;
+  font-size: 0.85rem;
+  font-weight: 600;
+  letter-spacing: 0.02em;
+  text-align: left;
+}
+
+#activity-table th.col-actions { text-align: center; }
+
+#activity-table td {
+  padding: 0.75rem 1.1rem;
+  font-size: 0.93rem;
+  color: var(--gray-900);
+  border-bottom: 1px solid var(--gray-200);
+  transition: background 0.15s, color 0.2s, border-color 0.2s;
+}
+
+#activity-table tbody tr:last-child td { border-bottom: none; }
+#activity-table tbody tr:hover td { background: var(--teal-50); }
+
+.col-btn {
+  width: 1px;
+  text-align: center;
+  padding-left: 0.3rem !important;
+  padding-right: 0.3rem !important;
+  white-space: nowrap;
+}
+
+#activity-table td.col-btn:last-child { padding-right: 0.6rem !important; }
+
+/* ── Row action buttons ──────────────────────────────── */
+.btn-edit, .btn-delete {
+  display: inline-flex;
+  align-items: center;
+  gap: 0.3rem;
+  padding: 0.55rem 0.75rem;
+  border-radius: 6px;
+  font-size: 0.8rem;
+  font-weight: 600;
+  cursor: pointer;
+  transition: background 0.15s, color 0.2s, border-color 0.2s, transform 0.1s;
+  white-space: nowrap;
+  width: 90px;
+  justify-content: center;
+}
+
+.btn-edit {
+  border: 1.5px solid var(--teal-700);
+  background: var(--white);
+  color: var(--teal-700);
+}
+
+.btn-edit:hover {
+  background: var(--teal-50);
+  transform: translateY(-1px);
+}
+
+.btn-delete {
+  border: none;
+  background: var(--teal-600);
+  color: #ffffff;
+}
+
+.btn-delete:hover {
+  background: var(--teal-700);
+  transform: translateY(-1px);
+}
+
+/* ── Empty cell ──────────────────────────────────────── */
+.empty-cell {
+  text-align: center;
+  color: var(--gray-400) !important;
+  font-style: italic;
+  padding: 3rem 1rem !important;
+}
+
+/* ── Modal overlay ───────────────────────────────────── */
+#overlay, #delete-overlay {
+  display: none;
+  position: fixed;
+  inset: 0;
+  background: rgba(0,0,0,.45);
+  z-index: 100;
+  align-items: center;
+  justify-content: center;
+  padding: 1rem;
+}
+#overlay.open, #delete-overlay.open { display: flex; }
+
+.modal {
+  background: var(--white);
+  border-radius: var(--radius);
+  box-shadow: var(--shadow-lg);
+  width: 100%;
+  max-width: 460px;
+  overflow: hidden;
+  transition: background 0.2s;
+}
+
+.modal-header {
+  background: linear-gradient(135deg, var(--teal-800) 0%, var(--teal-600) 100%);
+  color: #ffffff;
+  padding: 1.1rem 1.4rem;
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+}
+.modal-header h2 { font-size: 1rem; font-weight: 600; }
+
+#btn-close-modal, #btn-close-delete-modal {
+  background: none;
+  border: none;
+  color: rgba(255,255,255,.8);
+  cursor: pointer;
+  font-size: 1.4rem;
+  line-height: 1;
+  padding: 2px;
+  transition: color 0.15s;
+}
+#btn-close-modal:hover, #btn-close-delete-modal:hover { color: #ffffff; }
+
+.modal-body {
+  padding: 1.4rem;
+  color: var(--gray-700);
+  font-size: 0.93rem;
+  line-height: 1.5;
+  transition: color 0.2s;
+}
+
+.modal form {
+  padding: 1.4rem;
+  display: flex;
+  flex-direction: column;
+  gap: 1rem;
+}
+
+.field { display: flex; flex-direction: column; gap: 0.3rem; }
+
+.field label { font-size: 0.82rem; font-weight: 600; color: var(--gray-700); }
+
+.field input {
+  padding: 0.55rem 0.8rem;
+  border: 1.5px solid var(--gray-200);
+  border-radius: 7px;
+  font-size: 0.9rem;
+  font-family: inherit;
+  color: var(--gray-900);
+  background: var(--white);
+  outline: none;
+  transition: border-color 0.15s, box-shadow 0.15s, background 0.2s, color 0.2s;
+}
+.field input:focus {
+  border-color: var(--teal-500);
+  box-shadow: 0 0 0 3px rgba(14,109,168,.15);
+}
+
+.modal-actions {
+  display: flex;
+  justify-content: flex-end;
+  gap: 0.6rem;
+  padding: 0 1.4rem 1.4rem;
+}
+
+.btn-secondary {
+  padding: 0.55rem 1.1rem;
+  border-radius: 7px;
+  border: 1.5px solid var(--teal-700);
+  background: var(--white);
+  color: var(--teal-700);
+  font-size: 0.88rem;
+  font-weight: 600;
+  cursor: pointer;
+  transition: background 0.15s, color 0.2s, border-color 0.2s;
+}
+.btn-secondary:hover { background: var(--teal-50); }
+
+.btn-primary {
+  padding: 0.55rem 1.3rem;
+  border-radius: 7px;
+  border: none;
+  background: var(--teal-600);
+  color: #ffffff;
+  font-size: 0.88rem;
+  font-weight: 600;
+  cursor: pointer;
+  transition: background 0.15s;
+}
+.btn-primary:hover { background: var(--teal-700); }
+
+/* ── Toast ───────────────────────────────────────────── */
+#toast {
+  position: fixed;
+  bottom: 1.5rem;
+  right: 1.5rem;
+  background: var(--toast-bg);
+  color: var(--toast-fg);
+  padding: 0.65rem 1.1rem;
+  border-radius: 8px;
+  font-size: 0.85rem;
+  opacity: 0;
+  transform: translateY(8px);
+  pointer-events: none;
+  transition: opacity 0.2s, transform 0.2s;
+  z-index: 200;
+}
+#toast.show { opacity: 1; transform: none; }
+
+/* ── Responsive ──────────────────────────────────────── */
+@media (max-width: 600px) {
+  header   { padding: 1.2rem 1rem; }
+  .content { padding: 1rem 0.75rem 3rem; }
+  .col-btn { white-space: nowrap; }
+  .btn-edit, .btn-delete { width: auto; padding: 0.55rem 0.5rem; }
+}
+

From 9f6c0ee86fa96ffa0724cbffbd1f9288ab5ae192 Mon Sep 17 00:00:00 2001
From: Paolo Salvatori <leprino@hotmail.com>
Date: Tue, 8 Sep 2026 18:08:31 +0200
Subject: [PATCH 12/20] Add the .NET version of web-app-in-cluster-postgresql

ASP.NET Core Razor Pages port of the Python Flask sample, with the same
behaviour, environment variables and deployment artifacts; only the container
image name carries the -dotnet suffix, so both versions roll over the same
Deployment, Service, ConfigMap and Secret, and both talk to the same
PostgreSQL StatefulSet running in the cluster.

Npgsql with SslMode=Prefer, which falls back to plaintext against the
in-cluster server, the 30 x 2s startup retry of the Python version, activities
keyed by their store id, GET /health behind both probes, and the Data
Protection key ring derived from SECRET_KEY so the replicas share antiforgery
tokens and flashes. 05-deploy-app.sh now waits for the rollout and prints the
port-forward hint, like the other .NET samples.

Validated on the LocalStack AKS emulator against the 3-replica StatefulSet:
3/3 app pods Ready through the /health probes, add/list/update/delete through
a port-forward and from inside the cluster across all replicas, and the
expected request, store and page log lines.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
---
 .../dotnet/README.md                          |  80 ++++
 .../dotnet/images/architecture.png            | Bin 0 -> 39396 bytes
 .../dotnet/scripts/00-variables.sh            |  51 +++
 .../dotnet/scripts/01-deploy-resources.sh     |  61 ++++
 .../dotnet/scripts/02-build-docker-image.sh   |  18 +
 .../dotnet/scripts/03-run-docker-container.sh |  33 ++
 .../dotnet/scripts/04-push-docker-image.sh    |  40 ++
 .../dotnet/scripts/05-deploy-app.sh           | 282 +++++++++++++++
 .../dotnet/scripts/Dockerfile                 |  28 ++
 .../dotnet/scripts/configmap.yml              |  16 +
 .../dotnet/scripts/deployment.yml             |  96 +++++
 .../dotnet/scripts/namespace.yml              |   4 +
 .../dotnet/scripts/secret.yml                 |  13 +
 .../dotnet/scripts/service.yml                |  16 +
 .../dotnet/scripts/statefulset.yml            | 224 ++++++++++++
 .../dotnet/src/.dockerignore                  |   2 +
 .../dotnet/src/Models/Activity.cs             |   4 +
 .../dotnet/src/Pages/Delete.cshtml            |   2 +
 .../dotnet/src/Pages/Delete.cshtml.cs         |  22 ++
 .../dotnet/src/Pages/Index.cshtml             | 265 ++++++++++++++
 .../dotnet/src/Pages/Index.cshtml.cs          |  49 +++
 .../dotnet/src/Pages/_ViewImports.cshtml      |   4 +
 .../dotnet/src/Program.cs                     |  69 ++++
 .../dotnet/src/Services/ActivityId.cs         |  15 +
 .../dotnet/src/Services/IActivityStore.cs     |  24 ++
 .../src/Services/PostgresActivityStore.cs     | 126 +++++++
 .../dotnet/src/Services/PostgresOptions.cs    |  28 ++
 .../src/Services/SecretKeyXmlRepository.cs    |  49 +++
 .../dotnet/src/Services/StoreInitializer.cs   |  33 ++
 .../dotnet/src/VacationPlanner.csproj         |  11 +
 .../dotnet/src/appsettings.json               |  16 +
 .../dotnet/src/wwwroot/favicon.ico            | Bin 0 -> 36791 bytes
 .../dotnet/src/wwwroot/style.css              | 341 ++++++++++++++++++
 33 files changed, 2022 insertions(+)
 create mode 100644 samples/web-app-in-cluster-postgresql/dotnet/README.md
 create mode 100644 samples/web-app-in-cluster-postgresql/dotnet/images/architecture.png
 create mode 100644 samples/web-app-in-cluster-postgresql/dotnet/scripts/00-variables.sh
 create mode 100755 samples/web-app-in-cluster-postgresql/dotnet/scripts/01-deploy-resources.sh
 create mode 100755 samples/web-app-in-cluster-postgresql/dotnet/scripts/02-build-docker-image.sh
 create mode 100755 samples/web-app-in-cluster-postgresql/dotnet/scripts/03-run-docker-container.sh
 create mode 100755 samples/web-app-in-cluster-postgresql/dotnet/scripts/04-push-docker-image.sh
 create mode 100755 samples/web-app-in-cluster-postgresql/dotnet/scripts/05-deploy-app.sh
 create mode 100644 samples/web-app-in-cluster-postgresql/dotnet/scripts/Dockerfile
 create mode 100644 samples/web-app-in-cluster-postgresql/dotnet/scripts/configmap.yml
 create mode 100644 samples/web-app-in-cluster-postgresql/dotnet/scripts/deployment.yml
 create mode 100644 samples/web-app-in-cluster-postgresql/dotnet/scripts/namespace.yml
 create mode 100644 samples/web-app-in-cluster-postgresql/dotnet/scripts/secret.yml
 create mode 100644 samples/web-app-in-cluster-postgresql/dotnet/scripts/service.yml
 create mode 100644 samples/web-app-in-cluster-postgresql/dotnet/scripts/statefulset.yml
 create mode 100644 samples/web-app-in-cluster-postgresql/dotnet/src/.dockerignore
 create mode 100644 samples/web-app-in-cluster-postgresql/dotnet/src/Models/Activity.cs
 create mode 100644 samples/web-app-in-cluster-postgresql/dotnet/src/Pages/Delete.cshtml
 create mode 100644 samples/web-app-in-cluster-postgresql/dotnet/src/Pages/Delete.cshtml.cs
 create mode 100644 samples/web-app-in-cluster-postgresql/dotnet/src/Pages/Index.cshtml
 create mode 100644 samples/web-app-in-cluster-postgresql/dotnet/src/Pages/Index.cshtml.cs
 create mode 100644 samples/web-app-in-cluster-postgresql/dotnet/src/Pages/_ViewImports.cshtml
 create mode 100644 samples/web-app-in-cluster-postgresql/dotnet/src/Program.cs
 create mode 100644 samples/web-app-in-cluster-postgresql/dotnet/src/Services/ActivityId.cs
 create mode 100644 samples/web-app-in-cluster-postgresql/dotnet/src/Services/IActivityStore.cs
 create mode 100644 samples/web-app-in-cluster-postgresql/dotnet/src/Services/PostgresActivityStore.cs
 create mode 100644 samples/web-app-in-cluster-postgresql/dotnet/src/Services/PostgresOptions.cs
 create mode 100644 samples/web-app-in-cluster-postgresql/dotnet/src/Services/SecretKeyXmlRepository.cs
 create mode 100644 samples/web-app-in-cluster-postgresql/dotnet/src/Services/StoreInitializer.cs
 create mode 100644 samples/web-app-in-cluster-postgresql/dotnet/src/VacationPlanner.csproj
 create mode 100644 samples/web-app-in-cluster-postgresql/dotnet/src/appsettings.json
 create mode 100644 samples/web-app-in-cluster-postgresql/dotnet/src/wwwroot/favicon.ico
 create mode 100644 samples/web-app-in-cluster-postgresql/dotnet/src/wwwroot/style.css

diff --git a/samples/web-app-in-cluster-postgresql/dotnet/README.md b/samples/web-app-in-cluster-postgresql/dotnet/README.md
new file mode 100644
index 0000000..bc5c515
--- /dev/null
+++ b/samples/web-app-in-cluster-postgresql/dotnet/README.md
@@ -0,0 +1,80 @@
+# Vacation Planner: in-cluster PostgreSQL
+
+> A Python version of this sample lives in [../python](../python/README.md).
+
+This sample demonstrates a ASP.NET Core Razor Pages single-page web application called *Vacation Planner* hosted on an [Azure Kubernetes Service (AKS)](https://learn.microsoft.com/en-us/azure/aks/what-is-aks) cluster in the cloud on Azure or locally in the LocalStack emulator for Azure. The app runs in a dedicated namespace and stores activity data in the `activities` table of the `PlannerDB` database on an **in-cluster PostgreSQL database** — a primary plus two streaming-replica pods deployed as a Kubernetes [StatefulSet](https://kubernetes.io/docs/concepts/workloads/controllers/statefulset/), rather than a managed service such as Azure Database for PostgreSQL flexible server.
+
+The database runs entirely inside the cluster: PostgreSQL 16 pods are backed by Azure managed-disk `PersistentVolumeClaim`s, and they are exposed through three `ClusterIP` services — a headless service for stable per-pod DNS, a *primary* (write) endpoint targeting the pod-0 leader, and a *read* endpoint that round-robins across all replicas. The application connects to the primary (write) endpoint using a dedicated application user (`testuser`) rather than the `postgres` superuser, and the deployment seeds the `activities` table with a handful of sample plans so the app shows data on first load.
+
+Before installing the sample, make sure to create an [Azure Kubernetes Service (AKS)](https://learn.microsoft.com/en-us/azure/aks/what-is-aks) cluster by using one of the following scripts:
+
+- [scripts/01-system-assigned-managed-identity.sh](../../../scripts/01-system-assigned-managed-identity.sh): creates the cluster using a system-assigned managed identity as its cluster identity.
+- [scripts/01-user-assigned-managed-identity.sh](../../../scripts/01-user-assigned-managed-identity.sh): creates the cluster using a user-assigned managed identity as its cluster identity.
+
+All commands below are run from this sample's `scripts/` folder.
+
+> **Running on LocalStack?** Install the [lstk CLI](https://docs.localstack.cloud/aws/developer-tools/running-localstack/lstk/) and run `lstk az start-interception` to route Azure CLI calls to the emulator. See [Run against LocalStack](../../../README.md#run-against-localstack) for the full setup.
+
+## Architecture
+
+The following diagram illustrates the architecture of the solution:
+
+![Architecture Diagram](./images/architecture.png)
+
+## Deployment workflow
+
+Run the numbered scripts in order from the `scripts/` folder:
+
+```bash
+cd scripts
+./01-deploy-resources.sh
+./02-build-docker-image.sh
+./04-push-docker-image.sh
+./05-deploy-app.sh
+```
+
+`05-deploy-app.sh` deploys the in-cluster PostgreSQL StatefulSet, provisions the database/user and seeds the sample data, and then deploys the app, so it requires `psql` on the host machine (it connects to the database through a `kubectl port-forward`).
+
+Optionally, **after** `05-deploy-app.sh` has deployed and provisioned the database, run `./03-run-docker-container.sh` for a local smoke test — it runs the container outside Kubernetes and connects to the in-cluster database through a `kubectl port-forward`.
+
+## Scripts and manifests
+
+| File | Description |
+| ---- | ----------- |
+| [`00-variables.sh`](scripts/00-variables.sh) | Defines the variables shared across the other scripts (resource names, image tag, in-cluster PostgreSQL credentials, StatefulSet and service names, Kubernetes namespace, …). The other scripts load these values by sourcing this file. |
+| [`01-deploy-resources.sh`](scripts/01-deploy-resources.sh) | Deploys the Azure resources used by this sample: the resource group and the [Azure Container Registry (ACR)](https://learn.microsoft.com/en-us/azure/container-registry/container-registry-intro). There is no managed database to create — PostgreSQL runs in-cluster and is deployed by `05-deploy-app.sh`. |
+| [`02-build-docker-image.sh`](scripts/02-build-docker-image.sh) | Builds the Docker image for the web app from the [`src/`](src/) folder. |
+| [`03-run-docker-container.sh`](scripts/03-run-docker-container.sh) | Runs the web app in a local Docker container (no Kubernetes), connecting to the in-cluster database through a `kubectl port-forward` to the primary service. Run it after `05-deploy-app.sh` has deployed and provisioned the database. |
+| [`04-push-docker-image.sh`](scripts/04-push-docker-image.sh) | Tags and pushes the Docker image to the Azure Container Registry, on Azure or in the LocalStack emulator. |
+| [`05-deploy-app.sh`](scripts/05-deploy-app.sh) | Deploys the in-cluster PostgreSQL StatefulSet and waits for it to become ready, then (over a `kubectl port-forward` to the primary, so it requires `psql` on the host) creates the `PlannerDB` database, the dedicated application user and its grants, and the `activities` table, which it also seeds with sample data. Finally it deploys the app to the AKS cluster using the YAML manifests below (templated with `yq`). |
+| [`Dockerfile`](scripts/Dockerfile) | Builds the Docker image of the web app. |
+| [`namespace.yml`](scripts/namespace.yml) | Creates the Kubernetes namespace. |
+| [`statefulset.yml`](scripts/statefulset.yml) | Creates the in-cluster PostgreSQL cluster: a Secret with the superuser and replication passwords, a ConfigMap with the primary/replica init scripts, the headless / primary (write) / read `ClusterIP` services, and a 3-replica StatefulSet (one primary plus two standbys configured for streaming replication) backed by Azure managed-disk PVCs. |
+| [`configmap.yml`](scripts/configmap.yml) | Creates the ConfigMap holding non-secret input values (the in-cluster PostgreSQL primary service host, database, user, login name) passed to the app as environment variables. |
+| [`secret.yml`](scripts/secret.yml) | Creates the Secret holding sensitive values (the application user's PostgreSQL password and the `SECRET_KEY` the app derives its Data Protection key ring from (so antiforgery tokens and flash messages are valid on every replica)) passed to the app as environment variables. |
+| [`deployment.yml`](scripts/deployment.yml) | Creates the Kubernetes Deployment, including the pod specification for the web app. The liveness and readiness probes call `GET /health`. |
+| [`service.yml`](scripts/service.yml) | Creates the `ClusterIP` Service that exposes the web app inside the cluster. |
+
+## Accessing the web app
+
+The app is exposed through a `ClusterIP` service, which is only reachable from inside the cluster. Port-forward it to a local port to open it from your machine:
+
+```bash
+kubectl port-forward service/vacation-planner-postgres 8080:80 -n vacation-planner-postgres
+```
+
+Then browse to [http://localhost:8080](http://localhost:8080). Alternatively, use a tool such as [k9s](https://k9scli.io/) to start the port-forward interactively.
+
+The app also exposes `GET /health`, the endpoint the liveness and readiness probes call: it returns `{"status": "ok"}` when the in-cluster PostgreSQL database is reachable and `503` with `{"status": "unavailable"}` otherwise.
+
+```bash
+curl http://localhost:8080/health
+```
+
+## Logs
+
+The app logs one line per request — the `VacationPlanner.Requests` middleware is the equivalent of the gunicorn access log of the [Python version](../python/README.md), and it covers the probes too — plus one line per database read and write and one line for every activity added, updated or deleted. [`src/appsettings.json`](src/appsettings.json) keeps every entry on a single timestamped line and holds the framework categories at warning level, so the request and store lines stand out.
+
+```bash
+kubectl logs deployment/vacation-planner-postgres -n vacation-planner-postgres --tail=50
+```
diff --git a/samples/web-app-in-cluster-postgresql/dotnet/images/architecture.png b/samples/web-app-in-cluster-postgresql/dotnet/images/architecture.png
new file mode 100644
index 0000000000000000000000000000000000000000..57d91ac32dd6dd42e29b3c01705b6566913aab7f
GIT binary patch
literal 39396
zcmbTd1yEc~*Dg8`BoLh77J`Hfu0cca;6Av!>p*Y_frMZ|2AAM6NN~5{?k)qt-63f1
z&ilRJU+2`VbMLK7)zqHpy}Nh!l4m`udl9ChB!i7fjtK&Ruw~y%s)0bruE2-vDKgMf
z8X%<yTv*(twB03KElk{PoE%?h*f>~#986qaaB{vdv2uFB#lgk*f|FN}i${=y{{=G#
zCkF?#v>_Sjhwd(`D22ZF^cglOMcPuDDbR%B{9eZm1bRmB_k%RC?0*k5qF9M3ih)2C
z(a-KpP(h$%Az4W=jSmY4Ef~fc)63TZR+;9NpY83@-ix<?|MC@YEc^Sn?*!q>wwZO&
ztHeLbVJFRb-ES|(-{v{q>k-&Z=jvufL&Nkm-m9pn&>~k7iud&pR~{$#AGrP59!XbV
zjGK3}VvM`-7wnF68x^@88A`qrX*(C%_WZ!3s18gAw2Iu?=JfXqspvZh5^x;}Ecq*r
zG$b8hdLaHMm4C(MjAl**TvoCAz`&)Q?3*TV3FLkO2QDD1|34kuKb}E_SF(Q!`t;7g
znpA><&kw1PL4ht$%!#m64RzBJ6Jy$ji@X;Y;9uTW({^u4Ktsay<8^1{frmtcN|3oD
zinpF`ZV)Bn?1IhO$aS=AZ+%ovvR*qG2;d8u4U~Kc-m}sfGT%rE8P{isPE0XUjmflS
z5yL5GHZL~A)Ol|5$k@vwR|!330n>P}@!k`Ru-XF)#Oni-b`=)uXe5M`C6o`Au@vTE
z)KoEt&o_U)FQ#NHU@7Mps<D0MRuV{Vvj*8n9I_l`DO|EOv5Ey3aV<zXh*>hK2dEOe
z71n=Rkfl)6HJwih-$*E#Z#nyB(SHUlVrZy2SmOc%Q!U+WfFv5j(Lf*?K-7#1#d113
z;JBI)s(Quw9}Ll~i8?>}3pI+WxE1^3tFb69lSdT>3k!>Rt+;Ef7Oz$<x5{{M2~rOg
zP4gG($613r`*Rz=7N@Lj3)Z86Kp)8Zz{a$uQk<reeT+qF<&o)?2|G%**bNgY1gTPc
zm?X)6J4WphkfNZ0en0O6bNoySOfajGHef*8{oXo5<jA^p=KY!iXWYVzh=|A|%4$T(
zqP(f8tMRE>1P%@}cO5LTYNCUoc@D7Uz!<;)g1u1Y-VY4u=VavD&*`Z2>;AASWTj4u
zq^n4>@1i4qy`G>*Wug|lzm<?%Y1Xbu=9RC<l{f?j5B9yGV(TxhxysNrKpxQq1+uT<
zFLoiW{~A^Vp>gT|2V0z8?U4Siuk~auRcVvH`lDvE(HkX+IeJk09C{_W#t(cN+h^da
z^w%349aIrS9n%CVZmSqRP0Mrb9V`4G5Qj%#2^y_J_2&U{`N7fgD9#OSK8o3I%T_%D
zziJk|de$EKJV+asBP}G+;n>dh2a#qvOYW@jv^BjY;{Xa!;PpS<-?c~Z{I|PK#&|nR
zc1c~7$>xOXHEH5i9cMQ+^@JY$&~cz{(<;8A=G!y9#l9Jz_4sl#cAgK{8@~ILgRG7}
z+OR?GsqY}cn2=F>se88{W<x5;_<FrRC?>U!sMjYR`GSMnC2|@)YMUyCPkusqVV3E9
zj;p#gK9W(J#Bb&hXrNWa7jUr<+0l~p_?%_VP`f0&KhiowWjsaIW?au~cWJ*u76!<W
z?-oIz=BMUFq%J?qB9deDdOuh_t+Di!?Rn}m!xk~DTiG;X5>-0+&wMD}L4qc!%!c^q
z1$!)p=&EZ=yQ`}svIs`d?W(@oq93nlZ1$zm{_`l@7@dM+i^-^$dDz5?5FcM(;;?Ig
z9Q3aJ#l<x?$XIbE|6^&_jQO8F=A5h|P+&XK%zwb-<o{X8&I3Q%uXC^zHufOyAP`;>
zFd^ooU?i^80on~35NHlSsHK+{ompJ!PdnFA%VFhJH3GMNtcy(h_Z?M9REPoes){xW
z(2I8fYIvGlmsPCzmRepJ2QD`*GdyoH7y=%hBllQbF)n)<z+B};5tkej{jdxIAz_#k
zeUKdfGCVuss%=1}HXWl^TcOtqi=SID9%){uNDcevDL{_(@?JJBTL;znspS?HWKigP
zO|p`~dau_9$7rCZJTKtwA_KD)+_jbok;AhQ6uqTnYMMS2)tg%j^Tv)GiNi~Qe+LRe
z2L=+CdR%>L7a<c@A?V=H+7q!1(Vi>5;<MJXu?lWzjwsgf=z0@8Ux9tsgaksy{j`8?
zh7x|b3Ie?_4yySNPM7=#ng1UhCksIQ2xi?|C^|V>@gi^kcs8oK#Kd~nV=Em9bn^O}
zW;@w&=8?}?)eLpsN?Mhd?7_3a^?N@f03U^Zw4*t9t}zdUlp9eeE1Sc<z}t>-Kp<Zf
zUw9w|-;rZg@}JM;LK=eZz>+$U&54{r_#^6yU{72mQ2TE{Rs8SrxcNC`^)>_p5HCQW
z-%tC%tAR{K?H#!YRCV!tzhK}cbT9sn#qzZ_`OjD+e%M-)GY;q}@!!T71aZ2XU%lqm
z$0FKAt)9EP86X;Y8V6yo#$GF5`*|3yOq9oA-oPyfzs%g;MFBSp0COSq*0>e*UH1C@
zHTKKqQrHCaoK7n@#6_hv=oaC>mz^*%F~x%qbz*{reo+AI61@_WQgykk;rv+Z%XeMN
zE%qp~%`wNkQ16OVHPTRvvgq##gZB@iNFZZ(U~mHsLGQKwM29j#zvHYh++|V|m{+k5
zv{=@!QA$xsHi~#TiC%|;!MsCb-=<wsF<@E=N>Q@^{JgMD;X9*=HzDZ7w+?Qsxy=)z
zyq5PkLdq991Gdp}Z7y1iQR^*q@&r15cOCSDn{Q+^_;_I7vx?Z!3uWk-K%l4k9E7BE
zA=;T&I8?30lyXL@Be#Q6sVM{0ExWLAC(2#EZT(6b%3tKaqydgY*$4h1Z<;jrNQ;#E
z!ej5rv3`|nt8UiBxN<@*fuF^nh)Tqcq;No+6+i^2zG)gK#yF10e9oAkT+>z`7QWG8
zrdS>8h(M%rkdcD$R{t(LHb;u@+C3Z-|3_0Hq|S~-#*@meShi;U1Fo$3m!d_7-Ah2G
zT7_*0ZUD$}`oPXzRr0U2U)y=7)%zZr^HFDc>CZ|<>GKNM%}QxA?+9aDA~^p>BNX8z
z3@l1oqO&h1jh2S=6};?FI}!y8;-PN}S3A4JHF`DawtTR}(;_1&F4`Atwy#kYho93D
zqkxRl0-^ABHxJ5V2HpLc*Q2bdtH(`1cx6Y{K`j%1&Lg1P<&ci~BoE5}h7^#<Gc4pM
zGL)^^EP@Me#X7@1Azv`@hZJK=QmASlYpu^!elYNo?|n)UEXd2pDB{7dnH$mg6=!SP
z7E6ZY$fNW!YKuF#{Y@BtGad-<q+J)aR&{p=u(8u$K}xAIlj~hhqDkg8$lDM8drxkD
zn4Z&5ZS9y4#(eR*jrQM5MOq|De{Jbo_QmKapho~8&?MEJyf;muO+7B0*(G*PQRb8A
zu&GQR`*<B%v#p293(~?r_H|SZV-ZO*4{t+tK0N^d<7t|1I~s*&jli_V&$v9+Ep5C^
zCi}$s9MXlNt#T119vGK28e@0$&H;cGgn<6H-gO3si&1}3z3Y=<r5DpU$$lW~;O&t>
zU~xEVX<1KlKj{YW^$Va}-VmZPG^LjZMKMkFJ(jb9%y|mF>q;hoZ3z9nd&L)ArPr#%
z@QX7G{V;~nbV#SpqhQ<^4=|0t=*)X0{lQp*;8CXjFbCe5lq5$|qap`-rxKXl-k$OV
z`zW%VG4$EI!9bge%JBtm+-Q?{(Ix&6aw>JOO<3{1F&78u1s;IaY&MhJj^m6XysGUi
zx>C7Dpm#t1%Sl`R19EtbIL<v{3{Y7agE2Ljt)=OS0w;{c_$Tt<nAZ~!3N~O)l+KDW
z4>gI6#>{N$Jejwe&!KT$h`OgB&|9QROzCHwYGL_;hN5nn5#BsMr!kR0FPuA0C`pM#
z(6&?L$Yxh4UD*2oI)y_2O_KxsxUg=U_BnecE9nlP4TiuJM;i*EyxwoK7T@{hTwGH<
z0R<-hZ7p(X^<3hxT@L>Wyy!2ke^81{J$=ev|GE<pu(R<p_#|y#N<%-X%?Y44Jp|gu
zfI0z=jTZD@0)Au@GYA(Fy!Rsk;1C@^KA%VD)%G3{pZ{qAI)JQ<2MAU(h#U0tCK+U;
zZteg_Z=VHh(J-j5xXlR|>mCFEFs?5g6!;zWUmg#@w9l#@DhP%32P8-<(1{3ymj=+c
z>-IWK&{N%i2|e(m9vu+!yD?-tq7SIQfyAH#h=$IiG&qzWTxZz=5I}D58>tU`f~l4@
zhNuJP;ty)oY!?v$!{iF&v7Vh@M*_UC90*GFpRK{FkpJnhO8s{*v1h<w(Hcyj{(1fX
z_BLnSm}z+tk;m3&Kqz_wgd!1kD&gNlt$zPY%U{Cqkr){0-&q5}?kMQ*P}TqIO8&b}
z;OT$w0-{-Zf&hbFSOZ%6UwTN&=KV7y;ol((-38BH{@OdH0OV)%#E!^WIb7dxd3^1-
z30S2lNaz1P#NYX^Ih)blcy?^`PdOv@@-nE;bYs&Fjwt}!F#^RQJ4?7~OjUnGK4bS9
zPU8?O8+XUSs_xsAbW|=gIzDa!v`>Qsyr~CJFeVO7?ZA+%@}G;W&-Z?If1@FwuC&v|
z?r@n#jZA||fExqCZ~Yre={Q;JA6V<OxA4@Vj;7gd$AHXy0dsQ>gLPo41M;v3<dLXN
zUc#XX$Q&Rl&Jpv*Aw__q#s7wJEW00ud%HpZ^BY*Gk|B`Uy~6_#6Id+&lYjl}|CHuk
z0bGy5+@Rrsi!W-Lh)q{RTP7+dfJ#4*b!#C6ASE0?Dv7=U8~?QMaljt;g6%)496AY*
z!c_oy9zTPHg`=f~;<EFiJClKW{TE)|Qu|3Uvv}Eh%ZL<qKz2cxz*BjSp0ZNXDI!f(
zKu*=4l;W-<{YXv`+zJh`JL8V%VNxWqi2NlEI2H)No+n?c$SAmL=<8-$Uu-#WMqXHM
zZfI&u>(Vf)$r9PSvJ{jV06vKf>Ow)o>0@@YG)DV7)AlC7G|J)xea0?zwCZc-;&qy9
z#?oMk+~O4KkS(>FMGjmH5FR}+{(i3gTr7}DQkIntu=eq6SrBhPDs*nhENWSlT-B(B
zdcrTcL4l{Z;)j1-It|b&aQS~tn@NnXk}B#bhWixl?Vap^o*jVW@)tB$^Ru%*5u*Yo
z2#~VX=hB*PUtQ0>%71pBZkE|=R9h4PlHwU6F1^{L(xt3Odj+qAyOOfb48Y%AkbnU?
zfkak;-mmK4OqSO%MzE=J&SPYCg)d)3Yj8FX;$U)Jk!9y5Kl7ZpY%pJeVsXquqe38Z
zwH*}r4y_V1%~(xyKwK-CWwMo5!CE|3;M33&Y)f%v&lX(Nffw35b^rBiaW$oxf<(?*
zibV|Ce|k|$ptz~vR>>Amo#QVk%%t!x=ITfd1$e62y`Rn#kgx#)F9?|wU<6OiLQ_6l
z**)WmY)lapa#Jx<)SHhOs(8u3nv-o_hi%4V(Mj7lWR9kn4*>HEz-MKWWC9~|ONMxh
ztp-BVQDG&hO`!`v?Jc;udQ(cW7nWkDvb<zNBnXotEKgQJE_|A3+km$_ci`{=S^!xA
zN(L_c5<ABfAhUF8n1AnS2EcI9XLWtt++C~t5XS&95JnGfZ^uwh;A?Zq9egvZ%fWl`
z`BlNq-CuOy24Wn4R-?gTm0iun{{4dozyURYw));C+@9rB;-8uhTHcpr0Zm)S*MRx{
zRe!xqeEc9EH?P|2@f)B?A8@UstO=Lhh*vYkZ3sL7_A$_cf_&~T9{2(fKs1Oj_%C(0
zBjR7{x%l$qLy=P%5!FY3YS4=xfDB$S74)T;`qIPWleUlR0FTc>?)e)w{*Rk7u5vem
z)K01<>6?iCfy2Za7G16SK7XA*;&&&2ID)XvVe$j=;pb;uXLSv^Q91%%L<~*n(3-zq
zXQ-55H%m)kU({#V6NNmIICiX@i>tufobayTsg0XIR_20WQ2!tE*fsy;jx?H{oX5qa
zHoMBT?KQNg%phZ6t($oNwb@cAtiqH`J^rRV47%CrUQ;`eTfDhXOhjD9O~OTO&Z0vY
zjyd>@ByUSgW24~g-g-Iz%TDR3d-k`Oj(LLHO_YUZ9!opQ7XJADXnd7FWbzd@Kex1R
z*~|nZluN_&A)my=kwELf?u{p@CU1C!_~(5vez$#b1ls`EsP}$WQZ*s3#a3|ky_A3d
zfo}eL2eD0vX?#MteCdLzAe^txoVli|_62v<_ZjWa>_1F22r8=eP34}u`#+6S{*+Ky
zvf0mUuHa9a$+youXuyTJ1qK=4Bk62nRdM0WPXDr(ejbj7Ypy3~G~8%gRQw!PXCZ-k
zj)<?0_*%Tsm?HO8VECz70c862u2e04$ylh@ur<`uFu@v2MFrH(k5V~6BuR!o&7PV&
z)R>~BqLS=DUOEgmWf@7IO6fQ?h%3X<nvNk=RA2Zxa>+}lFyQpOnJv7<YOlIkU5?SH
ztl+BebNa0+dt5oEO6E0g`1cD{8r+_LXZTc_Z1_oY4QjGPV@mCs3K`6SvzzHZZZ*c$
zs9Q6fRm{b=KQ_fEYEtTN;4Rn|BFO(P9diCQ@%$|HGtNU^oOgM&%vm(J$cT@yn>XEX
zNwMl?<1!Vp7mw+d00Knbg|da_Q9H3}^qSd?`&@o-*wO-`s`J`uxDi}jU;i^+if8Ua
z{En>$pX$cTJE#@W^bCvK<|b~sPBmAe9D{(u#9cnKB6m5y{<w;sZc&VQVOCML62<1>
zrk)XC+{k3qk?3U3eU0AToDCyyW>c890yvqM{`J%uuru232QsXj@*W0XD1ehE1OQHA
zWf#4T(<G<p1b8n605hRfh~m1kzqXDAfMRe`vG>Cc+y%qP03Fx{K{1C4t7z3*W7nMH
zQAmDt`y1<4xwPvBXnV$5h@WYE7Qcylx-z(%1?(1R9LY(me>TN&Bl&8iKw&ZchCNfj
z1;}dwQrz&7X@T5UUMycAr_5Q=Ka^8kQpfOg#su7ZNLy75?5CBoa7Yp6>o3Xl3S9Sm
z{$i8uB{*y3kT_}$dvHwu*_t3JfBztY3~Jx`j`SI;r=2E)GGXg}Ol1Kwz^*d-w&~9=
zsWt;@fYG6sOuw_TMoE&J|G`~HKTR6bW*c57Tv~?50Fw)GUVH-jh~H-$XqHtR?=lMk
zmzS_aSCWffaW1F6VNVjCN6=vZL)>hQ&5DYF;88nLmKR=G`8CN;XZE+Uwvq6MA5v^I
zej<Nq>N`k_)WE<}hmFMM;u$N892+ino#yL-W)fzz+S_QWt3&wF&dEA3ULfM6&dqa4
zCBf>nXbXltNS^YZCu!qg>_@U}jRaxLgMe9B#@+4ytJKs7Pd`9M6muPnfkn*v)vSl#
zXgqiUEf}L?A)~WFo8-A%dvf!S_@S78$)__wKAmxo8@8{?4Vvf$<`HiId~8LV0Z+sE
zmTnv;Cw<bDD`+j=%c`v)>V#)xqrQHPm3#OPW&XIV%Rrud?jmo|6q*}e^^5v_+&r_6
zd!^H$rvZHo{wp?vbkf&i(EuU`@`{yWC#1-Aot5p2Q$8Qbz!&8G7)B{M5LabfCAgaG
zclQrne$~MYhotOHfzk<R=`FsOl%4$Q2-f~fnw36kK$fR9h?(Hw{~^&I$Lscz^HUlY
z3g`-qb|<|&1cA4>D2(j}<>lx1d=bWznk!NI4_`$|Ea79uW`4_M10L_jg)rbLYVO`C
zy9fAIpBprkP3oVeoE=;rc5fKD;k<^7R|Ge||0$=F7%(-F^|2BM=^rYKQKrZlaAqR!
zStqL=#-_x%_v?*ffXK`#zO2S)nh*SWN%Y=4icXs4v|$fZ6kfZ>4535xyOr=!Esp?M
zg2)Few}OXcO^63ieXE4q?5k3%N0ENSu~P}?pTS)mOIL2LnT4XRD|a*75Y+|JN8TxE
zLMazTmay>M1poA4_e3@23C#y@h`NONPtj$o2@Ubhnqydt_gS%nU><j&tdiesv^|cO
zW*v=b_;gL0soRL*L&h*I?>(cCD%fn##!<^il?%<TeB7Qv>(wlSmS>73yfTq76HUwJ
ztc71G&M6u0uC&)Ss;FQ-N#R+SeD08MBs?aN!sFGD!T8D*#`lNmAg>?&r{=<<D9>zw
zdsKk+QT{y5M`oMZ0F{h~v7V0T5#UapzkBO_mdo!PH~D4C)g|4B{_3#}Yy8w!hp#-G
z`aA!u$~|6V)l?V!OW=Jts&H%u6<c59YukWGVKdoZi-IN}QyOJ|YH+>TE6B`TRw8&7
zdrWkeTrywbx$B*wWqT(fxpw~R*s2`H*0c?W2fPaNnV78<KwzmHQ+#qupwAE)b3GpV
zQADdiBW2#q>k4%>aD^7w)Pj9%&TO1vjEL}co|}XQxd8V^<M8`eVJ0S937uPu3I)C4
zgfO(|$%IROMMM%)80MN=EMFTc&@0Fpc6Eh2d`XkOPLtAPbM<*uZsC$9-b%FE<s^su
zjVt@Z*wXFz&DrOkwdj#uT!$?b7ig2E6!~V-_f(8~kAgKf?DO<6uc<BTxJtfjK5OV+
zQAO2IceOWEVsUr(^vzck0yoCj(vON?)0D_~FU#`{aW1XDthE-do~a3;aRRyOdh`?Q
zC!UWFm=EHO>!xC_;GeGVif|)5n)50fL-O(;!Lg0ZQwS%U2$$_Bs&a&n)9ojW$5wm*
zU?Zquj~a2_{qC=neYYzIeDZG((c@-TD0h!NyBKm*A=ZC)hJE;H8ht%>KQ$08zuD>G
z!wpdveP%{Lo&xN{2^M)=N?I2)3wy4DW`Jz4hpbCiWQ=3AI>}AP&vE`!gY3F<#V7Ou
zOhssnC?!9zF$8#EPZ48{SAN}-kKWmluu6z6CDGf$Px*}lAN%77JAeL@S+_ID=YJMV
zFPCh132(M49%lCGp-C86$amAIbU9(-nSL!Q{K&t>j0E~fxV;bQ&2yS2$SyhU+4PF)
zj(r|?njBjf*@^EG<&|4~G0z|$o0Hw_P1F*E^V919Sk6-v-;6i=+xCncprc=TP&nF?
z(&>HPjX!Al<7dscPmn<<lsq>yUR)=V;z94*?*|<&*~;{=%aYpL-#8!XF?<yKKC_37
zHW>9n@Dp(6@=fNGG<<sZ_Y>Q6NtSP4`Qrpg{NQ4ZjzlPU8+Bs-FY#1CflYXWFd5ZK
zyqLh_rkjSpH$T8+<mA~eFCtp0C${65ll@=u5JkweE|ES?88!tpcC8dhWOpXdij+?`
zdB9db3QJ(|l&aYB3O?-EbvA0QzVS#C<n`8JX#4D+CtWZpp@#Hhc%{H~)In&x{NPB-
zv3O;q#$%?f^<rd};{JiUA&?2KR;q62o>PLp4+%n$wm8Aw7m4Tbl3FV$Ad7vOM~h?(
zwd{mnf6`0J-54z}^7FHKe=(uOuAAn1&0M}Rd_OzEM<qAg;<4?Vb2S(#4?J)JrkEG+
zWV_hhm*@8Pyf`^_#0vAjl@AD@rhM193oiAK=VJy;qK)$w3V#BQq_zY<Rr-Q02lJqC
z7(05r8*nUHF_+VNdvdy7PN?I1XSR1da8#a|;&BaUm~~3o214s*sdCYqNZxqEKa0JJ
zXglMInfY2=$pv-kJ~2!ei4>m=cBJ->VWXo)C-*iM*UW<t4`I$v9IADo-obV3&na7{
z|2^3(D~2=ccX3yhEyXRaojCTq$hj!Bg?guF@F~G?IrN>~Zw|!84ppDoAGJCiE((mV
z^&riKF1StUH89e}a?;q@zP5ebBbr1XZ2cJpvPv3Q+^SG)OEXbm8TH?AR(v=a+AW%;
zDJ`S$qCMs_`D3gBDeYATc11ojv9pd04)!6oT0sj8Ro@fBq~0ZN5;;MoXu}9_U)w<N
z{j4Rvwuut4bIBpVyQ*j#uC{el1{t?y%{!_TqDR%BHU0ERWuF_5twFyy@0awqJ&K|u
zZ~SHt?CvlrYVce{P6;k|Gsa(MO@|y^U0bbFVexEM#1XY>{?D0gWuvW$eWjXAiA>e7
zjY1s3K4!Ao!72VLEIK;YZugg?mGRw(aAH=u;qt;hW#0K(335Bts?+y3jZz^Y`@(g>
zy-#yaOKp3*Df60)ykOqmV-^-!n#6CbgpMoD40IaCLcQ8TDeWO!MMBgy-`xr#y+{{N
zJyG+cZ-3dbAAQ((`;0a9bYpfPR)%SBr`PAe-JPw~W80V_XRjF7C{wOvG`{+VvB(n4
zL*;8nv1m_jxO{bGHqUn%TcLAkXe}((cwk%lnHusNg3eiNOAND^nU2T)tSu2YFl1me
zYR$ry<uM_hQ|W79J58LD2P6-Xs(6v)vVD9r!|xPSybCqJ?5SXi`@69$34nM@KdECH
zJR6zGOW3G{up3BQP~_FVY%{Orgx7wbU=aGi!bOe%+ngfV6cdCBH6FDdS5O)K@YZ>J
zZ9!Q>vBkakXL>fFm6>@oVI0ZBU47V3L8+h4X|qyB*(t}r$*;VZx@HxSfXk78-r0?t
zfPJ0iN-tcQRP-u5IGy&)lzeD+I&;OEGr0fPg-zR%!h?HZ?s#k3>BiQ6fE9~qx%cJy
zdF1AnlTRQSgQY!UU({<lim1`I=`zH!L|ZX(@-6Y9Chq?4XpEtSVtO%m-lpnirf{O#
z#-F7yRH5(#obD8&y0ZLOFxwVUYV^jmT2-=`u?OYs&MS*a`eYGp7H;k;{!}e{Hp}CY
z+Ohnco+h|OG2&;&x7Y;L4s(=W#udGsL1AfoSV2Wa(xfu8%q6mNT{h<nb!~HZ184Cf
zH0p3fnlzc8rRZ>&e=6m|pN)$(D{>J%p`QpYtCCWyj8J6?nxNOa&m8@1=;G)ZQ8h(=
ziPPC~o9wC%zJ?csHchs^;2Z7>&%e3j#^NH4yXarjne=aHyGu+U8*JMP7&tp_YNHmc
zZZT?DE*@wyIy?%1e(=hkQ5Lxw_#s$#&0eRZ95Apa9)Fo0L1_IXZ<^v0avi#zK?H{I
zksn;LiRq<tiG?h7<dgE({mZ+>0d8Y416)I^<{Lk<i)Z-L>}r+6Y~(hN%+-X7c#%X>
z_Gzi_AeY`x*g;lc9nPH{xqknR(#n=gNlhAUlh``i%=x|>$s?ay{*yw~&qCONCMQg#
zGVARprQ{|o;^)RJF+w?Iy5Y8a2SWqoapi7y6`I%))7rpsZ3ilsRRMWi@SoB}12xVM
zXQ2{9CHZQpjRRQnxKZa^B-E5jIKDF@>HEn}(|CRPd+%jPxN+`(t>@#f(rRatsp^Ld
zdkX78^}VJ(_N1c)5@m>3uj*NF+-NESyDb*(u$UGxMB(^11)wq^_(7-!oT#1B*$?Kr
zmHW(ING6<_XrN>Kd?y}T2wgr8Vqu;VeNOtyPL;TU$0DPWN5d_7w^6vKUzf*F1LiIC
zs+Sv4O#32nI_bySPUBr`jSQ|jyegmUnfA?4Ey7{9iF|jyQXbO^@NCxtB;%krR?hsm
zH38pEUWh2Akw&#R2Ey%^s;oLcq5@mV=u?7`kim%Y2*ST1%rwOS@e0%~dh$Wz!<SFT
zTURA%HxOB(F^yGX)X%s+TY9`6XFZYmYEvuh9>SGmDVWId;pNM_hwY3(sJ`%ar;XeK
zw<d(`ch_sUb`dhAniJ8oXP-KUDdmcXHS79-S$NuQ%-YBF8T;*ToAymH)BX)E&Zr(I
zUAO?5{~f7J<82)e(4wcvU${h+99BHw0y%5b(6*M=uKKADhl}huaqv*BL9|&)Zo5SE
zs%v83`*!*0`O>kP6bBlv^1518R@HgRJ;F&$`-oocHGRmnC?`}ZWe9PNfgFau642I|
z(~0mzYA3b2@yM3t4t;EWKP2H1#8q=|1J6^R%v^9ZbOVTX9}4OGy?OC6ra{sC3N0go
zXVFozCgN8Lu_iiES~p6l6L4H@1BHg`9|1es#=;XSJ|oX<+a51TiU^#%$XH|oWvELY
zPnig}2X{*@UC?~tK^;Fx@7IAtfL_L=AcEghZI4~Oxc3i5HbZqczYE}Rya!Dw$&qS1
z>GC<!7^1P*qH&N{^?23aJm(46aa!y+7(PAyEW3PyX`krg(KjNs?~$ltpCqZpM#Y3u
z;RIVJV>(jic5!~nt%97<qHN{cc&nJh9_O3-IpDt3#o$aCVM>t3##>8@<RLD1iyROD
zHj8pO)?=`(30*M7U(foRZA&K)D=zP0%A<EKsS_{u!JL@;S^M1ddv<9TNqFJK%!xRZ
zAE)aEF0r2D<|nHFi)dHStMLB8>3cKaRN7;loH15=F;K4Hl98-!kY5;=DeSQ?4~yDP
z6Dpjaq5VwPKGZ$w<ahUM{dGhm#kwyl>PcxO=`|mf>n=q|iE$ifhU!c{vaPoE&v<O9
zEspE>*J-rloA$PYq1E^ng;~}iQA(a4#%cAYVe;rW9eaA4AJD#{Pbx4Cy*uUdBfou|
zh>~gBo54b~pTG#u_C0I;5rrNFT<cFeB2%?R83@0*-m0fkn_Lr&3S7sIgDs@lBi7M<
z>i!%tS#T*IIvVn1i=Xe}*w(uA*`mz#_z}0bvn4K{+}}>DVlW(LJMlVSPNYsvYgleM
znwpoDIWuc|FolEJd1)w@3K`2IYO9b&#&(t1It%wko(pX+)VqHNA&MzTt-cF8WCWdE
zy4oI-7}iIOKmKkCCS!6Meugl=U$2OL)C%4b*rk>PYMo}hTGeHsdmg-n{wd@?w~XTU
z|9Hpl%9Q<S+>XpstyA`J8Dyup8~x!!h;6c>Y1w$$%0s-}d^^2-1*Tkx?{OTa!-=7u
zyG*^-ivTUwkJ_xeyHWJE*X?mi#QcsdQiNoAD^kE`MpkTrq~z>~U!t}co{01O<6PYy
z8=y%JymOvE?{IU9p7Sz8>JJ*T{8|`8F#Mr}lhIQ<JNFOyTu9G$gA6hwqo$dh9ZQb_
zOl`f>=H7Vb%uJ@X?nZn&sawG}gBEHz^nq<!8C1^(mRI}?t9-&~xE8_{6du277{2w%
zP14fjt7g?72xaxUp?f1)!@rC{=b)*@F0$pd`fzQeU5hoa_k0~IexQ7aTP4a;@=t=u
z8N?mBi?O|Is?}h<az0I#6l6-6UDQSJ@CfGa5fYL6t>j_<>4SFsaKScbrJOxvCYu5E
z%f;<onTT0WoKc(Lt!@uP5D8(D^<HPw!U{Z=B>iCV%ph@koVRJgwyAn!XVOQ8m!zj2
zh9&f>&=;smsp%VPS{7VvKIgA0O%1CQww%;_X}`ITW_6}(k70G^-b+$bscBH}zRI!X
z3uiml6wAoqQ^byyrA}ni#25LKu~{{@!DRKlUSPPZgLdd08Bs!tpn$?j^yWAuWk5V0
zR-^N|=WECBmnSo&1d0z^v9XHRMc7wg8;VMLpv*-#2TINnFS#I$P31SM8IBRzWS`x_
zHZ-vuZY+It<RLgPhn17VZ*h~upY8SC>x&y*ciTJGA0RCucH?*R1=|mKRGCv?*7N>M
z`Z!@G1GSl*n`gvd>yv|it?&>6eu4=}xg8luk~Km02??t#8#Y!TW7@Cpl0p=pN3MMs
z)o6P#o>)kwYw>Q9d>v+3x!V*g@#y8$EXi@8GY99}@Lf`yFEjabe{;a$6piLX^s;_&
z0tYo7WAE8>a4DqVdN7YQGowy9=6*fH`aH|%Xn(~gxj&PL`F^KWyW&Or)m+2xh4k{=
zqtDvj(vLwI%a`B*R7KvZo2HfMNRcXxEZ+%ZeF4<pq@#SHZZVt{j?+c?1TPuxC#J*5
zf(;GT{OzRbw2lW-@$`7<tnO|1=<@P{Y8<BrUf!5le%c%-IsRh$VBYonMRy4V65+-1
zq}z@9?O3m^?Wd$SYU<@oxB=6r_BGi<dnLe=`VMLIOPt2P>y`~*4`_+(PkVTPBoXRZ
z>P?}=GaUgNZrrUcM6fvfl-sX5d>9p}3piY0=<h$u*dei-hN-?C<P<R-Y^~q{ui8Ua
z*_0_&DGLt@v=ym1QHzvk??>fDXDO1b#`pTmm2lFnppEmEu>Ma(xILkm<HkLB89H!D
z_2c_HqJs5y|Ep46+r8|5wO-($+ySCyY5S?j&q-+F{LDnTb`Z^w;m1tr<8{{Cf(-66
zV?RHg3-fhaHGYr-WR(xvbJV2LWz@=JvQfQ4Z4sC4^KKeWSKhNyMW@{6X`<jxU{(dz
zyoHkow2`%=BK>fLPChDC<y&@zc?wQyB)rD|2}o9Dra}Q!s>hr9TuH<#E&}y?Nk^wq
z009{pLx!7`sayR8E39vCr)vyLEI{8V6*9@1PG%v}=P&;1MZu8nbLIHU@x^S*(4QLE
zFVk?539H_SC=K0^Q)Guo;?MJpYh=fF5kMa<;C_v1(RyVU$&3pQP0SvLY0d~g`*zys
z_=HD~Q&Zgd>E7UWOGSpBozK_3O405sedYa^ZF9@hOjeGrP}{z6&kvqpniF;^o@0iP
zq<i^^aH-qgT;0JO!IoRs*?H3WuAQ;4gd3RPBQv;S=C?UR!8gK(hqr;e8Q93tyHGf8
zz_z}6Id<BE-mqUlakH09r!K4&vBzXr)ibD2+nw(um?^@WKrDy$Mo1~0TyG!ZP~jcW
zrlXGNubr6+4Lbf)ciIu1axTbIlW>#3$1ISp@$2{+sksk@`T>sTz!a_87pxlu8wNjr
zZ`rl{>z(@S`|m~Tn19Ok9DqM-4u{Mv2(Hxk6%Qp<|A~h5#{IK%s)t#3+gsP`<j&IL
zD3*8em%*AC_`%z)R}Q_2!;HA0hEBEv8)$tF5eiybT5hnTqazOyzpI1!@mwOzkZ_ww
z=}y@NZr@|Q!~H`MuY0Cc$7b(&o7=W%XoijPig97mpY7CX4S86@(2bkbd(%HPhg5#E
zWgeLiS(l1uR(^-5e3{>E%Y4{sBGcYa<i;A&*jk>m4r=H154xm0-vTSHeB1~2#UdD&
zR~CMG-@fm@R+@Yps-IF#8LI-<pjUjPN_KpEb|@XRR8rE7`F3$-$bw~3<~Ba$i8w@E
zYwYVcGj!<$lgR_@`dCJq5$lO9zGJxs7$Pd%#_g^y(c{F&h51lk|Dsgzjf99^U9koj
zm*#ESw{IMNf>oFX1(UM$`6rVFLW)mbt0kYT<Y8R(_){$IL($>{uRhf+vT(b7{Jmlk
z#$Z&lQ$6(jYJhtAjNTG8%FDc|z^d=iHu>n_;CXm=S}xtom)SWv1`2gGHQhZu-f0=a
zUX==rZVZZo#5u}Uh;@|fURP1S9a>LiG6wXvhm`8-LJmd+xFDlkUk+74LGQPjLZYv~
zxfAK7C7B7(K5cPj5#Y-*d&8dC_H=(Iw(iTsaH+_x>qwy8ttDL>s!yuAOAbvWrsLe!
zOQ=wY3rNp<^-a24HpMr%tRRlyS58iju#)nZFn19V&e!8&x?Ph-g{7$(T$5G~TSNWp
z;LUgT8c7O_(_d~j__FE5`(FugiEyh`!g?1cWO2uuX|R5U@m#)(U(pX;5=eb36aJ?o
zaW7&tBQr$x`m`t%-(tw-s--D5zb2*_X>`)tp?Tj%%U_5se;yGNTpf%E-`_1RJ~xTs
z#E&r>Bw1%gfW1aZ*z{j03tqW6$yQCA#Nq12lXs>ugb^fvt8V*j?<FNFayJpw7*M%u
zwA@N(@v{_y`abcb+Yu<`QoFG3d&1^myVD9IluROPr|Pm~V0<jrgfEGVuP3zwshLls
zAmJ}ladB~dQHynqn+CiJ7CDwJ)zqA#)KDiu*S&$(04jfAFW2yDD?Ujl;j>b4a%e$T
za%i1O=}qTSVDh<e!tT-0<LTV#%`=j_gRhug0fmx%S2_l3*$KCPBzYWVVpKO%Ty>bK
zGC_&_A5M(LCpPLoNqQ<@6gy3e?nA;V-_BZE6Q<@aSTaxTP2a&+;7&q*ixCH2{WFAz
zLn#BX#nTTqU-41~STRF>a@$Q`??Xb6{k6X=QiwMrl>Lm|krp)|soHNvW@S_cTPT<q
z>Pc1Xcy%+qU+PTuLczRKG))SK#~l1AzhJ~8FV$rx)tH9p_eqKkIb{gD7jzlO&BeYc
zA-0r?T{z71^&H0K)VF1mtX}d!4_1Bbrnz<UmNX#R^oAA(gJ6qsG!}~*#nC>nSALe}
zZ&I4U;_#;#K1Twt5(DxD1$22lvwaSuwFMA<*9PwH)h#XpXV06Y<ft@NG1n#b(oW<0
zogJ<b4kA;W*2UMfGqy%XM%LDaO|Ra@$8dH$R6W&A?=U{e&8*w6inicN-hbk4ImalI
zLgSV8=X<uAq(&^2CpynG{9BL5+Ru<3QUt5#Teq_h1_rD`H=WS;=Sd9tTwPO`;X#;W
znY-We!V2$J@lIH$r>A+k6W=c%QRC~tzI+lkeAkUa{1oN%^mMC8gfEOlB_P7$(SlaG
z^Ny_q^4pFbDrq4nq23}VA<>y7@mZKZMjQS%3L~xI_bXXh*^G2~lryWI0@|1%(Q6L2
z>X>f|u1{0;M0m&*Wqj^-_FdA+ifqoehR;_evx__<cX*Tt=lf7r^5JmxQnjd7Y7&g3
zq;?1Iz3cR$HkPOdO-c1OGGFyvs<!9P6fa+{uhiN0i{2KpN63HuvU%D|nh#BO5!OO=
zmU@SU9L(80cTsv9(5A_pdKuYDyH@>EPQAYhH)T)LoGTeUMGjS0!8k#NPGJTuX0#0}
zI@D%HLk*OI`EKmjc2axSz|HM``EV8%WhdC~VzotkpddLW1$-WmXq+ZdGK~}6<LXC4
z`1@R0l&hEeG|5ORB_2BNOtEEX#wc(Buc#4p)E6VyySxD#8J+?dutBzYe2pzFH5~HH
z{#`U@h^QYt0ng&0B}C1iL-@=fl{#e)UHGchvgKR}bOT|f{duESQX?z(NS{2WQBLr#
zRg=Txq{8V^t?sJ9ZzR+H@w!yk)WbCL;z#8Sn1}bpQ%MB)L<lI*@+3=bovvVj$B%Oy
zj;q_$W_*K@+os^9kc0l+5a?HRJm$dF!L|e{Dh+zJ8mBqe^lIo0jrG)DuQz*G7qg$v
z)iwHcW8(5ad7OXgq57k=YOW%klzs$tnj!wuGNe5{)JNoh8;z0vegSF-kGS~!;G`O;
zOI036`ZNGrkdP_5Feo63c=G(rAGcZKMG{6X6mD$)3s}Tq8YRu3ZFh%LYHF&VmsC4z
z>vieO>`WTJ%TL5HMFi$=h*;oSg%flw)#+y)=F<QEuD@#pwh~aD0aK~~%J$j~fTPD8
zRA3t1z!z%ZNbV^I@Z~K~m-WxI|1-mXC8L?eOqACfM%bC2h!WV%-l{34ukil;7p-!x
z?=vwnZS06yQZX<=M4Mr__=>U}Y<zrtrBy}7=$rS0+0R@<%*K88zmcsD;`LuTy}U>)
zpQYk^HE$)K$fo%I{mHcqlJF<rFuA;ms`Md|=InwQ+xhKG7VRI#w->u<h**eK{lv=b
z3fz95>?!PvI77!=n}*G07vq<BS%MsiIKr0<FOjwrUql{?J1k$sC%^Skw^E{>wbcOZ
zCvqSxo(~FspGy1i0|S5M@Gw%RaRZE$NkT&;$jQj^y2n8|n^{9M9XC88?2Eh4taN$k
zg6Ctz+@CHD)6z!0^7r&9+*V53+DUI5$$y8U(ZM05uGd{5POUc{N>S{dT%-E;ai8i*
zN8l|}3yWhDiFibUtej`H7sl5>8ah?F{Pmc*TrupKd^+jyAzj#I>8%>XDmULNCywX)
zOnTFjn75g1MI{;GD>N(7A*>t9_lWF@oVK!}S9Ah=Df_C|Wo1e+^q*XfAR_B(bsoK^
zE87VIUX>j{U7!`^ZwNNpt+_<%`xoz1DG#yNS)6Gz6%5optuptvrcfM3lU-Kz7^L?a
z2Gfh;vRlm4P}!DUH7{XhVHK4dC~OSQ_P3DqQ4~fZpx}uA{zZHJtFhTqf=zz?<up8o
zRBi`ko@vZ8dbw1}xVOApJ0ZlT$v1Z%!k^Ef@L_|mDLqFaRgB{5GU5kQixY9TXw@X-
zP4|B68J+WunlDFuY@Z()8fK|9-yJoTmX<y~QU-3L95!m27AQqVC-HO;l1KxkLz%tJ
z#6&YU8>NZm+sS2pMp{R@UWo$&p~4L1%26Vk2<gTbY0Z)EjOrHPDzm(oc$;__4>V>4
zt<K{r=gdaEG`Btbm?Wn&i;uVIyjb}es=T%nv~&+stw`9r0nV37!FJ1FU-)|9s(zh!
zQH>To-iQ36jq$3=%I^vJ*gP$HwyDqdG_7tx7xB%@Lqv9UT9)NBEyj&lsx!ZL#?G}G
zINu_BFN1gWD9i0q6H_>(8Cyr*5B|<F_iW)bFjALQh4JR|L3~<YI%y`nf+i#qZ*N-I
zyXUD2nH$Re1cYuIC4JYs)u_2$DK}(@3z_}WZTb?<MTRDUOnQdx&0!SgTwhTk#df_}
zs`Mp%-5eS@?lPCkmmDlbq9Y|WC0J#_L7!>qmT>Vv!Ya3{ty;ke9UC*Z$B;Lx^L@zv
zDXxA4-3*pF+;JXgX-Kx3?=6rL$)_+@z@Euw<;^s9c}2ZYK1uLW=r%q>pswUgRFt7_
zud=jJ^nTyZpAEVOZWT3eXu<AS!%71K{qVwK6E$d)99J!g3PaO;k4!aZZ*K8SWMo#p
zb4+?g!rAE8a|qGje~BYc#hm0CEPb{(R2_ODtoBMKv+bv%lYPg}A%JXT`jv@*AL>ZZ
z(};tefRf%S`GnuD<Q(1UPM2~%M!p(_+mBNv*~?@%MZu%-Ea&Qlj-D7WAE&S5X?X)!
z(rz>FXawC0J$x*;u5=ev;=6@mYVg`5oawEE5|h2cKGDq1je`+p!+z>g*6(KyDOejw
zx}2|AyS0^N9a;61$zX~{dA@!gn;vFLhX(_uwZDG|y*}#;G@*`BU+<*Qy_Npce@Bhu
z2Zt((a5LUc?XN|YXnJ*La+c;^3G?0=nl?kG)uacZYX=%;NP3ZxVBjpKa@bPoF~y|P
zdcw@DMqzMCu=2<75WYg>Gp9pUXNw=Vu??~l56TKqU9473W0Gh;_$aGR?9Sq8K$$Q6
zuw?)vCa2Q7>gyc-szwh!%ywehTUt|V<hyp>aP47EF<d~NsGNrkFM`M?Ll}em86O!D
zyMxD;IA3xsU+=BL6^pbyqR%ulP>(M+$<a#Fu=~bALV%mkzMq?_BH+~#9u0%tzROC0
zr`+l-#D~bXNSl8qzcvP~6U*RR&$k%9&Z#y!D)tGi$isF^vz(#Bo;iEl&$irp4H6<!
ziy?<I#!}+(C9rTyplbOk2M|M78q8z@Zz284B7j+3T;jQuT1c;`MYi~a_maUb(IyiS
zvZWQg7b!MpgO%lP^m%D@5MV!R6?ubZ85z%CTnByII|V4{WlpdQ@UI4IZpyYMSVQgu
zY*vGO^IHv9*rqKdmx)VG1uOufKx9S1%b%JnCy;bTOnbPe9{K11L@Z=1K!E6M2AGnF
zVu%&qiC0cCRL!WqPuQj~|0`Lnh4;1IY`pf{5mGfiO4A;wXqE3<eD3OO^VyvOTncuZ
zO0j*+I^ylp1s<QZ)tnz0=2*-Q`$|innD%$f1kuWzG;_EkLgw3MNK+?g2y7Ev#u7OV
z>l`guw8C@f$QO;9Oj09ttjYAI57-NrGx}?ZQ$r4?IFOYVuuuU3QS-4IQhsUGJQKo&
zeUVo0jKJ0_w4dbp2GbxjL*j^&0V~k8OD|KUF?12XZ+MePo>m!uDed4WyJua1&v_Yd
zVQ;=~f)*NHsm6C-^*xsA)F)}7Qe<)~{ljBf|7YSa&$JuPN~2omKcHKZUVZL(q%>=W
zXe1Rd&pX;Dqc%jGf8<HM7qF1()PU|tT3YJ6*u0k79IjBEv&_dvt{$%6(UVdzHcm7S
z$5<LKFi$ui&FI_p0UM1j3c_cGkro1fx%>Gjd~&zd|7{J%SW0Rq(o`&p%L!&VVYivi
zgO^w}&JR^%k5ADQrz9+I=x0-M^O+%c)?pq1tOKem)=`u|Y_zgBx9kL+LwRXT0@MQd
zIi%2d7{z;%9}w--7dpZ{`)xiyKzfnPChPW=Y#PlQU#)zYsoSga+~?N4oSK*3lY<}G
zX69Q3PV8G#XA(cX;Zze-`{b;fy&C#@>Jw+h%d{t3q^GN0Ky|(d7-x&FK5D#9kkONE
z5X==}>dX7V*bjbXirm(?3xBp<R$E<r>Ls3%f7EtU(YKGn&DG7lCC|XMlK7`Y_<9|d
z@=O6KT`AFRKSvcKW|H`;8h0N4smH6GfuBDs5XA-NEn-#;3A+ZwEJGXS^VQ*i@Vfos
zY~y894=U`403}r~o9}r>aFuagksIjw@8{9K#?ij!TW2JVK6|#tAcet|-+z=wRO_6=
z!bksJl&9@C#P0_{B1vR$Af@#d7Lgm`mbV7Seoes}JeoG-QOwt4BFVTRn!ZqfwLUDl
z#fyOByUU<S#J8N5;l{54MYzq=LM{ovx7imRzrI~`B8s5+OO*nS5I|{E$AO;aF7{pV
zCe7oVU!&OgIGh9%)dl~a>@<6h)W!ajHsh~z>tZAL{=qoZeLvL)N}}toIqTi_c3Fs>
zm*qO4Fps-a()VqQ0T`sH4fqy2i{93{UMc_Y(!?u0)Ygs)CtgX)*ffsP)}j@#QF)e7
zITxCv^ci+dBwvE8p+HWpXZP&_`SD>LrmqA*z%y<jEtpq&HRw5?5`B1u+MNDuSO<7!
zvPll4CK6O~F!-*x?;c3nq$$wjpM8+7p_hUQHfm<UZ6Gvur2P8uLL0RMp?SYrF)vrK
zjR2O2WJ*rP-dE{sr~dFsOw6}_J6R23t*O8L|2)BUZQ`Un;cP`XU52ItwGGbSx%sa3
zLY$`A3dqq7*_?#bxZh3Q3-o8<E|Gi9mYmpdCX6~x(%Zf)%@SX!evj|997pX@q25$p
zyd7uO!aM8k<Tt6aSp0i*Q<e<F%(0_h9k~yH8>-&cY2)>KB1KI)QH>IVB(^Zj^YLu$
zjGHiG{`NX@CJv9iioqwN0pl(uV)$%p2sgJ4v$|e$`uEcDJjun)S%hRp`xn}(D~B%6
z)ah34Tg{G(j{FLqyGrdRXkxrkz!J8&#QF{Cn6ttHP&IC&scK-<KNlx0;rhZ3MM1+`
zXJ+_kT1c!cVe=&lBZ<iJ_tzrDPKWu9$ys_eFL)SD?NLoBg<dfJ=sg*!0UIqXyWVGm
z`64pwSkA7md#Y08g!YEVc`Wpig|$tUvNx`;Ux~PA=_@4t-U$gx^sF)1Ia!u;RyyHl
zJb5;lfNHH^yvk15ivqEYXI<uNH3~{15ltUYjWS#ecQehO!=7qC^oQq2mKR)Ss5};1
z8%wDEDWhq`_I8MmAfXmFu+eNj(>Y!^^b2@2|K1uF{6jJUPwe6J<E`f($`8L_E1p+S
zKez0=Jls2)*YRz&@+(V3q@8GH+>9K)@ELck9n3ackr@s=GDiQ4vijylGkV|J^NvEW
zlcbFKn1;neN%iJbE(XCPdt%r5O>^B9l(LcIWUn<!v?PU;kbpx(>^CH6)cHU!UBGT{
zTSoNgFww}ih5x&y_stq1%6VeHC4%T>%xM`9W5E3yx}w9d!I@(uM2M9y_<7P>Bi9Fm
ziH+1lZ{^-EPMW1z*BKiAr*wYxa%JPY65a8eieVu`@KQZZjr`kRU(CB%v*3<|Ln(p_
z`6D?y$0Nn^(G%!O*MsQQT(8+*c3o^V&gC*SEBN_Kruv0{m`3i0VwicSx&9^6GCG*x
z>gNW&-w$DD9x1Q1-K-QIC-{>&7p!IjA3Jl>xeNLdhMZq<g}MZ4XYtx2X3s{S7>H+Z
z{8_1Q?&d@iV4b7--!|1<;u*36MZI+{mEsu|3wbUQUro{YmzOx;(@WWEvEwv2wZ==Z
zr|8Nbi{w3?2yNaliisy(6@*J18NG<azW$mR6~`nW&x!fn3{mX;?rwc$&?>-M|1x|i
zjBLipQ@Lrct2MkAXNJ9gv)1dn`;(&cO2DQhL?o&*SA)!hO7rlo2|r}niDNAHAr?ni
zRVO6H9Z__m@^-iQ8uuHW!rBi!>LAh>7uDG5@J<@-_BNZ)u3)P-MUFH%zotB`?xx87
z3O`wKkKx@=$CKO2HJf)2XI+ny45j^a$%Mg~<ON$gfTMaV)dVG8INy=2n;_1CJ|uXc
z&ii1mJ^wm|T-V)m6l3|;NjA)6=&71p+g7BL;M>BTj0C2Ka`af@S550LdBJvZ;#D`n
zcIYF;mWud}ch|CS=%d_T?MJB>Kyq_GaNrzNlw7$(86y_z_9%1?sW{>v3c;l+Mtjf4
z(OSd`HlEQ72hr2&*VtxVJTB(C#N-f&p1oibExWB2Umj!2#jX~6(>}!>ukfwt{U$C;
ze2<I^OPOKp^zCFR@2f?&G#f$B+h1mXPEV#5B?+ytBX<l%5K>VP>Lz`o<>n8MRBx7I
zcpQQ>2m~+Ug=>#pFHh~D+bLc5U+&zT+KwPDAC@?>H2dx(7=Di5K}6!FLm3bM_!bK3
z&(p0=s#O%_C<;oD&4y`>;NqWn{kc!sL2dESNzxc1JSoC$)6%z}E*-@=-r;U;(V~7y
z^k*-qUgpSrqeH4%xA8vd?A+`k#?4PM^2_&FI04b@o=q^PHBr%5eXW<jFwjL`QPGvT
z`&P$m_Y2fvlqqj1=s(eb7)YKh{a=K=Wn3Ij&^1aFg1ZI@?gY00!5xA-B=};ByM*8#
z+#%Sai@WRwcV}@4?#|-!?*Do2{oVK5-H)?9J<~JOr>m-~&T$zRWam8IzK?!8xEyif
zc8HJKD@*BzPf1CsyZN^&V9Ebq#TQQPv%}<bk_gb+U`|;M|FwHbgJzSV4@6#&SKQmE
zemK4%W=+3YmntzL)=1qLpb;YP=}{<s`w-Lm_73;q{$4_I<>c*%vJyI;&js4d0Xk@`
zCDXUgLse6AhLJLUt9W&xID^Z^t6J77_xTA(z|p?;;#O2*@Z+;Je!Y0N=Qf6rewDhl
z6az=ZQ0x_a2m{aT7Kf{;x5~hQ3TtgwZ13S9y2L=`knM1;G)aHGbhz;Oxzb-!9bIhb
z>Hc_fQ3RVBM`nn&pfp&o$$MSGH5%Y)Kf3XY5>g?iuSOtF$J<~OHI3K}hyP9IK)x4-
zuh%>_HTplTu3=`~)qIi>(5eEVM@}@>P0>&eEwLY7>9<y1C>W2Kj8U{s`AdJ=RJOLa
z-Q_j$c;xQg*0AXaj8(!$?Hw7fy*J!$=qoQUIrMGl5aXlnS+Rb2nJ<3&9-vbnjr&0<
zL*Z>jhtA8{$`7<Dy0EgDWS#mq%--I(cv@w$4gxM})8(H>6yqy8griH$;tT^?#a(tW
zx^(A2M1#oa0gvI#kM)=OZILAclPWPOvwJ01O!*HEXip2|wMPb$Kn0wza4$BI`{!5s
ztfmf;y5ohkoHlW=63CZQMHSTS&UiD~a(<r18&y@(<A3&UZoJCpbm~pA<lz+xQW80b
z9k?Ej><Gsu^Is*13y%6WA|hgoQx<o%8OZUq$=dT>8=3slXbaoU%Saqfh7gx)u+ogs
zpDLi%2hYbw3T3yt`&Oy_8O9rb>BNFwcy?J`s@5A)?}eDj^$jFqWcs)kZmY4v;^H=+
z4P{_^&G!p)tO~6-3%A*$L%a=H;hTA%+QljG%bb5N8s$|$fH<|z)O&E&<60Ryj#!XN
z(d>tDJ_XULy_2H?JhQixl^AG={pUVwnC-XXYk|y8&;(L^yTkj4<}%kVmpNJ!&8vFX
zeY}Eq?4n8J-N_ZRFqm?NDVIsCzdzm0^~>~(({ZezM=sRcK}I4}+xFYlK~;`clkp5w
z>5laDi8es931oRa5YfpHkJ9C)-`Zg8^V}AAxO0d;y3SubhD9)(u&Gg5Z<2wZEn(MC
zX}gFPrpcKY@_{>z5-2g%v#<{+2za0vC|mv7;qrB9xzzGT)XLzof@x#PQh~kkca^%h
zE015Kr~a?A2bTk*Fy!!O<p?}xO`bb$L2<`=8A&NMFy}}PbH;H-ZbQC8!*MrzdeZq!
z0)5f9Y0mXWWh@!d%eoR_U{ZpDr3xX=sIj0Jk4s8DSk_}bL;DM(kgrT&$@43})GX)$
z9}a_hPjW?qRT2-a=FW3LAGcn|446$|=Gb+zv?<g*BICWjFWqYV`_@v)RAM^)cpP?|
zG%<(OB$P>D9iG(dRU%pM5Q)wZP#}>g;JzxC-h#eu-75L4G})yKDm?8{DrvBiubjbI
zX7w9*=DBi!@E|G-EC44{0lsqZyB`+0GL{n`&|4|`w=ukVy_nu^U}2$&2`_g%S`Ln%
zpeUzX-*_yp7Q8e|z!$K}9JIp48F==xMj{L0Hrd8tqHr-`_Eo=%hm*`gEVd8nf`cy)
z8Sh}Nuxke+`vL`4^Q$CR8kl~@Rqk^=ePqeLiReB}b~Suqy--8?Dq5FLIlHyOK;p!N
zxb<-0uOj8O!@>d$0rzHoPb(Pcq(#8YaX3(<s~DIifWW$;`}xDFy7LYz+NkI20JE3f
zmDL+)a#$ET{2)ALX}+>$ksZR``2y}mp9RMPG=;h+?*sh_8a^AjKcO6c;nci6-2U)h
zq~k#<E}Wyne)4f25wpKxSUHKU9ZSbg5aQfgVwN^4zfcjbEt}%>!Bz+fd;&nL?MP<9
z>U|75z}2I&!&n%L*82`J1D`4H7?rBYOKFoV^t)#}*};Hb+2BP!1Agd=7K~54N?n-1
zE)$-b8&4syaz1&wY1aM5LNkK<vDu-aRc&dq{72h~6jg)~F;175ak-a^D%4P(K?d#l
zQ9gI<>mfYai3E?{^EoI7ZO+vx{t^4bOC?#6EJsNM53XVpBqS;C-D`#o1<bi7RNd}q
z;-Mb7rF%!7@=_s@hKK&ZNEhai425i3LxkZf7&woK0BxVGZNB4pn;0dVGQ)vl{Wh4J
z@)RdsxhNvJf2E*BXKA8>Fv`<~UNOIjkAm|&@0UrHTvFuQwzwM`PgmuFgODl9<DpwR
zCLBTs;2S{q=u@jo3m?s(_a7=|O#!R2qqd=ETO&SJLFy9VN8xL6i*2kpv6EA*?qEdD
zCqIYr(WU`;CTCz(<KaPOgHUVKK-%bQ9_4-Xq@St_S%TtZ_1+db3?{lR%07x^G5*Ay
zwl<afu0rb2#p(Mtg4Y1J)^YxVe+mq-$4nVVo(rAuVC#?L3>-IsvB2)nu**yUw@phH
zFQ>)v)UT>Kbi~Z^!w1S#RPlUxsFPB$>3+-K6@Czb>su|vy(vuP<CLiu6+T+Fh>@_M
zI?(k|UYVtlk94~rK0TT<v4cg%6b(d(wMjNQ5>98`zegW$U+LIQO8|WGHC~8w9rTDK
znw44O4EwU{sk%maXDu1l`Sl#x$5jZt?pyF<Um5c9_sID+EHb!o(CGujV0agG%p%#p
z(|(RroH;q+S_nj)Ca_~#3^H&)Nks+q>IKjr&Bhi2=t4heFJqq{w>+zasL<kPLqS5{
zR(xa?1Olu((W~V1{94+NyLh)j5A>_))OEfY@w?gzzjUdK7Pq^X!z%tjT+hBo89pB+
z&^<rXh9YLT%~cdf%F6~38olcE0yuWmtz7Ezs{OOR6}fWAm$DflQ^tuNr3j2&IHPq)
zC_Vjaud@%KWJNq+qR6iD%J~#nD}DANw!~pF&Eec0BRGd%b@jt~`|7J!RcW+z`5e9j
zB9x-!)QF1vfOo}l=X0%E7fQ`DpUfK~=VNQuANM{#k5z43ao7wr(bKKP|16%G2u2}!
zf!yV}ScQ9ip}0$}C!Bgk%@*d?mr$v0m75}0p@G1={I*39{SH0O4)zD&wy#FqOM}sq
z$w%@uYzHoL3;ZguEOa|}<rEm3OU#m%N)7p>=Ub>xK-k4EsCRc20{R*4H1J>2<8}1U
zOEBN{;e)GYu+m3LGm+ocb}u6m=|hAtG7}HCL3m-Z?bW@7i#b&Hv$*y8mBYatq`j@^
zvFE3ZDvp76qtJRIpnC^OD}|ch6+9$v22=mG@DXd)+Zzkvu@}1h{z$NWx^yF^mCBp+
zRSpoABhlkKbC52(dnNUZG5Bbpam$@>8<TxiBlJ}IzPndDNWwmg)MkOaVE;1JK5Xt&
zoMz5fDF8C-;oLq`{BMO!^D;5sh_z+q7wZaW9*jzdvmiF5k40_vVEAL$={XY1nvI6+
zbR|tL9NqPXDfE5QJJZ#pqT0+;EWaCqgM!ml21?r`JBg-tZqcbLmP{|%f%XRpjyWR{
zt$_SCD1#I=8V=TID^|?TxDivPe_gIH_S2itgL0c$ciOce&90X<;1=b_Z(kmwO5W{D
zW;29D`g=gL!k35RdWo$wuFAO*qyv1Liopg|{Ctd4a!Jg7%6J_k3&uygm3v9dMkT>h
z2YVlIex)a-t1Zt`Jf-$0;{+uPY7-Om0gomE+|*m#^@#7d?Q74hV*rbvTXd!r+osA6
z_h9`pu>`5Fe9O&98x(+_iK&a)t(VZSJgqXc#sgNpD~y?NC*JD^=!71nA4Lq-NQwmw
z`;|eD_8%{TvrJP0)PAV@mjtU~tl_asP={lqVF-20iCcWKk-{W*u%rEOaiCVJ(okQh
zn)aKRuy3ahF#H(5-x3j_roKN=zv(iVt?A(!%?eCE6;K}0DE%fkMLXSpvR<=q0B$eL
zLzi3=#am0rPg!9cFk)>7keZNo6}XK&#wXD}Pi4Lp!ti?B7Zb@}dn$;PEAZMH{WF&Z
zE&BulI|if0%=6>3QD}=PKha8_)h&fwf-WT`!wyWibpFh#Yw2L*Qo;~^s%!<d%Tv9v
z#!3mvx9JgyKF)3vQQZKWm+iWK_EYd<MNu0kYf3=(n;(EC?#z_L0#*CA-F^}7@n^@D
zdpkGDVc4Mjw1X~%_tVPMx6Op*h<)ySGfEM^y`eh|9Z2~-7c;H@)JLZaUp0lD&*Jb@
zU_+z)(o`vDK>C-0UkY^Xs#r{-w<_YUu~$9=bK>aQkaJFI9WFAVa^9<Ul8t%CPM4R1
zPt^T<?@fQsHk@T=#JRD3>2Ml};la9K3nO{M+~9uLw*7wcpI^12PQcB#t$L{+?P|Oc
zfQR{uv*f1G$L&Oj1_r662um)t_GvHS{(QU^<(sv#%-<lzX=;f0NYkWLoQVdcy?om|
zD6(Ec1Z<M==|S0D-Ff6U$oL4>Zn%0sD*rBSeERUprFfWcEtkitXNCbMjsgD+{{BAj
zW^GMFhyOxCN`e1mLBsL(^JLwQ$;&+!GUjid_;N~$fUH79Ve4<k*+KYW?sCK7(~yGC
ze%93$B4ImxrfzeFX_&`g9I^Xb1cT8`Zy6@|Gtz8!AXAzjws7#mDTh<VzUeD$Wr4$%
z8-rY*f4y7Mskpt9r6g~5jR5yst*sJYf!*O`><!j{r{CH*oSFPVVm_!ZUyGj2gMP?R
zbNJzkac0adnw7N3%<+)5-tQM$uRij0Htk;F)*X@5v#o^osYp6MR$J+<A^AB;J@rV?
zRRw9?PZPm=sOaIU(d!NH$p+<6w7Il<2B|Z`LNthA0g=JX+JY)?y)}2`<t}4uGLY9j
z!F8X*GGT5YL5FM+q!b5r>vh|*sA{|l`LHFe)+E%N5A`kA(sAuT1$*75%aKpE%btFK
z+JkQOiy=DV-Yc#pX_Vw+xhYh>``yOi*n~*0LZ7SErpOE#u$<fn<gfv$*JalkAX)Z^
zdMLKys1h+>TC^F3S+z~Wh*HTJHbhgZjJH~pm3sY2;mzb?K-&rrM&baxhgcjCvN0kZ
zqdQ=xO8ISn%m}v1<x;_FPMitR0>0yzIfRpwlNT~DUNf@(JiUA9tZc%x$)~#z6Z>M}
zepD^v@>sTU$FZnlq8=%|<#(Q9Oxb$3+EY52;$C(ivT|&ayT_1UUH~Uaw15uFH(Nwv
z4DTCm{_XQ1W#}7n|H2tzO{}J1imy*7@G_$znj?Amv(9SVd&dBtc8=eErVHLl4LIZ{
zu9s?_&+?~xnmFzfdo*+|9sP>lzewL&kV{;*#V;p4#AvF4+nX&I@uHs&awPIP!W2Au
zw{b>9LAdI+S#7MpO?O=IZe@haWbrCuFxhp?z6<e}$#G$MC9zG${<Sg4|BbS2=!GTi
zg_WvB@HM50t;w^LnVJ~gZz+eNb&=-z?tdm(QhLsxE#$fXtia<m+;%g`Y%&iy_?4nN
z*mti3a=A=+%mQh>acPK>!!i!X>kTXI#XK7Gioj3BO=4eMejJU^sb818dBkl$3s}|Y
zcu*$tv7pX>0lLxFC^Ph;Qrt(xSiFNi8tiVebVYdGhXugv;d}BLHLlpdIZUXqpN|Iz
z?)Kf?Do--pM@_twnK5uwIwn`1$4&Z2GnlD&_7ejRmpvo^nCYdnQ}Uc$32VLSI*QPH
z>3|=AT%{rIwykYuZ}{<KfVXG8(?)Y-t?Su8@o{rl9i!qIxHars*Cv`5YD13eLMUZk
zrZ<deN$X3_*YfFAKgoG+76z4?@ONr+V80(8OE*^cQm<cmbs35AnqNLO@+MCd!){9J
z6Qe(Ig=fneYj1d$7F!(+l=VZjzLLmVdr2@AQDhX@))O#Zghxkhu|?r5bEn!I7x~|)
z!a=!_R?74n{hrlw#S-9#NRrVn3LJ(o-NAzeMVlO|q^TQ>@-<IyJL1zyvbVzyg{@mN
zK=+bdhz^g3kO}bn0Ym6y_&o_TN2y4PmWpGwLj%0_aXNs!RS-Tam$xHEc^h{FUHWv&
z^YKB~=`8zsZ}69JZn)>eb_eH1aI0;DB2eFJ<}65GC3mIZ@m!<D?)3}kK?0~R82Y+n
z-!;@lr`|Nm3E5PX9b$ZOu<NI@=*omAU4!GB_p?}&tg`Wtg@gOhfL;bI$FI1pD2lj7
z^2a;9aK<a<D_D#^a;*aMr#?=y3JI!za7Oes?XvI++~k!sJg4VKP)$$-I-;~PBHW`z
z`C$~WeIOnE_hpmi&P41Gtzkm*m)wArB@!b*Zy?Q)Bw87fKTXVzAOS>B0gAQ(12~y}
zq2h6NQys5pn<V_u^X{qA?&%HHP~@i0)k`-oEp?7Lp<HV`5ng5acX^d0%AWD!s@?U-
z<o*B#Ki#wQ(lrREB*C}t;X6;pkPg?uwOpyMQ<JNenz3NNo3uNH#y>Gp?~rFkSfr$S
zWzNFaC34VF36yzyum9nI%R4|MYS5Ja-KEO4znYcbxLpe9r9MM=lDqE#LD!E2;MIa#
zZO9MPksgDooneWJceP+~pY3`fDP|+*&8hi;=G&4V+KM^_Cuhj+{0*7|4-pYZmrY%G
zQMZeomBRMuV~$HogD*EyN(WMEE~(F9%&<W2GQ^^Ep$yi?ZauCcrmjy;O&9-|#})=s
z0fxI;yW|23Bb+mNzftcb`xaXtTefoSYe)fiR0s5k6{0n3!bx~P33VKzTngWx`Sdno
z#W*p9@^jYwth7}(zI#~`#{0_`>GLwKQ2tQuODUh#Ez7=3_35{O;kI0LHx7z?9&#Wu
zt-T4=;6pbH8z7G@iExqrm4du}>^F)kj5AX9%&%1PlIX9Tar&J$XxulJQm_VFi&kEa
zDrtukScj+dSr(vJQC#|9OWDKhyAz;4H*_D{KRT1@uXj0(nSP`p0}))W<T4wgfpl)q
zq5gZzD3$(Yy)sKyk(*)PHy0I9B-Q@C%v(ZezYtI(7fp7Z5k)Ud-cE+MR13Ga%uF8p
zb~lGr)qD^CfQI&bsimWXW)xW+-UQbk<!c4?a?ZGFap(>hR@mC7bsNT}I1HUe?Pic`
z4m^IyeUwC_KX&FhGy;osC!6tfqTbv=vHC8ee^oRoB=kJZMQy9&>>mE@+w0Vr?RSSC
zvGV8GI$dQL-cBNmt$hdEpSoye)%-vN^`P*1a;06ciT2w=6R1=C$^BhkhEuZoy5rpd
zvpkQRAZ0+ooQ;)3WY>oTF|gv@9LJOnt9n{Rk_5fb(w64|Wyd(g{;w4}zVlA3^VB(B
z{Pi#gv(VCJ$>`QkuX2Z4x2a{N{dML8&AJuqVxAKm@{yJBQ_&V(U+J91hgt5{R6?Ad
zGA|*i@Wzw|SNH^doAs`h2>Y++xD6h?zibP(PTB3>i#~WuD4ew=91;@VE1*wIPO6!h
zP>L)4o5urQYG<|?j(S(92bsrNN*>7d3>;imsAA1>ogj%-AL$tdeFPGct<0ZX;VA;2
z-FJWAMM;lbk-a=J6~8GZTg=AO*aUTa^b5{t@`fAUb$igh+{dstWc{wC))}r;J<%48
zJDm|ec*oDB;Pv}ogQc+1XZf1#Hs|CoNfoQD;j0e~`FW%HNw|iwq#=8Ci78>vQ%`#t
zg@A>Tl|S0y^hJsIwqVm1zfJB$rLH8lGeE_fguQ+d%RodyE1_c76*zY2K5AgoKso7L
zfjC*p7eL{VPFKvKU#`Eh60vL~UHvi@{>P6e`Jd<ymd>)4#W3K|kQ|P%QKdiG{St#;
zfbfh(-lP3&8KJB)OAMuEu|?0YK<mUvIyXbgW^x~{tgRh&X$r+MFpv%m4m;spcaMSV
z)bOV?>1g*v=TVLD%@h{DS^Sofo_i3q`Y&G|L-}rZZB^0Zh6Zf<mvU#6ayMehDHG4=
z2t7dzHv$UAq9|kHbA)KULc><{cZ_j8uGO@&-GIhQDSglG&dgZR<f3N|H~f{vWf_`d
z*!A`t#nsHTK%0(%5~`TYy_`6)rF3zAT1vn*b>dR@Z<<`dLhqq}Z0-2up>}b0ew{}@
zZICaE@+*_s38k3wcJ$^{@8Dr-VvqHHU$|a-p+HLa&(0<x^}XTC9ziB^gSg9SZW-Yv
z(mN$K7e%H{W3H}_)H8oygLsF_Nc4(|TL_PkAqVBeCU}j{k;ZH||1l}AXpT=%nU9+r
z0@8_nwK3XMruAdA=YY3luzRN~p7h|E$nKQF$(dUAvn=NgmV=VhVarRB%SzO2tr>gB
z3%+_+RhdFHow!D@^|xnKCa3nC!IxuHP*)kj2r4YACX!6SZY03J@2&u<d%p1IvR@k3
z(@&KYPmR{nmF>A#l>hbu%=Hg?w_{+gGd@SkcJ*g~@~CdIhlh(Hx!o;-OPOUz0mtf~
z$DhJ!d0?J=uedys9SxX2Y%yIVW(2Miw63~YmgXE<v;w)OkiBfG8i{#=E=S+cmj?ga
zFx*fj>3=1Rk#P~6^Lb(7h-rw;7N3@cKcCd)Z<CNIh*`}kZ)CerRA|!UaU<NH3j!}$
zib|kp5fo+#`D3IB6g$7qJ1K~Hlm1b34GOI#;txsPWnqwNQgItWTC?d%Vpp%!Kf)h=
zwDM8x*|Xz@&y!t;J=>HEY<9^+1WTck2*Ko@ZrC4obdF?gnbfy{*}t7viZtGf&{!3R
z2RIVUqGOQyvW|f(WA3*zuV0n{!n*rC?s1yY+aI%A<erY)9{QjQ&@YM+PnX3`&rzVO
zfE$}nvLm5q;30hT%)ITJ7th)QiESb)Oh@7LaK$<1lco5YJ@*Ef!&CPX)b^-E%+T%c
zcc-fL#4myEPIV^`qUkW90xF0W2dd!turPr}?Y8B^-`wu?!WvK|L?StvweLeaxCM8q
zpm5Eai?t7{Lat*o66flBRg3!dR{$v=KTdh6KAlrHU8E9udJ!H&DY4)7uRzv;)E|f1
z^q*Xrapu+oPj$1Zg}x<3KEiIa_FHdl+7P?syPvb$_>J;~b?qVZCyx)G{MMQEYJG1T
zNEv7Cwwe3Dbv#MK@FO21dy!d|T^m%9b*d}ExizuV_IWd=0nL?Gsvr6Hfk0l;=fms5
zR>G%2`t0e&O%{J$sT!PbYRcqQO-B4W75ozhYc3y!jt@@y`B)O}_>*~Ncb3hkC7VFE
ze%0%<g{`wEG;o2J6Y)F6^hc<uZ1xu*)W5QM`s+)}veRue8bh^m1?GrJ+30Kr<qJeb
zp|7+dgHyWha00Zda(J#vra}QI+*(MjP~T#UXZoW2NcrsMAsckADScU5MQVWFv!#gd
zlDc1Og{k2casl=p9R1#EMd>@a?x?mbhi=&woo;jByknub=##~^QhCp}J7PGvkLI2l
z1+X|XDH&Jdfb#5j5+vZnEcGFac_vms*h-IvSEWOyyu8%O3qV`Z5x8xMCrwk#f|IM=
zBT-s%y>$$VE&fTD_OV&`mZLhwiQY$Jg)P$?<&nKPpZ&@U2r#K%{V<2^<mbF7y-f9I
zb0ypkV(g1S_}Ct;xKSsm8x?`$rOz3dmy2|z=?Xigy$6NH%WLOzPe!-#F5MSLFOMpV
z0;Ggo5`F3dC_SM@9RWVTF!7CAGPR#U(U}sF7z%BPdh{8#JjgyG0Gv`y1tSjoiLo^N
zt-1Y}O5{d3&&`mbyX5z0{9a-b!{?C=*b$iZV%+2tO{v(6F1LsN*0aBHmpGN>Z9Prj
zAs7`GvnwuuqE-Z=Se3*bK>Elq%_z;yAm574ZpXDDQkeFa{wO_a#L&#)?)>q?5L7fN
zDg9#vY`)Cn`7F-QOE3CV8;oCMOLB8ON%~N4R|^^KyynAGAi<-GHkG*llg~7Duid{U
z#x3G))fY;jPEqu$$`M<Ih+v@|Hqa%WW!>QL{KstG|NA+f>KB~*@HcQvLHQDkbBl+#
z*M`x`)ci*7pl<DH({lT!Qv8kl2-Gf)YGC+jUCLp!(!Pa;mi$o?kRim~uk>ZfikzOs
z@7N9=G-qX9^ruX6!%<yRs*a%zZp2mk7H@RHNo$U*A~8P&nZriVfqJk*mW@3_O0+xG
znm!*R@jK6WuXR~s43y(jde7HAm-t|+9%#E_ji=1nEM-%KbmGEed@$%EgrA8})0eQc
z2fU!$bzVLr7Lb6gNNGgZ;q9OqNVVuQqMMbdIf>cREn~pCJC=c1yTe581*V9EV@mZy
z)Ct!+_^r4A&T?W^Jn?qGz+RO(?)9VnSqdV&`r2XGRCmR3Amuz8CTr^!<;ff&I+2JC
zW3}b@Sn}iLZ#v<S{S6V{zR=S!3cMoiaFF@$<QPmlN|Qa;vh?Pjo^|G>qIb0&{j548
z^7p+S+dU`*j6Ao%l^H-*ib!o*bKo}~`?x*vk8`ingVDME3eoD3a%BlXx`z*DtPUc%
zEG}JSu63=r(pUW-j-#W|8-!vdvV#AzWa+0{JGX8rmA5pGI)fJIlW{`?o%c~3nEDR>
zY3p+dm*_wzUf^|=>~Gu#HDLw(7TZPiQx^uu$H&Ub$~YBGq?|az2UfYhh12`_u0m%B
zCQ!Fu^i2Dab<~!cpO?6UO&k;XY!l?Vr2v08(&@Q$_sn^nhAk3AxexXVR=De`^M?{n
zS~6M>h4Y3I^YDrp@`8#NJ{=sHlUk~ajRoX0%1fu&D?QV*aP!^nNYnaP01wZ%;!xB<
zZFTc*<6Os%Vy48N@vxkn91iHMX;-23XzE$1sL{f*D<|T$s0}e&{>YhEu)UH|C{Cd*
zr5hv#)P{P&IIEN-$`eWm5=QVB#v$bfLM&xg{aKnd>h%8SZzSzAr_J-omdMFFM$8uy
z;nx|2R=MdX$HipASyq`@`$B3_t8}=EFRoBjG&U$vE{7htL_i6f8aALs&!vZfhj5M0
zJ6cm!)Sq<#v!|=Jr4F_B9EYtFhpolBspV+Jaq(w6nrpT`+n1{z(4!OX7E9HH7iebf
z&JGI6NA}l$n}*QJE5E_`Zk`XV6Q-wP<{@k7<eWYUCFQy7IpTco6S`-uG4<Wj5AT(!
zEd~`Yl*J%|7W0q5Rwcc;<r^r0{%nL|n{`q?^^OwZj}T+7Y`eWbiiDqsj!kuX&%e}7
z6n^nqN1!*0MhN7~uTRZDSd@g!qbcuXi&D^OOx~hb2K|{!n)+A}dPR%+s_o$OWm`6N
z{L<;fgvz>3QPx%KTRPf<y&`E-=fgJ{SLdz9%2e2R0$j@)T2*Wla=^^n;<&|Fn8BLB
zyb)|3dcn2g#+^8ooOk+p2Xy*b@Fx4j=fSpnPzFtT9i&`WLtEhKyrEncnD*DV#!GAJ
zF7^bEXt_HT#l4TY_qu;EdxV8=(jIdWPcEBKF_C`%p7KRpAx(9f%t5*AbWc!y7~O>W
z_k&_{458OWF^L#Uj7iI9dec%qMSDaUI@3n;`EhXghc6U=ZzT0AX3%mE11<6`F4af)
z@Hd{j_|@G}^R#*!Kz&w9-*th!D28EY1k;*K<u302vv5FBOMagw%<kc=`Fx0^Op&47
zS%Z#LaR1PuQN3jCz~-pY&u`UtPwAzJ$j*;GDPLx8bglv_RQ{Pw1*4Qx(zmkdKw1G8
zdY>0d0+C{9si4mwWHR4yv9GMM*-yvoJq?hgW0D5w=eJ}g$VpMFgQ&pJ7Ge2fRGq78
zA<^fj!iOd|{%N71Syh^NLweD*_50S?LFl7EQ9=ZlThBWYx@4|9MU*Ar$t(!4DWloF
zn}{*kl#2-XJc+sAtemV=ctK}wyD)AO!|=z)N*-?+yaZ}?w07#Gp;oJy$%)?%!F?YR
zxeE@IC~^^wW&C>V<6lk|qjLo8MS<Wihm3r>;9RYY*eq^K21Vy7e7vc_2<93I>Z15z
zI~N}KG<fBDhh5Qt(xUd$vI2WLd)p@0%Ef}bzMi4jNywj$j*jADhEGC)n~oh?Vq9(;
zCNE!~23VeC7!H~Q)<iaV($Xs%3*1yn)2!?ALG1c6T=ApZ>IYWk$=viY6);7$DE~{z
z;~gmJL)L()3*@1wE^hRNI1@VfOTTsD@dGVQX&6vvES=OO&ifN#=;e0ejR|CT^}!!v
ze;Su-AbJ~wVXGqMbJX(1qpSG`Gfh32sCe|od+8Fm_A82rakzG86X``0O<`i<nn_`s
zbE`AZVr|{#vW3vVAh%8pm|qU~by$n1mJ|hIikAyE=SqsF&B+0`JBRMvFC0W<APnZW
zYs^r?1cs%X8OA<vmWbZ{d7{~pPHWQ<>_H)hpJwzS_e+!SSB^syU3cNdQH4?t{x3HY
z;q4p!O{lb}{|vTYRV`$cCyRc|f;19qdE_5h+S)hOb<61~YlkJCYsZ_am;T<SjVLaP
zLUq~V){s4}?IT3g0&&u?t{pI(LfubC4JMskPlsw%jhj2c<s4P%O}9-9H*ISxXI&>Z
z1ZX^Q!6&cY_q{*gHwa1lOM_$}=`uZ;ad(kxQjXv*xh^`jX!rG)9Tpo|JnyInHvuSG
zv|DUqeaCbsXL_htO<%t$cs2dTmwWogr+f6K<NDcn{N&-J<z_g*Pjgq~D0G)qL}r)<
zCOw#O`dH*Yuq-1+?|2u7BGF@iIBe$VH#FC#+T`lP)>h#DpsxBV#o@+~%CIag$&&Ro
zXJDW;Vyb@~K{4xqby!s8&pGJO+Tss3L8FcRUhu||i^jE9uT>^@RNs@w^up&)<ExhM
zaT3%19*PzMA}bg4_3jI*3(?W?WbtGb?(PYamu%9eCk@JS*sN-q=Q}{5rZ+Pc3r3&+
zRG5X`BA9&IE2dP(iT6F}c(f6PC|R+wv4}7+Dk9*4NV^l>@M_2X%&K0>!zLm!gQJ9X
zMqw9PYp@OE@M*F8DtqbwIA^8026=TV@Ur32ey?xvw0-pJ(?j5{aqVaA&EyN9zJ~9?
z$MTfuSNn}rf_d<aG-}iRsiJq8EX;gFj<eu6@F01#N5$IM(bn531{N_U_Jx{)!pDVC
z>!m}o%M~K)%}TKK4RZVk_m7DQ3CxN84vztnahnl-M%@(e55cb`xmITlk`;Sq&xL?o
zq=r0nu|oPW3Pl;5F52O5+C~1ddhsKCq-m_^iFyoS{{Zh%NuT29EwvuKdeUCfdaFYW
z>-u>4UOu0_CD3)y3V{piWjdyA-_Jrlv|99J_7#ZV6RKt(NfN%_?b&(;xVP8f{FSf*
z_G~ZpbwRD0wb6niot=uXM}ZNKo2MB?q85zshNy<E)!nBv7AuO6z>~J|#E_1e`N|74
zz`<H3puv5hL!-nPNecL~`UhVnw^BKhPgCReZ@bp_kDbHqT185xJErj0G@W*C%-aR4
zqRVGly*kvz&*oygL@PFi6xIE;ywT`)8HkzLxX|)zKH^2M7QFL$w)a9rc+Ng=`Mvod
z_)uYuZMoJ#qtu!qWvZK^n~S#B)?ov)T*L$QczMurtfun4{c<2YjXNM}4!n7}aT&X?
zqdA1Ds(~Qylp6ND1aI_PMd+Hp333a*GB~#Js((`dajWeW%CS}^!Q6-m06RmpysbxB
zy&?p^6X{1aIG)Mn|I$-*PvP=wFG@C`WcqLcGi_o>UNXM;s9qaXxe%(NMXl*I)}OBb
zd@{C?{;sC|Z{BD9BT`Yz9z?O9+~>YLAg@NT%_%t~5&3Lt8rYk`{Hef=0prwQn+)Px
zP9mfwn|7l#IOHardlft7=e*l$u%e#^J^%c)-kN=Szh|=&*0!6}A{-VJ?(Dyw6)6sx
zYCTr$D99hv(i&N)wJ_=hS&8@z&83=33bF<X(7VF*rV>5RBKqc=yz^m^$0I+m5alJG
zX*WlkBGcd^n&5l?JjHmq`UB<LeCgcrY6z@Znu*2&m(#x;Wph3ubtp0oM}GdjMOK9{
zY7++>Q$as)$e4K$3c%P1W!)wqJZ8nnqS#C%;BK801_7R0Vhp~O0=4Hc*~#YX@ba>K
zzEHQhgzOsp8mX@lG<+hI?O~a@$2D8CNkfN53nG$;({RqYb~;w>m2ym9Q<mA~h|uwp
zY@7zaa-bBevV*v<(i(^6_IQ%GXh3mTs5wMz=JmnA!!}<TzPMf%6V-M^IBpTV0&!(q
zB*?kseS1Q}ueOWFs}<wjqM4NnjuI^=<}jn6N0d>9nz!F+3+|{W3$Of%vs;)umw|_z
zbVUrd*DFUHB8oM{s?{YTGum#Cb{W0QmzbKsdetrAanA;zVm(jgUgmj=YNgSw{+_pM
zW#6i&+rCIm90pR7$%;xY0rfrZ?&TP~&`|vOrVil}sno2VSxp&*3CapOxeiLvl<ZV)
z;0|3yXD@xYh?8IW$ug)g7kIeI{hOlTR}PN6utNSg2Zf_RsaXSg6l&cq7hY!*Gu2U=
zpwhzM@W9{bxV;GoORq1Ax^IZ_XNU~~P9#z#kU-}2gS7c(4aeW>Fne1-C;oM2*XFC#
z4-ANEpEqJZSXl>pG6I!3^M-MY|5?S-z`&QqMVA5%^rC*{n;i6xYM;t~&%cFtF{Y3E
z(9aHnB2g_Zd2N?4t+V4+hW)$d|18bL^<Z9)cUCb5jiCjPFB~xYZ?>uArX>_<kbi;o
z0LNE}k%s$rlSc(O#W+BHbf@)A4YPA|vbk|Y6@<OqE;bq7Dzk1~JZvV_@sYXRXWadC
zUi<Q8YKA?4`arL8NVR?l(@Kj2-CXuB<!@L=KU>u`cf7`Xgch_%NSlN1jfdvyaMT6r
zQX_t=51Y695Vn<D8Wcgvj|7=KHu9VqO-@}7{_GM&Bf?oZBHeWrru2oSMB@Vvr@VgN
zj}lr1kb=1{4jAz{{w&YOFru~>zp@X*GLuP~kMo_EOr|FW_CR~VfafnzFVoBhPi>V*
zZU3{SsI@FxTkF&Axlud35mvx{+{yvF|3753$0ZI|(l}V-=F<Dq7U%1?t2)4F)wKfw
zJs^QC!Cc(%y?hIgN{Y8>5<U^pDJz}3Hx}A^vQHt`QgV7Nm9AKLA4a%|qCa5t9SvYP
zt6#S(j=viZyz^+*K$9}P)0Q>s(6S3)9U1Q#HMRA4xoZ@S%!huiM|m=MN2SL`6cv6&
z+xrM8u&_tjFd#32Yr9PIdfFcIxn1k&!|8orP;fiSha;{@N`(_;ho^~1)1@lZ<dV7M
z5lP%03f@=TnL)TdYX>`6LZQ66{Y&2E#)8X`Bwk$P(5mUM%NF*<NH>csni^Kz#!Qc9
z)tGH^FwQ-xS9%|{D^oCXl&x`NZ0a4--*1i(n664SiG8hxrYBxC5^u+>pNV0+#ksDr
zYop`+m2PDdDgA$Vg3-63XZV(59NIv6Qt22l6y3pM!2j9S8~YWGx^`@RF`p*paw!Wl
zvrHPp->x<w0rBP8i9rlM$l3y`&n3U79?gVcf{L0O)zfdWCz_tifI1Ovs#%16&>|ps
zXcn)*X)B-&=q1Jf>{?<js~7(uz$Y;@@RTd=e3tzbq-s=$(L4UT$mzu3o$28Gf2PrY
zAA7f~UL<<zFoFpnIV<ZUzl+^ZoS@uo0|Nsy!G8J;M#Vy19#V)FmE}L=^E%#!>5Jn2
zi^75}gBZNBRyI`%fOj3O!^UA;AFx8GKt&<qd#tj#TFQS*2ikwo#d+;p{)>hrd%)L8
z+V@`j6a8mwSt&d4EKE~1lS|M+Cg)8&HiBy6*dC0FBhpCu(cu1A@StWn>J7r?dHcq<
z{3{}`$$TonxVTjq%-*|)C=aLVL>$59M)-Te{|qo*Arwk}{9gwMBG<t%hHE!)7C0wY
zq_$rOA?kvHw07W$;B9Mv1A*mX&o|wdtG21s&&y;~!EBzcrd2yvk|z+lFX1Ez6O$ZS
z+C%>>N(QkaVhFV8+6;bwRyF-=TcFT@$%@iBC5=(JxZYO0e+J}DKY_^}h*;w5|DNOa
zFxrmKnnNDIDTjR_CDE&O^lrFYnZ=pF05~)=*ej8WNu2q=?V0frNc;XT;lXv}Ng`Y9
zaIGtC?~HuEdW?}WE)N$Bu0sLv`3||x2^rK#pexWsIs?aA{qI=GQ4v=vKx<Sk7S+(W
z?Z1pm@kmT^c4}4GlE7Ei$dP5w_&VeZ-}cz?`=pW5K9_!8+)5W9_!5`sCqd+k=!ahD
zzww=cQU8;#;W_tkQ{+xmn-E?fqO}9RUs&6n&~k@(%VI+5UacK8Bk2GBdtBIv=R#~$
zuRgVn`s~W92@FNasz9px-;oRn3$@%Hln(vCB7@-FA`CFyd|7XAJ8)xD)6%iiuG0J0
zoskEHrGGLfq|u0U5&bZk`FFrxXFp=;s1UZ|n?*7WCNNa0l3jmBj4K=jU?A|7EZCs_
zNBMu<YVTS0->YeE>H!`0R1=RCx6fSMpT1XUF^gZhpg6P~V<MXJ{I4mRVwL4H*j00E
z@C533xx=$JTWZSq&pu=^br(YPzb-K?Ib>rR#r9j^zq?N=v>s{GLDZx7Fl9B6w&Mwi
zBfg=}>V54%H{;d=j=9)vy_On=Sl@EQtXK`v=~nW|9B`Z}R>|IAvFA#cC_LAA9S1l`
zH!I;0P3Y&jkqlL!S=|1!_h;!_z?$c@fuBxsuW4t*H0!d;+EtBN|E+@0(nj7?7#8IY
z%gWRgu276Ei3tEGjgrxqnu<8T|3bNcwP_K^b9H^a@fL#8OuRgXGIcwSBNX%U$G7O*
zo=_+Ts0q9`-`>9fs=PbF;wG=Bh*5tcZB)U~g7zWu)~n`xtg1rOXKfl*Pcbu3_V(nI
zmAC0coHnGA6?ipCGyi=7U0z<|*v=v=o2hMajvCG9O_360I~kmjl!S7$`jCzWJ`|~&
zo?J~vHsHTXWoyBOUSAu?rza@>(^;$6%%i4LH=e4O!xaK+GMp#7Pi;&9!0aJa^)UG`
zIpL2g6w^=I#iP88$5Q6b3O1~#>FvMvmyZKEUbDZy@u8916qDWKc@DZr?rYN9<ALk~
za0ZKP$uB&-OAlXPhoxic$H|oXV;B^NmYFceup_FS5y9fua#SbxvWaGDjfy1Z%w^|}
zO^`|aW)oIvgGxnxLB(O9JT)frE2N*4S}Q53V|%#<LTY=zdT8Q9f~@zP+TH7c^Zx%P
zBR`<iVj~|YtIjMWM*TuxI(af&o1CC*UQ-ZOeVOAC9K8IAf)M!mhZB{keP$%z|Na9B
z9<dx%Wjd&K1|IQI{Fhks9u=legwj>_JJMBN0?r#DoB)3VBssY(d~lOc2z#%mxu;%H
zZjRG<7mlpqTimGQA`-2KAkSwbU0I`~Q<=#4NlTxr47GIA0a4+uZeFCbzw#a1>50b(
zBgi-phtpXDE>#W}4(RxN^rL&2`7?!XR=Hui^Z^u}Tks34CCpnr`Szej*w{E(gcQVV
zYM$Jn^9m`PG=%tIYC>veDp(LmfS|=dqO0OdK;s^~3WOr4!D9RLgKoeI;$Qsj4@A)1
z5FipZZBZl0L@a}h<coyBz`v?z`pI_nT$I-+2za4<hIbpzon!h$^|pn<!Rnp`*lh9n
zYB0^7%G37=s7UQUdEvpUAN@qla589RoiNxD)9KBCe7>E%L*E_6Cdm!%HhW}kTUrUW
zX~Od*8%aS~Y4~v(PSl6DQ>aL48ZfiFhZcuCMVz>Blz7^F3TMRWI2Q-xf;!(C(Ow*A
z4C|w0Y(jLIXjY#(rB<y<-%Cqu_)s_~B83x%q*3*IEBzbzL(_l=KA=kV%I@A%E-nE;
z;ez@bFkyOgfQ+ryd$F@)>(6?f#_xXay;`%OdMiFaYue(9PgcKPC+fM{E}#=z8v-Hz
zYS&Wp?MbULzqPwjz~i=<o1)YHry+e!=U+OcaLlo$R$2`@SMd!DeZGv0$gcgjt1n;K
z9e#vBuzw=$ZEX<SGKWRub5E)w^rNUy5vU&?PKD1U-*YXDSmfTy(4~g=IJ&(4y7dzX
z!;+AalaJ?#<ot^OdR(%|{0Fc*v(v2ayPuxj-#q|D1p<k*f!}$wShWXCIc3Z}gZ};V
za>>Mbt@ye|hL(B;wN&@*k5nWoTvnBP*Ep>`^`3Xl1o08lHIteMau%wb&SY_LQiQnv
ztM6M`6PcY&3f1S|wz<^VH-Gr;A$D0f)qzOi=oQ8DmTs+#QKRCMJj&vX{zxcMnu3Bk
ze&x%~x?B;&K;IBjWCY&LI@T)g&6BhHPMf|-38mXYNKph?>c3ZKP5AAJ2P#I}0l)t6
zrjo`}quOPxx(C(hBT~5SM|{8f?s@@R-<C5eY6-{U$+Q0vE&c8I(T?j#0QPJtA2{)j
zMEL*Nz<7Dnl7|&k8i*jTH^a_WVkJRTuTCN%^w$tSY}@av2v+;Q#D&uv^B#Gs2;)Zf
z|2?7r^xAd}n<ygI_^R|BAr^5Sr9iE&@F!#!5hg}xULbv~_)qHraV|n-QvyLtgJ{Bu
zf^bTa|EKFsqBHOXCSsLCw4|E-PtpzPJ37L2$U}hq|6CB!JrpAQzt$8gLb}dhO<oF@
z6CvF4|I>XK!l<>CeE^AS^cUsM&-Lmo8bI=<ZXhcMna0=pn~NO{mdM*pVp%+^U8<WL
zp^49($h&LhhnUN80TQ<WUvW=)j)%3yTng)plm39(zdYx4HjpXggV9e@7$TSy)3>}*
zq?ChZ84sV<3(sNU^v7V7^}=@*u9Jm#W!CG3X4;dXWrhWs`w}|!6UisOO_J2~xE)i{
zdXqAm`=MZ|ANSfg<nO`n`-x&K+5I3(V><VqQFN~NN@1h?Ps(*I`Muc9|JS{3&ViBH
zuiu^Yi+y_Jfl##<Qi{0#IGiLr^?zhQQ#!5UK2JWW5s)lo!;I|b@yCeolf6jW@s|?-
z`10n<`>;p|0A8^e@c<yq`U3lDTJ?F%bBtQ869o2OG+P;27Q>m11d<s)hEmqz>(pN@
zxy-2l2Lb<Bf=m!4R7ig(0Zv&*JSMrBw65ZP<PkibAkf_XSze#9L3?yAGjQ(?)M2ux
z-mE6^hYKO$hG1a*MyoD)^vC+t_KRbE_p){M2P0Jes;ra8UBQltBE)MpMkKLFh@%?)
z#QF9o5!m8u+A2ZqD!#l`LJM%xNW1k~M6{u3=Fy1Z&r{^2K$tkhh|Fq)^vi#rg<PS^
z_cL(l|9qGKbKqyFfb)OSC13yJBg&JbT|2-B+YN8yxz&0yxj<Azxp|{YJ30Tq4#GXw
zn6;x4v*}NE{_ejI0)J(=S;C^4jr(P?Y4wE&A#RS`^yYN##*m*0P^-NI2WODa%pE^9
zkG>VNwF~#q>wVnUwbg3!iqy`bB?y?bX?Ol519XESyoPbulcS}6G@48G;I}y|qqMw?
z<g#UtJfh+G3Vb^D)k)0h4OV!&s}?Jo#<VSLuqP|YncZqEsUKE4x3iHWhR~<f`S(7N
z>@ttG7c=tW+DxQ_hsYK@QA9@6qZnp`qP<=0>(UHWIE@YTDp?3Op`+f|0kqB&fdphP
z$6fCKx_vr(YV}vKj7Fm&z#+rp`F=Mt#}w;vH7q|lf^T78^=_E0QlbWm5RFE`oc>;0
zYvbP9F3d5i83gK!eoI^%d>Z<9%-F6Bb;F!oVeA~tI+NT<t-m@kZRyTKY$p)7CPDD}
zr<3BudyU`kZI%;|Y9n8te8^MMiv22$<xPp^Y$0*<pNi?fxz`94(`b2gJ@_=+|NN~+
z^sVnT0eKlVQnbrs#yiikSk8z~<paB8*t443XE3){%34qsyeqc<<d}fMNaG7N42YfQ
za^tRyvX77{_U7oj10l^%NJzg`>!>{6@M6jn>q#Fy;b4K7k&91$WtM$h&3L1Qkj2AX
zCjINuNJWc?$C*4o+gllx!yeqv%|~OnP0MOAiTo<NBlyG6VCgXmoGr8lh~0&e36!&+
zQ!v%_V<j?fGdNj+F*7{{$5@0PClXRP@(}{k+p@pD4V-9VbH@=E0O-@>mYVm}Yl6bC
z_;KEmeE3|-HHo;Fr<LN-C9H-<5_10sH`EK+-t;(*OhyJ-oq32&HDyIZz_fM$O@+#o
zm)~qAKJFaJZq88$s!7+!?AtQmeP!v3`M2wKNA7-x7Q&jgHz#@WGKN~zgBc+gw#D6-
zOi0m0q&`_DCe`F^djj5*GLa}1AX7_8fj}}A&daXC^Z46<qNFroaW3wto+`kB)B#wD
z3iqpaxiIU^bHT~5j9Ivur8%Q<2R9a3Re>6kUFP#Ce@Yo&Sa=JQ^bK1@o1tr4+KJ@t
z(4<t<Ry;o`g^>Sb>>6M@zaf<+WhbVxjJ)G}!1*7NrBO-p-?=Id?b^wOKZV{PnGv={
zJ^z`yn3b>Vl;9MKe3zW8io;Su-800*QuHxcR<C0V6s|Lt$T1QUUi<~`w6?Xl_Ms9w
zr<<)Qfc#<so1rAIIyd+kH?C_UX6mHwdd{<O!>&~rUp(2H`MVsev`W^T{oqM#Yfq9S
zPG~yd-YeU$KhNKAqWsbVi&ZN&Vc}l7<9HldxtoHI+u&k8rr_c?!npibPiCYVVAnjc
z*+m`s;!@7UlI<@P>03C{1ioo}j4D<*HOlYNu9$!Vj;Q=MA{c_%yMNb{kn=+gS8Uxv
zydH~rLxp#WK&75Ow~Kxw7h-F=Nw|}z4zShFlAuE7m5egoU}v$f2itN<!O=eP=bs_P
z#YzzG?Jv@jsh4s=PfLUh5WON_mhuIamvys(-p-lu34`MJ7VEm&bwPZjK2mz&j_o&+
zVeu)EDC)G-=PWek(b2V4=+xSpPoz{PG?CZsruLQl&ZcHx_i}mN!)<TiJ04`Ovr9ky
zl{xNsDS6n)qc$Fcyks3`;}JG!)*r{x#$<h+)o@Vm{Y`Qb<oK&i#2_G!QEKP$3YrR7
zy&byvQDm`X_0+x;1*GKm$n5qTn0J|S9{%!<wHXD;EV@H$R+PJ-blE_xyk2k32~-2=
zC?1x^aJ`_jP2ftL-ce%toq)SDnCW$GN!h6f7FjTVDeLrKz%QME+C^hSXAg3QPE3+a
zKJGVV+#d<OBk4$lx3Avyt191u9xgrHo--nA=BS23KeCk^&kb07KUEHnCb&(WFy;jQ
zDy*FL%3oM_%ooJ-tR^D68f%J8HxXP8*vR+O6^6C7FnW)@1%%3sydXs3k=Ex;%xq7J
zR_Fmgwe(@Sa}%payDN2z_JnO1EajTaE|c|907~qKArL@_L63)l%siPgxJg?z>&yOw
zHgo(~1}`2%Bc%=5b=xkb!B3N7QMVC~-D^p3X5~<9ttODNAH?yLnOPqV5@JW6((H+}
z-sRg#HkDzkdC&5&_=qmy%=2Tjd(L*YW8q;PV7qUZu0jHv$m=L35y#;C%JepQv~fXj
z0t+3<EK<8J<SXuCzs><mew5`%da77K|NO4AT6QQ!i&U95AWf%;lydveSq)FGe{b)X
zfNA`g>Xjvn8d*(3DwM9_gTchLdx%y!Ojp~7ZR|~hU%bWq1VWj{E<^0oMUg7hraHi-
z6XKXKBhp`fsq-ddXk|Dn$(t9}ruMe=7JaB)R*7E3x8q*NB2;8e|5UFcx|y~r0N}f8
z9Uvg9&?^<Hy*#sdwW4PX=t|xjdfnS&zWy?SupuQ9Cnry;i^8>xvEt^`hTP5~rOXx7
znNvn)ws<^JIYviXim_?(E2_DwjzUpz>>c%5*}B3SNVt0dwoyfsnPXFO&o^NqKIJ|E
zH+nA3CZ{#hH035)9{-l$Vkw?m*aqbTF1xc!zja#Q=Ma40QI4RcEw6AluM}TYw6csR
zv6*CmHJ)-rPIT(6Sibb@ggV9=CKT%igmgK~+$54bjHO}a)TP-)8x(cRJv}MDS)Da3
zyIb8RT@Cy83JKfC6?M{9)@R3jv6!K>C^%Sa@RcmnG>TW@4ET@rS1G~Eq>HpBQUaqQ
zewfD+kmFaxn|7Sy+5=&Ad3GG5#9}zX;*ZWgho0iTaaV?nBj!>@n6QpM1SK8f6lIMY
zQJ5cSYyy-;XL2s4BasscdsvMWjMRaACI?iT;7lsbTHUw{8+DJc4$UNB8KqV<@cKVK
z&#|$w;Y+g_Ham`%g=l%-F=&CR$d++RSHDcn!A^ZWNrL&_{tUMA3iMvuz1KJ<Y$qrj
z1kp3iP=Cnpp-?8rRsm-Cz<0hXFe+@>>@{Qqoo=311<1{l`8Tw+!;bcfUz)eRX0Ho#
zAcQ|Pa_8DcFz;jUE?y0@Z#tPjW|1@m0~HxY=RpIq-*A@5j=opXg^bQx#SgIMqcO-E
zKfTTdxERIrU$9K<RvZ%V$Wx0+-j9IGB$02l$<PU--qo1Bj{7KB3tWS=x3@15vfd7A
zNh90ZpJpHRxA-|u=_b*1)S$F_BT>~Lyt9t|NX?200i$V)ZZcET$#5&s@HByWQ@Vmq
zJgyYaUUpW}PO;)BrcM*=|1@{q|7`tTJXUMZnl07V_*Sga7)6cRwTZ1}rFM!M4Pum1
zqb-V>MbRQi5PQ~EG&O3cY7=`zjCj)T^ZXIdPoMkCeSOY7_q@-2f6h7goR1Y8i^WG-
z9P#!sh7uzgd19QWkVM`;X6A(gkJ$+C&?`?|uMCde&jUW{`!R+$z7Xs4r4@V}n*Fsa
z{P71Td%9dLx1#wSH}(WTAlJ7X*2TewfGlS@Q}C@@4`yr-=4H0xt1jTLE)Oc~#5v~)
z6E;5Ym)cfF@-AmKIgj7VKP@@E+{qx#lLhnuY%E;#4O57oK3bLCbIn}k6?ZtJuD+4~
zdQ&P-l!1``VG0Owizcc%(=I%HG2h(K>QltZcO_VB(GoO;R4lkZ?jZYFjz%BGl+(g9
zC8u0wVPpkbP6b^Crv{hoq|2qd=Yf({oAp~5XP_u|$ZAoXI`K{-a;Ov|Y4?CYAV5ZP
zm4f#L!eCR8R37PKRSIr*Y52?m+CgFd!2>x5$xjrf&qjP0?4L-!U2F19u7BRRGVw7J
z#?jLq>EKLH5{cLxeC`^gA7+v!v~MNoDpW5)E7eC0^dQ34W)TUfmx*RRw^dBvL!_)+
z{G2(KL~!5wOH+6rLXrhcO-#&0#)%haZKoS$hlhvbWfsE1!dkEoBoOiB*fu-HoyK&g
z^v<--!_b%N9!VX^6Of^`>d#bs+4*koQda1_7CUL?fRLxdx@QL7KLzsP9h2%oR&!^2
z!mU2+v;?rlll7+FjZchY+`|F&7i4mw1yggsSnd;vqeaGZz;$<_u*eQwL+W$A%y`;)
z4M^G@STDc67<Iu{E(4B~rT5=$a^4G?YSTRGYfm&7un!z^_4~9p5P>($RcvT%Y%D1u
zjfDoV@)ovisw@KSWm=X$b79>Lq^b!{sP)5@Y(4#`gu}Y0c-h}uPZRHNW%gepgZ{Xi
zP`;-lkfikTxPI+e6>%I$tmWoyrAQ4K4Qw%94BRdJr5`KRm2992eJ%xYrD~Ex*`}T<
zjWvfl{B)mCQU$RG(_>@5sfuPH2ziw-wHv=3dhf{HU`*-nO2`T{R%-da=Y*^;Dxwn3
z9`4gprvNb5jp0KsPV2HnhmAI0esyUHqI(YDSiyVb%1<B9&-v8}4my5yo#!(3cs<l-
zq}b}|l=@LmUl3^>YR>C)t%CmJT^HzWPn|!A<(t}<RzDUujtt6S4gD-nmc#_PQ%s6v
z-tf8mRrR>T;c%GE*=5TCJTLTgYW0%XyzZ1T=NkARTek>>Msv&*p8(36kSC-;%#x&J
zhE2@4*=+2T*tNQb8~M!|Vm%uc2Im>l!DLUE=dG9NJU_R-ggiNn|LDBv8-QNY%c7Xc
z?BIM{FzF^^&YA3280l5>HBGxkX15)lQ}sLR>`gQERmXnqKZbP>EMYpj^;TnKPVB_9
z`_^72T3V}#g0g5dnw8SA)|x@n83G|iR-ZqxOA*pHDH{tCmT}zN*k})<3Rhn}i1&H*
z!_4$8n@{Sfz3#F*QpoOh8l~Il1HDzl8o0mPF+%MUb+6O%9aywzQakjpkp=_lM!J-K
zE*(Pdly9ZUcdYngC>080a?Bpxu?D^Fv*QdhtNd8%9mw%H1w+|nFQ>CdC~m%dS$FiU
zl)si*Im!vy6`k?m1ua_3)YKH|NE-FNydUAzWLq&@A)YnvUZ-FtvK&c8*N&tG&?HVh
z&{G-x6#s1WmX_S~4Gzj(b*Dl1G)<JR!A1|TnnbCCz8`0*P0jQoe8Rk1pQnjxw<`xc
zVMy#A?+zQY(2>On6rTV$H|?!<y+Q_OpY@Wvxc6NWIzF=@CX`AT5?h92awAl@sisi#
z^G`C1k*Q8r-No*jSE`-t3=NrNOv=j2{QUf$XBK3{0w;q6b@p)$)pBG5w1Bwyp>Xw@
z)Z3B0-;D)Rg8by4rT01rQVY<?Lrqi#HjiGW0uPz41F0p-2Ghk3LV+C8aN>1{z|Lhq
zjv4#2zZ;`xz`&69^DO=Y{JiF}?j|?fs+669!#s1p2ks!4_U;b2)t(V+3%yZMCzdJN
z5<;u|2)6<mjEYf}hslgZQj)soKD+OP`JgR8Dvp$P{oZcvQERQW-bnHz6u5w<dRYp=
zTGN7C>4hARV?SNAMD#t&seQciQ=PT;3iX>^ROW{d+%6@WtV6S-YYm=n4ok_W+C01@
zZroQ28u~rST%%>wATKkZqrPE+9U-woWt_B7zlLQN)j17mw6spD$x!z&k3QVjTC>q=
zT1}k?8y$ersW^{EBy!l4eFm&d?#Aq*8aI#H&i?YKGVeA78odqGh~6QdpEnnEcLxa*
z`vR3^0-|XB4i&4+rhaaAYL;{xkZ6-8Zc9C1DG9u?m!uN&!0gDz>=3y9$g{*rpFKYI
zb)|)%7O8f6Cu7JpGf6;(G>dod+cE)o9Cnt8`RVM5!~Bz6Z6Yi$D8z;lrIiThSxA0{
zamnh(%+HN^SE}nBUZ3jxDocG)-NV>9=stU!olUvT_~1{QKKA}JskO%0V%eB9YI4T>
zAx)gN0A~{d+%0f_E37NY_~iwVF3s_;6k^|F-`8&WKhTjn!D2{YLrf5fVdcdqlIH=(
zxT)WkRN=3LB>af@w1>wl3nkD@mR~}6+%f%}z(=#Ravj;}rhk^k+-IdvU}vY-SQBl_
zG5A{REt!`5TK1g%l^D<w(F2~Iqp1J)+ySs+h}P9r^lf>Gzjx4tozDG7`b$v(h>o33
z7%`!Lq8753*QfF0jShMc`(W<Fkz4IvP)bw*=DVoxXyDkrYSR+KJa43>L0-V?K1nWm
z%ZEs?wVhoec3^ow_+X`|q-1r8<YcalUjg(`53bHj%X_U{-U!=J`^CL8oHQSQa^$4t
zbwc=_4JAwi;S8Ar68vS~s$C;|r|1dWi)m4yV+#?zN-2&_i5>Gkq1fR|1fDZz=Zo8P
zEMg+kf4@TGO##lb>DB5;p1q}I5b0M=&x{TK#@X3f9M01~H@elAWJny+zT%fd8~E0i
z-JL~-v(^^qm%+(v#6V=y@b`xE{d0CXwtRRm7o`hG)L$3VSX2t*0RE-lp&b}VahsaW
zF3}7$z*-p0);CzJUHCDNN08)rUumpuQUX-;K4!t#=b;6IlL>-oL>)0Q7iqs`U}JYi
zv(4q1>>IZ}m0si~^ry~^XWo@S5kUf~m6g@sZ>aoP>F!MB__GF!whI$CT=}D~8TGdf
zV`RxBNFgZ|e#^U+IicyK;29S+7Y`{4N{X|w*h{PYz2MI$vm%)!05A{uKU-rTS<N-6
zHaS-Qi00BGymSg}5U%xyZLMWTMvdUK5H$e6tL`smI7vf=wba^~^gnjn0ixzlW0%+e
z#LA_P%N2)&x-Fyat{)JFIk9_1UlLruSXG}*?fPh(cN^8#x?By-xco^DVCM6TH~uz(
z69d;fF_}6B7u9oZ5r4ocrkMhzVd0kVs8QDVbC5M6CK}}Y5zoVfl=hV0IvBWy-(3x6
zJPMY)9z1jx9>6wztWA?Oj13CXinAx?W)J?7Ak~kx1PVVaa4^;AE+*fm-f`Y*cNVcp
z-HK{kKJW`6Wzm26KmsCy=>UZ){YhHG45d|~VdEi2Ao_C5LoL`_eAxlTHH4M)r!q@$
zJlgZFFZ^1DU$6?0rDw{xiae;TF6`}(bX&Q#`o+S_vGY}}sQD)swg|&h`H|JIt4X(?
zZe~0N<HB(MJ60Ae2EROk;`8XC>Zni)>Ezj{P>R)^xmA7XZs^VnI3zYDH~^-*f=4(k
zOU#%jXj*y$05Q(cnFR|+ic*5n_`9>*x`{?Mvf9bY2%gE;rYG9i#jC3~K6`N=<NT}0
z>CbPU^HJq`hcM$OHs<m6ZD$asmFGTb*bqFj8bWoqxADcM$dyJj_YrVGPSJLW)Cx^a
zDRj9p2R6{qng#+EYz2v7tNrFU-rCuseC;&AiA`MFEre)|`A`b1wX#t`M>PJ@+<`E%
zV9g%dKnCDa?`JH|nKJ=1cjeNTuY`?5`*?;}E#oh&U!5n~ypg&0uxKA5%Z?D`_TOmF
zrm&9t0b#NZhg=O~c}RGWFVSk$)lz;%D)cn+mxafDo~@065*dlNQ*IX9B>QM`_{8>N
zmtrm{nbq9lj`8>>R(Yq8^Xl2CKawXO;2Ph>1po;ORrM2|kD8Qk=zy5YF;vxW<k^7;
ze}%+zoBZ$t6oT~*wzZVUz=mabih{1nWQ~sZCTT+_ild{Fyh`WM7bD6Sr*oqi1q~nW
z1kJ(@XuETFPt18@6B?X`>Kynde*{XReT-qgUIJ*5gQ1^fS49kv!3}v{9(Bs{^(OQ>
zd*$TY*GUy6)S)g_`xJn7iG;GT1O6wbU}G~&$+g9H_ientLcQj%kou-RF@GHMTd4cJ
z8FcCu8UBSD_WY5gNcQme^GbY`n<)y>twc4JJk;qaFAgdoCOzs(pz~qB2zhvRoE&J*
z3t#ByEU*i#?*+P5KBx0e;9{O&oe1E?wLxA!7rDJb*3+;M(omk8-K|KIh9ji`x|Z#$
zVERKzx6DAKx|Ah8vWUTzyT+<u40KMSV}J<&s9f@yja1C}Jb650{KwRhTh06+oX5_{
za%s!=DJ=Ed*Y0|7r_l19d_P9(!-e6b$oqF}>H1r(;?b`#ZZa~rcB^0ic*?~MlYNG5
zo7yEGJ+mPJ6Q7^%>{%W2DMX2*n<s;WXTas}<EJCK6(yWm9Uhp93>i>ot`d?zTD(2h
zs+I7yL;~YJSwiNtH4_trF~b8WdAvaYfM!Ip7FsDz|IzkPBZ^D*-&?d5JxIwU0N_vB
z$>Dz!QEKF<e|={&+5c7+zrP+zVc+fEixGQiTp+YZ(V%Y6<}5lcg!@<^b*<Cw?8^KN
zRhcSF20()J6{__k8eYDdyIgIX{av}1gCcD4yW0i5=zUgx_`7Lwc*Mvq^Y<HOd6v<C
zU$4aNC<&IqGGSjGD@<|if-AEpGSgB#oeZFY+tZYHg0%V_tUAt#<i{b)rAl8O(8*#i
zPS5!4=9(5VSM#vHn^YK_M;Z&2=+Vld98Sv|$d8u?g<9~3_Jv2~9^ZHq*|sZTs8M>#
zbm}bCMr+e$^Kl2DGQA?jX|V_TYK8edlje@_i}W~ZRO%}Wwa_<m^?--*&Yo{wTX;z-
zNjgt_Jy@Ti-;qh4ClfohS@(zC5~;{$WAzmLLjL-@A7y20lg>MO%HCbsCtiYV#mreb
zdY)=RiVJ(-ompA_atix0AndBr3v#&QLMJv?(ieGac1#J5b=L6lv+q5_ds`;X`>x8Y
z)jRHC#v|Tk+Rl1zuS18njf!15dcNg;;15U``+gKYGT6lgw6`~^?Z%hS<jtAguS)Iu
zgd6+?qX=dc)mTt+TJ^4pr%^&<TEqeNK+=hZU#``|_XI?hE7Z=r9;l`B!;maD_G@_~
zn4Pd*3W?5a?ksSIaOY1qb?|0Gi6d_bVb}u@sU`Y{D_gryseTCqln*|Pvjq9Qe_O#w
zYo>%NWmGg;NP?gtf}>e%^?K^yJ~ioHM#u1%oW1`ny!cmDiTwH<!zL?aIqaAp3{=d#
z$W(B7X&>(}KFO|6%i^jr$%e~VAl^=X{vDr2<m?#oOCu!Fl^wfMjfM&+1Baz?@J%r9
zy2w42PQqh%#pf3kX>maUlP0XWYSqVw;x%b;0}TpeKJn0hH)9RlNxO<I4)@TW@VfrY
zlw6rA=uQl3V6t?ZXepXuD8{90!D20$<FSqm<GX%N)08_DN<wR;KRc}yzsODpMNHi`
z-)TaJqXIaWxA{x*<p2}Oy#Ys%h9M!9lkMdeeJ8r)X>nf|Y;|w%Hoaa)y<lg5bbai7
zWgP`T<=nWnbqsQ3E@5l>`<QUeThTT~H&ky-HIF=mMZxOm7*Op%xUOb#z!wrcu7G<3
z%6vS`F}H=kTm6o3?`^3R&jv4Q>Ed)``&cx*+Oab5gw+-F(nEb1+~qc6a1+dc+NWqT
zfs)lhh8!p+d}`mkH{GYMR(D2RO0j@c(~_Z!3TZSm<Di)sah0XbEmF!^IOv9^XDI$f
z@+pXF-f&XGZ=%Bf=DBG&C#$&7?mWYENy*K(d0-F9@RA|{hrikb5Or$UJ-M>*kmoh-
ziOjpzsg&iU2Lnjb3S`&*3;aF0E=p2J`Tu|`om?*Q-gy=;sn+;c932e<^$InI$o~Mi
CEG{Yl

literal 0
HcmV?d00001

diff --git a/samples/web-app-in-cluster-postgresql/dotnet/scripts/00-variables.sh b/samples/web-app-in-cluster-postgresql/dotnet/scripts/00-variables.sh
new file mode 100644
index 0000000..d896da8
--- /dev/null
+++ b/samples/web-app-in-cluster-postgresql/dotnet/scripts/00-variables.sh
@@ -0,0 +1,51 @@
+# Variables
+
+# Azure Resources
+PREFIX='zeus'
+SUFFIX='test'
+LOCATION='italynorth'
+RESOURCE_GROUP_NAME="${PREFIX}-rg"
+ACR_NAME="${PREFIX,,}acr${SUFFIX,,}"
+ACR_SKU='Standard'
+SUBSCRIPTION_NAME=$(az account show --query name --output tsv)
+SUBSCRIPTION_ID=$(az account show --query id --output tsv)
+TENANT_ID=$(az account show --query tenantId --output tsv)
+CURRENT_DIR="$(cd "$(dirname "$0")" && pwd)"
+
+# In-cluster PostgreSQL (deployed via statefulset.yml)
+PG_PORT='5432'
+PG_USER_NAME='testuser'
+PG_USER_PASSWORD='TestP@ssw0rd123'
+PG_DATABASE_NAME='PlannerDB'
+
+# StatefulSet topology and write/read endpoints (see statefulset.yml).
+# The app does writes, so it must target the primary (write) endpoint.
+PG_STATEFULSET_NAME='pg-postgres'
+PG_PRIMARY_POD='pg-postgres-0'
+PG_PRIMARY_SERVICE='pg-postgres-primary'
+
+# Superuser bootstrap credentials. These MUST match the POSTGRES_PASSWORD in the
+# pg-postgres-secret defined in statefulset.yml — keep both in sync if changed.
+PG_SUPERUSER='postgres'
+PG_SUPERUSER_PASSWORD='SuperStrongPass123'
+
+# Local port used by `kubectl port-forward` to reach the in-cluster DB from the
+# host (scripts 03 and 06).
+PG_LOCAL_PORT='5432'
+
+# Application config — must match the seed-row `username` in 06-create-test-data.sh.
+# PostgreSQL `=` is case-sensitive (unlike SQL Server), so this stays lowercase.
+LOGIN_NAME='paolo'
+
+# Docker Image
+IMAGE_NAME="vacation-planner-postgres-dotnet"
+IMAGE_PULL_POLICY="Always"
+IMAGE_TAG="v1"
+PORT="8080"
+
+# Kubernetes
+NAMESPACE="vacation-planner-postgres"
+DEPLOYMENT_NAME="vacation-planner-postgres"
+SERVICE_NAME="vacation-planner-postgres"
+CONFIGMAP_NAME="vacation-planner-postgres-config"
+K8S_SECRET_NAME="vacation-planner-postgres-secrets"
diff --git a/samples/web-app-in-cluster-postgresql/dotnet/scripts/01-deploy-resources.sh b/samples/web-app-in-cluster-postgresql/dotnet/scripts/01-deploy-resources.sh
new file mode 100755
index 0000000..55b50b8
--- /dev/null
+++ b/samples/web-app-in-cluster-postgresql/dotnet/scripts/01-deploy-resources.sh
@@ -0,0 +1,61 @@
+#!/bin/bash
+
+# Variables
+source ./00-variables.sh
+
+# Change the current directory to the script's directory
+cd "$CURRENT_DIR" || exit
+
+# Create a resource group
+echo "Checking if resource group [$RESOURCE_GROUP_NAME] exists in the subscription [$SUBSCRIPTION_NAME]..."
+az group show --name $RESOURCE_GROUP_NAME &>/dev/null
+
+if [[ $? != 0 ]]; then
+	echo "Creating resource group [$RESOURCE_GROUP_NAME]..."
+	az group create \
+		--name $RESOURCE_GROUP_NAME \
+		--location "$LOCATION" \
+		--only-show-errors 1>/dev/null
+
+	if [[ $? == 0 ]]; then
+		echo "Resource group [$RESOURCE_GROUP_NAME] created."
+	else
+		echo "Failed to create resource group [$RESOURCE_GROUP_NAME]."
+		exit 1
+	fi
+else
+	echo "Resource group [$RESOURCE_GROUP_NAME] already exists."
+fi
+
+# Create the Azure Container Registry
+echo "Checking if [$ACR_NAME] Azure Container Registry exists..."
+az acr show \
+	--name "$ACR_NAME" \
+	--resource-group "$RESOURCE_GROUP_NAME" \
+	--only-show-errors &>/dev/null
+
+if [[ $? != 0 ]]; then
+	echo "Creating Azure Container Registry [$ACR_NAME]..."
+	az acr create \
+		--name "$ACR_NAME" \
+		--resource-group "$RESOURCE_GROUP_NAME" \
+		--location "$LOCATION" \
+		--sku "$ACR_SKU" \
+		--admin-enabled "true" \
+		--only-show-errors 1>/dev/null
+
+	if [ $? -eq 0 ]; then
+		echo "Azure Container Registry [$ACR_NAME] created."
+	else
+		echo "Failed to create Azure Container Registry [$ACR_NAME]."
+		exit 1
+	fi
+else
+	echo "[$ACR_NAME] Azure Container Registry already exists."
+fi
+
+# The PostgreSQL database now runs in-cluster as a StatefulSet (statefulset.yml),
+# deployed by 05-deploy-app.sh. Database provisioning and test data are handled by
+# 06-create-test-data.sh. No Azure managed PostgreSQL resource is created here.
+echo "Resource group and Azure Container Registry are ready."
+echo "Next: build (02) and push (04) the image, deploy the app + in-cluster PostgreSQL (05), then seed data (06)."
diff --git a/samples/web-app-in-cluster-postgresql/dotnet/scripts/02-build-docker-image.sh b/samples/web-app-in-cluster-postgresql/dotnet/scripts/02-build-docker-image.sh
new file mode 100755
index 0000000..4b497d8
--- /dev/null
+++ b/samples/web-app-in-cluster-postgresql/dotnet/scripts/02-build-docker-image.sh
@@ -0,0 +1,18 @@
+#!/bin/bash
+
+# Variables
+source ./00-variables.sh
+
+# Change the current directory to the script's directory
+cd "$CURRENT_DIR" || exit
+
+# Build context: the src/ folder (contains VacationPlanner.csproj, Program.cs, Pages/, Services/, wwwroot/).
+# The Dockerfile lives alongside this script, so we point -f at it explicitly.
+BUILD_CONTEXT="../src"
+
+# Build the docker image
+docker build \
+	-t $IMAGE_NAME:$IMAGE_TAG \
+	-f Dockerfile \
+	--build-arg PORT=$PORT \
+	$BUILD_CONTEXT
diff --git a/samples/web-app-in-cluster-postgresql/dotnet/scripts/03-run-docker-container.sh b/samples/web-app-in-cluster-postgresql/dotnet/scripts/03-run-docker-container.sh
new file mode 100755
index 0000000..f995b89
--- /dev/null
+++ b/samples/web-app-in-cluster-postgresql/dotnet/scripts/03-run-docker-container.sh
@@ -0,0 +1,33 @@
+#!/bin/bash
+
+# Variables
+source ./00-variables.sh
+
+# The database runs in-cluster (statefulset.yml). Reach it from the host by
+# port-forwarding the primary (write) Service to localhost:$PG_LOCAL_PORT.
+# Requires 05-deploy-app.sh (deploys the DB) and 06-create-test-data.sh
+# (creates PlannerDB + testuser) to have run first.
+echo "Port-forwarding svc/$PG_PRIMARY_SERVICE to localhost:$PG_LOCAL_PORT..."
+kubectl port-forward -n "$NAMESPACE" "svc/$PG_PRIMARY_SERVICE" "$PG_LOCAL_PORT:5432" &
+PF_PID=$!
+trap 'kill "$PF_PID" 2>/dev/null' EXIT
+
+# Wait for the forwarded port to accept connections.
+echo "Waiting for PostgreSQL to accept connections on localhost:$PG_LOCAL_PORT..."
+until pg_isready -h localhost -p "$PG_LOCAL_PORT" -U "$PG_USER_NAME" &>/dev/null; do
+	sleep 2
+done
+
+# --network=host so the container reaches the port-forward on the host's loopback.
+docker run -it \
+	--rm \
+	--network=host \
+	-e PORT=$PORT \
+	-e PG_HOST="localhost" \
+	-e PG_PORT="$PG_LOCAL_PORT" \
+	-e PG_DATABASE="$PG_DATABASE_NAME" \
+	-e PG_USER="$PG_USER_NAME" \
+	-e PG_PASSWORD="$PG_USER_PASSWORD" \
+	-e LOGIN_NAME="$LOGIN_NAME" \
+	--name "$IMAGE_NAME" \
+	"$IMAGE_NAME:$IMAGE_TAG"
diff --git a/samples/web-app-in-cluster-postgresql/dotnet/scripts/04-push-docker-image.sh b/samples/web-app-in-cluster-postgresql/dotnet/scripts/04-push-docker-image.sh
new file mode 100755
index 0000000..a1b7518
--- /dev/null
+++ b/samples/web-app-in-cluster-postgresql/dotnet/scripts/04-push-docker-image.sh
@@ -0,0 +1,40 @@
+#!/bin/bash
+
+# Variables
+source ./00-variables.sh
+
+# Login to ACR
+echo "Logging into Azure Container Registry [$ACR_NAME]..."
+az acr login --name $ACR_NAME
+
+# Retrieve ACR login server. Each container image needs to be tagged with the loginServer name of the registry.
+ACR_LOGIN_SERVER=$(az acr show --name $ACR_NAME --query loginServer --output tsv)
+
+if [ $? -eq 0 ]; then
+	echo "Logged into Azure Container Registry [$ACR_NAME] successfully."
+else
+	echo "Failed to log into Azure Container Registry [$ACR_NAME]."
+	exit 1
+fi
+
+FULL_IMAGE="${ACR_LOGIN_SERVER}/${IMAGE_NAME}:${IMAGE_TAG}"
+
+# Tag the local image with the loginServer of ACR
+docker tag ${IMAGE_NAME,,}:$IMAGE_TAG $ACR_LOGIN_SERVER/${IMAGE_NAME,,}:$IMAGE_TAG
+
+if [ $? -eq 0 ]; then
+	echo "Docker image [$IMAGE_NAME] tagged as [$FULL_IMAGE] successfully."
+else
+	echo "Failed to tag Docker image [$IMAGE_NAME] as [$FULL_IMAGE]."
+	exit 1
+fi
+
+# Push the container image to ACR
+docker push $ACR_LOGIN_SERVER/${IMAGE_NAME,,}:$IMAGE_TAG
+
+if [ $? -eq 0 ]; then
+	echo "Docker image [$FULL_IMAGE] pushed to ACR successfully."
+else
+	echo "Failed to push Docker image [$FULL_IMAGE] to ACR."
+	exit 1
+fi
diff --git a/samples/web-app-in-cluster-postgresql/dotnet/scripts/05-deploy-app.sh b/samples/web-app-in-cluster-postgresql/dotnet/scripts/05-deploy-app.sh
new file mode 100755
index 0000000..1541d74
--- /dev/null
+++ b/samples/web-app-in-cluster-postgresql/dotnet/scripts/05-deploy-app.sh
@@ -0,0 +1,282 @@
+#!/bin/bash
+
+# Variables
+source ./00-variables.sh
+
+# Change the current directory to the script's directory
+cd "$CURRENT_DIR" || exit
+
+# Generate a stable SECRET_KEY shared by all replicas: the app derives its Data Protection key ring from it,
+# so antiforgery tokens and flash messages are valid on every replica and survive pod restarts
+SECRET_KEY=$(openssl rand -hex 32)
+
+# Get the login server for the Azure Container Registry
+echo "Getting login server for Azure Container Registry [$ACR_NAME]..."
+ACR_LOGIN_SERVER=$(az acr show \
+	--name "$ACR_NAME" \
+	--resource-group "$RESOURCE_GROUP_NAME" \
+	--query "loginServer" \
+	--output tsv \
+	--only-show-errors)
+
+if [ -n "$ACR_LOGIN_SERVER" ]; then
+	echo "Login server retrieved successfully: $ACR_LOGIN_SERVER"
+else
+	echo "Failed to retrieve login server for Azure Container Registry [$ACR_NAME]."
+	exit 1
+fi
+
+FULL_IMAGE="${ACR_LOGIN_SERVER}/${IMAGE_NAME}:${IMAGE_TAG}"
+
+# Create namespace
+cat namespace.yml |
+yq "(.metadata.name)|="\""$NAMESPACE"\" |
+kubectl apply -f -
+
+# Deploy the in-cluster PostgreSQL StatefulSet (primary + streaming replicas) and its
+# secret/configmap/services. The namespace is injected into every document in the file.
+echo "Deploying in-cluster PostgreSQL StatefulSet [$PG_STATEFULSET_NAME]..."
+cat statefulset.yml |
+yq "(.metadata.namespace)|="\""$NAMESPACE"\" |
+kubectl apply -f -
+
+# Wait for the StatefulSet (primary + replicas) to be ready before deploying the app.
+echo "Waiting for PostgreSQL StatefulSet [$PG_STATEFULSET_NAME] to become ready..."
+kubectl rollout status "statefulset/$PG_STATEFULSET_NAME" -n "$NAMESPACE" --timeout=600s
+
+# ---------------------------------------------------------------------------
+# Provision the application database/role and seed test data in the in-cluster
+# PostgreSQL primary. Done here (before the app Deployment) so the app pods can
+# authenticate as [$PG_USER_NAME] on first start. Connects over a port-forward to
+# the primary (write) Service, so psql must be available on the host machine.
+# ---------------------------------------------------------------------------
+if ! command -v psql &>/dev/null; then
+	echo "psql is not installed on the host. Install the PostgreSQL client (postgresql-client) and re-run."
+	exit 1
+fi
+
+echo "Waiting for PostgreSQL primary pod [$PG_PRIMARY_POD] to be ready..."
+kubectl wait --for=condition=ready "pod/$PG_PRIMARY_POD" -n "$NAMESPACE" --timeout=600s
+
+echo "Port-forwarding svc/$PG_PRIMARY_SERVICE to localhost:$PG_LOCAL_PORT..."
+kubectl port-forward -n "$NAMESPACE" "svc/$PG_PRIMARY_SERVICE" "$PG_LOCAL_PORT:5432" &
+PF_PID=$!
+trap 'kill "$PF_PID" 2>/dev/null' EXIT
+
+echo "Waiting for PostgreSQL to accept connections on localhost:$PG_LOCAL_PORT..."
+until pg_isready -h localhost -p "$PG_LOCAL_PORT" -U "$PG_SUPERUSER" &>/dev/null; do
+	sleep 2
+done
+
+# Create the application database [$PG_DATABASE_NAME]. PostgreSQL has no
+# CREATE DATABASE IF NOT EXISTS, so check for existence first (CREATE DATABASE
+# also cannot run inside a DO block / transaction).
+echo "Creating database [$PG_DATABASE_NAME]..."
+DB_EXISTS=$(PGPASSWORD="$PG_SUPERUSER_PASSWORD" psql \
+	--host=localhost \
+	--port="$PG_LOCAL_PORT" \
+	--username="$PG_SUPERUSER" \
+	--dbname=postgres \
+	--no-password \
+	-tAc "SELECT 1 FROM pg_database WHERE datname = '$PG_DATABASE_NAME';")
+
+if [ "$DB_EXISTS" != "1" ]; then
+	PGPASSWORD="$PG_SUPERUSER_PASSWORD" psql \
+		--host=localhost \
+		--port="$PG_LOCAL_PORT" \
+		--username="$PG_SUPERUSER" \
+		--dbname=postgres \
+		--no-password \
+		--set=ON_ERROR_STOP=on \
+		-c "CREATE DATABASE \"$PG_DATABASE_NAME\";"
+
+	if [ $? -eq 0 ]; then
+		echo "Database [$PG_DATABASE_NAME] created successfully"
+	else
+		echo "Failed to create database [$PG_DATABASE_NAME]"
+		exit 1
+	fi
+else
+	echo "Database [$PG_DATABASE_NAME] already exists"
+fi
+
+# Create the application login [$PG_USER_NAME].
+echo "Creating login [$PG_USER_NAME]..."
+PGPASSWORD="$PG_SUPERUSER_PASSWORD" psql \
+	--host=localhost \
+	--port="$PG_LOCAL_PORT" \
+	--username="$PG_SUPERUSER" \
+	--dbname=postgres \
+	--no-password \
+	--set=ON_ERROR_STOP=on \
+	-c "DO \$\$
+BEGIN
+	IF NOT EXISTS (SELECT 1 FROM pg_roles WHERE rolname = '$PG_USER_NAME') THEN
+		CREATE ROLE \"$PG_USER_NAME\" WITH LOGIN PASSWORD '$PG_USER_PASSWORD';
+	END IF;
+END
+\$\$;"
+
+if [ $? -eq 0 ]; then
+	echo "Login [$PG_USER_NAME] created successfully"
+else
+	echo "Failed to create login [$PG_USER_NAME]"
+	exit 1
+fi
+
+# Grant CONNECT on the database to [$PG_USER_NAME].
+echo "Granting CONNECT on [$PG_DATABASE_NAME] to [$PG_USER_NAME]..."
+PGPASSWORD="$PG_SUPERUSER_PASSWORD" psql \
+	--host=localhost \
+	--port="$PG_LOCAL_PORT" \
+	--username="$PG_SUPERUSER" \
+	--dbname=postgres \
+	--no-password \
+	--set=ON_ERROR_STOP=on \
+	-c "GRANT CONNECT ON DATABASE \"$PG_DATABASE_NAME\" TO \"$PG_USER_NAME\";"
+
+if [ $? -eq 0 ]; then
+	echo "CONNECT granted successfully to [$PG_USER_NAME]"
+else
+	echo "Failed to grant CONNECT to [$PG_USER_NAME]"
+	exit 1
+fi
+
+# Grant schema privileges to [$PG_USER_NAME].
+echo "Granting schema privileges on [$PG_DATABASE_NAME] to [$PG_USER_NAME]..."
+PGPASSWORD="$PG_SUPERUSER_PASSWORD" psql \
+	--host=localhost \
+	--port="$PG_LOCAL_PORT" \
+	--username="$PG_SUPERUSER" \
+	--dbname="$PG_DATABASE_NAME" \
+	--no-password \
+	--set=ON_ERROR_STOP=on \
+	-c "GRANT USAGE, CREATE ON SCHEMA public TO \"$PG_USER_NAME\";
+		ALTER DEFAULT PRIVILEGES IN SCHEMA public GRANT ALL ON TABLES TO \"$PG_USER_NAME\";
+		ALTER DEFAULT PRIVILEGES IN SCHEMA public GRANT ALL ON SEQUENCES TO \"$PG_USER_NAME\";"
+
+if [ $? -eq 0 ]; then
+	echo "Schema privileges granted successfully to [$PG_USER_NAME]"
+else
+	echo "Failed to grant schema privileges to [$PG_USER_NAME]"
+	exit 1
+fi
+
+# Create [activities] table. The app also creates this on startup (init_schema);
+# we create it here too so seeding does not race the application pods.
+echo "Creating [activities] table in the [$PG_DATABASE_NAME] database..."
+PGPASSWORD="$PG_USER_PASSWORD" psql \
+	--host=localhost \
+	--port="$PG_LOCAL_PORT" \
+	--username="$PG_USER_NAME" \
+	--dbname="$PG_DATABASE_NAME" \
+	--no-password \
+	--set=ON_ERROR_STOP=on \
+	-c "CREATE TABLE IF NOT EXISTS activities (
+			id           TEXT PRIMARY KEY,
+			username     TEXT NOT NULL,
+			activity     TEXT NOT NULL,
+			created_at   TIMESTAMPTZ NOT NULL DEFAULT NOW()
+		);
+		CREATE INDEX IF NOT EXISTS idx_activities_username ON activities(username);
+		CREATE INDEX IF NOT EXISTS idx_activities_created_at ON activities(created_at DESC);"
+
+if [ $? -eq 0 ]; then
+	echo "[activities] table created successfully"
+else
+	echo "Failed to create [activities] table"
+	exit 1
+fi
+
+# Insert sample data
+echo "Inserting sample data into [activities] table..."
+PGPASSWORD="$PG_USER_PASSWORD" psql \
+	--host=localhost \
+	--port="$PG_LOCAL_PORT" \
+	--username="$PG_USER_NAME" \
+	--dbname="$PG_DATABASE_NAME" \
+	--no-password \
+	--set=ON_ERROR_STOP=on \
+	-c "INSERT INTO activities (id, username, activity) VALUES
+			(md5('paolo_pisa_seed'), 'paolo', 'Visit the Leaning Tower in Pisa'),
+			(md5('paolo_volterra_seed'), 'paolo', 'Explore Etruscan walls in Volterra'),
+			(md5('paolo_san_gimignano_seed'), 'paolo', 'Climb Torre Grossa in San Gimignano'),
+			(md5('paolo_siena_seed'), 'paolo', 'Walk across Piazza del Campo in Siena'),
+			(md5('paolo_montalcino_seed'), 'paolo', 'Taste Brunello wine in Montalcino'),
+			(md5('paolo_pienza_seed'), 'paolo', 'Sample Pecorino cheese in Pienza'),
+			(md5('paolo_florence_seed'), 'paolo', 'Admire Michelangelo''s David in Florence'),
+			(md5('paolo_viareggio_beach_seed'), 'paolo', 'Relax by the beach in Viareggio'),
+			(md5('paolo_viareggio_promenade_seed'), 'paolo', 'Stroll along the Viareggio promenade')
+		ON CONFLICT (id) DO NOTHING;"
+
+if [ $? -eq 0 ]; then
+	echo "Test data inserted successfully into [activities] table"
+else
+	echo "Failed to insert test data into [activities] table"
+	exit 1
+fi
+
+# Query data
+echo "Querying test data from [activities] table..."
+PGPASSWORD="$PG_USER_PASSWORD" psql \
+	--host=localhost \
+	--port="$PG_LOCAL_PORT" \
+	--username="$PG_USER_NAME" \
+	--dbname="$PG_DATABASE_NAME" \
+	--no-password \
+	-c "SELECT id, username, activity, created_at FROM activities;"
+
+if [ $? -eq 0 ]; then
+	echo "Test data queried successfully from [activities] table"
+else
+	echo "Failed to query test data from [activities] table"
+	exit 1
+fi
+
+# Provisioning done — stop the port-forward before deploying the app.
+kill "$PF_PID" 2>/dev/null
+trap - EXIT
+
+# Create secret with the PostgreSQL password and the SECRET_KEY
+cat secret.yml |
+yq "(.metadata.namespace)|="\""$NAMESPACE"\" |
+yq "(.data.PG_PASSWORD)|="\""$(echo -n $PG_USER_PASSWORD | base64 -w0)"\" |
+yq "(.data.SECRET_KEY)|="\""$(echo -n $SECRET_KEY | base64 -w0)"\" |
+kubectl apply -f -
+
+# Create configmap with environment variables. PG_HOST is the in-cluster write
+# (primary) Service; the app does writes so it must not target a read replica.
+cat configmap.yml |
+yq "(.metadata.namespace)|="\""$NAMESPACE"\" |
+yq "(.data.PG_HOST)|="\""$PG_PRIMARY_SERVICE"\" |
+yq "(.data.PG_PORT)|="\""$PG_PORT"\" |
+yq "(.data.PG_DATABASE)|="\""$PG_DATABASE_NAME"\" |
+yq "(.data.PG_USER)|="\""$PG_USER_NAME"\" |
+yq "(.data.LOGIN_NAME)|="\""$LOGIN_NAME"\" |
+kubectl apply -f -
+
+# Create deployment
+cat deployment.yml |
+yq "(.metadata.namespace)|="\""$NAMESPACE"\" |
+yq "(.spec.template.spec.containers[0].image)|="\""$FULL_IMAGE"\" |
+yq "(.spec.template.spec.containers[0].imagePullPolicy)|="\""$IMAGE_PULL_POLICY"\" |
+yq "(.spec.template.spec.containers[0].ports[0].containerPort)|=$PORT" |
+kubectl apply -f -
+
+# Create service
+cat service.yml |
+yq "(.metadata.namespace)|="\""$NAMESPACE"\" |
+kubectl apply -f -
+
+# Wait for the rollout so a pod stuck in ImagePullBackOff or CrashLoopBackOff is reported here, not discovered later
+echo "Waiting for deployment [$DEPLOYMENT_NAME] to roll out..."
+if kubectl rollout status deployment/$DEPLOYMENT_NAME -n $NAMESPACE --timeout=600s; then
+	echo "Deployment [$DEPLOYMENT_NAME] is ready. To reach the web app, run:"
+	echo "  kubectl port-forward service/$SERVICE_NAME 8080:80 -n $NAMESPACE"
+	echo "and browse to http://localhost:8080 (health: http://localhost:8080/health)."
+else
+	echo "Deployment [$DEPLOYMENT_NAME] did not become ready. Inspect it with:"
+	echo "  kubectl get pods -n $NAMESPACE"
+	echo "  kubectl describe pod -n $NAMESPACE --selector app=$DEPLOYMENT_NAME"
+	exit 1
+fi
diff --git a/samples/web-app-in-cluster-postgresql/dotnet/scripts/Dockerfile b/samples/web-app-in-cluster-postgresql/dotnet/scripts/Dockerfile
new file mode 100644
index 0000000..d862da7
--- /dev/null
+++ b/samples/web-app-in-cluster-postgresql/dotnet/scripts/Dockerfile
@@ -0,0 +1,28 @@
+# Build stage: restore and publish the ASP.NET Core app with the .NET SDK image.
+FROM mcr.microsoft.com/dotnet/sdk:10.0 AS build
+
+WORKDIR /src
+
+# Restore first so the package cache layer is reused when only sources change.
+COPY VacationPlanner.csproj ./
+RUN dotnet restore
+
+COPY . ./
+RUN dotnet publish -c Release -o /app/publish --no-restore
+
+# Runtime stage: the ASP.NET Core runtime image only, no SDK.
+FROM mcr.microsoft.com/dotnet/aspnet:10.0
+
+# Port Kestrel listens on; kept as a build argument (and a runtime variable) as in the Python image.
+ARG PORT=8080
+ENV PORT=${PORT}
+
+WORKDIR /app
+COPY --from=build /app/publish ./
+
+# Run as the runtime image's non-root `app` user, as the Python image runs as its own unprivileged `app` user.
+USER app
+
+EXPOSE ${PORT}
+
+ENTRYPOINT ["dotnet", "VacationPlanner.dll"]
diff --git a/samples/web-app-in-cluster-postgresql/dotnet/scripts/configmap.yml b/samples/web-app-in-cluster-postgresql/dotnet/scripts/configmap.yml
new file mode 100644
index 0000000..6ca91d8
--- /dev/null
+++ b/samples/web-app-in-cluster-postgresql/dotnet/scripts/configmap.yml
@@ -0,0 +1,16 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: vacation-planner-postgres-config
+  namespace: vacation-planner-postgres
+  labels:
+    app: vacation-planner-postgres
+data:
+  # PG_HOST points at the in-cluster primary (write) Service from statefulset.yml.
+  # Values are overwritten by 05-deploy-app.sh at apply time.
+  PG_HOST: "pg-postgres-primary"
+  PG_PORT: "5432"
+  PG_DATABASE: "PlannerDB"
+  PG_USER: "testuser"
+  LOGIN_NAME: "paolo"
+  DEBUG: "false"
diff --git a/samples/web-app-in-cluster-postgresql/dotnet/scripts/deployment.yml b/samples/web-app-in-cluster-postgresql/dotnet/scripts/deployment.yml
new file mode 100644
index 0000000..1f33e69
--- /dev/null
+++ b/samples/web-app-in-cluster-postgresql/dotnet/scripts/deployment.yml
@@ -0,0 +1,96 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: vacation-planner-postgres
+  namespace: vacation-planner-postgres
+  labels:
+    app: vacation-planner-postgres
+spec:
+  replicas: 3
+  selector:
+    matchLabels:
+      app: vacation-planner-postgres
+  strategy:
+    rollingUpdate:
+      maxSurge: 1
+      maxUnavailable: 0
+    type: RollingUpdate
+  minReadySeconds: 5
+  template:
+    metadata:
+      labels:
+        app: vacation-planner-postgres
+    spec:
+      nodeSelector:
+        kubernetes.io/os: linux
+      containers:
+        - name: vacation-planner-postgres
+          image: <your-registry>.azurecr.io/vacation-planner-postgres-dotnet:v1
+          imagePullPolicy: Always
+          ports:
+            - name: http
+              containerPort: 8080
+          env:
+            - name: PG_HOST
+              valueFrom:
+                configMapKeyRef:
+                  name: vacation-planner-postgres-config
+                  key: PG_HOST
+            - name: PG_PORT
+              valueFrom:
+                configMapKeyRef:
+                  name: vacation-planner-postgres-config
+                  key: PG_PORT
+            - name: PG_DATABASE
+              valueFrom:
+                configMapKeyRef:
+                  name: vacation-planner-postgres-config
+                  key: PG_DATABASE
+            - name: PG_USER
+              valueFrom:
+                configMapKeyRef:
+                  name: vacation-planner-postgres-config
+                  key: PG_USER
+            - name: LOGIN_NAME
+              valueFrom:
+                configMapKeyRef:
+                  name: vacation-planner-postgres-config
+                  key: LOGIN_NAME
+            - name: DEBUG
+              valueFrom:
+                configMapKeyRef:
+                  name: vacation-planner-postgres-config
+                  key: DEBUG
+            - name: PG_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: vacation-planner-postgres-secrets
+                  key: PG_PASSWORD
+            - name: SECRET_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: vacation-planner-postgres-secrets
+                  key: SECRET_KEY
+          resources:
+            requests:
+              cpu: "200m"
+              memory: "256Mi"
+            limits:
+              cpu: "1000m"
+              memory: "512Mi"
+          livenessProbe:
+            httpGet:
+              path: /health
+              port: http
+            initialDelaySeconds: 30
+            periodSeconds: 30
+            timeoutSeconds: 5
+            failureThreshold: 3
+          readinessProbe:
+            httpGet:
+              path: /health
+              port: http
+            initialDelaySeconds: 10
+            periodSeconds: 10
+            timeoutSeconds: 3
+            failureThreshold: 3
diff --git a/samples/web-app-in-cluster-postgresql/dotnet/scripts/namespace.yml b/samples/web-app-in-cluster-postgresql/dotnet/scripts/namespace.yml
new file mode 100644
index 0000000..275d4f9
--- /dev/null
+++ b/samples/web-app-in-cluster-postgresql/dotnet/scripts/namespace.yml
@@ -0,0 +1,4 @@
+kind: Namespace
+apiVersion: v1
+metadata:
+  name: vacation-planner-postgres
diff --git a/samples/web-app-in-cluster-postgresql/dotnet/scripts/secret.yml b/samples/web-app-in-cluster-postgresql/dotnet/scripts/secret.yml
new file mode 100644
index 0000000..1c4775b
--- /dev/null
+++ b/samples/web-app-in-cluster-postgresql/dotnet/scripts/secret.yml
@@ -0,0 +1,13 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: vacation-planner-postgres-secrets
+  namespace: vacation-planner-postgres
+  labels:
+    app: vacation-planner-postgres
+type: Opaque
+data:
+  # PG_PASSWORD is the in-cluster `testuser` password; SECRET_KEY is the ASP.NET Core Data Protection
+  # key. Both are base64-injected by 05-deploy-app.sh at apply time.
+  PG_PASSWORD: ""
+  SECRET_KEY: ""
diff --git a/samples/web-app-in-cluster-postgresql/dotnet/scripts/service.yml b/samples/web-app-in-cluster-postgresql/dotnet/scripts/service.yml
new file mode 100644
index 0000000..ec8e47f
--- /dev/null
+++ b/samples/web-app-in-cluster-postgresql/dotnet/scripts/service.yml
@@ -0,0 +1,16 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: vacation-planner-postgres
+  namespace: vacation-planner-postgres
+  labels:
+    app: vacation-planner-postgres
+spec:
+  type: ClusterIP
+  selector:
+    app: vacation-planner-postgres
+  ports:
+    - name: http
+      protocol: TCP
+      port: 80
+      targetPort: http
diff --git a/samples/web-app-in-cluster-postgresql/dotnet/scripts/statefulset.yml b/samples/web-app-in-cluster-postgresql/dotnet/scripts/statefulset.yml
new file mode 100644
index 0000000..667aac6
--- /dev/null
+++ b/samples/web-app-in-cluster-postgresql/dotnet/scripts/statefulset.yml
@@ -0,0 +1,224 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: pg-postgres-secret
+  namespace: vacation-planner-postgres
+type: Opaque
+stringData:
+  POSTGRES_PASSWORD: "SuperStrongPass123"
+  REPL_PASSWORD: "ReplStrongPass123"
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: pg-postgres-scripts
+  namespace: vacation-planner-postgres
+data:
+  # Runs only on the primary (pod-0): the official entrypoint executes
+  # everything in /docker-entrypoint-initdb.d only when it runs initdb,
+  # which happens solely on a fresh primary. Replicas get their data via
+  # pg_basebackup, so their PGDATA is already populated and these are skipped.
+  primary-init.sh: |
+    #!/bin/bash
+    set -euo pipefail
+    ORD="${HOSTNAME##*-}"
+    if [ "$ORD" != "0" ]; then
+      echo "not primary, skipping primary-init"
+      exit 0
+    fi
+    echo "configuring primary for streaming replication"
+    psql -v ON_ERROR_STOP=1 --username "$POSTGRES_USER" --dbname postgres <<EOSQL
+      CREATE ROLE replicator WITH REPLICATION LOGIN PASSWORD '$REPL_PASSWORD';
+      ALTER SYSTEM SET wal_level = replica;
+      ALTER SYSTEM SET max_wal_senders = 10;
+      ALTER SYSTEM SET max_replication_slots = 10;
+      ALTER SYSTEM SET hot_standby = on;
+      ALTER SYSTEM SET wal_keep_size = '512MB';
+    EOSQL
+    echo "host replication replicator 0.0.0.0/0 scram-sha-256" >> "$PGDATA/pg_hba.conf"
+    echo "primary-init done (wal_level applied on the real server start)"
+
+  # Runs as an initContainer on every pod. No-op on the primary and on any
+  # pod whose data dir is already initialized. On a fresh standby it clones
+  # the primary with pg_basebackup and wires up primary_conninfo.
+  replica-init.sh: |
+    #!/bin/bash
+    set -euo pipefail
+    ORD="${HOSTNAME##*-}"
+    if [ "$ORD" = "0" ]; then
+      echo "primary, no basebackup needed"
+      exit 0
+    fi
+    if [ -s "$PGDATA/PG_VERSION" ]; then
+      echo "data dir already initialized, skipping basebackup"
+      exit 0
+    fi
+    echo "waiting for primary pg-postgres-0 to accept connections..."
+    until pg_isready -h pg-postgres-0.pg-postgres-hl -p 5432 -U "$POSTGRES_USER"; do
+      sleep 2
+    done
+    echo "cloning primary via pg_basebackup..."
+    export PGPASSWORD="$REPL_PASSWORD"
+    pg_basebackup -h pg-postgres-0.pg-postgres-hl -p 5432 -U replicator \
+      -D "$PGDATA" -Fp -Xs -R -P
+    # -R already wrote standby.signal + a password-less primary_conninfo.
+    # Append a complete primary_conninfo (last value wins) so the walreceiver
+    # can authenticate.
+    cat >> "$PGDATA/postgresql.auto.conf" <<EOF
+    primary_conninfo = 'host=pg-postgres-0.pg-postgres-hl port=5432 user=replicator password=$REPL_PASSWORD application_name=$HOSTNAME'
+    EOF
+    echo "standby $HOSTNAME initialized"
+---
+# Headless service: stable per-pod DNS (pg-postgres-0.pg-postgres-hl, ...)
+apiVersion: v1
+kind: Service
+metadata:
+  name: pg-postgres-hl
+  namespace: vacation-planner-postgres
+  labels:
+    app: pg-postgres
+spec:
+  clusterIP: None
+  selector:
+    app: pg-postgres
+  ports:
+    - name: postgres
+      port: 5432
+      targetPort: 5432
+---
+# Write endpoint: targets ONLY pod-0 (the primary) via the per-pod label.
+apiVersion: v1
+kind: Service
+metadata:
+  name: pg-postgres-primary
+  namespace: vacation-planner-postgres
+  labels:
+    app: pg-postgres
+    role: primary
+spec:
+  type: ClusterIP
+  selector:
+    app: pg-postgres
+    statefulset.kubernetes.io/pod-name: pg-postgres-0
+  ports:
+    - name: postgres
+      port: 5432
+      targetPort: 5432
+---
+# Read endpoint: round-robins across all pods (primary + standbys).
+apiVersion: v1
+kind: Service
+metadata:
+  name: pg-postgres-read
+  namespace: vacation-planner-postgres
+  labels:
+    app: pg-postgres
+    role: read
+spec:
+  type: ClusterIP
+  selector:
+    app: pg-postgres
+  ports:
+    - name: postgres
+      port: 5432
+      targetPort: 5432
+---
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+  name: pg-postgres
+  namespace: vacation-planner-postgres
+spec:
+  serviceName: pg-postgres-hl
+  replicas: 3
+  podManagementPolicy: OrderedReady   # primary (pod-0) becomes Ready before standbys start
+  selector:
+    matchLabels:
+      app: pg-postgres
+  template:
+    metadata:
+      labels:
+        app: pg-postgres
+    spec:
+      securityContext:
+        runAsUser: 999     # postgres uid in the official image
+        runAsGroup: 999
+        fsGroup: 999       # makes the Azure disk PVC writable by postgres
+      initContainers:
+        - name: init-replica
+          image: postgres:16
+          command: ["/bin/bash", "/scripts/replica-init.sh"]
+          env:
+            - name: PGDATA
+              value: /var/lib/postgresql/data/pgdata
+            - name: POSTGRES_USER
+              value: postgres
+            - name: REPL_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: pg-postgres-secret
+                  key: REPL_PASSWORD
+          volumeMounts:
+            - name: data
+              mountPath: /var/lib/postgresql/data
+            - name: scripts
+              mountPath: /scripts
+      containers:
+        - name: postgres
+          image: postgres:16
+          ports:
+            - name: postgres
+              containerPort: 5432
+          env:
+            - name: POSTGRES_USER
+              value: postgres
+            - name: POSTGRES_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: pg-postgres-secret
+                  key: POSTGRES_PASSWORD
+            - name: REPL_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: pg-postgres-secret
+                  key: REPL_PASSWORD
+            - name: PGDATA
+              value: /var/lib/postgresql/data/pgdata
+          volumeMounts:
+            - name: data
+              mountPath: /var/lib/postgresql/data
+            - name: scripts
+              mountPath: /docker-entrypoint-initdb.d
+          readinessProbe:
+            exec:
+              command: ["bash", "-c", "pg_isready -U postgres -h 127.0.0.1"]
+            initialDelaySeconds: 15
+            periodSeconds: 10
+            timeoutSeconds: 5
+          livenessProbe:
+            exec:
+              command: ["bash", "-c", "pg_isready -U postgres -h 127.0.0.1"]
+            initialDelaySeconds: 30
+            periodSeconds: 15
+            timeoutSeconds: 5
+          resources:
+            requests:
+              cpu: "250m"
+              memory: "256Mi"
+            limits:
+              cpu: "1"
+              memory: "1Gi"
+      volumes:
+        - name: scripts
+          configMap:
+            name: pg-postgres-scripts
+            defaultMode: 0755
+  volumeClaimTemplates:
+    - metadata:
+        name: data
+      spec:
+        accessModes: ["ReadWriteOnce"]
+        storageClassName: managed-csi-premium
+        resources:
+          requests:
+            storage: 20Gi
\ No newline at end of file
diff --git a/samples/web-app-in-cluster-postgresql/dotnet/src/.dockerignore b/samples/web-app-in-cluster-postgresql/dotnet/src/.dockerignore
new file mode 100644
index 0000000..cd42ee3
--- /dev/null
+++ b/samples/web-app-in-cluster-postgresql/dotnet/src/.dockerignore
@@ -0,0 +1,2 @@
+bin/
+obj/
diff --git a/samples/web-app-in-cluster-postgresql/dotnet/src/Models/Activity.cs b/samples/web-app-in-cluster-postgresql/dotnet/src/Models/Activity.cs
new file mode 100644
index 0000000..c39b073
--- /dev/null
+++ b/samples/web-app-in-cluster-postgresql/dotnet/src/Models/Activity.cs
@@ -0,0 +1,4 @@
+namespace VacationPlanner.Models;
+
+/// <summary>A planned vacation activity: the store's identifier plus the free-text description.</summary>
+public sealed record Activity(string Id, string Text);
diff --git a/samples/web-app-in-cluster-postgresql/dotnet/src/Pages/Delete.cshtml b/samples/web-app-in-cluster-postgresql/dotnet/src/Pages/Delete.cshtml
new file mode 100644
index 0000000..386fa85
--- /dev/null
+++ b/samples/web-app-in-cluster-postgresql/dotnet/src/Pages/Delete.cshtml
@@ -0,0 +1,2 @@
+@page "/delete/{id}"
+@model DeleteModel
diff --git a/samples/web-app-in-cluster-postgresql/dotnet/src/Pages/Delete.cshtml.cs b/samples/web-app-in-cluster-postgresql/dotnet/src/Pages/Delete.cshtml.cs
new file mode 100644
index 0000000..6272570
--- /dev/null
+++ b/samples/web-app-in-cluster-postgresql/dotnet/src/Pages/Delete.cshtml.cs
@@ -0,0 +1,22 @@
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Mvc.RazorPages;
+using VacationPlanner.Services;
+
+namespace VacationPlanner.Pages;
+
+/// <summary>Handles <c>POST /delete/{id}</c>; the activity is addressed by its store id, never by its position in the list.</summary>
+public class DeleteModel(IActivityStore store, ILogger<DeleteModel> logger) : PageModel
+{
+    public IActionResult OnGet() => RedirectToPage("/Index");
+
+    public async Task<IActionResult> OnPostAsync(string id, CancellationToken cancellationToken)
+    {
+        if (!string.IsNullOrWhiteSpace(id) && await store.DeleteAsync(id, cancellationToken))
+        {
+            logger.LogInformation("Activity deleted: {Id}", id);
+            TempData["Flash"] = "Activity deleted.";
+        }
+
+        return RedirectToPage("/Index");
+    }
+}
diff --git a/samples/web-app-in-cluster-postgresql/dotnet/src/Pages/Index.cshtml b/samples/web-app-in-cluster-postgresql/dotnet/src/Pages/Index.cshtml
new file mode 100644
index 0000000..bd617e2
--- /dev/null
+++ b/samples/web-app-in-cluster-postgresql/dotnet/src/Pages/Index.cshtml
@@ -0,0 +1,265 @@
+@page
+@model IndexModel
+<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8" />
+  <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+  <title>Vacation Planner</title>
+  <link rel="preconnect" href="https://fonts.googleapis.com" />
+  <link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700&display=swap" rel="stylesheet" />
+  <link rel="stylesheet" href="~/style.css" />
+  <link rel="icon" type="image/x-icon" href="~/favicon.ico" />
+  <script>
+    (function () {
+      try {
+        var dark = localStorage.getItem('vp_dark');
+        if (dark === 'true' || (dark === null && window.matchMedia('(prefers-color-scheme: dark)').matches)) {
+          document.documentElement.dataset.theme = 'dark';
+        }
+      } catch (_) {}
+    })();
+  </script>
+</head>
+<body>
+
+<!-- Header -->
+<header>
+  <div class="header-left">
+    <h1>&#127796; Vacation Planner</h1>
+    <p id="count-label">@Model.Activities.Count activit@(Model.Activities.Count != 1 ? "ies" : "y") planned</p>
+  </div>
+  <div class="header-right">
+    <button id="btn-dark-mode" aria-label="Toggle dark mode" title="Toggle dark mode">
+      <svg id="icon-dark" width="18" height="18" fill="none" stroke="currentColor" stroke-width="2" viewBox="0 0 24 24">
+        <path d="M21 12.79A9 9 0 1111.21 3a7 7 0 009.79 9.79z"/>
+      </svg>
+      <svg id="icon-light" width="18" height="18" fill="none" stroke="currentColor" stroke-width="2" viewBox="0 0 24 24" style="display:none">
+        <circle cx="12" cy="12" r="5"/>
+        <line x1="12" y1="1" x2="12" y2="3"/><line x1="12" y1="21" x2="12" y2="23"/>
+        <line x1="4.22" y1="4.22" x2="5.64" y2="5.64"/><line x1="18.36" y1="18.36" x2="19.78" y2="19.78"/>
+        <line x1="1" y1="12" x2="3" y2="12"/><line x1="21" y1="12" x2="23" y2="12"/>
+        <line x1="4.22" y1="19.78" x2="5.64" y2="18.36"/><line x1="18.36" y1="5.64" x2="19.78" y2="4.22"/>
+      </svg>
+    </button>
+    <button id="btn-add">
+      <svg width="16" height="16" fill="none" stroke="currentColor" stroke-width="2.5" viewBox="0 0 24 24"><line x1="12" y1="5" x2="12" y2="19"/><line x1="5" y1="12" x2="19" y2="12"/></svg>
+      Add Activity
+    </button>
+  </div>
+</header>
+
+<!-- Activity Table -->
+<div class="content">
+  <table id="activity-table">
+    <thead>
+      <tr>
+        <th>Activity</th>
+        <th class="col-actions" colspan="2">Actions</th>
+      </tr>
+    </thead>
+    <tbody>
+      @foreach (var activity in Model.Activities)
+      {
+      <tr data-id="@activity.Id" data-activity="@activity.Text">
+        <td>@activity.Text</td>
+        <td class="col-btn">
+          <button class="btn-edit" title="Edit activity" aria-label="Edit @activity.Text">
+            <svg width="14" height="14" fill="none" stroke="currentColor" stroke-width="2" viewBox="0 0 24 24">
+              <path d="M11 4H4a2 2 0 00-2 2v14a2 2 0 002 2h14a2 2 0 002-2v-7"/>
+              <path d="M18.5 2.5a2.121 2.121 0 013 3L12 15l-4 1 1-4 9.5-9.5z"/>
+            </svg>
+            Edit
+          </button>
+        </td>
+        <td class="col-btn">
+          <form method="post" asp-page="/Delete" asp-route-id="@activity.Id" class="delete-form">
+            <button type="button" class="btn-delete" title="Delete activity" aria-label="Delete @activity.Text">
+              <svg width="14" height="14" fill="none" stroke="currentColor" stroke-width="2" viewBox="0 0 24 24">
+                <polyline points="3 6 5 6 21 6"/><path d="M19 6l-1 14a2 2 0 01-2 2H8a2 2 0 01-2-2L5 6"/>
+                <path d="M10 11v6"/><path d="M14 11v6"/><path d="M9 6V4h6v2"/>
+              </svg>
+              Delete
+            </button>
+          </form>
+        </td>
+      </tr>
+      }
+      @if (Model.Activities.Count == 0)
+      {
+      <tr id="empty-row">
+        <td colspan="3" class="empty-cell">No vacation plans yet — add your first activity!</td>
+      </tr>
+      }
+    </tbody>
+  </table>
+</div>
+
+<!-- Add / Edit Activity Modal -->
+<div id="overlay">
+  <div class="modal" role="dialog" aria-modal="true" aria-labelledby="modal-title">
+    <div class="modal-header">
+      <h2 id="modal-title">&#127796; Add Activity</h2>
+      <button id="btn-close-modal" aria-label="Close">&times;</button>
+    </div>
+    <form id="activity-form" method="post" asp-page="/Index" novalidate>
+      <input type="hidden" id="f-row-id" name="row_id" value="" />
+      <div class="field">
+        <label for="f-activity">Activity <span style="color:#ef4444">*</span></label>
+        <input id="f-activity" name="activity" type="text" placeholder="e.g. Snorkelling at Coral Bay" required />
+      </div>
+    </form>
+    <div class="modal-actions">
+      <button class="btn-secondary" id="btn-cancel">Cancel</button>
+      <button class="btn-primary" id="btn-save">Save Activity</button>
+    </div>
+  </div>
+</div>
+
+<!-- Delete Confirmation Modal -->
+<div id="delete-overlay">
+  <div class="modal" role="dialog" aria-modal="true" aria-labelledby="delete-modal-title">
+    <div class="modal-header">
+      <h2 id="delete-modal-title">&#127796; Delete Activity</h2>
+      <button id="btn-close-delete-modal" aria-label="Close">&times;</button>
+    </div>
+    <div class="modal-body">
+      <p id="delete-confirm-msg">Are you sure you want to delete this activity?</p>
+    </div>
+    <div class="modal-actions">
+      <button class="btn-secondary" id="btn-cancel-delete">Cancel</button>
+      <button class="btn-primary" id="btn-confirm-delete">Delete</button>
+    </div>
+  </div>
+</div>
+
+<!-- Toast -->
+<div id="toast"></div>
+
+<script>
+  // ── Dark mode ────────────────────────────────────────────
+  function applyDark(dark) {
+    document.documentElement.dataset.theme = dark ? 'dark' : '';
+    document.getElementById('icon-dark').style.display  = dark ? 'none' : '';
+    document.getElementById('icon-light').style.display = dark ? ''     : 'none';
+  }
+  (function () {
+    var dark = localStorage.getItem('vp_dark');
+    var isDark = dark === 'true' || (dark === null && window.matchMedia('(prefers-color-scheme: dark)').matches);
+    applyDark(isDark);
+  })();
+  document.getElementById('btn-dark-mode').addEventListener('click', function () {
+    var isDark = document.documentElement.dataset.theme === 'dark';
+    applyDark(!isDark);
+    localStorage.setItem('vp_dark', String(!isDark));
+  });
+
+  // ── Toast ────────────────────────────────────────────────
+  var flashMessages = @Json.Serialize(Model.Flashes);
+  var toastTimer;
+  function showToast(msg) {
+    var el = document.getElementById('toast');
+    el.textContent = msg;
+    el.classList.add('show');
+    clearTimeout(toastTimer);
+    toastTimer = setTimeout(function () { el.classList.remove('show'); }, 2400);
+  }
+  if (flashMessages.length) showToast(flashMessages[0]);
+
+  // ── Activity Modal ───────────────────────────────────────
+  var overlay = document.getElementById('overlay');
+
+  function openActivityModal(data) {
+    var titleEl = document.getElementById('modal-title');
+    var saveEl  = document.getElementById('btn-save');
+    var rowId   = document.getElementById('f-row-id');
+    var input   = document.getElementById('f-activity');
+
+    if (data) {
+      titleEl.textContent = '🌴 Edit Activity';
+      saveEl.textContent  = 'Save Changes';
+      rowId.value         = data.id;
+      input.value         = data.activity;
+    } else {
+      titleEl.textContent = '🌴 Add Activity';
+      saveEl.textContent  = 'Save Activity';
+      rowId.value         = '';
+      input.value         = '';
+    }
+    overlay.classList.add('open');
+    input.focus();
+    var len = input.value.length;
+    input.setSelectionRange(len, len);
+  }
+
+  function closeActivityModal() {
+    overlay.classList.remove('open');
+    document.getElementById('activity-form').reset();
+    document.getElementById('f-row-id').value = '';
+    document.getElementById('modal-title').textContent = '🌴 Add Activity';
+    document.getElementById('btn-save').textContent    = 'Save Activity';
+  }
+
+  document.getElementById('btn-add').addEventListener('click', function () { openActivityModal(null); });
+  document.getElementById('btn-close-modal').addEventListener('click', closeActivityModal);
+  document.getElementById('btn-cancel').addEventListener('click', closeActivityModal);
+  overlay.addEventListener('click', function (e) { if (e.target === overlay) closeActivityModal(); });
+
+  document.getElementById('btn-save').addEventListener('click', function () {
+    var val = document.getElementById('f-activity').value.trim();
+    if (!val) { showToast('Activity cannot be empty.'); return; }
+    document.getElementById('activity-form').submit();
+  });
+
+  document.getElementById('f-activity').addEventListener('keydown', function (e) {
+    if (e.key === 'Enter') { e.preventDefault(); document.getElementById('btn-save').click(); }
+  });
+
+  // Edit buttons on rows
+  document.querySelectorAll('.btn-edit').forEach(function (btn) {
+    btn.addEventListener('click', function () {
+      var row = btn.closest('tr');
+      openActivityModal({ id: row.dataset.id, activity: row.dataset.activity });
+    });
+  });
+
+  // ── Delete confirmation modal ────────────────────────────
+  var deleteOverlay = document.getElementById('delete-overlay');
+  var pendingDeleteForm = null;
+
+  function openDeleteModal(form, activityName) {
+    pendingDeleteForm = form;
+    var msg = document.getElementById('delete-confirm-msg');
+    msg.textContent = 'Are you sure you want to delete "' + activityName + '"?';
+    deleteOverlay.classList.add('open');
+    document.getElementById('btn-confirm-delete').focus();
+  }
+
+  function closeDeleteModal() {
+    deleteOverlay.classList.remove('open');
+    pendingDeleteForm = null;
+  }
+
+  document.querySelectorAll('.btn-delete').forEach(function (btn) {
+    btn.addEventListener('click', function () {
+      var row = btn.closest('tr');
+      var form = btn.closest('form');
+      openDeleteModal(form, row.dataset.activity);
+    });
+  });
+
+  document.getElementById('btn-confirm-delete').addEventListener('click', function () {
+    if (pendingDeleteForm) pendingDeleteForm.submit();
+  });
+
+  document.getElementById('btn-cancel-delete').addEventListener('click', closeDeleteModal);
+  document.getElementById('btn-close-delete-modal').addEventListener('click', closeDeleteModal);
+  deleteOverlay.addEventListener('click', function (e) { if (e.target === deleteOverlay) closeDeleteModal(); });
+
+  // ── Escape closes any open modal ─────────────────────────
+  document.addEventListener('keydown', function (e) {
+    if (e.key === 'Escape') { closeActivityModal(); closeDeleteModal(); }
+  });
+</script>
+</body>
+</html>
diff --git a/samples/web-app-in-cluster-postgresql/dotnet/src/Pages/Index.cshtml.cs b/samples/web-app-in-cluster-postgresql/dotnet/src/Pages/Index.cshtml.cs
new file mode 100644
index 0000000..4a8e59c
--- /dev/null
+++ b/samples/web-app-in-cluster-postgresql/dotnet/src/Pages/Index.cshtml.cs
@@ -0,0 +1,49 @@
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Mvc.RazorPages;
+using VacationPlanner.Models;
+using VacationPlanner.Services;
+
+namespace VacationPlanner.Pages;
+
+public class IndexModel(IActivityStore store, ILogger<IndexModel> logger) : PageModel
+{
+    public IReadOnlyList<Activity> Activities { get; private set; } = [];
+
+    /// <summary>Flash messages set by the previous request (the equivalent of Flask's <c>flash()</c>).</summary>
+    public IReadOnlyList<string> Flashes => TempData["Flash"] is string message ? [message] : [];
+
+    [BindProperty(Name = "activity")]
+    public string? Activity { get; set; }
+
+    [BindProperty(Name = "row_id")]
+    public string? RowId { get; set; }
+
+    public async Task OnGetAsync(CancellationToken cancellationToken)
+    {
+        Activities = await store.ListAsync(cancellationToken);
+    }
+
+    public async Task<IActionResult> OnPostAsync(CancellationToken cancellationToken)
+    {
+        var text = Activity?.Trim();
+        var id = RowId?.Trim();
+        if (!string.IsNullOrEmpty(text))
+        {
+            if (!string.IsNullOrEmpty(id))
+            {
+                if (await store.UpdateAsync(id, text, cancellationToken))
+                {
+                    logger.LogInformation("Activity updated: {Id}", id);
+                    TempData["Flash"] = "Activity updated!";
+                }
+            }
+            else if (await store.AddAsync(text, cancellationToken))
+            {
+                logger.LogInformation("Activity added: {Activity}", text);
+                TempData["Flash"] = "Activity added!";
+            }
+        }
+
+        return RedirectToPage();
+    }
+}
diff --git a/samples/web-app-in-cluster-postgresql/dotnet/src/Pages/_ViewImports.cshtml b/samples/web-app-in-cluster-postgresql/dotnet/src/Pages/_ViewImports.cshtml
new file mode 100644
index 0000000..ec62511
--- /dev/null
+++ b/samples/web-app-in-cluster-postgresql/dotnet/src/Pages/_ViewImports.cshtml
@@ -0,0 +1,4 @@
+@using VacationPlanner
+@using VacationPlanner.Models
+@namespace VacationPlanner.Pages
+@addTagHelper *, Microsoft.AspNetCore.Mvc.TagHelpers
diff --git a/samples/web-app-in-cluster-postgresql/dotnet/src/Program.cs b/samples/web-app-in-cluster-postgresql/dotnet/src/Program.cs
new file mode 100644
index 0000000..35261e6
--- /dev/null
+++ b/samples/web-app-in-cluster-postgresql/dotnet/src/Program.cs
@@ -0,0 +1,69 @@
+using System.Diagnostics;
+using Microsoft.AspNetCore.DataProtection;
+using Microsoft.AspNetCore.DataProtection.KeyManagement;
+using VacationPlanner.Services;
+
+var builder = WebApplication.CreateBuilder(args);
+
+// Listen on PORT (8080 by default), the way the Python image binds gunicorn to 0.0.0.0:${PORT}. HTTP_PORTS is the
+// same setting the aspnet base image feeds through ASPNETCORE_HTTP_PORTS, so no URL override is involved.
+if (Environment.GetEnvironmentVariable("PORT") is { Length: > 0 } port)
+{
+    builder.WebHost.UseSetting(WebHostDefaults.HttpPortsKey, port);
+}
+
+// Read and validate the configuration up front so a misconfigured deployment fails at startup.
+var storeOptions = PostgresOptions.FromEnvironment();
+
+// SECRET_KEY is the Kubernetes Secret the Python sample signs its session cookie with. Deriving the Data Protection
+// key ring from it lets all replicas validate each other's antiforgery tokens and flash cookies; without it (a local
+// docker run) each process keeps its own keys.
+var secretKey = Environment.GetEnvironmentVariable("SECRET_KEY");
+if (!string.IsNullOrEmpty(secretKey))
+{
+    builder.Services.AddDataProtection().DisableAutomaticKeyGeneration();
+    builder.Services.Configure<KeyManagementOptions>(options => options.XmlRepository = new SecretKeyXmlRepository(secretKey));
+}
+
+builder.Services.AddRazorPages();
+builder.Services.AddSingleton<IActivityStore>(sp =>
+    new PostgresActivityStore(storeOptions, sp.GetRequiredService<ILogger<PostgresActivityStore>>()));
+// The Python sample waits up to 30 x 2 s for the database at startup; the same values apply here.
+builder.Services.AddHostedService(sp =>
+    new StoreInitializer(sp.GetRequiredService<IActivityStore>(), sp.GetRequiredService<ILogger<StoreInitializer>>(),
+        attempts: 30, delay: TimeSpan.FromSeconds(2)));
+
+var app = builder.Build();
+
+if (string.IsNullOrEmpty(secretKey))
+{
+    app.Logger.LogWarning("SECRET_KEY is not set: antiforgery tokens and flash messages are only valid on this replica.");
+}
+
+// One log line per request, the equivalent of the access log the Python image produces (its gunicorn
+// command passes --access-logfile -). Kubernetes probes show up here too, exactly as they do for Python.
+var requestLogger = app.Services.GetRequiredService<ILoggerFactory>().CreateLogger("VacationPlanner.Requests");
+app.Use(
+    async (context, next) =>
+    {
+        var started = Stopwatch.GetTimestamp();
+        await next();
+        requestLogger.LogInformation(
+            "{Method} {Path} -> {StatusCode} in {Elapsed:0.0}ms",
+            context.Request.Method,
+            context.Request.Path,
+            context.Response.StatusCode,
+            Stopwatch.GetElapsedTime(started).TotalMilliseconds
+        );
+    }
+);
+
+app.UseStaticFiles();
+app.MapRazorPages();
+
+app.MapGet("/health", async (IActivityStore store, CancellationToken cancellationToken) =>
+    await store.IsHealthyAsync(cancellationToken)
+        ? Results.Json(new { status = "ok" })
+        : Results.Json(new { status = "unavailable" }, statusCode: StatusCodes.Status503ServiceUnavailable));
+
+app.Run();
diff --git a/samples/web-app-in-cluster-postgresql/dotnet/src/Services/ActivityId.cs b/samples/web-app-in-cluster-postgresql/dotnet/src/Services/ActivityId.cs
new file mode 100644
index 0000000..8654aaf
--- /dev/null
+++ b/samples/web-app-in-cluster-postgresql/dotnet/src/Services/ActivityId.cs
@@ -0,0 +1,15 @@
+using System.Security.Cryptography;
+using System.Text;
+
+namespace VacationPlanner.Services;
+
+/// <summary>MD5 of username + activity + timestamp: the id scheme shared by the Vacation Planner samples.</summary>
+public static class ActivityId
+{
+    public static string Create(string username, string activity)
+    {
+        var timestamp = DateTime.Now.ToString("yyyy-MM-ddTHH:mm:ss.ffffff");
+        var hash = MD5.HashData(Encoding.UTF8.GetBytes($"{username}_{activity}_{timestamp}"));
+        return Convert.ToHexStringLower(hash);
+    }
+}
diff --git a/samples/web-app-in-cluster-postgresql/dotnet/src/Services/IActivityStore.cs b/samples/web-app-in-cluster-postgresql/dotnet/src/Services/IActivityStore.cs
new file mode 100644
index 0000000..167993e
--- /dev/null
+++ b/samples/web-app-in-cluster-postgresql/dotnet/src/Services/IActivityStore.cs
@@ -0,0 +1,24 @@
+using VacationPlanner.Models;
+
+namespace VacationPlanner.Services;
+
+/// <summary>Persistence for the planner's activities. Every call goes to the backing store; nothing is cached in-process.</summary>
+public interface IActivityStore
+{
+    /// <summary>Creates whatever the store needs (container, table, collection, directory) before the first request.</summary>
+    Task InitializeAsync(CancellationToken cancellationToken);
+
+    Task<IReadOnlyList<Activity>> ListAsync(CancellationToken cancellationToken);
+
+    /// <summary>Adds an activity and returns whether the store confirmed the write; the page flashes only then.</summary>
+    Task<bool> AddAsync(string text, CancellationToken cancellationToken);
+
+    /// <summary>Updates an activity and returns whether the store reported a change, with the meaning the Python sample's driver gives it.</summary>
+    Task<bool> UpdateAsync(string id, string text, CancellationToken cancellationToken);
+
+    /// <summary>Deletes an activity by its store id and returns whether the store reported a deletion.</summary>
+    Task<bool> DeleteAsync(string id, CancellationToken cancellationToken);
+
+    /// <summary>Cheap connectivity probe used by <c>GET /health</c>.</summary>
+    Task<bool> IsHealthyAsync(CancellationToken cancellationToken);
+}
diff --git a/samples/web-app-in-cluster-postgresql/dotnet/src/Services/PostgresActivityStore.cs b/samples/web-app-in-cluster-postgresql/dotnet/src/Services/PostgresActivityStore.cs
new file mode 100644
index 0000000..bb0bbbb
--- /dev/null
+++ b/samples/web-app-in-cluster-postgresql/dotnet/src/Services/PostgresActivityStore.cs
@@ -0,0 +1,126 @@
+using Npgsql;
+using VacationPlanner.Models;
+
+namespace VacationPlanner.Services;
+
+/// <summary>
+/// Activities in a PostgreSQL <c>activities</c> table. Like the Python sample, the store is low-throughput
+/// and opens a fresh connection per call instead of managing a pool explicitly.
+/// </summary>
+public sealed class PostgresActivityStore(PostgresOptions options, ILogger<PostgresActivityStore> logger) : IActivityStore
+{
+    private const string SchemaDdl = """
+        CREATE TABLE IF NOT EXISTS activities (
+            id           TEXT PRIMARY KEY,
+            username     TEXT NOT NULL,
+            activity     TEXT NOT NULL,
+            created_at   TIMESTAMPTZ NOT NULL DEFAULT NOW()
+        );
+        CREATE INDEX IF NOT EXISTS idx_activities_username ON activities(username);
+        CREATE INDEX IF NOT EXISTS idx_activities_created_at ON activities(created_at DESC);
+        """;
+
+    // Negotiate TLS when the server offers it, without certificate verification (libpq's "prefer", which the
+    // Python sample relies on): the flexible server's certificate is publicly trusted on Azure but self-signed
+    // under LocalStack, and the in-cluster StatefulSet offers no TLS at all. Npgsql only validates certificates
+    // with SslMode VerifyCA/VerifyFull.
+    private readonly string _connectionString = new NpgsqlConnectionStringBuilder
+    {
+        Host = options.Host,
+        Port = options.Port,
+        Username = options.User,
+        Password = options.Password,
+        Database = options.Database,
+        Timeout = 10,
+        SslMode = SslMode.Prefer,
+    }.ConnectionString;
+
+    public async Task InitializeAsync(CancellationToken cancellationToken)
+    {
+        await using var connection = await OpenAsync(cancellationToken);
+        await using var command = new NpgsqlCommand(SchemaDdl, connection);
+        await command.ExecuteNonQueryAsync(cancellationToken);
+        logger.LogInformation("PostgreSQL schema initialized");
+    }
+
+    public async Task<IReadOnlyList<Activity>> ListAsync(CancellationToken cancellationToken)
+    {
+        await using var connection = await OpenAsync(cancellationToken);
+        await using var command = new NpgsqlCommand(
+            "SELECT id, activity FROM activities WHERE username = @username ORDER BY created_at DESC", connection);
+        command.Parameters.AddWithValue("username", options.Username);
+
+        var activities = new List<Activity>();
+        await using var reader = await command.ExecuteReaderAsync(cancellationToken);
+        while (await reader.ReadAsync(cancellationToken))
+        {
+            activities.Add(new Activity(reader.GetString(0), reader.GetString(1)));
+        }
+
+        logger.LogInformation(
+            "Retrieved {Count} activities for user: {Username}",
+            activities.Count,
+            options.Username
+        );
+        return activities;
+    }
+
+    public async Task<bool> AddAsync(string text, CancellationToken cancellationToken)
+    {
+        await using var connection = await OpenAsync(cancellationToken);
+        await using var command = new NpgsqlCommand(
+            "INSERT INTO activities (id, username, activity) VALUES (@id, @username, @activity) ON CONFLICT (id) DO NOTHING",
+            connection);
+        command.Parameters.AddWithValue("id", ActivityId.Create(options.Username, text));
+        command.Parameters.AddWithValue("username", options.Username);
+        command.Parameters.AddWithValue("activity", text);
+        await command.ExecuteNonQueryAsync(cancellationToken);
+        return true;
+    }
+
+    /// <summary>Reports a change when a row matched, as the Python sample's psycopg2 <c>rowcount</c> check does.</summary>
+    public async Task<bool> UpdateAsync(string id, string text, CancellationToken cancellationToken)
+    {
+        await using var connection = await OpenAsync(cancellationToken);
+        await using var command = new NpgsqlCommand("UPDATE activities SET activity = @activity WHERE id = @id", connection);
+        command.Parameters.AddWithValue("activity", text);
+        command.Parameters.AddWithValue("id", id);
+        return await command.ExecuteNonQueryAsync(cancellationToken) > 0;
+    }
+
+    public async Task<bool> DeleteAsync(string id, CancellationToken cancellationToken)
+    {
+        await using var connection = await OpenAsync(cancellationToken);
+        await using var command = new NpgsqlCommand("DELETE FROM activities WHERE id = @id", connection);
+        command.Parameters.AddWithValue("id", id);
+        if (await command.ExecuteNonQueryAsync(cancellationToken) == 0)
+        {
+            logger.LogInformation("Activity '{Id}' did not exist: already deleted.", id);
+        }
+
+        return true;
+    }
+
+    public async Task<bool> IsHealthyAsync(CancellationToken cancellationToken)
+    {
+        try
+        {
+            await using var connection = await OpenAsync(cancellationToken);
+            await using var command = new NpgsqlCommand("SELECT 1", connection);
+            await command.ExecuteScalarAsync(cancellationToken);
+            return true;
+        }
+        catch (Exception ex)
+        {
+            logger.LogWarning(ex, "PostgreSQL health check failed");
+            return false;
+        }
+    }
+
+    private async Task<NpgsqlConnection> OpenAsync(CancellationToken cancellationToken)
+    {
+        var connection = new NpgsqlConnection(_connectionString);
+        await connection.OpenAsync(cancellationToken);
+        return connection;
+    }
+}
diff --git a/samples/web-app-in-cluster-postgresql/dotnet/src/Services/PostgresOptions.cs b/samples/web-app-in-cluster-postgresql/dotnet/src/Services/PostgresOptions.cs
new file mode 100644
index 0000000..cc824d0
--- /dev/null
+++ b/samples/web-app-in-cluster-postgresql/dotnet/src/Services/PostgresOptions.cs
@@ -0,0 +1,28 @@
+namespace VacationPlanner.Services;
+
+/// <summary>Connection settings read from the same environment variables the Python sample uses.</summary>
+public sealed record PostgresOptions(string Host, int Port, string User, string Password, string Database, string Username)
+{
+    public static PostgresOptions FromEnvironment()
+    {
+        var username = Environment.GetEnvironmentVariable("LOGIN_NAME") ?? "paolo";
+        if (string.IsNullOrWhiteSpace(username))
+        {
+            throw new InvalidOperationException("LOGIN_NAME cannot be empty");
+        }
+
+        return new PostgresOptions(
+            Host: Require("PG_HOST"),
+            Port: int.Parse(Environment.GetEnvironmentVariable("PG_PORT") ?? "5432"),
+            User: Require("PG_USER"),
+            Password: Require("PG_PASSWORD"),
+            Database: Environment.GetEnvironmentVariable("PG_DATABASE") ?? "sampledb",
+            Username: username);
+    }
+
+    private static string Require(string name) =>
+        Environment.GetEnvironmentVariable(name) is { Length: > 0 } value
+            ? value
+            : throw new InvalidOperationException(
+                $"Missing required environment variable: {name}. Set PG_HOST, PG_USER, PG_PASSWORD (and optionally PG_PORT, PG_DATABASE).");
+}
diff --git a/samples/web-app-in-cluster-postgresql/dotnet/src/Services/SecretKeyXmlRepository.cs b/samples/web-app-in-cluster-postgresql/dotnet/src/Services/SecretKeyXmlRepository.cs
new file mode 100644
index 0000000..e0cc5bb
--- /dev/null
+++ b/samples/web-app-in-cluster-postgresql/dotnet/src/Services/SecretKeyXmlRepository.cs
@@ -0,0 +1,49 @@
+using System.Security.Cryptography;
+using System.Text;
+using System.Xml.Linq;
+using Microsoft.AspNetCore.DataProtection;
+using Microsoft.AspNetCore.DataProtection.AuthenticatedEncryption.ConfigurationModel;
+using Microsoft.AspNetCore.DataProtection.Repositories;
+
+namespace VacationPlanner.Services;
+
+/// <summary>
+/// A Data Protection key ring derived deterministically from <c>SECRET_KEY</c>, the Kubernetes Secret the Python
+/// sample signs its Flask session cookie with. ASP.NET Core protects its antiforgery tokens and TempData (flash)
+/// cookies with Data Protection instead of a signing key; deriving the one key of the ring from the same secret
+/// lets every replica of the Deployment validate what another replica issued, which the default per-process key
+/// ring cannot offer behind a load balancer.
+/// </summary>
+public sealed class SecretKeyXmlRepository : IXmlRepository
+{
+    private readonly XElement _key;
+
+    public SecretKeyXmlRepository(string secretKey)
+    {
+        var keyMaterial = Encoding.UTF8.GetBytes(secretKey);
+
+        // A 512-bit master key (the size Data Protection generates itself) and a stable key id, both from SECRET_KEY.
+        var masterKey = HKDF.DeriveKey(HashAlgorithmName.SHA256, keyMaterial, 64, info: "VacationPlanner.DataProtection.MasterKey"u8.ToArray());
+        var keyId = new Guid(HKDF.DeriveKey(HashAlgorithmName.SHA256, keyMaterial, 16, info: "VacationPlanner.DataProtection.KeyId"u8.ToArray()));
+
+        // AES-256-CBC + HMACSHA256, the default algorithms, serialized the way the key manager itself serializes a new key.
+        var descriptor = new AuthenticatedEncryptorDescriptor(new AuthenticatedEncryptorConfiguration(), new Secret(masterKey));
+        var serialized = descriptor.ExportToXml();
+
+        _key = new XElement("key",
+            new XAttribute("id", keyId),
+            new XAttribute("version", 1),
+            new XElement("creationDate", new DateTimeOffset(2000, 1, 1, 0, 0, 0, TimeSpan.Zero)),
+            new XElement("activationDate", new DateTimeOffset(2000, 1, 1, 0, 0, 0, TimeSpan.Zero)),
+            new XElement("expirationDate", new DateTimeOffset(2999, 12, 31, 0, 0, 0, TimeSpan.Zero)),
+            new XElement("descriptor",
+                new XAttribute("deserializerType", serialized.DeserializerType.AssemblyQualifiedName!),
+                serialized.SerializedDescriptorElement));
+    }
+
+    public IReadOnlyCollection<XElement> GetAllElements() => [new XElement(_key)];
+
+    /// <summary>Never called: automatic key generation is disabled, so the key manager has nothing to persist.</summary>
+    public void StoreElement(XElement element, string friendlyName) =>
+        throw new NotSupportedException("The key ring is derived from SECRET_KEY and cannot be modified.");
+}
diff --git a/samples/web-app-in-cluster-postgresql/dotnet/src/Services/StoreInitializer.cs b/samples/web-app-in-cluster-postgresql/dotnet/src/Services/StoreInitializer.cs
new file mode 100644
index 0000000..c74eb50
--- /dev/null
+++ b/samples/web-app-in-cluster-postgresql/dotnet/src/Services/StoreInitializer.cs
@@ -0,0 +1,33 @@
+namespace VacationPlanner.Services;
+
+/// <summary>
+/// Runs <see cref="IActivityStore.InitializeAsync"/> at startup with a bounded retry, so the app fails fast
+/// (and the container exits) when the backing service never becomes reachable.
+/// </summary>
+public sealed class StoreInitializer(
+    IActivityStore store,
+    ILogger<StoreInitializer> logger,
+    int attempts = 1,
+    TimeSpan delay = default) : IHostedService
+{
+    public async Task StartAsync(CancellationToken cancellationToken)
+    {
+        for (var attempt = 1; ; attempt++)
+        {
+            try
+            {
+                await store.InitializeAsync(cancellationToken);
+                logger.LogInformation("Activity store initialized after {Attempts} attempt(s).", attempt);
+                return;
+            }
+            catch (Exception ex) when (attempt < attempts && !cancellationToken.IsCancellationRequested)
+            {
+                logger.LogWarning(ex, "Activity store not ready (attempt {Attempt}/{Attempts}); retrying in {Delay}s.",
+                    attempt, attempts, delay.TotalSeconds);
+                await Task.Delay(delay, cancellationToken);
+            }
+        }
+    }
+
+    public Task StopAsync(CancellationToken cancellationToken) => Task.CompletedTask;
+}
diff --git a/samples/web-app-in-cluster-postgresql/dotnet/src/VacationPlanner.csproj b/samples/web-app-in-cluster-postgresql/dotnet/src/VacationPlanner.csproj
new file mode 100644
index 0000000..afa176e
--- /dev/null
+++ b/samples/web-app-in-cluster-postgresql/dotnet/src/VacationPlanner.csproj
@@ -0,0 +1,11 @@
+<Project Sdk="Microsoft.NET.Sdk.Web">
+  <PropertyGroup>
+    <TargetFramework>net10.0</TargetFramework>
+    <Nullable>enable</Nullable>
+    <ImplicitUsings>enable</ImplicitUsings>
+    <RootNamespace>VacationPlanner</RootNamespace>
+  </PropertyGroup>
+  <ItemGroup>
+    <PackageReference Include="Npgsql" Version="10.0.3" />
+  </ItemGroup>
+</Project>
diff --git a/samples/web-app-in-cluster-postgresql/dotnet/src/appsettings.json b/samples/web-app-in-cluster-postgresql/dotnet/src/appsettings.json
new file mode 100644
index 0000000..6e5c6b2
--- /dev/null
+++ b/samples/web-app-in-cluster-postgresql/dotnet/src/appsettings.json
@@ -0,0 +1,16 @@
+{
+  "Logging": {
+    "LogLevel": {
+      "Default": "Information",
+      "Microsoft.AspNetCore": "Warning"
+    },
+    "Console": {
+      "FormatterName": "simple",
+      "FormatterOptions": {
+        "SingleLine": true,
+        "TimestampFormat": "yyyy-MM-dd HH:mm:ss "
+      }
+    }
+  },
+  "AllowedHosts": "*"
+}
diff --git a/samples/web-app-in-cluster-postgresql/dotnet/src/wwwroot/favicon.ico b/samples/web-app-in-cluster-postgresql/dotnet/src/wwwroot/favicon.ico
new file mode 100644
index 0000000000000000000000000000000000000000..5b1d5cf37d81c073dbacd66df3f69d9240359dda
GIT binary patch
literal 36791
zcmagEWmp_d(>6Q{i$hpk0}H_+c#vR=6Wrb1od6-g;x0iFoDJ?0f_tzeIKkZs9^B#M
zdhWm9alG?mrfYhnrmO3ms<R6KKmZy5fdJ1N6p%*-fcMWWQqup)Cnx~W^?VKr{hz#m
z4gj?n0Km!lKiTpH0L0=001Wm&nVJv){y_l%4*#G0g9QL^-~8A9Z-WBc8~`wG0sv8}
z%Cb0^<e1MVao)*EsXrh8(*S~w`n;z;dolw6WW0A$;+j5LR>?|=hE{~(xo1m$5$WOx
zbWKdfscH3)sLJu8Xzj(xu<713Y$3x$OfLQLhNy8}4uYlTL|y(QT@oUE8%0m6*lERg
z1z4=(8HnCaQ${&?+Zzf}>!bD+H;@yHKQSZYu^->grpOP5U0!8&*<K~jn<fjg9|H-E
z7vuwNu@j+x`=G0n*Q#dt(qKRua$cKUdDXg3#V1h^w0U-{V)E8A@9^~u&#`W~sdysM
z*gFit3~HA9y>$!7!B+yIi1l|oaJ(PxauD5x8~L*c^Ib0^4*b-W%Gu<d<%hfSSC8?Q
zcE<Sd=wpl1L8t2UwB3Z?<I;G4w2hJvVtuvZd!=Ic)d*A&pNQie9^*8{R^Hg$D_XNj
z;q9Kf^%PDnpM3qX8Do>9Sovk9&i(=hRu&Fz(W>Lscu7crQLUxrCM;>!e0m{r*JdLi
zX1#U$C?c6~)NA%5PB4y7HQH>;zWNGg*Ey4P&2YQ_)ul&FNMtBeU~#9Paylk8=aUY{
zNBfE9?{iK09V9WWab|*Lq!FiiDKA!9(<sNcn!_(kCmzQwHuA?m+#}-h5|&tyX-ARL
z487U+1pN^ppE5(t%8hhV`n!8?<j#A~VXW;vb>^k%@#WN!qU<{Fj+%hW*|2<vm@N*q
zOAsj>T4pa@@b<H-l4`u@_2#wD^c9zKGq>MiZZMnTL#@zEc1$?Q2pM5i^aK{)@f|5L
zgrL<vR!$YO8oI{3a_r7S=2-D~32n|#zZGdE2X1dgG4VXl<Bmzn2vWarlT8A>8(V|Z
z_P_K+c)0)doEohned9K=)z411+B%JG7yQb^y(oqU*iX!T=Xq{0W%1<+!dPDWy@E9!
zHs7r}y&k4(<WB*SQZC9>A>gj<i;+ACB&1u5l~0z14e#y!Ed1?D@jsrdF7%9A{jn<+
z`f|6@nMScBLwnwKEChHZ2;ZN-JZ#lyD3izYCPtLzOU?$*u?T~-iJDK(3TIf)&U|th
zjk!-2ioCIoUjH_g0R^k?)|LMWoBwG)tnc=^b9cUS;|U}irkN1*o6_#tM}T+I%2HJl
zrosO|p7fvZlK!73t$K@G0{}|X|2!#9%gE7i3h&W+r1|QoY6b%=SJN%ctSSBe9Zi@F
z9__y9xP0ZUr<#<Vs#d8weX@WZGoHGaKdY8-YG_H9q+KE5BD`8vGb(~9E?TD)1CMTO
zObYXz;#O|2Skz$!f2&{MNV=%ww18<|K!S(N*>2{I^^3JZggQ{)fHvVz&W+6pq)3ti
z!9XnJ{b2ma@Ik4GevGVKB5b^sp}QmS@Fj)Q762@%ewgc#XF?g<g3MV69h0lR5K|e7
zS9;wAKEzivr!cQ6zhA#D7YANQ&e9{TL`2i3Ia43Kyz&&m7{djc<K+55Z|TCSJB?lp
z&RMj!yx)o53v04Rfe83AWP%vDNW^&uGPE;?9*_RU5LDlY5`thcP97!$56;HNHp44n
zL~!(8055TJSdIHqaPVWA+$jW!YbuT_u(YpUEHl`9ZIZgE8U=Ly^W(tMt2_2M5Ktd2
zHor2pA#gqB^ryMP41_ch9#qd~VLef$ZkP1N@UW%tlGax+f$+?*DpBZXbUa&;591!I
zjx<avu`oyiR%mmqXH$7o{QgFscmr%&-ap%5Ui(kepw_2#LqK8(2~Rsdyhp!67diO7
zJEjzjc%hc<*L&O};r9r_6i-1m8wJVb(*vUwM2gOrtN6g#^@q9gLVw!JooRXHibPli
zO$~to>6f2_LO=15ljp$_1xD`Q%T-%Hi+CUcHxoLJ%bB8waM({HJ{AthxM&$4xpw>&
z)~qgo;6b1%I+Hx9$;au+f^H5XO#2udviAgAWfwD1>eIbLLwd0hXx=X$eo~*N8(gxX
z(2H!!ey+c2(Q&0JGf~0^pbS`FO7h1qr>93=$E++~b3R>P%D!Fsu-(4WAnqhbaE67a
z_`zwuHr?{KRq(e_<Y7V8KP$sIBK14tPR6ZuooY%Nv;uHT<IHl0nRQp&fjeZzs{?Y6
zq^AATzTICMySsOH#)29s@Jc`aN{{*grPkXByH`Bsh4}oK`}s?<ReX(vR#>1QtJYt!
z^!VX&+eDO0B@7(Yvu=)EFx$1dr}$}`YDCQkEt})^1aD--7vtNGE9<9|-OkIndnP-}
zY9YZ&m}kt!)HE`HHq&_Z>kEG%4gyWlT#s#avp#-*Zms+A>NY(5BMIE|qs>O&$Z)3X
zRS0fk>vlsNVA-?CKmcBaqF=`yzET;uIH$hRV&_r-0oRHNDgczsn|ZiOm+QCHZ*?9D
z{-k0MM44Ynm5d@+Um%dGjym_pWK{AMUw#j|q%IT;aG3{WO#UgWAM3i1L<Qn?Q9(%G
z=GEBJ{n>Aa(KHGX1xH=6DDVRH(*83nISQ^U^IDH)<Q~X0_32dR!$5Iei=##100`!t
zdqfOyR<LW>$8Oj$R#{Q6@CQ0}9^bKGzWQ_LjDUQuy<DKs^rJ}_BA?tlc@1zb)V;TJ
z$Y-QQ2H{Nn?ADI$2~q{1zrKxv(<Z5qLrH!>-WU0W13&+{^7vjRKUJg)-7yo77<Jvx
zdDzwMktB%Fp(8m9rieoVf9i}^FIP*teydH>u0}i@LsSLXC;-wIJ=;!<kJIZzZ1x%&
zwnL)>z-qPYbdPlhVEba-<2@N+Oq8S$ZeKt|HLaA4RAl5qSm#4Pw(bQYGWGpvp?oDC
zG8)(7k`k*cThNyeXsdCD1Ixxe<pJ%&e8OYpV8luOKx1!yeqZ0On0FheM3dImJI>lo
zVHAYCqX%Dod@D%WKdXMmJ!<nXP%mBG`$0>0oQGeWJRH0Bl#A&5vzH47X^_r)1Y#cj
z3A^9ukKWvSqjfI4>2QIu`Vwdde)GGGlhjxWooCSiP3Oldw+<vD<$Hy@Lj}w;<h6<a
zih(hqe^Y_iI?UIU0hXXd%Q+by{?XK1UcY#m*T1%Hc35pPKS(y~MWqsceD}hj^&;bw
zNX3P0g->w0i7zdS4n2C>XI5j-6LNO$Oi-?-O8EZ+@S)HB(EkH`j}ITt0RTPke}G@8
zWA_aBM2{owF6n(d%9M_(<^#%^u=Ro%DFaR71-yGXyt4T+i^;t2S|tbsgJn=SHDae&
z8(noFRGW~fH;*rJy)<+J>EREt3i^n;^lL&DTl{Z=<zHsgqilSSm;G)ntcM^%t7SVY
zepl@t9cS6cIexfnf8x3TbfBv)U`@O$;%4u2xq+cs^&7-OWGR_rKaE`%Q~SoDNe&rm
z2>X?!4)(sdCo=7Z<W$J+C6osqgsVZ_<}kSK7uuCiS4uQwiW&((g6ahaVi~!`sF#gN
zzEq<_Q-c+YzdDTai?#U#aBls5=oC#Ve?kQ&?EV_?)j#}>in%E3<;-}44y`dm{RAC!
z2OpHcxQdt2d5bTdg|y0A)&@ZkVaUg{Dztf>#NjLMYi&|CFb&-*6UMz(*!jfKA!7m(
zY^G@X?y%{?Q+JF8zydJdCB6`kz|Qv}9AX5uFj4B;BL(=erR#o?*6xldMT6y_o%*L$
z4aWr1vYlhZ<jHW&YDz)rplqN@#pO`zjj5>3__LdPbPT%h>+%v{xNAImV2Z@irtaoa
zY@lrgal!sq>A`;UIL2=Qd?g&9!dse&_Aw&^{XmQ6(~cTT!ZadKa1<RVm~3cBMoxDK
zz<xwpuf_vY&X_IK(iApr%Fre>zIF_ByPKaG3D^{)pJ=y>8;sp^2pBAyHtEec817Cf
z#YBe$Bam>k_#o<C-`LP;SXhV^8$1Q((&z@<U{a|q@`-BUG`7?f0oDWI-T}C9jR)p*
z<w7Md6D1q=KhN4^8q8oQ2;1;>{z63qsEDOnD4ED&WINO4dR-El)N~u9CD1vMP4f#A
zle+s!d$7@IX|1hkX$MmwNeJY2)+WNof2oysFZ^;CKd$g!U?=VbJ?6L=?Fd-UtWb%0
zl;q@jbsDvQjys9tI+Wqz(g{@nzC*#Bu5{f*_+|)@bsto14&9N|l;7HbWpXE&d*w1>
z_!xUCB&`-l;~|lBFGY4##<!2<>P9Z4j*p4S*2<m`8CwHCgP0J!BK(PvnlJR2Docmb
zTX)f1wy+Wz`K3KhA`p~@_g2j=!peV^`Sijmted$L7aJ+&*8k8K@=9_k<+85Zi*<2_
z7H4GMoE^K~ybAY4gcKV6u8@Yp_*5IFL#8wL!#<je7e=|Jp2+WhN{{shI`Q72aP;@8
znr3v)99XnIKd;QxcT>{3VP#_Uf7<Q*XBsm3WRfo%%tf)IOlPLk_4){^y!dkcHj2mJ
zL>Odd@W-R|aXK%&XBV6L<J<TJ1ou)|OheCG7sdDK{U$}r#H=JmNB2ovc<;0CE|vk>
zndulWat_+3Bc;q^m;ECMu?R6?N|C%p`irA}$8tl}yGLQSRRb(3%N<Rcgwww$JYMId
z3GG*p<f9=z<NNV#HC~*Z7ClFdspBT&Uzd0KoiJ*~f7iVH^jchM5e$@i$}1w1!Wx0D
zj2~!OC9(ESd+{%(m3zPa`1YY1657}!%bBtixHr4{XnN3om5nu^3}LOGzcLG0wfSwD
zc%|KV@jG0EnlNE+%1p0wyVns527PUA{m2b?@+Bzpz{te%r-keLt@2z-zL}|7#dXWf
ztJ^z`fUVqQKMXEo0e{Qra^HP#i09|%{EVN?I@V^twG-d|*GLlZ^QXEg=V6)3P1<$x
zi^(NhdN@Rs7&pGs?qy=&Y((zr0-$B*1i;Xrn?mq+2dhXH2ewGk-ZI0<QXT4#ezRvS
zuYr5|rwfU^{KFsj^oNmbx(NKU<XUx%K@h@aOCAaC>7wsP6}o~J-&`o9g?O@(rAObK
zP9p&ljnZiWNNC?@R*az*`S#lU&)9>vpLD1fd3;7iW)?bf)ed}-faq8G`Gse%e&Xa#
z+&qubNv<P(-PhvcJ|m6$x+^NCP<?+L6jX@tQc|%rDxglQzu;s#{k}IzT>N2UE6y)R
zSY*ygWZ#AmD5%pzf=7i!Fbp<Gbx^um^hzTp^9Jwa<D#6a7e07tY_A$EIDgED#0JjK
zHOa2!b~RV+zgW|jdFs@CLSOv$EzIFdq$UdrV5?s*VN~yql2K(8UaswxS6b&`wso9C
z2IUTr;R!*qppvi+Km{K6VjBR2M@cfM3*Ac}EeX^WrB9oN`M#sgZq&3=%<zc!ZRf8z
z#tlvl>1h65i1E;XwFTm{N!U`mG|)FMgazD-=B^>rY{g@|36#=Zw|{AGK_|v%(0W8c
zZVvp+7UshJ1;+du?&`GZar2J=n5=j|U^yv;j#RA9oc`!`i4Vq=A$PKnsM}A)@w@WN
zk-eDXfpr{b^3PPeaZriP1stvD#oFLbT#uop37nd}sS8p;>be*>`Hm{{R+c5AdF^|O
zL`~Njkq$ET9}M9H0O2%8^4a99Z?v)Rv!`oMo;2;;czAz&{2t2tBGf9&KO;N=MM;HY
zE}OCnPbm$)SOB+wdcsTxS}-V@m!UPofJEKm&RoQ0PMu9R;5GRdPsOigM^9uhr8N$*
z8ZjOARPCoDS-(+$ddhwt)f9cT_5iI>g;FeNeO3VFhEhJ6M6HRFD@uj6%gTEAG=2h?
zx+yZkhW$Cq`+22geU|Oiy=ghKJFZp(k&rWsj*n9i=fnp7W(tMQ0j^%b>0Brmzz;OV
zL9ZGA>h8SR<~1I9qUg_<$TWs%<KeTu0I8E*x_@xSD|q^MohjUvnTQ<yV|#<;I3MI~
ze?D4W2brymBDvB!AaU;?iwEF}aCxRvj2r3Tqg2AavOee6Nwph{o{584M4>f>aP8ZB
zTXt`9VD;{a5xGtm_XBof5Xc3GU76PVvF-C`r609kA^X2ep+n1U?VUfhvWKRQv&c&B
z)>OzP=*_tX>I+ugZCl?Gmg&yM&E57F&!!e{=vBP^cUpDV84wbBVD%42$`<rDl6!mk
z$mV@cnR1^8dv_qHSYGkVqdT4V|0A^dk7wfiztBbp=_UdIUa<ZzwCU6LcQu^yddl`Y
z_H)spZm@DBtHCCVRr<t5Q%DD{(aGj@nkb;RI^_i=jivLdDjt$b+D;_swUZTDGSKs7
zPtX(;ZkQ^LDfh_Q760*!CN_XcB2d^s;ip@;T@4*<hxX4QP0k;&_d1^|Qn6>>jf#;U
zE+?!U=Xi|XEWN@D2qV6fAZb|xR!@~|vI>PC^iVF|;TfZ<VoFyt_w^Odp{Nk%b%TLZ
z-x4OI(Rzl5=o$@C+-TZ=w@QOLpQ>F@{#g~)l1jnloCw9UU|?iOhmHBiC*0gt5<5}}
z5=^aiMg{l}$e!xXkgpLSiwA}ep#>~evhuO!EyT$V^O@Bkhggr$1gTSfx<u#O+7V2p
z@OD~yIy0myBJB>~MMA>FQuVqTwQ3ettVMGsXTp>$kpMYAd?vd3pm#C+ofbl@0A6wp
z3_|Y(xz1|@0rc-~ZW$YoR_1;ZFw$}QPgt#pR!(gU^}#y;T7`5vEmao>caD3TvmlX@
zK6`)Vhn<$;m)<C^tu@r&GlNli9Zc|okP#{2>KU+TC{iL)3PUf!QNpuES3MiYy&u6v
z${dYuzGx`+$$*Jkw05FkI1KEHffacP`xUa4)Ot17iu)q$M!6G$!?4d+-83;+ChIuF
z40tT&&?0G*>-%B;K*~HN1-k$OFxWd7h<O((P2wJXWVCQ8@>Yb5mjPNoijlN1aUxr=
z`(mq<o*l1-0M*(Og*I3_9D&na_-$0r`>d)G?UDJ5n9wWPo4^#=@@ygom=2?66sr<v
zkc7HhKHW8QC{=i#3E|W2;Z=OZdHQjdSG>|sj>pwQ9Vp^M8Xv9dLo{sPW%pW$;4ej4
z*BrhaziZ$U0XDpzCSN!>W@|tG=A~Hvo#W68I5A!%IuxP~hAo?IJ5{&c9Eo9zgrDs0
zhnc0a0fd;Vg802`oP^=3+1ZI5Cv^el8JcM+SttlwhJS*R)#Uh6KawQ=y|v3aRu7+u
z4(^ILMjPvooQ@WDdaNw0uZLz_^^f2jEY|pefgj7N-Y*C(WgbT*zoK!oIw(CA=9Eo4
z?KaH}{&kthRFQzd#FY|!(VMn0GTu(z2J<?-qgNfXb#jtcP{0yi$vkPlME|Yf8WmFK
z4o81F2n{&z>Ngsli6U&lI<xL5o!TSYh|Uz^v(z72V#iBFn#G)TW0AnXBZOC65*hAw
zDX;ocai?S7cSUfa$}<B1PfWcw_gw66Fd63=SKbsP43-8ECr)IfVDLH~P=at%7&kev
zR(1n-r0CH9{Jyv~c+1We^w_L$?T>el#zho%NX4}+BA|(=pixK<eU6bD8itiBhjpyl
z*zEF)U*x^`7BE4JWG3kLgBV?oGBkF@aTQ;56W^~VJ~KDKQWPH*Kt(Gb#M)pTn$XDc
z47@v7LW>|*n)R94Ayx#ZDnTA!+k~Z&4GDXd{fSBh;=yI|;UF^*Gm>UVJ{=qzJyM}`
zN~S)u;_BZUvFmdjp;oM`5oz;j`l^*n&QQ@w414NOM4bjnUiapn5XZ1@Q1i-Q29X<c
znClyQK5nE$7V)}2a$Sk=RSKLhoQ}UGrsnKNDp1X&>H25h#vgupAFy94OYte~jo?8T
zd*}eKJbNxrUx{sX``M}3nBIp(SddZ{J?$UTw*Z_qW6JjxX!_X2+-~Chqruj(i7jhk
zP|4`0uO8pk<Sfw48WQ_=^`I5?wCFM~_pzvFHH8z8OZUod)AXv?JgNV1o4J(4sEr%f
zU1;R;>#;<J9OLh7BdZ{p;qGlnDqXkt9O^DkvuBr2Pt+gkd>8qCQkto(aELOp&cpZq
z3dFs~?;FmGCq*8L#%wd^OSXhsyMio^iYA#MX#HYv=Zqzq_Hlk%C0ixu$prpgU{FG;
zZlf`PT#7PT!@=!#P-nk>r?>;j7d0B4z24dK<NCdd%j2WN#fizn`x`w=R}mOLxd}%+
zqeeL7rH%&}OoO7V?!P9<FLrb4DZ)!aDsk}xHE&4SswDOGneZwK9iJ^9%lpgLK<9wF
z!AX1|8ay5Ja-k2);35xYxRVv>cBYjN_4#{`R~DZ}5}pd4IC_6GI<7bP1*y#souZ0|
zK6H`h-@FC>N;+f8O2VG6%wt-oiFLuqXpfnQu7^&<^-uq6h3=>S_Hn;^m6`is{4{QJ
z)i?bTBN!XwQ<J>nE0@lYwQilj2=vpNwLZJAt*cV7=8q$qQ3sDbyxWj2yksu@Yf=nQ
zN<DVuN1EKxa&yhB+p14gj1aoE{pdo_wbq3FSKY78-%y}@wwH>+W}TfD9#2j;AB(A_
zLw<QQu3TG&TQ1H1RQsZ=%(6vU7%%&~a6HvyvDr_`KI29G+sTM578&WgDIpG#FWg0|
zzPEWzS<}hVMjiCf3kM;-!w+>-GIhd<`@igfe>5|wO2(N2+s!D3I3IsK+74_#F1X)h
z37#!g09}8dI!@GmpTrekBw#XP=nX7RWH}kQZ_j-JU^Ljpm+`c&TrBg3qBidrPlxtp
zapRtflpMKiFR`T@mA=)S)T@kCp~Ac0ObrUhz)VzzMS`7oq>2hIPFD2{#}3k)9I01M
zDj)ZImQ_joqMa|uULygOgDQdLRySm}A|7PK6@Ot1d#Q_VC(^p#Zx=5Bi1Xj9dgtdi
z*6>dz$Z*7-ZeEj2L?2##>xcDzf~7E^m%ac5cwKGzf<973qn};~aTqCw#u)wxl_AmT
z^(CwP6TRT!sa_QXe~X6srf~K-#1-+|3X(3@u~=(nwd<a<`D(YT9=s!t-uVLfYrkm6
z<Vj*k8vbFR(S$87fl;Sr_V7*6G?K15fbR5XU=+~t#&TG)`<QKImgA)YmXN^{id~ou
zOL*AT*f68Xl6Nq2m_`R8vxT!5FhbL31tZ}V!0$9ImCdtori}LY*-~FupP^Xn)MoSr
zJ+V&hPcU<#J@;T{GHmI!gnL7oD1}Wfe$?5=O2Z!%)NL2LI?qN)S6fCy1p_JFcc}uP
zv{VHRx{VFq78kK_lcm<7z^A^xu3G2chB-gCJhmAPZqX**HU7H(O+XwZXQhlZz-jK*
zqa~e{d!cBkOzmr`@O0TSlqOnGeChGG)8wVl`9zM7?I`p`Coi;zqceDIW(6k9J)Z;|
zPIce-zOjEW7xNkX^OUB!Xb~`-$n<8Tc`gw?sk!GyjY%fW=O$Y@l?g?#dk&wfs;JNb
zoMgqRmU)y5>KN?t-6NkOT@geyN}mCknd`q$qfhfx;9Tc;M)hJa8VKR9)C$DGk${p(
zII&;QxZAJgld;OytF3+yhUh%KxT2OS<BuZ)x;NpU`sG;ME^e%OIrP7)rV=z#UX!pL
zW@SgkH!_tir)E>U?{quN{$lb8Y>it+)9*n5Z8PwDJIx9>sFW8tu8>od-YbdX5?v6!
z%=3NkY$yKSj6is!TOSJ&gl_Bf`^SqoHetMfdd0K|w34Uv4P|?4^m<(Fr61GnTlf+7
z2BrG7->cCPLR1MktXDL}@qvajmBqyoK-Z|NHYu5n(}mzJ<?LHHS%H_<XHS20OfW`|
zt2Vz&I2vX<3Mwe&O|{#PSMue2?+?BgYpH*885mjOK%!+Cxsf>pK|re~>Kc1)GQogq
zG#HHjiaGT^Uia#&=occ)IulDC$w=spu;zEOtDicJMwh{tT3<3P9gv7-Q;wOR-Oh4m
zJPQ<!W8T^D?$DfS?r!?Ds7vx7G<6!Y-o|>4DON>U8Th}2tpqYY1Nq4U7OV#$W+Xgc
zw_nO&{Qzvhh-qZ591UKWJ*6*!sHZ|_e>d0X_J*Jkqt*g_x1eFJlu=bBE@wO9&%4ZP
zJxL_r`;Iu3m)L%iA}iDsz^d!(_Ii^h>!lxBtmBIvgpa}6X+;caio^j5Ji#cHXH{<M
z;AiaoC|cd%^5K?<m^lN6C+>s>yO0-2Q1kZg7Wvf4p3gm}l0mOfV|&qj`~6L}Zp(X|
z&lT-Jab-K8Fd|g_tReprugdGkNHAdPI&7+>J|?nN>*>SGb3+F(Uk>^Ef)I_3ET2ZN
zXZK<<zlqCIGGY&atLixjKY6^Uv8%+@7tp(p!<ejB`f!_`KwGrpb05C*yGwJyTiM{P
z>T5-d>f?us*x0T<qGv9Uyx>jB^d?wt-RE?&E4L1R6neUiW>mo%odultu6<=)p?E2Y
zlz55EG>T02Iyy3|z80k&4M0ZD?#zN@IN#hy4FE8g`k$-23soI-8-COrjM}qrvp)|;
z4)k;STB85@$GN^Xj`voW4+#)aJ0E0p&8yI8<ir+-v*|bQ^~cAs7ksul9I>oZ)z`5C
zL-m;xZNfP^k83d|?^+q{&cesg-r&*Dx^p<+9dTQoYnASpjhChBSA;3xH_?F%7%PYM
zQYwX>^8?Z95|+uwCyeup3tK?jX4or+q=B83j6;u;0wQk1%{j*g$a#1W?_T$2mP~Vo
z$>0{@+EFugs8|{qi5!v4m>lEaw%x~FU3J8NH`Im(Pqf@#1?!`wMRu`q=<H-gXR8FE
z74T0=ZN6W+zBBpVRUvx1ZJ<o1lIcin>_MQ&hjr)&eEKoYrOA>?0w7#{hTjc5G1I7)
z(0iacs!A!7je^GPN<%F_<~?@dRm$OTsiY)Fk$|AsttwGj0`xRsK>n{y5ZBwWc@m%?
zMI-0^Z&C)81;y1`F6(2GMv|3ed){n(+$`RpBZ>Nf=Eoe_r#(5lQwnTfHG;3dc-}h1
zzKGQhQa7$UW)8n61a428eQztMN0jFR%P0M^RW?2P#XinkNi1$r1|mrf@{Sh(Vs(X|
zoQxJ?PD+11dEJTm7jvwQdXpslKXOdib3g3=a?CP2w`Bkz*#2LRIc4CNn5C8al<jf+
z&~fC;u-W&D29h`+Wkw{9{_gE+mDJ3XRpSTkPhL81$o2Aa!NR@uALflFS;UQlQ49uI
zXh1vV-=y%Cru2CdzpyeJz5&s+NiNgP`JQjw9kts$UAHju{1X0vlz&vZmr;7uk#Kf5
za<g>Sq;&l%MFM09hSLfIhPPoFHqB*1CeR)9am7do^e)P>T;cu?#nJMGzQ5x$3`)Dk
zRY@lo^l%NTq7WMeo)%&^%cCFL<mnY~Iu5R*EZ>Ak`N+dv#C#XxkC7ASDXHMGjmy*o
zfF=_>TKZa=RXG5cxjFUCYb$BjT3A-3sy$u^GFTC_02>+jxXvF_$Z@fFGe7#gi0rx)
zEn{?ks0nc2gOqF?orc!67+2)vJ1Phx8ur=&2{4sKHLYCgWOxcX)c7bMpM1ILA?I-F
z#BjY5fZaHA0#ezs9I8z48IZ6Cg(am29U<(-39;m1Ek<fN#hCn!1kZ=IB+5|^Km(yD
z4e?!4lxaU&pS=`XCdCT10Krd}R$rwWyY_t7-UuE`jbm*kdoZAyO~QT<Ucn*qqC)9i
zHH^_7)+4aIi7q%G06rl35#XVtBLx9SwDKumE4)wJ>dw0_ygM${zXI&>t1k$UOqr5M
z2$fw1&vm}wyQafOh>lfgC5WMDKLU^%LM-dLo(_I3ymzi*74>}eMs;zWs1B=0+KV1p
z6x1DC%`F9>A#sU+qOHj@oA+TH1HEEyo@vX+%56ETH+tnJ(F07TjvDcMN82`LMT+)>
z??6E7;N_V%Jg_-j;9;L2C{h@C)ue9fUw7_eU3<oHxCB@VZ*hI!CU<lwvz-Jth}=U3
zi345}tRAjGXl_DmDkNphU|I~pfk=tlhQpM#L7g-7r{=Wo-P;W>wFqe>D^>a7d?1*V
zYmClF2c^FAADQ8^+Ai&Oh2a;9K#)45S3Fb-3PB>I_`vVbQY|rM6{9nxN9EP=s3{A2
zE&x(7v5-8dKp!WSV*DqcY%W<-yW&#*$cQ97!v5Ho?0x9##T)Ota;jlNb~u8ITeBJ;
z)dGjxFUCukZ!Z?%m~a@cR_G!T%B=juYmGo#_3F}ZYh=I7_1mlBKQg($X(r+NCF9cf
z%IX#`EDa$UUVf_sZkkD~c$k|pSrI%Jx)GjSj_<j%gMS<VA+|XbszpTDP^M&+!k@U=
z{l2&l{mp!-0Ctr!eaSud?T!_+Ou<`fu%6V|JC;bEA2rD*E1?Js8s|1uS9CheEL}9a
zhh>dWU4`2lbuPu1mcUQ5SEI6#kXSr}rYQxMvPd<ldB{50nBT~$TA-`h;|xhHE1<x{
zxQ73Y#6&{sBuG)wdms#)s`6N@wAKM4W8E4#mLypVED{tm6^qxcx6cWETlCxfaN158
z0AUC!D@Jd%ojN#1)tl1OFqVW$$Z|-OmXFDuMalif>RG0gNYXY%3i<q*n3tcw2aGDk
z>nO|`jQPy{T*1^EFu0uXP2-Mbzh7eQ<GujptqGe-0q!V&b7&9pi0Yo`ZPiT_SvuHY
zFmPYJQhvX7F!}BcFFP8O6>F|L4v(ZAN+oZKx@lEd#rj(I7rI(oXXm_2=0jEamwZoa
zc=S?G@JW4LPFH~^qANO4^I#v`(%5FQL_y?t%ZT}d6WEho%G<X#DUx`s^-1Ig<8}2{
zVRk!14v`9|B{0M#XujjQ;-e1;vSy@fF;L`{mSUKt1#yuN2_KYB=T=0*(;W~PB_}0P
z&~*^}4J!f5Y?<G*!PCtYE1#$u6Je7soBS(wE?##=NX@_P<l+*kfZ{rP8TC^R(4(06
zsfNpBwWgeqUv#y$Oor_V&e<|oef!N|dXb}zDH0?y0)O7}-Ja39CxRExlpt`wXORD1
z<JocFPto>rS#rMk=_P&vd@gs7!7SxxpG#fT_pc~!s(y;(dWN-WngL);<Dgb&x!yL2
z`&=uS%~e~jEs^)9tmYH>OXLuo53lSfgjA&P8`3x)4@I!H3B?*uj<JkTSn?uk*@EJ)
zP25>+a+k$c-#h!7>R`N4PHV=&_k!)IO(wd27WEwsrmeljXO%Fll}*1*%S3~CV5Xvq
z`@*1nI31A`aXjIXkzLjXai!S3xT0+zH?*21l&=W=9A5$0$!bX?llOx=o#_r3eWH}s
z!?NYbQ4x{wlCKAq$_Nas<#7rmso9skRhGgw8Q4)Iv$K*}D!(eaeR1>Qbbss>3;8?T
zhJVMIP{)uaph9urGIWWz$(?(bSP2Re4^6*HVptxc=<`k__rCrnpfT$XUK(yPRUuYx
zn@!w!${`B84J^7)Qlp|irNs(~wZEdO(L#$9fW&E$kOl*xq&b99y58M;`+OqFqdQuJ
zFL8d1Q&3k1(<0bm4Z}a{d)EUjCA`cER~V!weO&1v3dX&@9p@L?S$<401;3!SPF}@X
zZ~3zvcC#p|*%z@_J5-hf*4}Z|q@-6te-sw|Dk*TJF<xvU7Kff7y<{<p+hPZr<KyG;
zd=YBY`5(P=@<)Ce`OXAWhYxS}l%5hqVxu6Th6Qz7`Fm^{ow%iZ4@3W^WJ=(ZpFX&C
zn)Btd-SyI2S>Z!O#sT9|``?dSQ*V$yE{3vDe5s85?-yoK!K`faJ$mp+(m}`h`b4g3
zOjXfD=P_D{z2l7|217+#q>oct#r5N#vP0Gt{=<W$bU$J4N+)O`ly6PGaBtz;oL+H#
z_BYPG*u{q{4xVQdO2QmOTX(<U8nr&M=!%YNFE#4nDVC7Y<|i2#MM8VsUjm+vBJ-I2
zD2Vv^)Rm^c6VRT<UgX;Bl2dsetaqJ0Pb7_oSF_pvRrld|L3JbfRB!P82vGAfxC3#3
z!J@~~W9Ca;NP#MoYll#^cJ;^8xri#GC*~dh5re0}nz_H-(PKa7J=DES^AxI@T-Msm
zYyV<}t-VdKkU+#&e!5@k+~HRJ=u)P-A**5J%Xz!;?ctxd&ZD`JXs%B9bvh?H;`^y1
zudYL+_eawK<@u+Bvu4IBBXV_{;__D8THSLsn@voV|6V=KwsNiM`xF%BHs`NJ#!whp
zKuku30g}r4wFf7-fdZ2oU!JQzytXuJ(T{HrY<@8KYpZ(^+aAc_N80p(CFrY~5=7k}
zwsRI-Ms4z$+(%k$KH|SR+VAT+Y8SZv5i@(WzjAuyG#YihpS`diECzxfeGHg=d=5lP
zc-;TP)#!z!slk~Q^Xxk&bTq{hQe&AB(8T#VK9D9DxXtN6h6U^~UpCzzl34c*vQXTe
zyesa=fu&&#{cAWlO{khbH+eSI=v*u*u>A4p=Cx4HBhls4rJ(5d2kDf{qp$=5rb;6Z
z2D;oPN?_>ktWaM4R8)oP&)qjO&iCS!gXYIpt#%XgmICNV=3jgun^{&@xi<C|Xge>p
zz8caL19IV0XdxAXQw+-Fv`RsoJ<Rz6r7bFz5BEg_qpeTEf1WYNz(H2caL?ZtVJM&0
zWl9VYZwpZ{cQ-~X=yRaJ>2<laH6)|^s0^4k&-2Uq9Hsl%YoqSp{<MEHiH{CF1|wz7
zQbh2mau~&<!Im_I2L~ddQWoC2sA0Y771IrS&bqDkfA;=Us=+Y(^Uu}^Y@7;%t2D<y
znc^A*o_sMi?Knzx)?fXXg`Gw26cxqxhpt2)>NDp{b<a24lxt@#&X#;H#x62f<R1AS
z;c*Yz*;AO3Y~oU(QJJw{^nkHB-`RQ@WO&}l&#h;OqA~rdL@C~X<&Re@o;*GkbZvlZ
z(zw>}JP_1PAAAA<;POz?_x3*ifwAq5QZdjbLUCV!LPI$>;&ZYxo#i)t@OG0URyGQt
zmO?$Vx7YUXFG*nSfYxHJ-@bPVtdyK92_{9xfTRQhHgOYPx}ARXZm~7psM9;aSdNa(
zOp9!SmU|hx?<<R42aRsEo|P4s+oXx%LupZtVrdyem-P2N3$7pzH1CiEcDRFR%mYY(
zq1pNIu~Gsr8FrnYyY>8zAKt`2Y|%2+uJf`HqvM%|WhPMa(*k~t(?4b1B3=-3p5l4v
zdUw^CHPo)Wj;~@Oj_I&);B{xG8fF9_`!Ce=QIt%i03JE!zfkyZ>k(8qy#l$KSZa=W
z!Z4Bh?YI_2ZiALz+>12v2&15P@kkz0z@9_2sqyOvQXVavNC<%-Yp!wKUa8UZv?edb
zK>_xy9q9o?*TI-Lz$YW;0O9F<+w1?}`8QR^ZFO!(1qE1abds<Nety2l@#ERhyjG_6
z0R5fI^VkE1`W-!LeOY*QO<wh#n_L!)!SRt;8F4IEj8~OL%_jrTlU_D^{4dR3i|6IC
zj`2ce29Lm`iLwe@AgEf~Y=eb+s6^iz34lhEzgnUBW;I7_FsrvZV-VQF%|3Tkr{-a_
z4wh)&&5Gz0%0r=iL0sTlVZ#BbM(UgT=1)(su`ThnOZN7`R(-y`ywQ7rg6VKB<h0`<
z($8;gom5IO?~U%ho(kJDnhc9GgaYCX!z(hl0oE3|b-Go&pS+p;x<!G%e<M-r-xi?`
ztiHADl5`E&3gLG;Sl|n!h}&WJI-^xbriDXFjB$wYe0F|nTg(ciPkhL-e>>eir4lZy
z?R0IX-ms63Pgkch3j+GsV{y8m82G9Ef2ReL-<0V$i23?#6&>>%##hzq-`N#kU;28C
z^ZKLyxO@+;tVEyJ|CIigC|!?-%W9d~>F`+4ix@zt3KaQazchFSg1z`a22YUAR?E`H
z>bHw$2aP2cCHcv|KH>VLV3-%>^7iwvRgv;VrN%sTKuLwGDj5eaNG{e~>qtZZ1<1Qu
zh{u4x#S{Cs{)+@?Q}y$^H$*50|9ecu!-e6ISn>+(Q~TQX-I`D<$oBV5jWP0xJhf9F
z5JY-F9Ky0fVC{w4hDLjOn{v5vwxAHRnpNp9J}^YM7lcp^zm<ixg9wPzv?W#f&V4A)
z6{+XitM*C?S_sQq!Izz)uMf5D9hEUeYzwVIM)mgZ<haag{zBQ&-zd<I?>Wqf<sOfC
z)ap83mz1ILO}D)F$tAw5r+TE7e=WZL>#!`=8q`NC3_j;{n)lwyCJ`&=HA)oVU^Ytr
zR_oFGNHO3(U~BaHg+R^W+=h_?F*22DzIc{?i4U5~>sPgMNd?rv>42$O-0#1;t~wbn
zkpG$uLxUqCdB~*MKQZc<H14KLe1#EQJb2X;>a>aRRB1x4F4VV%k(rJcB2GK}OWJ&4
z>&v3OshD&pvh?aMjj{Tp)n{-f;Whlgkb)Ug`(3u@qGRiq$T&s6>Z=5ZVjjh+?(3|N
zm(r(np-}5S(s?o^mwBI^HHMdPwbzLEYw+`c_PPEetHLzBI{Dx42f7jWuL|6*LURH%
z2f26H1fGlrI_oxiP5V7DGBTr5%9dWc{~H0Vix1^+2O-0&8mo3nxV2?vpVNj%<=SHR
zEhDVXa_klCAc6hPtLrHP`HhQ3nWXzz-g^2%jvPLZx0-&f1UuhV*xHm<vqR7kgvb@D
z%*BF=B#8|IjN<*m)_e5KjQ5DjmRUa<V&Q1K=op+|N#fpmNpu(=lOTYrscA+gUPB{|
zql;uiJI>oo=64D{=)l<2#T}#g<nQsDkH#YZO(>~NS-wj&V<F1`y>e0|CItlwLFvvz
zA(Qm}pys9|T{u(w!H!6q$G_>qpidr&z50|D_iJ)B>}uYd;!x7&egTnk>q}2dIl(Ha
zZ0s)Fwtx3`MO1<JlLFXn+#rIp)v3{pNbU@L#x0*w1-IMjO(T2i&T<0<N~*^JB|p$X
zrHgwWmb4v|0r?L1W2m2>8vbcfbCee!Rw~BVSP(M`Jd`(ISarU2HNGTCe}ozz-hy5-
zriF--@{foJW{O@MJ!>Y0h^iBH(POkCqtUpV{+rPHK!}+UCvNg)83UF#qKv}(h?N*6
zzfsF49xv?+=zh5*h2(tv5uuOdAyKIA2IjQGAp)!R!|Rnd0;lt0gQl(dpCMkz-DC4G
zsgZt;RAsODR|?O_^}+X>m$o^ASd?JMm(M>8v$_`at!-cTGW=WaFs2YLooK?M%=g?m
zi;kAQ%4~Ic%a0urh5^+W6)?IHkWpu$VNP9T(YmG!^1+3Vao6LRKXiD8fABJQx10d|
z+&P00ij#RLc`&R>B3miI87lFV(}Ra5OC_C?Fr~U)&p{>@p11+Fbg@8no*(Z}5UPNN
zP4U9N3kT~m&TF4vE$2Tp4i89<BVIBl5r;N)c5bpFKL`PUL8CGYko+5@VBdbdxg|nf
zSKTqc-00o;3UB@UUM7{Fp+aaR5JXxC4Ssmg3Lr{bWP&8$*9qbS24}u?f%+Hxpg&|&
zy}o}Id(8~=fvGt*O~~YIE~x8`71GoSf6Z=1AQO8@AMhk*1UvODVsaPxvoUCZ<k1gv
zd`VI1*c@w#0MECh6%fvn){L*}LkJ^K{R@Bp0cxroqL4VhhC1YN+X0iTuEv`LiU;6-
zba|0v1@_^LNF)QUQ}%J_VV<N2eI-6*$@02n#^iob$V=P2T=KqX04FFclG-tHx_osA
zS{atQ_AOb8#|8BK-|TOLo;3U{0KwEgl<p?Eh`b-oeAo))i*_>L8~gf>wcYO6I4kn{
ze9LK?3ICJM`wlYaYMlfIhrp1#tOFGLIG3B7H(xq=Ca+VjzD>qtrE}>|1xRRgN@C#6
zCMi@IyRYC<9gOT~?V#%ztT^Aa-}`(h;a1@=u+H*5Ta;S7q2e|HGfG5$|1s!h-s$}d
zIidQ=zb4S=5trD`ZOR#n`|kfi55k}O;r~Yu_K2Dd0su?Y|LDO(f8R7Ct<+<e%J$J_
zNt}0ZFcOU!egSP<hBg^C5taF$IP^;Ya)Y(fzkW~_OCYDA<7%lT*J+`FJBr|D{u8*S
zs&dJ`k%@^}?uVr#nmP;8@03K)PgSj}Wsgha{Rg*^O3k7S7p<i2E4NNeul=0XQ9Xz1
z_HAh&lnsembYm1(Zw%)~enQVjFWGJH-kWXCf4;<Ad5Z&TRy!5a1}s}IuDb(`nYsX2
zGd2j3Tpy58!SQxdm8mPG6^aPe#j4VU@b2*ER>jtJ3%sN%X5u6nBZiPMp%>)9MNx7X
z^Tc2$X-UGH%{SxqxepH`xAhA#HB0o@zf41QNKI3ih`S5%zbj|)n|Kf9e#-YI*r0_g
z*OM_o5XN7TN{V<V&+Q0;&`p!?JwHiE^FhX!FmFaajS4>{y9<7L5r(AruoCx!6`NC?
zsbm&|B^3&|j(oEiMH`RMI{yJ3(9V*`lJGL!;Rb!5A(*}m{1t=#8M|9I*c&tQF&I4P
zec8M)^Lk}A0hQ;!XCPrSbO|cN8_C6XGD-&i3SXrSVxa_zLKpM>i!$6p8M|CzQsL0r
zdtyZ3!Q&ziYmLI`PpOrK=R0}PQ8<79!}>CmJ&Y<1tKNjKIpoPhkbG!!^X>D%8E|Ya
zgt1O@+T-zFX09GGJi5<F-In$rCh`HUH0Q)~eRGlp$2QD`H%PEsOInLYDr$O}lSv9R
zi(Q*A#r&@{Kj*nLevA8FiVCBev#TQ!VuFd1rgRqnz{_KVi_)ec3l>UOPzz&3T}Wh(
zzegtAM>~4DKMPD_V(<wAT}sK{KbPnqVaHz>@b$QOyg6Zk(*7f?l-Hu+>yc@5)cl0I
z7}#?rmVwTYRz^XN8AV&Ti`Cjr9&Ijvf4RT?vafd8iRZqdiS`91PgpM+KpX7#<^-If
zWEpV1Z8c!5#oqJE4H|bdr&te$5{e%JqZzoby|MRE@-NNZFW(~vi(g(hsWCo&o0Ekf
zBq;r?PAKQzr41A)k%$!U$G^$&Tn;?*C=~H0$nT!ygyAiAa9r8#sR>nVHFK(uNYgn6
zD`v$ws7<z&HdJ?Vcy=R%l}YUFH=cY3vJ~acbNPB=)}sa1kz=lrRhdZ5CHX{8pJx4g
zJaXj{Le#`U-dVvVKt+qFee68p%WVgLb%L%Pk(47QeigjMMWoCB6c-0aO58=+CYOog
z6b_J`vepRCFZi7&?|-h2*`IOY_)(N(#%qmF)YA3r17QmB5BiBagZa?{Ik(wj1$2rl
zB$>}KamU$XW-e=-G-Dbe>VK1Y<XjWYb!6SQnB~qJe|!P(uf!0L3`ZojsGuOT*I9-=
z6Srwy*pV7O#dw;zz}i5;^}7+P<JP-rM*G=_+yJIY>UqJKowk+DVI3pd%K@*dcu-je
zgzy&$4?6aIePj^DIEaAj#vnK&5sBoNELGD<Ge`Wi+2r5M#bLMc4$C8hpL?n67l(Wf
z5=3F%m_+CRD5#|B8pl}A{i+PCbZ>2H&Pjn}5ZsITTsTA1{=8^cd%JCu^8?+m<f86u
zSYexLw4xJQM0|nCYrIAQ6~JS2Bd6f}r4*wPsj~FDj0#MT!u*LQcx}?FBFYZ)g2nOY
zoh}yc;{8EqJ`jQ@9~{orwHndsIyY{^m97H+TOCW^q>JEYzha(9RwYVo!FuC1eESl7
z9~1NN+CjAQ<QXTj5&kc+E|$Kz?$%mmZgsk8oy2+mD=-$N34ilh)tf%%FQ57zXt(<7
zJ!6otQbp#w!@-e(2T+|2s|@eYsFt2pJ3b0Z+&()@Huyvv;@51+Xy4wqfr^fcsMjI!
zQ8eQa)DnVD|G9%#DUOVUI_ZgXvdG5YF}!k-T6<}EDlo{Fe_7)_Y$EduU!fdGl4Dn#
z%v%r#-Pr8Wz$7EZRt0%ML20Y@qDX6aKKdyA51;m0BAh=Q71kQIJ+z;FOQWeisW^s?
zeP@$?+R35dyHLVGW?~{*p7_rYrWY{`o5_sB{uxygL^(Km78vZOS1oCxO_$R)xs*fT
z*7r|YevaWQ>-KNQTTQfRhBz54uXVrX;Ub?K`P_CtGzvc~h=@G{t)sI;vEErLkrkp6
zN1yyW01u{uYwKYk(a6Qr=4bYU)U+{j?pw1o?dv3()053sm7q<yD$Mb7+*@D1vfq9)
z%eVLbhle$F*5U+xF3ahbR!ZdGa(}|(s|l8;3aGm}x$pUP>K&V0IJ@U#YU(~9N^ios
zGHNy1f<J7B%uh?oQZQwtWh$q}U-q39m0zsXka^UWN0%UJ9EgXoWYt;{k>AL%8~6{N
zZ8ex1%xdgK5gQ9#H9!kk*D>DSX)w$3^`ziGI)ER|ui{jmsvh}66sMv*%;S(Ztl_sK
zCO(IY8}AASt%q_4G%Vx~Nmw9!rsloupS`O)Zf=gVuGaE#6C?s+ai|OPxb+(a@NmGV
z`!!_Yn5z~y@fbs5i&yDl511Nh$Nc!QF|g;aTv~G7VaxGmK{=&%-1X7Pr2Qm@tx4k;
z8TEay>^nSG?6>uhicx{Q-_GH|4tdMMXtxVqkGPkTN&Rt)$w%M2mTni~7EJ52+u_Nj
zxkK6Y%rwQ=bkLsA(*ga!NF(vnukh`bzg=_zFW*VU&B~rCXbC&>6s^+YkxSf>yo=Yg
z4(CFho<FyO^_p6v1Vz@o${bvxnqO^HE}$I|BeT9gzO#ARSh%Q0<(RDDSGz>X^lWof
z(tkNd9z*4jv|O?nLG}#S*DYMCOk}ix>fF_t&bxc1X<f^2WR`V$mfSRskYK^DeB)FJ
z@ky`XX{#1N<-SZ~vR%}XwsDc7nBT;Vnw##LZ)Gu!Q2sP@C@B<9gcg5@Bh0r3rZ%q~
zI-Qr*RBy-(M5m<Vyby{4yg0naZcnuD#>6s*|6}Ew4T<^ClPI*8l+GES6c3D5-Ps`Y
z-7F|+FvTnZKgX_r%6PH?j1-G1#!pIuSM3YckGnA?5nt7MH93F$B{g-Oj6ETs$l#}z
zqxtjps|=PJh=3;7MMA*=>)YJHk(A1Cx*Dw&o-O&3skJo)Ck$qIkqJELn16h@ET4I#
zM2-b`X>U9NNr#Paq=rZI-tO%4*({Uj6y;p|F<aZQzxTH}x_T~U1i=m2BkcYZ(_{`a
zwEBw4_DHdjWQ4ZNeyb%5(eET+c!)1+w(46)o2C^Z|NV07T`j515a1Q}G(1Du%ImmJ
z5ixfYl^dY*4^^tHtkor7yi-Ae0W}yVS>;e;-ro<cAr^;pks@2*U}tV-S(8JiSTNOs
zuBev%nr6HG68^XPf*X1AE<{3nPuw!3BCPzamh_ji>rJD<>52h%836!Oa>6k^Y%pFl
zChjI369rNz&LyM;L#Wb{(n3zEAkNvn`riJN{5y!1Ql?%;9eMg{m0_L`@try@)Hy{|
zGlmdFz7VL^P?|UY#?|-nE6w@6_3SkA<_+0kDHcdN)Mm}TO6M#86zz@Y&3pt)oOSRT
z88ogadn!;q`Q#yiT%q_{Hw?W1lLr11KF1(5B8#b22|Guj7k($7N!Wr>*4|r$JC-4V
ztc?ktF9_|y5Qt6LW;zE$tVw&wGR>MaGp(&R-32$#d@VinbRDkp({`8VZ*m%Wf;-b`
znGiYZQ4ra0BeE^m@mA$CgfY_WUZ20?S#Q*+n0NhY^c)!$pJt19z(+PM>YaIQOrvb9
zJthe?!ul8Zj`FGB8JFKX@N9R_me}L5UY1XAWH>7C8tfHdT*T~W)=|1!Ijp2)MjB4=
zHSOiK+zXXjJ&Rrky5NM$ChH3&TUD>IF%`~>6ONVuWg*yAw2oO1jb3o|uNSoUkTS7z
zGVkL(mChQg+!?vErw{z>i0!#yOiyHB?@6q@*kI6UY#n;osL(o;@FnoXon+7pP{vo&
zo{~(QmxN7)%z??mWA6Ej6b8{;j6Qlh<)xcG;l8O)Sr8Mhdsmn4oXJ(K!sC;pHWdik
zq`+NlTAS;hvFG?Pv=>ygtJ_+|i;bG=@nz}b_Lik0*HF4|)%KdX2p#`zWFiwcJ|7B0
zRZFhstEZ~ddfay2Pl`1wvO>_?FO+xFHR*u|ECKl}{_F=h9UqQQiyM%C9kHLoWikRA
z88yXUzC>aFGT5<EXVbxeeqCoaZ3s19vp5E=`%lh1@`tu?QqSu5RSx$*=2a_039v6*
zG2k5!w><_8cmE$>Ul|Zb(}X#TED+q?g9LX7?oM!bcTI3x+}&M5a1ZV-3GNmkBtUR?
zyM4dA-}k$xXS#Yyo|3M97RZ|Lzx#DwR+dz1mVs<e?L#_jmUNU~cjxzd%-DZTh<)Bv
zz5^Ha7)XIvqe!T+Xn7eF$9Ni4ScxBS^VQxrsa))j8j4JF=Sa41&$7E(Qs9MBnX>cl
zUXH^^*Yq&V&5jsX1&igHWmYhb3Q^lf(wM5QBo)mJ+jou&<o;(v_ET>;`EKZG$h)qN
zLrEJH&G@FYR4<4jk;ZMmV^cVa4&HsgbyqbOwA|TD8K9@!8!EMgug1~=g>^{c^Si`T
zg>^Ux*Qe!OSfA>&+?t;Zd#oECZdRFCm1HjDRI=VSPWK!r<sx^)?zXEgdS?e4q66G`
zUAM!6pH}mSV{{`jBoZ<j(ewvaw3+#GT1$%0q4fw1vi>{#*>iv7kQhh^s2h6!-VWQp
z`3p)Fr;GsZJH|eLvhcHG+d~j*<ZxW=Bm*X*IeB=0$K~Vzfb=|_ebnQ&$0q0J^|wv7
z$!YHJDa=_;MU!|o%0U^JGdM^`g&8<3x<PTrJ>~a5_pRsiuQ}0qQbY<|u4;J3bg!Mx
zf=6a(4+1Jp9kLb-k!MLbSh<}=@YW7a(i71u^p#qwmPPcH57Z7VyNxHKlZNeIPON*~
zC$nQXj6S(0_41v@^!_vR4o0P%fM3$t8G^4(nVYp=_Qz0Q!m^rFWkGYYX+mRTS(twI
z47@$=<@)%@@}Y4v24lA5lmv`{jY0pr3zeDAQXfw<ohv#CoH2lrWn07XlKJ(c+1lk*
zTtc3o_kOQ4`7>lo-(k8V>(znp!5*f2(#ngBowC+jbWv<vF}+7rWqK)d<><lF;QQky
zY%Ndyr{|weAFr4=_MBk!x^k#?zEcr%vUs(?fA$2I*CTuf>BrQ!6J{OEC*}#G(q@EI
z%5M^Fwzwa48hyVHcdpY92z!}`&47niT3fv{wsA(I=@?7&&badtqjiSG_m0G_lU(@s
zM@*Auj3B=9^550^v2M%^^Vb_xE~a#2CcO3q)ypvADZZ%8-a$oXmdlh+elR6q<w<S{
z=XE~V(R;y-36#>^t9m6R#GK1*Hdr3G8yI)AN|h9({;ZA8D3=U8>!-`Kp9l=u&}6Oj
z07^G-3g@!l>CE@1$xce7uTWvo&m}YgUida@ZiOOBRFY)5EA-=2_(vi`HNEh&SRS91
z#ITBBegUy*GG8tA1)00`SnrxDKJ@$zPV#qRfH2C(F6_E~_Kj%1zweFvGT+y~KVWC0
zZ!3WiSw;V8Yxxs~uPpTE&Hs0T9uvn&jfHAaRbPnXg@Us_Uk>A?k);8l#fhshR-}EQ
zw)*0F?C-Wi^0+0k&sy5ry3&70?1r35;@yH2Xk;Df(j&Z|*4p+qEU=BG{CUV-j7dZ;
zm+ptAb5}TsU6&Zt#l51;%Rk@z?fFF&1D6=tMmYJPIDfqtGjDu$q-)#$^;m4i4AbBr
zLuQ(`aQ($Cjs2_K<G-8Q!&f6s9`HjS2KKifJ43-^ZL%if0p?b}Kc7g>h-;e;P5TTG
z7S3pHyUDCVB}Z4=Iy<;G=FwcHQ0^14I{scwROKn}%MNS%`EJUax6Fd^cZxZmTZGxf
z-xiuQb&!VJ696(bMH!{dAohdQ5*@x7fBl3su=jCyy-xQ^8S4s0J5B`E#yIi2G;VTw
zxbnuY%IIbkdVc^|TWXEFf5c`;KGgg7t(C>Eo6;YsB)rHpV9l;Xc3bMm4%8ueyZK>>
z?$Gskh|EFmpnrZ;n!cA(wI~}Ek-)l?0K%72b$n8&3plxX5(3|Pf*4X$CIR5A=O%Z4
zrE_{E_C*0RY$#x7W7D>>Gt%KZt?*3_x%YJ#m#MdobS58CVPOl;KipPk#D#I~*xj!8
zlX$cl_YZy2+`V|+vtf)GLiG(gOrfotKAv$|XX9Wz6C&L|aGF@Eyyiak1TCL>;ed4V
zZr8tXU$4DXREnxhPTL+|x2km-Z|l0QGQ@A%DV$Mp$gn9<5#d;c$JP!u!|-858@~HX
z+UK!>=}Yzlj03IYTE=@QYdhr7j^7V?a<`^`@Oe5R54;{02kjMqwWbH|%WrYQ6&|ZI
zkg$Vbkws^FZ={aB9#?rmeYnI{39l&1ghe`V_%TvFFNfTo3zc8A43f^kA5(CuzGV&k
z3BpQ^#Hq%A->b`2Z2xKOw0gg~`%D3O-;1snq+S(y__tkdF>Dn|?;VBem)R3-kw-Hj
zqgp9ThNS1m&&#<50>_c$Wkrg`La8EVV0H<~ZAM%T<IV6NF{~B0cj|v%Mo8n8+yB~c
zZDp;!Gv93Pr0LyoThbhQ{>YPhH_Mj*7uHB~`H7cY`l8Co@Odmgi7P6T4+fJf`h_ky
zH?P#lf+LFDq9)Gnf}dP-OE~i$fP7K|Y~0#q%=Ue2xFsd!mx4opA(V2e(<7O)@Hnpr
z&jj-$bD@=svNFuO+hhbT?9lIJ`xAr!MBLQij$4PQTBqywC)R;C)#DQdex|D~65ORx
zf4Eh5$sQ`8vanN6?6)DwV3(xuExG6D%DN{z3kpc{%o=lrDmSgF<Ln!a^4kAR9W6O3
zVJU&V2j^s5oF6s=;{I66!MPgOX|?o3=1mJlI4TQ9)g;`Q96gdb1Rf@o_grHw_$D?}
z3_=F>VPLTW$$;v$F7FMs?;63W@-!d5;7<IoUlzpaY!j+&Cl7x}MH(r`Ppm|41WP_k
z1ETwtrUz_JSJh=362Q=a-}|v_#RYQZsnr5L(b$A%>;_Ngr`yH|UZ@jOx}dt|h>uxl
z7#4g$pYdlASy=~Hf4-%=j-hhkkfuhr@GoM0OTdZPE9je!phklVsQA=Lq<Bw&S`?}n
zpo;Ocwv0D+blbg9M4rEW;&<|BJ0scK!!#a2dPlCZ$F;xszXlIMf7U97soFMFZ_j#f
zs=rG8ZEV{EaRuB}Rc6i*kROH9N3%TN&PBX&r6PZ^(r>i?`ugL{p9Ec_&CMhw&xn<Q
zQ1SlJGl=gJhKm2COdBu$)1#7NuBEyNmP)Xn{Y5tVsOFn1F&p*AEa_qEcV=hs6cem?
z>y8Xa5e7$Xk<IT;P=KV-Evripz2vz?o$tyZ_H<pTmiCpGo7Ott>x)~nPSPK5-R0Kl
zFc8#Zbxk_a?qqLrxGhvULcS<`Bt#{R^$S`+N0THgid!vJK5@t(RJXxvvdn)mFcNif
zF=dv|UA7BG{wiOPgCB*!NFy!=)S>XJr(6o`lI67+uK)aQ*8)qKJAU`<wClD=Mmia5
zaaBtTz=+EKLKPq7@lo!OtY1hdq*7&{!W9LW^BFSD^w_!BhwV#$fU1^T<ry~wzlIej
zZ6?DfOZ?%C6w2L_9@oEHW$zOAn(X!gsOXDf6+#1Bz+=Sp+qJuiPfbiHBs~8`KDWs`
z%KozV)ZlSDA%=P);)v<nx3z`q>gd2E4T?{NR4Qlc;&ekxV(p;zL3EiT*Uzpx>s3lu
z<7I^hV_EyZT1>=dW>r5K7@&$)ESy9Sd-#sdMf6f88BK+Yc2$je5F{e@jS%SY5(7Sa
z_~8conQ48K2kmwc<dEv!aK^w?o9E_$w+n%c8pEty*RP7<2EFas-t)Qm97`m+6;kp;
zlHn;`5H@K2r2`Lg&Sakjhl#z|h-g>DXEX}_y$R1;e}bi&^@XwA-~8CA=^lYcb2(E}
z@Vc+j3By%rTP7*8-3=CgL!SYYtH+|6ban;E>6BB#`yHQJuC@-XB9;kwp3070PbR~w
z199#CRQX?D<Gt$+Pt$Gb$c%-|0*KL^1#lx;yNM$5+&HXq{jf^&Tm<#@$znDps4=*B
zL#jz5iNsU8qAdm$$xLU^fV{lna6Nu^TAlVUla8vxfeTi#6|J*mSWyy)fECd9LFSGJ
z0*W@lxSk`%p9(*OA@}8)xYfQfU0N&O37AW*@h>SKe*Y@Wub|kh^B0Sv<l4&wB~sR-
zyZxw3d*5Rh(WKBGRCunmicv}v$N?C9xgH50<&*#BWDGUC0_im``)ymlu=ZeJ|0Sv^
zi^(zP+0D!Lm@7&$mh4A2>h~=*l{+hnTm0IHv40)Up0oT}XMq3pduYRZv04S#j}G@A
zQoihNz7RdB!FlSVjL~p-2?I=RW+<*fvl2hU8gZbZjN!Rvg|G6@-E8<eq(97M<uSsr
zvO(Lsgmfq$xJQNn$Aflp$+Gp>u;fSZHK`U4oTf%@nZnN)ZD%>jxBF=I9lIJTBQ`yn
zPeruRq>_K9JKs4{s>%_4Lp%isx74s!F_^sf3e<4#MdKJbW`$^Ysx_$bCI3uNbwKyZ
zT$>>{QWj$vA-YX^8Z%VT77@&?5h3w#%FN3Qu5Fq8h)y)vn1^5A%&GhogUorrKnMQ~
ztK{p~zAb~bZYA!349~_%g3_W12~yMEoCY>g4xm`a0-*Dun~A!8t&q<|S2VcV(rLf$
zulv^W+9r8g{2)}p3h0}k6;XHJi9H0vluw2;_hcv|K-|3jf{JDf4L)s*Fyf2M{h?})
zX2woBHO40@Iy0Hzb<w@LbA#jmB!%FEqzH$@z{5pb*|xQF?&S(ikEF`xx}LPUeS8=<
z;#n{&layn&x%}2K%J_nTIhOg}PFAu<Yu@Xp*5<|Y)fHf}$40v(`E?`dAFQX*)3%}O
zqCfit0=V%>Rb|?d#s!s{4OZq1fj(Fzm}9>Td8U#hC{Hi>v$0guUU$Iu)Z4>Yyg0sM
zyZJLV2eP3d4AoHk`N53KB0<VkfXY>r*e?-HEV`s2c7s58RcF@Xyl$87?qnJl=4idq
z&U|+9&UcmvOu@W+_HSjq1yk&VpVv+gZcA+OYx86$`%WoY`0T*+F!Z28lxdB+{*^OJ
zV-+Nhpo-g(g09c2YY22L5?bO0>S-qp*SG4l6T`MzE^|c_V#Nelqvxt{+7$!ZRT%pe
zn{*TX)ndZP9<O|Wm*1Zm9uMk7i<jV^q(_fi?(@3ZjfK#N8I}@&`JsX#)q)O~*qjk8
z`AZT)$7Twmv!SFCFpW;EY}GX{j(&RhU3yah&15WW77&z_G<Hu9>GLicO~Bork3E0_
z^Gj*WU=4>3v4RjuO8jaEKEY8;fFP*fmzBalwBi3CJrAo5ZvX!EdHWl0-pzxex{KpN
zhL;(xiR(KI9$3+7HrE){BS7fN7YkdZ{ex01X|FohxLuf6Ma7Q@C#a8)3LiVZxkY}6
ze0&f@Hzz#T-5HK%fwU+wbaO?yh^iq*1w%u^S%{*H+40Wu173d?;<s`v5hsptO-;n1
zP4C1RT0qqM-%+eC63&gsfQE=B630@Tj<Zqw-+meF6lb%MuV+#5ZmW!Kfdw8vO{82z
z&S6At_onM~Op^BSdCc+#gAmu|VIS9ImQQgO?bWr@u|PYRRfn9wOuDrAT?9L4AB5U3
z*H@#+j3eAW?fwJRT|!9HYt%@eJkmewnSW157)j;9ND=0@!AMJi(g|)KKfXKFx!gwo
zll_LCBlk{O_5zD^^O^)m<tI+VspQFzjMVwjTq3z#X8?s&`T635lJ>u>cMUgU`d<T%
zsaZ`#ykV$d&I}Yz#zlB|&EmdF=@%)1Fo+*R6S}8c;HpE*w7T~5U%4tA%m@pOJpSrb
zB@6a7l#Nw9QrIgQT#0o2$>!c-{(`I6zOk}52F!d}NW%GK53iU_keclWTPOAaf&~@x
zf7glGh#lnM^1O8gAUo$-t#Oi3@@h=MS_a?uw2L)xSe1iaI00t7h^>6{dYEK6kD{cL
zsebGf!m9}<+RG%#{A=u$;Yn0Usz$xN2_$`eJ&fZOka11F45lB6Se|leSb52>krX`;
z8jOpH=>Uo=?binf8xIHn13n<Z<n{T3GnuCH2YtCJ5%>N@I{#W>3GesGUlveQ$Sq_w
zuc)dMkSs=0hpQP(S=gGRpVkax$e-)Pi%jG-vPr)GP+<L>d}BWU8zU-nIq3FMbZuAg
zmn6RlQaM`^W*Q!#(;V=U$_XUuDZcB-$uD0l>xlhp{&g8za>!7&nt|99=k>4a$BXC~
zn~Y{FYJGwH;XC5)C(j^69$WP~sIg8WmoUqS^lkOcUODxKQAv>v!yI0x!$q2vQS^(I
zK{A;2RSuIapp}pf!J>|+1nWwu_}T96obJD~JhzzmNxAo)q9k?s7nZQ}y*yq4TD&+S
z5QE3<v-owSoM%plfP%1HBN*|Xa8OVWS7n7m=EVt{svSN%R*-a%UpnUT9s`4mlMI&D
z6*)(uIPE0Uso2OzaYlrO^UU^dr?#e}4OGR|?>r*#E>}g5HpVv;>cBD16ju`1lV4f@
z^2tEw>BUG{I5(EL8AS6Ykp5+9lq35HQGZWw*m0`99TjM<AzxGHRxJ-4r)r8A;v0Cf
z7?{kgm4FL=zDon#mGh#XG)cVW7#+juEIOW$eAbuo>o(Qs6?abS>YVoc6nJcYogl6-
zlADOs^;2ZeiAi9Gu`j}>swqJHex5B}J6lP}e8Vh%p+>rQ(THpPIHC>AxC9)An<y0A
zaM}m)c2&`H)u3)@<7s9;XLhl|L=FfbxUzsD@O0C{<%Fiki~aBP#O|&QeXdq}xzbrN
z&Mf}@D15&}uKg#?)3Dn^LT!BAtIn7-FHZ_aUOuOFdb7h)p9fLGg%%b&oXr+4v1XO=
zT{#uTSy4ksjM=?joM)s&U~>y0pjD&CJ;6)9Lcj=X<7?e{BHe0UylCOlU+)T{#nv{o
zNb3!iyLdc_pUNkb&(%3CfjD4j+eOQ#v9WnGW%+<j?%3E4L*9ET5r1U^yemK<xWysZ
z=IOxqIZ0U7SCGb+e*=j_`_s+Qy-&9^Rld=~R2epI`+sZY6;=!V{CMimv3zM-R#Ker
zFe!+bmJbK3aByJzigi)xaq=W%byJjNa)J%F_%Q{i$0bkwu{4oNigB=B;eo{zd0K4!
zIV@KUBPI8YK9^{++Y4Ucy)84j>AhbJEZHA+OPsJ^UDuboC(*W1tJp(fyJZbZ9yXHY
z=QF*TOYHZ*xaovaXyxEQplj;}L>&H7Uu9~rO0w6E_QwZ;4CeJso<z52=((1sp8QI7
z6sp&enwYcNZ;py|nhr}RDVk^9UfFzGcv9@(_it>Z5_cdqc$9lwaJe?3bzU!T?L$p?
zmM5dE>|B?UMwBn^tUQp(G&*gvAmB5RDRS2J)##;?u%%gZB{N76xCt=!c<nI**}6vc
z2~>haO|e3B;`;8pbZyOd>WrRd6eynitYS;ugAbk#9Y+{4PmS8|llE^9x4GqXQl%XR
zmeQ9e`A>C7JPtp&4cT7VKFZM*K4gByY-w4F5dkaq{`wl^q|Jo^5LVHmpxX^BvzsdA
z>Rzu4r~kZ@#kaT-f4=|^(K3ae1yXguK?LyJA8W<O%jeo(7KtQ79cf{6e$pIWlO4hf
z$N&CH#P!Jz^hG7xt2-tW2_|%v>Bey@2^Qiu{g<%`JIa+)wA+O`BOzc(yXc08%aJ9$
z#5mS8-v0GL5!DlR1`3Wv5>+|mFyJwhgwGGE^r9Y`#=J2iHE>;QD}*q|h~R?6W>OVW
z#BNKgO69^fecAC?fA_v%CKh+EIAs{OvuOQWj<b}P|1Z>}%I5!OPj1-xeMXZljv!E&
zMC)6gU@3h2tpU&cj+BMV$CXnf5z<r?tg{z4G+Pc^RN4(_x0z$VFwkK?Wl(h_!-bZ4
zW|0XwQq(_my3c~YUQM#yoTscM%2DP8oHIicH8_TFH9ShlGfM<)P-sIz@-(tVDr}z2
z-d-v1dThmM%_3uVy|H=SmD5hpAydq021NkuOjz2AY1f@1T>0Hj<!Xq}K6IzqPg+`d
zq&O%Ku2dJ#9P+YS6@BiakIoLNT2ph%&xk&7DXqTV>&7S}51f}Qyposg4nk~dvUp2r
z`$L)Bf3TUNs7xPp`j2N@qx^P$@?3C=+$o0x3=Iv{)g&@*;i>F7oE;sfbP0|!5#W8K
zb0+0W6d}>KPWJ~A=K0IM6sBg@4<))4TOC%D3Ba?>_Og1a;6;c<Ux<_Ma}=-1QOx<I
z5~9AIDF@}sT1g)Z_YFAHl!DohTm=$UIFmu%^Asg^IuwGBsv8I;K4+ar-P5|Y;N2v-
z9Hu}9(0(Qn_Epxd*W4r<UlUuWv7KpP&uYaFjVB{w(js~3d?ISHm;A0i`o7d*#9^!D
zL}Xp~z5;nv72Cb9kaE5Y{G*e0b&ot&YS@D%ts@QNO;epVbBSDFdP2Hers+F=^N9eK
z88Ivmm?WId6cLSS<^5-Pv0Uju9F?FUBmcgYhVPdMK-*cahp*G!icBjxV&-30r<4fI
zn;!AvGtuk?b~a)P8o|VH#=MXO^P%qUgSy*!PdQM^&qBQ#M*uRad_aS;7`RK(M>!7M
zTsT$L_577QyY7-du3sKo6T%V!$GlLMA|+D?>wSj@KE1xooM@wgNw6v=eW~I;QXJNG
zfB%SWp~>DTojzy*Uo|jf)W?<sGWjW%j~XhG2AX1a_dQ_<Z>LW1Q$B{@+0Ze6gH;jD
z0`|Kj?{ZxJ>q0}%(dU1MTLW`HIr4*Mv}bSO;UVQy>T`7#%3jm?XKlcy38kNczG%ez
zN)Ra2;QvRsoj4D|s|m&^JPJ8?qp~S=&$cR4me^QNSi3zbcU+HeYsKI3n?s=Be(^95
z70RNDf}zb*>~dJNT{q6ZCbq{w`v6v9=1`R*dpd4*<Y{s~sFE(B0*fPNUn1&f&k8=#
z4=pn6<aI|rJ#I7Lw#lO&{&M<M<Wm6YpD^XrRpEJ>%Mxmrpdv+yAc8H-^*9<sILld@
zvuM53B2ndN?-C{hOCmPvhAKTswklwY_~G=+%o>eTOrUUpadZ@O*hyc~^o;jW-wI`?
zrnTcCu<-9_4k_MLF6Oja`oFz26BG)4$@PiKVBjK4MKMDO_9GKh4=5O?kfVxxG+-G`
zqkok`!dPUHSYW4#qoTu#h{b9<?D+%>JPamyFJCY1ef_%fKzZg|XMwTm%n`|tZ~;@^
zH`)jSmY93*61_YkV&Qa}%I7_CeNfi788SRRlem|gBgTk=u!q@q^me6CvPE3#|0Hgk
zoiGqk4ODHqOn6UDKFn7cC7-UE+ZZ)XAJJ_Ly{IxVJQ4s72M69^AT)ya-N^2v<ZoYe
zw^EdCoBTT$WClxNQ%4rY?SOX#=G)!3@(O1@0R0ywx$ybWKZPPNhXHR0wLYUr#jm9L
z#w&^)wlU*PEmWTOC>Ev45pw$d6?dJZuQLDO)aaS8sqmcx4y~&g$E}IIwNoNOj9?b7
zF1zp1TP%WUEiWY{n;qBdp%B>Yzo6l51l`Qt0J6&>0{}TP>_@nRDK{r)2f%(d%$W~K
z@ovf`!&LK>CNMiD82~i9CLm7}xP|L108?^S#a9M<LOQQ{jy3vks|)@mrxg+chzUnf
zY{AW^N+kZI!xoQF0;@JJ^;JFNb*fDoeS|3`iqWds!J<f?^u5Y5*_+b)TOr)zk(gP>
z8RC<$7N1w{wBD0ok!bPdxYi;usD-U^b3KnC^6PyDaJ~?mfsVBEheBi=5h5IL1E013
z=X`m!ud5Qz_ZQ=7Z=JH~-Ox<GPk;V6#k+D#TDrzT?JBz5z$ay6#eEJ^ESWyBDp(sz
z!qpZ^v^OgI$??UNv%KquY4p=1Ou_QgI$?H;^Pf6ZS&E3*EBUQ{N1GWgk!_G8J{!Wq
z&C4*2eLX9sk;gdLCudYTN>1Pf9@AD^yPt$(L8P3Jf?38q<cVPli7xJmHWylo(trr~
z;Ha}P*3a^lJD27^{_<a>Dagr3uKl${{!!E$hAzuqPwrUq*><1h?f04VeDsS+pO_>3
z7no?XB>4N4mdW1C+2qNtUMyce)=wY_E+=qCAJ($j$?B!sDLO&>*}uYmN_T;~!1Ls)
zm2GULAfZw$U&&46p!b&G*xLY2Zl_7h;Jmc8niJ!PS8hFeg6z;Fo|LE%Ed&A-_;MYl
z%a6tnt*mzvn=8b_1(ytg6A>U@Ygl4}(k7S54+|3WQKL^wgj`C9(Xe}kBGH;sr*HrX
zj9j7bPGU0fUyxPS^PfLC0~hfSKKnIm*S4U!%_m{RLX{z-ZOOuSV=SE_Sv^v4gQ3;U
z<-;tMk)4l$eh&ygQ(mQ0);HWZTx8jSx#vkYnIHjh)S<DFukL*O>!!#ZgEN<8S<DU>
zMtqnZHf9(tVJm8Z2D+xEJ2v)~x~to|en#Ni{taY)VN=)KWsF^v^xaIQS*LEOR3qI*
zK)^7rSX}Ew<cEBjZQWuU_KEjY{^<u<1i!KO11dIR#AZi6bS8oSyusd#3HRMBw*Ob5
z`u}MN4uXz?fd5sn8n~5P0RU^w|Epll^Y+7CTpbOZ&dTbvgxA$*=~z~4USeo`U)ZeW
zc%;>@<#JHG5av**v(@A1U|*#vI@96){r&7xQ{7?<%L0QqR!L2?o`EV(@E8_M5Yyde
z)>T*FdwMD)-tmdttemSCzk9!Hj?ej9mR13G6CbC&(F$j6z)U525b1gHk&J{`Vl}id
zHl==?G%y{a4PA@pkI43_(>?deN^UTrBaq$4+2ZD4aUM@vK)p?X$WIhI4I>CH3;}SC
z_rDN}QbUi>dS%em@lY6r)@w88-MwlR^oX0xf(wzz(lAn56A0+S_~QCfKt$*izkNtX
z^Z}8<LMU_)<i<c1BZkltXo%yS5a>!u;sbo>eTW6Pd;l}`HfzgxVCCEJ<DGwe9h@UT
z^i467(=T&;);YwR7NT6SG#>`LN2e3{)VjMX)Y0MQF5gU1Hv=wI6<1x&oK8vn4)P-v
z)o9KqTR|K#bSOJB3>Zbw*NAZ?hQ7);%RsnN7R!lZ8)Z??M-Cw*z_Ouh_W(YQ82SM6
ze-C5|`YuE<Jy>DnRq82-9GJ}1QOWI(1irdSq}Z{)ND)Iu)IW85ESR<oP4{JHTi&hn
zSiL5x&Uj7F$*)unU#B^AP-Fw_J$@D&RP6ZM?SNV3jTby-H)!nAdY@akR!_kgx>VP^
zo#-TM&=&-Vgr@yPQiN`FRmRrqru3q?PY4eXXCIs6?iH|b+=eTefj;AFFA!qQT(G56
zqbFO6G89vC0V%#rN{RaS3QX=+{RI&g*$>pCiIw9OA_;MM-<A_c{wsL={gxOb8Eu@U
zCj7{?D1IAp3bJ{exW7yaVaCz~3cl$nh`Neihge=M{eppL#;oG60bKq&3-&UkRszqw
z5aAj<g>A}bZZkc65%-@00vZad(A~>6;%xWRz(f{A839!`hej^L5$?0*-JKp)h8;(d
z!OmPq7k@PG83?6${C&nPqu`;1la`QMtv8l$13P1(==$)__WkbQYVOJ(_Atq&k~Y7;
zQqYOgP&S~B{vqQJJA@9@YuF=w#Kh3V%}B_u(L=l@fY4%>rX~nVU<tuc6zeHy_4{2l
z!pCiCe}HmNsSIsK9Kp1>;I5n;3#w>ltHb8w$HM`8pW&gS@V`m2nZ5yd;jwi+E{Dew
zBP+SD_@aXv_Tx@ovyBgNmJDw2O`zjp+t29C^?3^y6FahCa=8f^b~YGA2{D4XL14uL
zm;`v(>$L!T(d+co%Qypp+qplU)pC!|nvcV&RpEPXOj@ITu9eLw7*6^;fiKMg2&Cs=
zHq)tdQ#_eoCPFDVGW2auGL-nzJ}=B6#(td-l=)Tq^{1p6=56v9$EtyF=Gk_nu(9?T
zlg5EL1t5eHkYXi)Yl#UvYM-_kpX#^+;@2dkK=|KD8ya716MYa<7^RJ-3ZFEN2q0{j
zhL6Wx?wSGcBy3=|gU8vBSe(F+AO!%r-P5B*c|(_Sa$fIQ=FnN&9o4HCXofA#<HHl*
zW<vsg$in)aLN_4c0h8$nwb17F-!z679sxe=m}(6jtOrmIzUuyo$JMiAy<MSh>OjO@
z3F?yz7+LfS*7|TC<KD_$d(E%1MAVlWjY+3~Cj$37_B=q@2^i|G=?oXXfA*g)>yFpb
zVDE_SL+*<IIvyDpAI0j`EhZ;R9(#IFEgVBE#;4wlhwqJ0NE}gTtgWt(JQ@S!sR!I1
zCSE5$zen8`0xtnN3Wbx3jdG9{m?lm6EHg@v6YpR-4)l07nhVf`AdWZ+%^oH|`fiU}
zlpssj#z`lAOD9xbHlauVmY^^7NIKSH{r+P}nf3hLTFi3hzlfjvHBaByKaULKezgPO
zXk`pB^?^rT>{sgduM&xMCk~{q`Rm<v^Lu1^CS}LiH1`%%WTSm@zjpNyKO`9YJcVmI
zjcldNh|rrej!J`Dn<i+sA3<C$H_k}j-oKtvS=(n<{;q!gWHIu?p^e;U{0WZ9bT2S-
zpfb>BbL~z8>0skS)HLmRJNd5B`JM&8$IuUfr6w<2-Ua-wHnR!1;I4$AhRSAo3Z=fu
zs4v&0ub(LK(h_{a5!E+R@N`H3WzK)><M%Qz!R}R>$ZPmgpQXtZ&_3bdiL_ti6BBjE
z;>yGFeO~%K%ftEbnKl*e8aEEE+5;}Itd4pl<);iTyJ^<b510_R`do;}k1vnPt8Kl;
zfrxn^9Akk?M7Mup;7=+wG@^Va6NW7&FI}7YItJ{ANPzLJbh?_+$=c64o}Amu&p9fD
zq8G<W^Zh$ckSnN&Qo&W0`nf*L{qPjv_}Bxb;sWB=?`zp(ihX4)>bLy;ikAu1j&h2^
z)XF8+?Nb4#Al(OQPmVtv(Dqaj{hV#XAMJj)Q%_C*{gu?GZ8_e%Ck;9Mtk_fciXWFh
zm19jDbOyqiCj5+8@~pp1MXF@wU{O4uKCORe=ZTQZb2k&L!QV~!_v-Zsv_W+lw`H+*
zH0zfuie8ADmLQ0vRy%_pSobk9vw($#`12P}gp&D#n1RQ0&U+!M?A6qQ!28CBqreLC
z*B)#gSo&<CLjx)waGwjbU(*j4MC*g0%h{(~Doc}&x8z49MrfzJhrP0byw=m6#k4B*
zO8Brm(H<C_Nixk(vFpJODwJkl|L~P9u=>5l{UTRvcN&tljky!QK0AUu@TNBf+)szu
z^H$)cD8Ze83wNSbkt5kfAZr6Z#0J=2h5r*;kHGDf5qQ&wJDP3p^qmq*WFqUsh%Nu%
zFW4%o!~ep79~#KxJcxXXCHD#HWdr}7-&Brwm%%ePgG+Vft<Sf2jkc8>Dsa2FkZ9|K
z4&>Og3cTb+wyj)nfCDBsD6%S*N>-ErCU}VMRGe}sdPDNq$9x9Fx?t4(McdQS<}tws
zwmg*Hj?f=Hh*g`}66iB|#f_{z=f?oCF(W6*!j;+%G%045!q0P=Ac9mzT8#uClYlUA
zPKK=o`^;d{m5uG_d(@M)xhywkr9lkfYR5j}LeA)yiVo-`Lv^^KZ3M$@-or3rg<<4x
z8QEg=iYKSD$5@k&mixL)&D9toOwy(ji9+erNA$~+N6qdrC!ocO;@i0(C~hF2zcO~O
zGokHbAW#<Q8$1X>Gtv^MSxSLnSPgDu<Z1U?&{VwtR(YS@Lm4V6NG3x?7v#mXlvCSv
zhEcB+{Kg`?;Nf5&(5SVK>IXxkUDsx|5C)JTt}um`A`~alyIp-wl6@b1uCRsQ0{aXx
z`Lj7}`O{d7nU?-OfQC*xmM@Hw3<2XtprteegOV;u)F^<AD(QF?KNX2lc1}p{U|~tC
z+D5xZhNg!|ba@~@5Ja$JZJ=~U0psT8mT0U3%%cnk&kBq6@nF2MC~>`^e?LU{%OJjm
zVzT2daj7WKV+Kh-dxrq`9t#Nv56|i*q!*nZc&*_&k3p!lRnfv%fe#=Alvv0gFt81`
z)diJUqolvmlW0WRd=c%<`UYqa4vD<^%MGqq4&Mi{f>pSDuj7WEB}B|DvBePyN<s5%
zrUc+f#P^7jFya`Ih{=SBhL%EziSeP-G&=Hp@u8_`4(s5n9)&<eN;Vr6O6Zywt;66D
za{6L)iA2g-jC)j@30N<llRZ%%g}%u=cLpJ*+YU4;>LejnN5cP%?PEjH#<nFH4f?|;
zTQ;8;sAh{OQCMG(5pLRsNB46Deq?$Q#{TtXOD{W(8$pm8!kSLTA?UbL1(5u+%w-b;
zsAlQS8VJlT2$&dmWJYpJ$=S|XK%c7=j>y$&h8?>)uNWw!^`(VC+Y0%^h)AWjR7okK
zOhgjz4;7-TM~KO=<GajUhoh@2IF48IbTrr>pWt4zv`@|uP8FX;efJSrXKvo9)sM1=
z83nxkvTcl#EdFewByyz-b3(D*QJLIf95i5Dw3M>$X7=!}0eo>qM)TwVcV&-p&Ckh=
zRWHW2=?S;VYvLSVh9$tc_Mr^RY@qhH1WG&_<vE5G8AE2c#7tSA9~`U<h_8uvD=0E?
zY+TIA2(36h;NN$mkv}a#XW>GDeK-0GlR|rhUOA97#b=U+i>}yndw1SCdk>j|SLjLT
zky3VZY0jV2QLZSW1=Q#J9TUF?qud7B5_2+Qy1EPyix3vT82WvgMuu8%=!@cy(MMo5
z@7uAX%!72{{2sDCEH>tbxW9AZ>pYGgy7`Q;tmK5eLFSjpmu0kAAMqu>E@g_=MbCOg
zN%XyGr7dicjA+AXJFk8CE^=c#J{1F)5f%)2Wg!J}z>yjGtUtbWRE#o~ZVCUEq<Z`S
znb)+Rg@c88tD#QMRTa2;Agye^2H&9+VimVp{&j=U9^dImQ^TERFjXDyIeX1>qmps@
ztIk>@He$shYb>kHz@gJt^JGrx8R)fsYED;lJ)vc(B@n{i_VwWpM^Z*Qe>OcL%2-&U
z;tC^T$r1?&<r<m<SmuzFvhyhheAo&!HP<krH>(-{FQ}1>-a58QD|mlyo_vwAi%j&k
zD=pYtULC5V&Ue9p;RKUdr<Xv><q%PFRr&KMy%Mic#DE<FMb;uP<!*Heq%be>C2h6`
zCucoJ(j+47e{YM;X~um)P>d8qo7%+rciB!}`&qp?G2g{<l8znse6;4T9GmgeaqvxD
z+iXvPVxEXF8Fy?u*5wn>SoSV_#CZqq;-3^UUBFGy+@rNd%mJFV4<Kb}jz*Q-3o=Cv
za`N|h?a<?0yUB^cQ@qc`xRwEADwm4KiS)$yzIT)awA)cWi6>ZivYXF_GWK)zYO7}w
zDOoik;z@~BOYv=^Zm+j0PAEt{7-9HBF_Mzjm2iqsZK;LjS362yjzUzEk>KL#!Nfqg
zKTvbU1sjZ?QmRQ(axw)z&b_@3!)6UjM1B0dd_Q)9DPV|-Hido$;ersx&`#29dv<WO
zk2oXpS&xun@0Tw%<n-|+kt<f@n#Gf(_Q;$`-MdOR>GHLFh%e0y*(;ALEe|=tL`W8I
zZJ}W*(T!BMvtq8(X13@f=xcS(%FKxVO$k_+FJZk$bB-$ZGG~eH#`;KN#x?BV5Wl*D
z^}XSPlezVKuGRIR2*jh4)En=`oGi4+oik269MV**%QGNeyM{)Vq?0*5rRA@QvB)(T
zJG@z+V9Ck<UN`4}Yl)=894{$%B2*n9;Z!lEenRGyCQQ0E1WGFwl5T_`Kk;&(E1KBy
zDYw-to8jPLOgHx6;#cv`23P&2{&tf4;{Yt}S0%6|j-O16)e-qn^TO1)x`Q5q4;#Zp
zs@@eWf?a0wutyLh@<A?<cFbb^CgK+(1|*wvtryBL`3yZzN&a{~-S_c35)```zymkf
zUk<&|Y6vf8Xk{ynX{(sZ3krUvkYf@s5|v>E)tb`_F_J>(iLTg+Yt9r%ilL3?qv(3B
zAIN{L|Dnn_h#A>Mw)M}7ng+YH7%8n%_tvr0^eReiS93w2V{vdfKiym3sCRgNPmI8j
z%*;lZl2Z+V(Z#2N22E+OWO<wePghp2My-7wtEH@=X|Vl+<XsJzJOql?JE}$^E6Qk%
ziFX!xAit|y*FjW{j01Qfa@9-@m%T^7zoov~^$U@bi3I#`7ex{j)d^r&OMYgNl{Vr1
z)E`g2-TG6*t@-&OW3_d1GrWj=>UC|$p-7B&R*TBlowX)fgngFCr8sL;-8lbwIB;R6
zC$v2qI*`ni)o*y=K{lq8W+4cadYM}%%yTWaS8=0(Z&Te+KPfuqET0YKgTY9jCy2jT
z#L*HKCEG|{?+#MH{(S@})ryakM8FqD8o^oA3mzyp#LT@7AX8kuvcyY|vIzkF_fEA$
zgyNU!V;axX4Ht)ln$y@iHk*-?6xx*SpM-pYK;4)h>uT4_*xHZ954|u}5g_Pjaa0Uw
zLWP-zo}`g8T7C1)A{ZS&oR@shimqkEQta)`_NT!}o7;L^*6DeBe)Q$+mvb9EvHE@j
zISJ-SYh)W-pAGLi8tjChl#=dX-E(vXE|~4*7D<G%n7n)m69;VzbNFwZHwF-D*&jP<
zO0!dsg_QXbDRZ`*ah;%vn_I~5xfyxdQ|j92e*#5dp-i3pz5m*q)eJ7RIZ9_#^={Hn
z_(Z0DhPdxKEQN*2CC-ji>^Gk^eNU)_sZ=qW8D?UH0PZR&DXDqgqpopdl+W<6ry^e(
zX*TQt;i}8@DY}_oYi0E-Z_m&rb)>dIqs{Y0vJ@#K6w16Nx$N=*A6%O#$XV^zpK{7b
z-$DfZKY%<h29OFYM^Gs`*gDk{51J2?I~oEe5JPXtFOmh6`9&M=zX#lRn)FyU3fa{Z
zpo;)18w@v$TAH?lfmJ_=Sj@0SAu8+5$Y1aVWTtiaF1SRf!sY-5M#>ULp%Qh!pea}C
zY<0sWm+lnBr3X^M?6HrtXPMkIKaFcxDhftIkpP5_V~+yLiA!olderTc{uC$Rx5gqr
z3<U1?kL<<{@4UC1Ykww5N$Mp0K%YsC-ajy+N^&os7r&vFC2h09czp^3qd)u@_Qdgh
zg~jKGZM(mf`;++)QRxl`L`3$g8>$7KoubDV_@0TZe0u7!*_vL4_^WbP{XRIHd%TeR
z!h^X~wXj1K{LMdVU#tsln>K?vQ;k0A4e0x^eeOUDzlU5UPjtHV#5(6V9v2W3^&X4v
zf%LPnM%uy)?s)E3PzNT&d7NugEW^i8giQl%5_4U514G^f`tr%se(YP`WjCV()Wlx#
z8rC$`4?9)X8qVn%>S=$_$wj0{%yGRAmSEB4vMtU4iJJqQP6g-gfU$Os1iNG6b=u)v
z2VI8%B*m7dlOyXwHY&R9S3{e_!_P&Uo0R@99|&?Zj}92oygD*YA_jm`R-z2_;;>40
z`qDVKK*vCVDZPWDz$CTDGCR)=FE%4sVQ^5@&qF+YaX-Ai!OGohc$lfG>g&^wsA16Z
zlU5jlBE1OlHQDp!N-J)`?q1kYEv-@uj)SKW?75bjKx5yEvR{immz~MG`jrYt({!b_
zKsNOAG=p12g0q~TQM*7BI$RBig+DcqRAfic-<)zaE`^+F+$jl3*RyA@ABk;zZrqzr
z*MwIy+Wbo@t82B0`~*QkziK><5l24eH=k$@I;rR)fkuk!%b4y$j6|M+?UKCx?i9GO
zFGMxOB7N!FuQ4ak*521sQ)m%D!GWa#uh({V_#K*ktw<aJF5qK0BMHBu%QuV-;|MsT
zW_z(irYn|;B0a(dJ6oYVOTckcvTl}1!=Ihg;6J&((shV??63jQ-CShxfa3xW53kT%
z1X|WLw8XX27FiRMM`68Wn)6ZkZgW}_h)<;kgSa6TSEHjy_YHQW(Xt#D?cCoOA5-`2
zzRY}OdMcouW=h(a4JNhU8cxSI9=YW{EBxy1tNh_UeB95c7xrlgb{DlOIbIO6&%Cnv
z7y*k-=))JNLm8Pp0%1Y~^`&nk+shNBUpEIeq<Nk+rc|`_<Q~0Ow^?5c-Qzwpxk6?w
zdYEjT>1jrq8)xfJ+|~7us)}BV#$88qu6-lwO9P$@gvT)`|HT+J5s!HuRovyPV4OsD
zBNwVP;}s-PWUCsg-I)Xu`*`=~E`No85OP}RXEJSVrv9}SeqF0o;&J*c+1i8d@T-a2
zZM$i0ZRUiU$NYB*Cr}H<Xj>+rt*-r0@m9Tl0&YaWP#Wpw1;_)yZ1Zsu<iN4U<M5Og
z;V1sMh1$ITmTO47IU3)(B{qM!Tz~MO`M<y3)rxkaq~s*{46ywzG_7E5n@!x($XF5*
z8{oq%T-LB(B{m}w@}K2fzSBa?1x@IEvBH^<$IqbO>3~Y8ap$6roBq{KO<na!DZZBJ
z&&rI3lV;x8##_T<pFrxhR&MHFOW=Cmp9kMU)CFx<5Gt*h^%<EJQMNUTM6G?k|BM62
zS~VGfw<#9+pF{hh9!pK{<RVXNOI?!yf8V=C7_r~b%Wl24D?9e$_fD+Y+T@$l6U;4I
zL0`TJPN~)mY7?|BrSfe2_4tk*px%ipnzDXkHCD2yUKZ{%m;f~^71_z*3Y}Vb;Nr_f
zfc#HD4#;e>P_8V*wat!H`0@!#L3@7lC$IVMExxp~Uqt8b<i%<wwxOae5AK2Q(_)Sg
zTXh5`1R-hx2WN4UOP<|K&tq7%OUGxL$BDh*V>u<;m$N9BqDLZFzXja8{B1ktSSYZv
z?9Fwf!0aj2i%_mE(byUImZl)|qDfiK35Z%iZ@3iIlzVvteL;hGgmF+g)+Dhz@emNe
z*3Ta}qbJIX)X|c9Yb`b_=yjtFy+eh-DS6pW4S%fM@fCBo{e_+UfC30;+9rk*>{|H-
zu>%-_b%CWsRMoAHe`5b*x#vi0qPaVEfH6sQ^Peh#&jvd?3ERJ%fYG~bgdardNaM!f
zdP6Bcw~qom7+{zGObh&s`I6oWrAbaG-yihv84p@bjZ!Q2fLDH!_1^nL-*Yhnw+S5*
zwp*LODCA(%Y!d~);iDA>9fQsK;LOx(xW+kvU<YQANRXD9vTQMxDR6PR(E8Vf7nVte
zJuF6bF3DdKK9Z1lK9s?D5i|+m&s=UYBq*G>7fSwNww5RP0h*TXj393?Fm1eh8yacg
z56||?q58~)XZg{b&A+v@+L`g`5jkknVtb}1*IoxN){8_-5X?yykrg=@JIb-?JQFL8
zeyXrhuVUCy{5x4HWh!kV@Wx)@^MM<>XgkQDss0|Z&(%Lk0&;KbuKUYOvmbjff_9vZ
z!V&3Ug<Ro{28&`If&m`Gz(|LuHtUa+q@cn~{AY|X8!0`Z9pJV&JNkTP81%EoGiI2^
zU3pSR<yr|*_h|G=a$<E6mW@IgT{1fjpG`!^aP6F$-eA>acaN~4KO_}u^sjP&Mjz^o
z!^_>ktOlDMOB0QU`hlgzwCEqB0KxG%zx6KL;bibw>&wdTX1bCun_7egOq^AhppLH{
zB|YI{y!RLk(~~2qM12bpr9^;W#h2pDW}Mxtv$rL+UGDv{q`InDR;ndyjgh;Q?75B{
zv9|d?Y!|irBe<zVkQ=c-NWj94a(B@%=4EvyBQZ<^Av}_G+K+oJLH<Za#<V-G7b@@V
zeoMI5oCr#K>p{F_ACNq2ETt61(byeq`nCdDZnOA7-D$pqy|eK!S<TZl9EYM${{~K%
zl7wKfhh9yH#wl;#eS$XooV0JPzT*dO02~oGyh4WYhYmfJN3d9LG(T6(I}m|H-`1N2
z3+f<>|0+COqp2}*<$<6YHL=QBM1Uaw;J#h_+HDwYS>7tw8|rbHYxx1s#8y4Vmv*74
zV%X#NHBk^(bnc`@j;OY#LB$GCKNBhf`Y<bZI+0+{-ckF@Sz5AH{orrumaz0|oT&bE
zbs9gsi^|ydC2aj9`)`{^!3R!=jsEj}p%%?4O%2B7@$mAqg62)$%O5^{&2V0-B#`Eg
zqjDwG?qa({<T%O`{N@D+a&dd#!M!?7R^!%{FU?}BHL_NrcMeACL@lPJ6|rD0k?%Cb
zuPW;N*7D6o6#`uDwcjxBTQ$F-2CCGUzsY`6Pks-lcEKF9$+w_zn)BedCP$19<MNHp
zs#FS(Ky)SJ4Qok<RHIZ+nzsI=t4<F#^OHKW7)@Yiw}TKUqeIn1!%7Mr;!@JM@<InM
zV{pITe)EH2@EUA(uN7iaz$U@ZF|oXkTPc4;Za!1<;wVEf(7YCEhXN5ZiPgYb$Gv}A
z-2G{+QbVQgFrwFM&cQh+;8|p8NX^rG&EdiAWOJb}fw4N{@QMyed$FZXi*Dno`Z@%Z
zvJi-j)!odK)t7XXm<HKlcK7e08MpL#%-J?M{|f)lurssvgqA`tK3FeRO0*?5@%w>}
zDrRlFt41833o_9*Ua$9bbe&X8BM=?pLf61--D2Yra4;_R2{U$1y69@{S^-bUmCp3I
z6YFj2N7TIe<LYa5$CBDF7n|!}(RpIilI(Oq64eYF%uqqgw-?v(P}OZ32wyM3&pM$k
zq|@S-Vu#ypDLx$Rk^ZTGRFofW&e74v*=}I!hIr<AL>~$lEFHWbaF2C5@f>qn`<%9%
z8-GXEpW*$b)ug$(gYl|HFYCx&_*P1R7(+>^2=XcKsQx`&DRrH8%RD(rWrjvO4`GX)
zGPW5v`Ou%-&jdQ?lUq+bz{%Ah`ow^mCEwoMTeu>~^^vHLh?fXi2(D$HaEnvP+TD5S
z9((4v6om#X`qxPnmV8AXGyj{OWT1_1@2L<FqG`t_8#@a=$NcZ_zCfM&*9g%V4xxzt
zS{637%XgwAEU*-%Rl$utz2w*4GvnOvk6a<$e8ug*GfWn&eFR}^_rB1x10M#=0Te+s
zO)c#zJ()MtU2vZd?KU<P3Gs(NJC#;};pvfmfMjfjo!g)qs)5?NJv9*LgI;fdF$QJT
z&(OOx1nU~FJc3q>FKidmyylEQ;7U|dBh5@c;eC1W{Mv&6ps3eSmg7V}7hu+J$*ZZo
z)BeoAAQ*`g{SnfUo$O<I^ZY9u?gK9Xfnw%CQkn$1D4Sl`Nw|QYlWlfJpvVv>z!t`s
zuqCu0UsVJwYT^h8)wh+LeqbXz`;B3pI2O1(nOXENn$g7cKZis!#s$}E*Bp4nHF?7j
z_zqh6^?Z{pAW!DmJd|0iC|cBI6mX|vKGy`JyIv=PQ9%v|hf()*yIPb5QWMjB_*@s{
zqRboklDvMgpa?6@z^t~4t=QOgd-&}~=T9eU*z<SLq`mq-qrL!&n83zqG5sklSPF_n
za9^J~Hw|i_TFoG_Bn3(zmv@^Ts#ux*-T}U^{|4v-xtl<Gb~7MZ10pf{OkojbhiQ}~
zaJW54J<F#i;7Qf|8Gr7?5pumxMKFt4y<s5f_W3to1r>nW1Bb>A#RStbD4(z)wnHnl
zLF7Uz4Ffk^c2Y4x8-_F6?_!M+y4$P+*~VOo!{8(F@V*4}p>%e`diWC0Ig+}l$?+X<
zS#ZFQe!BZX5(y_c6dEaMqLa5ClhZ&D>xE(^h-T{7lxFypUc*n!2Ai(M(hPcTJ4&!F
z*F|~n#rRWn67H0Xxk{}Wk=3+)S%3y}LXyOaDt={?_!DOcDZ*TmiB+E~MOOb@5C#ke
z%mABMaK~#WzON=xs-v%1I1x8^n?OGcrYQnEt8{1FeGR+F(KS5ohX+Bl$Y$$m6Uclg
zWTQDRvoHa})>0nX$x7h0Ji&=yx%8V`5^-pO5p%a{sqg`j2JCVlzncT;+eqZyc&qsq
zG_yl9(O=##3%!=mSU~Ab)eJ~WON497o?GGlmp0hC_@dhUP6PwIQwfE2{oQ$v+%Gb^
z3~V8rTDVUVsIkPs9Ytm9vU2_RyEJp|AlOh2Sc-bqZ<U=1%5Rk)YMwgfQ3I%S;J$)k
zi}2OKM0KiGKyu*%KyrSw+Pqe0t>Z#50yKf(kS)O!3q3GQ-i1xCgkcx{5uu191OSpF
z01`Ju7cBx|%%f`#Yr(U_|HXx}H5{TPII;1hS*Y6g7KPTQ5$gUJ`+g6@qLeOAhfFn)
z|2HiQv;fT#ApGO*{eyK++iMO6aRjTyQj^?JAiR@j1#^m=SqsACSFltVpIT28iiWp)
zj`R|NXZq|3RG>-9dpiK_99!fMJQ7y1XfwFbe#=G4L}eWo<31tbcRsNV^_#DFDPgRb
z=sz;iMCb&q{N{I}YY93NTohX`p5~e1-}GSlIYkj9_bhdw!-g>~&jg5me<DxZ{a2$u
zGTP7=5Gl7Dzwe|*qCW}Z<V*YU7^ZD1t|V2MaODh)`j9{)*~wSEtjQ<0rU%@4Q5o;y
zswGLJnZVR||EH-dkB74D{`VNh&I}&LK1$X+CRwr%CQF3!C`&X$r6Ez4k#!6*h?x)(
zAxp@f<#}kazLpfy$WHNOS0cN-m*4N7_s{#j&gb0s`J8iouXBCRx$i3mmDoaaz~*0I
zkf_CPW1P^|YP|A~7R%I9ty)&+DHB6{x+AdUS3QqZ3-7Q2=;^hLo7bIWYrgTaxpcGa
z0EvnAlWp8|BPu=|WpXW#lEaY1Ok~=K<60*&x5Cpf<kA5VT0SFPFF&YRFoPQ<Rjq6k
z$3&(kTs=Q%lPXS$Ugw9)k*&G@<`+~I<5)Tfp`y*MkFKTH^O8c+b2`d+G3E+3Jwa8s
z{*{w^wRmBD<vx+z(A`QgQj;ukYP(GX&g1+S0YQun8`aDcKcW&UcP^)hc*k-IoH<u_
ze*!tZICLrVH;My9kvsx2B8PmuJxpLNVs9o~Eeg}f00T7HwFhH65bN$`W?8VIU?Pjf
zgocMS4+c$Y&b|jVvLi7pMCfg{^IJgznVcX~5^(?<P6kz0q7BV~4r8U^&^Y<8L=kbX
zB(s!?@A<-}=0E4`y@mzdCg2<bAU`kK$Z_cvJbWK^I>*Paq}<m;NC8ebrjG!6-64$=
z%Ho_sEipw7=nZ9&(QaXuUtG;)S7B5<fd|SC8Qwb7psclj^;(?tKWp1nayWUf4Pt#J
z(0|)s3RlIE3gb{b?2Ea92>sf3`zt&DlZR+cp=(Mu+xy5NcPR3hEyC9R_qZ42x@ac&
zM6AIX9>|=UL~Cn{e4~pd5<4ZMTHE-})>a`)6MiO#vvCNu?2xvRt~~v(-eg&{GhOyd
zy&&`e_{ye^1*;i^1aw|xAwGESPg(LZuBMPJTorZWfD5U>;sFU6X*~BmO>q^eBG8n4
z{)(YrzO5vAyTd(aIF=rbE5JxUq=wGI7)en_yV)_Phm%Z1Q#r3%_Ga;2k(L@3@;ly}
zEM$$+id(~aU|)LziYU~YJ4FmQZ{ZT*DqX|X>H8*zXK0hV4F{;P0jhrBN*a&+BWku)
zt3_b*s=3i9srgQ0+JO#X0jDGV$N_2WUoj`UHjwN#NF`=q-A_GUJJajHQ|??Z@r6kq
z+IZS53hAU*{(j2&S`Bg=|DOHqhY@P&MVNu3tw%M(K?oO)kiW(UcfR6nJE+Q{!SVN#
zq!rNLJp3uauE2LTO6nY!<PF*22cEop#%ezH<wonMNOj5)gNY0uOt4EkS>aIKVq%f!
z_G|xVi>cnXRhtG&hxXT}0uwt~KSB@=J2B?i6LE<3OWcZYHK{osAj;+smy+)W^knW1
zjWBrv5>6i~cc1nVmB_T}NQwAmbnzzk*Z?Th&+`e6LLfAFp=`J*_f~|EzWq^2Cw!ih
z`;wk;@%|y5AmMzEF2%}&jMSu5WQPWicc-`1{Z`~MP~G?cCi1{Ry~3&U4WX0xQ5Vh@
zj}wP<UUdCA|D|$J(QI+`P>S(KW!JUeSJ{?*P2F|G4mn=I3iu4RZJ<WyiH6#Gw+_vm
z6KrCqrL^tq?ynLQ12O}ffygK87Xgp|dEyeb@I8EqQ|-lEI=`l1+?Ub-e|FtX%4CiV
zjTIaKg9-RSV~34~@EbWpx6@GE`U?eia(G|WlH-n-NnGfb*Up={U{i6tE5kbamy2`&
zcHKU~a%o60O;`axzT4=@tKVv!;K`Xu7vzFNl#Ub1t`E#~`P^mb*K1-wr)tdCTn%Z4
zGOF=}#l!D{u?;WMa(B)|Ug7y9c|_OpPXEEwp_)%H=dz-im6-!nmLpca7CZG~MR<=#
zH&_za&+!O$v$6AzuZ)E_;6gxVNhLbc_>}MkxzNC?aenfSJ!eXO3WepqCgmgr=484(
zy!ST6I^TO;xYm1;g@Wupk4es<o4ZPtjY}}7Eyjw4)^I-bC{#o7sMPZifaNzCQUOB7
zf2z0yi5q?TXL8C)mT*F#>aIZ5S5C%)x2n;({DDExl9kVk;l?~8y)Iem?5!HpB{Yz8
z^B3~<l!$2Tvw;dj6na1*`nr(=BAOU@Y4?;B&fl=U`6A0j<8$n48TV7HO^WP%FOs_c
z3budyw(LLlwXo={*dl8Ua2lD`XmS#KWaz&C*ze~{ajb;pH8Gj%b8S<0dl!P4yxC$~
z{Rre;K8duatpaa64o_J&ukJ)nB_t^}9G<Nl<w56l!~2)T(?a7sc}0Ilx^klRfbPfg
zb6HQ})1gcqHEPv`I@b5{0|=y>TX{7%6#8s40ykhsf#Jn*#d((Y%3bJ^5XcBzneWUo
z=jbr3V_lM!3}Y3>iu8tLI#M?~@*2b20p8+T{oo{nXl3P&>3qX56SsM!E$&^!3a{Wo
z;TQ}*2a9H;KXa}~oa3XL-Sq>A$D^xt3wPHnp|WXzQ<$VX3bD{MDM&Y2ftP`Y4H-1|
zepGDR0yr&iNUqj<gsUFz5Zw1*ApnBON*tKIk1g9@>z&~;lXz9y)bn=v%n?U6TYsa#
z$vNty^04O4su`cHit)OIKR@PLyFlDM{YM9KZ8*>q)+K7d^RfQn_$2k(x~6|^Ep#za
z6dM$Vh$RW-@?!A&bMeY2m9?~HN(_maG=9+s+l&^%n5o%2>jGyd#%LXPU{fVqa2<?Q
z2pDfHA$Aans^0Z~-=&U{*5g=fiGm<CZ$SUW`#Xy-*J}=YuT-Td{+&@_V~j~oXK$+s
zuJbgXksgJN@v^9#g-gz@YABVHxZ0}eeEy6tvUXJ|lD;}R(*?HxIs4JtWR!2Xx}}$3
zM%7(HQdlF+aSn2z`T=syb~o(I9sFHEh(mI0V^YQFEbz{DAH5Ro@ohG!X}RIWMFuK?
zg^f)#iy^w)m43y`YDP&1r6B7Nm&Hc3*c}nK)&?YQ?uZs}8;k4S2$MY*^ZgoAXO{)u
z6@bt7l*|mv4}oMbr1+RttjW&0Y6@wO)}y<TgoA-cH4`aiS+BVNTAEk>XuY6DfSH1O
z_ZB=p_iD^k7kf&EogJ-rWkVCd8ZU8N>q3Q-NdzP5rD+}F{MJo42Uc}|_UB;P_&BjN
zV1r#IJKf%^-=D5Yf!y(a;Zi*h-|G7&-!1gy&0GaBX)E^Tbij|KIxqU<?;)|_^1Z3z
z<20;g?HvB;g>sWYeI0&GZo#n<FOIH-;WuzeT_>b+m)VCF_LiRR3o0t^*VLE>d2U8c
zz@Q^-IH@NAH&Sn1+4;f_&O89}V`NNb4t={{2Bi23BVQV{&Mega$tvax-kg!;KdXl1
z8~;3Y0yzE_DH6+b1U~x|IN@J5KQAcb-0LEzs3H#_%7eHmn&%(UY0+skmR5dqtmcm!
zdP&<1I8sG{B1+#mt`2`(Z49jM1J<M8RqAa?Q0S}gwF5(R11o&mKm1C>K11Qx*HPVl
zmw#vCs-*3NucV;BbU;MSZOnzrXY5va^gA++i#!~^;-IY!pa(OUWBDQJeW%OTJCRV%
zqJ`5yxV`3kc8EZfd?QoJGHy00?L+bx7j!kcEDQf!Mphtu=}_feIYZh_J|&nJ#{nP%
z^BDVi32klWQJ0fcL@(XoXrrJKT4<&^%DecJH1mR&J#-?~3be8?h@lr>rczQFNy}vt
zsn%^4g+#KydeDK3`hl4^4j1&T^d&$0y0(&=WoP6q@3W0{8u>G1x^mU>n@`fG4_Y)L
z#rnYGkkLY)DcdQA)v$u+>=9b`jda+~utw`M^^}2vl7FaniO{%m`}4Gw4zi)z<METH
z%GRO@&y#tP(N^dCp2bRIb{oRC+ra9G!Ff&|=tt!>9m*Jq<1o2xe<}Nl?D#Ob)HCvU
zF%Xh*-r2)Xr#u8Af?<fzno_FqH{wg;VEDnj98>N8h0s)Kh%q7?+D~*Xa-z!l0UuH<
z$OgLxk3m|{COPkTqzwQ%hKCgYTLOP*Tb@6KOap6Ew*=Ty5N~;VD_wWCYY94Amlpox
z+ia7RW2IB{|EZy=PF!v}?pY`o`J>8HC5*aohbf@`+62sxGdoG0&hfF55iqzR%XIP3
zpm+hp24oHklEErC%Dv6f^(4eQXILoE$#b*s&MZT9eCxCC5LP-DL=CL(gWlXp;cYgU
zyS>*!q@gvakNXr0=PgJAC}Dxu?l1b;#I#!>a=4oh)C|I&pBIoO_qfm(!ypr|@F9Qp
z+IvVU5W-?bMFf3Q-Lw@gLO&>y^-HG?O#tLF*1@p!?W%31=Bvb9zyo#uIM34<)H4w=
zkbfux=DYBPt(BMS*YH^%+MiQMdNlg4;zc{I>AgYHzU|yWEa*sf>`n2r?u)DIv?d74
zb1NEl;&Tu`NYI*rdb(WhQ_cu2@PC%Ir?FZg7{?h9tO)cKN5w_W*FP1_iumDia89&o
zbd+d~SH!7!)HL*|m+>CsBrh4R@#yo~Xu6McvLtt!x>%wqeBUsnQaU!*C(`bJyZrwP
D<sSsO

literal 0
HcmV?d00001

diff --git a/samples/web-app-in-cluster-postgresql/dotnet/src/wwwroot/style.css b/samples/web-app-in-cluster-postgresql/dotnet/src/wwwroot/style.css
new file mode 100644
index 0000000..67508fa
--- /dev/null
+++ b/samples/web-app-in-cluster-postgresql/dotnet/src/wwwroot/style.css
@@ -0,0 +1,341 @@
+*, *::before, *::after { box-sizing: border-box; margin: 0; padding: 0; }
+
+:root {
+  --teal-50:   #f0fafb;
+  --teal-100:  #d0f0f5;
+  --teal-500:  #0e9db0;
+  --teal-600:  #0e6ba8;
+  --teal-700:  #0a5a8e;
+  --teal-800:  #074d78;
+  --gray-50:   #f9fafb;
+  --gray-100:  #f3f4f6;
+  --gray-200:  #e5e7eb;
+  --gray-400:  #9ca3af;
+  --gray-500:  #6b7280;
+  --gray-700:  #374151;
+  --gray-900:  #111827;
+  --white:     #ffffff;
+  --bg:        #f0f8ff;
+  --shadow-sm: 0 1px 2px rgba(0,0,0,.06);
+  --shadow:    0 4px 6px -1px rgba(0,0,0,.10), 0 2px 4px -2px rgba(0,0,0,.06);
+  --shadow-lg: 0 10px 15px -3px rgba(0,0,0,.10), 0 4px 6px -4px rgba(0,0,0,.06);
+  --radius:    12px;
+  --toast-bg:  #111827;
+  --toast-fg:  #ffffff;
+}
+
+html[data-theme="dark"] {
+  --gray-50:   #0f172a;
+  --gray-100:  #1e293b;
+  --gray-200:  #334155;
+  --gray-400:  #94a3b8;
+  --gray-500:  #cbd5e1;
+  --gray-700:  #e2e8f0;
+  --gray-900:  #f8fafc;
+  --white:     #1e293b;
+  --bg:        #0a1929;
+  --teal-50:   #0e2a38;
+  --teal-700:  #7dd3e8;
+  --shadow-sm: 0 1px 2px rgba(0,0,0,.4);
+  --shadow:    0 4px 6px -1px rgba(0,0,0,.5), 0 2px 4px -2px rgba(0,0,0,.4);
+  --shadow-lg: 0 10px 15px -3px rgba(0,0,0,.6), 0 4px 6px -4px rgba(0,0,0,.4);
+  --toast-bg:  #334155;
+  --toast-fg:  #f8fafc;
+}
+
+body {
+  font-family: 'Inter', system-ui, sans-serif;
+  background: var(--bg);
+  color: var(--gray-900);
+  min-height: 100vh;
+  transition: background 0.2s, color 0.2s;
+}
+
+/* ── Header ─────────────────────────────────────────── */
+header {
+  background: linear-gradient(135deg, var(--teal-800) 0%, var(--teal-600) 100%);
+  color: #ffffff;
+  padding: 1.5rem 2rem;
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  flex-wrap: wrap;
+  gap: 1rem;
+  box-shadow: var(--shadow-lg);
+}
+
+.header-left h1 { font-size: 1.6rem; font-weight: 700; letter-spacing: -0.02em; }
+.header-left p  { font-size: 0.85rem; opacity: 0.8; margin-top: 2px; }
+
+.header-right { display: flex; align-items: center; gap: 0.6rem; }
+
+#btn-dark-mode {
+  background: rgba(255,255,255,.15);
+  color: #ffffff;
+  border: 1.5px solid rgba(255,255,255,.3);
+  border-radius: 8px;
+  padding: 0.5rem;
+  cursor: pointer;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  transition: background 0.15s, transform 0.1s;
+}
+#btn-dark-mode:hover { background: rgba(255,255,255,.25); transform: translateY(-1px); }
+
+#btn-add {
+  background: #ffffff;
+  color: var(--teal-700);
+  border: none;
+  border-radius: 8px;
+  padding: 0.55rem 1.2rem;
+  font-size: 0.9rem;
+  font-weight: 600;
+  cursor: pointer;
+  display: flex;
+  align-items: center;
+  gap: 0.4rem;
+  transition: background 0.15s, transform 0.1s;
+  white-space: nowrap;
+}
+#btn-add:hover { background: var(--teal-50); transform: translateY(-1px); }
+
+/* ── Content area ────────────────────────────────────── */
+.content {
+  max-width: 820px;
+  margin: 2rem auto;
+  padding: 0 1.5rem 3rem;
+}
+
+/* ── Table ───────────────────────────────────────────── */
+#activity-table {
+  width: 100%;
+  border-collapse: collapse;
+  background: var(--white);
+  border-radius: var(--radius);
+  box-shadow: var(--shadow);
+  overflow: hidden;
+  transition: background 0.2s;
+}
+
+#activity-table thead tr {
+  background: linear-gradient(135deg, var(--teal-800) 0%, var(--teal-600) 100%);
+  color: #ffffff;
+}
+
+#activity-table th {
+  padding: 0.85rem 1.1rem;
+  font-size: 0.85rem;
+  font-weight: 600;
+  letter-spacing: 0.02em;
+  text-align: left;
+}
+
+#activity-table th.col-actions { text-align: center; }
+
+#activity-table td {
+  padding: 0.75rem 1.1rem;
+  font-size: 0.93rem;
+  color: var(--gray-900);
+  border-bottom: 1px solid var(--gray-200);
+  transition: background 0.15s, color 0.2s, border-color 0.2s;
+}
+
+#activity-table tbody tr:last-child td { border-bottom: none; }
+#activity-table tbody tr:hover td { background: var(--teal-50); }
+
+.col-btn {
+  width: 1px;
+  text-align: center;
+  padding-left: 0.3rem !important;
+  padding-right: 0.3rem !important;
+  white-space: nowrap;
+}
+
+#activity-table td.col-btn:last-child { padding-right: 0.6rem !important; }
+
+/* ── Row action buttons ──────────────────────────────── */
+.btn-edit, .btn-delete {
+  display: inline-flex;
+  align-items: center;
+  gap: 0.3rem;
+  padding: 0.55rem 0.75rem;
+  border-radius: 6px;
+  font-size: 0.8rem;
+  font-weight: 600;
+  cursor: pointer;
+  transition: background 0.15s, color 0.2s, border-color 0.2s, transform 0.1s;
+  white-space: nowrap;
+  width: 90px;
+  justify-content: center;
+}
+
+.btn-edit {
+  border: 1.5px solid var(--teal-700);
+  background: var(--white);
+  color: var(--teal-700);
+}
+
+.btn-edit:hover {
+  background: var(--teal-50);
+  transform: translateY(-1px);
+}
+
+.btn-delete {
+  border: none;
+  background: var(--teal-600);
+  color: #ffffff;
+}
+
+.btn-delete:hover {
+  background: var(--teal-700);
+  transform: translateY(-1px);
+}
+
+/* ── Empty cell ──────────────────────────────────────── */
+.empty-cell {
+  text-align: center;
+  color: var(--gray-400) !important;
+  font-style: italic;
+  padding: 3rem 1rem !important;
+}
+
+/* ── Modal overlay ───────────────────────────────────── */
+#overlay, #delete-overlay {
+  display: none;
+  position: fixed;
+  inset: 0;
+  background: rgba(0,0,0,.45);
+  z-index: 100;
+  align-items: center;
+  justify-content: center;
+  padding: 1rem;
+}
+#overlay.open, #delete-overlay.open { display: flex; }
+
+.modal {
+  background: var(--white);
+  border-radius: var(--radius);
+  box-shadow: var(--shadow-lg);
+  width: 100%;
+  max-width: 460px;
+  overflow: hidden;
+  transition: background 0.2s;
+}
+
+.modal-header {
+  background: linear-gradient(135deg, var(--teal-800) 0%, var(--teal-600) 100%);
+  color: #ffffff;
+  padding: 1.1rem 1.4rem;
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+}
+.modal-header h2 { font-size: 1rem; font-weight: 600; }
+
+#btn-close-modal, #btn-close-delete-modal {
+  background: none;
+  border: none;
+  color: rgba(255,255,255,.8);
+  cursor: pointer;
+  font-size: 1.4rem;
+  line-height: 1;
+  padding: 2px;
+  transition: color 0.15s;
+}
+#btn-close-modal:hover, #btn-close-delete-modal:hover { color: #ffffff; }
+
+.modal-body {
+  padding: 1.4rem;
+  color: var(--gray-700);
+  font-size: 0.93rem;
+  line-height: 1.5;
+  transition: color 0.2s;
+}
+
+.modal form {
+  padding: 1.4rem;
+  display: flex;
+  flex-direction: column;
+  gap: 1rem;
+}
+
+.field { display: flex; flex-direction: column; gap: 0.3rem; }
+
+.field label { font-size: 0.82rem; font-weight: 600; color: var(--gray-700); }
+
+.field input {
+  padding: 0.55rem 0.8rem;
+  border: 1.5px solid var(--gray-200);
+  border-radius: 7px;
+  font-size: 0.9rem;
+  font-family: inherit;
+  color: var(--gray-900);
+  background: var(--white);
+  outline: none;
+  transition: border-color 0.15s, box-shadow 0.15s, background 0.2s, color 0.2s;
+}
+.field input:focus {
+  border-color: var(--teal-500);
+  box-shadow: 0 0 0 3px rgba(14,109,168,.15);
+}
+
+.modal-actions {
+  display: flex;
+  justify-content: flex-end;
+  gap: 0.6rem;
+  padding: 0 1.4rem 1.4rem;
+}
+
+.btn-secondary {
+  padding: 0.55rem 1.1rem;
+  border-radius: 7px;
+  border: 1.5px solid var(--teal-700);
+  background: var(--white);
+  color: var(--teal-700);
+  font-size: 0.88rem;
+  font-weight: 600;
+  cursor: pointer;
+  transition: background 0.15s, color 0.2s, border-color 0.2s;
+}
+.btn-secondary:hover { background: var(--teal-50); }
+
+.btn-primary {
+  padding: 0.55rem 1.3rem;
+  border-radius: 7px;
+  border: none;
+  background: var(--teal-600);
+  color: #ffffff;
+  font-size: 0.88rem;
+  font-weight: 600;
+  cursor: pointer;
+  transition: background 0.15s;
+}
+.btn-primary:hover { background: var(--teal-700); }
+
+/* ── Toast ───────────────────────────────────────────── */
+#toast {
+  position: fixed;
+  bottom: 1.5rem;
+  right: 1.5rem;
+  background: var(--toast-bg);
+  color: var(--toast-fg);
+  padding: 0.65rem 1.1rem;
+  border-radius: 8px;
+  font-size: 0.85rem;
+  opacity: 0;
+  transform: translateY(8px);
+  pointer-events: none;
+  transition: opacity 0.2s, transform 0.2s;
+  z-index: 200;
+}
+#toast.show { opacity: 1; transform: none; }
+
+/* ── Responsive ──────────────────────────────────────── */
+@media (max-width: 600px) {
+  header   { padding: 1.2rem 1rem; }
+  .content { padding: 1rem 0.75rem 3rem; }
+  .col-btn { white-space: nowrap; }
+  .btn-edit, .btn-delete { width: auto; padding: 0.55rem 0.5rem; }
+}
+

From e55ca2cdec2deb9daa6516183f9af0bbc166af1f Mon Sep 17 00:00:00 2001
From: Paolo Salvatori <leprino@hotmail.com>
Date: Tue, 8 Sep 2026 18:08:52 +0200
Subject: [PATCH 13/20] Link the Python and the .NET version of every sample
 from the README

The Samples table now points at both implementations, the intro explains that
they behave identically and share the Kubernetes names (so a sample can be
switched from one to the other in place), the layout tree shows the python/
and dotnet/ subfolders, and the prerequisites mention the optional .NET SDK,
needed only to build outside Docker.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
---
 README.md | 40 ++++++++++++++++++++++++++--------------
 1 file changed, 26 insertions(+), 14 deletions(-)

diff --git a/README.md b/README.md
index 2db3130..842e00f 100644
--- a/README.md
+++ b/README.md
@@ -12,6 +12,7 @@ It contains two kinds of content:
 - An [Azure subscription](https://azure.microsoft.com/free/) (for cloud deployments) or a running [LocalStack for Azure](https://docs.localstack.cloud/azure/) instance (for local deployments).
 - [Azure CLI](https://learn.microsoft.com/en-us/cli/azure/install-azure-cli) (`az`), authenticated with `az login`.
 - [Docker](https://docs.docker.com/get-docker/) to build and run the container images.
+- Optional: the [.NET SDK 10.0](https://dotnet.microsoft.com/en-us/download/dotnet/10.0), only needed to build or run the .NET version of the web app outside Docker (the Docker build uses the SDK image).
 - [kubectl](https://kubernetes.io/docs/tasks/tools/) to manage the cluster.
 - [yq](https://github.com/mikefarah/yq), and (depending on the sample) `sqlcmd` or `psql` on the host machine.
 - An SSH key pair at `~/.ssh/id_rsa.pub` (used to provision the AKS node pools).
@@ -94,31 +95,40 @@ The [scripts/](scripts/) folder also contains optional add-on installers you can
 
 ## Samples
 
-Every sample deploys the same *Vacation Planner* web app, a small Python [Flask](https://flask.palletsprojects.com/) single-page application, and differs only in the Azure data service that persists the activity data behind it, listed in the table below. Keeping the application identical makes the comparison the point: what changes from one sample to the next is the data service, its provisioning, and how the app authenticates to it.
+Every sample deploys the same *Vacation Planner* web app and differs only in the Azure data service that persists the activity data behind it, listed in the table below. Keeping the application identical makes the comparison the point: what changes from one sample to the next is the data service, its provisioning, and how the app authenticates to it.
+
+The web app comes in two implementations with identical behaviour: a Python [Flask](https://flask.palletsprojects.com/) app and an [ASP.NET Core](https://learn.microsoft.com/en-us/aspnet/core/) Razor Pages app on .NET 10, each in its own subfolder of the sample (`python/` and `dotnet/`). Both read the same environment variables, use the same Kubernetes names and share the data store, so deploying one version over the other simply rolls the Deployment to the other implementation; only the container image name differs (`vacation-planner-<store>` versus `vacation-planner-<store>-dotnet`).
 
 ![Vacation Planner](images/vacation-planner.png)
 
-To run any sample you must first create the AKS cluster with one of the two scripts above. Then pick a sample from the [samples/](samples/) folder and run the numbered scripts in its `samples/<sample>/scripts` folder in order. The web app source code for each sample lives in `samples/<sample>/src`.
+To run any sample you must first create the AKS cluster with one of the two scripts above. Then pick a sample and a language from the table below and run the numbered scripts in its `samples/<sample>/<language>/scripts` folder in order. The web app source code lives in `samples/<sample>/<language>/src`.
 
 | Sample | Description |
 | ------ | ----------- |
-| [web-app-sql-database](samples/web-app-sql-database/python/README.md) | Stores activities in an [Azure SQL Database](https://learn.microsoft.com/en-us/azure/azure-sql/database/sql-database-paas-overview), connecting with a SQL login over TDS. |
-| [web-app-mysql-flexible-server](samples/web-app-mysql-flexible-server/python/README.md) | Stores activities in an [Azure Database for MySQL flexible server](https://learn.microsoft.com/en-us/azure/mysql/flexible-server/overview). |
-| [web-app-postgresql-flexible-server](samples/web-app-postgresql-flexible-server/python/README.md) | Stores activities in an [Azure Database for PostgreSQL flexible server](https://learn.microsoft.com/en-us/azure/postgresql/flexible-server/overview). |
-| [web-app-in-cluster-postgresql](samples/web-app-in-cluster-postgresql/python/README.md) | Stores activities in an in-cluster [PostgreSQL](https://www.postgresql.org/) database deployed as a Kubernetes [StatefulSet](https://kubernetes.io/docs/concepts/workloads/controllers/statefulset/) (a primary with two streaming-replica standbys), instead of a managed Azure data service. |
-| [web-app-cosmosdb-mongodb-api](samples/web-app-cosmosdb-mongodb-api/python/README.md) | Stores activities in a collection of an [Azure Cosmos DB for MongoDB](https://learn.microsoft.com/en-us/azure/cosmos-db/mongodb/introduction) account. |
-| [web-app-cosmosdb-nosql-api](samples/web-app-cosmosdb-nosql-api/python/README.md) | Stores activities in a container of an [Azure Cosmos DB for NoSQL](https://learn.microsoft.com/en-us/azure/cosmos-db/nosql/) account. |
-| [web-app-blob-storage](samples/web-app-blob-storage/python/README.md) | Stores activities in an [Azure Blob Storage](https://learn.microsoft.com/en-us/azure/storage/blobs/storage-blobs-introduction) container, using a connection string. |
-| [web-app-file-storage](samples/web-app-file-storage/python/README.md) | Stores activities as text files on an [Azure Files](https://learn.microsoft.com/en-us/azure/storage/files/storage-files-introduction) share mounted into the pods by the [Azure Files CSI driver](https://learn.microsoft.com/en-us/azure/aks/azure-files-csi), over either SMB or NFS, with either a pre-created share or one provisioned on demand. The only sample whose app uses no Azure SDK at all. |
-| [web-app-managed-identity](samples/web-app-managed-identity/python/README.md) | Stores activities in an Azure Blob Storage container, authenticating with [Microsoft Entra Workload ID](https://learn.microsoft.com/en-us/azure/aks/workload-identity-overview) (federated credential plus workload identity) instead of a secret, and optionally exposes the app through the Gateway API with a managed TLS certificate. |
+| web-app-sql-database ([Python](samples/web-app-sql-database/python/README.md), [.NET](samples/web-app-sql-database/dotnet/README.md)) | Stores activities in an [Azure SQL Database](https://learn.microsoft.com/en-us/azure/azure-sql/database/sql-database-paas-overview), connecting with a SQL login over TDS. |
+| web-app-mysql-flexible-server ([Python](samples/web-app-mysql-flexible-server/python/README.md), [.NET](samples/web-app-mysql-flexible-server/dotnet/README.md)) | Stores activities in an [Azure Database for MySQL flexible server](https://learn.microsoft.com/en-us/azure/mysql/flexible-server/overview). |
+| web-app-postgresql-flexible-server ([Python](samples/web-app-postgresql-flexible-server/python/README.md), [.NET](samples/web-app-postgresql-flexible-server/dotnet/README.md)) | Stores activities in an [Azure Database for PostgreSQL flexible server](https://learn.microsoft.com/en-us/azure/postgresql/flexible-server/overview). |
+| web-app-in-cluster-postgresql ([Python](samples/web-app-in-cluster-postgresql/python/README.md), [.NET](samples/web-app-in-cluster-postgresql/dotnet/README.md)) | Stores activities in an in-cluster [PostgreSQL](https://www.postgresql.org/) database deployed as a Kubernetes [StatefulSet](https://kubernetes.io/docs/concepts/workloads/controllers/statefulset/) (a primary with two streaming-replica standbys), instead of a managed Azure data service. |
+| web-app-cosmosdb-mongodb-api ([Python](samples/web-app-cosmosdb-mongodb-api/python/README.md), [.NET](samples/web-app-cosmosdb-mongodb-api/dotnet/README.md)) | Stores activities in a collection of an [Azure Cosmos DB for MongoDB](https://learn.microsoft.com/en-us/azure/cosmos-db/mongodb/introduction) account. |
+| web-app-cosmosdb-nosql-api ([Python](samples/web-app-cosmosdb-nosql-api/python/README.md), [.NET](samples/web-app-cosmosdb-nosql-api/dotnet/README.md)) | Stores activities in a container of an [Azure Cosmos DB for NoSQL](https://learn.microsoft.com/en-us/azure/cosmos-db/nosql/) account. |
+| web-app-blob-storage ([Python](samples/web-app-blob-storage/python/README.md), [.NET](samples/web-app-blob-storage/dotnet/README.md)) | Stores activities in an [Azure Blob Storage](https://learn.microsoft.com/en-us/azure/storage/blobs/storage-blobs-introduction) container, using a connection string. |
+| web-app-file-storage ([Python](samples/web-app-file-storage/python/README.md), [.NET](samples/web-app-file-storage/dotnet/README.md)) | Stores activities as text files on an [Azure Files](https://learn.microsoft.com/en-us/azure/storage/files/storage-files-introduction) share mounted into the pods by the [Azure Files CSI driver](https://learn.microsoft.com/en-us/azure/aks/azure-files-csi), over either SMB or NFS, with either a pre-created share or one provisioned on demand. The only sample whose app uses no Azure SDK at all. |
+| web-app-managed-identity ([Python](samples/web-app-managed-identity/python/README.md), [.NET](samples/web-app-managed-identity/dotnet/README.md)) | Stores activities in an Azure Blob Storage container, authenticating with [Microsoft Entra Workload ID](https://learn.microsoft.com/en-us/azure/aks/workload-identity-overview) (federated credential plus workload identity) instead of a secret, and optionally exposes the app through the Gateway API with a managed TLS certificate. |
 
 Each sample folder follows the same layout:
 
 ```
 samples/<sample>/
-├── README.md       # sample-specific documentation
-├── scripts/        # numbered deployment scripts + Kubernetes manifests
-└── src/            # Flask web app source code
+├── python/
+│   ├── README.md   # documentation of the Python version
+│   ├── images/     # architecture diagram
+│   ├── scripts/    # numbered deployment scripts, Dockerfile and Kubernetes manifests
+│   └── src/        # Flask web app source code
+└── dotnet/
+    ├── README.md   # documentation of the .NET version
+    ├── images/     # architecture diagram
+    ├── scripts/    # numbered deployment scripts, Dockerfile and Kubernetes manifests
+    └── src/        # ASP.NET Core Razor Pages web app source code
 ```
 
 ### Accessing the Vacation Planner web app
@@ -132,6 +142,8 @@ kubectl port-forward service/<service> 8080:80 -n <namespace>
 
 Then browse to [http://localhost:8080](http://localhost:8080). The exact namespace and service name for each sample are documented in its own `README.md`.
 
+Both versions of the app also expose `GET /health`, the endpoint their Kubernetes liveness and readiness probes call: it returns `{"status": "ok"}` when the data service is reachable and `503` otherwise.
+
 Alternatively, you can use a terminal UI such as [k9s](https://k9scli.io/) to select the service and start a port-forward interactively (press `<shift-f>` on a selected service or pod).
 
 ## Tutorials

From a6a45bb754b334d8711dba0d9cdd60ea2a1e490e Mon Sep 17 00:00:00 2001
From: Paolo Salvatori <leprino@hotmail.com>
Date: Tue, 8 Sep 2026 19:31:18 +0200
Subject: [PATCH 14/20] Give each sample its own namespace and container image

web-app-managed-identity used the namespace, Deployment, Service, ConfigMap,
Secret and image of web-app-blob-storage, and web-app-in-cluster-postgresql
used those of web-app-postgresql-flexible-server, so nine samples shared seven
namespaces and seven image repositories. Two samples could not run at the same
time, and whichever was pushed last overwrote the other's image in the registry
under the same tag, so the first sample's pods then pulled the wrong app.

Rename the second sample of each pair (the canonical one keeps its name):

  web-app-managed-identity        vacation-planner-blob     -> vacation-planner-identity
  web-app-in-cluster-postgresql   vacation-planner-postgres -> vacation-planner-postgres-in-cluster

in both the Python and the .NET version, covering the namespace, Deployment,
Service, ConfigMap, Secret, ServiceAccount, Gateway/HTTPRoute/Issuer,
StatefulSet references, image name and the README commands.

Renaming the namespace also broke the workload identity of the managed-identity
sample: the federated identity credential's subject embeds the namespace and the
service account, and 05-deploy-app.sh only ever created the credential when it
was missing, leaving a stale subject behind. It now compares the subject and
recreates the credential when it no longer matches, so the rename is safe on a
cluster that already ran the old version.

Validated on the LocalStack AKS emulator: all four affected samples in both
languages (3/3 pods Ready through /health, add/list/update/delete through a
port-forward and from inside the cluster), both pairs running side by side at
the same time from their own images, and a from-scratch deployment of
managed-identity (namespace and credential deleted first) coming up with zero
restarts.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
---
 .../dotnet/README.md                          |  4 +--
 .../dotnet/scripts/00-variables.sh            | 12 ++++----
 .../dotnet/scripts/configmap.yml              |  6 ++--
 .../dotnet/scripts/deployment.yml             | 30 +++++++++----------
 .../dotnet/scripts/namespace.yml              |  2 +-
 .../dotnet/scripts/secret.yml                 |  6 ++--
 .../dotnet/scripts/service.yml                |  8 ++---
 .../dotnet/scripts/statefulset.yml            | 12 ++++----
 .../python/README.md                          |  4 +--
 .../python/scripts/00-variables.sh            | 12 ++++----
 .../python/scripts/configmap.yml              |  6 ++--
 .../python/scripts/deployment.yml             | 30 +++++++++----------
 .../python/scripts/namespace.yml              |  2 +-
 .../python/scripts/secret.yml                 |  6 ++--
 .../python/scripts/service.yml                |  8 ++---
 .../python/scripts/statefulset.yml            | 12 ++++----
 .../web-app-managed-identity/dotnet/README.md |  4 +--
 .../dotnet/scripts/00-variables.sh            | 16 +++++-----
 .../dotnet/scripts/05-deploy-app.sh           | 30 +++++++++++++++----
 .../dotnet/scripts/configmap.yml              |  6 ++--
 .../dotnet/scripts/deployment.yml             | 26 ++++++++--------
 .../dotnet/scripts/gateway.yml                |  6 ++--
 .../dotnet/scripts/httproute.yml              |  6 ++--
 .../dotnet/scripts/issuer.yml                 | 12 ++++----
 .../dotnet/scripts/namespace.yml              |  2 +-
 .../dotnet/scripts/secret.yml                 |  6 ++--
 .../dotnet/scripts/service.yml                |  8 ++---
 .../web-app-managed-identity/python/README.md |  4 +--
 .../python/scripts/00-variables.sh            | 16 +++++-----
 .../python/scripts/05-deploy-app.sh           | 30 +++++++++++++++----
 .../python/scripts/configmap.yml              |  6 ++--
 .../python/scripts/deployment.yml             | 26 ++++++++--------
 .../python/scripts/gateway.yml                |  6 ++--
 .../python/scripts/httproute.yml              |  6 ++--
 .../python/scripts/issuer.yml                 | 12 ++++----
 .../python/scripts/namespace.yml              |  2 +-
 .../python/scripts/secret.yml                 |  6 ++--
 .../python/scripts/service.yml                |  8 ++---
 38 files changed, 220 insertions(+), 184 deletions(-)

diff --git a/samples/web-app-in-cluster-postgresql/dotnet/README.md b/samples/web-app-in-cluster-postgresql/dotnet/README.md
index bc5c515..2013584 100644
--- a/samples/web-app-in-cluster-postgresql/dotnet/README.md
+++ b/samples/web-app-in-cluster-postgresql/dotnet/README.md
@@ -60,7 +60,7 @@ Optionally, **after** `05-deploy-app.sh` has deployed and provisioned the databa
 The app is exposed through a `ClusterIP` service, which is only reachable from inside the cluster. Port-forward it to a local port to open it from your machine:
 
 ```bash
-kubectl port-forward service/vacation-planner-postgres 8080:80 -n vacation-planner-postgres
+kubectl port-forward service/vacation-planner-postgres-in-cluster 8080:80 -n vacation-planner-postgres-in-cluster
 ```
 
 Then browse to [http://localhost:8080](http://localhost:8080). Alternatively, use a tool such as [k9s](https://k9scli.io/) to start the port-forward interactively.
@@ -76,5 +76,5 @@ curl http://localhost:8080/health
 The app logs one line per request — the `VacationPlanner.Requests` middleware is the equivalent of the gunicorn access log of the [Python version](../python/README.md), and it covers the probes too — plus one line per database read and write and one line for every activity added, updated or deleted. [`src/appsettings.json`](src/appsettings.json) keeps every entry on a single timestamped line and holds the framework categories at warning level, so the request and store lines stand out.
 
 ```bash
-kubectl logs deployment/vacation-planner-postgres -n vacation-planner-postgres --tail=50
+kubectl logs deployment/vacation-planner-postgres-in-cluster -n vacation-planner-postgres-in-cluster --tail=50
 ```
diff --git a/samples/web-app-in-cluster-postgresql/dotnet/scripts/00-variables.sh b/samples/web-app-in-cluster-postgresql/dotnet/scripts/00-variables.sh
index d896da8..2a7562a 100644
--- a/samples/web-app-in-cluster-postgresql/dotnet/scripts/00-variables.sh
+++ b/samples/web-app-in-cluster-postgresql/dotnet/scripts/00-variables.sh
@@ -38,14 +38,14 @@ PG_LOCAL_PORT='5432'
 LOGIN_NAME='paolo'
 
 # Docker Image
-IMAGE_NAME="vacation-planner-postgres-dotnet"
+IMAGE_NAME="vacation-planner-postgres-in-cluster-dotnet"
 IMAGE_PULL_POLICY="Always"
 IMAGE_TAG="v1"
 PORT="8080"
 
 # Kubernetes
-NAMESPACE="vacation-planner-postgres"
-DEPLOYMENT_NAME="vacation-planner-postgres"
-SERVICE_NAME="vacation-planner-postgres"
-CONFIGMAP_NAME="vacation-planner-postgres-config"
-K8S_SECRET_NAME="vacation-planner-postgres-secrets"
+NAMESPACE="vacation-planner-postgres-in-cluster"
+DEPLOYMENT_NAME="vacation-planner-postgres-in-cluster"
+SERVICE_NAME="vacation-planner-postgres-in-cluster"
+CONFIGMAP_NAME="vacation-planner-postgres-in-cluster-config"
+K8S_SECRET_NAME="vacation-planner-postgres-in-cluster-secrets"
diff --git a/samples/web-app-in-cluster-postgresql/dotnet/scripts/configmap.yml b/samples/web-app-in-cluster-postgresql/dotnet/scripts/configmap.yml
index 6ca91d8..ea3bf53 100644
--- a/samples/web-app-in-cluster-postgresql/dotnet/scripts/configmap.yml
+++ b/samples/web-app-in-cluster-postgresql/dotnet/scripts/configmap.yml
@@ -1,10 +1,10 @@
 apiVersion: v1
 kind: ConfigMap
 metadata:
-  name: vacation-planner-postgres-config
-  namespace: vacation-planner-postgres
+  name: vacation-planner-postgres-in-cluster-config
+  namespace: vacation-planner-postgres-in-cluster
   labels:
-    app: vacation-planner-postgres
+    app: vacation-planner-postgres-in-cluster
 data:
   # PG_HOST points at the in-cluster primary (write) Service from statefulset.yml.
   # Values are overwritten by 05-deploy-app.sh at apply time.
diff --git a/samples/web-app-in-cluster-postgresql/dotnet/scripts/deployment.yml b/samples/web-app-in-cluster-postgresql/dotnet/scripts/deployment.yml
index 1f33e69..3f3164e 100644
--- a/samples/web-app-in-cluster-postgresql/dotnet/scripts/deployment.yml
+++ b/samples/web-app-in-cluster-postgresql/dotnet/scripts/deployment.yml
@@ -1,15 +1,15 @@
 apiVersion: apps/v1
 kind: Deployment
 metadata:
-  name: vacation-planner-postgres
-  namespace: vacation-planner-postgres
+  name: vacation-planner-postgres-in-cluster
+  namespace: vacation-planner-postgres-in-cluster
   labels:
-    app: vacation-planner-postgres
+    app: vacation-planner-postgres-in-cluster
 spec:
   replicas: 3
   selector:
     matchLabels:
-      app: vacation-planner-postgres
+      app: vacation-planner-postgres-in-cluster
   strategy:
     rollingUpdate:
       maxSurge: 1
@@ -19,13 +19,13 @@ spec:
   template:
     metadata:
       labels:
-        app: vacation-planner-postgres
+        app: vacation-planner-postgres-in-cluster
     spec:
       nodeSelector:
         kubernetes.io/os: linux
       containers:
-        - name: vacation-planner-postgres
-          image: <your-registry>.azurecr.io/vacation-planner-postgres-dotnet:v1
+        - name: vacation-planner-postgres-in-cluster
+          image: <your-registry>.azurecr.io/vacation-planner-postgres-in-cluster-dotnet:v1
           imagePullPolicy: Always
           ports:
             - name: http
@@ -34,42 +34,42 @@ spec:
             - name: PG_HOST
               valueFrom:
                 configMapKeyRef:
-                  name: vacation-planner-postgres-config
+                  name: vacation-planner-postgres-in-cluster-config
                   key: PG_HOST
             - name: PG_PORT
               valueFrom:
                 configMapKeyRef:
-                  name: vacation-planner-postgres-config
+                  name: vacation-planner-postgres-in-cluster-config
                   key: PG_PORT
             - name: PG_DATABASE
               valueFrom:
                 configMapKeyRef:
-                  name: vacation-planner-postgres-config
+                  name: vacation-planner-postgres-in-cluster-config
                   key: PG_DATABASE
             - name: PG_USER
               valueFrom:
                 configMapKeyRef:
-                  name: vacation-planner-postgres-config
+                  name: vacation-planner-postgres-in-cluster-config
                   key: PG_USER
             - name: LOGIN_NAME
               valueFrom:
                 configMapKeyRef:
-                  name: vacation-planner-postgres-config
+                  name: vacation-planner-postgres-in-cluster-config
                   key: LOGIN_NAME
             - name: DEBUG
               valueFrom:
                 configMapKeyRef:
-                  name: vacation-planner-postgres-config
+                  name: vacation-planner-postgres-in-cluster-config
                   key: DEBUG
             - name: PG_PASSWORD
               valueFrom:
                 secretKeyRef:
-                  name: vacation-planner-postgres-secrets
+                  name: vacation-planner-postgres-in-cluster-secrets
                   key: PG_PASSWORD
             - name: SECRET_KEY
               valueFrom:
                 secretKeyRef:
-                  name: vacation-planner-postgres-secrets
+                  name: vacation-planner-postgres-in-cluster-secrets
                   key: SECRET_KEY
           resources:
             requests:
diff --git a/samples/web-app-in-cluster-postgresql/dotnet/scripts/namespace.yml b/samples/web-app-in-cluster-postgresql/dotnet/scripts/namespace.yml
index 275d4f9..84d1691 100644
--- a/samples/web-app-in-cluster-postgresql/dotnet/scripts/namespace.yml
+++ b/samples/web-app-in-cluster-postgresql/dotnet/scripts/namespace.yml
@@ -1,4 +1,4 @@
 kind: Namespace
 apiVersion: v1
 metadata:
-  name: vacation-planner-postgres
+  name: vacation-planner-postgres-in-cluster
diff --git a/samples/web-app-in-cluster-postgresql/dotnet/scripts/secret.yml b/samples/web-app-in-cluster-postgresql/dotnet/scripts/secret.yml
index 1c4775b..d2662d2 100644
--- a/samples/web-app-in-cluster-postgresql/dotnet/scripts/secret.yml
+++ b/samples/web-app-in-cluster-postgresql/dotnet/scripts/secret.yml
@@ -1,10 +1,10 @@
 apiVersion: v1
 kind: Secret
 metadata:
-  name: vacation-planner-postgres-secrets
-  namespace: vacation-planner-postgres
+  name: vacation-planner-postgres-in-cluster-secrets
+  namespace: vacation-planner-postgres-in-cluster
   labels:
-    app: vacation-planner-postgres
+    app: vacation-planner-postgres-in-cluster
 type: Opaque
 data:
   # PG_PASSWORD is the in-cluster `testuser` password; SECRET_KEY is the ASP.NET Core Data Protection
diff --git a/samples/web-app-in-cluster-postgresql/dotnet/scripts/service.yml b/samples/web-app-in-cluster-postgresql/dotnet/scripts/service.yml
index ec8e47f..dbebebe 100644
--- a/samples/web-app-in-cluster-postgresql/dotnet/scripts/service.yml
+++ b/samples/web-app-in-cluster-postgresql/dotnet/scripts/service.yml
@@ -1,14 +1,14 @@
 apiVersion: v1
 kind: Service
 metadata:
-  name: vacation-planner-postgres
-  namespace: vacation-planner-postgres
+  name: vacation-planner-postgres-in-cluster
+  namespace: vacation-planner-postgres-in-cluster
   labels:
-    app: vacation-planner-postgres
+    app: vacation-planner-postgres-in-cluster
 spec:
   type: ClusterIP
   selector:
-    app: vacation-planner-postgres
+    app: vacation-planner-postgres-in-cluster
   ports:
     - name: http
       protocol: TCP
diff --git a/samples/web-app-in-cluster-postgresql/dotnet/scripts/statefulset.yml b/samples/web-app-in-cluster-postgresql/dotnet/scripts/statefulset.yml
index 667aac6..e2b8db0 100644
--- a/samples/web-app-in-cluster-postgresql/dotnet/scripts/statefulset.yml
+++ b/samples/web-app-in-cluster-postgresql/dotnet/scripts/statefulset.yml
@@ -2,7 +2,7 @@ apiVersion: v1
 kind: Secret
 metadata:
   name: pg-postgres-secret
-  namespace: vacation-planner-postgres
+  namespace: vacation-planner-postgres-in-cluster
 type: Opaque
 stringData:
   POSTGRES_PASSWORD: "SuperStrongPass123"
@@ -12,7 +12,7 @@ apiVersion: v1
 kind: ConfigMap
 metadata:
   name: pg-postgres-scripts
-  namespace: vacation-planner-postgres
+  namespace: vacation-planner-postgres-in-cluster
 data:
   # Runs only on the primary (pod-0): the official entrypoint executes
   # everything in /docker-entrypoint-initdb.d only when it runs initdb,
@@ -74,7 +74,7 @@ apiVersion: v1
 kind: Service
 metadata:
   name: pg-postgres-hl
-  namespace: vacation-planner-postgres
+  namespace: vacation-planner-postgres-in-cluster
   labels:
     app: pg-postgres
 spec:
@@ -91,7 +91,7 @@ apiVersion: v1
 kind: Service
 metadata:
   name: pg-postgres-primary
-  namespace: vacation-planner-postgres
+  namespace: vacation-planner-postgres-in-cluster
   labels:
     app: pg-postgres
     role: primary
@@ -110,7 +110,7 @@ apiVersion: v1
 kind: Service
 metadata:
   name: pg-postgres-read
-  namespace: vacation-planner-postgres
+  namespace: vacation-planner-postgres-in-cluster
   labels:
     app: pg-postgres
     role: read
@@ -127,7 +127,7 @@ apiVersion: apps/v1
 kind: StatefulSet
 metadata:
   name: pg-postgres
-  namespace: vacation-planner-postgres
+  namespace: vacation-planner-postgres-in-cluster
 spec:
   serviceName: pg-postgres-hl
   replicas: 3
diff --git a/samples/web-app-in-cluster-postgresql/python/README.md b/samples/web-app-in-cluster-postgresql/python/README.md
index de0ea5f..4525900 100644
--- a/samples/web-app-in-cluster-postgresql/python/README.md
+++ b/samples/web-app-in-cluster-postgresql/python/README.md
@@ -60,7 +60,7 @@ Optionally, **after** `05-deploy-app.sh` has deployed and provisioned the databa
 The app is exposed through a `ClusterIP` service, which is only reachable from inside the cluster. Port-forward it to a local port to open it from your machine:
 
 ```bash
-kubectl port-forward service/vacation-planner-postgres 8080:80 -n vacation-planner-postgres
+kubectl port-forward service/vacation-planner-postgres-in-cluster 8080:80 -n vacation-planner-postgres-in-cluster
 ```
 
 Then browse to [http://localhost:8080](http://localhost:8080). Alternatively, use a tool such as [k9s](https://k9scli.io/) to start the port-forward interactively.
@@ -76,5 +76,5 @@ curl http://localhost:8080/health
 The app logs one line per request — gunicorn writes an access log line for every call, the probes included, because its command passes `--access-logfile -` — plus one line per database read and write and one line for every activity added, updated or deleted. Every entry carries a timestamp, the logger name and the level; the Azure SDK and `urllib3` stay at warning level. The [.NET version](../dotnet/README.md) writes the same trace.
 
 ```bash
-kubectl logs deployment/vacation-planner-postgres -n vacation-planner-postgres --tail=50
+kubectl logs deployment/vacation-planner-postgres-in-cluster -n vacation-planner-postgres-in-cluster --tail=50
 ```
diff --git a/samples/web-app-in-cluster-postgresql/python/scripts/00-variables.sh b/samples/web-app-in-cluster-postgresql/python/scripts/00-variables.sh
index 8899ac7..511c161 100644
--- a/samples/web-app-in-cluster-postgresql/python/scripts/00-variables.sh
+++ b/samples/web-app-in-cluster-postgresql/python/scripts/00-variables.sh
@@ -38,14 +38,14 @@ PG_LOCAL_PORT='5432'
 LOGIN_NAME='paolo'
 
 # Docker Image
-IMAGE_NAME="vacation-planner-postgres"
+IMAGE_NAME="vacation-planner-postgres-in-cluster"
 IMAGE_PULL_POLICY="Always"
 IMAGE_TAG="v1"
 PORT="8080"
 
 # Kubernetes
-NAMESPACE="vacation-planner-postgres"
-DEPLOYMENT_NAME="vacation-planner-postgres"
-SERVICE_NAME="vacation-planner-postgres"
-CONFIGMAP_NAME="vacation-planner-postgres-config"
-K8S_SECRET_NAME="vacation-planner-postgres-secrets"
+NAMESPACE="vacation-planner-postgres-in-cluster"
+DEPLOYMENT_NAME="vacation-planner-postgres-in-cluster"
+SERVICE_NAME="vacation-planner-postgres-in-cluster"
+CONFIGMAP_NAME="vacation-planner-postgres-in-cluster-config"
+K8S_SECRET_NAME="vacation-planner-postgres-in-cluster-secrets"
diff --git a/samples/web-app-in-cluster-postgresql/python/scripts/configmap.yml b/samples/web-app-in-cluster-postgresql/python/scripts/configmap.yml
index 6ca91d8..ea3bf53 100644
--- a/samples/web-app-in-cluster-postgresql/python/scripts/configmap.yml
+++ b/samples/web-app-in-cluster-postgresql/python/scripts/configmap.yml
@@ -1,10 +1,10 @@
 apiVersion: v1
 kind: ConfigMap
 metadata:
-  name: vacation-planner-postgres-config
-  namespace: vacation-planner-postgres
+  name: vacation-planner-postgres-in-cluster-config
+  namespace: vacation-planner-postgres-in-cluster
   labels:
-    app: vacation-planner-postgres
+    app: vacation-planner-postgres-in-cluster
 data:
   # PG_HOST points at the in-cluster primary (write) Service from statefulset.yml.
   # Values are overwritten by 05-deploy-app.sh at apply time.
diff --git a/samples/web-app-in-cluster-postgresql/python/scripts/deployment.yml b/samples/web-app-in-cluster-postgresql/python/scripts/deployment.yml
index 6939a25..43ecbce 100644
--- a/samples/web-app-in-cluster-postgresql/python/scripts/deployment.yml
+++ b/samples/web-app-in-cluster-postgresql/python/scripts/deployment.yml
@@ -1,15 +1,15 @@
 apiVersion: apps/v1
 kind: Deployment
 metadata:
-  name: vacation-planner-postgres
-  namespace: vacation-planner-postgres
+  name: vacation-planner-postgres-in-cluster
+  namespace: vacation-planner-postgres-in-cluster
   labels:
-    app: vacation-planner-postgres
+    app: vacation-planner-postgres-in-cluster
 spec:
   replicas: 3
   selector:
     matchLabels:
-      app: vacation-planner-postgres
+      app: vacation-planner-postgres-in-cluster
   strategy:
     rollingUpdate:
       maxSurge: 1
@@ -19,13 +19,13 @@ spec:
   template:
     metadata:
       labels:
-        app: vacation-planner-postgres
+        app: vacation-planner-postgres-in-cluster
     spec:
       nodeSelector:
         kubernetes.io/os: linux
       containers:
-        - name: vacation-planner-postgres
-          image: <your-registry>.azurecr.io/vacation-planner-postgres:v1
+        - name: vacation-planner-postgres-in-cluster
+          image: <your-registry>.azurecr.io/vacation-planner-postgres-in-cluster:v1
           imagePullPolicy: Always
           ports:
             - name: http
@@ -34,42 +34,42 @@ spec:
             - name: PG_HOST
               valueFrom:
                 configMapKeyRef:
-                  name: vacation-planner-postgres-config
+                  name: vacation-planner-postgres-in-cluster-config
                   key: PG_HOST
             - name: PG_PORT
               valueFrom:
                 configMapKeyRef:
-                  name: vacation-planner-postgres-config
+                  name: vacation-planner-postgres-in-cluster-config
                   key: PG_PORT
             - name: PG_DATABASE
               valueFrom:
                 configMapKeyRef:
-                  name: vacation-planner-postgres-config
+                  name: vacation-planner-postgres-in-cluster-config
                   key: PG_DATABASE
             - name: PG_USER
               valueFrom:
                 configMapKeyRef:
-                  name: vacation-planner-postgres-config
+                  name: vacation-planner-postgres-in-cluster-config
                   key: PG_USER
             - name: LOGIN_NAME
               valueFrom:
                 configMapKeyRef:
-                  name: vacation-planner-postgres-config
+                  name: vacation-planner-postgres-in-cluster-config
                   key: LOGIN_NAME
             - name: DEBUG
               valueFrom:
                 configMapKeyRef:
-                  name: vacation-planner-postgres-config
+                  name: vacation-planner-postgres-in-cluster-config
                   key: DEBUG
             - name: PG_PASSWORD
               valueFrom:
                 secretKeyRef:
-                  name: vacation-planner-postgres-secrets
+                  name: vacation-planner-postgres-in-cluster-secrets
                   key: PG_PASSWORD
             - name: SECRET_KEY
               valueFrom:
                 secretKeyRef:
-                  name: vacation-planner-postgres-secrets
+                  name: vacation-planner-postgres-in-cluster-secrets
                   key: SECRET_KEY
           resources:
             requests:
diff --git a/samples/web-app-in-cluster-postgresql/python/scripts/namespace.yml b/samples/web-app-in-cluster-postgresql/python/scripts/namespace.yml
index 275d4f9..84d1691 100644
--- a/samples/web-app-in-cluster-postgresql/python/scripts/namespace.yml
+++ b/samples/web-app-in-cluster-postgresql/python/scripts/namespace.yml
@@ -1,4 +1,4 @@
 kind: Namespace
 apiVersion: v1
 metadata:
-  name: vacation-planner-postgres
+  name: vacation-planner-postgres-in-cluster
diff --git a/samples/web-app-in-cluster-postgresql/python/scripts/secret.yml b/samples/web-app-in-cluster-postgresql/python/scripts/secret.yml
index 8e05228..5bb515e 100644
--- a/samples/web-app-in-cluster-postgresql/python/scripts/secret.yml
+++ b/samples/web-app-in-cluster-postgresql/python/scripts/secret.yml
@@ -1,10 +1,10 @@
 apiVersion: v1
 kind: Secret
 metadata:
-  name: vacation-planner-postgres-secrets
-  namespace: vacation-planner-postgres
+  name: vacation-planner-postgres-in-cluster-secrets
+  namespace: vacation-planner-postgres-in-cluster
   labels:
-    app: vacation-planner-postgres
+    app: vacation-planner-postgres-in-cluster
 type: Opaque
 data:
   # PG_PASSWORD is the in-cluster `testuser` password; SECRET_KEY is the Flask session
diff --git a/samples/web-app-in-cluster-postgresql/python/scripts/service.yml b/samples/web-app-in-cluster-postgresql/python/scripts/service.yml
index ec8e47f..dbebebe 100644
--- a/samples/web-app-in-cluster-postgresql/python/scripts/service.yml
+++ b/samples/web-app-in-cluster-postgresql/python/scripts/service.yml
@@ -1,14 +1,14 @@
 apiVersion: v1
 kind: Service
 metadata:
-  name: vacation-planner-postgres
-  namespace: vacation-planner-postgres
+  name: vacation-planner-postgres-in-cluster
+  namespace: vacation-planner-postgres-in-cluster
   labels:
-    app: vacation-planner-postgres
+    app: vacation-planner-postgres-in-cluster
 spec:
   type: ClusterIP
   selector:
-    app: vacation-planner-postgres
+    app: vacation-planner-postgres-in-cluster
   ports:
     - name: http
       protocol: TCP
diff --git a/samples/web-app-in-cluster-postgresql/python/scripts/statefulset.yml b/samples/web-app-in-cluster-postgresql/python/scripts/statefulset.yml
index 667aac6..e2b8db0 100644
--- a/samples/web-app-in-cluster-postgresql/python/scripts/statefulset.yml
+++ b/samples/web-app-in-cluster-postgresql/python/scripts/statefulset.yml
@@ -2,7 +2,7 @@ apiVersion: v1
 kind: Secret
 metadata:
   name: pg-postgres-secret
-  namespace: vacation-planner-postgres
+  namespace: vacation-planner-postgres-in-cluster
 type: Opaque
 stringData:
   POSTGRES_PASSWORD: "SuperStrongPass123"
@@ -12,7 +12,7 @@ apiVersion: v1
 kind: ConfigMap
 metadata:
   name: pg-postgres-scripts
-  namespace: vacation-planner-postgres
+  namespace: vacation-planner-postgres-in-cluster
 data:
   # Runs only on the primary (pod-0): the official entrypoint executes
   # everything in /docker-entrypoint-initdb.d only when it runs initdb,
@@ -74,7 +74,7 @@ apiVersion: v1
 kind: Service
 metadata:
   name: pg-postgres-hl
-  namespace: vacation-planner-postgres
+  namespace: vacation-planner-postgres-in-cluster
   labels:
     app: pg-postgres
 spec:
@@ -91,7 +91,7 @@ apiVersion: v1
 kind: Service
 metadata:
   name: pg-postgres-primary
-  namespace: vacation-planner-postgres
+  namespace: vacation-planner-postgres-in-cluster
   labels:
     app: pg-postgres
     role: primary
@@ -110,7 +110,7 @@ apiVersion: v1
 kind: Service
 metadata:
   name: pg-postgres-read
-  namespace: vacation-planner-postgres
+  namespace: vacation-planner-postgres-in-cluster
   labels:
     app: pg-postgres
     role: read
@@ -127,7 +127,7 @@ apiVersion: apps/v1
 kind: StatefulSet
 metadata:
   name: pg-postgres
-  namespace: vacation-planner-postgres
+  namespace: vacation-planner-postgres-in-cluster
 spec:
   serviceName: pg-postgres-hl
   replicas: 3
diff --git a/samples/web-app-managed-identity/dotnet/README.md b/samples/web-app-managed-identity/dotnet/README.md
index 82116c2..9d960cc 100644
--- a/samples/web-app-managed-identity/dotnet/README.md
+++ b/samples/web-app-managed-identity/dotnet/README.md
@@ -61,7 +61,7 @@ cd scripts
 By default the app is exposed through a `ClusterIP` service, which is only reachable from inside the cluster. Port-forward it to a local port to open it from your machine:
 
 ```bash
-kubectl port-forward service/vacation-planner-blob 8080:80 -n vacation-planner-blob
+kubectl port-forward service/vacation-planner-identity 8080:80 -n vacation-planner-identity
 ```
 
 Then browse to [http://localhost:8080](http://localhost:8080). Alternatively, use a tool such as [k9s](https://k9scli.io/) to start the port-forward interactively.
@@ -79,5 +79,5 @@ If you deployed the Gateway path (`DEPLOY_GATEWAY="true"`), the app is instead r
 The app logs one line per request — the `VacationPlanner.Requests` middleware is the equivalent of the gunicorn access log of the [Python version](../python/README.md), and it covers the probes too — plus one line per blob read, uploaded or deleted and one line for every activity added, updated or deleted. [`src/appsettings.json`](src/appsettings.json) keeps every entry on a single timestamped line and holds the framework categories at warning level, so the request and store lines stand out.
 
 ```bash
-kubectl logs deployment/vacation-planner-blob -n vacation-planner-blob --tail=50
+kubectl logs deployment/vacation-planner-identity -n vacation-planner-identity --tail=50
 ```
diff --git a/samples/web-app-managed-identity/dotnet/scripts/00-variables.sh b/samples/web-app-managed-identity/dotnet/scripts/00-variables.sh
index 64e3499..9ebf9f5 100755
--- a/samples/web-app-managed-identity/dotnet/scripts/00-variables.sh
+++ b/samples/web-app-managed-identity/dotnet/scripts/00-variables.sh
@@ -25,17 +25,17 @@ STORAGE_ACCOUNT_NAME="${PREFIX}storage${SUFFIX}"
 CONTAINER_NAME='activities'
 
 # Docker Image
-IMAGE_NAME="vacation-planner-blob-dotnet"
+IMAGE_NAME="vacation-planner-identity-dotnet"
 IMAGE_PULL_POLICY="Always"
 IMAGE_TAG="v1"
 PORT="8080"
 
 # Kubernetes
-NAME="vacation-planner-blob"
-NAMESPACE="vacation-planner-blob"
-DEPLOYMENT_NAME="vacation-planner-blob"
-SERVICE_NAME="vacation-planner-blob"
-CONFIGMAP_NAME="vacation-planner-blob-config"
-SECRET_NAME="vacation-planner-blob-secrets"
-SERVICE_ACCOUNT_NAME="vacation-planner-blob-sa"
+NAME="vacation-planner-identity"
+NAMESPACE="vacation-planner-identity"
+DEPLOYMENT_NAME="vacation-planner-identity"
+SERVICE_NAME="vacation-planner-identity"
+CONFIGMAP_NAME="vacation-planner-identity-config"
+SECRET_NAME="vacation-planner-identity-secrets"
+SERVICE_ACCOUNT_NAME="vacation-planner-identity-sa"
 DEPLOY_GATEWAY="false"
diff --git a/samples/web-app-managed-identity/dotnet/scripts/05-deploy-app.sh b/samples/web-app-managed-identity/dotnet/scripts/05-deploy-app.sh
index 24633fd..a4cb4c1 100755
--- a/samples/web-app-managed-identity/dotnet/scripts/05-deploy-app.sh
+++ b/samples/web-app-managed-identity/dotnet/scripts/05-deploy-app.sh
@@ -92,15 +92,33 @@ echo "Service Account YAML manifest"
 echo "-----------------------------"
 kubectl get sa $SERVICE_ACCOUNT_NAME -n $NAMESPACE -o yaml
 
-# Check if the federated identity credential already exists
+# Check whether the federated identity credential already exists and still points at this namespace and
+# service account: both are part of its subject, so a credential left behind by a deployment in another
+# namespace (or with another service account) has to be recreated, or the token exchange fails and every
+# pod crashes at startup with an authentication error.
 echo "Checking if [$FEDERATED_IDENTITY_NAME] federated identity credential actually exists in the [$RESOURCE_GROUP_NAME] resource group..."
 
-az identity federated-credential show \
+EXPECTED_SUBJECT="system:serviceaccount:$NAMESPACE:$SERVICE_ACCOUNT_NAME"
+CURRENT_SUBJECT="$(az identity federated-credential show \
   --name $FEDERATED_IDENTITY_NAME \
   --resource-group $RESOURCE_GROUP_NAME \
-  --identity-name $MANAGED_IDENTITY_NAME &>/dev/null
+  --identity-name $MANAGED_IDENTITY_NAME \
+  --query subject \
+  --output tsv 2>/dev/null)"
 
-if [[ $? != 0 ]]; then
+if [[ -n $CURRENT_SUBJECT && $CURRENT_SUBJECT != $EXPECTED_SUBJECT ]]; then
+  echo "[$FEDERATED_IDENTITY_NAME] federated identity credential points at [$CURRENT_SUBJECT] instead of [$EXPECTED_SUBJECT]: deleting it"
+
+  az identity federated-credential delete \
+    --name $FEDERATED_IDENTITY_NAME \
+    --identity-name $MANAGED_IDENTITY_NAME \
+    --resource-group $RESOURCE_GROUP_NAME \
+    --yes 1>/dev/null
+
+  CURRENT_SUBJECT=""
+fi
+
+if [[ -z $CURRENT_SUBJECT ]]; then
   echo "No [$FEDERATED_IDENTITY_NAME] federated identity credential actually exists in the [$RESOURCE_GROUP_NAME] resource group"
 
   # Get the OIDC Issuer URL
@@ -124,7 +142,7 @@ if [[ $? != 0 ]]; then
     --identity-name $MANAGED_IDENTITY_NAME \
     --resource-group $RESOURCE_GROUP_NAME \
     --issuer $OIDC_ISSUER_URL \
-    --subject system:serviceaccount:$NAMESPACE:$SERVICE_ACCOUNT_NAME 1>/dev/null
+    --subject $EXPECTED_SUBJECT 1>/dev/null
 
   if [[ $? == 0 ]]; then
     echo "[$FEDERATED_IDENTITY_NAME] federated identity credential successfully created in the [$RESOURCE_GROUP_NAME] resource group"
@@ -133,7 +151,7 @@ if [[ $? != 0 ]]; then
     exit
   fi
 else
-  echo "[$FEDERATED_IDENTITY_NAME] federated identity credential already exists in the [$RESOURCE_GROUP_NAME] resource group"
+  echo "[$FEDERATED_IDENTITY_NAME] federated identity credential already exists in the [$RESOURCE_GROUP_NAME] resource group and points at [$EXPECTED_SUBJECT]"
 fi
 
 # Create secret with the storage connection string, client secret and SECRET_KEY
diff --git a/samples/web-app-managed-identity/dotnet/scripts/configmap.yml b/samples/web-app-managed-identity/dotnet/scripts/configmap.yml
index 5f40ea9..4ba042e 100644
--- a/samples/web-app-managed-identity/dotnet/scripts/configmap.yml
+++ b/samples/web-app-managed-identity/dotnet/scripts/configmap.yml
@@ -1,10 +1,10 @@
 apiVersion: v1
 kind: ConfigMap
 metadata:
-  name: vacation-planner-blob-config
-  namespace: vacation-planner-blob
+  name: vacation-planner-identity-config
+  namespace: vacation-planner-identity
   labels:
-    app: vacation-planner-blob
+    app: vacation-planner-identity
 data:
   CONTAINER_NAME: "activities"
   AZURE_CLIENT_ID: ""
diff --git a/samples/web-app-managed-identity/dotnet/scripts/deployment.yml b/samples/web-app-managed-identity/dotnet/scripts/deployment.yml
index aab24d0..fb1f86f 100644
--- a/samples/web-app-managed-identity/dotnet/scripts/deployment.yml
+++ b/samples/web-app-managed-identity/dotnet/scripts/deployment.yml
@@ -1,15 +1,15 @@
 apiVersion: apps/v1
 kind: Deployment
 metadata:
-  name: vacation-planner-blob
-  namespace: vacation-planner-blob
+  name: vacation-planner-identity
+  namespace: vacation-planner-identity
   labels:
-    app: vacation-planner-blob
+    app: vacation-planner-identity
 spec:
   replicas: 3
   selector:
     matchLabels:
-      app: vacation-planner-blob
+      app: vacation-planner-identity
   strategy:
     rollingUpdate:
       maxSurge: 1
@@ -19,28 +19,28 @@ spec:
   template:
     metadata:
       labels:
-        app: vacation-planner-blob
+        app: vacation-planner-identity
         azure.workload.identity/use: "true"
     spec:
-      serviceAccountName: vacation-planner-blob-sa
+      serviceAccountName: vacation-planner-identity-sa
       topologySpreadConstraints:
       - maxSkew: 1
         topologyKey: topology.kubernetes.io/zone
         whenUnsatisfiable: ScheduleAnyway
         labelSelector:
           matchLabels:
-            app: vacation-planner-blob
+            app: vacation-planner-identity
       - maxSkew: 1
         topologyKey: kubernetes.io/hostname
         whenUnsatisfiable: ScheduleAnyway
         labelSelector:
           matchLabels:
-            app: vacation-planner-blob
+            app: vacation-planner-identity
       nodeSelector:
         kubernetes.io/os: linux
       containers:
-        - name: vacation-planner-blob
-          image: <your-registry>.azurecr.io/vacation-planner-blob-dotnet:v1
+        - name: vacation-planner-identity
+          image: <your-registry>.azurecr.io/vacation-planner-identity-dotnet:v1
           imagePullPolicy: Always
           ports:
             - name: http
@@ -49,17 +49,17 @@ spec:
             - name: CONTAINER_NAME
               valueFrom:
                 configMapKeyRef:
-                  name: vacation-planner-blob-config
+                  name: vacation-planner-identity-config
                   key: CONTAINER_NAME
             - name: AZURE_STORAGE_ACCOUNT_URL
               valueFrom:
                 configMapKeyRef:
-                  name: vacation-planner-blob-config
+                  name: vacation-planner-identity-config
                   key: AZURE_STORAGE_ACCOUNT_URL
             - name: SECRET_KEY
               valueFrom:
                 secretKeyRef:
-                  name: vacation-planner-blob-secrets
+                  name: vacation-planner-identity-secrets
                   key: SECRET_KEY
           resources:
             requests:
diff --git a/samples/web-app-managed-identity/dotnet/scripts/gateway.yml b/samples/web-app-managed-identity/dotnet/scripts/gateway.yml
index 8cf9697..b2225ae 100644
--- a/samples/web-app-managed-identity/dotnet/scripts/gateway.yml
+++ b/samples/web-app-managed-identity/dotnet/scripts/gateway.yml
@@ -3,8 +3,8 @@ kind: Gateway
 metadata:
   annotations:
     gateway.networking.k8s.io/generator: ingress2gateway-1.1.0
-    cert-manager.io/issuer: vacation-planner-blob-issuer
-  name: vacation-planner-blob
+    cert-manager.io/issuer: vacation-planner-identity-issuer
+  name: vacation-planner-identity
 spec:
   gatewayClassName: nginx
   listeners:
@@ -27,4 +27,4 @@ spec:
       certificateRefs:
       - group: ""
         kind: Secret
-        name: vacation-planner-blob-tls-secret
\ No newline at end of file
+        name: vacation-planner-identity-tls-secret
\ No newline at end of file
diff --git a/samples/web-app-managed-identity/dotnet/scripts/httproute.yml b/samples/web-app-managed-identity/dotnet/scripts/httproute.yml
index b2d7a36..8792ed5 100644
--- a/samples/web-app-managed-identity/dotnet/scripts/httproute.yml
+++ b/samples/web-app-managed-identity/dotnet/scripts/httproute.yml
@@ -3,17 +3,17 @@ kind: HTTPRoute
 metadata:
   annotations:
     gateway.networking.k8s.io/generator: ingress2gateway-1.1.0
-  name: vacation-planner-blob
+  name: vacation-planner-identity
 spec:
   hostnames:
   - planner.local.babosbird.com
   parentRefs:
-  - name: vacation-planner-blob
+  - name: vacation-planner-identity
     port: 443
     sectionName: https
   rules:
   - backendRefs:
-    - name: vacation-planner-blob
+    - name: vacation-planner-identity
       port: 80
     matches:
     - path:
diff --git a/samples/web-app-managed-identity/dotnet/scripts/issuer.yml b/samples/web-app-managed-identity/dotnet/scripts/issuer.yml
index 2d200b1..1007d10 100644
--- a/samples/web-app-managed-identity/dotnet/scripts/issuer.yml
+++ b/samples/web-app-managed-identity/dotnet/scripts/issuer.yml
@@ -1,24 +1,24 @@
 apiVersion: cert-manager.io/v1
 kind: Issuer
 metadata:
-  name: vacation-planner-blob-issuer
-  namespace: vacation-planner-blob
+  name: vacation-planner-identity-issuer
+  namespace: vacation-planner-identity
 spec:
   acme:
     # Registration address for the Let's Encrypt account: expiry notices go here
     email: paolo.salvatori@localstack.cloud
     privateKeySecretRef:
-      name: vacation-planner-blob-issuer
+      name: vacation-planner-identity-issuer
     server: https://acme-v02.api.letsencrypt.org/directory
     solvers:
     - http01:
         gatewayHTTPRoute:
           parentRefs:
-          - name: vacation-planner-blob
-            namespace: vacation-planner-blob
+          - name: vacation-planner-identity
+            namespace: vacation-planner-identity
             kind: Gateway
             group: gateway.networking.k8s.io
-            sectionName: vacation-planner-blob-http
+            sectionName: vacation-planner-identity-http
           podTemplate:
             spec:
               nodeSelector:
diff --git a/samples/web-app-managed-identity/dotnet/scripts/namespace.yml b/samples/web-app-managed-identity/dotnet/scripts/namespace.yml
index 9e8b556..8c604ef 100644
--- a/samples/web-app-managed-identity/dotnet/scripts/namespace.yml
+++ b/samples/web-app-managed-identity/dotnet/scripts/namespace.yml
@@ -1,4 +1,4 @@
 kind: Namespace
 apiVersion: v1
 metadata:
-  name: vacation-planner-blob
+  name: vacation-planner-identity
diff --git a/samples/web-app-managed-identity/dotnet/scripts/secret.yml b/samples/web-app-managed-identity/dotnet/scripts/secret.yml
index 6e45b31..9c94609 100644
--- a/samples/web-app-managed-identity/dotnet/scripts/secret.yml
+++ b/samples/web-app-managed-identity/dotnet/scripts/secret.yml
@@ -1,10 +1,10 @@
 apiVersion: v1
 kind: Secret
 metadata:
-  name: vacation-planner-blob-secrets
-  namespace: vacation-planner-blob
+  name: vacation-planner-identity-secrets
+  namespace: vacation-planner-identity
   labels:
-    app: vacation-planner-blob
+    app: vacation-planner-identity
 type: Opaque
 data:
   AZURE_STORAGE_ACCOUNT_CONNECTION_STRING: ""
diff --git a/samples/web-app-managed-identity/dotnet/scripts/service.yml b/samples/web-app-managed-identity/dotnet/scripts/service.yml
index a757f13..c5f4783 100644
--- a/samples/web-app-managed-identity/dotnet/scripts/service.yml
+++ b/samples/web-app-managed-identity/dotnet/scripts/service.yml
@@ -1,14 +1,14 @@
 apiVersion: v1
 kind: Service
 metadata:
-  name: vacation-planner-blob
-  namespace: vacation-planner-blob
+  name: vacation-planner-identity
+  namespace: vacation-planner-identity
   labels:
-    app: vacation-planner-blob
+    app: vacation-planner-identity
 spec:
   type: ClusterIP
   selector:
-    app: vacation-planner-blob
+    app: vacation-planner-identity
   ports:
     - name: http
       protocol: TCP
diff --git a/samples/web-app-managed-identity/python/README.md b/samples/web-app-managed-identity/python/README.md
index 117adfb..2bd9ea8 100644
--- a/samples/web-app-managed-identity/python/README.md
+++ b/samples/web-app-managed-identity/python/README.md
@@ -61,7 +61,7 @@ cd scripts
 By default the app is exposed through a `ClusterIP` service, which is only reachable from inside the cluster. Port-forward it to a local port to open it from your machine:
 
 ```bash
-kubectl port-forward service/vacation-planner-blob 8080:80 -n vacation-planner-blob
+kubectl port-forward service/vacation-planner-identity 8080:80 -n vacation-planner-identity
 ```
 
 Then browse to [http://localhost:8080](http://localhost:8080). Alternatively, use a tool such as [k9s](https://k9scli.io/) to start the port-forward interactively.
@@ -79,5 +79,5 @@ If you deployed the Gateway path (`DEPLOY_GATEWAY="true"`), the app is instead r
 The app logs one line per request — gunicorn writes an access log line for every call, the probes included, because its command passes `--access-logfile -` — plus one line per blob read, uploaded or deleted and one line for every activity added, updated or deleted. The store operations are printed to stdout, so `kubectl logs` shows them interleaved with the access log. The [.NET version](../dotnet/README.md) writes the same trace, timestamped.
 
 ```bash
-kubectl logs deployment/vacation-planner-blob -n vacation-planner-blob --tail=50
+kubectl logs deployment/vacation-planner-identity -n vacation-planner-identity --tail=50
 ```
diff --git a/samples/web-app-managed-identity/python/scripts/00-variables.sh b/samples/web-app-managed-identity/python/scripts/00-variables.sh
index fdfae0c..e590636 100755
--- a/samples/web-app-managed-identity/python/scripts/00-variables.sh
+++ b/samples/web-app-managed-identity/python/scripts/00-variables.sh
@@ -25,17 +25,17 @@ STORAGE_ACCOUNT_NAME="${PREFIX}storage${SUFFIX}"
 CONTAINER_NAME='activities'
 
 # Docker Image
-IMAGE_NAME="vacation-planner-blob"
+IMAGE_NAME="vacation-planner-identity"
 IMAGE_PULL_POLICY="Always"
 IMAGE_TAG="v1"
 PORT="8080"
 
 # Kubernetes
-NAME="vacation-planner-blob"
-NAMESPACE="vacation-planner-blob"
-DEPLOYMENT_NAME="vacation-planner-blob"
-SERVICE_NAME="vacation-planner-blob"
-CONFIGMAP_NAME="vacation-planner-blob-config"
-SECRET_NAME="vacation-planner-blob-secrets"
-SERVICE_ACCOUNT_NAME="vacation-planner-blob-sa"
+NAME="vacation-planner-identity"
+NAMESPACE="vacation-planner-identity"
+DEPLOYMENT_NAME="vacation-planner-identity"
+SERVICE_NAME="vacation-planner-identity"
+CONFIGMAP_NAME="vacation-planner-identity-config"
+SECRET_NAME="vacation-planner-identity-secrets"
+SERVICE_ACCOUNT_NAME="vacation-planner-identity-sa"
 DEPLOY_GATEWAY="false"
diff --git a/samples/web-app-managed-identity/python/scripts/05-deploy-app.sh b/samples/web-app-managed-identity/python/scripts/05-deploy-app.sh
index 0bc1f70..afd0635 100755
--- a/samples/web-app-managed-identity/python/scripts/05-deploy-app.sh
+++ b/samples/web-app-managed-identity/python/scripts/05-deploy-app.sh
@@ -91,15 +91,33 @@ echo "Service Account YAML manifest"
 echo "-----------------------------"
 kubectl get sa $SERVICE_ACCOUNT_NAME -n $NAMESPACE -o yaml
 
-# Check if the federated identity credential already exists
+# Check whether the federated identity credential already exists and still points at this namespace and
+# service account: both are part of its subject, so a credential left behind by a deployment in another
+# namespace (or with another service account) has to be recreated, or the token exchange fails and every
+# pod crashes at startup with an authentication error.
 echo "Checking if [$FEDERATED_IDENTITY_NAME] federated identity credential actually exists in the [$RESOURCE_GROUP_NAME] resource group..."
 
-az identity federated-credential show \
+EXPECTED_SUBJECT="system:serviceaccount:$NAMESPACE:$SERVICE_ACCOUNT_NAME"
+CURRENT_SUBJECT="$(az identity federated-credential show \
   --name $FEDERATED_IDENTITY_NAME \
   --resource-group $RESOURCE_GROUP_NAME \
-  --identity-name $MANAGED_IDENTITY_NAME &>/dev/null
+  --identity-name $MANAGED_IDENTITY_NAME \
+  --query subject \
+  --output tsv 2>/dev/null)"
 
-if [[ $? != 0 ]]; then
+if [[ -n $CURRENT_SUBJECT && $CURRENT_SUBJECT != $EXPECTED_SUBJECT ]]; then
+  echo "[$FEDERATED_IDENTITY_NAME] federated identity credential points at [$CURRENT_SUBJECT] instead of [$EXPECTED_SUBJECT]: deleting it"
+
+  az identity federated-credential delete \
+    --name $FEDERATED_IDENTITY_NAME \
+    --identity-name $MANAGED_IDENTITY_NAME \
+    --resource-group $RESOURCE_GROUP_NAME \
+    --yes 1>/dev/null
+
+  CURRENT_SUBJECT=""
+fi
+
+if [[ -z $CURRENT_SUBJECT ]]; then
   echo "No [$FEDERATED_IDENTITY_NAME] federated identity credential actually exists in the [$RESOURCE_GROUP_NAME] resource group"
 
   # Get the OIDC Issuer URL
@@ -123,7 +141,7 @@ if [[ $? != 0 ]]; then
     --identity-name $MANAGED_IDENTITY_NAME \
     --resource-group $RESOURCE_GROUP_NAME \
     --issuer $OIDC_ISSUER_URL \
-    --subject system:serviceaccount:$NAMESPACE:$SERVICE_ACCOUNT_NAME 1>/dev/null
+    --subject $EXPECTED_SUBJECT 1>/dev/null
 
   if [[ $? == 0 ]]; then
     echo "[$FEDERATED_IDENTITY_NAME] federated identity credential successfully created in the [$RESOURCE_GROUP_NAME] resource group"
@@ -132,7 +150,7 @@ if [[ $? != 0 ]]; then
     exit
   fi
 else
-  echo "[$FEDERATED_IDENTITY_NAME] federated identity credential already exists in the [$RESOURCE_GROUP_NAME] resource group"
+  echo "[$FEDERATED_IDENTITY_NAME] federated identity credential already exists in the [$RESOURCE_GROUP_NAME] resource group and points at [$EXPECTED_SUBJECT]"
 fi
 
 # Create secret with the storage connection string, client secret and Flask secret key
diff --git a/samples/web-app-managed-identity/python/scripts/configmap.yml b/samples/web-app-managed-identity/python/scripts/configmap.yml
index 5f40ea9..4ba042e 100644
--- a/samples/web-app-managed-identity/python/scripts/configmap.yml
+++ b/samples/web-app-managed-identity/python/scripts/configmap.yml
@@ -1,10 +1,10 @@
 apiVersion: v1
 kind: ConfigMap
 metadata:
-  name: vacation-planner-blob-config
-  namespace: vacation-planner-blob
+  name: vacation-planner-identity-config
+  namespace: vacation-planner-identity
   labels:
-    app: vacation-planner-blob
+    app: vacation-planner-identity
 data:
   CONTAINER_NAME: "activities"
   AZURE_CLIENT_ID: ""
diff --git a/samples/web-app-managed-identity/python/scripts/deployment.yml b/samples/web-app-managed-identity/python/scripts/deployment.yml
index fe48043..cfd13a4 100644
--- a/samples/web-app-managed-identity/python/scripts/deployment.yml
+++ b/samples/web-app-managed-identity/python/scripts/deployment.yml
@@ -1,15 +1,15 @@
 apiVersion: apps/v1
 kind: Deployment
 metadata:
-  name: vacation-planner-blob
-  namespace: vacation-planner-blob
+  name: vacation-planner-identity
+  namespace: vacation-planner-identity
   labels:
-    app: vacation-planner-blob
+    app: vacation-planner-identity
 spec:
   replicas: 3
   selector:
     matchLabels:
-      app: vacation-planner-blob
+      app: vacation-planner-identity
   strategy:
     rollingUpdate:
       maxSurge: 1
@@ -19,28 +19,28 @@ spec:
   template:
     metadata:
       labels:
-        app: vacation-planner-blob
+        app: vacation-planner-identity
         azure.workload.identity/use: "true"
     spec:
-      serviceAccountName: vacation-planner-blob-sa
+      serviceAccountName: vacation-planner-identity-sa
       topologySpreadConstraints:
       - maxSkew: 1
         topologyKey: topology.kubernetes.io/zone
         whenUnsatisfiable: ScheduleAnyway
         labelSelector:
           matchLabels:
-            app: vacation-planner-blob
+            app: vacation-planner-identity
       - maxSkew: 1
         topologyKey: kubernetes.io/hostname
         whenUnsatisfiable: ScheduleAnyway
         labelSelector:
           matchLabels:
-            app: vacation-planner-blob
+            app: vacation-planner-identity
       nodeSelector:
         kubernetes.io/os: linux
       containers:
-        - name: vacation-planner-blob
-          image: <your-registry>.azurecr.io/vacation-planner-blob:v1
+        - name: vacation-planner-identity
+          image: <your-registry>.azurecr.io/vacation-planner-identity:v1
           imagePullPolicy: Always
           ports:
             - name: http
@@ -49,17 +49,17 @@ spec:
             - name: CONTAINER_NAME
               valueFrom:
                 configMapKeyRef:
-                  name: vacation-planner-blob-config
+                  name: vacation-planner-identity-config
                   key: CONTAINER_NAME
             - name: AZURE_STORAGE_ACCOUNT_URL
               valueFrom:
                 configMapKeyRef:
-                  name: vacation-planner-blob-config
+                  name: vacation-planner-identity-config
                   key: AZURE_STORAGE_ACCOUNT_URL
             - name: SECRET_KEY
               valueFrom:
                 secretKeyRef:
-                  name: vacation-planner-blob-secrets
+                  name: vacation-planner-identity-secrets
                   key: SECRET_KEY
           resources:
             requests:
diff --git a/samples/web-app-managed-identity/python/scripts/gateway.yml b/samples/web-app-managed-identity/python/scripts/gateway.yml
index 8cf9697..b2225ae 100644
--- a/samples/web-app-managed-identity/python/scripts/gateway.yml
+++ b/samples/web-app-managed-identity/python/scripts/gateway.yml
@@ -3,8 +3,8 @@ kind: Gateway
 metadata:
   annotations:
     gateway.networking.k8s.io/generator: ingress2gateway-1.1.0
-    cert-manager.io/issuer: vacation-planner-blob-issuer
-  name: vacation-planner-blob
+    cert-manager.io/issuer: vacation-planner-identity-issuer
+  name: vacation-planner-identity
 spec:
   gatewayClassName: nginx
   listeners:
@@ -27,4 +27,4 @@ spec:
       certificateRefs:
       - group: ""
         kind: Secret
-        name: vacation-planner-blob-tls-secret
\ No newline at end of file
+        name: vacation-planner-identity-tls-secret
\ No newline at end of file
diff --git a/samples/web-app-managed-identity/python/scripts/httproute.yml b/samples/web-app-managed-identity/python/scripts/httproute.yml
index b2d7a36..8792ed5 100644
--- a/samples/web-app-managed-identity/python/scripts/httproute.yml
+++ b/samples/web-app-managed-identity/python/scripts/httproute.yml
@@ -3,17 +3,17 @@ kind: HTTPRoute
 metadata:
   annotations:
     gateway.networking.k8s.io/generator: ingress2gateway-1.1.0
-  name: vacation-planner-blob
+  name: vacation-planner-identity
 spec:
   hostnames:
   - planner.local.babosbird.com
   parentRefs:
-  - name: vacation-planner-blob
+  - name: vacation-planner-identity
     port: 443
     sectionName: https
   rules:
   - backendRefs:
-    - name: vacation-planner-blob
+    - name: vacation-planner-identity
       port: 80
     matches:
     - path:
diff --git a/samples/web-app-managed-identity/python/scripts/issuer.yml b/samples/web-app-managed-identity/python/scripts/issuer.yml
index 2d200b1..1007d10 100644
--- a/samples/web-app-managed-identity/python/scripts/issuer.yml
+++ b/samples/web-app-managed-identity/python/scripts/issuer.yml
@@ -1,24 +1,24 @@
 apiVersion: cert-manager.io/v1
 kind: Issuer
 metadata:
-  name: vacation-planner-blob-issuer
-  namespace: vacation-planner-blob
+  name: vacation-planner-identity-issuer
+  namespace: vacation-planner-identity
 spec:
   acme:
     # Registration address for the Let's Encrypt account: expiry notices go here
     email: paolo.salvatori@localstack.cloud
     privateKeySecretRef:
-      name: vacation-planner-blob-issuer
+      name: vacation-planner-identity-issuer
     server: https://acme-v02.api.letsencrypt.org/directory
     solvers:
     - http01:
         gatewayHTTPRoute:
           parentRefs:
-          - name: vacation-planner-blob
-            namespace: vacation-planner-blob
+          - name: vacation-planner-identity
+            namespace: vacation-planner-identity
             kind: Gateway
             group: gateway.networking.k8s.io
-            sectionName: vacation-planner-blob-http
+            sectionName: vacation-planner-identity-http
           podTemplate:
             spec:
               nodeSelector:
diff --git a/samples/web-app-managed-identity/python/scripts/namespace.yml b/samples/web-app-managed-identity/python/scripts/namespace.yml
index 9e8b556..8c604ef 100644
--- a/samples/web-app-managed-identity/python/scripts/namespace.yml
+++ b/samples/web-app-managed-identity/python/scripts/namespace.yml
@@ -1,4 +1,4 @@
 kind: Namespace
 apiVersion: v1
 metadata:
-  name: vacation-planner-blob
+  name: vacation-planner-identity
diff --git a/samples/web-app-managed-identity/python/scripts/secret.yml b/samples/web-app-managed-identity/python/scripts/secret.yml
index 6e45b31..9c94609 100644
--- a/samples/web-app-managed-identity/python/scripts/secret.yml
+++ b/samples/web-app-managed-identity/python/scripts/secret.yml
@@ -1,10 +1,10 @@
 apiVersion: v1
 kind: Secret
 metadata:
-  name: vacation-planner-blob-secrets
-  namespace: vacation-planner-blob
+  name: vacation-planner-identity-secrets
+  namespace: vacation-planner-identity
   labels:
-    app: vacation-planner-blob
+    app: vacation-planner-identity
 type: Opaque
 data:
   AZURE_STORAGE_ACCOUNT_CONNECTION_STRING: ""
diff --git a/samples/web-app-managed-identity/python/scripts/service.yml b/samples/web-app-managed-identity/python/scripts/service.yml
index a757f13..c5f4783 100644
--- a/samples/web-app-managed-identity/python/scripts/service.yml
+++ b/samples/web-app-managed-identity/python/scripts/service.yml
@@ -1,14 +1,14 @@
 apiVersion: v1
 kind: Service
 metadata:
-  name: vacation-planner-blob
-  namespace: vacation-planner-blob
+  name: vacation-planner-identity
+  namespace: vacation-planner-identity
   labels:
-    app: vacation-planner-blob
+    app: vacation-planner-identity
 spec:
   type: ClusterIP
   selector:
-    app: vacation-planner-blob
+    app: vacation-planner-identity
   ports:
     - name: http
       protocol: TCP

From 9b42ef6f83965073c3c681cfc7622ea7f40b2e70 Mon Sep 17 00:00:00 2001
From: Paolo Salvatori <leprino@hotmail.com>
Date: Wed, 9 Sep 2026 09:11:25 +0200
Subject: [PATCH 15/20] Delete activities by their store id in the Python
 samples

Seven of the nine Python apps deleted the activity at a position in the rendered
page (POST /delete/<index>), resolved against a module-level list that each
replica fills on its own GET. With three replicas the delete lands on a replica
whose list is stale, so it deletes a different activity than the one the user
clicked. Caught on web-app-in-cluster-postgresql: the cross-replica run left the
activity it had asked to delete in the database and removed one of the seeded
rows instead.

Every delete now addresses the activity by its store id, which the page already
carries in the row's data-id attribute: the blob or file name for the storage
samples, the document id for Cosmos DB, the row id for PostgreSQL, MySQL and SQL
Database. web-app-sql-database's /update/<id> route reads the current text from
the database instead of the in-process list for the same reason.

Two more bugs found while testing:

- The blob name now arrives from a form field, so blob-storage and
  managed-identity check its shape (yyyy-MM-dd-HH-mm-ss-activity.txt) before a
  delete or an in-place update reaches the container, as file-storage does for
  the file share.
- Deleting an activity that another replica had already deleted answered HTTP 500
  in web-app-cosmosdb-nosql-api and logged an error while listing the share in
  web-app-file-storage. Both now treat "already gone" as done and converge.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
---
 .../web-app-blob-storage/python/src/app.py    | 44 +++++++++++++++----
 .../python/src/templates/index.html           |  2 +-
 .../python/src/app.py                         | 18 +++++---
 .../python/src/templates/index.html           |  2 +-
 .../python/src/app.py                         | 15 +++++--
 .../web-app-file-storage/python/src/app.py    | 15 +++++--
 .../python/src/app.py                         | 14 ++++--
 .../python/src/templates/index.html           |  2 +-
 .../python/src/app.py                         | 44 +++++++++++++++----
 .../python/src/templates/index.html           |  2 +-
 .../python/src/app.py                         | 14 ++++--
 .../python/src/templates/index.html           |  2 +-
 .../python/src/app.py                         | 14 ++++--
 .../python/src/templates/index.html           |  2 +-
 .../web-app-sql-database/python/src/app.py    | 40 ++++++++++-------
 .../python/src/templates/index.html           |  2 +-
 16 files changed, 167 insertions(+), 65 deletions(-)

diff --git a/samples/web-app-blob-storage/python/src/app.py b/samples/web-app-blob-storage/python/src/app.py
index 7b7d833..93f11f5 100644
--- a/samples/web-app-blob-storage/python/src/app.py
+++ b/samples/web-app-blob-storage/python/src/app.py
@@ -23,6 +23,18 @@
 debug: bool = os.environ.get("FLASK_DEBUG", "false").lower() == "true"
 activities: List[Tuple[str, str]] = []
 
+# Suffix of the blobs holding the activities, one blob per activity.
+ACTIVITY_BLOB_SUFFIX: str = "-activity.txt"
+
+def is_activity_name(name: str | None) -> bool:
+    """Whether the name is one of this app's activity blobs, and nothing else.
+
+    Every activity is a blob called YYYY-MM-DD-HH-MM-SS-activity.txt, so requiring that shape is both the
+    read filter and the write guard: it rejects an empty name and any name the app did not create. Names
+    arrive from a form field, so they are checked before they reach the container.
+    """
+    return bool(name) and name == os.path.basename(str(name)) and str(name).endswith(ACTIVITY_BLOB_SUFFIX)
+
 def get_environment_variables():
     """Get the value of an environment variable or raise an error if not set."""
     global connection_string, container_name, client_id, client_secret, tenant_id, account_url
@@ -226,7 +238,11 @@ def index():
         activity = request.form.get('activity', '').strip()
         if activity:
             if row_id:
-                # Update existing blob content in place
+                # Update the existing blob content in place. The name comes from the form, so it is checked
+                # before it reaches the container.
+                if not is_activity_name(row_id):
+                    print(f"Invalid activity name '{row_id}'.")
+                    return redirect(url_for('index'))
                 update_blob(row_id, activity)
                 for i, act in enumerate(activities):
                     if act[0] == row_id:
@@ -236,7 +252,7 @@ def index():
             else:
                 # Generate a unique blob name with a timestamp
                 timestamp = datetime.datetime.now().strftime("%Y-%m-%d-%H-%M-%S")
-                name = f"{timestamp}-activity.txt"
+                name = f"{timestamp}{ACTIVITY_BLOB_SUFFIX}"
                 create_blob_if_not_exists(name, activity)
                 activities.append((name, activity))
                 flash('Activity added successfully.')
@@ -247,12 +263,24 @@ def index():
     read_blobs_from_container()
     return render_template('index.html', activities=activities)
 
-@app.route('/delete/<int:activity_id>', methods=['POST'])
-def delete(activity_id):
-    if 0 <= activity_id < len(activities):
-        delete_blob(activities[activity_id][0])
-        activities.pop(activity_id)
-        flash('Activity deleted successfully.')
+@app.route('/delete/<string:activity_id>', methods=['POST'])
+def delete(activity_id: str):
+    """Delete the activity whose blob name is activity_id.
+
+    The activity is identified by its blob name, never by its position in the rendered page: every replica
+    reloads the container on each GET, so the list can change between rendering a page and submitting a
+    delete from it, and a position would then delete whatever activity happens to sit there now.
+    """
+    if not is_activity_name(activity_id):
+        print(f"Invalid activity name '{activity_id}'.")
+        return redirect(url_for('index'))
+
+    delete_blob(activity_id)
+    for i, act in enumerate(activities):
+        if act[0] == activity_id:
+            activities.pop(i)
+            break
+    flash('Activity deleted successfully.')
     return redirect(url_for('index'))
 
 @app.route('/health')
diff --git a/samples/web-app-blob-storage/python/src/templates/index.html b/samples/web-app-blob-storage/python/src/templates/index.html
index 45a7be8..efb642d 100644
--- a/samples/web-app-blob-storage/python/src/templates/index.html
+++ b/samples/web-app-blob-storage/python/src/templates/index.html
@@ -70,7 +70,7 @@ <h1>&#127796; Vacation Planner</h1>
           </button>
         </td>
         <td class="col-btn">
-          <form method="post" action="{{ url_for('delete', activity_id=loop.index0) }}" class="delete-form">
+          <form method="post" action="{{ url_for('delete', activity_id=activity[0]) }}" class="delete-form">
             <button type="button" class="btn-delete" title="Delete activity" aria-label="Delete {{ activity[1] | e }}">
               <svg width="14" height="14" fill="none" stroke="currentColor" stroke-width="2" viewBox="0 0 24 24">
                 <polyline points="3 6 5 6 21 6"/><path d="M19 6l-1 14a2 2 0 01-2 2H8a2 2 0 01-2-2L5 6"/>
diff --git a/samples/web-app-cosmosdb-mongodb-api/python/src/app.py b/samples/web-app-cosmosdb-mongodb-api/python/src/app.py
index dcc8d24..6610baa 100644
--- a/samples/web-app-cosmosdb-mongodb-api/python/src/app.py
+++ b/samples/web-app-cosmosdb-mongodb-api/python/src/app.py
@@ -108,12 +108,20 @@ def favicon():
     """Serve the favicon from the static folder."""
     return app.send_static_file('favicon.ico')
 
-@app.route('/delete/<int:activity_id>', methods=['POST'])
-def delete(activity_id: int):
-    """Handle deletion of an activity by its index."""
-    if 0 <= activity_id < len(activities):
+@app.route('/delete/<string:activity_id>', methods=['POST'])
+def delete(activity_id: str):
+    """Handle deletion of an activity by its document id.
+
+    The document id addresses the activity, never its position in the rendered page: every replica reloads
+    the collection on each GET, so a position would delete whatever activity happens to sit there now.
+    """
+    if activity_id:
         # Delete the document from MongoDB
-        mongodb_client.delete_document_by_id(activities[activity_id][0])
+        mongodb_client.delete_document_by_id(activity_id)
+        for i, act in enumerate(activities):
+            if act[0] == activity_id:
+                activities.pop(i)
+                break
         flash("Activity deleted.")
 
     return redirect(url_for('index'))
diff --git a/samples/web-app-cosmosdb-mongodb-api/python/src/templates/index.html b/samples/web-app-cosmosdb-mongodb-api/python/src/templates/index.html
index 45a7be8..efb642d 100644
--- a/samples/web-app-cosmosdb-mongodb-api/python/src/templates/index.html
+++ b/samples/web-app-cosmosdb-mongodb-api/python/src/templates/index.html
@@ -70,7 +70,7 @@ <h1>&#127796; Vacation Planner</h1>
           </button>
         </td>
         <td class="col-btn">
-          <form method="post" action="{{ url_for('delete', activity_id=loop.index0) }}" class="delete-form">
+          <form method="post" action="{{ url_for('delete', activity_id=activity[0]) }}" class="delete-form">
             <button type="button" class="btn-delete" title="Delete activity" aria-label="Delete {{ activity[1] | e }}">
               <svg width="14" height="14" fill="none" stroke="currentColor" stroke-width="2" viewBox="0 0 24 24">
                 <polyline points="3 6 5 6 21 6"/><path d="M19 6l-1 14a2 2 0 01-2 2H8a2 2 0 01-2-2L5 6"/>
diff --git a/samples/web-app-cosmosdb-nosql-api/python/src/app.py b/samples/web-app-cosmosdb-nosql-api/python/src/app.py
index 9ed4f92..1229469 100644
--- a/samples/web-app-cosmosdb-nosql-api/python/src/app.py
+++ b/samples/web-app-cosmosdb-nosql-api/python/src/app.py
@@ -3,6 +3,7 @@
 import logging
 import hashlib
 from flask import Flask, flash, jsonify, render_template, request, redirect, url_for
+from azure.cosmos import exceptions
 from cosmosdb_client import CosmosDbClient
 
 
@@ -107,11 +108,17 @@ def index():
 @app.route('/delete/<string:activity_id>', methods=['POST'])
 def delete(activity_id: str):
     logger.info(f"Deleting activity with ID: {activity_id}")
-    
-    # Direct deletion using the ID passed in the URL
-    get_cosmos().delete_document_by_id(activity_id, username)
+
+    # Direct deletion using the ID passed in the URL. An activity that is already gone counts as deleted:
+    # every replica serves the same container, so another replica may have deleted it a moment earlier,
+    # and raising here would answer the user with HTTP 500 for work that is already done.
+    try:
+        get_cosmos().delete_document_by_id(activity_id, username)
+    except exceptions.CosmosResourceNotFoundError:
+        logger.warning(f"Activity {activity_id} was not found; nothing to delete")
+
     flash('Activity deleted.')
-    
+
     return redirect(url_for('index'))
 
 @app.route('/health')
diff --git a/samples/web-app-file-storage/python/src/app.py b/samples/web-app-file-storage/python/src/app.py
index da46e6e..658f0aa 100644
--- a/samples/web-app-file-storage/python/src/app.py
+++ b/samples/web-app-file-storage/python/src/app.py
@@ -104,11 +104,18 @@ def read_activities_from_dir():
             if not os.path.isfile(path):
                 continue
 
-            # Read the file content
-            with open(path, "r", encoding="utf-8") as file:
-                content = file.read()
+            # Every replica mounts the same share, so another replica can delete a file between the
+            # listing above and this read. That is a file that is gone, not an error: skip it and keep
+            # reading the rest instead of failing the whole page.
+            try:
+                size = os.path.getsize(path)
+                with open(path, "r", encoding="utf-8") as file:
+                    content = file.read()
+            except FileNotFoundError:
+                print(f"Activity file '{name}' disappeared while reading the directory: skipping it.")
+                continue
 
-            print(f"Found activity file: {name} with size {os.path.getsize(path)} bytes")
+            print(f"Found activity file: {name} with size {size} bytes")
             print(f"Content of activity file '{name}': {content}")
             activities.append((name, content))
     except ValueError as ve:
diff --git a/samples/web-app-in-cluster-postgresql/python/src/app.py b/samples/web-app-in-cluster-postgresql/python/src/app.py
index c5dfb9e..4a6c306 100644
--- a/samples/web-app-in-cluster-postgresql/python/src/app.py
+++ b/samples/web-app-in-cluster-postgresql/python/src/app.py
@@ -78,10 +78,16 @@ def favicon():
     return app.send_static_file("favicon.ico")
 
 
-@app.route("/delete/<int:activity_id>", methods=["POST"])
-def delete(activity_id: int):
-    if 0 <= activity_id < len(activities):
-        db_client.delete_activity(activities[activity_id][0])
+@app.route("/delete/<string:activity_id>", methods=["POST"])
+def delete(activity_id: str):
+    """Delete the activity with this id.
+
+    The row id addresses the activity, never its position in the rendered page: every replica reloads the
+    table on each GET, so the list can change between rendering a page and submitting a delete from it, and
+    a position would then delete whatever activity happens to sit there now.
+    """
+    if activity_id:
+        db_client.delete_activity(activity_id)
         flash("Activity deleted.")
     return redirect(url_for("index"))
 
diff --git a/samples/web-app-in-cluster-postgresql/python/src/templates/index.html b/samples/web-app-in-cluster-postgresql/python/src/templates/index.html
index 45a7be8..efb642d 100644
--- a/samples/web-app-in-cluster-postgresql/python/src/templates/index.html
+++ b/samples/web-app-in-cluster-postgresql/python/src/templates/index.html
@@ -70,7 +70,7 @@ <h1>&#127796; Vacation Planner</h1>
           </button>
         </td>
         <td class="col-btn">
-          <form method="post" action="{{ url_for('delete', activity_id=loop.index0) }}" class="delete-form">
+          <form method="post" action="{{ url_for('delete', activity_id=activity[0]) }}" class="delete-form">
             <button type="button" class="btn-delete" title="Delete activity" aria-label="Delete {{ activity[1] | e }}">
               <svg width="14" height="14" fill="none" stroke="currentColor" stroke-width="2" viewBox="0 0 24 24">
                 <polyline points="3 6 5 6 21 6"/><path d="M19 6l-1 14a2 2 0 01-2 2H8a2 2 0 01-2-2L5 6"/>
diff --git a/samples/web-app-managed-identity/python/src/app.py b/samples/web-app-managed-identity/python/src/app.py
index 7b7d833..93f11f5 100644
--- a/samples/web-app-managed-identity/python/src/app.py
+++ b/samples/web-app-managed-identity/python/src/app.py
@@ -23,6 +23,18 @@
 debug: bool = os.environ.get("FLASK_DEBUG", "false").lower() == "true"
 activities: List[Tuple[str, str]] = []
 
+# Suffix of the blobs holding the activities, one blob per activity.
+ACTIVITY_BLOB_SUFFIX: str = "-activity.txt"
+
+def is_activity_name(name: str | None) -> bool:
+    """Whether the name is one of this app's activity blobs, and nothing else.
+
+    Every activity is a blob called YYYY-MM-DD-HH-MM-SS-activity.txt, so requiring that shape is both the
+    read filter and the write guard: it rejects an empty name and any name the app did not create. Names
+    arrive from a form field, so they are checked before they reach the container.
+    """
+    return bool(name) and name == os.path.basename(str(name)) and str(name).endswith(ACTIVITY_BLOB_SUFFIX)
+
 def get_environment_variables():
     """Get the value of an environment variable or raise an error if not set."""
     global connection_string, container_name, client_id, client_secret, tenant_id, account_url
@@ -226,7 +238,11 @@ def index():
         activity = request.form.get('activity', '').strip()
         if activity:
             if row_id:
-                # Update existing blob content in place
+                # Update the existing blob content in place. The name comes from the form, so it is checked
+                # before it reaches the container.
+                if not is_activity_name(row_id):
+                    print(f"Invalid activity name '{row_id}'.")
+                    return redirect(url_for('index'))
                 update_blob(row_id, activity)
                 for i, act in enumerate(activities):
                     if act[0] == row_id:
@@ -236,7 +252,7 @@ def index():
             else:
                 # Generate a unique blob name with a timestamp
                 timestamp = datetime.datetime.now().strftime("%Y-%m-%d-%H-%M-%S")
-                name = f"{timestamp}-activity.txt"
+                name = f"{timestamp}{ACTIVITY_BLOB_SUFFIX}"
                 create_blob_if_not_exists(name, activity)
                 activities.append((name, activity))
                 flash('Activity added successfully.')
@@ -247,12 +263,24 @@ def index():
     read_blobs_from_container()
     return render_template('index.html', activities=activities)
 
-@app.route('/delete/<int:activity_id>', methods=['POST'])
-def delete(activity_id):
-    if 0 <= activity_id < len(activities):
-        delete_blob(activities[activity_id][0])
-        activities.pop(activity_id)
-        flash('Activity deleted successfully.')
+@app.route('/delete/<string:activity_id>', methods=['POST'])
+def delete(activity_id: str):
+    """Delete the activity whose blob name is activity_id.
+
+    The activity is identified by its blob name, never by its position in the rendered page: every replica
+    reloads the container on each GET, so the list can change between rendering a page and submitting a
+    delete from it, and a position would then delete whatever activity happens to sit there now.
+    """
+    if not is_activity_name(activity_id):
+        print(f"Invalid activity name '{activity_id}'.")
+        return redirect(url_for('index'))
+
+    delete_blob(activity_id)
+    for i, act in enumerate(activities):
+        if act[0] == activity_id:
+            activities.pop(i)
+            break
+    flash('Activity deleted successfully.')
     return redirect(url_for('index'))
 
 @app.route('/health')
diff --git a/samples/web-app-managed-identity/python/src/templates/index.html b/samples/web-app-managed-identity/python/src/templates/index.html
index 45a7be8..efb642d 100644
--- a/samples/web-app-managed-identity/python/src/templates/index.html
+++ b/samples/web-app-managed-identity/python/src/templates/index.html
@@ -70,7 +70,7 @@ <h1>&#127796; Vacation Planner</h1>
           </button>
         </td>
         <td class="col-btn">
-          <form method="post" action="{{ url_for('delete', activity_id=loop.index0) }}" class="delete-form">
+          <form method="post" action="{{ url_for('delete', activity_id=activity[0]) }}" class="delete-form">
             <button type="button" class="btn-delete" title="Delete activity" aria-label="Delete {{ activity[1] | e }}">
               <svg width="14" height="14" fill="none" stroke="currentColor" stroke-width="2" viewBox="0 0 24 24">
                 <polyline points="3 6 5 6 21 6"/><path d="M19 6l-1 14a2 2 0 01-2 2H8a2 2 0 01-2-2L5 6"/>
diff --git a/samples/web-app-mysql-flexible-server/python/src/app.py b/samples/web-app-mysql-flexible-server/python/src/app.py
index 4f7ef11..485fba2 100644
--- a/samples/web-app-mysql-flexible-server/python/src/app.py
+++ b/samples/web-app-mysql-flexible-server/python/src/app.py
@@ -78,10 +78,16 @@ def favicon():
     return app.send_static_file("favicon.ico")
 
 
-@app.route("/delete/<int:activity_id>", methods=["POST"])
-def delete(activity_id: int):
-    if 0 <= activity_id < len(activities):
-        db_client.delete_activity(activities[activity_id][0])
+@app.route("/delete/<string:activity_id>", methods=["POST"])
+def delete(activity_id: str):
+    """Delete the activity with this id.
+
+    The row id addresses the activity, never its position in the rendered page: every replica reloads the
+    table on each GET, so the list can change between rendering a page and submitting a delete from it, and
+    a position would then delete whatever activity happens to sit there now.
+    """
+    if activity_id:
+        db_client.delete_activity(activity_id)
         flash("Activity deleted.")
     return redirect(url_for("index"))
 
diff --git a/samples/web-app-mysql-flexible-server/python/src/templates/index.html b/samples/web-app-mysql-flexible-server/python/src/templates/index.html
index 45a7be8..efb642d 100644
--- a/samples/web-app-mysql-flexible-server/python/src/templates/index.html
+++ b/samples/web-app-mysql-flexible-server/python/src/templates/index.html
@@ -70,7 +70,7 @@ <h1>&#127796; Vacation Planner</h1>
           </button>
         </td>
         <td class="col-btn">
-          <form method="post" action="{{ url_for('delete', activity_id=loop.index0) }}" class="delete-form">
+          <form method="post" action="{{ url_for('delete', activity_id=activity[0]) }}" class="delete-form">
             <button type="button" class="btn-delete" title="Delete activity" aria-label="Delete {{ activity[1] | e }}">
               <svg width="14" height="14" fill="none" stroke="currentColor" stroke-width="2" viewBox="0 0 24 24">
                 <polyline points="3 6 5 6 21 6"/><path d="M19 6l-1 14a2 2 0 01-2 2H8a2 2 0 01-2-2L5 6"/>
diff --git a/samples/web-app-postgresql-flexible-server/python/src/app.py b/samples/web-app-postgresql-flexible-server/python/src/app.py
index c5dfb9e..4a6c306 100644
--- a/samples/web-app-postgresql-flexible-server/python/src/app.py
+++ b/samples/web-app-postgresql-flexible-server/python/src/app.py
@@ -78,10 +78,16 @@ def favicon():
     return app.send_static_file("favicon.ico")
 
 
-@app.route("/delete/<int:activity_id>", methods=["POST"])
-def delete(activity_id: int):
-    if 0 <= activity_id < len(activities):
-        db_client.delete_activity(activities[activity_id][0])
+@app.route("/delete/<string:activity_id>", methods=["POST"])
+def delete(activity_id: str):
+    """Delete the activity with this id.
+
+    The row id addresses the activity, never its position in the rendered page: every replica reloads the
+    table on each GET, so the list can change between rendering a page and submitting a delete from it, and
+    a position would then delete whatever activity happens to sit there now.
+    """
+    if activity_id:
+        db_client.delete_activity(activity_id)
         flash("Activity deleted.")
     return redirect(url_for("index"))
 
diff --git a/samples/web-app-postgresql-flexible-server/python/src/templates/index.html b/samples/web-app-postgresql-flexible-server/python/src/templates/index.html
index 45a7be8..efb642d 100644
--- a/samples/web-app-postgresql-flexible-server/python/src/templates/index.html
+++ b/samples/web-app-postgresql-flexible-server/python/src/templates/index.html
@@ -70,7 +70,7 @@ <h1>&#127796; Vacation Planner</h1>
           </button>
         </td>
         <td class="col-btn">
-          <form method="post" action="{{ url_for('delete', activity_id=loop.index0) }}" class="delete-form">
+          <form method="post" action="{{ url_for('delete', activity_id=activity[0]) }}" class="delete-form">
             <button type="button" class="btn-delete" title="Delete activity" aria-label="Delete {{ activity[1] | e }}">
               <svg width="14" height="14" fill="none" stroke="currentColor" stroke-width="2" viewBox="0 0 24 24">
                 <polyline points="3 6 5 6 21 6"/><path d="M19 6l-1 14a2 2 0 01-2 2H8a2 2 0 01-2-2L5 6"/>
diff --git a/samples/web-app-sql-database/python/src/app.py b/samples/web-app-sql-database/python/src/app.py
index c48698e..37d3be9 100644
--- a/samples/web-app-sql-database/python/src/app.py
+++ b/samples/web-app-sql-database/python/src/app.py
@@ -106,34 +106,40 @@ def favicon():
     """Serve the favicon from the static folder."""
     return app.send_static_file('favicon.ico')
 
-@app.route('/delete/<int:activity_id>', methods=['POST'])
-def delete(activity_id: int):
-    """Handle deletion of an activity by its index in the list."""
+@app.route('/delete/<string:activity_id>', methods=['POST'])
+def delete(activity_id: str):
+    """Handle deletion of an activity by its database id.
+
+    The id addresses the activity, never its position in the rendered page: every replica reloads the table
+    on each GET, so a position would delete whatever activity happens to sit there now.
+    """
     try:
-        if 0 <= activity_id < len(activities):
-            db_activity_id = activities[activity_id][0]
+        if activity_id:
             # Delete the activity from SQL Database
-            rows_deleted = activities_helper.delete_activity_by_id(db_activity_id)
-            
+            rows_deleted = activities_helper.delete_activity_by_id(activity_id)
+
             if rows_deleted > 0:
                 flash('Activity deleted.')
-                logger.info(f"Activity deleted: {db_activity_id}")
+                logger.info(f"Activity deleted: {activity_id}")
             else:
-                logger.warning(f"No activity found with ID: {db_activity_id}")
+                logger.warning(f"No activity found with ID: {activity_id}")
     except (ConnectionError, ValueError) as e:
         logger.error("Error deleting activity: %s", e)
 
     return redirect(url_for('index'))
 
-@app.route('/update/<int:activity_id>', methods=['GET'])
-def update(activity_id: int):
-    """Handle updating of an activity by its index in the list."""
+@app.route('/update/<string:activity_id>', methods=['GET'])
+def update(activity_id: str):
+    """Open the edit form for the activity with this database id."""
     try:
-        if 0 <= activity_id < len(activities):
-            db_activity_id = activities[activity_id][0]
-            activity_text = activities[activity_id][1]
-            # Redirect to index with edit parameters
-            return redirect(url_for('index', edit_id=db_activity_id, edit_activity=activity_text))
+        if activity_id:
+            # Read the current text from the database, so the form does not depend on this replica's
+            # in-process list, which another replica may have made stale.
+            for stored_id, activity_text in read_activities_from_db(username):
+                if stored_id == activity_id:
+                    # Redirect to index with edit parameters
+                    return redirect(url_for('index', edit_id=activity_id, edit_activity=activity_text))
+            logger.warning(f"No activity found with ID: {activity_id}")
     except (ConnectionError, ValueError) as e:
         logger.error("Error preparing activity for update: %s", e)
 
diff --git a/samples/web-app-sql-database/python/src/templates/index.html b/samples/web-app-sql-database/python/src/templates/index.html
index 45a7be8..efb642d 100644
--- a/samples/web-app-sql-database/python/src/templates/index.html
+++ b/samples/web-app-sql-database/python/src/templates/index.html
@@ -70,7 +70,7 @@ <h1>&#127796; Vacation Planner</h1>
           </button>
         </td>
         <td class="col-btn">
-          <form method="post" action="{{ url_for('delete', activity_id=loop.index0) }}" class="delete-form">
+          <form method="post" action="{{ url_for('delete', activity_id=activity[0]) }}" class="delete-form">
             <button type="button" class="btn-delete" title="Delete activity" aria-label="Delete {{ activity[1] | e }}">
               <svg width="14" height="14" fill="none" stroke="currentColor" stroke-width="2" viewBox="0 0 24 24">
                 <polyline points="3 6 5 6 21 6"/><path d="M19 6l-1 14a2 2 0 01-2 2H8a2 2 0 01-2-2L5 6"/>

From 7cd8334c5048f843afdd95e2ccf92511bf79d67e Mon Sep 17 00:00:00 2001
From: Paolo Salvatori <leprino@hotmail.com>
Date: Wed, 9 Sep 2026 09:11:25 +0200
Subject: [PATCH 16/20] Keep the app secret and the SQL seed data stable across
 re-runs

05-deploy-app.sh generated a new SECRET_KEY on every run and wrote it to the
Secret. The pods that are already running keep the value they started with, so
after a re-run the replicas sign with different keys and sessions, flash
messages and antiforgery tokens break until every pod has restarted. The script
now reuses the key already stored in the Secret and only generates one when
there is none.

web-app-sql-database's 01-deploy-resources.sh re-inserted its nine seed rows on
every run, so the table filled up with duplicates. The insert is now guarded by
IF NOT EXISTS.

web-app-in-cluster-postgresql's 01-deploy-resources.sh pointed at a
06-create-test-data.sh that does not exist; 05-deploy-app.sh deploys the
StatefulSet and seeds it.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
---
 .../web-app-blob-storage/dotnet/scripts/05-deploy-app.sh | 9 ++++++++-
 .../web-app-blob-storage/python/scripts/05-deploy-app.sh | 9 ++++++++-
 .../dotnet/scripts/05-deploy-app.sh                      | 9 ++++++++-
 .../python/scripts/05-deploy-app.sh                      | 9 ++++++++-
 .../dotnet/scripts/05-deploy-app.sh                      | 9 ++++++++-
 .../python/scripts/05-deploy-app.sh                      | 9 ++++++++-
 .../web-app-file-storage/dotnet/scripts/05-deploy-app.sh | 9 ++++++++-
 .../web-app-file-storage/python/scripts/05-deploy-app.sh | 9 ++++++++-
 .../dotnet/scripts/01-deploy-resources.sh                | 8 ++++----
 .../dotnet/scripts/05-deploy-app.sh                      | 9 ++++++++-
 .../python/scripts/01-deploy-resources.sh                | 8 ++++----
 .../python/scripts/05-deploy-app.sh                      | 9 ++++++++-
 .../dotnet/scripts/05-deploy-app.sh                      | 9 ++++++++-
 .../python/scripts/05-deploy-app.sh                      | 9 ++++++++-
 .../dotnet/scripts/05-deploy-app.sh                      | 9 ++++++++-
 .../python/scripts/05-deploy-app.sh                      | 9 ++++++++-
 .../dotnet/scripts/05-deploy-app.sh                      | 9 ++++++++-
 .../python/scripts/05-deploy-app.sh                      | 9 ++++++++-
 .../dotnet/scripts/01-deploy-resources.sh                | 3 ++-
 .../web-app-sql-database/dotnet/scripts/05-deploy-app.sh | 9 ++++++++-
 .../python/scripts/01-deploy-resources.sh                | 3 ++-
 .../web-app-sql-database/python/scripts/05-deploy-app.sh | 9 ++++++++-
 22 files changed, 156 insertions(+), 28 deletions(-)

diff --git a/samples/web-app-blob-storage/dotnet/scripts/05-deploy-app.sh b/samples/web-app-blob-storage/dotnet/scripts/05-deploy-app.sh
index 9e635f7..f0e5210 100755
--- a/samples/web-app-blob-storage/dotnet/scripts/05-deploy-app.sh
+++ b/samples/web-app-blob-storage/dotnet/scripts/05-deploy-app.sh
@@ -21,7 +21,14 @@ fi
 
 # Generate a stable SECRET_KEY shared by all replicas: the app derives its Data Protection key ring from it,
 # so antiforgery tokens and flash messages are valid on every replica and survive pod restarts
-SECRET_KEY=$(openssl rand -hex 32)
+# Reuse the key already stored in the Secret, when there is one. A new key on every run would leave the
+# running pods signing with the old one, so their sessions, flash messages and antiforgery tokens break
+# across replicas until every pod has restarted.
+SECRET_KEY=$(kubectl get secret $SECRET_NAME --namespace $NAMESPACE --output jsonpath='{.data.SECRET_KEY}' 2>/dev/null | base64 --decode 2>/dev/null)
+
+if [[ -z $SECRET_KEY ]]; then
+	SECRET_KEY=$(openssl rand -hex 32)
+fi
 
 # Get the login server for the Azure Container Registry
 echo "Getting login server for Azure Container Registry [$ACR_NAME]..."
diff --git a/samples/web-app-blob-storage/python/scripts/05-deploy-app.sh b/samples/web-app-blob-storage/python/scripts/05-deploy-app.sh
index a49b0f2..ec6b9c1 100755
--- a/samples/web-app-blob-storage/python/scripts/05-deploy-app.sh
+++ b/samples/web-app-blob-storage/python/scripts/05-deploy-app.sh
@@ -20,7 +20,14 @@ else
 fi
 
 # Generate a stable Flask SECRET_KEY (sessions survive pod restarts)
-SECRET_KEY=$(openssl rand -hex 32)
+# Reuse the key already stored in the Secret, when there is one. A new key on every run would leave the
+# running pods signing with the old one, so their sessions, flash messages and antiforgery tokens break
+# across replicas until every pod has restarted.
+SECRET_KEY=$(kubectl get secret $SECRET_NAME --namespace $NAMESPACE --output jsonpath='{.data.SECRET_KEY}' 2>/dev/null | base64 --decode 2>/dev/null)
+
+if [[ -z $SECRET_KEY ]]; then
+	SECRET_KEY=$(openssl rand -hex 32)
+fi
 
 # Get the login server for the Azure Container Registry
 echo "Getting login server for Azure Container Registry [$ACR_NAME]..."
diff --git a/samples/web-app-cosmosdb-mongodb-api/dotnet/scripts/05-deploy-app.sh b/samples/web-app-cosmosdb-mongodb-api/dotnet/scripts/05-deploy-app.sh
index 1efe50a..5e40d3c 100755
--- a/samples/web-app-cosmosdb-mongodb-api/dotnet/scripts/05-deploy-app.sh
+++ b/samples/web-app-cosmosdb-mongodb-api/dotnet/scripts/05-deploy-app.sh
@@ -21,7 +21,14 @@ fi
 
 # Generate a stable SECRET_KEY shared by all replicas: the app derives its Data Protection key ring from it,
 # so antiforgery tokens and flash messages are valid on every replica and survive pod restarts
-SECRET_KEY=$(openssl rand -hex 32)
+# Reuse the key already stored in the Secret, when there is one. A new key on every run would leave the
+# running pods signing with the old one, so their sessions, flash messages and antiforgery tokens break
+# across replicas until every pod has restarted.
+SECRET_KEY=$(kubectl get secret $SECRET_NAME --namespace $NAMESPACE --output jsonpath='{.data.SECRET_KEY}' 2>/dev/null | base64 --decode 2>/dev/null)
+
+if [[ -z $SECRET_KEY ]]; then
+	SECRET_KEY=$(openssl rand -hex 32)
+fi
 
 # Get the login server for the Azure Container Registry
 echo "Getting login server for Azure Container Registry [$ACR_NAME]..."
diff --git a/samples/web-app-cosmosdb-mongodb-api/python/scripts/05-deploy-app.sh b/samples/web-app-cosmosdb-mongodb-api/python/scripts/05-deploy-app.sh
index 161c844..1370346 100755
--- a/samples/web-app-cosmosdb-mongodb-api/python/scripts/05-deploy-app.sh
+++ b/samples/web-app-cosmosdb-mongodb-api/python/scripts/05-deploy-app.sh
@@ -20,7 +20,14 @@ else
 fi
 
 # Generate a stable Flask SECRET_KEY (sessions survive pod restarts)
-SECRET_KEY=$(openssl rand -hex 32)
+# Reuse the key already stored in the Secret, when there is one. A new key on every run would leave the
+# running pods signing with the old one, so their sessions, flash messages and antiforgery tokens break
+# across replicas until every pod has restarted.
+SECRET_KEY=$(kubectl get secret $SECRET_NAME --namespace $NAMESPACE --output jsonpath='{.data.SECRET_KEY}' 2>/dev/null | base64 --decode 2>/dev/null)
+
+if [[ -z $SECRET_KEY ]]; then
+	SECRET_KEY=$(openssl rand -hex 32)
+fi
 
 # Get the login server for the Azure Container Registry
 echo "Getting login server for Azure Container Registry [$ACR_NAME]..."
diff --git a/samples/web-app-cosmosdb-nosql-api/dotnet/scripts/05-deploy-app.sh b/samples/web-app-cosmosdb-nosql-api/dotnet/scripts/05-deploy-app.sh
index 51507f7..118493b 100755
--- a/samples/web-app-cosmosdb-nosql-api/dotnet/scripts/05-deploy-app.sh
+++ b/samples/web-app-cosmosdb-nosql-api/dotnet/scripts/05-deploy-app.sh
@@ -35,7 +35,14 @@ fi
 
 # Generate a stable SECRET_KEY shared by all replicas: the app derives its Data Protection key ring from it,
 # so antiforgery tokens and flash messages are valid on every replica and survive pod restarts
-SECRET_KEY=$(openssl rand -hex 32)
+# Reuse the key already stored in the Secret, when there is one. A new key on every run would leave the
+# running pods signing with the old one, so their sessions, flash messages and antiforgery tokens break
+# across replicas until every pod has restarted.
+SECRET_KEY=$(kubectl get secret $SECRET_NAME --namespace $NAMESPACE --output jsonpath='{.data.SECRET_KEY}' 2>/dev/null | base64 --decode 2>/dev/null)
+
+if [[ -z $SECRET_KEY ]]; then
+	SECRET_KEY=$(openssl rand -hex 32)
+fi
 
 # Get the login server for the Azure Container Registry
 echo "Getting login server for Azure Container Registry [$ACR_NAME]..."
diff --git a/samples/web-app-cosmosdb-nosql-api/python/scripts/05-deploy-app.sh b/samples/web-app-cosmosdb-nosql-api/python/scripts/05-deploy-app.sh
index 1fab500..f499722 100755
--- a/samples/web-app-cosmosdb-nosql-api/python/scripts/05-deploy-app.sh
+++ b/samples/web-app-cosmosdb-nosql-api/python/scripts/05-deploy-app.sh
@@ -34,7 +34,14 @@ else
 fi
 
 # Generate a stable Flask SECRET_KEY (sessions survive pod restarts)
-FLASK_SECRET_KEY=$(openssl rand -hex 32)
+# Reuse the key already stored in the Secret, when there is one. A new key on every run would leave the
+# running pods signing with the old one, so their sessions, flash messages and antiforgery tokens break
+# across replicas until every pod has restarted.
+FLASK_SECRET_KEY=$(kubectl get secret $SECRET_NAME --namespace $NAMESPACE --output jsonpath='{.data.FLASK_SECRET_KEY}' 2>/dev/null | base64 --decode 2>/dev/null)
+
+if [[ -z $FLASK_SECRET_KEY ]]; then
+	FLASK_SECRET_KEY=$(openssl rand -hex 32)
+fi
 
 # Get the login server for the Azure Container Registry
 echo "Getting login server for Azure Container Registry [$ACR_NAME]..."
diff --git a/samples/web-app-file-storage/dotnet/scripts/05-deploy-app.sh b/samples/web-app-file-storage/dotnet/scripts/05-deploy-app.sh
index d8af933..fed8ded 100755
--- a/samples/web-app-file-storage/dotnet/scripts/05-deploy-app.sh
+++ b/samples/web-app-file-storage/dotnet/scripts/05-deploy-app.sh
@@ -37,7 +37,14 @@ fi
 
 # Generate a stable SECRET_KEY shared by all replicas: the app derives its Data Protection key ring from it,
 # so antiforgery tokens and flash messages are valid on every replica and survive pod restarts
-SECRET_KEY=$(openssl rand -hex 32)
+# Reuse the key already stored in the Secret, when there is one. A new key on every run would leave the
+# running pods signing with the old one, so their sessions, flash messages and antiforgery tokens break
+# across replicas until every pod has restarted.
+SECRET_KEY=$(kubectl get secret $SECRET_NAME --namespace $NAMESPACE --output jsonpath='{.data.SECRET_KEY}' 2>/dev/null | base64 --decode 2>/dev/null)
+
+if [[ -z $SECRET_KEY ]]; then
+	SECRET_KEY=$(openssl rand -hex 32)
+fi
 
 # Get the login server for the Azure Container Registry
 echo "Getting login server for Azure Container Registry [$ACR_NAME]..."
diff --git a/samples/web-app-file-storage/python/scripts/05-deploy-app.sh b/samples/web-app-file-storage/python/scripts/05-deploy-app.sh
index 089b0e3..4ca20d6 100755
--- a/samples/web-app-file-storage/python/scripts/05-deploy-app.sh
+++ b/samples/web-app-file-storage/python/scripts/05-deploy-app.sh
@@ -36,7 +36,14 @@ else
 fi
 
 # Generate a stable Flask SECRET_KEY (sessions survive pod restarts)
-SECRET_KEY=$(openssl rand -hex 32)
+# Reuse the key already stored in the Secret, when there is one. A new key on every run would leave the
+# running pods signing with the old one, so their sessions, flash messages and antiforgery tokens break
+# across replicas until every pod has restarted.
+SECRET_KEY=$(kubectl get secret $SECRET_NAME --namespace $NAMESPACE --output jsonpath='{.data.SECRET_KEY}' 2>/dev/null | base64 --decode 2>/dev/null)
+
+if [[ -z $SECRET_KEY ]]; then
+	SECRET_KEY=$(openssl rand -hex 32)
+fi
 
 # Get the login server for the Azure Container Registry
 echo "Getting login server for Azure Container Registry [$ACR_NAME]..."
diff --git a/samples/web-app-in-cluster-postgresql/dotnet/scripts/01-deploy-resources.sh b/samples/web-app-in-cluster-postgresql/dotnet/scripts/01-deploy-resources.sh
index 55b50b8..251369e 100755
--- a/samples/web-app-in-cluster-postgresql/dotnet/scripts/01-deploy-resources.sh
+++ b/samples/web-app-in-cluster-postgresql/dotnet/scripts/01-deploy-resources.sh
@@ -54,8 +54,8 @@ else
 	echo "[$ACR_NAME] Azure Container Registry already exists."
 fi
 
-# The PostgreSQL database now runs in-cluster as a StatefulSet (statefulset.yml),
-# deployed by 05-deploy-app.sh. Database provisioning and test data are handled by
-# 06-create-test-data.sh. No Azure managed PostgreSQL resource is created here.
+# The PostgreSQL database now runs in-cluster as a StatefulSet (statefulset.yml). Both the StatefulSet and
+# the test data are handled by 05-deploy-app.sh, which waits for the primary and seeds the activities table.
+# No Azure managed PostgreSQL resource is created here.
 echo "Resource group and Azure Container Registry are ready."
-echo "Next: build (02) and push (04) the image, deploy the app + in-cluster PostgreSQL (05), then seed data (06)."
+echo "Next: build (02) and push (04) the image, then deploy the app + in-cluster PostgreSQL and seed it (05)."
diff --git a/samples/web-app-in-cluster-postgresql/dotnet/scripts/05-deploy-app.sh b/samples/web-app-in-cluster-postgresql/dotnet/scripts/05-deploy-app.sh
index 1541d74..83ab65a 100755
--- a/samples/web-app-in-cluster-postgresql/dotnet/scripts/05-deploy-app.sh
+++ b/samples/web-app-in-cluster-postgresql/dotnet/scripts/05-deploy-app.sh
@@ -8,7 +8,14 @@ cd "$CURRENT_DIR" || exit
 
 # Generate a stable SECRET_KEY shared by all replicas: the app derives its Data Protection key ring from it,
 # so antiforgery tokens and flash messages are valid on every replica and survive pod restarts
-SECRET_KEY=$(openssl rand -hex 32)
+# Reuse the key already stored in the Secret, when there is one. A new key on every run would leave the
+# running pods signing with the old one, so their sessions, flash messages and antiforgery tokens break
+# across replicas until every pod has restarted.
+SECRET_KEY=$(kubectl get secret vacation-planner-postgres-in-cluster-secrets --namespace $NAMESPACE --output jsonpath='{.data.SECRET_KEY}' 2>/dev/null | base64 --decode 2>/dev/null)
+
+if [[ -z $SECRET_KEY ]]; then
+	SECRET_KEY=$(openssl rand -hex 32)
+fi
 
 # Get the login server for the Azure Container Registry
 echo "Getting login server for Azure Container Registry [$ACR_NAME]..."
diff --git a/samples/web-app-in-cluster-postgresql/python/scripts/01-deploy-resources.sh b/samples/web-app-in-cluster-postgresql/python/scripts/01-deploy-resources.sh
index 55b50b8..251369e 100755
--- a/samples/web-app-in-cluster-postgresql/python/scripts/01-deploy-resources.sh
+++ b/samples/web-app-in-cluster-postgresql/python/scripts/01-deploy-resources.sh
@@ -54,8 +54,8 @@ else
 	echo "[$ACR_NAME] Azure Container Registry already exists."
 fi
 
-# The PostgreSQL database now runs in-cluster as a StatefulSet (statefulset.yml),
-# deployed by 05-deploy-app.sh. Database provisioning and test data are handled by
-# 06-create-test-data.sh. No Azure managed PostgreSQL resource is created here.
+# The PostgreSQL database now runs in-cluster as a StatefulSet (statefulset.yml). Both the StatefulSet and
+# the test data are handled by 05-deploy-app.sh, which waits for the primary and seeds the activities table.
+# No Azure managed PostgreSQL resource is created here.
 echo "Resource group and Azure Container Registry are ready."
-echo "Next: build (02) and push (04) the image, deploy the app + in-cluster PostgreSQL (05), then seed data (06)."
+echo "Next: build (02) and push (04) the image, then deploy the app + in-cluster PostgreSQL and seed it (05)."
diff --git a/samples/web-app-in-cluster-postgresql/python/scripts/05-deploy-app.sh b/samples/web-app-in-cluster-postgresql/python/scripts/05-deploy-app.sh
index dbacbb2..d969b9b 100755
--- a/samples/web-app-in-cluster-postgresql/python/scripts/05-deploy-app.sh
+++ b/samples/web-app-in-cluster-postgresql/python/scripts/05-deploy-app.sh
@@ -7,7 +7,14 @@ source ./00-variables.sh
 cd "$CURRENT_DIR" || exit
 
 # Generate a stable Flask SECRET_KEY (sessions survive pod restarts)
-FLASK_SECRET_KEY=$(openssl rand -hex 32)
+# Reuse the key already stored in the Secret, when there is one. A new key on every run would leave the
+# running pods signing with the old one, so their sessions, flash messages and antiforgery tokens break
+# across replicas until every pod has restarted.
+FLASK_SECRET_KEY=$(kubectl get secret vacation-planner-postgres-in-cluster-secrets --namespace $NAMESPACE --output jsonpath='{.data.SECRET_KEY}' 2>/dev/null | base64 --decode 2>/dev/null)
+
+if [[ -z $FLASK_SECRET_KEY ]]; then
+	FLASK_SECRET_KEY=$(openssl rand -hex 32)
+fi
 
 # Get the login server for the Azure Container Registry
 echo "Getting login server for Azure Container Registry [$ACR_NAME]..."
diff --git a/samples/web-app-managed-identity/dotnet/scripts/05-deploy-app.sh b/samples/web-app-managed-identity/dotnet/scripts/05-deploy-app.sh
index a4cb4c1..02cafb3 100755
--- a/samples/web-app-managed-identity/dotnet/scripts/05-deploy-app.sh
+++ b/samples/web-app-managed-identity/dotnet/scripts/05-deploy-app.sh
@@ -5,7 +5,14 @@ source ./00-variables.sh
 
 # Generate a stable SECRET_KEY shared by all replicas: the app derives its Data Protection key ring from it,
 # so antiforgery tokens and flash messages are valid on every replica and survive pod restarts
-SECRET_KEY=$(openssl rand -hex 32)
+# Reuse the key already stored in the Secret, when there is one. A new key on every run would leave the
+# running pods signing with the old one, so their sessions, flash messages and antiforgery tokens break
+# across replicas until every pod has restarted.
+SECRET_KEY=$(kubectl get secret $SECRET_NAME --namespace $NAMESPACE --output jsonpath='{.data.SECRET_KEY}' 2>/dev/null | base64 --decode 2>/dev/null)
+
+if [[ -z $SECRET_KEY ]]; then
+	SECRET_KEY=$(openssl rand -hex 32)
+fi
 
 # Optional client secret for the ClientSecretCredential auth path.
 # Leave empty when using Microsoft Entra Workload ID (the recommended option).
diff --git a/samples/web-app-managed-identity/python/scripts/05-deploy-app.sh b/samples/web-app-managed-identity/python/scripts/05-deploy-app.sh
index afd0635..d4fdce7 100755
--- a/samples/web-app-managed-identity/python/scripts/05-deploy-app.sh
+++ b/samples/web-app-managed-identity/python/scripts/05-deploy-app.sh
@@ -4,7 +4,14 @@
 source ./00-variables.sh
 
 # Generate a stable Flask SECRET_KEY (sessions survive pod restarts)
-SECRET_KEY=$(openssl rand -hex 32)
+# Reuse the key already stored in the Secret, when there is one. A new key on every run would leave the
+# running pods signing with the old one, so their sessions, flash messages and antiforgery tokens break
+# across replicas until every pod has restarted.
+SECRET_KEY=$(kubectl get secret $SECRET_NAME --namespace $NAMESPACE --output jsonpath='{.data.SECRET_KEY}' 2>/dev/null | base64 --decode 2>/dev/null)
+
+if [[ -z $SECRET_KEY ]]; then
+	SECRET_KEY=$(openssl rand -hex 32)
+fi
 
 # Optional client secret for the ClientSecretCredential auth path.
 # Leave empty when using Microsoft Entra Workload ID (the recommended option).
diff --git a/samples/web-app-mysql-flexible-server/dotnet/scripts/05-deploy-app.sh b/samples/web-app-mysql-flexible-server/dotnet/scripts/05-deploy-app.sh
index 11fea8a..04fac41 100755
--- a/samples/web-app-mysql-flexible-server/dotnet/scripts/05-deploy-app.sh
+++ b/samples/web-app-mysql-flexible-server/dotnet/scripts/05-deploy-app.sh
@@ -24,7 +24,14 @@ fi
 
 # Generate a stable SECRET_KEY shared by all replicas: the app derives its Data Protection key ring from it,
 # so antiforgery tokens and flash messages are valid on every replica and survive pod restarts
-SECRET_KEY=$(openssl rand -hex 32)
+# Reuse the key already stored in the Secret, when there is one. A new key on every run would leave the
+# running pods signing with the old one, so their sessions, flash messages and antiforgery tokens break
+# across replicas until every pod has restarted.
+SECRET_KEY=$(kubectl get secret vacation-planner-mysql-secrets --namespace $NAMESPACE --output jsonpath='{.data.SECRET_KEY}' 2>/dev/null | base64 --decode 2>/dev/null)
+
+if [[ -z $SECRET_KEY ]]; then
+	SECRET_KEY=$(openssl rand -hex 32)
+fi
 
 # Get the login server for the Azure Container Registry
 echo "Getting login server for Azure Container Registry [$ACR_NAME]..."
diff --git a/samples/web-app-mysql-flexible-server/python/scripts/05-deploy-app.sh b/samples/web-app-mysql-flexible-server/python/scripts/05-deploy-app.sh
index d6468cf..3caf7b0 100755
--- a/samples/web-app-mysql-flexible-server/python/scripts/05-deploy-app.sh
+++ b/samples/web-app-mysql-flexible-server/python/scripts/05-deploy-app.sh
@@ -23,7 +23,14 @@ if [[ "$MYSQL_FQDN_FULL" == *:* ]]; then
 fi
 
 # Generate a stable Flask SECRET_KEY (sessions survive pod restarts)
-FLASK_SECRET_KEY=$(openssl rand -hex 32)
+# Reuse the key already stored in the Secret, when there is one. A new key on every run would leave the
+# running pods signing with the old one, so their sessions, flash messages and antiforgery tokens break
+# across replicas until every pod has restarted.
+FLASK_SECRET_KEY=$(kubectl get secret vacation-planner-mysql-secrets --namespace $NAMESPACE --output jsonpath='{.data.SECRET_KEY}' 2>/dev/null | base64 --decode 2>/dev/null)
+
+if [[ -z $FLASK_SECRET_KEY ]]; then
+	FLASK_SECRET_KEY=$(openssl rand -hex 32)
+fi
 
 # Get the login server for the Azure Container Registry
 echo "Getting login server for Azure Container Registry [$ACR_NAME]..."
diff --git a/samples/web-app-postgresql-flexible-server/dotnet/scripts/05-deploy-app.sh b/samples/web-app-postgresql-flexible-server/dotnet/scripts/05-deploy-app.sh
index 36cf487..8436706 100755
--- a/samples/web-app-postgresql-flexible-server/dotnet/scripts/05-deploy-app.sh
+++ b/samples/web-app-postgresql-flexible-server/dotnet/scripts/05-deploy-app.sh
@@ -24,7 +24,14 @@ fi
 
 # Generate a stable SECRET_KEY shared by all replicas: the app derives its Data Protection key ring from it,
 # so antiforgery tokens and flash messages are valid on every replica and survive pod restarts
-SECRET_KEY=$(openssl rand -hex 32)
+# Reuse the key already stored in the Secret, when there is one. A new key on every run would leave the
+# running pods signing with the old one, so their sessions, flash messages and antiforgery tokens break
+# across replicas until every pod has restarted.
+SECRET_KEY=$(kubectl get secret vacation-planner-postgres-secrets --namespace $NAMESPACE --output jsonpath='{.data.SECRET_KEY}' 2>/dev/null | base64 --decode 2>/dev/null)
+
+if [[ -z $SECRET_KEY ]]; then
+	SECRET_KEY=$(openssl rand -hex 32)
+fi
 
 # Get the login server for the Azure Container Registry
 echo "Getting login server for Azure Container Registry [$ACR_NAME]..."
diff --git a/samples/web-app-postgresql-flexible-server/python/scripts/05-deploy-app.sh b/samples/web-app-postgresql-flexible-server/python/scripts/05-deploy-app.sh
index fa0ccc1..8db736b 100755
--- a/samples/web-app-postgresql-flexible-server/python/scripts/05-deploy-app.sh
+++ b/samples/web-app-postgresql-flexible-server/python/scripts/05-deploy-app.sh
@@ -23,7 +23,14 @@ if [[ "$PG_FQDN_FULL" == *:* ]]; then
 fi
 
 # Generate a stable Flask SECRET_KEY (sessions survive pod restarts)
-FLASK_SECRET_KEY=$(openssl rand -hex 32)
+# Reuse the key already stored in the Secret, when there is one. A new key on every run would leave the
+# running pods signing with the old one, so their sessions, flash messages and antiforgery tokens break
+# across replicas until every pod has restarted.
+FLASK_SECRET_KEY=$(kubectl get secret vacation-planner-postgres-secrets --namespace $NAMESPACE --output jsonpath='{.data.SECRET_KEY}' 2>/dev/null | base64 --decode 2>/dev/null)
+
+if [[ -z $FLASK_SECRET_KEY ]]; then
+	FLASK_SECRET_KEY=$(openssl rand -hex 32)
+fi
 
 # Get the login server for the Azure Container Registry
 echo "Getting login server for Azure Container Registry [$ACR_NAME]..."
diff --git a/samples/web-app-sql-database/dotnet/scripts/01-deploy-resources.sh b/samples/web-app-sql-database/dotnet/scripts/01-deploy-resources.sh
index d1da94d..a305d58 100755
--- a/samples/web-app-sql-database/dotnet/scripts/01-deploy-resources.sh
+++ b/samples/web-app-sql-database/dotnet/scripts/01-deploy-resources.sh
@@ -204,7 +204,8 @@ sqlcmd -S "$SQL_SERVER_FQDN" \
 	-U "$DATABASE_USER_NAME" \
 	-P "$DATABASE_USER_PASSWORD" \
   -N -C \
-	-Q "INSERT INTO Activities (username, activity, timestamp) 
+	-Q "IF NOT EXISTS (SELECT 1 FROM Activities)
+			INSERT INTO Activities (username, activity, timestamp) 
 			VALUES 
       ('paolo', 'Visit the Leaning Tower in Pisa', GETDATE()),
       ('paolo', 'Explore Etruscan walls in Volterra', GETDATE()),
diff --git a/samples/web-app-sql-database/dotnet/scripts/05-deploy-app.sh b/samples/web-app-sql-database/dotnet/scripts/05-deploy-app.sh
index 009dbce..0ac5280 100755
--- a/samples/web-app-sql-database/dotnet/scripts/05-deploy-app.sh
+++ b/samples/web-app-sql-database/dotnet/scripts/05-deploy-app.sh
@@ -17,7 +17,14 @@ fi
 
 # Generate a stable SECRET_KEY shared by all replicas: the app derives its Data Protection key ring from it,
 # so antiforgery tokens and flash messages are valid on every replica and survive pod restarts
-SECRET_KEY=$(openssl rand -hex 32)
+# Reuse the key already stored in the Secret, when there is one. A new key on every run would leave the
+# running pods signing with the old one, so their sessions, flash messages and antiforgery tokens break
+# across replicas until every pod has restarted.
+SECRET_KEY=$(kubectl get secret vacation-planner-sql-secrets --namespace $NAMESPACE --output jsonpath='{.data.SECRET_KEY}' 2>/dev/null | base64 --decode 2>/dev/null)
+
+if [[ -z $SECRET_KEY ]]; then
+	SECRET_KEY=$(openssl rand -hex 32)
+fi
 
 # Get the login server for the Azure Container Registry
 echo "Getting login server for Azure Container Registry [$ACR_NAME]..."
diff --git a/samples/web-app-sql-database/python/scripts/01-deploy-resources.sh b/samples/web-app-sql-database/python/scripts/01-deploy-resources.sh
index d1da94d..a305d58 100755
--- a/samples/web-app-sql-database/python/scripts/01-deploy-resources.sh
+++ b/samples/web-app-sql-database/python/scripts/01-deploy-resources.sh
@@ -204,7 +204,8 @@ sqlcmd -S "$SQL_SERVER_FQDN" \
 	-U "$DATABASE_USER_NAME" \
 	-P "$DATABASE_USER_PASSWORD" \
   -N -C \
-	-Q "INSERT INTO Activities (username, activity, timestamp) 
+	-Q "IF NOT EXISTS (SELECT 1 FROM Activities)
+			INSERT INTO Activities (username, activity, timestamp) 
 			VALUES 
       ('paolo', 'Visit the Leaning Tower in Pisa', GETDATE()),
       ('paolo', 'Explore Etruscan walls in Volterra', GETDATE()),
diff --git a/samples/web-app-sql-database/python/scripts/05-deploy-app.sh b/samples/web-app-sql-database/python/scripts/05-deploy-app.sh
index f8909de..e1a71e2 100755
--- a/samples/web-app-sql-database/python/scripts/05-deploy-app.sh
+++ b/samples/web-app-sql-database/python/scripts/05-deploy-app.sh
@@ -16,7 +16,14 @@ if [ -z "$SQL_SERVER_FQDN" ]; then
 fi
 
 # Generate a stable Flask SECRET_KEY (sessions survive pod restarts)
-FLASK_SECRET_KEY=$(openssl rand -hex 32)
+# Reuse the key already stored in the Secret, when there is one. A new key on every run would leave the
+# running pods signing with the old one, so their sessions, flash messages and antiforgery tokens break
+# across replicas until every pod has restarted.
+FLASK_SECRET_KEY=$(kubectl get secret vacation-planner-sql-secrets --namespace $NAMESPACE --output jsonpath='{.data.FLASK_SECRET_KEY}' 2>/dev/null | base64 --decode 2>/dev/null)
+
+if [[ -z $FLASK_SECRET_KEY ]]; then
+	FLASK_SECRET_KEY=$(openssl rand -hex 32)
+fi
 
 # Get the login server for the Azure Container Registry
 echo "Getting login server for Azure Container Registry [$ACR_NAME]..."

From bbfe62f35cfbaaa75b8ff4bcc24be3de9845a169 Mon Sep 17 00:00:00 2001
From: Paolo Salvatori <leprino@hotmail.com>
Date: Wed, 9 Sep 2026 09:34:29 +0200
Subject: [PATCH 17/20] Guard the blob name and converge a repeated delete in
 the .NET samples

The blob name arrives from a form field, so blob-storage and managed-identity
check its shape (yyyy-MM-dd-HH-mm-ss-activity.txt) before an in-place update or
a delete reaches the container, the same guard file-storage already applies to
the file share.

Deleting an item another replica had already deleted reported "nothing to
delete" in web-app-cosmosdb-nosql-api, so the user saw no confirmation for work
that was done. Already gone now counts as deleted, as in every other store.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
---
 .../dotnet/src/Services/BlobActivityStore.cs  | 34 +++++++++++++++++--
 .../src/Services/CosmosActivityStore.cs       |  6 ++--
 .../dotnet/src/Services/BlobActivityStore.cs  | 34 +++++++++++++++++--
 3 files changed, 66 insertions(+), 8 deletions(-)

diff --git a/samples/web-app-blob-storage/dotnet/src/Services/BlobActivityStore.cs b/samples/web-app-blob-storage/dotnet/src/Services/BlobActivityStore.cs
index 38cfaff..a267f6a 100644
--- a/samples/web-app-blob-storage/dotnet/src/Services/BlobActivityStore.cs
+++ b/samples/web-app-blob-storage/dotnet/src/Services/BlobActivityStore.cs
@@ -9,6 +9,9 @@ namespace VacationPlanner.Services;
 /// <summary>One blob per activity in a Blob Storage container; the blob name is the activity id and its content the text.</summary>
 public sealed class BlobActivityStore : IActivityStore
 {
+    /// <summary>Suffix of the blobs holding the activities, one blob per activity.</summary>
+    private const string ActivityBlobSuffix = "-activity.txt";
+
     private readonly BlobContainerClient _container;
     private readonly ILogger<BlobActivityStore> _logger;
 
@@ -68,13 +71,27 @@ public async Task<IReadOnlyList<Activity>> ListAsync(CancellationToken cancellat
     }
 
     public Task<bool> AddAsync(string text, CancellationToken cancellationToken) =>
-        UploadAsync($"{DateTime.Now:yyyy-MM-dd-HH-mm-ss}-activity.txt", text, cancellationToken);
+        UploadAsync($"{DateTime.Now:yyyy-MM-dd-HH-mm-ss}{ActivityBlobSuffix}", text, cancellationToken);
 
-    public Task<bool> UpdateAsync(string id, string text, CancellationToken cancellationToken) =>
-        UploadAsync(id, text, cancellationToken);
+    public Task<bool> UpdateAsync(string id, string text, CancellationToken cancellationToken)
+    {
+        if (!IsActivityName(id))
+        {
+            _logger.LogWarning("Invalid activity name '{Name}'.", id);
+            return Task.FromResult(false);
+        }
+
+        return UploadAsync(id, text, cancellationToken);
+    }
 
     public async Task<bool> DeleteAsync(string id, CancellationToken cancellationToken)
     {
+        if (!IsActivityName(id))
+        {
+            _logger.LogWarning("Invalid activity name '{Name}'.", id);
+            return false;
+        }
+
         // As in the Python sample, a blob that is already gone still counts as deleted.
         var deleted = await _container.GetBlobClient(id).DeleteIfExistsAsync(cancellationToken: cancellationToken);
         if (deleted.Value)
@@ -109,6 +126,17 @@ private async Task<bool> UploadAsync(string name, string text, CancellationToken
         return true;
     }
 
+    /// <summary>
+    /// Whether the name is one of this app's activity blobs, and nothing else: a blob called
+    /// yyyy-MM-dd-HH-mm-ss-activity.txt directly in the container. The name arrives from a form field, so this
+    /// keeps it from reaching any other blob in the container.
+    /// </summary>
+    private static bool IsActivityName(string? name) =>
+        !string.IsNullOrEmpty(name)
+        && name is not ("." or "..")
+        && !name.Contains('/') && !name.Contains('\\')
+        && name.EndsWith(ActivityBlobSuffix, StringComparison.Ordinal);
+
     /// <summary>
     /// Builds the client from the connection string's explicit <c>BlobEndpoint</c> and shared key when they are present,
     /// as the Python SDK does. The .NET parser insists on a port-less <c>EndpointSuffix</c> and rejects the connection
diff --git a/samples/web-app-cosmosdb-nosql-api/dotnet/src/Services/CosmosActivityStore.cs b/samples/web-app-cosmosdb-nosql-api/dotnet/src/Services/CosmosActivityStore.cs
index d1c8a97..40904c0 100644
--- a/samples/web-app-cosmosdb-nosql-api/dotnet/src/Services/CosmosActivityStore.cs
+++ b/samples/web-app-cosmosdb-nosql-api/dotnet/src/Services/CosmosActivityStore.cs
@@ -103,8 +103,10 @@ public async Task<bool> DeleteAsync(string id, CancellationToken cancellationTok
         }
         catch (CosmosException ex) when (ex.StatusCode == HttpStatusCode.NotFound)
         {
-            _logger.LogWarning("Activity {Id} was not found; nothing to delete", id);
-            return false;
+            // Already gone counts as deleted: every replica serves the same container, so another replica
+            // may have deleted the item a moment earlier, and the user should see it disappear either way.
+            _logger.LogInformation("Activity {Id} was not found: already deleted.", id);
+            return true;
         }
     }
 
diff --git a/samples/web-app-managed-identity/dotnet/src/Services/BlobActivityStore.cs b/samples/web-app-managed-identity/dotnet/src/Services/BlobActivityStore.cs
index 38cfaff..a267f6a 100644
--- a/samples/web-app-managed-identity/dotnet/src/Services/BlobActivityStore.cs
+++ b/samples/web-app-managed-identity/dotnet/src/Services/BlobActivityStore.cs
@@ -9,6 +9,9 @@ namespace VacationPlanner.Services;
 /// <summary>One blob per activity in a Blob Storage container; the blob name is the activity id and its content the text.</summary>
 public sealed class BlobActivityStore : IActivityStore
 {
+    /// <summary>Suffix of the blobs holding the activities, one blob per activity.</summary>
+    private const string ActivityBlobSuffix = "-activity.txt";
+
     private readonly BlobContainerClient _container;
     private readonly ILogger<BlobActivityStore> _logger;
 
@@ -68,13 +71,27 @@ public async Task<IReadOnlyList<Activity>> ListAsync(CancellationToken cancellat
     }
 
     public Task<bool> AddAsync(string text, CancellationToken cancellationToken) =>
-        UploadAsync($"{DateTime.Now:yyyy-MM-dd-HH-mm-ss}-activity.txt", text, cancellationToken);
+        UploadAsync($"{DateTime.Now:yyyy-MM-dd-HH-mm-ss}{ActivityBlobSuffix}", text, cancellationToken);
 
-    public Task<bool> UpdateAsync(string id, string text, CancellationToken cancellationToken) =>
-        UploadAsync(id, text, cancellationToken);
+    public Task<bool> UpdateAsync(string id, string text, CancellationToken cancellationToken)
+    {
+        if (!IsActivityName(id))
+        {
+            _logger.LogWarning("Invalid activity name '{Name}'.", id);
+            return Task.FromResult(false);
+        }
+
+        return UploadAsync(id, text, cancellationToken);
+    }
 
     public async Task<bool> DeleteAsync(string id, CancellationToken cancellationToken)
     {
+        if (!IsActivityName(id))
+        {
+            _logger.LogWarning("Invalid activity name '{Name}'.", id);
+            return false;
+        }
+
         // As in the Python sample, a blob that is already gone still counts as deleted.
         var deleted = await _container.GetBlobClient(id).DeleteIfExistsAsync(cancellationToken: cancellationToken);
         if (deleted.Value)
@@ -109,6 +126,17 @@ private async Task<bool> UploadAsync(string name, string text, CancellationToken
         return true;
     }
 
+    /// <summary>
+    /// Whether the name is one of this app's activity blobs, and nothing else: a blob called
+    /// yyyy-MM-dd-HH-mm-ss-activity.txt directly in the container. The name arrives from a form field, so this
+    /// keeps it from reaching any other blob in the container.
+    /// </summary>
+    private static bool IsActivityName(string? name) =>
+        !string.IsNullOrEmpty(name)
+        && name is not ("." or "..")
+        && !name.Contains('/') && !name.Contains('\\')
+        && name.EndsWith(ActivityBlobSuffix, StringComparison.Ordinal);
+
     /// <summary>
     /// Builds the client from the connection string's explicit <c>BlobEndpoint</c> and shared key when they are present,
     /// as the Python SDK does. The .NET parser insists on a port-less <c>EndpointSuffix</c> and rejects the connection

From 82070dd477a33edd87ebf2c8fa1feb63e880e2f8 Mon Sep 17 00:00:00 2001
From: Paolo Salvatori <leprino@hotmail.com>
Date: Wed, 9 Sep 2026 09:48:02 +0200
Subject: [PATCH 18/20] Make the file-share write probe unique per replica

The .NET file-storage health check proves the mounted share is writable by
writing a dot file and deleting it, and it named that file after the process id.
Every container runs the app as PID 1, so all three replicas used the same
/data/.write-probe-1 on the same share: one replica deleted the probe while
another was writing it, and the write failed with FileNotFoundException. The pod
then failed its liveness probe with 503 and restarted in a loop, while the share
itself was perfectly healthy.

The probe name now carries the pod name and a GUID. The Python version is
unaffected: its health check uses os.access instead of writing a file.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
---
 .../dotnet/src/Services/FileActivityStore.cs                 | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/samples/web-app-file-storage/dotnet/src/Services/FileActivityStore.cs b/samples/web-app-file-storage/dotnet/src/Services/FileActivityStore.cs
index 3086160..6723cfe 100644
--- a/samples/web-app-file-storage/dotnet/src/Services/FileActivityStore.cs
+++ b/samples/web-app-file-storage/dotnet/src/Services/FileActivityStore.cs
@@ -157,10 +157,13 @@ private static bool IsActivityName(string? name) =>
     /// <summary>
     /// The equivalent of the Python sample's os.access(W_OK | X_OK): the only portable proof that the mounted
     /// share accepts writes from this uid is to write to it. The probe is a dot file the listing never shows.
+    /// Its name has to be unique per probe: every replica mounts the same share and every container runs the app
+    /// as PID 1, so a name derived from the process id is the same in all replicas, and one replica deleting the
+    /// probe while another writes it fails the liveness check of a perfectly healthy pod.
     /// </summary>
     private void ProbeWritable()
     {
-        var probe = Path.Combine(_directory, $".write-probe-{Environment.ProcessId}");
+        var probe = Path.Combine(_directory, $".write-probe-{Environment.MachineName}-{Guid.NewGuid():N}");
         File.WriteAllText(probe, string.Empty);
         File.Delete(probe);
     }

From a5c4c5dfa766d1ad41ba111b985edff4656a795c Mon Sep 17 00:00:00 2001
From: Paolo Salvatori <leprino@hotmail.com>
Date: Wed, 9 Sep 2026 09:48:02 +0200
Subject: [PATCH 19/20] Roll the pods when 05-deploy-app.sh redeploys the same
 image tag

Rebuilding and pushing the image keeps the tag :v1, so the pod template that
05-deploy-app.sh applies is unchanged, kubectl apply reports no change and the
running pods keep serving the image they started with. A rebuilt image only
reached the cluster when the image name changed, which happens when switching
between the Python and the .NET version but not when redeploying the same one.

Both versions of every sample now restart the deployment after applying it, so
the pods always end up on the image that was just pushed.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
---
 samples/web-app-blob-storage/dotnet/scripts/05-deploy-app.sh  | 4 ++++
 samples/web-app-blob-storage/python/scripts/05-deploy-app.sh  | 4 ++++
 .../dotnet/scripts/05-deploy-app.sh                           | 4 ++++
 .../python/scripts/05-deploy-app.sh                           | 4 ++++
 .../dotnet/scripts/05-deploy-app.sh                           | 4 ++++
 .../python/scripts/05-deploy-app.sh                           | 4 ++++
 samples/web-app-file-storage/dotnet/scripts/05-deploy-app.sh  | 4 ++++
 samples/web-app-file-storage/python/scripts/05-deploy-app.sh  | 4 ++++
 .../dotnet/scripts/05-deploy-app.sh                           | 4 ++++
 .../python/scripts/05-deploy-app.sh                           | 4 ++++
 .../web-app-managed-identity/dotnet/scripts/05-deploy-app.sh  | 4 ++++
 .../web-app-managed-identity/python/scripts/05-deploy-app.sh  | 4 ++++
 .../dotnet/scripts/05-deploy-app.sh                           | 4 ++++
 .../python/scripts/05-deploy-app.sh                           | 4 ++++
 .../dotnet/scripts/05-deploy-app.sh                           | 4 ++++
 .../python/scripts/05-deploy-app.sh                           | 4 ++++
 samples/web-app-sql-database/dotnet/scripts/05-deploy-app.sh  | 4 ++++
 samples/web-app-sql-database/python/scripts/05-deploy-app.sh  | 4 ++++
 18 files changed, 72 insertions(+)

diff --git a/samples/web-app-blob-storage/dotnet/scripts/05-deploy-app.sh b/samples/web-app-blob-storage/dotnet/scripts/05-deploy-app.sh
index f0e5210..9dc9760 100755
--- a/samples/web-app-blob-storage/dotnet/scripts/05-deploy-app.sh
+++ b/samples/web-app-blob-storage/dotnet/scripts/05-deploy-app.sh
@@ -79,6 +79,10 @@ cat service.yml |
 yq "(.metadata.namespace)|="\""$NAMESPACE"\" |
 kubectl apply -f -
 
+# Roll the pods so a re-push of the same image tag actually takes effect: the pod template is unchanged,
+# so kubectl apply reports no change and leaves the running pods on the image they started with.
+kubectl rollout restart deployment/$DEPLOYMENT_NAME --namespace $NAMESPACE
+
 # Wait for the rollout so a pod stuck in ImagePullBackOff or CrashLoopBackOff is reported here, not discovered later
 echo "Waiting for deployment [$DEPLOYMENT_NAME] to roll out..."
 if kubectl rollout status deployment/$DEPLOYMENT_NAME -n $NAMESPACE --timeout=600s; then
diff --git a/samples/web-app-blob-storage/python/scripts/05-deploy-app.sh b/samples/web-app-blob-storage/python/scripts/05-deploy-app.sh
index ec6b9c1..d8aae24 100755
--- a/samples/web-app-blob-storage/python/scripts/05-deploy-app.sh
+++ b/samples/web-app-blob-storage/python/scripts/05-deploy-app.sh
@@ -77,3 +77,7 @@ kubectl apply -f -
 cat service.yml |
 yq "(.metadata.namespace)|="\""$NAMESPACE"\" |
 kubectl apply -f -
+
+# Roll the pods so a re-push of the same image tag actually takes effect: the pod template is unchanged,
+# so kubectl apply reports no change and leaves the running pods on the image they started with.
+kubectl rollout restart deployment/$DEPLOYMENT_NAME --namespace $NAMESPACE
diff --git a/samples/web-app-cosmosdb-mongodb-api/dotnet/scripts/05-deploy-app.sh b/samples/web-app-cosmosdb-mongodb-api/dotnet/scripts/05-deploy-app.sh
index 5e40d3c..6b4350e 100755
--- a/samples/web-app-cosmosdb-mongodb-api/dotnet/scripts/05-deploy-app.sh
+++ b/samples/web-app-cosmosdb-mongodb-api/dotnet/scripts/05-deploy-app.sh
@@ -82,6 +82,10 @@ cat service.yml |
 yq "(.metadata.namespace)|="\""$NAMESPACE"\" |
 kubectl apply -f -
 
+# Roll the pods so a re-push of the same image tag actually takes effect: the pod template is unchanged,
+# so kubectl apply reports no change and leaves the running pods on the image they started with.
+kubectl rollout restart deployment/$DEPLOYMENT_NAME --namespace $NAMESPACE
+
 # Wait for the rollout so a pod stuck in ImagePullBackOff or CrashLoopBackOff is reported here, not discovered later
 echo "Waiting for deployment [$DEPLOYMENT_NAME] to roll out..."
 if kubectl rollout status deployment/$DEPLOYMENT_NAME -n $NAMESPACE --timeout=600s; then
diff --git a/samples/web-app-cosmosdb-mongodb-api/python/scripts/05-deploy-app.sh b/samples/web-app-cosmosdb-mongodb-api/python/scripts/05-deploy-app.sh
index 1370346..aa11996 100755
--- a/samples/web-app-cosmosdb-mongodb-api/python/scripts/05-deploy-app.sh
+++ b/samples/web-app-cosmosdb-mongodb-api/python/scripts/05-deploy-app.sh
@@ -80,3 +80,7 @@ kubectl apply -f -
 cat service.yml |
 yq "(.metadata.namespace)|="\""$NAMESPACE"\" |
 kubectl apply -f -
+
+# Roll the pods so a re-push of the same image tag actually takes effect: the pod template is unchanged,
+# so kubectl apply reports no change and leaves the running pods on the image they started with.
+kubectl rollout restart deployment/$DEPLOYMENT_NAME --namespace $NAMESPACE
diff --git a/samples/web-app-cosmosdb-nosql-api/dotnet/scripts/05-deploy-app.sh b/samples/web-app-cosmosdb-nosql-api/dotnet/scripts/05-deploy-app.sh
index 118493b..6ff2275 100755
--- a/samples/web-app-cosmosdb-nosql-api/dotnet/scripts/05-deploy-app.sh
+++ b/samples/web-app-cosmosdb-nosql-api/dotnet/scripts/05-deploy-app.sh
@@ -125,6 +125,10 @@ cat service.yml |
 yq "(.metadata.namespace)|="\""$NAMESPACE"\" |
 kubectl apply -f -
 
+# Roll the pods so a re-push of the same image tag actually takes effect: the pod template is unchanged,
+# so kubectl apply reports no change and leaves the running pods on the image they started with.
+kubectl rollout restart deployment/$DEPLOYMENT_NAME --namespace $NAMESPACE
+
 # Wait for the rollout so a pod stuck in ImagePullBackOff or CrashLoopBackOff is reported here, not discovered later
 echo "Waiting for deployment [$DEPLOYMENT_NAME] to roll out..."
 if kubectl rollout status deployment/$DEPLOYMENT_NAME -n $NAMESPACE --timeout=600s; then
diff --git a/samples/web-app-cosmosdb-nosql-api/python/scripts/05-deploy-app.sh b/samples/web-app-cosmosdb-nosql-api/python/scripts/05-deploy-app.sh
index f499722..30d42fd 100755
--- a/samples/web-app-cosmosdb-nosql-api/python/scripts/05-deploy-app.sh
+++ b/samples/web-app-cosmosdb-nosql-api/python/scripts/05-deploy-app.sh
@@ -123,3 +123,7 @@ kubectl apply -f -
 cat service.yml |
 yq "(.metadata.namespace)|="\""$NAMESPACE"\" |
 kubectl apply -f -
+
+# Roll the pods so a re-push of the same image tag actually takes effect: the pod template is unchanged,
+# so kubectl apply reports no change and leaves the running pods on the image they started with.
+kubectl rollout restart deployment/$DEPLOYMENT_NAME --namespace $NAMESPACE
diff --git a/samples/web-app-file-storage/dotnet/scripts/05-deploy-app.sh b/samples/web-app-file-storage/dotnet/scripts/05-deploy-app.sh
index fed8ded..2addd08 100755
--- a/samples/web-app-file-storage/dotnet/scripts/05-deploy-app.sh
+++ b/samples/web-app-file-storage/dotnet/scripts/05-deploy-app.sh
@@ -201,6 +201,10 @@ yq "(.metadata.namespace)|="\""$NAMESPACE"\" |
 yq "(.metadata.name)|="\""$SERVICE_NAME"\" |
 kubectl apply -f -
 
+# Roll the pods so a re-push of the same image tag actually takes effect: the pod template is unchanged,
+# so kubectl apply reports no change and leaves the running pods on the image they started with.
+kubectl rollout restart deployment/$DEPLOYMENT_NAME --namespace $NAMESPACE
+
 # Wait for the rollout, so an unattended run of the scripts fails here instead of appearing to succeed
 # while the pods are unable to mount the file share.
 echo "Waiting for the [$DEPLOYMENT_NAME] deployment to roll out..."
diff --git a/samples/web-app-file-storage/python/scripts/05-deploy-app.sh b/samples/web-app-file-storage/python/scripts/05-deploy-app.sh
index 4ca20d6..a4772d3 100755
--- a/samples/web-app-file-storage/python/scripts/05-deploy-app.sh
+++ b/samples/web-app-file-storage/python/scripts/05-deploy-app.sh
@@ -200,6 +200,10 @@ yq "(.metadata.namespace)|="\""$NAMESPACE"\" |
 yq "(.metadata.name)|="\""$SERVICE_NAME"\" |
 kubectl apply -f -
 
+# Roll the pods so a re-push of the same image tag actually takes effect: the pod template is unchanged,
+# so kubectl apply reports no change and leaves the running pods on the image they started with.
+kubectl rollout restart deployment/$DEPLOYMENT_NAME --namespace $NAMESPACE
+
 # Wait for the rollout, so an unattended run of the scripts fails here instead of appearing to succeed
 # while the pods are unable to mount the file share.
 echo "Waiting for the [$DEPLOYMENT_NAME] deployment to roll out..."
diff --git a/samples/web-app-in-cluster-postgresql/dotnet/scripts/05-deploy-app.sh b/samples/web-app-in-cluster-postgresql/dotnet/scripts/05-deploy-app.sh
index 83ab65a..9373c48 100755
--- a/samples/web-app-in-cluster-postgresql/dotnet/scripts/05-deploy-app.sh
+++ b/samples/web-app-in-cluster-postgresql/dotnet/scripts/05-deploy-app.sh
@@ -275,6 +275,10 @@ cat service.yml |
 yq "(.metadata.namespace)|="\""$NAMESPACE"\" |
 kubectl apply -f -
 
+# Roll the pods so a re-push of the same image tag actually takes effect: the pod template is unchanged,
+# so kubectl apply reports no change and leaves the running pods on the image they started with.
+kubectl rollout restart deployment/$DEPLOYMENT_NAME --namespace $NAMESPACE
+
 # Wait for the rollout so a pod stuck in ImagePullBackOff or CrashLoopBackOff is reported here, not discovered later
 echo "Waiting for deployment [$DEPLOYMENT_NAME] to roll out..."
 if kubectl rollout status deployment/$DEPLOYMENT_NAME -n $NAMESPACE --timeout=600s; then
diff --git a/samples/web-app-in-cluster-postgresql/python/scripts/05-deploy-app.sh b/samples/web-app-in-cluster-postgresql/python/scripts/05-deploy-app.sh
index d969b9b..1f7cefe 100755
--- a/samples/web-app-in-cluster-postgresql/python/scripts/05-deploy-app.sh
+++ b/samples/web-app-in-cluster-postgresql/python/scripts/05-deploy-app.sh
@@ -273,3 +273,7 @@ kubectl apply -f -
 cat service.yml |
 yq "(.metadata.namespace)|="\""$NAMESPACE"\" |
 kubectl apply -f -
+
+# Roll the pods so a re-push of the same image tag actually takes effect: the pod template is unchanged,
+# so kubectl apply reports no change and leaves the running pods on the image they started with.
+kubectl rollout restart deployment/$DEPLOYMENT_NAME --namespace $NAMESPACE
diff --git a/samples/web-app-managed-identity/dotnet/scripts/05-deploy-app.sh b/samples/web-app-managed-identity/dotnet/scripts/05-deploy-app.sh
index 02cafb3..2845b54 100755
--- a/samples/web-app-managed-identity/dotnet/scripts/05-deploy-app.sh
+++ b/samples/web-app-managed-identity/dotnet/scripts/05-deploy-app.sh
@@ -227,6 +227,10 @@ if [[ $DEPLOY_GATEWAY == "true" ]]; then
 	yq "(.spec.hostnames[0])|="\""$SUBDOMAIN.$DNS_ZONE_NAME"\" |
 	kubectl apply -f -
 
+# Roll the pods so a re-push of the same image tag actually takes effect: the pod template is unchanged,
+# so kubectl apply reports no change and leaves the running pods on the image they started with.
+kubectl rollout restart deployment/$DEPLOYMENT_NAME --namespace $NAMESPACE
+
 	# Retrieve the public IP address from the gateway
 	echo -n "Retrieving the external IP address from the [$NAME] gateway..."
 	while [[ -z $PUBLIC_IP_ADDRESS ]]; do
diff --git a/samples/web-app-managed-identity/python/scripts/05-deploy-app.sh b/samples/web-app-managed-identity/python/scripts/05-deploy-app.sh
index d4fdce7..bc78711 100755
--- a/samples/web-app-managed-identity/python/scripts/05-deploy-app.sh
+++ b/samples/web-app-managed-identity/python/scripts/05-deploy-app.sh
@@ -226,6 +226,10 @@ if [[ $DEPLOY_GATEWAY == "true" ]]; then
 	yq "(.spec.hostnames[0])|="\""$SUBDOMAIN.$DNS_ZONE_NAME"\" |
 	kubectl apply -f -
 
+# Roll the pods so a re-push of the same image tag actually takes effect: the pod template is unchanged,
+# so kubectl apply reports no change and leaves the running pods on the image they started with.
+kubectl rollout restart deployment/$DEPLOYMENT_NAME --namespace $NAMESPACE
+
 	# Retrieve the public IP address from the gateway
 	echo -n "Retrieving the external IP address from the [$NAME] gateway..."
 	while [[ -z $PUBLIC_IP_ADDRESS ]]; do
diff --git a/samples/web-app-mysql-flexible-server/dotnet/scripts/05-deploy-app.sh b/samples/web-app-mysql-flexible-server/dotnet/scripts/05-deploy-app.sh
index 04fac41..acba538 100755
--- a/samples/web-app-mysql-flexible-server/dotnet/scripts/05-deploy-app.sh
+++ b/samples/web-app-mysql-flexible-server/dotnet/scripts/05-deploy-app.sh
@@ -87,6 +87,10 @@ cat service.yml |
 yq "(.metadata.namespace)|="\""$NAMESPACE"\" |
 kubectl apply -f -
 
+# Roll the pods so a re-push of the same image tag actually takes effect: the pod template is unchanged,
+# so kubectl apply reports no change and leaves the running pods on the image they started with.
+kubectl rollout restart deployment/$DEPLOYMENT_NAME --namespace $NAMESPACE
+
 # Wait for the rollout so a pod stuck in ImagePullBackOff or CrashLoopBackOff is reported here, not discovered later
 echo "Waiting for deployment [$DEPLOYMENT_NAME] to roll out..."
 if kubectl rollout status deployment/$DEPLOYMENT_NAME -n $NAMESPACE --timeout=600s; then
diff --git a/samples/web-app-mysql-flexible-server/python/scripts/05-deploy-app.sh b/samples/web-app-mysql-flexible-server/python/scripts/05-deploy-app.sh
index 3caf7b0..a1affe3 100755
--- a/samples/web-app-mysql-flexible-server/python/scripts/05-deploy-app.sh
+++ b/samples/web-app-mysql-flexible-server/python/scripts/05-deploy-app.sh
@@ -85,3 +85,7 @@ kubectl apply -f -
 cat service.yml |
 yq "(.metadata.namespace)|="\""$NAMESPACE"\" |
 kubectl apply -f -
+
+# Roll the pods so a re-push of the same image tag actually takes effect: the pod template is unchanged,
+# so kubectl apply reports no change and leaves the running pods on the image they started with.
+kubectl rollout restart deployment/$DEPLOYMENT_NAME --namespace $NAMESPACE
diff --git a/samples/web-app-postgresql-flexible-server/dotnet/scripts/05-deploy-app.sh b/samples/web-app-postgresql-flexible-server/dotnet/scripts/05-deploy-app.sh
index 8436706..f7a061e 100755
--- a/samples/web-app-postgresql-flexible-server/dotnet/scripts/05-deploy-app.sh
+++ b/samples/web-app-postgresql-flexible-server/dotnet/scripts/05-deploy-app.sh
@@ -86,6 +86,10 @@ cat service.yml |
 yq "(.metadata.namespace)|="\""$NAMESPACE"\" |
 kubectl apply -f -
 
+# Roll the pods so a re-push of the same image tag actually takes effect: the pod template is unchanged,
+# so kubectl apply reports no change and leaves the running pods on the image they started with.
+kubectl rollout restart deployment/$DEPLOYMENT_NAME --namespace $NAMESPACE
+
 # Wait for the rollout so a pod stuck in ImagePullBackOff or CrashLoopBackOff is reported here, not discovered later
 echo "Waiting for deployment [$DEPLOYMENT_NAME] to roll out..."
 if kubectl rollout status deployment/$DEPLOYMENT_NAME -n $NAMESPACE --timeout=600s; then
diff --git a/samples/web-app-postgresql-flexible-server/python/scripts/05-deploy-app.sh b/samples/web-app-postgresql-flexible-server/python/scripts/05-deploy-app.sh
index 8db736b..f681d2f 100755
--- a/samples/web-app-postgresql-flexible-server/python/scripts/05-deploy-app.sh
+++ b/samples/web-app-postgresql-flexible-server/python/scripts/05-deploy-app.sh
@@ -84,3 +84,7 @@ kubectl apply -f -
 cat service.yml |
 yq "(.metadata.namespace)|="\""$NAMESPACE"\" |
 kubectl apply -f -
+
+# Roll the pods so a re-push of the same image tag actually takes effect: the pod template is unchanged,
+# so kubectl apply reports no change and leaves the running pods on the image they started with.
+kubectl rollout restart deployment/$DEPLOYMENT_NAME --namespace $NAMESPACE
diff --git a/samples/web-app-sql-database/dotnet/scripts/05-deploy-app.sh b/samples/web-app-sql-database/dotnet/scripts/05-deploy-app.sh
index 0ac5280..c9152e4 100755
--- a/samples/web-app-sql-database/dotnet/scripts/05-deploy-app.sh
+++ b/samples/web-app-sql-database/dotnet/scripts/05-deploy-app.sh
@@ -78,6 +78,10 @@ cat service.yml |
 yq "(.metadata.namespace)|="\""$NAMESPACE"\" |
 kubectl apply -f -
 
+# Roll the pods so a re-push of the same image tag actually takes effect: the pod template is unchanged,
+# so kubectl apply reports no change and leaves the running pods on the image they started with.
+kubectl rollout restart deployment/$DEPLOYMENT_NAME --namespace $NAMESPACE
+
 # Wait for the rollout so a pod stuck in ImagePullBackOff or CrashLoopBackOff is reported here, not discovered later
 echo "Waiting for deployment [$DEPLOYMENT_NAME] to roll out..."
 if kubectl rollout status deployment/$DEPLOYMENT_NAME -n $NAMESPACE --timeout=600s; then
diff --git a/samples/web-app-sql-database/python/scripts/05-deploy-app.sh b/samples/web-app-sql-database/python/scripts/05-deploy-app.sh
index e1a71e2..db2c91b 100755
--- a/samples/web-app-sql-database/python/scripts/05-deploy-app.sh
+++ b/samples/web-app-sql-database/python/scripts/05-deploy-app.sh
@@ -76,3 +76,7 @@ kubectl apply -f -
 cat service.yml |
 yq "(.metadata.namespace)|="\""$NAMESPACE"\" |
 kubectl apply -f -
+
+# Roll the pods so a re-push of the same image tag actually takes effect: the pod template is unchanged,
+# so kubectl apply reports no change and leaves the running pods on the image they started with.
+kubectl rollout restart deployment/$DEPLOYMENT_NAME --namespace $NAMESPACE

From a4a6a9ec063a2921f2bff2c263bc95ffcfaa1c07 Mon Sep 17 00:00:00 2001
From: Paolo Salvatori <leprino@hotmail.com>
Date: Wed, 9 Sep 2026 10:55:39 +0200
Subject: [PATCH 20/20] Address the review comments on the managed-identity and
 options code

From the Copilot review of PR #30:

- gateway.yml listed a leftover hostname (local.echo.babosbird.com) while
  httproute.yml matched planner.local.babosbird.com. 05-deploy-app.sh templates
  both from $SUBDOMAIN.$DNS_ZONE_NAME, so routing was correct at deploy time, but
  the checked-in manifests now agree with each other and with the deployed value.
- issuer.yml hardcoded a personal ACME registration address. It now carries
  admin@example.com, and 00-variables.sh defines ACME_EMAIL (overridable through
  the environment) which 05-deploy-app.sh templates into .spec.acme.email.
- The exception thrown for an empty LOGIN_NAME said "Username cannot be None or
  empty", the Python wording, without naming the variable. All three .NET samples
  that validate it now say "LOGIN_NAME is set to an empty value".

Two defects found while working through the review:

- The ACME solver in issuer.yml referenced sectionName
  vacation-planner-identity-http, while the Gateway listeners are named http and
  https, so the HTTP-01 challenge could never be routed to the Gateway.
- The rollout restart added to 05-deploy-app.sh landed inside the
  DEPLOY_GATEWAY=="true" branch in the managed-identity sample, so a redeploy of
  the same image tag did not roll the pods in the default configuration. It now
  runs at the top level, right after the Service is applied, in both languages.

Validated on the emulator: the .NET and the Python version of
web-app-managed-identity deploy, pass the functional smoke test through a
port-forward and from inside the cluster across all replicas, and re-running
05-deploy-app.sh alone now creates a new Deployment revision.

Two comments were answered without a change: the sample database passwords
(copies of the unchanged Python values, for resources the samples create
themselves; changing them belongs in a repository-wide PR) and the delete flash
wording (deliberately per sample, matching each Python sibling).

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
---
 .../dotnet/src/Services/MongoOptions.cs                  | 2 +-
 .../dotnet/src/Services/CosmosOptions.cs                 | 2 +-
 .../dotnet/scripts/00-variables.sh                       | 4 ++++
 .../dotnet/scripts/05-deploy-app.sh                      | 9 +++++----
 .../web-app-managed-identity/dotnet/scripts/gateway.yml  | 4 ++--
 .../web-app-managed-identity/dotnet/scripts/issuer.yml   | 7 ++++---
 .../python/scripts/00-variables.sh                       | 4 ++++
 .../python/scripts/05-deploy-app.sh                      | 9 +++++----
 .../web-app-managed-identity/python/scripts/gateway.yml  | 4 ++--
 .../web-app-managed-identity/python/scripts/issuer.yml   | 7 ++++---
 .../dotnet/src/Services/SqlOptions.cs                    | 2 +-
 11 files changed, 33 insertions(+), 21 deletions(-)

diff --git a/samples/web-app-cosmosdb-mongodb-api/dotnet/src/Services/MongoOptions.cs b/samples/web-app-cosmosdb-mongodb-api/dotnet/src/Services/MongoOptions.cs
index 871c308..3f8bc4e 100644
--- a/samples/web-app-cosmosdb-mongodb-api/dotnet/src/Services/MongoOptions.cs
+++ b/samples/web-app-cosmosdb-mongodb-api/dotnet/src/Services/MongoOptions.cs
@@ -15,7 +15,7 @@ public static MongoOptions FromEnvironment()
         var username = Environment.GetEnvironmentVariable("LOGIN_NAME") ?? "paolo";
         if (string.IsNullOrWhiteSpace(username))
         {
-            throw new InvalidOperationException("Username cannot be None or empty");
+            throw new InvalidOperationException("LOGIN_NAME is set to an empty value");
         }
 
         return new MongoOptions(
diff --git a/samples/web-app-cosmosdb-nosql-api/dotnet/src/Services/CosmosOptions.cs b/samples/web-app-cosmosdb-nosql-api/dotnet/src/Services/CosmosOptions.cs
index 4412f8f..fe7e9b2 100644
--- a/samples/web-app-cosmosdb-nosql-api/dotnet/src/Services/CosmosOptions.cs
+++ b/samples/web-app-cosmosdb-nosql-api/dotnet/src/Services/CosmosOptions.cs
@@ -8,7 +8,7 @@ public static CosmosOptions FromEnvironment()
         var username = Environment.GetEnvironmentVariable("LOGIN_NAME") ?? "alex";
         if (string.IsNullOrWhiteSpace(username))
         {
-            throw new InvalidOperationException("Username cannot be empty");
+            throw new InvalidOperationException("LOGIN_NAME is set to an empty value");
         }
 
         return new CosmosOptions(
diff --git a/samples/web-app-managed-identity/dotnet/scripts/00-variables.sh b/samples/web-app-managed-identity/dotnet/scripts/00-variables.sh
index 9ebf9f5..720bdaf 100755
--- a/samples/web-app-managed-identity/dotnet/scripts/00-variables.sh
+++ b/samples/web-app-managed-identity/dotnet/scripts/00-variables.sh
@@ -20,6 +20,10 @@ DNS_ZONE_RESOURCE_GROUP_NAME="dns-rg"
 DNS_ZONE_NAME="babosbird.com"
 SUBDOMAIN="planner.local"
 
+# Registration address of the Let's Encrypt account used by the Gateway TLS certificate: expiry notices
+# go here. Export ACME_EMAIL to use your own address.
+ACME_EMAIL="${ACME_EMAIL:-admin@example.com}"
+
 # Storage Account
 STORAGE_ACCOUNT_NAME="${PREFIX}storage${SUFFIX}"
 CONTAINER_NAME='activities'
diff --git a/samples/web-app-managed-identity/dotnet/scripts/05-deploy-app.sh b/samples/web-app-managed-identity/dotnet/scripts/05-deploy-app.sh
index 2845b54..e266ffe 100755
--- a/samples/web-app-managed-identity/dotnet/scripts/05-deploy-app.sh
+++ b/samples/web-app-managed-identity/dotnet/scripts/05-deploy-app.sh
@@ -194,6 +194,7 @@ kubectl apply -f -
 if [[ $DEPLOY_GATEWAY == "true" ]]; then
 	# Create Issuer for Gateway API HTTP-01 solver (before gateway to avoid race condition)
 	cat issuer.yml |
+	yq "(.spec.acme.email)|=\"$ACME_EMAIL\"" |
 	yq "(.spec.acme.solvers[0].http01.gatewayHTTPRoute.parentRefs[0].name)|=\"$NAME\"" |
 	yq "(.spec.acme.solvers[0].http01.gatewayHTTPRoute.parentRefs[0].namespace)|=\"$NAMESPACE\"" |
 	kubectl apply -f -
@@ -213,6 +214,10 @@ cat service.yml |
 yq "(.metadata.namespace)|="\""$NAMESPACE"\" |
 kubectl apply -f -
 
+# Roll the pods so a re-push of the same image tag actually takes effect: the pod template is unchanged,
+# so kubectl apply reports no change and leaves the running pods on the image they started with.
+kubectl rollout restart deployment/$DEPLOYMENT_NAME --namespace $NAMESPACE
+
 if [[ $DEPLOY_GATEWAY == "true" ]]; then
 	# Create gateway
 	cat gateway.yml |
@@ -227,10 +232,6 @@ if [[ $DEPLOY_GATEWAY == "true" ]]; then
 	yq "(.spec.hostnames[0])|="\""$SUBDOMAIN.$DNS_ZONE_NAME"\" |
 	kubectl apply -f -
 
-# Roll the pods so a re-push of the same image tag actually takes effect: the pod template is unchanged,
-# so kubectl apply reports no change and leaves the running pods on the image they started with.
-kubectl rollout restart deployment/$DEPLOYMENT_NAME --namespace $NAMESPACE
-
 	# Retrieve the public IP address from the gateway
 	echo -n "Retrieving the external IP address from the [$NAME] gateway..."
 	while [[ -z $PUBLIC_IP_ADDRESS ]]; do
diff --git a/samples/web-app-managed-identity/dotnet/scripts/gateway.yml b/samples/web-app-managed-identity/dotnet/scripts/gateway.yml
index b2225ae..58a7edc 100644
--- a/samples/web-app-managed-identity/dotnet/scripts/gateway.yml
+++ b/samples/web-app-managed-identity/dotnet/scripts/gateway.yml
@@ -8,14 +8,14 @@ metadata:
 spec:
   gatewayClassName: nginx
   listeners:
-  - hostname: local.echo.babosbird.com
+  - hostname: planner.local.babosbird.com
     name: http
     port: 80
     protocol: HTTP
     allowedRoutes:
       namespaces:
         from: All
-  - hostname: local.echo.babosbird.com
+  - hostname: planner.local.babosbird.com
     name: https
     port: 443
     protocol: HTTPS
diff --git a/samples/web-app-managed-identity/dotnet/scripts/issuer.yml b/samples/web-app-managed-identity/dotnet/scripts/issuer.yml
index 1007d10..9868db8 100644
--- a/samples/web-app-managed-identity/dotnet/scripts/issuer.yml
+++ b/samples/web-app-managed-identity/dotnet/scripts/issuer.yml
@@ -5,8 +5,9 @@ metadata:
   namespace: vacation-planner-identity
 spec:
   acme:
-    # Registration address for the Let's Encrypt account: expiry notices go here
-    email: paolo.salvatori@localstack.cloud
+    # Registration address for the Let's Encrypt account: expiry notices go here.
+    # 05-deploy-app.sh replaces this with $ACME_EMAIL from 00-variables.sh.
+    email: admin@example.com
     privateKeySecretRef:
       name: vacation-planner-identity-issuer
     server: https://acme-v02.api.letsencrypt.org/directory
@@ -18,7 +19,7 @@ spec:
             namespace: vacation-planner-identity
             kind: Gateway
             group: gateway.networking.k8s.io
-            sectionName: vacation-planner-identity-http
+            sectionName: http
           podTemplate:
             spec:
               nodeSelector:
diff --git a/samples/web-app-managed-identity/python/scripts/00-variables.sh b/samples/web-app-managed-identity/python/scripts/00-variables.sh
index e590636..1241639 100755
--- a/samples/web-app-managed-identity/python/scripts/00-variables.sh
+++ b/samples/web-app-managed-identity/python/scripts/00-variables.sh
@@ -20,6 +20,10 @@ DNS_ZONE_RESOURCE_GROUP_NAME="dns-rg"
 DNS_ZONE_NAME="babosbird.com"
 SUBDOMAIN="planner.local"
 
+# Registration address of the Let's Encrypt account used by the Gateway TLS certificate: expiry notices
+# go here. Export ACME_EMAIL to use your own address.
+ACME_EMAIL="${ACME_EMAIL:-admin@example.com}"
+
 # Storage Account
 STORAGE_ACCOUNT_NAME="${PREFIX}storage${SUFFIX}"
 CONTAINER_NAME='activities'
diff --git a/samples/web-app-managed-identity/python/scripts/05-deploy-app.sh b/samples/web-app-managed-identity/python/scripts/05-deploy-app.sh
index bc78711..7ad88a3 100755
--- a/samples/web-app-managed-identity/python/scripts/05-deploy-app.sh
+++ b/samples/web-app-managed-identity/python/scripts/05-deploy-app.sh
@@ -193,6 +193,7 @@ kubectl apply -f -
 if [[ $DEPLOY_GATEWAY == "true" ]]; then
 	# Create Issuer for Gateway API HTTP-01 solver (before gateway to avoid race condition)
 	cat issuer.yml |
+	yq "(.spec.acme.email)|=\"$ACME_EMAIL\"" |
 	yq "(.spec.acme.solvers[0].http01.gatewayHTTPRoute.parentRefs[0].name)|=\"$NAME\"" |
 	yq "(.spec.acme.solvers[0].http01.gatewayHTTPRoute.parentRefs[0].namespace)|=\"$NAMESPACE\"" |
 	kubectl apply -f -
@@ -212,6 +213,10 @@ cat service.yml |
 yq "(.metadata.namespace)|="\""$NAMESPACE"\" |
 kubectl apply -f -
 
+# Roll the pods so a re-push of the same image tag actually takes effect: the pod template is unchanged,
+# so kubectl apply reports no change and leaves the running pods on the image they started with.
+kubectl rollout restart deployment/$DEPLOYMENT_NAME --namespace $NAMESPACE
+
 if [[ $DEPLOY_GATEWAY == "true" ]]; then
 	# Create gateway
 	cat gateway.yml |
@@ -226,10 +231,6 @@ if [[ $DEPLOY_GATEWAY == "true" ]]; then
 	yq "(.spec.hostnames[0])|="\""$SUBDOMAIN.$DNS_ZONE_NAME"\" |
 	kubectl apply -f -
 
-# Roll the pods so a re-push of the same image tag actually takes effect: the pod template is unchanged,
-# so kubectl apply reports no change and leaves the running pods on the image they started with.
-kubectl rollout restart deployment/$DEPLOYMENT_NAME --namespace $NAMESPACE
-
 	# Retrieve the public IP address from the gateway
 	echo -n "Retrieving the external IP address from the [$NAME] gateway..."
 	while [[ -z $PUBLIC_IP_ADDRESS ]]; do
diff --git a/samples/web-app-managed-identity/python/scripts/gateway.yml b/samples/web-app-managed-identity/python/scripts/gateway.yml
index b2225ae..58a7edc 100644
--- a/samples/web-app-managed-identity/python/scripts/gateway.yml
+++ b/samples/web-app-managed-identity/python/scripts/gateway.yml
@@ -8,14 +8,14 @@ metadata:
 spec:
   gatewayClassName: nginx
   listeners:
-  - hostname: local.echo.babosbird.com
+  - hostname: planner.local.babosbird.com
     name: http
     port: 80
     protocol: HTTP
     allowedRoutes:
       namespaces:
         from: All
-  - hostname: local.echo.babosbird.com
+  - hostname: planner.local.babosbird.com
     name: https
     port: 443
     protocol: HTTPS
diff --git a/samples/web-app-managed-identity/python/scripts/issuer.yml b/samples/web-app-managed-identity/python/scripts/issuer.yml
index 1007d10..9868db8 100644
--- a/samples/web-app-managed-identity/python/scripts/issuer.yml
+++ b/samples/web-app-managed-identity/python/scripts/issuer.yml
@@ -5,8 +5,9 @@ metadata:
   namespace: vacation-planner-identity
 spec:
   acme:
-    # Registration address for the Let's Encrypt account: expiry notices go here
-    email: paolo.salvatori@localstack.cloud
+    # Registration address for the Let's Encrypt account: expiry notices go here.
+    # 05-deploy-app.sh replaces this with $ACME_EMAIL from 00-variables.sh.
+    email: admin@example.com
     privateKeySecretRef:
       name: vacation-planner-identity-issuer
     server: https://acme-v02.api.letsencrypt.org/directory
@@ -18,7 +19,7 @@ spec:
             namespace: vacation-planner-identity
             kind: Gateway
             group: gateway.networking.k8s.io
-            sectionName: vacation-planner-identity-http
+            sectionName: http
           podTemplate:
             spec:
               nodeSelector:
diff --git a/samples/web-app-sql-database/dotnet/src/Services/SqlOptions.cs b/samples/web-app-sql-database/dotnet/src/Services/SqlOptions.cs
index e15f9bb..69e361f 100644
--- a/samples/web-app-sql-database/dotnet/src/Services/SqlOptions.cs
+++ b/samples/web-app-sql-database/dotnet/src/Services/SqlOptions.cs
@@ -12,7 +12,7 @@ public static SqlOptions FromEnvironment()
         var username = Environment.GetEnvironmentVariable("LOGIN_NAME") ?? "paolo";
         if (string.IsNullOrWhiteSpace(username))
         {
-            throw new InvalidOperationException("Username cannot be None or empty");
+            throw new InvalidOperationException("LOGIN_NAME is set to an empty value");
         }
 
         var server = Environment.GetEnvironmentVariable("SQL_SERVER");