From 116c66b5b75db72697d8e2580251534a089b8194 Mon Sep 17 00:00:00 2001
From: Yufeng He <40085740+he-yufeng@users.noreply.github.com>
Date: Fri, 8 May 2026 08:35:24 +0800
Subject: [PATCH 01/51] fix: skip KB retrieval for blank prompts (#8073)

---
 astrbot/core/astr_main_agent.py    |  2 +-
 tests/unit/test_astr_main_agent.py | 17 +++++++++++++++++
 2 files changed, 18 insertions(+), 1 deletion(-)

diff --git a/astrbot/core/astr_main_agent.py b/astrbot/core/astr_main_agent.py
index 3916215e5..fd1a9aeb8 100644
--- a/astrbot/core/astr_main_agent.py
+++ b/astrbot/core/astr_main_agent.py
@@ -229,7 +229,7 @@ async def _apply_kb(
     config: MainAgentBuildConfig,
 ) -> None:
     if not config.kb_agentic_mode:
-        if req.prompt is None:
+        if req.prompt is None or not req.prompt.strip():
             return
         try:
             kb_result = await retrieve_knowledge_base(
diff --git a/tests/unit/test_astr_main_agent.py b/tests/unit/test_astr_main_agent.py
index 1ba2f3a2a..bf6adb38e 100644
--- a/tests/unit/test_astr_main_agent.py
+++ b/tests/unit/test_astr_main_agent.py
@@ -342,6 +342,23 @@ class TestApplyKb:
 
         assert req.system_prompt == "System"
 
+    @pytest.mark.asyncio
+    @pytest.mark.parametrize("prompt", ["", "   \n\t"])
+    async def test_apply_kb_blank_prompt(self, prompt, mock_event, mock_context):
+        """Test applying knowledge base when prompt is blank."""
+        module = ama
+        req = ProviderRequest(prompt=prompt, system_prompt="System")
+        config = module.MainAgentBuildConfig(
+            tool_call_timeout=60, kb_agentic_mode=False
+        )
+        retrieve = AsyncMock(return_value="KB result")
+
+        with patch("astrbot.core.astr_main_agent.retrieve_knowledge_base", retrieve):
+            await module._apply_kb(mock_event, req, mock_context, config)
+
+        retrieve.assert_not_awaited()
+        assert req.system_prompt == "System"
+
     @pytest.mark.asyncio
     async def test_apply_kb_no_result(self, mock_event, mock_context):
         """Test applying knowledge base when no result is returned."""

From 49cd4d2a207b53be563738968715113d542696b1 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E3=82=A8=E3=82=A4=E3=82=AB=E3=82=AF?=
 <1259085392z@gmail.com>
Date: Fri, 8 May 2026 09:41:59 +0900
Subject: [PATCH 02/51] feat(cua): expire idle sandbox sessions (#8074)

* feat(cua): expire idle sandbox sessions

* fix(cua): simplify idle timeout state
---
 astrbot/core/computer/computer_client.py |  72 +++++++++
 astrbot/core/config/default.py           |   1 +
 tests/unit/test_cua_computer_use.py      | 191 +++++++++++++++++++++++
 3 files changed, 264 insertions(+)

diff --git a/astrbot/core/computer/computer_client.py b/astrbot/core/computer/computer_client.py
index a50549fba..9be646265 100644
--- a/astrbot/core/computer/computer_client.py
+++ b/astrbot/core/computer/computer_client.py
@@ -1,7 +1,10 @@
+import asyncio
 import json
 import os
 import shutil
+import time
 import uuid
+from dataclasses import dataclass
 from pathlib import Path
 
 from astrbot.api import logger
@@ -20,6 +23,70 @@ local_booter: ComputerBooter | None = None
 _MANAGED_SKILLS_FILE = ".astrbot_managed_skills.json"
 
 
+@dataclass(slots=True)
+class _CUAIdleState:
+    expires_at: float
+    task: asyncio.Task
+
+
+cua_idle_state: dict[str, _CUAIdleState] = {}
+
+
+def _get_cua_idle_timeout(config: dict) -> float:
+    sandbox_cfg = config.get("provider_settings", {}).get("sandbox", {})
+    value = sandbox_cfg.get("cua_idle_timeout", 0)
+    try:
+        timeout = float(value)
+    except (TypeError, ValueError):
+        return 0.0
+    return max(timeout, 0.0)
+
+
+def _clear_cua_idle_state(session_id: str) -> None:
+    state = cua_idle_state.pop(session_id, None)
+    if state is not None and not state.task.done():
+        state.task.cancel()
+
+
+def _schedule_cua_idle_cleanup(session_id: str, timeout: float) -> None:
+    _clear_cua_idle_state(session_id)
+    if timeout <= 0:
+        return
+    expires_at = time.monotonic() + timeout
+
+    async def _expire_when_idle() -> None:
+        try:
+            remaining = expires_at - time.monotonic()
+            if remaining > 0:
+                await asyncio.sleep(remaining)
+
+            state = cua_idle_state.get(session_id)
+            if state is None or state.expires_at != expires_at:
+                return
+
+            booter = session_booter.get(session_id)
+            if booter is not None:
+                try:
+                    await booter.shutdown()
+                except Exception as shutdown_err:
+                    logger.warning(
+                        "[Computer] Failed to shutdown idle CUA sandbox for session %s: %s",
+                        session_id,
+                        shutdown_err,
+                    )
+                finally:
+                    session_booter.pop(session_id, None)
+        except asyncio.CancelledError:
+            raise
+        finally:
+            state = cua_idle_state.get(session_id)
+            if state is not None and state.expires_at == expires_at:
+                cua_idle_state.pop(session_id, None)
+
+    task = asyncio.create_task(_expire_when_idle())
+    cua_idle_state[session_id] = _CUAIdleState(expires_at=expires_at, task=task)
+
+
 def _list_local_skill_dirs(skills_root: Path) -> list[Path]:
     skills: list[Path] = []
     for entry in sorted(skills_root.iterdir()):
@@ -486,6 +553,7 @@ async def get_booter(
 
     sandbox_cfg = config.get("provider_settings", {}).get("sandbox", {})
     booter_type = sandbox_cfg.get("booter", "shipyard_neo")
+    cua_idle_timeout = _get_cua_idle_timeout(config) if booter_type == "cua" else 0.0
 
     if session_id in session_booter:
         booter = session_booter[session_id]
@@ -506,6 +574,7 @@ async def get_booter(
                     session_id,
                     shutdown_err,
                 )
+            _clear_cua_idle_state(session_id)
             session_booter.pop(session_id, None)
     if session_id not in session_booter:
         uuid_str = uuid.uuid5(uuid.NAMESPACE_DNS, session_id).hex
@@ -579,9 +648,12 @@ async def get_booter(
                     session_id,
                     shutdown_error,
                 )
+            _clear_cua_idle_state(session_id)
             raise e
 
         session_booter[session_id] = client
+    if booter_type == "cua":
+        _schedule_cua_idle_cleanup(session_id, cua_idle_timeout)
     return session_booter[session_id]
 
 
diff --git a/astrbot/core/config/default.py b/astrbot/core/config/default.py
index f495a8017..7d030e88d 100644
--- a/astrbot/core/config/default.py
+++ b/astrbot/core/config/default.py
@@ -179,6 +179,7 @@ DEFAULT_CONFIG = {
             "cua_image": CUA_DEFAULT_CONFIG["image"],
             "cua_os_type": CUA_DEFAULT_CONFIG["os_type"],
             "cua_ttl": CUA_DEFAULT_CONFIG["ttl"],
+            "cua_idle_timeout": 0,
             "cua_telemetry_enabled": CUA_DEFAULT_CONFIG["telemetry_enabled"],
             "cua_local": CUA_DEFAULT_CONFIG["local"],
             "cua_api_key": CUA_DEFAULT_CONFIG["api_key"],
diff --git a/tests/unit/test_cua_computer_use.py b/tests/unit/test_cua_computer_use.py
index 0724a2b65..d7d25df74 100644
--- a/tests/unit/test_cua_computer_use.py
+++ b/tests/unit/test_cua_computer_use.py
@@ -20,6 +20,13 @@ class FakeContext:
         return self._config
 
 
+def _clear_cua_session_state(computer_client, session_id: str) -> None:
+    computer_client.session_booter.pop(session_id, None)
+    state = getattr(computer_client, "cua_idle_state", {}).pop(session_id, None)
+    if state is not None and not state.task.done():
+        state.task.cancel()
+
+
 class FakeShell:
     def __init__(self):
         self.commands = []
@@ -267,6 +274,7 @@ def test_cua_default_config_matches_booter_defaults():
     assert sandbox_defaults["cua_image"] == CUA_DEFAULT_CONFIG["image"]
     assert sandbox_defaults["cua_os_type"] == CUA_DEFAULT_CONFIG["os_type"]
     assert sandbox_defaults["cua_ttl"] == CUA_DEFAULT_CONFIG["ttl"]
+    assert sandbox_defaults["cua_idle_timeout"] == 0
     assert (
         sandbox_defaults["cua_telemetry_enabled"]
         == CUA_DEFAULT_CONFIG["telemetry_enabled"]
@@ -367,6 +375,189 @@ async def test_get_booter_shuts_down_client_when_skill_sync_fails(monkeypatch):
     assert "cua-sync-fail" not in computer_client.session_booter
 
 
+@pytest.mark.asyncio
+async def test_cua_idle_timeout_shuts_down_session_proactively(monkeypatch):
+    from astrbot.core.computer import computer_client
+
+    shutdowns = []
+
+    class FakeCuaBooter:
+        def __init__(self, **kwargs):
+            self.kwargs = kwargs
+
+        async def boot(self, session_id: str):
+            self.session_id = session_id
+
+        async def available(self):
+            return True
+
+        async def shutdown(self):
+            shutdowns.append(self.session_id)
+
+    monkeypatch.setattr(
+        computer_client, "_sync_skills_to_sandbox", lambda booter: asyncio.sleep(0)
+    )
+    monkeypatch.setattr(
+        "astrbot.core.computer.booters.cua.CuaBooter",
+        FakeCuaBooter,
+        raising=False,
+    )
+    _clear_cua_session_state(computer_client, "cua-idle-expire")
+
+    ctx = FakeContext(
+        {
+            "provider_settings": {
+                "computer_use_runtime": "sandbox",
+                "sandbox": {
+                    "booter": "cua",
+                    "cua_idle_timeout": 0.1,
+                },
+            }
+        }
+    )
+
+    booter = await computer_client.get_booter(ctx, "cua-idle-expire")
+    await asyncio.sleep(0.2)
+
+    assert shutdowns == [booter.session_id]
+    assert "cua-idle-expire" not in computer_client.session_booter
+
+
+@pytest.mark.asyncio
+async def test_cua_idle_timeout_refreshes_on_reuse(monkeypatch):
+    from astrbot.core.computer import computer_client
+
+    shutdowns = []
+
+    class FakeCuaBooter:
+        def __init__(self, **kwargs):
+            self.kwargs = kwargs
+
+        async def boot(self, session_id: str):
+            self.session_id = session_id
+
+        async def available(self):
+            return True
+
+        async def shutdown(self):
+            shutdowns.append(self.session_id)
+
+    monkeypatch.setattr(
+        computer_client, "_sync_skills_to_sandbox", lambda booter: asyncio.sleep(0)
+    )
+    monkeypatch.setattr(
+        "astrbot.core.computer.booters.cua.CuaBooter",
+        FakeCuaBooter,
+        raising=False,
+    )
+    _clear_cua_session_state(computer_client, "cua-idle-refresh")
+
+    ctx = FakeContext(
+        {
+            "provider_settings": {
+                "computer_use_runtime": "sandbox",
+                "sandbox": {
+                    "booter": "cua",
+                    "cua_idle_timeout": 0.2,
+                },
+            }
+        }
+    )
+
+    booter1 = await computer_client.get_booter(ctx, "cua-idle-refresh")
+    await asyncio.sleep(0.05)
+    booter2 = await computer_client.get_booter(ctx, "cua-idle-refresh")
+    await asyncio.sleep(0.05)
+
+    assert booter2 is booter1
+    assert shutdowns == []
+
+    await asyncio.sleep(0.25)
+
+    assert shutdowns == [booter1.session_id]
+    assert "cua-idle-refresh" not in computer_client.session_booter
+
+
+@pytest.mark.asyncio
+async def test_cua_idle_timeout_zero_disables_proactive_shutdown(monkeypatch):
+    from astrbot.core.computer import computer_client
+
+    shutdowns = []
+
+    class FakeCuaBooter:
+        def __init__(self, **kwargs):
+            self.kwargs = kwargs
+
+        async def boot(self, session_id: str):
+            self.session_id = session_id
+
+        async def available(self):
+            return True
+
+        async def shutdown(self):
+            shutdowns.append(self.session_id)
+
+    monkeypatch.setattr(
+        computer_client, "_sync_skills_to_sandbox", lambda booter: asyncio.sleep(0)
+    )
+    monkeypatch.setattr(
+        "astrbot.core.computer.booters.cua.CuaBooter",
+        FakeCuaBooter,
+        raising=False,
+    )
+    _clear_cua_session_state(computer_client, "cua-idle-disabled")
+
+    ctx = FakeContext(
+        {
+            "provider_settings": {
+                "computer_use_runtime": "sandbox",
+                "sandbox": {
+                    "booter": "cua",
+                    "cua_idle_timeout": 0,
+                },
+            }
+        }
+    )
+
+    await computer_client.get_booter(ctx, "cua-idle-disabled")
+    await asyncio.sleep(0.05)
+
+    assert shutdowns == []
+    assert "cua-idle-disabled" in computer_client.session_booter
+    assert "cua-idle-disabled" not in computer_client.cua_idle_state
+
+
+@pytest.mark.asyncio
+async def test_non_cua_booter_does_not_schedule_idle_cleanup(monkeypatch):
+    from astrbot.core.computer import computer_client
+
+    class FakeShipyardBooter:
+        async def available(self):
+            return True
+
+    _clear_cua_session_state(computer_client, "shipyard-session")
+    computer_client.session_booter["shipyard-session"] = FakeShipyardBooter()
+
+    ctx = FakeContext(
+        {
+            "provider_settings": {
+                "computer_use_runtime": "sandbox",
+                "sandbox": {
+                    "booter": "shipyard",
+                    "shipyard_endpoint": "http://localhost:8080",
+                    "shipyard_access_token": "token",
+                    "cua_idle_timeout": 0.01,
+                },
+            }
+        }
+    )
+
+    booter = await computer_client.get_booter(ctx, "shipyard-session")
+
+    assert isinstance(booter, FakeShipyardBooter)
+    assert "shipyard-session" not in computer_client.cua_idle_state
+
+
 @pytest.mark.asyncio
 async def test_cua_components_map_sdk_results(tmp_path):
     from astrbot.core.computer.booters.cua import (

From f02845ebdc117159917957268e71d593438f9490 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E3=82=A8=E3=82=A4=E3=82=AB=E3=82=AF?=
 <1259085392z@gmail.com>
Date: Fri, 8 May 2026 10:08:53 +0900
Subject: [PATCH 03/51] fix(config): expose cua idle timeout in dashboard
 (#8075)

* fix(config): expose cua idle timeout in dashboard

* fix(config): remove exposed cua ttl setting

* fix(config): centralize cua idle timeout default
---
 astrbot/core/computer/booters/cua_defaults.py            | 1 +
 astrbot/core/config/default.py                           | 9 ++++-----
 .../src/i18n/locales/en-US/features/config-metadata.json | 6 +++---
 .../src/i18n/locales/ru-RU/features/config-metadata.json | 6 +++---
 .../src/i18n/locales/zh-CN/features/config-metadata.json | 6 +++---
 tests/unit/test_cua_computer_use.py                      | 7 ++++---
 6 files changed, 18 insertions(+), 17 deletions(-)

diff --git a/astrbot/core/computer/booters/cua_defaults.py b/astrbot/core/computer/booters/cua_defaults.py
index 4c506154a..a36c6e654 100644
--- a/astrbot/core/computer/booters/cua_defaults.py
+++ b/astrbot/core/computer/booters/cua_defaults.py
@@ -2,6 +2,7 @@ CUA_DEFAULT_CONFIG = {
     "image": "linux",
     "os_type": "linux",
     "ttl": 3600,
+    "idle_timeout": 0,
     "telemetry_enabled": False,
     "local": True,
     "api_key": "",
diff --git a/astrbot/core/config/default.py b/astrbot/core/config/default.py
index 7d030e88d..8df7ae27b 100644
--- a/astrbot/core/config/default.py
+++ b/astrbot/core/config/default.py
@@ -178,8 +178,7 @@ DEFAULT_CONFIG = {
             "shipyard_neo_ttl": 3600,
             "cua_image": CUA_DEFAULT_CONFIG["image"],
             "cua_os_type": CUA_DEFAULT_CONFIG["os_type"],
-            "cua_ttl": CUA_DEFAULT_CONFIG["ttl"],
-            "cua_idle_timeout": 0,
+            "cua_idle_timeout": CUA_DEFAULT_CONFIG["idle_timeout"],
             "cua_telemetry_enabled": CUA_DEFAULT_CONFIG["telemetry_enabled"],
             "cua_local": CUA_DEFAULT_CONFIG["local"],
             "cua_api_key": CUA_DEFAULT_CONFIG["api_key"],
@@ -3348,10 +3347,10 @@ CONFIG_METADATA_3 = {
                             "provider_settings.sandbox.booter": "cua",
                         },
                     },
-                    "provider_settings.sandbox.cua_ttl": {
-                        "description": "CUA Sandbox TTL",
+                    "provider_settings.sandbox.cua_idle_timeout": {
+                        "description": "CUA Idle Timeout",
                         "type": "int",
-                        "hint": "CUA 沙箱生存时间（秒）。当前作为会话配置保存，具体生效取决于 CUA SDK。",
+                        "hint": "Idle timeout for CUA sandbox sessions in seconds. When greater than 0, AstrBot proactively shuts down an idle CUA sandbox after that amount of inactivity; 0 disables it.",
                         "condition": {
                             "provider_settings.computer_use_runtime": "sandbox",
                             "provider_settings.sandbox.booter": "cua",
diff --git a/dashboard/src/i18n/locales/en-US/features/config-metadata.json b/dashboard/src/i18n/locales/en-US/features/config-metadata.json
index de4872fc4..bfb46ab6a 100644
--- a/dashboard/src/i18n/locales/en-US/features/config-metadata.json
+++ b/dashboard/src/i18n/locales/en-US/features/config-metadata.json
@@ -194,9 +194,9 @@
             "description": "CUA OS Type",
             "hint": "CUA sandbox operating system type. Defaults to linux."
           },
-          "cua_ttl": {
-            "description": "CUA Sandbox TTL",
-            "hint": "CUA sandbox time-to-live in seconds. Actual behavior depends on the installed CUA SDK."
+          "cua_idle_timeout": {
+            "description": "CUA Idle Timeout",
+            "hint": "Idle timeout for CUA sandbox sessions in seconds. When greater than 0, AstrBot proactively shuts down an idle CUA sandbox after that amount of inactivity; 0 disables it."
           },
           "cua_telemetry_enabled": {
             "description": "CUA Telemetry",
diff --git a/dashboard/src/i18n/locales/ru-RU/features/config-metadata.json b/dashboard/src/i18n/locales/ru-RU/features/config-metadata.json
index 3b620a514..9f593fc50 100644
--- a/dashboard/src/i18n/locales/ru-RU/features/config-metadata.json
+++ b/dashboard/src/i18n/locales/ru-RU/features/config-metadata.json
@@ -194,9 +194,9 @@
                         "description": "Тип ОС CUA",
                         "hint": "Тип операционной системы песочницы CUA. По умолчанию linux."
                     },
-                    "cua_ttl": {
-                        "description": "TTL песочницы CUA",
-                        "hint": "Время жизни песочницы CUA в секундах. Фактическое поведение зависит от установленного CUA SDK."
+                    "cua_idle_timeout": {
+                        "description": "Таймаут простоя CUA",
+                        "hint": "Таймаут простоя сессии песочницы CUA в секундах. Если значение больше 0, AstrBot автоматически завершит неактивную песочницу CUA после указанного времени бездействия; 0 отключает автоочистку."
                     },
                     "cua_telemetry_enabled": {
                         "description": "Телеметрия CUA",
diff --git a/dashboard/src/i18n/locales/zh-CN/features/config-metadata.json b/dashboard/src/i18n/locales/zh-CN/features/config-metadata.json
index 0f45706cf..59c0104de 100644
--- a/dashboard/src/i18n/locales/zh-CN/features/config-metadata.json
+++ b/dashboard/src/i18n/locales/zh-CN/features/config-metadata.json
@@ -196,9 +196,9 @@
             "description": "CUA 操作系统类型",
             "hint": "CUA 沙箱操作系统类型，默认 linux。"
           },
-          "cua_ttl": {
-            "description": "CUA Sandbox 存活时间(秒)",
-            "hint": "CUA 沙箱生存时间（秒）。当前作为会话配置保存，具体生效取决于 CUA SDK。"
+          "cua_idle_timeout": {
+            "description": "CUA 空闲超时(秒)",
+            "hint": "CUA 沙箱空闲超时时间（秒）。大于 0 时，AstrBot 会在会话空闲达到该时长后主动关闭 CUA 沙箱；0 表示禁用。"
           },
           "cua_telemetry_enabled": {
             "description": "CUA 遥测",
diff --git a/tests/unit/test_cua_computer_use.py b/tests/unit/test_cua_computer_use.py
index d7d25df74..3a092146c 100644
--- a/tests/unit/test_cua_computer_use.py
+++ b/tests/unit/test_cua_computer_use.py
@@ -273,8 +273,8 @@ def test_cua_default_config_matches_booter_defaults():
     assert booter.api_key == CUA_DEFAULT_CONFIG["api_key"]
     assert sandbox_defaults["cua_image"] == CUA_DEFAULT_CONFIG["image"]
     assert sandbox_defaults["cua_os_type"] == CUA_DEFAULT_CONFIG["os_type"]
-    assert sandbox_defaults["cua_ttl"] == CUA_DEFAULT_CONFIG["ttl"]
-    assert sandbox_defaults["cua_idle_timeout"] == 0
+    assert "cua_ttl" not in sandbox_defaults
+    assert sandbox_defaults["cua_idle_timeout"] == CUA_DEFAULT_CONFIG["idle_timeout"]
     assert (
         sandbox_defaults["cua_telemetry_enabled"]
         == CUA_DEFAULT_CONFIG["telemetry_enabled"]
@@ -1383,7 +1383,8 @@ def test_cua_is_exposed_in_sandbox_config_metadata():
     assert "CUA" in booter["labels"]
     assert "provider_settings.sandbox.cua_image" in items
     assert "provider_settings.sandbox.cua_os_type" in items
-    assert "provider_settings.sandbox.cua_ttl" in items
+    assert "provider_settings.sandbox.cua_ttl" not in items
+    assert "provider_settings.sandbox.cua_idle_timeout" in items
     assert "provider_settings.sandbox.cua_telemetry_enabled" in items
     assert "provider_settings.sandbox.cua_local" in items
     assert "provider_settings.sandbox.cua_api_key" in items

From f29b339ea270522b66b5b92448b04985f04087fe Mon Sep 17 00:00:00 2001
From: Ruochen Pan <badbatch0x01@gmail.com>
Date: Fri, 8 May 2026 15:30:52 +0800
Subject: [PATCH 04/51] fix(t2i): validate template content to prevent Jinja2
 SSTI injection (#8077)

* fix(t2i): validate template content to prevent Jinja2 SSTI injection

* fix(t2i): add error feedback

* fix(test): update assertion to match previous commits

* style: format code
---
 astrbot/core/utils/t2i/template_manager.py    | 44 +++++++++++++++++++
 .../components/shared/T2ITemplateEditor.vue   | 19 +++++---
 tests/test_dashboard.py                       |  8 ++--
 3 files changed, 62 insertions(+), 9 deletions(-)

diff --git a/astrbot/core/utils/t2i/template_manager.py b/astrbot/core/utils/t2i/template_manager.py
index c4d72f3e4..f655fc6f8 100644
--- a/astrbot/core/utils/t2i/template_manager.py
+++ b/astrbot/core/utils/t2i/template_manager.py
@@ -1,10 +1,52 @@
 # astrbot/core/utils/t2i/template_manager.py
 
+import logging
 import os
+import re
 import shutil
 
 from astrbot.core.utils.astrbot_path import get_astrbot_data_path, get_astrbot_path
 
+logger = logging.getLogger("astrbot")
+
+_ALLOWED_VARS = frozenset({"text", "version", "shiki_runtime"})
+
+_SSTI_BLACKLIST: list[tuple[str, re.Pattern]] = [
+    (
+        "dunder_chain",
+        re.compile(
+            r"__\s*(class|globals|init|mro|base|bases|subclasses|reduce|getitem|builtins|import|self|func|code|reduce_ex)__"
+        ),
+    ),
+    (
+        "dangerous_builtins",
+        re.compile(
+            r"\b(import\s+(?!url)|os\.\w+|subprocess\.|\.popen\(|eval\(|exec\()"
+        ),
+    ),
+    ("flask_context", re.compile(r"\{\{.*?\b(config|request|session|g)\b.*?\}\}")),
+]
+
+_VAR_RE = re.compile(r"\{\{\s*(\w+)\s*(\|[^}]*)?\}\}")
+
+
+def validate_template_content(content: str, *, strict: bool = False) -> None:
+    for label, pattern in _SSTI_BLACKLIST:
+        if pattern.search(content):
+            logger.warning(f"SSTI validation blocked template: matched rule [{label}]")
+            raise ValueError(f"Template contains forbidden pattern ({label}).")
+    if strict:
+        for m in _VAR_RE.finditer(content):
+            var = m.group(1)
+            if var not in _ALLOWED_VARS:
+                logger.warning(
+                    f"SSTI validation blocked template: unauthorized variable '{var}'"
+                )
+                raise ValueError(
+                    f"Unauthorized Jinja2 variable '{var}'; "
+                    f"allowed: {', '.join(sorted(_ALLOWED_VARS))}."
+                )
+
 
 class TemplateManager:
     """负责管理 t2i HTML 模板的 CRUD 和重置操作。
@@ -86,6 +128,7 @@ class TemplateManager:
 
     def create_template(self, name: str, content: str) -> None:
         """在用户目录中创建一个新的模板文件。"""
+        validate_template_content(content, strict=True)
         path = self._get_user_template_path(name)
         if os.path.exists(path):
             raise FileExistsError("同名模板已存在。")
@@ -97,6 +140,7 @@ class TemplateManager:
         如果更新的是一个内置模板，此操作实际上会在用户目录中创建一个修改后的副本，
         从而实现对内置模板的“覆盖”。
         """
+        validate_template_content(content, strict=True)
         path = self._get_user_template_path(name)
         with open(path, "w", encoding="utf-8") as f:
             f.write(content)
diff --git a/dashboard/src/components/shared/T2ITemplateEditor.vue b/dashboard/src/components/shared/T2ITemplateEditor.vue
index 485032dbc..9d67699c3 100644
--- a/dashboard/src/components/shared/T2ITemplateEditor.vue
+++ b/dashboard/src/components/shared/T2ITemplateEditor.vue
@@ -243,10 +243,12 @@
 import { ref, computed, nextTick, watch } from 'vue'
 import { VueMonacoEditor } from '@guolao/vue-monaco-editor'
 import { useI18n, useModuleI18n } from '@/i18n/composables'
+import { useToast } from '@/utils/toast'
 import axios from 'axios'
 
 const { t } = useI18n()
 const { tm } = useModuleI18n('core.shared')
+const toast = useToast()
 
 // --- 响应式数据 ---
 const dialog = ref(false)
@@ -448,8 +450,9 @@ const saveTemplate = async () => {
       })
     }
   } catch (error) {
-    console.error('保存模板失败:', error)
-    // 可以在此添加错误提示
+    const msg = error?.response?.data?.message || error?.message || String(error)
+    console.error('保存模板失败:', msg)
+    toast.error(msg)
   } finally {
     saveLoading.value = false
   }
@@ -461,7 +464,9 @@ const setActiveTemplate = async (name) => {
     await axios.post('/api/t2i/templates/set_active', { name })
     activeTemplate.value = name
   } catch (error) {
-    console.error(`应用模板 '${name}' 失败:`, error)
+    const msg = error?.response?.data?.message || error?.message || String(error)
+    console.error(`应用模板 '${name}' 失败:`, msg)
+    toast.error(msg)
   } finally {
     applyLoading.value = false
   }
@@ -482,7 +487,9 @@ const confirmDelete = async () => {
     await loadInitialData()
     selectedTemplate.value = 'base'
   } catch (error) {
-    console.error(`删除模板 '${selectedTemplate.value}' 失败:`, error)
+    const msg = error?.response?.data?.message || error?.message || String(error)
+    console.error(`删除模板失败:`, msg)
+    toast.error(msg)
   } finally {
     saveLoading.value = false
   }
@@ -500,7 +507,9 @@ const confirmReset = async () => {
         await setActiveTemplate('base')
     }
   } catch (error) {
-    console.error('重置模板失败:', error)
+    const msg = error?.response?.data?.message || error?.message || String(error)
+    console.error('重置模板失败:', msg)
+    toast.error(msg)
   } finally {
     resetLoading.value = false
   }
diff --git a/tests/test_dashboard.py b/tests/test_dashboard.py
index 016bd58aa..13d5ac0fc 100644
--- a/tests/test_dashboard.py
+++ b/tests/test_dashboard.py
@@ -1026,7 +1026,7 @@ async def test_t2i_set_active_template_syncs_all_configs(
             "/api/t2i/templates/create",
             json={
                 "name": template_name,
-                "content": "<html><body>{{ content }}</body></html>",
+                "content": "<html><body>{{ text }}</body></html>",
             },
             headers=authenticated_header,
         )
@@ -1093,7 +1093,7 @@ async def test_t2i_reset_default_template_syncs_all_configs(
             "/api/t2i/templates/create",
             json={
                 "name": template_name,
-                "content": "<html><body>{{ content }} reset</body></html>",
+                "content": "<html><body>{{ text }} reset</body></html>",
             },
             headers=authenticated_header,
         )
@@ -1166,7 +1166,7 @@ async def test_t2i_update_active_template_reloads_all_schedulers(
             "/api/t2i/templates/create",
             json={
                 "name": template_name,
-                "content": "<html><body>{{ content }} v1</body></html>",
+                "content": "<html><body>{{ text }} v1</body></html>",
             },
             headers=authenticated_header,
         )
@@ -1187,7 +1187,7 @@ async def test_t2i_update_active_template_reloads_all_schedulers(
 
         response = await test_client.put(
             f"/api/t2i/templates/{template_name}",
-            json={"content": "<html><body>{{ content }} v2</body></html>"},
+            json={"content": "<html><body>{{ text }} v2</body></html>"},
             headers=authenticated_header,
         )
         assert response.status_code == 200

From 77fa0e466c278e792cf295b291860c03523f5ee0 Mon Sep 17 00:00:00 2001
From: AstrBot <soulter618@gmail.com>
Date: Fri, 8 May 2026 15:41:56 +0800
Subject: [PATCH 05/51] docs: update Trendshift badge to AstrBotDevs repo
 (#21369) for all README languages (#8079)

Co-authored-by: AstrBot <astrbot@container>
---
 README.md       | 2 +-
 README_fr.md    | 2 +-
 README_ja.md    | 2 +-
 README_ru.md    | 2 +-
 README_zh-TW.md | 2 +-
 README_zh.md    | 2 +-
 6 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/README.md b/README.md
index b566b454d..3a6b56554 100644
--- a/README.md
+++ b/README.md
@@ -12,7 +12,7 @@
 <br>
 
 <div>
-<a href="https://trendshift.io/repositories/12875" target="_blank"><img src="https://trendshift.io/api/badge/repositories/12875" alt="Soulter%2FAstrBot | Trendshift" style="width: 250px; height: 55px;" width="250" height="55"/></a>
+<a href="https://trendshift.io/repositories/21369" target="_blank"><img src="https://trendshift.io/api/badge/repositories/21369" alt="AstrBotDevs%2FAstrBot | Trendshift" style="width: 250px; height: 55px;" width="250" height="55"/></a>
 <a href="https://hellogithub.com/repository/AstrBotDevs/AstrBot" target="_blank"><img src="https://api.hellogithub.com/v1/widgets/recommend.svg?rid=d127d50cd5e54c5382328acc3bb25483&claim_uid=ZO9by7qCXgSd6Lp&t=2" alt="Featured｜HelloGitHub" style="width: 250px; height: 54px;" width="250" height="54" /></a>
 </div>
 
diff --git a/README_fr.md b/README_fr.md
index 4b9e978d4..a77c65721 100644
--- a/README_fr.md
+++ b/README_fr.md
@@ -11,7 +11,7 @@
 <br>
 
 <div>
-<a href="https://trendshift.io/repositories/12875" target="_blank"><img src="https://trendshift.io/api/badge/repositories/12875" alt="Soulter%2FAstrBot | Trendshift" style="width: 250px; height: 55px;" width="250" height="55"/></a>
+<a href="https://trendshift.io/repositories/21369" target="_blank"><img src="https://trendshift.io/api/badge/repositories/21369" alt="AstrBotDevs%2FAstrBot | Trendshift" style="width: 250px; height: 55px;" width="250" height="55"/></a>
 <a href="https://hellogithub.com/repository/AstrBotDevs/AstrBot" target="_blank"><img src="https://api.hellogithub.com/v1/widgets/recommend.svg?rid=d127d50cd5e54c5382328acc3bb25483&claim_uid=ZO9by7qCXgSd6Lp&t=2" alt="Featured｜HelloGitHub" style="width: 250px; height: 54px;" width="250" height="54" /></a>
 </div>
 
diff --git a/README_ja.md b/README_ja.md
index 849fab695..c78b57106 100644
--- a/README_ja.md
+++ b/README_ja.md
@@ -11,7 +11,7 @@
 <br>
 
 <div>
-<a href="https://trendshift.io/repositories/12875" target="_blank"><img src="https://trendshift.io/api/badge/repositories/12875" alt="Soulter%2FAstrBot | Trendshift" style="width: 250px; height: 55px;" width="250" height="55"/></a>
+<a href="https://trendshift.io/repositories/21369" target="_blank"><img src="https://trendshift.io/api/badge/repositories/21369" alt="AstrBotDevs%2FAstrBot | Trendshift" style="width: 250px; height: 55px;" width="250" height="55"/></a>
 <a href="https://hellogithub.com/repository/AstrBotDevs/AstrBot" target="_blank"><img src="https://api.hellogithub.com/v1/widgets/recommend.svg?rid=d127d50cd5e54c5382328acc3bb25483&claim_uid=ZO9by7qCXgSd6Lp&t=2" alt="Featured｜HelloGitHub" style="width: 250px; height: 54px;" width="250" height="54" /></a>
 </div>
 
diff --git a/README_ru.md b/README_ru.md
index 044120320..476ff6d7c 100644
--- a/README_ru.md
+++ b/README_ru.md
@@ -11,7 +11,7 @@
 <br>
 
 <div>
-<a href="https://trendshift.io/repositories/12875" target="_blank"><img src="https://trendshift.io/api/badge/repositories/12875" alt="Soulter%2FAstrBot | Trendshift" style="width: 250px; height: 55px;" width="250" height="55"/></a>
+<a href="https://trendshift.io/repositories/21369" target="_blank"><img src="https://trendshift.io/api/badge/repositories/21369" alt="AstrBotDevs%2FAstrBot | Trendshift" style="width: 250px; height: 55px;" width="250" height="55"/></a>
 <a href="https://hellogithub.com/repository/AstrBotDevs/AstrBot" target="_blank"><img src="https://api.hellogithub.com/v1/widgets/recommend.svg?rid=d127d50cd5e54c5382328acc3bb25483&claim_uid=ZO9by7qCXgSd6Lp&t=2" alt="Featured｜HelloGitHub" style="width: 250px; height: 54px;" width="250" height="54" /></a>
 </div>
 
diff --git a/README_zh-TW.md b/README_zh-TW.md
index 2aaedfabb..fdeedfbc8 100644
--- a/README_zh-TW.md
+++ b/README_zh-TW.md
@@ -11,7 +11,7 @@
 <br>
 
 <div>
-<a href="https://trendshift.io/repositories/12875" target="_blank"><img src="https://trendshift.io/api/badge/repositories/12875" alt="Soulter%2FAstrBot | Trendshift" style="width: 250px; height: 55px;" width="250" height="55"/></a>
+<a href="https://trendshift.io/repositories/21369" target="_blank"><img src="https://trendshift.io/api/badge/repositories/21369" alt="AstrBotDevs%2FAstrBot | Trendshift" style="width: 250px; height: 55px;" width="250" height="55"/></a>
 <a href="https://hellogithub.com/repository/AstrBotDevs/AstrBot" target="_blank"><img src="https://api.hellogithub.com/v1/widgets/recommend.svg?rid=d127d50cd5e54c5382328acc3bb25483&claim_uid=ZO9by7qCXgSd6Lp&t=2" alt="Featured｜HelloGitHub" style="width: 250px; height: 54px;" width="250" height="54" /></a>
 </div>
 
diff --git a/README_zh.md b/README_zh.md
index 9b36e4af2..425719fab 100644
--- a/README_zh.md
+++ b/README_zh.md
@@ -9,7 +9,7 @@
 <a href="https://github.com/AstrBotDevs/AstrBot/blob/master/README_ru.md">Русский</a>
 
 <div>
-<a href="https://trendshift.io/repositories/12875" target="_blank"><img src="https://trendshift.io/api/badge/repositories/12875" alt="Soulter%2FAstrBot | Trendshift" style="width: 250px; height: 55px;" width="250" height="55"/></a>
+<a href="https://trendshift.io/repositories/21369" target="_blank"><img src="https://trendshift.io/api/badge/repositories/21369" alt="AstrBotDevs%2FAstrBot | Trendshift" style="width: 250px; height: 55px;" width="250" height="55"/></a>
 <a href="https://hellogithub.com/repository/AstrBotDevs/AstrBot" target="_blank"><img src="https://api.hellogithub.com/v1/widgets/recommend.svg?rid=d127d50cd5e54c5382328acc3bb25483&claim_uid=ZO9by7qCXgSd6Lp&t=2" alt="Featured｜HelloGitHub" style="width: 250px; height: 54px;" width="250" height="54" /></a>
 </div>
 

From f9cbe790994e4108d38e3b84fb3887a6fe28988a Mon Sep 17 00:00:00 2001
From: M1LKT <144798909+M1LKT@users.noreply.github.com>
Date: Sat, 9 May 2026 08:41:26 +0800
Subject: [PATCH 06/51] fix(ui): always show actions btn instead of on hover 
 in OutlinedActionListItem (#8081)

---
 dashboard/src/components/shared/OutlinedActionListItem.vue | 1 -
 1 file changed, 1 deletion(-)

diff --git a/dashboard/src/components/shared/OutlinedActionListItem.vue b/dashboard/src/components/shared/OutlinedActionListItem.vue
index 7e2f9047c..d9de46f0a 100644
--- a/dashboard/src/components/shared/OutlinedActionListItem.vue
+++ b/dashboard/src/components/shared/OutlinedActionListItem.vue
@@ -118,7 +118,6 @@ const handleClick = (event) => {
   align-items: center;
   display: flex;
   gap: 4px;
-  opacity: 0;
   pointer-events: none;
   transition: opacity 0.16s ease;
 }

From 224915fbc883698ce8f9d979054e2cf5f9f43468 Mon Sep 17 00:00:00 2001
From: AstrBot <soulter618@gmail.com>
Date: Sat, 9 May 2026 22:00:15 +0800
Subject: [PATCH 07/51] docs: add 16MB size limit note for plugin publishing
 (#8108)

Add documentation to clarify the 16MB zip size limit for plugin
marketplace submissions, along with practical recommendations:
- Compress static assets like images
- Clean up unnecessary files (.git, __pycache__, etc.)
- Optimize dependency sizes
- Use .gitattributes or release branches

Also mention the option to contact maintainers for manual bypass
when the limit cannot be met.

Co-authored-by: Seio <seio@astrbot.app>
---
 docs/en/dev/star/plugin-publish.md | 11 +++++++++++
 docs/zh/dev/star/plugin-publish.md | 11 +++++++++++
 2 files changed, 22 insertions(+)

diff --git a/docs/en/dev/star/plugin-publish.md b/docs/en/dev/star/plugin-publish.md
index 29864fd32..4bb2a68e9 100644
--- a/docs/en/dev/star/plugin-publish.md
+++ b/docs/en/dev/star/plugin-publish.md
@@ -7,3 +7,14 @@ AstrBot uses GitHub to host plugins, so you'll need to push your plugin code to
 You can submit your plugin by visiting the [AstrBot Plugin Marketplace](https://plugins.astrbot.app). Once on the website, click the `+` button in the bottom-right corner, fill in the basic information, author details, repository information, and other required fields. Then click the `Submit to GITHUB` button. You will be redirected to the AstrBot repository's Issue submission page. Please verify that all information is correct, then click the `Create` button to complete the plugin publication process.
 
 ![fill out the form](https://files.astrbot.app/docs/source/images/plugin-publish/image.png)
+
+> ⚠️ **Size Limit**: The plugin zip package submitted to the marketplace **must not exceed 16MB**. If it exceeds this limit, the CI/CD pipeline will automatically reject the submission.
+>
+> To ensure your plugin passes review and publication smoothly, we recommend the following:
+>
+> - **Compress static assets**: Compress images, audio, and other resource files in your plugin to reduce their size.
+> - **Clean up unnecessary files**: Avoid including directories like `.git`, `__pycache__`, `node_modules`, or development configuration files in your plugin repository. Add a `.gitignore` file to your repository root to exclude them.
+> - **Optimize dependency size**: If your plugin depends on large libraries, consider trimming them down or importing only what is needed.
+> - **Use `.gitattributes` or a release branch**: Reduce the zip package size by including only the files necessary for distribution.
+>
+> If your plugin truly cannot be compressed to under 16MB due to business requirements, please contact the maintainer to manually bypass this limit.
diff --git a/docs/zh/dev/star/plugin-publish.md b/docs/zh/dev/star/plugin-publish.md
index 45997acc5..57f2f0a38 100644
--- a/docs/zh/dev/star/plugin-publish.md
+++ b/docs/zh/dev/star/plugin-publish.md
@@ -7,3 +7,14 @@ AstrBot 使用 GitHub 托管插件，因此你需要先将插件代码推送到
 你可以前往 [AstrBot 插件市场](https://plugins.astrbot.app) 提交你的插件。进入该网站后，点击右下角的 `+` 按钮，填写好基本信息、作者信息、仓库信息等内容后，点击 `提交到 GITHUB` 按钮，你将会被导航到 AstrBot 仓库的 Issue 提交页面，请确认信息无误后点击 `Create` 按钮提交，即可完成插件发布。
 
 ![fill out the form](https://files.astrbot.app/docs/source/images/plugin-publish/image.png)
+
+> ⚠️ **大小限制**：发布到插件市场的插件压缩包（zip）大小**不得超过 16MB**。如果超过此限制，CI/CD 流水线将自动拒绝该发布请求。
+>
+> 为确保你的插件能顺利通过审核和发布，建议采取以下措施：
+>
+> - **压缩图片等静态资源**：对插件中的图片、音频等资源文件进行压缩，减小体积。
+> - **清理不必要的文件**：避免将 `.git` 目录、`__pycache__`、`node_modules`、开发用配置文件等非必需文件提交到插件仓库中。建议在仓库根目录添加 `.gitignore` 来排除它们。
+> - **优化依赖体积**：如果插件包含体积较大的依赖库，可考虑精简或按需引入。
+> - **使用 `.gitattributes` 或发布分支**：通过只包含发布所需文件的策略来减小 zip 包体积。
+>
+> 如果插件确实因业务需要无法压缩到 16MB 以内，可以联系维护者手动 bypass 此限制。

From 4bcaaab44f42698cf58d5480195bb949f72df4e3 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 9 May 2026 22:16:30 +0800
Subject: [PATCH 08/51] chore(deps): bump pnpm/action-setup in the
 github-actions group (#8004)

Bumps the github-actions group with 1 update: [pnpm/action-setup](https://github.com/pnpm/action-setup).


Updates `pnpm/action-setup` from 6.0.3 to 6.0.5
- [Release notes](https://github.com/pnpm/action-setup/releases)
- [Commits](https://github.com/pnpm/action-setup/compare/v6.0.3...v6.0.5)

---
updated-dependencies:
- dependency-name: pnpm/action-setup
  dependency-version: 6.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/build-docs.yml   | 2 +-
 .github/workflows/dashboard_ci.yml | 2 +-
 .github/workflows/release.yml      | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/build-docs.yml b/.github/workflows/build-docs.yml
index ed25cd058..8074558b8 100644
--- a/.github/workflows/build-docs.yml
+++ b/.github/workflows/build-docs.yml
@@ -13,7 +13,7 @@ jobs:
       - name: checkout
         uses: actions/checkout@v6
       - name: Setup pnpm
-        uses: pnpm/action-setup@v6.0.3
+        uses: pnpm/action-setup@v6.0.5
         with:
           version: 10.28.2
       - name: Setup Node.js
diff --git a/.github/workflows/dashboard_ci.yml b/.github/workflows/dashboard_ci.yml
index 58d8896ec..8934697d8 100644
--- a/.github/workflows/dashboard_ci.yml
+++ b/.github/workflows/dashboard_ci.yml
@@ -15,7 +15,7 @@ jobs:
         uses: actions/checkout@v6
 
       - name: Setup pnpm
-        uses: pnpm/action-setup@v6.0.3
+        uses: pnpm/action-setup@v6.0.5
         with:
           version: 10.28.2
 
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 1765bf75d..04ebadf2b 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -51,7 +51,7 @@ jobs:
           echo "tag=$tag" >> "$GITHUB_OUTPUT"
 
       - name: Setup pnpm
-        uses: pnpm/action-setup@v6.0.3
+        uses: pnpm/action-setup@v6.0.5
         with:
           version: 10.28.2
 

From bd9aade842e85e8f4dcd829f95ab8ee2c75dcd74 Mon Sep 17 00:00:00 2001
From: lingyun14 <wedoyou@qq.com>
Date: Sat, 9 May 2026 22:17:47 +0800
Subject: [PATCH 09/51] =?UTF-8?q?fix(docs):=E5=A4=9A=E4=BB=BD=E6=96=87?=
 =?UTF-8?q?=E6=A1=A3=E6=B1=89=E8=AF=91=E8=8B=B1=E5=B9=B6=E6=95=B4=E7=90=86?=
 =?UTF-8?q?=20(#8001)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* docs(en): translate plugin-platform-adapter.md from Chinese to English

* docs(en): translate plugin-platform-adapter.md from Chinese to English

* Update ppio.md

* Update provider-lmstudio.md

* Update function-calling.md

* Update skills.md

* Update ai.md

* Update simple.md

* Update mcp.md

* Update config.mjs kook

* fix(docs): fix MessageSesion import path in platform adapter example

Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>

---------

Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
---
 docs/.vitepress/config.mjs             |  2 +-
 docs/en/dev/plugin-platform-adapter.md | 99 +++++++++++++-------------
 docs/en/dev/star/guides/ai.md          |  4 +-
 docs/en/dev/star/guides/simple.md      | 16 -----
 docs/en/providers/302ai.md             | 22 +++---
 docs/en/providers/ppio.md              | 36 +++++-----
 docs/en/providers/provider-lmstudio.md | 37 +++++-----
 docs/en/use/function-calling.md        |  2 +-
 docs/en/use/mcp.md                     |  2 +-
 docs/en/use/skills.md                  |  2 +-
 10 files changed, 102 insertions(+), 120 deletions(-)

diff --git a/docs/.vitepress/config.mjs b/docs/.vitepress/config.mjs
index cad68ec06..458bc8dab 100644
--- a/docs/.vitepress/config.mjs
+++ b/docs/.vitepress/config.mjs
@@ -343,6 +343,7 @@ export default defineConfig({
               { text: "Mattermost", link: "/mattermost" },
               { text: "Misskey", link: "/misskey" },
               { text: "Discord", link: "/discord" },
+              { text: "KOOK", link: "/kook" },
               {
                 text: "Satori",
                 base: "/en/platform/satori",
@@ -357,7 +358,6 @@ export default defineConfig({
                 collapsed: false,
                 items: [
                   { text: "Matrix", link: "/matrix" },
-                  { text: "KOOK", link: "/kook" },
                   { text: "VoceChat", link: "/vocechat" },
                 ],
               },
diff --git a/docs/en/dev/plugin-platform-adapter.md b/docs/en/dev/plugin-platform-adapter.md
index 8e65528e2..4772b6e18 100644
--- a/docs/en/dev/plugin-platform-adapter.md
+++ b/docs/en/dev/plugin-platform-adapter.md
@@ -2,23 +2,23 @@
 outline: deep
 ---
 
-# 开发一个平台适配器
+# Developing a Platform Adapter
 
-AstrBot 支持以插件的形式接入平台适配器，你可以自行接入 AstrBot 没有的平台。如飞书、钉钉甚至是哔哩哔哩私信、Minecraft。
+AstrBot supports integrating platform adapters in plugin form, allowing you to connect platforms that AstrBot does not natively support — such as Lark, DingTalk, Bilibili private messages, or even Minecraft.
 
-我们以一个平台 `FakePlatform` 为例展开讲解。
+We will use a platform called `FakePlatform` as an example.
 
-首先，在插件目录下新增 `fake_platform_adapter.py` 和 `fake_platform_event.py` 文件。前者主要是平台适配器的实现，后者是平台事件的定义。
+First, add `fake_platform_adapter.py` and `fake_platform_event.py` to your plugin directory. The former handles the platform adapter implementation, while the latter defines the platform event.
 
-## 平台适配器
+## Platform Adapter
 
-假设 FakePlatform 的客户端 SDK 是这样：
+Assume FakePlatform's client SDK looks like this:
 
 ```py
 import asyncio
 
 class FakeClient():
-    '''模拟一个消息平台，这里 5 秒钟下发一个消息'''
+    '''Simulates a messaging platform that sends a message every 5 seconds'''
     def __init__(self, token: str, username: str):
         self.token = token
         self.username = username
@@ -29,7 +29,7 @@ class FakeClient():
             await asyncio.sleep(5)
             await getattr(self, 'on_message_received')({
                 'bot_id': '123',
-                'content': '新消息',
+                'content': 'new message',
                 'username': 'zhangsan',
                 'userid': '123',
                 'message_id': 'asdhoashd',
@@ -37,28 +37,28 @@ class FakeClient():
             })
             
     async def send_text(self, to: str, message: str):
-        print('发了消息:', to, message)
+        print('Message sent:', to, message)
         
     async def send_image(self, to: str, image_path: str):
-        print('发了消息:', to, image_path)
+        print('Image sent:', to, image_path)
 ```
 
-我们创建  `fake_platform_adapter.py`：
+Now create `fake_platform_adapter.py`:
 
 ```py
 import asyncio
 
 from astrbot.api.platform import Platform, AstrBotMessage, MessageMember, PlatformMetadata, MessageType
 from astrbot.api.event import MessageChain
-from astrbot.api.message_components import Plain, Image, Record # 消息链中的组件，可以根据需要导入
-from astrbot.core.platform.astr_message_event import MessageSesion
+from astrbot.api.message_components import Plain, Image, Record # Message chain components, import as needed
+from astrbot.core.platform.message_session import MessageSesion
 from astrbot.api.platform import register_platform_adapter
 from astrbot import logger
 from .client import FakeClient
 from .fake_platform_event import FakePlatformEvent
             
-# 注册平台适配器。第一个参数为平台名，第二个为描述。第三个为默认配置。
-@register_platform_adapter("fake", "fake 适配器", default_config_tmpl={
+# Register the platform adapter. First param: platform name, second: description, third: default config.
+@register_platform_adapter("fake", "fake adapter", default_config_tmpl={
     "token": "your_token",
     "username": "bot_username"
 })
@@ -66,52 +66,53 @@ class FakePlatformAdapter(Platform):
 
     def __init__(self, platform_config: dict, platform_settings: dict, event_queue: asyncio.Queue) -> None:
         super().__init__(event_queue)
-        self.config = platform_config # 上面的默认配置，用户填写后会传到这里
-        self.settings = platform_settings # platform_settings 平台设置。
+        self.config = platform_config # The default config above; filled in by the user and passed here
+        self.settings = platform_settings # platform_settings: platform settings
     
     async def send_by_session(self, session: MessageSesion, message_chain: MessageChain):
-        # 必须实现
+        # Must be implemented
         await super().send_by_session(session, message_chain)
     
     def meta(self) -> PlatformMetadata:
-        # 必须实现，直接像下面一样返回即可。
+        # Must be implemented. Simply return as shown below.
         return PlatformMetadata(
             "fake",
-            "fake 适配器",
+            "fake adapter",
         )
 
     async def run(self):
-        # 必须实现，这里是主要逻辑。
+        # Must be implemented. This is the main logic.
 
-        # FakeClient 是我们自己定义的，这里只是示例。这个是其回调函数
+        # FakeClient is defined by us — this is just an example. This is its callback function.
         async def on_received(data):
             logger.info(data)
-            abm = await self.convert_message(data=data) # 转换成 AstrBotMessage
+            abm = await self.convert_message(data=data) # Convert to AstrBotMessage
             await self.handle_msg(abm) 
         
-        # 初始化 FakeClient
+        # Initialize FakeClient
         self.client = FakeClient(self.config['token'], self.config['username'])
         self.client.on_message_received = on_received
-        await self.client.start_polling() # 持续监听消息，这是个堵塞方法。
+        await self.client.start_polling() # Continuously listens for messages; this is a blocking call.
 
     async def convert_message(self, data: dict) -> AstrBotMessage:
-        # 将平台消息转换成 AstrBotMessage
-        # 这里就体现了适配程度，不同平台的消息结构不一样，这里需要根据实际情况进行转换。
+        # Convert the platform message to AstrBotMessage.
+        # The degree of adaptation is reflected here. Different platforms have different message
+        # structures; convert accordingly.
         abm = AstrBotMessage()
-        abm.type = MessageType.GROUP_MESSAGE # 还有 friend_message，对应私聊。具体平台具体分析。重要！
-        abm.group_id = data['group_id'] # 如果是私聊，这里可以不填
-        abm.message_str = data['content'] # 纯文本消息。重要！
-        abm.sender = MessageMember(user_id=data['userid'], nickname=data['username']) # 发送者。重要！
-        abm.message = [Plain(text=data['content'])] # 消息链。如果有其他类型的消息，直接 append 即可。重要！
-        abm.raw_message = data # 原始消息。
+        abm.type = MessageType.GROUP_MESSAGE # Also friend_message for private chats. Analyze per platform. Important!
+        abm.group_id = data['group_id'] # Can be omitted for private chats
+        abm.message_str = data['content'] # Plain text message. Important!
+        abm.sender = MessageMember(user_id=data['userid'], nickname=data['username']) # Sender. Important!
+        abm.message = [Plain(text=data['content'])] # Message chain. Append other message types as needed. Important!
+        abm.raw_message = data # Raw message.
         abm.self_id = data['bot_id']
-        abm.session_id = data['userid'] # 会话 ID。重要！
-        abm.message_id = data['message_id'] # 消息 ID。
+        abm.session_id = data['userid'] # Session ID. Important!
+        abm.message_id = data['message_id'] # Message ID.
         
         return abm
     
     async def handle_msg(self, message: AstrBotMessage):
-        # 处理消息
+        # Handle the message
         message_event = FakePlatformEvent(
             message_str=message.message_str,
             message_obj=message,
@@ -119,11 +120,11 @@ class FakePlatformAdapter(Platform):
             session_id=message.session_id,
             client=self.client
         )
-        self.commit_event(message_event) # 提交事件到事件队列。不要忘记！
+        self.commit_event(message_event) # Submit the event to the event queue. Don't forget this!
 ```
 
 
-`fake_platform_event.py`：
+`fake_platform_event.py`:
 
 ```py
 from astrbot.api.event import AstrMessageEvent, MessageChain
@@ -138,13 +139,13 @@ class FakePlatformEvent(AstrMessageEvent):
         self.client = client
         
     async def send(self, message: MessageChain):
-        for i in message.chain: # 遍历消息链
-            if isinstance(i, Plain): # 如果是文字类型的
+        for i in message.chain: # Iterate over the message chain
+            if isinstance(i, Plain): # If it's a text message
                 await self.client.send_text(to=self.get_sender_id(), message=i.text)
-            elif isinstance(i, Image): # 如果是图片类型的 
+            elif isinstance(i, Image): # If it's an image
                 img_url = i.file
                 img_path = ""
-                # 下面的三个条件可以直接参考一下。
+                # The three conditions below can be used as a reference.
                 if img_url.startswith("file:///"):
                     img_path = img_url[8:]
                 elif i.file and i.file.startswith("http"):
@@ -152,14 +153,14 @@ class FakePlatformEvent(AstrMessageEvent):
                 else:
                     img_path = img_url
 
-                # 请善于 Debug！
+                # Make good use of debugging!
                     
                 await self.client.send_image(to=self.get_sender_id(), image_path=img_path)
 
-        await super().send(message) # 需要最后加上这一段，执行父类的 send 方法。
+        await super().send(message) # Must be called at the end to invoke the parent class's send method.
 ```
 
-最后，main.py 只需这样，在初始化的时候导入 fake_platform_adapter 模块。装饰器会自动注册。
+Finally, in `main.py`, simply import the `fake_platform_adapter` module during initialization. The decorator will handle registration automatically.
 
 ```py
 from astrbot.api.star import Context, Star
@@ -169,17 +170,17 @@ class MyPlugin(Star):
         from .fake_platform_adapter import FakePlatformAdapter # noqa
 ```
 
-搞好后，运行 AstrBot：
+Once set up, run AstrBot:
 
 ![image](https://files.astrbot.app/docs/source/images/plugin-platform-adapter/QQ_1738155926221.png)
 
-这里出现了我们创建的 fake。
+The `fake` adapter we created now appears here.
 
 ![image](https://files.astrbot.app/docs/source/images/plugin-platform-adapter/QQ_1738155982211.png)
 
-启动后，可以看到正常工作：
+After starting, you can see it working correctly:
 
 ![image](https://files.astrbot.app/docs/source/images/plugin-platform-adapter/QQ_1738156166893.png)
 
 
-有任何疑问欢迎加群询问~
\ No newline at end of file
+If you have any questions, feel free to join the community group and ask~
diff --git a/docs/en/dev/star/guides/ai.md b/docs/en/dev/star/guides/ai.md
index 361ac55c4..8e09da134 100644
--- a/docs/en/dev/star/guides/ai.md
+++ b/docs/en/dev/star/guides/ai.md
@@ -257,7 +257,7 @@ curr_cid = await conv_mgr.get_curr_conversation_id(uid)
 conversation = await conv_mgr.get_conversation(uid, curr_cid)  # Conversation
 ```
 
-::: details Conversation 类型定义
+::: details Conversation Type Definition
 
 ```py
 @dataclass
@@ -438,7 +438,7 @@ persona_mgr = self.context.persona_manager
 - **Returns**  
   `Personality` – Default persona object in v3 format
 
-::: details Persona / Personality 类型定义
+::: details Persona / Personality Type Definition
 
 ```py
 
diff --git a/docs/en/dev/star/guides/simple.md b/docs/en/dev/star/guides/simple.md
index f2dc11be9..d7ed40f95 100644
--- a/docs/en/dev/star/guides/simple.md
+++ b/docs/en/dev/star/guides/simple.md
@@ -40,19 +40,3 @@ Explanation:
 
 All handler functions must be written within the plugin class. To keep content concise, in subsequent sections, we may omit the plugin class definition.
 ```
-
-解释如下：
-
-- 插件需要继承 `Star` 类。
-- `Context` 类用于插件与 AstrBot Core 交互，可以由此调用 AstrBot Core 提供的各种 API。
-- 具体的处理函数 `Handler` 在插件类中定义，如这里的 `helloworld` 函数。
-- `AstrMessageEvent` 是 AstrBot 的消息事件对象，存储了消息发送者、消息内容等信息。
-- `AstrBotMessage` 是 AstrBot 的消息对象，存储了消息平台下发的消息的具体内容。可以通过 `event.message_obj` 获取。
-
-> [!TIP]
->
-> `Handler` 一定需要在插件类中注册，前两个参数必须为 `self` 和 `event`。如果文件行数过长，可以将服务写在外部，然后在 `Handler` 中调用。
->
-> 插件类所在的文件名需要命名为 `main.py`。
-
-所有的处理函数都需写在插件类中。为了精简内容，在之后的章节中，我们可能会忽略插件类的定义。
diff --git a/docs/en/providers/302ai.md b/docs/en/providers/302ai.md
index 50a3abe77..8685e3b05 100644
--- a/docs/en/providers/302ai.md
+++ b/docs/en/providers/302ai.md
@@ -1,21 +1,21 @@
-# 接入 302.AI
+# Connect 302.AI
 
-302.AI 是企业级 AI 应用平台，支持快捷接入全球各类 AI 模型。
+[302.AI](https://302.ai) is an enterprise-grade AI application platform that provides quick access to a wide range of AI models worldwide.
 
-## 使用
+## Getting Started
 
-点击[此链接](https://share.302.ai/rr1M3l) 注册账户。
+Click [this link](https://share.302.ai/rr1M3l) to register an account.
 
-注册完毕之后，点击[此链接](https://302.ai/apis/)选择需要接入的模型。
+After registering, click [this link](https://302.ai/apis/) to select the model you want to use.
 
-根据需求，进入[此链接](https://dash.302.ai/charge) 充值对应的金额。
+If needed, visit [this link](https://dash.302.ai/charge) to top up your account balance.
 
-## 接入
+## Connect
 
-打开 AstrBot 控制台 -> 服务提供商页面，点击新增提供商，找到并点击 `302.AI`(需要版本 >= 3.5.18)
+Open the AstrBot dashboard → Service Providers page, click **Add Provider**, find and click `302.AI` (requires version >= 3.5.18).
 
-修改 ID，并将 API Key 和模型名称填入对话框表单，点击保存，即可完成创建。
+Set an ID, fill in the API Key and model name in the dialog form, then click **Save** to complete the setup.
 
-## 使用
+## Usage
 
-对机器人输入 `/provider` 指令，将提供商切换到刚刚添加的 302.AI 提供商，即可使用。
+Send the `/provider` command to the bot to switch to the 302.AI provider you just added.
diff --git a/docs/en/providers/ppio.md b/docs/en/providers/ppio.md
index fceb61dd1..db9ed03b4 100644
--- a/docs/en/providers/ppio.md
+++ b/docs/en/providers/ppio.md
@@ -1,43 +1,41 @@
-# 接入 PPIO 派欧云
+# Connect PPIO Cloud
 
-PPIO 派欧云是中国领先的独立分布式云计算服务商，您可以在派欧云上使用稳定、低价甚至免费的模型服务。
+PPIO Cloud is a leading independent distributed cloud computing provider in China, offering stable, affordable, and even free model services.
 
-## 准备
+## Preparation
 
-打开 [PPIO 派欧云官网](https://ppio.cn/user/register?invited_by=AIOONE)，并注册账户（通过此链接注册的账户将会获得 15 元人民币的代金券）。
+Open the [PPIO Cloud website](https://ppio.cn/user/register?invited_by=AIOONE) and register an account (accounts registered through this link will receive a ¥15 voucher).
 
-进入 [模型 API 服务](https://ppio.cn/model-api/console)，找到你想接入的模型。你可以通过筛选器选择不同厂商或者免费的模型。
+Go to [Model API Service](https://ppio.cn/model-api/console) and find the model you want to use. You can filter by provider or select free models.
 
 ![image](https://files.astrbot.app/docs/source/images/ppio/image-1.png)
 
-找到你想要接入的模型后，点击模型卡片，侧边会展开一个模型详情卡片，找到下方的 API 接入指南，如果您还没创建过 Key 可以点击创建。
+Once you find the model, click its card to expand a detail panel on the right. Scroll down to the API integration guide — if you haven't created a key yet, click to create one.
 
 ![image](https://files.astrbot.app/docs/source/images/ppio/image-3.png)
 
-打开 AstrBot 控制台 -> 服务提供商页面，点击新增提供商，找到并点击 `PPIO派欧云`(需要版本 >= 3.5.10，旧版本也可使用，见下文)。
+Open the AstrBot dashboard → Service Providers page, click **Add Provider**, find and click `PPIO Cloud` (requires version >= 3.5.10; older versions are also supported, see below).
 
 ![image](https://files.astrbot.app/docs/source/images/ppio/image.png)
 
-将 API Key 和模型名称填入对话框表单，点击保存，即可完成创建。
+Fill in the API Key and model name in the dialog form, then click **Save** to complete the setup.
 
 > [!TIP]
-> 如果您是 AstrBot 旧版本（< 3.5.10）的用户，请打开 AstrBot 控制台 -> 服务提供商页面，点击新增提供商，找到 `OpenAI`，点击进入。
-> 1. 将 ID 命名为 `ppio`（随意）
-> 2. 然后将 `API Base URL` 设置为 `https://api.ppinfra.com/v3/openai`
-> 3. 然后将 API Key 和模型名称填入对话框表单，点击保存，即可完成创建。
+> If you are using an older version of AstrBot (< 3.5.10), open the AstrBot dashboard → Service Providers page, click **Add Provider**, find `OpenAI`, and click to enter.
+> 1. Set the ID to `ppio` (any name works)
+> 2. Set `API Base URL` to `https://api.ppinfra.com/v3/openai`
+> 3. Fill in the API Key and model name in the dialog form, then click **Save** to complete the setup.
 
+## Usage
 
-## 使用
+Send the `/provider` command to the bot to switch to the PPIO Cloud provider you just added.
 
-对机器人输入 `/provider` 指令，将提供商切换到刚刚添加的 PPIO 派欧云提供商，即可使用。
+## FAQ
 
-## 常见问题
-
-#### 显示 `400` 错误
+#### `400` Error
 
 ```log
 Error code: 400 - {'code': 400, 'message': '"auto" tool choice requires --enable-auto-tool-choice and --tool-call-parser to be set', 'type': 'BadRequestError'}
 ```
 
-
-请暂时使用 `/tool off_all` 禁用所有的函数调用工具即可使用，或者换用其他模型。
\ No newline at end of file
+Temporarily disable all function calling tools with `/tool off_all`, or switch to a different model.
diff --git a/docs/en/providers/provider-lmstudio.md b/docs/en/providers/provider-lmstudio.md
index 969f7d7c8..4c0d99a7c 100644
--- a/docs/en/providers/provider-lmstudio.md
+++ b/docs/en/providers/provider-lmstudio.md
@@ -1,38 +1,37 @@
-# 接入 LM Studio 使用 DeepSeek-R1 等模型
+# Connect LM Studio to Use DeepSeek-R1 and Other Models
 
-LMStudio 允许在本地电脑上部署模型（需要电脑硬件配置符合要求）
+LM Studio allows you to deploy models locally on your computer (hardware requirements must be met).
 
-### 下载并安装 LMStudio
+### Download and Install LM Studio
 
-https://lmstudio.ai/download
+<https://lmstudio.ai/download>
 
-### 下载并运行模型
+### Download and Run a Model
 
-https://lmstudio.ai/models
+<https://lmstudio.ai/models>
 
-跟随 LMStudio 下载并运行想要的模型，如 deepseek-r1-qwen-7b:
+Follow the LM Studio instructions to download and run your desired model, e.g. `deepseek-r1-qwen-7b`:
 
 ```bash
 lms get deepseek-r1-qwen-7b
 ```
 
-### 配置 AstrBot
+### Configure AstrBot
 
-在 AstrBot 上：
+In AstrBot:
 
-点击 配置->服务提供商配置->加号->openai
+Go to **Configuration → Service Providers → + → OpenAI**
 
-API Base URL 填写 `http://localhost:1234/v1`
+Set `API Base URL` to `http://localhost:1234/v1`
 
-API Key 填写 `lm-studio`
+Set `API Key` to `lm-studio`
 
-> 对于 Mac/Windows 使用 Docker Desktop 部署 AstrBot 部署的用户，API Base URL 请填写为 `http://host.docker.internal:1234/v1`。
-> 对于 Linux 使用 Docker 部署 AstrBot 部署的用户，API Base URL 请填写为 `http://172.17.0.1:1234/v1`，或者将 `172.17.0.1` 替换为你的公网 IP IP（确保宿主机系统放行了 1234 端口）。
+> For users deploying AstrBot via Docker Desktop on Mac or Windows, set `API Base URL` to `http://host.docker.internal:1234/v1`.
+>
+> For users deploying AstrBot via Docker on Linux, set `API Base URL` to `http://172.17.0.1:1234/v1`, or replace `172.17.0.1` with your server's public IP (make sure port 1234 is open on the host).
 
-如果 LM Studio 使用了 Docker 部署，请确保 1234 端口已经映射到宿主机。
+If LM Studio itself is deployed in Docker, ensure port 1234 is mapped to the host.
 
-模型名填写上一步选好的
+Set the model name to the one you selected in the previous step, then save the configuration.
 
-保存配置即可。
-
-> 输入 /provider 查看 AstrBot 配置的模型
\ No newline at end of file
+> Run `/provider` to view the models configured in AstrBot.
diff --git a/docs/en/use/function-calling.md b/docs/en/use/function-calling.md
index 1526cbab9..2208ddd11 100644
--- a/docs/en/use/function-calling.md
+++ b/docs/en/use/function-calling.md
@@ -51,4 +51,4 @@ Below are some common tool calling demos:
 
 ## MCP
 
-Please refer to this documentation: [AstrBot - MCP](/use/mcp).
+Please refer to this documentation: [AstrBot - MCP](/en/use/mcp).
diff --git a/docs/en/use/mcp.md b/docs/en/use/mcp.md
index 1681d3132..a2b95f562 100644
--- a/docs/en/use/mcp.md
+++ b/docs/en/use/mcp.md
@@ -99,4 +99,4 @@ That's it.
 Reference links:
 
 1. Learn how to use MCP here: [Model Context Protocol](https://modelcontextprotocol.io/introduction)
-2. Get commonly used MCP servers here: [awesome-mcp-servers](https://github.com/punkpeye/awesome-mcp-servers/blob/main/README-zh.md#what-is-mcp), [Model Context Protocol servers](https://github.com/modelcontextprotocol/servers), [MCP.so](https://mcp.so)
+2. Get commonly used MCP servers here: [awesome-mcp-servers](https://github.com/punkpeye/awesome-mcp-servers/blob/main/README.md#what-is-mcp), [Model Context Protocol servers](https://github.com/modelcontextprotocol/servers), [MCP.so](https://mcp.so)
diff --git a/docs/en/use/skills.md b/docs/en/use/skills.md
index a57a5b12c..4221cc047 100644
--- a/docs/en/use/skills.md
+++ b/docs/en/use/skills.md
@@ -20,7 +20,7 @@ You can upload Skills with the following requirements:
 
 1. The upload must be a `.zip` archive.
 2. **After extraction, it must contain a single Skill folder. The folder name will be used as the identifier for the Skill in AstrBot—please name it using English characters.**
-3. The Skill folder must include a file named `SKILL.md`, and its contents should preferably follow the Anthropic Skills specification. You can refer to Anthropic's documentation: https://code.claude.com/docs/zh-CN/skills
+3. The Skill folder must include a file named `SKILL.md`, and its contents should preferably follow the Anthropic Skills specification. You can refer to Anthropic's documentation: https://code.claude.com/docs/en/skills
 
 ## Using Skills in AstrBot
 

From c9182c27a2e0a3404da112d6124a912340820b88 Mon Sep 17 00:00:00 2001
From: lingyun14 <wedoyou@qq.com>
Date: Sat, 9 May 2026 22:18:21 +0800
Subject: [PATCH 10/51] fix: fix console log level alignment and mobile layout
 issue (#7988)

* fix: fix console log level alignment and mobile layout issue

* Update ConsoleDisplayer.vue
---
 .../src/components/shared/ConsoleDisplayer.vue      | 13 ++++++++++++-
 1 file changed, 12 insertions(+), 1 deletion(-)

diff --git a/dashboard/src/components/shared/ConsoleDisplayer.vue b/dashboard/src/components/shared/ConsoleDisplayer.vue
index 8789925ca..6c69ae66f 100644
--- a/dashboard/src/components/shared/ConsoleDisplayer.vue
+++ b/dashboard/src/components/shared/ConsoleDisplayer.vue
@@ -362,6 +362,7 @@ export default {
   border-radius: 8px;
   height: 100%;
   overflow-y: auto;
+  overflow-x: auto;
   padding: 16px;
 }
 
@@ -379,7 +380,7 @@ export default {
 
 :deep(.console-log-line--structured) {
   display: grid;
-  grid-template-columns: max-content 10ch minmax(0, 1fr);
+  grid-template-columns: max-content max-content minmax(0, 1fr);
   column-gap: 8px;
   align-items: start;
   white-space: normal;
@@ -400,6 +401,16 @@ export default {
   overflow-wrap: anywhere;
 }
 
+@media (max-width: 768px) {
+  :deep(.console-log-line--structured) {
+    grid-template-columns: 1fr;
+  }
+  :deep(.console-log-prefix:empty),
+  :deep(.console-log-level:empty) {
+    display: none;
+  }
+}
+
 :deep(.fade-in) {
   animation: fadeIn 0.3s;
 }

From ad516950f2fe9b0ff154ee97109f7da19c223759 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E3=82=A8=E3=82=A4=E3=82=AB=E3=82=AF?=
 <1259085392z@gmail.com>
Date: Sun, 10 May 2026 00:20:36 +0900
Subject: [PATCH 11/51] fix(provider): force Gemini chat client to use managed
 httpx client (#8112)

When both aiohttp and httpx are installed, google-genai prefers aiohttp
as the async HTTP backend. In error response paths, the aiohttp backend
returns raw aiohttp.ClientResponse objects that google-genai cannot handle,
masking real API errors with:
  Unsupported response type: <class 'aiohttp.client_reqrep.ClientResponse'>

This fix explicitly creates an httpx.AsyncClient and passes it via
HttpOptions.httpx_async_client, ensuring the chat provider always uses
the httpx backend. The managed client is closed in terminate().

- Preserve HTTP_PROXY/HTTPS_PROXY support via trust_env=True.
- Preserve provider-level proxy via httpx.AsyncClient(proxy=...).
- Avoid logging full proxy URLs for security.

Fixes #7564
---
 .../core/provider/sources/gemini_source.py    | 55 +++++++++++++++++--
 1 file changed, 51 insertions(+), 4 deletions(-)

diff --git a/astrbot/core/provider/sources/gemini_source.py b/astrbot/core/provider/sources/gemini_source.py
index a942c56e4..f38fcfc35 100644
--- a/astrbot/core/provider/sources/gemini_source.py
+++ b/astrbot/core/provider/sources/gemini_source.py
@@ -9,6 +9,7 @@ from pathlib import Path
 from typing import Literal, cast
 from urllib.parse import urlparse
 
+import httpx
 from google import genai
 from google.genai import types
 from google.genai.errors import APIError
@@ -75,6 +76,8 @@ class ProviderGoogleGenAI(Provider):
         if self.api_base and self.api_base.endswith("/"):
             self.api_base = self.api_base[:-1]
 
+        self._http_client: httpx.AsyncClient | None = None
+        self._stale_http_clients: list[httpx.AsyncClient] = []
         self._init_client()
         self.set_model(provider_config.get("model", "unknown"))
         self._init_safety_settings()
@@ -86,9 +89,29 @@ class ProviderGoogleGenAI(Provider):
             base_url=self.api_base,
             timeout=self.timeout * 1000,  # 毫秒
         )
+
+        # 强制使用 httpx 作为异步 HTTP 后端，避免 aiohttp 响应类型兼容问题 (#7564)
+        # httpx.AsyncClient 的 timeout 单位为秒（与 HttpOptions 的毫秒不同）
+        async_client_kwargs: dict = {
+            "base_url": self.api_base,
+            "timeout": self.timeout,
+        }
         if proxy:
-            http_options.async_client_args = {"proxy": proxy}
-            logger.info(f"[Gemini] 使用代理: {proxy}")
+            async_client_kwargs["proxy"] = proxy
+            async_client_kwargs["trust_env"] = False
+            logger.info("[Gemini] 使用代理")
+        else:
+            async_client_kwargs["trust_env"] = True
+
+        # Track the previous client so it can be closed in terminate() instead
+        # of leaking when _init_client is called again (e.g. via set_key).
+        # Only the most recent stale client is kept to avoid unbounded growth.
+        if self._http_client is not None:
+            self._stale_http_clients = [self._http_client]
+
+        self._http_client = httpx.AsyncClient(**async_client_kwargs)
+        http_options.httpx_async_client = self._http_client
+
         self.client = genai.Client(
             api_key=self.chosen_api_key,
             http_options=http_options,
@@ -1067,6 +1090,30 @@ class ProviderGoogleGenAI(Provider):
             image_bs64 = base64.b64encode(f.read()).decode("utf-8")
             return "data:image/jpeg;base64," + image_bs64
 
+    async def _close_httpx_client(self, client: httpx.AsyncClient | None) -> None:
+        """Safely close an httpx.AsyncClient, swallowing errors for idempotency."""
+        if client is None:
+            return
+        try:
+            await client.aclose()
+        except Exception as e:
+            # Idempotent: ignore errors from already-closed or broken clients,
+            # but log at debug to aid diagnosing unexpected shutdown issues.
+            logger.debug(f"[Gemini] Ignored error while closing httpx client: {e}")
+
     async def terminate(self) -> None:
-        if self.client:
-            await self.client.aclose()
+        # Close the active Gemini client (external httpx client is managed
+        # separately so genai.Client.aclose skips it).
+        if self.client is not None:
+            try:
+                await self.client.aclose()
+            except Exception:
+                pass
+            self.client = None
+
+        # Close all tracked httpx clients (stale + current).
+        for client in self._stale_http_clients:
+            await self._close_httpx_client(client)
+        self._stale_http_clients.clear()
+        await self._close_httpx_client(self._http_client)
+        self._http_client = None

From 041c35c35bc9b2c2e6b853a880121751e22f348b Mon Sep 17 00:00:00 2001
From: NayukiMeko <MekoNayuki@outlook.com>
Date: Mon, 11 May 2026 16:36:03 +0800
Subject: [PATCH 12/51] Fix: Fix issue where temporary directory is not cleaned
 and error tracking false positives when repeatedly installing plugins (#8148)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* fix(star): 修复重复安装插件时临时目录未清理及错误追踪误报问题

- 引入 skip_failed_tracking 标志，当目标目录已存在时跳过失败安装追踪，避免将预期冲突错误误记为安装失败
- 修复 finally 块中临时目录清理逻辑，确保冲突场景下 plugin_upload_* 临时目录也能被正确删除
- 新增测试用例 test_install_plugin_from_file_conflict_keeps_failed_plugins_clean，验证重复安装同名插件时 failed_plugin_dict 为空且无残留临时目录

Ref #8122

* style(star): ruff 格式化
---
 astrbot/core/star/star_manager.py | 17 ++++++++-----
 tests/test_plugin_manager.py      | 41 +++++++++++++++++++++++++++++--
 2 files changed, 50 insertions(+), 8 deletions(-)

diff --git a/astrbot/core/star/star_manager.py b/astrbot/core/star/star_manager.py
index c25233c7c..58546c0ac 100644
--- a/astrbot/core/star/star_manager.py
+++ b/astrbot/core/star/star_manager.py
@@ -1798,6 +1798,7 @@ class PluginManager:
             dir=self.plugin_store_path, prefix="plugin_upload_"
         )
         temp_desti_dir = desti_dir
+        skip_failed_tracking = False
 
         try:
             self.updator.unzip_file(zip_file_path, desti_dir)
@@ -1807,6 +1808,7 @@ class PluginManager:
                 metadata_dir_name,
             )
             if target_plugin_path != desti_dir and os.path.exists(target_plugin_path):
+                skip_failed_tracking = True
                 raise Exception(f"安装失败：目录 {metadata_dir_name} 已存在。")
             if target_plugin_path != desti_dir:
                 os.rename(desti_dir, target_plugin_path)
@@ -1870,17 +1872,20 @@ class PluginManager:
 
             return plugin_info
         except Exception as e:
-            self._track_failed_install_dir(
-                dir_name=dir_name,
-                plugin_path=desti_dir,
-                error=e,
-            )
+            if not skip_failed_tracking:
+                self._track_failed_install_dir(
+                    dir_name=dir_name,
+                    plugin_path=desti_dir,
+                    error=e,
+                )
             logger.warning(
                 f"安装插件 {dir_name} 失败，插件安装目录：{desti_dir}",
             )
             raise
         finally:
-            if temp_desti_dir != desti_dir and os.path.isdir(temp_desti_dir):
+            if (skip_failed_tracking or temp_desti_dir != desti_dir) and os.path.isdir(
+                temp_desti_dir
+            ):
                 try:
                     remove_dir(temp_desti_dir)
                 except Exception as e:
diff --git a/tests/test_plugin_manager.py b/tests/test_plugin_manager.py
index 6b287d052..f6e9ebbd8 100644
--- a/tests/test_plugin_manager.py
+++ b/tests/test_plugin_manager.py
@@ -28,13 +28,15 @@ class MockStar:
         self.info = {"repo": TEST_PLUGIN_REPO, "readme": ""}
 
 
-def _write_local_test_plugin(plugin_path: Path, repo_url: str):
+def _write_local_test_plugin(
+    plugin_path: Path, repo_url: str, version: str = "1.0.0"
+):
     """Creates a minimal valid plugin structure."""
     plugin_path.mkdir(parents=True, exist_ok=True)
     metadata = {
         "name": TEST_PLUGIN_NAME,
         "repo": repo_url,
-        "version": "1.0.0",
+        "version": version,
         "author": "AstrBot Team",
         "desc": "Local test plugin",
         "short_desc": "Local test short description",
@@ -386,6 +388,41 @@ async def test_install_plugin_from_file_dependency_install_flow(
         assert ("load", TEST_PLUGIN_DIR) in events
 
 
+@pytest.mark.asyncio
+async def test_install_plugin_from_file_conflict_keeps_failed_plugins_clean(
+    plugin_manager_pm: PluginManager,
+    local_updator: Path,
+    monkeypatch,
+    tmp_path: Path,
+):
+    zip_file_path = tmp_path / "plugin_upload_helloworld_v2.zip"
+    zip_file_path.write_text("placeholder", encoding="utf-8")
+    plugin_store_path = Path(plugin_manager_pm.plugin_store_path)
+    existing_upload_dirs = set(plugin_store_path.glob("plugin_upload_*"))
+
+    def mock_unzip_file(zip_path: str, target_dir: str) -> None:
+        assert zip_path == str(zip_file_path)
+        _write_local_test_plugin(
+            Path(target_dir),
+            TEST_PLUGIN_REPO,
+            version="2.0.0",
+        )
+
+    assert local_updator.is_dir()
+    monkeypatch.setattr(plugin_manager_pm.updator, "unzip_file", mock_unzip_file)
+
+    with pytest.raises(Exception, match=f"安装失败：目录 {TEST_PLUGIN_DIR} 已存在。"):
+        await plugin_manager_pm.install_plugin_from_file(str(zip_file_path))
+
+    new_upload_dirs = [
+        upload_dir
+        for upload_dir in plugin_store_path.glob("plugin_upload_*")
+        if upload_dir not in existing_upload_dirs
+    ]
+    assert plugin_manager_pm.failed_plugin_dict == {}
+    assert new_upload_dirs == []
+
+
 @pytest.mark.asyncio
 @pytest.mark.parametrize("dependency_install_fails", [False, True])
 async def test_reload_failed_plugin_dependency_install_flow(

From f6a99a25b9dd8ba506cb033dc7e732c28f0e2b9a Mon Sep 17 00:00:00 2001
From: jdjfjdsfj <152496519+jdjfjdsfj@users.noreply.github.com>
Date: Tue, 12 May 2026 08:43:53 +0800
Subject: [PATCH 13/51] Update API Key reference in knowledge-base.md (#8129)

* Update API Key reference in knowledge-base.md

* Update docs/zh/use/knowledge-base.md

Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>

---------

Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
---
 docs/zh/use/knowledge-base.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/zh/use/knowledge-base.md b/docs/zh/use/knowledge-base.md
index 5f4088e51..383c89078 100644
--- a/docs/zh/use/knowledge-base.md
+++ b/docs/zh/use/knowledge-base.md
@@ -55,6 +55,6 @@ AstrBot 支持多知识库管理。在聊天时，您可以**自由指定知识
 1. 打开 [硅基流动官网](https://cloud.siliconflow.cn/i/zMCYMSt2)，注册账户并完成实名认证。
 2. 打开 [API 密钥](https://cloud.siliconflow.cn/me/account/ak)。
 5. 填写 AstrBot OpenAI Embedding 模型提供商配置：
-   1. API Key 为刚刚申请的 PPIO 的 API Key
+   1. API Key 为刚刚申请的硅基流动的 API Key
    2. embedding api base 填写 `https://api.siliconflow.cn/v1`
    3. model 填写你选择的模型，此例子中为 `BAAI/bge-m3`。

From 1d3f54ca49c9f67feb38879003eb698838c1abd1 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 12 May 2026 23:16:19 +0800
Subject: [PATCH 14/51] chore(deps): bump pnpm/action-setup in the
 github-actions group (#8156)

Bumps the github-actions group with 1 update: [pnpm/action-setup](https://github.com/pnpm/action-setup).


Updates `pnpm/action-setup` from 6.0.5 to 6.0.7
- [Release notes](https://github.com/pnpm/action-setup/releases)
- [Commits](https://github.com/pnpm/action-setup/compare/v6.0.5...v6.0.7)

---
updated-dependencies:
- dependency-name: pnpm/action-setup
  dependency-version: 6.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/build-docs.yml   | 2 +-
 .github/workflows/dashboard_ci.yml | 2 +-
 .github/workflows/release.yml      | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/build-docs.yml b/.github/workflows/build-docs.yml
index 8074558b8..54cf0779f 100644
--- a/.github/workflows/build-docs.yml
+++ b/.github/workflows/build-docs.yml
@@ -13,7 +13,7 @@ jobs:
       - name: checkout
         uses: actions/checkout@v6
       - name: Setup pnpm
-        uses: pnpm/action-setup@v6.0.5
+        uses: pnpm/action-setup@v6.0.7
         with:
           version: 10.28.2
       - name: Setup Node.js
diff --git a/.github/workflows/dashboard_ci.yml b/.github/workflows/dashboard_ci.yml
index 8934697d8..385fa46d8 100644
--- a/.github/workflows/dashboard_ci.yml
+++ b/.github/workflows/dashboard_ci.yml
@@ -15,7 +15,7 @@ jobs:
         uses: actions/checkout@v6
 
       - name: Setup pnpm
-        uses: pnpm/action-setup@v6.0.5
+        uses: pnpm/action-setup@v6.0.7
         with:
           version: 10.28.2
 
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 04ebadf2b..f422444c7 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -51,7 +51,7 @@ jobs:
           echo "tag=$tag" >> "$GITHUB_OUTPUT"
 
       - name: Setup pnpm
-        uses: pnpm/action-setup@v6.0.5
+        uses: pnpm/action-setup@v6.0.7
         with:
           version: 10.28.2
 

From f86de988a47f6637f7d6fdf24ac030f923ab4d4d Mon Sep 17 00:00:00 2001
From: Yufeng He <40085740+he-yufeng@users.noreply.github.com>
Date: Tue, 12 May 2026 23:28:23 +0800
Subject: [PATCH 15/51] fix: keep Discord startup alive on command quota
 (#8061)

* fix: keep Discord startup alive on command quota

* Update discord_platform_adapter.py

---------

Co-authored-by: Weilong Liao <37870767+Soulter@users.noreply.github.com>
---
 .../discord/discord_platform_adapter.py       | 18 ++++-
 tests/test_discord_command_sync.py            | 71 +++++++++++++++++++
 2 files changed, 87 insertions(+), 2 deletions(-)
 create mode 100644 tests/test_discord_command_sync.py

diff --git a/astrbot/core/platform/sources/discord/discord_platform_adapter.py b/astrbot/core/platform/sources/discord/discord_platform_adapter.py
index 4c0b8eaf9..e5e023d3e 100644
--- a/astrbot/core/platform/sources/discord/discord_platform_adapter.py
+++ b/astrbot/core/platform/sources/discord/discord_platform_adapter.py
@@ -427,8 +427,22 @@ class DiscordPlatformAdapter(Platform):
 
         # 使用 Pycord 的方法同步指令
         # 注意：这可能需要一些时间，并且有频率限制
-        await self.client.sync_commands()
-        logger.info("[Discord] Command synchronization completed.")
+        try:
+            await self.client.sync_commands()
+            logger.info("[Discord] Command synchronization completed.")
+        except discord.HTTPException as e:
+            if self._is_daily_command_quota_error(e):
+                logger.warning(
+                    "[Discord] Daily application command create quota reached "
+                    "(30034); command sync skipped. Existing commands should "
+                    "continue to work until the quota resets.",
+                )
+                return
+            logger.warning(f"[Discord] Sync commands failed: {e}")
+
+    @staticmethod
+    def _is_daily_command_quota_error(error: discord.HTTPException) -> bool:
+        return getattr(error, "code", None) == 30034
 
     def _create_dynamic_callback(self, cmd_name: str):
         """为每个指令动态创建一个异步回调函数"""
diff --git a/tests/test_discord_command_sync.py b/tests/test_discord_command_sync.py
new file mode 100644
index 000000000..dee2db89d
--- /dev/null
+++ b/tests/test_discord_command_sync.py
@@ -0,0 +1,71 @@
+import asyncio
+from unittest.mock import Mock
+
+import pytest
+
+from tests.fixtures.mocks.discord import (
+    MockDiscordBuilder,
+    mock_discord_modules,  # noqa: F401
+)
+
+
+class DiscordSyncError(Exception):
+    def __init__(self, message: str, code: int | None = None) -> None:
+        super().__init__(message)
+        self.code = code
+
+
+def _build_adapter(monkeypatch: pytest.MonkeyPatch):
+    from astrbot.core.platform.sources.discord import discord_platform_adapter
+    from astrbot.core.platform.sources.discord.discord_platform_adapter import (
+        DiscordPlatformAdapter,
+    )
+
+    monkeypatch.setattr(discord_platform_adapter, "star_handlers_registry", [])
+    monkeypatch.setattr(
+        discord_platform_adapter.discord,
+        "HTTPException",
+        DiscordSyncError,
+        raising=False,
+    )
+
+    adapter = DiscordPlatformAdapter(
+        {"discord_command_register": True},
+        {},
+        asyncio.Queue(),
+    )
+    adapter.client = MockDiscordBuilder.create_client()
+    return adapter
+
+
+@pytest.mark.asyncio
+async def test_discord_command_sync_ignores_daily_quota(monkeypatch):
+    from astrbot.core.platform.sources.discord import discord_platform_adapter
+
+    adapter = _build_adapter(monkeypatch)
+    warning = Mock()
+    monkeypatch.setattr(discord_platform_adapter.logger, "warning", warning)
+    adapter.client.sync_commands.side_effect = DiscordSyncError(
+        "Max number of daily application command creates reached",
+        code=30034,
+    )
+
+    await adapter._collect_and_register_commands()
+
+    adapter.client.sync_commands.assert_awaited_once()
+    warning.assert_called_once()
+    assert "30034" in warning.call_args.args[0]
+
+
+@pytest.mark.asyncio
+async def test_discord_command_sync_keeps_other_errors_fatal(monkeypatch):
+    adapter = _build_adapter(monkeypatch)
+    adapter.client.sync_commands.side_effect = DiscordSyncError(
+        "Missing Access",
+        code=50001,
+    )
+
+    with pytest.raises(DiscordSyncError):
+        await adapter._collect_and_register_commands()
+
+    adapter.client.sync_commands.assert_awaited_once()

From 7ddf6371b9d57e70e23e0d6f16b5616be0491493 Mon Sep 17 00:00:00 2001
From: Weilong Liao <37870767+Soulter@users.noreply.github.com>
Date: Tue, 12 May 2026 23:46:57 +0800
Subject: [PATCH 16/51] fix(webui): enforce 12-char dashboard password policy
 with backend+frontend validation (#7338)

* fix(webui): enforce 12-char dashboard password policy with backend+frontend validation

* fix(i18n): update password policy hints and validation rules for improved security

* test: adapt dashboard auth fixtures for hashed default password

* fix(security): increase PBKDF2 iterations

* feat(auth): implement secure login challenge and proof verification

* chore: ruff format

* fix(auth): update md5 import syntax for consistency

* feat(dashboard): implement random password generation for empty dashboard password

* feat(auth): enforce plaintext password requirement for legacy MD5 hashes

* fix(i18n): update password hint texts to reflect auto-generated initial passwords

* feat(dashboard): implement password change requirement and reset logic

* feat(auth): implement account setup flow and password change requirements

* feat: Implement legacy password support and upgrade mechanism

- Added `hash_legacy_dashboard_password` function for MD5 hashing of passwords.
- Updated configuration handling to store both PBKDF2 and legacy password hashes.
- Introduced logic to check if password storage has been upgraded and if a password change is required.
- Modified dashboard authentication routes to handle legacy password checks and prompts for upgrades.
- Updated frontend to display warnings for legacy password storage and required upgrades.
- Enhanced tests to cover scenarios for legacy password handling and migration to new storage format.

* fix(logo): update text color styles to use CSS variables for consistency

* feat(dashboard): upgrade password storage and enforce change requirement

* fix(dashboard): update minimum password length from 12 to 10 characters

* fix(dashboard): update minimum password length from 10 to 8 characters

---------

Co-authored-by: RC-CHN <1051989940@qq.com>
---
 astrbot/cli/commands/cmd_conf.py              |  29 +-
 astrbot/core/config/astrbot_config.py         |  54 +-
 astrbot/core/config/default.py                |   5 +-
 astrbot/core/utils/auth_password.py           | 126 +++++
 astrbot/dashboard/password_state.py           |  94 ++++
 astrbot/dashboard/routes/auth.py              | 204 +++++++-
 astrbot/dashboard/routes/stat.py              |  51 +-
 astrbot/dashboard/server.py                   |  28 +-
 dashboard/package.json                        |   2 +-
 dashboard/pnpm-lock.yaml                      |  34 +-
 .../mdi-subset/materialdesignicons-subset.css |  14 +-
 .../materialdesignicons-webfont-subset.woff   | Bin 18600 -> 18772 bytes
 .../materialdesignicons-webfont-subset.woff2  | Bin 14984 -> 15112 bytes
 dashboard/src/components/shared/Logo.vue      |  21 +-
 .../src/i18n/locales/en-US/core/header.json   |  11 +-
 .../src/i18n/locales/en-US/features/auth.json |  24 +-
 .../locales/en-US/messages/validation.json    |   2 +-
 .../src/i18n/locales/ru-RU/core/header.json   |  15 +-
 .../src/i18n/locales/ru-RU/features/auth.json |  24 +-
 .../locales/ru-RU/messages/validation.json    |   2 +-
 .../src/i18n/locales/zh-CN/core/header.json   |  13 +-
 .../src/i18n/locales/zh-CN/features/auth.json |  24 +-
 .../locales/zh-CN/messages/validation.json    |   2 +-
 .../full/vertical-header/VerticalHeader.vue   |  97 +++-
 dashboard/src/router/AuthRoutes.ts            |   5 +
 dashboard/src/router/index.ts                 |   2 +-
 dashboard/src/stores/auth.ts                  |  71 ++-
 .../views/authentication/auth/LoginPage.vue   |  14 +
 .../views/authentication/auth/SetupPage.vue   | 124 +++++
 .../authentication/authForms/AuthLogin.vue    |  14 +-
 .../authentication/authForms/AuthSetup.vue    | 130 +++++
 tests/test_api_key_open_api.py                |  36 +-
 tests/test_dashboard.py                       | 479 +++++++++++++++++-
 tests/test_kb_import.py                       |  36 +-
 tests/unit/test_config.py                     | 129 +++++
 35 files changed, 1793 insertions(+), 123 deletions(-)
 create mode 100644 astrbot/core/utils/auth_password.py
 create mode 100644 astrbot/dashboard/password_state.py
 create mode 100644 dashboard/src/views/authentication/auth/SetupPage.vue
 create mode 100644 dashboard/src/views/authentication/authForms/AuthSetup.vue

diff --git a/astrbot/cli/commands/cmd_conf.py b/astrbot/cli/commands/cmd_conf.py
index 5a39cb2f7..cf583b9d5 100644
--- a/astrbot/cli/commands/cmd_conf.py
+++ b/astrbot/cli/commands/cmd_conf.py
@@ -1,4 +1,3 @@
-import hashlib
 import json
 import zoneinfo
 from collections.abc import Callable
@@ -6,6 +5,12 @@ from typing import Any
 
 import click
 
+from astrbot.core.utils.auth_password import (
+    hash_dashboard_password,
+    hash_legacy_dashboard_password,
+    validate_dashboard_password,
+)
+
 from ..utils import check_astrbot_root, get_astrbot_root
 
 
@@ -39,9 +44,11 @@ def _validate_dashboard_username(value: str) -> str:
 
 def _validate_dashboard_password(value: str) -> str:
     """Validate Dashboard password"""
-    if not value:
-        raise click.ClickException("Password cannot be empty")
-    return hashlib.md5(value.encode()).hexdigest()
+    try:
+        validate_dashboard_password(value)
+    except ValueError as e:
+        raise click.ClickException(str(e))
+    return value
 
 
 def _validate_timezone(value: str) -> str:
@@ -163,7 +170,19 @@ def set_config(key: str, value: str) -> None:
     try:
         old_value = _get_nested_item(config, key)
         validated_value = CONFIG_VALIDATORS[key](value)
-        _set_nested_item(config, key, validated_value)
+        if key == "dashboard.password":
+            _set_nested_item(
+                config,
+                "dashboard.pbkdf2_password",
+                hash_dashboard_password(validated_value),
+            )
+            _set_nested_item(
+                config,
+                "dashboard.password",
+                hash_legacy_dashboard_password(validated_value),
+            )
+        else:
+            _set_nested_item(config, key, validated_value)
         _save_config(config)
 
         click.echo(f"Config updated: {key}")
diff --git a/astrbot/core/config/astrbot_config.py b/astrbot/core/config/astrbot_config.py
index 63236c1d8..e23c5961e 100644
--- a/astrbot/core/config/astrbot_config.py
+++ b/astrbot/core/config/astrbot_config.py
@@ -4,6 +4,11 @@ import logging
 import os
 
 from astrbot.core.utils.astrbot_path import get_astrbot_data_path
+from astrbot.core.utils.auth_password import (
+    generate_dashboard_password,
+    hash_dashboard_password,
+    hash_legacy_dashboard_password,
+)
 
 from .default import DEFAULT_CONFIG, DEFAULT_VALUE_MAP
 
@@ -56,15 +61,62 @@ class AstrBotConfig(dict):
             if conf_str.startswith("\ufeff"):
                 conf_str = conf_str[1:]
             conf = json.loads(conf_str)
-
+        dashboard_conf = conf.get("dashboard")
+        legacy_dashboard_password_change_required = bool(
+            isinstance(dashboard_conf, dict)
+            and dashboard_conf.get("password_change_required", False)
+        )
+        if legacy_dashboard_password_change_required:
+            object.__setattr__(
+                self,
+                "_dashboard_password_change_required_from_config",
+                True,
+            )
         # 检查配置完整性，并插入
         has_new = self.check_config_integrity(default_config, conf)
+        if (
+            "dashboard" in conf
+            and isinstance(conf["dashboard"], dict)
+            and not conf["dashboard"].get("pbkdf2_password")
+            and not conf["dashboard"].get("password")
+        ):
+            self._reset_generated_dashboard_password(conf)
+            has_new = True
+        elif (
+            "dashboard" in conf
+            and isinstance(conf["dashboard"], dict)
+            and legacy_dashboard_password_change_required
+            and conf["dashboard"].get("pbkdf2_password")
+        ):
+            self._reset_generated_dashboard_password(conf)
+            has_new = True
         self.update(conf)
         if has_new:
             self.save_config()
 
         self.update(conf)
 
+    def _reset_generated_dashboard_password(self, conf: dict) -> None:
+        generated_password = generate_dashboard_password()
+        conf["dashboard"]["pbkdf2_password"] = hash_dashboard_password(
+            generated_password
+        )
+        conf["dashboard"]["password"] = hash_legacy_dashboard_password(
+            generated_password
+        )
+        conf["dashboard"]["password_storage_upgraded"] = True
+        conf["dashboard"]["password_change_required"] = True
+        object.__setattr__(
+            self,
+            "_generated_dashboard_password",
+            generated_password,
+        )
+        object.__setattr__(
+            self,
+            "_generated_dashboard_password_change_required",
+            True,
+        )
+
     def _config_schema_to_default_config(self, schema: dict) -> dict:
         """将 Schema 转换成 Config"""
         conf = {}
diff --git a/astrbot/core/config/default.py b/astrbot/core/config/default.py
index 8df7ae27b..763ca6361 100644
--- a/astrbot/core/config/default.py
+++ b/astrbot/core/config/default.py
@@ -244,7 +244,10 @@ DEFAULT_CONFIG = {
     "dashboard": {
         "enable": True,
         "username": "astrbot",
-        "password": "77b90590a8945a7d36c963981a307dc9",
+        "password": "",
+        "pbkdf2_password": "",
+        "password_storage_upgraded": False,
+        "password_change_required": False,
         "jwt_secret": "",
         "host": "0.0.0.0",
         "port": 6185,
diff --git a/astrbot/core/utils/auth_password.py b/astrbot/core/utils/auth_password.py
new file mode 100644
index 000000000..bbb5ff046
--- /dev/null
+++ b/astrbot/core/utils/auth_password.py
@@ -0,0 +1,126 @@
+"""Utilities for dashboard password hashing and verification."""
+
+import hashlib
+import hmac
+import re
+import secrets
+import string
+
+_PBKDF2_ITERATIONS = 600_000
+_PBKDF2_SALT_BYTES = 16
+_PBKDF2_ALGORITHM = "pbkdf2_sha256"
+_PBKDF2_FORMAT = f"{_PBKDF2_ALGORITHM}$"
+_LEGACY_MD5_LENGTH = 32
+_DASHBOARD_PASSWORD_MIN_LENGTH = 8
+_GENERATED_DASHBOARD_PASSWORD_LENGTH = 24
+DEFAULT_DASHBOARD_PASSWORD = "astrbot"
+
+
+def generate_dashboard_password() -> str:
+    """Generate a strong dashboard password that satisfies the complexity policy."""
+    alphabet = string.ascii_letters + string.digits
+    password_chars = [
+        secrets.choice(string.ascii_uppercase),
+        secrets.choice(string.ascii_lowercase),
+        secrets.choice(string.digits),
+        *(
+            secrets.choice(alphabet)
+            for _ in range(_GENERATED_DASHBOARD_PASSWORD_LENGTH - 3)
+        ),
+    ]
+    secrets.SystemRandom().shuffle(password_chars)
+    return "".join(password_chars)
+
+
+def hash_dashboard_password(raw_password: str) -> str:
+    """Return a salted hash for dashboard password using PBKDF2-HMAC-SHA256."""
+    if not isinstance(raw_password, str) or raw_password == "":
+        raise ValueError("Password cannot be empty")
+
+    salt = secrets.token_hex(_PBKDF2_SALT_BYTES)
+    digest = hashlib.pbkdf2_hmac(
+        "sha256",
+        raw_password.encode("utf-8"),
+        bytes.fromhex(salt),
+        _PBKDF2_ITERATIONS,
+    ).hex()
+    return f"{_PBKDF2_FORMAT}{_PBKDF2_ITERATIONS}${salt}${digest}"
+
+
+def hash_legacy_dashboard_password(raw_password: str) -> str:
+    """Return legacy MD5 hash for downgrade compatibility only."""
+    if not isinstance(raw_password, str) or raw_password == "":
+        raise ValueError("Password cannot be empty")
+    return hashlib.md5(raw_password.encode("utf-8")).hexdigest()
+
+
+def validate_dashboard_password(raw_password: str) -> None:
+    """Validate whether dashboard password meets the minimal complexity policy."""
+    if not isinstance(raw_password, str) or raw_password == "":
+        raise ValueError("Password cannot be empty")
+    if len(raw_password) < _DASHBOARD_PASSWORD_MIN_LENGTH:
+        raise ValueError(
+            f"Password must be at least {_DASHBOARD_PASSWORD_MIN_LENGTH} characters long"
+        )
+
+    if not re.search(r"[A-Z]", raw_password):
+        raise ValueError("Password must include at least one uppercase letter")
+    if not re.search(r"[a-z]", raw_password):
+        raise ValueError("Password must include at least one lowercase letter")
+    if not re.search(r"\d", raw_password):
+        raise ValueError("Password must include at least one digit")
+
+
+def _is_legacy_md5_hash(stored: str) -> bool:
+    return (
+        isinstance(stored, str)
+        and len(stored) == _LEGACY_MD5_LENGTH
+        and all(c in "0123456789abcdefABCDEF" for c in stored)
+    )
+
+
+def _is_pbkdf2_hash(stored: str) -> bool:
+    return isinstance(stored, str) and stored.startswith(_PBKDF2_FORMAT)
+
+
+def verify_dashboard_password(stored_hash: str, candidate_password: str) -> bool:
+    """Verify password against legacy md5 or new PBKDF2-SHA256 format."""
+    if not isinstance(stored_hash, str) or not isinstance(candidate_password, str):
+        return False
+
+    if _is_legacy_md5_hash(stored_hash):
+        # Keep compatibility with existing MD5-based deployments while requiring
+        # the real plaintext password, not the stored MD5 value itself.
+        candidate_md5 = hashlib.md5(candidate_password.encode("utf-8")).hexdigest()
+        return hmac.compare_digest(stored_hash.lower(), candidate_md5.lower())
+
+    if _is_pbkdf2_hash(stored_hash):
+        parts: list[str] = stored_hash.split("$")
+        if len(parts) != 4:
+            return False
+        _, iterations_s, salt, digest = parts
+        try:
+            iterations = int(iterations_s)
+            stored_key = bytes.fromhex(digest)
+            salt_bytes = bytes.fromhex(salt)
+        except (TypeError, ValueError):
+            return False
+        candidate_key = hashlib.pbkdf2_hmac(
+            "sha256",
+            candidate_password.encode("utf-8"),
+            salt_bytes,
+            iterations,
+        )
+        return hmac.compare_digest(stored_key, candidate_key)
+
+    return False
+
+
+def is_default_dashboard_password(stored_hash: str) -> bool:
+    """Check whether the password still equals the built-in default value."""
+    return verify_dashboard_password(stored_hash, DEFAULT_DASHBOARD_PASSWORD)
+
+
+def is_legacy_dashboard_password(stored_hash: str) -> bool:
+    """Check whether the password is still stored with legacy MD5."""
+    return _is_legacy_md5_hash(stored_hash)
diff --git a/astrbot/dashboard/password_state.py b/astrbot/dashboard/password_state.py
new file mode 100644
index 000000000..b55c0866a
--- /dev/null
+++ b/astrbot/dashboard/password_state.py
@@ -0,0 +1,94 @@
+from astrbot.core.config.astrbot_config import AstrBotConfig
+from astrbot.core.db import BaseDatabase
+from astrbot.core.utils.auth_password import (
+    hash_dashboard_password,
+    hash_legacy_dashboard_password,
+    is_legacy_dashboard_password,
+)
+
+PASSWORD_STORAGE_UPGRADED_KEY = "password_storage_upgraded"
+PASSWORD_CHANGE_REQUIRED_KEY = "password_change_required"
+
+
+def _set_dashboard_flag(config: AstrBotConfig, key: str, value: bool) -> None:
+    if config["dashboard"].get(key) == bool(value):
+        return
+    config["dashboard"][key] = bool(value)
+    config.save_config()
+
+
+def _has_usable_pbkdf2_password(config: AstrBotConfig) -> bool:
+    password = config["dashboard"].get("pbkdf2_password", "")
+    if not isinstance(password, str) or not password.startswith("pbkdf2_sha256$"):
+        return False
+
+    parts = password.split("$")
+    if len(parts) != 4:
+        return False
+
+    _, iterations, salt, digest = parts
+    try:
+        int(iterations)
+        bytes.fromhex(salt)
+        bytes.fromhex(digest)
+    except ValueError:
+        return False
+    return True
+
+
+async def is_password_storage_upgraded(
+    db: BaseDatabase,
+    config: AstrBotConfig,
+) -> bool:
+    config_upgraded = _has_usable_pbkdf2_password(config)
+    if config["dashboard"].get(PASSWORD_STORAGE_UPGRADED_KEY) != config_upgraded:
+        _set_dashboard_flag(config, PASSWORD_STORAGE_UPGRADED_KEY, config_upgraded)
+    return config_upgraded
+
+
+async def set_password_storage_upgraded(
+    db: BaseDatabase,
+    config: AstrBotConfig,
+    upgraded: bool,
+) -> None:
+    _set_dashboard_flag(config, PASSWORD_STORAGE_UPGRADED_KEY, upgraded)
+
+
+async def is_password_change_required(
+    db: BaseDatabase,
+    config: AstrBotConfig,
+) -> bool:
+    stored = config["dashboard"].get(PASSWORD_CHANGE_REQUIRED_KEY, None)
+    if stored is not None:
+        return bool(stored)
+
+    required = bool(
+        getattr(config, "_generated_dashboard_password_change_required", False)
+        or getattr(config, "_dashboard_password_change_required_from_config", False)
+    )
+    if required:
+        _set_dashboard_flag(config, PASSWORD_CHANGE_REQUIRED_KEY, True)
+    return required
+
+
+async def set_password_change_required(
+    db: BaseDatabase,
+    config: AstrBotConfig,
+    required: bool,
+) -> None:
+    _set_dashboard_flag(config, PASSWORD_CHANGE_REQUIRED_KEY, required)
+
+
+def get_dashboard_password_hash(config: AstrBotConfig, *, upgraded: bool) -> str:
+    if upgraded and _has_usable_pbkdf2_password(config):
+        return config["dashboard"].get("pbkdf2_password", "")
+
+    legacy_password = config["dashboard"].get("password", "")
+    if upgraded and not is_legacy_dashboard_password(legacy_password):
+        return ""
+    return legacy_password
+
+
+def set_dashboard_password_hashes(config: AstrBotConfig, raw_password: str) -> None:
+    config["dashboard"]["pbkdf2_password"] = hash_dashboard_password(raw_password)
+    config["dashboard"]["password"] = hash_legacy_dashboard_password(raw_password)
diff --git a/astrbot/dashboard/routes/auth.py b/astrbot/dashboard/routes/auth.py
index 6dc530b4b..20195a858 100644
--- a/astrbot/dashboard/routes/auth.py
+++ b/astrbot/dashboard/routes/auth.py
@@ -1,47 +1,169 @@
 import asyncio
 import datetime
+import os
 
 import jwt
-from quart import current_app, jsonify, make_response, request
+from quart import current_app, g, jsonify, make_response, request
 
 from astrbot import logger
 from astrbot.core import DEMO_MODE
+from astrbot.core.utils.auth_password import (
+    is_default_dashboard_password,
+    is_legacy_dashboard_password,
+    validate_dashboard_password,
+    verify_dashboard_password,
+)
+from astrbot.dashboard.password_state import (
+    get_dashboard_password_hash,
+    is_password_change_required,
+    is_password_storage_upgraded,
+    set_dashboard_password_hashes,
+    set_password_change_required,
+    set_password_storage_upgraded,
+)
 
 from .route import Response, Route, RouteContext
 
 DASHBOARD_JWT_COOKIE_NAME = "astrbot_dashboard_jwt"
 DASHBOARD_JWT_COOKIE_MAX_AGE = 7 * 24 * 60 * 60
+SKIP_DEFAULT_PASSWORD_AUTH_ENV = "ASTRBOT_DASHBOARD_SKIP_DEFAULT_PASSWORD_AUTH"
+SKIP_DEFAULT_PASSWORD_AUTH_ENV_LEGACY = "DASHBOARD_SKIP_DEFAULT_PASSWORD_AUTH"
+LOCAL_DASHBOARD_HOSTS = {"127.0.0.1", "localhost", "::1"}
 
 
 class AuthRoute(Route):
-    def __init__(self, context: RouteContext) -> None:
+    def __init__(self, context: RouteContext, db) -> None:
         super().__init__(context)
+        self.db = db
         self.routes = {
             "/auth/login": ("POST", self.login),
             "/auth/logout": ("POST", self.logout),
+            "/auth/setup-status": ("GET", self.setup_status),
+            "/auth/setup": ("POST", self.setup),
+            "/auth/setup-authenticated": ("POST", self.setup_authenticated),
             "/auth/account/edit": ("POST", self.edit_account),
         }
         self.register_routes()
 
+    async def setup_status(self):
+        return (
+            Response()
+            .ok(
+                {
+                    "setup_required": await self._is_setup_required(),
+                    "skip_default_password_auth": self._can_skip_default_password_auth(),
+                    "password_upgrade_required": not await is_password_storage_upgraded(
+                        self.db,
+                        self.config,
+                    ),
+                }
+            )
+            .__dict__
+        )
+
+    async def setup(self):
+        if not self._can_skip_default_password_auth():
+            return Response().error("Setup without password is not enabled").__dict__
+        if not await self._is_setup_required():
+            return Response().error("Setup is not required").__dict__
+
+        return await self._complete_setup()
+
+    async def setup_authenticated(self):
+        if not await self._is_setup_required():
+            return Response().error("Setup is not required").__dict__
+        if not isinstance(getattr(g, "username", None), str):
+            return Response().error("未授权").__dict__
+
+        return await self._complete_setup()
+
+    async def _complete_setup(self):
+        post_data = await request.json
+        if not isinstance(post_data, dict):
+            return Response().error("Invalid request payload").__dict__
+
+        new_username = post_data.get("username")
+        new_password = post_data.get("password")
+        confirm_password = post_data.get("confirm_password")
+        if not isinstance(new_username, str) or len(new_username.strip()) < 3:
+            return Response().error("用户名长度至少3位").__dict__
+        if not isinstance(new_password, str):
+            return Response().error("新密码无效").__dict__
+        if not isinstance(confirm_password, str) or confirm_password != new_password:
+            return Response().error("两次输入的新密码不一致").__dict__
+
+        try:
+            validate_dashboard_password(new_password)
+        except ValueError as e:
+            return Response().error(str(e)).__dict__
+
+        username = new_username.strip()
+        self.config["dashboard"]["username"] = username
+        set_dashboard_password_hashes(self.config, new_password)
+        await set_password_storage_upgraded(self.db, self.config, True)
+        await set_password_change_required(self.db, self.config, False)
+        self.config.save_config()
+
+        token = self.generate_jwt(username)
+        payload = Response().ok(
+            {
+                "token": token,
+                "username": username,
+                "change_pwd_hint": False,
+                "legacy_pwd_hint": False,
+                "password_upgrade_required": False,
+            },
+            "Setup completed successfully",
+        )
+        response = await make_response(jsonify(payload.__dict__))
+        self._set_dashboard_jwt_cookie(response, token)
+        return response
+
     async def login(self):
         username = self.config["dashboard"]["username"]
-        password = self.config["dashboard"]["password"]
+        storage_upgraded = await is_password_storage_upgraded(self.db, self.config)
+        password = get_dashboard_password_hash(self.config, upgraded=storage_upgraded)
         post_data = await request.json
-        if post_data["username"] == username and post_data["password"] == password:
+
+        req_username = (
+            post_data.get("username") if isinstance(post_data, dict) else None
+        )
+        req_password = (
+            post_data.get("password") if isinstance(post_data, dict) else None
+        )
+        if not isinstance(req_username, str) or not isinstance(req_password, str):
+            return Response().error("Invalid request payload").__dict__
+
+        login_verified = req_username == username and verify_dashboard_password(
+            password, req_password
+        )
+
+        if login_verified:
             change_pwd_hint = False
+            legacy_pwd_hint = is_legacy_dashboard_password(password)
+            password_change_required = await is_password_change_required(
+                self.db,
+                self.config,
+            )
             if (
-                username == "astrbot"
-                and password == "77b90590a8945a7d36c963981a307dc9"
+                storage_upgraded
+                and username == "astrbot"
+                and is_default_dashboard_password(password)
                 and not DEMO_MODE
             ):
                 change_pwd_hint = True
+                legacy_pwd_hint = True
                 logger.warning("为了保证安全，请尽快修改默认密码。")
+            if password_change_required and not DEMO_MODE:
+                change_pwd_hint = True
             token = self.generate_jwt(username)
             payload = Response().ok(
                 {
                     "token": token,
                     "username": username,
                     "change_pwd_hint": change_pwd_hint,
+                    "legacy_pwd_hint": legacy_pwd_hint,
+                    "password_upgrade_required": not storage_upgraded,
                 },
             )
             response = await make_response(jsonify(payload.__dict__))
@@ -65,29 +187,50 @@ class AuthRoute(Route):
                 .__dict__
             )
 
-        password = self.config["dashboard"]["password"]
+        storage_upgraded = await is_password_storage_upgraded(self.db, self.config)
+        password = get_dashboard_password_hash(self.config, upgraded=storage_upgraded)
         post_data = await request.json
+        if not isinstance(post_data, dict):
+            return Response().error("Invalid request payload").__dict__
 
-        if post_data["password"] != password:
+        req_password = post_data.get("password")
+        if not isinstance(req_password, str):
+            return Response().error("Invalid request payload").__dict__
+
+        if not verify_dashboard_password(password, req_password):
             return Response().error("原密码错误").__dict__
 
         new_pwd = post_data.get("new_password", None)
         new_username = post_data.get("new_username", None)
+        password_change_required = await is_password_change_required(
+            self.db,
+            self.config,
+        )
+        if (not storage_upgraded or password_change_required) and not new_pwd:
+            return Response().error("请设置新密码以完成安全升级").__dict__
         if not new_pwd and not new_username:
             return Response().error("新用户名和新密码不能同时为空").__dict__
 
         # Verify password confirmation
         if new_pwd:
+            if not isinstance(new_pwd, str):
+                return Response().error("新密码无效").__dict__
             confirm_pwd = post_data.get("confirm_password", None)
-            if confirm_pwd != new_pwd:
+            if not isinstance(confirm_pwd, str) or confirm_pwd != new_pwd:
                 return Response().error("两次输入的新密码不一致").__dict__
-            self.config["dashboard"]["password"] = new_pwd
+            try:
+                validate_dashboard_password(new_pwd)
+            except ValueError as e:
+                return Response().error(str(e)).__dict__
+            set_dashboard_password_hashes(self.config, new_pwd)
+            await set_password_storage_upgraded(self.db, self.config, True)
+            await set_password_change_required(self.db, self.config, False)
         if new_username:
             self.config["dashboard"]["username"] = new_username
 
         self.config.save_config()
 
-        return Response().ok(None, "修改成功").__dict__
+        return Response().ok(None, "Updated account successfully").__dict__
 
     def generate_jwt(self, username):
         payload = {
@@ -101,6 +244,45 @@ class AuthRoute(Route):
         token = jwt.encode(payload, jwt_token, algorithm="HS256")
         return token
 
+    async def _is_setup_required(self) -> bool:
+        if DEMO_MODE:
+            return False
+
+        dashboard_config = self.config["dashboard"]
+        password_change_required = await is_password_change_required(
+            self.db,
+            self.config,
+        )
+        if password_change_required:
+            return True
+
+        storage_upgraded = await is_password_storage_upgraded(self.db, self.config)
+        if not storage_upgraded:
+            return False
+
+        return dashboard_config.get(
+            "username"
+        ) == "astrbot" and is_default_dashboard_password(
+            dashboard_config.get("pbkdf2_password", "")
+        )
+
+    def _can_skip_default_password_auth(self) -> bool:
+        if not self._env_flag_enabled(SKIP_DEFAULT_PASSWORD_AUTH_ENV):
+            return False
+        host = (
+            os.environ.get("DASHBOARD_HOST")
+            or os.environ.get("ASTRBOT_DASHBOARD_HOST")
+            or self.config["dashboard"].get("host", "")
+        )
+        return str(host).strip().lower() in LOCAL_DASHBOARD_HOSTS
+
+    @staticmethod
+    def _env_flag_enabled(name: str) -> bool:
+        value = os.environ.get(name)
+        if value is None and name == SKIP_DEFAULT_PASSWORD_AUTH_ENV:
+            value = os.environ.get(SKIP_DEFAULT_PASSWORD_AUTH_ENV_LEGACY)
+        return str(value or "").strip().lower() in {"1", "true", "yes", "on"}
+
     @staticmethod
     def _use_secure_dashboard_jwt_cookie() -> bool:
         return bool(
diff --git a/astrbot/dashboard/routes/stat.py b/astrbot/dashboard/routes/stat.py
index b02091d5d..060e4c4e2 100644
--- a/astrbot/dashboard/routes/stat.py
+++ b/astrbot/dashboard/routes/stat.py
@@ -12,7 +12,7 @@ from pathlib import Path
 import aiohttp
 import psutil
 from quart import request
-from sqlmodel import select
+from sqlmodel import col, select
 
 from astrbot.core import DEMO_MODE, logger
 from astrbot.core.config import VERSION
@@ -21,9 +21,18 @@ from astrbot.core.db import BaseDatabase
 from astrbot.core.db.migration.helper import check_migration_needed_v4
 from astrbot.core.db.po import ProviderStat
 from astrbot.core.utils.astrbot_path import get_astrbot_path
+from astrbot.core.utils.auth_password import (
+    is_default_dashboard_password,
+    is_legacy_dashboard_password,
+)
 from astrbot.core.utils.io import get_dashboard_version
 from astrbot.core.utils.storage_cleaner import StorageCleaner
 from astrbot.core.utils.version_comparator import VersionComparator
+from astrbot.dashboard.password_state import (
+    get_dashboard_password_hash,
+    is_password_change_required,
+    is_password_storage_upgraded,
+)
 
 from .route import Response, Route, RouteContext
 
@@ -71,17 +80,37 @@ class StatRoute(Route):
         hours, minutes = divmod(minutes, 60)
         return {"hours": hours, "minutes": minutes, "seconds": seconds}
 
-    def is_default_cred(self):
-        username = self.config["dashboard"]["username"]
-        password = self.config["dashboard"]["password"]
-        return (
-            username == "astrbot"
-            and password == "77b90590a8945a7d36c963981a307dc9"
-            and not DEMO_MODE
+    async def is_default_cred(self):
+        password_change_required = await is_password_change_required(
+            self.db_helper,
+            self.config,
         )
+        if password_change_required:
+            return not DEMO_MODE
+
+        storage_upgraded = await is_password_storage_upgraded(
+            self.db_helper,
+            self.config,
+        )
+        if not storage_upgraded:
+            return False
+
+        username = self.config["dashboard"]["username"]
+        password = get_dashboard_password_hash(self.config, upgraded=True)
+        return (
+            username == "astrbot" and is_default_dashboard_password(password)
+        ) and not DEMO_MODE
 
     async def get_version(self):
         need_migration = await check_migration_needed_v4(self.core_lifecycle.db)
+        storage_upgraded = await is_password_storage_upgraded(
+            self.db_helper,
+            self.config,
+        )
+        password = get_dashboard_password_hash(
+            self.config,
+            upgraded=storage_upgraded,
+        )
 
         return (
             Response()
@@ -89,7 +118,9 @@ class StatRoute(Route):
                 {
                     "version": VERSION,
                     "dashboard_version": await get_dashboard_version(),
-                    "change_pwd_hint": self.is_default_cred(),
+                    "change_pwd_hint": await self.is_default_cred(),
+                    "legacy_pwd_hint": is_legacy_dashboard_password(password),
+                    "password_upgrade_required": not storage_upgraded,
                     "need_migration": need_migration,
                 },
             )
@@ -226,7 +257,7 @@ class StatRoute(Route):
                         ProviderStat.agent_type == "internal",
                         ProviderStat.created_at >= query_start_utc,
                     )
-                    .order_by(ProviderStat.created_at.asc())
+                    .order_by(col(ProviderStat.created_at).asc())
                 )
                 records = result.scalars().all()
 
diff --git a/astrbot/dashboard/server.py b/astrbot/dashboard/server.py
index d926cb06d..1211d4f75 100644
--- a/astrbot/dashboard/server.py
+++ b/astrbot/dashboard/server.py
@@ -153,7 +153,7 @@ class AstrBotDashboard:
         self.cr = ConfigRoute(self.context, core_lifecycle)
         self.lr = LogRoute(self.context, core_lifecycle.log_broker)
         self.sfr = StaticFileRoute(self.context)
-        self.ar = AuthRoute(self.context)
+        self.ar = AuthRoute(self.context, db)
         self.api_key_route = ApiKeyRoute(self.context, db)
         self.chat_route = ChatRoute(self.context, db, core_lifecycle)
         self.open_api_route = OpenApiRoute(
@@ -241,15 +241,21 @@ class AstrBotDashboard:
             await self.db.touch_api_key(api_key.key_id)
             return None
 
-        allowed_endpoints = [
+        allowed_exact_endpoints = {
             "/api/auth/login",
             "/api/auth/logout",
+            "/api/auth/setup-status",
+            "/api/auth/setup",
+        }
+        allowed_endpoint_prefixes = [
             "/api/file",
             "/api/platform/webhook",
             "/api/stat/start-time",
             "/api/backup/download",  # 备份下载使用 URL 参数传递 token
         ]
-        if any(request.path.startswith(prefix) for prefix in allowed_endpoints):
+        if request.path in allowed_exact_endpoints or any(
+            request.path.startswith(prefix) for prefix in allowed_endpoint_prefixes
+        ):
             return None
         is_plugin_page_path = PluginPageAuth.is_protected_path(request.path)
         token = self._extract_dashboard_jwt()
@@ -373,6 +379,20 @@ class AstrBotDashboard:
             logger.info("Initialized random JWT secret for dashboard.")
         self._jwt_secret = self.config["dashboard"]["jwt_secret"]
 
+    def _build_dashboard_credentials_display(self) -> str:
+        username = self.config["dashboard"].get("username", "astrbot")
+        generated_password = getattr(self.config, "_generated_dashboard_password", None)
+        if not generated_password:
+            return f"   ➜  Username: {username}\n ✨✨✨\n"
+
+        credentials_display = (
+            f"   ➜  Initial username: {username}\n"
+            f"   ➜  Initial password: {generated_password}\n"
+            "   ➜  Change it after logging in\n ✨✨✨\n"
+        )
+        object.__setattr__(self.config, "_generated_dashboard_password", None)
+        return credentials_display
+
     @staticmethod
     def _resolve_dashboard_ssl_config(
         ssl_config: dict,
@@ -492,7 +512,7 @@ class AstrBotDashboard:
         parts.append(f"   ➜  Local: {scheme}://localhost:{port}\n")
         for ip in ip_addr:
             parts.append(f"   ➜  Network: {scheme}://{ip}:{port}\n")
-        parts.append("   ➜  Default username/password: astrbot / astrbot\n ✨✨✨\n")
+        parts.append(self._build_dashboard_credentials_display())
         display = "".join(parts)
 
         if not ip_addr:
diff --git a/dashboard/package.json b/dashboard/package.json
index 7770debea..709e381cc 100644
--- a/dashboard/package.json
+++ b/dashboard/package.json
@@ -25,7 +25,7 @@
     "date-fns": "2.30.0",
     "dompurify": "^3.3.2",
     "event-source-polyfill": "^1.0.31",
-    "js-md5": "^0.8.3",
+    "highlight.js": "11.11.1",
     "katex": "^0.16.27",
     "lodash": "4.17.23",
     "markdown-it": "^14.1.1",
diff --git a/dashboard/pnpm-lock.yaml b/dashboard/pnpm-lock.yaml
index c60569271..df5c50503 100644
--- a/dashboard/pnpm-lock.yaml
+++ b/dashboard/pnpm-lock.yaml
@@ -5,8 +5,8 @@ settings:
   excludeLinksFromLockfile: false
 
 overrides:
-  immutable: "4.3.8"
-  lodash-es: "4.17.23"
+  immutable: 4.3.8
+  lodash-es: 4.17.23
 
 importers:
 
@@ -42,9 +42,9 @@ importers:
       event-source-polyfill:
         specifier: ^1.0.31
         version: 1.0.31
-      js-md5:
-        specifier: ^0.8.3
-        version: 0.8.3
+      highlight.js:
+        specifier: 11.11.1
+        version: 11.11.1
       katex:
         specifier: ^0.16.27
         version: 0.16.28
@@ -537,66 +537,79 @@ packages:
     resolution: {integrity: sha512-t4ONHboXi/3E0rT6OZl1pKbl2Vgxf9vJfWgmUoCEVQVxhW6Cw/c8I6hbbu7DAvgp82RKiH7TpLwxnJeKv2pbsw==}
     cpu: [arm]
     os: [linux]
+    libc: [glibc]
 
   '@rollup/rollup-linux-arm-musleabihf@4.59.0':
     resolution: {integrity: sha512-CikFT7aYPA2ufMD086cVORBYGHffBo4K8MQ4uPS/ZnY54GKj36i196u8U+aDVT2LX4eSMbyHtyOh7D7Zvk2VvA==}
     cpu: [arm]
     os: [linux]
+    libc: [musl]
 
   '@rollup/rollup-linux-arm64-gnu@4.59.0':
     resolution: {integrity: sha512-jYgUGk5aLd1nUb1CtQ8E+t5JhLc9x5WdBKew9ZgAXg7DBk0ZHErLHdXM24rfX+bKrFe+Xp5YuJo54I5HFjGDAA==}
     cpu: [arm64]
     os: [linux]
+    libc: [glibc]
 
   '@rollup/rollup-linux-arm64-musl@4.59.0':
     resolution: {integrity: sha512-peZRVEdnFWZ5Bh2KeumKG9ty7aCXzzEsHShOZEFiCQlDEepP1dpUl/SrUNXNg13UmZl+gzVDPsiCwnV1uI0RUA==}
     cpu: [arm64]
     os: [linux]
+    libc: [musl]
 
   '@rollup/rollup-linux-loong64-gnu@4.59.0':
     resolution: {integrity: sha512-gbUSW/97f7+r4gHy3Jlup8zDG190AuodsWnNiXErp9mT90iCy9NKKU0Xwx5k8VlRAIV2uU9CsMnEFg/xXaOfXg==}
     cpu: [loong64]
     os: [linux]
+    libc: [glibc]
 
   '@rollup/rollup-linux-loong64-musl@4.59.0':
     resolution: {integrity: sha512-yTRONe79E+o0FWFijasoTjtzG9EBedFXJMl888NBEDCDV9I2wGbFFfJQQe63OijbFCUZqxpHz1GzpbtSFikJ4Q==}
     cpu: [loong64]
     os: [linux]
+    libc: [musl]
 
   '@rollup/rollup-linux-ppc64-gnu@4.59.0':
     resolution: {integrity: sha512-sw1o3tfyk12k3OEpRddF68a1unZ5VCN7zoTNtSn2KndUE+ea3m3ROOKRCZxEpmT9nsGnogpFP9x6mnLTCaoLkA==}
     cpu: [ppc64]
     os: [linux]
+    libc: [glibc]
 
   '@rollup/rollup-linux-ppc64-musl@4.59.0':
     resolution: {integrity: sha512-+2kLtQ4xT3AiIxkzFVFXfsmlZiG5FXYW7ZyIIvGA7Bdeuh9Z0aN4hVyXS/G1E9bTP/vqszNIN/pUKCk/BTHsKA==}
     cpu: [ppc64]
     os: [linux]
+    libc: [musl]
 
   '@rollup/rollup-linux-riscv64-gnu@4.59.0':
     resolution: {integrity: sha512-NDYMpsXYJJaj+I7UdwIuHHNxXZ/b/N2hR15NyH3m2qAtb/hHPA4g4SuuvrdxetTdndfj9b1WOmy73kcPRoERUg==}
     cpu: [riscv64]
     os: [linux]
+    libc: [glibc]
 
   '@rollup/rollup-linux-riscv64-musl@4.59.0':
     resolution: {integrity: sha512-nLckB8WOqHIf1bhymk+oHxvM9D3tyPndZH8i8+35p/1YiVoVswPid2yLzgX7ZJP0KQvnkhM4H6QZ5m0LzbyIAg==}
     cpu: [riscv64]
     os: [linux]
+    libc: [musl]
 
   '@rollup/rollup-linux-s390x-gnu@4.59.0':
     resolution: {integrity: sha512-oF87Ie3uAIvORFBpwnCvUzdeYUqi2wY6jRFWJAy1qus/udHFYIkplYRW+wo+GRUP4sKzYdmE1Y3+rY5Gc4ZO+w==}
     cpu: [s390x]
     os: [linux]
+    libc: [glibc]
 
   '@rollup/rollup-linux-x64-gnu@4.59.0':
     resolution: {integrity: sha512-3AHmtQq/ppNuUspKAlvA8HtLybkDflkMuLK4DPo77DfthRb71V84/c4MlWJXixZz4uruIH4uaa07IqoAkG64fg==}
     cpu: [x64]
     os: [linux]
+    libc: [glibc]
 
   '@rollup/rollup-linux-x64-musl@4.59.0':
     resolution: {integrity: sha512-2UdiwS/9cTAx7qIUZB/fWtToJwvt0Vbo0zmnYt7ED35KPg13Q0ym1g442THLC7VyI6JfYTP4PiSOWyoMdV2/xg==}
     cpu: [x64]
     os: [linux]
+    libc: [musl]
 
   '@rollup/rollup-openbsd-x64@4.59.0':
     resolution: {integrity: sha512-M3bLRAVk6GOwFlPTIxVBSYKUaqfLrn8l0psKinkCFxl4lQvOSz8ZrKDz2gxcBwHFpci0B6rttydI4IpS4IS/jQ==}
@@ -1903,6 +1916,10 @@ packages:
     resolution: {integrity: sha512-F/1DnUGPopORZi0ni+CvrCgHQ5FyEAHRLSApuYWMmrbSwoN2Mn/7k+Gl38gJnR7yyDZk6WLXwiGod1JOWNDKGw==}
     hasBin: true
 
+  highlight.js@11.11.1:
+    resolution: {integrity: sha512-Xwwo44whKBVCYoliBQwaPvtd/2tYFkRQtXDWj1nackaV2JPXx3L0+Jvd8/qCJ2p+ML0/XVkJ2q+Mr+UVdpJK5w==}
+    engines: {node: '>=12.0.0'}
+
   hookified@1.15.1:
     resolution: {integrity: sha512-MvG/clsADq1GPM2KGo2nyfaWVyn9naPiXrqIe4jYjXNZQt238kWyOGrsyc/DmRAQ+Re6yeo6yX/yoNCG5KAEVg==}
 
@@ -1985,9 +2002,6 @@ packages:
     resolution: {integrity: sha512-7vuh85V5cdDofPyxn58nrPjBktZo0u9x1g8WtjQol+jZDaE+fhN+cIvTj11GndBnMnyfrUOG1sZQxCdjKh+DKg==}
     engines: {node: '>= 10.13.0'}
 
-  js-md5@0.8.3:
-    resolution: {integrity: sha512-qR0HB5uP6wCuRMrWPTrkMaev7MJZwJuuw4fnwAzRgP4J4/F8RwtodOKpGp4XpqsLBFzzgqIO42efFAyz2Et6KQ==}
-
   js-yaml@4.1.1:
     resolution: {integrity: sha512-qQKT4zQxXl8lLwBtHMWwaTcGfFOZviOJet3Oy/xmGk2gZH677CJM9EvtfdSkgWcATZhj/55JZ0rmy3myCT5lsA==}
     hasBin: true
@@ -4913,6 +4927,8 @@ snapshots:
 
   he@1.2.0: {}
 
+  highlight.js@11.11.1: {}
+
   hookified@1.15.1: {}
 
   html-void-elements@3.0.0: {}
@@ -4975,8 +4991,6 @@ snapshots:
       merge-stream: 2.0.0
       supports-color: 8.1.1
 
-  js-md5@0.8.3: {}
-
   js-yaml@4.1.1:
     dependencies:
       argparse: 2.0.1
diff --git a/dashboard/src/assets/mdi-subset/materialdesignicons-subset.css b/dashboard/src/assets/mdi-subset/materialdesignicons-subset.css
index 187348bca..a3507d2ab 100644
--- a/dashboard/src/assets/mdi-subset/materialdesignicons-subset.css
+++ b/dashboard/src/assets/mdi-subset/materialdesignicons-subset.css
@@ -1,4 +1,4 @@
-/* Auto-generated MDI subset – 260 icons */
+/* Auto-generated MDI subset – 263 icons */
 /* Do not edit manually. Run: pnpm run subset-icons */
 
 @font-face {
@@ -28,6 +28,10 @@
   content: "\F0009";
 }
 
+.mdi-account-edit::before {
+  content: "\F06BC";
+}
+
 .mdi-account-edit-outline::before {
   content: "\F0FFB";
 }
@@ -652,6 +656,10 @@
   content: "\F033E";
 }
 
+.mdi-lock-check::before {
+  content: "\F139A";
+}
+
 .mdi-lock-check-outline::before {
   content: "\F16A8";
 }
@@ -660,6 +668,10 @@
   content: "\F0341";
 }
 
+.mdi-lock-plus::before {
+  content: "\F05FB";
+}
+
 .mdi-lock-plus-outline::before {
   content: "\F16B2";
 }
diff --git a/dashboard/src/assets/mdi-subset/materialdesignicons-webfont-subset.woff b/dashboard/src/assets/mdi-subset/materialdesignicons-webfont-subset.woff
index e8c5b375dd4cc3ed4bcf7a1e227531f3baaf88e2..7549c05d40fdc4a562d4084e2f74307b83774ce1 100644
GIT binary patch
delta 18116
zcmV)TK(W85kpa|_0Tg#nMn(Vu00000NmKv}00000gy@kJOMjOD01BiUU0y_IY<Xq?
z00s;I06;AO0CRr0OzjV7Wnp9h07g6j001fg001^&B0zv>Xk}pl07hs4001BW001Nd
z#sR-*ZFG1507i%a000sI00I;O0001NZ)0Hq07jeu00I&K00I(J>^8e?VR&!=07$R^
z0018V001BYKOO;vZeeX@002nP0001V0002O45uT>aBp*T002ouk^Fpr1*}zd0LSs~
zz4rz8)p-i<0*VY<5#}r~km<0M8GzVMCWtW;3$Z&GIIsg-jM<8T9TTwwyRdb3x8L*g
zZJ+o3@4Xx6{LlXcPz9RQhZ=2Zhrel?$^SneQ275Muc_F2l<zB8De#>Is|0!N;DBbk
zX+Vn|9nfmW2K2JK2l?!OgTf84iv!y2$AMc{@OeO|{W_q_{uubXs0`6i$K7@ft(ko*
zDjRB~<A&Wxqa63M+XW1;I|eLcch)YB2ikoC2HAZBmbFs?mb23XmbWtkR<N@IR<w5o
z<@{CV2dr!#3d*^xJQ1*}eM4_Kc3!K_U9~(;L#_K$?Q!h>Rr_myDaUKs0RijS6#|CY
zl>&y_RRY$vLj%^cYX_`vw+`6A?w~P_M_A{lI^OX}dvt(vS#=+)vmI}2uL&4sUkcd7
zz8;k8qWVt2X7-PO&Fx?M+wm3@wU&UbY(2p3s`UhHW8L4{K*z4H+MocBXU%=C4R^e~
zT`ypa9T}8su(ol3z&N{QfcsY)8!+DPs&akqWcLgx|28pTH@k08uI1VR0ee{2M(uFN
z<@=ru*vl?bIS&);;()#F#{uPMe-$vv{u1CCY^nuJwrv4^e^XDues=kQ{jKYxsa*eV
zSJQ?8z3s?=1MPM}dHywx3pm*B5^#t;JK#_|J>W1qBfx!sZJHHuxSbPlguOrDNIO5^
zDEn}L>!|7ZfT{MyfMe{-0n_Z;D%Z@h_S1mlDVo~?POwV{oM^WVILYo1aI)P!;1oMC
z;8c5Hz-jilfYa^lfHUlzfHUpffV1qp0OzUsiGXwLGg|1_Icr`N;G8wT6)@9!oo)Wm
z@wxWT0O!(wrC+pE9Q*w(odM_Dr2;OnUQ=4i^ZG(NB;aDZdcY-iLcpbVQov<)O2FlI
zc7XfWaznrs_O^g4?fihN?27?c+r<H%_bs0WTuaef54g?_54he=3|P`09N=8G9va~H
zx6TW=(cTwu6GgAS>gV`oyJo;G_K<*E?L`4@d#~$%18%nu1l(a41>8wd?+EbPTwf#L
zZhJ()J@&i+x2t|hz`b^EfZJGqD!}z#e<{H4tiK=N{MA1Tc+h(Ps(<6yYk&QpfJZ3W
zS_2-nqXQnZlL8*MQv+OU?ZX3}v|hX0M>uv{+9w4putx{D9@~!zSZHSicztSrHQ+h>
zL4fCfWygeo7wqH!kAKG%0q$$ZRRNx_9rpyhVxJE1vpYTvc+LJD;Bn}j7U2D%b3uUj
zz0MZ`-n5GXJa0O`3h;W+H8{ZgN!O5ockQ(S?^)MJ*R75{4qbNzxGi1(1m&|vF(}|8
zyK7KBcN9|sKCzz%xW<b=13aGHs|Dq=N%ydSfG_Oc0bg3Tqq|%KZhQClLHYc$#Ondy
zP%Jq<;9H8`V*<Xj7YF#h-uDLlK+&f?D4%`$ED`XNofYu2{WZXQNKfAY|JL(wz;6_d
zM!@fO?Evq|jbQ=qYh$AT@6U~`13ZR}sR7Pq!*i`so(q0<<Bp)>b7S8@LB;3Be#-?Q
z74KvHeNF#69sArkV6~v)J%7NspwjvuqX%`f0C=30lm7)C0a2441{Qy8%XVB+99bU6
zPBuPZ?D5#6@x+l$9A};QF=w+m6WG!5tjC!ocDCD-c(QRkncW$-GtTbBnVFLW-2cC~
zfCieBoNWU2xK+4y>puSf`=8`|9Q=_1>2X0$hNHTg7E0CimR8rvJSjHUj}yWf_4=85
z-KgDN8(pp4O?vgSb@+emX{Kh|u;DnK<E~#Ld*lk2;If>>ag|clTz6VdtFEb<s>BFC
zuGlHXd}-ZRKkjR;*Pw25Tgjvg^R@XxI-_ix`AVf#spPG@Hw%T$yYGYDEtjg5f}D&6
z;V+hy3l*|jX;!PvO53{ucGj^=x6oF=8|*_XcuwR(&<dm3P~d+XDDp(H;O{y|_V)X|
zq1_|>=~m<YnS=ZJNgLN|KK4sxsztCHxO+BH4$g7M`6ti!aRE-^qHx9+dAaB)jiv}+
z!tKNJ|M}=&{Q}fT`lB9ckM@V%u4~(HEB*E7=}2&LBk5?O>1g}bbNc5$uRlk6*SX7h
zba{N|fINwJR+N7ty-_5C@g2L~Z^n0ij@{`fMNxB1QR|SyH;$kE1g+6X(h5y@b9P-J
zlV`K}@-^ae^IR2<N-?4snq$B`ff<vI5u;>^YNLLf!03wW)sm1_>n*~qKd|2JblZ#D
z_iisPZZEAa>gy+=Z2bW#Th79VxNz3#Ea6qSC9f~8Kk$FV1M9;SUd+<xUjIAt+vFwa
z*AzTg6Llh*Emae11RD!e=~MdiNq_8vax43*1ygw9pRJV7k(c!6vn~09F@N%R3+Ku!
z|Llpt;&`46;2m(>or7_AjH(G8R4s|nOM+-94Pl<ZR!M8H)k(eOG@3?hi@>(IZZ?SB
zg+F&Qo-u#))wmvC)s0MibH!)dzLm}7#+i+zcQUkH%grSWy~gu3-ALrDsHE766tU+G
zW8RL?ljyj2_hAksxFQ^hjp-h3Hj2>Ajk@Mk4X@uxztb*l7=^h7YYmoXd(@vk>vo9J
zF*Zu^g*=>24mzE2AAF4r;3&^6KpzyFMH4!~P>g?)pd{03qgZb>lj~KRG_faOy6zFH
zebrWANK(YYt)ldL_O&avZD&)Xy>Yp{-#c8t3H3LNiri2dbrmWXjAE$@mA5wFrIdyU
zU&X+OH|cY(v4^lK75nOr)o#PbzIKhcvyZYrj2Eo&OdpclVdZfWP6>w$aY5Yw17fqi
z*QS5}0r&81b;3<%1;?5gu#w)Wzmt6F&mUZP7vbKmzr64nIRDTO9)v<pe_6*TOlTa=
z`zZ>+%@POFKSUVl>}9`=z`6nISR<1KGfQkZ7@ykRkKm>@TdU#~!-lwr9xz^&FK}^6
z#f!5;C?<<Z?AL>lgRyjHIuZw$o2n<kDbRmE*o|8AP;I+A`uWf3Q?+$^P_WROuFtFK
zL!=Egh2aSL*ID%;{UIOHU01)P(=92{-6gsmKmW@3S29we6F#JG?|j`Kv5|L)gd;C&
z_>)i5Yeb^E@!Ytb*2-0Ig=^$?dhN|KcXZhuCn!Prm(w?lpP{nrNJZH*-pQ`>Q{#WD
zb7go6BY?0<(>jssx-T8`88GU=PkovKO>Ew5q>+umu6Z%>wwsOiEtihrjXQ6<CBHpx
z(-qS7`WM~`x)(dRufOx1;}3DBPG;s|2Dv?*fowKv2Q@f^gO=QK=^eQF;GK8s;}7Y3
zg|OL~D(7Z;Aj?&5oa5LLtW)A-`ayqFy>ReM-f{HtXQn3(9`8=w;`Ig6%{<In1855X
z4J4JSq7x-801cy@&)L7YcDlY4z0f$(t*jkge6FN-I(kXjK4P7e*0%0H;dd&FM?X=-
z(xNvThp-xSZVTpC3Ah2)g+vUFR3Ki!2C7D#a)e1C5>R$yvjOdBl&V|AXbyiE!Njd)
zWmBoF<=#+&YqA4-y0v%k%8q@LBCln8<8@NOg(|KRI<uX(yalG@FVO9qy+y)iIpCA)
z*Wp($z-Y;w#sOifAZ3^($qgAu@+xU)YC28~G8kPY-DEbK99_lju=nN8=2<~Fvt<(w
z;8bUN)sJ><yW2S<CdD&sM(lrj96;vgIId_Ufp0QevOyRvF)3|nB#Wef?b<c02RHX#
z=aSGH9I-8U?k=s~PG-CCtX*PHcnhw(2$zFnirD~MBFL0y$Q5bt?zS1Iyl|ZxH<WOl
z(H=vQQ*UrUe_X%?Nvzj2fcF*2xWUlObLx(Ij##7pZ0c$%3q8<N6nlTP?^Q6t7B4`{
z=D1~skS0@KRM_E`x9sN0?D_O^_~V0lKfMApbJf)7#%*hOq_N$7GiQ`r{YUaW@<|wH
z4rXjq6M?liL=%QUF%gg&jz*N;!w>h)JpAw(Z%^9OXSg5tNt<vKEpakpS>V<~w*wfK
zb6wk-yfwEE_%VqiQel5%fl|QX1L$yy_}rPD2lP@iJFi}wVq#YBM2xuMfN(dfqIa{0
zO^q{;a)JZcr$V8R)`Ou1R@iYneZ?NSZhs1s2|x#ce<+9u1GrL(xa5syF<FEq!&VU4
z?+%9}7bgR(SC}3gEMS~?!ww)7n>I4lZeQox?G)nLvCQ&Q@P>a1u1LZVGcfI00xF0U
zf8reRWTg4E`T4bDxS7A(ottw%jT^$@wN_=|U4jh>KX~@+gZQNs;2J#51-hYf2DgqJ
z6G<4rT?Lj*-O&WbrpyI`Ps9?3pfISUMGYTslwkjN+m-x3D*7sUQ7md1Xu!^qkdvKr
z?_OKJEkAncx1fI{c)Xs0g5{-}Ot@S5JWv`@%vXHH2wcp3WKCK=arVK~**tl^0|jaM
z_|oRt2jjJ%$4UN(d<-yJ5?aXtLIaj@0zWu~;FuTTjC`u5|LUcJ`B{DCVyan{mmd0t
z*8H^ojTQZ~X5rGW>NP{IHd9LvjYduF)A|^L4XAX62(EvrRi+6ANITDse$19}DhvI1
z`Eq|u^kABE$oZ#!p9cO3G>tTnQch7%85Wl2eWAwZ`U97Zf7S%rXjvT_=D_8Gixdtj
z2Ff~eU3W0(dSf$P|4nL#If_7fw&w2)DJecw?ZCD>C|CL?m=4!(7&&Bx$~sMyVj9jN
zbVuwfSK5Dj@MldUJlnRQx|<+8tk<j46b;90Xih`Cq0Wcw)m8iSX}Wc%>%HfmUJt&*
z!!>(75v6E$Mj+vfNstzZJs1xaEV4d`^9N%EUC{*zM3`{zIJB?At#S>N^=`n%l%pHS
zz7>rzZ8&Neo<xGOiDANb20#D%bVMz*BIzAD+H8MD<!%A~+8+jSNL6QX^;e>@?aI-1
zREDimu-!tttsF>4FTfklBU*AAu(n(4W{n`ckPmTW4ci3g-)?HTuq=nOnTM;d9Y{!z
zucb9L^_gHOaViy(_Q;HgG`urYP^OVR@+CG}bg<xa!*JbEu<b&lT(oqnSk|V;>y=mb
zUV(qV8)gFVn!lnmq3EFzz#|AKO+^(-tEB2Q4YLY>tO%4OPRPdQroOqQ!**-)K@v>~
zcF;%O6YxbvVvA8<;5~l0w6TFVY;OL^=fY9AA@sgaiK$R1C4Op**Y|)X1DBSk=EoL6
zfpym%uYzoHKziOXN$pN%?H;A(sPVxi0N8&J82xM|DBAC+1N)$+cDvKw>D$wlv6<>4
zFjJEZha9dZV9=9hk?dZzDc~c3<Fcb|sE4>Cm-GPPOe(ZTyMTM9+Q_36hLU;n#s*Sg
zHq*de`^MJoQqHB&aY<{&SnAd&TCD;$(U9%IWCsA-B#Q6rSe<JRlG*vw8^#qIr0##V
zEk(VhmQB4kWo$&Tux(FP*hNZNQ1eH1LUK_lDnO(v2fD=Z!E|Y#*ofvv{a7lMm*pti
z-FZ+#I+kl$Uy*Y%d|bBsie)v~kw@21{y_|!M4ThjHS3@*2M92(Ub=*p-cH*ZQYFGp
z`^t_56}NZj5uD$wo(iqUr1j9+HYk6EP>4NM(X}0`PwTnH>OsWy*Hi*}6Vnd>L)BCm
zE5WRqYgMxf%V53XK$*4%8>i(!S##Z~Hmk7up|n*82HS#*Vp>#z-3lTVC_s*BPLvGy
zoD{{166XD)Kj04r0@1MGiz?BCFTAWSsD58i2!<1>?9psa4*7#Vzq+8=F)@GGzGtkK
zu+BWI5;0H?rh?&cP~dq%AS4_JC_W;{p@5uoiWw=KlKnzN6q9}*kyBwQQ#_iL1JV4k
zfJoG5&sbEaf$#g@sWbu9KLGDYUxx}^8g40M5a1u-7Eb5ww6@SH%+*t=`dp#4pr!5n
zX>soO+;Yh@;XIR0XW+VNmX?3#j!#RI8q~gw7yxR5F<1u-fJ#NhKsX5xn9<f!jq*u3
z8W62)E($=;s-LO1XO*|NT>8UwG#pdIMm8TooM_bR#@zpEk;CfbF^zF4LTu6%VgfhV
z?e3sVp#aw&4hLh(Iyi(6HK3zFzd;aeP<&`8Z0Q1Bxq5YvEmJB%*=&Dl-5eg?prIz7
zrqcY08fpNZd+zW?4fUix)G$_X%`^@9b@fp^T-}GdUso%20)+s3bnW$(Q=_3f!O(3$
zxxjs#v8+b%B$bbl|1l!e2MT0lvyVqlEtNJ5W23ZmDtcSD-Dl9fTRCDJJ9Er9Qt5QM
zUjGbXjFA2!?SaYXsS<xtaf&o&f~OnJiJI}1!jaH7+U+x;y1sby=wcKJitMAR#5Qq_
z`F6WKZyddFw9RPEK2<+XW<;0bM`YDh(5JHD2}0f_q{2*u4X1=h$*q!<P3|SLlJs-l
zFL$AxacHAh#D9Qe9l+g=+yl`sH2Sj`DJCvICZ0{c`ZZ|7+1h{Ed#hEW({4kjdHr{l
z{yq(J>;!NcKyX?kPF9Jb@kL%V33q?wlm5>H_97n(tgiC5a4)%6|L})z&-|QixlS}%
zK1~)zzgDe|(Z`TVKWXk5QtV_A2~z`E3(QoZ1dCatg94HO5H6S=Ez~>Xa0vi576{x8
zfTU!$k&8VhM&f_z?0h+t5_sW~RLtayk#JUugrs0x$_KNl%zPxIO0j?#4Qo;S#ff+@
zl+VBSJ<*WBhhoWeUQ?stus<Nhq<AVG%UjW~<QI7%5mK4n;?JPpKMefE<W6&UQ9Bh=
zu~3Bz9-x*5IUBx$$i^H58*^Mt_1N^f_d^^yr`}=~3i5yPoMGfXE(wp6vyWuU<?P#X
z#wjrvj7q_OfAcG`V2~8b*?Y2OAy&rn3%I%E@1&F{2_eZeau;%j=v~SgaOrQMcZ5{P
zo3mG74XPmTtuZYeyn;A+4XP$2Je4W2L`G#lFcVlFlox;qxU{`k(j$^9MfB3*w&q5p
zt`up5AXR^!>&}(u*GPYHd#Q3Vy(UE>(pvgt1%5E<DGHpDcff6hX0*|WHVbe#o)3T<
zxfHZ%5!NSF%zG=79#zrs;TQ_Vp;QA#^%-w6^WE<J+T7gQe7Bo7AGmsTi2F(DFmEnV
z8Fa}MtnQN8@=h5x`ETT#<U>ri<{&5l^xJaQfZu=VJ|Rw8rh}ssCqf#{h&q9?7^(SS
zsR^2h1B|@Dtgin+h@=E17E|s}9A_~ePZx+30@+W#L%v&hy(_Zt86g!F(~grqpN_{D
z9Y-nTvmqG-$@8h^S@HF*$U@2+!2uZnH7jv8Y9+jR<gnR=z@1IICL^o!#AK`haGR&5
z_+@{j6b!5>v`>2Zid*q?BST6#=*FgE{=D6*<ZU}&;U;n-K0N|7Z<ShG89haSMgHM!
zcm}1$H);n6f`og6wlKQ%RlooW@;=$q6Esl4ZBk7FDwf9-_*<2Br6?qK3Oj<?sJ1JW
zb`_}ag`-D_3x^F;fGbI%SZUwUuGm<9;pl&4Zl0u4TnW)IdoQMZNedM~@2JfZO%RQl
z4u|~9(Jx0*sR(%nwxi!)Vt-^4Hpknk$ZL2FHk)_V>vz3eufM##y?tgZCo`&ulHvxF
zlQpX21>#|hjbqFtNX>#sd>RZI)IGDHNM&n~P<wlO9Xp$(k~4H28p#e$0NC2D+u48X
z-sGBhf_EIy>b57nGj#3!qr`Xe1yBwU!s9hPZXZVn1hIavx8LiHWu`Wv+T#<%-0k%`
zSbks=h*HZc6$Two6y%FyvWTKaGTT8FEJ)d}<w%!`+inM;OENp!%aI&6g)O4MjTMjv
z4%HQa7Hd@F(447q^cv!z!C=tA={SE=bsvO}j(wn)Me9OoLjBo9&;YZDFg7(`vjMn;
z8cN4HvM&}l%2s)!XeD(MX7@blSMqMITFtrn%COR25>B2Jmf97?)Dv?^l{}jYw}<_X
zau>6D4y-Bp8MWC=gK}7G?#(Jq2G(FkOrElx2N5&F)Dh|2MU_T#M!YkKeg1#j`nPR+
zwAb%XY;?r6q40cvG$7VQ#_x|cQ$K)q>(Dz@z{^Kq<ZA@zBdW}RS;GgYr;-L@iqbg9
zB+i=R1hl3ZXo`ZVz;qC85GM+}_-Y^)_`JX``29g8{CPYHhrjjy(GOjhSUcfx>ZQm_
zdx4~QRNx==``_#rT4FK~*@=G&Z-z4=`ke49A3gh}+kfe{U)(+(2;BYtJJmbK?HfY-
zWQyk(I0L28Nn_T%Rw`(rF{q)2HcTPIaSPaPxcEM6^nUASPhw--i{pn5#|LNC+cRgi
z+kX$A|BJW%5|dGO$qPU$(ZK?N4V8ZnrVqk$CQsAuXVYhkkc;)R^}>JhLL?O}zz$AQ
zMLSby7D)TY<$AqLLTaI)ejl0Zx4xw=EU4ed($U{!>|(0WD*Sjn)-LHXt$C%9G<f(D
zyVDtTIyTcXPt7Wci@{NA9XbS9o)%CVj!Aw?5bD6e%nPG0T=?MyV!?4;fYUF*8RbIP
z>2HIuZtM6A;K+u82$+8z=s<eSYMh{lL<@zpD#9Lxz9rKkw2`9cD;<0NfptI#>S8%6
zt*+dztxA4)wL7GU^Y}}*!CMZI>R0mX4>s(@?RP}{(yDg*%BmDCFJc$m_R`}Hz1y>q
zyD-vm)UBYcp`nOl?LtT0Q|)I<&khHcH2_fRPVDwq$eXY)<fMNyxJK@UNk41dta!cw
zNNGvm#b3Gu+>9lQKY}$yy%>P>I_%pJ=~p!97qE*cL&?u1y1|YH-?$xj<Mzziit4Hz
z+l3M8csn$2c<;0ib7+;Wdxj*dln+pb>OmrE4`g$TF#}|I<ST`2vb(Un&`o9wnPM>m
zr}vbOl<t93m_mQMUA9-JioLt=NBHg&o+JWYt#C`+3Sh=2cMG7Vlc+aj`VMidtH3@Q
z>n^GC0|x<hJUreBmn+_0^!9DrhT*U~z-^EL0psbSk{ZvUU^KvO2RFOc)eaD26g5$?
zj9(YJsDpMO8#lYSnY9GZGheXRlP<+++t?epK3E5)jyHesg4j7Qc^vpi^$?ek88MSe
zhO|kjssOQ&ygPH;pbxKYJRDz+omv8^6J*a^Ep_?|xkby<$K7_ca-_6zW}}pb(kTrt
z4=Wete(3!`)1ib6NSl0^Ik>Obm#=f5<0Zbz^Pl_vta82eD$iH^LI3Awb+_JId<|AX
z2v$cE=pui#xN25+`~7?Vr^Qs`IN>_|{{79P4{rd1ktP<`IIM+L55=6|ZspD*ZkWY|
z+D|x_>EdNy-t%9>Z-;bo&5y3)_H~Zmq0qk$&J~LcqEZJhb)@Kk$|-a+pat|2;p|;&
z*Cri06|dS<vj}g3x+Qb^9V%2cuNX`$LW<xCDl>nG&?fxhck|xE9Q)xZsubz>X*+PI
zUO9MyE5pMtg0EpmB@0^%8|&b8h<)%r9e9JQto1k!LumbgO90<#()OR?&T!{Ya+N2o
zWTw~_5zPryH;u^=NZn3ga;t_%CQskPoPHH=IDTaNEmI`_IIoPpi06N3e-?KYJIpW7
zk>`K$c-wtVimZNHQ4$IEPTs&+w!bQkj^q`3#@=X|4=v}JQ0c-zWotM@@!uN1poba1
z4Qo8eou86F(1Zc<8!8Oq1m3{oIHDk$RRACY01+Xri7~Q3bbu#t>RHyEmZPbNR;ni9
z7M7QfFE6`<tnkEVlc2wuN(BXf*DnN9siuEFNNgYBS8jG$PL3~M#ww04w<4*C!HfQL
zJnvIt;!%Gf;6EzH6d%u@^NYN3v&+Hg__D`cz6bO-MYV5e)PTNsa6(a_-zcK2W02n4
z;BRAd#VQnr7f%m2M#GD6a+<go;jg{9vg8iiL)dvz25J>04<~a)lN#e;WCK9FP49n8
z+)lgQf$ylh3(LLJ*@F*^noB=Z^$0*4Vu;);Xx&dX2rLj8D8E9DR#=5Ky0W|5>0l)t
zRJvP))^nq5fylh66q_i>w5cJ@rPfKSXWQ4giH|DMc9`Q8&2&~_oHdbfA28nWiOtPV
zyu-L~;mTvtk9;Kh*cEPK$G8Frkm7%V1%h5+^e2u616_XeS>@;1?>_JW<DLJy8$AB-
zm)WnOo~hqU6myG?d4e3S<AQSb&E?sO-nI6~R<PR*Zap$p*~Evd&9FU)H7?2<?E|lk
zA+@;BF{z-=ziAdd?4mTb2uLr82ZqY%s-l2shvt`d$L{rjQM&G)J+`+D=(>L|GQQVb
zcT7ZFFer|>MUa4drgWyqnexf(OguH)vp$^r@SQH2;jnXn2T<!dEe{D)93mhNp%Tmy
zoe5Q;_YIhW^_RD5_R5w8*!G(bs}CZ}ag$l(KRp!lda3M{)w99n<>1*>)R13#=q|t{
zc%_>f%X-LZB3ywhqt0lC%gcXG)f6X87bP;Pf2A5Es=V_2fS=amaXovyNIij{c(9@V
zj)h=DS=zqm^y1>_d$yNIbRijCNNe<R<AG*z>mBZui9~pbdNLqFr2d7}F;64hHhMg5
z)9ohRzDBpx{yhTI>eF>6HjBy-m&Y!#dTzh(c9F(Kyk2H{7L;cVDp`La@;bxajaD9+
zDO5ZS0G%r9RU?2W3>hK}92ZkVvf_D-;XQ%z2}NvFZwaNh%6Y(GfXb|#Jo-zt8GcO8
z+2{xbQv4t<FWRJMjfUBjZSSMLVAv+Kl>RNsdAHpLp)e<Z3{F92>_J)1vXyqb2RB=^
zB2+GnXX_B&FMw85X0(4bsfUtw+_yz`JG%1`-5u5+Xtf@wce=Xs3;Lkz9((G1EO!2>
zWA3cR1nEbdc^V;?5~*(ix<G(jKiI_$fmJeccXwTTce38z3p6lIEvE|18<@8U3yHQ~
zHI?I}qBOLmNbK6?X3g3*&F%1fCNn?!ey7(X?^%xB{nK~HmP3E7yB@l$^&4}w$RJ#M
z#O+bbKhDnoK)wNQhIGTGR(}y*ZA?DcktViu0-TBJ6fsl*&vc(w<INb+eJ%2ymVET6
z+}hT(j~dZ(C2B0kWBy<=5C}(>o_Xfpxw)liESQcG|HA2qBDMRst3F-MoVc$`p0rMy
z=1I%fZePjS*{pw^1A4ndVsbDMUYei3_nBvwqM?A0kZKQ|E>wNh?QX5ux$i^<NL*;L
zvJveo&@%;)=WBrEZUOYbRe-%V5M8#MMhw70b=`qev1&F1(>P8XL2RfRNPAcgeAZDl
zqoo;DQzs@>Ax{iOkMjI&g7AzSK9N{8ewychns3fU?~Q-H9ZvPs9Va3weYGeExAFX=
zSp3BkVOd}O0CP_D05_Urv_<VXV<~Sw1qa#k$Cs9u_wr__xN8?f=4o1%-G##CB_m`$
z<~gs9Em4wZn;uY06!WHGlw_ItWjoWd0p+()D8uqLsT-S!z}*PI@p-+ff0P3DGq`!V
z-QK9`Rrr7C@3yR;hy9~%pz)Tq1SS8EcN1*-)~~`fB0%YT+pwvAz#6v48iRfE>(uke
zY=Mvh3|>$*od80qpCHEx`HQc|lUom%kF?(`#|!#}%GbrDum-T>>y-;z@zf*jN6h;R
zdNTfXQCt(`DM>-(H0lXYWm$%;J-L>i-{^@m{kMNJD>0z7hO60{b;a;_1ID0apg#@j
z?@Xf>n3-RI$zrI?`_|wAzi16u_du_SlR0t4y7D7!Wj<|Z7N6F8r#@s~v@?%o?2ng>
z_czJbUHHIuy<j$%d-~3)kE4xp=g~(!D)9eOEU1Cpu|)aN*z%9zKQxXASC|8n)kKJ>
z6F`52$4S*3dZ9&ys+}v0t`>53^&5pkIU3!8m9k{$X_x{XyyHxLHxx=KKnZh7Dir$t
z^8JN!swVfWr+Q1J(!KZ2+BVTvT4B;LQdehY_Vd%6YM+`;XQsAwAcwm4o_lR}=8oJ0
z3Dm>EEaC`#Jw?T-lz^t-C{q7pjoHFA&wqckY9^~j39f?-NBTQEqrWN57gf<8P>*Ix
zb467-o!<cQh4{r}uC$att*FI0(!Y4^;#D!29R2Tpk%XhcU?M7OMD!CUDviD$O2tSa
z85C!HyHkh!PI*e)r@gu#qfY$O{@kM>b>lze$-Qv6rWrPm>u|<d{MbR?t$)PPJA;3j
zCrou6k$%C^y8}9Ej1Hh5R1K|>mAd9BS*QcOr)EK3S%oK?OvPeo6Pt%}pdBK8bX8$?
z4C+|@YRcI7Ql(XK+sxwe$JBFW;5&6-%%GMHbav_IE0w%GWR?$wdcL%0;uxfH^Z?c5
zeTaHh0}p0S)(Dp;T0ie@85f$lL6Uz4ixU{yAP&)^>j#>z9*tBJO~*jTHq#+}SHJT|
z_G@>d=k}e1+q+YraM~WMXcIWvDzyWQH9g~RaZF3bUrm`nlO{B<?fqS!9Q71MRTR=w
zEoyzR)bYVCyUxw5sx+WlwAE3MfoUg!L!PQi!*k9MsMkhg9hQQF*4X_UycB<?)>_S|
zThQ^rKrAIjtdLL;LiM&ytV7-e({sqK8;D4wAt4kCCv%Bta88QJMjbWII2b^47r5ix
zS?&V&pywTw77VJPQ-Cd2nYS3T-K@8YZ|uN7iC{Fw2aWMT&-356<Z#q;=_i{vc=z`}
z3Qt8M=W!Q}eo2Z(;f%Orr~ZFHD4d*l`rpLq|2l_1OGT!)+?3ZSBGXgc9f-t5blqjz
z?)8>~q5vBZ09epy2i<rlCHQY_pyS5}6O$cLR_D@UQmHhn8ClL$n-xtiG^=VtNUBhl
zO$+kem)Q$RZ1->3d-W3$IarW!Nu`V8Z;HjVclh>9G9rtGG+JTQQlNjN7CY=+h|ONh
z_Fj$YxBn0FGFJk;y#w=(AvKswS`48YL5|Wyj;xay@Df9CbYIM8qPiO}tcv`l8mBrH
zyanD<Ynj#KKD<WR58N3e=*%E$D%6ejX-@Ue;;ZYn8i>ahRT9ff32C{NkbLhVQejR?
z7Uul-`#+ku(n8@#E>nMv<b%2R+_GrQCF3b4kkm-Fm?1=3N`E;d=xYrtEb-x-NQ7`>
zEghER;7MOFG+#)BV$s-I!d6wkeq>#hRe+`OsMcBtYtf`id~tY?E+t~>&+~=V^(BSp
zvvMMu@bSf_&HDuD@oZ7^Ws<Sb9io$MSc+K4s5LnrU5MorrICMCBL1E~22aroL6N@@
zpI*fYptFdxW+T|d=|CV+IYDT!>gz65b4Rrf2f0}X>#}>b)46(e+OmiU@6Z!bJ8|d<
zJ3vJb)!KKxI1=O#B1jk*%@Bv~Izi01kM1<@l=Sn*j^*<k8-LY&?ztv>U-8b#U?Wct
z1GKo=yiAMpd4_+Mz7KW3%k%x?WF*)p2#Zgm-0dS&lzcN2C%<r){?xa~JDGGzi_U-H
zZvE+RP2;XQx4~^w8zo(E)Df;RR^%yTrQ}2;hYklJkS@r{I&4gqAD7BTLh9n_MFq8w
z3d4Hr7z));Bzu>-u&}(aaFy-QdKyUw@=M!G5veUjRHT28Dm{dvd>|c3X0H|C#^nOr
zvQhdUz*}DQBG(L{4l$pOGEuXU_5`HkK2>u>7PvP2pEu_3Jbx^mK6d`jdE1V~^Od)}
z<@Q|m+@(vEV_!KJfA~Lb&MWdQ=g;4gPR}iGl?*di$!2fAbm_KSuDscMXeH<DcpUAI
zfTN-1D?@+vCBOrj`doy*H=309H=0h>oOH(@D9egp^5^;Qys-SjGE7Lfo7NbF{1<SE
z=ktE)J#eXyq3KH<-yVxppF~+)q*3nk+(DeXQ&)kSl&U}u#sL;3VG?3-5LfYZ?(ug$
zp2N*J!s6mMs^XQ_i4!gOdh;EvUo1A7`t-24zb${F8O+k?kzR4)dgPYp61u6*ug&eW
zfxga_p}`%dq9N`1n)nINI^F9b$^3*^(~Y(IU0xu|j4#&`dJ|D!u78N@)++JbeyJD1
zU;HGmt(BcZrGj_f`i9<G?=5`tlVcq8zmPApSU~7)^xr{VV>&95@T!RxO4H$MK+Og8
zi4}igvX_o)MNKQ_&59YCYblvzGLt%z>Ghspiq02OQ9YqW3#6CRiVr+c(4&!n&CBWR
z$y>8Y`BHCZbY<yh>ILJT`GjOgCz0<@pe+F<E=My++kNY+ufA0oy!xtl{jaERH1#Pt
z@QYT8ic^GHPx_-F^M>xHvZH>DJaxpcDHDHB=-t6rV=1p5^Z*ZGObNREHfYWSi_t{V
zvpm{4?v){pV2e=us8TV<adygJ^kes-9Z7ofVZfcPyCdbLCpm^>JWuy|>an?WGe2|Q
zv-aV5iYW5H2YoHbVA?}G*|qletZvutut1ddw7>Xu&bD`HIjV;aq<{>yH&VL=1|@&k
zz(|>!n&(UoSV3!eU<i5*!Joqve#|_9&wcT3F&LI2cs!gd`>aSX91ejTV+p~yY&aH@
zEo{i$0+1@^`f)C!Nm4i!3rLBC6b^`5OwE7zAf5$hJo>9ptM6<~2f9;e6Ix1RH+l!5
zfA(nazijr|`u^l_I2Epe`fh9ULAHOo-42Z)nUW|&@H`ct=0HcIwqDi@M{FE8w~wE=
zKX5yp_T_7rm+n2!{F@e4N^oC+!RV07!)I>oFz+Utk>LYP`TGFh1GXn<EJ3SojCg1U
zdh`VP{=yzs5~e%QrXzl(RGtW%ZHaFgN-0zbEF>dIBDJ>ze5;%`LIr>Ncl3YF&4sP4
z1&pX5cl)%|mi?4b<9$l9kW2`?5`Drx>77Rszri9iX!ym1cJ_cyYp89e_)?%kJ@xt?
zQ!;TC0T-PKROkgd4zEGlRJJEwl<f<QR{v%+R0^l&<OtlMgwy$Cq!j8);iQ6YWlAzE
z*^F+t!%`upnR8MwDCHNmSV4dCTJs%113BPUbS)fsX0gapkbH_%<*Lmx6w+60FMYwz
z4tmfmBFhMkxd|ZgNg@OLngYoCPZgW7l;>Zte$K;C%;uHk-o(9qii>Cm2)f#YE)fOv
z_HSV%xru%_#{r_i8B@V4K<%8C=aT~?h!HU{vWotVK$m$mmWi5xLkoZRG|)2Um@S%@
zV)Y;w3lnFzezHmI4K8m4&0Hg~5{<4T)^pWhAz00=v(rY-3=)OuT`b0Gu5+`NGevnL
zyV~Ka#623+)wyD|TFR?>@F<?;i)OVrhi9G^;Qyw5i!#jnrhO_kHBJPtdw}xbEMxsk
zySF;&-KoxnzJ;#6p$dQ4Kn2ZJAYt_9TLgdJLio52KVI;Se@Wh?>iV*-|9m0fpZ5!u
za7^&?n*tG{kqRFmIv-ddWFf%oB*0gq5xB6)`|+Xxw+9Mj^m{Q`o=c}Yiq9we{F%6)
z_^SbbBIAcsKAq-iX~G|<!i6|3^(oL0djUSxtUs_G03kpydB1;X3R0Z-eCq*!HXh6R
zg$C~<iBMos@cR}6p@dIp2>xvB^Z2wmIg{Y|qTeS;Iln(ANj`s(=Mxg#<)@`tzduV$
z{k}wKItncXyro3#8B;!J3c96f=#Au1zoa<OcBeN*NBi#){JCZ>5GeX@`Bd{$2c)#$
zhvlUNvaOsy;xB&&YH*R8LPv4Ra}Rk385m-rO?-r2%XYH|enPq5{_WgBdtK^-mtj`C
z!`Ue?yMULhWJ+WDz76ZxHG9f!4okmrzHxp`<-bSzH1=m6DDV=c!Sh7-iRfB*97IZ=
ziPED3YqQbv1cLxfw5q9zs@4QCxpun|2)^mqu}4+~fAfF7M^3KkmDOKb5-f4<J5SWq
z?VlZeOIXt918u$Dt`X=S!MU$?>`kIA-1^pA>i0GM!qURLP+B{=TG5|a(YD`zd%Lbz
zYd<r;Bw7MD6^mkUUe28bLX+-*c;QoMk{DPO2>X~Xje_}h-sJ1HK}ygaO9Sw)w-h~h
z#$11}(RhE5X4`oa-$kD<%h6${DGNEBrrf!S&nZ!gO>|LgqDSO#<RaUo4yR}pKFGfE
zL2{Pn88RIfrSg@{m!JI6?YC^ceC|h2G8y#m$sdz{!X4rM3HNF4i!gp5higa$DIBe$
z$FM1w0$MPfs)H~B7>Pz13JUF_YU-2*(6MNlAT@u9R1c$St!9-)ARz)-ORJPC8*5Od
zxK^T)JxDWa>rPdyGL=V5L!|-SFNkx9h#NH^BlIz-t8!WzS{l}|LP4XX-GOGb$iD^&
zE)k3-k^wOpUYXYtiTO-2m0g`9zECI_(WTY-+?lypOf_Q#oA}bcUMLcgVxdgpRwe8s
zB`tp#jRu#1ctqkwDH%(~RX;&#E*Xu>QjCNp0YG&@*XN|9An`^q7!(pxChPZwLrK{$
z29rr%(9>!;#3#bHM&rsOVM$BLB$|o@0FFn$kX?x{Bo>5#FV+mC{D}a}gr#go$z~Ul
z`GPMKQ2eQ+v|g&{5&9!t4v<1pCTf91QW1ZWlR|1V?pLHBkc}W8fx;*WhkW5ApkZGi
zs3wEuKzt!62IFFcPb5V?B>95@RS~3MDk%h|RK`cL>9iPlWscAPRxnCPJe^0qkjRI}
zv&5!Z0suu!$+*a3_C1k?pV(+6Y6Ih(N%jQ{?U7kZhNkP~U$C!UeTAiDuo;T8cS(O+
zQ4lExCiE>n@jRWTaY!zV0MHP5%D-ts;AoN@pdl6pLtnWuT@E*n=bqBRMZM?DKE<T@
zjV4*Z+)0r6px>h}urnRL>{`A3aqKpt@DcT#_40{TSXMCnP|f?NjN#Du)DZrjfByOP
z_vHKi{C2<J|3~o0q2KAmI>EedJ>7rtRMroS<)ChY#yHm4^C;AyRP>H<%@f+}zID~2
z4$1a#xQjjuu-WN$dkj1?5RY~uhT%KCo~`tHKqu_6hJ^J}n(A?8;<`oZz^Iu`Z7R0=
z!|f(O>F1`q=PG)|^e<nY(k?AiAEa>v&BQme>iJ-Lfj`Gl3Z;q|orvQL#`u43&;HzC
zcah!l+{7bO$dpPMA)7quw~ku=lgaE{d8ZJS<!GTN=j0w{@T!ID?RvQO${f8u{(<-V
zxiVG;zuv^#*)P2x;BUuySq3zUO`%b=oQx{{NuCrMSI|gOe@*0;!=6g57HV&>w}%RQ
z;!bjq0A_8E_OIcT;BcK?|IdHq6)MF!+!?OJy^Z?-cZK^L^gg450+3Z8z)12ae0N#~
zC6=f<P(?wU+@(?S>a<YtN@G_AJUc<?&RO$HshE#+m6o;|RaCHQsslWfa!>C^C02_j
z;KORDn)U4Oa0A{?!(&@c9nQ(ca5$UH2tr08L=YmefEePVK3^=co{4{k{XU=1?+*w<
zTvC80iP1#3><>r$f*=+$;;LSnkA#<(Q-t{6e)L$<M*=yaVVGs9P53}0^LVY14n?G}
z7!1~vb8Bn1Sze2s4Mvnqy0NZ`fpp3!B<4?-mjHNIlX3q-D&PzFL$W^<$zFU*KnN#P
z%RVx15E6<c$Z_5;MUsDVb}keN21O|pPQ?8wDH>18av~lH2gQJzO2nl^R0vB-PA&!$
zvXqRcz99hR^+f|hNc07GUpXQIK<A}o$ma|BPXN{BMbXCx13=V$fvDmS`iS2ji$5&{
zct5lTV74G6g3uHEvQJ9I7UF`B2WlPBqKUUBprd>|fO1|6B_)5qIHAEng#$E~3(Tfn
z8&2)Po_FmeTuZZS%)c2eNleRN3_C#l+>XUE@?fA!mqx3g<@w;(G_Kyui-fD}z(@rg
zv@J)YayHdL6$HpwE?W<n%FTkRrt-#l^!l)T*O)}6H0i%7scxET6Kh(Y^U@Oyc5Q14
zOXWE3AZa0;=5c?D6j=P7XVyGsmerh+NhBkMc!=Z|Zn;F<+Fg&{RSTseApqf|pv!S>
ztGIesjhphy%XzUFZ}bFh{ATcd-KTw)cFgNObI7~{rnsg+{R(MxiP>m622IbXq4%1S
zt<|!a*{0v=&>rfzwVG?Y{r=GQxP_0SGFXI50JpHX8peMWI84T^tC$`ziB{I+Sc`2s
zP3Cti78Oxbil#TxUe+BIolH^1gkeocylJ+MY?g4lgMsUMIe&iFbw^#-B^{=uLFaSa
zzcrhE>k!_3?5Xsh$*;qlSfXATs6IU8m(f}mP1ICVX_=BCjr`zi@q}J^eCb~OUR|ur
zU#NavNC|&y;@NMeSC$uI<kUl_?1f}B82hIE_3Ax(IS9Aiv-EgbPsFJ2Ml%0z;zG1g
zO`m%Bluu8ttfar`<vd`y8JN#gmg=rOPXmQIc^TO49`TmPIi!$n^<B5)Ufrdxc4}Mg
zC~d;^>|Ge(?qFcCL|2NcTC*0LEX<@O5BE<DDB6Dw=12`hfJThX+XE{~5!P2em3o=w
zRCu7W5&e_s23qB(of=%cmQS(mzga34m!_>Zm@CMm6(&n%SE~8ekNb8}RX7`Tj&x+_
z^|K$QX~g->D9cR6(`4pwSo;jsIsB*t3DM6Yr3o4m$RQb)ET_LNlNiX?7fg(>>HhG-
z4+(#l{+diq(ISkp*@m)l4m0$T3scz;PzFeZHQyFYIv$<mn7`aAq3#u)s~m7%^Yl``
zzjWG9UFdcvE_2=PXb^5cP<!&!sV8d>w9iqWy6OH2V$@v4%T=ey(|tmeJM^FZS^bVf
z{m~xWp}+tA`W*w(In);-^+NwmGMvGFjd6b-J6tmu@r~+}Rn#v6!(Xdv=zWYB6Sa@9
z=P{29jMD!lhC-3RlHm{g`3=F(8x0}o3;b_^PVWPo`sUkg`vutP@Coef5HTeFwJ7n$
zJ0)M9j|z8&h!pdG%0FjW&u-~kAL#u)Y)L}j((kblp>X5;!x+PlK9)^tv*(<N3imD`
zC6;$E3EVy?x#8x?!7ekVymclo*neTWTT}GfHamMOJ9{hp!4Nk_w!?N;8Iy1~6-;%S
zVruH*p*T%*qO3F<PSdD(K_ezWBABnv;ObSY)9=|X1;QQcet8FYzJHGAl@%r6e{to-
zq3x1x@07jlGGyG5Gwnd$AL3QG;XaemHxqvZ5sOao#T87E)A#HI?YPFTJv7=c5oLd{
zOD!Epms7E?4qV3HfJby;tW4^0Ky52y%P~v7AX0UXIURFzf;7ajzs`X*Z|Ig&=k7y4
z;QP*{{-WKn+TZm@oDz#CFF6ta(|h?!#R2#XBBUINwA<BH>Nvbwb(OXiFPPNP$1H!u
zZKkyEgwtX89B7KJQ0rpuaAe&oImkEL#3;KpF)5h$j0X4Y-~Dl#>w(xp5;y=9{>D9j
zdC&bUGsLV6Bhw7M)7iNiC{Gwkhq{?C2NA7F>~WedkZ5}SK2@itA`<D(<N(|6jjrz5
zJv#G*w;z5|{&k*YQm*41dd6<^^5uW#P3pJH<zA(7xbECxNsMLK5~&hLJe+82V7FcS
zhHP8AAnA1|&-%CI{{(p(Ed?~&R)zWjA*Vi+j6-Rt<7`AMZii-;qaKP5!l64BkH$~w
zw`zIJ&!JLd_3zn!<Go`nCm$~_mY!-y0<Z23k1oz>r}R^CW>G;qxMHuB$9R8mpc|^C
zs5Hm6Fw;Wx=5EqB@7HOiNn2Jmo6sYZ=F<EkjY)Rso3-?B@X3k%Xz!vVV~aQU_MXb6
z+N*y1CT-n^CgzgvXfGqPCIbLU<m^Nu%z1H8`*fsolXxz!QWTR1@lH;Xg$)%kOBm*~
zTWheDc7rtz-DsQW+5uCe15<yn4eRPs_ZkK=DN=Ow+FZ$sq{0%2D7FxcrwoS%`nerK
z1D^J!h&$TtMkHkzxs=OFp-4I=gp&zi48cr1JAVaTDX*|>xG<+)07)RsXphW*5pzl#
zyFySK+ODE>6ompGln4m=wc42D*-d5lF#dfUA=`zOoJQLlN}?cAn9hGB7|tA&&)1I~
zw^kn<N5wtyBUudBl5?y5ad2Gx0Gpqr(Q!77m_3|JfN{pLQPl`EF+Cb8LQJJ$vhdTH
z+yXCw?ByrV;CA#IUY>z}cN{iTX$F2M_+P^tVDm-HHh@_NPMtYJx&Gf0m)bE^#Ou|V
zPbV0C+-OdcnG!C0Y)OBdZyhx{Uf2e4|2!rx9jmMH+WcN;G+?Y}f+0|DTAlECmJVfX
z8O9(4FJghp9OLUyj_#4E{bbhK-?wP+hrPdV(-K(Y1Mi^S-p7~%7c&&m*n@0xA0@xQ
z#Fqo}yjJL{;%HI^bU$lhzH*b=44nf;K6c)mnCRjJZFKh47Z)7oiko_2<;X(S&M#aw
z&<<EHvv>bbWA_jK4_;W4e>)dT&9mNx_~%}*UgQpG>6mBh&FCIBX@S7TbPf~0FE8hB
zyDk4Sx8+w>@;A`Hk1prW!j-f6<(2&5r%^fTrcX<wi2>7DIZQ`=klYHB;X4;04Nd99
z!lEL;`iurc!GIV-5j$6{K3^zI?D`+4@hmpYtdki$92(F88jnI@rJNB2XT6nPD$4xd
z3!_H_0k2%%lTSP?e?|+FshA;jOrydL$jaz8ZKAJ~$>vUs9QYjr<h@Mg8<P6nu4YCm
zsf|*%;FU}~kg32!C7qmnRZA;+sZC{`)Hp){^Lfs5Wp0J?u661NMQtk1#5)cRF6LO|
z633$PLG#Gq*u}?gPn+F!3}c>t^gpJOnEWJb!IeovhwEK4e|`I77mrP)z=k)n*?k4}
zs~5GjI&X}5_jhT=L4!sU0Phk_AXF;VeuCg2Q-cW;RB!>-1E|7<i8Q!keKHvjZ&t+R
zwr0#P63bd%2AVxz8hy9h?Z5)JhPQ~xP&}4SkZR7FQ@55D7ninFxOI5#Ad{$jpywtt
zekdZF)0j0Ae|=BdyHon|;f}Sp*S<2PNZ;Kh)=t;%F`tg>{|)4<57B7q5_%apG>-}}
zTa8jEcrRm2yMU45*D*auXW%V;;5<i{;)}lQpDt{rPzP-*_CH_n`H;V$oSLx2AkeNy
z=i9(;yWL+@-+lh`^KIld)EDjgpOXJT{skPNFItIGe=o<BMK6)1Q!yRp5$K7L2qfDV
zet6-l4?SB|n)-seF#5x1AF4LB^@RoXuf|y$F2Eh5zkBG}3f`jV?|Jqi5bc_}u4*2*
zyf9t?-=FxuumAt|f2XbdiJtGj|JX*hbp9XU`5t(zohf-)I}j`ND1SnIRuyAD#~_J9
zrm+|%f1`nr2CfzrqgoQlKOG~Y3r8<9=a&y-Bq?!i<L=Um2Y>(zWf=xyrbNryv29iL
zVsKm<nFjMfRvP?%uixvtKn_Q{OkVzL^5-xQ!_*(;Als<Jv+zpx|6^$4&D475^p%=k
zgU^b-@=jQ9{<%VF!|-W0Xx^S)z*|-pYPE$Gf6}hqwVIUUaA%s_O!McPWc3oLorYx#
zbi9N_w$%oB10qDnMdcfAX#f70W`35aPol}S>DVjKc(K_sQF@@q4xZ8zt%>L8!_C)G
z94MK14&OM2!zVF;B)OcMOP4mw)#{Ry&*Ra>Eo1R$c0RLGS~|JDe$q70TS39Mv~_ab
ze?He-3;0F5Z`&UY6aq>)xtPTLU5b$k6otXxgbF_{kV0YfO}|JmON9@>&MgJtA^|VL
z{c9k#hpEM)h}k=e3YAX+ua~yCL%PVPh;sRI|ElXHKJ~H}_eL(wiQ1-FjK`T$M+0VJ
zLv6-Q^#pH}X<WOZME-|nBfnYU8)Yhge`e;497<zOX9rT4&%)e53%)1p1MqP)bXY*|
z9#ce)i&TbkUGmLHWb@U{XgOSM>+O!dxw5Hm6gH#LYDe!>p?Fg#1=wx;+GZqT!Y!Yn
zx4^%s5n=a4H|ISMXUwFq%$?*Oz?fI+=BiNPbWCArnzt&55hjg_08-O(aG5(ae}0Pw
za?nc@rN|Cl^E6|lmt+wjp5kV1J$EahlUQmT&=C&$NVSkl#sPK)iTPXSKrB}jbGt`R
z<H=m%{P^J4stF(gYE%uDB|DGaP1)>MH=~I}v_bsOvYht#KTXM*pcs*aBe|T+r+yue
zqf%IuBryyJ5ivOWel-EIS2&cJ2Mn0adVlER2jsuPyH`POx}Cch-X1l_@PgVp96?WL
z=wmS54UIacWtDIG-VB|wH0h2xroa1zyqYVo1&$T8lVzXrQ%mF5j|(v=61(w@zsqP}
zK66U{81vd*_DNzYa3m$<lA^X5jT4^{%AGuTcOpp<(z?kz|D`rZX)Fk!?XfQ*zJK-i
z$iE~16viIqFN~;aHI*jFgBnT~>nw-+aZ+JP-xmnL1ckl2m;GJwGNk}p`IU5isitHQ
znymJn+eR<vPX&(F)~wTuP?Xk;G7Af+l}~2c`KM)N<JU5a;aXTv^q}3TE5VhI=1+yB
zoE56`T1CbGoB-a<`)>+j(RQBknSUXT)j{lagnNv8258A7o(S5bO&SH0w7KrAkN>*_
zuZ%|6)iIxxVNN@Vm8g?f)2ud~RzqVxUd%zPuAoPlVvhfRs?I_1!WVq(g#=+R8OYS_
zcIZ(;RG&YW^z+2_`2$ig>*p1pKa=q(yg!=^VA>JC7|n`UxGHDU>8wm_&42s98Z`5d
zyq8v$(1!?_`p+7wt6$<t#V3X5pn^F*81|KUe^N>M0%cz~JO|I4gNwehFOXEC5v*38
z<nd>|h_`b0Q~S4Pr5OuZ0p%w~92|;K0Mxcl)0$G$fj$d>;x03BYUqid<(r2gln>$*
zY#Y--&achc=x}wJ{VvODDSsS_NjSa8ViH)?!s6+rh|ZGz%v)-^?ak$Vn9Bx@s<;g~
zE40{LM`5;v2CkdE2awboUb+SHoID<H&D06m4+Xa|XR@1|ZNHpXq|m_&Rtit&Kf_?k
zi#D&hZ5W}`#IF{}3y0hOv3%M;el_#f^was#pD=}xZYMI+STD#e!hcL}O^upJ^-G5m
zHhM|AMfzW7G0`x<LN0B_i_-qcs|T4I0ry3d(d%5>1>8r(^QG*@V=iMs?^Dw=86308
zQ$F7*bYem1_nkXSnf7B-v6u@~ySs_pqNuc9ACH>+7>!N@p{Zz0mvGRYSyUSF-;bcw
zGY}4GIHt0PjX8u%Wq&|T6qfec8{F#!WKJ?d;@mG%>Nbg5^Zv&rRhtfQ14?I3N<Fed
zOKAcQkA2ge!p6KJYxOgAO;+X&7og#>BdWQ|sKBCn<k&5jJRc?7fSchLsdB_rF*`=a
z43!g`{~blQd|A7Tl8s02)XI63<!HbD0qxf^aNwW9ST<RtIe!LN22)IQ3R`B?1a1Rx
z4!0Wn-!6a+;VU@oOnaR@i;WAQrMX#eH7h8oDllKJ+yU$E%%hJQZX&@4f{BD*6og3B
zOz{51a-zxm<12Aq68LRd*0pHlgLr&NcX8+HJGgtdex9D?&)(JqQIx!BY?Ky{j?U2?
z>E2;H`sUNHw0~Ww$j=9%Qhy*`h(!J2fIl8@`TdC+FGx^-Go`C1=3nxQ5`6%ax%!iM
z_O6BV^bEw^=51&5AIDTDM;G_lZtPd^6zQTi)B$-Afc2G*-PzgySLAnkH(YOm=qA$Z
zzrwB`%xV@thCW~m1QREp7)O#hcnsK!_x3|Cf~={mu74`<9eR;u`Ef*9&x<6B)60rt
zdzVL_+{ouPHgfsN|0t#+a>YvVf&Y<JaO`_@do2I|0rBj77ytkOc${NkWME(bVj<4;
z*75u{Um3WW7|_B0|Nr+fu`nJ5GC3H)(g3#o2Soq?c${NkWME)C@c#e<0~5pl|Ns9m
zu`mEdP?Oz769fSO1~jwuMJ)k;kQ=8Py&KaU5FBe9;2ljJ^Byi9Q67IDq#pqvJRfr(
zrXS!SD<Etjd?278wjj_U3?W$|jv>P$5h7S3l_NtV{v<UdRwRKW(<KTeBPBH^HYQ0X
zZYH88&nE6CH78vs!YA)2_$dY{B`HWLc`2tU<SGR!QYx4#%qtBmGAn0)D~~I}EA1>m
zEUGN+Ef+0oEtf6KE&47dE_W`^FDfrkFLf`yFXS*HFm*7jF!(V)F@rJKG8QsJGJ-O|
zGYvCJGg>pGGrcq$G*mRRH1IWUHR(1%HrqE(H?}wiI9WKdIZ-)bIdM6xIllk^c${Nk
jWME+AV60@&WdH#tAm#!LLI#HaU_Ju?88iXMlOsrljiy!K

delta 17970
zcmV)HK)t`zk^!iZ0Tg#nMn(Vu00000NT>h{00000gAkDvOMi#}01AK_0~&p2Y<Xq?
z00sO206&@l0CCm=T#g24Wnp9h07aMp001fg001^&B0zv>Xk}pl07b+A001BW001Nd
z#sR-*ZFG1507c{g000sI00IsI0001NZ)0Hq07du!00ImE00Io*Q2dN-VR&!=07wJ?
z0018V001BYJRSjsZeeX@002lN0001V0002O45uT>aBp*T002msk^Fpr2aHrz07l`n
zGqbzQwznz_ph!>@8^nMLRwA*ts32lPBLTz`D>ktAM$mv7MFo3_y|-A2idevcy<v~N
zSJd-<NxnTd%gpS%ckU}d1*oYfRoc=Hf6{gc|NncB!v8PwnkHM1@_hw^0^eD%W{}se
z9nfsI3TUxA1+?1T0(#hg@j*WOu<!uv(tvjRN#M~Hd=b!TzX|BFKL!3Qng(l#<8C`t
z!!oy`X)}#<+_0N#3&(xzE&=`Q?g1;?J++tP{`P=?0rtRvRqWJ&Rqc#`fp%uVYIat@
z>h|8CT)(DA1J<yQ1?5^c%@0`1zNxnzyRH@2u2OzaL#*?u^m6Qf{3?C5qT}^!zkm(w
zY5~LTpnwr}&43N<kbsTs`T-l;9RfD7qcz6yrq=bTjB`BF9v|RZR-9vHw&PLux_~Y0
z;(#sf8$r1*D(?ntZT}3|#{R8kj<=<#wghZ%>j55DwO7E7*7;WZJ9d9n2L$+iR-JQo
zgyUW9Mge2&$e`SRgVj+1W9@bU&ab*#z&N|N%Kf>A-7ld0-K2nh?14eKm#c>a>}%Z{
z)uSDk?|UI&f4fBGI!v%j118!}0?N<+DqynxHNZVss|HN5Z2|uMTCaeE?7)D7t^1=^
z?thP~wpqXmc4WYzc9)<$|7v3c4!3&+9AVE7IMU7tILgj{3~;WsSpi4exdF%6hXana
zj|LoP9}jRJ)m{piW)}rax32`8VBb->XHK-A1)NOL+!k<(T`AyHyK}&4c67k$c6`7Y
zc2dBZ_RxT{>`4J<+t~r<*tr4c+M5E-vkwHgPR;WJF0jvQp<~yqc}ak4*8FzBh4w>z
z<oF^Aw|mil(&X5+Z0QWR*sd6GiS;_tQl86~+Q9*r*>wXhw-W;9*vSD`*r@?m+SvhD
z*_#8LU(1~V^X#I4tL@T&YwTwM*HX0B13d3rM+97NCj~5T4-dG(9vN_>eIUTKY<(!e
zW9iXbeH`CnhXvefj|jNUUKVh>y)obp`$&NE=&>Y!;4X@KN5I{7Xuv)8m;kTM^@{`U
zvvUIOw>JfNy!B@S9<+-CJofqr0q*zu=K&r|-TPGiTgUGG`ac0)@7r1fJP+D-3V6a!
z4tUZ|3wVm6eMG?1)@yY8rjFff?UMtZwZ{iMXQu}&urmYPkL|AoEVLg6czx=a5b&a%
z65x4%*)cERWqVD4`=aCi0N0@7xd6}Cj*kLfwaWtho1G^Fylxi+`2BRg9N_(-b4h^r
zz0R)!-lFJQJHYd%YjA+qgRbiXyq|Qr54!Fk&n;c|2Kb$H{S)9^iva;1W3hKoK5G<H
z13tE21m$x_@mIj76y56txc9q<2lzdAPYlX`XOr&tRqlZ=?GFLYW4Sj1zNT1yTu?s0
ztS~0vTl-+ZcN9I_1HQM*1^9VAX9fIde+$ZIpI*HKezyMx{6f)a1b7c=tRLX}8p8vA
zx0?t2VRs1dp4^xg;2JbMzZ&KK_x{|tJHU1AJs`lp*=N=8QIVprujzY_W1k!QtrIj5
zdGG2sHfXB-2ZthWRCt_?lMe<S0g;m~1{Qzp$aY*(99tg8PBuPZ?D5#6@y3x&9A};Q
zF=w+m6WG!5tjC!ocDCCy@nqw8GP^TuXPn)MGczX%xc`4|0Sz=MIZdD*w+gpz-N*lb
z|C5}LgFiALJub+}a8y^*LaDmm(&{>yC&lLa2|_rdUO!u}8?}3CqieN$NUwgb4xfKL
z&D3lgHXO%u+>PsGk6h&vT$Zyqu2QO+>rTsQ)iqU9l^Eg26+5MvFRlCPCw$HI8q{rW
zE17g*zBXS-XOwL-U#YYzmArM&W}&co&;77FcDY(9$jMj`{$feFP$8?8X0_U^w7nZ(
zXC1$MjJ5*aU>{n+b0QalRv68O0^ff?ktd1;e>XU?x8Ls#?H=h*w;J!y9Nf=O+PGfx
zv0o}vErQ*^-Lr{uaE?39KY6~73vdz_g)_d$%SA_NG)4FlZXcfi&qx3A7okSdAN5Fk
zv_I^2UE79R>90ReM}m_ZNk<b+N87ia*FXPx{dv;6!Ck?lE8{x{<SD$fq7;AWjUpM0
z@7VQzGrse4>`q51ikf4JT8A9Ias2EjX^lpbR%pVTv+D|(Je$pzuMwA<=c;g2iV?-o
z90TSF%$RhH7$s9w8}$<eMps;~mV~rgZxL?&!S!~h+g{whZ+mfZduer1Uq1z9>kmrV
zauz<sg|kj)39rH}d3|yH!6$zoTpy<JVwOJl#@~_OAs>K#O~G?DQ759=QZ=zgu(2?e
zKBd2q^v6CZx3a%hFoh@o*-H65`GEdHwk3Zs=1=}!;e2`JpFJ5^9M6*hyaSHAb1?3X
zQ8l51swEM6Ne~UCA<PrlDrpV2I;ppuM$>3*5!g1@%?7c%@aJyEGlqY@8rS2ix{--*
zuJ~-*x3ZbsIJ=SbPKLH?xw(X)*Lc3B8;P71l@wc%BKEvt%-a!q5*_#MKFomxSA-+6
zG2NrhMiIKXQP-TR;q^P|ciN>5qcFE%t-<nakNVSR-40PY#zrZ=kcZRBL8mkBgRhYR
z9ObzM=!0UjXhJ6#icx<Olw?|M6zi>Ka=mJkCiVnO*F9pjuh|L=Ns3swRg_-OzJArV
z?QCkaH!ipLdxz^cq5fu3ksC^*u0rL4Q7l!V^412tl+qC4s~Gt3CVkFz_7GO3Vqe>_
z+HLsQ*RK<I_EGkS@q#s;=|ge{tUOM_DdCVIE{F$yKy0@6+Vp=v;2xf>PPoae;8+s_
zHqtxwcakst`9lluBHYjFFE4xs&Oh{nhoF$tU)J#n6B>u}eu_eHv&4b)4-p1Bd)aRz
zux@}l*2rYR%n}<8#;11AqqwQf)~a~Lup#cD2aH$ci(H&i@#5?dipgRU`}JVtU@YC4
zj>N&`rs@fB3iN*ucB9rjRNL;3e&I9vRBfFe6fE?n>+@>*5NShAVK{>Rbyj^yf5?Y)
z*VQlUbW2KfcbRU-&%ZkUm5fyAqz~!aJ74!lY~)=c;mFGx{^Zm28j<L3JU8y3wQ?0)
z;TpMvUVHP*9bI<ENlH-u#q<s1XQ=EtQc?Ddce3mJ)cAkuTp6Ci2q3J|v`*x@?n}pf
z28=rJQ=g_l6PvdhX=G!tYhFsc?N+0G?DBEEap!Hv^4sG!T_s(wf8nj5d$EK2`a9n_
z{t##CWM&>_klWK4$Y!H<P=iA_Xvwk5@4(Fm@48DLe@Ndegw4)WIXBY-S*~*P9LJ7e
zof0S051N1Kg@b4Ej-!u1Gd*$ecz5a+uP=~p=3&+vKwAK4AgNRpohWGmXc*;u&i<vf
zGxeqD#m32QW$ozV^Ci90(M!tq5$lw+w)MbCzf)N}`iUZz7QNXxgw>#PTQIjuzzwi2
zBw}!+0`USiP&Mk5BTNdBfU+B#4QNNBRNW#*bHINHCT=Y&n@VLZ_ofnDlO5R8t-XU+
zcI;aec`e%;uagQcRB@HineDvgEifg2k#67YEfO}%0iWEs0l#_?MoZ>24hT~PDZ?yD
zZpc8AS4l%t({W;u!RQ+4CbQY(=o)T^y)Sn*&k4fWEt_xvr#jQCeza@b-OgDtDV}9B
zV%LA;05UhnaYZ8ue3Q|V4Z>)NNoh+XStR}I*RNwexVi5JmxSKnh;6}hcWL!@GTVh`
z?Gk&!TX5Y)xEvf)%m&~RL8d%Iu1I@#x6MH1#T(qXp@i#<_85wsdV>S{;{q;7V!fsT
zyst>c4Tff(S9jF&#2W2qQ`b^i=z*T1*rR`auYw7-coAAQ$1O92G@1IM!Vb5*Wj9Y|
z&!?BezdM-s(<?wTS51v>+_r{C8r$7Jb4Iz<e<a@{pM-JdV8%8z5m<XeG+_u769K8=
zXhi8f@<{LOBafW*_M|<1hWl}!v<XMi5+@^;1#UfbJAh$1*R`$5TXXw>ACovD6*hks
zC<PoofDWgK&z;$MKrc13^Xj!JCT8_c#E6>?2zRS0dbfJm)Hw4fCpdt8Dir!?Js4VG
zg&nukSL~td_NOqJ0CWKOhk}SOfGeelOWtS}lSNoEYz2}1?r=DAaWcSqh3Ub;0>+6q
z>;O`+X(LnZ_6@GxP9d%x%Pc<yZ>WFZiX;p%1Jj-*pn^#8C(aR1Mw(xnpI<wUoB4a(
zxjFaKxFH-~YgGo`CD@SgL+8#tgkMSluEWz@pc^V@aO=o1k%R%<Rba`~9Zg_t%3L7$
zL@aR#3WG{o)bQ~}3HE=tUCIBWqOXz{#iEvh2J9ROIoUb)p0(xM^P>;^Hk5w^Pt-F|
zu)I{033nTx2TCJ~`HHU?fs2`stVzo!&pnhnmnScDpdc-uSlT@IP`noOILRNAj{!zY
zLMu5yXuvW~;s>V?9P=Wakx$k1U%Ol|KdY}?N;RwU(!<}-nxEFcv7&$0EL{FIy=KVO
zW@_o-(Wt3?S|4Mu0hP`W!8L!i$~2(>Y3KRTkJ&O#WuYIhT<MRA9!zr%Iseq})4)H0
zrjZ6x$|>q8!@|<MFVy&af8et5&ze9REvsY09Jo?&k-|a6Kv_qw>kbB8Z)~RPzeVjZ
zM-fQR*8H6zCB=uT9oTjU<x2kq)8YCJBZsU|S*M9oOv5>Z?udQ$YI}bV{;X+)XWJH3
zcMF7v^?G%hqT!eg&1r}?)%mc!x@w;}L$~g9z4zYR>%n(;xMr^>q7==}2qb(l3DN?w
z2jiiFMb-y#{$Q-2E4m<o2ovrdhxS#tRjz@u-c8t;a&!aPx1uqo4Mz>blSoiDF--W*
z;OBpzj;MuJB)ua?o6Ucy+%3Rg`@<j(sp>4Q{z_D~T{+s0%CJ=mwp(bol>_PMMR>z`
zL`zNs)^=;%tPzA4@*$3_VVmIm+f6MOmgR6Z^GNlz0}1JgwX~+DJ`)TjPNzcB9+?r5
zhIeHO$~3Y^zQjh04i<cF8m>DFwq0nHi<WK`%i8pKz4FT5EAW4J(@X$f^H+2x6g@No
zcmx5Zsi;C}l~kRkVO9Z<6@ik(3E9}()Hk<u*luk;M4~Cd4*JNu1HPz8Y%%H!yxR|#
zHa75v&CNggTsR6hgx>opF%=4>#7~X!`X10^;L`Hc{MaHWu<p9!Rgg^%NY7g)solw}
z-J{eTH9oim02_Y-qo1t=Mf)9fU?0@fZg<){eS5kxHdB2BW@?h*ki*pk40_TmlHF@I
z1$+c>Tz0e#^$>UDk{%$ONrm=k7jVy18+nw%P%>}c+&~J<W*WF_-`u)g%DEIeE@{me
zOWhhpt5v`z8nQi@>;Pb!MDcwct8?u^GCO}}!?<dL)ZKr!rKq>mvZ?o^jEyK3w(ZFZ
zyF@7qYW}EBNG>Wx1&CDTK$kc^m@e%T8`0dTA4{e3vK(c*yADc7$8s&}D{@YTkIQyn
zv8*OL^5`1MKZt>oh;wARW*yY!00G9;OP8?H+i6=vszlgnU)`~w;`R<bg7aI|Q=#>k
zv>sa92Bm)x3bCguy1rxeX+76jJ&3seno2-#V)_AKsG166C74xnt!h?b8LT%PDAU$p
z<Fp(oYpy%hW))UHl(y=?U|VoeOp7Y8TS24(1;{bYiIU;oQ=(W=!n|Mf2mHZ6AQ~2Y
zQ6-x2g_qR@)$a=m!Ehp#J(|tQA%D>4R~IxpCI)}o_m0&P*4gJ&A_mIAR4^P43Op|e
zgoFbD#YY4=6p(XHF(ZXjvR{aZV$$y;aw;rkibu0@AeuiO5Q+NSS&Qm4@O}R~l_r4t
z2jCs)>rkOf!!3mj0{kP~!kN6C))rcYxq2#9pDVN$w6vW+BhH<eTP~R<oM+PM3|u$O
z((-@YiD_w4gW8u713*nM2J3(UP^qXG2q)nIGum3JQ9dO{1EQ79MFHqp^|ST%tn&8Q
z<v&VC!!b2%Wb+ZkiAKF{%>8c`Ijl||(-@Z`#3o%KCUAq@?heWn3UKY=a4@E<gG2aG
z13C)y8w9}y#fOH%mM+khYuEPJGNlrf&6a=Gt>NKK8fxNcD$Sp$p$6c&=MHbyP*3VZ
z4Pyn@Ow*8GS0Ba0)qSY@b+u9_Q3$X{*I!>bH5$4T4BZBl3*5&U%W4!)Quzq^A0tA2
zpg=}8`$Y8gQfb35HcCsUqqle4eFojTl_SRSv&W4il}@MY_0JH-2<b1<9+-TdDiMDb
zr$}=qc)HP?s2N`=90`4+-98(t>x)N^E=G}{$Udq{Y!la*Z@1g?#?gyM+l<!iQ}yFy
zMsz8DL{?1&eJUHCB;;K}D$GRKa7uWL+$Krc<X$o>Nk8xXau?behc=2u{0BJJ0o?7#
zJrMmuqd$w0V&cl<;<@CjUxPNBtDS$luUa)a?KX6p*MHaO@6#~HP6DR^1gACPWR(~i
zU*tuTa1TU2>Hkb%FY>X#>MCyw_mTVb4}bWM%+K4F>qMjFGh|`(>(%NQeGIAelje>i
z#ZDHHFg1|1z)TfNu$VPEC?E*{;ezSWLcKE%mjGa6fxz7WNJ?fKx!B`kB%XiH&X+?e
zffp`I#Z0~!31_89ND9WKd@!5J%tu116bp#auolH%oQwxU`TTp{9SsS5D3(m;H8mOz
z`vX!;il^eSycG>gevuavA(iPZ{tWv4!@yrm?hJP~wNo(_3stz_0cu&0v*9a<Y|KHh
zF~`MJk4>+8Kg6MP>MdrWARm9v8Ak5olJICb`)IaY&b}>YoEC$@s1*G7x4se!21%iu
zy*FDHVr4A9h?`@7C#6J52uY@qyO=XX?^4cyOMeT!Bcwv!oV^NbPz8B!jcMWF6~xJF
zP&FapsZ5C_GAjFlnZWX(yZ}VNrR~L%9+6xrqL&u8H8&!4rAQkDsq%kZcdk6YM*54}
zOO;dUH7OF2*3zdc@PkoLQQ(xk18yrcqm4$iS%Aawd;r|YrJzlVus*3`-dmaUsEURU
z$51E^r5Z4*&v=uW?{??c=H}MsyWPC`;I(T*+)qk}d2@-%pi8D;b(hSRcgnEIe<R-{
zA7Z*S2SEX#-<Gom{7!%O331Xg9UPrF5z=Tz)CrWuNX-XJP0&OfVB`g6b^QlIBqb=Z
zm~yA$IE(Rkx<I55$bRyj@;$=qU6F;)2&t%;cAWHubUeQ3I7%U(4ap!#UPv|1iLZA>
z7E;~_4#)tgS&6ezE8)!}hs`bo?rhpM8CjhtCSwJF+dMVJuONS=U|>z5ebUQU+={0g
z8B)qYH#QaX=j~o4Z`=6_H<1(Z=@FoLtJK=c=qUm$@(*vrvnVybQ9D2oB-|Uch0&$2
z0tQf!_sO1~pn(c*lWG!Bu{@^0->S4LMIpIU*b&S|wOy&St3Z7(9z9B2IBb{#TuBPW
zO8d@s#m4fBM<;)C^AwfhN{EKpdokrpTBrbeM{Sm9f@sWiIOJc9ekGDhMaZ+T9sR))
z`y-pMInho<Uc+m!*}S`6zx(BS{pIcL?XzP!nNdZQ6gQZhtWg~=5D#N)9AhRyY8FJ|
z(_qk`?wJKeDqDku+S}Xf*x4kNoT2N`NOo`nz}9x%&R&1_7T3HJyyJjYw>{~dp=<9S
zCBBm{fO3Ek9<S+f`#3rvi1mBD{a$Y@GqnlT9-k!UZm-wD@&lVdlv-A)Fz9%qAYT-d
zMHDrX*$%2;LCStDN4iwpb~^}NlG)K-j^wy0Y!L-+tbjCdsICCCSfd(;=1i5N*ANE{
z27?Yx$C-bs`yhOD>;t_lS{F(a>dz*E2AD;Jv8nl*4ZtnbP&(F;eX+Pvw#pktE2*0>
zyXQ&2l6P~}YR=79hL!e`aO#w>)UGI|o|r?b<k?iXJ?wXsyO`B;U`@%-sLf^?l*3|k
zZ&qnCum&??@|5j7h?p6sj!5S&sx+E2;+;Y43*Ud%zir#2y?%dUqa&^jg%|px0kI}B
zet)c)`T?|Chu*0IUOoaNUn4*tQDp|q8a_Zhl{64jl*U0Oan=+kpf$}vQxr@Erh{mM
zI8ormR|B!Y=LLSj?++^B&*Mor{H^zme(1Wy+6jkKABcQlFOU?E3jAY!|C{|nOH2kL
zJ5hh(&2T0}pBH}hqvyVK$1mUhOWP*`fqUL}mwMN@eM4xUO!52zXP`7XY0SFUN(C)6
z1~t^shACt?ZUNg37vF1*-e>*XDQt{;Y5dUP_~4v+N9LS%$M56wf9dvLW-`hyc@bzO
zI#?jEq4Mv+^g&q8<Z0UdZ2D{wa;bi<URZx#h@_$g*uhDvXlDw|0%`xaT(6f&NG%l9
z?;~^l*0<D!1@-$_I{KT8T}%~Pg&&W{+9h44HLo<11`l6icRGVk$7WjQsaYj)F*s_i
zLx%v%(*jDvG0ATWLLE4md2#fGi$A<bEI6(UaQY=Uqg?0){cRA|Z5^Kh9NAD10keMt
z9Z0WPjT7{cXrXXcMcAXzw`4kmHd6F_rDLx@xDE(GT`WhX)s;K6Rml&pcBd3^p7_A+
z@RmcQ`j!0pLk)Xz`yCO#w5r{)vMNQ(i`WIXf8Ys+-tF1QT^Q*&>Q>O!&``v&cA=y0
zsrGZF=Y|8z8UQGDCwBX*<W1NYa?*bpTqpOzq@T5JRy^MTq_m{(;xF9+ZpM<uAH$lW
zUJO8b9rkUA^eY<l3)n@Jq2y;0-C#$9Z`_W%aeL-$MRnDV?ZOCkyd9c1ym#7%IkZaG
zJwuXJ$_FSz^&k<o2eP@vm;tgp@|8k1*<Dy(=q9s;OtF}O(|b!tO83GkOrd|>F59b9
z#ok@`BYgJ>PZEKyR=6c@1u$ciI|iuf6zUC`zC#@ADzJ~nx=X73z(GJA507`k<%+i#
zy?xuZVL0p#a2sSmz<9c-q{ee77!7dS!OgC9tpmguMNL#J<JW~Q>YyFS#?3BnW-Y<<
z%optSq)TzyHueUt57vRH;|+hjAa)K+9tS>BJ;WtsM$Dv=A#D<>DnKkGKbtvW(1+JH
z9*Hl<PA`Gf39@IdmO68l9Mkgjakn3>94T#_-6*A@bV`HE!^%auA9_E~bSNPM(k35f
z4(==Vl^fjWc!{s_{O7(ut6Xor%JUU}(Eqtv-L3Z)UxQT;g4NLkx(I(QuA0@|e*fP8
zX))C}LAXx8|3LHTBO8EVq>05f4r^i6Lop}0+qiRx8)k8#_7l!!x_H@__x#uJ+aX<C
z^P_9HeVyZXDD<y`bHyTqsMNtr9Vt4XathrHXaT)MID6OHwMmCg#cMXzEW(?hZpoZ}
zhYD5AD+UvbkRo`3$_#%Zv<ZLs-MsfO$9{N<Dn<Hz+78^QR}Ws`>hSQ3;A_}X$->sc
z#yWT%VjsLu2j1WsYdwy`5L!Rr62NzwwEd^Kv)p-<T;)kCnJKnKL~{bwO=EHdQnwSB
z+^XS`$<y~Rr(eYzjvv{6%M{5!&MTuY;`txhpT%9p4)e=%<OP2`-gaM;BCFq4lthBP
zlQ%Gy?XOCsBYB0Mu{T=gL(6$4RJt%w*%}T}{I|z1=wZfh!x|5A7pCM7G+}`Jh6;l?
zfj96tjwpy`6#$3;KtxDuVvH;h9pDL^dX{yk<!CCRm8wa&h2`ZF%gZhyD?IVpB<OFZ
zQbEDr^$WpNs_B0Z65B`km0MkwljF-*u!<AQtw<_j@S^`b&-;{^c+?*V_>YP)#mDpK
z{UUGN>T)nTzU*<A?*aWyQSBQVHK6YuoKO_#H;O3h7^L?$_}kcAu?mIZr8C2g(eM(S
zoFVQd_-k*jEV;w>5O$uFfm%h$!^vFHq{es{*#Ho4)BArCx6^KS;5+K>!gB9)_TU4f
z=F-npJp#~%7$WxyTKAI;0t-Y2%CAtP6;@%5uI}!3I#@{umF^ay_1r95ATn<%#U=_e
zZE8q!sdduo+4c=?;-iYR9p-pNGo4i!XH6vB`;B*eVsrBo?=UW2y!v?bBOi%AewCZp
zF|Gmvq<DW|fuI){{fVQ&K$qWqPWc7)yZ67}c;~<B22VWlW%g^RXX^J7#oVG}o+O9s
zxTu_ab9uI+cdb3T73_9{TaQjvHu2$VGi(oHjf?U|`@m~sNG&dOOe(1JZ<<99yC{t<
z0@4fOfuS<GrYIoVq4}lVv3osWl&-sHkL@i3y6%6AjPEtq9TO2342olJ5hUQADV^zY
zrhGCx6Hm?dtPkfte5Z?MIP4tY0n~a<%R>SchX{y6s04FFXF^rzeFLUo{gthny|QHi
zw*BTK>O;tK++-H{PY=bsUMhQa^;~dyIe2arHRP8cz8f$JUg@UBvL14p2v^|Bs56@3
z^0I$ZHN^?jMTv~+U#SL(Dz7|0;AixBT+f~;QcvI~A8M$-Ya!TBmbULbv$%NX-t8q4
zT}Vb3(i*+oc(7UAdWU;;A`xDuo(zZ(sed7L%+m<BjUG?ibh}BnuhH$ae~-Yl`gGli
z&7v~I<*`ewp4;!cU8Hdlua}vg1?5?TN>+b}yv}m>pp{2v3KdTSK&Q%j)d=7TLxu<g
z$Hml;tax5ycu!z_LJ=F)TSDn=avm@kpfW2bkNy&Eh98r2HabFq6hFwzi#F+5qhU5>
z+xw_57`6#5rGJZZ-fg!*D9p(pgHw<hdr+3MY^B}q!Oa$}2$c)t**b*x3!oL18Et<}
z>Y=2a@NJRZj_!O!cZc-{TdfD{ov!ZuqCV)l$Dh6si(Pp7xI3#cLHZGAo<_)}MCx0B
zE)XEs4|Z`wV3myA-Cft-ovgR_01Zr2%c%nM2IeioLZYo#P2~isC=D$s61%p!S+llH
zb2~hr$;^+w-|6+pyO(44{PaDs<xqd??uYMg{pMUPG6>fmb$itEkF)bXkZ-`7A>FX4
z)n9~H8<P)qq=_w^0B52)MGRHIGu@}vcr!+HUyHoEB_BO1x3)Fyqeiq`i5koCm_L{d
z1j3P}XP>=qZf+?W3#OyQzi{T^NbP~`s!x|QC-3i)r>s+^dCKy&+gEdTHfw+9fZpzq
zm>f)mm*(g1d-mC-Xeb~gq}s!03RPcqyIU)E?mw9U5*M1RY()DC^h^Qd`5GX(V}KsG
z3b5A(qRW=khyhrrt~+olR?UWB8YhS&hz(T(X%EYR&pN7Rv^1k?>cpff<cY!PF`mC&
z5T2F8Cljm2PxJgw^Ub;FebIln!>OLS^JFBYuNDR2cAkF>i@$g>EbFW9XU?e};6`(d
zwx~UCEalCo;UHW7_|o$7Ufv89ckN=xJVVQ}yHL2iWQ5GeJ?GW2B}(#a(*tUWV%{{2
zk}Na7Y-d_Fp!^mJWmw)Obz>6|xEldDzMxn2k5a&X7B?@q+Z$EA3Lk&{XD#a&VE<Sf
zXuM@DLCOE?-2|Jy^=ojA2vGW-Hf*Zzw}$Pp#$ccP2K78LTOgzWgBMgyCxB4uC&>vy
z{^INL<ko}cqwP1#@q&J_@^vvOtO4x!dgbC)JoRY%QS*U<o{WE86xRfKN>UIxje5dU
zS(agIPp+lsH+$kt|LuRwN(?Bi;cB*KT`@e~fH5c;=ud<CJJYBIX66@QvKT7!zBPEj
zFIofEJ<x07WKLeSuKq|{nNQo9#b@;1=?~eL?9AgC`{O0!eND1;H$JdkFPP2cp1yPX
z<7lJYdF(Nd3jBW*3u+*DEKz<mw)|uG4~-+j73RQXH4!4}1Q37W2~stOUT9IFYUc{0
zYlWO${YIfsjz)K2r7RhG8m2%8?>JlE4TVw)P{N#&3Wffl{6L|cs>wa;>E2SQbl-im
zwoSB^R+w~*)YX}p{rohi+NY+|nW=3Z$f2&i=U$(kxg+;L0`+h(i#S4GPf>9yC7>xd
ziq!vDW43V3^B;e$n#rnBg6kl|k^auk=x<8%MOE|%)T5cwTv1id<TpTkA$~ELD=p>E
zC~9$z^e<h%bWIE<NB@UkB;jZ<n25?65&gu8N~7<GQZZ6U2E`fQ?$jZ_Q=Ss{X|L|b
zsT2RSKlf-z-S`iAaxWaNX@<??I-GG9KYq}6>mPCS&R~D$2~%B1q+fLO?qDWPKpK1J
zQ%%{2sMj*^IOfERaCD+o^X`^$BAXi|X)r(hp$*~&J-TtAS?bY9Fwt}jbR07s(s%W{
zeq_IP7kWnDMYz4Y^a&^H!HO|~W2{m=`&g4Q{uak;b^O(o3F~h{1KZx;jmc3@QB*}C
zJ=LPxeM^5GAMCR0+{~;^18PKD7`4bx8{rRmf+`Kq`9Yvw5sh`2Y7SaE_iyq7n3~Hq
zqiz934hCW=F=B;;f)J{=ZDJj=)=!U-T{jT%MMFX;7Eb08(cqjElZ`rRba60%rY&$M
zKr+9`J>+@cfY41fU<$CED)Yu-wvqK#@r@niClP;w#`vHyKInP=@s=EpdM@*1^Cs{4
z9!R;VNaO<UqR}sbxDIE;9XrhjLgD1Zll~S?^*1>DSt>HU<)*wc5&50w?nI<3qH8SE
zCa<>~gxYLC0Kh<_9dwhOl;FRy0gN9XOiW@#S)EIZNu|=PW@I^2ZB{h7(5$KnA*n)H
zHZ6b1b6;jJB(dGUVei#XMC4#W&Q~h=bW!{*v6%J_-=0ZEWU-J&D~DPNl+<E}y$i9~
zYuVnbG5zuXNnYkkfM<7L-Z3Nub4iOK6e38mo5=BW5(8Ro2#)TH`Ak$N14dMleplmE
zXMwlCdulDSdcud-D0zoFV+5TAL`{Xdu|9vzss34fb=_72@z|nDVtFYcEw>Vq?_ESH
z%t^_@oc{s;NAp%%C>+UUs*!v!7oS@ejk#nz<ph!%$rdw&NK5H2hXj4CVTC0=oD+!<
zZmgxlk{mqc3x?(kiBK#WTT9rg>er8~tFj8PFCNue3t=sqREaMR57MPXO#KDEu)2S~
zr0{%JPDB$vzSy*RpCCPvEo#0@G8Vd1bg~Ug5epf$CdZ=-v7DkbvP#6?^T*&RdLbzC
z7vs~bIKj<R95WjsCQb+1h{{PqgF#<+shT^gbvTI3I#`$8Yn{%uYtxoHL{NvGh|>R|
zC+q+fJydJo_2M)TiHU&VF<KxF-F1JGm~kK7Y2GR6=Z_!H=QlR~s`>o$P58dzos+>v
zo*o8hakF`a7U%N}jeH;KewXK4$H_>rPZAdYL%GLCsHpa4Ca!(qZvE+Rk#{objTT+_
z!ae#k-<rlXb#8;(rZzyj;HaZnW2`7s#!A15$O|0~LKa<+lXcjbEI%%ljf8*H#WRZv
zYWEa|rPwhPs-Z~sZgpW{d12ui+o5$bk`CmTwwEGOTZ*ViA60q?MfpHFlFVK&z>UiV
zwq>LAKY+Kq<VA)VKpkQ}9c2!X&^-a<giqBRkp+eg|L2YQyDl70r;lH_Yu>hF@qFbi
zZ@D9vJ%9Of<@i_5#~=AmoAZB)eC)!7W9jtV@>a<(bCqoNj?0&C&*jRSy@ywF&dwyR
z;1Z4Np63oCyPdiU>$_Bi1v(BXC<&9Gf`dqcXL3)x>xmq0#xVt##&HC%v`(IE!PlFC
zXzyXsz|@O{MY?Sf&0w}Qj~I#*XB)RXm(Wdher;~24HR##Tt8RuFr|M4Y0uZhPk8p&
zUJr@bC&Zd=tkv)KLN{i-mzL0fhI%jkL!6aXiRb7_?dE^+ll+ucb_$gW-g(;_`X{}o
z@X1e(k;(r`zRaTEptsRu1*yO3s7O?+Cfejohpz#B70?S*gy~m0p%pc)m^UkCXs)GX
zlF3Z!NT%0&VJSLaNJW43gcdE3UQR1M_+UYgMglf3r?aPS%O>T^y`9n3rJt!6jC<!3
zk{zAIdOwNUbCfY0%^+>}t*^fNR%P(&tKRj$qTayNi{ii&SScz_5#}N3kA}?ux1Y+6
z`Ze<O5x=HPe1CTbUyY@_deG-Ngi#de=-QxJ0xU+QNYC=9*|>jKhBRg?LM?(y#T-YL
zDTC3E-G_H1>8VHTcH4D#q`dSL$FPOx+dWTx6qj!0S<QR)EgVk~K|XxYyMPR)eWH_H
zYj4l$cI^%ey=YH+NZ;UWdzY4@LgWDVW~haYYU<Gq-v-vk9J4(4Y2e;k!-FT#YY4|2
zrs84>d3^3m_lSSNuoS`L;au5gMS|gQ2#~ua1mm*dSV%~)A@>MCJeae?`HUt>;Z!Uj
zB@$9NAZjr+|KWoO4xI7mp+W7Ovr!D_K%h;i8;w@z9R$1CqrLyK*=Otflf&UufC6fG
zt<8tn>UKLcW@1W)3c>SKe3}CtjrwU>GaRvT;LbgM;{JcY?R45#u3uTY?*jAaSyU+r
zd<6!hL#_;;y{*Iid2B`)4|K!t1;h<#o1l3B?U*s*;S1=|lj!XVdss;r;IB=`xJs!!
z5jNWr-!ha^s1R64Mv_EoZwL5RIc<ar{`Bwao0|(;TMHONK<@ErsV)0yqsIG`WFeUl
zcqRIzeae43k0gGR#Ujvvg9+{IaWUYBD<0w#s2EHAoX3<*Ttx^(X95-TK)i+5AZ;qm
zk}gWK1t#GBRy0%!r{?4c+@XZi`DCON>Pz9If{s*5GA!9Fr$#$06=Iq>Ck2C2eo>1R
zB(F8!0sfo={z2EmfiDt^r36`|NR^BjDa|a9BCvl~gY*^K3)tV;L7$ODWm(}v{yhJk
z7nfgL25dYD-M6nRfQA25u>lO_{n86BT0ifh8fN85a&O|^KE*|}158_OLYIgF`nR_*
zcG^VGlM?_M;EXAq6`*!b%kx5k5yTjf7+FP+KA_7ynukP9z@deE8fXi0%ofeWuzHYv
zgt>pLZT(~;&>LLd2%5P@VkH_~Nv!9p!9uW_TW6<@oEanv(==F&)!g7_ZAFUmMwX<*
zSBZNxsH=0uYPFPC_25xF%NNaRaSqRD-|mwChxRQ>74Mz)BGlA45xnjJ%7e3v^)Kz-
z>ZEt4Iv4sDy7s0jU;`C2SAm4lpKlTTc?*95-8%eu!8iUTd6TN^%ewvxg@AwFFI2)Y
z!Ow3BM2JQze1PbDV1bZ@0I!n(Ux`NG!Y1#>ivrvpD3H<b$7Fdfo$e?;pX~Ez;(p?<
z2K<SPA5Qsnnx~}+f1nB%;<VJKKtt>W_*Aq0z<K~+xnS~s(G;XO@%h#R{%ky!^$ULu
z-bWIlz@p&yEe1jfpU@Ee+1TgtX>)QW!ShAGPm*$ee@>Eo{vyvOB)H2@OS67|mX`W`
ziO_W1RSI}ZiE8ktysi{<#M03J#-W}#aiHx^Z;Fog-!1ra&0HW*^dI|F^HT?;wBLv2
zr3A9AoIm0(25NATn?gr%%5x9-!x(=URG>|~VqVL3vj?6rx!?Jn+(CO?>UEZ3cB{kr
z7%-mROV2T-BYf|Mb^N+L<tT=w-?-4YFsAa~BYhg}G7l7ZiPGSCqWeU2raJ*bp3g*i
z&VjYrXn9aQ028fhYNDz&L2#|zVFZG2I)41oRl(o9|It%xdS&&Omjp|k`_6xpHFf*v
zM&A;a^!Y$rueWOix<_#CuN{ArXbZQ!^;rG>re9cEm={WGr&cTalPlWx`|fDh^=j>B
z=9ffE;HIK449?3kvp{H?836n~g{DP;Re`XNd5<WVVdhP~ZX0mB?pPYYalNJJxwGc_
zLyg8mG{4N7_%3=mS&j}nO<8})=`_jAExas=Qf#7AUK4!)ha(r+CUvnyJLo~akq?q{
zG_#KBu(*t`Y`*-|kM20O`SST6J;kKLzbF5W{1fg7_fNP_b6<q<1IbuJDoEjI6@6q)
z!4yzu?^GRx5x__^%1}^@7FAQHG=Ppp%LF+_q?!>`Yc;DZ<^~bST3UalT-jKID#f)D
zm9;^>SX+0hVwEW&S{jP+aK9kVAtG+nfQ-<`p!NtvbJVS`V}*i7NxK8hXpw&fGF2iN
zO(X+iGQ2XcB@*+QWGcHlM|`1BFrrJV^SQHgv6yPc3O4bjeZ5d5BE>?P#BEC0M@m{S
z8VxQ1@rcBWQZkl|tA2li@>Mb#m!%j9O9FuEg06$`FG##m3<iaSl*#&i;ZRcci@{`)
z7xc7R4)KZbZPB>$XjsxxGKr=l0f6JtFJxEZ3yB3G;EOc_DSsjWGhr#4QL@>EWWM0b
z1QdTNDXo_(dW8N+mjk4bl!;m(kyM1_q>vho`xPk&WFyE&pfG<*!XaNc324|C2&&0o
zIS^k6iov)T;S))b4@v%DKve`Om`VykDV6b&Y&tClUYX<bza5Mc5>Mw*QzP=>@hq`v
zTs)wNDX9}#%)Tem@Dr<~M6EuYGs!oA!7MUMLeO-*j05(yYp<{*1U5r)_AY5F3L?e8
zgucZmzLwK84#|Io5daz@PkHoA2pmld12n|K@ZYO9Cy3$35zJFsv8eZ)*{7H^qt7Jo
zl{*Qm9`t+k1$L$bc3rEtKaN&L6h5N9qFx5A3d@6qAF6BqlrbC{pBlp73opE|{_cFg
zpWp8H`~L|3IP|of=;N86si)1I%5#Cy3)C^r7)RH7K6HN?l#1Rlu6aV6-M6k;)CJcb
z4tLQ?51XBCx5vOU1Mz4XVHm#C>)A@L2Xw+7>nvC=rKx6RCX!jCE_<5U)TW}DKiqBt
zlzx7?d#<4$NdL-}DSgi}^|~3yj7+={tDe`P7wU2XrBJFG(TO;|V2tnfEUpc97uhY(
zO?(iAOsRjA5wgise(R{^Kb6eRm3InJS&kNZa!&4H&Z=6t-mZshuguZw;~#jxpDSZ!
z@as*yo&D1L0seNJiDW?IwiFsS%E_o?pJWE1p7f0*^-x4^Iqa!40zvH!_V!SPPTWb>
z4Zy7J(f)Ou5*)6x8~>TSLZvu|JIi&rw{h?1u5y2$gWhL!Pyn(D1Q<ykh3`(wpu`eY
z2dXHDle;uZUY!=ILTR+7fM+KO-8pMsDHZdPuF}$0qlzj|O?7~WQts*fsKjc~1bkQx
zm8G7=8E(M)X+UVpslz$B6b@&T89~TMga|?;77#;x)aQ#O)-%zt-{<rB{Q*IUOA62=
zF`9n}m;K?0Ul7DXMqJfP^O5lKa*7cD+m9Yk`bZ!rGz_yWwFw`HWS*!s(xHeH7K6ch
za&B$SHp^?VbHRv`NjKJ2F_2Cfg~a@s@)7{=YBKI$NCkWWe@OO+BH2rC2?*hYYS~BT
z4MIYZ1UbR`rASiF&V?eupeTjHiMT%{MdN=-Sx&?w;h-2$Q;E2ghzemz$;riFLY9*8
z)Hej6yuN5a2#LM`?<+?{0O-7w4EcN^|4E>_yeRtkU;v1^FA!DyK_Bt^WASH%0Ply^
z0L&JIL=bv{U-n6<*g{<J@j$I3S~T(Y1ay>-2T;ySp`_#&Co~wSaDZknf!VZc!>NBg
z*z>NPf@^7Zjd}E<ZHH+Yj9~|epWCrm4jK&2=+gKMw6z}mnnsd)nSgMW9hi-PgSO>p
zRL-V4sDc0)%Vp~Ulb2ag)l{Z5k6s^^?;4X>j3)gzCDlz+ZDLK!b6!H8!LDshVW}L)
z9i-`_(>zX*0*g5F40*@RvYJyeiDZAI5D$_3!m-Q5t=;|D-L+6E5&{rT3c4KEwu-BF
z*SIM^w44`x@J3J2#%~7S*L~V&X~(?oGl$F`KE*W!>PbiADa=OGF=#?U4gIy0Y^|2X
zTrT}ihxSm%t<_xH?e~Ya$1QvumBAuh0=R|6)zFjPVKQ!A#e{fCbjC}L^~!&y(`25e
zVo?z_rD%F1?d6$K(XA3yOc=<6#GB@)$Yu$*I~cgGm*wX7TzAxUUD9Dn8g#eD{adry
zw+`Xm$G$oLnfwOKi6!cXfa=3To(QdV(L~)bm6j<P(#Q|K7EkDvCzkHh@6*M~{Ke|m
zg_N)+p8IBcWqBb+PCtCwUPymNgRyVgU$5S)mxFNIy-QD&^+b$%D<t#(Ixa*D)%58{
zPW$xa%1Zj1UX(w}M!>v$vediHv#l%Ct;xV{_lUPV&YFa5tM9rU_u4LXE>qiTM`;tT
zXYaxQcLxKDrFK$O)ta@TWML*PdANUK($H=)5NaR-G-7Pt9@sUCu)crtsnp9Xi@<}G
zjp(05H_#3}ZN_);T0X_L|9YudT$;A0V0IjjR+ub#TdC$-KjGU&RpD%yHPVrt*U$Ht
zrZLvHqAW8NPm`I$f!s4x=kTKrBt$=p4JMjsG|3?umMo{gE|VC@*B4EUDe3<3;tvUz
z{+diq(;|#3*@m)l)-Hea3JX)&5Ksn4gf-t5OgbLj!kCBHDxnSqo^u#*Uh~XSzrS?G
zPo2hgCr)DB?r0EhKUjO}^y#N+54O)!FS6<W31XaB#mmm7$kTm7lsomG`#Js2L;cYn
z+^N6sefpgP(mB)@BK5oeEi#<JevNVFHe53p<BaN)Rn#v6!(V@^YUpo^7!$RRu;(#z
z35?SJErvpoz>?t)`}qyQ&l?RP=nMSsfllxJoBHP4Z2Lvn>F^2c><}>|{<SFa#k(Y5
zo{tK5g@_dMf66~+S<h|hTkr4v0c=S^-_q~35TS76jJp`Mj$VaLYDMRqi3;~136ys*
z2~|EQx#{M~!7hI@ro43~6V`uWyW3Lq+BQ3TD?58D`@s-5Mz+It*BD8g-F0Se>3R}O
zfX<rlQrxXV?^n@Tm||+`bfGv+bE2#?8&1=xcwrJIKq8p0&fwZLtJCk<E(O9J>j8NO
zc)ov*=am&D;D2f5rJ?PTZtt|c>@sBBku&W;-XG#sxZ!_(xM8eQ{t>lsz^rn_W)Ye3
zwB_I=5sOaor4>vH)A#HI?YPFTJv`bk5oLd{OD!Epms7E?4qV3HfJby;tW4?yKy52y
zTP{mCAX0UXIUQwkk~GAzSNvpL$j~jP&fkxoulJu%{YATDwZH3+I3*TAU2-D+XZG@y
ziUaT&L`Z)*5^1-qtJGC?wdyKuD_$^Zc#Bzx+e~TS38%yGInWecrIBR0!?9$m<RHUp
z6XVL(#H3)}I~v@(f6vEhb^~GyN#Fob_?!3s<-HHETnMu=j7)RVPUoX)pgdtD9qRbO
zTsE{OvB!z2K%(jO`&6Bpib$kCll5x9H@dcG_vnAj6W)IKN%_}#l1aIabLbhn%_~=$
zx2WGPmwT1U;kt8&B{7y$N~B60@o;LXf!%iPoAOKTf~41>JnP?({|n@8v=q?%QWff%
zgPi(M`U$0>j`Q!ZNEMn(jr!y{2#4-mJQ_c(-=^g;BZW%M$G>m;jrWYPoP46ZSbDl0
z3A}&0H$1vHr=8YM$C*V1Ez^p<RvzQQfo`alqSCC=!b}U%f4NB`n_s7uCT&^OY(kGr
znoBckG$#3wZ`IPj!6zs3qrFR#j4j^W+j}~fYOnh3TeNi_nwU$vqrHsGnhXFak+Tzt
zFy}@7?9-9TO(K}MN>NN6MEE#K7ARB1yjXvj#ci#@R@zP0ICLCsqO%1|jSft~Hms}5
z-Rl^-qe#)wYjY(lk_t;8qS!((o-!O7+U9l$4e{BRBJOCn8<CV@<Z>=6g(B&g5Kbn5
zF$6R5?EF=99=yu(zrvh)5hQ^yqdhVMM$AoY?3_StXuFEiQ4|V%P$D4c$!TL&V>f@5
z-NT6QaZG3zR&p9`Zzzd^NMSmY@Go;vzED4Y!diW390&H~k7O}iOU|wK$Khb{18jbZ
z#)H{3M)Yv>JmZXGqpA^TVnQ%fgqTXhWC52m(exhx*~?F!#qH=fy~z51djd97f%QKW
z{IB5+u=yg!*JGUh>9c1k*Z*7MQagX9ig>*m^XUZRZ5z!=`cA@Sk1vVyt)oWA3sfNP
zpU1?d<8?J&o8Rk<28{JgFa*j?s}mm25`c^?!{~PJ`RG%bV|*RTF~3e~Kbf`m_bnRk
zVDInSv;@}pz&mKS_tA^q#hg6U+diAzN6C-r+5Q+f4Q4j2&{f6JGz91n*1~@b-6pje
zItPq=oT6c3qKgx>(b?BtTAV9x>V=gf3spP6aLqtFV7<)V{XZ$oieK{QdHxSyTy|GF
z?IlfAgTY`SK|<lA^0&-t=&~-k-Lu|>_~&1=Ug8dE>6kC)t>_*$X@S7TbPf~0FE8hB
zzdipmx93+@@;A}Ik1prW!Id#{`Q?@T;ipkK>XuJSqlp0%I5|v5eUQ!x6=H`Q&<+MN
zez714(U4z|b8-Qg-jTvhlaV|V4Zct)Ozip}rx6@B%_WnuJRBO-0UD1&VWpfA1ZTaK
zUMkA`-wUHh1p%*I*^}oyEq}(xlBp;ebQPn*4amyqC~TtllF8;yj2w8{0_43y<r|Xv
zy{=|PDyfZ9x8Rjbd~T`0LnWP@d`(L$dZ|rip42!dpLzM_xiYsxdDl91O`<jxXX3Ah
z1{ZTIa*1Qn_@H@YaQxEaccjhkItK1eKl&e2Nlbo<wczTcp~LmAnSZ|H@k__2l0L&5
z+3dao`_)TYTAeq>y!*Q}$DTp`=Ye;LCJ-u>YCl16kg36h2`ab%>j6~Z!bBQewLY1Q
zhc_$Ya$7Uz7l~ypF9Xe<FO9z2?RH>+Tf<{wG8B)c6Qr86=G3jF#l@v96>c3~KggZw
z9_YErj30`~<}~JsM1S9t_U@Fve7Ixn?X|B?Dbja$iM7+Ud(5Zf#(x7j>q9htxP)E?
z4$T|_%vPfm3f{{Y(=K3S_;pOr^%!_dA2`p^rTC&R`=<+ADbzvRiv7<Qd_LqaD5oYY
zF$lElvH3Qz+iv%l)StcZ`S~_-n;rV}KPCTx{4a16<1%Oob$>A9fGm2c8=Z>jFdscn
zj6@*WzWBq7Uw!zws?yXK)P>O>J@;_6sjV+8sDCxiQ*aUP82#PD&sFdiMSu5m4})me
z)OA(!z~x0Y^AM5rC>KDjQ59ne$54a<ld-TPqZy6{L>3jJS`x`W9pjFRM=voKlMiEr
zB5`fwp3;g3Gk*YaWEs+620P2zv29iLVmn+K@dUjMQaQih>-YLD5S`I3lS==Z{5gzv
zn0kF2WU+L37PiO!-vv#)mGbPozEaa`@LADU-U+kXKUXMi7(VSL{nj%Jc+1K{t+ud2
z+O@k^lX4vHOp{yb*L;&~Q3ADwuq<?rm*~c}+5jQ|sDF1{RB_>k_V15rMq!D1{+V1G
z*Nmn><HcsnM2t?49XzEcS`*LFcbTsv=q{Of4&OM2Stl_uA-R&9OP4mw)#{Ry&*Rah
zEo1R$c0RLGS~|79e#$g2SV6(Jv~_CTKHppm_(i*K+aC=S0!lf#n8f|vijfKwg~8v1
z3O_E8LVscOO}|Jm`+*N2#jyg=>VOwH{WXw{!_+QN#H<iSg-QW|*Gq@nAzkDKM7eUM
zf6et0YI<35dn1?T+HBM8xZ@0*qX9Eyq0Zoz()b%?u-0xWk^iAtu5VTNMj5c5ojD_i
z(qq%vf$R9QFgMUn?upa@FB}cs0?>!X6p^ptT7RazjeIi_*?e^~S`Js+db^`<u59WX
zh0SQR+R-~zDBjdb0d^a|z8Q&_aLZ@tE$}aDMA$vi&3VtW7bEnSxl`PO7)wc=Nfjyr
zvj6&Eo}~|~0$4X`GytHlmV?XOp>aVpfPr43SU`5@nx~lnz2toWq!c%E+xgo71H@9}
zK!1jC&_}9;Tr%D|55ljanA<&i8c*g57sdy_UQGZAP@`(FEZKSVA<AaIx*1I*q7CAI
zj^#?n|G`Mk1jUFX9LeQmKJ^=T9F@YNB#B`-h={?__p1qzaKfR?JRq%X*5lznApaHK
zy$aIF9o&8J_NbqQ7u43_2zo+8Oa62>Gy(7h5Bh)VnC?@)<$E&>#L{m&<`^jM7xHSZ
zycRfK&`y<o#!oGcUq3Fyq)6=MH~uc8efi93{bS5qdD$n4slbtxkV}f%W;9NGMksgc
z;N6KNMM&!w@BEkA9Hp@!=C#Kjd-&GhBmb8CQy6=ca*ks>VpC~?)TJSYUuU_&Pml^r
zCcb|_fEg?7)xE6ZikE>ybI7lz>q|8yg8*Q)@7z9mIe$8Ew6<oQS%jjrW|Wybe64&c
z)6PF5D;vL_Sq#_0dZGvIPF)SId^CSLB;~A7o!2TVCcTGu^U~kPqU}86Gea7qf(Yjb
z_c-?~(2_|U4YWs_GzunZbKO}Vr{VX?XykuZ9rF|!=CmtTiMmoX&1%zWH8kc)#oVy!
z3i@3s=J@|T>Kr)jf5FFINDu~-flS?DhaMwD_4#v2KTm9*KOhCOeqQnUGZ~-4`?JXa
zrnB&i(X5Dtt8zA-&dS8ry#E70Gym9oX;le*h>)rO1faV5C7x7#Qg{w3nB#+CUzvaR
zCzYfxQ1*qxbMU-5xaceU0!bwr!D{76et72bcN_NrwK99Qkg+HeP=2DP{UP6cz((sd
zT_!FD1TP@ClPgSU8G1rq`PT0D<pckG+r~75^J{Z9x;0&4zss^(3Wt30&nz-ueCDmc
zcxEZ0vm`R}mfCK6b9o=;vO%K>ZbyI43N1F*QDiKk8R=H<0VMUNmu`X7B#*~iGj&4t
zL&0s##p@<#+b`!8DRl6HmBKUm&oG$slFe&w8%F31@v8;$;^DS`ET8s|U(LKN{Y-xJ
zCrs_4+lkCrruaUMR9}Rd-kKUUk!o=cB?9!4Ka2FgWMTqXfQ9nej2ET-kyn2YG6E{8
zY&03Y!L?lwzKD3Cl-+pTWi05uYI-I!U^aQ$=R1wAA{dVJox4hz_T!$fBSx4kP#x+f
za*LwULPkM-6+AL&j79jW$+JXChBgs5l!F{lF5#d(Q?1LUUXA!4Kp$q$3^$|+s+B!#
z%yi?Rr81x<Y#X|`<IVTc6xV<4gDjXh_luOeO`^5D|H((yrUScx(wUP|kF3yAn%Kc(
z-!xaPF|Wv4{cK&6m3hMjXn6dHYOXRWu&5q6e(bX631k~^GyEb|j+iQDUC5ZBa$@tp
zqkxnzYj;z!@z`BjIgb((?bkn~{aOYN{8JdiC5tq6on^+v1e&mAwnKm5HUQ^vtFiw@
z0oV|}g2T?V*V(g}umIX~n;^tjP##oZzFfT%*4^319y8oTf)4}}3BM=^k*JyA{fXs7
zllRA0;=CmA+p?@{(Z~n!__FTe&eeBt_p|y1dX_(TdlLjc@{+MpT0A;BPj{qyr}5aE
z&%n}lp&~yYgi8H^cp-lh^@jugc)aEJCu+PPLH*5?uAZF#fM1m81E9>+pTe_uEnJ{y
zAXGMQKbQYFrqDRLxW{&5>;2QDi#kUKq%Hu~S37oRXa8T4-|gLWy$J%6NU#4YyM8dM
zS=<zQS}hPv$a``eLFM2vU@zX=5535#rn0)Kz<20HQ02#wR6STPf+|igD~j!19({5n
zpWE2T<tP7Bm5Rs}E5!%?M^?e{@6qk?{QnP!nlnBC0C=2ZU}Rum0OHi!*`e|LHeVUI
znHbQ)|NsB@F|jZn1u{7pz|sKYe+WR6W=1Xq1ONsivzSIL0e@E;Z5x9dz#JPKkR1IT
zqaEHJ0Uj?NR35P&>>nQ=Ss$by<sbDR86YnpNg#zF(jf;SJRyo9(IO5ayd!rbt|QMQ
z`Xo#wgCv|Jt|hM}!X@V>8zx95XC|&D)+akBXee<ge<+?P!6@=6ASqobeksc;5h_J0
zhAOKn;426#JAW%?E4eHqEM_c_EaWW^Ek!MJEuSs$E=Vq;F3B$LFE%e-FPks!FeNZ?
zFt{-MF;Ov(F}yMRGC4AKGKMnHGU+o%Gk`PSG#oUVH5D~&HU~C)HsUujH-$IeIDI&c
tIGs4yIO}+vV_;-pU}R;iWYA>*0VW{k0zw9c|6o1?00bE00mPHfNQJhF0y_Wz

diff --git a/dashboard/src/assets/mdi-subset/materialdesignicons-webfont-subset.woff2 b/dashboard/src/assets/mdi-subset/materialdesignicons-webfont-subset.woff2
index 2ebc5cc5115e36a31318b490a0d2824c8a1af746..a749e1d378d226a9cc632e6beb904552829c81cb 100644
GIT binary patch
literal 15112
zcmV+jJNLwQPew8T0RR9106Pc(3jhEB0EPqr06Mh*0RR9100000000000000000000
z0000SC<ayll_Uy*=^TN-BnyNR00A}vBm;yL1Rw>0LI)rlHEt8`Fl-!v7(d>46s4He
zqmX`4P7h@Nrv!4u2v-}W|AM5^q_Ml?nNCDE#fz23Y#tA+KHnhI6owXtm_g0NXl5r1
zY0Ldx;9b7+e@#HK2LN1hgeIqmN%!ITZT`7Lsu!^u8{9Vw)J2;t(x@D+gJr7A@Nc*d
zT(--86tX)RKTjlqL?Dq6CigG^2sBE-T5GD!s{7kr_iGx-u0tTnie_>mj@(VoQ&;(X
z;R|0#MkO-l8yOd9hDfJ17*RxDH9!I*B#L%MbcxcmLPE6S-37N``6!m;mIRDR+jUo*
z(j;6`h&!y3cTX{VBpf@%;8di<cV4GdgG)+v?yL>~F!~Q}$POQv)&KeTIZMx?3w+=2
zB20`4Tyb_Q@kXxhf<c!#N#|-}yjT;o(Di$5_WiAPRwZT2VAxM=SdQ4Qr1G0i{6>3D
zC#jT5=>RPtXCKK{+R9*CBlSqU1b6=ifY9Y2bQ1Z;oW557P5Qf)LAF1FVF-33*y?fV
za!szuReB1I4WV(84iM(woLM`wSn|q|wJvtf>GikUUb#hcsVP2xKKz;g`7<zpG&3wR
zpfrHO0J01y96{O#NKVK(R~G|9+I<poP;ihg#8f#%T@2MeS69^cuDrTC>OU@0uPq_m
z8jQ==t!I~Qso#$zs<X)edWN_VOpDK3{^9cf_Dh=wIrq#t)F##-qM^u=Cn6v{zxNQ&
zjE<@{r;1MLJ_`hZ2yW`D&5B#UWJt$aQ3N9Z00#gV1^^Hi$m|9nak2t>vgiD(H69kY
zZ0yb$-`z8y{03z6x^rT$tIAo&SUM7>*bp(h0T2+)7TF(4IBuf=0fn#t3lwez*r4zj
z<R*s#Tu^i`zyn490(?*;7Z8AA#GrP?P(TEV#|1Gco)!#1@v>kDinj$LP<(y@1tnf@
zw}XT)Kc*r@F{c#EQoMM!)YR+@F_itXp@1Vwatk=2q@sWfB{K@nD4A7oLCL&=D@t}3
z+)&b9a7W4Ef(J^DAMkY3?T`G2#s6iAbYselFDusk*|HVLg$wB*S+WGv&<K$uM<^Yg
zFio0->$F4!T9+szMkqbUMdh%=VtwpmaX#~z?ykD3$L_#^p8o59pI-m$a5&J1kWgPz
zQvIY@tUo2Cc*RO2C{rd$wQ9+Xj8ZgcphhAMg7`2a4BjaC0@Y>0k>PUX8lgaekt$Rg
z<-GG!>2*rmV<=>x?5AH)yDlhXq3mykY?Q-3l0!r!ml-p8oH@(q%TIwwkxWF1QY2oy
zVkuIT7;30e(@ayg8Bi!kIkO5CC}-Y*N-M2Y<)DMAwQE=7h$Cuu5ejuE=W?MQ<y<|`
z;EuZ*_Z$jiP_F2Jh7B9d1{!EA;ZB{#S!t#5`t+G#z4a#U5jZf3i_2tV#!NA8+*Gf7
z-82_mFx@3HW(WwFwSU8b*}n9ZIr|5m0`o)$54<5@zF4ue<m490lw}buttIm0S!%V_
zmg(1Txj}<gaB*3Qj$5=?WxMTGYu9d#%Pw2H$52=&-t)qG@r4IA2o`LkOqrxgl-Q(9
znHKx()4Bujgf<B*UQ4i<A3s}H3J11XY_aV&+GvME4%s<96n05ya9}rIzV@h6Wv>Mm
z*k`Gw_S<BW13L+YgA!gT9Fp)sp<Tik2mbfgJBRlV3Ob4S1v(_^U*M=jSp|+sR9E1*
z#K8wn2ovGtvY@~jiE9g-mAJmZIf-W#&P#l~a6#gSg^MysJ8(&k9G9)K$`xy@an)XX
zUE66WT$jP4!VMYxE$C&~aG=u}XWVqjCAaA5-Ch?I?#M`f;4Uv-?pbfW`?lKVf!%g{
zw0}@|Eb3U`iRiEbPem&VJQICccrN<8@In&BftP{=c_l-J*Y10uYagNTR>qx$cajb&
z@LncK2R>M0iI3Y4g-<dSANb6eu`inkg|9OGUic<6ivr(e#uR?Y-2A{#0RsFIB*<?{
zN`Lg#*I#w&{Ik&}%yvQ%0&3w{5EiJV><PjKwc7c27lZ?9t2n@uBE@;@eBil5uo6oG
zux$aC1+T-dQ!xBJEM@Os%K@RRD&kRcR9MtToE*$2uOB&FMi;oI6!t)<uyXU1(f%#~
zh6=RKQ>s7_UqMAELJ*-^DWBmdty)G`q#vtvX!;9a$#^Xvt`J}`RfR>yi5cpG(88K&
zgsf`?U^RxqkP<fC%O6w`4<Vx%O=<c{kY-msYgff6LmtwO_T|Bd&I)myBJ6gKjP#Wi
z=z_O)TB56aQ3-sk6$?-c0uipUmKZ2P&DbPF1TuWwZqflpBm+ujavDqdf^wGyYZpc@
zUz+Mnm%IoR{+=Evp(M#r1yXTwYcMt28qucE7FgHoSpOXhs<%HtdJxSPI5dV@ia~vT
z>BU)Vk9NCp`vN?2CzfFG5zqo8F>7y}w8s8Mx?sq6;%%-P>b-Q~klQB<cIS^Z-r$Qb
zHqe($tGnLfyBPoWqTsdyP@!tNhFT>E;y^JG3wokkj;aJ1Z?ZCV2~M1mW2hp&+Nx$(
z%IZ31r$CK(6(xq?<@msT{;6g&9`_ra^og}6PoJL64iyeLS^pRECTf)QdJ)gv7VPA~
z_L`n`)jmTEKyTwuL*}%rA^%+b&Ck6zMNmw`mprxW!k_-rsBlG1f|P_mKI(n6dv|Z@
z=DFp(53R|#R@HsS0a~l0w{tt1sjiaCqIImsn-GNcu#<5I$Z=_%&?ZuwT9Onvr`gOI
zz}g7&;f?F)5<#K9lwcE=WiTFZ1aJV&9h*8iRv9y?t@TrbA9@y5y&Ua41e}CNYt{9y
z?2_K(G`$<=7h^Zs>9d%}Z>9Npc)D=W?oL7`1K0K0SMnZlyB`Wi;J#him+rN5W3;FV
z;Hb1?tFm+@Q>cZfWJ(vj5q7qw-Edn@`(-t}{BMq~{@3E09TmnBlYqO_?>$%SiGc`T
z|G(cfk}o@hkn(c9bT(mP#`odESR5G=UMEtFix`h|D(#X<4MT7+E^*wVC}&o#@6cay
zlb>f{OiRtJ*j2AyoUrb&Ad0;d>#;kM>u08{&G;-CIv%(rpnfV~$N|8*3z;+DJo7Fx
zON5UhK{G0p3@Ul^lxvcHsKG+w%Fe~stGFK_Grow)k&j?vaIJtYSFvw(I4U*7qzp;q
z&<mth8z)qdtF=fS3zd?x3T|nT40c<jg_+pjxUq+)kE+Sz>bJ@mE&ecT3{HFe(S#eB
z!der=O)pLvp9yh3Yck_(Dy5nP{Ph$KcbP@O7(fW!tQv+niu#6`IlTNYSH{RRxY-4S
z>jWC6y#|KJJEH!fzLo`E6=^)W8@h9SeQG_9qe&^A?Uqcz#i!ZvMvPkoKD`3@5-}}Y
z!6so+tpMZ-Vm!N%tJqD^8fx_+!#6s>jj~Co)N!prL6b!^TK7<C<hsEn{N+c9QNp23
z81_688q&jrnvc<tksnWFGxFgCsLVgy$pcUE7{fo)#^ZX@8+KETXge*Y<M|_llpCST
zTA-X!giui8xJ#q#iiRUBY_keDmAY58D{jqPyDb3cQl#6HOFkM5Df&Cv{<FkmHIB)3
zo&*o!Q?P2oZhCE}rPt#HXYs^4nz!c;J8P)BNwkD!ff^>#g#t54xbc39q!kwPfvbOc
z)=rl8E_aXkjpiT=@$WzTk8yqF7lpaQM%f=@8p^)cv^7sW`Qu0AbRUI%+>Dq6`+Ro{
z{w~DfSfVDC7)B0`ke)=Is+p&QdL$~_otrdKs4NETd#G+CkPxD}r>RV9DI91O5T3Y1
z+#yBUE|WIN7fu=`5JP&e;sPWT86qrzEz!>{Tw2fK(j<z<yHUiU@6rHx#PO)NOb-gW
z2}^oQD8`Uv??X{AUf!-=toZ)nE0tWrs!nyih0I|?+hp;%0KDa%ZU$m71VTc+hXZ-+
zdz4~46>w-C70HxA9L}on!iU7OMVr|~h;kxi9pkVJ>60{26m|kN9el0k#Fo&hqWKm-
zPWNER06a^O#%ZPSl)h>j>k!JM3$oUEr2%rl{~S{yTsBPqOMmv{Em#&$a63x%SLlt+
z9}V8?=xMBo0!$_2nv9VPxZHSGAnQ4*XdaVHaMBx9Flo4;){xW2L&$fI82Gs|O!b(u
z@3|0PPTOP?-2Pe%;auxEhU)2N-kR6gUDQLZDb5te$tlXp?vFE_?$q=i178~c@t{L_
zz_Iu%CKL5HomQ_JZ^as{H#5G4+=_$TcIDbK4tsv1vG<*`Lr&vXhs4OfOM&vnI&N=Z
zp^%)0l2gWwb72D2ip^<dN^{!wQI(EsO@Q1$oC7RRI@cD}X=7<^NLu~cD6b4l$y|Wl
zhj`^`W!46O^?`tLaMlnZBbt@{YP1CDty!Qq-jGz*k*|kyAa5y_(Ca&}EF4>Eyu?>Q
zd;X|UTh@a#7?P9;V(Q6aBXVfdYI`H28DwuC?0q{tq|uf%(|1~~#!SpQ_PA~dc71pM
zyMa1xU7YOLO)n!&G!2f0GDMqNvkMAop8P`b(Ex~6IL=CI5bv!)4zizfzMX9$zc)p~
zSfFb@LG^sQ>|89Wm-dx+<6IZox&3`2|Iq^vy@vSy2N}t{he^U52w%9~ibTPXBbp6;
zLV$9l$~4lYRYM48=TWm@#vP*{v(-cV=EkS|OX;668j|cj^1Tbu&^9;n=IPHZrq9l|
zN%C}c8FvB`%}gmOFII%;L|Q@{H_PImxx{wV!(TSMLk<<Lxr@4sY+9Kx<x&BV4lIIg
z1H~((2h=jVf$a-eX=4HL*ZejPe!-*+40uBeqnm&t@kbY&xI*k3d+lC=E>Abt%>^<d
zBi``VhGU2Bf=fL9Jj7y>vT%&hnuZj{-c6$@)GQG1BlaXT^kwMV@#=#dWkGKl=A`hb
z`yiM{&`@XT9UpW?j~L&2JW}+?oA6FH$qJT+RESatTwV=<(7O*m0KgFnqbfYg^BBvC
zjF}3a>5j;uNWqf5SPo$O{T7{ukLlKWhH6w#@vUP7;6#zV5Aj7<azWN;J;ewmUJ<2&
zAU>F?mMFijMH;9@AOC;-|NfH%>QIq;zBQ$6OvC2Q5S_9IA@wGi2?^MAXiPH4W0XS1
zIe=fq@@g^UNJVfgvRpd2H2;sC_kJu(JRAZVxG&tQG2Hr=BA<$DUS$J`k7yk`G&E%@
zphO<blj~*WQ@kye9|oT=6>z??IZyc<*8%@XrmU3%T#Dj%7V1N~HpENxm@72Y*DGHT
ztyN>i$<y-y`{*TdymLz|MkGPV`9|`LfO{|@K~FG2@U)FvH(HFUL5)I)&I!24qsCS2
zE1ulQo7Eno=oA`7BZo?EJ>RC1a0Z|vL}8H%R?usPV887|-M#5ThAe30&`1~zijEtE
zrpAvpDXf6Q{j5o8HG?=TR2Fm{PmC%VQ^B!;Tb}xWl1Fcyod!>WhfRoVC*V7(Ev`iZ
zd~+cQ=}IYYCxQZwhg6svXR(|Jc6@Jm<PW=@G$6FxRBr)C2Yecx6#X30d;vq5Nm{SZ
z{s##o9Uco$JZ4YW&o1&COSf*U+`7K9#LRd%QRI`5%>VCJhChb`(vF<{<}usCErT%n
z*Z+3u+>ywsEwH!ml9PtXXHEi4{k=QnLNz*Xs{>u0eVn(<Wz9}(QNDQ_KX34JPqL<o
zPz$|~o=NCPzaq6=?3C^Eu-`cgH%J`M7Gxu`q&~B-`sgV>Ki>S;Jc{o`sczK4wa1rC
zue}j2C(ptdO&5o;#`@a78z}M}Q$P6Vtta@y_c7qpHCFi<`3Z>@IEL=mqg3~Kotb{e
ziS@3n1uaLCpGM(4cspiOW5!ceJD!S78CmV1u>C3zwTT?yYl{Qil#x=z(fxJ}dIh7`
zk`tey8p@~M%I10ONjE6D$ZTQho1p74m#J}@SY0^wLKMKPfw!EUi>QY?Ik^5Zn0Q2}
zQ=)X-2T9`uk&Y9=c%wVck~@rZK}21u{M%CkgalsH;?lq#Ho;3EPA)kUMN(4FV!WyI
z<{^0Jdaj^`gr(;-3h<Pu*uiU2e~UmH+5*ej<&@E&6^|@bITf-h7#LAzRrK17b29Uk
zY`rapGbWMO=0a_4;2#1ZcMe*O|D>&xwf&8m(M0QwI;X}+eR%yKVG_u$HIvou%Gd<O
zC)TU$(?e5h$$UfF(c@g!9&IIavMF$_4c3>df+D;y&qilY_P!JweZscsrOo5R55$Ht
z#in%E*hEh+Z#W6(v0^S>7z%TV#W#Qk<B^9SKlsp3E<f_Hs)k?|!?dqgsRM}~0-pnQ
zUp#jaOW>_6?gGO?>`o3^;#h=^dSI#R@LtA)^a5Xci-rHx3gc#<L&>+=n&AMh`+tiP
z<6$<C#(`@*&epbW3x=tNAhXL}GvTCc@phs`#5hLD6w-&Ny?l>>SgfbXR_?1Tp?ZS?
zO9636ueBgWl65~=zzowT2uz^IFI(S^QlCcQuRE`X*_G@h(~sG-w}B9C^BsF>52BP-
z7V`od@T(_>L~|X?>p>+?1we3th7t+(nVJ$rm+8I^hck$hfTfTJdXLKktO&zNcn6KT
zCX#9#A<74b#+y35ryDwi1}749JgqE=K>Q6b8O+grU{eWNO@3c#he+|Yim*z+dU2Y~
zHzc<)u9`Y8F^N5Y@j6=<DNGns2CV6ReKpiN0G>*^mmNR(f(6$^zh?R)+H>l-jdNyF
zPI!=}a+AkCKkMuk^=_?-Q4*^62en1Lmf#(E@<COi0?K?izYsu)m!`};RHz&O8DTa3
zzTTcGkC=et+9%%Jtgi#YlusW{<<+u}_HG+$56}AT+uqzG-Pdd6&XdeT3&AUQ!ubb#
z+4X(gBu;LK7ex0pMHYQC3ta|!MX~h~@b2`CqsLt~W$vosSGE_vS##I(%UsliPQ93%
zyPG>>Y){TUS>X-Sn~I)OZ`eU}k9b~0wq_P8BFxQA?I`Z-jW?$fOhG_0wl!2jW7jw|
zfbSGy-gyeokYECGsuB<MozVwX2H?{uy6M&MGyEam-SIkO@xPBvKJH*&s679avnAzn
z`{Kv5x9)KI>*w@Ykte2COV(-9j+*n}b?`V%yU}xEfTOOs2FTgkScG^wos#EBk4GV+
z-<_wUCz<-=H)f<}VtuVl>y6TnQwFznG26QRlBUhWx@Pi;HuZlaA)&Jk*({5n_QBDN
zLbjO%S&ae80ax1yP?#ziwe_Ad?>7mlB=Sf3n2-`hPG0Mv%cr@lNZIb@GW=Xq@8mew
zs4B&qM2k1Z4U@L0l$ySdsHwrHh*#MvPl_dak_F&ITxc!o#c{GV9r>`ma2<`pIKF)a
zX1`(LcU)MA8jQC^K8QoPST-m1k%C}4F2?auXqRZDkhC03e`YEzw*jD%)Mp=J5UQTH
zB^T%jgReGqY~{GbG|Y-ux9m;Xny_DZXTv=h!V{}P+vYl_wXQcDkW}sn^^_(XnLOJK
z=ya0;-$HLEzO#T%Hv~o01L#;?Y`hOGu6cU>mF{KrMAe7c{DvXFd9){@O4GfLlMeX#
zFz`tlX1_~9b{Y6+x1xOe`KQ;~LD|fMo2k61Ro$t|YCO`Z?<@3q#`LHZyad0~(El3^
zw4{ui>Pe#J7c}1hVAsvynPaESNYbryoDWk#QC#<6*+3^xEcc<BCfSah%1WN>Ct7@O
zf!CSpVj40;(bxep4+t3te@LJj{#=1rlT9#nBpA5X5G_NlWJ2yV#<u0-enK$oO@AhN
zdieVra`gDh(n@V0!DakB)$Q*S_<nUlDPZ0qV<?sN%zoA03&lLBj0Pi(dVYsooSscN
zhD@Y72j5Cx+~P4((u83exCa`t5LDMzW)8!Le~&3d7B-(_5QIl)#3ufIgoA2Z{r2is
zA0P)FA99UX@(2YLA6Uc^Hb6%P3F4(mbeSZ5M)zhhb(FX{%jTd}$8s2+E3qNI7wV(n
z>GolT;#ayvnITTLi4ZH5YbcYMk}qEc&OFXb=8Qw?;&(zHS9*+8jdj;G&2#>5RJ%yb
z5T)9(=}8uoaLQuX?Ivgl;U7n3pffNE@D||4t))+tj~Sl~A5b;kswPJHJrFn*DRQ>G
zkQd)KRY=hL4SMSw)f|SL2of>UP&3}7vovy@oTdPaP(}l<Xo1W-B&Q>mBWQII+*mwG
z3;t7HKoZ^Vp$n2gO0^zq(*TKVi9k(~;TQjY|7Yr4O3tQwWF}Gh0%s(9rJyaz0}thu
zxc@;&)Ps-K<F(z!(EQQC_mG4(NC_H#R}B+tybG73<^j{=8VHwBt2JZG8}-Cf+;P@d
zk}YT}>pA8DA4(oe7Zh0po5P$<!@1Jy!kMT_=mA`KCyCk%VCf>djV5Es(eXMIHf9DA
zacTYf^7=H$glqf11Dmt8$IIQMnEN3ybV&(4AU(nLF2Z$9xYfVF^3#L1bX5w4u|e*?
zl1ODmLx|L9IqDZ#*MND6#dJys8cD*d)Z$O{m$O%sK5k91yxDl~v(`2&ZMF7~J7jc{
zKBmZK(FMVx0EcSkIK~A4ke`IYY#ozEA+XxC(q)Y+yJS<_eNosV8Y!~5?N`)1O4l=A
z?pJ;kn8BC>!X!b~+PDXQ<>n;rA)7SwL)-Id;5p%53xX=-EhsmK>o@I+JB4$Yap!td
ztiem=(AOV)jK`9+=;?e0eTM2+_)E02y*&{?kUq*`WVxzZf}^i55+CO~55q94E5XUB
z25hSvb9>IG77uL_iAyYMM#+xYGzv-#l%Z^nPa(byYwk$&YUIVLb&Q*WN{bOb7*<{<
zmNN<0WS#^_e-b&*q^L6M3XU{wlT=O@=Qw<!7Qe6H?82bYK60{l(an@=*=yZbUW4@I
z=Oyu78oe65p7}g}JNNgx@jxM;o&OwC7Vzv-xhs_0u<$kn<<nPwQHQxa9#nJu``!MS
zE0E7#$79xlnGUP|5Y?&0Vl{S?N;~$VW;=PAv0{Xr!D5vFI-Y-+_ha0QW|K1t-LpAM
zIJkLrvq~6D7fk_*c6|3vH~`mc-Btr#)cWN=N#sJ~!cOdR{!7`5k$jq~@_xk6jUn(P
z3E3y2(jdf|rjX{Y^|7P2(3cVJQ+w8LEOmA7?pi+;aeztC-{X#4f*ec$?(^-6E@>={
zJdPV=*O|2U<jT5$$-*wa+bG-TQlgqV&+-Vh6hQacV#m~Sm%M%cBR0y&o&A{Pn7w`z
zMo!(WG(!;ROxI(2gnfm8;gaZ<+;&fk5Z1LdyFV()soB{5oKDF8{r}zUg@5V9solW+
zwui4K>LoD2FOWnN`jsWxhoBmx?R{6LEiKE*t0?a(Y-}njXsGWdOi0&8%s(XujWbq<
zS@;{K^5?e70*Q!5iGfxb;9l;gj5hJcsy|Qt_wJvOCE_+yMpmxEtgkJu)tisQ*0jmA
zRx+)1@=eL@>R@@P)mjQ9K?n3f1cOFD@3JRY$il!J5=nDJG{7_j>{<;kOKKkT(vZd(
z1QGBCg0fP6+=+Y|32X>KY1uV^8bHI<rEHkX7|>Nz)TJZ7!nYE5w#k&;89*eRMH-&>
z0AFIP71t1;M5I^h%-H|5f%Yx@$Vg=1Cp&lMEMX6w5BBc8WI+4UOWFZlLpA_MBbucl
z%`lbM85Mu?>&0K+<W<b|N|=)(lp=(rLPZX$j5*ljU`zzcQB?nQQ*r=Fk|fmf18U`4
zxAqt0w&vut<`Rxg6N)5BKmg~V!Hu|XcN95A@MubrWZq%CfZ8`Zf1OzY9L3poLxNbZ
z0yqfrU<FUpUws7<S66M~!(YNv&M&{}?!Gy^Daa%DcI~<en1+SQo{1|EL}f*B&2pH=
zH$ez{v~6+-Aqch2&Nnq3IB?BT7X#b7@r)bdt=3d)F()X$p>-stBD%f-n7n-RrpJ%%
zD4)LBV_><pwA5M-m&@pE8+%Ic6vwiF2JxF*;VB518j`^=t_&9XPFu69!k?z5w`Av`
zMNEG`f7mMUa#exZln)CCr?0KD$UxBsQ@E>UShHzg0#B-3J^@%1IYrc92cWcwKm_g5
z0r$cV5nDF`3|hY0x*DO*$5QE7U;!);^EEao0gPsA_d?`Arzw)GwA9iVU0YiP8a$eZ
z^K}t%n`mA{b9x5_hGEc76487=#c#mV#0}d>;O<-?=9@;+PBz8^M^3q_0R|I~Cok~B
zR<PdB86xpoNi1d}tI0qrhr_bW&BnsQz%dJLB<uuws?Wh-MHgVRoC9N^4loiTh<hp4
znUu=~Jmips5BdlO+Q)+=0uex9MddWWtcWY#kCk(&F}^TgOc=4+Mzt~B3JU;`U)oy0
zpPOPrXOk57B!Ikx6pOHe!h#z)c1gC!e_E9PWP=861t;q)+{nnA<jsWSK0fKe)mK;h
zB%cl1FI?ph9kyl#d#4^g#9!`FiS(2{-MMt>#gGiki!bs(a#`hI)O^?SKnI8mSAG^(
znulS4AoxwlVi1cc26`aLAsRJU+s7pGp`ccPK!6@aqj&W30P;0)a*~^iHOg%VJ2Kl{
zMNP&laU&p)S?>+7hz$-$Oj+B1&cyn~$dHmPjwy__8DdqjdRD)NX{A)@9JPNbVt1O9
zklGD0sSMmcpikU0kyn#G;Y?Z{$a-7NlA=CuOMzrSNs7Q!t%PGfQ(5TGP>$haizSG)
zGh}vT4U3sP#GkvwFRP!K?7lJ{bzVww!^sba)V*NA-j7g3yl-sT`$1?}ltAMB+vNeE
z2%4e^n@#HSaCMGhott141yfe2MkXObo#%jsEU=39)2PFs1Yyc~qO+U_5Ax7-?Lp{{
zQ6l1y3P>Y}*c5QEGjUS6NTHIeVwgg0K6A5G7X?P!=MKYbv$Nw2Zb(O0HwHj_+jZMK
z&LTf;(9*u1kgn<vbEz{PgJ9SieNEv|IG6Boqy(HF<NICOa;EcoNqSdlG<ILO;Lul_
ziKRQARzH&uinF3iyV6U4Tz&YeqCBjB<L~iB7MO=N5x)>u<?$5sXDh$EN12i+7AK}C
z@A*!d-Cs}v)h1x{E%j{UIvI>sJNM57>Tj9|sxb?uPBFXzA(R;2uG9%7OS5(lG3WJB
z!UJGJzhfNa2><g<GALjGvQXm9g2aojLy0tZ&R=bSECfWDGsCIoCHklf#ynhg5Vzn5
zRrucQLOn%O1P%6~@|R^NiQR&h7etFS!|lUNtW3VVO2~ZfPbEOb*zTn0G~E`!zOm7k
z-7B^NgRwnSFQ&&@(&IY@GkY^v*Cmig4L*ax0C=)GF?#FL@`DY5=rPY(Zro6#FmuP^
z&eWy5Gx3KJC}df-w|f2S*Col96c1%Q7`s?Xsg_z}HEc^oRHAH(+r90~-nhvE`sC_I
zo)9Hnf>Zmuw*_kY65fxtxColM$koXm$!huD@EN?}8OcS-D>UCOZM<AXneiWfjc8Ns
zWS(gAf3oB%c{_lq-6D>b7dF1buN4i&Rf<Lc6aKz#9y~Lh__RPcDb%3H_tO*2e9sq?
zxumSL5Y?nc-ybcvq|{9n(M3}_WvVX*bDg4JLF064%!#lQF?Jis)4Rf2<(!xLU0y8M
zEM6a=L{lQ#6bP8W)M=*m>xaMpUKdPuE>`I&y{Z^U*SA{e-&0tOQc)tnI*$aN@eT+B
zEGR{(GeaFaWVb8K3dEu{U-tdI&JX|(m|N7pikZI+bSny{Fq<tHOpIDpl=Ttq+xFYg
zQ3Cf_;J8{JV;plqJ6UEyMeCL=t+*3cKtw7`xY<~$YJt%KVJ9i{M$Cz!YYWjuV{iyN
zIW`+8#UhqqA%heF<n0&)q5h#;qK6HZB%_-M_&rX*EBDFiTbrtIfk0U0K^~F>fe;KS
z%nDXsTU;w=w^!%m-pu&%KqEBj$Kze0G@LJ%rbheh09gnjFg5@KIG158h?+n8hz}Xf
z$PGyd-7#MXvP}TEKS)^qbWJ<D!W0)fzH&+Ccg6XGP4?LJO8C3UBe7LSE{%e{^%n6d
zrv7QB4u8^Yt2%tR4SQrq^Vx7i;8x0&>!|fekD-U^_uTzzaP;ANVrDBo^|QIB!AkYJ
zi*X&65hV*o-pjre9+J)o&pFP>?s~n;5O)npa&VwP+4j5RR{&6u;&AkUQ&JaEn9A&L
zYwJAK-oCJq44|A>00Yzlq#Wsry1NQ>Xp*c+dcUUPZRf3b>g(6ua#o(!2q%Sod0emJ
z9esT}itDdGM`-7f!2pzbIJkjTu^S+;bKrFsAj`7wkPS*QlIaI18KbqhWCR>L1A1v{
zgSlf^h=QY`(y8gRQg&N=TXwm4hcYQ7KO{-n(Vmc>0L7oiU9W#oA%cjTfE45?3L?bd
z2tw#*gc@&Wpb?}fq>~IaAdw3kN(bYjb#DKDj=36cd$0B`P&s7Nztx>zWpgW*)%~EI
zGv?vy19FS}fLi`3W;TzG0@N>aLqP~Sc2p%)k?KhGv14Dr(H9AM{(Sd1x;pOF4P(n-
zRV~n#7Pbph;*=v9?Sj^2{t><qxJ)RORUXV$Nc~bsAQ3XR6MV#b@rf-0B*-R=1#-76
zCO2UYM>X7)P<sTfJIcxXDHDqF3_I}q7J&i^`qn)9A!lx{hAy`rX*<Eya}b|AH^R_Z
z9K*cLrJ&W#kIcM@gu4e-Cb-mLvU<NpMjtJTJ}(Ow!-hp=1?E)Qupn8W*4AoSs=464
zMOXJo9IiSqJ~lgM02tiRL+cY2le2r3tkUaUMbuiof>@Pj)PnVzBmx8o>v|J7^usv@
zx}ggOC<sV%bp&lf_mlX=rdc<117!h-!hl6ga6MuH&l=aJa^K&(HzxdX4_2^&>=ghm
zKc%KtM)atXEZcsXOSeg80<IXCFIjG>Y=aSDz4uDV@+DCL0WeBKu|6cR(;<SSY#<ZS
zs?&(BF5rAXu2wGGnkdNi#597WNOFNxA#PiN1<WaO@RDjL<`6lbapzT9KGP!YyH?GE
zU;Io^zh_;xRNAui-6UbB-l8JF($l2LHg#m1zc^_#cPye=8*~5RjceNi>0206R$9|t
zSlFdcU-8!ckcFfh7jgI)<v)aXnBFeBfitYXM=5rW8g^~06??a4-rxwxtQzrtv4|ng
zgiXK$&x!YmpA!KLWAo7AB(5z^e8ItSb_oFqgB^X|RMCP2hiwvhAtWFOHA(UPk3YsU
zoR?zD3mjcdD_3?krL~l^KqBj5ImYAn%*}aN50V)Gs<nJYYi~Fouia<TXSFN?ajB>i
zwwE9DJa9Q}IZN5?G-QD4wM#|BrcH7)OHCog8=i3EmrCm|;U}(N3C-OY8&h}uoO4}@
zdP7HtV%;~+IeTSL|6ye0;-zNu(zLT5)0rkyCYAb;h)i5^Ye^y{0?SB~p{b`e^tvI{
zxZ%!onWHyLlhu2XrQ7qyOy|r-znJe<LgSp_T*8&_mF6L-epp>GS7RPWhH+ITu&s9i
z>7s=1IdWQGp5mYQNi$JP*SgC^K%)H6l}=@bH9VUi%yhUtRi1IhHUbhsw|ejvrl-G6
zXq)YdOI^M^xO`Yv936Z<Frl@wNIyn{vS@%tKN8DG52Jo{8$tTgXV>?FqWl&E8if#!
zqT3s$KP*Or53aTIcAL@Y+=F_8!I(Y<?Xjh=P^|z?`|9xb3!|D-E}eMhH){or<iE{n
zS$gsEuY;KW9l7Ui_D543DRyW2$Knp(_XY3>!Dn^-EX;{B2HygRY(4W~E5a7pI}!1v
zf_{N=*+WUH*CR$Xn?;I>qacQqzahafdmWQ;g&Av6wnyw`e>!>%ver~q&Rn+hS6meN
z__ThWq&N<c6?VkHI3@*l)?+EP@Zc#IlHxDLz*}79a|x-t0RgtNU+**@3=oL&ZZpL9
zAkjO6Z*IN~f(I8=77x&XywUJG1-(_5%|+~Ugw#{nodLWeG79b{r+<M{a-bShLmKl(
z#$rcmucX>f$YH_@UH=STE>>f}pdj^Nm@#n)6Ra*rC5M${4<=1Yr@U{nd0?3p&72mV
zQ*iEk10>~nD^^Dg6f4YnQX$!xbt-G4L_zA!3dyRhd;bh{YyT&aH%cO})l+iW7F|c?
ziPK~bdZb)vKmteSEX?e`u`l4e?}}dSF@5*RP<!0vt&jgP;qbCQrb}eQAZq51?XzNk
zcq6;?Pi#LpR=wn}FVB{BpE~}~*jJ}c^ukji&n%1k!i?8|tx?q=ZHh-@@#*5domT{I
zW5;&n9DHeQ+=z(`LE-pzbU$GiKRou~-+#wC-}xlJ?Jg@j<G!coX%@xVNGZudE|qF?
z`Q%oz-2VL&6RUY!5HK`kI34P1V}lcy66gG2H;*crKwX*I6SR24rdM8RY2_VjFI@sG
zAT1kndcH!YF>A6-xKubJRC2&fCK@WTIT3GxwnZaTxK78sl3K3IZfkG(j@#UzK5!qO
z@ys?$nnZiWO(5>o^_#^ro+_mJ<ogNp>LkdluTQonSsUuC@iR|0J%7f&tU-HyS+O15
zJZPRY7YYkGweaIQmYrl-tviG<n#C!yK<01RD3IW0=n>s4YscJu)tiIc-TPVqRH;?3
z?UVj-uUM8EeZtORvlDVkUn}4DTGe88LLEl7kaL8Gul+YQ=+~-!(5_TIpXtvJ*vPK*
zgS>@H#BV8R>fL{;)3iB(NT{*lUo6w?ZmqTvn=__tI+$(Hel@uE?0=yo>lrxeh6eyi
zLg;~%<-iVq4!1V%Y?T$Tk+Uyu==QA=2oDi8#y#uHY&NIDxn|9BV3l~(EFri+0a3so
zfDqCY39LEjBXQ6t5HYynVq05V`y$1{NuiQPWuKC_A*DnHg>MMNob<)Pzb;9jaM|GZ
zS#dI0ygS*|4YIzIfI)t1($!rAnfn<Z<pX}7$JrT39n>&5=$#*2r>W^|A}Q(@?g7~?
z?QLx^@(+mvu%jWvD-jWyuUe@xN}di9@56R-3?c^zWELn(dtpIFy^83!PVkeHH)m&V
zuE0JCph(%xJ^h=Ff<}tpX18|VsS5wxlZH!s(_WQjPl{to2fFH`O*u{Y|2ymjgi?fB
zUNY>+J`bgcvgz4Z&F9RjsFKFjj((Hfss$`9mW*rWnw3GoT3f(*nC9v)Rv0rp@M7ja
zx)T?t?*uOI8deT>y{NyVJ9*LfkL&V*VK8@~>>9eJ<zI#EnSaFwyshhK9rx3r{-KrO
z;q=8fT9w9-Yc8fA;|za{&HQAMO4;`QnXWKiWoXf&t_yFrb?DFQO@A5skH^VU)G0+N
zg=AuzNTd`OZ2qw<RFD-WDEq6%SF9AN48kZwx_IG*{|e!RWeGw{e|-01tW5}mgqgTe
z^wJMV!gYIV_nBg1!GJw4yr9=p2_$*C3y)6GQ;$mEsv)1@XX~Mh<xS6)HO&J_A##6x
zv1&=nNN49LaxbsR?e8woEm@*l9;yrzT<iDUQ|WA&60Se<aq7UpRoY~F_z_)w&ldh-
zi{ZYjNq@+102u^~cXo;>>al@2TeG-tU;koU^H_H=ZN9dzHZ@z<T~ug60P$BCIE7dQ
zP6s}Mg)BHaWOCOoTjTB94K{G`aAd#gyJIf?&QV1ezk1<<^;d}<BapD)z7c8R+PnF!
zk9Oal-cu{seJ#%1`q5u&iD{L>E_!-OG$}NCvFx`P%-Sys2}@fQc}_YLsd*JC3Y&Tt
zI$qGpdORu;G2y_;EFpwA`#BvX-Nupi?Z(E>3i59MdF}dJPe!PB<z_|S$F%=3w$@pc
z7$!UHjx;H;ZVcmVIzB6CFMUq^$GVuYnXem{zZtn%vud$AN;o5(6j=(xgqOg+QeFZO
zT3bf6T0b{t2*N0+5OG9swQL_A4D`rP!2tA=XcPf#GpNtuZiiz5fJGdd=yG-|_h0q^
z^t${>@CB3Cb>uxGIlvjPUSPjeLPbeH$U!K%w1KQ;NuR?vXQvQFN*t79&ageC4bq5i
z4bXNTB3zrEY-n%|4Gn^DUrO0&BX@Ada7!#7OA0R>ry47sD}AoQ_!K`~W~)$gq<yhU
zhvV(Z<z7lB(l6!az9J$-ujB%UQU{WGU&~5m$RXtn0cikU_aPtT|Nmg+$b*NR(IuVT
z4?Y^r@1ozh(zxLz^>k9owVwjY&L6K<$P<fowH-aToNYJy&aJud_Zpv)<EKj7@3E#`
z9I`Hagw38g^5$!pU{S$F^@F1zKc)sW&&JcOW!vr&m%3A%`ogcsN?d2RAFxJNqzF#)
z$;;_QvDbR69XeBUe?dl3XTM1=RR@0@$A$WCT?irFA#bB@NsS^R{~1*Lf;VYnPkdU8
zs^h>f33Ctra@rF_E!y=5LO{ra0>A;HP+*U-_XJ(~B!$XYRcw%y8KIUExDiJcH-$Kg
zV<hy$yG+0sX3Z&WSs6fFM|pNx$MX$Czmo0D&AD+K-lXR(neOVqVK0h+_Xh-0v&lT4
z%#x5rjCRrsJAnbeDbn*SWVt9ng7VWtaU4~#8Xo{_wmSzv=sd^+(Wvz`_@=*$k5@l7
zeGxMfI{1$E&%-lKm)qh;Oi$Ay8m!8)$lrUv`r_1Wf2hj1beYk3;3l|U`{{e{0c9ve
z`Q6ZsSj3W)hxJV0e!mDKKfgp$2|-b{1O$R1>XE5rVx1H!g-9{$jWdp5pPb(He&)FE
z-@b8`Tq9`n)TW}WSxPo;5ODtvpI97g6bgZ~pB0Q!riF!<8v_^OV6T_*bx6C}py|rB
zxs2Xp%iTa02yH;lnLsK}V<Z3YBP8<amU$%P4p;X+p1+U(C1R0546AA`jTWSHot2r}
z7V!4Xsit!;fN@#@9dO(FDSm3hHsnC;<;{~C&$+xH-VW^`bixGu)%!^i@fjW1gqoF`
zx3(HyEt}$?*eIPs!Lc0cIK<%$)owUc!)X~tf2^Lu$u3orJv3UNJEx9P)y|sDp-Ee|
z<m7NF*x<FC-(i+8G<u3ed}>bq*`=H`osj~kSRzB(kV{@iB9f;R>9;IFO4?ZlKdbik
ztAYrrs(x?vIzI$C^Ofj|bqZ2=(Da;`J>V1&thBuXs=vLRJkilHf1|a14;`$zI#6(R
zaZwPv91b__@+0Utx_cyw*-^U5$7T+iGKL&OndVm1Pl20*B;jBkkOWhmW>}N*z0t_m
z7}qN_KnpUi5RAX;83{u9>W3QpZ?q@plMIb?EhNs=9%WDfrS$#&I`)LWS7{(zwM&(S
zT0sVdo39;9CQzOsAsPWhpfv?09n5v5q%w%2=COi?eA4(ig<DgSlK~{XDfLL6*l|ZE
zK~c*Ge@Ki^))u>gX>^oDYy(P2St+8rLcQcfe<D<Xgph^6eis)vMcF-F4O4D)yX4k6
z2I4{>Nh1q_6v1(3MScH(<KYm3hel$bR~d1Oe-eQ4(G#Oi+cfn^PHKRnII{GrK-pH`
z0v4GV0f_~J*ek)l`Uo@w$hnd(sAXfC;P9=95ks#>M0^&!^}%5X_wu(Bek%O!P%|0#
z{7`2;M|8qbst<<bJ$aMal2gR>PCqfp)miH5xcjv6o^Ug>T%5;YAmi#RgL+$xqvY|f
z_xI@ND4PgFD_Y)&(rp>sOuv^RqW<^iS+QB+#_lD3MYMiLgtIgn|L<Q)dML3D*KOnA
z{ZoQZlqcdj9^sS-f{mhokkNok2}S28=*0fh=F|f!I+*_Au#H7wz&c$S)sxjLuCEvO
zX7x~II*ME4#d0ylU9N@vk3zkgkgL|D#Xf*db#KYiUYm08-w{|Xa$=mpjr-vK(r_&5
zmN=s2UtU9|O`SRtZT`aE*I(cJf-H59Po?qF^E6QCFYWdGa1KJB-HuZM^(h(bqi7UR
z2oZF{(%tcr5m_V>Ij^p`@u8@kKN_MTjh?C<LCr6Z-$+|j6?^PJ%?iaVbvAU!()H^}
zvzfm|-pqSo2WOxb>(|}9N!^xF7@ZKf+2112)4nXo=sms*Yib5<k!A>VOq0@+BoiL(
zT~DXN*%+*cjO{%i%50MYj}8~~@QPqc(Y4E0`Kwp2@t3d7ZZcTu=R+P=_?A+20IJ2S
zta$>^4c#pHKAa&&D}&NK@-s@Es#2HH-o=(E4nKaIdRnS7)c2MqUq~O)a(`HP8V$ck
ztFp7wn#W26o5CeKs*Hx?jruU7AX5-}+<p8w(1xXv1pRa*hM~bhR~pAK;ChI}$0YQ@
z|C&taUp%$F>*h-jHvukpnaVhK?&y)pnG6pde9q|A{N(H;@A=>Q`Ko6qlH^H}n$37+
z@+!b%l@Ha#_o<0*D9VqB6K}W<X-8ngxzYC}hGhMz6~E;9ENzT#@vD($n=t#Uv)P6(
zMcN<zerQFs5wZ6BdIu^Pd9S@Ci(NL7vFjBDA^q2KI%(j8pEs$W3G*oklM|zVL=+Hl
zKA38iaEfX-?`?eh=g!I4z<hi4((hB$pQ?DoXyl(Y&}X=#l|W-rp|s*?QsQpD@!<qV
zCL1pQ%H<xY(+)qu8I27>>yaxVbK_)#GGawSVpWwvE(J|b&LCnNf);2v5SG`!;VYjk
z+T^0)lr)N)972e^WnbiYX?-q=T5&3b4Rn@ZuP8i36@nHOHEkW<EpRf4iZ)6&VqvCq
z!ERAs0S`4YE3EJBj$oNEojK@@80X}o<icbXC@s~69p0qjHB+atPOmeYvy}|4>bUG|
zb7TvGssHB>gZtff5XofEza+pT5xJz)WDeoTZp#D-42z|F52Vj>rfpHXS|B^4=GTG(
z?m(vOVgr5IEva1I0DymwCBzTuPakW}MH~1+HPhI14S1k}>(PxT{NqOhY}fJLUVt(H
z)=b4H^qwlF;nOj8*VVio;&2}RTWK9s<Ih^2#Vz=>3H8gajv1HKkDES3%%A%DU6ony
zBxU8c$ciIZ<}`0wawk;p&JP;qH#Vx0RwS*gHLr-@02RaB?e@<(W;hsO`e)qJGdcUO
zJ1+irz5aD~F1np_QzfK?GLuQAPv`qSnA*8REu?dSmllG!fP%bjP4$$`!`GUck~oW~
zPGsgsv2a`VsNg}BQZuYM>o4kn22Z{9vX`>ix7NlQ&U}X%ZEgMbTMBsLcbTTVm)pND
zCQWeQ-IIyZLAM4VZw><sk~WeL1mlUGXv=%)BHFV6q=n?Sw~<`7iM6+o9D4`RT#ES%
z+sQ;3rs>M^MU`!|T}OIzKV7;oAeqW$XrDrqE!uVs5whN8Ma`=;S8=miqE?MfV#U${
zuLnJzk(yKa4O49zrUlwYPkN?1mbNRQy{*p_D$BLDBT7?s1F&h@ubH=(Hrk>zpVz9x
z1ev0IutClz@Xiq?xLkh2=CaY)V2oP6@INY>u~PK5&n6#Bsw@L&(IA!V24SsC5VbK6
z=rmbHtC~}sh57D%Q^Yop8AN5TZHh_-qBbSV$DS%l3DaaPt<}R0xq>~G<#q6P#F};9
zP(zKe!ni`wsH{xFkX=)yboscVAsD+t-HO`RU_zMlI%GS$(nYz0DP{!}sV+sBM#OZk
zN0?%4u#fMSCWw$JR0joEOAT=2CpxKu-mn$1%B?=z(pCP+6_|(1g(?a|y+xyFeYP-F
zU6qB<fPb5=&}3T5H2z_Ejc(~Dv9T_5g{U&xwFNeZw%MKXY&q<MtU_dLiZZ=vrCkqF
zWn)Sxzv^O0?1fA*AHzO+^LH$u`XoJZ;IAu|q@ZKbRXl~XG5?CVVD~mRle*8sywWOK
zrm(GwioyRnrF;_mP{6S1W?tEfP3e?hrtvu}0$JBiy3i2_>y&lB$FPHi5XH8XWN&#v
z_cbdwd{b#AEow;xH~NhY1>_^8Ro}ecBAa&a<iGP%68H4PS`vDw%@jnarX2d>E1guU
zf_}{%C?zNz7$C~8XAe_G@UcF#6Yl7yWjE9rAqZ<+7uH!2YKSVA%3TH2tWYLZ%^U>a
zXLVbBE$g8XUj@-DY&d3-!{(3^fdF+J5&j>QinVZmT)*+o%{u)r86={I1*Eoa{;^90
z(c#P^@h|`zgd+rjT%XG+EEpl8oXsoez$sjqbCY;#exScp6*85{-Sh%+$d_klE7DuK
q;skQ47Q!0DY)8KS<0G+>oUKxU)J{<)m5%Fj$F-l0-J9nE000306!mNX

literal 14984
zcmV;3I(Nl)Pew8T0RR9106K^O3jhEB0E8$206I7T0RR9100000000000000000000
z0000SC<ayll>iEX<#2(#LJNcp00A}vBm;yF1Rw>0LI)rlsca?em{GvS0b}Dw9cKoF
zjRW$`#@dmA+C@2=+5dk}ZVVA<M|G?EesY*I%8mQ!l5>VyRJ@~=>8KD7o(EsCcFMH0
zr7dlFn~o{jJbS5QS#uyht*_`$$?;bkHs+Xbhp)=vUGTvViBO#~xwt5YUewn(FfCIe
z5#sGAH$?^o<saUK9$0dp0q*2jgq-likE=I-g;}2w@>L`<<m=TC|6sSjyJc;U0|{>h
z8ipbF^So~ULBa@2@<_r6NJv<@7k0u}c_AT8S-$tcRg9lu5*$?!QQJIs9Gl>%mb&4^
z*4ZWe60CLzbrU;`9aC_0O+yfzdY`>J3}YCBB6hwuduOgQ?QIzBe~0K7&2B{;`Q6m>
z`f|BK>u`l+RU)erSr-`KU%K7j-u~_?w7^qO;xyI#UYmV?tDRLz*)kXw@S|Zl;&~;N
z-*n<P+H*QdrBq4>XaPC=2)4Y18o#Aa{X#M6lNn<InPKn^@V{s_06G9b;J=l&vg)@r
zQjf$-aAyDvT@FGgkuUvy+r#W3Iq4AJ_d862OAxO#_p38o%&Wz$Bm<pS!6kPcW<gr9
z{ZVJHb$^q7w_`AT1Va(*SkRu!N6VV5$tpdC%7#!mP(Y}Xnh2o&<sf;$PV};PE<b4s
z%}cRD1*&VwOH>}|Z~C7VVK)GocC+%omd@U?w7!$^3^GPV=m>+6H@go$$LHlMN)?Jo
z{1tOYX)47?ghcZHtMjWBKSg^scR8MZ_ZRIH?KZ{by=O~$4+#)pOTzYmoCG)s;q?d{
z7K6P9<B523t~Lgl&-cN2g2M#Z5K}cFdSj^mnQDuA&o<?j-TM79v-gWt?hU90j15L0
zWZjd@;W9()Y=FuqC+y*G@)}QX?%e7~gM4fdkzl(w+3a{VrpCm9Qc_8pl-~~oxaI1<
z9(PF<1;k_MSOh@;tbqRrkObtnL2hXUC@uf~diXPJDZD&auA~{rei4KfJ04N*t3FMS
z?}*7=9y`9=PwTPk?Y$tBt6-?yhK0&svK69XqlydIsj>nNs<wcWY8&XT9R=LfQNu%>
zG`!SB!$;jV{M7SvD2=3#<fnji86pZ5i6Lplt5qu*gOOsUSyI=A0_lXYKnBrKAd}eM
z$Rc(&vWdNo9O7alml$f~5$`ne37)xfu#UpVK0W9PpF8{{6B0=mE<&bAkyK*E$`UVL
zwnT|?Bukb{NhwdIO8M%|P=L{(NVjgJy?SUIcbwKOx9Hq+Ps#41px@spl=|0yr|eH}
z6e{rXRT2@Y5^0+0q@-$P$yO&<t{I9Hp=fB(%9UeKC=F(tt8q>E0FrA#g*l9j=4#jO
zIUPDR88gPf>7M!f3Wer<gAYLLCXoQGkmT<P&;|*f6&CR0$4ErPL{82uU50jr3WX?A
zWRY667NgOYm}QpdZMD_XZAStugM^(4&;bd16QC0k`U=Zka!HpVLsl3ztb5my04pKk
zW&*5&gxiJHK6Bp-`wj_Ufu#HjED4D<YSdV(UcGhZnrpolEjCzWk&Sy1g-v?&u<Fxi
zvwr=yc+;D<y5fp$t{JtRlhe+9ioz~m`10(&47WY(6)2ERgb2Oj#M>uHk^@quI%vN6
zUec=7Assp#)}zPE1`OzP)>*H(>82z53WcNl4he7!lI9nV%a-kg7A*)%EOF9OOP%tj
zH}&srJOKtEnW1kOa57{#z2{MQ)d2^*=9E*;7&PeYoJfFkkgR~hdFj$!u-tMN+1R}9
zB`<kHzkY8Py7y2GjSls#MyLAoMwj~ggKm#K(X(f0^l5ww{hH|o1~jb&1~n@S3~93u
zhUF<RvQ`ur*LD|}(5@;lsomL_(%x-MYrkmB=;jxg)h#G6r+ejK-cd&_c*7eO_W>G9
zx-T2cy8jw0`qc-kKJ=kAH{7s3Ck{3?iN>Y@9c)RGWZMZR?0C%?yDqwDf6vf3FiIPT
z#@Pjqj2#7zjXyL_jQ=!FP59tUmMrI*HM{V@=PvgX8rSA~jT=itfm`d0gS)+j#=Xt|
z;DLa^<MyKQWc#D>Y!7X`*xij+hxp))lG3{@Sw4_RpDI=Q+DaUJJEh;x&ZF_?ls5jk
zWX}oob^i525}-AFX9uYuY`n?F*Fyf^Lo>PwPmOOIUas7IeyaJ}gESUVQ@vZT*KtMa
zXOPJ({^DBs*)606x>{0GKUP3Aa9vV07<EJAp%j5sSGF4;FSaZicBw0v(xVY)x0?ly
zD?seVC`)h>*eKqmt5%D??g83}!qCvJPhtj&8bYxMvgl*0keT}QREvNk2;E_{6i(J)
zh(zcf`eet!k@S@n=t8h|Mx=ASs02RNiUp(wfsEByONta>Gd2m4K*f&RO%A{cWDx00
zPGc!=Fur8L+J(`}o2EL`B`<*R^UDJzlq3#SAQcx&m8sd*h&BaU*gDr^{dX*=-u{9L
zAleo<G=^G=L4AJd#aU~QcDr$V13q#mmSFJ_Py&jYbudmwWq%WzU}z8EZLS*Xy>#Iq
z>yZU7uODl?!53e4gS{+j-Sv{EOYm<m3ZHGjfT?vAwJHe0AQB=L^i;PT6$vE4WR-mh
zPMnc@Z$(_&hGtjF>N;kpK#h16B?d&u?2vz|)QrddMkjt^^~uwxwb`M<5hq*wLf(X4
zFXFk|f}K3rWChmMgbZDW`SzcN%xPCc{<-*@pL=hLpqQ4g^r<^<{OLc93RjdQIV9qb
zPP8_<clRc4g<H=1(3*_vP}z6)k&_yFdu~@V)m8FVvyRnx6N0cF?n%6W@a|eCw29QI
znj{6zsW$TrusXuL1mn6|Cn(gH5^UnK3^w461P5g9*wm@1%9u%QO-~2>;Ek#he5E@H
zkF8ZVys}Fw)6?{BoL`KG=}w=;JbvrV&%@J&H}&o$I2pLE&%Tn^sJr}7KzI9gVVygd
z_Lc62bpS`D8JP}CRnkSgaMeuhf_H;9w{F#(hTVKx4bK0Y!;Am5=xR%av4lv#ed>4p
zMZ0K_vCIGWFDB_1ok2)>tzJ5tP(EV^aAC}!4gs$d!N*;KM>-W--J}KqI2e~GYGIfg
zE7w=eU;Uf<JPTuLSDcbncB}ab?G6aM*h$hJyCIl<ZOZ11Ph)}Yf<t`MO9c$s2Z-&+
zocZ2~dzQY%`3MpkQK4i|$?L~lW9EknEF`XMos~h=`3RZuMNE!-1QUa633R!PeXGJz
zsURk0NFs+`Agw%kK?%89iC3{uFDffwN}XhI+afH?_(9>ucgRy}CD}D>4r8;znOR|Y
zNqO?#lpC4AN)rUk%ugwsasGVOWX9-J2qg*mucc_zZWggIAV}_J)gZ`W*t_J+!TEo=
zGDfz_)i!`|6-UEVYp_&sB>E9uO9H5jFrIKDoZa>7opBUS;%HWiO{2x9+44q&TL`|o
z0Qnp-EgViKK~gON<Pzfi>_;x+axyBYRf~*I=>lVAlTfMRT7i-!hgfv(j?&0=Lz#Fk
z-c5`W4lF{k=aEp6?h$5Wqb?&~o#?vaqXw`zo4K<Gp5ifve~~8OdZE><x}MOq8%zWK
zM+Pa^0*5s~)RBi!P~z0CQQD*7kcAyq0jE-R%T~#$7;B$7g}T_R-;+yqG#XN@?{s4=
z^?7A7xz3XhnXpl_)~veQv>RGIoVDkU+=CfwdcW<PYUL!DQZ=0>CenojXVP%vy%Z@c
zEXJdk|B^O`F7X<3j@bp6y_^vJ{@{O3`!lb|&23uA{ut9h^xe9ZaQTz>JtC$DDD35%
z9+TvKetC?3FT~+q1Y#$KkwZy{&yk19Sxtv=JSy9jD>TvRh4LJI57mtX(uSB;(-fw)
z7@lMm5pK9t%0rA|r%c)yU)U)aMGWa{6&KKqAw%#2wjz4AaA9W_#gi}^m%@kx&!Il>
zh~r^bQQXe&AT-gIQWry$yLUvvc$r>4p9uZJA%$FzRi0pjxy)fh56a?m0eIgzUJsDL
z5C{qN9uDNOSEKy;XAXd6b44`2);e)$E5Z*Uq<OpJZrd#w<OC=e-7iA=G6fWc13*n1
zU#U3R5;{>8-{Qxq9xQ2qr!r}rQVUn@$Ms|jLYZ_yPIR6rfb8=>-y=h~W=Q>qK6~&M
zEOSS=9VGh^RmR5m2CsLtG?qjHrjmBF!^j0(uG|ZdH5XOTjfo~X8H_5>8ZIamRBF>9
z<U2=<{Ofcu<)g{I>6rMU*{18-9j=u+oNK<!P(5DH8+J{)nd`l+E?Nrx_!v25-#d;@
zvn$$>g!yz(Jov`&hg8ub67|=eW~*wv5o@R|X2v%V`{NnprYqN0aoF{1jlJ)j9dHV_
zDkMhs914^*R&ZN`g+go=3U(1U&Vf->OBScp8O15fLsdGd)d6x1arUvi)T<3hrHQ3A
zA!+qSliVUK1>*r8A;kBcYninMV8<X)He@vfsCdH2-q0vOdfy5RMr$ZjTgcY^X^=Nm
zL+G6?SY{8+-2{pEqSnkoUul?EQfG)!rl_kN&8<ZJOKPz<IFv^A!QReK1N{lJCC&Bi
zhLfNj%RF+qZVwM_d-vxB7pE>xcdWXb7S>3CZRRq{ZDv{*Ql~u>7J^3|AYO#G_BRUg
z=IZ2-^>fa)lMUq8XGj=xbj2sAo^F<{vqkmXx^S=T%iMZCzn%DR^yuT?WBkZt3}ZgP
zB*6xviB4a{07Ft@4MRc+aghp>qKm5uuFoB*YQd~8f}dnhcksfEPx(plmo*lQY!CUq
z3`x;8*7N%DLk82=r<){sqP&pr6dIbP5-8WoLv$hxp|!KJ{Ch639d`1UHD4m93sc-h
z)lRmJOsI4y2T1!S!8U>7CDMIrm|a5;mPlnC3y8mAw{Zw_nn}k1j~0O&&PD1e7t&k|
zeN!);bI|39`pW5oipz-C+}dzt(-JtuWzRz_CMmOr2(7M5VeH;841<#a;(o*)1e(4K
zt9G(_AcsycScEOjUF#tT<^bB;SweiMGzP@@#`Li0;p^}LHqkmM6)6TOobZ(zC6v%d
z7$89kia-^m@*HA0kzuLO9hFlN!$x;Ac_Hm}_v!+COrPo*(WrrZ<q#n_LDb+~d>$xn
zb!jU}N+|J)D3t{D&{Vmk@Lf&PKrMWS?Xdop`o*Cj_k49qQ6ES3TSEGhT?lC~$(ddO
zn+}yp&UrA|K*l?O&qBM}tIIJI;WN?Y+|i}}eQduEV_D+<7*OANAyHyTLQB4zMOVDa
zh7#}6JhEw^i<CowJebEeRpnE>DODZ@k5K7zp0qeudK^<e|4628lzps3$y<x~LrNQx
z1$x318)`c%Pg2#Ysp8~?xsQGH5;;DwAt|ObVaSz6@}huyFd-vPFh%gR$?6&{M%AE3
zA*7BGG%KLSW$Y`N+{l~N9;4_KfTEJaAh(`wQjzTes0aouQpsXi(*^5oC+h1>7cpc}
zJqJcYXHXz+6q*`8?v}X~aJ)}9saees4eKql8pKlzmGmiR)W9b$eMHHlx6T~~PlQKx
zh;ByEJJuF{7RGO#L_)mO%bSs?fU}Vzw8vQ_CY+w%bD!MXZpDF+<z|`y8w0)yFN%Fb
zXug2Ko{SmqO#KE4BORU&&pvI>+JhI_jg?zB)^1&2TcLWSgGlm8Ak6=7SDLS5K52)p
z?fNlm;f6sF{_B6+)MZQL#1iP+H_36$;8R<MseOEdoa<_5&G<l*m+t2cV_u_UOB8Qj
z$FJ!8@`J2y5Y)L|$Uri%g<oNBXIo|SG#vMu3&&4v*WwtWOVgu0sy<qZudFxz4GZIk
zVX_;xFy->G?y@&HKRt|xc)SRX)pxG^yM_|q(f;Y%??1qwy+HvVtg*_2<bDz@a18y=
zN6GH<7SsKfiTRP0@LRSdJ`IDp|8~Tt#>_)y?R*xkRb-=s2HUI3Ffo;Vd}XnRn>td9
zDEVH|pr<f;J2v$-s)2Iq{Y;*vo@`B$3rx;cz7cI_%mgjAMd`Q?%!DXKOrSVq=#R7H
z4v3wTO780L$x8x+1bq}H_$OFL&w<#g^h_j4Nxez%y2|ShjIgy_LK6|Up0_EG0b<{;
zMyb9`gLQ4b^Xs#VsJ9PK%vB{7va(H|P^RMO?MWMB=5fXNK#r%ioL8oL+lc|j11Y!l
z_UZpgo5#z$tCK@=Yc0MYhe>^4Wlz>JvMcpixuY~ZO7XGz*2+Zx_;M^?mG;yKmo<kP
zv7BskTq}Lmg|Z+CD~!{jsiU3m#74KUtGj6PaQ{=Wq0Z15)jmAh*~M#4z;#?S=OA<i
zX4wj_fb_oVaNmOu-GBL!hgCI*9#R+&^~zWf?gC3Pv@ZsuofzV!$^!blcgI_WRZA3!
z&|xPmRn1G6aW6B+7v5*VKWp~1+2>I5wRS@P!S(-d5mPBeHepRLzp4Hp7}8B=LN|K)
z9&>{HI72aVcWFNC)+sPuPeOXT0cnh^Aytg(7w*MNJiPm|_3a?}X&C&b^K6(|%Z}3h
zh)sK|2+`I*v!~V|Oe%Fb&oRheIJr<U*TKB*m$H<<6qi4ipkPl*DMCgi4UKSk1yK^P
z7}`kh1Lp{92+%=FNA<cal1dsU(gRPG*H!VJu4)h(9FgyOL1hd~&J8dHv^y!VsRXkl
zzfmNoN&fAUuui~wew@iyC8seG*HvC%5_{$BdA1^&Fse@_s)h&k*)Y)o@KjR0%=m$)
zjy(1T8lC-!_UtNdBb*+i{I^TU*69;eE_IHDdE2w&`q+20%UR0OY(a5<QY~t=0B^}-
z56S}NP~?NfB_9gB&_(W{BEI!s4OPPL>&=<^i1s<AJmN0Qd&(zNdi3E`SucBN_oiXu
z;d!rp-CcO3`+S4kI!QmY<iBzwSbVUT**pkrgvkZrg6zL0$ufGf&{d#UBwH^5@668G
zX4++4<gRLdZGW-r6?eTo+eJmpnHSgRZs*SEyVLVeR(Q?qwxs9ubN3M4A)J@-ow=oo
zjByJydzw3Y`R$nm^-~am9SxP3k)v(u!{-Vy{A}YH5==aivLw`eXY?_Z0r)BmuX{Ck
zAN(QO-tszQF?c%paSQ!I@hcA*U7Ad6UVCTu)(vL<S^~e$3%TraUO7YBL45|ijvl7W
zZup!UfTOOwM#$NYh55;JGOjETlYm54yE{*%KrHpoU!9bi^441E)|%Rnk{Y)aG26KQ
zQbHLAx@PimV&?xzN<ycriqRFmI)-N>3YlgM6gdni`&?}$5HTthG}k(dyl)axk@I``
zu#gf-CeM}M?$KP4q-=F?8UET-*VqWxD67Sq+~T!<&9ucUg=wfG!Z5rFILf9v`Aue$
zF1$h_R#u{(!KNG2k?&j2UB)7N%_mR6?6;Kvo^cCNg9)nyC3tnG4AwzU#2_Ud782nY
zz{Q9Z63C&=bt(<Aj1q-JpF@Z}Mdhr?iy$`_eXFhoKi*xQDp~Q?hPAF3C)&>3lkpx5
z5porweRExhEp{9BNvd>&dQy=>r>}MuI@_ecx6lXjw*W?M2y!ecoJQ(m;|=)XnlG=t
z*|89x#I<22zo3h6p6Uo_&~T?^(gNQc_#R1v%y;pyJqJGAE~(#^EbOa$MWc;wr^>3<
z_+C|!BcZXsA<;K!-C3mYjgg_Q{WltDQC&CV6S?MfEL#Im+s7U*#~oZCO-aWvAB8|y
z7<zbWuaPH~`^J<8nU0bwQkm|{ExtD^yv%nt3tJ@V)B!U02^lxf&_D;mxx|C4Vt}b5
z!O%TKmVuZtqxCe#mf_=ZB9Ake`b>Gu{cmi`*5aG<i<MrPiTF*j+tV$ugX%;!K)dcW
zMxjc*^j@~diM&uLquxZlp57qm$5&I1jT&M-hu(_kZs82Jl%$vjaexIf0n@<B%t7$P
zF4>4ItiK5oNWj2i@DM&gfl6hg-=C}F0c79h1Ez4KkI+QnftygED(FxrLA)>t^GVb%
zV}BNzj*_p>veDb8@thSuRb)l}9_u6aV~4Op@helJ%n&ErM2VHk)s@Li$*b2KXP)E*
zbtdxk@rQv2E8Zuj#=7r{=BYq8sh!DlMCq_>_=$yhmXg>ob_Fzq1{&{Rq%$x|@G9WO
zEoIND$CA$p{7j9vqDk_74+LiN6gk@=$ZKzyDvY9kgWf+ywG~5-1%ViwFeBTn(-d-@
zoFowoR?*0tiKfQuB&Q=8B5HOK-B>(H^MBJpK#C+MXh%eik=FBI8X@5p393mmJpAwU
zL(#nyqDuKF9TN3|ns8G#v>|!)@m-}Jc?=R^@a}rNy<O{{IoSIJlF(YpM25dp!?4D8
z2F|2@pv`#=MDv(w&D63MpSY?s&iG2Q$!W^k4)c%?Bag*PiY}UiV~kFNbH$e#naGly
zA1=I;B;QE6sAi+-m>2YZpAM^&y>b-qytA+}0Wx9A`fcChEamc|loWF>AQt{Hq6P#e
zxUL#pmxWvXGb|6BwAx<EO$D~d{Z|y_Uj-RdG+K`EB5MGcx3-X~OrVh@ycIb7iT-N-
zYSPE8E|%A8uYcCqgrym;{o)QKy2ubyy4#Ee!J-7mD#kd%B>?1^^oH3c;WQvHZCdZ5
z#+4OYrscfIZ4nOqqQ3bL6d9>?Uhsf?9xNhl--Ew*S_SSQ>ooHM%k@m(wS#@RUJ>%<
ziYvp_+YZ8)q9>9u)ml@H#kXrkKfL)d9*SZkPp_xb*QkDszZh-pl_|bn{HR5#<+5r4
zj(*rleVpw)wEP@hiUrO$K3ZO%I&s#XKd?y1FL0KQ*b3=1^kW9CON(PKsOOBfWefCH
z=tgnl2sag#26KX16nBeQP9<Dpc?=-^N#rb@qRPzwOJpdEq)IwF$L5Q8@%;*}E{f6g
zkmKcCH<ONGZy!GO3Z(BoDDrm*y%j#6`#gGO=kImnfkJkB;WJ1-;A<$(9A3Ms=01R+
zeEiHSs&FUw2Gv&f{dO<GB*-VvqcLm1t*UWvIOfM{Me)c<D$U3Z>y6SS`hp2^3X56d
z)%^6Gd=lZNH;bH+=#K4q^1v-B+g0!1bkG!_d<MRKFXn@*l{r`geWvlN+cxB!rtlW&
zT>eU~3(;}C6_Y%VEDZ%l@&LR&A$x>Z07<BM9-G{-Hn!y+hSJ=5>d1!mr79oY4QnSN
zj^|)QJnhgS$ic*0t$s<DW+aR}j$H20_{7LlCzR@^(!P=6fIk353E~61z3$h`=BaR}
zB+rX6SW5x@XNxVvT%GmG`Hw^+z4h$JgvIQ&AA`^-+f^Np0-b9Ibf;`vB%nJaOz3r6
zQ-jd1m9Y9lk{CNDRyU^;uz&x5JA2`lm?X6;xF_^~HBrxj2_8lgP3YH#Xdi-Vj24Jm
znv|29oSL84kWo>YnO<Jjct;yvgtRK%ZRLVefu6r%vhkE^u`?7iIMi7!2I-lgjjah;
zQuxRFDewPLxFn=T8ylY@(Wy$ZN>sWts5*Kux|)iv9=tQEj_t-!UXH<#1B#IuIS@u}
z>zwG>Uf>XmoXZG>_++Mn@DgmBRlg!E-a5=6Mq$ASL$nA=OI-a<aAg%-sE?GC0xE!+
zURWv2Tp?vcW@dwu{Kwo%DiXBXg!%x9)_WO>)RnGm4OCblK%{(!32W^2rwxv5c6E3A
zs%~%Gm^_0$cG(?YKBFz^<(HG%l;sJ4p1};uAjV=TcxaKi9)C6MtH&;x<zWFzj^v9l
z#v;BX85aZ`)gKKgz{!&2pKfF_u%akZ9&to2edo!+^pxu4<mwdCylFsF6a|cE0;z47
zW4kV4CD7dzVc~??27%{SI`Po50-D4bw;+;SZvZ^HrK7{eFkgNNExzT;UEwd`dFvNn
zHa0%)TJDx^*QQO6LAY3$(oC2`ko<GJi<WG`z5*ts(T+tRgdiBB$yHf-<j4avECJiP
zx-4$YWiUh;yk(&*MLpWWKqPz_n6zy3mgkQjEnB$RQ&65EC&!S7mTM@DOPX^2UaVz-
z2fCKKxsNCaW73W)?(guljm9ch#`Tz=+M>*3Q!K5mu3M`R)x30_HVvhdR!2=irkZBd
zTJN~TuEgaBf?br(bp?YX!b;GE9YG>5jxaJQFK&hjVHP$41}>X#n4d%4TchSv!6D3t
zc}7qu5drhw{4m01e1WE@0(}W1U`k2~VQ<6}Xksj2K1fUm_?%Wp!!l~Mvp_BN^tf8l
zPh7T!g7VG<=&==)iK^%hye;FBI=HFl38XrIr8)1xk1b?q*dOXGMJ3ZgX|q{B%bgSb
zI|g1@9HdY;n5MprMd0;;*yS<;%hUy|LKrEAY1Wx^PY*=oP^1GnNDFe$18F2C0U(lS
z28c*>S=Xr%TvUJ~&k>L}vqt*WSQ;gI0OXgq7Wk94*z;_f<hfwTYn~H61}H4JkP{VV
z-1cL;c?U+7n)Gv}dak?sZ7MY-T<Qv2wfgEN?QkW)ksJ42$BrA~-MtLQkGVc-k`XFe
z6=R(_^QuR){_tTJC@Jmi@arjC4`@Ji<H}y8C)#eY07m>K#9J_nX$!I=io*=X*xW4&
zJFweeNC8bR?){q~C-xN;R3kSR8Jtp!HmoysdKE3h1eZg$oAutHK-_CKcPX3u>|$U>
zfEY{JtbmL_qdHI)sA5$y#z;j{=N<h^kz1lgq{yTei^TBwq$+gZKx%Q!fHiEkGyYvM
zb%~bY>FL5YDMi2(BSn4QDa{y<mG&w6rYT63W5sS{4Q)I)=(=>x6*oRQ*!W4m-xxu2
zUEwcytURO_eCUIHJ{0I5!w@W+OOQR|J7ovdBttW#(J1P%b1?6+#tpEVL6gPF_#ndg
z;1OUE3r;iR3}zTr$d9}{(^$?<tE?U=If`rnBqncmV1p56`+(Ih1`!d2L>3_nuy{(<
z#ngRD1FSI(9s01*^gcsvL#%goc|Zp5ez<#rA4PuJkiK>iDVo>n6<ew~g<$AvRdGhA
zw-@Q)C?Q-Q?f8utxLE%%JEkGWU$E5M_t<ap#+;42<h#?LsDpn_Lrl&O^N-(`<axC&
z`K@-59*sjyG@H~F+U@DB3DR$$lSYPygoH*)pZivt(3(DgVFMWTNIq7vP>lTL)`O!h
z^*4<`a)DkTk5s>f5E81tS6qT(8P;Sc?+$x|v;#Kiw~a#_IsRx<f*3gwi-g0YAdTot
zP$(KZS1wW`76G%s8f%qvofi6vCRHIjs?aNr$`p@ASITIHCK)(R(w`5#M_x{<KSWGR
z?5gdu1j-_o7x0)E`|Tu@k7*3^@23ws1>aczu*NxS!BU`Jb~q+bA2YSCBd$4aerYgu
zQteQy)gY6YQ2(_r<sB_|`djwuA3c&|FJ0ZV`ly*(;^>DFG_fq(T(s!Thr;k{lGU-R
z0uK<hY^EWQ^$e5vg^Gu`E$c4s53>4B-Eri_?L^o$G<2|WowK+l_(T8DtFXUwggm@1
zTpqFCd%O3X*znBoImS~fF4^5cuI3+~6~yvDtGC~Z&*CFw5w(C*Z{>3|BBT1>KHWrT
zP$$t1!it}DD=6Y($UEu$K|V`?^g9)c`^lFO_lQ_gCon=$FY7E@k}8KXnam-jG|CYG
z^<L5{VH8YMz}dXB0Z|3o%myzGal`bnGz-xze0h>4h6qOMbZTMBRPCZgUEh7Dbhok|
zkf~^utQ(0@RqL7KJQkB=Gy!79k;v}h0+HYy72&9X!6gctOcI?0vpD9HzP}f$ozNg|
z3irDd_iIgjrZ+7x8r{JZ(DO3mUyRC{UuRVkbj^bEdQpHN;EL&ZJJa*4*Q}{lSQQ#%
zJYTEOSxaFFSmTs!6pf!JunO?SML19`3WNh3n+;mCm?c@nkmJD7L{SK4r#WVpb(W$!
zHv#xP4ptN#h+xv1%I|>`oVH^-ML`PSW{FP1MwDcgM6l)Q`OI+K)P9u)X;l4F<B-VP
zwOAD8?}!3+2qCb}iJS^<gs~8=x_Q$T997tcD1>Y&9|=tpfb|`u{*So%C+BE`wEc5u
z#C@BU)=_B+JfZQq$rFLgPh9JTJ$3q!^Omw*mQuwIow4xv@fyL48>(Ipmj%Cqtkf~L
z4(mHtm+gD@)@bhwW#s5q*!kPsE?A*|ixrd#V*SMK%v13f{6S)rKPnv+KTCSj5a1@l
zBH(0!wB|SIZ-7W6np02!E-8(m1?+6Csi{9-TRS<Kb<n<6fCYULDgrAr8yhl|xRGp1
zv@9|IUF(zg%F5cGSPL#B@(1~qJgqEiLrcqstg`Uu2*%sR$ce;u4lQP7>|z9NHhS0t
z>{u4vvY|Mkn3c5HV$>iCgJYM#aWl!CYhhu)*&r>|Ohzhxn)Fm0ym_58%p=VsOj`Gh
z;Iv?buKz6Q8R&o!<^~XrIGQeRfGrA)5W*U!v5hkr(FTl0S?C3WVp+B*z07<2?!I&X
z##~5Y{HgXXV8!6&pURn^W>fNKm42UeSCgucABoUM9Fa%d5$JTiy+Gy_uG5WKr%uZF
zGD_|%KXvMJRQcjT=pJ`38tR@`b_r&o!V)l!;ScfYZpxeWAzyBpe@8J4l=wth%iOtG
zG%i8{GNs0Ls;KZm#XyOJLh%XRhHRw#><YxFSHTVOdxz1wYZ=AQKOiX2uv0%B;9<mT
zS+MyAr>jl&-sDcu&WN)gRSaJ0w#*Yci{)J|N5dcAH1i6ApIs7}l9K4bqU$CtDu2TN
zvdlXKl}}lku8R_P@hBc+tX<+LUHZ}~dp9Y>TXq?JJRx8NEG=%DyOa5YWBaA7ba;3k
zS+Z&Q<h<5V0_zM#I!WNQ+kgU%qq`PlLp>Ow5wHPj7#XEDPAPVpW^Kp@+5tjg%3_Oq
z9cDphuB(yRmNoAW$lvB6LV@NffRw#2r|0_U3x%`RUjVXogiet1nl#~TeZd@7@cPUP
zgtP0C1^{qtmS!DTXktPfi&$qP;HWW}8J<LbBtkBod@_)pQWG;sil(T^Ss60j3JwKU
z!pwE$R)LwY?zW{C=<g-rr1v)^6`6_onIZqcFl(l0`b;!QS>3BifGCAFF+p3Gpkq!B
z>gsAFwg)`;;?aY3&X`vODeEn0%*bd^#msqU8DbG-%NJqT8gr5GF73Phe(;v9?gq`?
zrHfr1<3hYI(Qa@g>RJ;+4u%jGvZky79@!gmAY|_{pqO9+nVrbZg@HFXG|eO=5vexe
za8tpP88|_cco-oPK`<2UYTdTgW#NWtHZR@WP&s#QLuKAf9t(<CJIh(@<Mz9E?W`Ru
z2Vhl_E5Euqyq+uRfL0YheHNs8erF>;T4i7PQS@w<HklYWplZ!bf?U3wo0+NgSiE?<
zO>r%!?3&{2!%sYoO9G2a&s?%DjMUGqtCKAJ##zTc=}_J9Eu1z}r<)o5`Yk3-tBs?h
zZW2`Jj3+ZfX#$pVVr*g=lgKRWl=Z9s{!V6Yj!%ql-pNw#duz0Qbji3}>674!yXs59
zpL{3PEs15z%AC6k%rjWsFB?SGHA@#oe9wtf`?zS=_8)<X>D$&#JtQLYj_ql5oYy3<
zVpXG|^-<~-=d2?U>Gm6kw>UELO>oUvLy%$iZ1=L+@j;CHc};Njphl~Jfzn2R4E_;W
zCNNC8<&6Q-m%d|NGi39pt8p(vs24w7JaQuocdTkRxlBfl#<~wTxl>Dv1@AM)%#qCj
zZ+vz1`-PF+mChX4{i}o-9P#V!ftgo7`lZ3$ZzSci(X=_z9BHz~+zP4lL!Uz=41SIt
zUWH{97K3jAW@FPtXoWu@d(Wpfhu6v@XRQvCz3J0br6VNyC!w+W-;nHp{nBuSL?@Uo
zt@U|>{po5}%UbhUxODEpA5^CAwymu$ism@j#$LU{gd0N&WnCwz<3Z%R!&O!F6w-z(
z+QkKAA#W5SvFF?6#Zz(9T~b6$e5XUyfrww><`$kqwqzt1$Wa*bM-~KjmwXasIvat4
z4>kPLcsN8Z084_>?NRK&HG$xCE($oPG?TmKATi`agH=7t7%_T*KdRBx_XZTF4(HGJ
zsR@zjRFp)xB>sH-5}|}r=_JB=@z4LEim&~r-n&T{QKF(F#A}pwac3`3JJ5U)-$I6G
z_ZZsRe`8<Zx8G*I+NAyVc4uwS&DXa5{`Whxe%}@>?t+}>&*`0ke-0NmsJ5>^+E+B=
z&tLZ}Z9IQwb>Elg&o-m;9^Zy#wRi~@z?PgYXnQACWL?PGU;ha&zVFnA<fAXQ2hAOb
z<z@7*$ID1l$P0Zp{`#-)-g~#xYM!yGOCET7l*ZGXkrGiH;x<x@JwCOS9e42Hz(6#g
z@|2yOmQ#|h+Sf6#D{?LjyLeDh3uSIp2ZM0c%G0N(SG&yZ*RFvGKx+nE=#hvMb%_aD
zg@`}OCpjV#i++Cbl%SZw+>$7k^jrw|PMiKv{50u_?|RDh+`)g`Z6B)=RucO|Dk1DQ
z?o}b9_ChSX{oR0Wei)o(W#NV}LwTtoJ*05$OBYSE%99?>$}$OKOEgJgmi9hdOVNtp
zv)z9!fOJ&h8wW(cyB3S1{Le<2jV3aJR+U5?c%yKdJh)UqO%Is~Nxk@A7gJJe(khcw
z`cj;KeGn`Aq!scO)S3Efdu8*%^Yz*l!DMjp7W+ADzR7LY*ln~1EFEzZ0k!wt3$FbO
zTCw)FlWx2XSdsDz3M5W#9#7`lQ(rGMfLO$d_>eQUDkSZspT#}wvy4Wo#JXU?Y;aoA
zX%y_9j}dl`I}t(*P2pV*g(w9U!{HHHvDVt^>K0#r{ve-ZsM4o2TppP%M*O#Y{W;=r
z$DcQX5r0<4ckw}Dl(l8O3tQr1XQ3c^GT75t2F`;P2kn4(-0s>eh+b9Q(J?&Hu`sc?
zzLE+Yzi=zXPm-P{xiin8#U(iDF{c2NzGm56nMSzFO+NKH&kOKvBe9N0_H7yIv2OY5
zch0&72Op1(K8~>656~=a<aYfkV+Kop-NiNj-Td^=J*U35Kl)X1!eB^1PFq8nzmQAx
z{(tm-U=m^69P&AvuxSE`Filt!?&~h;WPTZ(oPVpEW#4AkCV?nBA}gqK#R4~utjyy*
zEO7A`E6*~ytL?CVFnV?5?`$OPYB>CFj9qp7g9n0A@gCkw;$MaJ#3=sMD&JMsRrilG
zo|&En-rmgBx2mNYk2|s2AA$mZ(8k@KqLJ2oc(K9DyTCJZO2d`6YwA>&RoXuTGy8*N
zk@CpQ$P6m9h9ION=_`K7_2k8S@pAuMkscx?WNN;jIwoZ18~>TZ^NQzr=KS#PLj*N^
zFi{vwZPd2@N};!Mf5`!DfEN1iK6FT>5=H3U%U#(##0+f~(UrrN{AX+R)x63*xs?;3
z*aMB1Wyxkt@2;=!#kSeSDXop^${911vpq>K-v?FS?u=o*NVMqUt*ExP`;1om!i&nX
zrZujs)74Awhy9MmLB-~h_4NczKUUEtBu;BN&^k?#_~<%~(LFd&5|yBA%*@yzK>8I1
zuQ7|^a_S&i#KPIZgPS%PE1o_rH^R-+zEwrfEZ2YIX?z5)Ub$lUB{<5$3ueE0%Qv)V
z|B82RZh1PguY`B;PLSAe^Uq@*!a|9O*fm59@`Da9{k0foo*+EDqUZUJ5~IHCLtj6y
zp(mc}eeX^As>v5TPjDS|_yE^F$3V*;&aA7|Onz2C{P>SMci-9J!)!{4_g`wM{e5k>
zH8a#peB9<6l5JSx<&#)<FTFNrul)Dp#eJh+Rm^_d_cS|in%s{+N(>VE3@`pQkXR|t
z0>UPc37i|}`qZ%zKQ2W+rHW$NIfXlQ;&B=|(Kv;BF_4h&&M9nW^CY0d93D92OjhZ4
zXeAo%@h?J$w8K4zpX<&6Z($u!-;HoZNg>1`B!nD<4r@{lv*WIb#xx}~)8@PCa)(C5
zU`C=>cbp>KK^0Y1-P76G0pWOL?gb5@e?{*wL7E`Ud+yM#$={o^H(&FVypU_mmok?_
zfl{;i?S7_Qiy>pKrKFrDNaAz~coLbhSj2d(CB|kEr*?{*=%E8U5dZ&&6(f!wv-&To
zZ(Oz6-=~3j>ywJbFUv>5A|L#yTzdITkt8BCOIcFa^u${8sO8dvD}NnL%RX~Hr}jBR
z^wmzo<W0fY#S?G8A>d6(Um{=C3;B(U;lM0Kj3Ia3GZ<TXetC=cEm?NY>+6pgd^;j}
z7koTk`Cn$>1ATkv#o}e@v6=O)T9rud{&7v`nZ9<?!=usTanTczh9J{+<E%r&VN05(
z&JWPk9r^j2Jx71uS3u5t;dc-aV>@<&M@-{*o5bEzocC#(q=B-)AW9ob&!uQ3jxKBp
z`7|k@&^Wqtf>53zIcNIZ0BH+(3AuGIm3RK)an}8KPteInF{yJFx;S!t*tbXbrvzo#
zaF;8br4UQw+NfdF4K|);6J2Hz%cT(t)MtR^IJ#n0KLV?_S=%6ZJGLW=Xnl>2k#DEg
z>K~gHpY3&ZuDaTfy<4;&)l8i`GQtoHtn8qV_~65$t3yx6JvEw{vox9`kKumJoew?$
zZD~x8+mH>jn5AetYadXIj}yf8(M5=aBu$r)2*Aw&fm3P;jFHGBgyd{6NRZ$$JEq~o
zxPHf{j{YLKNXY1a&8M)=p>X9Ysq`ChgoFfY`0^ZU<?0MtJ30AsdGLXp28U_yLYZ{x
z#D)}OkH!a#DFvE{XE~j9g3|Vi3fBuS3c;1Hnq5d8aAWVA`5f^1)n|V|F)ORe@#n>G
z^#yUI1x4+ODD9;~FxE(r8LeA1<QiJM4x2IiQ3*s%<y;r9)`UzDyj*~OwN{D{p4cwI
zKr#CtC%cP1a#@>&WG0*WX*`zWJcl`jg>K9nE9R0c7WmjWt)LoYVJ1&CPkBl1Co37#
z={#qwS(BX1c32;ixN);t;<3>KB&QmZ(_Wv+iDE1w@R}uKMdc~fzdHn~vWdQ7NlMuG
zF?z3PxK+mO+hwi8MGMCf%2_E}nWdCa{7b@1Asm29paNxk3Uq62Ep@i8ZsJjO?LH=k
za$)3{XKlhwlV-Dx=^4k!e0Dd92-xuaDj%D>NE_Q}?u^qlZGH;eT||*)){H2a;uE_P
zBfryVT*aD2l0>A1cu<6~-}R^v<23o|+Ws4DPre<SC~8OK#gda2?8F;}ew)ZV<F9@e
zp?RBR+feeUSZ(9>zHkz!s)PM85P>l?mh>_=X){<bO-~R26+1-fbILbFhKB>Te4DTf
zw{Q4+JsA7V?)W}*YIstX4VfCfEM{v^O2mpV-Nt&!5q~1IlR}6^;J$}sRr*EkDngM@
z8hb?0W!i!w6KUO(JeqffrA6Iv^_eIIRYWWj9~WvAdVfDa=*#WBR^tf$Vsey|ra4M^
z70|XdG$}|;0g1>-OE@KLUqd9G0MW6KO%}`c49O|hhWd2A=~HmeedEXIncOSi4EU+&
zw@Yr>@?VtiOLdoY8T<@R?kBt6$+B--)+Cp)+lB3eT&cdalv|pVZVER##$~w|YAR@@
zzC&dUkP5doe7H}^_}N4h@laE{rLJXo*v>^0^nd^E@fT$*X`IoL$*4B?$VL8&fB&P2
zW1(ZTYzI4*4e@@a71+hOu!5E*c%vBZumE5^K5=<~32nWgi#j4>-0eCTY%|7B0M09O
z>8AMRkg~Fn=J+N$R~figIGiVO`0_v~ycxl2Dnhm(I`9FCVq3G#wvx!B|Bm1cVHI#{
zo5Fz(=6DPIp7<9`|KG4W&M1%S_7@-8|K^+f4~e7pIb?~$%mf3P#+BV|9Nk68VKOOb
zr~Z`Gre53&91un}l(S`OaJSeO6W0549^D|+{O&M=7`(Hj8&|#3|0sG&RU9yZo*5yj
z_qylInTr-tI-TnY^*D9q18UH<T9uC<(@({;fC-MLTow*z>JpelVq{a8SO$`wdA0?U
zCU70H81F0LxEc{eGWQ@muM3m24?eo@x_|$H>!Sx_%hi_l(U2<0ct<Kbg5)9dEOH9T
zhHU(EkHSI@)`yba5f`OOS%EUPwt>x-9Dn>aHBB#!l|P>oekG<eiThntXw<){H3{+2
zRejmK<=(*?3N`986)G<cuZ5R;#&+fm7|SwP+<h=Yb!SIMPc&z-z&{OAw<zR5H*qZF
z_L$1U3#W_sn}FM$hhi^XI(cGnG}g|zpS!6euEDWEm;Jx^`N~IWigHmDJr;X<@IKJF
zg4M-SD~hMC&P?+O3R(OQpIy#vr}!@o^@#tY*Z&9aw3!wD0~y7l1g*gI>ST7{4}QIW
ze*R~#pV*Fn?;j)4v^(=O>4`XSR(I^C(~_X_U(0G`Af`X{GrPUg(!C<c-rrwuCxg-i
zvU&W?n!~)eQ)@rA4hE`rJIILdB8%THc~PTr?NNuo=s@eizHEjl|72L`7FWd!!RD=O
zJMYULTU%*T*LF^$Dd$IYf8w!6C+-lF3sORZEEnBsNycZ#l7Xw;4h)`%l-j-Q>DyCQ
zc~fs%<i}Y(JjlFxU*xHxvJ~t$=e&m}P#t*t{qj9z9(YP-<=U<-ycjK!xkR)?;H8b>
zZSkw*dE<#Q-|)c}pD9{_(ysa_KpvhMo)IpCk`g%U8V>7UG<h^1^lY6j!5_;aosp2B
zi@%Cd)c>ZVxOsmR!eT-4F9}2<eGfjb)p_v5PsO}o3oF?0Js|dQ+I4=1I!Quo@h|P|
z+>tnOZi6}dnkX){4e++CI}TZ`x^SvN9MOep#Up}|VrbCrb=d8%C-J^jStZzXrnwnN
zIblhm>|_V2Q|Gf7^f8QCQ;+JG)ZI{1N>aG>79zP~kA9CruNcwdR`LH%riHaCv^TKj
z56FF2xrV=Iw5CiK{3gy#u3A3h?_B6y8TQVrsE~!t37cD@o0Gl)GK=L|@-umHmpkL`
z*Zf@5;Mo8Ej?H|Q^sGdl`84^lj8F4rTCGeK<7&A+v~h!+&$O5^#&bbLUB(5|FImy`
zpt3TJ(-WnHj_*d#t=T6-M`hB)uEcM6J?y)HErv#aQ#abOZ(jv(#YLmK`rSA8ktT|a
zrqs-JcBHg&1$^^qx%Uo>s{t(C)E7Sblbtzu<LsRsGTGZ#2AG4Lk^LnMSg<?7KKnIf
zqlD~Knp<5v2S<7Km-G@ONp}sxX5><DVDVW#YfP;x)|lIi(H2W|z&Z0Hr^TAw7OS3R
zFVxP5#b+-C5(xGti8b53-oa|<ox`)?&fXz*y|rAfEjxr@#eVcKGE-z(pNGu0#k0+e
zrWDaqcdNT5Dsy^&i#bXqXLBsE(BwFgE2*{ipj)NZtDWJ#PakeRwR<UXW^Z^ijRx40
zG)J!_HCP+<@=rOV!zlQbG;^egxTfbMi;38D6vk?HXGF+5S~i(+V@aZ`_BJMK@r}qG
z;GMUo*k_SSsW7ygh-{0F(IZlcMlwDyKeb?m4wRxUR%1GQPea8kO82$QE=_iR9tCQR
zBa&@=iM8IWR`*fg2HV6ht`e*)mRxMF=sDgTYcp%}Mp^OraK^=boL|5nEtrSI<CfD>
z^Qd#tePJKazCF@7=l7DjOi3o^e`e#GO-kwM`Q+d}XJ@j0pRx8Ykypt(Gfll7s#kgw
zdwW4sVqIy<pk(G^;Azgo*P?0O#~YimQY&vB&vR@miFi+X{xrhN!8R#g8p~1R!5Wh+
z+8SD73JoR?Hv8C?Up8w3ukZIXc+X9@dF*|C%z`)HvF!U=e%VWVr|LLHVB5D5?_hU=
zao=#4{8A2_j}J{^u&qT<Hkn{wY?Iy&n4NuWXOyZ0voolN!*G9C8~@;@sRh3|nF2T5
ze~rH3aaB02;^evV57aEUpUZ<FBKhC20a46&?$J$hGTPnT`~UCCuAC>y_#g_se=jlo
zib^fDQY&6!6LX4oy>gT>=+I&*W6|2_$g?cF%_8OgXK{v>F--(Qvuvr`a`^`7Z926x
S928VpEWIw3UWYuroH;fcy(i%S

diff --git a/dashboard/src/components/shared/Logo.vue b/dashboard/src/components/shared/Logo.vue
index 4ff5889e2..49e59ed97 100644
--- a/dashboard/src/components/shared/Logo.vue
+++ b/dashboard/src/components/shared/Logo.vue
@@ -2,16 +2,13 @@
   <div class="logo-container">
     <div class="logo-content">
       <div class="logo-image">
-        <img width="110" src="@/assets/images/astrbot_logo_mini.webp" alt="AstrBot Logo">
+        <img width="80" src="@/assets/images/plugin_icon.png" alt="AstrBot Logo">
       </div>
       <div class="logo-text">
         <h2 
-          :style="{ color: 'rgb(var(--v-theme-primary))' }"
           v-html="formatTitle(title || t('core.header.logoTitle'))"
         ></h2>
-        <!-- 父子组件传递css变量可能会出错，暂时使用十六进制颜色值 -->
-        <h4 :style="{ color: 'rgba(var(--v-theme-on-surface), 0.72)' }"
-            class="hint-text">{{ subtitle || t('core.header.accountDialog.title') }}</h4>
+        <h4 class="hint-text">{{ subtitle || t('core.header.accountDialog.title') }}</h4>
       </div>
     </div>
   </div>
@@ -44,7 +41,7 @@ const formatTitle = (title: string) => {
 <style scoped>
 .logo-container {
   display: flex;
-  justify-content: center;
+  justify-content: flex-start;
   align-items: center;
   width: 100%;
   margin-bottom: 10px;
@@ -52,9 +49,9 @@ const formatTitle = (title: string) => {
 
 .logo-content {
   display: flex;
-  align-items: center;
-  gap: 20px;
-  padding: 10px;
+  align-items: flex-start;
+  gap: 16px;
+  padding: 10px 0;
   max-width: 100%;
   overflow: visible;
 }
@@ -78,6 +75,7 @@ const formatTitle = (title: string) => {
 }
 
 .logo-text h2 {
+  color: rgb(var(--v-theme-on-surface));
   margin: 0;
   font-size: 1.8rem;
   font-weight: 600;
@@ -94,6 +92,7 @@ const formatTitle = (title: string) => {
 }
 
 .logo-text h4 {
+  color: rgba(var(--v-theme-on-surface), 0.72);
   margin: 4px 0 0 0;
   font-size: 1rem;
   font-weight: 400;
@@ -104,7 +103,7 @@ const formatTitle = (title: string) => {
 /* 响应式处理 */
 @media (max-width: 520px) {
   .logo-content {
-    gap: 15px;
+    gap: 8px;
   }
   
   .logo-text h2 {
@@ -116,7 +115,7 @@ const formatTitle = (title: string) => {
   }
   
   .logo-image img {
-    width: 90px;
+    width: 64px;
   }
 }
 </style>
diff --git a/dashboard/src/i18n/locales/en-US/core/header.json b/dashboard/src/i18n/locales/en-US/core/header.json
index 4da98b8dd..07e913e4c 100644
--- a/dashboard/src/i18n/locales/en-US/core/header.json
+++ b/dashboard/src/i18n/locales/en-US/core/header.json
@@ -80,20 +80,25 @@
   },
   "accountDialog": {
     "title": "Modify Account",
-    "securityWarning": "Security Reminder: Please change the default password to ensure account security",
+    "securityWarning": "Security Reminder: Please change your password to secure your account",
+    "securityWarningLegacy": "The new AstrBot version has improved security. Please change your password.",
+    "securityWarningUpgrade": "Legacy password storage detected. Please change your password to complete the security upgrade.",
     "form": {
       "currentPassword": "Current Password",
       "newPassword": "New Password",
       "confirmPassword": "Confirm New Password",
       "newUsername": "New Username (Optional)",
-      "passwordHint": "Password must be at least 8 characters",
+      "passwordHint": "At least 8 characters, including uppercase, lowercase letters, and digits",
       "confirmPasswordHint": "Please enter new password again to confirm",
       "usernameHint": "Leave blank to keep current username",
-      "defaultCredentials": "Default username and password are both astrbot"
+      "defaultCredentials": "The default username is astrbot. An initial password is generated on first startup and shown in the console."
     },
     "validation": {
       "passwordRequired": "Please enter password",
       "passwordMinLength": "Password must be at least 8 characters",
+      "passwordUppercase": "Password must include at least one uppercase letter",
+      "passwordLowercase": "Password must include at least one lowercase letter",
+      "passwordDigit": "Password must include at least one digit",
       "passwordMatch": "Passwords do not match",
       "usernameMinLength": "Username must be at least 3 characters"
     },
diff --git a/dashboard/src/i18n/locales/en-US/features/auth.json b/dashboard/src/i18n/locales/en-US/features/auth.json
index 5c44558a0..23651a52f 100644
--- a/dashboard/src/i18n/locales/en-US/features/auth.json
+++ b/dashboard/src/i18n/locales/en-US/features/auth.json
@@ -2,7 +2,27 @@
   "login": "Login",
   "username": "Username",
   "password": "Password",
-  "defaultHint": "Default username and password: astrbot",
+  "defaultHint": "If this is your first login, check the logs for the default password.",
+  "setup": {
+    "title": "Set Up Account",
+    "subtitle": "Create the account used to manage AstrBot",
+    "username": "New username",
+    "password": "New password",
+    "confirmPassword": "Confirm new password",
+    "passwordHint": "Use at least 8 characters with uppercase, lowercase, and a number.",
+    "submit": "Complete Setup",
+    "validation": {
+      "usernameRequired": "Enter a username",
+      "usernameMinLength": "Username must be at least 3 characters",
+      "passwordRequired": "Enter a password",
+      "passwordMinLength": "Password must be at least 8 characters",
+      "passwordUppercase": "Password must include at least one uppercase letter",
+      "passwordLowercase": "Password must include at least one lowercase letter",
+      "passwordDigit": "Password must include at least one number",
+      "confirmPasswordRequired": "Confirm the password",
+      "passwordMatch": "Passwords do not match"
+    }
+  },
   "logo": {
     "title": "AstrBot Dashboard",
     "subtitle": "Welcome"
@@ -11,4 +31,4 @@
     "switchToDark": "Switch to Dark Theme",
     "switchToLight": "Switch to Light Theme"
   }
-} 
\ No newline at end of file
+} 
diff --git a/dashboard/src/i18n/locales/en-US/messages/validation.json b/dashboard/src/i18n/locales/en-US/messages/validation.json
index 407f638c5..c9e9a172c 100644
--- a/dashboard/src/i18n/locales/en-US/messages/validation.json
+++ b/dashboard/src/i18n/locales/en-US/messages/validation.json
@@ -22,4 +22,4 @@
   "upload_failed": "File upload failed",
   "network_error": "Network connection error, please try again",
   "operation_cannot_be_undone": "⚠️ This operation cannot be undone, please choose carefully!"
-} 
\ No newline at end of file
+} 
diff --git a/dashboard/src/i18n/locales/ru-RU/core/header.json b/dashboard/src/i18n/locales/ru-RU/core/header.json
index a23f3dfd3..eb2ce7f23 100644
--- a/dashboard/src/i18n/locales/ru-RU/core/header.json
+++ b/dashboard/src/i18n/locales/ru-RU/core/header.json
@@ -1,4 +1,4 @@
-{
+{
     "logoTitle": "Панель управления AstrBot",
     "version": {
         "hasNewVersion": "Доступна новая версия AstrBot!",
@@ -80,20 +80,25 @@
     },
     "accountDialog": {
         "title": "Изменить аккаунт",
-        "securityWarning": "Безопасность: Пожалуйста, смените пароль по умолчанию для защиты аккаунта",
+        "securityWarning": "Безопасность: Пожалуйста, смените пароль для защиты аккаунта",
+        "securityWarningLegacy": "Новая версия AstrBot улучшила безопасность. Пожалуйста, измените пароль.",
+        "securityWarningUpgrade": "Обнаружено устаревшее хранение пароля. Измените пароль, чтобы завершить обновление безопасности.",
         "form": {
             "currentPassword": "Текущий пароль",
             "newPassword": "Новый пароль",
             "confirmPassword": "Подтвердите новый пароль",
             "newUsername": "Новое имя пользователя (опционально)",
-            "passwordHint": "Пароль должен быть не менее 8 символов",
+            "passwordHint": "Не менее 8 символов, включая заглавные и строчные буквы, а также цифры",
             "confirmPasswordHint": "Введите новый пароль еще раз",
             "usernameHint": "Оставьте пустым, если не хотите менять имя пользователя",
-            "defaultCredentials": "Логин и пароль по умолчанию: astrbot"
+            "defaultCredentials": "Имя пользователя по умолчанию — astrbot. Начальный пароль генерируется при первом запуске и отображается в консоли."
         },
         "validation": {
             "passwordRequired": "Введите пароль",
             "passwordMinLength": "Пароль должен быть не менее 8 символов",
+            "passwordUppercase": "Пароль должен содержать хотя бы одну заглавную букву",
+            "passwordLowercase": "Пароль должен содержать хотя бы одну строчную букву",
+            "passwordDigit": "Пароль должен содержать хотя бы одну цифру",
             "passwordMatch": "Паролы не совпадают",
             "usernameMinLength": "Имя пользователя должно быть не менее 3 символов"
         },
@@ -105,4 +110,4 @@
             "updateFailed": "Ошибка обновления, попробуйте еще раз"
         }
     }
-}
\ No newline at end of file
+}
diff --git a/dashboard/src/i18n/locales/ru-RU/features/auth.json b/dashboard/src/i18n/locales/ru-RU/features/auth.json
index d6ba05dc3..8465dea5a 100644
--- a/dashboard/src/i18n/locales/ru-RU/features/auth.json
+++ b/dashboard/src/i18n/locales/ru-RU/features/auth.json
@@ -2,7 +2,27 @@
     "login": "Вход",
     "username": "Имя пользователя",
     "password": "Пароль",
-    "defaultHint": "Логин и пароль по умолчанию: astrbot",
+    "defaultHint": "Если это ваш первый вход, проверьте пароль по умолчанию в логах.",
+    "setup": {
+        "title": "Настройка аккаунта",
+        "subtitle": "Создайте аккаунт для управления AstrBot",
+        "username": "Новое имя пользователя",
+        "password": "Новый пароль",
+        "confirmPassword": "Подтвердите новый пароль",
+        "passwordHint": "Минимум 8 символов, включая заглавную букву, строчную букву и цифру.",
+        "submit": "Завершить настройку",
+        "validation": {
+            "usernameRequired": "Введите имя пользователя",
+            "usernameMinLength": "Имя пользователя должно содержать минимум 3 символа",
+            "passwordRequired": "Введите пароль",
+            "passwordMinLength": "Пароль должен содержать минимум 8 символов",
+            "passwordUppercase": "Пароль должен содержать хотя бы одну заглавную букву",
+            "passwordLowercase": "Пароль должен содержать хотя бы одну строчную букву",
+            "passwordDigit": "Пароль должен содержать хотя бы одну цифру",
+            "confirmPasswordRequired": "Подтвердите пароль",
+            "passwordMatch": "Пароли не совпадают"
+        }
+    },
     "logo": {
         "title": "Панель управления AstrBot",
         "subtitle": "Добро пожаловать"
@@ -11,4 +31,4 @@
         "switchToDark": "Перейти на темную тему",
         "switchToLight": "Перейти на светлую тему"
     }
-}
\ No newline at end of file
+}
diff --git a/dashboard/src/i18n/locales/ru-RU/messages/validation.json b/dashboard/src/i18n/locales/ru-RU/messages/validation.json
index 07d061579..41f1de81d 100644
--- a/dashboard/src/i18n/locales/ru-RU/messages/validation.json
+++ b/dashboard/src/i18n/locales/ru-RU/messages/validation.json
@@ -22,4 +22,4 @@
     "upload_failed": "Загрузка не удалась",
     "network_error": "Ошибка сети, попробуйте снова",
     "operation_cannot_be_undone": "⚠️ Это действие нельзя отменить, будьте осторожны!"
-}
\ No newline at end of file
+}
diff --git a/dashboard/src/i18n/locales/zh-CN/core/header.json b/dashboard/src/i18n/locales/zh-CN/core/header.json
index 3bb985033..9be4af2a5 100644
--- a/dashboard/src/i18n/locales/zh-CN/core/header.json
+++ b/dashboard/src/i18n/locales/zh-CN/core/header.json
@@ -1,5 +1,5 @@
 {
-  "logoTitle": "AstrBot 仪表盘",
+  "logoTitle": "AstrBot WebUI",
   "version": {
     "hasNewVersion": "AstrBot 有新版本！",
     "dashboardHasNewVersion": "WebUI 有新版本！"
@@ -80,20 +80,25 @@
   },
   "accountDialog": {
     "title": "修改账户",
-    "securityWarning": "安全提醒: 请修改默认密码以确保账户安全",
+    "securityWarning": "安全提醒: 请修改密码以确保账户安全",
+    "securityWarningLegacy": "新的 AstrBot 版本强化了安全策略，请重新修改密码",
+    "securityWarningUpgrade": "检测到旧版本密码存储方式，请修改密码以完成安全升级",
     "form": {
       "currentPassword": "当前密码",
       "newPassword": "新密码",
       "confirmPassword": "确认新密码",
       "newUsername": "新用户名 (可选)",
-      "passwordHint": "密码长度至少 8 位",
+      "passwordHint": "长度至少 8 位，且包含大写字母、小写字母和数字",
       "confirmPasswordHint": "请再次输入新密码以确认",
       "usernameHint": "留空表示不修改用户名",
-      "defaultCredentials": "默认用户名和密码均为 astrbot"
+      "defaultCredentials": "默认用户名为 astrbot，初始密码会在首次启动时自动生成并显示在控制台中。"
     },
     "validation": {
       "passwordRequired": "请输入密码",
       "passwordMinLength": "密码长度至少 8 位",
+      "passwordUppercase": "密码必须包含至少一个大写字母",
+      "passwordLowercase": "密码必须包含至少一个小写字母",
+      "passwordDigit": "密码必须包含至少一个数字",
       "passwordMatch": "两次输入的密码不一致",
       "usernameMinLength": "用户名长度至少3位"
     },
diff --git a/dashboard/src/i18n/locales/zh-CN/features/auth.json b/dashboard/src/i18n/locales/zh-CN/features/auth.json
index d6da99943..c6cc4efe3 100644
--- a/dashboard/src/i18n/locales/zh-CN/features/auth.json
+++ b/dashboard/src/i18n/locales/zh-CN/features/auth.json
@@ -2,7 +2,27 @@
   "login": "登录",
   "username": "用户名",
   "password": "密码",
-  "defaultHint": "默认账户和密码均为：astrbot",
+  "defaultHint": "如果是第一次登录，请留意日志输出的默认密码",
+  "setup": {
+    "title": "设置账户",
+    "subtitle": "创建用于管理 AstrBot 的账户",
+    "username": "新用户名",
+    "password": "新密码",
+    "confirmPassword": "确认新密码",
+    "passwordHint": "长度至少 8 位，且包含大写字母、小写字母和数字",
+    "submit": "完成设置",
+    "validation": {
+      "usernameRequired": "请输入用户名",
+      "usernameMinLength": "用户名长度至少3位",
+      "passwordRequired": "请输入密码",
+      "passwordMinLength": "密码长度至少 8 位",
+      "passwordUppercase": "密码必须包含至少一个大写字母",
+      "passwordLowercase": "密码必须包含至少一个小写字母",
+      "passwordDigit": "密码必须包含至少一个数字",
+      "confirmPasswordRequired": "请确认密码",
+      "passwordMatch": "两次输入的密码不一致"
+    }
+  },
   "logo": {
     "title": "AstrBot WebUI",
     "subtitle": "欢迎使用"
@@ -11,4 +31,4 @@
     "switchToDark": "切换到深色主题",
     "switchToLight": "切换到浅色主题"
   }
-} 
\ No newline at end of file
+} 
diff --git a/dashboard/src/i18n/locales/zh-CN/messages/validation.json b/dashboard/src/i18n/locales/zh-CN/messages/validation.json
index da12ae79b..7810fe65d 100644
--- a/dashboard/src/i18n/locales/zh-CN/messages/validation.json
+++ b/dashboard/src/i18n/locales/zh-CN/messages/validation.json
@@ -22,4 +22,4 @@
   "upload_failed": "文件上传失败",
   "network_error": "网络连接错误，请重试",
   "operation_cannot_be_undone": "⚠️ 此操作无法撤销，请谨慎选择！"
-} 
\ No newline at end of file
+} 
diff --git a/dashboard/src/layouts/full/vertical-header/VerticalHeader.vue b/dashboard/src/layouts/full/vertical-header/VerticalHeader.vue
index c01ef4d46..a1fb67eb8 100644
--- a/dashboard/src/layouts/full/vertical-header/VerticalHeader.vue
+++ b/dashboard/src/layouts/full/vertical-header/VerticalHeader.vue
@@ -3,12 +3,12 @@ import { ref, computed, watch, onMounted } from "vue";
 import { useCustomizerStore } from "@/stores/customizer";
 import axios from "axios";
 import Logo from "@/components/shared/Logo.vue";
-import { md5 } from "js-md5";
 import { useAuthStore } from "@/stores/auth";
 import { useCommonStore } from "@/stores/common";
 import { MarkdownRender, enableKatex, enableMermaid } from "markstream-vue";
 import "markstream-vue/index.css";
 import "katex/dist/katex.min.css";
+import "highlight.js/styles/github.css";
 import { useI18n } from "@/i18n/composables";
 import { router } from "@/router";
 import { useRoute } from "vue-router";
@@ -31,6 +31,8 @@ const LAST_BOT_ROUTE_KEY = "astrbot:last_bot_route";
 const LAST_CHAT_ROUTE_KEY = "astrbot:last_chat_route";
 let dialog = ref(false);
 let accountWarning = ref(false);
+let accountWarningLegacy = ref(false);
+let accountWarningUpgrade = ref(false);
 let updateStatusDialog = ref(false);
 let aboutDialog = ref(false);
 const username = localStorage.getItem("user");
@@ -107,6 +109,14 @@ const passwordRules = computed(() => [
   (v: string) =>
     v.length >= 8 ||
     t("core.header.accountDialog.validation.passwordMinLength"),
+  (v: string) =>
+    /[A-Z]/.test(v) ||
+    t("core.header.accountDialog.validation.passwordUppercase"),
+  (v: string) =>
+    /[a-z]/.test(v) ||
+    t("core.header.accountDialog.validation.passwordLowercase"),
+  (v: string) =>
+    /\d/.test(v) || t("core.header.accountDialog.validation.passwordDigit"),
 ]);
 const confirmPasswordRules = computed(() => [
   (v: string) =>
@@ -250,17 +260,15 @@ function accountEdit() {
   accountEditStatus.value.error = false;
   accountEditStatus.value.success = false;
 
-  const passwordHash = password.value ? md5(password.value) : "";
-  const newPasswordHash = newPassword.value ? md5(newPassword.value) : "";
-  const confirmPasswordHash = confirmPassword.value
-    ? md5(confirmPassword.value)
-    : "";
+  const currentPasswordValue = password.value ? password.value : "";
+  const newPasswordValue = newPassword.value ? newPassword.value : "";
+  const confirmPasswordValue = confirmPassword.value ? confirmPassword.value : "";
 
   axios
     .post("/api/auth/account/edit", {
-      password: passwordHash,
-      new_password: newPasswordHash,
-      confirm_password: confirmPasswordHash,
+      password: currentPasswordValue,
+      new_password: newPasswordValue,
+      confirm_password: confirmPasswordValue,
       new_username: newUsername.value ? newUsername.value : username,
     })
     .then((res) => {
@@ -306,13 +314,37 @@ function getVersion() {
         res.data.data.version,
         res.data.data?.dashboard_version,
       );
-      let change_pwd_hint = res.data.data?.change_pwd_hint;
-      if (change_pwd_hint) {
+      const change_pwd_hint = res.data.data?.change_pwd_hint;
+      const legacy_pwd_hint = res.data.data?.legacy_pwd_hint;
+      const password_upgrade_required =
+        res.data.data?.password_upgrade_required;
+      if (change_pwd_hint || legacy_pwd_hint || password_upgrade_required) {
         dialog.value = true;
         accountWarning.value = true;
-        localStorage.setItem("change_pwd_hint", "true");
+        accountWarningUpgrade.value = !!password_upgrade_required;
+        accountWarningLegacy.value =
+          !!legacy_pwd_hint && !password_upgrade_required;
+        if (change_pwd_hint || (legacy_pwd_hint && !password_upgrade_required)) {
+          localStorage.setItem("change_pwd_hint", "true");
+        } else {
+          localStorage.removeItem("change_pwd_hint");
+        }
+        if (legacy_pwd_hint && !password_upgrade_required) {
+          localStorage.setItem("legacy_pwd_hint", "true");
+        } else {
+          localStorage.removeItem("legacy_pwd_hint");
+        }
+        if (password_upgrade_required) {
+          localStorage.setItem("password_upgrade_required", "true");
+        } else {
+          localStorage.removeItem("password_upgrade_required");
+        }
       } else {
+        accountWarningLegacy.value = false;
+        accountWarningUpgrade.value = false;
         localStorage.removeItem("change_pwd_hint");
+        localStorage.removeItem("legacy_pwd_hint");
+        localStorage.removeItem("password_upgrade_required");
       }
     })
     .catch((err) => {
@@ -320,6 +352,20 @@ function getVersion() {
     });
 }
 
+function initPasswordWarningFromStorage() {
+  const hasChangePwdHint = localStorage.getItem("change_pwd_hint") === "true";
+  const hasLegacyPwdHint = localStorage.getItem("legacy_pwd_hint") === "true";
+  const hasPasswordUpgradeRequired =
+    localStorage.getItem("password_upgrade_required") === "true";
+  if (hasChangePwdHint || hasLegacyPwdHint || hasPasswordUpgradeRequired) {
+    dialog.value = true;
+    accountWarning.value = true;
+    accountWarningUpgrade.value = hasPasswordUpgradeRequired;
+    accountWarningLegacy.value =
+      hasLegacyPwdHint && !hasPasswordUpgradeRequired;
+  }
+}
+
 function checkUpdate() {
   updateStatus.value = t("core.header.updateDialog.status.checking");
   axios
@@ -435,6 +481,7 @@ function handleLogoClick() {
 
 getVersion();
 checkUpdate();
+initPasswordWarningFromStorage();
 
 commonStore.createEventSource(); // log
 commonStore.getStartTime();
@@ -1116,7 +1163,7 @@ onMounted(async () => {
     >
       <v-card class="account-dialog">
         <v-card-text class="py-6">
-          <div class="d-flex flex-column align-center mb-6">
+          <div class="d-flex flex-column align-start mb-6">
             <logo
               :title="t('core.header.logoTitle')"
               :subtitle="t('core.header.accountDialog.title')"
@@ -1130,7 +1177,13 @@ onMounted(async () => {
             class="mb-4"
           >
             <strong>{{
-              t("core.header.accountDialog.securityWarning")
+              t(
+                accountWarningUpgrade
+                  ? "core.header.accountDialog.securityWarningUpgrade"
+                  : accountWarningLegacy
+                  ? "core.header.accountDialog.securityWarningLegacy"
+                  : "core.header.accountDialog.securityWarning",
+              )
             }}</strong>
           </v-alert>
 
@@ -1219,8 +1272,6 @@ onMounted(async () => {
           </div>
         </v-card-text>
 
-        <v-divider></v-divider>
-
         <v-card-actions class="pa-4">
           <v-spacer></v-spacer>
           <v-btn
@@ -1298,6 +1349,20 @@ onMounted(async () => {
   transform: scale(1.05);
 }
 
+.account-dialog-header {
+  .theme-toggle-btn {
+    opacity: 0.85;
+
+    &:hover {
+      opacity: 1;
+    }
+  }
+}
+
+.theme-toggle-btn {
+  margin-left: 0;
+}
+
 /* 响应式布局样式 */
 .logo-container {
   margin-left: 10px;
diff --git a/dashboard/src/router/AuthRoutes.ts b/dashboard/src/router/AuthRoutes.ts
index 89cbc603b..5781646e2 100644
--- a/dashboard/src/router/AuthRoutes.ts
+++ b/dashboard/src/router/AuthRoutes.ts
@@ -9,6 +9,11 @@ const AuthRoutes = {
       name: 'Login',
       path: '/auth/login',
       component: () => import('@/views/authentication/auth/LoginPage.vue')
+    },
+    {
+      name: 'Setup',
+      path: '/auth/setup',
+      component: () => import('@/views/authentication/auth/SetupPage.vue')
     }
   ]
 };
diff --git a/dashboard/src/router/index.ts b/dashboard/src/router/index.ts
index c8537d114..32f138ddb 100644
--- a/dashboard/src/router/index.ts
+++ b/dashboard/src/router/index.ts
@@ -28,7 +28,7 @@ router.beforeEach(async (to, from, next) => {
     loadingStore.start();
   }
 
-  const publicPages = ['/auth/login'];
+  const publicPages = ['/auth/login', '/auth/setup'];
   const authRequired = !publicPages.includes(to.path);
   const auth: AuthStore = useAuthStore();
 
diff --git a/dashboard/src/stores/auth.ts b/dashboard/src/stores/auth.ts
index c04a05b31..bb8b331c1 100644
--- a/dashboard/src/stores/auth.ts
+++ b/dashboard/src/stores/auth.ts
@@ -9,6 +9,43 @@ export const useAuthStore = defineStore("auth", {
     returnUrl: null
   }),
   actions: {
+    async finishAuthenticatedSession(data: any): Promise<void> {
+      this.username = data.username;
+      localStorage.setItem('user', this.username);
+      localStorage.setItem('token', data.token);
+      const passwordUpgradeRequired = !!data?.password_upgrade_required;
+      const passwordWarning =
+        !!data?.change_pwd_hint ||
+        (!!data?.legacy_pwd_hint && !passwordUpgradeRequired);
+      if (passwordWarning) {
+        localStorage.setItem('change_pwd_hint', 'true');
+        if (data?.legacy_pwd_hint && !passwordUpgradeRequired) {
+          localStorage.setItem('legacy_pwd_hint', 'true');
+        } else {
+          localStorage.removeItem('legacy_pwd_hint');
+        }
+      } else {
+        localStorage.removeItem('change_pwd_hint');
+        localStorage.removeItem('legacy_pwd_hint');
+      }
+      if (passwordUpgradeRequired) {
+        localStorage.setItem('password_upgrade_required', 'true');
+      } else {
+        localStorage.removeItem('password_upgrade_required');
+      }
+
+      const onboardingCompleted = await this.checkOnboardingCompleted();
+      this.returnUrl = null;
+      if (passwordWarning) {
+        router.push('/auth/setup');
+        return;
+      }
+      if (onboardingCompleted) {
+        router.push('/dashboard/default');
+      } else {
+        router.push('/welcome');
+      }
+    },
     async login(username: string, password: string): Promise<void> {
       try {
         const res = await axios.post('/api/auth/login', {
@@ -19,19 +56,26 @@ export const useAuthStore = defineStore("auth", {
         if (res.data.status === 'error') {
           return Promise.reject(res.data.message);
         }
-    
-        this.username = res.data.data.username
-        localStorage.setItem('user', this.username);
-        localStorage.setItem('token', res.data.data.token);
-        localStorage.setItem('change_pwd_hint', res.data.data?.change_pwd_hint);
-        
-        const onboardingCompleted = await this.checkOnboardingCompleted();
-        this.returnUrl = null;
-        if (onboardingCompleted) {
-          router.push('/dashboard/default');
-        } else {
-          router.push('/welcome');
+
+        await this.finishAuthenticatedSession(res.data.data);
+      } catch (error) {
+        return Promise.reject(error);
+      }
+    },
+    async setup(username: string, password: string, confirmPassword: string): Promise<void> {
+      try {
+        const setupEndpoint = this.has_token() ? '/api/auth/setup-authenticated' : '/api/auth/setup';
+        const res = await axios.post(setupEndpoint, {
+          username: username,
+          password: password,
+          confirm_password: confirmPassword
+        });
+
+        if (res.data.status === 'error') {
+          return Promise.reject(res.data.message);
         }
+
+        await this.finishAuthenticatedSession(res.data.data);
       } catch (error) {
         return Promise.reject(error);
       }
@@ -69,6 +113,9 @@ export const useAuthStore = defineStore("auth", {
       this.username = '';
       localStorage.removeItem('user');
       localStorage.removeItem('token');
+      localStorage.removeItem('change_pwd_hint');
+      localStorage.removeItem('legacy_pwd_hint');
+      localStorage.removeItem('password_upgrade_required');
       void axios.post('/api/auth/logout').catch(() => undefined);
       router.push('/auth/login');
     },
diff --git a/dashboard/src/views/authentication/auth/LoginPage.vue b/dashboard/src/views/authentication/auth/LoginPage.vue
index acd1e798a..b0c2a857a 100644
--- a/dashboard/src/views/authentication/auth/LoginPage.vue
+++ b/dashboard/src/views/authentication/auth/LoginPage.vue
@@ -7,6 +7,7 @@ import { useRouter } from 'vue-router';
 import { useCustomizerStore } from "@/stores/customizer";
 import { useModuleI18n } from '@/i18n/composables';
 import { useTheme } from 'vuetify';
+import axios from 'axios';
 
 const cardVisible = ref(false);
 const router = useRouter();
@@ -34,6 +35,19 @@ onMounted(async () => {
     return;
   }
 
+  try {
+    const setupStatus = await axios.get('/api/auth/setup-status');
+    if (
+      setupStatus.data?.data?.setup_required &&
+      setupStatus.data?.data?.skip_default_password_auth
+    ) {
+      router.push('/auth/setup');
+      return;
+    }
+  } catch {
+    // Keep the normal login flow if setup status is unavailable.
+  }
+
   // 添加一个小延迟以获得更好的动画效果
   setTimeout(() => {
     cardVisible.value = true;
diff --git a/dashboard/src/views/authentication/auth/SetupPage.vue b/dashboard/src/views/authentication/auth/SetupPage.vue
new file mode 100644
index 000000000..ae8f11d03
--- /dev/null
+++ b/dashboard/src/views/authentication/auth/SetupPage.vue
@@ -0,0 +1,124 @@
+<script setup lang="ts">
+import AuthSetup from '../authForms/AuthSetup.vue';
+import LanguageSwitcher from '@/components/shared/LanguageSwitcher.vue';
+import { onMounted, ref } from 'vue';
+import { useAuthStore } from '@/stores/auth';
+import { useRouter } from 'vue-router';
+import { useCustomizerStore } from '@/stores/customizer';
+import { useModuleI18n } from '@/i18n/composables';
+import { useTheme } from 'vuetify';
+import axios from 'axios';
+
+const router = useRouter();
+const authStore = useAuthStore();
+const customizer = useCustomizerStore();
+const { tm: t } = useModuleI18n('features/auth');
+const theme = useTheme();
+
+function toggleTheme() {
+  const newTheme = customizer.uiTheme === 'PurpleThemeDark' ? 'PurpleTheme' : 'PurpleThemeDark';
+  customizer.SET_UI_THEME(newTheme);
+  theme.global.name.value = newTheme;
+}
+
+onMounted(async () => {
+  const hasToken = authStore.has_token();
+
+  try {
+    const setupStatus = await axios.get('/api/auth/setup-status');
+    const setupRequired = !!setupStatus.data?.data?.setup_required;
+    const canSkipDefaultPassword = !!setupStatus.data?.data?.skip_default_password_auth;
+    if (
+      !setupRequired ||
+      (!hasToken && !canSkipDefaultPassword)
+    ) {
+      router.push('/auth/login');
+    }
+  } catch {
+    router.push('/auth/login');
+  }
+});
+</script>
+
+<template>
+  <div class="setup-page-container">
+    <v-card class="setup-card" elevation="1">
+      <v-card-title>
+        <div class="setup-header">
+          <div class="setup-brand">
+            <img width="80" src="@/assets/images/plugin_icon.png" alt="AstrBot Logo">
+          </div>
+          <div class="d-flex align-center gap-1">
+            <LanguageSwitcher />
+            <v-divider vertical class="mx-1"
+              style="height: 24px !important; opacity: 0.9 !important; align-self: center !important; border-color: rgba(var(--v-theme-primary), 0.45) !important;"></v-divider>
+            <v-btn @click="toggleTheme" class="theme-toggle-btn" icon variant="text" size="small">
+              <v-icon size="18" :color="'rgb(var(--v-theme-primary))'">
+                {{ customizer.uiTheme === 'PurpleThemeDark' ? 'mdi-white-balance-sunny' : 'mdi-weather-night' }}
+              </v-icon>
+              <v-tooltip activator="parent" location="top">
+                {{ customizer.uiTheme === 'PurpleThemeDark' ? t('theme.switchToLight') : t('theme.switchToDark') }}
+              </v-tooltip>
+            </v-btn>
+          </div>
+        </div>
+        <div class="setup-title">{{ t('setup.title') }}</div>
+        <div class="setup-subtitle">{{ t('setup.subtitle') }}</div>
+      </v-card-title>
+      <v-card-text>
+        <AuthSetup />
+      </v-card-text>
+    </v-card>
+  </div>
+</template>
+
+<style lang="scss">
+.setup-page-container {
+  background-color: rgb(var(--v-theme-containerBg));
+  position: relative;
+  width: 100vw;
+  height: 100vh;
+  overflow: hidden;
+  display: flex;
+  justify-content: center;
+  align-items: center;
+}
+
+.setup-card {
+  width: 420px;
+  padding: 8px;
+}
+
+.setup-header {
+  display: flex;
+  align-items: flex-start;
+  justify-content: space-between;
+  gap: 16px;
+  width: 100%;
+}
+
+.setup-brand {
+  display: flex;
+  align-items: center;
+  min-width: 0;
+}
+
+.setup-brand img {
+  flex: 0 0 auto;
+}
+
+.setup-title {
+  margin-top: 8px;
+  color: #000000;
+  font-size: 26px;
+  font-weight: 600;
+  line-height: 1.2;
+}
+
+.setup-subtitle {
+  margin-top: 6px;
+  color: grey;
+  font-size: 14px;
+  line-height: 1.35;
+}
+</style>
diff --git a/dashboard/src/views/authentication/authForms/AuthLogin.vue b/dashboard/src/views/authentication/authForms/AuthLogin.vue
index 0fcfcd26d..a17649ec8 100644
--- a/dashboard/src/views/authentication/authForms/AuthLogin.vue
+++ b/dashboard/src/views/authentication/authForms/AuthLogin.vue
@@ -2,7 +2,6 @@
 import { ref, useCssModule } from 'vue';
 import { useAuthStore } from '@/stores/auth';
 import { Form } from 'vee-validate';
-import md5 from 'js-md5';
 import { useModuleI18n } from '@/i18n/composables';
 
 const { tm: t } = useModuleI18n('features/auth');
@@ -17,17 +16,10 @@ const loading = ref(false);
 async function validate(values: any, { setErrors }: any) {
   loading.value = true;
 
-  // md5加密
-  let password_ = password.value;
-  if (password.value != '') {
-    // @ts-ignore
-    password_ = md5(password.value);
-  }
-
   const authStore = useAuthStore();
   // @ts-ignore
   authStore.returnUrl = new URLSearchParams(window.location.search).get('redirect');
-  return authStore.login(username.value, password_).then((res) => {
+  return authStore.login(username.value, password.value).then((res) => {
     console.log(res);
     loading.value = false;
   }).catch((err) => {
@@ -44,8 +36,8 @@ async function validate(values: any, { setErrors }: any) {
       variant="outlined" prepend-inner-icon="mdi-account" :disabled="loading"></v-text-field>
 
     <v-text-field v-model="password" :label="t('password')" required variant="outlined" hide-details="auto"
-      :append-icon="show1 ? 'mdi-eye' : 'mdi-eye-off'" :type="show1 ? 'text' : 'password'"
-      @click:append="show1 = !show1" class="pwd-input" prepend-inner-icon="mdi-lock" :disabled="loading"></v-text-field>
+      :append-inner-icon="show1 ? 'mdi-eye' : 'mdi-eye-off'" :type="show1 ? 'text' : 'password'"
+      @click:append-inner="show1 = !show1" class="pwd-input" prepend-inner-icon="mdi-lock" :disabled="loading"></v-text-field>
 
     <div class="mt-2">
       <small style="color: grey;">{{ t('defaultHint') }}</small>
diff --git a/dashboard/src/views/authentication/authForms/AuthSetup.vue b/dashboard/src/views/authentication/authForms/AuthSetup.vue
new file mode 100644
index 000000000..1063782e5
--- /dev/null
+++ b/dashboard/src/views/authentication/authForms/AuthSetup.vue
@@ -0,0 +1,130 @@
+<script setup lang="ts">
+import { ref } from 'vue';
+import { Form } from 'vee-validate';
+import { useModuleI18n } from '@/i18n/composables';
+import { useAuthStore } from '@/stores/auth';
+
+const { tm: t } = useModuleI18n('features/auth');
+
+const username = ref('astrbot');
+const password = ref('');
+const confirmPassword = ref('');
+const showPassword = ref(false);
+const showConfirmPassword = ref(false);
+const loading = ref(false);
+
+const usernameRules = [
+  (value: string) => !!value || t('setup.validation.usernameRequired'),
+  (value: string) => (value && value.length >= 3) || t('setup.validation.usernameMinLength'),
+];
+const passwordRules = [
+  (value: string) => !!value || t('setup.validation.passwordRequired'),
+  (value: string) => (value && value.length >= 8) || t('setup.validation.passwordMinLength'),
+  (value: string) => /[A-Z]/.test(value) || t('setup.validation.passwordUppercase'),
+  (value: string) => /[a-z]/.test(value) || t('setup.validation.passwordLowercase'),
+  (value: string) => /\d/.test(value) || t('setup.validation.passwordDigit'),
+];
+const confirmPasswordRules = [
+  (value: string) => !!value || t('setup.validation.confirmPasswordRequired'),
+  (value: string) => value === password.value || t('setup.validation.passwordMatch'),
+];
+
+/* eslint-disable @typescript-eslint/no-explicit-any */
+async function validate(values: any, { setErrors }: any) {
+  loading.value = true;
+  const authStore = useAuthStore();
+  return authStore.setup(username.value, password.value, confirmPassword.value).catch((err) => {
+    setErrors({ apiError: err });
+  }).finally(() => {
+    loading.value = false;
+  });
+}
+</script>
+
+<template>
+  <Form @submit="validate" class="mt-4 setup-form" v-slot="{ errors, isSubmitting }">
+    <v-text-field v-model="username" :label="t('setup.username')" class="mb-5 input-field" required hide-details="auto"
+      variant="outlined" prepend-inner-icon="mdi-account-edit" :disabled="loading" :rules="usernameRules"></v-text-field>
+
+    <v-text-field v-model="password" :label="t('setup.password')" required variant="outlined" hide-details="auto"
+      :append-inner-icon="showPassword ? 'mdi-eye' : 'mdi-eye-off'" :type="showPassword ? 'text' : 'password'"
+      @click:append-inner="showPassword = !showPassword" class="pwd-input mb-5" prepend-inner-icon="mdi-lock-plus"
+      :disabled="loading" :rules="passwordRules"></v-text-field>
+
+    <v-text-field v-model="confirmPassword" :label="t('setup.confirmPassword')" required variant="outlined"
+      hide-details="auto" :append-inner-icon="showConfirmPassword ? 'mdi-eye' : 'mdi-eye-off'"
+      :type="showConfirmPassword ? 'text' : 'password'" @click:append-inner="showConfirmPassword = !showConfirmPassword"
+      class="pwd-input" prepend-inner-icon="mdi-lock-check" :disabled="loading" :rules="confirmPasswordRules"></v-text-field>
+
+    <small class="setup-hint">{{ t('setup.passwordHint') }}</small>
+
+    <v-btn color="secondary" :loading="isSubmitting || loading" block class="setup-btn mt-8" variant="flat" size="large"
+      type="submit">
+      <span class="setup-btn-text">{{ t('setup.submit') }}</span>
+    </v-btn>
+
+    <div v-if="errors.apiError" class="mt-4 error-container">
+      <v-alert color="error" variant="tonal" icon="mdi-alert-circle" border="start">
+        {{ errors.apiError }}
+      </v-alert>
+    </div>
+  </Form>
+</template>
+
+<style lang="scss">
+.setup-form {
+  .input-field,
+  .pwd-input {
+    .v-field__field {
+      padding-top: 5px;
+      padding-bottom: 5px;
+    }
+
+    .v-field__outline {
+      opacity: 0.7;
+    }
+
+    &:hover .v-field__outline {
+      opacity: 0.9;
+    }
+
+    .v-field--focused .v-field__outline {
+      opacity: 1;
+    }
+
+    .v-field__prepend-inner {
+      padding-right: 8px;
+      opacity: 0.7;
+    }
+  }
+
+  .setup-hint {
+    display: block;
+    margin-top: 8px;
+    color: grey;
+  }
+
+  .setup-btn {
+    height: 48px;
+    transition: all 0.3s ease;
+    letter-spacing: 0.5px;
+    border-radius: 8px !important;
+
+    &:hover {
+      transform: translateY(-2px);
+      box-shadow: 0 5px 15px rgba(94, 53, 177, 0.2) !important;
+    }
+
+    .setup-btn-text {
+      font-size: 1.05rem;
+      font-weight: 500;
+    }
+  }
+
+  .error-container {
+    .v-alert {
+      border-left-width: 4px !important;
+    }
+  }
+}
+</style>
diff --git a/tests/test_api_key_open_api.py b/tests/test_api_key_open_api.py
index a6d594c4f..8b90e2ff4 100644
--- a/tests/test_api_key_open_api.py
+++ b/tests/test_api_key_open_api.py
@@ -11,9 +11,15 @@ from werkzeug.datastructures import FileStorage
 from astrbot.core import LogBroker
 from astrbot.core.core_lifecycle import AstrBotCoreLifecycle
 from astrbot.core.db.sqlite import SQLiteDatabase
+from astrbot.core.utils.auth_password import (
+    hash_dashboard_password,
+    hash_legacy_dashboard_password,
+)
 from astrbot.dashboard.routes.route import Response
 from astrbot.dashboard.server import AstrBotDashboard
 
+_TEST_DASHBOARD_PASSWORD = "AstrbotTest123"
+
 
 def _get_open_api_route(app: Quart):
     rule = next(
@@ -54,6 +60,24 @@ async def core_lifecycle_td(tmp_path_factory):
     log_broker = LogBroker()
     core_lifecycle = AstrBotCoreLifecycle(log_broker, db)
     await core_lifecycle.initialize()
+    generated_password = getattr(
+        core_lifecycle.astrbot_config,
+        "_generated_dashboard_password",
+        None,
+    )
+    dashboard_password = generated_password or _TEST_DASHBOARD_PASSWORD
+    if not generated_password:
+        core_lifecycle.astrbot_config["dashboard"]["pbkdf2_password"] = (
+            hash_dashboard_password(dashboard_password)
+        )
+        core_lifecycle.astrbot_config["dashboard"]["password"] = (
+            hash_legacy_dashboard_password(dashboard_password)
+        )
+    object.__setattr__(
+        core_lifecycle,
+        "_dashboard_plain_password",
+        dashboard_password,
+    )
     try:
         yield core_lifecycle
     finally:
@@ -72,6 +96,16 @@ def app(core_lifecycle_td: AstrBotCoreLifecycle):
     return server.app
 
 
+def _resolve_dashboard_password(core_lifecycle_td: AstrBotCoreLifecycle) -> str:
+    generated_password = getattr(core_lifecycle_td, "_dashboard_plain_password", None)
+    if generated_password:
+        return generated_password
+    password = core_lifecycle_td.astrbot_config["dashboard"]["pbkdf2_password"]
+    if isinstance(password, str) and password.startswith("pbkdf2_sha256$"):
+        return "astrbot"
+    return password
+
+
 @pytest_asyncio.fixture(scope="module")
 async def authenticated_header(app: Quart, core_lifecycle_td: AstrBotCoreLifecycle):
     test_client = app.test_client()
@@ -79,7 +113,7 @@ async def authenticated_header(app: Quart, core_lifecycle_td: AstrBotCoreLifecyc
         "/api/auth/login",
         json={
             "username": core_lifecycle_td.astrbot_config["dashboard"]["username"],
-            "password": core_lifecycle_td.astrbot_config["dashboard"]["password"],
+            "password": _resolve_dashboard_password(core_lifecycle_td),
         },
     )
     data = await response.get_json()
diff --git a/tests/test_dashboard.py b/tests/test_dashboard.py
index 13d5ac0fc..93aff4fd5 100644
--- a/tests/test_dashboard.py
+++ b/tests/test_dashboard.py
@@ -22,7 +22,19 @@ from astrbot.core.core_lifecycle import AstrBotCoreLifecycle
 from astrbot.core.db.sqlite import SQLiteDatabase
 from astrbot.core.star.star import StarMetadata, star_registry
 from astrbot.core.star.star_handler import star_handlers_registry
+from astrbot.core.utils.auth_password import (
+    hash_dashboard_password,
+    hash_legacy_dashboard_password,
+    verify_dashboard_password,
+)
 from astrbot.core.utils.pip_installer import PipInstallError
+from astrbot.dashboard.password_state import (
+    get_dashboard_password_hash,
+    is_password_change_required,
+    is_password_storage_upgraded,
+    set_password_change_required,
+    set_password_storage_upgraded,
+)
 from astrbot.dashboard.routes.auth import DASHBOARD_JWT_COOKIE_NAME
 from astrbot.dashboard.routes.plugin import PluginRoute
 from astrbot.dashboard.server import AstrBotDashboard
@@ -32,6 +44,7 @@ from tests.fixtures.helpers import (
     create_mock_updater_update,
 )
 
+_TEST_DASHBOARD_PASSWORD = "AstrbotTest123"
 PLUGIN_PAGE_DEMO_NAME = "astrbot_plugin_page_demo"
 PLUGIN_PAGE_DEMO_PAGE_NAME = "bridge-demo"
 
@@ -142,6 +155,34 @@ async def core_lifecycle_td(tmp_path_factory):
     log_broker = LogBroker()
     core_lifecycle = AstrBotCoreLifecycle(log_broker, db)
     await core_lifecycle.initialize()
+    generated_password = getattr(
+        core_lifecycle.astrbot_config,
+        "_generated_dashboard_password",
+        None,
+    )
+    dashboard_password = generated_password or _TEST_DASHBOARD_PASSWORD
+    if not generated_password:
+        core_lifecycle.astrbot_config["dashboard"]["pbkdf2_password"] = (
+            hash_dashboard_password(dashboard_password)
+        )
+        core_lifecycle.astrbot_config["dashboard"]["password"] = (
+            hash_legacy_dashboard_password(dashboard_password)
+        )
+        await set_password_storage_upgraded(
+            core_lifecycle.db,
+            core_lifecycle.astrbot_config,
+            True,
+        )
+        await set_password_change_required(
+            core_lifecycle.db,
+            core_lifecycle.astrbot_config,
+            False,
+        )
+    object.__setattr__(
+        core_lifecycle,
+        "_dashboard_plain_password",
+        dashboard_password,
+    )
     try:
         yield core_lifecycle
     finally:
@@ -164,6 +205,45 @@ def app(core_lifecycle_td: AstrBotCoreLifecycle):
     return server.app
 
 
+def _resolve_dashboard_password(core_lifecycle_td: AstrBotCoreLifecycle) -> str:
+    """Return a login password compatible with both hashed and plain defaults."""
+    generated_password = getattr(core_lifecycle_td, "_dashboard_plain_password", None)
+    if generated_password:
+        return generated_password
+    password = core_lifecycle_td.astrbot_config["dashboard"]["pbkdf2_password"]
+    if isinstance(password, str) and password.startswith("pbkdf2_sha256$"):
+        return "astrbot"
+    return password
+
+
+async def _set_dashboard_password_change_required(
+    core_lifecycle_td: AstrBotCoreLifecycle,
+    required: bool,
+) -> None:
+    await set_password_change_required(
+        core_lifecycle_td.db,
+        core_lifecycle_td.astrbot_config,
+        required,
+    )
+
+
+async def _restore_dashboard_password_state(
+    core_lifecycle_td: AstrBotCoreLifecycle,
+    dashboard_config: dict,
+) -> None:
+    core_lifecycle_td.astrbot_config["dashboard"] = dashboard_config
+    await set_password_change_required(
+        core_lifecycle_td.db,
+        core_lifecycle_td.astrbot_config,
+        False,
+    )
+    await set_password_storage_upgraded(
+        core_lifecycle_td.db,
+        core_lifecycle_td.astrbot_config,
+        bool(dashboard_config.get("pbkdf2_password")),
+    )
+
+
 @pytest_asyncio.fixture(scope="module")
 async def authenticated_header(app: Quart, core_lifecycle_td: AstrBotCoreLifecycle):
     """Handles login and returns an authenticated header."""
@@ -172,7 +252,7 @@ async def authenticated_header(app: Quart, core_lifecycle_td: AstrBotCoreLifecyc
         "/api/auth/login",
         json={
             "username": core_lifecycle_td.astrbot_config["dashboard"]["username"],
-            "password": core_lifecycle_td.astrbot_config["dashboard"]["password"],
+            "password": _resolve_dashboard_password(core_lifecycle_td),
         },
     )
     data = await response.get_json()
@@ -202,7 +282,7 @@ async def test_auth_login(
         "/api/auth/login",
         json={
             "username": core_lifecycle_td.astrbot_config["dashboard"]["username"],
-            "password": core_lifecycle_td.astrbot_config["dashboard"]["password"],
+            "password": _resolve_dashboard_password(core_lifecycle_td),
         },
     )
     data = await response.get_json()
@@ -231,7 +311,7 @@ async def test_auth_login_secure_cookie_override(
         "/api/auth/login",
         json={
             "username": core_lifecycle_td.astrbot_config["dashboard"]["username"],
-            "password": core_lifecycle_td.astrbot_config["dashboard"]["password"],
+            "password": _resolve_dashboard_password(core_lifecycle_td),
         },
     )
     assert response.status_code == 200
@@ -246,6 +326,395 @@ async def test_auth_login_secure_cookie_override(
     assert "SameSite=Strict" in jwt_cookie_header
 
 
+@pytest.mark.asyncio
+async def test_legacy_md5_dashboard_password_keeps_legacy_auth_until_edit(
+    app: Quart,
+    core_lifecycle_td: AstrBotCoreLifecycle,
+):
+    original_dashboard_config = copy.deepcopy(
+        core_lifecycle_td.astrbot_config["dashboard"]
+    )
+    test_client = app.test_client()
+    legacy_password = "AstrbotLegacy123"
+    changed_password = "AstrbotChanged123"
+
+    try:
+        core_lifecycle_td.astrbot_config["dashboard"]["username"] = "astrbot"
+        core_lifecycle_td.astrbot_config["dashboard"]["password"] = (
+            hash_legacy_dashboard_password(legacy_password)
+        )
+        core_lifecycle_td.astrbot_config["dashboard"]["pbkdf2_password"] = ""
+        await _set_dashboard_password_change_required(core_lifecycle_td, False)
+        await set_password_storage_upgraded(
+            core_lifecycle_td.db,
+            core_lifecycle_td.astrbot_config,
+            False,
+        )
+
+        response = await test_client.post(
+            "/api/auth/login",
+            json={"username": "astrbot", "password": legacy_password},
+        )
+        data = await response.get_json()
+        assert data["status"] == "ok"
+        assert data["data"]["change_pwd_hint"] is False
+        assert data["data"]["legacy_pwd_hint"] is True
+        assert data["data"]["password_upgrade_required"] is True
+
+        response = await test_client.post(
+            "/api/auth/account/edit",
+            json={
+                "password": legacy_password,
+                "new_password": "",
+                "confirm_password": "",
+                "new_username": "astrbot-admin",
+            },
+        )
+        data = await response.get_json()
+        assert data["status"] == "error"
+        assert (
+            await is_password_storage_upgraded(
+                core_lifecycle_td.db,
+                core_lifecycle_td.astrbot_config,
+            )
+            is False
+        )
+
+        response = await test_client.post(
+            "/api/auth/account/edit",
+            json={
+                "password": legacy_password,
+                "new_password": changed_password,
+                "confirm_password": changed_password,
+                "new_username": "astrbot",
+            },
+        )
+        data = await response.get_json()
+        assert data["status"] == "ok"
+        assert (
+            await is_password_storage_upgraded(
+                core_lifecycle_td.db,
+                core_lifecycle_td.astrbot_config,
+            )
+            is True
+        )
+        assert verify_dashboard_password(
+            core_lifecycle_td.astrbot_config["dashboard"]["pbkdf2_password"],
+            changed_password,
+        )
+        assert verify_dashboard_password(
+            core_lifecycle_td.astrbot_config["dashboard"]["password"],
+            changed_password,
+        )
+    finally:
+        await _restore_dashboard_password_state(
+            core_lifecycle_td,
+            original_dashboard_config,
+        )
+
+
+@pytest.mark.asyncio
+async def test_password_storage_flag_repairs_after_rollback_clears_pbkdf2(
+    app: Quart,
+    core_lifecycle_td: AstrBotCoreLifecycle,
+):
+    original_dashboard_config = copy.deepcopy(
+        core_lifecycle_td.astrbot_config["dashboard"]
+    )
+    test_client = app.test_client()
+    legacy_password = "AstrbotRollback123"
+
+    try:
+        core_lifecycle_td.astrbot_config["dashboard"]["username"] = "astrbot"
+        core_lifecycle_td.astrbot_config["dashboard"]["password"] = (
+            hash_legacy_dashboard_password(legacy_password)
+        )
+        core_lifecycle_td.astrbot_config["dashboard"]["pbkdf2_password"] = ""
+        await _set_dashboard_password_change_required(core_lifecycle_td, False)
+        await set_password_storage_upgraded(
+            core_lifecycle_td.db,
+            core_lifecycle_td.astrbot_config,
+            True,
+        )
+
+        response = await test_client.post(
+            "/api/auth/login",
+            json={"username": "astrbot", "password": legacy_password},
+        )
+        data = await response.get_json()
+
+        assert data["status"] == "ok"
+        assert data["data"]["legacy_pwd_hint"] is True
+        assert data["data"]["password_upgrade_required"] is True
+        assert (
+            await is_password_storage_upgraded(
+                core_lifecycle_td.db,
+                core_lifecycle_td.astrbot_config,
+            )
+            is False
+        )
+    finally:
+        await _restore_dashboard_password_state(
+            core_lifecycle_td,
+            original_dashboard_config,
+        )
+
+
+def test_password_hash_lookup_falls_back_to_legacy_when_pbkdf2_missing(
+    core_lifecycle_td: AstrBotCoreLifecycle,
+):
+    dashboard_config = copy.deepcopy(core_lifecycle_td.astrbot_config["dashboard"])
+    legacy_hash = hash_legacy_dashboard_password("AstrbotRollback123")
+
+    try:
+        core_lifecycle_td.astrbot_config["dashboard"]["password"] = legacy_hash
+        core_lifecycle_td.astrbot_config["dashboard"]["pbkdf2_password"] = ""
+
+        assert (
+            get_dashboard_password_hash(
+                core_lifecycle_td.astrbot_config,
+                upgraded=True,
+            )
+            == legacy_hash
+        )
+    finally:
+        core_lifecycle_td.astrbot_config["dashboard"] = dashboard_config
+
+
+@pytest.mark.asyncio
+async def test_generated_password_requires_password_change_until_changed(
+    app: Quart,
+    core_lifecycle_td: AstrBotCoreLifecycle,
+):
+    original_dashboard_config = copy.deepcopy(
+        core_lifecycle_td.astrbot_config["dashboard"]
+    )
+    test_client = app.test_client()
+    changed_password = "AstrbotChanged123"
+
+    try:
+        await _set_dashboard_password_change_required(core_lifecycle_td, True)
+
+        response = await test_client.post(
+            "/api/auth/login",
+            json={
+                "username": core_lifecycle_td.astrbot_config["dashboard"]["username"],
+                "password": _resolve_dashboard_password(core_lifecycle_td),
+            },
+        )
+        data = await response.get_json()
+        assert data["status"] == "ok"
+        assert data["data"]["change_pwd_hint"] is True
+
+        response = await test_client.post(
+            "/api/auth/account/edit",
+            json={
+                "password": _resolve_dashboard_password(core_lifecycle_td),
+                "new_password": "",
+                "confirm_password": "",
+                "new_username": core_lifecycle_td.astrbot_config["dashboard"][
+                    "username"
+                ],
+            },
+        )
+        data = await response.get_json()
+        assert data["status"] == "error"
+        assert (
+            await is_password_change_required(
+                core_lifecycle_td.db,
+                core_lifecycle_td.astrbot_config,
+            )
+            is True
+        )
+
+        response = await test_client.post(
+            "/api/auth/account/edit",
+            json={
+                "password": _resolve_dashboard_password(core_lifecycle_td),
+                "new_password": changed_password,
+                "confirm_password": changed_password,
+                "new_username": core_lifecycle_td.astrbot_config["dashboard"][
+                    "username"
+                ],
+            },
+        )
+        data = await response.get_json()
+        assert data["status"] == "ok"
+        assert (
+            await is_password_change_required(
+                core_lifecycle_td.db,
+                core_lifecycle_td.astrbot_config,
+            )
+            is False
+        )
+    finally:
+        await _restore_dashboard_password_state(
+            core_lifecycle_td,
+            original_dashboard_config,
+        )
+
+
+@pytest.mark.asyncio
+async def test_local_setup_can_skip_default_password_auth(
+    app: Quart,
+    core_lifecycle_td: AstrBotCoreLifecycle,
+    monkeypatch: pytest.MonkeyPatch,
+):
+    original_dashboard_config = copy.deepcopy(
+        core_lifecycle_td.astrbot_config["dashboard"]
+    )
+    test_client = app.test_client()
+    setup_password = "AstrbotSetup123"
+    setup_username = "astrbot-admin"
+
+    try:
+        monkeypatch.setenv("ASTRBOT_DASHBOARD_SKIP_DEFAULT_PASSWORD_AUTH", "true")
+        core_lifecycle_td.astrbot_config["dashboard"]["host"] = "127.0.0.1"
+        await _set_dashboard_password_change_required(core_lifecycle_td, True)
+
+        response = await test_client.get("/api/auth/setup-status")
+        data = await response.get_json()
+        assert data["status"] == "ok"
+        assert data["data"]["setup_required"] is True
+        assert data["data"]["skip_default_password_auth"] is True
+
+        response = await test_client.post(
+            "/api/auth/setup",
+            json={
+                "username": setup_username,
+                "password": setup_password,
+                "confirm_password": setup_password,
+            },
+        )
+        data = await response.get_json()
+        assert data["status"] == "ok"
+        assert data["data"]["username"] == setup_username
+        assert data["data"]["token"]
+        assert (
+            await is_password_change_required(
+                core_lifecycle_td.db,
+                core_lifecycle_td.astrbot_config,
+            )
+            is False
+        )
+        assert (
+            core_lifecycle_td.astrbot_config["dashboard"]["username"] == setup_username
+        )
+        assert verify_dashboard_password(
+            core_lifecycle_td.astrbot_config["dashboard"]["pbkdf2_password"],
+            setup_password,
+        )
+        assert verify_dashboard_password(
+            core_lifecycle_td.astrbot_config["dashboard"]["password"],
+            setup_password,
+        )
+    finally:
+        await _restore_dashboard_password_state(
+            core_lifecycle_td,
+            original_dashboard_config,
+        )
+
+
+@pytest.mark.asyncio
+async def test_authenticated_default_password_login_can_complete_setup(
+    app: Quart,
+    core_lifecycle_td: AstrBotCoreLifecycle,
+):
+    original_dashboard_config = copy.deepcopy(
+        core_lifecycle_td.astrbot_config["dashboard"]
+    )
+    test_client = app.test_client()
+    setup_password = "AstrbotSetup123"
+    setup_username = "astrbot-admin"
+
+    try:
+        await _set_dashboard_password_change_required(core_lifecycle_td, True)
+
+        login_response = await test_client.post(
+            "/api/auth/login",
+            json={
+                "username": core_lifecycle_td.astrbot_config["dashboard"]["username"],
+                "password": _resolve_dashboard_password(core_lifecycle_td),
+            },
+        )
+        login_data = await login_response.get_json()
+        assert login_data["status"] == "ok"
+        assert login_data["data"]["change_pwd_hint"] is True
+        token = login_data["data"]["token"]
+
+        response = await test_client.post(
+            "/api/auth/setup-authenticated",
+            headers={"Authorization": f"Bearer {token}"},
+            json={
+                "username": setup_username,
+                "password": setup_password,
+                "confirm_password": setup_password,
+            },
+        )
+        data = await response.get_json()
+        assert data["status"] == "ok"
+        assert data["data"]["username"] == setup_username
+        assert (
+            await is_password_change_required(
+                core_lifecycle_td.db,
+                core_lifecycle_td.astrbot_config,
+            )
+            is False
+        )
+        assert verify_dashboard_password(
+            core_lifecycle_td.astrbot_config["dashboard"]["pbkdf2_password"],
+            setup_password,
+        )
+        assert verify_dashboard_password(
+            core_lifecycle_td.astrbot_config["dashboard"]["password"],
+            setup_password,
+        )
+    finally:
+        await _restore_dashboard_password_state(
+            core_lifecycle_td,
+            original_dashboard_config,
+        )
+
+
+@pytest.mark.asyncio
+async def test_setup_skip_requires_local_host(
+    app: Quart,
+    core_lifecycle_td: AstrBotCoreLifecycle,
+    monkeypatch: pytest.MonkeyPatch,
+):
+    original_dashboard_config = copy.deepcopy(
+        core_lifecycle_td.astrbot_config["dashboard"]
+    )
+    test_client = app.test_client()
+
+    try:
+        monkeypatch.setenv("ASTRBOT_DASHBOARD_SKIP_DEFAULT_PASSWORD_AUTH", "true")
+        core_lifecycle_td.astrbot_config["dashboard"]["host"] = "0.0.0.0"
+        await _set_dashboard_password_change_required(core_lifecycle_td, True)
+
+        response = await test_client.get("/api/auth/setup-status")
+        data = await response.get_json()
+        assert data["status"] == "ok"
+        assert data["data"]["setup_required"] is True
+        assert data["data"]["skip_default_password_auth"] is False
+
+        response = await test_client.post(
+            "/api/auth/setup",
+            json={
+                "username": "astrbot-admin",
+                "password": "AstrbotSetup123",
+                "confirm_password": "AstrbotSetup123",
+            },
+        )
+        data = await response.get_json()
+        assert data["status"] == "error"
+    finally:
+        await _restore_dashboard_password_state(
+            core_lifecycle_td,
+            original_dashboard_config,
+        )
+
+
 @pytest.mark.asyncio
 async def test_plugin_web_api_supports_dynamic_route(
     app: Quart,
@@ -401,7 +870,7 @@ async def test_plugin_page_content_supports_cookie_auth(
         "/api/auth/login",
         json={
             "username": core_lifecycle_td.astrbot_config["dashboard"]["username"],
-            "password": core_lifecycle_td.astrbot_config["dashboard"]["password"],
+            "password": _resolve_dashboard_password(core_lifecycle_td),
         },
     )
     assert login_response.status_code == 200
@@ -567,7 +1036,7 @@ async def test_logout_clears_cookie_for_plugin_page(
         "/api/auth/login",
         json={
             "username": core_lifecycle_td.astrbot_config["dashboard"]["username"],
-            "password": core_lifecycle_td.astrbot_config["dashboard"]["password"],
+            "password": _resolve_dashboard_password(core_lifecycle_td),
         },
     )
     assert response.status_code == 200
diff --git a/tests/test_kb_import.py b/tests/test_kb_import.py
index 36a8b4764..8795b06da 100644
--- a/tests/test_kb_import.py
+++ b/tests/test_kb_import.py
@@ -11,9 +11,15 @@ from astrbot.core.db.sqlite import SQLiteDatabase
 from astrbot.core.exceptions import KnowledgeBaseUploadError
 from astrbot.core.knowledge_base.kb_helper import KBHelper
 from astrbot.core.knowledge_base.models import KBDocument
+from astrbot.core.utils.auth_password import (
+    hash_dashboard_password,
+    hash_legacy_dashboard_password,
+)
 from astrbot.dashboard.routes.knowledge_base import KnowledgeBaseRoute
 from astrbot.dashboard.server import AstrBotDashboard
 
+_TEST_DASHBOARD_PASSWORD = "AstrbotTest123"
+
 
 @pytest_asyncio.fixture(scope="module")
 async def core_lifecycle_td(tmp_path_factory):
@@ -46,6 +52,24 @@ async def core_lifecycle_td(tmp_path_factory):
 
     # kb_manager.get_kb.return_value = kb_helper # Removed this line as it's handled above
     core_lifecycle.kb_manager = kb_manager
+    generated_password = getattr(
+        core_lifecycle.astrbot_config,
+        "_generated_dashboard_password",
+        None,
+    )
+    dashboard_password = generated_password or _TEST_DASHBOARD_PASSWORD
+    if not generated_password:
+        core_lifecycle.astrbot_config["dashboard"]["pbkdf2_password"] = (
+            hash_dashboard_password(dashboard_password)
+        )
+        core_lifecycle.astrbot_config["dashboard"]["password"] = (
+            hash_legacy_dashboard_password(dashboard_password)
+        )
+    object.__setattr__(
+        core_lifecycle,
+        "_dashboard_plain_password",
+        dashboard_password,
+    )
 
     try:
         yield core_lifecycle
@@ -66,6 +90,16 @@ def app(core_lifecycle_td: AstrBotCoreLifecycle):
     return server.app
 
 
+def _resolve_dashboard_password(core_lifecycle_td: AstrBotCoreLifecycle) -> str:
+    generated_password = getattr(core_lifecycle_td, "_dashboard_plain_password", None)
+    if generated_password:
+        return generated_password
+    password = core_lifecycle_td.astrbot_config["dashboard"]["pbkdf2_password"]
+    if isinstance(password, str) and password.startswith("pbkdf2_sha256$"):
+        return "astrbot"
+    return password
+
+
 @pytest_asyncio.fixture(scope="module")
 async def authenticated_header(app: Quart, core_lifecycle_td: AstrBotCoreLifecycle):
     """Handles login and returns an authenticated header."""
@@ -74,7 +108,7 @@ async def authenticated_header(app: Quart, core_lifecycle_td: AstrBotCoreLifecyc
         "/api/auth/login",
         json={
             "username": core_lifecycle_td.astrbot_config["dashboard"]["username"],
-            "password": core_lifecycle_td.astrbot_config["dashboard"]["password"],
+            "password": _resolve_dashboard_password(core_lifecycle_td),
         },
     )
     data = await response.get_json()
diff --git a/tests/unit/test_config.py b/tests/unit/test_config.py
index c8f383a29..c9c7e59b4 100644
--- a/tests/unit/test_config.py
+++ b/tests/unit/test_config.py
@@ -8,6 +8,11 @@ import pytest
 from astrbot.core.config.astrbot_config import AstrBotConfig, RateLimitStrategy
 from astrbot.core.config.default import DEFAULT_VALUE_MAP
 from astrbot.core.config.i18n_utils import ConfigMetadataI18n
+from astrbot.core.utils.auth_password import (
+    DEFAULT_DASHBOARD_PASSWORD,
+    validate_dashboard_password,
+    verify_dashboard_password,
+)
 
 
 @pytest.fixture
@@ -185,6 +190,130 @@ class TestAstrBotConfigLoad:
         assert config2.check_exist() is True
         assert os.path.exists(non_existent_path)
 
+    def test_empty_dashboard_password_generates_random_password(self, temp_config_path):
+        """Test that an empty dashboard password is replaced with a random password."""
+        default_config = {
+            "dashboard": {
+                "username": "astrbot",
+                "password": "",
+            },
+        }
+
+        config = AstrBotConfig(
+            config_path=temp_config_path,
+            default_config=default_config,
+        )
+
+        generated_password = getattr(config, "_generated_dashboard_password", None)
+        assert isinstance(generated_password, str)
+        validate_dashboard_password(generated_password)
+        assert verify_dashboard_password(
+            config["dashboard"]["pbkdf2_password"],
+            generated_password,
+        )
+        assert config["dashboard"]["pbkdf2_password"].startswith(
+            "pbkdf2_sha256$600000$"
+        )
+        assert config["dashboard"]["password_change_required"] is True
+        assert config["dashboard"]["password_storage_upgraded"] is True
+        assert (
+            getattr(config, "_generated_dashboard_password_change_required", False)
+            is True
+        )
+        assert not verify_dashboard_password(
+            config["dashboard"]["pbkdf2_password"],
+            DEFAULT_DASHBOARD_PASSWORD,
+        )
+        assert verify_dashboard_password(
+            config["dashboard"]["password"],
+            generated_password,
+        )
+
+    def test_legacy_password_change_required_rotates_and_keeps_config_flag(
+        self, temp_config_path
+    ):
+        """Test that the setup flag stays in dashboard config."""
+        default_config = {
+            "dashboard": {
+                "username": "astrbot",
+                "password": "",
+                "pbkdf2_password": "",
+            },
+        }
+        with open(temp_config_path, "w", encoding="utf-8") as f:
+            json.dump(
+                {
+                    "dashboard": {
+                        "username": "astrbot",
+                        "password": "",
+                        "pbkdf2_password": "pbkdf2_sha256$600000$00$00",
+                        "password_change_required": True,
+                    }
+                },
+                f,
+            )
+
+        config = AstrBotConfig(
+            config_path=temp_config_path,
+            default_config=default_config,
+        )
+        generated_password = getattr(config, "_generated_dashboard_password", None)
+
+        assert isinstance(generated_password, str)
+        assert config["dashboard"]["password_change_required"] is True
+        assert config["dashboard"]["password_storage_upgraded"] is True
+        assert (
+            getattr(config, "_dashboard_password_change_required_from_config", False)
+            is True
+        )
+        assert verify_dashboard_password(
+            config["dashboard"]["pbkdf2_password"], generated_password
+        )
+        assert verify_dashboard_password(
+            config["dashboard"]["password"], generated_password
+        )
+
+    def test_legacy_astrbot_user_without_change_flag_keeps_legacy_password(
+        self, temp_config_path
+    ):
+        """Test old MD5 configs keep legacy auth until the manual upgrade."""
+        default_config = {
+            "dashboard": {
+                "username": "astrbot",
+                "password": "",
+                "pbkdf2_password": "",
+            },
+        }
+        with open(temp_config_path, "w", encoding="utf-8") as f:
+            json.dump(
+                {
+                    "dashboard": {
+                        "username": "astrbot",
+                        "password": "77b90590a8945a7d36c963981a307dc9",
+                    }
+                },
+                f,
+            )
+
+        config = AstrBotConfig(
+            config_path=temp_config_path,
+            default_config=default_config,
+        )
+        generated_password = getattr(config, "_generated_dashboard_password", None)
+
+        assert generated_password is None
+        assert config["dashboard"]["pbkdf2_password"] == ""
+        assert verify_dashboard_password(
+            config["dashboard"]["password"], DEFAULT_DASHBOARD_PASSWORD
+        )
+
+    def test_legacy_md5_password_requires_plain_password(self):
+        """Test that a leaked legacy MD5 hash cannot be used as the login password."""
+        legacy_hash = "77b90590a8945a7d36c963981a307dc9"
+
+        assert verify_dashboard_password(legacy_hash, DEFAULT_DASHBOARD_PASSWORD)
+        assert not verify_dashboard_password(legacy_hash, legacy_hash)
+
 
 class TestConfigValidation:
     """Tests for config validation and integrity checking."""

From 48e111e47eee73bd3f145fb9dbe49513fd4b9858 Mon Sep 17 00:00:00 2001
From: Soulter <905617992@qq.com>
Date: Tue, 12 May 2026 23:57:16 +0800
Subject: [PATCH 17/51] chore: remove test

---
 tests/test_discord_command_sync.py | 14 --------------
 1 file changed, 14 deletions(-)

diff --git a/tests/test_discord_command_sync.py b/tests/test_discord_command_sync.py
index dee2db89d..2dee1cadb 100644
--- a/tests/test_discord_command_sync.py
+++ b/tests/test_discord_command_sync.py
@@ -55,17 +55,3 @@ async def test_discord_command_sync_ignores_daily_quota(monkeypatch):
     adapter.client.sync_commands.assert_awaited_once()
     warning.assert_called_once()
     assert "30034" in warning.call_args.args[0]
-
-
-@pytest.mark.asyncio
-async def test_discord_command_sync_keeps_other_errors_fatal(monkeypatch):
-    adapter = _build_adapter(monkeypatch)
-    adapter.client.sync_commands.side_effect = DiscordSyncError(
-        "Missing Access",
-        code=50001,
-    )
-
-    with pytest.raises(DiscordSyncError):
-        await adapter._collect_and_register_commands()
-
-    adapter.client.sync_commands.assert_awaited_once()

From cb90de752d281a81a606a710fa751548d8be476b Mon Sep 17 00:00:00 2001
From: lingyun14 <wedoyou@qq.com>
Date: Wed, 13 May 2026 00:04:12 +0800
Subject: [PATCH 18/51] fix(docs): fix multiple errors in plugin development
 guides (#8166)

* Update listen-message-event.md

* Update listen-message-event.md

* Update ai.md

* Update plugin-new.md

* Update plugin-new.md

* Update simple.md

* Update star_handler.py

* Update listen-message-event.md

* Update listen-message-event.md
---
 astrbot/core/star/register/star_handler.py      |  6 +++---
 docs/en/dev/star/guides/listen-message-event.md | 14 +++++++-------
 docs/en/dev/star/plugin-new.md                  |  5 +++++
 docs/zh/dev/star/guides/ai.md                   |  3 +--
 docs/zh/dev/star/guides/listen-message-event.md | 16 ++++++++--------
 docs/zh/dev/star/guides/simple.md               |  2 +-
 docs/zh/dev/star/plugin-new.md                  |  5 +++++
 7 files changed, 30 insertions(+), 21 deletions(-)

diff --git a/astrbot/core/star/register/star_handler.py b/astrbot/core/star/register/star_handler.py
index 49a65d891..4693a4e75 100644
--- a/astrbot/core/star/register/star_handler.py
+++ b/astrbot/core/star/register/star_handler.py
@@ -422,11 +422,11 @@ def register_on_llm_request(**kwargs):
     from astrbot.api.provider import ProviderRequest
 
     @on_llm_request()
-    async def test(self, event: AstrMessageEvent, request: ProviderRequest) -> None:
-        request.system_prompt += "你是一个猫娘..."
+    async def test(self, event: AstrMessageEvent, req: ProviderRequest) -> None:
+        req.system_prompt += "你是一个猫娘..."
     ```
 
-    请务必接收两个参数：event, request
+    请务必接收两个参数：event, req
 
     """
 
diff --git a/docs/en/dev/star/guides/listen-message-event.md b/docs/en/dev/star/guides/listen-message-event.md
index e798475ad..9e58326ca 100644
--- a/docs/en/dev/star/guides/listen-message-event.md
+++ b/docs/en/dev/star/guides/listen-message-event.md
@@ -1,4 +1,3 @@
-
 # Handling Message Events
 
 Event listeners can receive message content delivered by the platform and implement features such as commands, command groups, and event listening.
@@ -97,7 +96,7 @@ AstrBot will automatically parse command parameters for you.
 
 ```python
 @filter.command("add")
-def add(self, event: AstrMessageEvent, a: int, b: int):
+async def add(self, event: AstrMessageEvent, a: int, b: int):
     # /add 1 2 -> Result is: 3
     yield event.plain_result(f"Wow! The answer is {a + b}!")
 ```
@@ -108,7 +107,7 @@ Command groups help you organize commands.
 
 ```python
 @filter.command_group("math")
-def math(self):
+def math():
     pass
 
 @math.command("add")
@@ -160,7 +159,7 @@ async def sub(self, event: AstrMessageEvent, a: int, b: int):
     yield event.plain_result(f"Result is: {a - b}")
 
 @calc.command("help")
-def calc_help(self, event: AstrMessageEvent):
+async def calc_help(self, event: AstrMessageEvent):
     # /math calc help
     yield event.plain_result("This is a calculator plugin with add and sub commands.")
 ```
@@ -173,7 +172,7 @@ You can add different aliases for commands or command groups:
 
 ```python
 @filter.command("help", alias={'帮助', 'helpme'})
-def help(self, event: AstrMessageEvent):
+async def help(self, event: AstrMessageEvent):
     yield event.plain_result("This is a calculator plugin with add and sub commands.")
 ```
 
@@ -209,7 +208,7 @@ async def on_aiocqhttp(self, event: AstrMessageEvent):
     yield event.plain_result("Received a message")
 ```
 
-In the current version, `PlatformAdapterType` includes `AIOCQHTTP`, `QQOFFICIAL`, `GEWECHAT`, and `ALL`.
+In the current version, `PlatformAdapterType` supports the following values: `AIOCQHTTP`, `QQOFFICIAL`, `QQOFFICIAL_WEBHOOK`, `TELEGRAM`, `WECOM`, `WECOM_AI_BOT`, `LARK`, `DINGTALK`, `DISCORD`, `SLACK`, `KOOK`, `VOCECHAT`, `WEIXIN_OFFICIAL_ACCOUNT`, `SATORI`, `MISSKEY`, `LINE`, `MATRIX`, `WEIXIN_OC`, `MATTERMOST`, `WEBCHAT`, `ALL`.
 
 #### Admin Commands
 
@@ -420,13 +419,14 @@ You can implement some message decoration here, such as converting to voice, con
 
 ```python
 from astrbot.api.event import filter, AstrMessageEvent
+import astrbot.api.message_components as Comp
 
 @filter.on_decorating_result()
 async def on_decorating_result(self, event: AstrMessageEvent):
     result = event.get_result()
     chain = result.chain
     print(chain) # Print the message chain
-    chain.append(Plain("!")) # Add an exclamation mark at the end of the message chain
+    chain.append(Comp.Plain("!")) # Add an exclamation mark at the end of the message chain
 ```
 
 > You cannot use yield to send messages here. This hook is only for decorating event.get_result().chain. If you need to send, please use the `event.send()` method directly.
diff --git a/docs/en/dev/star/plugin-new.md b/docs/en/dev/star/plugin-new.md
index b3e6845db..e50e96964 100644
--- a/docs/en/dev/star/plugin-new.md
+++ b/docs/en/dev/star/plugin-new.md
@@ -102,8 +102,10 @@ The values in `support_platforms` must be keys from `ADAPTER_NAME_2_TYPE`. Curre
 
 - `aiocqhttp`
 - `qq_official`
+- `qq_official_webhook`
 - `telegram`
 - `wecom`
+- `wecom_ai_bot`
 - `lark`
 - `dingtalk`
 - `discord`
@@ -111,9 +113,12 @@ The values in `support_platforms` must be keys from `ADAPTER_NAME_2_TYPE`. Curre
 - `kook`
 - `vocechat`
 - `weixin_official_account`
+- `weixin_oc`
 - `satori`
 - `misskey`
 - `line`
+- `matrix`
+- `mattermost`
 
 ### Declare AstrBot Version Range (Optional)
 
diff --git a/docs/zh/dev/star/guides/ai.md b/docs/zh/dev/star/guides/ai.md
index 549275ace..71b867efd 100644
--- a/docs/zh/dev/star/guides/ai.md
+++ b/docs/zh/dev/star/guides/ai.md
@@ -1,4 +1,3 @@
-
 # AI
 
 AstrBot 内置了对多种大语言模型（LLM）提供商的支持，并且提供了统一的接口，方便插件开发者调用各种 LLM 服务。
@@ -490,7 +489,7 @@ persona_mgr = self.context.persona_manager
 - __Arguments__  
   - `persona_id: str` – 待删除的人格 ID
 - __Raises__  
-  `Valueable` – 若 `persona_id` 不存在
+  `ValueError` – 若 `persona_id` 不存在
 
 #### `get_default_persona_v3`
 
diff --git a/docs/zh/dev/star/guides/listen-message-event.md b/docs/zh/dev/star/guides/listen-message-event.md
index b8187b00b..edb7c7e0a 100644
--- a/docs/zh/dev/star/guides/listen-message-event.md
+++ b/docs/zh/dev/star/guides/listen-message-event.md
@@ -1,4 +1,3 @@
-
 # 处理消息事件
 
 事件监听器可以收到平台下发的消息内容，可以实现指令、指令组、事件监听等功能。
@@ -97,9 +96,9 @@ AstrBot 会自动帮你解析指令的参数。
 
 ```python
 @filter.command("add")
-def add(self, event: AstrMessageEvent, a: int, b: int):
+async def add(self, event: AstrMessageEvent, a: int, b: int):
     # /add 1 2 -> 结果是: 3
-    yield event.plain_result(f"Wow! The anwser is {a + b}!")
+    yield event.plain_result(f"Wow! The answer is {a + b}!")
 ```
 
 ## 指令组
@@ -108,7 +107,7 @@ def add(self, event: AstrMessageEvent, a: int, b: int):
 
 ```python
 @filter.command_group("math")
-def math(self):
+def math():
     pass
 
 @math.command("add")
@@ -160,7 +159,7 @@ async def sub(self, event: AstrMessageEvent, a: int, b: int):
     yield event.plain_result(f"结果是: {a - b}")
 
 @calc.command("help")
-def calc_help(self, event: AstrMessageEvent):
+async def calc_help(self, event: AstrMessageEvent):
     # /math calc help
     yield event.plain_result("这是一个计算器插件，拥有 add, sub 指令。")
 ```
@@ -173,7 +172,7 @@ def calc_help(self, event: AstrMessageEvent):
 
 ```python
 @filter.command("help", alias={'帮助', 'helpme'})
-def help(self, event: AstrMessageEvent):
+async def help(self, event: AstrMessageEvent):
     yield event.plain_result("这是一个计算器插件，拥有 add, sub 指令。")
 ```
 
@@ -209,7 +208,7 @@ async def on_aiocqhttp(self, event: AstrMessageEvent):
     yield event.plain_result("收到了一条信息")
 ```
 
-当前版本下，`PlatformAdapterType` 有 `AIOCQHTTP`, `QQOFFICIAL`, `GEWECHAT`, `ALL`。
+当前版本下，`PlatformAdapterType` 支持以下值：`AIOCQHTTP`、`QQOFFICIAL`、`QQOFFICIAL_WEBHOOK`、`TELEGRAM`、`WECOM`、`WECOM_AI_BOT`、`LARK`、`DINGTALK`、`DISCORD`、`SLACK`、`KOOK`、`VOCECHAT`、`WEIXIN_OFFICIAL_ACCOUNT`、`SATORI`、`MISSKEY`、`LINE`、`MATRIX`、`WEIXIN_OC`、`MATTERMOST`、`WEBCHAT`、`ALL`。
 
 #### 管理员指令
 
@@ -437,13 +436,14 @@ async def on_agent_done(self, event: AstrMessageEvent, run_context: ContextWrapp
 
 ```python
 from astrbot.api.event import filter, AstrMessageEvent
+import astrbot.api.message_components as Comp
 
 @filter.on_decorating_result()
 async def on_decorating_result(self, event: AstrMessageEvent):
     result = event.get_result()
     chain = result.chain
     print(chain) # 打印消息链
-    chain.append(Plain("!")) # 在消息链的最后添加一个感叹号
+    chain.append(Comp.Plain("!")) # 在消息链的最后添加一个感叹号
 ```
 
 > 这里不能使用 yield 来发送消息。这个钩子只是用来装饰 event.get_result().chain 的。如需发送，请直接使用 `event.send()` 方法。
diff --git a/docs/zh/dev/star/guides/simple.md b/docs/zh/dev/star/guides/simple.md
index d3314133f..b700bef06 100644
--- a/docs/zh/dev/star/guides/simple.md
+++ b/docs/zh/dev/star/guides/simple.md
@@ -4,7 +4,7 @@
 
 ```python
 from astrbot.api.event import filter, AstrMessageEvent, MessageEventResult
-from astrbot.api.star import Context, Star, register
+from astrbot.api.star import Context, Star
 from astrbot.api import logger # 使用 astrbot 提供的 logger 接口
 
 class MyPlugin(Star):
diff --git a/docs/zh/dev/star/plugin-new.md b/docs/zh/dev/star/plugin-new.md
index 04d61deae..2ebf5f392 100644
--- a/docs/zh/dev/star/plugin-new.md
+++ b/docs/zh/dev/star/plugin-new.md
@@ -104,8 +104,10 @@ support_platforms:
 
 - `aiocqhttp`
 - `qq_official`
+- `qq_official_webhook`
 - `telegram`
 - `wecom`
+- `wecom_ai_bot`
 - `lark`
 - `dingtalk`
 - `discord`
@@ -113,9 +115,12 @@ support_platforms:
 - `kook`
 - `vocechat`
 - `weixin_official_account`
+- `weixin_oc`
 - `satori`
 - `misskey`
 - `line`
+- `matrix`
+- `mattermost`
 
 ### 声明 AstrBot 版本范围（Optional）
 

From 989cc0d609f9738f531b86dc58eabfaea4c1abaf Mon Sep 17 00:00:00 2001
From: Soulter <905617992@qq.com>
Date: Wed, 13 May 2026 00:17:27 +0800
Subject: [PATCH 19/51] chore: bump version to 4.24.3

---
 astrbot/cli/__init__.py        |  2 +-
 astrbot/core/config/default.py |  2 +-
 changelogs/v4.24.3.md          | 62 ++++++++++++++++++++++++++++++++++
 pyproject.toml                 |  2 +-
 4 files changed, 65 insertions(+), 3 deletions(-)
 create mode 100644 changelogs/v4.24.3.md

diff --git a/astrbot/cli/__init__.py b/astrbot/cli/__init__.py
index 28ee08a40..c9637c7e1 100644
--- a/astrbot/cli/__init__.py
+++ b/astrbot/cli/__init__.py
@@ -1 +1 @@
-__version__ = "4.24.2"
+__version__ = "4.24.3"
diff --git a/astrbot/core/config/default.py b/astrbot/core/config/default.py
index 763ca6361..3e5dee89c 100644
--- a/astrbot/core/config/default.py
+++ b/astrbot/core/config/default.py
@@ -5,7 +5,7 @@ import os
 from astrbot.core.computer.booters.cua_defaults import CUA_DEFAULT_CONFIG
 from astrbot.core.utils.astrbot_path import get_astrbot_data_path
 
-VERSION = "4.24.2"
+VERSION = "4.24.3"
 DB_PATH = os.path.join(get_astrbot_data_path(), "data_v4.db")
 PERSONAL_WECHAT_CONFIG_METADATA = {
     "weixin_oc_base_url": {
diff --git a/changelogs/v4.24.3.md b/changelogs/v4.24.3.md
new file mode 100644
index 000000000..f58fd16bc
--- /dev/null
+++ b/changelogs/v4.24.3.md
@@ -0,0 +1,62 @@
+- [更新日志(简体中文)](#chinese)
+- [Changelog(English)](#english)
+
+<a id="chinese"></a>
+
+## What's Changed
+
+### 优化
+
+- 强化 Dashboard 登录与密码安全：首次启动生成强随机初始密码，密码存储升级为 PBKDF2，保留旧版 MD5 兼容升级流程，并在需要时引导用户完成安全升级。（[#7338](https://github.com/AstrBotDevs/AstrBot/pull/7338)）
+- 增强插件页面国际化能力，插件页面、扩展页和相关 Dashboard 文案可更好地按当前语言展示。（[#7998](https://github.com/AstrBotDevs/AstrBot/pull/7998)）
+- 新增 WebUI 指标开关配置 `disable_metrics`，可在 Dashboard 中关闭指标统计。（[#7946](https://github.com/AstrBotDevs/AstrBot/pull/7946)）
+- 新增控制台自动滚动开关持久化，刷新页面后保留用户选择。（[#8024](https://github.com/AstrBotDevs/AstrBot/pull/8024)）
+- 新增思考内容与最终回复之间的视觉分隔，提升消息阅读体验。（[#8059](https://github.com/AstrBotDevs/AstrBot/pull/8059)）
+- 优化插件安装、备份恢复与路径冲突处理，增加自愈逻辑并减少临时目录残留和错误追踪误报。（[#7737](https://github.com/AstrBotDevs/AstrBot/pull/7737), [#8148](https://github.com/AstrBotDevs/AstrBot/pull/8148)）
+- 优化 Windows 更新器 zip 根目录归一化与 Python 工具编码处理，提升 Windows 环境兼容性。（[#8019](https://github.com/AstrBotDevs/AstrBot/pull/8019)）
+- 优化 CUA 文件上传逻辑，改用原生文件接口处理上传。（[#8069](https://github.com/AstrBotDevs/AstrBot/pull/8069)）
+- 优化 CUA 空闲沙盒会话过期能力，并在 Dashboard 暴露 CUA idle timeout 配置。（[#8074](https://github.com/AstrBotDevs/AstrBot/pull/8074), [#8075](https://github.com/AstrBotDevs/AstrBot/pull/8075)）
+- 优化 Gemini Provider，使其使用受管理的 httpx client。（[#8112](https://github.com/AstrBotDevs/AstrBot/pull/8112)）
+- 优化 Dashboard 移动端布局、控制台日志级别对齐，以及列表项操作按钮显示逻辑。（[#7988](https://github.com/AstrBotDevs/AstrBot/pull/7988), [#8081](https://github.com/AstrBotDevs/AstrBot/pull/8081)）
+
+### 修复
+
+- 修复知识库在空 prompt 下仍触发检索的问题。（[#8073](https://github.com/AstrBotDevs/AstrBot/pull/8073)）
+- 修复 Discord 命令同步达到配额时会影响平台启动的问题。（[#8061](https://github.com/AstrBotDevs/AstrBot/pull/8061)）
+- 修复 GitHub fallback 下载 URL 中资源文件名错误的问题。（[#8046](https://github.com/AstrBotDevs/AstrBot/pull/8046)）
+- 修复文件夹重命名后父级关系丢失的问题。（[#7974](https://github.com/AstrBotDevs/AstrBot/pull/7974)）
+- 修复配置缺失 `websearch_firecrawl_key`，以及百度搜索关闭时仍显示 key 字段的问题。（[#8012](https://github.com/AstrBotDevs/AstrBot/pull/8012), [#7992](https://github.com/AstrBotDevs/AstrBot/pull/7992)）
+- 修复 T2I 模板内容未校验可能导致 Jinja2 SSTI 注入的问题。（[#8077](https://github.com/AstrBotDevs/AstrBot/pull/8077)）
+- 修复贡献者图片数量上限、API Key 文档示例、插件发布 16MB 限制说明、README 徽章和多处插件开发文档错误。（[#8000](https://github.com/AstrBotDevs/AstrBot/pull/8000), [#7977](https://github.com/AstrBotDevs/AstrBot/pull/7977), [#8108](https://github.com/AstrBotDevs/AstrBot/pull/8108), [#8079](https://github.com/AstrBotDevs/AstrBot/pull/8079), [#7979](https://github.com/AstrBotDevs/AstrBot/pull/7979), [#8001](https://github.com/AstrBotDevs/AstrBot/pull/8001), [#8129](https://github.com/AstrBotDevs/AstrBot/pull/8129), [#8166](https://github.com/AstrBotDevs/AstrBot/pull/8166)）
+
+<a id="english"></a>
+
+## What's Changed (EN)
+
+### New Features
+
+- Added plugin changelogs and a plugin update system, allowing plugin detail pages to show version update information and supporting a more complete plugin update flow.
+- Enhanced plugin page internationalization so plugin pages, extension views, and related Dashboard copy can better follow the current language. ([#7998](https://github.com/AstrBotDevs/AstrBot/pull/7998))
+- Added the `disable_metrics` WebUI config option to disable metrics collection from the Dashboard. ([#7946](https://github.com/AstrBotDevs/AstrBot/pull/7946))
+- Added persisted console auto-scroll preference. ([#8024](https://github.com/AstrBotDevs/AstrBot/pull/8024))
+- Added a visual separator between thinking content and the final response. ([#8059](https://github.com/AstrBotDevs/AstrBot/pull/8059))
+- Added idle expiration for CUA sandbox sessions and exposed the CUA idle timeout setting in the Dashboard. ([#8074](https://github.com/AstrBotDevs/AstrBot/pull/8074), [#8075](https://github.com/AstrBotDevs/AstrBot/pull/8075))
+
+### Improvements
+
+- Strengthened Dashboard authentication and password security: initial passwords are generated randomly, password storage is upgraded to PBKDF2, legacy MD5 compatibility is preserved for upgrades, and users are guided through security upgrades when required. ([#7338](https://github.com/AstrBotDevs/AstrBot/pull/7338))
+- Improved plugin installation, backup restore, and path-conflict handling with self-healing behavior and fewer temporary-directory leftovers or false error reports. ([#7737](https://github.com/AstrBotDevs/AstrBot/pull/7737), [#8148](https://github.com/AstrBotDevs/AstrBot/pull/8148))
+- Improved Windows updater zip-root normalization and Python tool encoding handling for better Windows compatibility. ([#8019](https://github.com/AstrBotDevs/AstrBot/pull/8019))
+- Improved CUA uploads by using native file interfaces. ([#8069](https://github.com/AstrBotDevs/AstrBot/pull/8069))
+- Improved the Gemini Provider to use a managed httpx client. ([#8112](https://github.com/AstrBotDevs/AstrBot/pull/8112))
+- Improved Dashboard mobile layout, console log-level alignment, and list-item action-button visibility. ([#7988](https://github.com/AstrBotDevs/AstrBot/pull/7988), [#8081](https://github.com/AstrBotDevs/AstrBot/pull/8081))
+
+### Bug Fixes
+
+- Fixed missing validation for T2I template content that could allow Jinja2 SSTI injection. ([#8077](https://github.com/AstrBotDevs/AstrBot/pull/8077))
+- Fixed knowledge base retrieval being triggered for blank prompts. ([#8073](https://github.com/AstrBotDevs/AstrBot/pull/8073))
+- Fixed Discord startup being interrupted by command quota handling. ([#8061](https://github.com/AstrBotDevs/AstrBot/pull/8061))
+- Fixed incorrect asset filenames in GitHub fallback download URLs. ([#8046](https://github.com/AstrBotDevs/AstrBot/pull/8046))
+- Fixed folder parent relationships being lost on rename. ([#7974](https://github.com/AstrBotDevs/AstrBot/pull/7974))
+- Fixed missing `websearch_firecrawl_key` in the default config and hidden Baidu web-search keys when disabled. ([#8012](https://github.com/AstrBotDevs/AstrBot/pull/8012), [#7992](https://github.com/AstrBotDevs/AstrBot/pull/7992))
+- Fixed contributor image limits, API Key examples, plugin publishing size-limit docs, README badges, and multiple plugin development guide issues. ([#8000](https://github.com/AstrBotDevs/AstrBot/pull/8000), [#7977](https://github.com/AstrBotDevs/AstrBot/pull/7977), [#8108](https://github.com/AstrBotDevs/AstrBot/pull/8108), [#8079](https://github.com/AstrBotDevs/AstrBot/pull/8079), [#7979](https://github.com/AstrBotDevs/AstrBot/pull/7979), [#8001](https://github.com/AstrBotDevs/AstrBot/pull/8001), [#8129](https://github.com/AstrBotDevs/AstrBot/pull/8129), [#8166](https://github.com/AstrBotDevs/AstrBot/pull/8166))
diff --git a/pyproject.toml b/pyproject.toml
index 30bce7474..593160d39 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -1,6 +1,6 @@
 [project]
 name = "AstrBot"
-version = "4.24.2"
+version = "4.24.3"
 description = "Easy-to-use multi-platform LLM chatbot and development framework"
 readme = "README.md"
 license = { text = "AGPL-3.0-or-later" }

From 37d615923436a5b1624c08bd3b3a9513889f8b2b Mon Sep 17 00:00:00 2001
From: Soulter <905617992@qq.com>
Date: Wed, 13 May 2026 00:24:21 +0800
Subject: [PATCH 20/51] docs: update login instructions to use random initial
 password for first-time users

---
 docs/en/deploy/astrbot/cli.md        | 2 +-
 docs/en/deploy/astrbot/compshare.md  | 2 +-
 docs/en/deploy/astrbot/docker.md     | 2 +-
 docs/en/deploy/astrbot/kubernetes.md | 2 +-
 docs/en/deploy/astrbot/launcher.md   | 2 +-
 docs/en/dev/astrbot-config.md        | 8 ++++----
 docs/en/use/webui.md                 | 2 +-
 docs/zh/deploy/astrbot/cli.md        | 2 +-
 docs/zh/deploy/astrbot/compshare.md  | 4 ++--
 docs/zh/deploy/astrbot/docker.md     | 2 +-
 docs/zh/deploy/astrbot/kubernetes.md | 2 +-
 docs/zh/deploy/astrbot/launcher.md   | 4 ++--
 docs/zh/dev/astrbot-config.md        | 8 ++++----
 docs/zh/use/webui.md                 | 2 +-
 14 files changed, 22 insertions(+), 22 deletions(-)

diff --git a/docs/en/deploy/astrbot/cli.md b/docs/en/deploy/astrbot/cli.md
index 857e0d6a6..456477366 100644
--- a/docs/en/deploy/astrbot/cli.md
+++ b/docs/en/deploy/astrbot/cli.md
@@ -86,7 +86,7 @@ If there are no errors, you will see a log message similar to `🌈 Dashboard st
 > [!TIP]
 > If you are deploying AstrBot on a server, you need to replace `localhost` with your server's IP address.
 >
-> The default username and password are `astrbot` and `astrbot`.
+> New users must use the random password printed in the startup logs to log in for the first time. Use the username shown in the logs (usually `astrbot`) and change it after first login.
 
 
 Next, you need to deploy any messaging platform to use AstrBot on that platform.
diff --git a/docs/en/deploy/astrbot/compshare.md b/docs/en/deploy/astrbot/compshare.md
index c985830a6..08b07b7db 100644
--- a/docs/en/deploy/astrbot/compshare.md
+++ b/docs/en/deploy/astrbot/compshare.md
@@ -35,7 +35,7 @@ You can find the public IP in Console -> Basic Network (Public).
 
 ![WebUI](https://www-s.ucloud.cn/2025/07/7e9fc6edc1dfa916abc069f4cecc24cf_1753940381771.png)
 
-Login with username `astrbot` and password `astrbot`.
+Use the random password printed in startup logs for first-time login, and use the username shown in the logs (usually `astrbot`). Change it immediately after login.
 
 After logging in, you can reset your password and continue setup.
 
diff --git a/docs/en/deploy/astrbot/docker.md b/docs/en/deploy/astrbot/docker.md
index 7ce973a53..e4a347214 100644
--- a/docs/en/deploy/astrbot/docker.md
+++ b/docs/en/deploy/astrbot/docker.md
@@ -84,7 +84,7 @@ If there are no errors, you will see a log message similar to `🌈 Dashboard st
 > [!TIP]
 > Since Docker isolates the network environment, you cannot use `localhost` to access the dashboard.
 >
-> The default username and password are `astrbot` and `astrbot`.
+> New users must use the random password printed in the startup logs to log in for the first time. Use the username shown in the logs (usually `astrbot`) and change the password after first login.
 >
 > If deployed on a cloud server, you need to open ports `6180-6200` and `11451` in the cloud provider's console.
 
diff --git a/docs/en/deploy/astrbot/kubernetes.md b/docs/en/deploy/astrbot/kubernetes.md
index 39f51f1f2..5d34fe03b 100644
--- a/docs/en/deploy/astrbot/kubernetes.md
+++ b/docs/en/deploy/astrbot/kubernetes.md
@@ -194,4 +194,4 @@ Edit the `02-deployment.yaml` file and add `volumes` and `volumeMounts` under `s
 
 After deploying and exposing the service, you can access the AstrBot admin panel through the corresponding IP and port.
 
-> The default username and password are `astrbot` and `astrbot`.
+> New users must use the random password printed in the startup logs for the first login. Use the username shown in the logs (usually `astrbot`) and change it after logging in.
diff --git a/docs/en/deploy/astrbot/launcher.md b/docs/en/deploy/astrbot/launcher.md
index 87ef896a3..85a6aa031 100644
--- a/docs/en/deploy/astrbot/launcher.md
+++ b/docs/en/deploy/astrbot/launcher.md
@@ -66,7 +66,7 @@ If everything works, you will see AstrBot logs.
 Without errors, you should see a log like `🌈 Management panel started, accessible at` with several URLs. Open one URL to access AstrBot WebUI.
 
 > [!TIP]
-> Default username and password: `astrbot` / `astrbot`.
+> First-time logins use the random password generated on startup and printed to logs. Use that password (and the username shown in the logs, usually `astrbot`) to log in, then change it immediately.
 >
 > If WebUI returns 404:
 > Download `dist.zip` from [release](https://github.com/AstrBotDevs/AstrBot/releases), extract it into `AstrBot/data`, then restart the computer if needed.
diff --git a/docs/en/dev/astrbot-config.md b/docs/en/dev/astrbot-config.md
index e27111e76..eb5fc8903 100644
--- a/docs/en/dev/astrbot-config.md
+++ b/docs/en/dev/astrbot-config.md
@@ -116,7 +116,7 @@ The default AstrBot configuration is as follows:
     "dashboard": {
         "enable": True,
         "username": "astrbot",
-        "password": "77b90590a8945a7d36c963981a307dc9",
+        "password": "<your_password_md5>",
         "jwt_secret": "",
         "host": "0.0.0.0",
         "port": 6185,
@@ -492,11 +492,11 @@ List of addresses that bypass the proxy. E.g., `["localhost", "127.0.0.1"]`.
 
 AstrBot WebUI configuration.
 
-Please do not change the `password` value arbitrarily. It is an `md5` encoded password. Change the password in the control panel.
+Please do not change the `password` value arbitrarily. It is an `md5` encoded password generated from the random initial password. Check the startup logs for that initial password on first run, then change it in the control panel.
 
 - `enable`: Whether to enable the AstrBot WebUI. Default is `true`.
-- `username`: Username for the AstrBot WebUI. Default is `astrbot`.
-- `password`: Password for the AstrBot WebUI. Default is the `md5` encoded value of `astrbot`. Do not modify directly unless you know what you are doing.
+- `username`: Username for the AstrBot WebUI.
+- `password`: Password for the AstrBot WebUI. It is initialized from a random password generated on first startup (logged at startup). Do not modify directly unless you know what you are doing.
 - `jwt_secret`: JWT secret key. AstrBot generates this randomly at initialization. Do not modify unless you know what you are doing.
 - `host`: Address the AstrBot WebUI listens on. Default is `0.0.0.0`.
 - `port`: Port the AstrBot WebUI listens on. Default is `6185`.
diff --git a/docs/en/use/webui.md b/docs/en/use/webui.md
index dd17994c0..ec963e861 100644
--- a/docs/en/use/webui.md
+++ b/docs/en/use/webui.md
@@ -13,7 +13,7 @@ After starting AstrBot, you can access the admin panel by visiting `http://local
 
 ## Login
 
-The default username and password are both `astrbot`.
+For first-time login, AstrBot generates a random initial password and prints it in startup logs. Please read the startup log line containing the WebUI credential and use that password to log in (username is usually `astrbot`).
 
 ## ChatUI
 
diff --git a/docs/zh/deploy/astrbot/cli.md b/docs/zh/deploy/astrbot/cli.md
index 617c23028..9062e6dbe 100644
--- a/docs/zh/deploy/astrbot/cli.md
+++ b/docs/zh/deploy/astrbot/cli.md
@@ -85,7 +85,7 @@ python main.py
 > [!TIP]
 > 如果你正在服务器上部署 AstrBot，需要将 `localhost` 替换为你的服务器 IP 地址。
 >
-> 默认用户名和密码是 `astrbot` 和 `astrbot`。
+> 首次登录请使用启动日志中打印的随机初始密码（用户名通常为 `astrbot`）。登录后请立即修改密码。
 
 
 接下来，你需要部署任何一个消息平台，才能够实现在消息平台上使用 AstrBot。
diff --git a/docs/zh/deploy/astrbot/compshare.md b/docs/zh/deploy/astrbot/compshare.md
index f6c4d80db..664870b12 100644
--- a/docs/zh/deploy/astrbot/compshare.md
+++ b/docs/zh/deploy/astrbot/compshare.md
@@ -34,7 +34,7 @@ Both services started in the background.
 
 ![WebUI 界面](https://www-s.ucloud.cn/2025/07/7e9fc6edc1dfa916abc069f4cecc24cf_1753940381771.png)
 
-使用用户名：astrbot 和密码 astrbot 进行登录。
+首次登录时请使用启动日志内的随机初始密码（用户名通常是 astrbot），登录后请立即修改密码。
 
 
 登录成功后，可以重新设置密码，并进入 AstrBot 的页面。
@@ -86,4 +86,4 @@ AstrBot 支持接入优云智算提供的模型 API。
 
 ## 更多功能
 
-更多功能请参考 [AstrBot 官方文档](https://docs.astrbot.app)。
\ No newline at end of file
+更多功能请参考 [AstrBot 官方文档](https://docs.astrbot.app)。
diff --git a/docs/zh/deploy/astrbot/docker.md b/docs/zh/deploy/astrbot/docker.md
index 69b0de696..8eb911d75 100644
--- a/docs/zh/deploy/astrbot/docker.md
+++ b/docs/zh/deploy/astrbot/docker.md
@@ -98,7 +98,7 @@ sudo docker logs -f astrbot
 > [!TIP]
 > 由于 Docker 隔离了网络环境，所以不能使用 `localhost` 访问管理面板。
 >
-> 默认用户名和密码是 `astrbot` 和 `astrbot`。
+> 首次登录请使用启动日志中打印的随机初始密码（用户名通常为 `astrbot`）。登录后请立即修改密码。
 >
 > 如果部署在云服务器上，需要在相应厂商控制台里放行对应端口。
 
diff --git a/docs/zh/deploy/astrbot/kubernetes.md b/docs/zh/deploy/astrbot/kubernetes.md
index 180b1eab7..6d2ed5288 100644
--- a/docs/zh/deploy/astrbot/kubernetes.md
+++ b/docs/zh/deploy/astrbot/kubernetes.md
@@ -194,4 +194,4 @@ image: m.daocloud.io/docker.io/soulter/astrbot:latest
 
 部署并暴露服务后，您就可以通过相应的 IP 和端口访问 AstrBot 管理面板了。
 
-> 默认用户名和密码是 `astrbot` 和 `astrbot`。
+> 首次登录请使用启动日志中打印的随机初始密码（用户名通常为 `astrbot`）。登录后请立即修改密码。
diff --git a/docs/zh/deploy/astrbot/launcher.md b/docs/zh/deploy/astrbot/launcher.md
index 33c71826d..588b3543d 100644
--- a/docs/zh/deploy/astrbot/launcher.md
+++ b/docs/zh/deploy/astrbot/launcher.md
@@ -64,7 +64,7 @@ MacOS 用户下载安装好后，可能会遇到 "已损坏，无法打开" 的
 如果没有报错，你会看到一条日志显示类似 `🌈 管理面板已启动，可访问` 并附带了几条链接。打开其中一个链接即可访问 AstrBot 管理面板。
 
 > [!TIP]
-> 默认用户名和密码是 `astrbot` 和 `astrbot`。
+> 首次登录请使用启动日志中打印的随机初始密码（用户名通常为 `astrbot`）。登录后请立即修改密码。
 >
 > **当管理面板打开时遇到 404 错误：**
 > 在 [release](https://github.com/AstrBotDevs/AstrBot/releases) 页面下载dist.zip，解压拖到 AstrBot/data 下。还不行请重启电脑（来自群里的反馈）
@@ -98,4 +98,4 @@ windows 搜索 Python，打开文件位置：
 
 **方法 2:**
 
-重装 python，并且在安装时勾选 `Add Python to PATH`，然后重启电脑。
\ No newline at end of file
+重装 python，并且在安装时勾选 `Add Python to PATH`，然后重启电脑。
diff --git a/docs/zh/dev/astrbot-config.md b/docs/zh/dev/astrbot-config.md
index 40a75ee53..3fafbe65f 100644
--- a/docs/zh/dev/astrbot-config.md
+++ b/docs/zh/dev/astrbot-config.md
@@ -116,7 +116,7 @@ AstrBot 默认配置如下：
     "dashboard": {
         "enable": True,
         "username": "astrbot",
-        "password": "77b90590a8945a7d36c963981a307dc9",
+        "password": "<your_password_md5>",
         "jwt_secret": "",
         "host": "0.0.0.0",
         "port": 6185,
@@ -492,11 +492,11 @@ HTTP 代理。如 `http://localhost:7890`。
 
 AstrBot WebUI 配置。
 
-请不要随意修改 `password` 的值。它是一个经过 `md5` 编码的密码。请在控制面板修改密码。
+请不要随意修改 `password` 的值。它是随机初始密码经过 `md5` 编码后的值。首次启动时请在日志中获取初始密码，并在控制面板中修改。
 
 - `enable`: 是否启用 AstrBot WebUI。默认为 `true`。
-- `username`: AstrBot WebUI 的用户名。默认为 `astrbot`。
-- `password`: AstrBot WebUI 的密码。默认为 `astrbot` 的 `md5` 编码值。请勿直接修改，除非您知道自己在做什么。
+- `username`: AstrBot WebUI 的用户名。
+- `password`: AstrBot WebUI 的密码。首次启动会随机生成初始密码（已在日志中打印），这里保存的是该密码的 `md5` 值。请勿直接修改，除非您知道自己在做什么。
 - `jwt_secret`: JWT 的密钥。AstrBot 会在初始化时随机生成。请勿修改，除非您知道自己在做什么。
 - `host`: AstrBot WebUI 监听的地址。默认为 `0.0.0.0`。
 - `port`: AstrBot WebUI 监听的端口。默认为 `6185`。
diff --git a/docs/zh/use/webui.md b/docs/zh/use/webui.md
index 972538056..96df0d8d4 100644
--- a/docs/zh/use/webui.md
+++ b/docs/zh/use/webui.md
@@ -13,7 +13,7 @@ AstrBot 管理面板具有管理插件、查看日志、可视化配置、查看
 
 ## 登录
 
-默认用户名和密码是 `astrbot` 和 `astrbot`。
+新用户首次登录时，AstrBot 会生成一个随机初始密码并写入启动日志。请先在启动日志中查找并使用该密码登录（用户名通常为 `astrbot`），登录后请立即修改密码。
 
 ## ChatUI
 

From 7d72e3a9e79bcb3c1ab12923f632b1535042cbce Mon Sep 17 00:00:00 2001
From: Soulter <905617992@qq.com>
Date: Wed, 13 May 2026 00:37:24 +0800
Subject: [PATCH 21/51] docs: update FAQ with details on first login account
 and random password generation

---
 docs/en/faq.md | 66 ++++++++++++++++++++++++++++++++++++++++++++------
 docs/zh/faq.md | 65 +++++++++++++++++++++++++++++++++++++++++++------
 2 files changed, 117 insertions(+), 14 deletions(-)

diff --git a/docs/en/faq.md b/docs/en/faq.md
index 3955f544f..0d8c4b1e6 100644
--- a/docs/en/faq.md
+++ b/docs/en/faq.md
@@ -6,17 +6,69 @@
 
 Download `dist.zip` from the [release](https://github.com/AstrBotDevs/AstrBot/releases) page, extract it, and move it to `AstrBot/data`. If it still doesn't work, try restarting your computer (based on community feedback).
 
+### First Login Account and Random Password
+
+On first startup, the WebUI account is `astrbot` by default, and the default password is randomly generated (it is not a fixed hardcoded value). Check the startup logs and log in with the random initial password shown there:
+
+```text
+[00:27:40.590] [Core] [INFO] [dashboard.server:523]:
+ ✨✨✨
+  AstrBot v4.24.3 WebUI is ready
+
+   ➜  Local: http://localhost:6185
+   ➜  Initial username: astrbot
+   ➜  Initial password: UiYVpZxnW8k22IWqf0ru5pOy
+   ➜  Change it after logging in
+ ✨✨✨
+Set dashboard.host in data/cmd_config.json to enable remote access.
+```
+
+The random initial password may be different each first startup, so please change it as soon as possible in WebUI settings after logging in.
+
 ### Forgot Dashboard Password
 
-If you forgot your AstrBot dashboard password, you can modify the `"dashboard"` field in the `AstrBot/data/cmd_config.json` configuration file, where `"username"` is your username and `"password"` is your password encrypted with MD5.
+If you forgot your AstrBot dashboard password, find the `"dashboard"` field in `AstrBot/data/cmd_config.json`, for example:
 
-To modify your account credentials, follow these steps:
+```json
+  "dashboard": {
+    "enable": true,
+    "username": "astrbot",
+    "password": "81e0c3dxxxxxxxxxxx78862e78",
+    "pbkdf2_password": "pbkdf2_sha256$600000$1xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx",
+    "password_storage_upgraded": true,
+    "password_change_required": true,
+    "jwt_secret": "5e1b0280bcxxxxxxxxxxxxxxxxf4a",
+    "host": "127.0.0.1",
+    "port": 6185,
+    "disable_access_log": true,
+    "ssl": {
+      "enable": false,
+      "cert_file": "",
+      "key_file": "",
+      "ca_certs": ""
+    }
+  },
+```
 
-1. Modify the `"username"` field, keeping the `""` quotation marks. If you don't want to change the username, skip this step
-2. Visit the website: [Online MD5 Generator](https://www.metools.info/code/c26.html)
-3. Enter your new password in the input text box
-4. Select MD5 encryption (32-bit), make sure to choose the 32-bit option
-5. Paste the converted string into the configuration file, keeping the `""` quotation marks
+Delete the `username`, `password`, `pbkdf2_password`, `password_storage_upgraded`, `password_change_required`, and `jwt_secret` fields (with their values), then save.
+The segment should look like:
+
+```json
+  "dashboard": {
+    "enable": true,
+    "host": "127.0.0.1",
+    "port": 6185,
+    "disable_access_log": true,
+    "ssl": {
+      "enable": false,
+      "cert_file": "",
+      "key_file": "",
+      "ca_certs": ""
+    }
+  },
+```
+
+After restart, AstrBot will automatically generate a random password with the fixed username `astrbot`; check the startup logs.
 
 ## Bot Core Related
 
diff --git a/docs/zh/faq.md b/docs/zh/faq.md
index f9657884c..d9cf5a2de 100644
--- a/docs/zh/faq.md
+++ b/docs/zh/faq.md
@@ -6,17 +6,68 @@
 
 在 [release](https://github.com/AstrBotDevs/AstrBot/releases) 页面下载 `dist.zip`，解压拖到 `AstrBot/data` 下。还不行请重启电脑（来自群里的反馈）
 
+
+### 首次登录的默认账号和随机密码
+
+首次启动时，WebUI 的默认账号为 `astrbot`，默认密码会随机生成，不会写死为固定值。请在启动日志中查找以下内容并使用日志中的随机初始密码登录：
+
+```text
+[00:27:40.590] [Core] [INFO] [dashboard.server:523]:
+ ✨✨✨
+  AstrBot v4.24.3 WebUI is ready
+
+   ➜  Local: http://localhost:6185
+   ➜  Initial username: astrbot
+   ➜  Initial password: UiYVpZxnW8k22IWqf0ru5pOy
+   ➜  Change it after logging in
+ ✨✨✨
+Set dashboard.host in data/cmd_config.json to enable remote access.
+```
+
 ### 管理面板的密码忘记了
 
-如果你忘记了 AstrBot 管理面板的密码，你可以在 `AstrBot/data/cmd_config.json` 配置文件中找到 `"dashboard"` 字段进行修改，其中 `"username"` 是你的用户名，`"password"` 是你的密码（经过 MD5 加密）。
+如果你忘记了 AstrBot 管理面板的密码，你可以在 `AstrBot/data/cmd_config.json` 配置文件中找到 `"dashboard"` 字段，如下：
 
-如果想要修改账号密码，你可以这样做：
+```json
+  "dashboard": {
+    "enable": true,
+    "username": "astrbot",
+    "password": "81e0c3dxxxxxxxxxxx78862e78",
+    "pbkdf2_password": "pbkdf2_sha256$600000$1xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx",
+    "password_storage_upgraded": true,
+    "password_change_required": true,
+    "jwt_secret": "5e1b0280bcxxxxxxxxxxxxxxxxf4a",
+    "host": "127.0.0.1",
+    "port": 6185,
+    "disable_access_log": true,
+    "ssl": {
+      "enable": false,
+      "cert_file": "",
+      "key_file": "",
+      "ca_certs": ""
+    }
+  },
+```
 
-1. 修改 `"username"` 字段，注意保留 `""`；如果不想修改用户名，可以不修改
-2. 进入网站：[在线 MD5 生成](https://www.metools.info/code/c26.html)
-3. 在转换前文本框输入你的新密码
-4. 选择 MD5 加密（32 位），请确认选择 32 位选项
-5. 将转换后的字符粘贴至配置文件，注意保留 `""`, 且字母使用小写
+删除 `username`, `password`, `pbkdf2_password`, `password_storage_upgraded`, `password_change_required`, `jwt_secret` 五个字段（连同值一起），然后保存。上述片段修改类似如下：
+
+
+```json
+  "dashboard": {
+    "enable": true,
+    "host": "127.0.0.1",
+    "port": 6185,
+    "disable_access_log": true,
+    "ssl": {
+      "enable": false,
+      "cert_file": "",
+      "key_file": "",
+      "ca_certs": ""
+    }
+  },
+```
+
+重启后 AstrBot 将会自动生成随机的密码以及固定的用户名 `astrbot`，请在日志查看。
 
 ## AstrBot 使用相关
 

From 2d6f5e64b847d74f21a7484c3b1dd55915b1ce83 Mon Sep 17 00:00:00 2001
From: Soulter <905617992@qq.com>
Date: Wed, 13 May 2026 01:37:35 +0800
Subject: [PATCH 22/51] fix(auth): update login failure message for first-time
 users with details on random password

---
 astrbot/dashboard/routes/auth.py | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/astrbot/dashboard/routes/auth.py b/astrbot/dashboard/routes/auth.py
index 20195a858..a9ba692ba 100644
--- a/astrbot/dashboard/routes/auth.py
+++ b/astrbot/dashboard/routes/auth.py
@@ -29,6 +29,15 @@ DASHBOARD_JWT_COOKIE_MAX_AGE = 7 * 24 * 60 * 60
 SKIP_DEFAULT_PASSWORD_AUTH_ENV = "ASTRBOT_DASHBOARD_SKIP_DEFAULT_PASSWORD_AUTH"
 SKIP_DEFAULT_PASSWORD_AUTH_ENV_LEGACY = "DASHBOARD_SKIP_DEFAULT_PASSWORD_AUTH"
 LOCAL_DASHBOARD_HOSTS = {"127.0.0.1", "localhost", "::1"}
+DEFAULT_PASSWORD_LOGIN_FAILURE_MESSAGE = (
+    "Login failed. If this is your first time using AstrBot, the old default "
+    "astrbot password has been replaced by a random strong password printed in "
+    "the startup logs. Check the initial password in the logs and try again. "
+    "Learn more: https://docs.astrbot.app/en/faq.html\n\n"
+    "登录失败。如果您是初次使用，旧版默认 astrbot 密码已改为启动日志中输出的"
+    "随机强密码。请使用日志中提供的的初始密码来登录。了解更多："
+    "https://docs.astrbot.app/faq.html"
+)
 
 
 class AuthRoute(Route):
@@ -170,6 +179,8 @@ class AuthRoute(Route):
             self._set_dashboard_jwt_cookie(response, token)
             return response
         await asyncio.sleep(3)
+        if req_password == "astrbot":
+            return Response().error(DEFAULT_PASSWORD_LOGIN_FAILURE_MESSAGE).__dict__
         return Response().error("用户名或密码错误").__dict__
 
     async def logout(self):

From c48108040c5694044b33f9fe6fcf3b3c0f01ac8c Mon Sep 17 00:00:00 2001
From: Soulter <905617992@qq.com>
Date: Wed, 13 May 2026 01:46:08 +0800
Subject: [PATCH 23/51] chore: bump version to 4.24.4

---
 astrbot/cli/__init__.py               | 2 +-
 astrbot/core/config/default.py        | 2 +-
 changelogs/{v4.24.3.md => v4.24.4.md} | 0
 pyproject.toml                        | 2 +-
 4 files changed, 3 insertions(+), 3 deletions(-)
 rename changelogs/{v4.24.3.md => v4.24.4.md} (100%)

diff --git a/astrbot/cli/__init__.py b/astrbot/cli/__init__.py
index c9637c7e1..610c77a8b 100644
--- a/astrbot/cli/__init__.py
+++ b/astrbot/cli/__init__.py
@@ -1 +1 @@
-__version__ = "4.24.3"
+__version__ = "4.24.4"
diff --git a/astrbot/core/config/default.py b/astrbot/core/config/default.py
index 3e5dee89c..fc66b2781 100644
--- a/astrbot/core/config/default.py
+++ b/astrbot/core/config/default.py
@@ -5,7 +5,7 @@ import os
 from astrbot.core.computer.booters.cua_defaults import CUA_DEFAULT_CONFIG
 from astrbot.core.utils.astrbot_path import get_astrbot_data_path
 
-VERSION = "4.24.3"
+VERSION = "4.24.4"
 DB_PATH = os.path.join(get_astrbot_data_path(), "data_v4.db")
 PERSONAL_WECHAT_CONFIG_METADATA = {
     "weixin_oc_base_url": {
diff --git a/changelogs/v4.24.3.md b/changelogs/v4.24.4.md
similarity index 100%
rename from changelogs/v4.24.3.md
rename to changelogs/v4.24.4.md
diff --git a/pyproject.toml b/pyproject.toml
index 593160d39..1ac64d397 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -1,6 +1,6 @@
 [project]
 name = "AstrBot"
-version = "4.24.3"
+version = "4.24.4"
 description = "Easy-to-use multi-platform LLM chatbot and development framework"
 readme = "README.md"
 license = { text = "AGPL-3.0-or-later" }

From 4672a04eb7e8814eb001eeeb61463f93b0069bca Mon Sep 17 00:00:00 2001
From: Soulter <905617992@qq.com>
Date: Wed, 13 May 2026 01:50:37 +0800
Subject: [PATCH 24/51] docs: update FAQ to clarify default password usage for
 first-time login

---
 docs/en/faq.md | 2 +-
 docs/zh/faq.md | 2 ++
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/docs/en/faq.md b/docs/en/faq.md
index 0d8c4b1e6..e0dc7307d 100644
--- a/docs/en/faq.md
+++ b/docs/en/faq.md
@@ -23,7 +23,7 @@ On first startup, the WebUI account is `astrbot` by default, and the default pas
 Set dashboard.host in data/cmd_config.json to enable remote access.
 ```
 
-The random initial password may be different each first startup, so please change it as soon as possible in WebUI settings after logging in.
+`UiYVpZxnW8k22IWqf0ru5pOy` is the default password.
 
 ### Forgot Dashboard Password
 
diff --git a/docs/zh/faq.md b/docs/zh/faq.md
index d9cf5a2de..64792747d 100644
--- a/docs/zh/faq.md
+++ b/docs/zh/faq.md
@@ -24,6 +24,8 @@
 Set dashboard.host in data/cmd_config.json to enable remote access.
 ```
 
+其中的 `UiYVpZxnW8k22IWqf0ru5pOy` 就是默认密码。在使用默认密码登录后，会自动进入设置账户环节。
+
 ### 管理面板的密码忘记了
 
 如果你忘记了 AstrBot 管理面板的密码，你可以在 `AstrBot/data/cmd_config.json` 配置文件中找到 `"dashboard"` 字段，如下：

From 22ba831a3165462f75ef4762abb17cf497dcbac6 Mon Sep 17 00:00:00 2001
From: NayukiMeko <MekoNayuki@outlook.com>
Date: Wed, 13 May 2026 11:50:06 +0800
Subject: [PATCH 25/51] fix(message_tools): throw exception and block message
 sending when path does not exist (#8149)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* fix(message_tools): 路径不存在时抛出异常并阻止消息发送

- _resolve_path_from_sandbox 在所有解析路径均失败时改为抛出 FileNotFoundError，而非静默返回原始路径，避免将无效路径传递给下游组件
- 新增 component_type 关键字参数，使错误信息能明确指出是 image/record/video/file 哪类资源路径缺失
- 在 call 方法中捕获 FileNotFoundError 并提前返回错误字符串，确保路径无效时不会继续构建或发送任何消息组件
- 补充单元测试，验证缺失图片路径场景下 send_message 不会被调用

* Update tests/unit/test_message_tools.py

Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>

* fix(tools): propagate sandbox error instead of masking as FileNotFoundError

---------

Co-authored-by: Ruochen Pan <badbatch0x01@gmail.com>
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
Co-authored-by: RC-CHN <1051989940@qq.com>
---
 astrbot/core/tools/message_tools.py | 20 ++++++++++++++------
 tests/unit/test_message_tools.py    | 28 ++++++++++++++++++++++++++++
 2 files changed, 42 insertions(+), 6 deletions(-)

diff --git a/astrbot/core/tools/message_tools.py b/astrbot/core/tools/message_tools.py
index c3f33a7e8..c57d6b73d 100644
--- a/astrbot/core/tools/message_tools.py
+++ b/astrbot/core/tools/message_tools.py
@@ -79,8 +79,13 @@ class SendMessageToUserTool(FunctionTool[AstrAgentContext]):
     )
 
     async def _resolve_path_from_sandbox(
-        self, context: ContextWrapper[AstrAgentContext], path: str
+        self,
+        context: ContextWrapper[AstrAgentContext],
+        path: str,
+        *,
+        component_type: str = "file",
     ) -> tuple[str, bool]:
+        path = str(path)
         # if the path is relative, check if the file exists in user's local workspace
         if not os.path.isabs(path):
             unified_msg_origin = context.context.event.unified_msg_origin
@@ -115,8 +120,9 @@ class SendMessageToUserTool(FunctionTool[AstrAgentContext]):
                 return local_path, True
         except Exception as exc:
             logger.warning(f"Failed to check/download file from sandbox: {exc}")
+            raise
 
-        return path, False
+        raise FileNotFoundError(f"{component_type} path does not exist: {path}")
 
     async def call(
         self, context: ContextWrapper[AstrAgentContext], **kwargs
@@ -155,7 +161,7 @@ class SendMessageToUserTool(FunctionTool[AstrAgentContext]):
                     url = msg.get("url")
                     if path:
                         local_path, _ = await self._resolve_path_from_sandbox(
-                            context, path
+                            context, path, component_type="image"
                         )
                         components.append(Comp.Image.fromFileSystem(path=local_path))
                     elif url:
@@ -167,7 +173,7 @@ class SendMessageToUserTool(FunctionTool[AstrAgentContext]):
                     url = msg.get("url")
                     if path:
                         local_path, _ = await self._resolve_path_from_sandbox(
-                            context, path
+                            context, path, component_type="record"
                         )
                         components.append(Comp.Record.fromFileSystem(path=local_path))
                     elif url:
@@ -179,7 +185,7 @@ class SendMessageToUserTool(FunctionTool[AstrAgentContext]):
                     url = msg.get("url")
                     if path:
                         local_path, _ = await self._resolve_path_from_sandbox(
-                            context, path
+                            context, path, component_type="video"
                         )
                         components.append(Comp.Video.fromFileSystem(path=local_path))
                     elif url:
@@ -197,7 +203,7 @@ class SendMessageToUserTool(FunctionTool[AstrAgentContext]):
                     )
                     if path:
                         local_path, _ = await self._resolve_path_from_sandbox(
-                            context, path
+                            context, path, component_type="file"
                         )
                         components.append(Comp.File(name=name, file=local_path))
                     elif url:
@@ -213,6 +219,8 @@ class SendMessageToUserTool(FunctionTool[AstrAgentContext]):
                     return (
                         f"error: unsupported message type '{msg_type}' at index {idx}."
                     )
+            except FileNotFoundError as exc:
+                return f"error: {exc}"
             except Exception as exc:
                 return f"error: failed to build messages[{idx}] component: {exc}"
 
diff --git a/tests/unit/test_message_tools.py b/tests/unit/test_message_tools.py
index eedee80ab..28896b6d2 100644
--- a/tests/unit/test_message_tools.py
+++ b/tests/unit/test_message_tools.py
@@ -133,3 +133,31 @@ async def test_send_message_empty_messages_returns_error():
     result = await tool.call(ctx, messages=[], session="oc_xxx")
     assert "error:" in result
     assert "messages" in result.lower()
+
+
+@pytest.mark.asyncio
+async def test_send_message_missing_image_path_stops_before_send(tmp_path, monkeypatch):
+    """Missing image paths fail before sending any message components."""
+    tool = SendMessageToUserTool()
+    ctx = _make_context()
+    missing_image_path = tmp_path / "missing.png"
+
+    async def mock_get_booter(*args, **kwargs):
+        del args, kwargs
+        raise RuntimeError("sandbox unavailable")
+
+    monkeypatch.setattr(
+        "astrbot.core.tools.message_tools.get_booter",
+        mock_get_booter,
+    )
+
+    result = await tool.call(
+        ctx,
+        messages=[
+            {"type": "plain", "text": "before image"},
+            {"type": "image", "path": str(missing_image_path)},
+        ],
+    )
+
+    assert "error: failed to build messages[1] component: sandbox unavailable" in result
+    ctx.context.context.send_message.assert_not_called()

From 1b09132e4a45c1cd4fe375909e708784aa734782 Mon Sep 17 00:00:00 2001
From: Tsukumi <112180165+Tsukumi233@users.noreply.github.com>
Date: Wed, 13 May 2026 14:38:11 +0800
Subject: [PATCH 26/51] fix: respect explicit Shipyard Neo profile (#8167)

---
 astrbot/core/computer/booters/shipyard_neo.py      | 14 ++++++++------
 astrbot/core/config/default.py                     |  2 +-
 .../locales/en-US/features/config-metadata.json    |  2 +-
 .../locales/ru-RU/features/config-metadata.json    |  2 +-
 .../locales/zh-CN/features/config-metadata.json    |  2 +-
 docs/en/use/astrbot-agent-sandbox.md               |  2 +-
 docs/zh/use/astrbot-agent-sandbox.md               |  2 +-
 tests/test_profile_aware_tools.py                  | 12 ++++++++++--
 8 files changed, 24 insertions(+), 14 deletions(-)

diff --git a/astrbot/core/computer/booters/shipyard_neo.py b/astrbot/core/computer/booters/shipyard_neo.py
index a1a8ad55a..dd982960f 100644
--- a/astrbot/core/computer/booters/shipyard_neo.py
+++ b/astrbot/core/computer/booters/shipyard_neo.py
@@ -353,12 +353,12 @@ class ShipyardNeoBooter(ComputerBooter):
         self,
         endpoint_url: str,
         access_token: str,
-        profile: str = DEFAULT_PROFILE,
+        profile: str = "",
         ttl: int = 3600,
     ) -> None:
         self._endpoint_url = endpoint_url
         self._access_token = access_token
-        self._profile = profile
+        self._profile = profile.strip() if profile else ""
         self._ttl = ttl
         self._client: BayClient | None = None
         self._sandbox: Sandbox | None = None
@@ -431,7 +431,9 @@ class ShipyardNeoBooter(ComputerBooter):
         )
         await self._client.__aenter__()
 
-        # Resolve profile: user-specified > smart selection > default
+        # Resolve profile: user-specified > smart selection > default.
+        # An empty profile means auto-select; any non-empty profile must be
+        # honoured as an explicit choice, including "python-default".
         resolved_profile = await self._resolve_profile(self._client)
 
         self._sandbox = await self._client.create_sandbox(
@@ -535,7 +537,7 @@ class ShipyardNeoBooter(ComputerBooter):
         """Pick the best profile for this session.
 
         Resolution order:
-        1. User-specified profile (non-empty, non-default) → use as-is.
+        1. User-specified profile (non-empty) → use as-is.
         2. Query ``GET /v1/profiles`` and pick the profile with the most
            capabilities, preferring profiles that include ``"browser"``.
         3. Fall back to :attr:`DEFAULT_PROFILE`.
@@ -544,8 +546,8 @@ class ShipyardNeoBooter(ComputerBooter):
         misconfigured token, and silently falling back would just delay the
         real failure to ``create_sandbox``.
         """
-        # User explicitly set a profile → honour it
-        if self._profile and self._profile != self.DEFAULT_PROFILE:
+        # User explicitly set a profile → honour it.
+        if self._profile:
             logger.info("[Computer] Using user-specified profile: %s", self._profile)
             return self._profile
 
diff --git a/astrbot/core/config/default.py b/astrbot/core/config/default.py
index fc66b2781..6c384fa0f 100644
--- a/astrbot/core/config/default.py
+++ b/astrbot/core/config/default.py
@@ -3315,7 +3315,7 @@ CONFIG_METADATA_3 = {
                     "provider_settings.sandbox.shipyard_neo_profile": {
                         "description": "Shipyard Neo Profile",
                         "type": "string",
-                        "hint": "Shipyard Neo 沙箱 profile，如 python-default。",
+                        "hint": "Shipyard Neo 沙箱 profile，如 python-default。留空时自动选择能力更完整的 profile。",
                         "condition": {
                             "provider_settings.computer_use_runtime": "sandbox",
                             "provider_settings.sandbox.booter": "shipyard_neo",
diff --git a/dashboard/src/i18n/locales/en-US/features/config-metadata.json b/dashboard/src/i18n/locales/en-US/features/config-metadata.json
index bfb46ab6a..534358439 100644
--- a/dashboard/src/i18n/locales/en-US/features/config-metadata.json
+++ b/dashboard/src/i18n/locales/en-US/features/config-metadata.json
@@ -180,7 +180,7 @@
           },
           "shipyard_neo_profile": {
             "description": "Shipyard Neo Profile",
-            "hint": "Sandbox profile for Shipyard Neo, e.g. python-default."
+            "hint": "Sandbox profile for Shipyard Neo, e.g. python-default. Leave empty to auto-select the most capable profile."
           },
           "shipyard_neo_ttl": {
             "description": "Shipyard Neo Sandbox TTL",
diff --git a/dashboard/src/i18n/locales/ru-RU/features/config-metadata.json b/dashboard/src/i18n/locales/ru-RU/features/config-metadata.json
index 9f593fc50..d196cb37a 100644
--- a/dashboard/src/i18n/locales/ru-RU/features/config-metadata.json
+++ b/dashboard/src/i18n/locales/ru-RU/features/config-metadata.json
@@ -180,7 +180,7 @@
                     },
                     "shipyard_neo_profile": {
                         "description": "Профиль Shipyard Neo",
-                        "hint": "Профиль песочницы, например, python-default."
+                        "hint": "Профиль песочницы, например, python-default. Оставьте пустым для автоматического выбора самого функционального профиля."
                     },
                     "shipyard_neo_ttl": {
                         "description": "TTL песочницы Shipyard Neo",
diff --git a/dashboard/src/i18n/locales/zh-CN/features/config-metadata.json b/dashboard/src/i18n/locales/zh-CN/features/config-metadata.json
index 59c0104de..c8d9d572a 100644
--- a/dashboard/src/i18n/locales/zh-CN/features/config-metadata.json
+++ b/dashboard/src/i18n/locales/zh-CN/features/config-metadata.json
@@ -182,7 +182,7 @@
           },
           "shipyard_neo_profile": {
             "description": "Shipyard Neo Profile",
-            "hint": "Shipyard Neo 沙箱 profile，例如 python-default。"
+            "hint": "Shipyard Neo 沙箱 profile，例如 python-default。留空时自动选择能力更完整的 profile。"
           },
           "shipyard_neo_ttl": {
             "description": "Shipyard Neo Sandbox 存活时间(秒)",
diff --git a/docs/en/use/astrbot-agent-sandbox.md b/docs/en/use/astrbot-agent-sandbox.md
index 775418c27..31115d20d 100644
--- a/docs/en/use/astrbot-agent-sandbox.md
+++ b/docs/en/use/astrbot-agent-sandbox.md
@@ -328,7 +328,7 @@ If you choose `Shipyard Neo`, the main configuration items are:
   - If AstrBot can access Bay's `credentials.json`, you may leave it empty and let AstrBot auto-discover it
 - `Shipyard Neo Profile`
   - For example `python-default` or `browser-python`
-  - If not explicitly specified, AstrBot will try to choose a profile with richer capabilities, preferring one that includes the `browser` capability, and fall back to `python-default` if needed
+  - If left empty, AstrBot will try to choose a profile with richer capabilities, preferring one that includes the `browser` capability, and fall back to `python-default` if needed
 - `Shipyard Neo Sandbox TTL`
   - The upper lifetime limit of the sandbox, defaulting to 3600 seconds (1 hour)
 
diff --git a/docs/zh/use/astrbot-agent-sandbox.md b/docs/zh/use/astrbot-agent-sandbox.md
index ff59c6a7b..fd8069141 100644
--- a/docs/zh/use/astrbot-agent-sandbox.md
+++ b/docs/zh/use/astrbot-agent-sandbox.md
@@ -434,7 +434,7 @@ docker pull soulter/shipyard-ship:latest
   - 如果是官方联合部署，且 AstrBot 能访问 Bay 的 `credentials.json`，可以留空自动发现
 - `Shipyard Neo Profile`
   - 例如 `python-default`、`browser-python`
-  - 如果未手动指定，AstrBot 会优先尝试选择能力更完整、且优先带有 `browser` capability 的 profile，失败时再回退到 `python-default`
+  - 如果留空，AstrBot 会优先尝试选择能力更完整、且优先带有 `browser` capability 的 profile，失败时再回退到 `python-default`
 - `Shipyard Neo Sandbox TTL`
   - sandbox 生命周期上限，默认值为 3600 秒（1 小时）
 
diff --git a/tests/test_profile_aware_tools.py b/tests/test_profile_aware_tools.py
index e8c295438..86468c345 100644
--- a/tests/test_profile_aware_tools.py
+++ b/tests/test_profile_aware_tools.py
@@ -169,7 +169,7 @@ class TestApplySandboxToolsConditional:
 class TestResolveProfile:
     """Test smart profile selection logic."""
 
-    def _make_booter(self, profile: str = "python-default"):
+    def _make_booter(self, profile: str = ""):
         from astrbot.core.computer.booters.shipyard_neo import ShipyardNeoBooter
 
         return ShipyardNeoBooter(
@@ -186,9 +186,17 @@ class TestResolveProfile:
         result = await booter._resolve_profile(client)
         assert result == "browser-python"
 
+    @pytest.mark.asyncio
+    async def test_user_specified_default_profile_honoured(self):
+        """User explicitly sets python-default → use it directly."""
+        booter = self._make_booter(profile="python-default")
+        client = SimpleNamespace()  # list_profiles should NOT be called
+        result = await booter._resolve_profile(client)
+        assert result == "python-default"
+
     @pytest.mark.asyncio
     async def test_selects_browser_profile(self):
-        """When multiple profiles available, prefer one with browser."""
+        """When profile is empty, prefer an available profile with browser."""
 
         async def _mock_list_profiles():
             return SimpleNamespace(

From 37142fd2539761fdb68663ca7a33990751aa869d Mon Sep 17 00:00:00 2001
From: Soulter <905617992@qq.com>
Date: Thu, 14 May 2026 00:40:15 +0800
Subject: [PATCH 27/51] feat: enhance update dialog with progress tracking and
 localization updates

- Added advanced settings option in update dialog for better user control.
- Implemented detailed progress tracking for update stages including download size and speed.
- Updated localization files for English, Russian, and Chinese to include new strings for update progress and advanced settings.
- Improved UI for update dialog with better layout and responsiveness.
- Enhanced test coverage for update process including progress tracking.
---
 astrbot/core/updator.py                       |  15 +-
 astrbot/core/utils/io.py                      | 112 ++-
 astrbot/core/zip_updator.py                   |  50 +-
 astrbot/dashboard/routes/update.py            | 194 ++++-
 .../src/i18n/locales/en-US/core/header.json   |  16 +-
 .../src/i18n/locales/ru-RU/core/header.json   | 234 +++---
 .../src/i18n/locales/zh-CN/core/header.json   |  16 +-
 .../full/vertical-header/VerticalHeader.vue   | 676 +++++++++++++++---
 tests/test_dashboard.py                       |  21 +-
 9 files changed, 1104 insertions(+), 230 deletions(-)

diff --git a/astrbot/core/updator.py b/astrbot/core/updator.py
index 73c837b88..fab293418 100644
--- a/astrbot/core/updator.py
+++ b/astrbot/core/updator.py
@@ -143,7 +143,14 @@ class AstrBotUpdator(RepoZipUpdator):
     async def get_releases(self) -> list:
         return await self.fetch_release_info(self.ASTRBOT_RELEASE_API)
 
-    async def update(self, reboot=False, latest=True, version=None, proxy="") -> None:
+    async def update(
+        self,
+        reboot=False,
+        latest=True,
+        version=None,
+        proxy="",
+        progress_callback=None,
+    ) -> None:
         update_data = await self.fetch_release_info(self.ASTRBOT_RELEASE_API, latest)
         file_url = None
 
@@ -175,7 +182,11 @@ class AstrBotUpdator(RepoZipUpdator):
             file_url = f"{proxy}/{file_url}"
 
         try:
-            await self._download_file(file_url, "temp.zip")
+            await self._download_file(
+                file_url,
+                "temp.zip",
+                progress_callback=progress_callback,
+            )
             logger.info("下载 AstrBot Core 更新文件完成，正在执行解压...")
             self.unzip_file("temp.zip", self.MAIN_PATH)
         except BaseException as e:
diff --git a/astrbot/core/utils/io.py b/astrbot/core/utils/io.py
index d06f6a19a..8f3f1688d 100644
--- a/astrbot/core/utils/io.py
+++ b/astrbot/core/utils/io.py
@@ -1,4 +1,5 @@
 import base64
+import inspect
 import logging
 import os
 import shutil
@@ -147,7 +148,20 @@ async def download_image_by_url(
         raise e
 
 
-async def download_file(url: str, path: str, show_progress: bool = False) -> None:
+async def _emit_download_progress(progress_callback, payload: dict) -> None:
+    if not progress_callback:
+        return
+    result = progress_callback(payload)
+    if inspect.isawaitable(result):
+        await result
+
+
+async def download_file(
+    url: str,
+    path: str,
+    show_progress: bool = False,
+    progress_callback=None,
+) -> None:
     """从指定 url 下载文件到指定路径 path"""
     try:
         ssl_context = ssl.create_default_context(
@@ -168,6 +182,16 @@ async def download_file(url: str, path: str, show_progress: bool = False) -> Non
                 start_time = time.time()
                 if show_progress:
                     print(f"Downloading: {url} | Size: {total_size / 1024:.2f} KB")
+                await _emit_download_progress(
+                    progress_callback,
+                    {
+                        "url": url,
+                        "downloaded": 0,
+                        "total": total_size,
+                        "percent": 0,
+                        "speed": 0,
+                    },
+                )
                 with open(path, "wb") as f:
                     while True:
                         chunk = await resp.content.read(8192)
@@ -175,17 +199,38 @@ async def download_file(url: str, path: str, show_progress: bool = False) -> Non
                             break
                         f.write(chunk)
                         downloaded_size += len(chunk)
+                        elapsed_time = (
+                            time.time() - start_time
+                            if time.time() - start_time > 0
+                            else 1
+                        )
+                        speed = downloaded_size / 1024 / elapsed_time  # KB/s
+                        percent = downloaded_size / total_size if total_size > 0 else 0
+                        await _emit_download_progress(
+                            progress_callback,
+                            {
+                                "url": url,
+                                "downloaded": downloaded_size,
+                                "total": total_size,
+                                "percent": percent,
+                                "speed": speed,
+                            },
+                        )
                         if show_progress:
-                            elapsed_time = (
-                                time.time() - start_time
-                                if time.time() - start_time > 0
-                                else 1
-                            )
-                            speed = downloaded_size / 1024 / elapsed_time  # KB/s
                             print(
-                                f"\rProgress: {downloaded_size / total_size:.2%} Speed: {speed:.2f} KB/s",
+                                f"\rProgress: {percent:.2%} Speed: {speed:.2f} KB/s",
                                 end="",
                             )
+                await _emit_download_progress(
+                    progress_callback,
+                    {
+                        "url": url,
+                        "downloaded": downloaded_size,
+                        "total": total_size,
+                        "percent": 1,
+                        "speed": 0,
+                    },
+                )
     except (aiohttp.ClientConnectorSSLError, aiohttp.ClientConnectorCertificateError):
         # 关闭SSL验证（仅在证书验证失败时作为fallback）
         logger.warning(
@@ -208,6 +253,16 @@ async def download_file(url: str, path: str, show_progress: bool = False) -> Non
                 start_time = time.time()
                 if show_progress:
                     print(f"Size: {total_size / 1024:.2f} KB | URL: {url}")
+                await _emit_download_progress(
+                    progress_callback,
+                    {
+                        "url": url,
+                        "downloaded": 0,
+                        "total": total_size,
+                        "percent": 0,
+                        "speed": 0,
+                    },
+                )
                 with open(path, "wb") as f:
                     while True:
                         chunk = await resp.content.read(8192)
@@ -215,13 +270,38 @@ async def download_file(url: str, path: str, show_progress: bool = False) -> Non
                             break
                         f.write(chunk)
                         downloaded_size += len(chunk)
+                        elapsed_time = (
+                            time.time() - start_time
+                            if time.time() - start_time > 0
+                            else 1
+                        )
+                        speed = downloaded_size / 1024 / elapsed_time  # KB/s
+                        percent = downloaded_size / total_size if total_size > 0 else 0
+                        await _emit_download_progress(
+                            progress_callback,
+                            {
+                                "url": url,
+                                "downloaded": downloaded_size,
+                                "total": total_size,
+                                "percent": percent,
+                                "speed": speed,
+                            },
+                        )
                         if show_progress:
-                            elapsed_time = time.time() - start_time
-                            speed = downloaded_size / 1024 / elapsed_time  # KB/s
                             print(
-                                f"\rProgress: {downloaded_size / total_size:.2%} Speed: {speed:.2f} KB/s",
+                                f"\rProgress: {percent:.2%} Speed: {speed:.2f} KB/s",
                                 end="",
                             )
+                await _emit_download_progress(
+                    progress_callback,
+                    {
+                        "url": url,
+                        "downloaded": downloaded_size,
+                        "total": total_size,
+                        "percent": 1,
+                        "speed": 0,
+                    },
+                )
     if show_progress:
         print()
 
@@ -268,6 +348,7 @@ async def download_dashboard(
     latest: bool = True,
     version: str | None = None,
     proxy: str | None = None,
+    progress_callback=None,
 ) -> None:
     """下载管理面板文件"""
     if path is None:
@@ -286,6 +367,7 @@ async def download_dashboard(
                 dashboard_release_url,
                 str(zip_path),
                 show_progress=True,
+                progress_callback=progress_callback,
             )
         except BaseException as _:
             if latest:
@@ -312,12 +394,18 @@ async def download_dashboard(
                 dashboard_release_url,
                 str(zip_path),
                 show_progress=True,
+                progress_callback=progress_callback,
             )
     else:
         url = f"https://github.com/AstrBotDevs/astrbot-release-harbour/releases/download/release-{version}/dist.zip"
         logger.info(f"Downloading AstrBot WebUI from {url}")
         if proxy:
             url = f"{proxy}/{url}"
-        await download_file(url, str(zip_path), show_progress=True)
+        await download_file(
+            url,
+            str(zip_path),
+            show_progress=True,
+            progress_callback=progress_callback,
+        )
     with zipfile.ZipFile(zip_path, "r") as z:
         z.extractall(extract_path)
diff --git a/astrbot/core/zip_updator.py b/astrbot/core/zip_updator.py
index 15096cc81..83c7da8e4 100644
--- a/astrbot/core/zip_updator.py
+++ b/astrbot/core/zip_updator.py
@@ -1,6 +1,8 @@
+import inspect
 import os
 import re
 import shutil
+import time
 import zipfile
 from pathlib import Path
 from typing import NoReturn
@@ -53,18 +55,64 @@ class RepoZipUpdator:
         return body[:max_len] + "...[truncated]"
 
     async def _download_file(
-        self, url: str, path: str, timeout: float = 1800.0
+        self,
+        url: str,
+        path: str,
+        timeout: float = 1800.0,
+        progress_callback=None,
     ) -> None:
         target_path = Path(path)
         ensure_dir(target_path.parent)
 
+        async def _emit_progress(payload: dict) -> None:
+            if not progress_callback:
+                return
+            result = progress_callback(payload)
+            if inspect.isawaitable(result):
+                await result
+
         try:
             async with self._create_httpx_client(timeout=timeout) as client:
                 async with client.stream("GET", url) as response:
                     response.raise_for_status()
+                    headers = getattr(response, "headers", {})
+                    total_size = int(headers.get("content-length", 0))
+                    downloaded_size = 0
+                    start_time = time.time()
+                    await _emit_progress(
+                        {
+                            "url": url,
+                            "downloaded": 0,
+                            "total": total_size,
+                            "percent": 0,
+                            "speed": 0,
+                        },
+                    )
                     with target_path.open("wb") as file:
                         async for chunk in response.aiter_bytes(8192):
                             file.write(chunk)
+                            downloaded_size += len(chunk)
+                            elapsed_time = max(time.time() - start_time, 1)
+                            await _emit_progress(
+                                {
+                                    "url": url,
+                                    "downloaded": downloaded_size,
+                                    "total": total_size,
+                                    "percent": downloaded_size / total_size
+                                    if total_size > 0
+                                    else 0,
+                                    "speed": downloaded_size / 1024 / elapsed_time,
+                                },
+                            )
+                    await _emit_progress(
+                        {
+                            "url": url,
+                            "downloaded": downloaded_size,
+                            "total": total_size,
+                            "percent": 1,
+                            "speed": 0,
+                        },
+                    )
         except Exception as e:
             logger.error(f"下载文件失败: {url} -> {target_path}, 错误: {e}")
             if self.rm_on_error and target_path.exists():
diff --git a/astrbot/dashboard/routes/update.py b/astrbot/dashboard/routes/update.py
index b0520c315..210eb2100 100644
--- a/astrbot/dashboard/routes/update.py
+++ b/astrbot/dashboard/routes/update.py
@@ -1,4 +1,5 @@
 import traceback
+import uuid
 
 from quart import request
 
@@ -24,6 +25,7 @@ class UpdateRoute(Route):
         super().__init__(context)
         self.routes = {
             "/update/check": ("GET", self.check_update),
+            "/update/progress": ("GET", self.get_update_progress),
             "/update/releases": ("GET", self.get_releases),
             "/update/do": ("POST", self.update_project),
             "/update/dashboard": ("POST", self.update_dashboard),
@@ -32,8 +34,104 @@ class UpdateRoute(Route):
         }
         self.astrbot_updator = astrbot_updator
         self.core_lifecycle = core_lifecycle
+        self.update_progress: dict[str, dict] = {}
         self.register_routes()
 
+    def _init_update_progress(self, progress_id: str, version: str) -> None:
+        self.update_progress[progress_id] = {
+            "id": progress_id,
+            "status": "running",
+            "stage": "preparing",
+            "version": version or "latest",
+            "message": "正在准备更新...",
+            "overall_percent": 0,
+            "stages": {
+                "dashboard": self._empty_stage("pending"),
+                "core": self._empty_stage("pending"),
+            },
+        }
+
+    @staticmethod
+    def _empty_stage(status: str = "pending") -> dict:
+        return {
+            "status": status,
+            "downloaded": 0,
+            "total": 0,
+            "percent": 0,
+            "speed": 0,
+        }
+
+    def _set_update_stage(
+        self,
+        progress_id: str,
+        stage: str,
+        status: str,
+        message: str,
+        overall_percent: int | None = None,
+    ) -> None:
+        progress = self.update_progress.get(progress_id)
+        if not progress:
+            return
+        progress["stage"] = stage
+        progress["message"] = message
+        progress["stages"].setdefault(stage, self._empty_stage())
+        progress["stages"][stage]["status"] = status
+        if overall_percent is not None:
+            progress["overall_percent"] = overall_percent
+
+    @staticmethod
+    def _normalize_percent(value) -> int:
+        try:
+            percent = float(value or 0)
+        except (TypeError, ValueError):
+            return 0
+        if percent <= 1:
+            percent *= 100
+        return max(0, min(100, int(percent)))
+
+    def _make_progress_callback(
+        self,
+        progress_id: str,
+        stage: str,
+        stage_start: int,
+        stage_weight: int,
+    ):
+        def _callback(payload: dict) -> None:
+            progress = self.update_progress.get(progress_id)
+            if not progress:
+                return
+            stage_percent = self._normalize_percent(payload.get("percent"))
+            progress["stage"] = stage
+            progress["stages"][stage] = {
+                "status": "running" if stage_percent < 100 else "done",
+                "downloaded": payload.get("downloaded", 0),
+                "total": payload.get("total", 0),
+                "percent": stage_percent,
+                "speed": payload.get("speed", 0),
+            }
+            progress["overall_percent"] = min(
+                99,
+                stage_start + int(stage_percent * stage_weight / 100),
+            )
+
+        return _callback
+
+    async def get_update_progress(self):
+        progress_id = request.args.get("id", "")
+        if not progress_id:
+            return Response().error("缺少参数 id。").__dict__
+        progress = self.update_progress.get(progress_id)
+        if not progress:
+            return (
+                Response()
+                .ok(
+                    {"id": progress_id, "status": "idle"},
+                    "没有正在进行的更新。",
+                )
+                .__dict__
+            )
+        return Response().ok(progress).__dict__
+
     async def do_migration(self):
         need_migration = await check_migration_needed_v4(self.core_lifecycle.db)
         if not need_migration:
@@ -89,6 +187,7 @@ class UpdateRoute(Route):
         data = await request.json
         version = data.get("version", "")
         reboot = data.get("reboot", True)
+        progress_id = data.get("progress_id") or uuid.uuid4().hex
         if version == "" or version == "latest":
             latest = True
             version = ""
@@ -99,33 +198,112 @@ class UpdateRoute(Route):
         if proxy:
             proxy = proxy.removesuffix("/")
 
+        self._init_update_progress(progress_id, version)
         try:
+            self._set_update_stage(
+                progress_id,
+                "dashboard",
+                "running",
+                "正在下载 WebUI...",
+                0,
+            )
+            await download_dashboard(
+                latest=latest,
+                version=version,
+                proxy=proxy,
+                progress_callback=self._make_progress_callback(
+                    progress_id,
+                    "dashboard",
+                    0,
+                    45,
+                ),
+            )
+            self._set_update_stage(
+                progress_id,
+                "dashboard",
+                "done",
+                "WebUI 下载完成。",
+                45,
+            )
+
+            self._set_update_stage(
+                progress_id,
+                "core",
+                "running",
+                "正在下载 AstrBot 项目代码...",
+                45,
+            )
             await self.astrbot_updator.update(
                 latest=latest,
                 version=version,
                 proxy=proxy,
+                progress_callback=self._make_progress_callback(
+                    progress_id,
+                    "core",
+                    45,
+                    45,
+                ),
+            )
+            self._set_update_stage(
+                progress_id,
+                "core",
+                "done",
+                "项目代码下载完成。",
+                90,
             )
 
-            try:
-                await download_dashboard(latest=latest, version=version, proxy=proxy)
-            except Exception as e:
-                logger.error(f"下载管理面板文件失败: {e}。")
-
             # pip 更新依赖
+            self._set_update_stage(
+                progress_id,
+                "dependencies",
+                "running",
+                "正在更新依赖...",
+                92,
+            )
             logger.info("更新依赖中...")
             try:
                 await pip_installer.install(requirements_path="requirements.txt")
             except Exception as e:
                 logger.error(f"更新依赖失败: {e}")
+            self._set_update_stage(
+                progress_id,
+                "dependencies",
+                "done",
+                "依赖更新完成。",
+                96,
+            )
 
             if reboot:
+                self._set_update_stage(
+                    progress_id,
+                    "restart",
+                    "running",
+                    "更新成功，正在准备重启...",
+                    98,
+                )
                 await self.core_lifecycle.restart()
+                self.update_progress[progress_id].update(
+                    {
+                        "status": "success",
+                        "stage": "done",
+                        "message": "更新成功，AstrBot 将在 2 秒内全量重启以应用新的代码。",
+                        "overall_percent": 100,
+                    },
+                )
                 ret = (
                     Response()
                     .ok(None, "更新成功，AstrBot 将在 2 秒内全量重启以应用新的代码。")
                     .__dict__
                 )
                 return ret, 200, CLEAR_SITE_DATA_HEADERS
+            self.update_progress[progress_id].update(
+                {
+                    "status": "success",
+                    "stage": "done",
+                    "message": "更新成功，AstrBot 将在下次启动时应用新的代码。",
+                    "overall_percent": 100,
+                },
+            )
             ret = (
                 Response()
                 .ok(None, "更新成功，AstrBot 将在下次启动时应用新的代码。")
@@ -133,6 +311,12 @@ class UpdateRoute(Route):
             )
             return ret, 200, CLEAR_SITE_DATA_HEADERS
         except Exception as e:
+            self.update_progress[progress_id].update(
+                {
+                    "status": "error",
+                    "message": e.__str__(),
+                },
+            )
             logger.error(f"/api/update_project: {traceback.format_exc()}")
             return Response().error(e.__str__()).__dict__
 
diff --git a/dashboard/src/i18n/locales/en-US/core/header.json b/dashboard/src/i18n/locales/en-US/core/header.json
index 07e913e4c..d83f06152 100644
--- a/dashboard/src/i18n/locales/en-US/core/header.json
+++ b/dashboard/src/i18n/locales/en-US/core/header.json
@@ -23,6 +23,7 @@
     "tabs": {
       "release": "😊 Release"
     },
+    "advancedSettings": "Advanced settings",
     "updateToLatest": "Update to Latest Version",
     "preRelease": "Pre-release",
     "preReleaseWarning": {
@@ -45,7 +46,19 @@
       "switch": "Switch"
     },
     "releaseNotes": {
-      "title": "Release Notes"
+      "title": "Release Notes",
+      "latestLabel": "Latest version"
+    },
+    "progress": {
+      "target": "Target version: ",
+      "preparing": "Preparing update...",
+      "dashboard": "Download WebUI",
+      "core": "Download project code",
+      "dependencies": "Updating dependencies...",
+      "restart": "Preparing restart...",
+      "restarting": "Restarting AstrBot",
+      "completed": "Update complete",
+      "failed": "Update failed"
     },
     "redirectConfirm": {
       "title": "Leaving AstrBot",
@@ -75,6 +88,7 @@
       "currentVersion": "Current Version",
       "hasNewVersion": "New version available!",
       "isLatest": "Already the latest version.",
+      "fallback": "Use this to re-download the WebUI if the full update path fails.",
       "downloadAndUpdate": "Download and Update"
     }
   },
diff --git a/dashboard/src/i18n/locales/ru-RU/core/header.json b/dashboard/src/i18n/locales/ru-RU/core/header.json
index eb2ce7f23..3124cd971 100644
--- a/dashboard/src/i18n/locales/ru-RU/core/header.json
+++ b/dashboard/src/i18n/locales/ru-RU/core/header.json
@@ -1,113 +1,127 @@
 {
-    "logoTitle": "Панель управления AstrBot",
-    "version": {
-        "hasNewVersion": "Доступна новая версия AstrBot!",
-        "dashboardHasNewVersion": "Доступна новая версия WebUI!"
-    },
-    "buttons": {
-        "update": "Обновить",
-        "account": "Аккаунт",
-        "theme": {
-            "light": "Светлая тема",
-            "dark": "Темная тема"
-        }
-    },
-    "updateDialog": {
-        "title": "Обновить AstrBot",
-        "currentVersion": "Текущая версия",
-        "status": {
-            "checking": "Проверка обновлений...",
-            "switching": "Переключение версии...",
-            "updating": "Обновление..."
-        },
-        "tabs": {
-            "release": "😊 Релиз"
-        },
-        "updateToLatest": "Обновить до последней версии",
-        "preRelease": "Предварительная версия",
-        "preReleaseWarning": {
-            "title": "Внимание: предварительная версия",
-            "description": "Версии с меткой Pre-release могут содержать неизвестные ошибки. Не рекомендуется использовать в рабочих средах. Если вы обнаружили ошибку, пожалуйста, сообщите о ней в ",
-            "issueLink": "GitHub Issues"
-        },
-        "tip": "💡 ПОДСКАЗКА: ",
-        "tipContinue": "По умолчанию при переключении версии загружаются соответствующие файлы WebUI. Код WebUI находится в директории dashboard, вы можете собрать его самостоятельно с помощью npm.",
-        "dockerTip": "При переключении версии будет предпринята попытка обновить как основной процесс бота, так и панель управления. Если вы используете Docker, вы также можете обновить образ или использовать",
-        "dockerTipLink": "watchtower",
-        "dockerTipContinue": "для автоматического мониторинга и обновления.",
-        "table": {
-            "tag": "Тег",
-            "publishDate": "Дата публикации",
-            "content": "Содержание",
-            "sourceUrl": "Исходный код",
-            "actions": "Действия",
-            "view": "Просмотр",
-            "switch": "Переключить"
-        },
-        "releaseNotes": {
-            "title": "Журнал изменений"
-        },
-        "redirectConfirm": {
-            "title": "Переход по ссылке",
-            "message": "Вы будете перенаправлены на страницу GitHub Releases. Продолжить?",
-            "latestLabel": "Последняя версия",
-            "targetVersion": "Целевая версия:",
-            "currentVersion": "Текущая версия:",
-            "guideTitle": "Рекомендации после перехода:",
-            "guideStep1": "Загрузите пакет, соответствующий архитектуре вашей системы.",
-            "guideStep2": "После завершения установки перезапустите AstrBot.",
-            "guideStep3": "Если вы используете Docker, отдайте приоритет обновлению через образ."
-        },
-        "desktopApp": {
-            "title": "Обновить десктопное приложение",
-            "message": "Проверка и обновление десктопной версии AstrBot.",
-            "currentVersion": "Текущая версия:",
-            "latestVersion": "Последняя версия:",
-            "checking": "Проверка обновлений десктопного приложения...",
-            "hasNewVersion": "Найдена новая версия. Нажмите для подтверждения обновления.",
-            "isLatest": "Установлена последняя версия",
-            "installing": "Загрузка и установка обновления... Приложение будет перезапущено автоматически.",
-            "checkFailed": "Ошибка проверки обновлений. Попробуйте позже.",
-            "installFailed": "Ошибка обновления. Попробуйте позже."
-        },
-        "dashboardUpdate": {
-            "title": "Обновить только панель управления",
-            "currentVersion": "Текущая версия",
-            "hasNewVersion": "Доступна новая версия!",
-            "isLatest": "Установлена последняя версия.",
-            "downloadAndUpdate": "Скачать и обновить"
-        }
-    },
-    "accountDialog": {
-        "title": "Изменить аккаунт",
-        "securityWarning": "Безопасность: Пожалуйста, смените пароль для защиты аккаунта",
-        "securityWarningLegacy": "Новая версия AstrBot улучшила безопасность. Пожалуйста, измените пароль.",
-        "securityWarningUpgrade": "Обнаружено устаревшее хранение пароля. Измените пароль, чтобы завершить обновление безопасности.",
-        "form": {
-            "currentPassword": "Текущий пароль",
-            "newPassword": "Новый пароль",
-            "confirmPassword": "Подтвердите новый пароль",
-            "newUsername": "Новое имя пользователя (опционально)",
-            "passwordHint": "Не менее 8 символов, включая заглавные и строчные буквы, а также цифры",
-            "confirmPasswordHint": "Введите новый пароль еще раз",
-            "usernameHint": "Оставьте пустым, если не хотите менять имя пользователя",
-            "defaultCredentials": "Имя пользователя по умолчанию — astrbot. Начальный пароль генерируется при первом запуске и отображается в консоли."
-        },
-        "validation": {
-            "passwordRequired": "Введите пароль",
-            "passwordMinLength": "Пароль должен быть не менее 8 символов",
-            "passwordUppercase": "Пароль должен содержать хотя бы одну заглавную букву",
-            "passwordLowercase": "Пароль должен содержать хотя бы одну строчную букву",
-            "passwordDigit": "Пароль должен содержать хотя бы одну цифру",
-            "passwordMatch": "Паролы не совпадают",
-            "usernameMinLength": "Имя пользователя должно быть не менее 3 символов"
-        },
-        "actions": {
-            "save": "Сохранить изменения",
-            "cancel": "Отмена"
-        },
-        "messages": {
-            "updateFailed": "Ошибка обновления, попробуйте еще раз"
-        }
+  "logoTitle": "Панель управления AstrBot",
+  "version": {
+    "hasNewVersion": "Доступна новая версия AstrBot!",
+    "dashboardHasNewVersion": "Доступна новая версия WebUI!"
+  },
+  "buttons": {
+    "update": "Обновить",
+    "account": "Аккаунт",
+    "theme": {
+      "light": "Светлая тема",
+      "dark": "Темная тема"
     }
+  },
+  "updateDialog": {
+    "title": "Обновить AstrBot",
+    "currentVersion": "Текущая версия",
+    "status": {
+      "checking": "Проверка обновлений...",
+      "switching": "Переключение версии...",
+      "updating": "Обновление..."
+    },
+    "tabs": {
+      "release": "😊 Релиз"
+    },
+    "advancedSettings": "Расширенные настройки",
+    "updateToLatest": "Обновить до последней версии",
+    "preRelease": "Предварительная версия",
+    "preReleaseWarning": {
+      "title": "Внимание: предварительная версия",
+      "description": "Версии с меткой Pre-release могут содержать неизвестные ошибки. Не рекомендуется использовать в рабочих средах. Если вы обнаружили ошибку, пожалуйста, сообщите о ней в ",
+      "issueLink": "GitHub Issues"
+    },
+    "tip": "💡 ПОДСКАЗКА: ",
+    "tipContinue": "По умолчанию при переключении версии загружаются соответствующие файлы WebUI. Код WebUI находится в директории dashboard, вы можете собрать его самостоятельно с помощью npm.",
+    "dockerTip": "При переключении версии будет предпринята попытка обновить как основной процесс бота, так и панель управления. Если вы используете Docker, вы также можете обновить образ или использовать",
+    "dockerTipLink": "watchtower",
+    "dockerTipContinue": "для автоматического мониторинга и обновления.",
+    "table": {
+      "tag": "Тег",
+      "publishDate": "Дата публикации",
+      "content": "Содержание",
+      "sourceUrl": "Исходный код",
+      "actions": "Действия",
+      "view": "Просмотр",
+      "switch": "Переключить"
+    },
+    "releaseNotes": {
+      "title": "Журнал изменений",
+      "latestLabel": "Последняя версия"
+    },
+    "progress": {
+      "target": "Целевая версия:",
+      "preparing": "Подготовка обновления...",
+      "dashboard": "Загрузка WebUI",
+      "core": "Загрузка кода проекта",
+      "dependencies": "Обновление зависимостей...",
+      "restart": "Подготовка перезапуска...",
+      "restarting": "Перезапуск AstrBot",
+      "completed": "Обновление завершено",
+      "failed": "Ошибка обновления"
+    },
+    "redirectConfirm": {
+      "title": "Переход по ссылке",
+      "message": "Вы будете перенаправлены на страницу GitHub Releases. Продолжить?",
+      "latestLabel": "Последняя версия",
+      "targetVersion": "Целевая версия:",
+      "currentVersion": "Текущая версия:",
+      "guideTitle": "Рекомендации после перехода:",
+      "guideStep1": "Загрузите пакет, соответствующий архитектуре вашей системы.",
+      "guideStep2": "После завершения установки перезапустите AstrBot.",
+      "guideStep3": "Если вы используете Docker, отдайте приоритет обновлению через образ."
+    },
+    "desktopApp": {
+      "title": "Обновить десктопное приложение",
+      "message": "Проверка и обновление десктопной версии AstrBot.",
+      "currentVersion": "Текущая версия:",
+      "latestVersion": "Последняя версия:",
+      "checking": "Проверка обновлений десктопного приложения...",
+      "hasNewVersion": "Найдена новая версия. Нажмите для подтверждения обновления.",
+      "isLatest": "Установлена последняя версия",
+      "installing": "Загрузка и установка обновления... Приложение будет перезапущено автоматически.",
+      "checkFailed": "Ошибка проверки обновлений. Попробуйте позже.",
+      "installFailed": "Ошибка обновления. Попробуйте позже."
+    },
+    "dashboardUpdate": {
+      "title": "Обновить только панель управления",
+      "currentVersion": "Текущая версия",
+      "hasNewVersion": "Доступна новая версия!",
+      "isLatest": "Установлена последняя версия.",
+      "fallback": "Используйте это для повторной загрузки WebUI, если полное обновление завершилось ошибкой.",
+      "downloadAndUpdate": "Скачать и обновить"
+    }
+  },
+  "accountDialog": {
+    "title": "Изменить аккаунт",
+    "securityWarning": "Безопасность: Пожалуйста, смените пароль для защиты аккаунта",
+    "securityWarningLegacy": "Новая версия AstrBot улучшила безопасность. Пожалуйста, измените пароль.",
+    "securityWarningUpgrade": "Обнаружено устаревшее хранение пароля. Измените пароль, чтобы завершить обновление безопасности.",
+    "form": {
+      "currentPassword": "Текущий пароль",
+      "newPassword": "Новый пароль",
+      "confirmPassword": "Подтвердите новый пароль",
+      "newUsername": "Новое имя пользователя (опционально)",
+      "passwordHint": "Не менее 8 символов, включая заглавные и строчные буквы, а также цифры",
+      "confirmPasswordHint": "Введите новый пароль еще раз",
+      "usernameHint": "Оставьте пустым, если не хотите менять имя пользователя",
+      "defaultCredentials": "Имя пользователя по умолчанию — astrbot. Начальный пароль генерируется при первом запуске и отображается в консоли."
+    },
+    "validation": {
+      "passwordRequired": "Введите пароль",
+      "passwordMinLength": "Пароль должен быть не менее 8 символов",
+      "passwordUppercase": "Пароль должен содержать хотя бы одну заглавную букву",
+      "passwordLowercase": "Пароль должен содержать хотя бы одну строчную букву",
+      "passwordDigit": "Пароль должен содержать хотя бы одну цифру",
+      "passwordMatch": "Паролы не совпадают",
+      "usernameMinLength": "Имя пользователя должно быть не менее 3 символов"
+    },
+    "actions": {
+      "save": "Сохранить изменения",
+      "cancel": "Отмена"
+    },
+    "messages": {
+      "updateFailed": "Ошибка обновления, попробуйте еще раз"
+    }
+  }
 }
diff --git a/dashboard/src/i18n/locales/zh-CN/core/header.json b/dashboard/src/i18n/locales/zh-CN/core/header.json
index 9be4af2a5..8897ad0af 100644
--- a/dashboard/src/i18n/locales/zh-CN/core/header.json
+++ b/dashboard/src/i18n/locales/zh-CN/core/header.json
@@ -23,6 +23,7 @@
     "tabs": {
       "release": "😊 正式版"
     },
+    "advancedSettings": "高级设置",
     "updateToLatest": "更新到最新版本",
     "preRelease": "预发布",
     "preReleaseWarning": {
@@ -45,7 +46,19 @@
       "switch": "切换"
     },
     "releaseNotes": {
-      "title": "更新日志"
+      "title": "更新日志",
+      "latestLabel": "最新版本"
+    },
+    "progress": {
+      "target": "目标版本：",
+      "preparing": "正在准备更新...",
+      "dashboard": "下载 WebUI",
+      "core": "下载项目代码",
+      "dependencies": "正在更新依赖...",
+      "restart": "正在准备重启...",
+      "restarting": "正在重启 AstrBot",
+      "completed": "更新完成",
+      "failed": "更新失败"
     },
     "redirectConfirm": {
       "title": "即将跳转",
@@ -75,6 +88,7 @@
       "currentVersion": "当前版本",
       "hasNewVersion": "有新版本！",
       "isLatest": "已经是最新版本了。",
+      "fallback": "完整更新异常时，可仅重新下载 WebUI 作为兜底。",
       "downloadAndUpdate": "下载并更新"
     }
   },
diff --git a/dashboard/src/layouts/full/vertical-header/VerticalHeader.vue b/dashboard/src/layouts/full/vertical-header/VerticalHeader.vue
index a1fb67eb8..c41b566e7 100644
--- a/dashboard/src/layouts/full/vertical-header/VerticalHeader.vue
+++ b/dashboard/src/layouts/full/vertical-header/VerticalHeader.vue
@@ -1,5 +1,5 @@
 <script setup lang="ts">
-import { ref, computed, watch, onMounted } from "vue";
+import { ref, computed, watch, onMounted, onUnmounted } from "vue";
 import { useCustomizerStore } from "@/stores/customizer";
 import axios from "axios";
 import Logo from "@/components/shared/Logo.vue";
@@ -47,10 +47,54 @@ let hasNewVersion = ref(false);
 let botCurrVersion = ref("");
 let dashboardHasNewVersion = ref(false);
 let dashboardCurrentVersion = ref("");
-let version = ref("");
 let releases = ref([]);
+let releasesLoading = ref(false);
 let updatingDashboardLoading = ref(false);
 let installLoading = ref(false);
+let showAdvancedUpdateSettings = ref(false);
+let restartWaiting = ref(false);
+let restartStartTime = ref<number | string | null>(null);
+let restartPollTimer: ReturnType<typeof setInterval> | null = null;
+type DownloadStageStatus = "pending" | "running" | "done" | "error";
+type DownloadStage = {
+  status: DownloadStageStatus;
+  downloaded: number;
+  total: number;
+  percent: number;
+  speed: number;
+};
+type UpdateProgress = {
+  id: string;
+  status: "idle" | "running" | "success" | "error";
+  stage: string;
+  version: string;
+  message: string;
+  overall_percent: number;
+  stages: Record<string, DownloadStage>;
+};
+const createEmptyDownloadStage = (
+  status: DownloadStageStatus = "pending",
+): DownloadStage => ({
+  status,
+  downloaded: 0,
+  total: 0,
+  percent: 0,
+  speed: 0,
+});
+const createEmptyUpdateProgress = (): UpdateProgress => ({
+  id: "",
+  status: "idle",
+  stage: "preparing",
+  version: "",
+  message: "",
+  overall_percent: 0,
+  stages: {
+    dashboard: createEmptyDownloadStage(),
+    core: createEmptyDownloadStage(),
+  },
+});
+let updateProgress = ref<UpdateProgress>(createEmptyUpdateProgress());
+let updateProgressTimer: ReturnType<typeof setInterval> | null = null;
 const isDesktopReleaseMode = ref(
   typeof window !== "undefined" && !!window.astrbotDesktop?.isDesktop,
 );
@@ -98,9 +142,49 @@ const releasesHeader = computed(() => [
     key: "published_at",
   },
   { title: t("core.header.updateDialog.table.content"), key: "body" },
-  { title: t("core.header.updateDialog.table.sourceUrl"), key: "zipball_url" },
   { title: t("core.header.updateDialog.table.actions"), key: "switch" },
 ]);
+const firstReleasePageItems = computed(() => releases.value.slice(0, 6));
+const firstReleasePageHasPreRelease = computed(() =>
+  firstReleasePageItems.value.some((item: any) => isPreRelease(item.tag_name)),
+);
+const updateStageItems = computed(() => [
+  {
+    key: "dashboard",
+    title: t("core.header.updateDialog.progress.dashboard"),
+    progress:
+      updateProgress.value.stages.dashboard || createEmptyDownloadStage(),
+  },
+  {
+    key: "core",
+    title: t("core.header.updateDialog.progress.core"),
+    progress: updateProgress.value.stages.core || createEmptyDownloadStage(),
+  },
+]);
+const updateProgressMessage = computed(() => {
+  if (updateProgress.value.status === "error") {
+    return (
+      updateProgress.value.message ||
+      t("core.header.updateDialog.progress.failed")
+    );
+  }
+  if (updateProgress.value.status === "success") {
+    return (
+      updateProgress.value.message ||
+      t("core.header.updateDialog.progress.completed")
+    );
+  }
+  if (updateProgress.value.stage === "dependencies") {
+    return t("core.header.updateDialog.progress.dependencies");
+  }
+  if (updateProgress.value.stage === "restart") {
+    return t("core.header.updateDialog.progress.restart");
+  }
+  return (
+    updateProgress.value.message ||
+    t("core.header.updateDialog.progress.preparing")
+  );
+});
 // Form validation
 const formValid = ref(true);
 const passwordRules = computed(() => [
@@ -262,7 +346,9 @@ function accountEdit() {
 
   const currentPasswordValue = password.value ? password.value : "";
   const newPasswordValue = newPassword.value ? newPassword.value : "";
-  const confirmPasswordValue = confirmPassword.value ? confirmPassword.value : "";
+  const confirmPasswordValue = confirmPassword.value
+    ? confirmPassword.value
+    : "";
 
   axios
     .post("/api/auth/account/edit", {
@@ -324,7 +410,10 @@ function getVersion() {
         accountWarningUpgrade.value = !!password_upgrade_required;
         accountWarningLegacy.value =
           !!legacy_pwd_hint && !password_upgrade_required;
-        if (change_pwd_hint || (legacy_pwd_hint && !password_upgrade_required)) {
+        if (
+          change_pwd_hint ||
+          (legacy_pwd_hint && !password_upgrade_required)
+        ) {
           localStorage.setItem("change_pwd_hint", "true");
         } else {
           localStorage.removeItem("change_pwd_hint");
@@ -396,6 +485,7 @@ function checkUpdate() {
 }
 
 function getReleases() {
+  releasesLoading.value = true;
   return axios
     .get("/api/update/releases")
     .then((res) => {
@@ -406,31 +496,210 @@ function getReleases() {
     })
     .catch((err) => {
       console.log(err);
+    })
+    .finally(() => {
+      releasesLoading.value = false;
     });
 }
 
-function switchVersion(version: string) {
+function formatDownloadSize(value: number) {
+  if (!value || value <= 0) {
+    return "-";
+  }
+  if (value < 1024 * 1024) {
+    return `${(value / 1024).toFixed(1)} KB`;
+  }
+  return `${(value / 1024 / 1024).toFixed(1)} MB`;
+}
+
+function formatDownloadSpeed(value: number) {
+  if (!value || value <= 0) {
+    return "-";
+  }
+  if (value < 1024) {
+    return `${value.toFixed(1)} KB/s`;
+  }
+  return `${(value / 1024).toFixed(1)} MB/s`;
+}
+
+function getStageStatusColor(status: DownloadStageStatus) {
+  if (status === "done") {
+    return "success";
+  }
+  if (status === "running") {
+    return "primary";
+  }
+  if (status === "error") {
+    return "error";
+  }
+  return "grey";
+}
+
+function getStageStatusIcon(status: DownloadStageStatus) {
+  if (status === "done") {
+    return "mdi-check-circle";
+  }
+  if (status === "running") {
+    return "mdi-progress-download";
+  }
+  if (status === "error") {
+    return "mdi-alert-circle";
+  }
+  return "mdi-circle-outline";
+}
+
+function stopUpdateProgressPolling() {
+  if (updateProgressTimer) {
+    clearInterval(updateProgressTimer);
+    updateProgressTimer = null;
+  }
+}
+
+function stopRestartPolling() {
+  if (restartPollTimer) {
+    clearInterval(restartPollTimer);
+    restartPollTimer = null;
+  }
+}
+
+async function fetchAstrBotStartTime() {
+  const res = await axios.get("/api/stat/start-time", { timeout: 3000 });
+  const startTime = res.data?.data?.start_time ?? null;
+  commonStore.startTime = startTime;
+  return startTime;
+}
+
+function waitForAstrBotRestart(initialStartTime: number | string | null) {
+  if (restartWaiting.value) {
+    return;
+  }
+  stopRestartPolling();
+  restartWaiting.value = true;
+  restartStartTime.value = initialStartTime;
+  updateProgress.value = {
+    ...updateProgress.value,
+    stage: "restart",
+    status: "success",
+    message: t("core.header.updateDialog.progress.restarting"),
+    overall_percent: 100,
+  };
+
+  const poll = async () => {
+    try {
+      const currentStartTime = await fetchAstrBotStartTime();
+      if (
+        initialStartTime !== null &&
+        currentStartTime !== null &&
+        currentStartTime !== initialStartTime
+      ) {
+        stopRestartPolling();
+        restartWaiting.value = false;
+        window.location.reload();
+      }
+    } catch (_error) {
+      // Backend may be unavailable while the process is restarting.
+    }
+  };
+
+  restartPollTimer = setInterval(() => {
+    void poll();
+  }, 1000);
+}
+
+function applyUpdateProgress(payload: UpdateProgress) {
+  updateProgress.value = {
+    ...createEmptyUpdateProgress(),
+    ...payload,
+    stages: {
+      ...createEmptyUpdateProgress().stages,
+      ...(payload.stages || {}),
+    },
+  };
+  if (payload.status === "success" || payload.status === "error") {
+    stopUpdateProgressPolling();
+  }
+  if (payload.status === "success") {
+    waitForAstrBotRestart(restartStartTime.value);
+  }
+}
+
+function startUpdateProgressPolling(progressId: string) {
+  stopUpdateProgressPolling();
+  const poll = () => {
+    axios
+      .get("/api/update/progress", { params: { id: progressId } })
+      .then((res) => {
+        if (res.data?.data) {
+          applyUpdateProgress(res.data.data);
+        }
+      })
+      .catch((err) => {
+        console.log(err);
+      });
+  };
+  poll();
+  updateProgressTimer = setInterval(poll, 800);
+}
+
+async function switchVersion(targetVersion: string) {
+  const progressId =
+    typeof crypto !== "undefined" && "randomUUID" in crypto
+      ? crypto.randomUUID()
+      : `${Date.now()}-${Math.random().toString(16).slice(2)}`;
+  let initialStartTime: number | string | null = null;
+  updateProgress.value = {
+    ...createEmptyUpdateProgress(),
+    id: progressId,
+    status: "running",
+    version: targetVersion,
+    message: t("core.header.updateDialog.progress.preparing"),
+  } as UpdateProgress;
   updateStatus.value = t("core.header.updateDialog.status.switching");
   installLoading.value = true;
+
+  try {
+    initialStartTime = await fetchAstrBotStartTime();
+  } catch (_error) {
+    initialStartTime = commonStore.getStartTime();
+  }
+  restartStartTime.value = initialStartTime;
+  startUpdateProgressPolling(progressId);
+
   axios
     .post("/api/update/do", {
-      version: version,
+      version: targetVersion,
       proxy: getSelectedGitHubProxy(),
+      progress_id: progressId,
     })
     .then((res) => {
       updateStatus.value = res.data.message;
+      updateProgress.value = {
+        ...updateProgress.value,
+        status:
+          res.data.status === "ok" ? "success" : updateProgress.value.status,
+        message: res.data.message,
+        overall_percent:
+          res.data.status === "ok" ? 100 : updateProgress.value.overall_percent,
+      };
       if (res.data.status == "ok") {
-        setTimeout(() => {
-          window.location.reload();
-        }, 1000);
+        waitForAstrBotRestart(initialStartTime);
       }
     })
     .catch((err) => {
       console.log(err);
       updateStatus.value = err;
+      updateProgress.value = {
+        ...updateProgress.value,
+        status: "error",
+        message:
+          err?.response?.data?.message ||
+          err?.message ||
+          t("core.header.updateDialog.progress.failed"),
+      };
     })
     .finally(() => {
       installLoading.value = false;
+      stopUpdateProgressPolling();
     });
 }
 
@@ -486,6 +755,11 @@ initPasswordWarningFromStorage();
 commonStore.createEventSource(); // log
 commonStore.getStartTime();
 
+onUnmounted(() => {
+  stopUpdateProgressPolling();
+  stopRestartPolling();
+});
+
 // 视图模式切换
 onMounted(() => {
   // 初次加載時保存當前路由
@@ -865,12 +1139,14 @@ onMounted(async () => {
     <!-- 更新对话框 -->
     <v-dialog
       v-model="updateStatusDialog"
-      :width="$vuetify.display.smAndDown ? '100%' : '1200'"
+      :width="$vuetify.display.smAndDown ? '100%' : '920'"
       :fullscreen="$vuetify.display.xs"
     >
       <v-card>
         <v-card-title class="mobile-card-title">
-          <span class="text-h5">{{ t("core.header.updateDialog.title") }}</span>
+          <span class="text-h3 pa-4">{{
+            t("core.header.updateDialog.title")
+          }}</span>
           <v-btn
             v-if="$vuetify.display.xs"
             icon
@@ -881,62 +1157,142 @@ onMounted(async () => {
         </v-card-title>
         <v-card-text>
           <v-container>
-            <v-progress-linear
-              v-show="installLoading"
-              class="mb-4"
-              indeterminate
-              color="primary"
-            ></v-progress-linear>
-
-            <div>
-              <h1 style="display: inline-block">{{ botCurrVersion }}</h1>
-              <small style="margin-left: 4px">{{ updateStatus }}</small>
+            <div class="update-summary">
+              <div>
+                <div class="text-caption text-medium-emphasis">
+                  {{ t("core.header.updateDialog.currentVersion") }}
+                </div>
+                <div class="text-h2 font-weight-bold">{{ botCurrVersion }}</div>
+              </div>
+              <v-chip
+                :color="hasNewVersion ? 'primary' : 'success'"
+                variant="tonal"
+                size="small"
+              >
+                {{
+                  hasNewVersion
+                    ? t("core.header.version.hasNewVersion")
+                    : updateStatus
+                }}
+              </v-chip>
             </div>
 
             <div
-              v-if="releaseMessage"
-              style="
-                background-color: #646cff24;
-                padding: 16px;
-                border-radius: 10px;
-                font-size: 14px;
-                max-height: 400px;
-                overflow-y: auto;
-              "
+              v-if="installLoading || updateProgress.status !== 'idle'"
+              class="update-progress-panel mt-5"
             >
-              <MarkdownRender
-                :content="releaseMessage"
-                :typewriter="false"
-                class="markdown-content"
-              />
+              <div v-if="restartWaiting" class="restart-waiting-panel">
+                <v-progress-circular
+                  indeterminate
+                  color="primary"
+                  size="42"
+                  width="4"
+                ></v-progress-circular>
+                <div class="text-subtitle-1 font-weight-medium">
+                  {{ t("core.header.updateDialog.progress.restarting") }}
+                </div>
+              </div>
+
+              <template v-else>
+                <div class="d-flex align-center justify-space-between mb-2">
+                  <div>
+                    <div class="text-subtitle-1 font-weight-medium">
+                      {{ updateProgressMessage }}
+                    </div>
+                    <div class="text-caption text-medium-emphasis">
+                      {{ t("core.header.updateDialog.progress.target") }}
+                      {{ updateProgress.version || "latest" }}
+                    </div>
+                  </div>
+                  <div class="text-h6 font-weight-bold">
+                    {{ updateProgress.overall_percent }}%
+                  </div>
+                </div>
+                <v-progress-linear
+                  :model-value="updateProgress.overall_percent"
+                  height="8"
+                  rounded
+                  color="primary"
+                ></v-progress-linear>
+
+                <div class="update-stage-list mt-4">
+                  <div
+                    v-for="stage in updateStageItems"
+                    :key="stage.key"
+                    class="update-stage-row"
+                  >
+                    <v-icon
+                      :icon="getStageStatusIcon(stage.progress.status)"
+                      :color="getStageStatusColor(stage.progress.status)"
+                      size="22"
+                    ></v-icon>
+                    <div class="update-stage-content">
+                      <div class="d-flex align-center justify-space-between">
+                        <span class="font-weight-medium">{{
+                          stage.title
+                        }}</span>
+                        <span class="text-caption">
+                          {{ stage.progress.percent }}%
+                        </span>
+                      </div>
+                      <v-progress-linear
+                        :model-value="stage.progress.percent"
+                        height="5"
+                        rounded
+                        :color="getStageStatusColor(stage.progress.status)"
+                        class="mt-2"
+                      ></v-progress-linear>
+                      <div class="update-stage-meta">
+                        <span>
+                          {{ formatDownloadSize(stage.progress.downloaded) }} /
+                          {{ formatDownloadSize(stage.progress.total) }}
+                        </span>
+                        <span>{{
+                          formatDownloadSpeed(stage.progress.speed)
+                        }}</span>
+                      </div>
+                    </div>
+                  </div>
+                </div>
+              </template>
             </div>
 
-            <div class="mb-4 mt-4">
-              <small
-                >{{ t("core.header.updateDialog.tip") }}
-                {{ t("core.header.updateDialog.tipContinue") }}</small
-              >
+            <div v-if="releaseMessage && !installLoading" class="mt-5">
+              <div class="d-flex align-center justify-space-between mb-2">
+                <h3 class="text-subtitle-1 font-weight-medium">
+                  {{ t("core.header.updateDialog.releaseNotes.title") }}
+                </h3>
+                <v-btn
+                  variant="text"
+                  size="small"
+                  @click="
+                    openReleaseNotesDialog(
+                      releaseMessage,
+                      t('core.header.updateDialog.releaseNotes.latestLabel'),
+                    )
+                  "
+                >
+                  {{ t("core.header.updateDialog.table.view") }}
+                </v-btn>
+              </div>
+              <div class="release-message-preview">
+                <MarkdownRender
+                  :content="releaseMessage"
+                  :typewriter="false"
+                  class="markdown-content"
+                />
+              </div>
             </div>
 
             <!-- 发行版 -->
-            <div>
-              <div class="mb-4">
-                <small
-                  >{{ t("core.header.updateDialog.dockerTip") }}
-                  <a href="https://containrrr.dev/watchtower/usage-overview/">{{
-                    t("core.header.updateDialog.dockerTipLink")
-                  }}</a>
-                  {{ t("core.header.updateDialog.dockerTipContinue") }}</small
-                >
-              </div>
-
+            <div class="mt-5">
               <v-alert
-                v-if="
-                  releases.some((item: any) => isPreRelease(item['tag_name']))
-                "
+                v-if="!installLoading && firstReleasePageHasPreRelease"
                 type="warning"
                 variant="tonal"
                 border="start"
+                density="compact"
+                class="mb-4"
               >
                 <template v-slot:prepend>
                   <v-icon>mdi-alert-circle-outline</v-icon>
@@ -965,7 +1321,9 @@ onMounted(async () => {
                 :headers="releasesHeader"
                 :items="releases"
                 item-key="name"
-                :items-per-page="8"
+                :items-per-page="6"
+                density="comfortable"
+                :loading="releasesLoading"
               >
                 <template v-slot:item.tag_name="{ item }: { item: any }">
                   <div class="d-flex align-center">
@@ -1002,9 +1360,10 @@ onMounted(async () => {
                 >
                   <v-btn
                     @click="switchVersion(item.tag_name)"
-                    rounded="xl"
-                    variant="plain"
+                    variant="tonal"
                     color="primary"
+                    size="small"
+                    :disabled="installLoading"
                   >
                     {{ t("core.header.updateDialog.table.switch") }}
                   </v-btn>
@@ -1012,45 +1371,66 @@ onMounted(async () => {
               </v-data-table>
             </div>
 
-            <v-divider class="mt-4 mb-4"></v-divider>
-            <div style="margin-top: 16px">
-              <h3 class="mb-4">
-                {{ t("core.header.updateDialog.dashboardUpdate.title") }}
-              </h3>
-              <div class="mb-4">
-                <small
-                  >{{
-                    t("core.header.updateDialog.dashboardUpdate.currentVersion")
-                  }}
-                  {{ dashboardCurrentVersion }}</small
-                >
-                <br />
-              </div>
-
-              <div class="mb-4">
-                <p v-if="dashboardHasNewVersion">
-                  {{
-                    t("core.header.updateDialog.dashboardUpdate.hasNewVersion")
-                  }}
-                </p>
-                <p v-else="dashboardHasNewVersion">
-                  {{ t("core.header.updateDialog.dashboardUpdate.isLatest") }}
-                </p>
-              </div>
-
-              <v-btn
-                color="primary"
-                style="border-radius: 10px"
-                @click="updateDashboard()"
-                :disabled="!dashboardHasNewVersion"
-                :loading="updatingDashboardLoading"
+            <div v-if="!installLoading" class="advanced-update-settings mt-5">
+              <button
+                class="advanced-settings-toggle"
+                type="button"
+                @click="
+                  showAdvancedUpdateSettings = !showAdvancedUpdateSettings
+                "
               >
-                {{
-                  t(
-                    "core.header.updateDialog.dashboardUpdate.downloadAndUpdate",
-                  )
-                }}
-              </v-btn>
+                <span>{{
+                  t("core.header.updateDialog.advancedSettings")
+                }}</span>
+                <v-icon
+                  :icon="
+                    showAdvancedUpdateSettings
+                      ? 'mdi-chevron-down'
+                      : 'mdi-chevron-right'
+                  "
+                  size="20"
+                ></v-icon>
+              </button>
+
+              <div
+                v-if="showAdvancedUpdateSettings"
+                class="dashboard-update-banner mt-3"
+              >
+                <div>
+                  <div class="font-weight-medium">
+                    {{ t("core.header.updateDialog.dashboardUpdate.title") }}
+                  </div>
+                  <div class="text-caption text-medium-emphasis">
+                    {{
+                      t(
+                        "core.header.updateDialog.dashboardUpdate.currentVersion",
+                      )
+                    }}
+                    {{ dashboardCurrentVersion }}
+                  </div>
+                  <div class="text-caption text-medium-emphasis">
+                    {{
+                      dashboardHasNewVersion
+                        ? t(
+                            "core.header.updateDialog.dashboardUpdate.hasNewVersion",
+                          )
+                        : t("core.header.updateDialog.dashboardUpdate.fallback")
+                    }}
+                  </div>
+                </div>
+                <v-btn
+                  color="primary"
+                  variant="tonal"
+                  @click="updateDashboard()"
+                  :loading="updatingDashboardLoading"
+                >
+                  {{
+                    t(
+                      "core.header.updateDialog.dashboardUpdate.downloadAndUpdate",
+                    )
+                  }}
+                </v-btn>
+              </div>
             </div>
           </v-container>
         </v-card-text>
@@ -1070,7 +1450,7 @@ onMounted(async () => {
     <!-- Release Notes Modal -->
     <v-dialog v-model="releaseNotesDialog" max-width="800">
       <v-card>
-        <v-card-title class="text-h5">
+        <v-card-title class="text-h3 pa-4">
           {{ t("core.header.updateDialog.releaseNotes.title") }}:
           {{ selectedReleaseTag }}
         </v-card-title>
@@ -1463,6 +1843,102 @@ onMounted(async () => {
   align-items: center;
 }
 
+.update-summary {
+  display: flex;
+  justify-content: space-between;
+  align-items: center;
+  gap: 16px;
+}
+
+.update-progress-panel,
+.dashboard-update-banner,
+.release-message-preview {
+  border: 1px solid rgba(var(--v-border-color), var(--v-border-opacity));
+  border-radius: 8px;
+  padding: 16px;
+}
+
+.release-message-preview {
+  max-height: 220px;
+  overflow: hidden;
+  position: relative;
+}
+
+.release-message-preview::after {
+  content: "";
+  position: absolute;
+  right: 0;
+  bottom: 0;
+  left: 0;
+  height: 56px;
+  background: linear-gradient(
+    to bottom,
+    rgba(var(--v-theme-surface), 0),
+    rgb(var(--v-theme-surface))
+  );
+  pointer-events: none;
+}
+
+.dashboard-update-banner {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 16px;
+}
+
+.advanced-settings-toggle {
+  display: inline-flex;
+  align-items: center;
+  gap: 4px;
+  border: 0;
+  border-radius: 6px;
+  background: transparent;
+  color: rgb(var(--v-theme-on-surface));
+  cursor: pointer;
+  font: inherit;
+  font-weight: 500;
+  padding: 8px 0;
+  text-align: left;
+}
+
+.advanced-settings-toggle:hover {
+  color: rgb(var(--v-theme-primary));
+}
+
+.restart-waiting-panel {
+  display: flex;
+  flex-direction: column;
+  align-items: center;
+  gap: 12px;
+  padding: 18px 0 22px;
+}
+
+.update-stage-list {
+  display: flex;
+  flex-direction: column;
+  gap: 14px;
+}
+
+.update-stage-row {
+  display: flex;
+  align-items: flex-start;
+  gap: 12px;
+}
+
+.update-stage-content {
+  flex: 1;
+  min-width: 0;
+}
+
+.update-stage-meta {
+  display: flex;
+  justify-content: space-between;
+  gap: 12px;
+  margin-top: 6px;
+  color: rgba(var(--v-theme-on-surface), 0.62);
+  font-size: 12px;
+}
+
 /* 移动端样式优化 */
 @media (max-width: 600px) {
   .logo-text {
@@ -1501,5 +1977,11 @@ onMounted(async () => {
   .v-btn-toggle .v-icon {
     font-size: 16px;
   }
+
+  .update-summary,
+  .dashboard-update-banner {
+    align-items: stretch;
+    flex-direction: column;
+  }
 }
 </style>
diff --git a/tests/test_dashboard.py b/tests/test_dashboard.py
index 93aff4fd5..295b8c1e5 100644
--- a/tests/test_dashboard.py
+++ b/tests/test_dashboard.py
@@ -1738,13 +1738,22 @@ async def test_do_update(
     # Use a temporary path for the mock update to avoid side effects
     temp_release_dir = tmp_path_factory.mktemp("release")
     release_path = temp_release_dir / "astrbot"
+    calls = []
 
     async def mock_update(*args, **kwargs):
         """Mocks the update process by creating a directory in the temp path."""
+        calls.append("core")
+        callback = kwargs.get("progress_callback")
+        if callback:
+            callback({"downloaded": 10, "total": 10, "percent": 1, "speed": 1})
         os.makedirs(release_path, exist_ok=True)
 
     async def mock_download_dashboard(*args, **kwargs):
         """Mocks the dashboard download to prevent network access."""
+        calls.append("dashboard")
+        callback = kwargs.get("progress_callback")
+        if callback:
+            callback({"downloaded": 10, "total": 10, "percent": 1, "speed": 1})
         return
 
     async def mock_pip_install(*args, **kwargs):
@@ -1764,12 +1773,22 @@ async def test_do_update(
     response = await test_client.post(
         "/api/update/do",
         headers=authenticated_header,
-        json={"version": "v3.4.0", "reboot": False},
+        json={"version": "v3.4.0", "reboot": False, "progress_id": "test-progress"},
     )
     assert response.status_code == 200
     data = await response.get_json()
     assert data["status"] == "ok"
     assert os.path.exists(release_path)
+    assert calls[:2] == ["dashboard", "core"]
+
+    progress_response = await test_client.get(
+        "/api/update/progress?id=test-progress",
+        headers=authenticated_header,
+    )
+    progress_data = await progress_response.get_json()
+    assert progress_data["status"] == "ok"
+    assert progress_data["data"]["status"] == "success"
+    assert progress_data["data"]["overall_percent"] == 100
 
 
 @pytest.mark.asyncio

From 93428a79765d775283964b763857e833ca36ff86 Mon Sep 17 00:00:00 2001
From: Soulter <905617992@qq.com>
Date: Thu, 14 May 2026 00:45:37 +0800
Subject: [PATCH 28/51] feat: add initial dashboard password resolution from
 environment variable

---
 astrbot/core/config/astrbot_config.py | 12 ++++++-
 tests/unit/test_config.py             | 47 +++++++++++++++++++++++++++
 2 files changed, 58 insertions(+), 1 deletion(-)

diff --git a/astrbot/core/config/astrbot_config.py b/astrbot/core/config/astrbot_config.py
index e23c5961e..4d62becb5 100644
--- a/astrbot/core/config/astrbot_config.py
+++ b/astrbot/core/config/astrbot_config.py
@@ -8,11 +8,13 @@ from astrbot.core.utils.auth_password import (
     generate_dashboard_password,
     hash_dashboard_password,
     hash_legacy_dashboard_password,
+    validate_dashboard_password,
 )
 
 from .default import DEFAULT_CONFIG, DEFAULT_VALUE_MAP
 
 ASTRBOT_CONFIG_PATH = os.path.join(get_astrbot_data_path(), "cmd_config.json")
+DASHBOARD_INITIAL_PASSWORD_ENV = "ASTRBOT_DASHBOARD_INITIAL_PASSWORD"
 logger = logging.getLogger("astrbot")
 
 
@@ -97,7 +99,7 @@ class AstrBotConfig(dict):
         self.update(conf)
 
     def _reset_generated_dashboard_password(self, conf: dict) -> None:
-        generated_password = generate_dashboard_password()
+        generated_password = self._resolve_initial_dashboard_password()
         conf["dashboard"]["pbkdf2_password"] = hash_dashboard_password(
             generated_password
         )
@@ -117,6 +119,14 @@ class AstrBotConfig(dict):
             True,
         )
 
+    @staticmethod
+    def _resolve_initial_dashboard_password() -> str:
+        env_password = os.environ.get(DASHBOARD_INITIAL_PASSWORD_ENV)
+        if env_password is None:
+            return generate_dashboard_password()
+        validate_dashboard_password(env_password)
+        return env_password
+
     def _config_schema_to_default_config(self, schema: dict) -> dict:
         """将 Schema 转换成 Config"""
         conf = {}
diff --git a/tests/unit/test_config.py b/tests/unit/test_config.py
index c9c7e59b4..7afe82ebe 100644
--- a/tests/unit/test_config.py
+++ b/tests/unit/test_config.py
@@ -229,6 +229,53 @@ class TestAstrBotConfigLoad:
             generated_password,
         )
 
+    def test_empty_dashboard_password_uses_initial_password_env(
+        self, temp_config_path, monkeypatch
+    ):
+        """Test that the generated dashboard password can be provided by env."""
+        env_password = "CustomInitial123"
+        monkeypatch.setenv("ASTRBOT_DASHBOARD_INITIAL_PASSWORD", env_password)
+        default_config = {
+            "dashboard": {
+                "username": "astrbot",
+                "password": "",
+            },
+        }
+
+        config = AstrBotConfig(
+            config_path=temp_config_path,
+            default_config=default_config,
+        )
+
+        assert getattr(config, "_generated_dashboard_password", None) == env_password
+        assert verify_dashboard_password(
+            config["dashboard"]["pbkdf2_password"],
+            env_password,
+        )
+        assert verify_dashboard_password(
+            config["dashboard"]["password"],
+            env_password,
+        )
+        assert config["dashboard"]["password_change_required"] is True
+
+    def test_initial_dashboard_password_env_must_be_valid(
+        self, temp_config_path, monkeypatch
+    ):
+        """Test that weak env-provided initial passwords fail fast."""
+        monkeypatch.setenv("ASTRBOT_DASHBOARD_INITIAL_PASSWORD", "weak")
+        default_config = {
+            "dashboard": {
+                "username": "astrbot",
+                "password": "",
+            },
+        }
+
+        with pytest.raises(ValueError, match="Password must be at least"):
+            AstrBotConfig(
+                config_path=temp_config_path,
+                default_config=default_config,
+            )
+
     def test_legacy_password_change_required_rotates_and_keeps_config_flag(
         self, temp_config_path
     ):

From e05dd650ab4bc37df1edcf4884326a46baec5362 Mon Sep 17 00:00:00 2001
From: Soulter <905617992@qq.com>
Date: Thu, 14 May 2026 00:48:15 +0800
Subject: [PATCH 29/51] feat(auth): add legacy password login failure message
 and FAQ guidance for upgrade issues

---
 astrbot/dashboard/routes/auth.py |  9 +++++++
 docs/en/faq.md                   | 12 +++++++++
 docs/zh/faq.md                   | 12 +++++++++
 tests/test_dashboard.py          | 42 ++++++++++++++++++++++++++++++++
 4 files changed, 75 insertions(+)

diff --git a/astrbot/dashboard/routes/auth.py b/astrbot/dashboard/routes/auth.py
index a9ba692ba..2824f7ee6 100644
--- a/astrbot/dashboard/routes/auth.py
+++ b/astrbot/dashboard/routes/auth.py
@@ -38,6 +38,13 @@ DEFAULT_PASSWORD_LOGIN_FAILURE_MESSAGE = (
     "随机强密码。请使用日志中提供的的初始密码来登录。了解更多："
     "https://docs.astrbot.app/faq.html"
 )
+LEGACY_PASSWORD_LOGIN_FAILURE_MESSAGE = (
+    "Incorrect username or password. If you cannot log in after upgrading "
+    "AstrBot even though the password is correct, see "
+    "https://docs.astrbot.app/en/faq.html\n\n"
+    "用户名或密码错误。如果你在升级 AstrBot 后遇到了密码正确但无法登录的情况，"
+    "请参考 https://docs.astrbot.app/faq.html"
+)
 
 
 class AuthRoute(Route):
@@ -181,6 +188,8 @@ class AuthRoute(Route):
         await asyncio.sleep(3)
         if req_password == "astrbot":
             return Response().error(DEFAULT_PASSWORD_LOGIN_FAILURE_MESSAGE).__dict__
+        if is_legacy_dashboard_password(password):
+            return Response().error(LEGACY_PASSWORD_LOGIN_FAILURE_MESSAGE).__dict__
         return Response().error("用户名或密码错误").__dict__
 
     async def logout(self):
diff --git a/docs/en/faq.md b/docs/en/faq.md
index e0dc7307d..c9f0b10f9 100644
--- a/docs/en/faq.md
+++ b/docs/en/faq.md
@@ -70,6 +70,18 @@ The segment should look like:
 
 After restart, AstrBot will automatically generate a random password with the fixed username `astrbot`; check the startup logs.
 
+### Correct Password Cannot Log In After Upgrading AstrBot
+
+If you are sure the dashboard password is correct but still cannot log in after upgrading AstrBot, the old WebUI static files may be incompatible with the newer backend.
+
+Solution:
+
+1. Stop AstrBot.
+2. Delete the `dist` folder under AstrBot's `data` directory: `AstrBot/data/dist`.
+3. Restart AstrBot.
+
+After restart, AstrBot will reload or download WebUI files that match the current version.
+
 ## Bot Core Related
 
 ### How to Let AstrBot Control My Mac / Windows / Linux Computer?
diff --git a/docs/zh/faq.md b/docs/zh/faq.md
index 64792747d..e7a230b07 100644
--- a/docs/zh/faq.md
+++ b/docs/zh/faq.md
@@ -71,6 +71,18 @@ Set dashboard.host in data/cmd_config.json to enable remote access.
 
 重启后 AstrBot 将会自动生成随机的密码以及固定的用户名 `astrbot`，请在日志查看。
 
+### 升级 AstrBot 后密码正确但无法登录
+
+如果你确认管理面板密码正确，但升级 AstrBot 后仍然无法登录，可能是旧版 WebUI 静态文件缓存与新版后端不兼容。
+
+解决方案：
+
+1. 停止 AstrBot。
+2. 删除 AstrBot 的 `data` 目录下的 `dist` 文件夹，即 `AstrBot/data/dist`。
+3. 重新启动 AstrBot。
+
+重启后，AstrBot 会重新加载或下载匹配当前版本的 WebUI 文件。
+
 ## AstrBot 使用相关
 
 ### 如何让 AstrBot 控制我的 Mac / Windows / Linux 电脑？
diff --git a/tests/test_dashboard.py b/tests/test_dashboard.py
index 295b8c1e5..3957a87d8 100644
--- a/tests/test_dashboard.py
+++ b/tests/test_dashboard.py
@@ -413,6 +413,48 @@ async def test_legacy_md5_dashboard_password_keeps_legacy_auth_until_edit(
         )
 
 
+@pytest.mark.asyncio
+async def test_legacy_md5_login_failure_includes_upgrade_faq_hint(
+    app: Quart,
+    core_lifecycle_td: AstrBotCoreLifecycle,
+):
+    original_dashboard_config = copy.deepcopy(
+        core_lifecycle_td.astrbot_config["dashboard"]
+    )
+    test_client = app.test_client()
+    legacy_password = "AstrbotLegacy123"
+
+    try:
+        core_lifecycle_td.astrbot_config["dashboard"]["username"] = "astrbot"
+        core_lifecycle_td.astrbot_config["dashboard"]["password"] = (
+            hash_legacy_dashboard_password(legacy_password)
+        )
+        core_lifecycle_td.astrbot_config["dashboard"]["pbkdf2_password"] = ""
+        await _set_dashboard_password_change_required(core_lifecycle_td, False)
+        await set_password_storage_upgraded(
+            core_lifecycle_td.db,
+            core_lifecycle_td.astrbot_config,
+            False,
+        )
+
+        response = await test_client.post(
+            "/api/auth/login",
+            json={"username": "astrbot", "password": "WrongPassword123"},
+        )
+        data = await response.get_json()
+
+        assert data["status"] == "error"
+        assert data["message"].startswith("Incorrect username or password.")
+        assert "用户名或密码错误" in data["message"]
+        assert "https://docs.astrbot.app/en/faq.html" in data["message"]
+        assert "https://docs.astrbot.app/faq.html" in data["message"]
+    finally:
+        await _restore_dashboard_password_state(
+            core_lifecycle_td,
+            original_dashboard_config,
+        )
+
+
 @pytest.mark.asyncio
 async def test_password_storage_flag_repairs_after_rollback_clears_pbkdf2(
     app: Quart,

From 0e6ad1c4430bf8a32900d6bd6fc49ee56a5ffdb3 Mon Sep 17 00:00:00 2001
From: Soulter <905617992@qq.com>
Date: Thu, 14 May 2026 01:13:46 +0800
Subject: [PATCH 30/51] feat: cli supports  ASTRBOT_DASHBOARD_INITIAL_PASSWORD
 env

---
 astrbot/cli/commands/cmd_init.py | 15 +++++++++
 tests/test_cli_init.py           | 54 ++++++++++++++++++++++++++++++++
 2 files changed, 69 insertions(+)
 create mode 100644 tests/test_cli_init.py

diff --git a/astrbot/cli/commands/cmd_init.py b/astrbot/cli/commands/cmd_init.py
index e7e047cca..502999c43 100644
--- a/astrbot/cli/commands/cmd_init.py
+++ b/astrbot/cli/commands/cmd_init.py
@@ -1,4 +1,5 @@
 import asyncio
+import os
 from pathlib import Path
 
 import click
@@ -6,6 +7,18 @@ from filelock import FileLock, Timeout
 
 from ..utils import check_dashboard, get_astrbot_root
 
+DASHBOARD_INITIAL_PASSWORD_ENV = "ASTRBOT_DASHBOARD_INITIAL_PASSWORD"
+
+
+def _initialize_config_from_env(astrbot_root: Path) -> None:
+    if DASHBOARD_INITIAL_PASSWORD_ENV not in os.environ:
+        return
+
+    from astrbot.core.config.astrbot_config import AstrBotConfig
+
+    AstrBotConfig(config_path=str(astrbot_root / "data" / "cmd_config.json"))
+    click.echo("Initialized data/cmd_config.json with dashboard initial password.")
+
 
 async def initialize_astrbot(astrbot_root: Path) -> None:
     """Execute AstrBot initialization logic"""
@@ -31,6 +44,8 @@ async def initialize_astrbot(astrbot_root: Path) -> None:
         path.mkdir(parents=True, exist_ok=True)
         click.echo(f"{'Created' if not path.exists() else 'Directory exists'}: {path}")
 
+    _initialize_config_from_env(astrbot_root)
+
     await check_dashboard(astrbot_root / "data")
 
 
diff --git a/tests/test_cli_init.py b/tests/test_cli_init.py
new file mode 100644
index 000000000..f68ddf059
--- /dev/null
+++ b/tests/test_cli_init.py
@@ -0,0 +1,54 @@
+import json
+
+import pytest
+
+from astrbot.cli.commands import cmd_init
+from astrbot.core.utils.auth_password import verify_dashboard_password
+
+
+@pytest.mark.asyncio
+async def test_init_without_initial_password_env_does_not_create_config(
+    monkeypatch,
+    tmp_path,
+):
+    async def fake_check_dashboard(_data_path):
+        return None
+
+    monkeypatch.delenv(cmd_init.DASHBOARD_INITIAL_PASSWORD_ENV, raising=False)
+    monkeypatch.setattr(cmd_init, "check_dashboard", fake_check_dashboard)
+    (tmp_path / ".astrbot").touch()
+
+    await cmd_init.initialize_astrbot(tmp_path)
+
+    assert not (tmp_path / "data" / "cmd_config.json").exists()
+
+
+@pytest.mark.asyncio
+async def test_init_uses_initial_password_env_to_create_config(
+    monkeypatch,
+    tmp_path,
+):
+    async def fake_check_dashboard(_data_path):
+        return None
+
+    initial_password = "AstrBotInitialPassword123"
+    monkeypatch.setenv(cmd_init.DASHBOARD_INITIAL_PASSWORD_ENV, initial_password)
+    monkeypatch.setattr(cmd_init, "check_dashboard", fake_check_dashboard)
+    (tmp_path / ".astrbot").touch()
+
+    await cmd_init.initialize_astrbot(tmp_path)
+
+    config_path = tmp_path / "data" / "cmd_config.json"
+    config = json.loads(config_path.read_text(encoding="utf-8-sig"))
+    dashboard_config = config["dashboard"]
+
+    assert verify_dashboard_password(
+        dashboard_config["pbkdf2_password"],
+        initial_password,
+    )
+    assert verify_dashboard_password(
+        dashboard_config["password"],
+        initial_password,
+    )
+    assert dashboard_config["password_change_required"] is True
+    assert dashboard_config["password_storage_upgraded"] is True

From c77cb0f4e2c84fa3cf8d9b4704e49a38841d0b70 Mon Sep 17 00:00:00 2001
From: Soulter <905617992@qq.com>
Date: Thu, 14 May 2026 01:16:26 +0800
Subject: [PATCH 31/51] chore: bump version to 4.24.5

---
 astrbot/cli/__init__.py        |  2 +-
 astrbot/core/config/default.py |  2 +-
 changelogs/v4.24.5.md          | 42 ++++++++++++++++++++++++++++++++++
 pyproject.toml                 |  2 +-
 4 files changed, 45 insertions(+), 3 deletions(-)
 create mode 100644 changelogs/v4.24.5.md

diff --git a/astrbot/cli/__init__.py b/astrbot/cli/__init__.py
index 610c77a8b..9a9d305f3 100644
--- a/astrbot/cli/__init__.py
+++ b/astrbot/cli/__init__.py
@@ -1 +1 @@
-__version__ = "4.24.4"
+__version__ = "4.24.5"
diff --git a/astrbot/core/config/default.py b/astrbot/core/config/default.py
index 6c384fa0f..6a689784a 100644
--- a/astrbot/core/config/default.py
+++ b/astrbot/core/config/default.py
@@ -5,7 +5,7 @@ import os
 from astrbot.core.computer.booters.cua_defaults import CUA_DEFAULT_CONFIG
 from astrbot.core.utils.astrbot_path import get_astrbot_data_path
 
-VERSION = "4.24.4"
+VERSION = "4.24.5"
 DB_PATH = os.path.join(get_astrbot_data_path(), "data_v4.db")
 PERSONAL_WECHAT_CONFIG_METADATA = {
     "weixin_oc_base_url": {
diff --git a/changelogs/v4.24.5.md b/changelogs/v4.24.5.md
new file mode 100644
index 000000000..6ef1b512a
--- /dev/null
+++ b/changelogs/v4.24.5.md
@@ -0,0 +1,42 @@
+- [更新日志(简体中文)](#chinese)
+- [Changelog(English)](#english)
+
+<a id="chinese"></a>
+
+## What's Changed
+
+### 优化
+
+- Dashboard 更新流程新增两阶段下载进度，升级项目时会先下载 WebUI，再下载项目代码，并在界面中展示每个阶段的进度。
+- 新增更新后重启等待体验：WebUI 会在更新前记录 AstrBot 启动时间，更新完成后展示正在重启状态，并轮询启动时间变化后自动刷新页面。
+- 新增 `ASTRBOT_DASHBOARD_INITIAL_PASSWORD` 环境变量，可为首次生成的 Dashboard 密码指定初始值。
+- `astrbot init` 现在会识别 `ASTRBOT_DASHBOARD_INITIAL_PASSWORD`，并在初始化阶段创建 `data/cmd_config.json` 写入哈希后的初始密码，便于自动化部署。
+- 优化 Dashboard 更新项目弹窗，减少对用户无用的信息，保留独立更新 WebUI 到最新版本的兜底入口，并将其收起到高级设置中。
+- 优化 Release 列表加载状态和预发布版本提示逻辑：Release 未加载完成时显示表格 loading，第一页没有预发布版本时不再显示提醒。
+- 优化升级后旧版 Dashboard 密码登录失败时的提示，引导用户参考 FAQ 处理升级后密码正确但无法登录的情况。
+- 更新 FAQ 文档，补充升级后密码正确但无法登录时可删除 `data/dist` 后重启 AstrBot 的处理方案。
+
+### 修复
+
+- 修复 Shipyard Neo 在显式配置 profile 时可能未正确尊重该配置的问题。（[#8167](https://github.com/AstrBotDevs/AstrBot/pull/8167)）
+- 修复 `message_tools` 在目标路径不存在时未抛出异常并阻止消息发送的问题。（[#8149](https://github.com/AstrBotDevs/AstrBot/pull/8149)）
+
+<a id="english"></a>
+
+## What's Changed (EN)
+
+### Improvements
+
+- Added two-stage download progress to the Dashboard update flow. Project upgrades now download the WebUI first, then the core project code, with per-stage progress shown in the UI.
+- Added a restart-waiting experience after updates. The WebUI records AstrBot's start time before updating, shows a restarting state after the update completes, polls for a changed start time, and refreshes automatically.
+- Added the `ASTRBOT_DASHBOARD_INITIAL_PASSWORD` environment variable to specify the first generated Dashboard password.
+- `astrbot init` now recognizes `ASTRBOT_DASHBOARD_INITIAL_PASSWORD` and creates `data/cmd_config.json` during initialization with the hashed initial password, making automated deployments easier.
+- Improved the Dashboard project update dialog by hiding low-value details, keeping the standalone WebUI update fallback, and moving it under Advanced Settings.
+- Improved Release list loading and prerelease notices: the table now shows a loading state before releases are loaded, and the prerelease warning is hidden when the first page has no prerelease entries.
+- Improved the login failure message for legacy Dashboard password upgrade cases, guiding users to the FAQ when a correct password no longer works after upgrading.
+- Updated the FAQ with recovery steps for upgrade cases where the correct password cannot log in: delete `data/dist` and restart AstrBot.
+
+### Bug Fixes
+
+- Fixed Shipyard Neo so explicit profile configuration is respected. ([#8167](https://github.com/AstrBotDevs/AstrBot/pull/8167))
+- Fixed `message_tools` so missing target paths raise an exception and block message sending. ([#8149](https://github.com/AstrBotDevs/AstrBot/pull/8149))
diff --git a/pyproject.toml b/pyproject.toml
index 1ac64d397..16055d72f 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -1,6 +1,6 @@
 [project]
 name = "AstrBot"
-version = "4.24.4"
+version = "4.24.5"
 description = "Easy-to-use multi-platform LLM chatbot and development framework"
 readme = "README.md"
 license = { text = "AGPL-3.0-or-later" }

From ef73d2da3384760e333a74bee16a9b1716c4ffd4 Mon Sep 17 00:00:00 2001
From: lingyun14 <wedoyou@qq.com>
Date: Thu, 14 May 2026 08:58:37 +0800
Subject: [PATCH 32/51] docs: Clarify and expand the LLM tool registration
 guidance in the AI plugin documentation (#8178)

* docs(zh/ai): fix misleading tool registration guide and add warnings

* docs(en/ai): add tool registration section with deprecation warnings
---
 docs/en/dev/star/guides/ai.md | 53 ++++++++++++++++++++++++++++++++++-
 docs/zh/dev/star/guides/ai.md | 18 +++++++++++-
 2 files changed, 69 insertions(+), 2 deletions(-)

diff --git a/docs/en/dev/star/guides/ai.md b/docs/en/dev/star/guides/ai.md
index 8e09da134..cf7914bca 100644
--- a/docs/en/dev/star/guides/ai.md
+++ b/docs/en/dev/star/guides/ai.md
@@ -1,4 +1,3 @@
-
 # AI
 
 AstrBot provides built-in support for multiple Large Language Model (LLM) providers and offers a unified interface, making it convenient for plugin developers to access various LLM services.
@@ -67,6 +66,58 @@ class BilibiliTool(FunctionTool[AstrAgentContext]):
         return "1. Video Title: How to Use AstrBot\nVideo Link: xxxxxx"
 ```
 
+## Registering Tools with AstrBot
+
+Once a Tool is defined, if you want it to be automatically invoked during user conversations, register it in your plugin's `__init__` method:
+
+```py
+class MyPlugin(Star):
+    def __init__(self, context: Context):
+        super().__init__(context)
+        # >= v4.5.1:
+        self.context.add_llm_tools(BilibiliTool(), SecondTool(), ...)
+
+        # < v4.5.1:
+        tool_mgr = self.context.provider_manager.llm_tools
+        tool_mgr.func_list.append(BilibiliTool())
+```
+
+> [!WARNING]
+> `context.register_llm_tool()` is deprecated. Do not use it in new plugins.
+>
+> If you must use it for legacy compatibility, `func_args` must be a **list of dicts** in this format:
+> ```py
+> func_args = [{"type": "string", "name": "arg_name", "description": "..."}, ...]
+> ```
+> Passing a list of strings or any other format will raise `AttributeError: 'str' object has no attribute 'pop'`.
+
+### Registering Tools via Decorator
+
+Alternatively, you can use the `@filter.llm_tool` decorator to define and register a tool in one step. Make sure to follow the exact format below, including the docstring — AstrBot parses the docstring to generate the parameter schema:
+
+```py{3,4,5,6,7}
+@filter.llm_tool(name="get_weather")  # If name is omitted, the function name is used
+async def get_weather(self, event: AstrMessageEvent, location: str) -> MessageEventResult:
+    '''Get weather information.
+
+    Args:
+        location(string): The location to query
+    '''
+    resp = self.get_weather_from_api(location)
+    yield event.plain_result("Weather: " + resp)
+```
+
+In `location(string): The location to query`, `location` is the parameter name, `string` is the type, and the remainder is the description.
+
+Supported types: `string`, `number`, `object`, `boolean`, `array`. Since v4.5.7, array subtypes are supported, e.g. `array[string]`.
+
+> [!WARNING]
+> **The `Args:` block is required and must be formatted correctly.**
+>
+> The `@filter.llm_tool` decorator generates the parameter schema by parsing the function's docstring — it does **not** read Python type annotations. If the docstring is missing an `Args:` block, or the format does not follow `param_name(type): description`, the generated schema will be empty. Any arguments passed by the LLM will be silently dropped, causing the function to fail with a missing-argument error.
+>
+> Additionally, passing `parameters=...` directly to the decorator is **not supported** and will be silently ignored. If you need manual control over the schema, use the `@dataclass` + `add_llm_tools()` approach above.
+
 ## Invoking Agents
 
 > [!TIP]
diff --git a/docs/zh/dev/star/guides/ai.md b/docs/zh/dev/star/guides/ai.md
index 71b867efd..ceba128ea 100644
--- a/docs/zh/dev/star/guides/ai.md
+++ b/docs/zh/dev/star/guides/ai.md
@@ -81,9 +81,18 @@ class MyPlugin(Star):
         tool_mgr.func_list.append(BilibiliTool())
 ```
 
+> [!WARNING]
+> `context.register_llm_tool()` 已被弃用，请勿在新插件中使用。
+>
+> 如需通过该方法注册（旧插件兼容），`func_args` 必须是 **字典列表**，格式为：
+> ```py
+> func_args = [{"type": "string", "name": "arg_name", "description": "参数描述"}, ...]
+> ```
+> 传入字符串列表或其他格式会导致 `AttributeError: 'str' object has no attribute 'pop'`。
+
 ### 通过装饰器定义 Tool 和注册 Tool
 
-除了上述的通过 `@dataclass` 定义 Tool 的方式之外，你也可以使用装饰器的方式注册 tool 到 AstrBot。如果请务必按照以下格式编写一个工具（包括函数注释，AstrBot 会解析该函数注释，请务必将注释格式写对）
+除了上述的通过 `@dataclass` 定义 Tool 的方式之外，你也可以使用装饰器的方式注册 tool 到 AstrBot。请务必按照以下格式编写一个工具（包括函数注释，AstrBot 会解析该函数注释，请务必将注释格式写对）：
 
 ```py{3,4,5,6,7}
 @filter.llm_tool(name="get_weather") # 如果 name 不填，将使用函数名
@@ -101,6 +110,13 @@ async def get_weather(self, event: AstrMessageEvent, location: str) -> MessageEv
 
 支持的参数类型有 `string`, `number`, `object`, `boolean`, `array`。在 v4.5.7 之后，支持对 `array` 类型参数指定子类型，例如 `array[string]`。
 
+> [!WARNING]
+> **`Args:` 段是必须的，且格式不能写错。**
+>
+> `@filter.llm_tool` 装饰器通过解析函数的 docstring 来生成工具的参数 schema，**不会**读取函数签名中的类型注解。如果 docstring 缺少 `Args:` 段，或格式不符合 `参数名(类型): 描述` 的规范，框架生成的参数 schema 将为空，LLM 传入的参数会被静默丢弃，最终导致函数因缺少参数而报错。
+>
+> 此外，装饰器**不支持**通过 `parameters=...` 显式传入参数 schema，该写法会被忽略。如需手动控制 schema，请使用上方的 `@dataclass` + `add_llm_tools()` 方式。
+
 ## 调用 Agent
 
 > [!TIP]

From 3290d755192f676401126ed756ab5fb7cd71ab53 Mon Sep 17 00:00:00 2001
From: Yufeng He <40085740+he-yufeng@users.noreply.github.com>
Date: Thu, 14 May 2026 09:00:16 +0800
Subject: [PATCH 33/51] fix: prefer bundled dashboard over stale data dist
 (#8172)

* fix: prefer bundled dashboard over stale dist

* fix: harden dashboard dist version checks
---
 astrbot/core/utils/io.py    | 69 +++++++++++++++++++++++++++++++------
 astrbot/dashboard/server.py | 19 ++++++----
 main.py                     |  9 +++++
 tests/test_dashboard.py     | 30 ++++++++++++++++
 tests/test_main.py          | 65 ++++++++++++++++++++++++++++++++--
 5 files changed, 173 insertions(+), 19 deletions(-)

diff --git a/astrbot/core/utils/io.py b/astrbot/core/utils/io.py
index 8f3f1688d..08c9669d1 100644
--- a/astrbot/core/utils/io.py
+++ b/astrbot/core/utils/io.py
@@ -2,6 +2,7 @@ import base64
 import inspect
 import logging
 import os
+import re
 import shutil
 import socket
 import ssl
@@ -16,6 +17,7 @@ import psutil
 from PIL import Image
 
 from .astrbot_path import get_astrbot_data_path, get_astrbot_path, get_astrbot_temp_path
+from .version_comparator import VersionComparator
 
 logger = logging.getLogger("astrbot")
 
@@ -325,20 +327,67 @@ def get_local_ip_addresses():
     return network_ips
 
 
+def _read_dashboard_dist_version(dist_dir: str | Path) -> str | None:
+    version_file = Path(dist_dir) / "assets" / "version"
+    if version_file.exists():
+        return version_file.read_text(encoding="utf-8").strip()
+    return None
+
+
+def get_bundled_dashboard_dist_path() -> Path:
+    return Path(get_astrbot_path()) / "astrbot" / "dashboard" / "dist"
+
+
+def _normalize_dashboard_version(version: str) -> str:
+    version = version.strip()
+    if version[:1].lower() == "v":
+        version = version[1:]
+    if not re.match(
+        r"^[0-9]+(?:\.[0-9]+)*"
+        r"(?:-[0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*)?"
+        r"(?:\+.+)?$",
+        version,
+    ):
+        raise ValueError(f"invalid dashboard version: {version!r}")
+    return version
+
+
+def should_use_bundled_dashboard_dist(
+    user_dist: str | Path, current_version: str
+) -> bool:
+    user_version = _read_dashboard_dist_version(user_dist)
+    bundled_dist = get_bundled_dashboard_dist_path()
+    if user_version is None or not bundled_dist.exists():
+        return False
+    try:
+        return (
+            VersionComparator.compare_version(
+                _normalize_dashboard_version(current_version),
+                _normalize_dashboard_version(user_version),
+            )
+            > 0
+        )
+    except (TypeError, ValueError):
+        return False
+
+
 async def get_dashboard_version():
     # First check user data directory (manually updated / downloaded dashboard).
     dist_dir = os.path.join(get_astrbot_data_path(), "dist")
-    if not os.path.exists(dist_dir):
-        # Fall back to the dist bundled inside the installed wheel.
-        _bundled = Path(get_astrbot_path()) / "astrbot" / "dashboard" / "dist"
-        if _bundled.exists():
-            dist_dir = str(_bundled)
     if os.path.exists(dist_dir):
-        version_file = os.path.join(dist_dir, "assets", "version")
-        if os.path.exists(version_file):
-            with open(version_file, encoding="utf-8") as f:
-                v = f.read().strip()
-                return v
+        from astrbot.core.config.default import VERSION
+
+        if should_use_bundled_dashboard_dist(dist_dir, VERSION):
+            bundled_version = _read_dashboard_dist_version(
+                get_bundled_dashboard_dist_path()
+            )
+            if bundled_version is not None:
+                return bundled_version
+        return _read_dashboard_dist_version(dist_dir)
+
+    bundled = get_bundled_dashboard_dist_path()
+    if bundled.exists():
+        return _read_dashboard_dist_version(bundled)
     return None
 
 
diff --git a/astrbot/dashboard/server.py b/astrbot/dashboard/server.py
index 1211d4f75..a39337b5f 100644
--- a/astrbot/dashboard/server.py
+++ b/astrbot/dashboard/server.py
@@ -23,7 +23,11 @@ from astrbot.core.core_lifecycle import AstrBotCoreLifecycle
 from astrbot.core.db import BaseDatabase
 from astrbot.core.utils.astrbot_path import get_astrbot_data_path
 from astrbot.core.utils.datetime_utils import to_utc_isoformat
-from astrbot.core.utils.io import get_local_ip_addresses
+from astrbot.core.utils.io import (
+    get_bundled_dashboard_dist_path,
+    get_local_ip_addresses,
+    should_use_bundled_dashboard_dist,
+)
 
 from .plugin_page_auth import PluginPageAuth
 from .routes import *
@@ -37,9 +41,6 @@ from .routes.session_management import SessionManagementRoute
 from .routes.subagent import SubAgentRoute
 from .routes.t2i import T2iRoute
 
-# Static assets shipped inside the wheel (built during `hatch build`).
-_BUNDLED_DIST = Path(__file__).parent / "dist"
-
 
 class _AddrWithPort(Protocol):
     port: int
@@ -118,10 +119,14 @@ class AstrBotDashboard:
             self.data_path = os.path.abspath(webui_dir)
         else:
             user_dist = os.path.join(get_astrbot_data_path(), "dist")
-            if os.path.exists(user_dist):
+            bundled_dist = get_bundled_dashboard_dist_path()
+            if os.path.exists(user_dist) and not should_use_bundled_dashboard_dist(
+                user_dist,
+                VERSION,
+            ):
                 self.data_path = os.path.abspath(user_dist)
-            elif _BUNDLED_DIST.exists():
-                self.data_path = str(_BUNDLED_DIST)
+            elif bundled_dist.exists():
+                self.data_path = str(bundled_dist)
                 logger.info("Using bundled dashboard dist: %s", self.data_path)
             else:
                 # Fall back to expected user path (will fail gracefully later)
diff --git a/main.py b/main.py
index 299d4b5ec..781f00637 100644
--- a/main.py
+++ b/main.py
@@ -23,7 +23,9 @@ from astrbot.core.utils.astrbot_path import (  # noqa: E402
 )
 from astrbot.core.utils.io import (  # noqa: E402
     download_dashboard,
+    get_bundled_dashboard_dist_path,
     get_dashboard_version,
+    should_use_bundled_dashboard_dist,
 )
 
 # 将父目录添加到 sys.path
@@ -77,6 +79,13 @@ async def check_dashboard_files(webui_dir: str | None = None):
     data_dist_path = os.path.join(get_astrbot_data_path(), "dist")
     if os.path.exists(data_dist_path):
         v = await get_dashboard_version()
+        if should_use_bundled_dashboard_dist(data_dist_path, VERSION):
+            bundled_dist = get_bundled_dashboard_dist_path()
+            logger.info(
+                "Using bundled WebUI because data/dist is older than core version v%s.",
+                VERSION,
+            )
+            return str(bundled_dist)
         if v is not None:
             # 存在文件
             if v == f"v{VERSION}":
diff --git a/tests/test_dashboard.py b/tests/test_dashboard.py
index 3957a87d8..86bdf455e 100644
--- a/tests/test_dashboard.py
+++ b/tests/test_dashboard.py
@@ -216,6 +216,36 @@ def _resolve_dashboard_password(core_lifecycle_td: AstrBotCoreLifecycle) -> str:
     return password
 
 
+def test_dashboard_uses_bundled_dist_when_data_dist_is_stale(
+    core_lifecycle_td: AstrBotCoreLifecycle,
+    monkeypatch,
+    tmp_path,
+):
+    data_dir = tmp_path / "data"
+    user_dist = data_dir / "dist"
+    bundled_dist = tmp_path / "bundled-dist"
+    user_dist.mkdir(parents=True)
+    bundled_dist.mkdir()
+
+    monkeypatch.setattr(
+        "astrbot.dashboard.server.get_astrbot_data_path",
+        lambda: str(data_dir),
+    )
+    monkeypatch.setattr(
+        "astrbot.dashboard.server.get_bundled_dashboard_dist_path",
+        lambda: bundled_dist,
+    )
+    monkeypatch.setattr(
+        "astrbot.dashboard.server.should_use_bundled_dashboard_dist",
+        lambda *_args, **_kwargs: True,
+    )
+
+    shutdown_event = asyncio.Event()
+    server = AstrBotDashboard(core_lifecycle_td, core_lifecycle_td.db, shutdown_event)
+
+    assert server.data_path == str(bundled_dist)
+
+
 async def _set_dashboard_password_change_required(
     core_lifecycle_td: AstrBotCoreLifecycle,
     required: bool,
diff --git a/tests/test_main.py b/tests/test_main.py
index 8ed21f7b1..f7fa205dc 100644
--- a/tests/test_main.py
+++ b/tests/test_main.py
@@ -1,5 +1,6 @@
 import os
 import sys
+from pathlib import Path
 
 # 将项目根目录添加到 sys.path
 sys.path.insert(0, os.path.abspath(os.path.join(os.path.dirname(__file__), "..")))
@@ -8,6 +9,7 @@ from unittest import mock
 
 import pytest
 
+from astrbot.core.utils.io import should_use_bundled_dashboard_dist
 from main import check_dashboard_files, check_env
 
 
@@ -175,8 +177,9 @@ async def test_check_dashboard_files_exists_but_version_mismatch(monkeypatch):
     """Tests that a warning is logged when dashboard version mismatches."""
     monkeypatch.setattr(os.path, "exists", lambda x: True)
 
-    with mock.patch("main.get_dashboard_version") as mock_get_version:
-        mock_get_version.return_value = "v0.0.1"  # A different version
+    with mock.patch(
+        "main.get_dashboard_version", mock.AsyncMock(return_value="v0.0.1")
+    ):
 
         with mock.patch("main.logger.warning") as mock_logger_warning:
             await check_dashboard_files()
@@ -185,6 +188,64 @@ async def test_check_dashboard_files_exists_but_version_mismatch(monkeypatch):
             assert "WebUI version mismatch" in call_args[0]
 
 
+def test_should_use_bundled_dashboard_dist_when_data_dist_is_stale(tmp_path):
+    user_dist = tmp_path / "user-dist"
+    bundled_dist = tmp_path / "bundled-dist"
+    (user_dist / "assets").mkdir(parents=True)
+    (bundled_dist / "assets").mkdir(parents=True)
+    (user_dist / "assets" / "version").write_text("v4.24.2", encoding="utf-8")
+    (bundled_dist / "assets" / "version").write_text("v4.24.4", encoding="utf-8")
+
+    with mock.patch(
+        "astrbot.core.utils.io.get_bundled_dashboard_dist_path",
+        return_value=bundled_dist,
+    ):
+        assert should_use_bundled_dashboard_dist(user_dist, "v4.24.4") is True
+
+
+def test_should_keep_data_dist_when_version_file_is_malformed(tmp_path):
+    user_dist = tmp_path / "user-dist"
+    bundled_dist = tmp_path / "bundled-dist"
+    (user_dist / "assets").mkdir(parents=True)
+    (bundled_dist / "assets").mkdir(parents=True)
+    (user_dist / "assets" / "version").write_text("not-a-version", encoding="utf-8")
+
+    with mock.patch(
+        "astrbot.core.utils.io.get_bundled_dashboard_dist_path",
+        return_value=bundled_dist,
+    ):
+        assert should_use_bundled_dashboard_dist(user_dist, "4.24.4") is False
+
+
+@pytest.mark.asyncio
+async def test_check_dashboard_files_uses_bundled_dist_when_data_dist_is_stale(
+    tmp_path,
+):
+    """Tests that a stale data/dist does not override bundled dashboard assets."""
+    data_dir = tmp_path / "data"
+    data_dist = data_dir / "dist"
+    bundled_dist = tmp_path / "bundled-dist"
+    data_dist.mkdir(parents=True)
+    bundled_dist.mkdir()
+
+    with mock.patch("main.get_astrbot_data_path", return_value=str(data_dir)):
+        with mock.patch(
+            "main.get_dashboard_version", mock.AsyncMock(return_value="v0.0.1")
+        ):
+            with mock.patch(
+                "main.should_use_bundled_dashboard_dist", return_value=True
+            ):
+                with mock.patch(
+                    "main.get_bundled_dashboard_dist_path",
+                    return_value=Path(bundled_dist),
+                ):
+                    with mock.patch("main.download_dashboard") as mock_download:
+                        result = await check_dashboard_files()
+
+    assert result == str(bundled_dist)
+    mock_download.assert_not_called()
+
+
 @pytest.mark.asyncio
 async def test_check_dashboard_files_with_webui_dir_arg(monkeypatch):
     """Tests that providing a valid webui_dir skips all checks."""

From 720d384b440ea9d91ad0068790007df75180a710 Mon Sep 17 00:00:00 2001
From: M1LKT <144798909+M1LKT@users.noreply.github.com>
Date: Thu, 14 May 2026 11:44:42 +0800
Subject: [PATCH 34/51] fix: synchronize the autoScroll state of the
 consoleDisplayer component using $refs (#8186)

---
 dashboard/src/views/ConsolePage.vue | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/dashboard/src/views/ConsolePage.vue b/dashboard/src/views/ConsolePage.vue
index 378bf2ae5..a18c327a2 100644
--- a/dashboard/src/views/ConsolePage.vue
+++ b/dashboard/src/views/ConsolePage.vue
@@ -73,6 +73,11 @@ export default {
       status: ''
     }
   },
+  mounted() {
+    if (this.$refs.consoleDisplayer) {
+      this.$refs.consoleDisplayer.autoScroll = this.autoScrollEnabled;
+    }
+  },
   watch: {
     autoScrollEnabled(val) {
       localStorage.setItem('console_auto_scroll', val);

From 35f5d7e710ad7f729dbb4b5f12509502cc87e140 Mon Sep 17 00:00:00 2001
From: Chang Lee <67701681+WenqiOfficial@users.noreply.github.com>
Date: Thu, 14 May 2026 11:57:14 +0800
Subject: [PATCH 35/51] perf: enhance AMR audio quality and simplify opus logic
 (#8153)

* chore: streamline convert_audio_to_opus logic

- Route Opus conversion directly through the underlying convert_audio_format.
- Remove redundant FFmpeg processing chains to improve code reusability.

* perf: optimize AMR voice encoding parameters

- Enhance AMR audio quality via built-in FFmpeg filters.
---
 astrbot/core/utils/media_utils.py | 98 ++++++++-----------------------
 1 file changed, 24 insertions(+), 74 deletions(-)

diff --git a/astrbot/core/utils/media_utils.py b/astrbot/core/utils/media_utils.py
index 03d7912cb..b26e4de48 100644
--- a/astrbot/core/utils/media_utils.py
+++ b/astrbot/core/utils/media_utils.py
@@ -68,79 +68,12 @@ async def get_media_duration(file_path: str) -> int | None:
 
 
 async def convert_audio_to_opus(audio_path: str, output_path: str | None = None) -> str:
-    """使用ffmpeg将音频转换为opus格式
-
-    Args:
-        audio_path: 原始音频文件路径
-        output_path: 输出文件路径，如果为None则自动生成
-
-    Returns:
-        转换后的opus文件路径
-
-    Raises:
-        Exception: 转换失败时抛出异常
-    """
-    # 如果已经是opus格式，直接返回
-    if audio_path.lower().endswith(".opus"):
-        return audio_path
-
-    # 生成输出文件路径
-    if output_path is None:
-        temp_dir = get_astrbot_temp_path()
-        os.makedirs(temp_dir, exist_ok=True)
-        output_path = os.path.join(temp_dir, f"media_audio_{uuid.uuid4().hex}.opus")
-
-    try:
-        # 使用ffmpeg转换为opus格式
-        # -y: 覆盖输出文件
-        # -i: 输入文件
-        # -acodec libopus: 使用opus编码器
-        # -ac 1: 单声道
-        # -ar 16000: 采样率16kHz
-        process = await asyncio.create_subprocess_exec(
-            "ffmpeg",
-            "-y",
-            "-i",
-            audio_path,
-            "-acodec",
-            "libopus",
-            "-ac",
-            "1",
-            "-ar",
-            "16000",
-            output_path,
-            stdout=subprocess.PIPE,
-            stderr=subprocess.PIPE,
-        )
-
-        stdout, stderr = await process.communicate()
-
-        if process.returncode != 0:
-            # 清理可能已生成但无效的临时文件
-            if output_path and os.path.exists(output_path):
-                try:
-                    os.remove(output_path)
-                    logger.debug(
-                        f"[Media Utils] 已清理失败的opus输出文件: {output_path}"
-                    )
-                except OSError as e:
-                    logger.warning(f"[Media Utils] 清理失败的opus输出文件时出错: {e}")
-
-            error_msg = stderr.decode() if stderr else "未知错误"
-            logger.error(f"[Media Utils] ffmpeg转换音频失败: {error_msg}")
-            raise Exception(f"ffmpeg conversion failed: {error_msg}")
-
-        logger.debug(f"[Media Utils] 音频转换成功: {audio_path} -> {output_path}")
-        return output_path
-
-    except FileNotFoundError:
-        logger.error(
-            "[Media Utils] ffmpeg未安装或不在PATH中，无法转换音频格式。请安装ffmpeg: https://ffmpeg.org/"
-        )
-        raise Exception("ffmpeg not found")
-    except Exception as e:
-        logger.error(f"[Media Utils] 转换音频格式时出错: {e}")
-        raise
+    """将音频转换为opus格式。"""
+    return await convert_audio_format(
+        audio_path=audio_path,
+        output_format="opus",
+        output_path=output_path,
+    )
 
 
 async def convert_video_format(
@@ -245,7 +178,24 @@ async def convert_audio_format(
 
     args = ["ffmpeg", "-y", "-i", audio_path]
     if output_format == "amr":
-        args.extend(["-ac", "1", "-ar", "8000", "-ab", "12.2k"])
+        args.extend(
+            [
+                "-ac",
+                "1",
+                "-ar",
+                "8000",
+                "-ab",
+                "12.2k",
+                "-af",
+                (
+                    "highpass=f=310:poles=2,"
+                    "lowpass=f=3720:poles=2,"
+                    "equalizer=f=3150:width_type=h:width=1000:g=7.5,"
+                    "loudnorm=I=-18.5:TP=-1.5:LRA=6,"
+                    "aresample=8000"
+                ),
+            ]
+        )
     elif output_format == "ogg":
         args.extend(["-acodec", "libopus", "-ac", "1", "-ar", "16000"])
     elif output_format == "opus":

From 3a1d6c8f8972aefce7addcbe786e743f014a3dfd Mon Sep 17 00:00:00 2001
From: lingyun14 <wedoyou@qq.com>
Date: Thu, 14 May 2026 12:01:19 +0800
Subject: [PATCH 36/51] fix: handle None tool arguments from Claude API for
 no-parameter tools (#8136)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* fix: handle None tool arguments returned by Claude API for no-parameter tools

* fix: handle None tool arguments from Claude API for no-parameter tools

* fix: generalize None tool args comment

* fix: generalize None tool args comment

* 去除空格，以保证格式正确
---
 astrbot/core/agent/runners/tool_loop_agent_runner.py | 3 +++
 astrbot/core/provider/sources/openai_source.py       | 3 +++
 2 files changed, 6 insertions(+)

diff --git a/astrbot/core/agent/runners/tool_loop_agent_runner.py b/astrbot/core/agent/runners/tool_loop_agent_runner.py
index 968426b8b..1b9f5a592 100644
--- a/astrbot/core/agent/runners/tool_loop_agent_runner.py
+++ b/astrbot/core/agent/runners/tool_loop_agent_runner.py
@@ -1022,6 +1022,9 @@ class ToolLoopAgentRunner(BaseAgentRunner[TContext]):
                     func_tool = req.func_tool.get_tool(func_tool_name)
                     available_tools = req.func_tool.names()
 
+                #  Some API may return None for tools with no parameters
+                if func_tool_args is None:
+                    func_tool_args = {}
                 logger.info(f"使用工具：{func_tool_name}，参数：{func_tool_args}")
 
                 if not func_tool:
diff --git a/astrbot/core/provider/sources/openai_source.py b/astrbot/core/provider/sources/openai_source.py
index 64e3a6645..fbcef1a80 100644
--- a/astrbot/core/provider/sources/openai_source.py
+++ b/astrbot/core/provider/sources/openai_source.py
@@ -901,6 +901,9 @@ class ProviderOpenAIOfficial(Provider):
                             args = {}
                     else:
                         args = tool_call.function.arguments
+                    # Some API may return None for tools with no parameters
+                    if args is None:
+                        args = {}
                     args_ls.append(args)
                     func_name_ls.append(tool_call.function.name)
                     tool_call_ids.append(tool_call.id)

From 7d402fa16a3743d50ef3dc8f45ca95d0e0efa900 Mon Sep 17 00:00:00 2001
From: counhopig <108390459+counhopig@users.noreply.github.com>
Date: Thu, 14 May 2026 12:16:35 +0800
Subject: [PATCH 37/51] fix: add ollama and nvidia embedding (#8104)

* fix: add ollama and nvidia embedding

* fix: address code review feedback for embedding providers

 - Remove redundant proxy branch in NvidiaEmbeddingProvider._get_client

 - Change ClientError handling to re-raise instead of wrapping in Exception

 - Add exc_info=True for better error diagnostics

 - Remove redundant isinstance check in OllamaEmbeddingProvider._build_payload
---
 astrbot/core/config/default.py                |  28 ++++
 astrbot/core/provider/manager.py              |   8 ++
 .../sources/nvidia_embedding_source.py        | 134 ++++++++++++++++++
 .../sources/ollama_embedding_source.py        | 120 ++++++++++++++++
 4 files changed, 290 insertions(+)
 create mode 100644 astrbot/core/provider/sources/nvidia_embedding_source.py
 create mode 100644 astrbot/core/provider/sources/ollama_embedding_source.py

diff --git a/astrbot/core/config/default.py b/astrbot/core/config/default.py
index 6a689784a..461f85cad 100644
--- a/astrbot/core/config/default.py
+++ b/astrbot/core/config/default.py
@@ -1803,6 +1803,34 @@ CONFIG_METADATA_2 = {
                         "timeout": 20,
                         "proxy": "",
                     },
+                    "NVIDIA Embedding": {
+                        "id": "nvidia_embedding",
+                        "type": "nvidia_embedding",
+                        "provider": "nvidia",
+                        "provider_type": "embedding",
+                        "hint": "provider_group.provider.nvidia_embedding.hint",
+                        "enable": True,
+                        "embedding_api_key": "",
+                        "embedding_api_base": "https://integrate.api.nvidia.com/v1",
+                        "embedding_model": "nvidia/llama-nemotron-embed-1b-v2",
+                        "input_type": "passage",
+                        "embedding_dimensions": 1024,
+                        "timeout": 20,
+                        "proxy": "",
+                    },
+                    "Ollama Embedding": {
+                        "id": "ollama_embedding",
+                        "type": "ollama_embedding",
+                        "provider": "ollama",
+                        "provider_type": "embedding",
+                        "hint": "provider_group.provider.ollama_embedding.hint",
+                        "enable": True,
+                        "embedding_api_base": "http://localhost:11434",
+                        "embedding_model": "nomic-embed-text",
+                        "embedding_dimensions": 768,
+                        "timeout": 60,
+                        "proxy": "",
+                    },
                     "vLLM Rerank": {
                         "id": "vllm_rerank",
                         "type": "vllm_rerank",
diff --git a/astrbot/core/provider/manager.py b/astrbot/core/provider/manager.py
index 333cf6c90..5aa452bbd 100644
--- a/astrbot/core/provider/manager.py
+++ b/astrbot/core/provider/manager.py
@@ -469,6 +469,14 @@ class ProviderManager:
                 from .sources.gemini_embedding_source import (
                     GeminiEmbeddingProvider as GeminiEmbeddingProvider,
                 )
+            case "nvidia_embedding":
+                from .sources.nvidia_embedding_source import (
+                    NvidiaEmbeddingProvider as NvidiaEmbeddingProvider,
+                )
+            case "ollama_embedding":
+                from .sources.ollama_embedding_source import (
+                    OllamaEmbeddingProvider as OllamaEmbeddingProvider,
+                )
             case "vllm_rerank":
                 from .sources.vllm_rerank_source import (
                     VLLMRerankProvider as VLLMRerankProvider,
diff --git a/astrbot/core/provider/sources/nvidia_embedding_source.py b/astrbot/core/provider/sources/nvidia_embedding_source.py
new file mode 100644
index 000000000..b13ee0d20
--- /dev/null
+++ b/astrbot/core/provider/sources/nvidia_embedding_source.py
@@ -0,0 +1,134 @@
+import aiohttp
+
+from astrbot import logger
+
+from ..entities import ProviderType
+from ..provider import EmbeddingProvider
+from ..register import register_provider_adapter
+
+
+@register_provider_adapter(
+    "nvidia_embedding",
+    "NVIDIA NIM Embedding 提供商适配器",
+    provider_type=ProviderType.EMBEDDING,
+)
+class NvidiaEmbeddingProvider(EmbeddingProvider):
+    def __init__(self, provider_config: dict, provider_settings: dict) -> None:
+        super().__init__(provider_config, provider_settings)
+        self.provider_config = provider_config
+        self.provider_settings = provider_settings
+
+        self.api_key = provider_config.get("embedding_api_key", "")
+        self.base_url = (
+            provider_config.get(
+                "embedding_api_base", "https://integrate.api.nvidia.com/v1"
+            )
+            .rstrip("/")
+            .removesuffix("/embeddings")
+        )
+        self.timeout = int(provider_config.get("timeout", 20))
+        self.model = provider_config.get(
+            "embedding_model", "nvidia/llama-nemotron-embed-1b-v2"
+        )
+        self.input_type = provider_config.get("input_type", "passage")
+
+        proxy = provider_config.get("proxy", "")
+        self.proxy = proxy
+        if proxy:
+            logger.info(f"[NVIDIA Embedding] Using proxy: {proxy}")
+
+        self.client = None
+        self.set_model(self.model)
+
+    async def _get_client(self):
+        if self.client is None or self.client.closed:
+            headers = {
+                "Authorization": f"Bearer {self.api_key}",
+                "Content-Type": "application/json",
+                "Accept": "application/json",
+            }
+            timeout = aiohttp.ClientTimeout(total=self.timeout)
+            self.client = aiohttp.ClientSession(
+                headers=headers,
+                timeout=timeout,
+            )
+        return self.client
+
+    def _build_payload(self, text: str | list[str]) -> dict:
+        if isinstance(text, str):
+            input_text = [text]
+        else:
+            input_text = text
+
+        return {
+            "input": input_text,
+            "model": self.model,
+            "input_type": self.input_type,
+            "encoding_format": "float",
+        }
+
+    def _parse_response(self, response_data: dict) -> list[list[float]]:
+        data = response_data.get("data", [])
+        embeddings = []
+        for item in data:
+            embedding = item.get("embedding", [])
+            embeddings.append(embedding)
+        return embeddings
+
+    async def get_embedding(self, text: str) -> list[float]:
+        embeddings = await self.get_embeddings([text])
+        return embeddings[0] if embeddings else []
+
+    async def get_embeddings(self, text: list[str]) -> list[list[float]]:
+        client = await self._get_client()
+        if not client or client.closed:
+            raise Exception("[NVIDIA Embedding] Client session not initialized")
+
+        payload = self._build_payload(text)
+        request_url = f"{self.base_url}/embeddings"
+
+        try:
+            async with client.post(
+                request_url, json=payload, proxy=self.proxy or None
+            ) as response:
+                if response.status != 200:
+                    error_text = await response.text()
+                    logger.error(
+                        f"[NVIDIA Embedding] API Error: {response.status} - {error_text}"
+                    )
+                    raise Exception(
+                        f"NVIDIA Embedding API request failed: HTTP {response.status} - {error_text}"
+                    )
+
+                response_data = await response.json()
+                embeddings = self._parse_response(response_data)
+
+                usage = response_data.get("usage", {})
+                total_tokens = usage.get("total_tokens", 0)
+                if total_tokens > 0:
+                    logger.debug(f"[NVIDIA Embedding] Token usage: {total_tokens}")
+
+                return embeddings
+
+        except aiohttp.ClientError as e:
+            logger.error(f"[NVIDIA Embedding] Network error: {e}")
+            raise
+        except Exception as e:
+            logger.error(f"[NVIDIA Embedding] Error: {e}", exc_info=True)
+            raise
+
+    def get_dim(self) -> int:
+        if "embedding_dimensions" in self.provider_config:
+            try:
+                return int(self.provider_config["embedding_dimensions"])
+            except (ValueError, TypeError):
+                logger.warning(
+                    f"embedding_dimensions in embedding configs is not a valid integer: "
+                    f"'{self.provider_config['embedding_dimensions']}', ignored."
+                )
+        return 0
+
+    async def terminate(self):
+        if self.client and not self.client.closed:
+            await self.client.close()
+            self.client = None
diff --git a/astrbot/core/provider/sources/ollama_embedding_source.py b/astrbot/core/provider/sources/ollama_embedding_source.py
new file mode 100644
index 000000000..8982fc51d
--- /dev/null
+++ b/astrbot/core/provider/sources/ollama_embedding_source.py
@@ -0,0 +1,120 @@
+import aiohttp
+
+from astrbot import logger
+
+from ..entities import ProviderType
+from ..provider import EmbeddingProvider
+from ..register import register_provider_adapter
+
+
+@register_provider_adapter(
+    "ollama_embedding",
+    "Ollama Embedding 提供商适配器",
+    provider_type=ProviderType.EMBEDDING,
+)
+class OllamaEmbeddingProvider(EmbeddingProvider):
+    def __init__(self, provider_config: dict, provider_settings: dict) -> None:
+        super().__init__(provider_config, provider_settings)
+        self.provider_config = provider_config
+        self.provider_settings = provider_settings
+
+        self.base_url = (
+            provider_config.get("embedding_api_base", "http://localhost:11434")
+            .rstrip("/")
+            .removesuffix("/api/embed")
+        )
+        self.timeout = int(provider_config.get("timeout", 60))
+        self.model = provider_config.get("embedding_model", "nomic-embed-text")
+
+        proxy = provider_config.get("proxy", "")
+        self.proxy = proxy
+        if proxy:
+            logger.info(f"[Ollama Embedding] Using proxy: {proxy}")
+
+        self.client = None
+        self.set_model(self.model)
+
+    async def _get_client(self):
+        if self.client is None or self.client.closed:
+            headers = {
+                "Content-Type": "application/json",
+                "Accept": "application/json",
+            }
+            timeout = aiohttp.ClientTimeout(total=self.timeout)
+            self.client = aiohttp.ClientSession(
+                headers=headers,
+                timeout=timeout,
+            )
+        return self.client
+
+    def _build_payload(self, text: list[str]) -> dict:
+        payload = {
+            "model": self.model,
+            "input": text,
+        }
+        if "embedding_dimensions" in self.provider_config:
+            try:
+                dimensions = int(self.provider_config["embedding_dimensions"])
+                if dimensions > 0:
+                    payload["dimensions"] = dimensions
+            except (ValueError, TypeError):
+                pass
+        return payload
+
+    async def get_embedding(self, text: str) -> list[float]:
+        embeddings = await self.get_embeddings([text])
+        return embeddings[0] if embeddings else []
+
+    async def get_embeddings(self, text: list[str]) -> list[list[float]]:
+        client = await self._get_client()
+        if not client or client.closed:
+            raise Exception("[Ollama Embedding] Client session not initialized")
+
+        payload = self._build_payload(text)
+        request_url = f"{self.base_url}/api/embed"
+
+        try:
+            async with client.post(
+                request_url, json=payload, proxy=self.proxy or None
+            ) as response:
+                if response.status != 200:
+                    error_text = await response.text()
+                    logger.error(
+                        f"[Ollama Embedding] API Error: {response.status} - {error_text}"
+                    )
+                    raise Exception(
+                        f"Ollama Embedding API request failed: HTTP {response.status} - {error_text}"
+                    )
+
+                response_data = await response.json()
+                embeddings = response_data.get("embeddings", [])
+
+                if not embeddings:
+                    raise Exception(
+                        f"[Ollama Embedding] No embeddings returned: {response_data}"
+                    )
+
+                return embeddings
+
+        except aiohttp.ClientError as e:
+            logger.error(f"[Ollama Embedding] Network error: {e}")
+            raise
+        except Exception as e:
+            logger.error(f"[Ollama Embedding] Error: {e}", exc_info=True)
+            raise
+
+    def get_dim(self) -> int:
+        if "embedding_dimensions" in self.provider_config:
+            try:
+                return int(self.provider_config["embedding_dimensions"])
+            except (ValueError, TypeError):
+                logger.warning(
+                    f"embedding_dimensions in embedding configs is not a valid integer: "
+                    f"'{self.provider_config['embedding_dimensions']}', ignored."
+                )
+        return 0
+
+    async def terminate(self):
+        if self.client and not self.client.closed:
+            await self.client.close()
+            self.client = None

From 094c2de85aa8b41d806d3f7b126f2ec921bc4fbe Mon Sep 17 00:00:00 2001
From: Yufeng He <40085740+he-yufeng@users.noreply.github.com>
Date: Thu, 14 May 2026 12:17:59 +0800
Subject: [PATCH 38/51] fix: surface weixin media send failures (#8175)

* fix: surface weixin media send failures

* fix: include weixin send failure context

* Delete tests/unit/test_weixin_oc_adapter.py

---------

Co-authored-by: Weilong Liao <37870767+Soulter@users.noreply.github.com>
---
 .../sources/weixin_oc/weixin_oc_adapter.py    | 21 ++++++++++++++++---
 1 file changed, 18 insertions(+), 3 deletions(-)

diff --git a/astrbot/core/platform/sources/weixin_oc/weixin_oc_adapter.py b/astrbot/core/platform/sources/weixin_oc/weixin_oc_adapter.py
index e332474d2..f27453643 100644
--- a/astrbot/core/platform/sources/weixin_oc/weixin_oc_adapter.py
+++ b/astrbot/core/platform/sources/weixin_oc/weixin_oc_adapter.py
@@ -993,7 +993,12 @@ class WeixinOCAdapter(Platform):
                 file_name,
             )
         except Exception as e:
-            logger.error("weixin_oc(%s): prepare media failed: %s", self.meta().id, e)
+            logger.error(
+                "weixin_oc(%s): prepare media failed: %s",
+                self.meta().id,
+                e,
+                exc_info=True,
+            )
             return False
 
         if text:
@@ -1608,6 +1613,7 @@ class WeixinOCAdapter(Platform):
         target_user = session.session_id
         pending_text = ""
         has_supported_segment = False
+        failed_segments = 0
         for segment in message_chain.chain:
             if isinstance(segment, Plain):
                 pending_text += segment.text
@@ -1615,11 +1621,13 @@ class WeixinOCAdapter(Platform):
 
             if isinstance(segment, (Image, Video, File)):
                 has_supported_segment = True
-                await self._send_media_segment(
+                sent = await self._send_media_segment(
                     target_user,
                     segment,
                     text=pending_text.strip() or None,
                 )
+                if not sent:
+                    failed_segments += 1
                 pending_text = ""
                 continue
 
@@ -1631,13 +1639,20 @@ class WeixinOCAdapter(Platform):
 
         if pending_text:
             has_supported_segment = True
-            await self._send_to_session(target_user, pending_text.strip())
+            sent = await self._send_to_session(target_user, pending_text.strip())
+            if not sent:
+                failed_segments += 1
 
         if not has_supported_segment:
             logger.warning(
                 "weixin_oc(%s): outbound message ignored, no supported segments",
                 self.meta().id,
             )
+        if failed_segments:
+            raise RuntimeError(
+                f"weixin_oc({self.meta().id}, target_user={target_user}) "
+                f"failed to send {failed_segments} message segment(s)"
+            )
         await super().send_by_session(session, message_chain)
 
     def meta(self) -> PlatformMetadata:

From aace90daabd3b43af4769b51d60f28da2d871c15 Mon Sep 17 00:00:00 2001
From: Weilong Liao <37870767+Soulter@users.noreply.github.com>
Date: Fri, 15 May 2026 13:00:26 +0800
Subject: [PATCH 39/51] feat: supports scan QR code to configure feishu / lark
 (#8191)

* feat(lark): implement app registration and bot info retrieval

- Add app registration functionality for Lark and Feishu platforms, including endpoints and request handling.
- Introduce polling mechanism for app registration status.
- Create bot info retrieval functionality to fetch bot details after successful registration.
- Enhance dashboard with new UI components for one-click QR setup and manual setup options.
- Update internationalization files to support new features and actions.
- Add unit tests for app registration endpoint resolution and data handling.

* feat(weixin_oc): add WeChat login registration and QR code handling
---
 astrbot/core/config/default.py                |  38 +-
 .../platform/sources/lark/app_registration.py | 205 ++++++++++
 .../core/platform/sources/lark/bot_info.py    |  94 +++++
 .../platform/sources/lark/lark_adapter.py     |  32 +-
 .../sources/weixin_oc/login_registration.py   | 167 ++++++++
 astrbot/dashboard/routes/platform.py          | 137 +++++++
 .../mdi-subset/materialdesignicons-subset.css |  14 +-
 .../materialdesignicons-webfont-subset.woff   | Bin 18772 -> 18956 bytes
 .../materialdesignicons-webfont-subset.woff2  | Bin 15112 -> 15220 bytes
 .../components/platform/AddNewPlatform.vue    | 123 +++++-
 .../platform/PlatformRegistrationAction.vue   | 384 ++++++++++++++++++
 .../src/components/shared/QrCodeViewer.vue    |   6 +-
 .../en-US/features/config-metadata.json       |   4 -
 .../i18n/locales/en-US/features/platform.json |  43 ++
 .../ru-RU/features/config-metadata.json       |   4 -
 .../i18n/locales/ru-RU/features/platform.json |  43 ++
 .../zh-CN/features/config-metadata.json       |   4 -
 .../i18n/locales/zh-CN/features/platform.json |  43 ++
 docs/en/platform/lark.md                      |  32 +-
 docs/en/platform/weixin_oc.md                 |  11 +-
 docs/zh/platform/lark.md                      |  30 +-
 docs/zh/platform/weixin_oc.md                 |  15 +-
 tests/test_lark_app_registration.py           |  32 ++
 tests/test_weixin_oc_login_registration.py    |  47 +++
 24 files changed, 1440 insertions(+), 68 deletions(-)
 create mode 100644 astrbot/core/platform/sources/lark/app_registration.py
 create mode 100644 astrbot/core/platform/sources/lark/bot_info.py
 create mode 100644 astrbot/core/platform/sources/weixin_oc/login_registration.py
 create mode 100644 dashboard/src/components/platform/PlatformRegistrationAction.vue
 create mode 100644 tests/test_lark_app_registration.py
 create mode 100644 tests/test_weixin_oc_login_registration.py

diff --git a/astrbot/core/config/default.py b/astrbot/core/config/default.py
index 461f85cad..7f6881ba7 100644
--- a/astrbot/core/config/default.py
+++ b/astrbot/core/config/default.py
@@ -318,7 +318,7 @@ CONFIG_METADATA_2 = {
                     "QQ 官方机器人(WebSocket)": {
                         "id": "default",
                         "type": "qq_official",
-                        "enable": False,
+                        "enable": True,
                         "appid": "",
                         "secret": "",
                         "enable_group_c2c": True,
@@ -327,7 +327,7 @@ CONFIG_METADATA_2 = {
                     "QQ 官方机器人(Webhook)": {
                         "id": "default",
                         "type": "qq_official_webhook",
-                        "enable": False,
+                        "enable": True,
                         "appid": "",
                         "secret": "",
                         "is_sandbox": False,
@@ -339,7 +339,7 @@ CONFIG_METADATA_2 = {
                     "OneBot v11": {
                         "id": "default",
                         "type": "aiocqhttp",
-                        "enable": False,
+                        "enable": True,
                         "ws_reverse_host": "0.0.0.0",
                         "ws_reverse_port": 6199,
                         "ws_reverse_token": "",
@@ -347,7 +347,7 @@ CONFIG_METADATA_2 = {
                     "微信公众平台": {
                         "id": "weixin_official_account",
                         "type": "weixin_official_account",
-                        "enable": False,
+                        "enable": True,
                         "appid": "",
                         "secret": "",
                         "token": "",
@@ -362,7 +362,7 @@ CONFIG_METADATA_2 = {
                     "企业微信(含微信客服)": {
                         "id": "wecom",
                         "type": "wecom",
-                        "enable": False,
+                        "enable": True,
                         "corpid": "",
                         "secret": "",
                         "token": "",
@@ -399,7 +399,7 @@ CONFIG_METADATA_2 = {
                     "个人微信": {
                         "id": "weixin_personal",
                         "type": "weixin_oc",
-                        "enable": False,
+                        "enable": True,
                         "weixin_oc_base_url": "https://ilinkai.weixin.qq.com",
                         "weixin_oc_bot_type": "3",
                         "weixin_oc_qr_poll_interval": 1,
@@ -409,8 +409,7 @@ CONFIG_METADATA_2 = {
                     "飞书(Lark)": {
                         "id": "lark",
                         "type": "lark",
-                        "enable": False,
-                        "lark_bot_name": "",
+                        "enable": True,
                         "app_id": "",
                         "app_secret": "",
                         "domain": "https://open.feishu.cn",
@@ -422,7 +421,7 @@ CONFIG_METADATA_2 = {
                     "钉钉(DingTalk)": {
                         "id": "dingtalk",
                         "type": "dingtalk",
-                        "enable": False,
+                        "enable": True,
                         "client_id": "",
                         "client_secret": "",
                         "card_template_id": "",
@@ -430,7 +429,7 @@ CONFIG_METADATA_2 = {
                     "Telegram": {
                         "id": "telegram",
                         "type": "telegram",
-                        "enable": False,
+                        "enable": True,
                         "telegram_token": "your_bot_token",
                         "start_message": "Hello, I'm AstrBot!",
                         "telegram_api_base_url": "https://api.telegram.org/bot",
@@ -443,7 +442,7 @@ CONFIG_METADATA_2 = {
                     "Discord": {
                         "id": "discord",
                         "type": "discord",
-                        "enable": False,
+                        "enable": True,
                         "discord_token": "",
                         "discord_proxy": "",
                         "discord_command_register": True,
@@ -453,7 +452,7 @@ CONFIG_METADATA_2 = {
                     "Misskey": {
                         "id": "misskey",
                         "type": "misskey",
-                        "enable": False,
+                        "enable": True,
                         "misskey_instance_url": "https://misskey.example",
                         "misskey_token": "",
                         "misskey_default_visibility": "public",
@@ -471,7 +470,7 @@ CONFIG_METADATA_2 = {
                     "Slack": {
                         "id": "slack",
                         "type": "slack",
-                        "enable": False,
+                        "enable": True,
                         "bot_token": "",
                         "app_token": "",
                         "signing_secret": "",
@@ -485,7 +484,7 @@ CONFIG_METADATA_2 = {
                     "Line": {
                         "id": "line",
                         "type": "line",
-                        "enable": False,
+                        "enable": True,
                         "channel_access_token": "",
                         "channel_secret": "",
                         "unified_webhook_mode": True,
@@ -494,7 +493,7 @@ CONFIG_METADATA_2 = {
                     "Satori": {
                         "id": "satori",
                         "type": "satori",
-                        "enable": False,
+                        "enable": True,
                         "satori_api_base_url": "http://localhost:5140/satori/v1",
                         "satori_endpoint": "ws://localhost:5140/satori/v1/events",
                         "satori_token": "",
@@ -505,7 +504,7 @@ CONFIG_METADATA_2 = {
                     "KOOK": {
                         "id": "kook",
                         "type": "kook",
-                        "enable": False,
+                        "enable": True,
                         "kook_bot_token": "",
                         "kook_reconnect_delay": 1,
                         "kook_max_reconnect_delay": 60,
@@ -518,7 +517,7 @@ CONFIG_METADATA_2 = {
                     "Mattermost": {
                         "id": "mattermost",
                         "type": "mattermost",
-                        "enable": False,
+                        "enable": True,
                         "mattermost_url": "https://chat.example.com",
                         "mattermost_bot_token": "",
                         "mattermost_reconnect_delay": 5.0,
@@ -889,11 +888,6 @@ CONFIG_METADATA_2 = {
                             "wecom_ai_bot_connection_mode": "long_connection",
                         },
                     },
-                    "lark_bot_name": {
-                        "description": "飞书机器人的名字",
-                        "type": "string",
-                        "hint": "请务必填写正确，否则 @ 机器人将无法唤醒，只能通过前缀唤醒。",
-                    },
                     "discord_token": {
                         "description": "Discord Bot Token",
                         "type": "string",
diff --git a/astrbot/core/platform/sources/lark/app_registration.py b/astrbot/core/platform/sources/lark/app_registration.py
new file mode 100644
index 000000000..3420b426f
--- /dev/null
+++ b/astrbot/core/platform/sources/lark/app_registration.py
@@ -0,0 +1,205 @@
+from dataclasses import dataclass
+from typing import Any
+from urllib.parse import urlencode
+
+import aiohttp
+
+DEFAULT_FEISHU_OPEN_DOMAIN = "https://open.feishu.cn"
+DEFAULT_LARK_OPEN_DOMAIN = "https://open.larksuite.com"
+APP_REGISTRATION_PATH = "/oauth/v1/app/registration"
+
+
+@dataclass
+class LarkAppRegistrationEndpoints:
+    accounts_base: str
+    open_base: str
+    registration: str
+
+
+@dataclass
+class LarkAppRegistration:
+    device_code: str
+    user_code: str
+    verification_uri: str
+    verification_uri_complete: str
+    expires_in: int
+    interval: int
+
+
+def resolve_app_registration_endpoints(
+    domain: str,
+) -> LarkAppRegistrationEndpoints:
+    normalized = (domain or DEFAULT_FEISHU_OPEN_DOMAIN).strip().rstrip("/")
+    if normalized in {"feishu", DEFAULT_FEISHU_OPEN_DOMAIN}:
+        accounts_base = "https://accounts.feishu.cn"
+        open_base = DEFAULT_FEISHU_OPEN_DOMAIN
+    elif normalized in {"lark", DEFAULT_LARK_OPEN_DOMAIN}:
+        accounts_base = "https://accounts.larksuite.com"
+        open_base = DEFAULT_LARK_OPEN_DOMAIN
+    else:
+        open_base = normalized
+        accounts_base = normalized.replace("://open.", "://accounts.", 1)
+
+    return LarkAppRegistrationEndpoints(
+        accounts_base=accounts_base,
+        open_base=open_base,
+        registration=f"{accounts_base}{APP_REGISTRATION_PATH}",
+    )
+
+
+def _registration_data(raw: dict[str, Any]) -> dict[str, Any]:
+    data = raw.get("data")
+    if isinstance(data, dict):
+        return data
+    return raw
+
+
+def _string_field(data: dict[str, Any], key: str) -> str:
+    value = data.get(key)
+    if isinstance(value, str):
+        return value
+    return ""
+
+
+def _int_field(data: dict[str, Any], key: str, default: int) -> int:
+    value = data.get(key)
+    if isinstance(value, int):
+        return value
+    if isinstance(value, float):
+        return int(value)
+    return default
+
+
+async def _post_registration(
+    endpoint: str,
+    form: dict[str, str],
+) -> tuple[int, dict[str, Any]]:
+    timeout = aiohttp.ClientTimeout(total=15)
+    async with aiohttp.ClientSession(timeout=timeout, trust_env=True) as session:
+        async with session.post(
+            endpoint,
+            data=form,
+            headers={"Content-Type": "application/x-www-form-urlencoded"},
+        ) as response:
+            status = response.status
+            data = await response.json(content_type=None)
+    if not isinstance(data, dict):
+        raise RuntimeError("飞书应用创建响应格式异常")
+    return status, data
+
+
+def _raise_registration_error(status: int, raw: dict[str, Any], fallback: str) -> None:
+    data = _registration_data(raw)
+    if status < 400 and not raw.get("error") and not data.get("error"):
+        return
+    message = (
+        _string_field(raw, "error_description")
+        or _string_field(data, "error_description")
+        or _string_field(raw, "error")
+        or _string_field(data, "error")
+        or fallback
+    )
+    raise RuntimeError(message)
+
+
+async def request_app_registration(domain: str) -> LarkAppRegistration:
+    endpoints = resolve_app_registration_endpoints(domain)
+    status, raw = await _post_registration(
+        endpoints.registration,
+        {
+            "action": "begin",
+            "archetype": "PersonalAgent",
+            "auth_method": "client_secret",
+            "request_user_info": "open_id tenant_brand",
+        },
+    )
+    _raise_registration_error(status, raw, "发起扫码创建失败")
+    data = _registration_data(raw)
+    user_code = _string_field(data, "user_code")
+    verification_uri = _string_field(data, "verification_uri")
+    verification_uri_complete = _string_field(data, "verification_uri_complete")
+    if not verification_uri_complete and user_code:
+        verification_uri_complete = (
+            f"{endpoints.open_base}/page/cli?{urlencode({'user_code': user_code})}"
+        )
+
+    return LarkAppRegistration(
+        device_code=_string_field(data, "device_code"),
+        user_code=user_code,
+        verification_uri=verification_uri,
+        verification_uri_complete=verification_uri_complete,
+        expires_in=_int_field(data, "expires_in", 300),
+        interval=_int_field(data, "interval", 5),
+    )
+
+
+def _tenant_brand(data: dict[str, Any]) -> str:
+    user_info = data.get("user_info")
+    if isinstance(user_info, dict):
+        return _string_field(user_info, "tenant_brand")
+    return _string_field(data, "tenant_brand")
+
+
+async def poll_app_registration_once(
+    *,
+    domain: str,
+    device_code: str,
+) -> dict[str, Any]:
+    endpoints = resolve_app_registration_endpoints(domain)
+    status, raw = await _post_registration(
+        endpoints.registration,
+        {
+            "action": "poll",
+            "device_code": device_code,
+        },
+    )
+    data = _registration_data(raw)
+    error = _string_field(raw, "error") or _string_field(data, "error")
+    client_id = _string_field(data, "client_id")
+    client_secret = _string_field(data, "client_secret")
+    tenant_brand = _tenant_brand(data)
+
+    if status < 400 and not error and client_id:
+        if not client_secret and tenant_brand == "lark":
+            client_secret = await _poll_lark_secret(device_code)
+        if not client_secret:
+            return {"status": "error", "message": "应用创建成功但未获取到凭证"}
+        return {
+            "status": "created",
+            "app_id": client_id,
+            "app_secret": client_secret,
+            "tenant_brand": tenant_brand,
+            "domain": DEFAULT_LARK_OPEN_DOMAIN
+            if tenant_brand == "lark"
+            else DEFAULT_FEISHU_OPEN_DOMAIN,
+        }
+    if error == "authorization_pending":
+        return {"status": "pending"}
+    if error == "slow_down":
+        return {"status": "slow_down"}
+    if error == "access_denied":
+        return {"status": "denied", "message": "用户取消了扫码创建"}
+    if error in {"expired_token", "invalid_grant"}:
+        return {"status": "expired", "message": "扫码已过期，请再次创建"}
+
+    message = (
+        _string_field(raw, "error_description")
+        or _string_field(data, "error_description")
+        or error
+        or "获取扫码创建状态失败"
+    )
+    return {"status": "error", "message": message}
+
+
+async def _poll_lark_secret(device_code: str) -> str:
+    endpoints = resolve_app_registration_endpoints(DEFAULT_LARK_OPEN_DOMAIN)
+    status, raw = await _post_registration(
+        endpoints.registration,
+        {
+            "action": "poll",
+            "device_code": device_code,
+        },
+    )
+    if status >= 400 or raw.get("error"):
+        return ""
+    return _string_field(_registration_data(raw), "client_secret")
diff --git a/astrbot/core/platform/sources/lark/bot_info.py b/astrbot/core/platform/sources/lark/bot_info.py
new file mode 100644
index 000000000..d8db8141b
--- /dev/null
+++ b/astrbot/core/platform/sources/lark/bot_info.py
@@ -0,0 +1,94 @@
+from dataclasses import dataclass
+from typing import Any
+
+import aiohttp
+
+from .app_registration import DEFAULT_FEISHU_OPEN_DOMAIN, DEFAULT_LARK_OPEN_DOMAIN
+
+TENANT_ACCESS_TOKEN_INTERNAL_PATH = "/open-apis/auth/v3/tenant_access_token/internal"
+BOT_INFO_PATH = "/open-apis/bot/v3/info"
+
+
+@dataclass
+class LarkBotInfo:
+    app_name: str
+    open_id: str
+
+
+def _open_base(domain: str) -> str:
+    normalized = (domain or DEFAULT_FEISHU_OPEN_DOMAIN).strip().rstrip("/")
+    if normalized in {"feishu", DEFAULT_FEISHU_OPEN_DOMAIN}:
+        return DEFAULT_FEISHU_OPEN_DOMAIN
+    if normalized in {"lark", DEFAULT_LARK_OPEN_DOMAIN}:
+        return DEFAULT_LARK_OPEN_DOMAIN
+    return normalized
+
+
+def _string_field(data: dict[str, Any], key: str) -> str:
+    value = data.get(key)
+    return value if isinstance(value, str) else ""
+
+
+async def _post_json(
+    endpoint: str,
+    payload: dict[str, str],
+) -> dict[str, Any]:
+    timeout = aiohttp.ClientTimeout(total=15)
+    async with aiohttp.ClientSession(timeout=timeout, trust_env=True) as session:
+        async with session.post(endpoint, json=payload) as response:
+            data = await response.json(content_type=None)
+    if not isinstance(data, dict):
+        raise RuntimeError("飞书接口响应格式异常")
+    return data
+
+
+async def _get_json(
+    endpoint: str,
+    *,
+    headers: dict[str, str],
+) -> dict[str, Any]:
+    timeout = aiohttp.ClientTimeout(total=15)
+    async with aiohttp.ClientSession(timeout=timeout, trust_env=True) as session:
+        async with session.get(endpoint, headers=headers) as response:
+            data = await response.json(content_type=None)
+    if not isinstance(data, dict):
+        raise RuntimeError("飞书接口响应格式异常")
+    return data
+
+
+async def request_lark_bot_info(
+    *,
+    domain: str,
+    app_id: str,
+    app_secret: str,
+) -> LarkBotInfo:
+    open_base = _open_base(domain)
+    token_data = await _post_json(
+        f"{open_base}{TENANT_ACCESS_TOKEN_INTERNAL_PATH}",
+        {
+            "app_id": app_id,
+            "app_secret": app_secret,
+        },
+    )
+    if token_data.get("code") != 0:
+        raise RuntimeError(_string_field(token_data, "msg") or "获取飞书访问令牌失败")
+
+    tenant_access_token = _string_field(token_data, "tenant_access_token")
+    if not tenant_access_token:
+        raise RuntimeError("飞书访问令牌响应缺少 tenant_access_token")
+
+    bot_data = await _get_json(
+        f"{open_base}{BOT_INFO_PATH}",
+        headers={"Authorization": f"Bearer {tenant_access_token}"},
+    )
+    if bot_data.get("code") != 0:
+        raise RuntimeError(_string_field(bot_data, "msg") or "获取飞书机器人信息失败")
+
+    bot = bot_data.get("bot")
+    if not isinstance(bot, dict):
+        raise RuntimeError("飞书机器人信息响应缺少 bot 字段")
+
+    return LarkBotInfo(
+        app_name=_string_field(bot, "app_name"),
+        open_id=_string_field(bot, "open_id"),
+    )
diff --git a/astrbot/core/platform/sources/lark/lark_adapter.py b/astrbot/core/platform/sources/lark/lark_adapter.py
index 60e8e0d93..a93f01985 100644
--- a/astrbot/core/platform/sources/lark/lark_adapter.py
+++ b/astrbot/core/platform/sources/lark/lark_adapter.py
@@ -29,6 +29,7 @@ from astrbot.core.utils.astrbot_path import get_astrbot_temp_path
 from astrbot.core.utils.webhook_utils import log_webhook_info
 
 from ...register import register_platform_adapter
+from .bot_info import request_lark_bot_info
 from .lark_event import LarkMessageEvent
 from .server import LarkWebhookServer
 
@@ -48,14 +49,12 @@ class LarkPlatformAdapter(Platform):
         self.appid = platform_config["app_id"]
         self.appsecret = platform_config["app_secret"]
         self.domain = platform_config.get("domain", lark.FEISHU_DOMAIN)
-        self.bot_name = platform_config.get("lark_bot_name", "astrbot")
+        self.bot_name = "astrbot"
+        self.bot_open_id = ""
 
         # socket or webhook
         self.connection_mode = platform_config.get("lark_connection_mode", "socket")
 
-        if not self.bot_name:
-            logger.warning("未设置飞书机器人名称，@ 机器人可能得不到回复。")
-
         # 初始化 WebSocket 长连接相关配置
         async def on_msg_event_recv(event: lark.im.v1.P2ImMessageReceiveV1) -> None:
             await self.convert_msg(event)
@@ -517,7 +516,7 @@ class LarkPlatformAdapter(Platform):
         )
         if message.chat_type == "group":
             abm.group_id = message.chat_id
-        abm.self_id = self.bot_name
+        abm.self_id = self.bot_open_id or self.bot_name
         abm.message_str = ""
 
         at_list = {}
@@ -534,9 +533,10 @@ class LarkPlatformAdapter(Platform):
                 open_id = m.id.open_id if m.id.open_id else ""
                 at_list[m.key] = Comp.At(qq=open_id, name=m.name)
 
-                if m.name == self.bot_name:
-                    if m.id.open_id is not None:
-                        abm.self_id = m.id.open_id
+                if (self.bot_open_id and open_id == self.bot_open_id) or (
+                    m.name == self.bot_name
+                ):
+                    abm.self_id = open_id or self.bot_open_id or self.bot_name
 
         if message.content is None:
             logger.warning("[Lark] 消息内容为空")
@@ -621,6 +621,11 @@ class LarkPlatformAdapter(Platform):
             logger.error(f"[Lark Webhook] 处理事件失败: {e}", exc_info=True)
 
     async def run(self) -> None:
+        try:
+            await self._refresh_bot_info()
+        except Exception as e:
+            logger.error(f"[Lark] 启动时获取机器人信息失败: {e}", exc_info=True)
+
         if self.connection_mode == "webhook":
             # Webhook 模式
             if self.webhook_server is None:
@@ -643,6 +648,17 @@ class LarkPlatformAdapter(Platform):
 
         return await self.webhook_server.handle_callback(request)
 
+    async def _refresh_bot_info(self) -> None:
+        bot_info = await request_lark_bot_info(
+            domain=self.domain,
+            app_id=self.appid,
+            app_secret=self.appsecret,
+        )
+        if bot_info.app_name:
+            self.bot_name = bot_info.app_name
+        if bot_info.open_id:
+            self.bot_open_id = bot_info.open_id
+
     async def terminate(self) -> None:
         if self.connection_mode == "socket":
             await self.client._disconnect()
diff --git a/astrbot/core/platform/sources/weixin_oc/login_registration.py b/astrbot/core/platform/sources/weixin_oc/login_registration.py
new file mode 100644
index 000000000..9fb5243c7
--- /dev/null
+++ b/astrbot/core/platform/sources/weixin_oc/login_registration.py
@@ -0,0 +1,167 @@
+from dataclasses import dataclass
+from typing import Any
+
+from .weixin_oc_client import WeixinOCClient
+
+DEFAULT_WEIXIN_OC_BASE_URL = "https://ilinkai.weixin.qq.com"
+DEFAULT_WEIXIN_OC_CDN_BASE_URL = "https://novac2c.cdn.weixin.qq.com/c2c"
+DEFAULT_WEIXIN_OC_BOT_TYPE = "3"
+DEFAULT_WEIXIN_OC_QR_POLL_INTERVAL = 1
+DEFAULT_WEIXIN_OC_LONG_POLL_TIMEOUT_MS = 35_000
+DEFAULT_WEIXIN_OC_API_TIMEOUT_MS = 15_000
+
+
+@dataclass
+class WeixinOCLoginRegistration:
+    qrcode: str
+    qrcode_img_content: str
+    interval: int
+
+
+def normalize_weixin_oc_base_url(base_url: str | None) -> str:
+    return (base_url or DEFAULT_WEIXIN_OC_BASE_URL).strip().rstrip("/")
+
+
+def _string_field(data: dict[str, Any], key: str) -> str:
+    value = data.get(key)
+    if isinstance(value, str):
+        return value.strip()
+    return ""
+
+
+def _int_config(value: Any, default: int, minimum: int) -> int:
+    try:
+        parsed = int(value)
+    except (TypeError, ValueError):
+        parsed = default
+    return max(parsed, minimum)
+
+
+def weixin_oc_login_result(
+    data: dict[str, Any],
+    *,
+    default_base_url: str,
+) -> dict[str, Any]:
+    raw_status = _string_field(data, "status") or "wait"
+    if raw_status == "confirmed":
+        bot_token = _string_field(data, "bot_token")
+        if not bot_token:
+            return {"status": "error", "message": "登录成功但未返回 token"}
+        base_url = _string_field(data, "baseurl") or default_base_url
+        return {
+            "status": "created",
+            "qr_status": raw_status,
+            "weixin_oc_token": bot_token,
+            "weixin_oc_account_id": _string_field(data, "ilink_bot_id"),
+            "weixin_oc_base_url": normalize_weixin_oc_base_url(base_url),
+            "weixin_oc_user_id": _string_field(data, "ilink_user_id"),
+        }
+    if raw_status == "expired":
+        return {"status": "expired", "qr_status": raw_status, "message": "二维码已过期"}
+    if raw_status in {"cancel", "canceled", "denied"}:
+        return {"status": "denied", "qr_status": raw_status, "message": "用户取消登录"}
+    return {"status": "pending", "qr_status": raw_status}
+
+
+def _client(
+    *,
+    adapter_id: str,
+    base_url: str,
+    api_timeout_ms: int,
+) -> WeixinOCClient:
+    return WeixinOCClient(
+        adapter_id=adapter_id,
+        base_url=base_url,
+        cdn_base_url=DEFAULT_WEIXIN_OC_CDN_BASE_URL,
+        api_timeout_ms=api_timeout_ms,
+    )
+
+
+async def request_weixin_oc_login_qr(
+    platform_config: dict[str, Any],
+) -> WeixinOCLoginRegistration:
+    base_url = normalize_weixin_oc_base_url(
+        _string_field(platform_config, "weixin_oc_base_url")
+    )
+    bot_type = _string_field(platform_config, "weixin_oc_bot_type")
+    if not bot_type:
+        bot_type = DEFAULT_WEIXIN_OC_BOT_TYPE
+    api_timeout_ms = _int_config(
+        platform_config.get("weixin_oc_api_timeout_ms"),
+        DEFAULT_WEIXIN_OC_API_TIMEOUT_MS,
+        1_000,
+    )
+    interval = _int_config(
+        platform_config.get("weixin_oc_qr_poll_interval"),
+        DEFAULT_WEIXIN_OC_QR_POLL_INTERVAL,
+        1,
+    )
+
+    client = _client(
+        adapter_id=str(platform_config.get("id") or "weixin_oc"),
+        base_url=base_url,
+        api_timeout_ms=api_timeout_ms,
+    )
+    try:
+        data = await client.request_json(
+            "GET",
+            "ilink/bot/get_bot_qrcode",
+            params={"bot_type": bot_type},
+            token_required=False,
+            timeout_ms=15_000,
+        )
+    finally:
+        await client.close()
+
+    qrcode = _string_field(data, "qrcode")
+    qrcode_img_content = _string_field(data, "qrcode_img_content")
+    if not qrcode or not qrcode_img_content:
+        raise RuntimeError("个人微信二维码响应格式异常")
+
+    return WeixinOCLoginRegistration(
+        qrcode=qrcode,
+        qrcode_img_content=qrcode_img_content,
+        interval=interval,
+    )
+
+
+async def poll_weixin_oc_login_once(
+    *,
+    platform_config: dict[str, Any],
+    qrcode: str,
+) -> dict[str, Any]:
+    if not qrcode:
+        raise ValueError("Missing qrcode")
+
+    base_url = normalize_weixin_oc_base_url(
+        _string_field(platform_config, "weixin_oc_base_url")
+    )
+    api_timeout_ms = _int_config(
+        platform_config.get("weixin_oc_api_timeout_ms"),
+        DEFAULT_WEIXIN_OC_API_TIMEOUT_MS,
+        1_000,
+    )
+    long_poll_timeout_ms = _int_config(
+        platform_config.get("weixin_oc_long_poll_timeout_ms"),
+        DEFAULT_WEIXIN_OC_LONG_POLL_TIMEOUT_MS,
+        1_000,
+    )
+
+    client = _client(
+        adapter_id=str(platform_config.get("id") or "weixin_oc"),
+        base_url=base_url,
+        api_timeout_ms=api_timeout_ms,
+    )
+    try:
+        data = await client.request_json(
+            "GET",
+            "ilink/bot/get_qrcode_status",
+            params={"qrcode": qrcode},
+            token_required=False,
+            timeout_ms=long_poll_timeout_ms,
+            headers={"iLink-App-ClientVersion": "1"},
+        )
+    finally:
+        await client.close()
+
+    return weixin_oc_login_result(data, default_base_url=base_url)
diff --git a/astrbot/dashboard/routes/platform.py b/astrbot/dashboard/routes/platform.py
index 874bc19db..e48bb9c2a 100644
--- a/astrbot/dashboard/routes/platform.py
+++ b/astrbot/dashboard/routes/platform.py
@@ -8,6 +8,15 @@ from quart import request
 from astrbot.core import logger
 from astrbot.core.core_lifecycle import AstrBotCoreLifecycle
 from astrbot.core.platform import Platform
+from astrbot.core.platform.sources.lark.app_registration import (
+    poll_app_registration_once,
+    request_app_registration,
+)
+from astrbot.core.platform.sources.lark.bot_info import request_lark_bot_info
+from astrbot.core.platform.sources.weixin_oc.login_registration import (
+    poll_weixin_oc_login_once,
+    request_weixin_oc_login_qr,
+)
 
 from .route import Response, Route, RouteContext
 
@@ -42,6 +51,12 @@ class PlatformRoute(Route):
             methods=["GET"],
         )
 
+        self.app.add_url_rule(
+            "/api/platform/registration/<platform_type>",
+            view_func=self.handle_platform_registration,
+            methods=["POST"],
+        )
+
     async def unified_webhook_callback(self, webhook_uuid: str):
         """统一 webhook 回调入口
 
@@ -98,3 +113,125 @@ class PlatformRoute(Route):
         except Exception as e:
             logger.error(f"获取平台统计信息失败: {e}", exc_info=True)
             return Response().error(f"获取统计信息失败: {e}").__dict__, 500
+
+    async def handle_platform_registration(self, platform_type: str):
+        """Handle dashboard one-click platform registration actions."""
+        try:
+            payload = await request.get_json(silent=True) or {}
+            action = str(payload.get("action", "")).strip().lower()
+            if not action:
+                return Response().error("Missing action").__dict__, 400
+
+            platform_config = payload.get("platform_config")
+            if not isinstance(platform_config, dict):
+                platform_config = {}
+
+            if platform_type == "lark":
+                return await self._handle_lark_registration(
+                    action,
+                    payload,
+                    platform_config,
+                )
+            if platform_type == "weixin_oc":
+                return await self._handle_weixin_oc_registration(
+                    action,
+                    payload,
+                    platform_config,
+                )
+
+            return Response().error(
+                f"Unsupported platform registration: {platform_type}"
+            ).__dict__, 404
+        except Exception as e:
+            logger.error(f"处理平台一键创建请求失败: {e}", exc_info=True)
+            return Response().error(str(e)).__dict__, 500
+
+    async def _handle_lark_registration(
+        self,
+        action: str,
+        payload: dict,
+        platform_config: dict,
+    ):
+        domain = str(platform_config.get("domain") or "").strip()
+
+        if action == "start":
+            registration = await request_app_registration(domain)
+            return (
+                Response()
+                .ok(
+                    {
+                        "status": "pending",
+                        "device_code": registration.device_code,
+                        "registration_code": registration.device_code,
+                        "user_code": registration.user_code,
+                        "verification_uri": registration.verification_uri,
+                        "verification_uri_complete": registration.verification_uri_complete,
+                        "expires_in": registration.expires_in,
+                        "interval": registration.interval,
+                    }
+                )
+                .__dict__
+            )
+
+        if action == "poll":
+            device_code = str(
+                payload.get("device_code") or payload.get("registration_code") or ""
+            ).strip()
+            if not device_code:
+                return Response().error("Missing device_code").__dict__, 400
+            result = await poll_app_registration_once(
+                domain=domain,
+                device_code=device_code,
+            )
+            if result.get("status") == "created":
+                try:
+                    bot_info = await request_lark_bot_info(
+                        domain=str(result.get("domain") or domain),
+                        app_id=str(result.get("app_id") or ""),
+                        app_secret=str(result.get("app_secret") or ""),
+                    )
+                    if bot_info.app_name:
+                        result["bot_name"] = bot_info.app_name
+                    if bot_info.open_id:
+                        result["bot_open_id"] = bot_info.open_id
+                except Exception as e:
+                    logger.error(f"获取飞书机器人信息失败: {e}", exc_info=True)
+            return Response().ok(result).__dict__
+
+        return Response().error(f"Unsupported action: {action}").__dict__, 400
+
+    async def _handle_weixin_oc_registration(
+        self,
+        action: str,
+        payload: dict,
+        platform_config: dict,
+    ):
+        if action == "start":
+            registration = await request_weixin_oc_login_qr(platform_config)
+            return (
+                Response()
+                .ok(
+                    {
+                        "status": "pending",
+                        "registration_code": registration.qrcode,
+                        "qrcode": registration.qrcode,
+                        "qrcode_img_content": registration.qrcode_img_content,
+                        "interval": registration.interval,
+                    }
+                )
+                .__dict__
+            )
+
+        if action == "poll":
+            qrcode = str(
+                payload.get("qrcode") or payload.get("registration_code") or ""
+            ).strip()
+            if not qrcode:
+                return Response().error("Missing qrcode").__dict__, 400
+            result = await poll_weixin_oc_login_once(
+                platform_config=platform_config,
+                qrcode=qrcode,
+            )
+            return Response().ok(result).__dict__
+
+        return Response().error(f"Unsupported action: {action}").__dict__, 400
diff --git a/dashboard/src/assets/mdi-subset/materialdesignicons-subset.css b/dashboard/src/assets/mdi-subset/materialdesignicons-subset.css
index a3507d2ab..b708b48a3 100644
--- a/dashboard/src/assets/mdi-subset/materialdesignicons-subset.css
+++ b/dashboard/src/assets/mdi-subset/materialdesignicons-subset.css
@@ -1,4 +1,4 @@
-/* Auto-generated MDI subset – 263 icons */
+/* Auto-generated MDI subset – 266 icons */
 /* Do not edit manually. Run: pnpm run subset-icons */
 
 @font-face {
@@ -216,6 +216,10 @@
   content: "\F0765";
 }
 
+.mdi-circle-outline::before {
+  content: "\F0766";
+}
+
 .mdi-circle-small::before {
   content: "\F09DF";
 }
@@ -824,6 +828,10 @@
   content: "\F0995";
 }
 
+.mdi-progress-download::before {
+  content: "\F0997";
+}
+
 .mdi-puzzle::before {
   content: "\F0431";
 }
@@ -1000,6 +1008,10 @@
   content: "\F051B";
 }
 
+.mdi-timer-sand::before {
+  content: "\F051F";
+}
+
 .mdi-tools::before {
   content: "\F1064";
 }
diff --git a/dashboard/src/assets/mdi-subset/materialdesignicons-webfont-subset.woff b/dashboard/src/assets/mdi-subset/materialdesignicons-webfont-subset.woff
index 7549c05d40fdc4a562d4084e2f74307b83774ce1..eef45c7a4783e4c6f3ea6e09f61cc6d60fced7c1 100644
GIT binary patch
delta 17946
zcmV)RK(oKpk^zjA0Tg#nMn(Vu00000N(=xC00000h5V5eOMjmL01CVsnSIG;Y<Xq?
z00tBQ06^RT0CaSBa8gcaWnp9h07mct001fg001^&B0zv>Xk}pl07o1E001BW001Nd
z#sR-*ZFG1507pCk000vJ00I~S0001NZ)0Hq07p;&00I^O00I_^QEaVkVR&!=07+;7
z0018V001BYK^_5xZeeX@002pd0001V0002O45uT>aBp*T002q+k^FsskX2Oxhw<;d
zx9sw^?n*pBQL#~A91BcF2RlXu5f#yqQOq&1u)9SC$8Hf!Y)~;qQBmx`F6{2k@BU@x
zx8E7|?YsA$du{+#ph>-`(VDjVlhzsh|8F6Mzc2EcimgZacLmD_{$;_yAfH_+pqt$&
zpxJH}&|<d>=x)aa`R)UM!X2;+1KR9IfqPf*SwM&VI-t}382GcO4Av0GU3L|%nqw;}
z>uI>-hFxDH9QU=`1oXGt2P|%P)J~3<uzLm!uzLqAWhVwKZO;i<#!e1c)=mjn&fXoA
z^H-S@u!4OkDCe>=H(*8ky54l`yjGpNYI&Z9SdXXL+p))2?WaY59j|8l2drV24H#;d
z4;W?#2CQj^1gvFO4_Mo75wMOOsZoyCwa!m<jN{?<$N=ZE>M>TQI^MuuA27nc7_gyz
zEhyJT_3eO-?H>V~*uV6*<4q}Q%>kR+dVu>?>m9JA^>}MbICg#21_XFMYaVlLnB#5j
zS^=Z%@St3SwG9G)M%&E-Jigj?0b}e~mFsf{yK6xCe|rS%Z1)bzwOrdTU>ED!s2%FK
z{JUoYcC!mq&ck@SFkpB4Q9$|KUj|IDzXZ4jn`!}j+13EJ-_$!`AG=JzzSi~8RIY#b
zt7*M}o_2V^{&t(7y#AU-2OMa33OLA~6>zXUC*Tk}IlyCoZJH8rsJ$xSFnfQ%;dV~I
z5%%E#*HP1R0h8<t0Y}-F0*<zCsa!M1*iQnEqv+NeaJ*eC-~_v5z=?M2fRpUVfRpXG
zfK%)q0jJvi15UHY2ApoE2ApB93OLiw2ymXd%?dc%&JA$Rx;?G=j?c9V0?xB<2Apr-
z*9VR-uzv=BxJ@sEqPgPuLfa8=kzF+4V(a~-xxB_Nv4aCHvnvN&ZpQ~)VJ8G!X(tAF
zOwCgRuC_M@Tw`w!xYo`IxX!*1;C0`;FkqVfB;W>$mU_T+J1oFCYjMt7%6;fz4-9ad
zEe8kOWM>83Z0`%Wg`#^O^>uu!T{U2)Jt)Ba?S4srz#Vpaz@7GifV=F10PoH9_JDir
zDgpP}!vfrw`h@|r?L`6ZSN*a8*L!_NfZM4*5#XHFUkrHAz8B!Vzy4`}*F@dtTKyZx
zkJx_#9;Ik)33$wI72x`6oe=Q2ofP0U+lB=^X}zbnt?PK6oe(hJ9vR^MsqLtMXYJ$w
zugkW7R|1~5?+19!+s6lZOznFGc)hk?9q_WfHo)&_zc=7jJ1@YwZ~q{`=R^D70Y3LS
zjt+RkJ{91#((!zN_k)fF0X|PUz6^MWqI0EyckSQ+=eu)SfXC5!n`Sz8`<-_Od}#j(
z%J+_9K)}a#Y=G;!m>A%BD?SU#ca!4JfX^v^x&{S&VTT5|k6pV5d}ZCgu5t}{&bz)3
z_?BXk*8;wy=rJb1-}f99@PoZHDBpd0&JOsAqE}nM&vuajpCP@b1pI3M2ftDD?i294
z{Wrj8a-$L8F*Q~X@cG;r8sNEVtRLW<HMR)wI~tS1*GB7g*YH}X_zu~)GpP6+>oXvK
zsQBL4cj=(wdt*O8)9)_FKL7g<3M#%U_8%Qo>i+@ViFc9!c$}5J3zQ>Sc_tWFAw?+k
zmO>GsM`om?NGVbgnaWBjrKqaRtWs6iqpPdByZRyZn<*FWraRRSSW^u&V4~X?n!#YN
zIV!_2Fg=WML+Rkf<}qizK4XFVFw5Y7u?^l##%8?6jAwVI5)a-T<C!_ORr~+<hLloP
zb>q#F;&CH%<Hmjb|Mx$O^KtM;2BgOYIT?=XYFa2&)>~R#C-bD(Tt7w#XVmLw>UE=b
zcWrd7b~owO&(`6ytC^Z@!-nH{j=OQ4?2@Zog3EFi$CXPJbKPk<t-7XasuClA{J3JL
z6!WEZU;UV`xn6_1%~MJyU6`-U7t$H!l$kG=Tjg@zx_h%w*u49G*d4iCDHr5qEC_$G
zq+BSI)pD~^X_njG4Y0G0UOqxw0dKGet>8J43qdQ4W<!B*pvV)&g1;La+1=~+hIWti
zr(2EpXZG*sCv9A>`PeU&sTRS1Zs6|PMA<*b9p|4s-^T?wiHpJ+U*zSYqcoZ#d<nM)
z&;RG6fAtGcBk7NNq&?ajcDt@^!>#n!pQj_i$&I9=iKe6NS<maA|GfS@>D}P2;L(-w
zodfa|-dR?P^hS{k#&_&^zZu{8Id-R`6h+N3MXf^)-Z*~tle9)7Nh>se;mz4~g-o8!
z=F8WJ%gu8YI4Z@6VrY&5^8{v0I!26=DXNY7F#@A2u2)JzTCKMTxBlRIyVGqiox1nb
z($cBw>XN>G0?O7Ol(LIi_z)M)I-M$Bg<JCa()xo>KDa(i;l(U{?v1}AzfC>>{hEU3
zYNAd=v!!ZcjbLM8Dt$_Se<A6QeNb*?f3;u=PyVx&#XHCc^cS)%`GYZk@^=e&EUx^s
zCj(34c`|@^z;So>$K5e1CUj7xBtkC<qM<Z|c>-G{t-)3&^_J6U8m%n?+vd92Aa)o2
z+|78#&{yMnd{s9x@y!*VZTnU>lN)C?lHSSCb}cuTF!UPF*K{L)k+Y(bVk=U_o;Qqn
zJ3>#Q<KEqaIgsFra3nUSd$idoLN_<+no}{nekc7-yR=~x<`%3qSf1@sfBLN3Axg*C
zD8(1@a5_2YbjE$~H8OysJhuRSP;3@W=mbMCN`jJ1tBqp4)l9BeY|_M@fa$tRtoAiq
zfgwo|3%82W>)F?TuiCbqO^tTP<@R3hVErc4-z+L}Luu4is9Z3Lr3zHu+JKi*8X|lZ
z10UX`&$-SX!m3p4Yui@44IlgZb>hxG%Kk83u*NfeNY25^<0PCC4jJNtc;E-bW_zzq
z{{!yf+3JLw%rcHOF<>LTLw^VP(w{%H@J_<LOMiLcGjRTYp&vX1g`EDfj!&4-IGp!W
z6oQ*24y1p8Fwoh{ej9;x1JtobCJSbk*l;jDwYwk1O>MST#VdvlaSuFTyeePh;*^RP
zXNOQs7L(Yo`y&Tq>CSW{4lXxUPk>XPf3O?1=7HLFw)G32(Wh$b^q^p&H(j4s(}zeK
zY6`;<^slpD>O=ZNKBT*@ep#nmQlh)dbUS|j)$y-nq(aAiNZ;P^x<6tg?-B_|Ue@p@
zpQhJ{M0ex4agNr?m2rh@<Q%>BrkOjs?2hA<p#00}8^+I2*>$9%>>2N1*ZHaO)wxBJ
zz6u$CYNU~k!LE5J@zz_7_L0j+@y6}99?72?x9KYBdi@J;1>K7s+}Gdnj`4>$QztX?
zFoWEl&OkOBwf!0#!a+-pTz)%lK6vMy`uIcoULkC@r^>mR9>{X#o98%o1nZPInSRhz
zFYG^)cN~5EndyoB$GcOvczuC%GY_-Y0NMh7Km$pos^~;X3qZpt=X3Tht(~q{qZb>;
zyXCdROV5||PDd{(rw&;sq_wRFj{BYR(&0}Ov9##T#v!Z*o!f%BRRV5+bs-UhBNd1j
zuz`wEryOBYhy;|~*la*M8l}n>F`5HLFmY>H*;FcPxi^*In(V-yZtZQnvTfg@$ZOeu
z?s%P)aiNN<gwAZ|&2NS&`3rRWCU23jSq}K*#trz@i!fR;r*S}-%19YzNpeF5lDtY9
znwpLigA7L3NH>|yCP&wBJM4YAvw2n!&TQF)131;0UiG6L+wOMGh)MAbn-M!62avfr
zjw>2T;G2w=Y!F6EOiEiC$s*}rzkVHS>%q;vH@GD921jfQp1VV<x0Bf}JZp#86W)UB
zF2d#Dm|`{nmk2WD8FEG1J3DO#DlgvP#tkK0XSB;u<kTDN(;pXbK@#gV4d8u6GHx(5
z^A2@ey@Obzy=>}QDhoZ(Qxto&=T$Jl7B51RzYG@={dqsV0yJ~g)ab@-Yj~uw-Tjm3
z3?K(1kMzzw^2n194InlL_%VqiQf6a;Qoz9j=x~bo+?kyR^infBuU?yCVpi`&jJWB5
zaJQ<WcdLg@jWdsOf&<v6Op|2|Dgo=0kPR3D-{6y~4I>|;xS7A(ottw%jT^$@wN`oH
zU4jh>KXmr&L-?f>;5w7+4Jv=9%K3j(^p*3XSkyAmfbByeCp+ify|#RNe)NIgf|B5|
zdIk!Xt2LQ$xAA$PG@_U<`-%~`nEA+>w0!*RL#eZQ@<Im+((<wD=GlkhwV=mI{)l`G
zFj^8?$pJzGmT??EIECPt7vYS2s;2+y<%0QHedSWBS&^#`e?x12TK|8>ivC%%aQRpD
znju%3sp`X{QB(W0KE_}JDxD#MYii|bLIKjw^P?ZLWt_@FKVG@g9}_*8<{WbVso$r8
ze*#S-4WyJ))Ki9qrFmbd@%jG1W#gYUfi_xJ$A&p@rQjlkgNlK&j$GFr47%RfOxJ&l
z+F_0&ke;piJ3~r}4^)3Uu<Z`YmHr8)!}S|R4q2wMP7|e=hI0Vj5&P=Z_AdNc(+JPD
zEvW7m2oLM^>NG{eF&moG5O1pUVS9DeK7E>Q-RXMoxu@5I@9<#FUQa|Rnw=3y_+k>I
z1!51zLj{Yh590j(SV32GK>`sb+&d2KD|4${17*FNurcN62C{!|MPp1Gjv9t1k)Uj1
znDCv!&;LFhQ46g|dRvY*n^C!2fWP*KK^#)mSzP^<sBF7(v>laUs}yXv&~7XH($S0X
zhVzJ)oCd7z*1B0E2ruLV99hFQ!TGnFS}rWh;cVuS%4_=)(i3ZGO-+3!7)qQ>g`{0F
zBO(p&%oLPqWRHJ*iH#N=Eco0sT;~h6U1%&8E!`?EYSZKO$}79Cz~4<X0eH<{(V0;6
z&<NlW1eB(t3Z+$2ahir%0YFv+N)jhzV{=pA+|psYwfPW<rUX0aBkvCQq9U=ys4wtt
zKU~__z#BF<|KxMwDBKWw@2A96D3lUEHOA|^K$C$>%Ts^zV~e1`y5o*lK{h!cJ#U$$
zb|$lSmr`@o_}~%%YzT~gwh|QWx7C5YUsJo?X>a%K>B`tl^%0n<NrpoXRueGjNwY|H
zuGtju5x{ZT(J82hxFeVJ0O3q3v`0IDd#2jRqZEdcdGqE5QeZaIz#aSM*6mQvrO<In
zYsOgW)+j()tpGOBknO=_2LRh7itp=Koof%0+4<8O##I}n?zSyOy``2-y(eXCM6s}K
zPgd9^N?B0zM|DDSQ7I}wq{{n~P!SXYxnGlJ5h{On+Zs|O!gl-WwgnZpx9Jg_->RN6
zt;eMG(AqXAg;0n+Rnhfrt555>&gwzL_19Dax{v7xfT3zCjFn(k%(aSHfn~7XaG*?E
zgN@U2pscy>RGJl7{ZQJf1A}eBMKLX^z-|SR3KSs6G$%@idrpXASqbxg(I4;!1A%B*
z@I@+>Xu=m>Ru@#iFDL}ViB$G*HYbPtL7!h;(CnBPY~M3hOIT-~Q;8T@43jw$CJUUE
z1JV4^fJoHm&XZ~qG7{L_a>+E|Jd;jm;JRs+mgkO5ldcjRe+fAn5Up%33P8`QpQ*QJ
zmA6MO|6w{Bj;UcIn~xw)H0pI@?tit&L3Q$&#<&zAHt7m6fg9{}w^620fNKwjgE3_t
z9KeSf&{3e@AP6=nJ~R}zbb+p1ySB@gDV3mXwzO^y4{y>?6HilV{zMHm0MA`_c(aCj
zQXgs<%eZEme}??J`Y0Z*?m^wJtCc#ALV!KG{`$(P(a@b>=r*8S;6Bb+R-<^5%16lm
z7!m3N1v0YPC!!~-r47T_C{<5JZ|}DI47zvAhm50Vjv9x`ole*5pCOD9(qE)KF!?-H
zA}UUi=1lN(qd8GCzEU_8`bN8bCREp#4j*2MB0-UTe^iy&Cay8xZnx)+!xs;?8Lio)
z>c`29=u-TMteOh?R5m<L$UB8pn2E6Al<*k2O_H+7-DFmhe$M;l4zx24Z4`_64{)pl
zxZ9C?Ao_(ye-<Of#FfXzv&mP#25mT7J9}@XVszSV=rphYuF>D8VU8UKP6G%|YsASa
zF*Lr&e~TvJ9*BI>|CzvU<YR%=Ro)ivCHLwd{_wfX&)JsiM5BwR$-?N@DwQ$%7*gpc
z%^gLGoh%|@Y9MQYnJScEF>7>CKoS7L1=FL2dS@Ii0l>xrfx7{al*~4AvB$+oJe{3i
z45b8KxGWVj`C=rTl_DW27?<+FY$`J!38_*ne;`J~S`>eAJRS_?^Y3|gG$in$STdd0
z)Mz;D4@fa7o{GovRx~X6MP5jRRHnE1GwAmZ1Aj5O)7)LuPQ_F#RN;aLsAWOUhOZ#9
zF$clM92ZkPHofls5QomGx0r>3d^~3uxsOZ2ql?)`vx|$_x8{tKVlWt$g8%;3S7N~+
ze<>_x@5wF-u|+Juh?^sSC#6J52uY@qyO=XX?^4cyOMeT!Bcwv!oV^NbPz8B!jcMWF
z6~xJFP&FapsZ5C_GAjFlnZWX(yZ}VN>ZzrY9+6xrqL-FVX>LU7N|81QQj2rlxyAW4
z(qB4NEuToQNs)-OmOfF2AB=j60;lBde{fr&8ErJ8%>o>b=L6tIE(L8`g7rxi^WMs&
zM-?=DIEF%TDAj;bea3xezT2H&o10sk?{@R%gV(MNaX%>?=FKXVL93=<b*pB}J7w79
zzmac}4>8@EgP;J=Z_8N&ey96{IBA&<j!v8iX*4711j=Hh=7XgsXd(_U@&dE6H2wo2
zk`k0yOgXPO&Qd&{E)XdMvY&ijzFT;`E3)tzAr%$Vj+4HSj>nfAM=9j9AsGb83zK&i
zH5Ia3_H-jdN;&ApreglQ-7Dv9J74CL!4?z&7L(Q%B!A_0xhN#J3)_O(sI<%Fb_J;K
z#lwe*3x^F;fGbI%SZ<$hmu)P+cz7~5Pf#hYglL$(7gN5Zg)*Rb)Mkk$h{jBZL;mIH
zmm{fEgggt|(eGE;AK8S>v34r*8eW6V=3VvrT`$+`FP}Pf>daV9W>gU+#SJDWYgESz
z#KRaH$A6efkeUUN_%s+asC#BXk;>K}q4sunJ9ainC1>b5G?ML~0I;=Px3k;5#Wn8)
z@7Sl+ZBKe<=-T^7iSOhKpd28C$7_1r9*zzOV*Orkuh$#POl?B7$H$4e)9ZDxeBUMz
zrIuAH3_6}D$QQ+A5k-w;wu35Ikg{LPkuDXt-G2^3mt=Odn<F`H3R^^h8!I3U9H=V*
zE!L>Up*d6K=rzPagTbJK({ZNiJ_sKjdtWb$)`il9`m>3k0cH_lY-+w{18@s9l#X>|
zUo37cT8kS+E2*0>yXQ&2oOg4TO3uxfhvjxvIB`O#w#$mCC+3hUc{UYp7yBLME@t%{
zSbtOUGitM$2IZjG+?!RJ46MP7m^@`W4<crUsUy<4iz<!gjCf}d`@*;NZ`<~0x8I-G
z=!k1W;f4NaK&*+3-ydtHegN&(p?4~Pmk+_n*9g!@RG9&@h7V9rB@M(BrE!o+oHfM>
zXiYQF6a`a(=^)x5P84|Y)j%xpd4XT>`+tK<`15!Y4u9)?qaV61v9`nE)CVFT*bOAb
z!vg=9-~T4R&=Qk@$aYkC6PyXr=Y?PS=-Drw`=#4|@zk+E;O_U`soptm-w@g-Q#`-G
z87PfT8nf=TQb7xiK@ByuVG0?JTflb1rT1E+_gO!C0vqFA8b5S6J~*qM%beBD{eK=l
z{}*rnB_^ZnkQaegqJsqj8!G?qPalNkOrECQ&!*27A(!fB>xJcoNGe)@9h{_!cBarQ
zkoJ!k>-9wvQVRw3`^a3s^(}Q_LH$0Kj{YWN7gL2+;m6~#c1f3M&C89X!NZr>oz9@s
zv6+^6YF0^H431js&>_I`w1CoZOn>rQf=~wzW?me9;o=W35(|#&0-Syc&L|hUL4O;B
zbz8@007o_yM8NDo2hwX+;siY;S}2@V5cVkaEtw9XjTAj!?%3-Ot^-0)mlmVa>dHB7
zRr15DotGlc6Cb!8-g1akznouxs9`UidV9n#t!n31R;B3T5_ZAuA9%u{cYk{}au-HA
zj=B}JH8d1)tX=4+yQ=+M>AB&+vIYQ3-HF})D!C8)LQXn^>*QXT^t0B@vgaFsl$P{e
z{G~g<%~-PdBUn?^ivdWl!@doXeno?R0lSDYl>AJh8|-NCjoWcIZqJ;psIJ<vT^ON`
zw?p%W_fC5-hgRvjXGpR_`F{Xqs2(Ju_CPkb7&AbYN4`?XCc6vE3*BV4kSP{3aC%Sa
zQ0X2xg(<YtWqWn1*t-jVgzrA#Ng~kIGFRnR05dkZBY>Jtpx%(_JH)ZB0{dvJyQInw
z90b(y@OUR&E_-{?+qZ2ShQsavw?PI3jHioAYCMO6(Ezs{-0WD_I)6ZnQPf1mGJaj?
zq7K@DY~1YNX4Vos&wRmNPr4MRZDViX`e5ywI^MtwVte1@vF{_*LtH{;#7rs~(k7v*
z0>nb{uFNrmKD@T^NPIbVvI<fs$ey`c>hx7|M9b61-F~=ysI+lrqm+iyDGe?UD;MQ{
z=>0&`p@a-bn|zQtxKFRxS8i~h<0Zbr^Pl_vta82eD$kewLI3Awb+_JId<|AX2v$cE
z=pwYZVpewg{d@kWrBve>;X3{P1I@#aYyg6hCKlH?tc6t%#T@5u<C8xe83y6@b&lVz
zlU^Jde;sSbCLKBzuh~?y2ycSAC3E^6%2YM47)&feir@(<Gl<Y8{K0qg-oqUG;VG&V
z>Gx?naHn3~e}SvRgD--wVMiqkTMHX&|8<DH|2`dfgKMnyI1WQ-{eVjV-)YkJpXAPP
zccA1dPg==Lu`ME+6R2()lOvG2oxtQ)4UbHof4+w~{VLvY{K)oOrbzyAUKxE6&;QW=
zEbhv7m|vbFFW~Vh_cbZ9`fWu?B-lH717q3#iZnWuSLhjgqh&s{oM%F%3j>v{;Sj}t
zYy5&9X8bm+@gR3$O8!6-2FP!yFo+X)1CQf~f@oF%fCvCYgtR8c$O6#;p1`SRS$A5F
zf2JZ@shEUYSYAH1yzCOP!V{lOg8pVI6%_nkzYt8Nn*JcMeS}}R)nz$3zI+9%IJVr1
zq#_0{`tRU*pAr)f`vU?0VKJuoc>WH*$Q!r19E^@Hd)(!FKz~zI`-Vmh=z9kz6b1T?
zBFZ`j>Ae;HHa1tRLScC6^l)P|yaXqwe~Ehu{@R->Rd?7P!p@U2P^&0;IGHP&)EEyV
z8vx>MdSBvp+U*W}N8KG*?w!sqd|=dE`kAUn0NM~k<X%SWezHMefyhAl6>7A?Dy-4f
zot;hxE9s!p-6FJ}n`H|`=1ry8L_wxa4QVd5PFg+NzQIj=RFSsB94~98vkK#^e~E;9
zzw!1@Y;Jzy?Z(B6S09gl<Rj6?uW}PR##KOo6b~#A^a7(laWoj{#W$T*exCjA{qHy4
z@vpnVV~>29{Tk|-`n^Okx9FJ1$-z1<DreucI9t&>*B;#pcDuo?N2e;A_;9ruwg<7s
zMR}vW@3k?c78g1uWz_jM&7y~0f0V`+0qF(tz)%@oQxp*G(EQTw*u5SwO4r@B$M%*1
zUH3)C_nPaDiHHjZ#WA-C5^&Fy&h$7_KAD|~r)GQBhjS0U(?v5Jb`J0WYCWgrA%TiR
z1jHd!f;plyp(^yg0aLL4@>b1W*|GrJe)AFaA!IpjGK>7DhhknYmA$%pe>S+h96Y;<
z8uH5z-vyWiuXIymSr0i)ge!21s56@3^0HGg#R=0ziHz!BsRoHEuRK5CXY_bn&mJpM
zPv9pXYN)?sA=pr=r|vnuv~>EOQ&kdONJbaZ8ok_juvy%CyL;6hx4@-yBL=f0LnUKT
zgW2ntnhE1(IzTJ|5s9V?e_Rq|%T5Ot!8Q0;Aaw(b?7)*cov(B{=fB!Hf4-2g$9`3p
zsec6GPU^Kt-TgGeokBmVQ*^sYx3AIdwAYZpYz1^Ri_M}k#6`D5te)HNyIrK55pV36
z_6DV7gUV}&=gx3<qwPp$Y8p?kKqugO#R%XD!<z^$$Hmk<t$4m@e|S$|d_r*`)rLap
zZE_xv9bi2xCy)LTEs-CSb2hqH?e%(tyu4(So;4a~Q?|W_T8Lqr&{F!hB<J0B8$`{V
z{4qEMNwf!LIm=es?H=50(TY%IF<t{hc)tMJW|=A2q<&A@G2a&1>FCZ!baz;Pu+@67
z-s$SjFX)4=d-UlGf3etwr;oa`dKjciapu2-yicSa3+PxefWIBw5LkO7cW1}7cP6X&
zJwRF0)E=wAY=qT-V3TO;6;nAz%1T2^io~vMZq}?*rg<tnpUKRRzTfHf$h((gcmMR=
zvE@+fu7~ex{l;7^G6>fmb$isG0B78PAm4yDLuzDGUjh+ce{D>Z*pVi-bOQX2YAP`R
z0?%}xR^!bW(S0rQ?v{M`u-rPOX&*JBi{+@X9FO^f$v_|+sXqJcy>oNbXe^kH692;K
zha<HIPE~xmoH>4fmpo;iFwGN|uid_yv$I({2UL8U#N=QiT%Di4_t|Hw(NI80NVSJg
z7b?EWscx;<f4Tp71_)<pLN8E;P@rcDT!pIvK0E@LgewEnZXjlDIgJ=VkjlCPr((ry
z2&Qq2ID*(vHIN~(9JsfmYDP;lDyB|Ms+gXbp&sM;+XdlSIea{^YWy_M|1{s6i{2Z3
z8=UH?^T#78eYGeExAXjCSp3D~VOd{&KXZBYU_2Umf3zj-d83*)pN50%;>WAY%e#3q
zRNS$PA@ejX%kDtoa@7c#k9#h$WBZomS-c0-zQufW7=2o1-rml%#6h_@6w0u?P3jyc
zqBvj#;P`@G(LYMXfHSyxx!vBV=oR?r@3O3)hy7!1;2f4!g_8fry9qXZ>sR3#5uo%v
zZP--ae{T)jV?D$k`E}~gWVS%`0oWj@noa=s)Q^*6g#5+V<H@ZD%}3jBlH&#aV)^T0
zQdk2p^Y!w@t$6Cu_M_$l1w9%6x+ty*@|64`avJrorxG$l?4Gnt&u{kcnf}|Jl|xVl
z#MNxgI(T>-2P0cD(4PkNqNcGB%y~e7$zrI?f2Y^r0TpRLeKp_$#K|1LYF+)2wlbf#
zGfU6ty^|lZFWH&LGxo<z#`~IN>n?m?yIwGx%RPPj<j2wSx&7E<9u@e1DZ<o1nyFGQ
zH})sMpduQbge%N}$!a3-)Cu6sW29mZy?~`c#m*H**9tki@{K}aF&f>5l~OhIG)#dG
zf8KGXz7q<i6rhATB^3(&{^A3L#Z*o1Sx@(>rP96k&RR^-0$XM>H&Rz;X7=;b{BMsM
zWM`(fwJ+Ve_O5$<cIJ-UeYw^{*DQ_+JxE2xDVKnz;3!hBW{p|cHP0)xVkRp_39f@=
zNc!8`qrWN57gf<8P!DHHb467-o!<bVe~9?SWUf@rpH|f39O+-We(9PROpg9{zevK-
zU@#GtH6r?n6O~5a52a$HkPM159^<J4-mE+&?$f^FkJHeAX)p27kOl`F@DE=&Sknx6
zz;!s|f_`+r@76!!=$*mL6Q;V3NWb9d-2ojnMhDQls)jbsa$WOOH`FcPQ{Eu2f2_ch
zO{Tapw237}+1ELdK03fK>j-t%el=xme5u?jyKQDi`D5x2Gw_|<H<3_#3A)hq^W}2h
z9x{81Lj7slGtm*!I3|JW2R}r8wSfmS*KGvh6J4Trw~PzT+#pGVMIQ_S&6McTjeUJu
zkH)`=remPHoaq4G(eM0`{o0-Ae-C~q;dbxTC!DqiE7}B(wn{P7SbsGB7RR(?{MD2R
zG-*Nu+uq-e$x%;HR7D{@)uJ{HOC2BVu<P8+s!9V^MhhVILzs3wIN<-PG(49Nf%<|p
z)?q0)Xye_x$@gJut<{XW1sxv@#8P6!3JC=vRBzkFI^d%)J%{YNfjBoBe-c8ma59&O
z2Ir)hY}8SYje`L+cY!;`o#ifa4|zUEX~Cd+KLyxgh54W{i_m(j_{L!YlekD@e9#yl
z^t`A5OAbf9KmoFOQ_MgQWcySkashYI=$E8u6wZh{4iyN5!pTYez%4=vZgBXsRAhR~
zP5GiCGCj$iM|>}$Lom~!f3LS36foF;0KkGqJLnudDZzhZvmZY`m>2?yvO1R*lS;W+
z$;fi1(kyFop;=KALQ;jYY+8`#zRX@oV!MCK-m9O8$iae)ODbIye^V@`y~DR<k`Y-f
zq|vscmI5WU*kSKNZ1!5V_i9XQ{(q2{xf0;*ZJ2iqsli;*VhGg;e{z&2a%7#vfR`A8
zqx)h$6P4(IVO8WWl{nSZ;4Sc;TFa~)^Winhe&Eg+K^F;8Q=x9GPjf1N7GGVr)j&M9
zq>@-(N=VDCgyefCkqUECvM}d=!2i*_l@<zza+yjbAI!z)mPKPO8BaNZq(-vE3?WiA
z{pFCLuQjZ&#D{YtOcBD3wRBjLgC~5!(0m~gibZ2<30qbD`k{4IRsojAqgrbrtVNS5
z@x|dmx|E2iKhGCd*Q*N8XXQjR;p2-<oA(LQ6WOBX%Oqo=^OJBV9e)^~Ud0KZvxu{1
z<Ko2W@FGz;PG|`1>n>GuTeS{`&RP5GvWueIwP|}LBD@1nM4iWhCu{>1Jy2`k^`cXd
zLx><@V2nf@y6ZSG<3766yi?N8A3d7SZ*2Tk^ZDnS@O{NQCxeYVJq*y|X7dUy&gU6g
z`aabCPS2x|laXK_Cx0yJiE_7(P*L(tOq~3}UHa4CBJW_*B`vz}g}e1<zBP@z>f8o*
zidsJDf}`$rjj?)A8LK)cf<AOO2!V7#PS#;#vi!JIHWE^oPA@5_(^MGNW5-aah9cR!
z)P;rRg@tQuhc?+rI*_lPsz#)?6j6~rs`L<w@_}?DnY~_s8-JGzY|BRJe*kZJ$%}_G
zfI7r{I?6=NM%ojQj`>v05m`9g@PFQzzw^S;bo%IpJLhdX7SEU8{N{7H>>Zacmydqs
zj`$=0X>(qYk6gHLB%PjH-YOYpuAI%DyL|cfTyAl*_wY*2+4eZv9|1>0tw4rqVSooR
zrMw7zZ!{_IZ+|qMiaF_yKTwtxzvR#J-+6KQ#bua~Za1wl2>CDI63^%T(!1eO9|PX2
z9p5gCf1ku|T%xh_^W1*)yi-?!nv^O)4#r^{C1Db{u^+AROzw$yK9R%CIBw(8I9B78
z*74&l_<HjlH61MCntBScXu>U`8O(m^kzR4)(Bv-8C4Y2NonM>VZUcRtTZ9I8nBs@D
z=WF68Jezl~ha~e8Vof*J>UVkJF*6=wRrFD!9%BCxhp<)RITKUggunPnzF;fcg>o71
zyzLErz}{2%<R`~C=zk$!W)X(a+vpX9yvB4?B;gek?VhH?*MOP}=xHm$WG@}likeo;
zn`JXJ*MCwn$z&#VDAVh`P>s$PQc*pjMGK^t(~1v1SkR-9fX&P4?1|g5N%?Ybdvvw>
zGxdUT&wN6%qmy|0C(%NI5|^VHr0u@t)mPu53|@WJyZ%?y<C=P^?0Z`)Ma3z?tS9}^
zkoj2mQ`u3!MxH+8*OZBW_0Hg{v6NR2`jv+;Qhx=Vi5oN%gT-hf=~*7_9QVqQ#>GXb
z)m15*<LEtQF#56k@U|p9^$6fj*WH%#(o-BmGM@kZJoN*u-pYHO_iTtbo+64o@Iem_
zGMM%|Pj;={U8~!*J1o4VJ?({lgR|`&T8`?WeJLPAt(eprf}svJFjD6H=DDZ?R?r$A
z7=MCZL-6M?H6k;5;B#NPTMUM!2p$jT7JXJE7!HR(j<JMbTs9mF$rd)`ZUIOYb11nZ
zqe)UY6$?m-gcJ^lT1?G<ct1)8XFPhrP+RhBqzF1`XcJmWBSL!n0fqKx_rGlR+4}zE
za5xnNf?9NI^C7mn-42aQnUW|&@H`ct=6^s(qYXgT3`cD2yUdTDxHoV+o%WUMSE~13
zU|v&8DkZqDz+iO9mEp6ub(qhT&B*Y+{{6jx?*ZErG{K;)I7U1)13h{iJ&IuuD+!Y*
zXwz}TQYue`&9=n145bt*1QwE!B$3*u0(@&RZG;N`^zZ1Kn+sc83mB(C?)GV^Er0uI
zqsIG`WFeUlcqRIzeZo7BBz}X%d(fbc3GM6woz_r?P4T5bg?j2sKBi>iDgrJ#6R6M&
zbR1rTw5e=Qx+vQh7_I)zXs8rU&B+nCLkXwz$w(>Gm%>Q}oz;|NSh5-2Zil5pOf%=C
zU{K00X|aOjwdOm326Diy=vvtK_kUvXsv!9ksmfKGWhkVt*j`eE?QQhSSwfZ(8gmms
z;*<0U_H_l2_n#^@V<|7ZX#Jdrp_nBt$=%1jZHkL%`v|(ygf0;Uj3H=Ye7cF=J;wl|
zz!_8QD?sg>mgngMBZzS}F|vwYlR%ewG{K3QfI|!SG|=AWm@S&^Vs$^m3x5-5w|=sr
z?F}w(1kGF{u@a50B-V44U?Et^t+Ufc&I}TT>0K<wYHo0|_Bcg(BWvBktHeDV)YZ9S
zrBcePdhjrw<%?#eIEQDR7U2J;eTy>8d#61$H8oBIuX}*<;4EYPOS`u+>D{T$g}#NZ
zy{QV=Kn2ZJAYt_9TLgdJLVx(U4nJP-jekk*Q+0h=*MGhc@Xz~&ayTaV`AvZc(MXvO
z5S<S!5V8>9brRsq(Fk1F<o$S2fZGEFGWxxkEYGFW9mVI9ef~_`PyCgDKaugnDW6XB
zv^3!lRNz9KmiiQEh`j)xO4c7(4}cILn7m&!1u0H^zV(1V8;@oELVttzkwhr4B=~(x
zfl$IHGz5P(_IZ5ToSaGUe9`Zdq@3TMlO&(N$nyya?();ptlyudrG8%`G#%TP0^U-h
z_KYddHU*vCH1u(DsJBxbXuH#!qNDwH3;tX)7YG#nM?Tg3)IKTg_hES{fov=1kNAs$
z8eHV2&{3T7+yg#G27d-_XcNz)*RtL0zV}h?w|_gg-(Ht`_GOrD@L<jh%vs>2K$+5*
zzIVeqdflFK#>3KYTxeVvQ~B?aK8+}v2MS!JG<crqJ`o)jkAX<(Gf{eUU~M*9o?sAw
ziB>T+QPr9tCfCjxf#7{dk3PC8_?!1XdSXp4ul`b1u*A9VJbzhJPyOuZTS8Tz5481q
zyGEdU1n2(R(fdSOxa}=R>i0MOLUmzYD6O4XE$dINXs6zHu3gtFwV#=<ik2|l#su)7
zIT))Y+D6@nlB?K6{Yni;hyt{uMHAw*&=eq6U^OV1DTg^^DfCIJj~+dGUoc>tt6A{0
zwY&8>c!ppH=706-<CR*w{=rM<t@ETGXx?8x@|N2KTfFaR?S4nFY+-((dKTX6M6XuS
z>y3GMyXxsnn4@Mt0>|LIOhXHVrWykA$EVQLIIwCFmNE|_1+xs@=j*mXiqRcQ1K~t(
zDSGaVx&Bb2@es{1bRXYEPdCfaVW%kzIh`gNx`n4LQGbd}bj)m`ALwx8B3q|!wrC6A
z&pGo!a+YRSG94D1^Oen)pZd|cBbzVZ@uR1hjQscHkI6sb4srj4`!x4Om|rT4I#Ov0
zmn-NeZ3?D<78a-CAj|<qr%{H7N(E6hbxNb?Txppg)rnM3q-w2Zg~eSVLRw3!6g3!Y
zP^Gw5qJNqPkha#=or+jtDw&psN)5PQ5a$rFH)=rU=wooKotB1{kaet3&?xJ1pcyUl
zuR+301fz*$Kum^L=Cwp(K9fvkSLcW?6beRkX>~q#W-b;}%~-)EzO=6wibSMXD3iEN
z3HwM%3r3^CDiF6wyeK7O$++q#C~YRAaaoFyuzw@~=r8E{oRkzK-Y5oxLPE-9{l0K0
zDf`7>GRX^iT3rnBiSTXFxbkRN(o!;srXm3l7ouOtuEZA-3qrsbYX(yOL;z+&HJeeg
z*@a}j;L8LQe<~@hm&$sC{z#Vtq>z+}S|E{Bgyf`<8jbrEDF|dO$VZ?sO2Q#uI0<Oo
z7k>z<$>3rjz7Q0HaWTRtk|H0H{K0^#2vRVW6oOJJ<0IL0S`550$LD`57$qd0&ZFK+
z<iq1xV$<9RfO4i}aAbjdp2)>dY{(L|(Q(cs=L7~c$t)2?)Ah1W*w?PT!V*!~3}xCo
zq^&53WCIiW8=v^wPSao{XGQ>MoIK^#HGd(%G&K;=I159-uil&_h#N<-Pw5Dw-g9Q3
zV$!TmliX+SB(#3e@6i|7o(|e}t=`@^VjZP~5%m}LvZ$3=E;Rg5%fP3M;n4Wh5dL0x
z;f3{g=llKqseZrzkKm6(Z`+CWg!vkKy6vf4Cm6v(og<BLgtg~KsX?je9pjoOw13%s
z>zYN~u<hY+2R$`lv)%3X7`SIb2HLThjM3@!Y^B!&I$@7BIINe_RL?XM%`Q^6P0eg-
zQxWYSZZ`qyKR?|)*U%TJf91-Q_G_7XUXA01CLXC3&-2s^cRGerGF24mL>yl*#&>)6
z@dmq#>@3br{7{8Vsgx12$rFC-uz%%0k<895ZWp4m94++ZoZQ2_Wwmg<T@Tk@nWNXo
zKk$A(w}_R&uQ%~__Dk;v_}g(dngNa7Q)uikC!@(>k{yOdQ#6v)OBK2Ku%}Y1irO3O
z?xI0~xRcB)fT`P~z3Vt7I9z8p{xf-nN|_FKhU;)|<=)R-<vs_!&*-24WPcS1Fp@kf
zUN|j-5=&HVsG=ZF?$RiEby}zxrV+aWo*gH2=d5|9R1JZ2m6o;|6;uFgsslWpa(C}X
zC02_j;KORDI`;en;0C;(1_igAI-HYB;czyY5rm9Hh#*8_0Wri!eZE*?JrfQ4eLkPx
z9}tANqySA4qlxgMKOFH3f`3@Zh^u;OJ`!GDP7&gN+u@^09|`1yhG8yBZNdj4nI~$E
zbSNT)#bB_WoLgJ7&Be9Y*<eJ;q#Nt17)Ym#LSp{(Vig2~N;2+WNCkWWe@OO+BH2rC
z4hZ3dYT1Y84MIYZ1Ubh0rASiF&V?eupeTjHiMT%{MdL|XPQ)YOpnn)pQ;E2ghzemz
z$;riFLY9*8)Hej6yuN5a2#LM`?^}$BAVBa^GUW4x{KtXn@}lVDg8?AwzCcv*2Ytlv
zkHw!60=yqu17d(6B!bWr{IX9<#TMd%j|XZU(V~gBC7`2xJO~ZE6iP~daYBQE3I}Kg
z8<<TyHk{gnUGLfnxPO*r*O*r~TDq7P#29vf__-a6<sriGoGy*gLCg65uW2>`FB=rD
zvV9{OaL~3Kjmp_n2UR2>1G;QIU;;Y}s+!7{=h5qf@@HcbkJF_8rlihks!gnEdDBbE
zG}y7NDJ+%axcyX(behL0QeaVsp4s)Nxv1upOd=U6#6u*%aDU`7acg%yc2_NwiiAK&
zAO&5HYg@(DyK3B&FJjJ%KzXAlXyZ47@9RG8v$SJg_nAZHy)eZ!1?o*nV`>1FItEQj
zsiDuFlC9OUn9rx*>ChhPxV4&VyZ!#q_PB+QqcUOyaInEyTn(cs943R;RZNPQL@RJ|
ztYtTyCi6BHnSaNb>5a6PYe+@cT2z5yFc%VUnxiC}CEU(n;JRL>qu+JiQP*`zhbfWJ
z<sSEM$!6a&gm)i%QvGN0>o6y()N2IQn+N<xTI-^Tnsh47Q!=EHAABvI(92I$@73?s
z#q#{c%GZUIuqK}UW_o3LAx2I<e9~S>MuV|$+F!5Sqkk_3;kJ9KPb}(*81*el=KoDx
zh!!g8laHMA>B*Iq^f$ds4=f`E^U2Cm-MZ%qp-?9@1H0WL-tste7P76r>vr60JJi8Y
zZL1xnO}L)D0|VS03@n!3OHoy8)}oY!nN;;~|HQzf-DED+Km=&S*u34h@)Tix<x{Db
zStf}G%YPfuKZ$Oj*TA&Xg^SnnDYpGL)nc(aZC%0)Ngk~*SpvUO&9{Ecw}Yz8*-(3=
zBipZ^^D#~1>~BR`W-6X0GY5nDXQ<A>N9{|neik22(9l5+$k=2#{dJkdK>ojIVq8)8
zhZlcHxb)X#a*`HdY|$ww8)t4qAHFb^T>)i)IDc64ZNa4D(TR`w^Q{u<{^7au0p~SO
zSNr|yX+L%G+nKoZb-SZMxcy-5sgoz4sy*1ggZlhU_fHUG1<PKBK1H7H6QZ2gfA(kf
z^9TB)Jvgtw?|u6D0qGp*3z7QX|0WsEV86yVdmpYDjB`iz&MN9Zf#I)JH1xSfjEUM&
z*njhwy#_|<{}Mx?NT6!?!+w54@bgAP2>Js5TcFc>|E9kAR@;6Nb~=0l+uKA8iGM9h
zeDO}nm*=CxogpH{{GamAS=Mt~`quk<zYklI(6{t^EJP^WIO{TIE<hj9CiN-coQaBg
zKM|OBFbP-RFS+UF$-xdY_Pk{#8`^(iyMNnK^x7$Q_7-;b7WRW7Zj5Y)?XEGBHoNQ0
z+|u<Vm;jwM-=(-)h2F2A!#Ks%)CEOxn&w2AYBrpvQT9S*On^i%U!B3VYgVV<vt0^=
zJJtj8Ht>A^9M3B&O2Gfp%1cArCEeahd)Z~kxFcuUfxJJ&t8l~paKl*V{Ud6Dfqz-$
zh|MB0<7vyraUvF-;!7)-7^v^rG1_sBUwe48S0c*ZV24^_kS?cUUmduNzX6Zv!dRKq
zBZAs~#+GfCazdo)CUZK{=s0PJV}GK3Yva&eOx<xmdOzQPN9r%y9jpCaf5a)VDEg8U
z@jtVhFP9yF&mcm|kx08;S*7mMtA7<&X<PAvNga{QLfmFXg-$pfhR?nxi}^(74#pF%
zlKm{ZO^hvE6O)2@&uDPZ-rXOk87_z|B!L4!;cwjYm-jrt@?p%%Ffz?cJe`xQf%1fr
zbf_B)b70Y$#2zOn1Bs^B?^AVeDk72oOy;w_-ssw{-J>&4c-z4z<zMGXCV%BR&Vgs_
zG_PD~-lBecaj{n}AFMlfP!eN##YC#a5f7#p8`y2vzA4Ap4oG?(%Cr70`9DG4MoR|G
zF;=F2O30}Xq##im>Np1zi&mof^r#0VdaIN3ONZkp_1m;OW+hRnG5z;!zww?imXnVy
zE|s2cM*^?z4i7KQX(#oQaerp<K|8%-uPu)8;6OK2OHpZNabc!~=xyGl(e1C(N|Uy%
zVm6^iCe5W;RT`6=*tcrw-{6xI`O)qrNyZj$?(ROFOSM=1_AT1F2TjZ+-O+AFW=#eF
zl*rkMM40oUzxL=z<t9;VT)8MF_oKX=Bny@*Vs13d<hRyfEA1w0A%D90HqrG2rbY**
zU>nxe<?eM1-%_OL=(V|$6-k995K(L)7*81v4R3Tigob(TNfCFn(~U^VFmgGUl|qqp
zOb90vz!-v=cy|6Ox_Vw^Ie=kKy$F&(n9&}Y0VC!#H+I#aHohH2=_m>XJ}40o^t-h&
zv$dPb?qbycI4-ygD}OnSwn3CcL8LI9NeG}hSiDd_ddymVXdDap<d0-ATuaWa_QxTC
z@qKK5g2n{eG*0+n1_j0$$3|Zx(8Q#0s0cBYhNt75$*AxFkiGomS=^3(!^^Jl?~cJ{
zD!IZB1^;V!18lyCITkS2!pSpdDA)g6;!-=Sig>*e^XUX*u74ZNNeWlOWsg?H`PN~h
z;{~e__s?Tu^=Ms<*XDOSqXA<*6AXcJ)9QrBvm`KM%QXf`co7v;<``dxa&+HJ?Ip9;
z-kwE6UhKU+o0h;DA9x4t_8!JOxR{rT#zth5dnow@CcY+^-L_0u6-QH1pnF^kv$UJk
zrs?c6^09O2#D9bsCul>ouf4Q1SKQPKD~A>;c7EZSfp*IJB767$G<Hwn|KP=Cccs&=
zYN8qp1`7!i3MZAnWmZj>b;<3Xbuq+0|DyF0cR)+WJa2DB_pnI|1U9B~kobLhIe+`@
z`JcHxzp|3Qi3WajIe!+eoXsz<<PScL%2Bs`S{h9tn195}VLIyllwPP1JJ^7BFp%+!
z1xbj8{DPd53&8Xa6>e%uCl(eJ0oG?U7zzf&5Q^BjO67$@Vd8i2aT;%9(|ls3RaC%x
zq7#}EL`_YXg)|Hcz(cbvf^6piZ2kispz$aaRu(gY;H<aO)uPP*y)b%I5b(;CO%mwV
z?3!)Gb$>zldtNS9)2($!5HgEOI5ZMc8Mq0qynXAxT5wmbJ1ylPJuYI5G?|K&LdQ8O
z+<>f%ZrvvOa+z%I#K^v1G(g@fRK6jp-|cE<q@3C)bqij}#6y}2JXF%j$=9^BqL<oK
z=1Gn7GBBU)Jh#ZLP~Npp9kr-U#hG~Tp~1x*i+^0=STx>m9vK|H^!T~7*<Hur?deDV
zV=9TsPq7wUoiuc~-Zj(b9=~*SD)BeGk<IQauwT8TrPX<3%)7r!^DG)P+5vc%Xab>9
zsrC~D2bmg7n4p3SupU4aE=;7sRqK<<czClcF1Iyfeu-Gt@-oou`O@gS-EIdKxHUW?
zCVxZmSUN!}IcrYcsxB>6w^X=wczr*As=Ke}CNq9ABAe5gD-?ZW+B;MF^5M3%yW74x
zrAXh|A=Y-+?s+k6{|)4<578L%5_&;6G<ys%Ta8jEcrRm2yMU457p-oFXXWez=Q&)B
zFZr^6y0Dc(9ki|3|9rvcL;iwtYQhqOK!3X)n{NZV?RI}reb<H0&$p4=P+z$le@gxX
z`4@16zH%i>y&O{(z4V<<*>sr4q9;ZokZfQ4;l-~${9Hw8>I>?^=ntQJxYE?t7Z%jN
z8t1CG2zQMB?&0Ukc#ERH`?-ffv}@|Rs(Ik@;&=sof8w9N{{P=UpSJQRdglNB<9{33
z(uIG3XMW)EcBbUzDnYE&qx=c=Srv?Q9fKqanZ{z6j0Qp)u3J=$N=YRDbc~2D9=^n!
zb3Tmmv&6NHyGtt`00JzOWf+K=5-n@nwpG=O5prqd9Lxh*Y4Cf!ey{HWIUMaUdHJu&
zpTj&1Q-7KL9IFn`f=b!{3ZjX(Qh)2+p|8~R8hlptm3P2;^UoDZ8-`E2N%Qv10^YK+
zP^&Ghkaq2^)ubGUJJaM=nm^wpmzhBAG%QD=<E3G;tv0|L5Ft7)D&KHJ`}fB*-?c=2
zCQYtQ$6kTPi_Mma(gQtq@RXitO*}^*bH0w^K*_{&_{K2_KoZktk}J8nbbo1cu~Mlz
z`8*z7+A@|7XXi63rRs_G^%JIf!3qk#>eh*M`;O*Xz%SZ;+x}>v5KtDAOG(_{r5LF|
zQ5gJ9sPN+gDHKNE^os;@bNB%494P=733ze+UjwN<Of42g%vn-YsC*K5y=2WD(nUT+
zlq*;I*IX~%tCzF6H*#qv*nc+7-8{|@I~p((8)`FdsV8`&{Oa0GCGtNs2m7rG-zY!(
zvomMpK=O7vJCMSB7Ul+8@I7H4fRCf0Lj`&tnIdvrq%xH2l5a*Lo3Cz07sHjd-tOp|
zE1UX8VKW-7bo5RIiZ^vqfZfKgZAKy{-0~TE3;c^35q3{>bKdj7#((?~%iIa>L5#_z
zZnz2+PRA66Cbz4A7-7<=4Iniw2bZ}+<I8BE3B5#7itNxePxDlIsU-p8DQ@PrJ8lDX
z5=)H(PQpPSsT6X_c<T-j%N4~u)uX5JWUg>weDG_P1dsqVss<M&JCEL1+3Z(0qlrYc
zLHy6LO#b-)Yss0Q7=Mw3L%E#Hr+yueqf%IuBryyJ5ivOWekB32S2&cJ2Mn0adg$T@
z<iEnZS3qt$$K4BWkD6n6L2Vt5peHo+F_`X#MjeyU%C~%PhR#@Wc*h*m-@QU!%`L74
zjux~Ni$3G0s^iy>3o$7YyZMd3%V=Ldb5j2p^D1BVNn$Di&IK|0a43Hz<dUMc8I2R4
z5z3v|e|I8D5z@NFJO8CNM`<hwpzX1*Bfj<b$iE~16viIqFO2wVHI*jFgBnT~>nwBq
zF;Zr!?iUEa1ckl2m-Aln^1}dI`IU6NT2nFzO;-EP?W33TCj*CTYu4!{C`xO_A`4rn
zEuP4<^Uui2#;;|T!nJ>}p6EflQ&)p4AI+Z(NjWQ2=e4qm|0M&woA;kH#G>sy<1<4V
zON7|#5cfFuEYOlkyc4uXn=}e0X>;9KAO9y2UKx!5tYa1}!<=?vD^Vx3rdeq^t%k;Y
z(3k^TT|tjE#T@^yT%G;kiZA%s3kkwtGLWfrcIYueRG&YW^z)PDLKA<o6~7qGideWR
zXVdAdOl-~jA1XBSkGz*wmC%O>nffm(Dyv`ON!cfb=b(Z)J{a~b^8Tcf^aU1u;qV+h
zZw@Z{7JY%F5{+QB^5lOnV7`*KaSu@Yw`Zjp3t0i>Cq_gZh@k+~woa3|Qq+My3xMLT
zFmY<=iJyzN4wG2ikE4IEZA^kWzcy#1L)aDeyDY1va3E&l^b(7iU{MuIr>ha2r8t_m
z)OOpO%X=`F4I1@vJ91WNvAK@IYzYlqw|WmCsW-iJ3*<R@Jl>kA6S5Zyp2AGgZgRH$
za$b=_`!857Jd^(ngDEfByymuHgiaH`S|BeTZ2QOZY5(}u%-es`&*Vpc!W2TfoybgM
zy&$&)Grcu6Y9iGy9Y|B@r6w2Ye;CF@!vG5jwHYr;`y;RJ=c@$V7fnWQaBUZG9}zE<
zvKx=Pj0L?{P0!@5%qCCzd?(R~1)<+}?kr{6k59#lE>P|6CUT3S(t3S7YVu<=IuV4X
zqD5W8L3?IVX~cj30D@A_Kscn~qRK8d<^V300X0!r+GlTYuNN>n$%Bb=zeuUuB&yE)
zf2LGzIsgwSojED>$O<i`X-7QvO*1JQ^NOt1&(t+pnKxX3hDQ&n<|?BCOX{JcM=pCl
zO11$v!!J^c5mUvSAQ>~XnArU9D7xhrwYw<Uc<fGXF^_+;9PQUXp#8cC9Qda&)=m~_
z4g{9B71O)ImRU7{+W?%yt;YV34`4(13JyEdUT4o@_X22XZq{4PGD@ln%$KX@Vcng1
z>@mYlB=|ruk?@Ox5Q&-z-k(@bG<kn~CC*C%e@d2hEgJbC9$(g7+`0NT?%t(eplA8B
zw>Lo)B`<#&8>OYgqdVx1bk7@)z3DV8Z5Jx?^FgT8ABYzsQGYn#kH=enf1<_<64c*J
z>FV+M5BNoiJ^;#G{V6<q=fVYg2I6k>_OtnqV}h5%OS^10_A7XrbWt1XfIJAm`fA7S
zZ14Rm@;kkot~Wt+6Y2F|Vb}L(HH&XUAFu_2>7sv+k0ae2JO=E=d;6gm;nq}ER~7gU
zy-2tGIO476MY_f5Wks>Q%cD<j<Z~Mvx%}k+QBx7QVx{=N|Hvvh`aQZmn*aX*CT^;R
zc${NkWME(bVznBJ-gthSuMFHw4Cvth|Nr}#SQw82nH&sYX#mI`2d4l4c${NkWME)C
z@c)x?Mj{6l000I+00Xm|MhF3ahZmw3xELrHNf>4rl^F6FXBo2@+!_-aOd60H${P?H
zG#hIhyBpFQ=o|hVI~<lB3mteK9v)d9d>*PE&mSxwXCIy)(I5*TRv?!kry$E9;UN1V
zHz9-}xgqW%JR*Z4z$0!XDI{Pdfh4RX{v}Q&g(aRPuqLr4#3tz{9VbeECut|JC)g-G
zC~7HlDS;`VDZ?rBDk3UhDu61@D-$b6D~KztE8;8)EIlk}EW0fwEod#0E#@u~E=MkP
zE}<^+FG??^FUv3RFgP$@Fr6^)F()x|F}gASGE*{<GQKkXGdnYgGsQF2G#@lLG?p~a
zH7+%4HR(2FHoP}hH_A9NF*t!Z)Hy9V%sJdS>^dhpIsgE8oMT{QU|{58tYpw-00AZ-
V<^n<nhW}tb0{|In0m+lkNQI%U+e-id

delta 17890
zcmV)VK(D`ylmXO|0Tg#nMn(Vu00000NmKv}00000gy@kJOMjOD01BiUU0y_IY<Xq?
z00s;I06;AO0CRr0OzjV7Wnp9h07g6j001fg001^&B0zv>Xk}pl07hs4001BW001Nd
z#sR-*ZFG1507i%a000sI00I;O0001NZ)0Hq07jeu00I&K00I(J>^8e?VR&!=07$R^
z0018V001BYKOO;vZeeX@002nP0001V0002O45uT>aBp*T002ouk^FsstW|XY$MNsI
z_XYRWc?$0WiVRy3<}5If>9Ca<fY?qZh%plju{#(zumf9+*@}T36R`ukuyuB~-}Ccr
zpZERmy&LEJ&;JBa1)9`{8f|HZziFGv|34p4`2QlWsn~jy?<-g-@SO##1bOY?fM&aC
zK#Lt6&}zp9^s>7L`Rs##!VR#C1KRD!fm>Jbc|fQAI-tw`82G!W4AD@>-F6MFnSCoN
z8)~HEhTTY`9QU)^1q`q|1}tND)-H|*+I<2B*?j|+wNnC?v(p2Xw=)7(u(JYIw08yN
z{8i=$tZW|&%DJpO5wNO#LvJ~DUaQVswLDHkt@~5$aqRw8`)etG$7|UE0qfWm0*2X@
z0*2dF0@k%d1J<)^2dr<m4%oo%pfQd|Sm&oY-tkC#bbxbNbswv<9dB%}2^eKx3fRQH
z9+c~%`cA-R_K$$g?O*!a@fH-dmVm8nJ;3d%^#p8V-QU_k$F8s1pa73&&3&#7cf7q_
zFJO!v8I)_VwsF9JIJ;$l`&SzqFy8K}a((V(_Y5fiHZfo~yKhjg<=O!Odsx>-?QqBC
z`<@Nh%Pvwm4-@R-fW7U<0p(|Z6)?&E65twass&88Z2^9NQ%}HtcKLw)t?Q$yT>oxY
z(}n@P?Z|)w?RG(V{xyvYIN0tIaELuS;7~g~;4nKQz<q6hniX)kofB|`y+7bcJ3rtk
z`*48ksOkBDsrJQyW9-WT)9l+S*UYi@(}3eCn%e?SuuBJ=XtxbG$?gzvvfVx46gx5C
zRC{2+Y4*5))9vhlGwhszGws}fv+TS8=c)OLfOG6KTIkq0YhD!KoHf4{Fw=USZT`^l
zx%STh=hCHrU$j&l`~5AQ0q5JL0xqy#Q(DUN`a(M-;9|Raz$JD<z@>Ilz-4wyz~y#!
zfcw{SL%<dGwty?`{D7<Mivd^L#Q~o8EuRKlOVL^nxXum_xZX|-SkfLG;9RyI8sPW0
z&I`EF-WPBaMX$c<=lEv3X231>kbqn5MFDPmuj>PUZnqBv++i05+(}XI2=LlmUnAgd
zdqluJ_PhYMtA0tqy>@PZ+gN`p!1Z2#DZuZnzaQZI)jtb((0c!>f8*F|fBm0;M=07_
z10J=b10J)J0v@+h16*tE!vmhQUc1{zICfjwCj~69M+dkb+m8uYXlDd?eQJL-;5qw2
zfahg@$Ao|v?BoECf5#O8?rX<Y0iLfN_XNCRpAPV|J3b6}&Hf$Wap;^D;QgU<L4fzY
z&KCmSw2J~fZ#usU@OscSIKcZ!*N}jB?X>~#S=UF`t&TkoU3UezEnWWv<+DaHDBvTz
zYfwIS6jK5|v7ZOH#*04#Jf7XF1?96z_ppF}FYMj{Us|`LyIccqd-wN2`TVlP>jB?T
zEIB^lTZ-Oe0=}~s2l&3;_Xhkx(WgBqpMCl)5%80p74WnDHNbmFPu~Fl*7I+`ZxoG2
z!0&eL0Po3-VFB)IW1|4?&yB4EJcf;_0nTN^bFERH3x0Ovj-cXmW8XnR#plL;%LNsG
z?_>RaP5(O```kESwV>iXf55n)()u5x2X(Umc$}5J3zQqzc_vsF1yrH%1`1V$M|U-V
z0#Mym-Doz@KvC>&5~P}>L{SnY3((uc(2*=P^sqOkY|D0BQXE+x$4)jrVC?bOqw&O%
zO&n*P_%Ua*ITP5?@vO(0BzCsjlX$X!aXgvb8MZUd?!=jylLXxVzqfz}nv|Sv0`<66
zxOMA3{{Q=*<a`|bkpby(K~9FFx|$YB)%BKE*U3C7HrJ06!Ws4YnR?x*-CY}9t=&y}
z^|N*O>}jTE+pys{p5v}xBYWfum*BFT#c`EV)m(R4POGk|nySPIKd#s*#e8Xh-B&;E
zYp&OzZgX47qzm)4`9eCQY@7K?rB$iqt-Ci1h0VL~gWWBcs+EGAj0NE@mXr$>vRY|Y
ztIbN=y8(9Au}inmR=^wVLo0Yr<U-I2quEg48z}NbvEc7INA~vny`kMB{pnWY{h5RN
z`AHksYd-c%WvWH68@PKmQ4Y?3amV>5&-ZZwPU50)#us_H=qQb*2w%eO!}I_7=wJN;
z)JXcH9%+yEhuyAg+i)xW_2=nGaB?H*Xrk$8`_^;%=RdDMM|#(}%XoBoeCL2XiFa0%
zBE3;0gYg}^-fzZtevaMgC`D0oOi}BQ!#9qf{RFMiNYV;Tcyo4LA(Ll+v-$Eh;&Ss`
z6^=?Vq8OTEz&wE&la3LiWQuB|ew@JQitE*qkXGw0!mU5B-tKhUi`(~ZFD`B`tuE^8
zC!uWp0V!L~!iTtU*6A$aRk$UuFRnlE!~^TY6kg2I=U)Fi^4sJk=+_iHR}*z2nk`im
zYXln$Q|VLs^GSc~gK{f>`>O?0c;cU}l+Tfu^yjlJ`GYZk@^=g8$}9iuiNNA`o($j}
zaNM1Pad(WW2^~}|iO@@eXebR~p1@W~Yp~Txz2!8TMr(_}wz+OLh~0%hcQc+b^wqc?
zU)7CFd~?NT+rE{}<i?qeq<1p3UCYfS486wlHQh+$tf-{eiWISb=M7`tj?k0nxOewq
z4kWlD9EpwT9&I*?(9Mmy=2Q)@-$}pIE^Qcvxdm$tmS=m^pFZn$h|)1OO7Vp}oK6lp
zopB$0jSS!@&n-Y76q`j8I>AtklAt8hYNJ?hHIwUAn>4W}V7l%Rt9{j0U`SHL!mXn8
zdiJ#|wryuqqrGu|xxL>zT)zqRH;angP#Sd=Di@4msS1_1HsGa{h6rE9z=t>KbFQ(6
zuqqY%>W<ZJ!^ggMjkvRqvOkO$tno}AlG|bBaS~1mhYWE+-2Ve&v%S}*{{i>#Y<0p-
zW(CKZ7_gDvslSta>CYcrco*T`t-rkR894vY4<3X<PJdZ{$0tl^9M1bG3c<}12hu-8
z80hR}zm34U0qR&IlLa$NY&aO7+TD-frZ!uv;uXV&xQ8AvUX?F!aZ1IDvqLB*i%IO)
zgOP)=bZ0se2bY_wC%`GtKiG|0^H6QOJNo(0=u@?IdQh;?o378R=|iLqHHF~_`qx?Y
zA^jmA(p^`7zogSGDbd{}x*b3N%J^3@QlS$*q;Kzh-5;@$cZq}}FKhUdPt$8eqPy|j
zxSiI@Rd9uC<aT=P%`<m&*&Qb+LHU={H;kX5vg=4i*)!hBuJcplt8-;|3L}89O4B-#
z>$)!;^BFMez)yXe0!?h*Y^0Hm!LE5R@wS_d_AQrxj^T|vZ@VSGJ#Nz#()Icm-U_-G
zJGigE^PS@lai&gY=3xf8J)MDUHfjeoID~_i+;Zt1xcT6nck1I0>3fB+*_kTmW_lpY
zRc@T)*b%H#;$-?kQ@wETOx|(y@n@zd4j%7L-Qx8H(#<@~S_5bc01YISs-hDmEdULp
zoX^>Rzqod~z7)OCIMJ=F9bJ5`q<1=cN!dPPos`zL?myvoDvL)yQN+@sHyekr8gy<8
z=2i)~0oH{?431PFUcd&bMxAnmNg)zYc4M;v?P!#$Tf}G%7{SD?Wo1*TtmWQNf@`t^
zd%CrE@XC&TlOnHWd*gLd!G$WW5<0V;x4Z>^rsOZs?VG(t!e%+(lk3;vS1-V5$(+Uk
zVX7cym?g;#8A$RfX=rLXP7E>_T_xRQHk%w>#qF^7<<90=K{&Hz6As{1XL{9-c5S=c
zIU^>;Gi*ledK^IJ<~XisB!O=-TCzbHEiox=X(WrJf9={etOqyuUgwg~8yvAMc<wHL
zt=>*%yYQ@CVo!JruDb}AgJX)>09+!-lxN5lY47f~8K}H)of|ilaGlW}Ly=Q&a6o@t
zzy(RH*EE3l70I~4(9Cn{j(Uz*qy22^YAOpo&{Gt9wC`0g!4@w-%jURchL9#xUsTxP
zmbdKY$?W;`a`@wec|W}ZG;`I|=*DdZYj~uw-F=hr3?K)?5BJVI{P2?(4InlT_%Vqi
zQek6(Qo!K@=x~bo+?kyR^infBuU?yCVpi`&jJV-|a5t->ce960jWdsOf&<v6LX&L`
zDjV+(ha(p!1FTn=9vm!SoOr_yAQhW7GSzNh=aaGxBOhb9nZMhen{z*n8^YnWR%PH_
zf(;2jc=qgr_@xx!8k6)5Du3IR{68xCDtS>XY8hz2&XJIlopbMATfQwndg-^IBzU}@
zfr90wnoPJ``8-e>QOs9-#Ry!?d}K{pK5_QJ)Y&|Fz5@km`S{Z2*$3mbpvOu6h<pq%
zS`u2x0YU?oaRNU$h2WSM;f#E$rvK`tg85l}<zlK?m6sm+hSvPF{(p@X{j+A_(y!_@
zL#{ScOAn1kP3_bA7=sO{bcP77sa2*41xP#3jeg9QaViV_c=>XFO!Q!ybIAFpexC;Z
z2{er~kWx-jPZ<`L=6#{Y=lTPejephz+GtrF8|J{}f{PRmDhA3ra$R>Y=z3!_UH?sL
zhdGKsdbZ~83@Ir-RDbQjwmT?S`X`tU*KZg(WQEE)O_X99&LMP1>?>E=d+=vXBRt!-
zpt_qNJgnEN(-aNIY-mnHyrIsA?A2BK^l7?vr|Z4vo?Z{W!^1UuJrSj7c19rKi%F0c
zh&>n&6)dtoi1P<y1zphv2}GE1?>Mxt!mV-*l=W`F#+0KQ$bY^SjWKOFY8akGg0hKW
z!gmHg|NC@AEwm!(9XZ-;M&)h+{@Nb~aY$8XarIZCvhB*zc2tI~Qn1}ZyR95ZM=!t|
z&LdiK8nCuo>t>B0ypRuZWDVN{=ihE>xv(sUvzdphuN_E8kFTXQHT9WbC~+zklJ>}q
zh%~%2Q&6UnJ%92gHd=JB;B&)p-BGaZLZe)?bgNj_rpN1*SN2|kzZ+%(@S4A(Gok3A
z5x^q|C{0BbN~@&mG!3%~fUF3VBu>c2=BB>6rNee>^Fb0#33kv&-V^XeMPiFlU*J7{
zxU{i>H*9YH$>+jRxFPhuPl>5eC?$SsjMw*oCIgq2r+?<h7D0h^*B!5dY;r()-ZDw;
zPG;>MrRJ#d!6g9L5E%VzB`DhOr~~_;rgpp2-s#)Zm9d%XBQR5w42K-9CScH$W|8b(
zwJG2ufa9{GZK#L1BbW35;Y=#DN4tP~rrOA(6o!&{^Tq~JU^dghUHit??NZLA&~Zs?
z##rjsC{|jn0yfc*?ZIRR0NW&r@9S8dYY&py`O_Q56&s}Pwk<`yrIt;-H)U)@v9N7V
zR@g;KSy1ywbwYAcDJnpuDhIm6@xgRypV)}zM*UbSm6zox+ueCklWq|ze@@#PQYFGp
z`^t_56}NZj5uD$wo(iqUr1j9+HYkNqh&@%&wH>QZ>$%42LB#dfR04Vv(+>bc)l?WO
z!K|8VRkI4qV7=i$nYIQSr{zFdbKR*ntFZc^v{eTN+k%T?T2z7E3L+IKK#plnlnnQr
z6vc`X=KZ2S;131@(Xil)Dk{;0FTAWSsD58i2!<1>?9psa4*7#Vzq+8=F)`S_XRMa6
z&OECUF;EVZK@uhlnw105{IP&Y)Mw9=auPCs_}p^IG~qmxPG{h{X_l7fj!#RI8q~gw
z7yxR5F<1u-fJ#NhKsX5xn9<f!jq*u38W62)E($=;s-LO1XO*|NT>8UwG#pdIMm8To
zoM_bR#@zpEk;CfbF^zF4LTu6%VgfhV?e3sVp#aw&4hLh(Iyi(6HK3zFzd;aeP<&{A
zC~WBhUAcO7k1bOwLD_6+-5eg?prIz7rqcY08fpNZd+zW?4fUix)G$_X%`^@9b@fp^
zT-}GdUso%20)+s3bnW$(Q=_3f!O(3$xxjs#v8+b%B$bbl|1l!e2MT0lvyVqlEtNJ5
zW23ZmDtcSD-Dl9fTRCDJJ9Er9Qt5Pmx?cYbVT_ReBJF|6=cy7=af&o&f~OnJiJI}1
z!jaH7+U+x;y1sby=wcKJitMAR#5Qq_`F6WKZyddFw9RPEK2<+XW<;0bM`YDh(5JHD
z2}0f_q{2*u4X1=h$*q!<P3|SLlJs-lFL$AxacHAh#D9Qe9l+g=+yl`sH2SlD7%3($
zKPH|{zWOz2!`a%|d#hEW({4kjdHr{l{yq(J>;!NcKyX?kPF9Jb@kL%V33q?wlm5>H
z_97n(tgiC5a4)%6|L})z&-|QixlS}%K1~)zzgDe|(Z`TVKWXk5QtV_A2~z`E3(QoZ
z1dCatg94HO5H6S=Ez~>Xa0vi^HWmon4S=L%wvmfHCPw1v?0h+t5_sW~RLtayk#JUu
zgrs0x$_KNl%zPxIO0j?#4Qo;S#ff+@l+VBSJ<*WBhhoWeUQ?stus<Nhq<AVG%UjW~
z<QI7%5mK4n;?JPpKMefE<W6&UQ9Bh=u~3Bz9-x*5IUBx$$i^H58*^NLO!e6Gy7xmI
zI;Y-Z77Ft5oMGfXE(wp6vyWuU<?P#X#wjrvj7q_OfAcG`V2~8b*?Y2OAy&rn3%I%E
z@1&F{2_eZeau;%j=v~SgaOrQMcZ5{Po3mG74XPmTtuZYeyn;A+4XP$2Je4W2L`G#l
zFcVlFlox;qxU{`k(j$_8D@F9u;<n~Sq^=ZcgCJF&>&}(u*GPYHd#Q3Vy(UE>(pvgt
z1%5E<DGHpDcff6hX0*|WHVbe#o)3T<xfHZ%5!NSF%zG=79#zrs;TQ_Vp;QA#^%-w6
z^WE<J+T7gQe7Bo7AGmsTi2F(DFmEnV8Fa}MtnQN8@=h5x`ETT6o8&`Gx8@)y0QB2(
z)_~vXJ|Rw8rh}ssCqf#{h&q9?7^(SSsR^2h1B|@Dtgin+h@=E17E|s}9A_~ePZx+3
z0@+W#L%v&hy(_Zt86g!F(~grqpN_{D9Y-nTvmqG-$@7zc7Bwo0Tk&)wLrOX5#-?Ka
zyxpthZ98A#CUPP^Jpwdum0DXFJw<>;{^4zS29w?vB!885r6?qK3Oj<?sJ1JWb`_}a
zg`-D_3x^F;fGbI%SZUwUuGm<9;pk*;o}^M-3DGcnFQ$A+3l%``sLc{h5RI7*hy2UY
zFGo_T2zds!qu*a*e`FIj$J?pMYj_Pdn|IagcfDM%zr4M@eP%2tGpdM^;s%qGHLBwU
z;$e)9V}HyfNX>#sd>RZI)IGDHNM&n~P<wlO9Xp$(k~4H28p#e$0NC2D+u7^h<eGPa
zcO1~_wkN$abnX44#CP%qP!15n<25~QA4dlSv3{?&-|LNKrZ%D4;}gW(?e#iXeqa-b
zQp+k81|3fn<cngmh@wU^+d&m9NZGIDNSBJ+Zhr@%OENp!%aI&6g)O4MjTMjv4%HQa
z7Hd@F(447q^cv!z!C=tA={Qq$AB2yNeV~^`>q2Ql{n<p&0JDfNHZ@<f0l0-4O2;~~
zFBUh-R(YdnC3O>K_dMxW@@}qL&AIu?u+m-<PM#E&+7-pr6LUzFJevx)hy9Ln7qfZ}
ztbZx_8MWC=gK}7G?#(Jq2G(FkOrElx2N5&F)Dh|2MU_T#M!YkKeg50}w{3g0*Y8hk
zbi}ox@O*zXAl5|2?~gT8KY(`Y&^uMY%ST}3YXs;cs?2~{!w0CRk_KXm(m2Q@&YI!`
zw5Azoih`-YbP#P2CknjyY9JQ)yudH`{eM9v{CPYHhrjjy(GOjhSUcfx>ZQm_dx4~Q
zRNx==``_#rT4FK~*@+5ohBG1hobW3jJ^Q8Gf9bYg+&&%%-2MJL)jP-S8$$bJisu(N
z1EtYPW7fS^DrliGsG){7Od-Q@3)pVB_&#g&e(PsXVq@Hk<A)B%2WQpWGiSBie}503
z|BJW%5|dGO$qPU$(ZK?N4V8ZnrVqk$CQsAuXVYhkkc;)R^}_N(Bo!^d4o*@<J5y*D
zNc+d-dc90SYN4QhADQd7zNIcKsNcuZ(cfh3Vye(8{CGUpF6lC@d8Lswc=!^#(;0L+
zHq$as%_@nD!BJ}+Is{mr7El_FNq>Gz5bD6e%nPG0T=?MyV!?4;fYUF*8RbIP>2HIu
zZtM6A;K+u82$&t{Kzhw;oS=t93x%^P!XAabCDS3ak)r1-9ee$ObwCK}VmT_UuH3Gz
zN`82?JEVy7_)E9JTMm)xSMuu*HtfaicSQWss&@OzsuV3RVi(-@(&G-j+kdl>yD-vm
z)UBYcp`nOl?LtT0Q|)I<&khHcH2_fRPVDwq$eXY)<fJpWM(%}4KWp8rc)kHhX-VJ3
zU%CU_j3tXdf;C0G7=ZLT?As9OS2XAsu!|@|$<HLZ!Hx#sxE*)n_RQIe>Z%>vg%Rp_
zJ2Y>2@3aqdXqB#eh9s+$4}VaG>OmrE4`g$TF#}|I<ST`2vb(Un&`o9wnPM>mr}vbO
zl<t93m_oZ<wpXW$y}R&7`0f*)Bm!Nna7)|@V8$kQ3!tWxs5fN#4soojz&;x5E~)YZ
z2LW|FJl+YHE8br8_HEmS;jlZvZIA&0<LRQ38qc9%G{9{KH@nu=4r35w6g5$?j9(YJ
zsDpMO8#lYSnY9GZGheXRlP<+++t?epK3E5)jyLdv*f}tH9Qa7}5SNe{F_TJ$v`MI{
z0I`s~J9FHi53g-J9AA!|S^}vPWY1hJb@~dqMa$F2-FCEcq?6nm8Go2LxUblkuXCT{
zCBDk@pZor-a=rB`&sY3G|L10Px87TP4OT%2R!0-)BDA<_R(JdTd;X`zRO2||I{p6r
z&7%)*0D_Sw7S}keg;fv5oZxQd&LVD@#f92WIG5?-WnbR&U&C*QbaBm(uHyD}j^Cls
zzYfk7iwvSt2QPJ`=zoC9DReWS1@sc(>|JZuCLKBzui8|z2ycSAC3E^6DpWPE7)&fe
zir@(<Gl<Y8{NZ==-oqUG;VG&V>Gx?naHn25c!4X!!!LrbVMiqkTMHZO;B|<7@ID=Q
zgR89dI1WQ-{eVjV-)YkJpW@DN=TLH$C#__r*cK7Z2~;<Y$$t?@-A-U~tA<A=Pv66w
zeid&xeq{SCQzZX5uZ+Hk=YME_7Izgp%rDQ8=ka*keNBq2ep^uz3HDCjz*x4wDvgfh
z6?(?rXqgW!=b2FH!a!wfI7IQ^8o!{28NUr{Jjk7&l0VRd0rDFv4B`adz~eZgAevPG
zAOZjpA+3oqvVTByfG2S3S=ODFqp65iswUwUmY0t&FS~@S@Wf}6pud?)1qFZCF9cJm
zrawq*AK_PSc3Do2FJHzgjxV<&sffXg{&PI<Q)1##e<0vLD#jEa&!6*)ym7P3!RYw1
z$6dY$^fyJdZ)ntjzISj!QJ~)_qO4<(-rL}BV{^qS6n};nPY*Xn!;5fonz$F?uf4gl
z<PO_I*m+V0Y8539Cv!!U8slMP13<h@?@QcHyWN5BsJjcxz0=u)4~&{iKU4JxKpSF+
z+$(6^Pc{fF5E&@HLXB2fg*CdeyW8ntB^^|{TZGngqili5yr~qMD9E&_A<d=MNvmhu
z*SU$0Du2>;nBx`AbXH-UHIZ;1Fy8Tr&CO4|!?<wa%45-wd?fnV6>eh3xB>`};(-N%
zUSRYmjs^o=e)C!7=h^Q*@B!nU|GFDI{_vOCuc4l)-%Av8i;j7M9IoSna`w&T*^1t^
z_Q+PS+YN3#GF92chpWx7J%}|f${XziuZ<zKxPQ<wsi4lkX%;=~qBOP$NH2&7hRW!w
zqJU_J=9hNI?)89Cy6&DmwzmxEx-T-m*Iai@L|iZ^j=4pUfP1ENrpKA`$?Qx#HQTd3
zocr*dE}G%6bASg>>p3kC2~->+AP%7t%n_XlRiXC{n1c0}w`%svmIc`Mn-8lGBFk};
zS%2g|JrwhLsqB^2v%%%%;MrBwkY9S}F2E#srJEYdddO)aT!Aa2&S-|q%TCo4CrlS5
zGOB;28YHT`^8A3G*5h$Kd%Q?JfuDG=q5h7AU_)8jzUTDf;^}*~mq>IW8C^(g^m5~Y
zW^wBs?v;r|c!_#4AVQ@6h14-mBiuH6Jb!J|?Izv6Mz_=cJp$9}({(2{i^>p}$1bsY
zZolt#k;X;5US@h0lxGbpSt0T|!`+Qm9+@drJPiPyD(h7vfF}$YA`BcCQ$w=id5z&c
zf$<4NY*cRvrMJp?z+iyNteiahOSBn&OwQTp2nAC7ATKZ4q-TwW*_3VXqrPC+CV#Y)
z{w>ORx7`MzFeiTuPC;huL0QhSm3F%aH(RtKR4$BX>k!^AfL2syv^A-Rl6Ks;MRq&7
z^AX)0)*ooK9;kP^y7LSApz9uc>U=DA{;6Z`ti}ZCN1S;YA(s-VZvnbMfLuS=#SMW~
zGIDo!U3+)3-rfr|FikC|3d|drw|@u=iMC!fmE)wMG_<5h?AqpL&Du82?eKgiGe7!%
zr`IFzS&rTP(|5;~L#?|Wx~ugYbG67ITzkarQOiHh&i_EZ0dIzM!=_e$5ngRfKG=~a
zwsZoViRu(FQ~}R)pH}0|7}0$#@}8D_^r+n0*0hfr(Q+kfEXQO1U@{O0M}L-{dFI}^
zxus|<n2r+v!s&-1wfncLK3&e7xUWl|v`(7lNz2!6U&-0otepdTyF+4fFcDswpTGB+
zXO^O&fRK=C51lSlebw!5t=PHmL<UG)XtJ^q?JLkT1(4@!faGog^uSesy*3bCwwy)`
zz(RH1fm5++HU!f+P8>mOsDBzrdsq&9)=@R1r5ROICni-PPYgzn^89Ur@QfTjkytf;
zn&*F-Z_Y*UjlLaD_0%0FA}M{fC<wRl{G(X>#S>v!U;O}cPW1pcnq#y@?Kxv9Z$1SF
z+49GimY4VPW~jJp7enT0T9(~~!sR6+WIpCOuZ}HIl4qM9P)ii^rhj3SWSRM8JJYfO
z<+o5M!}2z%8=Hv0-3Y+(dA+KClmhlMxOutV-l*zT_~`Gpte=Pdqivw^mbC;W|BrVQ
zZ2H!(!Zjj5>3iF-seZs3w#OQSee&zn^T=$0kOB-|P&J(ZLaCo1#|in1ug8;H515a%
z-z>)q`i08Z#iXzXuz%z0l?z+()FbUj%=-&^GX8Z@TodFeNkQZ^>IqL}S%$4Wxt5;a
z=!rA^w=*j-ptOdo*_w65@OT5ppk$yw4eIYqqZXK%Ux3MCsLcD;-~qpA4OsU;uZfd6
zamBjwBW-0qZD$sr)_bQuWM8y1k7ewSmyGu}$<|%?z;?Z0Hh-6U`p&73qm6Rs(MLTh
z@c&XQsDa$EMETL!@{i#^G>!;Ym;;m5M2M&pK!nFh)f{@EMTM%JD~zrda(49_g+e(R
z-GP;|Waw#_0v){LOno;LN-01Ib4n@{`u+0#g>tGU_pGOSOQq7i_s-fj(N<bv(lJt3
zXJ+>E)0}Fbntx7brnYq;hr0Hjdu?{+j@$zY)Wg9n;s|{`Ma8L<fTrLmQvYL(*}^r?
zf3#{Qt40Z~gA7OdJ3FJlDa{vE(H~HcW=eBKRXLsC0P%(R#bmCuls~Pg#W~Wyc<tg<
zF_;|v?|zYlqrqSzDr-da6DKN-z8^}(NFf;%XMDR;hkyJ|c}m=;y}BQxPW;pU+@m3N
z<3Hrdy>Pgu88(mWaK>5u*g@Z|f5g!{gPA8xbsdp@!O^<|I%<p#pdVBXt&x?w<|$dI
z1HGqaL0(yfC!0*gVrUbahjO4DB7JmKVRj7aSp90s*!WVVRdL(Q;_=7Sb7kN=bzsb(
zmJM`v>3`=dmApM<mJfw`zO-lJ7^HFZ0M+Duh<a564`xo*2$v^XKksfC7n-?2k_L+t
z7}_8X(WC1Jny(&>R1;0dK*u)IA$?cB^GEh;ccSO^orK%FQ=f3!9;|2+INB<;1B^92
z<8N_HOU7SKnLv{!G_dXcU7sBF6h&1O(o-#JeSfgj@xd;;&dsc<G@x3v)lrXuX(xe0
zo~la2bIuT`*G6L<mV$%U*!>&46sFc%&8S<@@xeeWB}S}}P!K}(woR-<-UQQg$gUfR
zNTVSk6bmPFiD+<6ipfSDHO@E~Kyw$k<J?*90{5Wj9h4Rfs-aVWEmoPg7_;51w~BA<
zz<)o9U^K=DjqyRx^WV4RaMW|@C!05T_xC^wPemf<aTkq#Ns30{jJRW`{y-?4oOt@*
z#OeP!hd)b2rnlUb*C-;>Q`{Yh#6@)7W!mobmV=@I8xR0k&}awUcqb+JZ)~9B#|IOW
z9Z^>2(qdAnG^-g|&QzNfO)fO6YC=e=P=A(93-a8T*$YW*_ix#I^%D^}Sdei^rHkTk
zip8{d`1VXPB8!DIT4B^uprjT%>|Kb>Ud#4gjp?`l5Arfs0=&Hg^Nt}km`hp=p&CJs
z(nOA|lNj(4LvVCo%x9vy8!)Vj{G}SFIu*PH-cxIt)#E<AM%fSC86)V-AZjYqjeqrN
zPW8{?tLwHJh{qOH63a^oX}Oh<eD5MsVNOaG=KS~jKbp7FLg7d*Q;p<<x%k|&Xv`(!
zDJPKBNVb?EL|RIJIV9+74J$11;hac>aAPeUmgL|`UobRZNQ7e1*jmC?Rlj~@U6oaU
zrSYiNS_o^=q)L2oc#tk7V(QQHg@4ucC57j+aw3}W@x`Xi`vmFnY*F)NlCjVoqLXb{
zide{~H8~z#h~*TekyRr8o<9ap(F;M5zYw2Z#R;IZh_hxR*u?2TAW=C%Xt3(*E>&|!
zwGIclSqJN~d$rTKdUe{ehzRe{6Hz;H=m|SOMGw{5cfB|g<PaiA7#PhEhkx!mLCm<1
z?lkX|^z+A#<?|aGf7N{Mxh8yH@y^L$BTo+lw7A*4OpEh*hL*k$b-&B={o`aL*e3{!
zPomuIBUF@pGZQDjaF_nnx5zu0bV-ZOf8lQZ>2FQrt~$5DZBrX1U2xP9t}#~RDPyJN
zL?nj}2O*Fy$jLfvOqL&)%6~>e>f-4|1+|X~!+Pu(3e`{~dzZSfu)MHvmF>`a8c7H8
zOWR8ksVzlRq>m~+gra;P9Z6=d72w9@0^71t`X9hsUi2c@44@7%pN=w7vyt`$q~ktS
zb3_)nHvFGA=I=azES)}f{?2*Zj>Yqpx4h-{T=v|hOO<0^ITwHUKYwk`EAlPp&)<?x
z&n<723^P~BW^ccA>9$<1yxDtbCFksT9PN*QqoL(1L-i%V1DX0<guXYLl=nB9PSu=r
z#~&!mieK{Q`R}~2{K7I!NVl8T7=-*6aEa&he(61MsgI%QOC8@Hi&URPSzM%1?(^J1
zoV!z3ftr-6Kn}(M7JnsS5@K->SMhZ2@pnC*!_7Ft;^H`};+58k6D|09^Bt{UEH;|@
z^su<UEutCB(&&+1apHR9mgf?>sm`y>?X-cu&Xu9T9j2lo?fIJc3C}v+>mkYfgjmy!
zwfbFNAj^y|*AjXYQD3fqi0jrW@!Wo?7r|frB(JTNokFF8cYogchTdB5EqwBmV;uCq
zkT0`XK<I7s-$7nuIx3Rzs)-g#)8T7C%?0#{6=AZMj%!6tE9T9L8JcS;nPf7PI+E%2
zo?nX27gA9@p+yU%m(z+5JW$Z1k$}z1>Fmi{vq||<Z)bF6>1XN%<DU71WJf2F?@ypD
z0VOU+Gf3Ng>wl}SzEv5#`l@&Ruc&V{^(i^<i&lz?Q-oPh`lBK9hVG}bqkfG%b;PeJ
z6Hn;f!B=A`uO9RO4`ECRy8Sk2&IF6mMAEZ7+Bxo(A&p>*Q2VG-F~@Os%3$<k_n{q0
zdh%hwovynh<)tS%hGaZX_j&5ExpXr>bKbM|;dqKD@_)bweJ#jf+Cx0qwf6R`ZrARx
zK$P~hzxZ{|ws&bcs)r7wfDE-aQo98PCD_17nVXvDOb%E<Yj|J?dJVy!!xVnZJb}-B
z@oq5~mLhmOoGbgRNH81@fgEEA!MJQV7LqM&$lU^vD(3oeE~80OI28*>iG&mmh+0g|
zfA}Dt1%GEe`m0c@?`%v5x>INqT1sO#dIzC@_Gs_FZ1&mu{^W2t6|RB$Zfo;Fwz}O8
zjUbtlC`0f(6`$rnN29i0)(l5%95}a+pSVA8JDv9BYnPYqJ<t4`7F9}cUxC5skjuko
zZtXDdCYzDr15Nq+0N(?)Cul4|t8R>VXa;)p1b_Pe!X8!<raRE4BYve+o(P+5iEkN7
zDO3n7BqK>8wYLL&tDH7M1%LW?^v%tMt*r%&s33RywA7aUlu_e-O0tkl2)q(~!anJp
zM-somA~R_C#e{bDfKF?uZKn8Aph7+M`W{m<aTNg<oe5Ov1v(C|LE2QdCtZ~73yfC(
zW`8tP3a94e2;8BB)A?ki6zWUiq=If`N-`|jjBdBXQX!_9b5bxU<rlSBLGoJj9Y6y)
z;8t`k9C&82$WoAeid5yQ%`z0yS8OkR!OjkP&@3X$2#vW3An{2e1N)i+$oo$fo3WJV
zU$B18!%)oTmE_*Uy?u&{Xa@+o+Jr6<1%LGRZ($_4iGDc80iwVeQ^6}h?VOh9lLI4&
z5iv2civEp2mw7aniJE{z3->h8GUk{qnwMhrAQuZ0XSaT`N$d?SZv@R;Be4>Vt|ZoT
z)nFl5&8@T3M$QZph3Q=^#%iu}vz9YOc_X{p;j6?w8r0RfVzpYzt9tM#p5=>XwSPE=
zXPy?||E7J5GR*s?eJV9IP6V%efb!rhWBp6Jw>s(Fsm_JIg|5A!3fMpe%~c>_^ygay
zf8Ij)xDG#F@Qr^--lXdKvabJpA>g0)3zcw8@bjAj5u%X_A0Rp(SRiB}!0RNySE3QP
zu*v)Jq5!uC3S{(qF<G8Vr#p(zCx83=nYf?$s{wx^<A+l|o#tt2!XK!@g*YwsDbNsm
z0Y25NKd>GEAwV#Bzi0|locMg}0e?0g%ld@|?<0v&U{Ub<76YM#PiP4KZ0z&+v^hDG
z;Q6B8CrLTKKPO2(f05@C65QpdrCGl}OH2K}L})q+Ed{)#MC}<<K4=QMrGIJYjpR_j
zq&U!ar#D4M`|lC_xn?d9DEe>tRP$2@q_p3M<)s9&t(-sNF9vFGk()wCamsTKc?TI7
zVxdiZgkH;bvj=`cx!?Zn+(CO?>VubIR=mU6DKNW$m#kz;WBR@g>)17W%54ryzj3~C
zeoW=RNBT7OXC5f<5~acOM1S{*=vsIjL`t8D(xU@wv(fSdg8)pls;P;p)&w!RcDoS>
zzUkPpM^*)Y^S(z;uIZK4Us@6@aqc@$)YR>t9eqn!(&qzhz22@7=pMnjuXgNBqAlF|
z)?4cLHT}ZU!n{ygJGolXpIFhh-+z0%u2*Y6GruHS0yh<lVsKv0oqq*FlkR|c;Ztam
z7+4hu`<O3{g86pd<m<LUO3)ok1Msi66g_vwTz|09c#vk>c@y77pD)YNVW%kzIi055
zxrxsyQHo7;QEZ||<Z$F7+oTSsXca!lzVbnGmgX5U9TuhXmCcu*{L$^VY`%Q%M^7>t
z^zX?ZlYhb;;r<EtX@BmEFn%D1Ye)qt9Ic|quql`VS}>fdgD?UZiAEU;3hkn5>XZi1
zv1pkfHHlOYqiU^Yl|>*S0$EF|lq(x+P^Gw5qLMvGGi&QkRje|VM@vJc0o*T$bBKr=
zH6SDOF{rC@S{hm!*0DlCqomz|X0*t^1_>?^j3$x+F&SQ&*MAa;`AjmEU7aJoP$(GD
zrPcY|nYma@HDd*v_|m>!C=!ukp-kddCF~<5Ef|dkmw<Rg;zcPLOU6|{L1``-jmuJu
zge3t$bwStXq@*D6Mll!^5>h7X_k}}A*)Il@NnX&?YB|Iw!na1_$|GS(OUWdfiUa_T
zN57C=i7zA;gnxi9)(oWli2%%mrEEsYW*3tAf-e(L{Hdh0UaII3`XgNqkU~->YJo&j
z5t5TaYBcUwq#%%uARmFkC<%vr;Uu78Um&O^gXKVcAt(mpVuVj5MLs0?g8@|$q+lv3
z1f^8QN3!X(7<grl&;M31N=Q7NN4=29hsU$Trda|2MSo1mxX5DmJ&}f=*k~nc1LK@Y
z_5}>>ky%QHrt9Tju&-Wyg{5S$8H%%aNn246DF!C=Ek5x)ou+X}E{p)s5P8bKX+q#=
zk{qBR76wCKxiMW1H;(6?(!oW&=gdCEr1^~|S-{*$kolnBqc5;C9lq>Zz5Q|QHlpwm
z^_=zciGNjCRxtcf&HJZ};n4Wh5dNNj{`vLy<oo^ncE8{MNASm?-|56U!Mtug-SJe`
z4~*rYZi2=**4XnX)Sy)Kj&aQs+U&k{)uIl`_Hek1J`1qf>2`YzJTnlFb|Qx1JH4K*
z^m;%i?6HP~^-`MZac1JWMe4w)nN4jfw)?~FCVxQb=cc>oDtg8AFJGS0E-h0Zq;Ukz
z#5c3*`Cxj1KgUrDrHUAxh~o>!_-@bs++cT+-SXVTBU8wfN*N)WJn6TNTK<#C>|A-L
z5S8U<p(p3$9%k^Wh3oBlxc15%y*~bd_xrgrRtCS`#M{{~y&vFj$9Y)>G>T23QM8<l
zDu4Y+o)j8a&`45$P2`rto=UA2YHzT&hYEY*PI8a{W^Ir5ui=#7aGhQM&*T*<#W~y=
zuEV{J`v7-^`yBK>qk{sFRUp7f@+f?FS_UPSs5($ZL7d#BQS$1vQ1MD*R|PyfLFmp|
z^Gd0hk93umwi;DbuxhFUJd|=z??)w8i+?8I!)mCS_3ZC(1Kv-=V_Qxg&dJ4aIGfA}
zLPjD)5F)XF7~-QoUo5eniH7|?pU>|P2tr&^fF_C2M7Zn^NBn{y7Bb?hUYd`DmzPt7
z_}_l?SkgxVIiX>gWvNa0KqT{ct&t8zq_7wa){}E<YqnWli=7QdluWv@u8M(l%6}*%
z=1-TG0C-oEasNUp;0yRevOg5bUVKYH2q#p_J~D3*5{e|qao#UQl5%z~6bS}JDHKk`
z{V6FLPs(y49tj7<fSO9gr9@N+OG-{I1{1QBjHkXK0Oj>X142mj1$bXMA_73?rDVwG
z3;9m~)#XLe#|HyI)O~@d;t%?W-wPj$KP?1!KePs5wvz!h6@Mq7qkKGoa$X80CBHbK
z!9axrG?xp^rd=CO?ZKXR?Ic`Fvun)187)an%U}#UK>XZ}#WM0>ph}lUtDxoi;MX*+
z-ph-GtL(r?1st?3N278!)j<^m$XG60517i$f~uzS#(DJmuzc5;M5Z+9zbUD1nrahk
zTAuUL6AgB4Ykvw$<v8vjX(65Faf%dJ{GDgkJZ6^FoRUc-BZYW~<QHzaMBLh4kKR=a
zr6M5!;iRC;ac!%(dRL8`^2*D3u^4ak1a16g@O|B<eU^62>ppYHyaT4Vra=7)X>^I%
zXgUT>&#0mInv$*6vY6SX-|5gE>bSL<YrFma(Dt~6kAI^wScFRex3IVx#uYeB#;vQE
z9x#bk*5p`=Z8}ZncPkbZQB#VhH_~3#9TlBSQN@H|O-Q_HwvKF;aJz$n>v}nVe%EzJ
zUDqWYrldjVbKJi*n|<pL-hJ$;^q<ME!<<;6UKyx9Jmi<rS{F^!R8wi0k|B-!;A`=O
zUU_`!UVr^wU98MssD52Y32WlnZ>Cq47h>epL#OP8WHcE2rv3HmJ$g9^x81Y!cv(-x
zsP9HH|8L?#v`|f-dia!2Pp+(_zv<;XV7VEX&r_D_u02l!g*tf|*zF$imd81ykZtu{
zx8q*jrLJ~rTkR-q!u9N37~t+;V6jA3imF<(7Jr*8%%mj`_fHHc+70GN4Mc!OjLq8v
zD@qa8S3Z?`ndMY?pt2GDljsIo<)@t*T)dV~vF*QEDi)Wftv8q}$fFe|OJ!H8`PPs7
zc2QM08+49zWass>AEs%<`OPTHOvTe==5Sd14AnXOr~?Vn&myG>8WPAM8I~-kzb=y)
z$bZ)tOpLJU{_w&N377twOis}vjI!B=vT+VG^pOiw*$_|$NQ5=t7EC%Go#dFm+$y2&
z6`rdca9;EDQop}++D~2Rb|)@#-R@`*Za+|a^3<s(YY()~QJ=c${t05#T*b>(r^wTN
zLX<o7pZ!_=jzj&?9^9e7|NZ(M1JXIv7k?u4LjO%NoWXvLaUMHdGZ^uW>XTK}F9O3~
zt7_<dj2IKOkFe)4j|+^_|0RY(k-(DS5BvEI!Ot5FA?OSIZ-Gwl1DpEh+id#<*y->I
z?CcORB>uH1@x?nOU!IQ&cZP@*^MA@eXIal~>02M@{XT3-Lf_Kwu@Iqf<NU)I!+(!H
zmQ8B2=bVWO_aG&fcQ6UuJ}9~2=E=b>Gp4+CCNJ23VY^#X^x8H%dn-G8EBnC^H%7L@
zc2^lmo85J0Zs~dwOn}as?^4{YLho16b(&&o>f)g|O>?5GG#gISsCYpmCO{&Xug>7=
zRjbqQ*)9db9qWF12Y9}Jj^~vXC4b<5aplFK?UHWql)daSWZaQ6?Lgii;#IieKDc45
zQ~nXPaKNl`#AXqh@wDaO1QCl)@x>KPk<<6=1ns!SuRS!{FA-&buuCl+NS9NwuMS+s
z-+)JSVXRE*aX@V=W6Lp1z93R{jyWB3bAmL)vA@oNHE-yaQ|InOKj8b$rGNgS-Lcx=
z^+%i%izhER5&zSB`AWqB_zWVX9Er5s)m7>^yjpdYwiPd!)X~Q*#BHXu?}XD~_#9}8
zu2Ab@?r>z?DmlnE+r%ilH8Cle_lySj?BD%yn(KksLJ~Lt6#m9Ne|gXSEHlKc3?tJF
zz0=vb8YoW~Nr$?bFb5H>Nq_8dnl6xNdi_3Cr=}tj>CfZ<+wYC8?%6#$^Mtn_ep3E*
zo@7$4;~aX%Zu9cx=1uCi%jI6Ba=7l?VM&Z-*b=D{M?9QpYhbrs`-W^=yCCUxD9`%0
z<o^VD8!ZJi+g6480U@V8l#D}ZsN-xzEN+KpmZKhu4#J^37LUeH>3_FsdCbqDQe*Y+
z*?!}_V=N~hFE5s!YDWUE?hTJF&S|IgQ*mZdK|8o&ua(DmaG)EirKmK=wlLE|^yY5T
zIPceKrAb>>HJi{QljhR=B8^FQ=$p0lZ}7>9{All@Bx8#=_x7I3rP`~0`zCGOhbHEd
z?r1L~vnB%oO62TBB7e+zaZvkoq;ivZF0N7(lLzrmPLhQU6){T~=CoUDu$6X$H4fcq
zo9NmBQ=<b@unp_#Qui7LGAUAY^x9m>ilo94h$yxYjHe8T2Ku=jLIa-mrHDJ)?M5VJ
z7`c?oN})(PCWMm-U<|=bJUf2{T`8}yY`8F|UI0lT%xI6yfPWElN*lXEP#fB=qI496
z0w0tJ2>P|!nB&<^W%n@teH<a%g_WE}+Z#%vAX1plBpA*dl+V|X9k*5=97n}H@grFb
z*OGIq{c&(y`~aJuq|tFUjhH>0OMr34u~F3sG%-CIDnd-9VY2YkncM;|f$Zfc&)|0S
z8(yA)e|H=<Q-5g&ekk}~!y91pMa(vUSqDy?IYYVr-x8PFF;&Ft)tFBw7=7GmPLi1t
zE_-ZAoNpa9I$qcYasNCfE*-0@@!I@eXEb1}XM!P6Zd#r2c$N-jY#GKN1TSKN${geC
zP>$}Asr_Wu+TXWm@Q1y>Z_^T3;{)%Y-QLHT0v9tB(SO*3Y;qqZzre(o1M|FA=&Isq
zQU-KCYhk`}liCcO14ce}-kg}|;skAU_SF{`=Zc$pVdcm|)y^+mHP8-NFSB?5Ph<BF
z{tsSQc2_#>B~4U=!C)alLgA$Hx6EqjvM#yJv)+aH=U%X0<PK@+m}l$F=pHs{fxyOe
z4impGFMsE6yDk4Sx8+w>@;A`Hk1prW!j-f6<(2&5r%^fTrcX<wi2>7DIZQ`=klYFt
zVuu^h4hAxQu^<W2kYA8<asim$k-`m4>BPdKBEb5L21CJs7(x*{SFJu@C`|17AE)sw
zHqES6T15rCCpw`yLDbZAMM%T206a7+BFJ_Qz<=gH&;c5cLSdzx5d>$wm0l{!{ND?s
zM+5<{T;3#sZq2UQR$Lc^zvt!RQo6P72tuZ;ghL}Cm4Tb!$~(6Hs|9z}y3<k)(&HjV
z3zMmsA#_Zm!VSpE=r(PluawE=PK+G*9RuXOOywJr`rWQ(Mk=X|Qn%ohOgxaOz(XaS
zoPT^(ODlS*O=X_cI70#RdCqfXZiVu$b?OL3Z7R;hI}Qyl=2+ws$D;8;^T^=X#m8<>
zo85H`W1fEWKc<qH{3L6^l}ST~>s>Q_`(qc6O{KtwH?rA%1@@~KwX`~KjCuEWX~sc=
zMiT(<5=|gfD%F01;2=|j2@_Os0oDVk!heN{G`M1YG8qqVR>bADX3Q@V%UWIrnmu0{
zeYe}~zyi01w}{D5JeE$7YR;Ndx0V(cm$p>6b$IO{lc;;3=O#0LC?cEFm^Bl9Pujav
z`tsq9wYS&4GNnl0-6hse*X}W&j_dyo<g5?TXzCJr88|eL3NTxZQYd&YV@$h%k$>UW
zF+E3T;4OXNJV%$}i@xliE^MVx2W>0%KVR_qkiVduny|zm(5^@4+rVzS-CtDSeg5<F
zZR9r87w!6=lK(*d1stI-T8UCG$CO1ck)=~H9p(|}iIE5-+ZTR#;j0flTUDC+g1RvJ
z!)G6=HnsJI1@*7SSsO0E9izW{=zrM?-lFL5dG;X??V7r-Y96?}FkS)QpZLG8|Nr-Y
zr>*>np6|c^*haQ={vY7^9(b&sDS25t5G(a4e?om$6=OcfAc;bzu^1+!fsh8S78Rpf
z63IUuBccmOFEZzs4`U=Lac$%7(uxOw01IUq24bc}%i6JRRrO+UTpF1M^M62A8vK5*
z-|M?T4oAC8UjA$H=P(b$)F0&_+o;2{@JjaoV`$>d)OzRim6~3I&x*eCPFQdLxk72f
z@M$+_-kx5-TUHiowS^VZuHChol;dz`n%qqD=bL2p5~!VqWeaq?ghaO026zJ^M8`$t
z8*XU-{+MQdmZ(pn$+hX&D}T^<vDq?FdZ5P+p3)PoiRb9U&DT*JD4BQ;-#CWDCozE}
zxtyCzmp04Q>XMVs<I%+}WASKqKC@C<I=Q}n(lpOoLBY4Qb#mQ4*IWzuMZ0g?9}N@&
zN;$ch#Qj~0kqQ)r!QX@mKQ53$Vf0PENH9x<55UeX1>hn9FT(w6Ab+)osl}p***l5~
zl}`e%m$tY=y2z)9a`|%qs_P{_^|BZDMlQ{X+NN2I$C*+`17>1FZN^RY1aFjST)Uw}
z{)c8GzggiMWh#GW=8POlV@_uWQkc)e+&~MyC+q|8aWr&TK<^$?M2?G8hH_o<%}8YP
z)y-%*Ty5*^j=s6Fsef-2HlxvMNAFajcvB|@*lqmUW+Y<5EuW#cz`v*wVfREg=RFT+
z%%rf)o#Y<Cm{;oNs!-u{Okrr6w<?GcCXI>!Qqyv9nL9Loiw1JgOBAKZ4qfv!W22X3
z5g?x8W^O%qE1;8DY8=oJ4*E#7kW0o}=Rho16mz>rPvgm4;VJz1;Mb}NAOUJr4VEQ4
zkKRq$>{mCViA1zP{LiwS_V_<d$(f)Sk%S|YAVL&>H370$IFy+O44BP&=;8<Dzrwp$
zL2kO8yBFRbHOKIR+BzITPiW|4Fx?G}I;LfnZ~ER0ov}3Ojya~k`-QxkE3XBP6||FO
zpYc;m<JXT1F)0$e@r}RBXkR{aO8*%1+FtfaVk&SXCFGK#wi%5RpApKPJa~5^NfFYz
z$vgjlr8Y-tEC`_Ou`eOM_4mlXBmWe}9_25LsA@HpCdh*tN*C(^k_B!0EQkAXQejEo
z7YM)vg}u6${ax`gr2t#`m2`cnreqMBtoEJTMla`21&-F%tka87l-7(g3k#@~PiETr
zr)6d1*D{OYT3Ao?pxvn}!Ih8ZPlcqM6{_=EMaBP|e*oUi`)>+j(RQBknIVnULF{#e
zdyIPqXvrj=2->4f8U>TIx$dlw|GNaQj7HeiF`txSPCJQ}sFPRItTvriLt{Q(%t5TK
zphuWuj{kqE&Oz|P7kuo61Ys~4$kgq2=utvcpFfxM^ThV~15z;S=M|qnlkq9MKbs6-
z+7Z7Pf6a<mxGHDU>8wm_&HKL^H1m(VmsXX~hX|Sa&l;+$U*bu{Cxz#rf;m1I_LX^m
zQc3y(WnVZv2hW>>i@vfikW``(tX7`n@n^n>w{rJW`?qJM84Fnf<tIiQ9Ewo@)V5C3
zno`t(J_~^2E;Dgz=!u`@n};Ek58@PT8`D9~f3MBi=x}wJ{VvODDIAJPIK9YX5?Iv2
z;_0P`&XWDiTWY)Q&E<WV%La|AxD7cgwAfrnVYY+@uA99FkklJqx&`u_JRWb&)Ct)S
z1-CJ0vYVW3znoX3(7_8<3Qy-h!(hsbHm|vD7@^a|uNKG)hui+KeA+*LHS^Z=)A`Y#
ze=voRZYMI+STD#e!c1>XjhaaHONSCRdP%xP`d?=;(J;V5E^Wq((*DS+2bmiI_eGP@
z>s;Ff+(*RorR>IIE@MIOQ`0jU9J9$&KHn*HVnOKlojXgJ_G44Am<v?9yNTSQsI*=m
zkDB}#jZOrisc1}>aL}GvR2uQ$kD$~ue-I97IHt0PjX8u%Wk5|7miE~j-0KBoPBKE`
z+%Hn<Hi=sE{>LR%n+|XTN@q?=J+eYeX#x(9ebb!6#=IhH^)q!%R^|;Cpy9D2s=3Oj
zz@mEO*e#blA0^v>o8cF!a>P_IJ4VI~l@pu)9Ywc%S-XppjYsd)%6XLKXutjef9=;Y
zaNwW9ST<RtIR;n;Q%rOUTV~Y+ZUb-*w;KE3E`SZ;D>&>-d!0RtjSHZqxmj;DD=4Wd
zFki0R0qgF}qmLSHBEbiOiG*Jigh<p(@czVdqRIQ?D{)>D_-$F%wP@snczj8Bap&qg
zxO=yLo}T5;-qr+Bl)PwclopSUf6mbz>E2;H`sUNHv|Xsk&j+DWe;{6nME&7_KOS%S
z{fQbcNKk(>rK>0AU-F9*eE^iX`jdF}u7&gT48+~$ZD;cz$5bar7x&n1>{sv<>7q8&
z0eKLB^_7m@+1dYB<ac^ETyKKtCerJ_!mc08Y8F3+K41$36DOY-N0K>se+<}*_x3|C
zf~={mt}5^ydXZ%LaYR|qizJKF%Zg%qmq(x6$mcdTa{0;sD5fHE#Y*vk|B+R2?0a;3
zEdT!j@$7sU0001ZoMT{QU|;}ZA<p&I@%%Pl8Mv7k(82%z|MxMmFdhXmIT*mw0Ji-H
zMF0SJoMT{QU|>A({{RC6lPO0Z2LS*EGynqtvrk6|0e^QFjTikG9vC|qY8b~EJQ;`?
zu^H$ZAsS^GpBm*G2^&BgkQ=8Py&KaU5FBe9;2ljJ^Byi9Q67IDq#pqvJRfr(rXS!S
zD<Etjd?278wjj_U3?W$|jv>P$5h7S3l_NtV{v<UdRwRKW(<KTeBPBH^HYQ0XZYH88
z&nE6CHGd~vC&DN1DEKJ`DJ3aLDS0WUDdZ{zDpD$#D$FYlD>5r*D~~I}EA1>mEUGN+
zEf+0oEtf6KE&47dE_W`^FDfrkFLf`yFXS*HFm*7jF!(V)F@rJKG8QsJGJ-O|GYvCJ
zGg>pGGrcq$G*mRRH1IWUHR(1%HrqE(H?}wiI2c(tvN=&XVL5R*tU12`0C=2ZU}Rum
R<Y1F=NfQG!0mqYvNrh?D<x&6u

diff --git a/dashboard/src/assets/mdi-subset/materialdesignicons-webfont-subset.woff2 b/dashboard/src/assets/mdi-subset/materialdesignicons-webfont-subset.woff2
index a749e1d378d226a9cc632e6beb904552829c81cb..44b9793815e83b05ab0f3beca6772ef729a4b12f 100644
GIT binary patch
literal 15220
zcmV-)JB!43Pew8T0RR9106TO53jhEB0EZj^06QcA0RR9100000000000000000000
z0000SC<ayll{^Z8>lA^&ZVQAK00A}vBm;yP1Rw>0LI)rl8*dftn3s4QfXuPkk%3_2
z2ndMHqmXt{QU=-o-x7>5mfV>3J!{A{s;f|L+)9Rr5_(j>^dzUKsHoUdub45PaDs15
z%Nra#H6ibEu7B)M@Pa!hedD}^W%$Ozp74|G<}<Ku<WF+a=b@P6?QN1zDQp2*GoS+;
zU)%9jKnE5TDk61rt`Go2q+1OVN@$WL36Ow<gq9iT38iI2LTGJw>4)(FO@ieVMAW-1
z*65X%#BzEFHrRM)y(au6*zOeU5U&`oRKaqs8nAU2+b8(Fw#r{U#wy7GIADaGIZBOt
zCDq(^GPm-3oupDKr3++0%*-i)0P9-G;UK(#4)_-UXrKF$A{*ETp$`W{?qsJz)~McV
z`<65PNKQJ$XMcxDa0%j-=B_dw%&R#Q=*WZ4tKbsc7HP$%03POhr`F6J&+PsQ41opN
zmaLXT?HU##ZU(Z^Vf^m=^DF&YzvLt>+g!pVwo9C}5k$cMug<<!O!nWzY)Dm(r{A5T
z-J;#5xI8_O^d1r*f+aC{L10^egAlA&;E*R^|Ac?e)y5!WW)9{juz!FJF;zcAZw%F(
zUu{wE*}hBk|8b9M)>^_p2kY{nlDU>r{k~<(b`#S)o{wscLL(6dBZuD47DG{6q%2Gf
zZi4A1Bo)$~lF8jWYfcD#eobGS$MTh(1lS0SEi8e+Dw<qTp3!J)_Ar~lg1$%OPt07z
zsZU4z3^-VV7-g2?)i#xg4(<4x!;_&Oq=*DLf{1*XKy8Trau+jaFI=g^!EGlGYYQs)
z7(^lNHxM(U8*}LW{(pBj6&gytmtMMi)=pDD)(ItLOnkoSzPu{22$AokR8x0rqV*G<
z`=?}wmQg}#DTOqol+v)V+X$2fX;x{J7L_JxWoec+jo%$XsimJvE9sZgTKc23k^U`h
zrT?C!j8X5=FYSysK_`<;*2PpabhFe_y{xucZ|khrXM0fk$=Fx=%Q#sE$hcDm%D7hs
z$#_%-%XnIb$aqnP%6L_V$@uJGxNm*`8u3*$eHS(4l5p{)2`7*tLIk-OF*3!8lO;id
zY)O*jkdet%p+cT|4f0VM6&f%A_Zl;$Lk>~7=_a*1?kL_}9BB484odv%zgOv>r#BAD
zv9VR);i(j1kt!l0wK8R?lOsoiLWKxQN~AJnC<H>IR_&VBfsX+Ex^Se8j!wHCJ)Y95
zPlsvKw4Cl(vafK^xo_|h!0+Z!0lG!R^Y;p{R76;wN0#y9M~8<;PeQ^VO}ZWh3WO+B
zXoXs}Rw9vBY0)BpV{W<S`0k*bkk!3%QdW=3DOo)(r)Bl*;EWeuIP107&g~17^RoJ?
zT#(f_2N(U|N0;^+$`y&Um)`+RNN7-$D4W!%v01%(Th@+)t-5sCwiP(ozGrb@VrI6(
zkRdyb8ui@X#liEtfP)uYG37;0PA~6M9K7NSUwU=_;3<GvM7+V<11tgs+C@NMw^(uZ
zNR;SxDN^jS#1i{;>-L6Ty@r^X9WZ9h@J`@h#Dob4-EhO9eT9R=`wkW0h=};G501)`
zWmK1L*jC|SY^!m=>|Gq#_CB5h91{`W(03TTDP6kbdm0BP?6Jp5M;&#_xN)cFL<Kk_
zBJ6;Jx1~w*j<wc$mxaZ9cG=~9uY28DqehMI5=smRd9x7n^Fqq+4`dHLqU;F@t@sqZ
zR28Fi7qhG{R?RxF<;v%*8^x~!C8!%pSYIllI#a~;iy~=DO4^o{tQ{!wHc}MrouX_X
z6;=DPsM~)<qi;ND?lKNquDh<y$*Hq>6x|gb^dw5uci3SAZ#i!0j5Ef2f?~3X%5-Zj
zv#qzxw;w*B`v=8xM@LpNWm@ahY2%*HZTAz3{c)!_oQ>spX*f99Yp?U(LvgwKA6#*8
z-1Zs{?!PD=x6tyuxy$R$KX{Xo`N)*%ODqoeL4^t*w;ulj95pI-3Kga7DypbtH}O+6
z$nK|po)(R=7dmK0B8jUleAU!{Dmnq>5Mc03MsL+yZa(;E%Voc}5?t_*aSXK}wJ{+f
z`P4ebjutU<RfctmGAEIyym8tY2tH6vc~uDHijPg1A>*p(i+p#)#Hhq8RjI_qU+2i$
zHLY|-Hs#_(n~9_$57I@US*@h1U^5aCL*Yl-gMShW8Iq$bp-G>s$%bD^N?{`g62hbJ
zn<nidSJlz3H~buJEjl=W5JMvvf!^_)Lf~@@96~6TAd|yKPtl%;;WL>FP|4Gai*y2(
zCj%9-7V+LcpzM_)=R>-t4-F|X)WAcq-IoNq^_pxVK<&j#oqgsxiMg9AINxf_|4t7v
zH2;DM!fg*+CvEf|G49XhoCh)%%!>;ie*m}2o!v4%fgqqrtcH9y3YQB~6W00wUMnS1
zE_<+3yTj=az1Q^N7tpSKH|Qf(#)({Vg)ILrN#M^KXi$k=!59i6S^pBel2Rs5AW~;2
zC$kIHtc*h|sdUjWG2km~>!9?0R03NOU^t#Ud5oVIZuGF;1~>fl@`7IYV&&%cc54I-
z6v3pe|Bx3+qL3=*#C<uoyel|Y89X{N;m9<=+4gU(aX*nr{yFC_zZZ=?p~snGGDdQ~
zE#T{Z{by28x?EGr1pE!~f6&9*<@CDFMQbPPoM}61$|olYK}A-v<hfnbkTS@n;n+sh
zXqGrm3oEh*<T*6&m^&$5rKTF0qU6RIU}Zym3;EG#6BCH`Zn^UCaJ4~=5<Cdw1jka;
zWT7`w=3Gw&x}KRt<h;<WL!czP&RP8M5kn1ISa;Us{i2)`PYW;LJ3qYm%Gtf~kf0>~
zz9_f+?YwBe&|P?KGBfk{3$Kw2dfyj)duQ&}-&=dMg+l;GWgPPw<t@FF>)4rArU%{&
zR@%_qu8*wo(R#2OnBlw7j`w0%qNvIw-~sg;)8jVuAd~MSW7#P@;|xN|oAuJ!gs>T{
z!i6z=**LsTI2-S>Jklw5O^q4^fP-;~V>=AZ%8cr9^^Jd1pQRN=r1a}uvu6)#6Vf}E
zV4Wu#=|@wX>Nl};W_*w>=L=q4D5=F}0ztL_)`Q5R@%|foM_*FB3kj{LNO(}m_g|x$
zRqq8bL2>2LP8rPTn<$RYV{+spm>68Upvyh%+W?MAA2BII5;^n&X}!*KyU5jkYJi3I
zg0c*D)JTS6o4AD;s}^P)<ms)dvAKqMjUuw}#;j3u!E^im;6~=L)&xq6Yg0mJjE!I3
zm{Bt2TsA`b)f7z}G>dFBKsdQ&^&l|A&}hPL2D<^OQ3P$By_h0g!{9Kzj*SLO_yY0f
z;Y~e;HdWzUj~9j)>`Y!*A6FJ9OO@G)CDZ8ilbpX0;}(Li-+{b~nC3bold@6o0^}~@
z;Y=g<FrV~3Y6F&WH8F56&#j;gaP7l|rahu@?`|rMTsQE<b>=o=l(20I1bH3_v2>46
zb{I7od2u33!AA;kym4@64m?F;1pm@3LD!SIZ4PzG*cwFypC1~eydBh|5%_7VK`1D3
zI;c?&M#E_qc31_R%E0cK-Fly0_;~@_#U^P_F3D&-q$uxXwX?(z)f6Vzc@i9iPk`5L
zb7+sP5veb)TQ^?WFRqzapRd$_@QLSA;ek2^(zyd>3UHH)O{C1QuoG9lPVE=s_8Hax
zPcK04B@&gLqmk1(Q|wgN@<hmfAJZ})*h5n-u;mAS;?pV&o5QBXBtt)!AEUnuaVQsQ
zu@b|`ffK^>!bR0g(xIJ-%68=<O|&?^rm^p$x{*M1h!RPYnJ$Fz!sk(8#U;WIA<|Bn
zw2s`d@?IM;q?altpb14=!k&U#WHWm>y*{ffO%^NT6N?esPF*T_GUT|k;nR)WHGvo#
zO9)~}+TWX^V7#cWUaN%v!{20b2CF)?4OX*=wzN;?p9#PR_1E_)F&F|Nq29xRJT@gN
zK;P#zP-9R8(;9Jjk%dpgNKL!rZrd#^$niiq&}|>mS9wo@@qi~87QWgQWlwNF<H{TI
z?R*~=-Gc{d+(b9iu``35-`PUK6nY@5-5D1kyYj0$&=77)rx6?-xD3mUSGc{<1}l=r
z*846Nx+IMq!2wJ~*L{ak3ApUp??5IlYC$(9aLLGERDsekLGB~2O@)x}95IH^=U}Qw
zlYPyF_>9>m%i0~OeI2gkuSBT6zHdITYvS~vC)zM+DYU)U$SM23aCEBGCubs>$sl;}
z&B7lNMH4sF-|zvORpZS_!`5VGd=s`moI!4xnVUjk!!I@VzH_!My0{G>F|t#aJc+K|
z!)*%|$;(QfXZg5^y4OavYl?10bVb*6P)*hBAwb?noLwxJceRcnl`)n!hNRUoUE7Dn
zV|DNqMm+J&WYlc{I|qrTLso+aDy4$#G<6Ts2UcJ(UM8t*!Klx#g8U!@gx-Aw%k`Ih
zIU(YsxOwfxhdkm3Qe%iwCg@Fmb)y&A-lul^=P&5cK796Mc<!vKZlvUaHL9z`X8Eoy
z_V(~pA3q%pIOvU}&^3p)&aIyJEI!C+uqn4LSf^bS5rRhzAnt`{8yGS1+EQ|u_A@rx
zn+G5lL>$HpUbT(t+lSVponn30d}r@j@2j)<{bEw9bmG+a7#}~$Fy<L12{sV@^7$e<
z7*b+u7#1q9i<FrJT{zZZ_1Rl07R>r1_=$FY6U%P=NB>*+&ln9x_AvRLhnTgkX}<q@
z1~7f|_92vfsdsDG2{be-B~WfugXn|<p{293+)X91?X1g3eVHSt3U$T9ZbMK&7Kl@q
zm<MT#6KoYIo+aIqfZ27V+98%%Odvi%KSMFX$W$5zc(e%I*g+(Ya3RHIp>Oj0`Y!15
zrQyBp1(lK!FS)m2*OE?nb)i821F@K-Tz`qshEz%vJz9n#t#h7G*o+R8ed#om?Ob(0
z4xM1ghc&4l>LCc$05s8A3iuE=GGcsl`8d(X-GC0T3APgxOIeV@g-@zcK`8i$02D|-
z5vZb4T7y_dBv>jmA+jw(aAadD55&#4y}Aq^(@)e4D^#ZT!Algt@mLLhijD%og{s~?
zjbKWA3@dSh6oaX12J;;`X`mK<@!yI6jCbO)Lq_i6(iETmMEWhFeBlO!G?Zi}Az;&?
zFv*+?<2fX}1h_A>ti4o<sR%a}Su~C={Qr&fH^W#K=wr;2O8S2bIff#<V9Pn~sw>HY
z#9QUNmQ?nAiFuyzeLMS!sC<IAG?gDcM<9+X79CS8IF3kNSN^G$`Pg)^5an*~<bH6K
zA?Haos-dB}eyk{oD%E6h^5R+v`RFAwd|*XlEJ+F>*Bi-80`9?tj6A_S!P9D5$7nIC
z1~m#HdB35$pc+@P`&@D(Z&rJZqEi5hLJp0}`t~6#>HI|?2|6qiXIWU&6516f>NiXm
zHe_*{10$hDP#|s;ni`+&miZDmZp_vtRnAZxrj_et!!dXPwgyKQLsUpKVmytpR^m~V
zHf1zr@biN*qU6y#Z7&oG2uQie>KnSjTI8!^Jv(25A)MVyt8Z}uPltJHjk5}$FtXpz
z{O0#K76ySFI@JPLAMka!yY$;c=W|HQ<t%vj$|@v`ba*B__l!Mf4<DurlgAgPkIzp}
z62G-3IKp;7MiiHQd7E^Flc9G{-i~^hx)_A-!nk^9rSQI)AXldG-ZtX{D-DBuGKG(H
zy~A<tB9WK(w@0k0)t;H;mnPAxlwUc}8nVQ7esGeRl=D2?u-ZG1tcP#uX1AK_B_m(Z
z7=q|RE$#*qEH%Yf$6GJZ#rRRE^}>1T+VYaW;fC1ZbTRvde=h9dYU@|;sV)vFt)G4V
z!2$GnF*UrW#wriv2XVAOJ)~!EX}yar>Vx?^{9{usZCEKj41+@HN*v{3&P7#icaB?@
zopx&q+pNk>^$*#_S9hM_mbsPb#L0h5vmV9ho$MdJK{ZhR_`zJ;NJ;5(^1Q(B`BFJe
z*T<BnCK_n@`pe)X01s^B1MATaGtd1Tyn<r@{y5gQMCrH>XvcF!I!*+oA?Y|XK7{Rg
zC3SPnEnXNPBxq0<Mhy<J9Nz_E|2E5lBQ%8ukRtm7*;j1PuI4W42v{=jNFLlLD(>-I
z3_gslHEpg#9k6`#z7LmHtI|xgdVWGlxsrqLT((<AzNml?<+$#r+x<%7q<S%I1Sze&
z@1y@p^S!%IH!ojEZ*1j~PE%-{yZ0>Zr=eZ#cY15xW?Mpg{Ox;}&R)EmZEvP>ZcA*9
zFO0HnL1C!&&kSz$5{^JS?BK$cS5NLG*G?v~{)V*v^7+-|T1F(I+i14eH)LPr-eEkh
zfNN+3W-S-)fegm24-b6*!-GeE`cYLwFpJ@5xK|Ve;~^}~LwYvo4FQPfD~ToHJVwsa
zoV3I-7TQ^dWk5WC3BMOt`Sb@-unP)P^f8n?aZ)uL;L~AoiO@6KNaK?3+oI;0#O4H1
z4gAjmdxv?N5~uTcPK55Fz@+fGP>x=Yz}MPE3dkqBH<Nvh0;2>uNbihb^dyn+m`x>?
zA3KOFsr;h#?S(cBgN5$Q&AI8;D}4}0`TizCwB;|+QSD-=xtWP}l@0jWlS@!59n9-i
z*B}lMFhFBf5^NGUi^RYp34s{Alqd;U2z9jg>3Wnk@$kmNqqN>lVmVF;jssqb><{Q&
z-6Rki9DWdcQOOe)6VSmFY}ACnrV>C+Dl+X9slC%pe1ySz^m?wnnbOx<Ie#E?L}IV*
z%(m_&Rj*B_#8}H}ow=!Y0X&s_fA02yd&IdG<SJ=X>RSWcTB6@U8g8UI3qmaw5Ieg?
zy<4k71)+MsRXvjG!Q0x|?;THKo-dbE>5}Kk-1o&FI=N5(8IhcRS8r`)e)3(Bx{gpt
zCW@{r5XX^zY$_j_4%)corut)|cyh9k{HZtlF~0qd{zJNSW~!X}zCZU#HJ#!o7x+Um
zJ?97$A)85>@}wDu%||?0m*l*ea@6<5Szn%BUGhd(oUh;Ruq&wI>g>#&%swqEB+kw7
zI!SS)1NxacNO$oEWhx`5EtwRPVoo#rFRX}0szDHc>}aThTG4$=DtSLE#DaDU&!Ax9
z|5PP<=xd}WRR-YeFq}9We2w4Z_>=Qd#QyntvNccc6M6L@B@31E)$3o(E>BVQO)-5_
z`*l+J_*|eE3VwP9_2)|9tA+dyF}XN_{&(9Os1M2SXTfj3S~Tnafo`T(qTfZhy%=5t
zSEDcUYA?LV*Wjq*?+7_tH!>oZ_Ae^Q_$lZhtA5$er(m`jp0jy5wVvMEhQ6_t8N`~8
z+r4D#!Q?5`W!tK0@SZBhoqP%&Y$|4)|N0zWtt4-5J?kk>6Hs<VyBAPWaunEC*L^v3
z38|#p``XP!Q*eYkv##54q_*M+rnx4z@K;A0otC)P%XGHV8?sNY6EtRd-EcPv?C{Rx
zRpR0o;P@$-`>vQ$twlY~PFAL7ZUivDi$;u{D;|Z}lY~7@nT4pq=wIx!c(jkK^F~oZ
zkfMGqL={qiksc`|P(<^;ER|7x8$c#e|1e^IRz4h~H^_0u-yV__&2z{_bY{H$z`U=3
z3HOfuX1oVO=w?}H)lBEL?oPv&&{VpKhUN-|2nV~4B&|!Hyn#MUKk%MW))G!zP`E&7
zB-e`G53~M~<gK+^xjQ-a=3M)N#vgzC%ELy>C-Zmay~?)h2+d&bX`Ht>8{T=`%{(do
z`dE49vpTLcmA>X&uC6$(&{&HO`d0VXSqk5*pQ@36m_ZjZ<3{dI+IDu-&=~aM=U|&*
zFJehj;r*H$*1&FIsNxU^l{~T3=X_esb(N;#D8eAUA@{G-Lrblvbb+{>JV4e;n2fVX
zBt$Kd+zrWQGB9-{7%1BWEy|S3w1p2a)_{+jiGtryexzLL{^GVQ65qOcyMH=OdHh!E
zojRGIRe8d5pk*hF!Bnx&5LE5GR*p`U(0eJZZ>R9l>w_u9+>213L)VKB?!r@8suO}}
zpfG5e%%B9^j2r}C|0XPuEG)l`S#bP9Su7K&!nmn6=vU`h9f0iGa+$h#B|k;8{C5lQ
zi8^qHk|3U*EDn>PU;4_dqB>SipC$Ibk8sEuS6QSdcfzV8>lqK>7>xJD5@iNC*)k$n
zwMwc?W=dYX<~jeI%!xB9YJfiqd}3k0plaL)u3CRfBTi^LX&GzOE-}w@AvEZin7_LS
z8bTh)(-`Rt3=Uob+{8}$oOrDGd>(?T@s>3a)9*rps;r5e^C0B)qN&2z;7fe)7S#px
z%)JDMOPYtW>1G_{q3dK{3vgHwjlQL3M6ZyXj>wWY?_w}y@+8e&)geF%7l&w|q>+-+
zb6^@JK|pa3RA6{Cton=k7o7U3&InE{Ua-Xongy*$PMlg+=J-j7E4-~9?>yc<d+o)u
zF(jd7WF;AK7q;p#rZ^t!2b!N#K-5G{X(pGg+#Nfk-=6cWBpwP&WQlVEB`TaP&M7j_
zS|=%)mgg4lN@l_7#th&hJ4rn9fP{+>8%@UOrRV!p*t~o?U0GUx_tw2jAPdwrSGP=2
zb8VTQNQ$*$8Cx_;VYGo^g4t-m^={($U<b=XTWxA|t0jsCnLxlQP)=J2R%nUAi$nl$
z&dhw;6a$SU;q6r95A?CbtTDiCm^ANi7e=Fpu#9u|f83!+dl_abcbh)Pm~(Kf&&CzR
z0T8Z9BFsLCVRZ;hnQrck#$(!&rfT{sv-#p@fa}{4jj|```mD&S(vLGdT#SOkBo-mt
zz6bwMU*M>REYqx5)(S<nRLGZC#v<fIdo1SSz_p59@mKRgqEYZ_%YebRS%5#5w(yt0
z9X@{zO5dRRJ^t2L+Oa=mB81Hvm8L7|9vuC6kl!*o55uskvsuoiW`3*F%ApNwZQB$U
z*=aJ?wxlhR>0)V#L2HgF;xD9V!&>J#d^@z`9N5Jz1Is8%5K(@5i&zd)sAk()57M6^
zhk6s$h#v`3<eEZLY1UU*awpgM{g`)fQTFLD-n%>KhNc61=k(F{A$|W%Nk4_~?Qm8e
z$H$ibZa3MJJY#W@Lzv>g*HDh?jJb8IA3{)mJyYxq;8N}gstfd4ygH^1$ZuvVx1$kU
z=y<Mp6V)G$;#@^HtZ{6I!x8smXiJG4z`{!=o~z!%r!j7{nZiB?-K8WF6ecAr^#sGv
z;naijDfrG@(goMLrq2cgDtPQKDN<FtI45>G|C{13L<-OanU5g8s1JcBNyv`CEREo6
zUcx+AO~!d=1w%U1f8VfSx^R0NchzJ+i856zd{5b_3(&zNz<r>d)rDH&MjpEwIdG6#
zIrlAk9`ePx_%tmK-%^jVb`TX}l@yTP-+9D9?ybiTZlYJ(!v3u!$1wD#AoOxv28OsN
z$uB{FUAk`zo>mtY3o_}R8VICks@mW}ivL)R_EymiqW4j(|M%}cIcj@wa}?vtiMk6+
z@F<jMLXQK{J_OYmt*5+_#O$1;l)T)=^zw>~w6fBs32D6KQ#XZfBjJ>AH2gIa&n8#%
zouP<Aq0VYP;6CxHn3|AP1%G^){NW!3t3qm2F>%R4wY)g9Sgt+}tE0xFs)?xT@dqVH
z)Z2r(*;;KjkOU3T0TFZ?=bYI+*FqXP*Whx^ai##KA#j~44seT}vr~|g8WBVwG!PUQ
zxkf$j%B8@12#Sj50X2Ze*`+kBWRx{#WHid~Ujb%Z8n05t*GEXCo)t+`*1NKlN`4su
z<$dj#DW?D923oec1_pfPx3+CdYM>9EbH|l6EKPjljl`w0vUmWFLKICw%4p2LZxp*8
zezoYUhc2=4em+c!VDk_{Jhm_i<p+#tMgsCtl92zyjYt9{2?Cc0h9#m89_>v_u1-p-
zPR0$j79>FsfB?=xg#|JBu85g1I5c>OJ7=&VK>drIyKk(3n84_ELL9HQ0UWrwx7S5c
zUw#Rahu5xk#Xp6oOkaH2)by}_t(ym2+qXXiOxuOZHRIa^q(B=xXGuomiy(w+v||DY
zA@EwKcU4pj58pGWvS4Qqm(h>8wAx55TN9KBl-6Xe!1EUXQ&-mB`1q4rOO_w^B$%ts
z&erC_@+LCfs*dcxSE^`0LtJb9{81b*8Is<8JkZP3ZMsTd#Wh-5*hO=XEiiU>y9T|2
zP%chWt5RVaZgSM*XDCQYq4JJR=ucR?C)h>kN>?zjh?y{QYeylEr67WO<-xVkLqw}e
zz>t+ov`Z4y|6C-Q3@m^}Vxi`2l_-azo!cQYpwlEl<ZFs44pm%S0BS=t2j|*6;y!GS
zM{{Z&35L;0J3}b=J~^w9UM4PBLx9~~353~{6MCZjeBh}m!)w5e7oK2>^H*%6gC865
z(D^_pTZ!Ncfm8;Arp2#DLzBQUjXnbQ1AVNoVdSs@z^1$g#|Q^tBt%eZCuwhxW-|y;
zLEsMPz>TnYE>M6Y90;)D#Uj8gRA=@l3z*0NN3J6vH#0~0)fk(E8UUm>>L&0fRgvdx
zf$*tdke!sXK3b5Md!ZsSO!xecyA3ZI)Tv23S)ySE2Hq!xdG2ag*oMlNH}OSRJZQOa
z*LCoaHqPBwd+4C+YKIt;lk#X&bMr-yPR;)PE+DzMuh-AKYh6GEhznEla^@(T(Fj=0
zuR@#=(TFrc8zdM+A%o6t63Btv8i7E7wj%4_PUu9Trj$6!jinkT*TRj|dLOH4v|C&V
z$QIYT11w^#!EjFL?6Wh0=>dEsqB8^119gf(aiE-*uSrV86M0YT9}3?Y#lv}e1)s+U
zw-3leca5bKMUR=nTAgv{{WQh8>{V&pr6K|Y)3pc=1-mGHHbyig9a^Ly)sEp8qijUn
z__*ur71!GS)Ogb;qkhvE$@GUm<FS69hI82m`CR5`p2NT!I!TaSvpZ!2pm2($aGj24
zwlONtu*!_lnu24N<x}Gjp_BW8hBUB>nx#;VQ3>pbbD2srHgS@Tlf@&@5`ZIoU<ITR
zMD!)#WM_gf0VWg+!~sSoSDq2>lj*={{k220>-6-=3Javx%7p=teE0p`bKFhj#|>&~
zSKz$G-Ci*z%A*jBSSK$^@ALM;9Sp$*=f^pI!^Y0k-_MF}%=YK3_Vzvan{Zq9wwEQZ
zq=JIZ{@IPu**`2fbXS<`)xGMs+7%jj8|or)UR_|brFF-PzI{p*5gHN_8X<b>TTy&>
zS_7Ibz}Q=o>GI`#=r1wtojOr})i5aGXgHDx#d{D!uHt^h!AqK=^)`IQ9(3FW;D~<9
z7|7tW4>ZYupcB%NYrhGSP=6kBdAH8>3l)%tfQVy?F-f>d7kNRMA{CEFHPR8W^x5h{
zDM^ty1=>;c^S(=XZ$r&KY*9jgZND*4EGVDFWA4^(#X;%#rZE4@bf1&+we=5cYTE=1
z25Q9nqXRY33+sAgJ7brW1QSOT4uwJicq$d@zv=bdkus;h@ionZ2NL9^u3J<e*}OAW
zd_Mw(G);FFu6Xx8H~fllW6XxYJs2r&)&|m^VM4!9{sgmg^O@a2Cf|iG4nO+>7Ip<r
z>}}fYEb0or>>qj&)OQm|!t25%g5BOPc(=ubXN0#ISFNz>u#Ft$KR)ZQwSgvYzjdF*
z3B-b0z|@=gJVB6N|8JiGtS_h!8vsnw$GUZ-vC;VLH1;@~7QwXJ8yfq_m*tyzG;haK
zBrDdOEqfBlCNiju37II;5dh{pVYiTyQjq~Ca!&+A7O0CGy%@;Y$=R`)nr^}C10*(q
zQ7WfX1*XqXtyt0j-FGr~s%ei{PRhl*k!X3fhH5XNG(k*afc0%8`igyvh=9g<DDukS
z5Q+49p<0M&w9d7CZ!cFk!2@<XIA6usUu)tryh)Bu=Z*%4T$~a2rdQPb+On6Rei=Bf
zRs?VYE*LMhr{z@-4pvJ|QVlYdr;@6zsh}7b?UZhUM9<=wIOyC$G*gUHhyx5=4wRx1
zjnj}JrvQa|5eHsRR7=#bMia!@jR*WL2TSw!2q;lkd1ep@t8B<d5Fil3O+vMh78GX|
z3+VFLeB2(pa8#~@O8Mx*Sjh8st>i`eJ0byD2q7@m37t~r24g~0dE<sF+A5I+5)fL_
zTrE^x0Jz_aYyOB`a->Zaq#A8+i2XJ*wYNeacv!RDE)NH;J$%Iq_Sa}aP8myIHkL?V
zRO<>39jf6xyS4J|ctPM++a2p5X1k_uW9hCZAB|d{DaEJi{7b*xy$n{X-(ol=oESg8
zJNlUa1$!KuVo!;t_)iiaRan|Vm;fBe71jJE`V9b(kYuDH2u>*#BRSgMT~kwks<w81
zK5Ia^g90q*4F~~}Wi&OW%g|BM5pPXG-g(obOQoefk4*We6WHVI3Z7D$xwWfnYi8;E
zX9%>j@u3s)Z46vVi|LgR*m>~28IYxEI4B2&5rSGz@{L9bA`lpQ1+;7=y0eTlba2#*
zc4{#t;y+G&%%8nsohZyB)gw$)_mtq&V5I*fo+Lg2$|H!FF-Ss&Bq2gZDS{9lW`x||
zUW!7HB#}xO$pL{_(6;n2$M($}+1Hq}Np+8E?*NnyTl=Xb_hW2wUQ5aMi8IO+sbpB7
z5e!QNw>fIH)e2A_VEWvUdGv^wEhZ$slA}jIhkIYjGimmBpt0_0SwE)*78C<*DfR@L
zJWqMDHsQ;Z=MK>lD;3#RWoz77h&RiF1ep-Gb|T&5L(;L50uuNW2@AB?;_M>$&>G;X
z*j78N#?}yj7Z~$2C$bYi9%CWM>RPtrI-{=T6E~Q{uG3;|BhvA+14fcn8;$3g91nkZ
zBhHHmesb1lo{OT!3;P`!<^GueIk9&LEL*TTO&!VaXAvyQnEUyW>a^7hj;>LNxA>g?
zN$~+Az~IUb;*95wPwy7dBD;MtUhLF7d~t0n1{*bjJ8`g8r!gs<g)>HIfo6=55RjIt
z2<oIdOGpp8rY+C{lm#I20vZ|J8xak7&gL4iWliVqfV}4etWcnO6o5-Ul#uN{ngVXi
zmeW$Y+0qWUv?i6?s>$!e2wQ#g`P|l~sDJ>#t!R>VAg-Q@Da50l6^~YxLR51D$*@2o
zntwEwmV6)<;RHz#^H~*KYz7uMCd{xJH<g$;2F&z|B_&^TClMun=;RcL{7jR4q-|;D
zRW%2bgjT(V7+@(?CB&=h;?>AWpSrF=LQlZGFCN_6?2NubkkV>dQ+j%%Ji6_JHIRmc
zWmvLEV59ba`c<AebNcKGhIo6!iXkePVE~U*sa%nIOm+Sv4V<BMLMQ1NQZ$tDHYE5H
zYzu><H*-SB-Vn@)ZwYOrM_vor6Y^RYh$LqY8oa>t`LPceI7QFJA+FG)lvGCZQ!tz^
zksU%D0<Q_u)&2Z)E+b<n>D)9!V?}#=V@2*Hmj)7P8_gJPv$mNT8*M|%2B0F*l~>&v
zU&EESM<tJ|YJt?u??lAa4Yu`HqgrWFucu%G73-TZeC=A*O|!~l<;oW<(kt1eSEMKI
zf8wcI6<Abq{H$qtgnnjSopAZr&NTf=ul%}i!J=lhx;g6Yn^dey6-!3mz=+U>M-8DQ
z23Al)OhPG@KrQbRk1GEDPHgCmONi?{D3k4aZ>oN3)vR3ali>0h#o6Fbz7wg3gwkQT
zZKlOIjufNfMs#y0y|IXYS~{b@i*&v4BY08Gi+Q^lhj{M6BbAKx>IBzqs8qNmQoVHB
zW*p*f*FJa)lat>B*GxACX<J*}D_i4&DEIT4;Oa($ZVm;CV*zONDA0_d8oyQ7B~f4a
zE;XGXKc`B8tPnygdc1P-dM4`K(4%+hbxNga7wT{a#x5h;rHgJ8w*ja9dGz$T5zmO4
z$6onWfG8yR^_8*ai&uYXbPt?NKBv>~h%iLxP0=?)>cY_HAjB|zRre3Vno^@vFaaW6
z$6V}%Jtn^7Q=84|X5lRx!^H3UbX2M_VcroC=du44$qLvl3YQAioGMYR&pQZFtW!aK
zEv0qkoV7pd4BzLU>vj<&!vM1E$)ZqC<OP4`qY=e$<dj*E%=>@>+c?X|+{Et!IM|7h
z&6;x~5Qvf<zlh^hpoh&>S@{?Q4=(637eE8D$HLD7=%qTplG4xMyg>OA4TLJ$2}oV(
z@(0+G1SK2^Om%+GoWOzNPa^dv1Tc7C<3CONLnItvkhHonj2XMaA+=6NKF(F3cc+YF
z6Cpfa`EHuVrcSe`G^%`OfTR?A-V&dh5TRO52)V1`PQ|U_3JJMd$Xy)w^dIuL+JEZ3
zJGg>kIVs=|%IacIoF<l_`a-sa46puaxUhf6zJPDP&3Lmz_3f>`+MpY6J^%aG4_bbI
zKA7JRVqX07#7lvH+6x-xFKihZDs1@k*H>3JojSg8=*v?lI^ijgZ^JUXyg19i_LzQ<
zu_K{8^K|C!`cGJKLr1qJjl9tl)IJu&N*~>V*5LY(XNIo-_21B)OSe*Mo*=g??m2&e
z#*vJU;1LXD=8|=0zuioh*}HdaY&9OUWPN>>k>NLGsCVp8V0;AZ#aaaw<o3u{7R2jT
z96MH3?K1RSxdNDE+BD#_S;$XNC&a6yJoXeD=O~X)EC%=$UfP4cDS<CEpAPsgsJhR8
zocJij9y9OGz<qqhHeJcBz;=gJfZuJLD?_Gi1xS4ByD{~WFxX2=!?j`BvJ!3j)WcP;
zpV7CJCEjnz)PtJ`)#K`Pb~+<r-&{}A<20RU8RwWtOGzS)Kb!rSN7Jp)LCl$YhAdr$
z>!RQC`jr5vA`9Nx!~5N}k{{`RBGRDK;{sA%EZFl-!6Hd;35Tdk;Bm}+?!PXIkj;r3
z^diygvEelV8}TRIAbW9>g>Uv$bnZP>uUZ$32N${I&tXgSzEj<R&J?hE(v1bw-gPg#
z@-I-5wk<v4$Cm<<I2nY}niCsllbD{Aw+pm@4Mb@CFf=erz-_pn(ckASI-N;qTDGhe
zSVb_k3U)6-5IJX^5JHM1f^P<f329)+CTpl?qfOP-UB3S8aW+mxZl937EFy~!+3)%K
zGuZy#Kd%Qvc1!PfaY1~TxpTI&8$^a@00Vq9Zf@d%eXr3$IzZTN^KK&~Ppatcwa@h~
zPbjLdAkx^+-Fp6`#K(#5=o64!%{k)HmXB~>gScI+<i702AA6l*1^6z-k(!0?-RWsD
zPI-zCPPoR$A5Kp_T*2K1ph(ojy!@*WQAqgf%S_YXvhepkskpK`>P>$9ct}9@(#BGM
zE|cK>|ES%7kcUuq#->O5Imkn#D~`XbKC2e{2^upn@qKzzB4BB;Bq=c0%y$R1wOOpw
zWww95a*h2<_s9O@xOj2$Z~6Yleo=qpe)->yOBWsg#O`0(59SZ%-$VBj`4?eJ?4K&x
zd0Acc=q%-#;hFF4O<jDiTBP*29i#doDDVeW?5zb#QO)Hujb7gQo*4@oFT7t<CqE}w
z{TY}s8YGU8L}Wyy6QMO2CJISg_d|{+E6$6R^XIy>5D_L;u>BO#A+@jjXEw_#j^&yC
z!#fY*)UbiUq?%YF?dI#b-m=}rdsG1`FlgVteR4T15^cW3g&h;r#0~*`HRLn=U)gvu
zx8l{Dia8+31J0IaiW{m1>g%n@(pr?<-IOM4Xppsf;$FV@D!+Xxn)brsiZeGOmoB|a
zsZ`HAD=Y07bX}}ctiBueJDdfQxD7H{Lt0aEcWaRaS?lWus>BVYnX`M)x0UyNt2M4O
zE1(zdrAJj4U4xzJZL{$Aux;v&jtUZz6+q@0;fjWl<V_uQe8QrxJ>83>31^OrDD}NP
z#gXx{ri^q45z;R(a0<}~oDLi~4QX(6*!cGCy7I@5%XHx4Vc*KaC&p{Pv6McXH!ob!
z{t_H%WChdTyyqKg-o5UF8#^CQ?kZ-TxgEsU-uUyN2e&||$6lVm#@RvpSN~cB=5$~l
zUQvsEr?4qs`o6E9*Tf^wExvaaeAVF#;_`r%YQhHM%I9d1@+mm7u~ymnX#v@{|F}K#
z!HYiB_T)JK)yCT2Hw~CFLcREhEWROG+ErdY33YeUYO`OH{C=otXzHu-*7tpn(Tf*J
z{Mb|2IHpPWVqXCqW=HxFMs!LTJIf3y@;m_~1YAj^T-`aTJ8+^|5<1~5fvgDNxP&t!
zwHOTZ04!qA*eRno^T2)Uq1_yw5BI6;=EprXPyw6)8wC!SixspygbakZP9NyJDd8|U
zX7nT?39f-O%qYrD>L7)v5eH@WA>8-LiMk4NUtcfq?GZVrmE^=rdxvpSIbq)OzpTo<
z*Ro&BQ=aEe=jif8B<xV2$Y8j>Yspul@#rhb$;U7pJC+O_@(hR{x^2qiBLk07IC)NZ
z-+>&E|MP>@qel*!{8!aCZP?-O(@4GdN%_h*B$Htg_kNVEK6kuOC<x7z71wn<GSxij
zI=k$`Un8km$4_O~KBbMi*r%Pp!I?gD`2BY{tOaSSBpa+CC$0!I%#}uKb2dNmh$%U>
zw#)mbILrL@mSL@LZv^YKkH>-kWdz>S^z@x6T9X!&QQxhS^Ca#cp4u~Q)4YdAlgGot
zM?58lr@n$R_u0c%bu3&GpsXAIx$f1GpFfg<nBAv;2ObczAt!KvNR&Gi=@Wv6zCfWU
zP#hQqQANl`0(&v!!cfYUISv75;lvIYbG1p?RqYYd7INcr>RvDF`^Dpg`{AoWM;=6{
zG%UA0ddQxFppz2<sp)W+E1V`Eoo>1bJM0I>d$#b-(U4}!C;`MLLoy60Szq&Eux_Vm
zDe%sQY>-AYcnyxpZx`0OR9!wV)YZA_YCrbwQeCZC*giQ)VH8-?StI!9a^b~^$FrVF
zWpj(DGyD)-ue$xwM?i^V^H~eDAR5sGX`^jp(%D(vhtUrx9v3IcVjKeDrr5<UG6qHq
z#X?Lt8w%nic+QM&yc|2~_|!4Vl5+%gVct@hwMuU9Isp%ybcBQiD%ofw?WP@dQZ+w+
zd12su5*@OW!GX}L6$y>WI<qnab;$*)sApN)Z3j}>%FA8PJWISQUosn)SYvzd6Mgph
z{OYqipokV%X8W_Enfm<L(u1^iU8L&lJ}^NGp#g4QG2xn6xfvM{eYFH57jmVGRjY@3
z;2rvbp44svBUem}Gsfn?!(w-lOCqVJ!BgY;0;E4zVI6}QsgWF;94lfHjYjxrpOg}f
z;xN6Zf+agE@e>zMtJR(jgM&#)Yz3RbL}u1tmN?()ZsH5INvUr)GrVXc4>(2RF}$*5
z;z$*q*jRYq&^W;z%Ne~>Xzv#1DXijdd*Sj~=q0U}CCiiv3HDj;*$@tbQy?5+dlY1M
zZ7p%4u5Ru@b?q)HA9Qx0{B2{*jq?VBg)+|~XxO=HgavGUy3a>u2C8EE41KZck=jpy
znSlgupbd}!(_KP;Ld17UrK?D}LYUyGAxal{^Y3_yi%_a$qqhG_+mdd@B=CA5ex~?{
z5joME;os(_p7z%P8p6ff#fy;hh`e*_o}q9Yr6_{^5kLf5lfI~jnR$!Wh)8lS(NK_s
zmp-FBZA5rDfRy(!8~25+e>;MaUu*C8p$o$kGcBI2Zlw{eL3tj{L*xsqmJId>LOKZu
zX$b81kjx6d$d?OY#G@uNrn|<{pe#$lz&wj&U0`v=TcrAU#)U|;FWHX^lu}K&3xM&<
z7px}TB>8Moq?05WLU?7MY-@O)QyLr`;`0_$U#xu%<LDQVx0TMbWqTTDq?<y0`rh@)
zzvI6CV^lM9;G3}^7d^!!#sz1-FHxV3l#+hpYklgPyl)&#;<3}|7si<qO-Tu}Ix$@n
zW@?(5<_;)`p!J$wxh_D&eZKMXE*a%#6H)d?Nf{9Np25vb7m1Po{rjpvFMU;0LsteR
z-|8db`Ah%(kHij!wo%s(_O6*={Y*-ci*X?-iK1{uG16-Uz-Dah+!z(weOetkET-I<
z-wbDaejH$(EQjof>kKI^4e5;QAai6fa*h4DXpBD>gd#g2tmXycWl@2rP-M&CBHhIi
zBma!RYRtr86c(ui?#=e*_&xH^ulk=|5v!9#4*2u;?SA*&-TU~FyBy*KJ2giEg|ou$
zGz(`Sbm;X`(y2coh2Dy+fILLd0<(863?AV7BFuER?ZI_S%x?=(kU}pN51`5eqYt7M
z$YMqh)SPTjv$s8)n^&wL)N0ow;$h1ACu~7C>XtoxNIvG194a_Bbfi(FdwiAE*?D|B
zr=k)xNA(a)HX))Tj4y+UPXgT;&SqgFH0mDfq1YN82+?4MHojRfE&txtyRN%;@42qt
zn_jE1(hr0bPWlHT@i3HxEVkx(Knt|c@Q0;F{PX5P(LTW$kxZN~i>Ym-vxJAvzDXTb
z1u>GRv%@b$_a!pFhf9@;-xSLDxTwmZEY@1@;H?Ep#qn~vmy*@R$~kU1ejI2+QwZn2
zCtO8eZ?8FuF&e=U7x|k6bilu}Ea#6xwe8ERi+^+hE_a)VIeYfV;qj>$8|8lPCWc+(
z)8j7Nf9q!}nIZ|oMG)k4%(3yi0FUKwELvDzv~Xias!veJ$|Ie2Ik%nczdF<-?hmW~
z58kQG<^E&oMZ9<wNB`#U^1vVbtbbPiY4xM+_*?%t97VdLj}ss916u}SwjUElwEtKp
z69vNHr%~z^uhcXz0dD<0zXuOW<%k!vcPQ8M?k=qT*fbs}U+$n2`!0h0R^hWsrR!Bi
z{EgOhbD%CiotJkcEOe)<{Fz|GLbjdzrP;EyB(eVmMyV`g3kE*%cva2s<>M`Ru2!4_
zi5UEIW(*#<(QSc-EfG`RE_m$Lf<CYBP4fI0lZOXBr|I*&kXM?F{Mt@=cmmy-wc9Vx
zL+pVTWK?YG-^q$rVHvA<t2kb&Xx2`@3YItO*z>d>?etlo;>het9|TCkGs4ru#h|DN
z3S;)Lk8>u8qO6{-R>ucoh^{Bc$E#CsA{hB!1?c#JbR<N4-1JWg2od+)`?N~!!QwyW
zvx1E@XU=y4dzDdb_FLBm@i9fe^z<;pvHZaXGh;B4Nm&X2MJ*q)QGWWUJ};=@8x>7*
zCX2uW<=%+?1-)<H>TtFn@9YF9ouFeWMq%(&CI!!*s5hU@UWYEviT`eHIh06W)x0Xz
zNGDaOn}7Vxl(258>N+z10oU&+NBeg}cXAajS=yddxwhf&9N1kS)GjP97l*ZlwHK?~
z($_$2G(JgsA}Q*3N8JNEpXwN&{@>p*8BY?Q6iYH5Cp{FiNw!#}63e4qUDqbIZI!U8
znkBW_MxeM$x2*cYb^Z4$Dhe14R)VSdHZ;uOE-@StixT=1-k$w%0JS0c!2vs|)0cg9
zHJrgf_3G+xzB!57Ar@)~I+?wDQe}t681U}NSp0sRJ_7Lex?7d~l8s@lIIZ(2^VX8h
z7(-;ElTnGrEbE%2PxYCwO(XPMF|0xxM~*V{SH+74G~wWgcEIbc5sfWnvr<nX-{MUx
z%9?f($FR=$%>I+X?3cUN(qbKK<AJHqUXO4fvTa_FrEiT6X03OOS~|M@+9)>GTuwhV
zIEb)|{urTZAU99TJ!tmJ$lhW!gsA>vAK@S>bw<C50VU&ejCvZDGE2fpdDUE>pVO+<
z+Mtr|mv>Cs0*RaGJJD2W0j|ZxfSz$G*sW^ir{+Y5Q^;3Z<0vDNLC@zj3bFoAp|oY#
zfKYB*>3qhOCPJ6>Rw`@m4alv6=yLOoeuk7J!>}$Qp;zKKJ&+O_c&4NHOR^3PcJdtz
zF&n>c?2;9ikwM{G*{z@Ve?AF4(VVr&R=%EAYj(4p_3)q~jz{nFCd)Y6fxpf>d6H~8
zU8SnwVkGsB&Ew8=U+psaQL7%BTI4x*E6zZi!)Lm|zjbPNBHwHBvPN0m`phE5Sy<h!
zMC^P&+1p8->-<h>>X&zl;kN02mzT73fK^b$E0p47sVJi~77wDmasMqu#s2`0&K|Ae
zYU>n7mC7V{w9}7KE*(^sq7=&5(7iz|Gpd7BPbEscc+-_YR*J3PcJ7We{Eofb9ot=B
zAEeDMY`cJ%o;NRFda~7mum2Ksgiay=+ru*GkoA#Yq_6Gceb1GHD!L{!Po9~|fi<4D
zdN9dqj#4DKKv4eE)(1zawq*WqMGCk1_?uTJJ|E3~nV5?=A;?s5ZQi{U7@Gghg^`5W
zuj8E28R@RojUWHkXt7dMEy4)%ze9z#Ci>-*UyY##T?|PY^^aL(o0E1qZeLkFXr{0y
uF7I*JJUbl8am}ljuE|X<_cPuY<1B9+-s6;mww>gfg#9kR-?dQsjNAacUw|9{

literal 15112
zcmV+jJNLwQPew8T0RR9106Pc(3jhEB0EPqr06Mh*0RR9100000000000000000000
z0000SC<ayll_Uy*=^TN-BnyNR00A}vBm;yL1Rw>0LI)rlHEt8`Fl-!v7(d>46s4He
zqmX`4P7h@Nrv!4u2v-}W|AM5^q_Ml?nNCDE#fz23Y#tA+KHnhI6owXtm_g0NXl5r1
zY0Ldx;9b7+e@#HK2LN1hgeIqmN%!ITZT`7Lsu!^u8{9Vw)J2;t(x@D+gJr7A@Nc*d
zT(--86tX)RKTjlqL?Dq6CigG^2sBE-T5GD!s{7kr_iGx-u0tTnie_>mj@(VoQ&;(X
z;R|0#MkO-l8yOd9hDfJ17*RxDH9!I*B#L%MbcxcmLPE6S-37N``6!m;mIRDR+jUo*
z(j;6`h&!y3cTX{VBpf@%;8di<cV4GdgG)+v?yL>~F!~Q}$POQv)&KeTIZMx?3w+=2
zB20`4Tyb_Q@kXxhf<c!#N#|-}yjT;o(Di$5_WiAPRwZT2VAxM=SdQ4Qr1G0i{6>3D
zC#jT5=>RPtXCKK{+R9*CBlSqU1b6=ifY9Y2bQ1Z;oW557P5Qf)LAF1FVF-33*y?fV
za!szuReB1I4WV(84iM(woLM`wSn|q|wJvtf>GikUUb#hcsVP2xKKz;g`7<zpG&3wR
zpfrHO0J01y96{O#NKVK(R~G|9+I<poP;ihg#8f#%T@2MeS69^cuDrTC>OU@0uPq_m
z8jQ==t!I~Qso#$zs<X)edWN_VOpDK3{^9cf_Dh=wIrq#t)F##-qM^u=Cn6v{zxNQ&
zjE<@{r;1MLJ_`hZ2yW`D&5B#UWJt$aQ3N9Z00#gV1^^Hi$m|9nak2t>vgiD(H69kY
zZ0yb$-`z8y{03z6x^rT$tIAo&SUM7>*bp(h0T2+)7TF(4IBuf=0fn#t3lwez*r4zj
z<R*s#Tu^i`zyn490(?*;7Z8AA#GrP?P(TEV#|1Gco)!#1@v>kDinj$LP<(y@1tnf@
zw}XT)Kc*r@F{c#EQoMM!)YR+@F_itXp@1Vwatk=2q@sWfB{K@nD4A7oLCL&=D@t}3
z+)&b9a7W4Ef(J^DAMkY3?T`G2#s6iAbYselFDusk*|HVLg$wB*S+WGv&<K$uM<^Yg
zFio0->$F4!T9+szMkqbUMdh%=VtwpmaX#~z?ykD3$L_#^p8o59pI-m$a5&J1kWgPz
zQvIY@tUo2Cc*RO2C{rd$wQ9+Xj8ZgcphhAMg7`2a4BjaC0@Y>0k>PUX8lgaekt$Rg
z<-GG!>2*rmV<=>x?5AH)yDlhXq3mykY?Q-3l0!r!ml-p8oH@(q%TIwwkxWF1QY2oy
zVkuIT7;30e(@ayg8Bi!kIkO5CC}-Y*N-M2Y<)DMAwQE=7h$Cuu5ejuE=W?MQ<y<|`
z;EuZ*_Z$jiP_F2Jh7B9d1{!EA;ZB{#S!t#5`t+G#z4a#U5jZf3i_2tV#!NA8+*Gf7
z-82_mFx@3HW(WwFwSU8b*}n9ZIr|5m0`o)$54<5@zF4ue<m490lw}buttIm0S!%V_
zmg(1Txj}<gaB*3Qj$5=?WxMTGYu9d#%Pw2H$52=&-t)qG@r4IA2o`LkOqrxgl-Q(9
znHKx()4Bujgf<B*UQ4i<A3s}H3J11XY_aV&+GvME4%s<96n05ya9}rIzV@h6Wv>Mm
z*k`Gw_S<BW13L+YgA!gT9Fp)sp<Tik2mbfgJBRlV3Ob4S1v(_^U*M=jSp|+sR9E1*
z#K8wn2ovGtvY@~jiE9g-mAJmZIf-W#&P#l~a6#gSg^MysJ8(&k9G9)K$`xy@an)XX
zUE66WT$jP4!VMYxE$C&~aG=u}XWVqjCAaA5-Ch?I?#M`f;4Uv-?pbfW`?lKVf!%g{
zw0}@|Eb3U`iRiEbPem&VJQICccrN<8@In&BftP{=c_l-J*Y10uYagNTR>qx$cajb&
z@LncK2R>M0iI3Y4g-<dSANb6eu`inkg|9OGUic<6ivr(e#uR?Y-2A{#0RsFIB*<?{
zN`Lg#*I#w&{Ik&}%yvQ%0&3w{5EiJV><PjKwc7c27lZ?9t2n@uBE@;@eBil5uo6oG
zux$aC1+T-dQ!xBJEM@Os%K@RRD&kRcR9MtToE*$2uOB&FMi;oI6!t)<uyXU1(f%#~
zh6=RKQ>s7_UqMAELJ*-^DWBmdty)G`q#vtvX!;9a$#^Xvt`J}`RfR>yi5cpG(88K&
zgsf`?U^RxqkP<fC%O6w`4<Vx%O=<c{kY-msYgff6LmtwO_T|Bd&I)myBJ6gKjP#Wi
z=z_O)TB56aQ3-sk6$?-c0uipUmKZ2P&DbPF1TuWwZqflpBm+ujavDqdf^wGyYZpc@
zUz+Mnm%IoR{+=Evp(M#r1yXTwYcMt28qucE7FgHoSpOXhs<%HtdJxSPI5dV@ia~vT
z>BU)Vk9NCp`vN?2CzfFG5zqo8F>7y}w8s8Mx?sq6;%%-P>b-Q~klQB<cIS^Z-r$Qb
zHqe($tGnLfyBPoWqTsdyP@!tNhFT>E;y^JG3wokkj;aJ1Z?ZCV2~M1mW2hp&+Nx$(
z%IZ31r$CK(6(xq?<@msT{;6g&9`_ra^og}6PoJL64iyeLS^pRECTf)QdJ)gv7VPA~
z_L`n`)jmTEKyTwuL*}%rA^%+b&Ck6zMNmw`mprxW!k_-rsBlG1f|P_mKI(n6dv|Z@
z=DFp(53R|#R@HsS0a~l0w{tt1sjiaCqIImsn-GNcu#<5I$Z=_%&?ZuwT9Onvr`gOI
zz}g7&;f?F)5<#K9lwcE=WiTFZ1aJV&9h*8iRv9y?t@TrbA9@y5y&Ua41e}CNYt{9y
z?2_K(G`$<=7h^Zs>9d%}Z>9Npc)D=W?oL7`1K0K0SMnZlyB`Wi;J#him+rN5W3;FV
z;Hb1?tFm+@Q>cZfWJ(vj5q7qw-Edn@`(-t}{BMq~{@3E09TmnBlYqO_?>$%SiGc`T
z|G(cfk}o@hkn(c9bT(mP#`odESR5G=UMEtFix`h|D(#X<4MT7+E^*wVC}&o#@6cay
zlb>f{OiRtJ*j2AyoUrb&Ad0;d>#;kM>u08{&G;-CIv%(rpnfV~$N|8*3z;+DJo7Fx
zON5UhK{G0p3@Ul^lxvcHsKG+w%Fe~stGFK_Grow)k&j?vaIJtYSFvw(I4U*7qzp;q
z&<mth8z)qdtF=fS3zd?x3T|nT40c<jg_+pjxUq+)kE+Sz>bJ@mE&ecT3{HFe(S#eB
z!der=O)pLvp9yh3Yck_(Dy5nP{Ph$KcbP@O7(fW!tQv+niu#6`IlTNYSH{RRxY-4S
z>jWC6y#|KJJEH!fzLo`E6=^)W8@h9SeQG_9qe&^A?Uqcz#i!ZvMvPkoKD`3@5-}}Y
z!6so+tpMZ-Vm!N%tJqD^8fx_+!#6s>jj~Co)N!prL6b!^TK7<C<hsEn{N+c9QNp23
z81_688q&jrnvc<tksnWFGxFgCsLVgy$pcUE7{fo)#^ZX@8+KETXge*Y<M|_llpCST
zTA-X!giui8xJ#q#iiRUBY_keDmAY58D{jqPyDb3cQl#6HOFkM5Df&Cv{<FkmHIB)3
zo&*o!Q?P2oZhCE}rPt#HXYs^4nz!c;J8P)BNwkD!ff^>#g#t54xbc39q!kwPfvbOc
z)=rl8E_aXkjpiT=@$WzTk8yqF7lpaQM%f=@8p^)cv^7sW`Qu0AbRUI%+>Dq6`+Ro{
z{w~DfSfVDC7)B0`ke)=Is+p&QdL$~_otrdKs4NETd#G+CkPxD}r>RV9DI91O5T3Y1
z+#yBUE|WIN7fu=`5JP&e;sPWT86qrzEz!>{Tw2fK(j<z<yHUiU@6rHx#PO)NOb-gW
z2}^oQD8`Uv??X{AUf!-=toZ)nE0tWrs!nyih0I|?+hp;%0KDa%ZU$m71VTc+hXZ-+
zdz4~46>w-C70HxA9L}on!iU7OMVr|~h;kxi9pkVJ>60{26m|kN9el0k#Fo&hqWKm-
zPWNER06a^O#%ZPSl)h>j>k!JM3$oUEr2%rl{~S{yTsBPqOMmv{Em#&$a63x%SLlt+
z9}V8?=xMBo0!$_2nv9VPxZHSGAnQ4*XdaVHaMBx9Flo4;){xW2L&$fI82Gs|O!b(u
z@3|0PPTOP?-2Pe%;auxEhU)2N-kR6gUDQLZDb5te$tlXp?vFE_?$q=i178~c@t{L_
zz_Iu%CKL5HomQ_JZ^as{H#5G4+=_$TcIDbK4tsv1vG<*`Lr&vXhs4OfOM&vnI&N=Z
zp^%)0l2gWwb72D2ip^<dN^{!wQI(EsO@Q1$oC7RRI@cD}X=7<^NLu~cD6b4l$y|Wl
zhj`^`W!46O^?`tLaMlnZBbt@{YP1CDty!Qq-jGz*k*|kyAa5y_(Ca&}EF4>Eyu?>Q
zd;X|UTh@a#7?P9;V(Q6aBXVfdYI`H28DwuC?0q{tq|uf%(|1~~#!SpQ_PA~dc71pM
zyMa1xU7YOLO)n!&G!2f0GDMqNvkMAop8P`b(Ex~6IL=CI5bv!)4zizfzMX9$zc)p~
zSfFb@LG^sQ>|89Wm-dx+<6IZox&3`2|Iq^vy@vSy2N}t{he^U52w%9~ibTPXBbp6;
zLV$9l$~4lYRYM48=TWm@#vP*{v(-cV=EkS|OX;668j|cj^1Tbu&^9;n=IPHZrq9l|
zN%C}c8FvB`%}gmOFII%;L|Q@{H_PImxx{wV!(TSMLk<<Lxr@4sY+9Kx<x&BV4lIIg
z1H~((2h=jVf$a-eX=4HL*ZejPe!-*+40uBeqnm&t@kbY&xI*k3d+lC=E>Abt%>^<d
zBi``VhGU2Bf=fL9Jj7y>vT%&hnuZj{-c6$@)GQG1BlaXT^kwMV@#=#dWkGKl=A`hb
z`yiM{&`@XT9UpW?j~L&2JW}+?oA6FH$qJT+RESatTwV=<(7O*m0KgFnqbfYg^BBvC
zjF}3a>5j;uNWqf5SPo$O{T7{ukLlKWhH6w#@vUP7;6#zV5Aj7<azWN;J;ewmUJ<2&
zAU>F?mMFijMH;9@AOC;-|NfH%>QIq;zBQ$6OvC2Q5S_9IA@wGi2?^MAXiPH4W0XS1
zIe=fq@@g^UNJVfgvRpd2H2;sC_kJu(JRAZVxG&tQG2Hr=BA<$DUS$J`k7yk`G&E%@
zphO<blj~*WQ@kye9|oT=6>z??IZyc<*8%@XrmU3%T#Dj%7V1N~HpENxm@72Y*DGHT
ztyN>i$<y-y`{*TdymLz|MkGPV`9|`LfO{|@K~FG2@U)FvH(HFUL5)I)&I!24qsCS2
zE1ulQo7Eno=oA`7BZo?EJ>RC1a0Z|vL}8H%R?usPV887|-M#5ThAe30&`1~zijEtE
zrpAvpDXf6Q{j5o8HG?=TR2Fm{PmC%VQ^B!;Tb}xWl1Fcyod!>WhfRoVC*V7(Ev`iZ
zd~+cQ=}IYYCxQZwhg6svXR(|Jc6@Jm<PW=@G$6FxRBr)C2Yecx6#X30d;vq5Nm{SZ
z{s##o9Uco$JZ4YW&o1&COSf*U+`7K9#LRd%QRI`5%>VCJhChb`(vF<{<}usCErT%n
z*Z+3u+>ywsEwH!ml9PtXXHEi4{k=QnLNz*Xs{>u0eVn(<Wz9}(QNDQ_KX34JPqL<o
zPz$|~o=NCPzaq6=?3C^Eu-`cgH%J`M7Gxu`q&~B-`sgV>Ki>S;Jc{o`sczK4wa1rC
zue}j2C(ptdO&5o;#`@a78z}M}Q$P6Vtta@y_c7qpHCFi<`3Z>@IEL=mqg3~Kotb{e
ziS@3n1uaLCpGM(4cspiOW5!ceJD!S78CmV1u>C3zwTT?yYl{Qil#x=z(fxJ}dIh7`
zk`tey8p@~M%I10ONjE6D$ZTQho1p74m#J}@SY0^wLKMKPfw!EUi>QY?Ik^5Zn0Q2}
zQ=)X-2T9`uk&Y9=c%wVck~@rZK}21u{M%CkgalsH;?lq#Ho;3EPA)kUMN(4FV!WyI
z<{^0Jdaj^`gr(;-3h<Pu*uiU2e~UmH+5*ej<&@E&6^|@bITf-h7#LAzRrK17b29Uk
zY`rapGbWMO=0a_4;2#1ZcMe*O|D>&xwf&8m(M0QwI;X}+eR%yKVG_u$HIvou%Gd<O
zC)TU$(?e5h$$UfF(c@g!9&IIavMF$_4c3>df+D;y&qilY_P!JweZscsrOo5R55$Ht
z#in%E*hEh+Z#W6(v0^S>7z%TV#W#Qk<B^9SKlsp3E<f_Hs)k?|!?dqgsRM}~0-pnQ
zUp#jaOW>_6?gGO?>`o3^;#h=^dSI#R@LtA)^a5Xci-rHx3gc#<L&>+=n&AMh`+tiP
z<6$<C#(`@*&epbW3x=tNAhXL}GvTCc@phs`#5hLD6w-&Ny?l>>SgfbXR_?1Tp?ZS?
zO9636ueBgWl65~=zzowT2uz^IFI(S^QlCcQuRE`X*_G@h(~sG-w}B9C^BsF>52BP-
z7V`od@T(_>L~|X?>p>+?1we3th7t+(nVJ$rm+8I^hck$hfTfTJdXLKktO&zNcn6KT
zCX#9#A<74b#+y35ryDwi1}749JgqE=K>Q6b8O+grU{eWNO@3c#he+|Yim*z+dU2Y~
zHzc<)u9`Y8F^N5Y@j6=<DNGns2CV6ReKpiN0G>*^mmNR(f(6$^zh?R)+H>l-jdNyF
zPI!=}a+AkCKkMuk^=_?-Q4*^62en1Lmf#(E@<COi0?K?izYsu)m!`};RHz&O8DTa3
zzTTcGkC=et+9%%Jtgi#YlusW{<<+u}_HG+$56}AT+uqzG-Pdd6&XdeT3&AUQ!ubb#
z+4X(gBu;LK7ex0pMHYQC3ta|!MX~h~@b2`CqsLt~W$vosSGE_vS##I(%UsliPQ93%
zyPG>>Y){TUS>X-Sn~I)OZ`eU}k9b~0wq_P8BFxQA?I`Z-jW?$fOhG_0wl!2jW7jw|
zfbSGy-gyeokYECGsuB<MozVwX2H?{uy6M&MGyEam-SIkO@xPBvKJH*&s679avnAzn
z`{Kv5x9)KI>*w@Ykte2COV(-9j+*n}b?`V%yU}xEfTOOs2FTgkScG^wos#EBk4GV+
z-<_wUCz<-=H)f<}VtuVl>y6TnQwFznG26QRlBUhWx@Pi;HuZlaA)&Jk*({5n_QBDN
zLbjO%S&ae80ax1yP?#ziwe_Ad?>7mlB=Sf3n2-`hPG0Mv%cr@lNZIb@GW=Xq@8mew
zs4B&qM2k1Z4U@L0l$ySdsHwrHh*#MvPl_dak_F&ITxc!o#c{GV9r>`ma2<`pIKF)a
zX1`(LcU)MA8jQC^K8QoPST-m1k%C}4F2?auXqRZDkhC03e`YEzw*jD%)Mp=J5UQTH
zB^T%jgReGqY~{GbG|Y-ux9m;Xny_DZXTv=h!V{}P+vYl_wXQcDkW}sn^^_(XnLOJK
z=ya0;-$HLEzO#T%Hv~o01L#;?Y`hOGu6cU>mF{KrMAe7c{DvXFd9){@O4GfLlMeX#
zFz`tlX1_~9b{Y6+x1xOe`KQ;~LD|fMo2k61Ro$t|YCO`Z?<@3q#`LHZyad0~(El3^
zw4{ui>Pe#J7c}1hVAsvynPaESNYbryoDWk#QC#<6*+3^xEcc<BCfSah%1WN>Ct7@O
zf!CSpVj40;(bxep4+t3te@LJj{#=1rlT9#nBpA5X5G_NlWJ2yV#<u0-enK$oO@AhN
zdieVra`gDh(n@V0!DakB)$Q*S_<nUlDPZ0qV<?sN%zoA03&lLBj0Pi(dVYsooSscN
zhD@Y72j5Cx+~P4((u83exCa`t5LDMzW)8!Le~&3d7B-(_5QIl)#3ufIgoA2Z{r2is
zA0P)FA99UX@(2YLA6Uc^Hb6%P3F4(mbeSZ5M)zhhb(FX{%jTd}$8s2+E3qNI7wV(n
z>GolT;#ayvnITTLi4ZH5YbcYMk}qEc&OFXb=8Qw?;&(zHS9*+8jdj;G&2#>5RJ%yb
z5T)9(=}8uoaLQuX?Ivgl;U7n3pffNE@D||4t))+tj~Sl~A5b;kswPJHJrFn*DRQ>G
zkQd)KRY=hL4SMSw)f|SL2of>UP&3}7vovy@oTdPaP(}l<Xo1W-B&Q>mBWQII+*mwG
z3;t7HKoZ^Vp$n2gO0^zq(*TKVi9k(~;TQjY|7Yr4O3tQwWF}Gh0%s(9rJyaz0}thu
zxc@;&)Ps-K<F(z!(EQQC_mG4(NC_H#R}B+tybG73<^j{=8VHwBt2JZG8}-Cf+;P@d
zk}YT}>pA8DA4(oe7Zh0po5P$<!@1Jy!kMT_=mA`KCyCk%VCf>djV5Es(eXMIHf9DA
zacTYf^7=H$glqf11Dmt8$IIQMnEN3ybV&(4AU(nLF2Z$9xYfVF^3#L1bX5w4u|e*?
zl1ODmLx|L9IqDZ#*MND6#dJys8cD*d)Z$O{m$O%sK5k91yxDl~v(`2&ZMF7~J7jc{
zKBmZK(FMVx0EcSkIK~A4ke`IYY#ozEA+XxC(q)Y+yJS<_eNosV8Y!~5?N`)1O4l=A
z?pJ;kn8BC>!X!b~+PDXQ<>n;rA)7SwL)-Id;5p%53xX=-EhsmK>o@I+JB4$Yap!td
ztiem=(AOV)jK`9+=;?e0eTM2+_)E02y*&{?kUq*`WVxzZf}^i55+CO~55q94E5XUB
z25hSvb9>IG77uL_iAyYMM#+xYGzv-#l%Z^nPa(byYwk$&YUIVLb&Q*WN{bOb7*<{<
zmNN<0WS#^_e-b&*q^L6M3XU{wlT=O@=Qw<!7Qe6H?82bYK60{l(an@=*=yZbUW4@I
z=Oyu78oe65p7}g}JNNgx@jxM;o&OwC7Vzv-xhs_0u<$kn<<nPwQHQxa9#nJu``!MS
zE0E7#$79xlnGUP|5Y?&0Vl{S?N;~$VW;=PAv0{Xr!D5vFI-Y-+_ha0QW|K1t-LpAM
zIJkLrvq~6D7fk_*c6|3vH~`mc-Btr#)cWN=N#sJ~!cOdR{!7`5k$jq~@_xk6jUn(P
z3E3y2(jdf|rjX{Y^|7P2(3cVJQ+w8LEOmA7?pi+;aeztC-{X#4f*ec$?(^-6E@>={
zJdPV=*O|2U<jT5$$-*wa+bG-TQlgqV&+-Vh6hQacV#m~Sm%M%cBR0y&o&A{Pn7w`z
zMo!(WG(!;ROxI(2gnfm8;gaZ<+;&fk5Z1LdyFV()soB{5oKDF8{r}zUg@5V9solW+
zwui4K>LoD2FOWnN`jsWxhoBmx?R{6LEiKE*t0?a(Y-}njXsGWdOi0&8%s(XujWbq<
zS@;{K^5?e70*Q!5iGfxb;9l;gj5hJcsy|Qt_wJvOCE_+yMpmxEtgkJu)tisQ*0jmA
zRx+)1@=eL@>R@@P)mjQ9K?n3f1cOFD@3JRY$il!J5=nDJG{7_j>{<;kOKKkT(vZd(
z1QGBCg0fP6+=+Y|32X>KY1uV^8bHI<rEHkX7|>Nz)TJZ7!nYE5w#k&;89*eRMH-&>
z0AFIP71t1;M5I^h%-H|5f%Yx@$Vg=1Cp&lMEMX6w5BBc8WI+4UOWFZlLpA_MBbucl
z%`lbM85Mu?>&0K+<W<b|N|=)(lp=(rLPZX$j5*ljU`zzcQB?nQQ*r=Fk|fmf18U`4
zxAqt0w&vut<`Rxg6N)5BKmg~V!Hu|XcN95A@MubrWZq%CfZ8`Zf1OzY9L3poLxNbZ
z0yqfrU<FUpUws7<S66M~!(YNv&M&{}?!Gy^Daa%DcI~<en1+SQo{1|EL}f*B&2pH=
zH$ez{v~6+-Aqch2&Nnq3IB?BT7X#b7@r)bdt=3d)F()X$p>-stBD%f-n7n-RrpJ%%
zD4)LBV_><pwA5M-m&@pE8+%Ic6vwiF2JxF*;VB518j`^=t_&9XPFu69!k?z5w`Av`
zMNEG`f7mMUa#exZln)CCr?0KD$UxBsQ@E>UShHzg0#B-3J^@%1IYrc92cWcwKm_g5
z0r$cV5nDF`3|hY0x*DO*$5QE7U;!);^EEao0gPsA_d?`Arzw)GwA9iVU0YiP8a$eZ
z^K}t%n`mA{b9x5_hGEc76487=#c#mV#0}d>;O<-?=9@;+PBz8^M^3q_0R|I~Cok~B
zR<PdB86xpoNi1d}tI0qrhr_bW&BnsQz%dJLB<uuws?Wh-MHgVRoC9N^4loiTh<hp4
znUu=~Jmips5BdlO+Q)+=0uex9MddWWtcWY#kCk(&F}^TgOc=4+Mzt~B3JU;`U)oy0
zpPOPrXOk57B!Ikx6pOHe!h#z)c1gC!e_E9PWP=861t;q)+{nnA<jsWSK0fKe)mK;h
zB%cl1FI?ph9kyl#d#4^g#9!`FiS(2{-MMt>#gGiki!bs(a#`hI)O^?SKnI8mSAG^(
znulS4AoxwlVi1cc26`aLAsRJU+s7pGp`ccPK!6@aqj&W30P;0)a*~^iHOg%VJ2Kl{
zMNP&laU&p)S?>+7hz$-$Oj+B1&cyn~$dHmPjwy__8DdqjdRD)NX{A)@9JPNbVt1O9
zklGD0sSMmcpikU0kyn#G;Y?Z{$a-7NlA=CuOMzrSNs7Q!t%PGfQ(5TGP>$haizSG)
zGh}vT4U3sP#GkvwFRP!K?7lJ{bzVww!^sba)V*NA-j7g3yl-sT`$1?}ltAMB+vNeE
z2%4e^n@#HSaCMGhott141yfe2MkXObo#%jsEU=39)2PFs1Yyc~qO+U_5Ax7-?Lp{{
zQ6l1y3P>Y}*c5QEGjUS6NTHIeVwgg0K6A5G7X?P!=MKYbv$Nw2Zb(O0HwHj_+jZMK
z&LTf;(9*u1kgn<vbEz{PgJ9SieNEv|IG6Boqy(HF<NICOa;EcoNqSdlG<ILO;Lul_
ziKRQARzH&uinF3iyV6U4Tz&YeqCBjB<L~iB7MO=N5x)>u<?$5sXDh$EN12i+7AK}C
z@A*!d-Cs}v)h1x{E%j{UIvI>sJNM57>Tj9|sxb?uPBFXzA(R;2uG9%7OS5(lG3WJB
z!UJGJzhfNa2><g<GALjGvQXm9g2aojLy0tZ&R=bSECfWDGsCIoCHklf#ynhg5Vzn5
zRrucQLOn%O1P%6~@|R^NiQR&h7etFS!|lUNtW3VVO2~ZfPbEOb*zTn0G~E`!zOm7k
z-7B^NgRwnSFQ&&@(&IY@GkY^v*Cmig4L*ax0C=)GF?#FL@`DY5=rPY(Zro6#FmuP^
z&eWy5Gx3KJC}df-w|f2S*Col96c1%Q7`s?Xsg_z}HEc^oRHAH(+r90~-nhvE`sC_I
zo)9Hnf>Zmuw*_kY65fxtxColM$koXm$!huD@EN?}8OcS-D>UCOZM<AXneiWfjc8Ns
zWS(gAf3oB%c{_lq-6D>b7dF1buN4i&Rf<Lc6aKz#9y~Lh__RPcDb%3H_tO*2e9sq?
zxumSL5Y?nc-ybcvq|{9n(M3}_WvVX*bDg4JLF064%!#lQF?Jis)4Rf2<(!xLU0y8M
zEM6a=L{lQ#6bP8W)M=*m>xaMpUKdPuE>`I&y{Z^U*SA{e-&0tOQc)tnI*$aN@eT+B
zEGR{(GeaFaWVb8K3dEu{U-tdI&JX|(m|N7pikZI+bSny{Fq<tHOpIDpl=Ttq+xFYg
zQ3Cf_;J8{JV;plqJ6UEyMeCL=t+*3cKtw7`xY<~$YJt%KVJ9i{M$Cz!YYWjuV{iyN
zIW`+8#UhqqA%heF<n0&)q5h#;qK6HZB%_-M_&rX*EBDFiTbrtIfk0U0K^~F>fe;KS
z%nDXsTU;w=w^!%m-pu&%KqEBj$Kze0G@LJ%rbheh09gnjFg5@KIG158h?+n8hz}Xf
z$PGyd-7#MXvP}TEKS)^qbWJ<D!W0)fzH&+Ccg6XGP4?LJO8C3UBe7LSE{%e{^%n6d
zrv7QB4u8^Yt2%tR4SQrq^Vx7i;8x0&>!|fekD-U^_uTzzaP;ANVrDBo^|QIB!AkYJ
zi*X&65hV*o-pjre9+J)o&pFP>?s~n;5O)npa&VwP+4j5RR{&6u;&AkUQ&JaEn9A&L
zYwJAK-oCJq44|A>00Yzlq#Wsry1NQ>Xp*c+dcUUPZRf3b>g(6ua#o(!2q%Sod0emJ
z9esT}itDdGM`-7f!2pzbIJkjTu^S+;bKrFsAj`7wkPS*QlIaI18KbqhWCR>L1A1v{
zgSlf^h=QY`(y8gRQg&N=TXwm4hcYQ7KO{-n(Vmc>0L7oiU9W#oA%cjTfE45?3L?bd
z2tw#*gc@&Wpb?}fq>~IaAdw3kN(bYjb#DKDj=36cd$0B`P&s7Nztx>zWpgW*)%~EI
zGv?vy19FS}fLi`3W;TzG0@N>aLqP~Sc2p%)k?KhGv14Dr(H9AM{(Sd1x;pOF4P(n-
zRV~n#7Pbph;*=v9?Sj^2{t><qxJ)RORUXV$Nc~bsAQ3XR6MV#b@rf-0B*-R=1#-76
zCO2UYM>X7)P<sTfJIcxXDHDqF3_I}q7J&i^`qn)9A!lx{hAy`rX*<Eya}b|AH^R_Z
z9K*cLrJ&W#kIcM@gu4e-Cb-mLvU<NpMjtJTJ}(Ow!-hp=1?E)Qupn8W*4AoSs=464
zMOXJo9IiSqJ~lgM02tiRL+cY2le2r3tkUaUMbuiof>@Pj)PnVzBmx8o>v|J7^usv@
zx}ggOC<sV%bp&lf_mlX=rdc<117!h-!hl6ga6MuH&l=aJa^K&(HzxdX4_2^&>=ghm
zKc%KtM)atXEZcsXOSeg80<IXCFIjG>Y=aSDz4uDV@+DCL0WeBKu|6cR(;<SSY#<ZS
zs?&(BF5rAXu2wGGnkdNi#597WNOFNxA#PiN1<WaO@RDjL<`6lbapzT9KGP!YyH?GE
zU;Io^zh_;xRNAui-6UbB-l8JF($l2LHg#m1zc^_#cPye=8*~5RjceNi>0206R$9|t
zSlFdcU-8!ckcFfh7jgI)<v)aXnBFeBfitYXM=5rW8g^~06??a4-rxwxtQzrtv4|ng
zgiXK$&x!YmpA!KLWAo7AB(5z^e8ItSb_oFqgB^X|RMCP2hiwvhAtWFOHA(UPk3YsU
zoR?zD3mjcdD_3?krL~l^KqBj5ImYAn%*}aN50V)Gs<nJYYi~Fouia<TXSFN?ajB>i
zwwE9DJa9Q}IZN5?G-QD4wM#|BrcH7)OHCog8=i3EmrCm|;U}(N3C-OY8&h}uoO4}@
zdP7HtV%;~+IeTSL|6ye0;-zNu(zLT5)0rkyCYAb;h)i5^Ye^y{0?SB~p{b`e^tvI{
zxZ%!onWHyLlhu2XrQ7qyOy|r-znJe<LgSp_T*8&_mF6L-epp>GS7RPWhH+ITu&s9i
z>7s=1IdWQGp5mYQNi$JP*SgC^K%)H6l}=@bH9VUi%yhUtRi1IhHUbhsw|ejvrl-G6
zXq)YdOI^M^xO`Yv936Z<Frl@wNIyn{vS@%tKN8DG52Jo{8$tTgXV>?FqWl&E8if#!
zqT3s$KP*Or53aTIcAL@Y+=F_8!I(Y<?Xjh=P^|z?`|9xb3!|D-E}eMhH){or<iE{n
zS$gsEuY;KW9l7Ui_D543DRyW2$Knp(_XY3>!Dn^-EX;{B2HygRY(4W~E5a7pI}!1v
zf_{N=*+WUH*CR$Xn?;I>qacQqzahafdmWQ;g&Av6wnyw`e>!>%ver~q&Rn+hS6meN
z__ThWq&N<c6?VkHI3@*l)?+EP@Zc#IlHxDLz*}79a|x-t0RgtNU+**@3=oL&ZZpL9
zAkjO6Z*IN~f(I8=77x&XywUJG1-(_5%|+~Ugw#{nodLWeG79b{r+<M{a-bShLmKl(
z#$rcmucX>f$YH_@UH=STE>>f}pdj^Nm@#n)6Ra*rC5M${4<=1Yr@U{nd0?3p&72mV
zQ*iEk10>~nD^^Dg6f4YnQX$!xbt-G4L_zA!3dyRhd;bh{YyT&aH%cO})l+iW7F|c?
ziPK~bdZb)vKmteSEX?e`u`l4e?}}dSF@5*RP<!0vt&jgP;qbCQrb}eQAZq51?XzNk
zcq6;?Pi#LpR=wn}FVB{BpE~}~*jJ}c^ukji&n%1k!i?8|tx?q=ZHh-@@#*5domT{I
zW5;&n9DHeQ+=z(`LE-pzbU$GiKRou~-+#wC-}xlJ?Jg@j<G!coX%@xVNGZudE|qF?
z`Q%oz-2VL&6RUY!5HK`kI34P1V}lcy66gG2H;*crKwX*I6SR24rdM8RY2_VjFI@sG
zAT1kndcH!YF>A6-xKubJRC2&fCK@WTIT3GxwnZaTxK78sl3K3IZfkG(j@#UzK5!qO
z@ys?$nnZiWO(5>o^_#^ro+_mJ<ogNp>LkdluTQonSsUuC@iR|0J%7f&tU-HyS+O15
zJZPRY7YYkGweaIQmYrl-tviG<n#C!yK<01RD3IW0=n>s4YscJu)tiIc-TPVqRH;?3
z?UVj-uUM8EeZtORvlDVkUn}4DTGe88LLEl7kaL8Gul+YQ=+~-!(5_TIpXtvJ*vPK*
zgS>@H#BV8R>fL{;)3iB(NT{*lUo6w?ZmqTvn=__tI+$(Hel@uE?0=yo>lrxeh6eyi
zLg;~%<-iVq4!1V%Y?T$Tk+Uyu==QA=2oDi8#y#uHY&NIDxn|9BV3l~(EFri+0a3so
zfDqCY39LEjBXQ6t5HYynVq05V`y$1{NuiQPWuKC_A*DnHg>MMNob<)Pzb;9jaM|GZ
zS#dI0ygS*|4YIzIfI)t1($!rAnfn<Z<pX}7$JrT39n>&5=$#*2r>W^|A}Q(@?g7~?
z?QLx^@(+mvu%jWvD-jWyuUe@xN}di9@56R-3?c^zWELn(dtpIFy^83!PVkeHH)m&V
zuE0JCph(%xJ^h=Ff<}tpX18|VsS5wxlZH!s(_WQjPl{to2fFH`O*u{Y|2ymjgi?fB
zUNY>+J`bgcvgz4Z&F9RjsFKFjj((Hfss$`9mW*rWnw3GoT3f(*nC9v)Rv0rp@M7ja
zx)T?t?*uOI8deT>y{NyVJ9*LfkL&V*VK8@~>>9eJ<zI#EnSaFwyshhK9rx3r{-KrO
z;q=8fT9w9-Yc8fA;|za{&HQAMO4;`QnXWKiWoXf&t_yFrb?DFQO@A5skH^VU)G0+N
zg=AuzNTd`OZ2qw<RFD-WDEq6%SF9AN48kZwx_IG*{|e!RWeGw{e|-01tW5}mgqgTe
z^wJMV!gYIV_nBg1!GJw4yr9=p2_$*C3y)6GQ;$mEsv)1@XX~Mh<xS6)HO&J_A##6x
zv1&=nNN49LaxbsR?e8woEm@*l9;yrzT<iDUQ|WA&60Se<aq7UpRoY~F_z_)w&ldh-
zi{ZYjNq@+102u^~cXo;>>al@2TeG-tU;koU^H_H=ZN9dzHZ@z<T~ug60P$BCIE7dQ
zP6s}Mg)BHaWOCOoTjTB94K{G`aAd#gyJIf?&QV1ezk1<<^;d}<BapD)z7c8R+PnF!
zk9Oal-cu{seJ#%1`q5u&iD{L>E_!-OG$}NCvFx`P%-Sys2}@fQc}_YLsd*JC3Y&Tt
zI$qGpdORu;G2y_;EFpwA`#BvX-Nupi?Z(E>3i59MdF}dJPe!PB<z_|S$F%=3w$@pc
z7$!UHjx;H;ZVcmVIzB6CFMUq^$GVuYnXem{zZtn%vud$AN;o5(6j=(xgqOg+QeFZO
zT3bf6T0b{t2*N0+5OG9swQL_A4D`rP!2tA=XcPf#GpNtuZiiz5fJGdd=yG-|_h0q^
z^t${>@CB3Cb>uxGIlvjPUSPjeLPbeH$U!K%w1KQ;NuR?vXQvQFN*t79&ageC4bq5i
z4bXNTB3zrEY-n%|4Gn^DUrO0&BX@Ada7!#7OA0R>ry47sD}AoQ_!K`~W~)$gq<yhU
zhvV(Z<z7lB(l6!az9J$-ujB%UQU{WGU&~5m$RXtn0cikU_aPtT|Nmg+$b*NR(IuVT
z4?Y^r@1ozh(zxLz^>k9owVwjY&L6K<$P<fowH-aToNYJy&aJud_Zpv)<EKj7@3E#`
z9I`Hagw38g^5$!pU{S$F^@F1zKc)sW&&JcOW!vr&m%3A%`ogcsN?d2RAFxJNqzF#)
z$;;_QvDbR69XeBUe?dl3XTM1=RR@0@$A$WCT?irFA#bB@NsS^R{~1*Lf;VYnPkdU8
zs^h>f33Ctra@rF_E!y=5LO{ra0>A;HP+*U-_XJ(~B!$XYRcw%y8KIUExDiJcH-$Kg
zV<hy$yG+0sX3Z&WSs6fFM|pNx$MX$Czmo0D&AD+K-lXR(neOVqVK0h+_Xh-0v&lT4
z%#x5rjCRrsJAnbeDbn*SWVt9ng7VWtaU4~#8Xo{_wmSzv=sd^+(Wvz`_@=*$k5@l7
zeGxMfI{1$E&%-lKm)qh;Oi$Ay8m!8)$lrUv`r_1Wf2hj1beYk3;3l|U`{{e{0c9ve
z`Q6ZsSj3W)hxJV0e!mDKKfgp$2|-b{1O$R1>XE5rVx1H!g-9{$jWdp5pPb(He&)FE
z-@b8`Tq9`n)TW}WSxPo;5ODtvpI97g6bgZ~pB0Q!riF!<8v_^OV6T_*bx6C}py|rB
zxs2Xp%iTa02yH;lnLsK}V<Z3YBP8<amU$%P4p;X+p1+U(C1R0546AA`jTWSHot2r}
z7V!4Xsit!;fN@#@9dO(FDSm3hHsnC;<;{~C&$+xH-VW^`bixGu)%!^i@fjW1gqoF`
zx3(HyEt}$?*eIPs!Lc0cIK<%$)owUc!)X~tf2^Lu$u3orJv3UNJEx9P)y|sDp-Ee|
z<m7NF*x<FC-(i+8G<u3ed}>bq*`=H`osj~kSRzB(kV{@iB9f;R>9;IFO4?ZlKdbik
ztAYrrs(x?vIzI$C^Ofj|bqZ2=(Da;`J>V1&thBuXs=vLRJkilHf1|a14;`$zI#6(R
zaZwPv91b__@+0Utx_cyw*-^U5$7T+iGKL&OndVm1Pl20*B;jBkkOWhmW>}N*z0t_m
z7}qN_KnpUi5RAX;83{u9>W3QpZ?q@plMIb?EhNs=9%WDfrS$#&I`)LWS7{(zwM&(S
zT0sVdo39;9CQzOsAsPWhpfv?09n5v5q%w%2=COi?eA4(ig<DgSlK~{XDfLL6*l|ZE
zK~c*Ge@Ki^))u>gX>^oDYy(P2St+8rLcQcfe<D<Xgph^6eis)vMcF-F4O4D)yX4k6
z2I4{>Nh1q_6v1(3MScH(<KYm3hel$bR~d1Oe-eQ4(G#Oi+cfn^PHKRnII{GrK-pH`
z0v4GV0f_~J*ek)l`Uo@w$hnd(sAXfC;P9=95ks#>M0^&!^}%5X_wu(Bek%O!P%|0#
z{7`2;M|8qbst<<bJ$aMal2gR>PCqfp)miH5xcjv6o^Ug>T%5;YAmi#RgL+$xqvY|f
z_xI@ND4PgFD_Y)&(rp>sOuv^RqW<^iS+QB+#_lD3MYMiLgtIgn|L<Q)dML3D*KOnA
z{ZoQZlqcdj9^sS-f{mhokkNok2}S28=*0fh=F|f!I+*_Au#H7wz&c$S)sxjLuCEvO
zX7x~II*ME4#d0ylU9N@vk3zkgkgL|D#Xf*db#KYiUYm08-w{|Xa$=mpjr-vK(r_&5
zmN=s2UtU9|O`SRtZT`aE*I(cJf-H59Po?qF^E6QCFYWdGa1KJB-HuZM^(h(bqi7UR
z2oZF{(%tcr5m_V>Ij^p`@u8@kKN_MTjh?C<LCr6Z-$+|j6?^PJ%?iaVbvAU!()H^}
zvzfm|-pqSo2WOxb>(|}9N!^xF7@ZKf+2112)4nXo=sms*Yib5<k!A>VOq0@+BoiL(
zT~DXN*%+*cjO{%i%50MYj}8~~@QPqc(Y4E0`Kwp2@t3d7ZZcTu=R+P=_?A+20IJ2S
zta$>^4c#pHKAa&&D}&NK@-s@Es#2HH-o=(E4nKaIdRnS7)c2MqUq~O)a(`HP8V$ck
ztFp7wn#W26o5CeKs*Hx?jruU7AX5-}+<p8w(1xXv1pRa*hM~bhR~pAK;ChI}$0YQ@
z|C&taUp%$F>*h-jHvukpnaVhK?&y)pnG6pde9q|A{N(H;@A=>Q`Ko6qlH^H}n$37+
z@+!b%l@Ha#_o<0*D9VqB6K}W<X-8ngxzYC}hGhMz6~E;9ENzT#@vD($n=t#Uv)P6(
zMcN<zerQFs5wZ6BdIu^Pd9S@Ci(NL7vFjBDA^q2KI%(j8pEs$W3G*oklM|zVL=+Hl
zKA38iaEfX-?`?eh=g!I4z<hi4((hB$pQ?DoXyl(Y&}X=#l|W-rp|s*?QsQpD@!<qV
zCL1pQ%H<xY(+)qu8I27>>yaxVbK_)#GGawSVpWwvE(J|b&LCnNf);2v5SG`!;VYjk
z+T^0)lr)N)972e^WnbiYX?-q=T5&3b4Rn@ZuP8i36@nHOHEkW<EpRf4iZ)6&VqvCq
z!ERAs0S`4YE3EJBj$oNEojK@@80X}o<icbXC@s~69p0qjHB+atPOmeYvy}|4>bUG|
zb7TvGssHB>gZtff5XofEza+pT5xJz)WDeoTZp#D-42z|F52Vj>rfpHXS|B^4=GTG(
z?m(vOVgr5IEva1I0DymwCBzTuPakW}MH~1+HPhI14S1k}>(PxT{NqOhY}fJLUVt(H
z)=b4H^qwlF;nOj8*VVio;&2}RTWK9s<Ih^2#Vz=>3H8gajv1HKkDES3%%A%DU6ony
zBxU8c$ciIZ<}`0wawk;p&JP;qH#Vx0RwS*gHLr-@02RaB?e@<(W;hsO`e)qJGdcUO
zJ1+irz5aD~F1np_QzfK?GLuQAPv`qSnA*8REu?dSmllG!fP%bjP4$$`!`GUck~oW~
zPGsgsv2a`VsNg}BQZuYM>o4kn22Z{9vX`>ix7NlQ&U}X%ZEgMbTMBsLcbTTVm)pND
zCQWeQ-IIyZLAM4VZw><sk~WeL1mlUGXv=%)BHFV6q=n?Sw~<`7iM6+o9D4`RT#ES%
z+sQ;3rs>M^MU`!|T}OIzKV7;oAeqW$XrDrqE!uVs5whN8Ma`=;S8=miqE?MfV#U${
zuLnJzk(yKa4O49zrUlwYPkN?1mbNRQy{*p_D$BLDBT7?s1F&h@ubH=(Hrk>zpVz9x
z1ev0IutClz@Xiq?xLkh2=CaY)V2oP6@INY>u~PK5&n6#Bsw@L&(IA!V24SsC5VbK6
z=rmbHtC~}sh57D%Q^Yop8AN5TZHh_-qBbSV$DS%l3DaaPt<}R0xq>~G<#q6P#F};9
zP(zKe!ni`wsH{xFkX=)yboscVAsD+t-HO`RU_zMlI%GS$(nYz0DP{!}sV+sBM#OZk
zN0?%4u#fMSCWw$JR0joEOAT=2CpxKu-mn$1%B?=z(pCP+6_|(1g(?a|y+xyFeYP-F
zU6qB<fPb5=&}3T5H2z_Ejc(~Dv9T_5g{U&xwFNeZw%MKXY&q<MtU_dLiZZ=vrCkqF
zWn)Sxzv^O0?1fA*AHzO+^LH$u`XoJZ;IAu|q@ZKbRXl~XG5?CVVD~mRle*8sywWOK
zrm(GwioyRnrF;_mP{6S1W?tEfP3e?hrtvu}0$JBiy3i2_>y&lB$FPHi5XH8XWN&#v
z_cbdwd{b#AEow;xH~NhY1>_^8Ro}ecBAa&a<iGP%68H4PS`vDw%@jnarX2d>E1guU
zf_}{%C?zNz7$C~8XAe_G@UcF#6Yl7yWjE9rAqZ<+7uH!2YKSVA%3TH2tWYLZ%^U>a
zXLVbBE$g8XUj@-DY&d3-!{(3^fdF+J5&j>QinVZmT)*+o%{u)r86={I1*Eoa{;^90
z(c#P^@h|`zgd+rjT%XG+EEpl8oXsoez$sjqbCY;#exScp6*85{-Sh%+$d_klE7DuK
q;skQ47Q!0DY)8KS<0G+>oUKxU)J{<)m5%Fj$F-l0-J9nE000306!mNX

diff --git a/dashboard/src/components/platform/AddNewPlatform.vue b/dashboard/src/components/platform/AddNewPlatform.vue
index da8487641..43096bea7 100644
--- a/dashboard/src/components/platform/AddNewPlatform.vue
+++ b/dashboard/src/components/platform/AddNewPlatform.vue
@@ -30,11 +30,58 @@
 
                 </v-select>
                 <div class="mt-3" v-if="selectedPlatformConfig">
-                  <v-btn color="info" variant="tonal" @click="openTutorial" class="mt-2">
-                    <v-icon start>mdi-book-open-variant</v-icon>
-                    {{ tm('dialog.viewTutorial') }}
-                  </v-btn>
-                  <div class="mt-2">
+                  <div v-if="isLarkPlatform">
+                    <div class="lark-creation-title mt-4 mb-1">
+                      {{ tm('registrationAction.mode.title') }}
+                    </div>
+                    <v-radio-group
+                      v-model="larkCreationMode"
+                      class="lark-creation-mode"
+                      hide-details
+                    >
+                      <v-radio value="scan" :label="tm('registrationAction.mode.scan')"></v-radio>
+                      <v-radio value="manual" :label="tm('registrationAction.mode.manual')"></v-radio>
+                    </v-radio-group>
+
+                    <div v-if="larkCreationMode === 'scan'" class="lark-registration-inline mt-3">
+                      <PlatformRegistrationAction
+                        :platform-config="selectedPlatformConfig"
+                        :active="larkCreationMode === 'scan'"
+                        @created="handlePlatformRegistrationCreated"
+                        @success="showSuccess"
+                        @error="showError"
+                      />
+                    </div>
+
+                    <div v-else-if="larkCreationMode === 'manual'" class="mt-2">
+                      <div class="platform-action-row">
+                        <v-btn color="info" variant="tonal" @click="openTutorial" class="mt-2">
+                          <v-icon start>mdi-book-open-variant</v-icon>
+                          {{ tm('dialog.viewTutorial') }}
+                        </v-btn>
+                      </div>
+                      <AstrBotConfig :iterable="selectedPlatformConfig" :metadata="metadata['platform_group']?.metadata"
+                        metadataKey="platform" />
+                    </div>
+                  </div>
+
+                  <div v-else-if="isWeixinOcPlatform" class="weixin-oc-registration-inline mt-4">
+                    <PlatformRegistrationAction
+                      :platform-config="selectedPlatformConfig"
+                      :active="isWeixinOcPlatform"
+                      @created="handlePlatformRegistrationCreated"
+                      @success="showSuccess"
+                      @error="showError"
+                    />
+                  </div>
+
+                  <div v-else class="mt-2">
+                    <div class="platform-action-row">
+                      <v-btn color="info" variant="tonal" @click="openTutorial" class="mt-2">
+                        <v-icon start>mdi-book-open-variant</v-icon>
+                        {{ tm('dialog.viewTutorial') }}
+                      </v-btn>
+                    </div>
                     <AstrBotConfig :iterable="selectedPlatformConfig" :metadata="metadata['platform_group']?.metadata"
                       metadataKey="platform" />
                   </div>
@@ -310,10 +357,11 @@ import { getPlatformIcon, getPlatformDescription, getTutorialLink } from '@/util
 import AstrBotConfig from '@/components/shared/AstrBotConfig.vue';
 import AstrBotCoreConfigWrapper from '@/components/config/AstrBotCoreConfigWrapper.vue';
 import ConfigPage from '@/views/ConfigPage.vue';
+import PlatformRegistrationAction from '@/components/platform/PlatformRegistrationAction.vue';
 
 export default {
   name: 'AddNewPlatform',
-  components: { AstrBotConfig, AstrBotCoreConfigWrapper, ConfigPage },
+  components: { AstrBotConfig, AstrBotCoreConfigWrapper, ConfigPage, PlatformRegistrationAction },
   emits: ['update:show', 'show-toast', 'refresh-config'],
   props: {
     show: {
@@ -341,6 +389,7 @@ export default {
     return {
       selectedPlatformType: null,
       selectedPlatformConfig: null,
+      larkCreationMode: '',
 
       aBConfigRadioVal: '0',
       selectedAbConfId: 'default',
@@ -410,6 +459,20 @@ export default {
         return false;
       }
 
+      if (this.isLarkPlatform && !this.larkCreationMode) {
+        return false;
+      }
+
+      if (this.isLarkPlatform && this.larkCreationMode === 'scan') {
+        if (!this.selectedPlatformConfig?.app_id || !this.selectedPlatformConfig?.app_secret) {
+          return false;
+        }
+      }
+
+      if (this.isWeixinOcPlatform && !this.selectedPlatformConfig?.weixin_oc_token) {
+        return false;
+      }
+
       // 如果是使用现有配置文件模式
       if (this.aBConfigRadioVal === '0') {
         return !!this.selectedAbConfId;
@@ -442,14 +505,22 @@ export default {
         { label: this.tm('createDialog.messageTypeOptions.group'), value: 'GroupMessage' },
         { label: this.tm('createDialog.messageTypeOptions.friend'), value: 'FriendMessage' },
       ];
+    },
+    isLarkPlatform() {
+      return this.selectedPlatformConfig?.type === 'lark';
+    },
+    isWeixinOcPlatform() {
+      return this.selectedPlatformConfig?.type === 'weixin_oc';
     }
   },
   watch: {
     selectedPlatformType(newType) {
       if (newType && this.platformTemplates[newType]) {
         this.selectedPlatformConfig = JSON.parse(JSON.stringify(this.platformTemplates[newType]));
+        this.larkCreationMode = '';
       } else {
         this.selectedPlatformConfig = null;
+        this.larkCreationMode = '';
       }
     },
     selectedAbConfId(newConfigId) {
@@ -534,6 +605,7 @@ export default {
     resetForm() {
       this.selectedPlatformType = null;
       this.selectedPlatformConfig = null;
+      this.larkCreationMode = '';
 
       this.aBConfigRadioVal = '0';
       this.selectedAbConfId = 'default';
@@ -838,6 +910,21 @@ export default {
       this.$emit('show-toast', { message: message, type: 'error' });
     },
 
+    handlePlatformRegistrationCreated(data) {
+      if (!this.selectedPlatformConfig || !data?.bot_name) {
+        return;
+      }
+      const currentId = String(this.selectedPlatformConfig.id || '').trim();
+      const safeBotName = String(data.bot_name || '').trim().replace(/[!:]/g, '_');
+      if (!currentId || !safeBotName) {
+        return;
+      }
+      const suffix = `-${safeBotName}`;
+      this.selectedPlatformConfig.id = currentId.endsWith(suffix)
+        ? currentId
+        : `${currentId}${suffix}`;
+    },
+
     isPlatformIdValid(id) {
       if (!id) {
         return false;
@@ -1086,4 +1173,28 @@ export default {
   overflow-y: auto;
   padding: 16px 16px 24px 16px;
 }
+
+.platform-action-row {
+  display: flex;
+  align-items: center;
+  flex-wrap: wrap;
+  gap: 8px;
+}
+
+.lark-creation-mode .v-label {
+  opacity: 0.9;
+}
+
+.lark-creation-title {
+  font-size: 14px;
+  font-weight: 600;
+  color: rgba(0, 0, 0, 0.78);
+}
+
+.lark-registration-inline {
+  display: flex;
+  align-items: flex-start;
+  justify-content: flex-start;
+  width: 320px;
+}
 </style>
diff --git a/dashboard/src/components/platform/PlatformRegistrationAction.vue b/dashboard/src/components/platform/PlatformRegistrationAction.vue
new file mode 100644
index 000000000..c0df0f74e
--- /dev/null
+++ b/dashboard/src/components/platform/PlatformRegistrationAction.vue
@@ -0,0 +1,384 @@
+<template>
+  <div v-if="action" class="platform-registration-panel">
+    <div class="registration-scan-title">
+      {{ tm(action.scanTitleKey) }}
+    </div>
+
+    <div class="registration-scan-content">
+      <div class="registration-qr-stage">
+        <div
+          class="registration-qr-shell"
+          :class="{ 'registration-qr-shell-created': flow.status === 'created' }"
+        >
+          <QrCodeViewer
+            v-if="qrValue"
+            :value="qrValue"
+            :alt="tm(action.titleKey)"
+            :size="150"
+            :margin="1"
+          />
+          <div v-else class="registration-qr-loading">
+            <v-progress-circular indeterminate color="primary"></v-progress-circular>
+          </div>
+        </div>
+
+        <div v-if="flow.status === 'created'" class="registration-created-overlay">
+          <div class="registration-created-mark">
+            <v-icon size="58" color="white">mdi-check</v-icon>
+          </div>
+        </div>
+      </div>
+
+      <div class="registration-action-status mt-2">
+        <v-icon size="small" class="me-1" :color="getStatusColor(flow.status)">
+          {{ getStatusIcon(flow.status) }}
+        </v-icon>
+        {{ getStatusText(flow.status) }}
+      </div>
+    </div>
+
+    <div v-if="flow.message" class="registration-action-message mt-2">
+      {{ flow.message }}
+    </div>
+  </div>
+</template>
+
+<script>
+import axios from 'axios';
+import { useModuleI18n } from '@/i18n/composables';
+import QrCodeViewer from '@/components/shared/QrCodeViewer.vue';
+
+const FEISHU_DOMAIN = 'https://open.feishu.cn';
+
+const REGISTRATION_ACTIONS = {
+  lark: {
+    endpoint: '/api/platform/registration/lark',
+    icon: 'mdi-qrcode',
+    titleKey: 'registrationAction.lark.title',
+    scanTitleKey: 'registrationAction.lark.scanTitle',
+    successKey: 'registrationAction.created',
+  },
+  weixin_oc: {
+    endpoint: '/api/platform/registration/weixin_oc',
+    icon: 'mdi-qrcode',
+    titleKey: 'registrationAction.weixinOc.title',
+    scanTitleKey: 'registrationAction.weixinOc.scanTitle',
+    successKey: 'registrationAction.weixinOc.created',
+    statusKeyPrefix: 'registrationAction.weixinOc.status',
+  },
+};
+
+export default {
+  name: 'PlatformRegistrationAction',
+  components: { QrCodeViewer },
+  emits: ['success', 'error', 'created'],
+  props: {
+    platformConfig: {
+      type: Object,
+      default: null,
+    },
+    active: {
+      type: Boolean,
+      default: true,
+    },
+  },
+  setup() {
+    const { tm } = useModuleI18n('features/platform');
+    return { tm };
+  },
+  data() {
+    return {
+      flow: {
+        status: 'idle',
+      },
+      loading: false,
+      pollTimer: null,
+    };
+  },
+  computed: {
+    action() {
+      return REGISTRATION_ACTIONS[this.platformConfig?.type] || null;
+    },
+    selectedDomain() {
+      return this.platformConfig?.domain || FEISHU_DOMAIN;
+    },
+    qrValue() {
+      return this.flow.verification_uri_complete
+        || this.flow.qrcode_img_content
+        || this.flow.qrcode
+        || '';
+    },
+  },
+  watch: {
+    active: {
+      immediate: true,
+      handler(active) {
+        if (active) {
+          this.ensureStarted();
+        } else {
+          this.stopPolling();
+        }
+      },
+    },
+    'platformConfig.type'() {
+      this.resetFlow();
+      this.ensureStarted();
+    },
+  },
+  beforeUnmount() {
+    this.stopPolling();
+  },
+  methods: {
+    resetFlow() {
+      this.stopPolling();
+      this.flow = { status: 'idle' };
+    },
+    ensureStarted() {
+      if (!this.active || !this.action || this.flow.status !== 'idle') {
+        return;
+      }
+      this.startAction();
+    },
+    buildPayload(action, extra = {}) {
+      return {
+        action,
+        platform_config: {
+          ...this.platformConfig,
+          domain: this.selectedDomain,
+        },
+        ...extra,
+      };
+    },
+    async startAction() {
+      if (!this.action || this.loading) {
+        return;
+      }
+      this.stopPolling();
+      this.loading = true;
+      this.flow = { status: 'starting' };
+      try {
+        const res = await axios.post(this.action.endpoint, this.buildPayload('start'));
+        if (res.data.status !== 'ok') {
+          throw new Error(res.data.message || this.tm('registrationAction.startFailed'));
+        }
+        this.flow = {
+          ...res.data.data,
+          status: res.data.data?.status || 'pending',
+        };
+        if (this.flow.registration_code && this.flow.status === 'pending') {
+          this.schedulePoll(this.flow.interval || 5);
+        }
+      } catch (err) {
+        this.flow = {
+          status: 'error',
+          message: err.response?.data?.message || err.message || this.tm('registrationAction.startFailed'),
+        };
+        this.$emit('error', this.flow.message);
+      } finally {
+        this.loading = false;
+      }
+    },
+    schedulePoll(intervalSeconds) {
+      this.stopPolling();
+      const seconds = Math.max(Number(intervalSeconds || 3), 1);
+      this.pollTimer = setTimeout(() => {
+        this.pollAction();
+      }, seconds * 1000);
+    },
+    stopPolling() {
+      if (this.pollTimer) {
+        clearTimeout(this.pollTimer);
+        this.pollTimer = null;
+      }
+    },
+    async pollAction() {
+      if (!this.action || !this.flow.registration_code) {
+        return;
+      }
+      try {
+        const res = await axios.post(this.action.endpoint, this.buildPayload('poll', {
+          registration_code: this.flow.registration_code,
+        }));
+        if (res.data.status !== 'ok') {
+          throw new Error(res.data.message || this.tm('registrationAction.pollFailed'));
+        }
+        const data = res.data.data || {};
+        this.flow = {
+          ...this.flow,
+          ...data,
+          status: data.status || 'error',
+        };
+        if (this.flow.status === 'created') {
+          this.applyRegistrationResult(data);
+          this.stopPolling();
+          this.$emit('created', data);
+          this.$emit('success', this.tm(this.action.successKey || 'registrationAction.created'));
+          return;
+        }
+        if (this.flow.status === 'pending' || this.flow.status === 'slow_down') {
+          const nextInterval = this.flow.status === 'slow_down'
+            ? Number(this.flow.interval || 5) + 5
+            : Number(this.flow.interval || 5);
+          this.flow.interval = nextInterval;
+          this.schedulePoll(nextInterval);
+          return;
+        }
+        this.stopPolling();
+      } catch (err) {
+        this.flow = {
+          ...this.flow,
+          status: 'error',
+          message: err.response?.data?.message || err.message || this.tm('registrationAction.pollFailed'),
+        };
+        this.$emit('error', this.flow.message);
+        this.stopPolling();
+      }
+    },
+    applyRegistrationResult(data) {
+      if (!this.platformConfig || !data) {
+        return;
+      }
+      if (data.app_id) {
+        this.platformConfig.app_id = data.app_id;
+      }
+      if (data.app_secret) {
+        this.platformConfig.app_secret = data.app_secret;
+      }
+      if (data.domain) {
+        this.platformConfig.domain = data.domain;
+      }
+      if (data.weixin_oc_token) {
+        this.platformConfig.weixin_oc_token = data.weixin_oc_token;
+      }
+      if (data.weixin_oc_account_id) {
+        this.platformConfig.weixin_oc_account_id = data.weixin_oc_account_id;
+      }
+      if (data.weixin_oc_base_url) {
+        this.platformConfig.weixin_oc_base_url = data.weixin_oc_base_url;
+      }
+    },
+    getStatusText(status) {
+      const normalizedStatus = status || 'idle';
+      if (this.action?.statusKeyPrefix) {
+        const platformStatusKey = `${this.action.statusKeyPrefix}.${normalizedStatus}`;
+        const platformStatusText = this.tm(platformStatusKey);
+        if (platformStatusText && platformStatusText !== platformStatusKey) {
+          return platformStatusText;
+        }
+      }
+      return this.tm(`registrationAction.status.${normalizedStatus}`);
+    },
+    getStatusColor(status) {
+      switch (status) {
+        case 'created': return 'success';
+        case 'error':
+        case 'denied':
+        case 'expired': return 'error';
+        case 'starting':
+        case 'pending':
+        case 'slow_down': return 'warning';
+        default: return 'grey';
+      }
+    },
+    getStatusIcon(status) {
+      switch (status) {
+        case 'created': return 'mdi-check-circle';
+        case 'error':
+        case 'denied':
+        case 'expired': return 'mdi-alert-circle';
+        case 'starting': return 'mdi-loading';
+        case 'pending':
+        case 'slow_down': return 'mdi-timer-sand';
+        default: return 'mdi-circle-outline';
+      }
+    },
+  },
+};
+</script>
+
+<style scoped>
+.platform-registration-panel {
+  width: 320px;
+  display: flex;
+  flex-direction: column;
+  align-items: flex-start;
+}
+
+.registration-scan-title {
+  width: 190px;
+  margin-bottom: 4px;
+  font-size: 14px;
+  font-weight: 600;
+  text-align: left;
+  color: rgba(0, 0, 0, 0.78);
+}
+
+.registration-scan-content {
+  margin-left: 8px;
+}
+
+.registration-qr-stage {
+  position: relative;
+  width: 190px;
+  min-height: 190px;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+}
+
+.registration-qr-shell {
+  width: 190px;
+  min-height: 190px;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  transition: filter 160ms ease, opacity 160ms ease;
+}
+
+.registration-qr-shell :deep(.qr-code-image) {
+  width: 190px;
+}
+
+.registration-qr-shell-created {
+  filter: blur(2px);
+  opacity: 0.32;
+}
+
+.registration-qr-loading {
+  width: 160px;
+  height: 160px;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  border: 1px solid rgba(0, 0, 0, 0.12);
+  border-radius: 8px;
+}
+
+.registration-created-overlay {
+  position: absolute;
+  inset: 0;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  pointer-events: none;
+}
+
+.registration-created-mark {
+  width: 86px;
+  height: 86px;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  border-radius: 50%;
+  background: rgb(var(--v-theme-success));
+}
+
+.registration-action-status,
+.registration-action-message {
+  width: 190px;
+  text-align: center;
+  font-size: 13px;
+  color: rgba(0, 0, 0, 0.72);
+  word-break: break-word;
+}
+</style>
diff --git a/dashboard/src/components/shared/QrCodeViewer.vue b/dashboard/src/components/shared/QrCodeViewer.vue
index 89c9a879a..911feec24 100644
--- a/dashboard/src/components/shared/QrCodeViewer.vue
+++ b/dashboard/src/components/shared/QrCodeViewer.vue
@@ -30,6 +30,10 @@ export default {
       type: Number,
       default: 260,
     },
+    margin: {
+      type: Number,
+      default: 2,
+    },
     emptyHint: {
       type: String,
       default: "暂无可用二维码",
@@ -56,7 +60,7 @@ export default {
 
       try {
         this.imageSrc = await QRCode.toDataURL(value, {
-          margin: 2,
+          margin: this.margin,
           width: this.size,
           errorCorrectionLevel: "M",
         });
diff --git a/dashboard/src/i18n/locales/en-US/features/config-metadata.json b/dashboard/src/i18n/locales/en-US/features/config-metadata.json
index 534358439..6363b71e3 100644
--- a/dashboard/src/i18n/locales/en-US/features/config-metadata.json
+++ b/dashboard/src/i18n/locales/en-US/features/config-metadata.json
@@ -465,10 +465,6 @@
         "description": "WeChat Customer Service Account Name",
         "hint": "Optional. Customer service account name (not ID). Get it at https://kf.weixin.qq.com/kf/frame#/accounts"
       },
-      "lark_bot_name": {
-        "description": "Lark Bot Name",
-        "hint": "Must be correct; otherwise @ mentions will not wake the bot and only prefix wake will work."
-      },
       "lark_connection_mode": {
         "description": "Subscription Mode",
         "labels": [
diff --git a/dashboard/src/i18n/locales/en-US/features/platform.json b/dashboard/src/i18n/locales/en-US/features/platform.json
index a62b2f680..d2c9650fb 100644
--- a/dashboard/src/i18n/locales/en-US/features/platform.json
+++ b/dashboard/src/i18n/locales/en-US/features/platform.json
@@ -130,6 +130,49 @@
     "waiting": "Waiting for QR",
     "close": "Close"
   },
+  "registrationAction": {
+    "lark": {
+      "title": "One-click QR Setup",
+      "show": "One-click QR Setup",
+      "scanTitle": "Scan with Feishu on your phone",
+      "feishu": "Feishu China",
+      "lark": "Lark Global"
+    },
+    "weixinOc": {
+      "title": "Personal WeChat QR Login",
+      "scanTitle": "Scan with WeChat on your phone",
+      "created": "Login Complete",
+      "status": {
+        "idle": "Not Started",
+        "starting": "Getting QR Code",
+        "pending": "Waiting for Scan",
+        "created": "Login Complete - remember to click the save button!",
+        "denied": "Canceled",
+        "expired": "Expired",
+        "error": "Login Failed"
+      }
+    },
+    "start": "Start Setup",
+    "created": "Setup Complete",
+    "startFailed": "Failed to start QR setup",
+    "pollFailed": "Failed to poll QR setup status",
+    "mode": {
+      "title": "Choose setup method",
+      "scan": "One-click QR setup",
+      "manual": "Manual setup (supports self-hosted Feishu)"
+    },
+    "scanTitle": "Scan with Feishu on your phone",
+    "status": {
+      "idle": "Not Started",
+      "starting": "Starting",
+      "pending": "Waiting for Scan",
+      "slow_down": "Polling Slowed",
+      "created": "Setup Complete - remember to click the save button!",
+      "denied": "Canceled",
+      "expired": "Expired",
+      "error": "Setup Failed"
+    }
+  },
   "errorDialog": {
     "title": "Error Details",
     "platformId": "Platform ID",
diff --git a/dashboard/src/i18n/locales/ru-RU/features/config-metadata.json b/dashboard/src/i18n/locales/ru-RU/features/config-metadata.json
index d196cb37a..028bff867 100644
--- a/dashboard/src/i18n/locales/ru-RU/features/config-metadata.json
+++ b/dashboard/src/i18n/locales/ru-RU/features/config-metadata.json
@@ -465,10 +465,6 @@
                 "description": "Имя аккаунта службы поддержки WeChat",
                 "hint": "Необязательно. См. https://kf.weixin.qq.com/kf/frame#/accounts"
             },
-            "lark_bot_name": {
-                "description": "Имя бота Lark",
-                "hint": "Должно быть точным для работы через @ упоминания."
-            },
             "lark_connection_mode": {
                 "description": "Режим подписки",
                 "labels": [
diff --git a/dashboard/src/i18n/locales/ru-RU/features/platform.json b/dashboard/src/i18n/locales/ru-RU/features/platform.json
index 42bcae42e..b1a6db673 100644
--- a/dashboard/src/i18n/locales/ru-RU/features/platform.json
+++ b/dashboard/src/i18n/locales/ru-RU/features/platform.json
@@ -130,6 +130,49 @@
     "waiting": "Ожидание QR",
     "close": "Закрыть"
   },
+  "registrationAction": {
+    "lark": {
+      "title": "Настройка по QR",
+      "show": "Настройка по QR",
+      "scanTitle": "Отсканируйте в мобильном Feishu",
+      "feishu": "Feishu China",
+      "lark": "Lark Global"
+    },
+    "weixinOc": {
+      "title": "QR вход в WeChat",
+      "scanTitle": "Отсканируйте в мобильном WeChat",
+      "created": "Вход выполнен",
+      "status": {
+        "idle": "Не начато",
+        "starting": "Получение QR",
+        "pending": "Ожидание сканирования",
+        "created": "Вход выполнен - не забудьте нажать кнопку сохранения!",
+        "denied": "Отменено",
+        "expired": "Истекло",
+        "error": "Ошибка входа"
+      }
+    },
+    "start": "Начать настройку",
+    "created": "Настройка завершена",
+    "startFailed": "Не удалось начать QR настройку",
+    "pollFailed": "Не удалось проверить статус QR настройки",
+    "mode": {
+      "title": "Выберите способ создания",
+      "scan": "Создать через QR",
+      "manual": "Создать вручную (поддерживает self-hosted Feishu)"
+    },
+    "scanTitle": "Отсканируйте в мобильном Feishu",
+    "status": {
+      "idle": "Не начато",
+      "starting": "Запуск",
+      "pending": "Ожидание сканирования",
+      "slow_down": "Опрос замедлен",
+      "created": "Настройка завершена - не забудьте нажать кнопку сохранения!",
+      "denied": "Отменено",
+      "expired": "Истекло",
+      "error": "Ошибка настройки"
+    }
+  },
   "errorDialog": {
         "title": "Детали ошибки",
         "platformId": "ID платформы",
diff --git a/dashboard/src/i18n/locales/zh-CN/features/config-metadata.json b/dashboard/src/i18n/locales/zh-CN/features/config-metadata.json
index c8d9d572a..70f4fa5c7 100644
--- a/dashboard/src/i18n/locales/zh-CN/features/config-metadata.json
+++ b/dashboard/src/i18n/locales/zh-CN/features/config-metadata.json
@@ -467,10 +467,6 @@
         "description": "微信客服账号名",
         "hint": "如果填写此项，即代表你将使用企业微信客服，而不是企业微信应用。可在 https://kf.weixin.qq.com/kf/frame#/accounts 获取。"
       },
-      "lark_bot_name": {
-        "description": "飞书机器人的名字",
-        "hint": "请务必填写正确，否则 @ 机器人将无法唤醒，只能通过前缀唤醒。"
-      },
       "lark_connection_mode": {
         "description": "订阅方式",
         "labels": [
diff --git a/dashboard/src/i18n/locales/zh-CN/features/platform.json b/dashboard/src/i18n/locales/zh-CN/features/platform.json
index 75dc5a2a6..e2bb348de 100644
--- a/dashboard/src/i18n/locales/zh-CN/features/platform.json
+++ b/dashboard/src/i18n/locales/zh-CN/features/platform.json
@@ -130,6 +130,49 @@
     "waiting": "等待二维码",
     "close": "关闭"
   },
+  "registrationAction": {
+    "lark": {
+      "title": "一键扫码创建",
+      "show": "一键扫码创建",
+      "scanTitle": "请使用手机飞书扫码",
+      "feishu": "飞书国内版",
+      "lark": "Lark 海外版"
+    },
+    "weixinOc": {
+      "title": "个人微信扫码登录",
+      "scanTitle": "请使用手机微信扫码",
+      "created": "登录成功",
+      "status": {
+        "idle": "未开始",
+        "starting": "正在获取二维码",
+        "pending": "等待扫码确认",
+        "created": "登录成功，记得点击下方保存按钮！",
+        "denied": "用户取消",
+        "expired": "已过期",
+        "error": "登录失败"
+      }
+    },
+    "start": "开始创建",
+    "created": "创建成功",
+    "startFailed": "发起扫码创建失败",
+    "pollFailed": "获取扫码创建状态失败",
+    "mode": {
+      "title": "选择创建方式",
+      "scan": "扫码一键创建",
+      "manual": "手动创建（支持企业自部署飞书平台）"
+    },
+    "scanTitle": "请使用手机飞书扫码",
+    "status": {
+      "idle": "未开始",
+      "starting": "正在发起",
+      "pending": "等待扫码确认",
+      "slow_down": "轮询降速",
+      "created": "创建成功，记得点击下方保存按钮！",
+      "denied": "用户取消",
+      "expired": "已过期",
+      "error": "创建失败"
+    }
+  },
   "errorDialog": {
     "title": "错误详情",
     "platformId": "平台 ID",
diff --git a/docs/en/platform/lark.md b/docs/en/platform/lark.md
index b6e4fe091..173d0d8ed 100644
--- a/docs/en/platform/lark.md
+++ b/docs/en/platform/lark.md
@@ -20,6 +20,31 @@ The Lark client version must be >= 7.20. Lower versions only display the title a
 
 ## Creating a Bot
 
+Lark supports two setup methods: one-click QR creation in AstrBot, or manually creating a custom enterprise app in the Lark Developer Console.
+
+### Option 1: One-click QR Creation
+
+AstrBot version requirement: >= 4.25.0.
+
+Open the AstrBot management panel, click `Bots` in the left sidebar, click `+ Create Bot`, and select `lark`.
+
+Under `Creation Method`, select `One-click QR Creation`, choose the China or international edition as needed, then scan the QR code with the Lark mobile app and confirm. After creation succeeds, AstrBot automatically fills in the app's `app_id`, `app_secret`, and domain configuration.
+
+> [!IMPORTANT]
+> After an app is created through QR scanning, group chats receive only messages that @ mention the bot or messages triggered by a wake prefix such as `/` by default. If you need the bot to receive all group messages, enable the additional permissions in the Lark Developer Console.
+>
+> Replace `<APP_ID>` in the URL below with your Lark app ID, then open it to jump to the permission enablement page:
+>
+> To find the App ID, go back to AstrBot's `Bots` page, find the Lark bot you just created, click `Edit`, and check the dialog that opens.
+>
+> ```text
+> https://open.feishu.cn/app/<APP_ID>/auth?q=contact:contact.base:readonly,im:message.p2p_msg:readonly,im:message.group_at_msg:readonly,im:message:send,im:message,im:message:send_as_bot,im:resource:upload,im:resource,cardkit:card:write,im:message.group_at_msg:readonly,im:message.group_msg&op_from=openapi&token_type=tenant
+> ```
+
+After QR creation succeeds, continue checking the event subscription, permissions, version release, and group installation steps below.
+
+### Option 2: Manual Creation
+
 Navigate to the [Developer Console](https://open.feishu.cn/app) and create a custom enterprise application.
 
 ![Create Custom Enterprise Application](https://files.astrbot.app/docs/source/images/lark/image.png)
@@ -38,6 +63,7 @@ Click on "Credentials & Basic Info" to obtain your app_id and app_secret.
 2. Click on `Bots` in the left sidebar
 3. In the right panel, click `+ Create Bot`
 4. Select `lark`
+5. If you want AstrBot to create the app for you, select `One-click QR Creation` and complete the scan. If you already created the app yourself, select `Manual Creation`
 
 Fill in the configuration fields as follows:
 
@@ -45,7 +71,6 @@ Fill in the configuration fields as follows:
 - Enable: Check this option
 - app_id: The app_id you obtained earlier
 - app_secret: The app_secret you obtained earlier
-- Bot name: Your Lark bot's name
 
 For the domain field, if you're using Lark China, keep the default value. If you're using Lark International, set it to `https://open.larksuite.com`. If you're using a self-hosted enterprise Lark instance, enter your Lark instance's domain.
 
@@ -92,6 +117,11 @@ Next, click on "Permission Management," click "Enable Permissions," and enter `i
 
 Enter `im:resource:upload,im:resource` again to enable image upload permissions.
 
+If you want to use the bot in group chats, additionally enable `im:message.group_at_msg:readonly` and `im:message.group_msg`.
+
+> [!TIP]
+> Apps created through one-click QR creation are suitable for @ mentions and wake-prefix triggers by default. To receive every group message, make sure `im:message.group_msg` is enabled. You can also use the permission URL above to quickly open the corresponding page.
+
 If you want to use streaming output, additionally enable `Create and update cards (cardkit:card:write)`.
 
 The final set of permissions should look like this:
diff --git a/docs/en/platform/weixin_oc.md b/docs/en/platform/weixin_oc.md
index 2068c022c..44a93b432 100644
--- a/docs/en/platform/weixin_oc.md
+++ b/docs/en/platform/weixin_oc.md
@@ -25,6 +25,8 @@ AstrBot supports connecting a personal WeChat account through the `Personal WeCh
 2. Click `Bots` in the left sidebar.
 3. Click `+ Create Bot` in the upper-right corner.
 4. Select `Personal WeChat`.
+5. The login QR code is shown directly. Scan it with WeChat on your phone and confirm the login inside WeChat.
+6. After login succeeds, click `Save`.
 
 ## Configuration Notes
 
@@ -44,15 +46,12 @@ Leave the remaining options at their default values unless you explicitly know y
 
 ## QR Login
 
-1. Fill in the configuration and click `Save`.
-2. Return to the bot list. AstrBot will automatically request a login QR code from WeChat.
-3. On the bot card, click `View QR Code` to open the QR dialog.
-4. Scan it with WeChat on your phone, then confirm the login inside WeChat.
+After you select `Personal WeChat`, AstrBot automatically requests a login QR code from WeChat and shows it directly in the create-bot dialog. Scan it with WeChat on your phone and confirm the login. When the QR area shows the login-success state, click `Save` to finish creating the bot.
 
-After login succeeds, AstrBot will automatically persist the login state. On later restarts, if the session is still valid, you usually do not need to scan again.
+After login succeeds and the bot is saved, AstrBot will automatically persist the login state. On later restarts, if the session is still valid, you usually do not need to scan again.
 
 > [!NOTE]
-> If the QR code expires, AstrBot will automatically request a new one. Please scan the refreshed QR code instead of the old one.
+> If the QR code expires, close and reopen the create-bot dialog, or select `Personal WeChat` again to request a new QR code.
 
 ## Verification
 
diff --git a/docs/zh/platform/lark.md b/docs/zh/platform/lark.md
index c5525b254..782b1a83c 100644
--- a/docs/zh/platform/lark.md
+++ b/docs/zh/platform/lark.md
@@ -20,6 +20,31 @@
 
 ## 创建机器人
 
+飞书（Lark）支持两种创建方式：在 AstrBot 中扫码一键创建，或在飞书开发者后台手动创建企业自建应用。
+
+### 方式一：扫码一键创建
+
+需要版本 >4.25.0。
+
+进入 AstrBot 管理面板，点击左边栏 `机器人`，然后点击 `+ 创建机器人`，选择 `lark(飞书)`。
+
+在 `选择创建方式` 中选择 `扫码一键创建`，按需选择国内版或海外版，然后使用手机飞书扫描页面中的二维码并确认。创建成功后，AstrBot 会自动写入该应用的 `app_id`、`app_secret` 和域名配置。
+
+> [!IMPORTANT]
+> 通过扫码方式创建后，群聊下默认仅会接收 @ 机器人和通过唤醒前缀（例如 `/`）触发的消息。如果你希望机器人接收群聊中的所有消息，需要前往飞书开发者后台为应用开通额外权限。
+>
+> 可以将下面链接中的 `<APP_ID>` 替换为你的飞书应用 App ID 后打开，一键进入权限开通页：
+>
+> App ID 获取方式：回到 AstrBot 的 `机器人` 页，找到刚刚创建的飞书机器人，点击 `编辑`，弹出的对话框中可以看到 App ID。
+>
+> ```text
+> https://open.feishu.cn/app/<APP_ID>/auth?q=contact:contact.base:readonly,im:message.p2p_msg:readonly,im:message.group_at_msg:readonly,im:message:send,im:message,im:message:send_as_bot,im:resource:upload,im:resource,cardkit:card:write,im:message.group_at_msg:readonly,im:message.group_msg&op_from=openapi&token_type=tenant
+> ```
+
+扫码创建完成后，建议继续检查后文的事件订阅、权限、版本发布和拉入群组步骤。
+
+### 方式二：手动创建
+
 前往 [开发者后台](https://open.feishu.cn/app) ，创建企业自建应用。
 
 ![创建企业自建应用](https://files.astrbot.app/docs/source/images/lark/image.png)
@@ -38,6 +63,7 @@
 2. 点击左边栏 `机器人`
 3. 然后在右边的界面中，点击 `+ 创建机器人` 
 4. 选择 `lark(飞书)`
+5. 如果使用扫码一键创建，选择 `扫码一键创建` 并完成扫码；如果使用自己创建的企业自建应用，选择 `手动创建`
 
 弹出的配置项填写：
 
@@ -45,7 +71,6 @@
 - 启用(enable): 勾选。
 - app_id: 获取的 app_id
 - app_secret: 获取的 app_secret
-- 飞书机器人的名字
 
 对于 domain，如果您使用国内版飞书，保持默认即可；如果您正在用国际版飞书，请设置为 `https://open.larksuite.com`；如果您使用企业自部署飞书，请填写您的飞书实例的域名。
 
@@ -94,6 +119,9 @@
 
 如果需要在群聊里使用，请额外开通 `im:message.group_at_msg:readonly` 和 `im:message.group_msg` 权限。
 
+> [!TIP]
+> 扫码一键创建的应用默认适合 @ 机器人和唤醒前缀触发。如果要接收群聊所有消息，请确认已经开通 `im:message.group_msg`。你也可以使用上文提供的权限开通链接快速进入对应页面。
+
 如果需要使用流式输出，请额外开通 `创建与更新卡片(cardkit:card:write)` 权限。
 
 最终开通的权限如下图：
diff --git a/docs/zh/platform/weixin_oc.md b/docs/zh/platform/weixin_oc.md
index 7fc64dbb7..c39a9f390 100644
--- a/docs/zh/platform/weixin_oc.md
+++ b/docs/zh/platform/weixin_oc.md
@@ -23,6 +23,8 @@ AstrBot 支持通过 `个人微信` 适配器接入微信个人号。该适配
 2. 点击左侧栏 `机器人`。
 3. 点击右上角 `+ 创建机器人`。
 4. 选择 `个人微信`。
+5. 页面会直接显示登录二维码，使用手机微信扫码，并在微信内确认登录。
+6. 登录成功后点击 `保存`。
 
 ## 配置项说明
 
@@ -42,18 +44,12 @@ AstrBot 支持通过 `个人微信` 适配器接入微信个人号。该适配
 
 ## 扫码登录
 
-1. 填好配置后点击 `保存`。
-2. 返回机器人列表，AstrBot 会自动向微信接口申请登录二维码。
-3. 在**机器人卡片**中点击 “查看二维码” 按钮，会弹出二维码对话框。（点击保存之后可能需要等 5 到 10 秒左右才会出现这个按钮）
-4. 使用手机微信扫码，并在微信内确认登录。
+选择 `个人微信` 后，AstrBot 会自动向微信接口申请登录二维码，并直接显示在创建机器人弹窗中。使用手机微信扫码确认后，二维码会显示登录成功状态，此时点击 `保存` 即可完成创建。
 
-![微信二维码入口](weixin_qr_entry.png)
-
-登录成功后，AstrBot 会自动保存登录态。后续重启时，如果登录态仍有效，通常不需要再次扫码。
+登录成功并保存后，AstrBot 会自动保存登录态。后续重启时，如果登录态仍有效，通常不需要再次扫码。
 
 > [!NOTE]
-> 1. 如果二维码过期，AstrBot 会自动重新申请新的二维码。刷新后请使用新的二维码重新扫码。
-> 2. 如果 WebUI 没看到 “查看二维码” 按钮，可以前往终端或者 WebUI 控制台，找到 `请使用手机微信扫码登录，二维码有效期 5 分钟，过期后会自动刷新。` 对应的日志，附近会显示二维码扫码链接和终端直接输出的二维码，直选择一种方式扫码即可。
+> 如果二维码过期，请关闭并重新打开创建机器人弹窗，或重新选择 `个人微信` 以获取新的二维码。
 
 ## 验证
 
@@ -77,4 +73,3 @@ AstrBot 支持通过 `个人微信` 适配器接入微信个人号。该适配
 
 - 该适配器通过扫码登录个人微信，接入方式与微信公众号、企业微信不同。
 - 不需要配置公网回调地址，也不需要开启统一 Webhook 模式。
-
diff --git a/tests/test_lark_app_registration.py b/tests/test_lark_app_registration.py
new file mode 100644
index 000000000..b7e9b0bad
--- /dev/null
+++ b/tests/test_lark_app_registration.py
@@ -0,0 +1,32 @@
+from astrbot.core.platform.sources.lark.app_registration import (
+    DEFAULT_FEISHU_OPEN_DOMAIN,
+    DEFAULT_LARK_OPEN_DOMAIN,
+    _registration_data,
+    resolve_app_registration_endpoints,
+)
+
+
+def test_resolve_app_registration_endpoints_uses_feishu_accounts_domain():
+    endpoints = resolve_app_registration_endpoints(DEFAULT_FEISHU_OPEN_DOMAIN)
+
+    assert endpoints.open_base == DEFAULT_FEISHU_OPEN_DOMAIN
+    assert endpoints.registration == (
+        "https://accounts.feishu.cn/oauth/v1/app/registration"
+    )
+
+
+def test_resolve_app_registration_endpoints_uses_lark_accounts_domain():
+    endpoints = resolve_app_registration_endpoints(DEFAULT_LARK_OPEN_DOMAIN)
+
+    assert endpoints.open_base == DEFAULT_LARK_OPEN_DOMAIN
+    assert endpoints.registration == (
+        "https://accounts.larksuite.com/oauth/v1/app/registration"
+    )
+
+
+def test_registration_data_accepts_wrapped_and_plain_payloads():
+    wrapped = {"data": {"device_code": "device"}}
+    plain = {"device_code": "device"}
+
+    assert _registration_data(wrapped) == {"device_code": "device"}
+    assert _registration_data(plain) == {"device_code": "device"}
diff --git a/tests/test_weixin_oc_login_registration.py b/tests/test_weixin_oc_login_registration.py
new file mode 100644
index 000000000..7baad5b29
--- /dev/null
+++ b/tests/test_weixin_oc_login_registration.py
@@ -0,0 +1,47 @@
+from astrbot.core.platform.sources.weixin_oc.login_registration import (
+    DEFAULT_WEIXIN_OC_BASE_URL,
+    normalize_weixin_oc_base_url,
+    weixin_oc_login_result,
+)
+
+
+def test_normalize_weixin_oc_base_url_uses_default_and_strips_slash():
+    assert normalize_weixin_oc_base_url("") == DEFAULT_WEIXIN_OC_BASE_URL
+    assert (
+        normalize_weixin_oc_base_url("https://ilinkai.weixin.qq.com/")
+        == DEFAULT_WEIXIN_OC_BASE_URL
+    )
+
+
+def test_weixin_oc_login_result_maps_confirmed_payload():
+    result = weixin_oc_login_result(
+        {
+            "status": "confirmed",
+            "bot_token": "token",
+            "ilink_bot_id": "bot-id",
+            "baseurl": "https://example.com/",
+            "ilink_user_id": "user-id",
+        },
+        default_base_url=DEFAULT_WEIXIN_OC_BASE_URL,
+    )
+
+    assert result == {
+        "status": "created",
+        "qr_status": "confirmed",
+        "weixin_oc_token": "token",
+        "weixin_oc_account_id": "bot-id",
+        "weixin_oc_base_url": "https://example.com",
+        "weixin_oc_user_id": "user-id",
+    }
+
+
+def test_weixin_oc_login_result_maps_wait_and_expired_payloads():
+    assert weixin_oc_login_result(
+        {"status": "wait"},
+        default_base_url=DEFAULT_WEIXIN_OC_BASE_URL,
+    ) == {"status": "pending", "qr_status": "wait"}
+
+    assert weixin_oc_login_result(
+        {"status": "expired"},
+        default_base_url=DEFAULT_WEIXIN_OC_BASE_URL,
+    ) == {"status": "expired", "qr_status": "expired", "message": "二维码已过期"}

From a09657e6205afc6b7f98c042115cbe347ec59fae Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E5=8D=83=E5=B2=9A=E4=B9=8B=E5=A4=8F?=
 <108566281+Blueteemo@users.noreply.github.com>
Date: Fri, 15 May 2026 13:01:36 +0800
Subject: [PATCH 40/51] fix: handle MiniMax TTS timber weight configuration
 more robustly to avoid crashes on invalid or empty values
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* fix: add comments and await asyncio.sleep(0) for startup signal

* fix: [Bug] 修复 MiniMax TTS 空字符串配置解析报错

* fix: 采纳AI审查建议，添日志+提取默认配置变量

* fix: 移除误加的core_lifecycle.py改动

---------

Co-authored-by: RainBot-Ai <qianlanzhiya@gmail.com>
---
 .../sources/minimax_tts_api_source.py         | 21 +++++++++++++------
 1 file changed, 15 insertions(+), 6 deletions(-)

diff --git a/astrbot/core/provider/sources/minimax_tts_api_source.py b/astrbot/core/provider/sources/minimax_tts_api_source.py
index 7ca369708..97d746c55 100644
--- a/astrbot/core/provider/sources/minimax_tts_api_source.py
+++ b/astrbot/core/provider/sources/minimax_tts_api_source.py
@@ -37,12 +37,21 @@ class ProviderMiniMaxTTSAPI(TTSProvider):
             "minimax-is-timber-weight",
             False,
         )
-        self.timber_weight: list[dict[str, str | int]] = json.loads(
-            provider_config.get(
-                "minimax-timber-weight",
-                '[{"voice_id": "Chinese (Mandarin)_Warm_Girl", "weight": 1}]',
-            ),
-        )
+        default_timber_weight = [
+            {"voice_id": "Chinese (Mandarin)_Warm_Girl", "weight": 1}
+        ]
+        raw_timber_weight = provider_config.get("minimax-timber-weight", "")
+        if not raw_timber_weight:
+            self.timber_weight = default_timber_weight
+        else:
+            try:
+                self.timber_weight = json.loads(raw_timber_weight)
+            except json.JSONDecodeError:
+                logger.warning(
+                    "MiniMax TTS 权重配置解析失败，将使用默认值。 raw_value: %s",
+                    raw_timber_weight,
+                )
+                self.timber_weight = default_timber_weight
 
         self.voice_setting: dict = {
             "speed": provider_config.get("minimax-voice-speed", 1.0),

From 1a0306343a9060bfbf158c72b74f4b76f51e72ab Mon Sep 17 00:00:00 2001
From: Midwich <midwich23@gmail.com>
Date: Fri, 15 May 2026 09:36:37 +0400
Subject: [PATCH 41/51] fix(webui): add Noto Sans font support for Cyrillic
 text (#8015)

The WebUI only loaded Noto Sans SC (Simplified Chinese), which lacks
Cyrillic glyphs. Russian text fell back to system sans-serif, causing
poor rendering depending on the OS.

Changes:
- Load Noto Sans (regular) from Google Fonts alongside Noto Sans SC
- Add 'Noto Sans' at the END of $cjk-sans-fallback (after CJK fonts)
  so Chinese text still renders with system CJK fonts first,
  while Cyrillic text falls through to Noto Sans.

This ensures both Chinese and Cyrillic text render correctly.
---
 dashboard/index.html               | 2 +-
 dashboard/src/scss/_variables.scss | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/dashboard/index.html b/dashboard/index.html
index 5ffa2c117..684f9b47e 100644
--- a/dashboard/index.html
+++ b/dashboard/index.html
@@ -9,7 +9,7 @@
     <meta name="robots" content="noindex, nofollow" />
     <link
       rel="stylesheet"
-      href="https://fonts.googleapis.com/css2?family=Outfit&family=Noto+Sans+SC:wght@100..900&display=swap"
+      href="https://fonts.googleapis.com/css2?family=Outfit&family=Noto+Sans:wght@100..900&family=Noto+Sans+SC:wght@100..900&display=swap"
     />
     <!-- VAD (Voice Activity Detection) Libraries -->
     <script src="https://cdn.jsdelivr.net/npm/onnxruntime-web@1.22.0/dist/ort.wasm.min.js"></script>
diff --git a/dashboard/src/scss/_variables.scss b/dashboard/src/scss/_variables.scss
index 64a6d03da..5e5bfe97a 100644
--- a/dashboard/src/scss/_variables.scss
+++ b/dashboard/src/scss/_variables.scss
@@ -9,7 +9,7 @@ $color-pack: false;
 // Global font size and border radius
 $font-size-root: 1rem;
 $border-radius-root: 8px;
-$cjk-sans-fallback: 'PingFang SC', 'Hiragino Sans GB', 'Noto Sans CJK SC', 'Microsoft YaHei' !default;
+$cjk-sans-fallback: 'PingFang SC', 'Hiragino Sans GB', 'Noto Sans CJK SC', 'Microsoft YaHei', 'Noto Sans SC', 'Noto Sans' !default;
 $cjk-mono-fallback: 'PingFang SC', 'PingFang TC', 'Hiragino Sans GB', 'Noto Sans CJK SC', 'Microsoft YaHei' !default;
 $code-text-color: #111827 !default;
 

From 6982ef7d9426b0c30e790a257f02af7f03dc6a48 Mon Sep 17 00:00:00 2001
From: Weilong Liao <37870767+Soulter@users.noreply.github.com>
Date: Fri, 15 May 2026 15:30:56 +0800
Subject: [PATCH 42/51] feat(weixin_oc): handle session timeout and clear login
 state (#8196)

---
 .../sources/weixin_oc/weixin_oc_adapter.py    | 22 +++++++++++++++++++
 1 file changed, 22 insertions(+)

diff --git a/astrbot/core/platform/sources/weixin_oc/weixin_oc_adapter.py b/astrbot/core/platform/sources/weixin_oc/weixin_oc_adapter.py
index f27453643..9297b2251 100644
--- a/astrbot/core/platform/sources/weixin_oc/weixin_oc_adapter.py
+++ b/astrbot/core/platform/sources/weixin_oc/weixin_oc_adapter.py
@@ -96,6 +96,7 @@ class WeixinOCReplyMeta:
     support_streaming_message=False,
 )
 class WeixinOCAdapter(Platform):
+    SESSION_TIMEOUT_ERRCODE = -14
     IMAGE_ITEM_TYPE = 2
     VOICE_ITEM_TYPE = 3
     FILE_ITEM_TYPE = 4
@@ -951,6 +952,23 @@ class WeixinOCAdapter(Platform):
         errmsg = str(payload.get("errmsg", ""))
         return f"ret={ret}, errcode={errcode}, errmsg={errmsg}"
 
+    @staticmethod
+    def _api_errcode(payload: dict[str, Any]) -> int:
+        return int(payload.get("errcode") or 0)
+
+    async def _handle_inbound_session_timeout(self) -> None:
+        logger.warning(
+            "weixin_oc(%s): session timed out, clearing login state and waiting for QR login.",
+            self.meta().id,
+        )
+        self.token = None
+        self.account_id = None
+        self._sync_buf = ""
+        self._context_tokens = {}
+        self._context_tokens_dirty = False
+        self._login_session = None
+        await self._save_account_state()
+
     async def _send_media_segment(
         self,
         user_id: str,
@@ -1566,6 +1584,10 @@ class WeixinOCAdapter(Platform):
                 self.meta().id,
                 self._last_inbound_error,
             )
+            if self._api_errcode(data) == self.SESSION_TIMEOUT_ERRCODE:
+                await self._handle_inbound_session_timeout()
+                return
+            await asyncio.sleep(5)
             return
 
         should_save_state = self._context_tokens_dirty

From 094aef6241d3dcc097fb546f5d4ca4609183b658 Mon Sep 17 00:00:00 2001
From: lingyun14 <wedoyou@qq.com>
Date: Fri, 15 May 2026 17:00:03 +0800
Subject: [PATCH 43/51] fix: drop **kwargs bug in two register funcs (#8141)

---
 astrbot/core/star/register/star_handler.py | 16 +++++++++++++---
 1 file changed, 13 insertions(+), 3 deletions(-)

diff --git a/astrbot/core/star/register/star_handler.py b/astrbot/core/star/register/star_handler.py
index 4693a4e75..2e50237d5 100644
--- a/astrbot/core/star/register/star_handler.py
+++ b/astrbot/core/star/register/star_handler.py
@@ -275,7 +275,11 @@ def register_platform_adapter_type(
     """注册一个 PlatformAdapterType"""
 
     def decorator(awaitable):
-        handler_md = get_handler_or_create(awaitable, EventType.AdapterMessageEvent)
+        handler_md = get_handler_or_create(
+            awaitable,
+            EventType.AdapterMessageEvent,
+            **kwargs,
+        )
         handler_md.event_filters.append(
             PlatformAdapterTypeFilter(platform_adapter_type),
         )
@@ -299,7 +303,9 @@ def register_regex(regex: str | re.Pattern, **kwargs):
     return decorator
 
 
-def register_permission_type(permission_type: PermissionType, raise_error: bool = True):
+def register_permission_type(
+    permission_type: PermissionType, raise_error: bool = True, **kwargs
+):
     """注册一个 PermissionType
 
     Args:
@@ -309,7 +315,11 @@ def register_permission_type(permission_type: PermissionType, raise_error: bool
     """
 
     def decorator(awaitable):
-        handler_md = get_handler_or_create(awaitable, EventType.AdapterMessageEvent)
+        handler_md = get_handler_or_create(
+            awaitable,
+            EventType.AdapterMessageEvent,
+            **kwargs,
+        )
         handler_md.event_filters.append(
             PermissionTypeFilter(permission_type, raise_error),
         )

From c88025c2a373b7a6788c472d4fb9f05876ac397c Mon Sep 17 00:00:00 2001
From: Weilong Liao <37870767+Soulter@users.noreply.github.com>
Date: Fri, 15 May 2026 18:43:21 +0800
Subject: [PATCH 44/51] feat(dingtalk): implement one-click QR registration and
 polling mechanism (#8198)

---
 .../sources/dingtalk/app_registration.py      | 146 ++++++++++++++++++
 astrbot/dashboard/routes/platform.py          |  37 +++++
 .../components/platform/AddNewPlatform.vue    |  65 +++++++-
 .../platform/PlatformRegistrationAction.vue   |  13 ++
 .../i18n/locales/en-US/features/platform.json |   8 +-
 .../i18n/locales/ru-RU/features/platform.json |   8 +-
 .../i18n/locales/zh-CN/features/platform.json |   8 +-
 docs/en/platform/dingtalk.md                  |  16 +-
 docs/zh/platform/dingtalk.md                  |  16 +-
 tests/test_dingtalk_app_registration.py       |  47 ++++++
 10 files changed, 352 insertions(+), 12 deletions(-)
 create mode 100644 astrbot/core/platform/sources/dingtalk/app_registration.py
 create mode 100644 tests/test_dingtalk_app_registration.py

diff --git a/astrbot/core/platform/sources/dingtalk/app_registration.py b/astrbot/core/platform/sources/dingtalk/app_registration.py
new file mode 100644
index 000000000..c177d30ae
--- /dev/null
+++ b/astrbot/core/platform/sources/dingtalk/app_registration.py
@@ -0,0 +1,146 @@
+import os
+from dataclasses import dataclass
+from typing import Any
+
+import aiohttp
+
+DEFAULT_DINGTALK_REGISTRATION_BASE_URL = "https://oapi.dingtalk.com"
+DEFAULT_DINGTALK_REGISTRATION_SOURCE = "DING_DWS_CLAW"
+
+
+@dataclass
+class DingtalkAppRegistration:
+    device_code: str
+    user_code: str
+    verification_uri: str
+    verification_uri_complete: str
+    expires_in: int
+    interval: int
+
+
+def dingtalk_registration_base_url() -> str:
+    return (
+        os.getenv("DINGTALK_REGISTRATION_BASE_URL", "").strip()
+        or DEFAULT_DINGTALK_REGISTRATION_BASE_URL
+    ).rstrip("/")
+
+
+def dingtalk_registration_source() -> str:
+    return (
+        os.getenv("DINGTALK_REGISTRATION_SOURCE", "").strip()
+        or DEFAULT_DINGTALK_REGISTRATION_SOURCE
+    )
+
+
+def _string_field(data: dict[str, Any], key: str) -> str:
+    value = data.get(key)
+    if isinstance(value, str):
+        return value.strip()
+    return ""
+
+
+def _int_field(data: dict[str, Any], key: str, default: int) -> int:
+    value = data.get(key)
+    if isinstance(value, int):
+        return value
+    if isinstance(value, float):
+        return int(value)
+    return default
+
+
+async def _post_registration(
+    path: str,
+    payload: dict[str, str],
+) -> tuple[int, dict[str, Any]]:
+    timeout = aiohttp.ClientTimeout(total=15)
+    async with aiohttp.ClientSession(timeout=timeout, trust_env=True) as session:
+        async with session.post(
+            f"{dingtalk_registration_base_url()}{path}",
+            json=payload,
+        ) as response:
+            status = response.status
+            data = await response.json(content_type=None)
+    if not isinstance(data, dict):
+        raise RuntimeError("DingTalk registration response format is invalid")
+    return status, data
+
+
+def _raise_dingtalk_registration_error(
+    status: int,
+    raw: dict[str, Any],
+    action: str,
+) -> None:
+    errcode = raw.get("errcode", 0)
+    if status < 400 and int(errcode or 0) == 0:
+        return
+    errmsg = _string_field(raw, "errmsg") or "unknown error"
+    raise RuntimeError(f"[{action}] {errmsg} (errcode={errcode})")
+
+
+async def request_dingtalk_app_registration() -> DingtalkAppRegistration:
+    status, init_raw = await _post_registration(
+        "/app/registration/init",
+        {"source": dingtalk_registration_source()},
+    )
+    _raise_dingtalk_registration_error(status, init_raw, "init")
+    nonce = _string_field(init_raw, "nonce")
+    if not nonce:
+        raise RuntimeError("[init] missing nonce")
+
+    status, begin_raw = await _post_registration(
+        "/app/registration/begin",
+        {"nonce": nonce},
+    )
+    _raise_dingtalk_registration_error(status, begin_raw, "begin")
+
+    device_code = _string_field(begin_raw, "device_code")
+    verification_uri_complete = _string_field(begin_raw, "verification_uri_complete")
+    if not device_code:
+        raise RuntimeError("[begin] missing device_code")
+    if not verification_uri_complete:
+        raise RuntimeError("[begin] missing verification_uri_complete")
+
+    return DingtalkAppRegistration(
+        device_code=device_code,
+        user_code=_string_field(begin_raw, "user_code"),
+        verification_uri=_string_field(begin_raw, "verification_uri"),
+        verification_uri_complete=verification_uri_complete,
+        expires_in=max(_int_field(begin_raw, "expires_in", 7200), 60),
+        interval=max(_int_field(begin_raw, "interval", 3), 1),
+    )
+
+
+async def poll_dingtalk_app_registration_once(device_code: str) -> dict[str, Any]:
+    status, raw = await _post_registration(
+        "/app/registration/poll",
+        {"device_code": device_code},
+    )
+    _raise_dingtalk_registration_error(status, raw, "poll")
+    return dingtalk_registration_poll_result(raw)
+
+
+def dingtalk_registration_poll_result(raw: dict[str, Any]) -> dict[str, Any]:
+    status_raw = _string_field(raw, "status").upper()
+    if status_raw == "WAITING":
+        return {"status": "pending"}
+    if status_raw == "SUCCESS":
+        client_id = _string_field(raw, "client_id")
+        client_secret = _string_field(raw, "client_secret")
+        if not client_id or not client_secret:
+            return {"status": "error", "message": "扫码成功但未获取到钉钉应用凭证"}
+        return {
+            "status": "created",
+            "client_id": client_id,
+            "client_secret": client_secret,
+        }
+    if status_raw == "FAIL":
+        return {
+            "status": "error",
+            "message": _string_field(raw, "fail_reason") or "钉钉扫码创建失败",
+        }
+    if status_raw == "EXPIRED":
+        return {"status": "expired", "message": "钉钉扫码已过期，请重新创建"}
+    return {
+        "status": "error",
+        "message": f"钉钉扫码创建返回未知状态: {status_raw or 'UNKNOWN'}",
+    }
diff --git a/astrbot/dashboard/routes/platform.py b/astrbot/dashboard/routes/platform.py
index e48bb9c2a..2b3a9c7f8 100644
--- a/astrbot/dashboard/routes/platform.py
+++ b/astrbot/dashboard/routes/platform.py
@@ -8,6 +8,10 @@ from quart import request
 from astrbot.core import logger
 from astrbot.core.core_lifecycle import AstrBotCoreLifecycle
 from astrbot.core.platform import Platform
+from astrbot.core.platform.sources.dingtalk.app_registration import (
+    poll_dingtalk_app_registration_once,
+    request_dingtalk_app_registration,
+)
 from astrbot.core.platform.sources.lark.app_registration import (
     poll_app_registration_once,
     request_app_registration,
@@ -138,6 +142,8 @@ class PlatformRoute(Route):
                     payload,
                     platform_config,
                 )
+            if platform_type == "dingtalk":
+                return await self._handle_dingtalk_registration(action, payload)
 
             return Response().error(
                 f"Unsupported platform registration: {platform_type}"
@@ -200,6 +206,37 @@ class PlatformRoute(Route):
 
         return Response().error(f"Unsupported action: {action}").__dict__, 400
 
+    async def _handle_dingtalk_registration(self, action: str, payload: dict):
+        if action == "start":
+            registration = await request_dingtalk_app_registration()
+            return (
+                Response()
+                .ok(
+                    {
+                        "status": "pending",
+                        "device_code": registration.device_code,
+                        "registration_code": registration.device_code,
+                        "user_code": registration.user_code,
+                        "verification_uri": registration.verification_uri,
+                        "verification_uri_complete": registration.verification_uri_complete,
+                        "expires_in": registration.expires_in,
+                        "interval": registration.interval,
+                    }
+                )
+                .__dict__
+            )
+
+        if action == "poll":
+            device_code = str(
+                payload.get("device_code") or payload.get("registration_code") or ""
+            ).strip()
+            if not device_code:
+                return Response().error("Missing device_code").__dict__, 400
+            result = await poll_dingtalk_app_registration_once(device_code)
+            return Response().ok(result).__dict__
+
+        return Response().error(f"Unsupported action: {action}").__dict__, 400
+
     async def _handle_weixin_oc_registration(
         self,
         action: str,
diff --git a/dashboard/src/components/platform/AddNewPlatform.vue b/dashboard/src/components/platform/AddNewPlatform.vue
index 43096bea7..f079b1a68 100644
--- a/dashboard/src/components/platform/AddNewPlatform.vue
+++ b/dashboard/src/components/platform/AddNewPlatform.vue
@@ -31,19 +31,19 @@
                 </v-select>
                 <div class="mt-3" v-if="selectedPlatformConfig">
                   <div v-if="isLarkPlatform">
-                    <div class="lark-creation-title mt-4 mb-1">
+                    <div class="creation-mode-title mt-4 mb-1">
                       {{ tm('registrationAction.mode.title') }}
                     </div>
                     <v-radio-group
                       v-model="larkCreationMode"
-                      class="lark-creation-mode"
+                      class="creation-mode-group"
                       hide-details
                     >
                       <v-radio value="scan" :label="tm('registrationAction.mode.scan')"></v-radio>
-                      <v-radio value="manual" :label="tm('registrationAction.mode.manual')"></v-radio>
+                      <v-radio value="manual" :label="tm('registrationAction.mode.larkManual')"></v-radio>
                     </v-radio-group>
 
-                    <div v-if="larkCreationMode === 'scan'" class="lark-registration-inline mt-3">
+                    <div v-if="larkCreationMode === 'scan'" class="registration-inline mt-3">
                       <PlatformRegistrationAction
                         :platform-config="selectedPlatformConfig"
                         :active="larkCreationMode === 'scan'"
@@ -54,6 +54,40 @@
                     </div>
 
                     <div v-else-if="larkCreationMode === 'manual'" class="mt-2">
+                      <div class="platform-action-row">
+                        <v-btn color="info" variant="tonal" @click="openTutorial" class="mt-2">
+                          <v-icon start>mdi-book-open-variant</v-icon>
+                          {{ tm('dialog.viewTutorial') }}
+                        </v-btn>
+                      </div>
+                      <AstrBotConfig :iterable="selectedPlatformConfig" :metadata="metadata['platform_group']?.metadata"
+                      metadataKey="platform" />
+                    </div>
+                  </div>
+
+                  <div v-else-if="isDingtalkPlatform">
+                    <div class="creation-mode-title mt-4 mb-1">
+                      {{ tm('registrationAction.mode.title') }}
+                    </div>
+                    <v-radio-group
+                      v-model="dingtalkCreationMode"
+                      class="creation-mode-group"
+                      hide-details
+                    >
+                      <v-radio value="scan" :label="tm('registrationAction.mode.scan')"></v-radio>
+                      <v-radio value="manual" :label="tm('registrationAction.mode.manual')"></v-radio>
+                    </v-radio-group>
+
+                    <div v-if="dingtalkCreationMode === 'scan'" class="registration-inline mt-3">
+                      <PlatformRegistrationAction
+                        :platform-config="selectedPlatformConfig"
+                        :active="dingtalkCreationMode === 'scan'"
+                        @success="showSuccess"
+                        @error="showError"
+                      />
+                    </div>
+
+                    <div v-else-if="dingtalkCreationMode === 'manual'" class="mt-2">
                       <div class="platform-action-row">
                         <v-btn color="info" variant="tonal" @click="openTutorial" class="mt-2">
                           <v-icon start>mdi-book-open-variant</v-icon>
@@ -390,6 +424,7 @@ export default {
       selectedPlatformType: null,
       selectedPlatformConfig: null,
       larkCreationMode: '',
+      dingtalkCreationMode: '',
 
       aBConfigRadioVal: '0',
       selectedAbConfId: 'default',
@@ -469,6 +504,16 @@ export default {
         }
       }
 
+      if (this.isDingtalkPlatform && !this.dingtalkCreationMode) {
+        return false;
+      }
+
+      if (this.isDingtalkPlatform && this.dingtalkCreationMode === 'scan') {
+        if (!this.selectedPlatformConfig?.client_id || !this.selectedPlatformConfig?.client_secret) {
+          return false;
+        }
+      }
+
       if (this.isWeixinOcPlatform && !this.selectedPlatformConfig?.weixin_oc_token) {
         return false;
       }
@@ -511,6 +556,9 @@ export default {
     },
     isWeixinOcPlatform() {
       return this.selectedPlatformConfig?.type === 'weixin_oc';
+    },
+    isDingtalkPlatform() {
+      return this.selectedPlatformConfig?.type === 'dingtalk';
     }
   },
   watch: {
@@ -518,9 +566,11 @@ export default {
       if (newType && this.platformTemplates[newType]) {
         this.selectedPlatformConfig = JSON.parse(JSON.stringify(this.platformTemplates[newType]));
         this.larkCreationMode = '';
+        this.dingtalkCreationMode = '';
       } else {
         this.selectedPlatformConfig = null;
         this.larkCreationMode = '';
+        this.dingtalkCreationMode = '';
       }
     },
     selectedAbConfId(newConfigId) {
@@ -606,6 +656,7 @@ export default {
       this.selectedPlatformType = null;
       this.selectedPlatformConfig = null;
       this.larkCreationMode = '';
+      this.dingtalkCreationMode = '';
 
       this.aBConfigRadioVal = '0';
       this.selectedAbConfId = 'default';
@@ -1181,17 +1232,17 @@ export default {
   gap: 8px;
 }
 
-.lark-creation-mode .v-label {
+.creation-mode-group .v-label {
   opacity: 0.9;
 }
 
-.lark-creation-title {
+.creation-mode-title {
   font-size: 14px;
   font-weight: 600;
   color: rgba(0, 0, 0, 0.78);
 }
 
-.lark-registration-inline {
+.registration-inline {
   display: flex;
   align-items: flex-start;
   justify-content: flex-start;
diff --git a/dashboard/src/components/platform/PlatformRegistrationAction.vue b/dashboard/src/components/platform/PlatformRegistrationAction.vue
index c0df0f74e..ba40ac60c 100644
--- a/dashboard/src/components/platform/PlatformRegistrationAction.vue
+++ b/dashboard/src/components/platform/PlatformRegistrationAction.vue
@@ -66,6 +66,13 @@ const REGISTRATION_ACTIONS = {
     successKey: 'registrationAction.weixinOc.created',
     statusKeyPrefix: 'registrationAction.weixinOc.status',
   },
+  dingtalk: {
+    endpoint: '/api/platform/registration/dingtalk',
+    icon: 'mdi-qrcode',
+    titleKey: 'registrationAction.dingtalk.title',
+    scanTitleKey: 'registrationAction.dingtalk.scanTitle',
+    successKey: 'registrationAction.dingtalk.created',
+  },
 };
 
 export default {
@@ -256,6 +263,12 @@ export default {
       if (data.weixin_oc_base_url) {
         this.platformConfig.weixin_oc_base_url = data.weixin_oc_base_url;
       }
+      if (data.client_id) {
+        this.platformConfig.client_id = data.client_id;
+      }
+      if (data.client_secret) {
+        this.platformConfig.client_secret = data.client_secret;
+      }
     },
     getStatusText(status) {
       const normalizedStatus = status || 'idle';
diff --git a/dashboard/src/i18n/locales/en-US/features/platform.json b/dashboard/src/i18n/locales/en-US/features/platform.json
index d2c9650fb..7282d312d 100644
--- a/dashboard/src/i18n/locales/en-US/features/platform.json
+++ b/dashboard/src/i18n/locales/en-US/features/platform.json
@@ -152,6 +152,11 @@
         "error": "Login Failed"
       }
     },
+    "dingtalk": {
+      "title": "DingTalk QR Setup",
+      "scanTitle": "Scan with DingTalk on your phone",
+      "created": "Setup Complete"
+    },
     "start": "Start Setup",
     "created": "Setup Complete",
     "startFailed": "Failed to start QR setup",
@@ -159,7 +164,8 @@
     "mode": {
       "title": "Choose setup method",
       "scan": "One-click QR setup",
-      "manual": "Manual setup (supports self-hosted Feishu)"
+      "manual": "Manual setup",
+      "larkManual": "Manual setup (supports self-hosted Feishu)"
     },
     "scanTitle": "Scan with Feishu on your phone",
     "status": {
diff --git a/dashboard/src/i18n/locales/ru-RU/features/platform.json b/dashboard/src/i18n/locales/ru-RU/features/platform.json
index b1a6db673..c3609d79b 100644
--- a/dashboard/src/i18n/locales/ru-RU/features/platform.json
+++ b/dashboard/src/i18n/locales/ru-RU/features/platform.json
@@ -152,6 +152,11 @@
         "error": "Ошибка входа"
       }
     },
+    "dingtalk": {
+      "title": "Создание DingTalk по QR",
+      "scanTitle": "Отсканируйте в мобильном DingTalk",
+      "created": "Настройка завершена"
+    },
     "start": "Начать настройку",
     "created": "Настройка завершена",
     "startFailed": "Не удалось начать QR настройку",
@@ -159,7 +164,8 @@
     "mode": {
       "title": "Выберите способ создания",
       "scan": "Создать через QR",
-      "manual": "Создать вручную (поддерживает self-hosted Feishu)"
+      "manual": "Создать вручную",
+      "larkManual": "Создать вручную (поддерживает self-hosted Feishu)"
     },
     "scanTitle": "Отсканируйте в мобильном Feishu",
     "status": {
diff --git a/dashboard/src/i18n/locales/zh-CN/features/platform.json b/dashboard/src/i18n/locales/zh-CN/features/platform.json
index e2bb348de..8faaf9a9f 100644
--- a/dashboard/src/i18n/locales/zh-CN/features/platform.json
+++ b/dashboard/src/i18n/locales/zh-CN/features/platform.json
@@ -152,6 +152,11 @@
         "error": "登录失败"
       }
     },
+    "dingtalk": {
+      "title": "钉钉扫码创建",
+      "scanTitle": "请使用手机钉钉扫码",
+      "created": "创建成功"
+    },
     "start": "开始创建",
     "created": "创建成功",
     "startFailed": "发起扫码创建失败",
@@ -159,7 +164,8 @@
     "mode": {
       "title": "选择创建方式",
       "scan": "扫码一键创建",
-      "manual": "手动创建（支持企业自部署飞书平台）"
+      "manual": "手动创建",
+      "larkManual": "手动创建（支持企业自部署飞书平台）"
     },
     "scanTitle": "请使用手机飞书扫码",
     "status": {
diff --git a/docs/en/platform/dingtalk.md b/docs/en/platform/dingtalk.md
index 9b21f7cdf..a4bb53fa2 100644
--- a/docs/en/platform/dingtalk.md
+++ b/docs/en/platform/dingtalk.md
@@ -16,6 +16,20 @@ Proactive message push: Supported.
 
 ## Create and Configure the App
 
+DingTalk supports two setup methods: one-click QR creation in AstrBot, or manually creating an app in DingTalk Open Platform.
+
+### Option 1: One-click QR Creation
+
+AstrBot version requirement: >= v4.25.0.
+
+Open AstrBot Dashboard -> `Bots` -> `+ Create Bot`, then select `DingTalk`.
+
+Under `Creation Method`, select `One-click QR setup`, scan the QR code with the DingTalk mobile app, then create or bind a bot on the DingTalk authorization page. After creation succeeds, AstrBot automatically fills in `ClientID` and `ClientSecret`. Click `Save` to finish.
+
+After QR creation succeeds, continue checking the event subscription, version release, and group installation steps below.
+
+### Option 2: Manual Creation
+
 Go to the [DingTalk Open Platform](https://open-dev.dingtalk.com/fe/app), then create an app:
 
 ![image](https://files.astrbot.app/docs/source/images/dingtalk/image-4.png)
@@ -36,7 +50,7 @@ Go to Credentials & Basic Information, then copy `ClientID` and `ClientSecret`.
 
 Open AstrBot Dashboard -> `Bots` -> `+ Create Bot`, then create a DingTalk adapter.
 
-Fill in `ClientID` and `ClientSecret`, then click Save. AstrBot will request authorization from DingTalk Open Platform automatically.
+If you want AstrBot to create the app for you, select `One-click QR setup` and complete the scan. If you already created the app yourself, select `Manual setup`, fill in `ClientID` and `ClientSecret`, then click Save. AstrBot will request authorization from DingTalk Open Platform automatically.
 
 Back in DingTalk Open Platform, open Event Subscriptions, select `Stream mode push`, and click Save. If successful, you will see a connected status.
 
diff --git a/docs/zh/platform/dingtalk.md b/docs/zh/platform/dingtalk.md
index dcc141065..9139abd79 100644
--- a/docs/zh/platform/dingtalk.md
+++ b/docs/zh/platform/dingtalk.md
@@ -16,6 +16,20 @@
 
 ## 创建和配置应用
 
+钉钉支持两种创建方式：在 AstrBot 中扫码一键创建，或在钉钉开放平台手动创建应用。
+
+### 方式一：扫码一键创建
+
+需要 AstrBot 版本 >= v4.25.0。
+
+打开 AstrBot 管理面板 -> `机器人` -> `+ 创建机器人`，选择 `钉钉(DingTalk)`。
+
+在 `选择创建方式` 中选择 `扫码一键创建`，使用手机钉钉扫描页面中的二维码，并在钉钉页面中创建或绑定机器人。创建成功后，AstrBot 会自动写入 `ClientID` 和 `ClientSecret`，此时点击 `保存` 即可。
+
+扫码创建完成后，仍建议检查后文的事件订阅、版本发布和拉入群组步骤。
+
+### 方式二：手动创建
+
 前往 [钉钉开放平台](https://open-dev.dingtalk.com/fe/app)，点击创建应用：
 
 ![image](https://files.astrbot.app/docs/source/images/dingtalk/image-4.png)
@@ -36,7 +50,7 @@
 
 打开 AstrBot 管理面板 -> `机器人` -> `+ 创建机器人`，创建一个钉钉适配器。
 
-将刚刚复制的 `ClientID` 和 `ClientSecret` 填入，点击保存，AstrBot 将会自动向钉钉开放平台请求。
+如果使用扫码一键创建，选择 `扫码一键创建` 并完成扫码；如果使用自己创建的钉钉应用，选择 `手动创建`，将刚刚复制的 `ClientID` 和 `ClientSecret` 填入。点击保存后，AstrBot 将会自动向钉钉开放平台请求。
 
 回到钉钉开放平台，点击事件订阅，选择 `Stream 模式推送`，点击保存，如果没有意外情况，将会看到 连接接入成功 字样。
 
diff --git a/tests/test_dingtalk_app_registration.py b/tests/test_dingtalk_app_registration.py
new file mode 100644
index 000000000..63ea95905
--- /dev/null
+++ b/tests/test_dingtalk_app_registration.py
@@ -0,0 +1,47 @@
+from astrbot.core.platform.sources.dingtalk.app_registration import (
+    DEFAULT_DINGTALK_REGISTRATION_BASE_URL,
+    DEFAULT_DINGTALK_REGISTRATION_SOURCE,
+    dingtalk_registration_base_url,
+    dingtalk_registration_poll_result,
+    dingtalk_registration_source,
+)
+
+
+def test_dingtalk_registration_defaults(monkeypatch):
+    monkeypatch.delenv("DINGTALK_REGISTRATION_BASE_URL", raising=False)
+    monkeypatch.delenv("DINGTALK_REGISTRATION_SOURCE", raising=False)
+
+    assert dingtalk_registration_base_url() == DEFAULT_DINGTALK_REGISTRATION_BASE_URL
+    assert dingtalk_registration_source() == DEFAULT_DINGTALK_REGISTRATION_SOURCE
+
+
+def test_dingtalk_registration_poll_result_maps_waiting_and_success():
+    assert dingtalk_registration_poll_result({"status": "WAITING"}) == {
+        "status": "pending"
+    }
+
+    assert dingtalk_registration_poll_result(
+        {
+            "status": "SUCCESS",
+            "client_id": "client-id",
+            "client_secret": "client-secret",
+        }
+    ) == {
+        "status": "created",
+        "client_id": "client-id",
+        "client_secret": "client-secret",
+    }
+
+
+def test_dingtalk_registration_poll_result_maps_fail_and_expired():
+    assert dingtalk_registration_poll_result(
+        {"status": "FAIL", "fail_reason": "denied"}
+    ) == {
+        "status": "error",
+        "message": "denied",
+    }
+
+    assert dingtalk_registration_poll_result({"status": "EXPIRED"}) == {
+        "status": "expired",
+        "message": "钉钉扫码已过期，请重新创建",
+    }

From 871b9327850f564d0556c5dd67ad9745df90fd09 Mon Sep 17 00:00:00 2001
From: Tom8266 <Tom82662025@outlook.com>
Date: Sat, 16 May 2026 01:20:52 +0800
Subject: [PATCH 45/51] fix: detect Tencent SILK (\x02 prefix) in audio magic
 bytes to avoid ffmpeg failure (#8009)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* fix: detect Tencent SILK (\x02 prefix) in audio magic bytes to avoid ffmpeg failure

QQ official bot sends voice in Tencent SILK format (leading \x02 byte before
#!SILK_V3 magic). _get_audio_magic_type() had two off-by-one slice errors:

  1. Standard SILK:  header[:8]  vs b'#!SILK_V3' (8 != 9 bytes) — never matched
  2. Tencent SILK:   not detected at all

Fixes:
  - Standard SILK:  header[:9]  == b'#!SILK_V3'   (correct 9-byte slice)
  - Tencent SILK:   header[:1] == b"\x02" and header[1:10] == b'#!SILK_V3'
  - ensure_wav() routes detected silk to tencent_silk_to_wav()

Before: QQ voice → ffmpeg → 'Invalid data found'
After:  QQ voice → magic detects silk → tencent_silk_to_wav → WAV OK

* refactor: use startswith() for SILK magic byte detection

Replace manual slice comparisons with startswith() — cleaner, less
error-prone, and immune to off-by-one slice errors.

Suggested by: sourcery-ai
---
 astrbot/core/utils/media_utils.py | 17 +++++++++++++++--
 1 file changed, 15 insertions(+), 2 deletions(-)

diff --git a/astrbot/core/utils/media_utils.py b/astrbot/core/utils/media_utils.py
index b26e4de48..3be1cadc1 100644
--- a/astrbot/core/utils/media_utils.py
+++ b/astrbot/core/utils/media_utils.py
@@ -15,6 +15,7 @@ from PIL import Image as PILImage
 
 from astrbot import logger
 from astrbot.core.utils.astrbot_path import get_astrbot_temp_path
+from astrbot.core.utils.tencent_record_helper import tencent_silk_to_wav
 
 IMAGE_COMPRESS_DEFAULT_MAX_SIZE = 1280
 IMAGE_COMPRESS_DEFAULT_QUALITY = 95
@@ -250,9 +251,17 @@ async def ensure_wav(audio_path: str, output_path: str | None = None) -> str:
     if not audio_path:
         return audio_path
 
-    if _get_audio_magic_type(audio_path) == "wav":
+    audio_type = _get_audio_magic_type(audio_path)
+    if audio_type == "wav":
         return audio_path
 
+    if audio_type == "silk":
+        if output_path is None:
+            temp_dir = get_astrbot_temp_path()
+            os.makedirs(temp_dir, exist_ok=True)
+            output_path = os.path.join(temp_dir, f"media_audio_{uuid.uuid4().hex}.wav")
+        return await tencent_silk_to_wav(audio_path, output_path)
+
     return await convert_audio_to_wav(audio_path, output_path)
 
 
@@ -291,7 +300,11 @@ def _get_audio_magic_type(audio_path: str) -> str:
     if header[:4] == b"ftyp" and b"mp4" in header[:8]:
         return "mp4"
 
-    if header[:8] == b"#!SILK_V3":
+    if header.startswith(b"#!SILK_V3"):
+        return "silk"
+
+    # Tencent SILK: leading \x02 byte before #!SILK_V3
+    if header.startswith(b"\x02#!SILK_V3"):
         return "silk"
 
     return ""

From 1d6962642101dfa70950386519fad2b8dd0faa8c Mon Sep 17 00:00:00 2001
From: Yufeng He <40085740+he-yufeng@users.noreply.github.com>
Date: Sat, 16 May 2026 01:34:03 +0800
Subject: [PATCH 46/51] fix: pass image inputs through active replies (#8119)

* fix(core): pass images through active replies

* fix: harden active reply image collection

* test: avoid logger coupling in active reply test

* Delete tests/unit/test_builtin_astrbot_main.py

---------

Co-authored-by: Weilong Liao <37870767+Soulter@users.noreply.github.com>
---
 astrbot/builtin_stars/astrbot/main.py | 19 ++++++++++++++++++-
 1 file changed, 18 insertions(+), 1 deletion(-)

diff --git a/astrbot/builtin_stars/astrbot/main.py b/astrbot/builtin_stars/astrbot/main.py
index 828e49552..c1500a5d1 100644
--- a/astrbot/builtin_stars/astrbot/main.py
+++ b/astrbot/builtin_stars/astrbot/main.py
@@ -1,5 +1,6 @@
 import copy
 import traceback
+from collections.abc import Iterable
 from sys import maxsize
 
 import astrbot.api.message_components as Comp
@@ -19,6 +20,13 @@ from astrbot.core.utils.session_waiter import (
 from .long_term_memory import LongTermMemory
 
 
+def _iter_message_components(event: AstrMessageEvent):
+    messages = getattr(getattr(event, "message_obj", None), "message", None)
+    if not isinstance(messages, Iterable) or isinstance(messages, (str, bytes)):
+        return ()
+    return tuple(messages)
+
+
 class Main(star.Star):
     def __init__(self, context: star.Context) -> None:
         self.context = context
@@ -134,8 +142,9 @@ class Main(star.Star):
     @filter.platform_adapter_type(filter.PlatformAdapterType.ALL)
     async def on_message(self, event: AstrMessageEvent):
         """群聊记忆增强"""
+        message_components = _iter_message_components(event)
         has_image_or_plain = False
-        for comp in event.message_obj.message:
+        for comp in message_components:
             if isinstance(comp, Plain) or isinstance(comp, Image):
                 has_image_or_plain = True
                 break
@@ -177,6 +186,13 @@ class Main(star.Star):
                     )
 
                     prompt = event.message_str
+                    image_urls = []
+                    for comp in message_components:
+                        if isinstance(comp, Image):
+                            try:
+                                image_urls.append(await comp.convert_to_file_path())
+                            except Exception:
+                                logger.exception("主动回复处理图片失败")
 
                     if not conv:
                         logger.error("未找到对话，无法主动回复")
@@ -185,6 +201,7 @@ class Main(star.Star):
                     yield event.request_llm(
                         prompt=prompt,
                         session_id=event.session_id,
+                        image_urls=image_urls,
                         conversation=conv,
                     )
                 except BaseException as e:

From 02291a3217c92faa0c577bf9d89076949c40954c Mon Sep 17 00:00:00 2001
From: Soulter <905617992@qq.com>
Date: Sat, 16 May 2026 01:39:02 +0800
Subject: [PATCH 47/51] chore: bump version to 4.25.0

---
 astrbot/cli/__init__.py        |  2 +-
 astrbot/core/config/default.py |  2 +-
 changelogs/v4.25.0.md          | 61 ++++++++++++++++++++++++++++++++++
 pyproject.toml                 |  2 +-
 4 files changed, 64 insertions(+), 3 deletions(-)
 create mode 100644 changelogs/v4.25.0.md

diff --git a/astrbot/cli/__init__.py b/astrbot/cli/__init__.py
index 9a9d305f3..8900bf5ca 100644
--- a/astrbot/cli/__init__.py
+++ b/astrbot/cli/__init__.py
@@ -1 +1 @@
-__version__ = "4.24.5"
+__version__ = "4.25.0"
diff --git a/astrbot/core/config/default.py b/astrbot/core/config/default.py
index 7f6881ba7..7f7140a9c 100644
--- a/astrbot/core/config/default.py
+++ b/astrbot/core/config/default.py
@@ -5,7 +5,7 @@ import os
 from astrbot.core.computer.booters.cua_defaults import CUA_DEFAULT_CONFIG
 from astrbot.core.utils.astrbot_path import get_astrbot_data_path
 
-VERSION = "4.24.5"
+VERSION = "4.25.0"
 DB_PATH = os.path.join(get_astrbot_data_path(), "data_v4.db")
 PERSONAL_WECHAT_CONFIG_METADATA = {
     "weixin_oc_base_url": {
diff --git a/changelogs/v4.25.0.md b/changelogs/v4.25.0.md
new file mode 100644
index 000000000..29e1745be
--- /dev/null
+++ b/changelogs/v4.25.0.md
@@ -0,0 +1,61 @@
+- [更新日志(简体中文)](#chinese)
+- [Changelog(English)](#english)
+
+<a id="chinese"></a>
+
+## What's Changed
+
+### 修复
+
+- 修复 Tencent SILK 音频带 `\x02` 前缀时未被识别，导致后续 ffmpeg 转换失败的问题。（[#8009](https://github.com/AstrBotDevs/AstrBot/pull/8009)）
+- 修复个人微信媒体消息发送失败时错误未向上暴露的问题。（[#8175](https://github.com/AstrBotDevs/AstrBot/pull/8175)）
+- 修复 Claude API 对无参数工具返回 `None` 参数时工具调用失败的问题。（[#8136](https://github.com/AstrBotDevs/AstrBot/pull/8136)）
+- 修复 `register_platform_adapter_type` 与 `register_permission_type` 未正确透传 `**kwargs` 的问题。（[#8141](https://github.com/AstrBotDevs/AstrBot/pull/8141)）
+- 修复 MiniMax TTS timber weight 配置为空或非法 JSON 时可能导致初始化崩溃的问题。
+
+### 新功能
+
+- 新增 Ollama Embedding 与 NVIDIA NIM Embedding 提供商适配器。（[#8104](https://github.com/AstrBotDevs/AstrBot/pull/8104)）
+- 新增飞书扫码一键创建能力。（[#8191](https://github.com/AstrBotDevs/AstrBot/pull/8191)）
+- 新增钉钉扫码一键创建能力。（[#8198](https://github.com/AstrBotDevs/AstrBot/pull/8198)）
+- 新增个人微信创建时扫码登录流程，选择个人微信后直接在创建弹窗中显示二维码，登录成功后再保存机器人配置。（[#8196](https://github.com/AstrBotDevs/AstrBot/pull/8196)）
+
+### 优化
+
+- 优化个人微信登录态处理：当接口返回 session timeout 时清理旧登录态，避免继续高频请求失效会话。（[#8196](https://github.com/AstrBotDevs/AstrBot/pull/8196)）
+- 优化 AMR 音频转换质量，并复用通用音频转换逻辑简化 Opus 转换实现。（[#8153](https://github.com/AstrBotDevs/AstrBot/pull/8153)）
+- 优化 WebUI 资源选择逻辑：当 `data/dist` 中的 Dashboard 版本旧于当前核心版本时，优先使用随包内置的 Dashboard，避免旧前端资源造成兼容问题。（[#8172](https://github.com/AstrBotDevs/AstrBot/pull/8172)）
+- Dashboard 新增 Noto Sans 字体支持，改善西里尔文字等多语言文本显示效果。（[#8015](https://github.com/AstrBotDevs/AstrBot/pull/8015)）
+- 优化控制台自动滚动状态同步，刷新后能正确恢复并同步到日志显示组件。（[#8186](https://github.com/AstrBotDevs/AstrBot/pull/8186)）
+- 更新飞书、钉钉、个人微信平台文档，补充扫码创建 / 登录说明、飞书权限开通提醒，以及个人微信新版创建流程。
+- 更新 AI 插件开发文档，明确 `context.register_llm_tool()` 已弃用，并补充 LLM Tool docstring 参数解析要求。（[#8178](https://github.com/AstrBotDevs/AstrBot/pull/8178)）
+
+
+<a id="english"></a>
+
+## What's Changed (EN)
+
+### New Features
+
+- Added one-click QR setup for Feishu / Lark. When creating a bot, users can choose Feishu China or Lark Global, scan the QR code, and automatically fill `app_id`, `app_secret`, and domain settings. AstrBot also fetches the bot name for the generated config ID display. ([#8191](https://github.com/AstrBotDevs/AstrBot/pull/8191))
+- Added one-click QR setup for DingTalk. Users can create or bind a DingTalk app by scanning a QR code, automatically filling `ClientID` and `ClientSecret`, while manual setup remains available. ([#8198](https://github.com/AstrBotDevs/AstrBot/pull/8198))
+- Added QR login during Personal WeChat bot creation. The creation dialog now shows the login QR code directly and allows saving after login succeeds. ([#8196](https://github.com/AstrBotDevs/AstrBot/pull/8196))
+- Added Ollama Embedding and NVIDIA NIM Embedding provider adapters. ([#8104](https://github.com/AstrBotDevs/AstrBot/pull/8104))
+
+### Improvements
+
+- Improved Personal WeChat login-state handling by clearing stale login state when the API reports session timeout, avoiding repeated requests against an invalid session. ([#8196](https://github.com/AstrBotDevs/AstrBot/pull/8196))
+- Improved AMR audio conversion quality and simplified Opus conversion by reusing the shared audio conversion path. ([#8153](https://github.com/AstrBotDevs/AstrBot/pull/8153))
+- Improved WebUI asset selection: when `data/dist` contains a Dashboard older than the current core version, AstrBot now prefers the bundled Dashboard to avoid stale frontend compatibility issues. ([#8172](https://github.com/AstrBotDevs/AstrBot/pull/8172))
+- Added Noto Sans support to the Dashboard for better Cyrillic and multilingual text rendering. ([#8015](https://github.com/AstrBotDevs/AstrBot/pull/8015))
+- Improved console auto-scroll state synchronization so the restored preference is applied to the log display component after refresh. ([#8186](https://github.com/AstrBotDevs/AstrBot/pull/8186))
+- Updated Feishu / Lark, DingTalk, and Personal WeChat platform docs with QR setup / login instructions, Feishu permission reminders, and the new Personal WeChat creation flow.
+- Updated the AI plugin development guide to clarify that `context.register_llm_tool()` is deprecated and to document the required LLM Tool docstring argument format. ([#8178](https://github.com/AstrBotDevs/AstrBot/pull/8178))
+
+### Bug Fixes
+
+- Fixed Tencent SILK audio with a leading `\x02` byte not being detected, which could cause ffmpeg conversion failures. ([#8009](https://github.com/AstrBotDevs/AstrBot/pull/8009))
+- Fixed Personal WeChat media send failures not being surfaced properly. ([#8175](https://github.com/AstrBotDevs/AstrBot/pull/8175))
+- Fixed tool calls failing when the Claude API returns `None` arguments for no-parameter tools. ([#8136](https://github.com/AstrBotDevs/AstrBot/pull/8136))
+- Fixed `register_platform_adapter_type` and `register_permission_type` not forwarding `**kwargs` correctly. ([#8141](https://github.com/AstrBotDevs/AstrBot/pull/8141))
+- Fixed MiniMax TTS initialization crashes when timber weight config is empty or invalid JSON.
diff --git a/pyproject.toml b/pyproject.toml
index 16055d72f..22a5904a1 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -1,6 +1,6 @@
 [project]
 name = "AstrBot"
-version = "4.24.5"
+version = "4.25.0"
 description = "Easy-to-use multi-platform LLM chatbot and development framework"
 readme = "README.md"
 license = { text = "AGPL-3.0-or-later" }

From b3381c6448bbbdac37f86fa2a252bd407be02fa5 Mon Sep 17 00:00:00 2001
From: Midwich <midwich23@gmail.com>
Date: Sat, 16 May 2026 18:03:13 +0400
Subject: [PATCH 48/51] fix(webui): add Noto Sans to global font-family stack
 for Cyrillic text (#8205)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

PR #8015 added 'Noto Sans' to the Google Fonts link and CJK fallback list,
but the font was placed at the end of $cjk-sans-fallback where browsers
never reach it for Cyrillic text. The global $body-font-family also lacked
'Outfit' entirely, causing Vuetify to use CJK fonts as the primary face.

Changes:
- Remove 'Noto Sans' from the end of $cjk-sans-fallback (it is not a CJK font)
- Add 'Outfit' and 'Noto Sans' to $body-font-family before CJK fallbacks
- Update .Outfit class in _container.scss to match the new stack

This ensures:
- Latin text → Outfit
- Cyrillic text → Noto Sans (loaded by vite-plugin-webfont-dl)
- CJK text → Noto Sans SC / PingFang SC etc.

Fixes follow-up to #8015.
---
 dashboard/src/scss/_variables.scss        | 4 ++--
 dashboard/src/scss/layout/_container.scss | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/dashboard/src/scss/_variables.scss b/dashboard/src/scss/_variables.scss
index 5e5bfe97a..8fb01767f 100644
--- a/dashboard/src/scss/_variables.scss
+++ b/dashboard/src/scss/_variables.scss
@@ -9,7 +9,7 @@ $color-pack: false;
 // Global font size and border radius
 $font-size-root: 1rem;
 $border-radius-root: 8px;
-$cjk-sans-fallback: 'PingFang SC', 'Hiragino Sans GB', 'Noto Sans CJK SC', 'Microsoft YaHei', 'Noto Sans SC', 'Noto Sans' !default;
+$cjk-sans-fallback: 'PingFang SC', 'Hiragino Sans GB', 'Noto Sans CJK SC', 'Microsoft YaHei', 'Noto Sans SC' !default;
 $cjk-mono-fallback: 'PingFang SC', 'PingFang TC', 'Hiragino Sans GB', 'Noto Sans CJK SC', 'Microsoft YaHei' !default;
 $code-text-color: #111827 !default;
 
@@ -19,7 +19,7 @@ $code-text-color: #111827 !default;
   --astrbot-code-color: #{$code-text-color};
 }
 
-$body-font-family: $cjk-sans-fallback, sans-serif !default;
+$body-font-family: 'Outfit', 'Noto Sans', $cjk-sans-fallback, sans-serif !default;
 $heading-font-family: $body-font-family !default;
 $btn-font-weight: 400 !default;
 $btn-letter-spacing: 0 !default;
diff --git a/dashboard/src/scss/layout/_container.scss b/dashboard/src/scss/layout/_container.scss
index c6a1c00c9..c2e71b843 100644
--- a/dashboard/src/scss/layout/_container.scss
+++ b/dashboard/src/scss/layout/_container.scss
@@ -80,7 +80,7 @@ $sizes: (
 
 body {
   .Outfit {
-    font-family: 'Outfit', $cjk-sans-fallback, sans-serif !important;
+    font-family: $body-font-family !important;
   }
 }
 

From a1e95081bef90635d499880ea6c7017e10cfc1bd Mon Sep 17 00:00:00 2001
From: Soulter <905617992@qq.com>
Date: Sun, 17 May 2026 14:56:10 +0800
Subject: [PATCH 49/51] feat: add random suffix for weixin and dingtalk id

---
 astrbot/dashboard/routes/platform.py          | 11 +++++
 .../components/platform/AddNewPlatform.vue    | 40 +++++++++++++++++--
 2 files changed, 47 insertions(+), 4 deletions(-)

diff --git a/astrbot/dashboard/routes/platform.py b/astrbot/dashboard/routes/platform.py
index 2b3a9c7f8..e30265858 100644
--- a/astrbot/dashboard/routes/platform.py
+++ b/astrbot/dashboard/routes/platform.py
@@ -3,6 +3,9 @@
 提供统一的 webhook 回调入口，支持多个平台使用同一端口接收回调。
 """
 
+import secrets
+import string
+
 from quart import request
 
 from astrbot.core import logger
@@ -25,6 +28,10 @@ from astrbot.core.platform.sources.weixin_oc.login_registration import (
 from .route import Response, Route, RouteContext
 
 
+def _random_platform_id_suffix() -> str:
+    return "_" + "".join(secrets.choice(string.ascii_lowercase) for _ in range(4))
+
+
 class PlatformRoute(Route):
     """统一 Webhook 路由"""
 
@@ -233,6 +240,8 @@ class PlatformRoute(Route):
             if not device_code:
                 return Response().error("Missing device_code").__dict__, 400
             result = await poll_dingtalk_app_registration_once(device_code)
+            if result.get("status") == "created":
+                result["platform_id_suffix"] = _random_platform_id_suffix()
             return Response().ok(result).__dict__
 
         return Response().error(f"Unsupported action: {action}").__dict__, 400
@@ -269,6 +278,8 @@ class PlatformRoute(Route):
                 platform_config=platform_config,
                 qrcode=qrcode,
             )
+            if result.get("status") == "created":
+                result["platform_id_suffix"] = _random_platform_id_suffix()
             return Response().ok(result).__dict__
 
         return Response().error(f"Unsupported action: {action}").__dict__, 400
diff --git a/dashboard/src/components/platform/AddNewPlatform.vue b/dashboard/src/components/platform/AddNewPlatform.vue
index f079b1a68..b5466a25c 100644
--- a/dashboard/src/components/platform/AddNewPlatform.vue
+++ b/dashboard/src/components/platform/AddNewPlatform.vue
@@ -961,16 +961,48 @@ export default {
       this.$emit('show-toast', { message: message, type: 'error' });
     },
 
+    buildRandomPlatformIdSuffix() {
+      const letters = 'abcdefghijklmnopqrstuvwxyz';
+      let suffix = '_';
+      for (let i = 0; i < 4; i += 1) {
+        suffix += letters[Math.floor(Math.random() * letters.length)];
+      }
+      return suffix;
+    },
+
     handlePlatformRegistrationCreated(data) {
-      if (!this.selectedPlatformConfig || !data?.bot_name) {
+      if (!this.selectedPlatformConfig || !data) {
         return;
       }
       const currentId = String(this.selectedPlatformConfig.id || '').trim();
-      const safeBotName = String(data.bot_name || '').trim().replace(/[!:]/g, '_');
-      if (!currentId || !safeBotName) {
+      const platformType = this.selectedPlatformConfig.type;
+      if (!currentId) {
         return;
       }
-      const suffix = `-${safeBotName}`;
+
+      let suffix = '';
+      const explicitSuffix = String(data.platform_id_suffix || '').trim().replace(/[!:]/g, '_');
+      if (explicitSuffix) {
+        suffix = explicitSuffix.startsWith('_') || explicitSuffix.startsWith('-')
+          ? explicitSuffix
+          : `_${explicitSuffix}`;
+      } else if (data.bot_name) {
+        const safeBotName = String(data.bot_name || '').trim().replace(/[!:]/g, '_');
+        if (safeBotName) {
+          suffix = `-${safeBotName}`;
+        }
+      } else if (platformType === 'weixin_oc' || platformType === 'dingtalk') {
+        suffix = this.buildRandomPlatformIdSuffix();
+      }
+
+      if (!suffix) {
+        return;
+      }
+
+      if ((platformType === 'weixin_oc' || platformType === 'dingtalk') && /_[a-z]{4}$/.test(currentId)) {
+        return;
+      }
+
       this.selectedPlatformConfig.id = currentId.endsWith(suffix)
         ? currentId
         : `${currentId}${suffix}`;

From d609f23b7136e30adf38929bac6402a581148ffc Mon Sep 17 00:00:00 2001
From: Soulter <905617992@qq.com>
Date: Sun, 17 May 2026 15:01:59 +0800
Subject: [PATCH 50/51] chore: bump version to 4.25.1

---
 astrbot/cli/__init__.py        |  2 +-
 astrbot/core/config/default.py |  2 +-
 changelogs/v4.25.1.md          | 26 ++++++++++++++++++++++++++
 pyproject.toml                 |  2 +-
 4 files changed, 29 insertions(+), 3 deletions(-)
 create mode 100644 changelogs/v4.25.1.md

diff --git a/astrbot/cli/__init__.py b/astrbot/cli/__init__.py
index 8900bf5ca..bf4d023cf 100644
--- a/astrbot/cli/__init__.py
+++ b/astrbot/cli/__init__.py
@@ -1 +1 @@
-__version__ = "4.25.0"
+__version__ = "4.25.1"
diff --git a/astrbot/core/config/default.py b/astrbot/core/config/default.py
index 7f7140a9c..ce79559bd 100644
--- a/astrbot/core/config/default.py
+++ b/astrbot/core/config/default.py
@@ -5,7 +5,7 @@ import os
 from astrbot.core.computer.booters.cua_defaults import CUA_DEFAULT_CONFIG
 from astrbot.core.utils.astrbot_path import get_astrbot_data_path
 
-VERSION = "4.25.0"
+VERSION = "4.25.1"
 DB_PATH = os.path.join(get_astrbot_data_path(), "data_v4.db")
 PERSONAL_WECHAT_CONFIG_METADATA = {
     "weixin_oc_base_url": {
diff --git a/changelogs/v4.25.1.md b/changelogs/v4.25.1.md
new file mode 100644
index 000000000..ed617c871
--- /dev/null
+++ b/changelogs/v4.25.1.md
@@ -0,0 +1,26 @@
+- [更新日志(简体中文)](#chinese)
+- [Changelog(English)](#english)
+
+<a id="chinese"></a>
+
+## What's Changed
+
+### 优化
+
+- 个人微信和钉钉扫码创建成功后，平台配置 ID 会自动追加随机 4 位小写字母后缀，例如 `_abcd`，降低多个扫码创建配置之间的 ID 冲突概率。
+
+### 修复
+
+- 修复 WebUI 全局字体栈未完整覆盖西里尔文字场景的问题，改善俄文等多语言文本显示效果。（[#8205](https://github.com/AstrBotDevs/AstrBot/pull/8205)）
+
+<a id="english"></a>
+
+## What's Changed (EN)
+
+### Improvements
+
+- Personal WeChat and DingTalk QR setup now append a random four-letter lowercase suffix to the generated platform config ID, such as `_abcd`, reducing ID conflicts across multiple scan-created configs.
+
+### Bug Fixes
+
+- Fixed the WebUI global font-family stack so Cyrillic text and other multilingual content render more consistently. ([#8205](https://github.com/AstrBotDevs/AstrBot/pull/8205))
diff --git a/pyproject.toml b/pyproject.toml
index 22a5904a1..c3ff88b74 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -1,6 +1,6 @@
 [project]
 name = "AstrBot"
-version = "4.25.0"
+version = "4.25.1"
 description = "Easy-to-use multi-platform LLM chatbot and development framework"
 readme = "README.md"
 license = { text = "AGPL-3.0-or-later" }

From dceacd5a879737a777672f9ae1039752b3795743 Mon Sep 17 00:00:00 2001
From: Soulter <905617992@qq.com>
Date: Sun, 17 May 2026 15:07:39 +0800
Subject: [PATCH 51/51] docs: update release version instructions in AGENTS.md

---
 AGENTS.md | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/AGENTS.md b/AGENTS.md
index 9e40cc004..e8fe4b355 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -52,3 +52,10 @@ ruff check .
 
 1. Title format: use conventional commit messages
 2. Use English to write PR title and descriptions.
+
+## Release versions
+
+1. Replace current version name to specific version name.
+2. Write changelog in `changelogs/`, you can refer to the full commit messages between the latest tag to the latest commit.
+3. Make and push a commit into master branch with message format like: `chore: bump version to 4.25.0`
+4. Create a tag and push the tag. For example: `git tag v4.25.0 && git push origin v4.25.0`
\ No newline at end of file