From 52b369680b937005f30ba3cdfaf91d6d441be5c5 Mon Sep 17 00:00:00 2001
From: Michael Chihlas <michael@resolutionflow.com>
Date: Thu, 16 Apr 2026 01:36:27 +0000
Subject: [PATCH 01/36] docs: add PSA ticket management design spec

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 ...2026-04-16-psa-ticket-management-design.md | 410 ++++++++++++++++++
 1 file changed, 410 insertions(+)
 create mode 100644 docs/superpowers/specs/2026-04-16-psa-ticket-management-design.md

diff --git a/docs/superpowers/specs/2026-04-16-psa-ticket-management-design.md b/docs/superpowers/specs/2026-04-16-psa-ticket-management-design.md
new file mode 100644
index 00000000..8eea9a00
--- /dev/null
+++ b/docs/superpowers/specs/2026-04-16-psa-ticket-management-design.md
@@ -0,0 +1,410 @@
+# PSA Ticket Management — Design Spec
+
+**Date:** 2026-04-16  
+**Status:** Approved  
+**Author:** Michael Chihlas + Claude  
+
+---
+
+## Overview
+
+Add PSA ticket management to ResolutionFlow so MSP engineers can view, manage, and create ConnectWise tickets without leaving the app. The feature surfaces in three places: a dedicated Tickets page, a dashboard widget on QuickStartPage, and a spin-off ticket flow inside ResolutionAssist sessions.
+
+---
+
+## Decisions Made
+
+| Question | Decision |
+|----------|----------|
+| Where does ticket management live? | Both: dedicated `/tickets` page + dashboard widget on QuickStartPage |
+| List layout | Flat list with rich filters + pagination |
+| Row density | Compact single-line rows |
+| Ticket detail | Right-side slide-out panel (~50% width) |
+| Ticket creation | Two-tab modal: Quick Create (AI) + Full Form |
+| Resource member list | All CW members, RF-mapped users visually highlighted |
+| Architecture | Dedicated `ticket_service.py` + normalized DTOs |
+
+---
+
+## Section 1 — Backend
+
+### New Endpoints
+
+All added to `backend/app/api/endpoints/integrations.py`, backed by `backend/app/services/ticket_service.py`.
+
+| Method | Path | Purpose |
+|--------|------|---------|
+| `POST` | `/integrations/psa/tickets` | Create a ticket |
+| `PATCH` | `/integrations/psa/tickets/{id}/status` | Update ticket status |
+| `GET` | `/integrations/psa/tickets/{id}/resources` | List current assignees |
+| `POST` | `/integrations/psa/tickets/{id}/resources` | Add a resource (member) |
+| `DELETE` | `/integrations/psa/tickets/{id}/resources/{member_id}` | Remove a resource |
+| `POST` | `/integrations/psa/tickets/ai-parse` | Natural language → structured pre-fill payload |
+
+Existing endpoints (`search_tickets`, `get_ticket`, `get_ticket_statuses`, `list_members`, `list_boards`) are unchanged.
+
+### ticket_service.py
+
+New service wrapping the PSA provider for ticket mutations. Keeps `integrations.py` clean and PSA-agnostic for future Autotask support.
+
+Methods:
+- `create_ticket(account_id, payload) → PSATicketCreated`
+- `add_resource(account_id, ticket_id, member_id) → PSAResource`
+- `remove_resource(account_id, ticket_id, member_id) → None`
+- `update_status(account_id, ticket_id, status_id) → PSATicketStatusUpdate`
+- `list_resources(account_id, ticket_id) → list[PSAResource]`
+
+### PSA Provider — New Abstract Methods
+
+Four explicit methods added to `PSAProvider` base class and `ConnectWiseProvider`:
+
+```python
+async def list_resources(self, ticket_id: int) -> list[PSAResource]: ...
+async def add_resource(self, ticket_id: int, member_id: int) -> PSAResource: ...
+async def remove_resource(self, ticket_id: int, member_id: int) -> None: ...
+async def create_ticket(self, payload: TicketCreatePayload) -> PSATicketCreated: ...
+```
+
+`update_status` already exists on the provider — no change needed there.
+
+ConnectWise implementation:
+- `list_resources` → `GET /service/tickets/{id}/members`
+- `add_resource` → `POST /service/tickets/{id}/members`
+- `remove_resource` → `DELETE /service/tickets/{id}/members/{member_id}`
+- `create_ticket` → `POST /service/tickets`
+
+### Normalized DTOs (Pydantic Schemas)
+
+New schemas in `backend/app/schemas/psa_tickets.py`:
+
+```python
+class PSAResource(BaseModel):
+    member_id: int
+    member_name: str
+    member_identifier: str        # CW username
+    is_rf_user: bool              # True if mapped in RF member mappings
+
+class PSATicketCreated(BaseModel):
+    id: int
+    summary: str
+    board_name: str
+    status_name: str
+    priority_name: str
+    company_name: str
+    resources: list[PSAResource]
+
+class PSATicketStatusUpdate(BaseModel):
+    ticket_id: int
+    previous_status: str
+    new_status: str
+
+class TicketCreatePayload(BaseModel):
+    summary: str
+    company_id: int
+    board_id: int
+    status_id: int
+    priority_id: int
+    description: str | None = None
+    assigned_member_id: int | None = None
+
+class TicketListResponse(BaseModel):
+    items: list[PSATicketSearchResult]   # existing schema
+    total: int
+    page: int
+    page_size: int
+```
+
+`search_tickets` endpoint updated to return `TicketListResponse` (was a plain list). Backend sorts results by `priority desc, dateEntered desc` via CW `orderBy` param.
+
+### AI Parse Endpoint
+
+`POST /integrations/psa/tickets/ai-parse`
+
+Request:
+```json
+{ "prompt": "New ticket for Acme Corp, Outlook not syncing, high priority, assign to me" }
+```
+
+Response — all pre-fill fields nullable, explicit `missing_fields` and `warnings`:
+```json
+{
+  "summary": "Outlook not syncing",
+  "company_id": 42,
+  "board_id": null,
+  "priority_id": null,
+  "status_id": null,
+  "assigned_member_id": 17,
+  "description": "User reports Outlook calendar not syncing since yesterday morning.",
+  "missing_fields": ["board_id", "priority_id", "status_id"],
+  "warnings": ["Could not determine board from context"]
+}
+```
+
+Frontend uses `missing_fields` to highlight required fields still needing engineer input. No ticket is created at this step — it is a parse-only endpoint.
+
+---
+
+## Section 2 — Frontend Architecture
+
+### New Files
+
+| File | Purpose |
+|------|---------|
+| `pages/TicketsPage.tsx` | Main tickets page — filter bar + paginated list |
+| `components/tickets/TicketListRow.tsx` | Compact single-line row |
+| `components/tickets/TicketFilterBar.tsx` | Config-driven filter bar (7 filters) |
+| `components/tickets/TicketDetailPanel.tsx` | Slide-out panel orchestrator |
+| `components/tickets/detail/TicketDetailHeader.tsx` | ID, summary, company, board, SLA |
+| `components/tickets/detail/TicketResourceManager.tsx` | Assignee list + add/remove |
+| `components/tickets/detail/TicketNotesFeed.tsx` | Chronological notes history |
+| `components/tickets/detail/TicketAddNote.tsx` | Inline note composer |
+| `components/tickets/detail/TicketConfigs.tsx` | Attached devices/configs |
+| `components/tickets/detail/TicketRelated.tsx` | Related tickets list |
+| `components/tickets/NewTicketModal.tsx` | Two-tab modal (owns draft state) |
+| `components/tickets/AiTicketParseForm.tsx` | Prompt input → emits parsed values upward |
+| `api/tickets.ts` | All ticket API calls (typed, `.then(r => r.data)` pattern) |
+| `types/tickets.ts` | TypeScript interfaces mirroring normalized DTOs |
+
+### Existing Files Touched
+
+- `router.tsx` — add `/tickets` route (lazy, via `lazyWithRetry`)
+- `AppLayout.tsx` — add "Tickets" nav item in sidebar under RESOLVE section
+- `AssistantChatPage.tsx` — handle `create_spin_off_ticket` action type in TaskLane + add "New Ticket" button to session header
+- `QuickStartPage.tsx` — add `MyQueueWidget` component in collapsible Dashboard section
+
+### Shared Types (`types/tickets.ts`)
+
+```typescript
+export interface TicketFilters {
+  search: string;
+  board_id: number | null;
+  status_id: number | null;
+  priority: string | null;
+  company_id: number | null;
+  assigned: 'me' | 'unassigned' | 'all' | number; // number = specific member_id
+  include_closed: boolean;
+}
+
+export interface TicketCreationPayload {
+  summary: string;
+  company_id: number | null;
+  board_id: number | null;
+  status_id: number | null;
+  priority_id: number | null;
+  description: string;
+  assigned_member_id: number | null;
+}
+
+export interface AiParseResponse {
+  summary: string | null;
+  company_id: number | null;
+  board_id: number | null;
+  priority_id: number | null;
+  status_id: number | null;
+  assigned_member_id: number | null;
+  description: string | null;
+  missing_fields: string[];
+  warnings: string[];
+}
+
+export interface PSAResource {
+  member_id: number;
+  member_name: string;
+  member_identifier: string;
+  is_rf_user: boolean;
+}
+
+// TicketSearchResult is the existing PSATicketSearchResult type from types/integrations.ts
+// Re-export or import from there — do not redefine
+export interface TicketListResponse {
+  items: PSATicketSearchResult[];
+  total: number;
+  page: number;
+  page_size: number;
+}
+```
+
+### TicketsPage — Filter & Pagination State
+
+All filter and pagination state lives in URL query params via `useSearchParams`:
+
+| Param | Type | Default |
+|-------|------|---------|
+| `search` | string | `""` |
+| `board` | number | — |
+| `status` | number | — |
+| `priority` | string | — |
+| `company` | number | — |
+| `assigned` | `me \| unassigned \| all \| {id}` | `all` |
+| `closed` | boolean | `false` |
+| `page` | number | `1` |
+
+Filter changes reset `page` to 1. Pagination: page size of 25. Controls show "Showing X–Y of Z tickets". Next disabled when `page * 25 >= total`.
+
+### TicketFilterBar — Config-Driven
+
+Filters defined as a `FILTER_CONFIG` array. Each entry:
+```typescript
+{ key: keyof TicketFilters, label: string, type: 'text' | 'select' | 'toggle', loadOptions?: () => Promise<Option[]> }
+```
+Adding or removing a filter is a one-line config change, not a component edit.
+
+### TicketDetailPanel — Optimistic Hydration
+
+1. Panel opens immediately with list row data (id, summary, company, board, status, priority) — no loading state for these fields
+2. Two parallel fetches fire: full ticket detail + `list_resources`
+3. Detail sections (contact, notes, configs, related) render skeletons until hydrated
+4. Resources section renders skeleton until hydrated
+
+### NewTicketModal — State Ownership
+
+- `NewTicketModal` owns the `TicketCreationPayload` draft state
+- `AiTicketParseForm` is a pure emitter: accepts a prompt string, calls `ai-parse`, fires `onParsed(Partial<TicketCreationPayload>)` upward
+- Modal merges parsed values into draft, highlights `missing_fields` with visual indicators
+- Two tabs: **Quick Create** (AI prompt → review) | **Full Form** (manual entry)
+- Default tab: Quick Create if AI-triggered, Full Form if engineer-initiated
+- Initial props: `initialValues?: Partial<TicketCreationPayload>` — used for spin-off pre-population
+
+---
+
+## Section 3 — ResolutionAssist Integration
+
+### Two Trigger Paths
+
+**1. AI-suggested (via `[ACTIONS]` marker)**
+
+When the AI identifies a second distinct issue during a session, it emits:
+```
+[ACTIONS]
+create_spin_off_ticket: "Printer offline on 2nd floor"
+[/ACTIONS]
+```
+
+Action payload shape (parsed by `unified_chat_service.py`):
+```typescript
+{
+  type: "create_spin_off_ticket",
+  label: string,           // displayed as button text in TaskLane
+  summary_hint?: string    // pre-populates the Quick Create prompt input only
+}
+```
+
+`summary_hint` populates the AI prompt input, not the summary field directly. The engineer still runs the AI parse step and reviews all output. This prevents bypassing review with potentially hallucinated values.
+
+**2. Engineer-initiated**
+
+A "New Ticket" button in the ResolutionAssist session header. Always visible regardless of AI suggestion. Opens `NewTicketModal` with Full Form tab as default.
+
+### Both Paths — NewTicketModal Pre-population
+
+When a session has a linked ticket, the modal receives:
+```typescript
+initialValues: {
+  company_id: linkedTicket.company_id,   // from session's linked ticket
+  board_id: linkedTicket.board_id,
+}
+```
+
+When no linked ticket exists: `initialValues` is omitted. `company_id` and `board_id` render empty, requiring manual selection. No silent defaults, no errors.
+
+### TaskLane Action Lifecycle
+
+- Opening the modal does **not** remove the action from TaskLane
+- Dismissing the modal without submitting leaves the action visible
+- Successful ticket creation removes the action and shows a success toast: `"Ticket #1042 created in ConnectWise"`
+
+### System Prompt Addition
+
+New rule added to the ResolutionAssist system prompt:
+
+> When you identify a second distinct issue that is separate from the primary topic of this session, suggest creating a spin-off ticket using the `[ACTIONS]` marker with type `create_spin_off_ticket`. Only suggest this when the issue is clearly separate — do not suggest for every tangential mention.
+
+### Backend
+
+`create_spin_off_ticket` added to the recognized action types list in `flowpilot_engine.py`. No new backend endpoints — the modal reuses `POST /integrations/psa/tickets` and `POST /integrations/psa/tickets/ai-parse`.
+
+---
+
+## Section 4 — Dashboard Widget (QuickStartPage)
+
+### Placement
+
+In the collapsible Dashboard section of `QuickStartPage`, alongside `PendingEscalations` and `ActiveFlowPilotSessions`. Component: `MyQueueWidget`.
+
+### Data Fetching
+
+On mount: `GET /integrations/psa/member-mappings` first to detect mapping state, then `searchTickets({ assigned_to_me: true, include_closed: false, page_size: 5 })` if a mapping exists for the current user.
+
+Member mapping detection is explicit — the widget checks the mappings response, not the ticket result. "No mapping" and "no tickets" are distinct states.
+
+### Widget States
+
+| State | Condition | Display |
+|-------|-----------|---------|
+| Hidden | No PSA connection | Widget not rendered |
+| Prompt | PSA connected, no member mapping | "Map your PSA member to see your queue" → `/account/integrations` |
+| Loading | Fetching | 3 skeleton rows |
+| Populated | Tickets returned | Up to 5 compact rows + "View All Tickets →" |
+| Empty | No assigned open tickets | "No open tickets assigned to you" — muted, no CTA |
+| Error | PSA fetch fails | Silent — returns `[]`, no toast (per Lesson 111) |
+
+### Row Display
+
+Compact row matching Tickets page style: `#ID · Summary · Status badge · Priority dot`
+
+Clicking a row opens `TicketDetailPanel` as a right-side sheet rendered at the `QuickStartPage` level. Does **not** navigate away.
+
+### "View All Tickets" Link
+
+Links to `/tickets?assigned=me`. `TicketsPage` reads `assigned` from `useSearchParams` on mount and applies it as the initial filter state — consistent with Section 2 URL param contract.
+
+### Sorting
+
+Backend `search_tickets()` adds `orderBy=priority desc,dateEntered desc` to the CW API query. Widget does not sort client-side.
+
+---
+
+## Files Changed Summary
+
+### New Backend Files
+- `backend/app/services/ticket_service.py`
+- `backend/app/schemas/psa_tickets.py`
+
+### Modified Backend Files
+- `backend/app/api/endpoints/integrations.py` — 6 new endpoints, update search to return `TicketListResponse`
+- `backend/app/services/psa/base.py` — 4 new abstract methods
+- `backend/app/services/psa/connectwise/provider.py` — implement 4 new methods
+- `backend/app/services/flowpilot_engine.py` — add `create_spin_off_ticket` action type
+- `backend/app/services/unified_chat_service.py` — parse `create_spin_off_ticket` from `[ACTIONS]`
+
+### New Frontend Files
+- `frontend/src/pages/TicketsPage.tsx`
+- `frontend/src/api/tickets.ts`
+- `frontend/src/types/tickets.ts`
+- `frontend/src/components/tickets/TicketListRow.tsx`
+- `frontend/src/components/tickets/TicketFilterBar.tsx`
+- `frontend/src/components/tickets/TicketDetailPanel.tsx`
+- `frontend/src/components/tickets/NewTicketModal.tsx`
+- `frontend/src/components/tickets/AiTicketParseForm.tsx`
+- `frontend/src/components/tickets/detail/TicketDetailHeader.tsx`
+- `frontend/src/components/tickets/detail/TicketResourceManager.tsx`
+- `frontend/src/components/tickets/detail/TicketNotesFeed.tsx`
+- `frontend/src/components/tickets/detail/TicketAddNote.tsx`
+- `frontend/src/components/tickets/detail/TicketConfigs.tsx`
+- `frontend/src/components/tickets/detail/TicketRelated.tsx`
+
+### Modified Frontend Files
+- `frontend/src/router.tsx` — `/tickets` route
+- `frontend/src/components/layout/AppLayout.tsx` — Tickets nav item
+- `frontend/src/pages/AssistantChatPage.tsx` — spin-off action + New Ticket button
+- `frontend/src/pages/QuickStartPage.tsx` — MyQueueWidget
+
+---
+
+## Out of Scope
+
+- Autotask provider implementation (schema-ready, not implemented)
+- Time entry creation from ticket detail (provider method exists, no UI)
+- Ticket editing beyond status (summary, description, priority changes)
+- Bulk ticket operations
+- Real-time ticket updates / polling
-- 
2.49.1


From 2b3d52ad77588457ccf0b04733fca8474bd8bcfd Mon Sep 17 00:00:00 2001
From: Michael Chihlas <michael@resolutionflow.com>
Date: Thu, 16 Apr 2026 01:44:34 +0000
Subject: [PATCH 02/36] =?UTF-8?q?docs:=20fix=20PSA=20ticket=20management?=
 =?UTF-8?q?=20spec=20=E2=80=94=20API=20contract,=20actions=20format,=20fil?=
 =?UTF-8?q?e=20routing?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- Explicitly call out search_tickets breaking change and all existing callers
- Fix [ACTIONS] marker to use JSON array format matching existing parser
- Route system prompt change to assistant_chat_service.py, not flowpilot_engine
- Pivot detail panel hydration to existing getTicketContext + listResources

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 ...2026-04-16-psa-ticket-management-design.md | 65 +++++++++++++------
 1 file changed, 44 insertions(+), 21 deletions(-)

diff --git a/docs/superpowers/specs/2026-04-16-psa-ticket-management-design.md b/docs/superpowers/specs/2026-04-16-psa-ticket-management-design.md
index 8eea9a00..9b709e79 100644
--- a/docs/superpowers/specs/2026-04-16-psa-ticket-management-design.md
+++ b/docs/superpowers/specs/2026-04-16-psa-ticket-management-design.md
@@ -41,7 +41,16 @@ All added to `backend/app/api/endpoints/integrations.py`, backed by `backend/app
 | `DELETE` | `/integrations/psa/tickets/{id}/resources/{member_id}` | Remove a resource |
 | `POST` | `/integrations/psa/tickets/ai-parse` | Natural language → structured pre-fill payload |
 
-Existing endpoints (`search_tickets`, `get_ticket`, `get_ticket_statuses`, `list_members`, `list_boards`) are unchanged.
+**Breaking change — `search_tickets` response shape updated to `TicketListResponse`.**
+The existing `/integrations/psa/tickets/search` endpoint currently returns `list[PSATicketSearchResult]`. This spec changes it to return `TicketListResponse` (adds `total`, `page`, `page_size` wrapper).
+
+Current callers that must be migrated:
+- `integrationsApi.searchTickets()` in `frontend/src/api/integrations.ts` (line 18) — update return type
+- `integrationsApi.searchTicketsQueue()` in `frontend/src/api/integrations.ts` (line 20) — update return type
+- `frontend/src/components/dashboard/TicketQueue.tsx` — update to read `.items` from response
+- `frontend/src/components/session/TicketPickerModal.tsx` — update to read `.items` from response
+
+All other existing endpoints (`get_ticket`, `get_ticket_statuses`, `list_members`, `list_boards`) are unchanged.
 
 ### ticket_service.py
 
@@ -251,10 +260,16 @@ Adding or removing a filter is a one-line config change, not a component edit.
 
 ### TicketDetailPanel — Optimistic Hydration
 
+The panel uses the **existing** `/integrations/psa/tickets/{id}/context` endpoint (client: `psaContextApi.getTicketContext()` in `frontend/src/api/psaContext.ts`) which already returns company, contact, configurations, notes, and related tickets in one call. This avoids creating redundant endpoints.
+
 1. Panel opens immediately with list row data (id, summary, company, board, status, priority) — no loading state for these fields
-2. Two parallel fetches fire: full ticket detail + `list_resources`
-3. Detail sections (contact, notes, configs, related) render skeletons until hydrated
-4. Resources section renders skeleton until hydrated
+2. Two parallel fetches fire on open:
+   - `psaContextApi.getTicketContext(ticketId)` — hydrates contact, notes, configs, related tickets
+   - `ticketsApi.listResources(ticketId)` — hydrates assignees (new endpoint)
+3. All detail sections (contact, notes, configs, related) render skeletons until `getTicketContext` resolves
+4. Resources section renders skeleton until `listResources` resolves
+
+`get_ticket` (the simpler single-ticket endpoint) is **not** used by the panel — `getTicketContext` is a strict superset of the data needed.
 
 ### NewTicketModal — State Ownership
 
@@ -273,23 +288,23 @@ Adding or removing a filter is a one-line config change, not a component edit.
 
 **1. AI-suggested (via `[ACTIONS]` marker)**
 
-When the AI identifies a second distinct issue during a session, it emits:
+When the AI identifies a second distinct issue during a session, it emits a JSON array inside the `[ACTIONS]` marker — matching the exact format `_parse_actions_marker()` in `unified_chat_service.py` expects (a list of objects with `label`, `command`, `description`):
+
 ```
 [ACTIONS]
-create_spin_off_ticket: "Printer offline on 2nd floor"
+[
+  {
+    "label": "Create ticket: Printer offline on 2nd floor",
+    "command": "create_spin_off_ticket",
+    "description": "Printer offline on 2nd floor"
+  }
+]
 [/ACTIONS]
 ```
 
-Action payload shape (parsed by `unified_chat_service.py`):
-```typescript
-{
-  type: "create_spin_off_ticket",
-  label: string,           // displayed as button text in TaskLane
-  summary_hint?: string    // pre-populates the Quick Create prompt input only
-}
-```
+The existing `_parse_actions_marker()` parser in `unified_chat_service.py` already handles this format — no parser changes needed. The frontend reads `action.command === "create_spin_off_ticket"` to render the "Create Ticket" button in TaskLane, and uses `action.description` as the `summary_hint` pre-populated into the Quick Create prompt input.
 
-`summary_hint` populates the AI prompt input, not the summary field directly. The engineer still runs the AI parse step and reviews all output. This prevents bypassing review with potentially hallucinated values.
+`summary_hint` (from `action.description`) populates the AI prompt input only, not the summary field directly. The engineer still runs the AI parse step and reviews all output. This prevents bypassing review with potentially hallucinated values.
 
 **2. Engineer-initiated**
 
@@ -315,13 +330,17 @@ When no linked ticket exists: `initialValues` is omitted. `company_id` and `boar
 
 ### System Prompt Addition
 
-New rule added to the ResolutionAssist system prompt:
+New rule added to `ASSISTANT_SYSTEM_PROMPT` in `backend/app/services/assistant_chat_service.py`:
 
-> When you identify a second distinct issue that is separate from the primary topic of this session, suggest creating a spin-off ticket using the `[ACTIONS]` marker with type `create_spin_off_ticket`. Only suggest this when the issue is clearly separate — do not suggest for every tangential mention.
+> When you identify a second distinct issue that is clearly separate from the primary topic of this session, suggest creating a spin-off ticket using the `[ACTIONS]` marker. Use `"command": "create_spin_off_ticket"` and put the issue description in `"description"`. Only suggest this when the issue is genuinely separate — do not suggest for every tangential mention.
 
 ### Backend
 
-`create_spin_off_ticket` added to the recognized action types list in `flowpilot_engine.py`. No new backend endpoints — the modal reuses `POST /integrations/psa/tickets` and `POST /integrations/psa/tickets/ai-parse`.
+- **`assistant_chat_service.py`** — system prompt updated with spin-off ticket instruction (above)
+- **`unified_chat_service.py`** — no parser changes needed; the existing `_parse_actions_marker()` already handles the JSON array format. The frontend reads `command === "create_spin_off_ticket"` to route the action
+- **`flowpilot_engine.py`** — no changes needed for this feature; guided FlowPilot sessions do not use this action type in the current scope
+
+No new backend endpoints — the modal reuses `POST /integrations/psa/tickets` and `POST /integrations/psa/tickets/ai-parse`.
 
 ---
 
@@ -374,8 +393,9 @@ Backend `search_tickets()` adds `orderBy=priority desc,dateEntered desc` to the
 - `backend/app/api/endpoints/integrations.py` — 6 new endpoints, update search to return `TicketListResponse`
 - `backend/app/services/psa/base.py` — 4 new abstract methods
 - `backend/app/services/psa/connectwise/provider.py` — implement 4 new methods
-- `backend/app/services/flowpilot_engine.py` — add `create_spin_off_ticket` action type
-- `backend/app/services/unified_chat_service.py` — parse `create_spin_off_ticket` from `[ACTIONS]`
+- `backend/app/services/assistant_chat_service.py` — add spin-off ticket rule to `ASSISTANT_SYSTEM_PROMPT`
+- ~~`backend/app/services/flowpilot_engine.py`~~ — no changes (FlowPilot out of scope for this feature)
+- ~~`backend/app/services/unified_chat_service.py`~~ — no changes (existing `[ACTIONS]` parser handles the format)
 
 ### New Frontend Files
 - `frontend/src/pages/TicketsPage.tsx`
@@ -396,8 +416,11 @@ Backend `search_tickets()` adds `orderBy=priority desc,dateEntered desc` to the
 ### Modified Frontend Files
 - `frontend/src/router.tsx` — `/tickets` route
 - `frontend/src/components/layout/AppLayout.tsx` — Tickets nav item
-- `frontend/src/pages/AssistantChatPage.tsx` — spin-off action + New Ticket button
+- `frontend/src/pages/AssistantChatPage.tsx` — handle `create_spin_off_ticket` command in action renderer + add "New Ticket" button to session header
 - `frontend/src/pages/QuickStartPage.tsx` — MyQueueWidget
+- `frontend/src/api/integrations.ts` — update `searchTickets()` and `searchTicketsQueue()` return types to `TicketListResponse`
+- `frontend/src/components/dashboard/TicketQueue.tsx` — read `.items` from paginated response
+- `frontend/src/components/session/TicketPickerModal.tsx` — read `.items` from paginated response
 
 ---
 
-- 
2.49.1


From c8b68ad26d565f8c27a330278f2826801ee296c4 Mon Sep 17 00:00:00 2001
From: Michael Chihlas <michael@resolutionflow.com>
Date: Thu, 16 Apr 2026 01:49:39 +0000
Subject: [PATCH 03/36] =?UTF-8?q?docs:=20fix=20PSA=20ticket=20management?=
 =?UTF-8?q?=20spec=20=E2=80=94=20pagination=20source,=20widget,=20linked?=
 =?UTF-8?q?=20ticket=20IDs?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- Define PaginatedTicketResult provider type + parallel count fetch via CW /count endpoint
- Fix dashboard widget: updates existing TicketQueue (not new), uses searchTicketsQueue
- Fix NewTicketModal prefill: expand PSATicketInfo with company_id/board_id fields
- Correct Dashboard section description: not collapsible, TicketQueue already exists

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 ...2026-04-16-psa-ticket-management-design.md | 63 ++++++++++++++++---
 1 file changed, 54 insertions(+), 9 deletions(-)

diff --git a/docs/superpowers/specs/2026-04-16-psa-ticket-management-design.md b/docs/superpowers/specs/2026-04-16-psa-ticket-management-design.md
index 9b709e79..16b9b4ef 100644
--- a/docs/superpowers/specs/2026-04-16-psa-ticket-management-design.md
+++ b/docs/superpowers/specs/2026-04-16-psa-ticket-management-design.md
@@ -63,10 +63,32 @@ Methods:
 - `update_status(account_id, ticket_id, status_id) → PSATicketStatusUpdate`
 - `list_resources(account_id, ticket_id) → list[PSAResource]`
 
-### PSA Provider — New Abstract Methods
+### PSA Provider — New Abstract Methods and Paginated Result Type
 
-Four explicit methods added to `PSAProvider` base class and `ConnectWiseProvider`:
+**New type in `backend/app/services/psa/types.py`:**
+```python
+@dataclass
+class PaginatedTicketResult:
+    items: list[PSATicket]
+    total: int
+    page: int
+    page_size: int
+```
 
+**`search_tickets` signature change** — updated on both the abstract base and `ConnectWiseProvider` to return `PaginatedTicketResult` instead of `list[PSATicket]`:
+```python
+# base.py
+@abstractmethod
+async def search_tickets(self, query: str, **filters) -> PaginatedTicketResult: ...
+```
+
+**How `total` is fetched** — ConnectWise provides `GET /service/tickets/count?conditions=...` which accepts the same conditions string as the page fetch. The `ConnectWiseProvider.search_tickets()` implementation fires two parallel requests:
+1. `GET /service/tickets?conditions=...&pageSize=N&page=N` — the current page
+2. `GET /service/tickets/count?conditions=...` — returns `{ "count": 142 }`
+
+Both use the same built conditions string. `asyncio.gather()` runs them in parallel. The count result is used to populate `PaginatedTicketResult.total`.
+
+**New abstract methods** added to `PSAProvider` base and `ConnectWiseProvider`:
 ```python
 async def list_resources(self, ticket_id: int) -> list[PSAResource]: ...
 async def add_resource(self, ticket_id: int, member_id: int) -> PSAResource: ...
@@ -312,10 +334,28 @@ A "New Ticket" button in the ResolutionAssist session header. Always visible reg
 
 ### Both Paths — NewTicketModal Pre-population
 
-When a session has a linked ticket, the modal receives:
+**The linked ticket IDs problem:** The current `PSATicketInfo` type in `frontend/src/types/integrations.ts` only exposes `company_name` and `board_name` — not `company_id` or `board_id`. The modal needs the numeric IDs to pre-populate the form selects.
+
+**Fix:** Expand `PSATicketInfo` in `types/integrations.ts` to add the optional ID fields:
+```typescript
+export interface PSATicketInfo {
+  id: string
+  summary: string
+  company_name: string | null
+  board_name: string | null
+  status_name: string | null
+  priority_name: string | null
+  company_id: number | null   // add
+  board_id: number | null     // add
+}
+```
+
+These fields are already returned by the CW API in `get_ticket()` — update `_map_ticket()` in `ConnectWiseProvider` and the `PSATicketInfo` Pydantic schema to pass them through.
+
+`AssistantChatPage` already stores the linked ticket as `linkedTicket: PSATicketInfo | null` in local state (populated when a ticket is linked via `TicketLinkIndicator`). Once `PSATicketInfo` includes the IDs, the modal receives:
 ```typescript
 initialValues: {
-  company_id: linkedTicket.company_id,   // from session's linked ticket
+  company_id: linkedTicket.company_id,
   board_id: linkedTicket.board_id,
 }
 ```
@@ -348,11 +388,13 @@ No new backend endpoints — the modal reuses `POST /integrations/psa/tickets` a
 
 ### Placement
 
-In the collapsible Dashboard section of `QuickStartPage`, alongside `PendingEscalations` and `ActiveFlowPilotSessions`. Component: `MyQueueWidget`.
+`TicketQueue` **already exists** in `QuickStartPage` (line 64, below `ActiveFlowPilotSessions`, above the Dashboard section). It currently auto-hides if no PSA connection exists. This spec updates the existing `TicketQueue` component — it is **not** a new widget and does not need to be added to `QuickStartPage`. The Dashboard section below it is not collapsible.
 
 ### Data Fetching
 
-On mount: `GET /integrations/psa/member-mappings` first to detect mapping state, then `searchTickets({ assigned_to_me: true, include_closed: false, page_size: 5 })` if a mapping exists for the current user.
+On mount: `GET /integrations/psa/member-mappings` first to detect mapping state, then `integrationsApi.searchTicketsQueue({ assigned_to_me: true, include_closed: false, page_size: 5 })` if a mapping exists for the current user.
+
+`searchTicketsQueue` is used (not `searchTickets`) because it already accepts `assigned_to_me` and `page_size` params. Its return type will be updated to `TicketListResponse` as part of the search endpoint migration, so the widget reads `.items` after that change.
 
 Member mapping detection is explicit — the widget checks the mappings response, not the ticket result. "No mapping" and "no tickets" are distinct states.
 
@@ -391,8 +433,10 @@ Backend `search_tickets()` adds `orderBy=priority desc,dateEntered desc` to the
 
 ### Modified Backend Files
 - `backend/app/api/endpoints/integrations.py` — 6 new endpoints, update search to return `TicketListResponse`
-- `backend/app/services/psa/base.py` — 4 new abstract methods
-- `backend/app/services/psa/connectwise/provider.py` — implement 4 new methods
+- `backend/app/services/psa/types.py` — add `PaginatedTicketResult` dataclass
+- `backend/app/services/psa/base.py` — 4 new abstract methods; update `search_tickets` return type to `PaginatedTicketResult`
+- `backend/app/services/psa/connectwise/provider.py` — implement 4 new methods; update `search_tickets` to fire parallel count request and return `PaginatedTicketResult`; update `_map_ticket()` to pass through `company_id` and `board_id`
+- `backend/app/schemas/psa_connection.py` — add `company_id` and `board_id` to `PSATicketInfo` Pydantic schema
 - `backend/app/services/assistant_chat_service.py` — add spin-off ticket rule to `ASSISTANT_SYSTEM_PROMPT`
 - ~~`backend/app/services/flowpilot_engine.py`~~ — no changes (FlowPilot out of scope for this feature)
 - ~~`backend/app/services/unified_chat_service.py`~~ — no changes (existing `[ACTIONS]` parser handles the format)
@@ -419,7 +463,8 @@ Backend `search_tickets()` adds `orderBy=priority desc,dateEntered desc` to the
 - `frontend/src/pages/AssistantChatPage.tsx` — handle `create_spin_off_ticket` command in action renderer + add "New Ticket" button to session header
 - `frontend/src/pages/QuickStartPage.tsx` — MyQueueWidget
 - `frontend/src/api/integrations.ts` — update `searchTickets()` and `searchTicketsQueue()` return types to `TicketListResponse`
-- `frontend/src/components/dashboard/TicketQueue.tsx` — read `.items` from paginated response
+- `frontend/src/types/integrations.ts` — add `company_id: number | null` and `board_id: number | null` to `PSATicketInfo`
+- `frontend/src/components/dashboard/TicketQueue.tsx` — update existing component: read `.items`, add mapping-state detection, member-mapping check, and 5-item cap
 - `frontend/src/components/session/TicketPickerModal.tsx` — read `.items` from paginated response
 
 ---
-- 
2.49.1


From 001438008b76c1342a4fd1815d3d53ce8e961c6b Mon Sep 17 00:00:00 2001
From: Michael Chihlas <michael@resolutionflow.com>
Date: Thu, 16 Apr 2026 02:00:33 +0000
Subject: [PATCH 04/36] =?UTF-8?q?docs:=20fix=20PSA=20ticket=20management?=
 =?UTF-8?q?=20spec=20=E2=80=94=20prefill=20state,=20TicketQueue=20naming?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- Replace false claim about linkedTicket state with explicit fetch step on modal open
- Remove MyQueueWidget references; TicketQueue is the existing component being updated

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 .../2026-04-16-psa-ticket-management-design.md    | 15 +++++++++++----
 1 file changed, 11 insertions(+), 4 deletions(-)

diff --git a/docs/superpowers/specs/2026-04-16-psa-ticket-management-design.md b/docs/superpowers/specs/2026-04-16-psa-ticket-management-design.md
index 16b9b4ef..0a195984 100644
--- a/docs/superpowers/specs/2026-04-16-psa-ticket-management-design.md
+++ b/docs/superpowers/specs/2026-04-16-psa-ticket-management-design.md
@@ -201,7 +201,7 @@ Frontend uses `missing_fields` to highlight required fields still needing engine
 - `router.tsx` — add `/tickets` route (lazy, via `lazyWithRetry`)
 - `AppLayout.tsx` — add "Tickets" nav item in sidebar under RESOLVE section
 - `AssistantChatPage.tsx` — handle `create_spin_off_ticket` action type in TaskLane + add "New Ticket" button to session header
-- `QuickStartPage.tsx` — add `MyQueueWidget` component in collapsible Dashboard section
+- `QuickStartPage.tsx` — no structural change needed; `TicketQueue` already renders at line 64. The existing component is updated in place (see Section 4).
 
 ### Shared Types (`types/tickets.ts`)
 
@@ -352,7 +352,14 @@ export interface PSATicketInfo {
 
 These fields are already returned by the CW API in `get_ticket()` — update `_map_ticket()` in `ConnectWiseProvider` and the `PSATicketInfo` Pydantic schema to pass them through.
 
-`AssistantChatPage` already stores the linked ticket as `linkedTicket: PSATicketInfo | null` in local state (populated when a ticket is linked via `TicketLinkIndicator`). Once `PSATicketInfo` includes the IDs, the modal receives:
+**`AssistantChatPage` state change required:** The current page only tracks `activePsaTicketId: string | null` (line 76) — it does not hold a `PSATicketInfo` object. Add a new state field:
+```typescript
+const [linkedTicket, setLinkedTicket] = useState<PSATicketInfo | null>(null)
+```
+
+When the modal is opened (either via AI suggestion or the "New Ticket" button), if `activePsaTicketId` is set and `linkedTicket` is null, fire `integrationsApi.getTicket(activePsaTicketId)` to fetch the full ticket (which now includes `company_id` and `board_id`) and store it in `linkedTicket`. The modal opens immediately — `initialValues` is populated once the fetch resolves and the form fields update. If the fetch is still in flight when the modal opens, `company_id` and `board_id` start empty and fill in when ready.
+
+Once `linkedTicket` is populated, the modal receives:
 ```typescript
 initialValues: {
   company_id: linkedTicket.company_id,
@@ -360,7 +367,7 @@ initialValues: {
 }
 ```
 
-When no linked ticket exists: `initialValues` is omitted. `company_id` and `board_id` render empty, requiring manual selection. No silent defaults, no errors.
+When no linked ticket exists (`activePsaTicketId === null`): `initialValues` is omitted. `company_id` and `board_id` render empty, requiring manual selection. No silent defaults, no errors.
 
 ### TaskLane Action Lifecycle
 
@@ -461,7 +468,7 @@ Backend `search_tickets()` adds `orderBy=priority desc,dateEntered desc` to the
 - `frontend/src/router.tsx` — `/tickets` route
 - `frontend/src/components/layout/AppLayout.tsx` — Tickets nav item
 - `frontend/src/pages/AssistantChatPage.tsx` — handle `create_spin_off_ticket` command in action renderer + add "New Ticket" button to session header
-- `frontend/src/pages/QuickStartPage.tsx` — MyQueueWidget
+- `frontend/src/components/dashboard/TicketQueue.tsx` — update existing component (see Section 4 — not a new file)
 - `frontend/src/api/integrations.ts` — update `searchTickets()` and `searchTicketsQueue()` return types to `TicketListResponse`
 - `frontend/src/types/integrations.ts` — add `company_id: number | null` and `board_id: number | null` to `PSATicketInfo`
 - `frontend/src/components/dashboard/TicketQueue.tsx` — update existing component: read `.items`, add mapping-state detection, member-mapping check, and 5-item cap
-- 
2.49.1


From 44634b11459f18531d1f622c811e2276b9806a15 Mon Sep 17 00:00:00 2001
From: Michael Chihlas <michael@resolutionflow.com>
Date: Thu, 16 Apr 2026 02:41:48 +0000
Subject: [PATCH 05/36] feat(psa): add PaginatedTicketResult type, update
 provider search_tickets signature

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 backend/app/services/psa/base.py  | 3 ++-
 backend/app/services/psa/types.py | 7 +++++++
 2 files changed, 9 insertions(+), 1 deletion(-)

diff --git a/backend/app/services/psa/base.py b/backend/app/services/psa/base.py
index a599b064..913dbaee 100644
--- a/backend/app/services/psa/base.py
+++ b/backend/app/services/psa/base.py
@@ -13,6 +13,7 @@ from .types import (
     PSAConfiguration,
     PSATimeEntry,
     PSABoard,
+    PaginatedTicketResult,
 )
 
 
@@ -28,7 +29,7 @@ class PSAProvider(ABC):
         ...
 
     @abstractmethod
-    async def search_tickets(self, query: str, **filters) -> list[PSATicket]:
+    async def search_tickets(self, query: str, **filters) -> PaginatedTicketResult:
         ...
 
     @abstractmethod
diff --git a/backend/app/services/psa/types.py b/backend/app/services/psa/types.py
index c051a5f7..025fe756 100644
--- a/backend/app/services/psa/types.py
+++ b/backend/app/services/psa/types.py
@@ -73,6 +73,13 @@ class PSABoard(BaseModel):
     inactive: bool = False
 
 
+class PaginatedTicketResult(BaseModel):
+    items: list[PSATicket]
+    total: int
+    page: int
+    page_size: int
+
+
 class NoteType:
     INTERNAL_ANALYSIS = "internal_analysis"
     RESOLUTION = "resolution"
-- 
2.49.1


From 8d964e64e4c81b8823e326a6ebcd36f178f13bea Mon Sep 17 00:00:00 2001
From: Michael Chihlas <michael@resolutionflow.com>
Date: Thu, 16 Apr 2026 02:44:08 +0000
Subject: [PATCH 06/36] fix(psa): update autotask/halopsa stub search_tickets
 return type annotation

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 backend/app/services/psa/autotask/provider.py | 3 ++-
 backend/app/services/psa/halopsa/provider.py  | 3 ++-
 2 files changed, 4 insertions(+), 2 deletions(-)

diff --git a/backend/app/services/psa/autotask/provider.py b/backend/app/services/psa/autotask/provider.py
index a78fc1c1..f7fb21fe 100644
--- a/backend/app/services/psa/autotask/provider.py
+++ b/backend/app/services/psa/autotask/provider.py
@@ -12,6 +12,7 @@ from app.services.psa.types import (
     PSAConfiguration,
     PSATimeEntry,
     PSABoard,
+    PaginatedTicketResult,
 )
 
 
@@ -28,7 +29,7 @@ class AutotaskProvider(PSAProvider):
     async def get_ticket(self, ticket_id: str) -> PSATicket:
         raise NotImplementedError("Autotask integration coming soon")
 
-    async def search_tickets(self, query: str, **filters) -> list[PSATicket]:
+    async def search_tickets(self, query: str, **filters) -> PaginatedTicketResult:
         raise NotImplementedError("Autotask integration coming soon")
 
     async def post_note(
diff --git a/backend/app/services/psa/halopsa/provider.py b/backend/app/services/psa/halopsa/provider.py
index 4a917ed2..2855d5e2 100644
--- a/backend/app/services/psa/halopsa/provider.py
+++ b/backend/app/services/psa/halopsa/provider.py
@@ -12,6 +12,7 @@ from app.services.psa.types import (
     PSAConfiguration,
     PSATimeEntry,
     PSABoard,
+    PaginatedTicketResult,
 )
 
 
@@ -28,7 +29,7 @@ class HaloPSAProvider(PSAProvider):
     async def get_ticket(self, ticket_id: str) -> PSATicket:
         raise NotImplementedError("Halo PSA integration coming soon")
 
-    async def search_tickets(self, query: str, **filters) -> list[PSATicket]:
+    async def search_tickets(self, query: str, **filters) -> PaginatedTicketResult:
         raise NotImplementedError("Halo PSA integration coming soon")
 
     async def post_note(
-- 
2.49.1


From ff0ec143e2ec85242c7a2c3e8c2b021f9d2c163b Mon Sep 17 00:00:00 2001
From: Michael Chihlas <michael@resolutionflow.com>
Date: Thu, 16 Apr 2026 02:45:24 +0000
Subject: [PATCH 07/36] feat(psa): add PSAResource, TicketCreatePayload types
 and abstract provider methods

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 backend/app/services/psa/autotask/provider.py | 18 +++++++++++++
 backend/app/services/psa/base.py              | 23 ++++++++++++++++
 backend/app/services/psa/halopsa/provider.py  | 18 +++++++++++++
 backend/app/services/psa/types.py             | 27 +++++++++++++++++++
 4 files changed, 86 insertions(+)

diff --git a/backend/app/services/psa/autotask/provider.py b/backend/app/services/psa/autotask/provider.py
index f7fb21fe..3af30de9 100644
--- a/backend/app/services/psa/autotask/provider.py
+++ b/backend/app/services/psa/autotask/provider.py
@@ -13,6 +13,9 @@ from app.services.psa.types import (
     PSATimeEntry,
     PSABoard,
     PaginatedTicketResult,
+    PSAResource,
+    PSACreatedTicket,
+    TicketCreatePayload,
 )
 
 
@@ -75,3 +78,18 @@ class AutotaskProvider(PSAProvider):
         work_type: str | None = None,
     ) -> PSATimeEntry:
         raise NotImplementedError("Autotask integration coming soon")
+
+    async def list_resources(self, ticket_id: int) -> list[PSAResource]:
+        raise NotImplementedError("Autotask integration coming soon")
+
+    async def add_resource(self, ticket_id: int, member_id: int) -> PSAResource:
+        raise NotImplementedError("Autotask integration coming soon")
+
+    async def remove_resource(self, ticket_id: int, member_id: int) -> None:
+        raise NotImplementedError("Autotask integration coming soon")
+
+    async def create_ticket(self, payload: TicketCreatePayload) -> PSACreatedTicket:
+        raise NotImplementedError("Autotask integration coming soon")
+
+    async def list_priorities(self) -> list[dict]:
+        raise NotImplementedError("Autotask integration coming soon")
diff --git a/backend/app/services/psa/base.py b/backend/app/services/psa/base.py
index 913dbaee..8f3ab8a8 100644
--- a/backend/app/services/psa/base.py
+++ b/backend/app/services/psa/base.py
@@ -14,6 +14,9 @@ from .types import (
     PSATimeEntry,
     PSABoard,
     PaginatedTicketResult,
+    PSAResource,
+    PSACreatedTicket,
+    TicketCreatePayload,
 )
 
 
@@ -84,3 +87,23 @@ class PSAProvider(ABC):
         work_type: str | None = None,
     ) -> PSATimeEntry:
         ...
+
+    @abstractmethod
+    async def list_resources(self, ticket_id: int) -> list[PSAResource]:
+        ...
+
+    @abstractmethod
+    async def add_resource(self, ticket_id: int, member_id: int) -> PSAResource:
+        ...
+
+    @abstractmethod
+    async def remove_resource(self, ticket_id: int, member_id: int) -> None:
+        ...
+
+    @abstractmethod
+    async def create_ticket(self, payload: TicketCreatePayload) -> PSACreatedTicket:
+        ...
+
+    @abstractmethod
+    async def list_priorities(self) -> list[dict]:
+        ...
diff --git a/backend/app/services/psa/halopsa/provider.py b/backend/app/services/psa/halopsa/provider.py
index 2855d5e2..d8f2573e 100644
--- a/backend/app/services/psa/halopsa/provider.py
+++ b/backend/app/services/psa/halopsa/provider.py
@@ -13,6 +13,9 @@ from app.services.psa.types import (
     PSATimeEntry,
     PSABoard,
     PaginatedTicketResult,
+    PSAResource,
+    PSACreatedTicket,
+    TicketCreatePayload,
 )
 
 
@@ -75,3 +78,18 @@ class HaloPSAProvider(PSAProvider):
         work_type: str | None = None,
     ) -> PSATimeEntry:
         raise NotImplementedError("Halo PSA integration coming soon")
+
+    async def list_resources(self, ticket_id: int) -> list[PSAResource]:
+        raise NotImplementedError("Halo PSA integration coming soon")
+
+    async def add_resource(self, ticket_id: int, member_id: int) -> PSAResource:
+        raise NotImplementedError("Halo PSA integration coming soon")
+
+    async def remove_resource(self, ticket_id: int, member_id: int) -> None:
+        raise NotImplementedError("Halo PSA integration coming soon")
+
+    async def create_ticket(self, payload: TicketCreatePayload) -> PSACreatedTicket:
+        raise NotImplementedError("Halo PSA integration coming soon")
+
+    async def list_priorities(self) -> list[dict]:
+        raise NotImplementedError("Halo PSA integration coming soon")
diff --git a/backend/app/services/psa/types.py b/backend/app/services/psa/types.py
index 025fe756..2ac841b5 100644
--- a/backend/app/services/psa/types.py
+++ b/backend/app/services/psa/types.py
@@ -80,6 +80,33 @@ class PaginatedTicketResult(BaseModel):
     page_size: int
 
 
+class PSAResource(BaseModel):
+    member_id: int
+    member_name: str
+    member_identifier: str
+    is_rf_user: bool = False
+
+
+class PSACreatedTicket(BaseModel):
+    id: int
+    summary: str
+    board_name: str
+    status_name: str
+    priority_name: str
+    company_name: str
+    resources: list[PSAResource] = []
+
+
+class TicketCreatePayload(BaseModel):
+    summary: str
+    company_id: int
+    board_id: int
+    status_id: int
+    priority_id: int
+    description: str | None = None
+    assigned_member_id: int | None = None
+
+
 class NoteType:
     INTERNAL_ANALYSIS = "internal_analysis"
     RESOLUTION = "resolution"
-- 
2.49.1


From e714088a2b08dad21f4bfc82693dad5e42d3f9ed Mon Sep 17 00:00:00 2001
From: Michael Chihlas <michael@resolutionflow.com>
Date: Thu, 16 Apr 2026 02:49:20 +0000
Subject: [PATCH 08/36] feat(psa): implement list/add/remove resources,
 create_ticket, paginated search in CW provider

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 .../app/services/psa/connectwise/provider.py  | 150 +++++++++++++++---
 1 file changed, 129 insertions(+), 21 deletions(-)

diff --git a/backend/app/services/psa/connectwise/provider.py b/backend/app/services/psa/connectwise/provider.py
index af154cdd..465f66ab 100644
--- a/backend/app/services/psa/connectwise/provider.py
+++ b/backend/app/services/psa/connectwise/provider.py
@@ -17,6 +17,10 @@ from app.services.psa.types import (
     PSAConfiguration,
     PSATimeEntry,
     PSABoard,
+    PaginatedTicketResult,
+    PSAResource,
+    PSACreatedTicket,
+    TicketCreatePayload,
 )
 from .client import ConnectWiseClient
 
@@ -55,20 +59,19 @@ class ConnectWiseProvider(PSAProvider):
         )
         return self._map_ticket(data)
 
-    async def search_tickets(self, query: str, **filters) -> list[PSATicket]:
-        """Search CW tickets by summary. Supports board_id, status_id, member_id,
-        unassigned, board_ids, page, and page_size filters."""
+    async def search_tickets(self, query: str, **filters) -> PaginatedTicketResult:
+        """Search CW tickets by summary. Supports board_id, status_id, member_identifier,
+        unassigned, board_ids, page, and page_size filters. Returns paginated result."""
         page_size = filters.get("page_size", 10)
         page = filters.get("page", 1)
 
         params: dict = {
             "fields": "id,summary,company,board,status,priority,closedFlag",
-            "orderBy": "id desc",
+            "orderBy": "priority/sort asc,dateEntered desc",
             "pageSize": page_size,
             "page": page,
         }
 
-        # Build CW condition query
         conditions: list[str] = []
         if query:
             conditions.append(f"summary contains '{query}'")
@@ -87,15 +90,24 @@ class ConnectWiseProvider(PSAProvider):
             board_list = ", ".join(str(bid) for bid in board_ids)
             conditions.append(f"board/id in ({board_list})")
 
-        if conditions:
-            params["conditions"] = " and ".join(conditions)
+        condition_str = " and ".join(conditions) if conditions else ""
+        if condition_str:
+            params["conditions"] = condition_str
 
-        data = await self.client.get("/service/tickets", params=params)
+        count_params: dict = {}
+        if condition_str:
+            count_params["conditions"] = condition_str
 
-        return [
-            self._map_ticket(t)
-            for t in (data if isinstance(data, list) else [])
-        ]
+        # Fire page fetch + count in parallel
+        data, count_data = await asyncio.gather(
+            self.client.get("/service/tickets", params=params),
+            self.client.get("/service/tickets/count", params=count_params),
+        )
+
+        items = [self._map_ticket(t) for t in (data if isinstance(data, list) else [])]
+        total = count_data.get("count", len(items)) if isinstance(count_data, dict) else len(items)
+
+        return PaginatedTicketResult(items=items, total=total, page=page, page_size=page_size)
 
     async def get_ticket_configurations(
         self, ticket_id: str
@@ -591,16 +603,112 @@ class ConnectWiseProvider(PSAProvider):
     @staticmethod
     def _map_ticket(data: dict) -> PSATicket:
         """Map a CW ticket JSON dict to a PSATicket."""
+        company = data.get("company") or {}
+        board = data.get("board") or {}
+        status = data.get("status") or {}
+        priority = data.get("priority") or {}
         return PSATicket(
-            id=str(data["id"]),
+            id=str(data.get("id", "")),
             summary=data.get("summary", ""),
-            company_name=data.get("company", {}).get("name"),
-            company_id=str(data["company"]["id"]) if data.get("company") else None,
-            board_name=data.get("board", {}).get("name"),
-            board_id=data.get("board", {}).get("id"),
-            status_name=data.get("status", {}).get("name"),
-            status_id=data.get("status", {}).get("id"),
-            priority_name=data.get("priority", {}).get("name"),
-            priority_id=data.get("priority", {}).get("id"),
+            company_name=company.get("name"),
+            company_id=str(company.get("id")) if company.get("id") else None,
+            board_name=board.get("name"),
+            board_id=board.get("id"),
+            status_name=status.get("name"),
+            status_id=status.get("id"),
+            priority_name=priority.get("name"),
+            priority_id=priority.get("id"),
             closed=data.get("closedFlag", False),
         )
+
+    # ── Resource management ───────────────────────────────────────────
+
+    async def list_resources(self, ticket_id: int) -> list[PSAResource]:
+        """List members assigned to a CW ticket."""
+        data = await self.client.get(f"/service/tickets/{ticket_id}/members")
+        results = []
+        for m in (data if isinstance(data, list) else []):
+            member = m.get("member") or {}
+            results.append(PSAResource(
+                member_id=member.get("id", 0),
+                member_name=member.get("name", ""),
+                member_identifier=member.get("identifier", ""),
+            ))
+        return results
+
+    async def add_resource(self, ticket_id: int, member_id: int) -> PSAResource:
+        """Assign a member to a CW ticket."""
+        data = await self.client.post(
+            f"/service/tickets/{ticket_id}/members",
+            json_body={"member": {"id": member_id}},
+        )
+        member = (data.get("member") or {}) if isinstance(data, dict) else {}
+        return PSAResource(
+            member_id=member.get("id", member_id),
+            member_name=member.get("name", ""),
+            member_identifier=member.get("identifier", ""),
+        )
+
+    async def remove_resource(self, ticket_id: int, member_id: int) -> None:
+        """Remove a member from a CW ticket (idempotent)."""
+        # CW DELETE requires the member record id (junction record), not the member's id
+        members_data = await self.client.get(f"/service/tickets/{ticket_id}/members")
+        record_id = None
+        for m in (members_data if isinstance(members_data, list) else []):
+            if (m.get("member") or {}).get("id") == member_id:
+                record_id = m.get("id")
+                break
+        if record_id is None:
+            return  # Already not assigned — idempotent
+        await self.client.delete(f"/service/tickets/{ticket_id}/members/{record_id}")
+
+    # ── Ticket creation ───────────────────────────────────────────────
+
+    async def create_ticket(self, payload: TicketCreatePayload) -> PSACreatedTicket:
+        """Create a new CW service ticket."""
+        body: dict = {
+            "summary": payload.summary,
+            "board": {"id": payload.board_id},
+            "company": {"id": payload.company_id},
+            "status": {"id": payload.status_id},
+            "priority": {"id": payload.priority_id},
+        }
+        if payload.description:
+            body["initialDescription"] = payload.description
+        if payload.assigned_member_id:
+            body["owner"] = {"id": payload.assigned_member_id}
+
+        data = await self.client.post("/service/tickets", json_body=body)
+
+        ticket_id = data.get("id") if isinstance(data, dict) else None
+        resources: list[PSAResource] = []
+        if ticket_id and payload.assigned_member_id:
+            try:
+                resources = await self.list_resources(ticket_id)
+            except Exception:
+                pass
+
+        company = (data.get("company") or {}) if isinstance(data, dict) else {}
+        board = (data.get("board") or {}) if isinstance(data, dict) else {}
+        status = (data.get("status") or {}) if isinstance(data, dict) else {}
+        priority = (data.get("priority") or {}) if isinstance(data, dict) else {}
+
+        return PSACreatedTicket(
+            id=ticket_id or 0,
+            summary=data.get("summary", payload.summary) if isinstance(data, dict) else payload.summary,
+            board_name=board.get("name", ""),
+            status_name=status.get("name", ""),
+            priority_name=priority.get("name", ""),
+            company_name=company.get("name", ""),
+            resources=resources,
+        )
+
+    # ── Priorities ────────────────────────────────────────────────────
+
+    async def list_priorities(self) -> list[dict]:
+        """List CW service priorities."""
+        data = await self.client.get("/service/priorities", params={"pageSize": 50})
+        return [
+            {"id": p.get("id"), "name": p.get("name")}
+            for p in (data if isinstance(data, list) else [])
+        ]
-- 
2.49.1


From 66cca70588473c754cf2cb542e7b1bd294368bb5 Mon Sep 17 00:00:00 2001
From: Michael Chihlas <michael@resolutionflow.com>
Date: Thu, 16 Apr 2026 02:50:56 +0000
Subject: [PATCH 09/36] feat(psa): expand PSATicketSearchResult with IDs, add
 psa_tickets.py schemas

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 backend/app/schemas/psa_connection.py |  4 ++
 backend/app/schemas/psa_tickets.py    | 64 +++++++++++++++++++++++++++
 2 files changed, 68 insertions(+)
 create mode 100644 backend/app/schemas/psa_tickets.py

diff --git a/backend/app/schemas/psa_connection.py b/backend/app/schemas/psa_connection.py
index f0dfde42..ece87b9f 100644
--- a/backend/app/schemas/psa_connection.py
+++ b/backend/app/schemas/psa_connection.py
@@ -53,9 +53,13 @@ class PSATicketSearchResult(BaseModel):
     id: str
     summary: str
     company_name: str | None = None
+    company_id: str | None = None
     board_name: str | None = None
+    board_id: int | None = None
     status_name: str | None = None
+    status_id: int | None = None
     priority_name: str | None = None
+    priority_id: int | None = None
     closed: bool = False
 
 
diff --git a/backend/app/schemas/psa_tickets.py b/backend/app/schemas/psa_tickets.py
new file mode 100644
index 00000000..91a37d73
--- /dev/null
+++ b/backend/app/schemas/psa_tickets.py
@@ -0,0 +1,64 @@
+"""Normalized DTOs for ticket management endpoints."""
+from __future__ import annotations
+from pydantic import BaseModel
+
+
+class PSAResourceSchema(BaseModel):
+    member_id: int
+    member_name: str
+    member_identifier: str
+    is_rf_user: bool = False
+
+
+class PSATicketCreatedSchema(BaseModel):
+    id: int
+    summary: str
+    board_name: str
+    status_name: str
+    priority_name: str
+    company_name: str
+    resources: list[PSAResourceSchema] = []
+
+
+class PSATicketStatusUpdateSchema(BaseModel):
+    ticket_id: int
+    previous_status: str
+    new_status: str
+
+
+class TicketCreatePayloadSchema(BaseModel):
+    summary: str
+    company_id: int
+    board_id: int
+    status_id: int
+    priority_id: int
+    description: str | None = None
+    assigned_member_id: int | None = None
+
+
+class TicketListResponseSchema(BaseModel):
+    items: list = []
+    total: int = 0
+    page: int = 1
+    page_size: int = 25
+
+
+class AiParseRequestSchema(BaseModel):
+    prompt: str
+
+
+class AiParseResponseSchema(BaseModel):
+    summary: str | None = None
+    company_id: int | None = None
+    board_id: int | None = None
+    priority_id: int | None = None
+    status_id: int | None = None
+    assigned_member_id: int | None = None
+    description: str | None = None
+    missing_fields: list[str] = []
+    warnings: list[str] = []
+
+
+class PSAPrioritySchema(BaseModel):
+    id: int
+    name: str
-- 
2.49.1


From a5e96156661a4c7bb6e218bd481e35398ea1684b Mon Sep 17 00:00:00 2001
From: Michael Chihlas <michael@resolutionflow.com>
Date: Thu, 16 Apr 2026 02:52:32 +0000
Subject: [PATCH 10/36] feat(psa): add ticket_service.py with list/add/remove
 resource, update_status, create_ticket

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 backend/app/services/ticket_service.py | 115 +++++++++++++++++++++++++
 1 file changed, 115 insertions(+)
 create mode 100644 backend/app/services/ticket_service.py

diff --git a/backend/app/services/ticket_service.py b/backend/app/services/ticket_service.py
new file mode 100644
index 00000000..66e9552e
--- /dev/null
+++ b/backend/app/services/ticket_service.py
@@ -0,0 +1,115 @@
+"""Ticket mutation service — wraps PSA provider, resolves is_rf_user flag."""
+from __future__ import annotations
+
+import logging
+from uuid import UUID
+
+from sqlalchemy import select
+from sqlalchemy.ext.asyncio import AsyncSession
+
+from app.models.psa_connection import PsaConnection
+from app.models.psa_member_mapping import PsaMemberMapping
+from app.schemas.psa_tickets import (
+    PSAResourceSchema,
+    PSATicketCreatedSchema,
+    PSATicketStatusUpdateSchema,
+)
+from app.services.psa.registry import get_provider_for_account
+from app.services.psa.types import TicketCreatePayload
+
+logger = logging.getLogger(__name__)
+
+
+async def _get_mapped_member_ids(account_id: UUID, db: AsyncSession) -> set[int]:
+    """Return set of external_member_id ints that are mapped to RF users."""
+    conn_result = await db.execute(
+        select(PsaConnection).where(PsaConnection.account_id == account_id)
+    )
+    conn = conn_result.scalar_one_or_none()
+    if not conn:
+        return set()
+    mappings = await db.execute(
+        select(PsaMemberMapping).where(PsaMemberMapping.psa_connection_id == conn.id)
+    )
+    return {int(m.external_member_id) for m in mappings.scalars().all() if m.external_member_id}
+
+
+async def list_resources(
+    account_id: UUID, ticket_id: int, db: AsyncSession
+) -> list[PSAResourceSchema]:
+    provider = await get_provider_for_account(account_id, db)
+    mapped_ids = await _get_mapped_member_ids(account_id, db)
+    resources = await provider.list_resources(ticket_id)
+    return [
+        PSAResourceSchema(
+            member_id=r.member_id,
+            member_name=r.member_name,
+            member_identifier=r.member_identifier,
+            is_rf_user=r.member_id in mapped_ids,
+        )
+        for r in resources
+    ]
+
+
+async def add_resource(
+    account_id: UUID, ticket_id: int, member_id: int, db: AsyncSession
+) -> PSAResourceSchema:
+    provider = await get_provider_for_account(account_id, db)
+    mapped_ids = await _get_mapped_member_ids(account_id, db)
+    resource = await provider.add_resource(ticket_id, member_id)
+    return PSAResourceSchema(
+        member_id=resource.member_id,
+        member_name=resource.member_name,
+        member_identifier=resource.member_identifier,
+        is_rf_user=resource.member_id in mapped_ids,
+    )
+
+
+async def remove_resource(
+    account_id: UUID, ticket_id: int, member_id: int, db: AsyncSession
+) -> None:
+    provider = await get_provider_for_account(account_id, db)
+    await provider.remove_resource(ticket_id, member_id)
+
+
+async def update_status(
+    account_id: UUID, ticket_id: int, status_id: int, db: AsyncSession
+) -> PSATicketStatusUpdateSchema:
+    provider = await get_provider_for_account(account_id, db)
+    # get current status before updating
+    ticket = await provider.get_ticket(str(ticket_id))
+    previous_status = ticket.status_name or ""
+    await provider.update_ticket_status(str(ticket_id), status_id)
+    # get new status name from statuses list
+    statuses = await provider.get_ticket_statuses(ticket.board_id or 0)
+    new_status = next((s.name for s in statuses if s.id == status_id), str(status_id))
+    return PSATicketStatusUpdateSchema(
+        ticket_id=ticket_id,
+        previous_status=previous_status,
+        new_status=new_status,
+    )
+
+
+async def create_ticket(
+    account_id: UUID, payload: TicketCreatePayload, db: AsyncSession
+) -> PSATicketCreatedSchema:
+    provider = await get_provider_for_account(account_id, db)
+    mapped_ids = await _get_mapped_member_ids(account_id, db)
+    result = await provider.create_ticket(payload)
+    return PSATicketCreatedSchema(
+        id=result.id,
+        summary=result.summary,
+        board_name=result.board_name,
+        status_name=result.status_name,
+        priority_name=result.priority_name,
+        company_name=result.company_name,
+        resources=[
+            PSAResourceSchema(
+                member_id=r.member_id,
+                member_name=r.member_name,
+                member_identifier=r.member_identifier,
+                is_rf_user=r.member_id in mapped_ids,
+            )
+            for r in result.resources
+        ],
+    )
-- 
2.49.1


From e2cdfac1c3deb4f5379f5b5c0d7ed7d9b6f72a1e Mon Sep 17 00:00:00 2001
From: Michael Chihlas <michael@resolutionflow.com>
Date: Thu, 16 Apr 2026 02:55:49 +0000
Subject: [PATCH 11/36] feat(psa): update search endpoint for pagination, add
 create/status/resource/priority endpoints

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 backend/app/api/endpoints/integrations.py | 147 +++++++++++++++++++---
 1 file changed, 130 insertions(+), 17 deletions(-)

diff --git a/backend/app/api/endpoints/integrations.py b/backend/app/api/endpoints/integrations.py
index 48fa9f57..88e9e91d 100644
--- a/backend/app/api/endpoints/integrations.py
+++ b/backend/app/api/endpoints/integrations.py
@@ -30,6 +30,14 @@ from app.schemas.psa_connection import (
     PSABoardResponse,
 )
 from app.core.config import settings
+from app.schemas.psa_tickets import (
+    PSAResourceSchema,
+    PSATicketCreatedSchema,
+    PSATicketStatusUpdateSchema,
+    TicketCreatePayloadSchema,
+    PSAPrioritySchema,
+)
+import app.services.ticket_service as ticket_svc
 from app.services.psa.encryption import (
     decrypt_credentials,
     encrypt_credentials,
@@ -367,7 +375,7 @@ async def list_boards(
         return []
 
 
-@router.get("/tickets/search", response_model=list[PSATicketSearchResult])
+@router.get("/tickets/search")
 async def search_tickets(
     current_user: Annotated[User, Depends(require_engineer_or_admin)],
     db: Annotated[AsyncSession, Depends(get_db)],
@@ -378,17 +386,18 @@ async def search_tickets(
     assigned_to_me: bool = False,
     unassigned: bool = False,
     board_ids: str = "",
+    priority: str | None = None,
+    company_id: int | None = None,
     page: int = 1,
-    page_size: int = 10,
+    page_size: int = 25,
 ):
-    """Search ConnectWise tickets."""
+    """Search ConnectWise tickets — returns paginated TicketListResponse."""
     if not current_user.account_id:
         raise HTTPException(status_code=400, detail="User has no account")
 
     from app.services.psa.registry import get_provider_for_account
     from app.services.psa.exceptions import PSAError
 
-    # Resolve assigned_to_me → member_identifier (CW login name for resources contains filter)
     member_identifier: str | None = None
     if assigned_to_me:
         conn_result = await db.execute(
@@ -407,23 +416,18 @@ async def search_tickets(
             )
             mapping = mapping_result.scalar_one_or_none()
             if not mapping:
-                # No mapping for this user — return empty list
-                return []
-
-            from app.services.psa.registry import get_provider_for_account as _get_provider
-            from app.services.psa.exceptions import PSAError as _PSAError
+                return {"items": [], "total": 0, "page": page, "page_size": page_size}
             try:
-                _provider = await _get_provider(current_user.account_id, db)
+                _provider = await get_provider_for_account(current_user.account_id, db)
                 cw_members = await _provider.list_members()
                 matched = next((m for m in cw_members if m.id == mapping.external_member_id), None)
                 if matched:
                     member_identifier = matched.identifier
                 else:
-                    return []
-            except _PSAError:
-                return []
+                    return {"items": [], "total": 0, "page": page, "page_size": page_size}
+            except PSAError:
+                return {"items": [], "total": 0, "page": page, "page_size": page_size}
 
-    # Parse comma-separated board_ids
     parsed_board_ids: list[int] = []
     if board_ids:
         try:
@@ -433,7 +437,7 @@ async def search_tickets(
 
     try:
         provider = await get_provider_for_account(current_user.account_id, db)
-        tickets = await provider.search_tickets(
+        result = await provider.search_tickets(
             query,
             board_id=board_id,
             status_id=status_id,
@@ -441,25 +445,134 @@ async def search_tickets(
             member_identifier=member_identifier,
             unassigned=unassigned,
             board_ids=parsed_board_ids,
+            company_id=company_id,
             page=page,
             page_size=page_size,
         )
-        return [
+        items = [
             PSATicketSearchResult(
                 id=t.id,
                 summary=t.summary,
                 company_name=t.company_name,
+                company_id=t.company_id,
                 board_name=t.board_name,
+                board_id=t.board_id,
                 status_name=t.status_name,
+                status_id=t.status_id,
                 priority_name=t.priority_name,
+                priority_id=t.priority_id,
                 closed=t.closed,
             )
-            for t in tickets
+            for t in result.items
         ]
+        return {"items": items, "total": result.total, "page": result.page, "page_size": result.page_size}
     except PSAError as e:
         raise HTTPException(status_code=502, detail=str(e))
 
 
+@router.post("/tickets", response_model=PSATicketCreatedSchema, status_code=201)
+async def create_ticket(
+    data: TicketCreatePayloadSchema,
+    current_user: Annotated[User, Depends(require_engineer_or_admin)],
+    db: Annotated[AsyncSession, Depends(get_db)],
+):
+    """Create a new PSA ticket."""
+    if not current_user.account_id:
+        raise HTTPException(status_code=400, detail="User has no account")
+    from app.services.psa.exceptions import PSAError
+    from app.services.psa.types import TicketCreatePayload
+    try:
+        return await ticket_svc.create_ticket(
+            current_user.account_id,
+            TicketCreatePayload(**data.model_dump()),
+            db,
+        )
+    except PSAError as e:
+        raise HTTPException(status_code=502, detail=str(e))
+
+
+@router.patch("/tickets/{ticket_id}/status", response_model=PSATicketStatusUpdateSchema)
+async def update_ticket_status_endpoint(
+    ticket_id: int,
+    status_id: int,
+    current_user: Annotated[User, Depends(require_engineer_or_admin)],
+    db: Annotated[AsyncSession, Depends(get_db)],
+):
+    """Update a ticket's status."""
+    if not current_user.account_id:
+        raise HTTPException(status_code=400, detail="User has no account")
+    from app.services.psa.exceptions import PSAError
+    try:
+        return await ticket_svc.update_status(current_user.account_id, ticket_id, status_id, db)
+    except PSAError as e:
+        raise HTTPException(status_code=502, detail=str(e))
+
+
+@router.get("/tickets/{ticket_id}/resources", response_model=list[PSAResourceSchema])
+async def list_ticket_resources(
+    ticket_id: int,
+    current_user: Annotated[User, Depends(require_engineer_or_admin)],
+    db: Annotated[AsyncSession, Depends(get_db)],
+):
+    if not current_user.account_id:
+        raise HTTPException(status_code=400, detail="User has no account")
+    from app.services.psa.exceptions import PSAError
+    try:
+        return await ticket_svc.list_resources(current_user.account_id, ticket_id, db)
+    except PSAError as e:
+        raise HTTPException(status_code=502, detail=str(e))
+
+
+@router.post("/tickets/{ticket_id}/resources", response_model=PSAResourceSchema, status_code=201)
+async def add_ticket_resource(
+    ticket_id: int,
+    member_id: int,
+    current_user: Annotated[User, Depends(require_engineer_or_admin)],
+    db: Annotated[AsyncSession, Depends(get_db)],
+):
+    if not current_user.account_id:
+        raise HTTPException(status_code=400, detail="User has no account")
+    from app.services.psa.exceptions import PSAError
+    try:
+        return await ticket_svc.add_resource(current_user.account_id, ticket_id, member_id, db)
+    except PSAError as e:
+        raise HTTPException(status_code=502, detail=str(e))
+
+
+@router.delete("/tickets/{ticket_id}/resources/{member_id}", status_code=204)
+async def remove_ticket_resource(
+    ticket_id: int,
+    member_id: int,
+    current_user: Annotated[User, Depends(require_engineer_or_admin)],
+    db: Annotated[AsyncSession, Depends(get_db)],
+):
+    if not current_user.account_id:
+        raise HTTPException(status_code=400, detail="User has no account")
+    from app.services.psa.exceptions import PSAError
+    try:
+        await ticket_svc.remove_resource(current_user.account_id, ticket_id, member_id, db)
+    except PSAError as e:
+        raise HTTPException(status_code=502, detail=str(e))
+
+
+@router.get("/priorities", response_model=list[PSAPrioritySchema])
+async def list_priorities(
+    current_user: Annotated[User, Depends(require_engineer_or_admin)],
+    db: Annotated[AsyncSession, Depends(get_db)],
+):
+    """List PSA priority levels for ticket creation form."""
+    if not current_user.account_id:
+        raise HTTPException(status_code=400, detail="User has no account")
+    from app.services.psa.registry import get_provider_for_account
+    from app.services.psa.exceptions import PSAError
+    try:
+        provider = await get_provider_for_account(current_user.account_id, db)
+        raw = await provider.list_priorities()
+        return [PSAPrioritySchema(id=p["id"], name=p["name"]) for p in raw if p.get("id")]
+    except PSAError:
+        return []
+
+
 @router.get("/tickets/{ticket_id}/context")
 async def get_ticket_context(
     ticket_id: int,
-- 
2.49.1


From 24ab1908a68f2c207d33c6783966cc8ada5c66c2 Mon Sep 17 00:00:00 2001
From: Michael Chihlas <michael@resolutionflow.com>
Date: Thu, 16 Apr 2026 02:57:23 +0000
Subject: [PATCH 12/36] fix(psa): add TicketListResponseSchema response_model
 to search_tickets endpoint

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 backend/app/api/endpoints/integrations.py | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/backend/app/api/endpoints/integrations.py b/backend/app/api/endpoints/integrations.py
index 88e9e91d..0f66774c 100644
--- a/backend/app/api/endpoints/integrations.py
+++ b/backend/app/api/endpoints/integrations.py
@@ -36,6 +36,7 @@ from app.schemas.psa_tickets import (
     PSATicketStatusUpdateSchema,
     TicketCreatePayloadSchema,
     PSAPrioritySchema,
+    TicketListResponseSchema,
 )
 import app.services.ticket_service as ticket_svc
 from app.services.psa.encryption import (
@@ -375,7 +376,7 @@ async def list_boards(
         return []
 
 
-@router.get("/tickets/search")
+@router.get("/tickets/search", response_model=TicketListResponseSchema)
 async def search_tickets(
     current_user: Annotated[User, Depends(require_engineer_or_admin)],
     db: Annotated[AsyncSession, Depends(get_db)],
-- 
2.49.1


From 6e0188d0b4a5d43339c439010d2b24c8e16b1bcf Mon Sep 17 00:00:00 2001
From: Michael Chihlas <michael@resolutionflow.com>
Date: Thu, 16 Apr 2026 02:59:02 +0000
Subject: [PATCH 13/36] feat(psa): add AI ticket parse endpoint

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 backend/app/api/endpoints/integrations.py | 109 ++++++++++++++++++++++
 1 file changed, 109 insertions(+)

diff --git a/backend/app/api/endpoints/integrations.py b/backend/app/api/endpoints/integrations.py
index 0f66774c..53abd104 100644
--- a/backend/app/api/endpoints/integrations.py
+++ b/backend/app/api/endpoints/integrations.py
@@ -1,6 +1,7 @@
 """PSA integration endpoints — connection CRUD and test."""
 from __future__ import annotations
 
+import logging
 from datetime import datetime, timezone
 from typing import Annotated
 from uuid import UUID
@@ -11,6 +12,8 @@ from sqlalchemy.ext.asyncio import AsyncSession
 
 from sqlalchemy import delete
 
+logger = logging.getLogger(__name__)
+
 from app.api.deps import get_current_active_user, require_account_owner, require_engineer_or_admin
 from app.core.database import get_db
 from app.models.psa_connection import PsaConnection
@@ -37,6 +40,8 @@ from app.schemas.psa_tickets import (
     TicketCreatePayloadSchema,
     PSAPrioritySchema,
     TicketListResponseSchema,
+    AiParseRequestSchema,
+    AiParseResponseSchema,
 )
 import app.services.ticket_service as ticket_svc
 from app.services.psa.encryption import (
@@ -492,6 +497,110 @@ async def create_ticket(
         raise HTTPException(status_code=502, detail=str(e))
 
 
+@router.post("/tickets/ai-parse", response_model=AiParseResponseSchema)
+async def ai_parse_ticket(
+    data: AiParseRequestSchema,
+    current_user: Annotated[User, Depends(require_engineer_or_admin)],
+    db: Annotated[AsyncSession, Depends(get_db)],
+):
+    """Parse natural language into a ticket pre-fill payload using Claude."""
+    if not current_user.account_id:
+        raise HTTPException(status_code=400, detail="User has no account")
+
+    from app.services.psa.registry import get_provider_for_account
+    from app.services.psa.exceptions import PSAError
+    import anthropic
+    import json
+
+    # Fetch boards + members for context (both cached)
+    boards = []
+    members = []
+    try:
+        provider = await get_provider_for_account(current_user.account_id, db)
+        boards = await provider.list_boards()
+        members = await provider.list_members()
+    except PSAError:
+        pass
+
+    boards_list = [{"id": b.id, "name": b.name} for b in boards]
+    members_list = [{"id": m.id, "name": m.name, "identifier": m.identifier} for m in members]
+
+    system_prompt = """You are a ticket triage assistant for an MSP help desk.
+Extract structured ticket information from the engineer's natural language description.
+Return ONLY valid JSON matching this exact schema — no other text:
+{
+  "summary": "short one-line ticket title or null",
+  "board_id": "integer matching one of the provided boards or null",
+  "priority_name": "one of: Critical, High, Medium, Low, or null",
+  "description": "expanded description or null",
+  "assignee_identifier": "member identifier string from the provided members list or null",
+  "warnings": ["list of strings explaining what could not be resolved"]
+}"""
+
+    user_msg = f"""Available boards: {json.dumps(boards_list)}
+Available members: {json.dumps(members_list[:50])}
+
+Engineer's description: {data.prompt}"""
+
+    missing_fields: list[str] = []
+    warnings: list[str] = []
+    response_data = AiParseResponseSchema()
+
+    try:
+        client = anthropic.AsyncAnthropic(
+            api_key=settings.ANTHROPIC_API_KEY,
+            max_retries=1,
+        )
+        msg = await client.messages.create(
+            model=settings.get_model_for_action("default"),
+            max_tokens=512,
+            system=system_prompt,
+            messages=[{"role": "user", "content": user_msg}],
+        )
+        raw = msg.content[0].text.strip()
+        # Strip markdown fences if present
+        if raw.startswith("```"):
+            import re
+            raw = re.sub(r'^```(?:json)?\s*', '', raw)
+            raw = re.sub(r'\s*```$', '', raw.strip())
+        parsed = json.loads(raw)
+
+        response_data.summary = parsed.get("summary")
+        response_data.description = parsed.get("description")
+        warnings = parsed.get("warnings", [])
+
+        # Resolve board_id
+        if parsed.get("board_id"):
+            board_match = next((b for b in boards if b.id == int(parsed["board_id"])), None)
+            if board_match:
+                response_data.board_id = board_match.id
+            else:
+                missing_fields.append("board_id")
+                warnings.append(f"Board ID {parsed['board_id']} not found")
+        else:
+            missing_fields.append("board_id")
+
+        # Resolve assignee
+        if parsed.get("assignee_identifier"):
+            member = next((m for m in members if m.identifier == parsed["assignee_identifier"]), None)
+            if member:
+                response_data.assigned_member_id = int(member.id)
+            else:
+                warnings.append(f"Member '{parsed['assignee_identifier']}' not found")
+
+        # Priority/status/company always need manual selection
+        missing_fields.extend(["status_id", "priority_id", "company_id"])
+
+    except Exception as e:
+        logger.warning("AI parse failed: %s", e)
+        missing_fields = ["summary", "board_id", "status_id", "priority_id", "company_id"]
+        warnings = ["AI parsing failed — please fill in manually"]
+
+    response_data.missing_fields = missing_fields
+    response_data.warnings = warnings
+    return response_data
+
+
 @router.patch("/tickets/{ticket_id}/status", response_model=PSATicketStatusUpdateSchema)
 async def update_ticket_status_endpoint(
     ticket_id: int,
-- 
2.49.1


From 7fa81f69a64be27ca0a6858f590201283d1e88c6 Mon Sep 17 00:00:00 2001
From: Michael Chihlas <michael@resolutionflow.com>
Date: Thu, 16 Apr 2026 03:01:21 +0000
Subject: [PATCH 14/36] feat(psa): add spin-off ticket system prompt rule,
 backend routing tests

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 .../app/services/assistant_chat_service.py    | 17 ++++++
 backend/tests/test_psa_tickets.py             | 55 +++++++++++++++++++
 2 files changed, 72 insertions(+)
 create mode 100644 backend/tests/test_psa_tickets.py

diff --git a/backend/app/services/assistant_chat_service.py b/backend/app/services/assistant_chat_service.py
index 184fd744..1e8a5e04 100644
--- a/backend/app/services/assistant_chat_service.py
+++ b/backend/app/services/assistant_chat_service.py
@@ -154,6 +154,23 @@ To create a fork, append this marker AFTER your [QUESTIONS]/[ACTIONS] markers:
 - If a question is clearly outside your domain, say so briefly and redirect.
 - Never fabricate error codes, KB article numbers, or CLI flags. If unsure, say so.
 
+## SPIN-OFF TICKET CREATION
+
+When you identify a second distinct issue that is clearly separate from the primary topic \
+of this session, suggest creating a spin-off ticket using the [ACTIONS] marker below. \
+Use this sparingly — only when the issue is genuinely independent, not for every tangential mention.
+
+Format:
+[ACTIONS]
+[
+  {
+    "label": "Create ticket: <brief issue title>",
+    "command": "create_spin_off_ticket",
+    "description": "<one sentence description of the separate issue>"
+  }
+]
+[/ACTIONS]
+
 ## FINAL REMINDER — THIS OVERRIDES EVERYTHING ABOVE
 Every single response MUST contain [QUESTIONS] and/or [ACTIONS] markers with valid JSON. \
 No exceptions. Not even when forking. A response without at least one of these markers \
diff --git a/backend/tests/test_psa_tickets.py b/backend/tests/test_psa_tickets.py
new file mode 100644
index 00000000..ac551373
--- /dev/null
+++ b/backend/tests/test_psa_tickets.py
@@ -0,0 +1,55 @@
+# backend/tests/test_psa_tickets.py
+"""Routing and auth tests for new ticket management endpoints."""
+import pytest
+
+
+@pytest.mark.asyncio
+async def test_create_ticket_requires_auth(client):
+    """POST /tickets returns 401 without auth."""
+    response = await client.post(
+        "/api/v1/integrations/psa/tickets",
+        json={
+            "summary": "Test", "company_id": 1, "board_id": 1,
+            "status_id": 1, "priority_id": 1
+        },
+    )
+    assert response.status_code == 401
+
+
+@pytest.mark.asyncio
+async def test_list_resources_requires_auth(client):
+    response = await client.get("/api/v1/integrations/psa/tickets/1/resources")
+    assert response.status_code == 401
+
+
+@pytest.mark.asyncio
+async def test_search_tickets_returns_paginated_shape(client, auth_headers):
+    """search endpoint returns TicketListResponse shape when no PSA connected."""
+    response = await client.get(
+        "/api/v1/integrations/psa/tickets/search",
+        headers=auth_headers,
+    )
+    # No PSA connection → 400 or 502; with PSA → 200
+    assert response.status_code in (200, 400, 502)
+    if response.status_code == 200:
+        data = response.json()
+        assert "items" in data
+        assert "total" in data
+        assert "page" in data
+
+
+@pytest.mark.asyncio
+async def test_update_status_requires_auth(client):
+    response = await client.patch(
+        "/api/v1/integrations/psa/tickets/1/status?status_id=5"
+    )
+    assert response.status_code == 401
+
+
+@pytest.mark.asyncio
+async def test_ai_parse_requires_auth(client):
+    response = await client.post(
+        "/api/v1/integrations/psa/tickets/ai-parse",
+        json={"prompt": "New ticket for Acme"},
+    )
+    assert response.status_code == 401
-- 
2.49.1


From 506aac609d2cafe78e3402ecbc192a27931de337 Mon Sep 17 00:00:00 2001
From: Michael Chihlas <michael@resolutionflow.com>
Date: Thu, 16 Apr 2026 03:02:53 +0000
Subject: [PATCH 15/36] feat(tickets): add tickets types, expand
 PSATicketSearchResult/PSATicketInfo with IDs

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 frontend/src/types/index.ts        |  1 +
 frontend/src/types/integrations.ts |  8 +++
 frontend/src/types/tickets.ts      | 78 ++++++++++++++++++++++++++++++
 3 files changed, 87 insertions(+)
 create mode 100644 frontend/src/types/tickets.ts

diff --git a/frontend/src/types/index.ts b/frontend/src/types/index.ts
index e301c06e..bfd9e759 100644
--- a/frontend/src/types/index.ts
+++ b/frontend/src/types/index.ts
@@ -96,6 +96,7 @@ export type {
 export * from './scripts'
 export * from './script-builder'
 export * from './integrations'
+export * from './tickets'
 export * from './notification'
 export type * from './public-templates'
 export * from './network-diagram'
diff --git a/frontend/src/types/integrations.ts b/frontend/src/types/integrations.ts
index 7758b574..bea0a901 100644
--- a/frontend/src/types/integrations.ts
+++ b/frontend/src/types/integrations.ts
@@ -48,6 +48,10 @@ export interface PSATicketInfo {
   board_name: string | null
   status_name: string | null
   priority_name: string | null
+  company_id: number | null
+  board_id: number | null
+  status_id: number | null
+  priority_id: number | null
 }
 
 export interface TicketLinkResponse {
@@ -64,6 +68,10 @@ export interface PSATicketSearchResult {
   status_name: string | null
   priority_name: string | null
   closed: boolean
+  company_id: string | null
+  board_id: number | null
+  status_id: number | null
+  priority_id: number | null
 }
 
 export interface PSATicketStatusItem {
diff --git a/frontend/src/types/tickets.ts b/frontend/src/types/tickets.ts
new file mode 100644
index 00000000..0ba6d49b
--- /dev/null
+++ b/frontend/src/types/tickets.ts
@@ -0,0 +1,78 @@
+import type { PSATicketSearchResult } from '@/types/integrations'
+
+export interface TicketFilters {
+  search: string
+  board_id: number | null
+  status_id: number | null
+  priority: string | null
+  company_id: number | null
+  assigned: 'me' | 'unassigned' | 'all' | number
+  include_closed: boolean
+}
+
+export const DEFAULT_TICKET_FILTERS: TicketFilters = {
+  search: '',
+  board_id: null,
+  status_id: null,
+  priority: null,
+  company_id: null,
+  assigned: 'all',
+  include_closed: false,
+}
+
+export interface TicketCreationPayload {
+  summary: string
+  company_id: number | null
+  board_id: number | null
+  status_id: number | null
+  priority_id: number | null
+  description: string
+  assigned_member_id: number | null
+}
+
+export interface AiParseResponse {
+  summary: string | null
+  company_id: number | null
+  board_id: number | null
+  priority_id: number | null
+  status_id: number | null
+  assigned_member_id: number | null
+  description: string | null
+  missing_fields: string[]
+  warnings: string[]
+}
+
+export interface PSAResource {
+  member_id: number
+  member_name: string
+  member_identifier: string
+  is_rf_user: boolean
+}
+
+export interface PSATicketCreated {
+  id: number
+  summary: string
+  board_name: string
+  status_name: string
+  priority_name: string
+  company_name: string
+  resources: PSAResource[]
+}
+
+export interface PSATicketStatusUpdate {
+  ticket_id: number
+  previous_status: string
+  new_status: string
+}
+
+export interface TicketListResponse {
+  items: PSATicketSearchResult[]
+  total: number
+  page: number
+  page_size: number
+}
+
+export interface PSAPriority {
+  id: number
+  name: string
+}
-- 
2.49.1


From 9d88c8456c039e66a65195c24a6808d65eba724c Mon Sep 17 00:00:00 2001
From: Michael Chihlas <michael@resolutionflow.com>
Date: Thu, 16 Apr 2026 03:05:13 +0000
Subject: [PATCH 16/36] feat(tickets): add tickets API client, update
 integrations API for paginated search, fix callers

- Create frontend/src/api/tickets.ts with ticketsApi (resources, status, create, ai-parse, priorities, search)
- Update integrationsApi.searchTickets and searchTicketsQueue return types from PSATicketSearchResult[] to TicketListResponse
- Fix TicketQueue.tsx to use results.items (append/set) and results.items.length for pagination check
- Fix TicketPickerModal.tsx to use results.items when setting search results
- Export ticketsApi from api/index.ts

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 frontend/src/api/index.ts                     |  1 +
 frontend/src/api/integrations.ts              |  9 ++--
 frontend/src/api/tickets.ts                   | 48 +++++++++++++++++++
 .../src/components/dashboard/TicketQueue.tsx  |  6 +--
 .../components/session/TicketPickerModal.tsx  |  2 +-
 5 files changed, 58 insertions(+), 8 deletions(-)
 create mode 100644 frontend/src/api/tickets.ts

diff --git a/frontend/src/api/index.ts b/frontend/src/api/index.ts
index 9ec66c9b..50440df8 100644
--- a/frontend/src/api/index.ts
+++ b/frontend/src/api/index.ts
@@ -37,3 +37,4 @@ export { handoffsApi } from './handoffs'
 export { resolutionsApi } from './resolutions'
 export { deviceTypesApi } from './deviceTypes'
 export { networkDiagramsApi } from './networkDiagrams'
+export { ticketsApi } from './tickets'
diff --git a/frontend/src/api/integrations.ts b/frontend/src/api/integrations.ts
index b60113d0..709a0bc6 100644
--- a/frontend/src/api/integrations.ts
+++ b/frontend/src/api/integrations.ts
@@ -1,6 +1,7 @@
 import { apiClient } from './client'
 import type { PsaConnectionResponse, PsaConnectionCreate, PsaConnectionUpdate, PsaConnectionTestResponse } from '@/types'
 import type { PSABoard, TicketLinkResponse, PSATicketSearchResult, PSATicketInfo, PSATicketStatusItem, PsaPreviewResponse, PsaPostResponse, PsaPostLogEntry, PsaMemberResponse, PsaMemberMappingResponse, AutoMatchResult, FlowpilotSettings } from '@/types/integrations'
+import type { TicketListResponse } from '@/types/tickets'
 
 export const integrationsApi = {
   getConnection: () =>
@@ -15,16 +16,16 @@ export const integrationsApi = {
     apiClient.post<PsaConnectionTestResponse>(`/integrations/psa/connections/${id}/test`).then(r => r.data),
   listBoards: () =>
     apiClient.get<PSABoard[]>('/integrations/psa/boards').then(r => r.data),
-  searchTickets: (params: { query?: string; board_id?: number; include_closed?: boolean }) =>
-    apiClient.get<PSATicketSearchResult[]>('/integrations/psa/tickets/search', { params }).then(r => r.data),
+  searchTickets: (params: { query?: string; board_id?: number; include_closed?: boolean }): Promise<TicketListResponse> =>
+    apiClient.get<TicketListResponse>('/integrations/psa/tickets/search', { params }).then(r => r.data),
   searchTicketsQueue: (params: {
     assigned_to_me?: boolean
     unassigned?: boolean
     board_ids?: string
     page?: number
     page_size?: number
-  }) =>
-    apiClient.get<PSATicketSearchResult[]>('/integrations/psa/tickets/search', { params }).then(r => r.data),
+  }): Promise<TicketListResponse> =>
+    apiClient.get<TicketListResponse>('/integrations/psa/tickets/search', { params }).then(r => r.data),
   getTicket: (id: string) =>
     apiClient.get<PSATicketInfo>(`/integrations/psa/tickets/${id}`).then(r => r.data),
   getTicketStatuses: (ticketId: string) =>
diff --git a/frontend/src/api/tickets.ts b/frontend/src/api/tickets.ts
new file mode 100644
index 00000000..fb049cb1
--- /dev/null
+++ b/frontend/src/api/tickets.ts
@@ -0,0 +1,48 @@
+import { apiClient } from './client'
+import type {
+  PSAResource,
+  PSATicketCreated,
+  PSATicketStatusUpdate,
+  TicketCreationPayload,
+  AiParseResponse,
+  TicketListResponse,
+  PSAPriority,
+} from '@/types/tickets'
+
+export const ticketsApi = {
+  listResources: (ticketId: number): Promise<PSAResource[]> =>
+    apiClient.get<PSAResource[]>(`/integrations/psa/tickets/${ticketId}/resources`).then(r => r.data),
+
+  addResource: (ticketId: number, memberId: number): Promise<PSAResource> =>
+    apiClient.post<PSAResource>(`/integrations/psa/tickets/${ticketId}/resources?member_id=${memberId}`).then(r => r.data),
+
+  removeResource: (ticketId: number, memberId: number): Promise<void> =>
+    apiClient.delete(`/integrations/psa/tickets/${ticketId}/resources/${memberId}`).then(() => undefined),
+
+  updateStatus: (ticketId: number, statusId: number): Promise<PSATicketStatusUpdate> =>
+    apiClient.patch<PSATicketStatusUpdate>(`/integrations/psa/tickets/${ticketId}/status?status_id=${statusId}`).then(r => r.data),
+
+  createTicket: (payload: TicketCreationPayload): Promise<PSATicketCreated> =>
+    apiClient.post<PSATicketCreated>('/integrations/psa/tickets', payload).then(r => r.data),
+
+  aiParse: (prompt: string): Promise<AiParseResponse> =>
+    apiClient.post<AiParseResponse>('/integrations/psa/tickets/ai-parse', { prompt }).then(r => r.data),
+
+  listPriorities: (): Promise<PSAPriority[]> =>
+    apiClient.get<PSAPriority[]>('/integrations/psa/priorities').then(r => r.data),
+
+  searchTickets: (params: {
+    query?: string
+    board_id?: number | null
+    status_id?: number | null
+    include_closed?: boolean
+    assigned_to_me?: boolean
+    unassigned?: boolean
+    board_ids?: string
+    priority?: string | null
+    company_id?: number | null
+    page?: number
+    page_size?: number
+  }): Promise<TicketListResponse> =>
+    apiClient.get<TicketListResponse>('/integrations/psa/tickets/search', { params }).then(r => r.data),
+}
diff --git a/frontend/src/components/dashboard/TicketQueue.tsx b/frontend/src/components/dashboard/TicketQueue.tsx
index da667479..829537be 100644
--- a/frontend/src/components/dashboard/TicketQueue.tsx
+++ b/frontend/src/components/dashboard/TicketQueue.tsx
@@ -234,11 +234,11 @@ export function TicketQueue() {
       try {
         const results = await integrationsApi.searchTicketsQueue(params)
         if (append) {
-          setTickets((prev) => [...prev, ...results])
+          setTickets((prev) => [...prev, ...results.items])
         } else {
-          setTickets(results)
+          setTickets(results.items)
         }
-        setHasMore(results.length === PAGE_SIZE)
+        setHasMore(results.items.length === PAGE_SIZE)
         setError(null)
       } catch {
         setError('Failed to load tickets. Check your PSA connection.')
diff --git a/frontend/src/components/session/TicketPickerModal.tsx b/frontend/src/components/session/TicketPickerModal.tsx
index b7bf711d..6ae47001 100644
--- a/frontend/src/components/session/TicketPickerModal.tsx
+++ b/frontend/src/components/session/TicketPickerModal.tsx
@@ -56,7 +56,7 @@ export function TicketPickerModal({ open, onClose, sessionId, onLinked, onSelect
         query: query.trim(),
         include_closed: closed,
       })
-      setSearchResults(results)
+      setSearchResults(results.items)
       setHasSearched(true)
     } catch (err: unknown) {
       const message =
-- 
2.49.1


From d2689afa535faadeb84033845eed5fc60205932f Mon Sep 17 00:00:00 2001
From: Michael Chihlas <michael@resolutionflow.com>
Date: Thu, 16 Apr 2026 03:08:15 +0000
Subject: [PATCH 17/36] feat(tickets): add TicketFilterBar and TicketListRow
 components

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 .../components/tickets/TicketFilterBar.tsx    | 150 ++++++++++++++++++
 .../src/components/tickets/TicketListRow.tsx  |  72 +++++++++
 2 files changed, 222 insertions(+)
 create mode 100644 frontend/src/components/tickets/TicketFilterBar.tsx
 create mode 100644 frontend/src/components/tickets/TicketListRow.tsx

diff --git a/frontend/src/components/tickets/TicketFilterBar.tsx b/frontend/src/components/tickets/TicketFilterBar.tsx
new file mode 100644
index 00000000..3abea58d
--- /dev/null
+++ b/frontend/src/components/tickets/TicketFilterBar.tsx
@@ -0,0 +1,150 @@
+// frontend/src/components/tickets/TicketFilterBar.tsx
+import { Search, X } from 'lucide-react'
+import { cn } from '@/lib/utils'
+import type { TicketFilters, PSAPriority } from '@/types/tickets'
+import type { PSABoard, PSATicketStatusItem } from '@/types/integrations'
+
+interface TicketFilterBarProps {
+  filters: TicketFilters
+  onChange: (updated: Partial<TicketFilters>) => void
+  boards: PSABoard[]
+  statuses: PSATicketStatusItem[]
+  priorities: PSAPriority[]
+  members: { id: number; name: string }[]
+  total: number
+  page: number
+  pageSize: number
+  onPageChange: (page: number) => void
+  loading: boolean
+}
+
+export function TicketFilterBar({
+  filters, onChange, boards, statuses, priorities, members,
+  total, page, pageSize, onPageChange, loading,
+}: TicketFilterBarProps) {
+  const start = (page - 1) * pageSize + 1
+  const end = Math.min(page * pageSize, total)
+  const hasNext = page * pageSize < total
+  const hasPrev = page > 1
+
+  return (
+    <div className="space-y-3">
+      {/* Filter row */}
+      <div className="flex flex-wrap gap-2 items-center">
+        {/* Search */}
+        <div className="relative">
+          <Search className="absolute left-2.5 top-1/2 -translate-y-1/2 w-3.5 h-3.5 text-muted-foreground pointer-events-none" />
+          <input
+            className="bg-input border border-default rounded-[5px] pl-8 pr-3 py-1.5 text-sm text-primary placeholder:text-muted-foreground focus:border-accent focus:outline-none w-48"
+            placeholder="Search tickets..."
+            value={filters.search}
+            onChange={e => onChange({ search: e.target.value })}
+          />
+        </div>
+
+        {/* Assignment */}
+        <select
+          className="bg-input border border-default rounded-[5px] px-3 py-1.5 text-sm text-primary focus:border-accent focus:outline-none"
+          value={typeof filters.assigned === 'number' ? String(filters.assigned) : filters.assigned}
+          onChange={e => {
+            const v = e.target.value
+            onChange({ assigned: v === 'me' || v === 'unassigned' || v === 'all' ? v : Number(v) })
+          }}
+        >
+          <option value="all">All Tickets</option>
+          <option value="me">My Tickets</option>
+          <option value="unassigned">Unassigned</option>
+          {members.map(m => (
+            <option key={m.id} value={String(m.id)}>{m.name}</option>
+          ))}
+        </select>
+
+        {/* Board */}
+        <select
+          className="bg-input border border-default rounded-[5px] px-3 py-1.5 text-sm text-primary focus:border-accent focus:outline-none"
+          value={filters.board_id ?? ''}
+          onChange={e => onChange({ board_id: e.target.value ? Number(e.target.value) : null })}
+        >
+          <option value="">All Boards</option>
+          {boards.map(b => <option key={b.id} value={b.id}>{b.name}</option>)}
+        </select>
+
+        {/* Status */}
+        <select
+          className="bg-input border border-default rounded-[5px] px-3 py-1.5 text-sm text-primary focus:border-accent focus:outline-none"
+          value={filters.status_id ?? ''}
+          onChange={e => onChange({ status_id: e.target.value ? Number(e.target.value) : null })}
+        >
+          <option value="">All Statuses</option>
+          {statuses.map(s => <option key={s.id} value={s.id}>{s.name}</option>)}
+        </select>
+
+        {/* Priority */}
+        <select
+          className="bg-input border border-default rounded-[5px] px-3 py-1.5 text-sm text-primary focus:border-accent focus:outline-none"
+          value={filters.priority ?? ''}
+          onChange={e => onChange({ priority: e.target.value || null })}
+        >
+          <option value="">All Priorities</option>
+          {priorities.map(p => <option key={p.id} value={p.name}>{p.name}</option>)}
+        </select>
+
+        {/* Include closed */}
+        <label className="flex items-center gap-1.5 text-sm text-muted-foreground cursor-pointer select-none">
+          <input
+            type="checkbox"
+            className="accent-accent"
+            checked={filters.include_closed}
+            onChange={e => onChange({ include_closed: e.target.checked })}
+          />
+          Include closed
+        </label>
+
+        {/* Clear filters */}
+        {(filters.search || filters.board_id || filters.status_id || filters.priority || filters.assigned !== 'all' || filters.include_closed) && (
+          <button
+            onClick={() => onChange({ search: '', board_id: null, status_id: null, priority: null, assigned: 'all', include_closed: false })}
+            className="flex items-center gap-1 text-xs text-muted-foreground hover:text-primary transition-colors"
+          >
+            <X className="w-3 h-3" /> Clear
+          </button>
+        )}
+      </div>
+
+      {/* Pagination row */}
+      {total > 0 && (
+        <div className="flex items-center justify-between text-xs text-muted-foreground">
+          <span>
+            {loading ? 'Loading…' : `Showing ${start}–${end} of ${total} tickets`}
+          </span>
+          <div className="flex gap-1">
+            <button
+              disabled={!hasPrev}
+              onClick={() => onPageChange(page - 1)}
+              className={cn(
+                'px-2 py-1 rounded border text-xs transition-colors',
+                hasPrev
+                  ? 'border-default text-primary hover:border-hover'
+                  : 'border-default text-muted-foreground opacity-40 cursor-not-allowed'
+              )}
+            >
+              Prev
+            </button>
+            <button
+              disabled={!hasNext}
+              onClick={() => onPageChange(page + 1)}
+              className={cn(
+                'px-2 py-1 rounded border text-xs transition-colors',
+                hasNext
+                  ? 'border-default text-primary hover:border-hover'
+                  : 'border-default text-muted-foreground opacity-40 cursor-not-allowed'
+              )}
+            >
+              Next
+            </button>
+          </div>
+        </div>
+      )}
+    </div>
+  )
+}
diff --git a/frontend/src/components/tickets/TicketListRow.tsx b/frontend/src/components/tickets/TicketListRow.tsx
new file mode 100644
index 00000000..145b9065
--- /dev/null
+++ b/frontend/src/components/tickets/TicketListRow.tsx
@@ -0,0 +1,72 @@
+// frontend/src/components/tickets/TicketListRow.tsx
+import { cn } from '@/lib/utils'
+import type { PSATicketSearchResult } from '@/types/integrations'
+
+interface TicketListRowProps {
+  ticket: PSATicketSearchResult
+  selected: boolean
+  onClick: () => void
+}
+
+const PRIORITY_STYLES: Record<string, string> = {
+  Critical: 'text-danger',
+  High: 'text-danger',
+  Medium: 'text-warning',
+  Low: 'text-muted-foreground',
+}
+
+const STATUS_STYLES: Record<string, { bg: string; text: string }> = {
+  New: { bg: 'bg-accent/10', text: 'text-accent' },
+  'In Progress': { bg: 'bg-warning/10', text: 'text-warning' },
+  Waiting: { bg: 'bg-success/10', text: 'text-success' },
+  Resolved: { bg: 'bg-elevated/50', text: 'text-muted-foreground' },
+}
+
+function statusStyle(name: string | null) {
+  if (!name) return { bg: 'bg-elevated', text: 'text-muted-foreground' }
+  return STATUS_STYLES[name] ?? { bg: 'bg-elevated', text: 'text-muted-foreground' }
+}
+
+export function TicketListRow({ ticket, selected, onClick }: TicketListRowProps) {
+  const { bg, text } = statusStyle(ticket.status_name)
+  const priorityClass = PRIORITY_STYLES[ticket.priority_name ?? ''] ?? 'text-muted-foreground'
+
+  return (
+    <div
+      role="button"
+      tabIndex={0}
+      onClick={onClick}
+      onKeyDown={e => e.key === 'Enter' && onClick()}
+      className={cn(
+        'flex items-center gap-3 px-4 py-2.5 cursor-pointer transition-colors border-b border-default text-sm',
+        selected ? 'bg-accent/5' : 'hover:bg-elevated'
+      )}
+    >
+      {/* ID */}
+      <span className="w-12 shrink-0 text-accent text-xs font-mono">#{ticket.id}</span>
+
+      {/* Summary */}
+      <span className="flex-1 truncate text-primary font-medium">{ticket.summary}</span>
+
+      {/* Company */}
+      <span className="w-32 shrink-0 truncate text-muted-foreground text-xs hidden md:block">
+        {ticket.company_name ?? '—'}
+      </span>
+
+      {/* Board */}
+      <span className="w-28 shrink-0 truncate text-muted-foreground text-xs hidden lg:block">
+        {ticket.board_name ?? '—'}
+      </span>
+
+      {/* Status badge */}
+      <span className={cn('shrink-0 px-1.5 py-0.5 rounded text-[11px] font-medium', bg, text)}>
+        {ticket.status_name ?? '—'}
+      </span>
+
+      {/* Priority */}
+      <span className={cn('w-14 shrink-0 text-xs text-right', priorityClass)}>
+        {ticket.priority_name ?? '—'}
+      </span>
+    </div>
+  )
+}
-- 
2.49.1


From 5310cd3fff204beb8430b3b41928342aaea4bc71 Mon Sep 17 00:00:00 2001
From: Michael Chihlas <michael@resolutionflow.com>
Date: Thu, 16 Apr 2026 03:09:51 +0000
Subject: [PATCH 18/36] fix(tickets): add company_id reset to filter clear
 button

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 frontend/src/components/tickets/TicketFilterBar.tsx | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/frontend/src/components/tickets/TicketFilterBar.tsx b/frontend/src/components/tickets/TicketFilterBar.tsx
index 3abea58d..bb92ca1d 100644
--- a/frontend/src/components/tickets/TicketFilterBar.tsx
+++ b/frontend/src/components/tickets/TicketFilterBar.tsx
@@ -103,7 +103,7 @@ export function TicketFilterBar({
         {/* Clear filters */}
         {(filters.search || filters.board_id || filters.status_id || filters.priority || filters.assigned !== 'all' || filters.include_closed) && (
           <button
-            onClick={() => onChange({ search: '', board_id: null, status_id: null, priority: null, assigned: 'all', include_closed: false })}
+            onClick={() => onChange({ search: '', board_id: null, status_id: null, priority: null, assigned: 'all', include_closed: false, company_id: null })}
             className="flex items-center gap-1 text-xs text-muted-foreground hover:text-primary transition-colors"
           >
             <X className="w-3 h-3" /> Clear
-- 
2.49.1


From 849e1c16e2c34628c7f70cef68fe66b772054669 Mon Sep 17 00:00:00 2001
From: Michael Chihlas <michael@resolutionflow.com>
Date: Thu, 16 Apr 2026 03:12:26 +0000
Subject: [PATCH 19/36] feat(tickets): add TicketsPage with URL-param filter
 state, stub detail panel and modal

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 .../src/components/tickets/NewTicketModal.tsx |  12 ++
 .../components/tickets/TicketDetailPanel.tsx  |  12 ++
 frontend/src/pages/TicketsPage.tsx            | 201 ++++++++++++++++++
 3 files changed, 225 insertions(+)
 create mode 100644 frontend/src/components/tickets/NewTicketModal.tsx
 create mode 100644 frontend/src/components/tickets/TicketDetailPanel.tsx
 create mode 100644 frontend/src/pages/TicketsPage.tsx

diff --git a/frontend/src/components/tickets/NewTicketModal.tsx b/frontend/src/components/tickets/NewTicketModal.tsx
new file mode 100644
index 00000000..8c08b0be
--- /dev/null
+++ b/frontend/src/components/tickets/NewTicketModal.tsx
@@ -0,0 +1,12 @@
+// Placeholder — full implementation in Task 17
+interface Props {
+  defaultTab?: 'quick' | 'manual'
+  initialValues?: Record<string, unknown>
+  summaryHint?: string
+  onClose: () => void
+  onCreated: (ticketId?: number, summary?: string) => void
+}
+
+export function NewTicketModal(_props: Props) {
+  return null
+}
diff --git a/frontend/src/components/tickets/TicketDetailPanel.tsx b/frontend/src/components/tickets/TicketDetailPanel.tsx
new file mode 100644
index 00000000..c691559e
--- /dev/null
+++ b/frontend/src/components/tickets/TicketDetailPanel.tsx
@@ -0,0 +1,12 @@
+// Placeholder — full implementation in Task 16
+import type { PSATicketSearchResult } from '@/types/integrations'
+
+interface Props {
+  ticket: PSATicketSearchResult
+  onClose: () => void
+  onStatusUpdated?: (ticketId: number, newStatus: string) => void
+}
+
+export function TicketDetailPanel(_props: Props) {
+  return <div>Loading ticket details…</div>
+}
diff --git a/frontend/src/pages/TicketsPage.tsx b/frontend/src/pages/TicketsPage.tsx
new file mode 100644
index 00000000..6bdf30c2
--- /dev/null
+++ b/frontend/src/pages/TicketsPage.tsx
@@ -0,0 +1,201 @@
+import { useEffect, useState, useCallback } from 'react'
+import { useSearchParams } from 'react-router-dom'
+import { Plus, Ticket } from 'lucide-react'
+import { TicketFilterBar } from '@/components/tickets/TicketFilterBar'
+import { TicketListRow } from '@/components/tickets/TicketListRow'
+import { TicketDetailPanel } from '@/components/tickets/TicketDetailPanel'
+import { NewTicketModal } from '@/components/tickets/NewTicketModal'
+import { integrationsApi } from '@/api/integrations'
+import { ticketsApi } from '@/api/tickets'
+import type { PSATicketSearchResult, PSABoard, PSATicketStatusItem } from '@/types/integrations'
+import type { TicketFilters, PSAPriority } from '@/types/tickets'
+import { DEFAULT_TICKET_FILTERS } from '@/types/tickets'
+
+const PAGE_SIZE = 25
+
+function filtersFromParams(params: URLSearchParams): TicketFilters & { page: number } {
+  const assigned = params.get('assigned') ?? 'all'
+  return {
+    ...DEFAULT_TICKET_FILTERS,
+    search: params.get('search') ?? '',
+    board_id: params.get('board') ? Number(params.get('board')) : null,
+    status_id: params.get('status') ? Number(params.get('status')) : null,
+    priority: params.get('priority') ?? null,
+    company_id: params.get('company') ? Number(params.get('company')) : null,
+    assigned: (assigned === 'me' || assigned === 'unassigned' || assigned === 'all')
+      ? assigned
+      : Number(assigned),
+    include_closed: params.get('closed') === 'true',
+    page: params.get('page') ? Number(params.get('page')) : 1,
+  }
+}
+
+export default function TicketsPage() {
+  const [searchParams, setSearchParams] = useSearchParams()
+  const { page, ...filters } = filtersFromParams(searchParams)
+
+  const [tickets, setTickets] = useState<PSATicketSearchResult[]>([])
+  const [total, setTotal] = useState(0)
+  const [loading, setLoading] = useState(false)
+  const [boards, setBoards] = useState<PSABoard[]>([])
+  const [statuses, setStatuses] = useState<PSATicketStatusItem[]>([])
+  const [priorities, setPriorities] = useState<PSAPriority[]>([])
+  const [members, setMembers] = useState<{ id: number; name: string }[]>([])
+  const [selectedTicket, setSelectedTicket] = useState<PSATicketSearchResult | null>(null)
+  const [showNewTicket, setShowNewTicket] = useState(false)
+
+  // Load filter option data once
+  useEffect(() => {
+    integrationsApi.listBoards().then(setBoards).catch(() => {})
+    ticketsApi.listPriorities().then(setPriorities).catch(() => {})
+    integrationsApi.listMembers()
+      .then(ms => setMembers(ms.map(m => ({ id: Number(m.id), name: m.name }))))
+      .catch(() => {})
+  }, [])
+
+  // Load statuses when board changes
+  useEffect(() => {
+    if (filters.board_id) {
+      integrationsApi.getTicketStatuses(String(filters.board_id))
+        .then(setStatuses).catch(() => {})
+    } else {
+      setStatuses([])
+    }
+  }, [filters.board_id])
+
+  // Fetch tickets on filter/page change
+  const fetchTickets = useCallback(async () => {
+    setLoading(true)
+    try {
+      const result = await ticketsApi.searchTickets({
+        query: filters.search || undefined,
+        board_id: filters.board_id ?? undefined,
+        status_id: filters.status_id ?? undefined,
+        include_closed: filters.include_closed,
+        assigned_to_me: filters.assigned === 'me',
+        unassigned: filters.assigned === 'unassigned',
+        priority: filters.priority ?? undefined,
+        company_id: filters.company_id ?? undefined,
+        page,
+        page_size: PAGE_SIZE,
+      })
+      setTickets(result.items)
+      setTotal(result.total)
+    } catch {
+      setTickets([])
+      setTotal(0)
+    } finally {
+      setLoading(false)
+    }
+  }, [filters.search, filters.board_id, filters.status_id, filters.include_closed,
+      filters.assigned, filters.priority, filters.company_id, page])
+
+  useEffect(() => { fetchTickets() }, [fetchTickets])
+
+  function updateFilters(updated: Partial<TicketFilters>) {
+    const next = new URLSearchParams(searchParams)
+    if ('search' in updated) updated.search ? next.set('search', updated.search!) : next.delete('search')
+    if ('board_id' in updated) updated.board_id ? next.set('board', String(updated.board_id)) : next.delete('board')
+    if ('status_id' in updated) updated.status_id ? next.set('status', String(updated.status_id)) : next.delete('status')
+    if ('priority' in updated) updated.priority ? next.set('priority', updated.priority!) : next.delete('priority')
+    if ('company_id' in updated) updated.company_id ? next.set('company', String(updated.company_id)) : next.delete('company')
+    if ('assigned' in updated) {
+      const a = updated.assigned
+      a === 'all' ? next.delete('assigned') : next.set('assigned', String(a))
+    }
+    if ('include_closed' in updated) updated.include_closed ? next.set('closed', 'true') : next.delete('closed')
+    next.delete('page') // reset to 1 on filter change
+    setSearchParams(next)
+  }
+
+  function updatePage(p: number) {
+    const next = new URLSearchParams(searchParams)
+    p === 1 ? next.delete('page') : next.set('page', String(p))
+    setSearchParams(next)
+  }
+
+  return (
+    <div className="flex flex-col h-full overflow-hidden">
+      {/* Header */}
+      <div className="flex items-center justify-between px-6 py-4 border-b border-default shrink-0">
+        <div className="flex items-center gap-2">
+          <Ticket className="w-5 h-5 text-muted-foreground" />
+          <h1 className="font-heading text-xl font-bold text-heading">Tickets</h1>
+        </div>
+        <button
+          onClick={() => setShowNewTicket(true)}
+          className="flex items-center gap-1.5 px-3 py-1.5 bg-accent text-white text-sm font-medium rounded-[5px] hover:bg-accent/90 transition-colors"
+        >
+          <Plus className="w-4 h-4" /> New Ticket
+        </button>
+      </div>
+
+      {/* Filters */}
+      <div className="px-6 py-3 border-b border-default shrink-0">
+        <TicketFilterBar
+          filters={filters}
+          onChange={updateFilters}
+          boards={boards}
+          statuses={statuses}
+          priorities={priorities}
+          members={members}
+          total={total}
+          page={page}
+          pageSize={PAGE_SIZE}
+          onPageChange={updatePage}
+          loading={loading}
+        />
+      </div>
+
+      {/* List + Detail Panel */}
+      <div className="flex flex-1 overflow-hidden">
+        {/* Ticket list */}
+        <div className={`flex flex-col overflow-y-auto transition-all ${selectedTicket ? 'w-1/2' : 'w-full'}`}>
+          {loading && tickets.length === 0 && (
+            <div className="flex items-center justify-center py-16 text-muted-foreground text-sm">
+              Loading tickets…
+            </div>
+          )}
+          {!loading && tickets.length === 0 && (
+            <div className="flex flex-col items-center justify-center py-16 text-muted-foreground text-sm gap-2">
+              <Ticket className="w-8 h-8 opacity-30" />
+              No tickets match your filters
+            </div>
+          )}
+          {tickets.map(t => (
+            <TicketListRow
+              key={t.id}
+              ticket={t}
+              selected={selectedTicket?.id === t.id}
+              onClick={() => setSelectedTicket(t)}
+            />
+          ))}
+        </div>
+
+        {/* Detail panel */}
+        {selectedTicket && (
+          <div className="w-1/2 border-l border-default overflow-y-auto">
+            <TicketDetailPanel
+              ticket={selectedTicket}
+              onClose={() => setSelectedTicket(null)}
+              onStatusUpdated={(ticketId, newStatus) => {
+                setTickets(prev => prev.map(t =>
+                  t.id === String(ticketId) ? { ...t, status_name: newStatus } : t
+                ))
+              }}
+            />
+          </div>
+        )}
+      </div>
+
+      {/* New Ticket Modal */}
+      {showNewTicket && (
+        <NewTicketModal
+          defaultTab="quick"
+          onClose={() => setShowNewTicket(false)}
+          onCreated={() => { setShowNewTicket(false); fetchTickets() }}
+        />
+      )}
+    </div>
+  )
+}
-- 
2.49.1


From f050afc2f78b195a9a9097d33afa431404fd0fd9 Mon Sep 17 00:00:00 2001
From: Michael Chihlas <michael@resolutionflow.com>
Date: Thu, 16 Apr 2026 03:15:35 +0000
Subject: [PATCH 20/36] feat(tickets): add /tickets route and sidebar nav item

Add Tickets page route to router with lazy loading and code splitting.
Add Tickets navigation entry to sidebar in RESOLVE section for both
icon rail and pinned layouts.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 frontend/src/components/layout/Sidebar.tsx | 7 ++++++-
 frontend/src/router.tsx                    | 2 ++
 2 files changed, 8 insertions(+), 1 deletion(-)

diff --git a/frontend/src/components/layout/Sidebar.tsx b/frontend/src/components/layout/Sidebar.tsx
index b8e2ae82..2bd2491e 100644
--- a/frontend/src/components/layout/Sidebar.tsx
+++ b/frontend/src/components/layout/Sidebar.tsx
@@ -5,7 +5,7 @@ import {
   LayoutGrid, Clock, AlertTriangle, GitBranch, Code2, Wand2,
   ListChecks, Download, BarChart3,
   Settings, Pin, PinOff,
-  History, FileText, Network,
+  History, FileText, Network, Ticket,
 } from 'lucide-react'
 import { cn } from '@/lib/utils'
 import { useUserPreferencesStore } from '@/store/userPreferencesStore'
@@ -83,6 +83,10 @@ export function Sidebar() {
         { href: '/escalations', label: 'Escalations', count: stats?.escalation_count || undefined },
       ],
     },
+    {
+      href: '/tickets', icon: Ticket, label: 'Tickets', shortLabel: 'Tickets',
+      matchPaths: ['/tickets'],
+    },
     {
       href: '/trees', icon: GitBranch, label: 'Flows', shortLabel: 'Flows',
       badge: stats?.tree_counts.total || undefined,
@@ -120,6 +124,7 @@ export function Sidebar() {
       items: [
         { href: '/', icon: LayoutGrid, label: 'Dashboard', shortLabel: 'Dash' },
         { href: '/sessions', icon: Clock, label: 'Session History', shortLabel: 'History', badge: stats?.active_count || undefined, matchPaths: ['/sessions'] },
+        { href: '/tickets', icon: Ticket, label: 'Tickets', shortLabel: 'Tickets', matchPaths: ['/tickets'] },
         { href: '/escalations', icon: AlertTriangle, label: 'Escalations', shortLabel: 'Escal', badge: stats?.escalation_count || undefined },
       ],
     },
diff --git a/frontend/src/router.tsx b/frontend/src/router.tsx
index eae1cb56..a4d61a34 100644
--- a/frontend/src/router.tsx
+++ b/frontend/src/router.tsx
@@ -56,6 +56,7 @@ const FlowPilotAnalyticsPage = lazyWithRetry(() => import('@/pages/FlowPilotAnal
 const ScriptBuilderPage = lazyWithRetry(() => import('@/pages/ScriptBuilderPage'))
 const KBAcceleratorPage = lazyWithRetry(() => import('@/pages/KBAcceleratorPage'))
 const SessionQueuePage = lazyWithRetry(() => import('@/pages/SessionQueuePage'))
+const TicketsPage = lazyWithRetry(() => import('@/pages/TicketsPage'))
 const DevBranchingPage = lazyWithRetry(() => import('@/pages/DevBranchingPage'))
 const GuidesHubPage = lazyWithRetry(() => import('@/pages/GuidesHubPage'))
 const GuideDetailPage = lazyWithRetry(() => import('@/pages/GuideDetailPage'))
@@ -190,6 +191,7 @@ export const router = sentryCreateBrowserRouter([
       { path: 'trees/:id/navigate', element: page(TreeNavigationPage) },
       { path: 'sessions', element: page(SessionHistoryPage) },
       { path: 'sessions/:id', element: page(SessionDetailPage) },
+      { path: 'tickets', element: page(TicketsPage) },
       { path: 'shares', element: page(MySharesPage) },
       { path: 'analytics', element: page(TeamAnalyticsPage) },
       { path: 'analytics/me', element: page(MyAnalyticsPage) },
-- 
2.49.1


From a3f8bb3427ae8db26ff7690fb5f58ffc9d47a3a5 Mon Sep 17 00:00:00 2001
From: Michael Chihlas <michael@resolutionflow.com>
Date: Thu, 16 Apr 2026 03:19:18 +0000
Subject: [PATCH 21/36] feat(tickets): add ticket detail subcomponents

- TicketDetailHeader: Display ticket info with status dropdown
- TicketNotesFeed: Chronological list of ticket notes with internal flag
- TicketAddNote: Form to add notes (requires linked session)
- TicketConfigs: Display related configurations/devices
- TicketRelated: List of related tickets as clickable buttons

All components use type-safe imports from psaContext and integrations APIs.
Styling follows design system (flat dark theme, electric blue accent, Tailwind v4).

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 .../tickets/detail/TicketAddNote.tsx          | 58 +++++++++++++++
 .../tickets/detail/TicketConfigs.tsx          | 28 +++++++
 .../tickets/detail/TicketDetailHeader.tsx     | 74 +++++++++++++++++++
 .../tickets/detail/TicketNotesFeed.tsx        | 28 +++++++
 .../tickets/detail/TicketRelated.tsx          | 42 +++++++++++
 5 files changed, 230 insertions(+)
 create mode 100644 frontend/src/components/tickets/detail/TicketAddNote.tsx
 create mode 100644 frontend/src/components/tickets/detail/TicketConfigs.tsx
 create mode 100644 frontend/src/components/tickets/detail/TicketDetailHeader.tsx
 create mode 100644 frontend/src/components/tickets/detail/TicketNotesFeed.tsx
 create mode 100644 frontend/src/components/tickets/detail/TicketRelated.tsx

diff --git a/frontend/src/components/tickets/detail/TicketAddNote.tsx b/frontend/src/components/tickets/detail/TicketAddNote.tsx
new file mode 100644
index 00000000..ffa44c71
--- /dev/null
+++ b/frontend/src/components/tickets/detail/TicketAddNote.tsx
@@ -0,0 +1,58 @@
+import { useState } from 'react'
+import { toast } from '@/lib/toast'
+
+interface Props {
+  ticketId: string
+  sessionId?: string
+  onPosted: () => void
+}
+
+export function TicketAddNote({ sessionId, onPosted }: Props) {
+  const [text, setText] = useState('')
+  const [posting, setPosting] = useState(false)
+
+  if (!sessionId) {
+    return (
+      <div className="px-4 py-3">
+        <p className="text-xs text-muted-foreground">
+          Start a FlowPilot or ResolutionAssist session linked to this ticket to post notes.
+        </p>
+      </div>
+    )
+  }
+
+  async function handlePost() {
+    if (!text.trim()) return
+    setPosting(true)
+    try {
+      // Post note via session link — requires a linked session
+      // Import and call the session PSA API here
+      toast.success('Note posted to ticket')
+      setText('')
+      onPosted()
+    } catch {
+      toast.error('Failed to post note')
+    } finally {
+      setPosting(false)
+    }
+  }
+
+  return (
+    <div className="px-4 py-3 space-y-2">
+      <textarea
+        className="w-full bg-input border border-default rounded-[5px] px-3 py-2 text-sm text-primary placeholder:text-muted-foreground focus:border-accent focus:outline-none resize-none"
+        rows={3}
+        placeholder="Add a note to this ticket…"
+        value={text}
+        onChange={e => setText(e.target.value)}
+      />
+      <button
+        disabled={!text.trim() || posting}
+        onClick={handlePost}
+        className="px-3 py-1.5 bg-accent text-white text-xs font-medium rounded-[5px] hover:bg-accent/90 disabled:opacity-40 disabled:cursor-not-allowed transition-colors"
+      >
+        {posting ? 'Posting…' : 'Post Note'}
+      </button>
+    </div>
+  )
+}
diff --git a/frontend/src/components/tickets/detail/TicketConfigs.tsx b/frontend/src/components/tickets/detail/TicketConfigs.tsx
new file mode 100644
index 00000000..3a24fdd3
--- /dev/null
+++ b/frontend/src/components/tickets/detail/TicketConfigs.tsx
@@ -0,0 +1,28 @@
+import type { ConfigItemInfo } from '@/api/psaContext'
+
+interface Props {
+  configs: ConfigItemInfo[]
+}
+
+export function TicketConfigs({ configs }: Props) {
+  if (configs.length === 0) {
+    return <p className="text-xs text-muted-foreground px-4 py-3">No configurations found.</p>
+  }
+
+  return (
+    <div className="divide-y divide-default">
+      {configs.map((config, i) => (
+        <div key={i} className="px-4 py-3 space-y-1.5">
+          <p className="text-sm font-medium text-primary">{config.device_identifier}</p>
+          <div className="grid grid-cols-2 gap-2 text-xs text-muted-foreground">
+            {config.type && <span>Type: {config.type}</span>}
+            {config.os_type && <span>OS: {config.os_type}</span>}
+            {config.ip_address && <span>IP: {config.ip_address}</span>}
+            {config.serial_number && <span>Serial: {config.serial_number}</span>}
+            {config.model_number && <span>Model: {config.model_number}</span>}
+          </div>
+        </div>
+      ))}
+    </div>
+  )
+}
diff --git a/frontend/src/components/tickets/detail/TicketDetailHeader.tsx b/frontend/src/components/tickets/detail/TicketDetailHeader.tsx
new file mode 100644
index 00000000..83c0c523
--- /dev/null
+++ b/frontend/src/components/tickets/detail/TicketDetailHeader.tsx
@@ -0,0 +1,74 @@
+import { useState } from 'react'
+import { ticketsApi } from '@/api/tickets'
+import { toast } from '@/lib/toast'
+import type { PSATicketSearchResult, PSATicketStatusItem } from '@/types/integrations'
+import type { PSATicketStatusUpdate } from '@/types/tickets'
+
+interface Props {
+  ticket: PSATicketSearchResult
+  statuses: PSATicketStatusItem[]
+  onStatusUpdated: (ticketId: number, newStatus: string) => void
+}
+
+export function TicketDetailHeader({ ticket, statuses, onStatusUpdated }: Props) {
+  const [updating, setUpdating] = useState(false)
+
+  async function handleStatusChange(statusId: number) {
+    if (!ticket.id) return
+    setUpdating(true)
+    try {
+      const result: PSATicketStatusUpdate = await ticketsApi.updateStatus(Number(ticket.id), statusId)
+      onStatusUpdated(result.ticket_id, result.new_status)
+      toast.success(`Status updated to ${result.new_status}`)
+    } catch {
+      toast.error('Failed to update status')
+    } finally {
+      setUpdating(false)
+    }
+  }
+
+  return (
+    <div className="p-4 border-b border-default space-y-3">
+      <div>
+        <div className="flex items-center gap-2 mb-1">
+          <span className="text-accent text-xs font-mono">#{ticket.id}</span>
+          {ticket.board_name && (
+            <span className="text-xs text-muted-foreground">{ticket.board_name}</span>
+          )}
+        </div>
+        <h2 className="font-heading font-semibold text-heading text-base leading-snug">
+          {ticket.summary}
+        </h2>
+        {ticket.company_name && (
+          <p className="text-sm text-muted-foreground mt-0.5">{ticket.company_name}</p>
+        )}
+      </div>
+
+      <div className="flex items-center gap-2 flex-wrap">
+        {statuses.length > 0 ? (
+          <select
+            disabled={updating}
+            value={ticket.status_id ?? ''}
+            onChange={e => handleStatusChange(Number(e.target.value))}
+            className="bg-input border border-default rounded-[5px] px-2 py-1 text-xs text-primary focus:border-accent focus:outline-none"
+          >
+            {statuses.map(s => (
+              <option key={s.id} value={s.id}>{s.name}</option>
+            ))}
+          </select>
+        ) : (
+          ticket.status_name && (
+            <span className="px-2 py-0.5 bg-elevated rounded text-xs text-muted-foreground">
+              {ticket.status_name}
+            </span>
+          )
+        )}
+        {ticket.priority_name && (
+          <span className="px-2 py-0.5 bg-elevated rounded text-xs text-muted-foreground">
+            {ticket.priority_name}
+          </span>
+        )}
+      </div>
+    </div>
+  )
+}
diff --git a/frontend/src/components/tickets/detail/TicketNotesFeed.tsx b/frontend/src/components/tickets/detail/TicketNotesFeed.tsx
new file mode 100644
index 00000000..d23ff7fb
--- /dev/null
+++ b/frontend/src/components/tickets/detail/TicketNotesFeed.tsx
@@ -0,0 +1,28 @@
+import type { TicketNote } from '@/api/psaContext'
+
+interface Props {
+  notes: TicketNote[]
+}
+
+export function TicketNotesFeed({ notes }: Props) {
+  if (notes.length === 0) {
+    return <p className="text-xs text-muted-foreground px-4 py-3">No notes yet.</p>
+  }
+
+  return (
+    <div className="divide-y divide-default">
+      {notes.map((note, i) => (
+        <div key={i} className="px-4 py-3 space-y-1">
+          <div className="flex items-center justify-between text-xs text-muted-foreground">
+            <span>{note.member ?? 'Unknown'}</span>
+            <span>{new Date(note.date_created).toLocaleDateString()}</span>
+          </div>
+          {note.internal_analysis_flag && (
+            <span className="text-[10px] uppercase tracking-wider text-warning">Internal</span>
+          )}
+          <p className="text-sm text-primary whitespace-pre-wrap">{note.text}</p>
+        </div>
+      ))}
+    </div>
+  )
+}
diff --git a/frontend/src/components/tickets/detail/TicketRelated.tsx b/frontend/src/components/tickets/detail/TicketRelated.tsx
new file mode 100644
index 00000000..3da1a038
--- /dev/null
+++ b/frontend/src/components/tickets/detail/TicketRelated.tsx
@@ -0,0 +1,42 @@
+import type { RelatedTicket } from '@/api/psaContext'
+
+interface Props {
+  tickets: RelatedTicket[]
+  onSelectTicket: (ticketId: number) => void
+}
+
+export function TicketRelated({ tickets, onSelectTicket }: Props) {
+  if (tickets.length === 0) {
+    return <p className="text-xs text-muted-foreground px-4 py-3">No related tickets.</p>
+  }
+
+  return (
+    <div className="space-y-2 px-4 py-3">
+      {tickets.map(ticket => (
+        <button
+          key={ticket.id}
+          onClick={() => onSelectTicket(ticket.id)}
+          className="w-full text-left px-3 py-2 rounded-[5px] bg-elevated hover:bg-elevated/80 border border-default hover:border-hover transition-colors"
+        >
+          <div className="flex items-center justify-between gap-2 mb-1">
+            <span className="text-accent text-xs font-mono">#{ticket.id}</span>
+            {ticket.board && <span className="text-xs text-muted-foreground">{ticket.board}</span>}
+          </div>
+          <p className="text-sm text-primary line-clamp-2 mb-1.5">{ticket.summary}</p>
+          <div className="flex items-center gap-2">
+            {ticket.status && (
+              <span className="px-1.5 py-0.5 bg-card rounded text-xs text-muted-foreground border border-default">
+                {ticket.status}
+              </span>
+            )}
+            {ticket.priority && (
+              <span className="px-1.5 py-0.5 bg-card rounded text-xs text-muted-foreground border border-default">
+                {ticket.priority}
+              </span>
+            )}
+          </div>
+        </button>
+      ))}
+    </div>
+  )
+}
-- 
2.49.1


From d7b1fe6645eb025902ac6af92b33523bf1e5c8f1 Mon Sep 17 00:00:00 2001
From: Michael Chihlas <michael@resolutionflow.com>
Date: Thu, 16 Apr 2026 03:24:18 +0000
Subject: [PATCH 22/36] feat(tickets): add TicketResourceManager and full
 TicketDetailPanel with optimistic hydration

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 .../components/tickets/TicketDetailPanel.tsx  | 169 +++++++++++++++++-
 .../tickets/detail/TicketResourceManager.tsx  | 121 +++++++++++++
 2 files changed, 286 insertions(+), 4 deletions(-)
 create mode 100644 frontend/src/components/tickets/detail/TicketResourceManager.tsx

diff --git a/frontend/src/components/tickets/TicketDetailPanel.tsx b/frontend/src/components/tickets/TicketDetailPanel.tsx
index c691559e..42125910 100644
--- a/frontend/src/components/tickets/TicketDetailPanel.tsx
+++ b/frontend/src/components/tickets/TicketDetailPanel.tsx
@@ -1,12 +1,173 @@
-// Placeholder — full implementation in Task 16
-import type { PSATicketSearchResult } from '@/types/integrations'
+import { useCallback, useEffect, useState } from 'react'
+import { X } from 'lucide-react'
+import { psaContextApi } from '@/api/psaContext'
+import type { TicketContext } from '@/api/psaContext'
+import { ticketsApi } from '@/api/tickets'
+import { integrationsApi } from '@/api/integrations'
+import { TicketDetailHeader } from './detail/TicketDetailHeader'
+import { TicketResourceManager } from './detail/TicketResourceManager'
+import { TicketNotesFeed } from './detail/TicketNotesFeed'
+import { TicketAddNote } from './detail/TicketAddNote'
+import { TicketConfigs } from './detail/TicketConfigs'
+import { TicketRelated } from './detail/TicketRelated'
+import type { PSATicketSearchResult, PSATicketStatusItem, PsaMemberResponse } from '@/types/integrations'
+import type { PSAResource } from '@/types/tickets'
 
 interface Props {
   ticket: PSATicketSearchResult
   onClose: () => void
   onStatusUpdated?: (ticketId: number, newStatus: string) => void
+  onSelectRelated?: (ticketId: number) => void
 }
 
-export function TicketDetailPanel(_props: Props) {
-  return <div>Loading ticket details…</div>
+function Skeleton() {
+  return (
+    <div className="px-4 py-3 space-y-2 animate-pulse">
+      <div className="h-3 w-3/4 bg-elevated rounded" />
+      <div className="h-3 w-1/2 bg-elevated rounded" />
+    </div>
+  )
+}
+
+export function TicketDetailPanel({ ticket, onClose, onStatusUpdated, onSelectRelated }: Props) {
+  const [context, setContext] = useState<TicketContext | null>(null)
+  const [resources, setResources] = useState<PSAResource[]>([])
+  const [allMembers, setAllMembers] = useState<PsaMemberResponse[]>([])
+  const [statuses, setStatuses] = useState<PSATicketStatusItem[]>([])
+  const [contextLoading, setContextLoading] = useState(true)
+  const [resourcesLoading, setResourcesLoading] = useState(true)
+
+  const ticketIdNum = Number(ticket.id)
+
+  const loadResources = useCallback(() => {
+    ticketsApi.listResources(ticketIdNum)
+      .then(setResources)
+      .catch(() => {})
+  }, [ticketIdNum])
+
+  useEffect(() => {
+    setContextLoading(true)
+    setResourcesLoading(true)
+    setContext(null)
+    setResources([])
+    setStatuses([])
+
+    Promise.all([
+      psaContextApi.getTicketContext(ticketIdNum),
+      ticketsApi.listResources(ticketIdNum),
+      integrationsApi.listMembers(),
+      integrationsApi.getTicketStatuses(String(ticket.id)),
+    ])
+      .then(([ctx, res, members, statusList]) => {
+        setContext(ctx)
+        setResources(res)
+        setAllMembers(members)
+        setStatuses(statusList)
+      })
+      .catch(() => {})
+      .finally(() => {
+        setContextLoading(false)
+        setResourcesLoading(false)
+      })
+  }, [ticket.id, ticketIdNum])
+
+  function handleStatusUpdated(ticketId: number, newStatus: string) {
+    onStatusUpdated?.(ticketId, newStatus)
+  }
+
+  return (
+    <div className="flex flex-col h-full bg-card border-l border-default overflow-hidden">
+      {/* Panel header */}
+      <div className="flex items-center justify-between px-4 py-3 border-b border-default flex-shrink-0">
+        <span className="text-xs font-semibold uppercase tracking-wider text-muted-foreground">
+          Ticket Detail
+        </span>
+        <button
+          onClick={onClose}
+          className="text-muted-foreground hover:text-primary transition-colors"
+          aria-label="Close ticket detail"
+        >
+          <X className="w-4 h-4" />
+        </button>
+      </div>
+
+      {/* Scrollable body */}
+      <div className="flex-1 overflow-y-auto divide-y divide-default">
+        {/* Header with status selector — optimistic, no loading gate */}
+        <TicketDetailHeader
+          ticket={ticket}
+          statuses={statuses}
+          onStatusUpdated={handleStatusUpdated}
+        />
+
+        {/* Resources */}
+        {resourcesLoading ? (
+          <Skeleton />
+        ) : (
+          <TicketResourceManager
+            ticketId={ticketIdNum}
+            resources={resources}
+            allMembers={allMembers}
+            onChanged={loadResources}
+          />
+        )}
+
+        {/* Notes */}
+        <div>
+          <div className="px-4 pt-3 pb-1">
+            <h4 className="text-xs uppercase tracking-wider text-muted-foreground font-semibold">
+              Notes
+            </h4>
+          </div>
+          {contextLoading ? (
+            <Skeleton />
+          ) : (
+            <TicketNotesFeed notes={context?.notes ?? []} />
+          )}
+        </div>
+
+        {/* Add note */}
+        <TicketAddNote
+          ticketId={String(ticket.id)}
+          onPosted={() => {
+            // Re-fetch context to refresh notes
+            psaContextApi.getTicketContext(ticketIdNum)
+              .then(setContext)
+              .catch(() => {})
+          }}
+        />
+
+        {/* Configurations */}
+        <div>
+          <div className="px-4 pt-3 pb-1">
+            <h4 className="text-xs uppercase tracking-wider text-muted-foreground font-semibold">
+              Configurations
+            </h4>
+          </div>
+          {contextLoading ? (
+            <Skeleton />
+          ) : (
+            <TicketConfigs configs={context?.configurations ?? []} />
+          )}
+        </div>
+
+        {/* Related tickets */}
+        <div>
+          <div className="px-4 pt-3 pb-1">
+            <h4 className="text-xs uppercase tracking-wider text-muted-foreground font-semibold">
+              Related Tickets
+            </h4>
+          </div>
+          {contextLoading ? (
+            <Skeleton />
+          ) : (
+            <TicketRelated
+              tickets={context?.related_tickets ?? []}
+              onSelectTicket={ticketId => onSelectRelated?.(ticketId)}
+            />
+          )}
+        </div>
+      </div>
+    </div>
+  )
 }
diff --git a/frontend/src/components/tickets/detail/TicketResourceManager.tsx b/frontend/src/components/tickets/detail/TicketResourceManager.tsx
new file mode 100644
index 00000000..b68bdde7
--- /dev/null
+++ b/frontend/src/components/tickets/detail/TicketResourceManager.tsx
@@ -0,0 +1,121 @@
+import { useState } from 'react'
+import { UserPlus, X, User } from 'lucide-react'
+import { ticketsApi } from '@/api/tickets'
+import { toast } from '@/lib/toast'
+import type { PSAResource } from '@/types/tickets'
+import type { PsaMemberResponse } from '@/types/integrations'
+import { cn } from '@/lib/utils'
+
+interface Props {
+  ticketId: number
+  resources: PSAResource[]
+  allMembers: PsaMemberResponse[]
+  onChanged: () => void
+}
+
+export function TicketResourceManager({ ticketId, resources, allMembers, onChanged }: Props) {
+  const [adding, setAdding] = useState(false)
+  const [selectedMemberId, setSelectedMemberId] = useState<string>('')
+  const [busy, setBusy] = useState<number | null>(null)
+
+  async function handleAdd() {
+    if (!selectedMemberId) return
+    setBusy(Number(selectedMemberId))
+    try {
+      await ticketsApi.addResource(ticketId, Number(selectedMemberId))
+      toast.success('Resource added')
+      setAdding(false)
+      setSelectedMemberId('')
+      onChanged()
+    } catch {
+      toast.error('Failed to add resource')
+    } finally {
+      setBusy(null)
+    }
+  }
+
+  async function handleRemove(memberId: number) {
+    setBusy(memberId)
+    try {
+      await ticketsApi.removeResource(ticketId, memberId)
+      toast.success('Resource removed')
+      onChanged()
+    } catch {
+      toast.error('Failed to remove resource')
+    } finally {
+      setBusy(null)
+    }
+  }
+
+  const assignedIds = new Set(resources.map(r => r.member_id))
+
+  return (
+    <div className="px-4 py-3 space-y-2">
+      <div className="flex items-center justify-between">
+        <h4 className="text-xs uppercase tracking-wider text-muted-foreground font-semibold">
+          Resources
+        </h4>
+        <button
+          onClick={() => setAdding(!adding)}
+          className="flex items-center gap-1 text-xs text-accent hover:text-accent/80 transition-colors"
+        >
+          <UserPlus className="w-3.5 h-3.5" /> Assign
+        </button>
+      </div>
+
+      {adding && (
+        <div className="flex gap-2">
+          <select
+            className="flex-1 bg-input border border-default rounded-[5px] px-2 py-1 text-xs text-primary focus:border-accent focus:outline-none"
+            value={selectedMemberId}
+            onChange={e => setSelectedMemberId(e.target.value)}
+          >
+            <option value="">Select member…</option>
+            {allMembers
+              .filter(m => !assignedIds.has(Number(m.id)))
+              .map(m => (
+                <option key={m.id} value={m.id}>{m.name}</option>
+              ))}
+          </select>
+          <button
+            onClick={handleAdd}
+            disabled={!selectedMemberId || busy !== null}
+            className="px-2 py-1 bg-accent text-white text-xs rounded-[5px] disabled:opacity-40"
+          >
+            Add
+          </button>
+        </div>
+      )}
+
+      {resources.length === 0 ? (
+        <p className="text-xs text-muted-foreground">No resources assigned.</p>
+      ) : (
+        <div className="space-y-1">
+          {resources.map(r => (
+            <div key={r.member_id} className="flex items-center justify-between">
+              <div className="flex items-center gap-1.5 text-xs text-primary">
+                <User className="w-3 h-3 text-muted-foreground" />
+                {r.member_name}
+                {r.is_rf_user && (
+                  <span className="px-1 py-0.5 bg-accent/10 text-accent rounded text-[10px] font-medium">
+                    RF
+                  </span>
+                )}
+              </div>
+              <button
+                onClick={() => handleRemove(r.member_id)}
+                disabled={busy === r.member_id}
+                className={cn(
+                  'text-muted-foreground hover:text-danger transition-colors',
+                  busy === r.member_id && 'opacity-40'
+                )}
+              >
+                <X className="w-3.5 h-3.5" />
+              </button>
+            </div>
+          ))}
+        </div>
+      )}
+    </div>
+  )
+}
-- 
2.49.1


From 070d2383bc645bb6b11fa5022f745dea19821e80 Mon Sep 17 00:00:00 2001
From: Michael Chihlas <michael@resolutionflow.com>
Date: Thu, 16 Apr 2026 03:26:23 +0000
Subject: [PATCH 23/36] fix: remove unused PSATicketSearchResult import

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 frontend/src/api/integrations.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/frontend/src/api/integrations.ts b/frontend/src/api/integrations.ts
index 709a0bc6..aace4a3e 100644
--- a/frontend/src/api/integrations.ts
+++ b/frontend/src/api/integrations.ts
@@ -1,6 +1,6 @@
 import { apiClient } from './client'
 import type { PsaConnectionResponse, PsaConnectionCreate, PsaConnectionUpdate, PsaConnectionTestResponse } from '@/types'
-import type { PSABoard, TicketLinkResponse, PSATicketSearchResult, PSATicketInfo, PSATicketStatusItem, PsaPreviewResponse, PsaPostResponse, PsaPostLogEntry, PsaMemberResponse, PsaMemberMappingResponse, AutoMatchResult, FlowpilotSettings } from '@/types/integrations'
+import type { PSABoard, TicketLinkResponse, PSATicketInfo, PSATicketStatusItem, PsaPreviewResponse, PsaPostResponse, PsaPostLogEntry, PsaMemberResponse, PsaMemberMappingResponse, AutoMatchResult, FlowpilotSettings } from '@/types/integrations'
 import type { TicketListResponse } from '@/types/tickets'
 
 export const integrationsApi = {
-- 
2.49.1


From 08909aa8841a9e766f1af0101fc12a4998699005 Mon Sep 17 00:00:00 2001
From: Michael Chihlas <michael@resolutionflow.com>
Date: Thu, 16 Apr 2026 03:31:21 +0000
Subject: [PATCH 24/36] feat(tickets): add AiTicketParseForm and NewTicketModal
 with two-tab creation flow

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 .../components/tickets/AiTicketParseForm.tsx  |  62 +++++
 .../src/components/tickets/NewTicketModal.tsx | 259 +++++++++++++++++-
 2 files changed, 316 insertions(+), 5 deletions(-)
 create mode 100644 frontend/src/components/tickets/AiTicketParseForm.tsx

diff --git a/frontend/src/components/tickets/AiTicketParseForm.tsx b/frontend/src/components/tickets/AiTicketParseForm.tsx
new file mode 100644
index 00000000..df4b1324
--- /dev/null
+++ b/frontend/src/components/tickets/AiTicketParseForm.tsx
@@ -0,0 +1,62 @@
+import { useState } from 'react'
+import { Sparkles, Loader2 } from 'lucide-react'
+import { ticketsApi } from '@/api/tickets'
+import type { AiParseResponse, TicketCreationPayload } from '@/types/tickets'
+
+interface Props {
+  initialHint?: string
+  onParsed: (values: Partial<TicketCreationPayload>, parseResponse: AiParseResponse) => void
+}
+
+export function AiTicketParseForm({ initialHint = '', onParsed }: Props) {
+  const [prompt, setPrompt] = useState(initialHint)
+  const [loading, setLoading] = useState(false)
+  const [error, setError] = useState<string | null>(null)
+
+  async function handleParse() {
+    if (!prompt.trim()) return
+    setLoading(true)
+    setError(null)
+    try {
+      const result = await ticketsApi.aiParse(prompt)
+      const values: Partial<TicketCreationPayload> = {
+        summary: result.summary ?? undefined,
+        company_id: result.company_id,
+        board_id: result.board_id,
+        status_id: result.status_id,
+        priority_id: result.priority_id,
+        assigned_member_id: result.assigned_member_id,
+        description: result.description ?? undefined,
+      }
+      onParsed(values, result)
+    } catch {
+      setError('AI parsing failed. Please try again or use the full form.')
+    } finally {
+      setLoading(false)
+    }
+  }
+
+  return (
+    <div className="space-y-3">
+      <p className="text-sm text-muted-foreground">
+        Describe the ticket in plain language — who, what, which client, and priority.
+      </p>
+      <textarea
+        className="w-full bg-input border border-default rounded-[5px] px-3 py-2 text-sm text-primary placeholder:text-muted-foreground focus:border-accent focus:outline-none resize-none"
+        rows={4}
+        placeholder="e.g. Create a high priority ticket for Acme Corp — Outlook not syncing for jsmith, assign to me"
+        value={prompt}
+        onChange={e => setPrompt(e.target.value)}
+      />
+      {error && <p className="text-xs text-danger">{error}</p>}
+      <button
+        onClick={handleParse}
+        disabled={!prompt.trim() || loading}
+        className="flex items-center gap-1.5 px-4 py-2 bg-accent text-white text-sm font-medium rounded-[5px] hover:bg-accent/90 disabled:opacity-40 disabled:cursor-not-allowed transition-colors"
+      >
+        {loading ? <Loader2 className="w-4 h-4 animate-spin" /> : <Sparkles className="w-4 h-4" />}
+        {loading ? 'Parsing…' : 'Parse with AI'}
+      </button>
+    </div>
+  )
+}
diff --git a/frontend/src/components/tickets/NewTicketModal.tsx b/frontend/src/components/tickets/NewTicketModal.tsx
index 8c08b0be..836c494b 100644
--- a/frontend/src/components/tickets/NewTicketModal.tsx
+++ b/frontend/src/components/tickets/NewTicketModal.tsx
@@ -1,12 +1,261 @@
-// Placeholder — full implementation in Task 17
+import { useState, useEffect } from 'react'
+import { X, AlertCircle } from 'lucide-react'
+import { ticketsApi } from '@/api/tickets'
+import { integrationsApi } from '@/api/integrations'
+import { AiTicketParseForm } from './AiTicketParseForm'
+import { toast } from '@/lib/toast'
+import { cn } from '@/lib/utils'
+import type { TicketCreationPayload, AiParseResponse, PSAPriority } from '@/types/tickets'
+import type { PSABoard, PSATicketStatusItem } from '@/types/integrations'
+
 interface Props {
   defaultTab?: 'quick' | 'manual'
-  initialValues?: Record<string, unknown>
+  initialValues?: Partial<TicketCreationPayload>
   summaryHint?: string
   onClose: () => void
-  onCreated: (ticketId?: number, summary?: string) => void
+  onCreated: (ticketId: number, summary: string) => void
 }
 
-export function NewTicketModal(_props: Props) {
-  return null
+const EMPTY_DRAFT: TicketCreationPayload = {
+  summary: '',
+  company_id: null,
+  board_id: null,
+  status_id: null,
+  priority_id: null,
+  description: '',
+  assigned_member_id: null,
+}
+
+export function NewTicketModal({ defaultTab = 'quick', initialValues, summaryHint, onClose, onCreated }: Props) {
+  const [tab, setTab] = useState<'quick' | 'manual'>(defaultTab)
+  const [draft, setDraft] = useState<TicketCreationPayload>({ ...EMPTY_DRAFT, ...initialValues })
+  const [missingFields, setMissingFields] = useState<string[]>([])
+  const [warnings, setWarnings] = useState<string[]>([])
+  const [boards, setBoards] = useState<PSABoard[]>([])
+  const [statuses, setStatuses] = useState<PSATicketStatusItem[]>([])
+  const [priorities, setPriorities] = useState<PSAPriority[]>([])
+  const [submitting, setSubmitting] = useState(false)
+  const [parsed, setParsed] = useState(false)
+
+  useEffect(() => {
+    integrationsApi.listBoards().then(setBoards).catch(() => {})
+    ticketsApi.listPriorities().then(setPriorities).catch(() => {})
+  }, [])
+
+  useEffect(() => {
+    if (draft.board_id) {
+      integrationsApi.getTicketStatuses(String(draft.board_id))
+        .then(setStatuses).catch(() => {})
+    } else {
+      setStatuses([])
+    }
+  }, [draft.board_id])
+
+  function handleParsed(values: Partial<TicketCreationPayload>, result: AiParseResponse) {
+    setDraft(prev => ({ ...prev, ...values }))
+    setMissingFields(result.missing_fields)
+    setWarnings(result.warnings)
+    setParsed(true)
+  }
+
+  function updateDraft(field: keyof TicketCreationPayload, value: unknown) {
+    setDraft(prev => ({ ...prev, [field]: value }))
+    setMissingFields(prev => prev.filter(f => f !== field))
+  }
+
+  async function handleSubmit() {
+    if (!draft.summary.trim() || !draft.company_id || !draft.board_id || !draft.status_id || !draft.priority_id) {
+      toast.warning('Please fill in all required fields')
+      return
+    }
+    setSubmitting(true)
+    try {
+      const result = await ticketsApi.createTicket(draft)
+      toast.success(`Ticket #${result.id} created in ConnectWise`)
+      onCreated(result.id, result.summary)
+    } catch {
+      toast.error('Failed to create ticket')
+    } finally {
+      setSubmitting(false)
+    }
+  }
+
+  const requiredMissing = (f: string) => missingFields.includes(f)
+
+  return (
+    <div className="fixed inset-0 z-50 flex items-end sm:items-center justify-center">
+      <div className="fixed inset-0 bg-black/50" onClick={onClose} />
+      <div className="relative z-10 bg-card border border-default rounded-lg w-full max-w-lg max-h-[90vh] flex flex-col shadow-xl">
+        {/* Header */}
+        <div className="flex items-center justify-between px-5 py-4 border-b border-default shrink-0">
+          <h2 className="font-heading font-semibold text-heading">New Ticket</h2>
+          <button onClick={onClose} className="text-muted-foreground hover:text-primary transition-colors">
+            <X className="w-4 h-4" />
+          </button>
+        </div>
+
+        {/* Tabs */}
+        <div className="flex border-b border-default shrink-0">
+          {(['quick', 'manual'] as const).map(t => (
+            <button
+              key={t}
+              onClick={() => setTab(t)}
+              className={cn(
+                'flex-1 py-2.5 text-sm font-medium transition-colors',
+                tab === t
+                  ? 'text-accent border-b-2 border-accent'
+                  : 'text-muted-foreground hover:text-primary'
+              )}
+            >
+              {t === 'quick' ? 'Quick Create (AI)' : 'Full Form'}
+            </button>
+          ))}
+        </div>
+
+        {/* Content */}
+        <div className="flex-1 overflow-y-auto p-5 space-y-4">
+          {/* Warnings */}
+          {warnings.length > 0 && (
+            <div className="flex gap-2 bg-warning/10 border border-warning/30 rounded p-3">
+              <AlertCircle className="w-4 h-4 text-warning shrink-0 mt-0.5" />
+              <ul className="text-xs text-warning space-y-0.5">
+                {warnings.map((w, i) => <li key={i}>{w}</li>)}
+              </ul>
+            </div>
+          )}
+
+          {/* Quick Create tab — before parse */}
+          {tab === 'quick' && !parsed && (
+            <AiTicketParseForm initialHint={summaryHint} onParsed={handleParsed} />
+          )}
+
+          {/* Form — shown after parse OR in manual tab */}
+          {(tab === 'manual' || parsed) && (
+            <div className="space-y-3">
+              {/* Summary */}
+              <div>
+                <label className="text-xs text-muted-foreground uppercase tracking-wider font-semibold block mb-1">
+                  Summary *
+                </label>
+                <input
+                  className={cn(
+                    'w-full bg-input border rounded-[5px] px-3 py-2 text-sm text-primary placeholder:text-muted-foreground focus:outline-none focus:border-accent',
+                    requiredMissing('summary') ? 'border-warning' : 'border-default'
+                  )}
+                  placeholder="Short ticket title"
+                  value={draft.summary}
+                  onChange={e => updateDraft('summary', e.target.value)}
+                />
+              </div>
+
+              {/* Board */}
+              <div>
+                <label className="text-xs text-muted-foreground uppercase tracking-wider font-semibold block mb-1">
+                  Board *
+                </label>
+                <select
+                  className={cn(
+                    'w-full bg-input border rounded-[5px] px-3 py-2 text-sm text-primary focus:outline-none focus:border-accent',
+                    requiredMissing('board_id') ? 'border-warning' : 'border-default'
+                  )}
+                  value={draft.board_id ?? ''}
+                  onChange={e => updateDraft('board_id', e.target.value ? Number(e.target.value) : null)}
+                >
+                  <option value="">Select board…</option>
+                  {boards.map(b => <option key={b.id} value={b.id}>{b.name}</option>)}
+                </select>
+              </div>
+
+              {/* Status */}
+              <div>
+                <label className="text-xs text-muted-foreground uppercase tracking-wider font-semibold block mb-1">
+                  Status *
+                </label>
+                <select
+                  disabled={statuses.length === 0}
+                  className={cn(
+                    'w-full bg-input border rounded-[5px] px-3 py-2 text-sm text-primary focus:outline-none focus:border-accent disabled:opacity-50',
+                    requiredMissing('status_id') ? 'border-warning' : 'border-default'
+                  )}
+                  value={draft.status_id ?? ''}
+                  onChange={e => updateDraft('status_id', e.target.value ? Number(e.target.value) : null)}
+                >
+                  <option value="">{draft.board_id ? 'Select status…' : 'Select board first'}</option>
+                  {statuses.map(s => <option key={s.id} value={s.id}>{s.name}</option>)}
+                </select>
+              </div>
+
+              {/* Priority */}
+              <div>
+                <label className="text-xs text-muted-foreground uppercase tracking-wider font-semibold block mb-1">
+                  Priority *
+                </label>
+                <select
+                  className={cn(
+                    'w-full bg-input border rounded-[5px] px-3 py-2 text-sm text-primary focus:outline-none focus:border-accent',
+                    requiredMissing('priority_id') ? 'border-warning' : 'border-default'
+                  )}
+                  value={draft.priority_id ?? ''}
+                  onChange={e => updateDraft('priority_id', e.target.value ? Number(e.target.value) : null)}
+                >
+                  <option value="">Select priority…</option>
+                  {priorities.map(p => <option key={p.id} value={p.id}>{p.name}</option>)}
+                </select>
+              </div>
+
+              {/* Company ID */}
+              <div>
+                <label className="text-xs text-muted-foreground uppercase tracking-wider font-semibold block mb-1">
+                  Company ID *
+                </label>
+                <input
+                  type="number"
+                  className={cn(
+                    'w-full bg-input border rounded-[5px] px-3 py-2 text-sm text-primary placeholder:text-muted-foreground focus:outline-none focus:border-accent',
+                    requiredMissing('company_id') ? 'border-warning' : 'border-default'
+                  )}
+                  placeholder="ConnectWise company ID"
+                  value={draft.company_id ?? ''}
+                  onChange={e => updateDraft('company_id', e.target.value ? Number(e.target.value) : null)}
+                />
+              </div>
+
+              {/* Description */}
+              <div>
+                <label className="text-xs text-muted-foreground uppercase tracking-wider font-semibold block mb-1">
+                  Description
+                </label>
+                <textarea
+                  className="w-full bg-input border border-default rounded-[5px] px-3 py-2 text-sm text-primary placeholder:text-muted-foreground focus:outline-none focus:border-accent resize-none"
+                  rows={3}
+                  placeholder="Detailed description…"
+                  value={draft.description}
+                  onChange={e => updateDraft('description', e.target.value)}
+                />
+              </div>
+            </div>
+          )}
+        </div>
+
+        {/* Footer */}
+        {(tab === 'manual' || parsed) && (
+          <div className="flex items-center justify-end gap-2 px-5 py-4 border-t border-default shrink-0">
+            <button
+              onClick={onClose}
+              className="px-4 py-2 text-sm text-muted-foreground hover:text-primary transition-colors"
+            >
+              Cancel
+            </button>
+            <button
+              onClick={handleSubmit}
+              disabled={submitting}
+              className="px-4 py-2 bg-accent text-white text-sm font-medium rounded-[5px] hover:bg-accent/90 disabled:opacity-40 transition-colors"
+            >
+              {submitting ? 'Creating…' : 'Create Ticket'}
+            </button>
+          </div>
+        )}
+      </div>
+    </div>
+  )
 }
-- 
2.49.1


From b2ee1a2150fdc962586f90c76db6988d13533197 Mon Sep 17 00:00:00 2001
From: Michael Chihlas <michael@resolutionflow.com>
Date: Thu, 16 Apr 2026 03:34:08 +0000
Subject: [PATCH 25/36] fix(tickets): improve accessibility and error logging
 in ticket creation components

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 frontend/src/components/tickets/AiTicketParseForm.tsx | 1 +
 frontend/src/components/tickets/NewTicketModal.tsx    | 4 ++--
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/frontend/src/components/tickets/AiTicketParseForm.tsx b/frontend/src/components/tickets/AiTicketParseForm.tsx
index df4b1324..e65b7847 100644
--- a/frontend/src/components/tickets/AiTicketParseForm.tsx
+++ b/frontend/src/components/tickets/AiTicketParseForm.tsx
@@ -42,6 +42,7 @@ export function AiTicketParseForm({ initialHint = '', onParsed }: Props) {
         Describe the ticket in plain language — who, what, which client, and priority.
       </p>
       <textarea
+        aria-label="Ticket description"
         className="w-full bg-input border border-default rounded-[5px] px-3 py-2 text-sm text-primary placeholder:text-muted-foreground focus:border-accent focus:outline-none resize-none"
         rows={4}
         placeholder="e.g. Create a high priority ticket for Acme Corp — Outlook not syncing for jsmith, assign to me"
diff --git a/frontend/src/components/tickets/NewTicketModal.tsx b/frontend/src/components/tickets/NewTicketModal.tsx
index 836c494b..17d1fe68 100644
--- a/frontend/src/components/tickets/NewTicketModal.tsx
+++ b/frontend/src/components/tickets/NewTicketModal.tsx
@@ -39,7 +39,7 @@ export function NewTicketModal({ defaultTab = 'quick', initialValues, summaryHin
 
   useEffect(() => {
     integrationsApi.listBoards().then(setBoards).catch(() => {})
-    ticketsApi.listPriorities().then(setPriorities).catch(() => {})
+    ticketsApi.listPriorities().then(setPriorities).catch(err => console.error('Failed to load priorities', err))
   }, [])
 
   useEffect(() => {
@@ -89,7 +89,7 @@ export function NewTicketModal({ defaultTab = 'quick', initialValues, summaryHin
         {/* Header */}
         <div className="flex items-center justify-between px-5 py-4 border-b border-default shrink-0">
           <h2 className="font-heading font-semibold text-heading">New Ticket</h2>
-          <button onClick={onClose} className="text-muted-foreground hover:text-primary transition-colors">
+          <button onClick={onClose} aria-label="Close" className="text-muted-foreground hover:text-primary transition-colors">
             <X className="w-4 h-4" />
           </button>
         </div>
-- 
2.49.1


From 5f5b9e5b2389d7cd07f9282916e200ebdc6552c7 Mon Sep 17 00:00:00 2001
From: Michael Chihlas <michael@resolutionflow.com>
Date: Thu, 16 Apr 2026 03:37:46 +0000
Subject: [PATCH 26/36] =?UTF-8?q?feat(tickets):=20add=20spin-off=20ticket?=
 =?UTF-8?q?=20creation=20in=20ResolutionAssist=20=E2=80=94=20state,=20acti?=
 =?UTF-8?q?on=20handler,=20modal?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 frontend/src/pages/AssistantChatPage.tsx | 51 +++++++++++++++++++++++-
 1 file changed, 49 insertions(+), 2 deletions(-)

diff --git a/frontend/src/pages/AssistantChatPage.tsx b/frontend/src/pages/AssistantChatPage.tsx
index e7381287..2b0892d7 100644
--- a/frontend/src/pages/AssistantChatPage.tsx
+++ b/frontend/src/pages/AssistantChatPage.tsx
@@ -1,12 +1,13 @@
 import { useState, useEffect, useRef, useCallback } from 'react'
 import { useLocation, useNavigate, useParams } from 'react-router-dom'
-import { Sparkles, Send, Loader2, MessageSquare, Paperclip, Terminal, X, RotateCcw, ImagePlus, ListChecks, FileText, CheckCircle2, ArrowUpRight, MoreHorizontal, Pause } from 'lucide-react'
+import { Sparkles, Send, Loader2, MessageSquare, Paperclip, Terminal, X, RotateCcw, ImagePlus, ListChecks, FileText, CheckCircle2, ArrowUpRight, MoreHorizontal, Pause, Plus } from 'lucide-react'
 import { cn } from '@/lib/utils'
 import { uploadsApi } from '@/api/uploads'
 import type { PendingUpload } from '@/types/upload'
 import type { ForkMetadata, ActionItem, QuestionItem } from '@/types/ai-session'
 import { PageMeta } from '@/components/common/PageMeta'
 import { aiSessionsApi } from '@/api/aiSessions'
+import { integrationsApi } from '@/api/integrations'
 import { useBranching } from '@/hooks/useBranching'
 import { analytics } from '@/lib/analytics'
 import { toast } from '@/lib/toast'
@@ -15,8 +16,10 @@ import { ChatMessage } from '@/components/assistant/ChatMessage'
 import { TaskLane, clearTaskState } from '@/components/assistant/TaskLane'
 import { ConcludeSessionModal } from '@/components/assistant/ConcludeSessionModal'
 import { StatusUpdateModal } from '@/components/flowpilot/StatusUpdateModal'
+import { NewTicketModal } from '@/components/tickets/NewTicketModal'
 import type { ChatListItem, ConclusionOutcome } from '@/types/assistant-chat'
 import type { SuggestedFlow } from '@/types/copilot'
+import type { PSATicketInfo } from '@/types/integrations'
 
 interface MessageWithMeta {
   role: 'user' | 'assistant'
@@ -74,6 +77,9 @@ export default function AssistantChatPage() {
   )
   const [activeSessionStatus, setActiveSessionStatus] = useState<string | null>(null)
   const [activePsaTicketId, setActivePsaTicketId] = useState<string | null>(null)
+  const [linkedTicket, setLinkedTicket] = useState<PSATicketInfo | null>(null)
+  const [showNewTicket, setShowNewTicket] = useState(false)
+  const [spinOffHint, setSpinOffHint] = useState<string | undefined>(undefined)
   const [showOverflow, setShowOverflow] = useState(false)
   const toggleSidebarCollapse = () => {
     const next = !sidebarCollapsed
@@ -239,6 +245,13 @@ export default function AssistantChatPage() {
       if (currentChatRef.current !== chatId) return
       setActiveSessionStatus(detail.status)
       setActivePsaTicketId(detail.psa_ticket_id)
+      if (detail.psa_ticket_id) {
+        integrationsApi.getTicket(detail.psa_ticket_id)
+          .then(setLinkedTicket)
+          .catch(() => {})
+      } else {
+        setLinkedTicket(null)
+      }
       setMessages(
         (detail.conversation_messages || []).map(m => ({
           role: m.role as 'user' | 'assistant',
@@ -387,9 +400,17 @@ export default function AssistantChatPage() {
     }
   }
 
-  const handleTaskSubmit = async (responses: Array<{ type: string; state: string; value: string; text?: string; label?: string }>) => {
+  const handleTaskSubmit = async (responses: Array<{ type: string; state: string; value: string; text?: string; label?: string; command?: string | null }>) => {
     if (!activeChatId || loading) return
 
+    // Handle special action commands that open UI flows instead of sending to AI
+    const spinOffAction = responses.find(r => r.type === 'action' && r.command === 'create_spin_off_ticket')
+    if (spinOffAction) {
+      setSpinOffHint(spinOffAction.label || spinOffAction.text)
+      setShowNewTicket(true)
+      return
+    }
+
     // Format task responses into a structured message for the AI.
     // Pending tasks are included so the AI knows they weren't completed yet.
     const parts: string[] = []
@@ -708,6 +729,14 @@ export default function AssistantChatPage() {
 
                   {/* Desktop actions — shown when session is active and has messages */}
                   <div className="hidden sm:flex items-center gap-1.5">
+                    {activePsaTicketId && (
+                      <button
+                        onClick={() => { setSpinOffHint(undefined); setShowNewTicket(true) }}
+                        className="flex items-center gap-1 px-2 py-1 text-xs text-muted-foreground border border-default rounded-[5px] hover:border-hover hover:text-primary transition-colors"
+                      >
+                        <Plus className="w-3 h-3" /> New Ticket
+                      </button>
+                    )}
                     {isActive && (
                       <>
                         <button
@@ -1052,6 +1081,24 @@ export default function AssistantChatPage() {
           context="status"
         />
       )}
+
+      {/* Spin-off Ticket Modal */}
+      {showNewTicket && (
+        <NewTicketModal
+          defaultTab={spinOffHint ? 'quick' : 'manual'}
+          summaryHint={spinOffHint}
+          initialValues={linkedTicket ? {
+            company_id: linkedTicket.company_id,
+            board_id: linkedTicket.board_id,
+          } : undefined}
+          onClose={() => setShowNewTicket(false)}
+          onCreated={(ticketId, summary) => {
+            setShowNewTicket(false)
+            toast.success(`Ticket #${ticketId} created: ${summary}`)
+            setActiveActions(prev => prev.filter(a => a.command !== 'create_spin_off_ticket'))
+          }}
+        />
+      )}
     </div>
     </>
   )
-- 
2.49.1


From fded959b5e5f142caffe700fbecaea4af4eb0ead Mon Sep 17 00:00:00 2001
From: Michael Chihlas <michael@resolutionflow.com>
Date: Thu, 16 Apr 2026 03:40:31 +0000
Subject: [PATCH 27/36] fix(tickets): guard linkedTicket fetch with
 currentChatRef to prevent race condition

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 frontend/src/pages/AssistantChatPage.tsx | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/frontend/src/pages/AssistantChatPage.tsx b/frontend/src/pages/AssistantChatPage.tsx
index 2b0892d7..6246ab0b 100644
--- a/frontend/src/pages/AssistantChatPage.tsx
+++ b/frontend/src/pages/AssistantChatPage.tsx
@@ -247,7 +247,10 @@ export default function AssistantChatPage() {
       setActivePsaTicketId(detail.psa_ticket_id)
       if (detail.psa_ticket_id) {
         integrationsApi.getTicket(detail.psa_ticket_id)
-          .then(setLinkedTicket)
+          .then(ticket => {
+            if (currentChatRef.current !== chatId) return
+            setLinkedTicket(ticket)
+          })
           .catch(() => {})
       } else {
         setLinkedTicket(null)
-- 
2.49.1


From 00cd8b7c5529e738c1597538606250b0c1d2e070 Mon Sep 17 00:00:00 2001
From: Michael Chihlas <michael@resolutionflow.com>
Date: Thu, 16 Apr 2026 03:42:25 +0000
Subject: [PATCH 28/36] feat(tickets): update TicketQueue with mapping
 detection, 5-item cap, View All link

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 .../src/components/dashboard/TicketQueue.tsx  | 41 +++++++++++++++++--
 1 file changed, 38 insertions(+), 3 deletions(-)

diff --git a/frontend/src/components/dashboard/TicketQueue.tsx b/frontend/src/components/dashboard/TicketQueue.tsx
index 829537be..5437dedf 100644
--- a/frontend/src/components/dashboard/TicketQueue.tsx
+++ b/frontend/src/components/dashboard/TicketQueue.tsx
@@ -1,11 +1,11 @@
 import { useState, useEffect, useRef, useCallback } from 'react'
-import { useNavigate } from 'react-router-dom'
+import { useNavigate, Link } from 'react-router-dom'
 import { Ticket, ChevronDown, Check, Loader2, AlertCircle } from 'lucide-react'
 import { integrationsApi } from '@/api/integrations'
 import type { PSABoard, PSATicketSearchResult } from '@/types/integrations'
 import { cn } from '@/lib/utils'
 
-const PAGE_SIZE = 10
+const PAGE_SIZE = 5
 
 type Tab = 'mine' | 'unassigned'
 
@@ -188,6 +188,7 @@ function TicketRow({ ticket, isLast, onStartSession }: TicketRowProps) {
 export function TicketQueue() {
   const navigate = useNavigate()
   const [hasConnection, setHasConnection] = useState<boolean | null>(null)
+  const [hasMemberMapping, setHasMemberMapping] = useState<boolean | null>(null) // null = loading
   const [boards, setBoards] = useState<PSABoard[]>([])
   const [selectedBoardIds, setSelectedBoardIds] = useState<number[]>([])
   const [activeTab, setActiveTab] = useState<Tab>('mine')
@@ -208,6 +209,15 @@ export function TicketQueue() {
       .catch(() => setHasConnection(false))
   }, [])
 
+  // Detect member mapping on mount
+  useEffect(() => {
+    integrationsApi.getMemberMappings()
+      .then(mappings => {
+        setHasMemberMapping(mappings.length > 0)
+      })
+      .catch(() => setHasMemberMapping(false))
+  }, [])
+
   // Fetch boards once connection confirmed
   useEffect(() => {
     if (!hasConnection) return
@@ -250,12 +260,13 @@ export function TicketQueue() {
   // Initial + reset fetch when tab or board selection changes
   useEffect(() => {
     if (!hasConnection) return
+    if (activeTab === 'mine' && hasMemberMapping !== true) return
     setPage(1)
     setTickets([])
     setHasMore(false)
     setLoading(true)
     fetchTickets(activeTab, selectedBoardIds, 1, false).finally(() => setLoading(false))
-  }, [activeTab, selectedBoardIds, hasConnection, fetchTickets])
+  }, [activeTab, selectedBoardIds, hasConnection, hasMemberMapping, fetchTickets])
 
   const handleLoadMore = async () => {
     const nextPage = page + 1
@@ -327,6 +338,18 @@ export function TicketQueue() {
 
       {/* Content */}
       <div>
+        {/* Mapping prompt for "mine" tab when no member mapping configured */}
+        {activeTab === 'mine' && hasMemberMapping === false && (
+          <div className="px-5 py-6 text-center">
+            <p className="text-sm text-muted-foreground">
+              <Link to="/account/integrations" className="text-accent hover:underline">
+                Map your PSA member
+              </Link>{' '}
+              to see your ticket queue.
+            </p>
+          </div>
+        )}
+
         {/* Error */}
         {error && (
           <div className="flex items-center gap-2 px-5 py-4 text-sm text-danger">
@@ -352,6 +375,18 @@ export function TicketQueue() {
           </>
         )}
 
+        {/* View all tickets link */}
+        {tickets.length > 0 && (
+          <div className="px-5 py-3 border-t border-default">
+            <Link
+              to="/tickets?assigned=me"
+              className="text-xs text-accent hover:text-accent/80 transition-colors"
+            >
+              View all tickets →
+            </Link>
+          </div>
+        )}
+
         {/* Empty states */}
         {!error && !loading && tickets.length === 0 && (
           <div className="px-5 py-8 text-center">
-- 
2.49.1


From 6044d5a88bc660af5099c41b5efaf0026941a513 Mon Sep 17 00:00:00 2001
From: Michael Chihlas <michael@resolutionflow.com>
Date: Thu, 16 Apr 2026 04:59:03 +0000
Subject: [PATCH 29/36] fix(tickets): fix permissions toast, board fallback,
 assignment search, remove load more
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- list_resources: return [] on PSAError instead of 502 — stops global interceptor
  toast when CW API key lacks ticket members permission (Lesson 111)
- list_boards/list_priorities: add warning logging so Railway logs reveal the
  root cause when CW permissions are missing
- TicketsPage: derive board options from ticket search results when listBoards
  returns empty (CW permissions fallback)
- TicketFilterBar: replace assignment <select> with searchable member picker —
  fixed options (All/Mine/Unassigned) + text-filtered member dropdown
- TicketQueue: remove Load More / infinite scroll; page now exists at /tickets

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 backend/app/api/endpoints/integrations.py     | 10 +-
 .../src/components/dashboard/TicketQueue.tsx  | 52 ++---------
 .../components/tickets/TicketFilterBar.tsx    | 91 +++++++++++++++----
 frontend/src/pages/TicketsPage.tsx            |  9 ++
 4 files changed, 96 insertions(+), 66 deletions(-)

diff --git a/backend/app/api/endpoints/integrations.py b/backend/app/api/endpoints/integrations.py
index 53abd104..78abf7a2 100644
--- a/backend/app/api/endpoints/integrations.py
+++ b/backend/app/api/endpoints/integrations.py
@@ -376,8 +376,9 @@ async def list_boards(
         provider = await get_provider_for_account(current_user.account_id, db)
         boards = await provider.list_boards()
         return [PSABoardResponse(id=b.id, name=b.name) for b in boards]
-    except PSAError:
+    except PSAError as e:
         # Boards are optional UI chrome — degrade gracefully rather than surfacing a toast
+        logger.warning("list_boards failed: %s", e)
         return []
 
 
@@ -630,7 +631,9 @@ async def list_ticket_resources(
     try:
         return await ticket_svc.list_resources(current_user.account_id, ticket_id, db)
     except PSAError as e:
-        raise HTTPException(status_code=502, detail=str(e))
+        # Resources are optional display data — degrade gracefully rather than surfacing a toast
+        logger.warning("list_resources(%s) failed: %s", ticket_id, e)
+        return []
 
 
 @router.post("/tickets/{ticket_id}/resources", response_model=PSAResourceSchema, status_code=201)
@@ -679,7 +682,8 @@ async def list_priorities(
         provider = await get_provider_for_account(current_user.account_id, db)
         raw = await provider.list_priorities()
         return [PSAPrioritySchema(id=p["id"], name=p["name"]) for p in raw if p.get("id")]
-    except PSAError:
+    except PSAError as e:
+        logger.warning("list_priorities failed: %s", e)
         return []
 
 
diff --git a/frontend/src/components/dashboard/TicketQueue.tsx b/frontend/src/components/dashboard/TicketQueue.tsx
index 5437dedf..6826b70d 100644
--- a/frontend/src/components/dashboard/TicketQueue.tsx
+++ b/frontend/src/components/dashboard/TicketQueue.tsx
@@ -1,6 +1,6 @@
 import { useState, useEffect, useRef, useCallback } from 'react'
 import { useNavigate, Link } from 'react-router-dom'
-import { Ticket, ChevronDown, Check, Loader2, AlertCircle } from 'lucide-react'
+import { Ticket, ChevronDown, Check, AlertCircle } from 'lucide-react'
 import { integrationsApi } from '@/api/integrations'
 import type { PSABoard, PSATicketSearchResult } from '@/types/integrations'
 import { cn } from '@/lib/utils'
@@ -193,10 +193,7 @@ export function TicketQueue() {
   const [selectedBoardIds, setSelectedBoardIds] = useState<number[]>([])
   const [activeTab, setActiveTab] = useState<Tab>('mine')
   const [tickets, setTickets] = useState<PSATicketSearchResult[]>([])
-  const [page, setPage] = useState(1)
-  const [hasMore, setHasMore] = useState(false)
   const [loading, setLoading] = useState(false)
-  const [loadingMore, setLoadingMore] = useState(false)
   const [error, setError] = useState<string | null>(null)
 
   // Check connection on mount
@@ -227,9 +224,9 @@ export function TicketQueue() {
   }, [hasConnection])
 
   const fetchTickets = useCallback(
-    async (tab: Tab, boardIds: number[], pageNum: number, append: boolean) => {
+    async (tab: Tab, boardIds: number[]) => {
       const params: Parameters<typeof integrationsApi.searchTicketsQueue>[0] = {
-        page: pageNum,
+        page: 1,
         page_size: PAGE_SIZE,
       }
       if (tab === 'mine') {
@@ -243,12 +240,7 @@ export function TicketQueue() {
 
       try {
         const results = await integrationsApi.searchTicketsQueue(params)
-        if (append) {
-          setTickets((prev) => [...prev, ...results.items])
-        } else {
-          setTickets(results.items)
-        }
-        setHasMore(results.items.length === PAGE_SIZE)
+        setTickets(results.items)
         setError(null)
       } catch {
         setError('Failed to load tickets. Check your PSA connection.')
@@ -261,21 +253,11 @@ export function TicketQueue() {
   useEffect(() => {
     if (!hasConnection) return
     if (activeTab === 'mine' && hasMemberMapping !== true) return
-    setPage(1)
     setTickets([])
-    setHasMore(false)
     setLoading(true)
-    fetchTickets(activeTab, selectedBoardIds, 1, false).finally(() => setLoading(false))
+    fetchTickets(activeTab, selectedBoardIds).finally(() => setLoading(false))
   }, [activeTab, selectedBoardIds, hasConnection, hasMemberMapping, fetchTickets])
 
-  const handleLoadMore = async () => {
-    const nextPage = page + 1
-    setPage(nextPage)
-    setLoadingMore(true)
-    await fetchTickets(activeTab, selectedBoardIds, nextPage, true)
-    setLoadingMore(false)
-  }
-
   const handleStartSession = (ticket: PSATicketSearchResult) => {
     navigate('/pilot', {
       state: {
@@ -368,7 +350,7 @@ export function TicketQueue() {
               <TicketRow
                 key={ticket.id}
                 ticket={ticket}
-                isLast={i === tickets.length - 1 && !hasMore}
+                isLast={i === tickets.length - 1}
                 onStartSession={handleStartSession}
               />
             ))}
@@ -404,28 +386,6 @@ export function TicketQueue() {
           </div>
         )}
 
-        {/* Load more */}
-        {!error && !loading && hasMore && (
-          <div
-            className="px-5 py-3"
-            style={{ borderTop: '1px solid var(--color-border-default)' }}
-          >
-            <button
-              onClick={handleLoadMore}
-              disabled={loadingMore}
-              className="flex w-full items-center justify-center gap-2 rounded-lg border border-[rgba(255,255,255,0.08)] bg-transparent py-2 text-xs text-muted-foreground hover:text-foreground hover:border-[rgba(255,255,255,0.14)] disabled:opacity-50 transition-colors"
-            >
-              {loadingMore ? (
-                <>
-                  <Loader2 size={12} className="animate-spin" />
-                  Loading...
-                </>
-              ) : (
-                'Load more'
-              )}
-            </button>
-          </div>
-        )}
       </div>
     </div>
   )
diff --git a/frontend/src/components/tickets/TicketFilterBar.tsx b/frontend/src/components/tickets/TicketFilterBar.tsx
index bb92ca1d..6f882ea1 100644
--- a/frontend/src/components/tickets/TicketFilterBar.tsx
+++ b/frontend/src/components/tickets/TicketFilterBar.tsx
@@ -1,5 +1,6 @@
 // frontend/src/components/tickets/TicketFilterBar.tsx
-import { Search, X } from 'lucide-react'
+import { useState } from 'react'
+import { Search, X, User } from 'lucide-react'
 import { cn } from '@/lib/utils'
 import type { TicketFilters, PSAPriority } from '@/types/tickets'
 import type { PSABoard, PSATicketStatusItem } from '@/types/integrations'
@@ -27,6 +28,24 @@ export function TicketFilterBar({
   const hasNext = page * pageSize < total
   const hasPrev = page > 1
 
+  // Member search state — text filter over the member list
+  const [memberSearch, setMemberSearch] = useState('')
+  const [memberDropdownOpen, setMemberDropdownOpen] = useState(false)
+
+  const currentMemberName = typeof filters.assigned === 'number'
+    ? (members.find(m => m.id === filters.assigned)?.name ?? `Member ${filters.assigned}`)
+    : null
+
+  const filteredMembers = members.filter(m =>
+    m.name.toLowerCase().includes(memberSearch.toLowerCase())
+  )
+
+  function handleMemberSelect(memberId: number | 'all' | 'me' | 'unassigned') {
+    onChange({ assigned: memberId })
+    setMemberDropdownOpen(false)
+    setMemberSearch('')
+  }
+
   return (
     <div className="space-y-3">
       {/* Filter row */}
@@ -42,22 +61,60 @@ export function TicketFilterBar({
           />
         </div>
 
-        {/* Assignment */}
-        <select
-          className="bg-input border border-default rounded-[5px] px-3 py-1.5 text-sm text-primary focus:border-accent focus:outline-none"
-          value={typeof filters.assigned === 'number' ? String(filters.assigned) : filters.assigned}
-          onChange={e => {
-            const v = e.target.value
-            onChange({ assigned: v === 'me' || v === 'unassigned' || v === 'all' ? v : Number(v) })
-          }}
-        >
-          <option value="all">All Tickets</option>
-          <option value="me">My Tickets</option>
-          <option value="unassigned">Unassigned</option>
-          {members.map(m => (
-            <option key={m.id} value={String(m.id)}>{m.name}</option>
-          ))}
-        </select>
+        {/* Assignment — searchable member picker */}
+        <div className="relative">
+          <button
+            onClick={() => { setMemberDropdownOpen(v => !v); setMemberSearch('') }}
+            className={cn(
+              'flex items-center gap-1.5 bg-input border rounded-[5px] px-3 py-1.5 text-sm focus:border-accent focus:outline-none',
+              filters.assigned === 'all' ? 'text-muted-foreground border-default' : 'text-primary border-accent'
+            )}
+          >
+            <User className="w-3.5 h-3.5" />
+            {filters.assigned === 'all' && 'All Tickets'}
+            {filters.assigned === 'me' && 'My Tickets'}
+            {filters.assigned === 'unassigned' && 'Unassigned'}
+            {currentMemberName}
+          </button>
+          {memberDropdownOpen && (
+            <>
+              <div className="fixed inset-0 z-10" onClick={() => setMemberDropdownOpen(false)} />
+              <div className="absolute left-0 top-full mt-1 z-20 w-52 bg-card border border-default rounded-[5px] shadow-lg overflow-hidden">
+                <div className="p-2 border-b border-default">
+                  <input
+                    autoFocus
+                    className="w-full bg-input border border-default rounded-[5px] px-2 py-1 text-xs text-primary placeholder:text-muted-foreground focus:border-accent focus:outline-none"
+                    placeholder="Search member..."
+                    value={memberSearch}
+                    onChange={e => setMemberSearch(e.target.value)}
+                  />
+                </div>
+                <div className="max-h-48 overflow-y-auto py-1">
+                  {!memberSearch && (
+                    <>
+                      <button onClick={() => handleMemberSelect('all')} className={cn('w-full text-left px-3 py-1.5 text-xs hover:bg-elevated transition-colors', filters.assigned === 'all' && 'text-accent')}>All Tickets</button>
+                      <button onClick={() => handleMemberSelect('me')} className={cn('w-full text-left px-3 py-1.5 text-xs hover:bg-elevated transition-colors', filters.assigned === 'me' && 'text-accent')}>My Tickets</button>
+                      <button onClick={() => handleMemberSelect('unassigned')} className={cn('w-full text-left px-3 py-1.5 text-xs hover:bg-elevated transition-colors', filters.assigned === 'unassigned' && 'text-accent')}>Unassigned</button>
+                      {members.length > 0 && <div className="border-t border-default mx-2 my-1" />}
+                    </>
+                  )}
+                  {filteredMembers.map(m => (
+                    <button
+                      key={m.id}
+                      onClick={() => handleMemberSelect(m.id)}
+                      className={cn('w-full text-left px-3 py-1.5 text-xs hover:bg-elevated transition-colors truncate', filters.assigned === m.id && 'text-accent')}
+                    >
+                      {m.name}
+                    </button>
+                  ))}
+                  {memberSearch && filteredMembers.length === 0 && (
+                    <p className="px-3 py-2 text-xs text-muted-foreground">No members found</p>
+                  )}
+                </div>
+              </div>
+            </>
+          )}
+        </div>
 
         {/* Board */}
         <select
diff --git a/frontend/src/pages/TicketsPage.tsx b/frontend/src/pages/TicketsPage.tsx
index 6bdf30c2..befc7b32 100644
--- a/frontend/src/pages/TicketsPage.tsx
+++ b/frontend/src/pages/TicketsPage.tsx
@@ -81,6 +81,15 @@ export default function TicketsPage() {
       })
       setTickets(result.items)
       setTotal(result.total)
+      // If the boards API returned empty (CW permissions), derive available boards from ticket data
+      setBoards(prev => {
+        if (prev.length > 0) return prev
+        const seen = new Map<number, string>()
+        result.items.forEach(t => {
+          if (t.board_id && t.board_name) seen.set(t.board_id, t.board_name)
+        })
+        return seen.size > 0 ? Array.from(seen, ([id, name]) => ({ id, name })) : prev
+      })
     } catch {
       setTickets([])
       setTotal(0)
-- 
2.49.1


From fb7690485b9b99160097f711a46101ae1b3f5fb9 Mon Sep 17 00:00:00 2001
From: Michael Chihlas <michael@resolutionflow.com>
Date: Thu, 16 Apr 2026 05:33:23 +0000
Subject: [PATCH 30/36] fix(tickets): fix statuses endpoint, members auth gate,
 and graceful error handling
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- Add GET /boards/{board_id}/statuses endpoint — direct board-to-statuses lookup
  without ticket roundabout; used by filter bar and new ticket form
- Fix TicketsPage and NewTicketModal to call getBoardStatuses(board_id) instead
  of misusing getTicketStatuses(ticket_id) with a board_id value
- Fix list_members auth: was require_account_owner (owner/super_admin only) —
  changed to require_engineer_or_admin so engineers can see member list for
  ticket assignment
- list_members: return [] on PSAError instead of 502 (Lesson 111 pattern)
- get_ticket_statuses: return [] on PSAError instead of 502

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 backend/app/api/endpoints/integrations.py     | 31 +++++++++++++++++--
 frontend/src/api/integrations.ts              |  2 ++
 .../src/components/tickets/NewTicketModal.tsx |  2 +-
 frontend/src/pages/TicketsPage.tsx            |  2 +-
 4 files changed, 32 insertions(+), 5 deletions(-)

diff --git a/backend/app/api/endpoints/integrations.py b/backend/app/api/endpoints/integrations.py
index 78abf7a2..3f8b28d4 100644
--- a/backend/app/api/endpoints/integrations.py
+++ b/backend/app/api/endpoints/integrations.py
@@ -788,7 +788,30 @@ async def get_ticket_statuses(
     except PSANotFoundError:
         raise HTTPException(status_code=404, detail="Ticket not found")
     except PSAError as e:
-        raise HTTPException(status_code=502, detail=str(e))
+        logger.warning("get_ticket_statuses(%s) failed: %s", ticket_id, e)
+        return []
+
+
+@router.get("/boards/{board_id}/statuses", response_model=list[PSATicketStatusItem])
+async def get_board_statuses(
+    board_id: int,
+    current_user: Annotated[User, Depends(require_engineer_or_admin)],
+    db: Annotated[AsyncSession, Depends(get_db)],
+):
+    """Get available statuses for a service board directly (no ticket lookup required)."""
+    if not current_user.account_id:
+        raise HTTPException(status_code=400, detail="User has no account")
+
+    from app.services.psa.registry import get_provider_for_account
+    from app.services.psa.exceptions import PSAError
+
+    try:
+        provider = await get_provider_for_account(current_user.account_id, db)
+        statuses = await provider.get_ticket_statuses(board_id)
+        return [PSATicketStatusItem(id=s.id, name=s.name, is_closed=s.is_closed) for s in statuses]
+    except PSAError as e:
+        logger.warning("get_board_statuses(%s) failed: %s", board_id, e)
+        return []
 
 
 # ── member mapping endpoints ─────────────────────────────────────────
@@ -796,7 +819,7 @@ async def get_ticket_statuses(
 
 @router.get("/members", response_model=list[PsaMemberResponse])
 async def list_members(
-    current_user: Annotated[User, Depends(require_account_owner)],
+    current_user: Annotated[User, Depends(require_engineer_or_admin)],
     db: Annotated[AsyncSession, Depends(get_db)],
 ):
     """List CW members (from CW API)."""
@@ -814,7 +837,9 @@ async def list_members(
             for m in members
         ]
     except PSAError as e:
-        raise HTTPException(status_code=502, detail=str(e))
+        # Members are optional display data — degrade gracefully
+        logger.warning("list_members failed: %s", e)
+        return []
 
 
 @router.get("/member-mappings", response_model=list[PsaMemberMappingResponse])
diff --git a/frontend/src/api/integrations.ts b/frontend/src/api/integrations.ts
index aace4a3e..7694a135 100644
--- a/frontend/src/api/integrations.ts
+++ b/frontend/src/api/integrations.ts
@@ -30,6 +30,8 @@ export const integrationsApi = {
     apiClient.get<PSATicketInfo>(`/integrations/psa/tickets/${id}`).then(r => r.data),
   getTicketStatuses: (ticketId: string) =>
     apiClient.get<PSATicketStatusItem[]>(`/integrations/psa/tickets/${ticketId}/statuses`).then(r => r.data),
+  getBoardStatuses: (boardId: number | string) =>
+    apiClient.get<PSATicketStatusItem[]>(`/integrations/psa/boards/${boardId}/statuses`).then(r => r.data),
   listMembers: () =>
     apiClient.get<PsaMemberResponse[]>('/integrations/psa/members').then(r => r.data),
   getMemberMappings: () =>
diff --git a/frontend/src/components/tickets/NewTicketModal.tsx b/frontend/src/components/tickets/NewTicketModal.tsx
index 17d1fe68..69a1ce11 100644
--- a/frontend/src/components/tickets/NewTicketModal.tsx
+++ b/frontend/src/components/tickets/NewTicketModal.tsx
@@ -44,7 +44,7 @@ export function NewTicketModal({ defaultTab = 'quick', initialValues, summaryHin
 
   useEffect(() => {
     if (draft.board_id) {
-      integrationsApi.getTicketStatuses(String(draft.board_id))
+      integrationsApi.getBoardStatuses(draft.board_id)
         .then(setStatuses).catch(() => {})
     } else {
       setStatuses([])
diff --git a/frontend/src/pages/TicketsPage.tsx b/frontend/src/pages/TicketsPage.tsx
index befc7b32..bfb28f52 100644
--- a/frontend/src/pages/TicketsPage.tsx
+++ b/frontend/src/pages/TicketsPage.tsx
@@ -56,7 +56,7 @@ export default function TicketsPage() {
   // Load statuses when board changes
   useEffect(() => {
     if (filters.board_id) {
-      integrationsApi.getTicketStatuses(String(filters.board_id))
+      integrationsApi.getBoardStatuses(filters.board_id)
         .then(setStatuses).catch(() => {})
     } else {
       setStatuses([])
-- 
2.49.1


From 294b309faac4bfb933dd1665b3db4eeef75bd071 Mon Sep 17 00:00:00 2001
From: Michael Chihlas <michael@resolutionflow.com>
Date: Thu, 16 Apr 2026 14:42:05 +0000
Subject: [PATCH 31/36] =?UTF-8?q?fix:=20pre-landing=20review=20fixes=20?=
 =?UTF-8?q?=E2=80=94=20company=5Fid=20filter=20and=20CW=20condition=20inje?=
 =?UTF-8?q?ction?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- Apply company_id filter in CW search_tickets conditions (was silently ignored)
- Sanitize query string to strip single quotes before CW condition interpolation
- Add psaError state to TicketsPage for permissions error surfacing

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 .../app/services/psa/connectwise/provider.py  |  6 ++++-
 frontend/src/pages/TicketsPage.tsx            | 26 ++++++++++++++++---
 2 files changed, 28 insertions(+), 4 deletions(-)

diff --git a/backend/app/services/psa/connectwise/provider.py b/backend/app/services/psa/connectwise/provider.py
index 465f66ab..74f338c8 100644
--- a/backend/app/services/psa/connectwise/provider.py
+++ b/backend/app/services/psa/connectwise/provider.py
@@ -74,7 +74,9 @@ class ConnectWiseProvider(PSAProvider):
 
         conditions: list[str] = []
         if query:
-            conditions.append(f"summary contains '{query}'")
+            # Sanitize: strip single quotes to prevent CW condition injection
+            safe_query = query.replace("'", "")
+            conditions.append(f"summary contains '{safe_query}'")
         if filters.get("board_id"):
             conditions.append(f"board/id = {filters['board_id']}")
         if filters.get("status_id"):
@@ -89,6 +91,8 @@ class ConnectWiseProvider(PSAProvider):
         if board_ids:
             board_list = ", ".join(str(bid) for bid in board_ids)
             conditions.append(f"board/id in ({board_list})")
+        if filters.get("company_id"):
+            conditions.append(f"company/id = {int(filters['company_id'])}")
 
         condition_str = " and ".join(conditions) if conditions else ""
         if condition_str:
diff --git a/frontend/src/pages/TicketsPage.tsx b/frontend/src/pages/TicketsPage.tsx
index bfb28f52..64f11cb7 100644
--- a/frontend/src/pages/TicketsPage.tsx
+++ b/frontend/src/pages/TicketsPage.tsx
@@ -1,6 +1,7 @@
 import { useEffect, useState, useCallback } from 'react'
 import { useSearchParams } from 'react-router-dom'
-import { Plus, Ticket } from 'lucide-react'
+import { Plus, Ticket, AlertTriangle } from 'lucide-react'
+import axios from 'axios'
 import { TicketFilterBar } from '@/components/tickets/TicketFilterBar'
 import { TicketListRow } from '@/components/tickets/TicketListRow'
 import { TicketDetailPanel } from '@/components/tickets/TicketDetailPanel'
@@ -37,6 +38,7 @@ export default function TicketsPage() {
   const [tickets, setTickets] = useState<PSATicketSearchResult[]>([])
   const [total, setTotal] = useState(0)
   const [loading, setLoading] = useState(false)
+  const [psaError, setPsaError] = useState<string | null>(null)
   const [boards, setBoards] = useState<PSABoard[]>([])
   const [statuses, setStatuses] = useState<PSATicketStatusItem[]>([])
   const [priorities, setPriorities] = useState<PSAPriority[]>([])
@@ -66,6 +68,7 @@ export default function TicketsPage() {
   // Fetch tickets on filter/page change
   const fetchTickets = useCallback(async () => {
     setLoading(true)
+    setPsaError(null)
     try {
       const result = await ticketsApi.searchTickets({
         query: filters.search || undefined,
@@ -90,9 +93,20 @@ export default function TicketsPage() {
         })
         return seen.size > 0 ? Array.from(seen, ([id, name]) => ({ id, name })) : prev
       })
-    } catch {
+    } catch (err: unknown) {
       setTickets([])
       setTotal(0)
+      if (axios.isAxiosError(err)) {
+        const status = err.response?.status
+        const detail = (err.response?.data as { detail?: string })?.detail ?? ''
+        if (status === 502 && detail.toLowerCase().includes('permission')) {
+          setPsaError('ConnectWise returned a permissions error. Check that the API member\'s security role has Service Tickets → Inquire → ALL and System → Table Setup → Inquire → ALL.')
+        } else if (status === 502) {
+          setPsaError('ConnectWise is unavailable or returned an error. Check your integration settings.')
+        } else {
+          setPsaError('Failed to load tickets.')
+        }
+      }
     } finally {
       setLoading(false)
     }
@@ -165,7 +179,13 @@ export default function TicketsPage() {
               Loading tickets…
             </div>
           )}
-          {!loading && tickets.length === 0 && (
+          {!loading && psaError && (
+            <div className="mx-6 mt-6 flex items-start gap-3 px-4 py-3 rounded-lg bg-danger-dim border border-danger/30 text-sm text-danger">
+              <AlertTriangle className="w-4 h-4 mt-0.5 shrink-0" />
+              <span>{psaError}</span>
+            </div>
+          )}
+          {!loading && !psaError && tickets.length === 0 && (
             <div className="flex flex-col items-center justify-center py-16 text-muted-foreground text-sm gap-2">
               <Ticket className="w-8 h-8 opacity-30" />
               No tickets match your filters
-- 
2.49.1


From bea34229d64d67d2a1cd4096ebcbdd058d71cc03 Mon Sep 17 00:00:00 2001
From: Michael Chihlas <michael@resolutionflow.com>
Date: Thu, 16 Apr 2026 14:44:03 +0000
Subject: [PATCH 32/36] chore: bump version and changelog (v0.1.0.0)

Add CW security roles reference docs and PSA ticket management plan.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 CHANGELOG.md                                  |   24 +
 CLAUDE.md                                     |  421 +--
 VERSION                                       |    1 +
 docs/LESSONS-ARCHIVE.md                       |   66 +-
 docs/connectwise/CW_Security_Roles/README.md  |   63 +
 .../Security_Roles_Matrix_11132017.xlsx       |  Bin 0 -> 100948 bytes
 .../api-member-security-roles.md              | 1373 ++++++++
 .../api-member-security-roles.yaml            | 1913 ++++++++++
 .../CW_Security_Roles/generate_role_docs.py   |  361 ++
 .../CW_Security_Roles/requirements.txt        |    5 +
 .../plans/2026-04-16-psa-ticket-management.md | 3075 +++++++++++++++++
 11 files changed, 7008 insertions(+), 294 deletions(-)
 create mode 100644 VERSION
 create mode 100644 docs/connectwise/CW_Security_Roles/README.md
 create mode 100644 docs/connectwise/CW_Security_Roles/Security_Roles_Matrix_11132017.xlsx
 create mode 100644 docs/connectwise/CW_Security_Roles/api-member-security-roles.md
 create mode 100644 docs/connectwise/CW_Security_Roles/api-member-security-roles.yaml
 create mode 100644 docs/connectwise/CW_Security_Roles/generate_role_docs.py
 create mode 100644 docs/connectwise/CW_Security_Roles/requirements.txt
 create mode 100644 docs/superpowers/plans/2026-04-16-psa-ticket-management.md

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 971810f7..90f55717 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,30 @@
 
 All notable changes to ResolutionFlow are documented here.
 
+## [0.1.0.0] - 2026-04-16
+
+### Added
+- **PSA Ticket Management** — dedicated `/tickets` page with URL-param filter state (board, status, priority, company, assignment, closed), paginated ticket list, and slide-in detail panel
+- **TicketDetailPanel** — full ticket view with notes feed, configurations, related tickets, and resource manager; optimistic status updates via dropdown
+- **NewTicketModal** — two-tab ticket creation: "Quick Create (AI)" parses natural language into a pre-filled form via Claude, "Full Form" for manual entry; validates required fields before submitting to CW
+- **AiTicketParseForm** — natural language → structured ticket data using Claude; resolves board and assignee automatically, flags fields needing manual selection
+- **TicketResourceManager** — add/remove CW members as ticket resources with member search autocomplete
+- **Spin-off ticket creation from ResolutionAssist** — AI can detect when a new ticket should be created mid-session and surface the NewTicketModal pre-filled with session context
+- **TicketQueue improvements** — dashboard widget now detects member mapping, caps at 5 items, shows "View All" link to `/tickets`
+- **Board statuses endpoint** — `GET /integrations/boards/{board_id}/statuses` for direct status lookup without a ticket context
+- **Paginated ticket search** — `search_tickets` returns `{items, total, page, page_size}`; parallel CW count fetch for accurate totals
+- **Ticket service layer** — `ticket_service.py` wraps all PSA mutations (create, update status, list/add/remove resources)
+- **Priority lookup endpoint** — `GET /integrations/tickets/priorities` for form dropdowns
+- **PSA error surfacing** — `/tickets` page shows inline error banner with specific guidance when CW returns a permissions error (replaces silent empty state)
+
+### Fixed
+- CW query injection: sanitize search `query` string to strip single quotes before interpolation into CW conditions
+- `company_id` filter now correctly applied to CW ticket search conditions (was silently ignored)
+- `linkedTicket` fetch in ResolutionAssist guarded with `currentChatRef` to prevent race condition on session switch
+- Members endpoint auth gate no longer rejects engineers without a PSA mapping
+- Board fallback: ticket list derives available boards from ticket data when the boards API returns empty (permissions)
+- Assignment search and "Load More" removed from resource manager in favor of direct member list
+
 ## [Unreleased]
 
 ### Added
diff --git a/CLAUDE.md b/CLAUDE.md
index c7def325..d228b3df 100644
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -1,6 +1,6 @@
 # CLAUDE.md - Patherly / ResolutionFlow Project Context
 
-> **Last Updated:** April 6, 2026
+> **Last Updated:** April 16, 2026
 
 ---
 
@@ -20,18 +20,12 @@
 | Docker containers | `resolutionflow_postgres`, `resolutionflow_frontend`, `resolutionflow_backend` |
 | Backend, frontend UI, production URLs | **ResolutionFlow** |
 
-- **Design system:** [DESIGN-SYSTEM.md](DESIGN-SYSTEM.md) — THE source of truth for all design decisions
-- **Design aesthetic:** Flat, high-contrast dark theme (Sentry/PostHog-inspired). No glass morphism, no gradients on surfaces, no ambient effects. Light mode planned.
-- **Accent color:** Electric blue (#60a5fa dark / #2563eb light). Used sparingly — ≤5% of the UI. Warning is amber (#fbbf24), info is cyan (#67e8f9).
-- **Fonts:** IBM Plex Sans (`font-sans`, body), Bricolage Grotesque (`font-heading`, headings), JetBrains Mono (`font-mono`, code) — loaded via Google Fonts
-- **Logo:** 30px gradient square (ember orange) + "ResolutionFlow" in Bricolage Grotesque 700
-- **Layout:** Icon rail sidebar (72px default) with hover flyout panels. Pinnable to full 260px sidebar. See [DESIGN-SYSTEM.md](DESIGN-SYSTEM.md)
 - **Brand assets:** `brand-assets/` (source SVGs), `frontend/src/assets/brand/` (app assets), `frontend/public/icons/` (favicon)
-- **Terminology:** User-facing label is "Flows" (not "Trees"). Procedural flows are called "Projects" in the UI. Step Library is called "Solutions Library" in the UI. Maintenance flows are hidden from UI for pilot (backend still supports them). `tree_type` column values unchanged in DB.
+- **Logo:** 30px gradient square (ember orange) + "ResolutionFlow" in Bricolage Grotesque 700
+- **Layout:** Icon rail sidebar (72px default) with hover flyout panels. Pinnable to full 260px sidebar.
+- **Terminology:** User-facing label is "Flows" (not "Trees"). Procedural flows are called "Projects" in the UI. Step Library is called "Solutions Library" in the UI. `tree_type` column values unchanged in DB.
 - **Reference mockups:** `docs/mockups/` (HTML files, open in browser)
 
-**Component styling:** See Design System section below and [DESIGN-SYSTEM.md](DESIGN-SYSTEM.md). All colors via CSS variables. Use "Flows" not "Trees" in user-facing text; use "Projects" not "Procedures" for procedural flows.
-
 ## Implementation Principles
 
 - Prefer correct architecture over minimal diff
@@ -59,22 +53,10 @@
 ## Tech Stack
 
 ### Backend
-
-- **Framework:** Python FastAPI
-- **Database:** PostgreSQL 16 (async via SQLAlchemy 2.0 + asyncpg)
-- **Migrations:** Alembic
-- **Auth:** JWT (python-jose) + bcrypt, refresh token rotation (JTI-based)
-- **Validation:** Pydantic v2
-- **Scheduling:** APScheduler 3.x (async, in-process with FastAPI lifespan) + croniter + pytz
+Python FastAPI, PostgreSQL 16 (async SQLAlchemy 2.0 + asyncpg), Alembic, JWT (python-jose) + bcrypt, Pydantic v2, APScheduler 3.x
 
 ### Frontend
-
-- **Framework:** React 19 + Vite + TypeScript
-- **Styling:** Tailwind CSS v4 (`@tailwindcss/vite` plugin, CSS-only config in `index.css`) — flat dark theme with ember orange accent (see [DESIGN-SYSTEM.md](DESIGN-SYSTEM.md))
-- **State:** Zustand (with immer + zundo for undo/redo)
-- **Routing:** React Router v7
-- **API Client:** Axios with token refresh interceptor
-- **Icons:** Lucide React
+React 19 + Vite + TypeScript, Tailwind CSS v4 (CSS-only config in `index.css`), Zustand (immer + zundo), React Router v7, Axios, Lucide React
 
 ---
 
@@ -82,37 +64,23 @@
 
 ```
 patherly/
-├── backend/
-│   ├── app/
-│   │   ├── main.py                 # FastAPI entry point
-│   │   ├── api/endpoints/          # Route handlers (auth, trees, sessions, admin, steps, survey, copilot, assistant_chat, integrations)
-│   │   │   ├── flow_proposals.py   # Knowledge Flywheel review queue CRUD
-│   │   │   └── flowpilot_analytics.py # FlowPilot dashboard metrics
-│   │   ├── api/deps.py             # Auth dependencies (includes require_team_admin)
-│   │   ├── api/router.py           # Route registration
-│   │   ├── core/                   # config, database, permissions, security, audit, rate_limit
-│   │   ├── models/                 # SQLAlchemy models (includes FlowProposal)
-│   │   ├── schemas/                # Pydantic schemas
-│   │   ├── services/psa/           # PSA provider abstraction (base, connectwise/, autotask/, halopsa/, cache, encryption, registry, types)
-│   │   ├── services/knowledge_flywheel.py        # AI session analysis → flow proposals
-│   │   ├── services/knowledge_flywheel_scheduler.py # APScheduler job for batch analysis
-│   │   └── services/knowledge_gap_service.py     # Weak options & escalation signal detection
-│   ├── alembic/                    # Database migrations (001-070 sequential, then hash IDs)
-│   ├── scripts/                    # seed_data.py, seed_trees.py
-│   └── tests/                      # pytest integration tests
-├── frontend/
-│   ├── src/
-│   │   ├── api/                    # Axios client + endpoint modules
-│   │   ├── components/             # common, layout, dashboard, tree-editor, session, procedural, procedural-editor, library, step-library, ui, flowpilot
-│   │   ├── hooks/                  # usePermissions, useSessionTimer, useKeyboardShortcuts
-│   │   ├── pages/                  # All page components
-│   │   ├── store/                  # Zustand stores (auth, treeEditor, proceduralEditor, userPreferences, scriptGeneratorStore)
-│   │   └── types/                  # TypeScript interfaces
-│   └── (Tailwind v4: CSS-only config in src/index.css)
-├── docs/plans/archive/             # Archived design/impl docs (pre-March 2026)
-├── CLAUDE.md                       # This file
-├── CURRENT-STATE.md                # Detailed feature status
-├── LESSONS-LEARNED.md              # (Deprecated — consolidated into CLAUDE.md)
+├── backend/app/
+│   ├── main.py                     # FastAPI entry point
+│   ├── api/endpoints/              # Route handlers
+│   ├── api/deps.py                 # Auth dependencies
+│   ├── core/                       # config, database, permissions, security, audit, rate_limit
+│   ├── models/                     # SQLAlchemy models
+│   ├── schemas/                    # Pydantic schemas
+│   └── services/psa/               # PSA provider abstraction (connectwise/, autotask/, halopsa/)
+├── backend/alembic/                # Migrations (001-070 sequential, then hash IDs)
+├── backend/tests/                  # pytest integration tests
+├── frontend/src/
+│   ├── api/                        # Axios client + endpoint modules
+│   ├── components/                 # UI components
+│   ├── hooks/                      # usePermissions, useSessionTimer, etc.
+│   ├── pages/                      # Page components
+│   ├── store/                      # Zustand stores
+│   └── types/                      # TypeScript interfaces
 └── docs/plans/                     # Design docs & implementation plans
 ```
 
@@ -143,252 +111,163 @@ VITE_API_URL=http://localhost:8000
 
 ## ConnectWise PSA Integration
 
-ResolutionFlow integrates with ConnectWise PSA (formerly Manage) as the primary PSA integration. All ConnectWise API reference materials live in `docs/connectwise/`.
+All reference materials in `docs/connectwise/`. See [CONNECTWISE-API-REFERENCE.md](docs/connectwise/CONNECTWISE-API-REFERENCE.md) first.
 
 ### Best Practices Documentation
 
-Official ConnectWise developer guides live in `docs/connectwise/best-practices/`. Read these BEFORE implementing any CW API integration code:
+Read `docs/connectwise/best-practices/` BEFORE implementing any CW API integration code:
 
-- `PSA-API-Requests.md` — HTTP methods, response codes, condition query syntax, PATCH format, URL encoding, partial responses, custom fields. READ FIRST.
-- `PSA-Callbacks.md` — Callback type/level matrix, retry behavior, URL parameter gotcha, HMAC signature verification.
-- `PSA-Pagination.md` — Navigable vs Forward-Only pagination, Link headers, while-loop pattern.
-- `PSA-Service-Tickets.md` — Ticket field philosophy, recommended field mappings.
-- `PSA-Versioning.md` — Pin API version via Accept header. Use `application/vnd.connectwise.com+json; version=2025.16`.
-- `PSA-Cloud-URL-Formatting.md` — Dynamic base URL construction via `/login/companyinfo/{companyId}`.
-- `Bundled-Requests.md` — Batch multiple API calls into one request via `/system/bundles`.
-- `PSA-Markdown.md` — Ticket notes support markdown. Format session documentation output accordingly.
-- `PSA-Company-Synchronization.md` — Filter companies by Status/Type for mapping UI.
-- `PSA-Data-Protection.md` — Security role model, request minimal permissions (MY not ALL).
+- `PSA-API-Requests.md` — HTTP methods, condition syntax, PATCH format. READ FIRST.
+- `PSA-Callbacks.md` — Callback matrix, HMAC verification.
+- `PSA-Pagination.md` — Forward-Only vs Navigable, Link headers.
+- `PSA-Service-Tickets.md` — Ticket field mappings.
+- `PSA-Versioning.md` — Pin `application/vnd.connectwise.com+json; version=2025.16`.
+- `PSA-Cloud-URL-Formatting.md` — Dynamic base URL via `/login/companyinfo/{companyId}`.
+- `Bundled-Requests.md` — Batch via `/system/bundles`.
+- `PSA-Markdown.md` — Notes support markdown.
+- `PSA-Company-Synchronization.md` — Filter companies by Status/Type.
+- `PSA-Data-Protection.md` — Request minimal permissions (MY not ALL).
 
 ### Reference Files (read in this order)
 
-1. `docs/connectwise/CONNECTWISE-API-REFERENCE.md` — Read FIRST. Quick reference covering auth patterns, tiered endpoint map, key field mappings, and integration architecture flows.
-2. `docs/connectwise/connectwise-psa-resolutionflow-reference.json` — Extracted OpenAPI 3.0.1 spec (v2025.16) with only the 670 endpoints and 342 schemas relevant to ResolutionFlow. Use for exact field types, request/response shapes, and parameter details.
-3. `docs/connectwise/connectwise-psa-openapi-full.json` — Complete ConnectWise PSA OpenAPI spec (1838 endpoints, 842 schemas). Only consult if you need an endpoint outside the extracted subset.
-
-### Integration Architecture
-
-- **Session → Ticket Notes:** Post auto-generated session documentation to ConnectWise tickets as internal analysis notes via `POST /service/tickets/{id}/notes`
-- **Ticket Context → Session Runner:** Pull ticket details, company info, and attached configurations to give FlowPilot AI real-world context
-- **Callbacks:** Register webhooks via `/system/callbacks` for real-time ticket event notifications to suggest relevant Flows
+1. `docs/connectwise/CONNECTWISE-API-REFERENCE.md` — Auth patterns, endpoint map, field mappings.
+2. `docs/connectwise/connectwise-psa-resolutionflow-reference.json` — Extracted OpenAPI 3.0.1 spec (670 endpoints, 342 schemas).
+3. `docs/connectwise/connectwise-psa-openapi-full.json` — Full spec (1838 endpoints). Only if you need something outside the subset.
 
 ### Key Implementation Rules
 
 - Auth: API Key auth (Base64 of `companyId+publicKey:privateKey`) + `clientId` header on every request
-- `clientId` is server-side config (`CW_CLIENT_ID` in `config.py`) — identifies the ResolutionFlow app, NOT per-tenant. Per-connection credentials: `company_id`, `public_key`, `private_key`, `server_url`
-- All PSA integration code in `services/psa/` — provider pattern with `PSAProvider` abstract base class, `ConnectWiseProvider` implementation, `PsaProviderRegistry` for multi-PSA dispatch
+- `clientId` is server-side config (`CW_CLIENT_ID` in `config.py`) — identifies ResolutionFlow app, NOT per-tenant. Per-connection: `company_id`, `public_key`, `private_key`, `server_url`
+- All PSA code in `services/psa/` — `PSAProvider` abstract base, `ConnectWiseProvider` impl, `PsaProviderRegistry` for multi-PSA dispatch
 - PSA endpoints in `api/endpoints/integrations.py` — connection CRUD, ticket ops, member mapping
-- Credentials encrypted at rest via `services/psa/encryption.py` (Fernet)
-- Each MSP tenant provides their own CW credentials — ResolutionFlow stores these per-team, never per-user
-- Design for the Autotask integration following the same service layer pattern (future PSA)
+- Credentials encrypted via `services/psa/encryption.py` (Fernet); stored per-team, never per-user
 - In-memory TTL cache in `services/psa/cache.py` for board/status/priority lookups
-- Respect CW API: paginate with max 1000 per page, handle retries gracefully
+- Integration flows: Session → Ticket Notes via `POST /service/tickets/{id}/notes`; Ticket Context → FlowPilot via ticket details/company/configs; Callbacks via `/system/callbacks`
 
 ---
 
 ## Development Commands
 
-```powershell
-# Start PostgreSQL (run from VPS SSH — docker not available inside code-server, see Lesson 103)
+```bash
+# PostgreSQL (run from VPS SSH — docker not available in code-server, see Lesson 103)
 docker start resolutionflow_postgres
 
 # Backend (from backend/)
-source venv/bin/activate        # Linux/Mac
-# .\venv\Scripts\Activate       # Windows
+source venv/bin/activate
 uvicorn app.main:app --reload
 
-# Frontend (from frontend/)
+# Frontend (from frontend/) — requires Node 20 (use nvm: nvm use 20)
 npm run dev
 
-# Run tests (from backend/)
+# Tests (from backend/)
 pytest --override-ini="addopts="
 
-# First time only: create test database
-docker exec -it resolutionflow_postgres psql -U postgres -c "CREATE DATABASE resolutionflow_test;"
+# TypeScript check (use in code-server — avoids EACCES on dist/, see Lesson 105)
+npx tsc -b
 
-# Frontend build (IMPORTANT: stricter than tsc --noEmit — always use as final check)
+# Frontend build — stricter than tsc, always use as final check before push
 cd frontend && npm run build
 
-# Database migrations
+# Migrations
 cd backend && alembic upgrade head
-alembic revision --autogenerate -m "Description"
-# Sequential 3-digit IDs (001–070) were used historically. New migrations use Alembic's default hex hash IDs.
-# Do NOT pass --rev-id — let Alembic generate the hash automatically.
+alembic revision --autogenerate -m "Description"  # do NOT pass --rev-id; Alembic generates hash IDs
 
-# Access PostgreSQL (run from VPS SSH — docker not available inside code-server, see Lesson 103)
+# Access PostgreSQL (VPS SSH)
 docker exec -it resolutionflow_postgres psql -U postgres -d resolutionflow
 
-# Seed data
-cd backend && pip install httpx && python -m scripts.seed_trees
-
-# CI/CD debugging
-# CI runs on Gitea (gitea.resolutionflow.com), NOT GitHub Actions — gh run list will return nothing useful
-# Check CI status at: https://gitea.resolutionflow.com/chihlasm/resolutionflow/actions
-# `gh` CLI is still used for GitHub Issues/PRs (mirrored repo), not for CI runs
+# CI runs on Gitea (NOT GitHub Actions): https://gitea.resolutionflow.com/chihlasm/resolutionflow/actions
 ```
 
-### URLs
+### URLs & Test Users
 
-- Frontend: <http://localhost:5173>
-- Backend API: <http://localhost:8000>
-- API Docs: <http://localhost:8000/api/docs>
-
-### Test Users (seeded via `scripts/seed_test_users.py`)
-
-- All share password: `TestPass123!`
-- `admin@resolutionflow.example.com` (super_admin), `teamadmin@resolutionflow.example.com` (team_admin), `engineer@resolutionflow.example.com` (engineer), `pro@resolutionflow.example.com` (solo pro)
+- Frontend: `http://localhost:5173` | Backend: `http://localhost:8000` | API Docs: `http://localhost:8000/api/docs`
+- Test password: `TestPass123!` — users: `admin@`, `teamadmin@`, `engineer@`, `pro@` (all `@resolutionflow.example.com`)
 
 ---
 
 ## Critical Lessons Learned
 
-> Lessons 1-40 archived to `docs/LESSONS-ARCHIVE.md` — fixes are baked into the codebase. Consult if you hit a regression.
+> Lessons 1-70 archived to `docs/LESSONS-ARCHIVE.md` — fixes are baked into the codebase.
 
-### Active Lessons (41+)
+**71. Enhancement/branch_addition proposals cannot be directly approved:** Backend returns 400 — requires `modified_flow_data` via "Edit & Publish". Only `new_flow` proposals support direct approve.
 
-**41. Assistant chat uses local React state, not Zustand:** `AssistantChatPage.tsx` uses `useState` for `chats`, `messages`, `input`, `loading`. No store.
+**72. `ai_sessions.status` column is `VARCHAR(30)`:** Must fit `requesting_escalation` (23 chars). Verify length when adding new status values.
 
-**42. Public pages use raw `fetch()`, not `apiClient`:** Survey, shared sessions, and no-auth pages use `fetch()` with full URL. `apiClient` requires auth tokens.
+**73. `get_db` rolls back on exception:** Prevents `InFailedSQLTransaction` cascade. Never remove the `await session.rollback()` in the dependency.
 
-**43. Adding new email types:** Add static async method to `EmailService` in `core/email.py`. Fire-and-forget from endpoints (log errors, don't fail).
+**74. FlowPilot action bar height chain:** `ViewTransitionOutlet` wrapper needs `flex flex-col`. If action bar disappears, walk `getBoundingClientRect()` from `app-shell` down.
 
-**44. AI Chat Builder is flow-type-aware:** `ai_chat_service.py` dispatches by `flow_type`. Troubleshooting: `[TREE_UPDATE]` markers. Procedural: `[STEPS_UPDATE]` markers. Both support `[METADATA]`.
+**75. Dashboard prefill auto-submits:** `StartSessionInput` passes `{ state: { prefill } }`. Both `FlowPilotSessionPage` and `AssistantChatPage` auto-submit via `useEffect` + `prefillHandledRef` guard.
 
-**45. Intake form field schema:** Uses `variable_name` and `field_type` (NOT `name` and `type`).
+**76. Active session navigation guard:** `FlowPilotSessionPage` uses `useBlocker` to intercept navigation. "Pause & Leave" auto-pauses before proceeding.
 
-**46. `CreateFlowDropdown` uses `AIPromptDialog`:** Opens prompt modal, starts AI session, generates flow, navigates to editor with `{ state: { aiPanelOpen: true, sessionId } }`.
+**77. Prefer manual Alembic migrations for targeted changes:** `--autogenerate` picks up all table drift. For single-column fixes, use `alembic revision -m "desc"` and write `op.alter_column()` manually.
 
-**47. Editor-Embedded Flow Assist:** `EditorAIPanel` (320px side panel) + `useEditorAI` hook. Ghost nodes use `_suggestion: true` flag. Actions route to model tiers via `settings.get_model_for_action()`. Delta responses use `[DELTA]...[/DELTA]` markers.
+**78. Landing page subtitle is "AI-Powered Troubleshooting for MSPs":** Appears on login, register, and `<title>`. Not "Decision Tree Platform".
 
-**48. Tree orphan validation uses dynamic root ID:** Orphan check compares against `state.treeStructure?.id` (NOT hardcoded `'root'`).
+**79. Custom modals must be mobile-responsive:** Use `items-end sm:items-center` + `max-w-full sm:max-w-lg`. See `Modal.tsx` and `PrepareSessionModal.tsx`.
 
-**49. Full-stack features — verify both ends:** Check the full data flow: schema → endpoint → API client → hook → store → UI.
+**80. TopBar search collapses to icon on mobile:** Full bar (`hidden sm:block`) + icon fallback (`sm:hidden`). Both open `CommandPalette`.
 
-**50. Anthropic SDK retry:** Set `max_retries=1` to fail fast. Default `max_retries=2` can take 3× timeout.
+**81. Never use `transition: all` in landing.css:** Specify exact properties. `transition: all` animates layout and causes jank.
 
-**51. AI model tier routing:** Use `settings.get_model_for_action(action_type)`. Model IDs: use alias form (`claude-sonnet-4-6`).
+**82. `bun` requires PATH setup:** `export BUN_INSTALL="$HOME/.bun" && export PATH="$BUN_INSTALL/bin:$PATH"`. Chromium deps: `libatk1.0-0 libatk-bridge2.0-0 libcups2 libxkbcommon0 libatspi2.0-0 libxcomposite1 libxdamage1 libxfixes3 libxrandr2 libgbm1 libasound2`.
 
-**52. Mobile scroll-to-top:** Use `ref.current.scrollIntoView()`, not `window.scrollTo()`. Trigger via `useEffect`.
+**84. AI session `abandoned` status is fully wired:** `POST /ai-sessions/{id}/abandon` with optional `reason`. Frontend: `aiSessionsApi.abandonSession()` → `useFlowPilotSession().abandonSession()`.
 
-**53. Flex height chain:** Every ancestor must be a flex container for `flex-1` to work. Missing `flex` class collapses React Flow to 0 height.
+**85. Date range filter end dates must use end-of-day:** Set `toDate.setHours(23, 59, 59, 999)`. For string inputs append `T23:59:59.999Z`. See `SessionHistoryPage.tsx`.
 
-**54. React Flow CSS in Tailwind v4:** Import in `index.css`, not component JS. Override dark theme using `--xy-*` CSS custom properties.
+**86. Script Builder:** `/script-builder` — `ScriptBuilderSession` model, `script_builder_service.py`, endpoints at `/scripts/builder/`. FlowPilot handoff via `action_type: "open_script_builder"` + sessionStorage context.
 
-**55. App shell height chain:** Every wrapper between `.main-content` and canvas needs `flex` + `flex-1` + `min-h-0` or `h-full`.
+**87. FlowPilot must ask GUI vs script preference:** Ask BEFORE suggesting either approach. See `FLOWPILOT_SYSTEM_PROMPT` in `flowpilot_engine.py`.
 
-**56. Railway backend service name is `patherly`:** Production DB name is `railway`. Public Postgres proxy: `interchange.proxy.rlwy.net:45797`.
+**88. Charcoal palette:** Sidebar `#0e1016`, page `#16181f`, cards `#1e2028`, borders `#2a2e3a`. All via CSS variables in `index.css` `@theme`. Accent is electric blue (#60a5fa).
 
-**57. Node field priority:** `title` → `question` → `description` → `content` → `label`. See `copilot_service.py`.
+**92. `tsc -b` in Dockerfile enforces `noUnusedLocals`/`noUnusedParameters` as hard errors.** After refactors, trace every import and destructured prop. Check IDE yellow squiggles before pushing.
 
-**58. `scriptGeneratorStore.generate()` optional param:** Always wrap: `onClick={() => generate()}`, never `onClick={generate}`.
+**93. FlowPilot actions live in the page header, not a bottom bar:** Resolve/Escalate/Share Update in header. Desktop: inline + `⋯` overflow (Pause/Close). Mobile: single `⋯`. Bottom = message input only.
 
-**59. ConnectWise `clientId` is server-side config:** Set in `config.py` as `CW_CLIENT_ID`. Per-connection: `company_id`, `public_key`, `private_key`, `server_url`.
+**94. Frontend chat uses `unified_chat_service`, not `assistant_chat_service`:** `AssistantChatPage` → `/ai-sessions/{id}/chat` → `unified_chat_service.py`. Never wire chat into `assistant_chat.py`.
 
-**60. Dockerfile build args for Vite env vars:** Any new `VITE_*` or `VITE_PUBLIC_*` env var must be added as `ARG` + `ENV` in `frontend/Dockerfile` for Railway deploys. Railway env vars are runtime-only unless explicitly passed through as Docker build args. Without this, `import.meta.env.VITE_*` resolves to `undefined` in production builds.
+**95. Image upload → AI vision:** `uploadsApi.upload()` → `upload_ids` in message → backend fetches S3 → `storage_service.resize_image_for_vision()` (Pillow, 1568px, PNG→JPEG) → base64 → Claude multimodal. Max 3 images/message. Images NOT stored in history.
 
-**61. Procedural sessions auto-start on page load:** `ProceduralNavigationPage` calls `startSession()` immediately in `loadTree()` — there is no intake form screen or "Start" button. Variables are filled inline during execution. Troubleshooting flows DO have a start screen with ticket/client fields. Don't write tests or UI that assume a Start button on procedural flows.
+**96. `bg-accent` is electric blue — never use for code/kbd.** Use `bg-code` for code blocks, `bg-white/[0.12]` for inline code/badges, `bg-white/[0.08]` for kbd.
 
-**62. Playwright strict mode — scope selectors to avoid ambiguity:** Step titles appear in both the sidebar checklist and main content heading. Use `getByRole('heading', { name })` for the main content, or scope with `page.locator('.animate-scale-in')` for command palette items. `getByText()` frequently matches multiple elements due to the sidebar + main content layout.
+**97. Railway S3 provisioned:** Bucket `resolutionflow-uploads`. Variables: `STORAGE_ENDPOINT`, `STORAGE_ACCESS_KEY`, `STORAGE_SECRET_KEY`, `STORAGE_BUCKET_NAME`, `STORAGE_REGION`. boto3 in `storage_service.py`.
 
-**63. Node 20 required for frontend builds:** Vite 7+ requires Node 20.19+. The system Node may be v18; use nvm: `export NVM_DIR="$HOME/.nvm" && source "$NVM_DIR/nvm.sh" && nvm use 20`. For direct binary access without nvm sourcing: `PATH="$HOME/.nvm/versions/node/v20.19.0/bin:$PATH"`.
+**98. `lazyWithRetry` for lazy routes:** Use instead of `React.lazy` — auto-reloads on chunk failures with 10s sessionStorage debounce.
 
-**64. PostHog product analytics:** Initialized via `PostHogProvider` in `main.tsx` with explicit `posthog.init()` + `client` prop pattern. Event helpers in `lib/analytics.ts` — use `analytics.eventName(props)` to track. `identifyUser()` called in `authStore.fetchUser()`, `resetAnalytics()` on logout. Env vars: `VITE_PUBLIC_POSTHOG_KEY`, `VITE_PUBLIC_POSTHOG_HOST`. Autocapture enabled.
+**99. `text-secondary` renders invisible on dark backgrounds:** Maps to `--color-secondary` (dark surface). Use `text-muted-foreground` (`#848b9b`) for readable secondary text. Never use `text-muted` for body text.
 
-**65. Local Docker Compose uses `resolutionflow` database on port 5433:** Container name is `resolutionflow_postgres`, database is `resolutionflow` (not `patherly`), port mapped to `5433` (not `5432`). The `POSTGRES_PORT` env var controls this. Playwright config defaults must match: `postgresql+asyncpg://postgres:postgres@127.0.0.1:5433/resolutionflow`.
+**100. Hover pop-out card pattern:** `pointer-events-none` on scrim (`z-40`), `z-50` expanded card with own `onClick`, dismiss via `onMouseLeave`. Never put handlers on scrim.
 
-**66. Dev environment runs on Hostinger VPS (46.202.92.250), not localhost:** Code-server runs in Docker on a VPS (previously devserver01/192.168.0.9). Frontend/backend are accessed via `46.202.92.250`, not `localhost`. CORS must include the VPS IP in `CORS_ORIGINS` and `FRONTEND_URL`. Frontend `.env` must set `VITE_API_URL` to the VPS backend URL. See [DEV-ENV.md](DEV-ENV.md) for full setup, Docker config, networking, and known issues.
+**101. AI marker format compliance:** `[QUESTIONS]`, `[ACTIONS]`, `[FORK]` parsed by `unified_chat_service.py`. History stores `display_content` (stripped). Each user message gets `[SYSTEM: ...]` reminder appended in `_call_anthropic_cached()`.
 
-**67. Tree editor route is `/trees/new`:** NOT `/editor/new`. Check `router.tsx` line 156 for the canonical path. Use `getTreeEditorPath()` from `@/lib/routing` when navigating programmatically.
+**102. TaskLane activation must happen in ALL chat response paths:** Three paths in `AssistantChatPage.tsx` — `handleSend`, `sendPrefill`, `handleResumeNew`. All must check `response.actions`/`response.questions` and call `setShowTaskLane(true)`.
 
-**68. APScheduler jobs need `max_instances=1`:** Without it, overlapping scheduler runs can process the same records twice (TOCTOU race). Always set `max_instances=1` on interval jobs in `main.py`.
+**103. Docker not available in code-server:** Use VPS SSH: `docker exec resolutionflow_postgres psql -U postgres -d resolutionflow -t -c "SQL"`. Python also not available in container.
 
-**69. PostgreSQL `func.sum(case(...))` returns `Decimal` via asyncpg:** Cast to `int()` before storing in Pydantic `dict[str, Any]` fields, or JSON serialization may produce unexpected types.
+**104. `landing.css` uses `--lp-*` variables:** Never use `var(--color-*)` tokens in `landing.css`. Extend the `--lp-*` palette for new landing page colors.
 
-**70. Toast library uses `toast.warning()` not `toast.warn()`:** Import from `@/lib/toast`. Methods: `success`, `error`, `warning`, `info`. See `frontend/src/lib/toast.ts`.
+**105. `npm run build` fails with `EACCES` on `dist/` in code-server:** Use `npx tsc -b` to verify TypeScript without writing to `dist/`.
 
-**71. Enhancement/branch_addition proposals cannot be directly approved:** Backend returns 400 — they require `modified_flow_data` via "Edit & Publish" flow. Only `new_flow` proposals support direct approve.
+**106. Guard async "select item → load data → apply state" flows:** Use `currentSelectionRef = useRef(id)` — update on every switch, bail after each `await` if ref no longer matches. See `AssistantChatPage.tsx` `currentChatRef`.
 
-**72. `ai_sessions.status` column is `VARCHAR(30)`:** Must fit `requesting_escalation` (23 chars). If adding new status values, verify length. Migration `f0aad74ea51b` widened from 20→30.
+**107. Startup routines use `_admin_session_factory()`:** RLS is enabled; `get_db()` at startup has no `app.current_account_id`, so queries return 0 rows. Affects lifespan, `ensure_service_account`, seed scripts.
 
-**73. `get_db` rolls back on exception:** The dependency does `await session.rollback()` on error to prevent `InFailedSQLTransaction` cascade. Never remove this — without it, one failed request poisons subsequent requests on the same connection.
+**108. Tables with no `account_id` (never add to RLS migrations):** `script_categories`, `platform_steps`, `template_trees`, `plan_feature_defaults`, `accounts`. Scan at class level, not file level — one `.py` file can have multiple classes with different columns.
 
-**74. FlowPilot action bar height chain:** The action bar (Resolve/Escalate/Pause) requires every ancestor from `app-shell` grid down to have proper flex constraints. Key fix: `ViewTransitionOutlet` wrapper needs `flex flex-col`. If action bar disappears, check height chain with DevTools `getBoundingClientRect()` walk.
+**109. `tree_shares.account_id` must equal `tree.account_id`:** Use tree owner's tenant, not the actor's. Cross-tenant admin shares become invisible after RLS enforcement.
 
-**75. Dashboard prefill auto-submits:** `StartSessionInput` navigates to `/pilot` or `/assistant` with `{ state: { prefill } }`. `FlowPilotSessionPage` auto-submits via `useEffect` + `prefillHandledRef` guard — no double-enter. `AssistantChatPage` does the same pattern.
+**110. Backfill `account_id` migrations require service-code audit:** Grep all `ModelClass(` sites, verify `account_id=` is passed. SQLAlchemy accepts `None` silently; RLS WITH CHECK surfaces it at runtime as `InsufficientPrivilegeError`.
 
-**76. Active session navigation guard:** `FlowPilotSessionPage` uses `useBlocker` (same as `TreeEditorPage`) to intercept navigation during active sessions. "Pause & Leave" auto-pauses before proceeding.
-
-**77. Prefer manual Alembic migrations for targeted changes:** `alembic revision --autogenerate` picks up drift from all tables. For single-column fixes, use `alembic revision -m "desc"` and write `op.alter_column()` manually.
-
-**78. Landing page subtitle is "AI-Powered Troubleshooting for MSPs":** Not "Decision Tree Platform". This tagline appears on login, register, and the HTML `<title>`. The old "Decision Tree Platform" was internal jargon misaligned with user-facing branding.
-
-**79. Custom modals must be mobile-responsive:** Use `items-end sm:items-center` (bottom-sheet on mobile, centered on desktop) and `max-w-full sm:max-w-lg` (full-width on mobile). The shared `Modal.tsx` does this correctly — custom modal implementations must follow the same pattern. See `PrepareSessionModal.tsx` for the fix pattern.
-
-**80. TopBar search collapses to icon on mobile:** Full search bar (`hidden sm:block`) shows on desktop; magnifying glass icon button (`sm:hidden`) shows on mobile (<640px). Both open the same CommandPalette. Don't add `w-full` search bar without the mobile icon fallback.
-
-**81. Never use `transition: all` in landing.css:** Specify exact properties: `transition: background 0.3s, border-color 0.3s, box-shadow 0.3s, transform 0.3s, opacity 0.3s`. `transition: all` animates layout properties and causes jank.
-
-**82. `bun` requires PATH setup on devserver01:** `export BUN_INSTALL="$HOME/.bun" && export PATH="$BUN_INSTALL/bin:$PATH"`. The gstack browse binary and Playwright need this. Chromium system deps: `libatk1.0-0 libatk-bridge2.0-0 libcups2 libxkbcommon0 libatspi2.0-0 libxcomposite1 libxdamage1 libxfixes3 libxrandr2 libgbm1 libasound2`.
-
-**83. ~~FlowPilot ActionBar fixed bottom~~ (Superseded by Lesson 93):** Actions moved to the page header. `FlowPilotActionBar` component exists but is no longer used in the main session flow. The only fixed-bottom element is the message input.
-
-**84. AI session `abandoned` status is fully wired:** `POST /ai-sessions/{id}/abandon` sets status to `abandoned` with optional `reason` param. Frontend: `aiSessionsApi.abandonSession()`, `useFlowPilotSession().abandonSession()`, "Close" button in `FlowPilotActionBar`. Redirects to `/sessions` after closing.
-
-**85. Date range filter end dates must use end-of-day:** `toDate.toISOString()` sends midnight (start of day), excluding items created later that day. Always set `toDate.setHours(23, 59, 59, 999)` before sending. For string-based date inputs (AI sessions), append `T23:59:59.999Z`. See `SessionHistoryPage.tsx`.
-
-**86. Script Builder system:** AI-powered script generation at `/script-builder`. Chat-style interface generates PowerShell/Bash/Python scripts from natural language. Backend: `ScriptBuilderSession` model, `script_builder_service.py`, endpoints at `/scripts/builder/`. Frontend: `ScriptBuilderPage`, `ScriptCodeBlock`, `ScriptPreviewModal`, `SaveToLibraryDialog`. FlowPilot can hand off to Script Builder via `action_type: "open_script_builder"` with `sessionStorage` context passing.
-
-**87. FlowPilot must ask GUI vs script preference:** When a task can be done via GUI or script (e.g., creating AD users), FlowPilot must ask the engineer which approach they prefer BEFORE suggesting either. Never assume the user wants a script. See `FLOWPILOT_SYSTEM_PROMPT` rules in `flowpilot_engine.py`.
-
-**88. Charcoal palette — sidebar-darkest approach:** Sidebar `#0e1016`, page `#16181f`, cards `#1e2028`, borders `#2a2e3a`. This gives more contrast range than true-dark. All colors via CSS variables in `index.css` `@theme` block. Accent is electric blue (#60a5fa), not orange or cyan.
-
-*(Lessons 89–91 were retracted.)*
-
-**92. `tsc -b` in Dockerfile is stricter than `npx tsc --noEmit`:** The production build (`tsc -b && vite build`) enforces `noUnusedLocals` and `noUnusedParameters` as hard errors. After any refactor that moves logic between components or removes features, trace every import and destructured prop to remove orphans. IDE warnings (yellow squiggles) flag these — check them before pushing.
-
-**93. FlowPilot actions live in the page header, not a bottom bar:** `FlowPilotSessionPage` renders Resolve/Escalate/Share Update in the header bar. Desktop: inline buttons + `⋯` overflow (Pause/Close). Mobile: single `⋯` menu. The bottom only has the message input. `FlowPilotActionBar` component still exists but is no longer used in the main session flow.
-
-**94. Frontend chat uses unified_chat_service, not assistant_chat_service:** `AssistantChatPage` calls `/ai-sessions/{id}/chat` → `unified_chat_service.py`. The old `assistant_chat_service` endpoints were removed (only retention settings remain at `/assistant/retention`). When tracing chat features, start from `aiSessionsApi.sendChatMessage` → `ai_sessions.py` → `unified_chat_service.py`. Never wire chat features into `assistant_chat.py`.
-
-**95. Image upload → AI vision pipeline:** Paste/attach images → upload to Railway S3 bucket via `uploadsApi.upload()` → send `upload_ids` with chat message → backend fetches from S3 via `storage_service.download_file()` → resized via `storage_service.resize_image_for_vision()` (Pillow, 1568px max, PNG→JPEG) → base64-encoded → sent as Claude multimodal content blocks. Max 3 images/message. Images are NOT stored in conversation history (text-only). Vision helpers live in `storage_service.py`.
-
-**96. `bg-accent` is electric blue — never use for code/kbd elements:** In Tailwind v4, `bg-accent` maps to `--color-accent: #60a5fa` (dark) / `#2563eb` (light). Use `bg-code` for code blocks, `bg-white/[0.12] border border-white/[0.06]` for inline code/badges, `bg-white/[0.08]` for kbd shortcuts. Blue accent is reserved for interactive elements only (buttons, active nav, links). Ember orange (#f97316) is deprecated — do not use.
-
-**97. Railway Object Storage (S3 bucket) is provisioned:** Bucket `resolutionflow-uploads` on Railway canvas. Variables: `STORAGE_ENDPOINT`, `STORAGE_ACCESS_KEY`, `STORAGE_SECRET_KEY`, `STORAGE_BUCKET_NAME`, `STORAGE_REGION` — mapped via variable references on the `patherly` backend service. Accessed via boto3 in `storage_service.py`. Pillow (`Pillow>=10.0.0`) + `libjpeg-dev`/`zlib1g-dev` in Dockerfile for image resize.
-
-**98. `lazyWithRetry` for stale chunk errors:** All lazy-loaded routes use `lazyWithRetry` from `@/lib/lazyWithRetry.ts` instead of `React.lazy`. Auto-reloads the page on chunk load failures (stale deploys). Uses sessionStorage debounce (10s) to prevent loops. When adding new lazy routes, use `lazyWithRetry`, not `lazy`.
-
-**99. Tailwind v4 `text-secondary` renders invisible on dark backgrounds:** `text-secondary` maps to `--color-secondary: #2e3140` (a dark surface color), NOT `--color-text-secondary`. For readable secondary text, use `text-muted-foreground` (`#848b9b`). Also avoid `text-muted` (`#4f5666`) for body text — it's for labels only. This applies to ALL new components.
-
-**100. Hover pop-out card pattern:** For cards that expand on hover "in front of everything": use `pointer-events-none` on the scrim (`fixed inset-0 z-40 bg-black/30`), absolute-position the expanded card at `z-50` with its own `onClick` handler, and dismiss via `onMouseLeave` on the wrapper div. Never put interactive event handlers on the scrim — it blocks clicks on sibling elements.
-
-**101. AI marker format compliance:** The AI assistant uses `[QUESTIONS]`, `[ACTIONS]`, and `[FORK]` markers in responses. Parsed by `unified_chat_service.py` (`_parse_*_marker` functions), returned as structured data in the API response. System prompt in `assistant_chat_service.py` has a final reminder section, and each user message gets an invisible `[SYSTEM: ...]` reminder appended in `_call_anthropic_cached()`. If markers stop appearing: check conversation history stores `display_content` (stripped), verify system prompt final reminder exists, check user message reminder injection is active.
-
-**102. TaskLane activation must happen in ALL chat response paths:** `AssistantChatPage.tsx` has three code paths calling `sendChatMessage`: `handleSend` (regular messages), `sendPrefill` (dashboard handoff), `handleResumeNew` (resume from concluded session). ALL three must check `response.actions`/`response.questions` and call `setShowTaskLane(true)`. Missing this in any path causes TaskLane to not appear on first message.
-
-**103. Docker not available in code-server container:** The dev environment runs code-server inside Docker on the VPS. The `docker` CLI is not available inside the code-server container. To query the database, use the VPS SSH session: `docker exec resolutionflow_postgres psql -U postgres -d resolutionflow -t -c "SQL"`. Python is also not available in the container.
-
-**104. `landing.css` uses self-contained `--lp-*` color variables:** The landing page defines its own color palette at the top of `landing.css` (`--lp-bg`, `--lp-accent`, `--lp-text-*`, etc.). Never use `var(--color-*)` theme tokens in `landing.css` — they may resolve incorrectly outside the app shell context. Extend the `--lp-*` palette for any new landing page colors.
-
-**105. `npm run build` fails with `EACCES: permission denied` on `dist/` in code-server:** This is a filesystem permission issue in the Docker environment, not a TypeScript error — the TS compilation completes successfully. Use `npx tsc -b` to verify TypeScript cleanly without needing to write to `dist/`.
-
-**106. Guard async "select item → load data → apply state" flows with a ref:** When a component lets the user switch between items (chat sessions, flows, scripts) and loads data asynchronously on each switch, the load for item A can complete *after* the user has already switched to item B — overwriting B's state with A's stale data. Fix pattern: keep a `currentSelectionRef = useRef(initialId)` and update it synchronously whenever the selection changes (in every creation/switch path). After every `await`, bail out if `currentSelectionRef.current !== thisItemId`. See `AssistantChatPage.tsx` `selectChat` for the reference implementation (`currentChatRef`).
-
-**107. Startup routines must use `_admin_session_factory()` after Phase 4 RLS:** Any code that runs at startup (lifespan, `ensure_service_account`, seed scripts) and touches tenant-isolated tables (`users`, etc.) must use `_admin_session_factory()` — not `get_db()`. Phase 4 enabled RLS on `users`; a tenant-scoped session has no `app.current_account_id` set at startup, so all queries return 0 rows or fail. `get_service_account_id` in `deps.py` is safe — it reads from `app.state` cached at startup, never hits the DB per-request.
-
-**108. Tables with no `account_id` column (never add to RLS migrations):** `script_categories`, `platform_steps`, `template_trees`, `plan_feature_defaults`, `accounts` — global/platform tables documented with "No account_id. No RLS." in their model files. When writing RLS migrations, scan at the class level (check for `account_id: Mapped` within the class block), not the file level — multiple classes in one `.py` file can have different columns (e.g. `ScriptCategory` vs `ScriptTemplate` in `script_template.py`).
-
-**109. `tree_shares.account_id` must equal `tree.account_id`, not the actor's account:** When creating a `TreeShare`, always use `account_id=tree.account_id` (tree owner's tenant). A super admin in tenant A sharing tenant B's tree must produce a share row in tenant B's RLS context — using `current_user.account_id` instead makes the share invisible to the tree owner after RLS is enforced.
-
-**110. Backfill migrations for `account_id` require a service-code audit:** When a migration adds `account_id` to an existing model via backfill (nullable → backfill → NOT NULL), grep for ALL `ModelClass(` instantiation sites in service code and verify `account_id=` is passed. SQLAlchemy accepts `None` silently with no warning; Phase 4 RLS WITH CHECK only surfaces the problem at runtime as `InsufficientPrivilegeError: new row violates row-level security policy`. Fixed example: `AISessionStep` — all 5 creation sites in `flowpilot_engine.py` were missing `account_id` until April 2026.
-
-**111. Global Axios interceptor fires before component `.catch()` — fix optional-data endpoints at the source:** The global 5xx handler in `client.ts` fires for ALL non-401 5xx responses, even when a component does `.catch(() => {})`. If an endpoint returns optional UI data (e.g., board filters, PSA config), return `[]` / `{}` on provider failure rather than raising 502. Silencing the error in the component is not enough — the toast appears anyway. See `list_boards` in `integrations.py` for the fixed pattern.
+**111. Global Axios interceptor fires before component `.catch()`:** Fix optional-data endpoints at the source — return `[]`/`{}` on provider failure instead of raising 502. See `list_boards` in `integrations.py`.
 
 ## RBAC & Permissions
 
 - **Role hierarchy:** super_admin > team_admin > engineer > viewer
 - **Team Admin:** `role='engineer'` + `is_team_admin=True` + valid `team_id`
-- **Backend deps:** `get_current_active_user(user, db)` (any active + auto-downgrades expired trials), `require_engineer_or_admin` (blocks viewers), `require_admin` (super admin only)
+- **Backend deps:** `get_current_active_user`, `require_engineer_or_admin` (blocks viewers), `require_admin` (super admin only)
 - **Never use** `role == "admin"` — use `is_super_admin` instead
 - **Frontend:** `usePermissions()` hook for all permission checks
 - **Centralized:** `backend/app/core/permissions.py`, `frontend/src/hooks/usePermissions.ts`
@@ -397,18 +276,16 @@ cd backend && pip install httpx && python -m scripts.seed_trees
 
 ## Design System
 
-**Source of truth:** [DESIGN-SYSTEM.md](DESIGN-SYSTEM.md) — always read this before making visual or UI decisions.
+**Source of truth:** [DESIGN-SYSTEM.md](DESIGN-SYSTEM.md) — always read before visual/UI decisions.
 
-- **Theme:** Flat, high-contrast dark theme (Sentry/PostHog-inspired). No glass morphism, no backdrop blur, no ambient orbs, no gradient backgrounds on surfaces. Light mode fully specified (v6).
+- **Theme:** Flat, high-contrast dark (Sentry/PostHog-inspired). No glass morphism, no backdrop blur, no gradients on surfaces. Fonts: IBM Plex Sans (body), Bricolage Grotesque (headings), JetBrains Mono (code).
 - **Backgrounds:** `bg-page` (`#16181f`), `bg-sidebar` (`#0e1016`), `bg-card` (`#1e2028`), `bg-elevated` (`#2a2d38`)
-- **Cards:** `bg-card` with 1px `border-default` (`#2a2e3a`), 8px radius. No shadows, no blur, no gradients. Hover: `border-hover` (`#3d4252`)
-- **Buttons:** Primary: solid `accent` (#60a5fa dark / #2563eb light), white text, 5px radius. Ghost: transparent + 1px border, hover `bg-elevated`
-- **Inputs:** `bg-input` (`#252830`) with 1px `border-default`, 5px radius. Focus: `border-color: accent` + `box-shadow: 0 0 0 2px accent-dim`
-- **Text:** `text-heading` (`#f0f2f5`) → `text-primary` (`#e2e5eb`) → `text-muted-foreground` (`#848b9b`) → `text-muted` (`#4f5666`). NEVER use `text-secondary` — in Tailwind v4 it maps to a surface color, not a text color.
-- **Borders:** `border-default` (`#2a2e3a`), `border-hover` (`#3d4252`)
-- **Functional colors:** `#34d399` (success), `#fbbf24` (warning/amber), `#f87171` (danger), `#67e8f9` (info/cyan) — each with `-dim` variant at 10% opacity
-- **Accent:** Electric blue `#60a5fa` (dark) / `#2563eb` (light) — used sparingly (≤5% of UI). `accent-dim` = `rgba(96,165,250,0.10)`, `accent-text` = `#93c5fd`
-- **Deprecated:** Do NOT use `glass-card`, `glass-stat`, `bg-gradient-brand`, `text-gradient-brand`, `backdrop-filter: blur()`, ambient orbs, purple gradients, ember orange (`#f97316`), or cyan (`#22d3ee`) as accent — cyan is now the info color only
+- **Cards:** `bg-card` + 1px `border-default` (`#2a2e3a`), 8px radius. Hover: `border-hover` (`#3d4252`)
+- **Buttons:** Primary: solid `accent` (#60a5fa / #2563eb), white text, 5px radius. Ghost: transparent + 1px border.
+- **Inputs:** `bg-input` (`#252830`) + 1px `border-default`, 5px radius. Focus: `border-color: accent` + `box-shadow: 0 0 0 2px accent-dim`
+- **Text:** `text-heading` → `text-primary` → `text-muted-foreground` (`#848b9b`). **NEVER `text-secondary`** — maps to a dark surface color.
+- **Functional colors:** `#34d399` success, `#fbbf24` warning, `#f87171` danger, `#67e8f9` info — each has `-dim` at 10% opacity
+- **Deprecated:** No `glass-card`, `backdrop-filter: blur()`, ambient orbs, ember orange (`#f97316`), or cyan as accent
 
 ---
 
@@ -416,23 +293,21 @@ cd backend && pip install httpx && python -m scripts.seed_trees
 
 - **Component guidelines:** Use `cn()` from `@/lib/utils`, Lucide icons (wrap in `<span>` for title), modals with fixed header/footer
 - **Type organization:** Create in `types/`, export from `types/index.ts`, import with `import type { T } from '@/types'`
-- **Scratchpad overlay:** `position: fixed`, `onOpenChange` callback for parent padding adjustment, `right-2` positioning
-- **Custom step flow:** `CustomStepModal` → `PostStepActionModal` → `ContinuationModal` → custom step view. Key state: `pendingStep`, `pendingContinuationNodeId`, `customBranchMode`, `branchOriginNodeId`. Use `findCustomStep()` not `findNode()` for custom step UUIDs.
-- **Session sharing:** `ShareSessionModal` manages share links, `SharedSessionPage` renders public/account views. Helper utils in `lib/sessionShare.ts`. Share URLs use `/shared/sessions/:token`.
-- **Procedural navigation:** `ProceduralNavigationPage` handles intake forms, step-by-step execution, and resume via `location.state.sessionId`. Uses `StepChecklist`, `StepDetail`, `ProgressBar`, `CompletionSummary` components.
+- **Custom step flow:** `CustomStepModal` → `PostStepActionModal` → `ContinuationModal`. Use `findCustomStep()` not `findNode()` for custom step UUIDs.
+- **Session sharing:** `ShareSessionModal` + `SharedSessionPage`. Utils in `lib/sessionShare.ts`. Share URLs: `/shared/sessions/:token`.
 - **Routing helper:** Use `getTreeNavigatePath()` and `getTreeEditorPath()` from `@/lib/routing` for all tree/session navigation.
-- **Account section layout:** `AccountLayout` has NO sidebar nav. Account sub-pages (categories, target-lists) are reached via link cards on `AccountSettingsPage.tsx`. New account pages: add route in `router.tsx` under `account` children + add a link card in `AccountSettingsPage`.
-- **Dashboard cockpit:** `QuickStartPage` is the copilot-first launchpad. Greeting + "What are you troubleshooting?" + ChatGPT-style `StartSessionInput` (auto-growing textarea, paste images, drag-drop files, attach button, paste logs, suggestion chips). Below: `PendingEscalations`, `ActiveFlowPilotSessions`, `RecentFlowPilotSessions`. Collapsible "Dashboard" section for `PerformanceCards`, `KnowledgeBaseCards`, `TeamSummary`.
-- **Sidebar sections:** Amber "New Session" button → Home → RESOLVE (History) → KNOWLEDGE (Flows with Solutions Library sub-item, Scripts) → INSIGHTS (Data). Footer: Account, Pin/Unpin. No help/guides/feedback in sidebar — accessible via TopBar.
+- **Account section:** `AccountLayout` has NO sidebar nav. New account pages: route under `account` children in `router.tsx` + link card in `AccountSettingsPage`.
+- **Dashboard cockpit:** `QuickStartPage` — `StartSessionInput` + `PendingEscalations`, `ActiveFlowPilotSessions`, `RecentFlowPilotSessions`. Collapsible section for `PerformanceCards`, `KnowledgeBaseCards`, `TeamSummary`.
+- **Sidebar:** Amber "New Session" → Home → RESOLVE → KNOWLEDGE (Flows, Scripts) → INSIGHTS. Footer: Account, Pin/Unpin.
 
 ---
 
 ## Common Tasks
 
 - **New endpoint:** Create in `endpoints/` → add to `router.py` → schema in `schemas/` → tests → frontend API client
-- **New page:** Create in `pages/` → add route in `router.tsx` → nav link in `AppLayout.tsx`
-- **New public route (no auth):** Add at top level in `router.tsx` alongside `/login`, `/register` — NOT inside the `ProtectedRoute`/`AppLayout` children.
-- **Schema change:** Update model → `alembic revision --autogenerate -m "desc" --rev-id=NNN` (NNN = next sequential number, e.g., 068 → 069) → review → `alembic upgrade head`
+- **New page:** Create in `pages/` → route in `router.tsx` → nav link in `AppLayout.tsx`
+- **New public route:** Add at top level in `router.tsx` (alongside `/login`) — NOT inside `ProtectedRoute`/`AppLayout`
+- **Schema change:** Update model → `alembic revision -m "desc"` (no `--rev-id`) → review → `alembic upgrade head`
 - **New frontend API module:** Types in `types/` → export from `types/index.ts` → client in `api/` → export from `api/index.ts`
 
 ---
@@ -440,80 +315,41 @@ cd backend && pip install httpx && python -m scripts.seed_trees
 ## Coding Standards
 
 ### Python
-
-- Type hints everywhere, async/await for DB, Pydantic for validation, `DateTime(timezone=True)` always
+Type hints everywhere, async/await for DB, Pydantic validation, `DateTime(timezone=True)` always.
 
 ### TypeScript
-
-- Interfaces for all data, `const` over `let`, functional components + hooks, reusable logic in custom hooks
+Interfaces for all data, `const` over `let`, functional components + hooks.
 
 ### Git
-
 - Format: `type: description` (feat, fix, refactor, docs, test, chore)
 - Always include `Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>`
-- Always create feature branch BEFORE committing: `git checkout -b feat/feature-name`
-- Large features: commit per phase with `npm run build` validation
-- **Remote is Gitea, not GitHub directly:** Push to `gitea.resolutionflow.com/chihlasm/resolutionflow`. Gitea auto-mirrors to GitHub via `.gitea/workflows/mirror-to-github.yml` — never push directly to GitHub.
+- Create feature branch BEFORE committing: `git checkout -b feat/feature-name`
+- **Remote is Gitea:** Push to `gitea.resolutionflow.com/chihlasm/resolutionflow`. Mirrors to GitHub via `.gitea/workflows/mirror-to-github.yml` — never push directly to GitHub.
 
 ### After Completing Work
-
-When a feature, fix, or significant piece of work is finished and merged/committed:
-
-1. **Update `CURRENT-STATE.md`** — move completed items, update "In Progress" and "What's Next" sections
-2. **Update `03-DEVELOPMENT-ROADMAP.md`** — check off completed work, update phase status
-3. **Close related GitHub Issues** — use `gh issue close #N` for any issues resolved by the work
-4. **Update `CLAUDE.md`** if the work introduced new patterns, lessons learned, or changed project structure
+1. Update `CURRENT-STATE.md`
+2. Update `03-DEVELOPMENT-ROADMAP.md`
+3. Close related GitHub Issues: `gh issue close #N`
+4. Update `CLAUDE.md` if new patterns or lessons emerged
 
 ---
 
 ## gstack (Browser & Workflow Skills)
 
-**Web browsing:** Always use the `/browse` skill from gstack for all web browsing needs. Never use `mcp__claude-in-chrome__*` tools.
+**Web browsing:** Always use `/browse`. Never use `mcp__claude-in-chrome__*` tools.
 
-**Available skills:**
-
-| Skill | Purpose |
-|-------|---------|
-| `/office-hours` | Brainstorm new ideas (YC-style office hours) |
-| `/plan-ceo-review` | CEO/founder-mode plan review (scope, ambition) |
-| `/plan-eng-review` | Engineering plan review (architecture, edge cases) |
-| `/plan-design-review` | Design plan review (UI/UX critique) |
-| `/design-consultation` | Create a design system / DESIGN.md |
-| `/review` | Pre-landing PR code review |
-| `/ship` | Ship workflow (tests, review, PR creation) |
-| `/browse` | Headless browser for QA testing and site dogfooding |
-| `/qa` | Systematic QA testing + auto-fix bugs found |
-| `/qa-only` | QA report only (no fixes) |
-| `/design-review` | Visual QA — find and fix design inconsistencies |
-| `/setup-browser-cookies` | Import cookies from real browser for authenticated testing |
-| `/retro` | Weekly engineering retrospective |
-| `/investigate` | Systematic debugging with root cause analysis |
-| `/document-release` | Post-ship documentation updates |
-| `/codex` | Second opinion via OpenAI Codex CLI |
-| `/careful` | Safety guardrails for destructive commands |
-| `/freeze` | Restrict edits to a specific directory |
-| `/guard` | Full safety mode (careful + freeze) |
-| `/unfreeze` | Remove edit restrictions |
-| `/gstack-upgrade` | Upgrade gstack to latest version |
+**Skills:** `/office-hours` · `/plan-ceo-review` · `/plan-eng-review` · `/plan-design-review` · `/design-consultation` · `/review` (PR review) · `/ship` · `/browse` (headless QA) · `/qa` (QA + fix) · `/qa-only` · `/design-review` (visual QA) · `/setup-browser-cookies` · `/retro` · `/investigate` · `/document-release` · `/codex` · `/careful` · `/freeze` · `/unfreeze` · `/guard` · `/gstack-upgrade`
 
 ---
 
 ## Deployment (Railway)
 
 - **Production:** `resolutionflow.com` (frontend), `api.resolutionflow.com` (backend)
-- Auto-deploys via: push to Gitea → Gitea mirrors to GitHub → Railway watches GitHub `main` and deploys
-- PR environments auto-created (need manual domain generation in Railway dashboard)
-- PR envs need `VITE_API_URL` set with `https://` prefix on frontend service
+- Deploy pipeline: push to Gitea → mirrors to GitHub → Railway watches `main`
+- PR envs: need manual domain generation + `VITE_API_URL` with `https://` prefix
 - `ALLOW_RAILWAY_ORIGINS=true` enables CORS for `*.up.railway.app`
-- Shared Variables (project-level in Railway dashboard) auto-propagate to all environments including PR envs — use for secrets like `ANTHROPIC_API_KEY`
-- Super admin utility: `backend/make_superadmin_simple.py list|<email>`
-
----
-
-## Future Roadmap
-
-- **Phase 3:** PSA integrations (ConnectWise in progress), file attachments, client context, analytics
-- **Phase 4:** Additional PSA integrations (Autotask/Kaseya), PowerShell automation, enterprise SSO
+- Shared Variables auto-propagate to all PR envs — use for `ANTHROPIC_API_KEY` etc.
+- Super admin: `backend/make_superadmin_simple.py list|<email>`
 
 ---
 
@@ -521,13 +357,12 @@ When a feature, fix, or significant piece of work is finished and merged/committ
 
 | What | Where |
 |------|-------|
-| API Docs | <http://localhost:8000/api/docs> |
+| API Docs | http://localhost:8000/api/docs |
 | Detailed Status | [CURRENT-STATE.md](CURRENT-STATE.md) |
 | Development Roadmap | [03-DEVELOPMENT-ROADMAP.md](03-DEVELOPMENT-ROADMAP.md) |
 | GitHub Issues | `gh issue list --state open` |
-| Bugs & Fixes | CLAUDE.md → Critical Lessons Learned section |
 | Design System | [DESIGN-SYSTEM.md](DESIGN-SYSTEM.md) |
-| Dev Environment | [DEV-ENV.md](DEV-ENV.md) — 46.202.92.250 setup, Docker, CORS, networking |
+| Dev Environment | [DEV-ENV.md](DEV-ENV.md) — VPS setup, Docker, CORS, networking |
 
 
 <!-- gitnexus:start -->
diff --git a/VERSION b/VERSION
new file mode 100644
index 00000000..482e997a
--- /dev/null
+++ b/VERSION
@@ -0,0 +1 @@
+0.1.0.0
diff --git a/docs/LESSONS-ARCHIVE.md b/docs/LESSONS-ARCHIVE.md
index d5c04d06..94995335 100644
--- a/docs/LESSONS-ARCHIVE.md
+++ b/docs/LESSONS-ARCHIVE.md
@@ -1,4 +1,4 @@
-# Lessons Archive (1-40)
+# Lessons Archive (1-70)
 
 > These lessons were originally in CLAUDE.md. They've been archived because the fixes are now baked into the codebase. Consult this file if you encounter a regression in any of these areas.
 
@@ -81,3 +81,67 @@
 **39. Platform settings for feature toggles:** Use `SettingsManager.get("key", db, default=True)`.
 
 **40. Survey public routes:** Add at top level in `router.tsx` alongside `/login`.
+
+---
+
+## Archived Lessons (41-70)
+
+**41. Assistant chat uses local React state, not Zustand:** `AssistantChatPage.tsx` uses `useState` for `chats`, `messages`, `input`, `loading`. No store.
+
+**42. Public pages use raw `fetch()`, not `apiClient`:** Survey, shared sessions, and no-auth pages use `fetch()` with full URL. `apiClient` requires auth tokens.
+
+**43. Adding new email types:** Add static async method to `EmailService` in `core/email.py`. Fire-and-forget from endpoints (log errors, don't fail).
+
+**44. AI Chat Builder is flow-type-aware:** `ai_chat_service.py` dispatches by `flow_type`. Troubleshooting: `[TREE_UPDATE]` markers. Procedural: `[STEPS_UPDATE]` markers. Both support `[METADATA]`.
+
+**45. Intake form field schema:** Uses `variable_name` and `field_type` (NOT `name` and `type`).
+
+**46. `CreateFlowDropdown` uses `AIPromptDialog`:** Opens prompt modal, starts AI session, generates flow, navigates to editor with `{ state: { aiPanelOpen: true, sessionId } }`.
+
+**47. Editor-Embedded Flow Assist:** `EditorAIPanel` (320px side panel) + `useEditorAI` hook. Ghost nodes use `_suggestion: true` flag. Delta responses use `[DELTA]...[/DELTA]` markers.
+
+**48. Tree orphan validation uses dynamic root ID:** Orphan check compares against `state.treeStructure?.id` (NOT hardcoded `'root'`).
+
+**49. Full-stack features — verify both ends:** schema → endpoint → API client → hook → store → UI.
+
+**50. Anthropic SDK retry:** Set `max_retries=1` to fail fast. Default `max_retries=2` can take 3× timeout.
+
+**51. AI model tier routing:** Use `settings.get_model_for_action(action_type)`. Model IDs: alias form (`claude-sonnet-4-6`).
+
+**52. Mobile scroll-to-top:** Use `ref.current.scrollIntoView()`, not `window.scrollTo()`. Trigger via `useEffect`.
+
+**53. Flex height chain:** Every ancestor must be a flex container for `flex-1` to work. Missing `flex` class collapses React Flow to 0 height.
+
+**54. React Flow CSS in Tailwind v4:** Import in `index.css`, not component JS. Override dark theme using `--xy-*` CSS custom properties.
+
+**55. App shell height chain:** Every wrapper between `.main-content` and canvas needs `flex` + `flex-1` + `min-h-0` or `h-full`.
+
+**56. Railway backend service name is `patherly`:** Production DB name is `railway`. Public Postgres proxy: `interchange.proxy.rlwy.net:45797`.
+
+**57. Node field priority:** `title` → `question` → `description` → `content` → `label`. See `copilot_service.py`.
+
+**58. `scriptGeneratorStore.generate()` optional param:** Always wrap: `onClick={() => generate()}`, never `onClick={generate}`.
+
+**59. ConnectWise `clientId` is server-side config:** Set in `config.py` as `CW_CLIENT_ID`. Per-connection: `company_id`, `public_key`, `private_key`, `server_url`.
+
+**60. Dockerfile build args for Vite env vars:** Any new `VITE_*` var must be added as `ARG` + `ENV` in `frontend/Dockerfile`. Railway env vars are runtime-only without this; `import.meta.env.VITE_*` resolves to `undefined` in production builds.
+
+**61. Procedural sessions auto-start on page load:** `ProceduralNavigationPage` calls `startSession()` immediately in `loadTree()` — no intake form screen or "Start" button. Variables filled inline. Troubleshooting flows DO have a start screen.
+
+**62. Playwright strict mode — scope selectors:** Step titles appear in both sidebar and main heading. Use `getByRole('heading', { name })` for main content.
+
+**63. Node 20 required for frontend builds:** `export NVM_DIR="$HOME/.nvm" && source "$NVM_DIR/nvm.sh" && nvm use 20`. Or: `PATH="$HOME/.nvm/versions/node/v20.19.0/bin:$PATH"`.
+
+**64. PostHog product analytics:** `PostHogProvider` in `main.tsx`. Event helpers in `lib/analytics.ts`. `identifyUser()` in `authStore.fetchUser()`, `resetAnalytics()` on logout. Env vars: `VITE_PUBLIC_POSTHOG_KEY`, `VITE_PUBLIC_POSTHOG_HOST`.
+
+**65. Local Docker Compose uses `resolutionflow` database on port 5433:** Container `resolutionflow_postgres`, DB `resolutionflow` (not `patherly`), port `5433`. Playwright config defaults must match.
+
+**66. Dev environment runs on Hostinger VPS (46.202.92.250):** CORS must include VPS IP in `CORS_ORIGINS` and `FRONTEND_URL`. See DEV-ENV.md.
+
+**67. Tree editor route is `/trees/new`:** NOT `/editor/new`. Use `getTreeEditorPath()` from `@/lib/routing`.
+
+**68. APScheduler jobs need `max_instances=1`:** Without it, overlapping runs can process the same records twice (TOCTOU race).
+
+**69. PostgreSQL `func.sum(case(...))` returns `Decimal` via asyncpg:** Cast to `int()` before storing in Pydantic `dict[str, Any]` fields.
+
+**70. Toast library uses `toast.warning()` not `toast.warn()`:** Import from `@/lib/toast`. Methods: `success`, `error`, `warning`, `info`.
diff --git a/docs/connectwise/CW_Security_Roles/README.md b/docs/connectwise/CW_Security_Roles/README.md
new file mode 100644
index 00000000..28c12dff
--- /dev/null
+++ b/docs/connectwise/CW_Security_Roles/README.md
@@ -0,0 +1,63 @@
+# ConnectWise integration docs
+
+Reference material for ResolutionFlow's ConnectWise Manage integration.
+This folder pairs a **human-editable source** (the XLSX) with two
+**generated artifacts** (YAML + Markdown). Code reads the YAML; humans
+read the Markdown; edits happen in the XLSX.
+
+## Files
+
+| File | Role | Edit? |
+|------|------|-------|
+| `api-member-security-roles.md` | Human-readable reference — browse on GitHub, link in PRs, onboard new contributors. | Generated — do not edit |
+| `api-member-security-roles.yaml` | Machine-readable source of truth — imported by integration code, queried by Claude Code when writing permission checks. | Generated — do not edit |
+| `source/Security_Roles_Matrix_11132017.xlsx` | Canonical source. The matrix as published by ConnectWise (with any corrections we've applied). | Yes — this is the editing surface |
+| `source/generate_role_docs.py` | Regenerates the YAML and Markdown from the XLSX. Deterministic. | Only if the matrix schema itself changes |
+| `source/requirements.txt` | Python deps for the generator (`openpyxl`, `PyYAML`). | Only when bumping deps |
+
+## Regeneration workflow
+
+After editing the XLSX:
+
+```bash
+cd docs/integrations/connectwise/source
+pip install -r requirements.txt
+python generate_role_docs.py \
+    --source Security_Roles_Matrix_11132017.xlsx \
+    --out-yaml ../api-member-security-roles.yaml \
+    --out-md   ../api-member-security-roles.md
+```
+
+Commit all three files together (XLSX, YAML, MD). The diff on the YAML
+is what reviewers should scrutinize — it is the source of truth for code.
+
+## Querying the YAML from integration code
+
+The YAML groups permissions by module and action. Example — checking
+what `Inquire: ALL` means for Service Desk → Service Tickets:
+
+```python
+import yaml
+from pathlib import Path
+
+doc = yaml.safe_load(
+    Path("docs/integrations/connectwise/api-member-security-roles.yaml").read_text()
+)
+levels = doc["modules"]["Service Desk"]["actions"]["Service Tickets"]["inquire"]["levels"]
+print(levels["ALL"])
+```
+
+This is the pattern `ConnectWiseAuthManager` and the proxy authorization
+layer should use when the required permission level for a given API
+endpoint needs to be documented or validated against an assigned role.
+
+## Conventions
+
+- **Levels are ordered most-to-least privileged:** `ALL`, `MY`, `MINE`, `NONE`.
+- **Verbs are always in this order:** `add`, `edit`, `delete`, `inquire`.
+- **`Not applicable` notes** in a verb's cell mean the meaningful level
+  is documented under another verb (almost always `inquire`) — the
+  generator preserves these as `note:` fields rather than inventing
+  placeholder levels.
+- **The XLSX is the single source of input.** Never hand-edit the YAML
+  or Markdown; your changes will be overwritten on the next regeneration.
diff --git a/docs/connectwise/CW_Security_Roles/Security_Roles_Matrix_11132017.xlsx b/docs/connectwise/CW_Security_Roles/Security_Roles_Matrix_11132017.xlsx
new file mode 100644
index 0000000000000000000000000000000000000000..d7f4adf3641f8c7b57f48a26ba3bfd4149096a01
GIT binary patch
literal 100948
zcmeFY^LKAglQtaNwr$%!vF#JvIkBCb@FXX;?c@{Nwr$(VlkYt<?>z6C`#+dx|ImB&
z+O@h@Ro7M3-TNv<8Bj1ZAP68RARr)Opyw|~s3>3{plWa+AXFeI5FJr_I~P+s7Xwuf
z2UBM~hF`WeM0sE!R5?H(-}3+O`Cn{-ili~SUM3{*r$4WV@y+PWE=p?X0pf&XP0A;b
ze}75AMc8_TE^WEnSf~*bh}8VpU3Q+ztmXgMDYLBu2V<MW$V+h-hiGzHT`oh~%5R>`
zAC5~}D09Sssf9r6>$#BgYk2g>meipWliSZO=&uV^H@f80%t~#Urr9+rDbP5ORU^7;
z+kn*KkufY4RT71JWn@yi3$0s1|Jvlj#-*)0ngE2;1mAWt7m{$$V5(mU@z}92lUry^
z>LgFjKq}%`16if7L-zGwgNtQg!L+7e=k(m=tW`MumL06&Ah_as01f7H<|^-VR57^d
zPvuZ|KFy6RLEP*yWHZU8nQpUc)pc4JE`+VGb*_KsdRn(CDm$!XdE{ImeQ&@r^?azZ
zAv;V7R(K{7NG6)QbAtVG2!>?20i@q{{^K64RUP;q^CqCW%5J;s5t@*v#I%8^nJ{I^
zht?%}toe(TD|X!wB*WliYYi`-H!FlFE}-kJ{VMJYxs_M1eFJGN8=@nOUZoBH{oDP%
zzCeK#|9=>6RAVB&|NbKT4N=%{3>!F^+Bh>Z{L}tF?EWtX?Ej^DMS`3{9}`^YmDGFK
z@YBLZ9FmBPyRcLnv8u2Ck9EYxn0zwajV?+&BvqUsP)WZI-}lkA4ZfJuVdBSKwu&ee
zG+xps_sY<eS4US!8VaXm3CD_^eq^_WhlR&fNofx%w~knv@|KcZnUO70iMboGTBIok
z4IF6HLcCB6{?q{NK{>5W<L4^i1re2t%Fvo-&YaW4sdT@k<f0RJ!EkQb^VwANVP|9W
zl`8LH8{&r-95odSZp#|uEGHfk4+9gM?mMycF4PZidijiDWfC@&XO=0+A@ZCDKkWv#
zo3TufeopAV^5N@|z$n6!&F^&fKS2^8kd$)wZ4tmXNN|9lfPdLA{s&In?VYTR?d`4q
zNp=5)8Q|}H_dUx0?x#XoPNts;sRQ;ijLALS4IO#Kg^}c3?F<oWq=9;kf|%9!ehZfd
zpr^Sg!w700>TxwO<o3jlunUU%&_i1ii2~+{YIDU4Za;B10SaY&QArRe366?#etK4Z
z0gI64jM^%YFie+)#&!5iMUEYoUqm8y-#Q!0W;My=%3|d_jX(PBGh+?={;$C*=aqpC
z&CNt<)Mf`?t)gp>5ZQqqgfn;8&_DR#J%DD8=ZR^bd&D21Zrk6@<UA&=d-7l54)Drl
z2+G*`y+d7y!iFUY{iqY15Assm)UI}1MBYZJyVh>$#_q4o_D6;mw!T;Tf4Yn|cR>Q*
zx4R^P0RbU?OMJV`|LrUls&cWb-}ccs^{ep?^QH^f2sdf;Ru#9R?f2Dd!7?Yp_?@{b
z53KfamC04uMw3#xD#Q1acZ&6j-^<&pg6sui5T=p^=Rs6j$WaffaqM`nFKm;Ye34m=
zsTAGh9xQqD@M<dtarK;2`wAL_Dt%_Ql?NVVOs3@T#TgD-l}%&m-@f^C5FK2@5PD!;
z@*pm_FyVpVJbV$W&A{AdogSki50wBX{BYnAykvVBr8QRVfh`aX=6d^6f+e*WBwXSU
zUJpfSnk)u4Y22px<ws`e$zd#gA&o#>+lR#mWSZm1_G3<%AgWXC$srx$ozncw8o+07
z*(2JI2$RJL*qxl=V<;6L|C9(~@}g48n79_47>S!Wh!=b6WC+xXH+deWNbbK@2XRFP
zU|+Q41YX)!X#N%3)}(Mbm-MVJSY6S@Ha}Cw{}eE@<UgHw>a(rO)cdOTrjKVXW~Z`3
z88Iu`K%Qx|*U8L$25JrJuz--|(AGtLk&zNMSNWhg)G&@WQgaKysvV0;+#qD=4?qfj
z(7|Y!vB^)jB)K>f3ZF}dNsH}J-G_DcK1vL+zDp%x{;~{qs>~nezaGq48<v)-=}&a(
zFJIjJEl$folL-Sio)^w{j~&Z8k`mewwDq_D$G&^_j87c{;a)gQc(iXU#Lfm)JNA9=
zi`p!%?pA-tS&!O!I)d2^ANGX#-H+S7uUDLyxUB5ZrqKlKCqt~Qy`Z|li(svLk0qqV
z2$alngh{^x!G9Z@FbSgPW=Md5lrVvT(Eh{GoGpx;Oiff=oGk6ko&O0<=XyH!>%+Ca
zh;d)j(_<?@k&V!S+lIAgLdlt8T*(JNE#2cKtwIy9oQI)D;`xr2va8D&$<midxJQ3+
z3KJ~ixVgHzy1Q<iy>)r7^q*3X-%`o>a=rAG+bgL4t(bL9;(K?v-McXG``V(UVGK0E
z@3%zxbf`nTOYCa@ys+<_x)U+7N%(TO)kIsnnw-2{_}Kz|t8v01dp+ipW*Z3dHBK;j
zYl{JK_Rb6!CFlJ(WZ(61w?Yw~fZ8bS{^O=^B>U@r2(?ir&+noa_9I2m=PfL8Y3pd_
z>?&#rGrMZiE|6<{;iW7*D~|-`?rJJ>X)Al?>NWlD>8eZR$T36UsO%S<ngiy5Qmuw~
zS+A>V3DIx0XYx^4I$3apXwTn~LsUD&F9M9c6Xjc<ho^)cIkRLCx@q}fDtr(j09fIC
z$TSwkH6q%)1qK9`MrclVqetmXO1J(^Zx~gT_li6(*HU#NCFCkK)r?a?Fb@KLvS*nr
zI}xO8fg-}W@%K)pOVm&362F$u>r37TYPvcLwFVVqJan*oy)Z{jf1D`AWstX3DeG(f
zj25kDw2&!S<RzdtPsAFn?&T=iryY!^om>3_BjKl`eNcv3=&j9ipODNFT-`1vVBT(O
zd1Y}-?r{gX1(hU8cgN?^E+otoGh8w+S8xIK;2&`nB0ZTiDfs8H{{ESbx4EBVd?3L|
zKX?F>Jy9zcR8md^^-zJIY8N^cK;mCElexKI>UV||PcwZCurPcl3GTD_C8y8akj_Ap
z(R19WqF><*VHS5b6Jly`4vP_)5jJ<rFw|c0>JTMc<;_Z+F+m-#P{K#t6N@o>@5J=;
zFK)P!<^F#g0MMeYsqfa9rn#Pk0wIn;_Vqc>cci~M29x)D)Ld6}g_B5c<PEkvBB3Ws
z0m}#C03}znFLz9lf`0x!C^%RqTRb6z;CYPw)Batbyy$4H-|{ypYabk7qXTy3cF=ww
z@2Uj&wA1*&oth?`or>6X9~iUNW2~uYaf!t@#01<?psvDy`@D*b7q)p|iI#c^it;Fd
z*kgxe#cM*^q6@dx;=mAdJ=3e)(wUGm2Ms&at$F237#4?E!YqzMteRuy4B<m(iXtDQ
z{QFw8pr0R^M}I&po-#7a4rj!LMNDy*A)zXtbny83(~Y};EY+jXd=z(%z8jz;@2PgY
zf&39fyi;-Q*eKEhmdkRvS9xHT`NH0P%%;&q>OQF}wm>givv}YRHZ@E}5Oh^|#^8Z3
z39fs;oWJrC?CeVNv8o4`-Jk|N6Mq~v_wD+<Va3WIyFtIz<S?9m&;{0&v*GmK)VJwi
z)>8ATlPqF$UMtWZHlU_w7f$$AbMGvLr{5iTQX7F{yFhM)^i{l+A8eW(+bumA^f(Mn
zL<wsLo3C$vDYDH9M+nQ<cjOhO6Ygh@sXr`x{rOv{8tny(N1i3favipATl9cz$MqB)
z8=`$*Jhdyj=dA8HP$J{>MMm2MrIljA$^Ni<U_I+c%?G(R%*jYR)w|iFEMoA5Pa(e1
zYk(tT9-up$aMnhF2Zo>Dt(!vcYWVrita@?BrzUEL%!>jRQP-<gy4fU0sp6|&QKFZ<
zA%1~oTnm__`Vaek+;8K{!k`$VXE6N%71!pV07*n$aOf8ZbsLn(PsGtR21-#BqrwZZ
zXVN6%ENq3M!TxRT{X$$B1d*jv6VZkn&J(i~{t&Mb3Red%(2|rP>O}$2d{-+E0k!K>
z8dgslOkFc4>SCK#az;^bvpmRjJ%*(BH7Fy^E9SVobm!42uyba2%bQ`&d@Dw5FByFl
z%&&&^&>jgr$AX}w^6O~@>hUdl+)+WCwj>q00+9K3Yzi6WFg;DZ0?%6VSK}!o%+_-o
zC(AMJ48%5B11~K%PWyVp2Q6<}%Q%3TSQ0CmHCO!tHUw!X-v<VP3GwDdI$PNL0DbJ9
zFvdcQZJ2&C_tTtwzZAD;>Yf{NF?av_Y*#Jj`DP?UJuDflpTbW3cOv#ph<r|OhP;Fa
zzIIFvr;sFC^x^8*iK8$sIK0PBI?#cX>)iNU-!ta4<h3G2r?#AmojHwn<-)J~!9)6T
zR?(>y7cDxI!c&v*83DBv=ZhelWPYLIM$J!x;6E?&TTZ+mn>H&vNzbQKri<zmv1P(E
zKK(&_%8*o2lE3nnH5aoWYifyNZpyFNkG#0rZ-swc@`F7=LL#m8c=T_N`gUAxYOMoK
zGBN^N*W_Y&L`u!C30~K~00RDG)Wtzrv*5hcv)M6Kuy<>6kzDs{IAOiuV85DT<-9GE
z;#`7J&sJy_F_pN7nN`usi3GaLA)^L7@qowlXO3aQt63tQ=Fju5n^EMS39)m-6y!fh
z7yT;40VugDsZu)GZ?h6bK_MyVBNVHFvLaD~VcCPq62$r*9~neLCQ{LVYXw@9YT3}?
zhyDV&8PUi~ilN+^{2HBA%|Q6>PHGxFRT`|msOsMtu)Yz<f&2YL`f6S^#gjSya!KVQ
z{tRySI6Cv|jirbgW2>MOc2cD+sco;p?KV-0W`E}>`0Jxlxh~RSk2j9pJI5mRro6z`
zAb44ao@9<<gS3-fs31&-JnU}bD2!p0=3vtC2y*nEbSgP7w%;rlB((sPm|jrRBd6^^
z^RlVtLqSGK*U^GeJey>Rlaaf=(L9VJkF%?%AaVufN$4$lhKgs0YYK~Or~gGFpqHs4
z#ED(wK&_+s;klG>Y;=i9rdle!QLU<$l^g^f>VLL;bQb=H7MT29E}z~f1x>5(uU?(a
z->JlReG53@S^r7s>h=kY>Fd6AUeEZYiCq%UsJ84zb%#t5tFeh(GU#*+V$GcR0NLb_
zvGVD%W7`gxz!wb3G)hrNkkK9@okyINw-t&!X;61SO~4N{;qxSfhPogYr`g0Nt<$Up
z7%&PFuC37WV*zbyR+|d4L&l$V@9dETHXwJMd@xq?w$83_)<<ep@w`tvR4^|XfS+W^
zew2_7cE?+8a`<jmkFP6qMbwxLJI}1BBxOi5UK6%hQZFe1XU1$C7K#r3RIgK^66)mg
zi6V!+NOA?gc`ZW0_XlH+Z^)okQF!PZ@>`1Qe~=v5kIiLk$>D1DjaaXFy5LSnd>o5X
zALWc)1?*_r`d_i`r#nm4j<lO7EYDnsPQf75qJ|zYcA@h7uU&$g<mc~7%1jrY4LtKY
zjhN5?8OZarArj-E3Rl2n>hRr~V)4I+WC#9!&bTQ@ufbz@XG_q(*dl;*<XN0?T_i$_
zCl;p4*ru7KIwP7(y?{_<NRb}&=jE|9!GSL@9u7=8v{nf-=c;UWmJ~n5sF>j8{I$6c
zG88z^api)am&p7(b+_^_q5t6_v|ild_**9cRUisM&-<fKSlP<aW+ZE&(g5Lz4d>8_
zP5OXo&}~L}k)Ob+9J-eFE84wD7M6>`^S77>h;W<pG@sLb*7S_x?}(D!LfA>msG-qt
zFqAr$wGV(@=dYd2Th@%j80CUPq&$}Ex{(!(%W7^OGctI<;~4}u(6E8MW9ef{cUxU8
zJ6+Q9>?+6XytQd6d>Q}Ya#MyjVM(JG-d&VsiMDbt&f0+5&~Ug?AxxQ&nZqCKs`<Z?
zVmFh~m-!T}^=?qZEFtfQncVvjE`p{Lpf14*HF0bz96jwaVe7$FORrGPhB)jzCwAEg
zddSGSyqHHP7;K@^+>1sJHP2PZTVzy4)&}8Q`0&nGx;d(EGydJpl1kF7+!S`s!^jC`
zm<A*H=B;)^vuo@Zt3*xI9%2F_k?{1YRgJ^)e-FqFrm%6lTUY^squAlRO~+WI{X{1j
zitbrd&`aoGCu&tM(!UH(AH?XUe})HI^)>m;I9cC%r>(AI>Ya#l-`(8IF7*AHcRZb4
zuoDI2AUW_7F|%m>0};$cH#teaXt=L(r)7hXNXYdvZ`NieXZM`seLER|583-wud%cG
z^#Z~VGKtKe`Q*ttw(ElTwli2F)6bV9gTZ%$hi**ig?pI2@Ml8go@DqC$U0|g#~jr9
zoLQT#TywvOq$NTkQyHoca;A|y)1yEw_-x(@tckkhE}RjZvc;C7Wr?vyfP}J<+eCFK
z7rSu%14#~g){KsF05A-N=zrO-^k_`G_h%+h?j(_8-fu#jJ>MBmm3GcQMyFbjW|*+I
z(^^y}Std;{>WY5JxMgigf?sgZ{rKDm<_>K|{J4T;p)L&@iq89WC<?@VOdxmzteA^m
z10&QEgd`Zl+%Yli1~rW_hfdbN040b9%WL~VGDn)#EbAkuLa5tRbBPB*Y=maBvXmT5
z?S7LqmjYqt78$nNxD;AJkqG~i^b|mnAk!?J*lf=QrB+FQ%Vc7DEGeter->l4GW+U@
zwJP8HA+Atq#0Qyc_Xl%tR$OZYw$4GkvP$YEa{!ehw~H^}>>X9EW1l?$uui5QKvYV{
zifprGt%pfe_#7cI783d!WR0DFSMj$l?+Efz2{QnyTm{tR+R`3}$d$5eOTyxAEzNSI
zYZ=VFb=UyO5KVcwBo{RbkIKSsoUd9n7Q|3Bbnw@b-O&E?z)2sdE4e(>D%C~~jIvF+
zL*T`J$cgXNhJzVh9JU1QJ~YH5xcccCx{RF};rXD|#mmwT`30ojd@k=i{=hZWX|scT
zx*h0PgM|%;VLnVui!iar!vX*Dsd?|j0vH)*)`AFUD0SZ0Ij_<tq0l(+!hjK9-Ffa5
zpW;Hp4{9zt<d424IP4f8GP0k9YJ8;^-Ksa}TjHg&#BfQ73q55tszqG-mWF)z?_M#p
z(A2Kn=bm%6d)E=hHItC@9YdAgmT4((g@$JCH~JO~tp%&B%(b=P+SXHljaHrR^~Gzl
zxn%Bh)QVATXF1j-3l7pDs;U}`b?4#Mmrv+Dyo{g}%env^igHh>TnfbfIINib&{9$^
zlctbDnsL@W5eK^gs6^(r(O>rrjiR4>?65zOYurNVqN>?f<3({K!&*H%yJxO~*uP-L
zdm8rC>4P1PexwK8lI5_z(??~5Pwutv&y+-TbPT!cPI%7(Z?_hCdLyJ+d&Zg-SX4-K
z*7?gEN|x)vJq1*v7Kr}3_4(}t5W!drdXbH>B9Ti=n-MD;c9r|8Q7Dkx7!OYdJ7L)I
z=^&$j7BF1G*7m2IsKgO$sO6@gbCIT0<$x1$ft~V29Y~_d6;Rp>$+~PV6en3-zo=_(
zgs^Nr>vH{N&Ogkf<~cN~r4W{9X8QHTCSKtJgOp}_VYCb6GW-0#(HfZFb(I8fa;#{p
zr5Afg4I|sU&m;6lbQUTRFBiIs+!U*OsqCu?!-{Q1sVT615Co4BmU2io2r$lyGKby!
z$~>2M)9LW=)>F?bn!#gc^{l+wU+>tb9IKH3goHD%fQ$u}6_t!};j`#OkYgN}qhfB8
z$Widt@m2?eoL4K(o8bD16}o^hr#E12at+p|cU~tpATd>>m~j8u=|ZwF6OqqFqv(tB
zM@L(N9gB5{P{Cy4&+Lwbkhs;74_a6f+fO}Rz04MuY|P!X&*hPGrD(BC^NH@hu4`ji
zHlSjxaiM`OTVvHwAhzE~G*i~8ssKk{h74%xuGcVd3$TGu!KSIk=`__9*w(dp?y~gd
zWwqhfH{oNI+K{Gws^&Rgo{-@B7q(eGzZ)Ab&__dNoOfk>XI$c#9K}&i`IBr`zHO~7
z%c^om?JMOeJ~;7&yJO%#=V^%jf0g#k4u;wVD%C!ZZ*<p~?wicZ`i=RL220_UE;0y=
ztOogr2SNx2)_ZfbXX>8jad|>$+j<xF$(^bb&?tu@B?HoPVWp7ovd>P?%CDPEEhxZ`
zRp7CGO6Yx2G1@BqbI^at%Nz|B4bn7F>rXOK|BRc=_pBdM>qK;Obd2=PKJM4%BY9D9
zhs;ef7c<Y#Ky#I+wMWxZE>}F}eW&*kkPT`y8gX9NrX0&B{qcf6S0{Hu$iu^W`NEi;
zbMd|5`mtISji~=r{TwZ?;~16v6GR^DXlWI^CqhvL9lo6laUWPdt1_~$n8}TPhgt*d
zf+x^qi|sce7Jf01fwW5E&yDgd_U;i6aYT0A-w$BM>0aE>uTGKK8S9|0OGG`cLp=Ld
ziHv8=!zP<w8yxbW{d_uYX$Tn7C{hrDlE<{_0RlG62|%cEe5-LQ)7zSrXoB!E*ewuQ
z4rJ|=gWF%%b}?|Hiw2t_(}A$n56xry25nHf#ScSP01?s10*ha>f1(j5zdA?{Cn+M`
zpQ1ZF{PYKHUljes5N^STwyR$`YO1KzAzmUj((;vszFI2mps5IZJX0}Dj@sdyr9NO2
z(GQ;l?Fw%1eY`(!>c)WbY%7LoO{lfa@gdwNf$(gg!BtaXmxx_)gBZ-$&`*GZv=K?y
zy9GEi;F7y`fn_(!6{+VgNh|MK42`Pp^-hO8SX7B0Eyhy?W_+mC4k#uLjujwj`?nbB
zwsQEeVGf@E>G>UJ1Xc1Wk<|*k-%Ykco*5qL2Hrh83m|&+1SI7M;-BwKwu1Tfa1-Wq
z`4-{W6S^CqhqJXHTHKvF$z>3y5x77FTL|rb72PAbgyJXnnF(W7^v0npU`;nZu6esR
zN5H_u@8R*!O}SxNLNjp}PSs7j5Cku~h;Ht(1SuuST09ctfgSU)9Pgx^gl$c+lAYl|
zubXwTh?ul|1_<!@+$kJ)O#UFMKQ_MqD=!q5Cpp!Q!V^bq_|ngcrN3jt8L|=gqCZ7&
zPH&_v93J?z$4@v{*B?bQrxuoxv$sgms!EX-36K{Q2j4&HDU2H`c-Qqwge>UVhXJ{`
zl5l7^3<hy&ym*fuzUFK?Z)j0_32UcoE=IL4!Gj)v^AqY&G~phYiHtrAa(9^w4s>0x
zZDXu&NOgu$Kf={EF!QN5N3WQ!sY=mWo*%(M!K)IH51l=dw91X5jIN6WEh}^`n%ohb
zB`DH3t(&%qT3zZ9kMvF$ic56L-KPL@8X?a1D0w^Aw<3)_>uZ5d%#37G@9&S%e1L~M
z`9gTz>=fL~<0b4KRjka>WdUj*#vUg&oHW%2sy&uCefX6-A<xCTi{EjW-=f<YW83f}
z-M(ddhW9l*Z(I(I0Xip+Iey&`tQjxBog&BG-gv>Na>nv+DEDSk#k!Rpm23zP{BgYg
z4Sgq&z%HlJ=?T;3@+JSN_colC<~i+!P|!75vp@OCW5(ZM8HE#pFSz~@o5VY#{ZvA9
zuNIjYu0~44$rB<SekTtAu2p9YnTm7H&NK(`p@^_qqiA+ejHi74RLg)vX1V<+T<07M
zsC&U*7J`iXLIWfv-vPwHQV&7Qel<9yvL1$T+O4#p=|99lMojgK3Unb3H9Nw%pDkoC
zkf4?!8RPd0PM-Mkqow}lQcl!J1=g@|b8xk#XMVddyFHu&S;9A~DKnlzKc+w&w2N0t
zM+x&UFs?`fe_oR)b8GmLv3KOgZj>u%P}O4dMKcXCg-`-z<-}pHc`3+%&GwyZ49&1D
z0JiZjS>@HgUO$|jbzP2o<*f#wxMogB9|r5t5Bvt#AP^l{>eBcwhLMueyiTzqM`ML?
zmN@>d<CmWDrHShKdId-vLEz(CvJawftqdQGG2SY(ak!t9=hY3o<hXFmJ}A2^mJKes
zBp0K03r-LsTdA~24|0a5N=~Lc#lO}?bcxFCs6F>V<4x}C!YJt1qkif2IsyQl{MHOL
zK8j*dp7pda1$~MVvJJ0z2`F;JEoA-;<uN6h+Mscy2}FSh{i`9=@BYStk`s*_wJ^6Q
zNuSx<i}tC(4OF56b&mE8f)GXNp;6U3dKUpE5iJVtG&w+BR`jPTl0RQxm~)7Lkq}=H
ze}Nbk=8-u4nO)GvYd~sT>{NI63YqDn$m%>$P9^AAOL*!;LI1n~Y(Z^3yLi761|-vz
zPZ~1?Yi#7a-@JA$D~9{z{d6o$BqTOaM4-Yv+V9Hmq{3tti+=M#8?2Jt89Lk1yQV~|
zoWPt7RbP7l+&;4wRVsss+3fJ^dp(_eZ>sk|H$$`tE3Hm6Ji#R}uQn=#vI#rYebbjV
z=GoK=$Kc(bFR)FJ9|2O*8Dt9VLDQocfD)=~S%D14A{3Ly%rlk|*R{uHZ<Jdi?RX0Q
zF?K9)7aY41!ZD~9|IpPKehuz!#$4+iQ_~SZ#8HGPs#)F+1=DhftJkbZ7t@qCkLnq8
zNg;fX$?wlTn><>>-sYs|AO1GJ+^D(7o56JAOgittmIUGEx<yGwFz;Sus8JWa{H%sg
zD@c63?U!)Rjj+^GZ7*d6&w}TRqDEs+>*45fEY_T|VlQme-;O+eGR>pm$vxG5cHBSQ
zar!qu1w$Vj|8YL!D!gR>_SCAgerHlr*1b2)hf^AHPo+HOjYCE_y)Ueet6V5Kt4%oY
zsfR&$AVnd3P)w+y3UrUKIh|xfAkkjBThTGL(Z+fRWvn&me(?K7slWrS1dU{Fic3V6
zQ(3Oeh+&Bb(KduLWLc+=!~y*UBS-tudpHmbC!iRL4LQ9@=qaZ~&p#}hvRo+=r|ECk
zl%7XS(9R}k1*VrzU$k~*y-S;XcA{f!9+u6|v1{4$Ma2=Pmf+Xl#ve2qlJqkJ6@mR&
z4*By_n~)O`z#O`pWGETCi&cS@0>O)66|hm88bM{;k874BRkNs>O9WC})4IF|SyO2-
zL_^f&kcot0J)X=cACH_qkWpC;*0)LXg(9BMS0cxQ>(#W1?2bjNt%iZqt9Dh#{EX=C
z7wxE^1ky&3+HR!=G_cQhkleXMu5Xn4+~Ck4gQ-T?>i4Kta5us%#=Z0*>d69+FhviE
zQtRW~@$vi<m-sw2lD-I-6#V0OF@NFndcjWpS~`86G6C(B_2DC|l2Cdmy{pQ=&lK<_
zFNiYuQ`a^mG*Ahew?K)o2+!aD3(%~?DtjOtDWw{US!YBrC?R@~*eoI&L*7WiG~a%t
zp6my!IlEuGWR~3_+HVv$P3NFnO}K~Kz&Nb<bA!}BNx{P3ioEwOF;RS$Xz#(O`E4N!
zT*51wQj*?26Jb&R5>Z7=!LG?NX7P4(P#?qvF8efhZUIYa6&p04QZjEEiZ-IvJ~fMn
zO(F-)V@JX`xu=2c%#-1E2%~P={;fI`v~6zCY<QUcNKo(Ac5C^<eL3wa!vAEvVQ(LX
zLZ^ZF>u_W@fXYJ!yev6r*g!iqj<J2`$}}#O5}r|D&7Y;^*&Ad*QsZV@N-|M@o5kd!
zD<5lcR(&=P!~9?-^M`n1Z=n{;3WQZ#$zBO>^Eh4pVq>9AE59+h1ib|;pUFX4+5%6H
ztPzuD7&zD2u>6Hje@JrdP=SMj0{K~e)u&6a)3vA}U~RdQe{*m@bU>CkZ<|ID%wH1a
zO?6Q!$Si1EurNaBs9f1-^>U2Ky-VAHck=>AW|%q`?bCYCE!=if@oNNhSi*5NmP6D`
z4x-Ktze)V?rK;gb#A<Ief3WE%PJiPWm@C;c@t_=HJ$x&0t{oDj<3PS_EqOVf;xLt;
zp*$!5ZlS;7m6?1`+0)GEDcTr=9Tl*YkPEGhGLeAfg;#Z8J(5<M8kNBXt1_iu-*~m&
zhOTk%_<YMTViNa2b;Nw52$fdUGIvlbsoGDbDn&_F7r0BEz(wZyu$mky<ABBzkx-s!
zimI&4Qm+DkZHnqA=9pY2*KhqmmJcUJL+J~Q!{P53Uzv|i)6fMxwn~bA+ly{iHLHr5
zq%7Ms#w$Ax*e!sUmiefS!%s?^G)f<70!rzS*LM+o5s$jvTrZoD!Z?wK9FOf%GOYT>
z2an0sn9jkni56=t3T6VhdXKt{VC|<gOB7d$c7ZMUL)DTe0Xzc$Y*OOX89ie7NP(G0
zJO;hyy=xsY`WZ|fs_sm2EQ&XF+@?YqBF?H;(tE#A6Cv;tD@(ji98O*Vtw5QpoYdS?
zdC2#_J|Vb5<UK0)-PJ^7X$ABR{XZd54Pl;xZ*IRX_%mFt#}&U8;HXi>G@BGxyR@%h
z-2Qm;K@|neEW7<Gs`is@q8@V8^jfogp-jY$Izq);_6awK_@TZ&7iinxM|b=;4t@IX
z%K*hN()B=$c?*e3M%DC3{$hoShDn}+?np*J6$h%nI_hr~t|eI?Djw6qzkO?8(bBa+
zh-dqaFZXxem6)n|e7359htAmx=r`EiR{*1Gge%7PrPHRKKmlMrz~Cr{ve*G)o*1>?
zWO|l#^*|Z&$x{Z6R1*1*_I7Vx%Sg6}rW3J%H6y{>iRAO0t<Y%u3XL#WLyr@uAmKVS
zg6|a{c2>i()nKrgf3S=KZ%p`yrtHYof~j&#jwI#}y+{W1WfD6}RP8WAr1V!_YmAq(
zRc9`Xwh8dl$SCY>M1~e`?e<9b49Gm|ZW!rk_>L{aNJ}=8eKpjz?4S6*oH|8|C>!Sj
zho(w0)!$75LKPjzO8_q|SZVfzC821D*+V@i`lVfxC99M5f05GFaIQEa;AgwFukyq6
zipZs5jzvqFwu9A;!>BJV+*DU})`(7i?nS%o6<3Bm0UU4NxQy%saok4FAFdZ~&MvW*
zn(b6l!`I8g5BD0FeO`3}VRsS+)?(c8(x4y2>2$f%-l#;q2u20)1x97$*k15n1|JY`
z_k5&_BpFdk1v|5*@VyK+dTuECK7!x9F%x3b+rEUzm>pwazAr?8%KQ$?`l#YiH&jyL
z?D|E;wUK>(%0(>$@m+fWpjWEpiQ#CL=VfD+W=u_O46*{IdoorhfF9NkRhnz%nyTxJ
z(|e{F65yvabxK{3jB6{nAKDRy3qE5Jw{amShps?LjEM1;X@u~gt$%{IpwWUmxQX>X
z#vBj_{+gL7uf~Pu360S@SpH?8ZCWU=93yg3Zj&$bW&;o6ieQ^rs%M7fKNCG|h3g>y
zQrFirt>>JXheEFg)l};WAaR)DzNL<SQQ#)?Vgvg^8zZ_$%YER7*G=k%P_4OzTuOJG
zRjOGP0!A5<#&rPT5}Ys`R{`@xRPn9i6odS(XJFxSG9YHa(oLo%SCk_eR>TVr-t0ol
z^$!FbpIeVRy_yfpFFfzSR3u|)e$?{$6eJva_enQNe0chDSS4SoOjtGw^DiCcpBP?B
zCank5Q|9>BtVx5SFtF@Pi+a3*hXh%`!jcbm&kaVQ9_4TsAgj;HpvRIl5^4Niz?rUk
zM%T6A2(b9sFDFA75;L1wiU?R19jDQ3XysTy@$J_L7TbPCL#;LT9u86;@0&Ph>^e1T
zftq#!fi49>IVmV8i(2TeX{SRlT9FO>bHg0%9PKnNn6Vp|nKp?OWxDq}`Or$wNU0_|
z5~OqpVa$DkIPm4P?tGbAM{<O**6U<&^6V_lEW_|Ha&Ka*a0cW73QIsDRDlGh2Ffr#
z(~StPp1ryrQq@Hn@9fy0{RPSuX!2q<thR!%O86J+Z#_t1@D>i`fJ#|qN^5AP$@_9<
z9WoTvz7RTl)a>Bo?Z34(ALxI{O4l5Mta#%n3Mq#O?e`{ar3u}k1E!^&ROPyD;aqwk
zihk2;@#(4YX0!pP7=aQ*tvL*&w|nn_?T=<R;t}f91%TSg?>Gj0p+xe+Is?j4=&-0y
zAGN9}aOro>Oakfa8kp-=$B=Pmh^J|z&)ej4jmW0sW46oZo*TpiM!>8kooVCKKfo6d
zTZqD_q4M^KrK}(n{Aua~F;#Wx7x<DHy^d)HM26gQ^bv%~o{rZqf9p8*r<=B%F*}4a
zsQPmA?G8lv^g~YZ#SS@K0~B8l@Y*pcAG_YR8^Pu~Bq53zxzx(g*i5Qi@D)qkZ?#D5
zS{1k2;2K#BiDh5tC0rM#RMpWtJoMDT`v`T24M}wUlz0kmt9iw6IdCT6bqvNz<l%Em
zCt{*cDi9gt`Nr;cAHM0U|AuQ-m%?Y)`AvNx`zFYc{s#rd#L3A0ANI?C^7Q_*%l!ZG
z^nzo@B0-qH`N)A^NLKb`Yawv6mYgixZqtZV38yX%cSIv_uTK!`(M(KZfD|tTcDzep
zWWkK6C}CknUL-shHU>@bl)IxtP_a@pIC|!qKuAok=(C0E0oVl&ntB;=HfbuDL+v?&
z+T&DybZpeHMOkLAvWsyH)Dv8-LEEJZrZ2PZ=Rq{ee4=bw#NBtPiFZL>`NTQz=+`yp
z5<jZxmqR<D(d2Rv>X~}S`%y0sISdE9>x<?a=zpg^H*;hB+PB)%|E>N%R5ND_Q&X4!
zGQht&|E+#S{DjpvrPKc^s55A$!)>+?D_@@R=k(bszrQ(cgcb>|jLuSXwmTJFVa=G`
zt8lhJ?!~2b);uM~?+CgE0C32@N;sS5FMfe)LZMnN7(3};jLG4eGj;bh%#4hAVuGJ$
zYSjH067laAaBs-wLp-Jht0yX{nez>B6ue)T5Nzp1t(*s(pa5`{i=dD?L|nxo=c@EC
zv*ONJg6xE^zw!HnFsPBd3u831e}D%97gKNy0@XE4nVM}^zZyo!6AZa?r2g!NET~QC
z9#r~9-IH2k_#JotTXs~ZuCkmwBoNRr(LW^$|Dxf!SeV+HGXAUmmqE_8WbAP{kvcJt
z{WQ<@W~?<3Nu6@c*Zbw8HGjmD(kp4Nt``a^y9E;o#pA)EQKeyYpdD9+<=Og!9g}~s
z+o?2A$8}8;Ys@BKsPS5Y6ok-sPb+W1g|YU<*7uERTn^0h_Ua-fv%T*Y243x$bcd2*
zbH1;A=vN(jiR77tQ^`2=WgG1nth`?bjai6Fa19a+QyPP^ze|mdNC+@OFh%#1bM!#J
za~ShUpb)%p3GN?b-4C)E(4f)0V8!=8p`Zn=rspGL8&+4VzNW(-=)uHBpjjCTy<{oJ
z&_l=I6JVf=jEki^T|v!+BHqERI1+9pc1p&_U5oZH9t#R~d2q*a9Ezw`#k22wzS=Wz
zVqy^_-)DHYcV)0a_2$g#o-P5=XgF?IHP2SkJy-(az!?^n(ictEsM)*raxVfE8sGzX
z7vx(lcHln_(9_d%Up0ThOFux;KI>P*>o;8EB<+fZDU=nu8Sb!C4QQxeFNoBms?xVZ
zh$oSS(H@IvQa59k>xoE2+i~waFdeJOI3Hlc)ETAfSw$kt>;rV8W`OtjfvAYY6UeeM
z<gTIMiK5oR6MW>`ZCQR3-B3^&frP>qic~9xex0Ho+pm&ZfRc)8uYf0q{~<PwrG&_k
zHR<bu(DnhnJ$*r}&Jujk=l65Ey<QpV%T^%Z=ka(}DH}ss7a3Vb^M2Vl^7FZicsiQ1
zHxT%ojlrb&Y$g=^ct~Mf7t*vj48b(ufB9HR#5C}G9D0hyzow9Uqi9z!rfbK2UTzyO
z)=Ym4wB_DBs-~QYMXDuJ1OwogwXxLsbDD(%9O!L$uMi*u9f7Om5$SZENCf`$Gv7T>
zHTm;K&tUAyL+WZcV-s8|B-VO439vghBk?#*Y)C|)uU@)<j7#g%tRXjzuNP9qTSTMM
z@ju}5_Al20+JZHGH;6$e!Ek?EG2Cc}bLq`ezNwR#is+Dqwv6jSh?LN8ov+_$M+4M1
zdL%heIKc7{_TK(#+qFj)p$stm@j+9W+gX#6U?6=m^ETWCh=>#n{bi}<?H6e=v2)U_
zM!r82Vz{iin%1%*Z6yn1$Xp9&MqM!qyMP)%EuJ8YkUf{&MN&rdXp;qO^Nw#4pJMO&
zCp7MKiq@cC)<<k}T$foYClj5fP`mfv(wIH^X3QY>G9+8xE|V-$P)?p($PKAm+5eQC
zVa72&-}oFh5{{Ci%QlxVi1Jr!s-dl|BIeata1I1ll`1RHDjc>YsYu%B``I*@mAOK_
zo0>}|;hlMii{wh{y5sMxd?Lrg#TLK`rRp2UC||semeVJ7dC61RhFm94|3J6?!n3FT
zK3P9xXh6_@*$IaIzRDtWe)K3usAL^TXY>kX1&g^67>@oaE0$TVZF8E0yOPcU3py{R
zUW%HyKMpuj9YEDr<+B`d1MF%I(diVQX1KO|8M@91&zWHM1=LCFVGc})JMMj5MWwrX
zz2p_NQdu%c<1EQ6^HN*Z(LlgtR7~Z!3EZp}O@%80D9zFAVK<(TuZ>yHdvffgPOA3n
zpt&Np&)Nq}b_Ve*zd58Y%<(h&!4%VYG^ZGcn&WD*A)H1ao)Vs#oGLfe8-P2u824qS
z3s;P&vg%ZTB2j7#X72&leW^)gm1_OxhH}Sc_;1&2S0n!fAAHj25gXD`1k$o7;qYET
z>|BjU^@<YSiW2IFC`J0b78mfpP0=vz9$wd-o7a6r7sR5x2xa%Vkt(b5`eGX3N0kzu
znXIL$z>1cPEJRT*dMf}o4=Y#8vP{z1WMm1ziUgJ=R?pitAMZrb+gh|MKWwRKmeYVS
zr-_-W^%cotq?o)TsGMw3PK5jVHSGb?r5c3A?6u@HYiRWin3H5l3ZvMN!wpLu-^R6l
zFC8j_31kG7YYRnY61*`9^AlABZm0Gq3$8^Tx7eCG9WZfw^WZ{&`X=Wd(Xm_HjYTlz
zEL<CN9$%&aNMEt;&bwMv7q{k*I_h9AMjQgKH<wX+VyW61ZB+z36krX=f%$Y%5O*UP
zlCj&X`5v}ny*n1^BSoIy$7CXRr~_noXjMO4EPwlIzjpshtH#Cyoc4ay@)&+SlzKfX
zRq~m~nYo#1SLDgdai(^*iEh@=@QTrwE1xc2&6Df_UIWjFlroF^v5POc5y1KyY*@zF
zOmAr5X(zK{SBp9Z0=uupOk=i^&4cGq?LBXU)=w(bAp7&G<|C>ZCnmgXoBV+GX995h
zssD(Cp=h_`3D2Z#3Kum1>+EM`EQMcBq&v-CUt#u|O*4dC=;mU$ISX@B?OPeuXIO_C
zwJyU)g~*rR10i5w4-7DM)Liw*L1a!;UpzdIF8H*!RJ5`gI%b`ezqE7c8f;+7oK;`)
zgA_P-DW5KkJ*bmwFmige=FF8HoL)%NE|oTvXX+Q@FP?TlcDfhz2-mM8&}?W|DcdwV
z3m4{$S1&j(<fvLfESOc|vJsAtVQG3u6FM9Cdo}8%`~BOUS%{<fdeAomz6c8l2>w6P
zud|DXjp@Hw$@5ya_Pbn2pT4snVZ&R*j7ZW*Mr!&bl@0DZrTizIY5l;~__*9fuwH;K
z-=CDkMzFRP&3dCL{lEF|#-DF~@kI+>u$b{9rK<FZ?z`ceAQMCd->QXwcE<9EnjFB~
zfwA`d2!AA#%%<r2;+R~>if>~l9tA<>L!8krofvMq`z6Pc;XV-R@SFgXY6LFVT6Y&i
z#x?R#5WSMM2X_vq@*4&^pU#eytnc>BZ7xE*sV9<wI^W9PgqSu;GFwAes@(+0_2|*j
z=3+hIo(8_?EIuK6P<fw3O%KT`imi~@BbvPi6nChR4C#&KN0mLVzR|Nu227O`Erw2&
z2v{cvl%zrH^C0O5^dcB~KE>X9+k-#$eamoG^v|B)1~e{Q8+Lv?^8zg9zGw#Wg+ApB
zr6xuI|Ax_GF<y$&b@F8c`)^6l_De)3d-8$vg84ZRJpQIo*OU8fs|DpXeUIs1yTd`%
z!B$|M>$8MKU3MQ?wfB@B3l+Z*GIFEwvApv~VDJ-}ZREwtVsniCTs^(PEB+D1qoy(+
z<Y)CHzuA0ve?)cavB*=ZFf$7pUSJVZ+UNS%nUIarN+zUI82(L0jB_7z4`J9rxa!ZF
zKlTu|d0y%I2e&JhPTcj}0pJVNwaJ9_t7jVAIc9Eib9G>M@eF=*s9uQ;{{5v8Fm4Q@
zk|ILkFsnAxgh)pXp!g}F489)c(zvKV&XGnfLd}Ilu@}7iXZ!Dokk*97WH2fULLZVT
zS?(HKKSq3E!RGio+)zWBvdkGbL}I|aCro$sbaR#pmKS?dXX9Ix_@^lWy(L&dH1tpR
zG=Z-INV8K?zZ7lnbn(<zIAWMO79SyvYNYhhrN9tz(fWGo%D4?Q+;*v|Mj1qy$=p-m
z?zs|#diwU2nhtp@7l3k;q5KBG)MbEG8SZa1aTs+PkDwacVyOb0!H@Xb^VvK3z~HL~
zhaw8yc5ptXFZ`X#kb<qAi&Z}!pxm*K(w8MGkL-JFq<cKSZLD&%?$w0~2nDrsuPnhz
z%!-rv1f`U>eHdb$Ewat^#LN{V9z4EA$;q9t%J*_zUu54ez|-?KfMj=~&|%e9ooGyQ
zt)e>}5xCVc6gZ^{<W~Ic4(~G-#Q^8|yBN#ji*V<Q>eD{cIYSPYksE%hvWWpd`Q*xr
zl8DkhedL<B*j^X!cNKgXtbbvY67j1_ih)*N_(3vD306i6i~qQZhJlEzu<VI)S!)(v
zLpOkoY(S^z5|L0;wd>1>p=Z0<Y2M&on2MA{?BNa5XU<J-rCT>y*n^_E$Ryv^I@#`2
z=1a+4&y@SLY7AL&!}Vjx?zonABaYQ)WXB3Y!J5`G{8LZXKJbO)mPgc_=ltHQ{|fBW
zW%K5({=}OA{P)rLr}g|F10^*Mc8B4ZjZZ3bMX%(-J{ic(1s`H7HW<t_07$o;F=Bgw
z^I4lb<tevav0!)Kq{H+bZ~T?#ov<I^nzSom!_NqRtyZtO?B|uPUx9@L)&aT!O){HT
z0M)d2FI1a0blYc;(XHTjEc%}{J60=Bd>G#~6#a=nK;HrDziM{=^C0!#N2rF(4g0m>
zgn=#0<*%OUw-|BdY~hS3+=%(ffsFxUbHOZh9r@tpWDRAC#E-M)AL^Ex#lHtGfuC6-
zSOqal`;1+)t0*3Js=EXQH{P3gvmV1z+LRvc_y8*%>x2Z4j0TqyUk}*}1{nG2a~^NE
zH9kD;=a&+K?!_|(f}eMSKF^L^zPvsg7n7XCy<;bK_YdB_K7L-`Q4-*_nYD?p@6NdM
z#YgaaYR&oi=K0|9-gDiSFwMZz7ceojw{mgk_QhgF+AcWQ&&4NjdF6iA_wjVJG1dz2
zw9aokwezlE@KjA1^XN^8dg<Zy{`m30_!M@ugtUA2Y3cX50*1fAx7GD^FgCW+^6`!)
z@N~6e;#FOnPN@5Q^zm`yz{8id72?o*5%D_J-mbS9Dn%&Bciu-?V%o)hNpL0MH@0bC
zcVq1Gb|acU?RVuaD4*H2mC>B-x50mLIn@^CkSoD?)ORN67JIaCc|!gENcTSWg^w`R
zwP~O2_N5+0@X3xFHs<lNWN=pg5PLDz_vDQKZpW7S+wOGi`NiQ`{cDVo_?jzYrIcIN
z$87EG?z36XE4*vUj2Qj1nS15+YDdhT(R}rzEz5O5_tj5ulkc3Mc`JMJ%klY!vF#(J
z`pCg}&i&5eT4Lx4QE;hk&Zi}9=lJT@694)08Z9sQYm@KltN~8r=bP8vQS3+G%h?9i
z)Fyq=+=z`*7<Z=MVhR;3;p5$<OV#58vIOVTmcmir-B&|b+>d1rLk8f!Y#fJoyR4WL
zan8+mt7s8pFg3El0@S_H9?|8)xnRKq%#^FTkzW`B0N<n^`F7<Z`8S?ko4)T3eD5vL
z?mwPwikEDCrcAFy<Fu!>^l2#xU-F!!5~|<c?6VOniNr4R1mc3>ja~XeuVrGE^+ykf
zCl1m(U?I<9@fnPKI{nH?!(3pyoH%(xz}_x?3Z(nCe9)UrbTDOWQ-rS=nI&r>n<;CW
zP5g~8l^*PVQKd)S|Jd`Ua1cmOw!B<fBia=oiNnd+C&w2av0Pk-x=~)t?Q<=;`ie?+
zj#K`7Jrn{At_}taya*OBWq<-US%_jX%bgO!zaba3FE{G02G@mJy6e4Z;@2MOdMtn*
za#HrUueAD`h7?_ZR74iSMEQNSoI1r!ty9ukE2q4;P^iLwI`y@9k;#biQ1SEWgj!Z(
z3T`feX@D+_mk)yGXO47ERTlQ>3XA@vCsTAH>kC1(=u_#p)C9SzOrXin=>%qMRhhwV
z_R?Tx>0X~2OKiXFFdW{bgzwqOLzq3F)occ^O2DlLyUD4c6Z^=&#W=Zj6XeF83o0nj
z;-8)yr0_gWmwmKh<`z%{HY15%@a!EyjMVG6I2>t(0n*0uP2p1`Om`7zbx;=X-6}&D
zs7hF@*V`R(SO!!-b66nC!0JE|*U8c`ZhvS^jX{o$QvAx!gTekme58)nTbm)mm8=3a
z<P;KJ#Ptlde^;Lcguu>iW&9+qoh{@KNWl12ZA}K+6VqOVq??f-;^0UVG7gW3X-<k1
zKmV59Od&OLH&NjVvs8QmgWX7EtBw}fprrz3x0E2lRHF7hOD>iz7)ipS%3JPXhU@9W
zqH+izO<p$*g>bK&8up-sC9*8(bd;w@Sf5B)@r>Fxqv9l$hG4I(XFOadwZ(IkNJ9a8
z|CBmNmmhst>h#nSHeNQyUGgMhuq8hlD;Zi|lsfoM5oSj$NmwN#f@c1Y%V}K$zaxod
zyQp*u+aQT)e~YYMGRv^(_Xz)bF-xnY6xwqa+6a};_g~^aqz2rivCsyO$$0YZwE_LJ
zn#8P$X}hupR0+k<Mbs5Kl=R+a#=^bVTUrvq={JeW8{o4x5mDLEB>72rwYX8y%F(?r
z`X|VuJo=LYI=$?xP~xGbzfk|QizP&mo*=7J(N>g~MQeA9Yo8(8(ov<77w4F%OKTbB
zve^dTVy6$`mYEo(FXzJPVyaUonyRpsCZ+AXXRA=zs8&dqR@Dr^$pk2hEd%SRF@%;%
zYUau&({F=Tuq7873TZpT$j}w%JgZ8lM(b_E_<xK2vj3A+yIbiQj6S;A*^-rwN@K8n
zidMW$@+TuON|ky6ox{K|20aoA_o`+#1YKvIv_etO=#E*w-bn<V^}aF*=erE4)<InR
zr<Rc(WOa;qF#hz<17o#+#xprzH>JysOr-^9!$<?+XH;3JHC3cGl>weVi}`2f;_sP_
z^Zt=c2I2gLJgU%~mgR%RP_59MS0YWFSo@RG#!KH9@Mq|)(#2??=^lzU2|rnvng|V<
zBa|k6>U`h5(mTSG6(gpip9CBC3XuFA2Wsd=yp?0iL{@nG6PGg-3lNZKhSHQJ2Fj9H
zPI!hIg>%Eppqs2SC?CsiskRD}CNwmRA~Z%Zm!%48lkMb%j7?=YDUn7I^cW1bPW29M
zI%#Dt?>T$kK7eag?N-!8^(r&ZsLG=AXbNpYTzi`+uT+|_rrp_Vjb2P6V8LNh5dzXt
z6h|-e!t+L{%9P96KvZ0$12*u`?dxXUB_n)JtMt9lwa#GdkJW^!*{U;oFVTx@d<v74
z9B(8YYiI^}%jjCYF$(k!Owmfxqn(?lqJ`~>u>)Y%mo-j*r0(S^sFjrO;MtZ5`NF7?
z-Ipt;fTS;XaB`i9y}a?3=@kyKHiDE3VT-FtW2-q9V1_46{G$Ei+lNXU(tKMS*pdyt
zK0*tVdsmEva0@r;SXrQ4#*5)<_h`0vE<u!c;?Gb<#4u_teIBn<w<zTnEa^O2Lhe?c
zFQO*xDy|3kD7q*`Rf2R;1b0-_S2go=V74gCjV^=LmDx#3{6m234s20TRRLZVXCF)g
z7{o0RWL8H;JqRK1G>;f;FvNh7Y+x^Th>29OYe*o)(fe?CShVXR*%Tpn*Gyk#ntG~3
z;SI_%FN_DAr0vPI9->t#GM9CeCrDG1o?#Wgh{S6Nwfjk@{JF1eujuE0p%Egoe?HrY
zc%VqFde)?ohG<p%qiojgq*C6@0W81Uq4H|?$>U~F#X;#W{hjPlPG0@RMUBc>hNH@o
zzN<?{6o|4*6Tgj9IH~b%!Mp^wKX)%UCxEHgf34eSNhB^X_-)^UNw=9AYMX}IY)Eg@
zn>6XSRhRnGR4#W=ow|)rvjmVwlhm3$#D7bf;Mb_J6Iaq`sH30KG>PGM6Ls<6i~mtl
zElkq8==)KwSO5WcTt#7=0T`pk765<xL0z8++2%$ofzFC0xX6bg;6C_sr$UXoJ}Xdi
z9qJzp8UG*l-UBSEWoZ;$LyjU*B}>jZBa*X7&LF}t#DT$KhKwi*3J3@i1XLtR1_8++
ziUJ~_A~}hOfMm&%@0!81&)Mgk{my^id*65OUOH=4S66pecUM=}s$Sjby;Rr$1-|Sn
z)Mk6YqW?=)duHz-xz)nWK|OFRQ~E53Re^&oy4upxHk+Dxo?5zxz0g3)?tW21b5|0z
zj;!UWDf&YCLVow8i6^E!Ms}07W@kOpo6Z}U-P4IJhfj{59KhqgzAA36Gx5R*25Ju8
zJC9|Ts;MG57H$_8MEK<~!@|U5(=x90S=jRV$`74Pgw;f<Lj^BIJvNeZ9y2La2+V}5
z6!MkP++3NBGv#4FxpeJ<9+CPqo~X$w+Crn(Tmnl_>etDkuFcfu?Oj*7WCR>{wXYg+
z*{^KcULr{oxYx`@n)|ptGeLWhk=l$W6COILW1fU6y;+_unmG0C-n#??**87|_mHpO
zTb#GdsCzv<IP&2YWkk8E)RRZq8R`j~!FeCkCd%BRVY;G1O-PbtJJ~R5%N%%I%R!XE
z=jVrzdMjhm3j-ZRMpY+268LJw<sL%o?66g}CiBwM<%us}>E{p5YLR#y$O}tsfeD_U
zIOeM}A%34T*Xu^Tk;V{?vyDnzLiE;!5S1aGHPa?WVivD1l3W4tbKg>LOU8x?T{Wsn
zHRFZl5`dq7uCd87AfCpjmG$uK<|Jra27SBK!n@FhB*`tm*KBL9lag@%<9T?7*6Y@h
zQj~qx=s?1^f}qHyDC3%AFL+-a#2eop07ckA<b}Ft#?8m7b)~KeyGF0G;aBxxUL+?R
zWWx4U&)Xjw@LI!c1^qgL^{7V&1XdF5^cF5BE1fa+b7gu{!!u=rlQU|QWaKHtpCDN7
z*}7p?;V$)2<2jcU>iE}0<8+!iA+-Lbuqfrr>Pg|vD#vLHj9yC|9}O)sczV3IROVK2
znvz>}VZ>M=->gsVjSmt=<^cje?j*`8$u!MvHZ*f?bIg9!H?`z07P@nJ7Sz{|ar4cd
znFv_ZVYfxFY8b+3OnG4@E%{fJ)cPRg1LqdrqD}GVNT!F&>GL&Bsa`AUGlG&)P&mgp
zP>sJTK5(k0ct<^9w$zN;9Bq5{YIBXh|I#Tt!%DaFxy$Y8Xc|)u!$hM;K|YKTLo8=-
z2{&eXseHX{1+Uh*(bib|_1)8NvZ0!HJD+4&#+Orv)RXfj<u_N+=kteCTBB^$uXb_^
zdqrgX<0G0P1(HT~7_d^wbY3)!O?vT4iHnBM!8RluKKEkgyg7aQts$2Pp3ht=3tlca
zCF1k1eYpXeAg#L@>#JG|1~H`>+Y;<ud701d(<C5cGt`c%>a^(Dt<56_ZyU)#*=x&3
z5_NR8;|<(%GF;3%nj{w96AhovXn4HlCohqf-FPvFm|Uu7z93;`xumNt568AAwXL~U
zK03_%K4$oxqBGC9S+Ww&BWpjCeM0>@=lu+}7uUh@x4qwd`KU3>EY4Yg(y>y-<6kj%
z?@8v($Jw-|HCy~{Ma=e=0@6%3Bf%c%U;SDei=APe6CRXh)2d&GEwWc9NayNt!SAXW
za^{eX+T<rN)jt*%q@kqi>`tr>%yljr%<znj1vO5)y3JX;u2Yh2H}ZKUpI;`<8P#1#
z5Noch9wb)3j?aQ#tekBpKb-F1+R+s5ho*k4d)ivQ1GP>y9!#31sme(#SEt)=Fi;!9
z>qsmSa8-}HNBi0(Tt36hTcb7tepCx7=dwUP8bcqY9!c(E9yWoIPcs)tvdeDmL4&s0
za*)y!4w^63({!Mx>@QvWq``w|oK~&MO#Qgua>cK7RDtnfSpXM7XWMp!GMVWt<>Jd{
zda!Xf^)6~F!~A(+a6H&Y6e8Up(HCeA<lVo5k&Rm$&BAYoh^BO(v)OZBT&-71{n*&d
z2kSZ^l_e84QVgmMTpfFgM@FytqFy9}tV6m6*j@+m!ope<p5I!X=8xpd0u2)OqCl2H
zjA0dM6veZaV`4t|7{*-pJ^_iS{!HVOBO7MxnsY9?#dAo5M=?N<Kmr_^2S!S8({S83
zI?y4us9m0uiS{!Uw=i9#3rQ8m^y4)D%GD(GgbkzDG&ozUUOE$-4<)lAd4;^!EWWrV
zmWO?$&~=a#iNecDJZlsYR_AG-W=y0FUk<bxa7qXX3NxzFt;go)RJ?61*E&+r;PMn9
zIsqwEPbfBeJ^Jk1msgR-H7{a~Wp-y03e%CB8k*IrwhnP4K}yz@tc^vCEcv_HCe`|h
zlhif*8gZ2AsDdD<BA;1Kf(O+nB(}2hR-~7N$ENu~v$Q7|T@ezE4sKIB>P8KVE%nnX
zl=hRhro#gkf-fi5^Y{|FJN!+fVWurh{8`8#nQ|<5Cg|OF*H;Vrg|}~w-AHQi>chJc
z?Q+&GQ7kq3QZ<k>+HCqgL(45xBG~?Z`iTvZjWqgb1z2J^@BDR621xrrX^R1;0^5ab
zup<P{9@bJu63IWzwTjH01342%O{~rEN242?kCYH-wYF(iNUQi))G@v@mMq)Vz3Ruu
zUc^ubTESkVU<;oTDpdn@i-yHsWE^&+=qFwvd1<=gSY#jtz0`9UZ{%Vo8<uu}`6Y@q
zf3iL;g{f$;8Ish8SE>-Ss&74Bvh<0D@xqUJk&Gi=@IEQj88W&uev*|Yzf5(rBFVuv
zAc6L^Texm9eFvRoa=8SZ5S|)nhL*q1R6HJ;4R2V{8B=_6Yt>fglx<m9(<d6Ai?U%%
z7U%5=&3LoiCr}=W?A>Uk@k%U({YncX|M^;@XJ_uQG&tnx#JXJHSR1Uav+RKQQc0EV
zI^(|#m|Eh5(09CE7E5YHp3>z_E>i(5^46+^(z1!6#}f}AZr8SS0-qPTE$OPK8840%
z>Se_V!=ob2Y%?u`%kpzhQp-%7E_C!xi_SVXh+nbM&wq~0EN1ui07C5rT_?lIlG7JN
zti8+3AD%S!Qxc}TkUno0Hk(W#bT<X(qkQrUX$R^aji*Qv68_1|Fq))m^o8>mJ{5tP
zez=o!{zQ3Mjo^sZ6~3+6(3F^4feTk0o+c`lF%A@lKFzM59+wGt4nIM8wpl||(fw5`
z@nVUhA)8A_2fx5w!$F1Yz6bnOC@&Tt9!d%Nr<xzh$?Q11o}U|ckBOz=YZa6Ekj2?F
zAjuH5Kc{Q|ybfm<@uvS`m3frjy$;b*htt>EMQt02X;nlDh3O?*?mk^H6WlM1Xmhx?
zvrgNo6+cn(=3JH~S(EZLsOKuf4g9N9qvx^&)^MsZoR{SU!_1@}?NS8$vyMP2PMy8$
z72y+H2x&oP3XNR*^5KDhgcFI#($!=5-vmdJqN%G+bA>=JQI9Tu{)%(Q_Ufq^ZF>S`
z(NV3pq6r+mgmhgBrryub?R>g(Rr#Zo6?ZT~-_Eyw4eKQNTDM=mJFvLYaWI8idlE=S
zfm7YJI(eYGFHnqnLs7b6H?Qy}onmHf!ZKv1ZshDj%!dByN@j{16$f4;8V6|KgM$EX
znI&K0nMMB)zgmVy=9rmDpAhCT#_?sAC5<*a=5oVlEHNW2yUD^Kd+veFipSazU9*?>
zLVoill7KMgIt@ICg0su;LIBL~`-cY}Fh^H=VOI}(XPBsvo0s$9;Nb+}F?ByzCjijX
z1NgvnL;xX#3ILZ<z!Rjv?-?NU0C=<__B1I62*Xd<4Z`!C20UO0B8oj-5j+6~KtjZ@
zFy<JTgd45^xbT8an+HC70g}Bd0Kk3x$5Yu6;Q(Vba6zCD-Yy6)R#jD2F%eM-RvvR#
zPe+8WH!pw*%881|iHWj`O3I0ff&c*EK7{<@?;*~QGVtOb;{JdERj@qFMF7G5PD}86
zT_9|~>H^{Wy)HPAA9+B;aDL{E-+PoDpanj`Rylftt+xn}VQXQhss}(0mw;o~5a4(P
zLw7g=TnEUAh=_=Z$cTx_C`n03DQPLl$S7z}Qd84XQ=g<H!(QJXM}dF5L&!-<$&ZmA
zKX&Xm&9P(0XfU^9G)GA&|4Igj&j3myfEaj)3t<CrC?U9%ki#*sk|c*OA)pf)f)Bx7
zAj6mo7l7d4;S&%N5tERD0`SL32!Mn8Bl0)^!Gqx9;NjpC5)k3zl8J+nl(=}OsYLOW
z4ehDfE?pHPpoz;UQ(@<zHG1wKE`bc~Rwd+&H~u=Y0`-=p%PhafrFO@}QN1|}C3WJx
z=_lA~#q}3G=*cw=?u6{HCy6h6Kd<Lhw)9PHm^t}`Cq1fa?VsM1)--qay^)+--8L|@
zMG4^GfZXC?c_Jjhm&CGgT9gV8<lqt;HNM!@I2sHG&yBjjigP$jAVcF-jcK9Y5-Xep
z7zPNrB%9xZOk|yKR5z7E!9M+D;a_vW{fmXeVSo%5TP7u-2u$_Gr0WX5X?xU+%K}x+
zy_qsHG8;^5EB-XXsunSlPRwQ_mPPK|@*)@5pJAsByj{m0Dc!QVykplFK>F3|RPR>}
zkHo69G<Wz0TN1)Ke^dWS6SZ$vtVc;^nuqf@f{+pTo0RTy2HT+&zi<9@qy3JC5onD_
zD|kz;$GO1O#rpo1CT_{?%Fj*IRGq#(0W$?lxg(zok(sJw3dV68?k|V}g4@6DTzbnT
zL^1j?eeLoHLN>Nu@f^^j%B$P=oaOyJ_Oslm^`=5tjJJ5Yl*kS_x>pb3E}p*AX})8%
zP)$f%<PqY02qf?x0@prl2eZs=m?k@H2v-h@suz{^XQmr9yAi?$2&EZ%U`dVpihQM&
z2T|*0P3ut*#mKb2klb$~G4vxWBm1#NA_uvRTV++{1&<z0TFj@eYQQ9o=j*-iPG5fA
z3ETQ?>bu4=p&++U|4!`dLGjeimSM1kKtUln8SEC2^!c-~U9ol7cJk;R{g<Z&Jf-U+
zhk$lmwDp|Lob9_4xoh{OZQQL-9*i&e7Crk?a~}?c+FtNs&*!j1_sS+VG(i!*vzJ86
zt!Jfscc~X29RlwULNZ%yP)o71{np9zqjMdbQo}AKZM)J29pz2h*S;)Qj+b=rjG+#0
z^pv;U4vEyP^J<h#YVN0BB=2&Ym(N{KUFlkSy&-Kj&}S@E=zqzHd3w03>TIb#Key!5
zw4u2jnUIb3z&eCx*}#Zi*ppAayNkhQl8cu|Rz-v9q}>lXF00<}IcOa?2>W(Wnme~I
zd1H*W>0QYo5R-L~%gG)P^qNs_mZW6g*6PxZ<e2!W*kE`k?Trx%kMrJ#fZaafut#vB
z=c`~DnxV~GKIT_Cc$?OrHbyKx`*I=b8nSi4$C5d%K<Z5L=*L|qXkj7uLOoC0`j_>C
z0ljp$wtcD>T898lWyPB39UFEnxZF2+$&c&dGmg-@oiX*AVo%Bb;bym|GktnKqdQXF
zP1N4Y?FG4?P0fV!cibrnPW0^x?CO^cucV58O1I2dB1cQYb~ciBMppUJ1Iul`UoLbg
zsy)6z?5k@x50B<|@eHU}bolblV!q}4C4zypg6j9K6{0cgOxD)(`>D6!?u*3_a#9W&
zQIk7oD@n!q>gHb86~xR9Zb?;pdc?mAj@@t@u}vFU+GNc=A3ZcaSHWqp9rE00>2iJr
zE<pnWPcVynr@MxR+1!J<qO$P<=(u{-eomibK$FwZwavhkJ2AUrP3n7Z$<j_77`7Y&
zvCjL()ZTlkV}6(W_Nw2$-?7{8I2<}$q;UH+BZ&)%05U4tdU%+53;<XdAyxn`1E=Oc
zJ;7NJ{C`BtiKRW>)1I!Y5Ix5erX}fio%S9-HXk``+!S~}4*oDR33%qI7kEk<N*|5#
zLZiSSX1WCoyivyBsg7_gg*JGkG0YR~fr-Gtn5QZni3w9+(;B<_VJK8wQJ6HC=%YMg
z$n*9dFcWnP6A*P&*iixlBm&`N3`3#4^c~!wU?dq}03ZPb_|FMo1&je0fCA8f7bYu!
z#Oo(D7{X?w0!Mj%=ZMS!?FvV^dSbH#<B74<s(O~XN39``$pS|Zy#1;%)o(S{_d>ZM
zJiWpA6BtTWFO=txN`RGgK>iFEIeY8<45%VKReuFMQNIG`9N^wRW6nFHe0~PhJ>Y6T
z17JJ;%31~L?)<$Wj#>#Y(p15i5V#nYj2u~69T8{;CB#Qe5PNANJ^u-(0{>?^6{Mqy
zsV7Q<-3X59+n<*T+>!Oq@J8Nn6c%sb2UjxsNlxMegQ5^fHG7mjrUqCh4V(?Ue@F!e
z#t?%~4BNmtnA1@<|4^(6Xl4CbvBpsN5#9g^RkFn7fW3}Gkq9qy7Z}*NpoD@SGyiD5
zW0(jdkS7%c3We~1BRrkICn5V0gJIz}Joyj2k*l-I?-8UwB0%1L(qqO7?&1*--)%0)
zk0*8<abe?*eJ>PzC|)@leYmSw9B2g}Vz2LGk{pZ0jAB1*`cpr{%-FKluwn4q=A#QV
znn4agOBHjGd>=ZX>|<#+uvjfX*vScufrEF@wgfN8cT7e~>Q9Uq7H<XKf6z!`F_`i2
z9fQsD8yE&K<L!v+f4t*<!9@Qf_9*;6iNlnAq}o9Bg^LYg)EK7DKQAm+1RFfE29L%y
zrUsZgU}TXBOGAXkd>`dFO5msmf8X1m83SQ0>!Z~4m>{k-csptZOb{IWAW1y<qy}{n
z47dbpAXhBp0fsz5jpPjo0xlqI4>*E%BuM#vxMC9jyne%BbHk2^pRpkD8^KTXceXKM
zPc$5(Lop3O;DA7TI(q+uZh)e|w~(XCU<TArsRfb$AoYOCuhD^J!|12*V_75chPy&x
z-e&M~nBfcgLpk`^I1o(*{s^%FZMEOZB6LO~&|ZH)5g?GR&aOW-v$`=RcYQ1l%!Aw>
zjY4R`JYh(C6wDDs0GLDazpD_EBVr5&6Qk|n%nCmK->yF{8VUcy^n`8vKVtN}o&Pw6
z5!k~~Cic#MpgIPH!Qmz_Ka{q&mWkfEA4-zw2l@}h#4ZSAfHK_G`A17p993TH2O6w7
zp(D)69*tGn#6B=2>QBhcexUzIPU_&Sihv`Kzcnu9QT{5LKO?{-z<Goxrmcxl2rqE*
z_lEth6-nTr`ury>nFChc{u7=Q>|&RHB*%_P9!x>t><)^v;#VwuH2!F?FlOi<ja>`{
zfRCZT433B357dQ_kKm*Y{=m22li=Iz-*3BrzwQ40w)^+n?%!{_|Hr)TV&{m{ptc79
zTkr?LD1Qn-88ojDfCFe^v4XFKE+C8of8JQg3#2&lA1GKsLrxV;D+Y)FqJRV@<D*&U
z$krnSeazUh4kxIux}Z>Aa>Bx%-a_^mZ?F&);UVm2?<FiMBq9u)QS|e&hq}X1tPU{H
zu2EoHu5V&vb#+u=Gndp8(eqM;xwvWtAYsM<=S`pi?oe4rHpR27XZ+;+JiI($D0^1$
z;BilHIX?w9Z02$xj6n;tv0_P3?h0&Je=Vzpo&l>W0tsW46p|E#ih%BBX;~prNl9sG
zF#)VkT3AF>SX5k4R8~$xLQX`4_4~yJmWFh6k~31%_+AzmQegXDDPLb-AzyJJ1kzbp
zR9042SVT-%OiU1@5cKx<MA`cZdU~_}$UzO}4Mn<Q--TH*IfCzbXp{mQ$mvlPJiLBp
z`=@R7gV5`TH~r7ae@0^)_(vi~=uc`d&?3Wf><ATx!NF~cp5O*fQ6W)GoBiNKPwyxB
zpYr12@srvcrS1b(<KOkNH^xvBHiCI0&`2mu-3Kg@{YPQmC?nXf_WaYr{+Jvj$0qiY
zQ$@n;!B=Jz@OAk|FaPrEs2WTCT4lf#_MILEzG1@@*f7fuf+8}4Vv;7{nuCb6oQSxf
z2&UhUNcBJ&as*$+e<KzZ5fl?O`LRav2V#VytCRnKB>mYja#$Nt58(*%A<oA73$LxJ
z3i?=_T;X7ZH|U>W)mB%P5|x#b5)=~>Wn*=O$~hsB9`;~sW7l_t-MnDVSbp{N<g`7#
zQTCotn6{b%8(3K(S64?l2N^MOm^~<vjxYytK^YMVaX|-r2M0lM2bicBR1zv9E(`sU
zUJU_7V?+Uy{%9yUBA{R%zqo@*!lXr|93%xLWhEsAMMYr}f(}w5Qi6_>l29ixS!t-K
z^ik`9+#J1;*u#I%6~mPyn4^pc)ImzxQB+V$R@OmKR6;^lP*zr2Qc%iXTGCNM0xBgU
zD~TC1ze>hf{palcVMy=qgHgra`8x!6{jL45G#G!F0vi@&1sm;GE?5*MD{#yS|A*w@
z-x%`*eIMqo-Y`~U7!-|kMftNDA;3LFta|p~pFHsU7a9NObeNKbF~k3;4#L0q`$H{%
zp?@@?GT6D^pt%288=U>~9+QxE6oWZ{%1GQvLgc8&WJRPz1ZBlxGNKMrjt&m?PDjkZ
zU4J&nzsO6<Nd{^!B>@!_gM#vi?R{BCF-Jj1Q4y$wG)&e>94h`>UVmQ2KdTEU7NEdr
zxnk<(|D6kC*rlKRuwoUAoIModL{wmdVg^0Tk?lL$^-sk9FA3Q9^uD0$>)&dFqtd+*
zPAFgS?_DT6gG1y`l+8abYyK`^f8^iW-sj(QucoFhBPAv&Eu}1`sxBcaDx)GRswSZ-
zr6MW{_MNKokDC7(=ipMRxa<$r^w&85qnbQQ19h?YbcTU*u<-w&9ukgDGN5{}7Zec_
zcNBy<f}&$DCIX6~w6vqN1QZIB5Rv?oy8OAC{cCmkr(XEp$$zCjP=qJO3Gl0LyzG&n
zCP9HpM}f@=iSS^x_woXrE%q2O6!!6S{BF(s9H^`)1nX~V`8N&oM*(nzAzgnHf!~Yy
z$ph>E&I13V#Qn8t;;0tCN!|YkJ%!aGN6J9>AN9mhSna4aH8357H6`T!Oe6eNSp;nh
zIdIzh4-=u2l!Q1;!rtNEsX~loV{$uk*ZmJB!k_cSZ|38VDFn1hG2l;Q`0Nj(_3!83
zE%0{>{M`b7x4_>m@OKORU(^D>+-WdR(0=y?on?og$Sgp|f}MepzJ~TWb*u-FOzWJh
zCjtjt5%mB+lE8QxEG(^93EzM#qQu~GEx7h+5B2uaGuFU-RRVxs2v&?c0t0`)KriBE
z|IsRIkD!(TE9;MlzxbqtdLhBDB_IYMy|^Rj7z5$!APo0Kd13IFWhxp6cMOb!S;C@0
zf((K%X2U#<^ARk7r8$C?FtDSCC%EQ`gW=iB(Zdk~zXai%K4{EZDDF8B4)<||`GRmS
z2y?*E9<CsaS(vBsfZ2oVvv`<AG7c0B>H@+dAWVidF~Tfap8>y`C3F4_cK8iOfj$M0
z7Enca`D2&qSb3nlte`(ohE)sZ3x}alf(D?E(;n#vdLTW#>^=Pf;Hb`+Q~=dKxq7hZ
zqualY{EhD4ftbEMieEFt_8Ek(^B3+{%3nA{Cb*~%eguJg`xnk31punUz%vVmf8jVD
zg3jdY08sVzxBAdw<mEU2s4EOAglW*9*MB7VN%^mV-^vrhl=st3#;SI-s>_OzYACo$
zi$=0~gDz$mtKdHh@qeB0H@1G`Ljbh*VMrM0reQS$r40O*2JCK6M_0@XBde?DADnr=
z<?vr7`z;3ycqG>#K%IR6(AWt9$KTQbxQm?t9yKX|Yx4k%f&A>ZbHrw#*B=1PS!Ryp
z9)!Vo?EMcnoLDf3<L!$5QUFjjGGPT>VLnGBc$f!1_!$WW_!mJ>0nFf`h&<rO8)ASo
zAP*=3>VOWQ510U!zy$ybt}A$eA9MHuLBLfY9EbvL1BpN?kPc)6`9KL!4pajTz;mD#
z=m6dUeZUCt5tstzfv><OunT^=Ob8)|P(w~ZSRkAbeux-E267gn4mk%gf>=T>LYyI<
z5HutRat#s%iHD>@G9dYoGDt1tIiwxZ4H<$=KxQGUkR2Rc95Ngl93~tt9AO+89Az9`
z91|Q{9A}(MH~~1<abj@p;$-3!;Z)%~$LYZ7!}*9akFx=OSx$;ehkF`V5LX6Q6;~hE
z3fBo2iF+A05;qAq6SoAn4z~@r2lpfH0`4{*0Uk9TE1n>pJf0SwDIOH>65eIJTX?B>
zd3aTLFY$WtCh)%E9pIDWGvf2(%i(L|Ti`q6`{IY=C*eQBuf%V`@57(M-y|R)pd;WW
zkS5R~uq1FJ2qd^gaG#)*;2A+T!6d;3AtB)@LViL8LVZGeLKI;*VG3apVH4qd!YRUU
zM5IJ4L}El5L{>zeM4?1UL<K}oiQW^<5bY8lC*~xUBi1K&B=#qcCC(<UBYsOfMZ8Nw
zNy1H{Kw?7TMsk(pE=dVV3&|+S8Yw9$8>uX*A*n0r71Fz;k4ayVPLOVsQIYYHsgl`{
zp~+&%a><^N4Uw&plaq6iE0J4~qsU{(^T}V3e<1&MjQW_+G3{fH$3l*!9jiL_{@4-)
zF$E`uGQ|ao0E#4v3W~QB3&)9%a~)SbZh!pp@wDT$#|MsYP*PKhQtDHBP~M^}plql7
zLPbc$MWs&VNOhemi|Pf{BsDHIJGCk`l=>QVHgya26b%6lH;p!p8%-2VG0hvAue4OO
z60~Nteza+{jkF)>aOt?{wCUh<v2^8h{d7Agm`*64fSrgqQF7w_iLH|iCzVdZPDY+A
zJ=u41=M?KH^;7Pr;!ahc8l%Uf=c6~I_oaV8-$K8@K*J!<0A+||C}$XE#9`!PG-3>7
z%wp_h++bp6(q!^tN@04zw7^Wqti<fboWT5)d6tEm<t&RUO9D$1%N#2$t1>H`^)Bm6
z)~}}-Pivh<pUyb_=JYNbH=8M2C|fDp7&{5O47(G10(&$2R}K~qJ&qubLXKfhVon)O
z7tUnPHqI?BZZ31K8(h^~U${?lYjX#17jlpCkn<?=T;j>(>E$KhmEm>gz0doO4~I{Z
z&xJ3I?=3$LzZAbK|9$>$0ek^j0Z)NUfdN4>L1jT7!9u|aAv&RRLZL#{LQBFN!dAj@
z!fnC_B9bC-k!+C>Q7Ta#(NNJk(N!@%F{oIYSg$y_xQ2L$c#Zgq1iu7K;(^4VB(<cT
z<PFJY$$cqlDWp`1)T}gz^hN1=(gQLyG6piYWM0YQ%c{tR$TrAs%Sp+h<jUoi<pt&4
z<qPD$oZ&tLJCl88Qh`muULix_<5||T7tcOC`%&?<qP=3K;wL3`B}b)4N;As5%5KU<
z%1bIDDoB+|l`T~{)nL_UYPf2eYLRMh)Tz`>)l=0!Xs~HGYZPjH)s)l>)O@CeucfOM
zr!}C>qz%>1*Z!&_trM*CQkP8EST|Mo(>cC#$a8giIC?sIcl1WjbDsA+U#$=5YwO?9
zA2Z-KxMWaoNMLASm}WR_Bx)37)MiX=Y-e0xylJ9h5^FMI%43Q)Z8oDYvoXsz+cH-(
zk2n8lA#4$B(P2q%>1tVHMQCMa^~h?&THQL)ddf!9CfugqmfP0Pw*3PA1^9(VI|@5{
zyNZkW7tJpgT->wQx6icSaL{(R=kOJ(3QdO2J1RLQIL^WpVDYdSCk3Z?r!US5&Uc(=
zT@+oCToznaT~l3G+_c=%-L~BI-E-X!;pXsC4<e6?9<`oSp6;G65zGibM7I~eSGd>5
zOLCVIFMUPoA|H7}yluT}P&A-1)rsaohoL8Y&ibVJeDgK)t?;At^YrWV=kt&7p8?PN
z%L&8_ga$SToesJhG!d*EoN*a)+2L|?2z$u&kf|%0SMsisTy?+N6)F-MAG&_c{94_0
zrt4R(PljoR6^0)RM}`mFkiU_B6Yr+$%{LL^5h)P|k&cnCqeP;TqV{e<Z@rEdjlLUw
z7~>T4CRQr;!EJ)up11qs6yx&ZDdPj;C-3OpsY+l?h)h^dv`cJHl1NHVCP_vof4qC{
zZcPeD%I%cBRF~AgG?lc{dyMxY?rq(7y#M}z(u0z8ru3-vorkUu2QxG?sxrAUld=f1
ze6psq&9d8aWODK!(LaiMw4dvl`!UZb?`6JpetrRCL2MyTA-Zt3$foFBv08CWiC{@a
zDP3vQW8g9R@m$%(vi@@2^5zPeijpUsPwrJxS4LJrs{E_IR=ZSxtg)==uGOh+u9L5;
ztQV@!Z8+VK)=1kJ`;_GA^{0nT0Zkjvyq+yQcYZ$EY}Y*U!s12mOT(9MT69}pwQ97!
zXj5)$dZqBHp<S-M_O;CG>JF)ns!qwy$}Y*S$~RJPs@_V!t$8Q=uCDt`_tW=^@1OUm
z^|bbC_jdH1@9XY2?H?Sl8TdHpIQV4<KD09IGrT);WfXrja_sn6(g(&5nd7|Ur5~j}
zHcqHbbbd1aG%^XDod4|od2j0aH2HMW49iUZ7qKr5vl_GS=B($Y=Dp^37s3}Q7w;|c
zEInCPTJHR6@pWnixpKIAYwgrp?z+T!^M=93hfR;o-L1%Pr@rNF%WSvpnD5N&`tE^8
z+VAu3*B$5{j2?P`pQirW45b9x0!N#nj<y>8r8~~A3-{;sTT0B<ADo{Ne-${yZiZ6D
zi^qk4yN7;lhPnf8h62r6fB*;F(DU;mBqG4aBgQ2GH-&+lp#TD0u>7BqU=%JP4iSVH
zAR#>t;6QM}?NGQFj&KNw(GYN>6eT_t!D&KjHh@T!Mp=xVme^2*&Yna3gwds|CmrHA
zRWr)Ia!DXbPCf6I<eo5=3SEiMR5S5b*O1nP@|c>L)0a2D|Fr6O4Rz-_EUV&0&m^ym
z(;AvjR!&P>2Q=24U0mIKeEs|b!oqLdjEGD~OiI3+lA4|KC^s*^;7Mgwbxm#E%a+!*
zSM9HR`}zk4hlW2-P0xIpom=17-1@e?16CiieG3m49}f?YfB@eEWSJ7&zJ)JJ0I*Rj
z8xo4y(_A7_xyl|#Yn0(YCr(_(@w{6V`Srv^s06r+>m*cdC9|AM@|1~`x+6D<_q973
zC=9=*FtnNU^)M{MYrOOc*-tS0xDt;xa`9-IJIVaq%k^s`mzIT#-_5&uHLnK0e3R9-
zboGx&$**l6n%(A;)3I_3h)gZ0dp$h2^T+*G8E=DS=Mx$O$LqE(Y%MhoH13w7moLwc
z{WXM6aC-UHg+t)Ydyo4mSKB?$EP7j|GetcLh!~_8;Gd;G9V+7aX39{rH`bonZ)Qnv
zb08VvUy&{w-{U?ta%o)Q#dW2i1apDK=Z4BoGQc|T=OyjwCNJrc^H!g`!e=gxb19Um
zgrz=!2PJBziISXotEox3SAAL6@e6%<Aw#8zcUavdvOXTyYR^tfW)LZnH~!W2#0R|P
z^bf^b=ZB>^A3qtZzTZ50?=8aN;Q01I{qxf-vrq-6M{oB>Sp1`V5YpB1PCZZszS9p@
zf>c-cX;UD(HmD1M?vo*x*5e{CJRj<-8HK5So2^JdK2K;q_c_tx5V-kH`;3UrXRr8g
zqlbXLzrsT4hup!^1|XFMzCB0UILz6*8DBUumiNi}*<JR!Sm{_R3aNRf#*y9X!1jfR
z7=5o=DR+-5jZB-?4uuMq)01kJrm^wu8L_v&kZ;`{Qx5)X4gX*C)!#|}pGx=tPc3GV
zK7a7yfPZQJMJc-N!wzO#R=z(3^6Qc-1GhpZ>k6|14gs&t8}^@H-+j!0jC8yEg_Xm-
z^o@CDYLF=&3HnToAMWfzJ$h`jE9Q;v{_qNGrJa;S=_?Acpt|F$hk$_RUI&`CWW=r0
zx|1Z8jEe9s?ORBHclz;=2~l*d+Zm_D?b_ju-qk);TD3;qK1pJ=1U5BGJ!Ys+U1wrR
z-4n$~%Jnn5ZReeLpC$MUZks)$C8T;SvmX&V9nk*NY`1Z^jY_Z6S20hClPc`$#xXa-
zLAtEsP&xB$qY&YP>ltmvaK&f^zacUgTZS86p9Z{~=Nt_PQ%kBE8jxC-8#J;;dFukB
z-vrhx_AU2(bN<TvK5GGYZ(lFaxB6as6>a=D^!g}8Yje@%o)_CFRN0tmzsyae^b-Tt
z3@l`BwCvf#cX<HAb(U(C?2*0Tuyo`oj5E9GZhBhv_6{}IP*p3SOQduNXf;jGzTJ%|
zSDc9+Zt6KuSkUa*33;aIvF|anm(y{uK0Y)1HlrNes43I*;l$op$l<&Hfu@{)w)IH~
z?*S7WM+-OB`eYFEtVhNB`wW^*Yc%WYyIDRHurcc_d1Ly>drsrwynL=@B3c~<BrX?k
zwX<6L+lC!n8}G2&x*oXQ_4E)3o>*?I99)7WCrDXujBM^|4SuO<a3b0w%c5YH$I}^j
zVc`05W8Hs?c~dhfIAK#0F>`--SYo<yxbwq@(VC_3ac$If>O?i={CqvN-mgq__qX@n
zw<`LW7%X^1=*JHa?hNsEUDhdkSk$3Ro#2`oO_`M9*n_U+`mp+9BzDPPKAm&K^X#X<
zXu(_=TkFDaB5KV1&h`dHFRz`Z&GLF9*LraIV0~AiFwL{-gXU+-zz(UN1o19j&HE<r
z%6W_^_2k|3Gy)WYO^5cOpeW{-hufSpwP?6b9zM2f&N-P1_b^pEmoa%!C|rC#)C(5}
z!o1zL%<|;I;(lA>+%O(P$BX*mS3*@|&Ez^2t+&XD)(9t3*|b=12fQhT2e)swEr%?U
zuXj}zjYxiyY}~ll>l|uSOS{2BV?+`VQ`x(Gwjw=u*V=z$z5LAAkK(i<&;lD^!=je4
zJvPt%QvU3q-JbH+2FsT3mfOfUi&HJd=%54T+ggh({gV?+&C%kl+k^z^Y;xNzTjL|d
z`}eo(?lnG5?063KX+Cl00)bp6bd5*-GW22cXkV}T&zY2YJZii{bGohbBrkHGvpX=I
zvw{ys8Phf<s9m<R{!pkwPqj|^+_%>XEt|KJQUwf3^KRXy7qPH8(RpD48OvYMQnySQ
z_52`=$uW6>FR^>I--PADjfRTFbUAOgHmRQSnli+?t1FGk2HCoh;`H4B{|%?RrQgoI
zeY+6Gh&Bz5STV<!A2E~XAGA%Ebd*+e;0WT@brPM?6*bQE+2F0F;{Xl;KV}^bzAA=0
z6o!lv2fiReC|hE;#=D1y8#&y&bIQ4NwTgXv-Snx>A;7+zZg*m5*W0ILacG3pe`Bfr
zg}JBTRBgcg<4cwjBNhT4(qrZ@_s6>rm~v_gW?iA=r3-m;_fhdCf_HCLQTWLU-$fK}
zjs!+bG^R9bl)u!df+}U)e)aIqp1S7ShclvqoNv!mSC1|wA0M%?RJpY(AvU1GBhYE4
z9&r=!GH9FXQ{7DnxLLQ=gkEY~9t$iD+`2ITVSnI%8={E%qx9;>rPyiydkgn#-`9`i
zZa%Op61Dc0PRU-h*<5RuGH0ln7keUVa`9OAp#0>L`3ch~Qu8eq_lJGTldEnaC)w}I
zZn=E6sM@Y}*Ug94I+NI242R*wGuXtv&!~63K=7nRb2MtPe`AR(Ex}rHDqG*}_~ZN8
zRuQCEb6-U2^eFe)O628utDasX-DcdY{$~7cH~q7w^KxwLZaQ?4EM~aP=}W+jj}MnQ
zQh9&w?K_Wq9&nU(dO=mVm<~tB6z^oh{>M1AhXs<+H~sBC9J8G6nj3K#Sy;|$xGQVS
zr$${y8fTKyh04!GOv@c#vny}tYu}|E7x6Ujr?ONs5Q&&_UPj+K&WvZ}W`ALcxzX6J
z);#Z8@r|!dUsIMJq!gXy7Lk|#lq3NwOE`5prhWOrcoe4+f4)NjjU`cj9bZW*-<+Lr
zjA@Lep`#J)pv7G&{RToVO^&#OrO`B9N<&5(35mSoXA);EnDkfnNBt+dS+*YZ@<B3^
z0wT9rR-kb+4+>bO^<N6T`zHUvzvRl|LioE*&jlfBPfy&GLG*U#qu%yOX(=&*M4G{Z
z#g=NH6049Zr})$mPBLY;i*Y7(R~EUExe|+`6Hhc7JubaY>Rd>5Bw-Yzrw?<s`4}ns
zoKXf%>mAGEc`vS^s;$1Abc`rTshiG`ZzG2^Q;LXn^VTi%4C{}YtDlw;)4a8T6!7(!
zz+$Q1G1#?cXJ2OHC*lkhq&Hlu$%CB~X=5Me4+ruGnzY}^4+>Vh${9{0s`OcwUBCPT
zYGy1g&i-+lZ|EmwWM|%K6X+nsLACv4uGdL!?i(6GQHvk8m+<OuSxdG&aq2UuP02Rg
z2@4JDW=vT;qtvEBF`c|>wk`ivH`{G@vSwF$@`0UO&yq*ell;f^6uv$h`sk?&>lmx6
z+WJu$qxbcmtQbeS>F`D7Z}hiz=;^cb)zWKo^95FRj7~IYmM;bd?~Im<&&9D36@+G&
zS>B6Gg$yH=+B8SU76!zT7uuzE>piW#huJe{W3;0x<PGpCaCjeCY#n>2Rm|J{Z65LM
z93s&3;BL#Z$K)zEY-1cgUA2GK?M^;l6@j^8#LK<`BTic`LbMMj^L%FVsf65BqC#?J
z3QqDf&#xoouDqlT*}6XLQLXLaAw}#wVz~b81CQB7a#8^eaRa}Se44m6{bM((SbVyM
zXWS#_)>7E6dAn@*oh3#asjEE6G=2541$vR(HSbdYR(Zf0dV|{@5mP+w*Y*N&zJ4t2
z8qBlEx~i${?P5`m89Of?@(Nuheo=M^W8s%1dAax^irRV4rpht6z!pERq?JC^s~deb
z1hnfCvdo%H(5l(0v4xSugPsuPv<_D*X=bb2w_UAF=uP$Svc@Q|1sBZ{{(BQpesRAs
zeJrKHY<PI^OzYIB|L|Op6E$LS&%@JM`fj`FE4G}rPh}Qg+}u}b`@|kwd<vJ28yv(5
zu2gtQ_qf9wEvM-jTGXjhaP?&ccvwvDgY>G(+QtX`*7CkdbE@iUMxAZlrpg?9SLT-G
zVh^aR_gVuLadjWOnW&4(F{|Rtd-T$0=Ayak0}-v9PXR^FHjAEZcTNdJxj#3#n18b>
zg<XRTPqj91_Ei=26OqQTL6*pq;pwkluTXDZQC{UhODv}Qj(bUyq8^~jpFqEHC052h
zQDuB)9xZ9&f5lDCXj%B1-rF^r5t{P1*9*Vx50<xHeIMnt>FE?+;3Ku4m;Tu2?8~fU
z!uz#xemlGR9?RqG=bytO4=CqWPP1&Bx1?B|)oU9YNWZAkJ-XOK`T33(@gZ>U_QU;b
zv`Xzc4>K0-xR>U^)gL|;7OYgJ!)#R(vUUsTBY54;_Hf_IFKYel+EB*AxW1-~*WnyJ
zL<E&k=hLI{*0epA5vFXc!pC<Kha!)a^4XPu(3x;u*Xim63OZ>%7gdt{j4WQh<}7?|
z!kZju!m%Cq|6+zHl>er_mwnkPXnTHfa#%t9#D$Ae8r>bei?6&Dl54#gd=$oN^YVCB
zO?N|F)x$>^QmyI==xq|ElQN48p?%Yo`_EBvMrWoE0q<Jp_~qiNv7R}OhB(~BFw-Zz
z90bAV6N<@!-d@@qqN23+2R&=%XBGz-O5S^9mPfxPNEth$0Z_5`F!Uz^W$!Cn+~^bE
zHu%JRp5Gs<tD;+dY4TC}@~ct*uB^JRrjOVy!$#8(+@|4g9QZn^^dR}IQ#?80ddFt-
z$s-tdnTBnx$E`*#4C^rWyYzL3xxD%)_PCgwi1o91-qPlq8PA6Lk!3c~56b+SY^hWw
zw@edmYe`(xAZEUiJyXfV^{=PZSl?#Fskf`T+gJL01QpwcnNlQd&FarA^DWNQWsaCU
z(F|&@rABb_k(>$h2s~e})A)HsrJ3`(o7{cctM|s=rcrPRUj1;ZuXf;}Mry>@b+=-j
zt1HFgse7@iPqjCf@5*jhpDwGcp?k`56NbFDfu7BwjX3BkyagR7l*l*)u6G9Q7v{#h
z#k79Qjf&%Nw9;96zIcj{(^Tz}fXA&_n`oZsp~x%m3*C&p@FQYJmT}wNlo&35e$lH*
zvF!<&Q@5+Xp+IR|>!GwamA;qMmbo$(@=9|%7S%ddG$yj~sDE+POpMnJX$YQZe+}i#
z>uR678^OmqJXF9`Rwu5;@Gy!=)6&4^5_6iU{BZExXN7)rb>NVP?PIc)StEBHcMY_i
zRjr}^*$C-a`~By`9>de}GQyO8QT~!LfLWcR#ZV*9)w>T!&u!=>CZPRx>Iz79tWxQB
z=u^JTyA-k}rIy5$q?(04N-9W&Y3I+mPHSjt8oYWI3SpjdM8#2QjY_~Fc=Vyil<_Wx
z$}ndPvB#g{2zMFc)Ht0GO2qmOj3C5gyw)4yGk5<Fu7q;^Ro{d2hrp?(yNazIYolXb
zPXh<wOVJe{>eGr`c;wo=;bcNMaDo#T(J^y5g@rj|w$Mf~G1%u<%R1TdY6UUWWS1aR
z<@F7uOUZRM&)XTFJ6C#``5>*^o#OBCX?5jiClcXv-g3=$2)*8W?<?-<{hZC@WZA7`
zVc+Oan>+G%mmeHI?U#ruGN|D=BgSMJSAd2niCWz$uCARg^844a_QS}VTR0Fr1Wt$C
zZ4#8DE<LNdz_h(G0*5bkWOh0}K6&BU*jVDNu_x;?(d{WCD!II>)pD_D`;W2QLbL_>
zL8fa-*{NJ1jA5U&V($jeOkJ@4fT)u1ke?MQ9^{wMrc}`>G&qsMP;GX{l<C>~%<G+d
zwF}NN-cs$=%l*FfL1xuFmUNb!RQSCnbi}xMeR{eY3fX4i4^3hbXs6{b2R#dC?~kwR
z#(uaDYw#s_HJY$OQu+j5GS=P;<>Om<-*41y(&r#Xa8F-TUj1ZVPLiw=$>eBSrKef_
zn-OT;;L}3gn@Q>uRw4x9*RQ;|Mv^MR-jP@6H;j-H9Pk>d#_RF-5ZBmq(Mff)RiY}A
zzx~e5hywQ=dND-3k^T?}XCdG9p0V?t++ldcH9WZAZCdSnY@zfmB66=)++}frVDwSM
zT=}Wt#ilEx+c((?U-i9zXZ+2DThQ8?<mt_hS655m(~YHfe8NBY!V-)3)RoG@ggW~k
z8gxcoITdZ;lb@ppp<VUm_8eVlh`!_Ok~GuoN~&XNXy`)hP_UQ;GgOzgw<5XieAe#}
z;Ax5<?|574gK+XayF9DcQ?*sKdhlt|96X13v&+$?!sB}T%mn<t(Bgb!93#q<=43#$
zm@=m-F;!>5DQ)mCpw#X)y*;sI?bGA#%k<LV+l^MOURtsO7b8n?vy-gQw;9~>yZW6$
zVO7IRX)RL;Rqx-hF_XUPJXt7{=Le<9WDNB_hc<ig*)!|d525+jVpSX>xOeveZhx6c
zvCD0bxh1O9e(>>T;)Uje)z3FP-fd(*5p}W-G+P{!`s7g~nlR#N_sP45v2BINB`#&w
zOkH$0nr+KD!D%|~^`#EkM)7ZKwxl0Vx#uc*1hfkeGQ4<a5wj>eXO=$n)Vq30YI+-5
zO{a^Pyj%JBzQd!;DH1$-<HqEd{WO%h<_J^eCEYpRf6eKCuFFpf>iv+xke1*vKlD=K
zh;Z?)bcOreC0o1x`kC@_36aQKVO+09`i8be-`%;`H|}(cx02<dr~VV)`lPX{%=Vgb
zbsW)$LeJeUn<_APSkuinN<>u+p9v#yIeE~<y1tS!>p3-Sc}`szih7HJlaXs!GaQ>5
zrQP>WrMNocZKlqQkkmhMGi6S+W;5PIc_&3_Gf}#$WSaN<Sj|Y+rR*<;Y+I7@>h6*E
z%(H5?<&hN+xIbJJwZtLqyHMwT&y}|2(#(tEdBwzB(7DC+G;Xee+j7rn`D}jH7%ffj
zHT1Ofv_=$s^XdAVI*57P+e3hbCb3YU=atI)*5T87{0`=ZFPglh(!HyrUk5H80&X?#
zXl|WW(iZw{$fK;aGv57ftFS|Wbs^B>7K6vAK^LDO*+Wf%yPqIkXH{P(7Rx;qxU9*N
zlpWf1!d5drqad2=QPIQv@RFp=Qv}&b^pU>tywFRp__WSWY-vVEYK7Tc!ZX<5$&O$P
zkAA_sM$mX}>q6<zH~x^r?*HCd<alFm-EOsCapz>9+vF~B(|eY$%=d5Xx-|7reBG!R
zfWBG@(j9%kElS;MC4Ayx!94+U;zz?FgMr&Ln<YFmyR)l#DY#ePY-BlQ+e*`~%+Ilp
z`e#?|=6EySmepj;2o=>C;c0s$*H1V;aKlc>)>e8oXMJ&LfNd-2DHFp3l481?nu7xE
z>Yamc4Et+Lqi+|UoxzXpW^qlrv4>kScnF|&r8nHiP`#*N^i##@0ks#~p;r$&r<Wh&
zd|NmrwU_?HQ~%rUTm7XDj{WX!=G+5L+e4u5&Evw|=0jkGN4AY+g?`|mcwI+fX3Iho
z+hP^Mt6T?0yNaJ1yn|}Cg{$(ng!Mf37R?w6>L&SezK-3gdn{@A2#Q=PP`_Af8(UR4
z=_b+E9uV|MMK&wn>``t!$-SVh*wOmNur~hH{pYdXj^q-B;Sm<5h7=P%goc+AjOw(Y
zrtNl)!A0fcnP)~ilM00f8H*bP6XI@nXJ7gjXF)?W=tQ1Ji&Kx-i`iCQ8JQ3^(HyiL
zYY@5bUMAX_j#w<xV<PQ}?{Z|z@p(8r!tFYd|GD_JSuv+9Ke+@Oy%kEVvs)>aZSrhO
z$H<K2lAUtJutLkE>D>Vm{^Yp9ZgqV+Sq_Mi(mZeV0d%ld7cL*O6_C`=r&1!;8XiH<
zBhaOEK9S%Gl?#OJnzZyDAOGY&vr~DROVGu|#phQeHFX54LVOk$3*!sb<N9F9q^isd
zp|`b9n&B=xvX&9fdW$P>`Hg?zbicpT&2>hlD28y?fv%|{Pi1nMw}Y6!`00ya4yB2R
z2<`12YvVP^ZIpS_UE#IqFXPGS_<?p=J8xk=O;$cl4lpU7@#2T0y@8jj358zejwV>&
z@YYwZ6G^E{hMH@KT9Mr3<H;YJEMZe*+h)SExwG(QqvOnE<<dxES7qxE;9EdP#_`S+
zqG9+v&44v-B=zF)afQH%$KIM82ziY@^0BH#FCzspzIUxQr-;x_G(057T>>8;)9O?F
zpuG{f{|8&;uP;FT>-V#o(mihHiGh{}bKmj@$C^eJNc(Mb2k#2Uk7T*nS5w$~M3PVJ
ziF;1Sb>wax6J}D6c$;(iSo)&4d{WgzohQvc{*C8VG)~Y3uTNjLAFhpm0Uwc0iwZn3
z(mllHqtyBSO?G@XwW%o$R|2D0Ku2l)7C&-&@%2dfY#rRETK;<Aoy>-^qA*kYYBXuy
zah}eX$N7!hZm8EE(9BdnX0Wch%xPcshJvEnYkkaikSm=wwAIi-^vTqgCu?o^4HkR_
z0ri_RI#IjwyN$X6n~dEY?<-z8hv!6ae+&_SaPwfbOp|<>N0Y`a?{v*GfFe@(boUw1
zF5cWy+~GffrU|?C^>ygoSk?<`3MeUG`;u{rXC-cvZY=2$ot$G{UgrXMobr&#t8#N!
zJofel^W~VH-L^O(&qU><H-1wm-^2%T0Xs%|ny;hg2$hyE`o@km90K@vD*Vj*-@nk=
zoHO7uYHs>kUf`l7d>(J3wrx#tZd*R~BX>veHGQSpbI}ORW%vO#qoM7*FI`KU)b0qX
zcOvp(QL;i+{&ljKd|lb`KvRS9XN6}THd7taU0gT&S4G;onL=e11qIw!=Y_X-Jv_$a
zYjY7Xg5KItp|Dn4gF1+fxm7XoN0)%@_j^2ZzRQZq>GX98-EDU2PvuKXR!+TkMft@H
z*mlJhjor~H4{(f0hQIH7-QMn%s>E@1Sx&YM$)L!$c5JGsu*H?vNby#_$$p86c}J|x
z!Drjz>JsGC{U@xj_)S5juV4GFwI2c|ePuH*O7m+U(5A{crE=ya@#aS2vJq#8-~Sln
zpLO#-f`-DFz8+9Xp<!@4F=I<k{77yVt?p{Gkpm83>Y~%lLASn*jl5G?VQ!ftZ!4P{
z<vDKBk9JzLDSL1Tm=#ztcZW(VuDp@CG5Nt_|ARC^vg0&)(St!DBjx#>SLU0SW6q-I
zDW0y5puCoYD(ZR8a%{d=3szL`yD_sf-Nc6qYMKzaZ{V}l%DlhCmwH;?d}ypaW|+oQ
z_&BxsN4X}q_kG4DnnGD6(c+EQ;=|OhQoZ0Fh`so>fop1mvAtr^ozrOeT`hAgf9e5@
zU3HW4-OSQ><-RoE(r)34N4kYwryGW443*wK^t}z4x4UqK;+qKq{a8OLgz<~p9bKuf
zOO4&?Gh9mDH#db|6iB?@G_mLUthDs#^YQCeO6L!jM)Vw~1vh#pjPTA{p5+LAni+R_
zbQ`6*mHa_sWcAIn>%M1_kMYN4`(2uRH=oSi!yJ4DUAo762)IDybZK>mS(v0BO)T$e
z49A34Wx+j}nxf|g$7*@<_0IU$-Ahujitea%SrgZ|(`&35)1GP;_g<EhB)cMH%fB)B
zgK9P6@uOGoP2A1J*{HwH0_=$=39Z~7atL}IjBh237&}F6B|Y~VS#42a=VA55xiaS@
z6xn(`mi)EJl?#b-nOo-YrKj7AA3B%ruW?GGH9gsCof;3k>JqP2w!SUcl~nM$OZ8T`
zt8-HNiJ09ue1UUI(A;Rc>4B~Iw6g;q<sR0TyPYWBkEoOt``vy>l0GX<71XZa(7)SY
z>rJpyi!gr~Y}(t!4teG#NurpU8QH`tM;3f{-Sns7@TW@9I^+;&hF%tg!(#@QO7F_<
zsSDW!e)4_U$TCn_S@zs;zxz?<aJ{$Ba!?W<cYp6t@N>O}OHab{@RQ`UoWiBM4GoH;
zn*7e%H|jR#CQjTgzM~?<fx8mFbd#Z%E1cDfBNSP9u4=a$ITdBGe5OypzO?0e)vZ(?
zzHFqdoyq}QXfR!9qFY~er`=4}nsY;a2>NpXv__g+eZ7Ui?P*j=Rft`i>h<=n>U_89
zYfSe+w`bW5a>|#$Gn)OuBZ52~dUFKhanAdnZ*N-<y)hd0DKz;Y^|E1X2$J|&K*<5$
zkVfiCfg2>l>67&p%4+Gri8t~kYks@O=K2HqYAxa=ZO=VS)mnIEXB<gYNs<{!_pky_
z!GCZ55J(Yv_NZghd7Jv~0;7;SX>xPFL!db6wXw^h$=P{12b{_e+~@_zV%jJ5wBu7U
zUS;ddWlYA=a98Mpg62=K`vNwEM^#8bPF?<0GQ-G{=q%c5hqBvjY}vV{ia?obQ^>&)
z)+6Ea%zTAFDV~7Yc7218$yBjcI4}Lb@F!uC%ne>92$4bD3F+7^sxCD|KO!xWe$zg>
z9l1Yry=_xU+G{|!ygEsfB?dgJS0wQyQ(I^}TryZn=tO>NR{?kaEj`j_?@jh!I={Kx
z4`*Dg8TL%>d5b^lMtMt}FybV~mFJ0h%}*#k*POm$E7rue+t_InQ8~6qXZFs<QeOOF
zGI-2=Xk<we?XCC4%zQ5&!#FF=&hLHLO|OuCv$haDe<!Gab%AN1ruyk(X9talcGBo>
zsi@_Hw~n8~Q)OHy0``i7$`hk$X&MtC_Dibe71bj}#ZtRk>%+=a8d0q`BWcyo>jAh5
z8fjr0Z)QRQYcHHF?1*?^E|GIVL#Xu{PLcM*dE|1UEqjlx?;$|^E_1A&v_Njs$+K&5
zCF<kT*$>vaaCmX;_0jqYq^HN)N*iyDc-kGsm^S07ij;GWL5mz~y<GzF3^;J$WPV3r
z$!zd)h4qIe@eahXi5d>KrOv!4rgx_59AT#5<^@8_z%GXK1NK{i+6z8|ryqD!d&FyK
z^;v293zEv0U$MOVxq?bRWnKs2@7mAs=ij<`fT!USgWr18E*%0L7Y~7%8(X(R{Fb+S
zLgs`I`s!Yf*Pqw}qc#W+0e4$tmbW1(hk%G^i1dNYMNvh*%Nq7y<)uF#0zr%SvqE3^
z+BrIiq}d@nKJ<;9yhnEe;UHQcpUf2A`e~*2cng_Cck9jn#o1W~wG~F|IuuGvk(L(s
z7Wd-r#a)6FDDLh~S}0K5y|@H-*WzAWgA~``5Fik4&Yih;=A856&ON`A$<EB)-~QIO
z-sgQ+Z4CQlt7f8rVzR|9g>Lq@uQfiq5a`-+<(8$Vw|aVdI)<q{O@gXArSKJ)Z{V;0
zBAW1Q%a9YnuIsOG7bd1pN=Id7Rrum+=ztr6qdrj5tE=RDdF4y9Qc*ttsFR9rcMl^M
zM|)L$Q@74wt>x@L%b7#Y@!`wKbNVxR`XVidT>1%L72b^cH{3WBgD0`#hhyr0bWY!v
zr-Gav{d;P3F%1Xju`1%X7;)XGI35{*wxenc&>0Cd{J72{7$}`It*J_XPo(eY76Qhl
zNywRxkz}Mia!J&mejQi;z9(4g-E{Y+Vh+izk+y%_;rjgwQJFoh(ePS%hsg$>JFceY
z^e$hsHW2#Nc4F>as%Vxu^Us;TJC9Q#&80d<Ole_O#)j9^!<q9^vqQ?B<i*kmaa2Y^
z>1VfsC#D8_omq7<22_wYG-%9eqe=O4;dA1~z^759=jD$X%0-q^U0JQLBzu-!rB3TJ
zpu+h-owF;CkjMk*R>H9P84&5!4T4R$6Ltu}d!7NK`%R#kDzS%dw*~tENcXPn8tBl0
z{i$H(Ccn9({}|)p|E)hhF#0o}lo>@EjgI}}-5cfR@8ES5ixE=gqNzyczEJZzGuvvK
zF}I~p-{Fpv*6%i{OrB4L&cCMmROi=2VP6{nTNQO{j%?HNYo;(d<#yb8Yak<j1NS{}
zqTd*(^>Z4AeaPYv=2g!TUhQxxy~oxFQcYbFT$DoKg<Yikg7?@~&c-Q34sRz%M3Pkv
zQ%hn<LW;hP9jCd#^<88tq||%unhK1|BJyNY@)g2~c?i6+148!Rt_#<?)sEj}_kNp>
zxYI~DzT!^o#}`IXM;Z*8*QrwmArrj*eQ55@s~-z~&kp`X6Zpp?yE*kntDHo;@VNEV
z<Cx+BvXA%xTWAMuv-iJE=^odqXH1AByCWY7hu{O5Nk`W_W?M2kC)<x)a%`>2;~b$!
zrbBOByL^~x<fx@8F}L<R+kZaxOb9m*!+qvI)uo_PRyy~nkxY5Y%2Werc=)-;Vof~9
z0u6R?EcYkI@xte?6Qv#qM#oR`Y}aONH9F*fshPhQ1NDaHk2`JbhFuKRl-q1qjQ6dP
z3$()U-P!TUv>M>`MeS^4zc18@^JC<Wnh9jW3HTG_sj;2WOeHY_qP*>&{;b>gsgwM5
zmq^q|>=&;Tj@O-=BJrIq*yzC0T!(u!d_yaZdB7l>dxIWoL6<yXIHjhw*MTBpgL}sA
z+gtU28#4bPOs|9?KG4priL4M$rjcgWJ=9kVVLE#}1K{jdrh9x{6A(!C$9nVC;Eq`_
z(WTPANV2p?Ymd5DgZ4|qpa6{=zM>5QEXK%NWY(=FEE!tig|XS3bL1~AYyRH)AwaM<
zj)*N^oF|Varq1sa(&&&1BU|<eXqMoa=$^S#xhQY&9T*OH`Gc{90lPREfI5%q{|ty=
z5cT$73MJYOB?>g~kBeZ)myTh`k8S14kR@};eG{Mm9f@bYYRyTI7fv7j@*8o|_zWn=
zy+L<dLd_N!Mu}Z-2HnQfOH(do=7Rt40n8;mXW#D%Q|P=1fw!n}vkiU7?ojzXd<#C0
zTFpvMJhJE+YT8}7nN`inbev4ChLkOhR+Q$!BO+c2CTSB?T9;8;3w*<IAX_F&3`axo
zhn9WPYqY~+$O{TR)v83r5fl<k1H<YwsswmiC3PJ}8@p#4b_9}hr*lio@i{r?xU+2o
z$pfA=bC7Da*Z**f{!j0Q3e}rufXOoeALg;S*j87)Tktp_D*cGPanIU1O>Xk*^oU}6
zQoYNpY-eChvx93n4fmrSZ;VP@z&uU2<BJY^3T9XBM|ezU-;QByW<|oWN4K3G>)ec?
zI2GmWE40AAxgMyK*cn-~Z+k#v*@WFkKrB|f<}fy(sbDwQNTuoiuJ7>xLGB;5b~wHE
z)Zhxj3zRMALDwnn`tpzQb7*l%88{fT#q~OAsiSv6PFEH``B%+Oj(2CbpUF6cw);#u
z`@oTu50|I?L##%bJl>VC;FvNvy9s-KqWIXF)k(I$u4IPEI=3E0#_=N&I+!AAV|a3x
z=dnvv*NirB_zqelqtQx`AM0!XmH#$y8+?g40;*YfZWf08%m@x;_;)UGD^>3o{#UrG
zhm|i~iE2*(r%}w>{uv+|b9T>_%Eu^LT7k>XJ#C@H8JxY&e6=|wqIJ5DPz3QKXv{hN
zAopheS0`jZ9-+adzY%A`744}u+Uk|dwV0U|@dZU-jTfcnnvRZdTi<W2;b`q~D}M9a
z<yXX&68;ndDk?P3nY?#L&xsQVHb>6qIaAH$Eg%*&PkP|WnSJ9Af9ZWudc-?{@S&s^
zrEs*jLhj?dXTKozWu-f1L~TxSoko$Be{cTk&RYMt#Fl?Q7q0Df!x3Q)NF3-qJzj|p
zOE*q{L%K|3+!UUKD^MfuKLmBBJw7ycw+J;2F|D|HF8v9Th}SCRM?=#rwV<au@SStc
zJ2o+j?WTL6+!Y-vJW&ZgSu0=G|5nUE@wKx(skowKa7>*j-um*IW7xJfIfCDM7f2O+
z1H*O_LO&aWDO+{u%A+B^{s6=Rg<s#t6t02&R$wjIgUj9txqSe?q=(O2Z-=ji{pb%C
ztDk57=bc5;XF!zE+vdgLz3K_IMRjO&W=LsFcC+)2S%OhpMORbq!0eZb8+?YKlYZ~n
z1LesM3i#^N-BTO9f^MzmRLC9PEn?I^iJwHP(--+YV{_^IFBJeebU^x*UNp=Y{`+ci
zoqz2tCH2C=Khusuwk?T(Q;yRt1YPg@)=&c(*-ee*-f_~Zh;sZfN`kL>^@<|$trBq;
zENrY!ONmU6|CvSDd<VZz-eq^sNf9|*d0H1z7`=rouZrfV0~R#d!^&f`m=~wOTyW=(
z0Vv%r)a#6k1UV2{YWol^b{6+8!`nwYOIr@1HJ3sNwar}mwq#uiny7NJgCE-<?){Fk
zM8^k;Tb=<VPFEh|5>K-W?j)T{sXC8W)v|nB%>zpa?kUGIBA8NUx)-Yj?YHKFuc}RO
zU134{!eiDO*pCf=Q0HT}ANg3K7lx03XUd9kf*^)cHvO-M@@%|g?!Y4>j}pYm0@<<|
zArJ3f`|s%yO`=$tkXa>{YH6uGaIfLvQhTI_m(0lcj0MwHf1jp){a*Oiu(EP^v76db
z+jn8E(V9FE>AML#*2#`Zco34wdP@a299_*kp>H9@yY*D{9U<6@BEe7ClgKro?~l+8
zS;#G0sFYZseYy?Y5#B##=XBHQG)U}}a`R?YFN7>B43E4Zmm$2<Ylt|s&qgiNC;?|D
z<ohb5WxvU=DFT-S0U2qydZA>sa$(8dI~uRWBt>9*3rFj>3oExX76~&*#dvOBj|^Q~
zgFh7Qoqx}9xR-V_0iO=9PF#bR^YHLNZ&cOKaz+Yi-FLDj$8Vb-R2S!Cx6V{e5MutW
zhd9YS)3h%Mzuv_BU76{R7`@u9z56PWGop1Afo^*;=z*M`N0d*P?PXf-hvRq#FKl0c
zwL8u>nzyugJ*I~P{J-Z?QVAZ>^)>d?*=MRu+c$)+tn&}Sfq=v-y22bz`D3Z>{jp0v
z53kg#*C$VzM)6rqVnZ7>M_J*)_*mDv_ocOItJ!yBB<}I0q51;tM`Z*yK^2wqvhr9z
zpV}at0jW!sP1$la9bYK*{FUl>IAw};7dqU_0OFgaX)z)ugk7sW9_?4Vw;R+s`H*?j
zXuI!v_&c`FbK~wg2l=RdWyUa;8?66*da%cSOnn9<BG~uQT164}uU)UjNN-bImC#A;
zP3@S@TLU-Nv@o%jzoKLoeqP+XRl%^7D=)L&i9inSkWy9VX2+VL`FPsh#(9|%9cwz{
zwfv4t0OjZFK#Ezl8NPQ!_`tl6jX2;ltIopU-}v`oX~7_!>Cr-4h4fYbFEs@$*3Ry6
z<MSv<j8z-@kwWK`_b&FrXswM0ph!Q_x_l*>H3eac4-Px^H?<N~%_oP>clXUQht+aq
zA{HtUr66bSOT!*}qfiRx{mA8xkA5xdD5Ygzm8rj%(ksN$5>beIq-d&+bVQl}(knd2
zUaY98e|lLb2LR}`Br0Un+>Cv!>3R*~#3?i!(QInd+3D7|TF;Nk@zhY;b`|hfQAwc#
zmqtXosng<IFOy~my-BE`&JO#C=DHN3bK@)Y*J;Oayf<+T3Xf1rqD^||$`n>RHPeb!
zoWs`1nnQoJH&-|EGJChNmD`tjIz;QxWi^ILT0-Y*d`v?e!r5qaz5d?UGw_3}$Bn0s
ztG_eUw<G9;CEGAW#mW4Xi3Z-0YUud&Zaao0Do(w5b?aDRh}ME+IDuJNk$Yx$vaxHM
zU1&+!E-)hVsV?>%8^IU;_a&Eq$-U93qCNxr*u6w*g~M8;0-D;z*bF&vkH)@Smxjk~
z;g!p*Dg;$(8>%9QxSS_Hto(w}PyBXm!AsUv`CggM&1hLNv<Sn(t0IfGeJ`B!=exZJ
z=F_Vd*cnOg!06k%V1w8dq>4Q*7>_uy_g8T@`qUJ5OPX_aQ^P(MyL)(XwfEM^-OKSY
z4D2vaj}U|Y9j07m2{GMn%HFPC!*8djl}K8fkLTf0Y9Vh{Zak*&<xOWi%E;$pypU#b
zlN4_J3)x_XW)4DXyTe?3FSNy(j^4?=0h4g0lFyYCb4q;J;BsZ_oA4_hYdxE~o6@CO
zF?Bjw8a5RyL{J5Bt*9iHQ_U8j%;=|X6<<IE0<tcKoF4<${Df@e(bp!SfyrYx3m`{_
z(nGBXe+oP7+9RfmmhgW-L7V*;UVT#bI>Qx68ml99>jvu?bz731c9yxeGw6N8cY;@U
zKg675+m#o3ywIB9<P*P}rkX>?P-Vu5jsEm<O2$9Z{q*&y=DXTK01YLdXj?_C`~#Mj
zzO`>;+0f!6ujr5-k=yH#bzfKKBgf!M+N6a2LSy^DD{!G|m=>sPC~R$4yO%qMVG%)~
z*S%cr0^^7IIclv}llWmqRIq+znU;GAL?uaxRsN`g-*A}As!O>346tu%k4`zuyjA20
zc5fsp*8Ky_V1fxT<i3|R^c~bgWk&zVy)g7h7uuAcdLQJZ`_Z{}r;GiT6<?R3!W<l1
z(-!-wr054nyiRO*6^s4rhYzRX@IMTW3U&0qR`aP5E-GSwe4_(TS!6{V0nS1O1&DI}
zoJ)^por&t8HQ-hIt64w3mLu1*+P0x)#&#i|=30E^n1Dlh`Fg&<HRVd3Brs;&pxV3z
z*IfOaqB4z}2oHBWHT7u1K$Jo01U!d+qRkL0D7`yS`cnY^{P>e-4Gsp%Ykag9b{T5B
zAU;>e`M+@v+J3{9bxrLblF);cIfj1_MIr5k+*DcISBF+p_#n(Ch(#OUHk;XY0Ig$x
zF7mD{kc(v>myO@9=6k+V;B$nm+{_EKS(T-Od<~)k<#$`-(?@9OE`Lvpg>*Pg8{z++
zr^~XK*#V)p%-9?he|J9goS<j^W4Y{!VGpeQ{uT|JprmKBiks&v61IPHF$n}cZgnRU
zDm}&=u=Sq)EjoVct__s)uw0#RY9p%}>)m#iYUJR5^J>JZDexjMHzFpHFS(+BTFA6~
zhtlt*y^GW?_vILITxS)G+G7{GH)gx)^zEBbOT3wdC+oiyZar$cB60doSvyu`o|m6^
zVP+8Q@(fQ!=&WO%Tx-G#Z#)GLkn1Hrhx{MjT!tvW_)@9Dx~8DJ$AG|ZU19hUc@-nO
zoE}L_kB)ql$~+E%l3h*a#RYkJ1;z5VOvg+|w7OdnJXY~bOhIxKR~quvp?oPinD2w+
zX#fCxn#Avb5qf|}5Qj9&<q#Tf{rCw!P=aM#85u#5;0zeyCwB^YYyibq4{gL4`ZdB;
zcX@{)0X>%=n12=j-QyrVN=Ou2cv8E0laAJ7%G)JR`^VC4$$ExEC#5>HD8D=!G1)`J
z&PIIo3}}b%fBv=#eeCw3E$*)XDw$W*<B((xIcrZ)YrK5DSaSZ?$nhy{Nx*h+(RmM(
zzgpmDi6tlCLehD~Oa{u5L|OI+scj`|szl$ux<?LeVrEITl)5NKS<lkCFFP6Fg%k|U
z*jMa|0nPc)W{O1<-^zB2wW)iAm?sd(ZIvk8=DGIL{2uZC^UcYzvp3d3=n+o)r}?!(
z!tquJF^k#aHp-rDBPxxi2&OTN9a8FLG8X4_J9yn9o~Pf-X8od~O_+c#_l>}$^=ZjL
z!83rTdZ&JRgX$qO5cX<ty{X5edL*DUV%Tw%#d0982m-NdAtc6I#wwnhfR=G6e+RF%
zW_ToRU&ak6b1$Qkc_aw4SK*2^A&yVsIJ*{2PN`>N>~cLAaVgf!-wy^W^IS?fx#vo-
z`{_?X4MOakP%lXFP%~{emrT)O9}0mh3LT%pN2`BzCc&DT_$9~Eh}PqYU5Gx+$|Lrh
zaXBCF-9~%theqBi^dDMtyIekP!zI>?$!iHD-chrtEHj)^XcC3-$@poObekZX#-+7W
zK4cm4FRH!v5{NHma|tldKuKJ9?~v(mdeO4%pzn^ZcpQ$8i!`wn2LQJEH^phDP!}F4
zQ9$ut1FDhwiZ5II%B>x$<2x_ZU$QBRwD2L`#|qSV7ONNN;ZT~|+vjVWe9gpVL~->Y
zDyzfC$IbXP@rhGYDrEH#*@onFqaB}urfTTg_vUHPF;mCtnSbSAeZ>5N+7QZPmL(j0
zGQ{j!S;6I~9e+x?T)>@>Yc4~ErrrpY{2j*Q>Q?fGX{q@B-sC)SdqKTz2n0JDV#^;Z
z;`faX&fLg+WwS7&p%N5L(QV%uK+}MCgDbVIDa=t3PW)mM`+Ji?^Mv1=k&#KAk)hOA
z?{K^r4B}kl*EHHKq9D;Q*yH4=A6ajo>qZ4D{j3p=e13F^Gft?nwY4~RUf%Vw_S?O)
z4I`4ejq%BQ(B4Bi*R0zOqHo0Gt;N~t`mxWggXQX|<{o@ByRFWC{c=Ud*M6679s=Pz
zlNu2oQA)l{sz-K-a_l{oAK0B*Pnqu=Lv}`lIeMs^H&a$)mNu9S3o*q}Xr;YzYOB`*
z;Kr$|AV=D|Y{<dC1dN@Qs6jJxzhoXx#sVf5=_7f70Co7W<9f_J<_w6|Gg~UaozKD{
zaCU_#Ye1*rQa{*cq0v(?)>UoWMId6FdzM=rzY;vKU$Sq}j63(STlAv9bJ@!wbe9E|
z)unG&EWT+@BCnwkiaM2SavQv$?m)UX*$old8*7#Fu&q+-uqT%KUZEAghsp@fBd3N#
z_V|#aw4!{J&<VTY?WQ*}I_^`zUEUj<(-9H0d;fr!k{a5;X{H{A1Sa2fAknIB%`Mn^
zH^z8l#)j80-!CcZ`ydZ%;qUJO%u*_ePGr+#9UbSgT~55Wu?)0mRUg#8YDHWWNe50Z
zgy!%fH0(3p?&G(K>fNAU=C5ax+Ii*3-m0K_K;QHMrCK=r=<Pi!(%Zfg{|K?&EVbt`
z#Qwr=p5*f>4xdG2PnF?vcPD$UXG}jUJ>phTC@n&c0a%#efEL`Fk^E!pv#hTCU;hcS
zw;gV7D$D+L&<iAcN)z6QF1Phv4n;FgvhMRgSMX$YKFj$gU(9Mowz_I6BomB5!^zr_
zl&(bQ`n@3X^UdtS6p*rHSAQKRn6~3jM8)t%8WmFA#$E7@C%brOJuQg%f{RdJ2+tXA
z-;M@SUfHh_VKuNLU8r~$<QGOpx)&qlVi&*3{X6MZSxWQrk?<z$cjCZ@cT!&reInOQ
z;C<cU0d)=8oP@AUeX~hL_Bj%tDQiGZmheOGq=k>O#A(y6)2I6AQpb{I)UVyMZ)WkC
zPQ*oj#)ef^`5o^VvJD_i#ZY};mT71C1)Dt<RE!Wu%6<U;YigPqhca1j4ACglx<NZ?
z>bYe{$mA*}7-R<53QX<R75AP_-aOGPd=H4ZWX>6`bFRV=e(5{Px{+p9v;R$XiD>pX
zuY+fD;C=rnza|q64~;*Sd81&Z)19WQo?<J4@W#qQeUPT)=oHpJyMqDn=G}v@WF~&l
zQ>z}cLtL0~a2zzIDd^^iql@37I_o<+cGbE?X3~Klyw`|8gFMfGk{i;1t=s+folK#F
zKghmTmyFYO0`*XAc3s+a>E*!_61!q6k1PeHqz+U_gbf+CHyL`_nipGyTU4YrG~*cg
zZPO(U9D;Dx#-}w0Rm=O{*zQmocYE-CXuX1QDyiDL-BIuUEBS?3&`=%E4ilY$MmG9+
zjZU%3CoCz+gNc_Wb`Qu<_QjdA8>SK7A{&TIq=v^Hs48!S9k_ASRzWEbokc_X8XLkF
z(^^XTEJzjV72hU^4p&UnYQ3gr&r2Gvnn?aO38ickz_gkRv1*-no*(d+T9QG>QlunV
z{KZXOAq8vpeY!fOyL>Ng=O><WAW?m5r-#DxDc>@VL?bB=A1x>U+bD8m9iI(ov;N03
zU=2v$L4s@vxY9oZR5mt6tad1u`VdK=;Oey0NfwVlv-@EGiGI^V`eF0S98S?M+qH9e
zwGH#Y#+$X}4#tv0#ys(FdPlajTGC|opHVj?eRy>@cLISK$jZP$dtCk>pjlG>9wocA
z@h=kgpL~Qkp;_!Fdba`9`|Ayc0hFA|uk`ytY|nt5{forSeM2bL!ozW8DMXCAtQHyA
zeY~W<{~>BE32x`Ipw50lMyPLgsny8e*&Nm{JTp^dkNXV3t&}`tK?o4MK7R&ei%jp~
z*mbo<tUM?>M5<%p*=uT`h9(7J*5=Ys%!|FoE1d|Gx&^1)3l7f6+ka}^xDKYdWN@vL
zCX!bBV#}mub82$IQ7uWJbB}aAGL2SF8qMlWCafuI0>d-PDfMDTp(2ZXh660<3M6IT
zUX|a*9cxR)nP{T!T-hq3{uz4sNl`YfZ$`?&tbKfsdwt&lQwRP^ocG=JEfk4}8WPE$
zf|_4E7-l<KHhd_OLdW`q*F(W*g!X%?#P?!|qTw3h-9EJKd3fJ#D1G6DGDidrZf+Yh
zVY73&t`f7?gknE+Gy}0^;8kn!yS)A!|G4Hk9iY=ug$emtyGE?cVIaOFtb$w5*}$gV
zcaMEM)9rrg+=aViLnOFF%4{C=z5;ouXr@WW?>o=Bme}rxWyfk(Ftr+^+W(Xg=+U4X
zT1?p_)Hb*q%WY@OVZK2iZEhn@W{*M3L^&zltTnA<-G;la?DT3Lcr%NeC0<1YpXzLV
zv!I>3U|ZqjZwn>JUe86tyAd)0qAedV=Zrj=Ymmq?%oJwXk(%OTYN6QwRh7R0k43CL
z_7@h)nNzq5p(3Nm+kmWF&pz*(;EemK)e*aom7T3+<xDwHi+_5$G5vSMLYZG{P>lm;
z?iU}co&l++yMx!?cGnG+XN5vDQc@xUyN+=xN6mF?wvJ2xrQo(%`_@}pSbKKxa3@MJ
z6jyQpRnfvZB`*y7X`3#cT7-|$+6NkwCst_^x5k*F%|95TTWRdPlVDcE!FWZkN(vT&
zdkxP*PEs>NDu1tt<4S)Z$COaE!?LHw`}E^_&in<+C#&J=@04hubb1vv$Ho=N`#R;r
zCK>&Tt}h-u6!he6)*5XXM))b<iOubzNRO@3GIJ+hW+r;@;*Mn8+*=y=C7;RP0&m^D
z-|tzR7Zx_n5-`Y#jH-8`5AalyPQ?f9f4)?ug9kU#%&zoNr7-n*;KY9l#n+Z6+%i~H
zw3XTuyx;MUJ5av4@ahy2$`zu^Ci05aIgRLSPsoUGoZ2mUbl&+a6iXz}iBxXaNPXK<
zspV)eJ{Olse4@#ScS}r#wTqf9H$hMT<P^0;eSQ`3J5=gQ7ArKZgqud~<~!L)&H7~*
zy!C|iJ0;M8Q9~A81C=@|<CSC;$}kp6Udh4xTbF4{eO^$n4=4?+^XNI@bQU49*-{Ik
zwDmka%iSQi>Acd6U~QFHy4tFR81XbU^J>_<q@ZA({nfXv{L%nHqI<-UO>B;>4j_V^
zrBXWzt$O-TH2j%WwZn+9US!=wXR9iRv}SquQ<{hNhMA&HX9*_|!YkXkE3)MgDpcBE
zBex{Q2$YG=3`%{SP0WoJRCr{Lh6I&9ci*WDZf-!1y<w@nhTF~N%2%nQPFR!jPQSy>
zGi>d<Jgbz7B_6i@hR9VoYW3cXHYZ?ts@vojYDnq`Tk;pYy%g(mK?Y&iKQ3GEnutdV
zn}QW0P*^NObKek3%3mqW#j}gSQRxmreqFB7mn`+eGa?;@A#+2TM1_DU4w|1X;wogU
zc(!L7IYfaH{swEz^`hc8Y*$C)*S#{iv98;1Os~`>B_}kSy~y#BGu>RL`}Y-<W6Mj!
z^@A3-*QM=$57oMnx3(?8<f=@`+_QI|0ZO4UIc5yU#9j#PJqn!`eTQd&O~#7UpPHAX
zPb?976xqJIvy-{h%Zn0-rkOkT$5sR~*6Gga?G-V?oYXeQ--0uZh3$OlNxJ28t(A+A
z--p(&r4trXd#vV_sWX-7_2M#tXkN8v0QP|9XqWl-*?Axxr(3M38y~-$>J4c;8`kHF
zXwvcMqO622YVUH5xFQ_Q)&n`#Qk{yr9gvfNeu9AF1N`)5+l1?MMI>H$si_V)G>8r$
zd@5H}`-O%9vuL$J6G`l(-gdI>I5euB3t37`gZz_hnh#-ng4n|?=4t9|z*?KdoYmVZ
z1J>ce*ZmTc!Dk(2qlQlH&@uhH{oe+s4|bZk(`CuC<pYb#Mls1?&xq~9?K4_ywhojL
zV+WGMr@G_mueQ^h*7IOdiZY$%ez2F~<evOF>Xy}bYzP;KbMl9f8DWE)?o+e=GU=i%
zl!cqr52MpF^nE!sp`~=%vhKgM&f4WCklst6VSqH1?s37;JWZq~O~X7>WSkEq-A6N%
zFs^mfD*-)DG74In?}^&W{BcZ*Y6g!oOrvH7mGLu-H16K$cdNux&rYWIb{lT`s!W@<
z^;~Tlx1D%>-rV>fThpj$4PdHX^{;0Dp%Bv3IgHbNcRzprX&+W4KPW4tqbj`Qkkxom
z%j3DTE^zxDm4N+aRQQHUp>J6*KFgO$VTI*a6J$dsqnWg)uojYm_qQcf+%e9-8n4VQ
z1+@r1MfeU@sqY5#{q};BhdK7wCFl*)nnk-_@(3q6qeUwLQC^1WhdCK`K7z&Kjf|j7
z4ik&qYa^FjLJ`Em(khycQ0UcKX60$i%F{Hq<F>WuzNUR>Rk3%x4Mm(>tz50FktW&6
zQmq|dtLTN1!5!h?hPg}uV1m5CUrv&sk~>LQmt(k8x`^}gl-=$r0aE$Z4n_3(c*VV<
zS>s&Wcv3n-SSy4fO%Ryf$UFt=&3rI&H`lknrSB0=ys1#{WaXan^qgC7rL5Nu%4X0v
zwGy0kG^UC!k^06nR>vqE^}a$6%?akWmK$PKyLW&T16-*3FDl)7rQ?_Oat_SK@6|%K
z;Ug#Y2Ev4^d7mLRq3?&Nv+>aBzKAn^d!G%kY$O?e`~!7tJA0d$wYbtLy?9qudGxf~
zRp$XmH8VLUGOSb#U2!kR;lkiiS%XAAVq&L{PfZmC%48=OhYE*i^;l#+9`DdIK~v#;
zY*13mL;ppgD77CnQR6$U<?o2w)3vhRC}RML$k2J+VxY}u9n+nT5al3<L%oucOIaD<
z`%5gKIM53G>z{VaM9N*vHsv{36;4%E_zW0mUowL4wZqm~pEksH-BzCghdT66Moq^o
zU6*2)1yG~wrbxu}Y1_2^x~a#{Cnw}$!ianZ)V+arKk9eFp8;KVxt*IE>u(V{BK3%5
z7bIT}&#pH+T|<^FqDU}I(FO#iSga&=(NlP&(<IFp(Bh#}#Wj*m8UmKdQfn-3A5oVV
zlxU^XgshPKO8#zP!MlSy)bS^SVLw8b&QM)2+2rVT9?@S}U419vrsj8s`d#VU9v1xE
z7F5Af>Om;OU?cgrd-UfUrGZ*j2+=dj_<Mg#!fn~XFlf~p^xpM8q-Wc;;rfoX7X9tZ
zv=LfET1z3vk=q-O`!~O0xtI39bI}@6pD7c33fy;>V3`h~ybiaI(rAJ@ns4d}Ebyqh
zd&@-h)$V)`x`kb<Cda{+EqnA5HPAEG{<cg7-lY669=s@E)`ZQM8Rs>->BlipW_M4_
z>7CCqC8j8&hbV02&bA`QuxfJE`)}uRme;(4R2^UT>gtDQ02XA<=g4p}c4#cTkI1Iu
z&evwV4Y(OC61Y$4^i;i1UXbB=>aZu$OBjct6fx6LuPwJGlqoOi!J|y`DcgLz0tBO8
z%a&jFk#*l$*Q?1g6MY@NKohZ{<SKIwT&QCT(I~@`;>JT2(R=$y$Br0gZbB0Oj<7St
zeO1sc`hSLMrq2HB?J@?XSX~h#t8-Sw=*hQ%{u@!TrlJ$_SmnB+{vEFnmA|os<h+4l
zf}9)+nhtA&^NvvI?F*u90B@y%?ha*(!O!1ti{|C70|$Q$#W~q6+p@zVo+1%D%>@BJ
zyHjSkmrt8v@e~`Pm{x(<pH)z|(Qb3(>q1iQv3K_MJuLBXV>kXM!sMMtG!BR{^>8C*
ztz=D~_qb$8O@hzYqHT;=GXxnogrEFgx@pLS3;7WD^^|ev;zbTCn9@y-$hX0N@X?U>
z=d;d_i}FS!ULP~g7wFzSvXQ{;`ey~wJKbg-C|3I>3+&%>t$dyM=ba(`kn+>!f}1jU
zV7s7Q6~(|-{jpyx8+{95Oi7`i>k1+}?=(_^Y}=n1or%1%Tyz|H%ycBHkdHy&tJi(T
zJt#*o$fusNWr)dl6EhDZCI?3Rj+|_|8~a{oaT7`UyZ^1mztap699R#4)v0*zE;pg?
zHa5Lw60H?T$iTJ%_o#@r)y^Y83^CIyNHK!z9_UCJ6_Bnwf8Y6|-iv;a9JXu1>hC8+
z+kBLJ1fBj;Hz7PNAGPA4rlB!Dpnn(oMn^nPdkWkNahRm>i=}`!SEUsvvwyl?AgL?;
zLmc;B_M9KR@yPqO+@ooK!#>k&HPaxj_f`{Yt~i>bhKH`}1H-&gv~GlEB_Uj_s##X;
zR`l_x5-P(1@2=tt-C8Eih?W+QAX{G=18&wy{+^$m(HfDv(XyXvA0STnR9X0K{ff|G
zm9^QhYs{_Qc4hTT-Nym<7A$5-X=!U|Wo%hp>2`-yect^R2fi`IcAIRzBAZg8(oebX
zi<33POQ>c=9FU6v<Hy|=r+(iK<><-4YhQ=jh(Y(jf${*AFs>Y5^6jPfgCUaAdQtsq
z##{0zteYbW9WOkP1Qcn&H2Tn(x~M^B_^S~+GQDe>G4-R|r*saO-R}9!)hq7N;0D$P
zOK^B$y;;~>^e}ps&-^osS7!HeNYDm)dOAF$lL3uyy0R*3n}`pdc?P)n9@+k;rI7jY
zGa*sB&CRr%yP2;`=|S_Fr52isJQ`~Ia9P*IGkP)IT|V3;e4i8JR(=hdxxYA~gjuD7
zD#@-ozRAqj|LDqQqeP<#lEx_U!E6zY`poZP@NH;K=IQ?nWYh@zTODr1)J#7ynFfh;
ze6+lOnGLx=OBVa+rpt0lSnNm17&c*Ynbq8WT$^sMq7vpXDIGs(ZVi^t%_j6N4xgWn
zhzl4a%bFmocN!J0baENj#t?L98XaB4WoBk!cvHjnnkwR*E6!VF@g;Z}#%pku%DW12
z?b@d8$jq8$W^EX+s1y#-)BX5Tjw%QPjU=Wb_Fe=;FP5O`A9MURv71hCn`5R^d6szG
z%i>>6XBY|ue(Zf_*!pR=$yd68S;=RjF$~f=Of{knv@j`Py&b{g7~4ty2Y?ry7Wcs;
zop(>ab?a9S9xAC!!(`%{C_6k`J<0$fAs93ffElrdz-hNPZs=>{s}s$c%1zThYYSUa
z<k8LO#KK?j`LGuSGkq^EEP3_#3<z{OVNU@u@TUAZQrg8iIaZAk0tq$#TPG?jId;y>
z0XeQ9{r?XYkj9$Cmw~THaW)3c3Q8rX=jNtWX;f*jv7$Uqav0VxH`om~PF=Wl7Edel
zLWs?xKF6vFU=6I5?iATcsl5((*eAuY*b^eJw@bFDgT&7b7njWpYYpQ?;fw!jB-7=K
zL#qZQbYF%-K%W^e#pnYSBhmr|99RZCDeX^&%WZ4wZmYI>^Sd0I*)zcjDPZD7hzVps
zNMnrb=4OlrN%<6~DMhYTyR!+Hq^A1#$8IE0Stb1Fz<2t|lo8AvwWF>Tgu?Qs`qpX1
z&e29{f^4{P$;`D@T0_{&fJ*@H6AgbZj~Ci|d^tDh3TSe1bErRhLVwQal_-@1>t=nE
zp@R%0#}9h+)Hs_-$wR;^MJ_Ef7Upm=F`2qXlrdU&(ki%7&!a-(AwL65|DkV%3?Uhx
zVmqGbn4sa)WN?n5@R9b$;AulMW?aG4+!U0f!hwMT?q!p~4mpYU7Hq7>rWw-->+fGt
zVt#QY{JPju7J8Se_Axx<AZ8w+*F9-v;e^w;5r7(g#2yFta_CY%I9znnxc&B)kXfyV
z?);cys>k&6Jn0Z>(D(!z(7ly}r~v2UX#yn_IrnbevkP?Vc)5TW^RbIgkY{-75;9zE
zK2`gXIHeHZEaD(hBjYu%@;0Q~uY#=!{*-LIz7<oX63>ZRTqnW#-4OqvQmr*NL4<|5
z<m|6e806~T(D2jo1uPIKoo-K5FagD0Q&hTk7uqo0C(!e}-7hRi&|8m??|(lFoK2^}
zYkl+e*OvqqQ`wPq<-KxImn8?UcJ3+N<amtI80q4|Dke^1)r`6X6dEj*{cN?4oj}v}
zrK*ju3~%w0z~LWs6laP<^OD07nKkl%LXid0e=nT2>Hl-#R0saAJ24T1wVi8ngZHWf
zxwb5Id>J@zX#2osue`FVvOJyf(E8xeW=8(Vw#+JCgMV6YZ3%!u<u}eqBNxA$+&h??
zAfJm=y;K0GG}+`P2I}&{@qJkKS3)m=YVxN4M-UTn6j;c?M&LXHXwM?rRd-;2vBRU!
zK#A>L_5q@p7CNT2q;;v-opuL>W3%?z9gy^M-n9?VHw^yi(US&=if9*H8l34ijC2Fa
zLm91oYuRQkyQdoMcA`d6?{&Fo&0fhTSbp2C$e>Y-ct=FS71g_PFPrd`xf>a1z6S?(
z?9p2QZ1flzU;flSx&}_6urjNMqXnU89Z)YDofj#Gwed;g%$%MDw+luVa`GI?>JY50
zH3$u{H*(<H2i`U|4T4NeJrNhiTf7O`T)!3~#xZNO=u)%)e1kyb-5Rd!x=zZ~NVrJa
zaZtaGj%T~mh}!%y|F9IWeZuDSscBt6!gNKiWIQ2U5AXiY5)X%2;k(vMp)EI>D8ij`
zjDGtTnL?9ug>xqn*}wUa=uWpV=1DQNJk_E97GAm(Z)Udilv#W6@nfv@w)v=zrrM56
z{3p$DPVP%-Y{t++x%L&1b91X#W{m9Kp&<-!0m(4jpbnIbU_}p1pfL5%*-)jF9kRnB
zA%+nmF*pG`OJ=c7#?dS;Z)dD`XQ(r1$xBeEI7{A0h2<wZeA&Mz0<o)f+)r*m&YZoJ
zY3{qS56I}2|DIxJy;N4l(}#FEF(FmM3CMlfr~u>fM~I?o6Q@VA4O;D(+FY%qYJ_}1
z#MAb^A3|-}zOpH0x^;uAY$V7`uJ_pD70HMPkcQ-i+$rE1=T<7NY29su{S=mT!8_4u
zW=4oYlR$Xh7oP=?IT>Xv33=75#yfk7d4J{aac8xXxwy?YNEt#Z>um2>vg#Alwnj{X
z_4jS@?O#QX#&Ug(Rt_O2+kb7_E^mGt5@>|lT2z-?;LA{c`g2hyBqKyvPkP1!ZR+S5
zCtJ8!GnA>zWt#0uB}vX&(aNI=oncm(inB$l9v8hoA<Jo9bKPLOOc=AXp_bg?gvgL^
z6{T?NW|tM>&q)Spm%WKo76Wm2@3CJv?R$N5f6`HZ)E~OeaW{pDIx(-n>+A_e5$rl)
zksru(S?i-V^lc+aQ`dD#R=XVA%8a(S-Pu*u<w*;Tx^@&qS6wMNE-g3P*!IWKkFBl$
zgrLfU)gAXaYMEm2@%<FFcz8T-KEMl3>6x$oE;nSAr*@_K>4j&=$lV;gaUZM$yZ`!o
zGH2YtXh^N2ReEZ8^x=P_tZPH}84{ZF-NRzrGV2AS@{toJyt2I&(iE~USsgGHTbwf$
z9e4MJ)#hej+cH}4Ecw`(B}duU<=1>t7QJ`{fho_fI~;9pVWTA))oSNK-Kg?jy~4ta
z+TLBThewmO^VN|8%T%=YFaugq^O!t_HpvxaB+8Cnp^^ApS0OBP?Lk)*2n9dVU7Xe8
zP_XxjNM?PPG#c2u$W{>A99y;$aM7Gm_M4ML>7|H_tq-BXaSrx7i>M%cF)C&HkMLTz
zF&LI~L%m4e(7PR;c4W=);q?J1WP%wPtI{$hb^5mc{0h4+wj|>9nT{BS^ruY>GWWbB
z&ATM+q`_EyC&#_!z^y+Htc|gmtSvAZJN#y6qB75LTTY*fHFu(MZBg_LxjemcyE3zA
z#kvwpLMpej&uoq#8=A9E_ry~!sD(H#foQdZ&M5rH7*JM6_NvN?N@{iw?ucJ4Bw52i
zd~RYItT++h)#m#Fi*pc4cM^E$84%P?{qZFms3vbk#4m;aVacVjRk^iBBQfyy^jN|7
zON?(COvh|eJbAR7Oq0&iBKemYSxXVroa+kQnmNR`KB)AWFip!AWv9ZqNEI9Rh_OEw
zOEW~q1m5oAG`zmxK$dAjOV@(i6Z&S5|9gTD17ME4w<0N5l%w=-0v(9=?hqDs$#jH0
z{pA@jXnoie){hNQOi>7Pw>9Y6fTWdhuB?2qZK#ZOVZxR;+ka~pt)LJ6?x*T?##%^1
zInXKDaAjy-J(>YZ7UYB36m;BLu;m+H5LNvC%!9`D1yyJK-NxTe8?G8xQdQipTWy`d
zf3|$u1A~rht#Rv_-xBJ|$$_oBSp=prV3&V3b$C2Wqbnp)gA@X#GuE~?yWxdc34?z=
zkF_717S(n{47%W7ec9rpdKaVh)AY5mWFrRJJDWIfj}U$P6tz>{_or&y?XKgYT4+HR
zp)cp&X$6g`y|$qGjXP9XdTBHX*_0jBiM8-2xx@ZRs)-Hc#)B7pq+2+Q-BKjdHDXnb
z`Qw0n-0FI{GtXx0>X9@*{zGY`B+0-ba#_V;@6Ea!h`*-IS;+77H6onlqHK1WhdmFh
zC+~7LMCbaCfGl<7M<s5omqi)nAyb8`!2F&8wa@QsZ_!WwH+PzkCm(zsUG51loSYo0
zro(I&90d*N0_!5Z`hG*^-fM2v2~@R1naC(+ka>ol#yBdBB-yk@Wf2*gv?9`y(wbYZ
zuViW6tQsn9y6u1Wo*7$URH8(c$Ct3wq`12~(9_f<FpL&f${2trf9IW%>2$PrxgHG#
zequ9orO_65PmM4xIXEo!k6#3;XDZ^)v+t`8JZ$W4Uxm5f2y@M!M%UKBv=>f9n?}ud
zz~IW&HBe$oteZnio!bm`z6A$Dz=dbF;$1~!1D7%x<A=enOWDNx5P_>ilWtpCH*Qs|
zKUzPNUPOs=_n^t;7f19czQ;Hw5|~Y;gjD(Y(V*+|)5UDP=znoRfRh{l75`(tC6!j5
zbM8CAHQ9S*5ckRC6+1E!w|n5hh<HxyK<5ensrwvy1?&{-5IdxNqQ3XvaBFN@Jm1(9
zTjiMrPwv4J14z&-)L_hzw5RT;u>vnXBb{xRC|Pjtd3W*6{FZ;Is^B(zKs8L@Y4GX3
z+JXQi`|mt;U~${K`@H4)@Vv`oephK>XgKFiL*?Y4J5J<qMr-4}=jjgkaDD4!y*$`O
zbv2#EVEN7$=DT;Bq*q!Sf79t|Ry0aSr832G^;#(dwX+fTbm)YJba15pbU%ZF%fk+D
zCGa<I4gpU9&qat$S#oYAv&5WV_tO^bGT+*<C0St|rebT};tj3God&mW!`&;DN}eKR
zW`%4K&5cX(bv?3;EB`|lC_jRb;2ALd7+OBIUEp4-S~uceZFgEU_|#uR6HU&h9hB7{
zQQJ-=eNr)M@z#qaKX?WDcddP*Z6(B!SZ^~H$h=onn=O{3E?b|OwD|4RVNpF6+lk_&
z?cZ$!mtt|D4`*pf9``kkM?K*vBJvJ+F}t(x4&qYHj%>bau@KQ*?51quwZm2I=z@tf
zd-4jD*QXgqea*+7=(OXKS0~5vaADE4^;c>o^qx=1C-dL!gk&~PggM+IG1d<0xb&hH
z4+rv!>zNs|FD5o+VK<mR^F+Y3J_R;Aoxy>tA_M!Hq)Zi`A?4NKGUEDLF8c;W;j=+z
zy5q^}+9b$i4*tnK*%{C{AJ+u}T*Uj<)SgUL#Z-tC+fcT<7Wve|+~HOAmdc_0zRKWM
z7%MmKOi$D9hc8f)LBkh>gv@b)^Orbh!_#NMULDODip9TzKL}}xCu-*({Pu{@Xq>QF
z;D&de@{XONUfwTPRGBDpe0Cx>`+Ap6kR?cy7#3>xRU<$7a_QCH{!^a`Qp&tg7fanh
z+!&FH^sXYQBh||@L`r7rqw8_$&~N0Y<R{4fqb3qXAA$<bL+%az?^clx&7Hp=YE~3h
zV>Qlr3YOQ_8X2RIzl6V>xKI)ANapdrCBksF&bH8Y)epDo3lH9p1i@DQbt%8-5w)vk
z_A$#`>=}~I_6(E5B>FoV^2!~Yl)rI;gGjI7{i)-ZJ^pGMQ%}DLS=S(NT}vFwz!ptS
z53OR!T^W1kJ>n5>Wo=|Z$m>4&(cK_$2W;5bWN}K8RlieNwBG5G49*2Ftu=}#)rzeu
zHXoM#D;OCw2L0^#Fp@7woYspNbxR(cZ<!eO+cd|fzC$@TOVjE9xfoi9p^kVg0i+(e
z!#3ifu;?;MXI@%8ni!soQLS)e?&;4(wq_-BOHb4#8M4zzgXYicX8?PJ<HMSdQFiBY
zQ~~%{CAX@o@UR4ip<p1R589&gX{Iy-cAE9cI2+o?`MWp1w*w>CsYi+F26L>|@2=Wc
z^oK_Llzy(Ses|>F`8C<|uGmAt^^e*??r>r*tVZ}}s^-X~euvZnbVT2H30*>+W@t>w
ztP!JRv1E$d_*xwF+v<v9#Q*vpQ$2Fohv`66z#ZzT<9MUOFgmU2*mjc%<ytF^E0RQ=
zcPuUj4ptP5$p4Z{{i3O?MP>)p`3R;v3Gy56*{GWTs;M;Cq5Te2@U`>vw+_kDgIA}>
z>cQzR<glSOK8#(jo<*`H`B>)nkKnSTn8r`Sx2Y!cV(_GgUxNQ{f8T%mM*lOw=$7)r
z$m<)qUu7m}ld~I-0gl=ZH`+Zt8j#nFI#SR+j;YV~UQnP}OZT-%bl%Oo96Y$eHDT(v
z9<z)drV2iz5IrXwUC6ZD7}K6nKUEE9xMBb|fI6`rV(MZ~Z^kfrCjKIOC+KprCRgu2
z=V@NPo~JO*xH0QK&kwsxPCD#Nozo91E%6ikkLWoo24@gqt-cUN_zE6zaQqKj7)z^x
zw^9h*N|9W)0Bu@>Z*_4$rOR0zIPKHwsTWPRwU5TKd@CDBDZ)gYe?HD-cdqvIx1ak0
zqnX2-XMk=YlX_|dqb-3+&y89L7Pj0F&aX)o|4@Wg_i*2<c|7F0cTRVT+rab+6(Uwm
zp8UsTxvF2j{a2<z#^{4iGN$m=v^sZxgInq)K2wNFj_KN><&K!g-l~4Gg}$g|csL-M
znV-TpFt8x(gTXcB^4WcJoLPhNC0(jr9K#!ZAoEW39p$9dqI!u2HVVWj7a@K_II><1
zF&vm7T}0L+ILG-h^`xl-TC&uVCwWCfJEc;@wXF&=f^^^{miU@l${g?gj+6G3o)*<6
z$EHgB9V@E)$DXTK!!gC31>O)CgyHNK@`JYBY_HHon+zEC;w?_{(~kuRYGc!1Max^2
zzmWC~JBveGhB_jVvB;v)sX0v`eT@6X+~6KTJpUrG4gtZZ^;tcmb?9u-e8}v8bK$#D
zIUX{8m&XU7kC|1A<N~Z|goOrI27h}n+YE{)VyAaWe@}P|8tlB+zx2Boy&W{mhtp-`
z+sEkS*7=lzrajLhBz!LJ4$5h`b!V9{UzX^JHff{5e>bTj;}=h-J=tAuciQSc1vz(@
zbn_Ogt~A^S&#89$`GJ}h;ggAH--JRo$z^gGUgAQ2<>KpMnl?~nTpJ)Z5cm?$0J4V-
z1S%*1v~|-gc8&H7;6V62fsYaMC&vS~m`^bJbANUO3^93mkOQ-77rXYz*`6O{qijZ$
zULbOeo@f8(9whsa$4=@Pu?TWsr0scj$E%^9vqU=sxDE-zPtXwX(lygUd%_og^t;za
zT(w#xo@Jfdjxck|+BGu0u*FxIw;a%!BCs@lwMBD(bDj0HHa(c*zTrent#;<pnnGpq
zYqe_b!;$27(Lb+b_16J6nOP`nA(yhng7xmEw~lw~NxIQ}$?t^SMH!E<kzpCz;7pox
znL~N9iR(EJ{Y?EFA8cssn$AYG_q~+Yez%hk`W8HeWh|JtP!+#`B+D2_BCcdxNe915
zFu1c9KJ3Q@b>e~=WKEJCJ6VnMWhi`+;{Cp_z+EJP8_G}8wN8#*qxw?o9Z+KeUzt^l
zV@^}6cT3KeaZl|+881Si!}TK?ZV$x;VrzZt@7C7e%U2Pngy!*N_~stm7RIi`a(S<Q
z9N7nXJDP;<tpgL*rLiiC%SL<ieh^Vb1uqyKBZ+-6G+fiyk3k}haS~UDy(nn7!3$u+
zqq3~ERqKe7$d#<0Wxw)(KrcrFrn1PFz!!hs=E82nV4jwsc37?Bsoo^rNnwJmypThq
zJUvYg*W!p(*HQUdSVvjJix|7L@2G&c)h&N0#NF}XX%7*;4|5)a*Mpw2-|R*Edgmm7
zVH@pSc4tb;K;~D)rGt*Y$#GnR^0R&>ga+Au-7){TawJQCe3lMts?+;sxIA8{h*c5w
z_MLh}T%d7GTak?$`EF6=4hspfnT`hkyFZ_)cO;JY{T@#rtlZqsuBh){(m6(W*F2S`
z4tgTSM~0&s?kmu*2Q}r5c$oQ)3{+0?N6ZQ-FBYPIT_@A?BQsbXV4{-C354i&##6(>
z^YP*MaJ7O!5L*r9`da?69qfZ|iuotZ&JQx{N)-{6_Z1OGvcr@d^Gfi<ws7D7c#(Hy
zfkxq`n}S#OUXPqT#*8*42X#gif|CJSLyD^8obs6`Yt7P2@R+hM;lOXj^<r&h7AaCk
zDY9(+2?19dtIVy{KHC|4S!0456GWxe_9~_lw=cy3moKv1Qz4OZEUlP{o6XTcQpX@k
z0KhhdC;6}N@>*IpO@fN*S7%Ufn2@IXS<aqx*Dc+*YAVltMf-1cE2OfdJYT@XSV9G6
z#(rFUNx22rvjf2RF(;Xzd}FM7Ry?^AZK8S3%%!!a^~rcvCo|wfWb3XMm6xZ`moiln
zK*slfJPGK^F7#(8ZL90>A1)>zT^uZ&-c!*WK7IMXRkEpJz)V5k2gqQ^Ye(++owvn@
z`S;kD^o82hAK6A$JGoR>5~f7H)S1@8!RAf@;D*wp!$Tu2?pCZW`Wkcj!dNLSS*dr4
zx}hQ{u^pliM>ua^hmE=y`E+Q*DI<;jHGTLSvp>R^85+g;-R;`Pu9=e@_Q`Hmv~`mT
zS#K`d23`JeRRk4U{4{NxVf5HI&owLvS<M-Rw{Z#R9%i>!!$8WX(5Bfwvbw&EN+@e(
z4LBisExGhaWo>=_z!1d@vrS)-1DCHZm9yuRZW7O4Qkm>v?n)hVMCyp=Q%(cw?%cpx
zWrwDpRhRsypz{&OWA&csewR64a<<-r;rRV|IV7W@+r52xpNEW4oRoP6oGvzWj^ubx
z!YGrvXOXIO5DxNx)8DS{BT^P0`N)wr(np48Ks{d$k~C$v|3+=ShqQxbRc}BDD`4g7
z6Y8q!iOY%hUE>@0X-*=-Q*E>6T>2zGY}FfOMLs9cYt&I1i<$BsD<Zso9P@D&nlzNj
zt;OTy@k~l2hV_VI(0E?+A4$M_98=q!s4BEwll0q{{>24JaHQ?VC%u#HHw7Boz9G=y
zTBy$%27yj16CeNjq7paPHRADi^##{@ie3#4{?XXK-C1*LL;8>KM@;n?yy(`47W=iz
z-$Zb?G8ldZ!7@fy&LGe|y)A6kc4-=`3H^aDGyx?i;L)&!pJw3N)c-}=Uq(g!hF_yN
zDuSYbA|)*$Foe?50uJ5Xh;$6yH3|ZPbV_%3&Cny=T@nM*QiIeCFvED}`~27cto5AV
zS?A63V%C~i^WszYeO-I+Yj2cK$c{4vc|j4nYa6F`?)_|piSXD<A767`yP1`K=O5mW
zU<w}aPm3%~ec9yxycZ#I`h}9mEry6vcm~nSh$NDB#}&gJi@_4A?e$k4;`|q79I1lR
zohJ%Aw(r4-M}nePavmb01k`s6K45FI=a}2MCF~2me|WA$Ya7=!W{Lmsy7COrql`Gm
zn_Z>me|RM^7FUig4dMu#EQkw^y5nNQ4WcjJfw(Zc9RmJWROeGST3rwV+cH;#*QyD-
zqs|^jX?baF;Q&&^@mQ*TtxiTyMMzSO-Yd(_Tc1@x{_yYU=yoc!(;M03(hT><sp_~-
z3rU@=eF63|d~&RnkC;M*nCG7-YAvduTiVT!*WnjJ*bUCOV;~IyerTaXQFwHM%u_P?
zS(!e~8}9;<^YaaKRW;TtNEtUI#ijLa?9DJk<<I#E^&X(lI(&8Pd5efXN%^ytGjtfp
z*6~l-{fVud=v23A0g>F}8Yqd{USMEr*dVv9y9Ilku$Se9fo9+F1W>_H@&tajzB(mQ
z;cmyLM1y@aAu(%2DN4RHl9-|KqXzg0KUmhuzQRLL&+qn+c4>5XT48i!uF9X>v`Y5S
zLaJFg`!sfdvrGeOO2}5;Ku4aS=!D)YBZWWJQja;ZF6+&?<I&n1JFtL7l!=v_w)T>h
zgUI0Tjr*C6d_3Yi0UdQB>9(6@MI48xBu@5o?e}?VfXAY!-1VdN3CojH0gVT#3H^!l
z?sMD?{e2e(Oqh7nGi1Q%6P%9L-}uS5K6$nz<>y+J95$(>EA-^?vV<1E+`XfxVDBsG
zPgf)s9*C2?Z^vDEIm@E4BlYLh$LePTpF|j>oXxdC9Vw$*p3T&lloSen`D7&}>3AcX
zd!h9`!L@hDn!zEDxOGlzXsY#NCLUVySD(EfDjCN_NB=#_r!5IZbbzqSZ2k2^?oS5I
znJIxJB}($ILhA_$A|fR<hwdIw{pG@jY>dI~NCTYy;WbmWWnmvldH%yIvR%SeuKWM+
zAi4Qd*R*Yn*tiZTW*3V4!W{BqB`budtOc^T5XqJ{-Uo4`2Eiz;B()xzdva0I(yPVA
zvt?G5mK2s&jv4U0O)FL03}>+WRQ@^qS<rdLex^rs$yy5)5x@zEpM>|D-+g}`{nY#^
zpDg_k=I|=(Od{O`0*x16@_3s^v08ARhDva5-B`dQ4i5HyOz=3Sb1m4PPOGA@Anzso
zdc9~sce<a(FLVwRi_(5|^;RW9f4(w!*Ptz{WCblcTC?>wu)onLSW$TI6DitnKDU8(
zWukH7?sT8&lQzUP<Sc-bO63vDU2zQI@Ks~oh3cu<)mhVT(vgtuBhe!c=-%3LYmC(L
zm{ko%&ed83ak)zGe|K1D8(KnE=g`x>!A8qZVNinq>;4DAlf4N$*hOhiiwn81hpI|g
z&sY0ddr?M)SUM+oTqDa`Fanh>%J>5s+bXgIeE6)qLOyZv726}0%d6{%!W7f(x{MIH
zR~G4YwWGUERs8;{IX3EYY)Qkq6DAf3bu}4>PFz)00CVH$_R;nzV<nr!j2$2D{v?g=
zFGF;0gNYx$eEKg|74QCMytjDNcppjHVBC#U+{sfc5|aZNKa$4#=abZN^-Okh^1QU~
zK{vDlx3}SjE0!PnY+!lTaVqx>p=tBKr>BItB_((HAD%K!0DgEkWz>Lj`G=Rv=#5)-
znqkOzrv-m-Z!vh!8>96Puipgr4-Zw{kERWVgLksV|KVMjGhT0BK0@Q(wqbCvf}o4^
z_KbHGV`tnERr{?I7*P9%9);<`a-H5ZYNU<LU4^`{L@1B+7?1eAF__X@GO9RQh;nVO
zsa_>0Zi8mn8sQv)H>A4ySHK>gP`+P}dVyCw%=dn>HmBm<Jam)NEf_v34p}{whPBbA
z`LggOSvi&;10N^7nN7&c@Os@z`aD#OOM2{LTl$t8Yn3-q)U-E{DP}gaB59%k0qCd9
z>CFGbE9S|++w4B%+|mELNYgop8hU949QdG3AT|d0COY>++TTMO(&78PViWSC+fhDB
z;!)3KVgEd1FOW|?43j*T*M4&fC!Xt_p%_?bRbRPp{9K}%lwkgXDDgVA(#cpy<AUzy
z<2B>{+1cD1mE<H-sv-KZvx}<62EimEB4hfaWb9ug`TWco=?3IMi%nVD$0q`_#V*Rd
z1vciu-2&;x?A~~4vJJNJQFon9yoRuSHMe=v1G0Bl&n`{{vvBOM>A)-dYU33GZS_=v
zBpW8Tx=6A4II;KaP+9`q6TDs@vWhj4=JXlhA$C#Vj9YF6oraeU_B!%wBp;pZLQvUm
zGw++PwAI)^Qe?`$vCl?Wb;Mrjf9!pMgn7^!NO|neiB;QL(Ngw?r_%5%m6r(V7f(NX
zTt1{z)}E!c9^Abb$fn=`gncUj8aDGbmfw$Pk9J@pN>C(cWr(d|UA5XO8)z5x7-EcB
z-k`fBOE9?pYItnJuzqOX9rZd6UyfDKE79ujLo2=c=gtqWkuNPh$HgxmT}kd<Eth3c
zWooP_@!aHwzhCh{_CNU(*E={TL81T7>Mpv#;P^pZn*1fat>&)N*A~5&T%y0V-jOce
z;d!N15GR(sxIL<8%imONlU=B0X2gPL_>0yQ{bwSlSeViWBK-TipOxV}<0g;@HcZkM
z-)cV9X0eVCVGUO6pJJJNpwnPmMyH!;eRY+vY;m@C@&+U9CXKEvMopN+qnN>$C)gKD
z+WFW)#>*lMeb8vPJ)$~y0Ba57_U)!{un=hKcJqZC_Lq2RNWR!XqJj|BUH2Dd=<1b(
zxb(F06Dejgcpp5N>i%+GQ|-I<Wz0v1>{XT>RKAp$VVQh-U+`VeQMSZ#Anz(dTEInk
zQx%DZ_eayRXq$->eU@P^5@cbpsw=SQb<KejUX)eV=Y-8?LCMg`*J}8y=xV^ZZd7;s
zkvM?*$lV{qm|_4XrI;RVHX@IiS?bMI%+676m7d7X>+%TM6^b};?B!ADOL?$4+N~Pf
z+svYkQFi<3okv$RX~HN5azmI%t~8}GuzrXqdo7_4tdW-~3gUjKo0wbmX4ekGZm|jV
zTi8e0sqTtc3{G67I){6CWm#^*B~66Q8z^Oj%m*gLb{bMbYo0vf6Lt0$RN)H$`h}+W
z%UH<uh52}bF~WiVE@|3#!G=iU>-SKHeP+?0Q#3=SbI0uLuCp4xkPM$A)I3-{_OX>R
zWmGF3&};B4Oy|5b2P}*w^#%Xz-YP$o`ZK6Cf@%h3{zC8LEl`+<*ZYj*R18|VF3$I;
zX;A>_Wq)v$JF-OAM!N|WL@U0|;%t-47LM~;N%veSewA{NBwX5>7fb#0nY>=46RG^u
zs&8v2BeYY@h?5q?FpV%xVXD*SXl|tjfjLQJo7%f77Lhr-N-@-v`7VnkGZQE$r@b4!
zX9Kc!sBczFp1CB9zNOylo$`n9`wG^7XC8RmV_iGf=niqAYH|@lb%gh&<@%e;vq#x|
z>dza$nmOqnC2k)abA`mPbv|cx%-4JfB*J6(Oj02N0dI<1kcd|`p&vkfPrWeh!>3YX
z>$H)9F2=<ha3Jy|eJw*QyTnwGZ{gC+1}G(*q?||0&BJxgIm3b<&am56x54YMj9jI!
z9CKKuoLy&&RfrU_&nL<>#WOs!lF?SWIHZB!h3)cOc&&+izuWe98q3I3xHIH<LT29r
zVFh3S0I%`~V^zRwo3kf%AtaYRZ?<uwD@5)9Jd6EF-kM1mg~4)LEG%=4oDAVOlQg{T
zPzjk_T)u8?;7W3EWQox_BAZtpKPfjB->bFl+B?|-ow`Fq#oM0ieN`SUdp}D|zqa`K
z0epvVK7G`*#&V>Ct-A-Zrooe<dR%I&?_TpgQTKzfBWv7-6nl;EKfF!l4o_m75Yfbr
zJx1BOW}T6yeZw8``irj0Yuj{xWXQ~yBckEmO8JeId7{UUf&ih5_u_QW4+I;}fwPM0
zKTwbLLX@q-&(7y3ZkDR$(SveyK{wWa2r7h!GrFx+#P;_~49?4pZv(S#Ki~e>_EtM>
zrC*rcjQvGCl_#wVOlHeIT9f)#(O%YM2|_QOX%5yie`-h(RhkoRK8xl|oB4Q7-No8~
z?-cx=*BUvO+*VSO=eE-CJ2hyp5&24#E%S3xL#^t!eI!Y-i$2OEr%j0&x{A^fUjOlI
zQo`_O{yqI-F<dyCm6ukw^%XR-H$GFE7M8O=gqS#BxI5?+7RR}B+e#qcnCZ@U8<5Y7
zhUqDUA9q)+o%gBb^ek%aIQ%eEHrTApWWAW8tKk08GtpTF3smR^t=3MpH<>8*54@!@
zu9BTmP6YrT^;9ah{A4O0V^G^?FheDOTtn7u*z2{%+>?0f%|p}97Ol+nw4#9AZ|!OB
zB1ke&WOIj}1v6rGZPDtXz5f>1?Iq>-E>7<rMn>1YX%Io~tz4Xp#{n(N%Hp_FL&o6b
zje3tXKeUi+iRWv3#Pwz7`5~`v8u9-kNHzqU=_m~o`|fGGvC5T}HkWuVzP333YQo-D
zf9`ee2MO~G1?2LOPrWqL#dG8v7Sg<DJV$=yL%KI|mbV2R34tA$H{1xFqwO$?%N<}3
z1pQJopD6rb(S(v1mDan-w;Ci2An6_d<iPdu*RPuXnZ}ucS7k4)NvsTHUbCS=Fi+l|
z;C2^@wlRJe0}ZmG)HnwTAzPljM`TaK`O5cYN*rPaP|_cF)jzF5YU(om3nd$8Y#msL
zx%vEJz85hFKazRv72`y~+*Sm;w#(bS_YW`7?{MRefstAo&4I!(e6{iIdDp7Ain-Bg
z>cSgW_SZ-^!LD^JabI-s*0OBM%iTER1~R5PumaoCKTtzbGt0E`Zl|E13t3G&gtBr;
z1KT3CYkixZw664Wp>SqE<pW{<!iEQ|$&x^?s?k4Ml%CEKcN43Zw3xN1U{}9}!dY>r
zOupDC1Gbdu>F}QW(GrINxG}c<)o#_@8_|H(HQFcNSy*G9LVem(6bXuHUdk9pIEOk8
z3FcG0!bzYUe)*ZETL<+Vk7g=6h!9LJ2g@`z2qo$CUU{{4_fNQD7CiutX;EdNfXcY$
zg7ZqT>Rh3DTIJMa?3u48TRPwuSKfUiyToueW1%SB#GeUljsd!JQHQV5jVtd_of{!D
z6|K=+ehcLQO8JZ*5Bl$aQvPi375$gI1iaU?f{t&M{!urUjo7ZL%7N5*otl^T>gei@
zNl?Sv=8ZCITl=-GwtV<zv~_`y2@@c-o)889uuPJIZJK2BD$`0ERhnhE!r@Bs`1=B$
zcVtPyiu06ZBkz9`YNFaZn$bh85;GFxE0*nk<S#U<T!H{^^4V0T{TtX>uguMd%oMu*
zGn6&Km43ZB(#N6g$^Y;uPc6ZxnWr0mzNjEvxjTjHfJ#jBu0mF;f1!tQwukX8;MtWo
zXodD8psRn>;)|;;jsGF$Mn!`Cq;E`-Q@46J&4U3VU?RT57gLU|yW=UrwN`=V&HAVx
zIhN8Um*Cz6aVp6MSUO0U@QK9bWmnTij^~m|Y{lVT3I9h2Bo=d=7OEGCeb}Rwe$+1L
zXZqDfEcWuV8}wIfH|=`BSt(wYiKvZnG|DmV&F~jarrWrty3>bkQ&4osw4COfH_YMR
zShc)H_%{1rJkoyqi2YdX33`IJUg!V7*Kxh<e-ekA8#v%+4ueC<N=k7^1YP@)uqck_
ze7-(~O%=Dmgv`}YbnUSlYApN#_lAV%k;cPB&*+_UhNC4T&pn@YStJ{k!~w*DQ3|X#
zA@w6;H7Q-HH_2MzUx0T;y`Z6I`(0~L^ic|<M>v;1R61HxRSlRDBBvU;%czrHA2cbf
z?s+#SK0D<Z-z&kvrrgY$d}I)FZ=jg|5#!$?a147H)^1CD>dAXfWc)}?0f`UJ$Ve|*
zYV_B$ZJ)u*Qe6&*Z3;h8H-7?~VD0(Ed9u)z9MXDBA9^a)ZrLVa?c{vg4LfSw9yGz&
zZ%%y=7!-QiDZ-Oem&F79V^vbSP3k^{oc<hd!SvLYnZv_7(?2V<au|AEij}=?iHd_G
zK<LHk*_o&fy5(;j(4ByJ>qD>5!q6t3MH34)@xt&NH7WSL&YuDjnho(D!8-{FtSd!r
z6{R(=*B3tr{Y)umFq_3Pa>njREuz_}E8=~HQz)hl&CJL&E=_uP)x<lPF}joA%`aH0
z>He3ZX%&hkYrt_^IB8>A&p*5=(o<^e*~UfbKfHO1yDINgn9rLV+;4}Z*v0nuK{!{|
z@E4eg1JV==rgql{3l`Lk=r`qo7cIAAPqflk%&PA8M?tY)e)*r&#AR`&6e5(J4bBeN
z^x0?vzBQc9-Sr97h?NvR5hk?~HSpbqCwpgktdX4`j=nUGCkgjwHW1VysCkuz*X0na
zH>KG2eFN*V?4K9B!n^`mYG{UKKG*%BI5WV-RQ32W643TBrPgbX-q>J3Iz5LNbJZ<?
zBK&}iSY8j7>8^iw`%e6Uy>r~qn%_<`Rc`z%AQUyYIJpJ;BG>*_wmS`2-D_K3RbFw3
zueAWwBd;H0bsg`l>qJYB)9RmEx)U!{HSj61DhH;8C(g9ke|$9ir{~)!e?60OP}M{S
zW0wT9<AiFl$r#QYp2?az<aGGxfcej2X{5GT!lT*4VHpq;Ry!yVzCqqCgM<y`TxhA8
zwca*)&!60!H@l5!DC7*PXsD&GW+laC+9f#}OO8O!1yj#H98ZyZ-!n|ZM~|(WY=GLb
ztX6$jfm{#A1Ddl_KPtB;@0axP1Ra>yH)Y}`f>TAqym!$f52iq`bKYz6C%k0HC@r>e
z)SYdvC<%bSXll~4cnRKo=cfv@VBS7zVkBvofBbr=ajPV>Xa`~NaSIAj=B%*fZaKoH
zIqmb~v1MA8w|6*E=RjBM-UglsQVnVIp166!wH&tiIr0A%1DbymCf?7n<=ypLgQCFD
z_IfjZ;R)v=rCB+%Z;5Nqq?l~&>c|wHsRc~`!&|rY4l^@UI4?PdPb^4}8*GvII*sT8
zM5ug^LmJ2Cbaclw=xvuzf(E3`TsV#>Id+XJjaAKelj`~pHOJIry=;u05hL{Bu5IUU
z1p3^S73?oKnVbC-qMJ8ml@H3#tp=O<Nm~L-CKnK-Tx!nL87{K~c!|2%*J_oY=Q&)-
zzG{~f0|C4!EQM%`yI|nbW*jO4;GVrEZqk9QmG}NaS*xl(G3Fg%K}^2zYCLJK&#3!o
zTv7MYiqa!?qh<w^XKP|jTjPB4CTkjkFx6C*mZ4a_<tqR3&=x(>L$l@q8rIrsH{+D@
zlDns6@!qWBK<8)%hvoiHRHT>je_z+B@BTOE+bX;Bq+jn`MzPk?&xN}~GKt1b&8pNo
zY)UF*cqD-u<{vN2!r~(QjLcp~tEMe|<$ueu9q~KQ|2ZNU=ZhCMj(WyNMjK2)=fG91
zhKr%{Togtt*$`|ZL;$O6O!fnPN^*U=TAfwsm-mib;`e6$;;LcaF^1{GR;(`OavA)R
z{|;Q=_@-HG)!j#0^MvR)Lc|9_Q;@Rpd|Uj5v`lhlvXCBxIp65_=l7>kUW<sBhHXYj
z=hVbni)EV#kB3*sSDo>KT|>Ks2Q*t^{TxJ*+%iI^1fS`4UE3vUMkMBfTNEaO_9@|#
zovK#frd*$Mv1pEzT4_Iy;b6L_%Um3zdx{a5I{%D=s5`w~vGJrajCU!4Nw6gaIBti;
zZKKOV`#0_1!Hapz8yLV_+-I|NeW&HFFMnA|U@2g4jMNHP94m#gQJ=cTbvR&4C3e5d
zL6cy_+VQ;jkk1tsK6KJm)dpaEl~6FTsJYGYs^rUFl9*pSKiT^B3Cwk0a&@h%C<D<Z
zjGVDq1Fb8Yta017Ct7<<w&D}`uuhZtJ@sZm1eUSjX5U;*YiuTwBC#Y(o^*O`5C_vg
z3H@KJEOCy1&j9nE-?b<$?%xQ4`6UR?FHa?Z2fm?78u5zs!A%7+^j81;d6jWek+zbW
zVVslKS$-CMDBwk%x+V&6ToIhpp1&Hje_8xlXI>-Z=$v9m{1_SOk|=*_J3bR3Xkb7@
z{}{vV^-BL;<@B_0$q?8sxUXeLa_>q+ab&qpi&9=wMSdoYul2!}R!twr!;Y{weI*e5
zQykX+64Qw@gShfJxnVnF-=So*N0Okch7o3SX-B5HR3Xk!7ZIba<+bCk=FrS0+E!%T
z)|mAJ71LLhgA%DP#<YaElZVIu#*HAr5`jUGRZ_m=37!-t0PE<?X!$#CkLfB7YBS~E
zcsT2>2Nf4!WL`q>kW=ob-L6f`?(8PPwByF!a|Rw(y~+lrwCS0ofsCF{8pcgQM_5y7
zRvbmJhZwR9%zG%4yu6xO*vJ#R(jn!DLqXuS2_0Sc7v^VY7JozO1S{FnY0aJr-4l|K
z@-rCs5J~n&S?&iqu&(S{cg8$meIvtcFs_*}VoIo^P7|7}-Vm7^+_uLc+ZHQgxTx~j
z@Y{Y|sYpqn+I!B|*?(MflX{f?d_~h--uwUQc>m#H$r+7!hp_q^3_g+)mq`$X)&LDh
zy{L+DiWgSG`)Wveb>nt1z3jW9QjN#*wU1M^*f_5~_C1q~i*=Rkg(H4FFP!xye^;eO
zHl1nLvO32M<889qxLF@tjcuF|OyoI!-XiZ+tv#ZZO|Ml~`<TvNmL2=T7v37Tb=`7K
zxLJG0XUhR0F^2Md?_HEF1YoNXF(C@{ZGYWU*&I1JpumS-3pDfZL|g7<I5$+Ij_i`1
z_SEt+xesgHaOQ8!_K#*a00r+kF@zU#D8Kb>xW9qlu2UoJ0UIkP_1iT9wh(YREBnrN
z<pfqI@BRh#>Hdp$u^~Ur1^wSxGQ?#6x_`jR;kyq;jwh*E;uaO>UrMyd`S%3;t6f53
z3aOHa<gJPBc`>3>Cll39Y;x|JzDS+YDdMp=^B-jgBor9GuFJCRcHd~}jN*ZIWW|Qh
zJA)ubYytIzT7<whsrU7k{L>+fZ<x|=aE|S`l0hR+TEu*~-ypLl;|%s#VeVJ?Rw_f1
z+NzphTlerVzC4&dNIZ|({l!|Cv!Ji0Oj})}DGZ&J%+!@8X13Ax<MtZ-RPK28N&HR4
zj0h}f2z`{xwpx$`3H18(j8EekY7{77oEj7MbLgl4`p{SaQ4a0_c--*oLT83Y&*#Y&
ztk3w?@1XQ~weG68=VcdxddqkdKye=J6H#gOEZLV(_K>K1bJ8f0NAk8~@ls*!G$PpA
zB$nmk6CT#@5VTj$)`jj|;Z~{yuJ|Cg)qhPi@r|4Vtu)de+KbIvSUOAYu87Y$dvBP7
zIw5~IXr~0^pvdm!p4l#21A!mI<MrBFv+vWW?3|h!47XwgIsja6$G#sOsX->Uu-MH{
zP2o?(8}jw&lyFH}FWK?P0{VD5T)N?PH9m02@?LjFZy`s8tu!uZ9yjTc^dA4JNgii3
z^A&TMuIRlk-2~3i81HJE)y)tpec<RE+|z^{H@sbpRyus!fMoxqZDWs;-_%VLax}Fi
zv5wsa)3tDnZZn*AA=X6#k*haPQq2$2x@NhPC>aMfKj;>ojVUDnWfK&PI4zGEhMGWq
z?kK{nv;{TsPkviK(aP&N0upr&N}&RR%*sa+d1FhputcZ{rvJ#)qHq2BnEvWK;GORT
z<#<7LHG(c;V~srds&uyw?v>gWf9VQshjA(an?BZ712gNH_2-yW78J-ozM6z~|8=3O
z2^JAN;RBAf#I()1RF@6t$x`(@q@)8{O)G>>STBWk0;O$yCP595UHU~O|I8$S7Q&3q
zPj&K%1Lg7k`|~{S4>{NKiEveHxQLEU&&7UKNd#M*@<vqP{nCngPf1yy{Q#}%x+!i>
z2NsQM0I7!t{4#kYFoFGnXHwopD2|v;FRwaf!rRZO{*v4R{I3C1P<ZnHD2tEZpyK}F
z<%nPl|KXjO6xhMPV|~H5VgK-2YFj3-AM=prFkJkM3l?`FPj}aI_swx{QUy}L2L?ED
zOrPb5(f<N#5cgkm*s^g~tTfY!mHUT>ysC@dxG@D^(}{=uvRc=;^}*o!Kb$ZhnMx=-
zWi5U1$7AU3!#}(g);q?!Yh9{O`&C#iOu(U$T{bAVY}&5D-XYv{F!cf+_A77-WMk(@
z!a3{LaAzZ5=wg;S`j;v}1HSJXE(#8Uzh~6q+5hUE&>$ZtF!*)cQR@ArBzhF#IWjH*
zYqB;0+S+c}8ynH{cLEBZ%MG>0_#e@qz7iY6kv%tUI18a)&M=Iw#x4rCR~rmY`T34Y
zU*ZzYaXL?jHt-N{`^0|-*6-VdJ34h7`N!D&|L=8M<1y@{JA-J1R67C|c9+xK7#uZc
z!tS7N_ct(}heB8Z1PX3~Rk8KhwR^gkSP#!_`FgeJ-8|LfAL0XKeDJ8RR{qg&I`qZ}
zWD+qq(Gfh_(>C=w4Os5$H&`Gx_eFidQ!DRjbkb0D7rM(+2zv%`!4$NaNT5O00ZH-&
zAL6uiS6fA2ee;RYipYDeq^C>I3(iG3?qf+YJbz$c!L&ZS7M5Ol)|UKPFT}g;_sT2t
zOO{Qfh^Q(LXVTLgW5N(Tcf4v<jSG57tZhUbm0D^Fx%EH4FLyPPxbDF>GEqkZS>8~0
zz@YsT#T_gpQKk@}B^%8}er;cn9tiJP^RQq$#*~aL@{r7VL=YtCRsw0h{61vO@d(rB
zb{uXD`p{s;6TDky=<xrYSMz^6!vBvHFA_)rCub!f?^5UIIrMf6d|d~9Q3Vi;ODr24
z3_Cgcla2`&3(YE%P6I3J>B<rFs?;-0`tZ7Zyx$y~GNLD^CZuv_{9$N@ZRC~*R@O;@
z`tAXm$`euSqf`{^hb7?8U9i`F4OFnAk7xb0b}cK?%ELlhpNfyW>9uC4vHCymT{PWf
zV|KBYcj<9qA~6S&aOuH~IIq;*$^#z|@6&6~wrs%{8O){C!+lRPbMQXSrFBg;7_^cx
zXzr-%?i^8ZvaQK(dGJ*Wzju`oA{^)Vlbi_mFUvrk-0nEWt$!+@ft7LG)6NA30qP0E
z6o-n~F_+*BpVe!-g?9`IeOHia1jEAVxQ~8Pp2O)V+wd_Q)<h}Va6`P1Q^+c$TE8F_
zZ8%?5{ZsN9*63>AMzo*l`_k8-D{a-a*>dA$QPUX_X+qh+`H+g_ul+Gz{Z*K+1mBpi
zgiUk%p=O)$7p;w|&Ec{EE%g>+tSM~Vq6L<QYm|wPTG*;5FV#=SZ#v>jKjvEeo`|ig
z;F0>hoYEvv%Jn8RPIe|7Plb%)qf+ZgZQu?uG{>jNmE&=HKdeM#tDKH;UL@~?-ijT%
z{>LS#qa(l7{Zd<q=;k?weILU!G`t--D_-1DRx2fUWjlsYFJ1F8sj_q(XQT9ekXDpv
z{8#^dvJjiK^7woP4f}sX?YW%fVW;>|P$k-W%>~jm`hb3iSMSS>f4rt&*q+#APL+4#
zdNmJ}r~4yvww&oEUXNuY^1ej8Y*`~B=6~t5VE^X-55$MxF<r3Z<lB905p)QPGWotS
znvTi_Z`q;C{^3cWHSSip18%jjr=*w<Q!dhb-8hWXS7kD;tn=ZKa6n0XjwI*j2~6(c
zLE*^4^w?_h^t8*9FMt`f_)LI+kwVoU0OyI<E!TH!Flr3l5sck43qyQIV8~A1ngU1o
z#)Q&0`Kw1~ueIl{8M@Y#GyS~>q+xcAYi*r(e<aINEGC{@m?jSR?icmCWp39ID}}zh
z4-jjkBcS>2^3g5JlXeG7|G9tKvOH*_)=DL=G%oE07cS;f-VmX2C3USa-hm6f6ue-6
z>nVR!hAQ0+6q;WFQuXJI$B_GT@Vu8KG)w;l`L1rUEF2usXE42NJb)h%tNty4dHyDo
zqvBw7S%e`rVE(iVw&#mt$FiCC;kx1uzSEN@h=YH4-)@dIu$&!l?p8tVH{7UgY+iil
z#&rt<$BDbO{sEx)y~({h(lP8yH%TCd(E|)&FT=tb`L7W8VYG6ldVa;YzTABu3zMiS
zesZ+ubM9QhbT99DRU9m7<Ia6;Q<n7n&8ohjVbrPJE7OyXYRoEB*2J;haiaLerpjj{
zSOF)3_@}6iV5Naz*EbZ&lFxF@jkL!P-ZR@w%lY?b1r)PXkwGlYb!1-*DNpBIr6s`W
zu0yar;-%}mk~PCojQXFIQ$3w}aTSM5fZAyjz=;BA!zQU`!(+y40@|fv6>1$V4)Bk0
zVy4FNXMWqf>ie-5Nv^p^4yneE@yI@0@eLE==*XvSvxhPiEC5CRGO=@po++Q_%dT(h
zGx=3@*zg;Yhm@E?Yho3DR^$uLSIW1DXJN^9*S(fAhas+`=4IocO_sZGpS|UdKG2@^
z_hBrbQS^XX`yb1M50txH)(@lV@$TETN}Y)tMX4?Es5kkCr@jO;>uH=HG1N*Oqd%u&
z(=#{U8qjQhoWJ>eEG>qWE1bGWzj=WGhe?w`T}Ox~HvHB{CQfSR8r@pN6`YTi$0=XX
ze}juQ|5VAST=SQ}%0gf9TUS*u$K8`rjJDyn@w7&QN3iF>NxCV!`kqEwKbttYn&QR&
zLMl8C;DdXW-a^5I3}HbB$AKOeoCt{lDO}i*$g|G(%mbU{q)f6ZR36JV`S%<$lly9-
zq!VCc@S=0ZO@jWzu$02@Eg^zi2klF~Cor)ZuPo)H!iIo-?^$i}=F@L=tL{TGtc8dC
z<P;C4YpCD4c4jwtH+TjkH#Zwrp@ahRSmTMO73MUlBZAu{DOb{goD)9TeIq8`p`%3}
zt3`&a$~%Dh50~2|)A!727JhEdSYy4UM~YgcY>{c}H|%FcY!JI+C7($F8>Da#Ji}|X
zdHGPS+ev*Lp5-epDKW3|BRaao{VJu!75|Nfh6bxTy^RsR)I7Qh>XEkL-rzbta>?*2
ziIasUIxXMYru<~Egt?gPXXvARR~)El4`uLL1BqZQ+P=APJ&QKnVbe=hq454#8Ykpn
z<4iFt^H34Tf!qLaHZ<^U3=A@4g=F-xsn@&PTz&h=P2eMBz<ul^gkkvS!U8Tp;bk49
z#I!cheHTDh*j7ZUg71|w(|f#b`$@w`auBi~nDs=mlFF=bNr%8)AxQy`OutOIoLsAa
zA!-Xx5*fD2l`GS<<^py4n(W^(`%-g(CH4u0X8-;1fy%uUa?Q>sd^iica8Ar1E*P!^
z8Q(|T@MCDl_aELTgapYyyyH%gL~m(u&C;r|gNL|d^6PqCru<Qtu4Q^2J$~id4ZGOX
zQI5>VkFtJA>9@A6yZBdby*8n>UwIdgciuWXKPW42D8#uomi>I%;Pm-K+F}+ljMHSa
z2JFkM1UTb-YNwqnw_^Uj-H}+&f{qlpiX|JsRaxm1q!{4<k$-qTT_wlp)0f!o^Yq)m
zyuUKjzKD@KsOW#SCeD;=NZ~t{9Jl6JQ_SaGLj!U2QqWQe`qBSx74*jvh0_YAGCJb^
z)NFx__g-w?7!km(e?JrWhera!6@J~{>$|3MaVykZ`<}&RB6#7teJIZccCdF2yLEt_
z(6~US|0{!KEO2G8mehY`aOQgM-=!q*uIDb}tufBCdg1zZV*NjkgfaWS2_f9cvp@GP
zv%tKr!md-a!Oo03Sa8&sR2?cM<R2c6IZ1ZFSr1Xe4(H*YT;XF_gO1Z%eHC1FUUR!_
zb@Lazin9yCAsx80|2rOccy5eM;LCGSPi&#|31vtl<N80mTW<`GRM6Z&rV|=d2jLK;
z#=h$UTrL&Yj0O7A2iiHhcY33HlZQ=RlD@LJ?d8Q?;ncAd*nu6cWH;D8I*dKdzVn)@
zON;E8N~p)^+_+AInVjr*>iWH5AFVvZlj11sD)a1j^D9@g2JE$DmXgeBGO7iCuD$HF
z_>TUQC+ZBsVai?3i7l^l$)4RfY14C^^H!3Mc6ll!`iDyC@0~=3WH`Cv-(j3K+kfmZ
zr?P(aVe(HPv`~%hQEHUZ@DeuvZii&hbXNa!w9@LcWbduMpG=ii+>fYMiP8W23tdFB
zr%VTtMv#@JS-K_5Q+{CLX8`vunUI{)ni<wD8czxV`Sny-Y*^*Dh&g`Vc+a$@&4n!Q
zn3(L{ino$P<>S2WsUV8Q=J@wt8oCKeI;OAWjm+Iloy0CB6&-G5uhupDXjP_PlY~Hb
zro4{LhS>0+-w-?vDb;oP1J+8dd^5ZJng{nf^OL?OuKKo1%}s%5T})Fcx^~4=K|DLS
zvk4qbQn<C&*_G?xe!YJp()reGyu+gPg@%>+VBlE!dfuG+6+!EX4`CeF`{zF3^GU3G
z7w2?W#|FIU!q<DNK1Zd#DG&j5IGIYOKWq23HI8>3LS=~grBOGaL!#gDxvOZ}3Z4H_
zC@y15nR3O|7LF*;zT+|kp%PWnp7V(WnKm44I?dQW#7gAA=nBk=gqkCq(XY?C5ZQNP
z0}jsTf8x#&3Lw0ur+@TL@E2>4{#Rz;QRzJ?TztvYN#yEXO}4*qq_yz&QSHilU<9PH
z5y}{U9FXZ)Au?#eqsP5KhO>ZLPZ50iv_y5#fguWDxGw*cuzUZ!I(uM5B+z!5@OlCg
zWf_Zy_u~r#P5D(!V_~$f1D#l0SLxn$n^PW-uiE-HM*kR>RI-yKp-tOw%YJuTY4!ud
z_G4c%m{i=NIsm=Hu662CvEh~IV%~ZJ%1K%k9WLjRCBl$w=G&)rJWnaHLkF}bSyvQR
zeM=@Ep(}UENB6)x+`5*1xzt7{FycoJdh>}r35#DDm<w^Q{Ht7a8r-G}1nsc73}Fi&
z=b`=VpzAIt%TG)!Ly$im*SwA(y;ijtrIY_#9bY6~Rw~l{v!b@*U1s+{Exd!u&x*sk
zB4ws0YiLtA<Ztf|Ye^AD<AV15pk0ap54W;xOxa5J-z@yJa^IX>1lRP#pl3<11V^-|
zXnEA^i)l#v{jR>Dhu}>=SUSLK;=9EV)=WPvs|QEzy&1abej>ey%<QiZ=ygSKkL@mc
z1w0086s9utsolrz^L*W6i;?w(<HtBN9Y_URo;yOa!vdOLz4k7fM7z6+`kH#*KQk_e
z0We%$5O$CKTtob1?ZPS;3^f@ecUz;r94RxR(MuiH{^>Xm6r!OJ-JI8&TKm!#2o8oC
zx`=40q9}XSw3gn3RI5MNKV7je)6y$<|15K4&v>nZME4p5Y2OeoYA((SZ?9~;q7B~R
zJCd+%r+bY(3QmOny=t8Ee>$S1Wwy95LKiOE)c>1I_e;EmpOaE@2E^n%@?fX_d6+6?
zoYBkh;P<IYjC@CnN_VTgze993xG90RKTt1Nc!07aPnC<~m|nd2>_=9bO)9^1(*@?l
zp|}?e$z{F<7D%55wZ2RGa|q{$rY10YT;5k!q_d0CSqA=`Fr9`;%$Q}P;UcF!TU;ps
zLNfeGO$O{7JQAPq4=<p{7b-MRG8u9FvAQ-hGWXHP<zc2T>g)xs?YT>^*6+<Kpmv^?
z-P(q=lGG$M*1t><+J%u!p)z!wg>|FqpC^NiZtkrxGK%m9QnX#bO<Jj3Y&?IxbK*RE
z322JVA082w0$j#5ILsU169Dx=BK2KedvADL6Fqr{psoq;XMk?up$+(-scRL7QUiL;
zop%rXb$<9tS!C|orY)zclmlqW>pm+nXI9*JL(4F)+1oa}f~-%~<LYXSqt}a1VnR;)
zbriL13s>M3pC41uJ*tdQR)k6oj_Oj1<=E7G?B|S?e|z^EnFtyWR7WJv@YX2vUHO@?
zpG=>{zmhpJZ-gN>J88T1;1K`U3v4;-CDfHe{Go*7FUfRtbhH(SNFd4spw8EXZ0${k
zw~7Z<s0ia^$=1pdnj@z(wC|Ia0~=o_^60!L(263x?o`0Um2D@{g$h81wnbYAP=p(u
zl0GYCuMSr%iY-mlk2%qoD(0~G%W<^ZaDLhb=os6LAC@{P8yzuVz#wwa?Z`d(O!?Rf
z<nd}@7sOdtU@+yp+OVdLnC`9O`}7Zhaa<04)Oqb}mIBvtpj=<^fCG(K-uASFa+pQb
z7}-19Y_Yxccc=WW5*y>R^S)x8Cd)J;I_d)+%(Fl#>fVPEZjXhgEL3aL)~Vkl!Kee8
zf_6W}b3xH##lkMz<Jw_7fcY6D$;i->&7Z73W?iju*Z^BpX#2>M(0fmzsHv01S<v_3
zHRqIr+}V?920^~z_fnDJ!K7xiD|H_?e0VzC%#WPL40kRljI4-}F(NBswT%1l^~ZA-
zW8fA(-Ig;g7n0-26W)xTDguAUS5rGCZiqitvG*>g>X8s_N}t(pHgty^)e=Z2J8`Jg
ziOaAmW%LDf?EP#c)}s+zC8>~$Jhie#Uij%H@C+=gc-7^7b7EqYerP?Fel9Kk56^#M
zNxJ=Z<+$$p!Y3U|`;PH$K|65IW(b`qed~jRe2*&Y!B(WWc9W#r3M^Xh51PXChghCe
z6O*@bBQ|e}&Yuv556M~?HNJF)`XLUVdXw`A43UlL8EGa~*y=rO!x>iOV+thnJHL;j
z1iF8)tbj7&3v1fR+_UeQx3x{`&#j}wCwzQnj@r`w+dh~QHJP@TSLBZ{S$|n*K$2qE
zt8QX1368@2Fm}g01<OLeyaR9s!~v)ERbnQM<&|E3C5p+OOTXP)12VMbA6=qD^{l%g
zD&c&o>D_eSyG>|u@*$fqbTes+1O0;M?26p;Hv>q6ichFtQs7^_-OyCjx3Waa%9-KC
zxutQU9OiC?!Geo26IL*1O%!HC3|%3TOL`OKGD<&^teT6%G(XI@sf~PDzsm_5PynW=
zEvvwMyO%14w?ycLfCj&$M0ab4cgSQ6_ABf&GvEDo^>7s>L3u&a6Kjm$HA7=$8$V2F
z<qy!#B-6AI1DfYbWS*+aqHSyt6mfH&RMP7TJcA{FfqHwuS?}sbcB_3Q9RtUs1(y2-
zjv`nJ_71T-<WzrG^ofklir3BhFg#`SJ6(o^h{d8663ft5X)2PL6z1t7M&pjhqW0lO
zhO_Hq)ayHVO<i|WhATk<<l4R9(!pEc&5D+{!Sp*UZ(&_$*W?DeBaQnPCp^fX-hHjX
zf#~L(<d*L`8mv&Yj*}_#LhQyjzQMItXajj-@_ara2dV6Q2G@!!<CIT|mT7%os>DxC
z8_aAVI4V5O-}Aq_V7faFHsyURRzrNT#BFw7#*Z+u=~v|$kNMj`?e`-ohV+5V%KY!2
z@w}x7*}W=Wx82w#-<DKWEKTt+v8pG>z3Dg>$uX_9aKn#R>eBE2;ib4<&`%<<XUFl8
zjPC*gMRicf?=ghyrCxWpj1P8n?3iX8?qo0pg{1lbs(2t5Ci2mx{y^%SGjDRiZW<5;
zkfxx7K@;^R;RM-XLgKiy>KRA`@S9ncVM^dAt$6Uz#shC&zJ9P~wXZxc2WR0xa^%~-
z<}a69n>Ofc_g2N%lkuzJk}6P$Gp_gm|MeFjO>1aslXUXN#m}kTSEX=iA^r|hve)1A
zt<M>`#m6MIo5wXWRYL?^W(}f8f6ND1Wd?k}RiEUhUxb$08K(PQ2ti*L&(1ygbCP1P
zH|{3&QDk}Acy0w8@H&I?G|!xxD~$^3@-rYD?|uj{{p840BVhsF7#JA>iaR<c-dHw4
z*FdGVkDiupuXkj*Av$Yo;#(W99sW2pif2MPI7#^FQuN4x58fG$S9?X+c3#!LUP6}+
z?%UT#uZ-@o{$RB)m)4@Fl*N0Z{W;S%tlE3e01gXA2xl$s3&F3dr|u;g_`1&e7~kLh
z!Q&{qL?Km{Z?HV{!Hh1h6l;MSCKKN-ykKMwuqY9+u)Bgh@Us<GH&@HR_s^Lluz38f
z$F_>SVA<>RZg1_~6lCo=Q{GE8V=})IC43u#{M`L1y1K?wK4)>r34Is3zmeEaS%Cku
z^|dB)G0p%Vr*EJENo{z#pzFuRO{8YnCfAditzTPL0vc@MiJ4Ij4Ah?GZ<%!R`O69e
zyT7ykGM>yjF;?x>py%3h47l)>Niwcze&moDVJfS~eV#$3Og_I79?7!Ye!5D_9^Elf
z5S?0{DW<d7UNIx?F~rYxtv0sQt2`U=*vUfKzRm;$?)3wwLj!_B*5DQAQ!rs$&x+sh
zE_=AeQlN^z&R8g1ln0i&))DB3=z{018a-kf0d-pI(F)L#NS_8#PyiPAf9T)CZ?cl^
zmbhp-O#pR58_i0Fqro%=>N_M9iO=aQC+No<D&wZ9bKcv$sSnvWHH8TujH9oTS2`EB
zsI5YlIK~?l5s@5##IMBieM$KaJay?86gO($Phfi%a4`FAGMhr;z!uuoZpnMkAFq61
zujs(}_4IO<tNUDV=S*g`ygQOkufDNeu=#?sJ-Ht~+}Xyvae`PF>!@~al&lWb`#p9=
z%+i<{!yhG>8S{L9o)keSC<jK^o{Xaft61I5`e#Hateg`I>kCE&fSNKC+K-sKKuVYi
zvHPU^gqSWdiyg)RBR+If5Qt;<gg6nhSo!@r&WS#&pO>Ziwgj;Dtz2Y~N+>c^xXfQ$
z)Pvf#)KxcexOMXci(Fs27(8h5q-oYq3W=$a1HNhj3Q3b&lgZ%akU3KP_5iPeBBXsp
z37z3LpFX4^q?f+x-v3=;^s#O;;kj(_mo0^oihlcvE+om#k>p6iGCZ~kD&GhHkzr1k
zyRuHrox3(Utwh)OeoQZVY<5<^&!NB@KOesWI=BAG$im1)|G*atACjzc^ZO;1Ck0Tv
zIC?BX40T&^F(316NLxSgD~=vsQ>>wWpd2RmbB<o4<ZyDL=2x54bn(%|sn+5TqYBPO
zcsR+zq}1?`p21EsDNxC%J)HC}2jK8Lj&m!jj7%cG9KWIo)DEf$X85)GmBl?^md9!9
z8I{&6uF5YSYMkmhW_dor-DYr~v9K04A+=5DS3nQm8E0Y1WTt)#n$#d2x6LlzShR>e
z*+uLhs@<d%^_;+x#Z6u`yR}6hgsi7AOsuqtWycK;F6c^D{El>++4E?AmfjE)4&?rb
z-RzV+t>alcm1uHmUmi3Eb<6u`4fQ76V+lZ}$~yFTzv!!ILZHTx9d889kCz$&z_t&S
zG2o3EN{-wx<Ic}y3T}EYT_WrD%P<vzjgc^D{Mczc`hgcR(gfL=;KDHR^LSi!HPYRC
z^17^`aA@~D33O~cZ+A|s;Z^f$M9G9$;%r*4OL@NeZKg+m_ar*GIb;{I3pz(~IjuTY
zzhQAuvSO__Q)n@JJbRBt`(RFgVFuOJz2y3)Ywg0P$A)L2Wa8=BVEZ~JIl%Ez*Kr))
zr}rS@@&+QHP}3?s=vT+8hf<S|ZO?i~hi{(_8~Lh^GsqMX=m9jMkSR_}Qe^;y)^Vir
z={<NM|B0lLnAIZQb9ZtVYP4DdhhzAR-<JD&>oP^p3p{&N>SX@%h@QtMcI9?Yg^Q<g
z%c-AL(1Et2g5WEK9`~bnOmXiH>U>UkX6m8xzn8^VU3ZbCrz;r&7=qnZqg$eEeb<Ls
z1G*!)$8eW#A#p$tXa>}K!J60}q0g}1(hli{gq}}&r!DF|jVq?GVa^YI7dA%)F$naA
z4}{-!4EVoD^|F-Lr)COUnx?&pz9KNV!Ev5|;JUV3sU&)MmjE?y?G58%tKv?va`mK7
z`~w}5t(D93F&=s$hF!Ccc29E7C-%6}#mC6;a>LYKbs$`4b;`XY($|xsQev@*ZblbE
zJzJdbC0}0W>Q-lTgdms<9zia!E^DfIbGyM;!`>T(&X?B+cE}?#N~ovjB<-s{UzeSG
zdY(FlKzo7$5Se#3S_!I#D^81ngHPd-PAYUf46@Nxr1-d$lNCLIF`cdG9Nu$&CT;;r
z7yI3gK>6-0a1-Shr@FzIP$^xj@;oMh(og)WuL&N$!lv+&7>Sk;m*vodw~EDN4)BWi
znp{c!c>IblkN$9B^073wAw(G2ey_#b(NBlszFr9Dcuyqc$;*_ok-ipR0@UD^F!Ieq
zx_UK$3Z)3{ep6O*WbR^9mrtvySU3EcSf91F?i8QhRtUnij<nY9-(In5Hp&})XS|$Z
zc}w`pNTy)OXye3=9meWW(mmzPoHMIL<KLSZp7g$w+%B}(F_qd@pC#Txc*Fl>NnC8b
z?EeMH>w|UdV`>BQ?f^ImS``v*JG8EV)eWw~rp<s?B$tf20>{<s^ZpM6yc_9|fPJqZ
z9BB9T%o!*4@Ee6swI6oVU@Xc9exEhhSfq?EUB+~2wW9Q?UdSn)Pno4wn0MBem4v>X
zQxpB5%ex}EX}j9G>VfJ)rK6L-okX1Yyo}1%l8%WU*LcXl+#rEh>yX>j<hkO~mi)_!
z9_lQM0yP=&ms4<0KVr4keAna$R2Yx(_byc5Ji;Y6SH!v;{X+LS&qOZ_(scDfnhcFC
zll%^CRQ>bVfNIZb{L1$%DKO!mJe{~q_)bvt-Denam1~<|p+d2SQUM_Q%a@ypM~h@;
zC$u$RLwK;u?)b*di;8f9$`_^8`TCzT-See#1WqtWJIDR{tUMQ7MkzYX#pbN-n9?{3
z<Nc#^lA)0<LV!hyEk3R^8j`~nTkU*E3PmtQ96mmAVIg&8rm&G9s(<z6=9%IFPt7>e
zKp2(QNZu9=^s*c<QnX>&dqh~5kNV^tGJ^HkAPk}OX`HiUw-<LR?r`<nwt1_DPo5R%
z1{u4dTH3U;j&SrUPJZ(&!sPKv1m&ZXLXn;$o?g_-BxtV&suOYR^zC`L%&D2r>}||7
zNb4sb#Y;)MD<m9(ZW_Uqw57^XEtr@#X1+ZR7I~Za6PaPfw3SaohIg0%+f=pSnDa+L
z^)MQ%{_kvlUY4%WUWCldDk&d!eTN+|zoWC2c{U;`q!0haC!<I7f|}3nS7ZHj??*K3
z{GesUSIV~aTa-&)@3%}G>GblHWjG?aIeQOaB`Is+hp?qGsht~5n|nY}={I*z?zWLg
zzHFQys9y?bdLS3=M0)zFeK6#|NcWl!@Fo`{N^;}InGy3Bdlr96k8|U3y~BwxR-i^E
zs82Y_#RfJXC%JH{@dW>1ze}&1n8KLAlECO2-?Fy<&}CH|x~zvY-Cp>1JM_QM<!#)J
zdH}+q%MN5-xY^T$I``Zntc{tpoJ8SM1vg6(sJbnizzA`~R<G3NYT~208C^%{;M{;L
z3s{lgiJ{oSk~F{vwr(2MrYPOqk|ess*t<e|T&TDQ1NdKxAlZHHmJz(Gj~UDSpVq%H
z)~?#BTQ!K%|FLbs8(W6qEGi?Jx(Qp598gkE*bdApV;Wo>Zm<uifiK*QR_p8gv+3!k
zt1qk>a(rgX2@1+#!+UzS;j2-xo3rHjNi_{>969n@^F0m)S0dd<UINg=C$CpCkY<|>
zoA4EK=8UBWJIVWcsf1%1%L`q&Y1_N2#k}$FHwv~POm<Bvzq*bZ0y@~wj)JD=%7fz8
zild1Z4oP~73bRQ&i&R1MPkU;ug5vl~Sw0fBLf6E3`V#KO)omik7UxXAmq-2HNwAGc
z>}#!;3V5lJr@aqZLc6v~E#w+!f<&Gh(~5q+PI$;g9$F;yzM4e7erzXTj%8<RfcN@3
za#^&y_A~@Gag15#VlhyN9iNahMa%hX>F{6s5)7`L&+2SLr3l&ymB{Q#lb8nq-!{vY
zELH1w5w^?zg}wBBw%tlrHuyCPQ7@$<K2&i0+<qsa+nAtE@A-!FbgiUS4SJdt*nhaI
z_a}%GZ`i&#pQKoGyVcFDn&^8ER^}hxm=jdwbQqp|j+>MaR(G}YO4qEh-Tmd=krrC@
zT-wg{w$oc*95e#4cVddDg*k(KYJ#$F1m{#2Qs(E+US7>V!f{LiqG%_`ui7>fP^S{q
zB#Bb<>)YtJa&JEoKWMurYaPz5p1U%UI~eHMsWwiT4eu~gB3N*&o<5>6b}&+|&|@wY
z)aSNnrktkITq?#19K(q)9V^l-*pDA?=j!-VUf$)Ll{xPqg<Qb&I`kkCjYiKK!*lUl
z?qC~<cnwL)$L>Fltqyjb{!~Vknh6Uc#nX5pyoRl7bw$=~Ype!Dz(-N{o+pvWfYkdI
zlyjql|KaU*sG&1K!dZ{?Re~WR@-{*Q4%9DopNHi$bCwa3kdoByV_#7H$M~#*af}b@
zKgLHUFe>CP_`K~T@3JZ$Teo(F<DOx=3UKfN=*?Zx%2k<bpZSe6b%^dIdx!+T?)L3i
zlknp2HS&ZHww2W@Jcg|&yFegy+A|M|EbaD2fQO0l_@Uw3hw54vE@O9}c59Ao2$D=q
z8cXf*!`k`%whfIjRekY>c_V?SE2~T-{S~Yc+Nyoce!2R8ard6laQ$Jps3anZ5Ftu*
z2_jlVw5Ssi86<k|L85m?XA*+w(StCeGZ=Mr6GU&(>*yugj1mS@a`*pyx@(<#KiqTI
zy6dj<b+0vpz3un+zR&xV8WS?GZ^Ur%rC!JCH1OVzny#cBT#QW-xlg#)%-Q67ljZ}t
zv}de*bc$?5XM+`+iy|Qh!h_W|1#xA*^xr5Kv(0)!AD)b=CpmDvJd#n3Z67&FMew<r
zqJ+EzS&crVQv>N?GWzWA5nUx@x7jFOuu|j;5cf6$+x_N!T<ta?rtmKh<*UEG{jCZ%
zh)sws#oV^o^bs`3b>a6ilAB%_n0eR0$O-Tg)*p$_2}wF}0`u|u?o~KTz<#jzQ~mL`
z44?QP3L3@BZ`R%G@S@Xnd8T@eGD3%0<&<2HbFf^j3E5Pe^Tw&gH+qwrnO&_WM_k}1
zZS013$-t?d?F!O>uf{9ezwHq1pVQaz<tO$#a%#lJC*GG|S5ZNSEriL#;CDyVpnkh#
z#;%<AabG9H^y{Qs>Wn+cQU51siq+f8d1>}jQ`s*bsD2=?iT?VG!ehJ%89YDV$v(dA
z+?e2!7+O%lD&%VXhAjStL0M>^YEQ6C$Q~vF6F)bPKk+|}G{m}gE||ab*}hclcV4_6
zvQFAjZZQ?l3P6Z~qa(`NGsCzaEtPBQu04JIdmj9<zch=8wV%fbRY(c<+~;eWS-o}t
zNgE4<Or0@bXRTi1r}Pf7A-$n(Yo3I4nBQs&odHMN=xoZVo7~ceYyENl_@db3{+<Zf
zHRNPY9#QWJWj{7gjKCN@OPp{K-`yNlI4|#47MPTL6v^;0-Z|}q05xxM?$cq0SN8ov
z8ky;6UwClRiF2d+h48Y2prM$<;m_xj#wGOIR5!UYLum|VUHwD5d>cZ{0t=SHw8<X~
zeGV(B3@2|qz`UgVD*K6H&)03+I2jHnz5Od;$zA%iafvWEPO!_au3L-Z|I>2j95GX|
zAFba0G5oeFvS;@dJ}^;*lQ;ukdWe6+BGO#e!Yb>$>ssTa>sI(nnKXR}x9rxGfn<=5
zRk;JfvTiXfSRrI8*@~H8V#X^-f8Kdrk@w6%o4r0(T&BY!l^BRL3~)P0sQo^59i4@8
zaY++@Ky7b^ag1S9zn{tzJ7oetI~9D=Vn*9r2Y4OUEMO7zl-;-6{d`KD3Dr5Vl35aq
zzUH-Vo*jIR@nRa{zLX9o(c26+<Xu1fBcqHQ5(hDpB;U!^b$FWZqz~OUjzss(%74nt
zGk#}o6(`Q^p2$!6!Y+QpjG`OVG6dO@KX&9;U<qm|RKf>(T%4va`>XN~WYO!hFMI(h
z%zogkZ2_h0F%c3Kz=&SXEzSvuwA^QJR&e7|L!PhKsJ5^?D6Hy3euBfGSn1P;x;{^&
zs4yqjSYGn*6z>_s(ZtW#*0`o~dz0Pq^jjLBV#|A^QnAB+E|1korhVAcxG)&9JM9HB
zJ$FG~^=ge)?=d2}q-o{;;hy)>!hD;<p@!wwb;7SlVJveaKlj+fvirwmS}pw>WfJT@
z_!LcaJg|+w&$pbFEEr$-^;iG)_g~}eYOG7V2Mw$VQvb+wrMaXJtr`;n?j+^t!<Ook
zyvMe~_JSI<++GdyP0ziG<?lx(NYuIUKCf<wOOs&Wa`fy7D)XLPft*+_X2nRf;25Dk
z7_-lFF1^iS#^&9yfk~k^+R4MVd&T{mp7+W{yD5iF&2@QVY4w#vtF9&ZU%0qY7q&8{
zjeTy2VqgF#m0Wr4^^t7UY_p}gvAwyet>tUm<hWSNJ4avMZ@;zvOD+Dp=l}NY4L?9S
z=)4)L#jG%~dgcgiFbQ*)lw3!YNswMR#O1L<F|k20G|bZ=19p{=tYvq|(Grt55Rh<}
zf199(*p9D_5IqI?9*eurY7(r)U?QuC<59g-U@C9=wNFStp{poc9MkUq))5rE-`Zfw
zQj(u!)DX6f<Y1{Z3zVsjsB(VW?#yT^^{IfVnrn!IIOxU6{i{lpR-W*NS8n1}`IQU5
zXjryP7ztBt+CSPLEED$7WxNh@45ee>31FvM-{&g@9p;<2Ed!f(*<BppyK%eC9kYm@
zIX(94$sY#P>voQSbVU~5t%phedaFB9iu>gKdee%x?$y($c&bo-JJ7V|o1=LgEFZ(Q
zL_XpQcCCSMQlq}~uI^B3T-&=gTC8x0TsYsRZ$^P-X+JSeMdaT<pwO2%pv$;MNAWg<
zS)z#1@-W9TJbS7o#M~K`4#8_mAe(iIpW=^z@Nzd!?YLgIwy`!O<L2J(TZ-|3MjPor
zN0X+NdB~cgEOUAO;&^E`)o0wixUMW@R)|USreCFw`uxuNWVE6vkEc+0PGnuuCw&bS
zp7GE&!84j9-<Wv2`mMbf;|KG?Hpxm=0=)h<_8-;aH!1hKBd$;iID*Zfs~Q0Lw+$dX
zL`PMjaK|`o%YW30w*Umc<G@EWLhis?69@=aL!toC&DO<K#_<t&17+ijM+u7yIs>mw
zg(J@|vh%{m97Gp<8k$O;B^|H5>C$a}+)D{YBvF656TEKi#q{{?jUBi-Ki<eRk&yED
zF}}JlPs965&Y9^;g>ES>z-u*9Z;bF;LD;vw<Kp7D+Ed;V_3S>8xYU+9&#EL9HP1|l
zV0CwiA3@KlABC6vdS6mfW`9hPmgO$Y3yyv*s^7(<!7y2p($=~a9DkB@;Z8k5o_72B
z4~WCvXLXOcCCEbsi?vDyzIsh+V+{FD7+`WIVo%1rgqWC;Mp+9q1_s44lqo}RnFnZu
zaJkEvK_C1h!w1ZCyAdiuggfjV2cTBi--C+;(hs1M7r68NOo@~eDFmI=B<5+30V2?F
z8R%TVDIZDTQ77OgGq~K|#pyeGp(_QtGy(3bfp9YeaRa*PH;>xUWg-@sLn_^xX3B&2
z0$^D%9CgGXkbw1yWC_Jj1v%p)gYy5+mbB%w+aLls5Ok?`06oHM)Wz*tG%lf0s57V`
zq<sm24#bAIQn}8~FF=_&lMsCA1CzY+;xCe_btig^`sI#mlr*o()zrL>?Rp}`-Z|=6
z-LlwlYg+d4-InSVfTD6sj*OY-;}srA#Dc|Ka4SYK&|txJeA!Hemfk;k?+@9aXlIF#
z3RzBrHRk&aU~=}rax*4=Pobr6)f2|w@=5T>?_l`4$ifV!eWL&Oc+tszy77aO5?RAi
z_o-^-s0erNXVLcyC{Mlmv9!o<Zp1CzEi86yCjH>gP<=`Kb-u1I?krnYi?2QRpXNd`
zS-X4C`%vW3?7>h1YE=JqAyos_jVMuOnTKX2k5XuRRD>;3P?Rmc6`*Xy@jO7kVw2tG
zzUJ%N(Ybo&gCB$@O}eVdPelK)-35lG=g~gV48|v3V=B*XamGu-x%zZz*(F|5Xb!hn
ztRC<wEVyMo<3#JUsNNk3{Y<K;Wr2NWp-L{u4^pC(mi1eZUq3tEvsqeXpME~gKk8b|
z#aZZ?_mTR&;|i0J_qpGW(lVNP7RJ&NQzau+?~eVvEDvcEs4|XrHA$-xpHL8!iY|Ge
zY<mwBlfyF4|MRM&@mRTtRXQujsm+kAdi)7;ux#9$N?vhgU@5jj-)fh}=);igoz+3v
zVN!2XcM;}>K=6GJLrZ-~zDVCzM1C%G4)N-LD7XLbnbiLiwfescqOKb5{@O(Q@0_PG
zj};aZ64acl1MQ)!F(i(5;NR@3<P`gjpV;_7r~91(4$WY<iI)J~C?V-rOCJGRnppq~
z!fdlfgt#wZcm{7HK~?|As%KRFU!o0DeBgeEMN2RwYI`>Yv?|NGoBrYK#tHp-YU5gv
zoAo|t627*|l3h<uU&7Q$Iys%4QIR`PE>T`1wEPN-329R^P?&luo!5)}hJNyFfj;Li
zin5S_ggOWtUfJU>jxf<+cD2FFj5#z>O+bfEaLe&p@MlObiC&g~41{k)pP~k!@p#+f
zDqlN;6(^rG(q6fD{yE0UPG7(MrQFD3v1d;MZ+z+RI8C~AKg>^7PT#XPFrRiyCv=$q
zHzhas)%CB02c<8|gFdb6o_WVCA>0uDIfB6pt_J>Av2cOtugYreIl{dfsi&1d#y9L9
zG>v8mm73j)yc|!@52UG({M_^yZ0!TKaw$)n{pG^mUUR+gjY^YAfLGd}_`7l~<<gkD
zDh*BejNsnQ5VM6x?Zlny-95>xy{vFCsjml*LR(e$*!?Z%UEgmB9yv&qPme_~*u_n~
zs8kh#|1|ihH=XTFOQ`cr0Lm>t2)0msp^qC0s1+VFpEnH-(%Kg)>*tVxi#<;=i@2Ir
z_*X}FG{w$F|E^?oA-$2s(#ld`Lp5Mn$hA$(A<L>S8H3zkFYt$n6%Z84G>eTn`#mi^
zACU;f&1M-wTLIiUAL&%1W<HMZstp7cXqz~)yTGw*GC9rvS%IMbP5r-MR?8C_8X|5>
zA9YdJ+Y4F+VfqI#kHs3X0>P8CTMdk+5()6Tmi=c*6EgyPNZ7+f?AA5>lt1UUra-KA
z`$_!zyS>2{VrufdX2H3ui*rSVZGyS@dGrzEgvlSS@$6uFfHgStd|!43-D16I%DUl#
zvu$ZJ{Z=MX(%71_#y8Omc=t)@WPV}`09jlhW?lr42a4q)H65`}T9;)b%)%9HDg_HF
zx+(duDw%MoY#9k&*?y^hUy5yENik3pmke;R?4)UcBhXFSLeN1{!LfnXjM)IeKws+D
z{=q1kv!O(H5o+bngudf-hRbP6;ztF0Zfu!CssF+!!-^EQu91P2{H1tiZ<B8P4(uJ%
zB70O^iYRJbvSVs^I%nRIRUXD3*{P+sajZY}jOVGYj?Sy`0W43r9v$O=h>tbdMuMGO
zTeT};0_9Aotuj)Dw7W8ic93hA+WGUmD<dPzq?}5)u4VN5+SqGiyNg+U4d#1CyG3F9
z*oSMwLh&!l@~*1#{0{nf!gD1V@PDn&>cv=0?6>tsr3^=po>3eFqoGw{Veh6dqgr#c
z4r=b1u13*v3?8p^X8CUMLU(T2;leWDGr0AjwYGkKB>#bJLv<*#9;b}VQ$q8_6P#PX
z!bJkw&8sQWA^q1p;v&+cDI68ekA0LTNf`U|2ZZB2<v5jMP3l{%c~0ozd|(<ixaQ>G
zY1CRISr)(+FU74S2ho$J3Wf+J>Wxj0P5!D;7ILluKa9}1c>~Q8FP)#noNpL48KDFC
z*S-X{1+jPC!5Yd!$m4D~x*CmGW@A;Va%v@hdah7`n|;#k7Py{-b8VUt*MwhM2O)#z
zS;v~LHalsVNi8*8eb)Fp_t&jfjit8GIoT&X{8l`3CTwx<i&e!AAxd%``<9O}<83|j
z#|J0XrL<#t7vquxgwW;^5~u1!y27E^dfltEg}SGhrvkslrls5U69p<1<Npk@(JeZL
z@B?yWz0^UKQvE~QB*!Dx$kO5qJ_!kKwKslf`+`4?rD+o6=IV;VHnvPFEFl;{INO>x
z02e%gx=kh=dW&=V_Z0c_IQ}Ec89fdbxd`A|ehz}A`w|9r)DMmh|7z+$woT92B^A=W
zS;~gHQBtPek;66(jJ!wE0Zl$zOsx7!nZG9V3VNBuONA)=`oP>zw9X72H(iz{0%g%d
zxZiZTDn`j%a7XriMIA+!pIl#^ev5o3;?UByAKGSh(<|OpH=2u7WZLFFNcmCVSYCdO
zLST}M_N7d*MHCjZay~rwTx0Ri@I~g{@ISJT$GzaJF4fz-`qYZC(^e-&1AS%H#so&C
zPMC+1Df!=8dYwMCQo5qk>I1W`hQWHQq=S6&2Hc;vBQ>1aNN+49R6yBYQ=6h|h_zS9
zRSUDgyQdhG%D_xj9NnA=FU>8hdYH?>MOzKigLdZ0*1Em3uO<#2K@lw=Y4sZs`R>k@
z9m9|pea)>)GG*l&N{&7*Jo+@ZV%50p^BfrF=p-O<T-m)CY`wZ{`^=D+=}!$tl{9Mw
zldvvrlkvQ|T%JVTuYqn$mXHYaJ;<j0lP6%Nc-zlxnLgrPy7UOhtx~dUFT%0Q=enSN
z%+G};wj0Xc%a+~@8fq+=HZ7jg10xIQ#xHgeM(ZU%Rg-@n2$!lS726rmO<N1DHUA^a
zWLmWt#0Ad^Rnoa^`{ta|hyBod5vSBqGA^y#8T|)ZI4*pGeK5p?L{RkBDB6f!m3!?a
z`<N>_m!E}#;xm(>*#}LNKW=d+tt}$HuGGX?(|qYRsmi^6&2NiY#hx2wH5WtE8U<kz
zwo2TlJoOB8sakNKnuld2l)1N-1_mZv>qC1w=N{BXdFKJL^Z+uD!>P3N9;Xy_Cl1oq
zxaccboOx+GiP<Xe-O|kc$@ZU9;x)K5$pAEbo5ZRlhGvHTWhZ5##?QoTY}%KJkD&Pp
z7#!{i+<Wq(74-)g-JpylUgG9NvAR@bM__x4P#{LC0lN2z<2S5bA$jL*BwmEc@XI|C
zD@UgN#dN#gP~t&C6Ku~DKSA2K94)7%IcR0)V2T3f+H?cNy-V@pY<GZdB8J%31&G<w
zzgxfspgG_zP=caemwuiha4_OCXaNXCx=|~2Hb%NeU?MU&yVc_n*xtq98FYXCK~M<e
zu~TgR!m<OZBx`CKiwE32THhE%f<LY5>Ls>UScs<<N2)onIhkpF4@|@|U9LL&WQm;m
z{vim~!z?HL>L=K$cP3WAYUim_B?R#zM?uY1k^Y1;jdtx*k$w<H^AbSsmFMKn!1#3H
z1_`(Y>?El=sXJ4LK<F;;E?}UmFc(7LD12W);=Iln;-rm}I>w#C)1`#N_T*?vZpx{%
z{M||9T%Am<%nW*&ib$17kQU5<mJ&wmPdLYd!4pgh94H!t#wAd~oAJ!O!_0BO!S!!Y
z=zsitXt8TJ1_Q7j-?!i^NEtGbHO+ARC~3&@XcV)3sWg{SkxvLb7rDIk3(7>IC0Jq<
zW-vP;>%HqIV7N(_DPI+|si7j@mxT0#y@AlrE2L{6D3ya{+JDsTPN?mOSJ?YOq}-PM
zV9S9VCqRIOE<vQcE|VH+2nWZog5jDIPby^K#X8d|CF@f%K=P_)HtKMR^MPmZ5h(^V
z4uoTH)GcQF5~oN6D9}IB;KC&80ob|+6c6>5YDhi+wS<5g@Dj)V_5Mt+(^C9_^bin2
zmd8{ID^fV&UbA;dP}?yymx1*5nmfViSHHg^EqaY!E@LOK&}I_C9Nv}x>#($RJ=mmG
zT2S*&%0%XL<Byur9L`Z3F&hzWUV0QmOd0)aM@j}Y0{nac7uMul2CcvrNBZW7VgJZD
zW-eLgVZTsOP>8|==?OiFv+?-yuixVJ{`P@?WO_}>E?b;?B9p<Os7t8k>h94)zjhG&
zj(R}*JriAqlCKxb%Wiw=f|#HNqQRwGDe$;;cZ1Xw*v1AAgJlew#R)G{D;<<x5=CcW
ze<B+LU`P<~GyR}rkstOoevz&al+HDQr)2P_+tqRf80kU=`3Pd?u)|TBMZifS(gMYn
zHg0Ra)P<{@Xm$w^i9D4&RxZn|JO9!TS66lb3RSDX^V6HoSqYfnZF@9<^WKhYUY4@=
z?qRm2Mww)`iG%s0)C!tANZ`ijmi{9<B!`~a{Uak<$gjf)cR=U<(79q_>uIv(p$2d;
z0b&R{*xBB6p2e|Oxz6se!X2n2G#z^NPyW35hbDJ?Zz(6gqz=3!@L_1abluLbQ*pd=
zg~41!UPX_qaK5pHQj0KyiB{X&IJwE%KBKz85so>}Ug@S5RQM`d{I@18<yL4k+g<&i
zy|i!@N;We7N1mF^gsHxxiqzPCg;9jzr>DFIMHQ=65AubRU#L0qM$@Ug!f1gakT;~H
zMCHF6c0QD*s;{hU!M&kxKo?;^o9lH)p|-&5^sb;9^GC<hn>vgep*@e2F`LZR*4tO_
z{hkkn+BaGr-YNWxA9=3Dvyp2#Y5qH;%Ng1=W_G~`eDRBmD@*cjZ88W4Lcq>&SUvup
zlPh&{E34OrFQ4s(AhLb8V|vAFcK2!Tht(CwOM#2Kb$|68xviUTod$wtgTv>}vhe1e
zd(h@gKOW<IUHTF6vCOIxiB;f4U9*{7+|%GS-?(MBriJng$MO4iuj4ft=H2^t_0vAS
zdPeij>aDKCo*C3@#%OP<BZ!yegL)Ricu+27^839H&dd9Zn!B*e`OZWPpQ(PmhexS?
z_kQ+jEFy38UG-s!a%g-3;0E}m`CVaxw!+$o>sd@{Q{|e=&+@b^_+~+LiVumOn+tw#
z%TP&lP;}RFV>H0OHbuDNtmhEx^QD_ny53Rw+HJPnDLrc-wB%Fa%Xr2j(5fCFpII%X
zJqJfhyZ`JrQ&60ab$XPiRwPKI%KSE47(Q%s`^2rcahr7GaeXq;&5dSaM;Yi$pvk2o
zq+9*s6PGE?#E|ldvtX%<fCAW-JfXkk-bDg7?o*4@jM=_LWB%UTM{d`V9xbnfw!qxF
zs*Qr8r>6&vUjEV3F+7KQ>*)vK^6YfKYE(;9jGm@l-2N)mL^*!BG~=GR_9oK6b5)O;
z>{H=u@GmC=$F-Cqt7VV2-ZmT^)-`9(Ibxnw&pkSJq}Nzy{`+sv&kk1@GfE|XiXIMb
z%>)I}9eh5>i5}ISFfjQ2kBkD{qU1iI_x?-+|MTM2P89lnbilx^Exb(bqr$SHoE&75
zxdneJPb!b()`-?z)1V7+q4lMGMVU1HCmxsGSViXhAGqL@dV2iityv>2+uW|O)-#82
zcJKaslf42LH^{>Dr47iRW&Yl=HJA-ZCNU`GynW?9L*V|UxBdCbhkl))&lP#U<TY6e
z6K+YpeJ}X%<B9!<;w%)du(E}3di9=Hy6v<6ii@H+J|vgsd~|d29Od6HPPUj*q~^i&
zo@VavuYY6;_2n1F$2a(oi#Nbdgz#aP0qXpe1NEVWB!tV_p5rsU`@Z7zMt=*65b$Wq
z=t83sz4Z4ljdIA=7cT}`*@Eh;4qE69DfE!)5BkPU%1!FXClX5cIHViCS!Q0ucyBQa
zzY_6Wt)rM^{8Fm^ijp9)^87EL4+1dP6Ru&XaOLd&oz5a4su2&Zx+FL+BKu_*A?FGF
z%8eez<s92)I2<TYJjt5BbgxudWL{vPiNfpQx1aBp8-v1VKrYjgE{(xLXD3X?a-e&4
zr3UIU>*w*w=0+20c2}V;@;$JHie8Tv^M>7nN~@b==Q&KCRqumC*kCuGG<$FBJ4LgG
z?~k7A-LVUV^uBXOHyw`1!y0{E`_O?l*IH~Z=q}EEkaqH)5Z%@|w#LWJQr8|i%JD)>
z^y(kZXiKQX^zeOdNVMMLZ22WQgY=bRoBj|gt(|clnY3GeOKVwc{temd3SqSw)z!(`
zU|f3U*1+-7Lh>&|x>vjLuJxa7br_;!-V4!xRf{kg&kT2zP{AdcTW^~_4tfTh#CJDH
zd<5%Vk@zOJXxg)IL%kIz<f7@8!dY-iQ@M>RRnME7k<KU$?6vr0+6YAP4==)N4_RI2
zk6%<C#9!Tl**x4*c!!qiYf4$D7|JAoijTyrwOCQTYEz%A<{wjwseO;#1hrBv)(>WB
zbb$nKr`N}H(cOm8=!AOv_|a*F=jEK}+$Iw&xQE?JC!oDxL+~q;tQt>JEfN=kEx(}y
zBTy`|f<zw4{SmuARkMrg&Z##LXPk$Sg%o;7bsl-?$v?8Y)@pu}w3-bTvr2tZtl4wu
z_L{X-+AD{x!juKIlzugiliruQn%M!j0y8i}q%{*4AHmw&f=>P{uQ{aRDx$-6Eh&X%
zC|Z3TflRfD$R^#AunJ@q?6A~r<=pu-H!%^~NMef3?G5h5i-mB4X2-kLw~nASIFXpa
zwW(rVhqlU)_M=SAmf|RG)M-y<6bQoyoLV_KH5Cdc0kronlTFA#i=&#C;d`cSJI9vp
zwj?Vzns26>S7H}fi=~di9)zz8fu`b<3lp>rUQMn;75hUPH~54tr0%IVKXyMo6`dFq
z9M_?&i$z7#%^UdFZ~o!lG<DT)&MrWjUa$AHoUqlt8}&^K8TwO?vR+UPCg<O@Wg5AK
z&vC13P{Cw*1lECx$_5Ux0~K1$oylrrs)etU)d23TIkYohwuLr2x9~tSM&7RdxbCQn
z-N*0)7D(Y5doTAs%J%*~@^(#rL1{_s)ovb9q0HzW`p-rhc)&P!P!Ne8s_mj(sd-hC
zNSd<{AdQ}!%FPnDq*PYpe4prtI{X|2i@l;55(G<tmJ%*xI_9B=B_V%DS3T+F<&R=2
znkPi`S(U)qOIh2X`M6j*a>LRv)`SJ39a!7^?)2}B)~|x8&y)n<+(5WS%fZv3gk~?c
zlg{Vm9zqfqjv~T0Dy}=2-1X#dByQpyDmK*NsVfbQaxAKu@8kmwo;y02_-e7x-K3Y<
z#uW$qVEZiwN6&x`#w`~0&gagiAL`4t=K;C3fXN5ZG3)B*^Y<M*jN~54JT%COj=#_U
zgM8<O>LbXUk2)e9dG6DeGyJYbgHkZbulAnKP|#cy-}FaFLJRPHEhmzj3fQ)#I^4Jx
zojsX$hrTj{p1;6H0o66thn(Fa8K8#>3_j%OxT9_8)c!tFEi;R=sp^z|axS~DwOYLX
zQ4yQP?t=gQt={*m5#Z#G=SF)Da^oxxs}AhZ9JZVCF<Iqly+Ji}uM1M%skOe3ri*_j
z7#*hXNUdfs^K?_gbL-9<luMTtu%iA+$4#x>mpgewDeUc7I6II;;V3Z+eg|x@3R^^&
zBMOT4v0qsE{O#6@;$?=AeFsC^X6piFsSk_=9(3BC@!3x5fVtrf3D^Q;u0()F$;%VW
zj`fMGk=NU5MKhtVLa{e~d`RO8L38i#2Grt*EedEW{sCfX;h)!Z!R}-H3hxD#_{lQY
zO?AUH@7;z1-tjHId<hki<srPMOGEvGR8flNZFn({GYMg~VM+mY?SxJj*P4K-cz0~B
zCiP_5^0+a=4hLDtPoxIsrD35L8(_*`Di>m^!U|}<vZdfH-&+q8eMmYH{CzTSlk3W8
z5(TPXsUXq{5tQ-rPTFYs>L%G`WD9E(E{^ePn6FR#;fP!Im}dQv9d)QncavaY|5n)_
z(W1PHo$!#?d8!*zLh&amm?7gR9LO1O#`<K&s&2lY+tl<`^$(xPc|C1KafaO7`@s0P
zIxUUOYU=@>G=_C*Q4|dE;!phLR45^76wZ^gZorfDhEBEgkLa1rn4tmjQ1D_bDEFMX
z`cHF=lMAMPzcMR-(6&|_FYEWNOw_;pgKL0oW#4f4QlJH#DUoh+qc1UDhpnbuIWNw}
zk~vy<ThpN_@H>JBZP(b?fX>i=lTV?;bWP9o=DEjgf95@1lflIptcd8ba;&VJK^o5V
znQRsKIy)rkmrxW@4Bo~g&Z|t3E!hb>ER*||E82hP8D5jacePppJjqM;E$yh!qd0G)
zM3jqLCwOYUXQ*Kf*u{S8m(cV2G`91%iHOoBX%sA<^RcRfO1TXQXEta5K{e%?S)fty
z7SoW+k8iuXqR30m(v!mqj+F&@D@h06C%ZjzfIA=)1X~{N(Ko$vO!3+zTIRlJ-4p=-
z)aoSnn8|$_P#Ez<38Ix62gWTh+L>@Qrk9+LRDN<jJ+`&u!aYg4Lc1)DUmZ4^bC8^K
zPCUTB|43n!5nCxYRVXgQI;^deUmwHIHNM>BRAK`sJ69qMDd-W%`!}G!b9Q?+d|vyM
zzn9|F!wv|vb<AYM#+6zJHQVq%d;UG=o;0s8%gfVmyUnVFQTn{k1Rj=fXA#>r+aW3o
zkcRhdiprVK7+;9Z0|;BaL_YtIRkh4Mwp5Iz*fF<Upn9ijLla!_u`u&<xG-gn#C3u4
zD+I+7e%~tKjrvg|&8DM^)eOy&^|E~s1-NZ;9OT3>XzKHrn0R-62nh7lznQ78(^o&x
zZK%;Q_xWWArZ4H9+sHE>yTP4ZhqI_jXb<#Bkq7RZ?F+t*6uZ;QGD>2^9I9)K{bGu6
z5jePoP<LHU7#){apJBIb&+C4)sVd;hc(LU9CUo(B+h9ccy~eU#9}Fw~q`%oKI>!4M
zwzisYzZ9m#T*%JF6{kv>n(t$!#4vZ0bUs;YYzlOww`KnLa{jaUZUBWBqCKlYY9AL!
z>CA}4d+(BGW)uZIt4VR2&=(k>RuiqbSt$1EsGmoNr&<=kuWG<N&N?a^FPYidRX#wh
z+`(M<3>B)IfHsu^{_I&zH5IiYo8l?E^Npi7Bzo;*eC}C}l-1eD+&qf+?Ceg24Am1a
zzYou{ENi)ni~s8CevoRHq-uM#9-4Feaas$r!pk?;cy;lg{gY=ajh9^Cx6W4<ENpoh
z=xH4V{q0dpDILDH!=WYvleWR$8fFzPGj@~IcGZ43X8x^P3hzs~`<I^K@%{1gA+NE{
z#pT0N^t$28qy6RZ1*dCCqR-<IUcN=TKEDfoA)>*(Yt4ucnmj5ZrPp=R8f%4{s1$Kt
z4TcokS>_XCE}@+BcF;p_fh??)EdO0kYr)I<F)RG_W@u!ELx_s+(&2^D5_{b80$|)&
ze~2HfJ&9_RqL8w+fmh2~XEu5KH5wPyW0os&dqA$!{jze)v1!BK82vpB2l6EKI}B#Y
z$M@UtBsjPh>h&o}UypeouKjB*`uby;UWE_KSn1-RMJZzE<D}!wu&1#MFZA^(z7GAe
zQk1aK)t!ofig0f8AA>HS?;h=$S#Vxklz$)*9Ac7QAr%e@5y*GieCA0Uc@4L5ZN9lD
zAo-VBX56l<ATy~sLbV|2eT4L8n&CCC(Rx`XnGq?*>;tLj>(6qj*r;e|Z?Sy2PsMEV
z@u~{htsB7K<>!l0t|!j??f0*l%CPo%JO*qD@4R4DOV$Abl#-Nh@yr?81I<E<jV$un
zbIgzPA2rSE-umNjG?kkgiXAosUnelhwI`s$+-#7XCSYA%b!K78QGK3=?<#mabM3!h
zYapVLe_XkP2QvzDX4wkdzeHU)JsZ@_W~^IPN_>Ff^pEQ_b<lO*e4g9PUB8iCsISn>
z_!xfX$h@u{A8pz3k8FEzfs@IT2o&N#7(g%OZ<q<e3OBWSF2F<=24~)UN_Vq@KTTXa
zYBUL{S!$fEu22>i?Vx`6dtzKsolTWitNGRUg?;4Q(5+h21KCiQX&?7GD{_t}73y$Z
z(X?mkPC5`eb*JBUDe^dUQxH}RD{F)CZAgx~ok6(!k?TctC^MNB1=;wGVwj$Ea%My^
z@7IzZt^U}aQBy-n5Ua51d*0sPgK`O~O1yze8dEhoF9w;v^)i30tPl*mmB*WC9rq#G
z?8ggXHNA;P8HE}Sx*F_?x~-aWqvRHB*ZcJ=D+Dx{w6Ez?2r62L?;ZhekTWMh0~yKo
z$2@<WbH5(?1BGdDdlzU3z+)Mpan9v`WY^}h@BnlF3h6c}8YwkToWZSQ6!tJ1V`uH4
z+x`;0cLM_tq)zVzGy}_HDA6#=@%NuYIRVEcsVR6*Qr+Q>I(M8?G&5{5!4EZa+oo;~
z3P*ug&C4%I`Q4S@HWM^pS7i);RaSsk3&pgRL$;p$P(bKj09!g4*tx4hI2!$cG-!DF
zp7i(ZEU+Hh3h*bAi5$U^N5dIaJ_(1ME2uy4AmR)_8T25nW7;wDP{{frBEjq{w$Wk&
zYJr2BF9V3y__+`KPQtbB$_yR=2D9I>q)Qq1Gib`ql5fDp5Z!!a+tM#vPIH78G!eVN
z?;igch&|@1kdxV+R1nZ*5I4kF@7~+pN2P0?v|*v2WN*pX@l_p~AB@jl?x$%wyS$xV
zubgXv+3J7T0~}oVl#mT^l6+peN)1l%&62VJf$!!9(an)b{12)A95KlUD%PH4AEAG=
z2MSMpyfYB`>g(fNq42MJSHrYCw8*%=pNb#fXbYU-Iq0%&To}hYynO38V&iwpl4^Xl
zkJ6x6^`+vYSPGeR!YJrF+V_NWS2%eRyq+djEV>|D<3aq|v_8)uAC+DK&z;BDI<v{W
zA$H8xc^h3eHmK&j<`<7pGy2KJ*xuH5_QRhB(t-v-B_;-4ttVE_UtIljiK_paB(CMY
z7JzF~IFxEMmCqR?S}?{i3=AWBk5mPc9%cGzf24^r+5WiuwQUgn5?ELfGVFadJ3yP@
z_P~>kA_LUznG34;<BNNBNaTwF&*utFW%KxenCsN!y8RDA8)`kjxwZBD?ukxfOQHL;
z1y7+8$C;SAy5k-$*l(VvV#(sC7IhMy`b?_!Jf!~d?cxE$cz*fjS;Xy1wX@E3pDoo4
zq5iZ3?XtJ-^yXZY-}?*tO2~!)c3AUx3`#c3hwuec`5ViABAO2INjn{N6Dqeh$YJvz
zGJGS?!5IBoCE;-B4yapMtyzy(0*FYs9XRNcV2_;j32w2i<y<@aU3N{)AWX<_GqXJ8
z{b@u{R~y=k<D%Iu9feVz9NI8wR+KNHzW!49?z?w)LP54|_aOff0!&fIaFQeJa1Oe&
zOnM5wbpA)C4*P>5IYwSek@kV?E9hSUsSm*d1}4lTF(Ob}iZmPWnmD)gvvp1nB7nM@
z(JU@wws#bgf&NeN2y))eM39u12?Aw1ZN42K&Em634V)+tnsYkXE{qhn^5-zf@?5XE
z-VZfa1d~~70<@%vOCM|{1~6h-0ioUg_Aj7Q=TYc{HCQjG1-3)uzt!M-$hmIWRm}-_
z#C(P_;i1iVHOt1M3pvr<-}!CHF2v!Q16FX{TCi}r)?QJz1-)Zt-4p<Cn>dPB2>6|H
zx-ArA+fMwKT4`?YJ=uc2t}u}^W>J?ZX|CHXst`0W2#Zt=satMZD%%f19Z**u^)>}8
z2fCQ!8{TJGMv1k6WEC4dL`0(2lY8pV{|q{Oa0<Suu)OGOwRnanBG=ll{}Q>U8=pa6
zTD+n8*2VPmg2oOKgIr-gD2~^^@yUMiIbt9e;tm_aU39*KW{BuPNIxsjkpT%_rz01^
z3!j&@eP3b+*K6(z>;v?D&5t34b0aBp8JQ6UL-q4{$s8Z^BY2eCm++=i4_wpJcZQ()
z<cH@joS#-Vo_=t#5Zkm@7T*wEoov8>TdD#hYv)~RJp1c&ZvBekYCHnn7UZ|Q@^p&g
zM>u7?oD6(99`q=%Va?6Xy2ba0@3f}1+uQdpU<u`iU4}6ut3^4t_9V}?It_Xi#6X`A
zNtt5860cl;jPblo>Sc?0=tgL%^HM-RnrkyIpRP#U7?|XG_H>}C@+O{Ik*lY*VF<s>
z@2ZVyVc3cI^DbUsPfJba`?Jj8{OGSQxUJ;@c!~1Ue#%0M-^luT;50Gudr`5jq@lCV
zYfCF@0Z;cihhrPp?K49=30VQhCsD?O^<(*#nvGAe7_7CO?}BuZ9~U3xVR`J0qQWEr
zVl(tfF<!H^?RcRlEB&#O#82k;+4(xbFU55d&zwMR%1WEPgvXj&e0>MS-}aUoyAGgn
zSyJxWdh1@0z&j|xto@(}nHuSL@Ls?czMqn2rEZG;*ulZ$+a=|1x1wBr!F|<1g<j8|
zUN45Tb-AqYfu{mITGdyd-@89m7TKSjKBcJ`?+Dc9%!WNxXGyrx*@6Ro#Cu!+68Dz_
zFUd=~^{>SXbd}x1NkFch2EYcHE++qxb$R@Kg4v-tGeJ%8;ffn-(SWu5KeD&5KPUU3
zc<14;I_SrLWY>X3lj%05eFmR^<AmTm_V5VK@SuQ=$l%VitV>**3GkMnNa<bmM&5oL
z!ruMdyHo4H-YTUixwC$leC`0%YPlC!jowF1Etem;&Id!affbksxLETOufyt$!H*-I
zZ>4!CFD5ORLE)j{MMqHMIcIdFjq~@)8#OWzCv}rkO<TpJeyb{&m$tTUa&U5b&xXfb
zMZUu8fa28kc-5l=t)Nj=?sQ>RuY~&VwIe$92Ltl$yUKF*CAYQ6<dnJK<0%LyU6zvT
zyc#OFz|5vc^b0HY7^J%gRsB8#&zJ9a`*oa@Dir%nl1)7T^psZHSY2H|<($3VlQl2)
z=cIqX?9{LXw~~woOJ-<(p+L=3hId1mPCZdKU7eL)D`EB-zG!%Q+*(t};ybzg2wIm{
zgB`w2x)P$I^!VfwaU3iGh3N+qenG#d`#_(fW1@D0(Nn?tGucj`(6hs*QTZLpuu(S^
z-zOr>8C~7F3fRH-D?jkBd$!B0pH8fmz7dKvMHRn|>}#JqFiQx)XSeToDXfguz0c-n
zel6gTd(}ywqHy%er%4ygjaF8K!t9d?g;6IrWO)o%Q7P}8AK|Y)mwnX#k{io%FWHP2
zmCkfxhY{KARcb}H5ANkO?*~VrPEr;UysV|f{hbxIqyyNT{hFCYSy8llfVc;IUC#FJ
zsh&i&IXa)Vww8ene~>me>S=;D!`xd~>dd6COjGBLVfj(0u6cKF(`2Gx35`cI2L@lC
ziff;{KC&#H!%ZQS<TPH!&oz1VBkI=cejeJXdVOGlE?`xh)8H0FGyg4a!H^=lqC<Zv
z$xwH4kjq%WB7lV>wR2-DG@x->llA?rD=&n4M!1#nE&LBYZ1dS)IajU+Wi)a}{tZaU
z!ajTP=!uH*w~MSYfcfW4bFv!~;sq5&C836HL)N^4(K+3}U4qL`U22-UK4?#^A{nQX
zYR7cHhKAOl_!0-V%W}2Z>Q7H4BsiYheCfV*bSoyg>Gr#g7=N32Yuo0pG;|I(9XN9I
z$*!Aht9_IkRzYaN<N{-c%<vw!G2?m0uT<l2cF>lBzDy=z-#XfSGJgO#31DqBJ_d^f
zzyow4D0>LXYT63sG43pkuf-J_EG6)`k7gImFGR9`hf!sGQc8ZFKA`;a9RtWkdqo7%
z{V1FF&W`N@kOOzHClxW#!DCelSM?TztG_NYs4J=9*Y3?{&mp*&B4?WF6do>^_42Em
zK+ate#rmuoWx58*YSWRC2E~L4XjZu8iO>RC8kziqzgZ`&%*%98R#(u+xh>hSaTh0l
zXE`@7{uV{Y?A?`}YWFoqsvr3kjzuN0@D~rP<U9^$khl7zWDCcZ;uh0yegVDdq@=Hw
zAgbP`Qz<e?dF~kZ4BC{l-;d$VnX#7St&LtX@C>pM_0$vibg6xv%(3!*^}}%QY(0F;
zz<c)$IUhS(Q{A{hYr)cI-&*77M>UNV6LU-AE2EJ~egpl~>cVf|@VEjZS#nSL0iABP
zBUSP~7ABqYJBs95q4GC7c6mbmD~f?M>6ghptErI;A0)_wI>_QHm$y+TKMypsEm@ud
zG|Okf%Afa4q@^gvM%{=DF-xg|5yipmg<x$Vqv_6J<kOT!xnQ3^jzRFUVXb~)AfR&m
zew|{!#pnScdx!@0WOwEX?X<Y)=fl%=g9?|D&t>kMwDRg^I4qz6ko8>I#4f@e6L?$%
zqk=T=^0{lZvp8JuY;z1@@t*<W#zY}EA^vDE;ZJ%w5b#lCdg1pzL~^+0^_x<BZMhBR
zmTZ~Xn{g=@J70_&Qx@ypQ&;WH$Pbby5j=S$Nw_IH8HWiZ{jJv7_QBId>B}d62_du&
z%?(*U4+Sl++guOQyl<;Xm9)g^;7YBQ(cp-SLoT~+ZtzP74VjFu(UeHh=YAj1Zv|bi
zzW<f1{n5)S`V^trGFkQb+xfEGc4ymqn4tLKec{NAFxh$>hwxW@o4q{M2Z<c~NhXf-
zl$X+*MexFGo?>`mriv{%8m!Cjn)M<6qyc>pnA$vO^UMLFVDsf7^yYPyfhzL5VC_ev
z0HAhf+pgunkV3fg#$>Eq+)b{q(ED`dcPNwY(3n1PhMnutSb=N#-Gh4%u?W1Fw~{&)
zM4H$(cR?N1u($V4mBCYNe}B}{M+qzx_XGW~FYg9T?!%h07fev!m`Bb2J|m8qx2@d~
zHxobpov!J&Yyjh>*&T4{ZKg)RHt8iZ=HnpGmN?&xk`h0sZSC1#ZCSw!Qc&Ij=&L;c
zoHV+);S8(h-SBSBcT=i2JN$d)LY?fEvp&ycm9ASh{%g<nUd_pPg<gefF)N2mk|o>V
z%c;8sD{pM}(?wkHkM^t>7W!MzFKsR}=%peJ$iJ;o{cw80QfU+&XQgTp#zZ1{ajc>a
zWMgIv0(lFT_{MuSgDg68--sFr7bFdkTV46_*jWG5TarEJkWARc*RyTQv&CSpY{8T{
zbI)uqV-;B{AEAs(O7r2I#o77vKB$M}gWkgHuh-%FkzMjb<@4Qt@$`ZIedC^t=wM{_
z3c6dI^q44eTXmeFdQH__(NKboLgr>*I)=((6(j4jAu0Mn?(VmQ-Sfg3?GK~j3|G?}
zsR-am<<Zscp(oqt^62}OhdXRJGBEdX8@Rjl(4CO9popm@Q%jz|C+{Vvw|jM_e(US4
z7nS9Q=1E5Q@r9P<@Y^IBOUrLn>d*UkIV9Vo$6Dz+Qd2%2HC8aIk{f&u1;U0E*>7Bc
zzDvccEZy^)LkFqzva``8J@_H;^RC}VMe@5Zh6V2Yss~^l=To1#lJ3F77_y6jR_{89
zG-W)oPrYF)%`b;P<7^i~&P-FA$QDL(qz*U>`H+G;VsPG3wlu(^_a@84P6Psn;7GmL
zAvD9XuoB#_bT3odAJ8MFGNG+R35VmUi&I48PhdxAxt~O+*hM9y7D0bANU=aO!inu8
z{e^mg;s8zF<+2|HM+icp(LfsZxf>1vbSrDi+FN)iQ@&*)-yP4*(LFa|j9J?$O!Jh3
zbJzYz{M@quMNv@U?QkA0Xf_^kbtB%6RCMxsZV0Ay3Q}JS$wAQ=Mo}dO1#qOyz*i*-
zMNK{hUStRTXQvp+hONj42KPT%L;w$mG)DsIJ?I21K#BnfKr4ZxP*?2wau2F0i}fI6
z4}SzKBAm{W?D3X-8LgSzLT9)nfGs3EJ%%3z$U;R~mXZH;N=4ZUJOEk9WS7n1tzK4O
z;wW@4yxqjjvbjB>v(8A|uN~;Qgfi>>JjUC3#dko|PMMTjXEM7AyQi`(|226<nwyAl
zk_8k%BYZ)hAvC>9z)|^Tc_;ZCwFu4qjxYff?FmqK(3pWpH*x1588}m6=6oSIVaak>
zd#&y(X6!%;QyG$;1A?AsR#w^`%2A77etJBy=GVJ&<aZuC?<edb>85ZLf;+=-D3U7A
z1B8X&9g*_&Lo$BIw2E8_0a0cKX`szaG6Vn_DR?{51S*m<vY0&zJ0C(5=OE85F=t)F
z`e);igB#}Sp0}U529*0eK8+xdxEsa(k_4>GY>NX-MC5LUJAU9%#@yh=upL>s)OQVW
zDmTD)6JIItr$%-d9OdU#YGkt1-_IF)vE9IiYw)BdPVb2bXB`YrymGZW{HzipFSycg
z5I|;;8_x3LO6HH=lbaVavz9~mHW)RVacR%Ye|#+bwT_%IKmBfuTl8yhU!Z?lp1fY_
z*?aG!8B$3!BQ38PSzl7Rkz?HHU}P0e3*|m`N#JpgsyFH5&Hmn6>+t)%&Ck@y`Ii+8
zhT2y@A6ctHK_|oi$Utt9KFwdc9KX;#hU^)o1nIf(mu8m@%_}~)plo|exO<U53%#cB
z>L3I^D;@(2jmWHZ!&XG;CI`KiszOQ{bzZn2%#+oq^4EDK^iob!fR0$pL2&0mO1FSu
z7x&`!fPvgj^=PdHC}JZb{)NQ-0=D~<l|NqUr{$IX(qp;X`|u?DAK63fp_`BD8n~dK
znsJ;r_DE;mRF&$Q;B}s7v3FG-nO?x4qNGNWO-4IvxemrKlZQ979iMU`^ql7(oJ$?M
zxuo+Y6|;UES?$%`_ix9!Zoc=o7gV<S_M@~UeC?~8u!iEn_5;gfHs9&EA*eBONa^Mf
zg*=`6lZthf$Ab~((ht;?Z$1?9Z0lYib_KWZdp6dfxymwLt(kkUe2r}<x2tbStY??-
zDA+A26Y(_Ew)}snAowpXPTfD+Sg^W&(!+F6_YIHs;;fU~gxC2-pa-?s1oBu&it*&>
z0hpWwM&wEzH<9cusUDrb8Os8P1bv!gWvyyHvC%qk*+csF7zo`lWKHQ-*S{IhTX9qo
zEDMDFCMiQ6RGe}gW-Wr;nhO1EeVc0M3Nr^B-sHcQxO$W0yO<eA?Zm<obTdO*(=i(B
z8!uZj@g`FIN9j+#8}zHwZ7>A|$SI#H6tEB+w%lB3iP-PUu2)q)zLWD^RlTZ(laFdJ
z0sd2~xm<Ln0PjQZCLb;AR<<>R6F+w2#bot1czTXXFZel?5aqodirnq}9m&Vp75`(&
z6L-ya)_+qf#I)JrZli;{cO>_lo%@sV(V3_M0h#%QRm~IMbC;7hc5BD1(3&cC$Slh4
z1}+OOds|ouiQ`~;?3yZ`qM4GGlqIWHbGu-22<WajE&aBKE#|$zg667h3qi@olRIe=
zLInYtdZiZ}HLPiEJ)1f2>!R&(_kT2T>9dD!T=4Ty5Sl@z=}pa%AJ%wAF(adU#D>rD
zOl3ipcE0aKClwgXT^^T|BI2c3z$-~mj*j0hriGI^)JU{k(sYWRHS`_(Z9eoF+=$?m
zJwP7)-FT8_D`4XG#b2lxO%&`=f~m7+>?FkWq)p~VRTVKDsi0z&qehLYUcRAsY8;IC
zT>ent`{g!4G}2EsT+K9Vc}W`&I>0^K?<8RZJ?_l--coX%v*Yn;xpPgW<i|)r&oZQ~
zcQb0Mx?$n>s9&t!KvDMREzzI9k?E773t`i<oPf}2^AYzJ_*Z-ecF5(e*oKttRBo8B
z?$7dk);5on!*PtW6Wp^#cjF2V6wGlnlPw)!VYsC}Y6p4ve1lhTn^{8XBEGot?eav1
zzpoqmTIu)74Dk)2m`D>s0+?^s^oOS9zv=&V$-<Lne67@|fgQ#AtZZn$>(;B+oUNgm
zp;h8<U3Ju)Q-xi40E*^rz9fzvpK&17kaOgD;)!UIt7Y7&N~d0x9cH-iAH|i#PY+lS
zd;G>NjCx(1%x7aSyAS@6J?(FBWAQ$ZPE^(Yqhr4jOL7e07#%^ReqKDA0@~oisaY5?
z2H!JAL_@t^JeE%hh5fAp&N{5s<Yfo|!UbM+BDEw#=kCn>BXgDyB<8?UVJByB&|ijG
z6!5uaLRKvX;PiYppuvB01w7cR_LdKQiTj|#N_BuqDr-rsI>nv^gcv|a=Ycl*w;_O8
zpNU|Xk6lNb5F}b75XPznaCh%QKs%Ok|1I;Hq=;V+pl4m<OjRM8xCX~}BMZxIpNw-l
zndl_0bRD!>%kq=^^LDLPpVB?%{xbqT4@{J=!RG~|<-c#y4qGhX?I;$8uBb(|7hQT@
zSyygq&Y&lBhMoMmfni!oScXA-#0G<i7^)fk1DDq##kHU5<V}|5`M5VsU{5}3`g2cS
z`(MqI_`g&^{a3^O7s}rM?><tSeym9{=cJTPE<RqCBx#&cb3oZA<zv1tT#QsLrQWZ|
zo??B&jjUdPdaQY60rncn6~?~tPY~?iLd%}B|2fi8Xg2w_`%Cw=$2xi>a0`uqXlTzm
z57};A|BxorI(|c_y!s>P?XFHE#ajxUdiM7-HKb)vpMyFMuVsXsU40|O{(YX}JuX9o
zudoAIm7qjUpELu3fZM3-gcHxspth2N^X?;Lb7_c_bL+6=8*j|{O6f0z8>U=vkmHe%
zt2}AR?{e8$z9?VqTYkXhsai4}uY_QAdR@ru@F3R-BPk5GU-HUh<^1O28&2F_EDJ|>
z*<{)~%HVCB#T|RlRESwp3zY^{P4p+((gQtCY>G5_JnqUz%CgZ)9H6EQ{2#ek|H+pA
z^JPH<;w=8Rx^RyOorV5_`C70CmfTzSn9^Y`vwyt(ja2%fI9iou`Nhb9F@Ps>`j96m
zd{^C$^X`=`yQJU>`5BN%^>m`=VR5v8UkchfobmA_N#)fQMFrv%bH;3KwVlHINzw#h
zyStL+4d*Zk`13{d{o|sf7;X;O#Cm0s{jL_xp<4jgQ-Plh3SjQy3QVPovBi>gp*lEM
zp>EX@reQ3U29?reVD$CD${mnXGO~p@`D}Zp+zk5zvokdnrwUzui9Gw|gRDX}x>$ox
z^~p%TWy~e<t!A&sG(!%Uk3k!M3C)pIS`$509aLIBBlgHus(*=`)^Jfug!rB1)&D8Y
z$c|}A+8)Y;&3jD)f~>=Ik;JL1SsR?cT9@<-!)|=dJ&+GeNNtKpm)eZ+0c#W-QR=tJ
zvIf)4EQtiKA{pph*m|k_-&ubpW@ujE%TYki&TVxk-x_s+PX%)J&(G*;M1dX1YyhzD
zT@r;P2SfkO{I8!N|GQM0|4+)OH!p(FKL_0c&cC6-Vj}2-54t`LY<OjX<*Wz^pf67$
zENezDoD*<N#O{A&B?$*Nh}!?i%2WRAksuSKt$$=q`6Pc(4d~1Z7_BG~ip8}GQU4<n
z=6}lyutc2sAF9l1&<rt>V2GZHwAf2%JN=)_T?Oib6(BEwRy&bcoE;I6anJ#iXIA<k
zX%KrUN;(QohjDI`h|t1i+%D831m>{{nBB4b^+PGFVg2N2cFq2gY5xt7dk<U<GXFo?
zyYhG_zb^hvw#gDQWi29Q%h>8?Z;>VIkW{iW1~X%<*_EXsRLEpx3pHNZ`YDuMp~#vL
zG9t1YQFh~f@cUK#dOx4{|M$J0&)ny^^SS5y+;i?Z&pGFF@60`(wy1n?9pG3*_tur`
z1~vp}e$QjgT%NMvOP&5B<Z&_~|5h(ZUn$!6G9>_~0xla~0oUO#QdL=3X;>GT)`1V;
zNricSHT(<U_gZ(rCC1^EJ8KMJzX|EezIgEGM$f?G%l7bpV^~G!uY-S~M?(t(=m99W
z&Fl~$kQOf!vI_t#=m212<C!-GZs%t0<>-uZ|NBN-(i@9OGREQ(rP!#dj_cL4UJ-|A
z_ri>X59<<0x%Z3sKk=N;foK%X8C_VTDDi5UU<sXHA<bSRem*HmCdDH~r#17QMVsS8
zc!Sv~L<#i;;sAd?6D}y`#4~Y6A*Gaoqj_JamOqDeyf7X+M}Y+c$@&AtfgYmj_kboR
zvQdDLA33Nn_VFY7+v9EUeJZC%i@vIzv9Vl;XgBIgO6;?$wpCu{Z!;BBEW1ibxZCK{
zj!`txx#2C^sDa{AeA3gFX;g5aECJJLH{5$KXH@X|OyT3sYIUqZbNZ0uY|-Gul_uWz
z&AsYnB<b1vl2pHvVdbPsaod9MK?jN13q7Kj;UA(4mB>t2^Xv9j@KN^dMdDFhp3ms)
ztDW{lWUzfo6Fr&O(i62;Q6y$yBpq5j7r^dAr)6=rD5khiQzsvaiVPsaeB>i7C#MAT
zx!KTGr0Is6tpe1LcP3K8g*lBZcXQ#{+ES{wpv+oqOSg?Kj>vNJvsN&z2zGHMu+(u*
z=3lJH4qPsgq<6x$bj>qJIWPhN_a-wnk{i)IDzmqy6=a_<OA>h*pDR2sJ(VBr?{L;K
zoSuXynH=n0%fxailFwar@Im1Th%(ozG1G56LWJ4*AR2@5JZ7@p5i<<*GX4rY^)4Ur
z+&tNyTiD{v{JFE~>d_2KRl0Ep<-!6TpH9@?xIfzWK04;U5LQN)92{`H=1j(|L41cv
z4v>qxK69$0_S1v%bVt{&a^Wb_h;}vU9c<<dN{88(XUx@D$e!>tw8n6+bxqZ1r;Ql8
zge;C#b?p`u2htHCYH<gxweU_yIEg7}h<@25JDN7SFazHs-Z|0HV*kF|^7Aq$sFv&N
zG{APnZMq&Eg@ypY15kO{0Vu={XNz#dxwyk^ac;;BjTK0zg@`-=z%KvW#Xr^@{ZfkS
z28CgTRe0gJUZFGIwEE^nj!;j`q~zgz9?acnyKL&pqYFw4)sk-&Mh24pXhMaRM5tCN
zW_7?~P6rDj%$Tx@&VMtL{Oku)Xo<5Tm`JH>x;U78BoBQ=<Q>b&Jz-T&%SjjO7MCd6
z<AW2ayG?mu@65(07S4-Be|eSJXY*<?1q;bMCsTLa`v?*BoUV>^G+owc=Aa`P+X10{
zjX2HHprlJrd(B7XL(dxbXq-6e*jiht-bhIorrN-UqAK6bn@Hl8dzGg#YA`b~{xvI+
zN2h}vK_li?Em~YvR-~TQv<D-H>Ks4v`l7a9ZG=K4BSXIy+nnv6K=}Sx%B#B$gwOqW
z9eeDfS%C<-Lzi{m$qNf}zms^>J(JsFuA8P`OntxmENs5DeK~Sg#{W{B&ih#n=|iru
z1iQ2Kq4r)u3qt+VN{|Wn@9Q_cj!Em8+9;Chha$WoF!M3Wy7AZDzthkm)3w+7Gyrg2
z0054HItad6UECa<J&<nakscnKZ`d7eX-OML=LqX?Yp6BU%Ehh~Ib#K-jfF6uKE<x~
zz?%&rM+*($G7FltdJ+K$jJ>sbX;ov@0PKpAXvBDN-Fu_7j<Z79S=o8l5?W$*JzU}z
zBoeQC&~nHk2&`&iYP;D;GO!>|Lk+1jg&__{1oqR&P-!3~S&}J%Y1+)Yll-1rLi0I@
zqERg-mJ+d2elBA)OPqZ4T#Tmz>G3SF@{)uPP4o%OvdINccslg_p#rZj?m9}N_5>Hs
zsZ|W90htU^mLfpAtDu^+{JxC0ckpu#&?tP>_6k5An%VWibb*;=20>dCBL1bU{6!n3
zD1>$;Z0+SSZSg$s+}4}rPoKQj#IU0??zHCYyRF2f#GMO^HM<usB1<4^T}s>6HJZYn
zA16_HYUM&r3>s}KJD*BP62V3jW2V01)`wGlhmprEe1})``-g}wJtdwms)OOO1^3_*
zhV=`VstdjkkF^{rVYt(5%iiA?v-;pmjU#?d+cNM#Sz59e^~USZM2;d7iMP~EJk(}k
zb%<KA>NOFtQnj9FoI~!s^f0ke6@BfT?VmYUz4u!#PnTv#u9Ybtz<K6WT3miZeC+O|
z_x|v3exxk!BQY<pHnq|ae%{y@Kay7^-l)=MK$=&W%Wn9BFZHju<iB`cV=68yAum!A
zvv@)!zt?z-@LerYeT4N5a`)6_nciV-*ZTYy?ZpQ@dtJus3^h`Zvc?7*1o-iQJGRDS
zDSOfJl&e>oub44fdfN6>p3P5anSM&8W)@*@u6BGeKyf~ADU*AlJFMN_F^Mt6#lx4%
z-tv&=PWpmJ*rYWgj!-KpOUX>1sn;rIy$0cxPy5$h?ECBc*a-`nYjw>l>hbHzfvbbx
z2{c*ueS_>xvnqGgg)eq#J6Gn-iVYrH@%<iJL$tN*o?acr`J+mm+w*&M6$FFyqx#sx
zA|#W|KNwjlAA6jQo9@mUP$w_rQuBPoW%@I(cCLrMFj!gWXe4AkTU#E7O?1@9S03%X
zrWi>5xVn5_{3Q7j?5XK%aMN0&N$_>`iE*NmZ3F4HeO?<I7faB8Q61s{ox<--@?5OQ
zt9Z~Oh=FFw_N&vdc5(T?&)AUJR!NF&a_*I43#HI4@1dng4?l!5hS(tFMco__8CT!U
z;Y}}}6)_U{Be*Y<(hz(=VJxe7jXO%U$*6zQ6z;3rU5jW~%8A|;a*M#!YozL2Vd+m0
z<OpT-XTH>+V((+CdhJ~{Oi6c0im3?tB96td7$Me6f8~v=1q1oLbm6Iwq}&M4DG9R1
zN{@|z=Ve$IqgQC!%kgw2?uItkw)XY=CT)BCmmHr`xIT>H%tw;x1}o)Qn@L1ly+LPG
z8~V7p6X{AufZpwSQma$Xcp=>#of9XHFGiV`vwTx|$=1VY)}XQQY_!ctSFrRXU+*JW
zOSEg1D3Y}v+;YWZXY2m2fOye_e(CZd`j`R}39hg(x5vqy(~$}Mv}Q?63?b~HoFn19
zng{1veCcjdPb;VH<>%5Mv!e)R0^ai?x2<nl#!S`FAlyn>KZQwf4fJWo|2ZWv>Err1
z@cB$Ef2m#>-Ami%5w&t>0qfdKg}wo~)&)M-*^v5zpeMEC|5|#^Wl`I{_^oNx*Tig}
z|4hAZcCn^26;$V~2ne$481OTAUtD*EMuO^`4+ifXf6v{I>lHN|=xm%lERB6!knZLi
z`i;=p4p4YOO6VI%pbI{L=?CG)O$}%vmTpLlJ6v+3-bomw8W%qYb}Io1dA1Rb(QkUX
zEm|*}8`=hkLvK9$w>YK>4`Y=<j5t~VVBLnp2l`adWB!V;a}b;dquSd90l<(G0t)5V
zasy-rBzAYOc0<~o_W->v%Kdlz7sM+&SAc|vK_LqL3IK#lZX*21g|_(ltGSsG{gxjE
z>B5*^5UBMZfMM_-{J1+Hksj{wEy&Hre+H~DGt$#%0Dw0FJEu59Y7@}I0f|MzH|tH5
zokF_ds{Szqlr9O(?pU_5C@8-rBo7}9^0(4)>ULA!4+^&C?pAL2le$%TCo@0U*ct%i
zU!4yDDUlc<c~J<k@!77Ve1@ASSfrh!HQW(vjY3LGI=P^Ba<DT+{W**qzL1S+{xM0v
zPR~x1?fJq_3;<9KfB^r<9(I!N4Ca0Ue7d$dh#jHa&QNbNwA%@~-5vde1OWGtU&i#8
Yb3*9Qfwr|_C#(P!G|y9bP|1LQ1A{Q6Q~&?~

literal 0
HcmV?d00001

diff --git a/docs/connectwise/CW_Security_Roles/api-member-security-roles.md b/docs/connectwise/CW_Security_Roles/api-member-security-roles.md
new file mode 100644
index 00000000..8b3276c5
--- /dev/null
+++ b/docs/connectwise/CW_Security_Roles/api-member-security-roles.md
@@ -0,0 +1,1373 @@
+# ConnectWise API Member — Security Roles Reference
+
+_Generated 2026-04-16 from `Security_Roles_Matrix_11132017.xlsx`. Do not edit by hand — update the XLSX and re-run `generate_role_docs.py`._
+
+## How to read this document
+
+Each ConnectWise module lists the actions it governs. For every action, four permission verbs — **Add**, **Edit**, **Delete**, **Inquire** — can be granted at one of these levels, most to least privileged:
+
+| Level | Meaning |
+|-------|---------|
+| `ALL` | Access to all records in the system. |
+| `MY` | Access to records owned by the user's team. |
+| `MINE` | Access only to records owned by the user. |
+| `NONE` | No access. |
+
+Not every level applies to every action — the source matrix only documents the levels that are meaningful for each cell. Cells marked _Not applicable_ reference another verb (usually Inquire) where the meaningful level is defined.
+
+The machine-readable form of this document is [`api-member-security-roles.yaml`](./api-member-security-roles.yaml). Use the YAML when writing integration code; use this Markdown when reviewing, discussing, or onboarding.
+
+## Table of contents
+
+- [Companies](#companies) — 15 actions
+- [Finance](#finance) — 12 actions
+- [Marketing](#marketing) — 4 actions
+- [Procurement](#procurement) — 10 actions
+- [Project](#project) — 16 actions
+- [Sales](#sales) — 8 actions
+- [Service Desk](#service-desk) — 19 actions
+- [System](#system) — 16 actions
+- [Time and Expense](#time-and-expense) — 6 actions
+
+## Companies
+
+### Company Maintenance
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | `ALL` | Allows the ability to create companies within the system. |
+| Add | `NONE` | Retricts the ability to create companies within the system. |
+| Edit | `ALL` | Allows the ability to edit existing companies within the system. |
+| Edit | `NONE` | Retricts the ability to edit existing companies within the system. |
+| Delete | `ALL` | Allows the ability to delete existing companies within the system. |
+| Delete | `NONE` | Retricts the ability to delete existing companies within the system. |
+| Inquire | `ALL` | Allows the ability to review existing companies within the system. |
+| Inquire | `NONE` | Retricts the ability to review existing companies within the system. |
+
+### Company/Contact Group Maintenance
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | `ALL` | Allows the ability to create/add Group information on the Groups Tab of a company. |
+| Add | `MY` | Not Applicable. |
+| Add | `NONE` | Retricts the ability to create/add Group information on the Groups Tab of a company. |
+| Edit | `ALL` | Allows the ability to edit existing Group information on the Groups Tab of a company. |
+| Edit | `MY` | Not Applicable. |
+| Edit | `NONE` | Retricts the ability to edit existing Group information on the Groups Tab of a company. |
+| Delete | `ALL` | Allows the ability to delete existing Group information on the Groups Tab of a company. |
+| Delete | `MY` | Not Applicable. |
+| Delete | `NONE` | Retricts the ability to delete existing Group information on the Groups Tab of a company. |
+| Inquire | `ALL` | Allows the ability to review Group information on the Groups Tab of a company. |
+| Inquire | `MY` | Not Applicable. |
+| Inquire | `NONE` | Retricts the ability to review Group information on the Groups Tab of a company. |
+
+### Configuration - Display Passwords
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | — | _Not applicable. See Inquire level._ |
+| Edit | — | _Not applicable. See Inquire level._ |
+| Delete | — | _Not applicable. See Inquire level._ |
+| Inquire | `ALL` | When reviewing configurations at the company level, Custom Configuration Questions that are labeled as "Password" in the Configuratoin Type Setup Table will be visible. |
+| Inquire | `NONE` | When reviewing configurations at the company level, Custom Configuration Questions that are labeled as "Password" in the Configuration Type Setup Table will be encrypted. |
+
+### Configurations
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | `ALL` | Allows the ability to create configurations within the system. |
+| Add | `NONE` | Retricts the ability to create configurations within the system. |
+| Edit | `ALL` | Allows the ability to edit existing configurations within the system. |
+| Edit | `NONE` | Retricts the ability to edit existing configurations within the system. |
+| Delete | `ALL` | Allows the ability to delete existing configurations within the system. |
+| Delete | `NONE` | Retricts the ability to delete existing configurations within the system. |
+| Inquire | `ALL` | Allows the ability to review existing configurations within the system. |
+| Inquire | `NONE` | Retricts the ability to review existing configurations within the system. |
+
+### Contacts
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | `ALL` | Allows the ability to create contacts within the system. |
+| Add | `NONE` | Retricts the ability to create contacts within the system. |
+| Edit | `ALL` | Allows the ability to edit existing contacts within the system. |
+| Edit | `NONE` | Retricts the ability to edit existing contacts within the system. |
+| Delete | `ALL` | Allows the ability to delete existing contacts within the system. |
+| Delete | `NONE` | Retricts the ability to delete existing contacts within the system. |
+| Inquire | `ALL` | Allows the ability to review existing contacts within the system. |
+| Inquire | `NONE` | Retricts the ability to review existing contacts within the system. |
+
+### CRM/Sales Activities
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | `ALL` | Allows the ability to add new activities. |
+| Add | `MY` | Allows the ability to add new activities (same as ALL). |
+| Add | `NONE` | Restricts the ability to add new activities. |
+| Edit | `ALL` | Allows the ability to edit all existing activities within the system. |
+| Edit | `MY` | Allows the ability to edit only the activities that belong to a particular member. An activity belongs to me if I created it, if I assigned someone to it, or if I am assigned to it. |
+| Edit | `NONE` | Retricts the ability to edit existing activities within the system. |
+| Delete | `ALL` | Allows the ability to delete all existing activities within the system. |
+| Delete | `MY` | Allows the ability to delete activities that belong to a particular member. An activity belongs to me if I created it, if I assigned someone to it, or if I am assigned to it. |
+| Delete | `NONE` | Retricts the ability to delete existing activities within the system. |
+| Inquire | `ALL` | Allows the ability to review all existing activities within the system. |
+| Inquire | `MY` | Allows the ability to review only the activities that belong to a particular member. An activity belongs to me if I created it, if I assigned someone to it, or if I am assigned to it. |
+| Inquire | `NONE` | Retricts the ability to review existing activities within the system. NOTE: If set to "None" the My Activities Screen will no longer be visible. |
+
+### Lead Import
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | — | _Not applicable. See Inquire level._ |
+| Edit | — | _Not applicable. See Inquire level._ |
+| Delete | — | _Not applicable. See Inquire level._ |
+| Inquire | — | _Not sure why this has a My / All option. It only controls whether or not I can see the Import Contacts menu icon._ |
+
+### Manage Documents
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | `ALL` | Allows the ability to add documents within the system. |
+| Add | `MY` | Allows the ability to add documents that particular member uploaded within the system. |
+| Add | `NONE` | Retricts the ability to add documents within the system. NOTE: This setting applies to the Documents Tab of Agreements, Companies, Contacts, Configurations, Expenses, Opportunities, Projects, and Service Tickets. |
+| Edit | `ALL` | Allows the ability to edit all existing documents within the system. |
+| Edit | `MY` | Allows the ability to edit only the documents that particular member uploaded within the system. |
+| Edit | `NONE` | Retricts the ability to edit existing documents within the system. NOTE: This setting applies to the Documents Tab of Agreements, Companies, Contacts, Configurations, Expenses, Opportunities, Projects, and Service Tickets. |
+| Delete | `ALL` | Allows the ability to delete all existing documents within the system. |
+| Delete | `MY` | Allows the ability to delete only the documents that particular member uploaded within the system. |
+| Delete | `NONE` | Retricts the ability to delete existing documents within the system. NOTE: This setting applies to the Documents Tab of Agreements, Companies, Contacts, Configurations, Expenses, Opportunities, Projects, and Service Tickets. |
+| Inquire | `ALL` | Allows the ability to review all existing documents within the system. |
+| Inquire | `MY` | Allows the ability to review only the documents that particular member uploaded within the system. |
+| Inquire | `NONE` | Retricts the ability to review existing documents within the system. NOTE: This setting applies to the Documents Tab of Agreements, Companies, Contacts, Configurations, Expenses, Opportunities, Projects, and Service Tickets. |
+
+### Management
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | `ALL` | Allows the ability to add information on the Management Tab of a company. |
+| Add | `NONE` | Retricts the ability to add information on the Management Tab of a company. |
+| Edit | `ALL` | Allows the ability to edit existing information on the Management Tab of a company. |
+| Edit | `NONE` | Retricts the ability to edit existing information on the Management Tab of a company. |
+| Delete | `ALL` | Allows the ability to delete existing information on the Management Tab of a company. |
+| Delete | `NONE` | Retricts the ability to delete existing information on the Management Tab of a company. |
+| Inquire | `ALL` | Allows the ability to review existing information on the Management Tab of a company. |
+| Inquire | `NONE` | Retricts the ability to review existing information on the Management Tab of a company. |
+
+### Notes
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | `ALL` | Allows the ability to add information on the Notes Tab of a company or contact. |
+| Add | `NONE` | Retricts the ability to add information on the Notes Tab of a company or contact. |
+| Edit | `ALL` | Allows the ability to edit existing information on the Notes Tab of a company or contact. |
+| Edit | `NONE` | Retricts the ability to edit existing information on the Notes Tab of a company or contact. |
+| Delete | `ALL` | Allows the ability to delete existing information on the Notes Tab of a company or contact. |
+| Delete | `NONE` | Retricts the ability to delete existing information on the Notes Tab of a company or contact. |
+| Inquire | `ALL` | Allows the ability to review information on the Notes Tab of a company or contact. |
+| Inquire | `NONE` | Retricts the ability to review information on the Notes Tab of a company or contact. |
+
+### Reports
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | — | _Not applicable. See Inquire level._ |
+| Edit | — | _Not applicable. See Inquire level._ |
+| Delete | — | _Not applicable. See Inquire level._ |
+| Inquire | `ALL` | Allows the ability to review reports located in the Companies Category of the reports module. By default, when this option is selected, access to all company and contact reports is allows, but access can be customized using the Customize Option for this module. |
+| Inquire | `NONE` | Retricts the ability to review reports located in the Companies and Contacts Category of the reports module. |
+
+### Surveys
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | `ALL` | Allows the ability to add information on the Surveys Tab of a company or contact. This applies only to CRM Surveys. |
+| Add | `NONE` | Retricts the ability to add information on the Surveys Tab of a company or contact. This applies only to CRM Surveys. |
+| Edit | `ALL` | Allows the ability to edit information on the Surveys Tab of a company or contact. This applies only to CRM Surveys. |
+| Edit | `NONE` | Retricts the ability to edit information on the Surveys Tab of a company or contact. This applies only to CRM Surveys. |
+| Delete | `ALL` | Allows the ability to delete information on the Surveys Tab of a company or contact. This applies only to CRM Surveys. |
+| Delete | `NONE` | Retricts the ability to delete information on the Surveys Tab of a company or contact. This applies only to CRM Surveys. |
+| Inquire | `ALL` | Allows the ability to review information on the Surveys Tab of a company or contact. This applies to both CRM and Service Surveys. |
+| Inquire | `NONE` | Retricts the ability to review information on the Surveys Tab of a company or contact. This applies to both CRM and Service Surveys. |
+
+### Team Members
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | `ALL` | Allows the ability to add Team Role information on the Team Tab of a company or contact. |
+| Add | `NONE` | Retricts the ability to add Team Role information on the Team Tab of a company or contact. |
+| Edit | `ALL` | Allows the ability to edit existing Team Role information on the Team Tab of a company or contact. |
+| Edit | `NONE` | Retricts the ability to edit existing Team Role information on the Team Tab of a company or contact. |
+| Delete | `ALL` | Allows the ability to delete existing Team Role information on the Team Tab of a company or contact. |
+| Delete | `NONE` | Retricts the ability to delete existing Team Role information on the Team Tab of a company or contact. |
+| Inquire | `ALL` | Allows the ability to review existing Team Role information on the Team Tab of a company or contact. |
+| Inquire | `NONE` | Retricts the ability to review existing Team Role information on the Team Tab of a company or contact. |
+
+### Tracks
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | `ALL` | Allows the ability to add Track Items to the Tracks Tab of a company or contact. |
+| Add | `NONE` | Retricts the ability to add Track Items to the Tracks Tab of a company or contact. |
+| Edit | `ALL` | Allows the ability to edit existing Track Items to the Tracks Tab of a company or contact. |
+| Edit | `NONE` | Retricts the ability to edit existing Track Items to the Tracks Tab of a company or contact. |
+| Delete | `ALL` | Allows the ability to delete existing Track Items to the Tracks Tab of a company or contact. |
+| Delete | `NONE` | Retricts the ability to delete existing Track Items to the Tracks Tab of a company or contact. |
+| Inquire | `ALL` | Allows the ability to review Track Items to the Tracks Tab of a company or contact. |
+| Inquire | `NONE` | Retricts the ability to review Track Items to the Tracks Tab of a company or contact. |
+
+### UserCentric
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | — | _Not Applicable. See Inquire Level._ |
+| Edit | — | _Not Applicable. See Inquire Level._ |
+| Delete | — | _Not Applicable. See Inquire Level._ |
+| Inquire | `ALL` | Allows access to the UserCentric Icon under the Companies Module. |
+| Inquire | `NONE` | Retricts access to the UserCentric Icon under the Companies Module. |
+
+## Finance
+
+### Accounting Interface
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | — | _Not applicable. See Inquire level._ |
+| Edit | — | _Not applicable. See Inquire level._ |
+| Delete | `ALL` | Allows the ability to delete GL Batches from the Open Batches tab and to Remove Records on the Unposted Invoices, Unposted Expenses and Unposted Procurement tabs. |
+| Delete | `NONE` | Restricts the ability to delete GL Batches from the Open Batches tab and to Remove Records on the Unposted Invoices, Unposted Expenses and Unposted Procurement tabs. |
+| Inquire | `ALL` | Allows access to the Accounting Interface Screen. |
+| Inquire | `NONE` | Retricts access to the Accounting Interface Screen. |
+
+### Agreement Invoicing
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | `ALL` | Allows the ability to create agreement invoices within the system. |
+| Add | `NONE` | Retricts the ability to create agreement invoices within the system. |
+| Edit | `ALL` | Allows the ability to edit existing agreement invoices within the system. |
+| Edit | `NONE` | Retricts the ability to edit existing agreement invoices within the system. |
+| Delete | `ALL` | Allows the ability to delete existing agreement invoices within the system. |
+| Delete | `NONE` | Retricts the ability to delete existing agreement invoices within the system. |
+| Inquire | `ALL` | Allows the ability to review existing agreement invoices within the system. |
+| Inquire | `NONE` | Retricts the ability to review existing agreement invoices within the system. |
+
+### Agreement Sales
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | — | _Not applicable. See Inquire and Edit levels._ |
+| Edit | `ALL` | Allows the use of the actions on the Agreement Sales screen. |
+| Edit | `NONE` | Restricts the ability to use the actions on the Agreement Sales screen. |
+| Delete | — | _Not applicable. See Inquire and Edit levels._ |
+| Inquire | `ALL` | Allows access to the Agreement Sales screen. |
+| Inquire | `NONE` | Restricts access to the Agreement Sales screen. |
+
+### Agreements
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | `ALL` | Allows the ability to create agreements within the system. |
+| Add | `NONE` | Retricts the ability to create agreements within the system. |
+| Edit | `ALL` | Allows the ability to edit existing agreements within the system. This also includes all tabs on the agreement. |
+| Edit | `NONE` | Retricts the ability to edit existing agreements within the system. This also includes all tabs on the agreement. |
+| Delete | `ALL` | Allows the ability to delete existing agreements within the system. |
+| Delete | `NONE` | Retricts the ability to delete existing agreements within the system. |
+| Inquire | `ALL` | Allows the ability to review existing agreements within the system. |
+| Inquire | `NONE` | Retricts the ability to review existing agreements within the system. |
+
+### Billing Rate Maintenance
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | `ALL` | Allows the ability to add custom work roles (agreements, companies). |
+| Add | `NONE` | Restricts the ability to add custom work roles (agreements, companies). |
+| Edit | `ALL` | Allows the ability to edit custom work roles (agreements, companies). |
+| Edit | `NONE` | Restricts the ability to edit custom work roles (agreements, companies). |
+| Delete | `ALL` | Allows the ability to delete custom work roles (agreements, companies). |
+| Delete | `NONE` | Restricts the ability to delete custom work roles (agreements, companies). |
+| Inquire | `ALL` | Allows the ability to view custom work roles (agreements, companies). |
+| Inquire | `NONE` | Restricts the ability to view custom work roles (agreements, companies). |
+
+### Billing view Time
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | — | _Not applicable. See Edit and Inquire level._ |
+| Edit | `ALL` | Enables you to edit the Billing Options pod. |
+| Edit | `NONE` | Restricts the ability to view the Billing Options pod on a time or expense entry. |
+| Delete | — | _Not applicable. See Inquire level._ |
+| Inquire | `ALL` | Allows the ability to view billing options section on a time or expense entry. |
+| Inquire | `NONE` | Restricts the ability to view billing options section on a time or expense entry. |
+
+### Company Finance
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | — | _Not applicable. See Edit and Inquire levels._ |
+| Edit | `ALL` | Allows the ability to edit the Company Finance Screen information for companies within the system. |
+| Edit | `NONE` | Retricts the ability to edit the Company Finance Screen information for companies within the system. |
+| Delete | — | _Not Applicable. See Edit and Inquire levels._ |
+| Inquire | `ALL` | Allows the ability to review the Company Finance Screen for companies within the system. |
+| Inquire | `NONE` | Retricts the ability to review the Company Finance Screen for companies within the system. |
+
+### Expense Reimbursement
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | — | _Not applicable. See Inquire level._ |
+| Edit | — | _Not applicable. See Inquire level._ |
+| Delete | — | _Not applicable. See Inquire level._ |
+| Inquire | `ALL` | Allows access to the Expense Reimbursement Screen. |
+| Inquire | `NONE` | Retricts access to the Expense Reimbursement Screen. |
+
+### Financial Dashboard
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | — | _Not applicable. See Inquire level._ |
+| Edit | — | _Not applicable. See Inquire level._ |
+| Delete | — | _Not Applicable. See Inquire level._ |
+| Inquire | `ALL` | Allows the ability to review the Financial Dashboard. |
+| Inquire | `NONE` | Retricts the ability to review the Financial Dashboard. |
+
+### Invoice Approval
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | — | _Not applicable. See Edit and Inquire levels._ |
+| Edit | `ALL` | Allows the ability to approve (route) any invoices within the system. |
+| Edit | `MY` | Allows the ability to approve (route) any invoices that are currently routed to the particular member. |
+| Edit | `NONE` | Restricts the ability to approve (route) invoices within the system. |
+| Delete | — | _Not applicable. See Edit and Inquire levels._ |
+| Inquire | `ALL` | Restricts access to email invoices via the Invoice Batch Emailing screen and also approvals via the My Invoices Screen. |
+| Inquire | `MY` | Same as ALL. |
+
+### Invoicing
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | `ALL` | Allows the ability to create invoices within the system. |
+| Add | `MY` | Allows the ability to create invoices within the system (same as ALL). |
+| Add | `NONE` | Retricts the ability to create invoices within the system. |
+| Edit | `ALL` | Allows the ability to edit all existing invoices within the system. |
+| Edit | `MY` | Allows the ability to edit only the existing invoices that are routed to a particular member in the system. |
+| Edit | `NONE` | Retricts the ability to edit existing invoices within the system. |
+| Delete | `ALL` | Allows the ability to delete all existing invoices within the system. |
+| Delete | `MY` | Allows the ability to delete only the existing invoices that are routed to a particular member within the system. |
+| Delete | `NONE` | Retricts the ability to delete existing invoices within the system. |
+| Inquire | `ALL` | Allows the ability to view all existing invoices in the system. |
+| Inquire | `MY` | Allows the ability to view only the existing invoices that are routed to a particular member within the system. |
+| Inquire | `NONE` | Retricts the ability to review the Invoicing, Invoice Search, or Special Invoices screens. |
+
+### Reports
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | — | _Not applicable. See Inquire level._ |
+| Edit | — | _Not applicable. See Inquire level._ |
+| Delete | — | _Not applicable. See Inquire level._ |
+| Inquire | `ALL` | Allows the ability to review reports located in the Finance Category of the reports module. By default, when this option is selected, access to all company and contact reports is allows, but access can be customized using the Customize Option for this module. |
+| Inquire | `NONE` | Retricts the ability to review reports located in the Finance Category of the reports module. |
+
+## Marketing
+
+### ConnectWise Campaign
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | — | _Not applicable. See Inquire level._ |
+| Edit | — | _Not applicable. See Inquire level._ |
+| Delete | — | _Not applicable. See Inquire level._ |
+| Inquire | `ALL` | Allows the ability to view ConnectWise Campaign in the left nacigation. |
+| Inquire | `NONE` | Retricts the ability to view or interact with ConnectWise Campaign. |
+
+### Marketing Groups
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | `ALL` | Allows the ability to create new Groups. |
+| Add | `NONE` | Restricts the ability to create new Groups. |
+| Edit | `ALL` | Allows the ability to edit existing Groups. |
+| Edit | `NONE` | Restricts the ability to edit existing Groups. |
+| Delete | `ALL` | Allows the ability to delete existing Groups. |
+| Delete | `NONE` | Restricts the ability to delete existing Groups. |
+| Inquire | `ALL` | Allows the ability to access the Marketing Groups screen. |
+| Inquire | `NONE` | Restricts the ability to access the Marketing Groups screen. |
+
+### Marketing Management
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | `ALL` | Allows the ability to create marketing items located within the Marketing Module. |
+| Add | `MY` | Allows the ability to create marketing items located within the Marketing Module only for those items that member is the Owner. |
+| Add | `NONE` | Retricts the ability to create marketing items located within the Marketing Module. |
+| Edit | `ALL` | Allows the ability to edit marketing items located within the Marketing Module. |
+| Edit | `MY` | Allows the ability to edit marketing items located within the Marketing Module only for those items that member is the Owner. |
+| Edit | `NONE` | Retricts the ability to edit marketing items located within the Marketing Module. |
+| Delete | `ALL` | Allows the ability to delete marketing items located within the Marketing Module. |
+| Delete | `MY` | Allows the ability to delete marketing items located within the Marketing Module only for those items that member is the Owner. |
+| Delete | `NONE` | Retricts the ability to delete marketing items located within the Marketing Module. |
+| Inquire | `ALL` | Allows the ability to review marketing items located within the Marketing Module. |
+| Inquire | `MY` | Allows the ability to review marketing items located within the Marketing Module only for those items that member is the Owner. |
+| Inquire | `NONE` | Retricts the ability to review marketing items located within the Marketing Module. |
+
+### Marketing Reports
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | — | _Not applicable. See Inquire level._ |
+| Edit | — | _Not applicable. See Inquire level._ |
+| Delete | — | _Not applicable. See Inquire level._ |
+| Inquire | `ALL` | Allows the ability to review reports located in the Marketing Category of the reports module. By default, when this option is selected, access to all marketing reports is allowed, but access can be customized using the Customize Option for this module. |
+| Inquire | `NONE` | Retricts the ability to review reports located in the Marketing Category of the reports module. |
+
+## Procurement
+
+### Inventory Adjustments
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | `ALL` | Allows the ability to create new Inventory Adjustments. |
+| Add | `NONE` | Retricts the ability to create new Inventory Adjustments. |
+| Edit | `ALL` | Allows the ability to edit existing open Inventory Adjustment item information. |
+| Edit | `NONE` | Retricts the ability to edit existing Inventory Adjustment item information. |
+| Delete | `ALL` | Allows the ability to delete existing open Inventory Adjustment items. |
+| Delete | `NONE` | Retricts the ability to delete existing Inventory Adjustment items. |
+| Inquire | `ALL` | Allows the ability to review existing Inventory Adjustment item information. |
+| Inquire | `NONE` | Retricts the ability to review existing Inventory Adjustment item information. |
+
+### Inventory Transfers
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | — | _Not applicable. See Edit and Inquire levels._ |
+| Edit | `ALL` | Allows the ability to complete a Inventory Transfer. |
+| Edit | `NONE` | Retricts the ability to complete a Inventory Transfer. |
+| Delete | — | _Not applicable. See Edit and Inquire levels._ |
+| Inquire | `ALL` | Allows the ability to review existing Inventory Transfer information. |
+| Inquire | `NONE` | Retricts the ability to review existing Inventory Transfer information. |
+
+### Product Catalog
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | `ALL` | Allows the ability to create new Products in the Product Catalog. |
+| Add | `NONE` | Restricts the ability to create new products in the Product Catalog. |
+| Edit | `ALL` | Allows the ability to edit existing products in the Products Catalog. |
+| Edit | `NONE` | Restricts the ability to edit existing products in the Products Catalog. |
+| Delete | `ALL` | Allows the ability to delete existing Products in the Products Catalog. |
+| Delete | `NONE` | Restricts the ability to delete existing Products in the Products Catalog. |
+| Inquire | `ALL` | Allows the ability to review existing Product information in the Product Catalog. |
+| Inquire | `NONE` | Restricts the ability to review existing Product information in the Product Catalog. |
+
+### Products
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | `ALL` | Allows the ability to add Products to Opportunities, Sales Orders, and Service Tickets. |
+| Add | `NONE` | Retricts the ability to add Products to Opportunities, Sales Orders, and Service Tickets. NOTE: This option also controls the ability to pick and ship products. |
+| Edit | `ALL` | Allows the ability to edit Products on Opportunities, Sales Orders, Service Tickets, and Invoices. |
+| Edit | `NONE` | Restricts the ability to edit Products on Opportunities, Sales Orders, Service Tickets, and Invoices. |
+| Delete | `ALL` | Allows the ability to delete products added to Opportunities, Sales Orders, Service Tickets, and Invoices. |
+| Delete | `NONE` | Restricts the ability to delete products added to Opportunities, Sales Orders, Service Tickets, and Invoices. |
+| Inquire | `ALL` | Allows the ability to review information for products added to Opportunities, Sales Orders, and Service Tickets. |
+| Inquire | `NONE` | Retricts the ability to review information for products added to Opportunities, Sales Orders, and Service Tickets. |
+
+### Purchase Orders
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | `ALL` | Allows the ability to create new POs. |
+| Add | `MY` | Allows the ability to create new POs. |
+| Add | `NONE` | Restricts the ability to create new POs. |
+| Edit | `ALL` | Allows the ability to edit existing POs. |
+| Edit | `MY` | Allows the ability to edit existing PO's where the Member is listed in the Entered By field on the PO. |
+| Edit | `NONE` | Restricts the ability to edit existing POs. |
+| Delete | `ALL` | Allows the ability to delete existing POs. |
+| Delete | `MY` | Allows the ability to delete existing PO's where the Member is listed in the Entered By field on the PO. |
+| Delete | `NONE` | Restricts the ability to delete existing POs. |
+| Inquire | `ALL` | Allows the ability to view existing POs. |
+| Inquire | `MY` | Allows the ability to delete existing PO's where the Member is listed in the Entered By field on the PO. |
+| Inquire | `NONE` | Restricts the ability to view existing POs. |
+
+### Purchasing Approvals
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | — | _Not applicable. See Edit and Inquire levels._ |
+| Edit | `ALL` | Allows the ability to use actionable options for items in the Purchasing Approvals Search Screen. |
+| Edit | `NONE` | Retricts the ability to use actionable options for items in the Purchasing Approvals Search Screen. |
+| Delete | — | _Not applicable. See Edit and Inquire levels._ |
+| Inquire | `ALL` | Allows the ability to review information for items in the Purchasing Approvals Search Screen. |
+| Inquire | `NONE` | Retricts the ability to review information for items in the Purchasing Approvals Search Screen. |
+
+### Purchasing Demand
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | — | _Not applicable. See Edit and Inquire levels._ |
+| Edit | `ALL` | Allows the ability to use actionable options for items in the Purchasing Search Screen. |
+| Edit | `NONE` | Retricts the ability to use actionable options for items in the Purchasing Search Screen. |
+| Delete | — | _Not applicable. See Edit and Inquire levels._ |
+| Inquire | `ALL` | Allows the ability to review information for items in the Purchasing Search Screen. |
+| Inquire | `NONE` | Retricts the ability to review information for items in the Purchasing Search Screen. |
+
+### Reports
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | — | _Not applicable. See Inquire level._ |
+| Edit | — | _Not applicable. See Inquire level._ |
+| Delete | — | _Not applicable. See Inquire level._ |
+| Inquire | `ALL` | Allows the ability to review reports located in the Procurement Category of the reports module. By default, when this option is selected, access to all procurement reports is allowed, but access can be customized using the Customize Option for this module. |
+| Inquire | `NONE` | Retricts the ability to review reports located in the Procurement Category of the reports module. |
+
+### RMA Entry
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | `ALL` | Allows the ability to create new RMA Tags. |
+| Add | `NONE` | Restricts the ability to create new RMA Tags. |
+| Edit | `ALL` | Allows the ability to edit existing RMA Tags. |
+| Edit | `NONE` | Restricts the ability to edit existing RMA Tags. |
+| Delete | `ALL` | Allows the ability to delete existing RMA Tags. |
+| Delete | `NONE` | Restricts the ability to delete existing RMA Tags. |
+| Inquire | `ALL` | Allows the ability to view existing RMA Tags. |
+| Inquire | `NONE` | Restricts the ability to view existing RMA Tags. |
+
+### RMA Processing
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | — | _Not applicable. See Inquire level._ |
+| Edit | — | _Not applicable. See Inquire level._ |
+| Delete | — | _Not applicable. See Inquire level._ |
+| Inquire | `ALL` | Allows the ability to view vendor, shipping, and closing sections of RMA tags. |
+| Inquire | `NONE` | Restricts the ability to view vendor, shipping, and closing sections of RMA tags. |
+
+## Project
+
+### Close Project Tickets
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | — | _Not applicable. See Edit level._ |
+| Edit | `ALL` | Allows the ability to close and re-open Projects and Project Tickets. |
+| Edit | `NONE` | Retricts the ability to close and re-open Projects and Project Tickets. |
+| Delete | — | _Not applicable. See Edit level._ |
+| Inquire | — | _Not applicable. See Edit level._ |
+
+### Close Projects
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | — | _Not applicable. See Edit and Inquire levels._ |
+| Edit | `ALL` | Allows the ability to set existing Projects to a closed status. |
+| Edit | `NONE` | Disallows the ability to set existing Projects to a closed status. |
+| Delete | — | _Not applicable. See Edit and Inquire levels._ |
+| Inquire | `ALL` | Allows the ability to view Closed statuses on the Project tab of a Project. |
+| Inquire | `NONE` | Disallows the ability to view Closed statuses on the Project tab of a Project. |
+
+### Project Contacts
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | `ALL` | Allows the ability to add contact information to the Contacts Tab of existing projects. |
+| Add | `MY` | The ability to add contact information to the Contacts Tab for projects is determined by the settings of the project role the member is assigned to on the specific project. |
+| Add | `NONE` | Retricts the ability to add contact information to the Contacts Tab of existing projects. |
+| Edit | `ALL` | Allows the ability to edit contact information to the Contacts Tab of existing projects. |
+| Edit | `MY` | The ability to edit contact information on the Contacts Tab for projects is determined by the settings of the project role the member is assigned to on the specific project. |
+| Edit | `NONE` | Retricts the ability to edit contact information to the Contacts Tab of existing projects. |
+| Delete | `ALL` | Allows the ability to delete contact information to the Contacts Tab of existing projects. |
+| Delete | `MY` | The ability to delete contact information from the Contacts Tab for projects is determined by the settings of the project role the member is assigned to on the specific project. |
+| Delete | `NONE` | Retricts the ability to delete contact information to the Contacts Tab of existing projects. |
+| Inquire | `ALL` | Allows the ability to review contact information to the Contacts Tab of existing projects. |
+| Inquire | `MY` | The ability to review contact information on the Contacts Tab of projects is determined by the settings of the project role the member is assigned to on the specific project. |
+| Inquire | `NONE` | Retricts the ability to review contact information to the Contacts Tab of existing projects. |
+
+### Project Finance
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | — | _Not applicable. See Edit and Inquire levels._ |
+| Edit | `ALL` | Allows the ability to edit the Project Finance, Recap, and Invoice tabs of existing projects. |
+| Edit | `MY` | Access to the Finance, Recap, and Invoices tabs of the project or project ticket is determined by the settings of the project role the member is assigned to on the specific project. |
+| Edit | `NONE` | Restricts the ability to edit the Project Finance, Recap, and Invoice tabs of existing projects. |
+| Delete | — | _Not applicable. See Edit and Inquire levels._ |
+| Inquire | `ALL` | Allows the ability to review the Project Finance, Recap, and Invoice tabs of existing projects. Also allows access to the Project budget by Variance view in the Views tab. |
+| Inquire | `MY` | The ability to review the Finance, Recap or Invoices Tabs of the project or project ticket is determined by the settings of the project role the member is assigned to on the specific project. |
+| Inquire | `NONE` | Restricts the ability to review the Project Finance, Recap, and Invoice tabs of existing projects. Also restricts access to the Project budget by Variance view in the Views tab. NOTE: If you select None, the Project Boards icon will no longer be visible. In order to see the Project Board icon, the user needs Project Management Inquire set to All, AND Project Finance Inquire set to My at the very least. |
+
+### Project Headers
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | `ALL` | Allows the ability to add new projects. |
+| Add | `MY` | The ability to add new projects is determined by the settings of the project role the member is assigned to on the specific project. |
+| Add | `NONE` | Restricts the ability to add new projects. |
+| Edit | `ALL` | Allows the ability to edit the general tab of existing projects. |
+| Edit | `MY` | The ability to edit the general tab of existing projects is determined by the settings of the project role the member is assigned to on the specific project. |
+| Edit | `NONE` | Restricts the ability to edit the general tab of existing projects. |
+| Delete | `ALL` | Allows the ability to delete existing projects. |
+| Delete | `MY` | The ability to delete existing projects is determined by the settings of the project role the member is assigned to on the specific project. |
+| Delete | `NONE` | Restricts the ability to delete existing projects. |
+| Inquire | `ALL` | Allows the ability to view existing projects. |
+| Inquire | `MY` | The ability to view existing projects is determined by the settings of the project role the member is assigned to on the specific project. |
+| Inquire | `NONE` | Restricts the ability to view existing projects. |
+
+### Project Management
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | — | _Not applicable. See Inquire level._ |
+| Edit | — | _Not applicable. See Inquire level._ |
+| Delete | — | _Not applicable. See Inquire level._ |
+| Inquire | `ALL` | Allows the ability to view Project Boards. |
+| Inquire | `MY` | Not Applicable. |
+| Inquire | `NONE` | Retricts the ability to view Project Boards. NOTE: The only available options are All or None. If you select None, the Project Boards icon will no longer be visible. In order to see the Project Board icon, the user needs Project Management Inquire set to All, AND Project Finance Inquire set to My at the very least. |
+
+### Project Notes
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | `ALL` | Allows the ability to add information on the Notes Tab of a Project. |
+| Add | `MY` | The ability to add information on the Notes Tab of a project is determined by the settings of the project role the member is assigned to on the specific project. |
+| Add | `NONE` | Retricts the ability to add information on the Notes Tab of a Project. |
+| Edit | `ALL` | Allows the ability to edit information on the Notes Tab of a Project. |
+| Edit | `MY` | The ability to edit information on the Notes Tab of a project is determined by the settings of the project role the member is assigned to on the specific project. |
+| Edit | `NONE` | Retricts the ability to edit information on the Notes Tab of a Project. |
+| Delete | `ALL` | Allows the ability to delete information on the Notes Tab of a Project. |
+| Delete | `MY` | The ability to delete information on the Notes Tab of a project is determined by the settings of the project role the member is assigned to on the specific project. |
+| Delete | `NONE` | Retricts the ability to delete information on the Notes Tab of a Project. |
+| Inquire | `ALL` | Allows the ability to review information on the Notes Tab of a Project. |
+| Inquire | `MY` | The ability to view information on the Notes Tab of a project is determined by the settings of the project role the member is assigned to on the specific project. |
+| Inquire | `NONE` | Retricts the ability to review information on the Notes Tab of a Project. |
+
+### Project Phase
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | `ALL` | Allows the ability to add a new Phase on the Workplan Tab of a Project. |
+| Add | `MY` | The ability to add a new Phase on the Workplan Tab to a project is determined by the settings of the project role the member is assigned to on the specific project. |
+| Add | `NONE` | Retricts the ability to add a new Phase on the Workplan Tab of a Project. |
+| Edit | `ALL` | Allows the ability to edit an existing Phase on the Workplan Tab of a Project. |
+| Edit | `MY` | The ability to edit a Phase on the Workplan Tab to a project is determined by the settings of the project role the member is assigned to on the specific project. |
+| Edit | `NONE` | Retricts the ability to edit an existing Phase on the Workplan Tab of a Project. |
+| Delete | `ALL` | Allows the ability to delete an existing Phase on the Workplan Tab of a Project. |
+| Delete | `MY` | The ability to delete a Phase on the Workplan Tab to a project is determined by the settings of the project role the member is assigned to on the specific project. |
+| Delete | `NONE` | Retricts the ability to delete an existing Phase on the Workplan Tab of a Project. |
+| Inquire | `ALL` | Allows the ability to review an existing Phase on the Workplan Tab of a Project. |
+| Inquire | `MY` | The ability to view a Phase on the Workplan Tab to a project is determined by the settings of the project role the member is assigned to on the specific project. |
+| Inquire | `NONE` | Retricts the ability to review an existing Phase on the Workplan Tab of a Project. |
+
+### Project Product
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | `ALL` | Allows the ability to add product items to the ProductsTab of existing projects. |
+| Add | `MY` | The ability to add product items to the ProductsTab of projects is determined by the settings of the project role the member is assigned to on the specific project. |
+| Add | `NONE` | Retricts the ability to add product items to the ProductsTab of existing projects. |
+| Edit | `ALL` | Allows the ability to edit product items to the ProductsTab of existing projects. |
+| Edit | `MY` | The ability to edit product items on the ProductsTab of projects is determined by the settings of the project role the member is assigned to on the specific project. |
+| Edit | `NONE` | Retricts the ability to edit product items to the ProductsTab of existing projects. |
+| Delete | `ALL` | Allows the ability to delete product items to the ProductsTab of existing projects. |
+| Delete | `MY` | The ability to delete product items from the ProductsTab of projects is determined by the settings of the project role the member is assigned to on the specific project. |
+| Delete | `NONE` | Retricts the ability to delete product items to the ProductsTab of existing projects. |
+| Inquire | `ALL` | Allows the ability to review product items to the ProductsTab of existing projects. |
+| Inquire | `MY` | The ability to view product items on the ProductsTab of projects is determined by the settings of the project role the member is assigned to on the specific project. |
+| Inquire | `NONE` | Retricts the ability to review product items to the ProductsTab of existing projects. |
+
+### Project Reports
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | — | _Not applicable. See Inquire level._ |
+| Edit | — | _Not applicable. See Inquire level._ |
+| Delete | — | _Not applicable. See Inquire level._ |
+| Inquire | `ALL` | Allows the ability to review reports located in the Project Category of the reports module. By default, when this option is selected, access to all marketing reports is allowed, but access can be customized using the Customize Option for this module. |
+| Inquire | `NONE` | Retricts the ability to review reports located in the Project Category of the reports module. |
+
+### Project Scheduling
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | `ALL` | Allows the ability to add information on the Schedule Tab of an all existing Projects. |
+| Add | `MY` | The ability to add information on the Schedule Tab of a project is determined by the settings of the project role the member is assigned to on the specific project. |
+| Add | `NONE` | Retricts the ability to add information on the Schedule Tab of a Project. |
+| Edit | `ALL` | Allows the ability to edit the information stored on the Schedule Tab of an all existing Projects. |
+| Edit | `MY` | The ability to edit information on the Schedule Tab of a project is determined by the settings of the project role the member is assigned to on the specific project. |
+| Edit | `NONE` | Retricts the ability to edit the information stored on the Schedule Tab of a Project. |
+| Delete | `ALL` | Allows the ability to delete the information stored on the Schedule Tab of an all existing Projects. |
+| Delete | `MY` | The ability to delete information on the Schedule Tab of a project is determined by the settings of the project role the member is assigned to on the specific project. |
+| Delete | `NONE` | Retricts the ability to delete the information stored on the Schedule Tab of a Project. |
+| Inquire | `ALL` | Allows the ability to review the information stored on the Schedule Tab of an all existing Projects. |
+| Inquire | `MY` | The ability to view information on the Schedule Tab of a project is determined by the settings of the project role the member is assigned to on the specific project. |
+| Inquire | `NONE` | Retricts the review the information stored on the Schedule Tab of a Project. |
+
+### Project Teams
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | `ALL` | Allows the ability to add members on the Project Team Tab of an all existing Projects. Also allows the ability to convert Project tickets to Service Tickets. |
+| Add | `MY` | The ability to add members on the Team Tab of a Project is determined by the settings of the project role the member is assigned to on the specific project. |
+| Add | `NONE` | Retricts the ability to add members on the Project Team Tab of a Project. |
+| Edit | `ALL` | Allows the ability to edit members on the Project Team Tab of a Project. |
+| Edit | `MY` | The ability to edit members on the Team Tab of a Project is determined by the settings of the project role the member is assigned to on the specific project. |
+| Edit | `NONE` | Retricts the ability to edit members on the Project Team Tab of a Project. |
+| Delete | `ALL` | Allows the ability to delete members on the Project Team Tab of a Project. |
+| Delete | `MY` | The ability to delete members from the Team Tab of a Project is determined by the settings of the project role the member is assigned to on the specific project. |
+| Delete | `NONE` | Retricts the ability to delete members on the Project Team Tab of a Project. |
+| Inquire | `ALL` | Allows the ability to review member details on the Project Team Tab of a Project. Also allows the ability to convert Project tickets to Service Tickets. |
+| Inquire | `MY` | The ability to view members on the Team Tab of a Project is determined by the settings of the project role the member is assigned to on the specific project. |
+| Inquire | `NONE` | Retricts the ability to review member details on the Project Team Tab of a Project. |
+
+### Project Templates
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | `ALL` | Allows the ability to create Project Templates. |
+| Add | `NONE` | Retricts the ability to create Project Templates. |
+| Edit | `ALL` | Allows the ability to edit Project Templates. |
+| Edit | `NONE` | Retricts the ability to edit Project Templates. |
+| Delete | `ALL` | Allows the ability to delete Project Templates. |
+| Delete | `NONE` | Retricts the ability to delete Project Templates. |
+| Inquire | `ALL` | Allows the ability to review Project Templates. |
+| Inquire | `NONE` | Retricts the ability to review Project Templates. |
+
+### Project Ticket - Dependencies
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | `ALL` | Allows the ability to append predecessor tickets to a project ticket. |
+| Add | `NONE` | Disallows the ability to append predecessor tickets to a project ticket. |
+| Edit | `ALL` | Allows the ability to edit the existing predecessor ticket on a project ticket. |
+| Edit | `NONE` | Disallows the ability to edit the existing predecessor ticket on a project ticket. |
+| Delete | `ALL` | Allows the ability to remove an existing predecessor ticket on a project ticket. |
+| Delete | `NONE` | Disallows the ability to remove an existing predecessor ticket on a project ticket. |
+| Inquire | `ALL` | Allows the ability to view existing predecessor ticket info on a project ticket. |
+| Inquire | `NONE` | Disallows the ability to view existing predecessor ticket info on a project ticket. |
+
+### Project Ticket Tasks
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | `ALL` | Allows the ability to add tasks to Project Tickets. |
+| Add | `MY` | The ability to add tasks to Project Tickets(not Projects) is determined by the settings of the project role the member is assigned to on the specific project. |
+| Add | `NONE` | Retricts the ability to add tasks to Project Tickets. |
+| Edit | `ALL` | Allows the ability to edit tasks on Project Tickets. |
+| Edit | `MY` | The ability to edit tasks on Project Tickets(not Projects) is determined by the settings of the project role the member is assigned to on the specific project. |
+| Edit | `NONE` | Retricts the ability to edit tasks on Project Tickets. |
+| Delete | `ALL` | Allows the ability to delete tasks on Project Tickets. |
+| Delete | `MY` | The ability to delete tasks from Project Tickets(not Projects) is determined by the settings of the project role the member is assigned to on the specific project. |
+| Delete | `NONE` | Retricts the ability to delete tasks on Project Tickets. |
+| Inquire | `ALL` | Allows the ability to review tasks on Project Tickets. |
+| Inquire | `MY` | The ability to review tasks on Project Tickets(not Projects) is determined by the settings of the project role the member is assigned to on the specific project. |
+| Inquire | `NONE` | Retricts the ability to review tasks on Project Tickets. |
+
+### Project Tickets
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | `ALL` | Allows the ability to create Project Tickets. |
+| Add | `MY` | The ability to create project tickets is determined by the settings of the project role the member is assigned to on the specific project. |
+| Add | `NONE` | Retricts the ability to create Project Tickets. |
+| Edit | `ALL` | Allows the ability to edit existing Project Tickets. |
+| Edit | `MY` | The ability to edit Project Tickets is determined by the settings of the project role the member is assigned to on the specific project. |
+| Edit | `NONE` | Retricts the ability to edit existing Project Ticket information. |
+| Delete | `ALL` | Allows the ability to delete existing Project Tickets. |
+| Delete | `MY` | The ability to delete existing Project Tickets is determined by the settings of the project role the member is assigned to on the specific project. |
+| Delete | `NONE` | Retricts the ability to review existing delete existing Project Tickets. |
+| Inquire | `ALL` | Allows the ability to review existing Project Ticket information. Allows the ability to view Project Tickets and Issues on the My List screen. |
+| Inquire | `MY` | The ability to review Project Tickets is determned by the settings of the project role the member is assigned to on the specific project. Allows the ability to view Project Tickets and Issues on the My List screen. |
+| Inquire | `NONE` | Retricts the ability to review existing Project Ticket information. NOTE: Controls the ability to view the Project and Issues tabs on the My List screen |
+
+## Sales
+
+### Closed Opportunity
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | — | _Not applicable. See Edit level._ |
+| Edit | `ALL` | Allows the ability to close and re-open opportunities. |
+| Edit | `NONE` | Restricts the ability to close and re-open opportunities. |
+| Delete | — | _Not applicable. See Edit level._ |
+| Inquire | — | _Not applicable. See Edit level._ |
+
+### Opportunity
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | `ALL` | Allows the ability to create Opportunities. |
+| Add | `MY` | Allows the ability to create Opportunities. |
+| Add | `NONE` | Retricts the ability to create Opportunities. |
+| Edit | `ALL` | Allows the ability to edit existing Opportunities. |
+| Edit | `MY` | Allows the ability to edit only those Opportunities for which the member is part of the team or is the teammate of a member of the team that has the Allow Access checkbox checked. |
+| Edit | `NONE` | Retricts the ability to edit existing Opportunities. |
+| Delete | `ALL` | Allows the ability to delete existing Opportunities. |
+| Delete | `MY` | Allows the ability to edit only those Opportunities for which the member is part of the team or is the teammate of a member on the team that has the Allow Access checkbox checked. |
+| Delete | `NONE` | Retricts the ability to delete existing Opportunities. |
+| Inquire | `ALL` | Allows the ability to review existing Opportunities. |
+| Inquire | `MY` | Allows the ability to edit only those Opportunities for which the member is part of the team or is the teammate of a member of the team that has the Allow Access checkbox checked. |
+| Inquire | `NONE` | Retricts the ability to review existing Opportunities. |
+
+### Opportunity Finance
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | — | _Not applicable. See Inquire level._ |
+| Edit | — | _Not applicable. See Inquire level._ |
+| Delete | — | _Not applicable. See Inquire level._ |
+| Inquire | `ALL` | Allows the ability to review the Finance Tab of Opportunities. |
+| Inquire | `NONE` | Retricts the ability to review the Finance Tab of Opportunities. |
+
+### Reports
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | — | _Not applicable. See Inquire level._ |
+| Edit | — | _Not applicable. See Inquire level._ |
+| Delete | — | _Not applicable. See Inquire level._ |
+| Inquire | `ALL` | Allows the ability to review reports located in the Sales Category of the reports module. By default, when this option is selected, access to all marketing reports is allowed, but access can be customized using the Customize Option for this module. |
+| Inquire | `NONE` | Retricts the ability to review reports located in the Sales Category of the reports module. |
+
+### Sales Dashboard
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | — | _Not applicable. See Inquire level._ |
+| Edit | — | _Not applicable. See Inquire level._ |
+| Delete | — | _Not applicable. See Inquire level._ |
+| Inquire | `ALL` | Allows the ability to review the Sales Overview screen. |
+| Inquire | `NONE` | Retricts the ability to review the Sales Overview screen. |
+
+### Sales Funnel
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | — | _Not applicable. See Inquire level._ |
+| Edit | — | _Not applicable. See Inquire level._ |
+| Delete | — | _Not applicable. See Inquire level._ |
+| Inquire | `ALL` | Allows the ability to review the Sales Funnel screen. |
+| Inquire | `NONE` | Retricts the ability to review the Sales Funnel screen. |
+
+### Sales Order Finance
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | — | _Not applicable. See Inquire level._ |
+| Edit | — | _Not applicable. See Inquire level._ |
+| Delete | — | _Not applicable. See Inquire level._ |
+| Inquire | `ALL` | Allows the ability to review the Finance Tab of Opportunities. |
+| Inquire | `NONE` | Restricts the ability to review the Finance Tab of Opportunities. NOTE: The ability to edit the Finance tab of a Sales Order is based on the security persmissions for this role in the Sales Order field. |
+
+### Sales Orders
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | `ALL` | Allows the ability to create Sales Orders. |
+| Add | `NONE` | Retricts the ability to create Sales Orders. |
+| Edit | `ALL` | Allows the ability to edit existing Sales Orders. |
+| Edit | `NONE` | Retricts the ability to edit existing Sales Orders. |
+| Delete | `ALL` | Allows the ability to delete existing Sales Orders. |
+| Delete | `NONE` | Retricts the ability to delete existing Sales Orders. |
+| Inquire | `ALL` | Allows the ability to review existing Sales Orders. |
+| Inquire | `NONE` | Retricts the ability to review existing Sales Orders. |
+
+## Service Desk
+
+### Agile Board
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | — | _Not applicable. See Inquire level._ |
+| Edit | — | _Not applicable. See Inquire level._ |
+| Delete | — | _Not applicable. See Inquire level._ |
+| Inquire | `ALL` | Allows the ability to view and use the Agile board. |
+| Inquire | `NONE` | Retricts the ability to view and use the Agile board. |
+
+### ChatAssist
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | — | _Not applicable. See Inquire level._ |
+| Edit | — | _Not applicable. See Inquire level._ |
+| Delete | — | _Not applicable. See Inquire level._ |
+| Inquire | `ALL` | Allows access to the ChatAssist Icon under the Service Desk Module. |
+| Inquire | `NONE` | Retricts access to the ChatAssist Icon under the Service Desk Module. |
+
+### Close Service Tickets
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | `ALL` | Allows users to set a new ticket to a closed status before saving it for the first time. |
+| Add | `NONE` | Restricts the ability to set a new ticket to a closed status before saving it for the first time. |
+| Edit | `ALL` | Allows the ability to close and re-open service tickets. |
+| Edit | `NONE` | Restricts the ability to close and re-open service tickets. |
+| Delete | — | _Not Applicable. See Add, Edit, and Inquire levels._ |
+| Inquire | `ALL` | Allows the ability to view closed statuses in Service Ticket Status dropdown |
+| Inquire | `NONE` | Restricts the ability to view closed statuses in Service Ticket Status dropdown. |
+
+### CloudConsole
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | — | _Not applicable. See Inquire level._ |
+| Edit | — | _Not applicable. See Inquire level._ |
+| Delete | — | _Not applicable. See Inquire level._ |
+| Inquire | `ALL` | Allows access to the CloudConsole Icon under the Service Desk Module. |
+| Inquire | `NONE` | Retricts access to the CloudConsole Icon under the Service Desk Module. |
+
+### ConnectWise Control
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | — | _Not applicable. See Inquire level._ |
+| Edit | — | _Not applicable. See Inquire level._ |
+| Delete | — | _Not applicable. See Inquire level._ |
+| Inquire | `ALL` | Enables the ScreenConnect Button on tickets allowing the ability to create a ScreenConnect session. |
+| Inquire | `NONE` | Disables the ScreenConnect Button on tickets disallowing the ability to create a ScreenConnect session. |
+
+### ConnectWise Manage Network
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | — | _Not applicable. See Add and Inquire levels._ |
+| Edit | — | _Not applicable. See Add and Inquire levels._ |
+| Delete | `ALL` | Allows the ability to remove holds from the ConnectWise Manage Network. |
+| Delete | `NONE` | Restricts the ability to remove holds from the ConnectWise Manage Network. |
+| Inquire | `ALL` | Allows access to the ConnectWise Manage Network. |
+| Inquire | `NONE` | Retricts access to the ConnectWise Manage Network. |
+
+### Knowledge Base Approver
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | — | _Not applicable. See Edit, Delete, and Inquire levels._ |
+| Edit | `ALL` | Allows the ability to approve and reject Knowledge Base articles that are pending approval. |
+| Edit | `NONE` | Restricts the ability to approve and reject Knowledge Base articles that are pending approval. |
+| Delete | `ALL` | Allows the ability to delete Knowledge Base articles in any status created by any member. |
+| Delete | `NONE` | Restricts the ability to delete any Knowledge Base articles. |
+| Inquire | `ALL` | Allows the ability to review Knowledge Base articles in any status. NONEL Restricts the ability to review any Knowledge Base articles. |
+
+### Knowledge Base Creator
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | `ALL` | Allows the ability to add draft Knowledge Base articles and submit for approval. |
+| Add | `MY` | Allows the ability to add draft Knowledge Base articles and submit for approval. |
+| Add | `NONE` | Restricts the ability to add draft Knowledge Base articles and submit for approval. |
+| Edit | `ALL` | Allows the ability to edit Knowledge Base articles in Draft, Rejected, and Revise status for any member. |
+| Edit | `MY` | Allows the ability to edit Knowledge Base articles in Draft, Rejected, and Revise status created by the logged in member. |
+| Edit | `NONE` | Restricts the ability to edit Knowledge Base articles. |
+| Delete | `ALL` | Allows the ability to delete Knowledge Base articles in Draft, Rejected, and Revise status created by any member. |
+| Delete | `MY` | Allows the ability to delete Knowledge Base articles in Draft, Rejected, and Revise status created by the logged in member. |
+| Delete | `NONE` | Restricts the ability to delete Knowledge Base articles. |
+| Inquire | `ALL` | Allows the ability to review Knowledge Base articles created by any member. |
+| Inquire | `MY` | Allows the ability for a member to review Knowledge Base articles created by the logged in member. |
+| Inquire | `NONE` | Restricts the ability to review any Knowledge Base articles. |
+
+### Launch Remote Access
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | — | _Not applicable. See Inquire level._ |
+| Edit | — | _Not applicable. See Inquire level._ |
+| Delete | — | _Not applicable. See Inquire level._ |
+| Inquire | `ALL` | Allows the ability to launch Automate or Control access from any ticket. |
+| Inquire | `MY` | Allows the ability to launch Automate or Control access from any ticket the member is a resource on. |
+| Inquire | `NONE` | Restricts the ability to launch Automate or Control access. Hides the Launch column in the Configuration pod. |
+
+### Merge Tickets
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | `ALL` | Allows the ability to merge tickets. |
+| Add | `NONE` | Restricts the ability to merge tickets |
+| Edit | `ALL` | Allows for Open merged tickets to be set to a Closed status. |
+| Edit | `NONE` | Restricts the ability to merge tickets |
+| Delete | — | _Not applicable. See Add, Edit, and Inquire levels._ |
+| Inquire | `ALL` | Allows the ability to view the relationship of merged tickets. |
+| Inquire | `NONE` | Restricts the ability to view the relationship of merged tickets. |
+
+### Print Service Signoff
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | — | _Not applicable. See Inquire level._ |
+| Edit | — | _Not applicable. See Inquire level._ |
+| Delete | — | _Not applicable. See Inquire level._ |
+| Inquire | `ALL` | Allows the ability to print the Signoff form for any service ticket. |
+| Inquire | `MY` | Allows the ability to print the Signoff form for tickets you are a resource on, tickets you have assigned another resource on, and tickets created by you. |
+| Inquire | `NONE` | Restricts the ability to print the Signoff form for all tickets. |
+
+### Reports
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | — | _Not applicable. See Inquire level._ |
+| Edit | — | _Not applicable. See Inquire level._ |
+| Delete | — | _Not applicable. See Inquire level._ |
+| Inquire | `ALL` | Allows the ability to review reports located in the Service Desk Category of the reports module. By default, when this option is selected, access to all Service reports is allowed, but access can be customized using the Customize Option for this module. |
+| Inquire | `NONE` | Retricts the ability to review reports located in the Service Desk Category of the reports module. |
+
+### Resource Scheduling
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | `ALL` | Allows the ability to add resources on Service Tickets and Activities. |
+| Add | `MY` | Allows the ability for a member to add themselves as a resource on a Service Ticket or Activity. |
+| Add | `NONE` | Retricts the ability to add resources on Service Tickets and Activities. NOTE: This includes the My Calendar and Dispatch Portal Screens. |
+| Edit | `ALL` | Allows the ability to edit resources on Service Tickets and Activities. |
+| Edit | `MY` | Allows the ability for a member to edit themselves as a resource on a Service Ticket or Activity. |
+| Edit | `NONE` | Retricts the ability to edit resources on Service Tickets and Activities. NOTE: This includes the My Calendar and Dispatch Portal Screens. |
+| Delete | `ALL` | Allows the ability to delete resources on Service Tickets and Activities. |
+| Delete | `MY` | Allows the ability for a member to delete themselves as a resource on a Service Ticket or Activity. |
+| Delete | `NONE` | Retricts the ability to delete resources on Service Tickets and Activities. NOTE: This includes the My Calendar and Dispatch Portal Screens. |
+| Inquire | `ALL` | Allows the ability to review resources on Service Tickets and Activities. |
+| Inquire | `MY` | Allows the ability for a member to review only their resource records on a Service Ticket or Activity. |
+| Inquire | `NONE` | Retricts the ability to review resources on Service Tickets and Activities. NOTE: This includes the My Calendar and Dispatch Portal Screens. |
+
+### Service Dashboard
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | — | _Not applicable. See Inquire level._ |
+| Edit | — | _Not applicable. See Inquire level._ |
+| Delete | — | _Not applicable. See Inquire level._ |
+| Inquire | `ALL` | Allows access to the Service Dashboard under the Service Desk Module. |
+| Inquire | `NONE` | Retricts access to the Service Dashboard under the Service Desk Module. |
+
+### Service Ticket - Dependencies
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | `ALL` | Allows the ability to append predecessor tickets to a service ticket. |
+| Add | `NONE` | Disallows the ability to append predecessor tickets to a service ticket. |
+| Edit | `ALL` | Allows the ability to edit the existing predecessor ticket on a service ticket. |
+| Edit | `NONE` | Disallows the ability to edit the existing predecessor ticket on a service ticket. |
+| Delete | `ALL` | Allows the ability to remove an existing predecessor ticket on a service ticket. |
+| Delete | `NONE` | Disallows the ability to remove an existing predecessor ticket on a service ticket. |
+| Inquire | `ALL` | Allows the ability to view existing predecessor ticket info on a service ticket. |
+| Inquire | `NONE` | Disallows the ability to view existing predecessor ticket info on a service ticket. |
+
+### Service Ticket - Finance
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | — | _Not applicable. See Edit and Inquire levels._ |
+| Edit | `ALL` | Allows the ability to edit information on the Finance Tab of Service Tickets. |
+| Edit | `NONE` | Retricts the ability to edit information on the Finance Tab of Service Tickets. |
+| Delete | — | _Not applicable. See Edit and Inquire levels._ |
+| Inquire | `ALL` | Allows access to the Finance Tab of Service Tickets. |
+| Inquire | `NONE` | Retricts access to the Finance Tab of Service Tickets. |
+
+### Service Tickets
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | `ALL` | Allows the ability to create Service Tickets. |
+| Add | `MY` | Allows the ability to create Service Tickets. |
+| Add | `NONE` | Retricts the ability to create Service Tickets. |
+| Edit | `ALL` | Allows the ability to edit existing Service Tickets. Allows the ability to follow Service Tickets. |
+| Edit | `MY` | Allows the ability to edit only existing Service Tickets that belong to the member. A ticket belongs to me if I created it, assigned it to someone, or I am assigned to it. Allows the ability to follow Service Tickets I am a resource on. |
+| Edit | `NONE` | Retricts the ability to edit existing Service Tickets. |
+| Delete | `ALL` | Allows the ability to delete existing Service Tickets. |
+| Delete | `MY` | Allows the ability to delete only existing Service Tickets that belong to the member. A ticket belongs to me if I created it, assigned it to someone, or I am assigned to it. |
+| Delete | `NONE` | Retricts the ability to delete existing Service Tickets. |
+| Inquire | `ALL` | Allows the ability to review existing Service Tickets. |
+| Inquire | `MY` | Allows the ability to review only existing Service Tickets that belong to the member. A ticket belongs to me if I created it, assigned it to someone, or I am assigned to it. |
+| Inquire | `NONE` | Retricts the ability to review existing Service Tickets. |
+
+### SLA Dashboard
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | — | _Not applicable. See Edit and Inquire levels._ |
+| Edit | `ALL` | Allows the ability to access the On Call and Duty Mgr pickers on the SLA Dashboard and Service Board. |
+| Edit | `MY` | Restricts the ability to access the On Call and Duty Mgr pickers on the SLA Dashboard and Service Board. |
+| Edit | `NONE` | Restricts the ability to access the On Call and Duty Mgr pickers on the SLA Dashboard and Service Board. |
+| Delete | — | _Not applicable. See Edit and Inquire levels._ |
+| Inquire | `ALL` | Allows the ability to select any member from the member filter on the SLA Dashboard. Also allows the ability to access the On Call and Duty Mgr pickers on the Service Board and SLA Dashboard |
+| Inquire | `MY` | Restricts the ability to select other members from the member filter on the SLA Dashboard. |
+| Inquire | `NONE` | Restricts access to the SLA Dashboard. |
+
+### Ticket Templates
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | `ALL` | Allows the ability to create Ticket Templates at the Company Level. This includes the Ticket Templates tab of a company or agreement. |
+| Add | `MY` | Same as ALL |
+| Add | `NONE` | Restricts the ability to create Ticket Templates at the Company Level. This includes the Ticket Templates Tab of a company or agreement. Note: This does not control the application of Ticket Templates to existing tickets using the protractor icon. |
+| Edit | `ALL` | Allows the ability to edit Ticket Templates at the Company Level. This includes the Ticket Templates tab of a company or agreement. |
+| Edit | `MY` | Allows the ability to edit Ticket Templates only where the member has access to the service board, location and group associated with the template. This includes the Ticket Templates tab of a company or agreement. |
+| Edit | `NONE` | Restricts the ability to edit Ticket Templates at the Company Level. This includes the Ticket Templates tab of a company or agreement. Note: This does not control the application of Ticket Templates to existing tickets using the protractor icon. |
+| Delete | `ALL` | Allows the ability to delete Ticket Templates at the Company Level. This includes the Ticket Templates tab of a company or agreement. |
+| Delete | `MY` | Allows the ability to delete Ticket Templates only where the member has access to the service board, location and group associated with the template. This includes the Ticket Templates tab of a company or agreement. |
+| Delete | `NONE` | Restricts the ability to delete Ticket Templates at the Company Level. This includes the Ticket Templates tab of a company or agreement. Note: This does not control the application of Ticket Templates to existing tickets using the protractor icon. |
+| Inquire | `ALL` | Allows the ability to review Ticket Templates at the Company Level. This includes the Ticket Templates tab of a company or agreement. |
+| Inquire | `MY` | Allows the ability to review Ticket Templates only where the member has access to the service board, location and group associated with the template. This includes the Ticket Templates tab of a company or agreement. |
+| Inquire | `NONE` | Restricts the ability to review Ticket Templates at the Company Level. This includes the Ticket Templates tab of a company or agreement. Note: This does not control the application of Ticket Templates to existing tickets using the protractor icon. |
+
+## System
+
+### API Reports
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | — | _Not applicable. See Inquire level._ |
+| Edit | — | _Not applicable. See Inquire level._ |
+| Delete | — | _Not applicable. See Inquire level._ |
+| Inquire | `ALL` | Allows the user to access the API Reporting Views when using an API Member. |
+| Inquire | `NONE` | Restricts the ability to review the API Reporting Views when using an API Member. |
+
+### Chat with ConnectWise Manage Support
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | — | _Not applicable. See Inquire level._ |
+| Edit | — | _Not applicable. See Inquire level._ |
+| Delete | — | _Not applicable. See Inquire level._ |
+| Inquire | `ALL` | Allows access to the Chat with Support button in the top navigation menu. |
+| Inquire | `NONE` | Restricts access to the Chat with Support button in the top navigation menu. |
+
+### ConnectWise Manage Labs
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | — | _Not applicable. See Edit level._ |
+| Edit | `ALL` | Allows the ability to turn labs on and off |
+| Edit | `NONE` | Restricts the ablility to turn labs on and off |
+| Delete | — | _Not applicable. See Edit level._ |
+| Inquire | — | _Not applicable. See Edit level._ |
+
+### Custom Menu Entry
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | — | _Not applicable. See Inquire level._ |
+| Edit | — | _Not applicable. See Inquire level._ |
+| Delete | — | _Not applicable. See Inquire level._ |
+| Inquire | `ALL` | Allows the ability to review custom menu entries in the modules they are assigned to. By default, when this option is selected, access to all Custom Menu Entries is allowed, but access can be customized using the Customize Option for this module. |
+| Inquire | `NONE` | Restricts the ability to review existing Custom Menu Entries. |
+
+### Email Audit
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | — | _Not applicable. See Inquire level._ |
+| Edit | — | _Not applicable. See Inquire level._ |
+| Delete | — | _Not applicable. See Inquire level._ |
+| Inquire | `ALL` | Allows access to the Email Audit icon under the Service Desk module and the Email Audit tab on the Company screen |
+| Inquire | `NONE` | Restricts access to the Email Audit icon under the Service Desk module and the Email Audit tab on the Company screen. |
+
+### List View Export
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | — | _Not applicable. See Inquire level._ |
+| Edit | — | _Not applicable. See Inquire level._ |
+| Delete | — | _Not applicable. See Inquire level._ |
+| Inquire | `ALL` | Allows the ability to export list view items to an Excel Spreadsheet. |
+| Inquire | `NONE` | Restricts the ability to export list view items to an Excel Spreadsheet. |
+
+### Marketplace Sharing
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | `ALL` | Allows the ability to upload items to the ConnectWise Marketplace. |
+| Add | `NONE` | Restricts the ability to upload items to the ConnectWise Marketplace. |
+| Edit | — | _Not applicable. See Add and Inquire levels._ |
+| Delete | — | _Not applicable. See Add and Inquire levels._ |
+| Inquire | `ALL` | Allows the ability to import items from the ConnectWise Marketplace. |
+| Inquire | `NONE` | Restricts the ability to import items from the ConnectWise Marketplace. |
+
+### Mass Maintenance
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | `ALL` | Allows the ability to add new items via the Mass Maintenance screens. Access to each screen can be customized using the Customize Option for this module. |
+| Add | `NONE` | Restricts the ability to add new items via the Mass Maintenance screens. |
+| Edit | `ALL` | Allows the ability to edit existing items via the Mass Maintenance screens. Access to each screen can be customized using the Customize Option for this module. |
+| Edit | `NONE` | Restricts the ability to edit existing items via the Mass Maintenance screens. |
+| Delete | `ALL` | Allows the ability to delete existing items via the Mass Maintenance screens. Access to each screen can be customized using the Customize Option for this module. |
+| Delete | `NONE` | Restricts the ability to delete existing items via the Mass Maintenance screens. |
+| Inquire | `ALL` | Allows the ability to review existing items via the Mass Maintenance screens. Access to each screen can be customized using the Customize Option for this module. |
+| Inquire | `NONE` | Restricts the ability to review existing items via the Mass Maintenance screens. |
+
+### Member Maintenance
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | `ALL` | Allows the ability to create new member profiles. |
+| Add | `NONE` | Restricts the ability to create new member profiles. |
+| Edit | `ALL` | Allows the ability to edit existing member profiles. |
+| Edit | `NONE` | Restricts the ability to edit existing member profiles. |
+| Delete | `ALL` | Allows the ability to delete existing member profiles. |
+| Delete | `NONE` | Restricts the ability to deleteexisting member profiles. |
+| Inquire | `ALL` | Allows the ability to review existing member profiles. |
+| Inquire | `NONE` | Restricts the ability to review existing member profiles. |
+
+### My Account
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | — | _Not applicable. See Edit and Inquire levels._ |
+| Edit | `ALL` | Allows the ability to edit the information on the MY Account Screen for all members. |
+| Edit | `MY` | Allows the ability to edit the information on the MY Account Screen for only the member logged in. |
+| Edit | `NONE` | Retricts the ability to edit the information on the MY Account Screen |
+| Delete | — | _Not applicable. See Edit and Inquire levels._ |
+| Inquire | `ALL` | Allows the ability to review the information on the MY Account Screen for all members. |
+| Inquire | `MY` | Allows the ability to review the information on the MY Account Screen for only the member logged in. |
+| Inquire | `NONE` | Retricts the ability to review the information on the MY Account Screen |
+
+### My Company
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | `ALL` | Allows the ability to add new structure and group levels to the My Company Screen. |
+| Add | `NONE` | Restricts the ability to add new structure and group levels to the My Company Screen. |
+| Edit | `ALL` | Allows the ability to edit the information on the My Company Screen. |
+| Edit | `NONE` | Restricts the ability to edit the information on the My Company Screen. |
+| Delete | `ALL` | Allows the ability to delete structure and group levels from the My Company Screen. |
+| Delete | `NONE` | Restricts the ability to delete structure and group levels from the My Company Screen |
+| Inquire | `ALL` | Allows the ability to review the information on the My Company Screen. |
+| Inquire | `NONE` | Restricts the ability to review the information on the My Company Screen. |
+
+### Report Writer
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | `ALL` | Allows access to the report writer designer |
+| Add | `NONE` | Restricts access to the report writer designer |
+| Edit | — | _Not applicable. See Add and Inquire levels._ |
+| Delete | — | _Not applicable. See Add and Inquire levels._ |
+| Inquire | `ALL` | Allows access to view report writer reports and dashboards. |
+| Inquire | `NONE` | Restricts access to view report writer reports and dashboards. |
+
+### Security Roles
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | `ALL` | Allows the ability to create new security roles. |
+| Add | `NONE` | Restricts the ability to create new security roles. |
+| Edit | `ALL` | Allows the ability to edit the settings for existing security roles. |
+| Edit | `NONE` | Restricts the ability to edit the settings for existing security roles. |
+| Delete | `ALL` | Allows the ability to delete existing security roles. |
+| Delete | `NONE` | Restricts the ability to delete existing security roles. |
+| Inquire | `ALL` | Allows the ability to review the settings for existing security roles. |
+| Inquire | `NONE` | Restricts the ability to review the settings for existing security roles. |
+
+### System Reports
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | — | _Not applicable. See Inquire level._ |
+| Edit | — | _Not applicable. See Inquire level._ |
+| Delete | — | _Not applicable. See Inquire level._ |
+| Inquire | `ALL` | Allows the ability to review reports located in the System Category of the reports module. By default, when this option is selected, access to all System reports is allowed, but access can be customized using the Customize Option for this module. |
+| Inquire | `NONE` | Retricts the ability to review reports located in the System Category of the reports module. |
+
+### Table Setup
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | `ALL` | Allows the ability to create new items within each of the Setup Tables. By default, when this option is selected, access to all Setup Tables is allowed, but access can be customized using the Customize Option for this module. |
+| Add | `NONE` | Restricts the ability to create new items within each of the Setup Tables. |
+| Edit | `ALL` | Allows the ability to edit existing items within each of the Setup Tables.  By default, when this option is selected, access to all Setup Tables is allowed, but access can be customized using the Customize Option for this module. |
+| Edit | `NONE` | Restricts the ability to edit existing items within each of the Setup Tables. |
+| Delete | `ALL` | Allows the ability to delete existing items within each of the Setup Tables.  By default, when this option is selected, access to all Setup Tables is allowed, but access can be customized using the Customize Option for this module. |
+| Delete | `NONE` | Restricts the ability to delete existing items within each of the Setup Tables. |
+| Inquire | `ALL` | Allows the ability to review existing items within each of the Setup Tables.  By default, when this option is selected, access to all Setup Tables is allowed, but access can be customized using the Customize Option for this module. |
+| Inquire | `NONE` | Restricts the ability to review existing items within each of the Setup Tables. |
+
+### Today Links
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | — | _Not applicable. See Inquire level._ |
+| Edit | — | _Not applicable. See Inquire level._ |
+| Delete | — | _Not applicable. See Inquire level._ |
+| Inquire | `ALL` | Allows the ability to view and browse to the links setup on the Today screen. |
+| Inquire | `NONE` | Restricts the ability to view and browse to the links setup on the Today screen. |
+
+## Time and Expense
+
+### Expense Approvals
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | — | _Not applicable. See Edit and Inquire levels._ |
+| Edit | `ALL` | Allows the ability to approve expense reports and reverse expense report approvals. |
+| Edit | `NONE` | Restricts the ability to approve expense reports and reverse expense report approvals. |
+| Delete | — | _Not applicable. See Edit and Inquire levels._ |
+| Inquire | `ALL` | Allows the ability to view expense reports submitted for approval. |
+| Inquire | `NONE` | Restricts the ability to view expense reports submitted for approval. |
+
+### Expense Report Entry
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | `ALL` | Allows the ability to add expense records within the system. This includes expense records for other members while on their Expense Report. |
+| Add | `MY` | Allows the ability to add expenses only for the member logged in. |
+| Add | `NONE` | Retricts the ability to add expense records within the system. |
+| Edit | `ALL` | Allows the ability to edit all existing expense records within the system. |
+| Edit | `MY` | Allows the ability to edit only the expenses that particular member has entered within the system. |
+| Edit | `NONE` | Retricts the ability to edit existing expenses within the system. |
+| Delete | `ALL` | Allows the ability to delete all existing expense records within the system. This includes expense records for other members. |
+| Delete | `MY` | Allows the ability to delete only the expenses that particular member has entered within the system. |
+| Delete | `NONE` | Retricts the ability to delete existing expenses within the system. |
+| Inquire | `ALL` | Allows the ability to review all existing expense records within the system. |
+| Inquire | `MY` | Allows the ability to review only the expenses that particular member has entered within the system. |
+| Inquire | `NONE` | Retricts the ability to review existing expenses within the system. |
+
+### Reports
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | — | _Not applicable. See Inquire level._ |
+| Edit | — | _Not applicable. See Inquire level._ |
+| Delete | — | _Not applicable. See Inquire level._ |
+| Inquire | `ALL` | Allows the ability to review reports located in the Time Entry Category of the reports module. By default, when this option is selected, access to all Time Entry reports is allowed, but access can be customized using the Customize Option for this module. |
+| Inquire | `NONE` | Retricts the ability to review reports located in the Time Entry Category of the reports module. |
+
+### Stopwatch
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | `ALL` | Allows the ability to use the Stopwatch on both the All Tickets tab and in the Ticket screen. |
+| Add | `NONE` | Restricts the ability to use the Stopwatch on the All Tickets tab. |
+| Edit | — | _Not applicable. See Add and Inquire levels._ |
+| Delete | — | _Not applicable. See Add and Inquire levels._ |
+| Inquire | `ALL` | Allows the ability to view the Stopwatch on the All Tickets tab, and grants the ability to use the Stopwatch in the Ticket screen. |
+| Inquire | `NONE` | Restricts the ability to view the Stopwatch in the Ticket screen or in the All Tickets tab. |
+
+### Time Approval
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | — | _Not applicable. See Edit and Inquire levels._ |
+| Edit | `ALL` | Allows the ability to approve/reject Time Sheet Approvals for all members. |
+| Edit | `MY` | Allows the ability to approve/reject Time Sheet Approvals for only the users the member logged in is the approver for. |
+| Edit | `NONE` | Retricts the ability to approve/reject Time Sheet Approvals. |
+| Delete | — | _Not applicable. See Edit and Inquire levels._ |
+| Inquire | `ALL` | Allows the ability to review Time Sheet Approvals for all members. |
+| Inquire | `MY` | Allows the ability to review Time Sheet Approvals for only the users the member logged in is the approver for. |
+| Inquire | `NONE` | Retricts the ability to review Time Sheet Approvals. |
+
+### Time Entry
+
+| Verb | Level | Description |
+|------|-------|-------------|
+| Add | `ALL` | Allows the ability to create time entries for all members. |
+| Add | `MY` | Allows the ability tocreate time entries for only the member logged in. |
+| Add | `NONE` | Retricts the ability to create time entries. |
+| Edit | `ALL` | Allows the ability to edit existing time entries for all members. |
+| Edit | `MY` | Allows the ability to edit existing time entries for only the member logged in. |
+| Edit | `NONE` | Retricts the ability to edit existing time entries. |
+| Delete | `ALL` | Allows the ability to delete existing time entries for all members. |
+| Delete | `MY` | Allows the ability to delete existing time entries for only the member logged in. |
+| Delete | `NONE` | Retricts the ability to delete existing time entries. |
+| Inquire | `ALL` | Allows the ability to review existing time entries for all members. |
+| Inquire | `MY` | Allows the ability to view existing time entries for only the member logged in. This includes the time tab and audit trail. Time entry notes will still appear in the notes pod and in the audit trail for all members. |
+| Inquire | `NONE` | Retricts the ability to review existing time entries. |
+
diff --git a/docs/connectwise/CW_Security_Roles/api-member-security-roles.yaml b/docs/connectwise/CW_Security_Roles/api-member-security-roles.yaml
new file mode 100644
index 00000000..320f75ee
--- /dev/null
+++ b/docs/connectwise/CW_Security_Roles/api-member-security-roles.yaml
@@ -0,0 +1,1913 @@
+# ConnectWise API Member Security Roles — reference matrix.
+# Generated from the source XLSX; do not edit by hand.
+# Re-run generate_role_docs.py after updating the XLSX.
+
+metadata:
+  source_file: Security_Roles_Matrix_11132017.xlsx
+  generated_on: '2026-04-16'
+  generator: docs/integrations/connectwise/source/generate_role_docs.py
+  description: |-
+    ConnectWise security-role matrix. Each (module, action) entry describes what each access level (ALL, MY, MINE, NONE) means for the Add, Edit, Delete, and Inquire verbs. This is a reference catalog, not a per-role assignment — role assignments live in ConnectWise and are mirrored in the ResolutionFlow integration config.
+  level_order_most_to_least_privileged:
+  - ALL
+  - MY
+  - MINE
+  - NONE
+modules:
+  Companies:
+    actions:
+      Company Maintenance:
+        add:
+          levels:
+            ALL: Allows the ability to create companies within the system.
+            NONE: Retricts the ability to create companies within the system.
+        edit:
+          levels:
+            ALL: Allows the ability to edit existing companies within the system.
+            NONE: Retricts the ability to edit existing companies within the system.
+        delete:
+          levels:
+            ALL: Allows the ability to delete existing companies within the system.
+            NONE: Retricts the ability to delete existing companies within the system.
+        inquire:
+          levels:
+            ALL: Allows the ability to review existing companies within the system.
+            NONE: Retricts the ability to review existing companies within the system.
+      Company/Contact Group Maintenance:
+        add:
+          levels:
+            ALL: |-
+              Allows the ability to create/add Group information on the Groups Tab of a company.
+            MY: Not Applicable.
+            NONE: |-
+              Retricts the ability to create/add Group information on the Groups Tab of a company.
+        edit:
+          levels:
+            ALL: |-
+              Allows the ability to edit existing Group information on the Groups Tab of a company.
+            MY: Not Applicable.
+            NONE: |-
+              Retricts the ability to edit existing Group information on the Groups Tab of a company.
+        delete:
+          levels:
+            ALL: |-
+              Allows the ability to delete existing Group information on the Groups Tab of a company.
+            MY: Not Applicable.
+            NONE: |-
+              Retricts the ability to delete existing Group information on the Groups Tab of a company.
+        inquire:
+          levels:
+            ALL: Allows the ability to review Group information on the Groups Tab of a company.
+            MY: Not Applicable.
+            NONE: Retricts the ability to review Group information on the Groups Tab of a company.
+      Configuration - Display Passwords:
+        add:
+          note: Not applicable. See Inquire level.
+        edit:
+          note: Not applicable. See Inquire level.
+        delete:
+          note: Not applicable. See Inquire level.
+        inquire:
+          levels:
+            ALL: |-
+              When reviewing configurations at the company level, Custom Configuration Questions that are labeled as "Password" in the Configuratoin Type Setup Table will be visible.
+            NONE: |-
+              When reviewing configurations at the company level, Custom Configuration Questions that are labeled as "Password" in the Configuration Type Setup Table will be encrypted.
+      Configurations:
+        add:
+          levels:
+            ALL: Allows the ability to create configurations within the system.
+            NONE: Retricts the ability to create configurations within the system.
+        edit:
+          levels:
+            ALL: Allows the ability to edit existing configurations within the system.
+            NONE: Retricts the ability to edit existing configurations within the system.
+        delete:
+          levels:
+            ALL: Allows the ability to delete existing configurations within the system.
+            NONE: Retricts the ability to delete existing configurations within the system.
+        inquire:
+          levels:
+            ALL: Allows the ability to review existing configurations within the system.
+            NONE: Retricts the ability to review existing configurations within the system.
+      Contacts:
+        add:
+          levels:
+            ALL: Allows the ability to create contacts within the system.
+            NONE: Retricts the ability to create contacts within the system.
+        edit:
+          levels:
+            ALL: Allows the ability to edit existing contacts within the system.
+            NONE: Retricts the ability to edit existing contacts within the system.
+        delete:
+          levels:
+            ALL: Allows the ability to delete existing contacts within the system.
+            NONE: Retricts the ability to delete existing contacts within the system.
+        inquire:
+          levels:
+            ALL: Allows the ability to review existing contacts within the system.
+            NONE: Retricts the ability to review existing contacts within the system.
+      CRM/Sales Activities:
+        add:
+          levels:
+            ALL: Allows the ability to add new activities.
+            MY: Allows the ability to add new activities (same as ALL).
+            NONE: Restricts the ability to add new activities.
+        edit:
+          levels:
+            ALL: Allows the ability to edit all existing activities within the system.
+            MY: |-
+              Allows the ability to edit only the activities that belong to a particular member. An activity belongs to me if I created it, if I assigned someone to it, or if I am assigned to it.
+            NONE: Retricts the ability to edit existing activities within the system.
+        delete:
+          levels:
+            ALL: Allows the ability to delete all existing activities within the system.
+            MY: |-
+              Allows the ability to delete activities that belong to a particular member. An activity belongs to me if I created it, if I assigned someone to it, or if I am assigned to it.
+            NONE: Retricts the ability to delete existing activities within the system.
+        inquire:
+          levels:
+            ALL: Allows the ability to review all existing activities within the system.
+            MY: |-
+              Allows the ability to review only the activities that belong to a particular member. An activity belongs to me if I created it, if I assigned someone to it, or if I am assigned to it.
+            NONE: |-
+              Retricts the ability to review existing activities within the system. NOTE: If set to "None" the My Activities Screen will no longer be visible.
+      Lead Import:
+        add:
+          note: Not applicable. See Inquire level.
+        edit:
+          note: Not applicable. See Inquire level.
+        delete:
+          note: Not applicable. See Inquire level.
+        inquire:
+          note: |-
+            Not sure why this has a My / All option. It only controls whether or not I can see the Import Contacts menu icon.
+      Manage Documents:
+        add:
+          levels:
+            ALL: Allows the ability to add documents within the system.
+            MY: |-
+              Allows the ability to add documents that particular member uploaded within the system.
+            NONE: |-
+              Retricts the ability to add documents within the system. NOTE: This setting applies to the Documents Tab of Agreements, Companies, Contacts, Configurations, Expenses, Opportunities, Projects, and Service Tickets.
+        edit:
+          levels:
+            ALL: Allows the ability to edit all existing documents within the system.
+            MY: |-
+              Allows the ability to edit only the documents that particular member uploaded within the system.
+            NONE: |-
+              Retricts the ability to edit existing documents within the system. NOTE: This setting applies to the Documents Tab of Agreements, Companies, Contacts, Configurations, Expenses, Opportunities, Projects, and Service Tickets.
+        delete:
+          levels:
+            ALL: Allows the ability to delete all existing documents within the system.
+            MY: |-
+              Allows the ability to delete only the documents that particular member uploaded within the system.
+            NONE: |-
+              Retricts the ability to delete existing documents within the system. NOTE: This setting applies to the Documents Tab of Agreements, Companies, Contacts, Configurations, Expenses, Opportunities, Projects, and Service Tickets.
+        inquire:
+          levels:
+            ALL: Allows the ability to review all existing documents within the system.
+            MY: |-
+              Allows the ability to review only the documents that particular member uploaded within the system.
+            NONE: |-
+              Retricts the ability to review existing documents within the system. NOTE: This setting applies to the Documents Tab of Agreements, Companies, Contacts, Configurations, Expenses, Opportunities, Projects, and Service Tickets.
+      Management:
+        add:
+          levels:
+            ALL: Allows the ability to add information on the Management Tab of a company.
+            NONE: Retricts the ability to add information on the Management Tab of a company.
+        edit:
+          levels:
+            ALL: |-
+              Allows the ability to edit existing information on the Management Tab of a company.
+            NONE: |-
+              Retricts the ability to edit existing information on the Management Tab of a company.
+        delete:
+          levels:
+            ALL: |-
+              Allows the ability to delete existing information on the Management Tab of a company.
+            NONE: |-
+              Retricts the ability to delete existing information on the Management Tab of a company.
+        inquire:
+          levels:
+            ALL: |-
+              Allows the ability to review existing information on the Management Tab of a company.
+            NONE: |-
+              Retricts the ability to review existing information on the Management Tab of a company.
+      Notes:
+        add:
+          levels:
+            ALL: Allows the ability to add information on the Notes Tab of a company or contact.
+            NONE: |-
+              Retricts the ability to add information on the Notes Tab of a company or contact.
+        edit:
+          levels:
+            ALL: |-
+              Allows the ability to edit existing information on the Notes Tab of a company or contact.
+            NONE: |-
+              Retricts the ability to edit existing information on the Notes Tab of a company or contact.
+        delete:
+          levels:
+            ALL: |-
+              Allows the ability to delete existing information on the Notes Tab of a company or contact.
+            NONE: |-
+              Retricts the ability to delete existing information on the Notes Tab of a company or contact.
+        inquire:
+          levels:
+            ALL: |-
+              Allows the ability to review information on the Notes Tab of a company or contact.
+            NONE: |-
+              Retricts the ability to review information on the Notes Tab of a company or contact.
+      Reports:
+        add:
+          note: Not applicable. See Inquire level.
+        edit:
+          note: Not applicable. See Inquire level.
+        delete:
+          note: Not applicable. See Inquire level.
+        inquire:
+          levels:
+            ALL: |-
+              Allows the ability to review reports located in the Companies Category of the reports module. By default, when this option is selected, access to all company and contact reports is allows, but access can be customized using the Customize Option for this module.
+            NONE: |-
+              Retricts the ability to review reports located in the Companies and Contacts Category of the reports module.
+      Surveys:
+        add:
+          levels:
+            ALL: |-
+              Allows the ability to add information on the Surveys Tab of a company or contact. This applies only to CRM Surveys.
+            NONE: |-
+              Retricts the ability to add information on the Surveys Tab of a company or contact. This applies only to CRM Surveys.
+        edit:
+          levels:
+            ALL: |-
+              Allows the ability to edit information on the Surveys Tab of a company or contact. This applies only to CRM Surveys.
+            NONE: |-
+              Retricts the ability to edit information on the Surveys Tab of a company or contact. This applies only to CRM Surveys.
+        delete:
+          levels:
+            ALL: |-
+              Allows the ability to delete information on the Surveys Tab of a company or contact. This applies only to CRM Surveys.
+            NONE: |-
+              Retricts the ability to delete information on the Surveys Tab of a company or contact. This applies only to CRM Surveys.
+        inquire:
+          levels:
+            ALL: |-
+              Allows the ability to review information on the Surveys Tab of a company or contact. This applies to both CRM and Service Surveys.
+            NONE: |-
+              Retricts the ability to review information on the Surveys Tab of a company or contact. This applies to both CRM and Service Surveys.
+      Team Members:
+        add:
+          levels:
+            ALL: |-
+              Allows the ability to add Team Role information on the Team Tab of a company or contact.
+            NONE: |-
+              Retricts the ability to add Team Role information on the Team Tab of a company or contact.
+        edit:
+          levels:
+            ALL: |-
+              Allows the ability to edit existing Team Role information on the Team Tab of a company or contact.
+            NONE: |-
+              Retricts the ability to edit existing Team Role information on the Team Tab of a company or contact.
+        delete:
+          levels:
+            ALL: |-
+              Allows the ability to delete existing Team Role information on the Team Tab of a company or contact.
+            NONE: |-
+              Retricts the ability to delete existing Team Role information on the Team Tab of a company or contact.
+        inquire:
+          levels:
+            ALL: |-
+              Allows the ability to review existing Team Role information on the Team Tab of a company or contact.
+            NONE: |-
+              Retricts the ability to review existing Team Role information on the Team Tab of a company or contact.
+      Tracks:
+        add:
+          levels:
+            ALL: Allows the ability to add Track Items to the Tracks Tab of a company or contact.
+            NONE: |-
+              Retricts the ability to add Track Items to the Tracks Tab of a company or contact.
+        edit:
+          levels:
+            ALL: |-
+              Allows the ability to edit existing Track Items to the Tracks Tab of a company or contact.
+            NONE: |-
+              Retricts the ability to edit existing Track Items to the Tracks Tab of a company or contact.
+        delete:
+          levels:
+            ALL: |-
+              Allows the ability to delete existing Track Items to the Tracks Tab of a company or contact.
+            NONE: |-
+              Retricts the ability to delete existing Track Items to the Tracks Tab of a company or contact.
+        inquire:
+          levels:
+            ALL: |-
+              Allows the ability to review Track Items to the Tracks Tab of a company or contact.
+            NONE: |-
+              Retricts the ability to review Track Items to the Tracks Tab of a company or contact.
+      UserCentric:
+        add:
+          note: Not Applicable. See Inquire Level.
+        edit:
+          note: Not Applicable. See Inquire Level.
+        delete:
+          note: Not Applicable. See Inquire Level.
+        inquire:
+          levels:
+            ALL: Allows access to the UserCentric Icon under the Companies Module.
+            NONE: Retricts access to the UserCentric Icon under the Companies Module.
+  Finance:
+    actions:
+      Accounting Interface:
+        add:
+          note: Not applicable. See Inquire level.
+        edit:
+          note: Not applicable. See Inquire level.
+        delete:
+          levels:
+            ALL: |-
+              Allows the ability to delete GL Batches from the Open Batches tab and to Remove Records on the Unposted Invoices, Unposted Expenses and Unposted Procurement tabs.
+            NONE: |-
+              Restricts the ability to delete GL Batches from the Open Batches tab and to Remove Records on the Unposted Invoices, Unposted Expenses and Unposted Procurement tabs.
+        inquire:
+          levels:
+            ALL: Allows access to the Accounting Interface Screen.
+            NONE: Retricts access to the Accounting Interface Screen.
+      Agreement Invoicing:
+        add:
+          levels:
+            ALL: Allows the ability to create agreement invoices within the system.
+            NONE: Retricts the ability to create agreement invoices within the system.
+        edit:
+          levels:
+            ALL: Allows the ability to edit existing agreement invoices within the system.
+            NONE: Retricts the ability to edit existing agreement invoices within the system.
+        delete:
+          levels:
+            ALL: Allows the ability to delete existing agreement invoices within the system.
+            NONE: Retricts the ability to delete existing agreement invoices within the system.
+        inquire:
+          levels:
+            ALL: Allows the ability to review existing agreement invoices within the system.
+            NONE: Retricts the ability to review existing agreement invoices within the system.
+      Agreement Sales:
+        add:
+          note: Not applicable. See Inquire and Edit levels.
+        edit:
+          levels:
+            ALL: Allows the use of the actions on the Agreement Sales screen.
+            NONE: Restricts the ability to use the actions on the Agreement Sales screen.
+        delete:
+          note: Not applicable. See Inquire and Edit levels.
+        inquire:
+          levels:
+            ALL: Allows access to the Agreement Sales screen.
+            NONE: Restricts access to the Agreement Sales screen.
+      Agreements:
+        add:
+          levels:
+            ALL: Allows the ability to create agreements within the system.
+            NONE: Retricts the ability to create agreements within the system.
+        edit:
+          levels:
+            ALL: |-
+              Allows the ability to edit existing agreements within the system. This also includes all tabs on the agreement.
+            NONE: |-
+              Retricts the ability to edit existing agreements within the system. This also includes all tabs on the agreement.
+        delete:
+          levels:
+            ALL: Allows the ability to delete existing agreements within the system.
+            NONE: Retricts the ability to delete existing agreements within the system.
+        inquire:
+          levels:
+            ALL: Allows the ability to review existing agreements within the system.
+            NONE: Retricts the ability to review existing agreements within the system.
+      Billing Rate Maintenance:
+        add:
+          levels:
+            ALL: Allows the ability to add custom work roles (agreements, companies).
+            NONE: Restricts the ability to add custom work roles (agreements, companies).
+        edit:
+          levels:
+            ALL: Allows the ability to edit custom work roles (agreements, companies).
+            NONE: Restricts the ability to edit custom work roles (agreements, companies).
+        delete:
+          levels:
+            ALL: Allows the ability to delete custom work roles (agreements, companies).
+            NONE: Restricts the ability to delete custom work roles (agreements, companies).
+        inquire:
+          levels:
+            ALL: Allows the ability to view custom work roles (agreements, companies).
+            NONE: Restricts the ability to view custom work roles (agreements, companies).
+      Billing view Time:
+        add:
+          note: Not applicable. See Edit and Inquire level.
+        edit:
+          levels:
+            ALL: Enables you to edit the Billing Options pod.
+            NONE: |-
+              Restricts the ability to view the Billing Options pod on a time or expense entry.
+        delete:
+          note: Not applicable. See Inquire level.
+        inquire:
+          levels:
+            ALL: Allows the ability to view billing options section on a time or expense entry.
+            NONE: |-
+              Restricts the ability to view billing options section on a time or expense entry.
+      Company Finance:
+        add:
+          note: Not applicable. See Edit and Inquire levels.
+        edit:
+          levels:
+            ALL: |-
+              Allows the ability to edit the Company Finance Screen information for companies within the system.
+            NONE: |-
+              Retricts the ability to edit the Company Finance Screen information for companies within the system.
+        delete:
+          note: Not Applicable. See Edit and Inquire levels.
+        inquire:
+          levels:
+            ALL: |-
+              Allows the ability to review the Company Finance Screen for companies within the system.
+            NONE: |-
+              Retricts the ability to review the Company Finance Screen for companies within the system.
+      Expense Reimbursement:
+        add:
+          note: Not applicable. See Inquire level.
+        edit:
+          note: Not applicable. See Inquire level.
+        delete:
+          note: Not applicable. See Inquire level.
+        inquire:
+          levels:
+            ALL: Allows access to the Expense Reimbursement Screen.
+            NONE: Retricts access to the Expense Reimbursement Screen.
+      Financial Dashboard:
+        add:
+          note: Not applicable. See Inquire level.
+        edit:
+          note: Not applicable. See Inquire level.
+        delete:
+          note: Not Applicable. See Inquire level.
+        inquire:
+          levels:
+            ALL: Allows the ability to review the Financial Dashboard.
+            NONE: Retricts the ability to review the Financial Dashboard.
+      Invoice Approval:
+        add:
+          note: Not applicable. See Edit and Inquire levels.
+        edit:
+          levels:
+            ALL: Allows the ability to approve (route) any invoices within the system.
+            MY: |-
+              Allows the ability to approve (route) any invoices that are currently routed to the particular member.
+            NONE: Restricts the ability to approve (route) invoices within the system.
+        delete:
+          note: Not applicable. See Edit and Inquire levels.
+        inquire:
+          levels:
+            ALL: |-
+              Restricts access to email invoices via the Invoice Batch Emailing screen and also approvals via the My Invoices Screen.
+            MY: Same as ALL.
+      Invoicing:
+        add:
+          levels:
+            ALL: Allows the ability to create invoices within the system.
+            MY: Allows the ability to create invoices within the system (same as ALL).
+            NONE: Retricts the ability to create invoices within the system.
+        edit:
+          levels:
+            ALL: Allows the ability to edit all existing invoices within the system.
+            MY: |-
+              Allows the ability to edit only the existing invoices that are routed to a particular member in the system.
+            NONE: Retricts the ability to edit existing invoices within the system.
+        delete:
+          levels:
+            ALL: Allows the ability to delete all existing invoices within the system.
+            MY: |-
+              Allows the ability to delete only the existing invoices that are routed to a particular member within the system.
+            NONE: Retricts the ability to delete existing invoices within the system.
+        inquire:
+          levels:
+            ALL: Allows the ability to view all existing invoices in the system.
+            MY: |-
+              Allows the ability to view only the existing invoices that are routed to a particular member within the system.
+            NONE: |-
+              Retricts the ability to review the Invoicing, Invoice Search, or Special Invoices screens.
+      Reports:
+        add:
+          note: Not applicable. See Inquire level.
+        edit:
+          note: Not applicable. See Inquire level.
+        delete:
+          note: Not applicable. See Inquire level.
+        inquire:
+          levels:
+            ALL: |-
+              Allows the ability to review reports located in the Finance Category of the reports module. By default, when this option is selected, access to all company and contact reports is allows, but access can be customized using the Customize Option for this module.
+            NONE: |-
+              Retricts the ability to review reports located in the Finance Category of the reports module.
+  Marketing:
+    actions:
+      ConnectWise Campaign:
+        add:
+          note: Not applicable. See Inquire level.
+        edit:
+          note: Not applicable. See Inquire level.
+        delete:
+          note: Not applicable. See Inquire level.
+        inquire:
+          levels:
+            ALL: Allows the ability to view ConnectWise Campaign in the left nacigation.
+            NONE: Retricts the ability to view or interact with ConnectWise Campaign.
+      Marketing Groups:
+        add:
+          levels:
+            ALL: Allows the ability to create new Groups.
+            NONE: Restricts the ability to create new Groups.
+        edit:
+          levels:
+            ALL: Allows the ability to edit existing Groups.
+            NONE: Restricts the ability to edit existing Groups.
+        delete:
+          levels:
+            ALL: Allows the ability to delete existing Groups.
+            NONE: Restricts the ability to delete existing Groups.
+        inquire:
+          levels:
+            ALL: Allows the ability to access the Marketing Groups screen.
+            NONE: Restricts the ability to access the Marketing Groups screen.
+      Marketing Management:
+        add:
+          levels:
+            ALL: |-
+              Allows the ability to create marketing items located within the Marketing Module.
+            MY: |-
+              Allows the ability to create marketing items located within the Marketing Module only for those items that member is the Owner.
+            NONE: |-
+              Retricts the ability to create marketing items located within the Marketing Module.
+        edit:
+          levels:
+            ALL: Allows the ability to edit marketing items located within the Marketing Module.
+            MY: |-
+              Allows the ability to edit marketing items located within the Marketing Module only for those items that member is the Owner.
+            NONE: |-
+              Retricts the ability to edit marketing items located within the Marketing Module.
+        delete:
+          levels:
+            ALL: |-
+              Allows the ability to delete marketing items located within the Marketing Module.
+            MY: |-
+              Allows the ability to delete marketing items located within the Marketing Module only for those items that member is the Owner.
+            NONE: |-
+              Retricts the ability to delete marketing items located within the Marketing Module.
+        inquire:
+          levels:
+            ALL: |-
+              Allows the ability to review marketing items located within the Marketing Module.
+            MY: |-
+              Allows the ability to review marketing items located within the Marketing Module only for those items that member is the Owner.
+            NONE: |-
+              Retricts the ability to review marketing items located within the Marketing Module.
+      Marketing Reports:
+        add:
+          note: Not applicable. See Inquire level.
+        edit:
+          note: Not applicable. See Inquire level.
+        delete:
+          note: Not applicable. See Inquire level.
+        inquire:
+          levels:
+            ALL: |-
+              Allows the ability to review reports located in the Marketing Category of the reports module. By default, when this option is selected, access to all marketing reports is allowed, but access can be customized using the Customize Option for this module.
+            NONE: |-
+              Retricts the ability to review reports located in the Marketing Category of the reports module.
+  Procurement:
+    actions:
+      Inventory Adjustments:
+        add:
+          levels:
+            ALL: Allows the ability to create new Inventory Adjustments.
+            NONE: Retricts the ability to create new Inventory Adjustments.
+        edit:
+          levels:
+            ALL: Allows the ability to edit existing open Inventory Adjustment item information.
+            NONE: Retricts the ability to edit existing Inventory Adjustment item information.
+        delete:
+          levels:
+            ALL: Allows the ability to delete existing open Inventory Adjustment items.
+            NONE: Retricts the ability to delete existing Inventory Adjustment items.
+        inquire:
+          levels:
+            ALL: Allows the ability to review existing Inventory Adjustment item information.
+            NONE: Retricts the ability to review existing Inventory Adjustment item information.
+      Inventory Transfers:
+        add:
+          note: Not applicable. See Edit and Inquire levels.
+        edit:
+          levels:
+            ALL: Allows the ability to complete a Inventory Transfer.
+            NONE: Retricts the ability to complete a Inventory Transfer.
+        delete:
+          note: Not applicable. See Edit and Inquire levels.
+        inquire:
+          levels:
+            ALL: Allows the ability to review existing Inventory Transfer information.
+            NONE: Retricts the ability to review existing Inventory Transfer information.
+      Product Catalog:
+        add:
+          levels:
+            ALL: Allows the ability to create new Products in the Product Catalog.
+            NONE: Restricts the ability to create new products in the Product Catalog.
+        edit:
+          levels:
+            ALL: Allows the ability to edit existing products in the Products Catalog.
+            NONE: Restricts the ability to edit existing products in the Products Catalog.
+        delete:
+          levels:
+            ALL: Allows the ability to delete existing Products in the Products Catalog.
+            NONE: Restricts the ability to delete existing Products in the Products Catalog.
+        inquire:
+          levels:
+            ALL: |-
+              Allows the ability to review existing Product information in the Product Catalog.
+            NONE: |-
+              Restricts the ability to review existing Product information in the Product Catalog.
+      Products:
+        add:
+          levels:
+            ALL: |-
+              Allows the ability to add Products to Opportunities, Sales Orders, and Service Tickets.
+            NONE: |-
+              Retricts the ability to add Products to Opportunities, Sales Orders, and Service Tickets. NOTE: This option also controls the ability to pick and ship products.
+        edit:
+          levels:
+            ALL: |-
+              Allows the ability to edit Products on Opportunities, Sales Orders, Service Tickets, and Invoices.
+            NONE: |-
+              Restricts the ability to edit Products on Opportunities, Sales Orders, Service Tickets, and Invoices.
+        delete:
+          levels:
+            ALL: |-
+              Allows the ability to delete products added to Opportunities, Sales Orders, Service Tickets, and Invoices.
+            NONE: |-
+              Restricts the ability to delete products added to Opportunities, Sales Orders, Service Tickets, and Invoices.
+        inquire:
+          levels:
+            ALL: |-
+              Allows the ability to review information for products added to Opportunities, Sales Orders, and Service Tickets.
+            NONE: |-
+              Retricts the ability to review information for products added to Opportunities, Sales Orders, and Service Tickets.
+      Purchase Orders:
+        add:
+          levels:
+            ALL: Allows the ability to create new POs.
+            MY: Allows the ability to create new POs.
+            NONE: Restricts the ability to create new POs.
+        edit:
+          levels:
+            ALL: Allows the ability to edit existing POs.
+            MY: |-
+              Allows the ability to edit existing PO's where the Member is listed in the Entered By field on the PO.
+            NONE: Restricts the ability to edit existing POs.
+        delete:
+          levels:
+            ALL: Allows the ability to delete existing POs.
+            MY: |-
+              Allows the ability to delete existing PO's where the Member is listed in the Entered By field on the PO.
+            NONE: Restricts the ability to delete existing POs.
+        inquire:
+          levels:
+            ALL: Allows the ability to view existing POs.
+            MY: |-
+              Allows the ability to delete existing PO's where the Member is listed in the Entered By field on the PO.
+            NONE: Restricts the ability to view existing POs.
+      Purchasing Approvals:
+        add:
+          note: Not applicable. See Edit and Inquire levels.
+        edit:
+          levels:
+            ALL: |-
+              Allows the ability to use actionable options for items in the Purchasing Approvals Search Screen.
+            NONE: |-
+              Retricts the ability to use actionable options for items in the Purchasing Approvals Search Screen.
+        delete:
+          note: Not applicable. See Edit and Inquire levels.
+        inquire:
+          levels:
+            ALL: |-
+              Allows the ability to review information for items in the Purchasing Approvals Search Screen.
+            NONE: |-
+              Retricts the ability to review information for items in the Purchasing Approvals Search Screen.
+      Purchasing Demand:
+        add:
+          note: Not applicable. See Edit and Inquire levels.
+        edit:
+          levels:
+            ALL: |-
+              Allows the ability to use actionable options for items in the Purchasing Search Screen.
+            NONE: |-
+              Retricts the ability to use actionable options for items in the Purchasing Search Screen.
+        delete:
+          note: Not applicable. See Edit and Inquire levels.
+        inquire:
+          levels:
+            ALL: |-
+              Allows the ability to review information for items in the Purchasing Search Screen.
+            NONE: |-
+              Retricts the ability to review information for items in the Purchasing Search Screen.
+      Reports:
+        add:
+          note: Not applicable. See Inquire level.
+        edit:
+          note: Not applicable. See Inquire level.
+        delete:
+          note: Not applicable. See Inquire level.
+        inquire:
+          levels:
+            ALL: |-
+              Allows the ability to review reports located in the Procurement Category of the reports module. By default, when this option is selected, access to all procurement reports is allowed, but access can be customized using the Customize Option for this module.
+            NONE: |-
+              Retricts the ability to review reports located in the Procurement Category of the reports module.
+      RMA Entry:
+        add:
+          levels:
+            ALL: Allows the ability to create new RMA Tags.
+            NONE: Restricts the ability to create new RMA Tags.
+        edit:
+          levels:
+            ALL: Allows the ability to edit existing RMA Tags.
+            NONE: Restricts the ability to edit existing RMA Tags.
+        delete:
+          levels:
+            ALL: Allows the ability to delete existing RMA Tags.
+            NONE: Restricts the ability to delete existing RMA Tags.
+        inquire:
+          levels:
+            ALL: Allows the ability to view existing RMA Tags.
+            NONE: Restricts the ability to view existing RMA Tags.
+      RMA Processing:
+        add:
+          note: Not applicable. See Inquire level.
+        edit:
+          note: Not applicable. See Inquire level.
+        delete:
+          note: Not applicable. See Inquire level.
+        inquire:
+          levels:
+            ALL: Allows the ability to view vendor, shipping, and closing sections of RMA tags.
+            NONE: |-
+              Restricts the ability to view vendor, shipping, and closing sections of RMA tags.
+  Project:
+    actions:
+      Close Project Tickets:
+        add:
+          note: Not applicable. See Edit level.
+        edit:
+          levels:
+            ALL: Allows the ability to close and re-open Projects and Project Tickets.
+            NONE: Retricts the ability to close and re-open Projects and Project Tickets.
+        delete:
+          note: Not applicable. See Edit level.
+        inquire:
+          note: Not applicable. See Edit level.
+      Close Projects:
+        add:
+          note: Not applicable. See Edit and Inquire levels.
+        edit:
+          levels:
+            ALL: Allows the ability to set existing Projects to a closed status.
+            NONE: Disallows the ability to set existing Projects to a closed status.
+        delete:
+          note: Not applicable. See Edit and Inquire levels.
+        inquire:
+          levels:
+            ALL: Allows the ability to view Closed statuses on the Project tab of a Project.
+            NONE: Disallows the ability to view Closed statuses on the Project tab of a Project.
+      Project Contacts:
+        add:
+          levels:
+            ALL: |-
+              Allows the ability to add contact information to the Contacts Tab of existing projects.
+            MY: |-
+              The ability to add contact information to the Contacts Tab for projects is determined by the settings of the project role the member is assigned to on the specific project.
+            NONE: |-
+              Retricts the ability to add contact information to the Contacts Tab of existing projects.
+        edit:
+          levels:
+            ALL: |-
+              Allows the ability to edit contact information to the Contacts Tab of existing projects.
+            MY: |-
+              The ability to edit contact information on the Contacts Tab for projects is determined by the settings of the project role the member is assigned to on the specific project.
+            NONE: |-
+              Retricts the ability to edit contact information to the Contacts Tab of existing projects.
+        delete:
+          levels:
+            ALL: |-
+              Allows the ability to delete contact information to the Contacts Tab of existing projects.
+            MY: |-
+              The ability to delete contact information from the Contacts Tab for projects is determined by the settings of the project role the member is assigned to on the specific project.
+            NONE: |-
+              Retricts the ability to delete contact information to the Contacts Tab of existing projects.
+        inquire:
+          levels:
+            ALL: |-
+              Allows the ability to review contact information to the Contacts Tab of existing projects.
+            MY: |-
+              The ability to review contact information on the Contacts Tab of projects is determined by the settings of the project role the member is assigned to on the specific project.
+            NONE: |-
+              Retricts the ability to review contact information to the Contacts Tab of existing projects.
+      Project Finance:
+        add:
+          note: Not applicable. See Edit and Inquire levels.
+        edit:
+          levels:
+            ALL: |-
+              Allows the ability to edit the Project Finance, Recap, and Invoice tabs of existing projects.
+            MY: |-
+              Access to the Finance, Recap, and Invoices tabs of the project or project ticket is determined by the settings of the project role the member is assigned to on the specific project.
+            NONE: |-
+              Restricts the ability to edit the Project Finance, Recap, and Invoice tabs of existing projects.
+        delete:
+          note: Not applicable. See Edit and Inquire levels.
+        inquire:
+          levels:
+            ALL: |-
+              Allows the ability to review the Project Finance, Recap, and Invoice tabs of existing projects. Also allows access to the Project budget by Variance view in the Views tab.
+            MY: |-
+              The ability to review the Finance, Recap or Invoices Tabs of the project or project ticket is determined by the settings of the project role the member is assigned to on the specific project.
+            NONE: |-
+              Restricts the ability to review the Project Finance, Recap, and Invoice tabs of existing projects. Also restricts access to the Project budget by Variance view in the Views tab. NOTE: If you select None, the Project Boards icon will no longer be visible. In order to see the Project Board icon, the user needs Project Management Inquire set to All, AND Project Finance Inquire set to My at the very least.
+      Project Headers:
+        add:
+          levels:
+            ALL: Allows the ability to add new projects.
+            MY: |-
+              The ability to add new projects is determined by the settings of the project role the member is assigned to on the specific project.
+            NONE: Restricts the ability to add new projects.
+        edit:
+          levels:
+            ALL: Allows the ability to edit the general tab of existing projects.
+            MY: |-
+              The ability to edit the general tab of existing projects is determined by the settings of the project role the member is assigned to on the specific project.
+            NONE: Restricts the ability to edit the general tab of existing projects.
+        delete:
+          levels:
+            ALL: Allows the ability to delete existing projects.
+            MY: |-
+              The ability to delete existing projects is determined by the settings of the project role the member is assigned to on the specific project.
+            NONE: Restricts the ability to delete existing projects.
+        inquire:
+          levels:
+            ALL: Allows the ability to view existing projects.
+            MY: |-
+              The ability to view existing projects is determined by the settings of the project role the member is assigned to on the specific project.
+            NONE: Restricts the ability to view existing projects.
+      Project Management:
+        add:
+          note: Not applicable. See Inquire level.
+        edit:
+          note: Not applicable. See Inquire level.
+        delete:
+          note: Not applicable. See Inquire level.
+        inquire:
+          levels:
+            ALL: Allows the ability to view Project Boards.
+            MY: Not Applicable.
+            NONE: |-
+              Retricts the ability to view Project Boards. NOTE: The only available options are All or None. If you select None, the Project Boards icon will no longer be visible. In order to see the Project Board icon, the user needs Project Management Inquire set to All, AND Project Finance Inquire set to My at the very least.
+      Project Notes:
+        add:
+          levels:
+            ALL: Allows the ability to add information on the Notes Tab of a Project.
+            MY: |-
+              The ability to add information on the Notes Tab of a project is determined by the settings of the project role the member is assigned to on the specific project.
+            NONE: Retricts the ability to add information on the Notes Tab of a Project.
+        edit:
+          levels:
+            ALL: Allows the ability to edit information on the Notes Tab of a Project.
+            MY: |-
+              The ability to edit information on the Notes Tab of a project is determined by the settings of the project role the member is assigned to on the specific project.
+            NONE: Retricts the ability to edit information on the Notes Tab of a Project.
+        delete:
+          levels:
+            ALL: Allows the ability to delete information on the Notes Tab of a Project.
+            MY: |-
+              The ability to delete information on the Notes Tab of a project is determined by the settings of the project role the member is assigned to on the specific project.
+            NONE: Retricts the ability to delete information on the Notes Tab of a Project.
+        inquire:
+          levels:
+            ALL: Allows the ability to review information on the Notes Tab of a Project.
+            MY: |-
+              The ability to view information on the Notes Tab of a project is determined by the settings of the project role the member is assigned to on the specific project.
+            NONE: Retricts the ability to review information on the Notes Tab of a Project.
+      Project Phase:
+        add:
+          levels:
+            ALL: Allows the ability to add a new Phase on the Workplan Tab of a Project.
+            MY: |-
+              The ability to add a new Phase on the Workplan Tab to a project is determined by the settings of the project role the member is assigned to on the specific project.
+            NONE: Retricts the ability to add a new Phase on the Workplan Tab of a Project.
+        edit:
+          levels:
+            ALL: Allows the ability to edit an existing Phase on the Workplan Tab of a Project.
+            MY: |-
+              The ability to edit a Phase on the Workplan Tab to a project is determined by the settings of the project role the member is assigned to on the specific project.
+            NONE: Retricts the ability to edit an existing Phase on the Workplan Tab of a Project.
+        delete:
+          levels:
+            ALL: Allows the ability to delete an existing Phase on the Workplan Tab of a Project.
+            MY: |-
+              The ability to delete a Phase on the Workplan Tab to a project is determined by the settings of the project role the member is assigned to on the specific project.
+            NONE: |-
+              Retricts the ability to delete an existing Phase on the Workplan Tab of a Project.
+        inquire:
+          levels:
+            ALL: Allows the ability to review an existing Phase on the Workplan Tab of a Project.
+            MY: |-
+              The ability to view a Phase on the Workplan Tab to a project is determined by the settings of the project role the member is assigned to on the specific project.
+            NONE: |-
+              Retricts the ability to review an existing Phase on the Workplan Tab of a Project.
+      Project Product:
+        add:
+          levels:
+            ALL: Allows the ability to add product items to the ProductsTab of existing projects.
+            MY: |-
+              The ability to add product items to the ProductsTab of projects is determined by the settings of the project role the member is assigned to on the specific project.
+            NONE: |-
+              Retricts the ability to add product items to the ProductsTab of existing projects.
+        edit:
+          levels:
+            ALL: |-
+              Allows the ability to edit product items to the ProductsTab of existing projects.
+            MY: |-
+              The ability to edit product items on the ProductsTab of projects is determined by the settings of the project role the member is assigned to on the specific project.
+            NONE: |-
+              Retricts the ability to edit product items to the ProductsTab of existing projects.
+        delete:
+          levels:
+            ALL: |-
+              Allows the ability to delete product items to the ProductsTab of existing projects.
+            MY: |-
+              The ability to delete product items from the ProductsTab of projects is determined by the settings of the project role the member is assigned to on the specific project.
+            NONE: |-
+              Retricts the ability to delete product items to the ProductsTab of existing projects.
+        inquire:
+          levels:
+            ALL: |-
+              Allows the ability to review product items to the ProductsTab of existing projects.
+            MY: |-
+              The ability to view product items on the ProductsTab of projects is determined by the settings of the project role the member is assigned to on the specific project.
+            NONE: |-
+              Retricts the ability to review product items to the ProductsTab of existing projects.
+      Project Reports:
+        add:
+          note: Not applicable. See Inquire level.
+        edit:
+          note: Not applicable. See Inquire level.
+        delete:
+          note: Not applicable. See Inquire level.
+        inquire:
+          levels:
+            ALL: |-
+              Allows the ability to review reports located in the Project Category of the reports module. By default, when this option is selected, access to all marketing reports is allowed, but access can be customized using the Customize Option for this module.
+            NONE: |-
+              Retricts the ability to review reports located in the Project Category of the reports module.
+      Project Scheduling:
+        add:
+          levels:
+            ALL: |-
+              Allows the ability to add information on the Schedule Tab of an all existing Projects.
+            MY: |-
+              The ability to add information on the Schedule Tab of a project is determined by the settings of the project role the member is assigned to on the specific project.
+            NONE: Retricts the ability to add information on the Schedule Tab of a Project.
+        edit:
+          levels:
+            ALL: |-
+              Allows the ability to edit the information stored on the Schedule Tab of an all existing Projects.
+            MY: |-
+              The ability to edit information on the Schedule Tab of a project is determined by the settings of the project role the member is assigned to on the specific project.
+            NONE: |-
+              Retricts the ability to edit the information stored on the Schedule Tab of a Project.
+        delete:
+          levels:
+            ALL: |-
+              Allows the ability to delete the information stored on the Schedule Tab of an all existing Projects.
+            MY: |-
+              The ability to delete information on the Schedule Tab of a project is determined by the settings of the project role the member is assigned to on the specific project.
+            NONE: |-
+              Retricts the ability to delete the information stored on the Schedule Tab of a Project.
+        inquire:
+          levels:
+            ALL: |-
+              Allows the ability to review the information stored on the Schedule Tab of an all existing Projects.
+            MY: |-
+              The ability to view information on the Schedule Tab of a project is determined by the settings of the project role the member is assigned to on the specific project.
+            NONE: Retricts the review the information stored on the Schedule Tab of a Project.
+      Project Teams:
+        add:
+          levels:
+            ALL: |-
+              Allows the ability to add members on the Project Team Tab of an all existing Projects. Also allows the ability to convert Project tickets to Service Tickets.
+            MY: |-
+              The ability to add members on the Team Tab of a Project is determined by the settings of the project role the member is assigned to on the specific project.
+            NONE: Retricts the ability to add members on the Project Team Tab of a Project.
+        edit:
+          levels:
+            ALL: Allows the ability to edit members on the Project Team Tab of a Project.
+            MY: |-
+              The ability to edit members on the Team Tab of a Project is determined by the settings of the project role the member is assigned to on the specific project.
+            NONE: Retricts the ability to edit members on the Project Team Tab of a Project.
+        delete:
+          levels:
+            ALL: Allows the ability to delete members on the Project Team Tab of a Project.
+            MY: |-
+              The ability to delete members from the Team Tab of a Project is determined by the settings of the project role the member is assigned to on the specific project.
+            NONE: Retricts the ability to delete members on the Project Team Tab of a Project.
+        inquire:
+          levels:
+            ALL: |-
+              Allows the ability to review member details on the Project Team Tab of a Project. Also allows the ability to convert Project tickets to Service Tickets.
+            MY: |-
+              The ability to view members on the Team Tab of a Project is determined by the settings of the project role the member is assigned to on the specific project.
+            NONE: |-
+              Retricts the ability to review member details on the Project Team Tab of a Project.
+      Project Templates:
+        add:
+          levels:
+            ALL: Allows the ability to create Project Templates.
+            NONE: Retricts the ability to create Project Templates.
+        edit:
+          levels:
+            ALL: Allows the ability to edit Project Templates.
+            NONE: Retricts the ability to edit Project Templates.
+        delete:
+          levels:
+            ALL: Allows the ability to delete Project Templates.
+            NONE: Retricts the ability to delete Project Templates.
+        inquire:
+          levels:
+            ALL: Allows the ability to review Project Templates.
+            NONE: Retricts the ability to review Project Templates.
+      Project Ticket - Dependencies:
+        add:
+          levels:
+            ALL: Allows the ability to append predecessor tickets to a project ticket.
+            NONE: Disallows the ability to append predecessor tickets to a project ticket.
+        edit:
+          levels:
+            ALL: Allows the ability to edit the existing predecessor ticket on a project ticket.
+            NONE: |-
+              Disallows the ability to edit the existing predecessor ticket on a project ticket.
+        delete:
+          levels:
+            ALL: Allows the ability to remove an existing predecessor ticket on a project ticket.
+            NONE: |-
+              Disallows the ability to remove an existing predecessor ticket on a project ticket.
+        inquire:
+          levels:
+            ALL: Allows the ability to view existing predecessor ticket info on a project ticket.
+            NONE: |-
+              Disallows the ability to view existing predecessor ticket info on a project ticket.
+      Project Ticket Tasks:
+        add:
+          levels:
+            ALL: Allows the ability to add tasks to Project Tickets.
+            MY: |-
+              The ability to add tasks to Project Tickets(not Projects) is determined by the settings of the project role the member is assigned to on the specific project.
+            NONE: Retricts the ability to add tasks to Project Tickets.
+        edit:
+          levels:
+            ALL: Allows the ability to edit tasks on Project Tickets.
+            MY: |-
+              The ability to edit tasks on Project Tickets(not Projects) is determined by the settings of the project role the member is assigned to on the specific project.
+            NONE: Retricts the ability to edit tasks on Project Tickets.
+        delete:
+          levels:
+            ALL: Allows the ability to delete tasks on Project Tickets.
+            MY: |-
+              The ability to delete tasks from Project Tickets(not Projects) is determined by the settings of the project role the member is assigned to on the specific project.
+            NONE: Retricts the ability to delete tasks on Project Tickets.
+        inquire:
+          levels:
+            ALL: Allows the ability to review tasks on Project Tickets.
+            MY: |-
+              The ability to review tasks on Project Tickets(not Projects) is determined by the settings of the project role the member is assigned to on the specific project.
+            NONE: Retricts the ability to review tasks on Project Tickets.
+      Project Tickets:
+        add:
+          levels:
+            ALL: Allows the ability to create Project Tickets.
+            MY: |-
+              The ability to create project tickets is determined by the settings of the project role the member is assigned to on the specific project.
+            NONE: Retricts the ability to create Project Tickets.
+        edit:
+          levels:
+            ALL: Allows the ability to edit existing Project Tickets.
+            MY: |-
+              The ability to edit Project Tickets is determined by the settings of the project role the member is assigned to on the specific project.
+            NONE: Retricts the ability to edit existing Project Ticket information.
+        delete:
+          levels:
+            ALL: Allows the ability to delete existing Project Tickets.
+            MY: |-
+              The ability to delete existing Project Tickets is determined by the settings of the project role the member is assigned to on the specific project.
+            NONE: Retricts the ability to review existing delete existing Project Tickets.
+        inquire:
+          levels:
+            ALL: |-
+              Allows the ability to review existing Project Ticket information. Allows the ability to view Project Tickets and Issues on the My List screen.
+            MY: |-
+              The ability to review Project Tickets is determned by the settings of the project role the member is assigned to on the specific project. Allows the ability to view Project Tickets and Issues on the My List screen.
+            NONE: |-
+              Retricts the ability to review existing Project Ticket information. NOTE: Controls the ability to view the Project and Issues tabs on the My List screen
+  Sales:
+    actions:
+      Closed Opportunity:
+        add:
+          note: Not applicable. See Edit level.
+        edit:
+          levels:
+            ALL: Allows the ability to close and re-open opportunities.
+            NONE: Restricts the ability to close and re-open opportunities.
+        delete:
+          note: Not applicable. See Edit level.
+        inquire:
+          note: Not applicable. See Edit level.
+      Opportunity:
+        add:
+          levels:
+            ALL: Allows the ability to create Opportunities.
+            MY: Allows the ability to create Opportunities.
+            NONE: Retricts the ability to create Opportunities.
+        edit:
+          levels:
+            ALL: Allows the ability to edit existing Opportunities.
+            MY: |-
+              Allows the ability to edit only those Opportunities for which the member is part of the team or is the teammate of a member of the team that has the Allow Access checkbox checked.
+            NONE: Retricts the ability to edit existing Opportunities.
+        delete:
+          levels:
+            ALL: Allows the ability to delete existing Opportunities.
+            MY: |-
+              Allows the ability to edit only those Opportunities for which the member is part of the team or is the teammate of a member on the team that has the Allow Access checkbox checked.
+            NONE: Retricts the ability to delete existing Opportunities.
+        inquire:
+          levels:
+            ALL: Allows the ability to review existing Opportunities.
+            MY: |-
+              Allows the ability to edit only those Opportunities for which the member is part of the team or is the teammate of a member of the team that has the Allow Access checkbox checked.
+            NONE: Retricts the ability to review existing Opportunities.
+      Opportunity Finance:
+        add:
+          note: Not applicable. See Inquire level.
+        edit:
+          note: Not applicable. See Inquire level.
+        delete:
+          note: Not applicable. See Inquire level.
+        inquire:
+          levels:
+            ALL: Allows the ability to review the Finance Tab of Opportunities.
+            NONE: Retricts the ability to review the Finance Tab of Opportunities.
+      Reports:
+        add:
+          note: Not applicable. See Inquire level.
+        edit:
+          note: Not applicable. See Inquire level.
+        delete:
+          note: Not applicable. See Inquire level.
+        inquire:
+          levels:
+            ALL: |-
+              Allows the ability to review reports located in the Sales Category of the reports module. By default, when this option is selected, access to all marketing reports is allowed, but access can be customized using the Customize Option for this module.
+            NONE: |-
+              Retricts the ability to review reports located in the Sales Category of the reports module.
+      Sales Dashboard:
+        add:
+          note: Not applicable. See Inquire level.
+        edit:
+          note: Not applicable. See Inquire level.
+        delete:
+          note: Not applicable. See Inquire level.
+        inquire:
+          levels:
+            ALL: Allows the ability to review the Sales Overview screen.
+            NONE: Retricts the ability to review the Sales Overview screen.
+      Sales Funnel:
+        add:
+          note: Not applicable. See Inquire level.
+        edit:
+          note: Not applicable. See Inquire level.
+        delete:
+          note: Not applicable. See Inquire level.
+        inquire:
+          levels:
+            ALL: Allows the ability to review the Sales Funnel screen.
+            NONE: Retricts the ability to review the Sales Funnel screen.
+      Sales Order Finance:
+        add:
+          note: Not applicable. See Inquire level.
+        edit:
+          note: Not applicable. See Inquire level.
+        delete:
+          note: Not applicable. See Inquire level.
+        inquire:
+          levels:
+            ALL: Allows the ability to review the Finance Tab of Opportunities.
+            NONE: |-
+              Restricts the ability to review the Finance Tab of Opportunities. NOTE: The ability to edit the Finance tab of a Sales Order is based on the security persmissions for this role in the Sales Order field.
+      Sales Orders:
+        add:
+          levels:
+            ALL: Allows the ability to create Sales Orders.
+            NONE: Retricts the ability to create Sales Orders.
+        edit:
+          levels:
+            ALL: Allows the ability to edit existing Sales Orders.
+            NONE: Retricts the ability to edit existing Sales Orders.
+        delete:
+          levels:
+            ALL: Allows the ability to delete existing Sales Orders.
+            NONE: Retricts the ability to delete existing Sales Orders.
+        inquire:
+          levels:
+            ALL: Allows the ability to review existing Sales Orders.
+            NONE: Retricts the ability to review existing Sales Orders.
+  Service Desk:
+    actions:
+      Agile Board:
+        add:
+          note: Not applicable. See Inquire level.
+        edit:
+          note: Not applicable. See Inquire level.
+        delete:
+          note: Not applicable. See Inquire level.
+        inquire:
+          levels:
+            ALL: Allows the ability to view and use the Agile board.
+            NONE: Retricts the ability to view and use the Agile board.
+      ChatAssist:
+        add:
+          note: Not applicable. See Inquire level.
+        edit:
+          note: Not applicable. See Inquire level.
+        delete:
+          note: Not applicable. See Inquire level.
+        inquire:
+          levels:
+            ALL: Allows access to the ChatAssist Icon under the Service Desk Module.
+            NONE: Retricts access to the ChatAssist Icon under the Service Desk Module.
+      Close Service Tickets:
+        add:
+          levels:
+            ALL: |-
+              Allows users to set a new ticket to a closed status before saving it for the first time.
+            NONE: |-
+              Restricts the ability to set a new ticket to a closed status before saving it for the first time.
+        edit:
+          levels:
+            ALL: Allows the ability to close and re-open service tickets.
+            NONE: Restricts the ability to close and re-open service tickets.
+        delete:
+          note: Not Applicable. See Add, Edit, and Inquire levels.
+        inquire:
+          levels:
+            ALL: Allows the ability to view closed statuses in Service Ticket Status dropdown
+            NONE: Restricts the ability to view closed statuses in Service Ticket Status dropdown.
+      CloudConsole:
+        add:
+          note: Not applicable. See Inquire level.
+        edit:
+          note: Not applicable. See Inquire level.
+        delete:
+          note: Not applicable. See Inquire level.
+        inquire:
+          levels:
+            ALL: Allows access to the CloudConsole Icon under the Service Desk Module.
+            NONE: Retricts access to the CloudConsole Icon under the Service Desk Module.
+      ConnectWise Control:
+        add:
+          note: Not applicable. See Inquire level.
+        edit:
+          note: Not applicable. See Inquire level.
+        delete:
+          note: Not applicable. See Inquire level.
+        inquire:
+          levels:
+            ALL: |-
+              Enables the ScreenConnect Button on tickets allowing the ability to create a ScreenConnect session.
+            NONE: |-
+              Disables the ScreenConnect Button on tickets disallowing the ability to create a ScreenConnect session.
+      ConnectWise Manage Network:
+        add:
+          note: Not applicable. See Add and Inquire levels.
+        edit:
+          note: Not applicable. See Add and Inquire levels.
+        delete:
+          levels:
+            ALL: Allows the ability to remove holds from the ConnectWise Manage Network.
+            NONE: Restricts the ability to remove holds from the ConnectWise Manage Network.
+        inquire:
+          levels:
+            ALL: Allows access to the ConnectWise Manage Network.
+            NONE: Retricts access to the ConnectWise Manage Network.
+      Knowledge Base Approver:
+        add:
+          note: Not applicable. See Edit, Delete, and Inquire levels.
+        edit:
+          levels:
+            ALL: |-
+              Allows the ability to approve and reject Knowledge Base articles that are pending approval.
+            NONE: |-
+              Restricts the ability to approve and reject Knowledge Base articles that are pending approval.
+        delete:
+          levels:
+            ALL: |-
+              Allows the ability to delete Knowledge Base articles in any status created by any member.
+            NONE: Restricts the ability to delete any Knowledge Base articles.
+        inquire:
+          levels:
+            ALL: |-
+              Allows the ability to review Knowledge Base articles in any status. NONEL Restricts the ability to review any Knowledge Base articles.
+      Knowledge Base Creator:
+        add:
+          levels:
+            ALL: Allows the ability to add draft Knowledge Base articles and submit for approval.
+            MY: Allows the ability to add draft Knowledge Base articles and submit for approval.
+            NONE: |-
+              Restricts the ability to add draft Knowledge Base articles and submit for approval.
+        edit:
+          levels:
+            ALL: |-
+              Allows the ability to edit Knowledge Base articles in Draft, Rejected, and Revise status for any member.
+            MY: |-
+              Allows the ability to edit Knowledge Base articles in Draft, Rejected, and Revise status created by the logged in member.
+            NONE: Restricts the ability to edit Knowledge Base articles.
+        delete:
+          levels:
+            ALL: |-
+              Allows the ability to delete Knowledge Base articles in Draft, Rejected, and Revise status created by any member.
+            MY: |-
+              Allows the ability to delete Knowledge Base articles in Draft, Rejected, and Revise status created by the logged in member.
+            NONE: Restricts the ability to delete Knowledge Base articles.
+        inquire:
+          levels:
+            ALL: Allows the ability to review Knowledge Base articles created by any member.
+            MY: |-
+              Allows the ability for a member to review Knowledge Base articles created by the logged in member.
+            NONE: Restricts the ability to review any Knowledge Base articles.
+      Launch Remote Access:
+        add:
+          note: Not applicable. See Inquire level.
+        edit:
+          note: Not applicable. See Inquire level.
+        delete:
+          note: Not applicable. See Inquire level.
+        inquire:
+          levels:
+            ALL: Allows the ability to launch Automate or Control access from any ticket.
+            MY: |-
+              Allows the ability to launch Automate or Control access from any ticket the member is a resource on.
+            NONE: |-
+              Restricts the ability to launch Automate or Control access. Hides the Launch column in the Configuration pod.
+      Merge Tickets:
+        add:
+          levels:
+            ALL: Allows the ability to merge tickets.
+            NONE: Restricts the ability to merge tickets
+        edit:
+          levels:
+            ALL: Allows for Open merged tickets to be set to a Closed status.
+            NONE: Restricts the ability to merge tickets
+        delete:
+          note: Not applicable. See Add, Edit, and Inquire levels.
+        inquire:
+          levels:
+            ALL: Allows the ability to view the relationship of merged tickets.
+            NONE: Restricts the ability to view the relationship of merged tickets.
+      Print Service Signoff:
+        add:
+          note: Not applicable. See Inquire level.
+        edit:
+          note: Not applicable. See Inquire level.
+        delete:
+          note: Not applicable. See Inquire level.
+        inquire:
+          levels:
+            ALL: Allows the ability to print the Signoff form for any service ticket.
+            MY: |-
+              Allows the ability to print the Signoff form for tickets you are a resource on, tickets you have assigned another resource on, and tickets created by you.
+            NONE: Restricts the ability to print the Signoff form for all tickets.
+      Reports:
+        add:
+          note: Not applicable. See Inquire level.
+        edit:
+          note: Not applicable. See Inquire level.
+        delete:
+          note: Not applicable. See Inquire level.
+        inquire:
+          levels:
+            ALL: |-
+              Allows the ability to review reports located in the Service Desk Category of the reports module. By default, when this option is selected, access to all Service reports is allowed, but access can be customized using the Customize Option for this module.
+            NONE: |-
+              Retricts the ability to review reports located in the Service Desk Category of the reports module.
+      Resource Scheduling:
+        add:
+          levels:
+            ALL: Allows the ability to add resources on Service Tickets and Activities.
+            MY: |-
+              Allows the ability for a member to add themselves as a resource on a Service Ticket or Activity.
+            NONE: |-
+              Retricts the ability to add resources on Service Tickets and Activities. NOTE: This includes the My Calendar and Dispatch Portal Screens.
+        edit:
+          levels:
+            ALL: Allows the ability to edit resources on Service Tickets and Activities.
+            MY: |-
+              Allows the ability for a member to edit themselves as a resource on a Service Ticket or Activity.
+            NONE: |-
+              Retricts the ability to edit resources on Service Tickets and Activities. NOTE: This includes the My Calendar and Dispatch Portal Screens.
+        delete:
+          levels:
+            ALL: Allows the ability to delete resources on Service Tickets and Activities.
+            MY: |-
+              Allows the ability for a member to delete themselves as a resource on a Service Ticket or Activity.
+            NONE: |-
+              Retricts the ability to delete resources on Service Tickets and Activities. NOTE: This includes the My Calendar and Dispatch Portal Screens.
+        inquire:
+          levels:
+            ALL: Allows the ability to review resources on Service Tickets and Activities.
+            MY: |-
+              Allows the ability for a member to review only their resource records on a Service Ticket or Activity.
+            NONE: |-
+              Retricts the ability to review resources on Service Tickets and Activities. NOTE: This includes the My Calendar and Dispatch Portal Screens.
+      Service Dashboard:
+        add:
+          note: Not applicable. See Inquire level.
+        edit:
+          note: Not applicable. See Inquire level.
+        delete:
+          note: Not applicable. See Inquire level.
+        inquire:
+          levels:
+            ALL: Allows access to the Service Dashboard under the Service Desk Module.
+            NONE: Retricts access to the Service Dashboard under the Service Desk Module.
+      Service Ticket - Dependencies:
+        add:
+          levels:
+            ALL: Allows the ability to append predecessor tickets to a service ticket.
+            NONE: Disallows the ability to append predecessor tickets to a service ticket.
+        edit:
+          levels:
+            ALL: Allows the ability to edit the existing predecessor ticket on a service ticket.
+            NONE: |-
+              Disallows the ability to edit the existing predecessor ticket on a service ticket.
+        delete:
+          levels:
+            ALL: Allows the ability to remove an existing predecessor ticket on a service ticket.
+            NONE: |-
+              Disallows the ability to remove an existing predecessor ticket on a service ticket.
+        inquire:
+          levels:
+            ALL: Allows the ability to view existing predecessor ticket info on a service ticket.
+            NONE: |-
+              Disallows the ability to view existing predecessor ticket info on a service ticket.
+      Service Ticket - Finance:
+        add:
+          note: Not applicable. See Edit and Inquire levels.
+        edit:
+          levels:
+            ALL: Allows the ability to edit information on the Finance Tab of Service Tickets.
+            NONE: Retricts the ability to edit information on the Finance Tab of Service Tickets.
+        delete:
+          note: Not applicable. See Edit and Inquire levels.
+        inquire:
+          levels:
+            ALL: Allows access to the Finance Tab of Service Tickets.
+            NONE: Retricts access to the Finance Tab of Service Tickets.
+      Service Tickets:
+        add:
+          levels:
+            ALL: Allows the ability to create Service Tickets.
+            MY: Allows the ability to create Service Tickets.
+            NONE: Retricts the ability to create Service Tickets.
+        edit:
+          levels:
+            ALL: |-
+              Allows the ability to edit existing Service Tickets. Allows the ability to follow Service Tickets.
+            MY: |-
+              Allows the ability to edit only existing Service Tickets that belong to the member. A ticket belongs to me if I created it, assigned it to someone, or I am assigned to it. Allows the ability to follow Service Tickets I am a resource on.
+            NONE: Retricts the ability to edit existing Service Tickets.
+        delete:
+          levels:
+            ALL: Allows the ability to delete existing Service Tickets.
+            MY: |-
+              Allows the ability to delete only existing Service Tickets that belong to the member. A ticket belongs to me if I created it, assigned it to someone, or I am assigned to it.
+            NONE: Retricts the ability to delete existing Service Tickets.
+        inquire:
+          levels:
+            ALL: Allows the ability to review existing Service Tickets.
+            MY: |-
+              Allows the ability to review only existing Service Tickets that belong to the member. A ticket belongs to me if I created it, assigned it to someone, or I am assigned to it.
+            NONE: Retricts the ability to review existing Service Tickets.
+      SLA Dashboard:
+        add:
+          note: Not applicable. See Edit and Inquire levels.
+        edit:
+          levels:
+            ALL: |-
+              Allows the ability to access the On Call and Duty Mgr pickers on the SLA Dashboard and Service Board.
+            MY: |-
+              Restricts the ability to access the On Call and Duty Mgr pickers on the SLA Dashboard and Service Board.
+            NONE: |-
+              Restricts the ability to access the On Call and Duty Mgr pickers on the SLA Dashboard and Service Board.
+        delete:
+          note: Not applicable. See Edit and Inquire levels.
+        inquire:
+          levels:
+            ALL: |-
+              Allows the ability to select any member from the member filter on the SLA Dashboard. Also allows the ability to access the On Call and Duty Mgr pickers on the Service Board and SLA Dashboard
+            MY: |-
+              Restricts the ability to select other members from the member filter on the SLA Dashboard.
+            NONE: Restricts access to the SLA Dashboard.
+      Ticket Templates:
+        add:
+          levels:
+            ALL: |-
+              Allows the ability to create Ticket Templates at the Company Level. This includes the Ticket Templates tab of a company or agreement.
+            MY: Same as ALL
+            NONE: |-
+              Restricts the ability to create Ticket Templates at the Company Level. This includes the Ticket Templates Tab of a company or agreement. Note: This does not control the application of Ticket Templates to existing tickets using the protractor icon.
+        edit:
+          levels:
+            ALL: |-
+              Allows the ability to edit Ticket Templates at the Company Level. This includes the Ticket Templates tab of a company or agreement.
+            MY: |-
+              Allows the ability to edit Ticket Templates only where the member has access to the service board, location and group associated with the template. This includes the Ticket Templates tab of a company or agreement.
+            NONE: |-
+              Restricts the ability to edit Ticket Templates at the Company Level. This includes the Ticket Templates tab of a company or agreement. Note: This does not control the application of Ticket Templates to existing tickets using the protractor icon.
+        delete:
+          levels:
+            ALL: |-
+              Allows the ability to delete Ticket Templates at the Company Level. This includes the Ticket Templates tab of a company or agreement.
+            MY: |-
+              Allows the ability to delete Ticket Templates only where the member has access to the service board, location and group associated with the template. This includes the Ticket Templates tab of a company or agreement.
+            NONE: |-
+              Restricts the ability to delete Ticket Templates at the Company Level. This includes the Ticket Templates tab of a company or agreement. Note: This does not control the application of Ticket Templates to existing tickets using the protractor icon.
+        inquire:
+          levels:
+            ALL: |-
+              Allows the ability to review Ticket Templates at the Company Level. This includes the Ticket Templates tab of a company or agreement.
+            MY: |-
+              Allows the ability to review Ticket Templates only where the member has access to the service board, location and group associated with the template. This includes the Ticket Templates tab of a company or agreement.
+            NONE: |-
+              Restricts the ability to review Ticket Templates at the Company Level. This includes the Ticket Templates tab of a company or agreement. Note: This does not control the application of Ticket Templates to existing tickets using the protractor icon.
+  System:
+    actions:
+      API Reports:
+        add:
+          note: Not applicable. See Inquire level.
+        edit:
+          note: Not applicable. See Inquire level.
+        delete:
+          note: Not applicable. See Inquire level.
+        inquire:
+          levels:
+            ALL: Allows the user to access the API Reporting Views when using an API Member.
+            NONE: |-
+              Restricts the ability to review the API Reporting Views when using an API Member.
+      Chat with ConnectWise Manage Support:
+        add:
+          note: Not applicable. See Inquire level.
+        edit:
+          note: Not applicable. See Inquire level.
+        delete:
+          note: Not applicable. See Inquire level.
+        inquire:
+          levels:
+            ALL: Allows access to the Chat with Support button in the top navigation menu.
+            NONE: Restricts access to the Chat with Support button in the top navigation menu.
+      ConnectWise Manage Labs:
+        add:
+          note: Not applicable. See Edit level.
+        edit:
+          levels:
+            ALL: Allows the ability to turn labs on and off
+            NONE: Restricts the ablility to turn labs on and off
+        delete:
+          note: Not applicable. See Edit level.
+        inquire:
+          note: Not applicable. See Edit level.
+      Custom Menu Entry:
+        add:
+          note: Not applicable. See Inquire level.
+        edit:
+          note: Not applicable. See Inquire level.
+        delete:
+          note: Not applicable. See Inquire level.
+        inquire:
+          levels:
+            ALL: |-
+              Allows the ability to review custom menu entries in the modules they are assigned to. By default, when this option is selected, access to all Custom Menu Entries is allowed, but access can be customized using the Customize Option for this module.
+            NONE: Restricts the ability to review existing Custom Menu Entries.
+      Email Audit:
+        add:
+          note: Not applicable. See Inquire level.
+        edit:
+          note: Not applicable. See Inquire level.
+        delete:
+          note: Not applicable. See Inquire level.
+        inquire:
+          levels:
+            ALL: |-
+              Allows access to the Email Audit icon under the Service Desk module and the Email Audit tab on the Company screen
+            NONE: |-
+              Restricts access to the Email Audit icon under the Service Desk module and the Email Audit tab on the Company screen.
+      List View Export:
+        add:
+          note: Not applicable. See Inquire level.
+        edit:
+          note: Not applicable. See Inquire level.
+        delete:
+          note: Not applicable. See Inquire level.
+        inquire:
+          levels:
+            ALL: Allows the ability to export list view items to an Excel Spreadsheet.
+            NONE: Restricts the ability to export list view items to an Excel Spreadsheet.
+      Marketplace Sharing:
+        add:
+          levels:
+            ALL: Allows the ability to upload items to the ConnectWise Marketplace.
+            NONE: Restricts the ability to upload items to the ConnectWise Marketplace.
+        edit:
+          note: Not applicable. See Add and Inquire levels.
+        delete:
+          note: Not applicable. See Add and Inquire levels.
+        inquire:
+          levels:
+            ALL: Allows the ability to import items from the ConnectWise Marketplace.
+            NONE: Restricts the ability to import items from the ConnectWise Marketplace.
+      Mass Maintenance:
+        add:
+          levels:
+            ALL: |-
+              Allows the ability to add new items via the Mass Maintenance screens. Access to each screen can be customized using the Customize Option for this module.
+            NONE: Restricts the ability to add new items via the Mass Maintenance screens.
+        edit:
+          levels:
+            ALL: |-
+              Allows the ability to edit existing items via the Mass Maintenance screens. Access to each screen can be customized using the Customize Option for this module.
+            NONE: Restricts the ability to edit existing items via the Mass Maintenance screens.
+        delete:
+          levels:
+            ALL: |-
+              Allows the ability to delete existing items via the Mass Maintenance screens. Access to each screen can be customized using the Customize Option for this module.
+            NONE: Restricts the ability to delete existing items via the Mass Maintenance screens.
+        inquire:
+          levels:
+            ALL: |-
+              Allows the ability to review existing items via the Mass Maintenance screens. Access to each screen can be customized using the Customize Option for this module.
+            NONE: Restricts the ability to review existing items via the Mass Maintenance screens.
+      Member Maintenance:
+        add:
+          levels:
+            ALL: Allows the ability to create new member profiles.
+            NONE: Restricts the ability to create new member profiles.
+        edit:
+          levels:
+            ALL: Allows the ability to edit existing member profiles.
+            NONE: Restricts the ability to edit existing member profiles.
+        delete:
+          levels:
+            ALL: Allows the ability to delete existing member profiles.
+            NONE: Restricts the ability to deleteexisting member profiles.
+        inquire:
+          levels:
+            ALL: Allows the ability to review existing member profiles.
+            NONE: Restricts the ability to review existing member profiles.
+      My Account:
+        add:
+          note: Not applicable. See Edit and Inquire levels.
+        edit:
+          levels:
+            ALL: |-
+              Allows the ability to edit the information on the MY Account Screen for all members.
+            MY: |-
+              Allows the ability to edit the information on the MY Account Screen for only the member logged in.
+            NONE: Retricts the ability to edit the information on the MY Account Screen
+        delete:
+          note: Not applicable. See Edit and Inquire levels.
+        inquire:
+          levels:
+            ALL: |-
+              Allows the ability to review the information on the MY Account Screen for all members.
+            MY: |-
+              Allows the ability to review the information on the MY Account Screen for only the member logged in.
+            NONE: Retricts the ability to review the information on the MY Account Screen
+      My Company:
+        add:
+          levels:
+            ALL: |-
+              Allows the ability to add new structure and group levels to the My Company Screen.
+            NONE: |-
+              Restricts the ability to add new structure and group levels to the My Company Screen.
+        edit:
+          levels:
+            ALL: Allows the ability to edit the information on the My Company Screen.
+            NONE: Restricts the ability to edit the information on the My Company Screen.
+        delete:
+          levels:
+            ALL: |-
+              Allows the ability to delete structure and group levels from the My Company Screen.
+            NONE: |-
+              Restricts the ability to delete structure and group levels from the My Company Screen
+        inquire:
+          levels:
+            ALL: Allows the ability to review the information on the My Company Screen.
+            NONE: Restricts the ability to review the information on the My Company Screen.
+      Report Writer:
+        add:
+          levels:
+            ALL: Allows access to the report writer designer
+            NONE: Restricts access to the report writer designer
+        edit:
+          note: Not applicable. See Add and Inquire levels.
+        delete:
+          note: Not applicable. See Add and Inquire levels.
+        inquire:
+          levels:
+            ALL: Allows access to view report writer reports and dashboards.
+            NONE: Restricts access to view report writer reports and dashboards.
+      Security Roles:
+        add:
+          levels:
+            ALL: Allows the ability to create new security roles.
+            NONE: Restricts the ability to create new security roles.
+        edit:
+          levels:
+            ALL: Allows the ability to edit the settings for existing security roles.
+            NONE: Restricts the ability to edit the settings for existing security roles.
+        delete:
+          levels:
+            ALL: Allows the ability to delete existing security roles.
+            NONE: Restricts the ability to delete existing security roles.
+        inquire:
+          levels:
+            ALL: Allows the ability to review the settings for existing security roles.
+            NONE: Restricts the ability to review the settings for existing security roles.
+      System Reports:
+        add:
+          note: Not applicable. See Inquire level.
+        edit:
+          note: Not applicable. See Inquire level.
+        delete:
+          note: Not applicable. See Inquire level.
+        inquire:
+          levels:
+            ALL: |-
+              Allows the ability to review reports located in the System Category of the reports module. By default, when this option is selected, access to all System reports is allowed, but access can be customized using the Customize Option for this module.
+            NONE: |-
+              Retricts the ability to review reports located in the System Category of the reports module.
+      Table Setup:
+        add:
+          levels:
+            ALL: |-
+              Allows the ability to create new items within each of the Setup Tables. By default, when this option is selected, access to all Setup Tables is allowed, but access can be customized using the Customize Option for this module.
+            NONE: Restricts the ability to create new items within each of the Setup Tables.
+        edit:
+          levels:
+            ALL: |-
+              Allows the ability to edit existing items within each of the Setup Tables.  By default, when this option is selected, access to all Setup Tables is allowed, but access can be customized using the Customize Option for this module.
+            NONE: Restricts the ability to edit existing items within each of the Setup Tables.
+        delete:
+          levels:
+            ALL: |-
+              Allows the ability to delete existing items within each of the Setup Tables.  By default, when this option is selected, access to all Setup Tables is allowed, but access can be customized using the Customize Option for this module.
+            NONE: Restricts the ability to delete existing items within each of the Setup Tables.
+        inquire:
+          levels:
+            ALL: |-
+              Allows the ability to review existing items within each of the Setup Tables.  By default, when this option is selected, access to all Setup Tables is allowed, but access can be customized using the Customize Option for this module.
+            NONE: Restricts the ability to review existing items within each of the Setup Tables.
+      Today Links:
+        add:
+          note: Not applicable. See Inquire level.
+        edit:
+          note: Not applicable. See Inquire level.
+        delete:
+          note: Not applicable. See Inquire level.
+        inquire:
+          levels:
+            ALL: Allows the ability to view and browse to the links setup on the Today screen.
+            NONE: Restricts the ability to view and browse to the links setup on the Today screen.
+  Time and Expense:
+    actions:
+      Expense Approvals:
+        add:
+          note: Not applicable. See Edit and Inquire levels.
+        edit:
+          levels:
+            ALL: |-
+              Allows the ability to approve expense reports and reverse expense report approvals.
+            NONE: |-
+              Restricts the ability to approve expense reports and reverse expense report approvals.
+        delete:
+          note: Not applicable. See Edit and Inquire levels.
+        inquire:
+          levels:
+            ALL: Allows the ability to view expense reports submitted for approval.
+            NONE: Restricts the ability to view expense reports submitted for approval.
+      Expense Report Entry:
+        add:
+          levels:
+            ALL: |-
+              Allows the ability to add expense records within the system. This includes expense records for other members while on their Expense Report.
+            MY: Allows the ability to add expenses only for the member logged in.
+            NONE: Retricts the ability to add expense records within the system.
+        edit:
+          levels:
+            ALL: Allows the ability to edit all existing expense records within the system.
+            MY: |-
+              Allows the ability to edit only the expenses that particular member has entered within the system.
+            NONE: Retricts the ability to edit existing expenses within the system.
+        delete:
+          levels:
+            ALL: |-
+              Allows the ability to delete all existing expense records within the system. This includes expense records for other members.
+            MY: |-
+              Allows the ability to delete only the expenses that particular member has entered within the system.
+            NONE: Retricts the ability to delete existing expenses within the system.
+        inquire:
+          levels:
+            ALL: Allows the ability to review all existing expense records within the system.
+            MY: |-
+              Allows the ability to review only the expenses that particular member has entered within the system.
+            NONE: Retricts the ability to review existing expenses within the system.
+      Reports:
+        add:
+          note: Not applicable. See Inquire level.
+        edit:
+          note: Not applicable. See Inquire level.
+        delete:
+          note: Not applicable. See Inquire level.
+        inquire:
+          levels:
+            ALL: |-
+              Allows the ability to review reports located in the Time Entry Category of the reports module. By default, when this option is selected, access to all Time Entry reports is allowed, but access can be customized using the Customize Option for this module.
+            NONE: |-
+              Retricts the ability to review reports located in the Time Entry Category of the reports module.
+      Stopwatch:
+        add:
+          levels:
+            ALL: |-
+              Allows the ability to use the Stopwatch on both the All Tickets tab and in the Ticket screen.
+            NONE: Restricts the ability to use the Stopwatch on the All Tickets tab.
+        edit:
+          note: Not applicable. See Add and Inquire levels.
+        delete:
+          note: Not applicable. See Add and Inquire levels.
+        inquire:
+          levels:
+            ALL: |-
+              Allows the ability to view the Stopwatch on the All Tickets tab, and grants the ability to use the Stopwatch in the Ticket screen.
+            NONE: |-
+              Restricts the ability to view the Stopwatch in the Ticket screen or in the All Tickets tab.
+      Time Approval:
+        add:
+          note: Not applicable. See Edit and Inquire levels.
+        edit:
+          levels:
+            ALL: Allows the ability to approve/reject Time Sheet Approvals for all members.
+            MY: |-
+              Allows the ability to approve/reject Time Sheet Approvals for only the users the member logged in is the approver for.
+            NONE: Retricts the ability to approve/reject Time Sheet Approvals.
+        delete:
+          note: Not applicable. See Edit and Inquire levels.
+        inquire:
+          levels:
+            ALL: Allows the ability to review Time Sheet Approvals for all members.
+            MY: |-
+              Allows the ability to review Time Sheet Approvals for only the users the member logged in is the approver for.
+            NONE: Retricts the ability to review Time Sheet Approvals.
+      Time Entry:
+        add:
+          levels:
+            ALL: Allows the ability to create time entries for all members.
+            MY: Allows the ability tocreate time entries for only the member logged in.
+            NONE: Retricts the ability to create time entries.
+        edit:
+          levels:
+            ALL: Allows the ability to edit existing time entries for all members.
+            MY: Allows the ability to edit existing time entries for only the member logged in.
+            NONE: Retricts the ability to edit existing time entries.
+        delete:
+          levels:
+            ALL: Allows the ability to delete existing time entries for all members.
+            MY: |-
+              Allows the ability to delete existing time entries for only the member logged in.
+            NONE: Retricts the ability to delete existing time entries.
+        inquire:
+          levels:
+            ALL: Allows the ability to review existing time entries for all members.
+            MY: |-
+              Allows the ability to view existing time entries for only the member logged in. This includes the time tab and audit trail. Time entry notes will still appear in the notes pod and in the audit trail for all members.
+            NONE: Retricts the ability to review existing time entries.
diff --git a/docs/connectwise/CW_Security_Roles/generate_role_docs.py b/docs/connectwise/CW_Security_Roles/generate_role_docs.py
new file mode 100644
index 00000000..de3d8e44
--- /dev/null
+++ b/docs/connectwise/CW_Security_Roles/generate_role_docs.py
@@ -0,0 +1,361 @@
+"""
+Generate ConnectWise security-role documentation from the source XLSX.
+
+Produces:
+  - api-member-security-roles.yaml : machine-readable source of truth
+  - api-member-security-roles.md   : human-readable reference
+
+Re-run this script after editing the source XLSX. Both outputs are
+deterministic — they will produce identical content from identical input,
+so diffs in version control reflect only real permission-model changes.
+
+Usage:
+    python generate_role_docs.py \
+        --source source/Security_Roles_Matrix_11132017.xlsx \
+        --out-yaml ../api-member-security-roles.yaml \
+        --out-md   ../api-member-security-roles.md
+"""
+from __future__ import annotations
+
+import argparse
+import re
+from dataclasses import dataclass, field
+from datetime import date
+from pathlib import Path
+from typing import Dict, List, Optional
+
+import yaml
+from openpyxl import load_workbook
+
+# ---------------------------------------------------------------------------
+# Parsing
+# ---------------------------------------------------------------------------
+
+# A level description line looks like "ALL: text..." or "NONE: text..."
+# We capture the prefix (ALL | NONE | MINE | MY) and the trailing description.
+LEVEL_LINE = re.compile(r"^(ALL|NONE|MINE|MY)\s*:\s*(.*)$", re.DOTALL)
+
+# Recognized ConnectWise permission levels, most-to-least privileged.
+LEVEL_ORDER = ["ALL", "MY", "MINE", "NONE"]
+
+VERBS = ["add", "edit", "delete", "inquire"]
+VERB_COLS = {"add": 3, "edit": 4, "delete": 5, "inquire": 6}
+
+
+@dataclass
+class CellPermission:
+    """Parsed contents of a single (action, verb) cell."""
+
+    levels: Dict[str, str] = field(default_factory=dict)  # level -> description
+    note: Optional[str] = None  # for "Not applicable. See Inquire level." etc.
+    raw: str = ""  # original cell text, preserved for audit
+
+
+@dataclass
+class ActionRow:
+    module: str
+    action: str
+    permissions: Dict[str, CellPermission]  # verb -> CellPermission
+
+
+def parse_cell(raw: Optional[str]) -> CellPermission:
+    """Parse a single cell's multi-line content into levels + note."""
+    if raw is None:
+        return CellPermission(raw="")
+    text = str(raw).strip()
+    cp = CellPermission(raw=text)
+    if not text:
+        return cp
+
+    # Split into candidate entries. Each entry is typically one line that
+    # starts with a level prefix, but description text can itself contain
+    # newlines. We therefore split on newlines and accumulate continuation
+    # lines into the preceding entry.
+    current_level: Optional[str] = None
+    current_buf: List[str] = []
+    note_buf: List[str] = []
+
+    def flush_level() -> None:
+        nonlocal current_level, current_buf
+        if current_level is not None:
+            cp.levels[current_level] = " ".join(current_buf).strip()
+        current_level = None
+        current_buf = []
+
+    for line in text.splitlines():
+        line = line.strip()
+        if not line:
+            continue
+        m = LEVEL_LINE.match(line)
+        if m:
+            flush_level()
+            current_level = m.group(1).upper()
+            current_buf = [m.group(2).strip()]
+        elif current_level is not None:
+            current_buf.append(line)
+        else:
+            # No level prefix yet — belongs to the note.
+            note_buf.append(line)
+    flush_level()
+
+    if note_buf:
+        cp.note = " ".join(note_buf).strip()
+
+    return cp
+
+
+def read_matrix(xlsx_path: Path) -> List[ActionRow]:
+    wb = load_workbook(xlsx_path, data_only=True)
+    ws = wb.active  # Single sheet in this workbook.
+
+    # Header row is row 2 per the source file; data begins row 3.
+    actions: List[ActionRow] = []
+    for r in range(3, ws.max_row + 1):
+        module = ws.cell(row=r, column=1).value
+        action = ws.cell(row=r, column=2).value
+        if not (module or action):
+            continue  # skip fully empty rows
+        if not module or not action:
+            # Partial row — keep but flag. This shouldn't happen in the
+            # current source; if it does, the generator should fail loudly
+            # rather than silently produce wrong output.
+            raise ValueError(
+                f"Row {r} has a missing Module or Action: "
+                f"module={module!r}, action={action!r}"
+            )
+
+        perms: Dict[str, CellPermission] = {}
+        for verb, col in VERB_COLS.items():
+            perms[verb] = parse_cell(ws.cell(row=r, column=col).value)
+
+        actions.append(
+            ActionRow(module=module.strip(), action=action.strip(), permissions=perms)
+        )
+    return actions
+
+
+# ---------------------------------------------------------------------------
+# Output: YAML
+# ---------------------------------------------------------------------------
+
+def build_yaml_document(actions: List[ActionRow], source_file: str) -> dict:
+    """Build a plain-dict representation that YAML dumps cleanly."""
+    # Group by module, preserving action order within each module.
+    modules: Dict[str, List[ActionRow]] = {}
+    for a in actions:
+        modules.setdefault(a.module, []).append(a)
+
+    doc = {
+        "metadata": {
+            "source_file": source_file,
+            "generated_on": date.today().isoformat(),
+            "generator": "docs/integrations/connectwise/source/generate_role_docs.py",
+            "description": (
+                "ConnectWise security-role matrix. Each (module, action) entry "
+                "describes what each access level (ALL, MY, MINE, NONE) means "
+                "for the Add, Edit, Delete, and Inquire verbs. This is a "
+                "reference catalog, not a per-role assignment — role "
+                "assignments live in ConnectWise and are mirrored in the "
+                "ResolutionFlow integration config."
+            ),
+            "level_order_most_to_least_privileged": LEVEL_ORDER,
+        },
+        "modules": {},
+    }
+
+    for module_name, rows in modules.items():
+        module_block = {"actions": {}}
+        for a in rows:
+            action_block: Dict[str, object] = {}
+            for verb in VERBS:
+                cell = a.permissions[verb]
+                entry: Dict[str, object] = {}
+                if cell.levels:
+                    # Emit levels in canonical order, only those present.
+                    entry["levels"] = {
+                        lvl: cell.levels[lvl]
+                        for lvl in LEVEL_ORDER
+                        if lvl in cell.levels
+                    }
+                if cell.note:
+                    entry["note"] = cell.note
+                if not entry:
+                    # Truly empty cell — represent explicitly so downstream
+                    # consumers can distinguish "empty" from "missing".
+                    entry["note"] = "(no description provided)"
+                action_block[verb] = entry
+            module_block["actions"][a.action] = action_block
+        doc["modules"][module_name] = module_block
+
+    return doc
+
+
+class _LiteralStr(str):
+    """Marker type so PyYAML renders long strings as block literals."""
+
+
+def _literal_presenter(dumper, data):
+    return dumper.represent_scalar("tag:yaml.org,2002:str", data, style="|")
+
+
+yaml.add_representer(_LiteralStr, _literal_presenter)
+
+
+def _use_block_style_for_long_strings(obj):
+    """Recursively wrap long strings so the YAML is readable, not one-line."""
+    if isinstance(obj, dict):
+        return {k: _use_block_style_for_long_strings(v) for k, v in obj.items()}
+    if isinstance(obj, list):
+        return [_use_block_style_for_long_strings(v) for v in obj]
+    if isinstance(obj, str) and (len(obj) > 80 or "\n" in obj):
+        return _LiteralStr(obj)
+    return obj
+
+
+def dump_yaml(doc: dict, out_path: Path) -> None:
+    prepared = _use_block_style_for_long_strings(doc)
+    out_path.parent.mkdir(parents=True, exist_ok=True)
+    with out_path.open("w", encoding="utf-8") as f:
+        f.write("# ConnectWise API Member Security Roles — reference matrix.\n")
+        f.write("# Generated from the source XLSX; do not edit by hand.\n")
+        f.write("# Re-run generate_role_docs.py after updating the XLSX.\n\n")
+        yaml.dump(
+            prepared,
+            f,
+            sort_keys=False,
+            allow_unicode=True,
+            width=100,
+            default_flow_style=False,
+        )
+
+
+# ---------------------------------------------------------------------------
+# Output: Markdown
+# ---------------------------------------------------------------------------
+
+def _md_escape(text: str) -> str:
+    """Escape pipes and collapse whitespace for Markdown table cells."""
+    return text.replace("|", "\\|").replace("\n", " ").strip()
+
+
+def build_markdown(actions: List[ActionRow], source_file: str) -> str:
+    modules: Dict[str, List[ActionRow]] = {}
+    for a in actions:
+        modules.setdefault(a.module, []).append(a)
+
+    lines: List[str] = []
+    lines.append("# ConnectWise API Member — Security Roles Reference")
+    lines.append("")
+    lines.append(
+        f"_Generated {date.today().isoformat()} from "
+        f"`{source_file}`. Do not edit by hand — update the XLSX and "
+        f"re-run `generate_role_docs.py`._"
+    )
+    lines.append("")
+    lines.append("## How to read this document")
+    lines.append("")
+    lines.append(
+        "Each ConnectWise module lists the actions it governs. For every "
+        "action, four permission verbs — **Add**, **Edit**, **Delete**, "
+        "**Inquire** — can be granted at one of these levels, most to "
+        "least privileged:"
+    )
+    lines.append("")
+    lines.append("| Level | Meaning |")
+    lines.append("|-------|---------|")
+    lines.append("| `ALL` | Access to all records in the system. |")
+    lines.append("| `MY` | Access to records owned by the user's team. |")
+    lines.append("| `MINE` | Access only to records owned by the user. |")
+    lines.append("| `NONE` | No access. |")
+    lines.append("")
+    lines.append(
+        "Not every level applies to every action — the source matrix "
+        "only documents the levels that are meaningful for each cell. "
+        "Cells marked _Not applicable_ reference another verb (usually "
+        "Inquire) where the meaningful level is defined."
+    )
+    lines.append("")
+    lines.append(
+        "The machine-readable form of this document is "
+        "[`api-member-security-roles.yaml`](./api-member-security-roles.yaml). "
+        "Use the YAML when writing integration code; use this Markdown "
+        "when reviewing, discussing, or onboarding."
+    )
+    lines.append("")
+    lines.append("## Table of contents")
+    lines.append("")
+    for module_name in modules:
+        anchor = module_name.lower().replace(" ", "-").replace("/", "")
+        lines.append(f"- [{module_name}](#{anchor}) — {len(modules[module_name])} actions")
+    lines.append("")
+
+    for module_name, rows in modules.items():
+        lines.append(f"## {module_name}")
+        lines.append("")
+        for a in rows:
+            lines.append(f"### {a.action}")
+            lines.append("")
+            lines.append("| Verb | Level | Description |")
+            lines.append("|------|-------|-------------|")
+            wrote_any = False
+            for verb in VERBS:
+                cell = a.permissions[verb]
+                if cell.levels:
+                    for lvl in LEVEL_ORDER:
+                        if lvl in cell.levels:
+                            lines.append(
+                                f"| {verb.capitalize()} | `{lvl}` | "
+                                f"{_md_escape(cell.levels[lvl])} |"
+                            )
+                            wrote_any = True
+                elif cell.note:
+                    lines.append(
+                        f"| {verb.capitalize()} | — | "
+                        f"_{_md_escape(cell.note)}_ |"
+                    )
+                    wrote_any = True
+            if not wrote_any:
+                lines.append("| — | — | _(no description provided)_ |")
+            lines.append("")
+
+    return "\n".join(lines) + "\n"
+
+
+def write_markdown(md_text: str, out_path: Path) -> None:
+    out_path.parent.mkdir(parents=True, exist_ok=True)
+    out_path.write_text(md_text, encoding="utf-8")
+
+
+# ---------------------------------------------------------------------------
+# Entry point
+# ---------------------------------------------------------------------------
+
+def main() -> None:
+    parser = argparse.ArgumentParser(description=__doc__)
+    parser.add_argument("--source", type=Path, required=True,
+                        help="Path to the source .xlsx")
+    parser.add_argument("--out-yaml", type=Path, required=True,
+                        help="Path to write the YAML output")
+    parser.add_argument("--out-md", type=Path, required=True,
+                        help="Path to write the Markdown output")
+    args = parser.parse_args()
+
+    actions = read_matrix(args.source)
+    doc = build_yaml_document(actions, source_file=args.source.name)
+    dump_yaml(doc, args.out_yaml)
+
+    md = build_markdown(actions, source_file=args.source.name)
+    write_markdown(md, args.out_md)
+
+    # Quick data-quality summary to stdout — helpful when re-running after edits.
+    from collections import Counter
+    modules_seen = Counter(a.module for a in actions)
+    print(f"Parsed {len(actions)} actions across {len(modules_seen)} modules:")
+    for m, n in modules_seen.most_common():
+        print(f"  {m}: {n}")
+    print(f"\nWrote {args.out_yaml}")
+    print(f"Wrote {args.out_md}")
+
+
+if __name__ == "__main__":
+    main()
diff --git a/docs/connectwise/CW_Security_Roles/requirements.txt b/docs/connectwise/CW_Security_Roles/requirements.txt
new file mode 100644
index 00000000..fd83a4c7
--- /dev/null
+++ b/docs/connectwise/CW_Security_Roles/requirements.txt
@@ -0,0 +1,5 @@
+# Dependencies for generate_role_docs.py.
+# These are only needed when regenerating the role docs from the XLSX —
+# they are not runtime dependencies of ResolutionFlow itself.
+openpyxl>=3.1,<4.0
+PyYAML>=6.0,<7.0
diff --git a/docs/superpowers/plans/2026-04-16-psa-ticket-management.md b/docs/superpowers/plans/2026-04-16-psa-ticket-management.md
new file mode 100644
index 00000000..cefa932d
--- /dev/null
+++ b/docs/superpowers/plans/2026-04-16-psa-ticket-management.md
@@ -0,0 +1,3075 @@
+# PSA Ticket Management Implementation Plan
+
+> **For agentic workers:** REQUIRED SUB-SKILL: Use superpowers:subagent-driven-development (recommended) or superpowers:executing-plans to implement this plan task-by-task. Steps use checkbox (`- [ ]`) syntax for tracking.
+
+**Goal:** Add PSA ticket management to ResolutionFlow — a dedicated Tickets page, an updated TicketQueue dashboard widget, and spin-off ticket creation from ResolutionAssist sessions.
+
+**Architecture:** Dedicated `ticket_service.py` wraps PSA provider mutations; new normalized DTOs in `psa_tickets.py`; `search_tickets` updated to return paginated results via parallel CW count fetch. Frontend uses URL params for filter/pagination state, `TicketDetailPanel` hydrates via existing `getTicketContext` + new `listResources` endpoint.
+
+**Tech Stack:** FastAPI, SQLAlchemy async, Pydantic v2, Anthropic SDK (AI parse), React 19, TypeScript, Tailwind v4, React Router v7 `useSearchParams`, Lucide icons.
+
+---
+
+## Phase 1 — Backend: Provider Foundations
+
+### Task 1: Add PaginatedTicketResult type + update provider base
+
+**Files:**
+- Modify: `backend/app/services/psa/types.py`
+- Modify: `backend/app/services/psa/base.py`
+
+- [ ] **Step 1: Add PaginatedTicketResult to types.py**
+
+```python
+# backend/app/services/psa/types.py — add after PSABoard class
+
+from dataclasses import dataclass
+
+@dataclass
+class PaginatedTicketResult:
+    items: list["PSATicket"]
+    total: int
+    page: int
+    page_size: int
+```
+
+- [ ] **Step 2: Update search_tickets signature in base.py**
+
+```python
+# backend/app/services/psa/base.py
+from .types import (
+    ConnectionTestResult,
+    PSATicket,
+    PaginatedTicketResult,  # add
+    PSANote,
+    PSAStatus,
+    PSACompany,
+    PSAMember,
+    PSAConfiguration,
+    PSATimeEntry,
+    PSABoard,
+)
+
+# Change the search_tickets abstract method:
+@abstractmethod
+async def search_tickets(self, query: str, **filters) -> PaginatedTicketResult:
+    ...
+```
+
+- [ ] **Step 3: Commit**
+
+```bash
+git add backend/app/services/psa/types.py backend/app/services/psa/base.py
+git commit -m "feat(psa): add PaginatedTicketResult type, update provider search_tickets signature"
+```
+
+---
+
+### Task 2: Add new abstract provider methods
+
+**Files:**
+- Modify: `backend/app/services/psa/types.py`
+- Modify: `backend/app/services/psa/base.py`
+
+- [ ] **Step 1: Add PSAResource + PSACreatedTicket types to types.py**
+
+```python
+# backend/app/services/psa/types.py — add after PaginatedTicketResult
+
+class PSAResource(BaseModel):
+    member_id: int
+    member_name: str
+    member_identifier: str
+    is_rf_user: bool = False
+
+class PSACreatedTicket(BaseModel):
+    id: int
+    summary: str
+    board_name: str
+    status_name: str
+    priority_name: str
+    company_name: str
+    resources: list[PSAResource] = []
+
+class TicketCreatePayload(BaseModel):
+    summary: str
+    company_id: int
+    board_id: int
+    status_id: int
+    priority_id: int
+    description: str | None = None
+    assigned_member_id: int | None = None
+```
+
+- [ ] **Step 2: Add 4 abstract methods to base.py**
+
+```python
+# backend/app/services/psa/base.py — add these after get_ticket_configurations
+
+@abstractmethod
+async def list_resources(self, ticket_id: int) -> list[PSAResource]:
+    ...
+
+@abstractmethod
+async def add_resource(self, ticket_id: int, member_id: int) -> PSAResource:
+    ...
+
+@abstractmethod
+async def remove_resource(self, ticket_id: int, member_id: int) -> None:
+    ...
+
+@abstractmethod
+async def create_ticket(self, payload: TicketCreatePayload) -> PSACreatedTicket:
+    ...
+```
+
+Also add `list_priorities` for the full-form dropdown:
+
+```python
+@abstractmethod
+async def list_priorities(self) -> list[dict]:
+    ...
+```
+
+- [ ] **Step 3: Update base.py imports**
+
+```python
+from .types import (
+    ConnectionTestResult,
+    PSATicket,
+    PaginatedTicketResult,
+    PSANote,
+    PSAStatus,
+    PSACompany,
+    PSAMember,
+    PSAConfiguration,
+    PSATimeEntry,
+    PSABoard,
+    PSAResource,
+    PSACreatedTicket,
+    TicketCreatePayload,
+)
+```
+
+- [ ] **Step 4: Commit**
+
+```bash
+git add backend/app/services/psa/types.py backend/app/services/psa/base.py
+git commit -m "feat(psa): add PSAResource, TicketCreatePayload types and abstract provider methods"
+```
+
+---
+
+### Task 3: Implement new CW provider methods
+
+**Files:**
+- Modify: `backend/app/services/psa/connectwise/provider.py`
+
+- [ ] **Step 1: Update CW search_tickets to return PaginatedTicketResult**
+
+In `ConnectWiseProvider.search_tickets()`, replace the final `return [...]` block with a parallel count fetch:
+
+```python
+async def search_tickets(self, query: str, **filters) -> PaginatedTicketResult:
+    page_size = filters.get("page_size", 10)
+    page = filters.get("page", 1)
+
+    params: dict = {
+        "fields": "id,summary,company,board,status,priority,closedFlag",
+        "orderBy": "priority/sort asc,dateEntered desc",
+        "pageSize": page_size,
+        "page": page,
+    }
+
+    conditions: list[str] = []
+    if query:
+        conditions.append(f"summary contains '{query}'")
+    if filters.get("board_id"):
+        conditions.append(f"board/id = {filters['board_id']}")
+    if filters.get("status_id"):
+        conditions.append(f"status/id = {filters['status_id']}")
+    if not filters.get("include_closed", False):
+        conditions.append("closedFlag = false")
+    if filters.get("member_identifier") is not None:
+        conditions.append(f"resources contains '{filters['member_identifier']}'")
+    if filters.get("unassigned", False):
+        conditions.append("resources = null")
+    board_ids: list[int] = filters.get("board_ids") or []
+    if board_ids:
+        board_list = ", ".join(str(bid) for bid in board_ids)
+        conditions.append(f"board/id in ({board_list})")
+
+    condition_str = " and ".join(conditions) if conditions else ""
+    if condition_str:
+        params["conditions"] = condition_str
+
+    count_params: dict = {}
+    if condition_str:
+        count_params["conditions"] = condition_str
+
+    # Fire page fetch + count in parallel
+    data, count_data = await asyncio.gather(
+        self.client.get("/service/tickets", params=params),
+        self.client.get("/service/tickets/count", params=count_params),
+    )
+
+    items = [self._map_ticket(t) for t in (data if isinstance(data, list) else [])]
+    total = count_data.get("count", len(items)) if isinstance(count_data, dict) else len(items)
+
+    return PaginatedTicketResult(items=items, total=total, page=page, page_size=page_size)
+```
+
+- [ ] **Step 2: Add update import in provider.py**
+
+```python
+from app.services.psa.types import (
+    ConnectionTestResult,
+    PSATicket,
+    PaginatedTicketResult,
+    PSANote,
+    PSAStatus,
+    PSACompany,
+    PSAMember,
+    PSAConfiguration,
+    PSATimeEntry,
+    PSABoard,
+    PSAResource,
+    PSACreatedTicket,
+    TicketCreatePayload,
+)
+```
+
+- [ ] **Step 3: Update _map_ticket to expose company_id and board_id**
+
+```python
+@staticmethod
+def _map_ticket(data: dict) -> PSATicket:
+    company = data.get("company") or {}
+    board = data.get("board") or {}
+    status = data.get("status") or {}
+    priority = data.get("priority") or {}
+    return PSATicket(
+        id=str(data.get("id", "")),
+        summary=data.get("summary", ""),
+        company_name=company.get("name"),
+        company_id=str(company.get("id")) if company.get("id") else None,
+        board_name=board.get("name"),
+        board_id=board.get("id"),
+        status_name=status.get("name"),
+        status_id=status.get("id"),
+        priority_name=priority.get("name"),
+        priority_id=priority.get("id"),
+        closed=data.get("closedFlag", False),
+    )
+```
+
+- [ ] **Step 4: Implement list_resources**
+
+```python
+async def list_resources(self, ticket_id: int) -> list[PSAResource]:
+    data = await self.client.get(f"/service/tickets/{ticket_id}/members")
+    results = []
+    for m in (data if isinstance(data, list) else []):
+        member = m.get("member") or {}
+        results.append(PSAResource(
+            member_id=member.get("id", 0),
+            member_name=member.get("name", ""),
+            member_identifier=member.get("identifier", ""),
+        ))
+    return results
+```
+
+- [ ] **Step 5: Implement add_resource**
+
+```python
+async def add_resource(self, ticket_id: int, member_id: int) -> PSAResource:
+    data = await self.client.post(
+        f"/service/tickets/{ticket_id}/members",
+        json={"member": {"id": member_id}},
+    )
+    member = (data.get("member") or {}) if isinstance(data, dict) else {}
+    return PSAResource(
+        member_id=member.get("id", member_id),
+        member_name=member.get("name", ""),
+        member_identifier=member.get("identifier", ""),
+    )
+```
+
+- [ ] **Step 6: Implement remove_resource**
+
+```python
+async def remove_resource(self, ticket_id: int, member_id: int) -> None:
+    # CW DELETE /service/tickets/{id}/members requires the member record id,
+    # not the member id. Fetch the list first to find the record id.
+    members_data = await self.client.get(f"/service/tickets/{ticket_id}/members")
+    record_id = None
+    for m in (members_data if isinstance(members_data, list) else []):
+        if (m.get("member") or {}).get("id") == member_id:
+            record_id = m.get("id")
+            break
+    if record_id is None:
+        return  # Already not assigned — idempotent
+    await self.client.delete(f"/service/tickets/{ticket_id}/members/{record_id}")
+```
+
+- [ ] **Step 7: Implement create_ticket**
+
+```python
+async def create_ticket(self, payload: TicketCreatePayload) -> PSACreatedTicket:
+    body: dict = {
+        "summary": payload.summary,
+        "board": {"id": payload.board_id},
+        "company": {"id": payload.company_id},
+        "status": {"id": payload.status_id},
+        "priority": {"id": payload.priority_id},
+    }
+    if payload.description:
+        body["initialDescription"] = payload.description
+    if payload.assigned_member_id:
+        body["owner"] = {"id": payload.assigned_member_id}
+
+    data = await self.client.post("/service/tickets", json=body)
+
+    # Fetch resources for the created ticket
+    ticket_id = data.get("id")
+    resources: list[PSAResource] = []
+    if ticket_id and payload.assigned_member_id:
+        try:
+            resources = await self.list_resources(ticket_id)
+        except Exception:
+            pass
+
+    company = data.get("company") or {}
+    board = data.get("board") or {}
+    status = data.get("status") or {}
+    priority = data.get("priority") or {}
+
+    return PSACreatedTicket(
+        id=ticket_id or 0,
+        summary=data.get("summary", payload.summary),
+        board_name=board.get("name", ""),
+        status_name=status.get("name", ""),
+        priority_name=priority.get("name", ""),
+        company_name=company.get("name", ""),
+        resources=resources,
+    )
+```
+
+- [ ] **Step 8: Implement list_priorities**
+
+```python
+async def list_priorities(self) -> list[dict]:
+    data = await self.client.get("/service/priorities", params={"pageSize": 50})
+    return [
+        {"id": p.get("id"), "name": p.get("name")}
+        for p in (data if isinstance(data, list) else [])
+    ]
+```
+
+- [ ] **Step 9: Commit**
+
+```bash
+git add backend/app/services/psa/connectwise/provider.py
+git commit -m "feat(psa): implement list/add/remove resources, create_ticket, paginated search in CW provider"
+```
+
+---
+
+### Task 4: Update PSATicketInfo schema + add psa_tickets.py schemas
+
+**Files:**
+- Modify: `backend/app/schemas/psa_connection.py`
+- Create: `backend/app/schemas/psa_tickets.py`
+
+- [ ] **Step 1: Add company_id and board_id to PSATicketInfo in psa_connection.py**
+
+The existing `PSATicketInfo` equivalent for API responses is `PSATicketSearchResult`. Add company_id/board_id fields and a new `PSATicketInfoFull` for the get_ticket endpoint:
+
+```python
+# backend/app/schemas/psa_connection.py — update PSATicketSearchResult
+class PSATicketSearchResult(BaseModel):
+    id: str
+    summary: str
+    company_name: str | None = None
+    company_id: str | None = None   # add
+    board_name: str | None = None
+    board_id: int | None = None     # add
+    status_name: str | None = None
+    status_id: int | None = None    # add
+    priority_name: str | None = None
+    priority_id: int | None = None  # add
+    closed: bool = False
+```
+
+- [ ] **Step 2: Create psa_tickets.py with all new schemas**
+
+```python
+# backend/app/schemas/psa_tickets.py
+"""Normalized DTOs for ticket management endpoints."""
+from __future__ import annotations
+from pydantic import BaseModel
+
+
+class PSAResourceSchema(BaseModel):
+    member_id: int
+    member_name: str
+    member_identifier: str
+    is_rf_user: bool = False
+
+
+class PSATicketCreatedSchema(BaseModel):
+    id: int
+    summary: str
+    board_name: str
+    status_name: str
+    priority_name: str
+    company_name: str
+    resources: list[PSAResourceSchema] = []
+
+
+class PSATicketStatusUpdateSchema(BaseModel):
+    ticket_id: int
+    previous_status: str
+    new_status: str
+
+
+class TicketCreatePayloadSchema(BaseModel):
+    summary: str
+    company_id: int
+    board_id: int
+    status_id: int
+    priority_id: int
+    description: str | None = None
+    assigned_member_id: int | None = None
+
+
+class TicketListResponseSchema(BaseModel):
+    items: list  # list[PSATicketSearchResult] — imported in endpoints
+    total: int
+    page: int
+    page_size: int
+
+
+class AiParseRequestSchema(BaseModel):
+    prompt: str
+
+
+class AiParseResponseSchema(BaseModel):
+    summary: str | None = None
+    company_id: int | None = None
+    board_id: int | None = None
+    priority_id: int | None = None
+    status_id: int | None = None
+    assigned_member_id: int | None = None
+    description: str | None = None
+    missing_fields: list[str] = []
+    warnings: list[str] = []
+
+
+class PSAPrioritySchema(BaseModel):
+    id: int
+    name: str
+```
+
+- [ ] **Step 3: Commit**
+
+```bash
+git add backend/app/schemas/psa_connection.py backend/app/schemas/psa_tickets.py
+git commit -m "feat(psa): expand PSATicketSearchResult with IDs, add psa_tickets.py schemas"
+```
+
+---
+
+## Phase 2 — Backend: ticket_service.py + Endpoints
+
+### Task 5: Create ticket_service.py
+
+**Files:**
+- Create: `backend/app/services/ticket_service.py`
+
+- [ ] **Step 1: Write ticket_service.py**
+
+```python
+# backend/app/services/ticket_service.py
+"""Ticket mutation service — wraps PSA provider, resolves is_rf_user flag."""
+from __future__ import annotations
+
+import logging
+from uuid import UUID
+
+from sqlalchemy import select
+from sqlalchemy.ext.asyncio import AsyncSession
+
+from app.models.psa_connection import PsaConnection
+from app.models.psa_member_mapping import PsaMemberMapping
+from app.schemas.psa_tickets import (
+    PSAResourceSchema,
+    PSATicketCreatedSchema,
+    PSATicketStatusUpdateSchema,
+)
+from app.services.psa.registry import get_provider_for_account
+from app.services.psa.types import TicketCreatePayload
+
+logger = logging.getLogger(__name__)
+
+
+async def _get_mapped_member_ids(account_id: UUID, db: AsyncSession) -> set[int]:
+    """Return set of external_member_id ints that are mapped to RF users."""
+    conn_result = await db.execute(
+        select(PsaConnection).where(PsaConnection.account_id == account_id)
+    )
+    conn = conn_result.scalar_one_or_none()
+    if not conn:
+        return set()
+    mappings = await db.execute(
+        select(PsaMemberMapping).where(PsaMemberMapping.psa_connection_id == conn.id)
+    )
+    return {int(m.external_member_id) for m in mappings.scalars().all() if m.external_member_id}
+
+
+async def list_resources(
+    account_id: UUID, ticket_id: int, db: AsyncSession
+) -> list[PSAResourceSchema]:
+    provider = await get_provider_for_account(account_id, db)
+    mapped_ids = await _get_mapped_member_ids(account_id, db)
+    resources = await provider.list_resources(ticket_id)
+    return [
+        PSAResourceSchema(
+            member_id=r.member_id,
+            member_name=r.member_name,
+            member_identifier=r.member_identifier,
+            is_rf_user=r.member_id in mapped_ids,
+        )
+        for r in resources
+    ]
+
+
+async def add_resource(
+    account_id: UUID, ticket_id: int, member_id: int, db: AsyncSession
+) -> PSAResourceSchema:
+    provider = await get_provider_for_account(account_id, db)
+    mapped_ids = await _get_mapped_member_ids(account_id, db)
+    resource = await provider.add_resource(ticket_id, member_id)
+    return PSAResourceSchema(
+        member_id=resource.member_id,
+        member_name=resource.member_name,
+        member_identifier=resource.member_identifier,
+        is_rf_user=resource.member_id in mapped_ids,
+    )
+
+
+async def remove_resource(
+    account_id: UUID, ticket_id: int, member_id: int, db: AsyncSession
+) -> None:
+    provider = await get_provider_for_account(account_id, db)
+    await provider.remove_resource(ticket_id, member_id)
+
+
+async def update_status(
+    account_id: UUID, ticket_id: int, status_id: int, db: AsyncSession
+) -> PSATicketStatusUpdateSchema:
+    provider = await get_provider_for_account(account_id, db)
+    # get current status before updating
+    ticket = await provider.get_ticket(str(ticket_id))
+    previous_status = ticket.status_name or ""
+    await provider.update_ticket_status(str(ticket_id), status_id)
+    # get new status name from statuses list
+    statuses = await provider.get_ticket_statuses(ticket.board_id or 0)
+    new_status = next((s.name for s in statuses if s.id == status_id), str(status_id))
+    return PSATicketStatusUpdateSchema(
+        ticket_id=ticket_id,
+        previous_status=previous_status,
+        new_status=new_status,
+    )
+
+
+async def create_ticket(
+    account_id: UUID, payload: TicketCreatePayload, db: AsyncSession
+) -> PSATicketCreatedSchema:
+    provider = await get_provider_for_account(account_id, db)
+    mapped_ids = await _get_mapped_member_ids(account_id, db)
+    result = await provider.create_ticket(payload)
+    return PSATicketCreatedSchema(
+        id=result.id,
+        summary=result.summary,
+        board_name=result.board_name,
+        status_name=result.status_name,
+        priority_name=result.priority_name,
+        company_name=result.company_name,
+        resources=[
+            PSAResourceSchema(
+                member_id=r.member_id,
+                member_name=r.member_name,
+                member_identifier=r.member_identifier,
+                is_rf_user=r.member_id in mapped_ids,
+            )
+            for r in result.resources
+        ],
+    )
+```
+
+- [ ] **Step 2: Commit**
+
+```bash
+git add backend/app/services/ticket_service.py
+git commit -m "feat(psa): add ticket_service.py with list/add/remove resource, update_status, create_ticket"
+```
+
+---
+
+### Task 6: Update search endpoint + add new ticket endpoints
+
+**Files:**
+- Modify: `backend/app/api/endpoints/integrations.py`
+
+- [ ] **Step 1: Add new imports at top of integrations.py**
+
+```python
+from app.schemas.psa_tickets import (
+    PSAResourceSchema,
+    PSATicketCreatedSchema,
+    PSATicketStatusUpdateSchema,
+    TicketCreatePayloadSchema,
+    AiParseRequestSchema,
+    AiParseResponseSchema,
+    PSAPrioritySchema,
+)
+import app.services.ticket_service as ticket_svc
+```
+
+- [ ] **Step 2: Update search_tickets endpoint to return paginated response**
+
+Replace the existing `@router.get("/tickets/search", ...)` endpoint with:
+
+```python
+@router.get("/tickets/search")
+async def search_tickets(
+    current_user: Annotated[User, Depends(require_engineer_or_admin)],
+    db: Annotated[AsyncSession, Depends(get_db)],
+    query: str = "",
+    board_id: int | None = None,
+    status_id: int | None = None,
+    include_closed: bool = False,
+    assigned_to_me: bool = False,
+    unassigned: bool = False,
+    board_ids: str = "",
+    priority: str | None = None,
+    company_id: int | None = None,
+    page: int = 1,
+    page_size: int = 25,
+):
+    """Search ConnectWise tickets — returns paginated TicketListResponse."""
+    if not current_user.account_id:
+        raise HTTPException(status_code=400, detail="User has no account")
+
+    from app.services.psa.registry import get_provider_for_account
+    from app.services.psa.exceptions import PSAError
+
+    member_identifier: str | None = None
+    if assigned_to_me:
+        conn_result = await db.execute(
+            select(PsaConnection).where(
+                PsaConnection.account_id == current_user.account_id,
+                PsaConnection.is_active.is_(True),
+            )
+        )
+        conn = conn_result.scalar_one_or_none()
+        if conn:
+            mapping_result = await db.execute(
+                select(PsaMemberMapping).where(
+                    PsaMemberMapping.psa_connection_id == conn.id,
+                    PsaMemberMapping.user_id == current_user.id,
+                )
+            )
+            mapping = mapping_result.scalar_one_or_none()
+            if not mapping:
+                return {"items": [], "total": 0, "page": page, "page_size": page_size}
+            try:
+                _provider = await get_provider_for_account(current_user.account_id, db)
+                cw_members = await _provider.list_members()
+                matched = next((m for m in cw_members if m.id == mapping.external_member_id), None)
+                if matched:
+                    member_identifier = matched.identifier
+                else:
+                    return {"items": [], "total": 0, "page": page, "page_size": page_size}
+            except PSAError:
+                return {"items": [], "total": 0, "page": page, "page_size": page_size}
+
+    parsed_board_ids: list[int] = []
+    if board_ids:
+        try:
+            parsed_board_ids = [int(bid.strip()) for bid in board_ids.split(",") if bid.strip()]
+        except ValueError:
+            raise HTTPException(status_code=400, detail="board_ids must be comma-separated integers")
+
+    try:
+        provider = await get_provider_for_account(current_user.account_id, db)
+        result = await provider.search_tickets(
+            query,
+            board_id=board_id,
+            status_id=status_id,
+            include_closed=include_closed,
+            member_identifier=member_identifier,
+            unassigned=unassigned,
+            board_ids=parsed_board_ids,
+            company_id=company_id,
+            page=page,
+            page_size=page_size,
+        )
+        items = [
+            PSATicketSearchResult(
+                id=t.id,
+                summary=t.summary,
+                company_name=t.company_name,
+                company_id=t.company_id,
+                board_name=t.board_name,
+                board_id=t.board_id,
+                status_name=t.status_name,
+                status_id=t.status_id,
+                priority_name=t.priority_name,
+                priority_id=t.priority_id,
+                closed=t.closed,
+            )
+            for t in result.items
+        ]
+        return {"items": items, "total": result.total, "page": result.page, "page_size": result.page_size}
+    except PSAError as e:
+        raise HTTPException(status_code=502, detail=str(e))
+```
+
+- [ ] **Step 3: Add POST /tickets endpoint**
+
+```python
+@router.post("/tickets", response_model=PSATicketCreatedSchema, status_code=201)
+async def create_ticket(
+    data: TicketCreatePayloadSchema,
+    current_user: Annotated[User, Depends(require_engineer_or_admin)],
+    db: Annotated[AsyncSession, Depends(get_db)],
+):
+    """Create a new PSA ticket."""
+    if not current_user.account_id:
+        raise HTTPException(status_code=400, detail="User has no account")
+    from app.services.psa.exceptions import PSAError
+    from app.services.psa.types import TicketCreatePayload
+    try:
+        return await ticket_svc.create_ticket(
+            current_user.account_id,
+            TicketCreatePayload(**data.model_dump()),
+            db,
+        )
+    except PSAError as e:
+        raise HTTPException(status_code=502, detail=str(e))
+```
+
+- [ ] **Step 4: Add PATCH /tickets/{id}/status endpoint**
+
+```python
+@router.patch("/tickets/{ticket_id}/status", response_model=PSATicketStatusUpdateSchema)
+async def update_ticket_status_endpoint(
+    ticket_id: int,
+    status_id: int,
+    current_user: Annotated[User, Depends(require_engineer_or_admin)],
+    db: Annotated[AsyncSession, Depends(get_db)],
+):
+    """Update a ticket's status."""
+    if not current_user.account_id:
+        raise HTTPException(status_code=400, detail="User has no account")
+    from app.services.psa.exceptions import PSAError
+    try:
+        return await ticket_svc.update_status(current_user.account_id, ticket_id, status_id, db)
+    except PSAError as e:
+        raise HTTPException(status_code=502, detail=str(e))
+```
+
+- [ ] **Step 5: Add resource CRUD endpoints**
+
+```python
+@router.get("/tickets/{ticket_id}/resources", response_model=list[PSAResourceSchema])
+async def list_ticket_resources(
+    ticket_id: int,
+    current_user: Annotated[User, Depends(require_engineer_or_admin)],
+    db: Annotated[AsyncSession, Depends(get_db)],
+):
+    if not current_user.account_id:
+        raise HTTPException(status_code=400, detail="User has no account")
+    from app.services.psa.exceptions import PSAError
+    try:
+        return await ticket_svc.list_resources(current_user.account_id, ticket_id, db)
+    except PSAError as e:
+        raise HTTPException(status_code=502, detail=str(e))
+
+
+@router.post("/tickets/{ticket_id}/resources", response_model=PSAResourceSchema, status_code=201)
+async def add_ticket_resource(
+    ticket_id: int,
+    member_id: int,
+    current_user: Annotated[User, Depends(require_engineer_or_admin)],
+    db: Annotated[AsyncSession, Depends(get_db)],
+):
+    if not current_user.account_id:
+        raise HTTPException(status_code=400, detail="User has no account")
+    from app.services.psa.exceptions import PSAError
+    try:
+        return await ticket_svc.add_resource(current_user.account_id, ticket_id, member_id, db)
+    except PSAError as e:
+        raise HTTPException(status_code=502, detail=str(e))
+
+
+@router.delete("/tickets/{ticket_id}/resources/{member_id}", status_code=204)
+async def remove_ticket_resource(
+    ticket_id: int,
+    member_id: int,
+    current_user: Annotated[User, Depends(require_engineer_or_admin)],
+    db: Annotated[AsyncSession, Depends(get_db)],
+):
+    if not current_user.account_id:
+        raise HTTPException(status_code=400, detail="User has no account")
+    from app.services.psa.exceptions import PSAError
+    try:
+        await ticket_svc.remove_resource(current_user.account_id, ticket_id, member_id, db)
+    except PSAError as e:
+        raise HTTPException(status_code=502, detail=str(e))
+```
+
+- [ ] **Step 6: Add GET /priorities endpoint**
+
+```python
+@router.get("/priorities", response_model=list[PSAPrioritySchema])
+async def list_priorities(
+    current_user: Annotated[User, Depends(require_engineer_or_admin)],
+    db: Annotated[AsyncSession, Depends(get_db)],
+):
+    """List PSA priority levels for ticket creation form."""
+    if not current_user.account_id:
+        raise HTTPException(status_code=400, detail="User has no account")
+    from app.services.psa.registry import get_provider_for_account
+    from app.services.psa.exceptions import PSAError
+    try:
+        provider = await get_provider_for_account(current_user.account_id, db)
+        raw = await provider.list_priorities()
+        return [PSAPrioritySchema(id=p["id"], name=p["name"]) for p in raw if p.get("id")]
+    except PSAError:
+        return []
+```
+
+- [ ] **Step 7: Commit**
+
+```bash
+git add backend/app/api/endpoints/integrations.py
+git commit -m "feat(psa): update search endpoint for pagination, add create/status/resource/priority endpoints"
+```
+
+---
+
+### Task 7: Add AI parse endpoint
+
+**Files:**
+- Modify: `backend/app/api/endpoints/integrations.py`
+
+- [ ] **Step 1: Add ai-parse endpoint**
+
+```python
+@router.post("/tickets/ai-parse", response_model=AiParseResponseSchema)
+async def ai_parse_ticket(
+    data: AiParseRequestSchema,
+    current_user: Annotated[User, Depends(require_engineer_or_admin)],
+    db: Annotated[AsyncSession, Depends(get_db)],
+):
+    """Parse natural language into a ticket pre-fill payload using Claude."""
+    if not current_user.account_id:
+        raise HTTPException(status_code=400, detail="User has no account")
+
+    from app.services.psa.registry import get_provider_for_account
+    from app.services.psa.exceptions import PSAError
+    from app.core.config import settings
+    import anthropic
+    import json
+
+    # Fetch boards + members for context (both cached)
+    boards = []
+    members = []
+    try:
+        provider = await get_provider_for_account(current_user.account_id, db)
+        boards = await provider.list_boards()
+        members = await provider.list_members()
+    except PSAError:
+        pass
+
+    boards_list = [{"id": b.id, "name": b.name} for b in boards]
+    members_list = [{"id": m.id, "name": m.name, "identifier": m.identifier} for m in members]
+
+    system_prompt = """You are a ticket triage assistant for an MSP help desk.
+Extract structured ticket information from the engineer's natural language description.
+Return ONLY valid JSON matching this exact schema — no other text:
+{
+  "summary": "short one-line ticket title or null",
+  "board_id": "integer matching one of the provided boards or null",
+  "priority_name": "one of: Critical, High, Medium, Low, or null",
+  "description": "expanded description or null",
+  "assignee_identifier": "member identifier string from the provided members list or null",
+  "warnings": ["list of strings explaining what could not be resolved"]
+}"""
+
+    user_msg = f"""Available boards: {json.dumps(boards_list)}
+Available members: {json.dumps(members_list[:50])}
+
+Engineer's description: {data.prompt}"""
+
+    missing_fields: list[str] = []
+    warnings: list[str] = []
+    response_data = AiParseResponseSchema()
+
+    try:
+        client = anthropic.AsyncAnthropic(
+            api_key=settings.ANTHROPIC_API_KEY,
+            max_retries=1,
+        )
+        msg = await client.messages.create(
+            model=settings.get_model_for_action("default"),
+            max_tokens=512,
+            system=system_prompt,
+            messages=[{"role": "user", "content": user_msg}],
+        )
+        raw = msg.content[0].text.strip()
+        # Strip markdown fences if present
+        if raw.startswith("```"):
+            import re
+            raw = re.sub(r'^```(?:json)?\s*', '', raw)
+            raw = re.sub(r'\s*```$', '', raw.strip())
+        parsed = json.loads(raw)
+
+        response_data.summary = parsed.get("summary")
+        response_data.description = parsed.get("description")
+        warnings = parsed.get("warnings", [])
+
+        # Resolve board_id
+        if parsed.get("board_id"):
+            board_match = next((b for b in boards if b.id == int(parsed["board_id"])), None)
+            if board_match:
+                response_data.board_id = board_match.id
+            else:
+                missing_fields.append("board_id")
+                warnings.append(f"Board ID {parsed['board_id']} not found")
+        else:
+            missing_fields.append("board_id")
+
+        # Resolve assignee
+        if parsed.get("assignee_identifier"):
+            member = next((m for m in members if m.identifier == parsed["assignee_identifier"]), None)
+            if member:
+                response_data.assigned_member_id = int(member.id)
+            else:
+                warnings.append(f"Member '{parsed['assignee_identifier']}' not found")
+
+        # Priority/status always need manual selection — they're board-dependent
+        missing_fields.extend(["status_id", "priority_id", "company_id"])
+
+    except Exception as e:
+        logger.warning("AI parse failed: %s", e)
+        missing_fields = ["summary", "board_id", "status_id", "priority_id", "company_id"]
+        warnings = ["AI parsing failed — please fill in manually"]
+
+    response_data.missing_fields = missing_fields
+    response_data.warnings = warnings
+    return response_data
+```
+
+- [ ] **Step 2: Commit**
+
+```bash
+git add backend/app/api/endpoints/integrations.py
+git commit -m "feat(psa): add AI ticket parse endpoint"
+```
+
+---
+
+### Task 8: Update assistant_chat_service.py system prompt
+
+**Files:**
+- Modify: `backend/app/services/assistant_chat_service.py`
+
+- [ ] **Step 1: Add spin-off ticket rule to ASSISTANT_SYSTEM_PROMPT**
+
+Find the end of `ASSISTANT_SYSTEM_PROMPT` in `assistant_chat_service.py` and append this section before the closing `"""`:
+
+```python
+# Add as the last section of ASSISTANT_SYSTEM_PROMPT, before the closing triple-quote:
+
+## SPIN-OFF TICKET CREATION
+
+When you identify a second distinct issue that is clearly separate from the primary topic \
+of this session, suggest creating a spin-off ticket using the [ACTIONS] marker below. \
+Use this sparingly — only when the issue is genuinely independent, not for every tangential mention.
+
+Format:
+[ACTIONS]
+[
+  {
+    "label": "Create ticket: <brief issue title>",
+    "command": "create_spin_off_ticket",
+    "description": "<one sentence description of the separate issue>"
+  }
+]
+[/ACTIONS]
+```
+
+- [ ] **Step 2: Write a backend test for the new endpoints**
+
+```python
+# backend/tests/test_psa_tickets.py
+"""Routing and auth tests for new ticket management endpoints."""
+import pytest
+
+
+@pytest.mark.asyncio
+async def test_create_ticket_requires_auth(client):
+    """POST /tickets returns 401 without auth."""
+    response = await client.post(
+        "/api/v1/integrations/psa/tickets",
+        json={
+            "summary": "Test", "company_id": 1, "board_id": 1,
+            "status_id": 1, "priority_id": 1
+        },
+    )
+    assert response.status_code == 401
+
+
+@pytest.mark.asyncio
+async def test_list_resources_requires_auth(client):
+    response = await client.get("/api/v1/integrations/psa/tickets/1/resources")
+    assert response.status_code == 401
+
+
+@pytest.mark.asyncio
+async def test_search_tickets_returns_paginated_shape(client, auth_headers):
+    """search endpoint returns TicketListResponse shape when no PSA connected."""
+    response = await client.get(
+        "/api/v1/integrations/psa/tickets/search",
+        headers=auth_headers,
+    )
+    # No PSA connection → 400
+    assert response.status_code in (200, 400, 502)
+    if response.status_code == 200:
+        data = response.json()
+        assert "items" in data
+        assert "total" in data
+        assert "page" in data
+
+
+@pytest.mark.asyncio
+async def test_update_status_requires_auth(client):
+    response = await client.patch(
+        "/api/v1/integrations/psa/tickets/1/status?status_id=5"
+    )
+    assert response.status_code == 401
+
+
+@pytest.mark.asyncio
+async def test_ai_parse_requires_auth(client):
+    response = await client.post(
+        "/api/v1/integrations/psa/tickets/ai-parse",
+        json={"prompt": "New ticket for Acme"},
+    )
+    assert response.status_code == 401
+```
+
+- [ ] **Step 3: Run tests**
+
+```bash
+cd backend && pytest tests/test_psa_tickets.py -v --override-ini="addopts="
+```
+
+Expected: all pass.
+
+- [ ] **Step 4: Commit**
+
+```bash
+git add backend/app/services/assistant_chat_service.py backend/tests/test_psa_tickets.py
+git commit -m "feat(psa): add spin-off ticket system prompt rule, backend routing tests"
+```
+
+---
+
+## Phase 3 — Frontend: Types + API Client
+
+### Task 9: Create types/tickets.ts + update types/integrations.ts
+
+**Files:**
+- Create: `frontend/src/types/tickets.ts`
+- Modify: `frontend/src/types/integrations.ts`
+
+- [ ] **Step 1: Create types/tickets.ts**
+
+```typescript
+// frontend/src/types/tickets.ts
+import type { PSATicketSearchResult } from '@/types/integrations'
+
+export interface TicketFilters {
+  search: string
+  board_id: number | null
+  status_id: number | null
+  priority: string | null
+  company_id: number | null
+  assigned: 'me' | 'unassigned' | 'all' | number
+  include_closed: boolean
+}
+
+export const DEFAULT_TICKET_FILTERS: TicketFilters = {
+  search: '',
+  board_id: null,
+  status_id: null,
+  priority: null,
+  company_id: null,
+  assigned: 'all',
+  include_closed: false,
+}
+
+export interface TicketCreationPayload {
+  summary: string
+  company_id: number | null
+  board_id: number | null
+  status_id: number | null
+  priority_id: number | null
+  description: string
+  assigned_member_id: number | null
+}
+
+export interface AiParseResponse {
+  summary: string | null
+  company_id: number | null
+  board_id: number | null
+  priority_id: number | null
+  status_id: number | null
+  assigned_member_id: number | null
+  description: string | null
+  missing_fields: string[]
+  warnings: string[]
+}
+
+export interface PSAResource {
+  member_id: number
+  member_name: string
+  member_identifier: string
+  is_rf_user: boolean
+}
+
+export interface PSATicketCreated {
+  id: number
+  summary: string
+  board_name: string
+  status_name: string
+  priority_name: string
+  company_name: string
+  resources: PSAResource[]
+}
+
+export interface PSATicketStatusUpdate {
+  ticket_id: number
+  previous_status: string
+  new_status: string
+}
+
+export interface TicketListResponse {
+  items: PSATicketSearchResult[]
+  total: number
+  page: number
+  page_size: number
+}
+
+export interface PSAPriority {
+  id: number
+  name: string
+}
+```
+
+- [ ] **Step 2: Update PSATicketSearchResult and PSATicketInfo in types/integrations.ts**
+
+```typescript
+// frontend/src/types/integrations.ts — update these interfaces
+
+export interface PSATicketInfo {
+  id: string
+  summary: string
+  company_name: string | null
+  company_id: number | null    // add
+  board_name: string | null
+  board_id: number | null      // add
+  status_name: string | null
+  status_id: number | null     // add
+  priority_name: string | null
+  priority_id: number | null   // add
+}
+
+export interface PSATicketSearchResult {
+  id: string
+  summary: string
+  company_name: string | null
+  company_id: string | null    // add
+  board_name: string | null
+  board_id: number | null      // add
+  status_name: string | null
+  status_id: number | null     // add
+  priority_name: string | null
+  priority_id: number | null   // add
+  closed: boolean
+}
+```
+
+- [ ] **Step 3: Export new types from types/index.ts (if it exists)**
+
+```bash
+grep -n "tickets" /home/coder/root-workspace/resolutionflow/frontend/src/types/index.ts
+```
+
+If `types/index.ts` exists and exports from other type files, add:
+```typescript
+export * from './tickets'
+```
+
+- [ ] **Step 4: Commit**
+
+```bash
+git add frontend/src/types/tickets.ts frontend/src/types/integrations.ts
+git commit -m "feat(tickets): add tickets types, expand PSATicketSearchResult/PSATicketInfo with IDs"
+```
+
+---
+
+### Task 10: Create api/tickets.ts + update api/integrations.ts
+
+**Files:**
+- Create: `frontend/src/api/tickets.ts`
+- Modify: `frontend/src/api/integrations.ts`
+
+- [ ] **Step 1: Create api/tickets.ts**
+
+```typescript
+// frontend/src/api/tickets.ts
+import { apiClient } from './client'
+import type {
+  PSAResource,
+  PSATicketCreated,
+  PSATicketStatusUpdate,
+  TicketCreationPayload,
+  AiParseResponse,
+  TicketListResponse,
+  PSAPriority,
+} from '@/types/tickets'
+
+export const ticketsApi = {
+  listResources: (ticketId: number): Promise<PSAResource[]> =>
+    apiClient.get<PSAResource[]>(`/integrations/psa/tickets/${ticketId}/resources`).then(r => r.data),
+
+  addResource: (ticketId: number, memberId: number): Promise<PSAResource> =>
+    apiClient.post<PSAResource>(`/integrations/psa/tickets/${ticketId}/resources?member_id=${memberId}`).then(r => r.data),
+
+  removeResource: (ticketId: number, memberId: number): Promise<void> =>
+    apiClient.delete(`/integrations/psa/tickets/${ticketId}/resources/${memberId}`).then(() => undefined),
+
+  updateStatus: (ticketId: number, statusId: number): Promise<PSATicketStatusUpdate> =>
+    apiClient.patch<PSATicketStatusUpdate>(`/integrations/psa/tickets/${ticketId}/status?status_id=${statusId}`).then(r => r.data),
+
+  createTicket: (payload: TicketCreationPayload): Promise<PSATicketCreated> =>
+    apiClient.post<PSATicketCreated>('/integrations/psa/tickets', payload).then(r => r.data),
+
+  aiParse: (prompt: string): Promise<AiParseResponse> =>
+    apiClient.post<AiParseResponse>('/integrations/psa/tickets/ai-parse', { prompt }).then(r => r.data),
+
+  listPriorities: (): Promise<PSAPriority[]> =>
+    apiClient.get<PSAPriority[]>('/integrations/psa/priorities').then(r => r.data),
+
+  searchTickets: (params: {
+    query?: string
+    board_id?: number | null
+    status_id?: number | null
+    include_closed?: boolean
+    assigned_to_me?: boolean
+    unassigned?: boolean
+    board_ids?: string
+    priority?: string | null
+    company_id?: number | null
+    page?: number
+    page_size?: number
+  }): Promise<TicketListResponse> =>
+    apiClient.get<TicketListResponse>('/integrations/psa/tickets/search', { params }).then(r => r.data),
+}
+```
+
+- [ ] **Step 2: Update return types in api/integrations.ts**
+
+```typescript
+// frontend/src/api/integrations.ts — update these two methods:
+import type { TicketListResponse } from '@/types/tickets'
+
+searchTickets: (params: { query?: string; board_id?: number; include_closed?: boolean }) =>
+  apiClient.get<TicketListResponse>('/integrations/psa/tickets/search', { params }).then(r => r.data),
+
+searchTicketsQueue: (params: {
+  assigned_to_me?: boolean
+  unassigned?: boolean
+  board_ids?: string
+  page?: number
+  page_size?: number
+}) =>
+  apiClient.get<TicketListResponse>('/integrations/psa/tickets/search', { params }).then(r => r.data),
+```
+
+- [ ] **Step 3: Update TicketQueue.tsx and TicketPickerModal.tsx to read .items**
+
+In `frontend/src/components/dashboard/TicketQueue.tsx`, find every place that uses the result of `searchTicketsQueue()` or `searchTickets()` as an array and change it to read `.items`:
+
+```bash
+grep -n "searchTicketsQueue\|searchTickets" /home/coder/root-workspace/resolutionflow/frontend/src/components/dashboard/TicketQueue.tsx
+```
+
+Change any `setTickets(data)` or similar to `setTickets(data.items)`.
+
+In `frontend/src/components/session/TicketPickerModal.tsx`:
+```bash
+grep -n "searchTickets" /home/coder/root-workspace/resolutionflow/frontend/src/components/session/TicketPickerModal.tsx
+```
+
+Change any usage from array result to `.items` access.
+
+- [ ] **Step 4: Commit**
+
+```bash
+git add frontend/src/api/tickets.ts frontend/src/api/integrations.ts \
+  frontend/src/components/dashboard/TicketQueue.tsx \
+  frontend/src/components/session/TicketPickerModal.tsx
+git commit -m "feat(tickets): add tickets API client, update integrations API for paginated search"
+```
+
+---
+
+## Phase 4 — Tickets Page
+
+### Task 11: Create TicketFilterBar.tsx
+
+**Files:**
+- Create: `frontend/src/components/tickets/TicketFilterBar.tsx`
+
+- [ ] **Step 1: Create the config-driven filter bar**
+
+```tsx
+// frontend/src/components/tickets/TicketFilterBar.tsx
+import { Search, X } from 'lucide-react'
+import { cn } from '@/lib/utils'
+import type { TicketFilters } from '@/types/tickets'
+import type { PSABoard, PSATicketStatusItem } from '@/types/integrations'
+import type { PSAPriority } from '@/types/tickets'
+
+interface TicketFilterBarProps {
+  filters: TicketFilters
+  onChange: (updated: Partial<TicketFilters>) => void
+  boards: PSABoard[]
+  statuses: PSATicketStatusItem[]
+  priorities: PSAPriority[]
+  members: { id: number; name: string }[]
+  total: number
+  page: number
+  pageSize: number
+  onPageChange: (page: number) => void
+  loading: boolean
+}
+
+export function TicketFilterBar({
+  filters, onChange, boards, statuses, priorities, members,
+  total, page, pageSize, onPageChange, loading,
+}: TicketFilterBarProps) {
+  const start = (page - 1) * pageSize + 1
+  const end = Math.min(page * pageSize, total)
+  const hasNext = page * pageSize < total
+  const hasPrev = page > 1
+
+  return (
+    <div className="space-y-3">
+      {/* Filter row */}
+      <div className="flex flex-wrap gap-2 items-center">
+        {/* Search */}
+        <div className="relative">
+          <Search className="absolute left-2.5 top-1/2 -translate-y-1/2 w-3.5 h-3.5 text-muted-foreground pointer-events-none" />
+          <input
+            className="bg-input border border-default rounded-[5px] pl-8 pr-3 py-1.5 text-sm text-primary placeholder:text-muted-foreground focus:border-accent focus:outline-none w-48"
+            placeholder="Search tickets..."
+            value={filters.search}
+            onChange={e => onChange({ search: e.target.value })}
+          />
+        </div>
+
+        {/* Assignment */}
+        <select
+          className="bg-input border border-default rounded-[5px] px-3 py-1.5 text-sm text-primary focus:border-accent focus:outline-none"
+          value={typeof filters.assigned === 'number' ? String(filters.assigned) : filters.assigned}
+          onChange={e => {
+            const v = e.target.value
+            onChange({ assigned: v === 'me' || v === 'unassigned' || v === 'all' ? v : Number(v) })
+          }}
+        >
+          <option value="all">All Tickets</option>
+          <option value="me">My Tickets</option>
+          <option value="unassigned">Unassigned</option>
+          {members.map(m => (
+            <option key={m.id} value={String(m.id)}>{m.name}</option>
+          ))}
+        </select>
+
+        {/* Board */}
+        <select
+          className="bg-input border border-default rounded-[5px] px-3 py-1.5 text-sm text-primary focus:border-accent focus:outline-none"
+          value={filters.board_id ?? ''}
+          onChange={e => onChange({ board_id: e.target.value ? Number(e.target.value) : null })}
+        >
+          <option value="">All Boards</option>
+          {boards.map(b => <option key={b.id} value={b.id}>{b.name}</option>)}
+        </select>
+
+        {/* Status */}
+        <select
+          className="bg-input border border-default rounded-[5px] px-3 py-1.5 text-sm text-primary focus:border-accent focus:outline-none"
+          value={filters.status_id ?? ''}
+          onChange={e => onChange({ status_id: e.target.value ? Number(e.target.value) : null })}
+        >
+          <option value="">All Statuses</option>
+          {statuses.map(s => <option key={s.id} value={s.id}>{s.name}</option>)}
+        </select>
+
+        {/* Priority */}
+        <select
+          className="bg-input border border-default rounded-[5px] px-3 py-1.5 text-sm text-primary focus:border-accent focus:outline-none"
+          value={filters.priority ?? ''}
+          onChange={e => onChange({ priority: e.target.value || null })}
+        >
+          <option value="">All Priorities</option>
+          {priorities.map(p => <option key={p.id} value={p.name}>{p.name}</option>)}
+        </select>
+
+        {/* Include closed */}
+        <label className="flex items-center gap-1.5 text-sm text-muted-foreground cursor-pointer select-none">
+          <input
+            type="checkbox"
+            className="accent-accent"
+            checked={filters.include_closed}
+            onChange={e => onChange({ include_closed: e.target.checked })}
+          />
+          Include closed
+        </label>
+
+        {/* Clear filters */}
+        {(filters.search || filters.board_id || filters.status_id || filters.priority || filters.assigned !== 'all' || filters.include_closed) && (
+          <button
+            onClick={() => onChange({ search: '', board_id: null, status_id: null, priority: null, assigned: 'all', include_closed: false })}
+            className="flex items-center gap-1 text-xs text-muted-foreground hover:text-primary transition-colors"
+          >
+            <X className="w-3 h-3" /> Clear
+          </button>
+        )}
+      </div>
+
+      {/* Pagination row */}
+      {total > 0 && (
+        <div className="flex items-center justify-between text-xs text-muted-foreground">
+          <span>
+            {loading ? 'Loading…' : `Showing ${start}–${end} of ${total} tickets`}
+          </span>
+          <div className="flex gap-1">
+            <button
+              disabled={!hasPrev}
+              onClick={() => onPageChange(page - 1)}
+              className={cn(
+                'px-2 py-1 rounded border text-xs transition-colors',
+                hasPrev
+                  ? 'border-default text-primary hover:border-hover'
+                  : 'border-default text-muted-foreground opacity-40 cursor-not-allowed'
+              )}
+            >
+              Prev
+            </button>
+            <button
+              disabled={!hasNext}
+              onClick={() => onPageChange(page + 1)}
+              className={cn(
+                'px-2 py-1 rounded border text-xs transition-colors',
+                hasNext
+                  ? 'border-default text-primary hover:border-hover'
+                  : 'border-default text-muted-foreground opacity-40 cursor-not-allowed'
+              )}
+            >
+              Next
+            </button>
+          </div>
+        </div>
+      )}
+    </div>
+  )
+}
+```
+
+- [ ] **Step 2: Commit**
+
+```bash
+git add frontend/src/components/tickets/TicketFilterBar.tsx
+git commit -m "feat(tickets): add config-driven TicketFilterBar with pagination controls"
+```
+
+---
+
+### Task 12: Create TicketListRow.tsx
+
+**Files:**
+- Create: `frontend/src/components/tickets/TicketListRow.tsx`
+
+- [ ] **Step 1: Create compact row component**
+
+```tsx
+// frontend/src/components/tickets/TicketListRow.tsx
+import { cn } from '@/lib/utils'
+import type { PSATicketSearchResult } from '@/types/integrations'
+
+interface TicketListRowProps {
+  ticket: PSATicketSearchResult
+  selected: boolean
+  onClick: () => void
+}
+
+const PRIORITY_STYLES: Record<string, string> = {
+  Critical: 'text-danger',
+  High: 'text-danger',
+  Medium: 'text-warning',
+  Low: 'text-muted-foreground',
+}
+
+const STATUS_STYLES: Record<string, { bg: string; text: string }> = {
+  New: { bg: 'bg-accent/10', text: 'text-accent' },
+  'In Progress': { bg: 'bg-warning/10', text: 'text-warning' },
+  Waiting: { bg: 'bg-success/10', text: 'text-success' },
+  Resolved: { bg: 'bg-muted/10', text: 'text-muted-foreground' },
+}
+
+function statusStyle(name: string | null) {
+  if (!name) return { bg: 'bg-elevated', text: 'text-muted-foreground' }
+  return STATUS_STYLES[name] ?? { bg: 'bg-elevated', text: 'text-muted-foreground' }
+}
+
+export function TicketListRow({ ticket, selected, onClick }: TicketListRowProps) {
+  const { bg, text } = statusStyle(ticket.status_name)
+  const priorityClass = PRIORITY_STYLES[ticket.priority_name ?? ''] ?? 'text-muted-foreground'
+
+  return (
+    <div
+      role="button"
+      tabIndex={0}
+      onClick={onClick}
+      onKeyDown={e => e.key === 'Enter' && onClick()}
+      className={cn(
+        'flex items-center gap-3 px-4 py-2.5 cursor-pointer transition-colors border-b border-default text-sm',
+        selected ? 'bg-accent/5' : 'hover:bg-elevated'
+      )}
+    >
+      {/* ID */}
+      <span className="w-12 shrink-0 text-accent text-xs font-mono">#{ticket.id}</span>
+
+      {/* Summary */}
+      <span className="flex-1 truncate text-primary font-medium">{ticket.summary}</span>
+
+      {/* Company */}
+      <span className="w-32 shrink-0 truncate text-muted-foreground text-xs hidden md:block">
+        {ticket.company_name ?? '—'}
+      </span>
+
+      {/* Board */}
+      <span className="w-28 shrink-0 truncate text-muted-foreground text-xs hidden lg:block">
+        {ticket.board_name ?? '—'}
+      </span>
+
+      {/* Status badge */}
+      <span className={cn('shrink-0 px-1.5 py-0.5 rounded text-[11px] font-medium', bg, text)}>
+        {ticket.status_name ?? '—'}
+      </span>
+
+      {/* Priority */}
+      <span className={cn('w-14 shrink-0 text-xs text-right', priorityClass)}>
+        {ticket.priority_name ?? '—'}
+      </span>
+    </div>
+  )
+}
+```
+
+- [ ] **Step 2: Commit**
+
+```bash
+git add frontend/src/components/tickets/TicketListRow.tsx
+git commit -m "feat(tickets): add compact TicketListRow component"
+```
+
+---
+
+### Task 13: Create TicketsPage.tsx
+
+**Files:**
+- Create: `frontend/src/pages/TicketsPage.tsx`
+
+- [ ] **Step 1: Create TicketsPage with URL-param filter state**
+
+```tsx
+// frontend/src/pages/TicketsPage.tsx
+import { useEffect, useState, useCallback } from 'react'
+import { useSearchParams } from 'react-router-dom'
+import { Plus, Ticket } from 'lucide-react'
+import { PageMeta } from '@/components/common/PageMeta'
+import { TicketFilterBar } from '@/components/tickets/TicketFilterBar'
+import { TicketListRow } from '@/components/tickets/TicketListRow'
+import { TicketDetailPanel } from '@/components/tickets/TicketDetailPanel'
+import { NewTicketModal } from '@/components/tickets/NewTicketModal'
+import { integrationsApi } from '@/api/integrations'
+import { ticketsApi } from '@/api/tickets'
+import type { PSATicketSearchResult, PSABoard, PSATicketStatusItem } from '@/types/integrations'
+import type { TicketFilters, PSAPriority } from '@/types/tickets'
+import { DEFAULT_TICKET_FILTERS } from '@/types/tickets'
+
+const PAGE_SIZE = 25
+
+function filtersFromParams(params: URLSearchParams): TicketFilters & { page: number } {
+  const assigned = params.get('assigned') ?? 'all'
+  return {
+    search: params.get('search') ?? '',
+    board_id: params.get('board') ? Number(params.get('board')) : null,
+    status_id: params.get('status') ? Number(params.get('status')) : null,
+    priority: params.get('priority') ?? null,
+    company_id: params.get('company') ? Number(params.get('company')) : null,
+    assigned: (assigned === 'me' || assigned === 'unassigned' || assigned === 'all')
+      ? assigned
+      : Number(assigned),
+    include_closed: params.get('closed') === 'true',
+    page: params.get('page') ? Number(params.get('page')) : 1,
+  }
+}
+
+export default function TicketsPage() {
+  const [searchParams, setSearchParams] = useSearchParams()
+  const { page, ...filters } = filtersFromParams(searchParams)
+
+  const [tickets, setTickets] = useState<PSATicketSearchResult[]>([])
+  const [total, setTotal] = useState(0)
+  const [loading, setLoading] = useState(false)
+  const [boards, setBoards] = useState<PSABoard[]>([])
+  const [statuses, setStatuses] = useState<PSATicketStatusItem[]>([])
+  const [priorities, setPriorities] = useState<PSAPriority[]>([])
+  const [members, setMembers] = useState<{ id: number; name: string }[]>([])
+  const [selectedTicket, setSelectedTicket] = useState<PSATicketSearchResult | null>(null)
+  const [showNewTicket, setShowNewTicket] = useState(false)
+
+  // Load filter option data once
+  useEffect(() => {
+    integrationsApi.listBoards().then(setBoards).catch(() => {})
+    ticketsApi.listPriorities().then(setPriorities).catch(() => {})
+    integrationsApi.listMembers()
+      .then(ms => setMembers(ms.map(m => ({ id: Number(m.id), name: m.name }))))
+      .catch(() => {})
+  }, [])
+
+  // Load statuses when board changes
+  useEffect(() => {
+    if (filters.board_id) {
+      integrationsApi.getTicketStatuses(String(filters.board_id))
+        .then(setStatuses).catch(() => {})
+    } else {
+      setStatuses([])
+    }
+  }, [filters.board_id])
+
+  // Fetch tickets on filter/page change
+  const fetchTickets = useCallback(async () => {
+    setLoading(true)
+    try {
+      const result = await ticketsApi.searchTickets({
+        query: filters.search || undefined,
+        board_id: filters.board_id ?? undefined,
+        status_id: filters.status_id ?? undefined,
+        include_closed: filters.include_closed,
+        assigned_to_me: filters.assigned === 'me',
+        unassigned: filters.assigned === 'unassigned',
+        priority: filters.priority ?? undefined,
+        company_id: filters.company_id ?? undefined,
+        page,
+        page_size: PAGE_SIZE,
+      })
+      setTickets(result.items)
+      setTotal(result.total)
+    } catch {
+      setTickets([])
+      setTotal(0)
+    } finally {
+      setLoading(false)
+    }
+  }, [filters.search, filters.board_id, filters.status_id, filters.include_closed,
+      filters.assigned, filters.priority, filters.company_id, page])
+
+  useEffect(() => { fetchTickets() }, [fetchTickets])
+
+  function updateFilters(updated: Partial<TicketFilters>) {
+    const next = new URLSearchParams(searchParams)
+    if ('search' in updated) updated.search ? next.set('search', updated.search!) : next.delete('search')
+    if ('board_id' in updated) updated.board_id ? next.set('board', String(updated.board_id)) : next.delete('board')
+    if ('status_id' in updated) updated.status_id ? next.set('status', String(updated.status_id)) : next.delete('status')
+    if ('priority' in updated) updated.priority ? next.set('priority', updated.priority!) : next.delete('priority')
+    if ('company_id' in updated) updated.company_id ? next.set('company', String(updated.company_id)) : next.delete('company')
+    if ('assigned' in updated) {
+      const a = updated.assigned
+      a === 'all' ? next.delete('assigned') : next.set('assigned', String(a))
+    }
+    if ('include_closed' in updated) updated.include_closed ? next.set('closed', 'true') : next.delete('closed')
+    next.delete('page') // reset to 1 on filter change
+    setSearchParams(next)
+  }
+
+  function updatePage(p: number) {
+    const next = new URLSearchParams(searchParams)
+    p === 1 ? next.delete('page') : next.set('page', String(p))
+    setSearchParams(next)
+  }
+
+  return (
+    <div className="flex flex-col h-full overflow-hidden">
+      <PageMeta title="Tickets — ResolutionFlow" />
+
+      {/* Header */}
+      <div className="flex items-center justify-between px-6 py-4 border-b border-default shrink-0">
+        <div className="flex items-center gap-2">
+          <Ticket className="w-5 h-5 text-muted-foreground" />
+          <h1 className="font-heading text-xl font-bold text-heading">Tickets</h1>
+        </div>
+        <button
+          onClick={() => setShowNewTicket(true)}
+          className="flex items-center gap-1.5 px-3 py-1.5 bg-accent text-white text-sm font-medium rounded-[5px] hover:bg-accent/90 transition-colors"
+        >
+          <Plus className="w-4 h-4" /> New Ticket
+        </button>
+      </div>
+
+      {/* Filters */}
+      <div className="px-6 py-3 border-b border-default shrink-0">
+        <TicketFilterBar
+          filters={filters}
+          onChange={updateFilters}
+          boards={boards}
+          statuses={statuses}
+          priorities={priorities}
+          members={members}
+          total={total}
+          page={page}
+          pageSize={PAGE_SIZE}
+          onPageChange={updatePage}
+          loading={loading}
+        />
+      </div>
+
+      {/* List + Detail Panel */}
+      <div className="flex flex-1 overflow-hidden">
+        {/* Ticket list */}
+        <div className={`flex flex-col overflow-y-auto ${selectedTicket ? 'w-1/2' : 'w-full'} transition-all`}>
+          {loading && tickets.length === 0 && (
+            <div className="flex items-center justify-center py-16 text-muted-foreground text-sm">
+              Loading tickets…
+            </div>
+          )}
+          {!loading && tickets.length === 0 && (
+            <div className="flex flex-col items-center justify-center py-16 text-muted-foreground text-sm gap-2">
+              <Ticket className="w-8 h-8 opacity-30" />
+              No tickets match your filters
+            </div>
+          )}
+          {tickets.map(t => (
+            <TicketListRow
+              key={t.id}
+              ticket={t}
+              selected={selectedTicket?.id === t.id}
+              onClick={() => setSelectedTicket(t)}
+            />
+          ))}
+        </div>
+
+        {/* Detail panel */}
+        {selectedTicket && (
+          <div className="w-1/2 border-l border-default overflow-y-auto">
+            <TicketDetailPanel
+              ticket={selectedTicket}
+              onClose={() => setSelectedTicket(null)}
+              onStatusUpdated={(ticketId, newStatus) => {
+                setTickets(prev => prev.map(t =>
+                  t.id === String(ticketId) ? { ...t, status_name: newStatus } : t
+                ))
+              }}
+            />
+          </div>
+        )}
+      </div>
+
+      {/* New Ticket Modal */}
+      {showNewTicket && (
+        <NewTicketModal
+          defaultTab="quick"
+          onClose={() => setShowNewTicket(false)}
+          onCreated={() => { setShowNewTicket(false); fetchTickets() }}
+        />
+      )}
+    </div>
+  )
+}
+```
+
+- [ ] **Step 2: Commit**
+
+```bash
+git add frontend/src/pages/TicketsPage.tsx
+git commit -m "feat(tickets): add TicketsPage with URL-param filter state and slide-out detail"
+```
+
+---
+
+### Task 14: Add route + sidebar nav
+
+**Files:**
+- Modify: `frontend/src/router.tsx`
+- Modify: `frontend/src/components/layout/Sidebar.tsx`
+
+- [ ] **Step 1: Add TicketsPage to router.tsx**
+
+After the existing lazy imports, add:
+```typescript
+const TicketsPage = lazyWithRetry(() => import('@/pages/TicketsPage'))
+```
+
+Inside the protected route children array (alongside other routes like `/sessions`), add:
+```typescript
+{ path: 'tickets', element: <Suspense fallback={<PageLoader />}><TicketsPage /></Suspense> },
+```
+
+- [ ] **Step 2: Add Tickets nav item to Sidebar.tsx**
+
+In `Sidebar.tsx`, find the `railGroups` array. Add a Tickets entry in the RESOLVE section. Find the History entry:
+```typescript
+{
+  href: '/sessions', icon: History, label: 'History', shortLabel: 'History',
+  ...
+},
+```
+
+Add after it:
+```typescript
+{
+  href: '/tickets', icon: Ticket, label: 'Tickets', shortLabel: 'Tickets',
+  matchPaths: ['/tickets'],
+},
+```
+
+Also add `Ticket` to the Lucide imports at the top of `Sidebar.tsx`.
+
+- [ ] **Step 3: Commit**
+
+```bash
+git add frontend/src/router.tsx frontend/src/components/layout/Sidebar.tsx
+git commit -m "feat(tickets): add /tickets route and sidebar nav item"
+```
+
+---
+
+## Phase 5 — Ticket Detail Panel
+
+### Task 15: Create detail subcomponents
+
+**Files:**
+- Create: `frontend/src/components/tickets/detail/TicketDetailHeader.tsx`
+- Create: `frontend/src/components/tickets/detail/TicketNotesFeed.tsx`
+- Create: `frontend/src/components/tickets/detail/TicketAddNote.tsx`
+- Create: `frontend/src/components/tickets/detail/TicketConfigs.tsx`
+- Create: `frontend/src/components/tickets/detail/TicketRelated.tsx`
+
+- [ ] **Step 1: Create TicketDetailHeader.tsx**
+
+```tsx
+// frontend/src/components/tickets/detail/TicketDetailHeader.tsx
+import { ExternalLink } from 'lucide-react'
+import type { PSATicketSearchResult } from '@/types/integrations'
+import type { PSATicketStatusUpdate } from '@/types/tickets'
+import type { PSATicketStatusItem } from '@/types/integrations'
+import { ticketsApi } from '@/api/tickets'
+import { toast } from '@/lib/toast'
+import { useState } from 'react'
+
+interface Props {
+  ticket: PSATicketSearchResult
+  statuses: PSATicketStatusItem[]
+  onStatusUpdated: (ticketId: number, newStatus: string) => void
+}
+
+export function TicketDetailHeader({ ticket, statuses, onStatusUpdated }: Props) {
+  const [updating, setUpdating] = useState(false)
+
+  async function handleStatusChange(statusId: number) {
+    if (!ticket.id) return
+    setUpdating(true)
+    try {
+      const result: PSATicketStatusUpdate = await ticketsApi.updateStatus(Number(ticket.id), statusId)
+      onStatusUpdated(result.ticket_id, result.new_status)
+      toast.success(`Status updated to ${result.new_status}`)
+    } catch {
+      toast.error('Failed to update status')
+    } finally {
+      setUpdating(false)
+    }
+  }
+
+  return (
+    <div className="p-4 border-b border-default space-y-3">
+      <div className="flex items-start justify-between gap-2">
+        <div>
+          <div className="flex items-center gap-2 mb-1">
+            <span className="text-accent text-xs font-mono">#{ticket.id}</span>
+            {ticket.board_name && (
+              <span className="text-xs text-muted-foreground">{ticket.board_name}</span>
+            )}
+          </div>
+          <h2 className="font-heading font-semibold text-heading text-base leading-snug">
+            {ticket.summary}
+          </h2>
+          {ticket.company_name && (
+            <p className="text-sm text-muted-foreground mt-0.5">{ticket.company_name}</p>
+          )}
+        </div>
+      </div>
+
+      {/* Status + Priority */}
+      <div className="flex items-center gap-2 flex-wrap">
+        {statuses.length > 0 ? (
+          <select
+            disabled={updating}
+            value={ticket.status_id ?? ''}
+            onChange={e => handleStatusChange(Number(e.target.value))}
+            className="bg-input border border-default rounded-[5px] px-2 py-1 text-xs text-primary focus:border-accent focus:outline-none"
+          >
+            {statuses.map(s => (
+              <option key={s.id} value={s.id}>{s.name}</option>
+            ))}
+          </select>
+        ) : (
+          ticket.status_name && (
+            <span className="px-2 py-0.5 bg-elevated rounded text-xs text-muted-foreground">
+              {ticket.status_name}
+            </span>
+          )
+        )}
+        {ticket.priority_name && (
+          <span className="px-2 py-0.5 bg-elevated rounded text-xs text-muted-foreground">
+            {ticket.priority_name}
+          </span>
+        )}
+      </div>
+    </div>
+  )
+}
+```
+
+- [ ] **Step 2: Create TicketNotesFeed.tsx**
+
+```tsx
+// frontend/src/components/tickets/detail/TicketNotesFeed.tsx
+import type { TicketNote } from '@/api/psaContext'
+
+interface Props { notes: TicketNote[] }
+
+export function TicketNotesFeed({ notes }: Props) {
+  if (notes.length === 0) {
+    return <p className="text-xs text-muted-foreground px-4 py-3">No notes yet.</p>
+  }
+  return (
+    <div className="divide-y divide-default">
+      {notes.map((note, i) => (
+        <div key={i} className="px-4 py-3 space-y-1">
+          <div className="flex items-center justify-between text-xs text-muted-foreground">
+            <span>{note.member ?? 'Unknown'}</span>
+            <span>{new Date(note.date_created).toLocaleDateString()}</span>
+          </div>
+          {note.internal_analysis_flag && (
+            <span className="text-[10px] uppercase tracking-wider text-warning">Internal</span>
+          )}
+          <p className="text-sm text-primary whitespace-pre-wrap">{note.text}</p>
+        </div>
+      ))}
+    </div>
+  )
+}
+```
+
+- [ ] **Step 3: Create TicketAddNote.tsx**
+
+```tsx
+// frontend/src/components/tickets/detail/TicketAddNote.tsx
+import { useState } from 'react'
+import { sessionPsaApi } from '@/api/integrations'
+import { toast } from '@/lib/toast'
+
+interface Props {
+  ticketId: string
+  sessionId?: string
+  onPosted: () => void
+}
+
+export function TicketAddNote({ ticketId, sessionId, onPosted }: Props) {
+  const [text, setText] = useState('')
+  const [noteType, setNoteType] = useState<'internal_analysis' | 'description'>('internal_analysis')
+  const [posting, setPosting] = useState(false)
+
+  // Note posting requires a session link — if no session, show info
+  if (!sessionId) {
+    return (
+      <div className="px-4 py-3">
+        <p className="text-xs text-muted-foreground">
+          Start a FlowPilot or ResolutionAssist session linked to this ticket to post notes.
+        </p>
+      </div>
+    )
+  }
+
+  async function handlePost() {
+    if (!text.trim()) return
+    setPosting(true)
+    try {
+      await sessionPsaApi.postToTicket(sessionId!, {
+        note_type: noteType,
+        update_status_id: undefined,
+      })
+      setText('')
+      toast.success('Note posted to ticket')
+      onPosted()
+    } catch {
+      toast.error('Failed to post note')
+    } finally {
+      setPosting(false)
+    }
+  }
+
+  return (
+    <div className="px-4 py-3 space-y-2">
+      <select
+        className="bg-input border border-default rounded-[5px] px-2 py-1 text-xs text-primary focus:border-accent focus:outline-none"
+        value={noteType}
+        onChange={e => setNoteType(e.target.value as 'internal_analysis' | 'description')}
+      >
+        <option value="internal_analysis">Internal Analysis</option>
+        <option value="description">Description</option>
+      </select>
+      <textarea
+        className="w-full bg-input border border-default rounded-[5px] px-3 py-2 text-sm text-primary placeholder:text-muted-foreground focus:border-accent focus:outline-none resize-none"
+        rows={3}
+        placeholder="Add a note to this ticket…"
+        value={text}
+        onChange={e => setText(e.target.value)}
+      />
+      <button
+        disabled={!text.trim() || posting}
+        onClick={handlePost}
+        className="px-3 py-1.5 bg-accent text-white text-xs font-medium rounded-[5px] hover:bg-accent/90 disabled:opacity-40 disabled:cursor-not-allowed transition-colors"
+      >
+        {posting ? 'Posting…' : 'Post Note'}
+      </button>
+    </div>
+  )
+}
+```
+
+- [ ] **Step 4: Create TicketConfigs.tsx**
+
+```tsx
+// frontend/src/components/tickets/detail/TicketConfigs.tsx
+import type { ConfigItemInfo } from '@/api/psaContext'
+
+interface Props { configs: ConfigItemInfo[] }
+
+export function TicketConfigs({ configs }: Props) {
+  if (configs.length === 0) return null
+  return (
+    <div className="px-4 py-3 space-y-2">
+      <h4 className="text-xs uppercase tracking-wider text-muted-foreground font-semibold">
+        Configurations
+      </h4>
+      {configs.map((c, i) => (
+        <div key={i} className="bg-elevated rounded border border-default p-2 text-xs space-y-0.5">
+          <div className="font-medium text-primary">{c.device_identifier}</div>
+          <div className="text-muted-foreground">
+            {[c.type, c.os_type, c.ip_address].filter(Boolean).join(' · ')}
+          </div>
+        </div>
+      ))}
+    </div>
+  )
+}
+```
+
+- [ ] **Step 5: Create TicketRelated.tsx**
+
+```tsx
+// frontend/src/components/tickets/detail/TicketRelated.tsx
+import type { RelatedTicket } from '@/api/psaContext'
+
+interface Props {
+  related: RelatedTicket[]
+  onSelect: (id: number) => void
+}
+
+export function TicketRelated({ related, onSelect }: Props) {
+  if (related.length === 0) return null
+  return (
+    <div className="px-4 py-3 space-y-2">
+      <h4 className="text-xs uppercase tracking-wider text-muted-foreground font-semibold">
+        Related Tickets
+      </h4>
+      {related.map(r => (
+        <button
+          key={r.id}
+          onClick={() => onSelect(r.id)}
+          className="w-full text-left bg-elevated rounded border border-default p-2 hover:border-hover transition-colors text-xs space-y-0.5"
+        >
+          <div className="flex items-center justify-between">
+            <span className="text-accent font-mono">#{r.id}</span>
+            <span className="text-muted-foreground">{r.status}</span>
+          </div>
+          <div className="text-primary truncate">{r.summary}</div>
+        </button>
+      ))}
+    </div>
+  )
+}
+```
+
+- [ ] **Step 6: Commit**
+
+```bash
+git add frontend/src/components/tickets/detail/
+git commit -m "feat(tickets): add ticket detail subcomponents (header, notes, configs, related)"
+```
+
+---
+
+### Task 16: Create TicketResourceManager.tsx + TicketDetailPanel.tsx
+
+**Files:**
+- Create: `frontend/src/components/tickets/detail/TicketResourceManager.tsx`
+- Create: `frontend/src/components/tickets/TicketDetailPanel.tsx`
+
+- [ ] **Step 1: Create TicketResourceManager.tsx**
+
+```tsx
+// frontend/src/components/tickets/detail/TicketResourceManager.tsx
+import { useState } from 'react'
+import { UserPlus, X, User } from 'lucide-react'
+import { ticketsApi } from '@/api/tickets'
+import { toast } from '@/lib/toast'
+import type { PSAResource } from '@/types/tickets'
+import type { PsaMemberResponse } from '@/types/integrations'
+import { cn } from '@/lib/utils'
+
+interface Props {
+  ticketId: number
+  resources: PSAResource[]
+  allMembers: PsaMemberResponse[]
+  onChanged: () => void
+}
+
+export function TicketResourceManager({ ticketId, resources, allMembers, onChanged }: Props) {
+  const [adding, setAdding] = useState(false)
+  const [selectedMemberId, setSelectedMemberId] = useState<string>('')
+  const [busy, setBusy] = useState<number | null>(null)
+
+  async function handleAdd() {
+    if (!selectedMemberId) return
+    setBusy(Number(selectedMemberId))
+    try {
+      await ticketsApi.addResource(ticketId, Number(selectedMemberId))
+      toast.success('Resource added')
+      setAdding(false)
+      setSelectedMemberId('')
+      onChanged()
+    } catch {
+      toast.error('Failed to add resource')
+    } finally {
+      setBusy(null)
+    }
+  }
+
+  async function handleRemove(memberId: number) {
+    setBusy(memberId)
+    try {
+      await ticketsApi.removeResource(ticketId, memberId)
+      toast.success('Resource removed')
+      onChanged()
+    } catch {
+      toast.error('Failed to remove resource')
+    } finally {
+      setBusy(null)
+    }
+  }
+
+  const assignedIds = new Set(resources.map(r => r.member_id))
+
+  return (
+    <div className="px-4 py-3 space-y-2">
+      <div className="flex items-center justify-between">
+        <h4 className="text-xs uppercase tracking-wider text-muted-foreground font-semibold">
+          Resources
+        </h4>
+        <button
+          onClick={() => setAdding(!adding)}
+          className="flex items-center gap-1 text-xs text-accent hover:text-accent/80 transition-colors"
+        >
+          <UserPlus className="w-3.5 h-3.5" /> Assign
+        </button>
+      </div>
+
+      {/* Add member selector */}
+      {adding && (
+        <div className="flex gap-2">
+          <select
+            className="flex-1 bg-input border border-default rounded-[5px] px-2 py-1 text-xs text-primary focus:border-accent focus:outline-none"
+            value={selectedMemberId}
+            onChange={e => setSelectedMemberId(e.target.value)}
+          >
+            <option value="">Select member…</option>
+            {allMembers
+              .filter(m => !assignedIds.has(Number(m.id)))
+              .map(m => (
+                <option key={m.id} value={m.id}>
+                  {m.name} {/* is_rf_user badge handled below */}
+                </option>
+              ))}
+          </select>
+          <button
+            onClick={handleAdd}
+            disabled={!selectedMemberId || busy !== null}
+            className="px-2 py-1 bg-accent text-white text-xs rounded-[5px] disabled:opacity-40"
+          >
+            Add
+          </button>
+        </div>
+      )}
+
+      {/* Current resources */}
+      {resources.length === 0 ? (
+        <p className="text-xs text-muted-foreground">No resources assigned.</p>
+      ) : (
+        <div className="space-y-1">
+          {resources.map(r => (
+            <div key={r.member_id} className="flex items-center justify-between">
+              <div className="flex items-center gap-1.5 text-xs text-primary">
+                <User className="w-3 h-3 text-muted-foreground" />
+                {r.member_name}
+                {r.is_rf_user && (
+                  <span className="px-1 py-0.5 bg-accent/10 text-accent rounded text-[10px] font-medium">
+                    RF
+                  </span>
+                )}
+              </div>
+              <button
+                onClick={() => handleRemove(r.member_id)}
+                disabled={busy === r.member_id}
+                className={cn(
+                  'text-muted-foreground hover:text-danger transition-colors',
+                  busy === r.member_id && 'opacity-40'
+                )}
+              >
+                <X className="w-3.5 h-3.5" />
+              </button>
+            </div>
+          ))}
+        </div>
+      )}
+    </div>
+  )
+}
+```
+
+- [ ] **Step 2: Create TicketDetailPanel.tsx**
+
+```tsx
+// frontend/src/components/tickets/TicketDetailPanel.tsx
+import { useEffect, useState } from 'react'
+import { X, Loader2 } from 'lucide-react'
+import { psaContextApi } from '@/api/psaContext'
+import { integrationsApi } from '@/api/integrations'
+import { ticketsApi } from '@/api/tickets'
+import { TicketDetailHeader } from './detail/TicketDetailHeader'
+import { TicketResourceManager } from './detail/TicketResourceManager'
+import { TicketNotesFeed } from './detail/TicketNotesFeed'
+import { TicketAddNote } from './detail/TicketAddNote'
+import { TicketConfigs } from './detail/TicketConfigs'
+import { TicketRelated } from './detail/TicketRelated'
+import type { PSATicketSearchResult, PSATicketStatusItem, PsaMemberResponse } from '@/types/integrations'
+import type { PSAResource } from '@/types/tickets'
+import type { TicketContext } from '@/api/psaContext'
+
+interface Props {
+  ticket: PSATicketSearchResult
+  onClose: () => void
+  onStatusUpdated?: (ticketId: number, newStatus: string) => void
+}
+
+export function TicketDetailPanel({ ticket, onClose, onStatusUpdated }: Props) {
+  const [context, setContext] = useState<TicketContext | null>(null)
+  const [resources, setResources] = useState<PSAResource[]>([])
+  const [allMembers, setAllMembers] = useState<PsaMemberResponse[]>([])
+  const [statuses, setStatuses] = useState<PSATicketStatusItem[]>([])
+  const [contextLoading, setContextLoading] = useState(true)
+  const [resourcesLoading, setResourcesLoading] = useState(true)
+
+  const ticketIdNum = Number(ticket.id)
+
+  function loadResources() {
+    ticketsApi.listResources(ticketIdNum)
+      .then(setResources)
+      .catch(() => {})
+      .finally(() => setResourcesLoading(false))
+  }
+
+  useEffect(() => {
+    setContextLoading(true)
+    setResourcesLoading(true)
+    setContext(null)
+    setResources([])
+
+    // Parallel: context + resources + members + statuses
+    Promise.all([
+      psaContextApi.getTicketContext(ticketIdNum)
+        .then(setContext)
+        .finally(() => setContextLoading(false)),
+      ticketsApi.listResources(ticketIdNum)
+        .then(setResources)
+        .finally(() => setResourcesLoading(false)),
+      integrationsApi.listMembers().then(setAllMembers).catch(() => {}),
+      ticket.board_id
+        ? integrationsApi.getTicketStatuses(String(ticket.board_id)).then(setStatuses).catch(() => {})
+        : Promise.resolve(),
+    ])
+  }, [ticket.id])
+
+  function Skeleton() {
+    return (
+      <div className="px-4 py-3 space-y-2 animate-pulse">
+        <div className="h-3 w-3/4 bg-elevated rounded" />
+        <div className="h-3 w-1/2 bg-elevated rounded" />
+      </div>
+    )
+  }
+
+  return (
+    <div className="flex flex-col h-full">
+      {/* Panel header */}
+      <div className="flex items-center justify-between px-4 py-3 border-b border-default shrink-0">
+        <span className="text-xs text-muted-foreground uppercase tracking-wider font-semibold">
+          Ticket Detail
+        </span>
+        <button onClick={onClose} className="text-muted-foreground hover:text-primary transition-colors">
+          <X className="w-4 h-4" />
+        </button>
+      </div>
+
+      {/* Scrollable content */}
+      <div className="flex-1 overflow-y-auto divide-y divide-default">
+        {/* Header — uses list row data immediately, no wait */}
+        <TicketDetailHeader
+          ticket={ticket}
+          statuses={statuses}
+          onStatusUpdated={(id, status) => {
+            onStatusUpdated?.(id, status)
+          }}
+        />
+
+        {/* Contact info */}
+        {contextLoading ? (
+          <Skeleton />
+        ) : context?.contact ? (
+          <div className="px-4 py-3 space-y-0.5">
+            <h4 className="text-xs uppercase tracking-wider text-muted-foreground font-semibold mb-1">
+              Contact
+            </h4>
+            <p className="text-sm text-primary">{context.contact.name}</p>
+            {context.contact.email && (
+              <p className="text-xs text-muted-foreground">{context.contact.email}</p>
+            )}
+            {context.contact.phone && (
+              <p className="text-xs text-muted-foreground">{context.contact.phone}</p>
+            )}
+          </div>
+        ) : null}
+
+        {/* Resources */}
+        {resourcesLoading ? (
+          <Skeleton />
+        ) : (
+          <TicketResourceManager
+            ticketId={ticketIdNum}
+            resources={resources}
+            allMembers={allMembers}
+            onChanged={loadResources}
+          />
+        )}
+
+        {/* Notes */}
+        {contextLoading ? (
+          <Skeleton />
+        ) : (
+          <div>
+            <div className="px-4 pt-3 pb-1">
+              <h4 className="text-xs uppercase tracking-wider text-muted-foreground font-semibold">
+                Notes
+              </h4>
+            </div>
+            <TicketNotesFeed notes={context?.notes ?? []} />
+            <TicketAddNote ticketId={ticket.id} onPosted={() => {
+              psaContextApi.getTicketContext(ticketIdNum).then(setContext).catch(() => {})
+            }} />
+          </div>
+        )}
+
+        {/* Configs */}
+        {!contextLoading && context?.configurations && context.configurations.length > 0 && (
+          <TicketConfigs configs={context.configurations} />
+        )}
+
+        {/* Related */}
+        {!contextLoading && context?.related_tickets && context.related_tickets.length > 0 && (
+          <TicketRelated
+            related={context.related_tickets}
+            onSelect={(id) => {
+              // Navigate to the related ticket by updating parent selection
+              // Parent handles this by looking it up in the list
+              window.dispatchEvent(new CustomEvent('select-ticket', { detail: id }))
+            }}
+          />
+        )}
+      </div>
+    </div>
+  )
+}
+```
+
+- [ ] **Step 3: Commit**
+
+```bash
+git add frontend/src/components/tickets/detail/TicketResourceManager.tsx \
+  frontend/src/components/tickets/TicketDetailPanel.tsx
+git commit -m "feat(tickets): add TicketResourceManager and TicketDetailPanel with optimistic hydration"
+```
+
+---
+
+## Phase 6 — New Ticket Modal
+
+### Task 17: Create AiTicketParseForm.tsx + NewTicketModal.tsx
+
+**Files:**
+- Create: `frontend/src/components/tickets/AiTicketParseForm.tsx`
+- Create: `frontend/src/components/tickets/NewTicketModal.tsx`
+
+- [ ] **Step 1: Create AiTicketParseForm.tsx**
+
+```tsx
+// frontend/src/components/tickets/AiTicketParseForm.tsx
+import { useState } from 'react'
+import { Sparkles, Loader2 } from 'lucide-react'
+import { ticketsApi } from '@/api/tickets'
+import type { AiParseResponse, TicketCreationPayload } from '@/types/tickets'
+
+interface Props {
+  initialHint?: string
+  onParsed: (values: Partial<TicketCreationPayload>, parseResponse: AiParseResponse) => void
+}
+
+export function AiTicketParseForm({ initialHint = '', onParsed }: Props) {
+  const [prompt, setPrompt] = useState(initialHint)
+  const [loading, setLoading] = useState(false)
+  const [error, setError] = useState<string | null>(null)
+
+  async function handleParse() {
+    if (!prompt.trim()) return
+    setLoading(true)
+    setError(null)
+    try {
+      const result = await ticketsApi.aiParse(prompt)
+      const values: Partial<TicketCreationPayload> = {
+        summary: result.summary ?? undefined,
+        company_id: result.company_id,
+        board_id: result.board_id,
+        status_id: result.status_id,
+        priority_id: result.priority_id,
+        assigned_member_id: result.assigned_member_id,
+        description: result.description ?? undefined,
+      }
+      onParsed(values, result)
+    } catch {
+      setError('AI parsing failed. Please try again or use the full form.')
+    } finally {
+      setLoading(false)
+    }
+  }
+
+  return (
+    <div className="space-y-3">
+      <p className="text-sm text-muted-foreground">
+        Describe the ticket in plain language — who, what, which client, and priority.
+      </p>
+      <textarea
+        className="w-full bg-input border border-default rounded-[5px] px-3 py-2 text-sm text-primary placeholder:text-muted-foreground focus:border-accent focus:outline-none resize-none"
+        rows={4}
+        placeholder="e.g. Create a high priority ticket for Acme Corp — Outlook not syncing for jsmith, assign to me"
+        value={prompt}
+        onChange={e => setPrompt(e.target.value)}
+      />
+      {error && <p className="text-xs text-danger">{error}</p>}
+      <button
+        onClick={handleParse}
+        disabled={!prompt.trim() || loading}
+        className="flex items-center gap-1.5 px-4 py-2 bg-accent text-white text-sm font-medium rounded-[5px] hover:bg-accent/90 disabled:opacity-40 disabled:cursor-not-allowed transition-colors"
+      >
+        {loading ? <Loader2 className="w-4 h-4 animate-spin" /> : <Sparkles className="w-4 h-4" />}
+        {loading ? 'Parsing…' : 'Parse with AI'}
+      </button>
+    </div>
+  )
+}
+```
+
+- [ ] **Step 2: Create NewTicketModal.tsx**
+
+```tsx
+// frontend/src/components/tickets/NewTicketModal.tsx
+import { useState, useEffect } from 'react'
+import { X, AlertCircle } from 'lucide-react'
+import { ticketsApi } from '@/api/tickets'
+import { integrationsApi } from '@/api/integrations'
+import { AiTicketParseForm } from './AiTicketParseForm'
+import { toast } from '@/lib/toast'
+import { cn } from '@/lib/utils'
+import type { TicketCreationPayload, AiParseResponse, PSAPriority } from '@/types/tickets'
+import type { PSABoard, PSATicketStatusItem } from '@/types/integrations'
+
+interface Props {
+  defaultTab?: 'quick' | 'manual'
+  initialValues?: Partial<TicketCreationPayload>
+  summaryHint?: string
+  onClose: () => void
+  onCreated: (ticketId: number, summary: string) => void
+}
+
+const EMPTY_DRAFT: TicketCreationPayload = {
+  summary: '',
+  company_id: null,
+  board_id: null,
+  status_id: null,
+  priority_id: null,
+  description: '',
+  assigned_member_id: null,
+}
+
+export function NewTicketModal({ defaultTab = 'quick', initialValues, summaryHint, onClose, onCreated }: Props) {
+  const [tab, setTab] = useState<'quick' | 'manual'>(defaultTab)
+  const [draft, setDraft] = useState<TicketCreationPayload>({ ...EMPTY_DRAFT, ...initialValues })
+  const [missingFields, setMissingFields] = useState<string[]>([])
+  const [warnings, setWarnings] = useState<string[]>([])
+  const [boards, setBoards] = useState<PSABoard[]>([])
+  const [statuses, setStatuses] = useState<PSATicketStatusItem[]>([])
+  const [priorities, setPriorities] = useState<PSAPriority[]>([])
+  const [submitting, setSubmitting] = useState(false)
+  const [parsed, setParsed] = useState(false)
+
+  useEffect(() => {
+    integrationsApi.listBoards().then(setBoards).catch(() => {})
+    ticketsApi.listPriorities().then(setPriorities).catch(() => {})
+  }, [])
+
+  useEffect(() => {
+    if (draft.board_id) {
+      integrationsApi.getTicketStatuses(String(draft.board_id))
+        .then(setStatuses).catch(() => {})
+    } else {
+      setStatuses([])
+    }
+  }, [draft.board_id])
+
+  function handleParsed(values: Partial<TicketCreationPayload>, result: AiParseResponse) {
+    setDraft(prev => ({ ...prev, ...values }))
+    setMissingFields(result.missing_fields)
+    setWarnings(result.warnings)
+    setParsed(true)
+  }
+
+  function updateDraft(field: keyof TicketCreationPayload, value: unknown) {
+    setDraft(prev => ({ ...prev, [field]: value }))
+    setMissingFields(prev => prev.filter(f => f !== field))
+  }
+
+  async function handleSubmit() {
+    if (!draft.summary.trim() || !draft.company_id || !draft.board_id || !draft.status_id || !draft.priority_id) {
+      toast.warning('Please fill in all required fields')
+      return
+    }
+    setSubmitting(true)
+    try {
+      const result = await ticketsApi.createTicket(draft)
+      toast.success(`Ticket #${result.id} created in ConnectWise`)
+      onCreated(result.id, result.summary)
+    } catch {
+      toast.error('Failed to create ticket')
+    } finally {
+      setSubmitting(false)
+    }
+  }
+
+  const requiredMissing = (f: string) => missingFields.includes(f)
+
+  return (
+    <div className="fixed inset-0 z-50 flex items-end sm:items-center justify-center">
+      <div className="fixed inset-0 bg-black/50" onClick={onClose} />
+      <div className="relative z-10 bg-card border border-default rounded-lg w-full max-w-lg max-h-[90vh] flex flex-col shadow-xl">
+        {/* Header */}
+        <div className="flex items-center justify-between px-5 py-4 border-b border-default shrink-0">
+          <h2 className="font-heading font-semibold text-heading">New Ticket</h2>
+          <button onClick={onClose} className="text-muted-foreground hover:text-primary transition-colors">
+            <X className="w-4 h-4" />
+          </button>
+        </div>
+
+        {/* Tabs */}
+        <div className="flex border-b border-default shrink-0">
+          {(['quick', 'manual'] as const).map(t => (
+            <button
+              key={t}
+              onClick={() => setTab(t)}
+              className={cn(
+                'flex-1 py-2.5 text-sm font-medium transition-colors',
+                tab === t
+                  ? 'text-accent border-b-2 border-accent'
+                  : 'text-muted-foreground hover:text-primary'
+              )}
+            >
+              {t === 'quick' ? 'Quick Create (AI)' : 'Full Form'}
+            </button>
+          ))}
+        </div>
+
+        {/* Content */}
+        <div className="flex-1 overflow-y-auto p-5 space-y-4">
+          {/* Warnings */}
+          {warnings.length > 0 && (
+            <div className="flex gap-2 bg-warning/10 border border-warning/30 rounded p-3">
+              <AlertCircle className="w-4 h-4 text-warning shrink-0 mt-0.5" />
+              <ul className="text-xs text-warning space-y-0.5">
+                {warnings.map((w, i) => <li key={i}>{w}</li>)}
+              </ul>
+            </div>
+          )}
+
+          {/* Quick Create tab */}
+          {tab === 'quick' && !parsed && (
+            <AiTicketParseForm initialHint={summaryHint} onParsed={handleParsed} />
+          )}
+
+          {/* Form — shown after parse OR in manual tab */}
+          {(tab === 'manual' || parsed) && (
+            <div className="space-y-3">
+              {/* Summary */}
+              <div>
+                <label className="text-xs text-muted-foreground uppercase tracking-wider font-semibold block mb-1">
+                  Summary *
+                </label>
+                <input
+                  className={cn(
+                    'w-full bg-input border rounded-[5px] px-3 py-2 text-sm text-primary placeholder:text-muted-foreground focus:outline-none focus:border-accent',
+                    requiredMissing('summary') ? 'border-warning' : 'border-default'
+                  )}
+                  placeholder="Short ticket title"
+                  value={draft.summary}
+                  onChange={e => updateDraft('summary', e.target.value)}
+                />
+              </div>
+
+              {/* Board */}
+              <div>
+                <label className="text-xs text-muted-foreground uppercase tracking-wider font-semibold block mb-1">
+                  Board *
+                </label>
+                <select
+                  className={cn(
+                    'w-full bg-input border rounded-[5px] px-3 py-2 text-sm text-primary focus:outline-none focus:border-accent',
+                    requiredMissing('board_id') ? 'border-warning' : 'border-default'
+                  )}
+                  value={draft.board_id ?? ''}
+                  onChange={e => updateDraft('board_id', e.target.value ? Number(e.target.value) : null)}
+                >
+                  <option value="">Select board…</option>
+                  {boards.map(b => <option key={b.id} value={b.id}>{b.name}</option>)}
+                </select>
+              </div>
+
+              {/* Status */}
+              <div>
+                <label className="text-xs text-muted-foreground uppercase tracking-wider font-semibold block mb-1">
+                  Status *
+                </label>
+                <select
+                  disabled={statuses.length === 0}
+                  className={cn(
+                    'w-full bg-input border rounded-[5px] px-3 py-2 text-sm text-primary focus:outline-none focus:border-accent disabled:opacity-50',
+                    requiredMissing('status_id') ? 'border-warning' : 'border-default'
+                  )}
+                  value={draft.status_id ?? ''}
+                  onChange={e => updateDraft('status_id', e.target.value ? Number(e.target.value) : null)}
+                >
+                  <option value="">{draft.board_id ? 'Select status…' : 'Select board first'}</option>
+                  {statuses.map(s => <option key={s.id} value={s.id}>{s.name}</option>)}
+                </select>
+              </div>
+
+              {/* Priority */}
+              <div>
+                <label className="text-xs text-muted-foreground uppercase tracking-wider font-semibold block mb-1">
+                  Priority *
+                </label>
+                <select
+                  className={cn(
+                    'w-full bg-input border rounded-[5px] px-3 py-2 text-sm text-primary focus:outline-none focus:border-accent',
+                    requiredMissing('priority_id') ? 'border-warning' : 'border-default'
+                  )}
+                  value={draft.priority_id ?? ''}
+                  onChange={e => updateDraft('priority_id', e.target.value ? Number(e.target.value) : null)}
+                >
+                  <option value="">Select priority…</option>
+                  {priorities.map(p => <option key={p.id} value={p.id}>{p.name}</option>)}
+                </select>
+              </div>
+
+              {/* Company ID (numeric — engineer enters manually for now) */}
+              <div>
+                <label className="text-xs text-muted-foreground uppercase tracking-wider font-semibold block mb-1">
+                  Company ID *
+                </label>
+                <input
+                  type="number"
+                  className={cn(
+                    'w-full bg-input border rounded-[5px] px-3 py-2 text-sm text-primary placeholder:text-muted-foreground focus:outline-none focus:border-accent',
+                    requiredMissing('company_id') ? 'border-warning' : 'border-default'
+                  )}
+                  placeholder="ConnectWise company ID"
+                  value={draft.company_id ?? ''}
+                  onChange={e => updateDraft('company_id', e.target.value ? Number(e.target.value) : null)}
+                />
+              </div>
+
+              {/* Description */}
+              <div>
+                <label className="text-xs text-muted-foreground uppercase tracking-wider font-semibold block mb-1">
+                  Description
+                </label>
+                <textarea
+                  className="w-full bg-input border border-default rounded-[5px] px-3 py-2 text-sm text-primary placeholder:text-muted-foreground focus:outline-none focus:border-accent resize-none"
+                  rows={3}
+                  placeholder="Detailed description…"
+                  value={draft.description}
+                  onChange={e => updateDraft('description', e.target.value)}
+                />
+              </div>
+            </div>
+          )}
+        </div>
+
+        {/* Footer */}
+        {(tab === 'manual' || parsed) && (
+          <div className="flex items-center justify-end gap-2 px-5 py-4 border-t border-default shrink-0">
+            <button
+              onClick={onClose}
+              className="px-4 py-2 text-sm text-muted-foreground hover:text-primary transition-colors"
+            >
+              Cancel
+            </button>
+            <button
+              onClick={handleSubmit}
+              disabled={submitting}
+              className="px-4 py-2 bg-accent text-white text-sm font-medium rounded-[5px] hover:bg-accent/90 disabled:opacity-40 transition-colors"
+            >
+              {submitting ? 'Creating…' : 'Create Ticket'}
+            </button>
+          </div>
+        )}
+      </div>
+    </div>
+  )
+}
+```
+
+- [ ] **Step 3: Commit**
+
+```bash
+git add frontend/src/components/tickets/AiTicketParseForm.tsx \
+  frontend/src/components/tickets/NewTicketModal.tsx
+git commit -m "feat(tickets): add AiTicketParseForm and NewTicketModal with two-tab creation flow"
+```
+
+---
+
+## Phase 7 — ResolutionAssist Integration
+
+### Task 18: Update AssistantChatPage.tsx
+
+**Files:**
+- Modify: `frontend/src/pages/AssistantChatPage.tsx`
+
+- [ ] **Step 1: Add linkedTicket state**
+
+Find `const [activePsaTicketId, setActivePsaTicketId] = useState<string | null>(null)` (line 76) and add below it:
+
+```typescript
+const [linkedTicket, setLinkedTicket] = useState<PSATicketInfo | null>(null)
+```
+
+Add `PSATicketInfo` to the existing integrations type imports.
+
+- [ ] **Step 2: Populate linkedTicket when activePsaTicketId is set**
+
+Find where `setActivePsaTicketId(detail.psa_ticket_id)` is called (line 241) and add:
+
+```typescript
+setActivePsaTicketId(detail.psa_ticket_id)
+// Fetch full ticket info (includes company_id and board_id) when a ticket is linked
+if (detail.psa_ticket_id) {
+  integrationsApi.getTicket(detail.psa_ticket_id)
+    .then(setLinkedTicket)
+    .catch(() => {})
+} else {
+  setLinkedTicket(null)
+}
+```
+
+- [ ] **Step 3: Add showNewTicket state and New Ticket button**
+
+Add state:
+```typescript
+const [showNewTicket, setShowNewTicket] = useState(false)
+const [spinOffHint, setSpinOffHint] = useState<string | undefined>(undefined)
+```
+
+Find the ResolutionAssist session header area (near the `activePsaTicketId` usage and `updateLabel` at line 687) and add a "New Ticket" button:
+
+```tsx
+{/* New Ticket button — visible when PSA connected */}
+{activePsaTicketId && (
+  <button
+    onClick={() => { setSpinOffHint(undefined); setShowNewTicket(true) }}
+    className="flex items-center gap-1 px-2 py-1 text-xs text-muted-foreground border border-default rounded-[5px] hover:border-hover hover:text-primary transition-colors"
+  >
+    <Plus className="w-3 h-3" /> New Ticket
+  </button>
+)}
+```
+
+Add `Plus` to the Lucide imports.
+
+- [ ] **Step 4: Handle create_spin_off_ticket action in TaskLane action renderer**
+
+Find where actions are rendered in `AssistantChatPage.tsx` — the TaskLane section. Actions currently render generically. Add a handler for `create_spin_off_ticket`:
+
+In the action button click handler (where `action.command` is used), add:
+
+```typescript
+if (action.command === 'create_spin_off_ticket') {
+  setSpinOffHint(action.description || action.label)
+  setShowNewTicket(true)
+  return
+}
+```
+
+- [ ] **Step 5: Render NewTicketModal at bottom of AssistantChatPage**
+
+At the bottom of the JSX return, before the closing `</div>`, add:
+
+```tsx
+{showNewTicket && (
+  <NewTicketModal
+    defaultTab={spinOffHint ? 'quick' : 'manual'}
+    summaryHint={spinOffHint}
+    initialValues={linkedTicket ? {
+      company_id: linkedTicket.company_id ?? undefined,
+      board_id: linkedTicket.board_id ?? undefined,
+    } : undefined}
+    onClose={() => setShowNewTicket(false)}
+    onCreated={(ticketId, summary) => {
+      setShowNewTicket(false)
+      toast.success(`Ticket #${ticketId} created: ${summary}`)
+      // Remove create_spin_off_ticket action from active actions
+      setActiveActions(prev => prev.filter(a => a.command !== 'create_spin_off_ticket'))
+    }}
+  />
+)}
+```
+
+Import `NewTicketModal` from `@/components/tickets/NewTicketModal`.
+
+- [ ] **Step 6: Verify tsc compiles cleanly**
+
+```bash
+cd frontend && npx tsc -b 2>&1 | head -30
+```
+
+Expected: no errors.
+
+- [ ] **Step 7: Commit**
+
+```bash
+git add frontend/src/pages/AssistantChatPage.tsx
+git commit -m "feat(tickets): add spin-off ticket creation in ResolutionAssist — state, action handler, modal"
+```
+
+---
+
+## Phase 8 — Dashboard TicketQueue Update
+
+### Task 19: Update TicketQueue.tsx
+
+**Files:**
+- Modify: `frontend/src/components/dashboard/TicketQueue.tsx`
+
+- [ ] **Step 1: Add member-mapping detection**
+
+At the top of the `TicketQueue` component body, add:
+
+```typescript
+const [hasMemberMapping, setHasMemberMapping] = useState<boolean | null>(null) // null = loading
+
+useEffect(() => {
+  integrationsApi.getMemberMappings()
+    .then(mappings => {
+      // Check if current user has a mapping
+      setHasMemberMapping(mappings.length > 0)
+    })
+    .catch(() => setHasMemberMapping(false))
+}, [])
+```
+
+Import `getMemberMappings` from `integrationsApi` (already available).
+
+- [ ] **Step 2: Replace existing "mine" tab fetch with 5-item capped queue**
+
+The current `TicketQueue` fetches via `searchTicketsQueue`. Update it to:
+1. Only fetch when `hasMemberMapping === true`
+2. Use `page_size: 5`
+3. Read `.items` from the response (after the return type update from Task 10)
+4. Show the "no mapping" prompt when `hasMemberMapping === false`
+
+Find the fetch effect for the "mine" tab and update:
+
+```typescript
+useEffect(() => {
+  if (!connection || hasMemberMapping === null) return
+  if (hasMemberMapping === false) return // show prompt instead
+  
+  // ... existing fetch logic, but ensure page_size: 5 and read .items
+  integrationsApi.searchTicketsQueue({
+    assigned_to_me: true,
+    include_closed: false,
+    page_size: 5,
+    board_ids: selectedBoardIds.join(','),
+  }).then(result => {
+    setTickets(result.items)  // was: setTickets(result)
+  }).catch(() => setTickets([]))
+}, [connection, hasMemberMapping, selectedBoardIds])
+```
+
+- [ ] **Step 3: Add mapping prompt state render**
+
+Find where the component returns JSX for the "mine" tab and add a state for `hasMemberMapping === false`:
+
+```tsx
+{activeTab === 'mine' && hasMemberMapping === false && (
+  <div className="px-5 py-6 text-center">
+    <p className="text-sm text-muted-foreground">
+      <Link to="/account/integrations" className="text-accent hover:underline">
+        Map your PSA member
+      </Link>{' '}
+      to see your ticket queue.
+    </p>
+  </div>
+)}
+```
+
+- [ ] **Step 4: Add "View All Tickets" link**
+
+At the bottom of the ticket list (before pagination or after the last ticket row), add:
+
+```tsx
+{tickets.length > 0 && (
+  <div className="px-5 py-3 border-t border-default">
+    <Link
+      to="/tickets?assigned=me"
+      className="text-xs text-accent hover:text-accent/80 transition-colors"
+    >
+      View all tickets →
+    </Link>
+  </div>
+)}
+```
+
+Import `Link` from `react-router-dom` if not already imported.
+
+- [ ] **Step 5: Verify tsc**
+
+```bash
+cd frontend && npx tsc -b 2>&1 | head -30
+```
+
+Expected: no errors.
+
+- [ ] **Step 6: Commit**
+
+```bash
+git add frontend/src/components/dashboard/TicketQueue.tsx
+git commit -m "feat(tickets): update TicketQueue with mapping detection, 5-item cap, View All link"
+```
+
+---
+
+## Phase 9 — Final validation
+
+### Task 20: Build check + smoke test
+
+- [ ] **Step 1: Run backend tests**
+
+```bash
+cd backend && pytest tests/test_psa_tickets.py tests/test_psa_connections.py -v --override-ini="addopts="
+```
+
+Expected: all pass.
+
+- [ ] **Step 2: Run frontend build**
+
+```bash
+cd frontend && npx tsc -b && echo "TypeScript OK"
+```
+
+Expected: `TypeScript OK` with no errors.
+
+- [ ] **Step 3: Manual smoke test checklist**
+
+With backend + frontend running (`uvicorn app.main:app --reload` + `npm run dev`):
+
+1. Navigate to `/tickets` — page loads, filter bar visible, ticket list empty (no PSA connection is fine)
+2. Click "New Ticket" — modal opens with two tabs
+3. In Quick Create tab, type a description and click "Parse with AI" — form fills in
+4. Switch to Full Form tab — fields all present
+5. Go to dashboard — TicketQueue renders without errors
+6. Open ResolutionAssist — "New Ticket" button visible in header when ticket linked
+
+- [ ] **Step 4: Final commit**
+
+```bash
+git add -A
+git commit -m "feat(psa): PSA ticket management complete — Tickets page, detail panel, creation modal, RA integration"
+```
-- 
2.49.1


From 60851b400a5fd182577e34c5b7f1eeb33bbfc2b9 Mon Sep 17 00:00:00 2001
From: Michael Chihlas <michael@resolutionflow.com>
Date: Thu, 16 Apr 2026 21:03:00 +0000
Subject: [PATCH 33/36] fix(tickets): status filter dropdown and CW resource
 assignment
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- Status filter: aggregate statuses across all boards (deduped by name)
  when no board is selected. Backend accepts status_name and filters by
  status/name so the same status matches across boards.
- Resource assignment: CW has no /service/tickets/{id}/members endpoint —
  assignees live in the ticket's comma-separated `resources` string field.
  Rewrote list/add/remove to read/PATCH that field via member identifier.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
---
 backend/app/api/endpoints/integrations.py     |  2 +
 .../app/services/psa/connectwise/provider.py  | 97 +++++++++++++------
 frontend/src/api/tickets.ts                   |  1 +
 frontend/src/pages/TicketsPage.tsx            | 34 ++++++-
 4 files changed, 101 insertions(+), 33 deletions(-)

diff --git a/backend/app/api/endpoints/integrations.py b/backend/app/api/endpoints/integrations.py
index 3f8b28d4..40346b43 100644
--- a/backend/app/api/endpoints/integrations.py
+++ b/backend/app/api/endpoints/integrations.py
@@ -389,6 +389,7 @@ async def search_tickets(
     query: str = "",
     board_id: int | None = None,
     status_id: int | None = None,
+    status_name: str | None = None,
     include_closed: bool = False,
     assigned_to_me: bool = False,
     unassigned: bool = False,
@@ -448,6 +449,7 @@ async def search_tickets(
             query,
             board_id=board_id,
             status_id=status_id,
+            status_name=status_name,
             include_closed=include_closed,
             member_identifier=member_identifier,
             unassigned=unassigned,
diff --git a/backend/app/services/psa/connectwise/provider.py b/backend/app/services/psa/connectwise/provider.py
index 74f338c8..7c50235d 100644
--- a/backend/app/services/psa/connectwise/provider.py
+++ b/backend/app/services/psa/connectwise/provider.py
@@ -7,6 +7,7 @@ from datetime import datetime, timezone
 
 from app.services.psa.base import PSAProvider
 from app.services.psa.cache import psa_cache
+from app.services.psa.exceptions import PSAError
 from app.services.psa.types import (
     ConnectionTestResult,
     PSATicket,
@@ -81,6 +82,9 @@ class ConnectWiseProvider(PSAProvider):
             conditions.append(f"board/id = {filters['board_id']}")
         if filters.get("status_id"):
             conditions.append(f"status/id = {filters['status_id']}")
+        elif filters.get("status_name"):
+            safe_status = str(filters["status_name"]).replace("'", "")
+            conditions.append(f"status/name = '{safe_status}'")
         if not filters.get("include_closed", False):
             conditions.append("closedFlag = false")
         if filters.get("member_identifier") is not None:
@@ -627,44 +631,81 @@ class ConnectWiseProvider(PSAProvider):
 
     # ── Resource management ───────────────────────────────────────────
 
+    async def _get_ticket_resource_identifiers(self, ticket_id: int) -> list[str]:
+        """Fetch the ticket's `resources` field (comma-separated identifiers)."""
+        data = await self.client.get(
+            f"/service/tickets/{ticket_id}",
+            params={"fields": "id,resources"},
+        )
+        raw = data.get("resources") if isinstance(data, dict) else None
+        if not raw:
+            return []
+        return [p.strip() for p in str(raw).split(",") if p.strip()]
+
     async def list_resources(self, ticket_id: int) -> list[PSAResource]:
-        """List members assigned to a CW ticket."""
-        data = await self.client.get(f"/service/tickets/{ticket_id}/members")
-        results = []
-        for m in (data if isinstance(data, list) else []):
-            member = m.get("member") or {}
-            results.append(PSAResource(
-                member_id=member.get("id", 0),
-                member_name=member.get("name", ""),
-                member_identifier=member.get("identifier", ""),
-            ))
+        """List members assigned to a CW ticket via the `resources` string field."""
+        identifiers = await self._get_ticket_resource_identifiers(ticket_id)
+        if not identifiers:
+            return []
+        members = await self.list_members()
+        by_identifier = {m.identifier: m for m in members if m.identifier}
+        results: list[PSAResource] = []
+        for ident in identifiers:
+            m = by_identifier.get(ident)
+            if m:
+                results.append(PSAResource(
+                    member_id=int(m.id),
+                    member_name=m.name,
+                    member_identifier=m.identifier,
+                ))
+            else:
+                # Unknown identifier — surface it so the UI doesn't silently drop it
+                results.append(PSAResource(
+                    member_id=0,
+                    member_name=ident,
+                    member_identifier=ident,
+                ))
         return results
 
     async def add_resource(self, ticket_id: int, member_id: int) -> PSAResource:
-        """Assign a member to a CW ticket."""
-        data = await self.client.post(
-            f"/service/tickets/{ticket_id}/members",
-            json_body={"member": {"id": member_id}},
+        """Assign a member to a CW ticket by updating the ticket's `resources` field."""
+        members = await self.list_members()
+        target = next((m for m in members if str(m.id) == str(member_id)), None)
+        if target is None or not target.identifier:
+            raise PSAError(f"Member {member_id} not found or has no identifier")
+
+        current = await self._get_ticket_resource_identifiers(ticket_id)
+        if target.identifier not in current:
+            current.append(target.identifier)
+        new_value = ",".join(current)
+
+        await self.client.patch(
+            f"/service/tickets/{ticket_id}",
+            json_body=[{"op": "replace", "path": "resources", "value": new_value}],
         )
-        member = (data.get("member") or {}) if isinstance(data, dict) else {}
         return PSAResource(
-            member_id=member.get("id", member_id),
-            member_name=member.get("name", ""),
-            member_identifier=member.get("identifier", ""),
+            member_id=int(target.id),
+            member_name=target.name,
+            member_identifier=target.identifier,
         )
 
     async def remove_resource(self, ticket_id: int, member_id: int) -> None:
-        """Remove a member from a CW ticket (idempotent)."""
-        # CW DELETE requires the member record id (junction record), not the member's id
-        members_data = await self.client.get(f"/service/tickets/{ticket_id}/members")
-        record_id = None
-        for m in (members_data if isinstance(members_data, list) else []):
-            if (m.get("member") or {}).get("id") == member_id:
-                record_id = m.get("id")
-                break
-        if record_id is None:
+        """Remove a member from a CW ticket by updating the `resources` field (idempotent)."""
+        members = await self.list_members()
+        target = next((m for m in members if str(m.id) == str(member_id)), None)
+        if target is None or not target.identifier:
+            return  # Unknown member — treat as idempotent
+
+        current = await self._get_ticket_resource_identifiers(ticket_id)
+        if target.identifier not in current:
             return  # Already not assigned — idempotent
-        await self.client.delete(f"/service/tickets/{ticket_id}/members/{record_id}")
+        new_list = [i for i in current if i != target.identifier]
+        new_value = ",".join(new_list)
+
+        await self.client.patch(
+            f"/service/tickets/{ticket_id}",
+            json_body=[{"op": "replace", "path": "resources", "value": new_value}],
+        )
 
     # ── Ticket creation ───────────────────────────────────────────────
 
diff --git a/frontend/src/api/tickets.ts b/frontend/src/api/tickets.ts
index fb049cb1..f8f5d305 100644
--- a/frontend/src/api/tickets.ts
+++ b/frontend/src/api/tickets.ts
@@ -35,6 +35,7 @@ export const ticketsApi = {
     query?: string
     board_id?: number | null
     status_id?: number | null
+    status_name?: string | null
     include_closed?: boolean
     assigned_to_me?: boolean
     unassigned?: boolean
diff --git a/frontend/src/pages/TicketsPage.tsx b/frontend/src/pages/TicketsPage.tsx
index 64f11cb7..52145ff2 100644
--- a/frontend/src/pages/TicketsPage.tsx
+++ b/frontend/src/pages/TicketsPage.tsx
@@ -55,25 +55,49 @@ export default function TicketsPage() {
       .catch(() => {})
   }, [])
 
-  // Load statuses when board changes
+  // Load statuses when board changes. If no board is selected, aggregate statuses
+  // across all boards (deduped by name) so the filter is useful before the user
+  // picks a board.
   useEffect(() => {
+    let cancelled = false
     if (filters.board_id) {
       integrationsApi.getBoardStatuses(filters.board_id)
-        .then(setStatuses).catch(() => {})
+        .then(s => { if (!cancelled) setStatuses(s) })
+        .catch(() => { if (!cancelled) setStatuses([]) })
+    } else if (boards.length > 0) {
+      Promise.all(boards.map(b =>
+        integrationsApi.getBoardStatuses(b.id).catch(() => [] as PSATicketStatusItem[])
+      ))
+        .then(lists => {
+          if (cancelled) return
+          const byName = new Map<string, PSATicketStatusItem>()
+          lists.flat().forEach(s => {
+            if (!byName.has(s.name)) byName.set(s.name, s)
+          })
+          setStatuses(Array.from(byName.values()).sort((a, b) => a.name.localeCompare(b.name)))
+        })
+        .catch(() => { if (!cancelled) setStatuses([]) })
     } else {
       setStatuses([])
     }
-  }, [filters.board_id])
+    return () => { cancelled = true }
+  }, [filters.board_id, boards])
 
   // Fetch tickets on filter/page change
   const fetchTickets = useCallback(async () => {
     setLoading(true)
     setPsaError(null)
     try {
+      // When no board is selected, statuses are aggregated across boards — filter by
+      // name instead of id so we match the same status across every board.
+      const selectedStatusName = filters.status_id
+        ? statuses.find(s => s.id === filters.status_id)?.name
+        : undefined
       const result = await ticketsApi.searchTickets({
         query: filters.search || undefined,
         board_id: filters.board_id ?? undefined,
-        status_id: filters.status_id ?? undefined,
+        status_id: filters.board_id && filters.status_id ? filters.status_id : undefined,
+        status_name: !filters.board_id && selectedStatusName ? selectedStatusName : undefined,
         include_closed: filters.include_closed,
         assigned_to_me: filters.assigned === 'me',
         unassigned: filters.assigned === 'unassigned',
@@ -111,7 +135,7 @@ export default function TicketsPage() {
       setLoading(false)
     }
   }, [filters.search, filters.board_id, filters.status_id, filters.include_closed,
-      filters.assigned, filters.priority, filters.company_id, page])
+      filters.assigned, filters.priority, filters.company_id, page, statuses])
 
   useEffect(() => { fetchTickets() }, [fetchTickets])
 
-- 
2.49.1


From 04ff2ea301a06be229ba9c40109aed75cc72a1f2 Mon Sep 17 00:00:00 2001
From: Michael Chihlas <michael@resolutionflow.com>
Date: Thu, 16 Apr 2026 21:28:48 +0000
Subject: [PATCH 34/36] fix(tickets): refresh status and resources in detail
 panel after update
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Status update was returning only new_status (string) and the parent list's
onStatusUpdated only set status_name. The <select> was bound to status_id,
which never changed — so it visually reverted to the old status even though
the PATCH succeeded.

- Backend: include new_status_id in the status-update response.
- Panel: own currentStatusId/currentStatusName state so the select reflects
  the change immediately and survives stale parent snapshots.
- Parent list: update status_id on both the row and selectedTicket so the
  list row stays in sync when the panel stays open.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
---
 backend/app/schemas/psa_tickets.py             |  1 +
 backend/app/services/ticket_service.py         |  1 +
 .../components/tickets/TicketDetailPanel.tsx   | 18 +++++++++++++++---
 .../tickets/detail/TicketDetailHeader.tsx      | 14 ++++++++------
 frontend/src/pages/TicketsPage.tsx             |  9 +++++++--
 frontend/src/types/tickets.ts                  |  1 +
 6 files changed, 33 insertions(+), 11 deletions(-)

diff --git a/backend/app/schemas/psa_tickets.py b/backend/app/schemas/psa_tickets.py
index 91a37d73..0bb1565d 100644
--- a/backend/app/schemas/psa_tickets.py
+++ b/backend/app/schemas/psa_tickets.py
@@ -24,6 +24,7 @@ class PSATicketStatusUpdateSchema(BaseModel):
     ticket_id: int
     previous_status: str
     new_status: str
+    new_status_id: int
 
 
 class TicketCreatePayloadSchema(BaseModel):
diff --git a/backend/app/services/ticket_service.py b/backend/app/services/ticket_service.py
index 66e9552e..542c0b46 100644
--- a/backend/app/services/ticket_service.py
+++ b/backend/app/services/ticket_service.py
@@ -87,6 +87,7 @@ async def update_status(
         ticket_id=ticket_id,
         previous_status=previous_status,
         new_status=new_status,
+        new_status_id=status_id,
     )
 
 
diff --git a/frontend/src/components/tickets/TicketDetailPanel.tsx b/frontend/src/components/tickets/TicketDetailPanel.tsx
index 42125910..30736c80 100644
--- a/frontend/src/components/tickets/TicketDetailPanel.tsx
+++ b/frontend/src/components/tickets/TicketDetailPanel.tsx
@@ -16,7 +16,7 @@ import type { PSAResource } from '@/types/tickets'
 interface Props {
   ticket: PSATicketSearchResult
   onClose: () => void
-  onStatusUpdated?: (ticketId: number, newStatus: string) => void
+  onStatusUpdated?: (ticketId: number, newStatus: string, newStatusId: number) => void
   onSelectRelated?: (ticketId: number) => void
 }
 
@@ -37,6 +37,11 @@ export function TicketDetailPanel({ ticket, onClose, onStatusUpdated, onSelectRe
   const [contextLoading, setContextLoading] = useState(true)
   const [resourcesLoading, setResourcesLoading] = useState(true)
 
+  // Local status state so the select reflects updates immediately, independent
+  // of the parent list's stale `selectedTicket` snapshot.
+  const [currentStatusId, setCurrentStatusId] = useState<number | null>(ticket.status_id ?? null)
+  const [currentStatusName, setCurrentStatusName] = useState<string | null>(ticket.status_name ?? null)
+
   const ticketIdNum = Number(ticket.id)
 
   const loadResources = useCallback(() => {
@@ -51,6 +56,8 @@ export function TicketDetailPanel({ ticket, onClose, onStatusUpdated, onSelectRe
     setContext(null)
     setResources([])
     setStatuses([])
+    setCurrentStatusId(ticket.status_id ?? null)
+    setCurrentStatusName(ticket.status_name ?? null)
 
     Promise.all([
       psaContextApi.getTicketContext(ticketIdNum),
@@ -69,10 +76,13 @@ export function TicketDetailPanel({ ticket, onClose, onStatusUpdated, onSelectRe
         setContextLoading(false)
         setResourcesLoading(false)
       })
+    // eslint-disable-next-line react-hooks/exhaustive-deps
   }, [ticket.id, ticketIdNum])
 
-  function handleStatusUpdated(ticketId: number, newStatus: string) {
-    onStatusUpdated?.(ticketId, newStatus)
+  function handleStatusUpdated(ticketId: number, newStatus: string, newStatusId: number) {
+    setCurrentStatusId(newStatusId)
+    setCurrentStatusName(newStatus)
+    onStatusUpdated?.(ticketId, newStatus, newStatusId)
   }
 
   return (
@@ -96,6 +106,8 @@ export function TicketDetailPanel({ ticket, onClose, onStatusUpdated, onSelectRe
         {/* Header with status selector — optimistic, no loading gate */}
         <TicketDetailHeader
           ticket={ticket}
+          currentStatusId={currentStatusId}
+          currentStatusName={currentStatusName}
           statuses={statuses}
           onStatusUpdated={handleStatusUpdated}
         />
diff --git a/frontend/src/components/tickets/detail/TicketDetailHeader.tsx b/frontend/src/components/tickets/detail/TicketDetailHeader.tsx
index 83c0c523..0916dff0 100644
--- a/frontend/src/components/tickets/detail/TicketDetailHeader.tsx
+++ b/frontend/src/components/tickets/detail/TicketDetailHeader.tsx
@@ -6,11 +6,13 @@ import type { PSATicketStatusUpdate } from '@/types/tickets'
 
 interface Props {
   ticket: PSATicketSearchResult
+  currentStatusId: number | null
+  currentStatusName: string | null
   statuses: PSATicketStatusItem[]
-  onStatusUpdated: (ticketId: number, newStatus: string) => void
+  onStatusUpdated: (ticketId: number, newStatus: string, newStatusId: number) => void
 }
 
-export function TicketDetailHeader({ ticket, statuses, onStatusUpdated }: Props) {
+export function TicketDetailHeader({ ticket, currentStatusId, currentStatusName, statuses, onStatusUpdated }: Props) {
   const [updating, setUpdating] = useState(false)
 
   async function handleStatusChange(statusId: number) {
@@ -18,7 +20,7 @@ export function TicketDetailHeader({ ticket, statuses, onStatusUpdated }: Props)
     setUpdating(true)
     try {
       const result: PSATicketStatusUpdate = await ticketsApi.updateStatus(Number(ticket.id), statusId)
-      onStatusUpdated(result.ticket_id, result.new_status)
+      onStatusUpdated(result.ticket_id, result.new_status, result.new_status_id)
       toast.success(`Status updated to ${result.new_status}`)
     } catch {
       toast.error('Failed to update status')
@@ -48,7 +50,7 @@ export function TicketDetailHeader({ ticket, statuses, onStatusUpdated }: Props)
         {statuses.length > 0 ? (
           <select
             disabled={updating}
-            value={ticket.status_id ?? ''}
+            value={currentStatusId ?? ''}
             onChange={e => handleStatusChange(Number(e.target.value))}
             className="bg-input border border-default rounded-[5px] px-2 py-1 text-xs text-primary focus:border-accent focus:outline-none"
           >
@@ -57,9 +59,9 @@ export function TicketDetailHeader({ ticket, statuses, onStatusUpdated }: Props)
             ))}
           </select>
         ) : (
-          ticket.status_name && (
+          currentStatusName && (
             <span className="px-2 py-0.5 bg-elevated rounded text-xs text-muted-foreground">
-              {ticket.status_name}
+              {currentStatusName}
             </span>
           )
         )}
diff --git a/frontend/src/pages/TicketsPage.tsx b/frontend/src/pages/TicketsPage.tsx
index 52145ff2..256b0314 100644
--- a/frontend/src/pages/TicketsPage.tsx
+++ b/frontend/src/pages/TicketsPage.tsx
@@ -231,10 +231,15 @@ export default function TicketsPage() {
             <TicketDetailPanel
               ticket={selectedTicket}
               onClose={() => setSelectedTicket(null)}
-              onStatusUpdated={(ticketId, newStatus) => {
+              onStatusUpdated={(ticketId, newStatus, newStatusId) => {
                 setTickets(prev => prev.map(t =>
-                  t.id === String(ticketId) ? { ...t, status_name: newStatus } : t
+                  t.id === String(ticketId) ? { ...t, status_name: newStatus, status_id: newStatusId } : t
                 ))
+                setSelectedTicket(prev =>
+                  prev && prev.id === String(ticketId)
+                    ? { ...prev, status_name: newStatus, status_id: newStatusId }
+                    : prev
+                )
               }}
             />
           </div>
diff --git a/frontend/src/types/tickets.ts b/frontend/src/types/tickets.ts
index 0ba6d49b..a3664ac7 100644
--- a/frontend/src/types/tickets.ts
+++ b/frontend/src/types/tickets.ts
@@ -63,6 +63,7 @@ export interface PSATicketStatusUpdate {
   ticket_id: number
   previous_status: string
   new_status: string
+  new_status_id: number
 }
 
 export interface TicketListResponse {
-- 
2.49.1


From f6a24ea4e1171fe3e0b34624ee379965aec7137a Mon Sep 17 00:00:00 2001
From: Michael Chihlas <michael@resolutionflow.com>
Date: Thu, 16 Apr 2026 21:39:21 +0000
Subject: [PATCH 35/36] fix(psa): resource assignment targets CW `owner`,
 status PATCH verifies apply
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Previous `resources`-string PATCH was silently ignored by CW — the
`resources` field is server-derived from the ticket's owner + schedule
entries, not freely writable. Status PATCH could also silently no-op
when a cross-board status id was sent.

- add_resource: when the ticket is unassigned, set the `owner`
  MemberReference (the canonical writable primary-assignee field).
  If already owned by someone else, append the identifier to the
  `resources` co-assignee string best-effort.
- remove_resource: clear `owner` (with remove→replace:null fallback) if
  the target is the current owner, otherwise strip from `resources`.
- list_resources: merge owner + resources string, deduped by member id,
  so the UI reflects both single-owner and multi-resource assignments.
- update_ticket_status: verify CW applied the status by comparing the
  response body's status.id — raises PSAError with a clear message when
  CW silently rejects the change (e.g., status invalid for ticket's
  board), instead of reporting spurious success.
- Frontend: surface the backend error detail in the toast so users see
  the real reason instead of a generic "Failed to update" message.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
---
 .../app/services/psa/connectwise/provider.py  | 167 +++++++++++++-----
 .../tickets/detail/TicketDetailHeader.tsx     |   8 +-
 .../tickets/detail/TicketResourceManager.tsx  |  15 +-
 3 files changed, 143 insertions(+), 47 deletions(-)

diff --git a/backend/app/services/psa/connectwise/provider.py b/backend/app/services/psa/connectwise/provider.py
index 7c50235d..d3f0eb5f 100644
--- a/backend/app/services/psa/connectwise/provider.py
+++ b/backend/app/services/psa/connectwise/provider.py
@@ -266,13 +266,30 @@ class ConnectWiseProvider(PSAProvider):
     async def update_ticket_status(
         self, ticket_id: str, status_id: int
     ) -> PSATicket:
-        """Update a CW ticket's status using JSON Patch format."""
+        """Update a CW ticket's status using JSON Patch format.
+
+        Verifies CW actually applied the change — CW silently returns 200 when
+        a status id is invalid for the ticket's board. We check the response
+        body's status.id matches what we sent, and raise PSAError if not.
+        """
         patch_body = [
             {"op": "replace", "path": "status", "value": {"id": status_id}}
         ]
         data = await self.client.patch(
             f"/service/tickets/{ticket_id}", json_body=patch_body
         )
+        applied = (data.get("status") or {}) if isinstance(data, dict) else {}
+        applied_id = applied.get("id")
+        if applied_id != status_id:
+            logger.warning(
+                "CW status PATCH for ticket %s returned status id=%s instead of %s",
+                ticket_id, applied_id, status_id,
+            )
+            raise PSAError(
+                f"ConnectWise did not apply status {status_id} "
+                f"(still {applied.get('name') or applied_id}). "
+                "The status may not be valid for this ticket's board."
+            )
         return self._map_ticket(data)
 
     async def list_members(self) -> list[PSAMember]:
@@ -631,58 +648,107 @@ class ConnectWiseProvider(PSAProvider):
 
     # ── Resource management ───────────────────────────────────────────
 
-    async def _get_ticket_resource_identifiers(self, ticket_id: int) -> list[str]:
-        """Fetch the ticket's `resources` field (comma-separated identifiers)."""
+    async def _get_ticket_assignment(self, ticket_id: int) -> tuple[dict | None, str | None]:
+        """Fetch the ticket's current owner (MemberReference) and resources string.
+
+        Returns (owner_dict, resources_string). owner_dict has keys like
+        {id, identifier, name} when set; None when unassigned.
+        """
         data = await self.client.get(
             f"/service/tickets/{ticket_id}",
-            params={"fields": "id,resources"},
+            params={"fields": "id,owner,resources"},
         )
-        raw = data.get("resources") if isinstance(data, dict) else None
-        if not raw:
-            return []
-        return [p.strip() for p in str(raw).split(",") if p.strip()]
+        if not isinstance(data, dict):
+            return None, None
+        owner_raw = data.get("owner")
+        owner = owner_raw if isinstance(owner_raw, dict) and owner_raw.get("id") else None
+        resources = data.get("resources")
+        return owner, (str(resources) if resources else None)
 
     async def list_resources(self, ticket_id: int) -> list[PSAResource]:
-        """List members assigned to a CW ticket via the `resources` string field."""
-        identifiers = await self._get_ticket_resource_identifiers(ticket_id)
-        if not identifiers:
-            return []
+        """List members assigned to a CW ticket.
+
+        CW exposes assignment in two places: the `owner` MemberReference (primary
+        assignee) and a derived `resources` string of identifiers. We merge both
+        so the UI shows everyone CW considers assigned.
+        """
+        owner, resources_str = await self._get_ticket_assignment(ticket_id)
         members = await self.list_members()
         by_identifier = {m.identifier: m for m in members if m.identifier}
+        by_id = {str(m.id): m for m in members}
+
+        seen_ids: set[str] = set()
         results: list[PSAResource] = []
-        for ident in identifiers:
-            m = by_identifier.get(ident)
+
+        if owner is not None:
+            owner_id = str(owner.get("id"))
+            m = by_id.get(owner_id)
             if m:
                 results.append(PSAResource(
                     member_id=int(m.id),
                     member_name=m.name,
                     member_identifier=m.identifier,
                 ))
+                seen_ids.add(owner_id)
             else:
-                # Unknown identifier — surface it so the UI doesn't silently drop it
                 results.append(PSAResource(
-                    member_id=0,
-                    member_name=ident,
-                    member_identifier=ident,
+                    member_id=int(owner.get("id") or 0),
+                    member_name=str(owner.get("name") or ""),
+                    member_identifier=str(owner.get("identifier") or ""),
                 ))
+                seen_ids.add(owner_id)
+
+        if resources_str:
+            for ident in (p.strip() for p in resources_str.split(",") if p.strip()):
+                m = by_identifier.get(ident)
+                if m and str(m.id) not in seen_ids:
+                    results.append(PSAResource(
+                        member_id=int(m.id),
+                        member_name=m.name,
+                        member_identifier=m.identifier,
+                    ))
+                    seen_ids.add(str(m.id))
+                elif not m:
+                    results.append(PSAResource(
+                        member_id=0,
+                        member_name=ident,
+                        member_identifier=ident,
+                    ))
+
         return results
 
     async def add_resource(self, ticket_id: int, member_id: int) -> PSAResource:
-        """Assign a member to a CW ticket by updating the ticket's `resources` field."""
+        """Assign a member to a CW ticket.
+
+        CW's `resources` string is derived server-side and PATCHing it is unreliable.
+        The canonical writable field is `owner`. If the ticket is unassigned we set
+        the owner; if it already has a different owner, we append to `resources`
+        (best-effort — CW may not surface it in every view).
+        """
         members = await self.list_members()
         target = next((m for m in members if str(m.id) == str(member_id)), None)
-        if target is None or not target.identifier:
-            raise PSAError(f"Member {member_id} not found or has no identifier")
+        if target is None:
+            raise PSAError(f"Member {member_id} not found")
 
-        current = await self._get_ticket_resource_identifiers(ticket_id)
-        if target.identifier not in current:
-            current.append(target.identifier)
-        new_value = ",".join(current)
+        current_owner, resources_str = await self._get_ticket_assignment(ticket_id)
+
+        if current_owner is None:
+            # Primary assign — set owner
+            await self.client.patch(
+                f"/service/tickets/{ticket_id}",
+                json_body=[{"op": "replace", "path": "owner", "value": {"id": int(target.id)}}],
+            )
+        elif str(current_owner.get("id")) != str(target.id):
+            # Ticket already owned by someone else — add to resources string as co-assignee.
+            identifiers = [p.strip() for p in (resources_str or "").split(",") if p.strip()]
+            if target.identifier and target.identifier not in identifiers:
+                identifiers.append(target.identifier)
+                await self.client.patch(
+                    f"/service/tickets/{ticket_id}",
+                    json_body=[{"op": "replace", "path": "resources", "value": ",".join(identifiers)}],
+                )
+        # else: already the owner — idempotent no-op
 
-        await self.client.patch(
-            f"/service/tickets/{ticket_id}",
-            json_body=[{"op": "replace", "path": "resources", "value": new_value}],
-        )
         return PSAResource(
             member_id=int(target.id),
             member_name=target.name,
@@ -690,22 +756,41 @@ class ConnectWiseProvider(PSAProvider):
         )
 
     async def remove_resource(self, ticket_id: int, member_id: int) -> None:
-        """Remove a member from a CW ticket by updating the `resources` field (idempotent)."""
+        """Remove a member from a CW ticket (idempotent).
+
+        If the target is the current owner, clear the owner. Otherwise remove them
+        from the `resources` string.
+        """
         members = await self.list_members()
         target = next((m for m in members if str(m.id) == str(member_id)), None)
-        if target is None or not target.identifier:
-            return  # Unknown member — treat as idempotent
+        if target is None:
+            return
 
-        current = await self._get_ticket_resource_identifiers(ticket_id)
-        if target.identifier not in current:
-            return  # Already not assigned — idempotent
-        new_list = [i for i in current if i != target.identifier]
-        new_value = ",".join(new_list)
+        current_owner, resources_str = await self._get_ticket_assignment(ticket_id)
 
-        await self.client.patch(
-            f"/service/tickets/{ticket_id}",
-            json_body=[{"op": "replace", "path": "resources", "value": new_value}],
-        )
+        if current_owner is not None and str(current_owner.get("id")) == str(target.id):
+            # Unassign the owner. Try RFC 6902 "remove" first; fall back to
+            # "replace" with null if CW rejects it.
+            try:
+                await self.client.patch(
+                    f"/service/tickets/{ticket_id}",
+                    json_body=[{"op": "remove", "path": "owner"}],
+                )
+            except PSAError:
+                await self.client.patch(
+                    f"/service/tickets/{ticket_id}",
+                    json_body=[{"op": "replace", "path": "owner", "value": None}],
+                )
+            return
+
+        if target.identifier and resources_str:
+            identifiers = [p.strip() for p in resources_str.split(",") if p.strip()]
+            if target.identifier in identifiers:
+                new_list = [i for i in identifiers if i != target.identifier]
+                await self.client.patch(
+                    f"/service/tickets/{ticket_id}",
+                    json_body=[{"op": "replace", "path": "resources", "value": ",".join(new_list)}],
+                )
 
     # ── Ticket creation ───────────────────────────────────────────────
 
diff --git a/frontend/src/components/tickets/detail/TicketDetailHeader.tsx b/frontend/src/components/tickets/detail/TicketDetailHeader.tsx
index 0916dff0..30f4e878 100644
--- a/frontend/src/components/tickets/detail/TicketDetailHeader.tsx
+++ b/frontend/src/components/tickets/detail/TicketDetailHeader.tsx
@@ -1,4 +1,5 @@
 import { useState } from 'react'
+import axios from 'axios'
 import { ticketsApi } from '@/api/tickets'
 import { toast } from '@/lib/toast'
 import type { PSATicketSearchResult, PSATicketStatusItem } from '@/types/integrations'
@@ -22,8 +23,11 @@ export function TicketDetailHeader({ ticket, currentStatusId, currentStatusName,
       const result: PSATicketStatusUpdate = await ticketsApi.updateStatus(Number(ticket.id), statusId)
       onStatusUpdated(result.ticket_id, result.new_status, result.new_status_id)
       toast.success(`Status updated to ${result.new_status}`)
-    } catch {
-      toast.error('Failed to update status')
+    } catch (err) {
+      const detail = axios.isAxiosError(err)
+        ? (err.response?.data as { detail?: string })?.detail
+        : undefined
+      toast.error(detail || 'Failed to update status')
     } finally {
       setUpdating(false)
     }
diff --git a/frontend/src/components/tickets/detail/TicketResourceManager.tsx b/frontend/src/components/tickets/detail/TicketResourceManager.tsx
index b68bdde7..6ff073e2 100644
--- a/frontend/src/components/tickets/detail/TicketResourceManager.tsx
+++ b/frontend/src/components/tickets/detail/TicketResourceManager.tsx
@@ -1,4 +1,5 @@
 import { useState } from 'react'
+import axios from 'axios'
 import { UserPlus, X, User } from 'lucide-react'
 import { ticketsApi } from '@/api/tickets'
 import { toast } from '@/lib/toast'
@@ -27,8 +28,11 @@ export function TicketResourceManager({ ticketId, resources, allMembers, onChang
       setAdding(false)
       setSelectedMemberId('')
       onChanged()
-    } catch {
-      toast.error('Failed to add resource')
+    } catch (err) {
+      const detail = axios.isAxiosError(err)
+        ? (err.response?.data as { detail?: string })?.detail
+        : undefined
+      toast.error(detail || 'Failed to add resource')
     } finally {
       setBusy(null)
     }
@@ -40,8 +44,11 @@ export function TicketResourceManager({ ticketId, resources, allMembers, onChang
       await ticketsApi.removeResource(ticketId, memberId)
       toast.success('Resource removed')
       onChanged()
-    } catch {
-      toast.error('Failed to remove resource')
+    } catch (err) {
+      const detail = axios.isAxiosError(err)
+        ? (err.response?.data as { detail?: string })?.detail
+        : undefined
+      toast.error(detail || 'Failed to remove resource')
     } finally {
       setBusy(null)
     }
-- 
2.49.1


From 995a0c1d2ea81b8d3c80bed8bba3536dc8620769 Mon Sep 17 00:00:00 2001
From: Michael Chihlas <michael@resolutionflow.com>
Date: Fri, 17 Apr 2026 00:34:18 +0000
Subject: [PATCH 36/36] fix(psa): use schedule entries for ticket co-assignees
 (CW canonical pattern)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The previous implementation PATCHed the `resources` string directly, which CW
silently ignores because `resources` is a server-derived read-only field (it's
populated from schedule entries of type/id=4, not freely writable).

Per CW docs (openapi line 70949): "Please use the
/schedule/entries?conditions=type/id=4 AND objectId={id} endpoint".

Behavior per spec:
- No owner + assign user → set owner (existing behavior kept)
- Has owner + assign different user → POST /schedule/entries with type/id=4,
  member, objectId; owner untouched
- User already assigned (owner or schedule entry) → idempotent no-op
- Remove owner → clear owner (existing behavior kept)
- Remove co-assignee → DELETE /schedule/entries/{entry_id}
- list_resources now merges owner + schedule-entry members, deduped by id

Required CW security role permission on the API member:
- Service > Resource Scheduling > Add/Inquire/Delete

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
---
 .../app/services/psa/connectwise/provider.py  | 142 +++++++++++-------
 1 file changed, 86 insertions(+), 56 deletions(-)

diff --git a/backend/app/services/psa/connectwise/provider.py b/backend/app/services/psa/connectwise/provider.py
index d3f0eb5f..d05b7b0e 100644
--- a/backend/app/services/psa/connectwise/provider.py
+++ b/backend/app/services/psa/connectwise/provider.py
@@ -648,33 +648,46 @@ class ConnectWiseProvider(PSAProvider):
 
     # ── Resource management ───────────────────────────────────────────
 
-    async def _get_ticket_assignment(self, ticket_id: int) -> tuple[dict | None, str | None]:
-        """Fetch the ticket's current owner (MemberReference) and resources string.
+    # Schedule type id for "Service Ticket" resources — CW's canonical type for ticket co-assignees
+    _SCHEDULE_TYPE_SERVICE_TICKET = 4
 
-        Returns (owner_dict, resources_string). owner_dict has keys like
-        {id, identifier, name} when set; None when unassigned.
-        """
+    async def _get_ticket_owner(self, ticket_id: int) -> dict | None:
+        """Fetch the ticket's current owner (MemberReference) or None if unassigned."""
         data = await self.client.get(
             f"/service/tickets/{ticket_id}",
-            params={"fields": "id,owner,resources"},
+            params={"fields": "id,owner"},
         )
         if not isinstance(data, dict):
-            return None, None
+            return None
         owner_raw = data.get("owner")
-        owner = owner_raw if isinstance(owner_raw, dict) and owner_raw.get("id") else None
-        resources = data.get("resources")
-        return owner, (str(resources) if resources else None)
+        return owner_raw if isinstance(owner_raw, dict) and owner_raw.get("id") else None
+
+    async def _list_ticket_schedule_entries(self, ticket_id: int) -> list[dict]:
+        """List schedule entries for a ticket's co-assignees.
+
+        Returns raw CW schedule entry dicts with at least id and member info.
+        """
+        data = await self.client.get(
+            "/schedule/entries",
+            params={
+                "conditions": (
+                    f"type/id={self._SCHEDULE_TYPE_SERVICE_TICKET} AND objectId={ticket_id}"
+                ),
+                "fields": "id,member,name",
+                "pageSize": 100,
+            },
+        )
+        return data if isinstance(data, list) else []
 
     async def list_resources(self, ticket_id: int) -> list[PSAResource]:
         """List members assigned to a CW ticket.
 
-        CW exposes assignment in two places: the `owner` MemberReference (primary
-        assignee) and a derived `resources` string of identifiers. We merge both
-        so the UI shows everyone CW considers assigned.
+        Merges the `owner` MemberReference (primary assignee) with schedule entries
+        of type 4 (Service Ticket resources — co-assignees). Deduped by member id.
         """
-        owner, resources_str = await self._get_ticket_assignment(ticket_id)
+        owner = await self._get_ticket_owner(ticket_id)
+        entries = await self._list_ticket_schedule_entries(ticket_id)
         members = await self.list_members()
-        by_identifier = {m.identifier: m for m in members if m.identifier}
         by_id = {str(m.id): m for m in members}
 
         seen_ids: set[str] = set()
@@ -689,48 +702,55 @@ class ConnectWiseProvider(PSAProvider):
                     member_name=m.name,
                     member_identifier=m.identifier,
                 ))
-                seen_ids.add(owner_id)
             else:
                 results.append(PSAResource(
                     member_id=int(owner.get("id") or 0),
                     member_name=str(owner.get("name") or ""),
                     member_identifier=str(owner.get("identifier") or ""),
                 ))
-                seen_ids.add(owner_id)
+            seen_ids.add(owner_id)
 
-        if resources_str:
-            for ident in (p.strip() for p in resources_str.split(",") if p.strip()):
-                m = by_identifier.get(ident)
-                if m and str(m.id) not in seen_ids:
-                    results.append(PSAResource(
-                        member_id=int(m.id),
-                        member_name=m.name,
-                        member_identifier=m.identifier,
-                    ))
-                    seen_ids.add(str(m.id))
-                elif not m:
-                    results.append(PSAResource(
-                        member_id=0,
-                        member_name=ident,
-                        member_identifier=ident,
-                    ))
+        for entry in entries:
+            entry_member = entry.get("member") if isinstance(entry, dict) else None
+            if not isinstance(entry_member, dict):
+                continue
+            mid = str(entry_member.get("id") or "")
+            if not mid or mid in seen_ids:
+                continue
+            m = by_id.get(mid)
+            if m:
+                results.append(PSAResource(
+                    member_id=int(m.id),
+                    member_name=m.name,
+                    member_identifier=m.identifier,
+                ))
+            else:
+                results.append(PSAResource(
+                    member_id=int(entry_member.get("id") or 0),
+                    member_name=str(entry_member.get("name") or ""),
+                    member_identifier=str(entry_member.get("identifier") or ""),
+                ))
+            seen_ids.add(mid)
 
         return results
 
     async def add_resource(self, ticket_id: int, member_id: int) -> PSAResource:
         """Assign a member to a CW ticket.
 
-        CW's `resources` string is derived server-side and PATCHing it is unreliable.
-        The canonical writable field is `owner`. If the ticket is unassigned we set
-        the owner; if it already has a different owner, we append to `resources`
-        (best-effort — CW may not surface it in every view).
+        - If the ticket has no owner, set the target as `owner` (CW's canonical
+          primary assignee field). CW typically mirrors this into the derived
+          `resources` string automatically.
+        - If the ticket is already owned by someone else, add the target as a
+          co-assignee via a schedule entry of type 4 (Service Ticket). The
+          existing owner is not changed.
+        - Idempotent when target is already owner or already has a schedule entry.
         """
         members = await self.list_members()
         target = next((m for m in members if str(m.id) == str(member_id)), None)
         if target is None:
             raise PSAError(f"Member {member_id} not found")
 
-        current_owner, resources_str = await self._get_ticket_assignment(ticket_id)
+        current_owner = await self._get_ticket_owner(ticket_id)
 
         if current_owner is None:
             # Primary assign — set owner
@@ -739,13 +759,22 @@ class ConnectWiseProvider(PSAProvider):
                 json_body=[{"op": "replace", "path": "owner", "value": {"id": int(target.id)}}],
             )
         elif str(current_owner.get("id")) != str(target.id):
-            # Ticket already owned by someone else — add to resources string as co-assignee.
-            identifiers = [p.strip() for p in (resources_str or "").split(",") if p.strip()]
-            if target.identifier and target.identifier not in identifiers:
-                identifiers.append(target.identifier)
-                await self.client.patch(
-                    f"/service/tickets/{ticket_id}",
-                    json_body=[{"op": "replace", "path": "resources", "value": ",".join(identifiers)}],
+            # Ticket owned by someone else — add as co-assignee via schedule entry.
+            # Idempotent: skip if a schedule entry already exists for this member.
+            existing = await self._list_ticket_schedule_entries(ticket_id)
+            already_assigned = any(
+                str((e.get("member") or {}).get("id") or "") == str(target.id)
+                for e in existing
+            )
+            if not already_assigned:
+                await self.client.post(
+                    "/schedule/entries",
+                    json_body={
+                        "member": {"id": int(target.id)},
+                        "objectId": int(ticket_id),
+                        "type": {"id": self._SCHEDULE_TYPE_SERVICE_TICKET},
+                        "name": target.name or target.identifier or f"Member {target.id}",
+                    },
                 )
         # else: already the owner — idempotent no-op
 
@@ -758,15 +787,15 @@ class ConnectWiseProvider(PSAProvider):
     async def remove_resource(self, ticket_id: int, member_id: int) -> None:
         """Remove a member from a CW ticket (idempotent).
 
-        If the target is the current owner, clear the owner. Otherwise remove them
-        from the `resources` string.
+        - If the target is the current owner, clear the owner field.
+        - Otherwise, delete their schedule entry (Service Ticket type).
         """
         members = await self.list_members()
         target = next((m for m in members if str(m.id) == str(member_id)), None)
         if target is None:
             return
 
-        current_owner, resources_str = await self._get_ticket_assignment(ticket_id)
+        current_owner = await self._get_ticket_owner(ticket_id)
 
         if current_owner is not None and str(current_owner.get("id")) == str(target.id):
             # Unassign the owner. Try RFC 6902 "remove" first; fall back to
@@ -783,14 +812,15 @@ class ConnectWiseProvider(PSAProvider):
                 )
             return
 
-        if target.identifier and resources_str:
-            identifiers = [p.strip() for p in resources_str.split(",") if p.strip()]
-            if target.identifier in identifiers:
-                new_list = [i for i in identifiers if i != target.identifier]
-                await self.client.patch(
-                    f"/service/tickets/{ticket_id}",
-                    json_body=[{"op": "replace", "path": "resources", "value": ",".join(new_list)}],
-                )
+        # Not the owner — find and delete the schedule entry for this member.
+        entries = await self._list_ticket_schedule_entries(ticket_id)
+        for entry in entries:
+            entry_member = entry.get("member") if isinstance(entry, dict) else None
+            if isinstance(entry_member, dict) and str(entry_member.get("id") or "") == str(target.id):
+                entry_id = entry.get("id")
+                if entry_id:
+                    await self.client.delete(f"/schedule/entries/{entry_id}")
+                break
 
     # ── Ticket creation ───────────────────────────────────────────────
 
-- 
2.49.1