From 2d3b1ea4c59baf09c846498541d53580930b0bc4 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Valentino=20Me=C4=91imorec?= <valentino@medimorec.com>
Date: Thu, 22 Oct 2026 12:58:29 +0200
Subject: [PATCH] Feeds: hosts and snippets from a URL; README demo
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

A feed source reads a JSON document (version 1) with a token: its hosts
(group, tags, jump hosts, key names, host keys, state) and read-only
snippets, kept in step on refresh and every 15 minutes on desktops.
Listed host keys are trusted for their host, others refused. New items
from any cloud source get derived ids, and sync makes no conflict
copies where only source-decided fields differ. Offboarding lists feed
tokens. The README shows the app, drawn from the AppImage.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Signed-off-by: Valentino Međimorec <valentino@medimorec.com>
---
 CHANGELOG.md                                |   7 +
 Cargo.lock                                  |   1 +
 README.md                                   |   4 +
 ROADMAP.md                                  |   3 +
 apps/desktop/e2e/README.md                  |   7 +-
 apps/desktop/e2e/appimage.mjs               | 121 ++++
 apps/desktop/e2e/demo.mjs                   | 132 ++++
 apps/desktop/e2e/host-feed.mjs              |  42 ++
 apps/desktop/e2e/run.sh                     |  31 +-
 apps/desktop/src-tauri/src/bulk.rs          |  15 +-
 apps/desktop/src-tauri/src/cloud.rs         | 627 ++++++++++++++++--
 apps/desktop/src-tauri/src/lib.rs           |   4 +
 apps/desktop/src-tauri/src/offboard.rs      |  13 +-
 apps/desktop/src-tauri/src/ssh.rs           |  15 +
 apps/desktop/src-tauri/src/vault.rs         | 140 ++++-
 apps/desktop/src/App.tsx                    |  78 ++-
 apps/desktop/src/CloudPage.tsx              | 179 +++++-
 apps/desktop/src/Lists.tsx                  |  19 +-
 apps/desktop/src/RouteBar.tsx               |  21 +-
 apps/desktop/src/SnippetCheck.tsx           |  31 +
 apps/desktop/src/SnippetPanel.tsx           |  58 +-
 apps/desktop/src/TeamsPanel.tsx             |   6 +-
 apps/desktop/src/api.ts                     |  45 +-
 apps/desktop/src/mobile/MobileWorkspace.tsx |   7 +-
 apps/desktop/src/styles.css                 |  22 +
 assets/demo/morphgate.svg                   |  12 +
 crates/mg-inventory/src/feed.rs             | 664 ++++++++++++++++++++
 crates/mg-inventory/src/lib.rs              |  12 +-
 crates/mg-inventory/src/shape.rs            |   2 +
 crates/mg-inventory/src/vallic.rs           |   2 +
 crates/mg-inventory/tests/feed.rs           | 119 ++++
 crates/mg-ssh/src/connection.rs             |  50 ++
 crates/mg-ssh/src/error.rs                  |  10 +
 crates/mg-ssh/src/lib.rs                    |   4 +-
 crates/mg-ssh/src/session.rs                |   3 +
 crates/mg-ssh/tests/live.rs                 |  83 +++
 crates/mg-store/Cargo.toml                  |   1 +
 crates/mg-store/src/history.rs              |   1 +
 crates/mg-store/src/lib.rs                  |   7 +-
 crates/mg-store/src/model.rs                |  45 +-
 crates/mg-store/src/moving.rs               |  10 +
 crates/mg-store/src/sync.rs                 | 169 ++++-
 crates/mg-store/src/vault.rs                |  88 ++-
 crates/mg-vpn/src/lib.rs                    |   1 +
 docs/README.md                              |   2 +-
 docs/architecture.md                        |   4 +-
 docs/development.md                         |   8 +-
 docs/features/cloud-sources.md              | 128 +++-
 docs/features/hosts-groups-identities.md    |   2 +-
 docs/features/offboarding.md                |   3 +-
 docs/features/ssh-connections.md            |  11 +-
 docs/features/sync.md                       |   1 +
 docs/features/terminal-and-snippets.md      |  18 +-
 docs/features/vault-and-unlock.md           |   2 +-
 docs/sync-crypto-spec.md                    |   6 +-
 tools/readme-demo/demo-svg.mjs              | 156 +++++
 tools/readme-demo/package-lock.json         |  23 +
 tools/readme-demo/package.json              |  10 +
 tools/readme-demo/snapshot.js               | 164 +++++
 tools/readme-demo/terminal.mjs              | 164 +++++
 60 files changed, 3435 insertions(+), 178 deletions(-)
 create mode 100644 apps/desktop/e2e/demo.mjs
 create mode 100644 apps/desktop/e2e/host-feed.mjs
 create mode 100644 apps/desktop/src/SnippetCheck.tsx
 create mode 100644 assets/demo/morphgate.svg
 create mode 100644 crates/mg-inventory/src/feed.rs
 create mode 100644 crates/mg-inventory/tests/feed.rs
 create mode 100644 tools/readme-demo/demo-svg.mjs
 create mode 100644 tools/readme-demo/package-lock.json
 create mode 100644 tools/readme-demo/package.json
 create mode 100644 tools/readme-demo/snapshot.js
 create mode 100644 tools/readme-demo/terminal.mjs

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 3599478..9bc32bb 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -29,6 +29,13 @@ prompt. Write them for users.
   versions of the app keep syncing alongside this one.
 - Install and restart waits for an update check that's still running, so it installs the update
   that check found.
+- Feeds: hosts and snippets from an address your team publishes (Hosts → Add from… → Feed URL…),
+  read with a token. They stay in step with it on their own, every 15 minutes; your renames, keys,
+  tags and notes stay yours. A feed can list each server's host key, so new servers connect
+  without asking you to trust them, and a server with another key is refused. Its snippets are
+  read-only, and when the feed changes one, Run and Paste show you the new commands first.
+- Two devices refreshing the same cloud source at once no longer make duplicate hosts or
+  "(conflict)" copies.
 
 ## 0.2.0
 
diff --git a/Cargo.lock b/Cargo.lock
index f2ec5f1..e574ae6 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -3397,6 +3397,7 @@ dependencies = [
  "rusqlite",
  "serde",
  "serde_json",
+ "sha2 0.11.1",
  "tempfile",
  "thiserror 2.0.21",
  "tokio",
diff --git a/README.md b/README.md
index a3407be..1dc998b 100644
--- a/README.md
+++ b/README.md
@@ -20,6 +20,10 @@ encrypted sync you can self-host.
 Docs: [developer docs](docs/README.md) · [sync & crypto spec](docs/sync-crypto-spec.md) · [self-host](https://morphgate.com/docs/self-hosting) · [roadmap](ROADMAP.md) · [releasing](RELEASING.md) ·
 [changelog](CHANGELOG.md)
 
+<p align="center">
+  <img src="assets/demo/morphgate.svg" alt="MorphGate: the Hosts page with hosts in groups; a click on web-1 opens its session, where uptime, git log and ls run">
+</p>
+
 ## Install
 
 Download from the [Releases](../../releases) page:
diff --git a/ROADMAP.md b/ROADMAP.md
index 3c17081..c1a792c 100644
--- a/ROADMAP.md
+++ b/ROADMAP.md
@@ -40,6 +40,9 @@ xterm.js in the webview avoids writing a terminal renderer.
 - [x] Terminal appearance: built-in themes plus themes imported from Ghostty, Alacritty, iTerm2 and Windows
       Terminal files (vault items, synced), a theme per host, and this device's font, size and cursor
 - [x] Jump hosts (ProxyJump chains via direct-tcpip, per-hop host-key pinning)
+- [x] Cloud sources: hosts kept in step with Vallic Cloud (its API), AWS, Google Cloud, Azure, Hetzner Cloud and
+      DigitalOcean (their CLIs), and feeds: hosts and snippets from a JSON document a team publishes at a URL,
+      read with a token, refreshed every 15 minutes, with the host keys it lists trusted for its hosts
 - [x] Port forwarding: local / remote / dynamic SOCKS5 tunnels saved in the vault, start/stop from the sidebar
 - [x] SFTP tabs (`russh-sftp`): local + remote panes, drag and drop (also from the OS), recursive upload/download
       with progress, cancel and replace, mkdir/rename/chmod/delete
diff --git a/apps/desktop/e2e/README.md b/apps/desktop/e2e/README.md
index cfad6aa..c9827f1 100644
--- a/apps/desktop/e2e/README.md
+++ b/apps/desktop/e2e/README.md
@@ -4,10 +4,11 @@ These run the real AppImage, deb and rpm binaries, not a dev build, and drive th
 
 | Scenario | What it checks |
 | --- | --- |
-| `appimage.mjs` | Creates a vault; SSHes to a throwaway local sshd and runs a command; imports two hosts and their key from a `~/.ssh/config` (one behind the other as its jump host) and connects through it; imports a PuTTY session with a new key in a `.ppk` file, a Termius-style CSV file with a group and a Royal TS document, and signs in with the PuTTY key; connects Vallic Cloud through a stand-in console (`vallic-console.mjs`: device sign-in, rotating tokens, an environment that is this sshd) and signs in to its host; signs in with a key that only has a certificate from the run's user CA (which sshd trusts), from the vault and from an agent; reaches a host by a command its jump host runs (with a login command instead of the shell), and another by a proxy command on this computer (both the relay in `crates/mg-ssh/tests/relay.py`); selects two hosts, moves them into a group and deletes them; signs in to a host with one key from an `ssh-agent` (its own socket) and forwards it (`ssh-add -l` on the host lists it); splits a tab into three panes (beside and below, one through a jump host), broadcasts a command to all of them and then types into one, drags a border and closes them; opens a `morphgate://connect` link from a second launch (which hands it over and exits) and connects from the filled-in quick connect, and refuses an unknown link; refuses a tampered update twice without touching the AppImage; installs the signed update, restarts, unlocks the same vault as the new version, and finds nothing newer |
+| `appimage.mjs` | Creates a vault; SSHes to a throwaway local sshd and runs a command; imports two hosts and their key from a `~/.ssh/config` (one behind the other as its jump host) and connects through it; imports a PuTTY session with a new key in a `.ppk` file, a Termius-style CSV file with a group and a Royal TS document, and signs in with the PuTTY key; connects Vallic Cloud through a stand-in console (`vallic-console.mjs`: device sign-in, rotating tokens, an environment that is this sshd) and signs in to its host; adds AWS and DigitalOcean through stand-in CLIs (`clouds/`); adds a feed (`host-feed.mjs`) whose host connects with the host key it lists, whose wrongly listed host is refused and whose changed snippet asks before it runs; signs in with a key that only has a certificate from the run's user CA (which sshd trusts), from the vault and from an agent; reaches a host by a command its jump host runs (with a login command instead of the shell), and another by a proxy command on this computer (both the relay in `crates/mg-ssh/tests/relay.py`); selects two hosts, moves them into a group and deletes them; signs in to a host with one key from an `ssh-agent` (its own socket) and forwards it (`ssh-add -l` on the host lists it); splits a tab into three panes (beside and below, one through a jump host), broadcasts a command to all of them and then types into one, drags a border and closes them; opens a `morphgate://connect` link from a second launch (which hands it over and exits) and connects from the filled-in quick connect, and refuses an unknown link; refuses a tampered update twice without touching the AppImage; installs the signed update, restarts, unlocks the same vault as the new version, and finds nothing newer |
 | `package.mjs` (deb, rpm) | The binary knows how it was installed, finds the update, and warns that installing asks for an administrator password (installing needs root, so it stops there) |
 | `teams.mjs` | Two apps side by side (Alice and Bob) with a local reference sync server: both turn on sync; Alice creates an organization and a vault and invites Bob; Bob joins only after the owner's fingerprint matches, and Alice confirms him only after his matches; a host saved in the shared vault reaches Bob, his edit reaches Alice; Bob publishes his SSH key; Alice revokes him (the vault leaves his device) and rotates the vault key; members may create vaults; the activity log tells the story. Then Alice offboards Bob against the local sshd: removal and key rotation, his key found and removed from `authorized_keys`, and the host's shared key replaced (she still logs in) |
 | `layout.mjs` | Turns sync on from the offer a new vault gets, fills every page (hosts in a group, a key, a snippet, a tunnel, a team with an invite to a long address), and at 860, 1024, 1280 and 1600 px wide checks that nothing on a page overlaps or runs out of its column. Closing an editor returns to the page it was opened from, and closing a page to the session under it; with no session open, a page takes the tab bar's place |
+| `demo.mjs` | Only with `E2E_ONLY=demo`: the README's demo. The AppImage's Hosts page, a click on a host and its recorded session (in a demo shell), drawn by `tools/readme-demo/demo-svg.mjs` as `demo/morphgate.svg` (copy it to `assets/demo/morphgate.svg`) |
 | `mobile.mjs` | The phone layout in a 390 × 844 window: imports a key and saves a host on the phone screens, connects from the host's sheet, interrupts a command with Ctrl from the extra-key row and repeats one with ↑, keeps the session open behind the host list, browses into a folder over SFTP and downloads a file to Downloads, then locks and unlocks on the phone unlock screen |
 
 ```sh
@@ -24,10 +25,10 @@ Screenshots and logs go to `target/e2e/run-<time>/`.
   screen, and nothing reaches your session bus or keyring.
 - **Data:** `HOME` and the XDG directories point at the run directory, so your vault and settings are
   never read or written.
-- **Network:** everything is on loopback (sshd on 127.0.0.1 and 127.0.0.2), on ports free when the
+- **Network:** everything is on loopback (sshd on 127.0.0.1 to 127.0.0.4), on ports free when the
   run starts, so runs can share a machine: sshd (`E2E_SSH_PORT`), the update feed
   (`E2E_FEED_PORT`), the sync server (`E2E_SYNC_PORT`), the test identity provider
-  (`E2E_IDP_PORT`), and two per tauri-driver (`E2E_DRIVER_PORT`: from that port up). Set them to
+  (`E2E_IDP_PORT`), the stand-in feed of hosts (`E2E_HOST_FEED_PORT`), and two per tauri-driver (`E2E_DRIVER_PORT`: from that port up). Set them to
   pin a port.
 - **Files on the "server":** sshd's SFTP sessions start in the run's `sshd/home`, whose
   `.ssh/authorized_keys` is the file sshd reads, so the offboarding steps edit that copy and never
diff --git a/apps/desktop/e2e/appimage.mjs b/apps/desktop/e2e/appimage.mjs
index b4959b6..0f59487 100644
--- a/apps/desktop/e2e/appimage.mjs
+++ b/apps/desktop/e2e/appimage.mjs
@@ -622,6 +622,127 @@ try {
   await s.click(".tab.active .close");
   ok("added DigitalOcean through its CLI: its droplet became a host and connected");
 
+  // A feed (host-feed.mjs): Add from… → Feed URL…, read with its token; its host connects with
+  // the host key the feed lists (nothing asks), another listed with the wrong key is refused, an
+  // invalid entry is skipped and said; its snippet is read-only, and once the feed changes it,
+  // running it asks first.
+  await s.exec(`[...document.querySelectorAll(".sidebar-nav button")].find((b) => b.innerText.startsWith("Hosts")).click(); return true`);
+  await s.wait(() => s.exec(`return document.querySelector(".panel.page h1")?.innerText === "Hosts" || null`), "the Hosts page");
+  await s.addFrom("Feed URL…");
+  await s.waitText("Add a feed", ".cloud-adding", 30000);
+  await s.typeLabelled("Address", process.env.E2E_HOST_FEED);
+  await s.typeLabelled("Token", "wrong-token");
+  await s.clickButton("Add and read the feed");
+  await s.waitText("refused the token", ".cloud-page > .error", 30000);
+  await s.typeLabelled("Token", process.env.E2E_HOST_FEED_TOKEN);
+  await s.clickButton("Add and read the feed");
+  // Titles are uppercased by CSS (innerText follows it).
+  const feedCard = `[...document.querySelectorAll(".cloud-source")].find((x) => x.innerText.toLowerCase().includes("e2e operations"))`;
+  const feedAdded = await s
+    .wait(
+      () => s.exec(`return ${feedCard}?.innerText.includes("2 hosts added") ? "ok" : document.querySelector(".cloud-page > .error, .cloud-adding .error")?.innerText || null`),
+      "the feed source",
+      30000,
+    )
+    .catch(async (e) => {
+      await s.screenshot(`${shots}/feed-not-added.png`);
+      throw e;
+    });
+  assert.equal(feedAdded, "ok", `adding the feed: ${feedAdded}`);
+  page = await s.exec(`return ${feedCard}.innerText`);
+  assert.match(page, /1 snippet added/);
+  assert.match(page, /Skipped: broken: the host name/);
+  assert.match(page, /token …cdef/);
+  assert.ok(!page.includes(process.env.E2E_HOST_FEED_TOKEN), "the token isn't shown");
+  await s.screenshot(`${shots}/feed-source.png`);
+  await s.clickButton("Close");
+  await s.exec(
+    `[...document.querySelectorAll(".sidebar .list li")].find((l) => l.querySelector(".row-title")?.innerText === "e2e-feed-web").querySelector(".row-main").click(); return true`,
+  );
+  await s.wait(
+    () =>
+      s.exec(
+        `if (document.querySelector("dialog.hostkey[open]")) throw new Error("asked to trust the feed's host");
+         const r = document.querySelector(".terminal:not(.xterm):not([hidden]) .xterm-rows"); return r && /[$#]\\s*$/m.test(r.innerText) ? true : null`,
+      ),
+    "a shell on the feed's host, nothing asked",
+    60000,
+  );
+  await s.exec(
+    `[...document.querySelectorAll(".sidebar .list li")].find((l) => l.querySelector(".row-title")?.innerText === "e2e-feed-wrong").querySelector(".row-main").click(); return true`,
+  );
+  // The terminal wraps mid-word: compared without whitespace.
+  const refusedText = await s
+    .wait(
+      () =>
+        s.exec(
+          `const r = (document.querySelector(".terminal:not(.xterm):not([hidden]) .xterm-rows")?.innerText ?? "").replace(/\\s+/g, "");
+           return r.includes("isn'toneE2Eoperationslistsforit:refused") ? r : null`,
+        ),
+      "the wrong key refused",
+      60000,
+    )
+    .catch(async (e) => {
+      await s.screenshot(`${shots}/feed-wrong-key.png`);
+      throw e;
+    });
+  assert.ok(!refusedText.includes("$"), "no shell on the wrongly listed host");
+  await s.click(".tab.active .close");
+  // Back to the session on e2e-feed-web: where snippets go.
+  await s.exec(`[...document.querySelectorAll(".tab")].find((t) => t.querySelector(".label")?.innerText === "e2e-feed-web").click(); return true`);
+  ok("added a feed (a wrong token said first): its host connected with the key the feed lists, one listed with another key was refused, an invalid entry skipped");
+
+  // Its snippet, from the Snippets page into the session on e2e-feed-web.
+  await s.exec(`[...document.querySelectorAll(".sidebar-nav button")].find((b) => b.innerText.startsWith("Snippets")).click(); return true`);
+  await s.wait(() => s.hasText(".panel .lname", "E2E hello"), "the feed's snippet");
+  const feedRow = `[...document.querySelectorAll(".panel.page [role=row]")].find((r) => r.innerText.includes("E2E hello"))`;
+  assert.match(await s.exec(`return ${feedRow}.innerText`), /E2E operations/i);
+  const runFeedSnippet = () =>
+    s.exec(`[...${feedRow}.querySelectorAll("button")].find((b) => b.innerText === "Run").click(); return true`);
+  await runFeedSnippet();
+  await s.wait(
+    () => s.exec(`const r = document.querySelector(".terminal:not(.xterm):not([hidden]) .xterm-rows"); return r && /^e2e-feed-one\s*$/m.test(r.innerText) ? true : null`),
+    "the snippet's output",
+    30000,
+  );
+  // Read-only: no Save, a copy instead.
+  await s.exec(`[...document.querySelectorAll(".sidebar-nav button")].find((b) => b.innerText.startsWith("Snippets")).click(); return true`);
+  await s.wait(() => s.hasText(".panel .lname", "E2E hello"), "the Snippets page again");
+  await s.exec(`${feedRow}.querySelector(".lnamebtn").click(); return true`);
+  await s.waitText("it changes there, and is read-only here", ".panel", 30000);
+  assert.ok(!(await s.exec(`return [...document.querySelectorAll(".panel button")].some((b) => b.innerText.startsWith("Save"))`)), "no Save");
+  await s.clickButton("Close");
+
+  // The feed changes the snippet: a refresh brings it, and running it asks first.
+  await fetch(`${new URL(process.env.E2E_HOST_FEED).origin}/e2e/next`, { method: "POST" });
+  await s.exec(`[...document.querySelectorAll(".sidebar-nav button")].find((b) => b.innerText.startsWith("Hosts")).click(); return true`);
+  await s.wait(() => s.exec(`return document.querySelector(".panel.page h1")?.innerText === "Hosts" || null`), "the Hosts page");
+  await s.addFrom("Clouds…");
+  await s.waitText("E2E operations", ".cloud-source", 30000);
+  await s.exec(`[...${feedCard}.querySelectorAll("button")].find((b) => b.innerText === "Refresh").click(); return true`);
+  await s.wait(() => s.exec(`return ${feedCard}?.innerText.match(/1 gone from the feed, 1 snippet changed/) ? true : null`), "the feed's next version", 30000);
+  await s.clickButton("Close");
+  await s.exec(`[...document.querySelectorAll(".sidebar-nav button")].find((b) => b.innerText.startsWith("Snippets")).click(); return true`);
+  await s.wait(() => s.hasText(".panel .lname", "E2E hello"), "the Snippets page");
+  await runFeedSnippet();
+  await s.waitText("E2E hello changed", "dialog.snippet-check", 30000);
+  assert.match(await s.exec(`return document.querySelector("dialog.snippet-check").innerText`), /Changed by E2E operations[\s\S]*echo e2e-feed-two/);
+  await s.screenshot(`${shots}/feed-snippet-changed.png`);
+  await s.clickButton("Run it");
+  await s.wait(
+    () => s.exec(`const r = document.querySelector(".terminal:not(.xterm):not([hidden]) .xterm-rows"); return r && /^e2e-feed-two\s*$/m.test(r.innerText) ? true : null`),
+    "the changed snippet's output",
+    30000,
+  );
+  // Sent once as it is now: the next run doesn't ask.
+  await s.exec(`[...document.querySelectorAll(".sidebar-nav button")].find((b) => b.innerText.startsWith("Snippets")).click(); return true`);
+  await s.wait(() => s.hasText(".panel .lname", "E2E hello"), "the Snippets page");
+  await runFeedSnippet();
+  await new Promise((r) => setTimeout(r, 1000));
+  assert.ok(!(await s.exec(`return !!document.querySelector("dialog.snippet-check[open]")`)), "not asked again");
+  await s.click(".tab.active .close");
+  ok("the feed's snippet ran, read-only with a copy offered; once the feed changed it, running it asked first (and only once)");
+
   // Several hosts at once: the CSV and Royal TS ones (nothing later uses them) into one group,
   // then both deleted.
   await s.exec(`[...document.querySelectorAll(".sidebar-nav button")].find((b) => b.innerText.startsWith("Hosts")).click(); return true`);
diff --git a/apps/desktop/e2e/demo.mjs b/apps/desktop/e2e/demo.mjs
new file mode 100644
index 0000000..f8f1805
--- /dev/null
+++ b/apps/desktop/e2e/demo.mjs
@@ -0,0 +1,132 @@
+// The README's demo: the packaged AppImage with a few hosts in groups. Its Hosts page is captured,
+// web-1 (the test sshd) is clicked, and its session view is captured and recorded with the app's
+// own session recording; tools/readme-demo/demo-svg.mjs draws it all (demo.json) as an animated
+// SVG. The host's login command runs a clean bash with a demo prompt in a demo home (a small git
+// repository); this machine's user and loopback address are swapped for demo ones in the captured
+// text, and nothing is saved that still shows them or this computer's home folder.
+//
+//   node demo.mjs <AppImage> <out dir> <ssh key> <ssh port> <user>
+
+import { execFileSync } from "node:child_process";
+import { mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { userInfo } from "node:os";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+import { createVault, session } from "./webdriver.mjs";
+
+const [app, out, key, port, user] = process.argv.slice(2);
+const PASSWORD = "correct horse battery staple";
+const sleep = (ms) => new Promise((r) => setTimeout(r, ms));
+const snapshotJs = readFileSync(join(dirname(fileURLToPath(import.meta.url)), "../../../tools/readme-demo/snapshot.js"), "utf8");
+
+// The demo home: an app with a few releases.
+const home = `${out}/home-demo`;
+const repo = `${home}/shop`;
+mkdirSync(`${repo}/config`, { recursive: true });
+const git = (...args) =>
+  execFileSync("git", ["-C", repo, ...args], {
+    env: { ...process.env, GIT_AUTHOR_NAME: "Ana", GIT_AUTHOR_EMAIL: "ana@example.com", GIT_COMMITTER_NAME: "Ana", GIT_COMMITTER_EMAIL: "ana@example.com" },
+  });
+git("init", "-q", "-b", "main");
+for (const [file, text, message] of [
+  ["README.md", "# shop\n", "Start the shop"],
+  ["config/nginx.conf", "server { listen 80; }\n", "Serve it with nginx"],
+  ["Dockerfile", "FROM php:8.4-fpm\n", "Run in a container"],
+  ["config/nginx.conf", "server { listen 443 ssl; }\n", "TLS everywhere"],
+]) {
+  writeFileSync(`${repo}/${file}`, text);
+  git("add", "-A");
+  git("commit", "-q", "-m", message);
+}
+git("tag", "v2.4.1");
+
+// sshd starts it in the real home: it moves to the demo's first. A clean bash: no rc files, a
+// demo prompt (the theme's green and blue), this home.
+const login =
+  `cd '${home}' && exec env -i TERM=xterm-256color LANG=C.UTF-8 HOME='${home}' PATH=/usr/local/bin:/usr/bin:/bin GIT_PAGER=cat ` +
+  `PS1='\\[\\e[32m\\]deploy@web-1\\[\\e[0m\\]:\\[\\e[34m\\]\\w\\[\\e[0m\\]$ ' bash --norc --noprofile -i`;
+// What the captured text shows instead of this machine's.
+const mask = [[`${user}@127.0.0.1:${port}`, "deploy@10.0.12.34:22"]];
+
+let s = await session(app);
+try {
+  await createVault(s, PASSWORD);
+  await s.resize(1024, 600);
+  const invoke = (cmd, args) => s.exec(`return window.__TAURI_INTERNALS__.invoke(arguments[0], arguments[1])`, cmd, args);
+  const capture = () => s.exec(`${snapshotJs}; return snapshot(arguments[0]);`, mask);
+  const k = await invoke("key_import", { input: { label: "deploy", source: { kind: "file", path: key }, passphrase: null } });
+  const group = async (name) => (await invoke("group_save", { input: { name } })).id;
+  const production = await group("Production");
+  const staging = await group("Staging");
+  const host = (label, hostname, groupId, tags, extra = {}) =>
+    invoke("host_save", { input: { label, hostname, port: 22, user: "deploy", auth: { kind: "key", keyId: k.id }, groupId, tags, ...extra } });
+  await host("web-1", "127.0.0.1", production, ["shop"], { port: Number(port), user, recordSessions: true, loginCommand: login });
+  await host("web-2", "10.0.12.35", production, ["shop"]);
+  await host("db-1", "10.0.12.40", production, ["postgres"]);
+  await host("staging", "10.0.20.11", staging, ["shop"]);
+  await host("bastion", "bastion.shop.example", null, []);
+  // Made behind the page's back: it reloads its lists on vault-changed.
+  await invoke("plugin:event|emit", { event: "vault-changed", payload: null });
+  const sidebarHost = (label) =>
+    `[...document.querySelectorAll(".sidebar .list li")].find((l) => l.querySelector(".row-title")?.innerText === ${JSON.stringify(label)})`;
+  await s.wait(() => s.exec(`return ${sidebarHost("web-1")} ? true : null`), "web-1 listed");
+
+  // Its host key, pinned once beforehand: the demo's connection asks nothing.
+  const rows = () => s.exec(`return document.querySelector(".terminal:not(.xterm):not([hidden]) .xterm-rows")?.innerText ?? ""`);
+  const prompts = async () => ((await rows()).match(/deploy@web-1:/g) ?? []).length;
+  await s.exec(`${sidebarHost("web-1")}.querySelector(".row-main").click(); return true`);
+  await s.waitText("Trust and connect", "body", 60000);
+  await s.clickButton("Trust and connect");
+  await s.wait(async () => ((await prompts()) >= 1 ? true : null), "the demo prompt", 60000);
+  await s.click(".tab.active .close");
+
+  // Scene one: the Hosts page.
+  await s.exec(`[...document.querySelectorAll(".sidebar-nav button")].find((b) => b.innerText.startsWith("Hosts")).click(); return true`);
+  await s.wait(() => s.exec(`return document.querySelector(".panel.page h1")?.innerText === "Hosts" || null`), "the Hosts page");
+  await sleep(800);
+  const row = `[...document.querySelectorAll(".panel.page .lrow")].find((r) => r.querySelector(".lname")?.innerText === "web-1").querySelector(".lnamebtn")`;
+  const target = await s.exec(`const r = ${row}.getBoundingClientRect(); return { x: r.left, y: r.top, w: r.width, h: r.height }`);
+  const s1 = await capture();
+  await s.screenshot(`${out}/scene1.png`);
+
+  // Scene two: the click, and the session.
+  await s.exec(`${row}.click(); return true`);
+  await s.wait(async () => ((await prompts()) >= 1 ? true : null), "the demo prompt", 60000);
+  await sleep(600);
+  const s2 = await capture();
+  await s.screenshot(`${out}/scene2.png`);
+  if (!s2.terminal) throw new Error("no terminal in the session view");
+  await sleep(600);
+  // Typed as a person would: a key at a time, a pause before Enter.
+  for (const command of ["uptime", "cd shop && git log --oneline --decorate -4", "ls"]) {
+    const before = await prompts();
+    for (const ch of command) {
+      await s.typeTerminal(ch);
+      await sleep(45 + Math.round(Math.random() * 70));
+    }
+    await sleep(450);
+    await s.typeTerminal("\r");
+    await s.wait(async () => ((await prompts()) > before ? true : null), `the prompt after ${command}`, 30000);
+    await sleep(1400);
+  }
+  await sleep(1500);
+  // Closing the tab ends the session and its recording.
+  await s.click(".tab.active .close");
+  const log = await s.wait(async () => {
+    const logs = (await invoke("session_logs", { hostId: null })).filter((l) => l.endedAt);
+    return logs.length >= 2 ? logs.sort((a, b) => b.startedAt - a.startedAt)[0] : null;
+  }, "the recording, ended", 30000);
+  const cast = await invoke("session_log_cast", { id: log.id });
+  const demo = JSON.stringify({ s1, s2, target, cast });
+  // It goes in a public README: nothing of this computer's.
+  for (const leak of [userInfo().homedir, "127.0.0.1", `${user}@`]) {
+    if (demo.includes(leak)) throw new Error(`the demo shows ${leak}: not saved`);
+  }
+  writeFileSync(`${out}/demo.json`, demo);
+  console.log(`  ✓ captured the demo: ${out}/demo.json`);
+} catch (e) {
+  await s.screenshot(`${out}/failed.png`).catch(() => {});
+  throw e;
+} finally {
+  await s.close();
+}
diff --git a/apps/desktop/e2e/host-feed.mjs b/apps/desktop/e2e/host-feed.mjs
new file mode 100644
index 0000000..343a2ac
--- /dev/null
+++ b/apps/desktop/e2e/host-feed.mjs
@@ -0,0 +1,42 @@
+// A stand-in feed (docs/features/cloud-sources.md, "Feeds"): hosts and snippets a team publishes,
+// read with a token. Its host "e2e-feed-web" is the test sshd on 127.0.0.4, with the sshd's host
+// key listed (so nothing asks to trust it); "e2e-feed-wrong" is the same server listed with
+// another key (refused); "broken" is skipped. POST /e2e/next changes the snippet and drops the
+// wrong host, as a publisher's next version would. The token is E2E_HOST_FEED_TOKEN.
+//
+//   node host-feed.mjs <port> <sshd host key .pub> <ssh port> <user>
+
+import { readFileSync } from "node:fs";
+import { createServer } from "node:http";
+
+const [port, hostKeyFile, sshPort, user] = process.argv.slice(2);
+const TOKEN = process.env.E2E_HOST_FEED_TOKEN;
+const hostKey = readFileSync(hostKeyFile, "utf8").trim().split(/\s+/).slice(0, 2).join(" ");
+const otherKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDRbMaf7RI+oSkPOCPrFjPoMWJEIu96Drte4Q3r9OQYR";
+let version = 1;
+
+const doc = () => ({
+  version: 1,
+  name: "E2E operations",
+  hosts: [
+    { id: "web", label: "e2e-feed-web", hostname: "127.0.0.4", port: Number(sshPort), user, group: "E2E feed", tags: ["feed"], key: "e2e_key", host_keys: [hostKey] },
+    ...(version === 1 ? [{ id: "wrong", label: "e2e-feed-wrong", hostname: "127.0.0.4", port: Number(sshPort), user, group: "E2E feed", key: "e2e_key", host_keys: [otherKey] }] : []),
+    { id: "broken", label: "broken", hostname: "-oProxyCommand=touch /tmp/x", user },
+  ],
+  snippets: [{ id: "hello", name: "E2E hello", body: version === 1 ? "echo e2e-feed-one" : "echo e2e-feed-two", tags: ["feed"] }],
+});
+
+createServer((req, res) => {
+  const send = (status, json) => {
+    res.writeHead(status, { "content-type": "application/json" });
+    res.end(JSON.stringify(json));
+  };
+  console.log(req.method, req.url, req.headers["user-agent"]);
+  if (req.method === "POST" && req.url === "/e2e/next") {
+    version = 2;
+    return send(200, { version });
+  }
+  if (req.url !== "/morphgate.json") return send(404, {});
+  if (req.headers.authorization !== `Bearer ${TOKEN}`) return send(401, { message: "Unauthenticated." });
+  return send(200, doc());
+}).listen(Number(port), "127.0.0.1");
diff --git a/apps/desktop/e2e/run.sh b/apps/desktop/e2e/run.sh
index f30611f..d530b0e 100755
--- a/apps/desktop/e2e/run.sh
+++ b/apps/desktop/e2e/run.sh
@@ -21,8 +21,8 @@ if [ -z "${XDG_RUNTIME_DIR:-}" ]; then
 fi
 
 # Free ports unless given: several runs can share a machine.
-free=$(node "$here/free-ports.mjs" 5)
-read -r free_feed free_ssh free_sync free_idp free_vallic <<EOF
+free=$(node "$here/free-ports.mjs" 6)
+read -r free_feed free_ssh free_sync free_idp free_vallic free_hosts <<EOF
 $free
 EOF
 feed_port=${E2E_FEED_PORT:-$free_feed}
@@ -30,6 +30,7 @@ ssh_port=${E2E_SSH_PORT:-$free_ssh}
 sync_port=${E2E_SYNC_PORT:-$free_sync}
 idp_port=${E2E_IDP_PORT:-$free_idp}
 vallic_port=${E2E_VALLIC_PORT:-$free_vallic}
+host_feed_port=${E2E_HOST_FEED_PORT:-$free_hosts}
 export TAURI_DRIVER=${TAURI_DRIVER:-tauri-driver}
 
 want() {
@@ -102,7 +103,7 @@ cleanup() {
   rm -rf "$tmux_dir"
   # The AppImages unpacked to run (APPIMAGE_EXTRACT_AND_RUN): a few hundred MB per launch of a
   # new build, otherwise left behind in /tmp by every run.
-  rm -rf "$run/appimage/tmp"
+  rm -rf "$run/appimage/tmp" "$run/demo/tmp"
 }
 trap cleanup EXIT INT TERM
 
@@ -127,6 +128,8 @@ ListenAddress 127.0.0.1
 ListenAddress 127.0.0.2
 # The host certificate's address (a client that trusts the host CA asks for it there).
 ListenAddress 127.0.0.3
+# The feed's hosts (host-feed.mjs), whose host key the feed lists.
+ListenAddress 127.0.0.4
 HostKey $run/sshd/host_key
 HostCertificate $run/sshd/host_key-cert.pub
 PidFile $run/sshd/sshd.pid
@@ -163,6 +166,15 @@ for _ in $(seq 1 50); do
 done
 export MORPHGATE_VALLIC_CONSOLE="http://127.0.0.1:$vallic_port"
 
+# A stand-in feed of hosts and snippets, whose host is the sshd above.
+export E2E_HOST_FEED="http://127.0.0.1:$host_feed_port/morphgate.json" E2E_HOST_FEED_TOKEN="e2e-feed-token-0123456789abcdef"
+node "$here/host-feed.mjs" "$host_feed_port" "$run/sshd/host_key.pub" "$ssh_port" "$(id -un)" >"$run/host-feed.log" 2>&1 &
+pids="$pids $!"
+for _ in $(seq 1 50); do
+  curl -s "http://127.0.0.1:$host_feed_port/" >/dev/null 2>&1 && break
+  sleep 0.2
+done
+
 # A stand-in aws CLI (clouds/aws), whose running instance is the sshd above.
 export MORPHGATE_CLOUD_CLI_DIR="$here/clouds" E2E_CLOUD_PORT="$ssh_port" E2E_CLOUD_USER="$(id -un)"
 
@@ -242,4 +254,17 @@ if want mobile; then
     "$run/mobile/key" "$ssh_port" "$(id -un)" 2>"$run/mobile/stderr.log"
 fi
 
+# The README's demo (assets/demo/morphgate.svg), only when asked for: E2E_ONLY=demo.
+if [ -n "${E2E_ONLY:-}" ] && want demo; then
+  echo "e2e: demo (the AppImage's Hosts page and a session, drawn for the README)"
+  mkdir -p "$run/demo/tmp"
+  cp "$artifacts/$appimage" "$run/demo/"
+  APPIMAGE_EXTRACT_AND_RUN=1 APPIMAGELAUNCHER_DISABLE=1 TMPDIR="$run/demo/tmp" \
+    dbus-run-session -- "$here/session.sh" "$run/demo" \
+    node "$here/demo.mjs" "$run/demo/$appimage" "$run/demo" "$run/sshd/client_key" "$ssh_port" "$(id -un)" 2>"$run/demo/stderr.log"
+  [ -d "$root/tools/readme-demo/node_modules" ] || npm ci --prefix "$root/tools/readme-demo" --silent
+  node "$root/tools/readme-demo/demo-svg.mjs" "$run/demo/demo.json" "$run/demo/morphgate.svg"
+  echo "e2e: demo drawn: $run/demo/morphgate.svg (copy it to assets/demo/morphgate.svg)"
+fi
+
 echo "e2e: all scenarios passed; screenshots and logs in $run"
diff --git a/apps/desktop/src-tauri/src/bulk.rs b/apps/desktop/src-tauri/src/bulk.rs
index 4c08234..076d214 100644
--- a/apps/desktop/src-tauri/src/bulk.rs
+++ b/apps/desktop/src-tauri/src/bulk.rs
@@ -1,7 +1,7 @@
 //! Changes to several items at once, from the lists' selections: deleting them, and putting hosts
 //! in a group. Each item is changed as on its own; the ones that can't be are said, not hidden.
 
-use mg_store::{ItemData, LocalVault};
+use mg_store::{Item, ItemData, LocalVault, Snippet};
 use serde::Serialize;
 use tauri::State;
 
@@ -36,6 +36,18 @@ pub(crate) fn delete_items(v: &mut LocalVault, ids: &[String]) -> BulkResult {
     let mut left: Vec<String> = Vec::new();
     for id in ids {
         match v.item(id) {
+            // A feed's snippets go when the feed drops them.
+            Ok(Item {
+                data:
+                    ItemData::Snippet(Snippet {
+                        source: Some(_),
+                        name,
+                        ..
+                    }),
+                ..
+            }) => result.refused.push(format!(
+                "\"{name}\" comes from a feed: it goes when the feed drops it"
+            )),
             Ok(item) if plain(&item.data) => left.push(id.clone()),
             Ok(_) => result
                 .refused
@@ -209,6 +221,7 @@ mod tests {
                     name: "df".into(),
                     body: "df -h".into(),
                     tags: vec![],
+                    source: None,
                 }),
             )
             .unwrap()
diff --git a/apps/desktop/src-tauri/src/cloud.rs b/apps/desktop/src-tauri/src/cloud.rs
index 7a7fa38..05dbc22 100644
--- a/apps/desktop/src-tauri/src/cloud.rs
+++ b/apps/desktop/src-tauri/src/cloud.rs
@@ -1,21 +1,24 @@
 //! Cloud sources (docs/features/cloud-sources.md): hosts kept in step with Vallic Cloud, AWS,
-//! Google Cloud, Azure, Hetzner Cloud and DigitalOcean. For Vallic each device signs in itself (the
-//! console's device flow) and keeps its sign-in on the device; the others are listed with the
-//! provider's CLI as this device has it set up. The vault syncs the source and the hosts it made. A
-//! refresh brings the provider's hosts in: what the provider decides (address, port, user, login
-//! and jump commands, the label until it's renamed here) follows it, what's the person's (key,
-//! scheme, tags, notes, group) stays; a host the provider no longer lists is marked gone, not
-//! deleted.
-
-use std::collections::HashMap;
+//! Google Cloud, Azure, Hetzner Cloud and DigitalOcean, or a feed. For Vallic each device signs in
+//! itself (the console's device flow) and keeps its sign-in on the device; the others are listed
+//! with the provider's CLI as this device has it set up; a feed is read from its URL with the
+//! token the source holds. The vault syncs the source and the hosts it made. A refresh brings the
+//! provider's hosts in: what the provider decides (address, port, user, login and jump commands,
+//! the label until it's renamed here) follows it, what's the person's (key, scheme, tags, notes,
+//! group) stays; a host the provider no longer lists is marked gone, not deleted. A feed's
+//! snippets follow it whole.
+
+use std::collections::{HashMap, HashSet};
 use std::path::PathBuf;
 
 use mg_inventory::cli::Cli;
+use mg_inventory::feed::{self, FeedSnippet};
 use mg_inventory::shape::Shape;
 use mg_inventory::vallic::{DeviceAuth, Poll, Session, Vallic};
 use mg_inventory::{InventoryHost, aws, azure, gcp};
 use mg_store::{
-    CloudReach, CloudSource, Host, HostAuth, HostGroup, HostSource, ItemData, LocalVault,
+    Access, CloudReach, CloudSource, Host, HostAuth, HostGroup, HostSource, Item, ItemData,
+    LocalVault, Snippet, SnippetSource,
 };
 use serde::{Deserialize, Serialize};
 use tauri::State;
@@ -23,9 +26,32 @@ use tauri::State;
 use crate::vault::{VaultState, save};
 
 /// One cloud operation at a time on this device: a refresh token is used once, and two refreshes
-/// at once would replay it, which ends the sign-in.
+/// at once would replay it, which ends the sign-in. And why the last refresh of a source failed
+/// here, for its card (an automatic one has nowhere else to say it).
 #[derive(Default)]
-pub struct CloudState(tokio::sync::Mutex<()>);
+pub struct CloudState {
+    one: tokio::sync::Mutex<()>,
+    failed: std::sync::Mutex<HashMap<String, String>>,
+}
+
+impl CloudState {
+    fn note(&self, source_id: &str, result: &Result<RefreshResult, String>) {
+        if let Ok(mut failed) = self.failed.lock() {
+            match result {
+                Ok(_) => failed.remove(source_id),
+                Err(e) => failed.insert(source_id.to_owned(), e.clone()),
+            };
+        }
+    }
+
+    fn failure(&self, source_id: &str) -> Option<String> {
+        self.failed.lock().ok()?.get(source_id).cloned()
+    }
+}
+
+/// A feed's source refreshes itself on desktops: at unlock, then every 15 minutes while unlocked
+/// (the app's timer), unless it was refreshed (on any device) in the last 10.
+const FEED_FRESH_SECS: i64 = 10 * 60;
 
 /// Where this device keeps its sign-in to a source.
 fn secret_name(source_id: &str) -> String {
@@ -99,9 +125,27 @@ pub struct SourceView {
     group_tag: Option<String>,
     /// Where this device runs the provider's CLI from, when it was given.
     cli_path: Option<String>,
+    /// A feed's address.
+    url: Option<String>,
+    /// The end of a feed's token, to tell tokens apart (`…f3a9`); the rest is never shown.
+    token_end: Option<String>,
+    /// Snippets a feed keeps.
+    snippets: usize,
+    /// Why the last refresh on this device failed (an automatic one included).
+    failed: Option<String>,
 }
 
-fn views(v: &LocalVault) -> Result<Vec<SourceView>, String> {
+/// The token as the source shows it: its last 4 characters where it's long enough to spare them.
+fn token_end(token: &str) -> String {
+    let chars: Vec<char> = token.trim().chars().collect();
+    if chars.len() >= 16 {
+        format!("…{}", chars[chars.len() - 4..].iter().collect::<String>())
+    } else {
+        "…".into()
+    }
+}
+
+fn views(v: &LocalVault, cloud: &CloudState) -> Result<Vec<SourceView>, String> {
     let items = v.items().map_err(|e| e.to_string())?;
     let mut out = Vec::new();
     for item in &items {
@@ -113,6 +157,12 @@ fn views(v: &LocalVault) -> Result<Vec<SourceView>, String> {
             _ => None,
         });
         let (hosts, gone) = kept.fold((0, 0), |(n, g), s| (n + 1, g + usize::from(s.gone)));
+        let snippets = items
+            .iter()
+            .filter(|i| {
+                matches!(&i.data, ItemData::Snippet(Snippet { source: Some(s), .. }) if s.source_ref == item.id)
+            })
+            .count();
         out.push(SourceView {
             id: item.id.clone(),
             vault_id: item.vault_id.clone(),
@@ -136,6 +186,10 @@ fn views(v: &LocalVault) -> Result<Vec<SourceView>, String> {
             user: c.user.clone(),
             group_tag: c.group_tag.clone(),
             cli_path: v.setting(&cli_setting(&c.provider)).ok().flatten(),
+            url: c.url.clone(),
+            token_end: c.token.as_deref().map(token_end),
+            snippets,
+            failed: cloud.failure(&item.id),
         });
     }
     out.sort_by(|a, b| a.label.cmp(&b.label));
@@ -143,8 +197,11 @@ fn views(v: &LocalVault) -> Result<Vec<SourceView>, String> {
 }
 
 #[tauri::command]
-pub fn cloud_sources(vault: State<'_, VaultState>) -> Result<Vec<SourceView>, String> {
-    views(&*vault.guard()?)
+pub fn cloud_sources(
+    vault: State<'_, VaultState>,
+    cloud: State<'_, CloudState>,
+) -> Result<Vec<SourceView>, String> {
+    views(&*vault.guard()?, &cloud)
 }
 
 /// Starts signing in to Vallic Cloud: the code to show and the page to type it at.
@@ -183,7 +240,7 @@ pub async fn vallic_sign_in_poll(
     source_id: Option<String>,
     vault_id: Option<String>,
 ) -> Result<SignInStatus, String> {
-    let _one = cloud.0.lock().await;
+    let _one = cloud.one.lock().await;
     let v = client(endpoint.as_deref())?;
     let tokens = match v.poll(&device_code).await.map_err(|e| e.to_string())? {
         Poll::Pending => return Ok(SignInStatus::Pending { slower: false }),
@@ -229,7 +286,7 @@ pub async fn vallic_sign_in_poll(
     };
     vault.changed();
     let refresh = refresh_with(&vault, &v, &id, &mut session).await?;
-    let source = views(&*vault.guard()?)?
+    let source = views(&*vault.guard()?, &cloud)?
         .into_iter()
         .find(|s| s.id == id)
         .ok_or("the source went away")?;
@@ -259,8 +316,13 @@ pub struct RefreshResult {
     without_shell: Vec<String>,
     /// Machines without the address the source uses (running ones, or new stopped ones).
     without_address: Vec<String>,
-    /// Regions, projects or subscriptions that couldn't be listed, and why.
+    /// Regions, projects or subscriptions that couldn't be listed, and why; a feed's entries
+    /// left out.
     skipped: Vec<String>,
+    /// A feed's snippets.
+    snippets_added: usize,
+    snippets_updated: usize,
+    snippets_removed: usize,
 }
 
 /// Brings a source's hosts in from the provider: with this device's sign-in (Vallic Cloud), or
@@ -271,33 +333,136 @@ pub async fn cloud_refresh(
     cloud: State<'_, CloudState>,
     source_id: String,
 ) -> Result<RefreshResult, String> {
-    let _one = cloud.0.lock().await;
+    let _one = cloud.one.lock().await;
+    let result = refresh(&vault, &source_id).await;
+    cloud.note(&source_id, &result);
+    result
+}
+
+/// [`cloud_refresh`], with the one cloud operation running here held.
+async fn refresh(vault: &VaultState, source_id: &str) -> Result<RefreshResult, String> {
     let provider = match vault
         .guard()?
-        .item(&source_id)
+        .item(source_id)
         .map_err(|e| e.to_string())?
         .data
     {
         ItemData::CloudSource(c) => c.provider,
         _ => return Err("not a cloud source".into()),
     };
-    if provider != "vallic" {
-        return refresh_cli(&vault, &source_id).await;
+    match provider.as_str() {
+        "vallic" => {}
+        "feed" => return refresh_feed(vault, source_id).await,
+        _ => return refresh_cli(vault, source_id).await,
     }
     let (endpoint, refresh) = {
         let v = vault.guard()?;
-        let ItemData::CloudSource(c) = v.item(&source_id).map_err(|e| e.to_string())?.data else {
+        let ItemData::CloudSource(c) = v.item(source_id).map_err(|e| e.to_string())?.data else {
             return Err("not a cloud source".into());
         };
         let refresh = v
-            .local_secret(&secret_name(&source_id))
+            .local_secret(&secret_name(source_id))
             .map_err(|e| e.to_string())?
             .ok_or("this device isn't signed in to it: sign in first")?;
         (c.endpoint, refresh.to_string())
     };
     let v = client(endpoint.as_deref())?;
     let mut session = Session::new(refresh);
-    refresh_with(&vault, &v, &source_id, &mut session).await
+    refresh_with(vault, &v, source_id, &mut session).await
+}
+
+/// A feed: read from its URL with the source's token; its hosts and snippets into the vault.
+async fn refresh_feed(vault: &VaultState, source_id: &str) -> Result<RefreshResult, String> {
+    let c = match vault
+        .guard()?
+        .item(source_id)
+        .map_err(|e| e.to_string())?
+        .data
+    {
+        ItemData::CloudSource(c) => c,
+        _ => return Err("not a cloud source".into()),
+    };
+    let (Some(url), Some(token)) = (&c.url, &c.token) else {
+        return Err(format!("{}: a feed needs its address and token", c.label));
+    };
+    let feed = feed::fetch(&c.label, url, token)
+        .await
+        .map_err(|e| match e {
+            mg_inventory::Error::TokenRefused(name) => {
+                format!("{name} refused the token: change it in the source's settings")
+            }
+            e => e.to_string(),
+        })?;
+    apply_feed(vault, source_id, feed)
+}
+
+/// What a feed listed into the vault of source `source_id`: its hosts, then its snippets.
+fn apply_feed(
+    vault: &VaultState,
+    source_id: &str,
+    feed: feed::Feed,
+) -> Result<RefreshResult, String> {
+    let result = {
+        let mut store = vault.guard()?;
+        let mut result = apply(&mut store, source_id, &feed.hosts)?;
+        let (added, updated, removed) = apply_snippets(&mut store, source_id, &feed.snippets)?;
+        result.snippets_added = added;
+        result.snippets_updated = updated;
+        result.snippets_removed = removed;
+        result.skipped = feed.skipped;
+        result
+    };
+    vault.changed();
+    Ok(result)
+}
+
+/// Refreshes the feeds that are due: on a vault this device can write to, and not refreshed (on
+/// any device) in the last 10 minutes. The app calls it at unlock and every 15 minutes; a failure
+/// shows on the source's card. Returns how many it refreshed.
+#[tauri::command]
+pub async fn cloud_auto_refresh(
+    vault: State<'_, VaultState>,
+    cloud: State<'_, CloudState>,
+) -> Result<usize, String> {
+    if cfg!(mobile) {
+        return Ok(0);
+    }
+    let due = |v: &LocalVault| -> Result<Vec<String>, String> {
+        let writable: HashSet<String> = v
+            .vaults()
+            .map_err(|e| e.to_string())?
+            .into_iter()
+            .filter(|x| x.access >= Access::Write)
+            .map(|x| x.id)
+            .collect();
+        Ok(v.items()
+            .map_err(|e| e.to_string())?
+            .into_iter()
+            .filter(|i| writable.contains(&i.vault_id))
+            .filter_map(|i| match i.data {
+                ItemData::CloudSource(c)
+                    if c.provider == "feed" && now() - c.refreshed_at >= FEED_FRESH_SECS =>
+                {
+                    Some(i.id)
+                }
+                _ => None,
+            })
+            .collect())
+    };
+    let mut refreshed = 0;
+    let ids = due(&*vault.guard()?)?;
+    for id in ids {
+        let _one = cloud.one.lock().await;
+        // Refreshed meanwhile (by hand, or a sync brought another device's refresh).
+        let still = due(&*vault.guard()?)?.contains(&id);
+        if !still {
+            continue;
+        }
+        let result = refresh_feed(&vault, &id).await;
+        cloud.note(&id, &result);
+        refreshed += usize::from(result.is_ok());
+    }
+    Ok(refreshed)
 }
 
 async fn refresh_with(
@@ -410,6 +575,43 @@ async fn refresh_cli(vault: &VaultState, source_id: &str) -> Result<RefreshResul
     Ok(result)
 }
 
+/// Makes item `data` of `source_id` in `vault_id` under the id worked out from what it is
+/// (`kind`, `key`): two devices refreshing at once write the same item, and the second gets a
+/// conflict rather than a duplicate. A live item already holding that id (one that lost its
+/// source, say) leaves this one a new id of its own.
+fn create(
+    v: &mut LocalVault,
+    vault_id: &str,
+    source_id: &str,
+    kind: &str,
+    key: &str,
+    data: ItemData,
+) -> mg_store::Result<Item> {
+    let id = mg_store::derived_id(&[vault_id, source_id, kind, key]);
+    match v.item(&id) {
+        Ok(_) => save(v, None, Some(vault_id), data),
+        Err(mg_store::Error::NotFound(_)) => v.insert_in(vault_id, &id, data),
+        Err(e) => Err(e),
+    }
+}
+
+/// The host's tags: the person's (what the source didn't give it), then what the source gives
+/// it now.
+fn merged_tags(h: &Host, before: &[String], now: &[String]) -> Vec<String> {
+    let mut tags: Vec<String> = h
+        .tags
+        .iter()
+        .filter(|t| !before.contains(t))
+        .cloned()
+        .collect();
+    for t in now {
+        if !tags.contains(t) {
+            tags.push(t.clone());
+        }
+    }
+    tags
+}
+
 /// The platform's hosts into the vault of source `source_id`.
 fn apply(
     v: &mut LocalVault,
@@ -477,6 +679,8 @@ fn apply(
                 place: via.place.clone(),
                 project: via.project.clone(),
             }),
+            host_keys: ih.host_keys.clone(),
+            tags: ih.tags.clone(),
         };
         match kept.remove(&ih.external_id) {
             Some((id, mut h)) => {
@@ -496,6 +700,12 @@ fn apply(
                 if ih.jump.is_none() {
                     h.jump_ref = source_jump.clone().filter(|_| ih.via.is_none());
                 }
+                let before = h
+                    .source
+                    .as_ref()
+                    .map(|s| s.tags.clone())
+                    .unwrap_or_default();
+                h.tags = merged_tags(&h, &before, &ih.tags);
                 h.source = Some(Box::new(mark(&ih.label)));
                 if h != was {
                     save(v, Some(&id), None, ItemData::Host(h)).map_err(e)?;
@@ -506,18 +716,28 @@ fn apply(
             // New and without an address (stopped): nothing to connect to yet.
             None if ih.hostname.is_empty() => result.without_address.push(ih.label.clone()),
             None => {
+                // In the group of that name, made when missing; none where the source names none.
                 let group_ref = match groups.get(&ih.group.to_lowercase()) {
-                    Some(g) => g.clone(),
+                    _ if ih.group.trim().is_empty() => None,
+                    Some(g) => Some(g.clone()),
                     None => {
                         let group = HostGroup {
                             name: ih.group.clone(),
                             ..HostGroup::default()
                         };
-                        let id = save(v, None, Some(&vault_id), ItemData::HostGroup(group))
-                            .map_err(e)?
-                            .id;
-                        groups.insert(ih.group.to_lowercase(), id.clone());
-                        id
+                        let key = ih.group.to_lowercase();
+                        let id = create(
+                            v,
+                            &vault_id,
+                            source_id,
+                            "group",
+                            &key,
+                            ItemData::HostGroup(group),
+                        )
+                        .map_err(e)?
+                        .id;
+                        groups.insert(key, id.clone());
+                        Some(id)
                     }
                 };
                 let host = Host {
@@ -535,9 +755,9 @@ fn apply(
                     vpn_ref: None,
                     theme_ref: None,
                     record_sessions: false,
-                    tags: Vec::new(),
+                    tags: ih.tags.clone(),
                     notes: String::new(),
-                    group_ref: Some(group_ref),
+                    group_ref,
                     identity_ref: None,
                     keep_session: false,
                     forward_agent: false,
@@ -546,9 +766,16 @@ fn apply(
                     proxy_command: None,
                     source: Some(Box::new(mark(&ih.label))),
                 };
-                let id = save(v, None, Some(&vault_id), ItemData::Host(host))
-                    .map_err(e)?
-                    .id;
+                let id = create(
+                    v,
+                    &vault_id,
+                    source_id,
+                    "host",
+                    &ih.external_id,
+                    ItemData::Host(host),
+                )
+                .map_err(e)?
+                .id;
                 ids.insert(ih.external_id.clone(), id);
                 result.added += 1;
             }
@@ -583,6 +810,68 @@ fn apply(
     Ok(result)
 }
 
+/// A feed's snippets into its vault: the feed decides them whole (they're read-only in the app),
+/// so one it no longer lists is deleted. Returns (added, updated, removed).
+fn apply_snippets(
+    v: &mut LocalVault,
+    source_id: &str,
+    snippets: &[FeedSnippet],
+) -> Result<(usize, usize, usize), String> {
+    let e = |e: mg_store::Error| e.to_string();
+    let vault_id = v.item(source_id).map_err(e)?.vault_id;
+    let mut kept: HashMap<String, (String, Snippet)> = v
+        .items()
+        .map_err(e)?
+        .into_iter()
+        .filter(|i| i.vault_id == vault_id)
+        .filter_map(|i| match i.data {
+            ItemData::Snippet(s) => match &s.source {
+                Some(src) if src.source_ref == source_id => {
+                    Some((src.external_id.clone(), (i.id, s)))
+                }
+                _ => None,
+            },
+            _ => None,
+        })
+        .collect();
+    let (mut added, mut updated) = (0, 0);
+    for fs in snippets {
+        let snippet = Snippet {
+            name: fs.name.clone(),
+            body: fs.body.clone(),
+            tags: fs.tags.clone(),
+            source: Some(SnippetSource {
+                source_ref: source_id.to_owned(),
+                external_id: fs.external_id.clone(),
+            }),
+        };
+        match kept.remove(&fs.external_id) {
+            Some((_, was)) if was == snippet => {}
+            Some((id, _)) => {
+                save(v, Some(&id), None, ItemData::Snippet(snippet)).map_err(e)?;
+                updated += 1;
+            }
+            None => {
+                create(
+                    v,
+                    &vault_id,
+                    source_id,
+                    "snippet",
+                    &fs.external_id,
+                    ItemData::Snippet(snippet),
+                )
+                .map_err(e)?;
+                added += 1;
+            }
+        }
+    }
+    let removed = kept.len();
+    for (id, _) in kept.into_values() {
+        v.delete(&id).map_err(e)?;
+    }
+    Ok((added, updated, removed))
+}
+
 /// Ends this device's sign-in (on the console too); the source and its hosts stay.
 #[tauri::command]
 pub async fn cloud_sign_out(
@@ -590,7 +879,7 @@ pub async fn cloud_sign_out(
     cloud: State<'_, CloudState>,
     source_id: String,
 ) -> Result<(), String> {
-    let _one = cloud.0.lock().await;
+    let _one = cloud.one.lock().await;
     let (endpoint, refresh) = {
         let v = vault.guard()?;
         let endpoint = match v.item(&source_id).map_err(|e| e.to_string())?.data {
@@ -610,7 +899,8 @@ pub async fn cloud_sign_out(
         .map_err(|e| e.to_string())
 }
 
-/// Removes a source: its hosts too (`delete_hosts`), or they stay as hosts of their own.
+/// Removes a source: its hosts (and a feed's snippets) too (`delete_hosts`), or they stay as
+/// hosts and snippets of their own.
 #[tauri::command]
 pub async fn cloud_source_delete(
     vault: State<'_, VaultState>,
@@ -637,6 +927,19 @@ pub async fn cloud_source_delete(
                 _ => None,
             })
             .collect();
+        let snippets: Vec<(String, Snippet)> = v
+            .items()
+            .map_err(e)?
+            .into_iter()
+            .filter_map(|i| match i.data {
+                ItemData::Snippet(s)
+                    if s.source.as_ref().is_some_and(|s| s.source_ref == source_id) =>
+                {
+                    Some((i.id, s))
+                }
+                _ => None,
+            })
+            .collect();
         if delete_hosts {
             // Hosts that jump through others first, so none is still in use when it goes.
             let (through, rest): (Vec<_>, Vec<_>) =
@@ -644,11 +947,18 @@ pub async fn cloud_source_delete(
             for (id, _) in through.into_iter().chain(rest) {
                 v.delete(&id).map_err(e)?;
             }
+            for (id, _) in snippets {
+                v.delete(&id).map_err(e)?;
+            }
         } else {
             for (id, mut h) in hosts {
                 h.source = None;
                 save(&mut v, Some(&id), None, ItemData::Host(h)).map_err(e)?;
             }
+            for (id, mut s) in snippets {
+                s.source = None;
+                save(&mut v, Some(&id), None, ItemData::Snippet(s)).map_err(e)?;
+            }
         }
         v.delete(&source_id).map_err(e)?;
     }
@@ -888,7 +1198,7 @@ pub async fn cloud_source_add(
     key_id: Option<String>,
     settings: SourceSettings,
 ) -> Result<Added, String> {
-    let _one = cloud.0.lock().await;
+    let _one = cloud.one.lock().await;
     let cli = find_cli(&*vault.guard()?, &provider)?;
     let profile = trimmed(settings.profile.clone());
     let account = whoami(&cli, &provider, profile.as_deref()).await?;
@@ -925,7 +1235,7 @@ pub async fn cloud_source_add(
     };
     vault.changed();
     let refresh = refresh_cli(&vault, &id).await?;
-    let source = views(&*vault.guard()?)?
+    let source = views(&*vault.guard()?, &cloud)?
         .into_iter()
         .find(|s| s.id == id)
         .ok_or("the source went away")?;
@@ -948,8 +1258,10 @@ pub fn cloud_source_settings(
         let ItemData::CloudSource(mut source) = v.item(&source_id).map_err(e)?.data else {
             return Err("not a cloud source".into());
         };
-        if source.provider == "vallic" {
-            return Err("Vallic Cloud lists what your sign-in reaches".into());
+        match source.provider.as_str() {
+            "vallic" => return Err("Vallic Cloud lists what your sign-in reaches".into()),
+            "feed" => return Err("a feed's settings are its address and token".into()),
+            _ => {}
         }
         settings.onto(&mut source);
         save(
@@ -964,6 +1276,118 @@ pub fn cloud_source_settings(
     Ok(())
 }
 
+/// A feed source's name, address and token (`None` or empty: the token stays as it is).
+#[derive(Deserialize)]
+#[serde(rename_all = "camelCase")]
+pub struct FeedInput {
+    #[serde(default)]
+    label: Option<String>,
+    url: String,
+    #[serde(default)]
+    token: Option<String>,
+}
+
+/// A feed's address, checked: `https://`, or `http://` on this computer.
+fn feed_url(url: &str) -> Result<String, String> {
+    feed::check_url(url)
+        .map(|u| u.to_string())
+        .map_err(|e| e.to_string())
+}
+
+/// Adds a feed (in `vault_id`, default the personal vault) once it has been read with the token,
+/// named as given, else as the feed calls itself, else by its host; then brings its hosts and
+/// snippets in.
+#[tauri::command]
+pub async fn cloud_feed_add(
+    vault: State<'_, VaultState>,
+    cloud: State<'_, CloudState>,
+    vault_id: Option<String>,
+    key_id: Option<String>,
+    input: FeedInput,
+) -> Result<Added, String> {
+    let _one = cloud.one.lock().await;
+    let parsed = feed::check_url(&input.url).map_err(|e| e.to_string())?;
+    let url = parsed.to_string();
+    let host = parsed.host_str().unwrap_or("the feed").to_owned();
+    let token = trimmed(input.token).ok_or("a feed needs the token it's read with")?;
+    let label = trimmed(input.label);
+    // Read before it's kept: a wrong address or token is said now, and the feed may name itself.
+    let read = feed::fetch(label.as_deref().unwrap_or(&host), &url, &token)
+        .await
+        .map_err(|e| e.to_string())?;
+    let id = {
+        let mut store = vault.guard()?;
+        let target = match vault_id.filter(|v| !v.is_empty()) {
+            Some(id) => id,
+            None => personal(&store)?,
+        };
+        let source = CloudSource {
+            label: label.or(read.name.clone()).unwrap_or(host),
+            provider: "feed".into(),
+            key_ref: trimmed(key_id),
+            account: String::new(),
+            url: Some(url),
+            token: Some(token),
+            ..CloudSource::default()
+        };
+        save(
+            &mut store,
+            None,
+            Some(&target),
+            ItemData::CloudSource(source),
+        )
+        .map_err(|e| e.to_string())?
+        .id
+    };
+    vault.changed();
+    // What was read, brought in: no second request.
+    let refresh = apply_feed(&vault, &id, read);
+    cloud.note(&id, &refresh);
+    let source = views(&*vault.guard()?, &cloud)?
+        .into_iter()
+        .find(|s| s.id == id)
+        .ok_or("the source went away")?;
+    Ok(Added {
+        source: Box::new(source),
+        refresh: refresh?,
+    })
+}
+
+/// Changes a feed's name, address or token (the next refresh reads it).
+#[tauri::command]
+pub fn cloud_feed_settings(
+    vault: State<'_, VaultState>,
+    source_id: String,
+    input: FeedInput,
+) -> Result<(), String> {
+    {
+        let mut v = vault.guard()?;
+        let e = |e: mg_store::Error| e.to_string();
+        let ItemData::CloudSource(mut source) = v.item(&source_id).map_err(e)?.data else {
+            return Err("not a cloud source".into());
+        };
+        if source.provider != "feed" {
+            return Err("not a feed".into());
+        }
+        if let Some(label) = trimmed(input.label) {
+            source.label = label;
+        }
+        source.url = Some(feed_url(&input.url)?);
+        if let Some(token) = trimmed(input.token) {
+            source.token = Some(token);
+        }
+        save(
+            &mut v,
+            Some(&source_id),
+            None,
+            ItemData::CloudSource(source),
+        )
+        .map_err(e)?;
+    }
+    vault.changed();
+    Ok(())
+}
+
 /// Puts a key's public half on the signed-in person's Vallic account.
 #[tauri::command]
 pub async fn cloud_add_key(
@@ -972,7 +1396,7 @@ pub async fn cloud_add_key(
     source_id: String,
     key_id: String,
 ) -> Result<(), String> {
-    let _one = cloud.0.lock().await;
+    let _one = cloud.one.lock().await;
     let (endpoint, refresh, label, public_key) = {
         let v = vault.guard()?;
         let e = |e: mg_store::Error| e.to_string();
@@ -1037,6 +1461,8 @@ mod tests {
             state: None,
             key_name: None,
             via: None,
+            host_keys: vec![],
+            tags: vec![],
         }
     }
 
@@ -1109,6 +1535,8 @@ mod tests {
             state: state.map(str::to_owned),
             key_name: Some("deploy".into()),
             via: None,
+            host_keys: vec![],
+            tags: vec![],
         };
         let first = apply(
             &mut v,
@@ -1178,6 +1606,8 @@ mod tests {
                 place: "eu-central-1".into(),
                 project: None,
             }),
+            host_keys: vec![],
+            tags: vec![],
         };
         let command = reach_command(&v, &source).unwrap().unwrap();
         assert_eq!(
@@ -1292,4 +1722,115 @@ mod tests {
         };
         assert!(gone.source.unwrap().gone);
     }
+
+    /// A feed: its hosts under ids worked out from what they are (the same on every device),
+    /// its groups, tags (the person's kept) and host keys; its snippets follow it whole.
+    #[test]
+    fn a_feed_keeps_hosts_and_snippets_in_step() {
+        let mut v = vault();
+        let target = personal(&v).unwrap();
+        let sid = save(
+            &mut v,
+            None,
+            Some(&target),
+            ItemData::CloudSource(CloudSource {
+                label: "Ops".into(),
+                provider: "feed".into(),
+                url: Some("https://ops.example/feed".into()),
+                token: Some("T".into()),
+                ..CloudSource::default()
+            }),
+        )
+        .unwrap()
+        .id;
+        let doc = |port: u16, tags: &[&str], snippet_body: Option<&str>| {
+            let mut snippets =
+                vec![serde_json::json!({ "id": "up", "name": "Uptime", "body": "uptime" })];
+            if let Some(body) = snippet_body {
+                snippets.push(serde_json::json!({ "id": "logs", "name": "Logs", "body": body }));
+            }
+            mg_inventory::feed::parse(
+                "Ops",
+                serde_json::json!({
+                    "version": 1,
+                    "hosts": [
+                        { "id": "bastion", "hostname": "bastion.example", "user": "ops", "group": "Bastions",
+                          "host_keys": ["ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOMqqnkVzrm0SdG6UOoqKLsabgH5C9okWi0dh2l9GKJl"] },
+                        { "id": "web", "hostname": "10.0.0.1", "port": port, "user": "ops", "jump": "bastion",
+                          "tags": tags },
+                        { "id": "loose", "hostname": "loose.example", "user": "ops" }
+                    ],
+                    "snippets": snippets
+                })
+                .to_string()
+                .as_bytes(),
+            )
+            .unwrap()
+        };
+        let first = doc(22, &["prod"], Some("journalctl -n 100"));
+        let r = apply(&mut v, &sid, &first.hosts).unwrap();
+        assert_eq!((r.added, r.updated), (3, 0));
+        assert_eq!(
+            apply_snippets(&mut v, &sid, &first.snippets).unwrap(),
+            (2, 0, 0)
+        );
+        let hosts = hosts_of(&v, &sid);
+        let id_of = |label: &str| {
+            hosts
+                .iter()
+                .find(|(_, h)| h.label == label)
+                .unwrap()
+                .0
+                .clone()
+        };
+        let web = id_of("web");
+        // Every device works out the same id.
+        assert_eq!(
+            web,
+            mg_store::derived_id(&[&target, &sid, "host", "feed:web"])
+        );
+        let ItemData::Host(h) = v.item(&web).unwrap().data else {
+            unreachable!()
+        };
+        assert_eq!(h.jump_ref, Some(id_of("bastion")));
+        assert_eq!(h.tags, ["prod"]);
+        assert_eq!(h.group_ref, None, "no group where the feed names none");
+        let ItemData::Host(b) = v.item(&id_of("bastion")).unwrap().data else {
+            unreachable!()
+        };
+        assert_eq!(b.source.unwrap().host_keys.len(), 1);
+        assert!(b.group_ref.is_some());
+
+        // The person tags it; the feed moves its port and swaps its tag.
+        let ItemData::Host(mut mine) = v.item(&web).unwrap().data else {
+            unreachable!()
+        };
+        mine.tags.push("mine".into());
+        save(&mut v, Some(&web), None, ItemData::Host(mine)).unwrap();
+        let second = doc(2222, &["fsn1"], None);
+        let r = apply(&mut v, &sid, &second.hosts).unwrap();
+        assert_eq!((r.added, r.updated, r.gone), (0, 1, 0));
+        let ItemData::Host(h) = v.item(&web).unwrap().data else {
+            unreachable!()
+        };
+        assert_eq!(
+            (h.port, h.tags.as_slice()),
+            (2222, &["mine".to_owned(), "fsn1".to_owned()][..])
+        );
+        // The snippet the feed dropped goes; nobody's edits are lost, it couldn't be edited.
+        assert_eq!(
+            apply_snippets(&mut v, &sid, &second.snippets).unwrap(),
+            (0, 0, 1)
+        );
+        let names: Vec<String> = v
+            .items()
+            .unwrap()
+            .into_iter()
+            .filter_map(|i| match i.data {
+                ItemData::Snippet(s) => Some(s.name),
+                _ => None,
+            })
+            .collect();
+        assert_eq!(names, ["Uptime"]);
+    }
 }
diff --git a/apps/desktop/src-tauri/src/lib.rs b/apps/desktop/src-tauri/src/lib.rs
index 51f6b49..bdc4208 100644
--- a/apps/desktop/src-tauri/src/lib.rs
+++ b/apps/desktop/src-tauri/src/lib.rs
@@ -211,6 +211,9 @@ pub fn run() {
             cloud::cloud_source_add,
             cloud::cloud_source_settings,
             cloud::cloud_add_key,
+            cloud::cloud_feed_add,
+            cloud::cloud_feed_settings,
+            cloud::cloud_auto_refresh,
             agents::agents_list,
             orgs::orgs_locked,
             links::links_take,
@@ -221,6 +224,7 @@ pub fn run() {
             vault::snippets_list,
             vault::snippet_save,
             vault::snippet_delete,
+            vault::snippet_sent,
             snippet_import::snippets_read_csv,
             snippet_import::snippets_csv_example,
             tunnels::forwards_list,
diff --git a/apps/desktop/src-tauri/src/offboard.rs b/apps/desktop/src-tauri/src/offboard.rs
index 216d144..de7f3cb 100644
--- a/apps/desktop/src-tauri/src/offboard.rs
+++ b/apps/desktop/src-tauri/src/offboard.rs
@@ -38,7 +38,8 @@ pub struct ReachView {
 #[derive(Serialize)]
 #[serde(rename_all = "camelCase")]
 pub struct SecretView {
-    /// `password` (a host's saved password), `key` (a shared SSH key) or `vpn`.
+    /// `password` (a host's saved password), `key` (a shared SSH key), `vpn`, or `feed` (a
+    /// feed's token, to rotate where the feed is published).
     kind: &'static str,
     item_id: String,
     label: String,
@@ -158,6 +159,16 @@ pub async fn offboard_summary(
                         used_by: Vec::new(),
                     });
                 }
+                ItemData::CloudSource(c) if c.token.is_some() => {
+                    r.other += 1;
+                    secrets.push(SecretView {
+                        kind: "feed",
+                        item_id: item.id.clone(),
+                        label: c.label.clone(),
+                        vault_name: name.clone(),
+                        used_by: Vec::new(),
+                    });
+                }
                 ItemData::MemberKey(_) => {}
                 _ => r.other += 1,
             }
diff --git a/apps/desktop/src-tauri/src/ssh.rs b/apps/desktop/src-tauri/src/ssh.rs
index 0a1924e..f57e813 100644
--- a/apps/desktop/src-tauri/src/ssh.rs
+++ b/apps/desktop/src-tauri/src/ssh.rs
@@ -184,6 +184,7 @@ pub(crate) fn resolve(target: Target, vault: &VaultState) -> Result<Resolved, St
                     user,
                     auth,
                     via_command: None,
+                    listed_keys: None,
                 },
                 jumps: Vec::new(),
                 vpn: None,
@@ -313,12 +314,25 @@ fn saved_hop(
             fingerprint: key,
         },
     };
+    // The host keys its feed lists: they decide, instead of what this device pinned.
+    let listed_keys = host
+        .source
+        .as_ref()
+        .filter(|s| !s.host_keys.is_empty())
+        .map(|s| mg_ssh::ListedKeys {
+            keys: s.host_keys.clone(),
+            from: match v.item(&s.source_ref).map(|i| i.data) {
+                Ok(ItemData::CloudSource(c)) => c.label,
+                _ => "its feed".into(),
+            },
+        });
     Ok(Hop {
         host: host.hostname,
         port: host.port,
         user: host.user,
         auth,
         via_command: host.jump_command,
+        listed_keys,
     })
 }
 
@@ -520,6 +534,7 @@ pub async fn ssh_connect(
         auth: target.auth,
         jumps,
         via_command: target.via_command,
+        listed_keys: target.listed_keys,
         dialer,
         term: "xterm-256color".into(),
         size: request.size,
diff --git a/apps/desktop/src-tauri/src/vault.rs b/apps/desktop/src-tauri/src/vault.rs
index 06a1d16..7543878 100644
--- a/apps/desktop/src-tauri/src/vault.rs
+++ b/apps/desktop/src-tauri/src/vault.rs
@@ -330,6 +330,8 @@ pub struct HostSourceView {
     state: Option<String>,
     /// Reached through its cloud: `aws-ssm`, `aws-eice` or `gcp-iap`.
     via: Option<String>,
+    /// The feed that lists its host keys (which decide instead of a pinned key), if one does.
+    listed_by: Option<String>,
 }
 
 #[derive(Serialize)]
@@ -373,6 +375,7 @@ impl HostView {
                 no_forwarding: s.no_forwarding,
                 state: s.state,
                 via: s.reach.map(|r| r.kind),
+                listed_by: (!s.host_keys.is_empty()).then(String::new),
             }),
             group_id: h.group_ref,
             identity_id: h.identity_ref,
@@ -409,6 +412,9 @@ impl HostView {
             }) = v.item(&s.source_id)
         {
             s.provider = c.provider;
+            if let Some(by) = s.listed_by.as_mut() {
+                *by = c.label;
+            }
         }
         Some(view)
     }
@@ -1027,6 +1033,18 @@ pub struct SnippetView {
     body: String,
     tags: Vec<String>,
     updated_at: i64,
+    /// The feed that keeps it (it's read-only here), if one does.
+    source: Option<SnippetSourceView>,
+    /// Its feed changed the body since this device last pasted or ran it: ask first.
+    changed: bool,
+}
+
+#[derive(Serialize)]
+#[serde(rename_all = "camelCase")]
+pub struct SnippetSourceView {
+    source_id: String,
+    /// The feed's name.
+    label: String,
 }
 
 #[derive(Deserialize)]
@@ -1041,22 +1059,79 @@ pub struct SnippetInput {
     tags: Vec<String>,
 }
 
+/// Where this device keeps the hash of the body it last sent of a feed's snippet (not synced).
+fn sent_setting(id: &str) -> String {
+    format!("snippet-sent:{id}")
+}
+
+fn body_hash(body: &str) -> String {
+    use sha2::{Digest, Sha256};
+    Sha256::digest(body.as_bytes())
+        .iter()
+        .map(|b| format!("{b:02x}"))
+        .collect()
+}
+
+fn snippet_view(
+    v: &LocalVault,
+    id: String,
+    vault_id: String,
+    updated_at: i64,
+    s: Snippet,
+) -> SnippetView {
+    let source = s.source.as_ref().map(|src| SnippetSourceView {
+        source_id: src.source_ref.clone(),
+        label: match v.item(&src.source_ref).map(|i| i.data) {
+            Ok(ItemData::CloudSource(c)) => c.label,
+            _ => "its feed".into(),
+        },
+    });
+    let changed = source.is_some()
+        && v.setting(&sent_setting(&id))
+            .ok()
+            .flatten()
+            .is_some_and(|sent| sent != body_hash(&s.body));
+    SnippetView {
+        id,
+        vault_id,
+        name: s.name,
+        body: s.body,
+        tags: s.tags,
+        updated_at,
+        source,
+        changed,
+    }
+}
+
+/// A feed's snippet can't be changed here: "make a copy" instead.
+fn from_feed(v: &LocalVault, id: &str) -> Result<(), String> {
+    match v.item(id).map(|i| i.data) {
+        Ok(ItemData::Snippet(Snippet {
+            source: Some(src),
+            name,
+            ..
+        })) => {
+            let feed = match v.item(&src.source_ref).map(|i| i.data) {
+                Ok(ItemData::CloudSource(c)) => c.label,
+                _ => "its feed".into(),
+            };
+            Err(format!(
+                "\"{name}\" comes from {feed}: it changes there, or make a copy to change it here"
+            ))
+        }
+        _ => Ok(()),
+    }
+}
+
 #[tauri::command]
 pub fn snippets_list(vault: State<'_, VaultState>) -> Result<Vec<SnippetView>, String> {
-    let mut snippets: Vec<SnippetView> = vault
-        .guard()?
+    let v = vault.guard()?;
+    let mut snippets: Vec<SnippetView> = v
         .items()
         .map_err(err)?
         .into_iter()
         .filter_map(|i| match i.data {
-            ItemData::Snippet(s) => Some(SnippetView {
-                id: i.id,
-                vault_id: i.vault_id,
-                name: s.name,
-                body: s.body,
-                tags: s.tags,
-                updated_at: i.updated_at,
-            }),
+            ItemData::Snippet(s) => Some(snippet_view(&v, i.id, i.vault_id, i.updated_at, s)),
             _ => None,
         })
         .collect();
@@ -1078,40 +1153,59 @@ pub fn snippet_save(
             .map(|t| t.trim().to_owned())
             .filter(|t| !t.is_empty())
             .collect(),
+        source: None,
     };
+    let mut v = vault.guard()?;
+    if let Some(id) = &input.id {
+        from_feed(&v, id)?;
+    }
     let Item {
         id,
         vault_id,
         updated_at,
         data,
     } = save(
-        &mut *vault.guard()?,
+        &mut v,
         input.id.as_deref(),
         input.vault_id.as_deref(),
         ItemData::Snippet(snippet),
     )
     .map_err(err)?;
-    vault.changed();
-    match data {
-        ItemData::Snippet(s) => Ok(SnippetView {
-            id,
-            vault_id,
-            name: s.name,
-            body: s.body,
-            tags: s.tags,
-            updated_at,
-        }),
+    let view = match data {
+        ItemData::Snippet(s) => snippet_view(&v, id, vault_id, updated_at, s),
         _ => unreachable!("upsert returns the data it was given"),
-    }
+    };
+    drop(v);
+    vault.changed();
+    Ok(view)
 }
 
 #[tauri::command]
 pub fn snippet_delete(vault: State<'_, VaultState>, id: String) -> Result<(), String> {
-    vault.guard()?.delete(&id).map_err(err)?;
+    {
+        let mut v = vault.guard()?;
+        from_feed(&v, &id)?;
+        v.delete(&id).map_err(err)?;
+    }
     vault.changed();
     Ok(())
 }
 
+/// This device pasted or ran a feed's snippet: what it sent is what it'll compare the next
+/// change with.
+#[tauri::command]
+pub fn snippet_sent(vault: State<'_, VaultState>, id: String) -> Result<(), String> {
+    let v = vault.guard()?;
+    let ItemData::Snippet(s) = v.item(&id).map_err(err)?.data else {
+        return Err("not a snippet".into());
+    };
+    if s.source.is_some() {
+        v.set_setting(&sent_setting(&id), Some(&body_hash(&s.body)))
+            .map_err(err)?;
+    }
+    Ok(())
+}
+
 #[cfg(test)]
 mod tests {
     use super::*;
diff --git a/apps/desktop/src/App.tsx b/apps/desktop/src/App.tsx
index 05fca81..a2042fd 100644
--- a/apps/desktop/src/App.tsx
+++ b/apps/desktop/src/App.tsx
@@ -10,6 +10,7 @@ import {
   hostCas as hostCasApi,
   keys as keysApi,
   snippets as snippetsApi,
+  cloud as cloudApi,
   forwards as forwardsApi,
   device as deviceApi,
   sync as syncApi,
@@ -54,6 +55,7 @@ import { HostEditor } from "./HostEditor";
 import { GroupEditor, IdentityEditor } from "./Identities";
 import { HostCaPanel } from "./HostCaPanel";
 import { HostKeyChangedDialog, HostKeyDialog } from "./HostKeyDialog";
+import { SnippetCheckDialog } from "./SnippetCheck";
 import { RouteBar } from "./RouteBar";
 import { addPane, dividers, holds, moveDivider, panes, rects, removePane, type Divider, type Rect, type Split } from "./splits";
 import { SessionLogsPanel } from "./SessionLogs";
@@ -169,7 +171,7 @@ type View =
   /** Hosts from OpenSSH's configuration. */
   | { kind: "importHosts" }
   | { kind: "importSnippets" }
-  | { kind: "cloud" }
+  | { kind: "cloud"; add?: "feed" }
   | { kind: "groups" }
   /** One group and everything in it. */
   | { kind: "groupPage"; id: string }
@@ -390,6 +392,8 @@ function Workspace({ onLock, termSettings, onSettingsChanged: loadTermSettings,
   // A security key waiting for a touch to sign in.
   const [touch, setTouch] = useState<SecurityKeyTouch | null>(null);
   const [changedKeys, setChangedKeys] = useState<ChangedHostKey[]>([]);
+  // A feed's snippet that changed since this device last sent it, waiting for a yes.
+  const [checking, setChecking] = useState<{ snippet: SnippetView; run: boolean; go: () => void } | null>(null);
   const [vpnPrompts, setVpnPrompts] = useState<VpnPrompt[]>([]);
   const [autoLock, setAutoLock] = useState(0);
   useIdleLock(autoLock, onLock);
@@ -433,6 +437,32 @@ function Workspace({ onLock, termSettings, onSettingsChanged: loadTermSettings,
     }
   }, []);
 
+  // Feeds refresh themselves on desktops: once the first sync since unlocking has brought what
+  // other devices refreshed (at once without sync; after 20 s at the latest), then every 15
+  // minutes. The backend skips a feed refreshed on any device in the last 10.
+  const feedsRan = useRef(false);
+  const feedsSyncAt = useRef<number | null | undefined>(undefined);
+  const refreshFeeds = useCallback(() => {
+    feedsRan.current = true;
+    // What it changed shows at once (the lists otherwise follow only a sync).
+    void cloudApi.autoRefresh().then((n) => n > 0 && void refresh(), () => {});
+  }, [refresh]);
+  useEffect(() => {
+    if (mobileOs) return;
+    const first = window.setTimeout(() => feedsRan.current || refreshFeeds(), 20_000);
+    const every = window.setInterval(refreshFeeds, 15 * 60_000);
+    return () => (window.clearTimeout(first), window.clearInterval(every));
+  }, [refreshFeeds]);
+  useEffect(() => {
+    if (mobileOs || feedsRan.current || !syncStatus) return;
+    const syncing = syncStatus.enabled && !syncStatus.signedOut;
+    if (feedsSyncAt.current === undefined) {
+      feedsSyncAt.current = syncStatus.lastSyncAt;
+      if (syncing) return;
+    }
+    if (!syncing || (!syncStatus.syncing && syncStatus.lastSyncAt !== feedsSyncAt.current)) refreshFeeds();
+  }, [syncStatus, refreshFeeds]);
+
   // After a move, the editor in front shows the item where it went (a copy has a new id).
   const moves = useMemo(
     () => ({
@@ -675,7 +705,20 @@ function Workspace({ onLock, termSettings, onSettingsChanged: loadTermSettings,
     if (view.kind !== "tab" || view.key !== key) open({ kind: "tab", key });
   };
 
-  const sendSnippet = (body: string, run: boolean) => sendTarget && sendTo(sendTarget.key, body, run);
+  /** What this device sent of a feed's snippet: a later change of it asks first. */
+  const markSent = (id: string) =>
+    void snippetsApi.sent(id).then(
+      () => setSnippets((all) => all.map((x) => (x.id === id ? { ...x, changed: false } : x))),
+      () => {},
+    );
+  /** Sends a snippet (`go`), asking first where its feed changed it since this device last did. */
+  const guardSnippet = (snippet: SnippetView | undefined, run: boolean, go: () => void) => {
+    if (snippet?.source && snippet.changed) return setChecking({ snippet, run, go });
+    go();
+    if (snippet?.source) markSent(snippet.id);
+  };
+  const sendSnippet = (body: string, run: boolean, snippet?: SnippetView) =>
+    sendTarget && guardSnippet(snippet, run, () => sendTo(sendTarget.key, body, run));
 
   const hostOf = (t: Tab) => (t.target.kind === "saved" ? hostList.find((h) => h.id === (t.target as { hostId: string }).hostId) : undefined);
   const current = tabs.find((t) => t.key === activeTab);
@@ -931,13 +974,15 @@ function Workspace({ onLock, termSettings, onSettingsChanged: loadTermSettings,
           onEditGroup={(id) => open({ kind: "group", id })}
           onOpenGroup={(id) => open({ kind: "groupPage", id })}
           onImport={() => open({ kind: "importHosts" })}
-          onCloud={() => open({ kind: "cloud" })}
+          onCloud={(add) => open({ kind: "cloud", add })}
           onQuickConnect={mobile ? undefined : () => open({ kind: "quick" })}
           onClose={close}
         />
       )}
       {view.kind === "importHosts" && <ImportHostsPage vaults={vaults} onImported={() => void refresh()} onClose={close} />}
-      {view.kind === "cloud" && <CloudPage vaults={vaults} keys={keyList} hosts={hostList} onChanged={() => void refresh()} onClose={close} />}
+      {view.kind === "cloud" && (
+        <CloudPage key={view.add ?? "clouds"} vaults={vaults} keys={keyList} hosts={hostList} adding={view.add} onChanged={() => void refresh()} onClose={close} />
+      )}
       {(view.kind === "groups" || (view.kind === "groupPage" && !groupList.some((g) => g.id === view.id))) && (
         <GroupsPage onChanged={() => void refresh()}
           groups={groupList}
@@ -1056,6 +1101,19 @@ function Workspace({ onLock, termSettings, onSettingsChanged: loadTermSettings,
         </div>
       )}
       {prompts[0] && <HostKeyDialog key={prompts[0].promptId} prompt={prompts[0]} onAnswer={(a) => answer(prompts[0], a)} />}
+      {checking && (
+        <SnippetCheckDialog
+          key={checking.snippet.id}
+          snippet={checking.snippet}
+          run={checking.run}
+          onAnswer={(send) => {
+            setChecking(null);
+            if (!send) return;
+            checking.go();
+            markSent(checking.snippet.id);
+          }}
+        />
+      )}
       {askPassword && (
         <PasswordDialog
           title={`Password for ${askPassword.host.user}@${askPassword.host.hostname}`}
@@ -1119,7 +1177,7 @@ function Workspace({ onLock, termSettings, onSettingsChanged: loadTermSettings,
           onTotp={() => open({ kind: "sync", totp: true })}
           onSso={setSsoFor}
           onApproval={setApprovalFor}
-          onSend={sendTo}
+          onSend={(key, body, run, snippet) => guardSnippet(snippet, run, () => sendTo(key, body, run))}
           onKey={(key, k) => controls.current.get(key)?.key(k)}
           onCtrl={(key, on, used) => controls.current.get(key)?.ctrl(on, used)}
         />
@@ -1232,10 +1290,12 @@ function Workspace({ onLock, termSettings, onSettingsChanged: loadTermSettings,
               vpns={vpnList}
               onFiles={currentHost && (() => connectHost(currentHost, undefined, "sftp"))}
               snippets={snippetList}
-              onSend={(body, run) =>
-                currentSplit?.broadcast
-                  ? panes(currentSplit.layout).forEach((k) => tabs.find((t) => t.key === k)?.status === "connected" && sendTo(k, body, run, false))
-                  : sendTo(current.key, body, run)
+              onSend={(snippet, run) =>
+                guardSnippet(snippet, run, () =>
+                  currentSplit?.broadcast
+                    ? panes(currentSplit.layout).forEach((k) => tabs.find((t) => t.key === k)?.status === "connected" && sendTo(k, snippet.body, run, false))
+                    : sendTo(current.key, snippet.body, run),
+                )
               }
               onSplit={splitWith}
               broadcast={currentSplit ? { on: currentSplit.broadcast, panes: panes(currentSplit.layout).length } : null}
diff --git a/apps/desktop/src/CloudPage.tsx b/apps/desktop/src/CloudPage.tsx
index 0450f48..33dc269 100644
--- a/apps/desktop/src/CloudPage.tsx
+++ b/apps/desktop/src/CloudPage.tsx
@@ -11,6 +11,7 @@ import {
   type CloudRefresh,
   type CloudSource,
   type DeviceAuth,
+  type FeedInput,
   type HostView,
   type KeyView,
   type SourceSettings,
@@ -31,8 +32,15 @@ function ago(seconds: number, now = Date.now() / 1000) {
   return dateText(seconds * 1000);
 }
 
-const refreshed = (r: CloudRefresh) =>
-  [r.added && `${plural(r.added, "host")} added`, r.updated && `${r.updated} updated`, r.gone && `${r.gone} gone from the cloud`]
+const refreshed = (r: CloudRefresh, feed: boolean) =>
+  [
+    r.added && `${plural(r.added, "host")} added`,
+    r.updated && `${r.updated} updated`,
+    r.gone && `${r.gone} gone from the ${feed ? "feed" : "cloud"}`,
+    r.snippetsAdded && `${plural(r.snippetsAdded, "snippet")} added`,
+    r.snippetsUpdated && `${plural(r.snippetsUpdated, "snippet")} changed`,
+    r.snippetsRemoved && `${plural(r.snippetsRemoved, "snippet")} removed`,
+  ]
     .filter(Boolean)
     .join(", ") || "Nothing changed";
 
@@ -42,14 +50,17 @@ interface Note {
   skipped?: string[];
   withoutAddress?: string[];
   couldNot?: string[];
+  /** A feed's entries left out (what `couldNot` holds for a cloud). */
+  feed?: boolean;
 }
 
-const noteOf = (sourceId: string, r: CloudRefresh): Note => ({
+const noteOf = (sourceId: string, r: CloudRefresh, feed = false): Note => ({
   sourceId,
-  text: refreshed(r),
+  text: refreshed(r, feed),
   skipped: r.withoutShell,
   withoutAddress: r.withoutAddress,
   couldNot: r.skipped,
+  feed,
 });
 
 /** A sign-in in progress: the code, the page to type it at, until it's approved. */
@@ -228,6 +239,85 @@ function SettingsForm({
   );
 }
 
+/** A feed's name, address and token, for adding one or changing it. */
+function FeedForm({
+  source,
+  keys,
+  vaultId,
+  busy,
+  submit,
+  onSubmit,
+  onCancel,
+}: {
+  source?: CloudSource;
+  keys: KeyView[];
+  vaultId: string;
+  busy: boolean;
+  submit: string;
+  onSubmit: (input: FeedInput, keyId: string | null) => void;
+  onCancel: () => void;
+}) {
+  const [label, setLabel] = useState(source?.label ?? "");
+  const [url, setUrl] = useState(source?.url ?? "");
+  const [token, setToken] = useState("");
+  const [keyId, setKeyId] = useState("");
+  const vaultKeys = keys.filter((k) => k.vaultId === vaultId);
+  const valid = /^https:\/\/\S+$|^http:\/\/(localhost|127\.0\.0\.1|\[::1\])([:/]\S*)?$/.test(url.trim()) && (!!source || token.trim() !== "");
+  return (
+    <form
+      className="stack cloud-settings"
+      onSubmit={(e) => {
+        e.preventDefault();
+        if (valid) onSubmit({ label: label.trim() || null, url: url.trim(), token: token.trim() || null }, keyId || null);
+      }}
+    >
+      <label>
+        <span>Address</span>
+        <input className="mono" value={url} onChange={(e) => setUrl(e.target.value)} placeholder="https://ops.example.com/morphgate.json" spellCheck={false} autoFocus={!source} />
+      </label>
+      <label>
+        <span>Token</span>
+        <input
+          type="password"
+          className="mono"
+          value={token}
+          onChange={(e) => setToken(e.target.value)}
+          placeholder={source ? `Leave empty to keep it (${source.tokenEnd ?? "…"})` : "Sent as Authorization: Bearer"}
+          autoComplete="off"
+          spellCheck={false}
+        />
+        <small className="hint">Kept in the vault, so every device that can open it refreshes the feed. Use a token that only reads the feed.</small>
+      </label>
+      <label>
+        <span>Name (optional)</span>
+        <input value={label} onChange={(e) => setLabel(e.target.value)} placeholder="What the feed calls itself" />
+      </label>
+      {!source && (
+        <label>
+          <span>Its hosts sign in with</span>
+          <select value={keyId} onChange={(e) => setKeyId(e.target.value)}>
+            <option value="">The SSH agent</option>
+            {vaultKeys.map((k) => (
+              <option key={k.id} value={k.id}>
+                {k.label} ({k.algorithm.replace(/^ssh-/, "")})
+              </option>
+            ))}
+          </select>
+          <small className="hint">A host the feed gives a key name signs in with the vault's key of that name.</small>
+        </label>
+      )}
+      <div className="row">
+        <button type="submit" className="primary" disabled={busy || !valid}>
+          {busy ? "Reading…" : submit}
+        </button>
+        <button type="button" className="link" onClick={onCancel}>
+          Cancel
+        </button>
+      </div>
+    </form>
+  );
+}
+
 /** Clouds: their machines and environments as hosts, kept in step. Vallic Cloud signs in on each
  * device (a code typed in the browser); AWS, Google Cloud and Azure list with their CLI on this
  * device. The hosts sync like any others. */
@@ -235,12 +325,15 @@ export function CloudPage({
   vaults,
   keys,
   hosts,
+  adding: addingFirst,
   onChanged,
   onClose,
 }: {
   vaults: VaultEntry[];
   keys: KeyView[];
   hosts: HostView[];
+  /** Opened to add this (Add from… → Feed URL…). */
+  adding?: CloudProvider;
   onChanged: () => void;
   onClose: () => void;
 }) {
@@ -251,7 +344,7 @@ export function CloudPage({
   const [note, setNote] = useState<Note | null>(null);
   const [busy, setBusy] = useState<string | null>(null);
   const [removing, setRemoving] = useState<string | null>(null);
-  const [adding, setAdding] = useState<CloudProvider | null>(null);
+  const [adding, setAdding] = useState<CloudProvider | null>(addingFirst ?? null);
   const [editing, setEditing] = useState<string | null>(null);
   // The poll of the sign-in on screen (a new sign-in or Cancel ends it).
   const polling = useRef(0);
@@ -307,6 +400,16 @@ export function CloudPage({
     );
   };
 
+  const addFeed = (input: FeedInput, keyId: string | null) => {
+    setBusy("adding");
+    setError("");
+    setNote(null);
+    cloud.addFeed(input, { vaultId, keyId }).then(
+      (r) => (setBusy(null), setAdding(null), setNote(noteOf(r.source.id, r.refresh, true)), load(), onChanged()),
+      (e) => (setBusy(null), setError(errorText(e)), load()),
+    );
+  };
+
   const add = (provider: CloudProvider, settings: SourceSettings, keyId: string | null) => {
     setBusy("adding");
     setError("");
@@ -320,7 +423,7 @@ export function CloudPage({
   return (
     <Page
       title="Clouds"
-      lead="Your clouds' machines and environments as hosts, kept in step: a refresh brings what the cloud decides, and your renames, keys and notes stay. Vallic Cloud signs in on each device; AWS, Google Cloud, Azure, Hetzner Cloud and DigitalOcean list with their own CLI on this computer."
+      lead="Your clouds' machines and environments as hosts, kept in step: a refresh brings what the cloud decides, and your renames, keys and notes stay. Vallic Cloud signs in on each device; AWS, Google Cloud, Azure, Hetzner Cloud and DigitalOcean list with their own CLI on this computer; a feed is a list of hosts and snippets your team publishes at an address."
       onClose={onClose}
     >
       <div className="stack cloud-page">
@@ -348,10 +451,13 @@ export function CloudPage({
           const vaultKeys = keys.filter((k) => k.vaultId === s.vaultId);
           const key = vaultKeys.find((k) => k.id === s.keyId);
           const vallic = s.provider === "vallic";
+          const feed = s.provider === "feed";
           const provider = PROVIDERS[s.provider]?.name ?? s.provider;
           const how = vallic
             ? null
-            : [
+            : feed
+              ? `${s.url ?? ""} · token ${s.tokenEnd ?? "…"}`
+              : [
                 s.profile && `${s.provider === "aws" ? "profile" : "context"} ${s.profile}`,
                 s.scopes.length
                   ? s.scopes.join(", ")
@@ -384,12 +490,13 @@ export function CloudPage({
                     {s.account && `${s.account} · `}
                     {plural(s.hosts, "host")}
                     {s.gone > 0 && ` (${s.gone} gone)`}
+                    {s.snippets > 0 && ` · ${plural(s.snippets, "snippet")}`}
                     {s.refreshedAt > 0 && ` · refreshed ${ago(s.refreshedAt)}`}
                   </p>
-                  {how && <p className="hint">{how}</p>}
+                  {how && <p className={`hint ${feed ? "mono cloud-url" : ""}`}>{how}</p>}
                 </div>
                 {s.signedIn ? (
-                  <button type="button" className="primary small-button" disabled={busy === s.id} onClick={() => act(s.id, cloud.refresh(s.id), (r) => setNote(noteOf(s.id, r as CloudRefresh)))}>
+                  <button type="button" className="primary small-button" disabled={busy === s.id} onClick={() => act(s.id, cloud.refresh(s.id), (r) => setNote(noteOf(s.id, r as CloudRefresh, feed)))}>
                     {busy === s.id ? "Refreshing…" : "Refresh"}
                   </button>
                 ) : (
@@ -407,10 +514,31 @@ export function CloudPage({
                       Without {s.reach === "private" ? "a private" : "a public"} address: {note.withoutAddress.join(", ")}.
                     </p>
                   )}
-                  {note.couldNot && note.couldNot.length > 0 && <p className="hint">Couldn't list: {note.couldNot.join("; ")}</p>}
+                  {note.couldNot && note.couldNot.length > 0 && (
+                    <p className="hint">
+                      {note.feed ? "Skipped" : "Couldn't list"}: {note.couldNot.join("; ")}
+                    </p>
+                  )}
                 </>
               )}
-              {editing === s.id && !vallic ? (
+              {s.failed && note?.sourceId !== s.id && busy !== s.id && <p className="error">The last refresh failed: {s.failed}</p>}
+              {editing === s.id && feed ? (
+                <FeedForm
+                  source={s}
+                  keys={keys}
+                  vaultId={s.vaultId}
+                  busy={busy === s.id}
+                  submit="Save and refresh"
+                  onCancel={() => setEditing(null)}
+                  onSubmit={(input) =>
+                    act(
+                      s.id,
+                      cloud.feedSettings(s.id, input).then(() => cloud.refresh(s.id)),
+                      (r) => (setEditing(null), setNote(noteOf(s.id, r as CloudRefresh, true))),
+                    )
+                  }
+                />
+              ) : editing === s.id && !vallic ? (
                 <SettingsForm
                   provider={s.provider}
                   source={s}
@@ -471,10 +599,10 @@ export function CloudPage({
                 {removing === s.id ? (
                   <>
                     <button type="button" className="ghost-danger small-button" onClick={() => (setRemoving(null), act(s.id, cloud.remove(s.id, true)))}>
-                      Remove it and its hosts
+                      {s.snippets > 0 ? "Remove it, its hosts and snippets" : "Remove it and its hosts"}
                     </button>
                     <button type="button" className="secondary small-button" onClick={() => (setRemoving(null), act(s.id, cloud.remove(s.id, false)))}>
-                      Remove it, keep the hosts
+                      {s.snippets > 0 ? "Remove it, keep the hosts and snippets" : "Remove it, keep the hosts"}
                     </button>
                     <button type="button" className="link" onClick={() => setRemoving(null)}>
                       Cancel
@@ -490,7 +618,27 @@ export function CloudPage({
           );
         })}
 
-        {adding && (
+        {adding === "feed" && (
+          <section className="aside-card stack cloud-adding">
+            <h2 className="section-title">Add a feed</h2>
+            <p className="hint">
+              Hosts and snippets from a JSON document at an address, read with a token: from Terraform output, a CMDB or an internal endpoint. Its hosts and
+              snippets stay in step with it; your renames, keys, tags and notes stay yours.
+            </p>
+            <VaultField vaults={vaults} value={vaultId} onChange={setVaultId} />
+            <FeedForm
+              key={vaultId}
+              keys={keys}
+              vaultId={vaultId}
+              busy={busy === "adding"}
+              submit="Add and read the feed"
+              onCancel={() => setAdding(null)}
+              onSubmit={addFeed}
+            />
+          </section>
+        )}
+
+        {adding && adding !== "feed" && (
           <section className="aside-card stack cloud-adding">
             <h2 className="section-title">Add {PROVIDERS[adding].name}</h2>
             <VaultField vaults={vaults} value={vaultId} onChange={setVaultId} />
@@ -522,6 +670,9 @@ export function CloudPage({
                     Add {PROVIDERS[p].name}
                   </button>
                 ))}
+              <button type="button" className="secondary" onClick={() => (setError(""), setNote(null), setAdding("feed"))}>
+                Add a feed
+              </button>
             </div>
           </div>
         )}
diff --git a/apps/desktop/src/Lists.tsx b/apps/desktop/src/Lists.tsx
index 6789be4..b769ed3 100644
--- a/apps/desktop/src/Lists.tsx
+++ b/apps/desktop/src/Lists.tsx
@@ -197,7 +197,7 @@ function HostRows({ list, things, ...p }: HostRowsProps) {
                   <VaultTag vaults={p.vaults} id={h.vaultId} />
                   {h.source?.gone && (
                     <span className="kind-badge gone" title="Its cloud no longer lists it: it was kept, remove it if it's gone for good">
-                      gone from {PROVIDERS[h.source.provider || "vallic"]?.name ?? "its cloud"}
+                      gone from {h.source.provider === "feed" ? "its feed" : (PROVIDERS[h.source.provider || "vallic"]?.name ?? "its cloud")}
                     </span>
                   )}
                   {h.source?.state && !h.source.gone && (
@@ -248,7 +248,8 @@ interface HostsProps {
   onOpenGroup: (id: string) => void;
   /** Hosts from OpenSSH's configuration (desktop). */
   onImport: () => void;
-  onCloud: () => void;
+  /** Clouds, or straight to adding a feed. */
+  onCloud: (add?: "feed") => void;
   /** Quick connect (desktop, where this page is home once there are hosts). */
   onQuickConnect?: () => void;
   /** After a change made here (several deleted, moved to a group). */
@@ -289,7 +290,8 @@ export function HostsPage(p: HostsProps) {
             <AddFrom
               items={[
                 { label: "Import…", sub: "OpenSSH's config, PuTTY, a CSV file, Royal TS", onClick: p.onImport },
-                { label: "Clouds…", sub: "Machines from AWS, DigitalOcean, Vallic Cloud…", onClick: p.onCloud },
+                { label: "Clouds…", sub: "Machines from AWS, DigitalOcean, Vallic Cloud…", onClick: () => p.onCloud() },
+                { label: "Feed URL…", sub: "Hosts and snippets your team publishes at an address", onClick: () => p.onCloud("feed") },
               ]}
             />
           )}
@@ -843,7 +845,7 @@ interface SnippetsProps {
   onOpen: (id?: string) => void;
   /** From a CSV file. */
   onImport: () => void;
-  onSend: (body: string, run: boolean) => void;
+  onSend: (body: string, run: boolean, snippet?: SnippetView) => void;
   onChanged: () => void;
   onClose: () => void;
 }
@@ -904,21 +906,22 @@ export function SnippetsPage(p: SnippetsProps) {
                       <>
                         {p.target && (
                           <>
-                            <TextAction onClick={() => p.onSend(sn.body, false)}>Paste</TextAction>
-                            <TextAction onClick={() => p.onSend(sn.body, true)}>Run</TextAction>
+                            <TextAction onClick={() => p.onSend(sn.body, false, sn)}>Paste</TextAction>
+                            <TextAction onClick={() => p.onSend(sn.body, true, sn)}>Run</TextAction>
                           </>
                         )}
-                        <IconAction icon="edit" label={`Edit ${sn.name}`} onClick={() => p.onOpen(sn.id)} />
+                        <IconAction icon="edit" label={`${sn.source ? "Open" : "Edit"} ${sn.name}`} onClick={() => p.onOpen(sn.id)} />
                       </>
                     }
                   >
                     <NameCell
                       pick={pickOf(sel, sn.id, sn.name)}
                       onOpen={() => p.onOpen(sn.id)}
-                      title={`Edit ${sn.name}`}
+                      title={`${sn.source ? "Open" : "Edit"} ${sn.name}`}
                       lead={<Icon name="snippet" size={15} />}
                       name={sn.name}
                       beside={<VaultTag vaults={p.vaults} id={sn.vaultId} />}
+                      sub={sn.source ? `From ${sn.source.label} (read-only)` : undefined}
                     />
                     <Cell className="lstack">
                       <span className="mono trunc">{lines[0]}</span>
diff --git a/apps/desktop/src/RouteBar.tsx b/apps/desktop/src/RouteBar.tsx
index f385b26..c46b5af 100644
--- a/apps/desktop/src/RouteBar.tsx
+++ b/apps/desktop/src/RouteBar.tsx
@@ -22,7 +22,7 @@ interface Props {
   onFiles?: () => void;
   snippets: SnippetView[];
   /** Paste a snippet into this session, or run it. */
-  onSend: (body: string, run: boolean) => void;
+  onSend: (snippet: SnippetView, run: boolean) => void;
   onNewSnippet: () => void;
   /** The session is recorded into the vault. */
   recording?: boolean;
@@ -152,12 +152,17 @@ export function RouteBar({ target, status, hosts, vpns, onFiles, snippets, onSen
           Recording
         </button>
       )}
-      {pinned && (
+      {host?.source?.listedBy && (
+        <span className="pinned-key" title={`Its host key is one ${host.source.listedBy} lists for it: another would be refused`}>
+          key listed by {host.source.listedBy}
+        </span>
+      )}
+      {pinned && !host?.source?.listedBy && (
         <span className="pinned-key mono" title={`Host key pinned on first connect: ${pinned.algorithm} ${pinned.fingerprint}`}>
           {keyType(pinned.algorithm)} {shortFingerprint(pinned.fingerprint)}
         </span>
       )}
-      {!pinned && certifiedBy && (
+      {!pinned && certifiedBy && !host?.source?.listedBy && (
         <span className="pinned-key" title={`Its host certificate is signed by ${certifiedBy}, a host CA trusted for it`}>
           certified by {certifiedBy}
         </span>
@@ -265,7 +270,7 @@ function SnippetMenu({
 }: {
   snippets: SnippetView[];
   connected: boolean;
-  onSend: (body: string, run: boolean) => void;
+  onSend: (snippet: SnippetView, run: boolean) => void;
   onNew: () => void;
   /** Broadcasting: snippets go to this many panes (0: just this one). */
   all: number;
@@ -273,9 +278,9 @@ function SnippetMenu({
   const [open, setOpen] = useState(false);
   const ref = useDismiss(open, setOpen);
 
-  const send = (body: string, run: boolean) => {
+  const send = (snippet: SnippetView, run: boolean) => {
     setOpen(false);
-    onSend(body, run);
+    onSend(snippet, run);
   };
 
   return (
@@ -296,12 +301,12 @@ function SnippetMenu({
                 className="menu-item"
                 disabled={!connected}
                 title={`Paste into the session: ${s.body}`}
-                onClick={() => send(s.body, false)}
+                onClick={() => send(s, false)}
               >
                 <span className="menu-title">{s.name}</span>
                 <span className="menu-sub mono">{s.body.split("\n")[0]}</span>
               </button>
-              <button type="button" className="menu-run" disabled={!connected} title="Run it" aria-label={`Run ${s.name}`} onClick={() => send(s.body, true)}>
+              <button type="button" className="menu-run" disabled={!connected} title="Run it" aria-label={`Run ${s.name}`} onClick={() => send(s, true)}>
                 Run
               </button>
             </div>
diff --git a/apps/desktop/src/SnippetCheck.tsx b/apps/desktop/src/SnippetCheck.tsx
new file mode 100644
index 0000000..715c31b
--- /dev/null
+++ b/apps/desktop/src/SnippetCheck.tsx
@@ -0,0 +1,31 @@
+import { useEffect, useRef } from "react";
+import { dateText, type SnippetView } from "./api";
+
+/** A feed's snippet changed since this device last pasted or ran it: what it is now, before it
+ * goes to the terminal. */
+export function SnippetCheckDialog({ snippet, run, onAnswer }: { snippet: SnippetView; run: boolean; onAnswer: (send: boolean) => void }) {
+  const ref = useRef<HTMLDialogElement>(null);
+
+  useEffect(() => {
+    ref.current?.showModal();
+  }, []);
+
+  return (
+    <dialog ref={ref} className="modal snippet-check" aria-labelledby="sc-title" onCancel={(e) => (e.preventDefault(), onAnswer(false))}>
+      <h2 id="sc-title">{snippet.name} changed</h2>
+      <p>
+        Changed by <strong>{snippet.source?.label ?? "its feed"}</strong> on {dateText(snippet.updatedAt)}, since you last {run ? "ran" : "pasted"} it on this
+        device. It now {run ? "runs" : "pastes"}:
+      </p>
+      <pre className="mono snippet-body">{snippet.body}</pre>
+      <div className="actions">
+        <button type="button" onClick={() => onAnswer(false)}>
+          Cancel
+        </button>
+        <button type="button" className="primary" onClick={() => onAnswer(true)}>
+          {run ? "Run it" : "Paste it"}
+        </button>
+      </div>
+    </dialog>
+  );
+}
diff --git a/apps/desktop/src/SnippetPanel.tsx b/apps/desktop/src/SnippetPanel.tsx
index 32c543b..25aa3e6 100644
--- a/apps/desktop/src/SnippetPanel.tsx
+++ b/apps/desktop/src/SnippetPanel.tsx
@@ -10,12 +10,15 @@ interface Props {
   onSaved: (s: SnippetView) => void;
   onDeleted: () => void;
   onCancel: () => void;
-  onSend: (body: string, run: boolean) => void;
+  /** `snippet`: the saved one being sent (a feed's may ask first). */
+  onSend: (body: string, run: boolean, snippet?: SnippetView) => void;
 }
 
 export function SnippetPanel({ snippet, vaults, targetTitle, onSaved, onDeleted, onCancel, onSend }: Props) {
   const [vaultId, setVaultId] = useState(snippet?.vaultId ?? personalVault(vaults));
-  const readOnly = isReadOnly(vaults, snippet?.vaultId);
+  // A feed's snippet changes in the feed: here it's read, run or copied.
+  const feed = snippet?.source ?? null;
+  const readOnly = isReadOnly(vaults, snippet?.vaultId) || !!feed;
   const [name, setName] = useState(snippet?.name ?? "");
   const [body, setBody] = useState(snippet?.body ?? "");
   const [tags, setTags] = useState(snippet?.tags.join(", ") ?? "");
@@ -40,22 +43,55 @@ export function SnippetPanel({ snippet, vaults, targetTitle, onSaved, onDeleted,
     }
   };
 
+  /** A snippet of one's own with the feed's commands, in the same vault where it can be written. */
+  const copy = async () => {
+    if (!snippet) return;
+    setBusy(true);
+    setError("");
+    try {
+      const into = isReadOnly(vaults, snippet.vaultId) ? personalVault(vaults) : snippet.vaultId;
+      onSaved(await snippets.save({ vaultId: into || undefined, name: `${snippet.name} (copy)`, body: snippet.body, tags: snippet.tags }));
+    } catch (err) {
+      setError(errorText(err));
+    } finally {
+      setBusy(false);
+    }
+  };
+
   return (
     <div className="panel">
       <form className="panel-card wide" onSubmit={(e) => void save(e)}>
         <h1>{snippet ? "Snippet" : "New snippet"}</h1>
+        {feed && (
+          <div className="notice-box row">
+            <span className="grow">
+              From the feed <strong>{feed.label}</strong>: it changes there, and is read-only here.
+            </span>
+            <button type="button" className="secondary small-button" disabled={busy} onClick={() => void copy()}>
+              Make a copy
+            </button>
+          </div>
+        )}
         <VaultField vaults={vaults} itemVault={snippet?.vaultId} item={snippet && { id: snippet.id, label: snippet.name }} value={vaultId} onChange={setVaultId} />
         <label>
           <span>Name</span>
-          <input value={name} onChange={(e) => setName(e.target.value)} placeholder="Disk usage" autoFocus={!snippet} />
+          <input value={name} onChange={(e) => setName(e.target.value)} placeholder="Disk usage" autoFocus={!snippet} readOnly={!!feed} />
         </label>
         <label>
           <span>Commands</span>
-          <textarea className="mono" rows={7} value={body} onChange={(e) => setBody(e.target.value)} placeholder={"df -h\ndu -sh /var/log/* | sort -h | tail"} spellCheck={false} />
+          <textarea
+            className="mono"
+            rows={7}
+            value={body}
+            onChange={(e) => setBody(e.target.value)}
+            placeholder={"df -h\ndu -sh /var/log/* | sort -h | tail"}
+            spellCheck={false}
+            readOnly={!!feed}
+          />
         </label>
         <label>
           <span>Tags</span>
-          <input value={tags} onChange={(e) => setTags(e.target.value)} placeholder="ops" spellCheck={false} />
+          <input value={tags} onChange={(e) => setTags(e.target.value)} placeholder="ops" spellCheck={false} readOnly={!!feed} />
         </label>
 
         <div className="send-row">
@@ -65,10 +101,10 @@ export function SnippetPanel({ snippet, vaults, targetTitle, onSaved, onDeleted,
                 Send to <strong>{targetTitle}</strong>
               </span>
               <span className="spacer" />
-              <button type="button" disabled={!body} onClick={() => onSend(body, false)} title="Insert without pressing Enter">
+              <button type="button" disabled={!body} onClick={() => onSend(body, false, snippet)} title="Insert without pressing Enter">
                 Paste
               </button>
-              <button type="button" className="primary" disabled={!body} onClick={() => onSend(body, true)}>
+              <button type="button" className="primary" disabled={!body} onClick={() => onSend(body, true, snippet)}>
                 Run
               </button>
             </>
@@ -94,9 +130,11 @@ export function SnippetPanel({ snippet, vaults, targetTitle, onSaved, onDeleted,
           <button type="button" onClick={onCancel}>
             Close
           </button>
-          <button type="submit" disabled={!valid || !dirty || busy}>
-            {snippet ? "Save changes" : "Save snippet"}
-          </button>
+          {!feed && (
+            <button type="submit" disabled={!valid || !dirty || busy}>
+              {snippet ? "Save changes" : "Save snippet"}
+            </button>
+          )}
         </div>
       </form>
     </div>
diff --git a/apps/desktop/src/TeamsPanel.tsx b/apps/desktop/src/TeamsPanel.tsx
index 262d4dc..7131ca4 100644
--- a/apps/desktop/src/TeamsPanel.tsx
+++ b/apps/desktop/src/TeamsPanel.tsx
@@ -2029,7 +2029,7 @@ function Offboard({ org, member, onBack, onChanged }: { org: OrgInfo; member: Me
 
           <div className="stack">
             <h2 className="section-title">4. Change what they could see</h2>
-            {summary.secrets.length === 0 && <p className="hint">No saved passwords, SSH keys or VPN profiles in those vaults.</p>}
+            {summary.secrets.length === 0 && <p className="hint">No saved passwords, SSH keys, VPN profiles or feed tokens in those vaults.</p>}
             <ul className="device-list">
               {summary.secrets.map((s) => {
                 const r = replaced[s.itemId];
@@ -2038,7 +2038,9 @@ function Offboard({ org, member, onBack, onChanged }: { org: OrgInfo; member: Me
                     <label className="check grow">
                       <input type="checkbox" checked={done.has(s.itemId)} onChange={() => tick(s.itemId)} />
                       <span>
-                        {s.kind === "password" ? "Password of" : s.kind === "key" ? "SSH key" : "VPN profile"} <strong>{s.label}</strong>
+                        {s.kind === "password" ? "Password of" : s.kind === "key" ? "SSH key" : s.kind === "feed" ? "Rotate the token for" : "VPN profile"}{" "}
+                        <strong>{s.label}</strong>
+                        {s.kind === "feed" && " (a feed: change it where the feed is published, then in the source's settings)"}
                         <small>
                           {" "}
                           · {s.vaultName}
diff --git a/apps/desktop/src/api.ts b/apps/desktop/src/api.ts
index 5eee015..fb98538 100644
--- a/apps/desktop/src/api.ts
+++ b/apps/desktop/src/api.ts
@@ -263,6 +263,8 @@ export interface HostView {
     state: string | null;
     /** Reached through its cloud. */
     via: CloudReachKind | null;
+    /** The feed that lists its host keys (they decide, rather than a pinned key), if one does. */
+    listedBy: string | null;
   } | null;
   groupId: string | null;
   /** Shared credentials it signs in with. */
@@ -425,6 +427,10 @@ export interface SnippetView {
   body: string;
   tags: string[];
   updatedAt: number;
+  /** The feed that keeps it (it's read-only here), if one does. */
+  source: { sourceId: string; label: string } | null;
+  /** Its feed changed the body since this device last pasted or ran it: ask first. */
+  changed: boolean;
 }
 
 export interface SnippetInput {
@@ -463,6 +469,8 @@ export const snippets = {
   list: () => invoke<SnippetView[]>("snippets_list"),
   save: (input: SnippetInput) => invoke<SnippetView>("snippet_save", { input }),
   remove: (id: string) => invoke<void>("snippet_delete", { id }),
+  /** This device pasted or ran a feed's snippet (what a later change of it is compared with). */
+  sent: (id: string) => invoke<void>("snippet_sent", { id }),
   /** The snippets in a CSV file's text (Name, Command, Tags columns); `name` is the file's. */
   readCsv: (name: string, text: string) => invoke<SnippetCsv>("snippets_read_csv", { name, text }),
   /** Saves an example of that CSV in the downloads folder; says where. */
@@ -1130,7 +1138,7 @@ export interface Reach {
 
 /** A secret the member could read: change it after they leave. */
 export interface Secret {
-  kind: "password" | "key" | "vpn";
+  kind: "password" | "key" | "vpn" | "feed";
   itemId: string;
   label: string;
   vaultName: string;
@@ -1443,7 +1451,7 @@ export const openLink = (url: string) => invoke<void>("open_link", { url });
 
 // ------------------------------------------------------------------ Cloud sources
 
-export type CloudProvider = "vallic" | "aws" | "gcp" | "azure" | "hetzner" | "digitalocean";
+export type CloudProvider = "vallic" | "aws" | "gcp" | "azure" | "hetzner" | "digitalocean" | "feed";
 
 /** Reaching a machine through its cloud rather than an address. */
 export type CloudReachKind = "aws-ssm" | "aws-eice" | "gcp-iap";
@@ -1462,10 +1470,12 @@ export const PROVIDERS: Record<CloudProvider, { name: string; cli: string | null
   azure: { name: "Azure", cli: "az" },
   hetzner: { name: "Hetzner Cloud", cli: "hcloud" },
   digitalocean: { name: "DigitalOcean", cli: "doctl" },
+  feed: { name: "Feed", cli: null },
 };
 
-/** Hosts kept in step with a cloud: Vallic Cloud (each device signs in itself), or AWS, Google
- * Cloud and Azure (listed with their CLI on this device). */
+/** Hosts kept in step with a cloud: Vallic Cloud (each device signs in itself), AWS, Google
+ * Cloud, Azure, Hetzner Cloud and DigitalOcean (listed with their CLI on this device), or a feed
+ * (read from its URL with the token the source holds). */
 export interface CloudSource {
   id: string;
   vaultId: string;
@@ -1496,6 +1506,21 @@ export interface CloudSource {
   groupTag: string | null;
   /** Where this device runs the CLI from, when it was given. */
   cliPath: string | null;
+  /** A feed's address. */
+  url: string | null;
+  /** The end of a feed's token (`…f3a9`); the rest is never shown. */
+  tokenEnd: string | null;
+  /** Snippets a feed keeps. */
+  snippets: number;
+  /** Why the last refresh on this device failed (an automatic one included). */
+  failed: string | null;
+}
+
+/** A feed's name, address and token (empty or null when changing it: the token stays). */
+export interface FeedInput {
+  label?: string | null;
+  url: string;
+  token?: string | null;
 }
 
 /** What a CLI source lists and how its machines become hosts. */
@@ -1526,8 +1551,12 @@ export interface CloudRefresh {
   withoutShell: string[];
   /** Machines without the address the source uses. */
   withoutAddress: string[];
-  /** Regions, projects or subscriptions that couldn't be listed, and why. */
+  /** Regions, projects or subscriptions that couldn't be listed, and why; a feed's entries left out. */
   skipped: string[];
+  /** A feed's snippets. */
+  snippetsAdded: number;
+  snippetsUpdated: number;
+  snippetsRemoved: number;
 }
 
 export type SignInStatus =
@@ -1555,6 +1584,12 @@ export const cloud = {
   add: (provider: CloudProvider, settings: SourceSettings, opts: { vaultId?: string | null; keyId?: string | null } = {}) =>
     invoke<{ source: CloudSource; refresh: CloudRefresh }>("cloud_source_add", { provider, settings, vaultId: opts.vaultId ?? null, keyId: opts.keyId ?? null }),
   settings: (sourceId: string, settings: SourceSettings) => invoke<void>("cloud_source_settings", { sourceId, settings }),
+  /** A feed, read once with its token before it's kept, then brought in. */
+  addFeed: (input: FeedInput, opts: { vaultId?: string | null; keyId?: string | null } = {}) =>
+    invoke<{ source: CloudSource; refresh: CloudRefresh }>("cloud_feed_add", { input, vaultId: opts.vaultId ?? null, keyId: opts.keyId ?? null }),
+  feedSettings: (sourceId: string, input: FeedInput) => invoke<void>("cloud_feed_settings", { sourceId, input }),
+  /** Refreshes the feeds not refreshed in the last 10 minutes (desktop); how many it did. */
+  autoRefresh: () => invoke<number>("cloud_auto_refresh"),
 };
 
 export const errorText = (e: unknown) => (typeof e === "string" ? e : e instanceof Error ? e.message : String(e));
diff --git a/apps/desktop/src/mobile/MobileWorkspace.tsx b/apps/desktop/src/mobile/MobileWorkspace.tsx
index df3e8ce..5d577b3 100644
--- a/apps/desktop/src/mobile/MobileWorkspace.tsx
+++ b/apps/desktop/src/mobile/MobileWorkspace.tsx
@@ -86,7 +86,8 @@ interface Props {
   onSso: (need: SsoNeed) => void;
   /** An organization's vaults wait for this device's approval. */
   onApproval: (need: ApprovalNeed) => void;
-  onSend: (key: number, body: string, run: boolean) => void;
+  /** Text into a session; `snippet` where it's one (a feed's may ask first). */
+  onSend: (key: number, body: string, run: boolean, snippet?: SnippetView) => void;
   onKey: (key: number, k: ExtraKey) => void;
   /** Latches Ctrl for the next key typed in the session; `used` is called when it applies. */
   onCtrl: (key: number, on: boolean, used: () => void) => void;
@@ -753,14 +754,14 @@ function TerminalBar(p: Props & { tab: MobileTab }) {
                   type="button"
                   className="m-row-main"
                   disabled={p.tab.status !== "connected"}
-                  onClick={() => (close(), p.onSend(p.tab.key, s.body, false))}
+                  onClick={() => (close(), p.onSend(p.tab.key, s.body, false, s))}
                 >
                   <span className="m-row-text">
                     <span className="m-row-title">{s.name}</span>
                     <span className="m-row-sub mono">{s.body.split("\n")[0]}</span>
                   </span>
                 </button>
-                <button type="button" className="m-button small" disabled={p.tab.status !== "connected"} onClick={() => (close(), p.onSend(p.tab.key, s.body, true))}>
+                <button type="button" className="m-button small" disabled={p.tab.status !== "connected"} onClick={() => (close(), p.onSend(p.tab.key, s.body, true, s))}>
                   Run
                 </button>
               </li>
diff --git a/apps/desktop/src/styles.css b/apps/desktop/src/styles.css
index dd492e8..ad0699b 100644
--- a/apps/desktop/src/styles.css
+++ b/apps/desktop/src/styles.css
@@ -3155,6 +3155,28 @@ dialog.modal.approval {
   width: min(520px, calc(100% - 32px));
 }
 
+/* A feed's snippet that changed since it was last sent from this device. */
+dialog.modal.snippet-check {
+  width: min(560px, calc(100% - 32px));
+}
+
+dialog.modal.snippet-check .snippet-body {
+  max-height: 240px;
+  margin: 0 0 16px;
+  padding: 10px 12px;
+  overflow: auto;
+  border: 1px solid var(--line);
+  border-radius: var(--radius-s);
+  background: var(--bg);
+  white-space: pre-wrap;
+  overflow-wrap: anywhere;
+}
+
+/* A feed's address on its source card. */
+.cloud-source .cloud-url {
+  overflow-wrap: anywhere;
+}
+
 /* Field headings that aren't labels (a choice, a list). */
 .field-label {
   color: var(--muted);
diff --git a/assets/demo/morphgate.svg b/assets/demo/morphgate.svg
new file mode 100644
index 0000000..a55bc39
--- /dev/null
+++ b/assets/demo/morphgate.svg
@@ -0,0 +1,12 @@
+<svg xmlns="http://www.w3.org/2000/svg" width="1024" height="600" viewBox="0 0 1024 600" role="img" aria-label="MorphGate: the Hosts page, then a click on web-1 opens its session">
+<title>MorphGate: connecting to web-1</title>
+<!-- Drawn by tools/readme-demo from the MorphGate AppImage. Fonts: Atkinson Hyperlegible Next and Mono (Braille Institute of America), Martian Mono (The Martian Mono Project Authors), under the SIL Open Font License 1.1. -->
+<style>@font-face{font-family:"Atkinson Hyperlegible Next";src:url(data:font/woff2;base64,d09GMgABAAAAAITMABUAAAABNxQAAIRSAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGoZgG4G4ZhyGAj9IVkFSh1A/TVZBUjsGYD9TVEFUgRwnJgCFAi9cEQgK9lTddQuDcAAwgoNQATYCJAOHXAQgBYc8B4ckDAdbXCdRI5s7VDbdNgDm6nYpO+lk3OK5HaR6ZmdsNsKGjQPAm37n7P8/J6nIUcn4pJ0OsD8QLDIEiyIzGoadQo/UlnClkWkhMHI40fc6TvfcO+2K0djEVyeL3C+ScLajUGJRpVvjSETzbprFxyqP8NKgGVSL/KpxTvPsNkl0auqxJwq5YSDC6EhkueW3i/cYVMI/xNYBtXx5gdVINX9hVqdn+buCtj8yRWIt+MoLB0cnk1eqxk0vTPb93Z0PhGAIz9HO0SH6YmBAmD9XoipXAXZTPISNw/WTh6juqxeRVVnN6R5xTZyknpXP4InEkfzHk279vN1NW0ISlk0lJksLUakxQGghYEROMR87dpq1Yw/iCdZGs3SOo9n4sTRs1JOLZ0NKu4YNObQzPM3pvyqFQBUCxETuLiYXYlgIhBDEirWlSlWY0cG2Mmv9/860/WMV97+2084P5/pvJskkJdq2+6hdgo/Yr2WmPQL1hTuhAFEy6ZNHBI2ls3spW9S1NYYksYwrgv5PhK9xKFwVkJCAumx7kNWG0UXqy2am3Bsecwgta2yF53id9v9jEBkEeAQAtuXYTuzAA4SWf1FurrasfsUtAC1jFjBHNu376h4QWOCFQ8AgvIvikbwXhvR/ehHD+hmlkYYa4Seb1fuKoJsFo8Fdvv3AkDp1EjvaluZD7iC0Y844+gC0cHNDIGyumv/c/O/S+hOT034xndkuS3mzms1yZuv+rAYtHiR2xZLciBGgMP/v2f/vtEmhpGKmUopJSsy44yO45/LB6x/+gr4EDNhxOygSv2dujxA7eZm8vExeRkwPEjvE/gy5icHzNZchV0DeFEnJr+y7zcSoClmja8v6AChHeqjX93YTRCABBQBszB8/iIEcygt+ZI21bBX+f/u1t2J3xe4qMAmZ/LOhnhKJRCIHSt7IIQ91wO99um8zuwkyk7zroIOKzsRWvpxK0SCWdlOfuVLhB9sy5Lq8jKm9+QGTc5nY5OYegWTTJ9imxs4RKyL0v99rSnX+0ZsnaeVZ3/y0srJGI8tKKzReZJhGSACT39/N36+rPz+rVOm7Nbk0pRfNIsMGU6EnKBPkXsJaAWhRWAALoRkeQEjpf5Vq77UbmBaHFP/WAN+h6dhcp0fHcaj7BtEh5MPF98aAXA4Cd2dGwQNIsocU9T2EVOsGJNlDaP8mYhPJHzZkyin+wJ/yAyiVm5Lq15BOUCiV6BRz3VM6nHy/+pQP16P//zU/bWZ3cpItoiaHwgCA8BXu5d7Mv8EFZrXqz7tv3gwnvMyuEmXZqgpXaaac70BtvirI/v3SlGpddS61sDsD5gPMBSCbkK/3tLO/7Kp8WVZZ2bP6V1XG3r1eV3JKLzJLuqQJag3AwEwADrvhQSgAgVi/bF9XdRbd4fcg+hEJEsybw3E9jf/JavJ+9vRky9DIZCLEmP2mMWUpIuJ1t9X7zapqk8cns9cctU1TfVCEQiQEEQkiErLH33B7A6z8GbBJ9WNxggXoVLoHEnc+04btUif3Y613tOMf1+UqayMCIk6KRMgWr/9EAUdJp8/GgOOMxoU4QoS8Ib7mGWWBXqNUuAf3UBVcnXo4u5cQBAPmB4ZgcBcCsf/D2RCWCg9VqvMYAvkOAuTTIM8FuQ1gmv8DBQhYDP9t/fRPivwv3tv91yXxvzbrq+eEq6+Z1x9kN65bt264t88Jty/rt69ot989uLNZ33lz7+4N9+7ry3uvzgNspDJkmxNZMrOixUvAGCMNUYRlwZ+jaJ0VPMjjpRgrIyw//DSpIEUpo5JMTgHRNGkFtMN672klC8MSxDLcMg2NrQaSBFmKLN2V4ckOexR2L2sma05sZLZqtWq3Gw9pppcOKw0vjSiPYowRL0a3FSzRiuphbVzYQ36cdAI6UTxJOss6P/HSq+z1Jnt1Kb16Kr2O3pS0qmV1Kbx+o/umYvU6qjfJm032FqHmImhWYdvTSR967/zCtEvbPpPfY9Rh3M1kN1fd/B86jPe16C/5D6/RP/J+pkRCLiHkCuIK6krmCc2VyQh5jP1z1HMJ+Ywyud953IeisUXryhUrK13WpnSpjDLszf7yqb58JZdXrNrQaiOqjapKWbWxvuIrq2llzWeLaXVJZ2s5vxvW5uP67YNz0cXRdYJ8F3jjoDegNwI/hk478O6fsNdhDRqNQeuQXZBdLrsu0b2RvaS/UvysPnkFF63DRe/PWu3zLdtD/0yzGZiVFco/DCFYnMcY7b8v42q5Vms0EbEEaSBNqwTafp0uPDXVgpOx7Pf/1Wo+jUIM6Lr0vqNWEV7hTS/o3gQRvuAfahr41IBBw2Y8tMRKEn7En3KJflL5gOBPuAWw0vfjTC17f0kDQiUbs+HG3jCgXFiSbgL5V5O6WgEFAU57QzXe9XvwIw7qaLvj8hKAuzbXt0G+MbQFOQCS03XycdwFFsjBJoJFQl7fOP/z3qguHx8ZRcx5V2iy+WcRVhJh4cpGRGdDwrHGQFFTxnYjtR0ubiS7Q90AuNKR2N3oGLjyEd8H2N8hgMCFuh6hgLpwfOs3/sPf1MZaW2/UN7Wo5teddX1tlYWJ6q9I1VX/0J1SRRVYP7LOtqGtl83dacvbc+3hNqtNa1vbRBtu3a1F5GNzqlbTSlo20Us7mz+a+821pqw5h80cbrKatKa+STT+xtToG4+GloUE3kPai71UaLeL5VTZX7YWa1kB/YwSLfYiKZqiLFThYj/ipvNNtueLrExbFmR27k5rrsjmrIE8bzYhnalJbcqSiz6hv+JZ1EZF2HAxBZEdW2N1tEddRMMbUGhCG7IQwI9GtMClza2LrgSiJs/X1fms9sDgAZm9OsBYW5lXkIWthF47tN/VRbtRosKHbN5NUlteWz2Y9bWd8Q5IoFMdJ1p0OVXLadZd9Pm/QjtVyXvdY4ZjnOcx7E+Pel4IMBttU6l8hapznOfmVoSg2p7wIod1McBWcVii0tnf9htNT7Ot5aKtqTxPlzPkYmznGhzauQOH9rlWhNB4Dpy7dBZQaGRyclb33K4ytyOccNHHoaRk6/TepTq3nuZvIt1Jb2UbcZTXWmsTHUqUydQQSXndFb5RYtZdHufC+/IOFAClSiKkStktp4jDsF7YYyGJk6Yk18aoprw58s558rwiT54/W2vlHJkomAxPpDqHJiLXqeLahQn2En8CpmPibzmLK3AemLNBV2A2emP0r/Aw3i5KeFiMMb5/5vqJ3JopifKbXYwb/UKYGAS9bCEzbH+G9E8oQZwyVE4hVeM8I9xO4DgrpbvVTpVKZFs3cqwfRfYHLVvPKBGyLCEXUztZcGhnJxzaOYUQ9O9MKpEqQu0kapNcnQ5WRE8bTp5m+IfJZniObRXRtPUWDm3fEKBJIURWE+r0tVM42dKM1gDPelg4NPPh0HYRIRhqIzneJnKwNZBOnuvEakPKWI1yjI8fo8ws8+O5Dd9PoTOkPwXPuPqJcNnRYSiI08S66EygI/n9jc54YaVbdIPhalyC03A09sbW2BArthY/W1mGBkXYQ7yIx9QYbQ25SRw83WOG2miwpYy1hQxGOemknCD4Rv5CvXVVQVgeG/zJmIGhlQfTyLWENUi/QjQKzY4lTCeiHkVcxhlLrMJNwMAF86NGwTtDODdh4mA4tzAcipQMg6AEwkyMS5bM4qZJjTiK8P4cza/7W7bG8XWOeeeEznjA13nRM0A+zvJw0KW6TBSojL/zG3AHHs6mi2cA/l1zfZ/sLrrppx3m+JZIAn25V2A7q3hGvbZQ8n7Lk+uWzJbL/hG6Gi+mT0Xx7hc/8hLikowygDoLWPsik7/v2IwCOg6l7wJf8qJfpm5XScn9kbxGOBJtACYmzi4YiOo0upSY2snV4Rei1/XKg+QydRaTKBN+7fVyHcKrVurJ4zu12+A+PKJs4/AnpM7KkfacHHjonQQHfZJslEz/4MUq3UYZNsmywy677bHXPgccckSOXHnyHXXMcSecdMppZxQpVa5BoybNWrRq064DrnABUPy6AAjcTS/+xME0qc8SZFMHyfTiLEtoO4Rrl0jtvinPHvtgDoqTw4LLVhxPhOYGCVu+cBwVtmPKQRax5gaJg1IhlQvlrhAaROGViDSKXJPINItAizhqFYk2EWsXvo51QhhVk4A3oM5oyaOEZAc5AHFySDBHFMNJDrnkdLiOQwgnhOWkEE4pCz/Z5BsHh1zlmCmjlEIKKCZNR4hE8ufDhRODZTuw6CgL7BBs75kp1R6krGlalAC6yVRmw35gggkVqk2PeqWQl5BpVsW9Fl9uRr3rGSZ2I4z46fXUiPx1RScxXgXaaMS4DjyVTfrG0tMVNIW2N5B69QC5UciJaH+BZm03QddZq6P3XmnzixM4upVS6fu779Sfu8cm7czS49a44T1MZPWpt7lZmHFL2DJei657qq79g/0QJg5UAO+gGJyb4mD3d74iUqeXN++Sy/TA2aw9SQk/xPikiXPQI5HNp/u6PV2G9ugzOo8tT2mG9sUL6b4QDqtg5wi+r/KpzdXoKE8VdWtxwEPI5ZFJrI7ekKnRM6IqAHVNkAC8j1AtWP0OhenXjA6L9+4/l0twYfSk5YjRYDmtDBfyQ0ss8vsxsgDq1k9h2pk/Ew7XWqeQvfmwFtslQRJTLj6+NofNFmLVXgbvedo0cjXcUizD3nh+AN16F2xVO8zyXgGq3ll6fGSCZhKfZUmOU5XaVk62iJP1rCPj8OblSbRK8/jTPi7Tm2hcuF5DiKKtICkkvt3pkUTSXgDvoIDH5BIPPRXDQM7lC2hjhgSQMb65bjyGNQbN618UHLi8jH3+0hYCPWP2xhlFFjjYpRlO25TxNhqUBRKNiWbWAv09kq7v3s73fPCer8d42GAcMur1+mqML0L3uGNKoPuAQtN3wj7/c8sVOeF51qZiHbwyiqoxXa4N34N9nhIPdRiYRSqSBeGULkjCR597mqgZTNKjADTWl2SE7UgJdscV6wy1yeuUZ2nx/tkM0lryGzguSl8z0lzlI7nHBC3m2xzbyLVEQvMLrCYksGBFoLaWS1st+rT3VYVYbAPMBsZvHJJ1mKEdfLHb9bs09yIVeiQd1a35u9/vqvsf2WN/+9n315NImkFGBVjOOW8E4GhnP8N7/MNIXdBNSRbEYS/pneMH09qzqLRkI+kdyeuBS6n0Hx2U2luww/FBWVR0Y7PX65f/AYoK1B8f/e5qvEeohmgTr68NKQD0MDcUt8JiMHwU/lIXqm9SzEMul1qKOdsmc0t3AnRqoDn6IUtbin1oKnaY6vv+njYOr2JQrIwDcBOPUJsFCSUfKct48TP4WYOgxZZkkcdHZuRhjDX6TlsFlKimpdUo8XtvAVdxtwUarKBuvkfB0VPpNt/yJHSPFaL5hz10z9R5zNNf3A/FEe9YldS90ZTAIQmX9MO/BY02l0762eRVTV9Middt7Ny8yLPomfrWyY1I7J+wKeLtOT8XM1IKM+OlWODVLT7ROa/XfxN/E7nOhZb8IF4tOHkPUP96lq0V756JzjuJZO+S8xKNx9BklLPzBluP2D7SeYAj8la8jQAF4kOIpMlmcxQZv9O5wMa7QeWjiXhdSunCx+mKvQmeODCu7/PoOnrDaUeuGHEYbud6yd7faSael8Er+Gfg1V8obiZAXq+iMTFdzUUuAEgkBLYHYkp85cgL48TXoiItS2Io+5K0x3tynXHMVBs4rW7r9U+jf/lLfc+QYUvfIaJVQ2Os17G0hmL02lXDPiOZju5LHW4HtOGHM2hvtCf/jPV1EAyN/nh/nSzJfxMaB0Dh2jplHBs386sVxYe8kS8OLf8vX7ru15XGa+jn0lJQwikEGGkJqjwK4+3Bw6amvxB3pnIeNVdvX2CfM17/aqhZtoJw1MjUPM4WZSsfU+cVppEaHF5tpXlqjIhlKxTqM9r8McXNx57PRXDRwWwppnT9ZYE2Zsr6gusiBhLi+LLiFufnA+ed1SqpNF7BqC4je9BFQJ8XwubU/HMFtC80ubnjxc8RX985+5JK+RDpgnisB1hyPSewEdJupndUkJVlZwUa8Spi3KTQ/8x4Sj+laUnWQVs5HsTrfTw+dBWIWTmf4UnImNOjcOpqbR52XRalylFsNFHrTQh7gccMCuJ7xOu8tfxxPnpwv5xQBAaMvz8Z1ps5uf4ESP215L+oWqHKGyVac/LCqxz+bGbclqe5sJt2a+T5NtY6RaY2+4WTyGMVaUhmwXRUMnfbYxTRAGrpn19/0CT9Irw62uajekjJgIZrH5u0kh7jDBrmsghZlOBTu02FM3n7eCJq9dsRXuc0x9qLOuHdvmf1qVElzXLek8FUaRF45MaYeenE2g5H79tXlQPuvD2uFuQMZ1mSR5OUe/MDWcWcFDSmlW5NxNviSoQdlAP1E30c8YJnUi5Xhh5VBr/sVRX3E0H64f+MUIUuRcvQnzoTXSXv/z5lMCk4ksH22dChDwH4HQcryx5nTfVhverYiWuii/DqztO9fxKRXfU+SRHv4Q0+QRg015NQUVk3nUTsCsjmld5PayS4ZeFO4iyeL+XylJPtVE6Ci8ha3Xj9ovuOZ5JnHdbC7bhuzfejej5TDWqdd+OIzz0tS8z790X52h/hNuLBS/yWKfNFcR3JepU0ZVZmoMYeD7wLxcLv+XssQldesWvJ5nBAh1cZw0ws7xpMGtnGDHFHk+jv80TG6NVc8WNmtZv4P8v3PTr130ziqtHkxzes1LiId8cM5eHPpkJRllufimVymVsskD7FCi62ZZZZ4nz0ogVv3HZNR4DMdEkCTD77qdQk3MUgixUEi+vlNReYP1qbBTZZZKksy62Rm6ZZ54BVXrup1RHnpCvY8x7FSu2FYY0JeRIpdkqQ+QUoXgI7TZQiNmZBsV/sAtenjzjGxuGkiFSaUwTSL2bofAYJnlRxiZj6Ea2UcRUPYJokQQpoP3Aih3AKAzkPJ/zgpBS4Fo5+cVyXgwVcxywOwlI/CNUZOCW0Po0eAUfxCs/oJTsrS3HaDwJsSBNHcSDZepm4jSnczjSdxCahs4HVaXIwkcXpugLM1BEWcjiGJciOEbfqMSdKuJD7dTPpDrBIt4CHkOQHnEe5kbuZTsSV3KOHTaS5AOvTxIfOAnM1B7oGKPODAzfpYgZ5/Jn7sMSnaB6Q+MkCuJ8LYlHyhMMAdy5VDI4DpYXREnDHBIZQuLUajrwI7skZ656FUCcAjYSHMugnLwuJkaMhKCKEpzsBUzgAbD8UW6RAZgKMQr0/ET/+AgXRY39L6U/HYCAZ9h8CrADM4U3FSN15ZD7DNXKjDniQl10lmo3EF7IGtPO7qJqqi+sf4Ws194cHoEDdXd3eUc1ZOlsxkLdohg7STRH5gL47inEWSmw2UAUrIXYeTHKlVaei7EmJnJulRP7xofpxYiBr64hN32S8yEEyp7nFjduHwcrC/rYFll23Nh0X0sgG1/kyHbTR9aJF2OxbamgE8KNdK5rXn70e4sEMGM7LeS6V0R7lcSpmyDebcEq2ySCjOKKp+fAXJFiIUBZhEY364BLki0yQrxNzxQbL53dWIjFIA1fVp9PSyajPIeQtN8XN7XlICfzn9zHLibWCYDkr6geAy2Xj1y1vcZmKDtH/tmBEgHMccRInY3b/mEy01Xwc44A3/aNtqn8PbZb312wF9v/pgQm7oslQxbBBoboo0HEO86oERHGegXzWsThZIkvk/C+D6PmkEzdnmSOMlFRbgxrrK1FKrVHEowc9nmd+o8/nRON5z097YzHODo3IuR0y0ZNBdQgTE4kxgju3gJxfgsDyN7oO86YYdDrqJs9ZyADRjHbURc7B8JkToeUuwog4CbLIJofc8+fRKWLgbrMwLFYJgJOUJiyrX0BlmT4u5iCH0jEuNBzFY8OzzlS9bfMSd0Z5s4gcRZDr+O4muLOPF3sRdGiPeETqoj4hzM+pEDmKJYOR69T9FqiQksmWMaPMAgJnu0A9jHFOT/0cyC6k4YG/MF7O0grT5r8tfoSJkmWtt7uNApaD1nAQ48FRl1kOWctmHvUiXd/TUSU5HfIEf3mcbUTEQbY+Gk4sJUCZjZvsnnPAAS3tIPhhDD0PuK+2pZoBktN0M83NBd0tQHZXBe4qAB1JkkM2+GdTgEQQhj0qYnusD8iOrPDJPxrk2y6eBsNgolxeRCJCjR06gGmop6TTW9t0vWEDaFDj5ocLi3nN6wTY3msLG3UbXJ0Xv9Lkr6EvV8L0M9F4TyBTD5SbKCWAiEe7LwSDpblkIRMer9CqEgjbEQQpsiVasBeqoVxA/0WTjdoe9Hm5oBEroA4JBzziW8H9Fo6imCr9dITlnkeq/KaeLtoMGQ0osyItMErDgBkT7cTFiKiN1WOyUQSjwbif2DtQhLBwpLgRjKFe8/9INMCRO8p6BfmjTfFRmkmLUhhfM6C0Qd3xkIsJIUCt17DI2ng1ZDDyHQfwMgfeqFq5NajIuy9hK9Wwq6xWc6i8f5koKRx61oroJUjN7Tx9Kzs3iFEkAw+JSX0eGSm6VmGmWt5ei2nE1pOw8sGWAjxKy7FlmgZ9+uGmi3RpE2VCcBzeTRxQgSNk7xsxppuFb6yZcraj+YkXUGm6Rr2mIPlbKVGpdno0I5pTXzOXy4TeN0OCEXB+iDtCqOHKVGlSzqJkwNx1p3mcLblGKMZHq77LN+NM4slgCWD0IrCi0mnPc+wJbHf+KczX99yGI9xvHuzWA1bujp/27ZiUA3Pn5vkH5cYjYMJRrvQYT3XM6D6WaD9e0XIikDgJuU5H0mdC1Wct3vP+qgsk1gWD64K37EJp40VP6UVv2SVn5LItdIXJuaKBrxjsVyD/VavvGod3Xai+bnJf95bdIHFuaHQ3jM6bUwpucmQ3BaqbevctlvAWh3d70tQ72ZPuFBDvMEV3FKY7SvMdNXzH7Llj9t6xRe4Wke/SBXdFmrsS3V258R6Vfa+i9f49ueY/d/OK9lWrbxJ+efvbkcmGWaG5gYU1DA9ehrBAejBpvjLz2VufJi6Rezbdz+JdGmsz3FjOJwkvSU7Oco+YYS+m6f/nky8S0UuYzspNKm7EJNJ8Gd5xe17y5eV/OPkV9AzQ6tXa2bvLF8/Ry+fqq236eqmrdVRdCm82ybsL64PNb7hQK4NIAgCo9igRe4/KwZNqfEHPXdP/Z0arfAyv+7qzrKMTAI69XivHzDqUY0qMmK3IPs2fiBTHbiyQF2QCYAu5+9ibJhikI2PgEDMGuA8U5gcBezB7xPiz/ysAyjeRMy/ARED8iHOBeeHQCX8HTOL+wYKw4w+p7xoFwOssmxw1ARDtT8vALKhC/SQnFj4EShJ5o4xk4Gj3Y/mIeXGDenBJiyUMVnva4QwXaCEPAHEUTc4KuaxZw5r7N8rpsQOqE/4w8PWKXUiG1UlsJ4XIBdNrVQyCjJ8Q6+1wUV9JoIAYnfvyRTYUhBM4l+lnJjEKRsW4MRomlDEzha6bG+Um7mMwL3+hjilymWVG+YCX8kRGxrxV5Wgh4S2olyqn+3P8J9////7m+Psfa0XzhqWvl5un2t4LLW7Tz42zhgJfDzGgbkdX9KQYl6yMC2J7gfNeB3/1T7XEaTtdcNc5Zxxw0A7l0u1htctGGW645rpMZyEkB46EaGISUkoqagxX7gby4cuPvwBBghmECHPEbtnu2O+JcGY2Di5+AUGouHIVKiUk1WvUpFmrNl269Zih12uKHXbbekuVuqTMZSUK2P1ijWG3FHqhyE3/6fWH87Z4qcdab+v23gdZ2DAELhYOHj5nIk4oLmTkFATcePHgqT8NG61AOoPohfI2n4WRUTSzKDA7HzcPr9j50/N3qlKrWo06KV+arlO76TpOXTbOwjPzVDp4rkvNedbLY+dCwCgMQuPg9p0cOOD6QFrmNV6OAqAcpWFJFFyGBr9m2qBPt2q/aUfHGxut7WUj0vwfvmp8D/wLRnpg8gOAcj3IOwBaWC+ZVPZx9m5g1FnICCUfmtg220g2LQzEbbaIgDAVoMmzMQxO5DBotphIIXYrBKZkp4hHu2YwtQWFGC0hq+NTg5iFuQThTAO3eccWkIFqjpksJW8GZmK8SzXiqP1nFJ3LV8H9+C7BAywMlTefVIcB9QCYkLSarVRZNeXO7ia3ZcwKrltyBXbdei51t6+w77TF1KBHi7OtiRwZOxzbaOdXvrCaTF41hj3B050562sk3ntrBwel9GwihL3YPnR8aPPGLLCzFgP13Ch7dszl4nGRgEK5MGdQWspk3IGfgc2wRtsmqGu3EvY3kdfM3BoRLxMHoWMJvHwsUelf31/TqTL/deUjkB/5iuaTCZTlFOd0eTCKn3F82QSOwrRJjG0YWcgZgAkrQgiAgSD6SO/Wk+yH8foLgCfHf5Dh+LWN0YYIH+5vIF+e57a/cP/HXSFRQ1XXraGLB6yV52h/5+sk352QqY6+p2IuL3+F0UGxT50jj6jj1bguMMcA5wD7BEXOE9jdXWErIc8+y/WK5D+OCT77uArXqfeVClXlh0kkDAWZERjSsggleyQDwcg+YQjkMehZ0LZlfTwpP96GksV3sgUlnCiilIL3HUt64WM8K6ddwc+kbO9DS5n/yHJPKMpL6R0gg3/ovzshddMuEbwr+O6KWqRydIU/K5OtLekjD5Ea8wr0W/UFpuBAPXgZEnKK29AvPlhuAZxLxQ6DVuZ2H0BvrK5nWaYwSak1vR6t6QZlm238/H7t/NJmiyHi7zOquu4JOTgBD6feFA8O1jJCzdCpMNXty7OtKTKfcB2j7H39dIq15USSUgmWKZhMNxGMJQGGUBh6iV/x4kV9iu4uMOOrABiwzo3JDNiHow7sQaZ9VWIkjcOPxLkkQWt4evvtuun1ACBNmkaaZRy84N7uMJrellZ6vmi769mBIp9Fff8cXLwhHPyvNn3HJ1fVPZPuA7z4uuddJA9iH73fsfUR1o5RstdhEhN9L/EzETU+enXqpu2qUrwWvbeMhqPKzh2R+tFww/rRrBidgIssRGCRDFWE9QQFduxLZBsfHbdriE4zhHLrzxs/FanMN+zHVktPsrbqTMw2LRSiI5+Bsg1HZL/fskqSeQ3srlvos/fdxAwsWbdnQs/NZmK8sjs2aGb/C/LOTM75HQH4ru66Ce6jeZf23o3bvXRNJV6i90J/F7m2r2pBB7oTphXdjf3jRcdtWa0jJNJt20cQX1HQHVLskWCj6o2T/Sz+pAPFPa7c73jfyaVHTZ0NHUmHECwT63+1OajASyfbZBuLsBg9Uw+nMor/Wmetqu44BiidDzZ/L4V2tk2lWuh86xzYXwR5wTcsbEDJzcEjo/j3HEaO4HQBD4IwvfCtUwwJbOLSxidcQ8ZLa7LfUZqMQXLYy/zD/9XIbAgObhAMNEu7J4z85393RJWUw3la/8I5l0sQ1nNk9CyLfRQ4U7OLX50DXSRI6H6IxT2Mun53A7TEdWlfj+M22xDblYa3/wBhKJtChoT6syamOQnZ3yYUMYrf/fMzwPRs1KYZXO//4ekpRkFtw36i36t76wmIzL7Bi2dmALKebo/PboAftnN1Kr+netOacxoZ7Bmlrxu2ZK8bWW1UFCQLP7r1J36fRx/nHIYwy2SAehaaIWmKPwkmdGomaJ5KKi9sJL9Pl8LtHjO/aHDApFvRkxwr2RiMZjdOTRDSEoTDj+9Nm4SNBhI8IL2f+1XsYx+L9zl2ro/tEC9xgRdnW1ad7roKmj3warsHniaUBSayRPDIC9IsoYKpsN9Wv6LpIa7oCs/z1Y4ayD15A+eS6z0o4Xu5i/ZFjhgKq6keOoCO622IVVpXQnjTPay7Zn40YCRKU12/i7kFDJrMSsXJh83EnXjU+Fj98Q0jb8vun24ROcUTRi0J8vtUYYPjfi8YPX1mkcnPRY/hbN7Y9LQfXs3FzsyGkWTOk4qZn+cHSMupVv9yOlZ1FXJvIDx8rlXzdU3zQI3IDG3nZzAfTYyWgLpSejs0mdFJoA5UskSWeANBMkEpEUiaxEkgeoXY/L6CPcgfPbxkrrOf9+lzXGRfkxo71HIaGSbX3+IS0y++HoAEGNlx52wXb9oKX9KbW7q/yu+0N1RRo6+bHiAdoLPx6xpCNLhe/raZ1pbZ1tWJF9lP/rta1dDmgmN65inAbXS+95Q6ZHBDPpzW8NJ0Dtdx/MeK/yNTL8WnUc0fd4pRMtKs//wQU12fz9MijkfITZv3rLb67TEyUC27T3u69cXY5dFan9x6YkHu+nQSMBLq9dQGgundCi4NsRKHq0Czt9a80/aN0q/N51nw5K+8s+rvLPc6grEgH/MgY3xnAeTmWUZabroAg6CENe1xAgod98W6BQArp5rmYRzIUD01SA7etmX01JEQvJjwceQ/V5+zYGRP7zQBA71f1Jwpe675su/HtMrV3NRFBZg5W69TxjTPsaZ6I6GAP6HX6ZfjNhnXJrriFmhCon6PBXXNb7u3yve56ujV4VD7750sD/tdHLgB4k2onW/s9wx75fTg7h5tnW19cU2R3K4U1ZcNP4+Xxsf7u5g9xv/lBItHSEwj9UOFcKMukW1dR+uxp7uR4XvgGwfllqRvEq9VINxkhV0YYAkLBoJ8lo0D/yh0+klt0iEEql+ILi9iyzh2pdRfZvOOjSWu6KqtUupH5fv0TGp2D/qdhV5qndW4Xgc7WayAZRrbibHyyz3PqVGp+yA/HjDhMd7gu/vGZ1GEv3vR+qrgPG1mAejZBQYKmncICjRtZOvpGhc9SwEAHHVN4CZIGbj58nJ6ibtWZwgMP70cOz/LMKa9rSgdspI+0IF2V25X5cG2YJ/ML++a/I7P5HsKPxR8yO8rq/xIOPK5ohOQfww2/D5YK98g+kobuPXr6lJAPp3vW4cn7ckjk/P2kPBr/fmd90IaCo9gsUcKsVew/H/JAMwcvIK6Dj9GH19zoZv7fwtsmHPrUDuwDI0ZkhRIfTI+x/ertUgWEatUsbTM8ZH/A8l/PyKJLJDjA/cOY5lAct/0NijDJJfGHYN19d7XV0US4aU+qhMlVsQ1Vn1Cr+6JhZUzkmaTAC4m/h8l0l2rvGDsJ9O2bjw1fl8uKZ2bOzk/a1QffrfhaDhrZrn5laSH7wuqfYm3ZLRk+s2swptPJk+DNwP/0CclS2lVPtn8iqRyQbV3MSUY80c1NVNdSm5tCOWmokxveE0UJCvhAFzktvHBbwLfAP/QXjR1OBvNvpZBjz0+QMOHg2hQDErrS+053+ur3/1yL9VVQqrMVek1lmJGYrNU26RX3WEF9juUUKoqKvmxVQD8QwmCl8EV4ySgticmJ+w4XARowiRaasemokWjKNA6av5qsku4P3Ggpa3D/SxBQaD7H6zL4s775lTLqVLFE0s4tJvqZViQ0O3RVu7V6jTVKrFakxhaKdHpQS0muSruHUynTcb7J1Wyym+sNmh7YjFKHjQaakiisP70xjSjWmUJamEfa6aT5ex+vqq20RQXV+SXmC0zti3M0ReUiO+HjriIvANCwVhM+ZK4cyiddr4er0q5pU5sQN9BXYefok+v+dDNIUOdxOzXluuVPaWlyu5ynVZjEoXk9pQ48A/95GzhGWN2mzFOxPlKzqT1SFgBwxYg63/rB89/Za8PturK4rVNpymsqe/tNFq7WroaOGY/z038avfm55fhvcHtOSZm7fv1D/3mbOEaI0i0rjyUA47gOkbyGwrqBnnWApTHR8PPad4gYGLUGarfVhAhvZt0FDIEzuIRDrcvMLU0vyLAF9hkXAYMSeM4haQU51TpIqSDN9eTmTD2DTpn8FJlwT8VAplLb3HEukXggecaikOveUACZsOa9f1LEqtT/kwy6c+kVieW9PeuB8/bBzMfCT8WZu4Ogi82p7iPPYvdekn0sTPvD3YsYA92kPNz7B7cvutnd3qU+u/o9K8mXOXCc3xjIPMZ9CmUeTowBgToit9now/RZb+/hoIqjNhP+UGoRx0D7IbsbKXKohcNdAYLNXUmOFNZU9fFHQstVfumwUiIJ4Q4MJ5j0bC7s/sCFDQXsGNkIeokYfhT71t41o9ZawnX9Vs5X6UvFen8uJRijuT6h8Qi7spx8YXbUmo7XK0+/rBJKILYEJ6DGPL8bVM/pdJ1RU9odPEDAfPyEDBg2CPnHxa4TSNh2sNzI2xt0qDrCIVMKuZ3WLzV8VJv0mLBv42lelroT0AYRwZSd3rcuq4myCV0kNB/vPi/T7OYVhY7aDZxQhY2kzvyZxyevNtDAOOGmlfcsf1xRNxiY3+9vHY7YeHJzOEXDrHquGS8Ao0+IIrSwtnFY5MYS6DArUZFDAf/MS2kjzWOe6uBYPi+azBp602wOl2tNUFRRd2YUmb6H6dTbrXuRDA8n6Zm2vKr8hkB2eY0jO1WlSXkdrvQwqbbRCKTulsoUN8Gmz8KJBh/E6LpcgXMHc0mZFW/1wWSSaeFBbz6dTFrlf7HQ7UUPwGpnWE4HJXrB9Qqh4LCZcUycGYnmPStNoD97gBatOmWgDkzSxyp8wj16iqNrjUQ1LVUadV6j6gO6zM+gJTxpMA2kXWb5TObWb5bLKO/LBLxl4PYkTD5/Lvf8wwOMTms1YWprDzLfYnRFgrmgcROG7zxGbg+7FZw15xnPQk/N6rsbgK0xPf0h/uvpb84cpqWeffOm++DL0VySOwPIxQmk+YGsc9MYvf5xUuYWpvwxdUwR6GzHfCYiZb9IpVlUh3HCBOdyjznjg4DNgXDLyEiJm41DJuMMi3F15M8Fwti8YIWi0o9yGLCQuLNgCkYlrfwxbzg+nXEiIb5G8VyY19sCH7wJimmnZ+b9v27l4B0Su+n1I/eufhPwLtiP7+R4DDGnFJfG5uRag6FqylfgPxnaaWx7VZ0JKbnm3L3j7qGY7jfiPUdTyxU11nWHoMO/n/l1WPL1JFPrvySyITpo99I9Q76gUpNgxoV6Y/kf6BYn3FC4bWnxZNGfrWwbJwHy/1nIvaZUVFOFEBF3BjiF1HLoLPgBww/hLOosoPELR4uVwpz6RRp09BGiJzm801RqsLUIKv1E45BJBbvbQp+aOuQzkMdEAuVSBkTTMvBejdJc4RuwjWFTGEvZWlyXTbwhEk3Shjeq7Jz4UsWXnmp1K4MMSUQn3v8v55JyUbUhyRb+dasieCqmMaUS8NweE54TgbO0HlMisIN2jE6m4QU1RjCdFaedZ9QD4UCk8PPzLQDdojBl/99Wt7Xt6CvPKLgzbVPyxKtNa2x6tZBKVvz1Ne01qMg56Mf25+lZm3v3Z6iTNuUWvTZws+AaNjNJXETawIfPKuY19vdW7Fz3IOPAy08wHEXlk9yd4bvO5obHFoh8jIIp5VQDjTZG8Jhr0N7d94WU5DRolBhg0r3yYHOGvoLkgM0fkz+lGHw9QrGU5ZFJrPPfcoojlWS2oTCNhJ9ETALg4/gZyjwXSyalbpdhIviCIJnmQqMb4Cu/00V7CjbMT+o+JiTn7T1taRYfpCAWfU36pevmTQq+fCKAyyJTakWtu91odi3DLYKplZRRTM4tHwq0s38iViMpfEOcoL2j22DTs3I0vwxec8WZVJpE68sP3ggzzipfVC+lLAXMZFbIPAIRQJ3LImSBBcJBR4NeDf6o6e+l8ntZffp+3Zb4M5heutv+TIgs2j7nJzgHOzwOCzcHtpVZ6Pw7BcMY6qiRv9r9kszcC6dvIhUYnXQWjrvXQLcjqMMFOiPB9YGRuQYR/7ATOTysCEB3ejsgq5HF90D5HpXJ3KjCbhtMibgWh6+bqRQBtoQDQ+KyblfSVwvOV9ySb7iZn/ZFA4RXlq0V6/uHd+r1u8tkuJFDuA6vLG0grc+8A3XHXPPPTXXDcKGpXesbl6kNZe+tnvpS/bm4k2EWPEE4/e02rzk17tOETTu8DHQM7XMDYfFYCP7pZPeSr188hZFUQfj2LNyatctCno+cMDt+YCjKv7fN3kNwa/K3vkeoNT+zwfWVMHzxLVlur6QVzUvWTlP7tL2sGr9hhlBn6jcxmHSFmzuO0+jwwy+U+nVxyoYMtKhz64R8Fiie4qV4XZ1zrH69PVcv0fQYIbFjUFPhqWmI5Of2/6G80xPija+zGrbOzzJZXG5njyQAgzGlpFqohoF3+/TUugshMPhwyhXzQ2SFRYpj2a5sX7ZuiuTLIxYDb7m9ZeHZqDRTe1Sh0sZ5RR+9M3cz7I07J6/bMkpWzmF/S/h6CkG9T3w2fCBAVjB8gkVskhEpgAw50/0z8SfwNsxLA0TQoWvlkuFK0kUx4WUHGFYHSqxwToh+yNGJLeGGfK9Bz2ya8jOEZEeKjqfUAZFGHm86RgK2fBpp0GiYG1u7FxlIqGc63SahEwSd6NfbdtguKKuzCAIBwQqRtfiT6Gi/Utw/GZEuOIwoXjPAWvh94tfZlXqM3yfj5/R601SpqX04h7+ikfjMC6fytPetliMFKACUTKr6aVoegVv5cgyjsHR3mOpwApRS3NFoVebW2B8Nc45psHzpT0GsaFHCv7zGvOMj8nynjHdiJfF9I0kyK+TyBvJpK1o3gZ8ww/QB/v5VeiqYMUwCx6WBs/haVttsLgpbjsQkYU2IWTJk736yDqtXQ4/uPezOmEY8UuH6vZjCE5FwBQHCSVyq7W50MZgmNt8LOyt8whWsnIeixt7LyVwfq1is6t+5XhZWDsy/NcIZJcGppUzbNCzEOlEiereL5xjAZ4AkSm1/qRocVDmh8d06Y+ESKPt7HcunbNMrBBIHVq9JdYksYwJDH4X1ekImWOrq6XJo2OdCjHn6iUwG+NvN8HTc92VH+jHZY+LfmCdGPC3dept/jl+itOH9wbVRm9Z9WT3iw/ujOON+7hsw2R3ebXfgKoqvHiqa4EXzMPgobNbtx5i5e/6rEUefY43s7UGdy1DH25xi0NF37k4Yq1dLmWQ4NFH5B+/MmOqTOVaNt6eR5qC0grdeUXOwFUc89QHTLx1Mng+7lX5q3Zgzf0VlzFknF8jfyX6CmMgPD1YO7wryDpxIqgBqhOBZwGwkLVi48DGjTPdKO/+wMCIAtXx4LPgb3vxETxOc3gbLgzhw3DmkjMIiJJ9Fjz9nBtpy9re8E1lF87YAdrLqahvK/h9Tf/3we/7g/0jwZH+/NmBiwHwe+nttwLPZNCyG5naqHUaif31siLi7fHTMzVOU4JwGyhUn9V6GZYuGTXE8NHpwTgwqV4WkkhCMrkEjVwmRyVcLpOEziBzkXL3kEh7cknJYwM2OKlTfNh/S+Ufft0fCrFPD6sHgUpjAqR9xUgxDmY/clyxAizRVVjZuVOgyXnCPcEMyLq/cN4vudhzIkf7Q1kl8NKV4R5h3jGeksu2VtC9z/AHbQ7E5Nxf5i1Mmtpqtw7kOQ4cid8NCdgAGcDnGnUAeRvp2YnH7VyK9KMI2C8i5Z0gkU7kkZJnXcBexf74OxJMMuFfUeRPDU+zLl7IIXQxCyZhGst+yxJR8zCh7YAdh/NhsOEq1ZeVofknriglYUy0O6B/vb3dZLx/VP1nN+Jib3flLKjDlMhijFles/LHCc/+kx0ngvJreTYLXcCYAZ68KIMlobyDFzRDgOiPWVa2V6Wl5QKFxawXB2VflRROcc4Ix01VXBVq0KubqmvnVduk7UFAYZAEX+36KlT4jstiEcDEmVwutfF3otxbzPbkj+bThZsZRodxA1r4rd5eyTLyvdMO0qwimS447C4wVyphJN7KBx3veQPuzZEtvYHe95CfnlNAwcCVfLXrCFr4id1o5cBMjkOuEdgQCoOumtKOFnJK5gf12G92erBcfY3SkHZ7oUyTHMgxJU1u+bqMA7fIUJ8yutzlxooQ8ehejtxpZk0f5a2LKCFzUqtOwyZtfb3J4YL8ERihCcEUuXyQTPRMDx4NFniADmNrE1tLLRY43rOFjLBlklBIIuuCLjuvbelG6rIl20mbS2IjNbDZDcEmEdtJpWx26RlEHuKf3xKJ3/5JlFcV/F1+8mE018luJQWEFmNTsxWxNZmNDSYBHmW7RIvPTyMLbByOjcfj2mQPn6dczopvDhe0+D7Y/gEsQfMOXtAG3vIBYc/xQeftb/VTgzADWyKhMga1M8gM1Z6YT2wl4x7jsGWBH7cgEoXSLhcz+a6Qa/P/dPtOoX2lfQMl+rnq80fwA6vWGgVnG848QVXCsu9PziC7v5brCXRfn7LvWwKutIjAn7l3v12oIL9cwSBcanp0k8jqsBTtpy79nfDh2vYNYFl/UYmYyhjUzAT6fvWJmE9kJeMe4bCl5udb4Wg6NiMZcYbcm7/7BX27SovIvj/ZQ6ERFhKo81DVFD6ZECsicGft3W8XKMgvlzPwl5se3yIw4EftXsAWhoBOlde0ao31dty12sJqhXQHq49kgbTOPKdY6I8dsdADZxohVxkhrZCuqKpOUAFjqPfFSDP80KXwaGJLGWYogmPXGLgz6z4UCuPOXOPOIuPOS7G7Bx4xAXQ0AdxlAnjcBPBcHNIAtDN8caWr2kTlwKpqnorN53m48zy1RxXqVop/8sL67E8D26BYsV+AgMlR2zyYQcOVq5VU3wd008bA66Zt7s+PwsN3WhN8eDOzE7zVW1Mj8zY2iazKJg5sqooVuwcYOBiFuo3ihUw+yC4c2BDFip0DePvHK52Z3Vrp4C2mVmPJCmJsIF1r2cQirU7Dw6mWJUJ3rJi9H3o36GxbgOsMgAbxuHldiLEYgpyVrGYt6/iYvxca/iw0LlVoWrzQPFJombfQOrnQtkmhve88O0bAuHiy8jOFezVvpx1fDc+eGRZBetJG8U/cBwyAPLRUbZpKk5oqaJMI/8TEfJxMShJvyqgnYzuAFh3UyihysWNIGyb1RPK5vUNKhCBH/pg0KVPFCxnLOzGD42RSSZB6gFwHE2SsjD/yDsyVKWyYUXgzz/PIJYzD3J88hDyPrXLgsVbCiyb3e41w5+sBPQ1iatHm3sfBXijdhfjunOrbXoe8GIdBsc/pFyEmSPaQGDPsk2BXmE3iC8neT+JTyBrRzihIL9jTqJ4reJ3aZf+PAa3bwSzLB8NduJW27RFbghz9NxaXyOgXFF4iRi3hzC8+e5iqvDMaGXPz0yN+geE85BbnVjEhDJm76dnvJjn9rKc5txkG5BJ5zjgp+aMUiNFtcsikki/ouJK+RsfRBaj5v+6D8rxYIBfOsxAQcJANfATkAACWE6tKjzVOxTPCIy1+wSlFVQ40QiKoGdHUNrOb/uZyG9Imtqvbk62tfdz+VQfVYXV+HaqP63dBd5ldXnexq+pa+zb2Hen36bf2vxyYN3BsMG1wYLBl8JMV8jVDEUOJQ68MVQ19CZyGDcM1w+3DX0NqXP9xpnGxEd1I6ai76Au3knKl8viLfBXfyn8Whju/E2PoKXQavUs8I14X7eK/EiZeWzxWvFWqkEdITso2RS8dLk2WrpLuRiGyeLlGnq05KdDcgbuPX0hgENoIewjnCT8QxxEJRBOxk7id+BtJQGKSvKTLZCMZJafJs8ibyY8oYyhEioYyj/IFNUr9icanMWlG/9+r+fQxdCJdTQ/RW+jL6e/QbzCIjE1MGhNippjvs4pZq1h/so3sBez32IfY9zljOQpOmFvK4/Iq+Sb+LUFG8IlwlBAv1Av/J+oQK8QnJW9J7kn+PZdJbdL50oPSx7J8mVnWIlsleyjHyDfLXygcFFpFg2KT4rxyotKmnKP8XDVKVa+arepXvafGqUVqSB1VN6rnqfvV76u/0CCaTs1F7SLthzqF7oDuud5mMBlQQ5/hZcNmwxeGo4Ybhp+MbGOxUW7cbZpsOm760zzefFspX8cx7GEdICODke0DYF1g2j60uV1gbBtmfxc+frDb0b+ezD2LJZkC//3TZky+9tH9txu8wZA/GjARdHwL9Pby7l86y/zlRW0b+n0BcXJ88xcg213QeaccxtnRKf0CT+aefcvjYMqREOc4UjZjGxUdHQhDjk/iK6A5xev9V0Czt0Q/A0gwMlKSilBSjmMkJLvKphWnmI3SoAOeVtjQzRVEc4HrP1kDRTpq6fvaRx0qJYo4hDudm7SRVdII1BsiYS4HbJEKWyGEMTYKYo0Rs0UbsQLEuhM1q32Hn5ZD6Ji63HT8EPUhBwcEAzdROJ4jgIWnqYIURQnQQSQBobNFE7AGpHZU7n9qnzsguzDyHLkXpQWewhA28gXy84HObSTSA3JNqlZFUeyj84WIGdOZYIkgPRFEEGkwqmd6Q39kagHCQNBWMX7u+5sxHf+6fef+zdPH7t/ry3F9NqUJiMRTwmv0WzIlTyXpWleQXkHjPvG2DrSxdADo144eY08HD4klea00rrpdswG81W+apB7mMTwLgBTbHbrokeEsc2DaRKqvI18w2JFrI06l1g0GwAyei9DHBOI5YkX2WsEii0Oy4lnYfVu3uJAnx8mMZ6Xb2BIJf8bAxhmOt8+y0aZPOc8zsDN4XEALE50OG9dk70eEwhSfkCsctu9rtsrijJ/dabZ8scoPbI1GvV/s33I4ft62dHlOWZq0QDB4ysA+pjbDSt1kn0SUCoNfkxu8N79+XqlwTfMsz/L1rmbsbhyaYuJ0VZCSPgzSDwl4LCk7piksG1aYoD7ucoKDxAagMVodbIyHPIWrNqEaBm7KYGx5d3i6npQb+qn1Sd0J8cBSAINV6zNC07wJR1QFdNx58GiBRSoa8MN2MGkIuK5iM0hv4PjSXn2Wc2tdpm4pfSUwQAGrxt45rv2d/lRQE/O42B1TWeZQHPJF32Rvsje7ZYvBNDIhxOAQaz6o5GaVLmNe20lEx4BNnjDJrgqA7Sbn3GjoKMfAxic5oBgXCgnjRtt6hh5SZMK04rMukDyIuE1xxW9hoU0Yi3QYie5KGqosKZps58pHFABG3gUrS8HkbUqeuH0hdeiNtWWBzA1JgWnPRdh3keJRQoQD0iCH128Q8xzLcmQt8KRnakiztGARjUMDUJC33vBScHgTkyO22HzWLaYSVyo3ru8TMOsI9eRAoyxqRJOgd+iitSwkQh0/unYjX2m2wlrWG4AwaEwp4pwWgaG1hAGJVDMxchifEzQ3ChJYMptJ07ZHNLvj9SADzSfQp+wxwe4HtbWpcN5rtQOpesYvq25aixSRLrU6++5s8ZLk5FJvAQf309qMjXx+Onr2/wnTof2sn/W/gFaH1hZ93ZCSgy9uZco/5zs+rp/IWfnG62aLHqHj8FPPXkiePCvvP/+y9MkhPjDhTM7KNy/HyuyMC8FhvX0huVzTyr/p19Va7sqrnJVvJvilKEMNdC/BR+genB4Zk2tEtiQp9yrri43s7ftj/4IkYnkLz95u332yKRzyXWl1Ms1jmMtfg4ensoC3WwH+9s0/63n05sOP0MvXXbMwu8q6zqHqURg3A6dUzMSG2MSZ8ypi9MpYY/6WuPfkySldXMlwuRvr+/PvhWe3Wl3Zuf/+v8QN0hE2wkbqzm4Yj7r2ipOTOCE6NcEhgiozuqq9Of3bEudOw+Uo7GGfpl3pw2yAUWXk9SkF9mYXUXSjyhjwwxXyhom7eZQ73m21nJrVBtjYEuMmkv4Cn2Wvva/ABKsuIoKnJROLV6qAXoiix4sUtUetGXube4qbdLXCXhNwt8zUOL3urg799WeBukgTzgfbuyIvPea19zOwE3yxrpjL297TAnVVSstdYp2Ml5O/EXuqq3ilT11frLxaeYG3YLMBmSivXr57+VXqlhjJDDx7/383/vd9hliq/4ZHqF1nJKcs+ISr+9f+e7KxRW/dAkMCrKyF/ES7SIbv/BfQUKd6PoWfO9hkww/+Ddi71tO8gxf5Ep5+Qmp4NjS6NHS1+RE6edUVC7OrrOscqi0Koxq4oW7mMTwoKCoqVG9ZxAvGs+ua/K2LBTR6T9QdkrS2ZaMyHqknxb6Ibz66ql0ncFUe8i3UCCnYR4vNw3lDNF80+SLz7Qb+CBGrz51okiiPLUnyy7oLfBFmb8/nB//XqrXbLFb7fnfB38Sf3wEtr4RUDof+TuxCFIgpfWGU2j19NRrTA5se/gqwCzRRb4bL8lXPWiLkmRfiA9cy6SX75u9iZJG/T672GsgZiT4Ig0yS3T0/DTFRPuMb/AAmmqMn9EU0bMF/kcuvssXPITHxxfc50tWVAXxEsvBHfHlvLyD/KEZaS/5EQxgIe5HdP1dufNUCw4979hB44BZfkz+SP8p0/ylureLnct81ICoQARklv6z+EqiSKQ1lAwgp/W1/nj9tGMBaTX67Udjzl+Vm031S0XgnA5gWyDHyyXUW+Tst/1VLoxR2i3vdR/6hezTQt6/+Vc+XNm++ZvNeWmIlozQKDAPmqgxKJ+lArQbUCzUSAJX0bA8uxpYAwgphoPN05BNgBP+PihzUaOwapECpTHK6Z4K4ybVsD2SaSJYjyOe5M9vXzBxwwaqPQMh0NJTg0fq+i5iFjX/TFRZAvLfoJgO6IwXCZmBU+6AyJPzuAQT1wN//3KzOB0/1fABqUWgnPvFUCbD689QTGh64qHbWyXKIjtZfw/Quv4Gnz1ll7kNb17KX4zseUm9mL8dzXO1RGOXANT3DzhhnTgPBKmV8zCNIZ23GiBooUlCE/Uu4aph4hVaycuR0rMsVaTF+ulbTqFj1UWLriVx9ZINRR88jxZ1mdjZXFMkYebddm+fE6V5aqS/K4hfKVWOeP0xmknSkeKxbUbfo/NNX28iIb0qG5Xmb+q0FoE+qG2o9zf7sAKmyRfVmuzbPCeODcq7cSI2+KV8d0s9vKTk7Mm5zy6m46Hx6+moalRCrkhFpr/P14uEOFGf7l+pKvydO61Dw5lDz3ms276dH2BHjyCj4Wjq29loVgdazr6CEZmHyejAgS1sw4j0c9h7oHscHCRJ43i6b6CndRhu8nL0dwVxSTZDI9KACgdqRVPZatAzcz3T9iNANzTQfeoMc5VUhxRZdIxWvFO00+32oMUDVx82MVRxXp+b7LxbJjZzFT7NfMfDehTfy8mW1UT3N+v6i2weqJeB+EdS3pnnP8f17cpCjvCp28Wxwafp5zmI2eDIGy2fSB263p+a/X5rev2T8UO7LfoLBF0/JxPN/Pu1bu3G2T82IBliABVS1Q0+INZBbhBoWSbBm9WgAkyFFTEepgAlbPCxHrq2rLuQ9J2tL2U1qedTN/Pr9DPxrFSdHagw1wXk+uOntS5Uzvpm0x5YUN6mVTa7nTz1rIapKzzuotTXBJT68rP9vwrqlJCMNMgDtNNMJxrAvNgW0ByaVCYs8gmAUdOMjUCcHGvZFFsCRqKaTCR5xuXdlyOXOxNQJWhl31EAcoWpyTfAa13pn2qRY6SF2iB1awkvEf5QG7bbv+SG1haAXcaBk2rRWvRArkpn4SwzYP6otRc43sPujNKtMMqFjEbuma7tvOE3T5vdPh7BaDxm87yJQXq3eGdKEfQO7P0rLuUPEdCwNT/TVg2cdddPmD4+OcbPsEvjEU2G82Hy04kicxlmcxVWDQ29dbDZs7u52FxbXXEaprjt2nk/oBo2owMyYIgxDWLURZxFt6yA5ih55cS3cfdljeHHxjGuTzakpW00y8H0EveWaD150TMANG0J/ed/QRnIUvJGJpenL5eWuX6Jr5HIvj9WSPXFbiNwJGCrpSdRfWaC7v2Awv97TS3qJXWaXNWQbcaHOHRVrsEmBMe4LqbQc9hUfhFjj0PQTxYzGytBeE0hYNVz2zk0C2WhEloowEQVGK06QLUSYATJ8GLoJd4JTJq3L37qYnF+T5P2xyiTDu8cCbFq1jJxFoyBTg7x4rrFWoX9LMSWO00MDS6Ke5pJbc5DUtbQBO+x6YllEOnHI01Ev+26rfpS+NJ5VsaCopi4z9PBifk7J8G5l8eLw2gKgSe35oJ2sthQrX7RPVWFNEm8AnipaadE9UEEHlyIMHjdrpM0FrDtZ/Z6OWYbIdNSz9nB/56X2I5zUmaLr2gEeO9QJKmRCQziDUYRx6RS568Fw4R6YUa760OG2/33wAtXXn+63j/5/+CZXpS7mMlwxyFuISl5wlaVLeg8FCsbeNrrrTTB32mAdr3LHOshrXD1/PCLnagS0ekwWhDh6tx6DVQN2aLPFSfIBd3pv7pLL9THQQCMv2VjiQKKO7YQ8h7X8m2ByKkdgZrEM7T8a+sPkI/TLmRstzK6yrnOoEhTGEfvj4i7gBQDP0D9Em1caCIDp4U++00pfILPzCMg+k+L7bqZvM+EKCoYe4ahvg28U438P33AffeXdeBtMGyWBvwJ+pUGz0U785KTdD2E33yvafSoCdoGHgcMavrhRI3556s6n8evB6M6r1cAv7/kKcEXDx5c3OiSy+e/9tUHv9eAfwMQCVMC/eJ+we703zAJDzjORDwwtE4ZQhKG/iI4KwRGPMmU5OALZbPV7zVA1UzN1V0HrYZBJ/9hug8Md4ZPaefiHniSEsRPBMX8FHGuaFFzWq24YC05d1YM/f88K0CIEJ5YV445Y/iPU5Z1MzinM79BVJ4ginO1Zu3/T/Zn4dx4Qfwbv+W8xGaMQENrn4NnqnL77X9h+qtqJ8HsYHm+UmZOwScYeChjbm1nLI9JWJXIvJ0ZG5z6oDmcIwstMqzvuMuadXuaWE1Y7b7WLPpuRgraI4pTECNSnJgxiqBX8VD/le43of0YbpY2W1bSbu5iE4UtXD/W5dJk1s6e8l7eE82Xv2dr3lYMZrgkTFMn+TqhkSXhfBrgx5ZqwUvBox5zCcmkejsNuXwkusQTpu+WrvSx7nBRj+0C67G/2H/hC3JU+wFv7gnU52OpNcsaVoqr7r4JFSywUo1wJLf+olxzefuwxMJ8fPTGLzlOWWclXcC+3gocdljR2jKvxnH7gWQMb9XjWBjXK8dRGbLQDFf0g+xD7UJwNbCZlztP2iZEjOPGKEE7HSPOBU2YNoVd4YOJKjbUUKuPr0J7CztD9cxJwVXDuteoRiBpe9FZbE3Wqtj6nIUllmAlE2dP0EUi3r23OwEpeBdNFfoIq1h1HCCfYZGrWueiM2artyxdj3z8zZT5WUUwholOE/MAScGgK+rppVzHUIzNiur5w9Ia1f06ZfwPxlbJKnQDQgpeYECxVP6wNHDEklXCUlttJkYuInInb4bIrF48ja9wxppAdR6Rkd5yp033XOS0174SXLBZfpeSJLIYjFSWExzrX9TS1aKAN6W/RdUm9y3qLqVqt5M0nvSXp/w/hyrIM9lKQHkqCUqyN6v+ncKIVEXwUKIRdq35Uqw9nrfxZomnOW/07Sn9cTn6Cwp2SUvy6k71WZpfRXtbLelNYs9DERC3REwoh5VIwBcajKuS0HHnghMO+XXAtZ/VSeInEuLcOZqMoLSeVmnCOtJXZk3Y1n7UPvXdm81UbV02JaKppPfBifVBoYxXssOi02dfaKg7KGBcECKXi83+ROivMftXN3n30adP2+HH3+fbw0+Zmc7BCHGy4tx0fP0n2zto4EIBFK/W+tqEWfSgSksL/RBZxW8/RpAwerkx42aLXJApSQdO7V9KqQayQXtOjW+4G99qCXfpFhLumP/TRJxzgUh0jA0ikkx3FnMhjcjiJaGtQY8lpEuSL49XArtdGtS1N5nq/x+HHgMNHHjPVQiXgqzvcD6BFYfaLdkejOns1yfDqmlRJNijaN2kziTafMdJGGuN7+Egs0+AIuOFOieTif0YzwB6V4aM2jOzxgonJhL7D3mHvdMtWOPM+e/CRsVOE6ptVRkR57qFyKyiXjPTB8ZcxRLDRdGffVglM7paHQuR5m2ZEW6Ii00lQIU2QjM39ChuxYa7MywIvKoKR9MuKKAQ4XfjtkYIX7FO4AM/bAkGDiNksCDjIFWVWSrseSwxFRzIykDfrl9WaIHDQnYN7pOCl82Tn4Xln4e/41Qwz2jbogBKcn7UxvkyZWFhpRS076DYoCBv23IQJYdFSN6IreBEzAQvjwKXZRITqWVuZOyUNNqlSHwnxWWR//dJ2zvWJs/Bqq1i3FeCEXSIGnjRpdSFEq5q4EvBOZY/J5l+eHNZbVTf3StSj5POA82+60I78Up3FXcajNt9fFjUlBFGmiJ32uzY5WYskhw/dBFO6/nMf9Ff3zHC5y87Uke6aiGWeTkbKMtpVUTxwyWjDO6UQEDMVycwA7NCRWN0EcOEMQ9MH6b/H4PqyTI91xzk9QLirBNAeEQxLWTWKZayAcVgvT5ULGY0rIhBsHZV5gRttfEi6grNoWxDzQF8TBGIzgKzOrGa/HPhc1DONxYQJ2+/P8XPk5mcWwkk1jbamPAwx0BmeHToMa8+mmBhXedZdGPODChwrsXppYUeN+6F1SLpKisxFaivMbYSo9Rmki3G4/zlUABb4TG0w4ZL+n27H50hNOkbITV1SfGk6kDDUJ3jvecTjzaHHraSox/OQ6CKaNGJrBvS3s7eSdhQTZEIndalgF+7oYZnRXpITAUEz5C6jY+vexjmWjhWJ2XwgDC8KBYmgB2myXJU2z40oesOcvO+M6dlAS0KZx3Lb+JKyafG9dJO/vJ9Nw3GwFef7+UTBBXJRsYTcfNYcQ6pQlqYcvzdgPvmc6MXEmR1SXUtbu4rxKe3dZNe7Kwooxa46vXoj2ds4xkZm/+O/gcfVvZLG5XjOP/BCgxrVQEkDjGCEorIJxiQ2tOkgJIIUbhoCMBZHyqkXT6mTvKqmqqcv6sWytt5bbesni9mEIC9ilCX3PjCvReqO941+/zvTe3VVu3irL5cL6y9eNMfaBBowBgLlqKvkSe59MLzTvL/PevPih3u/aiev9OUTUwlNszpWhyukrSlNhOMED3UmATrgnFGbB2kZaR5REUqbdq4zorPAXSA45Fww2sgREGldqhZoYUzE2sY36SpV/JjINJSJxsZYTR4r57aQSLp3p7oy8p2zrJvG8bmwJe4yb75cYBmYEuHEbGCWB+uW4OVwLRlhm61wbAQspARaEG2E1uoi3R3V8nObQibqe40U+cXepju3b6Gx//DMNabQYo6009SApdrU/YHAIvBVyovFlr/6fKgG0sSSk8E/b4YCYwIsZICV1AbSC63o/XHJv4koNbK8rjuXrR9+RkNpiIVYqKyxsBoYEcZj0NxTJUiX9MEOoqZ3nPXIjnlQmIGqq7NTcVjbUm5lLatquHcV/lyPZj7oVs8oSjhsTjTmFOuaRyMdq0ndbPaXe+v9FBjz0XZvqw9WRIZRYWg0NWr0fd3VW/6TIGfmdd5A8i1DGKA8xnsgL2ynaYu/2eBqSKr2x3r43fjyDbqfusFfhtgbpRGzrKOSRmLQ8fAPPGRsjHQ8Q6M0kvHkhsu/Buff8i/gMsVZF+tqoFp7mOe4LzuQeROhpRMR7oUNlv5ncXkIB2hJHtl5PAIplt6pTVWiEGsdXsRr6U7DHuTVeYlIQNlyP2Q4M0nNpewUodEYy2Ce/q/zgHDihKZ/bXWn7eiDLsgaYZka2dFXBT0Rn+R644MKiZXSpOtopqK403hBQMUHJ0k8pD38k0NqYibDpADJnYalJicbCgtCgGFBi1NZ/Q8LeBLpJ3sjebcpmSrbQLlhQWbok7NXaWRm9/oiXzYVnVNTYAoWK9gOy4aEkx48OsEm2ATiduAbbNmUu1ocS+KQdUE8Ni1ZaSCHHB20xB+JWso9RWP10J3DuFXnc0q5iHu4WV19P0QEwmGSilDxeDZvKdIWRayaY2S74RcZcgxr4jeip9CaDe45WTROkdJws6vNysrXhnginc5Z8rlyeWhkuEhblLntKpHtRlhvWYGBTyJGVLdWgM2xxkyb3focHTVO8VXWeHJFWp+OGwypp11s/V0hQz9Q39/Fr7P0I0GR/AC28muYvOUaHpi5dTZsDM+Ccrq3l/viPkIEEwvf9fxtdsk9Nnyew4vUhdmQWzvotwm/0k+dk2K5Y/TqA3g8QTprsNk0T7QgzWAaaBxVnkC+SFC+CXJk4R2dIEyInWRjlBKCETQcmlSHxcs6oyI8KLrFYAI1NcAO7Ex/w1lml7d5aJCuBtbyczMKEzzqYZqJfZl/qlEMhxhhy5fNfr3rcTUu2g6KTC2/hvufkCU8y9Sq5yXHc/KBFxrU2AyslrvoLETwRqtdrdnjcw17lxQte0/yhtKLlK/MSYIc0eDWpuu56uRoOwtHRlQqpNxiwXurc0pAs9EJdQukBuqznpbqnp2TDc4oj2YXElYQmD55mcqbL88LYSxXEbtPltqhJn1qJFycw0cNn2Y9jfI1Tcr1GZPyuov/NK57xSBN6wdI3mfYXxiICPEfcpd5srR7cF7JXKj8q2q7YWwfZhfSdyT/bLJm/azZEFgzyMU+5z1Amf91527Wrg4ttreGfaFjm/lACjVL1bjPni37pldB6RvlotrfkoUfJSvUzHnZ4LiSiiggpu2cZzUErM1lfytZ0J2yhnaa4CuQNyxSm/7WgSKeZnkXLkIqtVKqWhWF4/3oomTtjtlA8tDgzk9LZQUiJldRGJsMRh6+6MmobHs6M7/1MsW/AVle6a2+f+804pYku6uYUKooN/2z2AJGnhoeO6wPxdcpytgrFjRrdzyKtExM9S8qPzKRRDQYmUZReVwf1Wy8w74z3D+T7PIQpbXd7T8DGSyurXB3dSA/zTBCi5+7H9Z3WgxVYEvLrMzKqMWhtwxbSDLKGpOOYBBSerwM4ayaOJLAJb3XmIBpl5oBvYu5DqpHeRlNbBrRtq1Mf4HfxZdXPMF3/5lHr+QMe3qvcMbMJjSNnQ/Mif3rsKiSVWn6S/0unrzi6b37b4tSMuzpvaJKa6j1zjOH+hdhXuerxXyXUzzmTyjxGO+bIJwuIgtwmdJXd4UNfDba7z8Mpsb3jlPH7qV5ngcIDTk/2Lt65qiKx/e5A8EqeB4QD9Ih68Le+VFLWUZPspPsZExUWKgFghNgUTk2sJWs9xh1IRAi28Yy8HPOiTYVBhLts6eHk2rqOsS0xGUrbWNeW6YlFyfLgW95UeqJCEPLtnJ6IvZWPIj0XiRKf62zom6axWIvVrH9+XE0Qljn7/zORQQj4k+aLT95YgrEROshQ39rHFYPlreQx6d3pN6y94zCs5QVdFpPv1zvb3a7E75N7uleXQUO5EeRGb91dTvTvxdaZz7vQCwOMQ25/8xKxMs/c1AujAVGcYYzPIlSeotN3caahNYBx1FN6XL/VltmosP42ttMIkdTlGQ+0wfzOwSZQPLvHYhzIeil886sbBZ1/Wm7wQDicNsgHon/etNaym0QeoydYqdQog2UsnPXzxMKqMbjAAztORuQNQ1KDQTgZEeG7Z48gjM49xk29HxBijCLUiaygvq0S30VpoqpKYZKoZUNIb04PSYrRt9mK+rYA57ZQ2cUWuR6uNqNgz3LWQACbXMCGTVzFwj2PmOKMzOil0jVA5dCxcTpT0zqIzLsQ2TIxtPA2oi6PDu9OyrJuBHq1tQDXhtivRJoTh2C4Ms7xZhvc6QBHrwUGOk7nHKBKOtw5PtdRyPcaRElTjicuKvT6m5+d2aS4DBj0CBIcSZTFj3HzrJzregyGDqOUIU969sW707qjPeULAFvfrS1asZRN+CmCakChJq+tZFA5qkIctAKMxUNviVyMacQcOt2EVMshKCM+gzZn9NwRTuhmr0PrCehzabiihypLQGyDCbbgekJ8+wRbxJPpxPhLhCkZsf3ugEuBdJu+2Btbd7BTv99EjRiu1ZTF2rGQBnjUtoDa3bOJMCCgImzD5wflD6fni+2LIM7ThbB5BnO2p3iQ81He/H+vlLSCRLU7JIlCSDUSPOhCU6s35D+wabqpiqLzVrPwt3WTbS2GBipYl1fzhVz3Ata+T0yuQmmoYHrIaamCSxYMd5/TeFbeh+uLNMGT0qrEtQ9peSf1aTTYSxnG3yQ7hIsFf/jb2WKFqhM5NGCrZa/5J5/A+7rC4vD44MP+roEW2d/8ROZ8N1EsicdKkowP/PPqYf43ImLvUS4i7Rde0unExpsnhNKKNaYZYyo3eKwR545rJpsEPKO8BiVgnXvfXIIVDowQ+Sm/2nDPZfP51MKTTrW9slJyacibNGKat4X6ZpxYtikyRtE9iRIZrdWDPcgsjsT5utwP7cJmx0+NZTG4nhmP/AQo2U0BraohEmYRFPV/3GyvzZBkx4W/LuxBZ58KgymaHBsRaY+XwvOP+K4Hz+Nwf/Kc73Cf7XjETqA88C8BvVGq+DzfSRj8Mox2nOAskAcwDX8eaMl8BOXM0Dlj2foJAzG5T3bAbuGX1MjMzJjX6+CZvy3U9LN/nE/BH0s0MC/gQ5g/MYWAzb/CpMpdB9i/zTowwJcQDfvS3950x0WfydgKjPF8X0DTAlBSLqA6m+aWtYTgY9XqTZGaw/D0vG/ekZHXoLQ6nm3xU30ooB/IevKpReFWi2VomJjoPdAdthVSlM+Fzjc5dqMcBkXlpS5iuEgudmMTCaXisUweaa8Ehvrz3V7wRU4y91Qx0ckE4MaduXgbcloeQwOn4oMrjhJmb9V4ZIUuacxIrgv43VvOFyiN4AuBb7zyuTLUSgGB/4Z1F1OX//X+PuZShGO/RXYuc3oQXaQHdys2kFdni5dAkpxr/lJHHsjJ085u6NmuUtEl2bdn0OBuOG4dkq5FPPa2zrpgsO8ncAqfRNwClssUx20RrI9SjxdMsV99mAHujWUseT4Fu0IfUQ04YfITL2zKKCBY8GChDZW2mPfIZGbySl5JHY1sgjaApQz/SpVTCdSh4pMl1zLOruFYzfAVKZGWUDfNJHLJcwbJNZ0MOJYyWORm4ZLuiiwcyFwmd+3KNKcRrvQ38SamVwlWkqxJEvGxk4E1AA6VjEqmLKp5M6KsZycHMEB+i5Ahb/kHlignkGL70Wo8LTCKsw1A6GJNG14GY49OwIDDEyD5hRPKkIPo7kRxDyGoEdfs5IxmScmQXbnjI04HEGdnDENDbA4onwGkprAKNtLY2g89lwKZhs/RRjCkPgV1BgOGRcN38dlMjsZBdNS0bBcdhplBqOIaC+6So99bUueDrMfLUSY2MK2Pu9N5p/KByB+h4nLd8vD7yAmOAI7o3j9NQ5qYoXIqY3ZmC3G2sJmuRjYQKMPCOgRCR/FyIag1I8Emc2SXOMweOPliwyK0Tjsahi+FHzAbOl8/lEoYkblIv/wvi5T0/cdLh0xOnE4ZAWlIe8jl0VCRvh60mjcGZf3HXjFA3DGOBOC6/pI4+gNOnH6cukPg5y3uMrvBUDPw9Vzk4uRbOCsY6PrAyhZbrZiqjXBZPnnQfeNyaaJ51QyrF3dufhqPacfGvGxND1xW1B9+cpi4/LSwuunJYBOgST2WPPXgr9qBBMzf3yr9j+e5ewDuTR+9zn4j4LCPRGLAOSVO/jpfsH4tvg82luuZ4ER/Mh5g/5zsnK/qgNTOKZVT+7nAoKy5J0o7Y/WJW85/nXq+TvHoDP4JzR6Z/PhfC2XLjjol0el//8XNNBlECcIk2/xEQo/dED7dr63NC9o9IOXpf986s8y/oj/hzmxbqHvN61A1Qp+n0GyJ+rzKYG529+iJ+fCsokxsYKbYdjt1mttCx7cpbRu32CO57rrCUIsKRufMEa91cbIzvPeFUR4IFGo2fZmqzo/i6vtYP65EKC0DPXbDJZON3yznRxoExgne5tsZ1kYjOv7A7ZuhHRl2NTvrQ6zmJMkWc1Pndyt+2bsihfPlDqsXWvyoDj8tGb+1K+/Gu5/q0rQ2BALuh0WhX3DL536c6EYThd4nxGt1kVY/e+ZSkc4JzX119VKHlcZy4uas5BVBbb09FInRRYH0moUGxTMO8HIX0R7iOUAh0R4nlNr9hGUCfwMB0dgAGosnTb7QkippE0NQxUF8SMalKQ1fWBNzbF7Z6Dx46k0qRZ04p3uZLqZixAJhpIfjcRCAQRXN67hxz+L2tWrTIFnq8/G+7OBn8FzIhStyeQ6krXb0u60B4N0tteS2mOZlfLw/699aXrb8tps/Gc486GYwYDSLGNFI78SdclEKIJblb6V1H9QF4asMh0+PwnV9xcCfwDPmQnIaghGl1rVKu7vvmwNsvnDLX+FZor0Qgf4z6c+6Ilted7b/QPZYICyMPwLkGvRwmcjmbYa+OaK/+1sPQKG8K05vEFmP5YTcH95jn+Dqd4zYS1qW9IyTP6yCSpBPcYLJkmvJhZWDeXjIHCx0X1aByaXu4heci+j9JKlMk1+j2f0Z5ezRVZoRk652+9UEnaKRDJ4F/jR0NbeIYAK+q1AaIkXmtMjJFq1Ce1hk2yyP/MAUWgn1Nvw704PSEP5fb+W2spLL123vfri1Yt841cvoXRp5Shm9Jzx+Z3fpYeRTiZJWXrpuJah8lIyhvFvFWJhP4QD27RRid8FVthpv202F9bPrBewefhGGqPJ4jGCyeqllfP72wJB98LHJ71HQsgkc1l66VXLUHkpGWvWtwrj4H2LiDtih9qEC7yrQKmzjhXWMUcuYPPEHRCPL1HmAhZbl1ZO1ctOTm8fBwam90gImWQuSy+9ahkqHzrDUyCNPonESt/L9/Bq7rl3gaLWB1YlHR+xFfDFRdxZ/7U+TVMgXlxLn2F8utBbEesddajK4KZwHVsavFwDa/PaKR7fAekV8UYG714HgAFElfFiBebrDk/ufo5dna7x/s3huRl+w+gjeGcUPccbZeYEzPue+QtgPk2mvw+KM7NhjgHFTDjh8TnyAimuVdFKAh3ZyHUE8q34TnIIST69mC1Y7IEPq1BrJBfKe+hw9Dil4OQb5u3c0adBi0w7EzoMGvqypYj5BNm+pKhZaUd/L6d5exhv7LvYqi+uNu7hVtuglfl1YhH9phXmI7EitPgT2VfxylIKgtpAYyQEUa6ckHYyRlERA0R/QdiS9kwYRXPK2GtZbGp2tZENdC4MIvD/uBDk9/h3A5QfsUmOmjy1qmpepFCuoriIFfPiFwIBh3q/usEFuakg419gtjO/YJO9OSOFcR598No0z8XVA+ndGcrxfUe6Jq/y1+ttPUSVGkZKsb1tUR9icGgfLC5jbN2red2/N5Kd+b6OfDbnpDC9Q/+zhTFCq6ytrK3kqjF+uGNWCCc/MeMiL+mjkbYloYZjrDlqZINFVBifYH9F+n4Sshg9Y08HbBSGZ4F/wXGHGVQwUqZiFO6aPDYXJ1Dm7fYII+UmCwTWvAfN5nu9NjWGMP+b2n/ndri5a9xCin5TcPymPfLEOFW0YzASKD/wd1+j8rlcPioYfQliBG/Qwvy210Rkuf9164nO6rp6/1tfnnMFY/M9f/Kty2la01PB2Bbev5S+uKVKLsHfv3rs7KHj+zd+/m6uCTahf19FUHXyMSI7B6UXDz5Z1/Ev+BbDV3rP/qOsjjm5R6L3/sO2ze0seHWMbSP4yOz2N9Ztm6AKEZsPdfl86FHfWIRyADdEsBC25ItJmn2BciY/CAEtsALrj/Hv3zR78trL//3pKZ975rUD+th+xcd3iy9u0kUdEV4IHrv5lLdunjrcj+0sx3eLPnYG0J5YjhlJ3iyBt7bf4NvwZnqXp4/tIcd328a73+zoDT9+pTXsaLV/vvbi0/y139wRVGYcmv2WA/H8qPbmXRqlXF0NeCZTu7zfmiScM2wd9vAT6VNlZ/dLjsm52IOL4rHjRtkyfZ3+6pNvNVtavxxsjnrj2Z21NWnz4B0PxLJ/ND7Qee1RYb8mvVHIu+xBefmOKMSya/o6/Zknnv+o2uiUg3Wns/e3O2trUjE3crmcFiX+kGh6m+8ifjz1dSYjMS9Mcvrsh+g/3njesfxt/8bU+9rvwSRNz36I/vmZFz7tu9v+Za/TrP0STIo4mIpUYkICk4RSmTzLbZJQKu5poekvmGSBYY1pNdgA6kT2SQCJiX8ieuo/Pf38Jz1n3iectXaj+gugGMMY5iG3anZ2d7bVn/o9sMPjdAD5tbVQOTLog6u565C8lLqH9cBLJ5jcmNQS3yoZDuZ69/hpR1QaAi6P/aVlAsKDpk6+4oPub3dLh4mbTqeVCNthftjyq3d1g6f10Mw+ZS9elOUsj03ALZArRmUmA/X1lhmeOQTXyba/zbGRxugqD6pQZTHgBrnYBJvgJsWKdPqcCqiXmk6dRWaZjA/bT3zADQbuVJV+gX2GfVbJGl36iFLcNuSDZYMKUWl9SIi4GBEHoNZowYWxCWEIbWuNYEBaZ42D9ulbEwsBGMVejb1CBcumIgTozNC54GCWC0QeA6XZ9JKvp4yKwXIckyPEdfAejECN4KQYey48B1+QcJYk7SQqUy8GP8LGdSpSXeFRWnLaOWhj8A55Sqa03xHmYxamhFzGzEXXPSU7ARPWkwzwE5vWW1qOALioGgeM9gEI51AnZEbaI3M6u4iQTxmsNzEWeFug3tuMtKnSivXivPHutYjHui7D/eN1IqPObpadG2BjOrORa8pfjh9Jjq+SuW5iAjo79xR4EJqGFDUXBGOKcT2wBl5kc2JvJFPAKaraAmedz7Sr1jH+gRtSz4Id4E4Xw7fztMCbEvfOpoVJM2t4LyFqZ99kynh7zI5zj7e5ZmoBfc1es9fxq9uIMEVqGaawn6NQREbqHosLPGMv4xDSBySD9pdhOOaLW4XIPRoImuJySmSAigahbrHTQsWVnBOfRsEpRquD+4yUisg1hwOhd8rSnDPC6YmzWGaZqpoIRaG+7xrDRgQamNAFkYdsCaUOy+h9WkQfWSDpw6953z5z96c9cOL+AuHz7PBSxBGb3c3QsN80PteGl0SnQtNoJN9JZOPnFhqvkwWO692J5vCFO3/vXBv8ToP5arecy4jpDTv4RBh3XcNORKEdtloI+Mc41dTUYRG+sFh8Yg8Jr3/+XRuv37z4+3/q/goR0IG7Fe4Y9G6dglbjOCB0K2IPhsaqrm7Uxlr0/M26LEm9i8gUf6Tzjx3Yw5/U+tF8Z36gGTxl0tqDORiTKZUPq2WnTlopiRAluLgYKQWlr0npCpVcakQOChyBEKGYOmW9uDFPP+QIYfqtO8ix+LtI3oZqLV79AVJrmlqc9APsQ8YHUMi2fUZnwsvCrIV3GRgfWIxEaS/Z4CxRr8gjwosGl/FuTceCBY/xYguomtX3y0fISeAGrno/9ebAz0aYFgZtzNnqklY6XRKWCCYYjEhfvjpAnfNKCR3gqnw8twNN5IaV6GilM6Q3747MCbpuMa07T/nLFglRPR9aQfrOFwOnRYR6GDf8Mz5DI1K1EB6nKiUvNu/F3jt3WDDDHVcHYQ1iC5g3RoFwvxVDTv4YKVpzqzeuLlQTrJRFDWZEJYgnwLlGrPrBUR9O1sPek1nXBazXHy59Bl8gprPOjbxzYKke6WLiZ80bV4xD6XHh5OXG2jfKnSGeWa1031Sl/PnTLfbxbSSAC66keZyvSR3KuFdaIOl8MgN2RrtlLf/T3uGyB7LAWlnYQwyrzJBIILbxu0PjRUMfX2rVvhHTC8NnhF2c/9g5ojkSDFPU2jnX88Rz6ARa6CaWEtjCkO0ogY6Vemnj/q7wgGbrLmIRJAoMOnLS5gEYgy0mXQLMTUhPwzHQTrJ9uy+OqhMw9XkKCKs/P+ku70KSBRu/8nWue4kqw1kt17I1UIEsBO7TriJedJLzLA9XHWJ450HAPvzjOe+1uItRp3V6ZhEf2WxgcDgr2UbWCpwzrYrBJaRSSupmdyUBOu3W1LMjRREJsNQ4h8kTnQcpBcNA+1Vex/sEmAkpQhplvTsPiqovigOCSD4aoqiCH+vw87EJDDS4XDPaG12w33VU6pS17mcLh3nIndtR40pDUWEwNISVSpAiYktxVs4eeV5WIC9Aiev0szfWK5m9OQdERCxgf68IxQl+qBPWG+I5fZMh9Sgmj5dB3a/Z+ei0w1zxEzCvbNr3p3bBs9eHc20ktglnjcViypBEnslzFMPlqEL9ZJ15mbcucXkAE6hTe3H8SRucPK2b//jyuX5UWjiX/wlhmDOWDoa77eGBzAGqFeMJ2H2lsVAYjZZt9TPG3koxmcAkPRAaZpE6/td8u/knJY5f8/qfzh4cPJYZCWw/J+S9HLsdnF1HKDJNpoO/92DSd011w3bZGZJAZKSzl9GQwYVsYNp6iIQRpMcnb1EwiIWIBbkQCHW7MDr/tJA9d80VSZh1DiEFq6AoNvYpWe8HZ0MRUhJgVnRFQ7Lq8Z7uZTIRXLGM5Pu7NqkVI6hO9uhaPzv04Y1FKD0XwAMX8rUclJDO+AdLMHZmyZX55SerDD3sTlYzH3aDe85bD3g3xap0jI2zceHs2IBku36y927EOrGEKiXD9NJPxriw4gyjlyBo2PiSupDAN7HjUkDEPJLvMD8OpW/MyTXEYT49VFZheGmll1XZH4W2E+dv8kCRPpr3uEbJF8W1Y9Tu2zo+JaDKKFGMCbA9u9U7nbdqTyX7EkPwiloJHtbdKuV7pWkvzCZ7VZX1vH2DDhSnV32kKMaY5/X5Z1Ing4NZcQZXkfCt9slMg6P92seb0qIYwxD7rDblwmMKpDeGr70OX5dDVADeUtrAQ6WVCUAQ7FlbyANuABFoG6UDDrIGU9zJjuicFKrmAmud88AEn0pxY3sO0VdcMPhVUBEiQCg546oAkaLGeQL2R165FAPEBFqGAJuglRTYQzxmFb1tFAODhVRhQnaRfEf4dJ4n0UdNgBHUi8PVAcYoPeN4GmEuSmUyYKlV7fI09e6DhT2B+m2rfo12Ana/6Gb3YbAXzf+u3/qY6k+V+wJATEqGQD7N40DnlJtqHST8eQKbim//fnUneC8XWgCthZwLDCwh10InEFptdEhBf/zp705rN33EHrMnSHIQSyHVhZdOE8lzPNwZUjr+DFfJYgyMuOpSqALaJkQ2w/A8RnYIQnUtnVrqw3gR1LIvCjytFUUYTaeYm4Hu2GeMiVH98lOG15EoIRnG4rO3WDzmlNjf4LxhnLwvGHH+HBWp5rumXxZn7tkYcZIVtuXZpokfhxzcMeRp4zarY1BhU4SFNQflYnbNtpnrhDbtEp9V3z3cq16UkaqItMBF0hsM+9ONKS7/0xHKqkTsbghRETK8k7+riuQ6aJxm4r6XLttn9tVjJCK/aCsNPJN4FdKFB4ZiuPGHXONAh80QlmHweLk9+P9B3yBM5TEXM59Ee/jiv0+vaLppII4iCOJ3Jtb2pqbd+MuXejIbIv1e7kwEKRqwmDI2EoENwmO/1lCPXIqvQ+xwfeRr8X1HOufVu3KWo5H6gb4AFad8RoSx2paE88bpWBBCsc284uxbV0NS24rd3WxTIFLIszPxhAOti8Z5r7AvTBQMkHqLp+t3HJt768/Ld0h/81WLgFme6HVFACkcEq/1JhSdlCsbyum4jefkym5xJ5+8MJuVb7yL93VvXR7wwzMZI6Ajiwc3bkpgX9iEGRvWVRRtP/gVD5n7LL5DKPxXvFL67sG+oyuggEPslHrCjTrON2GkpuMmHK6c7BZ3zgNv5Gyh4e76sK0NxYRBXw1X79xctXG9chHTB8cts3KXUXKHkdkPCe3gUNgfMNbp97ZXuFRrdUwZDAbU2rYUUnLsAg0PnzAvVkKX1haZktQlJJzEAkK5kZFFbm3P6BmTEyeIcMQyj+PeVFtnHb+cREY35ejh0S5u1CkKvp+eqbSY5MACKy/DfFri3V6bxRFORCjCbLfqiZBFKJZEWAUmrBvapCmbFts9iXLWdsaGLNxzu6roKvJN/jKRLhPVoDV1aboCNpJC4Klikr2YdfylaS6GMhw8w7BRmtXqyaKu4PTeEhgkIegzemqLfk8g0wvl427Ca4mnPKh0zNHJhJzTuInPODNuPbr1SMpZO2njsyKF/6s+VVpOWhR5JYJFbplNNodmIDaXyXKQe78p3f0y5sCLh40p20AZHEb1sLZPoZ2Z/LFld/nh0kpjcw38G9mseRFLHlSIBD5hJDEsr4AbK5stoIAUrXkTS7MKL5VPmC4flV+HtzdNYQEV5J0sOwvXtlTlLAY4bDdLLQH1kWePQHYiX6meUiXOnbq+cWsE6Bzm1bsr3QLndXh7vpc8K8+ugSZT1i/C66vD0Yvy6DYY4xhWcBA+08I7Mn7OLzsxRws8vg3Gl1+5xrvXALjg7qew+AKcgeWgvrsN6gruGp/fzlbrY7py00rehcOzu/DZYPHc4x4vAlL4t2fdcGaXvp5tb/VKuHv2Svg6fPH6XHm0AsLCv7rw8XTe4+7Onj7oVDKqGA7JLd7ojzoLU3/PAkamWvYGbAuLaL4hbkF6HrchwpigTYDI4w8YztG6T7PyW2Gb8R06KektndYTDe8gsMezQn9xsxDbeXkOTsLSj/MaaKx2r8fV8nZ1aMtEi8cUHQyLPv1AUSBEB+8z8tJZC+d0M1M3sy3vl8a3OVi6Kd16u7R7/Y4YqZzJmTxNFdTItYR1o9XlPH8pl7NH8meei6AYu3pv/89n4ufk13yMQHPC4iP935wXfG9E8QxQMMXxoNHQWl7Xh+m1en7eVUABrarHe4Vf0n9eePpMNLKqX9m//Ogz7l8X3tVhPExJhF/9s5ExYLViAYRwcgyIfUbLTgvtB+IcnHt48Aa4Rz48O3UaaD5RLYBQePQeCI19LhFQ+uCCT09dGnxZMeyZwi6eAvs1ODc+uLhxCSz+BVycGpzc/S9MNMIiRiQCbbFUfblMTSoomkkpaQ33RrMJnCyqlPICi3Mm+JgjawVBuB3BbHzvgzcIlWdj0DjYcVXQ8iibcGjAMtXf/KWhUGVUdpm2pczl38g+SbU+aK29p//+w/EwDnKQaC7ME/3eXZpo6boh9IR/+2AhBKexOJdDo3J1rwy6dE/yy26Byz3g89bN9nBdHgH2jH4f+oqaOgd8++Eb9+Q0P3xIdp6TyLwOoHbcNYqrZI52N9/9ZDh46l9pz0qKO6uEsshWfavf1xqHB3sHh11Y+3/NR2ZFphQnRUl4zL9djzHYFXRUoUhw1quXsLvMfg8ir78cxZx+/SHbmZj3LgadCRepzJ+f5o/meZzvn9isIlR9x9jVr0jioe3J6bPmCFiuO/qEvYNcvhb3hCMcYAyFeDff/dDjA449PPpgFsFk6kei1vNSXDYntpBNHZnRiTftdS/Cl1FTn/XP8rda+/v5lo2jiAbqeNRQ+qal2E1ynVkMy2F2DNiL7slCPg0i7LyYzK8gOpLS0BoNLU+J9ZS6Z423nNvSZFcQfcBxlrsvuY0axiZeXXvMzaIZozG5ya7g7Kei6OgL8biTjPP9ZL1OmMulYNec0susiM6EgcEGHMObUN/vs/SdpgQmM2R7ScGD87RIfW+OVckM3FtWNedYCVQ7iJtXUewgpkxy2CByvAlKxJ1xlY7Goll1JSmga7Yg7kkYG5S7HbES5U5RsMPfO1uXeO4nCOfj+AvOLMbKrG2FIeuMgb1mXxUQ9s6n1mnO6EQrviuZh0Zh5yrtfYYBUYKh7rrzqAQYRGRuKAgDI0mBoy41vCTddQAXDmFmixdQkoYzaCiHEQKWczKxltZZxiez9sTEHMcEhEMjCttrly4AtphgmeOEimjbK+uEP7ceiB7Vqhk9B9VJzuhA9YVE5BRXNhz4ivKlDBXDzedOlaslxDNhVyAJ8gA3n+huPNvVqE+bDzqHDiR+8DEjBeT9nJKMDYm5GEL8xLTgx8w6uFkumH7edmZvtYBcRw0pDG0HhVz2khby6Bjiy2j3IUYEWhbqXRu9ntZs/uErrYuDbvygPZMqIYDQ+zSOk1T65Q+axPFvNu1sN63zEHrfVVX1TPrDD1bX5Tu9BZUIINzQvbrSHfxa8Us+SXdm3yTm8L//1yohIfWogtXY5BQrivu/mNUFG/IkI42sRdqJxqVGCa21KNC5fagA4ROZVAaamzDvRGVCo5S1VhXYmUbvaaEHExEcPNFwB9IKUSvo+H9ntUo9DDkhQ7AIO1b2iBAft8MxMw/KRakpimG7rs1c+KuJzL2dFrGLMWESjSbcPqzaSkfIdDzP+SticVwzZbCUkUqAPowIYXyfnEV5pghadgtr0G/t2+r9ikbIJ5GLrGpN6fKADG66zISMZocHKjItxzIxZsaGfpNQVMN2/KzSc9U3leZqdLGLMcuYSnMlhYopNIRL6sem6QVR4OE82HVdyzQsN4yz+UovNo1qq7jChpCVqS3XSpqXL4VtZvdAbbRD68/JVrLvP7quLd2uILZzAf5v8nsX4J/s6BbFmJyWWI/R0wq8pZIp2X1bmOW95cJh3FuhjOSTmvIedt+mNntQi69ehrUM6Eq4UjvUeo8Jl5ZzEYZBlNIjn69cGM7aa5M9oEs9hrUcOrV0lfU4chBUKCkSKcckEqdnegr270UTiz0M7m/hs2iUfVyF33HPITNCTnRaJjObiX7QFzNfyYzu+snM/zKxXU9kfp7p3vV0Zj5j3nVnppZxseByk2k+IleA+DCGclRNMin9kav0JTUbqMntgkzOSTplxAEEzdLnlIBMw+kJ0CkfE6buWwwsR8ip3/cUOLdi6UKpWwvYoUCBiMamHTGiPsJ76RyUenIfDdtIjETigmRFcYNDy6e+kxo4A+eeIf7RmxQsDOLrXy1EWPxvdAP1ylpCfQQJyMTw7AZH1o/mRrMGc6u+bWp6FBcyTwCD51xA0yXkITUIDoTy9T98+eeS2qsu/RCTe692duqurluBZLc9IEoLY2TvD20GlvasHtJ8278jSx3hlfnEAtw/VfzhThn78Mq8dN5XDBvyCwcQ2vm/rxSL5ZL0phpHwy1DmjaKanrmS6QxYpCkYZg5MYdVY8Mjv/CZqCEpJ8zFvUHYsYON8ZNjhO4eRUgP/8TdW/X0UDZOTizYfjkaorrg+CzxLofFvBva0ZF4radOb2RcbUVl+bPBOdqMkYfKpb/dfZhbNifLBZ+taMqwY/Aj8eFSH3XyUO3IDDbG34Kd4nGzVy6XFxOCf5NdoYGdcbfIOsorelTt7ZM8iRXmrDescyx8hJSHBu7UlmteqXPBwAaQYUpeAgMqyOSNSdEru/N8woL0oFkHNDbEj/KDVSYQ8ztH1DiXe3BzpXR0P02fuVVOJ0ZUybO9JIhsGYyltqsh3aa50BeIuueCrAING8dhO40fr2Nq6vsUo3TGlYJi0cxFH/mnVnOFvNEdccZ5YxXNWRdm9Xg2e2K3Y07yqhW7FydeplADa9R2cY6fyovAVCHLFhOyBgysxtvVI264zcb3YgvMaltKthw4tlMuKEUU/VAKSs6J0FfP14IO7taw8SHgXYTdm2x1cO+UPFsDPAPuvgPvRLGPhNXn7m3k0TrY4+DxG7BebjhCFHcE3CB+zt1Jqm2fXSKnR8c9aU5ZPLhOSPWj4oWhm3ImeaOfFb8AkciFMSaihbdjPOGJs8eY/Yslj9RmvOdpH20vlRTHOBip0hX7vqv7toVUN7aXzYIGzjdErOQw69J4eZspDHE8a/zftq5QNBZnqPfhUmaTTb+Ruuf2JPgUx0VsWNr/DjcTN4sC04prg0iUKsmDaCNqJeb685etYDo2Z43/04MbI0YgOKMOb5hRawPnloizio7OCYla1kLbEEp5Ld2fGmSY3oRT9jVVQx0fAh13jUcmVhXYuSFHqHU2IZhPRX6Wg+AtO1T2AasZ6XRWwdgOHkc42K1X601tmV6EMNlJ+8AnF3vzNBZYYLIR4pJOG+w61ENEr6ssApVKIwdP9nhsfQuSV2nc7WO8IqRTYGIzKh4GRexvPgXbtGGQVghfZNobPtk82paDMHlPCtOeUGzaEHcM0c8Gb14Fsx7MWOzgnUrCl/+tr2JaDypvyAUCTyUYu3JtoLC4Y5yCwcP5XVk9ibdgfjV/0yR/NG+Go++sPg/i+/3k1kH0BXvOnsfpQSh08WgwJQC5GKzmA3F8kMVYhhmgaa96CtwsFjbdPyF9Cl6NyqFtbiDEWWuyn/eUVFYqKhXpszO+4uiUBdbHOkLDe2/JMeYWy3Bkgiq0xDXf3+I9OTNiWe5kJPMg4U5RuEBneN2agBd1GhQg4PGug8CZ1rGbndtlQVjwNaKsxEZ3Qp/f6qFFWBokrSLpSWKDxRatUVTFhq2KQvf83EtE2C7juBl1t0TnJs1YQzF2IotYFHg4ryJgc0R5pwGYz4ZZCzKZaA99QCezLJ7PxgKI7rmLzRkb2o4pL5FXLNxpTJhNCGSel66A391HE9SZ2x7qOtPRQ+MFJzRoGLbb6qWjbJSNJBwb2XwWiJTAKEEJsyWG/mYe7QTAZEnPTvooQ4ydZaOWU1cJQdmIET+7t9qD+ZQ/rcLtlTqdZt1IK7M//f2NwwFxBMr3HBXb5tuIfXpf+z9oicBudzcUT2EaO7sZFYI5F5Nog2aLdxy2YN9RserQOEDXcQo8DLvZr3/19DtNkwEcR3A3tNU7hvDIeP4X8BHxRk+8inJDtr6c66I2EloZTStn+ep9X4BApRyyvj947svvSIyrnaqzqX3AG+j+o9jb07Iz93FgvSAKRiIl5mZ+NDfQwYyxVl2PIr1n9/voXZ9EofAug1f+Kw+jATeed374z1f5YQMgoAK6Spfu0xKUQ5u73qRcurnr61RIV8a3QGu7vkjh56yFie5RdIdiOV6sgFKVb0IAV8da5d8dg+MT/1AF/grktMIG2EAahJBjPPdN0zlHiLVzXncPSWnvjo2gg5VCaUrgMpBM+Q8RFbWEreykNIUCN5wrk4i0nNIrav3b3R4qGmntfY8OtYnABqaZJNNUs6KGxvLYw45n4Tr1N32Z9ftgmxs2YmJuReYVm2qvdTU0zYvUuPfGTBAVhk8TQRgHAzEjDOdzHrlRvaX5JFAhnQEJ8fvOCu8aB0Jvw6bciKY190QnVT3xPFEtE/MjT/GdLfx/CqcyJjVtOByeDwxbi4Xyyl2HdiDGTHIzxWG28Muxk8b67UUY7veBvV3YTqf8FZCIVSEnuZniJlv4c8rJCuW7m0Hu94GrDfIbcCD9D4jYRk5yM4mcPmYP2ANdqm3+0xvZCHPKtCt61hmTcpsTlIJztoAcGQOMqWtjODSq1Xp9cA+uKKgzXNbaaALtYKkyydQ5RJRBSNrF9GsCjCijmAomdLtdOOjXZzdH6OiQpRkYl3Vu0kTUMdtvldIMNQOOUTi2TLnlmhamiUlSFPEXXRA0uO4rAgXurSo7s1vBaFz26mSAanJkK5FbiKnXR3AJEAUWLkS3ZYwLB/2Vys2J/kXnNA4Hy4YjTuuITSZQjVIFW7YLxygxfE/ux16AOSjL6jr9JupyDW7J1bmdoVJtzDzcK4wfLFp5OqLVADlHYJdy6vUB+giINeh0e8a8YDCY+Z/Kbf8uHPK50Z1zgwc8rMqEj6n4NiJU6ISxD3ywLrz9X4dLZGzG0c8y8PDftZdpESjFSIM6AtWa0ljCpGEMOac5aTJpYg7LxgYLkzCRIU2W9XGnn2InKb36wmBpMRFFE+28DBLkpTle7BACLRqTKe6MeNtFVrEZVaYcXHL54MZgKuVt+7yKcjPpsNp9cdYHExv7bL9VwglIYkafzCtV0Sk2xSanPVo4aDJprpuv6wIq7cfZipJ2Xtgu/dzqxqSSn60J0oadhxCwMDAxu3y4jRkNy2kTRdbZcWbwMbQZImCCq8otgkm3M2Q9eCcDWhHKbGDnXFzrjuQu5hYIHW5HwhEoZ7Nj8vQ67EezwQS1NbDBVWmX4b62c4PFUZyOZHXi8lPKGy3E1O19bkNGvIoMfT8DAaTodx1bdp82yfAbieN/Ab7aVjYdAF8fUPBX7+5kEw/PBCoMIMDLl/bapRqD/3fRv+4iXt9/VAi6LpEzL7LfsgbIg/i7hHcS5aU1u6kbEl+bwJFPeFcsWS4YbtCXgwswMrKSv8TJoUH8Me7TId6T4w3SeH5EZxJnjPrsrPois0wcRqNyS4KpXdiyIwHYPltekCOoERzJFzRIbO7yaKleC2xfQfR4KGH61tKI9Rc5Bk0jZJ9Wd6b+m09RN11iMx7Mw8e5RcdVMXgERy7EgqAm1M8Uzpynbgx/cM38KsWsMEeRWUgYLci4nXxbNW2WUmYtRWQgaXHRJW/RBpt/MCqWb75BlTto7wSrkQ1yWWA6xHQV7Qw0tZ6Dnk8QOAxtsqyXxkDB/CX3JGD1aIlgYcegqzWwi4q6itXNSNKID61j5zVI8O5LYfkOHhVRDxV9smYOQRKxzGsWBO2Umim7Qv9hwkzmb+to55ROpc5iWvYvA5VLi9Jgyk78ORuof7UCxyEewKJJLouKPuSzDwNwBKkZ3nGaJTyHuNdDv5q68NmzGkffcaz5B4Q5k6GjaZtGAbTAjSiUKDdRIHtz1m1S0Qsc/pJJyQewPrPhOBDwh1RZhhqrhen45skmaIRDDQ/Av2lVFUSfogpGEMcquHFxVwjmjK+wKHRV2Ex21AkEWeE6CGDInAoC2rgKBqS4ATzMJCJ6janCAhH/Chu4tBUOUCTgGvJseEAC22vTolorl65owuhmDVJsZmasY85A2sporciUSPdGG4Tm02pZd4V5NZNRv8ngzizTGA0FGZnOb9dJx48tZCGtVd1EgtUVAZRYJ5mowjo2adZskwagi+00i5Pp0BxYpipqCuY3CG0LjTKx7olVd4ioG9kmGqZeCh1f/r56gNcHRplGKdN2KDM9FcJYBOzltdHHO1tb+hgF3LCkI9rR8FBr4Z9ZPkVBjzGmrqWXoRlY/DnTpnEWKd2O0t3Goq2xCatr2xt8gLVvtxoiKV0QDaxNeca30RFYZ61aUkRXIzRrt9CCDi5Met3e7xn8vX8AC3oUGDyQbKcUu+zmSSMV29+0pjugUpX+BhjIW7Uater4BH8J6398BpnfPDbTaXsUKzHIa3qBL269sd0Ts5wTIlTYlPlXxFk0CNY4f3eLTYawa+PwSKz25ro1nevFo//0ecv0mJGxsJwv4xD7RbH/n5spZJbZ5ug1bJ3dRvvBGBFRK4wXN88C6TYoVaZchSdspnhDPjw4iAtOhPpR+QXhJDcn3A0eIiGTIzZKJJEyF0TD4JsqycRkxD0XXXLZFecVuOEmFpI7niybbbPVdhmmeWCT6zjhAD87GD4IvPVOOYYrtX1OSWI1IRyRAAmRKJyCCuegQxySkIYs5KEIl1DaabA1nnnluRcaOb+weP2Fuf9pLpTpF6pQBxOu4Rbu4RGeoXFNj//0xiu0MeHc8daaL8D32zDdrQ0SicIqkUuk2Q2i91qhwiFPliEnk6stq1UiS5EBJHxiUib2s2ayUh8xFC73BmBrGF8FXzETH/uZaCI3K5MqxWmJXKLJRatekVTnEX4dTZXZ3wlUZfoLaopOnOJ+y9nVqe6uSoNm+bBkcq1qgDW7q6G5dhPE3PtOKnLFzIqsTJ31ocH36aob39aa/im7ZmhiwgfxTmae9fm8g4w39IC0dnQ2zMTPIQp28EOFgvUdrQ2t4dWYhLRyrWyM/LNRffeOjN0BAAAA) format("woff2");font-weight:200 800;font-style:normal}@font-face{font-family:"Atkinson Hyperlegible Mono";src:url(data:font/woff2;base64,d09GMgABAAAAAEVYABUAAAAAg6QAAEThAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGoFBG40CHIUmP0hWQVIvP01WQVI7BmA/U1RBVIEcJyoAhQIvXBEICvVw3FULg1wAMNgiATYCJAOHBAQgBYckB4ZADAcbvnMVY5vFk+6EUitS8+9BGI2MYOMAws+ERVG6SYHk/2/JjSGifYBa9TVShKs9nD1TUMOiDUd3Jh1cPHN3YWy0EzLXwtZX7sNQOCIsBzKQKAbSKgcXdJUXwbx2G31QkVDazP2Zd/9U5ILARUZGRv7mvIR4CscFp2Iqpi2tVQsN4x9GSDLbWsRv+rN3D3vBQ5wkRMyJS1vqptRpPTX3fFOGaNOa9KiSNG3ixDBZYLEFdgmw2CJWIHgEYk28SeupSyqWnlQtFdeT1v+up38qA7hpJUjQuq37tdu1E5eemTJOzP9sptQECF7EC0E0Ceoh/vt7tufMRBJwYB+baYIPllYSyDNPJLBIC+hCfQz+bvfuGTK6FCWlS5RQVH94nLN/aawRe/Fa0pS0qUKNogU2jtGZfhNpeOybyI5TESZ2ivb6nPq7kp3M7FolCgL0gWOVZLdV+v3hCqirdC8iJqAAgMlytRI8wFTSFZOXnTS9F7H/Q53VjMgUJ/EeET0QVf9Vs7bzTQPAFbaAGLisQwaSdDS3zFYSUUKlETKsVahkcZ+I3v///zbNb+815EjBUfCFX/iGFTg9QVNz0T2NJWsEe/Ytz/KsQ7P8JNuJtIx2gNDehKtrSHa0G5gQe4N8eviMJVUERfPrcs+v/i/q4v+fTbOd7+95OtkX2DDqQtDLQb2UeemK2T8r7c6ON7uiO8mrPUAZSPYBG1/kDUIF3BFUcgCoAq6waLCp0lXpq1TYhYdiv1b/C3s+3XRLP8Fjdg+dSod2UiOJjMl+LzWTgNY+YxEhBWT37v7uGDb1wKf90zlGkV7ISTBBRMSEZW6/+5qCwKFXRcqUj8CgAEHFwRqEr7FIhbFiPWK9DNvvWedwXHQldsPtJ3bXEwQCA+ALUIKBY6tRzQqlIEhw1s1cXhrfQgDSuKVEkA2P9OUvr6XSxLggkcp+J8GnQ63RvRqmFU85mb6gUKo1mjMgEGBmBgIgIpAZy/sqq4O6x/eAXlBDAAC7xgAQmGc8GB7d90Q7D4q69WiGxqRKtQgiKCI1voMhyZooITLXC6dLotMqgVVLlFQSZ5zS6xVABOC3AE5y3vh6zxxOfYqhpy/RgXKCHCS5fouySjVRYuTh8KmF//d9yFp+fePbuVWbtZePWutqFp1XxuoHLxCdXBY6T8n/7c8ud2DH+7XOGqvQRDEpv8Pd1TWdo5/B6DHxSR3U5iYbrrXaxte/Bi0X2N/+6mfte7nSSa+63XUMWuIUh5g0rFuTKBN5WL4mnVXSv/x8fXh3ozxHi0QSr0onOc8aFjGDETSTxGgLbkwcixJNKF4tmflpcDPaSQea6pt//SadvlGoE5IO/ydg8t1FVp/km1nvebaoq0JUyPcZyyB0Cg3tEpCquEH8+KnalsjjI60L56X4C6m+bRNOniU/YoUkI4aAJkx+mgqdWNliKtDFvuW+Doc+fhgHV3KeLShyV85snVQHVmzG6kvsMfawzrMhiybTUOcgUrCzdOjcn9dCM7Wq0azh1XXDjfg+BrWYgBx0H5ukLcneSkdaE+mzUMO/3SAJ3C2utbZUoISAG0GUWKN91PpxXUODEzxiPklSBWoEGwEFhpdxUNBjKAPbFNV+MTUyaAaHhbDoJIku+Z6cGOMC1fSchf8oGIbeC6o9bfzKTXtaecsD+uq5y9tsERq4HERm19lGSWNGGyc4J8FsgpcgS+9U7WcatEtNwdCEPyr9UBV6QMbFfxLW8py9/oKABAmS0B1K0ASNw8SQueWsPsATsejS+LA3xBAlt7WoV2mC/fxcQPITVCiOra4ywZZIR9jjZRVRJ+1LVCP3ixhgEgYViXR0TKSCF2U+XuDpGM/lRp7E/XkJ9+WlXMUbg2fIID33IFCFYZg/tqu7HhtkIrKXAPoA2gCqALYgNadzQ0WyYscsyn15pwrCmPhE0e+j0Q5Iv7chyDT5xiW6mZ3Z1gdEDHF4EOJtWjYmSwSPmaksGx7IDHTzBZZz3eTuF6epR7TjSmP3OeRwhW2enN44h7X7v+pESztQ/QckWwHpva26GUAC4iowNMEDAcpQCkqipOV8KlrDHCzYGZx+GsBZB2zWjYVxENsK4Ricic693Cccs73EoIYUHxTRcx81imTwmRfI3GAwDntqRkoIYuhPjzeMLCD4tUOy56Ds4moTgP8ExdHOCFKLgTokTHUapJE3EgxAsXcLdFNATrbncxJiVRGc4O+ddGJPCTjs9PTKn06Q4JxLrrjpNtt7EuKBoOeDQg7GwjTQQzPejFSgRVH7U6E2FzaLzgu3qIhRNYsWTFw/5VhLEKurgBuZwa40rbLjrQ3K7AZLsvbjyteAfv2fw4HPDuJEfJzzaMyleqkCG5KLJNuwaVoClPIUapXosHUMUGQir3MWkBX9Ye9fCE4yHXX84f8A+Ft++gA4AkANrghgwkHxRZ0BeaM/Nviny4Cl/HHngAZIEtqnC5YsT5UWuiwXgKKLIBuMwoEfxojTnCXsqH6ZQL/CvhJmaZbiQhk3UQDFKfquTpCfzA5oIW57Pvwu9QpT0CL0HXw7QcYqzAGDx1zQBiISDYH1+nElMxHgKkqKUbbbx46MYqj1smYtBbnA5aYX05sbc1Ou52bdEXfatN0n14Oe3huASbRUa+x0wJjX7AlwfuSra7mJsxoub1fNb0e7TzjfurdWkhKQuvbuky+8fBO94MlHXt6xzf+nnf7ER8i/yJ/IQ0iWwTpP/doHpVkRo2nMWMGUaar/T0aaaKNZ9jpjs00WWmSmemPNNcZs44x33FHHTGZFEOEAFTQwcOLMhZEXbyY+/ISJEClKtBiJkiRLkWapOZY5bYF70uXJV6hYhUpVqlk010JLrbTRRTfd9dBLbwMMNMhgwyxms8Qpo0yy2357HLDLVndtM9xaJ2332E4nfPHVfVtM9cRnI6zz0QefTCEFgwA5JJBBASUcaenoeXDlxp0avoL4CxAi0GHBEsSKEy9VuJ7MMmTKkSVbrgLlSpQq00StOo0Uaa2DttrppL0jOuqvj776GaKroUJ1zgcvt9oay620ygoE5JhGgoEM8jQyR12sZXyboUSkSiUGUHgUV5gDAvzKJDK9u6UpVCKZOc377HYaVMlvdqfHefn/4CdD3YpsoPtJ5xezTsUH5HXzTHTQR6t5maiapL4mkuQ4MN3j1WCZVoL2Ml3phMVmb50XmH6VlQknK1uNtR1YiBm82N0kboty7XUFs5TE40pid9niViCmwrWR43GPyiYFE5Lt7j3m19WvzZIQgyrvZv8xFgX7HXPNGgwMvB8iuuykzuFpK4vk/STc2UqcaNXELYZOlrHx4U3mVVNjHMIGVlh4ztXpLvJhlevpHDalIyxXI48J6iltt7YzC6gZtfxNm8DFK9Uj1Bfyzv4Fk/WpXeMY+67/feIX0w+M+VR13/SIza6cVNbHtEC4vfDoGWg9YzMGBOSo/03mo8ChD1aSW1Wiw1YobsWidmxbOLrGjvBGXk8qIrTvkL7OcRG96x0O/ucAn7/xG9bBFb0D+T8gcNICAgYyLIggCc0mcZgD9A3c7tZfCy4B+EqKA3IFPUyETznfz/Hx9zz5MV6Rw5erjt8bgKvmq/IlbaQUPfVPYdp6HZYf0dsEZ7Xd+cHKKlxvuSjfsS3HrHeB0003aOGBA+4Py+r7upxNwjQjBO1OnsNRgTJjgjxDl1t9+IFIyAaps/5b5jAblskhMiMGI4cJLaAQQxM9euhgrbp15wqai/7/ZjOXo1toq4CyELKE6nre+BfErLGONgjP2MZh56dyYiuk84660dx2xhxZ2ylKNe4+HbpEnHvzUOXmbzXXwJcNLq5iEIFv6SJ0Nk3etOZriQwzgGajCVaXCoEl/W+jXLaruzAZMKpLXmh6tZij2Mp5Ej21mTG5Y/uSb+zMrVKlrtO+UsXw7vA1+fAQoAH5rBWe5Wlzkb1rGZMkfusNvVpaxyKtqXeFt9yO8dyhwFEHoqhlKloZjMkIWjBvwR+kLbu6Y30+pA9euWEwgDJI7e1XD71J8+ybuVzIuSAIC9IjXcG9W+e6VNVwgmcjrr0Ik4FXnzpRUTRfdD7HAJzmE70vFRRm40wUYkmbfbL9IMKc8xF4J6pGdsYJc1nNejf1v/bDJAsVk0ODroxnZ3LYdoLmFtAi+JRRvlzndOna01jgD9TSVSgn7Z42LmVNu0fcdzwoG2F5q/VW10rJkeg97zCDV9zB4WjO9n/OHNqHIkNj/9mtrGk2PDRhQUdTaY/kvdpkbqJjkJnis5xBYgy/B1Ah5gsvyaSQ4OjbTIDls+cx3GwZ+n/PDGxyzjB6FILVgtUkU3X8jA+z71KkxYm9ZOeXS+nsk+HW9mLlNPa+LX0l3afwQelmL1Lu6Xo0v1rtxT5wZYy5QY+yr9bBtTKOB1F9532v65u57w4teHwrGWZ5UBHRrd+vAYbdeZnKxpvu4BefvRyCSuj/8+l+tyuhtYrjqW8I1f9eDpvPLsgTXyFzbF/SW6uD6vkTs9LwfsNa0CDti/7e5orM9joQ0NnCmhNVbTLZ4CMgD6c9OScPH81RI/dg7iRA3pFAh7Jnpbdm0ZLpyK+zViwPKSwkKRqHHByzNG7L+Z2nk1eJ0c0HbPMerh/u7k3uH2yvapymjldT7s6utObXtHezNOucmELBZnfwhsfduN5RRx8/qJx9OLy1TEhfH+fXZcfy/SdiyBAVygdy0OY52IAbh97yQduDrQ/5F1cNHnHpCW8f20/udkIU0ulNn1+6zhwPIDJXzu423316Yg6iK2kDe+Er/VRdfCd2q1ZZEhl0hpDNijVlrTtZdKZTC0gr/XOk/It//4X+XGtoATMWQrZ2iMWQdUrV8iAoKT5D1B2f3Y9erziIL6Tcn2aKrcj18Fag0Ms9uBmipzXhdVX1odSY578PIgzAU55bj26STLWAUgweVCqhlSL3QxyrXHf3G7srNYtj+/0WRyzONYklitlAKaEOQBLcxAFZEARZndZyYKugOIGbyzL2fORb8sU1Z+3MCzfVjQKo/x8x2mDbF3hlYA8oFdy+icqO5UTC4rHzjbqP9mpDvdxDsvjc3UPq4Wm2UKdotlC+2W8IemEGFJWSY5pTMJ42hVIpxfFx7tC+5EhffbjfqvZpcFvNtDYchv370zRYvb/XIgPr3jqa9deGw3RUOXWpIzlUq+FVeIPJ6uHdbKZ5UgGXNrLzdFOcXqdvYipcoMx2wbl0+NBxryA8jYQeS2SbhKMgbWaAwCCPssRKw/XDHaEBgVpdeNtp0lIknweCk8opDnY3NphlB8+3LzOEDM/QvdXDp8NG48ZQ1yBAmVfjNoS6VJ/8+8pUmTzDV5XoEnEG6CuWxepknhVDU3asgNdHRPdzCQ2YjR87PdfQp/O6oNdQBNX6AY+dlYW9+NTYHfDJaEVV9O5GWmb1TVE2l64jhVVOHczzQR8qCF6/rgVAVu7gHlxBb5FJyHGxJqf/MC63RlUw0L55dJsLB+XM1r9NGS99IHBfp6pt4VWC3Ok2BAKoJXler1klE9/tHBE26A4h2xUbIXwRPYkbnsEp5rNyfme39aZMMTIRRwd+i+e3hk1OghA2Ca9VBC1DDx7JOHBsNAdS1sDB+L9GiyfP2zbPUSxq52aWsZTFD2sSTfK8g2lOQjpdpqRcmT09iNAds1wmJ49vgK2rG/WOIdau9oqnids9V/njdMcbhpRI+mkm7xI+vpTGe+PQgj0/Bbvg6Wblx16JtnO7GL1bRQeiT/bWgNx/R3cbN3tzIzKUhBerC7qLvvSIc2jV1rPL/hu2FOv2IjmOUu1pP2RxiIHxx8irhRg1V5W8NdhHhw6lh/DEGb5k1YJ9aPbgAVY3IezVf/9dxgi6bDAQxC2TGlGT05UP2hZExIWt1bd8xiLi4r+KK6PmPI/lU0atxm7v8Nk3v5pCDbGDaBJiF1J2ed7OO9Y34bunbmp2sTgaq2lHOdpjAi6NjXgazfiBPPi/sgNU1ZgNTnqtGd5op0Vez7XicjH8ekncD9cM7drztTOix/bjNa5ZHGbfMdE3/5jQ96UbonFeGhv2DYhb/dIHDyS37rjvvplNB1Ym6jCe1+Mx68HDPkJy0b4LS5m+185N73OHTsp/aHUnd51clNV5THY29wB0QDAtWn5IePG4fCRg/NWD/dmj1my1lG51P2EsmkMC45f5a4uLKWu3Uwq2z6MUpa/9eT6GIUfu9zm5/5lG+vf/FAEgWT1h+N+/5fCtISmwetthfGvgycZVJIxc98bgE3Jc4kJKW+pCz2KOhOMvkxJnxIcRnP2CpSTc3oPwfhNqlimMDsd64CIHJkbN62pqrGunhv22KfYSWx9v3EJo6g266YmEbma9SSOxUnP+g55johWY9mXeGvig7XJ6Ahs0uCSXXDuAjDfsdPRvj2tXVdD8xZ+2jrW5U6q7U4TsvU8HS1kNwLVuk2sKPe6WTozHpFPi7ilMV5O4Rt2UE9BI22MxaVsAbcpW1wAXoYSVLHzlX67D18HcdQvgwN/ZcPaQMFzxl8DhvwPVj4EeGMjhSVFDT/Vw89pJwZCry1XszGgsN5i0dUZsejKOzqwldIXmjP+CvTjlKvwPwU2tqjOJHdkAX6cSzBKosq7wWThYzO+2dvOjs2cJSsh4tUART7FEPUK7u0SQF/33E/Fb1f+So6tAciawyzfB8ncWbZYppXzMtE/BMpdvngAD2brEVi9pozdxexJVpF2V2j2VpCpQti6iKidVqN5nAEYOjY/oe2pqksoXDMlcUKxNmlQzqhKq6cxqQU5PVKlmJK51i8Y4TIXxKWrXx5fU9tBybpbb/heY4++SMQQFg2VXyImPMMLXkA1DrRWN8VhOFbjOE8EyaG1Dw7NHQmW6pLQu1he+9fca+KMhd+EB0Sl2+R2BXs+cUVPHnK7XCXhQea5O5sGYdY+I4TyVH9erysgQ7xe5VvmT2mFe7eNf1XFh1dz3V0dZfnH2Xf7Z0VPaesrD8rA/t0pwJo4RuzYoNvf0cYwqu/8sR6+7aa7lqnx4uCUS7nePRVyjdzD83VJXwTOp7Fm2lpB2AzVZXF3sMvwSuL7Kmc9VBGgSHBZ9Hc6uyN3hZIlwuQz11ApxoT/XJEVqvjH/VCx0FXwJia3y1Mq8PSEebFZhxmCbCFCbX8F/wq+aAUoe1zxl8jbVrlpfXazUJWRGjbtU2ya3TAHF3/Sgt0OkOyH1tz1gXlePqs5LavVqm6G2MMquHmK4gtSgAIyfw58bDJdySW/HRFXxjA8gkjxWQEv9e7HhYYB0P2D4c3EqEM1p4T7pt9na97YUDGR5kiY8us/XmyripU4rapTM7MJqNaZkJFEx1jIoWgVlen8Iom6RxF0ssqCmVQMXaHEuLgFLyRkOYykMmUcIavpRDXyPlHNxJoY5NRKZXna2zSoXiXGIZ08vFwu0lGF7f8qm7aPdkRvUmNqpMSCEqoFWQbWWSvykCI3BYN1/+B9utpcNQVYX8JGFBAUbmBrgXkTERU5LvsDcoEE7fb5F5aZN7K9pqa3ln26/L9Ge1EMVXhkIkokWg6bDZlWPabV4TFXYmT4JTq5UEhQqym2EPB6AJPJhPDr9aZW3BLgzz130a5VR0Wpq5EZP3A4qLeuUMsnm4Rqs0+dTlb9EszGumidC0jLeK0+1SHP8s6PKF0qPDKrQJxIjfG0PBURkqKzIjPHCGMYNm7BAkUAkb8e7o6TuvM6U68fnLK1hWfoKbX1HsnpmHzdbOCtrDHljlRVVCkIsDvAUPp0eCQT4YlFZafn1OqVrC2AguxpNyEjCqxnZqDOjIUhlzy8Xry5leBbhmcUKPZPvmxFV9oXK2UyXTY7ynSVyG0jjfwR9VAdnvIZ2wHtK1FBdN9R9ESDHhGW591a1rvDwNGJb4S5xYlVEjhvrUbTN40Hb6jVGPKqam2bh/qxChiUFjm8Rt4QfKY1Xtns/71BToio5HHRcRGi9T4wFQp1HxPJKrYhSh/lt1nhlZCjohA6u7oHuXTwIger18Ex+2y7+nfgv258pQ/HPDGD1ReTOe8vmB9d+DDDfT9nhOAx8nPUD/NWd0PZkYV/aMRgQ3/NnHbEK+Ma92+ZBWrlNPQapE/bjcTSlXqRe+AuXU17qAR3fc8me3mvmQpETHEYWBIsIrSBhMiWVq7KvAFIhv5rPnJEEIaTcakPikpUwJz6tVInNHqSsUPhix91FRWXKWy0I1MWrHa8+WITquTNBpiEvn7fKkDvK+X7/HEZzDv/XP3jwmIftRqTSi/L4boWkIxqTjPAoIJEby9ajVlwi/IZjH1wuzgfDePFNFGoV9Q7zXVxM7aKXW230eBe1pJket1np5c3X/3jNzfI+5nJNLlC9fik3PUR2mNMla06lK/z+66VLx83ozspEYsSVRdQlV/ruaH/8tm578qvU7S46OF24aFtUZYz4n0RaUy6HNbUgbfQW+PIW1j1/1YjE8j//hu+56V0l+vG4LWPTeU3Z5SxNQoLWuD8BRjIUzDcgfxqf+SV6i13OE1vYTe4h/zgQNS+1jIpYqmVaxnkXQ6py83n0GdfcQ1zpZRpcKMPDdGBO6z+4/f/7vGRtiC1yqJWYt0aoTYVddj2X45RruOZiHqF9gDzSQBUxJYH62S+YvDPVnvS61oDDUDVCBCLcezTY2wq1diFdT6AnHoGN3goDJrnCW+shEATKNdbC5nBlOAs5nAKAFwWct//HTm8lHdmKnj6BYNOU/yNVS0kdlkqHLyG1XKKY/H9hw3pSl/XAffXvUz+aN94l/fOu7txPF//K3vWU9N+nILEedtHf/mAyP3+Lnd5COrIF7Y+ugDePKwENcHJxDP4ge5ubYZDtlu0RoZ1IZ7+cNgmfXjR+9SazTK6y4946QcMU8X3PV7+kqiyirNp+bhan8Hcw4uYSbMhdqoE8K8PlWtlCj6ZU6IYxVoLZdbrnYAmMUpEBGHnwxCeDpccTsYqWx+nikxbQ/wN4ouRk9usd5TzLIRXZVctBA/lc/25JTsrBANpOLtiJ7CQXDD6UeSIz6zgLd2Rl7gTU7fVM8e9WFNum36b0P7jsnxY2n5MQEOLUoJIjV3lWr5wIcOWiAENJKLmn5y29crqtAKLsrusJDwnLer5tK8K7NX7p091VFAjhst6+3xT5OM/qUVhbZZUxDguJ7BDkEIoge54VydIuEkKOAPDFhLps9ALe9QXQMsGytxKXFxr95EaCmZRL4xvH5h0bJ6pwxJI7IijHGVN3xh7qwS35/qhXdhRgkcIDxYqUKOybIAXo/UyZoQTDP1VsUQB6ACmfpehSgDXr66Jtr0eNUpWb1taKsS87O6l4AbBi/SujrPXR1j6lSp8liKyHNlylvZET3fxuQv6GdnUDNIE/JW9ozsvSfvnP7vpqX+YMzZvCBxvWa6Lavuv3K73wBOFS8w6XCsGDQ3Up3Bs5N7hTdeLVpNSBvUFfzKw4iC495PaF0LPD61hx+FT24Cctp81MedGg4pzxop/CxQD0HBxKfx9cKVp2b89qbnv/LZ09kGmwvl4+6AP/2YUhX6u/uUVCfwAr/ncD5jjWKggHZdPCw91r5pVF4HpqyIqMDTlYse20kgezjTtKSpYxrQqHJOxhCyj2Oe9Y5KzCzHQHc1jp2Dbc6RhpMcysqLPMGoVbir/fr5gfuc9S6sXvXxwxhDKXY9RjKHhL7XJI6kcVYrdPnfVK5OBx2XoTS8g0FdySCfh6HCr+sHcPuSAVUWZWKGeusMTqazs0hBivVN49ds9YFPHo4NPmYryNbsIlktssaCSPdRIUrL8cSq2ot8gVZQmp8ZmYma5I70wHql2WhP7Pnm1TUblRysws+fFphczMQo0ykZEwFPxneLy/XFQBUTW2/uruaPFPm1lY6ui/uatzUvvkmKwom905qVYpt33AAizV2KxwVfAmWq1J5apclFHVk6U9pkBNLB5MGqWdNzJvqXLZSsJOKB2sorxbmVMefslrcrR6NbN9fs0syThEUft9qjiXzZ8Tg7j+mqdOamvlNp2jM7gTY8u1gfnSBccUTAadvZABg7ogNcZ6zYpRF5vxxGBS5WCDGUo/ZngVLh1gB2nt/Wj0/u3pMVf1p9P6VeXTnlPpn9Go39Cp3wHq+nfIu3X0fGS+Ih7efiCPeFf6bVCrDhe3+In6ICsATCW3L2UUPrn3wX29IFVqiuCm99zMaatzNzADqNfSAVrDx/T6ZoqFx6MQTYXaSnWXLflcLpF/mIlmrIlCrGdpjh4m1EB3l+enRNohgV0kEpyk0vJ/PYAa8WwI00z6l7KBMU0tp/9fdrZAL4Gljqh4mYft/siT/z3LZA1BvX2LngcFIpNSrfU3wD+6uxx9ap0W2IiVZY+q+PNQQK8RGNXNoDGVqNdrO8nOMqQ0T5I3DDGklTk6G1CMGO0qtv8gC1gs7qa69JZU5G9Ycg85skNW6UUQa9DifVXsGGcD4wfmPN575xkzd8e5Vk6Mn2dkKGBbkI36G+zPTjy2ChVFhqEvYUahhfKUc/lRIlPNtoU20QaULNNncrMizq8mU4ayzx/glCwBJfENnA3JFNzzerHmWi3pai32avEazofJD2HEgehBjzXsChgvXkg7AsaX0u+lYBlE32ozP6rf+Nz47XweyMvVWN73uYTIG5yXlwI/OP+OINrn/we0EggM0MzaP6tXc+uRBNAHRKWq6vSukwN69e5H0ke7pfzX2q+94jMF+LXp2V7Fuwww/sLAd7yPFr95ujGfliWRR4M65FjN10XXCkMQ2DxBYOBwTHw+x2jgCiTG5Rgdk+/u5e/89NvJF/yhO1t7FLdTpGl8I94x5b34prNkZwDzgxlrMt4t2CtPDrBAxvbMzO0ZQgnAgpk3M7NuSM+cyMo8CfyqadIf0vh5Kj9kN1EJyl53TxSlpf41iAZ95nOAX1U+v3tIaupzsvCDdBr4/jXCfTaIJX+dKogmdoMzOs+wHba0VNvaPFBpxowYwDDR9TFcU4BKTQ/CHXMcYBrK9rWUTyJdiTJv+9aLRr8fv6jL7ZRlDJ2ewe3qU5RnyMwckt5IbOknXUWW/WeDkxXQvxBQfbR1RaH9GWsKxWGprnZ36dqOztI1ecZVui0YdHZ4gv8tOMU8c9ES3oGMjCTeIpseQT35vN4++oTeVzRCbrFS+VxzERgPH/z8MBvzpOcdZjRvgUFSMqN2w2rHFD3qdBqVIU2asX0I0RoKomGezIvp0DE17RPqcNFYOdCT7TGJyDU8stnldEndDAiH5BLcVyLNh/Pp1hy+nNP5J8vidyx1bZPbwkId15IV/ZaHqIP/2snWpFavC9ULwKJej9a8U3d0tHR0r/dNQQcJ6MjWMCxyjndst9u9AgdfNAzVwR4HiwM7BDUQ1xOTiwu/WmKnibFKRFVrderqamTATrbXWmSzEvbcecrWCr3FHNbyZa+NfJHG54cW9mkirTISugqVosakltcmdSaxI5pweqNJuytS7XFGEuAUq36i/KCcWg+wQZbhcjSMlForH7N5dqFE5PaIJJIkGEiEGrAft4JSZESMbWoWKz0cgYHHSyKPlIhXFtxUEWJMzWMw8qaqBR8f+Kf7bTKUUlZi0fDCKoOuqVFrMDRptU0G5m8XdFvShL4ynwT2yWQUVLISJCCpA8WDHvT79GBa8/9MVMrSOoG4rjktfp+fcrssGnF+7vbczF/V/0yr50PlbJF9GC5ZKQIf1BhpxtdBPecl+29AKMFXttRN7APG6f6EKmdAYz5Iy31Hyc/PLZqdEtbbkJvzNiv30chv984Q5L24UJQzjbdmVi71XQaobPJGc0rK1wo+BLubeDZtVbnIxaIup+X/Y1dOMqrVKpNGrGmYXud+IQDqmlKjZs27CT085lYOd/Yn7+V+nGOks4qL2funvdtpU6opB5fwCsVn3HmFgjE4pRawwBAAKa6c5I1luAa47n+uQJb4K/D97xhmiGUwC//urqCEfcQlCeq8AvX2ijZHc4Mbcxssd21Ib8DWw6XAnQCY2wXt3W2reDdivBux9u42udfNEWte5lTXZV2XpS9rXsf1RjlD0pchy6XzM0Rws0KnZwH3ZUg2ZsiY6fwOkQEHMuB8hqS/WQbNfEgXdohEeHMG3NQhOYB3dMwCeFeGZHmzDJr5kCGSW+btTzYthQxZifMltEn9F+1JZtuAt1xayGN/OJwDIIkXDoD7xDRwckHMxY1QUHX/lNrMUIQSlKECZ1HF3HrnI2WuBvv06UFPalqv/VPDB+4DLQACbD92JvgBa1SCW7g9To0xSjPVcfOyjJf4KTo2ewl9Ar7fXwe9+cMm3LwRML9mJMSDSgu4PU7NxSg0Aj+L8RI/hfX6A6ujsjDirB64Nc4G/B9jQeog0AJu9W0wvj8wnQfBVnFrnA1G16fDxMwZAnWL0G9TOVuQgmGsl2XcGmfTiVE2KIndYtzq29hQziQCgknk1T78wz0GMSKPS168BCTmQ6SFk3Uw2JTs7ifgbsqx/syRerXYjc+jLX80hXHWM0HYurk1z7qJ5f4zy8xJv2atn8fp+TgeumP4TpcI1PAV5vDz3zdAx5W3QBHitdHZaFtdTw2xNKOBdsYyhcks5BRKbHgJkuAfnTQaYbLlVlrnfOe51DVafayjVQ1vScd2Va/X3Hj/HglyQSN4LGb5K1t8rVu39du63avfiZ2/yku6FrfhrtBRIVrsp45RZ6lLqTKqM7WSGqQmKDl0L/QI9DS0CJ2EXqMJxmJ6C32SvpceSU+gz9KX6WF6knYDrWeS5hXRXtEFUQH9MYZoXcK0ZAYzo5iJzMfMV8xvzCUGZjzJeJ5xlLHCDNjLX95sc7YfO5Qdy55kp5kPs0TnIq6Yq+Ka4C9QD24+9xP3f+40d4Ub54Ssh1nH2TZ/CV/Ft+Db8VP5K7yNvVSmCGuEHcJB4ZRwldBIsApY2Wr5rDhVFJU/WxFp2a3F0oXSCOmYFKtsyfvkt8ofkT8rf0s+IV+RZyrvqnym8niV4FnKNuXtyvuUzyrfVH5UziiTVfdUPV+1Uq3DITgBZ+EO+Hn4VYjgB/Az+A38Cf4B/4W66sUadtGkukf9qnpIHVFLtQWtpr1F+4p2qSapfbHOmgRjMIAONAIA4AozG4nHrlh389bd/9bhPCSRAJnuH/yAi8KFSJ3YBRTuQYUqLgRkQzh4Gplp09oCHvb7ChM36o04EtpOFga1JrfswlpGIQFncDTslodSWYJaCq6GJa3hI061U06x140n51VH4wutQmC3JglNY3kWgCQG+CLoPKtibX3soJwd2zPbZyxzNjAM4K4WsP8kwEOmr1DkqJ0nyQUVN+XHCZPQsiU7PE4N+QPVV3X8kHZ6FSE2w1FZbVDOYl3Mkz68AVLnwjUV9Agi0p9MOgJbDJCiQlGRrytgyfTV86zUxJYPIbyTyvYEg5fJFBGGlExKMSJQk8kfZk+ADNlKKzccaITzA67ZoUIO1ybLQq3GWTVO+fU4K7TJkCJblxU9Q3XnFMFdDN0BcjEijCWTEUphLYisUOWTVkVS1hipMy04NNdok6i14ngayXyob2FVKbCjUY/jXJDh3PH26kB/+TeEuKwH9OvQeIjEUGXL2udvQdwwjb3umj7/X5IA90D6HFYVyUr3foVdN34MWSpdkJ2jO7ismmogSQnl/Snqnv4e8S9apx7aZuwSP9bkDyD2gHI/MAAEMvAaqBZiDWoTwO5HUsg99m3rzN6ky3+UToAHPOJnsWhRGa+wpyg4ewlGTXXeBWqji8b/0ydDFyXFP+NLrTiXQ8lmCUEDg8y6ghMgk36S0T7wXfaiykkMWzccRrwx2enQVz+9b5365/d0sYyDSQHE193vMDJv2CNvOoSzu9Nz7hMSFwWpxUjXBPePFqKave5SG+zkxChkk3N/4/Du/bivaHnYO5WO1eft1VZgE8cZDOtHLitvUn67nHeH5oCXQ+R87N8Xuwb0dXFSs693sjHYA57ELkaKRO5KoVfkylvNan1iuY/mtoGpcTQCv/0FZ01SQMtowCHIpk5vnnf1SrPvnWW7QNt6nRbXyQCw1QchUcqrVAFB4oT4ovfqD+SqF4jvf38lewEKKbkc0FCgQwYUJQcO4BTgmTjBe+KEB4htOzDdt3hb4y7DXpmsyW2ZwmcTbqcsRGpRNWx6avRodeOZ15xyAqGYHnGm7OXM83SpKodNaDR3rqnt9I/Lb3z/nTaevXdj3oMbDJCnCZTGIin+slgqpLWpJ2ybFpulYUsswfsWIShZz05u6xE9G4WUfB5IagA2cuizh3p7HzAM1EzVCxzA7KyIx1g1iGaqBIr7Zi1iv6lLpdVyokiRkGHFUo/wWbymglBVIeTQCKcRAayR+F+TeRCXO+akGu8HpcdqCY9iwJ2r7TKSlEjsc0WAYeFH/pKmrC44EMqq1PeBuxTI/WgKbvjL13zxf/cqpr5njBa3ueaKwIEDrOdbPvsOdnBxlWmPXVaoTN1IfUf+kmOdYt03fTrMtK+0HiFqKTGIjZycMrUaCDAxATDN1Y7h/QFV2sTjQnZk5CEzmDpLwjOST9iRoDCFazuF4k1Kd1Z6rR0gvPgqVXdYSwjDOuZidXBmXxghTbRoYdMIhGq7O1IHeg63Dl86/R9Wc0UbhBJeZaCUTZtMhwOzL0FOoinpB7HmMP4A+HGFvR4kDRCFo5KBR/B5mMeZKARpS0OafPhNcGyt29HH6ulOTGPF6mh+6GaJ5DW4Cc2BD39wFmD3qiVP7mKyw3c9LyfeIVvuIHoHUtSZvOdC4RQE/vqHjkDHYwdsSB64heh5faX6jxC4FY0BSj529zunPtJYbOgIl8udN4zlZ1JLB8YgF7nrHS1zHedqSbna3Aj4BJFA7oL/euPfjCmwBDCol/wOo+8BDK71Qc5ss1sEkXVkLSwrlR9zxgSsobxau0E8NlpL/rupq3cxKw+T2Wg4wp7AlCYvY536kzFV2lzlCJgLGNtYjTHfmTPLgjFf1UJzqVhaGho/8iboplDLpQtrLr+or1qnmLNS4TyR1LlaU3xzzsZHAdecirLkCKerooRU9erLrRmeYUhZ5vLLZ8gPRcHlhgvYc5YlOfZkCtLiYfW4WNufIOMFjubmSttGJp5DK6+vHzdxawymppAE/QsSc+OFKc5B/H0xj3QVd4VIdw9tmrUanxr3FFpMSMa1dZG2+5L4TyGOr54I6BfDkJTEg9zGJlPgYBkXBoMjO/jU3zzcACMrjR1Z2k8VMbuDfDCdYCZ3pynF4+3dYHRONNYqOkyyfJgtBGXaPKfEoZzPI7IwZI9sH4+VZayOajzOtfPJOE574XgvxK83PJoBlotO4v9tFjib57bFecNeHvBq4SpXLY+ukR+ArA0XxhXpPgcWuM/3rA4vbtLnsE4MQS9TDC69kjdRHlNNQXjKW29jlChkUEzBGUeYZVYYYachTgWOATt2yBV8yMNwJ1TwFT5pNIl4GIzwWSzgwfifvN/+OnF5cPDPn36VJZPIZg1RXs+uAzU5dCrVJaIuNOLT7+aNFBSuIBFdTqNogh6wqtvYxyqFx6odHK8tX+lUY7IjykxWQ6eDxdaQkdNoa9iSXz7aQZ3xmCJ289lFkbQWuzl/2x4TXxQTq7HbXN9/VaDAmfZgh7vrzOYMipcKCJlMRNm8nYymquHAZvPfR3GRkiA3AeZeUUvHfkMTibxekcQ52P7gYKfd0qnUxqEueH6Bw0TwHCG8PnhUzqkm8wTew1coplkH14zGyKF8XMjVUb0b9cahDuXo8Di/j3iyMNMIhK+s+UZOgeLBIOrHG4IWSEFntG4TyRYtlwctNUN5sTAN3tnaUMDFPFwpWFl7+9DImc37iq1mXavZXyRcKvS5xR06fRy9rGHyOJMmHMpl4rXS4JlsMQ0l51cyRqLXYsQNCzgKgJ73ikNvxHkFkt2e7tvMik6uo4qYgbq0Y18ZAWkLCxwSSav7gXG65Ovw7KG2tnuOWXRXlSeTgPWQXf/MBdBZBMSqJaOIwRq2vWloCIUUyorawsLRvWvPMKbSF/cEei5XT3GgGqTjyYwXMxOE24Q1aebgwaG+kjc27MtmpuIo11NIIehTDg1Pz3pP69lVC7wdDMto3GFYtM16OS9wsdBm5jYluHGlaCE5Zre5FsweUPheOoThskcslAamSicKA8Hpv8hUANC3vIXTaijsIjHOKD3k+YpjBA5v15cQfZgnTWCU4kxuj38kXcKDBwF51o5UPTjVAMXTtJdjI2faW51EGFNWHZrqiuBQpj523rUtcxxhqiUJvysvFT4bXjJJmuaaXk3ZHT3Tv3n7gcfCdp6N25nja5zpS8iydCFnN+3Z2XbLqIoqnUzSyveaHSZCbUYF+Iq1nh0jIBHb8Ea3Pl40bV1yyaTKE12EQhICe4+vJHNG2Vln3dEMQh9GI/DNnLoOdDqaJDGQjsqZpBglOda5ywEMd5zZNRq355uNg419DmpJEKwogeaY9QbrgABIwkBKR6b3GBP7bWiEJ+ZpOnvgmguobtoKFYCtG464wHLVhgepccCbfUsrOfcTye8nhGon7ju10lO/OA6TTM0BhYD3EXf8H0JJ9FcEi1FIgVbVTkQCBiQIJCroUivU7/1Qla6I/y6CIzsK8PN5fwOyjz0hoFzeW2u3CgON8fGRrB0rjglBc+XzEow0xRP/ODnsEmyOYbyJLRRxi0G7sA+um/iUkXryv5HFCIrd0v/gXFbok5DF0KuXuFQ0DHsonGyonYEOmcoxs06r8fpTSELMtNIpqQ+RrcSphsWTVMV7WekaT+T9EMD6Z66QSkNgmPSLZYySmybgTuJIS5QTWxb3T3GYPIqDyPh9b4+AGIrpzDBBKsp6FhnvSY4bon4kVSHPcWBid+PRSUZ7Cj2Avb5Wnhol1Hr9JtYNFwru8NT0ZueRSGuVfgeSFju2PuIiT9PINQbbJWyys7Givr5rR67CpTCs99ZObXGzXbaCsFQMasG5VCxEgv3wjtxitz8re9e/8+1VHbwcWyvLDy06ERbX124GHPki4L7OVNqzaTr9/69lcCXBLHfdyPnziRX+ORh4HYAWueddQF//7CHsDQ19PmcwMVTid9ntj8jNO/VCZZ3bpe61r29ctsTBXvvKVH6orpG5JX3pABDwJH59x93xBR+Petls2CeVEIfDioGKnz+ZErLnI95NLAYSevFv7gizyLooLCuzW605YWLCrxFLuGJAkM3NZRjySQJ2LsJHkZzofYUplh8nFUE/STBL+CWW1HkS6USIZBSHGGg+aTkMJCG3dEAFIRVPCQHqUoDaQoYOFJAiOTpPT00ByuKJCaVovmXn1ya1eHXDI873JatPPylSFSJsbel4O4UklMLu6dYfncQViOiGq7XFKTN+M8NFIIfwqgHs9UGGXrpU5EyzIsze5GcR1U1fiBmqFmhaJOOoMKTX+40tVy/3jbkPU5GGPYyin5raNB70ukIRPsJUBZkIG1j3sdLAVHnX8M5P4QpedXreRAWt711nZk+kyyC9cogEfPqDczBynIzA5z7lzvAOXT5rchCWKWSML9XQWfLU2TLvSfdPkaCt0YG+lLWoOi9UKJHuuBeWR5qTOzx6ETmSTz8u2OGqkoyAK6Smo7iwHNev7Wib3vVJyQzjAsCWx5ypJoQIJAKlxQkDklA3ag3eZmM8qe5xyWMmsEEA5pKdz0GMwvkUu9kWKr/DblZcuCCdvHBxUp336penVaeSJ6IF/PCHu9T/My5HyqWdBxIFdr1oobxnSrAXfI3WMitnnHi7PEg/FWx0CbbeOhY1jhr8hDvXsCObCmc+HsXi74909T0oX9FWokc2GsKJ6cc1PbWBx2bnoS5NIukr3atdPRhiCWhVKk/5mgNpFtiYso20tvDA77V3ocmqzWv/dBQgNwLi98b/tGE77388NikT2/MQ0HzwTXA65AIoU7h//X/Y5Jm/alsyOq6xEYWGQJQXOlpSUEZxAx6rSk/gthpLH198dCtIQG4bApCGh0b7DZHfBGwQSiRCscxKMtPp0VqJDa7grgddG3VLUFhWVd9yt0agf/eV824PH6ed6OhvBsv06UwiuzuEGYlH22wChZYN9vjsT1ErBO4otLhpVBpGBgdHWFFmDeW+RTPtJPZbnPs03bGepjWPl4UVVxb3K9xzU+oVO2RDZ17uONDdLEbWlD7bA70H6g70zbNv4JTArqnQ5wpgfgYIt7f/6I4VKjefufPFQDpg4LcZ+eRfJZQNWxv5hkb39JLP/4Qj1kUaUEqIeQzm51/8RQN99NHYzArzmawvOLobHEn+b1zWeKyhph1j+rtHV8peNSFfyjZKG3dbb2SsxFZfMDozzaEGvDDv30+2150RDGqsOn9keoronfcIr/7z8VamqKsOzNKxWTrucGeCR7nzfsWDDVHE8A94amR0mxusR/K5v7wq1EcCAhFODo9sDb3DYbBBArvTlXR2Q+fz9YY4Yzr+X+vI84wPNu3a+fPPpvv7PljgQp+UK4vn5M/K+v+6h2ct2Hvu/v+nkZ6cO3HgYDVpB9M1ZzERj8U334DFZE1frPPmPvs0RrFp8yZmCnCgJid5Q71OP32uEs6to8esIPrEzqycr+gWgeubTEfCxxJpAEg4iey2cbF05SACGvyxYCIfDsQrIxK1mEJGdB43i+KF0mVMsqoGtkxSFfnHTjxxTaDrQ5ywYpSvrWWUuYiG4xUxcmRVZKRSSpBlgbGgdTBc0nXZRVrq4A4SAqWZtavPJdGM3IsXCBaRnq1qTZsuONxImvep2YYl2XAbqIweNVrJENEDnUCIZG3VK1fCTu+1/6EM4Y4t/Az7wlPmxJqXxs4hdb0L0sbrk58XVNkfd7PIIc+iYhZMV4RSTCPBnommWUqk2Np63nGkOOvbsLl0S4BHvnWDt7zY2cv0tddsapzqz7qOI1BdGKUhEkb40MYXOoulTXm2gITp4wHgKA4+Y8FENugwLczF8ZGYRGGL/GmTiQtfXRaxmhBNdXIPGD1FrwVS82TXbYidH3WqZFkZoN4njuKX1KX1jIOHYSOr3WrvQnilZ7NVODIsWqTMRU6DMxHkUpGPps/hJYsRf1IosoZneUZ5qbzDw5blbGSZuTClSM/57UIYXy7sRsiUBFRWACWpgnJwy2mqXFZEkDRKSgrT6FQlqvgCi5gGgVdHs61SwFZJNkRsokaBZjsdKuQDjz22mzQQYYDvD8gadJYCns0kAeUUTUroScY7cSjPYWGW2zL+cuRKJgjxeHeAg1aOoxcZU9iGsw4y80m6pUhNww+lEjgqojJkTYUPloQBZiiUyR1uiX4suHS18DGD+Y8W60hNAeqCOh1nE1xwx8aYXs9JZmaYVyhXAAgS+owQtBe/AfNi3KaJu+U0KJWlIpRoPfnXc+qS+vqc0ahWyGQK9YCmnAErGwCsIkDr9YsK60Hou0Wj4ReLfbPRtCVwit+addLF/ofcbEP8x9ibToQ3fK3olGZmLPmoSydAIW3ZlunbVIRMTzp+afDobm1RQEFg4IL90x5ysJ/jY0a9fJYstIYskllTlgzIjsdTlzMQ0XDcaaW0ALqiDXDxFRIxDuhrtvhKHdWjFyyB6x2iiMuKwcJ2S6bQXGiLk0Quhcnjq+yI1huILqOZCCM0ZLNlfIkbzmZ7Dod1a5JY0IocFh0snOJXJ9ygUrndxPKoxoo0rWQsETl6kepYiaXs8i0fMCMadqtB5i5WWzvfFrsmEqvmkHCuUn6GkEnPOnzq97/m9RYKvmtynMBNbxLSY52I3/uvf0sj3PWdwLt0GZp5m8dRoNRDMQwvjpMScHaj+eYFWqJU9U7SzzdHI+D7Xa3tDPKHoUvlLCssgyhwEl1uiUUwWKsplBSZlj9L/nDMNVV3yE014Drtt9p4OEc5aA05ZjsutthmJ0jhWZlscHjEkON5vUH6w/fn5YoaaX/tpfglaLOnkqY3tnkaC2Asa49MeuvgcrISS1y2dF15zCHLWSdMJk5NPBXtL0P7Mvt0+JT4Z2YcWL6hmiWJZZlGqzE2JRFnKK6iaqA8IAiZp+mFK8aYYnEotO50cvZOzp+vbtH1ZnOm+rK0HbNZUYi99IWpMtmGBd6OVBG9Ih+c9RdHjW9T317D7jreuA/0aYGCa6eMge28G1tfCrfgBb57HvZH23jsERBx3m5gbR1NPAZkvNP+ggUrAKswQvBlJd6rzNf8/rQdi4k/TV7pXo0rbdCZS5OxnVLJYfNiRmcMcfGDD4/WZ2YfUOHwX98vVqUgCt3JT8TbX+AC+mzVMvtWaNfXHr8C35nR7Rsbvjvf4bo+vXSkjm5cA8r45nvBl1v3+t5LbuTn/utx5bM1D8uis8wgR2YdPHYlnhbDYGlxvjI2g1z4LmrWrCAoyGAkvmS09HptL4NtKOseUHZbl3sVOIHmgQ8CAVsL3A6MI/naJxz7ZigS9mjzOvVjWPd6Oo+T+G+hkJnNPj3X7nMWNa3HbqZmc/vICIeqKBHbpx2ZJbTpEqglBmp4mLHrecpWYTSy3vEHZxIW/XdN8NrtjBMEZKajohqYeQJBAG8e+W+2v4W6RJkFh388SHGewlUqHOhfQvdRsrVpUx4eJ96cWWc0A88CzdxGE6rzjPQyHO45FNQhPZ1GaxLHx6hYZaYIIrbj/bxQkH4VTGMy10LL0S34ffSgdV6GN1ZIVhXoCkzhGNLLZXCpXGSfruB247gsEg3sheVCaUIb1wMGwiutrjfNrQ+u+70Uw87QArFgs5bxVFfpbFNaQUIySSG0M+LYxxZ4QqnGbG9ohhYl9EU1Us/cHDPm+7G1DI02fvUA3Pw4Bx5oLUfMYOMYEC+D0kXGYPr5LJJFglCkwpkz+moSl2DCeCaTJbKsayONrojZcefGopnF8ykdJmdK1Bv2mjDvPkxtF+xmgRv0eb1+s8NjtqtpdaGx2dCVlaSrLFO1HePVEhG380s5Z8WXv1iTnjj8m8o44Hf9MGI2goQBOC8b70EQVgr6RjpErrbvg3mrkXqKIC9HWRBNC9LnKj8Dho5DITTlH/9BCzrtzt1PtOZiX546eVXs7JS+PGKDYiJ7KuZAHPCadXOrWfPWP9qnLGEf4FojZjBIJkaNNaW8auNBd16ayTwaxg+8OzaSaMy+ftwhp9bL4SurFINoITnRq1VbL67hvXw1wwZWeV/FX/PPnNHYMCy0jOrJIJkNq8zlbtJEVFK3vH6IwngpxUEsDDsC9mCz2wFRp/jcpoFqogK3fpr3BNxYdRLOM/nkqJCNCJ4iHcjXZjjEJ4jU+AYxbvfd8NYH0P1lYJUeaG7t9V7B/gCQydBXrYoF+eRRl3RIQ0jdwbxnXHjRwoWG76U1PV0Gl46GYXXYE6h1OiAqKzKQjTNSZc7nzi8saqDRlm0Rgh1wCdVLOhVChptFQilTS15xLRJ1y2PtjSUV2i6kvBL//pzQR+cajsIAarWjmTAaOBRpkQ9xB3zVG0dkrahVE5idZXBDmOPCrMws4lj16NT0f0Zjh7MRjQHPnckBzs1PFfzuSMquFgGPqYMknAa2CorKxuEycVhAJSNEggLGymkiN0BIOT5OGQLgkmle0CihpWGbQqtVoKG0pJdFaLYS4C61aEncfruZazEDLQMwhhVMH+AGxjJqHDmBNkeMaG5pMNkt6ZP/9ut5qS9HUisFBD3OSyQHI+cF54gkivroPh4vQt1uc5hlmVSaGVUMLNKYQ4WHvbMSPtZd+APtXJlLWpXZCybbmucWZHF/GF6r1WgCHg9E9Z3/K4U6y0YazmI7lwVZ1jqJhJ7axexDZEYuZ9DMB5mO3pO2WBn/V3YI5AUvxlO6PJcLYH7+UN0Pca2YiqLH5d0kcpjN+d8NzeljIWejZqWOUxtVoYuQzjTRa18HUm4KeDEIjLosHdnTsdms25a07aQzLxkjq8hXKTMq9Q9kXMr8PzaeM77VDaYrW9UgjLhusjIRzvdkMitoY23q48BS+qw7lS5EKLtCOFEvOF0MjiQ+BKV4yooGXC4j16aVQgAWUsUQ1jBRg0Gnc6JoNfTboszM0Oji3W+f8TEsMsKMyzJqib4YQ9LzoCsbStVfzO73td60Nxp/oIjNBiQ5Ta4YGPAN3MiCAqHH/zeYECutRiMEQwgjbDhja8bzoUzRMA0I27FiDKTDsCmebGp58HEmtlsdNYZOTF0GfK58qSYfsPk8LFfFApeB0YQQAIacr/C2tLVG82c5/xgAr6+r2gPAm9suOX+4PqxtAaRgAAACfvq8ZkMG7qj+n/DuBzu/13xIp7QbPxIDYlkIl5ydzMWDL1scZknLyKJspzwDYgye0Wx0y8pIpGEEE7LTsEFqohamdFlAC4OOnXbO1litCxEdO7WsksxhNmiVNG3baGDA4J41aGCNzVbN4AgGVJLYIK2aSZv6Yy4W0UyBkW6vroXfw+O8OYO12Pqru+Ixxcqu9Qv91TcDIO5eXGuh0nDWUdsbA1AWpxvQqhmmVjGjzhJERt5qX/mmEahQdFNi9qkFnIQqaQplFX+s/iQ66ZJnN7shjn187Esjoz/84eTFbr/5kdnf7XSUpYvOOqlRLMH5b3N+kWInGwLwjYUMeYTZt+qKqX7Te46DBAVwFapjOQklGZ0MauqSHC2SuirgUgJ3P6cUBbb31Ej0hQAlukESDBong4iyFW7vgYSZMKcEWtEphRzBKYOeM3mIBX61CogAavTWU1u9FBugrR66ai/fEAP001aO3npIc41Y9aul36ACF9SoUQ3l1HvVG24kxUT1spBamdZiWbRdJ5RYtUm9Vqu6xcy8kY6QUnWKEjVUxzTgYZMGIGxoNc602qE5U/VNnZS0CyHSpQtd0UEjp9OTyNFUUiLw3iyRTolx83Az/xEsg09QjRq+5YQO2stGXfnU1dlTtdF/zji1ldQpDa89oaTkvgq0ofYSsK68r2qbxlVXWwlxowKp27wpNJ4bVKIiVOMoSSLVkSY1qk3deht2uFVnKy7h2EURGq6EA7rWF5EQbXq6uCoEQ3WY/Q3RLpDw7X4D+LsUEi5oZ4f2dpojQKAOgnwSrKOLLrsiRKgw4a665robIsKvBvLuO4l10y2d3TGXzS5xvomXcJ2Q+e+6p4v7UqRKW6pfZLx0V666rS/f0xr5CvRW6LMifTwY9VV8HY7Xf2CAQQaHhIHK05ek1xf5NzdEjaGGG2GYtUbardZ3dRppbKomLEYZY6zRmmqmuRa+OqyllVbhJCM5dDTw5GUbAev5WudMGCRiMhWk0MuitcdeORygRCttZDI765x99jvgoC22Ou4ECUT4UWCKSaabZobxWvtogmNk5ICJFkUJNX5oUM/Eh7f5Nmgrm5xUpCYNadGhxxEDTjjjgituuOOBMbPkmumhZx557DnHa7RY1zj5tDwYHfWr3/weT7zwfhoaT3bUjq4lj2ptgGE5DstgycAG0ZWrVgZ8jv6amlSmRCCi+8sikEi/67U757dketVXR5X174QRDxRson+O2SX9NWeSokcqUfCjYRmsSpWo7IayMo3Jf6R57sD/Znpu7b/W7A9eUR3x86BE9aiRNptE5UkfODIOHziyobnm0eaTapXlqXzihqJUCXvDBjWXbiE7mmI/eCPNBAAAAA==) format("woff2");font-weight:200 800;font-style:normal}@font-face{font-family:"Martian Mono";src:url(data:font/woff2;base64,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) format("woff2");font-weight:100 800;font-style:normal}.f0{font-family:"Atkinson Hyperlegible Next", system-ui, -apple-system, "Segoe UI", sans-serif}.f1{font-family:"Atkinson Hyperlegible Mono", ui-monospace, "SF Mono", Menlo, Consolas, monospace}.f2{font-family:"Martian Mono", ui-monospace, Menlo, monospace}text{dominant-baseline:central;white-space:pre}.term text{font-family:"Atkinson Hyperlegible Mono", "JetBrains Mono", "Fira Code", ui-monospace, monospace}.s1{animation:s1 15.50s steps(1,end) infinite}@keyframes s1{0%{opacity:1}15.485%{opacity:0}}.s2{animation:s2 15.50s steps(1,end) infinite}@keyframes s2{0%{opacity:0}15.485%{opacity:1}}.ptr{animation:ptr 15.50s infinite}@keyframes ptr{0%{transform:translate(631px,563px);opacity:1}4.517%{transform:translate(631px,563px);animation-timing-function:ease-in-out}11.614%{transform:translate(371px,393px)}18.066%{transform:translate(371px,393px);opacity:1}20.002%{transform:translate(371px,393px);opacity:0}100%{transform:translate(371px,393px);opacity:0}}.rip{transform-box:fill-box;transform-origin:center;animation:rip 15.50s infinite}@keyframes rip{0%{opacity:0;transform:scale(.3)}12.904%{opacity:0;transform:scale(.3)}13.227%{opacity:.9;transform:scale(.4)}16.131%{opacity:0;transform:scale(1.4)}100%{opacity:0}}.t0{animation:t0 15.50s steps(1,end) infinite}@keyframes t0{0%{transform:translateX(0)}15.713%{transform:translateX(0.0px)}24.746%{transform:translateX(-743.0px)}25.210%{transform:translateX(-1486.0px)}25.792%{transform:translateX(-2229.0px)}26.170%{transform:translateX(-2972.0px)}26.570%{transform:translateX(-3715.0px)}26.902%{transform:translateX(-4458.0px)}}.t1{animation:t1 15.50s steps(1,end) infinite}@keyframes t1{0%{transform:translateX(0)}15.713%{transform:translateX(0.0px)}30.198%{transform:translateX(-743.0px)}}.t2{animation:t2 15.50s steps(1,end) infinite}@keyframes t2{0%{transform:translateX(0)}15.713%{transform:translateX(0.0px)}30.198%{transform:translateX(-743.0px)}39.231%{transform:translateX(-1486.0px)}39.890%{transform:translateX(-2229.0px)}40.794%{transform:translateX(-2972.0px)}41.319%{transform:translateX(-3715.0px)}41.974%{transform:translateX(-4458.0px)}42.413%{transform:translateX(-5201.0px)}43.650%{transform:translateX(-5944.0px)}44.254%{transform:translateX(-6687.0px)}45.333%{transform:translateX(-7430.0px)}45.994%{transform:translateX(-8173.0px)}46.496%{transform:translateX(-8916.0px)}47.492%{transform:translateX(-9659.0px)}48.018%{transform:translateX(-10402.0px)}48.627%{transform:translateX(-11145.0px)}49.538%{transform:translateX(-11888.0px)}49.871%{transform:translateX(-12631.0px)}50.518%{transform:translateX(-13374.0px)}51.017%{transform:translateX(-14117.0px)}51.612%{transform:translateX(-14860.0px)}52.317%{transform:translateX(-15603.0px)}52.831%{transform:translateX(-16346.0px)}53.410%{transform:translateX(-17089.0px)}53.949%{transform:translateX(-17832.0px)}55.102%{transform:translateX(-18575.0px)}55.408%{transform:translateX(-19318.0px)}55.979%{transform:translateX(-20061.0px)}56.303%{transform:translateX(-20804.0px)}57.004%{transform:translateX(-21547.0px)}57.574%{transform:translateX(-22290.0px)}58.112%{transform:translateX(-23033.0px)}58.475%{transform:translateX(-23776.0px)}58.970%{transform:translateX(-24519.0px)}59.353%{transform:translateX(-25262.0px)}60.407%{transform:translateX(-26005.0px)}61.146%{transform:translateX(-26748.0px)}}.t3{animation:t3 15.50s steps(1,end) infinite}@keyframes t3{0%{transform:translateX(0)}15.713%{transform:translateX(0.0px)}64.503%{transform:translateX(-743.0px)}}.t4{animation:t4 15.50s steps(1,end) infinite}@keyframes t4{0%{transform:translateX(0)}15.713%{transform:translateX(0.0px)}64.503%{transform:translateX(-743.0px)}}.t5{animation:t5 15.50s steps(1,end) infinite}@keyframes t5{0%{transform:translateX(0)}15.713%{transform:translateX(0.0px)}64.503%{transform:translateX(-743.0px)}}.t6{animation:t6 15.50s steps(1,end) infinite}@keyframes t6{0%{transform:translateX(0)}15.713%{transform:translateX(0.0px)}64.503%{transform:translateX(-743.0px)}}.t7{animation:t7 15.50s steps(1,end) infinite}@keyframes t7{0%{transform:translateX(0)}15.713%{transform:translateX(0.0px)}64.503%{transform:translateX(-743.0px)}73.536%{transform:translateX(-1486.0px)}74.190%{transform:translateX(-2229.0px)}}.t8{animation:t8 15.50s steps(1,end) infinite}@keyframes t8{0%{transform:translateX(0)}15.713%{transform:translateX(0.0px)}77.417%{transform:translateX(-743.0px)}}.t9{animation:t9 15.50s steps(1,end) infinite}@keyframes t9{0%{transform:translateX(0)}15.713%{transform:translateX(0.0px)}77.417%{transform:translateX(-743.0px)}}.tc{animation:tc 15.50s steps(1,end) infinite}@keyframes tc{0%{opacity:0}15.713%{opacity:1;transform:translate(141.5px,0.0px)}24.746%{opacity:1;transform:translate(150.4px,0.0px)}25.210%{opacity:1;transform:translate(159.2px,0.0px)}25.792%{opacity:1;transform:translate(168.1px,0.0px)}26.170%{opacity:1;transform:translate(176.9px,0.0px)}26.570%{opacity:1;transform:translate(185.8px,0.0px)}26.902%{opacity:1;transform:translate(194.6px,0.0px)}30.198%{opacity:1;transform:translate(141.5px,40.0px)}39.231%{opacity:1;transform:translate(150.4px,40.0px)}39.890%{opacity:1;transform:translate(159.2px,40.0px)}40.386%{opacity:1;transform:translate(168.1px,40.0px)}40.794%{opacity:1;transform:translate(176.9px,40.0px)}41.319%{opacity:1;transform:translate(185.8px,40.0px)}41.974%{opacity:1;transform:translate(194.6px,40.0px)}42.413%{opacity:1;transform:translate(203.4px,40.0px)}42.971%{opacity:1;transform:translate(212.3px,40.0px)}43.650%{opacity:1;transform:translate(221.1px,40.0px)}44.254%{opacity:1;transform:translate(230.0px,40.0px)}44.945%{opacity:1;transform:translate(238.8px,40.0px)}45.333%{opacity:1;transform:translate(247.7px,40.0px)}45.994%{opacity:1;transform:translate(256.5px,40.0px)}46.496%{opacity:1;transform:translate(265.4px,40.0px)}47.075%{opacity:1;transform:translate(274.2px,40.0px)}47.492%{opacity:1;transform:translate(283.0px,40.0px)}48.018%{opacity:1;transform:translate(291.9px,40.0px)}48.627%{opacity:1;transform:translate(300.7px,40.0px)}49.149%{opacity:1;transform:translate(309.6px,40.0px)}49.538%{opacity:1;transform:translate(318.4px,40.0px)}49.871%{opacity:1;transform:translate(327.3px,40.0px)}50.518%{opacity:1;transform:translate(336.1px,40.0px)}51.017%{opacity:1;transform:translate(345.0px,40.0px)}51.612%{opacity:1;transform:translate(353.8px,40.0px)}52.317%{opacity:1;transform:translate(362.7px,40.0px)}52.831%{opacity:1;transform:translate(371.5px,40.0px)}53.410%{opacity:1;transform:translate(380.3px,40.0px)}53.949%{opacity:1;transform:translate(389.2px,40.0px)}54.558%{opacity:1;transform:translate(398.0px,40.0px)}55.102%{opacity:1;transform:translate(406.9px,40.0px)}55.408%{opacity:1;transform:translate(415.7px,40.0px)}55.979%{opacity:1;transform:translate(424.6px,40.0px)}56.303%{opacity:1;transform:translate(433.4px,40.0px)}57.004%{opacity:1;transform:translate(442.3px,40.0px)}57.574%{opacity:1;transform:translate(451.1px,40.0px)}58.112%{opacity:1;transform:translate(460.0px,40.0px)}58.475%{opacity:1;transform:translate(468.8px,40.0px)}58.970%{opacity:1;transform:translate(477.6px,40.0px)}59.353%{opacity:1;transform:translate(486.5px,40.0px)}59.666%{opacity:1;transform:translate(495.3px,40.0px)}60.407%{opacity:1;transform:translate(504.2px,40.0px)}61.146%{opacity:1;transform:translate(513.0px,40.0px)}64.503%{opacity:1;transform:translate(185.8px,140.0px)}73.536%{opacity:1;transform:translate(194.6px,140.0px)}74.190%{opacity:1;transform:translate(203.4px,140.0px)}77.417%{opacity:1;transform:translate(185.8px,180.0px)}}.tb{animation:tb 1.1s steps(1,end) infinite}@keyframes tb{50%{opacity:0}}</style>
+<defs><clipPath id="c0"><rect x="0" y="318" width="263" height="233"/></clipPath><clipPath id="c1"><rect x="264" y="0" width="760" height="600"/></clipPath><clipPath id="c2"><rect x="296" y="166" width="696" height="385"/></clipPath><clipPath id="c3"><rect x="309" y="240" width="187" height="36"/></clipPath><clipPath id="c4"><rect x="331" y="328" width="165" height="36"/></clipPath><clipPath id="c5"><rect x="331" y="375" width="165" height="36"/></clipPath><clipPath id="c6"><rect x="331" y="422" width="165" height="36"/></clipPath><clipPath id="c7"><rect x="331" y="510" width="165" height="36"/></clipPath><clipPath id="c8"><rect x="45" y="284" width="195" height="20"/></clipPath><clipPath id="c9"><rect x="48" y="355" width="153" height="20"/></clipPath><clipPath id="c10"><rect x="48" y="375" width="153" height="16"/></clipPath><clipPath id="c11"><rect x="24" y="397" width="60" height="20"/></clipPath><clipPath id="c12"><rect x="59" y="423" width="142" height="20"/></clipPath><clipPath id="c13"><rect x="59" y="443" width="118" height="16"/></clipPath><clipPath id="c14"><rect x="59" y="461" width="142" height="20"/></clipPath><clipPath id="c15"><rect x="59" y="481" width="142" height="16"/></clipPath><clipPath id="c16"><rect x="59" y="499" width="142" height="20"/></clipPath><clipPath id="c17"><rect x="59" y="519" width="118" height="16"/></clipPath><clipPath id="c18"><rect x="24" y="541" width="42" height="10"/></clipPath><clipPath id="c19"><rect x="59" y="567" width="142" height="0"/></clipPath><clipPath id="c20"><rect x="59" y="587" width="118" height="0"/></clipPath><clipPath id="c21"><rect x="41" y="566" width="188" height="20"/></clipPath><clipPath id="c22"><rect x="959" y="41" width="1" height="1"/></clipPath><clipPath id="c23"><rect x="329" y="115" width="296" height="20"/></clipPath><clipPath id="c24"><rect x="862" y="182" width="1" height="1"/></clipPath><clipPath id="c25"><rect x="329" y="240" width="44" height="20"/></clipPath><clipPath id="c26"><rect x="329" y="260" width="167" height="16"/></clipPath><clipPath id="c27"><rect x="644" y="248" width="68" height="20"/></clipPath><clipPath id="c28"><rect x="351" y="328" width="26" height="20"/></clipPath><clipPath id="c29"><rect x="351" y="348" width="145" height="16"/></clipPath><clipPath id="c30"><rect x="644" y="336" width="68" height="20"/></clipPath><clipPath id="c31"><rect x="351" y="375" width="35" height="20"/></clipPath><clipPath id="c32"><rect x="351" y="395" width="145" height="16"/></clipPath><clipPath id="c33"><rect x="644" y="372" width="68" height="20"/></clipPath><clipPath id="c34"><rect x="644" y="398" width="47" height="16"/></clipPath><clipPath id="c35"><rect x="351" y="422" width="36" height="20"/></clipPath><clipPath id="c36"><rect x="351" y="442" width="145" height="16"/></clipPath><clipPath id="c37"><rect x="644" y="430" width="68" height="20"/></clipPath><clipPath id="c38"><rect x="351" y="510" width="44" height="20"/></clipPath><clipPath id="c39"><rect x="351" y="530" width="145" height="16"/></clipPath><clipPath id="c40"><rect x="644" y="518" width="68" height="20"/></clipPath><clipPath id="c41"><rect x="264" y="0" width="179" height="39"/></clipPath><clipPath id="c42"><rect x="48" y="349" width="153" height="20"/></clipPath><clipPath id="c43"><rect x="48" y="369" width="146" height="16"/></clipPath><clipPath id="c44"><rect x="48" y="423" width="153" height="20"/></clipPath><clipPath id="c45"><rect x="48" y="443" width="153" height="16"/></clipPath><clipPath id="c46"><rect x="24" y="465" width="60" height="20"/></clipPath><clipPath id="c47"><rect x="59" y="491" width="142" height="20"/></clipPath><clipPath id="c48"><rect x="59" y="511" width="118" height="16"/></clipPath><clipPath id="c49"><rect x="59" y="529" width="142" height="20"/></clipPath><clipPath id="c50"><rect x="59" y="549" width="142" height="2"/></clipPath><clipPath id="c51"><rect x="24" y="609" width="42" height="0"/></clipPath><clipPath id="c52"><rect x="59" y="635" width="142" height="0"/></clipPath><clipPath id="c53"><rect x="59" y="655" width="118" height="0"/></clipPath><clipPath id="c54"><rect x="333" y="10" width="35" height="20"/></clipPath><clipPath id="c55"><rect x="340" y="52" width="109" height="16"/></clipPath><clipPath id="window"><rect width="1024" height="600" rx="10"/></clipPath><clipPath id="screen"><rect width="743" height="500"/></clipPath></defs>
+<g clip-path="url(#window)">
+<g class="s2"><rect width="1024" height="600" fill="rgba(0, 0, 0, 0)"/><rect x="0" y="0" width="264" height="600" fill="rgb(16, 25, 28)"/><rect x="263" y="0" width="1" height="600" fill="rgb(36, 52, 58)"/><rect x="12" y="278" width="239" height="32" rx="6" fill="rgb(10, 17, 19)"/><rect x="12" y="278" width="238" height="31" rx="6" fill="none" stroke="rgb(92, 113, 119)" stroke-width="1" transform="translate(0.5 0.5)"/><rect x="6" y="348" width="251" height="38" rx="6" fill="rgb(18, 54, 47)" clip-path="url(#c0)"/><rect x="21" y="362" width="10" height="10" rx="2" fill="rgb(61, 219, 182)" clip-path="url(#c0)"/><rect x="21" y="436" width="9" height="9" rx="2" fill="none" stroke="rgb(92, 113, 119)" stroke-width="1" transform="translate(0.5 0.5)" clip-path="url(#c0)"/><rect x="10" y="490" width="1" height="114" fill="rgb(36, 52, 58)" clip-path="url(#c0)"/><rect x="32" y="504" width="9" height="9" rx="2" fill="none" stroke="rgb(92, 113, 119)" stroke-width="1" transform="translate(0.5 0.5)" clip-path="url(#c0)"/><rect x="17" y="528" width="240" height="38" rx="6" fill="rgb(18, 54, 47)" clip-path="url(#c0)"/><rect x="32" y="542" width="10" height="10" rx="2" fill="rgb(61, 219, 182)" clip-path="url(#c0)"/><rect x="32" y="580" width="9" height="9" rx="2" fill="none" stroke="rgb(92, 113, 119)" stroke-width="1" transform="translate(0.5 0.5)" clip-path="url(#c0)"/><rect x="10" y="634" width="1" height="38" fill="rgb(36, 52, 58)" clip-path="url(#c0)"/><rect x="32" y="648" width="9" height="9" rx="2" fill="none" stroke="rgb(92, 113, 119)" stroke-width="1" transform="translate(0.5 0.5)" clip-path="url(#c0)"/><rect x="0" y="551" width="263" height="1" fill="rgb(36, 52, 58)"/><rect x="239" y="572" width="8" height="8" rx="2" fill="rgb(92, 113, 119)"/><rect x="264" y="0" width="760" height="40" fill="rgb(16, 25, 28)"/><rect x="264" y="39" width="760" height="1" fill="rgb(36, 52, 58)"/><rect x="264" y="0" width="138.9" height="39" fill="rgb(10, 17, 19)" clip-path="url(#c41)"/><rect x="401.9" y="0" width="1" height="39" fill="rgb(36, 52, 58)" clip-path="url(#c41)"/><rect x="264" y="37" width="138.9" height="2" fill="rgb(61, 219, 182)" clip-path="url(#c41)"/><rect x="276" y="15.5" width="8" height="8" rx="2" fill="rgb(61, 219, 182)" clip-path="url(#c41)"/><rect x="292" y="11.5" width="32.3" height="15" rx="3" fill="none" stroke="rgb(255, 107, 107)" stroke-width="1" transform="translate(0.5 0.5)" clip-path="url(#c41)"/><rect x="264" y="40" width="760" height="41" fill="rgb(10, 17, 19)"/><rect x="264" y="80" width="760" height="1" fill="rgb(36, 52, 58)"/><rect x="276" y="48" width="180.6" height="24" rx="3" fill="rgb(23, 36, 42)"/><rect x="472.6" y="48" width="86.3" height="24" rx="3" fill="rgb(61, 28, 30)"/><rect x="480.6" y="56" width="8" height="8" rx="4" fill="rgb(255, 107, 107)"/><rect x="773" y="46" width="66.9" height="27" rx="6" fill="none" stroke="rgb(92, 113, 119)" stroke-width="1" transform="translate(0.5 0.5)"/><rect x="846.9" y="46" width="66" height="27" rx="6" fill="none" stroke="rgb(92, 113, 119)" stroke-width="1" transform="translate(0.5 0.5)"/><rect x="919.9" y="46" width="91.1" height="27" rx="6" fill="none" stroke="rgb(92, 113, 119)" stroke-width="1" transform="translate(0.5 0.5)"/><rect x="264" y="81" width="760" height="519" fill="rgb(10, 17, 19)"/><rect x="274" y="89" width="746" height="500" fill="rgb(0, 0, 0)"/><rect x="274" y="89" width="746" height="500" fill="rgb(10, 17, 19)"/><svg viewBox="-60 -908 7775 1186" role="img" aria-label="MorphGate" fill="rgb(0, 0, 0)" stroke="none" stroke-width="1px" stroke-linecap="butt" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1" x="14" y="17" width="118" height="18" color="rgb(220, 230, 227)"><g transform="translate(-167.3,-980.7) scale(23.0748)" fill="rgb(0, 0, 0)" stroke="none" stroke-width="1px" stroke-linecap="butt" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1"><path d="M10 42.5V22.5a14 14 0 0 1 28 0V42.5" fill="none" stroke-width="5.5px" stroke="rgb(61, 219, 182)" stroke-linecap="butt" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1"></path><path d="M17 25.5l6 4.75-6 4.75" fill="none" stroke-width="4px" stroke-linecap="square" stroke-linejoin="miter" stroke="rgb(220, 230, 227)" fill-opacity="1" stroke-opacity="1"></path><rect x="26" y="34.5" width="6.5" height="8" fill="rgb(255, 181, 71)" stroke="none" stroke-width="1px" stroke-linecap="butt" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1"></rect></g><g transform="translate(1131.5,0)" fill="rgb(0, 0, 0)" stroke="none" stroke-width="1px" stroke-linecap="butt" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1"><path d="M61.542724609375 -609.71435546875H205.54296875V-551.028564453125H295.228759765625L227.314453125 -506.17138671875Q230.314453125 -563.8857421875 259.314453125 -595.771484375Q288.314453125 -627.6572265625 337.25732421875 -627.6572265625Q381.7144775390625 -627.6572265625 410.01446533203125 -593.4572143554688Q438.314453125 -559.2572021484375 443.8572998046875 -498.971435546875L384.6859130859375 -547.94287109375H522.885986328125L457.057373046875 -506.17138671875Q460.057373046875 -563.3714599609375 490.85736083984375 -595.5143432617188Q521.6573486328125 -627.6572265625 571.6287841796875 -627.6572265625Q626.7430419921875 -627.6572265625 659.1144409179688 -582.6143798828125Q691.48583984375 -537.571533203125 691.48583984375 -459.1143798828125V0.0H555.257080078125V-401.94287109375Q555.257080078125 -437.7427978515625 541.1856689453125 -456.12847900390625Q527.1142578125 -474.51416015625 499.94287109375 -474.51416015625Q472.771484375 -474.51416015625 458.7000732421875 -456.12847900390625Q444.628662109375 -437.7427978515625 444.628662109375 -401.94287109375V0.0H308.39990234375V-401.94287109375Q308.39990234375 -437.7427978515625 294.3284912109375 -456.12847900390625Q280.257080078125 -474.51416015625 253.085693359375 -474.51416015625Q225.914306640625 -474.51416015625 211.8428955078125 -456.12847900390625Q197.771484375 -437.7427978515625 197.771484375 -401.94287109375V0.0H61.542724609375ZM1105.0550165762793 17.94287109375Q1012.6285400390625 17.94287109375 942.728515625 -22.28570556640625Q872.8284912109375 -62.5142822265625 834.1284790039062 -135.11489649261603Q795.428466796875 -207.71551075866958 795.428466796875 -304.857177734375Q795.428466796875 -401.99884471008045 834.1284790039062 -474.599458976134Q872.8284912109375 -547.2000732421875 942.6627087008569 -587.4286499023438Q1012.4969261907762 -627.6572265625 1104.9091237714215 -627.6572265625Q1198.3714599609375 -627.6572265625 1267.771484375 -587.4286499023438Q1337.1715087890625 -547.2000732421875 1375.8715209960938 -474.599458976134Q1414.571533203125 -401.99884471008045 1414.571533203125 -304.857177734375Q1414.571533203125 -207.71551075866958 1375.8715209960938 -135.11489649261603Q1337.1715087890625 -62.5142822265625 1267.85165138615 -22.28570556640625Q1198.5317939832373 17.94287109375 1105.0550165762793 17.94287109375ZM1105.0 -113.25732421875Q1183.7142333984375 -113.25732421875 1228.5999145507812 -164.77237917342276Q1273.485595703125 -216.28743412809553 1273.485595703125 -304.857177734375Q1273.485595703125 -393.4269213406545 1228.5999145507812 -444.9419762953272Q1183.7142333984375 -496.45703125 1105.0 -496.45703125Q1026.6769663217906 -496.45703125 981.5956853093328 -444.9419762953272Q936.514404296875 -393.4269213406545 936.514404296875 -304.857177734375Q936.514404296875 -216.28743412809553 981.5956853093328 -164.77237917342276Q1026.6769663217906 -113.25732421875 1105.0 -113.25732421875ZM1550.28564453125 -609.71435546875H1814.800048828125V-556.914306640625H1849.6572265625Q1869.1715087890625 -590.800048828125 1904.8572387695312 -609.2286376953125Q1940.54296875 -627.6572265625 1985.48583984375 -627.6572265625Q2065.48583984375 -627.6572265625 2108.571533203125 -570.0714721679688Q2151.6572265625 -512.4857177734375 2151.6572265625 -404.45703125V-320.5712890625H2004.62841796875V-389.428466796875Q2004.62841796875 -490.62841796875 1923.2442980314556 -490.62841796875Q1873.028564453125 -490.62841796875 1848.4000244140625 -446.4998779296875Q1823.771484375 -402.371337890625 1823.771484375 -313.199951171875V-131.2001953125H2024.0V0H1565.428466796875V-131.2001953125H1683.656982421875V-478.51416015625H1550.28564453125ZM2285.428466796875 200.0V-609.71435546875H2429.4287109375V-549.71435546875H2464.285888671875Q2484.0108795166016 -584.71435546875 2526.748359680176 -605.21435546875Q2569.48583984375 -625.71435546875 2620.571533203125 -625.71435546875Q2701.9591503425186 -625.71435546875 2763.251059546259 -585.7286376953125Q2824.54296875 -545.742919921875 2858.5286865234375 -473.60031275002353Q2892.514404296875 -401.45770557817207 2892.514404296875 -304.9288649961173Q2892.514404296875 -208.4000244140625 2858.5286865234375 -136.18572998046875Q2824.54296875 -63.971435546875 2763.251059546259 -23.9857177734375Q2701.9591503425186 16.0 2620.571533203125 16.0Q2569.6466291756465 16.0 2526.7376822636043 -5.0Q2483.8287353515625 -26.0 2464.285888671875 -60.0H2429.4287109375V200.0ZM2586.0 -115.2001953125Q2663.199951171875 -115.2001953125 2707.314208984375 -166.21646571005545Q2751.428466796875 -217.2327361076109 2751.428466796875 -304.9449202998992Q2751.428466796875 -392.6571044921875 2707.314208984375 -443.58563232421875Q2663.199951171875 -494.51416015625 2586.0 -494.51416015625Q2508.800048828125 -494.51416015625 2464.685791015625 -443.49788975869455Q2420.571533203125 -392.4816193611391 2420.571533203125 -304.7694351688508Q2420.571533203125 -217.0572509765625 2464.685791015625 -166.12872314453125Q2508.800048828125 -115.2001953125 2586.0 -115.2001953125ZM3025.428466796875 0.0V-848.0H3169.4287109375V-555.8857421875H3204.285888671875Q3227.343017578125 -589.771484375 3266.8572998046875 -608.71435546875Q3306.37158203125 -627.6572265625 3354.8001708984375 -627.6572265625Q3423.343017578125 -627.6572265625 3472.4144287109375 -596.9286499023438Q3521.48583984375 -566.2000732421875 3548.3001098632812 -509.2857666015625Q3575.1143798828125 -452.3714599609375 3575.1143798828125 -373.085693359375V0.0H3431.1141357421875V-343.085693359375Q3431.1141357421875 -416.7427978515625 3397.6998901367188 -455.11419677734375Q3364.28564453125 -493.485595703125 3300.5142822265625 -493.485595703125Q3236.2572021484375 -493.485595703125 3202.8429565429688 -455.11419677734375Q3169.4287109375 -416.7427978515625 3169.4287109375 -343.085693359375V0.0ZM4311.54296875 -24.857177734375Q4311.54296875 48.085693359375 4274.385803222656 102.5428466796875Q4237.2286376953125 157.0 4169.128601074219 187.471435546875Q4101.028564453125 217.94287109375 4008.17138671875 217.94287109375Q3926.6856689453125 217.94287109375 3862.7427978515625 193.20001220703125Q3798.7999267578125 168.4571533203125 3759.8856201171875 123.971435546875Q3720.9713134765625 79.4857177734375 3714.5712890625 20.0H3859.48583984375Q3876.48583984375 54.314208984375 3915.9143676757812 73.985595703125Q3955.3428955078125 93.656982421875 4008.17138671875 93.656982421875Q4082.8570556640625 93.656982421875 4125.199890136719 60.74273681640625Q4167.542724609375 27.8284912109375 4167.542724609375 -30.0V-94.971435546875H4132.685546875Q4112.62841796875 -64.4857177734375 4070.8284301757812 -46.24285888671875Q4029.0284423828125 -28.0 3980.51416015625 -28.0Q3900.542724609375 -28.0 3840.7998657226562 -64.74285888671875Q3781.0570068359375 -101.4857177734375 3747.8141479492188 -167.72857666015625Q3714.5712890625 -233.971435546875 3714.5712890625 -321.94287109375Q3714.5712890625 -413.3714599609375 3747.8141479492188 -481.57147216796875Q3781.0570068359375 -549.771484375 3840.7998657226562 -587.742919921875Q3900.542724609375 -625.71435546875 3980.51416015625 -625.71435546875Q4030.51416015625 -625.71435546875 4072.3141479492188 -605.9857788085938Q4114.1141357421875 -586.2572021484375 4132.685546875 -552.800048828125H4167.542724609375V-609.71435546875H4311.54296875ZM3855.6572265625 -323.8857421875Q3855.6572265625 -244.60009765625 3898.271484375 -198.9287109375Q3940.8857421875 -153.25732421875 4015.085693359375 -153.25732421875Q4089.28564453125 -153.25732421875 4131.89990234375 -198.9287109375Q4174.51416015625 -244.60009765625 4174.51416015625 -323.8857421875Q4174.51416015625 -403.17138671875 4131.89990234375 -448.8427734375Q4089.28564453125 -494.51416015625 4015.085693359375 -494.51416015625Q3940.8857421875 -494.51416015625 3898.271484375 -448.8427734375Q3855.6572265625 -403.17138671875 3855.6572265625 -323.8857421875ZM4891.542724609375 -385.71435546875V-272.6856689453125L4703.771484375 -245.05712890625Q4668.0572509765625 -239.5142822265625 4649.0286865234375 -220.9285888671875Q4630.0001220703125 -202.3428955078125 4630.0001220703125 -174.1715087890625Q4630.0001220703125 -144.60009765625 4652.414367675781 -126.5001220703125Q4674.82861328125 -108.400146484375 4714.914306640625 -108.400146484375Q4761.5714111328125 -108.400146484375 4798.957092285156 -127.514404296875Q4836.3427734375 -146.628662109375 4858.428466796875 -178.8143310546875Q4880.51416015625 -211.0 4880.51416015625 -250.7427978515625V-380.0Q4880.51416015625 -438.6285400390625 4847.085632324219 -469.257080078125Q4813.6571044921875 -499.8856201171875 4748.0 -499.8856201171875Q4703.857177734375 -499.8856201171875 4669.985778808594 -486.8427734375Q4636.1143798828125 -473.7999267578125 4615.514404296875 -449.47137451171875Q4594.9144287109375 -425.142822265625 4588.343017578125 -390.0H4448.3427734375Q4455.314208984375 -463.8857421875 4494.2713623046875 -517.0571899414062Q4533.228515625 -570.2286376953125 4598.67138671875 -598.9429321289062Q4664.1142578125 -627.6572265625 4750.05712890625 -627.6572265625Q4880.800048828125 -627.6572265625 4951.1715087890625 -567.2000732421875Q5021.54296875 -506.742919921875 5021.54296875 -393.82861328125V0.0H4880.51416015625V-62.914306640625H4845.656982421875Q4822.0284423828125 -24.4571533203125 4781.428466796875 -4.22857666015625Q4740.8284912109375 16.0 4680.28564453125 16.0Q4619.314208984375 16.0 4574.3570556640625 -6.72857666015625Q4529.39990234375 -29.4571533203125 4504.928466796875 -70.414306640625Q4480.45703125 -111.3714599609375 4480.45703125 -165.82861328125Q4480.45703125 -242.742919921875 4532.128479003906 -291.45721435546875Q4583.7999267578125 -340.1715087890625 4679.17138671875 -354.1429443359375ZM5465.54296875 -767.6572265625V-609.71435546875H5756.628662109375V-478.51416015625H5465.54296875V-214.571533203125Q5465.54296875 -164.8190198625837 5486.6715087890625 -139.03817204066684Q5507.800048828125 -113.25732421875 5549.028564453125 -113.25732421875Q5590.527418870192 -113.25732421875 5614.7350839468145 -141.08587646484375Q5638.9427490234375 -168.9144287109375 5651.9427490234375 -229.4287109375H5780.0572509765625Q5773.6447235525475 -110.12117801092367 5712.725713024402 -46.089153458586836Q5651.806702496255 17.94287109375 5546.0 17.94287109375Q5438.129756001593 17.94287109375 5379.836240305483 -42.68572998046875Q5321.542724609375 -103.3143310546875 5321.542724609375 -214.571533203125V-478.51416015625H5188.17138671875V-609.71435546875H5321.542724609375V-767.6572265625ZM6039.571533203125 -368.800048828125H6424.028564453125L6378.7713623046875 -308.8857421875Q6378.7713623046875 -402.1142578125 6340.1856689453125 -451.7713623046875Q6301.5999755859375 -501.428466796875 6227.028564453125 -501.428466796875Q6149.82861328125 -501.428466796875 6107.1715087890625 -449.78564453125Q6064.514404296875 -398.142822265625 6064.514404296875 -308.8857421875Q6064.514404296875 -213.1143798828125 6106.685791015625 -160.70013427734375Q6148.857177734375 -108.285888671875 6231.028564453125 -108.285888671875Q6279.7427978515625 -108.285888671875 6317.4141845703125 -129.4287109375Q6355.0855712890625 -150.571533203125 6380.685546875 -188.857177734375H6523.54296875Q6503.685791015625 -124.971435546875 6461.271484375 -78.5142822265625Q6418.857177734375 -32.05712890625 6359.185729980469 -7.05712890625Q6299.5142822265625 17.94287109375 6228.1142578125 17.94287109375Q6135.199951171875 17.94287109375 6067.028503417969 -21.78570556640625Q5998.8570556640625 -61.5142822265625 5961.657043457031 -134.72857666015625Q5924.45703125 -207.94287109375 5924.45703125 -308.8857421875Q5924.45703125 -404.82861328125 5962.642761230469 -476.271484375Q6000.8284912109375 -547.71435546875 6068.985656738281 -587.685791015625Q6137.142822265625 -627.6572265625 6227.028564453125 -627.6572265625Q6313.3714599609375 -627.6572265625 6376.500061035156 -589.4429321289062Q6439.628662109375 -551.2286376953125 6473.800109863281 -480.02862548828125Q6507.9715576171875 -408.82861328125 6507.9715576171875 -309.914306640625Q6507.9715576171875 -296.4857177734375 6506.98583984375 -283.0714111328125Q6506.0001220703125 -269.6571044921875 6504.514404296875 -258.17138671875H6039.571533203125Z" fill="rgb(220, 230, 227)" stroke="none" stroke-width="1px" stroke-linecap="butt" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1"></path></g></svg><svg viewBox="0 0 24 24" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="round" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1" x="173" y="18" width="16" height="16" color="rgb(140, 157, 155)"><path d="M4 6h9M19 6h1M4 12h3M13 12h7M4 18h11M21 18h-1" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="round" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1"></path><circle cx="16" cy="6" r="2.5" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="round" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1"></circle><circle cx="10" cy="12" r="2.5" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="round" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1"></circle><circle cx="18" cy="18" r="2.5" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="round" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1"></circle></svg><svg viewBox="0 0 24 24" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="butt" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1" x="203" y="18" width="16" height="16" color="rgb(140, 157, 155)"><circle cx="8" cy="15" r="4" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="butt" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1"></circle><path d="M11 12l8-8M16 7l2 2M14 9l2 2" stroke-linecap="round" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1"></path></svg><svg viewBox="0 0 24 24" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="butt" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1" x="233" y="18" width="16" height="16" color="rgb(140, 157, 155)"><rect x="5" y="11" width="14" height="10" rx="2" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="butt" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1"></rect><path d="M8 11V8a4 4 0 0 1 8 0v3" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="butt" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1"></path></svg><svg viewBox="0 0 24 24" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="butt" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1" x="16" y="59.5" width="15" height="15" color="rgb(140, 157, 155)"><rect x="4" y="4" width="16" height="7" rx="2" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="butt" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1"></rect><rect x="4" y="13" width="16" height="7" rx="2" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="butt" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1"></rect><path d="M8 7.5h.01M8 16.5h.01" stroke-linecap="round" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1"></path></svg><svg viewBox="0 0 24 24" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="butt" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1" x="16" y="90.5" width="15" height="15" color="rgb(140, 157, 155)"><path d="M3 6a2 2 0 0 1 2-2h4l2 2h8a2 2 0 0 1 2 2v10a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2zM12 10v6M9 13h6" stroke-linecap="round" stroke-linejoin="round" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" fill-opacity="1" stroke-opacity="1"></path></svg><svg viewBox="0 0 24 24" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="butt" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1" x="16" y="121.5" width="15" height="15" color="rgb(140, 157, 155)"><circle cx="8" cy="15" r="4" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="butt" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1"></circle><path d="M11 12l8-8M16 7l2 2" stroke-linecap="round" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1"></path></svg><svg viewBox="0 0 24 24" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="butt" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1" x="16" y="152.5" width="15" height="15" color="rgb(140, 157, 155)"><path d="M5 8l4 4-4 4M12 16h7" stroke-linecap="round" stroke-linejoin="round" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" fill-opacity="1" stroke-opacity="1"></path></svg><svg viewBox="0 0 24 24" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="butt" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1" x="16" y="183.5" width="15" height="15" color="rgb(140, 157, 155)"><path d="M4 8h15l-3-3M20 16H5l3 3" stroke-linecap="round" stroke-linejoin="round" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" fill-opacity="1" stroke-opacity="1"></path></svg><svg viewBox="0 0 24 24" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="butt" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1" x="16" y="214.5" width="15" height="15" color="rgb(140, 157, 155)"><path d="M12 3l7 3v5c0 4.5-3 8.5-7 10-4-1.5-7-5.5-7-10V6z" stroke-linejoin="round" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="butt" fill-opacity="1" stroke-opacity="1"></path></svg><svg viewBox="0 0 24 24" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="butt" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1" x="16" y="245.5" width="15" height="15" color="rgb(140, 157, 155)"><rect x="3" y="5" width="18" height="14" rx="2" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="butt" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1"></rect><path d="M7 10l3 2-3 2M12 14h4" stroke-linecap="round" stroke-linejoin="round" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" fill-opacity="1" stroke-opacity="1"></path></svg><svg viewBox="0 0 24 24" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="round" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1" x="23" y="287" width="14" height="14" color="rgb(140, 157, 155)"><circle cx="11" cy="11" r="6" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="round" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1"></circle><path d="M20 20l-4.5-4.5" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="round" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1"></path></svg><g clip-path="url(#c0)"><svg viewBox="0 0 24 24" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="butt" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1" x="213.5" y="360.5" width="13" height="13" color="rgb(140, 157, 155)"><path d="M3 6a2 2 0 0 1 2-2h4l2 2h8a2 2 0 0 1 2 2v10a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2z" stroke-linejoin="round" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="butt" fill-opacity="1" stroke-opacity="1"></path></svg></g><g clip-path="url(#c0)"><svg viewBox="0 0 24 24" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="butt" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1" x="235.5" y="360.5" width="13" height="13" color="rgb(140, 157, 155)"><path d="M4 20h4L19 9l-4-4L4 16v4z" stroke-linejoin="round" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="butt" fill-opacity="1" stroke-opacity="1"></path></svg></g><g clip-path="url(#c0)"><svg viewBox="0 0 24 24" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="butt" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1" x="215" y="400" width="14" height="14" color="rgb(140, 157, 155)"><path d="M3 6a2 2 0 0 1 2-2h4l2 2h8a2 2 0 0 1 2 2v10a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2zM12 10v6M9 13h6" stroke-linecap="round" stroke-linejoin="round" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" fill-opacity="1" stroke-opacity="1"></path></svg></g><g clip-path="url(#c0)"><svg viewBox="0 0 24 24" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="round" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1" x="237" y="400" width="14" height="14" color="rgb(140, 157, 155)"><path d="M12 5v14M5 12h14" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="round" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1"></path></svg></g><g clip-path="url(#c0)"><g transform="translate(12 475) matrix(0 1 -1 0 0 0) translate(-12 -475)"><svg viewBox="0 0 24 24" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="butt" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1" x="6" y="469" width="12" height="12" color="rgb(140, 157, 155)"><path d="M9 6l6 6-6 6" stroke-linecap="round" stroke-linejoin="round" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" fill-opacity="1" stroke-opacity="1"></path></svg></g></g><g clip-path="url(#c0)"><svg viewBox="0 0 24 24" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="butt" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1" x="213.5" y="540.5" width="13" height="13" color="rgb(140, 157, 155)"><path d="M3 6a2 2 0 0 1 2-2h4l2 2h8a2 2 0 0 1 2 2v10a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2z" stroke-linejoin="round" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="butt" fill-opacity="1" stroke-opacity="1"></path></svg></g><g clip-path="url(#c0)"><svg viewBox="0 0 24 24" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="butt" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1" x="235.5" y="540.5" width="13" height="13" color="rgb(140, 157, 155)"><path d="M4 20h4L19 9l-4-4L4 16v4z" stroke-linejoin="round" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="butt" fill-opacity="1" stroke-opacity="1"></path></svg></g><g clip-path="url(#c0)"><g transform="translate(12 619) matrix(0 1 -1 0 0 0) translate(-12 -619)"><svg viewBox="0 0 24 24" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="butt" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1" x="6" y="613" width="12" height="12" color="rgb(140, 157, 155)"><path d="M9 6l6 6-6 6" stroke-linecap="round" stroke-linejoin="round" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" fill-opacity="1" stroke-opacity="1"></path></svg></g></g><svg viewBox="0 0 24 24" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="butt" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1" x="16" y="568.5" width="15" height="15" color="rgb(140, 157, 155)"><path d="M7 18h10a4 4 0 0 0 .5-7.97A6 6 0 0 0 6.1 9.2 4.5 4.5 0 0 0 7 18z" stroke-linejoin="round" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="butt" fill-opacity="1" stroke-opacity="1"></path></svg><g clip-path="url(#c41)"><svg viewBox="0 0 24 24" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="round" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1" x="379.9" y="13.5" width="12" height="12" color="rgb(140, 157, 155)"><path d="M6 6l12 12M18 6L6 18" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="round" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1"></path></svg></g><g clip-path="url(#c41)"><svg viewBox="0 0 24 24" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="round" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1" x="415.4" y="12" width="15" height="15" color="rgb(140, 157, 155)"><path d="M12 5v14M5 12h14" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="round" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1"></path></svg></g><svg viewBox="0 0 24 24" fill="none" stroke="rgb(220, 230, 227)" stroke-width="2px" stroke-linecap="round" stroke-linejoin="round" fill-opacity="1" stroke-opacity="1" x="284" y="53.5" width="8.9" height="13" color="rgb(220, 230, 227)"><path d="M5 8l4 4-4 4M12 16h7" fill="none" stroke="rgb(220, 230, 227)" stroke-width="2px" stroke-linecap="round" stroke-linejoin="round" fill-opacity="1" stroke-opacity="1"></path></svg><svg viewBox="0 0 24 24" fill="none" stroke="rgb(220, 230, 227)" stroke-width="2px" stroke-linecap="butt" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1" x="784" y="53.5" width="13" height="13" color="rgb(220, 230, 227)"><path d="M3 6a2 2 0 0 1 2-2h4l2 2h8a2 2 0 0 1 2 2v10a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2z" stroke-linejoin="round" fill="none" stroke="rgb(220, 230, 227)" stroke-width="2px" stroke-linecap="butt" fill-opacity="1" stroke-opacity="1"></path></svg><svg viewBox="0 0 24 24" fill="none" stroke="rgb(220, 230, 227)" stroke-width="2px" stroke-linecap="round" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1" x="857.9" y="53.5" width="13" height="13" color="rgb(220, 230, 227)"><rect x="3" y="4" width="18" height="16" rx="2" fill="none" stroke="rgb(220, 230, 227)" stroke-width="2px" stroke-linecap="round" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1"></rect><path d="M12 4v16" fill="none" stroke="rgb(220, 230, 227)" stroke-width="2px" stroke-linecap="round" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1"></path></svg><text x="41" y="66.5" class="f0" font-size="13" fill="rgb(140, 157, 155)" textLength="32.5">Hosts</text><text x="239.4" y="67" class="f1" font-size="12" fill="rgb(140, 157, 155)">5</text><text x="41" y="97.5" class="f0" font-size="13" fill="rgb(140, 157, 155)" textLength="40.9">Groups</text><text x="239.4" y="98" class="f1" font-size="12" fill="rgb(140, 157, 155)">2</text><text x="41" y="128.5" class="f0" font-size="13" fill="rgb(140, 157, 155)" textLength="26.7">Keys</text><text x="239.4" y="129" class="f1" font-size="12" fill="rgb(140, 157, 155)">1</text><text x="41" y="159.5" class="f0" font-size="13" fill="rgb(140, 157, 155)" textLength="50.2">Snippets</text><text x="41" y="190.5" class="f0" font-size="13" fill="rgb(140, 157, 155)" textLength="44.6">Tunnels</text><text x="41" y="221.5" class="f0" font-size="13" fill="rgb(140, 157, 155)" textLength="30.5">VPNs</text><text x="41" y="252.5" class="f0" font-size="13" fill="rgb(140, 157, 155)" textLength="72">Session logs</text><text x="45" y="294" class="f0" font-size="13" fill="rgb(220, 230, 227)" textLength="73.9" clip-path="url(#c8)">Search hosts</text><text x="14" y="336" class="f0" font-size="11" font-weight="700" letter-spacing="0.88" fill="rgb(140, 157, 155)" textLength="33.1" clip-path="url(#c0)">OPEN</text><text x="48" y="358.5" class="f0" font-size="13" font-weight="600" fill="rgb(220, 230, 227)" textLength="34.6" clip-path="url(#c42)">web-1</text><text x="48" y="377" class="f1" font-size="11" fill="rgb(140, 157, 155)" textLength="146" clip-path="url(#c43)">deploy@10.0.12.34:22</text><text x="14" y="407" class="f0" font-size="11" font-weight="700" letter-spacing="0.88" fill="rgb(140, 157, 155)" textLength="40.3" clip-path="url(#c0)">HOSTS</text><text x="48" y="432.5" class="f0" font-size="13" font-weight="600" fill="rgb(220, 230, 227)" textLength="44.2" clip-path="url(#c44)">bastion</text><text x="48" y="451" class="f1" font-size="11" fill="rgb(140, 157, 155)" textLength="152.9" clip-path="url(#c45)">deploy@bastion.shop.e…</text><text x="24" y="475" class="f0" font-size="12" font-weight="600" fill="rgb(140, 157, 155)" textLength="59.8" clip-path="url(#c46)">Production</text><text x="89.8" y="475" class="f0" font-size="12" fill="rgb(140, 157, 155)" clip-path="url(#c0)">3</text><text x="59" y="500.5" class="f0" font-size="13" font-weight="600" fill="rgb(220, 230, 227)" textLength="25.8" clip-path="url(#c47)">db-1</text><text x="59" y="519" class="f1" font-size="11" fill="rgb(140, 157, 155)" textLength="118.2" clip-path="url(#c48)">deploy@10.0.12.40</text><text x="59" y="538.5" class="f0" font-size="13" font-weight="600" fill="rgb(220, 230, 227)" textLength="34.6" clip-path="url(#c49)">web-1</text><text x="59" y="557" class="f1" font-size="11" fill="rgb(140, 157, 155)" textLength="138.7" clip-path="url(#c50)">deploy@10.0.12.34:…</text><text x="59" y="576.5" class="f0" font-size="13" font-weight="600" fill="rgb(220, 230, 227)" textLength="36.4" clip-path="url(#c19)">web-2</text><text x="59" y="595" class="f1" font-size="11" fill="rgb(140, 157, 155)" textLength="118.2" clip-path="url(#c20)">deploy@10.0.12.35</text><text x="24" y="619" class="f0" font-size="12" font-weight="600" fill="rgb(140, 157, 155)" textLength="42.1" clip-path="url(#c51)">Staging</text><text x="72.1" y="619" class="f0" font-size="12" fill="rgb(140, 157, 155)" clip-path="url(#c0)">1</text><text x="59" y="644.5" class="f0" font-size="13" font-weight="600" fill="rgb(220, 230, 227)" textLength="44.4" clip-path="url(#c52)">staging</text><text x="59" y="663" class="f1" font-size="11" fill="rgb(140, 157, 155)" textLength="118.2" clip-path="url(#c53)">deploy@10.0.20.11</text><text x="41" y="575.5" class="f0" font-size="13" fill="rgb(140, 157, 155)" textLength="45.6" clip-path="url(#c21)">Sync off</text><text x="298" y="19" class="f0" font-size="10" font-weight="700" letter-spacing="0.8" fill="rgb(255, 107, 107)" clip-path="url(#c41)">REC</text><text x="333.3" y="19" class="f0" font-size="13" font-weight="600" fill="rgb(220, 230, 227)" textLength="34.6" clip-path="url(#c54)">web-1</text><text x="298.9" y="59.5" class="f0" font-size="13" font-weight="600" fill="rgb(220, 230, 227)" textLength="34.6">web-1</text><text x="339.5" y="60" class="f1" font-size="12" fill="rgb(140, 157, 155)" textLength="103.5" clip-path="url(#c55)">deploy@10.0.…</text><text x="494.6" y="60" class="f0" font-size="12" font-weight="700" fill="rgb(255, 107, 107)" textLength="56.3">Recording</text><text x="574.9" y="60" class="f1" font-size="12" fill="rgb(140, 157, 155)" textLength="53.1">ED25519</text><text x="635.6" y="60" class="f1" font-size="12" fill="rgb(140, 157, 155)" textLength="121.3">SHA256:803o…W12k</text><text x="803" y="59.5" class="f0" font-size="13" fill="rgb(220, 230, 227)" textLength="26.9">Files</text><text x="876.9" y="59.5" class="f0" font-size="13" fill="rgb(220, 230, 227)" textLength="26">Split</text><text x="930.9" y="60" class="f1" font-size="11" fill="rgb(220, 230, 227)">&gt;_</text><text x="950.8" y="59.5" class="f0" font-size="13" fill="rgb(220, 230, 227)" textLength="50.2">Snippets</text><g class="term" transform="translate(274 89)" clip-path="url(#screen)" font-size="14" fill="#dce6e3"><g transform="translate(0 0.0)"><g class="t0"><g transform="translate(0.0 0)"><text x="0.0" y="10.0" fill="#3ddbb6" textLength="106.1">deploy@web-1</text><text x="106.1" y="10.0">:</text><text x="115.0" y="10.0" fill="#6cb6ff">~</text><text x="123.8" y="10.0">$</text></g><g transform="translate(743.0 0)"><text x="0.0" y="10.0" fill="#3ddbb6" textLength="106.1">deploy@web-1</text><text x="106.1" y="10.0">:</text><text x="115.0" y="10.0" fill="#6cb6ff">~</text><text x="123.8" y="10.0">$</text><text x="141.5" y="10.0">u</text></g><g transform="translate(1486.0 0)"><text x="0.0" y="10.0" fill="#3ddbb6" textLength="106.1">deploy@web-1</text><text x="106.1" y="10.0">:</text><text x="115.0" y="10.0" fill="#6cb6ff">~</text><text x="123.8" y="10.0">$</text><text x="141.5" y="10.0" textLength="17.7">up</text></g><g transform="translate(2229.0 0)"><text x="0.0" y="10.0" fill="#3ddbb6" textLength="106.1">deploy@web-1</text><text x="106.1" y="10.0">:</text><text x="115.0" y="10.0" fill="#6cb6ff">~</text><text x="123.8" y="10.0">$</text><text x="141.5" y="10.0" textLength="26.5">upt</text></g><g transform="translate(2972.0 0)"><text x="0.0" y="10.0" fill="#3ddbb6" textLength="106.1">deploy@web-1</text><text x="106.1" y="10.0">:</text><text x="115.0" y="10.0" fill="#6cb6ff">~</text><text x="123.8" y="10.0">$</text><text x="141.5" y="10.0" textLength="35.4">upti</text></g><g transform="translate(3715.0 0)"><text x="0.0" y="10.0" fill="#3ddbb6" textLength="106.1">deploy@web-1</text><text x="106.1" y="10.0">:</text><text x="115.0" y="10.0" fill="#6cb6ff">~</text><text x="123.8" y="10.0">$</text><text x="141.5" y="10.0" textLength="44.2">uptim</text></g><g transform="translate(4458.0 0)"><text x="0.0" y="10.0" fill="#3ddbb6" textLength="106.1">deploy@web-1</text><text x="106.1" y="10.0">:</text><text x="115.0" y="10.0" fill="#6cb6ff">~</text><text x="123.8" y="10.0">$</text><text x="141.5" y="10.0" textLength="53.1">uptime</text></g></g></g><g transform="translate(0 20.0)"><g class="t1"><g transform="translate(0.0 0)"></g><g transform="translate(743.0 0)"><text x="8.8" y="10.0" textLength="70.8">12:29:31</text><text x="88.5" y="10.0" textLength="17.7">up</text><text x="115.0" y="10.0">7</text><text x="132.7" y="10.0" textLength="44.2">days,</text><text x="185.8" y="10.0" textLength="53.1">22:16,</text><text x="256.5" y="10.0">4</text><text x="274.2" y="10.0" textLength="53.1">users,</text><text x="345.0" y="10.0" textLength="35.4">load</text><text x="389.2" y="10.0" textLength="70.8">average:</text><text x="468.8" y="10.0" textLength="44.2">2.52,</text><text x="521.9" y="10.0" textLength="44.2">4.16,</text><text x="574.9" y="10.0" textLength="35.4">4.88</text></g></g></g><g transform="translate(0 40.0)"><g class="t2"><g transform="translate(0.0 0)"></g><g transform="translate(743.0 0)"><text x="0.0" y="10.0" fill="#3ddbb6" textLength="106.1">deploy@web-1</text><text x="106.1" y="10.0">:</text><text x="115.0" y="10.0" fill="#6cb6ff">~</text><text x="123.8" y="10.0">$</text></g><g transform="translate(1486.0 0)"><text x="0.0" y="10.0" fill="#3ddbb6" textLength="106.1">deploy@web-1</text><text x="106.1" y="10.0">:</text><text x="115.0" y="10.0" fill="#6cb6ff">~</text><text x="123.8" y="10.0">$</text><text x="141.5" y="10.0">c</text></g><g transform="translate(2229.0 0)"><text x="0.0" y="10.0" fill="#3ddbb6" textLength="106.1">deploy@web-1</text><text x="106.1" y="10.0">:</text><text x="115.0" y="10.0" fill="#6cb6ff">~</text><text x="123.8" y="10.0">$</text><text x="141.5" y="10.0" textLength="17.7">cd</text></g><g transform="translate(2972.0 0)"><text x="0.0" y="10.0" fill="#3ddbb6" textLength="106.1">deploy@web-1</text><text x="106.1" y="10.0">:</text><text x="115.0" y="10.0" fill="#6cb6ff">~</text><text x="123.8" y="10.0">$</text><text x="141.5" y="10.0" textLength="17.7">cd</text><text x="168.1" y="10.0">s</text></g><g transform="translate(3715.0 0)"><text x="0.0" y="10.0" fill="#3ddbb6" textLength="106.1">deploy@web-1</text><text x="106.1" y="10.0">:</text><text x="115.0" y="10.0" fill="#6cb6ff">~</text><text x="123.8" y="10.0">$</text><text x="141.5" y="10.0" textLength="17.7">cd</text><text x="168.1" y="10.0" textLength="17.7">sh</text></g><g transform="translate(4458.0 0)"><text x="0.0" y="10.0" fill="#3ddbb6" textLength="106.1">deploy@web-1</text><text x="106.1" y="10.0">:</text><text x="115.0" y="10.0" fill="#6cb6ff">~</text><text x="123.8" y="10.0">$</text><text x="141.5" y="10.0" textLength="17.7">cd</text><text x="168.1" y="10.0" textLength="26.5">sho</text></g><g transform="translate(5201.0 0)"><text x="0.0" y="10.0" fill="#3ddbb6" textLength="106.1">deploy@web-1</text><text x="106.1" y="10.0">:</text><text x="115.0" y="10.0" fill="#6cb6ff">~</text><text x="123.8" y="10.0">$</text><text x="141.5" y="10.0" textLength="17.7">cd</text><text x="168.1" y="10.0" textLength="35.4">shop</text></g><g transform="translate(5944.0 0)"><text x="0.0" y="10.0" fill="#3ddbb6" textLength="106.1">deploy@web-1</text><text x="106.1" y="10.0">:</text><text x="115.0" y="10.0" fill="#6cb6ff">~</text><text x="123.8" y="10.0">$</text><text x="141.5" y="10.0" textLength="17.7">cd</text><text x="168.1" y="10.0" textLength="35.4">shop</text><text x="212.3" y="10.0">&amp;</text></g><g transform="translate(6687.0 0)"><text x="0.0" y="10.0" fill="#3ddbb6" textLength="106.1">deploy@web-1</text><text x="106.1" y="10.0">:</text><text x="115.0" y="10.0" fill="#6cb6ff">~</text><text x="123.8" y="10.0">$</text><text x="141.5" y="10.0" textLength="17.7">cd</text><text x="168.1" y="10.0" textLength="35.4">shop</text><text x="212.3" y="10.0" textLength="17.7">&amp;&amp;</text></g><g transform="translate(7430.0 0)"><text x="0.0" y="10.0" fill="#3ddbb6" textLength="106.1">deploy@web-1</text><text x="106.1" y="10.0">:</text><text x="115.0" y="10.0" fill="#6cb6ff">~</text><text x="123.8" y="10.0">$</text><text x="141.5" y="10.0" textLength="17.7">cd</text><text x="168.1" y="10.0" textLength="35.4">shop</text><text x="212.3" y="10.0" textLength="17.7">&amp;&amp;</text><text x="238.8" y="10.0">g</text></g><g transform="translate(8173.0 0)"><text x="0.0" y="10.0" fill="#3ddbb6" textLength="106.1">deploy@web-1</text><text x="106.1" y="10.0">:</text><text x="115.0" y="10.0" fill="#6cb6ff">~</text><text x="123.8" y="10.0">$</text><text x="141.5" y="10.0" textLength="17.7">cd</text><text x="168.1" y="10.0" textLength="35.4">shop</text><text x="212.3" y="10.0" textLength="17.7">&amp;&amp;</text><text x="238.8" y="10.0" textLength="17.7">gi</text></g><g transform="translate(8916.0 0)"><text x="0.0" y="10.0" fill="#3ddbb6" textLength="106.1">deploy@web-1</text><text x="106.1" y="10.0">:</text><text x="115.0" y="10.0" fill="#6cb6ff">~</text><text x="123.8" y="10.0">$</text><text x="141.5" y="10.0" textLength="17.7">cd</text><text x="168.1" y="10.0" textLength="35.4">shop</text><text x="212.3" y="10.0" textLength="17.7">&amp;&amp;</text><text x="238.8" y="10.0" textLength="26.5">git</text></g><g transform="translate(9659.0 0)"><text x="0.0" y="10.0" fill="#3ddbb6" textLength="106.1">deploy@web-1</text><text x="106.1" y="10.0">:</text><text x="115.0" y="10.0" fill="#6cb6ff">~</text><text x="123.8" y="10.0">$</text><text x="141.5" y="10.0" textLength="17.7">cd</text><text x="168.1" y="10.0" textLength="35.4">shop</text><text x="212.3" y="10.0" textLength="17.7">&amp;&amp;</text><text x="238.8" y="10.0" textLength="26.5">git</text><text x="274.2" y="10.0">l</text></g><g transform="translate(10402.0 0)"><text x="0.0" y="10.0" fill="#3ddbb6" textLength="106.1">deploy@web-1</text><text x="106.1" y="10.0">:</text><text x="115.0" y="10.0" fill="#6cb6ff">~</text><text x="123.8" y="10.0">$</text><text x="141.5" y="10.0" textLength="17.7">cd</text><text x="168.1" y="10.0" textLength="35.4">shop</text><text x="212.3" y="10.0" textLength="17.7">&amp;&amp;</text><text x="238.8" y="10.0" textLength="26.5">git</text><text x="274.2" y="10.0" textLength="17.7">lo</text></g><g transform="translate(11145.0 0)"><text x="0.0" y="10.0" fill="#3ddbb6" textLength="106.1">deploy@web-1</text><text x="106.1" y="10.0">:</text><text x="115.0" y="10.0" fill="#6cb6ff">~</text><text x="123.8" y="10.0">$</text><text x="141.5" y="10.0" textLength="17.7">cd</text><text x="168.1" y="10.0" textLength="35.4">shop</text><text x="212.3" y="10.0" textLength="17.7">&amp;&amp;</text><text x="238.8" y="10.0" textLength="26.5">git</text><text x="274.2" y="10.0" textLength="26.5">log</text></g><g transform="translate(11888.0 0)"><text x="0.0" y="10.0" fill="#3ddbb6" textLength="106.1">deploy@web-1</text><text x="106.1" y="10.0">:</text><text x="115.0" y="10.0" fill="#6cb6ff">~</text><text x="123.8" y="10.0">$</text><text x="141.5" y="10.0" textLength="17.7">cd</text><text x="168.1" y="10.0" textLength="35.4">shop</text><text x="212.3" y="10.0" textLength="17.7">&amp;&amp;</text><text x="238.8" y="10.0" textLength="26.5">git</text><text x="274.2" y="10.0" textLength="26.5">log</text><text x="309.6" y="10.0">-</text></g><g transform="translate(12631.0 0)"><text x="0.0" y="10.0" fill="#3ddbb6" textLength="106.1">deploy@web-1</text><text x="106.1" y="10.0">:</text><text x="115.0" y="10.0" fill="#6cb6ff">~</text><text x="123.8" y="10.0">$</text><text x="141.5" y="10.0" textLength="17.7">cd</text><text x="168.1" y="10.0" textLength="35.4">shop</text><text x="212.3" y="10.0" textLength="17.7">&amp;&amp;</text><text x="238.8" y="10.0" textLength="26.5">git</text><text x="274.2" y="10.0" textLength="26.5">log</text><text x="309.6" y="10.0" textLength="17.7">--</text></g><g transform="translate(13374.0 0)"><text x="0.0" y="10.0" fill="#3ddbb6" textLength="106.1">deploy@web-1</text><text x="106.1" y="10.0">:</text><text x="115.0" y="10.0" fill="#6cb6ff">~</text><text x="123.8" y="10.0">$</text><text x="141.5" y="10.0" textLength="17.7">cd</text><text x="168.1" y="10.0" textLength="35.4">shop</text><text x="212.3" y="10.0" textLength="17.7">&amp;&amp;</text><text x="238.8" y="10.0" textLength="26.5">git</text><text x="274.2" y="10.0" textLength="26.5">log</text><text x="309.6" y="10.0" textLength="26.5">--o</text></g><g transform="translate(14117.0 0)"><text x="0.0" y="10.0" fill="#3ddbb6" textLength="106.1">deploy@web-1</text><text x="106.1" y="10.0">:</text><text x="115.0" y="10.0" fill="#6cb6ff">~</text><text x="123.8" y="10.0">$</text><text x="141.5" y="10.0" textLength="17.7">cd</text><text x="168.1" y="10.0" textLength="35.4">shop</text><text x="212.3" y="10.0" textLength="17.7">&amp;&amp;</text><text x="238.8" y="10.0" textLength="26.5">git</text><text x="274.2" y="10.0" textLength="26.5">log</text><text x="309.6" y="10.0" textLength="35.4">--on</text></g><g transform="translate(14860.0 0)"><text x="0.0" y="10.0" fill="#3ddbb6" textLength="106.1">deploy@web-1</text><text x="106.1" y="10.0">:</text><text x="115.0" y="10.0" fill="#6cb6ff">~</text><text x="123.8" y="10.0">$</text><text x="141.5" y="10.0" textLength="17.7">cd</text><text x="168.1" y="10.0" textLength="35.4">shop</text><text x="212.3" y="10.0" textLength="17.7">&amp;&amp;</text><text x="238.8" y="10.0" textLength="26.5">git</text><text x="274.2" y="10.0" textLength="26.5">log</text><text x="309.6" y="10.0" textLength="44.2">--one</text></g><g transform="translate(15603.0 0)"><text x="0.0" y="10.0" fill="#3ddbb6" textLength="106.1">deploy@web-1</text><text x="106.1" y="10.0">:</text><text x="115.0" y="10.0" fill="#6cb6ff">~</text><text x="123.8" y="10.0">$</text><text x="141.5" y="10.0" textLength="17.7">cd</text><text x="168.1" y="10.0" textLength="35.4">shop</text><text x="212.3" y="10.0" textLength="17.7">&amp;&amp;</text><text x="238.8" y="10.0" textLength="26.5">git</text><text x="274.2" y="10.0" textLength="26.5">log</text><text x="309.6" y="10.0" textLength="53.1">--onel</text></g><g transform="translate(16346.0 0)"><text x="0.0" y="10.0" fill="#3ddbb6" textLength="106.1">deploy@web-1</text><text x="106.1" y="10.0">:</text><text x="115.0" y="10.0" fill="#6cb6ff">~</text><text x="123.8" y="10.0">$</text><text x="141.5" y="10.0" textLength="17.7">cd</text><text x="168.1" y="10.0" textLength="35.4">shop</text><text x="212.3" y="10.0" textLength="17.7">&amp;&amp;</text><text x="238.8" y="10.0" textLength="26.5">git</text><text x="274.2" y="10.0" textLength="26.5">log</text><text x="309.6" y="10.0" textLength="61.9">--oneli</text></g><g transform="translate(17089.0 0)"><text x="0.0" y="10.0" fill="#3ddbb6" textLength="106.1">deploy@web-1</text><text x="106.1" y="10.0">:</text><text x="115.0" y="10.0" fill="#6cb6ff">~</text><text x="123.8" y="10.0">$</text><text x="141.5" y="10.0" textLength="17.7">cd</text><text x="168.1" y="10.0" textLength="35.4">shop</text><text x="212.3" y="10.0" textLength="17.7">&amp;&amp;</text><text x="238.8" y="10.0" textLength="26.5">git</text><text x="274.2" y="10.0" textLength="26.5">log</text><text x="309.6" y="10.0" textLength="70.8">--onelin</text></g><g transform="translate(17832.0 0)"><text x="0.0" y="10.0" fill="#3ddbb6" textLength="106.1">deploy@web-1</text><text x="106.1" y="10.0">:</text><text x="115.0" y="10.0" fill="#6cb6ff">~</text><text x="123.8" y="10.0">$</text><text x="141.5" y="10.0" textLength="17.7">cd</text><text x="168.1" y="10.0" textLength="35.4">shop</text><text x="212.3" y="10.0" textLength="17.7">&amp;&amp;</text><text x="238.8" y="10.0" textLength="26.5">git</text><text x="274.2" y="10.0" textLength="26.5">log</text><text x="309.6" y="10.0" textLength="79.6">--oneline</text></g><g transform="translate(18575.0 0)"><text x="0.0" y="10.0" fill="#3ddbb6" textLength="106.1">deploy@web-1</text><text x="106.1" y="10.0">:</text><text x="115.0" y="10.0" fill="#6cb6ff">~</text><text x="123.8" y="10.0">$</text><text x="141.5" y="10.0" textLength="17.7">cd</text><text x="168.1" y="10.0" textLength="35.4">shop</text><text x="212.3" y="10.0" textLength="17.7">&amp;&amp;</text><text x="238.8" y="10.0" textLength="26.5">git</text><text x="274.2" y="10.0" textLength="26.5">log</text><text x="309.6" y="10.0" textLength="79.6">--oneline</text><text x="398.0" y="10.0">-</text></g><g transform="translate(19318.0 0)"><text x="0.0" y="10.0" fill="#3ddbb6" textLength="106.1">deploy@web-1</text><text x="106.1" y="10.0">:</text><text x="115.0" y="10.0" fill="#6cb6ff">~</text><text x="123.8" y="10.0">$</text><text x="141.5" y="10.0" textLength="17.7">cd</text><text x="168.1" y="10.0" textLength="35.4">shop</text><text x="212.3" y="10.0" textLength="17.7">&amp;&amp;</text><text x="238.8" y="10.0" textLength="26.5">git</text><text x="274.2" y="10.0" textLength="26.5">log</text><text x="309.6" y="10.0" textLength="79.6">--oneline</text><text x="398.0" y="10.0" textLength="17.7">--</text></g><g transform="translate(20061.0 0)"><text x="0.0" y="10.0" fill="#3ddbb6" textLength="106.1">deploy@web-1</text><text x="106.1" y="10.0">:</text><text x="115.0" y="10.0" fill="#6cb6ff">~</text><text x="123.8" y="10.0">$</text><text x="141.5" y="10.0" textLength="17.7">cd</text><text x="168.1" y="10.0" textLength="35.4">shop</text><text x="212.3" y="10.0" textLength="17.7">&amp;&amp;</text><text x="238.8" y="10.0" textLength="26.5">git</text><text x="274.2" y="10.0" textLength="26.5">log</text><text x="309.6" y="10.0" textLength="79.6">--oneline</text><text x="398.0" y="10.0" textLength="26.5">--d</text></g><g transform="translate(20804.0 0)"><text x="0.0" y="10.0" fill="#3ddbb6" textLength="106.1">deploy@web-1</text><text x="106.1" y="10.0">:</text><text x="115.0" y="10.0" fill="#6cb6ff">~</text><text x="123.8" y="10.0">$</text><text x="141.5" y="10.0" textLength="17.7">cd</text><text x="168.1" y="10.0" textLength="35.4">shop</text><text x="212.3" y="10.0" textLength="17.7">&amp;&amp;</text><text x="238.8" y="10.0" textLength="26.5">git</text><text x="274.2" y="10.0" textLength="26.5">log</text><text x="309.6" y="10.0" textLength="79.6">--oneline</text><text x="398.0" y="10.0" textLength="35.4">--de</text></g><g transform="translate(21547.0 0)"><text x="0.0" y="10.0" fill="#3ddbb6" textLength="106.1">deploy@web-1</text><text x="106.1" y="10.0">:</text><text x="115.0" y="10.0" fill="#6cb6ff">~</text><text x="123.8" y="10.0">$</text><text x="141.5" y="10.0" textLength="17.7">cd</text><text x="168.1" y="10.0" textLength="35.4">shop</text><text x="212.3" y="10.0" textLength="17.7">&amp;&amp;</text><text x="238.8" y="10.0" textLength="26.5">git</text><text x="274.2" y="10.0" textLength="26.5">log</text><text x="309.6" y="10.0" textLength="79.6">--oneline</text><text x="398.0" y="10.0" textLength="44.2">--dec</text></g><g transform="translate(22290.0 0)"><text x="0.0" y="10.0" fill="#3ddbb6" textLength="106.1">deploy@web-1</text><text x="106.1" y="10.0">:</text><text x="115.0" y="10.0" fill="#6cb6ff">~</text><text x="123.8" y="10.0">$</text><text x="141.5" y="10.0" textLength="17.7">cd</text><text x="168.1" y="10.0" textLength="35.4">shop</text><text x="212.3" y="10.0" textLength="17.7">&amp;&amp;</text><text x="238.8" y="10.0" textLength="26.5">git</text><text x="274.2" y="10.0" textLength="26.5">log</text><text x="309.6" y="10.0" textLength="79.6">--oneline</text><text x="398.0" y="10.0" textLength="53.1">--deco</text></g><g transform="translate(23033.0 0)"><text x="0.0" y="10.0" fill="#3ddbb6" textLength="106.1">deploy@web-1</text><text x="106.1" y="10.0">:</text><text x="115.0" y="10.0" fill="#6cb6ff">~</text><text x="123.8" y="10.0">$</text><text x="141.5" y="10.0" textLength="17.7">cd</text><text x="168.1" y="10.0" textLength="35.4">shop</text><text x="212.3" y="10.0" textLength="17.7">&amp;&amp;</text><text x="238.8" y="10.0" textLength="26.5">git</text><text x="274.2" y="10.0" textLength="26.5">log</text><text x="309.6" y="10.0" textLength="79.6">--oneline</text><text x="398.0" y="10.0" textLength="61.9">--decor</text></g><g transform="translate(23776.0 0)"><text x="0.0" y="10.0" fill="#3ddbb6" textLength="106.1">deploy@web-1</text><text x="106.1" y="10.0">:</text><text x="115.0" y="10.0" fill="#6cb6ff">~</text><text x="123.8" y="10.0">$</text><text x="141.5" y="10.0" textLength="17.7">cd</text><text x="168.1" y="10.0" textLength="35.4">shop</text><text x="212.3" y="10.0" textLength="17.7">&amp;&amp;</text><text x="238.8" y="10.0" textLength="26.5">git</text><text x="274.2" y="10.0" textLength="26.5">log</text><text x="309.6" y="10.0" textLength="79.6">--oneline</text><text x="398.0" y="10.0" textLength="70.8">--decora</text></g><g transform="translate(24519.0 0)"><text x="0.0" y="10.0" fill="#3ddbb6" textLength="106.1">deploy@web-1</text><text x="106.1" y="10.0">:</text><text x="115.0" y="10.0" fill="#6cb6ff">~</text><text x="123.8" y="10.0">$</text><text x="141.5" y="10.0" textLength="17.7">cd</text><text x="168.1" y="10.0" textLength="35.4">shop</text><text x="212.3" y="10.0" textLength="17.7">&amp;&amp;</text><text x="238.8" y="10.0" textLength="26.5">git</text><text x="274.2" y="10.0" textLength="26.5">log</text><text x="309.6" y="10.0" textLength="79.6">--oneline</text><text x="398.0" y="10.0" textLength="79.6">--decorat</text></g><g transform="translate(25262.0 0)"><text x="0.0" y="10.0" fill="#3ddbb6" textLength="106.1">deploy@web-1</text><text x="106.1" y="10.0">:</text><text x="115.0" y="10.0" fill="#6cb6ff">~</text><text x="123.8" y="10.0">$</text><text x="141.5" y="10.0" textLength="17.7">cd</text><text x="168.1" y="10.0" textLength="35.4">shop</text><text x="212.3" y="10.0" textLength="17.7">&amp;&amp;</text><text x="238.8" y="10.0" textLength="26.5">git</text><text x="274.2" y="10.0" textLength="26.5">log</text><text x="309.6" y="10.0" textLength="79.6">--oneline</text><text x="398.0" y="10.0" textLength="88.5">--decorate</text></g><g transform="translate(26005.0 0)"><text x="0.0" y="10.0" fill="#3ddbb6" textLength="106.1">deploy@web-1</text><text x="106.1" y="10.0">:</text><text x="115.0" y="10.0" fill="#6cb6ff">~</text><text x="123.8" y="10.0">$</text><text x="141.5" y="10.0" textLength="17.7">cd</text><text x="168.1" y="10.0" textLength="35.4">shop</text><text x="212.3" y="10.0" textLength="17.7">&amp;&amp;</text><text x="238.8" y="10.0" textLength="26.5">git</text><text x="274.2" y="10.0" textLength="26.5">log</text><text x="309.6" y="10.0" textLength="79.6">--oneline</text><text x="398.0" y="10.0" textLength="88.5">--decorate</text><text x="495.3" y="10.0">-</text></g><g transform="translate(26748.0 0)"><text x="0.0" y="10.0" fill="#3ddbb6" textLength="106.1">deploy@web-1</text><text x="106.1" y="10.0">:</text><text x="115.0" y="10.0" fill="#6cb6ff">~</text><text x="123.8" y="10.0">$</text><text x="141.5" y="10.0" textLength="17.7">cd</text><text x="168.1" y="10.0" textLength="35.4">shop</text><text x="212.3" y="10.0" textLength="17.7">&amp;&amp;</text><text x="238.8" y="10.0" textLength="26.5">git</text><text x="274.2" y="10.0" textLength="26.5">log</text><text x="309.6" y="10.0" textLength="79.6">--oneline</text><text x="398.0" y="10.0" textLength="88.5">--decorate</text><text x="495.3" y="10.0" textLength="17.7">-4</text></g></g></g><g transform="translate(0 60.0)"><g class="t3"><g transform="translate(0.0 0)"></g><g transform="translate(743.0 0)"><text x="0.0" y="10.0" fill="#ffb547" textLength="61.9">fcad5ec</text><text x="70.8" y="10.0" fill="#ffb547">(</text><text x="79.6" y="10.0" fill="#8ae4f2" textLength="35.4" font-weight="700">HEAD</text><text x="123.8" y="10.0" fill="#ffb547" textLength="17.7">-&gt;</text><text x="150.4" y="10.0" fill="#7bebd0" textLength="35.4" font-weight="700">main</text><text x="185.8" y="10.0" fill="#ffb547">,</text><text x="203.4" y="10.0" fill="#ffcc80" textLength="35.4" font-weight="700">tag:</text><text x="247.7" y="10.0" fill="#ffcc80" textLength="53.1" font-weight="700">v2.4.1</text><text x="300.7" y="10.0" fill="#ffb547">)</text><text x="318.4" y="10.0" textLength="26.5">TLS</text><text x="353.8" y="10.0" textLength="88.5">everywhere</text></g></g></g><g transform="translate(0 80.0)"><g class="t4"><g transform="translate(0.0 0)"></g><g transform="translate(743.0 0)"><text x="0.0" y="10.0" fill="#ffb547" textLength="61.9">4543d8c</text><text x="70.8" y="10.0" textLength="26.5">Run</text><text x="106.1" y="10.0" textLength="17.7">in</text><text x="132.7" y="10.0">a</text><text x="150.4" y="10.0" textLength="79.6">container</text></g></g></g><g transform="translate(0 100.0)"><g class="t5"><g transform="translate(0.0 0)"></g><g transform="translate(743.0 0)"><text x="0.0" y="10.0" fill="#ffb547" textLength="61.9">777e8c2</text><text x="70.8" y="10.0" textLength="44.2">Serve</text><text x="123.8" y="10.0" textLength="17.7">it</text><text x="150.4" y="10.0" textLength="35.4">with</text><text x="194.6" y="10.0" textLength="44.2">nginx</text></g></g></g><g transform="translate(0 120.0)"><g class="t6"><g transform="translate(0.0 0)"></g><g transform="translate(743.0 0)"><text x="0.0" y="10.0" fill="#ffb547" textLength="61.9">47a7717</text><text x="70.8" y="10.0" textLength="44.2">Start</text><text x="123.8" y="10.0" textLength="26.5">the</text><text x="159.2" y="10.0" textLength="35.4">shop</text></g></g></g><g transform="translate(0 140.0)"><g class="t7"><g transform="translate(0.0 0)"></g><g transform="translate(743.0 0)"><text x="0.0" y="10.0" fill="#3ddbb6" textLength="106.1">deploy@web-1</text><text x="106.1" y="10.0">:</text><text x="115.0" y="10.0" fill="#6cb6ff" textLength="53.1">~/shop</text><text x="168.1" y="10.0">$</text></g><g transform="translate(1486.0 0)"><text x="0.0" y="10.0" fill="#3ddbb6" textLength="106.1">deploy@web-1</text><text x="106.1" y="10.0">:</text><text x="115.0" y="10.0" fill="#6cb6ff" textLength="53.1">~/shop</text><text x="168.1" y="10.0">$</text><text x="185.8" y="10.0">l</text></g><g transform="translate(2229.0 0)"><text x="0.0" y="10.0" fill="#3ddbb6" textLength="106.1">deploy@web-1</text><text x="106.1" y="10.0">:</text><text x="115.0" y="10.0" fill="#6cb6ff" textLength="53.1">~/shop</text><text x="168.1" y="10.0">$</text><text x="185.8" y="10.0" textLength="17.7">ls</text></g></g></g><g transform="translate(0 160.0)"><g class="t8"><g transform="translate(0.0 0)"></g><g transform="translate(743.0 0)"><text x="0.0" y="10.0" textLength="88.5">Dockerfile</text><text x="106.1" y="10.0" textLength="79.6">README.md</text><text x="203.4" y="10.0" textLength="53.1">config</text></g></g></g><g transform="translate(0 180.0)"><g class="t9"><g transform="translate(0.0 0)"></g><g transform="translate(743.0 0)"><text x="0.0" y="10.0" fill="#3ddbb6" textLength="106.1">deploy@web-1</text><text x="106.1" y="10.0">:</text><text x="115.0" y="10.0" fill="#6cb6ff" textLength="53.1">~/shop</text><text x="168.1" y="10.0">$</text></g></g></g><g class="tc"><rect class="tb" x="0" y="2.0" width="8.8" height="16.0" fill="#ffb547"/></g></g></g>
+<g class="s1"><rect width="1024" height="600" fill="rgba(0, 0, 0, 0)"/><rect x="0" y="0" width="264" height="600" fill="rgb(16, 25, 28)"/><rect x="263" y="0" width="1" height="600" fill="rgb(36, 52, 58)"/><rect x="8" y="52" width="247" height="30" rx="6" fill="rgb(23, 36, 42)"/><rect x="8" y="52" width="2" height="30" fill="rgb(61, 219, 182)"/><rect x="12" y="278" width="239" height="32" rx="6" fill="rgb(10, 17, 19)"/><rect x="12" y="278" width="238" height="31" rx="6" fill="none" stroke="rgb(92, 113, 119)" stroke-width="1" transform="translate(0.5 0.5)"/><rect x="21" y="368" width="9" height="9" rx="2" fill="none" stroke="rgb(92, 113, 119)" stroke-width="1" transform="translate(0.5 0.5)" clip-path="url(#c0)"/><rect x="10" y="422" width="1" height="114" fill="rgb(36, 52, 58)" clip-path="url(#c0)"/><rect x="32" y="436" width="9" height="9" rx="2" fill="none" stroke="rgb(92, 113, 119)" stroke-width="1" transform="translate(0.5 0.5)" clip-path="url(#c0)"/><rect x="17" y="460" width="240" height="38" rx="6" fill="rgb(20, 34, 31)" clip-path="url(#c0)"/><rect x="32" y="474" width="9" height="9" rx="2" fill="none" stroke="rgb(92, 113, 119)" stroke-width="1" transform="translate(0.5 0.5)" clip-path="url(#c0)"/><rect x="32" y="512" width="9" height="9" rx="2" fill="none" stroke="rgb(92, 113, 119)" stroke-width="1" transform="translate(0.5 0.5)" clip-path="url(#c0)"/><rect x="10" y="566" width="1" height="38" fill="rgb(36, 52, 58)" clip-path="url(#c0)"/><rect x="32" y="580" width="9" height="9" rx="2" fill="none" stroke="rgb(92, 113, 119)" stroke-width="1" transform="translate(0.5 0.5)" clip-path="url(#c0)"/><rect x="0" y="551" width="263" height="1" fill="rgb(36, 52, 58)"/><rect x="239" y="572" width="8" height="8" rx="2" fill="rgb(92, 113, 119)"/><rect x="264" y="0" width="760" height="600" fill="rgb(10, 17, 19)"/><rect x="527" y="25" width="108.5" height="33" rx="6" fill="none" stroke="rgb(92, 113, 119)" stroke-width="1" transform="translate(0.5 0.5)" clip-path="url(#c1)"/><rect x="644.6" y="25" width="110.7" height="33" rx="6" fill="none" stroke="rgb(92, 113, 119)" stroke-width="1" transform="translate(0.5 0.5)" clip-path="url(#c1)"/><rect x="764.3" y="25" width="90.5" height="33" rx="6" fill="none" stroke="rgb(92, 113, 119)" stroke-width="1" transform="translate(0.5 0.5)" clip-path="url(#c1)"/><rect x="863.8" y="25" width="88.2" height="34" rx="6" fill="rgb(61, 219, 182)" clip-path="url(#c1)"/><rect x="296" y="108" width="340" height="34" rx="6" fill="rgb(10, 17, 19)" clip-path="url(#c1)"/><rect x="296" y="108" width="339" height="33" rx="6" fill="none" stroke="rgb(92, 113, 119)" stroke-width="1" transform="translate(0.5 0.5)" clip-path="url(#c1)"/><rect x="644" y="111" width="60.2" height="27" rx="6" fill="none" stroke="rgb(36, 52, 58)" stroke-width="1" transform="translate(0.5 0.5)" clip-path="url(#c1)"/><rect x="709.2" y="111" width="80.3" height="27" rx="6" fill="none" stroke="rgb(36, 52, 58)" stroke-width="1" transform="translate(0.5 0.5)" clip-path="url(#c1)"/><rect x="296" y="166" width="696" height="385" rx="10" fill="rgb(16, 25, 28)" clip-path="url(#c1)"/><rect x="296" y="166" width="695" height="384" rx="10" fill="none" stroke="rgb(36, 52, 58)" stroke-width="1" transform="translate(0.5 0.5)" clip-path="url(#c1)"/><rect x="297" y="198" width="694" height="1" fill="rgb(36, 52, 58)" clip-path="url(#c2)"/><rect x="297" y="199" width="694" height="37" fill="rgb(10, 17, 19)" clip-path="url(#c2)"/><rect x="297" y="235" width="694" height="1" fill="rgb(36, 52, 58)" clip-path="url(#c2)"/><rect x="309" y="253" width="9" height="9" rx="2" fill="none" stroke="rgb(92, 113, 119)" stroke-width="1" transform="translate(0.5 0.5)" clip-path="url(#c3)"/><rect x="297" y="280" width="694" height="1" fill="rgb(36, 52, 58)" clip-path="url(#c2)"/><rect x="297" y="281" width="694" height="43" fill="rgb(10, 17, 19)" clip-path="url(#c2)"/><rect x="297" y="323" width="694" height="1" fill="rgb(36, 52, 58)" clip-path="url(#c2)"/><rect x="331" y="341" width="9" height="9" rx="2" fill="none" stroke="rgb(92, 113, 119)" stroke-width="1" transform="translate(0.5 0.5)" clip-path="url(#c4)"/><rect x="777" y="337" width="66.6" height="17" rx="3" fill="none" stroke="rgb(36, 52, 58)" stroke-width="1" transform="translate(0.5 0.5)" clip-path="url(#c2)"/><rect x="297" y="368" width="694" height="50" fill="rgb(20, 34, 31)" clip-path="url(#c2)"/><rect x="331" y="388" width="9" height="9" rx="2" fill="none" stroke="rgb(92, 113, 119)" stroke-width="1" transform="translate(0.5 0.5)" clip-path="url(#c5)"/><rect x="777" y="384" width="38.8" height="17" rx="3" fill="none" stroke="rgb(36, 52, 58)" stroke-width="1" transform="translate(0.5 0.5)" clip-path="url(#c2)"/><rect x="331" y="435" width="9" height="9" rx="2" fill="none" stroke="rgb(92, 113, 119)" stroke-width="1" transform="translate(0.5 0.5)" clip-path="url(#c6)"/><rect x="777" y="431" width="38.8" height="17" rx="3" fill="none" stroke="rgb(36, 52, 58)" stroke-width="1" transform="translate(0.5 0.5)" clip-path="url(#c2)"/><rect x="297" y="462" width="694" height="1" fill="rgb(36, 52, 58)" clip-path="url(#c2)"/><rect x="297" y="463" width="694" height="43" fill="rgb(10, 17, 19)" clip-path="url(#c2)"/><rect x="297" y="505" width="694" height="1" fill="rgb(36, 52, 58)" clip-path="url(#c2)"/><rect x="331" y="523" width="9" height="9" rx="2" fill="none" stroke="rgb(92, 113, 119)" stroke-width="1" transform="translate(0.5 0.5)" clip-path="url(#c7)"/><rect x="777" y="519" width="38.8" height="17" rx="3" fill="none" stroke="rgb(36, 52, 58)" stroke-width="1" transform="translate(0.5 0.5)" clip-path="url(#c2)"/><svg viewBox="-60 -908 7775 1186" role="img" aria-label="MorphGate" fill="rgb(0, 0, 0)" stroke="none" stroke-width="1px" stroke-linecap="butt" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1" x="14" y="17" width="118" height="18" color="rgb(220, 230, 227)"><g transform="translate(-167.3,-980.7) scale(23.0748)" fill="rgb(0, 0, 0)" stroke="none" stroke-width="1px" stroke-linecap="butt" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1"><path d="M10 42.5V22.5a14 14 0 0 1 28 0V42.5" fill="none" stroke-width="5.5px" stroke="rgb(61, 219, 182)" stroke-linecap="butt" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1"></path><path d="M17 25.5l6 4.75-6 4.75" fill="none" stroke-width="4px" stroke-linecap="square" stroke-linejoin="miter" stroke="rgb(220, 230, 227)" fill-opacity="1" stroke-opacity="1"></path><rect x="26" y="34.5" width="6.5" height="8" fill="rgb(255, 181, 71)" stroke="none" stroke-width="1px" stroke-linecap="butt" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1"></rect></g><g transform="translate(1131.5,0)" fill="rgb(0, 0, 0)" stroke="none" stroke-width="1px" stroke-linecap="butt" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1"><path d="M61.542724609375 -609.71435546875H205.54296875V-551.028564453125H295.228759765625L227.314453125 -506.17138671875Q230.314453125 -563.8857421875 259.314453125 -595.771484375Q288.314453125 -627.6572265625 337.25732421875 -627.6572265625Q381.7144775390625 -627.6572265625 410.01446533203125 -593.4572143554688Q438.314453125 -559.2572021484375 443.8572998046875 -498.971435546875L384.6859130859375 -547.94287109375H522.885986328125L457.057373046875 -506.17138671875Q460.057373046875 -563.3714599609375 490.85736083984375 -595.5143432617188Q521.6573486328125 -627.6572265625 571.6287841796875 -627.6572265625Q626.7430419921875 -627.6572265625 659.1144409179688 -582.6143798828125Q691.48583984375 -537.571533203125 691.48583984375 -459.1143798828125V0.0H555.257080078125V-401.94287109375Q555.257080078125 -437.7427978515625 541.1856689453125 -456.12847900390625Q527.1142578125 -474.51416015625 499.94287109375 -474.51416015625Q472.771484375 -474.51416015625 458.7000732421875 -456.12847900390625Q444.628662109375 -437.7427978515625 444.628662109375 -401.94287109375V0.0H308.39990234375V-401.94287109375Q308.39990234375 -437.7427978515625 294.3284912109375 -456.12847900390625Q280.257080078125 -474.51416015625 253.085693359375 -474.51416015625Q225.914306640625 -474.51416015625 211.8428955078125 -456.12847900390625Q197.771484375 -437.7427978515625 197.771484375 -401.94287109375V0.0H61.542724609375ZM1105.0550165762793 17.94287109375Q1012.6285400390625 17.94287109375 942.728515625 -22.28570556640625Q872.8284912109375 -62.5142822265625 834.1284790039062 -135.11489649261603Q795.428466796875 -207.71551075866958 795.428466796875 -304.857177734375Q795.428466796875 -401.99884471008045 834.1284790039062 -474.599458976134Q872.8284912109375 -547.2000732421875 942.6627087008569 -587.4286499023438Q1012.4969261907762 -627.6572265625 1104.9091237714215 -627.6572265625Q1198.3714599609375 -627.6572265625 1267.771484375 -587.4286499023438Q1337.1715087890625 -547.2000732421875 1375.8715209960938 -474.599458976134Q1414.571533203125 -401.99884471008045 1414.571533203125 -304.857177734375Q1414.571533203125 -207.71551075866958 1375.8715209960938 -135.11489649261603Q1337.1715087890625 -62.5142822265625 1267.85165138615 -22.28570556640625Q1198.5317939832373 17.94287109375 1105.0550165762793 17.94287109375ZM1105.0 -113.25732421875Q1183.7142333984375 -113.25732421875 1228.5999145507812 -164.77237917342276Q1273.485595703125 -216.28743412809553 1273.485595703125 -304.857177734375Q1273.485595703125 -393.4269213406545 1228.5999145507812 -444.9419762953272Q1183.7142333984375 -496.45703125 1105.0 -496.45703125Q1026.6769663217906 -496.45703125 981.5956853093328 -444.9419762953272Q936.514404296875 -393.4269213406545 936.514404296875 -304.857177734375Q936.514404296875 -216.28743412809553 981.5956853093328 -164.77237917342276Q1026.6769663217906 -113.25732421875 1105.0 -113.25732421875ZM1550.28564453125 -609.71435546875H1814.800048828125V-556.914306640625H1849.6572265625Q1869.1715087890625 -590.800048828125 1904.8572387695312 -609.2286376953125Q1940.54296875 -627.6572265625 1985.48583984375 -627.6572265625Q2065.48583984375 -627.6572265625 2108.571533203125 -570.0714721679688Q2151.6572265625 -512.4857177734375 2151.6572265625 -404.45703125V-320.5712890625H2004.62841796875V-389.428466796875Q2004.62841796875 -490.62841796875 1923.2442980314556 -490.62841796875Q1873.028564453125 -490.62841796875 1848.4000244140625 -446.4998779296875Q1823.771484375 -402.371337890625 1823.771484375 -313.199951171875V-131.2001953125H2024.0V0H1565.428466796875V-131.2001953125H1683.656982421875V-478.51416015625H1550.28564453125ZM2285.428466796875 200.0V-609.71435546875H2429.4287109375V-549.71435546875H2464.285888671875Q2484.0108795166016 -584.71435546875 2526.748359680176 -605.21435546875Q2569.48583984375 -625.71435546875 2620.571533203125 -625.71435546875Q2701.9591503425186 -625.71435546875 2763.251059546259 -585.7286376953125Q2824.54296875 -545.742919921875 2858.5286865234375 -473.60031275002353Q2892.514404296875 -401.45770557817207 2892.514404296875 -304.9288649961173Q2892.514404296875 -208.4000244140625 2858.5286865234375 -136.18572998046875Q2824.54296875 -63.971435546875 2763.251059546259 -23.9857177734375Q2701.9591503425186 16.0 2620.571533203125 16.0Q2569.6466291756465 16.0 2526.7376822636043 -5.0Q2483.8287353515625 -26.0 2464.285888671875 -60.0H2429.4287109375V200.0ZM2586.0 -115.2001953125Q2663.199951171875 -115.2001953125 2707.314208984375 -166.21646571005545Q2751.428466796875 -217.2327361076109 2751.428466796875 -304.9449202998992Q2751.428466796875 -392.6571044921875 2707.314208984375 -443.58563232421875Q2663.199951171875 -494.51416015625 2586.0 -494.51416015625Q2508.800048828125 -494.51416015625 2464.685791015625 -443.49788975869455Q2420.571533203125 -392.4816193611391 2420.571533203125 -304.7694351688508Q2420.571533203125 -217.0572509765625 2464.685791015625 -166.12872314453125Q2508.800048828125 -115.2001953125 2586.0 -115.2001953125ZM3025.428466796875 0.0V-848.0H3169.4287109375V-555.8857421875H3204.285888671875Q3227.343017578125 -589.771484375 3266.8572998046875 -608.71435546875Q3306.37158203125 -627.6572265625 3354.8001708984375 -627.6572265625Q3423.343017578125 -627.6572265625 3472.4144287109375 -596.9286499023438Q3521.48583984375 -566.2000732421875 3548.3001098632812 -509.2857666015625Q3575.1143798828125 -452.3714599609375 3575.1143798828125 -373.085693359375V0.0H3431.1141357421875V-343.085693359375Q3431.1141357421875 -416.7427978515625 3397.6998901367188 -455.11419677734375Q3364.28564453125 -493.485595703125 3300.5142822265625 -493.485595703125Q3236.2572021484375 -493.485595703125 3202.8429565429688 -455.11419677734375Q3169.4287109375 -416.7427978515625 3169.4287109375 -343.085693359375V0.0ZM4311.54296875 -24.857177734375Q4311.54296875 48.085693359375 4274.385803222656 102.5428466796875Q4237.2286376953125 157.0 4169.128601074219 187.471435546875Q4101.028564453125 217.94287109375 4008.17138671875 217.94287109375Q3926.6856689453125 217.94287109375 3862.7427978515625 193.20001220703125Q3798.7999267578125 168.4571533203125 3759.8856201171875 123.971435546875Q3720.9713134765625 79.4857177734375 3714.5712890625 20.0H3859.48583984375Q3876.48583984375 54.314208984375 3915.9143676757812 73.985595703125Q3955.3428955078125 93.656982421875 4008.17138671875 93.656982421875Q4082.8570556640625 93.656982421875 4125.199890136719 60.74273681640625Q4167.542724609375 27.8284912109375 4167.542724609375 -30.0V-94.971435546875H4132.685546875Q4112.62841796875 -64.4857177734375 4070.8284301757812 -46.24285888671875Q4029.0284423828125 -28.0 3980.51416015625 -28.0Q3900.542724609375 -28.0 3840.7998657226562 -64.74285888671875Q3781.0570068359375 -101.4857177734375 3747.8141479492188 -167.72857666015625Q3714.5712890625 -233.971435546875 3714.5712890625 -321.94287109375Q3714.5712890625 -413.3714599609375 3747.8141479492188 -481.57147216796875Q3781.0570068359375 -549.771484375 3840.7998657226562 -587.742919921875Q3900.542724609375 -625.71435546875 3980.51416015625 -625.71435546875Q4030.51416015625 -625.71435546875 4072.3141479492188 -605.9857788085938Q4114.1141357421875 -586.2572021484375 4132.685546875 -552.800048828125H4167.542724609375V-609.71435546875H4311.54296875ZM3855.6572265625 -323.8857421875Q3855.6572265625 -244.60009765625 3898.271484375 -198.9287109375Q3940.8857421875 -153.25732421875 4015.085693359375 -153.25732421875Q4089.28564453125 -153.25732421875 4131.89990234375 -198.9287109375Q4174.51416015625 -244.60009765625 4174.51416015625 -323.8857421875Q4174.51416015625 -403.17138671875 4131.89990234375 -448.8427734375Q4089.28564453125 -494.51416015625 4015.085693359375 -494.51416015625Q3940.8857421875 -494.51416015625 3898.271484375 -448.8427734375Q3855.6572265625 -403.17138671875 3855.6572265625 -323.8857421875ZM4891.542724609375 -385.71435546875V-272.6856689453125L4703.771484375 -245.05712890625Q4668.0572509765625 -239.5142822265625 4649.0286865234375 -220.9285888671875Q4630.0001220703125 -202.3428955078125 4630.0001220703125 -174.1715087890625Q4630.0001220703125 -144.60009765625 4652.414367675781 -126.5001220703125Q4674.82861328125 -108.400146484375 4714.914306640625 -108.400146484375Q4761.5714111328125 -108.400146484375 4798.957092285156 -127.514404296875Q4836.3427734375 -146.628662109375 4858.428466796875 -178.8143310546875Q4880.51416015625 -211.0 4880.51416015625 -250.7427978515625V-380.0Q4880.51416015625 -438.6285400390625 4847.085632324219 -469.257080078125Q4813.6571044921875 -499.8856201171875 4748.0 -499.8856201171875Q4703.857177734375 -499.8856201171875 4669.985778808594 -486.8427734375Q4636.1143798828125 -473.7999267578125 4615.514404296875 -449.47137451171875Q4594.9144287109375 -425.142822265625 4588.343017578125 -390.0H4448.3427734375Q4455.314208984375 -463.8857421875 4494.2713623046875 -517.0571899414062Q4533.228515625 -570.2286376953125 4598.67138671875 -598.9429321289062Q4664.1142578125 -627.6572265625 4750.05712890625 -627.6572265625Q4880.800048828125 -627.6572265625 4951.1715087890625 -567.2000732421875Q5021.54296875 -506.742919921875 5021.54296875 -393.82861328125V0.0H4880.51416015625V-62.914306640625H4845.656982421875Q4822.0284423828125 -24.4571533203125 4781.428466796875 -4.22857666015625Q4740.8284912109375 16.0 4680.28564453125 16.0Q4619.314208984375 16.0 4574.3570556640625 -6.72857666015625Q4529.39990234375 -29.4571533203125 4504.928466796875 -70.414306640625Q4480.45703125 -111.3714599609375 4480.45703125 -165.82861328125Q4480.45703125 -242.742919921875 4532.128479003906 -291.45721435546875Q4583.7999267578125 -340.1715087890625 4679.17138671875 -354.1429443359375ZM5465.54296875 -767.6572265625V-609.71435546875H5756.628662109375V-478.51416015625H5465.54296875V-214.571533203125Q5465.54296875 -164.8190198625837 5486.6715087890625 -139.03817204066684Q5507.800048828125 -113.25732421875 5549.028564453125 -113.25732421875Q5590.527418870192 -113.25732421875 5614.7350839468145 -141.08587646484375Q5638.9427490234375 -168.9144287109375 5651.9427490234375 -229.4287109375H5780.0572509765625Q5773.6447235525475 -110.12117801092367 5712.725713024402 -46.089153458586836Q5651.806702496255 17.94287109375 5546.0 17.94287109375Q5438.129756001593 17.94287109375 5379.836240305483 -42.68572998046875Q5321.542724609375 -103.3143310546875 5321.542724609375 -214.571533203125V-478.51416015625H5188.17138671875V-609.71435546875H5321.542724609375V-767.6572265625ZM6039.571533203125 -368.800048828125H6424.028564453125L6378.7713623046875 -308.8857421875Q6378.7713623046875 -402.1142578125 6340.1856689453125 -451.7713623046875Q6301.5999755859375 -501.428466796875 6227.028564453125 -501.428466796875Q6149.82861328125 -501.428466796875 6107.1715087890625 -449.78564453125Q6064.514404296875 -398.142822265625 6064.514404296875 -308.8857421875Q6064.514404296875 -213.1143798828125 6106.685791015625 -160.70013427734375Q6148.857177734375 -108.285888671875 6231.028564453125 -108.285888671875Q6279.7427978515625 -108.285888671875 6317.4141845703125 -129.4287109375Q6355.0855712890625 -150.571533203125 6380.685546875 -188.857177734375H6523.54296875Q6503.685791015625 -124.971435546875 6461.271484375 -78.5142822265625Q6418.857177734375 -32.05712890625 6359.185729980469 -7.05712890625Q6299.5142822265625 17.94287109375 6228.1142578125 17.94287109375Q6135.199951171875 17.94287109375 6067.028503417969 -21.78570556640625Q5998.8570556640625 -61.5142822265625 5961.657043457031 -134.72857666015625Q5924.45703125 -207.94287109375 5924.45703125 -308.8857421875Q5924.45703125 -404.82861328125 5962.642761230469 -476.271484375Q6000.8284912109375 -547.71435546875 6068.985656738281 -587.685791015625Q6137.142822265625 -627.6572265625 6227.028564453125 -627.6572265625Q6313.3714599609375 -627.6572265625 6376.500061035156 -589.4429321289062Q6439.628662109375 -551.2286376953125 6473.800109863281 -480.02862548828125Q6507.9715576171875 -408.82861328125 6507.9715576171875 -309.914306640625Q6507.9715576171875 -296.4857177734375 6506.98583984375 -283.0714111328125Q6506.0001220703125 -269.6571044921875 6504.514404296875 -258.17138671875H6039.571533203125Z" fill="rgb(220, 230, 227)" stroke="none" stroke-width="1px" stroke-linecap="butt" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1"></path></g></svg><svg viewBox="0 0 24 24" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="round" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1" x="173" y="18" width="16" height="16" color="rgb(140, 157, 155)"><path d="M4 6h9M19 6h1M4 12h3M13 12h7M4 18h11M21 18h-1" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="round" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1"></path><circle cx="16" cy="6" r="2.5" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="round" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1"></circle><circle cx="10" cy="12" r="2.5" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="round" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1"></circle><circle cx="18" cy="18" r="2.5" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="round" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1"></circle></svg><svg viewBox="0 0 24 24" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="butt" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1" x="203" y="18" width="16" height="16" color="rgb(140, 157, 155)"><circle cx="8" cy="15" r="4" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="butt" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1"></circle><path d="M11 12l8-8M16 7l2 2M14 9l2 2" stroke-linecap="round" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1"></path></svg><svg viewBox="0 0 24 24" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="butt" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1" x="233" y="18" width="16" height="16" color="rgb(140, 157, 155)"><rect x="5" y="11" width="14" height="10" rx="2" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="butt" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1"></rect><path d="M8 11V8a4 4 0 0 1 8 0v3" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="butt" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1"></path></svg><svg viewBox="0 0 24 24" fill="none" stroke="rgb(220, 230, 227)" stroke-width="2px" stroke-linecap="butt" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1" x="16" y="59.5" width="15" height="15" color="rgb(220, 230, 227)"><rect x="4" y="4" width="16" height="7" rx="2" fill="none" stroke="rgb(220, 230, 227)" stroke-width="2px" stroke-linecap="butt" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1"></rect><rect x="4" y="13" width="16" height="7" rx="2" fill="none" stroke="rgb(220, 230, 227)" stroke-width="2px" stroke-linecap="butt" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1"></rect><path d="M8 7.5h.01M8 16.5h.01" stroke-linecap="round" fill="none" stroke="rgb(220, 230, 227)" stroke-width="2px" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1"></path></svg><svg viewBox="0 0 24 24" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="butt" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1" x="16" y="90.5" width="15" height="15" color="rgb(140, 157, 155)"><path d="M3 6a2 2 0 0 1 2-2h4l2 2h8a2 2 0 0 1 2 2v10a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2zM12 10v6M9 13h6" stroke-linecap="round" stroke-linejoin="round" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" fill-opacity="1" stroke-opacity="1"></path></svg><svg viewBox="0 0 24 24" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="butt" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1" x="16" y="121.5" width="15" height="15" color="rgb(140, 157, 155)"><circle cx="8" cy="15" r="4" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="butt" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1"></circle><path d="M11 12l8-8M16 7l2 2" stroke-linecap="round" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1"></path></svg><svg viewBox="0 0 24 24" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="butt" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1" x="16" y="152.5" width="15" height="15" color="rgb(140, 157, 155)"><path d="M5 8l4 4-4 4M12 16h7" stroke-linecap="round" stroke-linejoin="round" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" fill-opacity="1" stroke-opacity="1"></path></svg><svg viewBox="0 0 24 24" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="butt" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1" x="16" y="183.5" width="15" height="15" color="rgb(140, 157, 155)"><path d="M4 8h15l-3-3M20 16H5l3 3" stroke-linecap="round" stroke-linejoin="round" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" fill-opacity="1" stroke-opacity="1"></path></svg><svg viewBox="0 0 24 24" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="butt" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1" x="16" y="214.5" width="15" height="15" color="rgb(140, 157, 155)"><path d="M12 3l7 3v5c0 4.5-3 8.5-7 10-4-1.5-7-5.5-7-10V6z" stroke-linejoin="round" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="butt" fill-opacity="1" stroke-opacity="1"></path></svg><svg viewBox="0 0 24 24" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="butt" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1" x="16" y="245.5" width="15" height="15" color="rgb(140, 157, 155)"><rect x="3" y="5" width="18" height="14" rx="2" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="butt" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1"></rect><path d="M7 10l3 2-3 2M12 14h4" stroke-linecap="round" stroke-linejoin="round" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" fill-opacity="1" stroke-opacity="1"></path></svg><svg viewBox="0 0 24 24" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="round" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1" x="23" y="287" width="14" height="14" color="rgb(140, 157, 155)"><circle cx="11" cy="11" r="6" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="round" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1"></circle><path d="M20 20l-4.5-4.5" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="round" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1"></path></svg><g clip-path="url(#c0)"><svg viewBox="0 0 24 24" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="butt" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1" x="215" y="332" width="14" height="14" color="rgb(140, 157, 155)"><path d="M3 6a2 2 0 0 1 2-2h4l2 2h8a2 2 0 0 1 2 2v10a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2zM12 10v6M9 13h6" stroke-linecap="round" stroke-linejoin="round" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" fill-opacity="1" stroke-opacity="1"></path></svg></g><g clip-path="url(#c0)"><svg viewBox="0 0 24 24" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="round" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1" x="237" y="332" width="14" height="14" color="rgb(140, 157, 155)"><path d="M12 5v14M5 12h14" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="round" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1"></path></svg></g><g clip-path="url(#c0)"><g transform="translate(12 407) matrix(0 1 -1 0 0 0) translate(-12 -407)"><svg viewBox="0 0 24 24" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="butt" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1" x="6" y="401" width="12" height="12" color="rgb(140, 157, 155)"><path d="M9 6l6 6-6 6" stroke-linecap="round" stroke-linejoin="round" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" fill-opacity="1" stroke-opacity="1"></path></svg></g></g><g clip-path="url(#c0)"><g transform="translate(12 551) matrix(0 1 -1 0 0 0) translate(-12 -551)"><svg viewBox="0 0 24 24" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="butt" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1" x="6" y="545" width="12" height="12" color="rgb(140, 157, 155)"><path d="M9 6l6 6-6 6" stroke-linecap="round" stroke-linejoin="round" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" fill-opacity="1" stroke-opacity="1"></path></svg></g></g><svg viewBox="0 0 24 24" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="butt" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1" x="16" y="568.5" width="15" height="15" color="rgb(140, 157, 155)"><path d="M7 18h10a4 4 0 0 0 .5-7.97A6 6 0 0 0 6.1 9.2 4.5 4.5 0 0 0 7 18z" stroke-linejoin="round" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="butt" fill-opacity="1" stroke-opacity="1"></path></svg><g clip-path="url(#c1)"><g transform="translate(615.6 42) matrix(0 1 -1 0 0 0) translate(-615.6 -42)"><svg viewBox="0 0 24 24" fill="none" stroke="rgb(220, 230, 227)" stroke-width="2px" stroke-linecap="butt" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1" x="609.6" y="36" width="12" height="12" color="rgb(220, 230, 227)"><path d="M9 6l6 6-6 6" stroke-linecap="round" stroke-linejoin="round" fill="none" stroke="rgb(220, 230, 227)" stroke-width="2px" fill-opacity="1" stroke-opacity="1"></path></svg></g></g><g clip-path="url(#c1)"><svg viewBox="0 0 24 24" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="round" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1" x="968" y="33" width="16" height="16" color="rgb(140, 157, 155)"><path d="M6 6l12 12M18 6L6 18" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="round" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1"></path></svg></g><g clip-path="url(#c1)"><svg viewBox="0 0 24 24" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="round" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1" x="307" y="118" width="14" height="14" color="rgb(140, 157, 155)"><circle cx="11" cy="11" r="6" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="round" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1"></circle><path d="M20 20l-4.5-4.5" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="round" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1"></path></svg></g><g clip-path="url(#c2)"><svg viewBox="0 0 24 24" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="butt" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1" x="309" y="295" width="14" height="14" color="rgb(140, 157, 155)"><path d="M3 6a2 2 0 0 1 2-2h4l2 2h8a2 2 0 0 1 2 2v10a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2zM12 10v6M9 13h6" stroke-linecap="round" stroke-linejoin="round" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" fill-opacity="1" stroke-opacity="1"></path></svg></g><g clip-path="url(#c2)"><svg viewBox="0 0 24 24" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" stroke-linecap="butt" stroke-linejoin="miter" fill-opacity="1" stroke-opacity="1" x="309" y="477" width="14" height="14" color="rgb(140, 157, 155)"><path d="M3 6a2 2 0 0 1 2-2h4l2 2h8a2 2 0 0 1 2 2v10a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2zM12 10v6M9 13h6" stroke-linecap="round" stroke-linejoin="round" fill="none" stroke="rgb(140, 157, 155)" stroke-width="2px" fill-opacity="1" stroke-opacity="1"></path></svg></g><text x="41" y="66.5" class="f0" font-size="13" font-weight="600" fill="rgb(220, 230, 227)" textLength="34">Hosts</text><text x="239.4" y="67" class="f1" font-size="12" fill="rgb(140, 157, 155)">5</text><text x="41" y="97.5" class="f0" font-size="13" fill="rgb(140, 157, 155)" textLength="40.9">Groups</text><text x="239.4" y="98" class="f1" font-size="12" fill="rgb(140, 157, 155)">2</text><text x="41" y="128.5" class="f0" font-size="13" fill="rgb(140, 157, 155)" textLength="26.7">Keys</text><text x="239.4" y="129" class="f1" font-size="12" fill="rgb(140, 157, 155)">1</text><text x="41" y="159.5" class="f0" font-size="13" fill="rgb(140, 157, 155)" textLength="50.2">Snippets</text><text x="41" y="190.5" class="f0" font-size="13" fill="rgb(140, 157, 155)" textLength="44.6">Tunnels</text><text x="41" y="221.5" class="f0" font-size="13" fill="rgb(140, 157, 155)" textLength="30.5">VPNs</text><text x="41" y="252.5" class="f0" font-size="13" fill="rgb(140, 157, 155)" textLength="72">Session logs</text><text x="45" y="294" class="f0" font-size="13" fill="rgb(220, 230, 227)" textLength="73.9" clip-path="url(#c8)">Search hosts</text><text x="14" y="339" class="f0" font-size="11" font-weight="700" letter-spacing="0.88" fill="rgb(140, 157, 155)" textLength="40.3" clip-path="url(#c0)">HOSTS</text><text x="48" y="364.5" class="f0" font-size="13" font-weight="600" fill="rgb(220, 230, 227)" textLength="44.2" clip-path="url(#c9)">bastion</text><text x="48" y="383" class="f1" font-size="11" fill="rgb(140, 157, 155)" textLength="152.9" clip-path="url(#c10)">deploy@bastion.shop.e…</text><text x="24" y="407" class="f0" font-size="12" font-weight="600" fill="rgb(140, 157, 155)" textLength="59.8" clip-path="url(#c11)">Production</text><text x="89.8" y="407" class="f0" font-size="12" fill="rgb(140, 157, 155)" clip-path="url(#c0)">3</text><text x="59" y="432.5" class="f0" font-size="13" font-weight="600" fill="rgb(220, 230, 227)" textLength="25.8" clip-path="url(#c12)">db-1</text><text x="59" y="451" class="f1" font-size="11" fill="rgb(140, 157, 155)" textLength="118.2" clip-path="url(#c13)">deploy@10.0.12.40</text><text x="59" y="470.5" class="f0" font-size="13" font-weight="600" fill="rgb(220, 230, 227)" textLength="34.6" clip-path="url(#c14)">web-1</text><text x="59" y="489" class="f1" font-size="11" fill="rgb(140, 157, 155)" textLength="138.7" clip-path="url(#c15)">deploy@10.0.12.34:…</text><text x="59" y="508.5" class="f0" font-size="13" font-weight="600" fill="rgb(220, 230, 227)" textLength="36.4" clip-path="url(#c16)">web-2</text><text x="59" y="527" class="f1" font-size="11" fill="rgb(140, 157, 155)" textLength="118.2" clip-path="url(#c17)">deploy@10.0.12.35</text><text x="24" y="551" class="f0" font-size="12" font-weight="600" fill="rgb(140, 157, 155)" textLength="42.1" clip-path="url(#c18)">Staging</text><text x="72.1" y="551" class="f0" font-size="12" fill="rgb(140, 157, 155)" clip-path="url(#c0)">1</text><text x="59" y="576.5" class="f0" font-size="13" font-weight="600" fill="rgb(220, 230, 227)" textLength="44.4" clip-path="url(#c19)">staging</text><text x="59" y="595" class="f1" font-size="11" fill="rgb(140, 157, 155)" textLength="118.2" clip-path="url(#c20)">deploy@10.0.20.11</text><text x="41" y="575.5" class="f0" font-size="13" fill="rgb(140, 157, 155)" textLength="45.6" clip-path="url(#c21)">Sync off</text><text x="296" y="42" class="f2" font-size="30" font-weight="600" letter-spacing="-0.6" fill="rgb(220, 230, 227)" textLength="102" clip-path="url(#c1)">Hosts</text><text x="542" y="41.5" class="f0" font-size="13" fill="rgb(220, 230, 227)" textLength="61.5" clip-path="url(#c1)">Add from…</text><text x="659.6" y="41.5" class="f0" font-size="13" fill="rgb(220, 230, 227)" textLength="81.7" clip-path="url(#c1)">Quick connect</text><text x="779.3" y="41.5" class="f0" font-size="13" fill="rgb(220, 230, 227)" textLength="61.5" clip-path="url(#c1)">New group</text><text x="879.8" y="41.5" class="f0" font-size="13" font-weight="700" fill="rgb(4, 38, 30)" textLength="56.2" clip-path="url(#c1)">New host</text><text x="959" y="47" class="f0" font-size="13" fill="rgb(140, 157, 155)" textLength="31.9" clip-path="url(#c22)">Close</text><text x="296" y="77.5" class="f0" font-size="13" fill="rgb(140, 157, 155)" textLength="112.3" clip-path="url(#c1)">5 hosts in 2 groups.</text><text x="329" y="125" class="f0" font-size="13" fill="rgb(220, 230, 227)" textLength="210.9" clip-path="url(#c23)">Search by name, address, user or tag</text><text x="655" y="125" class="f0" font-size="12" fill="rgb(140, 157, 155)" textLength="25.6" clip-path="url(#c1)">shop</text><text x="686.6" y="125" class="f0" font-size="12" font-weight="600" fill="rgb(220, 230, 227)" clip-path="url(#c1)">3</text><text x="720.2" y="125" class="f0" font-size="12" fill="rgb(140, 157, 155)" textLength="45.7" clip-path="url(#c1)">postgres</text><text x="771.9" y="125" class="f0" font-size="12" font-weight="600" fill="rgb(220, 230, 227)" clip-path="url(#c1)">1</text><text x="947.9" y="125" class="f0" font-size="12" fill="rgb(140, 157, 155)" textLength="33.1" clip-path="url(#c1)">Select</text><text x="309" y="182.5" class="f0" font-size="11" font-weight="700" letter-spacing="0.88" fill="rgb(140, 157, 155)" textLength="32.8" clip-path="url(#c2)">HOST</text><text x="511.7" y="182.5" class="f0" font-size="11" font-weight="700" letter-spacing="0.88" fill="rgb(140, 157, 155)" textLength="40.4" clip-path="url(#c2)">ROUTE</text><text x="644.3" y="182.5" class="f0" font-size="11" font-weight="700" letter-spacing="0.88" fill="rgb(140, 157, 155)" textLength="93.4" clip-path="url(#c2)">SIGNS IN WITH</text><text x="777" y="182.5" class="f0" font-size="11" font-weight="700" letter-spacing="0.88" fill="rgb(140, 157, 155)" textLength="31.2" clip-path="url(#c2)">TAGS</text><text x="862" y="191" class="f0" font-size="13" fill="rgb(220, 230, 227)" textLength="42.5" clip-path="url(#c24)">Actions</text><text x="309" y="216.5" class="f0" font-size="13" font-weight="600" fill="rgb(220, 230, 227)" textLength="85.6" clip-path="url(#c2)">Not in a group</text><text x="404.6" y="216.5" class="f0" font-size="13" fill="rgb(140, 157, 155)" clip-path="url(#c2)">1</text><text x="329" y="249.5" class="f0" font-size="13" font-weight="600" fill="rgb(220, 230, 227)" textLength="44.2" clip-path="url(#c25)">bastion</text><text x="329" y="268" class="f1" font-size="12" fill="rgb(140, 157, 155)" textLength="159.3" clip-path="url(#c26)">deploy@bastion.shop.…</text><text x="511.7" y="257.5" class="f0" font-size="13" fill="rgb(140, 157, 155)" textLength="32.8" clip-path="url(#c2)">direct</text><text x="644.3" y="257.5" class="f0" font-size="13" fill="rgb(220, 230, 227)" clip-path="url(#c27)">key</text><text x="666.7" y="258" class="f1" font-size="12" fill="rgb(220, 230, 227)" textLength="45.5" clip-path="url(#c27)">deploy</text><text x="329" y="301.5" class="f0" font-size="13" font-weight="600" fill="rgb(220, 230, 227)" textLength="64.8" clip-path="url(#c2)">Production</text><text x="403.8" y="301.5" class="f0" font-size="13" fill="rgb(140, 157, 155)" clip-path="url(#c2)">3</text><text x="913.9" y="302" class="f0" font-size="12" font-weight="600" fill="rgb(61, 219, 182)" textLength="57.1" clip-path="url(#c2)">Edit group</text><text x="351" y="337.5" class="f0" font-size="13" font-weight="600" fill="rgb(220, 230, 227)" textLength="25.8" clip-path="url(#c28)">db-1</text><text x="351" y="356" class="f1" font-size="12" fill="rgb(140, 157, 155)" textLength="144.1" clip-path="url(#c29)">deploy@10.0.12.40:…</text><text x="511.7" y="345.5" class="f0" font-size="13" fill="rgb(140, 157, 155)" textLength="32.8" clip-path="url(#c2)">direct</text><text x="644.3" y="345.5" class="f0" font-size="13" fill="rgb(220, 230, 227)" clip-path="url(#c30)">key</text><text x="666.7" y="346" class="f1" font-size="12" fill="rgb(220, 230, 227)" textLength="45.5" clip-path="url(#c30)">deploy</text><text x="783" y="346" class="f1" font-size="11" fill="rgb(140, 157, 155)" textLength="55.6" clip-path="url(#c2)">postgres</text><text x="351" y="384.5" class="f0" font-size="13" font-weight="600" fill="rgb(220, 230, 227)" textLength="34.6" clip-path="url(#c31)">web-1</text><text x="351" y="403" class="f1" font-size="12" fill="rgb(140, 157, 155)" textLength="143.3" clip-path="url(#c32)">deploy@10.0.12.34…</text><text x="511.7" y="392.5" class="f0" font-size="13" fill="rgb(140, 157, 155)" textLength="32.8" clip-path="url(#c2)">direct</text><text x="644.3" y="381.5" class="f0" font-size="13" fill="rgb(220, 230, 227)" clip-path="url(#c33)">key</text><text x="666.7" y="382" class="f1" font-size="12" fill="rgb(220, 230, 227)" textLength="45.5" clip-path="url(#c33)">deploy</text><text x="644.3" y="406" class="f0" font-size="12" fill="rgb(140, 157, 155)" textLength="46.8" clip-path="url(#c34)">recorded</text><text x="783" y="393" class="f1" font-size="11" fill="rgb(140, 157, 155)" textLength="27.8" clip-path="url(#c2)">shop</text><text x="351" y="431.5" class="f0" font-size="13" font-weight="600" fill="rgb(220, 230, 227)" textLength="36.4" clip-path="url(#c35)">web-2</text><text x="351" y="450" class="f1" font-size="12" fill="rgb(140, 157, 155)" textLength="144.1" clip-path="url(#c36)">deploy@10.0.12.35:…</text><text x="511.7" y="439.5" class="f0" font-size="13" fill="rgb(140, 157, 155)" textLength="32.8" clip-path="url(#c2)">direct</text><text x="644.3" y="439.5" class="f0" font-size="13" fill="rgb(220, 230, 227)" clip-path="url(#c37)">key</text><text x="666.7" y="440" class="f1" font-size="12" fill="rgb(220, 230, 227)" textLength="45.5" clip-path="url(#c37)">deploy</text><text x="783" y="440" class="f1" font-size="11" fill="rgb(140, 157, 155)" textLength="27.8" clip-path="url(#c2)">shop</text><text x="329" y="483.5" class="f0" font-size="13" font-weight="600" fill="rgb(220, 230, 227)" textLength="45.6" clip-path="url(#c2)">Staging</text><text x="384.6" y="483.5" class="f0" font-size="13" fill="rgb(140, 157, 155)" clip-path="url(#c2)">1</text><text x="913.9" y="484" class="f0" font-size="12" font-weight="600" fill="rgb(61, 219, 182)" textLength="57.1" clip-path="url(#c2)">Edit group</text><text x="351" y="519.5" class="f0" font-size="13" font-weight="600" fill="rgb(220, 230, 227)" textLength="44.4" clip-path="url(#c38)">staging</text><text x="351" y="538" class="f1" font-size="12" fill="rgb(140, 157, 155)" textLength="144.1" clip-path="url(#c39)">deploy@10.0.20.11:…</text><text x="511.7" y="527.5" class="f0" font-size="13" fill="rgb(140, 157, 155)" textLength="32.8" clip-path="url(#c2)">direct</text><text x="644.3" y="527.5" class="f0" font-size="13" fill="rgb(220, 230, 227)" clip-path="url(#c40)">key</text><text x="666.7" y="528" class="f1" font-size="12" fill="rgb(220, 230, 227)" textLength="45.5" clip-path="url(#c40)">deploy</text><text x="783" y="528" class="f1" font-size="11" fill="rgb(140, 157, 155)" textLength="27.8" clip-path="url(#c2)">shop</text><circle class="rip" cx="371" cy="393" r="14" fill="none" stroke="#3ddbb6" stroke-width="2"/></g>
+<g class="ptr"><path d="M0 0v17l4.2-4.1 3 6.9 3.1-1.3-3-6.8H13z" fill="#ffffff" stroke="#0a1113" stroke-width="1.2" stroke-linejoin="round"/></g>
+</g>
+<rect x="0.5" y="0.5" width="1023" height="599" rx="10" fill="none" stroke="#24343a"/>
+</svg>
diff --git a/crates/mg-inventory/src/feed.rs b/crates/mg-inventory/src/feed.rs
new file mode 100644
index 0000000..f27e5d4
--- /dev/null
+++ b/crates/mg-inventory/src/feed.rs
@@ -0,0 +1,664 @@
+//! Feeds: hosts and snippets from a URL, as a JSON document a team publishes (from Terraform
+//! output, a CMDB, a cron job, an internal endpoint), read with a token (docs/features/
+//! cloud-sources.md, "Feeds"). A feed carries data only: nothing in it runs on the device (no
+//! proxy or local commands, no reaching through a cloud). Entries that don't hold up are skipped
+//! and said; a document that doesn't is refused whole, so a bad one changes nothing.
+
+use std::collections::{HashMap, HashSet};
+use std::time::Duration;
+
+use serde::{Deserialize, Serialize};
+use serde_json::Value;
+use url::Url;
+
+use crate::{Error, InventoryHost, Result};
+
+/// The format this version reads.
+pub const VERSION: u64 = 1;
+/// The largest document read.
+pub const MAX_BYTES: usize = 5 * 1024 * 1024;
+pub const MAX_HOSTS: usize = 5_000;
+pub const MAX_SNIPPETS: usize = 1_000;
+/// The largest snippet body.
+pub const MAX_BODY: usize = 64 * 1024;
+/// How long a feed has to answer.
+pub const TIMEOUT: Duration = Duration::from_secs(60);
+
+/// An entry's `id`, and how long a label, group, tag or state may be.
+const MAX_ID: usize = 200;
+const MAX_TEXT: usize = 200;
+const MAX_TAG: usize = 64;
+const MAX_TAGS: usize = 50;
+const MAX_HOST_KEYS: usize = 16;
+
+/// Host key types a feed may list (OpenSSH's, without certificates).
+const KEY_TYPES: [&str; 7] = [
+    "ssh-ed25519",
+    "ecdsa-sha2-nistp256",
+    "ecdsa-sha2-nistp384",
+    "ecdsa-sha2-nistp521",
+    "ssh-rsa",
+    "sk-ssh-ed25519@openssh.com",
+    "sk-ecdsa-sha2-nistp256@openssh.com",
+];
+
+/// A snippet as a feed gives it.
+#[derive(Clone, Debug, PartialEq, Eq, Serialize)]
+#[serde(rename_all = "camelCase")]
+pub struct FeedSnippet {
+    /// `feed:<id>`: what a refresh matches the vault's snippet on.
+    pub external_id: String,
+    pub name: String,
+    pub body: String,
+    pub tags: Vec<String>,
+}
+
+/// What a feed lists.
+#[derive(Clone, Debug, Default, PartialEq, Eq)]
+pub struct Feed {
+    /// What the feed calls itself (`"Vallic operations"`).
+    pub name: Option<String>,
+    pub hosts: Vec<InventoryHost>,
+    pub snippets: Vec<FeedSnippet>,
+    /// Entries left out, and why (`server-1234: the port isn't 1 to 65535`).
+    pub skipped: Vec<String>,
+}
+
+fn local(url: &Url) -> bool {
+    matches!(url.host_str(), Some("localhost" | "127.0.0.1" | "[::1]"))
+}
+
+/// A feed's address: `https://`, or `http://` on this computer.
+pub fn check_url(url: &str) -> Result<Url> {
+    let url = url.trim();
+    let parsed = Url::parse(url).map_err(|e| Error::Api(format!("{url}: {e}")))?;
+    if parsed.scheme() == "https" || (parsed.scheme() == "http" && local(&parsed)) {
+        Ok(parsed)
+    } else {
+        Err(Error::Api(format!(
+            "{url}: a feed's address starts with https://"
+        )))
+    }
+}
+
+/// Reads the feed at `url` with `token`. `name` is the source's, for messages.
+pub async fn fetch(name: &str, url: &str, token: &str) -> Result<Feed> {
+    let url = check_url(url)?;
+    // Redirects stay on https (or this computer); the token isn't sent to another host.
+    let redirects = reqwest::redirect::Policy::custom(|attempt| {
+        let ok = attempt.url().scheme() == "https"
+            || (attempt.url().scheme() == "http" && local(attempt.url()));
+        if attempt.previous().len() >= 5 || !ok {
+            attempt.stop()
+        } else {
+            attempt.follow()
+        }
+    });
+    let http = reqwest::Client::builder()
+        .user_agent(concat!("MorphGate/", env!("CARGO_PKG_VERSION")))
+        .timeout(TIMEOUT)
+        .redirect(redirects)
+        .build()
+        .map_err(|e| Error::Api(e.to_string()))?;
+    let failed = |e: reqwest::Error| {
+        if e.is_timeout() {
+            Error::Api(format!("{name} took longer than 60 s to answer"))
+        } else {
+            Error::Unreachable(name.to_owned(), e.to_string())
+        }
+    };
+    let mut response = http
+        .get(url)
+        .bearer_auth(token)
+        .header("Accept", "application/json")
+        .send()
+        .await
+        .map_err(failed)?;
+    match response.status().as_u16() {
+        200..=299 => {}
+        401 | 403 => return Err(Error::TokenRefused(name.to_owned())),
+        status => {
+            return Err(Error::Api(
+                format!(
+                    "{name} answered {status} {}",
+                    response.status().canonical_reason().unwrap_or("")
+                )
+                .trim_end()
+                .to_owned(),
+            ));
+        }
+    }
+    let too_large = || {
+        Error::Api(format!(
+            "{name} sent more than 5 MiB: a feed is at most that"
+        ))
+    };
+    if response
+        .content_length()
+        .is_some_and(|n| n > MAX_BYTES as u64)
+    {
+        return Err(too_large());
+    }
+    let mut body = Vec::new();
+    while let Some(chunk) = response.chunk().await.map_err(failed)? {
+        if body.len() + chunk.len() > MAX_BYTES {
+            return Err(too_large());
+        }
+        body.extend_from_slice(&chunk);
+    }
+    parse(name, &body)
+}
+
+/// An optional field: absent and `null` both read as empty.
+fn nullable<'de, D, T>(d: D) -> std::result::Result<T, D::Error>
+where
+    D: serde::Deserializer<'de>,
+    T: Default + Deserialize<'de>,
+{
+    Ok(Option::<T>::deserialize(d)?.unwrap_or_default())
+}
+
+#[derive(Deserialize)]
+struct RawHost {
+    id: String,
+    #[serde(default, deserialize_with = "nullable")]
+    label: String,
+    hostname: String,
+    #[serde(default)]
+    port: Option<u64>,
+    user: String,
+    #[serde(default, deserialize_with = "nullable")]
+    group: String,
+    #[serde(default, deserialize_with = "nullable")]
+    tags: Vec<String>,
+    #[serde(default)]
+    jump: Option<String>,
+    #[serde(default)]
+    key: Option<String>,
+    #[serde(default, deserialize_with = "nullable")]
+    host_keys: Vec<String>,
+    #[serde(default)]
+    state: Option<String>,
+}
+
+#[derive(Deserialize)]
+struct RawSnippet {
+    id: String,
+    name: String,
+    body: String,
+    #[serde(default, deserialize_with = "nullable")]
+    tags: Vec<String>,
+}
+
+/// `[A-Za-z0-9._:/@-]`, 1 to 200 characters.
+fn valid_id(id: &str) -> bool {
+    !id.is_empty()
+        && id.len() <= MAX_ID
+        && id
+            .bytes()
+            .all(|b| b.is_ascii_alphanumeric() || b"._:/@-".contains(&b))
+}
+
+/// A host name or user: no whitespace or control characters, and no leading `-` (it would read
+/// as an option).
+fn word(s: &str, what: &str) -> std::result::Result<String, String> {
+    if s.is_empty() {
+        return Err(format!("no {what}"));
+    }
+    if s.len() > 255 || s.starts_with('-') || s.chars().any(|c| c.is_whitespace() || c.is_control())
+    {
+        return Err(format!("the {what} {s:?} isn't one SSH can use"));
+    }
+    Ok(s.to_owned())
+}
+
+/// Text to show: control characters out, trimmed, at most `max` characters.
+fn text(s: &str, max: usize) -> String {
+    let clean: String = s
+        .chars()
+        .map(|c| if c.is_control() { ' ' } else { c })
+        .collect();
+    clean
+        .trim()
+        .chars()
+        .take(max)
+        .collect::<String>()
+        .trim()
+        .to_owned()
+}
+
+fn tags(raw: &[String]) -> Vec<String> {
+    let mut out: Vec<String> = Vec::new();
+    for t in raw {
+        let t = text(t, MAX_TAG);
+        if !t.is_empty() && !out.iter().any(|x| x.eq_ignore_ascii_case(&t)) {
+            out.push(t);
+        }
+    }
+    out.truncate(MAX_TAGS);
+    out
+}
+
+/// Standard base64, padded.
+fn base64(s: &str) -> bool {
+    !s.is_empty()
+        && s.len().is_multiple_of(4)
+        && s.trim_end_matches('=').len() + 2 >= s.len()
+        && s.trim_end_matches('=')
+            .bytes()
+            .all(|b| b.is_ascii_alphanumeric() || b == b'+' || b == b'/')
+}
+
+/// A host key line as `type base64` (a comment after it is dropped).
+fn host_key(line: &str) -> std::result::Result<String, String> {
+    let mut words = line.split_whitespace();
+    match (words.next(), words.next()) {
+        (Some(kind), Some(data)) if KEY_TYPES.contains(&kind) && base64(data) => {
+            Ok(format!("{kind} {data}"))
+        }
+        _ => Err(format!(
+            "the host key {:?} isn't an OpenSSH public key (type and base64)",
+            text(line, 40)
+        )),
+    }
+}
+
+fn host(raw: RawHost) -> std::result::Result<(String, InventoryHost), String> {
+    let hostname = word(raw.hostname.trim(), "host name")?;
+    let user = word(raw.user.trim(), "user")?;
+    let port = match raw.port {
+        None => 22,
+        Some(p @ 1..=65535) => p as u16,
+        Some(_) => return Err("the port isn't 1 to 65535".into()),
+    };
+    let jump = match raw.jump.as_deref().map(str::trim).filter(|j| !j.is_empty()) {
+        Some(j) if j == raw.id => return Err("it can't be its own jump host".into()),
+        Some(j) if !valid_id(j) => {
+            return Err(format!("the jump host {:?} isn't an id", text(j, 40)));
+        }
+        other => other.map(str::to_owned),
+    };
+    if raw.host_keys.len() > MAX_HOST_KEYS {
+        return Err(format!("more than {MAX_HOST_KEYS} host keys"));
+    }
+    let host_keys = raw
+        .host_keys
+        .iter()
+        .map(|k| host_key(k))
+        .collect::<std::result::Result<Vec<_>, _>>()?;
+    let label = match text(&raw.label, MAX_TEXT) {
+        l if l.is_empty() => raw.id.clone(),
+        l => l,
+    };
+    let state = raw
+        .state
+        .map(|s| text(&s, MAX_TAG))
+        .filter(|s| !s.is_empty() && !s.eq_ignore_ascii_case("running"));
+    Ok((
+        jump.unwrap_or_default(),
+        InventoryHost {
+            external_id: format!("feed:{}", raw.id),
+            group: text(&raw.group, MAX_TEXT),
+            label,
+            hostname,
+            port,
+            user,
+            login_command: None,
+            jump: None,
+            jump_command: None,
+            no_sftp: false,
+            no_forwarding: false,
+            state,
+            key_name: raw
+                .key
+                .map(|k| text(&k, MAX_TEXT))
+                .filter(|k| !k.is_empty()),
+            via: None,
+            host_keys,
+            tags: tags(&raw.tags),
+        },
+    ))
+}
+
+fn snippet(raw: RawSnippet) -> std::result::Result<FeedSnippet, String> {
+    let name = text(&raw.name, MAX_TEXT);
+    if name.is_empty() {
+        return Err("no name".into());
+    }
+    if raw.body.trim().is_empty() {
+        return Err("no body".into());
+    }
+    if raw.body.len() > MAX_BODY {
+        return Err("the body is over 64 KiB".into());
+    }
+    // A terminal reads escape sequences as more than text.
+    if raw
+        .body
+        .chars()
+        .any(|c| c.is_control() && !matches!(c, '\n' | '\r' | '\t'))
+    {
+        return Err("the body has control characters".into());
+    }
+    Ok(FeedSnippet {
+        external_id: format!("feed:{}", raw.id),
+        name,
+        body: raw.body,
+        tags: tags(&raw.tags),
+    })
+}
+
+/// What an entry is called in messages: its id, else its place in the list.
+fn entry_name(v: &Value, kind: &str, n: usize) -> String {
+    match v.get("id").and_then(Value::as_str) {
+        Some(id) if valid_id(id) => id.to_owned(),
+        _ => format!("{kind} {}", n + 1),
+    }
+}
+
+/// Reads a feed document. `name` is the source's, for messages.
+pub fn parse(name: &str, bytes: &[u8]) -> Result<Feed> {
+    let unreadable = |why: String| {
+        Error::Api(format!(
+            "{name} sent something this version can't read: {why}"
+        ))
+    };
+    let doc: Value = serde_json::from_slice(bytes).map_err(|e| unreadable(e.to_string()))?;
+    let obj = doc
+        .as_object()
+        .ok_or_else(|| unreadable("not a JSON object".into()))?;
+    match obj.get("version").and_then(Value::as_u64) {
+        Some(VERSION) => {}
+        Some(n) if n > VERSION => {
+            return Err(Error::Api(format!(
+                "{name} is a version {n} feed: update MorphGate to read it"
+            )));
+        }
+        _ => return Err(unreadable("no \"version\": 1".into())),
+    }
+    let list = |key: &str| match obj.get(key) {
+        None | Some(Value::Null) => Ok(&[][..]),
+        Some(Value::Array(a)) => Ok(a.as_slice()),
+        Some(_) => Err(unreadable(format!("\"{key}\" isn't a list"))),
+    };
+    let (raw_hosts, raw_snippets) = (list("hosts")?, list("snippets")?);
+    if raw_hosts.len() > MAX_HOSTS {
+        return Err(Error::Api(format!(
+            "{name} lists {} hosts: a feed holds at most 5,000",
+            raw_hosts.len()
+        )));
+    }
+    if raw_snippets.len() > MAX_SNIPPETS {
+        return Err(Error::Api(format!(
+            "{name} lists {} snippets: a feed holds at most 1,000",
+            raw_snippets.len()
+        )));
+    }
+    let mut feed = Feed {
+        name: obj
+            .get("name")
+            .and_then(Value::as_str)
+            .map(|n| text(n, MAX_TEXT))
+            .filter(|n| !n.is_empty()),
+        ..Feed::default()
+    };
+
+    // Hosts, with the id of the one each jumps through.
+    let mut hosts: Vec<(String, String, InventoryHost)> = Vec::new();
+    let mut seen = HashSet::new();
+    for (n, v) in raw_hosts.iter().enumerate() {
+        let entry = entry_name(v, "host", n);
+        let parsed = serde_json::from_value::<RawHost>(v.clone())
+            .map_err(|e| e.to_string())
+            .and_then(|raw| {
+                if !valid_id(&raw.id) {
+                    return Err("its id isn't 1 to 200 of A-Z, a-z, 0-9 and . _ : / @ -".into());
+                }
+                if !seen.insert(raw.id.clone()) {
+                    return Err("another host has this id".into());
+                }
+                let id = raw.id.clone();
+                host(raw).map(|(jump, h)| (id, jump, h))
+            });
+        match parsed {
+            Ok(h) => hosts.push(h),
+            Err(why) => feed.skipped.push(format!("{entry}: {why}")),
+        }
+    }
+    // A jump host must be one of the feed's own, kept, and not lead round in a circle.
+    let mut circular = Vec::new();
+    {
+        let jumps: HashMap<&str, &str> = hosts
+            .iter()
+            .filter(|(_, j, _)| !j.is_empty())
+            .map(|(id, j, _)| (id.as_str(), j.as_str()))
+            .collect();
+        // In a circle: following its jump hosts comes back to it. (One that only leads into a
+        // circle goes with the hosts it jumps through, below.)
+        for (id, _, _) in &hosts {
+            let mut at = id.as_str();
+            for _ in 0..hosts.len() {
+                match jumps.get(at) {
+                    Some(next) if *next == id.as_str() => {
+                        circular.push(id.clone());
+                        break;
+                    }
+                    Some(next) => at = next,
+                    None => break,
+                }
+            }
+        }
+    }
+    hosts.retain(|(id, _, _)| {
+        let keep = !circular.contains(id);
+        if !keep {
+            feed.skipped
+                .push(format!("{id}: its jump hosts go round in a circle"));
+        }
+        keep
+    });
+    loop {
+        let kept: HashSet<String> = hosts.iter().map(|(id, _, _)| id.clone()).collect();
+        let before = hosts.len();
+        hosts.retain(|(id, jump, _)| {
+            let keep = jump.is_empty() || kept.contains(jump);
+            if !keep {
+                feed.skipped.push(format!(
+                    "{id}: its jump host {jump:?} isn't one of the feed's hosts (or was skipped)"
+                ));
+            }
+            keep
+        });
+        if hosts.len() == before {
+            break;
+        }
+    }
+    feed.hosts = hosts
+        .into_iter()
+        .map(|(_, jump, mut h)| {
+            h.jump = (!jump.is_empty()).then(|| format!("feed:{jump}"));
+            h
+        })
+        .collect();
+
+    let mut seen = HashSet::new();
+    for (n, v) in raw_snippets.iter().enumerate() {
+        let entry = entry_name(v, "snippet", n);
+        let parsed = serde_json::from_value::<RawSnippet>(v.clone())
+            .map_err(|e| e.to_string())
+            .and_then(|raw| {
+                if !valid_id(&raw.id) {
+                    return Err("its id isn't 1 to 200 of A-Z, a-z, 0-9 and . _ : / @ -".into());
+                }
+                if !seen.insert(raw.id.clone()) {
+                    return Err("another snippet has this id".into());
+                }
+                snippet(raw)
+            });
+        match parsed {
+            Ok(s) => feed.snippets.push(s),
+            Err(why) => feed.skipped.push(format!("{entry}: {why}")),
+        }
+    }
+    Ok(feed)
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use serde_json::json;
+
+    const KEY: &str =
+        "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOMqqnkVzrm0SdG6UOoqKLsabgH5C9okWi0dh2l9GKJl";
+
+    fn parsed(doc: Value) -> Feed {
+        parse("Ops", doc.to_string().as_bytes()).unwrap()
+    }
+
+    #[test]
+    fn the_roadmap_example_reads() {
+        let feed = parsed(json!({
+            "version": 1,
+            "name": "Vallic operations",
+            "hosts": [
+                { "id": "bastion-fsn1", "label": "Bastion FSN1", "hostname": "bastion-fsn1.example.net",
+                  "port": 22, "user": "vallic", "group": "Bastions", "host_keys": [KEY] },
+                { "id": "server-1234", "label": "acme-prod-1", "hostname": "10.0.12.34", "port": 2222,
+                  "user": "vallic", "group": "Acme", "tags": ["production", "fsn1"], "jump": "bastion-fsn1",
+                  "key": "vallic-customers", "host_keys": [format!("{KEY} root@bastion")], "state": "running" }
+            ],
+            "snippets": [
+                { "id": "php-errors", "name": "PHP error log", "body": "podman logs --tail 200 php", "tags": ["diagnostics"] }
+            ]
+        }));
+        assert_eq!(feed.name.as_deref(), Some("Vallic operations"));
+        assert!(feed.skipped.is_empty(), "{:?}", feed.skipped);
+        let [bastion, server] = &feed.hosts[..] else {
+            panic!("two hosts: {:?}", feed.hosts)
+        };
+        assert_eq!(bastion.external_id, "feed:bastion-fsn1");
+        assert_eq!(bastion.jump, None);
+        assert_eq!(server.jump.as_deref(), Some("feed:bastion-fsn1"));
+        assert_eq!(
+            (
+                server.hostname.as_str(),
+                server.port,
+                server.user.as_str(),
+                server.group.as_str()
+            ),
+            ("10.0.12.34", 2222, "vallic", "Acme")
+        );
+        assert_eq!(server.key_name.as_deref(), Some("vallic-customers"));
+        // The comment is dropped; "running" is no state to show.
+        assert_eq!(server.host_keys, [KEY]);
+        assert_eq!(server.state, None);
+        assert_eq!(server.tags, ["production", "fsn1"]);
+        assert!(server.login_command.is_none() && server.via.is_none());
+        assert_eq!(
+            feed.snippets,
+            [FeedSnippet {
+                external_id: "feed:php-errors".into(),
+                name: "PHP error log".into(),
+                body: "podman logs --tail 200 php".into(),
+                tags: vec!["diagnostics".into()],
+            }]
+        );
+    }
+
+    #[test]
+    fn defaults_and_optional_fields() {
+        let feed = parsed(json!({
+            "version": 1,
+            "hosts": [{ "id": "web", "hostname": "web.example", "user": "deploy", "group": null,
+                        "tags": null, "state": "stopped" }]
+        }));
+        let h = &feed.hosts[0];
+        assert_eq!(
+            (h.label.as_str(), h.port, h.group.as_str()),
+            ("web", 22, "")
+        );
+        assert_eq!(h.state.as_deref(), Some("stopped"));
+        assert!(h.host_keys.is_empty() && h.key_name.is_none());
+        assert!(feed.name.is_none() && feed.snippets.is_empty());
+    }
+
+    #[test]
+    fn invalid_entries_are_skipped_and_said() {
+        let feed = parsed(json!({
+            "version": 1,
+            "hosts": [
+                { "id": "ok", "hostname": "ok.example", "user": "u" },
+                { "id": "ok", "hostname": "again.example", "user": "u" },
+                { "id": "bad id!", "hostname": "x", "user": "u" },
+                { "id": "dash", "hostname": "-oProxyCommand=x", "user": "u" },
+                { "id": "space", "hostname": "a b", "user": "u" },
+                { "id": "nouser", "hostname": "x.example" },
+                { "id": "port", "hostname": "x.example", "user": "u", "port": 70000 },
+                { "id": "key", "hostname": "x.example", "user": "u", "host_keys": ["ssh-dss AAAA"] },
+                { "id": "notbase64", "hostname": "x.example", "user": "u", "host_keys": ["ssh-ed25519 $(id)"] },
+                { "id": "orphan", "hostname": "x.example", "user": "u", "jump": "nowhere" },
+                { "id": "a", "hostname": "a.example", "user": "u", "jump": "b" },
+                { "id": "b", "hostname": "b.example", "user": "u", "jump": "a" },
+                { "id": "behind-a", "hostname": "c.example", "user": "u", "jump": "a" },
+                { "id": "self", "hostname": "s.example", "user": "u", "jump": "self" },
+                "not an object"
+            ],
+            "snippets": [
+                { "id": "ok", "name": "Uptime", "body": "uptime" },
+                { "id": "esc", "name": "Sneaky", "body": "echo \u{1b}[201~" },
+                { "id": "empty", "name": "Nothing", "body": "  " },
+                { "id": "big", "name": "Big", "body": "x".repeat(MAX_BODY + 1) }
+            ]
+        }));
+        assert_eq!(feed.hosts.len(), 1, "{:?}", feed.hosts);
+        assert_eq!(feed.snippets.len(), 1);
+        let said = feed.skipped.join("\n");
+        for expected in [
+            "ok: another host has this id",
+            "host 3: its id isn't",
+            "dash: the host name \"-oProxyCommand=x\" isn't one SSH can use",
+            "space: the host name",
+            "nouser: missing field `user`",
+            "port: the port isn't 1 to 65535",
+            "key: the host key \"ssh-dss AAAA\" isn't an OpenSSH public key",
+            "notbase64: the host key",
+            "orphan: its jump host \"nowhere\" isn't one of the feed's hosts",
+            "a: its jump hosts go round in a circle",
+            "b: its jump hosts go round in a circle",
+            "behind-a: its jump host \"a\" isn't one of the feed's hosts (or was skipped)",
+            "self: it can't be its own jump host",
+            "host 15: invalid type",
+            "esc: the body has control characters",
+            "empty: no body",
+            "big: the body is over 64 KiB",
+        ] {
+            assert!(said.contains(expected), "{expected:?} in:\n{said}");
+        }
+    }
+
+    #[test]
+    fn a_bad_document_is_refused_whole() {
+        let err = |doc: &str| parse("Ops", doc.as_bytes()).unwrap_err().to_string();
+        assert!(err("<html>").starts_with("Ops sent something this version can't read: "));
+        assert!(err("[]").ends_with("not a JSON object"));
+        assert!(err(r#"{"hosts": []}"#).ends_with("no \"version\": 1"));
+        assert_eq!(
+            err(r#"{"version": 2}"#),
+            "Ops is a version 2 feed: update MorphGate to read it"
+        );
+        assert!(err(r#"{"version": 1, "hosts": {}}"#).ends_with("\"hosts\" isn't a list"));
+        let many = json!({ "version": 1, "hosts": vec![json!({}); MAX_HOSTS + 1] });
+        assert_eq!(
+            err(&many.to_string()),
+            "Ops lists 5001 hosts: a feed holds at most 5,000"
+        );
+    }
+
+    #[test]
+    fn only_https_or_this_computer() {
+        assert!(check_url("https://ops.example/feed").is_ok());
+        assert!(check_url("http://127.0.0.1:8080/feed").is_ok());
+        assert!(check_url("http://localhost/feed").is_ok());
+        assert!(check_url("http://ops.example/feed").is_err());
+        assert!(check_url("file:///etc/passwd").is_err());
+    }
+}
diff --git a/crates/mg-inventory/src/lib.rs b/crates/mg-inventory/src/lib.rs
index c0e65dc..9a37ea2 100644
--- a/crates/mg-inventory/src/lib.rs
+++ b/crates/mg-inventory/src/lib.rs
@@ -3,12 +3,14 @@
 //! never reach MorphGate's server.
 //!
 //! One module per provider (docs/features/cloud-sources.md): Vallic Cloud through its API; AWS,
-//! Google Cloud, Azure, Hetzner Cloud and DigitalOcean through their CLIs, as [`Machine`]s.
+//! Google Cloud, Azure, Hetzner Cloud and DigitalOcean through their CLIs, as [`Machine`]s; and
+//! feeds, documents a team publishes at a URL.
 
 pub mod aws;
 pub mod azure;
 pub mod cli;
 pub mod digitalocean;
+pub mod feed;
 pub mod gcp;
 pub mod hetzner;
 pub mod shape;
@@ -49,6 +51,11 @@ pub struct InventoryHost {
     /// Reached through its cloud (Session Manager, an Instance Connect Endpoint, IAP) rather
     /// than an address; `hostname` is then the instance's id or name.
     pub via: Option<Via>,
+    /// The server's host keys (`ssh-ed25519 AAAA…`), as its publisher knows them (feeds):
+    /// trusted for it without asking.
+    pub host_keys: Vec<String>,
+    /// Tags it comes with (feeds), added to the person's.
+    pub tags: Vec<String>,
 }
 
 /// How a machine is reached through its cloud: what the command needs (the app builds it).
@@ -131,6 +138,9 @@ pub enum Error {
     SignedOut(String),
     #[error("{0}")]
     Api(String),
+    /// A feed answered 401 or 403 to its token.
+    #[error("{0} refused the token")]
+    TokenRefused(String),
     /// A provider's CLI isn't on this device.
     #[error(
         "{0} isn't installed on this computer, or MorphGate can't find it: install it, or give its path in the source"
diff --git a/crates/mg-inventory/src/shape.rs b/crates/mg-inventory/src/shape.rs
index 6e426ca..f9e57ae 100644
--- a/crates/mg-inventory/src/shape.rs
+++ b/crates/mg-inventory/src/shape.rs
@@ -117,6 +117,8 @@ pub fn hosts(provider: &str, machines: &[Machine], shape: &Shape) -> Shaped {
             state: (!m.running).then(|| m.state.clone()),
             key_name: m.key_name.clone(),
             via: through,
+            host_keys: Vec::new(),
+            tags: Vec::new(),
         });
     }
     out
diff --git a/crates/mg-inventory/src/vallic.rs b/crates/mg-inventory/src/vallic.rs
index 98ef567..8b2e89e 100644
--- a/crates/mg-inventory/src/vallic.rs
+++ b/crates/mg-inventory/src/vallic.rs
@@ -527,6 +527,8 @@ pub fn hosts_of(project: &str, env: &Environment, t: &SshTarget) -> Vec<Inventor
         state: None,
         key_name: None,
         via: None,
+        host_keys: Vec::new(),
+        tags: Vec::new(),
     };
     // The front: a host of its own where a plain login goes on to another machine (`jump_to`),
     // else the environment's own host.
diff --git a/crates/mg-inventory/tests/feed.rs b/crates/mg-inventory/tests/feed.rs
new file mode 100644
index 0000000..70157ec
--- /dev/null
+++ b/crates/mg-inventory/tests/feed.rs
@@ -0,0 +1,119 @@
+//! The feed client against a fake publisher on loopback: the request it makes, a refused token,
+//! a document too large, and one it reads.
+
+use std::sync::{Arc, Mutex};
+
+use mg_inventory::feed;
+use tokio::io::{AsyncReadExt, AsyncWriteExt};
+use tokio::net::TcpListener;
+
+/// Serves `GET /feed` (with token `T1`), `/big` (over 5 MiB) and `/moved` (a redirect to plain
+/// HTTP elsewhere). Returns its address and the request heads it saw.
+async fn publisher() -> (String, Arc<Mutex<Vec<String>>>) {
+    let listener = TcpListener::bind("127.0.0.1:0").await.unwrap();
+    let addr = listener.local_addr().unwrap();
+    let heads = Arc::new(Mutex::new(Vec::new()));
+    let seen = heads.clone();
+    tokio::spawn(async move {
+        loop {
+            let (mut sock, _) = listener.accept().await.unwrap();
+            let seen = seen.clone();
+            tokio::spawn(async move {
+                let mut buf = Vec::new();
+                let mut chunk = [0u8; 4096];
+                let head = loop {
+                    let n = sock.read(&mut chunk).await.unwrap();
+                    if n == 0 {
+                        return;
+                    }
+                    buf.extend_from_slice(&chunk[..n]);
+                    if let Some(end) = buf.windows(4).position(|w| w == b"\r\n\r\n") {
+                        break String::from_utf8_lossy(&buf[..end]).to_string();
+                    }
+                };
+                seen.lock().unwrap().push(head.clone());
+                let path = head.split_whitespace().nth(1).unwrap_or("").to_owned();
+                let authorized = head
+                    .lines()
+                    .any(|l| l.eq_ignore_ascii_case("authorization: Bearer T1"));
+                let (status, extra, body) = match path.as_str() {
+                    _ if !authorized => ("401 Unauthorized", String::new(), "{}".to_owned()),
+                    "/feed" => (
+                        "200 OK",
+                        String::new(),
+                        serde_json::json!({
+                            "version": 1,
+                            "name": "Ops",
+                            "hosts": [{ "id": "web-1", "hostname": "10.0.0.1", "user": "ops" }],
+                            "snippets": [{ "id": "up", "name": "Uptime", "body": "uptime" }]
+                        })
+                        .to_string(),
+                    ),
+                    "/big" => (
+                        "200 OK",
+                        String::new(),
+                        format!(
+                            "{{\"version\": 1, \"name\": \"{}\"}}",
+                            "x".repeat(feed::MAX_BYTES)
+                        ),
+                    ),
+                    "/moved" => (
+                        "302 Found",
+                        "location: http://example.com/feed\r\n".to_owned(),
+                        String::new(),
+                    ),
+                    _ => ("404 Not Found", String::new(), String::new()),
+                };
+                let reply = format!(
+                    "HTTP/1.1 {status}\r\ncontent-type: application/json\r\n{extra}content-length: {}\r\nconnection: close\r\n\r\n{body}",
+                    body.len()
+                );
+                let _ = sock.write_all(reply.as_bytes()).await;
+            });
+        }
+    });
+    (format!("http://{addr}"), heads)
+}
+
+#[tokio::test]
+async fn reads_a_feed_with_its_token() {
+    let (base, heads) = publisher().await;
+    let feed = feed::fetch("Ops", &format!("{base}/feed"), "T1")
+        .await
+        .unwrap();
+    assert_eq!(feed.name.as_deref(), Some("Ops"));
+    assert_eq!(feed.hosts[0].external_id, "feed:web-1");
+    assert_eq!(feed.snippets[0].body, "uptime");
+    let head = heads.lock().unwrap()[0].to_lowercase();
+    assert!(head.contains("accept: application/json"), "{head}");
+    assert!(
+        head.contains(&format!(
+            "user-agent: morphgate/{}",
+            env!("CARGO_PKG_VERSION")
+        )),
+        "{head}"
+    );
+}
+
+#[tokio::test]
+async fn a_refused_token_too_large_and_elsewhere_are_said() {
+    let (base, _) = publisher().await;
+    let err = |r: mg_inventory::Result<feed::Feed>| r.unwrap_err().to_string();
+    assert_eq!(
+        err(feed::fetch("Ops", &format!("{base}/feed"), "wrong").await),
+        "Ops refused the token"
+    );
+    assert_eq!(
+        err(feed::fetch("Ops", &format!("{base}/big"), "T1").await),
+        "Ops sent more than 5 MiB: a feed is at most that"
+    );
+    // Not followed to plain HTTP on another host: the redirect itself is the answer.
+    assert_eq!(
+        err(feed::fetch("Ops", &format!("{base}/moved"), "T1").await),
+        "Ops answered 302 Found"
+    );
+    assert_eq!(
+        err(feed::fetch("Ops", &format!("{base}/nothing"), "T1").await),
+        "Ops answered 404 Not Found"
+    );
+}
diff --git a/crates/mg-ssh/src/connection.rs b/crates/mg-ssh/src/connection.rs
index 686986e..6f9405e 100644
--- a/crates/mg-ssh/src/connection.rs
+++ b/crates/mg-ssh/src/connection.rs
@@ -53,6 +53,30 @@ pub struct Hop {
     /// TCP connection. `%h`, `%p` and `%r` are this hop's host, port and user. For bastions that
     /// refuse forwarding but hand a session on (`nc %h %p`, Vallic's `<env> jump <machine>`).
     pub via_command: Option<String>,
+    /// The host keys whoever described this host lists for it (a feed): the server must
+    /// present one of them, and is trusted without asking.
+    pub listed_keys: Option<ListedKeys>,
+}
+
+/// Host keys a server is known to have, from where its host came from.
+#[derive(Clone, Debug, Default, PartialEq, Eq)]
+pub struct ListedKeys {
+    /// OpenSSH public keys, `ssh-ed25519 AAAA…`.
+    pub keys: Vec<String>,
+    /// Who lists them, for messages (the feed's name).
+    pub from: String,
+}
+
+/// [`ListedKeys`], read: `None` when none of them is a key (then the host is asked about as
+/// any other).
+fn listed(keys: Option<ListedKeys>) -> Option<(Vec<PublicKey>, String)> {
+    let l = keys?;
+    let parsed: Vec<PublicKey> = l
+        .keys
+        .iter()
+        .filter_map(|k| PublicKey::from_openssh(k.trim()).ok())
+        .collect();
+    (!parsed.is_empty()).then_some((parsed, l.from))
 }
 
 /// Asks the user whether to trust a host key seen for the first time.
@@ -273,6 +297,7 @@ async fn connect_hop(
     let verifier = Verifier {
         host: hop.host.clone(),
         port: hop.port,
+        listed: listed(hop.listed_keys.clone()),
         known_hosts: known_hosts.clone(),
         prompt: prompt.clone(),
         rejected: rejected.clone(),
@@ -550,6 +575,8 @@ async fn agent(
 pub(crate) struct Verifier {
     host: String,
     port: u16,
+    /// The keys listed for this host, and by whom: they decide instead of known_hosts.
+    listed: Option<(Vec<PublicKey>, String)>,
     known_hosts: Arc<KnownHosts>,
     prompt: Arc<dyn HostKeyPrompt>,
     /// Why the key was refused, surfaced after `connect` fails.
@@ -610,6 +637,29 @@ impl client::Handler for Verifier {
             }
         };
         let mut info = HostKeyInfo::new(&self.host, self.port, &key);
+        // Listed for the host (its feed): one of those, or refused. A revoked key still isn't.
+        if let Some((keys, from)) = &self.listed {
+            if let Some(revoked) = self
+                .known_hosts
+                .revoked(&self.host, self.port, key.key_data())
+            {
+                return Ok(self.reject(Error::HostKeyRevoked {
+                    host: self.host.clone(),
+                    port: self.port,
+                    fingerprint: info.fingerprint.clone(),
+                    from: revoked,
+                }));
+            }
+            if keys.iter().any(|k| k.key_data() == key.key_data()) {
+                return Ok(true);
+            }
+            return Ok(self.reject(Error::HostKeyNotListed {
+                host: self.host.clone(),
+                port: self.port,
+                fingerprint: info.fingerprint.clone(),
+                from: from.clone(),
+            }));
+        }
         match self.known_hosts.check(&self.host, self.port, &key)? {
             HostKeyCheck::Trusted => Ok(true),
             HostKeyCheck::Revoked { from } => Ok(self.reject(Error::HostKeyRevoked {
diff --git a/crates/mg-ssh/src/error.rs b/crates/mg-ssh/src/error.rs
index 8561859..381e6d8 100644
--- a/crates/mg-ssh/src/error.rs
+++ b/crates/mg-ssh/src/error.rs
@@ -26,6 +26,16 @@ pub enum Error {
         fingerprint: String,
         from: String,
     },
+    /// A key other than the ones listed for the host (by its feed).
+    #[error(
+        "the host key of {host}:{port} ({fingerprint}) isn't one {from} lists for it: refused. Someone may be intercepting the connection, or {from} doesn't know the server's new key yet"
+    )]
+    HostKeyNotListed {
+        host: String,
+        port: u16,
+        fingerprint: String,
+        from: String,
+    },
     /// A host certificate where a CA is trusted for the host, that the CA didn't sign for it.
     #[error("the host certificate of {host}:{port} isn't accepted: {why}")]
     HostCertificate {
diff --git a/crates/mg-ssh/src/lib.rs b/crates/mg-ssh/src/lib.rs
index 1dbd8a2..d234f5f 100644
--- a/crates/mg-ssh/src/lib.rs
+++ b/crates/mg-ssh/src/lib.rs
@@ -17,7 +17,9 @@ pub mod sftp;
 pub mod ssh_config;
 
 pub use agent::{AgentKey, AgentSource};
-pub use connection::{AsyncStream, Auth, BoxedStream, Connection, Dialer, Hop, HostKeyPrompt};
+pub use connection::{
+    AsyncStream, Auth, BoxedStream, Connection, Dialer, Hop, HostKeyPrompt, ListedKeys,
+};
 pub use error::Error;
 pub use forward::{Forward, Tunnel};
 pub use keys::KeyInfo;
diff --git a/crates/mg-ssh/src/session.rs b/crates/mg-ssh/src/session.rs
index bd02246..9c69d18 100644
--- a/crates/mg-ssh/src/session.rs
+++ b/crates/mg-ssh/src/session.rs
@@ -29,6 +29,8 @@ pub struct ConnectOptions {
     pub jumps: Vec<Hop>,
     /// How the last jump host carries the target: a command it runs (see [`Hop::via_command`]).
     pub via_command: Option<String>,
+    /// The target's host keys, where its feed lists them (see [`Hop::listed_keys`]).
+    pub listed_keys: Option<crate::ListedKeys>,
     /// Opens the first hop's TCP connection (e.g. through a per-host VPN); `None` = the OS.
     pub dialer: Option<Arc<dyn crate::Dialer>>,
     /// Forward this agent to the server (OpenSSH `ForwardAgent`): programs there can sign with
@@ -81,6 +83,7 @@ impl Session {
             user: opts.user,
             auth: opts.auth,
             via_command: opts.via_command,
+            listed_keys: opts.listed_keys,
         };
         let conn = Connection::open(
             target,
diff --git a/crates/mg-ssh/tests/live.rs b/crates/mg-ssh/tests/live.rs
index b9664d3..371c417 100644
--- a/crates/mg-ssh/tests/live.rs
+++ b/crates/mg-ssh/tests/live.rs
@@ -79,6 +79,7 @@ fn opts(env: &Env, auth: Auth) -> ConnectOptions {
         connect_timeout: Duration::from_secs(10),
         jumps: vec![],
         via_command: None,
+        listed_keys: None,
         dialer: None,
         forward_agent: None,
     }
@@ -224,6 +225,87 @@ async fn changed_host_key_fails_closed() {
     );
 }
 
+/// Host keys a feed lists for a host decide instead of known_hosts: the server's key connects
+/// without asking (over a stale pin, too) and isn't written down; another one is refused.
+#[tokio::test]
+#[ignore = "needs MG_TEST_SSH"]
+async fn listed_host_keys_decide() {
+    let Some(env) = env() else { return };
+    // The server's key, learned the usual way.
+    let dir = tempfile::tempdir().unwrap();
+    let learned = dir.path().join("learned");
+    let prompt = Arc::new(CountingPrompt {
+        accept: true,
+        ..Default::default()
+    });
+    let (s, ev) = Session::connect(
+        opts(&env, auth(&env)),
+        Arc::new(KnownHosts::new(&learned)),
+        prompt,
+    )
+    .await
+    .unwrap();
+    run(s, ev, "true").await;
+    let line = std::fs::read_to_string(&learned).unwrap();
+    let key: String = line
+        .split_whitespace()
+        .skip(1)
+        .take(2)
+        .collect::<Vec<_>>()
+        .join(" ");
+    let listed = |key: &str| {
+        let mut o = opts(&env, auth(&env));
+        o.listed_keys = Some(mg_ssh::ListedKeys {
+            keys: vec![key.to_owned()],
+            from: "Ops".into(),
+        });
+        o
+    };
+
+    let fresh = dir.path().join("fresh");
+    let never = Arc::new(CountingPrompt::default());
+    let (s, ev) = Session::connect(
+        listed(&key),
+        Arc::new(KnownHosts::new(&fresh)),
+        never.clone(),
+    )
+    .await
+    .unwrap();
+    run(s, ev, "true").await;
+    assert!(!fresh.exists(), "a listed key isn't written down");
+
+    let stale = dir.path().join("stale");
+    let entry = if env.port == 22 {
+        env.host.clone()
+    } else {
+        format!("[{}]:{}", env.host, env.port)
+    };
+    let other = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDRbMaf7RI+oSkPOCPrFjPoMWJEIu96Drte4Q3r9OQYR";
+    std::fs::write(&stale, format!("{entry} {other}\n")).unwrap();
+    let (s, ev) = Session::connect(
+        listed(&key),
+        Arc::new(KnownHosts::new(&stale)),
+        never.clone(),
+    )
+    .await
+    .unwrap();
+    run(s, ev, "true").await;
+
+    let err = Session::connect(
+        listed(other),
+        Arc::new(KnownHosts::new(&fresh)),
+        never.clone(),
+    )
+    .await
+    .err()
+    .unwrap();
+    assert!(
+        matches!(&err, Error::HostKeyNotListed { from, .. } if from == "Ops"),
+        "{err}"
+    );
+    assert_eq!(never.calls.load(Ordering::SeqCst), 0, "nothing asked");
+}
+
 #[tokio::test]
 #[ignore = "needs MG_TEST_SSH"]
 async fn wrong_password_fails() {
@@ -314,6 +396,7 @@ fn hop(env: &Env) -> Hop {
         user: env.user.clone(),
         auth: auth(env),
         via_command: None,
+        listed_keys: None,
     }
 }
 
diff --git a/crates/mg-store/Cargo.toml b/crates/mg-store/Cargo.toml
index de75455..7a13682 100644
--- a/crates/mg-store/Cargo.toml
+++ b/crates/mg-store/Cargo.toml
@@ -18,6 +18,7 @@ mg-vault.workspace = true
 rusqlite = { version = "0.40.2", features = ["bundled"] }
 serde.workspace = true
 serde_json.workspace = true
+sha2 = "0.11.0"
 thiserror.workspace = true
 ulid = "3.0.0"
 zeroize = "1.9.1"
diff --git a/crates/mg-store/src/history.rs b/crates/mg-store/src/history.rs
index 7f710f4..7cac598 100644
--- a/crates/mg-store/src/history.rs
+++ b/crates/mg-store/src/history.rs
@@ -97,6 +97,7 @@ mod tests {
             name: "uptime".into(),
             body: "uptime".into(),
             tags: vec![],
+            source: None,
         })
     }
 
diff --git a/crates/mg-store/src/lib.rs b/crates/mg-store/src/lib.rs
index ff99a3f..2176f7c 100644
--- a/crates/mg-store/src/lib.rs
+++ b/crates/mg-store/src/lib.rs
@@ -27,9 +27,12 @@ pub use mg_vault::BlobKind;
 pub use model::{
     Attachment, CertRenewal, CloudReach, CloudSource, ForwardRule, Host, HostAuth, HostCa,
     HostGroup, HostSource, Identity, Item, ItemData, LogChunk, MAX_ATTACHMENT_BYTES, MemberKey,
-    PortForward, SessionLog, Snippet, SshKey, TerminalTheme, VpnKind, VpnProfile, is_hex_color,
+    PortForward, SessionLog, Snippet, SnippetSource, SshKey, TerminalTheme, VpnKind, VpnProfile,
+    is_hex_color,
 };
 pub use moving::{Carry, MovePlan, Moved, Planned, Why};
-pub use vault::{Access, LocalVault, MIN_PASSWORD_CHARS, NewCredentials, Status, VaultInfo};
+pub use vault::{
+    Access, LocalVault, MIN_PASSWORD_CHARS, NewCredentials, Status, VaultInfo, derived_id,
+};
 
 pub type Result<T> = core::result::Result<T, Error>;
diff --git a/crates/mg-store/src/model.rs b/crates/mg-store/src/model.rs
index aefe6ee..d42838a 100644
--- a/crates/mg-store/src/model.rs
+++ b/crates/mg-store/src/model.rs
@@ -202,6 +202,23 @@ pub struct HostSource {
     /// How it's reached when its source goes through the cloud rather than an address.
     #[serde(default, skip_serializing_if = "Option::is_none")]
     pub reach: Option<CloudReach>,
+    /// The server's host keys as its feed gives them (`ssh-ed25519 AAAA…`): trusted when
+    /// connecting to this host, without asking; a server with another key is refused.
+    #[serde(default, skip_serializing_if = "Vec::is_empty")]
+    pub host_keys: Vec<String>,
+    /// The tags its feed gave it, among the host's: a refresh replaces these and keeps the
+    /// person's.
+    #[serde(default, skip_serializing_if = "Vec::is_empty")]
+    pub tags: Vec<String>,
+}
+
+/// Where a snippet a feed keeps came from: the feed decides it (it's read-only in the app).
+#[derive(Clone, Debug, PartialEq, Eq, Serialize, Deserialize)]
+pub struct SnippetSource {
+    /// The `cloud_source` item, in the same vault.
+    pub source_ref: String,
+    /// `feed:<id>`: what a refresh matches on.
+    pub external_id: String,
 }
 
 /// A machine reached through its cloud: what the command needs, never the command itself (a vault
@@ -260,12 +277,14 @@ impl CloudReach {
 }
 
 /// Hosts kept in step with a cloud provider (docs/features/cloud-sources.md): Vallic Cloud, AWS, Google
-/// Cloud, Azure, Hetzner Cloud or DigitalOcean. No credentials: each device signs in to Vallic itself
-/// and keeps that on the device; the others are listed with their CLI as the device has it set up.
+/// Cloud, Azure, Hetzner Cloud or DigitalOcean, or a feed. No cloud credentials: each device signs in
+/// to Vallic itself and keeps that on the device; the others are listed with their CLI as the device
+/// has it set up. A feed's token is the exception: it only reads a host list, and every device that
+/// refreshes needs it.
 #[derive(Clone, Debug, Default, PartialEq, Serialize, Deserialize)]
 pub struct CloudSource {
     pub label: String,
-    /// `vallic`, `aws`, `gcp`, `azure`, `hetzner` or `digitalocean`.
+    /// `vallic`, `aws`, `gcp`, `azure`, `hetzner`, `digitalocean` or `feed`.
     pub provider: String,
     /// The provider's address, when not its usual one.
     #[serde(default, skip_serializing_if = "Option::is_none")]
@@ -301,6 +320,23 @@ pub struct CloudSource {
     /// resource group.
     #[serde(default, skip_serializing_if = "Option::is_none")]
     pub group_tag: Option<String>,
+    /// A feed's address (`https://`, or `http://` on the device itself).
+    #[serde(default, skip_serializing_if = "Option::is_none")]
+    pub url: Option<String>,
+    /// The token a feed is read with (`Authorization: Bearer`).
+    #[serde(default, skip_serializing_if = "Option::is_none")]
+    pub token: Option<String>,
+}
+
+impl CloudSource {
+    /// The same source, but for when it was last refreshed: what two devices refreshing at once
+    /// differ in.
+    pub fn same_but_refreshed(&self, other: &CloudSource) -> bool {
+        CloudSource {
+            refreshed_at: other.refreshed_at,
+            ..self.clone()
+        } == *other
+    }
 }
 
 impl Host {
@@ -440,6 +476,9 @@ pub struct Snippet {
     pub body: String,
     #[serde(default, skip_serializing_if = "Vec::is_empty")]
     pub tags: Vec<String>,
+    /// The feed that keeps it, if one does.
+    #[serde(default, skip_serializing_if = "Option::is_none")]
+    pub source: Option<SnippetSource>,
 }
 
 /// A saved tunnel through `host_ref`, started on demand.
diff --git a/crates/mg-store/src/moving.rs b/crates/mg-store/src/moving.rs
index 6c065e7..4cf7af5 100644
--- a/crates/mg-store/src/moving.rs
+++ b/crates/mg-store/src/moving.rs
@@ -198,6 +198,16 @@ fn relink(
             auth: auth(i.auth)?,
             ..i
         }),
+        // Kept by its feed where that goes too; else an ordinary snippet there.
+        ItemData::Snippet(sn) => ItemData::Snippet(crate::Snippet {
+            source: sn.source.and_then(|src| {
+                map.get(&src.source_ref).map(|to| crate::SnippetSource {
+                    source_ref: to.clone(),
+                    ..src
+                })
+            }),
+            ..sn
+        }),
         ItemData::HostGroup(g) => ItemData::HostGroup(crate::HostGroup {
             identity_ref: optional(g.identity_ref)?,
             jump_ref: optional(g.jump_ref)?,
diff --git a/crates/mg-store/src/sync.rs b/crates/mg-store/src/sync.rs
index 327391f..1b499d6 100644
--- a/crates/mg-store/src/sync.rs
+++ b/crates/mg-store/src/sync.rs
@@ -759,8 +759,10 @@ impl LocalVault {
                     }
                     _ => None,
                 };
-                // The same content on both sides (say, both re-sealed it): nothing lost.
-                let same = local_data == copy.data;
+                // The same content on both sides (say, both re-sealed it), or what a cloud
+                // source decides on each (two refreshes): nothing of the person's lost.
+                let same = local_data == copy.data
+                    || source_decides(local_data.as_ref(), copy.data.as_ref());
                 if !same {
                     conflicts += 1;
                 }
@@ -956,6 +958,59 @@ type LocalRow = (
     Option<i64>,
 );
 
+/// Whether the local copy differs from the server's only in what a cloud source decides (each
+/// device refreshed it): no copy is kept, and the next refresh sets it again. A person's edit
+/// (a rename, a note, a tag, a key) still makes one.
+fn source_decides(local: Option<&ItemData>, remote: Option<&ItemData>) -> bool {
+    match (local, remote) {
+        (Some(ItemData::CloudSource(a)), Some(ItemData::CloudSource(b))) => a.same_but_refreshed(b),
+        // A feed's snippets are the feed's: nobody edits them here.
+        (
+            Some(ItemData::Snippet(crate::Snippet {
+                source: Some(_), ..
+            })),
+            _,
+        ) => true,
+        (Some(ItemData::Host(a)), Some(ItemData::Host(b))) => match (&a.source, &b.source) {
+            (Some(x), Some(y))
+                if x.source_ref == y.source_ref && x.external_id == y.external_id =>
+            {
+                persons(a) == persons(b)
+            }
+            _ => false,
+        },
+        _ => false,
+    }
+}
+
+/// What of a source's host is the person's; the rest follows the source.
+fn persons(h: &crate::Host) -> crate::Host {
+    let source = h.source.as_deref();
+    let following = source.is_some_and(|s| s.label == h.label);
+    let from_source = source.map(|s| s.tags.as_slice()).unwrap_or_default();
+    crate::Host {
+        label: if following {
+            String::new()
+        } else {
+            h.label.clone()
+        },
+        hostname: String::new(),
+        port: 0,
+        user: String::new(),
+        jump_ref: None,
+        login_command: None,
+        jump_command: None,
+        tags: h
+            .tags
+            .iter()
+            .filter(|t| !from_source.contains(t))
+            .cloned()
+            .collect(),
+        source: None,
+        ..h.clone()
+    }
+}
+
 fn mark_conflict(data: &mut ItemData) {
     const SUFFIX: &str = " (conflict)";
     match data {
@@ -1879,6 +1934,114 @@ mod tests {
         assert_eq!(labels(&a), labels(&b), "both devices converge");
     }
 
+    /// Two devices refreshing the same cloud source: the hosts and snippets it made have the
+    /// same ids on both, and copies that differ only in what the source decides make no
+    /// "(conflict)" copy. A person's edit still does.
+    #[tokio::test]
+    async fn refreshes_on_two_devices_make_no_copies() {
+        use crate::{CloudSource, HostSource, SnippetSource};
+        let (a, b) = two_devices();
+        let server = Fake::default();
+        let source = CloudSource {
+            label: "Ops".into(),
+            provider: "feed".into(),
+            url: Some("https://ops.example/feed".into()),
+            token: Some("T".into()),
+            ..CloudSource::default()
+        };
+        let sid = a
+            .lock()
+            .unwrap()
+            .upsert(None, ItemData::CloudSource(source.clone()))
+            .unwrap()
+            .id;
+        sync(&a, &server).await;
+        sync(&b, &server).await;
+        let vault = a.lock().unwrap().items().unwrap()[0].vault_id.clone();
+        let kept = |hostname: &str, state: Option<&str>| {
+            let ItemData::Host(mut h) = host("web") else {
+                unreachable!()
+            };
+            h.hostname = hostname.into();
+            h.tags = vec!["prod".into()];
+            h.source = Some(Box::new(HostSource {
+                source_ref: sid.clone(),
+                external_id: "feed:web".into(),
+                label: "web".into(),
+                gone: false,
+                no_sftp: false,
+                no_forwarding: false,
+                state: state.map(str::to_owned),
+                reach: None,
+                host_keys: vec![],
+                tags: vec!["prod".into()],
+            }));
+            ItemData::Host(h)
+        };
+        let snippet = |body: &str| {
+            ItemData::Snippet(Snippet {
+                name: "Uptime".into(),
+                body: body.into(),
+                tags: vec![],
+                source: Some(SnippetSource {
+                    source_ref: sid.clone(),
+                    external_id: "feed:up".into(),
+                }),
+            })
+        };
+        let refreshed = |at: i64| {
+            ItemData::CloudSource(CloudSource {
+                refreshed_at: at,
+                ..source.clone()
+            })
+        };
+        let host_id = crate::derived_id(&[&vault, &sid, "host", "feed:web"]);
+        let snippet_id = crate::derived_id(&[&vault, &sid, "snippet", "feed:up"]);
+        // Both make them, a moment apart: the feed moved the host and changed the snippet.
+        for (v, hostname, body, at) in [
+            (&a, "10.0.0.1", "uptime", 100),
+            (&b, "10.0.0.2", "uptime -p", 101),
+        ] {
+            let mut v = v.lock().unwrap();
+            v.insert_in(&vault, &host_id, kept(hostname, None)).unwrap();
+            v.insert_in(&vault, &snippet_id, snippet(body)).unwrap();
+            v.upsert(Some(&sid), refreshed(at)).unwrap();
+        }
+        sync(&a, &server).await;
+        let r = sync(&b, &server).await;
+        assert_eq!(r.conflicts, 0);
+        sync(&a, &server).await;
+        let count = |v: &Mutex<LocalVault>| v.lock().unwrap().items().unwrap().len();
+        assert_eq!(
+            (count(&a), count(&b)),
+            (3, 3),
+            "no copies: {:?}",
+            labels(&b)
+        );
+
+        // A's person adds a note while B's refresh marks the host stopped: the note is kept.
+        let ItemData::Host(mut noted) = kept("10.0.0.1", None) else {
+            unreachable!()
+        };
+        noted.notes = "ask Ana first".into();
+        a.lock()
+            .unwrap()
+            .upsert(Some(&host_id), ItemData::Host(noted))
+            .unwrap();
+        b.lock()
+            .unwrap()
+            .upsert(Some(&host_id), kept("10.0.0.1", Some("stopped")))
+            .unwrap();
+        sync(&b, &server).await;
+        let r = sync(&a, &server).await;
+        assert_eq!(r.conflicts, 1);
+        assert!(
+            labels(&a).contains(&"web (conflict)".to_owned()),
+            "{:?}",
+            labels(&a)
+        );
+    }
+
     #[tokio::test]
     async fn edit_beats_delete_as_a_copy_and_delete_loses_to_edit() {
         let (a, b) = two_devices();
@@ -1904,6 +2067,7 @@ mod tests {
             name: "s".into(),
             body: "uptime".into(),
             tags: vec![],
+            source: None,
         });
         let sid = a.lock().unwrap().upsert(None, snip).unwrap().id;
         sync(&a, &server).await;
@@ -1916,6 +2080,7 @@ mod tests {
                     name: "s2".into(),
                     body: "w".into(),
                     tags: vec![],
+                    source: None,
                 }),
             )
             .unwrap();
diff --git a/crates/mg-store/src/vault.rs b/crates/mg-store/src/vault.rs
index 7693f9c..8c3bbad 100644
--- a/crates/mg-store/src/vault.rs
+++ b/crates/mg-store/src/vault.rs
@@ -642,6 +642,35 @@ impl LocalVault {
         })
     }
 
+    /// Creates item `id` in `vault_id`: an id worked out rather than drawn ([`derived_id`]), so
+    /// two devices making the same item write the same one, and the second gets a conflict
+    /// instead of a duplicate. Refused when a live item has the id.
+    pub fn insert_in(&mut self, vault_id: &str, id: &str, data: ItemData) -> Result<Item> {
+        if self.unlocked()?.access(vault_id)? < Access::Write {
+            return Err(Error::ReadOnly);
+        }
+        if data == ItemData::Unknown {
+            return Err(Error::Invalid(
+                "this app can't edit that kind of item".into(),
+            ));
+        }
+        let live: bool = self.conn.query_row(
+            "SELECT EXISTS (SELECT 1 FROM items WHERE id = ?1 AND deleted = 0)",
+            [id],
+            |r| r.get(0),
+        )?;
+        if live {
+            return Err(Error::Invalid(format!("item {id} already exists")));
+        }
+        let now = self.put(vault_id, id, &data)?;
+        Ok(Item {
+            id: id.to_owned(),
+            vault_id: vault_id.to_owned(),
+            updated_at: now,
+            data,
+        })
+    }
+
     /// Checks `data` as an item `id` of `vault`, seals it with the vault's current key and stores
     /// it for the next sync (over a tombstone of the same id, too). Returns the time stamped.
     pub(crate) fn put(&mut self, vault_id: &str, id: &str, data: &ItemData) -> Result<i64> {
@@ -742,6 +771,9 @@ impl LocalVault {
                 ItemData::Host(h) if h.source.as_ref().is_some_and(|s| s.source_ref == id) => {
                     Some(h.label)
                 }
+                ItemData::Snippet(s) if s.source.as_ref().is_some_and(|s| s.source_ref == id) => {
+                    Some(format!("snippet {}", s.name))
+                }
                 ItemData::CloudSource(c)
                     if c.key_ref.as_deref() == Some(id) || c.jump_ref.as_deref() == Some(id) =>
                 {
@@ -1118,6 +1150,14 @@ impl LocalVault {
                 if s.name.trim().is_empty() {
                     return invalid("snippet name is required");
                 }
+                if let Some(source) = &s.source {
+                    self.expect(
+                        vault,
+                        &source.source_ref,
+                        "the snippet's feed does not exist",
+                        |d| matches!(d, ItemData::CloudSource(_)),
+                    )?;
+                }
             }
             ItemData::MemberKey(k) => {
                 if k.account_id.is_empty() || k.public_key.split_ascii_whitespace().count() != 2 {
@@ -1224,13 +1264,36 @@ impl LocalVault {
                 }
             }
             ItemData::CloudSource(c) => {
-                if !["vallic", "aws", "gcp", "azure", "hetzner", "digitalocean"]
-                    .contains(&c.provider.as_str())
+                if ![
+                    "vallic",
+                    "aws",
+                    "gcp",
+                    "azure",
+                    "hetzner",
+                    "digitalocean",
+                    "feed",
+                ]
+                .contains(&c.provider.as_str())
                 {
                     return invalid(
-                        "a cloud source's provider is vallic, aws, gcp, azure, hetzner or digitalocean",
+                        "a cloud source's provider is vallic, aws, gcp, azure, hetzner, digitalocean or feed",
                     );
                 }
+                if c.provider == "feed" {
+                    let url = c.url.as_deref().unwrap_or("");
+                    let local = ["localhost", "127.0.0.1", "[::1]"].iter().any(|h| {
+                        url.strip_prefix("http://").is_some_and(|rest| {
+                            rest.strip_prefix(h)
+                                .is_some_and(|r| r.is_empty() || r.starts_with([':', '/']))
+                        })
+                    });
+                    if !(url.starts_with("https://") && url.len() > 8) && !local {
+                        return invalid("a feed's address starts with https://");
+                    }
+                    if c.token.as_deref().is_none_or(|t| t.trim().is_empty()) {
+                        return invalid("a feed needs the token it's read with");
+                    }
+                }
                 if let Some(key) = &c.key_ref {
                     self.expect(vault, key, "the selected key does not exist", |d| {
                         matches!(d, ItemData::SshKey(_))
@@ -1549,6 +1612,24 @@ pub(crate) fn decrypt(
     serde_json::from_slice(&plain).map_err(|e| Error::Corrupt(format!("item {id}: {e}")))
 }
 
+/// An item id worked out from `parts` rather than drawn: SHA-256 of them, as a ULID. Every
+/// device that makes the item from the same parts (a source's vault, the source, what it lists)
+/// gives it the same id.
+pub fn derived_id(parts: &[&str]) -> String {
+    use sha2::{Digest, Sha256};
+    let mut hash = Sha256::new();
+    hash.update(b"morphgate derived item id v1");
+    for p in parts {
+        // Each part with its length: no two lists of parts run together the same.
+        hash.update((p.len() as u64).to_be_bytes());
+        hash.update(p.as_bytes());
+    }
+    let digest = hash.finalize();
+    let mut bytes = [0u8; 16];
+    bytes.copy_from_slice(&digest[..16]);
+    Ulid::from_bytes(bytes).to_string()
+}
+
 pub(crate) fn now() -> i64 {
     SystemTime::now()
         .duration_since(UNIX_EPOCH)
@@ -1804,6 +1885,7 @@ mod tests {
                     name: "disk".into(),
                     body: "df -h".into(),
                     tags: vec![],
+                    source: None,
                 }),
             )
             .unwrap();
diff --git a/crates/mg-vpn/src/lib.rs b/crates/mg-vpn/src/lib.rs
index ecb7ff0..b8c4fa2 100644
--- a/crates/mg-vpn/src/lib.rs
+++ b/crates/mg-vpn/src/lib.rs
@@ -312,6 +312,7 @@ pub(crate) mod testutil {
             connect_timeout: Duration::from_secs(10),
             jumps: vec![],
             via_command: None,
+            listed_keys: None,
             dialer: Some(Arc::new(Via(tunnel))),
             forward_agent: None,
         };
diff --git a/docs/README.md b/docs/README.md
index 8f648b9..0f5637a 100644
--- a/docs/README.md
+++ b/docs/README.md
@@ -26,7 +26,7 @@ Start with [Architecture](architecture.md), then the feature you're working on.
 | [SFTP](features/sftp.md) | The file browser, transfers, conflicts |
 | [Session logs](features/session-logs.md) | Recording sessions, sealed chunks, uploading and playback |
 | [Importing](features/importing.md) | Hosts from OpenSSH, PuTTY, CSV and Royal TS; snippets from CSV |
-| [Cloud sources](features/cloud-sources.md) | Hosts from Vallic Cloud, AWS, Google Cloud, Azure, Hetzner Cloud and DigitalOcean |
+| [Cloud sources](features/cloud-sources.md) | Hosts from Vallic Cloud, AWS, Google Cloud, Azure, Hetzner Cloud and DigitalOcean, and hosts and snippets from a feed |
 | **Sync and teams** | |
 | [Sync](features/sync.md) | Choosing a server, signing up and in, two-step verification, the push and pull cycle, conflicts, plans and limits |
 | [Account and devices](features/account-and-devices.md) | The device list, signing devices out, erasing a revoked device, disconnecting, deleting the account, the website account page, device approval, single sign-on |
diff --git a/docs/architecture.md b/docs/architecture.md
index c9bce4e..cbfaacf 100644
--- a/docs/architecture.md
+++ b/docs/architecture.md
@@ -39,7 +39,7 @@ How the MorphGate app is put together: the webview, the Tauri commands behind it
 | `mg-ssh` | `crates/mg-ssh` | One `Session` per connection on `russh`: PTY shell, authentication, host-key pinning, agents, port forwards, SFTP, `ssh_config` parsing. See [SSH connections](features/ssh-connections.md) |
 | `mg-vpn` | `crates/mg-vpn` | VPN tunnels that run inside the app with their own smoltcp stack; `Tunnel::connect` returns a byte stream to a host behind the VPN. See [VPN](features/vpn.md) |
 | `mg-presence` | `crates/mg-presence` | Asks the OS to confirm the user is there before the keychain unlock. See [Keychain and biometric unlock](features/device-unlock.md) |
-| `mg-inventory` | `crates/mg-inventory` | Lists machines from Vallic Cloud (API) and AWS, Google Cloud, Azure, Hetzner Cloud, DigitalOcean (their CLIs). See [Cloud sources](features/cloud-sources.md) |
+| `mg-inventory` | `crates/mg-inventory` | Lists machines from Vallic Cloud (API) and AWS, Google Cloud, Azure, Hetzner Cloud, DigitalOcean (their CLIs), and reads feeds (hosts and snippets at a URL). See [Cloud sources](features/cloud-sources.md) |
 | Reference server | `server/` (`vault-sync-server`) | A self-hostable `vault-sync/v1` server. See [Reference server](features/reference-server.md) |
 | Conformance suite | `tools/vault-conform` | Checks any `vault-sync/v1` server against the protocol, endpoint by endpoint. See [Development](development.md#conformance-suite) |
 
@@ -172,7 +172,7 @@ See [Sync](features/sync.md), [Account and devices](features/account-and-devices
 | The sync server | Items are signed and checked before decrypting; a revision older than one already seen is an error; KDF parameters below the minimum are refused; shared vault keys count only when signed by a member this device verified, and a changed member key is a hard error |
 | Other members of a shared vault | A command that arrives in a vault (a proxy command, a certificate renewal command) runs only after this device allowed it, by its exact text |
 | The webview | Private keys and passwords go into Rust and never come back out to the webview |
-| Its own server, with cloud credentials | Cloud provider calls go from the device to the provider; the credentials never reach the sync server |
+| Its own server, with cloud credentials | Cloud provider calls go from the device to the provider; the credentials never reach the sync server (a feed's read-only token travels in the vault, end-to-end encrypted) |
 | Links | A `morphgate://` link only opens a screen, filled in; it never joins, connects or changes anything, and passwords or keys in it are ignored |
 
 What it relies on: the OS user account (the keychain unlock and the presence check keep someone at an unlocked computer out, not malware running as the user) and the host keys the user accepts.
diff --git a/docs/development.md b/docs/development.md
index cee9e29..53ec816 100644
--- a/docs/development.md
+++ b/docs/development.md
@@ -98,24 +98,26 @@ They cover tls-auth, tls-crypt, TCP, CBC with the PRF, LZO and renegotiation ([V
 apps/desktop/e2e/run.sh                                   # builds test packages (about 10 minutes), then every scenario
 E2E_SKIP_BUILD=1 apps/desktop/e2e/run.sh                  # reuses the last build
 E2E_SKIP_BUILD=1 E2E_ONLY="teams mobile" apps/desktop/e2e/run.sh   # appimage, rpm, deb, teams, layout, mobile
+E2E_SKIP_BUILD=1 E2E_ONLY=demo apps/desktop/e2e/run.sh    # only when asked: the README's demo
 ```
 
 | Scenario | Checks |
 | --- | --- |
-| `appimage.mjs` | A vault; SSH to the throwaway sshd; imports from `~/.ssh/config`, PuTTY (`.ppk`), a Termius-style CSV and Royal TS; Vallic Cloud through a stand-in console; user and host certificates; proxy and login commands; groups, bulk move and delete; an agent and agent forwarding; split panes and broadcast; a `morphgate://connect` link from a second launch; appearance; About and the license list; a tampered update refused, the signed update installed and the same vault unlocked in the new version |
+| `appimage.mjs` | A vault; SSH to the throwaway sshd; imports from `~/.ssh/config`, PuTTY (`.ppk`), a Termius-style CSV and Royal TS; Vallic Cloud, AWS, DigitalOcean and a feed through stand-ins; user and host certificates; proxy and login commands; groups, bulk move and delete; an agent and agent forwarding; split panes and broadcast; a `morphgate://connect` link from a second launch; appearance; About and the license list; a tampered update refused, the signed update installed and the same vault unlocked in the new version |
 | `package.mjs` (deb, rpm) | The desktop entry handles `morphgate://`; the binary knows its package, finds the update and warns about the administrator password |
 | `teams.mjs` | Three apps (`E2E_PEOPLE="alice bob carol"`; Carol's app is Bob's second device) and the reference server: sync, an organization, invites with fingerprint checks, shared edits, moving items, published member keys, revocation and rotation, policies, the activity log and its export, device approval, attachments, offboarding against the sshd, shared credentials and tmux sessions, single sign-on against `idp.mjs`, the data export, signing a device out, deleting accounts |
 | `layout.mjs` | Every page filled, at 860, 1024, 1280 and 1600 px: nothing overlaps or leaves its column; closing editors and pages returns where they came from |
 | `mobile.mjs` | The phone layout in a 390 × 844 window ([Platforms and mobile](features/platforms-and-mobile.md#tests)) |
+| `demo.mjs` (`E2E_ONLY=demo` only) | The README's demo: the AppImage with a few hosts in groups. Its Hosts page is captured as shapes (`tools/readme-demo/snapshot.js`: boxes, text and icons where the layout put them), web-1 is clicked, and its session view is captured and recorded by the app's session recording (the login command runs a clean bash with a demo prompt in a demo home). `tools/readme-demo/demo-svg.mjs` draws both scenes, a pointer's click and the replayed session (xterm.js headless; each row's states are a strip a CSS animation steps through) as one animated SVG in the app's fonts. This machine's user and loopback address are swapped for demo ones, and nothing that still shows them or your home folder is saved. Copy `target/e2e/run-<time>/demo/morphgate.svg` to `assets/demo/morphgate.svg` |
 
 What `run.sh` sets up, all on loopback and on free ports (`E2E_SSH_PORT`, `E2E_FEED_PORT`, `E2E_SYNC_PORT`, `E2E_IDP_PORT`, `E2E_VALLIC_PORT`, `E2E_DRIVER_PORT` pin them):
 
 | Piece | What it is |
 | --- | --- |
 | Test packages | The current version (AppImage, deb, rpm) and the next patch version (AppImage), signed with a throwaway update key whose public half replaces the real one, and allowed to fetch updates over plain HTTP. Moved out of `target/release/bundle` to `target/e2e/packages/`; never publish them |
-| sshd | On 127.0.0.1, 127.0.0.2 and 127.0.0.3, key login for the current user, a user CA it trusts and a host certificate for 127.0.0.3; SFTP starts in the run's `sshd/home`, whose `authorized_keys` is the one sshd reads, so offboarding never edits your real `~/.ssh` |
+| sshd | On 127.0.0.1, 127.0.0.2, 127.0.0.3 and 127.0.0.4, key login for the current user, a user CA it trusts and a host certificate for 127.0.0.3; SFTP starts in the run's `sshd/home`, whose `authorized_keys` is the one sshd reads, so offboarding never edits your real `~/.ssh` |
 | `feed.mjs` | The update feed (`MORPHGATE_UPDATE_ENDPOINT`), serving a good and a tampered `latest.json` |
-| `vallic-console.mjs`, `clouds/aws` | Stand-ins for the Vallic console and the `aws` CLI, whose machine is the sshd |
+| `vallic-console.mjs`, `clouds/aws`, `clouds/doctl`, `host-feed.mjs` | Stand-ins for the Vallic console, the `aws` and `doctl` CLIs and a feed (`E2E_HOST_FEED`, with its token in `E2E_HOST_FEED_TOKEN`), whose machines are the sshd (the feed's on 127.0.0.4, with its host key listed) |
 | `vault-sync-server`, `idp.mjs` | The reference server (open registration, invite codes instead of mail) and an OpenID provider, for `teams` and `layout` |
 | `session.sh` | One `tauri-driver` per person, each with its own `HOME` and XDG folders in the run directory, so your vault, session bus and keyring are never touched |
 
diff --git a/docs/features/cloud-sources.md b/docs/features/cloud-sources.md
index 0eb0451..e117895 100644
--- a/docs/features/cloud-sources.md
+++ b/docs/features/cloud-sources.md
@@ -1,6 +1,6 @@
 # Cloud sources
 
-A cloud source keeps a set of hosts in step with a provider: Vallic Cloud's environments, or the virtual machines of an AWS, Google Cloud, Azure, Hetzner Cloud or DigitalOcean account. A refresh brings what the cloud decides (which machines exist, their addresses, whether they run); what the person sets stays (renames, keys, schemes, tags, notes, groups); a machine the cloud no longer lists is marked gone, never deleted. The vault holds no cloud credentials: each device signs in to Vallic Cloud itself, and lists the other clouds with their own CLI as that device has it set up, so the calls go from the device to the provider and nothing reaches MorphGate's server but the encrypted items. Code: `crates/mg-inventory` (`lib.rs`: `InventoryHost`, `Machine`; `vallic.rs`, `cli.rs`, `aws.rs`, `gcp.rs`, `azure.rs`, `hetzner.rs`, `digitalocean.rs`, `shape.rs`), `crates/mg-store/src/model.rs` (`CloudSource`, `HostSource`, `CloudReach`), `apps/desktop/src-tauri/src/cloud.rs` (Tauri commands, `apply()`, `reach_command()`), `apps/desktop/src/CloudPage.tsx`.
+A cloud source keeps a set of hosts in step with a provider: Vallic Cloud's environments, the virtual machines of an AWS, Google Cloud, Azure, Hetzner Cloud or DigitalOcean account, or a feed (a JSON document of hosts and snippets that a team publishes at an address). A refresh brings what the provider decides (which machines exist, their addresses, whether they run); what the person sets stays (renames, keys, schemes, tags, notes, groups); a machine the provider no longer lists is marked gone, never deleted. The vault holds no cloud credentials: each device signs in to Vallic Cloud itself, and lists the other clouds with their own CLI as that device has it set up, so the calls go from the device to the provider and nothing reaches MorphGate's server but the encrypted items. A feed's token is the one exception ([Feeds](#feeds)). Code: `crates/mg-inventory` (`lib.rs`: `InventoryHost`, `Machine`; `vallic.rs`, `cli.rs`, `aws.rs`, `gcp.rs`, `azure.rs`, `hetzner.rs`, `digitalocean.rs`, `shape.rs`, `feed.rs`), `crates/mg-store/src/model.rs` (`CloudSource`, `HostSource`, `CloudReach`, `SnippetSource`), `apps/desktop/src-tauri/src/cloud.rs` (Tauri commands, `apply()`, `apply_snippets()`, `reach_command()`), `apps/desktop/src/CloudPage.tsx`.
 
 ## Providers
 
@@ -12,6 +12,7 @@ A cloud source keeps a set of hosts in step with a provider: Vallic Cloud's envi
 | `azure` | `az` | `az login` | Resource group | The VM's admin user, else `azureuser` | Public, private | `azure:<resource id, lowercase>` |
 | `hetzner` | `hcloud` | The CLI's context | Location | `root` | Public, private | `hetzner:<context>/<id>` |
 | `digitalocean` | `doctl` | The CLI's context | Region | `root` | Public, private | `digitalocean:<id>` |
+| `feed` | `GET` of its URL | The source's token, in the vault | The feed's `group`, else none | The feed's | Address, through the feed's own jump hosts | `feed:<id>` |
 
 ## The items
 
@@ -19,7 +20,7 @@ A `cloud_source` item (in a personal or team vault):
 
 | Field | Meaning |
 | --- | --- |
-| `label`, `provider` | "Vallic Cloud", "AWS (prod)", "Hetzner Cloud (shop)"…; one of the six above (else "a cloud source's provider is vallic, aws, gcp, azure, hetzner or digitalocean") |
+| `label`, `provider` | "Vallic Cloud", "AWS (prod)", "Hetzner Cloud (shop)", a feed's name…; one of the seven above (else "a cloud source's provider is vallic, aws, gcp, azure, hetzner, digitalocean or feed") |
 | `endpoint` | Vallic's console when not `https://console.vallic.com` |
 | `account` | Who signed in when it was made (an email, an ARN, `user (subscription)`, the context) |
 | `key_ref` | The `ssh_key` its new hosts sign in with; none: the SSH agent |
@@ -28,8 +29,9 @@ A `cloud_source` item (in a personal or team vault):
 | `scopes` | AWS regions, Google Cloud projects or Azure subscription ids; empty: every enabled region, active project or enabled subscription the sign-in sees |
 | `reach` | None (public addresses), `private` (with `jump_ref`: "private addresses need a jump host"), `aws-ssm`, `aws-eice` (AWS only), `gcp-iap` (Google Cloud only) |
 | `jump_ref`, `user`, `group_tag` | The jump host for private addresses; who to log in as where a machine doesn't say; group by this tag's or label's value instead |
+| `url`, `token` | A feed's address (`https://`, or `http://` on `localhost`, `127.0.0.1` or `[::1]`: else "a feed's address starts with https://") and the token it's read with (required: "a feed needs the token it's read with") |
 
-A host it keeps carries `source` (`HostSource`): `source_ref`, `external_id` (what a refresh matches on), `label` (the provider's name for it: a host still called that follows renames, one renamed in MorphGate keeps its name), `gone`, `no_sftp`, `no_forwarding`, `state` (`stopped`, `VM deallocated`…) and `reach`. Lists show "gone from AWS" or the state as a badge, and hide **Files** for `no_sftp` ([Hosts, groups and identities](hosts-groups-identities.md)). For `no_forwarding` the tunnel editor leaves the host out, saving or starting a tunnel through it is refused ("\"{host}\" can't carry tunnels: its cloud's SSH doesn't forward ports"), and the agent isn't forwarded to it ([Port forwarding](port-forwarding.md)).
+A host it keeps carries `source` (`HostSource`): `source_ref`, `external_id` (what a refresh matches on), `label` (the provider's name for it: a host still called that follows renames, one renamed in MorphGate keeps its name), `gone`, `no_sftp`, `no_forwarding`, `state` (`stopped`, `VM deallocated`…), `reach`, and from a feed `host_keys` (its server's keys) and `tags` (the ones the feed gave it, among the host's). A feed's snippet carries `source` (`SnippetSource`: `source_ref`, `external_id`). Lists show "gone from AWS" ("gone from its feed") or the state as a badge, and hide **Files** for `no_sftp` ([Hosts, groups and identities](hosts-groups-identities.md)). For `no_forwarding` the tunnel editor leaves the host out, saving or starting a tunnel through it is refused ("\"{host}\" can't carry tunnels: its cloud's SSH doesn't forward ports"), and the agent isn't forwarded to it ([Port forwarding](port-forwarding.md)).
 
 ## Where credentials live
 
@@ -38,12 +40,13 @@ A host it keeps carries `source` (`HostSource`): `source_ref`, `external_id` (wh
 | Vallic Cloud sign-in | The rotating refresh token, as a device secret: setting `secret:cloud:<source id>` in `settings`, sealed with the personal vault's key (readable only while the vault is unlocked), never synced. The access token stays in memory (15 minutes, renewed a minute early) |
 | AWS, Google Cloud, Azure, Hetzner, DigitalOcean | The CLI's own configuration, untouched. MorphGate asks for no keys: keys kept in the vault would put long-lived cloud credentials in every synced copy, and each provider's single sign-on would have to be done again in MorphGate |
 | The CLI's path, when it isn't found | Setting `cloud-cli:<provider>`, on this device |
+| A feed's token | The `cloud_source` item's `token`, synced with the vault ([Feeds](#feeds)) |
 
 Refresh tokens rotate and a replayed one ends the sign-in, so `CloudState` lets one cloud operation run at a time per device, and a rotated token is stored before anything else can fail. MorphGate signs in to Vallic as the public client `vallic-cli` (`CLIENT_ID`), naming the session "MorphGate on <device>".
 
 ## Adding a source
 
-The Hosts page's **Add from…** → **Clouds…** (desktop) opens "Clouds": each source, then a **Vault** choice and **Connect Vallic Cloud** (**Connect another Vallic account** once there is one), **Add AWS**, **Add Google Cloud**, **Add Azure**, **Add Hetzner Cloud**, **Add DigitalOcean**.
+The Hosts page's **Add from…** → **Clouds…** (desktop) opens "Clouds": each source, then a **Vault** choice and **Connect Vallic Cloud** (**Connect another Vallic account** once there is one), **Add AWS**, **Add Google Cloud**, **Add Azure**, **Add Hetzner Cloud**, **Add DigitalOcean**, **Add a feed**. **Add from…** → **Feed URL…** opens it at **Add a feed**.
 
 ### Vallic Cloud
 
@@ -95,18 +98,104 @@ How a machine becomes a host (`shape::hosts()`):
 | Sign-in (new hosts) | AWS: the vault key labelled like the instance's key pair; else the source's key; else the system's SSH agent |
 | Left out | Windows machines, terminated EC2 instances; running machines without the address the source uses, and new stopped ones without any ("Without a public address: …") |
 
+### A feed
+
+**Add a feed**: "Hosts and snippets from a JSON document at an address, read with a token: …", the **Vault**, then:
+
+| Control | Field |
+| --- | --- |
+| **Address** (placeholder `https://ops.example.com/morphgate.json`) | `url` |
+| **Token** (a password field; "Kept in the vault, so every device that can open it refreshes the feed. Use a token that only reads the feed.") | `token` |
+| **Name (optional)** | `label`: else what the feed calls itself (`name`), else the address's host |
+| **Its hosts sign in with** | `key_ref` |
+| **Add and read the feed** ("Reading…"), **Cancel** | `cloud_feed_add`: the feed is read before the source is kept, so a wrong address or token is said and nothing is made ("{host} refused the token") |
+
+The source's card shows the address and the token's last 4 characters ("token …f3a9"; "…" for a token under 16 characters), never the rest. **Settings…** opens the same form (an empty **Token**, "Leave empty to keep it (…f3a9)", keeps it), then **Save and refresh** (`cloud_feed_settings`, then `cloud_refresh`).
+
 ## Refresh
 
-`cloud_refresh(source_id)` runs on demand: **Refresh** on the source, or after its settings change. `apply()` matches the source's hosts in its vault by `external_id`:
+`cloud_refresh(source_id)` runs on demand: **Refresh** on the source, or after its settings change; a feed also refreshes itself ([Feeds](#automatic-refresh)). `apply()` matches the source's hosts in its vault by `external_id`:
 
 | What | On refresh |
 | --- | --- |
-| Follows the provider | Label (until renamed here), host name (a stopped machine keeps its last one), port, user, login and jump commands, the jump host (the source's for private addresses, else none; Vallic's front), the `source` marker |
-| Stays the person's | Sign-in (key, identity), terminal scheme, VPN, tags, notes, group, agent forwarding, recording, session keeping |
-| A new machine | A new host, in the group of that name (made when missing) |
+| Follows the provider | Label (until renamed here), host name (a stopped machine keeps its last one), port, user, login and jump commands, the jump host (the source's for private addresses, else none; Vallic's front; a feed's `jump`), the `source` marker (a feed's host keys and state with it) |
+| Stays the person's | Sign-in (key, identity), terminal scheme, VPN, tags, notes, group, agent forwarding, recording, session keeping. A feed's tags are added: the ones it gave before are replaced by the ones it gives now, the person's stay |
+| A new machine | A new host, in the group of that name (made when missing; none where a feed names none) |
 | No longer listed | `gone` set; listed again, it clears |
 
-The page says "2 hosts added, 1 updated, 1 gone from the cloud" (or "Nothing changed"), then what it skipped: "No shell for you (your role), or not running yet: …" (Vallic), "Without a public address: …", "Couldn't list: …" (regions, projects or subscriptions that refused, and machines whose ids aren't shaped like the cloud's).
+New items get ids worked out rather than drawn (`mg_store::derived_id`: SHA-256 of the vault, the source, the kind and the `external_id`, or the group's name in lowercase, as a ULID; `LocalVault::insert_in`): two devices refreshing a source at once make the same host, group or snippet under the same id, and the second gets a conflict instead of a duplicate. Copies that differ only in what the source decides (the source's `refreshed_at` too) make no "(conflict)" copy ([Sync](sync.md#conflicts)). A live item already holding the id (one that lost its `source`) leaves the new one a random id.
+
+The page says "2 hosts added, 1 updated, 1 gone from the cloud" ("…gone from the feed"; a feed adds "1 snippet added", "1 snippet changed", "1 snippet removed"), or "Nothing changed", then what it skipped: "No shell for you (your role), or not running yet: …" (Vallic), "Without a public address: …", "Couldn't list: …" (regions, projects or subscriptions that refused, and machines whose ids aren't shaped like the cloud's), "Skipped: …" (a feed's entries). A refresh that failed on this device (an automatic one included) shows on the card until one succeeds: "The last refresh failed: …" (`CloudState`, in memory).
+
+## Feeds
+
+A feed is a JSON document of hosts and snippets at an address, read with a token: generated from Terraform output, a CMDB or a cron job, or served by an internal endpoint. It's how a team brings in what no cloud's API shows (an operator port, a staff user, bastions). The device reads it straight from the publisher over HTTPS, and the result becomes ordinary vault items, so MorphGate's server sees nothing new. `mg_inventory::feed` reads it (`fetch`, `parse`): data only, never something that runs on the device (no proxy or local command, no `CloudReach`).
+
+### The request
+
+`GET <url>` with `Authorization: Bearer <token>`, `Accept: application/json` and `User-Agent: MorphGate/<version>`. Redirects are followed (5 at most) only to `https://` or this computer. The answer is read up to 5 MiB, within 60 s.
+
+| Answer | Message |
+| --- | --- |
+| 401 or 403 | "{source} refused the token: change it in the source's settings" |
+| Another status | "{source} answered {status}" |
+| Over 5 MiB | "{source} sent more than 5 MiB: a feed is at most that" |
+| Over 60 s | "{source} took longer than 60 s to answer" |
+| Not JSON, not an object, no `"version": 1`, `hosts` or `snippets` not a list | "{source} sent something this version can't read: …" |
+| `version` above 1 | "{source} is a version {n} feed: update MorphGate to read it" |
+| More than 5,000 hosts or 1,000 snippets | "{source} lists {n} hosts: a feed holds at most 5,000" |
+| Unreachable | "can't reach {source}: …" |
+
+A document refused whole changes nothing.
+
+### The format (version 1)
+
+```json
+{
+  "version": 1,
+  "name": "Ops",
+  "hosts": [
+    { "id": "bastion-fsn1", "label": "Bastion FSN1", "hostname": "bastion-fsn1.example.net",
+      "port": 22, "user": "ops", "group": "Bastions", "host_keys": ["ssh-ed25519 AAAAC3Nza..."] },
+    { "id": "server-1234", "label": "acme-prod-1", "hostname": "10.0.12.34", "port": 2222,
+      "user": "ops", "group": "Acme", "tags": ["production", "fsn1"], "jump": "bastion-fsn1",
+      "key": "customers", "host_keys": ["ssh-ed25519 AAAAC3Nza..."], "state": "running" }
+  ],
+  "snippets": [
+    { "id": "php-errors", "name": "PHP error log", "body": "podman logs --tail 200 php", "tags": ["diagnostics"] }
+  ]
+}
+```
+
+| Field | Rule |
+| --- | --- |
+| `version` | `1` |
+| `name` | Optional: what the source is called when it's added without a name |
+| `id` | Required, unique among the hosts (and among the snippets): 1 to 200 of `A-Z a-z 0-9 . _ : / @ -`. What a refresh matches on, as `external_id` `feed:<id>` |
+| `hostname`, `user` | Required: no whitespace or control characters, no leading `-`, at most 255 bytes |
+| `label` | Optional (control characters out, at most 200 characters); else the `id` |
+| `port` | 1 to 65535; 22 when left out |
+| `group` | Optional: the group a new host goes in (made when missing); none when left out |
+| `tags` | Optional: added to the host's (at most 50, 64 characters each) |
+| `jump` | Optional: another host's `id` in the same feed, kept, not itself, and not leading round in a circle |
+| `key` | Optional: the label of an SSH key in the vault that a new host signs in with (as an EC2 key pair's name). No match: the source's key (**Its hosts sign in with**), else the SSH agent. Never a key itself |
+| `host_keys` | Optional, at most 16: the server's OpenSSH public keys (`ssh-ed25519`, `ecdsa-sha2-nistp256/384/521`, `ssh-rsa`, `sk-…`; type and base64, a comment after them dropped). They decide the host's key at connect time instead of trust on first use; another key is refused ([SSH connections](ssh-connections.md#keys-a-feed-lists)). Left out, the first connection asks as usual |
+| `state` | Optional: shown as a badge (`stopped`); `running` shows none |
+| `snippets[].id`, `name`, `body`, `tags` | `id` as for hosts; `name` and `body` required; the body at most 64 KiB, with no control characters but newlines and tabs (a terminal reads escape sequences as more than text) |
+
+Unknown fields are ignored and `null` reads as left out. An entry that breaks a rule is skipped and said ("Skipped: server-9: the port isn't 1 to 65535; …"); a host that jumps through a skipped one is skipped too.
+
+### Snippets
+
+A feed's snippets follow it whole: each refresh sets their name, body and tags, makes new ones and deletes the ones it no longer lists. They're read-only in the app (**Make a copy** to change one), and **Run** and **Paste** ask first when the feed changed one since this device last sent it ([Terminal and snippets](terminal-and-snippets.md#a-feeds-snippets)).
+
+### The token
+
+Every device of the team refreshes, so the token is in the `cloud_source` item, synced to everyone who can open the vault: an exception to the vault holding no cloud credentials, taken because a feed's token only reads a host list. Publishers should issue one that does only that. The card shows its last 4 characters at most. Offboarding lists each feed in the member's vaults under what to change: "Rotate the token for {source}" ([Offboarding](offboarding.md)).
+
+### Automatic refresh
+
+On desktops the app calls `cloud_auto_refresh` once the first sync since unlocking has finished (at once without sync, after 20 s at the latest), then every 15 minutes while unlocked. It refreshes, one at a time, each feed in a vault this device can write to whose `refreshed_at` (synced) is 10 minutes old or more, checking again just before (a sync may have brought another device's refresh). Members who can only view never refresh. The CLI providers and Vallic Cloud still refresh on demand only.
 
 ## Reaching machines through the cloud
 
@@ -125,9 +214,10 @@ The CLI's path is quoted for the shell with `%` doubled; a profile must be lette
 | Control | Command | Does |
 | --- | --- | --- |
 | **Its hosts sign in with** | `cloud_source_key` | Sets the source's key; its hosts that used the previous key (or the system agent, when there was none) follow, others keep theirs |
-| **Settings…** (CLI sources) | `cloud_source_settings` | Changes what is listed and how; Vallic: "Vallic Cloud lists what your sign-in reaches" |
+| **Settings…** (CLI sources) | `cloud_source_settings` | Changes what is listed and how; Vallic: "Vallic Cloud lists what your sign-in reaches"; a feed: "a feed's settings are its address and token" |
+| **Settings…** (feeds) | `cloud_feed_settings` | Its name, address and token |
 | **Sign out on this device** (Vallic) | `cloud_sign_out` | Revokes the token on the console and forgets it here; the source and hosts stay |
-| **Remove…**, then **Remove it and its hosts** or **Remove it, keep the hosts** | `cloud_source_delete(source_id, delete_hosts)` | Signs out, deletes the hosts (those behind a jump host first) or makes them ordinary hosts, then the source. Groups it made stay |
+| **Remove…**, then **Remove it and its hosts** or **Remove it, keep the hosts** (a feed with snippets: **Remove it, its hosts and snippets**, **Remove it, keep the hosts and snippets**) | `cloud_source_delete(source_id, delete_hosts)` | Signs out, deletes the hosts (those behind a jump host first) and a feed's snippets, or makes them ordinary hosts and snippets, then the source. Groups it made stay. Deleting the item while a host or snippet still names it is refused, as for anything in use |
 
 ## Running the CLIs
 
@@ -146,31 +236,35 @@ The CLI's path is quoted for the shell with `%` doubled; a profile must be lette
 
 | Command | Does |
 | --- | --- |
-| `cloud_sources` | Sources as `SourceView`: host and gone counts, `signed_in` (Vallic: this device has a sign-in; CLI sources: always), the CLI path set here |
+| `cloud_sources` | Sources as `SourceView`: host, gone and snippet counts, `signed_in` (Vallic: this device has a sign-in; the others: always), the CLI path set here, a feed's `url` and `token_end`, and `failed` (the last refresh here, when it failed) |
 | `vallic_sign_in(endpoint)`, `vallic_sign_in_poll(endpoint, device_code, source_id, vault_id)` | The device sign-in; `Pending {slower}`, `Denied`, `Expired`, or `Done {source, refresh}` |
 | `cloud_source_add(provider, vault_id, key_id, settings)`, `cloud_source_settings(source_id, settings)` | A CLI source; its settings |
 | `cloud_check(provider, profile)`, `cloud_cli_path(provider, path)` | Who the CLI is signed in as; where this device runs it from |
-| `cloud_refresh(source_id)` | `RefreshResult {added, updated, gone, without_shell, without_address, skipped}` |
+| `cloud_feed_add(vault_id, key_id, {label, url, token})`, `cloud_feed_settings(source_id, {label, url, token})` | A feed (read first, then kept and brought in); its name, address and token (an empty token keeps it) |
+| `cloud_refresh(source_id)` | `RefreshResult {added, updated, gone, without_shell, without_address, skipped, snippets_added, snippets_updated, snippets_removed}` |
+| `cloud_auto_refresh` | The feeds that are due ([Automatic refresh](#automatic-refresh)); how many it refreshed. Nothing on phones |
 | `cloud_source_key`, `cloud_sign_out`, `cloud_source_delete`, `cloud_add_key(source_id, key_id)` | As above |
 
 ## Platform differences
 
 | Where | Difference |
 | --- | --- |
-| Phones and tablets | No **Clouds…** page and no CLIs. The hosts sync and connect, except those reached through the cloud: "\"web-1\" connects through its cloud's CLI on the computer: connect to it from the desktop app" |
+| Phones and tablets | No **Clouds…** page and no CLIs, and feeds don't refresh themselves. The hosts sync and connect (a feed's host keys apply there too), except those reached through the cloud: "\"web-1\" connects through its cloud's CLI on the computer: connect to it from the desktop app" |
 | Windows | CLIs found as `.exe` or `.cmd` |
 
 ## Tests
 
 - `crates/mg-inventory/src/*.rs`: each provider's JSON as its CLI documents it, `shape.rs` (addresses, users, groups by tag, Session Manager), `vallic.rs` (environments as hosts), `cli.rs` (JSON read, stderr passed on, a missing CLI named). `crates/mg-store/src/model.rs`: `only_what_the_clouds_ids_look_like`. `apps/desktop/src-tauri/src/cloud.rs`: private machines and stopped ones, the reach command built here, a refresh following the platform and keeping what is the person's.
 - `crates/mg-inventory/tests/console.rs`: the Vallic client against a fake console on loopback (device flow, rotation, a replayed token refused, the inventory).
+- `crates/mg-inventory/src/feed.rs`: the format's example, defaults, every rule's skip and its message, documents refused whole, `https://` only. `crates/mg-inventory/tests/feed.rs`: the feed client against a fake publisher on loopback (the token and headers sent, a refused token, over 5 MiB, a redirect to plain HTTP not followed). `apps/desktop/src-tauri/src/cloud.rs`: `a_feed_keeps_hosts_and_snippets_in_step` (derived ids, jump hosts, groups, tags kept, host keys, snippets dropped). `crates/mg-store/src/sync.rs`: `refreshes_on_two_devices_make_no_copies`. `crates/mg-ssh/tests/live.rs`: `listed_host_keys_decide`.
 - `crates/mg-inventory/tests/clis.rs`: the real CLIs, read only, printing counts only; ignored unless asked, e.g. `MG_TEST_AWS=1 [MG_TEST_AWS_PROFILE=…] cargo test -p mg-inventory --test clis -- --include-ignored --nocapture` (also `MG_TEST_AZ`, `MG_TEST_GCLOUD`, `MG_TEST_HCLOUD`, `MG_TEST_DOCTL`).
-- e2e `apps/desktop/e2e/appimage.mjs`: Vallic Cloud through `vallic-console.mjs` (sign-in approved on the second poll, the key added to the account, no Files); AWS through the stand-in `e2e/clouds/aws` (an instance that is the test sshd, signing in with the vault key named like its key pair, a stopped one waiting, then the same source through Session Manager, which the stand-in relays with `crates/mg-ssh/tests/relay.py`); DigitalOcean through `e2e/clouds/doctl`. `run.sh` sets `MORPHGATE_VALLIC_CONSOLE`, `MORPHGATE_CLOUD_CLI_DIR`, `E2E_CLOUD_PORT` and `E2E_CLOUD_USER`.
+- e2e `apps/desktop/e2e/appimage.mjs`: Vallic Cloud through `vallic-console.mjs` (sign-in approved on the second poll, the key added to the account, no Files); AWS through the stand-in `e2e/clouds/aws` (an instance that is the test sshd, signing in with the vault key named like its key pair, a stopped one waiting, then the same source through Session Manager, which the stand-in relays with `crates/mg-ssh/tests/relay.py`); DigitalOcean through `e2e/clouds/doctl`; a feed through `e2e/host-feed.mjs` (a wrong token said, its host on 127.0.0.4 connecting with the listed key and no prompt, one listed with another key refused, an invalid entry skipped, its snippet read-only and asking before it runs once the feed changed it). `run.sh` sets `MORPHGATE_VALLIC_CONSOLE`, `MORPHGATE_CLOUD_CLI_DIR`, `E2E_CLOUD_PORT`, `E2E_CLOUD_USER`, `E2E_HOST_FEED` and `E2E_HOST_FEED_TOKEN`.
 
 ## Limits
 
-- Refreshing is on demand only, per source, on a desktop.
+- Refreshing is on demand only, per source, on a desktop; feeds also refresh themselves there.
 - Vallic Cloud: a source brings every project the sign-in reaches, grouped by project; no SFTP; its database and cache tunnels (`vallic-tunnel`) aren't offered, and neither are ordinary tunnels or agent forwarding (`no_forwarding`).
 - Not supported: Azure Bastion (`az network bastion tunnel` listens on a port and can't carry a connection on stdin), Azure's Entra ID sign-in to VMs (`az ssh cert`). Windows machines are left out.
 - A jump host set by hand on a kept host is replaced at the next refresh.
-- Moving a source to another vault doesn't take its hosts (they don't ride with it); its next refresh there makes new ones.
+- Moving a source to another vault doesn't take its hosts or snippets (they don't ride with it); its next refresh there makes new ones.
+- A feed can't carry a login command or reach a host through a command (a remote login command may come later); ETags aren't sent yet, so each refresh reads the whole document.
diff --git a/docs/features/hosts-groups-identities.md b/docs/features/hosts-groups-identities.md
index ebfa976..339dc6d 100644
--- a/docs/features/hosts-groups-identities.md
+++ b/docs/features/hosts-groups-identities.md
@@ -18,7 +18,7 @@ An item is an `ItemData` serialized as JSON with a `type` tag (`{"type": "host",
 | `vpn` | A VPN profile a host can go through | [VPN](vpn.md) |
 | `terminal_theme` | Terminal colors | [Appearance](appearance.md) |
 | `session_log` | A recorded session (blobs) | [Session logs](session-logs.md) |
-| `cloud_source` | Hosts kept in step with a cloud | [Cloud sources](cloud-sources.md) |
+| `cloud_source` | Hosts kept in step with a cloud or a feed | [Cloud sources](cloud-sources.md) |
 | `member_key` | A member's published SSH public key; only in an organization's directory vault | [Teams](teams.md) |
 | unknown | A kind a newer app wrote: kept and synced, left out of lists, never edited or moved | |
 
diff --git a/docs/features/offboarding.md b/docs/features/offboarding.md
index 2d16367..ac083c6 100644
--- a/docs/features/offboarding.md
+++ b/docs/features/offboarding.md
@@ -25,6 +25,7 @@ In a team's member list, **Remove…** next to a confirmed member opens the page
 | Identity | other item | "Password of {label}" when it has a saved password |
 | SSH key | SSH key | "SSH key {label}", with "used by {hosts}": hosts that log in with it, directly or through an identity or group (`effective_host()`) |
 | VPN profile | VPN | "VPN profile {label}" |
+| Feed ([Cloud sources](cloud-sources.md#feeds)) | other item | "Rotate the token for {label} (a feed: change it where the feed is published, then in the source's settings)": its token is in the vault |
 | Member key | not counted | |
 | Anything else | other item | |
 
@@ -59,7 +60,7 @@ The file is edited with these safety checks (`authorized_keys.rs`, `edit_keys()`
 
 ## 4. Change what they could see
 
-A checklist of the secrets from step 1; the ticks belong to the page and are gone when it closes. Passwords and VPN profiles are changed by hand (on the server or the VPN provider, then in the item). SSH keys have **Replace key** ("Replacing…"); a replaced key shows "replaced ({fingerprint})", and "; the old key is still on {hosts}" when removing it failed somewhere. A failure shows its message in the row.
+A checklist of the secrets from step 1; the ticks belong to the page and are gone when it closes. Passwords, VPN profiles and feed tokens are changed by hand (on the server, the VPN provider or where the feed is published, then in the item or the feed's **Settings…**). SSH keys have **Replace key** ("Replacing…"); a replaced key shows "replaced ({fingerprint})", and "; the old key is still on {hosts}" when removing it failed somewhere. A failure shows its message in the row.
 
 ### Replacing a shared SSH key
 
diff --git a/docs/features/ssh-connections.md b/docs/features/ssh-connections.md
index ac765f6..9004d78 100644
--- a/docs/features/ssh-connections.md
+++ b/docs/features/ssh-connections.md
@@ -1,6 +1,6 @@
 # SSH connections
 
-A connection is one SSH transport to a host, possibly through jump hosts, a VPN or a proxy command, with a PTY shell on top. Every hop's host key is checked before anything is sent to it: pinned on first use in `known_hosts`, or vouched for by a host CA. Each hop signs in with the one method its host is set to. A lost connection reconnects by itself. Code: `crates/mg-ssh/src/connection.rs` (`Connection`, `Hop`, `Auth`, `Verifier`), `crates/mg-ssh/src/session.rs` (`Session`, `ConnectOptions`), `crates/mg-ssh/src/known_hosts.rs` (`KnownHosts`, `HostAuthority`), `crates/mg-ssh/src/proxy_command.rs`, `crates/mg-ssh/src/command_stream.rs`, `crates/mg-ssh/src/error.rs`, `apps/desktop/src-tauri/src/ssh.rs` (Tauri commands), `apps/desktop/src-tauri/src/proxy.rs`, `apps/desktop/src-tauri/src/host_cas.rs`, `apps/desktop/src/ConnectForm.tsx`, `apps/desktop/src/HostKeyDialog.tsx`, `apps/desktop/src/HostCaPanel.tsx`, `apps/desktop/src/TerminalView.tsx`.
+A connection is one SSH transport to a host, possibly through jump hosts, a VPN or a proxy command, with a PTY shell on top. Every hop's host key is checked before anything is sent to it: pinned on first use in `known_hosts`, vouched for by a host CA, or listed by the host's feed. Each hop signs in with the one method its host is set to. A lost connection reconnects by itself. Code: `crates/mg-ssh/src/connection.rs` (`Connection`, `Hop`, `Auth`, `Verifier`), `crates/mg-ssh/src/session.rs` (`Session`, `ConnectOptions`), `crates/mg-ssh/src/known_hosts.rs` (`KnownHosts`, `HostAuthority`), `crates/mg-ssh/src/proxy_command.rs`, `crates/mg-ssh/src/command_stream.rs`, `crates/mg-ssh/src/error.rs`, `apps/desktop/src-tauri/src/ssh.rs` (Tauri commands), `apps/desktop/src-tauri/src/proxy.rs`, `apps/desktop/src-tauri/src/host_cas.rs`, `apps/desktop/src/ConnectForm.tsx`, `apps/desktop/src/HostKeyDialog.tsx`, `apps/desktop/src/HostCaPanel.tsx`, `apps/desktop/src/TerminalView.tsx`.
 
 Keys, certificates and agents are in [SSH keys and agents](ssh-keys-and-agents.md); the host item and its editor in [Hosts, groups and identities](hosts-groups-identities.md); the overview in [App architecture](../architecture.md#how-a-connection-runs).
 
@@ -111,6 +111,10 @@ A `host_ca` item (`HostCa { label, public_key, hosts }`) trusts host certificate
 
 Where a CA is trusted for a hop, `client_config(true)` asks the server for host certificates (Ed25519, ECDSA P-256/384/521, RSA SHA-512/256). A certificate is accepted, and nothing pinned, only if `known_hosts::certified` agrees: it is a host certificate, signed by one of the CAs trusted for this host, valid now with a good signature, its principals are empty or include the hostname, and it has no critical options. Otherwise the connection fails with the reason, as OpenSSH does; it does not fall back to pinning. A server that answers with a plain key is pinned as usual. Without a CA for the host, certificates are never asked for.
 
+### Keys a feed lists
+
+A host a feed keeps can come with its server's host keys (`HostSource.host_keys`, from the feed's `host_keys`; [Cloud sources](cloud-sources.md#feeds)). `saved_hop` hands them to the hop as `Hop::listed_keys` (`ListedKeys {keys, from}`, `from` the feed's name), for that host item only: another host item with the same address is checked as usual. For such a hop (`Verifier::listed`), after an `@revoked` line (which still refuses), the server's plain key must be one of the listed ones: then it is trusted, without a prompt and without being written to `known_hosts`, whatever a file pins for the address; any other key fails with "the host key of {host}:{port} ({fingerprint}) isn't one {feed} lists for it: refused. Someone may be intercepting the connection, or {feed} doesn't know the server's new key yet" (`Error::HostKeyNotListed`). Listed lines that don't parse are dropped; when none parses, the host is checked as any other. A host CA trusted for the host still decides first, where the server presents a certificate. The route bar shows "key listed by {feed}" instead of the pinned key.
+
 ## Jump hosts
 
 A host's `jump_ref` (or its group's) names another host to go through; that one can have its own. `LocalVault::route` follows the chain, at most 8 jump hosts (`MAX_JUMPS`), refusing loops ("jump hosts form a loop or a chain that is too long"); saving refuses them too. A jump host must be in the same vault.
@@ -178,6 +182,7 @@ Connection errors are `mg_ssh::Error`'s text, written in red in the tab.
 | "via jump host {host}:{port}: …" | Wraps any error from a later hop |
 | "REMOTE HOST KEY CHANGED for {host}:{port} ({type} {fingerprint})…" | Changed key; the dialog shows first |
 | "host key for {host}:{port} was not accepted" | Prompt cancelled or timed out |
+| "the host key of {host}:{port} ({fingerprint}) isn't one {feed} lists for it: refused…" | A host whose feed lists its keys answered with another |
 | "the host certificate of {host}:{port} isn't accepted: {why}" | Why: "it's a user certificate, not a host's", "it's signed by {fp}, which isn't a CA trusted for this host", "it isn't valid now (expired, not yet valid), or its signature doesn't check out", "it's for {principals}, not {host}", "it has critical options, which host certificates don't" |
 | "authentication failed" | The server refused the method |
 | "password required" / "jump host \"{label}\" has no saved password; save one or switch it to a key" | No password to send |
@@ -215,8 +220,8 @@ Connection errors are `mg_ssh::Error`'s text, written in red in the tab.
 | `crates/mg-ssh/src/proxy_command.rs` | Token expansion, refused host and user names, bytes both ways, stderr as the error |
 | `crates/mg-ssh/src/connection.rs` | The macOS local-network hint |
 | `apps/desktop/src-tauri/src/ssh.rs`, `proxy.rs`, `host_cas.rs` | A synced proxy command waits for allowing; tmux names; request shapes match the webview; a changed command asks again; parsing a CA key or `@cert-authority` line |
-| `crates/mg-ssh/tests/live.rs` | Against a real sshd: shell, resize, exit and TOFU; a rejected key isn't learned; a changed key fails closed; wrong password; key file; unreachable port; jump host tunnel; jump command; proxy command, and failing ones that say why; a host certificate from a trusted CA (`MG_TEST_HOST_CA`); the first hop through a dialer |
-| `apps/desktop/e2e/appimage.mjs` | Quick connect with a key file chosen in the form, and with a pasted key after a `morphgate://` link; **Trust and connect**, the pinned key in the route bar, **Host key changed** for an edited `known_hosts`, a jump host from `~/.ssh/config`, a jump command and a proxy command (via `crates/mg-ssh/tests/relay.py`), a host CA with "certified by" and no prompt |
+| `crates/mg-ssh/tests/live.rs` | Against a real sshd: shell, resize, exit and TOFU; a rejected key isn't learned; a changed key fails closed; wrong password; key file; unreachable port; jump host tunnel; jump command; proxy command, and failing ones that say why; a host certificate from a trusted CA (`MG_TEST_HOST_CA`); the first hop through a dialer; listed host keys connect without asking (over a stale pin) and aren't written down, another key is refused |
+| `apps/desktop/e2e/appimage.mjs` | Quick connect with a key file chosen in the form, and with a pasted key after a `morphgate://` link; **Trust and connect**, the pinned key in the route bar, **Host key changed** for an edited `known_hosts`, a jump host from `~/.ssh/config`, a jump command and a proxy command (via `crates/mg-ssh/tests/relay.py`), a host CA with "certified by" and no prompt; a feed's host with its listed key (no prompt), and one listed with another key refused |
 
 The live tests are ignored unless `MG_TEST_SSH=host:port` is set (and `MG_TEST_USER`, `MG_TEST_KEY`, optionally `MG_TEST_PASSWORD`); the header of `live.rs` starts a throwaway user-level sshd. Run them with `cargo test -p mg-ssh --test live -- --include-ignored --test-threads=1`. See [Development](../development.md) for the e2e runner.
 
diff --git a/docs/features/sync.md b/docs/features/sync.md
index f411c90..a0b458e 100644
--- a/docs/features/sync.md
+++ b/docs/features/sync.md
@@ -205,6 +205,7 @@ From the code's own statement: the server copy always wins for an item id, and a
 | Local | Server | Result |
 | --- | --- | --- |
 | An edit | An edit with the same content (both re-sealed it, say) | No copy, no conflict |
+| A cloud source's change | The same source's change from another device (both refreshed it) | No copy, no conflict, when the copies differ only in what the source decides (`source_decides`): a source item only in `refreshed_at`; a host it keeps (same `source_ref` and `external_id`) only in label while it follows the source, host name, port, user, jump host, login and jump commands, the source's tags and the `source` marker; a feed's snippet, whatever it differs in. The next refresh sets it again. A person's edit (a rename, a note, a tag, a key) still makes a copy |
 | An edit | A different edit | The server's version under the id; the local one as a new item (new ULID, `rev` 0, dirty), pushed like any new item |
 | An edit | A deletion that got there first | The item is deleted; the edit survives as a copy |
 | A deletion | An edit that got there first | No copy; the item comes back with the server's edit |
diff --git a/docs/features/terminal-and-snippets.md b/docs/features/terminal-and-snippets.md
index 2d30c03..6a5ae95 100644
--- a/docs/features/terminal-and-snippets.md
+++ b/docs/features/terminal-and-snippets.md
@@ -112,7 +112,21 @@ Shown above terminal tabs (`RouteBar.tsx`). Its menus close on a click elsewhere
 
 ## Snippets
 
-A `snippet` item: `name` (trimmed), `body` (exactly as typed), `tags` (trimmed, empty ones dropped, left out of the JSON when there are none). Lists sort by name, ignoring case. A snippet lives in any vault; in a view-only vault it can be sent but not edited. Importing from CSV is in [Importing](importing.md).
+A `snippet` item: `name` (trimmed), `body` (exactly as typed), `tags` (trimmed, empty ones dropped, left out of the JSON when there are none), and `source` (`SnippetSource {source_ref, external_id}`) when a feed keeps it. Lists sort by name, ignoring case. A snippet lives in any vault; in a view-only vault it can be sent but not edited. Importing from CSV is in [Importing](importing.md).
+
+### A feed's snippets
+
+A feed ([Cloud sources](cloud-sources.md#feeds)) brings snippets as well as hosts. The feed decides them whole: each refresh sets name, body and tags, and deletes one the feed no longer lists (nobody's edits are lost: they can't be edited). In the app they are read-only:
+
+| Where | Difference |
+| --- | --- |
+| Snippets page | "From {feed} (read-only)" under the snippet's name; the row's icon is **Open** rather than **Edit** |
+| Editor | "From the feed **{feed}**: it changes there, and is read-only here." with **Make a copy** (a snippet of one's own, "{name} (copy)", in the same vault, or the personal one when that's view-only, which then opens); the fields are read-only, and there's no **Save** or **Delete** |
+| `snippet_save`, `snippet_delete` | Refused: "\"{name}\" comes from {feed}: it changes there, or make a copy to change it here" |
+| Bulk delete | Left out: "\"{name}\" comes from a feed: it goes when the feed drops it" |
+| Removing the feed | **Remove it, its hosts and snippets** deletes them; **Remove it, keep the hosts and snippets** makes them ordinary snippets |
+
+**Run** and **Paste** ask first when the feed changed the body since this device last sent it: "{name} changed", "Changed by **{feed}** on {date}, since you last ran it on this device. It now runs:" with the body, **Cancel** and **Run it** (or **Paste it**) (`SnippetCheck.tsx`). Every place a snippet is sent goes through `guardSnippet` in `App.tsx`: the route bar's menu, the Snippets page, the editor and the phone's **Snippets** sheet. After a feed's snippet is sent, `snippet_sent` keeps the SHA-256 of its body on this device (setting `snippet-sent:<id>`, not synced); `snippets_list` sets `changed` when that hash is there and differs from the body's. A snippet never sent from this device doesn't ask.
 
 | Control (`SnippetPanel.tsx`) | Does |
 | --- | --- |
@@ -136,6 +150,7 @@ The Snippets page (sidebar **Snippets**) lists them as a table (name, the comman
 | `snippets_list` | All snippets in every vault |
 | `snippet_save` | `{id?, vaultId?, name, body, tags}`; a new snippet goes to `vaultId` or the personal vault |
 | `snippet_delete` | `id` |
+| `snippet_sent` | `id`: this device sent a feed's snippet (keeps its body's hash) |
 
 ## Keyboard
 
@@ -162,6 +177,7 @@ The phone layout (`mobile/MobileWorkspace.tsx`) is used on Android and iPhone, a
 | `apps/desktop/e2e/teams.mjs` | A group's identity and tmux session; **Reconnect** picks the tmux session back up |
 | `apps/desktop/e2e/mobile.mjs` | Ctrl and ↑ from the extra-key row; Esc then a snippet runs as written; a snippet imported from CSV |
 | `apps/desktop/src-tauri/src/bulk.rs`: `deletes_snippets_and_groups_and_says_what_it_leaves` | Bulk delete |
+| `apps/desktop/e2e/appimage.mjs` (the feed) | A feed's snippet runs; it's read-only with **Make a copy**; changed by the feed, running it asks first, once |
 
 The e2e scenarios run with `apps/desktop/e2e/run.sh` (`E2E_ONLY=appimage`, `teams` or `mobile` for one).
 
diff --git a/docs/features/vault-and-unlock.md b/docs/features/vault-and-unlock.md
index 228774f..99c6fc1 100644
--- a/docs/features/vault-and-unlock.md
+++ b/docs/features/vault-and-unlock.md
@@ -49,7 +49,7 @@ Each item's plaintext is an `ItemData`, JSON with a `type` tag (`model.rs`, `SCH
 | `vpn` | VPN profiles | [VPN](vpn.md) |
 | `session_log` | A recorded session, its chunks in blobs | [Session logs](session-logs.md) |
 | `terminal_theme` | Imported color schemes | [Appearance](appearance.md) |
-| `cloud_source` | A cloud account whose machines become hosts | [Cloud sources](cloud-sources.md) |
+| `cloud_source` | A cloud account or feed whose machines become hosts | [Cloud sources](cloud-sources.md) |
 | `member_key` | A member's SSH public key, in an organization's directory vault | [Teams](teams.md) |
 
 Store-level rules that apply to every type:
diff --git a/docs/sync-crypto-spec.md b/docs/sync-crypto-spec.md
index e5e3113..f96a7f1 100644
--- a/docs/sync-crypto-spec.md
+++ b/docs/sync-crypto-spec.md
@@ -138,17 +138,17 @@ Serialized as JSON with a `type` tag and the write's `item_version` (Item histor
 
 | Type | Fields | Status |
 | --- | --- | --- |
-| `host` | label, hostname, port, user, auth (`password {password?}` \| `key {key_ref}` \| `agent`), jump_ref? (host to tunnel through, chains allowed, no loops, ≤ 8 deep), vpn_ref? (VPN for the first hop), theme_ref? (a `terminal_theme` in the same vault, or `builtin:<id>` for one built into the app), record_sessions?, keep_session? (attach to a tmux session on the server), group_ref? (a `host_group`), identity_ref? (an `identity`, instead of user and auth; user may then be empty), tags, notes | Implemented |
+| `host` | label, hostname, port, user, auth (`password {password?}` \| `key {key_ref}` \| `agent`), jump_ref? (host to tunnel through, chains allowed, no loops, ≤ 8 deep), vpn_ref? (VPN for the first hop), theme_ref? (a `terminal_theme` in the same vault, or `builtin:<id>` for one built into the app), record_sessions?, keep_session? (attach to a tmux session on the server), group_ref? (a `host_group`), identity_ref? (an `identity`, instead of user and auth; user may then be empty), tags, notes, source? (the `cloud_source` that keeps it: source_ref, external_id, label, gone?, state?, host_keys? (its server's keys, listed by a feed), tags? (the ones the feed gave it)) | Implemented |
 | `vpn` | label, vpn (`wireguard {config}`: wg-quick text incl. private key) | Implemented |
 | `ssh_key` | label, private_key (OpenSSH/PEM, as imported), passphrase?, public_key, algorithm, fingerprint | Implemented |
-| `snippet` | name, body, tags | Implemented (storage only) |
+| `snippet` | name, body, tags, source? (the feed that keeps it: source_ref, external_id) | Implemented (storage only) |
 | `identity` | label, user, auth (as a host's) — shared credentials hosts refer to | Implemented |
 | `host_group` | name, identity_ref?, jump_ref?, vpn_ref?, theme_ref?, keep_session? — a host takes what it leaves empty from its group (credentials only when its user is empty); deleting a group makes those values the hosts' own | Implemented |
 | `attachment` | name, host_ref?, blob, size (see Blobs) | Implemented |
 | `session_log` | see Blobs | Implemented |
 | `port_forward` | label, host_ref, rule (`local` \| `remote` {bind_host, bind_port, target_host, target_port} \| `dynamic` {bind_host, bind_port}) | Implemented |
 | `known_host` | host pattern, key type, public key | Planned (today: local known_hosts file) |
-| `cloud_source` | label, provider, endpoint?, key_ref?, account — a cloud account whose machines become hosts, kept in step with it ([cloud sources](features/cloud-sources.md)) | Implemented |
+| `cloud_source` | label, provider, endpoint?, key_ref?, account, url?, token? — a cloud account or feed whose machines become hosts, kept in step with it ([cloud sources](features/cloud-sources.md)) | Implemented |
 | `host_ca` | label, public_key, hosts (patterns) — a CA whose signed host keys are trusted for those hosts (`@cert-authority`) | Implemented |
 | `terminal_theme` | name, background, foreground, cursor, cursor_accent, selection_background, selection_foreground?, ansi (16 colors), all `#rrggbb`; imported from Ghostty, Alacritty, iTerm2 or Windows Terminal theme files | Implemented |
 | `member_key` | account_id, public_key (OpenSSH `type base64`), label, sig (member key signature, hex) — only in an organization's directory vault | Implemented |
diff --git a/tools/readme-demo/demo-svg.mjs b/tools/readme-demo/demo-svg.mjs
new file mode 100644
index 0000000..4badda0
--- /dev/null
+++ b/tools/readme-demo/demo-svg.mjs
@@ -0,0 +1,156 @@
+// The README's demo: MorphGate as the AppImage showed it, drawn as an animated SVG. Scene one is
+// the Hosts page (the sidebar and the list of hosts); a pointer clicks a host; scene two is its
+// session in a tab, the recording replayed in the app's own terminal area. The scenes are what
+// demo.mjs captured from the app (snapshot.js: boxes, text and icons where the layout put them),
+// drawn in the app's fonts, embedded (SIL Open Font License, apps/desktop/src/assets/fonts).
+//
+//   node demo-svg.mjs <demo.json> <out.svg>
+
+import { readFileSync, writeFileSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+import { draw, replay, THEME } from "./terminal.mjs";
+
+const [input, output] = process.argv.slice(2);
+if (!input || !output) {
+  console.error("usage: node demo-svg.mjs <demo.json> <out.svg>");
+  process.exit(2);
+}
+const demo = JSON.parse(readFileSync(input, "utf8"));
+const fonts = join(dirname(fileURLToPath(import.meta.url)), "../../apps/desktop/src/assets/fonts");
+
+// The story, in seconds: the Hosts page, the pointer moving to the host, the click; then the
+// session from its start; the last screen held before it all starts over.
+const MOVE_FROM = 0.7;
+const MOVE_TO = 1.8;
+const CLICK = 2.0;
+const CONNECT = 2.4;
+const HOLD = 3.5;
+
+const session = await replay(demo.cast);
+const total = CONNECT + session.duration + HOLD;
+const pct = (t) => `${((t / total) * 100).toFixed(3)}%`;
+const esc = (s) => String(s).replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
+const n = (v) => +v.toFixed(1);
+const W = demo.s1.width;
+const H = demo.s1.height;
+
+// Font families as classes (the computed ones, each a long list).
+const families = new Map();
+const familyClass = (f) => {
+  if (!families.has(f)) families.set(f, `f${families.size}`);
+  return families.get(f);
+};
+// Clips as clip paths, the whole window needing none.
+const clips = new Map();
+const clipAttr = (c) => {
+  if (!c || (c.x <= 0 && c.y <= 0 && c.x + c.w >= W && c.y + c.h >= H)) return "";
+  const key = [c.x, c.y, c.w, c.h].map((v) => Math.round(v)).join(",");
+  if (!clips.has(key)) clips.set(key, `c${clips.size}`);
+  return ` clip-path="url(#${clips.get(key)})"`;
+};
+
+/** A captured screen: its boxes, then icons and text. */
+function scene(s) {
+  let out = `<rect width="${W}" height="${H}" fill="${s.background}"/>`;
+  for (const b of s.boxes) {
+    const shape = `x="${n(b.x)}" y="${n(b.y)}" width="${n(b.w)}" height="${n(b.h)}"${b.radius ? ` rx="${n(Math.min(b.radius, b.w / 2, b.h / 2))}"` : ""}`;
+    const paint = b.stroke
+      ? `fill="none" stroke="${b.stroke}" stroke-width="${b.strokeWidth}" transform="translate(${b.strokeWidth / 2} ${b.strokeWidth / 2})"`
+      : `fill="${b.fill}"`;
+    const inset = b.stroke ? shape.replace(/width="([\d.]+)" height="([\d.]+)"/, (_, w, h) => `width="${n(w - b.strokeWidth)}" height="${n(h - b.strokeWidth)}"`) : shape;
+    out += `<rect ${inset} ${paint}${b.opacity < 1 ? ` opacity="${n(b.opacity)}"` : ""}${clipAttr(b.clip)}/>`;
+  }
+  for (const i of s.icons) {
+    // The page's own SVG, placed where it was, its currentColor the element's color.
+    const svg = i.svg.replace(/^<svg\b([^>]*)>/, (_, attrs) => {
+      const kept = attrs.replace(/\s(width|height|class|style|x|y|aria-hidden)="[^"]*"/g, "");
+      return `<svg${kept} x="${n(i.x)}" y="${n(i.y)}" width="${n(i.w)}" height="${n(i.h)}" color="${i.color}"${i.opacity < 1 ? ` opacity="${n(i.opacity)}"` : ""}>`;
+    });
+    const cx = n(i.x + i.w / 2);
+    const cy = n(i.y + i.h / 2);
+    const turned = (i.turns ?? []).reduceRight(
+      (inner, m) => `<g transform="translate(${cx} ${cy}) ${m.replace(/,/g, "")} translate(${-cx} ${-cy})">${inner}</g>`,
+      svg,
+    );
+    const clip = clipAttr(i.clip);
+    out += clip ? `<g${clip}>${turned}</g>` : turned;
+  }
+  for (const t of s.texts) {
+    const attrs = [
+      `x="${n(t.x)}"`,
+      `y="${n(t.y + t.h / 2)}"`,
+      `class="${familyClass(t.family)}"`,
+      `font-size="${t.size}"`,
+      t.weight !== "400" && `font-weight="${t.weight}"`,
+      t.style === "italic" && `font-style="italic"`,
+      t.spacing && `letter-spacing="${t.spacing}"`,
+      `fill="${t.color}"`,
+      t.text.length > 3 && `textLength="${n(t.w)}"`,
+    ].filter(Boolean);
+    out += `<text ${attrs.join(" ")}${clipAttr(t.clip)}>${esc(t.text)}</text>`;
+  }
+  return out;
+}
+
+const one = scene(demo.s1);
+const two = scene(demo.s2);
+
+// The session in the terminal area of scene two, on the grid the app laid it out on.
+const area = demo.s2.terminal;
+const cw = area.w / session.cols;
+const lh = area.h / session.rows;
+const term = draw(session, { cw, lh, start: CONNECT, total });
+
+// The pointer: from below right of the host to it, a click, then gone with scene one.
+const { target } = demo;
+const tx = target.x + Math.min(40, target.w / 2);
+const ty = target.y + target.h / 2;
+const fx = tx + 260;
+const fy = ty + 170;
+const pointer = `<g class="ptr"><path d="M0 0v17l4.2-4.1 3 6.9 3.1-1.3-3-6.8H13z" fill="#ffffff" stroke="#0a1113" stroke-width="1.2" stroke-linejoin="round"/></g>`;
+const ripple = `<circle class="rip" cx="${n(tx)}" cy="${n(ty)}" r="14" fill="none" stroke="${THEME.ansi[2]}" stroke-width="2"/>`;
+
+const font = (family, file, weight, style = "normal") =>
+  `@font-face{font-family:"${family}";src:url(data:font/woff2;base64,${readFileSync(join(fonts, file)).toString("base64")}) format("woff2");font-weight:${weight};font-style:${style}}`;
+const t = () => `${total.toFixed(2)}s`;
+const css = [
+  font("Atkinson Hyperlegible Next", "AtkinsonHyperlegibleNext-Variable.woff2", "200 800"),
+  font("Atkinson Hyperlegible Mono", "AtkinsonHyperlegibleMono-Variable.woff2", "200 800"),
+  font("Martian Mono", "MartianMono-Variable.woff2", "100 800"),
+  [...families].map(([f, c]) => `.${c}{font-family:${f}}`).join(""),
+  `text{dominant-baseline:central;white-space:pre}`,
+  `.term text{font-family:${area.family}}`,
+  `.s1{animation:s1 ${t()} steps(1,end) infinite}@keyframes s1{0%{opacity:1}${pct(CONNECT)}{opacity:0}}`,
+  `.s2{animation:s2 ${t()} steps(1,end) infinite}@keyframes s2{0%{opacity:0}${pct(CONNECT)}{opacity:1}}`,
+  `.ptr{animation:ptr ${t()} infinite}@keyframes ptr{0%{transform:translate(${n(fx)}px,${n(fy)}px);opacity:1}` +
+    `${pct(MOVE_FROM)}{transform:translate(${n(fx)}px,${n(fy)}px);animation-timing-function:ease-in-out}` +
+    `${pct(MOVE_TO)}{transform:translate(${n(tx)}px,${n(ty)}px)}${pct(CONNECT + 0.4)}{transform:translate(${n(tx)}px,${n(ty)}px);opacity:1}` +
+    `${pct(CONNECT + 0.7)}{transform:translate(${n(tx)}px,${n(ty)}px);opacity:0}100%{transform:translate(${n(tx)}px,${n(ty)}px);opacity:0}}`,
+  `.rip{transform-box:fill-box;transform-origin:center;animation:rip ${t()} infinite}@keyframes rip{0%{opacity:0;transform:scale(.3)}` +
+    `${pct(CLICK)}{opacity:0;transform:scale(.3)}${pct(CLICK + 0.05)}{opacity:.9;transform:scale(.4)}${pct(CLICK + 0.5)}{opacity:0;transform:scale(1.4)}100%{opacity:0}}`,
+  term.css,
+].join("");
+
+const defs = [...clips]
+  .map(([key, id]) => {
+    const [x, y, w, h] = key.split(",");
+    return `<clipPath id="${id}"><rect x="${x}" y="${y}" width="${w}" height="${h}"/></clipPath>`;
+  })
+  .join("");
+
+const svg = `<svg xmlns="http://www.w3.org/2000/svg" width="${W}" height="${H}" viewBox="0 0 ${W} ${H}" role="img" aria-label="MorphGate: the Hosts page, then a click on ${esc(session.title)} opens its session">
+<title>MorphGate: connecting to ${esc(session.title)}</title>
+<!-- Drawn by tools/readme-demo from the MorphGate AppImage. Fonts: Atkinson Hyperlegible Next and Mono (Braille Institute of America), Martian Mono (The Martian Mono Project Authors), under the SIL Open Font License 1.1. -->
+<style>${css}</style>
+<defs>${defs}<clipPath id="window"><rect width="${W}" height="${H}" rx="10"/></clipPath><clipPath id="screen"><rect width="${n(area.w)}" height="${n(area.h)}"/></clipPath></defs>
+<g clip-path="url(#window)">
+<g class="s2">${two}<g class="term" transform="translate(${n(area.x)} ${n(area.y)})" clip-path="url(#screen)" font-size="${area.size}" fill="${THEME.foreground}">${term.svg}</g></g>
+<g class="s1">${one}${ripple}</g>
+${pointer}
+</g>
+<rect x="0.5" y="0.5" width="${W - 1}" height="${H - 1}" rx="10" fill="none" stroke="#24343a"/>
+</svg>
+`;
+writeFileSync(output, svg);
+console.log(`${output}: ${W}×${H}, ${session.frames.length} frames, ${total.toFixed(1)} s, ${(svg.length / 1024).toFixed(0)} KiB`);
diff --git a/tools/readme-demo/package-lock.json b/tools/readme-demo/package-lock.json
new file mode 100644
index 0000000..7dabe1d
--- /dev/null
+++ b/tools/readme-demo/package-lock.json
@@ -0,0 +1,23 @@
+{
+  "name": "morphgate-readme-demo",
+  "lockfileVersion": 3,
+  "requires": true,
+  "packages": {
+    "": {
+      "name": "morphgate-readme-demo",
+      "license": "MPL-2.0",
+      "dependencies": {
+        "@xterm/headless": "6.0.0"
+      }
+    },
+    "node_modules/@xterm/headless": {
+      "version": "6.0.0",
+      "resolved": "https://registry.npmjs.org/@xterm/headless/-/headless-6.0.0.tgz",
+      "integrity": "sha512-5Yj1QINYCyzrZtf8OFIHi47iQtI+0qYFPHmouEfG8dHNxbZ9Tb9YGSuLcsEwj9Z+OL75GJqPyJbyoFer80a2Hw==",
+      "license": "MIT",
+      "workspaces": [
+        "addons/*"
+      ]
+    }
+  }
+}
diff --git a/tools/readme-demo/package.json b/tools/readme-demo/package.json
new file mode 100644
index 0000000..9a5ed2e
--- /dev/null
+++ b/tools/readme-demo/package.json
@@ -0,0 +1,10 @@
+{
+  "name": "morphgate-readme-demo",
+  "private": true,
+  "description": "Draws the README's demo: MorphGate's Hosts page and a recorded session, as an animated SVG",
+  "type": "module",
+  "license": "MPL-2.0",
+  "dependencies": {
+    "@xterm/headless": "6.0.0"
+  }
+}
diff --git a/tools/readme-demo/snapshot.js b/tools/readme-demo/snapshot.js
new file mode 100644
index 0000000..5984842
--- /dev/null
+++ b/tools/readme-demo/snapshot.js
@@ -0,0 +1,164 @@
+// Runs in the app's page (demo.mjs passes it over WebDriver): what the window shows, as shapes to
+// draw: boxes (backgrounds, borders, inset underlines), text where the layout put it, and the
+// page's own SVG icons. `mask` swaps text (the test machine's user and address for demo ones).
+// The terminal's text isn't taken: the recording replays there (its geometry is returned).
+// eslint-disable-next-line no-unused-vars
+function snapshot(mask) {
+  const boxes = [];
+  const texts = [];
+  const icons = [];
+  let terminal = null;
+  const view = { x: 0, y: 0, w: innerWidth, h: innerHeight };
+  const clear = (c) => !c || c === "transparent" || /rgba\([^)]*,\s*0\)$/.test(c);
+  const swap = (t) => mask.reduce((s, [from, to]) => s.split(from).join(to), t);
+  const meet = (a, b) => {
+    const x = Math.max(a.x, b.x);
+    const y = Math.max(a.y, b.y);
+    return { x, y, w: Math.max(0, Math.min(a.x + a.w, b.x + b.w) - x), h: Math.max(0, Math.min(a.y + a.h, b.y + b.h) - y) };
+  };
+  const rectOf = (r) => ({ x: r.left, y: r.top, w: r.width, h: r.height });
+  const font = (cs) => ({
+    family: cs.fontFamily,
+    size: parseFloat(cs.fontSize),
+    weight: cs.fontWeight,
+    style: cs.fontStyle,
+    spacing: cs.letterSpacing === "normal" ? 0 : parseFloat(cs.letterSpacing),
+    color: cs.color,
+    opacity: 1,
+  });
+  const cased = (t, cs) => (cs.textTransform === "uppercase" ? t.toUpperCase() : cs.textTransform === "lowercase" ? t.toLowerCase() : t);
+
+  /** A line of text at `r`, clipped to `clip`; cut with an ellipsis where the element does.
+   * `color` overrides the element's (a placeholder's). */
+  function text(str, r, cs, clip, ellipsis, color) {
+    if (!str.trim() || r.width === 0) return;
+    let t = cased(swap(str), cs);
+    let w = r.width;
+    const right = clip.x + clip.w;
+    if (ellipsis && r.right > right + 1) {
+      const per = r.width / t.length;
+      const fit = Math.max(0, Math.floor((right - r.left) / per) - 1);
+      t = `${t.slice(0, fit).trimEnd()}…`;
+      w = per * t.length;
+    }
+    const f = font(cs);
+    texts.push({ text: t, x: r.left, y: r.top, w, h: r.height, clip, ...f, color: color ?? f.color });
+  }
+
+  /** The page's SVG with each shape's computed paint written on it (the app styles its marks by
+   * class), `currentColor` resolved. */
+  function paint(svg) {
+    const copy = svg.cloneNode(true);
+    const from = [svg, ...svg.querySelectorAll("*")];
+    const to = [copy, ...copy.querySelectorAll("*")];
+    from.forEach((el, i) => {
+      const cs = getComputedStyle(el);
+      for (const p of ["fill", "stroke", "stroke-width", "stroke-linecap", "stroke-linejoin", "fill-opacity", "stroke-opacity"]) {
+        const v = cs.getPropertyValue(p);
+        if (v) to[i].setAttribute(p, v);
+      }
+      to[i].removeAttribute("class");
+      to[i].removeAttribute("style");
+    });
+    return copy.outerHTML;
+  }
+
+  function walk(el, clip, opacity) {
+    const cs = getComputedStyle(el);
+    if (cs.display === "none" || cs.visibility === "hidden") return;
+    const op = opacity * parseFloat(cs.opacity);
+    if (op === 0) return;
+    const r = el.getBoundingClientRect();
+    const box = rectOf(r);
+    const inner = /(hidden|auto|scroll|clip)/.test(`${cs.overflowX} ${cs.overflowY}`) ? meet(clip, box) : clip;
+
+    if (el.classList?.contains("xterm-screen")) {
+      const rows = el.querySelector(".xterm-rows");
+      const rcs = getComputedStyle(rows ?? el);
+      terminal = { ...box, family: rcs.fontFamily, size: parseFloat(rcs.fontSize) };
+      return;
+    }
+    if (el instanceof SVGSVGElement) {
+      // Turned by CSS (a chevron pointing down), on it or the span around it: about its middle.
+      const turns = [el, el.parentElement].map((e) => getComputedStyle(e).transform).filter((t) => t && t !== "none");
+      if (box.w && box.h) icons.push({ svg: paint(el), ...box, color: cs.color, clip, opacity: op, turns });
+      return;
+    }
+    if (box.w > 0 && box.h > 0) {
+      const radius = parseFloat(cs.borderTopLeftRadius) || 0;
+      if (!clear(cs.backgroundColor)) boxes.push({ ...box, fill: cs.backgroundColor, radius, clip, opacity: op });
+      const sides = ["Top", "Right", "Bottom", "Left"].map((s) => ({
+        s,
+        w: cs[`border${s}Style`] === "none" ? 0 : parseFloat(cs[`border${s}Width`]),
+        c: cs[`border${s}Color`],
+      }));
+      const all = sides.every((x) => x.w === sides[0].w && x.c === sides[0].c);
+      if (all && sides[0].w > 0 && !clear(sides[0].c)) {
+        boxes.push({ ...box, stroke: sides[0].c, strokeWidth: sides[0].w, radius, clip, opacity: op });
+      } else {
+        for (const { s, w, c } of sides) {
+          if (!w || clear(c)) continue;
+          const at = { Top: [0, 0, box.w, w], Bottom: [0, box.h - w, box.w, w], Left: [0, 0, w, box.h], Right: [box.w - w, 0, w, box.h] }[s];
+          boxes.push({ x: box.x + at[0], y: box.y + at[1], w: at[2], h: at[3], fill: c, radius: 0, clip, opacity: op });
+        }
+      }
+      // An inset shadow without blur: a bar along one side (the active tab's underline).
+      for (const m of cs.boxShadow.matchAll(/(rgba?\([^)]*\))\s+(-?[\d.]+)px\s+(-?[\d.]+)px\s+0px(?:\s+0px)?\s+inset/g)) {
+        const [, c, dx, dy] = m;
+        const x = +dx;
+        const y = +dy;
+        if (y < 0) boxes.push({ x: box.x, y: box.y + box.h + y, w: box.w, h: -y, fill: c, radius: 0, clip, opacity: op });
+        if (y > 0) boxes.push({ x: box.x, y: box.y, w: box.w, h: y, fill: c, radius: 0, clip, opacity: op });
+        if (x > 0) boxes.push({ x: box.x, y: box.y, w: x, h: box.h, fill: c, radius: 0, clip, opacity: op });
+        if (x < 0) boxes.push({ x: box.x + box.w + x, y: box.y, w: -x, h: box.h, fill: c, radius: 0, clip, opacity: op });
+      }
+    }
+    // A field's value, or its placeholder.
+    if (el instanceof HTMLInputElement && el.type !== "checkbox" && el.type !== "radio") {
+      const value = el.value || el.placeholder;
+      if (value) {
+        const pad = parseFloat(cs.paddingLeft) + parseFloat(cs.borderLeftWidth);
+        const color = el.value ? cs.color : getComputedStyle(el, "::placeholder").color || cs.color;
+        // Its width as the page's font has it.
+        const ctx = (snapshot.canvas ??= document.createElement("canvas")).getContext("2d");
+        ctx.font = `${cs.fontStyle} ${cs.fontWeight} ${cs.fontSize} ${cs.fontFamily}`;
+        const width = ctx.measureText(value).width;
+        text(value, { left: box.x + pad, top: box.y, width, height: box.h, right: box.x + pad + width }, cs, meet(inner, box), false, color);
+      }
+      return;
+    }
+    const ellipsis = cs.textOverflow === "ellipsis";
+    for (const n of el.childNodes) {
+      if (n.nodeType === Node.TEXT_NODE) {
+        if (!n.textContent.trim()) continue;
+        const range = document.createRange();
+        range.selectNodeContents(n);
+        const lines = [...range.getClientRects()];
+        if (lines.length <= 1) {
+          if (lines[0]) text(n.textContent.replace(/\s+/g, " ").trim(), lines[0], cs, inner, ellipsis);
+          continue;
+        }
+        // Wrapped: a word at a time, gathered into its lines.
+        const words = [...n.textContent.matchAll(/\S+/g)].map((w) => {
+          range.setStart(n, w.index);
+          range.setEnd(n, w.index + w[0].length);
+          return { t: w[0], r: range.getBoundingClientRect() };
+        });
+        const rows = [];
+        for (const w of words) {
+          const row = rows.find((x) => Math.abs(x.top - w.r.top) < 2);
+          if (row) {
+            row.t += ` ${w.t}`;
+            row.right = w.r.right;
+          } else rows.push({ t: w.t, top: w.r.top, left: w.r.left, right: w.r.right, height: w.r.height });
+        }
+        for (const row of rows) text(row.t, { left: row.left, top: row.top, width: row.right - row.left, height: row.height, right: row.right }, cs, inner, ellipsis);
+      } else if (n.nodeType === Node.ELEMENT_NODE) {
+        walk(n, inner, op);
+      }
+    }
+  }
+  walk(document.body, view, 1);
+  const bg = getComputedStyle(document.body).backgroundColor;
+  return { width: innerWidth, height: innerHeight, background: bg, boxes, texts, icons, terminal };
+}
diff --git a/tools/readme-demo/terminal.mjs b/tools/readme-demo/terminal.mjs
new file mode 100644
index 0000000..d215fe3
--- /dev/null
+++ b/tools/readme-demo/terminal.mjs
@@ -0,0 +1,164 @@
+// A session MorphGate recorded (asciicast v2), replayed by xterm.js (headless) and drawn as SVG:
+// each terminal row is a strip of the states it went through, and a CSS animation steps through
+// them, so the file stays small and plays wherever SVG does (GitHub's README too).
+
+import headless from "@xterm/headless";
+
+const { Terminal } = headless;
+
+// The Console theme (apps/desktop/src/themes.ts).
+export const THEME = {
+  background: "#0a1113",
+  foreground: "#dce6e3",
+  cursor: "#ffb547",
+  ansi: ["#0a1113", "#ff6b6b", "#3ddbb6", "#ffb547", "#6cb6ff", "#d59cff", "#4fd1e8", "#dce6e3", "#5e7072", "#ff9494", "#7bebd0", "#ffcc80", "#9dcfff", "#e6c2ff", "#8ae4f2", "#ffffff"],
+};
+
+// Pauses longer than this are cut short.
+const MAX_IDLE = 1.4;
+
+const rgb = (n) => `#${n.toString(16).padStart(6, "0")}`;
+
+/** xterm's 256 colors: the theme's 16, the 6×6×6 cube, 24 grays. */
+function color256(n) {
+  if (n < 16) return THEME.ansi[n];
+  if (n < 232) {
+    const c = n - 16;
+    const v = (x) => (x === 0 ? 0 : 55 + x * 40);
+    return rgb((v(Math.floor(c / 36)) << 16) | (v(Math.floor(c / 6) % 6) << 8) | v(c % 6));
+  }
+  const g = 8 + (n - 232) * 10;
+  return rgb((g << 16) | (g << 8) | g);
+}
+
+/** A cell's look, as a key: foreground, background, bold, italic, underline. */
+function styleOf(cell) {
+  let fg = null;
+  let bg = null;
+  if (cell.isFgPalette()) {
+    let n = cell.getFgColor();
+    // Bold in bright colors, as xterm.js does by default.
+    if (cell.isBold() && n < 8) n += 8;
+    fg = color256(n);
+  } else if (cell.isFgRGB()) fg = rgb(cell.getFgColor());
+  if (cell.isBgPalette()) bg = color256(cell.getBgColor());
+  else if (cell.isBgRGB()) bg = rgb(cell.getBgColor());
+  if (cell.isInverse()) [fg, bg] = [bg ?? THEME.background, fg ?? THEME.foreground];
+  if (cell.isDim() && fg) fg = `${fg}aa`;
+  return [fg ?? "", bg ?? "", cell.isBold() ? 1 : 0, cell.isItalic() ? 1 : 0, cell.isUnderline() ? 1 : 0].join("|");
+}
+
+/** Replays `castText`: the screens it went through (a frame wherever the output pauses), with
+ * long pauses cut short. `duration` is the last frame's time. */
+export async function replay(castText) {
+  const lines = castText.split("\n").filter((l) => l.trim());
+  const header = JSON.parse(lines[0]);
+  const events = lines.slice(1).map((l) => JSON.parse(l));
+  const term = new Terminal({ cols: header.width, rows: header.height, allowProposedApi: true, scrollback: 0 });
+  const write = (data) => new Promise((resolve) => term.write(data, resolve));
+  const snapshot = () => {
+    const b = term.buffer.active;
+    const rows = [];
+    for (let y = 0; y < term.rows; y++) {
+      const line = b.getLine(b.viewportY + y);
+      const runs = [];
+      let run = null;
+      for (let x = 0; line && x < term.cols; x++) {
+        const cell = line.getCell(x);
+        if (!cell || cell.getWidth() === 0) continue;
+        const style = styleOf(cell);
+        const ch = cell.getChars() || " ";
+        if (run && run.style === style) run.text += ch;
+        else runs.push((run = { x, style, text: ch }));
+      }
+      // Trailing blanks in the default look draw nothing.
+      while (runs.length) {
+        const last = runs[runs.length - 1];
+        if (last.style.split("|")[1] !== "") break;
+        last.text = last.text.replace(/ +$/, "");
+        if (last.text) break;
+        runs.pop();
+      }
+      rows.push(runs);
+    }
+    return { rows, cursor: [b.cursorX, b.cursorY] };
+  };
+  const frames = [];
+  let clock = 0;
+  let last = 0;
+  for (let i = 0; i < events.length; i++) {
+    const [t, kind, data] = events[i];
+    if (kind === "o") await write(data);
+    else if (kind === "r") term.resize(...data.split("x").map(Number));
+    const next = events[i + 1]?.[0];
+    if (next !== undefined && next - t < 0.02) continue;
+    clock += Math.min(t - last, MAX_IDLE);
+    last = t;
+    frames.push({ at: clock, ...snapshot() });
+  }
+  return { title: header.title || "session", cols: header.width, rows: header.height, frames, duration: clock };
+}
+
+const esc = (s) => s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
+
+/** A row's runs: backgrounds, then a word at a time on its cells (renderers collapse runs of
+ * spaces; `textLength` keeps any monospace font on the grid). */
+function drawRow(runs, cw, lh) {
+  let out = "";
+  for (const r of runs) {
+    const [fg, bg, bold, italic, underline] = r.style.split("|");
+    if (bg) out += `<rect x="${(r.x * cw).toFixed(1)}" y="0" width="${(r.text.length * cw).toFixed(1)}" height="${lh}" fill="${bg}"/>`;
+    for (const word of r.text.matchAll(/\S+/g)) {
+      const attrs = [
+        `x="${((r.x + word.index) * cw).toFixed(1)}"`,
+        `y="${(lh / 2).toFixed(1)}"`,
+        fg && `fill="${fg}"`,
+        word[0].length > 1 && `textLength="${(word[0].length * cw).toFixed(1)}"`,
+        +bold && `font-weight="700"`,
+        +italic && `font-style="italic"`,
+        +underline && `text-decoration="underline"`,
+      ].filter(Boolean);
+      out += `<text ${attrs.join(" ")}>${esc(word[0])}</text>`;
+    }
+  }
+  return out;
+}
+
+/** The replay drawn on a grid of `cw` × `lh` cells: its SVG (rows from the top left, text
+ * vertically centered in its row) and the CSS that animates it. The session starts `start`
+ * seconds into an animation of `total` seconds; `id` keeps its class names apart. */
+export function draw(r, { cw, lh, start, total, id = "t" }) {
+  const pct = (t) => `${(((start + t) / total) * 100).toFixed(3)}%`;
+  const strip = r.cols * cw;
+  let css = "";
+  let svg = "";
+  for (let y = 0; y < r.rows; y++) {
+    const states = [];
+    const changes = [];
+    for (const f of r.frames) {
+      const key = JSON.stringify(f.rows[y]);
+      let i = states.findIndex((s) => s.key === key);
+      if (i < 0) i = states.push({ key, runs: f.rows[y] }) - 1;
+      if (changes.length === 0 || changes[changes.length - 1].i !== i) changes.push({ at: f.at, i });
+    }
+    if (states.every((s) => s.runs.length === 0)) continue;
+    const cells = states.map((s, i) => `<g transform="translate(${(i * strip).toFixed(1)} 0)">${drawRow(s.runs, cw, lh)}</g>`).join("");
+    // Until the session starts (and once it's over) the row shows its first state.
+    css += `.${id}${y}{animation:${id}${y} ${total.toFixed(2)}s steps(1,end) infinite}@keyframes ${id}${y}{0%{transform:translateX(0)}`;
+    for (const c of changes) css += `${pct(c.at)}{transform:translateX(${(-c.i * strip).toFixed(1)}px)}`;
+    css += "}";
+    svg += `<g transform="translate(0 ${(y * lh).toFixed(1)})"><g class="${id}${y}">${cells}</g></g>`;
+  }
+  // The cursor: the theme's amber block, blinking, where each frame left it; hidden until the
+  // session starts.
+  css += `.${id}c{animation:${id}c ${total.toFixed(2)}s steps(1,end) infinite}@keyframes ${id}c{0%{opacity:0}`;
+  let before = "";
+  for (const f of r.frames) {
+    const at = `translate(${(f.cursor[0] * cw).toFixed(1)}px,${(f.cursor[1] * lh).toFixed(1)}px)`;
+    if (at !== before) css += `${pct(f.at)}{opacity:1;transform:${at}}`;
+    before = at;
+  }
+  css += `}.${id}b{animation:${id}b 1.1s steps(1,end) infinite}@keyframes ${id}b{50%{opacity:0}}`;
+  svg += `<g class="${id}c"><rect class="${id}b" x="0" y="${(lh * 0.1).toFixed(1)}" width="${cw.toFixed(1)}" height="${(lh * 0.8).toFixed(1)}" fill="${THEME.cursor}"/></g>`;
+  return { css, svg };
+}