From deb8a423f4d902963cd6ea9d894cee2adf8e7854 Mon Sep 17 00:00:00 2001
From: Danny Kopping <danny@coder.com>
Date: Mon, 12 May 2025 16:19:03 +0200
Subject: [PATCH 1/7] feat: add `is_prebuild_claim` to distinguish post-claim
 provisioning (#17757)

Used in combination with
https://github.com/coder/terraform-provider-coder/pull/396

This is required by both https://github.com/coder/coder/pull/17475 and
https://github.com/coder/coder/pull/17571

Operators may need to conditionalize their templates to perform certain
operations once a prebuilt workspace has been claimed. This value will
**only** be set once a claim takes place and a subsequent `terraform
apply` occurs. Any `terraform apply` runs thereafter will be
indistinguishable from a normal run on a workspace.

---------

Signed-off-by: Danny Kopping <dannykopping@gmail.com>
---
 ...oder_provisioner_list_--output_json.golden |   2 +-
 .../provisionerdserver/provisionerdserver.go  |  11 +-
 .../provisionerdserver_test.go                |  13 +-
 coderd/workspaces.go                          |   2 +-
 coderd/wsbuilder/wsbuilder.go                 |  19 +-
 go.mod                                        |   2 +-
 go.sum                                        |   4 +-
 provisioner/terraform/provision.go            |   5 +-
 provisioner/terraform/provision_test.go       |  43 +-
 provisionerd/proto/version.go                 |   7 +-
 provisionerd/provisionerd.go                  |   4 +-
 provisionersdk/proto/prebuilt_workspace.go    |   9 +
 provisionersdk/proto/provisioner.pb.go        | 668 ++++++++++--------
 provisionersdk/proto/provisioner.proto        |  10 +-
 site/e2e/provisionerGenerated.ts              |  18 +-
 15 files changed, 478 insertions(+), 339 deletions(-)
 create mode 100644 provisionersdk/proto/prebuilt_workspace.go

diff --git a/cli/testdata/coder_provisioner_list_--output_json.golden b/cli/testdata/coder_provisioner_list_--output_json.golden
index f619dce028cde..3daeb89febcb4 100644
--- a/cli/testdata/coder_provisioner_list_--output_json.golden
+++ b/cli/testdata/coder_provisioner_list_--output_json.golden
@@ -7,7 +7,7 @@
     "last_seen_at": "====[timestamp]=====",
     "name": "test",
     "version": "v0.0.0-devel",
-    "api_version": "1.4",
+    "api_version": "1.5",
     "provisioners": [
       "echo"
     ],
diff --git a/coderd/provisionerdserver/provisionerdserver.go b/coderd/provisionerdserver/provisionerdserver.go
index 9362d2f3e5a85..68aece517bb2f 100644
--- a/coderd/provisionerdserver/provisionerdserver.go
+++ b/coderd/provisionerdserver/provisionerdserver.go
@@ -645,7 +645,7 @@ func (s *server) acquireProtoJob(ctx context.Context, job database.ProvisionerJo
 					WorkspaceBuildId:              workspaceBuild.ID.String(),
 					WorkspaceOwnerLoginType:       string(owner.LoginType),
 					WorkspaceOwnerRbacRoles:       ownerRbacRoles,
-					IsPrebuild:                    input.IsPrebuild,
+					PrebuiltWorkspaceBuildStage:   input.PrebuiltWorkspaceBuildStage,
 				},
 				LogLevel: input.LogLevel,
 			},
@@ -2471,11 +2471,10 @@ type TemplateVersionImportJob struct {
 
 // WorkspaceProvisionJob is the payload for the "workspace_provision" job type.
 type WorkspaceProvisionJob struct {
-	WorkspaceBuildID      uuid.UUID `json:"workspace_build_id"`
-	DryRun                bool      `json:"dry_run"`
-	IsPrebuild            bool      `json:"is_prebuild,omitempty"`
-	PrebuildClaimedByUser uuid.UUID `json:"prebuild_claimed_by,omitempty"`
-	LogLevel              string    `json:"log_level,omitempty"`
+	WorkspaceBuildID            uuid.UUID                            `json:"workspace_build_id"`
+	DryRun                      bool                                 `json:"dry_run"`
+	LogLevel                    string                               `json:"log_level,omitempty"`
+	PrebuiltWorkspaceBuildStage sdkproto.PrebuiltWorkspaceBuildStage `json:"prebuilt_workspace_stage,omitempty"`
 }
 
 // TemplateVersionDryRunJob is the payload for the "template_version_dry_run" job type.
diff --git a/coderd/provisionerdserver/provisionerdserver_test.go b/coderd/provisionerdserver/provisionerdserver_test.go
index caeef8a9793b7..488ef4bbdfd97 100644
--- a/coderd/provisionerdserver/provisionerdserver_test.go
+++ b/coderd/provisionerdserver/provisionerdserver_test.go
@@ -23,10 +23,11 @@ import (
 	"storj.io/drpc"
 
 	"cdr.dev/slog/sloggers/slogtest"
-	"github.com/coder/coder/v2/coderd/rbac"
 	"github.com/coder/quartz"
 	"github.com/coder/serpent"
 
+	"github.com/coder/coder/v2/coderd/rbac"
+
 	"github.com/coder/coder/v2/buildinfo"
 	"github.com/coder/coder/v2/coderd/audit"
 	"github.com/coder/coder/v2/coderd/database"
@@ -299,6 +300,10 @@ func TestAcquireJob(t *testing.T) {
 					Transition:        database.WorkspaceTransitionStart,
 					Reason:            database.BuildReasonInitiator,
 				})
+				var buildState sdkproto.PrebuiltWorkspaceBuildStage
+				if prebuiltWorkspace {
+					buildState = sdkproto.PrebuiltWorkspaceBuildStage_CREATE
+				}
 				_ = dbgen.ProvisionerJob(t, db, ps, database.ProvisionerJob{
 					ID:             build.ID,
 					OrganizationID: pd.OrganizationID,
@@ -308,8 +313,8 @@ func TestAcquireJob(t *testing.T) {
 					FileID:         file.ID,
 					Type:           database.ProvisionerJobTypeWorkspaceBuild,
 					Input: must(json.Marshal(provisionerdserver.WorkspaceProvisionJob{
-						WorkspaceBuildID: build.ID,
-						IsPrebuild:       prebuiltWorkspace,
+						WorkspaceBuildID:            build.ID,
+						PrebuiltWorkspaceBuildStage: buildState,
 					})),
 				})
 
@@ -380,7 +385,7 @@ func TestAcquireJob(t *testing.T) {
 					WorkspaceOwnerRbacRoles:       []*sdkproto.Role{{Name: rbac.RoleOrgMember(), OrgId: pd.OrganizationID.String()}, {Name: "member", OrgId: ""}, {Name: rbac.RoleOrgAuditor(), OrgId: pd.OrganizationID.String()}},
 				}
 				if prebuiltWorkspace {
-					wantedMetadata.IsPrebuild = true
+					wantedMetadata.PrebuiltWorkspaceBuildStage = sdkproto.PrebuiltWorkspaceBuildStage_CREATE
 				}
 
 				slices.SortFunc(wantedMetadata.WorkspaceOwnerRbacRoles, func(a, b *sdkproto.Role) int {
diff --git a/coderd/workspaces.go b/coderd/workspaces.go
index 2ac432d905ae6..459aded1f7037 100644
--- a/coderd/workspaces.go
+++ b/coderd/workspaces.go
@@ -726,7 +726,7 @@ func createWorkspace(
 			builder = builder.TemplateVersionPresetID(req.TemplateVersionPresetID)
 		}
 		if claimedWorkspace != nil {
-			builder = builder.MarkPrebuildClaimedBy(owner.ID)
+			builder = builder.MarkPrebuiltWorkspaceClaim()
 		}
 
 		if req.EnableDynamicParameters && api.Experiments.Enabled(codersdk.ExperimentDynamicParameters) {
diff --git a/coderd/wsbuilder/wsbuilder.go b/coderd/wsbuilder/wsbuilder.go
index 942829004309c..b6eb621c55620 100644
--- a/coderd/wsbuilder/wsbuilder.go
+++ b/coderd/wsbuilder/wsbuilder.go
@@ -16,6 +16,7 @@ import (
 	"github.com/coder/coder/v2/coderd/rbac/policy"
 	"github.com/coder/coder/v2/provisioner/terraform/tfparse"
 	"github.com/coder/coder/v2/provisionersdk"
+	sdkproto "github.com/coder/coder/v2/provisionersdk/proto"
 
 	"github.com/google/uuid"
 	"github.com/sqlc-dev/pqtype"
@@ -76,8 +77,7 @@ type Builder struct {
 	parameterValues                      *[]string
 	templateVersionPresetParameterValues []database.TemplateVersionPresetParameter
 
-	prebuild          bool
-	prebuildClaimedBy uuid.UUID
+	prebuiltWorkspaceBuildStage sdkproto.PrebuiltWorkspaceBuildStage
 
 	verifyNoLegacyParametersOnce bool
 }
@@ -174,15 +174,17 @@ func (b Builder) RichParameterValues(p []codersdk.WorkspaceBuildParameter) Build
 	return b
 }
 
+// MarkPrebuild indicates that a prebuilt workspace is being built.
 func (b Builder) MarkPrebuild() Builder {
 	// nolint: revive
-	b.prebuild = true
+	b.prebuiltWorkspaceBuildStage = sdkproto.PrebuiltWorkspaceBuildStage_CREATE
 	return b
 }
 
-func (b Builder) MarkPrebuildClaimedBy(userID uuid.UUID) Builder {
+// MarkPrebuiltWorkspaceClaim indicates that a prebuilt workspace is being claimed.
+func (b Builder) MarkPrebuiltWorkspaceClaim() Builder {
 	// nolint: revive
-	b.prebuildClaimedBy = userID
+	b.prebuiltWorkspaceBuildStage = sdkproto.PrebuiltWorkspaceBuildStage_CLAIM
 	return b
 }
 
@@ -322,10 +324,9 @@ func (b *Builder) buildTx(authFunc func(action policy.Action, object rbac.Object
 
 	workspaceBuildID := uuid.New()
 	input, err := json.Marshal(provisionerdserver.WorkspaceProvisionJob{
-		WorkspaceBuildID:      workspaceBuildID,
-		LogLevel:              b.logLevel,
-		IsPrebuild:            b.prebuild,
-		PrebuildClaimedByUser: b.prebuildClaimedBy,
+		WorkspaceBuildID:            workspaceBuildID,
+		LogLevel:                    b.logLevel,
+		PrebuiltWorkspaceBuildStage: b.prebuiltWorkspaceBuildStage,
 	})
 	if err != nil {
 		return nil, nil, nil, BuildError{
diff --git a/go.mod b/go.mod
index a2f8bda5c97bb..d35266e6a75a7 100644
--- a/go.mod
+++ b/go.mod
@@ -101,7 +101,7 @@ require (
 	github.com/coder/quartz v0.1.2
 	github.com/coder/retry v1.5.1
 	github.com/coder/serpent v0.10.0
-	github.com/coder/terraform-provider-coder/v2 v2.4.0
+	github.com/coder/terraform-provider-coder/v2 v2.4.1
 	github.com/coder/websocket v1.8.13
 	github.com/coder/wgtunnel v0.1.13-0.20240522110300-ade90dfb2da0
 	github.com/coreos/go-oidc/v3 v3.14.1
diff --git a/go.sum b/go.sum
index 4a2c74f8dc69e..05a1d3ea0f2d7 100644
--- a/go.sum
+++ b/go.sum
@@ -921,8 +921,8 @@ github.com/coder/tailscale v1.1.1-0.20250422090654-5090e715905e h1:nope/SZfoLB9M
 github.com/coder/tailscale v1.1.1-0.20250422090654-5090e715905e/go.mod h1:1ggFFdHTRjPRu9Yc1yA7nVHBYB50w9Ce7VIXNqcW6Ko=
 github.com/coder/terraform-config-inspect v0.0.0-20250107175719-6d06d90c630e h1:JNLPDi2P73laR1oAclY6jWzAbucf70ASAvf5mh2cME0=
 github.com/coder/terraform-config-inspect v0.0.0-20250107175719-6d06d90c630e/go.mod h1:Gz/z9Hbn+4KSp8A2FBtNszfLSdT2Tn/uAKGuVqqWmDI=
-github.com/coder/terraform-provider-coder/v2 v2.4.0 h1:uuFmF03IyahAZLXEukOdmvV9hGfUMJSESD8+G5wkTcM=
-github.com/coder/terraform-provider-coder/v2 v2.4.0/go.mod h1:2kaBpn5k9ZWtgKq5k4JbkVZG9DzEqR4mJSmpdshcO+s=
+github.com/coder/terraform-provider-coder/v2 v2.4.1 h1:+HxLJVENJ+kvGhibQ0jbr8Evi6M857d9691ytxNbv90=
+github.com/coder/terraform-provider-coder/v2 v2.4.1/go.mod h1:2kaBpn5k9ZWtgKq5k4JbkVZG9DzEqR4mJSmpdshcO+s=
 github.com/coder/trivy v0.0.0-20250409153844-e6b004bc465a h1:yryP7e+IQUAArlycH4hQrjXQ64eRNbxsV5/wuVXHgME=
 github.com/coder/trivy v0.0.0-20250409153844-e6b004bc465a/go.mod h1:dDvq9axp3kZsT63gY2Znd1iwzfqDq3kXbQnccIrjRYY=
 github.com/coder/websocket v1.8.13 h1:f3QZdXy7uGVz+4uCJy2nTZyM0yTBj8yANEHhqlXZ9FE=
diff --git a/provisioner/terraform/provision.go b/provisioner/terraform/provision.go
index f8f82bbad7b9a..aa954ef734a02 100644
--- a/provisioner/terraform/provision.go
+++ b/provisioner/terraform/provision.go
@@ -270,9 +270,12 @@ func provisionEnv(
 		"CODER_WORKSPACE_TEMPLATE_VERSION="+metadata.GetTemplateVersion(),
 		"CODER_WORKSPACE_BUILD_ID="+metadata.GetWorkspaceBuildId(),
 	)
-	if metadata.GetIsPrebuild() {
+	if metadata.GetPrebuiltWorkspaceBuildStage().IsPrebuild() {
 		env = append(env, provider.IsPrebuildEnvironmentVariable()+"=true")
 	}
+	if metadata.GetPrebuiltWorkspaceBuildStage().IsPrebuiltWorkspaceClaim() {
+		env = append(env, provider.IsPrebuildClaimEnvironmentVariable()+"=true")
+	}
 
 	for key, value := range provisionersdk.AgentScriptEnv() {
 		env = append(env, key+"="+value)
diff --git a/provisioner/terraform/provision_test.go b/provisioner/terraform/provision_test.go
index 96514cc4b59ad..ecff965b72984 100644
--- a/provisioner/terraform/provision_test.go
+++ b/provisioner/terraform/provision_test.go
@@ -25,6 +25,7 @@ import (
 
 	"cdr.dev/slog"
 	"cdr.dev/slog/sloggers/slogtest"
+
 	"github.com/coder/coder/v2/codersdk/drpc"
 	"github.com/coder/coder/v2/provisioner/terraform"
 	"github.com/coder/coder/v2/provisionersdk"
@@ -977,7 +978,7 @@ func TestProvision(t *testing.T) {
 					required_providers {
 					  coder = {
 						source  = "coder/coder"
-						version = "2.3.0-pre2"
+						version = ">= 2.4.1"
 					  }
 					}
 				}
@@ -994,7 +995,7 @@ func TestProvision(t *testing.T) {
 			},
 			Request: &proto.PlanRequest{
 				Metadata: &proto.Metadata{
-					IsPrebuild: true,
+					PrebuiltWorkspaceBuildStage: proto.PrebuiltWorkspaceBuildStage_CREATE,
 				},
 			},
 			Response: &proto.PlanComplete{
@@ -1008,6 +1009,44 @@ func TestProvision(t *testing.T) {
 				}},
 			},
 		},
+		{
+			Name: "is-prebuild-claim",
+			Files: map[string]string{
+				"main.tf": `terraform {
+					required_providers {
+					  coder = {
+						source  = "coder/coder"
+						version = ">= 2.4.1"
+					  }
+					}
+				}
+				data "coder_workspace" "me" {}
+				resource "null_resource" "example" {}
+				resource "coder_metadata" "example" {
+					resource_id = null_resource.example.id
+					item {
+						key = "is_prebuild_claim"
+						value = data.coder_workspace.me.is_prebuild_claim
+					}
+				}
+				`,
+			},
+			Request: &proto.PlanRequest{
+				Metadata: &proto.Metadata{
+					PrebuiltWorkspaceBuildStage: proto.PrebuiltWorkspaceBuildStage_CLAIM,
+				},
+			},
+			Response: &proto.PlanComplete{
+				Resources: []*proto.Resource{{
+					Name: "example",
+					Type: "null_resource",
+					Metadata: []*proto.Resource_Metadata{{
+						Key:   "is_prebuild_claim",
+						Value: "true",
+					}},
+				}},
+			},
+		},
 	}
 
 	// Remove unused cache dirs before running tests.
diff --git a/provisionerd/proto/version.go b/provisionerd/proto/version.go
index d502a1f544fe3..1a82d240b9e7a 100644
--- a/provisionerd/proto/version.go
+++ b/provisionerd/proto/version.go
@@ -12,12 +12,17 @@ import "github.com/coder/coder/v2/apiversion"
 //
 // API v1.4:
 //   - Add new field named `devcontainers` in the Agent.
+//
+// API v1.5:
+//   - Add new field named `prebuilt_workspace_build_stage` enum in the Metadata message.
 const (
 	CurrentMajor = 1
-	CurrentMinor = 4
+	CurrentMinor = 5
 )
 
 // CurrentVersion is the current provisionerd API version.
 // Breaking changes to the provisionerd API **MUST** increment
 // CurrentMajor above.
+// Non-breaking changes to the provisionerd API **MUST** increment
+// CurrentMinor above.
 var CurrentVersion = apiversion.New(CurrentMajor, CurrentMinor)
diff --git a/provisionerd/provisionerd.go b/provisionerd/provisionerd.go
index 6635495a2553a..76a06d7fa68b1 100644
--- a/provisionerd/provisionerd.go
+++ b/provisionerd/provisionerd.go
@@ -378,7 +378,7 @@ func (p *Server) acquireAndRunOne(client proto.DRPCProvisionerDaemonClient) erro
 			slog.F("workspace_build_id", build.WorkspaceBuildId),
 			slog.F("workspace_id", build.Metadata.WorkspaceId),
 			slog.F("workspace_name", build.WorkspaceName),
-			slog.F("is_prebuild", build.Metadata.IsPrebuild),
+			slog.F("prebuilt_workspace_build_stage", build.Metadata.GetPrebuiltWorkspaceBuildStage().String()),
 		)
 
 		span.SetAttributes(
@@ -388,7 +388,7 @@ func (p *Server) acquireAndRunOne(client proto.DRPCProvisionerDaemonClient) erro
 			attribute.String("workspace_owner_id", build.Metadata.WorkspaceOwnerId),
 			attribute.String("workspace_owner", build.Metadata.WorkspaceOwner),
 			attribute.String("workspace_transition", build.Metadata.WorkspaceTransition.String()),
-			attribute.Bool("is_prebuild", build.Metadata.IsPrebuild),
+			attribute.String("prebuilt_workspace_build_stage", build.Metadata.GetPrebuiltWorkspaceBuildStage().String()),
 		)
 	}
 
diff --git a/provisionersdk/proto/prebuilt_workspace.go b/provisionersdk/proto/prebuilt_workspace.go
new file mode 100644
index 0000000000000..3aa80512344b6
--- /dev/null
+++ b/provisionersdk/proto/prebuilt_workspace.go
@@ -0,0 +1,9 @@
+package proto
+
+func (p PrebuiltWorkspaceBuildStage) IsPrebuild() bool {
+	return p == PrebuiltWorkspaceBuildStage_CREATE
+}
+
+func (p PrebuiltWorkspaceBuildStage) IsPrebuiltWorkspaceClaim() bool {
+	return p == PrebuiltWorkspaceBuildStage_CLAIM
+}
diff --git a/provisionersdk/proto/provisioner.pb.go b/provisionersdk/proto/provisioner.pb.go
index f258f79e36f94..cbe7ebb3007e6 100644
--- a/provisionersdk/proto/provisioner.pb.go
+++ b/provisionersdk/proto/provisioner.pb.go
@@ -226,6 +226,55 @@ func (WorkspaceTransition) EnumDescriptor() ([]byte, []int) {
 	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{3}
 }
 
+type PrebuiltWorkspaceBuildStage int32
+
+const (
+	PrebuiltWorkspaceBuildStage_NONE   PrebuiltWorkspaceBuildStage = 0 // Default value for builds unrelated to prebuilds.
+	PrebuiltWorkspaceBuildStage_CREATE PrebuiltWorkspaceBuildStage = 1 // A prebuilt workspace is being provisioned.
+	PrebuiltWorkspaceBuildStage_CLAIM  PrebuiltWorkspaceBuildStage = 2 // A prebuilt workspace is being claimed.
+)
+
+// Enum value maps for PrebuiltWorkspaceBuildStage.
+var (
+	PrebuiltWorkspaceBuildStage_name = map[int32]string{
+		0: "NONE",
+		1: "CREATE",
+		2: "CLAIM",
+	}
+	PrebuiltWorkspaceBuildStage_value = map[string]int32{
+		"NONE":   0,
+		"CREATE": 1,
+		"CLAIM":  2,
+	}
+)
+
+func (x PrebuiltWorkspaceBuildStage) Enum() *PrebuiltWorkspaceBuildStage {
+	p := new(PrebuiltWorkspaceBuildStage)
+	*p = x
+	return p
+}
+
+func (x PrebuiltWorkspaceBuildStage) String() string {
+	return protoimpl.X.EnumStringOf(x.Descriptor(), protoreflect.EnumNumber(x))
+}
+
+func (PrebuiltWorkspaceBuildStage) Descriptor() protoreflect.EnumDescriptor {
+	return file_provisionersdk_proto_provisioner_proto_enumTypes[4].Descriptor()
+}
+
+func (PrebuiltWorkspaceBuildStage) Type() protoreflect.EnumType {
+	return &file_provisionersdk_proto_provisioner_proto_enumTypes[4]
+}
+
+func (x PrebuiltWorkspaceBuildStage) Number() protoreflect.EnumNumber {
+	return protoreflect.EnumNumber(x)
+}
+
+// Deprecated: Use PrebuiltWorkspaceBuildStage.Descriptor instead.
+func (PrebuiltWorkspaceBuildStage) EnumDescriptor() ([]byte, []int) {
+	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{4}
+}
+
 type TimingState int32
 
 const (
@@ -259,11 +308,11 @@ func (x TimingState) String() string {
 }
 
 func (TimingState) Descriptor() protoreflect.EnumDescriptor {
-	return file_provisionersdk_proto_provisioner_proto_enumTypes[4].Descriptor()
+	return file_provisionersdk_proto_provisioner_proto_enumTypes[5].Descriptor()
 }
 
 func (TimingState) Type() protoreflect.EnumType {
-	return &file_provisionersdk_proto_provisioner_proto_enumTypes[4]
+	return &file_provisionersdk_proto_provisioner_proto_enumTypes[5]
 }
 
 func (x TimingState) Number() protoreflect.EnumNumber {
@@ -272,7 +321,7 @@ func (x TimingState) Number() protoreflect.EnumNumber {
 
 // Deprecated: Use TimingState.Descriptor instead.
 func (TimingState) EnumDescriptor() ([]byte, []int) {
-	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{4}
+	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{5}
 }
 
 // Empty indicates a successful request/response.
@@ -2284,27 +2333,27 @@ type Metadata struct {
 	sizeCache     protoimpl.SizeCache
 	unknownFields protoimpl.UnknownFields
 
-	CoderUrl                      string              `protobuf:"bytes,1,opt,name=coder_url,json=coderUrl,proto3" json:"coder_url,omitempty"`
-	WorkspaceTransition           WorkspaceTransition `protobuf:"varint,2,opt,name=workspace_transition,json=workspaceTransition,proto3,enum=provisioner.WorkspaceTransition" json:"workspace_transition,omitempty"`
-	WorkspaceName                 string              `protobuf:"bytes,3,opt,name=workspace_name,json=workspaceName,proto3" json:"workspace_name,omitempty"`
-	WorkspaceOwner                string              `protobuf:"bytes,4,opt,name=workspace_owner,json=workspaceOwner,proto3" json:"workspace_owner,omitempty"`
-	WorkspaceId                   string              `protobuf:"bytes,5,opt,name=workspace_id,json=workspaceId,proto3" json:"workspace_id,omitempty"`
-	WorkspaceOwnerId              string              `protobuf:"bytes,6,opt,name=workspace_owner_id,json=workspaceOwnerId,proto3" json:"workspace_owner_id,omitempty"`
-	WorkspaceOwnerEmail           string              `protobuf:"bytes,7,opt,name=workspace_owner_email,json=workspaceOwnerEmail,proto3" json:"workspace_owner_email,omitempty"`
-	TemplateName                  string              `protobuf:"bytes,8,opt,name=template_name,json=templateName,proto3" json:"template_name,omitempty"`
-	TemplateVersion               string              `protobuf:"bytes,9,opt,name=template_version,json=templateVersion,proto3" json:"template_version,omitempty"`
-	WorkspaceOwnerOidcAccessToken string              `protobuf:"bytes,10,opt,name=workspace_owner_oidc_access_token,json=workspaceOwnerOidcAccessToken,proto3" json:"workspace_owner_oidc_access_token,omitempty"`
-	WorkspaceOwnerSessionToken    string              `protobuf:"bytes,11,opt,name=workspace_owner_session_token,json=workspaceOwnerSessionToken,proto3" json:"workspace_owner_session_token,omitempty"`
-	TemplateId                    string              `protobuf:"bytes,12,opt,name=template_id,json=templateId,proto3" json:"template_id,omitempty"`
-	WorkspaceOwnerName            string              `protobuf:"bytes,13,opt,name=workspace_owner_name,json=workspaceOwnerName,proto3" json:"workspace_owner_name,omitempty"`
-	WorkspaceOwnerGroups          []string            `protobuf:"bytes,14,rep,name=workspace_owner_groups,json=workspaceOwnerGroups,proto3" json:"workspace_owner_groups,omitempty"`
-	WorkspaceOwnerSshPublicKey    string              `protobuf:"bytes,15,opt,name=workspace_owner_ssh_public_key,json=workspaceOwnerSshPublicKey,proto3" json:"workspace_owner_ssh_public_key,omitempty"`
-	WorkspaceOwnerSshPrivateKey   string              `protobuf:"bytes,16,opt,name=workspace_owner_ssh_private_key,json=workspaceOwnerSshPrivateKey,proto3" json:"workspace_owner_ssh_private_key,omitempty"`
-	WorkspaceBuildId              string              `protobuf:"bytes,17,opt,name=workspace_build_id,json=workspaceBuildId,proto3" json:"workspace_build_id,omitempty"`
-	WorkspaceOwnerLoginType       string              `protobuf:"bytes,18,opt,name=workspace_owner_login_type,json=workspaceOwnerLoginType,proto3" json:"workspace_owner_login_type,omitempty"`
-	WorkspaceOwnerRbacRoles       []*Role             `protobuf:"bytes,19,rep,name=workspace_owner_rbac_roles,json=workspaceOwnerRbacRoles,proto3" json:"workspace_owner_rbac_roles,omitempty"`
-	IsPrebuild                    bool                `protobuf:"varint,20,opt,name=is_prebuild,json=isPrebuild,proto3" json:"is_prebuild,omitempty"`
-	RunningWorkspaceAgentToken    string              `protobuf:"bytes,21,opt,name=running_workspace_agent_token,json=runningWorkspaceAgentToken,proto3" json:"running_workspace_agent_token,omitempty"`
+	CoderUrl                      string                      `protobuf:"bytes,1,opt,name=coder_url,json=coderUrl,proto3" json:"coder_url,omitempty"`
+	WorkspaceTransition           WorkspaceTransition         `protobuf:"varint,2,opt,name=workspace_transition,json=workspaceTransition,proto3,enum=provisioner.WorkspaceTransition" json:"workspace_transition,omitempty"`
+	WorkspaceName                 string                      `protobuf:"bytes,3,opt,name=workspace_name,json=workspaceName,proto3" json:"workspace_name,omitempty"`
+	WorkspaceOwner                string                      `protobuf:"bytes,4,opt,name=workspace_owner,json=workspaceOwner,proto3" json:"workspace_owner,omitempty"`
+	WorkspaceId                   string                      `protobuf:"bytes,5,opt,name=workspace_id,json=workspaceId,proto3" json:"workspace_id,omitempty"`
+	WorkspaceOwnerId              string                      `protobuf:"bytes,6,opt,name=workspace_owner_id,json=workspaceOwnerId,proto3" json:"workspace_owner_id,omitempty"`
+	WorkspaceOwnerEmail           string                      `protobuf:"bytes,7,opt,name=workspace_owner_email,json=workspaceOwnerEmail,proto3" json:"workspace_owner_email,omitempty"`
+	TemplateName                  string                      `protobuf:"bytes,8,opt,name=template_name,json=templateName,proto3" json:"template_name,omitempty"`
+	TemplateVersion               string                      `protobuf:"bytes,9,opt,name=template_version,json=templateVersion,proto3" json:"template_version,omitempty"`
+	WorkspaceOwnerOidcAccessToken string                      `protobuf:"bytes,10,opt,name=workspace_owner_oidc_access_token,json=workspaceOwnerOidcAccessToken,proto3" json:"workspace_owner_oidc_access_token,omitempty"`
+	WorkspaceOwnerSessionToken    string                      `protobuf:"bytes,11,opt,name=workspace_owner_session_token,json=workspaceOwnerSessionToken,proto3" json:"workspace_owner_session_token,omitempty"`
+	TemplateId                    string                      `protobuf:"bytes,12,opt,name=template_id,json=templateId,proto3" json:"template_id,omitempty"`
+	WorkspaceOwnerName            string                      `protobuf:"bytes,13,opt,name=workspace_owner_name,json=workspaceOwnerName,proto3" json:"workspace_owner_name,omitempty"`
+	WorkspaceOwnerGroups          []string                    `protobuf:"bytes,14,rep,name=workspace_owner_groups,json=workspaceOwnerGroups,proto3" json:"workspace_owner_groups,omitempty"`
+	WorkspaceOwnerSshPublicKey    string                      `protobuf:"bytes,15,opt,name=workspace_owner_ssh_public_key,json=workspaceOwnerSshPublicKey,proto3" json:"workspace_owner_ssh_public_key,omitempty"`
+	WorkspaceOwnerSshPrivateKey   string                      `protobuf:"bytes,16,opt,name=workspace_owner_ssh_private_key,json=workspaceOwnerSshPrivateKey,proto3" json:"workspace_owner_ssh_private_key,omitempty"`
+	WorkspaceBuildId              string                      `protobuf:"bytes,17,opt,name=workspace_build_id,json=workspaceBuildId,proto3" json:"workspace_build_id,omitempty"`
+	WorkspaceOwnerLoginType       string                      `protobuf:"bytes,18,opt,name=workspace_owner_login_type,json=workspaceOwnerLoginType,proto3" json:"workspace_owner_login_type,omitempty"`
+	WorkspaceOwnerRbacRoles       []*Role                     `protobuf:"bytes,19,rep,name=workspace_owner_rbac_roles,json=workspaceOwnerRbacRoles,proto3" json:"workspace_owner_rbac_roles,omitempty"`
+	PrebuiltWorkspaceBuildStage   PrebuiltWorkspaceBuildStage `protobuf:"varint,20,opt,name=prebuilt_workspace_build_stage,json=prebuiltWorkspaceBuildStage,proto3,enum=provisioner.PrebuiltWorkspaceBuildStage" json:"prebuilt_workspace_build_stage,omitempty"` // Indicates that a prebuilt workspace is being built.
+	RunningWorkspaceAgentToken    string                      `protobuf:"bytes,21,opt,name=running_workspace_agent_token,json=runningWorkspaceAgentToken,proto3" json:"running_workspace_agent_token,omitempty"`                                                  // Preserves the running agent token of a prebuilt workspace so it can reinitialize.
 }
 
 func (x *Metadata) Reset() {
@@ -2472,11 +2521,11 @@ func (x *Metadata) GetWorkspaceOwnerRbacRoles() []*Role {
 	return nil
 }
 
-func (x *Metadata) GetIsPrebuild() bool {
+func (x *Metadata) GetPrebuiltWorkspaceBuildStage() PrebuiltWorkspaceBuildStage {
 	if x != nil {
-		return x.IsPrebuild
+		return x.PrebuiltWorkspaceBuildStage
 	}
-	return false
+	return PrebuiltWorkspaceBuildStage_NONE
 }
 
 func (x *Metadata) GetRunningWorkspaceAgentToken() string {
@@ -3804,7 +3853,7 @@ var file_provisionersdk_proto_provisioner_proto_rawDesc = []byte{
 	0x6b, 0x65, 0x79, 0x22, 0x31, 0x0a, 0x04, 0x52, 0x6f, 0x6c, 0x65, 0x12, 0x12, 0x0a, 0x04, 0x6e,
 	0x61, 0x6d, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x04, 0x6e, 0x61, 0x6d, 0x65, 0x12,
 	0x15, 0x0a, 0x06, 0x6f, 0x72, 0x67, 0x5f, 0x69, 0x64, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x52,
-	0x05, 0x6f, 0x72, 0x67, 0x49, 0x64, 0x22, 0xe0, 0x08, 0x0a, 0x08, 0x4d, 0x65, 0x74, 0x61, 0x64,
+	0x05, 0x6f, 0x72, 0x67, 0x49, 0x64, 0x22, 0xae, 0x09, 0x0a, 0x08, 0x4d, 0x65, 0x74, 0x61, 0x64,
 	0x61, 0x74, 0x61, 0x12, 0x1b, 0x0a, 0x09, 0x63, 0x6f, 0x64, 0x65, 0x72, 0x5f, 0x75, 0x72, 0x6c,
 	0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x08, 0x63, 0x6f, 0x64, 0x65, 0x72, 0x55, 0x72, 0x6c,
 	0x12, 0x53, 0x0a, 0x14, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x5f, 0x74, 0x72,
@@ -3868,184 +3917,193 @@ var file_provisionersdk_proto_provisioner_proto_rawDesc = []byte{
 	0x6c, 0x65, 0x73, 0x18, 0x13, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x11, 0x2e, 0x70, 0x72, 0x6f, 0x76,
 	0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x52, 0x6f, 0x6c, 0x65, 0x52, 0x17, 0x77, 0x6f,
 	0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x4f, 0x77, 0x6e, 0x65, 0x72, 0x52, 0x62, 0x61, 0x63,
-	0x52, 0x6f, 0x6c, 0x65, 0x73, 0x12, 0x1f, 0x0a, 0x0b, 0x69, 0x73, 0x5f, 0x70, 0x72, 0x65, 0x62,
-	0x75, 0x69, 0x6c, 0x64, 0x18, 0x14, 0x20, 0x01, 0x28, 0x08, 0x52, 0x0a, 0x69, 0x73, 0x50, 0x72,
-	0x65, 0x62, 0x75, 0x69, 0x6c, 0x64, 0x12, 0x41, 0x0a, 0x1d, 0x72, 0x75, 0x6e, 0x6e, 0x69, 0x6e,
-	0x67, 0x5f, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x5f, 0x61, 0x67, 0x65, 0x6e,
-	0x74, 0x5f, 0x74, 0x6f, 0x6b, 0x65, 0x6e, 0x18, 0x15, 0x20, 0x01, 0x28, 0x09, 0x52, 0x1a, 0x72,
-	0x75, 0x6e, 0x6e, 0x69, 0x6e, 0x67, 0x57, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x41,
-	0x67, 0x65, 0x6e, 0x74, 0x54, 0x6f, 0x6b, 0x65, 0x6e, 0x22, 0x8a, 0x01, 0x0a, 0x06, 0x43, 0x6f,
-	0x6e, 0x66, 0x69, 0x67, 0x12, 0x36, 0x0a, 0x17, 0x74, 0x65, 0x6d, 0x70, 0x6c, 0x61, 0x74, 0x65,
-	0x5f, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x5f, 0x61, 0x72, 0x63, 0x68, 0x69, 0x76, 0x65, 0x18,
-	0x01, 0x20, 0x01, 0x28, 0x0c, 0x52, 0x15, 0x74, 0x65, 0x6d, 0x70, 0x6c, 0x61, 0x74, 0x65, 0x53,
-	0x6f, 0x75, 0x72, 0x63, 0x65, 0x41, 0x72, 0x63, 0x68, 0x69, 0x76, 0x65, 0x12, 0x14, 0x0a, 0x05,
-	0x73, 0x74, 0x61, 0x74, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0c, 0x52, 0x05, 0x73, 0x74, 0x61,
-	0x74, 0x65, 0x12, 0x32, 0x0a, 0x15, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65,
-	0x72, 0x5f, 0x6c, 0x6f, 0x67, 0x5f, 0x6c, 0x65, 0x76, 0x65, 0x6c, 0x18, 0x03, 0x20, 0x01, 0x28,
-	0x09, 0x52, 0x13, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x4c, 0x6f,
-	0x67, 0x4c, 0x65, 0x76, 0x65, 0x6c, 0x22, 0x0e, 0x0a, 0x0c, 0x50, 0x61, 0x72, 0x73, 0x65, 0x52,
-	0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x22, 0xa3, 0x02, 0x0a, 0x0d, 0x50, 0x61, 0x72, 0x73, 0x65,
-	0x43, 0x6f, 0x6d, 0x70, 0x6c, 0x65, 0x74, 0x65, 0x12, 0x14, 0x0a, 0x05, 0x65, 0x72, 0x72, 0x6f,
-	0x72, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x05, 0x65, 0x72, 0x72, 0x6f, 0x72, 0x12, 0x4c,
-	0x0a, 0x12, 0x74, 0x65, 0x6d, 0x70, 0x6c, 0x61, 0x74, 0x65, 0x5f, 0x76, 0x61, 0x72, 0x69, 0x61,
-	0x62, 0x6c, 0x65, 0x73, 0x18, 0x02, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x1d, 0x2e, 0x70, 0x72, 0x6f,
-	0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x54, 0x65, 0x6d, 0x70, 0x6c, 0x61, 0x74,
-	0x65, 0x56, 0x61, 0x72, 0x69, 0x61, 0x62, 0x6c, 0x65, 0x52, 0x11, 0x74, 0x65, 0x6d, 0x70, 0x6c,
-	0x61, 0x74, 0x65, 0x56, 0x61, 0x72, 0x69, 0x61, 0x62, 0x6c, 0x65, 0x73, 0x12, 0x16, 0x0a, 0x06,
-	0x72, 0x65, 0x61, 0x64, 0x6d, 0x65, 0x18, 0x03, 0x20, 0x01, 0x28, 0x0c, 0x52, 0x06, 0x72, 0x65,
-	0x61, 0x64, 0x6d, 0x65, 0x12, 0x54, 0x0a, 0x0e, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63,
-	0x65, 0x5f, 0x74, 0x61, 0x67, 0x73, 0x18, 0x04, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x2d, 0x2e, 0x70,
-	0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x50, 0x61, 0x72, 0x73, 0x65,
-	0x43, 0x6f, 0x6d, 0x70, 0x6c, 0x65, 0x74, 0x65, 0x2e, 0x57, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61,
-	0x63, 0x65, 0x54, 0x61, 0x67, 0x73, 0x45, 0x6e, 0x74, 0x72, 0x79, 0x52, 0x0d, 0x77, 0x6f, 0x72,
-	0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x54, 0x61, 0x67, 0x73, 0x1a, 0x40, 0x0a, 0x12, 0x57, 0x6f,
-	0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x54, 0x61, 0x67, 0x73, 0x45, 0x6e, 0x74, 0x72, 0x79,
-	0x12, 0x10, 0x0a, 0x03, 0x6b, 0x65, 0x79, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x03, 0x6b,
-	0x65, 0x79, 0x12, 0x14, 0x0a, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28,
-	0x09, 0x52, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x3a, 0x02, 0x38, 0x01, 0x22, 0xb5, 0x02, 0x0a,
-	0x0b, 0x50, 0x6c, 0x61, 0x6e, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x12, 0x31, 0x0a, 0x08,
-	0x6d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x15,
-	0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x4d, 0x65, 0x74,
-	0x61, 0x64, 0x61, 0x74, 0x61, 0x52, 0x08, 0x6d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x12,
-	0x53, 0x0a, 0x15, 0x72, 0x69, 0x63, 0x68, 0x5f, 0x70, 0x61, 0x72, 0x61, 0x6d, 0x65, 0x74, 0x65,
-	0x72, 0x5f, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x73, 0x18, 0x02, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x1f,
-	0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x52, 0x69, 0x63,
-	0x68, 0x50, 0x61, 0x72, 0x61, 0x6d, 0x65, 0x74, 0x65, 0x72, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x52,
-	0x13, 0x72, 0x69, 0x63, 0x68, 0x50, 0x61, 0x72, 0x61, 0x6d, 0x65, 0x74, 0x65, 0x72, 0x56, 0x61,
-	0x6c, 0x75, 0x65, 0x73, 0x12, 0x43, 0x0a, 0x0f, 0x76, 0x61, 0x72, 0x69, 0x61, 0x62, 0x6c, 0x65,
-	0x5f, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x73, 0x18, 0x03, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x1a, 0x2e,
-	0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x56, 0x61, 0x72, 0x69,
-	0x61, 0x62, 0x6c, 0x65, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x52, 0x0e, 0x76, 0x61, 0x72, 0x69, 0x61,
-	0x62, 0x6c, 0x65, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x73, 0x12, 0x59, 0x0a, 0x17, 0x65, 0x78, 0x74,
-	0x65, 0x72, 0x6e, 0x61, 0x6c, 0x5f, 0x61, 0x75, 0x74, 0x68, 0x5f, 0x70, 0x72, 0x6f, 0x76, 0x69,
-	0x64, 0x65, 0x72, 0x73, 0x18, 0x04, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x21, 0x2e, 0x70, 0x72, 0x6f,
-	0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x45, 0x78, 0x74, 0x65, 0x72, 0x6e, 0x61,
-	0x6c, 0x41, 0x75, 0x74, 0x68, 0x50, 0x72, 0x6f, 0x76, 0x69, 0x64, 0x65, 0x72, 0x52, 0x15, 0x65,
-	0x78, 0x74, 0x65, 0x72, 0x6e, 0x61, 0x6c, 0x41, 0x75, 0x74, 0x68, 0x50, 0x72, 0x6f, 0x76, 0x69,
-	0x64, 0x65, 0x72, 0x73, 0x22, 0x99, 0x03, 0x0a, 0x0c, 0x50, 0x6c, 0x61, 0x6e, 0x43, 0x6f, 0x6d,
-	0x70, 0x6c, 0x65, 0x74, 0x65, 0x12, 0x14, 0x0a, 0x05, 0x65, 0x72, 0x72, 0x6f, 0x72, 0x18, 0x01,
-	0x20, 0x01, 0x28, 0x09, 0x52, 0x05, 0x65, 0x72, 0x72, 0x6f, 0x72, 0x12, 0x33, 0x0a, 0x09, 0x72,
-	0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x73, 0x18, 0x02, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x15,
-	0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x52, 0x65, 0x73,
-	0x6f, 0x75, 0x72, 0x63, 0x65, 0x52, 0x09, 0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x73,
-	0x12, 0x3a, 0x0a, 0x0a, 0x70, 0x61, 0x72, 0x61, 0x6d, 0x65, 0x74, 0x65, 0x72, 0x73, 0x18, 0x03,
-	0x20, 0x03, 0x28, 0x0b, 0x32, 0x1a, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e,
-	0x65, 0x72, 0x2e, 0x52, 0x69, 0x63, 0x68, 0x50, 0x61, 0x72, 0x61, 0x6d, 0x65, 0x74, 0x65, 0x72,
-	0x52, 0x0a, 0x70, 0x61, 0x72, 0x61, 0x6d, 0x65, 0x74, 0x65, 0x72, 0x73, 0x12, 0x61, 0x0a, 0x17,
-	0x65, 0x78, 0x74, 0x65, 0x72, 0x6e, 0x61, 0x6c, 0x5f, 0x61, 0x75, 0x74, 0x68, 0x5f, 0x70, 0x72,
-	0x6f, 0x76, 0x69, 0x64, 0x65, 0x72, 0x73, 0x18, 0x04, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x29, 0x2e,
-	0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x45, 0x78, 0x74, 0x65,
-	0x72, 0x6e, 0x61, 0x6c, 0x41, 0x75, 0x74, 0x68, 0x50, 0x72, 0x6f, 0x76, 0x69, 0x64, 0x65, 0x72,
-	0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x52, 0x15, 0x65, 0x78, 0x74, 0x65, 0x72, 0x6e,
-	0x61, 0x6c, 0x41, 0x75, 0x74, 0x68, 0x50, 0x72, 0x6f, 0x76, 0x69, 0x64, 0x65, 0x72, 0x73, 0x12,
-	0x2d, 0x0a, 0x07, 0x74, 0x69, 0x6d, 0x69, 0x6e, 0x67, 0x73, 0x18, 0x06, 0x20, 0x03, 0x28, 0x0b,
-	0x32, 0x13, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x54,
-	0x69, 0x6d, 0x69, 0x6e, 0x67, 0x52, 0x07, 0x74, 0x69, 0x6d, 0x69, 0x6e, 0x67, 0x73, 0x12, 0x2d,
-	0x0a, 0x07, 0x6d, 0x6f, 0x64, 0x75, 0x6c, 0x65, 0x73, 0x18, 0x07, 0x20, 0x03, 0x28, 0x0b, 0x32,
-	0x13, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x4d, 0x6f,
-	0x64, 0x75, 0x6c, 0x65, 0x52, 0x07, 0x6d, 0x6f, 0x64, 0x75, 0x6c, 0x65, 0x73, 0x12, 0x2d, 0x0a,
-	0x07, 0x70, 0x72, 0x65, 0x73, 0x65, 0x74, 0x73, 0x18, 0x08, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x13,
-	0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x50, 0x72, 0x65,
-	0x73, 0x65, 0x74, 0x52, 0x07, 0x70, 0x72, 0x65, 0x73, 0x65, 0x74, 0x73, 0x12, 0x12, 0x0a, 0x04,
-	0x70, 0x6c, 0x61, 0x6e, 0x18, 0x09, 0x20, 0x01, 0x28, 0x0c, 0x52, 0x04, 0x70, 0x6c, 0x61, 0x6e,
-	0x22, 0x41, 0x0a, 0x0c, 0x41, 0x70, 0x70, 0x6c, 0x79, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74,
-	0x12, 0x31, 0x0a, 0x08, 0x6d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x18, 0x01, 0x20, 0x01,
+	0x52, 0x6f, 0x6c, 0x65, 0x73, 0x12, 0x6d, 0x0a, 0x1e, 0x70, 0x72, 0x65, 0x62, 0x75, 0x69, 0x6c,
+	0x74, 0x5f, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x5f, 0x62, 0x75, 0x69, 0x6c,
+	0x64, 0x5f, 0x73, 0x74, 0x61, 0x67, 0x65, 0x18, 0x14, 0x20, 0x01, 0x28, 0x0e, 0x32, 0x28, 0x2e,
+	0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x50, 0x72, 0x65, 0x62,
+	0x75, 0x69, 0x6c, 0x74, 0x57, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x42, 0x75, 0x69,
+	0x6c, 0x64, 0x53, 0x74, 0x61, 0x67, 0x65, 0x52, 0x1b, 0x70, 0x72, 0x65, 0x62, 0x75, 0x69, 0x6c,
+	0x74, 0x57, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x42, 0x75, 0x69, 0x6c, 0x64, 0x53,
+	0x74, 0x61, 0x67, 0x65, 0x12, 0x41, 0x0a, 0x1d, 0x72, 0x75, 0x6e, 0x6e, 0x69, 0x6e, 0x67, 0x5f,
+	0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x5f, 0x61, 0x67, 0x65, 0x6e, 0x74, 0x5f,
+	0x74, 0x6f, 0x6b, 0x65, 0x6e, 0x18, 0x15, 0x20, 0x01, 0x28, 0x09, 0x52, 0x1a, 0x72, 0x75, 0x6e,
+	0x6e, 0x69, 0x6e, 0x67, 0x57, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x41, 0x67, 0x65,
+	0x6e, 0x74, 0x54, 0x6f, 0x6b, 0x65, 0x6e, 0x22, 0x8a, 0x01, 0x0a, 0x06, 0x43, 0x6f, 0x6e, 0x66,
+	0x69, 0x67, 0x12, 0x36, 0x0a, 0x17, 0x74, 0x65, 0x6d, 0x70, 0x6c, 0x61, 0x74, 0x65, 0x5f, 0x73,
+	0x6f, 0x75, 0x72, 0x63, 0x65, 0x5f, 0x61, 0x72, 0x63, 0x68, 0x69, 0x76, 0x65, 0x18, 0x01, 0x20,
+	0x01, 0x28, 0x0c, 0x52, 0x15, 0x74, 0x65, 0x6d, 0x70, 0x6c, 0x61, 0x74, 0x65, 0x53, 0x6f, 0x75,
+	0x72, 0x63, 0x65, 0x41, 0x72, 0x63, 0x68, 0x69, 0x76, 0x65, 0x12, 0x14, 0x0a, 0x05, 0x73, 0x74,
+	0x61, 0x74, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0c, 0x52, 0x05, 0x73, 0x74, 0x61, 0x74, 0x65,
+	0x12, 0x32, 0x0a, 0x15, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x5f,
+	0x6c, 0x6f, 0x67, 0x5f, 0x6c, 0x65, 0x76, 0x65, 0x6c, 0x18, 0x03, 0x20, 0x01, 0x28, 0x09, 0x52,
+	0x13, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x4c, 0x6f, 0x67, 0x4c,
+	0x65, 0x76, 0x65, 0x6c, 0x22, 0x0e, 0x0a, 0x0c, 0x50, 0x61, 0x72, 0x73, 0x65, 0x52, 0x65, 0x71,
+	0x75, 0x65, 0x73, 0x74, 0x22, 0xa3, 0x02, 0x0a, 0x0d, 0x50, 0x61, 0x72, 0x73, 0x65, 0x43, 0x6f,
+	0x6d, 0x70, 0x6c, 0x65, 0x74, 0x65, 0x12, 0x14, 0x0a, 0x05, 0x65, 0x72, 0x72, 0x6f, 0x72, 0x18,
+	0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x05, 0x65, 0x72, 0x72, 0x6f, 0x72, 0x12, 0x4c, 0x0a, 0x12,
+	0x74, 0x65, 0x6d, 0x70, 0x6c, 0x61, 0x74, 0x65, 0x5f, 0x76, 0x61, 0x72, 0x69, 0x61, 0x62, 0x6c,
+	0x65, 0x73, 0x18, 0x02, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x1d, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69,
+	0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x54, 0x65, 0x6d, 0x70, 0x6c, 0x61, 0x74, 0x65, 0x56,
+	0x61, 0x72, 0x69, 0x61, 0x62, 0x6c, 0x65, 0x52, 0x11, 0x74, 0x65, 0x6d, 0x70, 0x6c, 0x61, 0x74,
+	0x65, 0x56, 0x61, 0x72, 0x69, 0x61, 0x62, 0x6c, 0x65, 0x73, 0x12, 0x16, 0x0a, 0x06, 0x72, 0x65,
+	0x61, 0x64, 0x6d, 0x65, 0x18, 0x03, 0x20, 0x01, 0x28, 0x0c, 0x52, 0x06, 0x72, 0x65, 0x61, 0x64,
+	0x6d, 0x65, 0x12, 0x54, 0x0a, 0x0e, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x5f,
+	0x74, 0x61, 0x67, 0x73, 0x18, 0x04, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x2d, 0x2e, 0x70, 0x72, 0x6f,
+	0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x50, 0x61, 0x72, 0x73, 0x65, 0x43, 0x6f,
+	0x6d, 0x70, 0x6c, 0x65, 0x74, 0x65, 0x2e, 0x57, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65,
+	0x54, 0x61, 0x67, 0x73, 0x45, 0x6e, 0x74, 0x72, 0x79, 0x52, 0x0d, 0x77, 0x6f, 0x72, 0x6b, 0x73,
+	0x70, 0x61, 0x63, 0x65, 0x54, 0x61, 0x67, 0x73, 0x1a, 0x40, 0x0a, 0x12, 0x57, 0x6f, 0x72, 0x6b,
+	0x73, 0x70, 0x61, 0x63, 0x65, 0x54, 0x61, 0x67, 0x73, 0x45, 0x6e, 0x74, 0x72, 0x79, 0x12, 0x10,
+	0x0a, 0x03, 0x6b, 0x65, 0x79, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x03, 0x6b, 0x65, 0x79,
+	0x12, 0x14, 0x0a, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x52,
+	0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x3a, 0x02, 0x38, 0x01, 0x22, 0xb5, 0x02, 0x0a, 0x0b, 0x50,
+	0x6c, 0x61, 0x6e, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x12, 0x31, 0x0a, 0x08, 0x6d, 0x65,
+	0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x15, 0x2e, 0x70,
+	0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x4d, 0x65, 0x74, 0x61, 0x64,
+	0x61, 0x74, 0x61, 0x52, 0x08, 0x6d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x12, 0x53, 0x0a,
+	0x15, 0x72, 0x69, 0x63, 0x68, 0x5f, 0x70, 0x61, 0x72, 0x61, 0x6d, 0x65, 0x74, 0x65, 0x72, 0x5f,
+	0x76, 0x61, 0x6c, 0x75, 0x65, 0x73, 0x18, 0x02, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x1f, 0x2e, 0x70,
+	0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x52, 0x69, 0x63, 0x68, 0x50,
+	0x61, 0x72, 0x61, 0x6d, 0x65, 0x74, 0x65, 0x72, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x52, 0x13, 0x72,
+	0x69, 0x63, 0x68, 0x50, 0x61, 0x72, 0x61, 0x6d, 0x65, 0x74, 0x65, 0x72, 0x56, 0x61, 0x6c, 0x75,
+	0x65, 0x73, 0x12, 0x43, 0x0a, 0x0f, 0x76, 0x61, 0x72, 0x69, 0x61, 0x62, 0x6c, 0x65, 0x5f, 0x76,
+	0x61, 0x6c, 0x75, 0x65, 0x73, 0x18, 0x03, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x1a, 0x2e, 0x70, 0x72,
+	0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x56, 0x61, 0x72, 0x69, 0x61, 0x62,
+	0x6c, 0x65, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x52, 0x0e, 0x76, 0x61, 0x72, 0x69, 0x61, 0x62, 0x6c,
+	0x65, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x73, 0x12, 0x59, 0x0a, 0x17, 0x65, 0x78, 0x74, 0x65, 0x72,
+	0x6e, 0x61, 0x6c, 0x5f, 0x61, 0x75, 0x74, 0x68, 0x5f, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x64, 0x65,
+	0x72, 0x73, 0x18, 0x04, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x21, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69,
+	0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x45, 0x78, 0x74, 0x65, 0x72, 0x6e, 0x61, 0x6c, 0x41,
+	0x75, 0x74, 0x68, 0x50, 0x72, 0x6f, 0x76, 0x69, 0x64, 0x65, 0x72, 0x52, 0x15, 0x65, 0x78, 0x74,
+	0x65, 0x72, 0x6e, 0x61, 0x6c, 0x41, 0x75, 0x74, 0x68, 0x50, 0x72, 0x6f, 0x76, 0x69, 0x64, 0x65,
+	0x72, 0x73, 0x22, 0x99, 0x03, 0x0a, 0x0c, 0x50, 0x6c, 0x61, 0x6e, 0x43, 0x6f, 0x6d, 0x70, 0x6c,
+	0x65, 0x74, 0x65, 0x12, 0x14, 0x0a, 0x05, 0x65, 0x72, 0x72, 0x6f, 0x72, 0x18, 0x01, 0x20, 0x01,
+	0x28, 0x09, 0x52, 0x05, 0x65, 0x72, 0x72, 0x6f, 0x72, 0x12, 0x33, 0x0a, 0x09, 0x72, 0x65, 0x73,
+	0x6f, 0x75, 0x72, 0x63, 0x65, 0x73, 0x18, 0x02, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x15, 0x2e, 0x70,
+	0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x52, 0x65, 0x73, 0x6f, 0x75,
+	0x72, 0x63, 0x65, 0x52, 0x09, 0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x73, 0x12, 0x3a,
+	0x0a, 0x0a, 0x70, 0x61, 0x72, 0x61, 0x6d, 0x65, 0x74, 0x65, 0x72, 0x73, 0x18, 0x03, 0x20, 0x03,
+	0x28, 0x0b, 0x32, 0x1a, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72,
+	0x2e, 0x52, 0x69, 0x63, 0x68, 0x50, 0x61, 0x72, 0x61, 0x6d, 0x65, 0x74, 0x65, 0x72, 0x52, 0x0a,
+	0x70, 0x61, 0x72, 0x61, 0x6d, 0x65, 0x74, 0x65, 0x72, 0x73, 0x12, 0x61, 0x0a, 0x17, 0x65, 0x78,
+	0x74, 0x65, 0x72, 0x6e, 0x61, 0x6c, 0x5f, 0x61, 0x75, 0x74, 0x68, 0x5f, 0x70, 0x72, 0x6f, 0x76,
+	0x69, 0x64, 0x65, 0x72, 0x73, 0x18, 0x04, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x29, 0x2e, 0x70, 0x72,
+	0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x45, 0x78, 0x74, 0x65, 0x72, 0x6e,
+	0x61, 0x6c, 0x41, 0x75, 0x74, 0x68, 0x50, 0x72, 0x6f, 0x76, 0x69, 0x64, 0x65, 0x72, 0x52, 0x65,
+	0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x52, 0x15, 0x65, 0x78, 0x74, 0x65, 0x72, 0x6e, 0x61, 0x6c,
+	0x41, 0x75, 0x74, 0x68, 0x50, 0x72, 0x6f, 0x76, 0x69, 0x64, 0x65, 0x72, 0x73, 0x12, 0x2d, 0x0a,
+	0x07, 0x74, 0x69, 0x6d, 0x69, 0x6e, 0x67, 0x73, 0x18, 0x06, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x13,
+	0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x54, 0x69, 0x6d,
+	0x69, 0x6e, 0x67, 0x52, 0x07, 0x74, 0x69, 0x6d, 0x69, 0x6e, 0x67, 0x73, 0x12, 0x2d, 0x0a, 0x07,
+	0x6d, 0x6f, 0x64, 0x75, 0x6c, 0x65, 0x73, 0x18, 0x07, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x13, 0x2e,
+	0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x4d, 0x6f, 0x64, 0x75,
+	0x6c, 0x65, 0x52, 0x07, 0x6d, 0x6f, 0x64, 0x75, 0x6c, 0x65, 0x73, 0x12, 0x2d, 0x0a, 0x07, 0x70,
+	0x72, 0x65, 0x73, 0x65, 0x74, 0x73, 0x18, 0x08, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x13, 0x2e, 0x70,
+	0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x50, 0x72, 0x65, 0x73, 0x65,
+	0x74, 0x52, 0x07, 0x70, 0x72, 0x65, 0x73, 0x65, 0x74, 0x73, 0x12, 0x12, 0x0a, 0x04, 0x70, 0x6c,
+	0x61, 0x6e, 0x18, 0x09, 0x20, 0x01, 0x28, 0x0c, 0x52, 0x04, 0x70, 0x6c, 0x61, 0x6e, 0x22, 0x41,
+	0x0a, 0x0c, 0x41, 0x70, 0x70, 0x6c, 0x79, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x12, 0x31,
+	0x0a, 0x08, 0x6d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b,
+	0x32, 0x15, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x4d,
+	0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x52, 0x08, 0x6d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74,
+	0x61, 0x22, 0xbe, 0x02, 0x0a, 0x0d, 0x41, 0x70, 0x70, 0x6c, 0x79, 0x43, 0x6f, 0x6d, 0x70, 0x6c,
+	0x65, 0x74, 0x65, 0x12, 0x14, 0x0a, 0x05, 0x73, 0x74, 0x61, 0x74, 0x65, 0x18, 0x01, 0x20, 0x01,
+	0x28, 0x0c, 0x52, 0x05, 0x73, 0x74, 0x61, 0x74, 0x65, 0x12, 0x14, 0x0a, 0x05, 0x65, 0x72, 0x72,
+	0x6f, 0x72, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x52, 0x05, 0x65, 0x72, 0x72, 0x6f, 0x72, 0x12,
+	0x33, 0x0a, 0x09, 0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x73, 0x18, 0x03, 0x20, 0x03,
 	0x28, 0x0b, 0x32, 0x15, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72,
-	0x2e, 0x4d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x52, 0x08, 0x6d, 0x65, 0x74, 0x61, 0x64,
-	0x61, 0x74, 0x61, 0x22, 0xbe, 0x02, 0x0a, 0x0d, 0x41, 0x70, 0x70, 0x6c, 0x79, 0x43, 0x6f, 0x6d,
-	0x70, 0x6c, 0x65, 0x74, 0x65, 0x12, 0x14, 0x0a, 0x05, 0x73, 0x74, 0x61, 0x74, 0x65, 0x18, 0x01,
-	0x20, 0x01, 0x28, 0x0c, 0x52, 0x05, 0x73, 0x74, 0x61, 0x74, 0x65, 0x12, 0x14, 0x0a, 0x05, 0x65,
-	0x72, 0x72, 0x6f, 0x72, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x52, 0x05, 0x65, 0x72, 0x72, 0x6f,
-	0x72, 0x12, 0x33, 0x0a, 0x09, 0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x73, 0x18, 0x03,
-	0x20, 0x03, 0x28, 0x0b, 0x32, 0x15, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e,
-	0x65, 0x72, 0x2e, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x52, 0x09, 0x72, 0x65, 0x73,
-	0x6f, 0x75, 0x72, 0x63, 0x65, 0x73, 0x12, 0x3a, 0x0a, 0x0a, 0x70, 0x61, 0x72, 0x61, 0x6d, 0x65,
-	0x74, 0x65, 0x72, 0x73, 0x18, 0x04, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x1a, 0x2e, 0x70, 0x72, 0x6f,
-	0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x52, 0x69, 0x63, 0x68, 0x50, 0x61, 0x72,
-	0x61, 0x6d, 0x65, 0x74, 0x65, 0x72, 0x52, 0x0a, 0x70, 0x61, 0x72, 0x61, 0x6d, 0x65, 0x74, 0x65,
-	0x72, 0x73, 0x12, 0x61, 0x0a, 0x17, 0x65, 0x78, 0x74, 0x65, 0x72, 0x6e, 0x61, 0x6c, 0x5f, 0x61,
-	0x75, 0x74, 0x68, 0x5f, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x64, 0x65, 0x72, 0x73, 0x18, 0x05, 0x20,
-	0x03, 0x28, 0x0b, 0x32, 0x29, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65,
-	0x72, 0x2e, 0x45, 0x78, 0x74, 0x65, 0x72, 0x6e, 0x61, 0x6c, 0x41, 0x75, 0x74, 0x68, 0x50, 0x72,
-	0x6f, 0x76, 0x69, 0x64, 0x65, 0x72, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x52, 0x15,
-	0x65, 0x78, 0x74, 0x65, 0x72, 0x6e, 0x61, 0x6c, 0x41, 0x75, 0x74, 0x68, 0x50, 0x72, 0x6f, 0x76,
-	0x69, 0x64, 0x65, 0x72, 0x73, 0x12, 0x2d, 0x0a, 0x07, 0x74, 0x69, 0x6d, 0x69, 0x6e, 0x67, 0x73,
-	0x18, 0x06, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x13, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69,
-	0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x54, 0x69, 0x6d, 0x69, 0x6e, 0x67, 0x52, 0x07, 0x74, 0x69, 0x6d,
-	0x69, 0x6e, 0x67, 0x73, 0x22, 0xfa, 0x01, 0x0a, 0x06, 0x54, 0x69, 0x6d, 0x69, 0x6e, 0x67, 0x12,
-	0x30, 0x0a, 0x05, 0x73, 0x74, 0x61, 0x72, 0x74, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1a,
-	0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66,
-	0x2e, 0x54, 0x69, 0x6d, 0x65, 0x73, 0x74, 0x61, 0x6d, 0x70, 0x52, 0x05, 0x73, 0x74, 0x61, 0x72,
-	0x74, 0x12, 0x2c, 0x0a, 0x03, 0x65, 0x6e, 0x64, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1a,
-	0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66,
-	0x2e, 0x54, 0x69, 0x6d, 0x65, 0x73, 0x74, 0x61, 0x6d, 0x70, 0x52, 0x03, 0x65, 0x6e, 0x64, 0x12,
-	0x16, 0x0a, 0x06, 0x61, 0x63, 0x74, 0x69, 0x6f, 0x6e, 0x18, 0x03, 0x20, 0x01, 0x28, 0x09, 0x52,
-	0x06, 0x61, 0x63, 0x74, 0x69, 0x6f, 0x6e, 0x12, 0x16, 0x0a, 0x06, 0x73, 0x6f, 0x75, 0x72, 0x63,
-	0x65, 0x18, 0x04, 0x20, 0x01, 0x28, 0x09, 0x52, 0x06, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x12,
-	0x1a, 0x0a, 0x08, 0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x18, 0x05, 0x20, 0x01, 0x28,
-	0x09, 0x52, 0x08, 0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x12, 0x14, 0x0a, 0x05, 0x73,
-	0x74, 0x61, 0x67, 0x65, 0x18, 0x06, 0x20, 0x01, 0x28, 0x09, 0x52, 0x05, 0x73, 0x74, 0x61, 0x67,
-	0x65, 0x12, 0x2e, 0x0a, 0x05, 0x73, 0x74, 0x61, 0x74, 0x65, 0x18, 0x07, 0x20, 0x01, 0x28, 0x0e,
-	0x32, 0x18, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x54,
-	0x69, 0x6d, 0x69, 0x6e, 0x67, 0x53, 0x74, 0x61, 0x74, 0x65, 0x52, 0x05, 0x73, 0x74, 0x61, 0x74,
-	0x65, 0x22, 0x0f, 0x0a, 0x0d, 0x43, 0x61, 0x6e, 0x63, 0x65, 0x6c, 0x52, 0x65, 0x71, 0x75, 0x65,
-	0x73, 0x74, 0x22, 0x8c, 0x02, 0x0a, 0x07, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x12, 0x2d,
-	0x0a, 0x06, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x13,
-	0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x43, 0x6f, 0x6e,
-	0x66, 0x69, 0x67, 0x48, 0x00, 0x52, 0x06, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x12, 0x31, 0x0a,
-	0x05, 0x70, 0x61, 0x72, 0x73, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x19, 0x2e, 0x70,
-	0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x50, 0x61, 0x72, 0x73, 0x65,
-	0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x48, 0x00, 0x52, 0x05, 0x70, 0x61, 0x72, 0x73, 0x65,
-	0x12, 0x2e, 0x0a, 0x04, 0x70, 0x6c, 0x61, 0x6e, 0x18, 0x03, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x18,
-	0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x50, 0x6c, 0x61,
-	0x6e, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x48, 0x00, 0x52, 0x04, 0x70, 0x6c, 0x61, 0x6e,
-	0x12, 0x31, 0x0a, 0x05, 0x61, 0x70, 0x70, 0x6c, 0x79, 0x18, 0x04, 0x20, 0x01, 0x28, 0x0b, 0x32,
-	0x19, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x41, 0x70,
-	0x70, 0x6c, 0x79, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x48, 0x00, 0x52, 0x05, 0x61, 0x70,
-	0x70, 0x6c, 0x79, 0x12, 0x34, 0x0a, 0x06, 0x63, 0x61, 0x6e, 0x63, 0x65, 0x6c, 0x18, 0x05, 0x20,
-	0x01, 0x28, 0x0b, 0x32, 0x1a, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65,
-	0x72, 0x2e, 0x43, 0x61, 0x6e, 0x63, 0x65, 0x6c, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x48,
-	0x00, 0x52, 0x06, 0x63, 0x61, 0x6e, 0x63, 0x65, 0x6c, 0x42, 0x06, 0x0a, 0x04, 0x74, 0x79, 0x70,
-	0x65, 0x22, 0xd1, 0x01, 0x0a, 0x08, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x12, 0x24,
-	0x0a, 0x03, 0x6c, 0x6f, 0x67, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x10, 0x2e, 0x70, 0x72,
-	0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x4c, 0x6f, 0x67, 0x48, 0x00, 0x52,
-	0x03, 0x6c, 0x6f, 0x67, 0x12, 0x32, 0x0a, 0x05, 0x70, 0x61, 0x72, 0x73, 0x65, 0x18, 0x02, 0x20,
-	0x01, 0x28, 0x0b, 0x32, 0x1a, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65,
-	0x72, 0x2e, 0x50, 0x61, 0x72, 0x73, 0x65, 0x43, 0x6f, 0x6d, 0x70, 0x6c, 0x65, 0x74, 0x65, 0x48,
-	0x00, 0x52, 0x05, 0x70, 0x61, 0x72, 0x73, 0x65, 0x12, 0x2f, 0x0a, 0x04, 0x70, 0x6c, 0x61, 0x6e,
-	0x18, 0x03, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x19, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69,
-	0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x50, 0x6c, 0x61, 0x6e, 0x43, 0x6f, 0x6d, 0x70, 0x6c, 0x65, 0x74,
-	0x65, 0x48, 0x00, 0x52, 0x04, 0x70, 0x6c, 0x61, 0x6e, 0x12, 0x32, 0x0a, 0x05, 0x61, 0x70, 0x70,
-	0x6c, 0x79, 0x18, 0x04, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1a, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69,
-	0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x41, 0x70, 0x70, 0x6c, 0x79, 0x43, 0x6f, 0x6d, 0x70,
-	0x6c, 0x65, 0x74, 0x65, 0x48, 0x00, 0x52, 0x05, 0x61, 0x70, 0x70, 0x6c, 0x79, 0x42, 0x06, 0x0a,
-	0x04, 0x74, 0x79, 0x70, 0x65, 0x2a, 0x3f, 0x0a, 0x08, 0x4c, 0x6f, 0x67, 0x4c, 0x65, 0x76, 0x65,
-	0x6c, 0x12, 0x09, 0x0a, 0x05, 0x54, 0x52, 0x41, 0x43, 0x45, 0x10, 0x00, 0x12, 0x09, 0x0a, 0x05,
-	0x44, 0x45, 0x42, 0x55, 0x47, 0x10, 0x01, 0x12, 0x08, 0x0a, 0x04, 0x49, 0x4e, 0x46, 0x4f, 0x10,
-	0x02, 0x12, 0x08, 0x0a, 0x04, 0x57, 0x41, 0x52, 0x4e, 0x10, 0x03, 0x12, 0x09, 0x0a, 0x05, 0x45,
-	0x52, 0x52, 0x4f, 0x52, 0x10, 0x04, 0x2a, 0x3b, 0x0a, 0x0f, 0x41, 0x70, 0x70, 0x53, 0x68, 0x61,
-	0x72, 0x69, 0x6e, 0x67, 0x4c, 0x65, 0x76, 0x65, 0x6c, 0x12, 0x09, 0x0a, 0x05, 0x4f, 0x57, 0x4e,
-	0x45, 0x52, 0x10, 0x00, 0x12, 0x11, 0x0a, 0x0d, 0x41, 0x55, 0x54, 0x48, 0x45, 0x4e, 0x54, 0x49,
-	0x43, 0x41, 0x54, 0x45, 0x44, 0x10, 0x01, 0x12, 0x0a, 0x0a, 0x06, 0x50, 0x55, 0x42, 0x4c, 0x49,
-	0x43, 0x10, 0x02, 0x2a, 0x35, 0x0a, 0x09, 0x41, 0x70, 0x70, 0x4f, 0x70, 0x65, 0x6e, 0x49, 0x6e,
-	0x12, 0x0e, 0x0a, 0x06, 0x57, 0x49, 0x4e, 0x44, 0x4f, 0x57, 0x10, 0x00, 0x1a, 0x02, 0x08, 0x01,
-	0x12, 0x0f, 0x0a, 0x0b, 0x53, 0x4c, 0x49, 0x4d, 0x5f, 0x57, 0x49, 0x4e, 0x44, 0x4f, 0x57, 0x10,
-	0x01, 0x12, 0x07, 0x0a, 0x03, 0x54, 0x41, 0x42, 0x10, 0x02, 0x2a, 0x37, 0x0a, 0x13, 0x57, 0x6f,
-	0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x54, 0x72, 0x61, 0x6e, 0x73, 0x69, 0x74, 0x69, 0x6f,
-	0x6e, 0x12, 0x09, 0x0a, 0x05, 0x53, 0x54, 0x41, 0x52, 0x54, 0x10, 0x00, 0x12, 0x08, 0x0a, 0x04,
-	0x53, 0x54, 0x4f, 0x50, 0x10, 0x01, 0x12, 0x0b, 0x0a, 0x07, 0x44, 0x45, 0x53, 0x54, 0x52, 0x4f,
-	0x59, 0x10, 0x02, 0x2a, 0x35, 0x0a, 0x0b, 0x54, 0x69, 0x6d, 0x69, 0x6e, 0x67, 0x53, 0x74, 0x61,
-	0x74, 0x65, 0x12, 0x0b, 0x0a, 0x07, 0x53, 0x54, 0x41, 0x52, 0x54, 0x45, 0x44, 0x10, 0x00, 0x12,
-	0x0d, 0x0a, 0x09, 0x43, 0x4f, 0x4d, 0x50, 0x4c, 0x45, 0x54, 0x45, 0x44, 0x10, 0x01, 0x12, 0x0a,
-	0x0a, 0x06, 0x46, 0x41, 0x49, 0x4c, 0x45, 0x44, 0x10, 0x02, 0x32, 0x49, 0x0a, 0x0b, 0x50, 0x72,
-	0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x12, 0x3a, 0x0a, 0x07, 0x53, 0x65, 0x73,
-	0x73, 0x69, 0x6f, 0x6e, 0x12, 0x14, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e,
-	0x65, 0x72, 0x2e, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x1a, 0x15, 0x2e, 0x70, 0x72, 0x6f,
-	0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73,
-	0x65, 0x28, 0x01, 0x30, 0x01, 0x42, 0x30, 0x5a, 0x2e, 0x67, 0x69, 0x74, 0x68, 0x75, 0x62, 0x2e,
-	0x63, 0x6f, 0x6d, 0x2f, 0x63, 0x6f, 0x64, 0x65, 0x72, 0x2f, 0x63, 0x6f, 0x64, 0x65, 0x72, 0x2f,
-	0x76, 0x32, 0x2f, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x73, 0x64,
-	0x6b, 0x2f, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
+	0x2e, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x52, 0x09, 0x72, 0x65, 0x73, 0x6f, 0x75,
+	0x72, 0x63, 0x65, 0x73, 0x12, 0x3a, 0x0a, 0x0a, 0x70, 0x61, 0x72, 0x61, 0x6d, 0x65, 0x74, 0x65,
+	0x72, 0x73, 0x18, 0x04, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x1a, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69,
+	0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x52, 0x69, 0x63, 0x68, 0x50, 0x61, 0x72, 0x61, 0x6d,
+	0x65, 0x74, 0x65, 0x72, 0x52, 0x0a, 0x70, 0x61, 0x72, 0x61, 0x6d, 0x65, 0x74, 0x65, 0x72, 0x73,
+	0x12, 0x61, 0x0a, 0x17, 0x65, 0x78, 0x74, 0x65, 0x72, 0x6e, 0x61, 0x6c, 0x5f, 0x61, 0x75, 0x74,
+	0x68, 0x5f, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x64, 0x65, 0x72, 0x73, 0x18, 0x05, 0x20, 0x03, 0x28,
+	0x0b, 0x32, 0x29, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e,
+	0x45, 0x78, 0x74, 0x65, 0x72, 0x6e, 0x61, 0x6c, 0x41, 0x75, 0x74, 0x68, 0x50, 0x72, 0x6f, 0x76,
+	0x69, 0x64, 0x65, 0x72, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x52, 0x15, 0x65, 0x78,
+	0x74, 0x65, 0x72, 0x6e, 0x61, 0x6c, 0x41, 0x75, 0x74, 0x68, 0x50, 0x72, 0x6f, 0x76, 0x69, 0x64,
+	0x65, 0x72, 0x73, 0x12, 0x2d, 0x0a, 0x07, 0x74, 0x69, 0x6d, 0x69, 0x6e, 0x67, 0x73, 0x18, 0x06,
+	0x20, 0x03, 0x28, 0x0b, 0x32, 0x13, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e,
+	0x65, 0x72, 0x2e, 0x54, 0x69, 0x6d, 0x69, 0x6e, 0x67, 0x52, 0x07, 0x74, 0x69, 0x6d, 0x69, 0x6e,
+	0x67, 0x73, 0x22, 0xfa, 0x01, 0x0a, 0x06, 0x54, 0x69, 0x6d, 0x69, 0x6e, 0x67, 0x12, 0x30, 0x0a,
+	0x05, 0x73, 0x74, 0x61, 0x72, 0x74, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1a, 0x2e, 0x67,
+	0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x54,
+	0x69, 0x6d, 0x65, 0x73, 0x74, 0x61, 0x6d, 0x70, 0x52, 0x05, 0x73, 0x74, 0x61, 0x72, 0x74, 0x12,
+	0x2c, 0x0a, 0x03, 0x65, 0x6e, 0x64, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1a, 0x2e, 0x67,
+	0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x54,
+	0x69, 0x6d, 0x65, 0x73, 0x74, 0x61, 0x6d, 0x70, 0x52, 0x03, 0x65, 0x6e, 0x64, 0x12, 0x16, 0x0a,
+	0x06, 0x61, 0x63, 0x74, 0x69, 0x6f, 0x6e, 0x18, 0x03, 0x20, 0x01, 0x28, 0x09, 0x52, 0x06, 0x61,
+	0x63, 0x74, 0x69, 0x6f, 0x6e, 0x12, 0x16, 0x0a, 0x06, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x18,
+	0x04, 0x20, 0x01, 0x28, 0x09, 0x52, 0x06, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x12, 0x1a, 0x0a,
+	0x08, 0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x18, 0x05, 0x20, 0x01, 0x28, 0x09, 0x52,
+	0x08, 0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x12, 0x14, 0x0a, 0x05, 0x73, 0x74, 0x61,
+	0x67, 0x65, 0x18, 0x06, 0x20, 0x01, 0x28, 0x09, 0x52, 0x05, 0x73, 0x74, 0x61, 0x67, 0x65, 0x12,
+	0x2e, 0x0a, 0x05, 0x73, 0x74, 0x61, 0x74, 0x65, 0x18, 0x07, 0x20, 0x01, 0x28, 0x0e, 0x32, 0x18,
+	0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x54, 0x69, 0x6d,
+	0x69, 0x6e, 0x67, 0x53, 0x74, 0x61, 0x74, 0x65, 0x52, 0x05, 0x73, 0x74, 0x61, 0x74, 0x65, 0x22,
+	0x0f, 0x0a, 0x0d, 0x43, 0x61, 0x6e, 0x63, 0x65, 0x6c, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74,
+	0x22, 0x8c, 0x02, 0x0a, 0x07, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x12, 0x2d, 0x0a, 0x06,
+	0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x13, 0x2e, 0x70,
+	0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x43, 0x6f, 0x6e, 0x66, 0x69,
+	0x67, 0x48, 0x00, 0x52, 0x06, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x12, 0x31, 0x0a, 0x05, 0x70,
+	0x61, 0x72, 0x73, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x19, 0x2e, 0x70, 0x72, 0x6f,
+	0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x50, 0x61, 0x72, 0x73, 0x65, 0x52, 0x65,
+	0x71, 0x75, 0x65, 0x73, 0x74, 0x48, 0x00, 0x52, 0x05, 0x70, 0x61, 0x72, 0x73, 0x65, 0x12, 0x2e,
+	0x0a, 0x04, 0x70, 0x6c, 0x61, 0x6e, 0x18, 0x03, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x18, 0x2e, 0x70,
+	0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x50, 0x6c, 0x61, 0x6e, 0x52,
+	0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x48, 0x00, 0x52, 0x04, 0x70, 0x6c, 0x61, 0x6e, 0x12, 0x31,
+	0x0a, 0x05, 0x61, 0x70, 0x70, 0x6c, 0x79, 0x18, 0x04, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x19, 0x2e,
+	0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x41, 0x70, 0x70, 0x6c,
+	0x79, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x48, 0x00, 0x52, 0x05, 0x61, 0x70, 0x70, 0x6c,
+	0x79, 0x12, 0x34, 0x0a, 0x06, 0x63, 0x61, 0x6e, 0x63, 0x65, 0x6c, 0x18, 0x05, 0x20, 0x01, 0x28,
+	0x0b, 0x32, 0x1a, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e,
+	0x43, 0x61, 0x6e, 0x63, 0x65, 0x6c, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x48, 0x00, 0x52,
+	0x06, 0x63, 0x61, 0x6e, 0x63, 0x65, 0x6c, 0x42, 0x06, 0x0a, 0x04, 0x74, 0x79, 0x70, 0x65, 0x22,
+	0xd1, 0x01, 0x0a, 0x08, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x12, 0x24, 0x0a, 0x03,
+	0x6c, 0x6f, 0x67, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x10, 0x2e, 0x70, 0x72, 0x6f, 0x76,
+	0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x4c, 0x6f, 0x67, 0x48, 0x00, 0x52, 0x03, 0x6c,
+	0x6f, 0x67, 0x12, 0x32, 0x0a, 0x05, 0x70, 0x61, 0x72, 0x73, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28,
+	0x0b, 0x32, 0x1a, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e,
+	0x50, 0x61, 0x72, 0x73, 0x65, 0x43, 0x6f, 0x6d, 0x70, 0x6c, 0x65, 0x74, 0x65, 0x48, 0x00, 0x52,
+	0x05, 0x70, 0x61, 0x72, 0x73, 0x65, 0x12, 0x2f, 0x0a, 0x04, 0x70, 0x6c, 0x61, 0x6e, 0x18, 0x03,
+	0x20, 0x01, 0x28, 0x0b, 0x32, 0x19, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e,
+	0x65, 0x72, 0x2e, 0x50, 0x6c, 0x61, 0x6e, 0x43, 0x6f, 0x6d, 0x70, 0x6c, 0x65, 0x74, 0x65, 0x48,
+	0x00, 0x52, 0x04, 0x70, 0x6c, 0x61, 0x6e, 0x12, 0x32, 0x0a, 0x05, 0x61, 0x70, 0x70, 0x6c, 0x79,
+	0x18, 0x04, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1a, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69,
+	0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x41, 0x70, 0x70, 0x6c, 0x79, 0x43, 0x6f, 0x6d, 0x70, 0x6c, 0x65,
+	0x74, 0x65, 0x48, 0x00, 0x52, 0x05, 0x61, 0x70, 0x70, 0x6c, 0x79, 0x42, 0x06, 0x0a, 0x04, 0x74,
+	0x79, 0x70, 0x65, 0x2a, 0x3f, 0x0a, 0x08, 0x4c, 0x6f, 0x67, 0x4c, 0x65, 0x76, 0x65, 0x6c, 0x12,
+	0x09, 0x0a, 0x05, 0x54, 0x52, 0x41, 0x43, 0x45, 0x10, 0x00, 0x12, 0x09, 0x0a, 0x05, 0x44, 0x45,
+	0x42, 0x55, 0x47, 0x10, 0x01, 0x12, 0x08, 0x0a, 0x04, 0x49, 0x4e, 0x46, 0x4f, 0x10, 0x02, 0x12,
+	0x08, 0x0a, 0x04, 0x57, 0x41, 0x52, 0x4e, 0x10, 0x03, 0x12, 0x09, 0x0a, 0x05, 0x45, 0x52, 0x52,
+	0x4f, 0x52, 0x10, 0x04, 0x2a, 0x3b, 0x0a, 0x0f, 0x41, 0x70, 0x70, 0x53, 0x68, 0x61, 0x72, 0x69,
+	0x6e, 0x67, 0x4c, 0x65, 0x76, 0x65, 0x6c, 0x12, 0x09, 0x0a, 0x05, 0x4f, 0x57, 0x4e, 0x45, 0x52,
+	0x10, 0x00, 0x12, 0x11, 0x0a, 0x0d, 0x41, 0x55, 0x54, 0x48, 0x45, 0x4e, 0x54, 0x49, 0x43, 0x41,
+	0x54, 0x45, 0x44, 0x10, 0x01, 0x12, 0x0a, 0x0a, 0x06, 0x50, 0x55, 0x42, 0x4c, 0x49, 0x43, 0x10,
+	0x02, 0x2a, 0x35, 0x0a, 0x09, 0x41, 0x70, 0x70, 0x4f, 0x70, 0x65, 0x6e, 0x49, 0x6e, 0x12, 0x0e,
+	0x0a, 0x06, 0x57, 0x49, 0x4e, 0x44, 0x4f, 0x57, 0x10, 0x00, 0x1a, 0x02, 0x08, 0x01, 0x12, 0x0f,
+	0x0a, 0x0b, 0x53, 0x4c, 0x49, 0x4d, 0x5f, 0x57, 0x49, 0x4e, 0x44, 0x4f, 0x57, 0x10, 0x01, 0x12,
+	0x07, 0x0a, 0x03, 0x54, 0x41, 0x42, 0x10, 0x02, 0x2a, 0x37, 0x0a, 0x13, 0x57, 0x6f, 0x72, 0x6b,
+	0x73, 0x70, 0x61, 0x63, 0x65, 0x54, 0x72, 0x61, 0x6e, 0x73, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x12,
+	0x09, 0x0a, 0x05, 0x53, 0x54, 0x41, 0x52, 0x54, 0x10, 0x00, 0x12, 0x08, 0x0a, 0x04, 0x53, 0x54,
+	0x4f, 0x50, 0x10, 0x01, 0x12, 0x0b, 0x0a, 0x07, 0x44, 0x45, 0x53, 0x54, 0x52, 0x4f, 0x59, 0x10,
+	0x02, 0x2a, 0x3e, 0x0a, 0x1b, 0x50, 0x72, 0x65, 0x62, 0x75, 0x69, 0x6c, 0x74, 0x57, 0x6f, 0x72,
+	0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x42, 0x75, 0x69, 0x6c, 0x64, 0x53, 0x74, 0x61, 0x67, 0x65,
+	0x12, 0x08, 0x0a, 0x04, 0x4e, 0x4f, 0x4e, 0x45, 0x10, 0x00, 0x12, 0x0a, 0x0a, 0x06, 0x43, 0x52,
+	0x45, 0x41, 0x54, 0x45, 0x10, 0x01, 0x12, 0x09, 0x0a, 0x05, 0x43, 0x4c, 0x41, 0x49, 0x4d, 0x10,
+	0x02, 0x2a, 0x35, 0x0a, 0x0b, 0x54, 0x69, 0x6d, 0x69, 0x6e, 0x67, 0x53, 0x74, 0x61, 0x74, 0x65,
+	0x12, 0x0b, 0x0a, 0x07, 0x53, 0x54, 0x41, 0x52, 0x54, 0x45, 0x44, 0x10, 0x00, 0x12, 0x0d, 0x0a,
+	0x09, 0x43, 0x4f, 0x4d, 0x50, 0x4c, 0x45, 0x54, 0x45, 0x44, 0x10, 0x01, 0x12, 0x0a, 0x0a, 0x06,
+	0x46, 0x41, 0x49, 0x4c, 0x45, 0x44, 0x10, 0x02, 0x32, 0x49, 0x0a, 0x0b, 0x50, 0x72, 0x6f, 0x76,
+	0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x12, 0x3a, 0x0a, 0x07, 0x53, 0x65, 0x73, 0x73, 0x69,
+	0x6f, 0x6e, 0x12, 0x14, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72,
+	0x2e, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x1a, 0x15, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69,
+	0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x28,
+	0x01, 0x30, 0x01, 0x42, 0x30, 0x5a, 0x2e, 0x67, 0x69, 0x74, 0x68, 0x75, 0x62, 0x2e, 0x63, 0x6f,
+	0x6d, 0x2f, 0x63, 0x6f, 0x64, 0x65, 0x72, 0x2f, 0x63, 0x6f, 0x64, 0x65, 0x72, 0x2f, 0x76, 0x32,
+	0x2f, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x73, 0x64, 0x6b, 0x2f,
+	0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
 }
 
 var (
@@ -4060,116 +4118,118 @@ func file_provisionersdk_proto_provisioner_proto_rawDescGZIP() []byte {
 	return file_provisionersdk_proto_provisioner_proto_rawDescData
 }
 
-var file_provisionersdk_proto_provisioner_proto_enumTypes = make([]protoimpl.EnumInfo, 5)
+var file_provisionersdk_proto_provisioner_proto_enumTypes = make([]protoimpl.EnumInfo, 6)
 var file_provisionersdk_proto_provisioner_proto_msgTypes = make([]protoimpl.MessageInfo, 42)
 var file_provisionersdk_proto_provisioner_proto_goTypes = []interface{}{
 	(LogLevel)(0),                        // 0: provisioner.LogLevel
 	(AppSharingLevel)(0),                 // 1: provisioner.AppSharingLevel
 	(AppOpenIn)(0),                       // 2: provisioner.AppOpenIn
 	(WorkspaceTransition)(0),             // 3: provisioner.WorkspaceTransition
-	(TimingState)(0),                     // 4: provisioner.TimingState
-	(*Empty)(nil),                        // 5: provisioner.Empty
-	(*TemplateVariable)(nil),             // 6: provisioner.TemplateVariable
-	(*RichParameterOption)(nil),          // 7: provisioner.RichParameterOption
-	(*RichParameter)(nil),                // 8: provisioner.RichParameter
-	(*RichParameterValue)(nil),           // 9: provisioner.RichParameterValue
-	(*Prebuild)(nil),                     // 10: provisioner.Prebuild
-	(*Preset)(nil),                       // 11: provisioner.Preset
-	(*PresetParameter)(nil),              // 12: provisioner.PresetParameter
-	(*VariableValue)(nil),                // 13: provisioner.VariableValue
-	(*Log)(nil),                          // 14: provisioner.Log
-	(*InstanceIdentityAuth)(nil),         // 15: provisioner.InstanceIdentityAuth
-	(*ExternalAuthProviderResource)(nil), // 16: provisioner.ExternalAuthProviderResource
-	(*ExternalAuthProvider)(nil),         // 17: provisioner.ExternalAuthProvider
-	(*Agent)(nil),                        // 18: provisioner.Agent
-	(*ResourcesMonitoring)(nil),          // 19: provisioner.ResourcesMonitoring
-	(*MemoryResourceMonitor)(nil),        // 20: provisioner.MemoryResourceMonitor
-	(*VolumeResourceMonitor)(nil),        // 21: provisioner.VolumeResourceMonitor
-	(*DisplayApps)(nil),                  // 22: provisioner.DisplayApps
-	(*Env)(nil),                          // 23: provisioner.Env
-	(*Script)(nil),                       // 24: provisioner.Script
-	(*Devcontainer)(nil),                 // 25: provisioner.Devcontainer
-	(*App)(nil),                          // 26: provisioner.App
-	(*Healthcheck)(nil),                  // 27: provisioner.Healthcheck
-	(*Resource)(nil),                     // 28: provisioner.Resource
-	(*Module)(nil),                       // 29: provisioner.Module
-	(*Role)(nil),                         // 30: provisioner.Role
-	(*Metadata)(nil),                     // 31: provisioner.Metadata
-	(*Config)(nil),                       // 32: provisioner.Config
-	(*ParseRequest)(nil),                 // 33: provisioner.ParseRequest
-	(*ParseComplete)(nil),                // 34: provisioner.ParseComplete
-	(*PlanRequest)(nil),                  // 35: provisioner.PlanRequest
-	(*PlanComplete)(nil),                 // 36: provisioner.PlanComplete
-	(*ApplyRequest)(nil),                 // 37: provisioner.ApplyRequest
-	(*ApplyComplete)(nil),                // 38: provisioner.ApplyComplete
-	(*Timing)(nil),                       // 39: provisioner.Timing
-	(*CancelRequest)(nil),                // 40: provisioner.CancelRequest
-	(*Request)(nil),                      // 41: provisioner.Request
-	(*Response)(nil),                     // 42: provisioner.Response
-	(*Agent_Metadata)(nil),               // 43: provisioner.Agent.Metadata
-	nil,                                  // 44: provisioner.Agent.EnvEntry
-	(*Resource_Metadata)(nil),            // 45: provisioner.Resource.Metadata
-	nil,                                  // 46: provisioner.ParseComplete.WorkspaceTagsEntry
-	(*timestamppb.Timestamp)(nil),        // 47: google.protobuf.Timestamp
+	(PrebuiltWorkspaceBuildStage)(0),     // 4: provisioner.PrebuiltWorkspaceBuildStage
+	(TimingState)(0),                     // 5: provisioner.TimingState
+	(*Empty)(nil),                        // 6: provisioner.Empty
+	(*TemplateVariable)(nil),             // 7: provisioner.TemplateVariable
+	(*RichParameterOption)(nil),          // 8: provisioner.RichParameterOption
+	(*RichParameter)(nil),                // 9: provisioner.RichParameter
+	(*RichParameterValue)(nil),           // 10: provisioner.RichParameterValue
+	(*Prebuild)(nil),                     // 11: provisioner.Prebuild
+	(*Preset)(nil),                       // 12: provisioner.Preset
+	(*PresetParameter)(nil),              // 13: provisioner.PresetParameter
+	(*VariableValue)(nil),                // 14: provisioner.VariableValue
+	(*Log)(nil),                          // 15: provisioner.Log
+	(*InstanceIdentityAuth)(nil),         // 16: provisioner.InstanceIdentityAuth
+	(*ExternalAuthProviderResource)(nil), // 17: provisioner.ExternalAuthProviderResource
+	(*ExternalAuthProvider)(nil),         // 18: provisioner.ExternalAuthProvider
+	(*Agent)(nil),                        // 19: provisioner.Agent
+	(*ResourcesMonitoring)(nil),          // 20: provisioner.ResourcesMonitoring
+	(*MemoryResourceMonitor)(nil),        // 21: provisioner.MemoryResourceMonitor
+	(*VolumeResourceMonitor)(nil),        // 22: provisioner.VolumeResourceMonitor
+	(*DisplayApps)(nil),                  // 23: provisioner.DisplayApps
+	(*Env)(nil),                          // 24: provisioner.Env
+	(*Script)(nil),                       // 25: provisioner.Script
+	(*Devcontainer)(nil),                 // 26: provisioner.Devcontainer
+	(*App)(nil),                          // 27: provisioner.App
+	(*Healthcheck)(nil),                  // 28: provisioner.Healthcheck
+	(*Resource)(nil),                     // 29: provisioner.Resource
+	(*Module)(nil),                       // 30: provisioner.Module
+	(*Role)(nil),                         // 31: provisioner.Role
+	(*Metadata)(nil),                     // 32: provisioner.Metadata
+	(*Config)(nil),                       // 33: provisioner.Config
+	(*ParseRequest)(nil),                 // 34: provisioner.ParseRequest
+	(*ParseComplete)(nil),                // 35: provisioner.ParseComplete
+	(*PlanRequest)(nil),                  // 36: provisioner.PlanRequest
+	(*PlanComplete)(nil),                 // 37: provisioner.PlanComplete
+	(*ApplyRequest)(nil),                 // 38: provisioner.ApplyRequest
+	(*ApplyComplete)(nil),                // 39: provisioner.ApplyComplete
+	(*Timing)(nil),                       // 40: provisioner.Timing
+	(*CancelRequest)(nil),                // 41: provisioner.CancelRequest
+	(*Request)(nil),                      // 42: provisioner.Request
+	(*Response)(nil),                     // 43: provisioner.Response
+	(*Agent_Metadata)(nil),               // 44: provisioner.Agent.Metadata
+	nil,                                  // 45: provisioner.Agent.EnvEntry
+	(*Resource_Metadata)(nil),            // 46: provisioner.Resource.Metadata
+	nil,                                  // 47: provisioner.ParseComplete.WorkspaceTagsEntry
+	(*timestamppb.Timestamp)(nil),        // 48: google.protobuf.Timestamp
 }
 var file_provisionersdk_proto_provisioner_proto_depIdxs = []int32{
-	7,  // 0: provisioner.RichParameter.options:type_name -> provisioner.RichParameterOption
-	12, // 1: provisioner.Preset.parameters:type_name -> provisioner.PresetParameter
-	10, // 2: provisioner.Preset.prebuild:type_name -> provisioner.Prebuild
+	8,  // 0: provisioner.RichParameter.options:type_name -> provisioner.RichParameterOption
+	13, // 1: provisioner.Preset.parameters:type_name -> provisioner.PresetParameter
+	11, // 2: provisioner.Preset.prebuild:type_name -> provisioner.Prebuild
 	0,  // 3: provisioner.Log.level:type_name -> provisioner.LogLevel
-	44, // 4: provisioner.Agent.env:type_name -> provisioner.Agent.EnvEntry
-	26, // 5: provisioner.Agent.apps:type_name -> provisioner.App
-	43, // 6: provisioner.Agent.metadata:type_name -> provisioner.Agent.Metadata
-	22, // 7: provisioner.Agent.display_apps:type_name -> provisioner.DisplayApps
-	24, // 8: provisioner.Agent.scripts:type_name -> provisioner.Script
-	23, // 9: provisioner.Agent.extra_envs:type_name -> provisioner.Env
-	19, // 10: provisioner.Agent.resources_monitoring:type_name -> provisioner.ResourcesMonitoring
-	25, // 11: provisioner.Agent.devcontainers:type_name -> provisioner.Devcontainer
-	20, // 12: provisioner.ResourcesMonitoring.memory:type_name -> provisioner.MemoryResourceMonitor
-	21, // 13: provisioner.ResourcesMonitoring.volumes:type_name -> provisioner.VolumeResourceMonitor
-	27, // 14: provisioner.App.healthcheck:type_name -> provisioner.Healthcheck
+	45, // 4: provisioner.Agent.env:type_name -> provisioner.Agent.EnvEntry
+	27, // 5: provisioner.Agent.apps:type_name -> provisioner.App
+	44, // 6: provisioner.Agent.metadata:type_name -> provisioner.Agent.Metadata
+	23, // 7: provisioner.Agent.display_apps:type_name -> provisioner.DisplayApps
+	25, // 8: provisioner.Agent.scripts:type_name -> provisioner.Script
+	24, // 9: provisioner.Agent.extra_envs:type_name -> provisioner.Env
+	20, // 10: provisioner.Agent.resources_monitoring:type_name -> provisioner.ResourcesMonitoring
+	26, // 11: provisioner.Agent.devcontainers:type_name -> provisioner.Devcontainer
+	21, // 12: provisioner.ResourcesMonitoring.memory:type_name -> provisioner.MemoryResourceMonitor
+	22, // 13: provisioner.ResourcesMonitoring.volumes:type_name -> provisioner.VolumeResourceMonitor
+	28, // 14: provisioner.App.healthcheck:type_name -> provisioner.Healthcheck
 	1,  // 15: provisioner.App.sharing_level:type_name -> provisioner.AppSharingLevel
 	2,  // 16: provisioner.App.open_in:type_name -> provisioner.AppOpenIn
-	18, // 17: provisioner.Resource.agents:type_name -> provisioner.Agent
-	45, // 18: provisioner.Resource.metadata:type_name -> provisioner.Resource.Metadata
+	19, // 17: provisioner.Resource.agents:type_name -> provisioner.Agent
+	46, // 18: provisioner.Resource.metadata:type_name -> provisioner.Resource.Metadata
 	3,  // 19: provisioner.Metadata.workspace_transition:type_name -> provisioner.WorkspaceTransition
-	30, // 20: provisioner.Metadata.workspace_owner_rbac_roles:type_name -> provisioner.Role
-	6,  // 21: provisioner.ParseComplete.template_variables:type_name -> provisioner.TemplateVariable
-	46, // 22: provisioner.ParseComplete.workspace_tags:type_name -> provisioner.ParseComplete.WorkspaceTagsEntry
-	31, // 23: provisioner.PlanRequest.metadata:type_name -> provisioner.Metadata
-	9,  // 24: provisioner.PlanRequest.rich_parameter_values:type_name -> provisioner.RichParameterValue
-	13, // 25: provisioner.PlanRequest.variable_values:type_name -> provisioner.VariableValue
-	17, // 26: provisioner.PlanRequest.external_auth_providers:type_name -> provisioner.ExternalAuthProvider
-	28, // 27: provisioner.PlanComplete.resources:type_name -> provisioner.Resource
-	8,  // 28: provisioner.PlanComplete.parameters:type_name -> provisioner.RichParameter
-	16, // 29: provisioner.PlanComplete.external_auth_providers:type_name -> provisioner.ExternalAuthProviderResource
-	39, // 30: provisioner.PlanComplete.timings:type_name -> provisioner.Timing
-	29, // 31: provisioner.PlanComplete.modules:type_name -> provisioner.Module
-	11, // 32: provisioner.PlanComplete.presets:type_name -> provisioner.Preset
-	31, // 33: provisioner.ApplyRequest.metadata:type_name -> provisioner.Metadata
-	28, // 34: provisioner.ApplyComplete.resources:type_name -> provisioner.Resource
-	8,  // 35: provisioner.ApplyComplete.parameters:type_name -> provisioner.RichParameter
-	16, // 36: provisioner.ApplyComplete.external_auth_providers:type_name -> provisioner.ExternalAuthProviderResource
-	39, // 37: provisioner.ApplyComplete.timings:type_name -> provisioner.Timing
-	47, // 38: provisioner.Timing.start:type_name -> google.protobuf.Timestamp
-	47, // 39: provisioner.Timing.end:type_name -> google.protobuf.Timestamp
-	4,  // 40: provisioner.Timing.state:type_name -> provisioner.TimingState
-	32, // 41: provisioner.Request.config:type_name -> provisioner.Config
-	33, // 42: provisioner.Request.parse:type_name -> provisioner.ParseRequest
-	35, // 43: provisioner.Request.plan:type_name -> provisioner.PlanRequest
-	37, // 44: provisioner.Request.apply:type_name -> provisioner.ApplyRequest
-	40, // 45: provisioner.Request.cancel:type_name -> provisioner.CancelRequest
-	14, // 46: provisioner.Response.log:type_name -> provisioner.Log
-	34, // 47: provisioner.Response.parse:type_name -> provisioner.ParseComplete
-	36, // 48: provisioner.Response.plan:type_name -> provisioner.PlanComplete
-	38, // 49: provisioner.Response.apply:type_name -> provisioner.ApplyComplete
-	41, // 50: provisioner.Provisioner.Session:input_type -> provisioner.Request
-	42, // 51: provisioner.Provisioner.Session:output_type -> provisioner.Response
-	51, // [51:52] is the sub-list for method output_type
-	50, // [50:51] is the sub-list for method input_type
-	50, // [50:50] is the sub-list for extension type_name
-	50, // [50:50] is the sub-list for extension extendee
-	0,  // [0:50] is the sub-list for field type_name
+	31, // 20: provisioner.Metadata.workspace_owner_rbac_roles:type_name -> provisioner.Role
+	4,  // 21: provisioner.Metadata.prebuilt_workspace_build_stage:type_name -> provisioner.PrebuiltWorkspaceBuildStage
+	7,  // 22: provisioner.ParseComplete.template_variables:type_name -> provisioner.TemplateVariable
+	47, // 23: provisioner.ParseComplete.workspace_tags:type_name -> provisioner.ParseComplete.WorkspaceTagsEntry
+	32, // 24: provisioner.PlanRequest.metadata:type_name -> provisioner.Metadata
+	10, // 25: provisioner.PlanRequest.rich_parameter_values:type_name -> provisioner.RichParameterValue
+	14, // 26: provisioner.PlanRequest.variable_values:type_name -> provisioner.VariableValue
+	18, // 27: provisioner.PlanRequest.external_auth_providers:type_name -> provisioner.ExternalAuthProvider
+	29, // 28: provisioner.PlanComplete.resources:type_name -> provisioner.Resource
+	9,  // 29: provisioner.PlanComplete.parameters:type_name -> provisioner.RichParameter
+	17, // 30: provisioner.PlanComplete.external_auth_providers:type_name -> provisioner.ExternalAuthProviderResource
+	40, // 31: provisioner.PlanComplete.timings:type_name -> provisioner.Timing
+	30, // 32: provisioner.PlanComplete.modules:type_name -> provisioner.Module
+	12, // 33: provisioner.PlanComplete.presets:type_name -> provisioner.Preset
+	32, // 34: provisioner.ApplyRequest.metadata:type_name -> provisioner.Metadata
+	29, // 35: provisioner.ApplyComplete.resources:type_name -> provisioner.Resource
+	9,  // 36: provisioner.ApplyComplete.parameters:type_name -> provisioner.RichParameter
+	17, // 37: provisioner.ApplyComplete.external_auth_providers:type_name -> provisioner.ExternalAuthProviderResource
+	40, // 38: provisioner.ApplyComplete.timings:type_name -> provisioner.Timing
+	48, // 39: provisioner.Timing.start:type_name -> google.protobuf.Timestamp
+	48, // 40: provisioner.Timing.end:type_name -> google.protobuf.Timestamp
+	5,  // 41: provisioner.Timing.state:type_name -> provisioner.TimingState
+	33, // 42: provisioner.Request.config:type_name -> provisioner.Config
+	34, // 43: provisioner.Request.parse:type_name -> provisioner.ParseRequest
+	36, // 44: provisioner.Request.plan:type_name -> provisioner.PlanRequest
+	38, // 45: provisioner.Request.apply:type_name -> provisioner.ApplyRequest
+	41, // 46: provisioner.Request.cancel:type_name -> provisioner.CancelRequest
+	15, // 47: provisioner.Response.log:type_name -> provisioner.Log
+	35, // 48: provisioner.Response.parse:type_name -> provisioner.ParseComplete
+	37, // 49: provisioner.Response.plan:type_name -> provisioner.PlanComplete
+	39, // 50: provisioner.Response.apply:type_name -> provisioner.ApplyComplete
+	42, // 51: provisioner.Provisioner.Session:input_type -> provisioner.Request
+	43, // 52: provisioner.Provisioner.Session:output_type -> provisioner.Response
+	52, // [52:53] is the sub-list for method output_type
+	51, // [51:52] is the sub-list for method input_type
+	51, // [51:51] is the sub-list for extension type_name
+	51, // [51:51] is the sub-list for extension extendee
+	0,  // [0:51] is the sub-list for field type_name
 }
 
 func init() { file_provisionersdk_proto_provisioner_proto_init() }
@@ -4682,7 +4742,7 @@ func file_provisionersdk_proto_provisioner_proto_init() {
 		File: protoimpl.DescBuilder{
 			GoPackagePath: reflect.TypeOf(x{}).PkgPath(),
 			RawDescriptor: file_provisionersdk_proto_provisioner_proto_rawDesc,
-			NumEnums:      5,
+			NumEnums:      6,
 			NumMessages:   42,
 			NumExtensions: 0,
 			NumServices:   1,
diff --git a/provisionersdk/proto/provisioner.proto b/provisionersdk/proto/provisioner.proto
index 3e6841fb24450..9972b3ea148ac 100644
--- a/provisionersdk/proto/provisioner.proto
+++ b/provisionersdk/proto/provisioner.proto
@@ -272,6 +272,12 @@ message Role {
     string org_id = 2;
 }
 
+enum PrebuiltWorkspaceBuildStage {
+	NONE = 0;   // Default value for builds unrelated to prebuilds.
+	CREATE = 1; // A prebuilt workspace is being provisioned.
+	CLAIM = 2;  // A prebuilt workspace is being claimed.
+}
+
 // Metadata is information about a workspace used in the execution of a build
 message Metadata {
     string coder_url = 1;
@@ -293,8 +299,8 @@ message Metadata {
     string workspace_build_id = 17;
     string workspace_owner_login_type =  18;
     repeated Role workspace_owner_rbac_roles = 19;
-    bool is_prebuild = 20;
-    string running_workspace_agent_token = 21;
+    PrebuiltWorkspaceBuildStage prebuilt_workspace_build_stage = 20; // Indicates that a prebuilt workspace is being built.
+    string running_workspace_agent_token = 21;                       // Preserves the running agent token of a prebuilt workspace so it can reinitialize.
 }
 
 // Config represents execution configuration shared by all subsequent requests in the Session
diff --git a/site/e2e/provisionerGenerated.ts b/site/e2e/provisionerGenerated.ts
index cea6f9cb364af..4090017996598 100644
--- a/site/e2e/provisionerGenerated.ts
+++ b/site/e2e/provisionerGenerated.ts
@@ -38,6 +38,16 @@ export enum WorkspaceTransition {
   UNRECOGNIZED = -1,
 }
 
+export enum PrebuiltWorkspaceBuildStage {
+  /** NONE - Default value for builds unrelated to prebuilds. */
+  NONE = 0,
+  /** CREATE - A prebuilt workspace is being provisioned. */
+  CREATE = 1,
+  /** CLAIM - A prebuilt workspace is being claimed. */
+  CLAIM = 2,
+  UNRECOGNIZED = -1,
+}
+
 export enum TimingState {
   STARTED = 0,
   COMPLETED = 1,
@@ -307,7 +317,9 @@ export interface Metadata {
   workspaceBuildId: string;
   workspaceOwnerLoginType: string;
   workspaceOwnerRbacRoles: Role[];
-  isPrebuild: boolean;
+  /** Indicates that a prebuilt workspace is being built. */
+  prebuiltWorkspaceBuildStage: PrebuiltWorkspaceBuildStage;
+  /** Preserves the running agent token of a prebuilt workspace so it can reinitialize. */
   runningWorkspaceAgentToken: string;
 }
 
@@ -1027,8 +1039,8 @@ export const Metadata = {
     for (const v of message.workspaceOwnerRbacRoles) {
       Role.encode(v!, writer.uint32(154).fork()).ldelim();
     }
-    if (message.isPrebuild === true) {
-      writer.uint32(160).bool(message.isPrebuild);
+    if (message.prebuiltWorkspaceBuildStage !== 0) {
+      writer.uint32(160).int32(message.prebuiltWorkspaceBuildStage);
     }
     if (message.runningWorkspaceAgentToken !== "") {
       writer.uint32(170).string(message.runningWorkspaceAgentToken);

From ca314bafc4c75f298c8dd387d7ceac98522112a8 Mon Sep 17 00:00:00 2001
From: Danny Kopping <danny@coder.com>
Date: Fri, 9 May 2025 09:26:35 +0200
Subject: [PATCH 2/7] chore: add prebuild docs (#17580)

Partially addresses https://github.com/coder/internal/issues/593
---
 .../prebuilt-workspaces.md                    | 203 ++++++++++++++++++
 .../prebuilt/prebuilt-workspaces.png          | Bin 0 -> 41287 bytes
 .../prebuilt/replacement-notification.png     | Bin 0 -> 73977 bytes
 docs/manifest.json                            |   6 +
 4 files changed, 209 insertions(+)
 create mode 100644 docs/admin/templates/extending-templates/prebuilt-workspaces.md
 create mode 100644 docs/images/admin/templates/extend-templates/prebuilt/prebuilt-workspaces.png
 create mode 100644 docs/images/admin/templates/extend-templates/prebuilt/replacement-notification.png

diff --git a/docs/admin/templates/extending-templates/prebuilt-workspaces.md b/docs/admin/templates/extending-templates/prebuilt-workspaces.md
new file mode 100644
index 0000000000000..bbff3b7f15747
--- /dev/null
+++ b/docs/admin/templates/extending-templates/prebuilt-workspaces.md
@@ -0,0 +1,203 @@
+# Prebuilt workspaces
+
+Prebuilt workspaces allow template administrators to improve the developer experience by reducing workspace
+creation time with an automatically maintained pool of ready-to-use workspaces for specific parameter presets.
+
+The template administrator configures a template to provision prebuilt workspaces in the background, and then when a developer creates
+a new workspace that matches the preset, Coder assigns them an existing prebuilt instance.
+Prebuilt workspaces significantly reduce wait times, especially for templates with complex provisioning or lengthy startup procedures.
+
+Prebuilt workspaces are:
+
+- Created and maintained automatically by Coder to match your specified preset configurations.
+- Claimed transparently when developers create workspaces.
+- Monitored and replaced automatically to maintain your desired pool size.
+
+## Relationship to workspace presets
+
+Prebuilt workspaces are tightly integrated with [workspace presets](./parameters.md#workspace-presets-beta):
+
+1. Each prebuilt workspace is associated with a specific template preset.
+1. The preset must define all required parameters needed to build the workspace.
+1. The preset parameters define the base configuration and are immutable once a prebuilt workspace is provisioned.
+1. Parameters that are not defined in the preset can still be customized by users when they claim a workspace.
+
+## Prerequisites
+
+- [**Premium license**](../../licensing/index.md)
+- **Compatible Terraform provider**: Use `coder/coder` Terraform provider `>= 2.4.0`.
+- **Feature flag**: Enable the `workspace-prebuilds` [experiment](../../../reference/cli/server.md#--experiments).
+
+## Enable prebuilt workspaces for template presets
+
+In your template, add a `prebuilds` block within a `coder_workspace_preset` definition to identify the number of prebuilt
+instances your Coder deployment should maintain:
+
+   ```hcl
+   data "coder_workspace_preset" "goland" {
+     name = "GoLand: Large"
+     parameters = {
+       jetbrains_ide = "GO"
+       cpus          = 8
+       memory        = 16
+     }
+     prebuilds {
+       instances = 3  # Number of prebuilt workspaces to maintain
+     }
+   }
+   ```
+
+After you publish a new template version, Coder will automatically provision and maintain prebuilt workspaces through an
+internal reconciliation loop (similar to Kubernetes) to ensure the defined `instances` count are running.
+
+## Prebuilt workspace lifecycle
+
+Prebuilt workspaces follow a specific lifecycle from creation through eligibility to claiming.
+
+1. After you configure a preset with prebuilds and publish the template, Coder provisions the prebuilt workspace(s).
+
+   1. Coder automatically creates the defined `instances` count of prebuilt workspaces.
+   1. Each new prebuilt workspace is initially owned by an unprivileged system pseudo-user named `prebuilds`.
+      - The `prebuilds` user belongs to the `Everyone` group (you can add it to additional groups if needed).
+   1. Each prebuilt workspace receives a randomly generated name for identification.
+   1. The workspace is provisioned like a regular workspace; only its ownership distinguishes it as a prebuilt workspace.
+
+1. Prebuilt workspaces start up and become eligible to be claimed by a developer.
+
+   Before a prebuilt workspace is available to users:
+
+   1. The workspace is provisioned.
+   1. The agent starts up and connects to coderd.
+   1. The agent starts its bootstrap procedures and completes its startup scripts.
+   1. The agent reports `ready` status.
+
+      After the agent reports `ready`, the prebuilt workspace considered eligible to be claimed.
+
+   Prebuilt workspaces that fail during provisioning are retried with a backoff to prevent transient failures.
+
+1. When a developer requests a new workspace, the claiming process occurs:
+
+   1. Developer selects a template and preset that has prebuilt workspaces configured.
+   1. If an eligible prebuilt workspace exists, ownership transfers from the `prebuilds` user to the requesting user.
+   1. The workspace name changes to the user's requested name.
+   1. `terraform apply` is executed using the new ownership details, which may affect the [`coder_workspace`](https://registry.terraform.io/providers/coder/coder/latest/docs/data-sources/workspace) and
+      [`coder_workspace_owner`](https://registry.terraform.io/providers/coder/coder/latest/docs/data-sources/workspace_owner)
+      datasources (see [Preventing resource replacement](#preventing-resource-replacement) for further considerations).
+
+   The developer doesn't see the claiming process — the workspace will just be ready faster than usual.
+
+You can view available prebuilt workspaces in the **Workspaces** view in the Coder dashboard:
+
+![A prebuilt workspace in the dashboard](../../../images/admin/templates/extend-templates/prebuilt/prebuilt-workspaces.png)
+_Note the search term `owner:prebuilds`._
+
+### Template updates and the prebuilt workspace lifecycle
+
+Prebuilt workspaces are not updated after they are provisioned.
+
+When a template's active version is updated:
+
+1. Prebuilt workspaces for old versions are automatically deleted.
+1. New prebuilt workspaces are created for the active template version.
+1. If dependencies change (e.g., an [AMI](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/AMIs.html) update) without a template version change:
+   - You may delete the existing prebuilt workspaces manually.
+   - Coder will automatically create new prebuilt workspaces with the updated dependencies.
+
+The system always maintains the desired number of prebuilt workspaces for the active template version.
+
+## Administration and troubleshooting
+
+### Managing resource quotas
+
+Prebuilt workspaces can be used in conjunction with [resource quotas](../../users/quotas.md).
+Because unclaimed prebuilt workspaces are owned by the `prebuilds` user, you can:
+
+1. Configure quotas for any group that includes this user.
+1. Set appropriate limits to balance prebuilt workspace availability with resource constraints.
+
+If a quota is exceeded, the prebuilt workspace will fail provisioning the same way other workspaces do.
+
+### Template configuration best practices
+
+#### Preventing resource replacement
+
+When a prebuilt workspace is claimed, another `terraform apply` run occurs with new values for the workspace owner and name.
+
+This can cause issues in the following scenario:
+
+1. The workspace is initially created with values from the `prebuilds` user and a random name.
+1. After claiming, various workspace properties change (ownership, name, and potentially other values), which Terraform sees as configuration drift.
+1. If these values are used in immutable fields, Terraform will destroy and recreate the resource, eliminating the benefit of prebuilds.
+
+For example, when these values are used in immutable fields like the AWS instance `user_data`, you'll see resource replacement during claiming:
+
+![Resource replacement notification](../../../images/admin/templates/extend-templates/prebuilt/replacement-notification.png)
+
+To prevent this, add a `lifecycle` block with `ignore_changes`:
+
+```hcl
+resource "docker_container" "workspace" {
+  lifecycle {
+    ignore_changes = all
+  }
+
+  count = data.coder_workspace.me.start_count
+  name  = "coder-${data.coder_workspace_owner.me.name}-${lower(data.coder_workspace.me.name)}"
+  ...
+}
+```
+
+For more targeted control, specify which attributes to ignore:
+
+```hcl
+resource "docker_container" "workspace" {
+  lifecycle {
+    ignore_changes = [name]
+  }
+
+  count = data.coder_workspace.me.start_count
+  name  = "coder-${data.coder_workspace_owner.me.name}-${lower(data.coder_workspace.me.name)}"
+  ...
+}
+```
+
+Learn more about `ignore_changes` in the [Terraform documentation](https://developer.hashicorp.com/terraform/language/meta-arguments/lifecycle#ignore_changes).
+
+### Current limitations
+
+The prebuilt workspaces feature has these current limitations:
+
+- **Organizations**
+
+  Prebuilt workspaces can only be used with the default organization.
+
+  [coder/internal#364](https://github.com/coder/internal/issues/364)
+
+- **Autoscaling**
+
+  Prebuilt workspaces remain running until claimed. There's no automated mechanism to reduce instances during off-hours.
+
+  [coder/internal#312](https://github.com/coder/internal/issues/312)
+
+### Monitoring and observability
+
+#### Available metrics
+
+Coder provides several metrics to monitor your prebuilt workspaces:
+
+- `coderd_prebuilt_workspaces_created_total` (counter): Total number of prebuilt workspaces created to meet the desired instance count.
+- `coderd_prebuilt_workspaces_failed_total` (counter): Total number of prebuilt workspaces that failed to build.
+- `coderd_prebuilt_workspaces_claimed_total` (counter): Total number of prebuilt workspaces claimed by users.
+- `coderd_prebuilt_workspaces_desired` (gauge): Target number of prebuilt workspaces that should be available.
+- `coderd_prebuilt_workspaces_running` (gauge): Current number of prebuilt workspaces in a `running` state.
+- `coderd_prebuilt_workspaces_eligible` (gauge): Current number of prebuilt workspaces eligible to be claimed.
+
+#### Logs
+
+Search for `coderd.prebuilds:` in your logs to track the reconciliation loop's behavior.
+
+These logs provide information about:
+
+1. Creation and deletion attempts for prebuilt workspaces.
+1. Backoff events after failed builds.
+1. Claiming operations.
diff --git a/docs/images/admin/templates/extend-templates/prebuilt/prebuilt-workspaces.png b/docs/images/admin/templates/extend-templates/prebuilt/prebuilt-workspaces.png
new file mode 100644
index 0000000000000000000000000000000000000000..59d11d6ed76226c7d1787f6b9d681c72737581de
GIT binary patch
literal 41287
zcmeF3Wmr_*8utN35Cat{5l|G7M!G>k5Gj%F2I(9+6+uZQrKGzX2ADyS?#>~lW9S-&
zc^A)lJm)!2T<?eX!~5lUUFx3Md#|<T-Yf3={{Png_)1Rl8o?a`EG(>RQZK|`V`1S2
zV_{+I;a>vZkeLWQ0Uy-O#Kc}niHY5NWp86*W@(It_4qU7Q;9T=K3Q{;bmNPFWR34L
zZx}h7%pKWqulTJqWM5hl+_)--KG~#s>wgDv#{&P3hUSBWI}gTFX_l$qTz~kYW~wJo
zE=btL)mu<-x})*J-d;{HxenGsU{lmyejT)u1*J3l{D$yVntby|(ne+Er8Dl%@a6{(
zOOTCoDlDXCRFf>?uOG~l5^l#g!p{mvbRWmv*?1(YWH^bFe#6db#Nh4W#{k~<G{U#?
z1w2@Ikz2|WW%&<3B0u1jhilyPx_^B^z_I>aM|0>w)YEjr+l-9TbJt~Wkf+}_yiWhP
zoD>&5pJa`S$bPF&cvrJm;q7zyt#mfB$G3XYaIQt*-)y;&5qnbzv)MD0fBBxy1wk*>
z3EoRANj|egsuXE;XB^2oh779S8c}z292^)HZGA4(BP-F|1V^i)K@$fpIaXEKVm%zT
z_2|p*?&=o`*G2dNTdNqWNtwvXVljYYd@Sq$Gpvi?2pjyp1O8%RT?qHb!UO-`0)NGm
zaeke}4NkuB>lj-PoWpvmC?+KZ{#P`#H#W9*cw^&;!&R;diW)IfQgc+3mEkwEv0~9T
zvN14baj~*JzXeOsg&!PR89VCVbFs3tcHnmrqWSF#esFyLH7m`%-!5^q5Ta3&eRWUF
z#@_fIHwzmJ8;vl*y?gfr?Tt+MUyDopemnRiMDxbc(UzZ;)!EsZ#hHV}#@>|m2_GLH
zD;qm2J3BMDg4w~<+EL$y+1la3zY6(Pj<~Udp}m={qnVBMz4LPQ4QwEeLNqkz75)3q
zzuIZ+V)mb!tQ~&;S>Ok<o}XcT!otS-@3O(Ig6H4zzcO<%wp154vjXM;bqI5Cu?zlo
z{a?=fr^Y|rsrH{cpK!9X{qfd6oci;v$_~c%Vm4NwPDkPYJeuEc{^QBtZxm!b|LK1)
z#lP(Q+qb~b!UTe>|9)t~1doIYSh27~v82SGD!E{<BQDp;>|<KC!)}!Nk)UpsR<gci
zNPq4g=*OL_%eZe*r2D+K{Lp4d=R<f#)UyNHj8au2=17`bfv0dJazkLTJJB7fb;)4~
z2BX^SOh60v#4dPrFL}tN^k;Nfa^JzhzvqMXH~)zGl8$CHT*3O=ljk?g;Np{&J^1^Z
z!Fd;KoaS}>e<&OaN5{wKi2%;u)cadod`R!<b%y@0>i@FO{|x>&9peA7n>~Je;lFJB
ztA=CkWXRg^Fw9fZqBr@emo9O%$a7qip08Fm^+PR}uHA`DmHv{@#GnLqjO}WRy{-5Z
z3;W^?(Lep8*FvC_r_yzH2p1?Y8^{!JYVIs(APA-wnc9S7bTsQ+>@@D&V3X_UYJYkE
zSH=GsFt}nf$4l-vnOMl;`7?%JKb>bRJd%IOtXN9of2X-E+=%}_m;UESKuOg2aVyhQ
z%FoVqUF;3#aZG>7O*Xlff_DDDt3p(iE65Cgoype`fx#z3<_iTL)BLq1_?8h^Jk=AA
zge9gV{&l6zeCW63|J3?lN1{-C@S|dw+uZ(XZkTv1+TcQgO-}hYHaj=r3sNw5td!EK
z6aLkvznNH%0yofd{z!_l-f3gpshvJ+RM*?8m{eyuYNI@iH?@Sz+QSctS&X+C&sENw
zyRMn1!Yr^qsAx5i8FH{**3(4!D3(&ddDD_sI=cJ}jhg5Y!6bA_aWMZ=b+uR0l^R^;
zo8bkTRkf!t2`TvpNm#UQlO{{YungxaGfvyIg*S1(>7A)=tgxCGwuY`q#Ir91QQl&M
zot<DbngWTfCadi(2G3jH<o`SS-t!S<098m4;C@)@NkZ0#@-2R;wtjzwv@%mRUgCt(
zeZA!KQi*)15Vzr-Gzm|ViJ+1HGWj3p?<Y9)#B9T*o(Jj@wmh{y+u!i0Ei<HJDpv-w
zP|9sAdRnRCmj(8E#n5a?p4{ysJ9yZa&pRo`X8KIfd*}Yi#f#7Ww(Q$RzL5-4Dc4eF
z3eB-iN!hH2nI5FM{P^%$CFL1zo<f?xa*+;#gt=V{HrM(fteoa~;OOd5-bM#2Jh(O_
zPbtUXr07oT6;hV+YZTl+DCNE_A)KcX!v&hAaLidPwZyLVXmN^cB0pC@^Jc38C6`>v
zv-j+>bh%X<r5!AlNEiybz+yS=Eiy7>f5r%{@-Do(R(~+wF=RYt1V7!8PS>n=+dn-L
zIo*1PK3+;vZw?xH+VP-P1fyjka>_Q%s#-T|P>WkN?S<;9ZPDx=wF@L+UaeBDv0t#9
zs&mb>BQgUIsSFJ4(e@}tbRD<NR6^^UvFm9wwgZ`x$7eyLtWIl5Hw9Iyw&&@pG4o}V
zF;suC(kBdVG?Ti4#Yo}4@pEG2M{7`9!3K1#u(C%OCGOl^)q^=+q9!#wnVNRUGat%5
zb`nzCqGbGJPu`r1sWqE_G~te{FR(^H)j6L@Z2xSF*x2pKIyy_)6W?oSx$98w&F7RK
z|Mg0t1kaGjum|jT(E_!cMrifjZ=2h++p_j>%3a2{Yjn8MiX#4rA#{IvI~mhJ#%J&6
zjqVn((M*#FF~AE$om5U(m&J0Jj*gZX=G!l{$NG;s^avF=BYCuY-F&a8g_iZDN!HFR
zKbw|Cr^e&_)QG<Mz#lbJmMP$UM#yc_`9^Ui1U!vlDvzyi)oUp$k3V>w9aC=P6=j|*
z93Rbxot}bO(l|``<O4nLSM4B3Jf~S|(zMXw<VG26J|qk4_!^IvO_@m-=e43^GxCbB
zU2$ANJb_53-lur638XcmXIryL&}0m0rQSD>wW)f|%C+c?A7>k%KPx2MB-<R@)puVj
z@H&HkWmL;gF7Z$K%cLfHLh$%(AhT=Csf$Zh-O@lq;xKQ(WFbl^8v;eb-1|)u)jn^q
zezM1&=du_cjZx%ae`{D4Ox$TXSzY4IAs@@$^hhpY=KZr9d~uAy6fd>>yt?9fsz!9&
zhgL_5mN?8MgUR$kZ`j7}VJxca|LU=Gnfk-EMoE#?{0N*{yt}qOJug%iOG`r?ETH6H
z-)82ipsh`lJVU#_3JI_W;xvFU*FXJ3J{F3EV|?omr%;t%Xg6SLrMC|%>2ILm7<7-k
z^L%s2K^tAtXn%%ufy?%s)0lD0xESI72g)Y6$|2oXm+vt~UxeI4>rtDv!g~2D+KzqC
zrzD;(jFPNn9*0m04EG>&^9oD9y~9%<D>XKh<iIW8*Ntt;l}GnUQXgCD8;iqHn^?6w
z?Tn?tX$|E#$M!l<%h>%5RCLcNvrc|BiVfbZ<BhIhn*TZcG`5N1dCI+#(hvJu-)3J$
zKSK=4Bj^=A$3H^f{L^yRiowwZckQo@uwshvEqp}7abL6O<?mm4IyEX<+%EI@g4%wN
zvc$8oM)Ui;>$=q<#_f^Y-z4g<5A^S%4=iq9{xIc^^ej9T)3zAd6japy8O<D4Ma-x&
zTC?=k0*u_+OFjK^g4^Or1s<*U1IG0OD6Q!d2iuKTy`qe(m#?epdPXIE#hJC5s0<m@
zx!#!ItRn!Xo$!u>M6><Xp(?pV{^RhwU{T-A;2cEmbYO@sg$d@OAS2oq&Qq>g9X|?9
zDft~8*F2I5UodWY%)TczAuoC!L?Zn7^l;jHf;L8L4#5IHB@kFj;C7n(NOvr1-4V@<
zfEo{aUFQf|$~>;H_N=6IH6o(M7v5^Pu+dCmb2aU#<zQnX{_R4ZN?|Dpb7)y3q0M^q
z8V&rbhBX&%y~R-OLQ;T;sx~A8emWnes`JG7j`PO&P`BVNlfYym(<`YPRsoN!bz7yc
z(9$XS(_9SVI!k>X<Y`g@&CzY;9JctY^PXPhV?Zn~xLwWc&}Kfy)s(aetE~-so-kuT
z(RCWt!{D9kw2~1sy4^y(6mhnvp&C{7rf-tU`}9fu-bNrJi}RDLd5^ZiUfD3v2lpFc
zd;LM5yJNKa+nhCP*wccu3I~Vx&XAb19>TOQ9}0JbkAFsJh0jWPsVjZwD94;Gv6GUT
zZ$uD)2Dl{MCO>&Esr`Ps!h%#_vzkOWMGgUJs*T=VPK!U;be`OXx9-S&Vf)4^2KTb5
zAseJ*@$dhkTSG-@qc|2M?CCZ^Zkn*TN$2z-(d)#FTd%=~O&XK^Q;JqGm&QlXG0NTX
z<3K_JhwS43(jKA1{0+GG1I2JNCs{OSuz!Xz>!(!gc?GYJ@l=q=q7DiYkwI1}E`~Hr
zzIxgEQj+%pm*?6@5%s0Av`LrT{k&k6p-0yXz*?@7t3*%1@0jgAAV}^imWSb)_AmrP
zKaqNG+@khmoJGHGE1SoM-Oq51HsGuzEJnvI2lc9EVx)=haMH={T?d%V4%6z7O>7i1
zZQr;JIBt4;Bs3B^7@bdX$ZWYU=3h;Ddfe&)4L0cf@?^7do=RkLNYxbP_sqt`lT63<
z8!op|t9xu_#vP$Xf6uvEO8eIPu_p^Z!BmK&h+%~tv3KC*3%?j-ag6Plee~XqS(3Rb
zT9>?U1nOh^CRg3#$4$wjm?GGT#_~G#LSaM6+kGNB+4e!!EYkaiyinm1oW}bTylK&P
z5Rs3|`u1^;(0_4Q?|EN&yty-?OW|>Ydn)cRciPM<3JFJcm^1iuyy?A1eKfcQUFzRi
z=<t-0Dx#B1SPsAGy{&4rR#Es;wb!|*{$Q^yWR)cD*3a8y!$TA11kb$Bj+eYnS>Xw*
zwK;e5GM#69@s4K9V^~IxL@m)L*E~KdF?Vo{Xl-n^RZJ05Z({al-Vv&8j6?EGy7D1k
zkhMr1?+o`^r;StM;Xv9I9RmjK@e)JHn7gjwwL6|Keuy8U`q}qZhdQPsUfR(PiNm&=
zDLjr9x~jb~XRzS4DR)&{)o|UFj>IWX=c*T?8eC~b)pH_+57#e}E}5@L_pYvD@TjV%
zS)HxBy^=4UJ=RGduGwv}d)G`rl9!}GHVmJUC-IHEO2%lRYAV|v&A3+j_ArRav6YvK
z%iJ+t6Q4?Q<caXfa_~u0pQ!-nGkibrA(}(z^W_@4M*nNOzOo1pIr6d+tMPKPP1#bK
zN{7i2QXLoHJlazqj4dy+?!eAjDI}ZymU%9tR+@xFZ@;sxx7X>mBqk*d%cAaJ+@h#u
z&62f#uauA`Pi2S7ef_f;8Lo8zA@%2+c%AHr&r1wyPd4|pn(ZAsx~%%s+h88e1M(u2
z<g&Xel;*gu`@T1duHE4rbuOINlP=b!7U$1P&)gwuCkeCWFzIB&&DkBlefv7|g9zUF
zMW^<Mp<Rzuyc3nv{&r2Z?t^*aC6S-b22h)*D<Hh3d<QA4tNXO?dj@nY*H1LrbRRy|
z)28?8eA04a=QvHvh5Hcl{AjXf8ilpRvpJ>SzI?6m*!K*rn5$&wti1p2Ojw!VOYVA(
z0SB1k%X2W%=0lFoh>9<aJ#K!4FmrW&$K@IJFG;rK(6HmY)+||6bJQJ5qS*4cErfzw
zKJtSCyPX^l5c@xeRCVpJmz>x0%QR~9`ir*Ex0g<imljyo4zNhq>)Wks7F2j9EjDux
zFeZ0Yw=<^d-D@>k4{P0h5K9*}2-Na&f^(vm-jll3<gazCXU1C}Ac(hA)+VaL&<7JX
z)|05ZlyH1`fepu`^&B4v=q5CmPx(%_8aKdfy(`vyDJ1P((;bP%{!-FbjeKsDzOx#2
zeXNr8T={_9zA@45Y-U|p-GuAmq53!dfB_tOmwfhH1dk3^qdqrNzik1|07GeKZc(0q
zmbs)7x0RDD{Z3q1yV8$K{6yDC^3uPnn<g$yFSlPGCeK`tTfLm*Vb4fSHqxE9-#12U
z43$favy-5&wJXykG-l{Y6zCZ-6JAcffVj3JVG`%Jd5|NGb%$%bCu(7IBv-Y_1o+*1
z5PvScSsG2JAaMkHS3`YoEPDlT(kB$<g%*-p&T_PCqmj4W9U23uR?URmg@3lcPgr9$
zJOXYVqVmhKrG#-iSy-ZuQ&EN2b{tMqu71Ad{Ai~^RBrO$cA2O0hsG!8E@6GLqp^F+
zGfjI&)6Op|s%MGLQ%<TXrjdMKggxVsz}FTOScp`#tU|mzIqIVJ&fnh7jJJV}$xA;;
zR4-$14kKk77FRM*eyUH~vQlEw6(_vAAH)jVB5ztP)GI0M9(Ld|KJw38BEZQ@YIn|E
zfhjRi-<i05h+h&`ySYlTQV*u^8nV&*+^#zhsoyE^je?)sm8(*4hg?EFGNGn}<-KRs
z45z7Fvk>(5L(Fyy?RkuN^iTx1WXLErb77#mg=(S`KAeO{y?)d6YrF&Sq-h!#4<23&
z0f81~8LPCJRxKf3PXfb?eEY+HT3_t_x*jg~kdlh1sRnQ+f4<(}5sx<9Tkbn^eJqyJ
zP|9+7wA?Nt4=+MtUhRTk@=sRysR2~X$cZ_!xL0<pva-S&G0vLTj2v8<V^W9p4JbDw
zw_B3*9%#RE-W7@WEcjxL*tFj_@jot8%XPn7lykkL-OgwvnyC%n1q7o41NYj;mFWq!
zS!_qNolksngs(<3YcF=ZG`cfd|6-8YsqPK@I^}pRhn_knpq~hulVtsvEY6(Nd3A8i
z)Ex=JgTm$=K3HXluwcM7iaVDj0%jfD@A9zBKXNW<r2kStBFrX+84aHAO_cmgxcq_@
z+xTS4Wxfk0=r?z>DTvg8v3jiNClo@yoo2sD;6gjN0)Go<5XfCO!Zihv!Q33_fL4QZ
zuJr5EmT6?J+x{Kl%(R^><BsSK$9<1-9sGyh=zUe;<$U(b0aR{Z2n880rH;y1j|(#e
zy>#^_DZEXH9@JLtV)Tkuq~Ls`mpKJ}txZ0-&>mIhdtn-qAtNC1^0gl}M82e#fRtr!
zQL(jY>1-$QtJ|s+HRfb*K>jppj)CqD;&uSz>-6HD$Dx~4Ujr6;y7{igEF0qAu{gTH
zJM8eb>Gg|zD=Au8%Ogte!EA-3V^=OG9{z!Ds?}bG4o+x}O6R(IS;5oBOTrv#88`Nt
zkG|KJIHuL~E_TJQC2a!d^{lh=WS@Lr`x$0Stw2NKhTZ05@T}Njo#1Lna{Tf>g#NJI
z-0OHD<}_p>l8>^e%N~2uL3@J?x0d)w1?w=uq5B}?mXe?Qh;|TkZq}0{B$p?*d&V!E
zB-RZ|%4I&dmH6Fl?R{X9GjgiSR2>fHt<9_Bue{5IhQj+62%%3CtzEL1)_cDn)zrM7
zZ8Rj4@5qW@T^LTSit<<XyoVlfTlR<WM`TFTUl-bYbskZo$t%{`^ULC64pNq9irbBU
z45wX3sqfj2$%bwIUC=8hw68?{cw?f<CR5L%)lvwx&JCttC3q^MO8%A|k?~?Ky);M^
z%)&O$1IPWtvDcQS&A}_eTY1UFa~j)m;d@Glsu}801$lAp3|Dd+b_I}i^OBdJ8f()Q
zX4(_a=2}OUyt;xu4YE7~_8*9e>y_Q6@~Y12(6YAVve=xDU?<k?bIVT8ZTG9RneM(s
zNM!^ZH)$jDKGkmluPN@gy?SaQ>%BE|-&*?$N~4ptZp*_+D=Hosicfgp$mhcKEd(*6
z;;G!_cOQ8rA4ShZ+~C|?FAW~TCvo@p!~B>wB%<;}U8}a8rSTr%A1bz*F`wi%vrkVN
zTkcCM?Q|T3BRD%hOPWlwF&jM&@C7}VN4Hzlrhj>Tq*p}HT*ti6#;=#PujM)={|U|v
zskUQDk$%3ODNhVnf~KNS459E*!)EpTb={Ul5Dy-vW&6w2MI+p@e~K4)njb5`jvvjx
zzFg0X-W%|&`YPlOm1ZeCz#gOaI{JneG?eCX+_@h*#H_$`jRKJ=hi->6Db)FS9wMA;
z&Uy;v%GhD31J4fDB6AdzT5$tzuQP-?H8IUJW_~v~u8GKFhL7J}4HB4UL7bQLc7Q?Q
zso0+~m{`7VAK11~I-fx6`cyL*xANk?3%LotLBa$Y@ce;ea?6=IE5ZYzyYjd<H<PhR
z?3M;dm!Oh!HhYM1U|z|*-kh-TN5rHGGSY2+(453l2(jNayQ{Lb_6rP!a$CDBN5`cr
znRY#byTQ7!Pw(%V?tGS0&Qsa`w!Vp|McEfsO}PcZF+=?sBF89m$Vz|H^i}zfaq!d9
z@3izP2bW{?aR|((7Ydb-16fra5@$(-2dkG{&D}RDs^Cj8g?mZ7c5ew^1Z?kR2OBoo
zTf@=Z-UBexudd_gVY})j!_p)<n(n><>Ajk_%>!9Idzk%%=xWjSOTiTc<5ENA^CLyN
z(;LO`>fljznC4y*+vIEjj}v)mz_Cu>eo$laeS8lDWaPbEELE65;rkVtfT?s407Ejp
zTwP0?HZ(-4*#pEr+YbHUTg&fkYL<?CJlnxM=?N6H#u|fIlax{l28tAwOqmrK^!K0+
zmRe51u059~V%2K?AMZD^lDzD(r*$8oBRvZ;;|H6#6Nk+DQfrX;OMT2dJVWl$Bj`iZ
zNyO`U1`G8GX&x5Av!m#~h#<j{O6Xp{v?qzva(4a-2zkdqfN?F{!Y$V{KRQwBi`;q|
zyFW3nO4r;L_Svu|S_U&TD2rx)+d<CrBPj7w(Vt^_(R)I;j_;3}NS)iuL9!^Sid5I5
zt%=zjN>PbeGY}j(`O(lq?LBFF$wJQ<KR`wkH*iSlt)i+w;{^AQdmdrD-p?A2!2sio
zYI&tNm!jc#Pi=wCZGUwk;vNQx`C1Bc8I!AnIfgwV(;axRX#C5keZ<?)l|<|Dti16k
z<NWwhdIzY*2#fGztt>e!(%vo)k=#&90qBozYL6`~+J}yYwKuMgIDpcbBqi=s2rz}t
zNdUiPz2h~oGf!1#4_{2$14uBD-SvSvyB7T04BF7n=#vWqCSNc2Ja1~8cA1C7L}Loz
zz7sy!7uEwA3p?3iI7JM;$%&f#DoSF{$Er$b@7=!Yg+U+Y8?}XRUbBtKkqCPEBpXb-
zy;-QdOI^U--gwC~Ng3Poo>WIKOz7atHEQ9>tR+deAA)@gm-u%bzh9<1>A3vN29fxB
z;htmk>JK7$`!$Z1!~TF4(!w`xQ4GqH@q2u=yWPy{tr;()?5QuZ9;GgTSSl_r%OQd~
zOQk?#lSx^kK{ew6SWI+8HYJ?X1S-JdQhV=>F6NsfYNJZh`eL@1Jd|P`A_z~*x%)hZ
zMf-tpJJf5Zjn1<{sS#vkrj^!s%M&IYGuJk%P^kE&w%uV(n`>z`gyTUQpCzfdaeE<#
z-`gTY!uAI6>@a6&nYFa|IWwWbazt|o#aa(rqW2jtx8rheD=(M1l5-5t)dSNJmfCf8
zu<F{T>!!-@JuP4|;KB_U`aTAA;eqd7*uwiuZvXXbQSx+wRIAbAsV2zqarHpx7hSns
zwJPgG)}R!WFl`xqVWvx@bt!3F;S6$o|4z~k*EZUilW<}vp|WLZih&YzB$_>)7};J}
zpjFdvO2NoYT9gs)P`3~?Vue8y!RdADwiQb>U*ZKrILd3Ly^&?c@1482w6)kc9z5VA
zQN*onR40$JZ!I)>+7aENuB%F@MqcfGx*Y(2^0hR^VmN<=j?Z>RwDxp|k$q?zG3-+^
z^;pdR>cPIg63#Q88jxVFNSekaO|aqT$jEf-Bzh!c8$+gaP~oO5sEq&-o<*6d>7*<B
z#o+zft-XPsY7Ty$I2OBJ7lL($qx|7oXXFc~GUUuz_6?K|HuA`F5t*1rP#VLk+kL0D
zbNzLObPYwj=Ug{VVmPf{{<a~aIhcGNc`<h;Z`cMD4pS+aI_i_f{z+j|_s#jWkBalj
zU_ihsCu5#QMJmLJ(a6|BG;x-I2c^h&#h7(XMiYIqf9jYibNoHFyp1yy`8hyj_Np$(
zgG~y5`mAslr`7e#)pvi9A{yjwk1Al#CsqdvK!!`e0hEm%bm6OHS&mW!2>cCc)lPwO
zkRJ}nQm0Cje&t88XiVM;A$www4uSo=rE92WDyvapzVNPzK<!|4Kb7#M<n$i%6z9&k
ztaF9ZO`AkBg@(g1)1;3HA6<95ri4){6|Rg**?K@#If!A&e)zuBLbIHg<rY(DVv+ex
z5g<|k*9jy-*WWd@fAQKMQblKAmo&;J@b-;_^wk|8oONTE5#6S2MRvZs2O9#_S7)TW
zB3;&~*D}|UV1OJ8I0<7;chBtoNA*e`4W~&GCJE(3R38-$7pa#8Z$~N@><3*Zu}H`(
zf;Ag!POn^;h31QmwSn0G;rm5MGr6e|x#avpMvnOVGw=;g)5W0O)RyAEctEdiTy#|S
z2By_E>qT7ozFHcJAxL-h-#(ap`7%+}$;?=lO^Y15yVP?Cc~iM0=n!AI+V}WV9<)*8
ztBdc%^3{1D1)!uDh}6~l-4b|gzS8%8)f_+wDxW>|?FaeCrbN{`Gx6G$N1g=2jMa&n
z1EoXR3XMYtV-x3@0+DH#HBte}Ax;(gz~f!gBg?hXvpR{tuHuZM{&wFG2RWsSD_``r
z^e!~#lqxPj_~vkfclodROaA!=?2G+ReSGZrEt^j3udk4?$*qLnK6ZE3U-`=d@vl35
zPiaLPc)hJyqe=cU?*El#8nwoGUO5pNyXACqwA?I$S+lZpxJVbSo!KM)_hlx}5Zqwv
zHl6UA{r<iZC@D*2876jrf9X9D{8!;LB9^q#H~*=2Y@Cb1&RFbaf67_^_VER*VSTJD
zLPR0+gXmkF6(|M>rnY!`Y<~%FM6rAaZ@H`$2<KFYGRgYhdNG0y^Re?C4^dbD>$Ueh
zF9JEqXuc&(K8e^sb|=K=Kw!grWt4yvxW(@Lg=A}ff0XTh?^d7AaHc(WD~9rG!hoJ8
zgjS8_lDUkH8wBJ69WVnyUNXs-lBT{|={M%4b5E5a{JY=lOG)1gg;-cj!_v6k^y*1=
zN4pZ=!yaN%ArExyV!9q5?qm09=ASI}cm`*Xjb%mvD=+MCns=@ZUj*Xp)3<*O{{Cg!
zWS=WH{&)ZX?DxO^^S|-)w`9%#=8ym1^QSM(tW>U$O7^QZ2IX86z`(q$cy8$WOAPXj
zyrl;BN-WT*=#OUB1T@20$xuf#vZx@_@W%#IGTIG<;guf8{RMGEr~{RfC;iuN=uJ;y
zw{{w2;TPK=Z#$VlFI=pIfUknSM5_N5axJFI&`S}~>(u!T6>9gKouO=;dw0_cbm|$T
z6iwJmaAf1DOu;%CywPd#`#Rccic`Cx(%&94J;0!nZ@{Q>YI%jEvuoha7K%|`>uMd*
z#r8=0wL>IOL&xh}r{m<pANG${5h)maNu+Op)pP8}9v<8V&H4(JaW^Hf+yGz2xLPbG
z0@+_8<hngMJA5omgk?N#Uq3+*&`RAGNPc&QKgnMN0jbUNz}qE!4ki!lew?1Y{1S-m
zTq+vHFjQbUw!`hPIC7c!GRo<h%+*L7ob?I%;+txI8#JI+ZME1p1o%H8({jGgy9a2}
zm980TGh}ueylrwF_rDtaYdICa2#`!e3Lfk7IIcBu=)#`gv@YLDFYC}n$Asj0+>NRl
zu7iz9zvZNtp!A$_F12VQf?^vw#R#*Ea8aFu4JD0D@fg|+oaS8heD>R%|Mon53rJt}
zx&Sd$ZdvEX>DjoOY4ao>4!=&XSG=a-bhqq>vz$i_utalBzXhpiER<8}!&tf8%MYP8
zS>yI}rGn?w(6!BM^@LUvL$Y6m-ZRBU`xK~^n0H^Oft{YUM}5G4EhE};<>Mq-yr)1D
z_uZg~JWy1j_|;GHxT96OEB=Nh4#Y1Ur@JA~=y^q7;sz`B20VZE%e~ymXt047*jDIt
zEOZ!~ru@;H(_6ZHgKf(7pp*QUO9MPc@3WfWKvLEcL}riQA1?-334F4wB`4#8U%mF%
zO~3nhzJkCD>E<B+M?7_f9{8(5Rg4zze?68z!D>I%f&crpjSTxwCI9;PLf)5VrCI~<
z1QpuO%yGs;V6a#N&#rhtPM~Xldg#*iyKibYD&vQ8E5f>x;0?ot+VRGB`G2z5f`owP
z#yE<<h5w+D(7|e|4!Hrc2;H9I{=XVuPBdy9qn)qcc&XBE{!u)Ksa*8F#b9;{dZ&W`
z1?VO#kR2!`AU>!h=P)rL5510`9w!Rjn7E6VF-}#v8%>8e*hr*nOHh<ezPCQnw_UI?
z3kMGL7!dt!<c0Pl(Yrk&6NV%*9M5t4*&BgY>cwq7n9YO{0FoPz*hr!Fx<5tXVGp6;
z43@}b3ebXdRdZf9K^<2NKyFU9Pc~X32+~BXEsH&W<Kb|c&YB1_AI?HYj5GG}_ylJO
zpf<`LNm8w3Ddej?nXrLNWU}_GYXD^&{nWz=y%PGHy+xgHTBzLfF;-mGlWGHpQkEzn
zxvYmvvur1_LYJS3SOTZt5O1Cfho0_Jrza}TqOjya=$kslktYYdkE`DEq1K0;4#rHE
zxXIAFDWdF$8wo0KyZPobHGwRB160X$Q{WaqD~^Eqbaw|kt^4TmkqUbzB?|4>&1X7c
zRW<d};~shSvE`jH$>5!_z#lA|*$Qd0PiK}f=V=$}br8MVn!b=b=WPlB*alg1Qk}ez
zQ2pTcOeg^XW8TqXeC<iFfiZCaW;H9{aJ=$LIZ$kLypA)h;(9AabSz?YoMMxjg;DGC
zgx%6n3{e}L)b8sF15X97o%f!5t~k`5dnpK~2`lwS+19HuECsUh+}vjU4>e&PHHq%l
z6OQW4!xyln7h#BccOHwWy63Rh^~<S2`HERVyF=_{#UC#}beQfo3k77-Zp-+40^)YF
zVj1)(lHG2LChWIgJ#Rn@*-Dtx)Z|DTMP|8g){LwU=Ph}USat1@(Sh*Ps=);T6|tKA
z{yg@qNT+_>CI>)D!*2U-_d8SsK&pA8{?Pwu^Bo>xY1Py!1-S$ogfh!7RZnN$rY4O(
zX}L?Za=6pMI&p<n&<2A>dT#(qzyVKk>BI{>=Q4R=^2KO<U)coSZ!Fa_r>(pzTjJQW
zE*W%#vKjQZWim7TMc0N+Co*Dm;_h5&e0@IfaFz7dN9|bjJS;MkOWroEW_qpkf`PyJ
z(mT-{q`Ff)Pq$l!D>sHgZl~XSv6K8WqtQ<XklsRBSC|j&XwklmES9A9{Bh32#iP)N
z2h9{kngHl~5Lt_a)gm!KBtG5-#M)Cv^-`mBOu5<gD9~?b<vY)g=5KkwSGOJr4(^P=
zq5YKasfo%uu&9W)hW3f5<_K0Kgz^+t&)EZ-(}C2;+WH)D^4uR%5?IUUu$uNftVj_H
zh&z}DfKboDl)H@xGx{>hx#uh4v0>zFqe#fzEb&W$Zm%<C$k+PP0%VhfyGU4djQFX{
z0qaQp47mj8PK}61vZw5zL-fJit&t^nxN<cC4|9B&HI)Uj_(iPO$hb7WZW{R-ZA|EM
zl?q&f0nAS;wXe&oSiQ{T#L%?9H!8B;9d72Zlv_Tl<qmiY8C0r99okybgQs}f?aTv1
zH-@S_=#Zpx9R&hGzc<y|?&}QCXB{jo>3O*z$z(O{CD4+@Rx@P0whDQ}SC7XTEZhN^
z`&n4KxtG*q*b-WyD91+|Yz^iSz;qt<yz%T2$6#jO9X@CT?9g}rYZR*@OI#a3ux&f+
z*hH-WvdWO?QE=6A-ZxMLKLr2~8HKnfbUaF8Ff0Tdy@x|fN%EENuJgCH^xl5pzLG&I
z3om-svFSjwxAcVTVn4TD0+CIPy|HY}aZ4qjrq!omHpkr{omHi(<Ju%LLRc1~<Iz{2
z5<OZ_HDv<iuK4=h?g<sRm*+Ix<Jdlv2LZq#Yp@I^cpCyA=i8K5Eu8uQ<aQmY@eMb?
z99WeW%Fp0b$p;%IEW0mu$&_3IF=%62`KrvtomnhTr9dlj#TiW~gNxk1z*P?5N7IvU
zd3yC;lev>`<Jy^J;yC-L)mHbb?dG*qT%|EjGYFYHMg6H8R*NzT5w@>q(!zvG8wo`O
z(*jT^AbyYSk6=c=0)$Dk{7njGYXCdzZSgD~09_%cl_Pj*(eikOC;h#Ip}ljml4$!l
zXEIehgs#`|dy&V(F^as^ue=MU?OLqbUiZbM!R~$MUkzeD6}>WWC9L$dN_}R*g-_jy
z0s%UoC8Nqd#madFQ*ty%-Tj!9LQU>V_gh9m{o?I>Kx$HbPPW4*$%{Y95VIIseK<hO
zl;p9KgPI~Uf#xn0H(sB}Ri3DLqo6un{gxQb^Ck0R<YR?N=K<``;|OQxs@-mZp06%*
zQnf?4(-d6hKjr80lKfpkK5p`G-tG(qmLy%<#!3$D=R|SWLmhk5kX`2h!Aq7_vp9W0
zDhJYDn;{pt&>-`a&BSC@wL`#*VHg_B7!yG6T2hs0A#sD54Ls`Da1lc?YG2N|a7dTr
z(SJ_To|7IzyPX5V*$15*J#j3D02K~4v$!-4hnU%cfj?PHI3CAkG3h>wIkl4(luh*L
zQ^qC`b_59B!DD!U0C)R~WY@)5Q<}6lvBZ<oKZP>4_xWriuDn?0m4b5=)ozZrmha3H
z9c-*uX~?xSoFkb6p&CCWRhs8M+<f4HCDqbN@CD(8+SuGZq!QTvLG)ny<Mu%<<u>9|
zD9Y+U(@L89V1t>Yq$dzM{SYi2xgsSawazxAgl;XmkW|q(`033-SLhp$Qv%$MJmHdI
z0qX#7I#Av5k8meQUEHJUwO=l)1CzS8)Q5U)k6B`jfb{MVN|u=)mT{-?q@L)EkV^0e
zA?cJmfOxh(ehxI#26NA*pN=<18<8UB4n~`lT^Ji{7cyGY+73A~p;c#Gijv*`62|w2
z(ovUy%TxE9$-d@XcCJZCgxpz>v;As(4m%=~2A2G&^#o3(syy8VZZsttH5YAE*Y7yD
zJP76eo<tm`bH!NQda8~Os+hS1m~BU!FJ75EK~%(kiUVVq&q*PBA_;qLU}MBV6RF}U
zVI}5_Cyk_3_#se&IZ?p7;QElG5(=%~Y0ukCULnGW$x$<HTc6EIwl4M@ZO>~b#h((c
zar6jw5E6SCneKI%{GjYrSO38vlmcxkk^T151z{M_v03r9k)d&Gt1+xvCLlmdbl>Rk
zT}9XxtfaYXrZP#hUNQ+Y!dlY@5xrqYFQXW0G;AfoT0=JBjX`VsJ1~2jNMBg5Kh$xW
z58*kEz&gRU1qUZg>5bPr@Cg|2olH9PK=T7oXpBQQUrW+$-qq~P1K@>?ZPvy>bg!GL
zB?;FT7`E&ppk2G_i$L;RwoX3^ni%mvqV77`0+=pJME8c*N`J=i&`_h-ZWqr+dW6Op
z6tXraM_1))al9|4D^d*kR54*qiwM}DR7rJ_uN|iRnQMj)Bxc+M%%?`Qt!Tl5ZY{Ur
z^i_0YT4u)n#uVBbwLhYZ7&}`##Xj`AOmuqhq``XxcQeWBgk04@hAS`ZP&Yc@uKnYf
zjEmw_z#sO#i2F=WO})u{<u=ps$#TQv2hx^b1^Qs4c-gmoPUeDG2L)DSvFFChOly%D
zBd0ckQQwc&ir}Xnj^R4+7A1cfI`N@B0a-kNoI|Prba8AwfUqI(tO|%8;A~_QTx97j
zTWb8=VB7Om2#tS2nI@CD70-Q`liq!!ZM<sV{Z$J&!Q`p}X6P2*RIk(-Q0+V5Es<mU
z3o*LT`S5STKKW*MU1qS=<$CkAYTC6ITvBQ;FGx_IDnDxiYrjD*E!D&(G%sE{+~qrf
zdKTR29pt{5Q6713eZ$K%BxDv-GpUE$yM>*rJ$N|oKsAg}B%<Wo;lNDrJ53$0aG{(I
zH1odJS_;(~&VZR=0x58Ew^#UfXvh9>o@i8P;$W!Y&W9J_%3v`}0`8|RAG&SDL9hzx
z?})H**daiVR=pD+Zh4?xCz|98=3^&S2P31kZs4o8+=yh$>@lnut?ng~7o5EXgOyxi
zt!tfTlS9FT1H@9}VMO+BgnqQ@C37P$&`6}V!8kCh33xOg!Z_aR?`8Xx%-uBCAff$1
z-wo+tCWi~`Q^<as$Wesvz+=uKX8<^B9e%Y~ji9UWD4CY`GQgZE^vBKN20E-f3>z=j
zPZ|aEf4(Q`K=^v9b)cBw$+F?+Y3~zD&`pCcHY5nsac&;GS*f(KAxv`_keTq=KG|P;
zfQPfKBG_krqL6+sJ#LeLTm$H}=er4JGivK*YF`wqQJxc<gprOUtMg$2;{aapv{lrN
zbhSEBD7a^bf7{|z=_sY3pD0FmstGS7O<M8shkO!5mvd_)wK3J+%0P?pRiW9IlhfTE
zPb{?<9xZ2t_eO-g$i6x}*IOCtXy&aVO+L#&oa$re5JP+h9+o!NURA3Wgj@%otw_6e
zSeGS_1K<m_?2%DIr>PweRR{3SKy+cSlr-J9Hyhr!amCwb1z_R)j8lc$wM;QL85!p(
zotqV8b+7BnCYnQkK8v}MOCO<%mzzS%Zlk@K1yPM9t^jN07{(U9TUhJCt@K4jhkF0%
zIZIQkw@3SVA)e16v&Z0iMU&&FWY$ZR!Hh0vVAshQ(BEz`bu)4|J^-$#8Oy6eExv)F
zr=BN!AzCCNL!Nj#Kd*<MZ`!i7@Vc-dF$~8{2phVb9@(8;L^t@po6LwGIDLah<&x|@
zn2~&+O(9FJS=MNug5_ecav=?LfwOCQ*5zxN&)c9`9!oOzi$Ts#{bFig#i^?fVTsGz
z{?X3g-r{<d#ISVn&fa`$NscBt!Fo$QGc8i8QmkeLxY5nhxsOhJeX^L1_~WPWj}Sv6
z#Hidy(pfOy$;P<8!OeE?3R~eh{&Zh#9dQ0TjjL1~FDHSkA!0xmRism9V+yaSTqIMY
zBL&<dr$7TD7zStrYm6Yj{TwTbZ())yt7rQybb65~x-Z64z?~NN{l2Eb(bnu|-|r5_
z*8+U(9JOAwj6>&C$6y3MbLm9|joWX-lL9W&?oi>=!MNmjFH<M(Q)CjOvl+)6hswh@
z9p8V9^9o|tC?92k9nmOOmUs~=gNTu~(m2xhBbCS$!22h9@ZJ$?UY5mPLBdf}rt$&S
zZdc(gds-d&r3U7jyL_{fll~$r<u*1K#J)<(PWY7IKp1dK3Yd-FnDYalELcYF>9-{B
zGuj=u-Nj%+pWdf7KOV`3?!-_mhop?_w?E=v%O7T`KD8oanr&I8p3J$yH2jwFo!Zmc
zWr|7qGG0!|^muX!tQGk0A#C)RqcPL8$=I4Jrw-b~$)Y8~#efD}y-@Z*A~<;PyZP|C
z8V^#QJw(L)Afa^)xS*(|`+6Q)9rO7H8G(gLZB(E2_ht(Tk-adCm$l0(bwvnQ&uAuL
zL+{?V(~!I?jt$r-Nu1J>0V$&?f<b@1l1w4vcG9ze$YBv9oB-Fw1qIz31eew>aFzq|
z_2}yAmWKMHByZs+iI9^{yug4O>0k(spZ|H7{K?sOnf>-1cj-*KGgc`(ph&uW0{BC<
zW$g7>Ta8Lf@?)yb!3RC81jcv3>NaItp#?APm<-Y0N4<!dhVS)v6#9)8eAZ|>L6hJ#
z^Xv6tKo)?DJ<;|CDgRH-F1D*-A20u)N;ac-j#+$R$spjJy-{yN=T>+BV=*gT?#|&f
zIr*W!OMPhJ19Iq^f@(kg%Ck0>+$VXAtC3RC+E?})9NfZIT$qfCwH>;KHW}a)>i}4G
zfYaj{@r-%&C3*^+nY6Dx*#g+|>;+p|>CMHm+sg3}fPJ$>ICP-j&h^k&TG+!W`XTTT
z<)FhjPl2z2$J4hlmM3)fIC5h2QVPt_(DS}XcVS=Tz(L@|Suz!g9mPVx?Btf>zL(Z+
zr{iv=s(N@-*s83uT9g+L*)M*n^ca>J!3Y9g)4gmyVZtQT+OToHJDCgO1fs&8`?U;e
zTGi=_PQc$C9d2<PtEw8h&pMxF)xgV&zwLi*EDD-$2SOs@*1V4LXIFfixA+efL{812
z9mYB?DKQw`GzmydrpQ>vN|Gsb&)Y&H_hMjLj5fA@ROYK>-pPxs7e7~V52ziS+|Mhs
z>60yL#EWG2BYr#-_7Qj}D6CAK^POsi{_=dfjm&QDX8e8Boqg1$`kHI6AEOCnD`pmZ
zlBjhaon{j@EN717hL9D}@*_vh%(Ww#Q#C@jHNIHadG#U6wMsuE!q{J>#&@42xh|4#
zu47hUkpZQjAUhAV4k(0}dVb54&0P`43lcLUxE9OubiUGR;)pnm1zRP5v~W`|9S%o|
zR`)-G$qg66YdXe;?r>Yq6jAl>0&dLSK%)rqDJ}oSkmk_SSo2~A3yBKtD8b}|)x4sb
zX$Fy_r4z~&WNQNZU57Z6YTwc%GVfcr@bTW<QR~??ls<q_Uj2@&C=i;$A81=qh+zuI
zJYJ~?wK9l*SxX5}i!(1~0F8wsDQ|J523+gNxBghyqU5Z;!0Pxw23Oht`Ves-rtJ{h
zus{S=d7HgTJj}O(dWB5<5F3oo+}f9WYPvcv6y0avUtpIXtPh+*I{k1K<40Dh+s-@c
zO?L;TUY-8_oB-ucPA{g$JehW%AI0M)<5`(!8Ersv5|V1@Lg`KI<uc!@_YsCi^Wfo@
zIC*0(IVPu;L36CDuOP8D=3RT?vJj~O7W9O!@;Q7d6}94^i_|t|2|zk(zfWZ+D%lOB
zVm)z9O(N=>f4Jt#zdq4c`of6+Vz6PPV+}epB>t2(3aX^AukUuaId6Vdc!opG|2pNO
z@WbnSHljn6!7Pe5g>t~2N0b{kf7&kCnF$TQ*yXtj>&FZf&=2q$Q3OD)#5QRXaSr44
zf)y7*dkycC@T%RfcL5mZ7CE)v$CLE>VlI4wH5h_XqWTFoxo*d(FE?sH#`f-$AzN(K
zV9SzS^4~lV%jfKA*j^xMdFWo}?8j9)3|J$)@IA?L{f8%POe3>DP%`(q=J}VjzxMN~
zv@Xt~Mu1%bdl6SFD!=bR96pQ3l?LoLWyCp0(0Ol4DhSac>@+K?#0Fw~%zv)HyWg&M
z7xQO-BL7!T>xr*nC?CIc*W3->?&X+K$Jcg`J>_%!Mk3^e7hZCObd`VbL|l76QO-v<
zaHy7vUFw>`?+$&vw9`>!tLlp0^pYg59GFDYJRA7d2@*NW@@&p4{X^bKLwTyxm`krj
z)#$<@$7dk2Fm;}^%R+h~>kp57#()9m%uz+xA_4^$xw~3@1luA+d9ynQUeL2|9gJ30
zn3tJ$9neyrbFJR=yTf;F9zIL&$cCid$F+o9FxGyWW&fr`mPhpUcONgCwREYC@d_=c
z@ru|>@e9$%=h!W|IS0a~b#lt^q$?X5eF5+K-XX2RjWhr+nn5z|pqw(bf7lCL8Wv8^
zL}j(IL@M>6Er9PqsteF<MftAC$Xm73R!F4(+u~`HDf4aJ5*t&ezNN(QHY)c$h1y2X
z%vGK?^x-sevuLk?^~q<~W#%G~f$JN&I81!^#4|mwCx`@b%O8ZT#m43}B8sO^>Co+w
zEc0s=7GCCo0v;eGb|#cn{Z@F5IKJOA+(26MhnL9n9%Z_2$k2yE;l82KlSBx5pM07g
z<ncnOI472BJmri848q-hE_n(_UA!!B65|)Zbnn8d{VAPxfx%EF82`c28GHWc$trlz
zPtr{jXRtH6uD0x_W+nx%(TJm=pfM?<UjEGZ1;R-r@=XrKG;w5RvRx~;%7LAZMv}0n
zXXPhzwH%|jUc3ol>(A$S%QqU(3$@l7$v$@3BE0rLUwEtMzHM_g%Z>49+~+xpXIfrQ
zT0MSKo8zzPB#U<=H~ua~!Vskxaj){H3im_nGjU(@YU7bxu~pr2tJl*{u#0Zp4HMic
z#(b^-sU8va0<fXhc`tTIqfnY<B>}O{4jD1#gs#8BzEU6wwmzb}eD*+2VpB=b^Mq5^
zU5=YyKUEJp#rT_M;`;+vj&DH;<4PgmFZ^zZRfLD~lyUR~xaY>|Az<(1F>;5an^#C0
zp1{BST4IQrMazZMy&o|ky6dvO-9nSLJhRl!ShO=Re62x=KL<4DGeyVpLyLHBE6+<^
z?#OF)T)U5sC~R}Az3TvdlrX{hfMZF@_vR=Ss&b3U3BIrwf4<{cWk5TsnyZE4qvb{8
z(KXoJBoFpZ<C7}LA)aeL;uGK6_J_AkP=aR*Jd2%e)t`;34<*0!0A6YJ-36rg7K~!k
zF{$;_fV)hLpe}I7wU41h=#Xr@t1d0H-X0s~aTr#a@Rr2K#X>+(3iXZpl)B>t1b}q-
z$0}>3TnfK6iMerPA?zfVX>6$kg*Z5~)`KHH3K)l*)C(P0;l7-x6dD;mEolb3HRM*v
zbX0lit<xD($}FHC!M-)!c>|p1=n!Ax@(?-b%b!A@5asibk;68yL1?ioh1&bn&Kt4?
zXtmA4O1CD$GceMt$G;DtrNk-cft)ZFwc1{-ulq%3{ZMh4ib^>~2e|+gfkE#8kg{lu
zGN|XZj}j$gsco4QrYofg+Z51A{tbFT9*s3884hH&)Z9}Wjw{{{n1X2sfvwzxq6UPI
zfm8_M^aG2Bo+4EluV!RTEh7u=YB$nWZ99o$C>QE0DuSbik}2w=SaqioFKaHoOK*pL
zuqKFH_2=hLR#M!U2id;bnHAhvb6T%ML={XYPB?kUk-jyYHmJaLm*lgIk#@Hm*o-S-
zeze@31cK(>4C>otDwMNee`8}<kqAFgAvFw|xAIt3vBnF1!VR<y@2!)qMj_8v$}tT(
z&Iriob%e`6U%7o;)v)Z?UBl*J$N+ShpvF5wBxxPlo9n3{OZ!^MLBW)Oqk9K2Q_45B
z@9eKya=d)(zmTt-R|(hG$$6cz9u=coX{e1b<r)et)Tjs~{4TQ7ns&BBu01}HGteaL
zF8$4d(sJ3~kH0wcw~aaJg`zam`ya2Cm5sboh5v|_4%B&sR_P_?0G@T==3Uo9qC_Y=
zorjHt+t00sRc4E94E0VvqBJNgn#OgX=UsLreX5_{WAD1v-E0o>JO#U}HXrrL9}y`7
zQDX|%Mb$JHPA*WVvo`vCfqt)+r`C{^_W5I!$ceL_9P&w`Oh5m7rbU<Cj0qB7@q-C*
z|1tI^N(@t#q231TINVVyC9}tLLv_|9eLI?W%BxBUPBCgTZ}r}4ExOe!zLjmF^7e#q
zWoXiV{5+V8WZoE@oTB$frfC{sm@{|S;G$hiMX)27BX5xNUY3uPDmv72g2!_PxlGIV
zl?|h`kkX!&HnJTX4h9yPHD%3hgs6?-Q6Mzlso*51gRc+P3<b#@EcS*O8Ta_d3G>P7
zQrpjV5A^w}dAeptm$DSJOLtgJozV2P1;2`;aT>2dzX_xiKB=&#$)-LV8-gfhR#m>g
zes2#~>Nj%!g{QALY>kNg(f&vzEz=vEkLy(*uSRrR_hHXF>hw5jR{drGDIU^cI?R=a
zrPGhtWxT?BLxhX!c3##leRY>zPzn_~P^+EwUn?-}`MQZ|JT_BS8@_w7-wJ*$54r%|
z?R_tK5h$=RZtJZitN66+JvW#_DOC`=cbJAb?c<%TO`kZl!veLNM@QOkx8=}Z&}$2)
z<-7Jw<d>j}<$L>PZ<IBos<rl_YG6K2kS_={ep+B79!MEeD+|C3nh4Gw)j{1<RoDA(
zynp~yAqVze4d(G6*(aA^Ho`OBhMW9K;4jTIy`bT<B)8NA#IOknvA(DGl5b@}w+qh(
zZnW9};BI$<#L!hyMO6K60QD5FaZDKQU-lRLCW!I)YTHxzoc)EY{PiXhTrr@<ejDx1
zr~REMxy|N_aAGtAdw3c3EV@?z$gwt50&H+f<!ST3na0<zl0A-vtcG%<=&OyGZv7ET
zNiRK@s7DIXjQ}TzZ`Wa>_;vOZ>&0{M0POH?gQy>)qZn^qNdMv!N?Ja>I6PYAK$Pm8
zd$|}W=Op^B;j}<iXOhZ{Fvt10IgwL2`H@K;lnNkhOaAIVyr96cUNn(^->NAviHIO~
z8)dPUNbazNzwGi9Wn~@WDZq38Br6VR>A6-nqv_Ov^nd<}mz+nRmVsp7k=VL({sxlc
zoeY)oHwt;LGu&u8y4n6?uqQYKB&77Oe~>VJp%|b$llJm%a!#=@Cs^iv+Hz&w#=&BJ
zqULg+NYusADn&DkVx~3#N62M98hA<TTXzl_OnzjMo;7F+gvdM2P(GQA<AQ50v=4!_
zozObSidSBv7)E{=BWZP2DuRVE>j=U{3k4WM{-xydUtYfCOw6EE358IMfz5j*H4aNZ
z&GwJbQFJVqrY_?^f0jvvjH{Fy(Z};3H7Ba=44+AVgC*V|y09UR4TS0sJ^59DAvkba
zFrE`o(6cz)NUUzv<XU?MURp9%r)+4w^qD~^+X!&-yCMWtyZK)P|NV@LZ~;QPWMi8Z
z*Yt7Fsmt0JJgCI02<J+l1B<9HFCLchPL-D0v?!)%G5|Cs>${2`d1U~o>fn`eT+Y4X
z0+bU&z8Fo%r&8>Bagwk4|G*MpUks=F^qMO;qDljxnExI~|9y0?=)Au(G;jUqnf%w0
zXdLL4as$^o%>S}g^7p|67)`wd)hB<);{MjKekCvn;;hwFuKah+zu1Z!t$A43^L2qw
z{%xOM!{_&ge98n(9B^zb)%dTL{Tj>Q9W*+Cs#sDEp8X?g@$cfn_~txsVkSlO(7%C>
zKbdTY0Z<i123P+HeM`>)P2@xr=ac+;hJS9ODwuIxi49%;$;`6n;Kz!;amAl%{`Jwf
z?wlIVBl|72_jkY3?7WGxJWP522!1F7JL@!&QT>CNUnqhmnnCr||LJW(|LY3p9LxW`
zE1Yk%x<brg1h$Dzo2`Ra9L2<Ye@x`YD1F%mTT2Y~*Lcc-O8jFl;kR7apE?ToxWfF&
zUZLR@?aNUR1eAiT`Y6;Hsb7T{MjT9Il3P`(Pj^_Hz&jD1>(~_0B?{<Tcg0mqvP2+9
zOWvWk8U-~==16N7qT}bg)8rDNm8ebQ`GbyvG@OmYNrx)*>8`y<7?9@|xnEA6EhRep
zCPGv+^R#OV&*2$$e>3p57+IhM_sj!O!e|9vFOXpSy$#5k?<d^3WvKtI>-ge4c=d2-
zxLmt-*9t_M2Mrex>qYRhQm`FLvn4dqa-n_NvMv0%fTbPC>O7e!))(tv$`ajFR@F9k
zSn94|H*Pl)K!csj9e^uQjOX6SvkYh}Yzd(D(gUx7DPq=!4(5WlognmToNPvIz1N1;
z&K2jU(fXPd=EgR4+fV?Duu6;Y{|R&Y{iEpF?H4sZc7SoSYVfIA?-3bs>x<>cns`U(
zR0X6JMjEYZ+nY)1|EImT46Cy1+D4UD1QbM+R-`1QJCu-GlypjWcZY%sg3=Ar-JL2*
zcPwJj-5?E%*mI%J^WOLKc>mqU-rx87g9C7J%`4_L=NRWW&vU33X(I#MvQG^M&~>Y0
zLC?!?Z!lp%pfOt-hEooxP-79ac$R0!Pcv}|Ms&R6v4}^fmwJ0K?6loCy8&^IjYz;F
zo9rl<wdYWH?p3oud0DSO?-6`0k7;96Uqcm;+Rygm*tlCRj`cspLj(n_KUA+5){TRD
zzCISw)-n=|4v2?vHb82=*SSeed?4NlDh0fGATVCP6ndG=AX`+kghsGZu*O;dcmXfm
zPZpQy>kh_Qpi#!1(M(mHjPOt(*wf-h3kLhTaaMv|z;KRYZxjQ(9W^@;b~N2vf{e{I
zS`-Rh2ZW=l?Z$Y0fL3ipJ*YNDM7mpza8e?Ew}=mf>`xS%c2b|cdGFLtsiNMSbTroT
z!CM1(Nlors6?>ge+3cM_aiAHU2p1o+v8w5w(v2u_WHX`&+Oj%;`A%R995ZuvyEj`r
z3Iz(d_ruvGp$(^IOoD=jnRJ*n7GtH1#pewTdyp2d$P#|%D!>jpu{b~!I>dtSFGW9;
zmfqvKI967!)a2GEbtxgL3hhl-zFe{Vyvc1kP~9eweo<k*Z4OkMserFF2|@yEf3${8
zS(of&=^lZ)M5RK_VPhX)0i=Pbc;*sZ0XTnI=C3BNZzAJIJ4)IJdG~Qs<I^uXeSmFJ
zQJ~W#P+tz{6D{c1&~L36FLrLv23V7<I<Msz*IqNxB4Sz40=&kE3JcdT9A;2I9z$J;
zI`JY@{VIWKi0^=1Anbpxd2dhevJ{Bv1a9XO+*HU-?l9cnzRbkA@4V7S8*Egdk-U!V
za}GZ$d570}GIEo-)f^x`ftZkx;1Rk38DWtMAU_&MC%d)VTc*J@&AKGp8nRp$Mj-gz
zq5DihxEGUgWy3$&^R#}A|G;g#fv$RadThPuXqTe?+=<Nn@;un^ZPGKqC>aCg=Xpsb
zi;%5^)f!2?yR-^JmYs2pZ~^#`lkd?$<M%f_*$ZOBxx<<>p1wLE;Q2M15fOVGe-dbe
zw-7OjLTIv+5f((VeoZpx?P#c3?3R%n{Q@cUrVN3%hS>_9V{>-_{|=`0NjQG==6L~`
zvSZ%x-4)Bh$_BEd*etRt9dE5ymN2LN^L^va%KJ02#Kf)!idC|t>u@@n!UH)WO<(iG
zmFk^uQfD_Xv26N9qiedhlQ)2P%7&V8srJMvWPcBD2Ir64D6c&EB1^E~`94K!$yj0i
zt~yu(G5~WR8rXMXBu^40+zp1G?Y+A&MC6jdjR(Fg8nk5wW?31Sjcw?QECEag4C)Cp
znR{<~BluTRo_iXjGG##$=gRy*s%?f~HTL=_6|-q8Vol=+c4ZI3;oEt@J7bF(HImcv
zv=y7byoCR3$1_t}i5*oma*VKu)+SLyQ3!BvqN|10o&lO$>|&*M$)J=0X|9xJrnDNM
zEoEuS?OBsCPucf2NIw_?y1N}i;Rs)%s8{AopBLqrm7yIw1xk4#GD&=2o1pvq>et;2
z14jyA<gJVSJ2xk=NzX!(jLbS#l$?%(m;{L07beY%8qOV>j`d25nkKS(&8-p`4m-HE
zM~bR&R?NmCe!7po`k>`>9OxCB<dK@yd(DZW=GL0*=J>kRA?JmnnC*r@X841+BtXv+
zuVZ<nQ)e3hA5m`tiGC~a(pas^LFx#n4n2Y|2a;VF=(l<qy|Z8ve0uT6)wMVg7-2Q5
ze&sYQKU}e`l8Ir4V)O0jDz0Ln8b1d&!_;Msaam^$xqMA7M}d++^@8<@s)c}tvRWCS
zA^%iM9@eVND>cW@e`)$2PyyP}_soXJM@H5@^caM6edkxJwCLo+zkdNUEQw-ls8h;U
zZHMNo;oShjwl|o|;-R(Oz4jVK1+l`59ZD0YJx5>Xm@j}WOU;*6=m;P7;5)Cgtvc(5
zidtHm{9SSoWgo(x!-N(Yhj7)BZht(YID=>D{piRfdI*VSX-BVmE@-KNFsX72C$X2t
zByeDgqm|M!Bv0*3pn<8t6lAVzqLzRqU=F#z_C!ZM`g1=0q6=&eKtiWJ)hz|e1p%F6
z)(ah}30s!{A(CKZ_2g7!*6w80Z(*z3AIRHC4~OjS0RrDNJK>*~rHI>zeM(N=>1WJS
zip`Q%x8vGx9dlR=JQS=HuQ(~{%3OZps#(3Pde!Wf{2-Tp5>&i~y>u!%B89W95MBWt
z99;*7*Iynf7d_u$>7qWh-COcb)e#F*!hd_QoGcT2O3TU_%TRSN9_RWac?nJN$be&5
zMA@mpYDWdoS#{{t9t<hvzO-Me@aQ(^wl<Fz|7vU~oTptP8SpyO5|CAnVEd~&b-Q?h
zux`%jRjKgT7ah4FR&E6f_-5);8rGXe9bzLN2&kp+6Fgv>vJ-QwrM`(xhpBdbZAZuO
zX}Mq?aAAuBTtIg#Qg#n!joAMGp?Ci^rce+i&yZBuXoPPS3RswX1GB&N5myRB!zX19
zRg;wl_l*Oy^5uuAl;xO$i*CJ){3y3n5{DF%tC2sGl9`u3t{-B$)k3#z4T+j8FI#VP
zSPgB|E;L&*6EMr|jPHtSb6a%uQr`k>7Gpx0uPTnRM&a!pkxeJ3-=3VOWU}Coqm3&+
zByu;8Ha-ou&X?U*+04zmShs$e?bh|#bh^KLW4}qQY<}Xy3X5cTc2j9jn#P-(k&o0C
zas$u0ITa^AY@MD8JEYYHSB_1mFglSbGJDLo$TSx2rix;EaN|rKGqXkJVNi4LpLH?`
z9$h-lJ>$eD=H6A*A>h5$OY!FwPl`N)C0M0Md$WUJs1ooMCykAtR6~nry#O!pIoW78
z)@rCA^!VC>X;$K5%k*$`iOKMqgN`Cca31cBC+y75R$@B}*QJJwl)k9M=DJz}3&#qu
z;i(2<6PyfSb~s?MNAB?ytjyvYOzMa7duEA1>D(qnlIZGcJx+F~p7q>}A@y`%js66e
zd6c#cESgqBx#nnea78GdyqK>3DKF5>YoKqvxohDN`!$#89I8<SKVK+r4%zR_+?W9_
zN|Te-#WB6iBR9|uF$1Y!RE1N;P%U2#!{Xjp*1;oC_Ncf(d2@;|!ekts*q!dbdGe+3
zFt#|<RFL;*Vo&ScJH<2RC)}UoXWs1I18;B%VB++mw<<LqZ`F~#-&Z`hL=D3q{RIX7
z=K}TdCK7GrtNfWUDJFjN&2cSVU`bePX_r9?Ez+<i^I)d=>{B8Hbn=FEGk!fzBU(r9
z(`sdzb@9VkA*$<{PKF&DTbV}%+kmGomV7<$OA%72#^C9p=j2EpAntKA?)yYl>9;~O
zSaaIAfWo7)(vr8DsDxzJIy)NXCMqVq(;mm3w+UEJr5u*yu+^;OP4fqIgN{pGrZ*rD
ze|~+r_FUKjcnU<k$s<ArknBdANTs9eH>{sMJb48Ss?5EpKeOsiM*>xkws1~;Ho%fH
z>(^l|vXpgT0b*chyE*BmN#K@6NGri&I^eQCbYfS9!#{)EGJdb0!A*lEo6mac=<sLj
zg9ks<sVA%D9pB?yC{OA)U{lh*G!kX6QKHj0N5|es&Z)H9_i*{eT>qbR`RcnbA@^vm
zOn`aaGT(K{#(vIq%@dk~me2hNsuP+OyYx11>FwmoP0YKdOT%mP<vM!Z0HN_X2&;QL
z4d$@v0-G+zZ?9JIL!~(H4#`Y?+Z8ve3{QG&@4Aqs{tZZP?x@A%LAb`IUqh}NbejXj
z*;e-6%6Gq0(P?5PmODoxuvEFvT8|bXpi)^Qsk9RCwxqCjHMKM-Ql1RP<V5)2N?^n)
zqAPwg{bhjd{(HI?gd{W{wxZkYQEi-Gt`Du+C1(J#$77vwpsT?PQyzZ^)pgI0F3nTS
zp|p3kgN53~jjRnfEw_ciD&>T@v=twO0OGUj_|KNKe*<TK%hO;Q<c6%lRY&is?N5QX
zLFH1nhC0YGEC9)+QF;6I4gEG!87e#6tPGyPC-0uV`ZoF)5-IUVfCPA}0&L>avW@UR
zXYjuUl(;iWNvrtk(Vvq3tKXdf%W>Pr>DT%H@d*F@<40nU*|*yoJo$%12sHv%@`P>9
zhjjlM^FKfMSR4#tM;v?ekE;|QbZjH80xr{b^PjGw{SFv{SUl73-)Hsru@>CHIi7go
zmHxvBK0<aV8271LKjr+>2>*K<{&zO~&%FJ=W;VQkY|N4)7>QU-_XR&4u4a+NgEGZ$
z#nrEr*MWdWIX?zemvky!_m&)Vl%W5T*W=!%k-M&s>g#>{$|{5&FwcMbE*bz7A(GA-
zfj21^T}+a?E_eauMuSd(KaN1xcvVwhlIP(KjpCU=;^?5HUsFya1t3j_$(NdV&Xh(y
z30469(VOsU-*EZ)<FbVRaCDH=bKjSkTI2IG$~^6c03Z_h0k*}6`Qm*MM1J1ZgaqIA
z{+Q^t7OUKNMhdKdx6^!);bTC8LC-XeiV#c!zrX3Fp7S2%!ZU_Tzv6}84|)dmrt}w8
z^E}<3KrFdkE~As#wdFJ*ku~=5A+pmr3$s1~ZuL#1*a3jRI9(Cnwz1d3CvlDD0Jx|&
zFvN>XER!4Ss_;4w5b$9Jp}I!ZR<A`sDl1|Q67ss2E%!N9%SPB3zT4Tm3H)V7f$wH9
zYp=yTQY+EMq%&MiyAkuQjTNlYzu{+#6oAS1AYV%n)JqKVogyLMoA<Xj3IyB_rFqw~
z^(R70+ba#)=jem%`-B6>f3{Y!7(QmwX&eHsUb-OrEC&4Pn*4G`4vSHAr;U<UH6Ro_
z53TKp%&VT2b$W1Zy}<i&>eGhld9``}9E##4FwhuJ5w?cC$8R!-B_p|d;7$o&lD!Kn
zfWGtO0W@#qi(tTrn|%5UdFK?b5MY?l1~fEeM1o$yA4vJX;W&3PIFA8u;ngxPP%X7e
z_Bj2-pm7=wWLn~MK+p=9^+UiS2mhq;c<4Z|-WHFp&Yc^+6wd?{RA@#uT`tjDP9=au
z`~#bR1A}fh^K*W&^VF(20AG61gV^V-CP{73FPUKZYJ;9LKHK-2xR3q8eMx^K1hTbr
zH|YxxKZck~f59l#wMGqKS#HL|D8E#qzV9qtKOf0%uB<Uq$a(q-IGQN{UB>IWXN&gU
zXDqrxI!7cd%}2mf2yQX=-S&c4YTD2^ak$0X8o{Lw!1kPun3Voqit`=1J(KCoYs0&u
z>jB_Lr$g>#HH7tgx0>;y<4n=OT?Cc_cieC(@qX!3{W3>EV3f~vfXmy}CZ1!tW~2Ok
z6M%RXpmYQ$_eWE<Iq}0}{AqlMj_m;pbq1(KEE4iBw#5*B-?Cep7<zTMKiR1T6G=9i
zL*GL$-vg4qbO}YWA+36s&xsRj4nUp4M(~)_vgxw1qlatWf=*tK)BBlxbCS(B+QaS<
z#mTQnZ06(TvB12WrSm<R%gjS){mD-br>+-dG*iaO>P`Tzip?ytFsV42CR<2inysS@
zB1JrQ-!rBZgD3<|oRO=k41rLAJZ|hBV*=Sp;k$Fjwk?;%OIRJwPIhj&@4PjSsgKY8
zqlPDM{b=-5Zr}NV^nN4P2UWC$d?rgz&3WX9qn4;zXCZz`5QbCnBfnH1w$(=suOV(H
zJ??W2(qR%T?b2bf?U#JAVZ6>g!25h!X31!Z`-nfV8$A_dq>-o~X@5trRom7;Dk@6$
zAUPr?g1)50wsNZY)yVh}wPIGINfCFnCd+p|0;1Dw5SCoM$FCmQEZiieLciM;_}O<l
zwk)$#Ce125y!*v``4C0b$<|o-BRuL5&aX2T{lvP!jV~O}aY)6Z-u=bik|!OIPnU83
z0KmE=o~oBbrNx-Vp8O#jMSD3huwp(WE01N}6Aw3xKip3iI!BjVSGamp{A9_;>pyQz
zH3WJbj)`-$<?(L}WaQnrpG*@ZGo#W8tV6r93&u)^>K~8^ZVBuKc)TM~%BQH?M;2?S
z;G&}&gbw2nB=)xhq`bnF(ov(g)TIAe9TV2Qp+e7y4Omt0RBTvSDJ<AX+a#Jjup~3R
z?^D|$VN1o2@Q;RIMIui}9T*&302pco?OqRi(Viz<TX!3hz_CgB(}|(a|KQMzvg4L?
z|GHSRfbr<WQ9Q>vquVBJ;mVf>BtP;;$R>M%D9vo!@71@4x$mmKYEnXrKp0#oVt>B;
z!un`{bH=k<(2&fVZ*Z~>4b$Ou44Mb~i~K4^^LN3)cI)XEpTrfYKlg=Qw90z2ZU>V?
zzZ5f0dtXjZZaRDpiCuW>V|yK!6cJ|$Q^*x*d%_5?y4Iqr<`!^!j`inW%7~{^GB9*s
zI20nE>b8b#Iwh9nn=;-cknwhCr}WPNsP$oC^u~q-uX>FQzh_s)kNBJGh>6-q(6|0(
zi3D2rGK3dG{iRMd;MN1G%adL_QS6@RBRWxz-O^{s&2djwzhR=cYdKGvZwC+Iu(NBS
zqW*>m{1D}G{DeRp!Gu@h?ujmXOwQZ<vOJ=o(qMUss0U<72-?QQb9NOhG(VG+e1C%@
ztD_lbS|f#{Y=U5B1~J=izeIu`F80z0>bKM_LBh5t8Y7*{BSY>xNnWhXHuO9{TK2i_
z-<7@40?HCihOkNoy94$SiNv(E+Fo}?8_S<Vx(FFJ299rd7d#XwqhU32`_CmB!sP`;
zhEC+_BTMUb+IxCRWFAvejU~rf3l30FPKQy(ahT??nL{Uf`dNT)%~<iP#D>lRSfg6t
z?_fBRPDl^daZu?#2n!U1Z|L*7ekz0CXC3<lu`9P<#+G2aR0S;4cRh-Rr#WAjUcW}M
zml}<w^0qBa6tUi4;k8VfXJHpX%&cp^l6WsT(*oE7&q4LV%qYj&WKe1a<r#JIM3$x}
z*YL!>{O}P|ci>AE391_ROsRRO)c2hXWZn(st6`cBmwwPNzPvcQW)GaHH?^2FH8ctD
zAr4x6r;k^OjbtFh$SV?T++*fqSr9D?QholmZzFzTQ$@sF#nZLrCjFAY@yU{EV#;(`
zt6!KoPA|v%()X~WCHTNfGVz+M_<eK9o86H`KlXYg>-?;LZ{c!=NWsj7k4}Mwrn=ky
ziXk=b0HeuN5gugap?>R>zBopaW=+>pD82a+H2*|t%KOri*Y*bx=9yS4U96-%;GmI%
zR%Tzl19GlNfNvt$FX02sks<L+s??I_i_xNsYd#PcPKOnCTx$U#%?h(OiJpx%&voL}
zHXJ$N=wu$>GmHD)h3v~TMggt&*tN>ar}{0tsoeWDm3QwgJVnfzaU`iIdfddeLfPap
zk>%(8Ln45n5eYmTyGd1N&4nelRoHaT0Jb+SQM*2rLjj!1{Ti(Hx4l2Dq!$9-Tc^zD
z^qh#Lu9KHNg5D`u3dTl8qr?}G8Lo1rRsLTq;OxWOpAs}#nfS0X7SdwaRwYi(_ChxW
zg(-(EhI2o}YF&6d;M{_S<tmNZ^VF(Z-x%y~xwvO3W&bexD9XtDsQ2*dW*QQ_efN%?
z`;90I>mGG6ofIZddtc1c`Gw&erZyH<TJ7LiTY<e$kE5ya{)tn!0xpl^k0a)y7MckL
zv0g6P;?<Qd;RYnXE|{_boz{baCdaD0#+-$TX(WV7`A!2Mz*Ze`WN7(6(}<Y*73Y9^
zGi>y_1TBdD_J&k{t&-BdjC+bCIqc@kWRokWyc7f9{QOe%_YD=<!c$>@^Y;PD?XZ$k
z)xF7M4YRkTjS8Yh%&?F6G^-U2I~6JEwPRyysJHfc=1)GSEr)}__|{ARWib&+Cub>k
zUxks*{nsX+vWv>*?0K|B-SHm3Q~IJ!D{}h!;oHAwn74NUJK*`nUAt?)C*0rjP7vtn
zqC7$#yjAc|c_qf{T2S1V6ZGHzWBC)Y9DD>HxF$Ss>(|5luW@d#Ax`1^)_^zS75%-K
z{q;L?A@BiY6baV<`qN)0E0hfuckBb!7nlFUV7LZMCa`Zm?*6BX_{<2{0Ykmy=l^C8
z{dIhBPDqcz2ZTPdA)>TD9pwL&o6vvVjC!W~drOO?o?h7Z@88ktEeWqOgg@N1jz=FO
zBWYt}W9^Q2K9^eDvvZ^f3pZav)hG(($qiXpSa_kX9%o=|ETOI4=lFEAZRO83C5)FT
zKG-&nXjK9BeOxO*O_HmM{5>ZpkZxyxfbGw>f?Uq&`Uf4e9hdDXe#2=lluC?T;+FR$
z`1qp5Tqs_)E06y8XT$PB;soYSC|HDn`ZscYN*<XL-ux#x<#s+2Ve`<}qFGhHC%XCE
zLTtuQ|FsAH$78#Vp?v+rE1r{JAR%4cRFOjsJ|K^oDXh;5+x*W@{<?=LEGXZ&10FbB
zpYP!Myn+0O$#^wEQ?kL7PNmBKWBV`giQEkE|7Nb^+$R4prT>pOfRIDKQhtt!FCqIJ
z<->>ascCrug1o#M3W_*VZf@$LWKTA)Rza6LGdwe>Z<PMy#Swle$9|_Xg=@cKTjb@-
z2(ZO=Zg4#-EoI50*UdYB8!F4J^V4qTi&uMldydDgt99$;^XrAk!#nBrZGStK(Aygy
z!%}f&W6*-^?e`v2P&7#TmlKjh1x$2ykw+uneklYG+t-Z#i(?95vIq9x+mB(~0mxdU
zL+bvazOjKV<!0&7<O+@PrlQxhWB~;A>hTGpRAV3ewr2iq&}&GMR6>&PB~zgZKTfWX
zOOAgItpl-5=}APp@dm~HVZ@MjH*H90sEOmRpv{->g|veoNJZSIbY<`AU3q)vX|yaM
z;#Sx;OZ={lMUeLQ(d8IW?!VHM$Wo)O#%$62I-Zpq=TQ{4GKK|So7;DhG|~O$*!pf<
zofi|5YlYt9BH{c6N>LI}_~Xapf;t{@D+c}xMI1&%ga=%`4;>>wOcMn>15SpQ0Td#9
zaXQizN8HVB$=g_-0|%R^QVyJi&!u<*n3H5c=?cH)WF<WTU3LaHHEa(YJc09lx>R(J
zXk)@W!otF{5Qxet*%cSKd-VY~pz#b?fkXqF>$^EB_;imbC@gh=4u%0dH`Lmc(BU+o
zMMZ_~fw#g>JO$+ChubeNqmbnjMz|BRBd^Z%wu|pXEtOn?1=5d<y9H^Eo{aK$aEEDT
z+f+RFF3lFmD55>B9y8<5L#%1!yK#{R@BiM6<gieX_N)pCg>2tOQtwP(3NQhwV2uuM
z{YGi$0`Rio^j+?$B+(g9;CHX&yF9bc*m4GL{C0rW^FmWoGsh8A<v!28r0eDR>Mmff
zcL2VL_VMbYP#`iPJpsC>_a2ErXH~fcDtZ>l=CDf3PnJ^Zv#$9KZi$aav^W(Qt5dus
z;$L>y^SkYT)bUb#WWVf1$7)p1v<@wZyn#nm4TqAKy4@o6sHqD96A6RSx0Mv0b<T_R
z(r3gq(O$dPf8AvD>amU^@sz60b?!v<4OPI7ZAL$_>pwm@>=AElA*HLh7|_BkvZA=d
zE{P)tFUCyH75OeM@xe>x@!@wjf#Ixw5nE&8gN201iBUo40UCs{HfU`1bS98f_sca_
zd0njbwl*3?7?9YM^8tHR!*Mb3`(#`;LSiArYPxlRaf$D;(F*{q7+P>G5g^x@Og1{3
z;&}K_c*+aTFxKc<r|ET~JJ#S{HQ~0-z~Z!#Sn9B<KxA;_PR;f|0fR0oo3ZWeryu=T
zxanfOX_SXCXLb85-n`_if*WBQBsqm~lT^b;2`#Jkm6A(1b(U^H*;F@hy=^fi?hhzn
zH`PNe%N`Nz4%jVxc^*W`#Gm!Z`8n*@Tk$$l=z#zPJ8ynT_w4QqNy#t}i?#!J<zbrG
zBn=?-M51CY5xf|-0j3Y*JOH(+08Lb00$qL(NhHyoI}e>F*#UC4i>U?-&gu`K8Uu}<
z@JIXuLs%d~rlwOVEQa^{q~0^02L0NC>$-u@js8)FDNXr=Eqrqq^v>$AZ6#TT{?zQN
z1P0;~u*$9H;)SQ`Kq-6)vIq~oJlW)nB$7KCbxxMfd!VV>$f2nCL-%_!@RTZ(_1<rb
zpzTGJb>oQ`8g{)L@PT;@oLq_uQmgc=r^?kDkLNm(bU;4wq))^j?LZV>Vbo2?>sJG+
zkXw5hB<q0qK?%C1MF3U<)GF;9YOitJ>FRY>ZF`7N8jRT=gVP(cPfha!Wm<DvF??;u
zVL6TM)AgdV&9$e%znYJBtKRJPMF5di#H;2DgYokLw0Bt$&u%LX7ZgVkk@T}gCY-V9
zIuMg9?BD0>+^m{5@+LbtQV@@mP2w9n{IMEutQB=f=!>B5H*f1V8iOMqo?4)bTxGs?
zgQT|0Eb1yywfUMMJe@qT2A885&qaaV&h>X64!mIYKo?|@Xga7J9uspP){`Pk5Y$L&
z4P2n>m3uxRtVJxRVdhcr$C%&|3pw6n#+z`xhjnj+ctTxIBTl!(D1=$3Hh+D;1}USj
z5;ci#pPY$Z!|urF#a5w1yL!ENsn-}q|7MqfwA=garFRN@jfJ?AyDtb!V|pq!YunsT
zXh(1ZDk`rpjcz$oo`m!$>?IW{%ulpzX-{ydQwBi`PG)|FIVhsP<2!xPQMtfd`!+M9
zZ%)ed=_=bClbO|#lKnSZ+`)p7$J!&1IVRKDt>|BS0m?UoK^Rx^<V`*ftZQs0eL_9l
z%NF51Gd%In9&vE=pzv&enr#k*@tb#`6|h=OXmN1v0FNa`S6A2FFUUuozz3syWqNuM
z2x%e<wL-(eJNGb2cqBWU2CvWanb+y6@ffhlHQAB(_fk*rBy)U80#|J^^_)}z#(W#K
zkHgoM$p{E+Vpt5{o48?+DCNOp_)a8X0WjSgn81oS5@5okgoF#A?PSURCTwJK4!A*-
z!Y|JD#<qAowMRgoL><G{5Rxr7V`2N<O0(esv~ZR4T1jYOH<|5cieSY-1<;)>%dkIH
zl%qJ$_xPLPoF`sECt%xI3MnhvaAlP1e+bHZ1&@!3Nge^3_2~uR^yS#Z_AxIC(nO-s
zuz9vK+swi2zS8&5b!%)nJ-i(mEGXR^M>`<@W6H_N*#&x_(ZZFdW>$l9J?o&a!2*Du
zD_RR3*++|nGxzr$Vu5tup6hVA_?1fRbbKL)&{T#Lf$Ps71R0RTvuSjhB3oeb6C<RM
zf8H=eUXB)Va33jBu|mk$#Yc$!-p=7s=2xBG)S?sTY0oMHBcm~1REXd?+n(@jyj72j
zr&eDbCfjgG=DJ#m#~TyE_Y#-KfyS&(HClB}y8}{8l2%rQ6JBtVu*gWt)7fDFaGDEN
zpKg0!8tWV#JnztMa2vC%Z!p3)jloCES@yeadGb32DIxTgzH{I1QQ24|@2TpzXoO}-
zY6a&T+EK;JH-*Jh-;w`>8*3pz&URhBD&|vfZBH;xF(u2>aTM3^$1Nzqtlkq0HE>p$
zFV*k9J8*XhY?sT=pJj&C4WeYoBxbkV2s80(g}h^4efnr_7kQy^D3omInVxJ8lbY0#
zWQ#LzdJFdl%39M@k;gXvh58+`h`_*i=ibbFf~n=IZ=n!s9Y6^+0HU}cHp}s$5OR{I
zdetPtOB)`*S&2%O=Y^e}orTa5Xn@3WeJ<8Y*A-z)hp~`XSSyJzFRF`0^Pz^+Poumr
zmT+(=Cy90H7e$uY89PghiCtyWDoo~S2NwDSqj&Pp;X1nT49j&4tt^v|FV|h85_z4+
zXEK&+f$xk8qIH}sW4(<}{mD|iQ+YgEAmD6RijiLG<*mJ45hqK0EO>cVcEh3G0C_mc
zlB=^;mP9L$+pS_npX5#+-tp>NJ(5INleagKNzIHO<^mwUmLKfH9Ks1sezsm(`nT}#
z$ck^TR`N(_nzpWS?6!Ub4K=AxGepJt%mr3Br(6buM=w@F2~PwwW!xtr^eg!uj%zP#
z>{jIZ_wv4aV9kK8hghfz&L-EIs`ui;!sgfv#W8>}n+V(O0=Nz^s)r{qT1?gs=lAyN
zp8*G%4$u@(FQg`q<PE>xcMPKJ#+`4Nlhd6idreHm{5Sx>WJbz3Z&(d<IgLvx3XJO!
zFG4<5-vx^@tp9SpRkoPc86c?CV4M07@3tg(8T)9Ad+d<Cdo>5z-{gFLr7v_4{2s^r
zs@_xPKG)782`Q<vuk(~r_c~*qR&|`6>?L+*?0}^c<=4`Q|Mn1LfDoA)>kVhfqh9=R
zD2$`0HfDb9#g;GqJ7(XRl_;tmSV^Tp*W?x-upI0T^w{~i_-L#q?8N^4P{OE8ss^P5
zw6tOCP>t?LqJ;pqOBR34L38^w^(4sBX1u`B;B)mUVOz+$TJOGXV7g~<yVb{rC7%bA
z6N_yv^uMb1x0gVM-h76lvOmk9Q8|IO=pY!+Y0W{46eV@E)e6(iDznD&G5aVK6moO;
z&Nsrh4oKyMLql`1QP0Ffx$!`i!Z?0$%n6B?q~^+v=XCKL6nRcAH%#LpO$q(IkoX4o
zWIg0BJ^JUai;>SK1-RE8_xJozF}vETSw+QH4mZXILn6G^a?ZX~LF2i83h>rCuJq+?
zWOEtAz6m;}PmEAy_$xXXSne$`h={|iU{RO7+kg{f<X5vDcde_NO4s9q;xJ119&##=
zpZixoG7;pNIMy0V7)K>U0?a4{lg|JT<gg4xYif;UyZa_+N_$JqVLHxQHB@*|ZiU8>
z`gn7QZnfSG+5m96E|UfQ;1m3%<~KMSG=~pZ1#IGMLse9|fWr)0FzB3M;=ceE^Dr`R
zP1TtrJ78D0bW~bb#}6LnOp}injnepZ{9as9QAy8wLFQ;b&P9meg$wLPgVBn8k9lJu
zG5cEPBa#H31Eo5vfpm#dy&sZw`Oc*)T4?H^!4WN7v1#=bVTvE>_<6@%*_Yb&Dn65Y
zh1AawCeoA;cCu$B5g$wT))5+c$ZG5!hjq`qp}v{whp1$L$V!_*Xjs`vF`UMI{vjT-
zmG0X2yF|>4g^eL5(9ck{JnZVt)eCzZ!<taFU+FUW1Ryp9!XFgQ%y)J?;Tl&VTVK(o
zE=u1L;N=xm&F_SaBV#dwo-X1lW63<bPBk@HW3+^-pf#bv`O{og|7%l{Y6@5;H_;f9
zJV$ijEMIuBn?3|hae9#I)N5D-h2(WJTz8=H)?*sU?3=zz&>?+yV2)>50n9MQC%*7>
z)LKvPZA6DWg0dX;lw{(J?E<PPthF}L3q%sRTwnFHiiB0M9#@%-4V0;0pC@L0(o5S&
zoToUlmla|KWy9gA)u5gj9KwAQwCw7bB=w?A*8Fp5Ln59|Z(fMd$S&yQIXcno9A`iK
zfcbEu$}45&?)iD&xm%KkC&d5fT@cad`!IQ1_n3Q$iPhHGdo~O=Nl-I2K>Hn&ygRK7
znJ|I=n!`Cwx`fttzoLV-hh3Cxot=`uVdi^!QV~%P#~A{<$*mBoJZT!#PcMep81E6d
z3->SIygLbP4ZB#q$D68Zk4rr{ezcYneeD{Fw1kN8ONm{UuFK;_>!haWXO|T2lNW6o
z=+kb>nx5erV^NRb^yXQf>uA4KG8kgMX86nkfGZ~2<UtE^qml=k5oB$98D63z{ht8V
zOA@Op;~xM&B&k8oOFh!jgabRIQd1mkQa+lvq*Ne3pkmsg>TjLu0JNsfwHzwXucIZ-
zV}_p1MXU5s*L0FTp^QvD8!KvolZbFjEfU(?Dq>>;gSR1fp))CH4|(G!Y8vk)cF6>V
zPb)-&-k{%+xP#e$w9pkTEKdzDOFd!j!Wb35`1v-$5jsZYZDS2HCUMOd9aLX=YerI#
z$IZtdv;-gi1ciJV-Q(5*wDOwlK@dtA*^voaBwLvx{aCB;cvC~!8#vcl;%2@CBH>8T
z`DQ$&hBd5LgTL3&tp`|;JnbJMv2HrA>=w@DE(F@jd1dgPn#EytTLP^|Z|nqAagzgb
zjsIJMu}%lb3N~IG^(5BaJ#HBK!jI}JN6@#AEfZh)F(N|iusMU@T_JbB`L@o*6x&g4
zls5I^G9J{B<W9aYxINJ;&*PJ|MpobIFJp%Rh<tR!saL)^E>v?{q-H(@X33KPv#OIh
z+@7|ks)gwy_kcdD&VtA5eV?EEn!lgCGkpa|-NX<{UzXHXh^S*c57as_rM+pCTl`ha
zv!`sOvN5W@i<szf&sf+KwIGGZhv{jQ^YNQb5yg<VS(Lf*^#(=VpznsOwDR)00Fs(4
zJO`a*urSJ?=ps$_z<gm@9eW|f<d=lZm;7F~({+6;B+!SU^1I?dt`ZTEDt4xiEtm*0
zq%)nE`@G)YN?dolId$%;>crxJ`WS?f&GQsa#qfnZKCL=kC@&-`k#!l9_1&bB(?UKP
z9*8=r2<bu2HM_N7#4`?b@|T9<HBPH``H5{Z$TuM5%E(v<G+}8^t9pmJ|0R~Xv_<7m
z>UGP>ZNU9wyacIKcR_cjrGVk2vFm#@`hBN$;Lr&BGz=!qYgkvk>t4E6-QkwLRv&RM
z;r(Hs8Z_k~I-Z9*4h|6$cAX~f?gvo}@tY=wo5m6_*GiQn{o(d&?D(%C&qh*&J!{qr
zODZL>4$aMi=H5dTGK7t~C34T}=HAmuZ!LLCZcjB#-svE`#<*3#W@46jybb!|JT=-h
zING}VfbZB2{`t%P>Irvb5UgtX6!`9r>Q*doXDri*^w!c-+?GTFZKVp^hdupZhUdi=
z>re)&ozrl7&FU{&I<c5j7gK!HM3W$UKJQzv-|GqYj=_OO#g~h6hSc_>)n>`W8`b4H
z<KB9}@*T2uQZBJP*e3lrch$1-bj{qkRIvbfO^U^*ifu3Ty<=j3^9B-@MaFEpM%L{P
zsN36PI7E)$q!X`Me|vo+vi)l#BJS(M<+8XqI>5MZy!|2)*}9+%Z-SdU$k6~4AP#Df
zM5`FYB`z)UzB}a6v7d5$8Zup{G*+p-LACrsGa2n9hobAgZ;bvPbs3%b-u1D^O#I?3
z1aV&~SHolKJ8R%9l!wPWVbNX-g_S-VZ^f?W>l4is$Ms5%#-lD)S>@x#Z<gr80Fb4Y
z_5T4NkQ-xr$3O`Yd!x^3Ts{-@SY}C6?`5xABxOk}^~w&@kK;Y!WlgmY$3j`j)=50x
zoDIBG*V8F%I8=`(at00GwrKjA&K6&Bs^$}|V=T6ZQwJ^O4$b&4-5?e4cn#ZPsG88T
z=7y$N15wptBb+L3Q_v=v$yC@s%KLOM*%I3jE5s~C!N1D;5<V?Cp8tKBO^8SL3#yYt
zd^kjyvkz9tzO$xwxY17bpfC-YeMLv123YMb(#|t`99KYJRkTy{*)2Fa*;R#A+9%QV
zmL%Et)HvBEmP3$Xkp8>)KTv~#%<2_#C+Hqru`KF84m>MUxC3S5J`Lk-ob)>lrB(0M
z>bGLAjua)6WaOJNvlYBs`T=#~6Mw*SPP>(L!DxD6l(-KO|Fn*N-!0_8`Hi0t7lw4w
zSxkfdXTTO(dLG5GRI#kb+i#%c(YCs|z4^r#nd%&(6Yci>?We<SZU1i)6k!|bDImH{
zTR}HdXWKpn5+`e_+YK5Qh5|H0EUgo<HhU}mPGfuVjR6xb^E4;GxpyN_7T7wLkKi?6
ziu<=A`WSmA_M7)lUnpOUIP`j6Rgzxk35i5Kp!DbqzK{`M=}<*(4m7f&|M`)ki^B<q
zYwqgJ;w&3r5C=j;Cf1JQ&dsng1|@7+E$SQ5BosfF=!~0%C6dczaEr_~8+;|z<4=36
z6`Fxx5^N+QJK$#+hk5vS91Cp;cVo^gXvY_~??~#@asETqP2u^{9I?mLBe&uVq=5>M
zt*R{AvSp%_cq?5(Hg0T?I+~CfDobuvJ$sL}f26?BwDEhbn?)eDtL&iMT!1&<Sb>H!
z?>ANNuT|F5OICL41^V4Dy0nZAkD@0X4YdGh#8_4bxl#xaRS$WDxw)4tB@d;P6p7lC
znCr?Szk#gzeuJ6y$su1S^x08n3p7$YRIA34N&8I8$cAyJOH`3NyClSj(VBKk_25h<
zcDEd40{lzc^EJC1I%`gZGySl3pn%Zx|4Nyta{f^$6!c}>&C=?h#&R4?IRn&e2IB<V
zfW#L?<>a0@=+975I%sFM9cMs(9uC5pc$_Ly`aWb5R}X*y#PU*6Me-`iyA~oRCGMQL
z?`dw=<QJX9DW~lOnj|@{K@0S?2U)uhc0VqgB}XGVV8U<?M;wxI-o8iVrIZ*8&=2_U
zju_6P(-$QTB)@V?BSC+d3<g@@ea8;a+r2OTT`W%i#|cFa#awFolBX7>{RJZtA9eua
z0QwcKJdKjDU(VxG{>ZNdpQLktlLlF*v-R>8Qj@;=tzaLtm!63<G|cY%Q}5AcI|!?X
z<+I)D>}<d4O@=qFGBK*=_eMJ=*M2bWuYCTnIAwV>S+|6=tV$m^S^L@nXjK&v_^wDO
ze(uajR3W*uAzQ4<Thv5^5=ghtHsJCRgI*&l8M9g<JW~lu0e0Gb_NH{*5+?ylL)jYt
zAGHl$*B;y~S{+wG)P`=;BN1MM$~R}=7bw00<GU841j(p`6`E5^a5_iCFp5h!1ghhD
zpFHL8NvN>XF_q@KDumxQKystb^x~%Y;Ggd<3?l(;ZQRZ3ou!e#^Oz|NGAGzW1j7eD
z8|84vHdHN4t9K{n;9;3U^dwhq0+NCz5ZO=w)De-f+P@)v3wc}(fVi8J;<g{GryH9u
z8rQZNP<?IiUPz2t4$iV!jB-t2f0)0j6J<a4eS5BkThfdYf)o42wz3r~+emF>Y*{*S
zO+jJ$LdH(UYw=i0<HcOEx|Bg87x&qKdb_sD1+Q3M5J~GhP<TX1y9VBo<VdsV=IRZR
zuN6Pu-btIlUTvEo^G?vA3@2G_>n7!QtMz>KkPVfM(?)F<8EzlZ9B|&A+<iXoR35FF
z?Zw{Kf`RhMC({`)UH0iV<!_T<YyCR8N7v({U33bMnFAg04~lo4@@k@RniO_LRwGA<
z4u7>Q`bDDgux~o#a^4!D`p~Q_AuG#?=XY-9eL74|bXDwmT`uI0_QB$^%4!mKpjCMJ
zZxvbJ_qVfG_*(G$mvgPceQcGIeOb12?3LUgZYnL^Iafsc+hRyOW13A~$XyGGIfu>P
znR(c-|6bhN(eTl=J;AtfKf3qB?>+$84!+gZgaZ}k&hOs84+GJNL_CL)LQ=YcE0BW5
zZWIjkqVfK<Q0l9Dk6cyrqD*lUR5a=IOn*f4WK?|JyIPPiUcUa4A{-sGR6JdxUze{{
zrw%NMA8S-v6u#B!r}|s%@^&c_U^?KRyDi01KR>*mn>&A}y`7yu^J_t_)xvfa;7yj=
zFCX4qf4$f4$HZ%6B)6YY$mF;`icNB}N6pdEL0z;KKKGmiymKIrs>Xf|f3S3XwXgpE
zl2Uu)r2~CgE??d-#=H=^Z{AvZ$utF$IEj)tsIpK}8XkR${FQ*etQC@$4qjMVl7v7Y
z8QbwBf3?Oy%p3?gi;YY_F47`iwqjPHbliSAv8Tg13n#Pg7xEf_L2o#zX#S*rz_U+S
zWJx?&8aWvVxh;A%F)$K@V3nJOL)lMv`<{m{6nVp=gNa?khYFk>YMg8i$2<+YVr&=3
zqdr`nw4YRpCp_fva@!Y~iJ`B=zGsyhARhF^A?UwuF8OUufE4(zd-TP#+^oMirQ7YG
zV~Vh)%e|UBD9?oKFLdm?4@zD4sABm}p1PXt3Q~fSqE)q5IjDQ1=@FD8j7!LG&mr-<
zABIuM#JxF|@AJG`wNP@Sg(@T^<QpKCKS&EQ{i+wEN_M}ZZ%a-$61)Hf#;#;R6#%!}
z*Ug{FH{DUlQ?@i6$}ZvCZSx<fv_$7#PG}scw#5VNqlWsUsrXXsY3-^s0A@tZHe1sV
zKrO32go8Xn5+Jnb8qRGWUxB*%D?mrAy>;K_Qw|ve$om6eA!RlfCj=cgsP`kv%h^t*
z_Pfg*)}fR8iypA1X)g_GaDZ9_8K~@L=hf}Vz)0{q9ot<mqBB_PI+}<Z)b>^r3%PIT
zk4(gokJq4mi`eB|xy4wE^iY+IQSXHaSbGfDN3!oQMeBHFl$#DhI4n=KK=0e7$~4R$
zTAa0xyuzpZ+|QK@H5tbPL4!__!wm`AVg>+7A*yfBbwLVcx0>;M13iex)O<G8Id>&{
z9yt8R9bv2+v;;eEx}#`ikx7GuQPBy{GZ_#FC_!OB5Pl5RXzc(htxfprZ<f3Fe;38i
z@N{37czX>yt-pPXApvSKz&5M(Oz|kh<KTc8kBgLCtB%xKh7F@HO`HjoV#;o`K+0CB
zF3y(k9CiaWy=;kVU?6rwt&h(3RF=CX-NT0xY@C^j<(AYHBAS|5Wtz>d9p|ncw4Tz;
zv(hK~gE))xp~jNQioG_;QZHUa&=uCJdmX<@;yd4Odi>~-0z}~C<&i6bj&&Wy1J49d
zMQ>bOsHfN&i3Lc<?pnh$bp)kBg0fD@!_(6Eb-LU%?d+tNV)CvCA-&a5_PdqIM?fkb
z2_W7&OVha2xk4g08Iy_XoD~$j!ORBY^6-vY^kyV5^W;9DE_K6OJX};&ARL#;1dJy|
z2Nd0b0Yu%7bExhO_XW<-czqVCrlC@KP)pIvqtJKnB0*_X0x-fh;BP^fM2W%7ZqaqQ
z->*3N4xo2o*PB+D+4dyJZmzKKuSB($hk+cl1GrD+e+3+45o*GrR9{09ZVu-ymBXKb
zWIZ2Y)?`e830oR^5Ff%b_{mKDW|g5z)U3vGPiw5t&e86C=-#GsZL$>O1B+;OpU;$>
zoU%^aQ<R`(!(DjHFJ@UI=1Tn0!a`iB^LCOR=Rk^8bHIo0mEtT*Ip@h*c2FRrwlCm<
zfW``#tD_}B^%pI4Tjt(?37w(ca9YV<pg7?8Ts)`YWGPR&R3%?P7Qu=6`tW0H>_fol
z8k~6GQbMm$n=X{KU!lFtmB7C4S*NXY1T1B&51$K@SSDDC-K}D?|FqIJH|;$Q0B&}R
zlxnL<x22Hg=Nyy@zG%NdD{#!~Ko>)NyJZd525Jx!{?j$~fj5wd*98O|RzB9{SH)DA
z*an|<OTS%EbNI$fjV~f$>1s9KX$Q<kyG$x{CUTQ3$@pBpWDam`PwZs?x?QQo7?aWC
zU3v+Lu}!G)Rg;%13YIhxJ+%K7xW0Y$npe$Yhgj#IpQBGMvopNW#$!_w1=#n-gzW-P
zsrd+mQ&$sQJdu=?6s77$ZYcs@L#gt?URW91yGz721vU+snrFetx}PE&M*jB0{nO8B
zA)vX6r6M7KIb-|3uWuy2iEDu%x43QojGFsq8kGEdX_WH<OoYWMeJKjLG9ydQWrKq8
z3Yndm7Z5#Ja;+k6Iso99_6|F#`M0RQH>abf)|i{evmiOYM@FWzw%N*~AiPJ-`@>#s
zq#M3Pq{e*7i}&5i^wO4u&4iia0|~tsVoMOXX)#sb9&+!Zr#_R%dOSQVY!NhT_%x#J
zKDLA(!fEQmM){_3Y$Vm$!{nMS=m#5SE_P#my$p{&+tli*lcdB57M6nI)zp0^E>v`9
zFsq3&&ALW0ivFT~vwA8cl{+{wbtLHZcM(pehAGd{2KYOtXG#sMqKf^invV&Yfg9Xd
zkI@zG1rFkS4fA6&*O!#xf|{}(o{<F>NTu(Hm6q&BplWrYRBbTIAl6q<E;k?PU$_;*
ze0hBEalMGlaxa{l=<Y~V$TQ%DfVXMc9akkSP8^{Oje{l0@~qzFolQccfbee8JL7db
zb9kMJ?1e7%r<$@l7?fA>wQZr%U$M7b@MHMl`u65FtgN<^a;DJyHx2hRJr7=RyX>Si
zkOC(Li2(&1DG-G`=3wkus<E~b$ku2$RUs0(n5;)j_B?dus1V&-YJE{vI5~NKY&U5`
zSB97e<hS>c;yEuF1?gjqFN>Uc@<#lPmJW25h5OfEYcuWFejdSL0CTK3Jlm`h4iM$>
z>oliHb1P{?G3M`%>NFB6PY_`q;tUrFbYI(^Y<83zIyqHhg)A*BM3~mSFU&vjsIXpS
zK=3Q;w!OYU1WHDO@5S&QnHR~NSH5bHL4In`rj#1qV;Cdx$)S`_7N?=0OG5*^l2U~=
zOFR!)ml)N|c9XbWLmIYLLL<v$wiW`G?o|P}Y7F3C@e(J5Ac099es}EP7tFg=uVL4H
zGTP*woM@Aie&~V?*8Lq7a^fOnK!u0|xubRu2;3(e1}$;#JfJo2B63Om4hdCh()Ret
z4Um&3tanx)9BzGF-EJ_|@gG)P2X4U!cGI3XuyP?xf(u>$p3?-T5v&67Ur`3h^=?Ct
zjgrX;?Dfk9H!V>1P(VZ@fK2K(`9fB<%FzL(^rEPcc7qK+%*)iR24Hd09cj&0yuThO
zf~Sc3sOvSmtFLA0S;4BsGOsgfyQ$Jel%KU!;-t#p69a>V%RM}L{-IA5ap)}k`~}il
z18lf>R1-|00;k32filRwfGsCb@hK+eagNb~k3GC}S!^6)Yq{#yd#!BQ=?6n=?5CSN
z5@J?XR-c~4@v?$q?_ow;cs^psL88BHHRAh?kLQNAl@+9<XwVI7X#GQ#!hpScQ~G*9
z)uHMYm-)6EQic}hv+cJl2;wZLdf&zvQKh1#eX?4`DM%hqeHy@{D(R)O+d)jvIN^;o
zcM9y?EFD=et-tDd7N%ErfFBPX9+y?=mI!1~Otaa@Anx6h=i~`R$ZJ_?jgoGOj3EDl
zMeQdD=zujUIqPb&zit#V9r5cEd=>&ejd<_+z@n=8ZduYg<9%>&@rj*dxrGw`WK{?~
zw9zEFLs3Cd(GYY+cDgseYthSbb)I)Ivetzh`Mim*v_HS+DA){1P+myLqZ+GOOF{V>
z<8VJedCyu}nQuyyn_9Gi2L{6s2ZXIz7iDg$Um@DBT`$`TX*Mn_)$CE!@Mcw3-%qoY
zC|%2kcS#W|)bI<Rbs=`1G2$n`UWDIk<83{p^mL38JTd3LB^19y5yVBk#|0N9Us@jY
z@3XslBme#7bqt{7-R6DeK=40*^tbP_X~6P}PbpRRd&qzP<<(6DPwOp$MEd{vQ^2V8
zu@w;!5hbD9{EsBy_jO!D^1^&=e~UF6sYOjK7MFx%{^&;9-|ob(+RoKvNl8Uv3&<(y
zvY{6Sl?1?u{@&Uen8w=rryjQ8hP`@}^0cc<8r(-O9(?X6Pb6{i!k>8PZ2X#d|2+sz
zp3t*rseq087TXJ}759qdJ&N6R<NkW_md%GD^my*`tL5P@XY~6}+emR`s-X7Prbn^^
z{GUj-@tbum<<NqMmHb;uN=k6?@QBd5h!GLne?CVrKVFymU|S8#|Ckl{!ft}x^7*Xu
z`Sd@{E4jNExf0vY?tB#ZMd|+U!_7Vd++fX~$E{bX$$$Sp#xZC*H!3T{@lWL9Z=!%w
zQk@_X@=tuz9Yr6Xl4Ku?KT6RN*AoQhwhebUG5Vjc7s!{cUDp@9K1TfCkKpRoVi172
zKWj(Djs4g6^e=b)i!Atn7g8zrKMZi25m5kMl(r-O;|(YG@ks_BI7czC|Azs{HGzIP
zurqdn>(?6bm$838aY0aOgx_de`iB98szF0X>}b|@+dn;V#P7U-Mcg6Y$L@c6(l&@#
zlhHVA{=dimb<$^d$#plV$>aZbBK-e-BAf|2&}yTu&FPO{1OFsMAtHs(bp8GxP*>dN

literal 0
HcmV?d00001

diff --git a/docs/images/admin/templates/extend-templates/prebuilt/replacement-notification.png b/docs/images/admin/templates/extend-templates/prebuilt/replacement-notification.png
new file mode 100644
index 0000000000000000000000000000000000000000..899c8eaf5a5ea2800129370d553e751f3239f5af
GIT binary patch
literal 73977
zcmbrmWmFtZ+ck;?2<{Tx2`<6i3GVJNKyY^m9-N?qI|;$v-2x0A+#x{l;K9G<xpP17
zd(L<M9oCw~P+ihh-Bq>szIG9*q9lX*n&>qY6cnnQtfU$g6!bV06bvTfD<Gv0WH=8b
z=-Nm~sK`l3kgK>jf^6(8p`hqLyC>Ah!<Z5b=F0cUM&#-BZdfyN4SaB8gGUZMdi(X&
zzTh#6(&OC;WpFsrDv>QBk)A$P77^7_0p%|;Ycy)vmbHm8rD$O<??6Gp_0c}q%gfRj
zLL;c1sDYHr^7ht7mV2X3DGXs0%JL7i@)mW3wHv;kU4vBAHK%=BS}gcBq$@0vYE;|!
z=x3RIT~C$s#`GCP$FzzX<|{Bo7|tH^X2Ca+5xilP!dT@3ek{DFzcrWZ%BdqyKOxj7
z>X8RfpzR2_b%cx##$Bg~6`|uWGRkkEDPj;7QJAAK(AVR`KW^tb+$VhvHbp1apHvN&
z>cT2wBcR8cD1<>xLc|=xC{D)|dOn$$Ek`0Zf)xzVUgmwplKXKJTl-C6`x9rLk@;Kg
zK)n<qBUjhAyG|crJ5C!PxnKV|5RG2G9xAnO`YJKO>D2Lv6hdrTDcqhE3XHXurH&j(
zQ4#7b@Es8fI>H7D4)_KQe29P#6clV?I1~c#8w>bI=E3}X6?!}m_TTR?m@gT{)FtHP
zfZyuoE|!)KuGWrj#vfrUfU4$fG<4i_6czZ*9qn06Ega1(S-k9>UWz~odhr8a?JeC*
z$-V6D99;Rmged=$gCF?*lFUj;{+}#vwnCITiYnw1jxLtu+$?M?Y?Q*U$;rtDT`WNS
zYLe1_ivxcNQChpXIq|cydU|@Ycyh8hx>&KY^YQVqvT?9-a4-Wom|eXc+)TZg9bBpY
zspQ{!BrRRdU2L4(Y#bfPU+OhAb98qTqNIFj=)XVz+^40N&HuFI;QF^)KnGc0uCTJR
zu(AHPZlI{(ODeyLjhCgJuB44UFg!pT!tXfv1pkx&|GM%&E&i{PI{#CWi<{$rm;7H>
z{@*1vT`gTC9PNQ7-Gu+=$^0$+zc2nRD9HNK^Zzvx{|xhgQh{+6el5uQ-)AQLn&aF$
z9tuhnN={Nt!wdQ-8y-v|b=}0sf)R%3?1_%Kr6m4I0<Hkg6LGwt?Vh3yxviVbBaIxI
z5;+LN6Wv+)Q(IeGz*SDZgO5Yy*w1kVkjwZ5#BKd#+E{b`Gyf``W-5~|>mI~An$PW5
zo~jxg4z!dgrV1QR&?I8fuE$dSzWA5vwy2Mkd5H8dz%Oz{#BB|xe=|W#k#oQ$J4=Tr
zmHf9P9JFN?KjyzVf_TaEVmQ%EY}Ed#7ASGGGn$4A|L>oon4d6$ezdsm#j=&ss{c>(
zKkl!ORdN2U1}G*DH!TfTN@94qi<g^;j1wJ<Nmtl~q+=iX!s4@J@qAIr=CB&iifeWp
z;iU?HkNx(atkifgHq%Ay*P|Z0)5Y?;f6lgdA8uWd)ZAO$_7zJM(iH|{2<?T2AOq3(
zeRG9I4W<;+aR0Uu3#D+e(&D<iP*aFB$hD7+lFt7%nxBfoGV60*k<H(`!$O6I)LCZ$
z%`4RNmqzoK3J^1FqeLXEY5&t5Sq->_89{&kbD<&YcX9t;mk|XMReUq@`Ngw8!wIPl
z626w|`0~$q=OO-~$cvdl$9OFLHz8DfBg06>X05%&W-_lc`FXzUN#vdslCI(o-*Gc7
z&#LEG!UP&lEZ$8s4nWFKa{SM8dl@mg*zR{WS?&ibrlh_{?6=z_;6G}oYaPWgps|d>
zCd9G-HVJNZKg>uo@?jAB+)NwGDW+c%#`y2BJBvbv>oz%%nC1{KH`tOztbC^H0P>uF
zh>^?YchEeW{nV^tFf&war&tCw$$%Y1mwRL-{O}uFy~Afrhs2`8=VGjDq=Ql_dY~15
zIG*U;hfJQeKl0RaAtn1u4G}G;oog=ZzNB1z?jEo!-P{u4C`d~jTnaLF_m9`hcBbI9
z!;^seIOlB;<`2DkYt=f3RlVCX!?skLrTWO*lQwA3;T$sv7@OT}&o%CRutBL>G2|0w
zAI)PTjXXr;>C98TNcQu`ck|`CeGkWuWEp&}pv>dtrgYUp>5R0B{?7uQ4#sy!i*=c|
z7khHPuh2<<wvEdbO2_)yA1@Zll>6RE0JFmZ1@8A)^W(K%4Zr?34MN7FAw{ov&5uvA
zIB+I$eG$(e(1;gU1IYsZ@Qjv=)I%<KZe8d3q?0~NuWBHxL()0FeAFsY(7j0OdeH5J
z{vNh95S>Yv<JD_1nz|}@e^jRpoyn-}!0GZ6(RGx$>3c^oJTlm*!zcaj>M&E_)XoNt
zO!#P2z0Je^;$lL=T#nOVyUP7=u0(OUarf6$;qLd(RJ$|EBJaooA8LBiOC=(%K?~K!
zG-L{CjV$_&5ENpZ%+kBJ)7Zcil$}B>H|m(ysPJhU{!I17&>T(9cuI7>(vW7}aIZ|G
z6f~dEM!h<oy*#EYg319*$&__vp{rm*k$~im^$}8;HYOJf#iPXwG1tvrcuuDco^yAi
zG;+;v8Xoqx_LC}{7T>L{k$28-n`G%V0*rp1{wOVDP%TL2bx_LYpMqrHFKZ46-yg}(
zvAcdQ)v5?z?C||U$nn!xy~>D6y-bV5dC8#Ftw!^GK*O<!qxh^$Pla9s=5aPU5+q&V
z@LOwvKQ!tLyS%o?ObL4@hY=?;t-*Aot*865VP`XOVWqPVW8lrIC)3Owgv)MWlKak5
zfWB?V<L2aMc{sH%Q)B!MkAnrb-Ga$dy^ZaMxpGV3RybRX%5~T;hUuQqi)CO*xUBQo
zx`44wAI}!ZblDln40tq37}l-y<GXmgS-+ir{@o|~S-AQ4Zl+`U<^D`&1X;jB9tmf9
zuJ>;GC*h+*MipgXksu!+clx~{X8Lj5V3cltB(2IKec`lI7?^gm^^WU{58S@thS5(T
zr5r(<u-_~$WFVJ|F&_PjhQ`@|0Pe&2s;iytpE<s*>H3aimhg`~HDKDCkz@u|1#Hmm
zX<(q)Ydj{q`B89K?)@gc#uI2vFWsQ!e8ENJ-S*%B+f}CHxQpiJbk23V^*C$0`S1In
zyGw?W_bCU$&>InCo$QvQsXU6As|>f|v)W&j{L6lF;q{mvEqpHNwCqGu1Y0hSx?Rp{
zKaSm>cF_f9`9{`H6@0bLS__XQ6It{7-Gkt=f3vPV{3T{B;GX%`u=qVLr~841ql@cS
zKhjLoX$WW{2TYLf*!394VAxu39mQsRP4XwzBpPoF75nylXLNT;hKzGGjWx~X6$*ig
zL)$U;MKAKBLN>p<!dkm`G1Iir&B_I67eeS^hF86G!r99^e7R`#Y^7D%e*UrlL&DR`
zUWF4c`t3()`K(Qi_4_1XHA-RBPQg&m<Z=9c^|(-D?vc5#sq4B>x7_C0H2b~ssN%B|
z1iT5l*p2NJ%&NC`PAgT(Pi*k=C(kc4TdfzFWP3hO<0&!#FXc-h922EZi0DqP=bzUZ
z8Fl)}aShPO<LOnnm`=I?TaRT^{qFb2xr$}oF}GCRI$Drn7N2W|r4lN{Yt&C-HlkXL
z5E&1W;!+D51Mzzt5!a7fuXHm-m*R0UIeKV((-?kD$$mczWNFe5Q#@|gO8X}JhWWk9
zAfMyfgU)dlhh?pEOr2=ZL(R#V`9Kt|aLK+y9EpGu0UZcIp#yj`ZlG(-hm^=>-1cSS
zNtt7k)|=J?+TO9pB<g2!+he6X#qvD;bk$sIb}n3{ddwXCCIig*W-&~idh1SWU3g@?
z+L*eG9zpN3EgCW+w*0n}4~$DXz?Mjp5#Cib7>PaPzt2Z8EnNp<9{A>d`RlXJ%?dis
zM~~x^cQo>;c*PrA1ISxdn<o(h;UgmEgE(!+?q%L*10v}m2<Tv&8CqSDq;9>mrsJd2
z^Z91yi?VO%n#Lz9-jLI-A$oR;m9D^3&0Fj(@t8T?c_zJjdXuvwPqUI(S{nLoLH|3A
z^2QuKSME8-XEOaJhl?(YM*B7w)FBF>@4AQ)RDtIutj3jD@y>}Sz+2pu;}CdmNhsh^
z&gaYRmgyIHB?&CkYD_TJKKhMzwM(X!ZDHyL^)ilDi_hj{wSmv9kT{ZMi_<!Zh~G;%
zyYogJq>26zc5`X3=;RBnilwNDAsMm`t4DUUOy84ZkVEJG2iF5l!slj;w<7*`2W6}Z
z*GGJk1SVasHz$T3imO=Vye)Ba?H<P;I4ws)%cjG=#b0lCZGHDWsg%0^wKngzL_H_N
zrTFP$IEn6Abtk%jt;H?SAm)Zb?1p!H>D$9?6}PHa6`ypA_XRBjQC+!+ca{B8JKx+f
z&zcwK+$peHMh^4LNj>HRdnyk#jCHoPuC<kbhh2OaG}+VOJs!3_u!aqkzhM;nNCqdh
zR&NvXNVJ5p*wimKluLj3YpSo8%US8IdTUl-VnUb1&gpb<+iF^eb}(ljqPaLI>{$iX
z#&)i~k6&qxa@pK|*`pRMjr~+2{F`In;MJB&XenXIVxCx1f_?m;;^`CZPR;Di2xHX<
z*<Rekjri)-A5v_M?HJp_w_4@a&=a(4)hv!7uTXzpKD1nDz1E}KL&j&R1tqm9Z1#pJ
z2Eo7|QLk?%>N{5ZbY6rZS1nwgK?WF*4i@Xu+6Q5hcCHAnMN)u8b7N52<o2AVL}G{q
zbhZVr4P9e4fHlRt?sF&<xl}WqL5+<2)<v^b6hD<&-^~Br2;thm!>_^{^8s)cyZN{M
znLX2slQyyu_rP$HuY#uyDz}S{M{^ZvY+~moC9BmGAk?eW&A_-DX1xQ~i4IC}nBe}6
z9$0GKuXnVH#J1<V!?xMX#<c|5O>xpmik*Jij>EU}p3GfmUoGQj(#_aM`5pE4<PJwX
z=T}c{`ATZvOs8G^Y#H-O8Q}fdUtHa^<})LB^+P?eSTZv4{6HoWi{@z11wzZY_6-&R
z?Ho7Klj&4Ld_w3Z>&ov@Y+SqIZuRD52h46RsmJT~D<Rw3aBTgVv<`vKYMl72kp>pU
z16WQuzCvC7*;WP{wt48<d`TtQ5Ze+Td$I)f#9}}0SgWxNo8N=ke6A%|;fK~<ju(aT
zB8m48yRC`;fy?<A-9Zt|U!(C^!{6h5@%7p{uQ=HrijPiG$>Lb<-#niI;TQ3-Sk_fV
zN7Mwe?K@p<3c_zo_QkU9jA!#02}a($Gfm({?ol`ch5tdV`V>l8df&=1JD%}wG~+#y
zK6+CzXnPP<xFoXe54N)4{voH5q_W6ki~<LgZmV0QZj(oaA5;)hv*Wt(eboDyGTw9}
z|0`V6jCP;%CEF@_J`ogR`cudA?cC>w1&a|J;e#fNAAtY}cj}}3h^@$#PAj@~6+h21
z^hc%np`K4zAx7{?fiv-Xiw7(BZfnN#S&(grfOVOF3+3QMW`xV|&S~f{%K2Pr_wmLP
ze?qSa&j==m+djkKg8y-{6o5sl;C%q%Nwp4t=8SOP5w_^!=bG;1agTQ=UV7`l*N`Sd
z=C3jS{CFCu?|CrmGTwc@Mkk}tS=B|_r?OM>^p~Z`dLZW65BgzH>>`UJ%?8<W%+hKU
z(x-LE6Ks~M*9f`7&PFnD2R=P`Pz9*B7dMLT9K8F7^aS<GkYl;ph&Q}VY^`G4BWJ}h
ziXc0^65aD^tNBt|^e@h*=7O0|Ddo-=DBJlj`ks&a$T4m!rE>8%Wkm&%e!D$CTwmY?
zZAW!q#Y2780a#A%FVteC12mZt-ad+=8{B_59TqNhmUz+@uGm3LKZPctRe=&hg~AKh
z0}u)^48WXHCmt=w{nVR_RNIsd{Vs!A`=;CvHQ!Wj`WXMswnN$76cEYQcjJr{<Nx%~
z0=Lh!tIMSbrgfJV2S}Hg+{|CLLH!oSFF*1Vqu+HrYwub9V<`DG7yE>CflcdOiZeg;
z<=20D>9k4#B@vCRE+2#Ti`2?2uiX7_`62><SC)YDf5iP;;VYOCUTj#)iWmI-52gZ$
z<p4^t$ID9plE99kGMG+4Z%gu*yfM52m?#5?zJcmrHWvg8UcadB;eYZ2;Fld3JOy@%
zQWDj_L=6RKl=jt#Uc^6iS2RjYl+Y@Q@cr?pzX@h9Y?fVRjvr|7g(j<^z;rs!?gCR}
z!0o+2!G9ke4vg?%i{pAu=r@T`&3`KYPv#Hb6#t*?siiUNv$G#e{aYb`Wr9QxX3MmT
zKE+wn{cQy&s9#i6u^}?3cJ5^Z0J@W4_R?9iaJ7HiOdxpa3rcbW+TV8!Cj{s$4rlTb
z=D#nUDA1Sxza#wHzl>WrrC2d@e8ul#jMo1S<!m@WGsksrJOi6f35<+CZtSki`uCC1
z!_33NoPn~~#<KVv*{vpWY9J?G8h42-h6?EsXe1iDgt(Fo7=LfinhL{FojHS6;o{-;
zmrX>nRC;p7f2V>$JYs*Qvsq3o?Tp)o3aDP8t5QMeFTJOSnGz>oi{aEmopkx{c>N3&
zZNK5AI=1*sIRIg9T6sH+PAX{9Xt#)Cqow#?o@?NVNKLR^u2$R%2m~#1X~G?gU5>eK
zg4!o5yALg{ppoQA(EhZPDm<0%H8HJv2?TU=l3g=0mMsu3m-04cvCUJt{IF>?bpil=
zgT%sq^mA9Tfh&Hlcu6$!b7cq7T+dgj<C~sG3z)9wKZie#MN=zw$DB2P*HK#sIN-LB
z^x0SLZ@SYZinai?z^+y}6|@Z49d^xx%uvaoWzKw2hKINc87VmCp6WXcTcVNjn~Y}*
zy=jcZeXGH}fpxqmqA}pW0+81sgLW@=6ScWAfa7NR-(P3!&(I+#6yoDTM~DWqjRTAz
zW7)CFhE|E#3XeJC^dQmv>foK?Xllh+Mbj<^0GOlQPxS)W&Q4p)DsG2F*6I{ons8EB
z41EA7UNw5F@7Q67Uo_(q5M6QKvS(Ct{Dv{`thCAFxV1zox(&iuC1}fH*ou=&Sy?9N
zxwg2(#@&TR_5t+FO=Yr7DTmEwF36I~YCPq3;@72HW0rpVbYHclD&A`WO$Ap1fa#1v
znfTCh>cFSq-AK9|Wbp1zS}uDUt1+G}$|C>^n~Uz(p97i?(vft!-CaHl3tumA?sh#t
zLhKf*S?tP)cpPYjQ6h(VN0S+>0Nug{&>ALoyMrFJ8$Poi12|`~(LUPoxcTj8BNaG7
zM9FOD-fokO^?>DdU<Vjg*Mu;{xb2OTlz5&ZSYpW>LhE$}#8%{0Fc=jSIiBM)Y8l|s
zePA(aFVbysY2hje6^fXvGG>%{{DLSMCHi<53qXV0vAK%OK8|rF-CEfiw&eA|coH_!
z67LyBp3J@6z}eqV9I5fdd@j;UF&3F8(X7IlV|P9WP#L>Z<}zbex&CfK@8p+VNT@K}
z2P3`l6lX@c-n{!j>znBinB-eTVP8+MS7|6v5qTEMpxU0SY`zt=(Bj$#wtAmTe{7yL
zU{7S^E7lvzMz-oKBcz@uDpu!z&wa7%I5T!I+cnxD9u@^C2Y{Lq{%G-QNRemNLio>y
zVawj5cC(YJ>+_?3c_Z6I44KGM-f^SNOiwa{`r7-2{juG#H$^e#*U;{kXe9g#KPr}0
z0%q{e?bkasqXztjI{4iWbdxNVFgYd@w99o4%J5uWXG%OXuxQ>d4&1csR-43GpD~S0
z+Bfa+jAg9agoUf^{wPfX&6V4L#<O&VO?$Ny_NY7TZ~SkrIEv-dlGuwB0lM<LsM+Q2
zhdS#*qb1Mt(+wTy`H8^wfw8LH@;+zW?{ey%gY>e{`$DV4pyl;-$GZL)fZ!njw6!#-
zOvYK%4T1?fBH(&A5S79;6i>!^I9GuOVKHdlV1(+akd9pnX0QSH+RF{l-YhpBTfEh-
z{4f~%#<C`ZalX~#n1Z&|IN&yytw|xBgK!#`QLEQtJZ3*I4WJZ7BwevuzJ5kvTEeN?
z-LXvjfG6)y$=JWhG8pOsz@M)EWYcXkma#s@+Vx-!RK*fA6PwLr-{FI*xIH-L4+cTN
zQ<rtA$qlyJ>G>k4sYR$nT-?Bi9RMPoB!}vzduTACV;P<c{H_bmYxdG{#I(I1n~Xej
z*v)Bcc9Y*~4yxQ_yeqT2Glt2yl#7-sZTBzX(03KM@cHvQ*Z&auQ6Y)8f{<-Pe%%%7
zI`&OdHR#v?)R>(+^F@&ZpwSJkB?UchW3DhyaR5H2oUrW)4lB2D&n3yltf@E5xu;b;
zNv>IHcFx94fVJ(_tpjmR2woKEV9?(K<dJd$A+`Es^?t#9I}vfyM8K?{^#zP$R^U1x
z#~<Pk8ML@$0_;~GS(5#pF$ID?N7~4gTuBC}CR4}23sduD-!Uf}L<Tp+W$0f-!R%ci
z#>6W~J`kPuTdtl>o&Xb_6*8a-VB;OJzWx!jZi!x7Hl_rXcv64=k~%J%>F*)4`F$O=
z3kXZk-?Ig(08Ed$cpBOw=DEH){$Z^F@}m^{sFz&>tkdMs@iT|9uF#O!gcqAG?sL4{
z<^DzWa4K_Vk*TWfa$})x!+|HK^(2&>=ksI7P7kFRuoWn-cg7EsF8w((FW+|xvP@)F
zM7DK_ZOI*53;fZEojDLg^iBb9@%s2QWk3xJ?sjM^8lzkI&8|e~tG$(-+^`#aQ?$z=
z%&uGcY<|#(2FJko`e<}e_eVlUFxq{ZGsX2cGQZ#K>ZNL$ZD7(`cMEpZH{1;<Um_ga
z8MP~E7061O%!fRtegO(QJxW-sNmPBT_a43LZl+nKF6}FJY48a^^l3q63ZK!1E<<BR
zgJ9Wvq4&Y8Ob7X&TFLQ#4Uq+E;q9(<kX>&^mfis33?4L<2A`lna@Z`~TfO?wVbCa(
zc4I-+DWbLCr_jfJCsza%%mb5OAqatvVc+X^gAhm?6xe4p$4u;eua9hjSA(hdl|r%G
zeyxX*pqr*1i`&t{fJT|t3<NAZ@bG6_6qAe0YXj3*@3-`y&=uFo0x4TYQC6IuVw)tq
z^M{%Wj(`XHBnpXF-ol2^fH+VC^TDy_Y2G+Ok76@a5a9?@LNHp$SD4;hD4^H+%-nja
zAZ3*FP?p4eFy^=6HgP^wL3TN6%3Dp$o@k+c+4-pE%OUL+A+d$sbkG}QQ*%JBDY098
zU1Hd#v}WNGKthh88Jh$@#|PtmzY8uDxu9nDeyH-j7~COtwNH6FTVA9qO3I}0fsKU=
zi`ov16%7lqSZyWXWF~rpb>q2ymDcf|3-ekea{=K`Sykt6O%dN~1y1jCuXRVy-h%JJ
zXs{2P5srTM+19?+bFO<&v_zy>bzSDY2bzpwrD}6a4Yo%CN48p2-$20J{s8b#rsG~}
z#N(v~2|QLXk^Ag7P3^3F;m1od;UtRaj(Y>s<E5)m@2LpaISSj&UhmqEeRh+{!Bd-k
z2xHHW>qFDKGNj(`xmfX*O4aFJjbdH$d#yXm_?I!Cay~!oMNBvPToFZzs&oZVO}Vfs
z7kKlTmH%-`7U`MPg}f|hOK1we2k@V%W0D(9pBxv@9fq&_(2YkaA%Y+GcZQSZyPEU5
zYF>$2qcWu;dhynE8!QA`7^G`I-UqViVGzC33r^EXnDQXm?$7A?(`Pr;exW})xc+>N
z&oGn8y1?fj!a(`JY}_eHK);M)t;H4<f^ZWpx)s_AyioG+;#3!e&`1?AjjyIZVB~zo
ze|1_;!aM1-D&SCgTquKHHy()XM?^c9>U-LuT)%G;=cNPhrPPhJ2^DlS%KEGv1?YUS
z)@=~%a~{XF>GFouS6~iFV_+dx4AF|aHZGKAPQNh@d~{@dAWq>zWZXDW-kZoxI%C#v
zY#+|#S=WRS>0RH;eOAvQJE!!LuGQ)<7Fpw-%5m(xts;p~zfO;{5#Xgld~0ZoD4F8?
z>QIkukdVpWuc}IaNZ1Mzusc=AzSJF#dU#CftV#e)JBmWc@jk;nb@)85K(!kuI|LmP
zD}|Jln+6~V_I#fzXEawa-z{kKEdjHhft4Rs>$Y=8ZPV|6L|1VrSFSr*#^c6|a1r47
zBF3)+H2V`nY8W9W4P4(xK%b?LPMQ~k$F8HArXv4cEnub^d`rH6&*_}@%8EE*z{M7C
zH$P0ZKjJkGJ=3B?$GfIkmAet|IO3-7pTk}stUW?6r-3`qGNk~y_nGla&G%yGXdXzU
z^EbUKkDlGhd<n|XDOM|x%!1cmwzhc+_Q}vUO~!t;-#^qJLl^B=nvL+>2dOaf<pdD8
zJjrOGwn=Q>`NQFXu^)q>3%xnG5vj%vj?Uo)%oN42U6ASVlHiedk?OXIh=?r(>={;8
zf^I2AJ1(blE$)MF_t`ESLoz+VVI*f+EmmWOu0t;(f|F{)2luJ0$v6r@{SbB~BlVD9
zbiKLrWdx3fh+|26vlTSF8hpKXTcK1rWN=zTTylMaNd3HqPbM-sa-mA}EVfcbk4PG)
zrnZWu)?+K>^42+mbv-$=qPJIiTfkHw91h(~Ns^7McSw}Vpwr+7BO+^T_DYra53Y@|
z<PxIHkf4)bu@Q}l9U2aq!D63r2#&<x`l$MN>lpY0K+@$)O<Xd<ySl{cWydWZJ(7Fx
zBlTL@T9vUJp*|BM7q>HUyLqpAX1al-PWMBPTCYO)0!8u`f!8-Xw0K0HIuvD?wp56g
zPfgGZZ|(*}uF*`<@;^xpe7;#}2=b*n8oFP_ytv)$V-H591)Y+9s6HiatCI7+;augr
znf?-QLv`#KWBeB7H>-QXbs|m$JhJRqhI^=L{;X-rpFI%~48`>>-q70pIi`IYE1Hcf
z6wh)0rM5W^5-{evcN}s>qi;U=NmpUY$C-DlU8iQN7Jro2ak)_{3WdjWp~?UGv8f_;
zP8Jg1@L?7+_OWi_$$7RNO8@uec(lr~bQ^4)=3GYbV4OSLp(6e3`l>hdLKEMpPTK)&
z5jFceev~<fjEB`g&nnEhi%Q66S!(rj6>b_;1*KMNW_jJhjB*#b(GVhM47<J6sNDXY
zIQh4jB>0FMu0<;GZI^y`I)+x;7l;a}uQY%(93h+dh%dW^@<lyjf@!em`(X#m7{MYP
zaN7f=-|siPPJJgts##8AnUc%{okN)M$FRhg`wSxFkU-Nl=J@PYac_8*(mG7?dp&}5
zH|29@GAc+M8f@oduin0jE=n^QnJt^g66=;5XkL}DCgtTbUF*dhx`G{}mVOgCR^73a
z`c`u(L*mN_4W8(yFm8;^P;rtC86rHl-|jz&vnL<AgFHSWqcOC3o~ByVfefb-4Le0;
zMtaNR;gr_d3kP^r2<rTYwAk(WF6fsS9wz|6b(B^EwfVFEiA>`w#<q}QC=Mhw&RW2q
z&-0}Gs`??qn(xT7t|{#I_PbdDXy|YbpUbMsPdYN!<Ls_mD_erC$ha|6z3g3sVROqB
z@B{>q6L7XRL_e#rn%+dpv}-!nwYepvI&GXo^7`^m84&wA!sT33vURt2)#*FR#z^2f
zwKpTw?R<zTB-&>m<3#AF;_68*loG7sg+5oh{;I0Ywx?@#L~&vsChG_<b7NG>*<~y*
zP*9^4T9)fQcyT!;a~dfJzP!D-d7Y+sN(T+2t<^%WDLfFcl4m(ON7++wCdMYi8q%*Y
zzw*J_h!(5(!15G}89g#!seZWAOjq!Qgmlp<5Nx*zJFXFjY@_Gova#dIUgIuIM1`^}
z_%jmI>X5UKnN1H+hsmKSUJsEW3<nRIg&@6lG?H;&c&@|ZBVxNUu8pqtwTC_?WR<uJ
zDvC~uPV<US@K;z9$>euWWYWtP@WiiUizXY#JE~Z9Rpv1bJvvUj{y1CT;oG#v!8c@%
z`-M{QHM?UEfmVgyNv=XbUBd2!aW_Bf3e{RT7%~aRh9L1{V2#vkOCcDf3m|UO>a_t)
ztcY8lz$fCiA$_T}?69CMrcflW2wW!*9a^NZ8q)N3{pG@;klLF8aX52}vxr8AWxHpd
zRDUNh&#nX<(se1xs;4n4W-A*zX|-?NINT?4cwnx!?q+K#R47Gz-gd|g2HpNBmPbES
zsgqsOZ}&n<Cqr}r@E)0W_=jb7!^?;rC{7NAkO4dd4w=neCH+G?wPF`{Z;|Vd4Oo2n
z+zAXR?0s*4l&a&mH9eF;j6+2mQ67Z0lyd}Wdg*(6To}nIjy6$=6*C-#hL)Fa8~a|%
zTQ_+1dLA#S!%<~nuuFufY75NQz*XnQ(7AK{(wmQRvUl3G+$F^$f=hpm`&O#_ID*mm
zR0cihE2k1EEh!klh{@VYS+907VoH!^44R#uG|_Y9U73esGmmmgX6@L9ycItJu`;Yz
z;U!Sm?)}ojRV2Xe8H4eo(eyF`+YIkSWw@a6DgmylYb1C3a1lS2K(RiG{LtJc0WN=q
z^6PZwb#piZ3$hS0Su~z^R&@~VWTBPueNb4F1^ZUh4E=B$fOKDi!*k9B*<jD+MwcB9
z+t*K#>Ql{5i8iy}D%u&pzr)kJUK7WRBk}WtLfr-;*joq6hC$XV&7V2u5K;MDckA`K
zoemXO)`obeJ~~Z*%r6}7{p4Jm&Sle{Zkujk@QM8mm)A#|wel2Pf`gGY?A=kaXC9T`
z`Al#Gp(qL&0QSa2jSWjZ3)Rv=1&E-H)<u`ZQf%Ys6PE&kc-f!pWmYLD@n0Wxx=qfN
zu=`ffIHd_>lW6T_2a(i^h1k%!SeamtP@gVm$QdOE9<PFD%L4H)*fVG)z1h@%d(JnL
zI-JBbX~iEcx_m;Q+sE`^Q@sx~jP_--BhJTY#rQgTSwrskcokU55oxZ~ACfiiJ!!_?
zMg<|qk&gbuD?`f&$6c*O8Y%}T;N)?CFL=>+M7-CswT*p=WE;}8L700jX<mV-$tq5(
zFX&Y;<aKtMfNoFj#{l4(qS}(W(Po!AOj7(_0Imh#>}(j!^ml$C%vC-y9gnv4-I~5O
zu_@)z$PL~>b|*PTezoQ9WioXYU{9mb!F1G~JJM;(Mk%tytiXUV^$PEu)ii4I;4{$@
zxM}R^rlV^Sw)jCMw7Zv)`bdf|$?WT8{>c<Kq%{9}m2Ji>1IXI(Hl!OnhV81j?h)o*
zH1rkvZqNvNat^n-J))*np5MF+^U8``8cT<DoYD-EHoos%j60ixLBQ{UyN?(d36BG6
zqWUng&=;{nebyoqmGSvGx@okXG79^UD%l~L&MWKAKY%b2JM#{HEJ*|+3Z5fZ5H?Dx
zkoWB%#@?d1;Ae+BwEF7P*TE>8o`3EtlE|GfF8`TB@jTQ#qbNvsi=7ZPs>nY7Aj*Q>
zDiCt~8UBN7o;D9mvFkjgO`ZIk3iIX`*zG-5HE}j%+AQx;sC7}0v15jHR)iT7q{(Sw
zprM|EVpO_2HafwV`Ej!SOoF_J;EOF<%()LJwK6->ThdqZ6JoIxEy%Z?<*$zU9aEM~
z-TtRyGd~R|p@?nPXcepDzq)Y0H2H3ubxoDjWwa3O&A6!~A*F)k|1ETG*@G!02ETGB
zgJ~_*8vlvkyaYppC^1fjl!(Q>o)b>ro9V^A%C}JiQIFG3eN`U)t7)siZAFQ;6Vl=K
zZ1j4c3^a&k82uxU199IR%uh|F*FGo7jf(%K$<n_l-Z-^-mH#T<k}rxkvDR_&-vn{M
ze#DudFzfO+h@eId=<w=4t3Q1CE4E_224r?ja(OP4ULHeaOan0QXAClDS`QjBtgf6-
zj<46Z@NX`BJ{TJ;_u8s$WF<@fVP3+R@19-b#zqZKaF^7Je5H!!tcav9wft!uTaofB
z6sBtBReGdtrk7IT)dvG=_n{qcxwi_G`w=CP0zl(b-7!w4p(N3)HC~N&-c6xx1u+k|
z$QgS%zKhLygK)|oHR9X)GF<01yq^1hfm~6oEF&K`Kh{NuC*s7uHEhkQ4+0mT(FAK_
zryl8ntC}1Nq6E*stMBGV<Rmn9+#M|MDhJ-xp+?T@7i4(N4DPijpiZJ~Q@>UbSIx5u
z-}@03BLCH=V`mV!DHMfv`<aVSsf~=aZH0xB;;iY&jz1>=`kVYI+CjO&fjoA(pH#*7
zQ!DTMO7C2HL*)5ZL)-#$=3RzlIYhUvWD!G)Q0k)p?Rh`;L?)mfDQpc5HnEtcbv|A*
za=)D@{ey?eZS3L;!h%hz&a(;rN|ErQxI3D!A>x~}et1V~B31<$WRn4F5b7J;&Ik%9
zCQMn6(>0oTAT&xTmV3*O*^`3ArT}HYB_4d*=onblF{hxQo!Mk}IdB_NYQNgLs8O!N
zXVJ3U<ap(e5o|IUFML-YtJWosmjHOjW<ChpP^+Po)BqkW`RXHncOuypHKI@T3QiU<
zOFsLZ_db~bF}(|>t+N(<`csF+nv~c3qTNU_(tc&t$QQQ^Nu8-Qq(gF3&?$pOxE}2=
z;l;2ZKDO%#Zb_^Rc$6;rf?CqyxNbBo|1fxsWziIEvvjGX-t2^F!<b)UkbZx2ic8#s
z<w_pif&45PBU%5Y(y;ACY|0!-DI4Cy?I61xT9GCp5%8#aw4sk~#Yb0&hP&Mf0F<;(
zc{S!T8=}jA7MQ?YuHQ8Xs6n4vF2?6*jXPl)$KF^NT^?MiFhPEC*$12t@6mk!*eBop
zXPa!n^KecbhKiH6#bpN%1u+;E6Dlij;*zZ57htOb^oR3cGSh3YRd$6|;GgdlGv6%V
zu=kjqo15Ctl^2r?At<c2qEh?Kk7u)+-+!l49%*>T?Q{bK{KwRlJ526f(%=T-dJ5`D
zwx_v8@0ULH2C%OaE*Hz=69t=d3jb(u*-`6(jlH~CPrD!F`q6%}))9~DXQUe(baQZ(
z7aB(eqPv*cp;BC|#XZ{N;zaaN%&1RrrukJ*l@sZEdQ7{mSE`1KB>D(&J`2Moz(*xd
zJJfc1g7G_jldo6-rqi?0TxI)uiTml0J-w^)V-#-L_Xo4MvlwE2H_=Y5-IIH=Ro5Ri
z=2nsH3ZI1We=k3Ko3gMq#vs`uyQV`OL1F<9nsJz1iwmy3=+(-9)FT2dj^##sT*&>k
zzXFp+(@Ns#c=Wm^_?j&FaKkf-WA?n8=fjU57ES0Bs_Q_6gesaKnxuaX?Vd&9C|jT@
zIvk<!<9;%Wp;iEJaV$f_HbaS|ZIFl*Z{KOh=O*vZ35$CVQ$ACpJrnU$z1e`;dWZlB
zf>;MAuFuq<p*VZ9YnOYT%ZOSVPRR}?yi24l;b>g(zJ(g99U_0Xk~&ddS;~p7x0>IO
zT*2>bTbT}4TJKLh%p7v~-Gd2*{k~c=thQby8dO5!=2npFvUr_iz<BqU-U}JewQ@vk
zc7SGxOB=ug*ccMrzzDid<iTWh);~v5hT_%<>MVv~Olg^!`lA0M7HVAANXHU^YV>GO
zqFf}VgtA-H0f#FXFcxM2VI6(DyQq)VYaAME!$8=GRRDTH_YaSq&S~4O5?hVPpN(x=
z$2GrR9mJ7Xq!f5EGlgHQz7cR0<4JT?I#>n)acs=f4V`7#KSl$1j!zd#qb=i5rF5vE
z-ho7|GAvijchw-<BUUW8V`g#W-A{z(YYn!_j+)NGbm0s!2)pPl>^r}{2O71tntBKd
zu(fd6nCEb&#d9HQ&3>D$7GD%Zazafi1H4Z-(V}y0H+>#V@4<weCExud{^Z4PY%AyI
z5FS8P@zq&<zX+ckZiPx=(v^lx`5hm<=z2ldp^zp)Z-<L2@qo5H#6cdvKNGzlPrJI}
zlecq&gxNeD8-!tsNH{^wh{%YQD&z`4#KN+M#hO-uz<k-SE{0B@ABb>a2EE#B1&#4P
zY3`pMLIvSieH#$u+E`|#ITu9Vk7n(3DE{?|GFzY>h#uO|DwDE`q_;o#pAWBxi8+6E
z+$~^_A$=@U*5B&8*c@@+8QS?o+h#rGr)$E8^>IFTQu?H`t;1SkG?lq=NNt*|o~oXg
z>kS@PJp!V=(?rhdZrkbIb5Nf_TiR7r%CtVXs`IW_yB!~4UCI}R)Ufrk8q~fITB?`p
z)VKBpG*XTiCGc1hyWQ)o;8d8dOuGW7WaJhQ10l$)?X(#?F@)-<_FoJy3B~oLqrW_|
zE$cNL=nW<=`rYk|SUA(5Mz`F1IKL=?n^Oodj|GNx^k!yRJdWJMu+v3y<`o_dIwz{6
zC=s1b6^fa0X6axqo2+C-U+XVrGy3FO={+G`Njl$v35PifcOO#xegKheXGAk$fOPk)
zD)3RUI%298>K=P(AWv*vPuggTBQ`=|jK~uVY&ptUez(PGYY7{tY;Ve`dJrk1y%lbM
zNKATxQ=Y+aqh!DMmvHn5dnJlOf8XBjJzv5bv#8ZCXabRdu@Ayee_(su&$e!NV|ku)
z*+x<r)0S@y#Ov#zVLR(#hF=f+_L{8<fA4hqYW1o;;K4aBIjFeEY63xOSt7(?t-V;c
z&7t8`csqs$akOVb1ij_k*a=^OA>1CQlSIg;fBaEiyO@Uj56}9;{OiLn{Uf5m1zPld
z2beKl9tda;S~)au6@YR$fkH5899j#gQs3Ln9NkV<bbF#E59LBdqs+73@KmPBq2(|I
z$WF2mvDR4gxlA|A-y)P^ieo#224zRwEv4^2F<kuKl<4K1Uqlcw?tJhdJ9vilp^Grs
zhX(Z?nOX?OSWB}>k$QXzb9=mNF#B-cI2Ik!rerh{CLQ-MV3<l3L!$WAxNDv%$%r9l
z$fkv5)5n&@O|tFt$y5|M6BItH5yoI#>VCBha>$F)7n43Pj9KC)QzVlq`qf!-eac##
z9p&x>@qwJJ=opa(9Albg9hEF40*mP%RFlW>&U#YEiIyZ4&gqK+B50#pM&NZnZ}#tx
z@1P6pAW;~!N|2@?CY;2L_(1R(`CWuoGPk`Rrl3+5?~_baGufoyLJ~SPFC1g6vvdNI
z6!4awr9`&ePWC)%{fa!(uo|aetJH5A)b4*Z0lsCCcG~()&CrV~DHMYq3?Irji>Zai
z1p9>Zi?1LSh&W#;AKb^@b`-pOo+g{a*agv3gqvI|sd%_PE!2QpCcJ8|ExspAX?Nxr
zh#(g64i5Jo(a^Fifz#Tt3RkyN^x5N3*q7EC?df*%x1l|8<XTwlA?%t*x$}RJ?Gq7d
zWIu1s^}9`Xf1i3{bEH@VZcB?)4Nn=2h*h1&wrqB7Cg${WpvMrF5zh%?p;@-(fX8aI
z;Si}c)Eg@I`O%!KV{wi;d~tMY0J-L!3LaF1$Ua~Tq(dPc4C2I5Yor<s_IO1#B>St2
zs_9GS;I+U4<xa=R;8X(=?Xa)|U^)y7s;$}wXO#7k?ALJyIWE;3LAs7C`CRle%0dn=
zMKBDxYnYK8piz^#7v9aYo)6Lm=DAGuKZfNm>{mj_JcSZlANMlmtAht$dsj)Rm6Waf
zy1_&TdXL*d+)p2RxMGG^b7jeX@trI01+2TxjBSbZ5KDiJSzH!m^_^geB~?d*VTg0C
zMLI>K?Qsm;gYnGW25<tF$S%enO7DFN6FP4P?`zFUUyN){DDRcd?9spqnfhoT&^l^F
ztB@E5uWtRBQmQy!Nx&k14REmnvYPwW_r72P2Ql%&JHYl<K6jf8=K8!u!eZ^qrm0|R
z5*>oJJL|kHegEyPwW2()q*&2}%{#g;J+qaD^W{1<5WnX~ZI^YM>+`;+5C-ikBYA@M
z8Iy&!ut}6A$93A>sj0$<`#WbKi2ay9JP2Ay+>Z|g{Gv5_x-s19UsY6FS`X19u<`ha
zzc_7dqF=bNeRH_!%nyR?s_{3lS%`Lv!8XXoCW_-%FHuOYx2_ouTTqu^G_N9gALFek
z1d-px)?p{bScadX&WQ%>Y*7OyKfW6KOHq;YE3SJ^<-qyIEyROJ@2VJdaGjjC7EJ-%
zpWBs2d}TZ$K`#A6UhJ_qYyO+&8&g^@wqD3@5Q;R|g*|<PVc6)+?&8TD^hS#ITHI9-
z41~33#4<2W=(V8qS^f5=SrwC-3o;84X-T1IXm}*I)+h&AmKixD?xz@bNDXfWPyFL&
zu(rYZ9xM5=G$U#Q`mgg|NfQ{r&02kBSUry8FL@3!?Ni4>K&%$!9L~JqHs!xuRm~PS
zKz{YZbKSoKLQ{6u=FbRG1@I%*7koJ6!6AA1R3@BboFR-s%n6IEc&CM+-!M|OU3)nW
zYCO>oNy^uCzM<&8(JcqWUucO-7nCik2*gbG;s|8k);9vqY_N1}#`{Gh)a5Snrf#iD
z14E}TfpOgt&Ow`Xzb@ja?`@CpY2n$my|t4(;Hg4!b{S7GLMT99Ik-&FlMUmCCRcaH
z>%Sweid^^Z6{7Jxhy4Z)d2po8A%FIA9dA$p*^z~G0Ne`%BtIDW9+T{M1?mO(=28)V
zss^*&tVAfZd#|LT;gQ2h=g2GEO;OL`j%dF3fm0*i?sta&^4ehWtQyeq3erUal~jrr
zC-&E$UD+?r?!E*2A<NPhx`?0sxHs20Ky=`l@h>KC)&r@=X~3kqzvz^6FzS__-^eZk
zcYsqzgKR_|Y||^Kz8p4r49~YmOl@<sk%)h)+8#CaJI8yMrU#mN%qAdc<fcp7+d7ra
z$cQ8;9gXn3!?M7}KAklK5T@j=VVyx6IfZ~_d1UKm!F=MoFo`!CgM>9l`Vr|C;31$H
ze_u()a*8$zncUSW$_coG?>nRfHjlcJja+J^MB(k;Kf=!sWxd}Q-#qN3J-1L+^7j&a
zQAj7xnc>|eC-A#J4m3{>?ST(R={%xAD6~<hiyZ9TLUtYEi}2S+L^0tCDepr^duy$X
zhyVmcUTYZy8+|#^KPKD8jaf)4CPPHU*uDTvD;sYnY_sQk4z9Y!UFW)<@y%j48c-m+
z65$UUxlD7XvN`EGgh%m<U1JG*1wob{dEqz1VoKNB;!no5{p0Sgd^LBkisZIoE9nHI
z5lh;4&v!Ee8+<nu%eDWAJ37z%job1fR=k&s7k$e}VhGAV@03rw9E&nW223BuwX(fj
zY@0ne9loTS?-c<_28?u;gCe~-Vwro`8@6%p)-$rhe`Vb2#{SF5@N0X|3B{vPbe(LT
zi*sI(YIi7czG*Mh^ZojSMIfC<2bi~q_eTKj?c$fKj8Q{FVjEaqfuzbCqdeE^DGm_i
zC#Q(dOrFq17zG@Blhr}TX`s@wb=tFVEf2|BkC9*d4c1|n5PuW8PldbDXnS0d195-%
z5231~y+U@XpX3^^3jYXmdYN+~Pz@l+V@#+vU;e>ln`jTVt8N_H;dey~2Od%GeIv<M
zqVbG0e$d92wcDZG<#c<T&}Xf2ae@!*MOjWegK0Ku9?h+C*xFItGerSSH@M%J^ADut
zQDpMZlXw!jy$(&pt|ws4OLgnwtbfYH5r3XnY4;A!j<9`mo0wrU9qtq@XhT_Sn?ApJ
z@I8yK&foqB)tN|QRN~%ovO1DY4bq%X-#MXRK$v;qgF1_MLh)VdEhLO_)RznyCYYA&
zROMx+B$uXkFg_2k?^ATL>vc<v89CE4pZiF_B$)u#kbcbmbwA&ZhIceg2=N{YzjbRZ
zYIbiC23EY6jP5UIx`vim<c0}C58o{DDk<_ZGtdaZFpOwqUOIh1{?~rU55w?&TVX$>
z`0-y;s?Up{^GIO*Z<a(%Kr%_1GO<zrE8rxO0(y;{$g3rozlxPbDBu*d;L=&r_?u89
z186|g@j;FMIS2?iD+ymTAVSnsZq2_|%Y971eRye}$NaC8Qu@VxC>>I)_}A<x3-le*
z^x<~RveAw&m~!Ms%24NPUSxqE6=285x=cssQqJTa4v-CWOt$?L=<HX|4;TTkj;WrC
z4W9XKNttu!1bi;5ABne9;-~2>MsK?X$ZF}F#JRfgGZXBUzSnMZz6yn<?slVIhmWg2
zcJ?Q|HMwVQ`pJQSPLiPfj2Q(PwBbZJ{vuSUczcdpUE?vjWUZ9sH)T^`7?FxE1UJ3#
zX~(gyIwA@YtK$Hxl3Lswlkq%G-~j%i&Fd^!@>sSRub(BI_tS*%eJurunk?M7#>{3?
zmaN8=cD#z)o*xXH!m<Zq|3oRTBQ<4nsct{|YP^l9PAJ!{dpS2J(OD?p{j;CktOhGS
zX(1<apd9;~F>olVu15LdHkfnhOOBH{#@9ID+*>r95V?^97rpRAA+mC_X&*ll?tI}8
zY)N8lRjWzQiZvI57U9()4>v&et0_i7#@dIH<<bY}WH1cU+Xjt(k^SmLR<dRNE`Yxb
zj9Socz%T!)roRZVTYmmHCh{yuT>v#5x!4%`wG0Ssf~Jd{L8GaPNUH6r>5_;)zG+Sj
zrYqud5Ii(+GqWEwujLK_vWbqpYjCJ|yO!X)z+S2ZGXlCEC-g;;Pdc#}AkyI10^$df
z-^#3u2Z09P6BJ@n1zZ>J14_la3d7pn(N%5?dvi{}BNYCLQPPfp`-m<QM_F(jUD!+8
z?4-eNaVfb<WznLsq{V)@5xm(Kn3^{RmqjB21RJ!GKFX8!qQ0}4UYRqV%}A+>ekEu#
zt&@wC_Vvd7kh^{d<sEP;fkSp#<dN(9BufD$VBXVTiXZm;HQCb(2K-#sRO9P*5@yWo
zY&Q54lUIu*3{6@U0(MK~l(QKcCrS`@V(xw+NqJ`VlJ<Tkns!XEC|qNB#yeY^!>{IR
zzNhw6cd%DsI$@rxvvYvsN?Jk9cD^zZYQ!X@I%N1Un)Qih=PbTC=4N$X-btqpl!6;|
zzU*^SKQAvwO$-w=k<K}4wPt3}lk10oev;Nb(Af)<HJM|wE$dQEw>5fqWlOWc3DSWn
z#I9b(6f4W*YMH?x$mm`M4)C}(!H@zD2g9jL;E;qFpln&c_!kRGIazDKI7~X<$0Pm2
z2XO3%RN)2Yo0WxkuYL}1TduT_*`0*;MLTK2y=B#_2Q$;8=+^Ce63%m4DZLydG&(5o
z<LVX*dG*POs1ni~BUa7-72B**qXBw9GL^%$*SgNdGKL(|;pFxC)$1!keg$M4dTYdF
zC6z-Ut`R>>up9Wb#h}Va;*Iy0mRkT^4rB~9%68!!HT6vVV_{3wr9$+2JR3Tdw{8Ov
zN_yARm7;feI#moS%KB9<Z=Vuo-bcU<m|mio?g@XSS7X$>)nGHDnnO0nTpTK~5$=Na
zVXZwyfs1w>%-;86Ld8lV67$K2q&p_Ucc>M=1<rffym)QHAJYL>Wd<6_$vf~}iE=KJ
zjey6I8J({pr}-TY(nk~t|BWD-pQIq&Yc7f*0uw)Gy%o!`LQnk)yF%1vAtNqx$S8Ou
zAFy>~9C>V7Q2=XCjUjdFu=~=0L~oyvX)l3kGN2zeB0sG*3aS4Tt5Pj&>`zTb33&dd
z)v;P{J3q{k7*e}oF3jSHZ^s(ew|mmIoDMi?Y1G(bvIpw)n~W$a;t4s$qxk*)B(RBr
zJ@Yz0T2AEn9|vpeLJYwiHp`DUH#K^SACM;HMUPfmF8*YMBjubeR-1O<a@Xp*J`@Je
ze^u>+TLw&K4Ue4?(|s$xHvtPAL0hTpiZwU$pEkA_nY!h^I#cs4nAetp@J|5_yx1{K
z^{V`>##id%n!u&Hy^wHG$o6q>0B}T3V7vn6huaR8STbhbFZ^w}oJ5*Y9bzA3*vG5+
zd@Xuj3Vn3A^au>DEU2)L;lJS=eultok{}sDL~>w9ex}pwHwHs+N8DVqT?f6MpZrzH
zLPXtF$l!Jb-?)M%svk#9;J>cDI?8kMk}D8-g7+mQDM6GrABs!<A>?zJa=Sf7_DgWZ
zVDP-RH3$j;mszjZqRyTbu%Ox5IH6MDZ01xDw^`Eex1dc;EHxYs9Ee=N*75YWy9U#`
z{`y&(L}{mPb@0Q6I`&DP7fvl^kPwX$kD*?X6yv7aVX=1c^6=&x(@y|QCsXQli#$K%
zcAC^P^-dlwa!SD@lU=U^K2WBMOmZUHc_-@To3(q%q}5jUIyM~Y?_tP$$k+;*+!eBU
za0iy3gFo3lZ$$@Uh5sb5|4@cosCbttIEDD4HgJ{ISxv|q!oIr1M{?^4=JPORw#EO`
z3j*{89FpjRSzC+rC$x)I&qtc)0;vm&^$D6NxHkklIYMoAw_S3CKm-+M2p<NCRgY`k
zZGYM@E=%D26d97+b=vi;ckL%9gECQR=&O^Tm+%gOrBTmb=EWMwe$Ro&rW=X~!%&yt
zbPRaW63%p+opPAij;h8pd6rq!Xe0@on^m3wLwB*lIBXncJMcdu{`p@3s(`qF@lmJz
zMWV6k+ZwnSd*k>dqKh~c@ZrZ-8vDDu!@xKA#Du$sl?Gv=v$vIiJ#7X9_J``lF7w!u
zdzlpCHj#h8?G6uW268GK7cvtX>?=P8A|(HaNaIewVO-OPGZ4A}j#13&i#o$`qTX0u
zsD^gYp;Lq961UOly!}dF`YoY8OE@EEC9s*Hm99KVls%md1)XDyK|>dt^z?G<^=<Bq
zY!LkN{@L1>ya!_%-!TdVX{6?mc6I1szNol*-(Oes;>gvlI8gP7*65jJf7~ajpTmID
zX~Kj5hTN6Z{b;<I=~;gPoZw6(DVew^NdAqu!WNU{uZ)LTv>@nxJ}5p{wz+{sNFRLP
zXs>U+)3c2ZQUjbwpBFyUQz&>l^jv|+nbqFzO3N^z0O5p`fo{X??-F~;Y+&HP>8K@s
zEFf%9oxib9l@bV<)p?8*p1A?Y%KiC_h{C9~nhNzoHwL@F&EZYPtdsWZr0D*|!DW0f
z)z1N_8FG#83_2U^8^A?O8<QmUDt3b1{JbzI&ywFvj1qOhtTuSALVw#K;$5aRM;xHa
zV3x?`TO&jq73@(59!TanDI{?*C2SIW!N(7!#8dqW(6gQIB9L2%=E>fKu}Ub9Rg@J=
zb;POinoHki*wE=FRfK|+Eli0Y*Z*PetpB3gzi_XBNQWRD(jql<NJxvcDAE!FLzlF4
z!%)%<f*?{#Bi#Z+cQ;6P*Zs^np6{P<@BNYeVwhmh-fKPUdEQHTA8Qqzq8NS-^YNmd
z*`s`3S)-OjetqxE*5!gLKmgsJ`Nm}XhrNIH%k@$M2_U&L6Jhd56dPnoB%X?5-a4Xg
zdd0JHlJPGGNW(c54~LwLQ*WO#!uQAn?F=`4_U(m@d&wdo8(HCk_VBJ7C)tt@{k-KE
zL{8;0j1Uu6o+<s6%}&-82G8swH)aj;Ix||4AiKkd4kw?_sw}jhS`PeiiJGjEqLb=L
zu~LL4K9-EG;z-QaIOov)^{2=F_LD;GkTy39N=#d7*c%*V;}X>H`@e?zSeAp<9(?^7
zrUHlzaE2b0y4CmPb0b+#KieHsUx}>{Gsg?nYuMxO2vE4%`D{Et%t(Pa?H&aMl0?+4
z2DXNY{L0Jl6o>nxNp9y2or3$$!y-nVqythv{Ww7ypDR6h>*C`=;k^_6#9!<99b}=j
zNj(KcD!)%rk<fj)&+S3r+m2=1INlM>fRp6Gme_`CZhfL{uUERgBC`QrwE;=qa6~-2
zE=f<%V{}OIo^z@5n_LCKqk`G3l$&WRQqojIi9ujRU*(ISM5vJtMC?4FAl?zs?WTC9
zF=DVevK1WECkNLFLm}r8v2FR-_N8S`zevlmx7u!dOE7YEAPgHeKDv{bWswk5tl6ZT
zA!>X!)!jp#TuPV9Z!1hH;#RHfE@N*RiDzYy@K_)6&alrR*SgP7^;5@SBdbF3_Hb^M
zFDZ_B)bPs9FzQt=iE7_my*vDyYUAZ+*L6l5ivUdGli6kedR>UPEvD4szF`Kru-N4v
z5l&<^ncM4nq{pkZM4(KF@F`gkNR{$^SH1L<4lfrjoBpum-lK1YFV_w)9YN;oL%~X-
zhtoHkG~P}l&SoLtec$|Xg7Q7ZqL2yLw4yy!t2}9bvoPQw@xvVOO0p3mQ@Q!5j4<he
zdTR};O>;H-N6`2`V#|)wjWu|hIJuvRDGeb$6&iS@3C%Ann4R{U=zsN6>(|F<XeXOi
zIZ<wlUl{3ts(___Y^2z2p+JE?t%O@2LUpm-u98S(iO!KU2uXl2t}CVedg=Zuf!!jl
zSO~Lq;+JDsEHZMNWVLE`?pUg0Ssf-b|F)PvRWZV0lutdA@u@UJ+`^yFYUT-?GRB^H
zOF^ySleFDRbjtnPc2kO*Farf{jmWNIr%2)s^*n3j0_Jxo%0#DUpK6uEC#m-|^vd&K
z<9hC$O9KjreJP!yPNW;SIFiuo1@DK}5R9M%ZjQ3vCSemjbzmDiUg`dzGk7~WEIEMr
z&P1ov+wFSG)-gyZu$ASFo^yYg+3od%4_28O8t+<E=^c_xsqPn7p7`sTCeiy3z+U(-
zQ0AXmXI8T62)s+&mBbZcceqcDY`TjZt5+gT>_aZIj8X~a0%h(m&opfYsAvze@)y1l
zbn84qvxaN##^IkT9Ke?2(CXME2cu}jep3;_kkyo7Wu5Ot&BWf!S=0m(5Wq^s{bUZG
zJ=AMYl&Zh7UHpN-FPPQ3pP;Z2F;OrjDVOirR)PVP@rVANEg_$&9*LpGyY;1){`^d?
zgTl<y7J)fd;J+Uy-BJ4<R(S-B$I}mri(GFn-hIU&`htj5q%JFnr`Qg;?KgJ@{JcBt
ziCiio`zCTgDQlz2n%Qc3<DwvT(B?pkvOjfCNy(0el{ksj$XuV4))oH=MDoZD#b1qd
z4UstM5pK;9FdK4l<z>_mS=?`F#$+69xDoMk3EzVVbQy#?x7BrQZ2#;`$Is){YY$l?
zQBlqm(z$7lSlq{m?{}Z2R{QkuhY94aMK#BPbnSOKV=|+^*L^r)9*r}bj;_ycnbYy!
zU4TI3+Y&uBy&`~ycvC2H_~PPN>m%MvV}{<Imp=sBXP)}kKtK^v`g51)_WU@_UjL=A
z?c7bUt#LH&#%yiIV|Hbp-8{J%84|wS0ewOoatga9Rt?g+cpp^qhzXYL)E5yN&~gy_
zElmuVrONekEl2Jkekx`*sL;&+`5=5xz-`)JT`6twT#BNE_6bUpFfzVFgq!ayZY&d_
z-u6#!>NHfcr($P6*<B8>-ZC1u8DqVq{)ST=lx^!0(9`e1vwI$)`>lpTZuUU2mG42H
zc?8~Evc}$)^PDHc7t?{&VWS!RY8q108G|8;5TARndN6ofy1;TcpPs*ErKWxf`vu~I
zPXuYa&$u%jS9tmAejjP|U#y)X)4O=zt&3&Q=M~fUR6bi)h;NPOA`j1<%<FGG%nFRA
z^ZJRy{jM%e%_OqoUFeHz`~{ZRE;VIL5q@}jwRAGqOLk*nUX#h(JV1(&T+Vj>t3(j`
zXn^~<Ud2zhBC-D^_grX!){x$0#`jl@ASVEF1^-&LMakbsErkHN!UZXB^6x{e6@cO~
zm$+P9ul{e)GMEWG%`$qb$zMsNniHrMu0|2Hr&@pIi*%q?z?f{4|Jq;{I)LeAJzQ{i
z%Hr>n{(TV)d6u7=lKUr_nUThQ?`6Ry0yt~qO9@zP==+f}e$=+3rmDY2@kNLuBwWmY
zglK*R^GOimF-SiVMZ-G@Jg=yl*JBZ#Bw)pb3$xojrE?_;UZ47Ubb~%-!X|J*XDivh
ztZ>`<RYV2lGwOYb_WG+`i&Nw!PM@Bb+{f?6r+zs;Cr|j8+E!h6S*)ju@(9(3uw4Mr
zD{>okyg~RR$a8AGT<o`sr6AIRV4zPzi>_}nRb`Vw`rOH1>e0O+P=-!7HB(wjogVV3
z8@rL?jiEA9ovIa1_$wy!R2jdCn@Ev*0_Kc`Y^Ei!muI^k3duZXR`*spJm{nb=Ih<h
zUV5+oO_0TM0Yj*X5#ihl=J9rSFPH-Y^TsIZ;LYgv3@HJ=|9J$$k5IY(J6a8CG=k)y
z41tpxA&{%}z`k70iE95UdDRzq9^g+)#%TyGbn(ox{SrKF`R7Y6-yF5LOMlvP8zR<3
zx-cS6GBb{7vdxiv(^AuZGl0>t0jWg`^+Jtj72_rIzX$FRt>*jfp<2s@EiU8k<VaDs
z_d_cHUxoesQwesej?|K6vBuA~h|!ni&PTp8oij6qlWDmw2d^JlIDq`wBa}&Uy4R0x
z5Be(-@DxA@l?yQ(J~9gBKtD1*Tsa7IE12?L$x}|_LdjwrsLHlYtp2#G0lX|p77s88
zc~Cwx;_)`avQ!+JSJ(fn*@4WN0uY#t3j?qB+=qXN6NK3zhqMYBcT2sGvN&wZo3nL*
z+1E?$@6TH{SxIPeraNx({BXFIB^RhmY1^OxvvEMYNkCESODOT)xl<=Uz9bKsS-eyl
zIOqu1CRw|-B&T=(#fFI;xgKZg2&4|K@qGS~vIk`!#Ya;nZMA^sn{%)JtWuxAoa)!D
zzdMnRPy}=uMHy6Eg>s<d(QNpXPx{<CN6`7SkUuGX{smgj(`ibq`zBzBD8vog-{=T%
zF*Dk2Y^)NFZM+p4VXtOV0I4WaUuQ{>u~LF7tK}&{T7z)o>YJ=*-7a$PH5=^J9a*ys
zTJxyo!id+zJx^af@x5rls&A_YSfd^WLj^#d8vXdkw!}De8sUCg{Z%!CP<oDW#jbNu
z?ij?6){6Y)eg>C4nKeJt32u~~&$Qi%m-4*Z-5BW=J(g!JOEM$=e&}Sdxy3yn*cx)4
zc>Mfbv2c71j1#=n9}0zE&FoAq^1qt&K3ABor0o6vwlM_=9f>zrXXv|N>=J)P%JqSe
zqE4|p5xBZJ3-(@Th(=C$&Y1_msC(f_YOKiLZHOn=?8Sf<P<bo+;7m0;FbO2{&||*N
zy;!l@ldAo_JMpvEa7-_;O1}S7zHV)Ltf1*BmgEb=wO3<>oK_e?AuOGg@^R1T!fpT}
zDqzu}UN*8J7dp7~nSMgY_F^{LX|!a1qHj`?>%GPg_ghsQ7$qvg2Nm<&nX2p2yjyE8
z=Qx!!+;IAV4Bm1`lWK{lBp~KUnW;@zrYR(_&lWBGY*DB}dbLQ~UZ^sqI#k<G1s$AX
z)%~S1#8cr*bDr57K`r*GJ5W;y<HR!B6rPCx`5271?Uf)GwnqbTl$)BiW&)-4;^d^r
z>9e2?ojm!HyD{>!0C587gA*V;<|hDm<z1Xk-(3d&bUlhU+4(iP2JGA2yyX!H+t*0J
z_`vn`5uQQpf2N1mM<5U?ZO*_s#DK{ULtR4!$cdr4^Q8>`Nm^IgSD<Ys+zCAP>DD!!
zeyK}Z^wE9nRVg$DsvR--U+X^lf<-&G0`j5OuL51sbz`XA{t9$;xkjCRuW_(MD3rjN
zT=Ci2<Y*)B4gyFv2XS^FCnflBT*TcerAV8<$HvfXXsjh541*vpjOLaG?+Ha_mMRe_
zLCLho4FrRle+GM;j1qqdXV(!><}p331~E-Gv${K^3Vy{Yo|f%FA<Yk2F-*$mYpCk}
z=_1tS@gXgxKZ07@w5ivj%liAEssDNnw3Vs))ps9Q&8q13bZp13Bf&Xx$oZb+4M<D(
zf)KP}5}cU@#gboHWK?-dE@fGb!zC!i=+^4+F1$m?d<8-}4^E_%cY3Zp5wnjBa&p+B
z8of2V>MmU3UB-TgF)RQ`6d$OFygt)|%fMQ3?Gza+E2LHB<L$Lz8E~x_j8I(o(WV7u
zr9ZH#2i7$_%pRtUYh8biU0{<}_vd4k>WrW~VH`gqNAV%-6yU@aTw44Xft)6ias#Dv
zJzR<VAZ(i$3Wh|z$s_6*Mn2Im5>caL0qBgO@ggYy<K1n2DHP!W@MRuT&9slC5-}eL
zrXjLUl;X7z{kZedH7y?h`z(9WogHvNG{{5Dp8~JMBZv@%5}5mzD;Ok1ntdi_To0}<
z0pX_Kv=Q+kN%$@B$LP)8oIboi)_wyIX41*lcp}hSLh-~syCq{fW4D3>h>QF=e*wo#
zEo<kC9o;gwxO~lJoWT)&TfF3N*+2*WZ5Gcu`N04;D5R$|x+Y%COB`A4qe2p&k1NRW
z)yuWBQg2CkQv+RpU)R`9CM>{ABIvd{q1k-<poo~;sakN&;ze+b-$SFR4S!~5`krRL
zhb3-GI&SbSG@D}O&vPeRxJ7(Y72-D1Lb!e+n7fnCkE>mE0O!hC4n^2=pY_@DakIT-
z8n82L%<dVAJAT|8k#l}_r2`_w3G+}E*7WT#fN2`dY=&2wJWovImj4NL4Vm8#LZzz>
z)RRu&=!6Q)ps5%4tn6l#x?A7wIJswLP3?3ah`A+UD&T;oBn?89FxDs<q;`2s`r*K7
z<2rI7FdLQZxfWCMVg1?MIvD%e5P5K5lOCqc66n%SJzh1yxZTJT|6=gId8J$6i=%{D
zp>fkRfAItJlHrJ&_1~O=p3@aGve9tL_lE8gZnp#ebt`M3RV8yZ3yS1hGt-G0{DybI
zHudlJu|zu!#|hKk&#iNdGF&Pq6@&(Vq;gviJJa0f80dYRF8y3`<rMfeiuTJG;=R1R
zL~qhc@n71(hM(&Q#OeQPS2aZp<*OzfggvhluVum(Db(1*v^yho3$w*_xvgiQoFUO@
zrrF`-<MNj<Qtl8Uf#F@p7Z9>k<ES}Jf6mq=3d#CrXlDdT_?R|3tU7Qs&^FiZHHW*n
z9`}cw9Z`q1k4@h(iCAfqDfoe5^_iK|&Kz?e|Dvr#^*6oxcr>i_zII3uxXH_rLRYFU
zO8zq~V3!pnD5b*;TwIUV2(S~}t?!1vw$g_T4|T`&d`$=P_gwM_Ir?(jAS%HekOkXw
zl&DVQjd)-aQ;cUw6$zr;GFcsgbt?1@OpL~Guc5u!T5W~lxh)vyvTG4mt9I_0aKniV
zS7+S`eY@*Q|JdXEtTVzNZ_rLztFLye9ZX@;hCmTq+V40yR;SCAseBU)D$v)l4l0>6
zsWu{Fh?%;ccijX?M!!9pve+XL7B={|f34RyY4uM=<a$Jf+)rV;vC3iG*zV%M>cXxU
zty_B<Wj-THfhn}s5|Q>x19#AVNtFa<S95xi5SIO#X{&m;Lufn`ec}8bf%)k7a2N6x
z6_=o0L`2&PZQS}@<Q;wxZ7RjSew!+4|9F}g<UmD073b<ZG*7@wz(zUsTPo=z0?PEy
z<&Oh{vx5_ywkMv6*_kuHZ}@!tQ07nY5%GIBNfhElcD=;OGSez|T~56=G<^Qqk7YH$
zs=y_asEX*CH)gL4-boc^SJfvrOws}VLWpLai;r>WPd2olTyCEJt!*)Hl-7Gwj9zIz
zq)D|toW2q1DEa1yb%-H$>-y#3x#&q?iqRl+ydoaItE{5anwk*s71l6M0#bsC6~SdM
zA#gcYk-V_$!h2(^C=X3K(X@7czH@iIfemXUMZMpK0_AmiM;D~;)+(^;Lq!|v*l|!0
zH6xkAr|tf%2Ux%m0C~PX6~X_<`~HmwSqq}&y-|wiG^{kRv25}#S$TO;W};YjB@m!+
zV$Q3WG_=~5LcE3_aor=mMG4hC%cmw2K7X#g=W*(@V~}JfGgxS=(jtWtU{OVXc%3~D
zoGf^_;^o?@&ZyXA3*3!?Eg^;jpMh}PA!Jj|4PZyUv2}=G%h0V{-+}G+U|ESkaOQ)9
zX|o)9eS8Xj>sU0_W3$0851hnYqoI>CounVW@%9{=<GI%+Y)@F0m)ycg4lt`2?tpEA
zt>nSJ7K;C4?{RXZ=&E{wp(kjIsxV2796}s|JA2zt%_+$@kVK|10kTpDodad+qWOa&
z{uzoe^{XXqCHj6Ms^OxY)K9?Kyvkc*dlXd(D#N-R>83xxpMg(8?Qv|z+1dIsDeO`x
zlsKP!OE`}At)9&CWR;C_=$@eUt&8g6!a0E!9c*N)a6!?JnTWf{8F#>)nt*M!W0YRD
zCQ;vx3oVv^&6CJ32koPnPHnx_im;B@O9Bk0U86Y@4vwh&XMmUD`}3{=a`B|xcnS}S
zHRGZ8P|)@8jY@BnXg04<%uhm!C2B@pq8EFfCc!KBZ30@`#0W^z1n|oucfB}hygCu3
zGb_zBx!h#5u(m)JXGcU!ujG*QA#3%az~L^B1d~PZP<VI~cDsPhcGlS3UmTJYvJYWn
zCn<JRIo7|O+<oaL1U{7}3jx0S7ZZd8+C`arpBeu$e^gK?K)Xo!$nDL4m>yaLC<o<<
z*`xm+@_+G97(}4_X28H`3o1t!k53JWd^`LwqAMI+16i$<W7b|}9<Gc%v?>A74Epyd
z)=xV$zrNyqfBlmG14PR3c_1w<2OjRx>9mC$m+z|R*-XzPU79xyDrdoSFBDWF<iy*k
zzv8xiSFo0<=9=0KUr(C3%-jL<dY_dr#OG)+`rUN5I$N)B(0uk+8VYrU<KW)I#n3sA
zGhT9c`)~7U=fHQpuIpUEi!u({-haC9m!fDn-(HM?x|^>^yNX{r?2C9Vm&Mq%bs+Xt
z7pjk_Rl3WPD|vH$Fbqy^bKQ<bEjm(e;T(Bw4Gi=7Zwn$^_v)(xegaRw%5Ig_v>a{I
z-3Me=0^tjOazb}ty!{;H6=3N~IprLG9tU_HKgAP*rZha5Ry{$hYB?}n&iCgeq2V}E
z<P-)_Jdv7>o<-PCZ@hK9R-*IZ=F@#P4Y!fkpc@P=zhAcB;Bf^9YCjy6d|*-)0d4^~
z0SzmbAe3P$Fgu?F!=hTst(Vs-i4OU%jV)ORVMLK{O;&!t|71naX`(!(^+n1or0dmt
zU5M3T)&C~h8)#n?Av>T*l@nQ^+hx2l8~K(W%j<PZ!ELvs@%}l&@tn+8KfKcOuF0@w
zj#ax-11Z$&puG|9gM7uHTP>QvsyW4DCP8{(wZG|D*}&qW@*+z@TA?ph&`N*1y}|7t
ziXowozr>SvXevt5&h#0l!&Xtv2RmxeIx>TKopD4ON-Y=;T|wwyT?0lbmh7K@dV$R4
ze}<ld_87<}(eG>QlXAKY{q#+LM~U~%Ho6NrB8Z!u4r_3p)$X_|tZya#pX7fSBRzEw
zsUHM=-1M)i6i~)>6-kG!r2zYPw`<pDV>p;)@&TI+(atI0ZVWLYg-ZfnLxn<~pJuI7
z1*!14J39SM6LRD$Z!5Wli_Y8kU=XSZ%Gh4t2M)c!w4|^xWUN@ChwJ*9boh%jOAq91
z>J<LCV<cPl{rpV?Wo@GQsChE!a9$#{7sb;XS1{Q9bhbgKP@q*oRvF<6z_xU`2>6Rc
zz^l)U&bxK5sXfvm1~5U_%^YzO8e8Yh5zeca#Y+WJK$(Ch*)wtj&IAieS~TAknSnCN
zGH72JdTz9A#Ex~qb>Q<ugn>fX>o)abE#+=1;3QVJDH7vSI*f=Pkr{CySpaC5ZQr!+
zrov1F%M##?dTgA-xAN7#a!Cf^@PWo)$y5c1C56g8f==6s8xudv1d5tSBnJU8G{COZ
z6a#s-+OD47=C1`B!pz=OjldcJu&pEl+G{y^fd%&ff&<^w4f9}wz65mS7FdN(8}4o`
z%0Sqm2HS7N4NOBmbqx*y9_N!rgG%T$G%Hrj?HE$C&Z9sPvRi*9I;kx+;SJED|Jbwv
zf!DRn<>1p%N6KCQm}(0KMUP@QS%p;8Ilxt7oxgyXB-UixdN>(_AY!8xDd+MOaQv&Q
z<S&Fm=wz|Et5)hpQ=dEcIV&QFwE&Lx6u`}vQ8HU)agsvE3WJw1lT868v=>mamjh-`
zceGpATBSCiX~r&iYi+i$;nf2wHBFP9)L0?shIwZe?aFON<@CBk@*N`6+yuSL7)UOF
znk55&!P(c7bi${2%l82-^Vz&HyzAQ448%DaGJu^IzXP2+(2h#XQwPQ8``ZG{bchsM
z$0o^ox`?~KnLQ=<NtWMLK+<7~-2@1@M4H)S!zq?wIsJ()1~U<6zqsmP4n1p%fnp5*
zT)7{Cn?b99&94oUqvK%?4F_G+9tHL8h9_Eh?#>5U;0qAcyJp-C?AuYtdRBdn_j<_v
zKA(+-s*UArKs#W}EluY@0b@V9y|U59E|1>UF69X8x<CZ%<Gk<TK=bDKesR^y4(Vh~
zc*vB2MEmIXxR!g9SC&IL?Qtuo+lR(Bo}TY(0Dxyxqp@aLky<XJ`KTp;#8S5lR`746
zPcGm^s6nbg)4p2^fQ>RKao<Z8^D05J!)_jwh*kNak6$3(4z&%ycpMj7TNwDD`5F?}
zBCM}uHk?~glD@)I>(oAzAazQuMU3LGK-DLiEpzj1{5<H?`Pv1RM4)CS)PpyfvKm?6
z4#v)C4y^~B^3cyC;cFYIL5FMgim4ytIU+e{-G;9+Onc&c_oq5b#zM?19YcNfN9?k|
zTrmYq>DxAuVH2wK9;h+j-`enR?A#vKl$kQHTz!A_4^of*F%ol!;P0eE2-A{(tD$z5
z1S}>LnK*{Jk8%5GkrTtN2mlL~R+fgO-ReO2X318qSV!97Y<8zz{$rjo(ZK1>bRpe<
zVy;mhdy6-u(d~?O(#AjQGr#k$@MqIoU%|@RQAKd6Ug3=c#+YQp%*CycFXqashyd=;
z-@xiPXQ(*XSH1<${ro4=3lOBDL}rvKJt=JU`9L|%gFumuk<WbsUo&QdwSaB+^aVNH
zaB}`Lb^KF`AUdA2ASyQ<1^6~oEnh8s@e<}L<adI$Ykow;t}`-{Ki%XVmH-qsBP!2x
zxeUCe`n>gj-m?_B4`H?)$TkeZ!GOLTV1G6S7WFs{*fmR4gjFe_;G$ZJmGfh<0x#8T
zWfXnOYU;AsX|0PXgCF34isi{pgV71|$WnC&P(Y&F0F;tXN=&0%fi!veHEVN>r9xrD
ze(7y@ZAt{N_*>^rz0=;DID0jDbhY(<p0Jla#`q8Rwx~%8A7wi{^k~4QQ8B@Cxig$^
zvTPMkS(`m`bcx45ep4B;aeE_1yq?$KLH&3qhR@ULy?cmN`bj_O5xK+DlI?{DVJ7nK
z&A26#FU>#>rV{&ou!9;9Ik1g*tY@As&$ddZV2_%jcpEfc_qz?v8NX+CQ@RxLyoNS+
zR``ua*=sKPjeCv2wp0eQ5v2$rQhp(yUD7z^=}xWNf#SDU1f@EOBvU!VFOWyuZ-6=!
z%(t?8^b46<D44|n=d18uLrxWzLOEno-#vHx=<83jRMMf<Ui0@}phA>t5_zRppH-iA
z`KNpFw*?P4*<%jt#_0s}yab*ee3zrg8gEq4>$2Ocw8urAXloe1=$kIl32^=<YBXd*
zO^!+x+{8KKX`T7W?H_U9r<yjZLnyi~oH;^ThygEbeNybS#rLFhe$xM=Pw|7Ey?PwU
z6}o%PPbtc1yfPnTh@u!(CTg{w3{F#ZuRErl<5|6M#~zDUF<u(Io^dGoeakKoTTv1P
zaN=#-6AiQf5X?0tPm<cQ^!P)RuZqpR0c8$cKc66>yiV;P70=+6qor+P!g1w~RmNOe
zX?qtX13PCJ^R%JmlP&nCh+0TSOecEr%<unmdI7xeBk-jvIF%ve*(vy&!5u=37&d;4
zC;w;Rq(OK(7c<Rb{yTt!@N@>%j}`vKLt-Henph7NQ~o>f5n<32+O9D9x2W~`5R5Q=
z3P7hm{5_B(i7<T{l<@v7rRgORM$%UCVaERsP$Hfb$Gu4NZy`;JnADKsB=h}uU<1LV
z{5WCJ`}du6;el7xWjj#b_4j~W5O~s@Ry~WqlbV--h*uTpm#g^S0U^YbQl4s+{e9<L
zh&VDA1&>wf|J#pZh_RK=0`X}-c|fC5>!cea>VZ0)-2;$z8;GS6%-@`+;$jgWDGJ#r
zkV2AxJu(?c(#gQor{lo3G4z$cYA(44WG$OgMchx5d*q8BATBZ6ll488Q{^-@PBi+p
zHVuMdU7r~WKm(po^XbCAiD&$(-DyWC>5FujJa-V*h4|&t6#SY^<44qFje~pPMT)40
zn_7_;Hc*!J0B+q5F&9c;kfyS!SyeZB{S}yDx0Oq80l&8sabpKBNuX;gYKBE!%?c@8
zU$?eN?B*Erlr#jV4dCwh5JO1=A4O&m++}dM+Nq%31vq+F#Ve<?i3ioTZLXi?TL2e3
z@gbE9{UlfKn|M;h&Va|;I7u}QrYRuai+&8gs@%XJIbC<ucLk{K8GJVNC+TK0)ipL6
z|5~;H1dxDPiR936$YBUrK8L|5ES)99YbvjwF86IgWypIwjPIO61#TEf^jf;i>V^K3
zKaElZy>4~hgt7txqoCVyu%OHSi#Of1R2bmNva{Yt4<VcmwR;WLz#K?n7XKjzhl0;q
zC&O}TYkr{4)rK2j?>_(ny#eVu>(A00xtNaQ?a6mMy#PmF;(B-E3<u;!#o=5w1yEyo
zNPhr4el0b7rmfp6p=>686eRQS;Vlrlw;&xOnb-u_T)it@1PTbEC_L#MT#1z1ga=f>
zypR!)V@!F>65sLpNAyGwp!<Wm->lTQhdt~!@TYlPiQHnc40(X^w--<l;dAx1*tv_Z
z;sEJ=f-d>_8NX)EAHA`{NrkPko$W7t!}0IC37@JAd^($bM^iy=;|@kJMqoz^RJ}xR
zL$YUDZ&MGH+W@K@T>=Nb$hccjVQ5WBU(S1`SUYKRZvp5cH>J==A~h$3YK=%A1BYSG
zHfSM}Fw|>1ENh(mt+}nHJ`{wf#=0k(Ieh3hlZm_?9naeUr8m%U69Ge1yLstb5|^=W
z`&n!W07}mp0y>-_1~EJBS)O9bQ`tw}56C!N&Bu#Pd*7J?7fbdhS8$OxU^wD40aA8@
zbiKG=N9D~$FMv4u<+LIV<SIUF26XDTP81T6+|`zIbzMzw2C6$@qy_;6M}ba5I8Pln
zN8)Q{%!)AiQ-B3I3D{WWsezD2v*zZX2RQOcAW|Xc);&{dT*m8@&I#!LF&7oKi#jaT
zRtZ<v*=gGhYoNpG%MUXF`igib_rP^F3=9jB!T*4q$EzFl3UFy1<kx0F?dstWVFB2S
z(HB5t^{R6Ch@0S_PsB0TSxMK3J8al)=+9JgLHS9~Wzo@9sR<3?QaxS-8A|x}bd@aR
z)5cf+4|Cy^&xb$~c)IWCbWBGFo~vX$R(LUsMSdEyAnOUSp1;)t0V#aWw}?69(sQl_
z^;e)>1>0p3RwfPMvas`Za5BH>XwWQsZsjH4RhP<Zkqq8(Jlwr|XLL)P`{N&dwJK}L
zeADSlHk0e~K@;GT<5_$LlFTq5A5{p0+GlO5EyT!U!=-W;09$D&9l`|p>{mDr;ZaY4
zNcBaelnC%N$5`JtjKC=Qhf=SMo<F3(R{<yH(;EtIK2-Vl58NJcpuDc@=%T$@iRn)P
zqdBRF>j*~9pVV%D?2_uX6%AxQ{mEid01e1?3tky+C(<<_6x?~8&LP9QH#g_!d<j)i
z-h|=+{o4Iu{*ZfB3Q3`c?*VVg-JdIlWD)`+VpW>pA@R^RW<%~lS?@NU`2MNd<=t-O
z#?9-)TEKGG9Zx-q)%B_^EFDiW1^`#~u!Ao?f>EGh@ULugaX;C#0neQE*+nR6duPgV
z=(s%Yn$?Yuh(x6)-U^E`158=AT9lsNq3aexu&4HaXZ!W0*)w7^KhZDW+1n~4p8-u6
zGL{m-xoF*vvD&)AhbHfbjs*1ijrHY4h*_OXxRBPP3!rx}rMNsE&J;JY0#8{n@<A4f
zhk#EBI-Gm*MVfld({XRE^M}FBWlzakV&e5CKh#iwzwAw;9-TpA)mG6CK?+$4DjfC;
zY@xA=v1ojVOZ7$J1ndCGHEe&j7A=cvp-YcMz(@Ea4|ied>v1W5bRahA(x>l=DLAzB
zZ*l2cw>5yIU_f#pq_o&ExinO5$E^m;MroK}$b-EQ+R?QZ%p5MX)}N7=B5La0cr~l`
zOhF%MmC`EEG6}+*$mS4rjQmjaOADdd($ZlPjbxzt^DeLTG(pA2TU?aORchrs@FhUy
zB7!^Ew$xz|Y>niTm&EFOLLRPRwh0HQmgrQlHu1RLhQZj{Tyq)xC4N---s{(75@vb(
zy-?BQRUCT(i3ZC97={?qkNzj7-~3QTzWBCR+r1BY!KHNMwvJmp=Qyt0q97Zh@?35G
z=`t}aF&o0-Kj?a764q4p4rR*nb!Y1{|0jPqoekRHR%na?P2;L#Ym2Qx{`ZyC>olIP
zoDgUUSqagZY)0QvTE~N>aCSxNMY)V$g?XGJz)VQ<g9-dxX5FpP6ZelhN+G!4Zg3Yu
z%FE10H*?iGcYVI&saTACFTi@-T;p1%Znjy?G%#rKDSC}pi3AH1YboUlY{HP-Q(N*2
z2pR6vwz=`LZ#eQ}PhU^>(j@l$bnP_zVz=>5H5yMj1y}UE%9<7G%~7{6_I>Baz3Gar
zZz=2Ach}lYW|^k_p1;HgWy;?`$BWatHKMNXjxxNyjr5~RUkJo~I%tQCs!YzLyYDLJ
z=2-qYiiD#>vz9v|lydN)Sq-?_=|CwTjmoiG@kZM5*eba{d;m}oPhe%0=7g2?$6mWL
zNy+P3K~%)3sZHMccrQC3jo`Z&*&sVGQED6m9T-L?XCuEYs+!B)Gr&9UF*kNPl3JPv
z`ux)Ml!X^@ZmK>Ky$JaRxEQ=0{))$U3W&|29UrTfq)8zoAaubrm|OI?yHk0+Z-arH
z5T$H_u8+<2t1e!O0o!COxZ`DF?E<?L+Vegl;&PFanj|Ovz|PnAmZi_d<s}J%1_Z{6
zb&X|UB)Ml><L}3=t&$E7rm?V)CBk-}twX^~@HO@WlhBT~HO$8x4VvpP-UQSR?zZa!
zji03$^uQ$$>AfbU&8BA5N64-t#miCjLKM$L-@GT@(}sG3-w4e$39z}P0XkXxxaJHw
zJUX1(>SC!qLopTF1Dw>cu4)RK$$3X)owZ>6yAl1nle&><*_KaV^(lSCD<W!t<S}OT
z$hQUY7QCSEi!INh{6ON|_a2|{i9c7m$NA#(OG_|hHotiBO#@6Qau<#KVEy1mb&@WG
zi2hZeoKt4#7w<KkDVJ%F@%pxqX%f7B_HLYyTfIDkm+RBH>~~kSCoL%bnjG86bzbsg
zG@TN7>I8{`>PZfUKHmAu`LKA5pQos}p6VsDvP1YUk6^=GikQ)NbE3-K{8)HwfpQqb
z{u=khLc3P0p^s8+z6@smtiM?6yl-|5N{C-_hHHju`q`2ar*2ctC~TUHgJq`gM_<49
zaD?hRJk=G-x(5CCgH-nIz~B&ETCrS%z64rTv*=BNsVlk6ddro&i+=57UR8II^&-pb
zB(8%PU;oPq5(D#i&zlosKPTf5zMsKtS^4_AtAe?sfK48jsrG{JS50!8wf8i;>+omm
zlg-E7JaSEI*r$~^JP>*(1x=_SUJ4cpdpy3^&B-^ZlxoK6V}tqx&bP}aa<vWDhYq8u
z`6Y5O@qs^AboRKcn>&+e&A2z}89!a=2<fL2`(T<}oHaHUd(@0z&0-n6whY!sk@O**
zs!O~DmQVc{3(A=vb`nr|G!ftxBv@Q#=dC)V*x?>@aT6A)Kf+a`HhIAVxqU)Hmuv7l
z-NvmmMlp?Vcj|G8+4e(5N4^VCU2M|1HwZdzen_F;57&Hz#J~3N$oAk2Q$f}s7rj5M
z;Bg06rBP>Ovb{0Ow?OO|dTIwG!y=kOP7ZK!42!B9)bFb_Dh&BVo#<yZS=XJy-?-E+
zpz#H#Tx~7+D_hHNHdWNQg2dl9IY)0<S<v32IV3iL=cM{Us6y>;Vu9Z5Blf$&REKTQ
zCYaZ<;;uJ^e`4HZzCq;vHZtz4G#o9*6@=kWxa997B1k!vQTyCAAV9807j7R3WQJQu
ztoFQ9&+VQ}XHf96luEs7(x~a!CJWU_jpE$_{8ol00YUzNs24?Y(e8al6Pc`jKa$Dz
zS_W57cd?UMHQb|H9Kt5emIED=gHFGQe2IHe7ldy3%y&TQ{3zXwrkCGx;?4A@7kzxd
zH=GY2u<nS>?^7+UdALQ8f+jG<Rq(DP-*GbBpZt)6z<~sg>GRMK8Cx1nwDI>Ehj6cL
zar*^<UN)XpQx2#gY-dwBmWe*4c1coKTF+86wZ|J(K*08!&I$(qcwk6++G-RtQ)N@4
zrKpcusZc^dmMoM!u_zhzQ3*IFGcoW|i>N+l$Y#|yD;Vf$pttmj?YCYBGcKpSx1572
z;8}U2yFB1N^sX}2$&r){vhzF{eQ6yBIgoIgIbIujD1m2zVnw8rh&jEA%YtIzBgnft
zltkITZ@7MzncD8heNM=xMXR#%J31ruUX6s}EHp$hrIJwm52i>44*j8y#$uajsc)8u
z!@8grlfUNtP<sYJVnw|vt44;Wgu}}3Ku=#LhZqMd`QrfImG*&#<&-lOU%byxUV;Kc
zCg3s358&^3JFnK5K;k9aCAn}2WhzOXx3nh8=N)h1sSo3;39n2}b1qx9jFc|5(r&q6
z4C}p07c#(mnUx5$rS+~Or^XEJ#ac5;LQ!HN_vbu_iA7NNL4Hu<NL6%-k-VB=D&QlI
z-P{9B)Es^TQQr#UHP{N4WLengv|geL-(Ukik)?Y*j4W41bUM)c^l8cye<xq{KfH32
zW!;p|AK89zs7xsk6EogVS2PJq45A_A>hsS9?fuy&7dx7IF2l$%ikE+Cn!1oW)Js2*
z3Nqc5C9h4W4C+M94Z3CNSG#r!lCZCod0dP)&b`@F>#GFkMN#g{IlAD*94@ErgiDa7
zf1V~LXumSxDm_i&C7&~1CT%y;GSfGCB*-b)c(JzC{jw>uSU{6a^Yf3zhvdq8*8sR*
zMs(A~w8z4|gj&XgV&r?ho+8}(A)+!;zpEoMaIV3Fcy`5(wyaIyyq|yPdBb3_K_xN!
zbs-ro)_tEJ>P14o`uKE)UJd%=cg(pga|kJSkrR(cmfZ7sjD<n-7@MNZ1pt*Kx%yso
z$P)u@=a3MiA{p_(xq;Hcma+APe^$x+j3)}&gYz_|%MfWXJM~_nuf2R?o%iGaFi9|N
zbz(3;&!8pHe)luRMAHL9QTr~fDAiNs=%Y6=m9UtTfG77kaq-P57;t?)cJ<s&_lM_p
zCasnAix$u8^>Wk{Rju=|?OA1~P^E|!pRywLojqaXVNBFAj4-%A!-OLQA)_Fi_+tn2
z(W<m8VB~;Tf@;hXqbCq)GW;=PSbWo$plHn<0$h0_R3%nRtdXN3`I2P&rICBmJx_Rk
ze$uhF5wYUe`zqpoLL3;a8{;xfPMq+LFC8`4VV$ZaCwCJSI&G0epLDH&y>m|@#elA}
z5M^;E<br%plO$#|ly&&0G3pjU|LOK5<vt@y!uPipo341tk4%kIS^V&&+_b6AENvr0
zCF2~A7fAgDA4O{WBT;DKk?12qQ&KauidGPpaBxP%+FZ4C{NAG;3?%QNkg)aLz@ohT
zo^CN5<h#TcO81Cd;AE1EGsW;3Sbz|lzO^*tH*n8~ZB2&c*-=TOz=LKitNHrnuH5Ym
zFSy+y9SUUqoC)=8{w`R6MI>tn8RSm1)776*!__v;I2vo);WP4UDqx9IuPik~D(=)r
z>6K5z7*eN6XXFlSFr=MF+`Q#-iPT2E`IA&O-sEopWP(zDOmebx^@NlfGHTj}41np@
zLVJMD@Kk}m7V3^J%j)BAzz(Pg->2A*C=2&fJIye|=j1D-T>_bDy+Nnne@%PkGycqY
zn6`RRCzzWW<fy&iUh)eq!X4<KPWfyuxHVT_l3r1&zU}T$cY3emmvhPerTP6*A0OHe
zO%U=BWI`mKqp$8~qUPa09IN+oXrk75`*NBe>9WJKj8_%Dn#Yk{b}GM!y4A!|r%Pc>
zcXWv=_4(0NTGM#7D~4<;Cg8U4qlqzc64vVq#+jw6{bMo{;c*X87V|p;2kI{BFJnIE
ze~y=iaifv5nNY)(1;}1_qGsW?BF+z{IHy4_u}7w8?!`+s98*YBcqR(J=k=~&p4!B&
z{uq~jYQunyQ<ThW+U9~u`>`n}s;y|un$-X7({QaST^up1##4Qa+&<N8(FDaWRW5_K
zKHAX}%V3S)oqX?FJidE{A>V6~uy$SUu7{@jz%+>^AgH-@f9zgKt}|)X!ZHOG@#cO+
zfB%=}-eg`$k&puw6TM8%vMkXfIQ84sHaTdEKc`TFWs(4yPn!7**WE4K6wA>)L!ALb
zyj+O8FFE<I(UqI!jSMdcy}$6(KIk(y&I>hT7QVG<EPm}H&2Sd}MqKoW4G$HSVDSdL
zDD5QCy)4`H6m({oA)I6Y=PJWm;K+iOYLlE#NA${w)pkG}vNMns1~qbj6H_iry1=P5
zCJh{*u_5}t^Nb1)^75hRKC9sC`x^I>DdUq~*<cBP<Jo+nJr|S%p3_)OHIA_-sb|-1
z{TfYZKG=q02I*Q$tW-fQU@}<1&v8V-g4p<0VAMNV>CrEipnp?V49(WH(8vY8E$FXT
zq+Djld7Nkk5ubya6lu-wx|?}&1!UzU@5yutw)B@C1kftDRxfD>ZYp=?tbbZw>593}
z){((DBa+Lc(DpKE@z2Hj`>_W*%B{J}yhhnsIm%vT$ye8AHF@<=!nvb#{f!op*4WOa
zDiq1q9$tzFKCANis!(QZlXb^Kw73M(W~|SW(H(-!#$^UyLYjp2BjWc{WzY<aWLou&
zu*Q_<jN^aOdOZy_xgA6$DX7BMpnz~JEBKFDl2#Ty>?JkyaM?Hz6E?CBYkll++V6F1
z^ztE_O**t#^I>79iifmhpg{&$wWoQ6W#Hqw*-q|*B93i<r-;jf>LN|c3eh)@eCPYs
zRL_96^O_2VxBJKa+nK)o!BYP(BHvZ#enZJ7v(%r9k9l}M8_;8{*URehS$Z~QyfM7*
zPHgwXeuC$E=%-@P+8>5Ks}}qnMV#RrOOD}{IdejtJVNP5^uT8YNDb;acBf;+JG?31
zsmUA1EO}x2#)s@P?uSy`cfOo-@G8hd&!HBv(S2?uvDWgP6xMZrJdZM2s#9J22D&2T
zLeVZw(@LvB_zg6XaW%lusgk`R>D}TQ5t8fEtkmnlZIJmOq(q9alL=Bwe%YRD&>u1+
z6=c1jq)*$<YMLfmOiXy4keV}aV(t8Tih>z89=oG0`H1eT^PU<9Qs0{tx6Zzb8JYz=
zTQmWbVq_$<xq?$6{mt(m!H*P3I6gcuZ=+N*7hBzN@YDSuZ^<XC__i?aRZd3+A;d3$
zH9TZ8O`Lr^!qvqV|NKG|P1GTpKu6MH;;%=Pe;<QQw?JY_Mx`^(3;seAc(#|WC=|;I
zt_r##|2-xU@n^Adi?@>h`2}0F9AWULa)on?rT%+NE8@?#_{l@5ZzG}RjJIjzcbQXz
zHU#%uiYJ3P8+(a<sSBbE@gW|ze~v@49~DUXYS9q6{cWL!=CUg)l}<odvtJNYr@uhu
z*pUUKgBTyV74AD0h<$y=Sh?l#=t~4iL<HhZZ~1{YJ^t{Feq1YCW|pUO<TI8G7AY9w
zmi)vu`hA$9@JgW<cwq<e{Dz~!tF`sOvmI3Z?DL!x3lY}``%Ci<P??lTGrsZo(w%KN
zH=@Mf2;dzjmP=&;8N=%(%2jKi%KLDJr#65&$g9M7-?cOH?iDgS(=!EYu)bI><XBII
z8kh32kqkNd#jmz0Am^lU1^S~s-2y7@vSc9XQ7+T&T1WU6gTUeVqq(PctjgVm^wG;+
z!tUyR7A3m1T3d`>J@G|~r07d&(!NWe-LUBhzj}sOSmnHTpNz&=zaKz@IZ^r;GP&-1
zvaSBM3o;vC6GdOq(YbV!LdGDlO>pASKCNf0z1kHRE;qwelqAX9Ye=y|yOpQT0$|J}
zkQhd{7R=ebAzMgFjMAeGT%o2vr5h<XlgB2yO=zquTn>-}c#>`oMk@hxz_+GC)7W8a
z^-{b8O5L{$v@q#=4%!?i%{l8}Z4GE+k`3EmK}lGAO$cm$s%D#z;XbNk1%x2oPMgV6
zhDVT3ejXIZ<lI&f+s=tV=Qf8aZ6YNswab&PO&_k#%ZsT)f2`TBK6@#U?-2Ujr-f$8
z2t1{vVm(l?Ki?ZpVYo}Zmz%>3#GmW9!Sje%-9inyq`VGzs$kl<kSY3tUOALglC=w)
zeC$Do0zow{IHP63*S?En0f+Kea&pBc8127H1{Uh1wO%a-A#(qpCcSR8s2-K0c-0A}
zU;r{M3swOYq@4Y7EC?`zaXZh(4GZr#8IhHbt^J(WV?#!DINzsXtF@UIZ*gHs1Z$zp
z2rqz0o~&1o`jYY;4u{oYZU*Nvx!M;gW`lj)3G?IHQiwvIATfI)%l!iGq;!$1Ety_<
z60g<n(Ow+`oNO5n_LTJ^lZB=rqzm-J9!4cnkRKrGu$vj^2ePmQneXl?Xj+)xeEY`r
zjD%lxw>dz+P6cd*;n@_iN(3}We@Sf{fN~AvdNl`D2*~-z<B&00wFNJd71)Bm`8If=
zp25)5_pwyr%VGm3NP)N?6(^un^9?`n19l*0I-7|f`MqSvDMwqKRPHS!`NJ<rX&8rP
zsVFUXW9|GxiP)^08UX_}lm*@h)N-&#YwR+edmo%KTNO8%)QQo{%T<%IG>uzfKVCdB
z`8_uJMVj1UJ<T~u*majL?fDtcPJ1jEw;LPSZYThs^xJAW5hVC>q*xJr8dX7dA86-{
zC2=%EL~F8@+mpO1u6uLH*e%Lya7`ZU=2(2#RMlS2D)$(S5<U?vxgaAB{*!VP8?Y9I
z0jH?3!LcXhjm>@;;lHH#Xv%w;)fiC}Yz_{d!_|~UN?^9_p<hF~wQ8N>Mt;5}SyH@@
zp3xiAxY#NNd|!nl$89Lv00#n=b2OU!%}E5m-cwe_vq*0pv0@eHAxxxgyK3;*8+YI(
zxdzBXsjEby0f>PUKrOxrpG4&{aqv3o9hWYv&D0tgNVv`5dR0C~D;-K!UT@Gk#}7K{
zK_Mmi5AJ=ttfPgR??~^!-q-BpqoJ>1adr;sH7*B8y|~ENr_=e}O#`X=b+_L2C}+}s
z#t!S#=4HI*BdRio;LfK=`urrfQLx_pE7)20X3c!su<<9(jMrWE)E-9zNv_#$^|I2@
zjDr^!gM2I>(DPK;VvnKbAPAvuatt&#e$7&P2$k&v({lBxZjC1>U@euGgch3R&F#V{
zv>PRpQ9y9ju=mA1p|fGZBf!TnuLLW{`@b98$8Z{<jz%<lXZ}W0^}6Uu`ObStwe~L0
zT9SJ^=Il+_iY5T(zQvnp@W8Ah`yu4KTkB|v-h{;{8CdrLk!&Ra5icL|`}aEqVg$OK
z<yYK)Tf86>zx|H|palrNk%BBHy-@TuAN639z~P{T0fjF#iFE#BCT7bWj&4c(^Kr1@
zTv@-ea@Ql7jZPW&f_bQZyi*7>QE75tzFMBYU3*ucmNf4N9$B>T4z511ru6CXiXh`c
zwipG@N@Q41Uaq)Jns$5P7Q<9XWk|dkx{Oa?Yha_>3C7?`a-wO*O|}myIP3X-Oimv!
zHXN<?<YD1iO$>ElZz-ObS71#TU7o0I46Pnhu6<M}#`6edZOsiY$IeA>*3h>mBDUaq
zAfG5SMYB=AoJZ>SNke(cYPxE3+W(h2D*SScz^wtz0nY)`qPf`*-9ylB$seU*?hEV^
zXHW%`=xN~w9t>&<j3T{m_%KMlmSG{j${+4kkbIEsex5nchuzY8DsNTVKT{?7gbi_%
zeI!d<bpP^VJ%b?5_P}uIN{Zt|1}BUiKZOjXY!$2j5m`SND{fm&*!1O3OaMlL;gi__
zOmwT?i8RgIq%JhXd?G2X0$&v56CwzAikjiwld}Nv(tCU3KKcQ+w*B?JSAA;6`W#mw
z`s5WnU3-d)-N=EIxL`0R!QmGe3MT<0%jC#o?0lDl&u&iWCSVxJZ~Ue*Rb_rbzrrE~
zb%$h07b3y!PjUsMy9b}a97jsA-ZMN31?^rci&lpr>C-7Y;Kv*Ja1E?U54$m(?`QiD
z-aRp0Zr)rHQP?@&P}72ooUOcdU{S|lrLT88;g?=jNUCgN?N5`(I|R;ebA3-V8@LF^
zYXAEeYfILnDlF=SUrO|EZ*RGYDFjih2@z$-(#uvzCej0p5W+^yl1cak9-F2~u!-5Q
z3qJ)PJ#@AEtGQ?S#nWXl(LCkb=1-=91!GSMebabITQUa4M2}A|<K)xqGiN*cv2in>
zDgyNUDKLzhVoel#_kR3a^f|mQqti>danM%30SYLW@*F#J_4101U>6~#K(TFnXc?vg
z^^q;Afo-bhVbB=(cTlr&m!CRmLhlDXdut9A1bcwSzaOo0<VgH(@IW`(vcesQIPjE2
z(*-@$%d%TKMjk{(i>YTwOft7Tm_CUf6%dSR;|!^Em?ObfjW=$(zcZ{x+z<JxJ@iXj
zD67}ee4Jl;<>vj}rTL31u=>>`sT0k5vV9S)R04Y(hHF|<X3FHUuVsKrQ2V$LB6vri
zYtXnL=?T7*<)NSolB3XsM?xeOoS^uK)pNZmRj+b<mg-t_ebw96{6p}WsN@BT0UPR-
z=h>t>$tp81rM-3N>FMdTjgFnDTmzV%Z|s2=D79rsx2jME#z32IyF12<b(uzmoxom!
zw+|W!@~8`TS|``zwXN|{8(5>*N7}*6up;uJo!O)!ao5(Q)TBqn^}4^R+eBFm?4Zln
zEA`ZQ83|D>P}j9{+AsilsIR8JscK6h@EX(Sc1rmgS)r*rp3sPwcRMybMKbFpF_&P#
z`$b7UF<nq>jUtZA04vedZb{r7i$U1if%3q-{o*0bgS=-yZVlTYWitLaByr~cpZgy5
zL#ERcxTS;7Ah#x5?*=Z3IMQum%xm-wc(<A`YxXS?Z-3$a-v1+ATmD9)@3Ww26HMXm
zM?~fgfW*l`mSI#vc1wwUs=|@@sE{6e6O73t#Y<d3iW+0R_4MgtaCG`Jpva1A0i3(<
zH=my^;#K40z2q>-Ptc^NIDQ_AeZS9l;?w4s#kaXIfubL-X`&uleY5KMgb^1%0ImBM
zGuYs%nb>4`!`zB=(DJ}RK?nLNoQ#(j6n3L!lI5(259vrG@h9;H)hB*WGzkt%Vfy<R
zC>coxW@&_vYvZJ>uO2IowuLx_IYjdwEZz@`H{@mF!A``u&=<;C7A~|~Hn}W&;A!3>
z)7Q`S6jND=L_n`0USFWD)d#)9M-A^NB10%gK0!~|wDWt}W5-NvV5pF&prKHQf@LaD
zS+Mp}MaEkuncqg#<J~)99Zuc|>bnZJ$tj`wc>(IUgp6xjb_|EM9CYpg^r1+@_Rs>n
zqtSPClIF?>&#PFL12z_Td#Y8}zsL1dd<Qm>XV#~t&-KAFC}NS;l{~@tKk_&~mB9V!
z`F(ivQnc)CrtiS+>~pK3CjRw;Ym^VZ3vK;=*N!w%i<#U`+fYZYFS`*-Cm=)34gO8a
z?F7jg`v4CAw!^6`VzN+^yKTf%rFTpN$sR2t)#DH=Fw&dP1pbtg8$~=d6>paeBVy#?
za)ywj;R|GJo(Ww6lpzQbf0ysgV~!f&m(5wU)|)LhC|<H0_A*&3dW<`zl8m)6@dsE}
zznj!T;d;#qA0PsUTEp2@xBBBbdAf4=$xsfljTe5UCbjyG{%(PRVWxS#n9Cl2vgT8i
z+p>qf^a3UECLV0PLlx}&%1UCzBc;XT!C`>3mSh!nru)N!m%#L1RnK}!^HBRCRu($;
z)!pr0e|L^y7rB*I2Uasq;kCyq<x#U?Yn{td2o0_NHh+farNNhHFEO)a@j^|C8N0Ww
zDUi(W-8cQN=p$ZE6}K3Q(aF=*DHAwuR8Cl^M54+nb*XVQacE}qwCtNA!6tdpYLaQ-
zcc)6*Md2GkDUU&@8K#Mj*n{CzD>5GD+b;|~By}4`#@>*9eT5lq6V~z6GkYar$IYCA
z4jwaHqmF3b41Iq@hy>E>FojA29X0125f-+bczC;_rBv?Q{WxhB8Pwb_nv%?io1WxW
zvS%h4MXX{KS<j+wJ`Nj(0|E+O#aiOjB}H*P)FxGgJ<5yEP6Vw8pC*`FTVXTNv?j>R
zK6m>!qOF8^bB{81w9X3t+na)Rl@)2DrNNQoZzuXs@97V&Yat7^{C``|1w6D!aAfho
z&gOr=6@>=s5rXDL@JapsEj%i4q;+|D?r+-*{xm-5G#PzcXaDJx|LKhpEo)$BXT9UU
z-7{#8X%ROZl%QI>{~d7wN3bFz-M9W}xe@KA6r!(1!*O2z-;sTAgp`W<Z0v7iPJtAH
z2ijwNirtR?9a%&)%)+9(MSuHc0hC8Hpa7s1m<j*ikrqTr;PPok`)><vi$*U2nsq7L
zYV!Xb@s|Zh_Rp)U{`Yab{QvI*no0e`{&@aFe|qbTy*yEw*WH{{{qH!Is+x`56gUV*
zJ`w@4q&vLEVI2-!HrV5NN@-kq${DX>*UV=pDg&S01!c>^FETtaPA<O-_h&R_=D+@$
ztRL40qrQs+WbllVS0ZLV2P{OqJi|y#y6g);)!3j}4s9s>8q?U$C^MS-e6OzOH!Vbr
zLXd(>WZC2Lc;n4%e^i<S#}|nw9v!eGy@s92La>E(Sk?Hvi1E8-S@FiSa}?OyWSq$X
z6i6P)pxY8e;`(B@cJjW7?Ygeu|6%Ga!>VfAXl-dwx;vx<>28o#LItIzyF<F9y98m;
z-5t`MB8x`45fG5>{_gdDK6~%KcsPLx%z0nq8si+ppn~j0<f$BJwN+DsIo#XY3Gb~|
z+G~O1J{2TLY{xo4hBPI&Tcnb}Z-9!@x1R$mnnK(XtggMwOWF_4se3tGL0-DR|APu?
zFL_JiDI=3j>%4n7K9eapWgCFD4ELZ|kMDb!AAMB%>)&Sj6?ip;gABV&cKEM*_%26a
z!l9XLB(fm$;{mSUxtjN~CFx8mbr6=tdm&2z*5T}UxGB}GtzwmW!8|ht3P;awwR{!R
z1f~@;#bip$0Z<NPLXu%?7j*fm87)J0mByminPP3%s{y{Lv<7thR#B7Riw>iO4|qVR
zdJ=<bYv+Xps`X;yax2)nZUM~U>zAv{za5P{2_&3lnBgsg9S#;6)Om+<WWrOCPPZ+$
z!wFs*TpTRf0FB-p%#}F$X)<)fZ^hHOfj^uv1=%|58?!pM_|NrBJ{uKk(XfMd;SnC2
z`R>?D;7u#(V$-=w2k+vv`<o>@0KmojWm~*AmW{AA#NNRXf<^V*^SNY818Mt`d2~d9
z>w0gPgb;KHc&Pa|rEiAgHZW_A2KachDMfDr3fzzT)S-(_wTgc5NJ`+K4+YhhnZx@H
zW|J<FB&YcnU?6TfpVl7UtL!jz+=7~DHMEc7Gk?%HSvCfiJu~@${`*;@x0WRMH&AZh
z4+ikaPkC(@6?ZF*!MJV<_L0_rxB2{DsOS(3$uA0;kWCjG$6<Y-CFPTP3l**Ir>QWH
z8`#aJzzij%Q+8zqBK?M2&>fg5O)L5_7sxu6Bm(yO9T%B5vN4nfvxvay@j~m^#`ISS
z!B%OdYzjzd^o?QO+<?Huj_4-Hq%SA1X#Q+H?zhqsaX$oNfI-?wrnud7nWh1-Pw2n-
z#%wjlkrhID(>6!l=yf;V;&J#`rSThJ2DXNkxdFd2S=$qr{u!??u|ieJr<RJrjC)K1
zW$ZL?f#T~OsdBAzD3KnzDud6csDltpvdB(h3Bv}4&>j7siL8~U*Qs_4uvknom5+d7
z`@>C#mU5$D37QBM(>TLh2UwX&f$t*<6!4GBoOqcwG+JD|cZOa}f^M=;>hX**@wrLf
z1y(b<TN$1wCH7L+YE{M+!%5%8JTK5~o)X40W)K^KN`=Y|a%*dDv-Z9^SgeUjyURE(
zm*V1!!$vz73g+KamjUWAK8p#-ZNLj18s=Y7L`Pi<!~LlQ(y*t^w^Lyf%~NxKUus90
zHkk~W8d%GmE5_q<a45>LL<8F@3Ks!EIlgRXzg00%YY3OY8B7V>ImOY8`)@eMVjxCi
zI+hi3eh(Zh&;q4BXW9x7{53UG9ZETOaXM_<PpAgm19?J^w4Ehk1J!!x-jk)WxwdBe
znR0DbvMvFqB#0^~rR8)w9VV$GhR~%7UQPlpF?X(wTnOf;5Bd=9ZS8<2kFhK{9&s{6
zlP-?`=^nAjvQN4cS){Chxeqw%qQYWU7$R*;G7wZTiC+QRBi~$5c2De_26%?#k6Ng=
zc|`S|xlg@w3B%1-ToDThv>@UHo=lba7tT%><dFg|jml28h70fg--FTWBVP-j%CcfD
zAh{Y4^C|&b8L#mE6Hj&%(0e`aem(aE4(s*fA+CWzLNdQy0T)x9S6~UKfU%l38EQ|e
z&fI2Yu;1^4M+XffhLm1MuFoNhgz|W{4;*jxZvZS*bt{wu$ZWm@<}bd8QIqpp`Bb9v
z?#ax~8Uq|8i(;Kk)*VpeO5W9*4l`5aGAL;=%hn-<^T;6}fx8&S=RTz9>(ouEk16?@
zL=G{n`J5C2aCdtmuc(2x(xBO38<ouMTEO(Ks>))a-Y83Ji`42DZub)>8o=hI8Azo4
z3Q`!UO<YN`Q8zk4ppclVM&=K{Q~U<S7MU8;)>9{H;=XXtDz3%asSt^jaREO{CmWEa
z`Y6=*7x@&RR#PlFthW>$>6H0=`54)=2diVL>(YQ6q|QXz-$$YWEPqg#qVts{l{KOs
z=+3aBX+J|gYmJwRrYXy{0Is*_IK&D_6~5?sVO#K~q4j9A0oM}$lqq&neI!_N$~!m_
zwv*oZere>#@x`tqoz(3N2r+0zqGV&{28Ka>BG0;xz`>JwUIWhLxq$qV*XeMxCLnCR
z&3Bk6*XvN@odDZZM7q1rHSe=A`UmV7Uw>&V+y|y9ptB8UKAfek+E0VW^1|K2<y)qD
zHBSuV*3VtYSK$3v6c}TYrI3_iI$MQhjPQxo?Cmq9<MsTywg^J+?NN_DQH|%Hsj)j(
zvq9VWQ^JAX-J|%6WHHWyu8}f-13=<H?qjTtEdNd(m?}OMf!yY_jalvsTqZ)%06p_m
zgAT&JG6E@)qzrT19--})?It$C-+Gb@%u@Bq9BWpr0T|%>&YZCl%Sq4WlX6@z9zwgM
z*c15bvmVG9J_vHvATx9Sy8Ic3$_qQ4<uA^3I&G~+BE+hXv&tzvvNJ`$I1Fl_?1)6<
zNHmBf(~-POw4uMs7bK7bJ<oE{HfhxsZNx6qn{nh-Bk^jfd)*nxXzQH!2*+92cNrp+
zzsbPaOmn|)n~DMICz7p8Sn$&&A5Z^j|2Z7fh^A3oXX=mIXsJLG0rRYSe;6Y9%Z*+u
zEZHc+9^_s6%7S1%ipVl#i<Pw_Rb@q02Z!r~urU|Kf^5`DynD&p>R#E;S4Xc*+%8B~
zy5_&ASLFkgM`+WrKbKO5W?`XX4N1^*XpBn$m?aw-gx$H;$O_Sa)@=}%px@qYXR;Ud
zXn1oH4D@ZPuRV=;qR379G#H8D9Grj{e;!bHKHhbC-U8#<FaIxdY1fD}AKcL}W^qmQ
zcZ0E?&_KfIiK}OxiA<26$GC!9x`1;a%(Nj-`6IgJerpbR_3ZoZHr!bPFGY-C^-G_g
zsR?w^u5c-jT(g2L*98H~6Atxhza+!HrPP^Eg}R6n_#4J?*?sm0uItj6q77A~a4E{K
zIM1mKxUTOHwsdRv>3wrLi?p1u%~BJ~!r0r)%@SKph)+ws$xkmgZ$@_AOIY<QAf>I_
zmWfTXmlwA)dhDrLoQwbgIyrHuXt<?Q%3ujWGyVI{crRqlJ<RjyRAr3s3hvCb5qZX(
zO_x;gL{)S~`n2!O7}!FH`qrnk@RvUd;S)Z5Uar1$%@l%dZ_Iqn(=~9$9PfVjO?ak@
zee%Da6fbPGuojjYelNbEXq$Rx^T@h*8!T!be{<<OwtD*oDJZkTfN!9AgFcX)ou=#+
zx#ty=+T#87lJ~Ck>PbbW(1Nc_Dd&u1a7aN&y#;u-4A<ztDIwufvzuRPaV@SBw3ul8
z!VtKj<Ud8J<y7lDaAU(80|-+LTu76Qd&D?4$-q24Ro`*kuQ#P5-`?2hV^B+LEP+Zr
z?G+YAwol}=W*0V+_8Qyt<ag76K77#FZfjr@aXDP2C9yc>dw`EdhqS)lGppzG<zRV%
zFhHK>Ip#zA9<=b%?K5+GU4^9JPdcy|2hsOWXnh2YP4R!M`KJX_7Ww)n9!kFv()c+v
zBygJ@IXMZ}lm7w-g84{-5WYQ$P`ud87a`Ztr{ujtU)&8Hj#bORE3pOkN=z|IOZ((l
z|HD+!)1~{GS}K71oz!uApnXADkiP!i*4LF{a7<AkB2az?`7Cg$Xwh9aBnx)=HbL(*
zRECqe+2}Tad6m{4lTfM6#b|)8FQz`O9)P=#py=N+F^qtDPiv*xXkf}|^3CQ&8V4Zx
z-FuB@AUg44%DItj4<+d#AuV7+twu$Jr^*tX)=0S9aVn?DPm(^Ri^&HB!P|f)imH>$
zmYeET9TFDiADTjD>Eqam*sTu9@sQ3oOt$ggg%}zF0)?ZoGyxEtn9|~LPeklJawXf;
z9E;0e$_SI)*XY|6{TPLu?AHSqpc?JxlhX*4BTGS#S6^uCICjT#D>H%&r#H#t-4DMr
z&x%y9+nzQZPDR1)%R>E7a>49Rd!4mRGL89aqZZ2u`Am*+jZmbUIWwx_nKI`e5_q-Z
z2%-69=97RUR@}ID$piSp<EJ8Z+9E>x*P3;kN8E(u5U`u6eSK8Fl$)Y<ee$iFkkj$E
z*$wv>z=AAJPU8M<&?AO!UT(mx*OL^9Ax<Fi0=^VhrvZMeie=@w1sX_M#pA(mVn7B7
zH-G)$RSZ?;s&S9t8q2kylnqX#ee1dztIvs%-}GbC9n16Cw^4WQP21Zz-oG=QR{#2M
zb&ICFWeLP1+y=nMIu@U2e@!~8N5&J(Ray2sNG&vd?{7r2;2BPx{?3A0QD(9t=Goc#
z%(rXeot{1_!6+?B8r&dA%@rdiq>)T-b`ON0GX^xBfpAai+!py?sEc&U>>XPp-VO5B
zC@Ri!6(2VoP}d`4R}gfcb-zZfoB>ZiWN7c}VxrUMTa2ZCvf9Y!@uQwDgf`1o$(Vkj
z^*5s@)?{umwKG5>biVuRbQ{I+!`->j*BQb=*zhuV`BX+*HqWl^)5zkz*+AUMaYnOX
zVf~iW$n;eVNI<h<GYB!f$Ek*n|E^<tpFeYqJZdp*{Nf~rRpVsAxb8q-D~}b$&h*7%
zT9w6hG?J^Gm}~kCw!9PR_Ag3*t6>R^*=66z*r|uEKk?mviyyTv1)019<AMxR5(aMV
z1-|m@`23V7jzB!rJusrLEHo{12YlrBqLaTHsyNVmObsa7?@ao*bO$ZsJC^sHsiG|=
z7#?T2qNfA+bW(FoAoY<N_6_cfuDjA;XI1R9s8edkfha&_Ga3B&@Ijh{;Ze;o`0l{z
z{)U&I7`LJYtf^tL#f&ey&a;0i1vLRptm(t1E_3%H@2`JCfeI&VAHLq@q~!W<rEm4W
z|3>Mgp8HQH$TNhA6nz2PDF^=)h#8pJQ7O7rA^YF%y$_~Qgrkh|F8#Z1g($eLt|#<U
z)PEcNaF`%LfR$m@{O`Itp5VHz7myax|9k)hw6VGmE1N?nG0W$fZwuFbbj}O#t}c`G
z*mlLQkSm1`p~d3_6&`(@AHcp6$!S#7z0wmg9yWU$$GPQ;XNZzX?N#bcv>Ymj?m!YA
zH$7Rk_tOJrYL>~eE3|C~a~yQSBzqrgf@~9gZ}d8RjHIB-4>JyR<Mt}J?EZMz^O3%a
zkCSi3^Nq(V%8aS)r7Y42=!1d$_z}0O&-6o;{+jgY9e=~3V}!+AP1J*t%`y(+RTyLN
zALEO{sEdpu{J`#Y;rt>1UoChYPw2Ovv!hMz@KhIom6ks5&A&uaP;ANpJ@<Kyo(kk5
zZlV3!=VC3(GY?I>nE^8`-WKIP-Eq|gPMgi-=%6;(7Pc8hewA!*KNAp2@}>pV@Ze8F
zKqm$PMZRoQbN64{3AZR0R4wq@f{O+#(*-$oFFcN`Z|b_SvC7*OZb?%pcasMox0VcE
zG?r<7d5Igtmm|V<By=AX#?OWe+TOR%eF^OlFdJzYd^+j!{rF_`S1Bh-r3;mc=QX0Y
zUYkcg38&$#^WM`)a+@SbR<w^WY95oS%}81k&lMM3YS`aswCJo~@)3YRktdz_!rJk7
zqZDsHh%2R_P~D{?hK(2lRlQ^sunnyM)6mZ2;;)&{)mkVC&mSC4?|uu!a2hFH+=A5Q
zPW{(<dGegK?nAQN`khkD-wdBGRU27RPaA^Gtz!P0Up$Vj6bEvY*8zh-mw|lYlApuc
zGwPPw98Ov()2UWG9QsyT^r{d|Bx>gzkP=QV16ZH`<=?M(mt9k5l<Iylm#uy_oRVct
zQ&+8+{FK=QX1M6TTkP=7ObPD94r}o^*J`#0ia`0C`6E~(vznF$OpLJIpb$c;t;<G1
z_NbJv-FWc%FhVVOx@TGd0mjk=7SqBvPIJqIWpplq8+S@#_^hkHTzX+$^gR0`cd+n!
z15)=Fn!wo;P^Q4H<>kV<va$ke&*+azwMeymy}En0W2aW8pNA;Q*!X$IwoU1K2`@%h
z2^NKrdG^zY*VJ*_@TXdI=-}%z!L}80`C9=8N!AW506(NQPgg5qmP7I~^-6;=chU;o
zx2I=ZA4uYkg0s(df9dt-<sza~R_s|FE{poDYr3NOO}3E27jQ2NyB>^Px;(fc^~1!1
z5Go&?nK@0)!;p+5v`sE{s~Ov@O|G{reG{&!13tAQfDOrhth8N<w3{8`!+5M+yF=+8
zWC1{GVbe6nHks~QF)6S@je6pAJ&@{5`m(#ScV~jZeYntYXbfBN``jIuAr6X_?c{dl
zC?=oGj{<*4t|y9B%zc*C%yRR<aHhCikO_;@6l~V5yGLx5n|1u`j4jVyFc0t@%(*>v
zoVJVV;8^2O@S(Uy$iNR1qh|uRTQHub+l9`0>C}#c1;?CmQdE=k-fhB8`KOjQlg8g<
z5aZ8Pwv|PtpMRox|9g9|UtN~)F6+y6Vpe^_Pr=M2j%#C}Z|yGI0H}3YrH1}9BIx8E
zFqiBGOGoyCWAPA!ht{oh*0K4I=|O+AX?|alypZB=?0T@kyEcD_^;`{;YGFB|{BoT|
z8y5@l3+Z>OWtw*U6n*5NM^ntZ#?JwR_$UhzWn`;T60*9)tdkbk9(i|YU;E+aS#F71
zxoK8wyEjTQFryF???;lXKwwP~KKGPkmuX;m$t|DB8T|jpeBwFC6j0e+mz<M;NhP5*
zlL^|CVat5ccCTA&YNCINkO}6fS@rHGCB?68vr*qha;H*}G2)}eOVA{-J<o3-t{Ln~
zOJe(!2d@SGh`u8}>U=k|S{5X>&X6scSsBqck?u~_Uk#w+`vZQHrSWb*AWe>>dlqrL
zzD5j{T?H7FhGaIQFnb9Bo@jdN1=n^~6M#?I#`kB!_tMp61Hh3%)4p(eWSY_@h)TA`
zZAG%ASC!cQ%`3N!`IpjhQK$A3G;|*2BB<R!Mp1_g{T_rZK?3r5WAl)qz~F$KE_j2_
zBa6vl6ST4K8`2re7>T!mHzvP)!<h9q50=Og<msQ3aqm0<c#HlIo<RA8*$Kh~&#kHT
zIq~rKvHjs}7wSJMedl<IT3(ZCPQ18aCi0eXYh*lEuE=H3`$Y<;Q8>gqX>Sjl7Q(m2
zKJwx*I15M`20GOIxB?}85ez`a%Ac!q4<O;)b!yZ5ZrSu|s7SlP?|Qd1ZY^B#43p*0
z+p2c@H!t|D6F`u21>seN;N;pIY(gJ3r$P@rod9V{#2Pz|4mHGtagPp*Nm&?Xqo^MI
ziIqu^vdx~Ycpqk(URI=+&{W_|suPT>5EBv88wJvdfqV^eKXUc!<1~zK+^?5A&ZqU9
z@wNa>Q=ExA6EIb*-<dh*N}M3GhhBhQR>jITDs$1*ZrL7w1`dVDu)g%0+l#gpz|@i8
z&rRXwJeKS4O(d|n0oEjtqb#)G;~NK6#l&@O`cA(R_wO%8C(Q@gbV&3mFzpmWrdsUR
zT!SwvwHsvn9Sk~Y%0U)zB7|it^YJb<@|EP+;TeCSIs^YDF2d0?)$Y7FI~cFMWtz$a
z$$Evfpi;lKy+?FbvDT8Sj}9=FKZ^`V_UiN*;sERRmLVG~RjY)|9T4VovxCB%z`c^`
zwk|mSCUx)TB#~g(<NAbNy;ZA9KLe0Ai*LyH2sXPQth7-vD+U=JyY2+C>SY=pGCr5o
z*Qj|U{b=|Dy?0v5inL%B{><GMD1UaDhh2~-|C@K*nlKo};3TY9AmCfXlx2ECvj@3V
z>?&}x;ISx#iwJ-IBk{#TMSr>V`r~OgizOQQIDD&CcVc<!Un_&pC}(MePTw;-A7{sN
zEpud?3fLhkoTHLcDA{vb^R4c=Ygjdh;8|^^w>Rt9!w}7s;q;=FYGeH*mDNy8E+FC;
z0?zP{iHc9h9$_v>GTpu61JCnkBsY7sw@1>Ce+rCm8F5y-Z(HPf-0#=zA0>62zH>7o
z?US4=9F^cLuR)$&w3)j;*~BxgX7A)-vf2nfFYx%T6-I97Mj3r~%B9hSs*w0~-ZfR6
zX+?u&td&!)M?jFF3k%-B{~RiY7+))gtdFScgVLw5w@fctL=Rm@CDBm4yA7NfA1rWP
zVG58)F-U7z_DIcW8yvOzfU7L9&`Lew6h=q0`Ab%kK%f8FvR*4>)j1>)Kirr#h>l%#
zJ#7eA<p!)V{@R55-riaak1z9S)H-@Nj5d5e-tL7*+y2pY6U`Gn7dlL68k*p<VAC*X
zh`!O+zuw1nq{8Ngm90q{pG9*p@7&+HI9rz$M=MTX;~bPSJQm5h=6$_MWH=I`J71ql
zw&{-l-WGx3<{ji}fs!?NS;%IkuA5k_b%Ur_*H_qvcbV(?ni7fc{a)z_UX+ldn65If
zFVB+e%6%aSynl&K5>2h&)Gi-Ow8_+aXm>PlTaXqyxfyCp6Tjd**;3l&)hN?xQj8I*
zYVVW~Y|c)<O9<kPIv-GI-SC>ST0U>*-+IG>+hOLzaHkWzoiuP)mJ(v4b%Al%RO@}v
zu8Qn8By8|A!FB1)nh0EB9B8Fd=(NTsnqmKWA)Qgy_4H>_WtOEt>riG#EW;e5G9q>=
z3j=%JD?WKbl?z}t^uEPiwt9YD^$fMYN0=`YH1N&Ocw7YJzL{XEZ-==$9MX6!bUG6T
zHCeybxo!+6b$qcTuZuVx6aL+h+NG$K2DgUY)i`?xdBd9R?1w`d;7q-ygTGIp<aoG@
zsANB$a|o|YK(dMcRadk8E4LctWd3`pvubx!f$dT-C#Uj4hW^U9q2XzN%JP=Nf$JN9
zezfb~1^X1P6>om+$4*K{l4uGDccj@jX5P=_e-8~c$;#liF4J9?i<j!6Jr`G}h{F88
zMQ{@Z4p_W76ICJeZv)&@Pv;lX8we5kL%3c<8l#}pX(kuht{vE6N@SjPbv`w$He6#J
z)oK9QgOoonkcMPVE->s^59VVegdPK?JnTe;0MN38%sv0j$6pE~3sj2o0FgG%jb_FC
zTXU^jX3A(dl`mzF&t|@K@(oy(Ou@n1HMM!-j__;#fba{u>?W?3Gi}W{ZL@hcIYjrH
zO6ppvT<ea6gL9bSk<0H)R1l6BY(46JB;M2TlMQL$(9+>aNNBHqGQR9^^~KLX>|yCJ
zgX{iQ98&aie*FuAY96a-U+N`MTs!Cc>o6y_s;yRR6igp1t8`oWh_Hy-EoFbak@s$-
zU>l|``pp*@o>skqAI%vLzI3?_83IaM<~k*C5;JhH3`JNS!l}gzR*eSyJ)a*ERT_j|
z`;mx{h7;mxtCj88h#k6CHSKy+{S~6${l0<o)D9Y%mI-*s^3?-9gu}Z<kPVtTuPvtS
zy+}c)JYamZ9FaNw4ZSVQ94XfC5l$PiM~{$RcEqU}b2-kdHyxGt4p|dF8{1fSp63H)
zIc;X?wTTX23@HZ=XDNSlxE)J6w@bbIeHY)X$sWOe{gjR%LITOrPtzB`2DJD*(V(fk
ze4qb3GFZGlP28`LqK!56iS9;@O6c?R>Iqi*44)ljU%_WJ{TVoI4L}%`7bBirwSR}Z
zP|00zb)a`Z6JvtP%)`yqV^~JX<YZvz8Z%l%puY1RgW{DI5j)uvGG0tJwVzUwrt#a0
z0mDcGPZ)Sp$Wrhp1PVq;YaFVs00}d{V<#|q8pkHgXEi)J8K03ZV|&mkCWCcN)J&AM
zO-ey{mb&QK$tA|{sKUcptJIUOb4m<<q?pT>mjVi1R|X$Mz*5V<d3mOEM*h30h*lT!
zN#ale{8mDrAf1st=#JPI9}$t?0<|NmYdK)zy3y0>#AX3WKmxbXf+q|DZ?f}a$ORY4
z<CGwLYeCS_P;3t7u-_f3X|%9y5?s^=GUuHD2f5UIRwz;3hxz`wbQ|$4c0SMfJ^|V8
zUTv|NxCw3a@i7NUKWr6y9!>D_O34Zs{`g3KHaaPPZYh(2wN>4LE=-wy)c@R{I`9cf
zFw};)>+js8bM$%@!lWF>TA_GfIKfO5#WvqGo^M$T%zB%mn9NmL$dj>z<}IFX{xG}6
zz}C=IK{C?El*A{u>v?m=AHgyGCOr)JlMNy;ygYrQ4QDt!;ZI$Af}Q<7cd=bHVYqoS
zY6<v<&~IVx)vJ{^hZF2k6;hIyW|>!2nH*DCFCTfe3G8zEYKWJ?`6LEh*!kiByE0Qm
zr;?%REx}f|ftMEb2$seyOWwO)&pcgrqux|b!a{UyzR2*CvbjF7h82i8=X;O6n!_tu
ztq{MA%X?wgx*G28sdD%DI*zr2rCW&jy@mYq5X$AC+`J2nC=%ALl*J;1u;i88_RHmk
zT}VJOAu>_enBkoC9dscTD>x{L`W{mj?6^PR=~rEHsHV9C#$TxoX5z|iWX+g)+m**k
zNHb>e>!Lc57~ZyyGH`auWSI4K+{=gByKx^T=azBz^Aa1Zn<)i(jB0Rq7}9T%n}tk&
zI2@%aIV}6GF|eTLQso(qbfvUsReAqb0{f&eqE7j1cu)gnKOHdUaxpMU9q=!o9SH59
z<|T70KZ8qcb<J%UZClZeFZRyBFL<rX7xYds{!+eYEi{PSniIw7E)6N0L}oX$qdo6}
zRj0$6Vw^*10@=u=9{qM$me`V;4kI;xWv+WmhC|Tdd0mz9<lN!A&DqQB_S~-CRQ~C+
z<yIY()Y1o@u7h}Oc9Y<qRQH$ys_3#)wIZI^1}O;y79&Bso>k6-B{t(Casj^^*3CVv
zdUY(zQMyiKEuB=VkEZ(|y*0?K?n}<rsCk0@B-)p%>XuMrUG=lQagSDbPS@a5`&P<*
zM`t0#3SM|fvEbekgB<={53U?PCcMSS2hR=k^u6N$WEL#MiAeSR^CzRfcK+!%{FFeP
zS#~oz@c8@hBZCsa<zf6~yXK#Lr86o7h)4X(kQPeee>n~=n8k!-wW;i%pku!Q{3P2^
z{96?R|4BUPFrf(9jji<Gr(SdevXJ{mRMTGdzmL!%z>K_b8AH4O@0a4ypJt8<&PSIb
zuPKrOsasSfE$Kr-i6wcSkx?bQ;FQKflWAD|DwE4`6jMt<PyK{Yy5I+ZwWNg5C4N__
zw+@oHs!Vv&FRredqo^J%MNJ6Pl>!NIq(hD51j?sm0VjrkiEi1<F?7rnI25P<JWb$s
zJHl3NacPT{!Ig$dIOavUv0;*}KQcr^g2mT`S;uV}mI@%)lq{^OWmZAH{>t)=3C|yO
zl!_fc31a%0<Jdp`zQ<LO#&+NQM#Q6QTDO{?{~7cGBsJzwe#O^fRU;2&9tXM7C~;Dz
zZrL)EmNRuKKaH86K&m3BGR~9UtJu_03cG0LnxKTYV2I_FI$e*bH1`_1y4n{~>Fp%r
z`c02vA;V!B+BpO);yi#bI=NaaO-_T#Cp{0UEyzy5WAUAl-oYYC<qBwrjD2x%P1ktr
z5w#)jq38re2`<1*pON?(h-tY{pNrhIj7@iC113SbFLpA#o993Q`E8N4^)Bb7Mh+JC
zd!lC7Ln~Al#UfU^i;I0>g}h4_tp{+_g<~*7ki&~%*J-Nb$LBk1FdKa!jZDJ+^sqW2
z?f+*YKdGMrbi94(zXRZmNYI2_5%^KK^i{Lx*`Gq2vQI7TgP<P{`TTsqP@0U4=a0cY
z?Yy@xXH+Fjv*9FYu$s|?$81n5!=hYdH*%F-xfTy4a9{CGR|>&g!cPU~4a*<ARiOGh
z%l+=Skbd^^)$2)_N7PxxBRjiBK4=L5{cwT;L+)SnSpxUVwPvna%semqleorGQ0ZD}
zeYC03$uFVwCrK~WU%?9;@_(a`y$HszqSrXxbhP%1^aZ*SI$SF&&O*WkmtKxd!|+f;
zIy>koopje~_o9!|0Tv=LCDS3g-ydfx+IXLw-(5TL1haS>DRW{0%w6$@%pX>Nn#t+S
zp(JF<S)7;O&i%qNu6IAZ{D5!!>HP29Tcg2wA3P(T4@(I$OM!biBfux}6Gzg?!fs0<
z*8EWi2|+Sz{IX)nBh?b*SMQAPSV3zbkik8YU*fj^f~7-n5j~<t^ioH>g%NXJQ7a`|
zqLmF9*7mwnY=1^<2-eWx=mZh~1cx^Gr4*^ak-?I*TjsC$%pYggk;5q~rBKJyEv4ow
z?eCTfD*3R*xL~}7m$fV?D&cWI-FoKUFY{#ym=r8B1f5J%She|fWT#u*Uux$eqXhe5
z&$`Ul4VJ+5^y;U9?KmH>Q*gTux-&#%@FapA5k>W){j4z*!t^`Yv_i)nlxAEG6}U$v
z3)y_FFKz<B7dQmUuP#d_{gEUlz<bN|{&3G?rPZP_I2#xmG^l9tS#&twR(55{MDTUb
zHY9_&^{3{VXtzEUC#rZ?ky7e~rJ9@qCBJQ525WaC4I*NHTP~!^AQ6D3)cVErI|CSi
zbs{C$j#yyxZJL1WR<DOiEXO-kn!LA}uL`8YQ~*}MF8^(9e*6DeDL0h;OC65^q_ds?
zIP%pux67C^n%LK0*fZ>AKiQmT|6*%1MR29c05AU27EmeCj3$*Ja)9;8Tg-|F2lsd9
z+33v$MIO`#s7Bq?NvKklmLT4gb-&!`ke)a+mzO`0KNQB1AT<L&+G<5V(R^|ttg@7#
z<UuSZ37$_8AFE6-5?Hk}W@<9<Mn7^C0oPabCNP3HWBvJ6+Hpp+7MXFqP`QE-&TX{|
zo#X!5m`uAf(Zub6^vk<9uoJ_i#DrTG;RejiIpygDgYLDqRoVVXwLd!2IX@ce_rELx
zcDA^vnj&2@eB@z<p<p3{?wK2O*((q@-E%I&qPu8VzOkZ4<@ov;gvk?L=NwDiUhMN`
zdYxqG_K?Rlf{O2~R7$Lk4Od8EhKDYHJK%U(3K8D}-Uv~>juIp=2KaCO1mBFyJ))Ug
zb3}pf)zYF4$29s#|NB$o!7w~^WFgs8KZhKflc)>F(_#LX@t;6}BS%+d9Tc=7q?lz~
z=N6=jdiE2P%W8|*>u16YbC%(VR~IPE%hV>FA86+PCz~8`yB@GCnHxk?`CLU?eyj_^
zATCS-3JU~qtioeebp|X)Gd^kc!!#17bfA#{EW3coK~J!E7CZ(T&>17O$ax&N#Jax=
zYgC)x^@zFaZSzHLC7bEu)0DK&wYnQoU&G_PgIr?YuiIT6#n3%Ded8?~`3oFnLRXXY
zwm~e%6S4G-|Do#*<(Av;AK9H+V<AamhMMXCKN_aN-`9P%>~-plhUoi>`1aEDkHX{I
znPo7DwS7dXKuZv_oZ9yA{WJE8;Ou1cCACp)|LpaUMy80n$|N<u0lociZ270~{P-I>
zZ5~0kkpPMy*8|_1M+nW^MZ#rT!bPuBOm_4b>PO3N)9U^}#58dWZ2Sn&C@*VU0_G2D
z`_r<qpp2-HRfXS-&n?f6xFKnbi&aLo0@NMw>qc@gRVL%nba5&3H2`l+xO-DIMB_Aq
zq3u0n{rRsyxy8>ILSy|&7I8K7Esai}$(om%yS)`X_mAEHbpe$eF}8EfOtI&{@)j=a
z?Wd1z?g=qqH5idu$YyN~X~k4QMZs=daBPKI07mMKSQFLSJVlvxAeI%b8B4w0iY4$7
zX1plof6~04N@Q23hze3aULcMK$PBmmw9qW`<-}tKW(`|#AIGPZu2C?_-xUm=1Gy18
zPKAlWBcE|S_>^Cy@c!L&8QL^bw1z-QwPL(0RBu4wRrh-pZ28H^cqeprhXYU~z#b7i
z^G-<<1ep?tU1HpC_d7mim(O~sJ^Q^3w)Fbzug7o$@*755SBTgj{<eJ^rdgw$%%ryy
zoo)?Rb5K)MOyt0ta8Vdfu$nyCALzdw@l6NJC<)<xVLo&ADDvxKbM}|$+vVmqK*#3+
zKDeN2(rVxhn7=sg4(c^=v>X2WAYvY5otQS7jq!dPo^vvaA~nn4>%;me5uOQx)eZcd
zP#Z)G&(UN23nz-?DjRL(Op8nUxKeUdnxhZSvo7`yor)fD<P@fExhe<LnFIa4>phv%
z`un;a0GuK6EcOl<_gL^*lk66Ox>-<i*_H=6bn5`1b)g!ZVsqDvL}#RmxZMIwJ5RiW
zfL~tM$pqy7`7%eX#!xilqa-S~H8yhi_tdck#Ehx>86ua6&FS3RCQ*?g*4-q=YXD@Z
z`#84F@pkQM{aZT%Qeab+Vni)nsk41zchhTu93=rcjZ=>3r`CUT<&f=sN{=ganm#Cn
zUQnE;34POdS=Y>Sq%|-a!nlaqfpBv`C%5~qk=N0GD!BdhM@SJ75Wkp>XU+;VO1t3C
z^}L`nKiBuWKm<a@MXP)5`SPP*z5FBR=zB~|A@H-~T=C*&isjLJfZx6ALYP>g>2Q@%
z4FYp_zSaX^WW&SbY{zh*5rg~@+Lor`H}g~MdpW`$xE(f!g4c}aIXK!OrSImeO%t*D
zpWrc(36hC2?EVGk?#WiA9@j<}&&fF}yEgr<Hs|14i`ErX@;bPEyX_H*o2P$)N^KxG
zSK}Taw6iJ`!E`rUotx7Ch%?k2USR8cJ=kXE12T2mGX<Zx%iKY%CGYwF?j;QaShJ;&
zj0gf4b24g@%f4`OI6=vexsi~q(6k-UPpz>MGLMaGa<SBTHTLd^LAqJo=dO_>i5c##
zy531AD;ZgaKiCqfh7hKa3J{&Wf%^42b`=Djj)T%F0$GPQN(E`<e2Gq@FuQ|(;`6tS
z;6`thPx?kNRhX7H7qkeZuTJ4JV!liB)$9)2O*RV&cm1mZFqizhpr(>_t4hCjc1(|4
znd8y%EyWqI1RDjP@>S4yn(nfqpi_B&uJTZcCOr@0Y6q#wX{WtRA0Z-nEp76I=ujtY
zQ@u0=ADrMH$wYzFDhfAKO-@(_Bee<dH$EW5|7JmVV%&c+dA!jvU9(WPlcl)BZuot+
z-KLbw7TTBQz>QKwOU{XGK0qPt%xz_&h_hJsWOJCPVrlvF1u626I|=h_#SwDQV`QMG
zcWiSz{d%4glx>;hxTUTeL=!d92cnA<<Ive>J(a00D>Vn+V|A4bC+l~)vaAk8o*$IP
zpad-!Htrx!io2crl#4wv2p`*8>vA6(c&|?PDj!Riovfdy@kdkKnyivXXJ;_a%U@Uv
zPHD$`@_eamCoLvJzO2Sg#p{p?)Xd!h7-7B~CsbU1WkTya4lJG}upkI7_vj6MyIF`R
zYJzu2%g_%kAy|{H-J8(FOddz={zitDYLB5`OGZ1petiQxxi56x>`x}iP`ixkASNKZ
zokhma0JYKPf7yek#x@USakwgGjeMrM3hIlEWuxyDZ)O!nSX+vj;*QDq{z_5E`I10t
zfZw5F=kX}S?2LE0R$$j{coCds#`$_?Eoj{ZN`v$bGrce39$E*4K4<Uy;{|q}bfG-*
zaZJKCbfcmMdB0!nZN=PN3I4pl6fcQ9->Z}hGqdy^ruw_la%lQ&W7w|bLxt^|#24k5
z2IjjyPiJg>wGJF&yWzid%C`XYq;317k3m)54Z5k#ZSXc1B-`B|Ydbj+o6F+@nk5P6
zuk<3^<dclHYf<ypleDI@E|kL}JW4sVvTt_n$wj9Fi38$i=HoR=og_cSTvsst^npc#
zp-j(dyIni)0ikQT@TZxZ`_1TTE5({fT&9{^`lr^z+_wJ3zT~K1qyqe8LTA1v$E>K#
z+2U8Lhf^Y#hrW-WhJB`tlrqPsUVCfSnto(NVGlUk>PtfnV&=!?TdujAG4}vcwzfRV
zi{%Xr_bupL)zyNdL-(4<_=4I^Xfk0o18H|M3d_;g`oL|5ju<acq%f>zunMs-n9dI6
zg0O=cVN=rOIw%n|&dnB?mIDx#`+GA{@L09d#J$V*3l?Ye9z(R)v5h%+djzC3+3)sO
zGXxccCC^1QGTx0Eeo|-BbS>hW+t%-ytD_I>>_5S)e00AS>?;F1`I6$tJw3a5x`PE8
zY+OH{e2016V55}0S0xv3rup>BR?JD$cxx=)Gm2M#iCZrx3u}cwSJAr7z&P#=!@J=7
z;|hD6;?<2QV9n|Ga8fVJS!OnPK~Q{kb7IE1lul&gVNMSw+6gbTzISc+C%W1p9EY{~
zGja3#qZ=mZ53bn<f|W{4;eqiT83|<zdi9r-b{0OD(9slu5CD?>t7W)9TkW07r8Ke5
z**3UAb2xlhK>_cBI6=2@=6YheWK_~;vXVk{{gyxT$Kg)>CrA6^nTX&$ANzed`pv`R
z{=Tx^%L%3H6qWkkyt-8GIrG4f1RIN8=BV=@hwjIn{kNnj*<ja1FZAY%#R--y2u#98
zlN8I`okoTK8&1iij%8y?)}j1A36jMkm<o^^-MZKCp9+8mQvncDhkpO30x-h_i6Yv=
zoBe+uc?}Dq&~<Hb{fp{!M#18S{JTF|eEt(8zQP2F*Hul5{|OSg&tZau&`HJ0e}V)Z
zOpw5}W{dw%koe!15)kbL;_kf5o8SM6J-)a<XxV^&Tz$}*PFLG|j;{vn9(A5RUWW-+
zxvoDS^_8CDq_C)1&*deM*<^rfBP+LN^U0Ran0{7aFnbN|K7P?l(D_ne&{HtD{2`QL
zP`tf85uYe&ROGl9J6;c-weaJc;^Q#FOz=8MVZhx)IN4Ar8?(hNVP)d^Cqm>IE5(T*
zAdBSDtf=I1sE0~X2f+je(IB|C`97SE>W`%^xNjW``{CQ>&znw+q*k?JMuC!Gg1Ws0
zOEopR0B1)3HBb;Bpq9__ikg}Zla_P@Y|H6SZZ8XT+k$bGi!#8!8~pS-Xkr`zYwW>D
z(sLPVD6xYO`0GhWE@ZG>-~IJ+IKhs=94g-(j6>(yh{zqiQvE4_O#I}BeprnAqSwt%
zh?WnqgwxF)58!g<xAYc33k)LrW2n+!5bDE76=gWDqJV+HxImGl(t&or%7{TK;)PaS
zWAE!$eHg|UMzy4!y4>M@7cY7?b~qdywFeyl;F-&~pLAT(ps)ckeu4hSF}zXt-|vVr
z2Q!C0+@{c^k|o@sqw^WPag1h%jV)ZS<{TOU9ymXM#P~@L!WZ>$cVGoaPm^-M1y0P<
z+hFxE0CK~<F0AAH4*XzNwD}p@#5u&O$-}`9*KAW|fol{_hxh>`HNLk3i!`85G?RZ2
z)af8O1kis4``!1r_RS&v>1iVFX>-6Mg3Q^zozcqtg+o^w`bA%I?Pj*+@(Hltw1QAa
zSg-SN&Z}HBF(qyPC@cqNw3AN&Ko+&vWE6skOk{n3tRMFF1}uhw0bFf2Enidv*>bwf
z2(-%BL?tVvm}OE}f+Y&Wsj2_Ya$5tmCzZbF;+8HZ3{v{5bmnU{G#jpmQIR+ot~`Li
zaGQ>%Ihs<G*{DjV-=lzGf3CJ;5F~Eg0WRc^H*8*gBG8osDpm4E0kbFXSQ4N*8!BF8
zh~eP3fdK<I<Is#-b2=as@)9*NLFuX)FmhkY_Tm6p$q)J1XCrEc$J7#plZI9OX)R=Z
z1tlX&^g7~-^*Vqvdw7Ot)+5imQ?H}N71a%RpbNB!3A!9utI-^ld*-kbm{d)dj#7C$
zW<YR97c$SVv<gIr(nGWyC_MZ7oP=bML*TYswhpV-T>88_`)Q@;2{@Bl99XT$@M{nn
z>gedgcE{dtuhS@8b|zGb51!V77@=zOXOhX5OKLR6#3#<xhV-C3<^H2Kxv)!JV4#o<
zGKPor2-)E@*N;)}kwY59$^TdYX-)Ja+s42Oj|-?I3X`oeR<*8&wzZ#k43$EttL(c(
z+M++0g2j~5?L|7>)HGHwM!SAjcLC@fNa3GFAtPx7MWZr%h|fZm$b*%y=!vm8(K#=1
z$;se-A+KEwN_t<2x*nw2W?8#*g|2o16f-}Fli{yzIxT6SV0yiXP4MDi=2Io!1q@!K
z7P#OC$+(+gw=B5n@|jL(3hyUQyP1mkdW)rIUejpnJ0!$sd^QSkH}Ydvh!G%NfTpU!
zax53~k_~t@u>{3z=IdrO%0X$@<dIt1DR7#Os*zkV@G*I_d@QkE)hwPcac0riz;>ps
z10}STmvtyz3~J1v(u~Wg+aijXa}k@&39veNLmN9-4%5=u;1_`w$CE}Whm3uRxF-89
zh?sv1YY){>>>G=w*6}z>dkheXQc|9i)8w(m3NE#3mP%;y0SA77G)Hk(B*ghgnkidV
z#rj4AV|UTJ>>P$vXx~KsPoz4BK*IG@+}Z?pxZvyyIK9)wa;ep)h!Y9@?lOn|BKkPK
z!bT;Q{H<V`iD9|PNvW}4%PHAxgSj5KSJ%KqpL~0;X9(DKrKIqj0=|z|lg~H#@Q3q~
zxn@B!+{#Bxe|p8|Hp(1v=$s@HP%bNW@ewwFrvE?p2G>(u>Lx6bldo@v^}Kmi>biwW
z`tAUtc2X&sC*jo-OCDij#uWAyz5}y7E(<_A^OS!1Ad!D=GDKK9EjhOqs)UY#<u8~M
zmc6MVOG?$zBXT}<+MEq~J3dUNi+WC@$3yZE^Mb2IPN5Mc=Qt9xZ$Uzz6CCNEnL|(o
zP${e}0j~HX14g~MYJyy*!3U6riy$N@UZFD-VF+h%21pl-51=@~S0#!-_UR@;7m5vG
zczp~w?zfn;RqjDp^d8zsZYCZl1z~OSSsMts(h-0()4m>4aDcU1ju9IZWhnC{t}~EL
z_inB?Oby)y7*thXp(BS=S3B=9q|(1$F^|>%dG&C$p_#0Z`t3SR_;Q0_6Dc)*$4<Et
zo<fUJ@`Zzi1=(qneBAoH=|NYAgr6jUYM_%MOzOGG;(Q+Ws8&>j9DQ#$)y1N`v!-TJ
zB-tA}TB9oF8+o=~4(76f-@~bT<;WZ|6Vz2I?1X;6Ck4@II+366VP=_kS9q|$eR4=4
zh}cbI-@~cg`NdCj{`*T^CF#XlRGLavL@k2AB&q`56Sixg>^FOelo>RNvu|0n6jFm;
zOG1J!_ZM=XL2fH33o$A~tlGV<KgS2X(f}PW(QU2ksZnScxKGs>a0OH8$nY50P)`Z(
zWdZZ9#bqD8wE+F6<fP>65$>#p;Uvhb>t6r>$gilW_DdfS!hVAk4#+u07nVrG&`ba%
zP&FfhG_b~87%2xnKVQ(sN@X$T{JtV0^=#C2P?Kq1j8ec};#Ss&2a;RE*`p|hGYzMB
z36n@TV!ktfaNo}2r&2^UJT>#_nj(y_Xv^i84BYM`Q0?asL=2!QIt7h5<DEwqL|y3t
z@2dox9C|!d+q76e5ux&<3e_cFkLdV5-uouQ?2zr-g77ck12PXroMOak_5#VK(cmHU
zEo`iOB66KyPJTL|I3>HHwqr{oOOk1^kB<EibUEH)Om{_Z1veR-v$|<w3rGr&60(d*
zP}$pNNVpjw?s$YY@bPos_afO8`Q#PkN0XRnmNq@(<x?fBzWfMCu-f@MH?&Ffy+@jQ
zzB8DFRfZYQbbv}LJn8Oo+4W-H(q&N_Phj?HA)3!>@Z$31US_|g?b7EGkbx|bK;Y_|
z(?DAZLC!D9vxtsoME=~N^7j|hc>B(E-e>EQb4kDBVt>J4?ySUV+(yrX3|KWdX7o!g
z@zDRQb|KWP5skZlp|1J#VB2=i7cU1<1pC@E#l=ka>Dzn9ky{|?ly2rVLe#9Liptf(
z8de^(bFLMdy0+*f<Gcs>6^W3+z7;2(stz!q4N#-vjN<gQ>OUzwT>nXzn~FI)8)7H=
zt}Mo;BM%uR*}NlOZ>3T|_h%!00F?&kq~st$mSf{D=rP!G(KfTpb1+YXjqb<OConfQ
zr^Di)O#EzrsYM~4UF$3zFh8qwjo$b_IwB*|bmcf3)by<daC1VFbYaF1NI0%y{Pii(
zg!*kDXO$qp;H&fZ1CIxC4K<1OHvULN$%o?X?HaYxRWH<&H&An(cRVJB1$A5UC!O-;
z_@I*BIR6xw?n#OL=<OEVO~3P3SkPVqTIZUgWJiBAnGIp66jARM*pE|)H0lj|frJm_
z943dD$aYVpvZw5s-x4cnx_HS)%zZoFBv0B-+c$i;+aeqBtK^BwQ8F+M6a<30{CBM_
znQ|>>T*Zu}x(V}n9A*sDWAyG=`?QT1!Kj^hkG9juJ8)x9Nlp8SCF)2NFpQqY2jYO&
z%X?xAnskI|^wKa<Di>S*k)XL(cX=W1CO{caTWWF&5vxB<b{!)GkP~|r2bC(*gRDMB
z=-1aHJc2{c(D&JnR7_tan(<$3@T(${F=L_uxCGv*mHV-y4Zi9E$4kTMJ&=X4orO?)
zMj&)MjkcAE&u^ob0mP@J<Bcx#`-+dS(svXe@ooAMPjfj7ht4%phE~_N{_a<v$FY4p
zVFQff?<(JAe|29AdgPoQ_pg=AI|8`EmrgyC*mAhHw61A#v(zsZQsimBg`qHz83N9s
zGoBH5mk9Z@`>Tx@$M(86ZQ;dag{g_G3y^H7NB+1$qTtAFPINpua%kq%VIjBK2=nAN
ze>w*tbT~3KiI82lD4GG4QQ&QMv7h+zk9T=Ko<reVLi1w5FNeg%IDX1eQIuioLGkLc
zfuf>@_ZP&BpK0Mo?okRZNVgdGgzyatf@#~?gpGnrTnBg8-!%HfK-huMQ_`n&P-HWc
zPQyu@v@)~R>8nGzN`7;sjL~^weF`HfL*iFb-aYwLJm@e7TbkS0?|bO%v>!c6@ZfAu
zD~_VUsxHP<#Sn;g?1&T$ry=AfYcnz-Vy6Y#bIp69anB<n1SjX>2s@(Y;lo?J*|@ve
zd;B^2f^sY>)hVgkr~@BamCv$lRsam&D?jT%os$DELAShkd}d}EQB*A$D|Q=CKw{7$
z8KUu0y@J^+LKFj2CK0rTWG^?#pQp_nof293$h0)e=<Mx1!|P1NJ0(zNzaV#t;g}s2
zf7IBuw4)?qq%+^2|2R)n;ouLU-<(OrfM@Sf*YkeOTW@ay3^=)EdL7vUpXuEC91jSe
z@lA;u_7=|1fOS|Ae#{KZa)mA)F(yYEXy5f`R2D!b@iFY7V4P=we#40OVFdwg%OgHk
z-9gCQn6Z9_{*UAuR(9OP`ZSI9+#RFF6aT2uA8|ckH;3ixCR=L=N6g34_5P)XW*U;=
z+NxrDtuCtRlr(gf?6);1y?Kdw3#f{E7p&~AVP&rzKyp1O%;@`gTbO6FJ%tu>mPkxS
z{L#NZS>L8w`5h|WL+0|Vm)EHiwNL-#$3U6C%WlRijtYqqxR9JrNp5Mmf;sN~r85aw
zPJzesrz$Lbz}FD`w^kzi06eMD5p8iT9@X=%r9vunI0j!_Hk-<D8yhKO9xn(JuYiSD
zE}N_`-$d&-^P&J=tPW8lsi!h`UI8Zo>G!cHN|8}rDPe7!d2iXxzN{ZTk-AiA<QnX8
z$H8PAq=A~k6canW%Im%Jna6D18fz~B<4%F`=pG!Ct|^CEw4_8Hj{J8TL3^%^H&SiS
zehs|axgQOP!V;%|tNguwSou=$66)mBLLOc1J{04k)8?MjX4+<7ZxIC5zaG==8lyBq
zRM^N6M6BS0{W{g@(*r&wCi>9J;rW`}`(U&{qm%?Zi(3EpfzOHMIT&y&6ekLM3zSxX
z(uPxFakIFmNWey8g2at=bLu8)aDUi{HFK!HLn|6l5VQ6Zl}{{gORDjtV!B0R+r4fh
zCE+4RQ#MCm(l}4#piPQ89}E{}X-pW(Wt-KU^O<73Dg3N?+bow2KgcKG>npIpOy6mT
z;>TlAa=+iXr?vi1D6qhQD|9IMj^lj)kD=jL3R4Qy33SyP|4sdQyf7KSigx$rKb1nA
z02W|jZmqEYFTi323$RSfPMr_@7hr)&61pGVKCS&HCQQThhVrPQy_kR3)%gfB8k8J0
zcmEe)DTg68w8-AiQ2o1ZV+pt}32p1$hO?xUpd+fzTSU~?11ol6s5IMAxg-@ffl5}3
zjmiCt7)fkXEx)(0J|5WZyTAF%?^9+-Qn*4&+41cHTwp_fD#0z_tq7+y!d^dw_ag&i
zXH^tIN*X418pQF+CBX|3l<nDq9C7lUze-hL7w$?tU`}Emn}lI0B&6rPb3A3tAK8mz
zq`x2&S9@@HK2jbv;30YgA>C7qAAhg1A#ta+pwsI1Ix0vI1VTthn2Pu5j(Cq1T@RN@
zLOGMCYINGCVmcF;Ht5y%crZkh5|-)seN}c9%iW(F{Azag3<F84em13Y@7C#kW%gqd
zy?%0Rg~dUur61<IrLZZpnn8j)`zx2(h;^{YB_pV9qOA3~*J8~9AV5-mA(~+%RS@Wz
zZ1*<1-plK<MQf4?#0u4iB7PO~I72~`T+~M3#<Nb5Xp#xXpA3`Lk>IHTY(W(SHoPB6
zSHYlpN%Q%XD>v9~$6g{uVJKP;iFjRQ<?ZD7CdlX;*=evqKE_bq*V%lh)93Y`Yxgd#
zkHAu7of@w;;*UEb`{TJ=CG8~xFRdz<E33qNbrF4K^QtE{u28p4wxq4jc1hV^J84qC
zKk(RcvLGO3QeH}UqOe2r_A9p;8wPYS8)1`w^1^zlS<^7<K~V)}<oLty25y}CwpylG
zz?tT+5?;k+uj}ET1Vf7dA}vq=6ga1#iV-<M>GKIdq>m=7l-MF>=V+Qlu`dH0fTzfa
zHVl}1wWFB4uz_K&#zZyiLw~%3X1#TFe<X`~MNTw=QJ0PosD&CK;+g_pkeg*Wc(#E(
zSAYdp)X@>Eb=dF-6ZYVI$3WD3kk<|rAEaGcdsi?<^NL!<^NbF9$x0#Y!NM)c@keGL
zWcba&lF~Q>@sP?{%NiCsnH3NQp%cGhv^#RPZj7y8fU=~3eQ|3%oWKD*{oH_`k|$44
z1qmq&NVRPqoGO2Y+?IcLs~Gh38-2#^j>Mwg(GJikU^J8PmUM3CU7mNX02N@zXRT9s
zzYEAGBkutY%I#IxN$mk(e&)edmwqf~vf9lnD-TG?z=GGx&9CLtNScs71+}V!4^^@^
zUM7+A@_QWbs&vLEx41V%?N@vL7m&i+iKftYu85t!7_WGCLF3;Qk}BuYG1qF6OTw|5
zowX^eCFfHH(T>Es#XOBBE}RN*Y0>Wjl?)DT-tBRflaa-VNTb(JBT)fHplFc6FGnGX
zxiA7^Mz4@KuK%MK-}pVp8fuEL$xlSxm#VBEib8d3-@m6M1LI^125C|z@I&OryMtJa
z>CG9_4bW9Ckhi|@h=PK6Q7n_%AnRmMR@k2h;9NDY@W?n;UoG*xj%OTQ(%MR{Egb&w
zh{>;D;=nmx`muD-3gbq^e2kXCY-G{&U%o;X!F)(E2(=SEo*5`9_3q29a}yc61@YFA
zU7=CIO5T$N7^W~RCr@h7+jna~WI`tH0-_%;hCkf-inF@%&dUD@&@g+=o}e)gBP&Q8
zgHowI(;A?Ocn_Oa!!!|wDsI2Hwm|G8KpyqR$IxAFt=8$u10st?KoHDgaZ|60ghBk`
z)mMWTiGp*EBr^dhmwOD_fRbur4P(9;4MZoJ6%r8ncS`|;gqmNz=BekmYn$cP*U56F
zYBn|wes;v&KocR5yRG`LQxmqu9mysaEsU>_x}{7K0Hlv(@QJOc?YGcUIq)ldTN`GV
zJ?(_cJ$EK#YQ_f!Q;2`;Wlib$*EN`r%ksqA2wg-@24FoX_aD{2oCq*#aiIueD(BYo
z;#Axg_J1NtBrV~5=>Eb98SdcfI9JFnxx?FpvX&C<|D*0LyQ=!$uu%zNBS;I<y#W#F
z?rxBf?nXo!>FzG2J5{>71!)AOySqEj<fs4V8RLxe1<uPoV6V0IT64{L&+EP-9CZj%
z2dK!XNv)=X4czI-CMQ97Z%I1Px-|DD4q(!>26|aAVbKw!2|%b_sYMe>%y<?D{X{rN
z`?$dXhzwu^L0VWsx#5dkG&V&mdbo^(k|#gM$Lf`%qW_LDt0eejGaZqxt~Gq20YziL
zx%&#LdA>gEm{&=4jBl#~!2WqN`)Vnu^L<Y(3i{qs+rz@VW1GY~lLI(1GKbvS5uk(q
z1TPwT`ieAIM^$Whf7(gM@z0OeU|(2d@@6E-xOpCbc}brUH>5MK7M9tBgx&#TOlC-&
zy=UucwN|U!!reaCMN|E+o~;DEZb`GLI$NSroycgs{U`xXGqT!1#4B*0H7C~L8QL?2
zhWor34La1ncM65IzjmK%_`@96J%9?Aqa&;VhwxPx#FNT+-ONbhsQ_&Tbjw5FnjjP+
z@ao8Ee^UI<xAAy9vOe|is(iqolh5O1u+^kY6c}ox3^p>^!z1W<-PNPqJA1B(hevlb
zxv;F5*El2Wy<kAzhD6+qWZf|*>MJh+;cuDK8tF&EECZ45NTNZOweRDm<1c5U!6g%g
zW!tWZYt;&-k`fbU#ZZdRE>(ZL!<X)dvoWL!JZd8ilR}ur7Y(t?k}IFDOdp#A@{MTp
zZ3HWlX}DBd#$XYUO9ddlpwW0*tTlYi69Vg|eoa-1WOl2HSvW3wji%_1&dyc*aWvUY
z?OxsS5+JX81^2KwQ%fVTQS0@f`>`L~)*Jzm906xWRXEi3cGuZDlH5IzeJyy<bW@K0
z9LkIIXE>gW)d80t?7-eA>YBTksq4S3mI1NIT@6o!+x(F#GIr3yL>PmDR6pP@`dlD;
zK<swaDOWV4Ub7~$Hekwn4pQP^Ny}=3q3(a$|MMrrbtzy88&gR#c>bMxe0voll-%P6
zHTDpMKdgqB(SL6~Y7t~?7fsSe>f7Anb9jNMc^*rJY(B#t^z`W!5SYG$4kx;cq%I&^
zUt=uO>)tl@IAB1_VV@HnIM#k_UJJH=ae#hEu-ui2%94oJ#<Zvpjl`qc7piRUk7C?h
zWK8kF9z;Q2Macdk+@RBu)TZ4VO~w$M(_g5l7h*B#FSOye(tWr@f#ip&OMWt%$cXsC
zZ=pBt7jsH?8;TIuP#PayzM?t9%MX>nT?C&rJ;>i5!qgf69v*5;!DuVAD~~^dN|snW
zBiB(EB!%#E`D|hV_!l`zCK*7_C^yvU3fuCf^n<II3V9Sz!=(n5x##)qgVb^Y<-`as
z*om-E$6*%X_i)xfP!uAX9+0A&XO_tdQXtx@ep3;vIs*DuKr<M^2En(?zr<Dq-KKub
zpOcONk=-PT*2ZQ6dOVCOx~$>2wYo@JqAbycj5L?vvACeDX@`GB`dV++uQJSU8B%b`
z)fkC*LaEMXsUcWc!i$D|A)Fw=65VR1tCl27&H&aM=~b2N7=uvX{whjJLqui<KA{bo
zsg0zjZjBA~dBYP+$$VLj)!>$A{n2D{vt2j)k(^krXjF>057GG;vad-;R^<fBT5(?n
zHSI|t<yjv8UhxxZvku0xF_44Te2!q>w5g8V;qoi{N0+EyH9^zcmro9Z@Dg+mvkg6v
ziKc(fHI~TXLJ%#6l6!tHK$8};ix;1EKk*mB&GmPLOFRjmZF!*v7XZb0`I06oYe|3Z
zX+D-YA?Y$m<V-F!To&e<LmFU4?@5jj5kW!w^qau%dnKWOXE^`esfR|?D~$?P%PPk!
zs;FGx$oh$wSyVf5t?WF^osr3=$Z9_R?2X&BI8XJ$$@(lp^NU#`-8KY#55uQB<7J|P
zyE`u3sf2A<MFdPtP3H|7Rr2bHz=#5hxXT2?Vi?s5d}(wK8jXp2e?|J;@ye672)bo(
zV$gfMa1o>v81QQ2QAl@hf@%a;GX-f3b~)~+T%f=nzs#2oZgxMv?iIN=gGNSLN_a61
z?@Gj_7qpn6MR`V5D_5a`^SEN3!q%v@r6(qAoHuY%Ki%;?;WNA4ouWJ?p6;9;-ouiV
zB_v&+>#lD`(??-8w5C?OqselR<6hs~=3^c{b$)<!MLxO67}rbhfYFuc=!Yxt58EyC
zKBF19&U}|^Qi(HuG-4~H;*8Kk+}LLDghj+{qeh@M!|QywRoRG`u&l*7+AOJ?7mglb
z2$K=d$9u^c_GH`l=}FNh8IV4b!T26dO~RWGP%<hA&0H>rDZF0pnEs5>Gp$8W=A7dZ
z|3*iZScD)r)Xp3o&@3wm(|n!Lf2fcK_O@v-!a$5MyRH%L%S^|C|0@|zqm#k1k9PTZ
z;IYt(&+72PFt7Zfc}Bc`nYRX>AO7@n|9Cb_b|$kaEW03F2)dV4OmMKx*B-#aDLM~)
z*O5ib1!ZTP7%!fATZEqIjfeI68cp^iX#>bF)tnMhW{G4T9~4b((?%9<bveOFiJS=O
z4m&SVE=Wgd$-1agvW`8?_ngl)>JSy@mW^<h2>(jtQ2^9~%vm-y#%;fhH-`3DJ#V98
z;SX=<o~{9Z`4SK$7%{Ng`>r0-6;0<ydvkPjM^W$o=bop?+}#OAMOzKAU8fWZTdp_6
z^{+&Bo7GLo&ePNDMcS-W{oV={^&6z+vb%Zjo5lJsQuTNv*dbLXkxrEA(V+^H=7F5f
zw<+v<CLWL-t@)qy<Ilp8Ib<u<<6vk(3}pppNE<7BF|IrUX-8t>j%tPD4r}xo!N8-7
zwZx}M-Z00P5ZN-Dfp$$)LS7)9r?#|)9s|_S82v{B{D2<gUHjF~#6$yCUi<YbXH7%H
zCnp~cbm1l`PCQ_JxcjkoZH}IKc_EsiaHhN*!(b(auqsIcYos6876_6>e|%1DTivfh
zF}ueEinx3Tm#QrZc^T_ES*O3+b6Aih^8E@NT1H~nD4W-{o~e<lst1vEk_1`v!vX@S
zz)hxG8rGDp$g$e;A~$i&r#R+0!Gzu1_Ye-Maejk7BCcb&h74<6CPklK;%O?VOSH!a
z$2QlstugAY0gIrXT3Ww?9FDUS?1d}5>8GZ5`MV&usfStE%t_s17*$Z5pt?s$U<e=&
zO}LDIIxsd$v1LUW$%uKK6V-hV?-N`0ziA^i2bC-@5??=?r#iJy%~)p-Yv9<jdC@cD
z`MX31vG%`b)kku%7^evA@Q<pTaK#UL#M(+(<yD@q2D8akwmd0DF@84KJuAY=$<;=O
zZs|j+&_pxBAHE*Mh=dgUgxK#gvko_I46G=RI_@>)hy-0%xoo4wyQ>YRFRFei>PCJ+
z<g6U%*vpwG!oYxx${!Ur5NuqSBB`lNhp?z4*R08Tf_t$Ioc5-N@)s9uURf#wcdpo{
z4_P95*m11E4juj(UAHtoA0BWjps8&AM#ATH5mR)mbmq$FiAG0UXagT?F1?`<y-)eu
zZJY@uD$EX`OfoX?91m}R&vgG6hWrNJuk8(^APa>qgWUhHfY!$ImCm;!=S4%<<=5$l
zcBnghYzPGUu%)8_-%`#th-LG*F13w)a(`K+KUE>HT(y+^hmM9w!3MwLPnO4xydjY{
z?eCU(LTWOGH~QoL@1DeAImZZ>jZcU7zGD4dj<7ApjM+7F?UF*=A(zf8bnRr8zS*XN
zHfTl8(_L?O?sJx{u;6oy^qiGWo1kCP@L0B_tSk~33Z`*d3#Gu1BjXHwzOL(|$hsJL
zM>wlB<UuGeG19$+9&pqi=Q5Mx3C}`LST~#3`2LSwx;gbNaXsA$$?bD9En<aqulsk`
zyOn4r%X@E%=0A}}hgJtRCh~PiQRO{jrAFE9r5(v-><p-}fX9cnD1$D$mIlFTJi~a6
z;K2DMl*nGxy=bg~xt&~AUq8C3ZHPDu+Hx0MW;4r(pLd5hbaXqEHuL4`B^(^9(Wj-f
zm6RRtC%SqqwSngQ?V@4r?Ng%ZFPmgFrMR+zg=+)te6>^vnzgq62fZL^Y3`O#`_?o2
zH@LDpWy_g+X)^;{uRUp>O*)gKZE&_U1k%p83`O-?Dm&?3FM2rdch@>(63#aTL8vqQ
zZCxqEIiXF?9E?bE;gr9lyc-J~=9(quzqEhmsIIkD*5qs*<BS{i?v+cX@#A2KC~$8k
z<54(LM2P-Y35UJk80+7`T>vLHUsT>8Jv_%39mdiwNO2^N`K^@0qVCy>oK}6P**=xi
zvHmh&;mY0kaD8gxNW1V##LK~{l(H5SIBOHmIUx%FF&*N2l<%lo0+EFLt6x|ZiLK{F
zHtgUsa`n^S3P{uFST9g)94A|TibFinjw*-H*mfH(ov;iv7_fW1G+p2?{lILT=}ZL|
zoa|5fgoU>$XK4>LN-r@<#6`pGe0QtY7d;sBphmh+P*AR#HYct6%l`t${k`>E{y?#y
z$>D$F!oA5CabT$AYezQW{>Gex0B?R+>C_{pUp)W56Y8x6AI~`_oP!2p+XWw^&3!H(
zFQ`ZKfCl#8|9r%FyX=4*!T(>h`{VyCQ)G7Gkzh6F{Eb`Bgw%-%hK$j(UjKK1$KwP?
zd1IQn%brI5zb>T9%bPv}6yX?VIXjnG|L4yF;DAZN<3G|9=(TFr(#V*p$j5Uqs_fRj
zji;waiHB6j|92_3Y>>^UCTiG=1+R?38|F91bt%H+v2KOF<KNz8C>6+qKqM>A!oIu!
z#m5l(MFSC1Z;o6Kk{fQQ$xUidF*7i9%{Fan)dlW|#(svohs4ChrWiT^k0}K96ct8~
zqE8c!o5e+aZU7zaYF%CL9J~dTh^;ms57j@>x&S|N_S-pAX>{V-2EfLLwr~%~g6ob5
z(gY9>Y=bDR5569E*N%@Z`1mZ5prHyM_VeFe@`up~&++Xi`75~CBKKxK<=$S2n1fAW
z#R64FqC<HcTnEUzjuyVy|8ji3Ht0jZYEG_YFD6PTW)lNkJ^Q;yfpQ55{da!yhfJR0
zE0yUROr3HwGpA11><NNDZ4hnu_aiJ!{#mNu(9HvR5q;g$g+?kW{vXQdW6m=E<;D}j
z-}b4@fD{d~Ay6tGMxIpCNJOSqAnGNv`Y2g^*hI$ss#%R-1?U^+*rKU`#ojj`ONz6L
ziU!NB)a*(RtmQZlN<Y1GYVJX35idJ>J<c0*pDlKRl&eu;Yym4|BvS+)358I(JrBD{
zV6Gg&YxqCeCIn>t!0%rXkS(^3dS?3VZ$%nNdrmfnM>D+MWGUtKy<Kp#0M3I^2N_0&
z`?6qP{)H19F3Sfl2oov@6#bbVH|Ha93j9>?p-(1x@z*|%ts~8s-NJ*$Rpjwn|L~f-
z<}w8u1vp|paHLF@;d}LW#B!1?a^!19tAS+mfFcwO{{W(_rOt)iXD?p;0_%M4_6SYu
z?J-LO=%8CoRrt)iTo^&Cm#Zu%P{&_#*iH5c+l>e>p~UmKp~7m^#~Jlxn**!WaU=7>
zUw^mNWe6@oNUlW9$9)jm8L+RWUJ^8x!C}C*0^bJKgeGN}OL1jooj6Cp97P9m*L+c?
zeD}^5dewp4NlTd<jc%|v%~+Wa&5at&<FL|XSPk<)1ci+e6#;%j81N*aoS=bY)!e;q
zv7B(?cG%2Je9vJ$uOBdh^?zQ^%jdT1YeaKG#3N84Q75KkynQhV31o}q+rH0q4(9{3
zOvB6g$@u#q(nxHe7DTjXB__V~Mc9$wT~{*y#@JY*QK=+}W&3fVg+5=86KCq_`dbP{
zY9Nwo*X}zSn3|NcEob3nRgZ?Q?lzlQObwv;(Be)*t7IuAkBITvA)^r1_Y@LQfk?K(
zSbx$Mp1*Qcd3@VQ4d8DBIf4HuU3GxeiybF%)gtviOQ)Fi*opgn^$pIYJZTw0JJ6@c
zDaLC2A#yWYZ=VwV<;Bk}c*`_#L8Z$^my^JHDv4;_w{PDPVwLfw-_3@a%S<$EtW(zP
zm!AcWBOys*&2)`;8&TEFmS3F8KF(F(v}Evx5`X-K`B#S{5NfSv@;TR~%vFHx$!Wvs
z-)fhCunm8!$|9~g(rss)UIPsPc#^4{K-Ym2M34ZFM{PX%hMc^^WX@r}Nn;t?UxnHD
zC#hvgB1+-E`HzwW)^mjr-hKtFXj3rxd~V^Yq(#WUkvDSQWrJiHeU;vrvAKf_>}9Ec
zAR$_&g~R~iOQ;`uY9xs2BVF?`iuNdGV%h?&`nUjKYoi3<5*mf{CV1=RjSLcbpi*Cv
zb3no(@(53hC>z%d_w^eKnR5FXjhlC?OPvk#;&C>Wgn?W}bcfU=vu@#TPghfW@sCP0
zsV%K>TaL5#BlXOjgJ^gP;Me=5b?UZrbg?M{uq32)wPc4iE#Y8Ybb%lz6X|+%3ju$_
zA4wo&Viz!#X~p;)HlN64+<&kAkq;8ZkKl9A`EGV)SRJ=1ol>Vo0sDIOY*_uIbRxt;
z@V}9F`_e~cSH+Iw(|*%#8r~kqAOARX&$*4|A7LTTmQ{EdR2~o%Bt1llC5wzIboesx
zla&(uw5jZXWBc=+>i64n&qDDfz%#qWgJ~V*loM%3TJH!zUO#5w;Wr-@72Atcl=^xJ
z?p%?%bTSUMYxaLjOMv%6k*y}%=)bWKBi0rK7N=`;Z8^=qkH75!{q6E;EBhaO+Q0Aq
zB|2E}NPNFb(f#{O0@l0xiF{3pzpoDr33+DMmWU0T#lO!FB4Fuym{zgO{kxbgih%Xd
z15yGl{`cAI@r-&Y?<4*#knX|Wm<4F<e{%nOG~frJfipf>Di_E6TkFuka(PNtmt6Jl
z^8*<;qnFh;Hl@b_D~NGO1}=#oUM)`b-)8}E#=BCvYVm*TEx#zZq@cz3qyIkN2Z1v_
zRDT_p{P&~(e{mBakZ002p1}5e6DW=N2iDsu)9BQQ`%<}(P5R=whDhvMZC3(^pZzLS
zWNEP9VApAKZZ~r=?<m1=Rw?h{N#JvnZ*aeg-3i^&$pB<x9oN1j7F>WAecqpMCSZt?
zs21S+wiY?@B<g1bYm_8c^Q-kXACax{o{AsHJYM%7fP&Mu=|-wvvG6U%E2Z4T&$^&7
zR_M6nRAtbK9~ul%kdDRgk%7NOx&f3=#r`i*W5E~<C%HS32@v2jkUFztK;yABYVuVg
zs^t{qCZ)*(Q-K1>sO`qv!Y@3imr;`edKlDY0yg?2K!V97&jPevY(r;v+Q1+)89<LB
zUibB)rbQscBnM4^PzucNtr^B_CAbipb6xLK^ryBTOM?o{--I0(w)986uh(Jkps*V&
zm92h`&zcX`voT<WG>L6Lc-`o@^MzHy#)jK<Ib`TJ2)FpAR*I4G!ESV^6LAXww8u@r
z)?1}Sn+i<*9A`Tm!E&XzTbD;hs>(H%6EUFBBAamB{$1eh&FZlFlgxD`;uEdo_LFDG
zJhC9cJReu@mH?CxzUl7Av{xVn2VO6uO19p|N65Vu*>QI=0+3e4z(o1Q!O+mKsA-oP
z$VMA+Tj;>T65#9Sw*{QmRHK2uF#6+s6WMTs(~cb5w}~$mIVdIYXMldooTreXyN&c(
zf1clA(;J?{krOy?JMK-V0EATNyV`>kD92)tVO!a)(ldd~Ps!OiadEcJ)?T;)Fm@{j
zmMzBeUwqIf7MV`OgY#M(&6Tn*M<qn!F<v_ON*vP8|9?xM0${5k(+Hk`*ftJ2I;jbe
zCG%YP1RB1wT4;&;O~vZ)iMMW~0GQ87m<^@o`@m)7xnCWRrStL7TF>9kdMelw&lQ>u
zax;g7hKC3HWfbtgtunV2ZheeS?+Umo0~X@3&_nSQ65hHD*#)tVO*aMJUjfs#Ua_IL
z3}T=t0Ot#fEhwlFdQv4fRq+B;R@$ehV<Pn#YO6IoukK!)`Tl{=Ujd$NT2NWNDm6em
z*I3!1KF|k>Oj<x>JVtF8Z8&PFvAm#k+#mJRtbH#*B^{q#SSZ=w6v6$ORyloSI8zL`
zr6|omZyFOv-}qYK%Jea<t|VZ!nMOIE@M7b|>U&`;uY_Ock{2Lfoz-CzSp^sycHj6e
z0yjPMt)4`}-5K0IkNKnhY%~#|WfGceyomV(dT}Y^oXaHwF8C=;F14xs5lvCV&*PY@
ztQTUAH_(=9<|t&OY4i*i;JOq;#7KW|B4*{B?(sx}E}1B>+*pC}q<HsLDGi8W+j2L&
z$vm!6{Bg4kfAoQ}-EMzZv0U<K3M`orV_2UnTm}?MtkUnxYXPJr(QgZe<^o<nTpIBk
zl)YqJ#OnhpS$~U(61aDzx?x}FwL}5q^|R1RzYx0KSgP+RlVB;z7jTY#N~_P<-fs-Q
z(*Q!$sf$vIbt;AXMu8o;?!n*(-!87~bYPR4+2BY3>|Io<98ks?iG*c|1W^<fF|u`5
z_*t#c??3=d-F>Aq`jC_#qJV_OD14uHm|Z-B9+Hq4<6E=A>%^wAwmJ}kpz=)xPYUf)
zwNy8bo24G_NF}OEA5E!8zt&=mo2+5JIfGq;k;(D1>%nZj4is)MxjG;AsjxAo!PAN~
zQ2WYiOx-Tj?8Q}i+~7=CTQ*ive0l19F<Z}4N3t6ugbn|U>C$BzuI4oai#8hfFcmn1
z>mv(qj$~E7K(QJN?WG8(#)tSx4YLgMDgeifc*gW;1Q<dqU8U^?^Iz_7+{B@GCBliD
zaEYwH3l&qSVH~OW^r~?o)IegyYSfMG+4Dsyjr+N=AvB5mt}{3H{h#D2-+m60KG70O
z1n3=^D$Q@CxF+E7eaO?C{zjXV!K3OCutMNRd+aqJ&2)&JbiMjrVM0LH@*V4@F}$Xy
zQL9ym!c*;GQR<2-$-!}@cMIIdt>G6kU(pqanU0u!`N3Puvc-ao%Y7{B98QO>c1N34
zjueNdaDX%F_=e+4k*1A~(3hKwgB-xi99@a3m3SM|)q)63CnkbirhUcH9084nE{la<
zIjx@^dqHU9=;e_B5)Ap1D#*Y9@XDk~#@aV%d&#y<Cu7;cM=^5DZaq)RKpk0<iYz-h
z!q@1JZQE?UpnE;DATGV3Q*M}qPE{4)xT7kAKcX2iZn>Od1fm8me<&y{xSv?#y|fV^
zm3zWwJ)f+47-ng@ZL{C82n%DO-v&XVrDUj^b+`^<1w3ARJd{I-<_8d~2J!nA0~)KN
zpx3g7xf+ajchEXq9?bfB7xJ9sK3`TGl!Br?kz#g4--ElOBu65F{|xOUtlKS_LbL#U
zrGt6K$@*Ybm94_rA^y#XPL;zJc`uwFChL21g<2PSj8%lubQZG)-XM#IKWYo{_MaY<
zD)ae36$UNt#LRv7y=GLw^Y(~mi#mn9IKk&RDn8(4md76bMl2F^hqY`6LPi(;);_CU
z8%Da0oy`$xGK<k%3_FcRr@UzB{@wz~s|(+H-7*!*-|WF~#SY6|wxb({h9#BI@i@<W
zmvC8s5I)iG=Z5#IPrqDfzIRS{QzVhF&DBQ=0)NmQfV{Cfd$j=icezAIC4#=bzPSUW
z0bpm=$0v*WxQ7}aus$|+hHF0A@3}3(-9Q>bO^5uBb-Lavc&NNqd$=DCej!Zmc7&EV
zn8qRkZBL|$dU-^g;PD-uHXHY+p5SZo^W4ndd)|FS7Y?D#(&lp<g>ihll)caTLwCJR
z1nJ#Sg@Z4A*7lK}t;R>fmfHP*LcZv`A;jCO(C4N<I!@6VcaH$8OR6?sOez5})fZ=s
z^TUROPz}XV=jg=dhpg-!wY7VwzReApdf(#ybd?yA$zqw?85FgebpK`=xB!|vslv}l
zNlFGMt}>>uS8zC>{V7tEknIDL`dSScg|>fCP%jWq5aO3;bKdzG!S@-%Gq9QFIc>a3
zJPvPj2$p(kdf|+;2Rp`Ye6k*q{ageK4o|R=wafA_=!+%19}WDGTnbeUF_ix1S31JL
zyKd~XbT*vea_mLIOP7@?d<=}Rr`x{VzNZmwyU(6O;J#oec(nO5_1JF=D?J?_Hvr@o
z$zj=ieH`(I^A=>^G%ovZqCN1mSv5j}ve<*h!>0vdxI}l)paxYitmMHA)5r(wkwi0v
zK!v0|?E7JBl1>%olMFW448=;B0*o3S3!NN3j$b78*RNl~$#ozr^aZ!udc286`whY<
zn+LK1qoVH>KNIXMDFTaqS2JKo{)B(AAzt>{09sYZBHIJf3|OPqHfJ+z#sCCo6j$(x
zPQIfCSv@RVUzSF##8=y}9ws*aLXdo0;DKTY^fSSJCBa#)KVwePtlNx2{Nubskq1Kg
z*MVR>^#Mnvs9NhE>wc_^j872|r0qte8S9J$gH#dZOrEEx4+@$OW36@Lhv*zK3m*;y
zyC~Z3b@b1}S4P%a^K5_om{?ua#;HEb6h*JhYC2}xjE<IdW;llgTU<$>5@UcGREf<>
zmDoj=Uli$>*J#JUdm9?fi@-|}QXCXwCNMpw&srn_(}cPgJ?U0=o<F!}5Uw#F30EaA
z`D9`$xPV{3V-aFcH~zy11F95RJ(yAv8L|Nt*zoi=LqC~Sp5YXBeOOT2V{<uX_;57U
zXX(wBx6o;KJY)S3*RrC`Z62haGut^%@H(YUA(K{%Z`bbP;|G!-9&QUgH>TIsAx85=
z_IqJDCyfC}(JmKqp6B=QMZe7WBIMHN>ErTGex(Q9-FnW$ZSX2>JML=jZ$P{Y8R>dt
zr#Z*lXb}x3-mZ!>-y$1Gz;nh3W~LeUr;7|Ut>eoRF&1}V`&Sbt8solhOa93gVsxMN
z;m@}}m@J>KaH{p&$&a&%cyLU7sjh?BlsPFAZ@r%);Bi(hvcQ@#RZdvVu>W9^Fyx!y
zEEKfoX@iOu4YzY4L(OyWM8&uUDjDH~X9C)c<3pqNSy7SV!yi!EjhcHC2g^_cxhcgD
zr!ZJgTuw|ia#MV&HDqzZzXYH1p24_z(x8prfS#8qTzBQ|)s2P_Bc6X|MCPENeoaxk
zDq_){>liyGEyjcUA6<18_;bd*Y}8@Ci*KBB-Y<7yy}W_f#Hj2!jC!SO059N5mEXTd
z+t?yJK)ii9GW>DYzNs_0u=FX;6AI^6+r3=|gY=cn!O7LFxr&0dK^MDb#QD{=QUfIv
zpreP4li3)WbM~+djHcn`RY(oSIbg9SxV+?J&}xc)*|lp*;D+xwwY9`L9K9q9-xI;Z
zyW=kcqnm5csf(k$9#8ua=feSZ?6RzCNrELaanbfDG&Z+Be(lF=GF?Seg^J3*R`<=$
z!|mFPK*xjeDLGmZ&yPRjhGB5zv%RQn0If31ZlZ)T7R3p|U7pV{ygp$Z7&$bA_i3~3
z4sIuL8A|8V*+y2-KzWtne%-=WmULJWId6FI>dn4E?32MV5CxJA(*{RiD)^h8$+uU8
z==|G$$9y`S+M75e$TT7rY>^wj?F8b0y*+EbXd*d-UdwAu971grq?}nErw=cRhSPX@
zEPEC0bidlY)7TMpx1R1^-5C6ZyB81w%(7ZVX6h6=Q(i_I9exYA`mF)9|F5v>eP;!n
z4!f|{Eji1m#Jx4FJ{IiHvfFs~4a@7R`(0G)+eKc$$HBd}(ocf3T;1=|PaBzB-Ji2d
zC~3UuJtMA@5uln?VCo7P0?|q|WTeiF9S$&q_Q$J7!iMwg?6MY&MD69UqJEbps{lU3
zWq7yp)7z%I7iQz~bTKbMH?ELTs9mb_qdb#^@Ju47?Q6F#$4p$^mv2@>VcM^>-eJwp
zP?**iOxYq*qE>WW_x=8A+v?>gZ;6@G25^sF{~3w#j!c90&atAe<h)QsJ~xDCOj)Vo
zg7OHDU7~n49$8~xVb@DHD#|@?XnpM9*!3i^TBoRWy*DnZ*Ta;sR8q}0^+0Gvw0^1C
zk}!-hB$@wif>VeOjA%jgb;boAennqu``pAg2HhOYF30d&EHAYUrv1JM*mkHh>5+$X
zSQ(8TuWx=oPwq3-a3_WluJ1fpB)eZlz@jy4&qXKRNSq~q%~}FLmtM->Tt$tR=%Xkf
zv79LdE@tVNr2-4S&moWN%-+<a6$qHukh(5HqGo~Mwn1)mro4BqagE&o4J~$s?=ZS)
zK|uP4X;&j~fH6@RFmEj_`bs+PFR0XgYOznf9$YP0B=xemtt)_IwQ{&c^l<fu=8J(U
z=PeziRH?V9<|*@#0Uu|KIg5b#Tpz~EaG0H_L*hU@WJ6gEyO=fsb5y|NGAsxSd(+GB
zvnl&c$S~gz(MqX{=zKmmpu*3YQC(;R_YnZwMQVaZ2JXsfLj2gfNUaZKLbl+}-Sr#%
zuV&3N&&}3neLPH&R^Dejwptk-my^UbHtX+sa}<eu4{!9e9>(1$MC0%EHKG1`M|@>K
zG&Se8nYwYO?R7ro)fEcoE8lmMOlTCxv8J$p(U!t{M=Klpi*qmH3!&xvL;N#w-sU2w
z4NU9N3Z7riSo0~2A!M>~#0ZQhQ~vb{i4<igI09;0^9r*<eu2HoPy}{#;+BG^F~TWw
zq0VE0>DS(T3elx$-h0CX^>8=pXqNU1ga@@&vfSrJcD1;Wg_(Q5>qJL8w<Jva$lE3>
zzpmVrx0AU|rM*n-R4Q+H|L+x1%ImR{@{$<%I&8pf^*1%k5#Y<c@9+FQqkfNp3Vn6O
zmh1){2EEHM&ii%L{PERTi7YfqH66CJI*5MSOiHiHtUB8LwonryT8k>$n;vY7Zyq*>
z@8$mo{saoX_xc_^{)nCZg^#EJeAFVUHugXGi02VLDv_!d{`ZZRNBAgV^ZoR{&z_I)
z(E{67)&Idq36F>trjDG}KRD^&5kqT){(1I43=I<?T6)>vE&hk05rH#$PULEm{lm=k
z$fL78?a*d!^k<-zUb)oz<!<f(EO9pT`yq8rX0Kpzv#bGv$c=fv0r%xY9BCQ%n1Fnj
z42bbhMRlb*JMIA!X^rEA0&SC&U+q5@Y%;<cg(~|Yz3yWvw=C;#gles|^DH-FYj8hA
zVmf|RA?PU)%)cx^E6Va{eURB-smHKi(B4tRa8^f`RK(u^QEfsX<mB*~8#=&otW0px
zOUZ8oe84uhSIgxrXSV+2mI`iPPyGy}mN-PM6)X>?Qxit0Y~Nddn?0ek$2&-D)s%R3
zcS#V>t~}&COx*R{`ndFL!1>k8{T?MQwcC-aF$BXnq?H9xO~!Q{A9pHjf{G^u$|Vv}
z2)TUXgPms!MQD9&NKLP2i(1>ICi2G8eE?xuo3IZyJnZqRE}ZC+8O`XQ_YP6h&=$6<
zoodX61UB19^u`7)aqnZLd4q3-0!byK3+Q0VeOZSI9qwk|5jGb<c+KH&BRNypt%QK4
zISXVVA0zZjSj;yiRWOyYluhQ80%~%R&-jMUX5~@-PyvJh4Qxl{e8)={g7G;%%9D7U
zmh8e^j%$&OhQ8>BG&UyCsrj5AEXc%p5h+CAv#&Ye_qC+TB-}qjF<YshwJ-MhyvLRz
z+|c$4Ob0ckk|!Z<?Y{M2XkVJVpRS@xXk|8l`|!br*X^8@+wD9&*P!oh;ah`OS~b4A
z1zh@VEERG%u=;vZAI=*=68Y4`(NRxECa~v|0dCcMSyv}!S~IFyytUQ~OM@O!%D{fq
zn8iSUq;!FFD!N`O?u+jdzWl-PTG&_njr~|^cAxH{XEX%xHxgiP^`-A~sp!^NUV>b4
zd42U%6~UE$Z8T7ZGNljF5Cyg8x3o<|WH;M#L7cR9OG=gPiso0pDQjk(28Rj@R`!f;
z{%o)e<}Bb29J!(?%D#SNeBfUJjeI>(Lid#VOXrEN${E7K&yHKFsFC8JyLs;^0V?zx
zIHA2#Ey~?>F9)sj_Nn+`f0mx6&(n$#J_3CvbGZ3qA#-6CcNfhAMz7xHAb-}kVrBGD
z<!*4wMn@vXu{sT()jQQSY3O%rMu5-DIVKV?KC!Zw#)?lLBGi=O@gxwMV5pnt;V|n(
zP|5y77oR8il-pjPP0T8Z>PXFF&Zi`mTb5p6Ry^o|Py{i-oz6rmg%**`(*w_kk%Ije
zpW)#*jE_pmSWtYeFhPSoUEuk^eb75Zd(6Z)$e%ryt@_^O)8?T<vW;fe-)_!EZK@8u
z!0Otekgdy`zKuA#)UJAK7FRNX1c3dv9?0eAuQ)u-weSB#c66W~?H`Rf$1R;!Sg^2{
zJAMIe$HV>OH1px~xzpB%JK0Cdw{G(_i^ghf=41|&a{hp7)j(3^TR#N3&D*QWiojr@
zChH6zf4Q*oS_()W=z+%5sePo2yn`no#%0hImi+;6QI%kLp01n$aR8H2z*o3kphD|4
z;wdEL@p&(~pkabYzRdcD-aBGp>;3C3q#_iY3yq)9p2EYwU1)(z@}^@#D$W6BbxL4A
zQ|}39Y^3im;Uf6$1)XX>(AfdY8bwSr$G{NRnHsq&w+s3A-J<hBJ0Z`jaNnfT5eWF9
zL;#*-1aRS(qN|e!ZuIekZW*4g!7i__fSXTZ=kLXeq6Frg^tFDqc*e<G=fyTNyo=e?
zd-v%EM~XNV%lA{?ig|ki8-J2G8|~qk6zeua9ru6F^>vORvC9(wbh9zE?vjf0#1P&c
z%|m>2^UMBBqo_Gew8vq;t^)1uS0etfj|xyNWIeRc&wGJqfl#71@71cZ|NV;m8`1sT
zV8^&M+pcRp+7D~$bmoDCVl=s~xX<(iLQ2vEprSC@0l88sKBK0#rvlmuJBP#pzjwPe
zH@(a^s$$}~^fbPWU-0mTQYYCZ<l_5z=95BKnosz12-JoYuZFx5PL&Fr2BQ2bSF>2#
zYd(>^d+&nk8_2n#SH5GWQm5-h)=5F<m8}%jI%K*!d7QWGV99$&vG!`tzxT4$!Tjn1
zTj@K&yX|wArei9HPWj{!NwWQ_QUB4=jZp7Wj6;G5tYk<q5P^LbPJZ(7;r?ws?f`y2
zcp@wMNLCEo*PKLruA=)SJUFzX$^elk1MzqVI-oIYYGoX$4b<*wWi^-cZWM_sB}&G|
z@Xd!EHshMl%E#?G-Z}iL0cO4SWE$`gR8%M^h}r>|ooz+#u`-K=<K!QR=B3<M4O+QU
zCzItgVB%x@){Oe(3E_s6sE|t4=lk_R0?^#Ii>FrL@8E(@Cb;j8dgvX^ESE69*!K`M
zLPbN1vmwn>%xS5pdMgV{+GYc2(D2Xe)XOnt@$t5TNbcPj<evz|1&D_~4+MtBWIXc(
z&sk__g412U6`T>q2<if}u%r)!%_jW_t{ZbvE**-gfSV))nsHd#Em!Lc!rvfXN6TVJ
zVfN^R+px3b6rHwV{R9-NPc323an2|~(>v?8Hk$eJWD$NGjCqy0n`9VHu?5KmRy05S
z-EsuS{AZ^mb}QyTB|3Ug0)hL>w8bimG1n3WocF&A@rv~hrc<5I1{9x}J%5wy^y$~C
zeC4?rrJM~^Qy`yYt{$&**fU3!WG{dB$NRCPJ$pIy9Y}VQvpYjT@qN<dhc^5T?gsmt
z{Igk4-zFtnx00I@M4i^nO)t{wrq4vVAJBFNxg@Lf_jHT0?gbn3TPYOf5A@_B=G6_w
zh83Go*J%EDtGdsJ%8jDRJSPl##e0Udmwx7>H8?4~I3L0@s<P}LE?r83^Vk<QkoU`f
z8qp7NN(#bRk}lC}9m?<1%3c!c_ea8kt<2=%vOljngTS%NMw80@oN^l;WyWj3N)*nT
zdg)VNtCaUmn0X{r$arL6an%U75r+W7_V@kIwfe7NL}36{mzjk95Xsu*a%@~BmVE9n
zSb?5M4(ip&Ix|Me6n6SIQzBQGFgHNx5)z0a?B7O-Y#1OaA)zG-89dlcQWnm4#=*oS
zH=P6I{uQOJkNfP7<vfl;SV2z`{DZNeCh<8683j`fWy-7`=8Iqf`w}7qJj|(zOLUCn
zzK;0H5s*Frf-RDwjNpAxFFdQ$DMxPH%X$Z1mB${tHkXXrR3|%Um?fQ9SNB4p(#7!C
ztrR+1*9&s?=Am3<3?6OMgla*t2Imh^V#yGP_Y0wvSk#g!N*HOgjRSoL!oS}%xKP!k
zRrssKnu+1_(sxCMq0|#Pn;ITyeS(_MwYyQ<plY5BZgb*8$A!!1EvghYI9-b&x1S+^
zC6MexXuKXFXk-qOzKZ?`?f8E|l<Uo5jG2w{F5I)*`Le>z$S5hB>Fjj2{fCq1rxD+q
zSFc7x*FWkEK5L_9WLW?T;0Hs*vlI>@m#4P6;<I^c`z-)JIX@WQv1<yfGaG)xbkVUI
z;i%cj>7{89gkf^_+te8q<_#}*zl-zb3o@^08(~<(o7<Bp(aImwtOG^GlPI@$7Yorz
zq@)qw)r`hq*AvkNWm_u*f<Sv;pH9Ls1j{nP>B#@=7u$+h9Nn}H`daCzPqRZt4h7w0
zDC3!&8>U@)C_T=I^xkrKBjA}S`{2z<3T7I?23N~9&el72Hu$SPtGE43?RRn9f>Dz+
zbfkx(@T}>@r{uiOn4dE$tf}OOi;pCD|F77vJxL&({U_HzAaJI`u+OVBRRYYOme#bv
zBmrsloF6{}qV5fd(1ut+_b!g`t!nhfS7mB-d%J<v@)~mv7{kF|DF^a<Vu4av({xo-
zMxo-m=tleTVK=uyXRVLe#ejyg#o+dfSWO_!#`^rKPq|o=9(qG6b0e0FZa$!>xMbJz
zaqgAvVuu*IW#h|ZBg19XZOoA^5}Ti2=n+90vi7~cq1Rq@txH-JPD+v)hU@~hyyzI{
zBNQh(4N#DG{2=!(3tR<sg*Gcln3y(Z6=qpRSrX@0*p0NrFlvjP2VKKGPPTWu=M1{`
zyZx4l8D$%LKRA2SqbB78cFwb^lI*1jc?UGU8Kg3f*syHS8O`-4Hr6@ryW5fV8D#xb
ztwTtgZ<Quq8N<K9e|_xlUwo~R8fCLjI;OHqi2ca|epm$?#!HB_x>W_<xXP$U^_SBk
z1a2b|gvh*gb9%z8>DOGs_`Kr;2aZ;@8g$I2?kA}?)LC|a<uJs#VQBDlUgI@6XAyN=
zA&AcB%efutiq$V7JyX!&oS+m(CE=%;Rso=mD1pC`Tu-D<0BI!ga~WAB;!fRqyLZ8@
zq@_C@sYsR7<4IT)>W$A)P;!AVT#L9LsMsjnC6JjMnd;hkXHwEq#lxNTAlL?rg?{Xx
zs3Z}0x(*4u8(vo#C8`gnJDQ6UI5%UNt^<CS^7$^;q=Rk%FmUr;RD9kpieT!%iM`ev
zr?!20d(w%NTti*&ZYVHkVmPSW!nPy<he<!Hw%y8`@Lqr?1iYQtJ(&Y8G9gZ%c3j<+
zLe)8>f}8itXtR@4x6as1=rrl%Yc`@jVjWCi((C3ny_k7h4i#D9t=023Ryfd-f*><2
z?*7<*`-lIbdSC$Jw!Wyz#HO~x6I$`&E7@7m`~%|q`}uA+`1cA-E<;D2D0s)diBoaZ
zVsc^_lDx2<Ikwr`V53D^^v;J-f7vge9RLvtL;Qz=d!6Y86yi<PegY*C`EkxKo5NuC
zK<HE)>xapH;V&bF`SOm=dgKA1Vp%%AFt#%pB(o|rXFEh?w~U=%6VCn>iN_-S6GHrb
zBtFvxIQFCuW|!x)TaVe}?gJjxZZMFb5~-&&gDySiQk&(tmQSAka##7T&2JxF_akde
ztBI1mCic6OR3l-7ZDxnfFkx55a{0u=xHB$kpx9bF!CVnE8FmACn8H7;rg?=Rh?R%Q
zY;-?_AWNCF1x9p&BJ6WuzLlzyOf($irel>~4Y(|A*=CIC$Yuhh+w%|0X+7H9^sP@+
z>e`?5^`LTx%@-3gg!d54nreCCiNAC85{b~g5%JaKw+&{G+#23<q1IL5#3;Tg;qg*p
zPUN#~45d&6<?&bP(g$^eS_PMg_o&xNeN}E@Z^RDrh?K?O?jPF@Zma6^PqBVvd}oH3
z^QyT8LwR@pDg%>WfXVkjZX$BKd$={<m0^f7F|0I|TR5c~_4tzO+4vhQ%o7o$p(V!N
z!FDg3e31ubMfm$?@Ji+RHn`Jxgkra1`ssf4&(}4KbnVq@i!?~EqO=rtKI|_;*Y82!
zk70qdBkV=K_|NAY`Qj2+EFnhn!fOhJC?hp7-4O)65{W}D*-bWuJ~(K5Twh^}Uv%vc
z!G~4rCpzpAj|QLYH<FZ39MCx3PVKN;#$(KvZDQ^B1#d{sq#@y;3cW1C@}p`AkWGXB
zq=>1bKW#=7!Xu7jZ*pN9XX<&Enu#*iwe*vhZZIP%-u&try>q2QD#<%ZqMw$FyMK0y
z;q&_k7HsD;XE;h5BYYJ!VK24D2oi`E2pf^jQ$1~DC1>y63M-{nVD`ym(7}cXJ(9zf
zZBfFV80731{`}fs+up8c*srIMjZ4V6O&6$SG{E9+pvdxHrdsFfv*b0$!W!m!&8n&Z
ztK>MInB}8CYQOqZNI@~+HP(B}=x@~JJP?;>W?q5A60;t{hL3RYf-#hmOZs;Xcc*6@
z2?r-$LpbvWgG|8AMM32)QrHOt22~(yOzDa1x9=6REw&L}o#W+B2ix`ah!Ui?dpC2l
zQn$b6x}Zn27ARt*7LZFSTj=v=3*8-=soaj<)+|y!UyTf(^boIPrNWX$zgp2!yp@FI
zwFzS*5@$+~?_<E(OTKrK4iMcbhFqe+w6gxWMxmEe{|l>-{-9Xo(5<Fzp?dM;FK*(4
z=<AKS0q3K^@*h7HFoAF%p_@FaYT|!T4H`TQ)es_VrRiV#6Zs;;BUB?J^PcY?`G^<-
zpcpiG(?QXH*p1#Jc9Zbsx9dN)8ZSCHBnf07IpiPvsFf73j~M8`p8bQ5oJqkU`Oy>E
z{>Q2E5(03Mo~F`H)?dQYp&&S<J1L_j^nVBxxaxw|s@!przvo=^0f)R2)E}4qcTu-b
z0bb-~Aypjo_nd8TLTwBj6{x845?f;h1*{gZB#_|b-kgB8Vl9rX?LXfg?yjpPzAtKO
zg8Sl3gMLW2i~@mVf?SL-U|A2?6fzE=n-&CXOyAWRAgHg8o+pzK2?!_k8QQskKq#R7
z^!F(Exosj5-g-&zg_1cw&Sr+;GSFD?|DM|~r6+`{Y*K8}ZL+-j?*~vKz_gOdCz@qh
z=r+4jF`Z46(Y}N^eQ}C+O7!Bt=h7thD8aH!o+#N${#^UKbcqm>Ih=V=_}?8}q=)qs
zNwt9=Ws|c`(dop4A2ItKGLV@i0ls?p-;u3feK+`bBd~pL01^7c6XW;gzk5gf3_MWm
zKeL(||AxT-*FVS?tiMq&BYp8kdvdEpm;W`yxGz2g7|R@&VN3KsJ{4MYA8fHyAj@J0
zrf(@q1(8~N_jfmA<wlC}z`Ol=(GP92QbE8Yx1j@2f(k*XWt40ZNZ=7IP{_yz{5<N0
zfw>099N@c*?nwm*MCqgH`<NiLB3ZNg{n~!{yxJqMNGb*CGKr?7I@%Nkv?2VpzRzLX
z<HZC8BShT1LNZ@oFX_eAOM-eS?;Z}J%cTSt4Gk7-M<{?@zJ?d{V95fLK7>4a86a|9
zc=-5z_|i0hcl7K1CL!=Uhymm&oqeH|+szy=_2D2Cmq5U*5JNmaC;(pA@uT^2GJxlh
z3AkNKfcZfMcsyr-AN}^5ZgYdSz?CuLbcG4>Q-tpOpYDds@K2xq5_q`6+ncTT1IBrP
z$AMPScS38~Nz-$A)M`VVQhc+XD-{RDER|2=w)+lb$-r3)AMl-oTjkSbU5-~{ZlGz_
zEmwi4MBI{qteOW5@RN-pN8`m>GKz{ZtX}u-KxgfLR-~9C&I*hQxLsMpffb4vkb+mG
zvwfURTpvmk0Zfbh-Z*MS;2&6IHbf16Xnq6%$4HHp*4A2rUJY^12R*R<?KD^~v{dQ0
zAJ|3MfmGujS5twl+4{;VU^?Dd2vWw*C0t7$-#Ebvvgqt!tU{rk4+|yDV(<5+t8)Nh
zmpBpkSs}pSR~HxtDK`L1D|<rED~%t31^Ari=+z&lLIcrA<kd>F4MsVopA)dh+i?1N
z18xArL<9j_KHyy+p)t?KTi(jZrYZ>B`GaRFUE0E(+VXJ!(B&RpAqZ?3x}bf!RhAoX
zT#tSvtfpV7wYYQP^PE#(ANQ9gzMcS?8dIAO_Xj-CsiWWdgDdgLgDG(P7GshHX2a<K
zMUiT`VD%~Ty1z1GG6G0OO2|zHtLZ=#K+cc>K#1aTf7MEv0&-Jr>uf<%x@x+&Lq6yz
zkNP96P!Xqt`}GCqjkc%)-=EJ1Pi?MRIevtFBIGq^Y`$7gIo+#$$cv#^pp@k#rAe`X
z(+1;Me%tqCaj^=pve{F+V*r)ghI?Uz#Ot<Q)z6IUp`a_3fI3?Dzc)4-1(GWj$V&W`
z(sUqE2)r~npuCR;-af*NW8gJwTN^%eJeW@lF(;(gtdiV@VB+&SGkV+}^$>nys<xU@
z-3R4<6jUzxb@C37_=ufdUf&!@^mP76;Z*kuSU+73V|a!{iV-c$F`gN&+5|+(*Wn?9
zZvddU;o3ad#TE(T@2Fkkp%FPQ<u^S*2H-EdYunKgISQ}@osUEUp4zO+=4ps%#JNg&
z(!B?D;38wHw>-x2w?Xjekfu3y^Ub~+<^jlXB|~2aTz#ZrVUY_>W1tx)83CksvHpn2
z$Qm>Hjfd-7dvI%jFiYkTfWxXyHuJOQzp}X!ZqS<_?h!EwuY|@_|66BB>oFv4@y(o_
zIa3fhdP&oO0-UVTVvNvK)653I%N@|Jgf4BQxHSn94`Y{EUk4%csY<gAwp!_;J$D(l
z_bLT|EvE?bq5Rd;#!jH}l9Dh?PyLF*7n@YJl-6U3EakN})>r?i>1Fj0_rG#vxd4@-
zlr`}Dy0f}m=yJI3M9V2Yra%F_@!%H%&Zt2|==(PZt<>x0iJ4hQ2ngJgb*u@Ux;2li
zM?gpm;5<Tk`GoG)hm{O4594!A1l;Zs&q*X>E2E{b@>k&yQ4?i=I-@MUw;_xA@BEGh
zOB>1QLofgu^&ADjN3g#o4J4P^BY`~09sk!LsYC3tKZc^<mh7-Zr*Tr&B@p2`;m@6X
zH}i!S4|saS9ov^xogE#^d0TR+D?K?sKzfh0E*<|61vz<<r5ZI*7MN7-UY!0((2M2U
zPh>JG)V?}4<bImf32#Yht=r>DT~dCIWW~YEti-CEXbaG82{N*$E^=(_^3Kkpsiy|Z
zgUM{)De*9tNM+2L06MQ<5pG|#k&!@6_>;hHrCY8q_D2k~q|$iE*H0oOJbYP7=Cvs!
zM}hR`J|jYp!vAInV1*yk1!!=x(2ms80Tz+T7?bqf{>^8+&eP{xV?k{B!WFs*5hs3V
z^9h-Za&I&$;`wZD#zyl{mvw4BaGf123^NOG7i`H9?qUGI>6Pw+yI7w(aA;+ZJ9kXU
z?==EpF&~`nqO&h6lMh-5s3_Iz?M$YtEON|~!1!2poVc?cM+N>A&}mB6gBS{lP-qyV
zjW^)aGFyIeTWiv)RhLKsAt;K~@83}ovyQ1vel_b1JgYDbHv>$)^|L9cu%^vO5|dFw
zb^3?C_mMUbVIDwT6Ctbt%K-4@12zKye=xCkr4YW0kecnXcNEqBjW{GyI2?>Yq5X8s
zEmSa6_{o8toz(p;Sp|%{UET#vK^%DqR`PO&S4k!ysUEiRcUs-tZ3yULRe|L}TRx`f
zNJs?CnaM9aw??U$5B(TP!H{@Codw3emO-jQQ;45}p<o4Q4B%Rig8nIHlO7gk^!{S|
zFvLec!U0TYyLgT1A<j?RzvI9MIKHK@$!%YS(XBp2*<WaFl_g(f3Ojhcv{+@|gE|hM
zBa7{OemQMf+Rx3<;;}bZ!0{Z9S*6N&mCbHdOKIGw2{kmNyDQ`&Y=zQ<s*5_&8TiBm
zm<}gXrB~!gJdj3F%O?JWZbY2USSxoenN9OWnYn3i*e3>L$$=<3T%~<Lq_O>JhgvWZ
zDkv>T>U9sh`;#;F{{F)2sG^^G_vhqk%XdEW5k}DPn)k?y159b+p!X-n+?y?<SKlcL
z`VyJO=0Fo{v^VZ3jpKg1g9`cp92_r;P)CXmS0G?6my?az=XuR<0E0K(Y#$d(Gw{{s
zxIDq@ci}@Q6p|hA^@Zi<Ay@?i_nA=UI!yDhM1Os&-x@#}e#;1RNJ&F*2-fTOP5RF3
zZw{P&4(8gZ1%nY8Os#(;c=XILn{$eha$z{{6r)|Sln(N8>2&qe2beFmWi`d0uqkAs
zQFEn$D5GD1_mAaXz-JOot)N?z-`pFw{b{Qs;L<3vpbl-U5_{ua3ihG(T*HeXhuBzg
zrDaOf!;5(SpFQ%)Lk2oA(2hDg;ffx>nTx+;9^!)hArP9Hjmc@eNgw?|x#CHUpFTQa
z7TVSsDTtn81{m2t#<Tv&I!sJjd}L4vA1=2RzIX1@sJCOg4==%R>pU<G!{;4CD|@l8
z1|(f1FJ7w$Cs>{z;=&1Fb+>`IYW<x*c1{ShZ8B^+tGa@M_`>*ao1n5U`(=1>*YNfg
zQrI;z!ILO4PXZlZtkEtx^c%1QMbXRbToN3O?%I!rdSD-iVXd5QwMx4z*@Jv2t#6ve
z&^#oFKJu*U{YQ7#CK3T)ypXf10V*p`r?A#F-F6u*<ml&KEjY3u2WpX5x_s@mZ?Prf
z>g~+|5f1OH^?VcC+E7~13I8K=Hm-@PBFKw&RAmPy3i||ts-&EM`^9kk`-^w*N+5;g
zvhg%e23JEB*F06DlD}I%tX%gL0a@K#u#l7%og@_o@wsc{9nLu9=w0F4kXNb>x9kqU
zP58A}z~Z8Va3UBj>ltmg5v^~2wl9R%CKw;Rwwl(D3sCn)zgYf(Ed0g!u%E$b@~a&#
zgX5YZb(fFutibK!;o#;}Wkwghay~Dc`G|l1Ew@j1#Ep-ad0u#Q`sc&uIN*wX{Aqs5
z;&juR>rP78AGn+*6oAqou8f_><=9!bVR|Ue59e0L+0|wJryDwtF7cZ6oLB7gy~o~-
z+Je{j?ycEpw5#|#VUH#M;sWGQiSP`xGgXVP<A5#Meno}4yiZ`@N{J4S=nZJ)#Q6uX
zKeHP6+_nt=99t<<FxWiOZfTvQg&I*x2xx(lCK<w@_(UG5{k7Wr!zmnLx-M(ab@BT<
z1SVrO`~01kmJD|19<uyx?>T_dpx^Hv-*S?XnqUuqmB(U~L3kioEmu<U-j_6kQn5r^
z?AIGGozPCu^tc^(3?y5_d`~@Y`yoIjkDIwk|KFy7*b#nF@rJe3sw14+tL26SCnO|9
zr?$xvS%#>b|2Y#AhbVz#z|(;W@k}{{r%#h*N~1{Egae*cRxaV%E(`jhm_#^?<)7^y
zUZ&nQ5XcUX<Ql2x)W~EBi%p)iz{PzMVtP>^h1I5M^!``Hl7Q{;DiR&1C+#3Q^>K{?
zRB#oDcGfp8Z-<2rRYeQ1sN|^yPn90`c|H<EFuTOR!Fpx*IikA~Y5X%>M(MV5*aTi>
zMZP6`zSbwZ{aG$uzc~qk+e5tsAyCJ3=-~`tSUp<wX3M?NI+sW-W8B*Z#PinU|7YL!
z{$aWUJc330{KFcST+y@?=Lr_(K>ar@mfZ(-4>fJAQy!_i2@AzO_Tf;h1viTiD7P@w
z{Qw>jvoEP=j%~VC>bWVAbvszoZnG<@|7cIxaE#-)bVfdKqHfcsRyX#^26aAcuUGx%
zZ~0XI%r*6|(9?Cm{fzZW-}kIB2JR!D-^N=VdFb##VCPf&(VJw|viB^nw_MC=+gJ8>
zmcSZC_X%noqPH@DOBj9z&)O9;tt;#cumK(9aq!Te)A^wse4)TYvKMF1aSxgDTz<AA
zXu$2zk%s){H)(9#inf6)cN7}zn)fYU#PNfhNkR4T1>-k2r?1V*y|H83vQ3|R)~6~z
z2OexzS!N`4%>IOs=KP}%Zu_19)|W>fmjmY)kG|>JdiCb!<$=H>T5e>jH_u1}9wDhU
z>k)8!!q3@Xr2fdhTJALOL)Fo!wVOeECF_g#aBt1K>gTiOM*H;>PfqR+0G?yLB6fG*
zCg6@@Q|(rlk23S0ok`%or#|n+8R@t$(|PrQN9*WDt?hjO?uGgN!b36*@4qKxhX=Ck
zab@u1`0<7{?>8vZOsL^F5W}<f{L}+FRlu_xEYwnJ!kE?yNv(`E*rvQ@`T5He#Oq=h
zkK~BgaQDZ~I#ZPcoIX>LIkT(G@lN*jNA=!${K@v;fwO?j^80QcT*LZcwFVQXV#7YB
z;)#>eoIG9@yDEI-*rDvZ<jJX1%+F=QAD#W(xo3{2aOT$B-zx9#g*1KFyLV!CLdxS_
zORetdYm4nV6@8C<1)4YY;2LG&+n+ZI@KtZ0mD||WWz1x7{!w^<!>k#dRaFP)K7O?o
zIOt$w#gTA#i%osE)FHX;3JHJswwY(o;JkWaeaGbxu~oKqMXi<&u7U+_44Y&B9GP!!
z9Qk|)aFPVnUAR9Z>#c7mV<5Y$wGyO11`LZBju+20PPQ&t2HoI1K?yh{;v;x=%~bGK
zN8pA$J>V$IWNuGi=&BqASKyGyOr=?o+AG1Pf{f58R1=>x3%UW?q07Oc)7aHya~L>t
z0lV8fK}PDSn94#221FWxJEprb($+4445By`0k@6KjPb~_f(<1wfrb(;o{92=>UiSx
a;6Gyw|ITaO`?s!S00K`}KbLh*2~7YJ5VBYR

literal 0
HcmV?d00001

diff --git a/docs/manifest.json b/docs/manifest.json
index ea1d19561593f..d3a8c64ad2562 100644
--- a/docs/manifest.json
+++ b/docs/manifest.json
@@ -416,6 +416,12 @@
 									"description": "Use parameters to customize workspaces at build",
 									"path": "./admin/templates/extending-templates/parameters.md"
 								},
+								{
+									"title": "Prebuilt workspaces",
+									"description": "Pre-provision a ready-to-deploy workspace with a defined set of parameters",
+									"path": "./admin/templates/extending-templates/prebuilt-workspaces.md",
+									"state": ["premium", "beta"]
+								},
 								{
 									"title": "Icons",
 									"description": "Customize your template with built-in icons",

From 93ce73976b9b0e631f62ce4fd7a0b7846ade3b04 Mon Sep 17 00:00:00 2001
From: Sas Swart <sas.swart.cdk@gmail.com>
Date: Wed, 14 May 2025 14:15:36 +0200
Subject: [PATCH 3/7] feat: reinitialize agents when a prebuilt workspace is
 claimed (#17475)

This pull request allows coder workspace agents to be reinitialized when
a prebuilt workspace is claimed by a user. This facilitates the transfer
of ownership between the anonymous prebuilds system user and the new
owner of the workspace.

Only a single agent per prebuilt workspace is supported for now, but
plumbing has already been done to facilitate the seamless transition to
multi-agent support.

---------

Signed-off-by: Danny Kopping <dannykopping@gmail.com>
Co-authored-by: Danny Kopping <dannykopping@gmail.com>
Signed-off-by: Danny Kopping <dannykopping@gmail.com>
---
 agent/agent.go                                |   8 +-
 cli/agent.go                                  |  93 ++-
 coderd/apidoc/docs.go                         |  45 +
 coderd/apidoc/swagger.json                    |  37 +
 coderd/coderd.go                              |   4 +-
 coderd/coderdtest/coderdtest.go               |  63 ++
 coderd/database/dbauthz/dbauthz.go            |   9 +
 coderd/database/dbauthz/dbauthz_test.go       |  32 +
 coderd/database/dbfake/dbfake.go              |  28 +
 coderd/database/dbgen/dbgen.go                |   1 +
 coderd/database/dbmem/dbmem.go                |  24 +
 coderd/database/dbmetrics/querymetrics.go     |   7 +
 coderd/database/dbmock/dbmock.go              |  15 +
 coderd/database/querier.go                    |   1 +
 coderd/database/queries.sql.go                |  80 +-
 coderd/database/queries/presets.sql           |   2 +
 coderd/database/queries/workspaceagents.sql   |  13 +
 coderd/prebuilds/claim.go                     |  82 ++
 coderd/prebuilds/claim_test.go                | 141 ++++
 .../provisionerdserver/provisionerdserver.go  |  41 +
 .../provisionerdserver_test.go                | 205 ++++-
 coderd/workspaceagents.go                     |  55 ++
 coderd/workspaceagents_test.go                |  70 ++
 coderd/workspaces.go                          |   5 +-
 coderd/wsbuilder/wsbuilder.go                 |   3 +-
 codersdk/agentsdk/agentsdk.go                 | 190 ++++-
 codersdk/agentsdk/agentsdk_test.go            | 122 +++
 codersdk/client.go                            |   2 +-
 docs/reference/api/agents.md                  |  32 +
 docs/reference/api/schemas.md                 |  30 +
 enterprise/coderd/workspaceagents_test.go     | 169 ++++
 enterprise/coderd/workspaces_test.go          |  78 ++
 provisioner/terraform/executor.go             |  64 ++
 provisioner/terraform/provision.go            |  11 +
 provisionerd/proto/version.go                 |   1 +
 provisionersdk/proto/provisioner.pb.go        | 784 ++++++++++--------
 provisionersdk/proto/provisioner.proto        |   6 +-
 site/e2e/provisionerGenerated.ts              |  24 +-
 site/src/api/typesGenerated.ts                |  10 +-
 39 files changed, 2164 insertions(+), 423 deletions(-)
 create mode 100644 coderd/prebuilds/claim.go
 create mode 100644 coderd/prebuilds/claim_test.go
 create mode 100644 codersdk/agentsdk/agentsdk_test.go

diff --git a/agent/agent.go b/agent/agent.go
index 7525ecf051f69..492a915f4b4ab 100644
--- a/agent/agent.go
+++ b/agent/agent.go
@@ -363,9 +363,11 @@ func (a *agent) runLoop() {
 		if ctx.Err() != nil {
 			// Context canceled errors may come from websocket pings, so we
 			// don't want to use `errors.Is(err, context.Canceled)` here.
+			a.logger.Warn(ctx, "runLoop exited with error", slog.Error(ctx.Err()))
 			return
 		}
 		if a.isClosed() {
+			a.logger.Warn(ctx, "runLoop exited because agent is closed")
 			return
 		}
 		if errors.Is(err, io.EOF) {
@@ -1046,7 +1048,11 @@ func (a *agent) run() (retErr error) {
 		return a.statsReporter.reportLoop(ctx, aAPI)
 	})
 
-	return connMan.wait()
+	err = connMan.wait()
+	if err != nil {
+		a.logger.Info(context.Background(), "connection manager errored", slog.Error(err))
+	}
+	return err
 }
 
 // handleManifest returns a function that fetches and processes the manifest
diff --git a/cli/agent.go b/cli/agent.go
index 5d6cdbd66b4e0..b174763f19d5d 100644
--- a/cli/agent.go
+++ b/cli/agent.go
@@ -25,6 +25,8 @@ import (
 	"cdr.dev/slog/sloggers/sloghuman"
 	"cdr.dev/slog/sloggers/slogjson"
 	"cdr.dev/slog/sloggers/slogstackdriver"
+	"github.com/coder/serpent"
+
 	"github.com/coder/coder/v2/agent"
 	"github.com/coder/coder/v2/agent/agentexec"
 	"github.com/coder/coder/v2/agent/agentssh"
@@ -33,7 +35,6 @@ import (
 	"github.com/coder/coder/v2/cli/clilog"
 	"github.com/coder/coder/v2/codersdk"
 	"github.com/coder/coder/v2/codersdk/agentsdk"
-	"github.com/coder/serpent"
 )
 
 func (r *RootCmd) workspaceAgent() *serpent.Command {
@@ -62,8 +63,10 @@ func (r *RootCmd) workspaceAgent() *serpent.Command {
 		// This command isn't useful to manually execute.
 		Hidden: true,
 		Handler: func(inv *serpent.Invocation) error {
-			ctx, cancel := context.WithCancel(inv.Context())
-			defer cancel()
+			ctx, cancel := context.WithCancelCause(inv.Context())
+			defer func() {
+				cancel(xerrors.New("agent exited"))
+			}()
 
 			var (
 				ignorePorts = map[int]string{}
@@ -280,7 +283,6 @@ func (r *RootCmd) workspaceAgent() *serpent.Command {
 				return xerrors.Errorf("add executable to $PATH: %w", err)
 			}
 
-			prometheusRegistry := prometheus.NewRegistry()
 			subsystemsRaw := inv.Environ.Get(agent.EnvAgentSubsystem)
 			subsystems := []codersdk.AgentSubsystem{}
 			for _, s := range strings.Split(subsystemsRaw, ",") {
@@ -324,28 +326,37 @@ func (r *RootCmd) workspaceAgent() *serpent.Command {
 				logger.Info(ctx, "agent devcontainer detection not enabled")
 			}
 
-			agnt := agent.New(agent.Options{
-				Client:        client,
-				Logger:        logger,
-				LogDir:        logDir,
-				ScriptDataDir: scriptDataDir,
-				// #nosec G115 - Safe conversion as tailnet listen port is within uint16 range (0-65535)
-				TailnetListenPort: uint16(tailnetListenPort),
-				ExchangeToken: func(ctx context.Context) (string, error) {
-					if exchangeToken == nil {
-						return client.SDK.SessionToken(), nil
-					}
-					resp, err := exchangeToken(ctx)
-					if err != nil {
-						return "", err
-					}
-					client.SetSessionToken(resp.SessionToken)
-					return resp.SessionToken, nil
-				},
-				EnvironmentVariables: environmentVariables,
-				IgnorePorts:          ignorePorts,
-				SSHMaxTimeout:        sshMaxTimeout,
-				Subsystems:           subsystems,
+			reinitEvents := agentsdk.WaitForReinitLoop(ctx, logger, client)
+
+			var (
+				lastErr  error
+				mustExit bool
+			)
+			for {
+				prometheusRegistry := prometheus.NewRegistry()
+
+				agnt := agent.New(agent.Options{
+					Client:        client,
+					Logger:        logger,
+					LogDir:        logDir,
+					ScriptDataDir: scriptDataDir,
+					// #nosec G115 - Safe conversion as tailnet listen port is within uint16 range (0-65535)
+					TailnetListenPort: uint16(tailnetListenPort),
+					ExchangeToken: func(ctx context.Context) (string, error) {
+						if exchangeToken == nil {
+							return client.SDK.SessionToken(), nil
+						}
+						resp, err := exchangeToken(ctx)
+						if err != nil {
+							return "", err
+						}
+						client.SetSessionToken(resp.SessionToken)
+						return resp.SessionToken, nil
+					},
+					EnvironmentVariables: environmentVariables,
+					IgnorePorts:          ignorePorts,
+					SSHMaxTimeout:        sshMaxTimeout,
+					Subsystems:           subsystems,
 
 				PrometheusRegistry: prometheusRegistry,
 				BlockFileTransfer:  blockFileTransfer,
@@ -354,15 +365,31 @@ func (r *RootCmd) workspaceAgent() *serpent.Command {
 				ExperimentalDevcontainersEnabled: experimentalDevcontainersEnabled,
 			})
 
-			promHandler := agent.PrometheusMetricsHandler(prometheusRegistry, logger)
-			prometheusSrvClose := ServeHandler(ctx, logger, promHandler, prometheusAddress, "prometheus")
-			defer prometheusSrvClose()
+				promHandler := agent.PrometheusMetricsHandler(prometheusRegistry, logger)
+				prometheusSrvClose := ServeHandler(ctx, logger, promHandler, prometheusAddress, "prometheus")
+
+				debugSrvClose := ServeHandler(ctx, logger, agnt.HTTPDebug(), debugAddress, "debug")
 
-			debugSrvClose := ServeHandler(ctx, logger, agnt.HTTPDebug(), debugAddress, "debug")
-			defer debugSrvClose()
+				select {
+				case <-ctx.Done():
+					logger.Info(ctx, "agent shutting down", slog.Error(context.Cause(ctx)))
+					mustExit = true
+				case event := <-reinitEvents:
+					logger.Info(ctx, "agent received instruction to reinitialize",
+						slog.F("workspace_id", event.WorkspaceID), slog.F("reason", event.Reason))
+				}
+
+				lastErr = agnt.Close()
+				debugSrvClose()
+				prometheusSrvClose()
 
-			<-ctx.Done()
-			return agnt.Close()
+				if mustExit {
+					break
+				}
+
+				logger.Info(ctx, "agent reinitializing")
+			}
+			return lastErr
 		},
 	}
 
diff --git a/coderd/apidoc/docs.go b/coderd/apidoc/docs.go
index daef10a90d422..60340de45b8b5 100644
--- a/coderd/apidoc/docs.go
+++ b/coderd/apidoc/docs.go
@@ -8252,6 +8252,31 @@ const docTemplate = `{
                 }
             }
         },
+        "/workspaceagents/me/reinit": {
+            "get": {
+                "security": [
+                    {
+                        "CoderSessionToken": []
+                    }
+                ],
+                "produces": [
+                    "application/json"
+                ],
+                "tags": [
+                    "Agents"
+                ],
+                "summary": "Get workspace agent reinitialization",
+                "operationId": "get-workspace-agent-reinitialization",
+                "responses": {
+                    "200": {
+                        "description": "OK",
+                        "schema": {
+                            "$ref": "#/definitions/agentsdk.ReinitializationEvent"
+                        }
+                    }
+                }
+            }
+        },
         "/workspaceagents/me/rpc": {
             "get": {
                 "security": [
@@ -10297,6 +10322,26 @@ const docTemplate = `{
                 }
             }
         },
+        "agentsdk.ReinitializationEvent": {
+            "type": "object",
+            "properties": {
+                "reason": {
+                    "$ref": "#/definitions/agentsdk.ReinitializationReason"
+                },
+                "workspaceID": {
+                    "type": "string"
+                }
+            }
+        },
+        "agentsdk.ReinitializationReason": {
+            "type": "string",
+            "enum": [
+                "prebuild_claimed"
+            ],
+            "x-enum-varnames": [
+                "ReinitializeReasonPrebuildClaimed"
+            ]
+        },
         "coderd.SCIMUser": {
             "type": "object",
             "properties": {
diff --git a/coderd/apidoc/swagger.json b/coderd/apidoc/swagger.json
index 3a7bc4c2c71ed..93454fede9fe1 100644
--- a/coderd/apidoc/swagger.json
+++ b/coderd/apidoc/swagger.json
@@ -7295,6 +7295,27 @@
 				}
 			}
 		},
+		"/workspaceagents/me/reinit": {
+			"get": {
+				"security": [
+					{
+						"CoderSessionToken": []
+					}
+				],
+				"produces": ["application/json"],
+				"tags": ["Agents"],
+				"summary": "Get workspace agent reinitialization",
+				"operationId": "get-workspace-agent-reinitialization",
+				"responses": {
+					"200": {
+						"description": "OK",
+						"schema": {
+							"$ref": "#/definitions/agentsdk.ReinitializationEvent"
+						}
+					}
+				}
+			}
+		},
 		"/workspaceagents/me/rpc": {
 			"get": {
 				"security": [
@@ -9134,6 +9155,22 @@
 				}
 			}
 		},
+		"agentsdk.ReinitializationEvent": {
+			"type": "object",
+			"properties": {
+				"reason": {
+					"$ref": "#/definitions/agentsdk.ReinitializationReason"
+				},
+				"workspaceID": {
+					"type": "string"
+				}
+			}
+		},
+		"agentsdk.ReinitializationReason": {
+			"type": "string",
+			"enum": ["prebuild_claimed"],
+			"x-enum-varnames": ["ReinitializeReasonPrebuildClaimed"]
+		},
 		"coderd.SCIMUser": {
 			"type": "object",
 			"properties": {
diff --git a/coderd/coderd.go b/coderd/coderd.go
index 288671c6cb6e9..60be8526753f5 100644
--- a/coderd/coderd.go
+++ b/coderd/coderd.go
@@ -19,6 +19,8 @@ import (
 	"sync/atomic"
 	"time"
 
+	"github.com/coder/coder/v2/coderd/prebuilds"
+
 	"github.com/andybalholm/brotli"
 	"github.com/go-chi/chi/v5"
 	"github.com/go-chi/chi/v5/middleware"
@@ -45,7 +47,6 @@ import (
 	"github.com/coder/coder/v2/coderd/entitlements"
 	"github.com/coder/coder/v2/coderd/files"
 	"github.com/coder/coder/v2/coderd/idpsync"
-	"github.com/coder/coder/v2/coderd/prebuilds"
 	"github.com/coder/coder/v2/coderd/runtimeconfig"
 	"github.com/coder/coder/v2/coderd/webpush"
 
@@ -1278,6 +1279,7 @@ func New(options *Options) *API {
 				r.Get("/external-auth", api.workspaceAgentsExternalAuth)
 				r.Get("/gitsshkey", api.agentGitSSHKey)
 				r.Post("/log-source", api.workspaceAgentPostLogSource)
+				r.Get("/reinit", api.workspaceAgentReinit)
 			})
 			r.Route("/{workspaceagent}", func(r chi.Router) {
 				r.Use(
diff --git a/coderd/coderdtest/coderdtest.go b/coderd/coderdtest/coderdtest.go
index dbf1f62abfb28..93e17048e054e 100644
--- a/coderd/coderdtest/coderdtest.go
+++ b/coderd/coderdtest/coderdtest.go
@@ -1105,6 +1105,69 @@ func (w WorkspaceAgentWaiter) MatchResources(m func([]codersdk.WorkspaceResource
 	return w
 }
 
+// WaitForAgentFn represents a boolean assertion to be made against each agent
+// that a given WorkspaceAgentWaited knows about. Each WaitForAgentFn should apply
+// the check to a single agent, but it should be named for plural, because `func (w WorkspaceAgentWaiter) WaitFor`
+// applies the check to all agents that it is aware of. This ensures that the public API of the waiter
+// reads correctly. For example:
+//
+// waiter := coderdtest.NewWorkspaceAgentWaiter(t, client, r.Workspace.ID)
+// waiter.WaitFor(coderdtest.AgentsReady)
+type WaitForAgentFn func(agent codersdk.WorkspaceAgent) bool
+
+// AgentsReady checks that the latest lifecycle state of an agent is "Ready".
+func AgentsReady(agent codersdk.WorkspaceAgent) bool {
+	return agent.LifecycleState == codersdk.WorkspaceAgentLifecycleReady
+}
+
+// AgentsNotReady checks that the latest lifecycle state of an agent is anything except "Ready".
+func AgentsNotReady(agent codersdk.WorkspaceAgent) bool {
+	return !AgentsReady(agent)
+}
+
+func (w WorkspaceAgentWaiter) WaitFor(criteria ...WaitForAgentFn) {
+	w.t.Helper()
+
+	agentNamesMap := make(map[string]struct{}, len(w.agentNames))
+	for _, name := range w.agentNames {
+		agentNamesMap[name] = struct{}{}
+	}
+
+	ctx, cancel := context.WithTimeout(context.Background(), testutil.WaitLong)
+	defer cancel()
+
+	w.t.Logf("waiting for workspace agents (workspace %s)", w.workspaceID)
+	require.Eventually(w.t, func() bool {
+		var err error
+		workspace, err := w.client.Workspace(ctx, w.workspaceID)
+		if err != nil {
+			return false
+		}
+		if workspace.LatestBuild.Job.CompletedAt == nil {
+			return false
+		}
+		if workspace.LatestBuild.Job.CompletedAt.IsZero() {
+			return false
+		}
+
+		for _, resource := range workspace.LatestBuild.Resources {
+			for _, agent := range resource.Agents {
+				if len(w.agentNames) > 0 {
+					if _, ok := agentNamesMap[agent.Name]; !ok {
+						continue
+					}
+				}
+				for _, criterium := range criteria {
+					if !criterium(agent) {
+						return false
+					}
+				}
+			}
+		}
+		return true
+	}, testutil.WaitLong, testutil.IntervalMedium)
+}
+
 // Wait waits for the agent(s) to connect and fails the test if they do not within testutil.WaitLong
 func (w WorkspaceAgentWaiter) Wait() []codersdk.WorkspaceResource {
 	w.t.Helper()
diff --git a/coderd/database/dbauthz/dbauthz.go b/coderd/database/dbauthz/dbauthz.go
index ceb5ba7f2a15a..7194c9267f638 100644
--- a/coderd/database/dbauthz/dbauthz.go
+++ b/coderd/database/dbauthz/dbauthz.go
@@ -3001,6 +3001,15 @@ func (q *querier) GetWorkspaceAgentsByResourceIDs(ctx context.Context, ids []uui
 	return q.db.GetWorkspaceAgentsByResourceIDs(ctx, ids)
 }
 
+func (q *querier) GetWorkspaceAgentsByWorkspaceAndBuildNumber(ctx context.Context, arg database.GetWorkspaceAgentsByWorkspaceAndBuildNumberParams) ([]database.WorkspaceAgent, error) {
+	_, err := q.GetWorkspaceByID(ctx, arg.WorkspaceID)
+	if err != nil {
+		return nil, err
+	}
+
+	return q.db.GetWorkspaceAgentsByWorkspaceAndBuildNumber(ctx, arg)
+}
+
 func (q *querier) GetWorkspaceAgentsCreatedAfter(ctx context.Context, createdAt time.Time) ([]database.WorkspaceAgent, error) {
 	if err := q.authorizeContext(ctx, policy.ActionRead, rbac.ResourceSystem); err != nil {
 		return nil, err
diff --git a/coderd/database/dbauthz/dbauthz_test.go b/coderd/database/dbauthz/dbauthz_test.go
index e562bbd1f7160..3f6726110f025 100644
--- a/coderd/database/dbauthz/dbauthz_test.go
+++ b/coderd/database/dbauthz/dbauthz_test.go
@@ -2009,6 +2009,38 @@ func (s *MethodTestSuite) TestWorkspace() {
 		agt := dbgen.WorkspaceAgent(s.T(), db, database.WorkspaceAgent{ResourceID: res.ID})
 		check.Args(agt.ID).Asserts(w, policy.ActionRead).Returns(agt)
 	}))
+	s.Run("GetWorkspaceAgentsByWorkspaceAndBuildNumber", s.Subtest(func(db database.Store, check *expects) {
+		u := dbgen.User(s.T(), db, database.User{})
+		o := dbgen.Organization(s.T(), db, database.Organization{})
+		tpl := dbgen.Template(s.T(), db, database.Template{
+			OrganizationID: o.ID,
+			CreatedBy:      u.ID,
+		})
+		tv := dbgen.TemplateVersion(s.T(), db, database.TemplateVersion{
+			TemplateID:     uuid.NullUUID{UUID: tpl.ID, Valid: true},
+			OrganizationID: o.ID,
+			CreatedBy:      u.ID,
+		})
+		w := dbgen.Workspace(s.T(), db, database.WorkspaceTable{
+			TemplateID:     tpl.ID,
+			OrganizationID: o.ID,
+			OwnerID:        u.ID,
+		})
+		j := dbgen.ProvisionerJob(s.T(), db, nil, database.ProvisionerJob{
+			Type: database.ProvisionerJobTypeWorkspaceBuild,
+		})
+		b := dbgen.WorkspaceBuild(s.T(), db, database.WorkspaceBuild{
+			JobID:             j.ID,
+			WorkspaceID:       w.ID,
+			TemplateVersionID: tv.ID,
+		})
+		res := dbgen.WorkspaceResource(s.T(), db, database.WorkspaceResource{JobID: b.JobID})
+		agt := dbgen.WorkspaceAgent(s.T(), db, database.WorkspaceAgent{ResourceID: res.ID})
+		check.Args(database.GetWorkspaceAgentsByWorkspaceAndBuildNumberParams{
+			WorkspaceID: w.ID,
+			BuildNumber: 1,
+		}).Asserts(w, policy.ActionRead).Returns([]database.WorkspaceAgent{agt})
+	}))
 	s.Run("GetWorkspaceAgentLifecycleStateByID", s.Subtest(func(db database.Store, check *expects) {
 		u := dbgen.User(s.T(), db, database.User{})
 		o := dbgen.Organization(s.T(), db, database.Organization{})
diff --git a/coderd/database/dbfake/dbfake.go b/coderd/database/dbfake/dbfake.go
index abadd78f07b36..fb2ea4bfd56b1 100644
--- a/coderd/database/dbfake/dbfake.go
+++ b/coderd/database/dbfake/dbfake.go
@@ -294,6 +294,8 @@ type TemplateVersionBuilder struct {
 	ps                 pubsub.Pubsub
 	resources          []*sdkproto.Resource
 	params             []database.TemplateVersionParameter
+	presets            []database.TemplateVersionPreset
+	presetParams       []database.TemplateVersionPresetParameter
 	promote            bool
 	autoCreateTemplate bool
 }
@@ -339,6 +341,13 @@ func (t TemplateVersionBuilder) Params(ps ...database.TemplateVersionParameter)
 	return t
 }
 
+func (t TemplateVersionBuilder) Preset(preset database.TemplateVersionPreset, params ...database.TemplateVersionPresetParameter) TemplateVersionBuilder {
+	// nolint: revive // returns modified struct
+	t.presets = append(t.presets, preset)
+	t.presetParams = append(t.presetParams, params...)
+	return t
+}
+
 func (t TemplateVersionBuilder) SkipCreateTemplate() TemplateVersionBuilder {
 	// nolint: revive // returns modified struct
 	t.autoCreateTemplate = false
@@ -378,6 +387,25 @@ func (t TemplateVersionBuilder) Do() TemplateVersionResponse {
 		require.NoError(t.t, err)
 	}
 
+	for _, preset := range t.presets {
+		dbgen.Preset(t.t, t.db, database.InsertPresetParams{
+			ID:                  preset.ID,
+			TemplateVersionID:   version.ID,
+			Name:                preset.Name,
+			CreatedAt:           version.CreatedAt,
+			DesiredInstances:    preset.DesiredInstances,
+			InvalidateAfterSecs: preset.InvalidateAfterSecs,
+		})
+	}
+
+	for _, presetParam := range t.presetParams {
+		dbgen.PresetParameter(t.t, t.db, database.InsertPresetParametersParams{
+			TemplateVersionPresetID: presetParam.TemplateVersionPresetID,
+			Names:                   []string{presetParam.Name},
+			Values:                  []string{presetParam.Value},
+		})
+	}
+
 	payload, err := json.Marshal(provisionerdserver.TemplateVersionImportJob{
 		TemplateVersionID: t.seed.ID,
 	})
diff --git a/coderd/database/dbgen/dbgen.go b/coderd/database/dbgen/dbgen.go
index 854c7c2974fe6..193c107d51da9 100644
--- a/coderd/database/dbgen/dbgen.go
+++ b/coderd/database/dbgen/dbgen.go
@@ -1198,6 +1198,7 @@ func TelemetryItem(t testing.TB, db database.Store, seed database.TelemetryItem)
 
 func Preset(t testing.TB, db database.Store, seed database.InsertPresetParams) database.TemplateVersionPreset {
 	preset, err := db.InsertPreset(genCtx, database.InsertPresetParams{
+		ID:                  takeFirst(seed.ID, uuid.New()),
 		TemplateVersionID:   takeFirst(seed.TemplateVersionID, uuid.New()),
 		Name:                takeFirst(seed.Name, testutil.GetRandomName(t)),
 		CreatedAt:           takeFirst(seed.CreatedAt, dbtime.Now()),
diff --git a/coderd/database/dbmem/dbmem.go b/coderd/database/dbmem/dbmem.go
index 1359d2e63484d..e2d9bf5613524 100644
--- a/coderd/database/dbmem/dbmem.go
+++ b/coderd/database/dbmem/dbmem.go
@@ -7592,6 +7592,30 @@ func (q *FakeQuerier) GetWorkspaceAgentsByResourceIDs(ctx context.Context, resou
 	return q.getWorkspaceAgentsByResourceIDsNoLock(ctx, resourceIDs)
 }
 
+func (q *FakeQuerier) GetWorkspaceAgentsByWorkspaceAndBuildNumber(ctx context.Context, arg database.GetWorkspaceAgentsByWorkspaceAndBuildNumberParams) ([]database.WorkspaceAgent, error) {
+	err := validateDatabaseType(arg)
+	if err != nil {
+		return nil, err
+	}
+
+	build, err := q.GetWorkspaceBuildByWorkspaceIDAndBuildNumber(ctx, database.GetWorkspaceBuildByWorkspaceIDAndBuildNumberParams(arg))
+	if err != nil {
+		return nil, err
+	}
+
+	resources, err := q.getWorkspaceResourcesByJobIDNoLock(ctx, build.JobID)
+	if err != nil {
+		return nil, err
+	}
+
+	var resourceIDs []uuid.UUID
+	for _, resource := range resources {
+		resourceIDs = append(resourceIDs, resource.ID)
+	}
+
+	return q.GetWorkspaceAgentsByResourceIDs(ctx, resourceIDs)
+}
+
 func (q *FakeQuerier) GetWorkspaceAgentsCreatedAfter(_ context.Context, after time.Time) ([]database.WorkspaceAgent, error) {
 	q.mutex.RLock()
 	defer q.mutex.RUnlock()
diff --git a/coderd/database/dbmetrics/querymetrics.go b/coderd/database/dbmetrics/querymetrics.go
index b76d70c764cf6..5433570e475fb 100644
--- a/coderd/database/dbmetrics/querymetrics.go
+++ b/coderd/database/dbmetrics/querymetrics.go
@@ -1726,6 +1726,13 @@ func (m queryMetricsStore) GetWorkspaceAgentsByResourceIDs(ctx context.Context,
 	return agents, err
 }
 
+func (m queryMetricsStore) GetWorkspaceAgentsByWorkspaceAndBuildNumber(ctx context.Context, arg database.GetWorkspaceAgentsByWorkspaceAndBuildNumberParams) ([]database.WorkspaceAgent, error) {
+	start := time.Now()
+	r0, r1 := m.s.GetWorkspaceAgentsByWorkspaceAndBuildNumber(ctx, arg)
+	m.queryLatencies.WithLabelValues("GetWorkspaceAgentsByWorkspaceAndBuildNumber").Observe(time.Since(start).Seconds())
+	return r0, r1
+}
+
 func (m queryMetricsStore) GetWorkspaceAgentsCreatedAfter(ctx context.Context, createdAt time.Time) ([]database.WorkspaceAgent, error) {
 	start := time.Now()
 	agents, err := m.s.GetWorkspaceAgentsCreatedAfter(ctx, createdAt)
diff --git a/coderd/database/dbmock/dbmock.go b/coderd/database/dbmock/dbmock.go
index 10adfd7c5a408..7937a105791eb 100644
--- a/coderd/database/dbmock/dbmock.go
+++ b/coderd/database/dbmock/dbmock.go
@@ -3619,6 +3619,21 @@ func (mr *MockStoreMockRecorder) GetWorkspaceAgentsByResourceIDs(ctx, ids any) *
 	return mr.mock.ctrl.RecordCallWithMethodType(mr.mock, "GetWorkspaceAgentsByResourceIDs", reflect.TypeOf((*MockStore)(nil).GetWorkspaceAgentsByResourceIDs), ctx, ids)
 }
 
+// GetWorkspaceAgentsByWorkspaceAndBuildNumber mocks base method.
+func (m *MockStore) GetWorkspaceAgentsByWorkspaceAndBuildNumber(ctx context.Context, arg database.GetWorkspaceAgentsByWorkspaceAndBuildNumberParams) ([]database.WorkspaceAgent, error) {
+	m.ctrl.T.Helper()
+	ret := m.ctrl.Call(m, "GetWorkspaceAgentsByWorkspaceAndBuildNumber", ctx, arg)
+	ret0, _ := ret[0].([]database.WorkspaceAgent)
+	ret1, _ := ret[1].(error)
+	return ret0, ret1
+}
+
+// GetWorkspaceAgentsByWorkspaceAndBuildNumber indicates an expected call of GetWorkspaceAgentsByWorkspaceAndBuildNumber.
+func (mr *MockStoreMockRecorder) GetWorkspaceAgentsByWorkspaceAndBuildNumber(ctx, arg any) *gomock.Call {
+	mr.mock.ctrl.T.Helper()
+	return mr.mock.ctrl.RecordCallWithMethodType(mr.mock, "GetWorkspaceAgentsByWorkspaceAndBuildNumber", reflect.TypeOf((*MockStore)(nil).GetWorkspaceAgentsByWorkspaceAndBuildNumber), ctx, arg)
+}
+
 // GetWorkspaceAgentsCreatedAfter mocks base method.
 func (m *MockStore) GetWorkspaceAgentsCreatedAfter(ctx context.Context, createdAt time.Time) ([]database.WorkspaceAgent, error) {
 	m.ctrl.T.Helper()
diff --git a/coderd/database/querier.go b/coderd/database/querier.go
index 9fbfbde410d40..fad83fb1668c1 100644
--- a/coderd/database/querier.go
+++ b/coderd/database/querier.go
@@ -396,6 +396,7 @@ type sqlcQuerier interface {
 	GetWorkspaceAgentUsageStats(ctx context.Context, createdAt time.Time) ([]GetWorkspaceAgentUsageStatsRow, error)
 	GetWorkspaceAgentUsageStatsAndLabels(ctx context.Context, createdAt time.Time) ([]GetWorkspaceAgentUsageStatsAndLabelsRow, error)
 	GetWorkspaceAgentsByResourceIDs(ctx context.Context, ids []uuid.UUID) ([]WorkspaceAgent, error)
+	GetWorkspaceAgentsByWorkspaceAndBuildNumber(ctx context.Context, arg GetWorkspaceAgentsByWorkspaceAndBuildNumberParams) ([]WorkspaceAgent, error)
 	GetWorkspaceAgentsCreatedAfter(ctx context.Context, createdAt time.Time) ([]WorkspaceAgent, error)
 	GetWorkspaceAgentsInLatestBuildByWorkspaceID(ctx context.Context, workspaceID uuid.UUID) ([]WorkspaceAgent, error)
 	GetWorkspaceAppByAgentIDAndSlug(ctx context.Context, arg GetWorkspaceAppByAgentIDAndSlugParams) (WorkspaceApp, error)
diff --git a/coderd/database/queries.sql.go b/coderd/database/queries.sql.go
index 60416b1a35730..a63ff57b369e5 100644
--- a/coderd/database/queries.sql.go
+++ b/coderd/database/queries.sql.go
@@ -6443,6 +6443,7 @@ func (q *sqlQuerier) GetPresetsByTemplateVersionID(ctx context.Context, template
 
 const insertPreset = `-- name: InsertPreset :one
 INSERT INTO template_version_presets (
+	id,
 	template_version_id,
 	name,
 	created_at,
@@ -6454,11 +6455,13 @@ VALUES (
 	$2,
 	$3,
 	$4,
-	$5
+	$5,
+	$6
 ) RETURNING id, template_version_id, name, created_at, desired_instances, invalidate_after_secs
 `
 
 type InsertPresetParams struct {
+	ID                  uuid.UUID     `db:"id" json:"id"`
 	TemplateVersionID   uuid.UUID     `db:"template_version_id" json:"template_version_id"`
 	Name                string        `db:"name" json:"name"`
 	CreatedAt           time.Time     `db:"created_at" json:"created_at"`
@@ -6468,6 +6471,7 @@ type InsertPresetParams struct {
 
 func (q *sqlQuerier) InsertPreset(ctx context.Context, arg InsertPresetParams) (TemplateVersionPreset, error) {
 	row := q.db.QueryRowContext(ctx, insertPreset,
+		arg.ID,
 		arg.TemplateVersionID,
 		arg.Name,
 		arg.CreatedAt,
@@ -14164,6 +14168,80 @@ func (q *sqlQuerier) GetWorkspaceAgentsByResourceIDs(ctx context.Context, ids []
 	return items, nil
 }
 
+const getWorkspaceAgentsByWorkspaceAndBuildNumber = `-- name: GetWorkspaceAgentsByWorkspaceAndBuildNumber :many
+SELECT
+	workspace_agents.id, workspace_agents.created_at, workspace_agents.updated_at, workspace_agents.name, workspace_agents.first_connected_at, workspace_agents.last_connected_at, workspace_agents.disconnected_at, workspace_agents.resource_id, workspace_agents.auth_token, workspace_agents.auth_instance_id, workspace_agents.architecture, workspace_agents.environment_variables, workspace_agents.operating_system, workspace_agents.instance_metadata, workspace_agents.resource_metadata, workspace_agents.directory, workspace_agents.version, workspace_agents.last_connected_replica_id, workspace_agents.connection_timeout_seconds, workspace_agents.troubleshooting_url, workspace_agents.motd_file, workspace_agents.lifecycle_state, workspace_agents.expanded_directory, workspace_agents.logs_length, workspace_agents.logs_overflowed, workspace_agents.started_at, workspace_agents.ready_at, workspace_agents.subsystems, workspace_agents.display_apps, workspace_agents.api_version, workspace_agents.display_order
+FROM
+	workspace_agents
+JOIN
+	workspace_resources ON workspace_agents.resource_id = workspace_resources.id
+JOIN
+	workspace_builds ON workspace_resources.job_id = workspace_builds.job_id
+WHERE
+	workspace_builds.workspace_id = $1 :: uuid AND
+	workspace_builds.build_number = $2 :: int
+`
+
+type GetWorkspaceAgentsByWorkspaceAndBuildNumberParams struct {
+	WorkspaceID uuid.UUID `db:"workspace_id" json:"workspace_id"`
+	BuildNumber int32     `db:"build_number" json:"build_number"`
+}
+
+func (q *sqlQuerier) GetWorkspaceAgentsByWorkspaceAndBuildNumber(ctx context.Context, arg GetWorkspaceAgentsByWorkspaceAndBuildNumberParams) ([]WorkspaceAgent, error) {
+	rows, err := q.db.QueryContext(ctx, getWorkspaceAgentsByWorkspaceAndBuildNumber, arg.WorkspaceID, arg.BuildNumber)
+	if err != nil {
+		return nil, err
+	}
+	defer rows.Close()
+	var items []WorkspaceAgent
+	for rows.Next() {
+		var i WorkspaceAgent
+		if err := rows.Scan(
+			&i.ID,
+			&i.CreatedAt,
+			&i.UpdatedAt,
+			&i.Name,
+			&i.FirstConnectedAt,
+			&i.LastConnectedAt,
+			&i.DisconnectedAt,
+			&i.ResourceID,
+			&i.AuthToken,
+			&i.AuthInstanceID,
+			&i.Architecture,
+			&i.EnvironmentVariables,
+			&i.OperatingSystem,
+			&i.InstanceMetadata,
+			&i.ResourceMetadata,
+			&i.Directory,
+			&i.Version,
+			&i.LastConnectedReplicaID,
+			&i.ConnectionTimeoutSeconds,
+			&i.TroubleshootingURL,
+			&i.MOTDFile,
+			&i.LifecycleState,
+			&i.ExpandedDirectory,
+			&i.LogsLength,
+			&i.LogsOverflowed,
+			&i.StartedAt,
+			&i.ReadyAt,
+			pq.Array(&i.Subsystems),
+			pq.Array(&i.DisplayApps),
+			&i.APIVersion,
+			&i.DisplayOrder,
+		); err != nil {
+			return nil, err
+		}
+		items = append(items, i)
+	}
+	if err := rows.Close(); err != nil {
+		return nil, err
+	}
+	if err := rows.Err(); err != nil {
+		return nil, err
+	}
+	return items, nil
+}
+
 const getWorkspaceAgentsCreatedAfter = `-- name: GetWorkspaceAgentsCreatedAfter :many
 SELECT id, created_at, updated_at, name, first_connected_at, last_connected_at, disconnected_at, resource_id, auth_token, auth_instance_id, architecture, environment_variables, operating_system, instance_metadata, resource_metadata, directory, version, last_connected_replica_id, connection_timeout_seconds, troubleshooting_url, motd_file, lifecycle_state, expanded_directory, logs_length, logs_overflowed, started_at, ready_at, subsystems, display_apps, api_version, display_order FROM workspace_agents WHERE created_at > $1
 `
diff --git a/coderd/database/queries/presets.sql b/coderd/database/queries/presets.sql
index 15bcea0c28fb5..6d5646a285b4a 100644
--- a/coderd/database/queries/presets.sql
+++ b/coderd/database/queries/presets.sql
@@ -1,5 +1,6 @@
 -- name: InsertPreset :one
 INSERT INTO template_version_presets (
+	id,
 	template_version_id,
 	name,
 	created_at,
@@ -7,6 +8,7 @@ INSERT INTO template_version_presets (
 	invalidate_after_secs
 )
 VALUES (
+	@id,
 	@template_version_id,
 	@name,
 	@created_at,
diff --git a/coderd/database/queries/workspaceagents.sql b/coderd/database/queries/workspaceagents.sql
index 52d8b5275fc97..0d4a5343f78ba 100644
--- a/coderd/database/queries/workspaceagents.sql
+++ b/coderd/database/queries/workspaceagents.sql
@@ -252,6 +252,19 @@ WHERE
 			wb.workspace_id = @workspace_id :: uuid
 	);
 
+-- name: GetWorkspaceAgentsByWorkspaceAndBuildNumber :many
+SELECT
+	workspace_agents.*
+FROM
+	workspace_agents
+JOIN
+	workspace_resources ON workspace_agents.resource_id = workspace_resources.id
+JOIN
+	workspace_builds ON workspace_resources.job_id = workspace_builds.job_id
+WHERE
+	workspace_builds.workspace_id = @workspace_id :: uuid AND
+	workspace_builds.build_number = @build_number :: int;
+
 -- name: GetWorkspaceAgentAndLatestBuildByAuthToken :one
 SELECT
 	sqlc.embed(workspaces),
diff --git a/coderd/prebuilds/claim.go b/coderd/prebuilds/claim.go
new file mode 100644
index 0000000000000..b5155b8f2a568
--- /dev/null
+++ b/coderd/prebuilds/claim.go
@@ -0,0 +1,82 @@
+package prebuilds
+
+import (
+	"context"
+	"sync"
+
+	"github.com/google/uuid"
+	"golang.org/x/xerrors"
+
+	"cdr.dev/slog"
+	"github.com/coder/coder/v2/coderd/database/pubsub"
+	"github.com/coder/coder/v2/codersdk/agentsdk"
+)
+
+func NewPubsubWorkspaceClaimPublisher(ps pubsub.Pubsub) *PubsubWorkspaceClaimPublisher {
+	return &PubsubWorkspaceClaimPublisher{ps: ps}
+}
+
+type PubsubWorkspaceClaimPublisher struct {
+	ps pubsub.Pubsub
+}
+
+func (p PubsubWorkspaceClaimPublisher) PublishWorkspaceClaim(claim agentsdk.ReinitializationEvent) error {
+	channel := agentsdk.PrebuildClaimedChannel(claim.WorkspaceID)
+	if err := p.ps.Publish(channel, []byte(claim.Reason)); err != nil {
+		return xerrors.Errorf("failed to trigger prebuilt workspace agent reinitialization: %w", err)
+	}
+	return nil
+}
+
+func NewPubsubWorkspaceClaimListener(ps pubsub.Pubsub, logger slog.Logger) *PubsubWorkspaceClaimListener {
+	return &PubsubWorkspaceClaimListener{ps: ps, logger: logger}
+}
+
+type PubsubWorkspaceClaimListener struct {
+	logger slog.Logger
+	ps     pubsub.Pubsub
+}
+
+// ListenForWorkspaceClaims subscribes to a pubsub channel and sends any received events on the chan that it returns.
+// pubsub.Pubsub does not communicate when its last callback has been called after it has been closed. As such the chan
+// returned by this method is never closed. Call the returned cancel() function to close the subscription when it is no longer needed.
+// cancel() will be called if ctx expires or is canceled.
+func (p PubsubWorkspaceClaimListener) ListenForWorkspaceClaims(ctx context.Context, workspaceID uuid.UUID, reinitEvents chan<- agentsdk.ReinitializationEvent) (func(), error) {
+	select {
+	case <-ctx.Done():
+		return func() {}, ctx.Err()
+	default:
+	}
+
+	cancelSub, err := p.ps.Subscribe(agentsdk.PrebuildClaimedChannel(workspaceID), func(inner context.Context, reason []byte) {
+		claim := agentsdk.ReinitializationEvent{
+			WorkspaceID: workspaceID,
+			Reason:      agentsdk.ReinitializationReason(reason),
+		}
+
+		select {
+		case <-ctx.Done():
+			return
+		case <-inner.Done():
+			return
+		case reinitEvents <- claim:
+		}
+	})
+	if err != nil {
+		return func() {}, xerrors.Errorf("failed to subscribe to prebuild claimed channel: %w", err)
+	}
+
+	var once sync.Once
+	cancel := func() {
+		once.Do(func() {
+			cancelSub()
+		})
+	}
+
+	go func() {
+		<-ctx.Done()
+		cancel()
+	}()
+
+	return cancel, nil
+}
diff --git a/coderd/prebuilds/claim_test.go b/coderd/prebuilds/claim_test.go
new file mode 100644
index 0000000000000..670bb64eec756
--- /dev/null
+++ b/coderd/prebuilds/claim_test.go
@@ -0,0 +1,141 @@
+package prebuilds_test
+
+import (
+	"context"
+	"testing"
+	"time"
+
+	"github.com/google/uuid"
+	"github.com/stretchr/testify/require"
+	"golang.org/x/xerrors"
+
+	"cdr.dev/slog/sloggers/slogtest"
+	"github.com/coder/coder/v2/coderd/database/pubsub"
+	"github.com/coder/coder/v2/coderd/prebuilds"
+	"github.com/coder/coder/v2/codersdk/agentsdk"
+	"github.com/coder/coder/v2/testutil"
+)
+
+func TestPubsubWorkspaceClaimPublisher(t *testing.T) {
+	t.Parallel()
+	t.Run("published claim is received by a listener for the same workspace", func(t *testing.T) {
+		t.Parallel()
+
+		ctx := testutil.Context(t, testutil.WaitShort)
+		logger := testutil.Logger(t)
+		ps := pubsub.NewInMemory()
+		workspaceID := uuid.New()
+		reinitEvents := make(chan agentsdk.ReinitializationEvent, 1)
+		publisher := prebuilds.NewPubsubWorkspaceClaimPublisher(ps)
+		listener := prebuilds.NewPubsubWorkspaceClaimListener(ps, logger)
+
+		cancel, err := listener.ListenForWorkspaceClaims(ctx, workspaceID, reinitEvents)
+		require.NoError(t, err)
+		defer cancel()
+
+		claim := agentsdk.ReinitializationEvent{
+			WorkspaceID: workspaceID,
+			Reason:      agentsdk.ReinitializeReasonPrebuildClaimed,
+		}
+		err = publisher.PublishWorkspaceClaim(claim)
+		require.NoError(t, err)
+
+		gotEvent := testutil.RequireReceive(ctx, t, reinitEvents)
+		require.Equal(t, workspaceID, gotEvent.WorkspaceID)
+		require.Equal(t, claim.Reason, gotEvent.Reason)
+	})
+
+	t.Run("fail to publish claim", func(t *testing.T) {
+		t.Parallel()
+
+		ps := &brokenPubsub{}
+
+		publisher := prebuilds.NewPubsubWorkspaceClaimPublisher(ps)
+		claim := agentsdk.ReinitializationEvent{
+			WorkspaceID: uuid.New(),
+			Reason:      agentsdk.ReinitializeReasonPrebuildClaimed,
+		}
+
+		err := publisher.PublishWorkspaceClaim(claim)
+		require.ErrorContains(t, err, "failed to trigger prebuilt workspace agent reinitialization")
+	})
+}
+
+func TestPubsubWorkspaceClaimListener(t *testing.T) {
+	t.Parallel()
+	t.Run("finds claim events for its workspace", func(t *testing.T) {
+		t.Parallel()
+
+		ps := pubsub.NewInMemory()
+		listener := prebuilds.NewPubsubWorkspaceClaimListener(ps, slogtest.Make(t, nil))
+
+		claims := make(chan agentsdk.ReinitializationEvent, 1) // Buffer to avoid messing with goroutines in the rest of the test
+
+		workspaceID := uuid.New()
+		cancelFunc, err := listener.ListenForWorkspaceClaims(context.Background(), workspaceID, claims)
+		require.NoError(t, err)
+		defer cancelFunc()
+
+		// Publish a claim
+		channel := agentsdk.PrebuildClaimedChannel(workspaceID)
+		reason := agentsdk.ReinitializeReasonPrebuildClaimed
+		err = ps.Publish(channel, []byte(reason))
+		require.NoError(t, err)
+
+		// Verify we receive the claim
+		ctx := testutil.Context(t, testutil.WaitShort)
+		claim := testutil.RequireReceive(ctx, t, claims)
+		require.Equal(t, workspaceID, claim.WorkspaceID)
+		require.Equal(t, reason, claim.Reason)
+	})
+
+	t.Run("ignores claim events for other workspaces", func(t *testing.T) {
+		t.Parallel()
+
+		ps := pubsub.NewInMemory()
+		listener := prebuilds.NewPubsubWorkspaceClaimListener(ps, slogtest.Make(t, nil))
+
+		claims := make(chan agentsdk.ReinitializationEvent)
+		workspaceID := uuid.New()
+		otherWorkspaceID := uuid.New()
+		cancelFunc, err := listener.ListenForWorkspaceClaims(context.Background(), workspaceID, claims)
+		require.NoError(t, err)
+		defer cancelFunc()
+
+		// Publish a claim for a different workspace
+		channel := agentsdk.PrebuildClaimedChannel(otherWorkspaceID)
+		err = ps.Publish(channel, []byte(agentsdk.ReinitializeReasonPrebuildClaimed))
+		require.NoError(t, err)
+
+		// Verify we don't receive the claim
+		select {
+		case <-claims:
+			t.Fatal("received claim for wrong workspace")
+		case <-time.After(100 * time.Millisecond):
+			// Expected - no claim received
+		}
+	})
+
+	t.Run("communicates the error if it can't subscribe", func(t *testing.T) {
+		t.Parallel()
+
+		claims := make(chan agentsdk.ReinitializationEvent)
+		ps := &brokenPubsub{}
+		listener := prebuilds.NewPubsubWorkspaceClaimListener(ps, slogtest.Make(t, nil))
+
+		_, err := listener.ListenForWorkspaceClaims(context.Background(), uuid.New(), claims)
+		require.ErrorContains(t, err, "failed to subscribe to prebuild claimed channel")
+	})
+}
+
+type brokenPubsub struct {
+	pubsub.Pubsub
+}
+
+func (brokenPubsub) Subscribe(_ string, _ pubsub.Listener) (func(), error) {
+	return nil, xerrors.New("broken")
+}
+
+func (brokenPubsub) Publish(_ string, _ []byte) error {
+	return xerrors.New("broken")
+}
diff --git a/coderd/provisionerdserver/provisionerdserver.go b/coderd/provisionerdserver/provisionerdserver.go
index 68aece517bb2f..d2e0edbab83d9 100644
--- a/coderd/provisionerdserver/provisionerdserver.go
+++ b/coderd/provisionerdserver/provisionerdserver.go
@@ -37,12 +37,14 @@ import (
 	"github.com/coder/coder/v2/coderd/database/pubsub"
 	"github.com/coder/coder/v2/coderd/externalauth"
 	"github.com/coder/coder/v2/coderd/notifications"
+	"github.com/coder/coder/v2/coderd/prebuilds"
 	"github.com/coder/coder/v2/coderd/promoauth"
 	"github.com/coder/coder/v2/coderd/schedule"
 	"github.com/coder/coder/v2/coderd/telemetry"
 	"github.com/coder/coder/v2/coderd/tracing"
 	"github.com/coder/coder/v2/coderd/wspubsub"
 	"github.com/coder/coder/v2/codersdk"
+	"github.com/coder/coder/v2/codersdk/agentsdk"
 	"github.com/coder/coder/v2/codersdk/drpc"
 	"github.com/coder/coder/v2/provisioner"
 	"github.com/coder/coder/v2/provisionerd/proto"
@@ -617,6 +619,30 @@ func (s *server) acquireProtoJob(ctx context.Context, job database.ProvisionerJo
 			}
 		}
 
+		runningAgentAuthTokens := []*sdkproto.RunningAgentAuthToken{}
+		if input.PrebuiltWorkspaceBuildStage == sdkproto.PrebuiltWorkspaceBuildStage_CLAIM {
+			// runningAgentAuthTokens are *only* used for prebuilds. We fetch them when we want to rebuild a prebuilt workspace
+			// but not generate new agent tokens. The provisionerdserver will push them down to
+			// the provisioner (and ultimately to the `coder_agent` resource in the Terraform provider) where they will be
+			// reused. Context: the agent token is often used in immutable attributes of workspace resource (e.g. VM/container)
+			// to initialize the agent, so if that value changes it will necessitate a replacement of that resource, thus
+			// obviating the whole point of the prebuild.
+			agents, err := s.Database.GetWorkspaceAgentsByWorkspaceAndBuildNumber(ctx, database.GetWorkspaceAgentsByWorkspaceAndBuildNumberParams{
+				WorkspaceID: workspace.ID,
+				BuildNumber: 1,
+			})
+			if err != nil {
+				s.Logger.Error(ctx, "failed to retrieve running agents of claimed prebuilt workspace",
+					slog.F("workspace_id", workspace.ID), slog.Error(err))
+			}
+			for _, agent := range agents {
+				runningAgentAuthTokens = append(runningAgentAuthTokens, &sdkproto.RunningAgentAuthToken{
+					AgentId: agent.ID.String(),
+					Token:   agent.AuthToken.String(),
+				})
+			}
+		}
+
 		protoJob.Type = &proto.AcquiredJob_WorkspaceBuild_{
 			WorkspaceBuild: &proto.AcquiredJob_WorkspaceBuild{
 				WorkspaceBuildId:      workspaceBuild.ID.String(),
@@ -645,6 +671,7 @@ func (s *server) acquireProtoJob(ctx context.Context, job database.ProvisionerJo
 					WorkspaceBuildId:              workspaceBuild.ID.String(),
 					WorkspaceOwnerLoginType:       string(owner.LoginType),
 					WorkspaceOwnerRbacRoles:       ownerRbacRoles,
+					RunningAgentAuthTokens:        runningAgentAuthTokens,
 					PrebuiltWorkspaceBuildStage:   input.PrebuiltWorkspaceBuildStage,
 				},
 				LogLevel: input.LogLevel,
@@ -1733,6 +1760,19 @@ func (s *server) CompleteJob(ctx context.Context, completed *proto.CompletedJob)
 		if err != nil {
 			return nil, xerrors.Errorf("update workspace: %w", err)
 		}
+
+		if input.PrebuiltWorkspaceBuildStage == sdkproto.PrebuiltWorkspaceBuildStage_CLAIM {
+			s.Logger.Info(ctx, "workspace prebuild successfully claimed by user",
+				slog.F("workspace_id", workspace.ID))
+
+			err = prebuilds.NewPubsubWorkspaceClaimPublisher(s.Pubsub).PublishWorkspaceClaim(agentsdk.ReinitializationEvent{
+				WorkspaceID: workspace.ID,
+				Reason:      agentsdk.ReinitializeReasonPrebuildClaimed,
+			})
+			if err != nil {
+				s.Logger.Error(ctx, "failed to publish workspace claim event", slog.Error(err))
+			}
+		}
 	case *proto.CompletedJob_TemplateDryRun_:
 		for _, resource := range jobType.TemplateDryRun.Resources {
 			s.Logger.Info(ctx, "inserting template dry-run job resource",
@@ -1876,6 +1916,7 @@ func InsertWorkspacePresetAndParameters(ctx context.Context, db database.Store,
 			}
 		}
 		dbPreset, err := tx.InsertPreset(ctx, database.InsertPresetParams{
+			ID:                uuid.New(),
 			TemplateVersionID: templateVersionID,
 			Name:              protoPreset.Name,
 			CreatedAt:         t,
diff --git a/coderd/provisionerdserver/provisionerdserver_test.go b/coderd/provisionerdserver/provisionerdserver_test.go
index 488ef4bbdfd97..3b0ec44084c44 100644
--- a/coderd/provisionerdserver/provisionerdserver_test.go
+++ b/coderd/provisionerdserver/provisionerdserver_test.go
@@ -26,7 +26,10 @@ import (
 	"github.com/coder/quartz"
 	"github.com/coder/serpent"
 
+	"github.com/coder/coder/v2/coderd/prebuilds"
+	"github.com/coder/coder/v2/coderd/provisionerdserver"
 	"github.com/coder/coder/v2/coderd/rbac"
+	"github.com/coder/coder/v2/codersdk/agentsdk"
 
 	"github.com/coder/coder/v2/buildinfo"
 	"github.com/coder/coder/v2/coderd/audit"
@@ -39,7 +42,6 @@ import (
 	"github.com/coder/coder/v2/coderd/externalauth"
 	"github.com/coder/coder/v2/coderd/notifications"
 	"github.com/coder/coder/v2/coderd/notifications/notificationstest"
-	"github.com/coder/coder/v2/coderd/provisionerdserver"
 	"github.com/coder/coder/v2/coderd/schedule"
 	"github.com/coder/coder/v2/coderd/schedule/cron"
 	"github.com/coder/coder/v2/coderd/telemetry"
@@ -167,8 +169,12 @@ func TestAcquireJob(t *testing.T) {
 			_, err = tc.acquire(ctx, srv)
 			require.ErrorContains(t, err, "sql: no rows in result set")
 		})
-		for _, prebuiltWorkspace := range []bool{false, true} {
-			prebuiltWorkspace := prebuiltWorkspace
+		for _, prebuiltWorkspaceBuildStage := range []sdkproto.PrebuiltWorkspaceBuildStage{
+			sdkproto.PrebuiltWorkspaceBuildStage_NONE,
+			sdkproto.PrebuiltWorkspaceBuildStage_CREATE,
+			sdkproto.PrebuiltWorkspaceBuildStage_CLAIM,
+		} {
+			prebuiltWorkspaceBuildStage := prebuiltWorkspaceBuildStage
 			t.Run(tc.name+"_WorkspaceBuildJob", func(t *testing.T) {
 				t.Parallel()
 				// Set the max session token lifetime so we can assert we
@@ -212,7 +218,7 @@ func TestAcquireJob(t *testing.T) {
 					Roles:          []string{rbac.RoleOrgAuditor()},
 				})
 
-				// Add extra erronous roles
+				// Add extra erroneous roles
 				secondOrg := dbgen.Organization(t, db, database.Organization{})
 				dbgen.OrganizationMember(t, db, database.OrganizationMember{
 					UserID:         user.ID,
@@ -287,36 +293,74 @@ func TestAcquireJob(t *testing.T) {
 					Required:          true,
 					Sensitive:         false,
 				})
-				workspace := dbgen.Workspace(t, db, database.WorkspaceTable{
+				workspace := database.WorkspaceTable{
 					TemplateID:     template.ID,
 					OwnerID:        user.ID,
 					OrganizationID: pd.OrganizationID,
-				})
-				build := dbgen.WorkspaceBuild(t, db, database.WorkspaceBuild{
+				}
+				workspace = dbgen.Workspace(t, db, workspace)
+				build := database.WorkspaceBuild{
 					WorkspaceID:       workspace.ID,
 					BuildNumber:       1,
 					JobID:             uuid.New(),
 					TemplateVersionID: version.ID,
 					Transition:        database.WorkspaceTransitionStart,
 					Reason:            database.BuildReasonInitiator,
-				})
-				var buildState sdkproto.PrebuiltWorkspaceBuildStage
-				if prebuiltWorkspace {
-					buildState = sdkproto.PrebuiltWorkspaceBuildStage_CREATE
 				}
-				_ = dbgen.ProvisionerJob(t, db, ps, database.ProvisionerJob{
-					ID:             build.ID,
+				build = dbgen.WorkspaceBuild(t, db, build)
+				input := provisionerdserver.WorkspaceProvisionJob{
+					WorkspaceBuildID: build.ID,
+				}
+				dbJob := database.ProvisionerJob{
+					ID:             build.JobID,
 					OrganizationID: pd.OrganizationID,
 					InitiatorID:    user.ID,
 					Provisioner:    database.ProvisionerTypeEcho,
 					StorageMethod:  database.ProvisionerStorageMethodFile,
 					FileID:         file.ID,
 					Type:           database.ProvisionerJobTypeWorkspaceBuild,
-					Input: must(json.Marshal(provisionerdserver.WorkspaceProvisionJob{
+					Input:          must(json.Marshal(input)),
+				}
+				dbJob = dbgen.ProvisionerJob(t, db, ps, dbJob)
+
+				var agent database.WorkspaceAgent
+				if prebuiltWorkspaceBuildStage == sdkproto.PrebuiltWorkspaceBuildStage_CLAIM {
+					resource := dbgen.WorkspaceResource(t, db, database.WorkspaceResource{
+						JobID: dbJob.ID,
+					})
+					agent = dbgen.WorkspaceAgent(t, db, database.WorkspaceAgent{
+						ResourceID: resource.ID,
+						AuthToken:  uuid.New(),
+					})
+					// At this point we have an unclaimed workspace and build, now we need to setup the claim
+					// build
+					build = database.WorkspaceBuild{
+						WorkspaceID:       workspace.ID,
+						BuildNumber:       2,
+						JobID:             uuid.New(),
+						TemplateVersionID: version.ID,
+						Transition:        database.WorkspaceTransitionStart,
+						Reason:            database.BuildReasonInitiator,
+						InitiatorID:       user.ID,
+					}
+					build = dbgen.WorkspaceBuild(t, db, build)
+
+					input = provisionerdserver.WorkspaceProvisionJob{
 						WorkspaceBuildID:            build.ID,
-						PrebuiltWorkspaceBuildStage: buildState,
-					})),
-				})
+						PrebuiltWorkspaceBuildStage: prebuiltWorkspaceBuildStage,
+					}
+					dbJob = database.ProvisionerJob{
+						ID:             build.JobID,
+						OrganizationID: pd.OrganizationID,
+						InitiatorID:    user.ID,
+						Provisioner:    database.ProvisionerTypeEcho,
+						StorageMethod:  database.ProvisionerStorageMethodFile,
+						FileID:         file.ID,
+						Type:           database.ProvisionerJobTypeWorkspaceBuild,
+						Input:          must(json.Marshal(input)),
+					}
+					dbJob = dbgen.ProvisionerJob(t, db, ps, dbJob)
+				}
 
 				startPublished := make(chan struct{})
 				var closed bool
@@ -350,6 +394,19 @@ func TestAcquireJob(t *testing.T) {
 
 				<-startPublished
 
+				if prebuiltWorkspaceBuildStage == sdkproto.PrebuiltWorkspaceBuildStage_CLAIM {
+					for {
+						// In the case of a prebuild claim, there is a second build, which is the
+						// one that we're interested in.
+						job, err = tc.acquire(ctx, srv)
+						require.NoError(t, err)
+						if _, ok := job.Type.(*proto.AcquiredJob_WorkspaceBuild_); ok {
+							break
+						}
+					}
+					<-startPublished
+				}
+
 				got, err := json.Marshal(job.Type)
 				require.NoError(t, err)
 
@@ -384,8 +441,14 @@ func TestAcquireJob(t *testing.T) {
 					WorkspaceOwnerLoginType:       string(user.LoginType),
 					WorkspaceOwnerRbacRoles:       []*sdkproto.Role{{Name: rbac.RoleOrgMember(), OrgId: pd.OrganizationID.String()}, {Name: "member", OrgId: ""}, {Name: rbac.RoleOrgAuditor(), OrgId: pd.OrganizationID.String()}},
 				}
-				if prebuiltWorkspace {
-					wantedMetadata.PrebuiltWorkspaceBuildStage = sdkproto.PrebuiltWorkspaceBuildStage_CREATE
+				if prebuiltWorkspaceBuildStage == sdkproto.PrebuiltWorkspaceBuildStage_CLAIM {
+					// For claimed prebuilds, we expect the prebuild state to be set to CLAIM
+					// and we expect tokens from the first build to be set for reuse
+					wantedMetadata.PrebuiltWorkspaceBuildStage = prebuiltWorkspaceBuildStage
+					wantedMetadata.RunningAgentAuthTokens = append(wantedMetadata.RunningAgentAuthTokens, &sdkproto.RunningAgentAuthToken{
+						AgentId: agent.ID.String(),
+						Token:   agent.AuthToken.String(),
+					})
 				}
 
 				slices.SortFunc(wantedMetadata.WorkspaceOwnerRbacRoles, func(a, b *sdkproto.Role) int {
@@ -1750,6 +1813,110 @@ func TestCompleteJob(t *testing.T) {
 			})
 		}
 	})
+
+	t.Run("ReinitializePrebuiltAgents", func(t *testing.T) {
+		t.Parallel()
+		type testcase struct {
+			name                    string
+			shouldReinitializeAgent bool
+		}
+
+		for _, tc := range []testcase{
+			// Whether or not there are presets and those presets define prebuilds, etc
+			// are all irrelevant at this level. Those factors are useful earlier in the process.
+			// Everything relevant to this test is determined by the value of `PrebuildClaimedByUser`
+			// on the provisioner job. As such, there are only two significant test cases:
+			{
+				name:                    "claimed prebuild",
+				shouldReinitializeAgent: true,
+			},
+			{
+				name:                    "not a claimed prebuild",
+				shouldReinitializeAgent: false,
+			},
+		} {
+			t.Run(tc.name, func(t *testing.T) {
+				t.Parallel()
+
+				// GIVEN an enqueued provisioner job and its dependencies:
+
+				srv, db, ps, pd := setup(t, false, &overrides{})
+
+				buildID := uuid.New()
+				jobInput := provisionerdserver.WorkspaceProvisionJob{
+					WorkspaceBuildID: buildID,
+				}
+				if tc.shouldReinitializeAgent { // This is the key lever in the test
+					// GIVEN the enqueued provisioner job is for a workspace being claimed by a user:
+					jobInput.PrebuiltWorkspaceBuildStage = sdkproto.PrebuiltWorkspaceBuildStage_CLAIM
+				}
+				input, err := json.Marshal(jobInput)
+				require.NoError(t, err)
+
+				ctx := testutil.Context(t, testutil.WaitShort)
+				job, err := db.InsertProvisionerJob(ctx, database.InsertProvisionerJobParams{
+					Input:         input,
+					Provisioner:   database.ProvisionerTypeEcho,
+					StorageMethod: database.ProvisionerStorageMethodFile,
+					Type:          database.ProvisionerJobTypeWorkspaceBuild,
+				})
+				require.NoError(t, err)
+
+				tpl := dbgen.Template(t, db, database.Template{
+					OrganizationID: pd.OrganizationID,
+				})
+				tv := dbgen.TemplateVersion(t, db, database.TemplateVersion{
+					TemplateID: uuid.NullUUID{UUID: tpl.ID, Valid: true},
+					JobID:      job.ID,
+				})
+				workspace := dbgen.Workspace(t, db, database.WorkspaceTable{
+					TemplateID: tpl.ID,
+				})
+				_ = dbgen.WorkspaceBuild(t, db, database.WorkspaceBuild{
+					ID:                buildID,
+					JobID:             job.ID,
+					WorkspaceID:       workspace.ID,
+					TemplateVersionID: tv.ID,
+				})
+				_, err = db.AcquireProvisionerJob(ctx, database.AcquireProvisionerJobParams{
+					WorkerID: uuid.NullUUID{
+						UUID:  pd.ID,
+						Valid: true,
+					},
+					Types: []database.ProvisionerType{database.ProvisionerTypeEcho},
+				})
+				require.NoError(t, err)
+
+				// GIVEN something is listening to process workspace reinitialization:
+				reinitChan := make(chan agentsdk.ReinitializationEvent, 1) // Buffered to simplify test structure
+				cancel, err := prebuilds.NewPubsubWorkspaceClaimListener(ps, testutil.Logger(t)).ListenForWorkspaceClaims(ctx, workspace.ID, reinitChan)
+				require.NoError(t, err)
+				defer cancel()
+
+				// WHEN the job is completed
+				completedJob := proto.CompletedJob{
+					JobId: job.ID.String(),
+					Type: &proto.CompletedJob_WorkspaceBuild_{
+						WorkspaceBuild: &proto.CompletedJob_WorkspaceBuild{},
+					},
+				}
+				_, err = srv.CompleteJob(ctx, &completedJob)
+				require.NoError(t, err)
+
+				if tc.shouldReinitializeAgent {
+					event := testutil.RequireReceive(ctx, t, reinitChan)
+					require.Equal(t, workspace.ID, event.WorkspaceID)
+				} else {
+					select {
+					case <-reinitChan:
+						t.Fatal("unexpected reinitialization event published")
+					default:
+						// OK
+					}
+				}
+			})
+		}
+	})
 }
 
 func TestInsertWorkspacePresetsAndParameters(t *testing.T) {
diff --git a/coderd/workspaceagents.go b/coderd/workspaceagents.go
index 050537705d107..5af9fc009b5aa 100644
--- a/coderd/workspaceagents.go
+++ b/coderd/workspaceagents.go
@@ -35,6 +35,7 @@ import (
 	"github.com/coder/coder/v2/coderd/httpmw"
 	"github.com/coder/coder/v2/coderd/httpmw/loggermw"
 	"github.com/coder/coder/v2/coderd/jwtutils"
+	"github.com/coder/coder/v2/coderd/prebuilds"
 	"github.com/coder/coder/v2/coderd/rbac"
 	"github.com/coder/coder/v2/coderd/rbac/policy"
 	"github.com/coder/coder/v2/coderd/telemetry"
@@ -1183,6 +1184,60 @@ func (api *API) workspaceAgentPostLogSource(rw http.ResponseWriter, r *http.Requ
 	httpapi.Write(ctx, rw, http.StatusCreated, apiSource)
 }
 
+// @Summary Get workspace agent reinitialization
+// @ID get-workspace-agent-reinitialization
+// @Security CoderSessionToken
+// @Produce json
+// @Tags Agents
+// @Success 200 {object} agentsdk.ReinitializationEvent
+// @Router /workspaceagents/me/reinit [get]
+func (api *API) workspaceAgentReinit(rw http.ResponseWriter, r *http.Request) {
+	// Allow us to interrupt watch via cancel.
+	ctx, cancel := context.WithCancel(r.Context())
+	defer cancel()
+	r = r.WithContext(ctx) // Rewire context for SSE cancellation.
+
+	workspaceAgent := httpmw.WorkspaceAgent(r)
+	log := api.Logger.Named("workspace_agent_reinit_watcher").With(
+		slog.F("workspace_agent_id", workspaceAgent.ID),
+	)
+
+	workspace, err := api.Database.GetWorkspaceByAgentID(ctx, workspaceAgent.ID)
+	if err != nil {
+		log.Error(ctx, "failed to retrieve workspace from agent token", slog.Error(err))
+		httpapi.InternalServerError(rw, xerrors.New("failed to determine workspace from agent token"))
+	}
+
+	log.Info(ctx, "agent waiting for reinit instruction")
+
+	reinitEvents := make(chan agentsdk.ReinitializationEvent)
+	cancel, err = prebuilds.NewPubsubWorkspaceClaimListener(api.Pubsub, log).ListenForWorkspaceClaims(ctx, workspace.ID, reinitEvents)
+	if err != nil {
+		log.Error(ctx, "subscribe to prebuild claimed channel", slog.Error(err))
+		httpapi.InternalServerError(rw, xerrors.New("failed to subscribe to prebuild claimed channel"))
+		return
+	}
+	defer cancel()
+
+	transmitter := agentsdk.NewSSEAgentReinitTransmitter(log, rw, r)
+
+	err = transmitter.Transmit(ctx, reinitEvents)
+	switch {
+	case errors.Is(err, agentsdk.ErrTransmissionSourceClosed):
+		log.Info(ctx, "agent reinitialization subscription closed", slog.F("workspace_agent_id", workspaceAgent.ID))
+	case errors.Is(err, agentsdk.ErrTransmissionTargetClosed):
+		log.Info(ctx, "agent connection closed", slog.F("workspace_agent_id", workspaceAgent.ID))
+	case errors.Is(err, context.Canceled):
+		log.Info(ctx, "agent reinitialization", slog.Error(err))
+	case err != nil:
+		log.Error(ctx, "failed to stream agent reinit events", slog.Error(err))
+		httpapi.Write(ctx, rw, http.StatusInternalServerError, codersdk.Response{
+			Message: "Internal error streaming agent reinitialization events.",
+			Detail:  err.Error(),
+		})
+	}
+}
+
 // convertProvisionedApps converts applications that are in the middle of provisioning process.
 // It means that they may not have an agent or workspace assigned (dry-run job).
 func convertProvisionedApps(dbApps []database.WorkspaceApp) []codersdk.WorkspaceApp {
diff --git a/coderd/workspaceagents_test.go b/coderd/workspaceagents_test.go
index 6b757a52ec06d..10403f1ac00ae 100644
--- a/coderd/workspaceagents_test.go
+++ b/coderd/workspaceagents_test.go
@@ -11,6 +11,7 @@ import (
 	"runtime"
 	"strconv"
 	"strings"
+	"sync"
 	"sync/atomic"
 	"testing"
 	"time"
@@ -44,10 +45,12 @@ import (
 	"github.com/coder/coder/v2/coderd/database/dbfake"
 	"github.com/coder/coder/v2/coderd/database/dbgen"
 	"github.com/coder/coder/v2/coderd/database/dbmem"
+	"github.com/coder/coder/v2/coderd/database/dbtestutil"
 	"github.com/coder/coder/v2/coderd/database/dbtime"
 	"github.com/coder/coder/v2/coderd/database/pubsub"
 	"github.com/coder/coder/v2/coderd/externalauth"
 	"github.com/coder/coder/v2/coderd/jwtutils"
+	"github.com/coder/coder/v2/coderd/prebuilds"
 	"github.com/coder/coder/v2/coderd/rbac"
 	"github.com/coder/coder/v2/coderd/telemetry"
 	"github.com/coder/coder/v2/coderd/util/ptr"
@@ -2641,3 +2644,70 @@ func TestAgentConnectionInfo(t *testing.T) {
 	require.True(t, info.DisableDirectConnections)
 	require.True(t, info.DERPForceWebSockets)
 }
+
+func TestReinit(t *testing.T) {
+	t.Parallel()
+
+	db, ps := dbtestutil.NewDB(t)
+	pubsubSpy := pubsubReinitSpy{
+		Pubsub:     ps,
+		subscribed: make(chan string),
+	}
+	client := coderdtest.New(t, &coderdtest.Options{
+		Database: db,
+		Pubsub:   &pubsubSpy,
+	})
+	user := coderdtest.CreateFirstUser(t, client)
+
+	r := dbfake.WorkspaceBuild(t, db, database.WorkspaceTable{
+		OrganizationID: user.OrganizationID,
+		OwnerID:        user.UserID,
+	}).WithAgent().Do()
+
+	pubsubSpy.Mutex.Lock()
+	pubsubSpy.expectedEvent = agentsdk.PrebuildClaimedChannel(r.Workspace.ID)
+	pubsubSpy.Mutex.Unlock()
+
+	agentCtx := testutil.Context(t, testutil.WaitShort)
+	agentClient := agentsdk.New(client.URL)
+	agentClient.SetSessionToken(r.AgentToken)
+
+	agentReinitializedCh := make(chan *agentsdk.ReinitializationEvent)
+	go func() {
+		reinitEvent, err := agentClient.WaitForReinit(agentCtx)
+		assert.NoError(t, err)
+		agentReinitializedCh <- reinitEvent
+	}()
+
+	// We need to subscribe before we publish, lest we miss the event
+	ctx := testutil.Context(t, testutil.WaitShort)
+	testutil.TryReceive(ctx, t, pubsubSpy.subscribed) // Wait for the appropriate subscription
+
+	// Now that we're subscribed, publish the event
+	err := prebuilds.NewPubsubWorkspaceClaimPublisher(ps).PublishWorkspaceClaim(agentsdk.ReinitializationEvent{
+		WorkspaceID: r.Workspace.ID,
+		Reason:      agentsdk.ReinitializeReasonPrebuildClaimed,
+	})
+	require.NoError(t, err)
+
+	ctx = testutil.Context(t, testutil.WaitShort)
+	reinitEvent := testutil.TryReceive(ctx, t, agentReinitializedCh)
+	require.NotNil(t, reinitEvent)
+	require.Equal(t, r.Workspace.ID, reinitEvent.WorkspaceID)
+}
+
+type pubsubReinitSpy struct {
+	pubsub.Pubsub
+	sync.Mutex
+	subscribed    chan string
+	expectedEvent string
+}
+
+func (p *pubsubReinitSpy) Subscribe(event string, listener pubsub.Listener) (cancel func(), err error) {
+	p.Lock()
+	if p.expectedEvent != "" && event == p.expectedEvent {
+		close(p.subscribed)
+	}
+	p.Unlock()
+	return p.Pubsub.Subscribe(event, listener)
+}
diff --git a/coderd/workspaces.go b/coderd/workspaces.go
index 459aded1f7037..dd3327d444b9e 100644
--- a/coderd/workspaces.go
+++ b/coderd/workspaces.go
@@ -641,9 +641,9 @@ func createWorkspace(
 
 	err = api.Database.InTx(func(db database.Store) error {
 		var (
+			prebuildsClaimer = *api.PrebuildsClaimer.Load()
 			workspaceID      uuid.UUID
 			claimedWorkspace *database.Workspace
-			prebuildsClaimer = *api.PrebuildsClaimer.Load()
 		)
 
 		// If a template preset was chosen, try claim a prebuilt workspace.
@@ -717,8 +717,7 @@ func createWorkspace(
 			Reason(database.BuildReasonInitiator).
 			Initiator(initiatorID).
 			ActiveVersion().
-			RichParameterValues(req.RichParameterValues).
-			TemplateVersionPresetID(req.TemplateVersionPresetID)
+			RichParameterValues(req.RichParameterValues)
 		if req.TemplateVersionID != uuid.Nil {
 			builder = builder.VersionID(req.TemplateVersionID)
 		}
diff --git a/coderd/wsbuilder/wsbuilder.go b/coderd/wsbuilder/wsbuilder.go
index b6eb621c55620..91638c63e436f 100644
--- a/coderd/wsbuilder/wsbuilder.go
+++ b/coderd/wsbuilder/wsbuilder.go
@@ -77,8 +77,7 @@ type Builder struct {
 	parameterValues                      *[]string
 	templateVersionPresetParameterValues []database.TemplateVersionPresetParameter
 
-	prebuiltWorkspaceBuildStage sdkproto.PrebuiltWorkspaceBuildStage
-
+	prebuiltWorkspaceBuildStage  sdkproto.PrebuiltWorkspaceBuildStage
 	verifyNoLegacyParametersOnce bool
 }
 
diff --git a/codersdk/agentsdk/agentsdk.go b/codersdk/agentsdk/agentsdk.go
index 109d14b84d050..167c7e304ca4b 100644
--- a/codersdk/agentsdk/agentsdk.go
+++ b/codersdk/agentsdk/agentsdk.go
@@ -19,12 +19,15 @@ import (
 	"tailscale.com/tailcfg"
 
 	"cdr.dev/slog"
+	"github.com/coder/retry"
+	"github.com/coder/websocket"
+
 	"github.com/coder/coder/v2/agent/proto"
 	"github.com/coder/coder/v2/apiversion"
+	"github.com/coder/coder/v2/coderd/httpapi"
 	"github.com/coder/coder/v2/codersdk"
 	drpcsdk "github.com/coder/coder/v2/codersdk/drpc"
 	tailnetproto "github.com/coder/coder/v2/tailnet/proto"
-	"github.com/coder/websocket"
 )
 
 // ExternalLogSourceID is the statically-defined ID of a log-source that
@@ -686,3 +689,188 @@ func LogsNotifyChannel(agentID uuid.UUID) string {
 type LogsNotifyMessage struct {
 	CreatedAfter int64 `json:"created_after"`
 }
+
+type ReinitializationReason string
+
+const (
+	ReinitializeReasonPrebuildClaimed ReinitializationReason = "prebuild_claimed"
+)
+
+type ReinitializationEvent struct {
+	WorkspaceID uuid.UUID
+	Reason      ReinitializationReason `json:"reason"`
+}
+
+func PrebuildClaimedChannel(id uuid.UUID) string {
+	return fmt.Sprintf("prebuild_claimed_%s", id)
+}
+
+// WaitForReinit polls a SSE endpoint, and receives an event back under the following conditions:
+// - ping: ignored, keepalive
+// - prebuild claimed: a prebuilt workspace is claimed, so the agent must reinitialize.
+func (c *Client) WaitForReinit(ctx context.Context) (*ReinitializationEvent, error) {
+	rpcURL, err := c.SDK.URL.Parse("/api/v2/workspaceagents/me/reinit")
+	if err != nil {
+		return nil, xerrors.Errorf("parse url: %w", err)
+	}
+
+	jar, err := cookiejar.New(nil)
+	if err != nil {
+		return nil, xerrors.Errorf("create cookie jar: %w", err)
+	}
+	jar.SetCookies(rpcURL, []*http.Cookie{{
+		Name:  codersdk.SessionTokenCookie,
+		Value: c.SDK.SessionToken(),
+	}})
+	httpClient := &http.Client{
+		Jar:       jar,
+		Transport: c.SDK.HTTPClient.Transport,
+	}
+
+	req, err := http.NewRequestWithContext(ctx, http.MethodGet, rpcURL.String(), nil)
+	if err != nil {
+		return nil, xerrors.Errorf("build request: %w", err)
+	}
+
+	res, err := httpClient.Do(req)
+	if err != nil {
+		return nil, xerrors.Errorf("execute request: %w", err)
+	}
+	defer res.Body.Close()
+
+	if res.StatusCode != http.StatusOK {
+		return nil, codersdk.ReadBodyAsError(res)
+	}
+
+	reinitEvent, err := NewSSEAgentReinitReceiver(res.Body).Receive(ctx)
+	if err != nil {
+		return nil, xerrors.Errorf("listening for reinitialization events: %w", err)
+	}
+	return reinitEvent, nil
+}
+
+func WaitForReinitLoop(ctx context.Context, logger slog.Logger, client *Client) <-chan ReinitializationEvent {
+	reinitEvents := make(chan ReinitializationEvent)
+
+	go func() {
+		for retrier := retry.New(100*time.Millisecond, 10*time.Second); retrier.Wait(ctx); {
+			logger.Debug(ctx, "waiting for agent reinitialization instructions")
+			reinitEvent, err := client.WaitForReinit(ctx)
+			if err != nil {
+				logger.Error(ctx, "failed to wait for agent reinitialization instructions", slog.Error(err))
+				continue
+			}
+			retrier.Reset()
+			select {
+			case <-ctx.Done():
+				close(reinitEvents)
+				return
+			case reinitEvents <- *reinitEvent:
+			}
+		}
+	}()
+
+	return reinitEvents
+}
+
+func NewSSEAgentReinitTransmitter(logger slog.Logger, rw http.ResponseWriter, r *http.Request) *SSEAgentReinitTransmitter {
+	return &SSEAgentReinitTransmitter{logger: logger, rw: rw, r: r}
+}
+
+type SSEAgentReinitTransmitter struct {
+	rw     http.ResponseWriter
+	r      *http.Request
+	logger slog.Logger
+}
+
+var (
+	ErrTransmissionSourceClosed = xerrors.New("transmission source closed")
+	ErrTransmissionTargetClosed = xerrors.New("transmission target closed")
+)
+
+// Transmit will read from the given chan and send events for as long as:
+// * the chan remains open
+// * the context has not been canceled
+// * not timed out
+// * the connection to the receiver remains open
+func (s *SSEAgentReinitTransmitter) Transmit(ctx context.Context, reinitEvents <-chan ReinitializationEvent) error {
+	select {
+	case <-ctx.Done():
+		return ctx.Err()
+	default:
+	}
+
+	sseSendEvent, sseSenderClosed, err := httpapi.ServerSentEventSender(s.rw, s.r)
+	if err != nil {
+		return xerrors.Errorf("failed to create sse transmitter: %w", err)
+	}
+
+	defer func() {
+		// Block returning until the ServerSentEventSender is closed
+		// to avoid a race condition where we might write or flush to rw after the handler returns.
+		<-sseSenderClosed
+	}()
+
+	for {
+		select {
+		case <-ctx.Done():
+			return ctx.Err()
+		case <-sseSenderClosed:
+			return ErrTransmissionTargetClosed
+		case reinitEvent, ok := <-reinitEvents:
+			if !ok {
+				return ErrTransmissionSourceClosed
+			}
+			err := sseSendEvent(codersdk.ServerSentEvent{
+				Type: codersdk.ServerSentEventTypeData,
+				Data: reinitEvent,
+			})
+			if err != nil {
+				return err
+			}
+		}
+	}
+}
+
+func NewSSEAgentReinitReceiver(r io.ReadCloser) *SSEAgentReinitReceiver {
+	return &SSEAgentReinitReceiver{r: r}
+}
+
+type SSEAgentReinitReceiver struct {
+	r io.ReadCloser
+}
+
+func (s *SSEAgentReinitReceiver) Receive(ctx context.Context) (*ReinitializationEvent, error) {
+	nextEvent := codersdk.ServerSentEventReader(ctx, s.r)
+	for {
+		select {
+		case <-ctx.Done():
+			return nil, ctx.Err()
+		default:
+		}
+
+		sse, err := nextEvent()
+		switch {
+		case err != nil:
+			return nil, xerrors.Errorf("failed to read server-sent event: %w", err)
+		case sse.Type == codersdk.ServerSentEventTypeError:
+			return nil, xerrors.Errorf("unexpected server sent event type error")
+		case sse.Type == codersdk.ServerSentEventTypePing:
+			continue
+		case sse.Type != codersdk.ServerSentEventTypeData:
+			return nil, xerrors.Errorf("unexpected server sent event type: %s", sse.Type)
+		}
+
+		// At this point we know that the sent event is of type codersdk.ServerSentEventTypeData
+		var reinitEvent ReinitializationEvent
+		b, ok := sse.Data.([]byte)
+		if !ok {
+			return nil, xerrors.Errorf("expected data as []byte, got %T", sse.Data)
+		}
+		err = json.Unmarshal(b, &reinitEvent)
+		if err != nil {
+			return nil, xerrors.Errorf("unmarshal reinit response: %w", err)
+		}
+		return &reinitEvent, nil
+	}
+}
diff --git a/codersdk/agentsdk/agentsdk_test.go b/codersdk/agentsdk/agentsdk_test.go
new file mode 100644
index 0000000000000..8ad2d69be0b98
--- /dev/null
+++ b/codersdk/agentsdk/agentsdk_test.go
@@ -0,0 +1,122 @@
+package agentsdk_test
+
+import (
+	"context"
+	"io"
+	"net/http"
+	"net/http/httptest"
+	"testing"
+
+	"github.com/google/uuid"
+	"github.com/stretchr/testify/require"
+
+	"cdr.dev/slog/sloggers/slogtest"
+	"github.com/coder/coder/v2/codersdk/agentsdk"
+	"github.com/coder/coder/v2/testutil"
+)
+
+func TestStreamAgentReinitEvents(t *testing.T) {
+	t.Parallel()
+
+	t.Run("transmitted events are received", func(t *testing.T) {
+		t.Parallel()
+
+		eventToSend := agentsdk.ReinitializationEvent{
+			WorkspaceID: uuid.New(),
+			Reason:      agentsdk.ReinitializeReasonPrebuildClaimed,
+		}
+
+		events := make(chan agentsdk.ReinitializationEvent, 1)
+		events <- eventToSend
+
+		transmitCtx := testutil.Context(t, testutil.WaitShort)
+		transmitErrCh := make(chan error, 1)
+		srv := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+			transmitter := agentsdk.NewSSEAgentReinitTransmitter(slogtest.Make(t, nil), w, r)
+			transmitErrCh <- transmitter.Transmit(transmitCtx, events)
+		}))
+		defer srv.Close()
+
+		requestCtx := testutil.Context(t, testutil.WaitShort)
+		req, err := http.NewRequestWithContext(requestCtx, "GET", srv.URL, nil)
+		require.NoError(t, err)
+		resp, err := http.DefaultClient.Do(req)
+		require.NoError(t, err)
+		defer resp.Body.Close()
+
+		receiveCtx := testutil.Context(t, testutil.WaitShort)
+		receiver := agentsdk.NewSSEAgentReinitReceiver(resp.Body)
+		sentEvent, receiveErr := receiver.Receive(receiveCtx)
+		require.Nil(t, receiveErr)
+		require.Equal(t, eventToSend, *sentEvent)
+	})
+
+	t.Run("doesn't transmit events if the transmitter context is canceled", func(t *testing.T) {
+		t.Parallel()
+
+		eventToSend := agentsdk.ReinitializationEvent{
+			WorkspaceID: uuid.New(),
+			Reason:      agentsdk.ReinitializeReasonPrebuildClaimed,
+		}
+
+		events := make(chan agentsdk.ReinitializationEvent, 1)
+		events <- eventToSend
+
+		transmitCtx, cancelTransmit := context.WithCancel(testutil.Context(t, testutil.WaitShort))
+		cancelTransmit()
+		transmitErrCh := make(chan error, 1)
+		srv := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+			transmitter := agentsdk.NewSSEAgentReinitTransmitter(slogtest.Make(t, nil), w, r)
+			transmitErrCh <- transmitter.Transmit(transmitCtx, events)
+		}))
+
+		defer srv.Close()
+
+		requestCtx := testutil.Context(t, testutil.WaitShort)
+		req, err := http.NewRequestWithContext(requestCtx, "GET", srv.URL, nil)
+		require.NoError(t, err)
+		resp, err := http.DefaultClient.Do(req)
+		require.NoError(t, err)
+		defer resp.Body.Close()
+
+		receiveCtx := testutil.Context(t, testutil.WaitShort)
+		receiver := agentsdk.NewSSEAgentReinitReceiver(resp.Body)
+		sentEvent, receiveErr := receiver.Receive(receiveCtx)
+		require.Nil(t, sentEvent)
+		require.ErrorIs(t, receiveErr, io.EOF)
+	})
+
+	t.Run("does not receive events if the receiver context is canceled", func(t *testing.T) {
+		t.Parallel()
+
+		eventToSend := agentsdk.ReinitializationEvent{
+			WorkspaceID: uuid.New(),
+			Reason:      agentsdk.ReinitializeReasonPrebuildClaimed,
+		}
+
+		events := make(chan agentsdk.ReinitializationEvent, 1)
+		events <- eventToSend
+
+		transmitCtx := testutil.Context(t, testutil.WaitShort)
+		transmitErrCh := make(chan error, 1)
+		srv := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+			transmitter := agentsdk.NewSSEAgentReinitTransmitter(slogtest.Make(t, nil), w, r)
+			transmitErrCh <- transmitter.Transmit(transmitCtx, events)
+		}))
+		defer srv.Close()
+
+		requestCtx := testutil.Context(t, testutil.WaitShort)
+		req, err := http.NewRequestWithContext(requestCtx, "GET", srv.URL, nil)
+		require.NoError(t, err)
+		resp, err := http.DefaultClient.Do(req)
+		require.NoError(t, err)
+		defer resp.Body.Close()
+
+		receiveCtx, cancelReceive := context.WithCancel(context.Background())
+		cancelReceive()
+		receiver := agentsdk.NewSSEAgentReinitReceiver(resp.Body)
+		sentEvent, receiveErr := receiver.Receive(receiveCtx)
+		require.Nil(t, sentEvent)
+		require.ErrorIs(t, receiveErr, context.Canceled)
+	})
+}
diff --git a/codersdk/client.go b/codersdk/client.go
index 8ab5a289b2cf5..4492066785d6f 100644
--- a/codersdk/client.go
+++ b/codersdk/client.go
@@ -631,7 +631,7 @@ func (h *HeaderTransport) RoundTrip(req *http.Request) (*http.Response, error) {
 		}
 	}
 	if h.Transport == nil {
-		h.Transport = http.DefaultTransport
+		return http.DefaultTransport.RoundTrip(req)
 	}
 	return h.Transport.RoundTrip(req)
 }
diff --git a/docs/reference/api/agents.md b/docs/reference/api/agents.md
index 853cb67e38bfd..81dd9cf2eb88a 100644
--- a/docs/reference/api/agents.md
+++ b/docs/reference/api/agents.md
@@ -470,6 +470,38 @@ curl -X PATCH http://coder-server:8080/api/v2/workspaceagents/me/logs \
 
 To perform this operation, you must be authenticated. [Learn more](authentication.md).
 
+## Get workspace agent reinitialization
+
+### Code samples
+
+```shell
+# Example request using curl
+curl -X GET http://coder-server:8080/api/v2/workspaceagents/me/reinit \
+  -H 'Accept: application/json' \
+  -H 'Coder-Session-Token: API_KEY'
+```
+
+`GET /workspaceagents/me/reinit`
+
+### Example responses
+
+> 200 Response
+
+```json
+{
+  "reason": "prebuild_claimed",
+  "workspaceID": "string"
+}
+```
+
+### Responses
+
+| Status | Meaning                                                 | Description | Schema                                                                     |
+|--------|---------------------------------------------------------|-------------|----------------------------------------------------------------------------|
+| 200    | [OK](https://tools.ietf.org/html/rfc7231#section-6.3.1) | OK          | [agentsdk.ReinitializationEvent](schemas.md#agentsdkreinitializationevent) |
+
+To perform this operation, you must be authenticated. [Learn more](authentication.md).
+
 ## Get workspace agent by ID
 
 ### Code samples
diff --git a/docs/reference/api/schemas.md b/docs/reference/api/schemas.md
index e2ba1373aa613..6caf9e3384546 100644
--- a/docs/reference/api/schemas.md
+++ b/docs/reference/api/schemas.md
@@ -182,6 +182,36 @@
 | `icon`         | string | false    |              |                                                                                                                                                                                                |
 | `id`           | string | false    |              | ID is a unique identifier for the log source. It is scoped to a workspace agent, and can be statically defined inside code to prevent duplicate sources from being created for the same agent. |
 
+## agentsdk.ReinitializationEvent
+
+```json
+{
+  "reason": "prebuild_claimed",
+  "workspaceID": "string"
+}
+```
+
+### Properties
+
+| Name          | Type                                                               | Required | Restrictions | Description |
+|---------------|--------------------------------------------------------------------|----------|--------------|-------------|
+| `reason`      | [agentsdk.ReinitializationReason](#agentsdkreinitializationreason) | false    |              |             |
+| `workspaceID` | string                                                             | false    |              |             |
+
+## agentsdk.ReinitializationReason
+
+```json
+"prebuild_claimed"
+```
+
+### Properties
+
+#### Enumerated Values
+
+| Value              |
+|--------------------|
+| `prebuild_claimed` |
+
 ## coderd.SCIMUser
 
 ```json
diff --git a/enterprise/coderd/workspaceagents_test.go b/enterprise/coderd/workspaceagents_test.go
index 4ac374a3c8c8e..44aba69b9ffaa 100644
--- a/enterprise/coderd/workspaceagents_test.go
+++ b/enterprise/coderd/workspaceagents_test.go
@@ -5,12 +5,19 @@ import (
 	"crypto/tls"
 	"fmt"
 	"net/http"
+	"os"
+	"regexp"
 	"testing"
+	"time"
+
+	"github.com/coder/coder/v2/coderd/database/dbtestutil"
+	"github.com/coder/serpent"
 
 	"github.com/google/uuid"
 	"github.com/stretchr/testify/require"
 
 	"github.com/coder/coder/v2/agent"
+	"github.com/coder/coder/v2/cli/clitest"
 	"github.com/coder/coder/v2/coderd/coderdtest"
 	"github.com/coder/coder/v2/codersdk"
 	"github.com/coder/coder/v2/codersdk/agentsdk"
@@ -73,6 +80,168 @@ func TestBlockNonBrowser(t *testing.T) {
 	})
 }
 
+func TestReinitializeAgent(t *testing.T) {
+	t.Parallel()
+
+	tempAgentLog := testutil.CreateTemp(t, "", "testReinitializeAgent")
+
+	if !dbtestutil.WillUsePostgres() {
+		t.Skip("dbmem cannot currently claim a workspace")
+	}
+
+	db, ps := dbtestutil.NewDB(t)
+	// GIVEN a live enterprise API with the prebuilds feature enabled
+	client, user := coderdenttest.New(t, &coderdenttest.Options{
+		Options: &coderdtest.Options{
+			Database: db,
+			Pubsub:   ps,
+			DeploymentValues: coderdtest.DeploymentValues(t, func(dv *codersdk.DeploymentValues) {
+				dv.Prebuilds.ReconciliationInterval = serpent.Duration(time.Second)
+				dv.Experiments.Append(string(codersdk.ExperimentWorkspacePrebuilds))
+			}),
+			IncludeProvisionerDaemon: true,
+		},
+		LicenseOptions: &coderdenttest.LicenseOptions{
+			Features: license.Features{
+				codersdk.FeatureWorkspacePrebuilds: 1,
+			},
+		},
+	})
+
+	// GIVEN a template, template version, preset and a prebuilt workspace that uses them all
+	agentToken := uuid.UUID{3}
+	version := coderdtest.CreateTemplateVersion(t, client, user.OrganizationID, &echo.Responses{
+		Parse: echo.ParseComplete,
+		ProvisionPlan: []*proto.Response{
+			{
+				Type: &proto.Response_Plan{
+					Plan: &proto.PlanComplete{
+						Presets: []*proto.Preset{
+							{
+								Name: "test-preset",
+								Prebuild: &proto.Prebuild{
+									Instances: 1,
+								},
+							},
+						},
+						Resources: []*proto.Resource{
+							{
+								Agents: []*proto.Agent{
+									{
+										Name:            "smith",
+										OperatingSystem: "linux",
+										Architecture:    "i386",
+									},
+								},
+							},
+						},
+					},
+				},
+			},
+		},
+		ProvisionApply: []*proto.Response{
+			{
+				Type: &proto.Response_Apply{
+					Apply: &proto.ApplyComplete{
+						Resources: []*proto.Resource{
+							{
+								Type: "compute",
+								Name: "main",
+								Agents: []*proto.Agent{
+									{
+										Name:            "smith",
+										OperatingSystem: "linux",
+										Architecture:    "i386",
+										Scripts: []*proto.Script{
+											{
+												RunOnStart: true,
+												Script:     fmt.Sprintf("printenv >> %s; echo '---\n' >> %s", tempAgentLog.Name(), tempAgentLog.Name()), // Make reinitialization take long enough to assert that it happened
+											},
+										},
+										Auth: &proto.Agent_Token{
+											Token: agentToken.String(),
+										},
+									},
+								},
+							},
+						},
+					},
+				},
+			},
+		},
+	})
+	coderdtest.AwaitTemplateVersionJobCompleted(t, client, version.ID)
+
+	coderdtest.CreateTemplate(t, client, user.OrganizationID, version.ID)
+
+	// Wait for prebuilds to create a prebuilt workspace
+	ctx := context.Background()
+	// ctx := testutil.Context(t, testutil.WaitLong)
+	var (
+		prebuildID uuid.UUID
+	)
+	require.Eventually(t, func() bool {
+		agentAndBuild, err := db.GetWorkspaceAgentAndLatestBuildByAuthToken(ctx, agentToken)
+		if err != nil {
+			return false
+		}
+		prebuildID = agentAndBuild.WorkspaceBuild.ID
+		return true
+	}, testutil.WaitLong, testutil.IntervalFast)
+
+	prebuild := coderdtest.AwaitWorkspaceBuildJobCompleted(t, client, prebuildID)
+
+	preset, err := db.GetPresetByWorkspaceBuildID(ctx, prebuildID)
+	require.NoError(t, err)
+
+	// GIVEN a running agent
+	logDir := t.TempDir()
+	inv, _ := clitest.New(t,
+		"agent",
+		"--auth", "token",
+		"--agent-token", agentToken.String(),
+		"--agent-url", client.URL.String(),
+		"--log-dir", logDir,
+	)
+	clitest.Start(t, inv)
+
+	// GIVEN the agent is in a happy steady state
+	waiter := coderdtest.NewWorkspaceAgentWaiter(t, client, prebuild.WorkspaceID)
+	waiter.WaitFor(coderdtest.AgentsReady)
+
+	// WHEN a workspace is created that can benefit from prebuilds
+	anotherClient, anotherUser := coderdtest.CreateAnotherUser(t, client, user.OrganizationID)
+	workspace, err := anotherClient.CreateUserWorkspace(ctx, anotherUser.ID.String(), codersdk.CreateWorkspaceRequest{
+		TemplateVersionID:       version.ID,
+		TemplateVersionPresetID: preset.ID,
+		Name:                    "claimed-workspace",
+	})
+	require.NoError(t, err)
+
+	coderdtest.AwaitWorkspaceBuildJobCompleted(t, client, workspace.LatestBuild.ID)
+
+	// THEN reinitialization completes
+	waiter.WaitFor(coderdtest.AgentsReady)
+
+	var matches [][]byte
+	require.Eventually(t, func() bool {
+		// THEN the agent script ran again and reused the same agent token
+		contents, err := os.ReadFile(tempAgentLog.Name())
+		if err != nil {
+			return false
+		}
+		// UUID regex pattern (matches UUID v4-like strings)
+		uuidRegex := regexp.MustCompile(`\bCODER_AGENT_TOKEN=(.+)\b`)
+
+		matches = uuidRegex.FindAll(contents, -1)
+		// When an agent reinitializes, we expect it to run startup scripts again.
+		// As such, we expect to have written the agent environment to the temp file twice.
+		// Once on initial startup and then once on reinitialization.
+		return len(matches) == 2
+	}, testutil.WaitLong, testutil.IntervalMedium)
+	require.Equal(t, matches[0], matches[1])
+}
+
 type setupResp struct {
 	workspace codersdk.Workspace
 	sdkAgent  codersdk.WorkspaceAgent
diff --git a/enterprise/coderd/workspaces_test.go b/enterprise/coderd/workspaces_test.go
index 72859c5460fa7..92a51be33d552 100644
--- a/enterprise/coderd/workspaces_test.go
+++ b/enterprise/coderd/workspaces_test.go
@@ -4,6 +4,7 @@ import (
 	"bytes"
 	"context"
 	"database/sql"
+	"encoding/json"
 	"fmt"
 	"net/http"
 	"os"
@@ -13,6 +14,7 @@ import (
 	"testing"
 	"time"
 
+	"github.com/google/uuid"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
 
@@ -30,6 +32,8 @@ import (
 	"github.com/coder/coder/v2/coderd/database/dbtime"
 	"github.com/coder/coder/v2/coderd/httpmw"
 	"github.com/coder/coder/v2/coderd/notifications"
+	"github.com/coder/coder/v2/coderd/prebuilds"
+	"github.com/coder/coder/v2/coderd/provisionerdserver"
 	"github.com/coder/coder/v2/coderd/rbac"
 	"github.com/coder/coder/v2/coderd/rbac/policy"
 	agplschedule "github.com/coder/coder/v2/coderd/schedule"
@@ -43,6 +47,7 @@ import (
 	"github.com/coder/coder/v2/enterprise/coderd/schedule"
 	"github.com/coder/coder/v2/provisioner/echo"
 	"github.com/coder/coder/v2/provisionersdk"
+	"github.com/coder/coder/v2/provisionersdk/proto"
 	"github.com/coder/coder/v2/testutil"
 	"github.com/coder/quartz"
 )
@@ -453,6 +458,79 @@ func TestCreateUserWorkspace(t *testing.T) {
 		_, err = client1.CreateUserWorkspace(ctx, user1.ID.String(), req)
 		require.Error(t, err)
 	})
+
+	t.Run("ClaimPrebuild", func(t *testing.T) {
+		t.Parallel()
+
+		if !dbtestutil.WillUsePostgres() {
+			t.Skip("dbmem cannot currently claim a workspace")
+		}
+
+		client, db, user := coderdenttest.NewWithDatabase(t, &coderdenttest.Options{
+			Options: &coderdtest.Options{
+				DeploymentValues: coderdtest.DeploymentValues(t, func(dv *codersdk.DeploymentValues) {
+					err := dv.Experiments.Append(string(codersdk.ExperimentWorkspacePrebuilds))
+					require.NoError(t, err)
+				}),
+			},
+			LicenseOptions: &coderdenttest.LicenseOptions{
+				Features: license.Features{
+					codersdk.FeatureWorkspacePrebuilds: 1,
+				},
+			},
+		})
+
+		// GIVEN a template, template version, preset and a prebuilt workspace that uses them all
+		presetID := uuid.New()
+		tv := dbfake.TemplateVersion(t, db).Seed(database.TemplateVersion{
+			OrganizationID: user.OrganizationID,
+			CreatedBy:      user.UserID,
+		}).Preset(database.TemplateVersionPreset{
+			ID: presetID,
+		}).Do()
+
+		r := dbfake.WorkspaceBuild(t, db, database.WorkspaceTable{
+			OwnerID:    prebuilds.SystemUserID,
+			TemplateID: tv.Template.ID,
+		}).Seed(database.WorkspaceBuild{
+			TemplateVersionID: tv.TemplateVersion.ID,
+			TemplateVersionPresetID: uuid.NullUUID{
+				UUID:  presetID,
+				Valid: true,
+			},
+		}).WithAgent(func(a []*proto.Agent) []*proto.Agent {
+			return a
+		}).Do()
+
+		// nolint:gocritic // this is a test
+		ctx := dbauthz.AsSystemRestricted(testutil.Context(t, testutil.WaitLong))
+		agent, err := db.GetWorkspaceAgentAndLatestBuildByAuthToken(ctx, uuid.MustParse(r.AgentToken))
+		require.NoError(t, err)
+
+		err = db.UpdateWorkspaceAgentLifecycleStateByID(ctx, database.UpdateWorkspaceAgentLifecycleStateByIDParams{
+			ID:             agent.WorkspaceAgent.ID,
+			LifecycleState: database.WorkspaceAgentLifecycleStateReady,
+		})
+		require.NoError(t, err)
+
+		// WHEN a workspace is created that matches the available prebuilt workspace
+		_, err = client.CreateUserWorkspace(ctx, user.UserID.String(), codersdk.CreateWorkspaceRequest{
+			TemplateVersionID:       tv.TemplateVersion.ID,
+			TemplateVersionPresetID: presetID,
+			Name:                    "claimed-workspace",
+		})
+		require.NoError(t, err)
+
+		// THEN a new build is scheduled with the build stage specified
+		build, err := db.GetLatestWorkspaceBuildByWorkspaceID(ctx, r.Workspace.ID)
+		require.NoError(t, err)
+		require.NotEqual(t, build.ID, r.Build.ID)
+		job, err := db.GetProvisionerJobByID(ctx, build.JobID)
+		require.NoError(t, err)
+		var metadata provisionerdserver.WorkspaceProvisionJob
+		require.NoError(t, json.Unmarshal(job.Input, &metadata))
+		require.Equal(t, metadata.PrebuiltWorkspaceBuildStage, proto.PrebuiltWorkspaceBuildStage_CLAIM)
+	})
 }
 
 func TestWorkspaceAutobuild(t *testing.T) {
diff --git a/provisioner/terraform/executor.go b/provisioner/terraform/executor.go
index 442ed36074eb2..79f3aa0ebcaa8 100644
--- a/provisioner/terraform/executor.go
+++ b/provisioner/terraform/executor.go
@@ -334,6 +334,68 @@ func onlyDataResources(sm tfjson.StateModule) tfjson.StateModule {
 	return filtered
 }
 
+func (e *executor) logResourceReplacements(ctx context.Context, plan *tfjson.Plan) {
+	if plan == nil {
+		return
+	}
+
+	if len(plan.ResourceChanges) == 0 {
+		return
+	}
+	var (
+		count        int
+		replacements = make(map[string][]string, len(plan.ResourceChanges))
+	)
+
+	for _, ch := range plan.ResourceChanges {
+		// No change, no problem!
+		if ch.Change == nil {
+			continue
+		}
+
+		// No-op change, no problem!
+		if ch.Change.Actions.NoOp() {
+			continue
+		}
+
+		// No replacements, no problem!
+		if len(ch.Change.ReplacePaths) == 0 {
+			continue
+		}
+
+		// Replacing our resources, no problem!
+		if strings.Index(ch.Type, "coder_") == 0 {
+			continue
+		}
+
+		for _, p := range ch.Change.ReplacePaths {
+			var path string
+			switch p := p.(type) {
+			case []interface{}:
+				segs := p
+				list := make([]string, 0, len(segs))
+				for _, s := range segs {
+					list = append(list, fmt.Sprintf("%v", s))
+				}
+				path = strings.Join(list, ".")
+			default:
+				path = fmt.Sprintf("%v", p)
+			}
+
+			replacements[ch.Address] = append(replacements[ch.Address], path)
+		}
+
+		count++
+	}
+
+	if count > 0 {
+		e.server.logger.Warn(ctx, "plan introduces resource changes", slog.F("count", count))
+		for n, p := range replacements {
+			e.server.logger.Warn(ctx, "resource will be replaced", slog.F("name", n), slog.F("replacement_paths", strings.Join(p, ",")))
+		}
+	}
+}
+
 // planResources must only be called while the lock is held.
 func (e *executor) planResources(ctx, killCtx context.Context, planfilePath string) (*State, json.RawMessage, error) {
 	ctx, span := e.server.startTrace(ctx, tracing.FuncName())
@@ -344,6 +406,8 @@ func (e *executor) planResources(ctx, killCtx context.Context, planfilePath stri
 		return nil, nil, xerrors.Errorf("show terraform plan file: %w", err)
 	}
 
+	e.logResourceReplacements(ctx, plan)
+
 	rawGraph, err := e.graph(ctx, killCtx)
 	if err != nil {
 		return nil, nil, xerrors.Errorf("graph: %w", err)
diff --git a/provisioner/terraform/provision.go b/provisioner/terraform/provision.go
index aa954ef734a02..49eeed0a4e967 100644
--- a/provisioner/terraform/provision.go
+++ b/provisioner/terraform/provision.go
@@ -273,6 +273,17 @@ func provisionEnv(
 	if metadata.GetPrebuiltWorkspaceBuildStage().IsPrebuild() {
 		env = append(env, provider.IsPrebuildEnvironmentVariable()+"=true")
 	}
+	tokens := metadata.GetRunningAgentAuthTokens()
+	if len(tokens) == 1 {
+		env = append(env, provider.RunningAgentTokenEnvironmentVariable("")+"="+tokens[0].Token)
+	} else {
+		// Not currently supported, but added for forward-compatibility
+		for _, t := range tokens {
+			// If there are multiple agents, provide all the tokens to terraform so that it can
+			// choose the correct one for each agent ID.
+			env = append(env, provider.RunningAgentTokenEnvironmentVariable(t.AgentId)+"="+t.Token)
+		}
+	}
 	if metadata.GetPrebuiltWorkspaceBuildStage().IsPrebuiltWorkspaceClaim() {
 		env = append(env, provider.IsPrebuildClaimEnvironmentVariable()+"=true")
 	}
diff --git a/provisionerd/proto/version.go b/provisionerd/proto/version.go
index 1a82d240b9e7a..c10173a157a0e 100644
--- a/provisionerd/proto/version.go
+++ b/provisionerd/proto/version.go
@@ -15,6 +15,7 @@ import "github.com/coder/coder/v2/apiversion"
 //
 // API v1.5:
 //   - Add new field named `prebuilt_workspace_build_stage` enum in the Metadata message.
+//   - Add new field named `running_agent_auth_tokens` to provisioner job metadata.
 const (
 	CurrentMajor = 1
 	CurrentMinor = 5
diff --git a/provisionersdk/proto/provisioner.pb.go b/provisionersdk/proto/provisioner.pb.go
index cbe7ebb3007e6..81c56c99e9b72 100644
--- a/provisionersdk/proto/provisioner.pb.go
+++ b/provisionersdk/proto/provisioner.pb.go
@@ -2327,6 +2327,61 @@ func (x *Role) GetOrgId() string {
 	return ""
 }
 
+type RunningAgentAuthToken struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	AgentId string `protobuf:"bytes,1,opt,name=agent_id,json=agentId,proto3" json:"agent_id,omitempty"`
+	Token   string `protobuf:"bytes,2,opt,name=token,proto3" json:"token,omitempty"`
+}
+
+func (x *RunningAgentAuthToken) Reset() {
+	*x = RunningAgentAuthToken{}
+	if protoimpl.UnsafeEnabled {
+		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[26]
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		ms.StoreMessageInfo(mi)
+	}
+}
+
+func (x *RunningAgentAuthToken) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*RunningAgentAuthToken) ProtoMessage() {}
+
+func (x *RunningAgentAuthToken) ProtoReflect() protoreflect.Message {
+	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[26]
+	if protoimpl.UnsafeEnabled && x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use RunningAgentAuthToken.ProtoReflect.Descriptor instead.
+func (*RunningAgentAuthToken) Descriptor() ([]byte, []int) {
+	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{26}
+}
+
+func (x *RunningAgentAuthToken) GetAgentId() string {
+	if x != nil {
+		return x.AgentId
+	}
+	return ""
+}
+
+func (x *RunningAgentAuthToken) GetToken() string {
+	if x != nil {
+		return x.Token
+	}
+	return ""
+}
+
 // Metadata is information about a workspace used in the execution of a build
 type Metadata struct {
 	state         protoimpl.MessageState
@@ -2353,13 +2408,13 @@ type Metadata struct {
 	WorkspaceOwnerLoginType       string                      `protobuf:"bytes,18,opt,name=workspace_owner_login_type,json=workspaceOwnerLoginType,proto3" json:"workspace_owner_login_type,omitempty"`
 	WorkspaceOwnerRbacRoles       []*Role                     `protobuf:"bytes,19,rep,name=workspace_owner_rbac_roles,json=workspaceOwnerRbacRoles,proto3" json:"workspace_owner_rbac_roles,omitempty"`
 	PrebuiltWorkspaceBuildStage   PrebuiltWorkspaceBuildStage `protobuf:"varint,20,opt,name=prebuilt_workspace_build_stage,json=prebuiltWorkspaceBuildStage,proto3,enum=provisioner.PrebuiltWorkspaceBuildStage" json:"prebuilt_workspace_build_stage,omitempty"` // Indicates that a prebuilt workspace is being built.
-	RunningWorkspaceAgentToken    string                      `protobuf:"bytes,21,opt,name=running_workspace_agent_token,json=runningWorkspaceAgentToken,proto3" json:"running_workspace_agent_token,omitempty"`                                                  // Preserves the running agent token of a prebuilt workspace so it can reinitialize.
+	RunningAgentAuthTokens        []*RunningAgentAuthToken    `protobuf:"bytes,21,rep,name=running_agent_auth_tokens,json=runningAgentAuthTokens,proto3" json:"running_agent_auth_tokens,omitempty"`
 }
 
 func (x *Metadata) Reset() {
 	*x = Metadata{}
 	if protoimpl.UnsafeEnabled {
-		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[26]
+		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[27]
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		ms.StoreMessageInfo(mi)
 	}
@@ -2372,7 +2427,7 @@ func (x *Metadata) String() string {
 func (*Metadata) ProtoMessage() {}
 
 func (x *Metadata) ProtoReflect() protoreflect.Message {
-	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[26]
+	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[27]
 	if protoimpl.UnsafeEnabled && x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -2385,7 +2440,7 @@ func (x *Metadata) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use Metadata.ProtoReflect.Descriptor instead.
 func (*Metadata) Descriptor() ([]byte, []int) {
-	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{26}
+	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{27}
 }
 
 func (x *Metadata) GetCoderUrl() string {
@@ -2528,11 +2583,11 @@ func (x *Metadata) GetPrebuiltWorkspaceBuildStage() PrebuiltWorkspaceBuildStage
 	return PrebuiltWorkspaceBuildStage_NONE
 }
 
-func (x *Metadata) GetRunningWorkspaceAgentToken() string {
+func (x *Metadata) GetRunningAgentAuthTokens() []*RunningAgentAuthToken {
 	if x != nil {
-		return x.RunningWorkspaceAgentToken
+		return x.RunningAgentAuthTokens
 	}
-	return ""
+	return nil
 }
 
 // Config represents execution configuration shared by all subsequent requests in the Session
@@ -2551,7 +2606,7 @@ type Config struct {
 func (x *Config) Reset() {
 	*x = Config{}
 	if protoimpl.UnsafeEnabled {
-		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[27]
+		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[28]
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		ms.StoreMessageInfo(mi)
 	}
@@ -2564,7 +2619,7 @@ func (x *Config) String() string {
 func (*Config) ProtoMessage() {}
 
 func (x *Config) ProtoReflect() protoreflect.Message {
-	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[27]
+	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[28]
 	if protoimpl.UnsafeEnabled && x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -2577,7 +2632,7 @@ func (x *Config) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use Config.ProtoReflect.Descriptor instead.
 func (*Config) Descriptor() ([]byte, []int) {
-	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{27}
+	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{28}
 }
 
 func (x *Config) GetTemplateSourceArchive() []byte {
@@ -2611,7 +2666,7 @@ type ParseRequest struct {
 func (x *ParseRequest) Reset() {
 	*x = ParseRequest{}
 	if protoimpl.UnsafeEnabled {
-		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[28]
+		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[29]
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		ms.StoreMessageInfo(mi)
 	}
@@ -2624,7 +2679,7 @@ func (x *ParseRequest) String() string {
 func (*ParseRequest) ProtoMessage() {}
 
 func (x *ParseRequest) ProtoReflect() protoreflect.Message {
-	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[28]
+	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[29]
 	if protoimpl.UnsafeEnabled && x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -2637,7 +2692,7 @@ func (x *ParseRequest) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use ParseRequest.ProtoReflect.Descriptor instead.
 func (*ParseRequest) Descriptor() ([]byte, []int) {
-	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{28}
+	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{29}
 }
 
 // ParseComplete indicates a request to parse completed.
@@ -2655,7 +2710,7 @@ type ParseComplete struct {
 func (x *ParseComplete) Reset() {
 	*x = ParseComplete{}
 	if protoimpl.UnsafeEnabled {
-		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[29]
+		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[30]
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		ms.StoreMessageInfo(mi)
 	}
@@ -2668,7 +2723,7 @@ func (x *ParseComplete) String() string {
 func (*ParseComplete) ProtoMessage() {}
 
 func (x *ParseComplete) ProtoReflect() protoreflect.Message {
-	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[29]
+	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[30]
 	if protoimpl.UnsafeEnabled && x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -2681,7 +2736,7 @@ func (x *ParseComplete) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use ParseComplete.ProtoReflect.Descriptor instead.
 func (*ParseComplete) Descriptor() ([]byte, []int) {
-	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{29}
+	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{30}
 }
 
 func (x *ParseComplete) GetError() string {
@@ -2727,7 +2782,7 @@ type PlanRequest struct {
 func (x *PlanRequest) Reset() {
 	*x = PlanRequest{}
 	if protoimpl.UnsafeEnabled {
-		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[30]
+		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[31]
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		ms.StoreMessageInfo(mi)
 	}
@@ -2740,7 +2795,7 @@ func (x *PlanRequest) String() string {
 func (*PlanRequest) ProtoMessage() {}
 
 func (x *PlanRequest) ProtoReflect() protoreflect.Message {
-	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[30]
+	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[31]
 	if protoimpl.UnsafeEnabled && x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -2753,7 +2808,7 @@ func (x *PlanRequest) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use PlanRequest.ProtoReflect.Descriptor instead.
 func (*PlanRequest) Descriptor() ([]byte, []int) {
-	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{30}
+	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{31}
 }
 
 func (x *PlanRequest) GetMetadata() *Metadata {
@@ -2803,7 +2858,7 @@ type PlanComplete struct {
 func (x *PlanComplete) Reset() {
 	*x = PlanComplete{}
 	if protoimpl.UnsafeEnabled {
-		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[31]
+		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[32]
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		ms.StoreMessageInfo(mi)
 	}
@@ -2816,7 +2871,7 @@ func (x *PlanComplete) String() string {
 func (*PlanComplete) ProtoMessage() {}
 
 func (x *PlanComplete) ProtoReflect() protoreflect.Message {
-	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[31]
+	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[32]
 	if protoimpl.UnsafeEnabled && x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -2829,7 +2884,7 @@ func (x *PlanComplete) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use PlanComplete.ProtoReflect.Descriptor instead.
 func (*PlanComplete) Descriptor() ([]byte, []int) {
-	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{31}
+	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{32}
 }
 
 func (x *PlanComplete) GetError() string {
@@ -2901,7 +2956,7 @@ type ApplyRequest struct {
 func (x *ApplyRequest) Reset() {
 	*x = ApplyRequest{}
 	if protoimpl.UnsafeEnabled {
-		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[32]
+		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[33]
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		ms.StoreMessageInfo(mi)
 	}
@@ -2914,7 +2969,7 @@ func (x *ApplyRequest) String() string {
 func (*ApplyRequest) ProtoMessage() {}
 
 func (x *ApplyRequest) ProtoReflect() protoreflect.Message {
-	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[32]
+	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[33]
 	if protoimpl.UnsafeEnabled && x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -2927,7 +2982,7 @@ func (x *ApplyRequest) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use ApplyRequest.ProtoReflect.Descriptor instead.
 func (*ApplyRequest) Descriptor() ([]byte, []int) {
-	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{32}
+	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{33}
 }
 
 func (x *ApplyRequest) GetMetadata() *Metadata {
@@ -2954,7 +3009,7 @@ type ApplyComplete struct {
 func (x *ApplyComplete) Reset() {
 	*x = ApplyComplete{}
 	if protoimpl.UnsafeEnabled {
-		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[33]
+		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[34]
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		ms.StoreMessageInfo(mi)
 	}
@@ -2967,7 +3022,7 @@ func (x *ApplyComplete) String() string {
 func (*ApplyComplete) ProtoMessage() {}
 
 func (x *ApplyComplete) ProtoReflect() protoreflect.Message {
-	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[33]
+	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[34]
 	if protoimpl.UnsafeEnabled && x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -2980,7 +3035,7 @@ func (x *ApplyComplete) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use ApplyComplete.ProtoReflect.Descriptor instead.
 func (*ApplyComplete) Descriptor() ([]byte, []int) {
-	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{33}
+	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{34}
 }
 
 func (x *ApplyComplete) GetState() []byte {
@@ -3042,7 +3097,7 @@ type Timing struct {
 func (x *Timing) Reset() {
 	*x = Timing{}
 	if protoimpl.UnsafeEnabled {
-		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[34]
+		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[35]
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		ms.StoreMessageInfo(mi)
 	}
@@ -3055,7 +3110,7 @@ func (x *Timing) String() string {
 func (*Timing) ProtoMessage() {}
 
 func (x *Timing) ProtoReflect() protoreflect.Message {
-	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[34]
+	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[35]
 	if protoimpl.UnsafeEnabled && x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -3068,7 +3123,7 @@ func (x *Timing) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use Timing.ProtoReflect.Descriptor instead.
 func (*Timing) Descriptor() ([]byte, []int) {
-	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{34}
+	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{35}
 }
 
 func (x *Timing) GetStart() *timestamppb.Timestamp {
@@ -3130,7 +3185,7 @@ type CancelRequest struct {
 func (x *CancelRequest) Reset() {
 	*x = CancelRequest{}
 	if protoimpl.UnsafeEnabled {
-		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[35]
+		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[36]
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		ms.StoreMessageInfo(mi)
 	}
@@ -3143,7 +3198,7 @@ func (x *CancelRequest) String() string {
 func (*CancelRequest) ProtoMessage() {}
 
 func (x *CancelRequest) ProtoReflect() protoreflect.Message {
-	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[35]
+	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[36]
 	if protoimpl.UnsafeEnabled && x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -3156,7 +3211,7 @@ func (x *CancelRequest) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use CancelRequest.ProtoReflect.Descriptor instead.
 func (*CancelRequest) Descriptor() ([]byte, []int) {
-	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{35}
+	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{36}
 }
 
 type Request struct {
@@ -3177,7 +3232,7 @@ type Request struct {
 func (x *Request) Reset() {
 	*x = Request{}
 	if protoimpl.UnsafeEnabled {
-		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[36]
+		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[37]
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		ms.StoreMessageInfo(mi)
 	}
@@ -3190,7 +3245,7 @@ func (x *Request) String() string {
 func (*Request) ProtoMessage() {}
 
 func (x *Request) ProtoReflect() protoreflect.Message {
-	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[36]
+	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[37]
 	if protoimpl.UnsafeEnabled && x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -3203,7 +3258,7 @@ func (x *Request) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use Request.ProtoReflect.Descriptor instead.
 func (*Request) Descriptor() ([]byte, []int) {
-	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{36}
+	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{37}
 }
 
 func (m *Request) GetType() isRequest_Type {
@@ -3299,7 +3354,7 @@ type Response struct {
 func (x *Response) Reset() {
 	*x = Response{}
 	if protoimpl.UnsafeEnabled {
-		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[37]
+		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[38]
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		ms.StoreMessageInfo(mi)
 	}
@@ -3312,7 +3367,7 @@ func (x *Response) String() string {
 func (*Response) ProtoMessage() {}
 
 func (x *Response) ProtoReflect() protoreflect.Message {
-	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[37]
+	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[38]
 	if protoimpl.UnsafeEnabled && x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -3325,7 +3380,7 @@ func (x *Response) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use Response.ProtoReflect.Descriptor instead.
 func (*Response) Descriptor() ([]byte, []int) {
-	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{37}
+	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{38}
 }
 
 func (m *Response) GetType() isResponse_Type {
@@ -3407,7 +3462,7 @@ type Agent_Metadata struct {
 func (x *Agent_Metadata) Reset() {
 	*x = Agent_Metadata{}
 	if protoimpl.UnsafeEnabled {
-		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[38]
+		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[39]
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		ms.StoreMessageInfo(mi)
 	}
@@ -3420,7 +3475,7 @@ func (x *Agent_Metadata) String() string {
 func (*Agent_Metadata) ProtoMessage() {}
 
 func (x *Agent_Metadata) ProtoReflect() protoreflect.Message {
-	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[38]
+	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[39]
 	if protoimpl.UnsafeEnabled && x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -3492,7 +3547,7 @@ type Resource_Metadata struct {
 func (x *Resource_Metadata) Reset() {
 	*x = Resource_Metadata{}
 	if protoimpl.UnsafeEnabled {
-		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[40]
+		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[41]
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		ms.StoreMessageInfo(mi)
 	}
@@ -3505,7 +3560,7 @@ func (x *Resource_Metadata) String() string {
 func (*Resource_Metadata) ProtoMessage() {}
 
 func (x *Resource_Metadata) ProtoReflect() protoreflect.Message {
-	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[40]
+	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[41]
 	if protoimpl.UnsafeEnabled && x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -3853,172 +3908,147 @@ var file_provisionersdk_proto_provisioner_proto_rawDesc = []byte{
 	0x6b, 0x65, 0x79, 0x22, 0x31, 0x0a, 0x04, 0x52, 0x6f, 0x6c, 0x65, 0x12, 0x12, 0x0a, 0x04, 0x6e,
 	0x61, 0x6d, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x04, 0x6e, 0x61, 0x6d, 0x65, 0x12,
 	0x15, 0x0a, 0x06, 0x6f, 0x72, 0x67, 0x5f, 0x69, 0x64, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x52,
-	0x05, 0x6f, 0x72, 0x67, 0x49, 0x64, 0x22, 0xae, 0x09, 0x0a, 0x08, 0x4d, 0x65, 0x74, 0x61, 0x64,
-	0x61, 0x74, 0x61, 0x12, 0x1b, 0x0a, 0x09, 0x63, 0x6f, 0x64, 0x65, 0x72, 0x5f, 0x75, 0x72, 0x6c,
-	0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x08, 0x63, 0x6f, 0x64, 0x65, 0x72, 0x55, 0x72, 0x6c,
-	0x12, 0x53, 0x0a, 0x14, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x5f, 0x74, 0x72,
-	0x61, 0x6e, 0x73, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0e, 0x32, 0x20,
-	0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x57, 0x6f, 0x72,
-	0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x54, 0x72, 0x61, 0x6e, 0x73, 0x69, 0x74, 0x69, 0x6f, 0x6e,
-	0x52, 0x13, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x54, 0x72, 0x61, 0x6e, 0x73,
-	0x69, 0x74, 0x69, 0x6f, 0x6e, 0x12, 0x25, 0x0a, 0x0e, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61,
-	0x63, 0x65, 0x5f, 0x6e, 0x61, 0x6d, 0x65, 0x18, 0x03, 0x20, 0x01, 0x28, 0x09, 0x52, 0x0d, 0x77,
-	0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x4e, 0x61, 0x6d, 0x65, 0x12, 0x27, 0x0a, 0x0f,
-	0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x5f, 0x6f, 0x77, 0x6e, 0x65, 0x72, 0x18,
-	0x04, 0x20, 0x01, 0x28, 0x09, 0x52, 0x0e, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65,
-	0x4f, 0x77, 0x6e, 0x65, 0x72, 0x12, 0x21, 0x0a, 0x0c, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61,
-	0x63, 0x65, 0x5f, 0x69, 0x64, 0x18, 0x05, 0x20, 0x01, 0x28, 0x09, 0x52, 0x0b, 0x77, 0x6f, 0x72,
-	0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x49, 0x64, 0x12, 0x2c, 0x0a, 0x12, 0x77, 0x6f, 0x72, 0x6b,
-	0x73, 0x70, 0x61, 0x63, 0x65, 0x5f, 0x6f, 0x77, 0x6e, 0x65, 0x72, 0x5f, 0x69, 0x64, 0x18, 0x06,
-	0x20, 0x01, 0x28, 0x09, 0x52, 0x10, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x4f,
-	0x77, 0x6e, 0x65, 0x72, 0x49, 0x64, 0x12, 0x32, 0x0a, 0x15, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70,
-	0x61, 0x63, 0x65, 0x5f, 0x6f, 0x77, 0x6e, 0x65, 0x72, 0x5f, 0x65, 0x6d, 0x61, 0x69, 0x6c, 0x18,
-	0x07, 0x20, 0x01, 0x28, 0x09, 0x52, 0x13, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65,
-	0x4f, 0x77, 0x6e, 0x65, 0x72, 0x45, 0x6d, 0x61, 0x69, 0x6c, 0x12, 0x23, 0x0a, 0x0d, 0x74, 0x65,
-	0x6d, 0x70, 0x6c, 0x61, 0x74, 0x65, 0x5f, 0x6e, 0x61, 0x6d, 0x65, 0x18, 0x08, 0x20, 0x01, 0x28,
-	0x09, 0x52, 0x0c, 0x74, 0x65, 0x6d, 0x70, 0x6c, 0x61, 0x74, 0x65, 0x4e, 0x61, 0x6d, 0x65, 0x12,
-	0x29, 0x0a, 0x10, 0x74, 0x65, 0x6d, 0x70, 0x6c, 0x61, 0x74, 0x65, 0x5f, 0x76, 0x65, 0x72, 0x73,
-	0x69, 0x6f, 0x6e, 0x18, 0x09, 0x20, 0x01, 0x28, 0x09, 0x52, 0x0f, 0x74, 0x65, 0x6d, 0x70, 0x6c,
-	0x61, 0x74, 0x65, 0x56, 0x65, 0x72, 0x73, 0x69, 0x6f, 0x6e, 0x12, 0x48, 0x0a, 0x21, 0x77, 0x6f,
-	0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x5f, 0x6f, 0x77, 0x6e, 0x65, 0x72, 0x5f, 0x6f, 0x69,
-	0x64, 0x63, 0x5f, 0x61, 0x63, 0x63, 0x65, 0x73, 0x73, 0x5f, 0x74, 0x6f, 0x6b, 0x65, 0x6e, 0x18,
-	0x0a, 0x20, 0x01, 0x28, 0x09, 0x52, 0x1d, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65,
-	0x4f, 0x77, 0x6e, 0x65, 0x72, 0x4f, 0x69, 0x64, 0x63, 0x41, 0x63, 0x63, 0x65, 0x73, 0x73, 0x54,
-	0x6f, 0x6b, 0x65, 0x6e, 0x12, 0x41, 0x0a, 0x1d, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63,
-	0x65, 0x5f, 0x6f, 0x77, 0x6e, 0x65, 0x72, 0x5f, 0x73, 0x65, 0x73, 0x73, 0x69, 0x6f, 0x6e, 0x5f,
-	0x74, 0x6f, 0x6b, 0x65, 0x6e, 0x18, 0x0b, 0x20, 0x01, 0x28, 0x09, 0x52, 0x1a, 0x77, 0x6f, 0x72,
-	0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x4f, 0x77, 0x6e, 0x65, 0x72, 0x53, 0x65, 0x73, 0x73, 0x69,
-	0x6f, 0x6e, 0x54, 0x6f, 0x6b, 0x65, 0x6e, 0x12, 0x1f, 0x0a, 0x0b, 0x74, 0x65, 0x6d, 0x70, 0x6c,
-	0x61, 0x74, 0x65, 0x5f, 0x69, 0x64, 0x18, 0x0c, 0x20, 0x01, 0x28, 0x09, 0x52, 0x0a, 0x74, 0x65,
-	0x6d, 0x70, 0x6c, 0x61, 0x74, 0x65, 0x49, 0x64, 0x12, 0x30, 0x0a, 0x14, 0x77, 0x6f, 0x72, 0x6b,
-	0x73, 0x70, 0x61, 0x63, 0x65, 0x5f, 0x6f, 0x77, 0x6e, 0x65, 0x72, 0x5f, 0x6e, 0x61, 0x6d, 0x65,
-	0x18, 0x0d, 0x20, 0x01, 0x28, 0x09, 0x52, 0x12, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63,
-	0x65, 0x4f, 0x77, 0x6e, 0x65, 0x72, 0x4e, 0x61, 0x6d, 0x65, 0x12, 0x34, 0x0a, 0x16, 0x77, 0x6f,
-	0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x5f, 0x6f, 0x77, 0x6e, 0x65, 0x72, 0x5f, 0x67, 0x72,
-	0x6f, 0x75, 0x70, 0x73, 0x18, 0x0e, 0x20, 0x03, 0x28, 0x09, 0x52, 0x14, 0x77, 0x6f, 0x72, 0x6b,
-	0x73, 0x70, 0x61, 0x63, 0x65, 0x4f, 0x77, 0x6e, 0x65, 0x72, 0x47, 0x72, 0x6f, 0x75, 0x70, 0x73,
-	0x12, 0x42, 0x0a, 0x1e, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x5f, 0x6f, 0x77,
-	0x6e, 0x65, 0x72, 0x5f, 0x73, 0x73, 0x68, 0x5f, 0x70, 0x75, 0x62, 0x6c, 0x69, 0x63, 0x5f, 0x6b,
-	0x65, 0x79, 0x18, 0x0f, 0x20, 0x01, 0x28, 0x09, 0x52, 0x1a, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70,
-	0x61, 0x63, 0x65, 0x4f, 0x77, 0x6e, 0x65, 0x72, 0x53, 0x73, 0x68, 0x50, 0x75, 0x62, 0x6c, 0x69,
-	0x63, 0x4b, 0x65, 0x79, 0x12, 0x44, 0x0a, 0x1f, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63,
-	0x65, 0x5f, 0x6f, 0x77, 0x6e, 0x65, 0x72, 0x5f, 0x73, 0x73, 0x68, 0x5f, 0x70, 0x72, 0x69, 0x76,
-	0x61, 0x74, 0x65, 0x5f, 0x6b, 0x65, 0x79, 0x18, 0x10, 0x20, 0x01, 0x28, 0x09, 0x52, 0x1b, 0x77,
-	0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x4f, 0x77, 0x6e, 0x65, 0x72, 0x53, 0x73, 0x68,
-	0x50, 0x72, 0x69, 0x76, 0x61, 0x74, 0x65, 0x4b, 0x65, 0x79, 0x12, 0x2c, 0x0a, 0x12, 0x77, 0x6f,
-	0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x5f, 0x62, 0x75, 0x69, 0x6c, 0x64, 0x5f, 0x69, 0x64,
-	0x18, 0x11, 0x20, 0x01, 0x28, 0x09, 0x52, 0x10, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63,
-	0x65, 0x42, 0x75, 0x69, 0x6c, 0x64, 0x49, 0x64, 0x12, 0x3b, 0x0a, 0x1a, 0x77, 0x6f, 0x72, 0x6b,
-	0x73, 0x70, 0x61, 0x63, 0x65, 0x5f, 0x6f, 0x77, 0x6e, 0x65, 0x72, 0x5f, 0x6c, 0x6f, 0x67, 0x69,
-	0x6e, 0x5f, 0x74, 0x79, 0x70, 0x65, 0x18, 0x12, 0x20, 0x01, 0x28, 0x09, 0x52, 0x17, 0x77, 0x6f,
-	0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x4f, 0x77, 0x6e, 0x65, 0x72, 0x4c, 0x6f, 0x67, 0x69,
-	0x6e, 0x54, 0x79, 0x70, 0x65, 0x12, 0x4e, 0x0a, 0x1a, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61,
-	0x63, 0x65, 0x5f, 0x6f, 0x77, 0x6e, 0x65, 0x72, 0x5f, 0x72, 0x62, 0x61, 0x63, 0x5f, 0x72, 0x6f,
-	0x6c, 0x65, 0x73, 0x18, 0x13, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x11, 0x2e, 0x70, 0x72, 0x6f, 0x76,
-	0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x52, 0x6f, 0x6c, 0x65, 0x52, 0x17, 0x77, 0x6f,
-	0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x4f, 0x77, 0x6e, 0x65, 0x72, 0x52, 0x62, 0x61, 0x63,
-	0x52, 0x6f, 0x6c, 0x65, 0x73, 0x12, 0x6d, 0x0a, 0x1e, 0x70, 0x72, 0x65, 0x62, 0x75, 0x69, 0x6c,
-	0x74, 0x5f, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x5f, 0x62, 0x75, 0x69, 0x6c,
-	0x64, 0x5f, 0x73, 0x74, 0x61, 0x67, 0x65, 0x18, 0x14, 0x20, 0x01, 0x28, 0x0e, 0x32, 0x28, 0x2e,
-	0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x50, 0x72, 0x65, 0x62,
-	0x75, 0x69, 0x6c, 0x74, 0x57, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x42, 0x75, 0x69,
-	0x6c, 0x64, 0x53, 0x74, 0x61, 0x67, 0x65, 0x52, 0x1b, 0x70, 0x72, 0x65, 0x62, 0x75, 0x69, 0x6c,
-	0x74, 0x57, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x42, 0x75, 0x69, 0x6c, 0x64, 0x53,
-	0x74, 0x61, 0x67, 0x65, 0x12, 0x41, 0x0a, 0x1d, 0x72, 0x75, 0x6e, 0x6e, 0x69, 0x6e, 0x67, 0x5f,
-	0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x5f, 0x61, 0x67, 0x65, 0x6e, 0x74, 0x5f,
-	0x74, 0x6f, 0x6b, 0x65, 0x6e, 0x18, 0x15, 0x20, 0x01, 0x28, 0x09, 0x52, 0x1a, 0x72, 0x75, 0x6e,
-	0x6e, 0x69, 0x6e, 0x67, 0x57, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x41, 0x67, 0x65,
-	0x6e, 0x74, 0x54, 0x6f, 0x6b, 0x65, 0x6e, 0x22, 0x8a, 0x01, 0x0a, 0x06, 0x43, 0x6f, 0x6e, 0x66,
-	0x69, 0x67, 0x12, 0x36, 0x0a, 0x17, 0x74, 0x65, 0x6d, 0x70, 0x6c, 0x61, 0x74, 0x65, 0x5f, 0x73,
-	0x6f, 0x75, 0x72, 0x63, 0x65, 0x5f, 0x61, 0x72, 0x63, 0x68, 0x69, 0x76, 0x65, 0x18, 0x01, 0x20,
-	0x01, 0x28, 0x0c, 0x52, 0x15, 0x74, 0x65, 0x6d, 0x70, 0x6c, 0x61, 0x74, 0x65, 0x53, 0x6f, 0x75,
-	0x72, 0x63, 0x65, 0x41, 0x72, 0x63, 0x68, 0x69, 0x76, 0x65, 0x12, 0x14, 0x0a, 0x05, 0x73, 0x74,
-	0x61, 0x74, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0c, 0x52, 0x05, 0x73, 0x74, 0x61, 0x74, 0x65,
-	0x12, 0x32, 0x0a, 0x15, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x5f,
-	0x6c, 0x6f, 0x67, 0x5f, 0x6c, 0x65, 0x76, 0x65, 0x6c, 0x18, 0x03, 0x20, 0x01, 0x28, 0x09, 0x52,
-	0x13, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x4c, 0x6f, 0x67, 0x4c,
-	0x65, 0x76, 0x65, 0x6c, 0x22, 0x0e, 0x0a, 0x0c, 0x50, 0x61, 0x72, 0x73, 0x65, 0x52, 0x65, 0x71,
-	0x75, 0x65, 0x73, 0x74, 0x22, 0xa3, 0x02, 0x0a, 0x0d, 0x50, 0x61, 0x72, 0x73, 0x65, 0x43, 0x6f,
-	0x6d, 0x70, 0x6c, 0x65, 0x74, 0x65, 0x12, 0x14, 0x0a, 0x05, 0x65, 0x72, 0x72, 0x6f, 0x72, 0x18,
-	0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x05, 0x65, 0x72, 0x72, 0x6f, 0x72, 0x12, 0x4c, 0x0a, 0x12,
-	0x74, 0x65, 0x6d, 0x70, 0x6c, 0x61, 0x74, 0x65, 0x5f, 0x76, 0x61, 0x72, 0x69, 0x61, 0x62, 0x6c,
-	0x65, 0x73, 0x18, 0x02, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x1d, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69,
-	0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x54, 0x65, 0x6d, 0x70, 0x6c, 0x61, 0x74, 0x65, 0x56,
-	0x61, 0x72, 0x69, 0x61, 0x62, 0x6c, 0x65, 0x52, 0x11, 0x74, 0x65, 0x6d, 0x70, 0x6c, 0x61, 0x74,
-	0x65, 0x56, 0x61, 0x72, 0x69, 0x61, 0x62, 0x6c, 0x65, 0x73, 0x12, 0x16, 0x0a, 0x06, 0x72, 0x65,
-	0x61, 0x64, 0x6d, 0x65, 0x18, 0x03, 0x20, 0x01, 0x28, 0x0c, 0x52, 0x06, 0x72, 0x65, 0x61, 0x64,
-	0x6d, 0x65, 0x12, 0x54, 0x0a, 0x0e, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x5f,
-	0x74, 0x61, 0x67, 0x73, 0x18, 0x04, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x2d, 0x2e, 0x70, 0x72, 0x6f,
-	0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x50, 0x61, 0x72, 0x73, 0x65, 0x43, 0x6f,
-	0x6d, 0x70, 0x6c, 0x65, 0x74, 0x65, 0x2e, 0x57, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65,
-	0x54, 0x61, 0x67, 0x73, 0x45, 0x6e, 0x74, 0x72, 0x79, 0x52, 0x0d, 0x77, 0x6f, 0x72, 0x6b, 0x73,
-	0x70, 0x61, 0x63, 0x65, 0x54, 0x61, 0x67, 0x73, 0x1a, 0x40, 0x0a, 0x12, 0x57, 0x6f, 0x72, 0x6b,
-	0x73, 0x70, 0x61, 0x63, 0x65, 0x54, 0x61, 0x67, 0x73, 0x45, 0x6e, 0x74, 0x72, 0x79, 0x12, 0x10,
-	0x0a, 0x03, 0x6b, 0x65, 0x79, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x03, 0x6b, 0x65, 0x79,
-	0x12, 0x14, 0x0a, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x52,
-	0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x3a, 0x02, 0x38, 0x01, 0x22, 0xb5, 0x02, 0x0a, 0x0b, 0x50,
-	0x6c, 0x61, 0x6e, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x12, 0x31, 0x0a, 0x08, 0x6d, 0x65,
-	0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x15, 0x2e, 0x70,
-	0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x4d, 0x65, 0x74, 0x61, 0x64,
-	0x61, 0x74, 0x61, 0x52, 0x08, 0x6d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x12, 0x53, 0x0a,
-	0x15, 0x72, 0x69, 0x63, 0x68, 0x5f, 0x70, 0x61, 0x72, 0x61, 0x6d, 0x65, 0x74, 0x65, 0x72, 0x5f,
-	0x76, 0x61, 0x6c, 0x75, 0x65, 0x73, 0x18, 0x02, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x1f, 0x2e, 0x70,
-	0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x52, 0x69, 0x63, 0x68, 0x50,
-	0x61, 0x72, 0x61, 0x6d, 0x65, 0x74, 0x65, 0x72, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x52, 0x13, 0x72,
-	0x69, 0x63, 0x68, 0x50, 0x61, 0x72, 0x61, 0x6d, 0x65, 0x74, 0x65, 0x72, 0x56, 0x61, 0x6c, 0x75,
-	0x65, 0x73, 0x12, 0x43, 0x0a, 0x0f, 0x76, 0x61, 0x72, 0x69, 0x61, 0x62, 0x6c, 0x65, 0x5f, 0x76,
-	0x61, 0x6c, 0x75, 0x65, 0x73, 0x18, 0x03, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x1a, 0x2e, 0x70, 0x72,
-	0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x56, 0x61, 0x72, 0x69, 0x61, 0x62,
-	0x6c, 0x65, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x52, 0x0e, 0x76, 0x61, 0x72, 0x69, 0x61, 0x62, 0x6c,
-	0x65, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x73, 0x12, 0x59, 0x0a, 0x17, 0x65, 0x78, 0x74, 0x65, 0x72,
-	0x6e, 0x61, 0x6c, 0x5f, 0x61, 0x75, 0x74, 0x68, 0x5f, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x64, 0x65,
-	0x72, 0x73, 0x18, 0x04, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x21, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69,
-	0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x45, 0x78, 0x74, 0x65, 0x72, 0x6e, 0x61, 0x6c, 0x41,
-	0x75, 0x74, 0x68, 0x50, 0x72, 0x6f, 0x76, 0x69, 0x64, 0x65, 0x72, 0x52, 0x15, 0x65, 0x78, 0x74,
+	0x05, 0x6f, 0x72, 0x67, 0x49, 0x64, 0x22, 0x48, 0x0a, 0x15, 0x52, 0x75, 0x6e, 0x6e, 0x69, 0x6e,
+	0x67, 0x41, 0x67, 0x65, 0x6e, 0x74, 0x41, 0x75, 0x74, 0x68, 0x54, 0x6f, 0x6b, 0x65, 0x6e, 0x12,
+	0x19, 0x0a, 0x08, 0x61, 0x67, 0x65, 0x6e, 0x74, 0x5f, 0x69, 0x64, 0x18, 0x01, 0x20, 0x01, 0x28,
+	0x09, 0x52, 0x07, 0x61, 0x67, 0x65, 0x6e, 0x74, 0x49, 0x64, 0x12, 0x14, 0x0a, 0x05, 0x74, 0x6f,
+	0x6b, 0x65, 0x6e, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x52, 0x05, 0x74, 0x6f, 0x6b, 0x65, 0x6e,
+	0x22, 0xca, 0x09, 0x0a, 0x08, 0x4d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x12, 0x1b, 0x0a,
+	0x09, 0x63, 0x6f, 0x64, 0x65, 0x72, 0x5f, 0x75, 0x72, 0x6c, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09,
+	0x52, 0x08, 0x63, 0x6f, 0x64, 0x65, 0x72, 0x55, 0x72, 0x6c, 0x12, 0x53, 0x0a, 0x14, 0x77, 0x6f,
+	0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x5f, 0x74, 0x72, 0x61, 0x6e, 0x73, 0x69, 0x74, 0x69,
+	0x6f, 0x6e, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0e, 0x32, 0x20, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69,
+	0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x57, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65,
+	0x54, 0x72, 0x61, 0x6e, 0x73, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x52, 0x13, 0x77, 0x6f, 0x72, 0x6b,
+	0x73, 0x70, 0x61, 0x63, 0x65, 0x54, 0x72, 0x61, 0x6e, 0x73, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x12,
+	0x25, 0x0a, 0x0e, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x5f, 0x6e, 0x61, 0x6d,
+	0x65, 0x18, 0x03, 0x20, 0x01, 0x28, 0x09, 0x52, 0x0d, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61,
+	0x63, 0x65, 0x4e, 0x61, 0x6d, 0x65, 0x12, 0x27, 0x0a, 0x0f, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70,
+	0x61, 0x63, 0x65, 0x5f, 0x6f, 0x77, 0x6e, 0x65, 0x72, 0x18, 0x04, 0x20, 0x01, 0x28, 0x09, 0x52,
+	0x0e, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x4f, 0x77, 0x6e, 0x65, 0x72, 0x12,
+	0x21, 0x0a, 0x0c, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x5f, 0x69, 0x64, 0x18,
+	0x05, 0x20, 0x01, 0x28, 0x09, 0x52, 0x0b, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65,
+	0x49, 0x64, 0x12, 0x2c, 0x0a, 0x12, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x5f,
+	0x6f, 0x77, 0x6e, 0x65, 0x72, 0x5f, 0x69, 0x64, 0x18, 0x06, 0x20, 0x01, 0x28, 0x09, 0x52, 0x10,
+	0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x4f, 0x77, 0x6e, 0x65, 0x72, 0x49, 0x64,
+	0x12, 0x32, 0x0a, 0x15, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x5f, 0x6f, 0x77,
+	0x6e, 0x65, 0x72, 0x5f, 0x65, 0x6d, 0x61, 0x69, 0x6c, 0x18, 0x07, 0x20, 0x01, 0x28, 0x09, 0x52,
+	0x13, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x4f, 0x77, 0x6e, 0x65, 0x72, 0x45,
+	0x6d, 0x61, 0x69, 0x6c, 0x12, 0x23, 0x0a, 0x0d, 0x74, 0x65, 0x6d, 0x70, 0x6c, 0x61, 0x74, 0x65,
+	0x5f, 0x6e, 0x61, 0x6d, 0x65, 0x18, 0x08, 0x20, 0x01, 0x28, 0x09, 0x52, 0x0c, 0x74, 0x65, 0x6d,
+	0x70, 0x6c, 0x61, 0x74, 0x65, 0x4e, 0x61, 0x6d, 0x65, 0x12, 0x29, 0x0a, 0x10, 0x74, 0x65, 0x6d,
+	0x70, 0x6c, 0x61, 0x74, 0x65, 0x5f, 0x76, 0x65, 0x72, 0x73, 0x69, 0x6f, 0x6e, 0x18, 0x09, 0x20,
+	0x01, 0x28, 0x09, 0x52, 0x0f, 0x74, 0x65, 0x6d, 0x70, 0x6c, 0x61, 0x74, 0x65, 0x56, 0x65, 0x72,
+	0x73, 0x69, 0x6f, 0x6e, 0x12, 0x48, 0x0a, 0x21, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63,
+	0x65, 0x5f, 0x6f, 0x77, 0x6e, 0x65, 0x72, 0x5f, 0x6f, 0x69, 0x64, 0x63, 0x5f, 0x61, 0x63, 0x63,
+	0x65, 0x73, 0x73, 0x5f, 0x74, 0x6f, 0x6b, 0x65, 0x6e, 0x18, 0x0a, 0x20, 0x01, 0x28, 0x09, 0x52,
+	0x1d, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x4f, 0x77, 0x6e, 0x65, 0x72, 0x4f,
+	0x69, 0x64, 0x63, 0x41, 0x63, 0x63, 0x65, 0x73, 0x73, 0x54, 0x6f, 0x6b, 0x65, 0x6e, 0x12, 0x41,
+	0x0a, 0x1d, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x5f, 0x6f, 0x77, 0x6e, 0x65,
+	0x72, 0x5f, 0x73, 0x65, 0x73, 0x73, 0x69, 0x6f, 0x6e, 0x5f, 0x74, 0x6f, 0x6b, 0x65, 0x6e, 0x18,
+	0x0b, 0x20, 0x01, 0x28, 0x09, 0x52, 0x1a, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65,
+	0x4f, 0x77, 0x6e, 0x65, 0x72, 0x53, 0x65, 0x73, 0x73, 0x69, 0x6f, 0x6e, 0x54, 0x6f, 0x6b, 0x65,
+	0x6e, 0x12, 0x1f, 0x0a, 0x0b, 0x74, 0x65, 0x6d, 0x70, 0x6c, 0x61, 0x74, 0x65, 0x5f, 0x69, 0x64,
+	0x18, 0x0c, 0x20, 0x01, 0x28, 0x09, 0x52, 0x0a, 0x74, 0x65, 0x6d, 0x70, 0x6c, 0x61, 0x74, 0x65,
+	0x49, 0x64, 0x12, 0x30, 0x0a, 0x14, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x5f,
+	0x6f, 0x77, 0x6e, 0x65, 0x72, 0x5f, 0x6e, 0x61, 0x6d, 0x65, 0x18, 0x0d, 0x20, 0x01, 0x28, 0x09,
+	0x52, 0x12, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x4f, 0x77, 0x6e, 0x65, 0x72,
+	0x4e, 0x61, 0x6d, 0x65, 0x12, 0x34, 0x0a, 0x16, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63,
+	0x65, 0x5f, 0x6f, 0x77, 0x6e, 0x65, 0x72, 0x5f, 0x67, 0x72, 0x6f, 0x75, 0x70, 0x73, 0x18, 0x0e,
+	0x20, 0x03, 0x28, 0x09, 0x52, 0x14, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x4f,
+	0x77, 0x6e, 0x65, 0x72, 0x47, 0x72, 0x6f, 0x75, 0x70, 0x73, 0x12, 0x42, 0x0a, 0x1e, 0x77, 0x6f,
+	0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x5f, 0x6f, 0x77, 0x6e, 0x65, 0x72, 0x5f, 0x73, 0x73,
+	0x68, 0x5f, 0x70, 0x75, 0x62, 0x6c, 0x69, 0x63, 0x5f, 0x6b, 0x65, 0x79, 0x18, 0x0f, 0x20, 0x01,
+	0x28, 0x09, 0x52, 0x1a, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x4f, 0x77, 0x6e,
+	0x65, 0x72, 0x53, 0x73, 0x68, 0x50, 0x75, 0x62, 0x6c, 0x69, 0x63, 0x4b, 0x65, 0x79, 0x12, 0x44,
+	0x0a, 0x1f, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x5f, 0x6f, 0x77, 0x6e, 0x65,
+	0x72, 0x5f, 0x73, 0x73, 0x68, 0x5f, 0x70, 0x72, 0x69, 0x76, 0x61, 0x74, 0x65, 0x5f, 0x6b, 0x65,
+	0x79, 0x18, 0x10, 0x20, 0x01, 0x28, 0x09, 0x52, 0x1b, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61,
+	0x63, 0x65, 0x4f, 0x77, 0x6e, 0x65, 0x72, 0x53, 0x73, 0x68, 0x50, 0x72, 0x69, 0x76, 0x61, 0x74,
+	0x65, 0x4b, 0x65, 0x79, 0x12, 0x2c, 0x0a, 0x12, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63,
+	0x65, 0x5f, 0x62, 0x75, 0x69, 0x6c, 0x64, 0x5f, 0x69, 0x64, 0x18, 0x11, 0x20, 0x01, 0x28, 0x09,
+	0x52, 0x10, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x42, 0x75, 0x69, 0x6c, 0x64,
+	0x49, 0x64, 0x12, 0x3b, 0x0a, 0x1a, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x5f,
+	0x6f, 0x77, 0x6e, 0x65, 0x72, 0x5f, 0x6c, 0x6f, 0x67, 0x69, 0x6e, 0x5f, 0x74, 0x79, 0x70, 0x65,
+	0x18, 0x12, 0x20, 0x01, 0x28, 0x09, 0x52, 0x17, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63,
+	0x65, 0x4f, 0x77, 0x6e, 0x65, 0x72, 0x4c, 0x6f, 0x67, 0x69, 0x6e, 0x54, 0x79, 0x70, 0x65, 0x12,
+	0x4e, 0x0a, 0x1a, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x5f, 0x6f, 0x77, 0x6e,
+	0x65, 0x72, 0x5f, 0x72, 0x62, 0x61, 0x63, 0x5f, 0x72, 0x6f, 0x6c, 0x65, 0x73, 0x18, 0x13, 0x20,
+	0x03, 0x28, 0x0b, 0x32, 0x11, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65,
+	0x72, 0x2e, 0x52, 0x6f, 0x6c, 0x65, 0x52, 0x17, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63,
+	0x65, 0x4f, 0x77, 0x6e, 0x65, 0x72, 0x52, 0x62, 0x61, 0x63, 0x52, 0x6f, 0x6c, 0x65, 0x73, 0x12,
+	0x6d, 0x0a, 0x1e, 0x70, 0x72, 0x65, 0x62, 0x75, 0x69, 0x6c, 0x74, 0x5f, 0x77, 0x6f, 0x72, 0x6b,
+	0x73, 0x70, 0x61, 0x63, 0x65, 0x5f, 0x62, 0x75, 0x69, 0x6c, 0x64, 0x5f, 0x73, 0x74, 0x61, 0x67,
+	0x65, 0x18, 0x14, 0x20, 0x01, 0x28, 0x0e, 0x32, 0x28, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73,
+	0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x50, 0x72, 0x65, 0x62, 0x75, 0x69, 0x6c, 0x74, 0x57, 0x6f,
+	0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x42, 0x75, 0x69, 0x6c, 0x64, 0x53, 0x74, 0x61, 0x67,
+	0x65, 0x52, 0x1b, 0x70, 0x72, 0x65, 0x62, 0x75, 0x69, 0x6c, 0x74, 0x57, 0x6f, 0x72, 0x6b, 0x73,
+	0x70, 0x61, 0x63, 0x65, 0x42, 0x75, 0x69, 0x6c, 0x64, 0x53, 0x74, 0x61, 0x67, 0x65, 0x12, 0x5d,
+	0x0a, 0x19, 0x72, 0x75, 0x6e, 0x6e, 0x69, 0x6e, 0x67, 0x5f, 0x61, 0x67, 0x65, 0x6e, 0x74, 0x5f,
+	0x61, 0x75, 0x74, 0x68, 0x5f, 0x74, 0x6f, 0x6b, 0x65, 0x6e, 0x73, 0x18, 0x15, 0x20, 0x03, 0x28,
+	0x0b, 0x32, 0x22, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e,
+	0x52, 0x75, 0x6e, 0x6e, 0x69, 0x6e, 0x67, 0x41, 0x67, 0x65, 0x6e, 0x74, 0x41, 0x75, 0x74, 0x68,
+	0x54, 0x6f, 0x6b, 0x65, 0x6e, 0x52, 0x16, 0x72, 0x75, 0x6e, 0x6e, 0x69, 0x6e, 0x67, 0x41, 0x67,
+	0x65, 0x6e, 0x74, 0x41, 0x75, 0x74, 0x68, 0x54, 0x6f, 0x6b, 0x65, 0x6e, 0x73, 0x22, 0x8a, 0x01,
+	0x0a, 0x06, 0x43, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x12, 0x36, 0x0a, 0x17, 0x74, 0x65, 0x6d, 0x70,
+	0x6c, 0x61, 0x74, 0x65, 0x5f, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x5f, 0x61, 0x72, 0x63, 0x68,
+	0x69, 0x76, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0c, 0x52, 0x15, 0x74, 0x65, 0x6d, 0x70, 0x6c,
+	0x61, 0x74, 0x65, 0x53, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x41, 0x72, 0x63, 0x68, 0x69, 0x76, 0x65,
+	0x12, 0x14, 0x0a, 0x05, 0x73, 0x74, 0x61, 0x74, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0c, 0x52,
+	0x05, 0x73, 0x74, 0x61, 0x74, 0x65, 0x12, 0x32, 0x0a, 0x15, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73,
+	0x69, 0x6f, 0x6e, 0x65, 0x72, 0x5f, 0x6c, 0x6f, 0x67, 0x5f, 0x6c, 0x65, 0x76, 0x65, 0x6c, 0x18,
+	0x03, 0x20, 0x01, 0x28, 0x09, 0x52, 0x13, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e,
+	0x65, 0x72, 0x4c, 0x6f, 0x67, 0x4c, 0x65, 0x76, 0x65, 0x6c, 0x22, 0x0e, 0x0a, 0x0c, 0x50, 0x61,
+	0x72, 0x73, 0x65, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x22, 0xa3, 0x02, 0x0a, 0x0d, 0x50,
+	0x61, 0x72, 0x73, 0x65, 0x43, 0x6f, 0x6d, 0x70, 0x6c, 0x65, 0x74, 0x65, 0x12, 0x14, 0x0a, 0x05,
+	0x65, 0x72, 0x72, 0x6f, 0x72, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x05, 0x65, 0x72, 0x72,
+	0x6f, 0x72, 0x12, 0x4c, 0x0a, 0x12, 0x74, 0x65, 0x6d, 0x70, 0x6c, 0x61, 0x74, 0x65, 0x5f, 0x76,
+	0x61, 0x72, 0x69, 0x61, 0x62, 0x6c, 0x65, 0x73, 0x18, 0x02, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x1d,
+	0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x54, 0x65, 0x6d,
+	0x70, 0x6c, 0x61, 0x74, 0x65, 0x56, 0x61, 0x72, 0x69, 0x61, 0x62, 0x6c, 0x65, 0x52, 0x11, 0x74,
+	0x65, 0x6d, 0x70, 0x6c, 0x61, 0x74, 0x65, 0x56, 0x61, 0x72, 0x69, 0x61, 0x62, 0x6c, 0x65, 0x73,
+	0x12, 0x16, 0x0a, 0x06, 0x72, 0x65, 0x61, 0x64, 0x6d, 0x65, 0x18, 0x03, 0x20, 0x01, 0x28, 0x0c,
+	0x52, 0x06, 0x72, 0x65, 0x61, 0x64, 0x6d, 0x65, 0x12, 0x54, 0x0a, 0x0e, 0x77, 0x6f, 0x72, 0x6b,
+	0x73, 0x70, 0x61, 0x63, 0x65, 0x5f, 0x74, 0x61, 0x67, 0x73, 0x18, 0x04, 0x20, 0x03, 0x28, 0x0b,
+	0x32, 0x2d, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x50,
+	0x61, 0x72, 0x73, 0x65, 0x43, 0x6f, 0x6d, 0x70, 0x6c, 0x65, 0x74, 0x65, 0x2e, 0x57, 0x6f, 0x72,
+	0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x54, 0x61, 0x67, 0x73, 0x45, 0x6e, 0x74, 0x72, 0x79, 0x52,
+	0x0d, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x54, 0x61, 0x67, 0x73, 0x1a, 0x40,
+	0x0a, 0x12, 0x57, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x54, 0x61, 0x67, 0x73, 0x45,
+	0x6e, 0x74, 0x72, 0x79, 0x12, 0x10, 0x0a, 0x03, 0x6b, 0x65, 0x79, 0x18, 0x01, 0x20, 0x01, 0x28,
+	0x09, 0x52, 0x03, 0x6b, 0x65, 0x79, 0x12, 0x14, 0x0a, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x18,
+	0x02, 0x20, 0x01, 0x28, 0x09, 0x52, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x3a, 0x02, 0x38, 0x01,
+	0x22, 0xb5, 0x02, 0x0a, 0x0b, 0x50, 0x6c, 0x61, 0x6e, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74,
+	0x12, 0x31, 0x0a, 0x08, 0x6d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x18, 0x01, 0x20, 0x01,
+	0x28, 0x0b, 0x32, 0x15, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72,
+	0x2e, 0x4d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x52, 0x08, 0x6d, 0x65, 0x74, 0x61, 0x64,
+	0x61, 0x74, 0x61, 0x12, 0x53, 0x0a, 0x15, 0x72, 0x69, 0x63, 0x68, 0x5f, 0x70, 0x61, 0x72, 0x61,
+	0x6d, 0x65, 0x74, 0x65, 0x72, 0x5f, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x73, 0x18, 0x02, 0x20, 0x03,
+	0x28, 0x0b, 0x32, 0x1f, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72,
+	0x2e, 0x52, 0x69, 0x63, 0x68, 0x50, 0x61, 0x72, 0x61, 0x6d, 0x65, 0x74, 0x65, 0x72, 0x56, 0x61,
+	0x6c, 0x75, 0x65, 0x52, 0x13, 0x72, 0x69, 0x63, 0x68, 0x50, 0x61, 0x72, 0x61, 0x6d, 0x65, 0x74,
+	0x65, 0x72, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x73, 0x12, 0x43, 0x0a, 0x0f, 0x76, 0x61, 0x72, 0x69,
+	0x61, 0x62, 0x6c, 0x65, 0x5f, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x73, 0x18, 0x03, 0x20, 0x03, 0x28,
+	0x0b, 0x32, 0x1a, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e,
+	0x56, 0x61, 0x72, 0x69, 0x61, 0x62, 0x6c, 0x65, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x52, 0x0e, 0x76,
+	0x61, 0x72, 0x69, 0x61, 0x62, 0x6c, 0x65, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x73, 0x12, 0x59, 0x0a,
+	0x17, 0x65, 0x78, 0x74, 0x65, 0x72, 0x6e, 0x61, 0x6c, 0x5f, 0x61, 0x75, 0x74, 0x68, 0x5f, 0x70,
+	0x72, 0x6f, 0x76, 0x69, 0x64, 0x65, 0x72, 0x73, 0x18, 0x04, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x21,
+	0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x45, 0x78, 0x74,
 	0x65, 0x72, 0x6e, 0x61, 0x6c, 0x41, 0x75, 0x74, 0x68, 0x50, 0x72, 0x6f, 0x76, 0x69, 0x64, 0x65,
-	0x72, 0x73, 0x22, 0x99, 0x03, 0x0a, 0x0c, 0x50, 0x6c, 0x61, 0x6e, 0x43, 0x6f, 0x6d, 0x70, 0x6c,
-	0x65, 0x74, 0x65, 0x12, 0x14, 0x0a, 0x05, 0x65, 0x72, 0x72, 0x6f, 0x72, 0x18, 0x01, 0x20, 0x01,
-	0x28, 0x09, 0x52, 0x05, 0x65, 0x72, 0x72, 0x6f, 0x72, 0x12, 0x33, 0x0a, 0x09, 0x72, 0x65, 0x73,
-	0x6f, 0x75, 0x72, 0x63, 0x65, 0x73, 0x18, 0x02, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x15, 0x2e, 0x70,
-	0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x52, 0x65, 0x73, 0x6f, 0x75,
-	0x72, 0x63, 0x65, 0x52, 0x09, 0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x73, 0x12, 0x3a,
-	0x0a, 0x0a, 0x70, 0x61, 0x72, 0x61, 0x6d, 0x65, 0x74, 0x65, 0x72, 0x73, 0x18, 0x03, 0x20, 0x03,
-	0x28, 0x0b, 0x32, 0x1a, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72,
-	0x2e, 0x52, 0x69, 0x63, 0x68, 0x50, 0x61, 0x72, 0x61, 0x6d, 0x65, 0x74, 0x65, 0x72, 0x52, 0x0a,
-	0x70, 0x61, 0x72, 0x61, 0x6d, 0x65, 0x74, 0x65, 0x72, 0x73, 0x12, 0x61, 0x0a, 0x17, 0x65, 0x78,
-	0x74, 0x65, 0x72, 0x6e, 0x61, 0x6c, 0x5f, 0x61, 0x75, 0x74, 0x68, 0x5f, 0x70, 0x72, 0x6f, 0x76,
-	0x69, 0x64, 0x65, 0x72, 0x73, 0x18, 0x04, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x29, 0x2e, 0x70, 0x72,
-	0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x45, 0x78, 0x74, 0x65, 0x72, 0x6e,
-	0x61, 0x6c, 0x41, 0x75, 0x74, 0x68, 0x50, 0x72, 0x6f, 0x76, 0x69, 0x64, 0x65, 0x72, 0x52, 0x65,
-	0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x52, 0x15, 0x65, 0x78, 0x74, 0x65, 0x72, 0x6e, 0x61, 0x6c,
-	0x41, 0x75, 0x74, 0x68, 0x50, 0x72, 0x6f, 0x76, 0x69, 0x64, 0x65, 0x72, 0x73, 0x12, 0x2d, 0x0a,
-	0x07, 0x74, 0x69, 0x6d, 0x69, 0x6e, 0x67, 0x73, 0x18, 0x06, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x13,
-	0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x54, 0x69, 0x6d,
-	0x69, 0x6e, 0x67, 0x52, 0x07, 0x74, 0x69, 0x6d, 0x69, 0x6e, 0x67, 0x73, 0x12, 0x2d, 0x0a, 0x07,
-	0x6d, 0x6f, 0x64, 0x75, 0x6c, 0x65, 0x73, 0x18, 0x07, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x13, 0x2e,
-	0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x4d, 0x6f, 0x64, 0x75,
-	0x6c, 0x65, 0x52, 0x07, 0x6d, 0x6f, 0x64, 0x75, 0x6c, 0x65, 0x73, 0x12, 0x2d, 0x0a, 0x07, 0x70,
-	0x72, 0x65, 0x73, 0x65, 0x74, 0x73, 0x18, 0x08, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x13, 0x2e, 0x70,
-	0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x50, 0x72, 0x65, 0x73, 0x65,
-	0x74, 0x52, 0x07, 0x70, 0x72, 0x65, 0x73, 0x65, 0x74, 0x73, 0x12, 0x12, 0x0a, 0x04, 0x70, 0x6c,
-	0x61, 0x6e, 0x18, 0x09, 0x20, 0x01, 0x28, 0x0c, 0x52, 0x04, 0x70, 0x6c, 0x61, 0x6e, 0x22, 0x41,
-	0x0a, 0x0c, 0x41, 0x70, 0x70, 0x6c, 0x79, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x12, 0x31,
-	0x0a, 0x08, 0x6d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b,
-	0x32, 0x15, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x4d,
-	0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x52, 0x08, 0x6d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74,
-	0x61, 0x22, 0xbe, 0x02, 0x0a, 0x0d, 0x41, 0x70, 0x70, 0x6c, 0x79, 0x43, 0x6f, 0x6d, 0x70, 0x6c,
-	0x65, 0x74, 0x65, 0x12, 0x14, 0x0a, 0x05, 0x73, 0x74, 0x61, 0x74, 0x65, 0x18, 0x01, 0x20, 0x01,
-	0x28, 0x0c, 0x52, 0x05, 0x73, 0x74, 0x61, 0x74, 0x65, 0x12, 0x14, 0x0a, 0x05, 0x65, 0x72, 0x72,
-	0x6f, 0x72, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x52, 0x05, 0x65, 0x72, 0x72, 0x6f, 0x72, 0x12,
-	0x33, 0x0a, 0x09, 0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x73, 0x18, 0x03, 0x20, 0x03,
+	0x72, 0x52, 0x15, 0x65, 0x78, 0x74, 0x65, 0x72, 0x6e, 0x61, 0x6c, 0x41, 0x75, 0x74, 0x68, 0x50,
+	0x72, 0x6f, 0x76, 0x69, 0x64, 0x65, 0x72, 0x73, 0x22, 0x99, 0x03, 0x0a, 0x0c, 0x50, 0x6c, 0x61,
+	0x6e, 0x43, 0x6f, 0x6d, 0x70, 0x6c, 0x65, 0x74, 0x65, 0x12, 0x14, 0x0a, 0x05, 0x65, 0x72, 0x72,
+	0x6f, 0x72, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x05, 0x65, 0x72, 0x72, 0x6f, 0x72, 0x12,
+	0x33, 0x0a, 0x09, 0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x73, 0x18, 0x02, 0x20, 0x03,
 	0x28, 0x0b, 0x32, 0x15, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72,
 	0x2e, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x52, 0x09, 0x72, 0x65, 0x73, 0x6f, 0x75,
 	0x72, 0x63, 0x65, 0x73, 0x12, 0x3a, 0x0a, 0x0a, 0x70, 0x61, 0x72, 0x61, 0x6d, 0x65, 0x74, 0x65,
-	0x72, 0x73, 0x18, 0x04, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x1a, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69,
+	0x72, 0x73, 0x18, 0x03, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x1a, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69,
 	0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x52, 0x69, 0x63, 0x68, 0x50, 0x61, 0x72, 0x61, 0x6d,
 	0x65, 0x74, 0x65, 0x72, 0x52, 0x0a, 0x70, 0x61, 0x72, 0x61, 0x6d, 0x65, 0x74, 0x65, 0x72, 0x73,
 	0x12, 0x61, 0x0a, 0x17, 0x65, 0x78, 0x74, 0x65, 0x72, 0x6e, 0x61, 0x6c, 0x5f, 0x61, 0x75, 0x74,
-	0x68, 0x5f, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x64, 0x65, 0x72, 0x73, 0x18, 0x05, 0x20, 0x03, 0x28,
+	0x68, 0x5f, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x64, 0x65, 0x72, 0x73, 0x18, 0x04, 0x20, 0x03, 0x28,
 	0x0b, 0x32, 0x29, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e,
 	0x45, 0x78, 0x74, 0x65, 0x72, 0x6e, 0x61, 0x6c, 0x41, 0x75, 0x74, 0x68, 0x50, 0x72, 0x6f, 0x76,
 	0x69, 0x64, 0x65, 0x72, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x52, 0x15, 0x65, 0x78,
@@ -4026,84 +4056,116 @@ var file_provisionersdk_proto_provisioner_proto_rawDesc = []byte{
 	0x65, 0x72, 0x73, 0x12, 0x2d, 0x0a, 0x07, 0x74, 0x69, 0x6d, 0x69, 0x6e, 0x67, 0x73, 0x18, 0x06,
 	0x20, 0x03, 0x28, 0x0b, 0x32, 0x13, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e,
 	0x65, 0x72, 0x2e, 0x54, 0x69, 0x6d, 0x69, 0x6e, 0x67, 0x52, 0x07, 0x74, 0x69, 0x6d, 0x69, 0x6e,
-	0x67, 0x73, 0x22, 0xfa, 0x01, 0x0a, 0x06, 0x54, 0x69, 0x6d, 0x69, 0x6e, 0x67, 0x12, 0x30, 0x0a,
-	0x05, 0x73, 0x74, 0x61, 0x72, 0x74, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1a, 0x2e, 0x67,
-	0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x54,
-	0x69, 0x6d, 0x65, 0x73, 0x74, 0x61, 0x6d, 0x70, 0x52, 0x05, 0x73, 0x74, 0x61, 0x72, 0x74, 0x12,
-	0x2c, 0x0a, 0x03, 0x65, 0x6e, 0x64, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1a, 0x2e, 0x67,
-	0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x54,
-	0x69, 0x6d, 0x65, 0x73, 0x74, 0x61, 0x6d, 0x70, 0x52, 0x03, 0x65, 0x6e, 0x64, 0x12, 0x16, 0x0a,
-	0x06, 0x61, 0x63, 0x74, 0x69, 0x6f, 0x6e, 0x18, 0x03, 0x20, 0x01, 0x28, 0x09, 0x52, 0x06, 0x61,
-	0x63, 0x74, 0x69, 0x6f, 0x6e, 0x12, 0x16, 0x0a, 0x06, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x18,
-	0x04, 0x20, 0x01, 0x28, 0x09, 0x52, 0x06, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x12, 0x1a, 0x0a,
-	0x08, 0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x18, 0x05, 0x20, 0x01, 0x28, 0x09, 0x52,
-	0x08, 0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x12, 0x14, 0x0a, 0x05, 0x73, 0x74, 0x61,
-	0x67, 0x65, 0x18, 0x06, 0x20, 0x01, 0x28, 0x09, 0x52, 0x05, 0x73, 0x74, 0x61, 0x67, 0x65, 0x12,
-	0x2e, 0x0a, 0x05, 0x73, 0x74, 0x61, 0x74, 0x65, 0x18, 0x07, 0x20, 0x01, 0x28, 0x0e, 0x32, 0x18,
-	0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x54, 0x69, 0x6d,
-	0x69, 0x6e, 0x67, 0x53, 0x74, 0x61, 0x74, 0x65, 0x52, 0x05, 0x73, 0x74, 0x61, 0x74, 0x65, 0x22,
-	0x0f, 0x0a, 0x0d, 0x43, 0x61, 0x6e, 0x63, 0x65, 0x6c, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74,
-	0x22, 0x8c, 0x02, 0x0a, 0x07, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x12, 0x2d, 0x0a, 0x06,
-	0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x13, 0x2e, 0x70,
-	0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x43, 0x6f, 0x6e, 0x66, 0x69,
-	0x67, 0x48, 0x00, 0x52, 0x06, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x12, 0x31, 0x0a, 0x05, 0x70,
-	0x61, 0x72, 0x73, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x19, 0x2e, 0x70, 0x72, 0x6f,
-	0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x50, 0x61, 0x72, 0x73, 0x65, 0x52, 0x65,
-	0x71, 0x75, 0x65, 0x73, 0x74, 0x48, 0x00, 0x52, 0x05, 0x70, 0x61, 0x72, 0x73, 0x65, 0x12, 0x2e,
-	0x0a, 0x04, 0x70, 0x6c, 0x61, 0x6e, 0x18, 0x03, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x18, 0x2e, 0x70,
-	0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x50, 0x6c, 0x61, 0x6e, 0x52,
-	0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x48, 0x00, 0x52, 0x04, 0x70, 0x6c, 0x61, 0x6e, 0x12, 0x31,
-	0x0a, 0x05, 0x61, 0x70, 0x70, 0x6c, 0x79, 0x18, 0x04, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x19, 0x2e,
-	0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x41, 0x70, 0x70, 0x6c,
-	0x79, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x48, 0x00, 0x52, 0x05, 0x61, 0x70, 0x70, 0x6c,
-	0x79, 0x12, 0x34, 0x0a, 0x06, 0x63, 0x61, 0x6e, 0x63, 0x65, 0x6c, 0x18, 0x05, 0x20, 0x01, 0x28,
-	0x0b, 0x32, 0x1a, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e,
-	0x43, 0x61, 0x6e, 0x63, 0x65, 0x6c, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x48, 0x00, 0x52,
-	0x06, 0x63, 0x61, 0x6e, 0x63, 0x65, 0x6c, 0x42, 0x06, 0x0a, 0x04, 0x74, 0x79, 0x70, 0x65, 0x22,
-	0xd1, 0x01, 0x0a, 0x08, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x12, 0x24, 0x0a, 0x03,
-	0x6c, 0x6f, 0x67, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x10, 0x2e, 0x70, 0x72, 0x6f, 0x76,
-	0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x4c, 0x6f, 0x67, 0x48, 0x00, 0x52, 0x03, 0x6c,
-	0x6f, 0x67, 0x12, 0x32, 0x0a, 0x05, 0x70, 0x61, 0x72, 0x73, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28,
-	0x0b, 0x32, 0x1a, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e,
-	0x50, 0x61, 0x72, 0x73, 0x65, 0x43, 0x6f, 0x6d, 0x70, 0x6c, 0x65, 0x74, 0x65, 0x48, 0x00, 0x52,
-	0x05, 0x70, 0x61, 0x72, 0x73, 0x65, 0x12, 0x2f, 0x0a, 0x04, 0x70, 0x6c, 0x61, 0x6e, 0x18, 0x03,
-	0x20, 0x01, 0x28, 0x0b, 0x32, 0x19, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e,
-	0x65, 0x72, 0x2e, 0x50, 0x6c, 0x61, 0x6e, 0x43, 0x6f, 0x6d, 0x70, 0x6c, 0x65, 0x74, 0x65, 0x48,
-	0x00, 0x52, 0x04, 0x70, 0x6c, 0x61, 0x6e, 0x12, 0x32, 0x0a, 0x05, 0x61, 0x70, 0x70, 0x6c, 0x79,
-	0x18, 0x04, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1a, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69,
-	0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x41, 0x70, 0x70, 0x6c, 0x79, 0x43, 0x6f, 0x6d, 0x70, 0x6c, 0x65,
-	0x74, 0x65, 0x48, 0x00, 0x52, 0x05, 0x61, 0x70, 0x70, 0x6c, 0x79, 0x42, 0x06, 0x0a, 0x04, 0x74,
-	0x79, 0x70, 0x65, 0x2a, 0x3f, 0x0a, 0x08, 0x4c, 0x6f, 0x67, 0x4c, 0x65, 0x76, 0x65, 0x6c, 0x12,
-	0x09, 0x0a, 0x05, 0x54, 0x52, 0x41, 0x43, 0x45, 0x10, 0x00, 0x12, 0x09, 0x0a, 0x05, 0x44, 0x45,
-	0x42, 0x55, 0x47, 0x10, 0x01, 0x12, 0x08, 0x0a, 0x04, 0x49, 0x4e, 0x46, 0x4f, 0x10, 0x02, 0x12,
-	0x08, 0x0a, 0x04, 0x57, 0x41, 0x52, 0x4e, 0x10, 0x03, 0x12, 0x09, 0x0a, 0x05, 0x45, 0x52, 0x52,
-	0x4f, 0x52, 0x10, 0x04, 0x2a, 0x3b, 0x0a, 0x0f, 0x41, 0x70, 0x70, 0x53, 0x68, 0x61, 0x72, 0x69,
-	0x6e, 0x67, 0x4c, 0x65, 0x76, 0x65, 0x6c, 0x12, 0x09, 0x0a, 0x05, 0x4f, 0x57, 0x4e, 0x45, 0x52,
-	0x10, 0x00, 0x12, 0x11, 0x0a, 0x0d, 0x41, 0x55, 0x54, 0x48, 0x45, 0x4e, 0x54, 0x49, 0x43, 0x41,
-	0x54, 0x45, 0x44, 0x10, 0x01, 0x12, 0x0a, 0x0a, 0x06, 0x50, 0x55, 0x42, 0x4c, 0x49, 0x43, 0x10,
-	0x02, 0x2a, 0x35, 0x0a, 0x09, 0x41, 0x70, 0x70, 0x4f, 0x70, 0x65, 0x6e, 0x49, 0x6e, 0x12, 0x0e,
-	0x0a, 0x06, 0x57, 0x49, 0x4e, 0x44, 0x4f, 0x57, 0x10, 0x00, 0x1a, 0x02, 0x08, 0x01, 0x12, 0x0f,
-	0x0a, 0x0b, 0x53, 0x4c, 0x49, 0x4d, 0x5f, 0x57, 0x49, 0x4e, 0x44, 0x4f, 0x57, 0x10, 0x01, 0x12,
-	0x07, 0x0a, 0x03, 0x54, 0x41, 0x42, 0x10, 0x02, 0x2a, 0x37, 0x0a, 0x13, 0x57, 0x6f, 0x72, 0x6b,
-	0x73, 0x70, 0x61, 0x63, 0x65, 0x54, 0x72, 0x61, 0x6e, 0x73, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x12,
-	0x09, 0x0a, 0x05, 0x53, 0x54, 0x41, 0x52, 0x54, 0x10, 0x00, 0x12, 0x08, 0x0a, 0x04, 0x53, 0x54,
-	0x4f, 0x50, 0x10, 0x01, 0x12, 0x0b, 0x0a, 0x07, 0x44, 0x45, 0x53, 0x54, 0x52, 0x4f, 0x59, 0x10,
-	0x02, 0x2a, 0x3e, 0x0a, 0x1b, 0x50, 0x72, 0x65, 0x62, 0x75, 0x69, 0x6c, 0x74, 0x57, 0x6f, 0x72,
-	0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x42, 0x75, 0x69, 0x6c, 0x64, 0x53, 0x74, 0x61, 0x67, 0x65,
-	0x12, 0x08, 0x0a, 0x04, 0x4e, 0x4f, 0x4e, 0x45, 0x10, 0x00, 0x12, 0x0a, 0x0a, 0x06, 0x43, 0x52,
-	0x45, 0x41, 0x54, 0x45, 0x10, 0x01, 0x12, 0x09, 0x0a, 0x05, 0x43, 0x4c, 0x41, 0x49, 0x4d, 0x10,
-	0x02, 0x2a, 0x35, 0x0a, 0x0b, 0x54, 0x69, 0x6d, 0x69, 0x6e, 0x67, 0x53, 0x74, 0x61, 0x74, 0x65,
-	0x12, 0x0b, 0x0a, 0x07, 0x53, 0x54, 0x41, 0x52, 0x54, 0x45, 0x44, 0x10, 0x00, 0x12, 0x0d, 0x0a,
-	0x09, 0x43, 0x4f, 0x4d, 0x50, 0x4c, 0x45, 0x54, 0x45, 0x44, 0x10, 0x01, 0x12, 0x0a, 0x0a, 0x06,
-	0x46, 0x41, 0x49, 0x4c, 0x45, 0x44, 0x10, 0x02, 0x32, 0x49, 0x0a, 0x0b, 0x50, 0x72, 0x6f, 0x76,
-	0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x12, 0x3a, 0x0a, 0x07, 0x53, 0x65, 0x73, 0x73, 0x69,
-	0x6f, 0x6e, 0x12, 0x14, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72,
-	0x2e, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x1a, 0x15, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69,
-	0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x28,
-	0x01, 0x30, 0x01, 0x42, 0x30, 0x5a, 0x2e, 0x67, 0x69, 0x74, 0x68, 0x75, 0x62, 0x2e, 0x63, 0x6f,
-	0x6d, 0x2f, 0x63, 0x6f, 0x64, 0x65, 0x72, 0x2f, 0x63, 0x6f, 0x64, 0x65, 0x72, 0x2f, 0x76, 0x32,
-	0x2f, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x73, 0x64, 0x6b, 0x2f,
-	0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
+	0x67, 0x73, 0x12, 0x2d, 0x0a, 0x07, 0x6d, 0x6f, 0x64, 0x75, 0x6c, 0x65, 0x73, 0x18, 0x07, 0x20,
+	0x03, 0x28, 0x0b, 0x32, 0x13, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65,
+	0x72, 0x2e, 0x4d, 0x6f, 0x64, 0x75, 0x6c, 0x65, 0x52, 0x07, 0x6d, 0x6f, 0x64, 0x75, 0x6c, 0x65,
+	0x73, 0x12, 0x2d, 0x0a, 0x07, 0x70, 0x72, 0x65, 0x73, 0x65, 0x74, 0x73, 0x18, 0x08, 0x20, 0x03,
+	0x28, 0x0b, 0x32, 0x13, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72,
+	0x2e, 0x50, 0x72, 0x65, 0x73, 0x65, 0x74, 0x52, 0x07, 0x70, 0x72, 0x65, 0x73, 0x65, 0x74, 0x73,
+	0x12, 0x12, 0x0a, 0x04, 0x70, 0x6c, 0x61, 0x6e, 0x18, 0x09, 0x20, 0x01, 0x28, 0x0c, 0x52, 0x04,
+	0x70, 0x6c, 0x61, 0x6e, 0x22, 0x41, 0x0a, 0x0c, 0x41, 0x70, 0x70, 0x6c, 0x79, 0x52, 0x65, 0x71,
+	0x75, 0x65, 0x73, 0x74, 0x12, 0x31, 0x0a, 0x08, 0x6d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61,
+	0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x15, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69,
+	0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x4d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x52, 0x08, 0x6d,
+	0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x22, 0xbe, 0x02, 0x0a, 0x0d, 0x41, 0x70, 0x70, 0x6c,
+	0x79, 0x43, 0x6f, 0x6d, 0x70, 0x6c, 0x65, 0x74, 0x65, 0x12, 0x14, 0x0a, 0x05, 0x73, 0x74, 0x61,
+	0x74, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0c, 0x52, 0x05, 0x73, 0x74, 0x61, 0x74, 0x65, 0x12,
+	0x14, 0x0a, 0x05, 0x65, 0x72, 0x72, 0x6f, 0x72, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x52, 0x05,
+	0x65, 0x72, 0x72, 0x6f, 0x72, 0x12, 0x33, 0x0a, 0x09, 0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63,
+	0x65, 0x73, 0x18, 0x03, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x15, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69,
+	0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x52,
+	0x09, 0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x73, 0x12, 0x3a, 0x0a, 0x0a, 0x70, 0x61,
+	0x72, 0x61, 0x6d, 0x65, 0x74, 0x65, 0x72, 0x73, 0x18, 0x04, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x1a,
+	0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x52, 0x69, 0x63,
+	0x68, 0x50, 0x61, 0x72, 0x61, 0x6d, 0x65, 0x74, 0x65, 0x72, 0x52, 0x0a, 0x70, 0x61, 0x72, 0x61,
+	0x6d, 0x65, 0x74, 0x65, 0x72, 0x73, 0x12, 0x61, 0x0a, 0x17, 0x65, 0x78, 0x74, 0x65, 0x72, 0x6e,
+	0x61, 0x6c, 0x5f, 0x61, 0x75, 0x74, 0x68, 0x5f, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x64, 0x65, 0x72,
+	0x73, 0x18, 0x05, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x29, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73,
+	0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x45, 0x78, 0x74, 0x65, 0x72, 0x6e, 0x61, 0x6c, 0x41, 0x75,
+	0x74, 0x68, 0x50, 0x72, 0x6f, 0x76, 0x69, 0x64, 0x65, 0x72, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72,
+	0x63, 0x65, 0x52, 0x15, 0x65, 0x78, 0x74, 0x65, 0x72, 0x6e, 0x61, 0x6c, 0x41, 0x75, 0x74, 0x68,
+	0x50, 0x72, 0x6f, 0x76, 0x69, 0x64, 0x65, 0x72, 0x73, 0x12, 0x2d, 0x0a, 0x07, 0x74, 0x69, 0x6d,
+	0x69, 0x6e, 0x67, 0x73, 0x18, 0x06, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x13, 0x2e, 0x70, 0x72, 0x6f,
+	0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x54, 0x69, 0x6d, 0x69, 0x6e, 0x67, 0x52,
+	0x07, 0x74, 0x69, 0x6d, 0x69, 0x6e, 0x67, 0x73, 0x22, 0xfa, 0x01, 0x0a, 0x06, 0x54, 0x69, 0x6d,
+	0x69, 0x6e, 0x67, 0x12, 0x30, 0x0a, 0x05, 0x73, 0x74, 0x61, 0x72, 0x74, 0x18, 0x01, 0x20, 0x01,
+	0x28, 0x0b, 0x32, 0x1a, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74,
+	0x6f, 0x62, 0x75, 0x66, 0x2e, 0x54, 0x69, 0x6d, 0x65, 0x73, 0x74, 0x61, 0x6d, 0x70, 0x52, 0x05,
+	0x73, 0x74, 0x61, 0x72, 0x74, 0x12, 0x2c, 0x0a, 0x03, 0x65, 0x6e, 0x64, 0x18, 0x02, 0x20, 0x01,
+	0x28, 0x0b, 0x32, 0x1a, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74,
+	0x6f, 0x62, 0x75, 0x66, 0x2e, 0x54, 0x69, 0x6d, 0x65, 0x73, 0x74, 0x61, 0x6d, 0x70, 0x52, 0x03,
+	0x65, 0x6e, 0x64, 0x12, 0x16, 0x0a, 0x06, 0x61, 0x63, 0x74, 0x69, 0x6f, 0x6e, 0x18, 0x03, 0x20,
+	0x01, 0x28, 0x09, 0x52, 0x06, 0x61, 0x63, 0x74, 0x69, 0x6f, 0x6e, 0x12, 0x16, 0x0a, 0x06, 0x73,
+	0x6f, 0x75, 0x72, 0x63, 0x65, 0x18, 0x04, 0x20, 0x01, 0x28, 0x09, 0x52, 0x06, 0x73, 0x6f, 0x75,
+	0x72, 0x63, 0x65, 0x12, 0x1a, 0x0a, 0x08, 0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x18,
+	0x05, 0x20, 0x01, 0x28, 0x09, 0x52, 0x08, 0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x12,
+	0x14, 0x0a, 0x05, 0x73, 0x74, 0x61, 0x67, 0x65, 0x18, 0x06, 0x20, 0x01, 0x28, 0x09, 0x52, 0x05,
+	0x73, 0x74, 0x61, 0x67, 0x65, 0x12, 0x2e, 0x0a, 0x05, 0x73, 0x74, 0x61, 0x74, 0x65, 0x18, 0x07,
+	0x20, 0x01, 0x28, 0x0e, 0x32, 0x18, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e,
+	0x65, 0x72, 0x2e, 0x54, 0x69, 0x6d, 0x69, 0x6e, 0x67, 0x53, 0x74, 0x61, 0x74, 0x65, 0x52, 0x05,
+	0x73, 0x74, 0x61, 0x74, 0x65, 0x22, 0x0f, 0x0a, 0x0d, 0x43, 0x61, 0x6e, 0x63, 0x65, 0x6c, 0x52,
+	0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x22, 0x8c, 0x02, 0x0a, 0x07, 0x52, 0x65, 0x71, 0x75, 0x65,
+	0x73, 0x74, 0x12, 0x2d, 0x0a, 0x06, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x18, 0x01, 0x20, 0x01,
+	0x28, 0x0b, 0x32, 0x13, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72,
+	0x2e, 0x43, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x48, 0x00, 0x52, 0x06, 0x63, 0x6f, 0x6e, 0x66, 0x69,
+	0x67, 0x12, 0x31, 0x0a, 0x05, 0x70, 0x61, 0x72, 0x73, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0b,
+	0x32, 0x19, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x50,
+	0x61, 0x72, 0x73, 0x65, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x48, 0x00, 0x52, 0x05, 0x70,
+	0x61, 0x72, 0x73, 0x65, 0x12, 0x2e, 0x0a, 0x04, 0x70, 0x6c, 0x61, 0x6e, 0x18, 0x03, 0x20, 0x01,
+	0x28, 0x0b, 0x32, 0x18, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72,
+	0x2e, 0x50, 0x6c, 0x61, 0x6e, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x48, 0x00, 0x52, 0x04,
+	0x70, 0x6c, 0x61, 0x6e, 0x12, 0x31, 0x0a, 0x05, 0x61, 0x70, 0x70, 0x6c, 0x79, 0x18, 0x04, 0x20,
+	0x01, 0x28, 0x0b, 0x32, 0x19, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65,
+	0x72, 0x2e, 0x41, 0x70, 0x70, 0x6c, 0x79, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x48, 0x00,
+	0x52, 0x05, 0x61, 0x70, 0x70, 0x6c, 0x79, 0x12, 0x34, 0x0a, 0x06, 0x63, 0x61, 0x6e, 0x63, 0x65,
+	0x6c, 0x18, 0x05, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1a, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73,
+	0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x43, 0x61, 0x6e, 0x63, 0x65, 0x6c, 0x52, 0x65, 0x71, 0x75,
+	0x65, 0x73, 0x74, 0x48, 0x00, 0x52, 0x06, 0x63, 0x61, 0x6e, 0x63, 0x65, 0x6c, 0x42, 0x06, 0x0a,
+	0x04, 0x74, 0x79, 0x70, 0x65, 0x22, 0xd1, 0x01, 0x0a, 0x08, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e,
+	0x73, 0x65, 0x12, 0x24, 0x0a, 0x03, 0x6c, 0x6f, 0x67, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32,
+	0x10, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x4c, 0x6f,
+	0x67, 0x48, 0x00, 0x52, 0x03, 0x6c, 0x6f, 0x67, 0x12, 0x32, 0x0a, 0x05, 0x70, 0x61, 0x72, 0x73,
+	0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1a, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73,
+	0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x50, 0x61, 0x72, 0x73, 0x65, 0x43, 0x6f, 0x6d, 0x70, 0x6c,
+	0x65, 0x74, 0x65, 0x48, 0x00, 0x52, 0x05, 0x70, 0x61, 0x72, 0x73, 0x65, 0x12, 0x2f, 0x0a, 0x04,
+	0x70, 0x6c, 0x61, 0x6e, 0x18, 0x03, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x19, 0x2e, 0x70, 0x72, 0x6f,
+	0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x50, 0x6c, 0x61, 0x6e, 0x43, 0x6f, 0x6d,
+	0x70, 0x6c, 0x65, 0x74, 0x65, 0x48, 0x00, 0x52, 0x04, 0x70, 0x6c, 0x61, 0x6e, 0x12, 0x32, 0x0a,
+	0x05, 0x61, 0x70, 0x70, 0x6c, 0x79, 0x18, 0x04, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1a, 0x2e, 0x70,
+	0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x41, 0x70, 0x70, 0x6c, 0x79,
+	0x43, 0x6f, 0x6d, 0x70, 0x6c, 0x65, 0x74, 0x65, 0x48, 0x00, 0x52, 0x05, 0x61, 0x70, 0x70, 0x6c,
+	0x79, 0x42, 0x06, 0x0a, 0x04, 0x74, 0x79, 0x70, 0x65, 0x2a, 0x3f, 0x0a, 0x08, 0x4c, 0x6f, 0x67,
+	0x4c, 0x65, 0x76, 0x65, 0x6c, 0x12, 0x09, 0x0a, 0x05, 0x54, 0x52, 0x41, 0x43, 0x45, 0x10, 0x00,
+	0x12, 0x09, 0x0a, 0x05, 0x44, 0x45, 0x42, 0x55, 0x47, 0x10, 0x01, 0x12, 0x08, 0x0a, 0x04, 0x49,
+	0x4e, 0x46, 0x4f, 0x10, 0x02, 0x12, 0x08, 0x0a, 0x04, 0x57, 0x41, 0x52, 0x4e, 0x10, 0x03, 0x12,
+	0x09, 0x0a, 0x05, 0x45, 0x52, 0x52, 0x4f, 0x52, 0x10, 0x04, 0x2a, 0x3b, 0x0a, 0x0f, 0x41, 0x70,
+	0x70, 0x53, 0x68, 0x61, 0x72, 0x69, 0x6e, 0x67, 0x4c, 0x65, 0x76, 0x65, 0x6c, 0x12, 0x09, 0x0a,
+	0x05, 0x4f, 0x57, 0x4e, 0x45, 0x52, 0x10, 0x00, 0x12, 0x11, 0x0a, 0x0d, 0x41, 0x55, 0x54, 0x48,
+	0x45, 0x4e, 0x54, 0x49, 0x43, 0x41, 0x54, 0x45, 0x44, 0x10, 0x01, 0x12, 0x0a, 0x0a, 0x06, 0x50,
+	0x55, 0x42, 0x4c, 0x49, 0x43, 0x10, 0x02, 0x2a, 0x35, 0x0a, 0x09, 0x41, 0x70, 0x70, 0x4f, 0x70,
+	0x65, 0x6e, 0x49, 0x6e, 0x12, 0x0e, 0x0a, 0x06, 0x57, 0x49, 0x4e, 0x44, 0x4f, 0x57, 0x10, 0x00,
+	0x1a, 0x02, 0x08, 0x01, 0x12, 0x0f, 0x0a, 0x0b, 0x53, 0x4c, 0x49, 0x4d, 0x5f, 0x57, 0x49, 0x4e,
+	0x44, 0x4f, 0x57, 0x10, 0x01, 0x12, 0x07, 0x0a, 0x03, 0x54, 0x41, 0x42, 0x10, 0x02, 0x2a, 0x37,
+	0x0a, 0x13, 0x57, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x54, 0x72, 0x61, 0x6e, 0x73,
+	0x69, 0x74, 0x69, 0x6f, 0x6e, 0x12, 0x09, 0x0a, 0x05, 0x53, 0x54, 0x41, 0x52, 0x54, 0x10, 0x00,
+	0x12, 0x08, 0x0a, 0x04, 0x53, 0x54, 0x4f, 0x50, 0x10, 0x01, 0x12, 0x0b, 0x0a, 0x07, 0x44, 0x45,
+	0x53, 0x54, 0x52, 0x4f, 0x59, 0x10, 0x02, 0x2a, 0x3e, 0x0a, 0x1b, 0x50, 0x72, 0x65, 0x62, 0x75,
+	0x69, 0x6c, 0x74, 0x57, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x42, 0x75, 0x69, 0x6c,
+	0x64, 0x53, 0x74, 0x61, 0x67, 0x65, 0x12, 0x08, 0x0a, 0x04, 0x4e, 0x4f, 0x4e, 0x45, 0x10, 0x00,
+	0x12, 0x0a, 0x0a, 0x06, 0x43, 0x52, 0x45, 0x41, 0x54, 0x45, 0x10, 0x01, 0x12, 0x09, 0x0a, 0x05,
+	0x43, 0x4c, 0x41, 0x49, 0x4d, 0x10, 0x02, 0x2a, 0x35, 0x0a, 0x0b, 0x54, 0x69, 0x6d, 0x69, 0x6e,
+	0x67, 0x53, 0x74, 0x61, 0x74, 0x65, 0x12, 0x0b, 0x0a, 0x07, 0x53, 0x54, 0x41, 0x52, 0x54, 0x45,
+	0x44, 0x10, 0x00, 0x12, 0x0d, 0x0a, 0x09, 0x43, 0x4f, 0x4d, 0x50, 0x4c, 0x45, 0x54, 0x45, 0x44,
+	0x10, 0x01, 0x12, 0x0a, 0x0a, 0x06, 0x46, 0x41, 0x49, 0x4c, 0x45, 0x44, 0x10, 0x02, 0x32, 0x49,
+	0x0a, 0x0b, 0x50, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x12, 0x3a, 0x0a,
+	0x07, 0x53, 0x65, 0x73, 0x73, 0x69, 0x6f, 0x6e, 0x12, 0x14, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69,
+	0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x1a, 0x15,
+	0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x52, 0x65, 0x73,
+	0x70, 0x6f, 0x6e, 0x73, 0x65, 0x28, 0x01, 0x30, 0x01, 0x42, 0x30, 0x5a, 0x2e, 0x67, 0x69, 0x74,
+	0x68, 0x75, 0x62, 0x2e, 0x63, 0x6f, 0x6d, 0x2f, 0x63, 0x6f, 0x64, 0x65, 0x72, 0x2f, 0x63, 0x6f,
+	0x64, 0x65, 0x72, 0x2f, 0x76, 0x32, 0x2f, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e,
+	0x65, 0x72, 0x73, 0x64, 0x6b, 0x2f, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x06, 0x70, 0x72, 0x6f,
+	0x74, 0x6f, 0x33,
 }
 
 var (
@@ -4119,7 +4181,7 @@ func file_provisionersdk_proto_provisioner_proto_rawDescGZIP() []byte {
 }
 
 var file_provisionersdk_proto_provisioner_proto_enumTypes = make([]protoimpl.EnumInfo, 6)
-var file_provisionersdk_proto_provisioner_proto_msgTypes = make([]protoimpl.MessageInfo, 42)
+var file_provisionersdk_proto_provisioner_proto_msgTypes = make([]protoimpl.MessageInfo, 43)
 var file_provisionersdk_proto_provisioner_proto_goTypes = []interface{}{
 	(LogLevel)(0),                        // 0: provisioner.LogLevel
 	(AppSharingLevel)(0),                 // 1: provisioner.AppSharingLevel
@@ -4153,32 +4215,33 @@ var file_provisionersdk_proto_provisioner_proto_goTypes = []interface{}{
 	(*Resource)(nil),                     // 29: provisioner.Resource
 	(*Module)(nil),                       // 30: provisioner.Module
 	(*Role)(nil),                         // 31: provisioner.Role
-	(*Metadata)(nil),                     // 32: provisioner.Metadata
-	(*Config)(nil),                       // 33: provisioner.Config
-	(*ParseRequest)(nil),                 // 34: provisioner.ParseRequest
-	(*ParseComplete)(nil),                // 35: provisioner.ParseComplete
-	(*PlanRequest)(nil),                  // 36: provisioner.PlanRequest
-	(*PlanComplete)(nil),                 // 37: provisioner.PlanComplete
-	(*ApplyRequest)(nil),                 // 38: provisioner.ApplyRequest
-	(*ApplyComplete)(nil),                // 39: provisioner.ApplyComplete
-	(*Timing)(nil),                       // 40: provisioner.Timing
-	(*CancelRequest)(nil),                // 41: provisioner.CancelRequest
-	(*Request)(nil),                      // 42: provisioner.Request
-	(*Response)(nil),                     // 43: provisioner.Response
-	(*Agent_Metadata)(nil),               // 44: provisioner.Agent.Metadata
-	nil,                                  // 45: provisioner.Agent.EnvEntry
-	(*Resource_Metadata)(nil),            // 46: provisioner.Resource.Metadata
-	nil,                                  // 47: provisioner.ParseComplete.WorkspaceTagsEntry
-	(*timestamppb.Timestamp)(nil),        // 48: google.protobuf.Timestamp
+	(*RunningAgentAuthToken)(nil),        // 32: provisioner.RunningAgentAuthToken
+	(*Metadata)(nil),                     // 33: provisioner.Metadata
+	(*Config)(nil),                       // 34: provisioner.Config
+	(*ParseRequest)(nil),                 // 35: provisioner.ParseRequest
+	(*ParseComplete)(nil),                // 36: provisioner.ParseComplete
+	(*PlanRequest)(nil),                  // 37: provisioner.PlanRequest
+	(*PlanComplete)(nil),                 // 38: provisioner.PlanComplete
+	(*ApplyRequest)(nil),                 // 39: provisioner.ApplyRequest
+	(*ApplyComplete)(nil),                // 40: provisioner.ApplyComplete
+	(*Timing)(nil),                       // 41: provisioner.Timing
+	(*CancelRequest)(nil),                // 42: provisioner.CancelRequest
+	(*Request)(nil),                      // 43: provisioner.Request
+	(*Response)(nil),                     // 44: provisioner.Response
+	(*Agent_Metadata)(nil),               // 45: provisioner.Agent.Metadata
+	nil,                                  // 46: provisioner.Agent.EnvEntry
+	(*Resource_Metadata)(nil),            // 47: provisioner.Resource.Metadata
+	nil,                                  // 48: provisioner.ParseComplete.WorkspaceTagsEntry
+	(*timestamppb.Timestamp)(nil),        // 49: google.protobuf.Timestamp
 }
 var file_provisionersdk_proto_provisioner_proto_depIdxs = []int32{
 	8,  // 0: provisioner.RichParameter.options:type_name -> provisioner.RichParameterOption
 	13, // 1: provisioner.Preset.parameters:type_name -> provisioner.PresetParameter
 	11, // 2: provisioner.Preset.prebuild:type_name -> provisioner.Prebuild
 	0,  // 3: provisioner.Log.level:type_name -> provisioner.LogLevel
-	45, // 4: provisioner.Agent.env:type_name -> provisioner.Agent.EnvEntry
+	46, // 4: provisioner.Agent.env:type_name -> provisioner.Agent.EnvEntry
 	27, // 5: provisioner.Agent.apps:type_name -> provisioner.App
-	44, // 6: provisioner.Agent.metadata:type_name -> provisioner.Agent.Metadata
+	45, // 6: provisioner.Agent.metadata:type_name -> provisioner.Agent.Metadata
 	23, // 7: provisioner.Agent.display_apps:type_name -> provisioner.DisplayApps
 	25, // 8: provisioner.Agent.scripts:type_name -> provisioner.Script
 	24, // 9: provisioner.Agent.extra_envs:type_name -> provisioner.Env
@@ -4190,46 +4253,47 @@ var file_provisionersdk_proto_provisioner_proto_depIdxs = []int32{
 	1,  // 15: provisioner.App.sharing_level:type_name -> provisioner.AppSharingLevel
 	2,  // 16: provisioner.App.open_in:type_name -> provisioner.AppOpenIn
 	19, // 17: provisioner.Resource.agents:type_name -> provisioner.Agent
-	46, // 18: provisioner.Resource.metadata:type_name -> provisioner.Resource.Metadata
+	47, // 18: provisioner.Resource.metadata:type_name -> provisioner.Resource.Metadata
 	3,  // 19: provisioner.Metadata.workspace_transition:type_name -> provisioner.WorkspaceTransition
 	31, // 20: provisioner.Metadata.workspace_owner_rbac_roles:type_name -> provisioner.Role
 	4,  // 21: provisioner.Metadata.prebuilt_workspace_build_stage:type_name -> provisioner.PrebuiltWorkspaceBuildStage
-	7,  // 22: provisioner.ParseComplete.template_variables:type_name -> provisioner.TemplateVariable
-	47, // 23: provisioner.ParseComplete.workspace_tags:type_name -> provisioner.ParseComplete.WorkspaceTagsEntry
-	32, // 24: provisioner.PlanRequest.metadata:type_name -> provisioner.Metadata
-	10, // 25: provisioner.PlanRequest.rich_parameter_values:type_name -> provisioner.RichParameterValue
-	14, // 26: provisioner.PlanRequest.variable_values:type_name -> provisioner.VariableValue
-	18, // 27: provisioner.PlanRequest.external_auth_providers:type_name -> provisioner.ExternalAuthProvider
-	29, // 28: provisioner.PlanComplete.resources:type_name -> provisioner.Resource
-	9,  // 29: provisioner.PlanComplete.parameters:type_name -> provisioner.RichParameter
-	17, // 30: provisioner.PlanComplete.external_auth_providers:type_name -> provisioner.ExternalAuthProviderResource
-	40, // 31: provisioner.PlanComplete.timings:type_name -> provisioner.Timing
-	30, // 32: provisioner.PlanComplete.modules:type_name -> provisioner.Module
-	12, // 33: provisioner.PlanComplete.presets:type_name -> provisioner.Preset
-	32, // 34: provisioner.ApplyRequest.metadata:type_name -> provisioner.Metadata
-	29, // 35: provisioner.ApplyComplete.resources:type_name -> provisioner.Resource
-	9,  // 36: provisioner.ApplyComplete.parameters:type_name -> provisioner.RichParameter
-	17, // 37: provisioner.ApplyComplete.external_auth_providers:type_name -> provisioner.ExternalAuthProviderResource
-	40, // 38: provisioner.ApplyComplete.timings:type_name -> provisioner.Timing
-	48, // 39: provisioner.Timing.start:type_name -> google.protobuf.Timestamp
-	48, // 40: provisioner.Timing.end:type_name -> google.protobuf.Timestamp
-	5,  // 41: provisioner.Timing.state:type_name -> provisioner.TimingState
-	33, // 42: provisioner.Request.config:type_name -> provisioner.Config
-	34, // 43: provisioner.Request.parse:type_name -> provisioner.ParseRequest
-	36, // 44: provisioner.Request.plan:type_name -> provisioner.PlanRequest
-	38, // 45: provisioner.Request.apply:type_name -> provisioner.ApplyRequest
-	41, // 46: provisioner.Request.cancel:type_name -> provisioner.CancelRequest
-	15, // 47: provisioner.Response.log:type_name -> provisioner.Log
-	35, // 48: provisioner.Response.parse:type_name -> provisioner.ParseComplete
-	37, // 49: provisioner.Response.plan:type_name -> provisioner.PlanComplete
-	39, // 50: provisioner.Response.apply:type_name -> provisioner.ApplyComplete
-	42, // 51: provisioner.Provisioner.Session:input_type -> provisioner.Request
-	43, // 52: provisioner.Provisioner.Session:output_type -> provisioner.Response
-	52, // [52:53] is the sub-list for method output_type
-	51, // [51:52] is the sub-list for method input_type
-	51, // [51:51] is the sub-list for extension type_name
-	51, // [51:51] is the sub-list for extension extendee
-	0,  // [0:51] is the sub-list for field type_name
+	32, // 22: provisioner.Metadata.running_agent_auth_tokens:type_name -> provisioner.RunningAgentAuthToken
+	7,  // 23: provisioner.ParseComplete.template_variables:type_name -> provisioner.TemplateVariable
+	48, // 24: provisioner.ParseComplete.workspace_tags:type_name -> provisioner.ParseComplete.WorkspaceTagsEntry
+	33, // 25: provisioner.PlanRequest.metadata:type_name -> provisioner.Metadata
+	10, // 26: provisioner.PlanRequest.rich_parameter_values:type_name -> provisioner.RichParameterValue
+	14, // 27: provisioner.PlanRequest.variable_values:type_name -> provisioner.VariableValue
+	18, // 28: provisioner.PlanRequest.external_auth_providers:type_name -> provisioner.ExternalAuthProvider
+	29, // 29: provisioner.PlanComplete.resources:type_name -> provisioner.Resource
+	9,  // 30: provisioner.PlanComplete.parameters:type_name -> provisioner.RichParameter
+	17, // 31: provisioner.PlanComplete.external_auth_providers:type_name -> provisioner.ExternalAuthProviderResource
+	41, // 32: provisioner.PlanComplete.timings:type_name -> provisioner.Timing
+	30, // 33: provisioner.PlanComplete.modules:type_name -> provisioner.Module
+	12, // 34: provisioner.PlanComplete.presets:type_name -> provisioner.Preset
+	33, // 35: provisioner.ApplyRequest.metadata:type_name -> provisioner.Metadata
+	29, // 36: provisioner.ApplyComplete.resources:type_name -> provisioner.Resource
+	9,  // 37: provisioner.ApplyComplete.parameters:type_name -> provisioner.RichParameter
+	17, // 38: provisioner.ApplyComplete.external_auth_providers:type_name -> provisioner.ExternalAuthProviderResource
+	41, // 39: provisioner.ApplyComplete.timings:type_name -> provisioner.Timing
+	49, // 40: provisioner.Timing.start:type_name -> google.protobuf.Timestamp
+	49, // 41: provisioner.Timing.end:type_name -> google.protobuf.Timestamp
+	5,  // 42: provisioner.Timing.state:type_name -> provisioner.TimingState
+	34, // 43: provisioner.Request.config:type_name -> provisioner.Config
+	35, // 44: provisioner.Request.parse:type_name -> provisioner.ParseRequest
+	37, // 45: provisioner.Request.plan:type_name -> provisioner.PlanRequest
+	39, // 46: provisioner.Request.apply:type_name -> provisioner.ApplyRequest
+	42, // 47: provisioner.Request.cancel:type_name -> provisioner.CancelRequest
+	15, // 48: provisioner.Response.log:type_name -> provisioner.Log
+	36, // 49: provisioner.Response.parse:type_name -> provisioner.ParseComplete
+	38, // 50: provisioner.Response.plan:type_name -> provisioner.PlanComplete
+	40, // 51: provisioner.Response.apply:type_name -> provisioner.ApplyComplete
+	43, // 52: provisioner.Provisioner.Session:input_type -> provisioner.Request
+	44, // 53: provisioner.Provisioner.Session:output_type -> provisioner.Response
+	53, // [53:54] is the sub-list for method output_type
+	52, // [52:53] is the sub-list for method input_type
+	52, // [52:52] is the sub-list for extension type_name
+	52, // [52:52] is the sub-list for extension extendee
+	0,  // [0:52] is the sub-list for field type_name
 }
 
 func init() { file_provisionersdk_proto_provisioner_proto_init() }
@@ -4551,7 +4615,7 @@ func file_provisionersdk_proto_provisioner_proto_init() {
 			}
 		}
 		file_provisionersdk_proto_provisioner_proto_msgTypes[26].Exporter = func(v interface{}, i int) interface{} {
-			switch v := v.(*Metadata); i {
+			switch v := v.(*RunningAgentAuthToken); i {
 			case 0:
 				return &v.state
 			case 1:
@@ -4563,7 +4627,7 @@ func file_provisionersdk_proto_provisioner_proto_init() {
 			}
 		}
 		file_provisionersdk_proto_provisioner_proto_msgTypes[27].Exporter = func(v interface{}, i int) interface{} {
-			switch v := v.(*Config); i {
+			switch v := v.(*Metadata); i {
 			case 0:
 				return &v.state
 			case 1:
@@ -4575,7 +4639,7 @@ func file_provisionersdk_proto_provisioner_proto_init() {
 			}
 		}
 		file_provisionersdk_proto_provisioner_proto_msgTypes[28].Exporter = func(v interface{}, i int) interface{} {
-			switch v := v.(*ParseRequest); i {
+			switch v := v.(*Config); i {
 			case 0:
 				return &v.state
 			case 1:
@@ -4587,7 +4651,7 @@ func file_provisionersdk_proto_provisioner_proto_init() {
 			}
 		}
 		file_provisionersdk_proto_provisioner_proto_msgTypes[29].Exporter = func(v interface{}, i int) interface{} {
-			switch v := v.(*ParseComplete); i {
+			switch v := v.(*ParseRequest); i {
 			case 0:
 				return &v.state
 			case 1:
@@ -4599,7 +4663,7 @@ func file_provisionersdk_proto_provisioner_proto_init() {
 			}
 		}
 		file_provisionersdk_proto_provisioner_proto_msgTypes[30].Exporter = func(v interface{}, i int) interface{} {
-			switch v := v.(*PlanRequest); i {
+			switch v := v.(*ParseComplete); i {
 			case 0:
 				return &v.state
 			case 1:
@@ -4611,7 +4675,7 @@ func file_provisionersdk_proto_provisioner_proto_init() {
 			}
 		}
 		file_provisionersdk_proto_provisioner_proto_msgTypes[31].Exporter = func(v interface{}, i int) interface{} {
-			switch v := v.(*PlanComplete); i {
+			switch v := v.(*PlanRequest); i {
 			case 0:
 				return &v.state
 			case 1:
@@ -4623,7 +4687,7 @@ func file_provisionersdk_proto_provisioner_proto_init() {
 			}
 		}
 		file_provisionersdk_proto_provisioner_proto_msgTypes[32].Exporter = func(v interface{}, i int) interface{} {
-			switch v := v.(*ApplyRequest); i {
+			switch v := v.(*PlanComplete); i {
 			case 0:
 				return &v.state
 			case 1:
@@ -4635,7 +4699,7 @@ func file_provisionersdk_proto_provisioner_proto_init() {
 			}
 		}
 		file_provisionersdk_proto_provisioner_proto_msgTypes[33].Exporter = func(v interface{}, i int) interface{} {
-			switch v := v.(*ApplyComplete); i {
+			switch v := v.(*ApplyRequest); i {
 			case 0:
 				return &v.state
 			case 1:
@@ -4647,7 +4711,7 @@ func file_provisionersdk_proto_provisioner_proto_init() {
 			}
 		}
 		file_provisionersdk_proto_provisioner_proto_msgTypes[34].Exporter = func(v interface{}, i int) interface{} {
-			switch v := v.(*Timing); i {
+			switch v := v.(*ApplyComplete); i {
 			case 0:
 				return &v.state
 			case 1:
@@ -4659,7 +4723,7 @@ func file_provisionersdk_proto_provisioner_proto_init() {
 			}
 		}
 		file_provisionersdk_proto_provisioner_proto_msgTypes[35].Exporter = func(v interface{}, i int) interface{} {
-			switch v := v.(*CancelRequest); i {
+			switch v := v.(*Timing); i {
 			case 0:
 				return &v.state
 			case 1:
@@ -4671,7 +4735,7 @@ func file_provisionersdk_proto_provisioner_proto_init() {
 			}
 		}
 		file_provisionersdk_proto_provisioner_proto_msgTypes[36].Exporter = func(v interface{}, i int) interface{} {
-			switch v := v.(*Request); i {
+			switch v := v.(*CancelRequest); i {
 			case 0:
 				return &v.state
 			case 1:
@@ -4683,7 +4747,7 @@ func file_provisionersdk_proto_provisioner_proto_init() {
 			}
 		}
 		file_provisionersdk_proto_provisioner_proto_msgTypes[37].Exporter = func(v interface{}, i int) interface{} {
-			switch v := v.(*Response); i {
+			switch v := v.(*Request); i {
 			case 0:
 				return &v.state
 			case 1:
@@ -4695,6 +4759,18 @@ func file_provisionersdk_proto_provisioner_proto_init() {
 			}
 		}
 		file_provisionersdk_proto_provisioner_proto_msgTypes[38].Exporter = func(v interface{}, i int) interface{} {
+			switch v := v.(*Response); i {
+			case 0:
+				return &v.state
+			case 1:
+				return &v.sizeCache
+			case 2:
+				return &v.unknownFields
+			default:
+				return nil
+			}
+		}
+		file_provisionersdk_proto_provisioner_proto_msgTypes[39].Exporter = func(v interface{}, i int) interface{} {
 			switch v := v.(*Agent_Metadata); i {
 			case 0:
 				return &v.state
@@ -4706,7 +4782,7 @@ func file_provisionersdk_proto_provisioner_proto_init() {
 				return nil
 			}
 		}
-		file_provisionersdk_proto_provisioner_proto_msgTypes[40].Exporter = func(v interface{}, i int) interface{} {
+		file_provisionersdk_proto_provisioner_proto_msgTypes[41].Exporter = func(v interface{}, i int) interface{} {
 			switch v := v.(*Resource_Metadata); i {
 			case 0:
 				return &v.state
@@ -4724,14 +4800,14 @@ func file_provisionersdk_proto_provisioner_proto_init() {
 		(*Agent_Token)(nil),
 		(*Agent_InstanceId)(nil),
 	}
-	file_provisionersdk_proto_provisioner_proto_msgTypes[36].OneofWrappers = []interface{}{
+	file_provisionersdk_proto_provisioner_proto_msgTypes[37].OneofWrappers = []interface{}{
 		(*Request_Config)(nil),
 		(*Request_Parse)(nil),
 		(*Request_Plan)(nil),
 		(*Request_Apply)(nil),
 		(*Request_Cancel)(nil),
 	}
-	file_provisionersdk_proto_provisioner_proto_msgTypes[37].OneofWrappers = []interface{}{
+	file_provisionersdk_proto_provisioner_proto_msgTypes[38].OneofWrappers = []interface{}{
 		(*Response_Log)(nil),
 		(*Response_Parse)(nil),
 		(*Response_Plan)(nil),
@@ -4743,7 +4819,7 @@ func file_provisionersdk_proto_provisioner_proto_init() {
 			GoPackagePath: reflect.TypeOf(x{}).PkgPath(),
 			RawDescriptor: file_provisionersdk_proto_provisioner_proto_rawDesc,
 			NumEnums:      6,
-			NumMessages:   42,
+			NumMessages:   43,
 			NumExtensions: 0,
 			NumServices:   1,
 		},
diff --git a/provisionersdk/proto/provisioner.proto b/provisionersdk/proto/provisioner.proto
index 9972b3ea148ac..6c40b1599bd43 100644
--- a/provisionersdk/proto/provisioner.proto
+++ b/provisionersdk/proto/provisioner.proto
@@ -272,6 +272,10 @@ message Role {
     string org_id = 2;
 }
 
+message RunningAgentAuthToken {
+    string agent_id = 1;
+    string token = 2;
+}
 enum PrebuiltWorkspaceBuildStage {
 	NONE = 0;   // Default value for builds unrelated to prebuilds.
 	CREATE = 1; // A prebuilt workspace is being provisioned.
@@ -300,7 +304,7 @@ message Metadata {
     string workspace_owner_login_type =  18;
     repeated Role workspace_owner_rbac_roles = 19;
     PrebuiltWorkspaceBuildStage prebuilt_workspace_build_stage = 20; // Indicates that a prebuilt workspace is being built.
-    string running_workspace_agent_token = 21;                       // Preserves the running agent token of a prebuilt workspace so it can reinitialize.
+    repeated RunningAgentAuthToken running_agent_auth_tokens = 21;
 }
 
 // Config represents execution configuration shared by all subsequent requests in the Session
diff --git a/site/e2e/provisionerGenerated.ts b/site/e2e/provisionerGenerated.ts
index 4090017996598..a1194239636c2 100644
--- a/site/e2e/provisionerGenerated.ts
+++ b/site/e2e/provisionerGenerated.ts
@@ -296,6 +296,11 @@ export interface Role {
   orgId: string;
 }
 
+export interface RunningAgentAuthToken {
+  agentId: string;
+  token: string;
+}
+
 /** Metadata is information about a workspace used in the execution of a build */
 export interface Metadata {
   coderUrl: string;
@@ -319,8 +324,7 @@ export interface Metadata {
   workspaceOwnerRbacRoles: Role[];
   /** Indicates that a prebuilt workspace is being built. */
   prebuiltWorkspaceBuildStage: PrebuiltWorkspaceBuildStage;
-  /** Preserves the running agent token of a prebuilt workspace so it can reinitialize. */
-  runningWorkspaceAgentToken: string;
+  runningAgentAuthTokens: RunningAgentAuthToken[];
 }
 
 /** Config represents execution configuration shared by all subsequent requests in the Session */
@@ -980,6 +984,18 @@ export const Role = {
   },
 };
 
+export const RunningAgentAuthToken = {
+  encode(message: RunningAgentAuthToken, writer: _m0.Writer = _m0.Writer.create()): _m0.Writer {
+    if (message.agentId !== "") {
+      writer.uint32(10).string(message.agentId);
+    }
+    if (message.token !== "") {
+      writer.uint32(18).string(message.token);
+    }
+    return writer;
+  },
+};
+
 export const Metadata = {
   encode(message: Metadata, writer: _m0.Writer = _m0.Writer.create()): _m0.Writer {
     if (message.coderUrl !== "") {
@@ -1042,8 +1058,8 @@ export const Metadata = {
     if (message.prebuiltWorkspaceBuildStage !== 0) {
       writer.uint32(160).int32(message.prebuiltWorkspaceBuildStage);
     }
-    if (message.runningWorkspaceAgentToken !== "") {
-      writer.uint32(170).string(message.runningWorkspaceAgentToken);
+    for (const v of message.runningAgentAuthTokens) {
+      RunningAgentAuthToken.encode(v!, writer.uint32(170).fork()).ldelim();
     }
     return writer;
   },
diff --git a/site/src/api/typesGenerated.ts b/site/src/api/typesGenerated.ts
index afa766af64a84..7ec54965c2efb 100644
--- a/site/src/api/typesGenerated.ts
+++ b/site/src/api/typesGenerated.ts
@@ -1740,8 +1740,7 @@ export interface PreviewParameterData {
 	readonly type: PreviewParameterType;
 	// this is likely an enum in an external package "github.com/coder/terraform-provider-coder/v2/provider.ParameterFormType"
 	readonly form_type: string;
-	// empty interface{} type, falling back to unknown
-	readonly styling: unknown;
+	readonly styling: PreviewParameterStyling;
 	readonly mutable: boolean;
 	readonly default_value: NullHCLString;
 	readonly icon: string;
@@ -1760,6 +1759,13 @@ export interface PreviewParameterOption {
 	readonly icon: string;
 }
 
+// From types/parameter.go
+export interface PreviewParameterStyling {
+	readonly placeholder?: string;
+	readonly disabled?: boolean;
+	readonly label?: string;
+}
+
 // From types/enum.go
 export type PreviewParameterType = string;
 

From 3027bcf78b911489dc0f50952124ed5785cfe187 Mon Sep 17 00:00:00 2001
From: Danny Kopping <danny@coder.com>
Date: Wed, 14 May 2025 14:52:22 +0200
Subject: [PATCH 4/7] feat: track resource replacements when claiming a
 prebuilt workspace (#17571)

Closes https://github.com/coder/internal/issues/369

We can't know whether a replacement (i.e. drift of terraform state
leading to a resource needing to be deleted/recreated) will take place
apriori; we can only detect it at `plan` time, because the provider
decides whether a resource must be replaced and it cannot be inferred
through static analysis of the template.

**This is likely to be the most common gotcha with using prebuilds,
since it requires a slight template modification to use prebuilds
effectively**, so let's head this off before it's an issue for
customers.

Drift details will now be logged in the workspace build logs:

![image](https://github.com/user-attachments/assets/da1988b6-2cbe-4a79-a3c5-ea29891f3d6f)

Plus a notification will be sent to template admins when this situation
arises:

![image](https://github.com/user-attachments/assets/39d555b1-a262-4a3e-b529-03b9f23bf66a)

A new metric - `coderd_prebuilt_workspaces_resource_replacements_total`
- will also increment each time a workspace encounters replacements.

We only track _that_ a resource replacement occurred, not how many. Just
one is enough to ruin a prebuild, but we can't know apriori which
replacement would cause this.
For example, say we have 2 replacements: a `docker_container` and a
`null_resource`; we don't know which one might
cause an issue (or indeed if either would), so we just track the
replacement.

---------

Signed-off-by: Danny Kopping <dannykopping@gmail.com>
---
 cli/server.go                                 |   62 +-
 coderd/coderd.go                              |    1 +
 ...esource_replacements_notification.down.sql |    1 +
 ..._resource_replacements_notification.up.sql |   34 +
 coderd/notifications/events.go                |    1 +
 coderd/notifications/notifications_test.go    |   28 +-
 .../notificationstest/fake_enqueuer.go        |    7 +
 ...plateWorkspaceResourceReplaced.html.golden |  131 ++
 ...plateWorkspaceResourceReplaced.json.golden |   42 +
 coderd/prebuilds/api.go                       |    6 +
 coderd/prebuilds/noop.go                      |    7 +-
 .../provisionerdserver/provisionerdserver.go  |   15 +-
 .../provisionerdserver_test.go                |  120 +-
 .../prebuilt-workspaces.md                    |    6 +
 enterprise/coderd/coderd.go                   |    2 +-
 enterprise/coderd/prebuilds/claim_test.go     |    2 +-
 .../coderd/prebuilds/metricscollector.go      |   76 +-
 .../coderd/prebuilds/metricscollector_test.go |   84 +-
 enterprise/coderd/prebuilds/reconcile.go      |  128 ++
 enterprise/coderd/prebuilds/reconcile_test.go |  137 +-
 enterprise/coderd/provisionerdaemons.go       |    4 +-
 provisioner/terraform/executor.go             |  175 ++-
 provisioner/terraform/provision.go            |    5 +-
 .../terraform/resource_replacements.go        |   86 ++
 .../resource_replacements_internal_test.go    |  176 +++
 provisionerd/proto/provisionerd.pb.go         |  357 ++---
 provisionerd/proto/provisionerd.proto         |    1 +
 provisionerd/proto/version.go                 |    1 +
 provisionerd/runner/runner.go                 |    2 +
 provisionersdk/proto/provisioner.pb.go        | 1265 +++++++++--------
 provisionersdk/proto/provisioner.proto        |    6 +
 site/e2e/helpers.ts                           |    2 +
 site/e2e/provisionerGenerated.ts              |   21 +
 33 files changed, 2034 insertions(+), 957 deletions(-)
 create mode 100644 coderd/database/migrations/000324_resource_replacements_notification.down.sql
 create mode 100644 coderd/database/migrations/000324_resource_replacements_notification.up.sql
 create mode 100644 coderd/notifications/testdata/rendered-templates/smtp/TemplateWorkspaceResourceReplaced.html.golden
 create mode 100644 coderd/notifications/testdata/rendered-templates/webhook/TemplateWorkspaceResourceReplaced.json.golden
 create mode 100644 provisioner/terraform/resource_replacements.go
 create mode 100644 provisioner/terraform/resource_replacements_internal_test.go

diff --git a/cli/server.go b/cli/server.go
index 580dae369446c..4d3ef4d8b7f36 100644
--- a/cli/server.go
+++ b/cli/server.go
@@ -910,6 +910,37 @@ func (r *RootCmd) Server(newAPI func(context.Context, *coderd.Options) (*coderd.
 			options.StatsBatcher = batcher
 			defer closeBatcher()
 
+			// Manage notifications.
+			var (
+				notificationsCfg     = options.DeploymentValues.Notifications
+				notificationsManager *notifications.Manager
+			)
+
+			metrics := notifications.NewMetrics(options.PrometheusRegistry)
+			helpers := templateHelpers(options)
+
+			// The enqueuer is responsible for enqueueing notifications to the given store.
+			enqueuer, err := notifications.NewStoreEnqueuer(notificationsCfg, options.Database, helpers, logger.Named("notifications.enqueuer"), quartz.NewReal())
+			if err != nil {
+				return xerrors.Errorf("failed to instantiate notification store enqueuer: %w", err)
+			}
+			options.NotificationsEnqueuer = enqueuer
+
+			// The notification manager is responsible for:
+			//   - creating notifiers and managing their lifecycles (notifiers are responsible for dequeueing/sending notifications)
+			//   - keeping the store updated with status updates
+			notificationsManager, err = notifications.NewManager(notificationsCfg, options.Database, options.Pubsub, helpers, metrics, logger.Named("notifications.manager"))
+			if err != nil {
+				return xerrors.Errorf("failed to instantiate notification manager: %w", err)
+			}
+
+			// nolint:gocritic // We need to run the manager in a notifier context.
+			notificationsManager.Run(dbauthz.AsNotifier(ctx))
+
+			// Run report generator to distribute periodic reports.
+			notificationReportGenerator := reports.NewReportGenerator(ctx, logger.Named("notifications.report_generator"), options.Database, options.NotificationsEnqueuer, quartz.NewReal())
+			defer notificationReportGenerator.Close()
+
 			// We use a separate coderAPICloser so the Enterprise API
 			// can have its own close functions. This is cleaner
 			// than abstracting the Coder API itself.
@@ -957,37 +988,6 @@ func (r *RootCmd) Server(newAPI func(context.Context, *coderd.Options) (*coderd.
 				return xerrors.Errorf("write config url: %w", err)
 			}
 
-			// Manage notifications.
-			var (
-				notificationsCfg     = options.DeploymentValues.Notifications
-				notificationsManager *notifications.Manager
-			)
-
-			metrics := notifications.NewMetrics(options.PrometheusRegistry)
-			helpers := templateHelpers(options)
-
-			// The enqueuer is responsible for enqueueing notifications to the given store.
-			enqueuer, err := notifications.NewStoreEnqueuer(notificationsCfg, options.Database, helpers, logger.Named("notifications.enqueuer"), quartz.NewReal())
-			if err != nil {
-				return xerrors.Errorf("failed to instantiate notification store enqueuer: %w", err)
-			}
-			options.NotificationsEnqueuer = enqueuer
-
-			// The notification manager is responsible for:
-			//   - creating notifiers and managing their lifecycles (notifiers are responsible for dequeueing/sending notifications)
-			//   - keeping the store updated with status updates
-			notificationsManager, err = notifications.NewManager(notificationsCfg, options.Database, options.Pubsub, helpers, metrics, logger.Named("notifications.manager"))
-			if err != nil {
-				return xerrors.Errorf("failed to instantiate notification manager: %w", err)
-			}
-
-			// nolint:gocritic // We need to run the manager in a notifier context.
-			notificationsManager.Run(dbauthz.AsNotifier(ctx))
-
-			// Run report generator to distribute periodic reports.
-			notificationReportGenerator := reports.NewReportGenerator(ctx, logger.Named("notifications.report_generator"), options.Database, options.NotificationsEnqueuer, quartz.NewReal())
-			defer notificationReportGenerator.Close()
-
 			// Since errCh only has one buffered slot, all routines
 			// sending on it must be wrapped in a select/default to
 			// avoid leaving dangling goroutines waiting for the
diff --git a/coderd/coderd.go b/coderd/coderd.go
index 60be8526753f5..d1a49747920ca 100644
--- a/coderd/coderd.go
+++ b/coderd/coderd.go
@@ -1774,6 +1774,7 @@ func (api *API) CreateInMemoryTaggedProvisionerDaemon(dialCtx context.Context, n
 			Clock:               api.Clock,
 		},
 		api.NotificationsEnqueuer,
+		&api.PrebuildsReconciler,
 	)
 	if err != nil {
 		return nil, err
diff --git a/coderd/database/migrations/000324_resource_replacements_notification.down.sql b/coderd/database/migrations/000324_resource_replacements_notification.down.sql
new file mode 100644
index 0000000000000..8da13f718b635
--- /dev/null
+++ b/coderd/database/migrations/000324_resource_replacements_notification.down.sql
@@ -0,0 +1 @@
+DELETE FROM notification_templates WHERE id = '89d9745a-816e-4695-a17f-3d0a229e2b8d';
diff --git a/coderd/database/migrations/000324_resource_replacements_notification.up.sql b/coderd/database/migrations/000324_resource_replacements_notification.up.sql
new file mode 100644
index 0000000000000..395332adaee20
--- /dev/null
+++ b/coderd/database/migrations/000324_resource_replacements_notification.up.sql
@@ -0,0 +1,34 @@
+INSERT INTO notification_templates
+	(id, name, title_template, body_template, "group", actions)
+VALUES ('89d9745a-816e-4695-a17f-3d0a229e2b8d',
+		'Prebuilt Workspace Resource Replaced',
+		E'There might be a problem with a recently claimed prebuilt workspace',
+		$$
+Workspace **{{.Labels.workspace}}** was claimed from a prebuilt workspace by **{{.Labels.claimant}}**.
+
+During the claim, Terraform destroyed and recreated the following resources
+because one or more immutable attributes changed:
+
+{{range $resource, $paths := .Data.replacements -}}
+- _{{ $resource }}_  was replaced due to changes to _{{ $paths }}_
+{{end}}
+
+When Terraform must change an immutable attribute, it replaces the entire resource.
+If you’re using prebuilds to speed up provisioning, unexpected replacements will slow down
+workspace startup—even when claiming a prebuilt environment.
+
+For tips on preventing replacements and improving claim performance, see [this guide](https://coder.com/docs/admin/templates/extending-templates/prebuilt-workspaces#preventing-resource-replacement).
+
+NOTE: this prebuilt workspace used the **{{.Labels.preset}}** preset.
+$$,
+		'Template Events',
+		'[
+		{
+			"label": "View workspace build",
+			"url": "{{base_url}}/@{{.Labels.claimant}}/{{.Labels.workspace}}/builds/{{.Labels.workspace_build_num}}"
+		},
+		{
+			"label": "View template version",
+			"url": "{{base_url}}/templates/{{.Labels.org}}/{{.Labels.template}}/versions/{{.Labels.template_version}}"
+		}
+	]'::jsonb);
diff --git a/coderd/notifications/events.go b/coderd/notifications/events.go
index 2f45205bf33ec..35d9925055da5 100644
--- a/coderd/notifications/events.go
+++ b/coderd/notifications/events.go
@@ -39,6 +39,7 @@ var (
 	TemplateTemplateDeprecated = uuid.MustParse("f40fae84-55a2-42cd-99fa-b41c1ca64894")
 
 	TemplateWorkspaceBuildsFailedReport = uuid.MustParse("34a20db2-e9cc-4a93-b0e4-8569699d7a00")
+	TemplateWorkspaceResourceReplaced   = uuid.MustParse("89d9745a-816e-4695-a17f-3d0a229e2b8d")
 )
 
 // Notification-related events.
diff --git a/coderd/notifications/notifications_test.go b/coderd/notifications/notifications_test.go
index 12372b74a14c3..8f8a3c82441e0 100644
--- a/coderd/notifications/notifications_test.go
+++ b/coderd/notifications/notifications_test.go
@@ -35,6 +35,9 @@ import (
 	"golang.org/x/xerrors"
 
 	"cdr.dev/slog"
+	"github.com/coder/quartz"
+	"github.com/coder/serpent"
+
 	"github.com/coder/coder/v2/coderd/coderdtest"
 	"github.com/coder/coder/v2/coderd/database"
 	"github.com/coder/coder/v2/coderd/database/dbauthz"
@@ -48,8 +51,6 @@ import (
 	"github.com/coder/coder/v2/coderd/util/syncmap"
 	"github.com/coder/coder/v2/codersdk"
 	"github.com/coder/coder/v2/testutil"
-	"github.com/coder/quartz"
-	"github.com/coder/serpent"
 )
 
 // updateGoldenFiles is a flag that can be set to update golden files.
@@ -1226,6 +1227,29 @@ func TestNotificationTemplates_Golden(t *testing.T) {
 				Labels:       map[string]string{},
 			},
 		},
+		{
+			name: "TemplateWorkspaceResourceReplaced",
+			id:   notifications.TemplateWorkspaceResourceReplaced,
+			payload: types.MessagePayload{
+				UserName:     "Bobby",
+				UserEmail:    "bobby@coder.com",
+				UserUsername: "bobby",
+				Labels: map[string]string{
+					"org":                 "cern",
+					"workspace":           "my-workspace",
+					"workspace_build_num": "2",
+					"template":            "docker",
+					"template_version":    "angry_torvalds",
+					"preset":              "particle-accelerator",
+					"claimant":            "prebuilds-claimer",
+				},
+				Data: map[string]any{
+					"replacements": map[string]string{
+						"docker_container[0]": "env, hostname",
+					},
+				},
+			},
+		},
 	}
 
 	// We must have a test case for every notification_template. This is enforced below:
diff --git a/coderd/notifications/notificationstest/fake_enqueuer.go b/coderd/notifications/notificationstest/fake_enqueuer.go
index 8fbc2cee25806..568091818295c 100644
--- a/coderd/notifications/notificationstest/fake_enqueuer.go
+++ b/coderd/notifications/notificationstest/fake_enqueuer.go
@@ -9,6 +9,7 @@ import (
 	"github.com/prometheus/client_golang/prometheus"
 
 	"github.com/coder/coder/v2/coderd/database/dbauthz"
+	"github.com/coder/coder/v2/coderd/notifications"
 	"github.com/coder/coder/v2/coderd/rbac"
 	"github.com/coder/coder/v2/coderd/rbac/policy"
 )
@@ -19,6 +20,12 @@ type FakeEnqueuer struct {
 	sent       []*FakeNotification
 }
 
+var _ notifications.Enqueuer = &FakeEnqueuer{}
+
+func NewFakeEnqueuer() *FakeEnqueuer {
+	return &FakeEnqueuer{}
+}
+
 type FakeNotification struct {
 	UserID, TemplateID uuid.UUID
 	Labels             map[string]string
diff --git a/coderd/notifications/testdata/rendered-templates/smtp/TemplateWorkspaceResourceReplaced.html.golden b/coderd/notifications/testdata/rendered-templates/smtp/TemplateWorkspaceResourceReplaced.html.golden
new file mode 100644
index 0000000000000..6d64eed0249a7
--- /dev/null
+++ b/coderd/notifications/testdata/rendered-templates/smtp/TemplateWorkspaceResourceReplaced.html.golden
@@ -0,0 +1,131 @@
+From: system@coder.com
+To: bobby@coder.com
+Subject: There might be a problem with a recently claimed prebuilt workspace
+Message-Id: 02ee4935-73be-4fa1-a290-ff9999026b13@blush-whale-48
+Date: Fri, 11 Oct 2024 09:03:06 +0000
+Content-Type: multipart/alternative;  boundary=bbe61b741255b6098bb6b3c1f41b885773df633cb18d2a3002b68e4bc9c4
+MIME-Version: 1.0
+
+--bbe61b741255b6098bb6b3c1f41b885773df633cb18d2a3002b68e4bc9c4
+Content-Transfer-Encoding: quoted-printable
+Content-Type: text/plain; charset=UTF-8
+
+Hi Bobby,
+
+Workspace my-workspace was claimed from a prebuilt workspace by prebuilds-c=
+laimer.
+
+During the claim, Terraform destroyed and recreated the following resources
+because one or more immutable attributes changed:
+
+docker_container[0]  was replaced due to changes to env, hostname
+
+When Terraform must change an immutable attribute, it replaces the entire r=
+esource.
+If you=E2=80=99re using prebuilds to speed up provisioning, unexpected repl=
+acements will slow down
+workspace startup=E2=80=94even when claiming a prebuilt environment.
+
+For tips on preventing replacements and improving claim performance, see th=
+is guide (https://coder.com/docs/admin/templates/extending-templates/prebui=
+lt-workspaces#preventing-resource-replacement).
+
+NOTE: this prebuilt workspace used the particle-accelerator preset.
+
+
+View workspace build: http://test.com/@prebuilds-claimer/my-workspace/build=
+s/2
+
+View template version: http://test.com/templates/cern/docker/versions/angry=
+_torvalds
+
+--bbe61b741255b6098bb6b3c1f41b885773df633cb18d2a3002b68e4bc9c4
+Content-Transfer-Encoding: quoted-printable
+Content-Type: text/html; charset=UTF-8
+
+<!doctype html>
+<html lang=3D"en">
+  <head>
+    <meta charset=3D"UTF-8" />
+    <meta name=3D"viewport" content=3D"width=3Ddevice-width, initial-scale=
+=3D1.0" />
+    <title>There might be a problem with a recently claimed prebuilt worksp=
+ace</title>
+  </head>
+  <body style=3D"margin: 0; padding: 0; font-family: -apple-system, system-=
+ui, BlinkMacSystemFont, 'Segoe UI', 'Roboto', 'Oxygen', 'Ubuntu', 'Cantarel=
+l', 'Fira Sans', 'Droid Sans', 'Helvetica Neue', sans-serif; color: #020617=
+; background: #f8fafc;">
+    <div style=3D"max-width: 600px; margin: 20px auto; padding: 60px; borde=
+r: 1px solid #e2e8f0; border-radius: 8px; background-color: #fff; text-alig=
+n: left; font-size: 14px; line-height: 1.5;">
+      <div style=3D"text-align: center;">
+        <img src=3D"https://coder.com/coder-logo-horizontal.png" alt=3D"Cod=
+er Logo" style=3D"height: 40px;" />
+      </div>
+      <h1 style=3D"text-align: center; font-size: 24px; font-weight: 400; m=
+argin: 8px 0 32px; line-height: 1.5;">
+        There might be a problem with a recently claimed prebuilt workspace
+      </h1>
+      <div style=3D"line-height: 1.5;">
+        <p>Hi Bobby,</p>
+        <p>Workspace <strong>my-workspace</strong> was claimed from a prebu=
+ilt workspace by <strong>prebuilds-claimer</strong>.</p>
+
+<p>During the claim, Terraform destroyed and recreated the following resour=
+ces<br>
+because one or more immutable attributes changed:</p>
+
+<ul>
+<li>_docker<em>container[0]</em>  was replaced due to changes to <em>env, h=
+ostname</em><br>
+</li>
+</ul>
+
+<p>When Terraform must change an immutable attribute, it replaces the entir=
+e resource.<br>
+If you=E2=80=99re using prebuilds to speed up provisioning, unexpected repl=
+acements will slow down<br>
+workspace startup=E2=80=94even when claiming a prebuilt environment.</p>
+
+<p>For tips on preventing replacements and improving claim performance, see=
+ <a href=3D"https://coder.com/docs/admin/templates/extending-templates/preb=
+uilt-workspaces#preventing-resource-replacement">this guide</a>.</p>
+
+<p>NOTE: this prebuilt workspace used the <strong>particle-accelerator</str=
+ong> preset.</p>
+      </div>
+      <div style=3D"text-align: center; margin-top: 32px;">
+       =20
+        <a href=3D"http://test.com/@prebuilds-claimer/my-workspace/builds/2=
+" style=3D"display: inline-block; padding: 13px 24px; background-color: #02=
+0617; color: #f8fafc; text-decoration: none; border-radius: 8px; margin: 0 =
+4px;">
+          View workspace build
+        </a>
+       =20
+        <a href=3D"http://test.com/templates/cern/docker/versions/angry_tor=
+valds" style=3D"display: inline-block; padding: 13px 24px; background-color=
+: #020617; color: #f8fafc; text-decoration: none; border-radius: 8px; margi=
+n: 0 4px;">
+          View template version
+        </a>
+       =20
+      </div>
+      <div style=3D"border-top: 1px solid #e2e8f0; color: #475569; font-siz=
+e: 12px; margin-top: 64px; padding-top: 24px; line-height: 1.6;">
+        <p>&copy;&nbsp;2024&nbsp;Coder. All rights reserved&nbsp;-&nbsp;<a =
+href=3D"http://test.com" style=3D"color: #2563eb; text-decoration: none;">h=
+ttp://test.com</a></p>
+        <p><a href=3D"http://test.com/settings/notifications" style=3D"colo=
+r: #2563eb; text-decoration: none;">Click here to manage your notification =
+settings</a></p>
+        <p><a href=3D"http://test.com/settings/notifications?disabled=3D89d=
+9745a-816e-4695-a17f-3d0a229e2b8d" style=3D"color: #2563eb; text-decoration=
+: none;">Stop receiving emails like this</a></p>
+      </div>
+    </div>
+  </body>
+</html>
+
+--bbe61b741255b6098bb6b3c1f41b885773df633cb18d2a3002b68e4bc9c4--
diff --git a/coderd/notifications/testdata/rendered-templates/webhook/TemplateWorkspaceResourceReplaced.json.golden b/coderd/notifications/testdata/rendered-templates/webhook/TemplateWorkspaceResourceReplaced.json.golden
new file mode 100644
index 0000000000000..09bf9431cdeed
--- /dev/null
+++ b/coderd/notifications/testdata/rendered-templates/webhook/TemplateWorkspaceResourceReplaced.json.golden
@@ -0,0 +1,42 @@
+{
+  "_version": "1.1",
+  "msg_id": "00000000-0000-0000-0000-000000000000",
+  "payload": {
+    "_version": "1.2",
+    "notification_name": "Prebuilt Workspace Resource Replaced",
+    "notification_template_id": "00000000-0000-0000-0000-000000000000",
+    "user_id": "00000000-0000-0000-0000-000000000000",
+    "user_email": "bobby@coder.com",
+    "user_name": "Bobby",
+    "user_username": "bobby",
+    "actions": [
+      {
+        "label": "View workspace build",
+        "url": "http://test.com/@prebuilds-claimer/my-workspace/builds/2"
+      },
+      {
+        "label": "View template version",
+        "url": "http://test.com/templates/cern/docker/versions/angry_torvalds"
+      }
+    ],
+    "labels": {
+      "claimant": "prebuilds-claimer",
+      "org": "cern",
+      "preset": "particle-accelerator",
+      "template": "docker",
+      "template_version": "angry_torvalds",
+      "workspace": "my-workspace",
+      "workspace_build_num": "2"
+    },
+    "data": {
+      "replacements": {
+        "docker_container[0]": "env, hostname"
+      }
+    },
+    "targets": null
+  },
+  "title": "There might be a problem with a recently claimed prebuilt workspace",
+  "title_markdown": "There might be a problem with a recently claimed prebuilt workspace",
+  "body": "Workspace my-workspace was claimed from a prebuilt workspace by prebuilds-claimer.\n\nDuring the claim, Terraform destroyed and recreated the following resources\nbecause one or more immutable attributes changed:\n\ndocker_container[0]  was replaced due to changes to env, hostname\n\nWhen Terraform must change an immutable attribute, it replaces the entire resource.\nIf you’re using prebuilds to speed up provisioning, unexpected replacements will slow down\nworkspace startup—even when claiming a prebuilt environment.\n\nFor tips on preventing replacements and improving claim performance, see this guide (https://coder.com/docs/admin/templates/extending-templates/prebuilt-workspaces#preventing-resource-replacement).\n\nNOTE: this prebuilt workspace used the particle-accelerator preset.",
+  "body_markdown": "\nWorkspace **my-workspace** was claimed from a prebuilt workspace by **prebuilds-claimer**.\n\nDuring the claim, Terraform destroyed and recreated the following resources\nbecause one or more immutable attributes changed:\n\n- _docker_container[0]_  was replaced due to changes to _env, hostname_\n\n\nWhen Terraform must change an immutable attribute, it replaces the entire resource.\nIf you’re using prebuilds to speed up provisioning, unexpected replacements will slow down\nworkspace startup—even when claiming a prebuilt environment.\n\nFor tips on preventing replacements and improving claim performance, see [this guide](https://coder.com/docs/admin/templates/extending-templates/prebuilt-workspaces#preventing-resource-replacement).\n\nNOTE: this prebuilt workspace used the **particle-accelerator** preset.\n"
+}
\ No newline at end of file
diff --git a/coderd/prebuilds/api.go b/coderd/prebuilds/api.go
index 00129eae37491..3092d27421d26 100644
--- a/coderd/prebuilds/api.go
+++ b/coderd/prebuilds/api.go
@@ -7,6 +7,7 @@ import (
 	"golang.org/x/xerrors"
 
 	"github.com/coder/coder/v2/coderd/database"
+	sdkproto "github.com/coder/coder/v2/provisionersdk/proto"
 )
 
 var (
@@ -27,6 +28,11 @@ type ReconciliationOrchestrator interface {
 	// Stop gracefully shuts down the orchestrator with the given cause.
 	// The cause is used for logging and error reporting.
 	Stop(ctx context.Context, cause error)
+
+	// TrackResourceReplacement handles a pathological situation whereby a terraform resource is replaced due to drift,
+	// which can obviate the whole point of pre-provisioning a prebuilt workspace.
+	// See more detail at https://coder.com/docs/admin/templates/extending-templates/prebuilt-workspaces#preventing-resource-replacement.
+	TrackResourceReplacement(ctx context.Context, workspaceID, buildID uuid.UUID, replacements []*sdkproto.ResourceReplacement)
 }
 
 type Reconciler interface {
diff --git a/coderd/prebuilds/noop.go b/coderd/prebuilds/noop.go
index 6fb3f7c6a5f1f..3c2dd78a804db 100644
--- a/coderd/prebuilds/noop.go
+++ b/coderd/prebuilds/noop.go
@@ -6,12 +6,15 @@ import (
 	"github.com/google/uuid"
 
 	"github.com/coder/coder/v2/coderd/database"
+	sdkproto "github.com/coder/coder/v2/provisionersdk/proto"
 )
 
 type NoopReconciler struct{}
 
-func (NoopReconciler) Run(context.Context)                {}
-func (NoopReconciler) Stop(context.Context, error)        {}
+func (NoopReconciler) Run(context.Context)         {}
+func (NoopReconciler) Stop(context.Context, error) {}
+func (NoopReconciler) TrackResourceReplacement(context.Context, uuid.UUID, uuid.UUID, []*sdkproto.ResourceReplacement) {
+}
 func (NoopReconciler) ReconcileAll(context.Context) error { return nil }
 func (NoopReconciler) SnapshotState(context.Context, database.Store) (*GlobalSnapshot, error) {
 	return &GlobalSnapshot{}, nil
diff --git a/coderd/provisionerdserver/provisionerdserver.go b/coderd/provisionerdserver/provisionerdserver.go
index d2e0edbab83d9..5e3a2a84efc62 100644
--- a/coderd/provisionerdserver/provisionerdserver.go
+++ b/coderd/provisionerdserver/provisionerdserver.go
@@ -110,6 +110,7 @@ type server struct {
 	UserQuietHoursScheduleStore *atomic.Pointer[schedule.UserQuietHoursScheduleStore]
 	DeploymentValues            *codersdk.DeploymentValues
 	NotificationsEnqueuer       notifications.Enqueuer
+	PrebuildsOrchestrator       *atomic.Pointer[prebuilds.ReconciliationOrchestrator]
 
 	OIDCConfig promoauth.OAuth2Config
 
@@ -145,8 +146,7 @@ func (t Tags) Valid() error {
 	return nil
 }
 
-func NewServer(
-	lifecycleCtx context.Context,
+func NewServer(lifecycleCtx context.Context,
 	accessURL *url.URL,
 	id uuid.UUID,
 	organizationID uuid.UUID,
@@ -165,6 +165,7 @@ func NewServer(
 	deploymentValues *codersdk.DeploymentValues,
 	options Options,
 	enqueuer notifications.Enqueuer,
+	prebuildsOrchestrator *atomic.Pointer[prebuilds.ReconciliationOrchestrator],
 ) (proto.DRPCProvisionerDaemonServer, error) {
 	// Fail-fast if pointers are nil
 	if lifecycleCtx == nil {
@@ -229,6 +230,7 @@ func NewServer(
 		acquireJobLongPollDur:       options.AcquireJobLongPollDur,
 		heartbeatInterval:           options.HeartbeatInterval,
 		heartbeatFn:                 options.HeartbeatFn,
+		PrebuildsOrchestrator:       prebuildsOrchestrator,
 	}
 
 	if s.heartbeatFn == nil {
@@ -1749,6 +1751,15 @@ func (s *server) CompleteJob(ctx context.Context, completed *proto.CompletedJob)
 			})
 		}
 
+		if s.PrebuildsOrchestrator != nil {
+			// Track resource replacements, if there are any.
+			orchestrator := s.PrebuildsOrchestrator.Load()
+			if resourceReplacements := completed.GetWorkspaceBuild().GetResourceReplacements(); orchestrator != nil && len(resourceReplacements) > 0 {
+				// Fire and forget. Bind to the lifecycle of the server so shutdowns are handled gracefully.
+				go (*orchestrator).TrackResourceReplacement(s.lifecycleCtx, workspace.ID, workspaceBuild.ID, resourceReplacements)
+			}
+		}
+
 		msg, err := json.Marshal(wspubsub.WorkspaceEvent{
 			Kind:        wspubsub.WorkspaceEventKindStateChange,
 			WorkspaceID: workspace.ID,
diff --git a/coderd/provisionerdserver/provisionerdserver_test.go b/coderd/provisionerdserver/provisionerdserver_test.go
index 3b0ec44084c44..1ba86c50baf8a 100644
--- a/coderd/provisionerdserver/provisionerdserver_test.go
+++ b/coderd/provisionerdserver/provisionerdserver_test.go
@@ -26,11 +26,6 @@ import (
 	"github.com/coder/quartz"
 	"github.com/coder/serpent"
 
-	"github.com/coder/coder/v2/coderd/prebuilds"
-	"github.com/coder/coder/v2/coderd/provisionerdserver"
-	"github.com/coder/coder/v2/coderd/rbac"
-	"github.com/coder/coder/v2/codersdk/agentsdk"
-
 	"github.com/coder/coder/v2/buildinfo"
 	"github.com/coder/coder/v2/coderd/audit"
 	"github.com/coder/coder/v2/coderd/database"
@@ -42,11 +37,15 @@ import (
 	"github.com/coder/coder/v2/coderd/externalauth"
 	"github.com/coder/coder/v2/coderd/notifications"
 	"github.com/coder/coder/v2/coderd/notifications/notificationstest"
+	agplprebuilds "github.com/coder/coder/v2/coderd/prebuilds"
+	"github.com/coder/coder/v2/coderd/provisionerdserver"
+	"github.com/coder/coder/v2/coderd/rbac"
 	"github.com/coder/coder/v2/coderd/schedule"
 	"github.com/coder/coder/v2/coderd/schedule/cron"
 	"github.com/coder/coder/v2/coderd/telemetry"
 	"github.com/coder/coder/v2/coderd/wspubsub"
 	"github.com/coder/coder/v2/codersdk"
+	"github.com/coder/coder/v2/codersdk/agentsdk"
 	"github.com/coder/coder/v2/provisionerd/proto"
 	"github.com/coder/coder/v2/provisionersdk"
 	sdkproto "github.com/coder/coder/v2/provisionersdk/proto"
@@ -1889,7 +1888,7 @@ func TestCompleteJob(t *testing.T) {
 
 				// GIVEN something is listening to process workspace reinitialization:
 				reinitChan := make(chan agentsdk.ReinitializationEvent, 1) // Buffered to simplify test structure
-				cancel, err := prebuilds.NewPubsubWorkspaceClaimListener(ps, testutil.Logger(t)).ListenForWorkspaceClaims(ctx, workspace.ID, reinitChan)
+				cancel, err := agplprebuilds.NewPubsubWorkspaceClaimListener(ps, testutil.Logger(t)).ListenForWorkspaceClaims(ctx, workspace.ID, reinitChan)
 				require.NoError(t, err)
 				defer cancel()
 
@@ -1917,6 +1916,106 @@ func TestCompleteJob(t *testing.T) {
 			})
 		}
 	})
+
+	t.Run("PrebuiltWorkspaceClaimWithResourceReplacements", func(t *testing.T) {
+		t.Parallel()
+
+		ctx := testutil.Context(t, testutil.WaitLong)
+
+		// Given: a mock prebuild orchestrator which stores calls to TrackResourceReplacement.
+		done := make(chan struct{})
+		orchestrator := &mockPrebuildsOrchestrator{
+			ReconciliationOrchestrator: agplprebuilds.DefaultReconciler,
+			done:                       done,
+		}
+		srv, db, ps, pd := setup(t, false, &overrides{
+			prebuildsOrchestrator: orchestrator,
+		})
+
+		// Given: a workspace build which simulates claiming a prebuild.
+		user := dbgen.User(t, db, database.User{})
+		template := dbgen.Template(t, db, database.Template{
+			Name:           "template",
+			Provisioner:    database.ProvisionerTypeEcho,
+			OrganizationID: pd.OrganizationID,
+		})
+		file := dbgen.File(t, db, database.File{CreatedBy: user.ID})
+		workspaceTable := dbgen.Workspace(t, db, database.WorkspaceTable{
+			TemplateID:     template.ID,
+			OwnerID:        user.ID,
+			OrganizationID: pd.OrganizationID,
+		})
+		version := dbgen.TemplateVersion(t, db, database.TemplateVersion{
+			OrganizationID: pd.OrganizationID,
+			TemplateID: uuid.NullUUID{
+				UUID:  template.ID,
+				Valid: true,
+			},
+			JobID: uuid.New(),
+		})
+		build := dbgen.WorkspaceBuild(t, db, database.WorkspaceBuild{
+			WorkspaceID:       workspaceTable.ID,
+			InitiatorID:       user.ID,
+			TemplateVersionID: version.ID,
+			Transition:        database.WorkspaceTransitionStart,
+			Reason:            database.BuildReasonInitiator,
+		})
+		job := dbgen.ProvisionerJob(t, db, ps, database.ProvisionerJob{
+			FileID:      file.ID,
+			InitiatorID: user.ID,
+			Type:        database.ProvisionerJobTypeWorkspaceBuild,
+			Input: must(json.Marshal(provisionerdserver.WorkspaceProvisionJob{
+				WorkspaceBuildID:            build.ID,
+				PrebuiltWorkspaceBuildStage: sdkproto.PrebuiltWorkspaceBuildStage_CLAIM,
+			})),
+			OrganizationID: pd.OrganizationID,
+		})
+		_, err := db.AcquireProvisionerJob(ctx, database.AcquireProvisionerJobParams{
+			OrganizationID: pd.OrganizationID,
+			WorkerID: uuid.NullUUID{
+				UUID:  pd.ID,
+				Valid: true,
+			},
+			Types: []database.ProvisionerType{database.ProvisionerTypeEcho},
+		})
+		require.NoError(t, err)
+
+		// When: a replacement is encountered.
+		replacements := []*sdkproto.ResourceReplacement{
+			{
+				Resource: "docker_container[0]",
+				Paths:    []string{"env"},
+			},
+		}
+
+		// Then: CompleteJob makes a call to TrackResourceReplacement.
+		_, err = srv.CompleteJob(ctx, &proto.CompletedJob{
+			JobId: job.ID.String(),
+			Type: &proto.CompletedJob_WorkspaceBuild_{
+				WorkspaceBuild: &proto.CompletedJob_WorkspaceBuild{
+					State:                []byte{},
+					ResourceReplacements: replacements,
+				},
+			},
+		})
+		require.NoError(t, err)
+
+		// Then: the replacements are as we expected.
+		testutil.RequireReceive(ctx, t, done)
+		require.Equal(t, replacements, orchestrator.replacements)
+	})
+}
+
+type mockPrebuildsOrchestrator struct {
+	agplprebuilds.ReconciliationOrchestrator
+
+	replacements []*sdkproto.ResourceReplacement
+	done         chan struct{}
+}
+
+func (m *mockPrebuildsOrchestrator) TrackResourceReplacement(_ context.Context, _, _ uuid.UUID, replacements []*sdkproto.ResourceReplacement) {
+	m.replacements = replacements
+	m.done <- struct{}{}
 }
 
 func TestInsertWorkspacePresetsAndParameters(t *testing.T) {
@@ -2802,6 +2901,7 @@ type overrides struct {
 	heartbeatInterval           time.Duration
 	auditor                     audit.Auditor
 	notificationEnqueuer        notifications.Enqueuer
+	prebuildsOrchestrator       agplprebuilds.ReconciliationOrchestrator
 }
 
 func setup(t *testing.T, ignoreLogErrors bool, ov *overrides) (proto.DRPCProvisionerDaemonServer, database.Store, pubsub.Pubsub, database.ProvisionerDaemon) {
@@ -2883,6 +2983,13 @@ func setup(t *testing.T, ignoreLogErrors bool, ov *overrides) (proto.DRPCProvisi
 	})
 	require.NoError(t, err)
 
+	prebuildsOrchestrator := ov.prebuildsOrchestrator
+	if prebuildsOrchestrator == nil {
+		prebuildsOrchestrator = agplprebuilds.DefaultReconciler
+	}
+	var op atomic.Pointer[agplprebuilds.ReconciliationOrchestrator]
+	op.Store(&prebuildsOrchestrator)
+
 	srv, err := provisionerdserver.NewServer(
 		ov.ctx,
 		&url.URL{},
@@ -2910,6 +3017,7 @@ func setup(t *testing.T, ignoreLogErrors bool, ov *overrides) (proto.DRPCProvisi
 			HeartbeatFn:           ov.heartbeatFn,
 		},
 		notifEnq,
+		&op,
 	)
 	require.NoError(t, err)
 	return srv, db, ps, daemon
diff --git a/docs/admin/templates/extending-templates/prebuilt-workspaces.md b/docs/admin/templates/extending-templates/prebuilt-workspaces.md
index bbff3b7f15747..894a2a219a9cf 100644
--- a/docs/admin/templates/extending-templates/prebuilt-workspaces.md
+++ b/docs/admin/templates/extending-templates/prebuilt-workspaces.md
@@ -163,6 +163,12 @@ resource "docker_container" "workspace" {
 
 Learn more about `ignore_changes` in the [Terraform documentation](https://developer.hashicorp.com/terraform/language/meta-arguments/lifecycle#ignore_changes).
 
+_A note on "immutable" attributes: Terraform providers may specify `ForceNew` on their resources' attributes. Any change
+to these attributes require the replacement (destruction and recreation) of the managed resource instance, rather than an in-place update.
+For example, the [`ami`](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/instance#ami-1) attribute on the `aws_instance` resource
+has [`ForceNew`](https://github.com/hashicorp/terraform-provider-aws/blob/main/internal/service/ec2/ec2_instance.go#L75-L81) set,
+since the AMI cannot be changed in-place._
+
 ### Current limitations
 
 The prebuilt workspaces feature has these current limitations:
diff --git a/enterprise/coderd/coderd.go b/enterprise/coderd/coderd.go
index 8b473e8168ffa..f46848812a69e 100644
--- a/enterprise/coderd/coderd.go
+++ b/enterprise/coderd/coderd.go
@@ -1165,6 +1165,6 @@ func (api *API) setupPrebuilds(featureEnabled bool) (agplprebuilds.Reconciliatio
 	}
 
 	reconciler := prebuilds.NewStoreReconciler(api.Database, api.Pubsub, api.DeploymentValues.Prebuilds,
-		api.Logger.Named("prebuilds"), quartz.NewReal(), api.PrometheusRegistry)
+		api.Logger.Named("prebuilds"), quartz.NewReal(), api.PrometheusRegistry, api.NotificationsEnqueuer)
 	return reconciler, prebuilds.NewEnterpriseClaimer(api.Database)
 }
diff --git a/enterprise/coderd/prebuilds/claim_test.go b/enterprise/coderd/prebuilds/claim_test.go
index ad31d2b4eff1b..5a18600a84602 100644
--- a/enterprise/coderd/prebuilds/claim_test.go
+++ b/enterprise/coderd/prebuilds/claim_test.go
@@ -147,7 +147,7 @@ func TestClaimPrebuild(t *testing.T) {
 				EntitlementsUpdateInterval: time.Second,
 			})
 
-			reconciler := prebuilds.NewStoreReconciler(spy, pubsub, codersdk.PrebuildsConfig{}, logger, quartz.NewMock(t), prometheus.NewRegistry())
+			reconciler := prebuilds.NewStoreReconciler(spy, pubsub, codersdk.PrebuildsConfig{}, logger, quartz.NewMock(t), prometheus.NewRegistry(), newNoopEnqueuer())
 			var claimer agplprebuilds.Claimer = prebuilds.NewEnterpriseClaimer(spy)
 			api.AGPL.PrebuildsClaimer.Store(&claimer)
 
diff --git a/enterprise/coderd/prebuilds/metricscollector.go b/enterprise/coderd/prebuilds/metricscollector.go
index 76089c025243d..9f1cc837d0474 100644
--- a/enterprise/coderd/prebuilds/metricscollector.go
+++ b/enterprise/coderd/prebuilds/metricscollector.go
@@ -3,6 +3,7 @@ package prebuilds
 import (
 	"context"
 	"fmt"
+	"sync"
 	"sync/atomic"
 	"time"
 
@@ -16,50 +17,73 @@ import (
 	"github.com/coder/coder/v2/coderd/prebuilds"
 )
 
+const (
+	namespace = "coderd_prebuilt_workspaces_"
+
+	MetricCreatedCount              = namespace + "created_total"
+	MetricFailedCount               = namespace + "failed_total"
+	MetricClaimedCount              = namespace + "claimed_total"
+	MetricResourceReplacementsCount = namespace + "resource_replacements_total"
+	MetricDesiredGauge              = namespace + "desired"
+	MetricRunningGauge              = namespace + "running"
+	MetricEligibleGauge             = namespace + "eligible"
+	MetricLastUpdatedGauge          = namespace + "metrics_last_updated"
+)
+
 var (
 	labels               = []string{"template_name", "preset_name", "organization_name"}
 	createdPrebuildsDesc = prometheus.NewDesc(
-		"coderd_prebuilt_workspaces_created_total",
+		MetricCreatedCount,
 		"Total number of prebuilt workspaces that have been created to meet the desired instance count of each "+
 			"template preset.",
 		labels,
 		nil,
 	)
 	failedPrebuildsDesc = prometheus.NewDesc(
-		"coderd_prebuilt_workspaces_failed_total",
+		MetricFailedCount,
 		"Total number of prebuilt workspaces that failed to build.",
 		labels,
 		nil,
 	)
 	claimedPrebuildsDesc = prometheus.NewDesc(
-		"coderd_prebuilt_workspaces_claimed_total",
+		MetricClaimedCount,
 		"Total number of prebuilt workspaces which were claimed by users. Claiming refers to creating a workspace "+
 			"with a preset selected for which eligible prebuilt workspaces are available and one is reassigned to a user.",
 		labels,
 		nil,
 	)
+	resourceReplacementsDesc = prometheus.NewDesc(
+		MetricResourceReplacementsCount,
+		"Total number of prebuilt workspaces whose resource(s) got replaced upon being claimed. "+
+			"In Terraform, drift on immutable attributes results in resource replacement. "+
+			"This represents a worst-case scenario for prebuilt workspaces because the pre-provisioned resource "+
+			"would have been recreated when claiming, thus obviating the point of pre-provisioning. "+
+			"See https://coder.com/docs/admin/templates/extending-templates/prebuilt-workspaces#preventing-resource-replacement",
+		labels,
+		nil,
+	)
 	desiredPrebuildsDesc = prometheus.NewDesc(
-		"coderd_prebuilt_workspaces_desired",
+		MetricDesiredGauge,
 		"Target number of prebuilt workspaces that should be available for each template preset.",
 		labels,
 		nil,
 	)
 	runningPrebuildsDesc = prometheus.NewDesc(
-		"coderd_prebuilt_workspaces_running",
+		MetricRunningGauge,
 		"Current number of prebuilt workspaces that are in a running state. These workspaces have started "+
 			"successfully but may not yet be claimable by users (see coderd_prebuilt_workspaces_eligible).",
 		labels,
 		nil,
 	)
 	eligiblePrebuildsDesc = prometheus.NewDesc(
-		"coderd_prebuilt_workspaces_eligible",
+		MetricEligibleGauge,
 		"Current number of prebuilt workspaces that are eligible to be claimed by users. These are workspaces that "+
 			"have completed their build process with their agent reporting 'ready' status.",
 		labels,
 		nil,
 	)
 	lastUpdateDesc = prometheus.NewDesc(
-		"coderd_prebuilt_workspaces_metrics_last_updated",
+		MetricLastUpdatedGauge,
 		"The unix timestamp when the metrics related to prebuilt workspaces were last updated; these metrics are cached.",
 		[]string{},
 		nil,
@@ -77,6 +101,9 @@ type MetricsCollector struct {
 	snapshotter prebuilds.StateSnapshotter
 
 	latestState atomic.Pointer[metricsState]
+
+	replacementsCounter   map[replacementKey]float64
+	replacementsCounterMu sync.Mutex
 }
 
 var _ prometheus.Collector = new(MetricsCollector)
@@ -84,9 +111,10 @@ var _ prometheus.Collector = new(MetricsCollector)
 func NewMetricsCollector(db database.Store, logger slog.Logger, snapshotter prebuilds.StateSnapshotter) *MetricsCollector {
 	log := logger.Named("prebuilds_metrics_collector")
 	return &MetricsCollector{
-		database:    db,
-		logger:      log,
-		snapshotter: snapshotter,
+		database:            db,
+		logger:              log,
+		snapshotter:         snapshotter,
+		replacementsCounter: make(map[replacementKey]float64),
 	}
 }
 
@@ -94,6 +122,7 @@ func (*MetricsCollector) Describe(descCh chan<- *prometheus.Desc) {
 	descCh <- createdPrebuildsDesc
 	descCh <- failedPrebuildsDesc
 	descCh <- claimedPrebuildsDesc
+	descCh <- resourceReplacementsDesc
 	descCh <- desiredPrebuildsDesc
 	descCh <- runningPrebuildsDesc
 	descCh <- eligiblePrebuildsDesc
@@ -117,6 +146,12 @@ func (mc *MetricsCollector) Collect(metricsCh chan<- prometheus.Metric) {
 		metricsCh <- prometheus.MustNewConstMetric(claimedPrebuildsDesc, prometheus.CounterValue, float64(metric.ClaimedCount), metric.TemplateName, metric.PresetName, metric.OrganizationName)
 	}
 
+	mc.replacementsCounterMu.Lock()
+	for key, val := range mc.replacementsCounter {
+		metricsCh <- prometheus.MustNewConstMetric(resourceReplacementsDesc, prometheus.CounterValue, val, key.templateName, key.presetName, key.orgName)
+	}
+	mc.replacementsCounterMu.Unlock()
+
 	for _, preset := range currentState.snapshot.Presets {
 		if !preset.UsingActiveVersion {
 			continue
@@ -187,3 +222,24 @@ func (mc *MetricsCollector) UpdateState(ctx context.Context, timeout time.Durati
 	})
 	return nil
 }
+
+type replacementKey struct {
+	orgName, templateName, presetName string
+}
+
+func (k replacementKey) String() string {
+	return fmt.Sprintf("%s:%s:%s", k.orgName, k.templateName, k.presetName)
+}
+
+func (mc *MetricsCollector) trackResourceReplacement(orgName, templateName, presetName string) {
+	mc.replacementsCounterMu.Lock()
+	defer mc.replacementsCounterMu.Unlock()
+
+	key := replacementKey{orgName: orgName, templateName: templateName, presetName: presetName}
+
+	// We only track _that_ a resource replacement occurred, not how many.
+	// Just one is enough to ruin a prebuild, but we can't know apriori which replacement would cause this.
+	// For example, say we have 2 replacements: a docker_container and a null_resource; we don't know which one might
+	// cause an issue (or indeed if either would), so we just track the replacement.
+	mc.replacementsCounter[key]++
+}
diff --git a/enterprise/coderd/prebuilds/metricscollector_test.go b/enterprise/coderd/prebuilds/metricscollector_test.go
index de3f5d017f715..07c3c3c6996bb 100644
--- a/enterprise/coderd/prebuilds/metricscollector_test.go
+++ b/enterprise/coderd/prebuilds/metricscollector_test.go
@@ -57,12 +57,12 @@ func TestMetricsCollector(t *testing.T) {
 			initiatorIDs: []uuid.UUID{agplprebuilds.SystemUserID},
 			ownerIDs:     []uuid.UUID{agplprebuilds.SystemUserID},
 			metrics: []metricCheck{
-				{"coderd_prebuilt_workspaces_created_total", ptr.To(1.0), true},
-				{"coderd_prebuilt_workspaces_claimed_total", ptr.To(0.0), true},
-				{"coderd_prebuilt_workspaces_failed_total", ptr.To(0.0), true},
-				{"coderd_prebuilt_workspaces_desired", ptr.To(1.0), false},
-				{"coderd_prebuilt_workspaces_running", ptr.To(0.0), false},
-				{"coderd_prebuilt_workspaces_eligible", ptr.To(0.0), false},
+				{prebuilds.MetricCreatedCount, ptr.To(1.0), true},
+				{prebuilds.MetricClaimedCount, ptr.To(0.0), true},
+				{prebuilds.MetricFailedCount, ptr.To(0.0), true},
+				{prebuilds.MetricDesiredGauge, ptr.To(1.0), false},
+				{prebuilds.MetricRunningGauge, ptr.To(0.0), false},
+				{prebuilds.MetricEligibleGauge, ptr.To(0.0), false},
 			},
 			templateDeleted: []bool{false},
 			eligible:        []bool{false},
@@ -74,12 +74,12 @@ func TestMetricsCollector(t *testing.T) {
 			initiatorIDs: []uuid.UUID{agplprebuilds.SystemUserID},
 			ownerIDs:     []uuid.UUID{agplprebuilds.SystemUserID},
 			metrics: []metricCheck{
-				{"coderd_prebuilt_workspaces_created_total", ptr.To(1.0), true},
-				{"coderd_prebuilt_workspaces_claimed_total", ptr.To(0.0), true},
-				{"coderd_prebuilt_workspaces_failed_total", ptr.To(0.0), true},
-				{"coderd_prebuilt_workspaces_desired", ptr.To(1.0), false},
-				{"coderd_prebuilt_workspaces_running", ptr.To(1.0), false},
-				{"coderd_prebuilt_workspaces_eligible", ptr.To(0.0), false},
+				{prebuilds.MetricCreatedCount, ptr.To(1.0), true},
+				{prebuilds.MetricClaimedCount, ptr.To(0.0), true},
+				{prebuilds.MetricFailedCount, ptr.To(0.0), true},
+				{prebuilds.MetricDesiredGauge, ptr.To(1.0), false},
+				{prebuilds.MetricRunningGauge, ptr.To(1.0), false},
+				{prebuilds.MetricEligibleGauge, ptr.To(0.0), false},
 			},
 			templateDeleted: []bool{false},
 			eligible:        []bool{false},
@@ -91,11 +91,11 @@ func TestMetricsCollector(t *testing.T) {
 			initiatorIDs: []uuid.UUID{agplprebuilds.SystemUserID},
 			ownerIDs:     []uuid.UUID{agplprebuilds.SystemUserID, uuid.New()},
 			metrics: []metricCheck{
-				{"coderd_prebuilt_workspaces_created_total", ptr.To(1.0), true},
-				{"coderd_prebuilt_workspaces_failed_total", ptr.To(1.0), true},
-				{"coderd_prebuilt_workspaces_desired", ptr.To(1.0), false},
-				{"coderd_prebuilt_workspaces_running", ptr.To(0.0), false},
-				{"coderd_prebuilt_workspaces_eligible", ptr.To(0.0), false},
+				{prebuilds.MetricCreatedCount, ptr.To(1.0), true},
+				{prebuilds.MetricFailedCount, ptr.To(1.0), true},
+				{prebuilds.MetricDesiredGauge, ptr.To(1.0), false},
+				{prebuilds.MetricRunningGauge, ptr.To(0.0), false},
+				{prebuilds.MetricEligibleGauge, ptr.To(0.0), false},
 			},
 			templateDeleted: []bool{false},
 			eligible:        []bool{false},
@@ -107,12 +107,12 @@ func TestMetricsCollector(t *testing.T) {
 			initiatorIDs: []uuid.UUID{agplprebuilds.SystemUserID},
 			ownerIDs:     []uuid.UUID{agplprebuilds.SystemUserID},
 			metrics: []metricCheck{
-				{"coderd_prebuilt_workspaces_created_total", ptr.To(1.0), true},
-				{"coderd_prebuilt_workspaces_claimed_total", ptr.To(0.0), true},
-				{"coderd_prebuilt_workspaces_failed_total", ptr.To(0.0), true},
-				{"coderd_prebuilt_workspaces_desired", ptr.To(1.0), false},
-				{"coderd_prebuilt_workspaces_running", ptr.To(1.0), false},
-				{"coderd_prebuilt_workspaces_eligible", ptr.To(1.0), false},
+				{prebuilds.MetricCreatedCount, ptr.To(1.0), true},
+				{prebuilds.MetricClaimedCount, ptr.To(0.0), true},
+				{prebuilds.MetricFailedCount, ptr.To(0.0), true},
+				{prebuilds.MetricDesiredGauge, ptr.To(1.0), false},
+				{prebuilds.MetricRunningGauge, ptr.To(1.0), false},
+				{prebuilds.MetricEligibleGauge, ptr.To(1.0), false},
 			},
 			templateDeleted: []bool{false},
 			eligible:        []bool{true},
@@ -124,12 +124,12 @@ func TestMetricsCollector(t *testing.T) {
 			initiatorIDs: []uuid.UUID{agplprebuilds.SystemUserID},
 			ownerIDs:     []uuid.UUID{agplprebuilds.SystemUserID},
 			metrics: []metricCheck{
-				{"coderd_prebuilt_workspaces_created_total", ptr.To(1.0), true},
-				{"coderd_prebuilt_workspaces_claimed_total", ptr.To(0.0), true},
-				{"coderd_prebuilt_workspaces_failed_total", ptr.To(0.0), true},
-				{"coderd_prebuilt_workspaces_desired", ptr.To(1.0), false},
-				{"coderd_prebuilt_workspaces_running", ptr.To(1.0), false},
-				{"coderd_prebuilt_workspaces_eligible", ptr.To(0.0), false},
+				{prebuilds.MetricCreatedCount, ptr.To(1.0), true},
+				{prebuilds.MetricClaimedCount, ptr.To(0.0), true},
+				{prebuilds.MetricFailedCount, ptr.To(0.0), true},
+				{prebuilds.MetricDesiredGauge, ptr.To(1.0), false},
+				{prebuilds.MetricRunningGauge, ptr.To(1.0), false},
+				{prebuilds.MetricEligibleGauge, ptr.To(0.0), false},
 			},
 			templateDeleted: []bool{false},
 			eligible:        []bool{false},
@@ -141,11 +141,11 @@ func TestMetricsCollector(t *testing.T) {
 			initiatorIDs: []uuid.UUID{agplprebuilds.SystemUserID},
 			ownerIDs:     []uuid.UUID{uuid.New()},
 			metrics: []metricCheck{
-				{"coderd_prebuilt_workspaces_created_total", ptr.To(1.0), true},
-				{"coderd_prebuilt_workspaces_claimed_total", ptr.To(1.0), true},
-				{"coderd_prebuilt_workspaces_desired", ptr.To(1.0), false},
-				{"coderd_prebuilt_workspaces_running", ptr.To(0.0), false},
-				{"coderd_prebuilt_workspaces_eligible", ptr.To(0.0), false},
+				{prebuilds.MetricCreatedCount, ptr.To(1.0), true},
+				{prebuilds.MetricClaimedCount, ptr.To(1.0), true},
+				{prebuilds.MetricDesiredGauge, ptr.To(1.0), false},
+				{prebuilds.MetricRunningGauge, ptr.To(0.0), false},
+				{prebuilds.MetricEligibleGauge, ptr.To(0.0), false},
 			},
 			templateDeleted: []bool{false},
 			eligible:        []bool{false},
@@ -157,9 +157,9 @@ func TestMetricsCollector(t *testing.T) {
 			initiatorIDs: []uuid.UUID{uuid.New()},
 			ownerIDs:     []uuid.UUID{uuid.New()},
 			metrics: []metricCheck{
-				{"coderd_prebuilt_workspaces_desired", ptr.To(1.0), false},
-				{"coderd_prebuilt_workspaces_running", ptr.To(0.0), false},
-				{"coderd_prebuilt_workspaces_eligible", ptr.To(0.0), false},
+				{prebuilds.MetricDesiredGauge, ptr.To(1.0), false},
+				{prebuilds.MetricRunningGauge, ptr.To(0.0), false},
+				{prebuilds.MetricEligibleGauge, ptr.To(0.0), false},
 			},
 			templateDeleted: []bool{false},
 			eligible:        []bool{false},
@@ -171,7 +171,7 @@ func TestMetricsCollector(t *testing.T) {
 			initiatorIDs: []uuid.UUID{agplprebuilds.SystemUserID},
 			ownerIDs:     []uuid.UUID{agplprebuilds.SystemUserID, uuid.New()},
 			metrics: []metricCheck{
-				{"coderd_prebuilt_workspaces_desired", ptr.To(0.0), false},
+				{prebuilds.MetricDesiredGauge, ptr.To(0.0), false},
 			},
 			templateDeleted: []bool{true},
 			eligible:        []bool{false},
@@ -183,8 +183,8 @@ func TestMetricsCollector(t *testing.T) {
 			initiatorIDs: []uuid.UUID{agplprebuilds.SystemUserID},
 			ownerIDs:     []uuid.UUID{agplprebuilds.SystemUserID},
 			metrics: []metricCheck{
-				{"coderd_prebuilt_workspaces_running", ptr.To(1.0), false},
-				{"coderd_prebuilt_workspaces_eligible", ptr.To(0.0), false},
+				{prebuilds.MetricRunningGauge, ptr.To(1.0), false},
+				{prebuilds.MetricEligibleGauge, ptr.To(0.0), false},
 			},
 			templateDeleted: []bool{true},
 			eligible:        []bool{false},
@@ -220,7 +220,7 @@ func TestMetricsCollector(t *testing.T) {
 									})
 									clock := quartz.NewMock(t)
 									db, pubsub := dbtestutil.NewDB(t)
-									reconciler := prebuilds.NewStoreReconciler(db, pubsub, codersdk.PrebuildsConfig{}, logger, quartz.NewMock(t), prometheus.NewRegistry())
+									reconciler := prebuilds.NewStoreReconciler(db, pubsub, codersdk.PrebuildsConfig{}, logger, quartz.NewMock(t), prometheus.NewRegistry(), newNoopEnqueuer())
 									ctx := testutil.Context(t, testutil.WaitLong)
 
 									createdUsers := []uuid.UUID{agplprebuilds.SystemUserID}
@@ -242,7 +242,7 @@ func TestMetricsCollector(t *testing.T) {
 										org, template := setupTestDBTemplate(t, db, ownerID, templateDeleted)
 										templateVersionID := setupTestDBTemplateVersion(ctx, t, clock, db, pubsub, org.ID, ownerID, template.ID)
 										preset := setupTestDBPreset(t, db, templateVersionID, 1, uuid.New().String())
-										workspace := setupTestDBWorkspace(
+										workspace, _ := setupTestDBWorkspace(
 											t, clock, db, pubsub,
 											transition, jobStatus, org.ID, preset, template.ID, templateVersionID, initiatorID, ownerID,
 										)
diff --git a/enterprise/coderd/prebuilds/reconcile.go b/enterprise/coderd/prebuilds/reconcile.go
index 79a8baa337e72..f9588a5d7cacb 100644
--- a/enterprise/coderd/prebuilds/reconcile.go
+++ b/enterprise/coderd/prebuilds/reconcile.go
@@ -3,8 +3,10 @@ package prebuilds
 import (
 	"context"
 	"database/sql"
+	"errors"
 	"fmt"
 	"math"
+	"strings"
 	"sync"
 	"sync/atomic"
 	"time"
@@ -19,11 +21,13 @@ import (
 	"github.com/coder/coder/v2/coderd/database/dbauthz"
 	"github.com/coder/coder/v2/coderd/database/provisionerjobs"
 	"github.com/coder/coder/v2/coderd/database/pubsub"
+	"github.com/coder/coder/v2/coderd/notifications"
 	"github.com/coder/coder/v2/coderd/prebuilds"
 	"github.com/coder/coder/v2/coderd/rbac"
 	"github.com/coder/coder/v2/coderd/rbac/policy"
 	"github.com/coder/coder/v2/coderd/wsbuilder"
 	"github.com/coder/coder/v2/codersdk"
+	sdkproto "github.com/coder/coder/v2/provisionersdk/proto"
 
 	"cdr.dev/slog"
 
@@ -40,6 +44,7 @@ type StoreReconciler struct {
 	clock      quartz.Clock
 	registerer prometheus.Registerer
 	metrics    *MetricsCollector
+	notifEnq   notifications.Enqueuer
 
 	cancelFn          context.CancelCauseFunc
 	running           atomic.Bool
@@ -56,6 +61,7 @@ func NewStoreReconciler(store database.Store,
 	logger slog.Logger,
 	clock quartz.Clock,
 	registerer prometheus.Registerer,
+	notifEnq notifications.Enqueuer,
 ) *StoreReconciler {
 	reconciler := &StoreReconciler{
 		store:             store,
@@ -64,6 +70,7 @@ func NewStoreReconciler(store database.Store,
 		cfg:               cfg,
 		clock:             clock,
 		registerer:        registerer,
+		notifEnq:          notifEnq,
 		done:              make(chan struct{}, 1),
 		provisionNotifyCh: make(chan database.ProvisionerJob, 10),
 	}
@@ -633,3 +640,124 @@ func (c *StoreReconciler) provision(
 
 	return nil
 }
+
+// ForceMetricsUpdate forces the metrics collector, if defined, to update its state (we cache the metrics state to
+// reduce load on the database).
+func (c *StoreReconciler) ForceMetricsUpdate(ctx context.Context) error {
+	if c.metrics == nil {
+		return nil
+	}
+
+	return c.metrics.UpdateState(ctx, time.Second*10)
+}
+
+func (c *StoreReconciler) TrackResourceReplacement(ctx context.Context, workspaceID, buildID uuid.UUID, replacements []*sdkproto.ResourceReplacement) {
+	// nolint:gocritic // Necessary to query all the required data.
+	ctx = dbauthz.AsSystemRestricted(ctx)
+	// Since this may be called in a fire-and-forget fashion, we need to give up at some point.
+	trackCtx, trackCancel := context.WithTimeout(ctx, time.Minute)
+	defer trackCancel()
+
+	if err := c.trackResourceReplacement(trackCtx, workspaceID, buildID, replacements); err != nil {
+		c.logger.Error(ctx, "failed to track resource replacement", slog.Error(err))
+	}
+}
+
+// nolint:revive // Shut up it's fine.
+func (c *StoreReconciler) trackResourceReplacement(ctx context.Context, workspaceID, buildID uuid.UUID, replacements []*sdkproto.ResourceReplacement) error {
+	if err := ctx.Err(); err != nil {
+		return err
+	}
+
+	workspace, err := c.store.GetWorkspaceByID(ctx, workspaceID)
+	if err != nil {
+		return xerrors.Errorf("fetch workspace %q: %w", workspaceID.String(), err)
+	}
+
+	build, err := c.store.GetWorkspaceBuildByID(ctx, buildID)
+	if err != nil {
+		return xerrors.Errorf("fetch workspace build %q: %w", buildID.String(), err)
+	}
+
+	// The first build will always be the prebuild.
+	prebuild, err := c.store.GetWorkspaceBuildByWorkspaceIDAndBuildNumber(ctx, database.GetWorkspaceBuildByWorkspaceIDAndBuildNumberParams{
+		WorkspaceID: workspaceID, BuildNumber: 1,
+	})
+	if err != nil {
+		return xerrors.Errorf("fetch prebuild: %w", err)
+	}
+
+	// This should not be possible, but defend against it.
+	if !prebuild.TemplateVersionPresetID.Valid || prebuild.TemplateVersionPresetID.UUID == uuid.Nil {
+		return xerrors.Errorf("no preset used in prebuild for workspace %q", workspaceID.String())
+	}
+
+	prebuildPreset, err := c.store.GetPresetByID(ctx, prebuild.TemplateVersionPresetID.UUID)
+	if err != nil {
+		return xerrors.Errorf("fetch template preset for template version ID %q: %w", prebuild.TemplateVersionID.String(), err)
+	}
+
+	claimant, err := c.store.GetUserByID(ctx, workspace.OwnerID) // At this point, the workspace is owned by the new owner.
+	if err != nil {
+		return xerrors.Errorf("fetch claimant %q: %w", workspace.OwnerID.String(), err)
+	}
+
+	// Use the claiming build here (not prebuild) because both should be equivalent, and we might as well spot inconsistencies now.
+	templateVersion, err := c.store.GetTemplateVersionByID(ctx, build.TemplateVersionID)
+	if err != nil {
+		return xerrors.Errorf("fetch template version %q: %w", build.TemplateVersionID.String(), err)
+	}
+
+	org, err := c.store.GetOrganizationByID(ctx, workspace.OrganizationID)
+	if err != nil {
+		return xerrors.Errorf("fetch org %q: %w", workspace.OrganizationID.String(), err)
+	}
+
+	// Track resource replacement in Prometheus metric.
+	if c.metrics != nil {
+		c.metrics.trackResourceReplacement(org.Name, workspace.TemplateName, prebuildPreset.Name)
+	}
+
+	// Send notification to template admins.
+	if c.notifEnq == nil {
+		c.logger.Warn(ctx, "notification enqueuer not set, cannot send resource replacement notification(s)")
+		return nil
+	}
+
+	repls := make(map[string]string, len(replacements))
+	for _, repl := range replacements {
+		repls[repl.GetResource()] = strings.Join(repl.GetPaths(), ", ")
+	}
+
+	templateAdmins, err := c.store.GetUsers(ctx, database.GetUsersParams{
+		RbacRole: []string{codersdk.RoleTemplateAdmin},
+	})
+	if err != nil {
+		return xerrors.Errorf("fetch template admins: %w", err)
+	}
+
+	var notifErr error
+	for _, templateAdmin := range templateAdmins {
+		if _, err := c.notifEnq.EnqueueWithData(ctx, templateAdmin.ID, notifications.TemplateWorkspaceResourceReplaced,
+			map[string]string{
+				"org":                 org.Name,
+				"workspace":           workspace.Name,
+				"template":            workspace.TemplateName,
+				"template_version":    templateVersion.Name,
+				"preset":              prebuildPreset.Name,
+				"workspace_build_num": fmt.Sprintf("%d", build.BuildNumber),
+				"claimant":            claimant.Username,
+			},
+			map[string]any{
+				"replacements": repls,
+			}, "prebuilds_reconciler",
+			// Associate this notification with all the related entities.
+			workspace.ID, workspace.OwnerID, workspace.TemplateID, templateVersion.ID, prebuildPreset.ID, workspace.OrganizationID,
+		); err != nil {
+			notifErr = errors.Join(xerrors.Errorf("send notification to %q: %w", templateAdmin.ID.String(), err))
+			continue
+		}
+	}
+
+	return notifErr
+}
diff --git a/enterprise/coderd/prebuilds/reconcile_test.go b/enterprise/coderd/prebuilds/reconcile_test.go
index a1666134a7965..bdf447dcfae22 100644
--- a/enterprise/coderd/prebuilds/reconcile_test.go
+++ b/enterprise/coderd/prebuilds/reconcile_test.go
@@ -9,10 +9,14 @@ import (
 	"time"
 
 	"github.com/prometheus/client_golang/prometheus"
+	"github.com/stretchr/testify/assert"
 	"golang.org/x/xerrors"
 
 	"github.com/coder/coder/v2/coderd/database/dbtime"
+	"github.com/coder/coder/v2/coderd/notifications"
+	"github.com/coder/coder/v2/coderd/notifications/notificationstest"
 	"github.com/coder/coder/v2/coderd/util/slice"
+	sdkproto "github.com/coder/coder/v2/provisionersdk/proto"
 
 	"github.com/google/uuid"
 	"github.com/stretchr/testify/require"
@@ -49,7 +53,7 @@ func TestNoReconciliationActionsIfNoPresets(t *testing.T) {
 		ReconciliationInterval: serpent.Duration(testutil.WaitLong),
 	}
 	logger := testutil.Logger(t)
-	controller := prebuilds.NewStoreReconciler(db, ps, cfg, logger, quartz.NewMock(t), prometheus.NewRegistry())
+	controller := prebuilds.NewStoreReconciler(db, ps, cfg, logger, quartz.NewMock(t), prometheus.NewRegistry(), newNoopEnqueuer())
 
 	// given a template version with no presets
 	org := dbgen.Organization(t, db, database.Organization{})
@@ -94,7 +98,7 @@ func TestNoReconciliationActionsIfNoPrebuilds(t *testing.T) {
 		ReconciliationInterval: serpent.Duration(testutil.WaitLong),
 	}
 	logger := testutil.Logger(t)
-	controller := prebuilds.NewStoreReconciler(db, ps, cfg, logger, quartz.NewMock(t), prometheus.NewRegistry())
+	controller := prebuilds.NewStoreReconciler(db, ps, cfg, logger, quartz.NewMock(t), prometheus.NewRegistry(), newNoopEnqueuer())
 
 	// given there are presets, but no prebuilds
 	org := dbgen.Organization(t, db, database.Organization{})
@@ -345,7 +349,7 @@ func TestPrebuildReconciliation(t *testing.T) {
 									1,
 									uuid.New().String(),
 								)
-								prebuild := setupTestDBPrebuild(
+								prebuild, _ := setupTestDBPrebuild(
 									t,
 									clock,
 									db,
@@ -367,7 +371,7 @@ func TestPrebuildReconciliation(t *testing.T) {
 								if useBrokenPubsub {
 									pubSub = &brokenPublisher{Pubsub: pubSub}
 								}
-								controller := prebuilds.NewStoreReconciler(db, pubSub, cfg, logger, quartz.NewMock(t), prometheus.NewRegistry())
+								controller := prebuilds.NewStoreReconciler(db, pubSub, cfg, logger, quartz.NewMock(t), prometheus.NewRegistry(), newNoopEnqueuer())
 
 								// Run the reconciliation multiple times to ensure idempotency
 								// 8 was arbitrary, but large enough to reasonably trust the result
@@ -444,7 +448,7 @@ func TestMultiplePresetsPerTemplateVersion(t *testing.T) {
 		t, &slogtest.Options{IgnoreErrors: true},
 	).Leveled(slog.LevelDebug)
 	db, pubSub := dbtestutil.NewDB(t)
-	controller := prebuilds.NewStoreReconciler(db, pubSub, cfg, logger, quartz.NewMock(t), prometheus.NewRegistry())
+	controller := prebuilds.NewStoreReconciler(db, pubSub, cfg, logger, quartz.NewMock(t), prometheus.NewRegistry(), newNoopEnqueuer())
 
 	ownerID := uuid.New()
 	dbgen.User(t, db, database.User{
@@ -477,7 +481,7 @@ func TestMultiplePresetsPerTemplateVersion(t *testing.T) {
 	)
 	prebuildIDs := make([]uuid.UUID, 0)
 	for i := 0; i < int(preset.DesiredInstances.Int32); i++ {
-		prebuild := setupTestDBPrebuild(
+		prebuild, _ := setupTestDBPrebuild(
 			t,
 			clock,
 			db,
@@ -528,7 +532,7 @@ func TestInvalidPreset(t *testing.T) {
 		t, &slogtest.Options{IgnoreErrors: true},
 	).Leveled(slog.LevelDebug)
 	db, pubSub := dbtestutil.NewDB(t)
-	controller := prebuilds.NewStoreReconciler(db, pubSub, cfg, logger, quartz.NewMock(t), prometheus.NewRegistry())
+	controller := prebuilds.NewStoreReconciler(db, pubSub, cfg, logger, quartz.NewMock(t), prometheus.NewRegistry(), newNoopEnqueuer())
 
 	ownerID := uuid.New()
 	dbgen.User(t, db, database.User{
@@ -592,7 +596,7 @@ func TestDeletionOfPrebuiltWorkspaceWithInvalidPreset(t *testing.T) {
 		t, &slogtest.Options{IgnoreErrors: true},
 	).Leveled(slog.LevelDebug)
 	db, pubSub := dbtestutil.NewDB(t)
-	controller := prebuilds.NewStoreReconciler(db, pubSub, cfg, logger, quartz.NewMock(t), prometheus.NewRegistry())
+	controller := prebuilds.NewStoreReconciler(db, pubSub, cfg, logger, quartz.NewMock(t), prometheus.NewRegistry(), newNoopEnqueuer())
 
 	ownerID := uuid.New()
 	dbgen.User(t, db, database.User{
@@ -601,7 +605,7 @@ func TestDeletionOfPrebuiltWorkspaceWithInvalidPreset(t *testing.T) {
 	org, template := setupTestDBTemplate(t, db, ownerID, templateDeleted)
 	templateVersionID := setupTestDBTemplateVersion(ctx, t, clock, db, pubSub, org.ID, ownerID, template.ID)
 	preset := setupTestDBPreset(t, db, templateVersionID, 1, uuid.New().String())
-	prebuiltWorkspace := setupTestDBPrebuild(
+	prebuiltWorkspace, _ := setupTestDBPrebuild(
 		t,
 		clock,
 		db,
@@ -669,7 +673,7 @@ func TestRunLoop(t *testing.T) {
 		t, &slogtest.Options{IgnoreErrors: true},
 	).Leveled(slog.LevelDebug)
 	db, pubSub := dbtestutil.NewDB(t)
-	reconciler := prebuilds.NewStoreReconciler(db, pubSub, cfg, logger, clock, prometheus.NewRegistry())
+	reconciler := prebuilds.NewStoreReconciler(db, pubSub, cfg, logger, clock, prometheus.NewRegistry(), newNoopEnqueuer())
 
 	ownerID := uuid.New()
 	dbgen.User(t, db, database.User{
@@ -702,7 +706,7 @@ func TestRunLoop(t *testing.T) {
 	)
 	prebuildIDs := make([]uuid.UUID, 0)
 	for i := 0; i < int(preset.DesiredInstances.Int32); i++ {
-		prebuild := setupTestDBPrebuild(
+		prebuild, _ := setupTestDBPrebuild(
 			t,
 			clock,
 			db,
@@ -799,7 +803,7 @@ func TestFailedBuildBackoff(t *testing.T) {
 		t, &slogtest.Options{IgnoreErrors: true},
 	).Leveled(slog.LevelDebug)
 	db, ps := dbtestutil.NewDB(t)
-	reconciler := prebuilds.NewStoreReconciler(db, ps, cfg, logger, clock, prometheus.NewRegistry())
+	reconciler := prebuilds.NewStoreReconciler(db, ps, cfg, logger, clock, prometheus.NewRegistry(), newNoopEnqueuer())
 
 	// Given: an active template version with presets and prebuilds configured.
 	const desiredInstances = 2
@@ -812,7 +816,7 @@ func TestFailedBuildBackoff(t *testing.T) {
 
 	preset := setupTestDBPreset(t, db, templateVersionID, desiredInstances, "test")
 	for range desiredInstances {
-		_ = setupTestDBPrebuild(t, clock, db, ps, database.WorkspaceTransitionStart, database.ProvisionerJobStatusFailed, org.ID, preset, template.ID, templateVersionID)
+		_, _ = setupTestDBPrebuild(t, clock, db, ps, database.WorkspaceTransitionStart, database.ProvisionerJobStatusFailed, org.ID, preset, template.ID, templateVersionID)
 	}
 
 	// When: determining what actions to take next, backoff is calculated because the prebuild is in a failed state.
@@ -873,7 +877,7 @@ func TestFailedBuildBackoff(t *testing.T) {
 		if i == 1 {
 			status = database.ProvisionerJobStatusSucceeded
 		}
-		_ = setupTestDBPrebuild(t, clock, db, ps, database.WorkspaceTransitionStart, status, org.ID, preset, template.ID, templateVersionID)
+		_, _ = setupTestDBPrebuild(t, clock, db, ps, database.WorkspaceTransitionStart, status, org.ID, preset, template.ID, templateVersionID)
 	}
 
 	// Then: the backoff time is roughly equal to two backoff intervals, since another build has failed.
@@ -914,7 +918,8 @@ func TestReconciliationLock(t *testing.T) {
 				codersdk.PrebuildsConfig{},
 				slogtest.Make(t, &slogtest.Options{IgnoreErrors: true}).Leveled(slog.LevelDebug),
 				quartz.NewMock(t),
-				prometheus.NewRegistry())
+				prometheus.NewRegistry(),
+				newNoopEnqueuer())
 			reconciler.WithReconciliationLock(ctx, logger, func(_ context.Context, _ database.Store) error {
 				lockObtained := mutex.TryLock()
 				// As long as the postgres lock is held, this mutex should always be unlocked when we get here.
@@ -931,6 +936,102 @@ func TestReconciliationLock(t *testing.T) {
 	wg.Wait()
 }
 
+func TestTrackResourceReplacement(t *testing.T) {
+	t.Parallel()
+
+	if !dbtestutil.WillUsePostgres() {
+		t.Skip("This test requires postgres")
+	}
+
+	ctx := testutil.Context(t, testutil.WaitSuperLong)
+
+	// Setup.
+	clock := quartz.NewMock(t)
+	logger := slogtest.Make(t, &slogtest.Options{IgnoreErrors: false}).Leveled(slog.LevelDebug)
+	db, ps := dbtestutil.NewDB(t)
+
+	fakeEnqueuer := newFakeEnqueuer()
+	registry := prometheus.NewRegistry()
+	reconciler := prebuilds.NewStoreReconciler(db, ps, codersdk.PrebuildsConfig{}, logger, clock, registry, fakeEnqueuer)
+
+	// Given: a template admin to receive a notification.
+	templateAdmin := dbgen.User(t, db, database.User{
+		RBACRoles: []string{codersdk.RoleTemplateAdmin},
+	})
+
+	// Given: a prebuilt workspace.
+	userID := uuid.New()
+	dbgen.User(t, db, database.User{ID: userID})
+	org, template := setupTestDBTemplate(t, db, userID, false)
+	templateVersionID := setupTestDBTemplateVersion(ctx, t, clock, db, ps, org.ID, userID, template.ID)
+	preset := setupTestDBPreset(t, db, templateVersionID, 1, "b0rked")
+	prebuiltWorkspace, prebuild := setupTestDBPrebuild(t, clock, db, ps, database.WorkspaceTransitionStart, database.ProvisionerJobStatusSucceeded, org.ID, preset, template.ID, templateVersionID)
+
+	// Given: no replacement has been tracked yet, we should not see a metric for it yet.
+	require.NoError(t, reconciler.ForceMetricsUpdate(ctx))
+	mf, err := registry.Gather()
+	require.NoError(t, err)
+	require.Nil(t, findMetric(mf, prebuilds.MetricResourceReplacementsCount, map[string]string{
+		"template_name": template.Name,
+		"preset_name":   preset.Name,
+		"org_name":      org.Name,
+	}))
+
+	// When: a claim occurred and resource replacements are detected (_how_ is out of scope of this test).
+	reconciler.TrackResourceReplacement(ctx, prebuiltWorkspace.ID, prebuild.ID, []*sdkproto.ResourceReplacement{
+		{
+			Resource: "docker_container[0]",
+			Paths:    []string{"env", "image"},
+		},
+		{
+			Resource: "docker_volume[0]",
+			Paths:    []string{"name"},
+		},
+	})
+
+	// Then: a notification will be sent detailing the replacement(s).
+	matching := fakeEnqueuer.Sent(func(notification *notificationstest.FakeNotification) bool {
+		// This is not an exhaustive check of the expected labels/data in the notification. This would tie the implementations
+		// too tightly together.
+		// All we need to validate is that a template of the right kind was sent, to the expected user, with some replacements.
+
+		if !assert.Equal(t, notification.TemplateID, notifications.TemplateWorkspaceResourceReplaced, "unexpected template") {
+			return false
+		}
+
+		if !assert.Equal(t, templateAdmin.ID, notification.UserID, "unexpected receiver") {
+			return false
+		}
+
+		if !assert.Len(t, notification.Data["replacements"], 2, "unexpected replacements count") {
+			return false
+		}
+
+		return true
+	})
+	require.Len(t, matching, 1)
+
+	// Then: the metric will be incremented.
+	mf, err = registry.Gather()
+	require.NoError(t, err)
+	metric := findMetric(mf, prebuilds.MetricResourceReplacementsCount, map[string]string{
+		"template_name": template.Name,
+		"preset_name":   preset.Name,
+		"org_name":      org.Name,
+	})
+	require.NotNil(t, metric)
+	require.NotNil(t, metric.GetCounter())
+	require.EqualValues(t, 1, metric.GetCounter().GetValue())
+}
+
+func newNoopEnqueuer() *notifications.NoopEnqueuer {
+	return notifications.NewNoopEnqueuer()
+}
+
+func newFakeEnqueuer() *notificationstest.FakeEnqueuer {
+	return notificationstest.NewFakeEnqueuer()
+}
+
 // nolint:revive // It's a control flag, but this is a test.
 func setupTestDBTemplate(
 	t *testing.T,
@@ -1040,7 +1141,7 @@ func setupTestDBPrebuild(
 	preset database.TemplateVersionPreset,
 	templateID uuid.UUID,
 	templateVersionID uuid.UUID,
-) database.WorkspaceTable {
+) (database.WorkspaceTable, database.WorkspaceBuild) {
 	t.Helper()
 	return setupTestDBWorkspace(t, clock, db, ps, transition, prebuildStatus, orgID, preset, templateID, templateVersionID, agplprebuilds.SystemUserID, agplprebuilds.SystemUserID)
 }
@@ -1058,7 +1159,7 @@ func setupTestDBWorkspace(
 	templateVersionID uuid.UUID,
 	initiatorID uuid.UUID,
 	ownerID uuid.UUID,
-) database.WorkspaceTable {
+) (database.WorkspaceTable, database.WorkspaceBuild) {
 	t.Helper()
 	cancelledAt := sql.NullTime{}
 	completedAt := sql.NullTime{}
@@ -1117,7 +1218,7 @@ func setupTestDBWorkspace(
 		},
 	})
 
-	return workspace
+	return workspace, workspaceBuild
 }
 
 // nolint:revive // It's a control flag, but this is a test.
diff --git a/enterprise/coderd/provisionerdaemons.go b/enterprise/coderd/provisionerdaemons.go
index 6ffa15851214d..71a32d7c976ba 100644
--- a/enterprise/coderd/provisionerdaemons.go
+++ b/enterprise/coderd/provisionerdaemons.go
@@ -19,6 +19,8 @@ import (
 	"storj.io/drpc/drpcserver"
 
 	"cdr.dev/slog"
+	"github.com/coder/websocket"
+
 	"github.com/coder/coder/v2/coderd/database"
 	"github.com/coder/coder/v2/coderd/database/dbauthz"
 	"github.com/coder/coder/v2/coderd/database/dbtime"
@@ -33,7 +35,6 @@ import (
 	"github.com/coder/coder/v2/codersdk"
 	"github.com/coder/coder/v2/provisionerd/proto"
 	"github.com/coder/coder/v2/provisionersdk"
-	"github.com/coder/websocket"
 )
 
 func (api *API) provisionerDaemonsEnabledMW(next http.Handler) http.Handler {
@@ -356,6 +357,7 @@ func (api *API) provisionerDaemonServe(rw http.ResponseWriter, r *http.Request)
 			Clock:               api.Clock,
 		},
 		api.NotificationsEnqueuer,
+		&api.AGPL.PrebuildsReconciler,
 	)
 	if err != nil {
 		if !xerrors.Is(err, context.Canceled) {
diff --git a/provisioner/terraform/executor.go b/provisioner/terraform/executor.go
index 79f3aa0ebcaa8..55b37f242ac05 100644
--- a/provisioner/terraform/executor.go
+++ b/provisioner/terraform/executor.go
@@ -258,7 +258,7 @@ func getStateFilePath(workdir string) string {
 }
 
 // revive:disable-next-line:flag-parameter
-func (e *executor) plan(ctx, killCtx context.Context, env, vars []string, logr logSink, destroy bool) (*proto.PlanComplete, error) {
+func (e *executor) plan(ctx, killCtx context.Context, env, vars []string, logr logSink, metadata *proto.Metadata) (*proto.PlanComplete, error) {
 	ctx, span := e.server.startTrace(ctx, tracing.FuncName())
 	defer span.End()
 
@@ -274,6 +274,7 @@ func (e *executor) plan(ctx, killCtx context.Context, env, vars []string, logr l
 		"-refresh=true",
 		"-out=" + planfilePath,
 	}
+	destroy := metadata.GetWorkspaceTransition() == proto.WorkspaceTransition_DESTROY
 	if destroy {
 		args = append(args, "-destroy")
 	}
@@ -302,18 +303,49 @@ func (e *executor) plan(ctx, killCtx context.Context, env, vars []string, logr l
 	state, plan, err := e.planResources(ctx, killCtx, planfilePath)
 	if err != nil {
 		graphTimings.ingest(createGraphTimingsEvent(timingGraphErrored))
-		return nil, err
+		return nil, xerrors.Errorf("plan resources: %w", err)
+	}
+	planJSON, err := json.Marshal(plan)
+	if err != nil {
+		return nil, xerrors.Errorf("marshal plan: %w", err)
 	}
 
 	graphTimings.ingest(createGraphTimingsEvent(timingGraphComplete))
 
+	// When a prebuild claim attempt is made, log a warning if a resource is due to be replaced, since this will obviate
+	// the point of prebuilding if the expensive resource is replaced once claimed!
+	var (
+		isPrebuildClaimAttempt = !destroy && metadata.GetPrebuiltWorkspaceBuildStage().IsPrebuiltWorkspaceClaim()
+		resReps                []*proto.ResourceReplacement
+	)
+	if repsFromPlan := findResourceReplacements(plan); len(repsFromPlan) > 0 {
+		if isPrebuildClaimAttempt {
+			// TODO(dannyk): we should log drift always (not just during prebuild claim attempts); we're validating that this output
+			//				 will not be overwhelming for end-users, but it'll certainly be super valuable for template admins
+			//				 to diagnose this resource replacement issue, at least.
+			//				 Once prebuilds moves out of beta, consider deleting this condition.
+
+			// Lock held before calling (see top of method).
+			e.logDrift(ctx, killCtx, planfilePath, logr)
+		}
+
+		resReps = make([]*proto.ResourceReplacement, 0, len(repsFromPlan))
+		for n, p := range repsFromPlan {
+			resReps = append(resReps, &proto.ResourceReplacement{
+				Resource: n,
+				Paths:    p,
+			})
+		}
+	}
+
 	return &proto.PlanComplete{
 		Parameters:            state.Parameters,
 		Resources:             state.Resources,
 		ExternalAuthProviders: state.ExternalAuthProviders,
 		Timings:               append(e.timings.aggregate(), graphTimings.aggregate()...),
 		Presets:               state.Presets,
-		Plan:                  plan,
+		Plan:                  planJSON,
+		ResourceReplacements:  resReps,
 	}, nil
 }
 
@@ -334,80 +366,16 @@ func onlyDataResources(sm tfjson.StateModule) tfjson.StateModule {
 	return filtered
 }
 
-func (e *executor) logResourceReplacements(ctx context.Context, plan *tfjson.Plan) {
-	if plan == nil {
-		return
-	}
-
-	if len(plan.ResourceChanges) == 0 {
-		return
-	}
-	var (
-		count        int
-		replacements = make(map[string][]string, len(plan.ResourceChanges))
-	)
-
-	for _, ch := range plan.ResourceChanges {
-		// No change, no problem!
-		if ch.Change == nil {
-			continue
-		}
-
-		// No-op change, no problem!
-		if ch.Change.Actions.NoOp() {
-			continue
-		}
-
-		// No replacements, no problem!
-		if len(ch.Change.ReplacePaths) == 0 {
-			continue
-		}
-
-		// Replacing our resources, no problem!
-		if strings.Index(ch.Type, "coder_") == 0 {
-			continue
-		}
-
-		for _, p := range ch.Change.ReplacePaths {
-			var path string
-			switch p := p.(type) {
-			case []interface{}:
-				segs := p
-				list := make([]string, 0, len(segs))
-				for _, s := range segs {
-					list = append(list, fmt.Sprintf("%v", s))
-				}
-				path = strings.Join(list, ".")
-			default:
-				path = fmt.Sprintf("%v", p)
-			}
-
-			replacements[ch.Address] = append(replacements[ch.Address], path)
-		}
-
-		count++
-	}
-
-	if count > 0 {
-		e.server.logger.Warn(ctx, "plan introduces resource changes", slog.F("count", count))
-		for n, p := range replacements {
-			e.server.logger.Warn(ctx, "resource will be replaced", slog.F("name", n), slog.F("replacement_paths", strings.Join(p, ",")))
-		}
-	}
-}
-
 // planResources must only be called while the lock is held.
-func (e *executor) planResources(ctx, killCtx context.Context, planfilePath string) (*State, json.RawMessage, error) {
+func (e *executor) planResources(ctx, killCtx context.Context, planfilePath string) (*State, *tfjson.Plan, error) {
 	ctx, span := e.server.startTrace(ctx, tracing.FuncName())
 	defer span.End()
 
-	plan, err := e.showPlan(ctx, killCtx, planfilePath)
+	plan, err := e.parsePlan(ctx, killCtx, planfilePath)
 	if err != nil {
 		return nil, nil, xerrors.Errorf("show terraform plan file: %w", err)
 	}
 
-	e.logResourceReplacements(ctx, plan)
-
 	rawGraph, err := e.graph(ctx, killCtx)
 	if err != nil {
 		return nil, nil, xerrors.Errorf("graph: %w", err)
@@ -431,16 +399,11 @@ func (e *executor) planResources(ctx, killCtx context.Context, planfilePath stri
 		return nil, nil, err
 	}
 
-	planJSON, err := json.Marshal(plan)
-	if err != nil {
-		return nil, nil, err
-	}
-
-	return state, planJSON, nil
+	return state, plan, nil
 }
 
-// showPlan must only be called while the lock is held.
-func (e *executor) showPlan(ctx, killCtx context.Context, planfilePath string) (*tfjson.Plan, error) {
+// parsePlan must only be called while the lock is held.
+func (e *executor) parsePlan(ctx, killCtx context.Context, planfilePath string) (*tfjson.Plan, error) {
 	ctx, span := e.server.startTrace(ctx, tracing.FuncName())
 	defer span.End()
 
@@ -450,6 +413,64 @@ func (e *executor) showPlan(ctx, killCtx context.Context, planfilePath string) (
 	return p, err
 }
 
+// logDrift must only be called while the lock is held.
+// It will log the output of `terraform show`, which will show which resources have drifted from the known state.
+func (e *executor) logDrift(ctx, killCtx context.Context, planfilePath string, logr logSink) {
+	stdout, stdoutDone := resourceReplaceLogWriter(logr, e.logger)
+	stderr, stderrDone := logWriter(logr, proto.LogLevel_ERROR)
+	defer func() {
+		_ = stdout.Close()
+		_ = stderr.Close()
+		<-stdoutDone
+		<-stderrDone
+	}()
+
+	err := e.showPlan(ctx, killCtx, stdout, stderr, planfilePath)
+	if err != nil {
+		e.server.logger.Debug(ctx, "failed to log state drift", slog.Error(err))
+	}
+}
+
+// resourceReplaceLogWriter highlights log lines relating to resource replacement by elevating their log level.
+// This will help template admins to visually find problematic resources easier.
+//
+// The WriteCloser must be closed by the caller to end logging, after which the returned channel will be closed to
+// indicate that logging of the written data has finished.  Failure to close the WriteCloser will leak a goroutine.
+func resourceReplaceLogWriter(sink logSink, logger slog.Logger) (io.WriteCloser, <-chan struct{}) {
+	r, w := io.Pipe()
+	done := make(chan struct{})
+
+	go func() {
+		defer close(done)
+
+		scanner := bufio.NewScanner(r)
+		for scanner.Scan() {
+			line := scanner.Bytes()
+			level := proto.LogLevel_INFO
+
+			// Terraform indicates that a resource will be deleted and recreated by showing the change along with this substring.
+			if bytes.Contains(line, []byte("# forces replacement")) {
+				level = proto.LogLevel_WARN
+			}
+
+			sink.ProvisionLog(level, string(line))
+		}
+		if err := scanner.Err(); err != nil {
+			logger.Error(context.Background(), "failed to read terraform log", slog.Error(err))
+		}
+	}()
+	return w, done
+}
+
+// showPlan must only be called while the lock is held.
+func (e *executor) showPlan(ctx, killCtx context.Context, stdoutWriter, stderrWriter io.WriteCloser, planfilePath string) error {
+	ctx, span := e.server.startTrace(ctx, tracing.FuncName())
+	defer span.End()
+
+	args := []string{"show", "-no-color", planfilePath}
+	return e.execWriteOutput(ctx, killCtx, args, e.basicEnv(), stdoutWriter, stderrWriter)
+}
+
 // graph must only be called while the lock is held.
 func (e *executor) graph(ctx, killCtx context.Context) (string, error) {
 	ctx, span := e.server.startTrace(ctx, tracing.FuncName())
diff --git a/provisioner/terraform/provision.go b/provisioner/terraform/provision.go
index 49eeed0a4e967..79ed299514bb3 100644
--- a/provisioner/terraform/provision.go
+++ b/provisioner/terraform/provision.go
@@ -163,10 +163,7 @@ func (s *server) Plan(
 		return provisionersdk.PlanErrorf("plan vars: %s", err)
 	}
 
-	resp, err := e.plan(
-		ctx, killCtx, env, vars, sess,
-		request.Metadata.GetWorkspaceTransition() == proto.WorkspaceTransition_DESTROY,
-	)
+	resp, err := e.plan(ctx, killCtx, env, vars, sess, request.Metadata)
 	if err != nil {
 		return provisionersdk.PlanErrorf("%s", err.Error())
 	}
diff --git a/provisioner/terraform/resource_replacements.go b/provisioner/terraform/resource_replacements.go
new file mode 100644
index 0000000000000..a2bbbb1802883
--- /dev/null
+++ b/provisioner/terraform/resource_replacements.go
@@ -0,0 +1,86 @@
+package terraform
+
+import (
+	"fmt"
+	"strings"
+
+	tfjson "github.com/hashicorp/terraform-json"
+)
+
+type resourceReplacements map[string][]string
+
+// resourceReplacements finds all resources which would be replaced by the current plan, and the attribute paths which
+// caused the replacement.
+//
+// NOTE: "replacement" in terraform terms means that a resource will have to be destroyed and replaced with a new resource
+// since one of its immutable attributes was modified, which cannot be updated in-place.
+func findResourceReplacements(plan *tfjson.Plan) resourceReplacements {
+	if plan == nil {
+		return nil
+	}
+
+	// No changes, no problem!
+	if len(plan.ResourceChanges) == 0 {
+		return nil
+	}
+
+	replacements := make(resourceReplacements, len(plan.ResourceChanges))
+
+	for _, ch := range plan.ResourceChanges {
+		// No change, no problem!
+		if ch.Change == nil {
+			continue
+		}
+
+		// No-op change, no problem!
+		if ch.Change.Actions.NoOp() {
+			continue
+		}
+
+		// No replacements, no problem!
+		if len(ch.Change.ReplacePaths) == 0 {
+			continue
+		}
+
+		// Replacing our resources: could be a problem - but we ignore since they're "virtual" resources. If any of these
+		// resources' attributes are referenced by non-coder resources, those will show up as transitive changes there.
+		// i.e. if the coder_agent.id attribute is used in docker_container.env
+		//
+		// Replacing our resources is not strictly a problem in and of itself.
+		//
+		// NOTE:
+		// We may need to special-case coder_agent in the future. Currently, coder_agent is replaced on every build
+		// because it only supports Create but not Update: https://github.com/coder/terraform-provider-coder/blob/5648efb/provider/agent.go#L28
+		// When we can modify an agent's attributes, some of which may be immutable (like "arch") and some may not (like "env"),
+		// then we'll have to handle this specifically.
+		// This will only become relevant once we support multiple agents: https://github.com/coder/coder/issues/17388
+		if strings.Index(ch.Type, "coder_") == 0 {
+			continue
+		}
+
+		// Replacements found, problem!
+		for _, val := range ch.Change.ReplacePaths {
+			var pathStr string
+			// Each path needs to be coerced into a string. All types except []interface{} can be coerced using fmt.Sprintf.
+			switch path := val.(type) {
+			case []interface{}:
+				// Found a slice of paths; coerce to string and join by ".".
+				segments := make([]string, 0, len(path))
+				for _, seg := range path {
+					segments = append(segments, fmt.Sprintf("%v", seg))
+				}
+				pathStr = strings.Join(segments, ".")
+			default:
+				pathStr = fmt.Sprintf("%v", path)
+			}
+
+			replacements[ch.Address] = append(replacements[ch.Address], pathStr)
+		}
+	}
+
+	if len(replacements) == 0 {
+		return nil
+	}
+
+	return replacements
+}
diff --git a/provisioner/terraform/resource_replacements_internal_test.go b/provisioner/terraform/resource_replacements_internal_test.go
new file mode 100644
index 0000000000000..4cca4ed396a43
--- /dev/null
+++ b/provisioner/terraform/resource_replacements_internal_test.go
@@ -0,0 +1,176 @@
+package terraform
+
+import (
+	"testing"
+
+	tfjson "github.com/hashicorp/terraform-json"
+	"github.com/stretchr/testify/require"
+)
+
+func TestFindResourceReplacements(t *testing.T) {
+	t.Parallel()
+
+	cases := []struct {
+		name     string
+		plan     *tfjson.Plan
+		expected resourceReplacements
+	}{
+		{
+			name: "nil plan",
+		},
+		{
+			name: "no resource changes",
+			plan: &tfjson.Plan{},
+		},
+		{
+			name: "resource change with nil change",
+			plan: &tfjson.Plan{
+				ResourceChanges: []*tfjson.ResourceChange{
+					{
+						Address: "resource1",
+					},
+				},
+			},
+		},
+		{
+			name: "no-op action",
+			plan: &tfjson.Plan{
+				ResourceChanges: []*tfjson.ResourceChange{
+					{
+						Address: "resource1",
+						Change: &tfjson.Change{
+							Actions: tfjson.Actions{tfjson.ActionNoop},
+						},
+					},
+				},
+			},
+		},
+		{
+			name: "empty replace paths",
+			plan: &tfjson.Plan{
+				ResourceChanges: []*tfjson.ResourceChange{
+					{
+						Address: "resource1",
+						Change: &tfjson.Change{
+							Actions: tfjson.Actions{tfjson.ActionDelete, tfjson.ActionCreate},
+						},
+					},
+				},
+			},
+		},
+		{
+			name: "coder_* types are ignored",
+			plan: &tfjson.Plan{
+				ResourceChanges: []*tfjson.ResourceChange{
+					{
+						Address: "resource1",
+						Type:    "coder_resource",
+						Change: &tfjson.Change{
+							Actions:      tfjson.Actions{tfjson.ActionDelete, tfjson.ActionCreate},
+							ReplacePaths: []interface{}{"path1"},
+						},
+					},
+				},
+			},
+		},
+		{
+			name: "valid replacements - single path",
+			plan: &tfjson.Plan{
+				ResourceChanges: []*tfjson.ResourceChange{
+					{
+						Address: "resource1",
+						Type:    "example_resource",
+						Change: &tfjson.Change{
+							Actions:      tfjson.Actions{tfjson.ActionDelete, tfjson.ActionCreate},
+							ReplacePaths: []interface{}{"path1"},
+						},
+					},
+				},
+			},
+			expected: resourceReplacements{
+				"resource1": {"path1"},
+			},
+		},
+		{
+			name: "valid replacements - multiple paths",
+			plan: &tfjson.Plan{
+				ResourceChanges: []*tfjson.ResourceChange{
+					{
+						Address: "resource1",
+						Type:    "example_resource",
+						Change: &tfjson.Change{
+							Actions:      tfjson.Actions{tfjson.ActionDelete, tfjson.ActionCreate},
+							ReplacePaths: []interface{}{"path1", "path2"},
+						},
+					},
+				},
+			},
+			expected: resourceReplacements{
+				"resource1": {"path1", "path2"},
+			},
+		},
+		{
+			name: "complex replace path",
+			plan: &tfjson.Plan{
+				ResourceChanges: []*tfjson.ResourceChange{
+					{
+						Address: "resource1",
+						Type:    "example_resource",
+						Change: &tfjson.Change{
+							Actions: tfjson.Actions{tfjson.ActionDelete, tfjson.ActionCreate},
+							ReplacePaths: []interface{}{
+								[]interface{}{"path", "to", "key"},
+							},
+						},
+					},
+				},
+			},
+			expected: resourceReplacements{
+				"resource1": {"path.to.key"},
+			},
+		},
+		{
+			name: "multiple changes",
+			plan: &tfjson.Plan{
+				ResourceChanges: []*tfjson.ResourceChange{
+					{
+						Address: "resource1",
+						Type:    "example_resource",
+						Change: &tfjson.Change{
+							Actions:      tfjson.Actions{tfjson.ActionDelete, tfjson.ActionCreate},
+							ReplacePaths: []interface{}{"path1"},
+						},
+					},
+					{
+						Address: "resource2",
+						Type:    "example_resource",
+						Change: &tfjson.Change{
+							Actions:      tfjson.Actions{tfjson.ActionDelete, tfjson.ActionCreate},
+							ReplacePaths: []interface{}{"path2", "path3"},
+						},
+					},
+					{
+						Address: "resource3",
+						Type:    "coder_example",
+						Change: &tfjson.Change{
+							Actions:      tfjson.Actions{tfjson.ActionDelete, tfjson.ActionCreate},
+							ReplacePaths: []interface{}{"ignored_path"},
+						},
+					},
+				},
+			},
+			expected: resourceReplacements{
+				"resource1": {"path1"},
+				"resource2": {"path2", "path3"},
+			},
+		},
+	}
+
+	for _, tc := range cases {
+		t.Run(tc.name, func(t *testing.T) {
+			t.Parallel()
+
+			require.EqualValues(t, tc.expected, findResourceReplacements(tc.plan))
+		})
+	}
+}
diff --git a/provisionerd/proto/provisionerd.pb.go b/provisionerd/proto/provisionerd.pb.go
index 9e41e8a428758..475b9a0e564ff 100644
--- a/provisionerd/proto/provisionerd.pb.go
+++ b/provisionerd/proto/provisionerd.pb.go
@@ -1212,10 +1212,11 @@ type CompletedJob_WorkspaceBuild struct {
 	sizeCache     protoimpl.SizeCache
 	unknownFields protoimpl.UnknownFields
 
-	State     []byte            `protobuf:"bytes,1,opt,name=state,proto3" json:"state,omitempty"`
-	Resources []*proto.Resource `protobuf:"bytes,2,rep,name=resources,proto3" json:"resources,omitempty"`
-	Timings   []*proto.Timing   `protobuf:"bytes,3,rep,name=timings,proto3" json:"timings,omitempty"`
-	Modules   []*proto.Module   `protobuf:"bytes,4,rep,name=modules,proto3" json:"modules,omitempty"`
+	State                []byte                       `protobuf:"bytes,1,opt,name=state,proto3" json:"state,omitempty"`
+	Resources            []*proto.Resource            `protobuf:"bytes,2,rep,name=resources,proto3" json:"resources,omitempty"`
+	Timings              []*proto.Timing              `protobuf:"bytes,3,rep,name=timings,proto3" json:"timings,omitempty"`
+	Modules              []*proto.Module              `protobuf:"bytes,4,rep,name=modules,proto3" json:"modules,omitempty"`
+	ResourceReplacements []*proto.ResourceReplacement `protobuf:"bytes,5,rep,name=resource_replacements,json=resourceReplacements,proto3" json:"resource_replacements,omitempty"`
 }
 
 func (x *CompletedJob_WorkspaceBuild) Reset() {
@@ -1278,6 +1279,13 @@ func (x *CompletedJob_WorkspaceBuild) GetModules() []*proto.Module {
 	return nil
 }
 
+func (x *CompletedJob_WorkspaceBuild) GetResourceReplacements() []*proto.ResourceReplacement {
+	if x != nil {
+		return x.ResourceReplacements
+	}
+	return nil
+}
+
 type CompletedJob_TemplateImport struct {
 	state         protoimpl.MessageState
 	sizeCache     protoimpl.SizeCache
@@ -1572,7 +1580,7 @@ var file_provisionerd_proto_provisionerd_proto_rawDesc = []byte{
 	0x2e, 0x54, 0x69, 0x6d, 0x69, 0x6e, 0x67, 0x52, 0x07, 0x74, 0x69, 0x6d, 0x69, 0x6e, 0x67, 0x73,
 	0x1a, 0x10, 0x0a, 0x0e, 0x54, 0x65, 0x6d, 0x70, 0x6c, 0x61, 0x74, 0x65, 0x49, 0x6d, 0x70, 0x6f,
 	0x72, 0x74, 0x1a, 0x10, 0x0a, 0x0e, 0x54, 0x65, 0x6d, 0x70, 0x6c, 0x61, 0x74, 0x65, 0x44, 0x72,
-	0x79, 0x52, 0x75, 0x6e, 0x42, 0x06, 0x0a, 0x04, 0x74, 0x79, 0x70, 0x65, 0x22, 0x93, 0x09, 0x0a,
+	0x79, 0x52, 0x75, 0x6e, 0x42, 0x06, 0x0a, 0x04, 0x74, 0x79, 0x70, 0x65, 0x22, 0xea, 0x09, 0x0a,
 	0x0c, 0x43, 0x6f, 0x6d, 0x70, 0x6c, 0x65, 0x74, 0x65, 0x64, 0x4a, 0x6f, 0x62, 0x12, 0x15, 0x0a,
 	0x06, 0x6a, 0x6f, 0x62, 0x5f, 0x69, 0x64, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x05, 0x6a,
 	0x6f, 0x62, 0x49, 0x64, 0x12, 0x54, 0x0a, 0x0f, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63,
@@ -1591,7 +1599,7 @@ var file_provisionerd_proto_provisionerd_proto_rawDesc = []byte{
 	0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x64, 0x2e, 0x43, 0x6f, 0x6d, 0x70, 0x6c, 0x65,
 	0x74, 0x65, 0x64, 0x4a, 0x6f, 0x62, 0x2e, 0x54, 0x65, 0x6d, 0x70, 0x6c, 0x61, 0x74, 0x65, 0x44,
 	0x72, 0x79, 0x52, 0x75, 0x6e, 0x48, 0x00, 0x52, 0x0e, 0x74, 0x65, 0x6d, 0x70, 0x6c, 0x61, 0x74,
-	0x65, 0x44, 0x72, 0x79, 0x52, 0x75, 0x6e, 0x1a, 0xb9, 0x01, 0x0a, 0x0e, 0x57, 0x6f, 0x72, 0x6b,
+	0x65, 0x44, 0x72, 0x79, 0x52, 0x75, 0x6e, 0x1a, 0x90, 0x02, 0x0a, 0x0e, 0x57, 0x6f, 0x72, 0x6b,
 	0x73, 0x70, 0x61, 0x63, 0x65, 0x42, 0x75, 0x69, 0x6c, 0x64, 0x12, 0x14, 0x0a, 0x05, 0x73, 0x74,
 	0x61, 0x74, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0c, 0x52, 0x05, 0x73, 0x74, 0x61, 0x74, 0x65,
 	0x12, 0x33, 0x0a, 0x09, 0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x73, 0x18, 0x02, 0x20,
@@ -1603,143 +1611,148 @@ var file_provisionerd_proto_provisionerd_proto_rawDesc = []byte{
 	0x69, 0x6e, 0x67, 0x73, 0x12, 0x2d, 0x0a, 0x07, 0x6d, 0x6f, 0x64, 0x75, 0x6c, 0x65, 0x73, 0x18,
 	0x04, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x13, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f,
 	0x6e, 0x65, 0x72, 0x2e, 0x4d, 0x6f, 0x64, 0x75, 0x6c, 0x65, 0x52, 0x07, 0x6d, 0x6f, 0x64, 0x75,
-	0x6c, 0x65, 0x73, 0x1a, 0xae, 0x04, 0x0a, 0x0e, 0x54, 0x65, 0x6d, 0x70, 0x6c, 0x61, 0x74, 0x65,
-	0x49, 0x6d, 0x70, 0x6f, 0x72, 0x74, 0x12, 0x3e, 0x0a, 0x0f, 0x73, 0x74, 0x61, 0x72, 0x74, 0x5f,
-	0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x73, 0x18, 0x01, 0x20, 0x03, 0x28, 0x0b, 0x32,
-	0x15, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x52, 0x65,
-	0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x52, 0x0e, 0x73, 0x74, 0x61, 0x72, 0x74, 0x52, 0x65, 0x73,
-	0x6f, 0x75, 0x72, 0x63, 0x65, 0x73, 0x12, 0x3c, 0x0a, 0x0e, 0x73, 0x74, 0x6f, 0x70, 0x5f, 0x72,
-	0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x73, 0x18, 0x02, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x15,
-	0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x52, 0x65, 0x73,
-	0x6f, 0x75, 0x72, 0x63, 0x65, 0x52, 0x0d, 0x73, 0x74, 0x6f, 0x70, 0x52, 0x65, 0x73, 0x6f, 0x75,
-	0x72, 0x63, 0x65, 0x73, 0x12, 0x43, 0x0a, 0x0f, 0x72, 0x69, 0x63, 0x68, 0x5f, 0x70, 0x61, 0x72,
-	0x61, 0x6d, 0x65, 0x74, 0x65, 0x72, 0x73, 0x18, 0x03, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x1a, 0x2e,
-	0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x52, 0x69, 0x63, 0x68,
-	0x50, 0x61, 0x72, 0x61, 0x6d, 0x65, 0x74, 0x65, 0x72, 0x52, 0x0e, 0x72, 0x69, 0x63, 0x68, 0x50,
-	0x61, 0x72, 0x61, 0x6d, 0x65, 0x74, 0x65, 0x72, 0x73, 0x12, 0x41, 0x0a, 0x1d, 0x65, 0x78, 0x74,
-	0x65, 0x72, 0x6e, 0x61, 0x6c, 0x5f, 0x61, 0x75, 0x74, 0x68, 0x5f, 0x70, 0x72, 0x6f, 0x76, 0x69,
-	0x64, 0x65, 0x72, 0x73, 0x5f, 0x6e, 0x61, 0x6d, 0x65, 0x73, 0x18, 0x04, 0x20, 0x03, 0x28, 0x09,
-	0x52, 0x1a, 0x65, 0x78, 0x74, 0x65, 0x72, 0x6e, 0x61, 0x6c, 0x41, 0x75, 0x74, 0x68, 0x50, 0x72,
-	0x6f, 0x76, 0x69, 0x64, 0x65, 0x72, 0x73, 0x4e, 0x61, 0x6d, 0x65, 0x73, 0x12, 0x61, 0x0a, 0x17,
-	0x65, 0x78, 0x74, 0x65, 0x72, 0x6e, 0x61, 0x6c, 0x5f, 0x61, 0x75, 0x74, 0x68, 0x5f, 0x70, 0x72,
-	0x6f, 0x76, 0x69, 0x64, 0x65, 0x72, 0x73, 0x18, 0x05, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x29, 0x2e,
-	0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x45, 0x78, 0x74, 0x65,
-	0x72, 0x6e, 0x61, 0x6c, 0x41, 0x75, 0x74, 0x68, 0x50, 0x72, 0x6f, 0x76, 0x69, 0x64, 0x65, 0x72,
-	0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x52, 0x15, 0x65, 0x78, 0x74, 0x65, 0x72, 0x6e,
-	0x61, 0x6c, 0x41, 0x75, 0x74, 0x68, 0x50, 0x72, 0x6f, 0x76, 0x69, 0x64, 0x65, 0x72, 0x73, 0x12,
-	0x38, 0x0a, 0x0d, 0x73, 0x74, 0x61, 0x72, 0x74, 0x5f, 0x6d, 0x6f, 0x64, 0x75, 0x6c, 0x65, 0x73,
-	0x18, 0x06, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x13, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69,
-	0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x4d, 0x6f, 0x64, 0x75, 0x6c, 0x65, 0x52, 0x0c, 0x73, 0x74, 0x61,
-	0x72, 0x74, 0x4d, 0x6f, 0x64, 0x75, 0x6c, 0x65, 0x73, 0x12, 0x36, 0x0a, 0x0c, 0x73, 0x74, 0x6f,
-	0x70, 0x5f, 0x6d, 0x6f, 0x64, 0x75, 0x6c, 0x65, 0x73, 0x18, 0x07, 0x20, 0x03, 0x28, 0x0b, 0x32,
-	0x13, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x4d, 0x6f,
-	0x64, 0x75, 0x6c, 0x65, 0x52, 0x0b, 0x73, 0x74, 0x6f, 0x70, 0x4d, 0x6f, 0x64, 0x75, 0x6c, 0x65,
-	0x73, 0x12, 0x2d, 0x0a, 0x07, 0x70, 0x72, 0x65, 0x73, 0x65, 0x74, 0x73, 0x18, 0x08, 0x20, 0x03,
-	0x28, 0x0b, 0x32, 0x13, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72,
-	0x2e, 0x50, 0x72, 0x65, 0x73, 0x65, 0x74, 0x52, 0x07, 0x70, 0x72, 0x65, 0x73, 0x65, 0x74, 0x73,
-	0x12, 0x12, 0x0a, 0x04, 0x70, 0x6c, 0x61, 0x6e, 0x18, 0x09, 0x20, 0x01, 0x28, 0x0c, 0x52, 0x04,
-	0x70, 0x6c, 0x61, 0x6e, 0x1a, 0x74, 0x0a, 0x0e, 0x54, 0x65, 0x6d, 0x70, 0x6c, 0x61, 0x74, 0x65,
-	0x44, 0x72, 0x79, 0x52, 0x75, 0x6e, 0x12, 0x33, 0x0a, 0x09, 0x72, 0x65, 0x73, 0x6f, 0x75, 0x72,
-	0x63, 0x65, 0x73, 0x18, 0x01, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x15, 0x2e, 0x70, 0x72, 0x6f, 0x76,
-	0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65,
-	0x52, 0x09, 0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x73, 0x12, 0x2d, 0x0a, 0x07, 0x6d,
-	0x6f, 0x64, 0x75, 0x6c, 0x65, 0x73, 0x18, 0x02, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x13, 0x2e, 0x70,
-	0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x4d, 0x6f, 0x64, 0x75, 0x6c,
-	0x65, 0x52, 0x07, 0x6d, 0x6f, 0x64, 0x75, 0x6c, 0x65, 0x73, 0x42, 0x06, 0x0a, 0x04, 0x74, 0x79,
-	0x70, 0x65, 0x22, 0xb0, 0x01, 0x0a, 0x03, 0x4c, 0x6f, 0x67, 0x12, 0x2f, 0x0a, 0x06, 0x73, 0x6f,
-	0x75, 0x72, 0x63, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0e, 0x32, 0x17, 0x2e, 0x70, 0x72, 0x6f,
-	0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x64, 0x2e, 0x4c, 0x6f, 0x67, 0x53, 0x6f, 0x75,
-	0x72, 0x63, 0x65, 0x52, 0x06, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x12, 0x2b, 0x0a, 0x05, 0x6c,
-	0x65, 0x76, 0x65, 0x6c, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0e, 0x32, 0x15, 0x2e, 0x70, 0x72, 0x6f,
-	0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x4c, 0x6f, 0x67, 0x4c, 0x65, 0x76, 0x65,
-	0x6c, 0x52, 0x05, 0x6c, 0x65, 0x76, 0x65, 0x6c, 0x12, 0x1d, 0x0a, 0x0a, 0x63, 0x72, 0x65, 0x61,
-	0x74, 0x65, 0x64, 0x5f, 0x61, 0x74, 0x18, 0x03, 0x20, 0x01, 0x28, 0x03, 0x52, 0x09, 0x63, 0x72,
-	0x65, 0x61, 0x74, 0x65, 0x64, 0x41, 0x74, 0x12, 0x14, 0x0a, 0x05, 0x73, 0x74, 0x61, 0x67, 0x65,
-	0x18, 0x04, 0x20, 0x01, 0x28, 0x09, 0x52, 0x05, 0x73, 0x74, 0x61, 0x67, 0x65, 0x12, 0x16, 0x0a,
-	0x06, 0x6f, 0x75, 0x74, 0x70, 0x75, 0x74, 0x18, 0x05, 0x20, 0x01, 0x28, 0x09, 0x52, 0x06, 0x6f,
-	0x75, 0x74, 0x70, 0x75, 0x74, 0x22, 0xa6, 0x03, 0x0a, 0x10, 0x55, 0x70, 0x64, 0x61, 0x74, 0x65,
-	0x4a, 0x6f, 0x62, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x12, 0x15, 0x0a, 0x06, 0x6a, 0x6f,
-	0x62, 0x5f, 0x69, 0x64, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x05, 0x6a, 0x6f, 0x62, 0x49,
-	0x64, 0x12, 0x25, 0x0a, 0x04, 0x6c, 0x6f, 0x67, 0x73, 0x18, 0x02, 0x20, 0x03, 0x28, 0x0b, 0x32,
-	0x11, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x64, 0x2e, 0x4c,
-	0x6f, 0x67, 0x52, 0x04, 0x6c, 0x6f, 0x67, 0x73, 0x12, 0x4c, 0x0a, 0x12, 0x74, 0x65, 0x6d, 0x70,
-	0x6c, 0x61, 0x74, 0x65, 0x5f, 0x76, 0x61, 0x72, 0x69, 0x61, 0x62, 0x6c, 0x65, 0x73, 0x18, 0x04,
-	0x20, 0x03, 0x28, 0x0b, 0x32, 0x1d, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e,
-	0x65, 0x72, 0x2e, 0x54, 0x65, 0x6d, 0x70, 0x6c, 0x61, 0x74, 0x65, 0x56, 0x61, 0x72, 0x69, 0x61,
-	0x62, 0x6c, 0x65, 0x52, 0x11, 0x74, 0x65, 0x6d, 0x70, 0x6c, 0x61, 0x74, 0x65, 0x56, 0x61, 0x72,
-	0x69, 0x61, 0x62, 0x6c, 0x65, 0x73, 0x12, 0x4c, 0x0a, 0x14, 0x75, 0x73, 0x65, 0x72, 0x5f, 0x76,
-	0x61, 0x72, 0x69, 0x61, 0x62, 0x6c, 0x65, 0x5f, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x73, 0x18, 0x05,
+	0x6c, 0x65, 0x73, 0x12, 0x55, 0x0a, 0x15, 0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x5f,
+	0x72, 0x65, 0x70, 0x6c, 0x61, 0x63, 0x65, 0x6d, 0x65, 0x6e, 0x74, 0x73, 0x18, 0x05, 0x20, 0x03,
+	0x28, 0x0b, 0x32, 0x20, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72,
+	0x2e, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x52, 0x65, 0x70, 0x6c, 0x61, 0x63, 0x65,
+	0x6d, 0x65, 0x6e, 0x74, 0x52, 0x14, 0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x52, 0x65,
+	0x70, 0x6c, 0x61, 0x63, 0x65, 0x6d, 0x65, 0x6e, 0x74, 0x73, 0x1a, 0xae, 0x04, 0x0a, 0x0e, 0x54,
+	0x65, 0x6d, 0x70, 0x6c, 0x61, 0x74, 0x65, 0x49, 0x6d, 0x70, 0x6f, 0x72, 0x74, 0x12, 0x3e, 0x0a,
+	0x0f, 0x73, 0x74, 0x61, 0x72, 0x74, 0x5f, 0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x73,
+	0x18, 0x01, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x15, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69,
+	0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x52, 0x0e, 0x73,
+	0x74, 0x61, 0x72, 0x74, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x73, 0x12, 0x3c, 0x0a,
+	0x0e, 0x73, 0x74, 0x6f, 0x70, 0x5f, 0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x73, 0x18,
+	0x02, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x15, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f,
+	0x6e, 0x65, 0x72, 0x2e, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x52, 0x0d, 0x73, 0x74,
+	0x6f, 0x70, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x73, 0x12, 0x43, 0x0a, 0x0f, 0x72,
+	0x69, 0x63, 0x68, 0x5f, 0x70, 0x61, 0x72, 0x61, 0x6d, 0x65, 0x74, 0x65, 0x72, 0x73, 0x18, 0x03,
 	0x20, 0x03, 0x28, 0x0b, 0x32, 0x1a, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e,
-	0x65, 0x72, 0x2e, 0x56, 0x61, 0x72, 0x69, 0x61, 0x62, 0x6c, 0x65, 0x56, 0x61, 0x6c, 0x75, 0x65,
-	0x52, 0x12, 0x75, 0x73, 0x65, 0x72, 0x56, 0x61, 0x72, 0x69, 0x61, 0x62, 0x6c, 0x65, 0x56, 0x61,
-	0x6c, 0x75, 0x65, 0x73, 0x12, 0x16, 0x0a, 0x06, 0x72, 0x65, 0x61, 0x64, 0x6d, 0x65, 0x18, 0x06,
-	0x20, 0x01, 0x28, 0x0c, 0x52, 0x06, 0x72, 0x65, 0x61, 0x64, 0x6d, 0x65, 0x12, 0x58, 0x0a, 0x0e,
-	0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x5f, 0x74, 0x61, 0x67, 0x73, 0x18, 0x07,
-	0x20, 0x03, 0x28, 0x0b, 0x32, 0x31, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e,
-	0x65, 0x72, 0x64, 0x2e, 0x55, 0x70, 0x64, 0x61, 0x74, 0x65, 0x4a, 0x6f, 0x62, 0x52, 0x65, 0x71,
-	0x75, 0x65, 0x73, 0x74, 0x2e, 0x57, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x54, 0x61,
-	0x67, 0x73, 0x45, 0x6e, 0x74, 0x72, 0x79, 0x52, 0x0d, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61,
-	0x63, 0x65, 0x54, 0x61, 0x67, 0x73, 0x1a, 0x40, 0x0a, 0x12, 0x57, 0x6f, 0x72, 0x6b, 0x73, 0x70,
-	0x61, 0x63, 0x65, 0x54, 0x61, 0x67, 0x73, 0x45, 0x6e, 0x74, 0x72, 0x79, 0x12, 0x10, 0x0a, 0x03,
-	0x6b, 0x65, 0x79, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x03, 0x6b, 0x65, 0x79, 0x12, 0x14,
-	0x0a, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x52, 0x05, 0x76,
-	0x61, 0x6c, 0x75, 0x65, 0x3a, 0x02, 0x38, 0x01, 0x4a, 0x04, 0x08, 0x03, 0x10, 0x04, 0x22, 0x7a,
-	0x0a, 0x11, 0x55, 0x70, 0x64, 0x61, 0x74, 0x65, 0x4a, 0x6f, 0x62, 0x52, 0x65, 0x73, 0x70, 0x6f,
-	0x6e, 0x73, 0x65, 0x12, 0x1a, 0x0a, 0x08, 0x63, 0x61, 0x6e, 0x63, 0x65, 0x6c, 0x65, 0x64, 0x18,
-	0x01, 0x20, 0x01, 0x28, 0x08, 0x52, 0x08, 0x63, 0x61, 0x6e, 0x63, 0x65, 0x6c, 0x65, 0x64, 0x12,
-	0x43, 0x0a, 0x0f, 0x76, 0x61, 0x72, 0x69, 0x61, 0x62, 0x6c, 0x65, 0x5f, 0x76, 0x61, 0x6c, 0x75,
-	0x65, 0x73, 0x18, 0x03, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x1a, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69,
-	0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x56, 0x61, 0x72, 0x69, 0x61, 0x62, 0x6c, 0x65, 0x56,
-	0x61, 0x6c, 0x75, 0x65, 0x52, 0x0e, 0x76, 0x61, 0x72, 0x69, 0x61, 0x62, 0x6c, 0x65, 0x56, 0x61,
-	0x6c, 0x75, 0x65, 0x73, 0x4a, 0x04, 0x08, 0x02, 0x10, 0x03, 0x22, 0x4a, 0x0a, 0x12, 0x43, 0x6f,
-	0x6d, 0x6d, 0x69, 0x74, 0x51, 0x75, 0x6f, 0x74, 0x61, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74,
-	0x12, 0x15, 0x0a, 0x06, 0x6a, 0x6f, 0x62, 0x5f, 0x69, 0x64, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09,
-	0x52, 0x05, 0x6a, 0x6f, 0x62, 0x49, 0x64, 0x12, 0x1d, 0x0a, 0x0a, 0x64, 0x61, 0x69, 0x6c, 0x79,
-	0x5f, 0x63, 0x6f, 0x73, 0x74, 0x18, 0x02, 0x20, 0x01, 0x28, 0x05, 0x52, 0x09, 0x64, 0x61, 0x69,
-	0x6c, 0x79, 0x43, 0x6f, 0x73, 0x74, 0x22, 0x68, 0x0a, 0x13, 0x43, 0x6f, 0x6d, 0x6d, 0x69, 0x74,
-	0x51, 0x75, 0x6f, 0x74, 0x61, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x12, 0x0e, 0x0a,
-	0x02, 0x6f, 0x6b, 0x18, 0x01, 0x20, 0x01, 0x28, 0x08, 0x52, 0x02, 0x6f, 0x6b, 0x12, 0x29, 0x0a,
-	0x10, 0x63, 0x72, 0x65, 0x64, 0x69, 0x74, 0x73, 0x5f, 0x63, 0x6f, 0x6e, 0x73, 0x75, 0x6d, 0x65,
-	0x64, 0x18, 0x02, 0x20, 0x01, 0x28, 0x05, 0x52, 0x0f, 0x63, 0x72, 0x65, 0x64, 0x69, 0x74, 0x73,
-	0x43, 0x6f, 0x6e, 0x73, 0x75, 0x6d, 0x65, 0x64, 0x12, 0x16, 0x0a, 0x06, 0x62, 0x75, 0x64, 0x67,
-	0x65, 0x74, 0x18, 0x03, 0x20, 0x01, 0x28, 0x05, 0x52, 0x06, 0x62, 0x75, 0x64, 0x67, 0x65, 0x74,
-	0x22, 0x0f, 0x0a, 0x0d, 0x43, 0x61, 0x6e, 0x63, 0x65, 0x6c, 0x41, 0x63, 0x71, 0x75, 0x69, 0x72,
-	0x65, 0x2a, 0x34, 0x0a, 0x09, 0x4c, 0x6f, 0x67, 0x53, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x12, 0x16,
-	0x0a, 0x12, 0x50, 0x52, 0x4f, 0x56, 0x49, 0x53, 0x49, 0x4f, 0x4e, 0x45, 0x52, 0x5f, 0x44, 0x41,
-	0x45, 0x4d, 0x4f, 0x4e, 0x10, 0x00, 0x12, 0x0f, 0x0a, 0x0b, 0x50, 0x52, 0x4f, 0x56, 0x49, 0x53,
-	0x49, 0x4f, 0x4e, 0x45, 0x52, 0x10, 0x01, 0x32, 0xc5, 0x03, 0x0a, 0x11, 0x50, 0x72, 0x6f, 0x76,
-	0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x44, 0x61, 0x65, 0x6d, 0x6f, 0x6e, 0x12, 0x41, 0x0a,
-	0x0a, 0x41, 0x63, 0x71, 0x75, 0x69, 0x72, 0x65, 0x4a, 0x6f, 0x62, 0x12, 0x13, 0x2e, 0x70, 0x72,
-	0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x64, 0x2e, 0x45, 0x6d, 0x70, 0x74, 0x79,
-	0x1a, 0x19, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x64, 0x2e,
-	0x41, 0x63, 0x71, 0x75, 0x69, 0x72, 0x65, 0x64, 0x4a, 0x6f, 0x62, 0x22, 0x03, 0x88, 0x02, 0x01,
-	0x12, 0x52, 0x0a, 0x14, 0x41, 0x63, 0x71, 0x75, 0x69, 0x72, 0x65, 0x4a, 0x6f, 0x62, 0x57, 0x69,
-	0x74, 0x68, 0x43, 0x61, 0x6e, 0x63, 0x65, 0x6c, 0x12, 0x1b, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69,
-	0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x64, 0x2e, 0x43, 0x61, 0x6e, 0x63, 0x65, 0x6c, 0x41, 0x63,
-	0x71, 0x75, 0x69, 0x72, 0x65, 0x1a, 0x19, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f,
-	0x6e, 0x65, 0x72, 0x64, 0x2e, 0x41, 0x63, 0x71, 0x75, 0x69, 0x72, 0x65, 0x64, 0x4a, 0x6f, 0x62,
-	0x28, 0x01, 0x30, 0x01, 0x12, 0x52, 0x0a, 0x0b, 0x43, 0x6f, 0x6d, 0x6d, 0x69, 0x74, 0x51, 0x75,
-	0x6f, 0x74, 0x61, 0x12, 0x20, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65,
-	0x72, 0x64, 0x2e, 0x43, 0x6f, 0x6d, 0x6d, 0x69, 0x74, 0x51, 0x75, 0x6f, 0x74, 0x61, 0x52, 0x65,
-	0x71, 0x75, 0x65, 0x73, 0x74, 0x1a, 0x21, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f,
-	0x6e, 0x65, 0x72, 0x64, 0x2e, 0x43, 0x6f, 0x6d, 0x6d, 0x69, 0x74, 0x51, 0x75, 0x6f, 0x74, 0x61,
-	0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x12, 0x4c, 0x0a, 0x09, 0x55, 0x70, 0x64, 0x61,
-	0x74, 0x65, 0x4a, 0x6f, 0x62, 0x12, 0x1e, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f,
-	0x6e, 0x65, 0x72, 0x64, 0x2e, 0x55, 0x70, 0x64, 0x61, 0x74, 0x65, 0x4a, 0x6f, 0x62, 0x52, 0x65,
-	0x71, 0x75, 0x65, 0x73, 0x74, 0x1a, 0x1f, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f,
-	0x6e, 0x65, 0x72, 0x64, 0x2e, 0x55, 0x70, 0x64, 0x61, 0x74, 0x65, 0x4a, 0x6f, 0x62, 0x52, 0x65,
-	0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x12, 0x37, 0x0a, 0x07, 0x46, 0x61, 0x69, 0x6c, 0x4a, 0x6f,
-	0x62, 0x12, 0x17, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x64,
-	0x2e, 0x46, 0x61, 0x69, 0x6c, 0x65, 0x64, 0x4a, 0x6f, 0x62, 0x1a, 0x13, 0x2e, 0x70, 0x72, 0x6f,
-	0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x64, 0x2e, 0x45, 0x6d, 0x70, 0x74, 0x79, 0x12,
-	0x3e, 0x0a, 0x0b, 0x43, 0x6f, 0x6d, 0x70, 0x6c, 0x65, 0x74, 0x65, 0x4a, 0x6f, 0x62, 0x12, 0x1a,
-	0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x64, 0x2e, 0x43, 0x6f,
-	0x6d, 0x70, 0x6c, 0x65, 0x74, 0x65, 0x64, 0x4a, 0x6f, 0x62, 0x1a, 0x13, 0x2e, 0x70, 0x72, 0x6f,
-	0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x64, 0x2e, 0x45, 0x6d, 0x70, 0x74, 0x79, 0x42,
-	0x2e, 0x5a, 0x2c, 0x67, 0x69, 0x74, 0x68, 0x75, 0x62, 0x2e, 0x63, 0x6f, 0x6d, 0x2f, 0x63, 0x6f,
-	0x64, 0x65, 0x72, 0x2f, 0x63, 0x6f, 0x64, 0x65, 0x72, 0x2f, 0x76, 0x32, 0x2f, 0x70, 0x72, 0x6f,
-	0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x64, 0x2f, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62,
-	0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
+	0x65, 0x72, 0x2e, 0x52, 0x69, 0x63, 0x68, 0x50, 0x61, 0x72, 0x61, 0x6d, 0x65, 0x74, 0x65, 0x72,
+	0x52, 0x0e, 0x72, 0x69, 0x63, 0x68, 0x50, 0x61, 0x72, 0x61, 0x6d, 0x65, 0x74, 0x65, 0x72, 0x73,
+	0x12, 0x41, 0x0a, 0x1d, 0x65, 0x78, 0x74, 0x65, 0x72, 0x6e, 0x61, 0x6c, 0x5f, 0x61, 0x75, 0x74,
+	0x68, 0x5f, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x64, 0x65, 0x72, 0x73, 0x5f, 0x6e, 0x61, 0x6d, 0x65,
+	0x73, 0x18, 0x04, 0x20, 0x03, 0x28, 0x09, 0x52, 0x1a, 0x65, 0x78, 0x74, 0x65, 0x72, 0x6e, 0x61,
+	0x6c, 0x41, 0x75, 0x74, 0x68, 0x50, 0x72, 0x6f, 0x76, 0x69, 0x64, 0x65, 0x72, 0x73, 0x4e, 0x61,
+	0x6d, 0x65, 0x73, 0x12, 0x61, 0x0a, 0x17, 0x65, 0x78, 0x74, 0x65, 0x72, 0x6e, 0x61, 0x6c, 0x5f,
+	0x61, 0x75, 0x74, 0x68, 0x5f, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x64, 0x65, 0x72, 0x73, 0x18, 0x05,
+	0x20, 0x03, 0x28, 0x0b, 0x32, 0x29, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e,
+	0x65, 0x72, 0x2e, 0x45, 0x78, 0x74, 0x65, 0x72, 0x6e, 0x61, 0x6c, 0x41, 0x75, 0x74, 0x68, 0x50,
+	0x72, 0x6f, 0x76, 0x69, 0x64, 0x65, 0x72, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x52,
+	0x15, 0x65, 0x78, 0x74, 0x65, 0x72, 0x6e, 0x61, 0x6c, 0x41, 0x75, 0x74, 0x68, 0x50, 0x72, 0x6f,
+	0x76, 0x69, 0x64, 0x65, 0x72, 0x73, 0x12, 0x38, 0x0a, 0x0d, 0x73, 0x74, 0x61, 0x72, 0x74, 0x5f,
+	0x6d, 0x6f, 0x64, 0x75, 0x6c, 0x65, 0x73, 0x18, 0x06, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x13, 0x2e,
+	0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x4d, 0x6f, 0x64, 0x75,
+	0x6c, 0x65, 0x52, 0x0c, 0x73, 0x74, 0x61, 0x72, 0x74, 0x4d, 0x6f, 0x64, 0x75, 0x6c, 0x65, 0x73,
+	0x12, 0x36, 0x0a, 0x0c, 0x73, 0x74, 0x6f, 0x70, 0x5f, 0x6d, 0x6f, 0x64, 0x75, 0x6c, 0x65, 0x73,
+	0x18, 0x07, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x13, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69,
+	0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x4d, 0x6f, 0x64, 0x75, 0x6c, 0x65, 0x52, 0x0b, 0x73, 0x74, 0x6f,
+	0x70, 0x4d, 0x6f, 0x64, 0x75, 0x6c, 0x65, 0x73, 0x12, 0x2d, 0x0a, 0x07, 0x70, 0x72, 0x65, 0x73,
+	0x65, 0x74, 0x73, 0x18, 0x08, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x13, 0x2e, 0x70, 0x72, 0x6f, 0x76,
+	0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x50, 0x72, 0x65, 0x73, 0x65, 0x74, 0x52, 0x07,
+	0x70, 0x72, 0x65, 0x73, 0x65, 0x74, 0x73, 0x12, 0x12, 0x0a, 0x04, 0x70, 0x6c, 0x61, 0x6e, 0x18,
+	0x09, 0x20, 0x01, 0x28, 0x0c, 0x52, 0x04, 0x70, 0x6c, 0x61, 0x6e, 0x1a, 0x74, 0x0a, 0x0e, 0x54,
+	0x65, 0x6d, 0x70, 0x6c, 0x61, 0x74, 0x65, 0x44, 0x72, 0x79, 0x52, 0x75, 0x6e, 0x12, 0x33, 0x0a,
+	0x09, 0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x73, 0x18, 0x01, 0x20, 0x03, 0x28, 0x0b,
+	0x32, 0x15, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x52,
+	0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x52, 0x09, 0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63,
+	0x65, 0x73, 0x12, 0x2d, 0x0a, 0x07, 0x6d, 0x6f, 0x64, 0x75, 0x6c, 0x65, 0x73, 0x18, 0x02, 0x20,
+	0x03, 0x28, 0x0b, 0x32, 0x13, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65,
+	0x72, 0x2e, 0x4d, 0x6f, 0x64, 0x75, 0x6c, 0x65, 0x52, 0x07, 0x6d, 0x6f, 0x64, 0x75, 0x6c, 0x65,
+	0x73, 0x42, 0x06, 0x0a, 0x04, 0x74, 0x79, 0x70, 0x65, 0x22, 0xb0, 0x01, 0x0a, 0x03, 0x4c, 0x6f,
+	0x67, 0x12, 0x2f, 0x0a, 0x06, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28,
+	0x0e, 0x32, 0x17, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x64,
+	0x2e, 0x4c, 0x6f, 0x67, 0x53, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x52, 0x06, 0x73, 0x6f, 0x75, 0x72,
+	0x63, 0x65, 0x12, 0x2b, 0x0a, 0x05, 0x6c, 0x65, 0x76, 0x65, 0x6c, 0x18, 0x02, 0x20, 0x01, 0x28,
+	0x0e, 0x32, 0x15, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e,
+	0x4c, 0x6f, 0x67, 0x4c, 0x65, 0x76, 0x65, 0x6c, 0x52, 0x05, 0x6c, 0x65, 0x76, 0x65, 0x6c, 0x12,
+	0x1d, 0x0a, 0x0a, 0x63, 0x72, 0x65, 0x61, 0x74, 0x65, 0x64, 0x5f, 0x61, 0x74, 0x18, 0x03, 0x20,
+	0x01, 0x28, 0x03, 0x52, 0x09, 0x63, 0x72, 0x65, 0x61, 0x74, 0x65, 0x64, 0x41, 0x74, 0x12, 0x14,
+	0x0a, 0x05, 0x73, 0x74, 0x61, 0x67, 0x65, 0x18, 0x04, 0x20, 0x01, 0x28, 0x09, 0x52, 0x05, 0x73,
+	0x74, 0x61, 0x67, 0x65, 0x12, 0x16, 0x0a, 0x06, 0x6f, 0x75, 0x74, 0x70, 0x75, 0x74, 0x18, 0x05,
+	0x20, 0x01, 0x28, 0x09, 0x52, 0x06, 0x6f, 0x75, 0x74, 0x70, 0x75, 0x74, 0x22, 0xa6, 0x03, 0x0a,
+	0x10, 0x55, 0x70, 0x64, 0x61, 0x74, 0x65, 0x4a, 0x6f, 0x62, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73,
+	0x74, 0x12, 0x15, 0x0a, 0x06, 0x6a, 0x6f, 0x62, 0x5f, 0x69, 0x64, 0x18, 0x01, 0x20, 0x01, 0x28,
+	0x09, 0x52, 0x05, 0x6a, 0x6f, 0x62, 0x49, 0x64, 0x12, 0x25, 0x0a, 0x04, 0x6c, 0x6f, 0x67, 0x73,
+	0x18, 0x02, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x11, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69,
+	0x6f, 0x6e, 0x65, 0x72, 0x64, 0x2e, 0x4c, 0x6f, 0x67, 0x52, 0x04, 0x6c, 0x6f, 0x67, 0x73, 0x12,
+	0x4c, 0x0a, 0x12, 0x74, 0x65, 0x6d, 0x70, 0x6c, 0x61, 0x74, 0x65, 0x5f, 0x76, 0x61, 0x72, 0x69,
+	0x61, 0x62, 0x6c, 0x65, 0x73, 0x18, 0x04, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x1d, 0x2e, 0x70, 0x72,
+	0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x54, 0x65, 0x6d, 0x70, 0x6c, 0x61,
+	0x74, 0x65, 0x56, 0x61, 0x72, 0x69, 0x61, 0x62, 0x6c, 0x65, 0x52, 0x11, 0x74, 0x65, 0x6d, 0x70,
+	0x6c, 0x61, 0x74, 0x65, 0x56, 0x61, 0x72, 0x69, 0x61, 0x62, 0x6c, 0x65, 0x73, 0x12, 0x4c, 0x0a,
+	0x14, 0x75, 0x73, 0x65, 0x72, 0x5f, 0x76, 0x61, 0x72, 0x69, 0x61, 0x62, 0x6c, 0x65, 0x5f, 0x76,
+	0x61, 0x6c, 0x75, 0x65, 0x73, 0x18, 0x05, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x1a, 0x2e, 0x70, 0x72,
+	0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x56, 0x61, 0x72, 0x69, 0x61, 0x62,
+	0x6c, 0x65, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x52, 0x12, 0x75, 0x73, 0x65, 0x72, 0x56, 0x61, 0x72,
+	0x69, 0x61, 0x62, 0x6c, 0x65, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x73, 0x12, 0x16, 0x0a, 0x06, 0x72,
+	0x65, 0x61, 0x64, 0x6d, 0x65, 0x18, 0x06, 0x20, 0x01, 0x28, 0x0c, 0x52, 0x06, 0x72, 0x65, 0x61,
+	0x64, 0x6d, 0x65, 0x12, 0x58, 0x0a, 0x0e, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65,
+	0x5f, 0x74, 0x61, 0x67, 0x73, 0x18, 0x07, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x31, 0x2e, 0x70, 0x72,
+	0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x64, 0x2e, 0x55, 0x70, 0x64, 0x61, 0x74,
+	0x65, 0x4a, 0x6f, 0x62, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x2e, 0x57, 0x6f, 0x72, 0x6b,
+	0x73, 0x70, 0x61, 0x63, 0x65, 0x54, 0x61, 0x67, 0x73, 0x45, 0x6e, 0x74, 0x72, 0x79, 0x52, 0x0d,
+	0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x54, 0x61, 0x67, 0x73, 0x1a, 0x40, 0x0a,
+	0x12, 0x57, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x54, 0x61, 0x67, 0x73, 0x45, 0x6e,
+	0x74, 0x72, 0x79, 0x12, 0x10, 0x0a, 0x03, 0x6b, 0x65, 0x79, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09,
+	0x52, 0x03, 0x6b, 0x65, 0x79, 0x12, 0x14, 0x0a, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x18, 0x02,
+	0x20, 0x01, 0x28, 0x09, 0x52, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x3a, 0x02, 0x38, 0x01, 0x4a,
+	0x04, 0x08, 0x03, 0x10, 0x04, 0x22, 0x7a, 0x0a, 0x11, 0x55, 0x70, 0x64, 0x61, 0x74, 0x65, 0x4a,
+	0x6f, 0x62, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x12, 0x1a, 0x0a, 0x08, 0x63, 0x61,
+	0x6e, 0x63, 0x65, 0x6c, 0x65, 0x64, 0x18, 0x01, 0x20, 0x01, 0x28, 0x08, 0x52, 0x08, 0x63, 0x61,
+	0x6e, 0x63, 0x65, 0x6c, 0x65, 0x64, 0x12, 0x43, 0x0a, 0x0f, 0x76, 0x61, 0x72, 0x69, 0x61, 0x62,
+	0x6c, 0x65, 0x5f, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x73, 0x18, 0x03, 0x20, 0x03, 0x28, 0x0b, 0x32,
+	0x1a, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x56, 0x61,
+	0x72, 0x69, 0x61, 0x62, 0x6c, 0x65, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x52, 0x0e, 0x76, 0x61, 0x72,
+	0x69, 0x61, 0x62, 0x6c, 0x65, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x73, 0x4a, 0x04, 0x08, 0x02, 0x10,
+	0x03, 0x22, 0x4a, 0x0a, 0x12, 0x43, 0x6f, 0x6d, 0x6d, 0x69, 0x74, 0x51, 0x75, 0x6f, 0x74, 0x61,
+	0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x12, 0x15, 0x0a, 0x06, 0x6a, 0x6f, 0x62, 0x5f, 0x69,
+	0x64, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x05, 0x6a, 0x6f, 0x62, 0x49, 0x64, 0x12, 0x1d,
+	0x0a, 0x0a, 0x64, 0x61, 0x69, 0x6c, 0x79, 0x5f, 0x63, 0x6f, 0x73, 0x74, 0x18, 0x02, 0x20, 0x01,
+	0x28, 0x05, 0x52, 0x09, 0x64, 0x61, 0x69, 0x6c, 0x79, 0x43, 0x6f, 0x73, 0x74, 0x22, 0x68, 0x0a,
+	0x13, 0x43, 0x6f, 0x6d, 0x6d, 0x69, 0x74, 0x51, 0x75, 0x6f, 0x74, 0x61, 0x52, 0x65, 0x73, 0x70,
+	0x6f, 0x6e, 0x73, 0x65, 0x12, 0x0e, 0x0a, 0x02, 0x6f, 0x6b, 0x18, 0x01, 0x20, 0x01, 0x28, 0x08,
+	0x52, 0x02, 0x6f, 0x6b, 0x12, 0x29, 0x0a, 0x10, 0x63, 0x72, 0x65, 0x64, 0x69, 0x74, 0x73, 0x5f,
+	0x63, 0x6f, 0x6e, 0x73, 0x75, 0x6d, 0x65, 0x64, 0x18, 0x02, 0x20, 0x01, 0x28, 0x05, 0x52, 0x0f,
+	0x63, 0x72, 0x65, 0x64, 0x69, 0x74, 0x73, 0x43, 0x6f, 0x6e, 0x73, 0x75, 0x6d, 0x65, 0x64, 0x12,
+	0x16, 0x0a, 0x06, 0x62, 0x75, 0x64, 0x67, 0x65, 0x74, 0x18, 0x03, 0x20, 0x01, 0x28, 0x05, 0x52,
+	0x06, 0x62, 0x75, 0x64, 0x67, 0x65, 0x74, 0x22, 0x0f, 0x0a, 0x0d, 0x43, 0x61, 0x6e, 0x63, 0x65,
+	0x6c, 0x41, 0x63, 0x71, 0x75, 0x69, 0x72, 0x65, 0x2a, 0x34, 0x0a, 0x09, 0x4c, 0x6f, 0x67, 0x53,
+	0x6f, 0x75, 0x72, 0x63, 0x65, 0x12, 0x16, 0x0a, 0x12, 0x50, 0x52, 0x4f, 0x56, 0x49, 0x53, 0x49,
+	0x4f, 0x4e, 0x45, 0x52, 0x5f, 0x44, 0x41, 0x45, 0x4d, 0x4f, 0x4e, 0x10, 0x00, 0x12, 0x0f, 0x0a,
+	0x0b, 0x50, 0x52, 0x4f, 0x56, 0x49, 0x53, 0x49, 0x4f, 0x4e, 0x45, 0x52, 0x10, 0x01, 0x32, 0xc5,
+	0x03, 0x0a, 0x11, 0x50, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x44, 0x61,
+	0x65, 0x6d, 0x6f, 0x6e, 0x12, 0x41, 0x0a, 0x0a, 0x41, 0x63, 0x71, 0x75, 0x69, 0x72, 0x65, 0x4a,
+	0x6f, 0x62, 0x12, 0x13, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72,
+	0x64, 0x2e, 0x45, 0x6d, 0x70, 0x74, 0x79, 0x1a, 0x19, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73,
+	0x69, 0x6f, 0x6e, 0x65, 0x72, 0x64, 0x2e, 0x41, 0x63, 0x71, 0x75, 0x69, 0x72, 0x65, 0x64, 0x4a,
+	0x6f, 0x62, 0x22, 0x03, 0x88, 0x02, 0x01, 0x12, 0x52, 0x0a, 0x14, 0x41, 0x63, 0x71, 0x75, 0x69,
+	0x72, 0x65, 0x4a, 0x6f, 0x62, 0x57, 0x69, 0x74, 0x68, 0x43, 0x61, 0x6e, 0x63, 0x65, 0x6c, 0x12,
+	0x1b, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x64, 0x2e, 0x43,
+	0x61, 0x6e, 0x63, 0x65, 0x6c, 0x41, 0x63, 0x71, 0x75, 0x69, 0x72, 0x65, 0x1a, 0x19, 0x2e, 0x70,
+	0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x64, 0x2e, 0x41, 0x63, 0x71, 0x75,
+	0x69, 0x72, 0x65, 0x64, 0x4a, 0x6f, 0x62, 0x28, 0x01, 0x30, 0x01, 0x12, 0x52, 0x0a, 0x0b, 0x43,
+	0x6f, 0x6d, 0x6d, 0x69, 0x74, 0x51, 0x75, 0x6f, 0x74, 0x61, 0x12, 0x20, 0x2e, 0x70, 0x72, 0x6f,
+	0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x64, 0x2e, 0x43, 0x6f, 0x6d, 0x6d, 0x69, 0x74,
+	0x51, 0x75, 0x6f, 0x74, 0x61, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x1a, 0x21, 0x2e, 0x70,
+	0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x64, 0x2e, 0x43, 0x6f, 0x6d, 0x6d,
+	0x69, 0x74, 0x51, 0x75, 0x6f, 0x74, 0x61, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x12,
+	0x4c, 0x0a, 0x09, 0x55, 0x70, 0x64, 0x61, 0x74, 0x65, 0x4a, 0x6f, 0x62, 0x12, 0x1e, 0x2e, 0x70,
+	0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x64, 0x2e, 0x55, 0x70, 0x64, 0x61,
+	0x74, 0x65, 0x4a, 0x6f, 0x62, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x1a, 0x1f, 0x2e, 0x70,
+	0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x64, 0x2e, 0x55, 0x70, 0x64, 0x61,
+	0x74, 0x65, 0x4a, 0x6f, 0x62, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x12, 0x37, 0x0a,
+	0x07, 0x46, 0x61, 0x69, 0x6c, 0x4a, 0x6f, 0x62, 0x12, 0x17, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69,
+	0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x64, 0x2e, 0x46, 0x61, 0x69, 0x6c, 0x65, 0x64, 0x4a, 0x6f,
+	0x62, 0x1a, 0x13, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x64,
+	0x2e, 0x45, 0x6d, 0x70, 0x74, 0x79, 0x12, 0x3e, 0x0a, 0x0b, 0x43, 0x6f, 0x6d, 0x70, 0x6c, 0x65,
+	0x74, 0x65, 0x4a, 0x6f, 0x62, 0x12, 0x1a, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f,
+	0x6e, 0x65, 0x72, 0x64, 0x2e, 0x43, 0x6f, 0x6d, 0x70, 0x6c, 0x65, 0x74, 0x65, 0x64, 0x4a, 0x6f,
+	0x62, 0x1a, 0x13, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x64,
+	0x2e, 0x45, 0x6d, 0x70, 0x74, 0x79, 0x42, 0x2e, 0x5a, 0x2c, 0x67, 0x69, 0x74, 0x68, 0x75, 0x62,
+	0x2e, 0x63, 0x6f, 0x6d, 0x2f, 0x63, 0x6f, 0x64, 0x65, 0x72, 0x2f, 0x63, 0x6f, 0x64, 0x65, 0x72,
+	0x2f, 0x76, 0x32, 0x2f, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x64,
+	0x2f, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
 }
 
 var (
@@ -1788,9 +1801,10 @@ var file_provisionerd_proto_provisionerd_proto_goTypes = []interface{}{
 	(*proto.Timing)(nil),                       // 28: provisioner.Timing
 	(*proto.Resource)(nil),                     // 29: provisioner.Resource
 	(*proto.Module)(nil),                       // 30: provisioner.Module
-	(*proto.RichParameter)(nil),                // 31: provisioner.RichParameter
-	(*proto.ExternalAuthProviderResource)(nil), // 32: provisioner.ExternalAuthProviderResource
-	(*proto.Preset)(nil),                       // 33: provisioner.Preset
+	(*proto.ResourceReplacement)(nil),          // 31: provisioner.ResourceReplacement
+	(*proto.RichParameter)(nil),                // 32: provisioner.RichParameter
+	(*proto.ExternalAuthProviderResource)(nil), // 33: provisioner.ExternalAuthProviderResource
+	(*proto.Preset)(nil),                       // 34: provisioner.Preset
 }
 var file_provisionerd_proto_provisionerd_proto_depIdxs = []int32{
 	11, // 0: provisionerd.AcquiredJob.workspace_build:type_name -> provisionerd.AcquiredJob.WorkspaceBuild
@@ -1823,32 +1837,33 @@ var file_provisionerd_proto_provisionerd_proto_depIdxs = []int32{
 	29, // 27: provisionerd.CompletedJob.WorkspaceBuild.resources:type_name -> provisioner.Resource
 	28, // 28: provisionerd.CompletedJob.WorkspaceBuild.timings:type_name -> provisioner.Timing
 	30, // 29: provisionerd.CompletedJob.WorkspaceBuild.modules:type_name -> provisioner.Module
-	29, // 30: provisionerd.CompletedJob.TemplateImport.start_resources:type_name -> provisioner.Resource
-	29, // 31: provisionerd.CompletedJob.TemplateImport.stop_resources:type_name -> provisioner.Resource
-	31, // 32: provisionerd.CompletedJob.TemplateImport.rich_parameters:type_name -> provisioner.RichParameter
-	32, // 33: provisionerd.CompletedJob.TemplateImport.external_auth_providers:type_name -> provisioner.ExternalAuthProviderResource
-	30, // 34: provisionerd.CompletedJob.TemplateImport.start_modules:type_name -> provisioner.Module
-	30, // 35: provisionerd.CompletedJob.TemplateImport.stop_modules:type_name -> provisioner.Module
-	33, // 36: provisionerd.CompletedJob.TemplateImport.presets:type_name -> provisioner.Preset
-	29, // 37: provisionerd.CompletedJob.TemplateDryRun.resources:type_name -> provisioner.Resource
-	30, // 38: provisionerd.CompletedJob.TemplateDryRun.modules:type_name -> provisioner.Module
-	1,  // 39: provisionerd.ProvisionerDaemon.AcquireJob:input_type -> provisionerd.Empty
-	10, // 40: provisionerd.ProvisionerDaemon.AcquireJobWithCancel:input_type -> provisionerd.CancelAcquire
-	8,  // 41: provisionerd.ProvisionerDaemon.CommitQuota:input_type -> provisionerd.CommitQuotaRequest
-	6,  // 42: provisionerd.ProvisionerDaemon.UpdateJob:input_type -> provisionerd.UpdateJobRequest
-	3,  // 43: provisionerd.ProvisionerDaemon.FailJob:input_type -> provisionerd.FailedJob
-	4,  // 44: provisionerd.ProvisionerDaemon.CompleteJob:input_type -> provisionerd.CompletedJob
-	2,  // 45: provisionerd.ProvisionerDaemon.AcquireJob:output_type -> provisionerd.AcquiredJob
-	2,  // 46: provisionerd.ProvisionerDaemon.AcquireJobWithCancel:output_type -> provisionerd.AcquiredJob
-	9,  // 47: provisionerd.ProvisionerDaemon.CommitQuota:output_type -> provisionerd.CommitQuotaResponse
-	7,  // 48: provisionerd.ProvisionerDaemon.UpdateJob:output_type -> provisionerd.UpdateJobResponse
-	1,  // 49: provisionerd.ProvisionerDaemon.FailJob:output_type -> provisionerd.Empty
-	1,  // 50: provisionerd.ProvisionerDaemon.CompleteJob:output_type -> provisionerd.Empty
-	45, // [45:51] is the sub-list for method output_type
-	39, // [39:45] is the sub-list for method input_type
-	39, // [39:39] is the sub-list for extension type_name
-	39, // [39:39] is the sub-list for extension extendee
-	0,  // [0:39] is the sub-list for field type_name
+	31, // 30: provisionerd.CompletedJob.WorkspaceBuild.resource_replacements:type_name -> provisioner.ResourceReplacement
+	29, // 31: provisionerd.CompletedJob.TemplateImport.start_resources:type_name -> provisioner.Resource
+	29, // 32: provisionerd.CompletedJob.TemplateImport.stop_resources:type_name -> provisioner.Resource
+	32, // 33: provisionerd.CompletedJob.TemplateImport.rich_parameters:type_name -> provisioner.RichParameter
+	33, // 34: provisionerd.CompletedJob.TemplateImport.external_auth_providers:type_name -> provisioner.ExternalAuthProviderResource
+	30, // 35: provisionerd.CompletedJob.TemplateImport.start_modules:type_name -> provisioner.Module
+	30, // 36: provisionerd.CompletedJob.TemplateImport.stop_modules:type_name -> provisioner.Module
+	34, // 37: provisionerd.CompletedJob.TemplateImport.presets:type_name -> provisioner.Preset
+	29, // 38: provisionerd.CompletedJob.TemplateDryRun.resources:type_name -> provisioner.Resource
+	30, // 39: provisionerd.CompletedJob.TemplateDryRun.modules:type_name -> provisioner.Module
+	1,  // 40: provisionerd.ProvisionerDaemon.AcquireJob:input_type -> provisionerd.Empty
+	10, // 41: provisionerd.ProvisionerDaemon.AcquireJobWithCancel:input_type -> provisionerd.CancelAcquire
+	8,  // 42: provisionerd.ProvisionerDaemon.CommitQuota:input_type -> provisionerd.CommitQuotaRequest
+	6,  // 43: provisionerd.ProvisionerDaemon.UpdateJob:input_type -> provisionerd.UpdateJobRequest
+	3,  // 44: provisionerd.ProvisionerDaemon.FailJob:input_type -> provisionerd.FailedJob
+	4,  // 45: provisionerd.ProvisionerDaemon.CompleteJob:input_type -> provisionerd.CompletedJob
+	2,  // 46: provisionerd.ProvisionerDaemon.AcquireJob:output_type -> provisionerd.AcquiredJob
+	2,  // 47: provisionerd.ProvisionerDaemon.AcquireJobWithCancel:output_type -> provisionerd.AcquiredJob
+	9,  // 48: provisionerd.ProvisionerDaemon.CommitQuota:output_type -> provisionerd.CommitQuotaResponse
+	7,  // 49: provisionerd.ProvisionerDaemon.UpdateJob:output_type -> provisionerd.UpdateJobResponse
+	1,  // 50: provisionerd.ProvisionerDaemon.FailJob:output_type -> provisionerd.Empty
+	1,  // 51: provisionerd.ProvisionerDaemon.CompleteJob:output_type -> provisionerd.Empty
+	46, // [46:52] is the sub-list for method output_type
+	40, // [40:46] is the sub-list for method input_type
+	40, // [40:40] is the sub-list for extension type_name
+	40, // [40:40] is the sub-list for extension extendee
+	0,  // [0:40] is the sub-list for field type_name
 }
 
 func init() { file_provisionerd_proto_provisionerd_proto_init() }
diff --git a/provisionerd/proto/provisionerd.proto b/provisionerd/proto/provisionerd.proto
index 7db8c807151fb..0e50718ce75de 100644
--- a/provisionerd/proto/provisionerd.proto
+++ b/provisionerd/proto/provisionerd.proto
@@ -75,6 +75,7 @@ message CompletedJob {
         repeated provisioner.Resource resources = 2;
         repeated provisioner.Timing timings = 3;
         repeated provisioner.Module modules = 4;
+        repeated provisioner.ResourceReplacement resource_replacements = 5;
     }
     message TemplateImport {
         repeated provisioner.Resource start_resources = 1;
diff --git a/provisionerd/proto/version.go b/provisionerd/proto/version.go
index c10173a157a0e..62ece2e02d224 100644
--- a/provisionerd/proto/version.go
+++ b/provisionerd/proto/version.go
@@ -16,6 +16,7 @@ import "github.com/coder/coder/v2/apiversion"
 // API v1.5:
 //   - Add new field named `prebuilt_workspace_build_stage` enum in the Metadata message.
 //   - Add new field named `running_agent_auth_tokens` to provisioner job metadata.
+//   - Add new field named `resource_replacements` in PlanComplete & CompletedJob.WorkspaceBuild.
 const (
 	CurrentMajor = 1
 	CurrentMinor = 5
diff --git a/provisionerd/runner/runner.go b/provisionerd/runner/runner.go
index 70d424c47a0c6..f74836b07faf7 100644
--- a/provisionerd/runner/runner.go
+++ b/provisionerd/runner/runner.go
@@ -1059,6 +1059,8 @@ func (r *Runner) runWorkspaceBuild(ctx context.Context) (*proto.CompletedJob, *p
 				// called by `plan`. `apply` does not modify them, so we can use the
 				// modules from the plan response.
 				Modules: planComplete.Modules,
+				// Resource replacements are discovered at plan time, only.
+				ResourceReplacements: planComplete.ResourceReplacements,
 			},
 		},
 	}, nil
diff --git a/provisionersdk/proto/provisioner.pb.go b/provisionersdk/proto/provisioner.pb.go
index 81c56c99e9b72..c1286e6f9fe0e 100644
--- a/provisionersdk/proto/provisioner.pb.go
+++ b/provisionersdk/proto/provisioner.pb.go
@@ -914,6 +914,61 @@ func (x *PresetParameter) GetValue() string {
 	return ""
 }
 
+type ResourceReplacement struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	Resource string   `protobuf:"bytes,1,opt,name=resource,proto3" json:"resource,omitempty"`
+	Paths    []string `protobuf:"bytes,2,rep,name=paths,proto3" json:"paths,omitempty"`
+}
+
+func (x *ResourceReplacement) Reset() {
+	*x = ResourceReplacement{}
+	if protoimpl.UnsafeEnabled {
+		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[8]
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		ms.StoreMessageInfo(mi)
+	}
+}
+
+func (x *ResourceReplacement) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*ResourceReplacement) ProtoMessage() {}
+
+func (x *ResourceReplacement) ProtoReflect() protoreflect.Message {
+	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[8]
+	if protoimpl.UnsafeEnabled && x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use ResourceReplacement.ProtoReflect.Descriptor instead.
+func (*ResourceReplacement) Descriptor() ([]byte, []int) {
+	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{8}
+}
+
+func (x *ResourceReplacement) GetResource() string {
+	if x != nil {
+		return x.Resource
+	}
+	return ""
+}
+
+func (x *ResourceReplacement) GetPaths() []string {
+	if x != nil {
+		return x.Paths
+	}
+	return nil
+}
+
 // VariableValue holds the key/value mapping of a Terraform variable.
 type VariableValue struct {
 	state         protoimpl.MessageState
@@ -928,7 +983,7 @@ type VariableValue struct {
 func (x *VariableValue) Reset() {
 	*x = VariableValue{}
 	if protoimpl.UnsafeEnabled {
-		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[8]
+		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[9]
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		ms.StoreMessageInfo(mi)
 	}
@@ -941,7 +996,7 @@ func (x *VariableValue) String() string {
 func (*VariableValue) ProtoMessage() {}
 
 func (x *VariableValue) ProtoReflect() protoreflect.Message {
-	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[8]
+	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[9]
 	if protoimpl.UnsafeEnabled && x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -954,7 +1009,7 @@ func (x *VariableValue) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use VariableValue.ProtoReflect.Descriptor instead.
 func (*VariableValue) Descriptor() ([]byte, []int) {
-	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{8}
+	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{9}
 }
 
 func (x *VariableValue) GetName() string {
@@ -991,7 +1046,7 @@ type Log struct {
 func (x *Log) Reset() {
 	*x = Log{}
 	if protoimpl.UnsafeEnabled {
-		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[9]
+		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[10]
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		ms.StoreMessageInfo(mi)
 	}
@@ -1004,7 +1059,7 @@ func (x *Log) String() string {
 func (*Log) ProtoMessage() {}
 
 func (x *Log) ProtoReflect() protoreflect.Message {
-	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[9]
+	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[10]
 	if protoimpl.UnsafeEnabled && x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -1017,7 +1072,7 @@ func (x *Log) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use Log.ProtoReflect.Descriptor instead.
 func (*Log) Descriptor() ([]byte, []int) {
-	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{9}
+	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{10}
 }
 
 func (x *Log) GetLevel() LogLevel {
@@ -1045,7 +1100,7 @@ type InstanceIdentityAuth struct {
 func (x *InstanceIdentityAuth) Reset() {
 	*x = InstanceIdentityAuth{}
 	if protoimpl.UnsafeEnabled {
-		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[10]
+		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[11]
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		ms.StoreMessageInfo(mi)
 	}
@@ -1058,7 +1113,7 @@ func (x *InstanceIdentityAuth) String() string {
 func (*InstanceIdentityAuth) ProtoMessage() {}
 
 func (x *InstanceIdentityAuth) ProtoReflect() protoreflect.Message {
-	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[10]
+	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[11]
 	if protoimpl.UnsafeEnabled && x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -1071,7 +1126,7 @@ func (x *InstanceIdentityAuth) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use InstanceIdentityAuth.ProtoReflect.Descriptor instead.
 func (*InstanceIdentityAuth) Descriptor() ([]byte, []int) {
-	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{10}
+	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{11}
 }
 
 func (x *InstanceIdentityAuth) GetInstanceId() string {
@@ -1093,7 +1148,7 @@ type ExternalAuthProviderResource struct {
 func (x *ExternalAuthProviderResource) Reset() {
 	*x = ExternalAuthProviderResource{}
 	if protoimpl.UnsafeEnabled {
-		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[11]
+		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[12]
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		ms.StoreMessageInfo(mi)
 	}
@@ -1106,7 +1161,7 @@ func (x *ExternalAuthProviderResource) String() string {
 func (*ExternalAuthProviderResource) ProtoMessage() {}
 
 func (x *ExternalAuthProviderResource) ProtoReflect() protoreflect.Message {
-	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[11]
+	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[12]
 	if protoimpl.UnsafeEnabled && x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -1119,7 +1174,7 @@ func (x *ExternalAuthProviderResource) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use ExternalAuthProviderResource.ProtoReflect.Descriptor instead.
 func (*ExternalAuthProviderResource) Descriptor() ([]byte, []int) {
-	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{11}
+	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{12}
 }
 
 func (x *ExternalAuthProviderResource) GetId() string {
@@ -1148,7 +1203,7 @@ type ExternalAuthProvider struct {
 func (x *ExternalAuthProvider) Reset() {
 	*x = ExternalAuthProvider{}
 	if protoimpl.UnsafeEnabled {
-		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[12]
+		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[13]
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		ms.StoreMessageInfo(mi)
 	}
@@ -1161,7 +1216,7 @@ func (x *ExternalAuthProvider) String() string {
 func (*ExternalAuthProvider) ProtoMessage() {}
 
 func (x *ExternalAuthProvider) ProtoReflect() protoreflect.Message {
-	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[12]
+	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[13]
 	if protoimpl.UnsafeEnabled && x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -1174,7 +1229,7 @@ func (x *ExternalAuthProvider) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use ExternalAuthProvider.ProtoReflect.Descriptor instead.
 func (*ExternalAuthProvider) Descriptor() ([]byte, []int) {
-	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{12}
+	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{13}
 }
 
 func (x *ExternalAuthProvider) GetId() string {
@@ -1228,7 +1283,7 @@ type Agent struct {
 func (x *Agent) Reset() {
 	*x = Agent{}
 	if protoimpl.UnsafeEnabled {
-		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[13]
+		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[14]
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		ms.StoreMessageInfo(mi)
 	}
@@ -1241,7 +1296,7 @@ func (x *Agent) String() string {
 func (*Agent) ProtoMessage() {}
 
 func (x *Agent) ProtoReflect() protoreflect.Message {
-	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[13]
+	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[14]
 	if protoimpl.UnsafeEnabled && x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -1254,7 +1309,7 @@ func (x *Agent) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use Agent.ProtoReflect.Descriptor instead.
 func (*Agent) Descriptor() ([]byte, []int) {
-	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{13}
+	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{14}
 }
 
 func (x *Agent) GetId() string {
@@ -1425,7 +1480,7 @@ type ResourcesMonitoring struct {
 func (x *ResourcesMonitoring) Reset() {
 	*x = ResourcesMonitoring{}
 	if protoimpl.UnsafeEnabled {
-		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[14]
+		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[15]
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		ms.StoreMessageInfo(mi)
 	}
@@ -1438,7 +1493,7 @@ func (x *ResourcesMonitoring) String() string {
 func (*ResourcesMonitoring) ProtoMessage() {}
 
 func (x *ResourcesMonitoring) ProtoReflect() protoreflect.Message {
-	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[14]
+	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[15]
 	if protoimpl.UnsafeEnabled && x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -1451,7 +1506,7 @@ func (x *ResourcesMonitoring) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use ResourcesMonitoring.ProtoReflect.Descriptor instead.
 func (*ResourcesMonitoring) Descriptor() ([]byte, []int) {
-	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{14}
+	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{15}
 }
 
 func (x *ResourcesMonitoring) GetMemory() *MemoryResourceMonitor {
@@ -1480,7 +1535,7 @@ type MemoryResourceMonitor struct {
 func (x *MemoryResourceMonitor) Reset() {
 	*x = MemoryResourceMonitor{}
 	if protoimpl.UnsafeEnabled {
-		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[15]
+		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[16]
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		ms.StoreMessageInfo(mi)
 	}
@@ -1493,7 +1548,7 @@ func (x *MemoryResourceMonitor) String() string {
 func (*MemoryResourceMonitor) ProtoMessage() {}
 
 func (x *MemoryResourceMonitor) ProtoReflect() protoreflect.Message {
-	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[15]
+	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[16]
 	if protoimpl.UnsafeEnabled && x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -1506,7 +1561,7 @@ func (x *MemoryResourceMonitor) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use MemoryResourceMonitor.ProtoReflect.Descriptor instead.
 func (*MemoryResourceMonitor) Descriptor() ([]byte, []int) {
-	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{15}
+	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{16}
 }
 
 func (x *MemoryResourceMonitor) GetEnabled() bool {
@@ -1536,7 +1591,7 @@ type VolumeResourceMonitor struct {
 func (x *VolumeResourceMonitor) Reset() {
 	*x = VolumeResourceMonitor{}
 	if protoimpl.UnsafeEnabled {
-		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[16]
+		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[17]
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		ms.StoreMessageInfo(mi)
 	}
@@ -1549,7 +1604,7 @@ func (x *VolumeResourceMonitor) String() string {
 func (*VolumeResourceMonitor) ProtoMessage() {}
 
 func (x *VolumeResourceMonitor) ProtoReflect() protoreflect.Message {
-	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[16]
+	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[17]
 	if protoimpl.UnsafeEnabled && x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -1562,7 +1617,7 @@ func (x *VolumeResourceMonitor) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use VolumeResourceMonitor.ProtoReflect.Descriptor instead.
 func (*VolumeResourceMonitor) Descriptor() ([]byte, []int) {
-	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{16}
+	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{17}
 }
 
 func (x *VolumeResourceMonitor) GetPath() string {
@@ -1601,7 +1656,7 @@ type DisplayApps struct {
 func (x *DisplayApps) Reset() {
 	*x = DisplayApps{}
 	if protoimpl.UnsafeEnabled {
-		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[17]
+		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[18]
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		ms.StoreMessageInfo(mi)
 	}
@@ -1614,7 +1669,7 @@ func (x *DisplayApps) String() string {
 func (*DisplayApps) ProtoMessage() {}
 
 func (x *DisplayApps) ProtoReflect() protoreflect.Message {
-	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[17]
+	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[18]
 	if protoimpl.UnsafeEnabled && x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -1627,7 +1682,7 @@ func (x *DisplayApps) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use DisplayApps.ProtoReflect.Descriptor instead.
 func (*DisplayApps) Descriptor() ([]byte, []int) {
-	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{17}
+	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{18}
 }
 
 func (x *DisplayApps) GetVscode() bool {
@@ -1677,7 +1732,7 @@ type Env struct {
 func (x *Env) Reset() {
 	*x = Env{}
 	if protoimpl.UnsafeEnabled {
-		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[18]
+		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[19]
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		ms.StoreMessageInfo(mi)
 	}
@@ -1690,7 +1745,7 @@ func (x *Env) String() string {
 func (*Env) ProtoMessage() {}
 
 func (x *Env) ProtoReflect() protoreflect.Message {
-	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[18]
+	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[19]
 	if protoimpl.UnsafeEnabled && x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -1703,7 +1758,7 @@ func (x *Env) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use Env.ProtoReflect.Descriptor instead.
 func (*Env) Descriptor() ([]byte, []int) {
-	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{18}
+	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{19}
 }
 
 func (x *Env) GetName() string {
@@ -1740,7 +1795,7 @@ type Script struct {
 func (x *Script) Reset() {
 	*x = Script{}
 	if protoimpl.UnsafeEnabled {
-		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[19]
+		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[20]
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		ms.StoreMessageInfo(mi)
 	}
@@ -1753,7 +1808,7 @@ func (x *Script) String() string {
 func (*Script) ProtoMessage() {}
 
 func (x *Script) ProtoReflect() protoreflect.Message {
-	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[19]
+	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[20]
 	if protoimpl.UnsafeEnabled && x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -1766,7 +1821,7 @@ func (x *Script) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use Script.ProtoReflect.Descriptor instead.
 func (*Script) Descriptor() ([]byte, []int) {
-	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{19}
+	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{20}
 }
 
 func (x *Script) GetDisplayName() string {
@@ -1845,7 +1900,7 @@ type Devcontainer struct {
 func (x *Devcontainer) Reset() {
 	*x = Devcontainer{}
 	if protoimpl.UnsafeEnabled {
-		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[20]
+		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[21]
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		ms.StoreMessageInfo(mi)
 	}
@@ -1858,7 +1913,7 @@ func (x *Devcontainer) String() string {
 func (*Devcontainer) ProtoMessage() {}
 
 func (x *Devcontainer) ProtoReflect() protoreflect.Message {
-	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[20]
+	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[21]
 	if protoimpl.UnsafeEnabled && x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -1871,7 +1926,7 @@ func (x *Devcontainer) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use Devcontainer.ProtoReflect.Descriptor instead.
 func (*Devcontainer) Descriptor() ([]byte, []int) {
-	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{20}
+	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{21}
 }
 
 func (x *Devcontainer) GetWorkspaceFolder() string {
@@ -1920,7 +1975,7 @@ type App struct {
 func (x *App) Reset() {
 	*x = App{}
 	if protoimpl.UnsafeEnabled {
-		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[21]
+		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[22]
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		ms.StoreMessageInfo(mi)
 	}
@@ -1933,7 +1988,7 @@ func (x *App) String() string {
 func (*App) ProtoMessage() {}
 
 func (x *App) ProtoReflect() protoreflect.Message {
-	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[21]
+	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[22]
 	if protoimpl.UnsafeEnabled && x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -1946,7 +2001,7 @@ func (x *App) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use App.ProtoReflect.Descriptor instead.
 func (*App) Descriptor() ([]byte, []int) {
-	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{21}
+	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{22}
 }
 
 func (x *App) GetSlug() string {
@@ -2047,7 +2102,7 @@ type Healthcheck struct {
 func (x *Healthcheck) Reset() {
 	*x = Healthcheck{}
 	if protoimpl.UnsafeEnabled {
-		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[22]
+		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[23]
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		ms.StoreMessageInfo(mi)
 	}
@@ -2060,7 +2115,7 @@ func (x *Healthcheck) String() string {
 func (*Healthcheck) ProtoMessage() {}
 
 func (x *Healthcheck) ProtoReflect() protoreflect.Message {
-	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[22]
+	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[23]
 	if protoimpl.UnsafeEnabled && x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -2073,7 +2128,7 @@ func (x *Healthcheck) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use Healthcheck.ProtoReflect.Descriptor instead.
 func (*Healthcheck) Descriptor() ([]byte, []int) {
-	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{22}
+	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{23}
 }
 
 func (x *Healthcheck) GetUrl() string {
@@ -2117,7 +2172,7 @@ type Resource struct {
 func (x *Resource) Reset() {
 	*x = Resource{}
 	if protoimpl.UnsafeEnabled {
-		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[23]
+		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[24]
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		ms.StoreMessageInfo(mi)
 	}
@@ -2130,7 +2185,7 @@ func (x *Resource) String() string {
 func (*Resource) ProtoMessage() {}
 
 func (x *Resource) ProtoReflect() protoreflect.Message {
-	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[23]
+	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[24]
 	if protoimpl.UnsafeEnabled && x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -2143,7 +2198,7 @@ func (x *Resource) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use Resource.ProtoReflect.Descriptor instead.
 func (*Resource) Descriptor() ([]byte, []int) {
-	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{23}
+	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{24}
 }
 
 func (x *Resource) GetName() string {
@@ -2222,7 +2277,7 @@ type Module struct {
 func (x *Module) Reset() {
 	*x = Module{}
 	if protoimpl.UnsafeEnabled {
-		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[24]
+		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[25]
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		ms.StoreMessageInfo(mi)
 	}
@@ -2235,7 +2290,7 @@ func (x *Module) String() string {
 func (*Module) ProtoMessage() {}
 
 func (x *Module) ProtoReflect() protoreflect.Message {
-	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[24]
+	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[25]
 	if protoimpl.UnsafeEnabled && x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -2248,7 +2303,7 @@ func (x *Module) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use Module.ProtoReflect.Descriptor instead.
 func (*Module) Descriptor() ([]byte, []int) {
-	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{24}
+	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{25}
 }
 
 func (x *Module) GetSource() string {
@@ -2284,7 +2339,7 @@ type Role struct {
 func (x *Role) Reset() {
 	*x = Role{}
 	if protoimpl.UnsafeEnabled {
-		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[25]
+		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[26]
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		ms.StoreMessageInfo(mi)
 	}
@@ -2297,7 +2352,7 @@ func (x *Role) String() string {
 func (*Role) ProtoMessage() {}
 
 func (x *Role) ProtoReflect() protoreflect.Message {
-	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[25]
+	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[26]
 	if protoimpl.UnsafeEnabled && x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -2310,7 +2365,7 @@ func (x *Role) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use Role.ProtoReflect.Descriptor instead.
 func (*Role) Descriptor() ([]byte, []int) {
-	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{25}
+	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{26}
 }
 
 func (x *Role) GetName() string {
@@ -2339,7 +2394,7 @@ type RunningAgentAuthToken struct {
 func (x *RunningAgentAuthToken) Reset() {
 	*x = RunningAgentAuthToken{}
 	if protoimpl.UnsafeEnabled {
-		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[26]
+		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[27]
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		ms.StoreMessageInfo(mi)
 	}
@@ -2352,7 +2407,7 @@ func (x *RunningAgentAuthToken) String() string {
 func (*RunningAgentAuthToken) ProtoMessage() {}
 
 func (x *RunningAgentAuthToken) ProtoReflect() protoreflect.Message {
-	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[26]
+	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[27]
 	if protoimpl.UnsafeEnabled && x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -2365,7 +2420,7 @@ func (x *RunningAgentAuthToken) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use RunningAgentAuthToken.ProtoReflect.Descriptor instead.
 func (*RunningAgentAuthToken) Descriptor() ([]byte, []int) {
-	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{26}
+	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{27}
 }
 
 func (x *RunningAgentAuthToken) GetAgentId() string {
@@ -2414,7 +2469,7 @@ type Metadata struct {
 func (x *Metadata) Reset() {
 	*x = Metadata{}
 	if protoimpl.UnsafeEnabled {
-		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[27]
+		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[28]
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		ms.StoreMessageInfo(mi)
 	}
@@ -2427,7 +2482,7 @@ func (x *Metadata) String() string {
 func (*Metadata) ProtoMessage() {}
 
 func (x *Metadata) ProtoReflect() protoreflect.Message {
-	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[27]
+	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[28]
 	if protoimpl.UnsafeEnabled && x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -2440,7 +2495,7 @@ func (x *Metadata) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use Metadata.ProtoReflect.Descriptor instead.
 func (*Metadata) Descriptor() ([]byte, []int) {
-	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{27}
+	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{28}
 }
 
 func (x *Metadata) GetCoderUrl() string {
@@ -2606,7 +2661,7 @@ type Config struct {
 func (x *Config) Reset() {
 	*x = Config{}
 	if protoimpl.UnsafeEnabled {
-		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[28]
+		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[29]
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		ms.StoreMessageInfo(mi)
 	}
@@ -2619,7 +2674,7 @@ func (x *Config) String() string {
 func (*Config) ProtoMessage() {}
 
 func (x *Config) ProtoReflect() protoreflect.Message {
-	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[28]
+	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[29]
 	if protoimpl.UnsafeEnabled && x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -2632,7 +2687,7 @@ func (x *Config) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use Config.ProtoReflect.Descriptor instead.
 func (*Config) Descriptor() ([]byte, []int) {
-	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{28}
+	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{29}
 }
 
 func (x *Config) GetTemplateSourceArchive() []byte {
@@ -2666,7 +2721,7 @@ type ParseRequest struct {
 func (x *ParseRequest) Reset() {
 	*x = ParseRequest{}
 	if protoimpl.UnsafeEnabled {
-		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[29]
+		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[30]
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		ms.StoreMessageInfo(mi)
 	}
@@ -2679,7 +2734,7 @@ func (x *ParseRequest) String() string {
 func (*ParseRequest) ProtoMessage() {}
 
 func (x *ParseRequest) ProtoReflect() protoreflect.Message {
-	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[29]
+	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[30]
 	if protoimpl.UnsafeEnabled && x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -2692,7 +2747,7 @@ func (x *ParseRequest) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use ParseRequest.ProtoReflect.Descriptor instead.
 func (*ParseRequest) Descriptor() ([]byte, []int) {
-	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{29}
+	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{30}
 }
 
 // ParseComplete indicates a request to parse completed.
@@ -2710,7 +2765,7 @@ type ParseComplete struct {
 func (x *ParseComplete) Reset() {
 	*x = ParseComplete{}
 	if protoimpl.UnsafeEnabled {
-		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[30]
+		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[31]
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		ms.StoreMessageInfo(mi)
 	}
@@ -2723,7 +2778,7 @@ func (x *ParseComplete) String() string {
 func (*ParseComplete) ProtoMessage() {}
 
 func (x *ParseComplete) ProtoReflect() protoreflect.Message {
-	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[30]
+	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[31]
 	if protoimpl.UnsafeEnabled && x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -2736,7 +2791,7 @@ func (x *ParseComplete) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use ParseComplete.ProtoReflect.Descriptor instead.
 func (*ParseComplete) Descriptor() ([]byte, []int) {
-	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{30}
+	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{31}
 }
 
 func (x *ParseComplete) GetError() string {
@@ -2782,7 +2837,7 @@ type PlanRequest struct {
 func (x *PlanRequest) Reset() {
 	*x = PlanRequest{}
 	if protoimpl.UnsafeEnabled {
-		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[31]
+		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[32]
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		ms.StoreMessageInfo(mi)
 	}
@@ -2795,7 +2850,7 @@ func (x *PlanRequest) String() string {
 func (*PlanRequest) ProtoMessage() {}
 
 func (x *PlanRequest) ProtoReflect() protoreflect.Message {
-	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[31]
+	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[32]
 	if protoimpl.UnsafeEnabled && x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -2808,7 +2863,7 @@ func (x *PlanRequest) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use PlanRequest.ProtoReflect.Descriptor instead.
 func (*PlanRequest) Descriptor() ([]byte, []int) {
-	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{31}
+	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{32}
 }
 
 func (x *PlanRequest) GetMetadata() *Metadata {
@@ -2853,12 +2908,13 @@ type PlanComplete struct {
 	Modules               []*Module                       `protobuf:"bytes,7,rep,name=modules,proto3" json:"modules,omitempty"`
 	Presets               []*Preset                       `protobuf:"bytes,8,rep,name=presets,proto3" json:"presets,omitempty"`
 	Plan                  []byte                          `protobuf:"bytes,9,opt,name=plan,proto3" json:"plan,omitempty"`
+	ResourceReplacements  []*ResourceReplacement          `protobuf:"bytes,10,rep,name=resource_replacements,json=resourceReplacements,proto3" json:"resource_replacements,omitempty"`
 }
 
 func (x *PlanComplete) Reset() {
 	*x = PlanComplete{}
 	if protoimpl.UnsafeEnabled {
-		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[32]
+		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[33]
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		ms.StoreMessageInfo(mi)
 	}
@@ -2871,7 +2927,7 @@ func (x *PlanComplete) String() string {
 func (*PlanComplete) ProtoMessage() {}
 
 func (x *PlanComplete) ProtoReflect() protoreflect.Message {
-	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[32]
+	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[33]
 	if protoimpl.UnsafeEnabled && x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -2884,7 +2940,7 @@ func (x *PlanComplete) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use PlanComplete.ProtoReflect.Descriptor instead.
 func (*PlanComplete) Descriptor() ([]byte, []int) {
-	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{32}
+	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{33}
 }
 
 func (x *PlanComplete) GetError() string {
@@ -2943,6 +2999,13 @@ func (x *PlanComplete) GetPlan() []byte {
 	return nil
 }
 
+func (x *PlanComplete) GetResourceReplacements() []*ResourceReplacement {
+	if x != nil {
+		return x.ResourceReplacements
+	}
+	return nil
+}
+
 // ApplyRequest asks the provisioner to apply the changes.  Apply MUST be preceded by a successful plan request/response
 // in the same Session.  The plan data is not transmitted over the wire and is cached by the provisioner in the Session.
 type ApplyRequest struct {
@@ -2956,7 +3019,7 @@ type ApplyRequest struct {
 func (x *ApplyRequest) Reset() {
 	*x = ApplyRequest{}
 	if protoimpl.UnsafeEnabled {
-		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[33]
+		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[34]
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		ms.StoreMessageInfo(mi)
 	}
@@ -2969,7 +3032,7 @@ func (x *ApplyRequest) String() string {
 func (*ApplyRequest) ProtoMessage() {}
 
 func (x *ApplyRequest) ProtoReflect() protoreflect.Message {
-	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[33]
+	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[34]
 	if protoimpl.UnsafeEnabled && x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -2982,7 +3045,7 @@ func (x *ApplyRequest) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use ApplyRequest.ProtoReflect.Descriptor instead.
 func (*ApplyRequest) Descriptor() ([]byte, []int) {
-	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{33}
+	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{34}
 }
 
 func (x *ApplyRequest) GetMetadata() *Metadata {
@@ -3009,7 +3072,7 @@ type ApplyComplete struct {
 func (x *ApplyComplete) Reset() {
 	*x = ApplyComplete{}
 	if protoimpl.UnsafeEnabled {
-		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[34]
+		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[35]
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		ms.StoreMessageInfo(mi)
 	}
@@ -3022,7 +3085,7 @@ func (x *ApplyComplete) String() string {
 func (*ApplyComplete) ProtoMessage() {}
 
 func (x *ApplyComplete) ProtoReflect() protoreflect.Message {
-	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[34]
+	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[35]
 	if protoimpl.UnsafeEnabled && x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -3035,7 +3098,7 @@ func (x *ApplyComplete) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use ApplyComplete.ProtoReflect.Descriptor instead.
 func (*ApplyComplete) Descriptor() ([]byte, []int) {
-	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{34}
+	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{35}
 }
 
 func (x *ApplyComplete) GetState() []byte {
@@ -3097,7 +3160,7 @@ type Timing struct {
 func (x *Timing) Reset() {
 	*x = Timing{}
 	if protoimpl.UnsafeEnabled {
-		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[35]
+		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[36]
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		ms.StoreMessageInfo(mi)
 	}
@@ -3110,7 +3173,7 @@ func (x *Timing) String() string {
 func (*Timing) ProtoMessage() {}
 
 func (x *Timing) ProtoReflect() protoreflect.Message {
-	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[35]
+	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[36]
 	if protoimpl.UnsafeEnabled && x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -3123,7 +3186,7 @@ func (x *Timing) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use Timing.ProtoReflect.Descriptor instead.
 func (*Timing) Descriptor() ([]byte, []int) {
-	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{35}
+	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{36}
 }
 
 func (x *Timing) GetStart() *timestamppb.Timestamp {
@@ -3185,7 +3248,7 @@ type CancelRequest struct {
 func (x *CancelRequest) Reset() {
 	*x = CancelRequest{}
 	if protoimpl.UnsafeEnabled {
-		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[36]
+		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[37]
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		ms.StoreMessageInfo(mi)
 	}
@@ -3198,7 +3261,7 @@ func (x *CancelRequest) String() string {
 func (*CancelRequest) ProtoMessage() {}
 
 func (x *CancelRequest) ProtoReflect() protoreflect.Message {
-	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[36]
+	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[37]
 	if protoimpl.UnsafeEnabled && x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -3211,7 +3274,7 @@ func (x *CancelRequest) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use CancelRequest.ProtoReflect.Descriptor instead.
 func (*CancelRequest) Descriptor() ([]byte, []int) {
-	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{36}
+	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{37}
 }
 
 type Request struct {
@@ -3232,7 +3295,7 @@ type Request struct {
 func (x *Request) Reset() {
 	*x = Request{}
 	if protoimpl.UnsafeEnabled {
-		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[37]
+		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[38]
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		ms.StoreMessageInfo(mi)
 	}
@@ -3245,7 +3308,7 @@ func (x *Request) String() string {
 func (*Request) ProtoMessage() {}
 
 func (x *Request) ProtoReflect() protoreflect.Message {
-	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[37]
+	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[38]
 	if protoimpl.UnsafeEnabled && x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -3258,7 +3321,7 @@ func (x *Request) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use Request.ProtoReflect.Descriptor instead.
 func (*Request) Descriptor() ([]byte, []int) {
-	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{37}
+	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{38}
 }
 
 func (m *Request) GetType() isRequest_Type {
@@ -3354,7 +3417,7 @@ type Response struct {
 func (x *Response) Reset() {
 	*x = Response{}
 	if protoimpl.UnsafeEnabled {
-		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[38]
+		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[39]
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		ms.StoreMessageInfo(mi)
 	}
@@ -3367,7 +3430,7 @@ func (x *Response) String() string {
 func (*Response) ProtoMessage() {}
 
 func (x *Response) ProtoReflect() protoreflect.Message {
-	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[38]
+	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[39]
 	if protoimpl.UnsafeEnabled && x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -3380,7 +3443,7 @@ func (x *Response) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use Response.ProtoReflect.Descriptor instead.
 func (*Response) Descriptor() ([]byte, []int) {
-	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{38}
+	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{39}
 }
 
 func (m *Response) GetType() isResponse_Type {
@@ -3462,7 +3525,7 @@ type Agent_Metadata struct {
 func (x *Agent_Metadata) Reset() {
 	*x = Agent_Metadata{}
 	if protoimpl.UnsafeEnabled {
-		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[39]
+		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[40]
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		ms.StoreMessageInfo(mi)
 	}
@@ -3475,7 +3538,7 @@ func (x *Agent_Metadata) String() string {
 func (*Agent_Metadata) ProtoMessage() {}
 
 func (x *Agent_Metadata) ProtoReflect() protoreflect.Message {
-	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[39]
+	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[40]
 	if protoimpl.UnsafeEnabled && x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -3488,7 +3551,7 @@ func (x *Agent_Metadata) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use Agent_Metadata.ProtoReflect.Descriptor instead.
 func (*Agent_Metadata) Descriptor() ([]byte, []int) {
-	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{13, 0}
+	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{14, 0}
 }
 
 func (x *Agent_Metadata) GetKey() string {
@@ -3547,7 +3610,7 @@ type Resource_Metadata struct {
 func (x *Resource_Metadata) Reset() {
 	*x = Resource_Metadata{}
 	if protoimpl.UnsafeEnabled {
-		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[41]
+		mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[42]
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		ms.StoreMessageInfo(mi)
 	}
@@ -3560,7 +3623,7 @@ func (x *Resource_Metadata) String() string {
 func (*Resource_Metadata) ProtoMessage() {}
 
 func (x *Resource_Metadata) ProtoReflect() protoreflect.Message {
-	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[41]
+	mi := &file_provisionersdk_proto_provisioner_proto_msgTypes[42]
 	if protoimpl.UnsafeEnabled && x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -3573,7 +3636,7 @@ func (x *Resource_Metadata) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use Resource_Metadata.ProtoReflect.Descriptor instead.
 func (*Resource_Metadata) Descriptor() ([]byte, []int) {
-	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{23, 0}
+	return file_provisionersdk_proto_provisioner_proto_rawDescGZIP(), []int{24, 0}
 }
 
 func (x *Resource_Metadata) GetKey() string {
@@ -3691,379 +3754,389 @@ var file_provisionersdk_proto_provisioner_proto_rawDesc = []byte{
 	0x3b, 0x0a, 0x0f, 0x50, 0x72, 0x65, 0x73, 0x65, 0x74, 0x50, 0x61, 0x72, 0x61, 0x6d, 0x65, 0x74,
 	0x65, 0x72, 0x12, 0x12, 0x0a, 0x04, 0x6e, 0x61, 0x6d, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09,
 	0x52, 0x04, 0x6e, 0x61, 0x6d, 0x65, 0x12, 0x14, 0x0a, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x18,
-	0x02, 0x20, 0x01, 0x28, 0x09, 0x52, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x22, 0x57, 0x0a, 0x0d,
-	0x56, 0x61, 0x72, 0x69, 0x61, 0x62, 0x6c, 0x65, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x12, 0x12, 0x0a,
-	0x04, 0x6e, 0x61, 0x6d, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x04, 0x6e, 0x61, 0x6d,
-	0x65, 0x12, 0x14, 0x0a, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09,
-	0x52, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x12, 0x1c, 0x0a, 0x09, 0x73, 0x65, 0x6e, 0x73, 0x69,
-	0x74, 0x69, 0x76, 0x65, 0x18, 0x03, 0x20, 0x01, 0x28, 0x08, 0x52, 0x09, 0x73, 0x65, 0x6e, 0x73,
-	0x69, 0x74, 0x69, 0x76, 0x65, 0x22, 0x4a, 0x0a, 0x03, 0x4c, 0x6f, 0x67, 0x12, 0x2b, 0x0a, 0x05,
-	0x6c, 0x65, 0x76, 0x65, 0x6c, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0e, 0x32, 0x15, 0x2e, 0x70, 0x72,
-	0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x4c, 0x6f, 0x67, 0x4c, 0x65, 0x76,
-	0x65, 0x6c, 0x52, 0x05, 0x6c, 0x65, 0x76, 0x65, 0x6c, 0x12, 0x16, 0x0a, 0x06, 0x6f, 0x75, 0x74,
-	0x70, 0x75, 0x74, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x52, 0x06, 0x6f, 0x75, 0x74, 0x70, 0x75,
-	0x74, 0x22, 0x37, 0x0a, 0x14, 0x49, 0x6e, 0x73, 0x74, 0x61, 0x6e, 0x63, 0x65, 0x49, 0x64, 0x65,
-	0x6e, 0x74, 0x69, 0x74, 0x79, 0x41, 0x75, 0x74, 0x68, 0x12, 0x1f, 0x0a, 0x0b, 0x69, 0x6e, 0x73,
-	0x74, 0x61, 0x6e, 0x63, 0x65, 0x5f, 0x69, 0x64, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x0a,
-	0x69, 0x6e, 0x73, 0x74, 0x61, 0x6e, 0x63, 0x65, 0x49, 0x64, 0x22, 0x4a, 0x0a, 0x1c, 0x45, 0x78,
-	0x74, 0x65, 0x72, 0x6e, 0x61, 0x6c, 0x41, 0x75, 0x74, 0x68, 0x50, 0x72, 0x6f, 0x76, 0x69, 0x64,
-	0x65, 0x72, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x12, 0x0e, 0x0a, 0x02, 0x69, 0x64,
-	0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x02, 0x69, 0x64, 0x12, 0x1a, 0x0a, 0x08, 0x6f, 0x70,
-	0x74, 0x69, 0x6f, 0x6e, 0x61, 0x6c, 0x18, 0x02, 0x20, 0x01, 0x28, 0x08, 0x52, 0x08, 0x6f, 0x70,
-	0x74, 0x69, 0x6f, 0x6e, 0x61, 0x6c, 0x22, 0x49, 0x0a, 0x14, 0x45, 0x78, 0x74, 0x65, 0x72, 0x6e,
-	0x61, 0x6c, 0x41, 0x75, 0x74, 0x68, 0x50, 0x72, 0x6f, 0x76, 0x69, 0x64, 0x65, 0x72, 0x12, 0x0e,
-	0x0a, 0x02, 0x69, 0x64, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x02, 0x69, 0x64, 0x12, 0x21,
-	0x0a, 0x0c, 0x61, 0x63, 0x63, 0x65, 0x73, 0x73, 0x5f, 0x74, 0x6f, 0x6b, 0x65, 0x6e, 0x18, 0x02,
-	0x20, 0x01, 0x28, 0x09, 0x52, 0x0b, 0x61, 0x63, 0x63, 0x65, 0x73, 0x73, 0x54, 0x6f, 0x6b, 0x65,
-	0x6e, 0x22, 0xb6, 0x08, 0x0a, 0x05, 0x41, 0x67, 0x65, 0x6e, 0x74, 0x12, 0x0e, 0x0a, 0x02, 0x69,
-	0x64, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x02, 0x69, 0x64, 0x12, 0x12, 0x0a, 0x04, 0x6e,
-	0x61, 0x6d, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x52, 0x04, 0x6e, 0x61, 0x6d, 0x65, 0x12,
-	0x2d, 0x0a, 0x03, 0x65, 0x6e, 0x76, 0x18, 0x03, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x1b, 0x2e, 0x70,
-	0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x41, 0x67, 0x65, 0x6e, 0x74,
-	0x2e, 0x45, 0x6e, 0x76, 0x45, 0x6e, 0x74, 0x72, 0x79, 0x52, 0x03, 0x65, 0x6e, 0x76, 0x12, 0x29,
-	0x0a, 0x10, 0x6f, 0x70, 0x65, 0x72, 0x61, 0x74, 0x69, 0x6e, 0x67, 0x5f, 0x73, 0x79, 0x73, 0x74,
-	0x65, 0x6d, 0x18, 0x05, 0x20, 0x01, 0x28, 0x09, 0x52, 0x0f, 0x6f, 0x70, 0x65, 0x72, 0x61, 0x74,
-	0x69, 0x6e, 0x67, 0x53, 0x79, 0x73, 0x74, 0x65, 0x6d, 0x12, 0x22, 0x0a, 0x0c, 0x61, 0x72, 0x63,
-	0x68, 0x69, 0x74, 0x65, 0x63, 0x74, 0x75, 0x72, 0x65, 0x18, 0x06, 0x20, 0x01, 0x28, 0x09, 0x52,
-	0x0c, 0x61, 0x72, 0x63, 0x68, 0x69, 0x74, 0x65, 0x63, 0x74, 0x75, 0x72, 0x65, 0x12, 0x1c, 0x0a,
-	0x09, 0x64, 0x69, 0x72, 0x65, 0x63, 0x74, 0x6f, 0x72, 0x79, 0x18, 0x07, 0x20, 0x01, 0x28, 0x09,
-	0x52, 0x09, 0x64, 0x69, 0x72, 0x65, 0x63, 0x74, 0x6f, 0x72, 0x79, 0x12, 0x24, 0x0a, 0x04, 0x61,
-	0x70, 0x70, 0x73, 0x18, 0x08, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x10, 0x2e, 0x70, 0x72, 0x6f, 0x76,
-	0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x41, 0x70, 0x70, 0x52, 0x04, 0x61, 0x70, 0x70,
-	0x73, 0x12, 0x16, 0x0a, 0x05, 0x74, 0x6f, 0x6b, 0x65, 0x6e, 0x18, 0x09, 0x20, 0x01, 0x28, 0x09,
-	0x48, 0x00, 0x52, 0x05, 0x74, 0x6f, 0x6b, 0x65, 0x6e, 0x12, 0x21, 0x0a, 0x0b, 0x69, 0x6e, 0x73,
-	0x74, 0x61, 0x6e, 0x63, 0x65, 0x5f, 0x69, 0x64, 0x18, 0x0a, 0x20, 0x01, 0x28, 0x09, 0x48, 0x00,
-	0x52, 0x0a, 0x69, 0x6e, 0x73, 0x74, 0x61, 0x6e, 0x63, 0x65, 0x49, 0x64, 0x12, 0x3c, 0x0a, 0x1a,
-	0x63, 0x6f, 0x6e, 0x6e, 0x65, 0x63, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x74, 0x69, 0x6d, 0x65, 0x6f,
-	0x75, 0x74, 0x5f, 0x73, 0x65, 0x63, 0x6f, 0x6e, 0x64, 0x73, 0x18, 0x0b, 0x20, 0x01, 0x28, 0x05,
-	0x52, 0x18, 0x63, 0x6f, 0x6e, 0x6e, 0x65, 0x63, 0x74, 0x69, 0x6f, 0x6e, 0x54, 0x69, 0x6d, 0x65,
-	0x6f, 0x75, 0x74, 0x53, 0x65, 0x63, 0x6f, 0x6e, 0x64, 0x73, 0x12, 0x2f, 0x0a, 0x13, 0x74, 0x72,
-	0x6f, 0x75, 0x62, 0x6c, 0x65, 0x73, 0x68, 0x6f, 0x6f, 0x74, 0x69, 0x6e, 0x67, 0x5f, 0x75, 0x72,
-	0x6c, 0x18, 0x0c, 0x20, 0x01, 0x28, 0x09, 0x52, 0x12, 0x74, 0x72, 0x6f, 0x75, 0x62, 0x6c, 0x65,
-	0x73, 0x68, 0x6f, 0x6f, 0x74, 0x69, 0x6e, 0x67, 0x55, 0x72, 0x6c, 0x12, 0x1b, 0x0a, 0x09, 0x6d,
-	0x6f, 0x74, 0x64, 0x5f, 0x66, 0x69, 0x6c, 0x65, 0x18, 0x0d, 0x20, 0x01, 0x28, 0x09, 0x52, 0x08,
-	0x6d, 0x6f, 0x74, 0x64, 0x46, 0x69, 0x6c, 0x65, 0x12, 0x37, 0x0a, 0x08, 0x6d, 0x65, 0x74, 0x61,
-	0x64, 0x61, 0x74, 0x61, 0x18, 0x12, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x1b, 0x2e, 0x70, 0x72, 0x6f,
-	0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x41, 0x67, 0x65, 0x6e, 0x74, 0x2e, 0x4d,
-	0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x52, 0x08, 0x6d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74,
-	0x61, 0x12, 0x3b, 0x0a, 0x0c, 0x64, 0x69, 0x73, 0x70, 0x6c, 0x61, 0x79, 0x5f, 0x61, 0x70, 0x70,
-	0x73, 0x18, 0x14, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x18, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73,
-	0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x44, 0x69, 0x73, 0x70, 0x6c, 0x61, 0x79, 0x41, 0x70, 0x70,
-	0x73, 0x52, 0x0b, 0x64, 0x69, 0x73, 0x70, 0x6c, 0x61, 0x79, 0x41, 0x70, 0x70, 0x73, 0x12, 0x2d,
-	0x0a, 0x07, 0x73, 0x63, 0x72, 0x69, 0x70, 0x74, 0x73, 0x18, 0x15, 0x20, 0x03, 0x28, 0x0b, 0x32,
-	0x13, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x53, 0x63,
-	0x72, 0x69, 0x70, 0x74, 0x52, 0x07, 0x73, 0x63, 0x72, 0x69, 0x70, 0x74, 0x73, 0x12, 0x2f, 0x0a,
-	0x0a, 0x65, 0x78, 0x74, 0x72, 0x61, 0x5f, 0x65, 0x6e, 0x76, 0x73, 0x18, 0x16, 0x20, 0x03, 0x28,
-	0x0b, 0x32, 0x10, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e,
-	0x45, 0x6e, 0x76, 0x52, 0x09, 0x65, 0x78, 0x74, 0x72, 0x61, 0x45, 0x6e, 0x76, 0x73, 0x12, 0x14,
-	0x0a, 0x05, 0x6f, 0x72, 0x64, 0x65, 0x72, 0x18, 0x17, 0x20, 0x01, 0x28, 0x03, 0x52, 0x05, 0x6f,
-	0x72, 0x64, 0x65, 0x72, 0x12, 0x53, 0x0a, 0x14, 0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65,
-	0x73, 0x5f, 0x6d, 0x6f, 0x6e, 0x69, 0x74, 0x6f, 0x72, 0x69, 0x6e, 0x67, 0x18, 0x18, 0x20, 0x01,
-	0x28, 0x0b, 0x32, 0x20, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72,
-	0x2e, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x73, 0x4d, 0x6f, 0x6e, 0x69, 0x74, 0x6f,
-	0x72, 0x69, 0x6e, 0x67, 0x52, 0x13, 0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x73, 0x4d,
-	0x6f, 0x6e, 0x69, 0x74, 0x6f, 0x72, 0x69, 0x6e, 0x67, 0x12, 0x3f, 0x0a, 0x0d, 0x64, 0x65, 0x76,
-	0x63, 0x6f, 0x6e, 0x74, 0x61, 0x69, 0x6e, 0x65, 0x72, 0x73, 0x18, 0x19, 0x20, 0x03, 0x28, 0x0b,
-	0x32, 0x19, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x44,
-	0x65, 0x76, 0x63, 0x6f, 0x6e, 0x74, 0x61, 0x69, 0x6e, 0x65, 0x72, 0x52, 0x0d, 0x64, 0x65, 0x76,
-	0x63, 0x6f, 0x6e, 0x74, 0x61, 0x69, 0x6e, 0x65, 0x72, 0x73, 0x1a, 0xa3, 0x01, 0x0a, 0x08, 0x4d,
-	0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x12, 0x10, 0x0a, 0x03, 0x6b, 0x65, 0x79, 0x18, 0x01,
-	0x20, 0x01, 0x28, 0x09, 0x52, 0x03, 0x6b, 0x65, 0x79, 0x12, 0x21, 0x0a, 0x0c, 0x64, 0x69, 0x73,
-	0x70, 0x6c, 0x61, 0x79, 0x5f, 0x6e, 0x61, 0x6d, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x52,
-	0x0b, 0x64, 0x69, 0x73, 0x70, 0x6c, 0x61, 0x79, 0x4e, 0x61, 0x6d, 0x65, 0x12, 0x16, 0x0a, 0x06,
-	0x73, 0x63, 0x72, 0x69, 0x70, 0x74, 0x18, 0x03, 0x20, 0x01, 0x28, 0x09, 0x52, 0x06, 0x73, 0x63,
-	0x72, 0x69, 0x70, 0x74, 0x12, 0x1a, 0x0a, 0x08, 0x69, 0x6e, 0x74, 0x65, 0x72, 0x76, 0x61, 0x6c,
-	0x18, 0x04, 0x20, 0x01, 0x28, 0x03, 0x52, 0x08, 0x69, 0x6e, 0x74, 0x65, 0x72, 0x76, 0x61, 0x6c,
-	0x12, 0x18, 0x0a, 0x07, 0x74, 0x69, 0x6d, 0x65, 0x6f, 0x75, 0x74, 0x18, 0x05, 0x20, 0x01, 0x28,
-	0x03, 0x52, 0x07, 0x74, 0x69, 0x6d, 0x65, 0x6f, 0x75, 0x74, 0x12, 0x14, 0x0a, 0x05, 0x6f, 0x72,
-	0x64, 0x65, 0x72, 0x18, 0x06, 0x20, 0x01, 0x28, 0x03, 0x52, 0x05, 0x6f, 0x72, 0x64, 0x65, 0x72,
-	0x1a, 0x36, 0x0a, 0x08, 0x45, 0x6e, 0x76, 0x45, 0x6e, 0x74, 0x72, 0x79, 0x12, 0x10, 0x0a, 0x03,
-	0x6b, 0x65, 0x79, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x03, 0x6b, 0x65, 0x79, 0x12, 0x14,
-	0x0a, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x52, 0x05, 0x76,
-	0x61, 0x6c, 0x75, 0x65, 0x3a, 0x02, 0x38, 0x01, 0x42, 0x06, 0x0a, 0x04, 0x61, 0x75, 0x74, 0x68,
-	0x4a, 0x04, 0x08, 0x0e, 0x10, 0x0f, 0x52, 0x12, 0x6c, 0x6f, 0x67, 0x69, 0x6e, 0x5f, 0x62, 0x65,
-	0x66, 0x6f, 0x72, 0x65, 0x5f, 0x72, 0x65, 0x61, 0x64, 0x79, 0x22, 0x8f, 0x01, 0x0a, 0x13, 0x52,
+	0x02, 0x20, 0x01, 0x28, 0x09, 0x52, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x22, 0x47, 0x0a, 0x13,
+	0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x52, 0x65, 0x70, 0x6c, 0x61, 0x63, 0x65, 0x6d,
+	0x65, 0x6e, 0x74, 0x12, 0x1a, 0x0a, 0x08, 0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x18,
+	0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x08, 0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x12,
+	0x14, 0x0a, 0x05, 0x70, 0x61, 0x74, 0x68, 0x73, 0x18, 0x02, 0x20, 0x03, 0x28, 0x09, 0x52, 0x05,
+	0x70, 0x61, 0x74, 0x68, 0x73, 0x22, 0x57, 0x0a, 0x0d, 0x56, 0x61, 0x72, 0x69, 0x61, 0x62, 0x6c,
+	0x65, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x12, 0x12, 0x0a, 0x04, 0x6e, 0x61, 0x6d, 0x65, 0x18, 0x01,
+	0x20, 0x01, 0x28, 0x09, 0x52, 0x04, 0x6e, 0x61, 0x6d, 0x65, 0x12, 0x14, 0x0a, 0x05, 0x76, 0x61,
+	0x6c, 0x75, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x52, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65,
+	0x12, 0x1c, 0x0a, 0x09, 0x73, 0x65, 0x6e, 0x73, 0x69, 0x74, 0x69, 0x76, 0x65, 0x18, 0x03, 0x20,
+	0x01, 0x28, 0x08, 0x52, 0x09, 0x73, 0x65, 0x6e, 0x73, 0x69, 0x74, 0x69, 0x76, 0x65, 0x22, 0x4a,
+	0x0a, 0x03, 0x4c, 0x6f, 0x67, 0x12, 0x2b, 0x0a, 0x05, 0x6c, 0x65, 0x76, 0x65, 0x6c, 0x18, 0x01,
+	0x20, 0x01, 0x28, 0x0e, 0x32, 0x15, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e,
+	0x65, 0x72, 0x2e, 0x4c, 0x6f, 0x67, 0x4c, 0x65, 0x76, 0x65, 0x6c, 0x52, 0x05, 0x6c, 0x65, 0x76,
+	0x65, 0x6c, 0x12, 0x16, 0x0a, 0x06, 0x6f, 0x75, 0x74, 0x70, 0x75, 0x74, 0x18, 0x02, 0x20, 0x01,
+	0x28, 0x09, 0x52, 0x06, 0x6f, 0x75, 0x74, 0x70, 0x75, 0x74, 0x22, 0x37, 0x0a, 0x14, 0x49, 0x6e,
+	0x73, 0x74, 0x61, 0x6e, 0x63, 0x65, 0x49, 0x64, 0x65, 0x6e, 0x74, 0x69, 0x74, 0x79, 0x41, 0x75,
+	0x74, 0x68, 0x12, 0x1f, 0x0a, 0x0b, 0x69, 0x6e, 0x73, 0x74, 0x61, 0x6e, 0x63, 0x65, 0x5f, 0x69,
+	0x64, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x0a, 0x69, 0x6e, 0x73, 0x74, 0x61, 0x6e, 0x63,
+	0x65, 0x49, 0x64, 0x22, 0x4a, 0x0a, 0x1c, 0x45, 0x78, 0x74, 0x65, 0x72, 0x6e, 0x61, 0x6c, 0x41,
+	0x75, 0x74, 0x68, 0x50, 0x72, 0x6f, 0x76, 0x69, 0x64, 0x65, 0x72, 0x52, 0x65, 0x73, 0x6f, 0x75,
+	0x72, 0x63, 0x65, 0x12, 0x0e, 0x0a, 0x02, 0x69, 0x64, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52,
+	0x02, 0x69, 0x64, 0x12, 0x1a, 0x0a, 0x08, 0x6f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x61, 0x6c, 0x18,
+	0x02, 0x20, 0x01, 0x28, 0x08, 0x52, 0x08, 0x6f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x61, 0x6c, 0x22,
+	0x49, 0x0a, 0x14, 0x45, 0x78, 0x74, 0x65, 0x72, 0x6e, 0x61, 0x6c, 0x41, 0x75, 0x74, 0x68, 0x50,
+	0x72, 0x6f, 0x76, 0x69, 0x64, 0x65, 0x72, 0x12, 0x0e, 0x0a, 0x02, 0x69, 0x64, 0x18, 0x01, 0x20,
+	0x01, 0x28, 0x09, 0x52, 0x02, 0x69, 0x64, 0x12, 0x21, 0x0a, 0x0c, 0x61, 0x63, 0x63, 0x65, 0x73,
+	0x73, 0x5f, 0x74, 0x6f, 0x6b, 0x65, 0x6e, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x52, 0x0b, 0x61,
+	0x63, 0x63, 0x65, 0x73, 0x73, 0x54, 0x6f, 0x6b, 0x65, 0x6e, 0x22, 0xb6, 0x08, 0x0a, 0x05, 0x41,
+	0x67, 0x65, 0x6e, 0x74, 0x12, 0x0e, 0x0a, 0x02, 0x69, 0x64, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09,
+	0x52, 0x02, 0x69, 0x64, 0x12, 0x12, 0x0a, 0x04, 0x6e, 0x61, 0x6d, 0x65, 0x18, 0x02, 0x20, 0x01,
+	0x28, 0x09, 0x52, 0x04, 0x6e, 0x61, 0x6d, 0x65, 0x12, 0x2d, 0x0a, 0x03, 0x65, 0x6e, 0x76, 0x18,
+	0x03, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x1b, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f,
+	0x6e, 0x65, 0x72, 0x2e, 0x41, 0x67, 0x65, 0x6e, 0x74, 0x2e, 0x45, 0x6e, 0x76, 0x45, 0x6e, 0x74,
+	0x72, 0x79, 0x52, 0x03, 0x65, 0x6e, 0x76, 0x12, 0x29, 0x0a, 0x10, 0x6f, 0x70, 0x65, 0x72, 0x61,
+	0x74, 0x69, 0x6e, 0x67, 0x5f, 0x73, 0x79, 0x73, 0x74, 0x65, 0x6d, 0x18, 0x05, 0x20, 0x01, 0x28,
+	0x09, 0x52, 0x0f, 0x6f, 0x70, 0x65, 0x72, 0x61, 0x74, 0x69, 0x6e, 0x67, 0x53, 0x79, 0x73, 0x74,
+	0x65, 0x6d, 0x12, 0x22, 0x0a, 0x0c, 0x61, 0x72, 0x63, 0x68, 0x69, 0x74, 0x65, 0x63, 0x74, 0x75,
+	0x72, 0x65, 0x18, 0x06, 0x20, 0x01, 0x28, 0x09, 0x52, 0x0c, 0x61, 0x72, 0x63, 0x68, 0x69, 0x74,
+	0x65, 0x63, 0x74, 0x75, 0x72, 0x65, 0x12, 0x1c, 0x0a, 0x09, 0x64, 0x69, 0x72, 0x65, 0x63, 0x74,
+	0x6f, 0x72, 0x79, 0x18, 0x07, 0x20, 0x01, 0x28, 0x09, 0x52, 0x09, 0x64, 0x69, 0x72, 0x65, 0x63,
+	0x74, 0x6f, 0x72, 0x79, 0x12, 0x24, 0x0a, 0x04, 0x61, 0x70, 0x70, 0x73, 0x18, 0x08, 0x20, 0x03,
+	0x28, 0x0b, 0x32, 0x10, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72,
+	0x2e, 0x41, 0x70, 0x70, 0x52, 0x04, 0x61, 0x70, 0x70, 0x73, 0x12, 0x16, 0x0a, 0x05, 0x74, 0x6f,
+	0x6b, 0x65, 0x6e, 0x18, 0x09, 0x20, 0x01, 0x28, 0x09, 0x48, 0x00, 0x52, 0x05, 0x74, 0x6f, 0x6b,
+	0x65, 0x6e, 0x12, 0x21, 0x0a, 0x0b, 0x69, 0x6e, 0x73, 0x74, 0x61, 0x6e, 0x63, 0x65, 0x5f, 0x69,
+	0x64, 0x18, 0x0a, 0x20, 0x01, 0x28, 0x09, 0x48, 0x00, 0x52, 0x0a, 0x69, 0x6e, 0x73, 0x74, 0x61,
+	0x6e, 0x63, 0x65, 0x49, 0x64, 0x12, 0x3c, 0x0a, 0x1a, 0x63, 0x6f, 0x6e, 0x6e, 0x65, 0x63, 0x74,
+	0x69, 0x6f, 0x6e, 0x5f, 0x74, 0x69, 0x6d, 0x65, 0x6f, 0x75, 0x74, 0x5f, 0x73, 0x65, 0x63, 0x6f,
+	0x6e, 0x64, 0x73, 0x18, 0x0b, 0x20, 0x01, 0x28, 0x05, 0x52, 0x18, 0x63, 0x6f, 0x6e, 0x6e, 0x65,
+	0x63, 0x74, 0x69, 0x6f, 0x6e, 0x54, 0x69, 0x6d, 0x65, 0x6f, 0x75, 0x74, 0x53, 0x65, 0x63, 0x6f,
+	0x6e, 0x64, 0x73, 0x12, 0x2f, 0x0a, 0x13, 0x74, 0x72, 0x6f, 0x75, 0x62, 0x6c, 0x65, 0x73, 0x68,
+	0x6f, 0x6f, 0x74, 0x69, 0x6e, 0x67, 0x5f, 0x75, 0x72, 0x6c, 0x18, 0x0c, 0x20, 0x01, 0x28, 0x09,
+	0x52, 0x12, 0x74, 0x72, 0x6f, 0x75, 0x62, 0x6c, 0x65, 0x73, 0x68, 0x6f, 0x6f, 0x74, 0x69, 0x6e,
+	0x67, 0x55, 0x72, 0x6c, 0x12, 0x1b, 0x0a, 0x09, 0x6d, 0x6f, 0x74, 0x64, 0x5f, 0x66, 0x69, 0x6c,
+	0x65, 0x18, 0x0d, 0x20, 0x01, 0x28, 0x09, 0x52, 0x08, 0x6d, 0x6f, 0x74, 0x64, 0x46, 0x69, 0x6c,
+	0x65, 0x12, 0x37, 0x0a, 0x08, 0x6d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x18, 0x12, 0x20,
+	0x03, 0x28, 0x0b, 0x32, 0x1b, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65,
+	0x72, 0x2e, 0x41, 0x67, 0x65, 0x6e, 0x74, 0x2e, 0x4d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61,
+	0x52, 0x08, 0x6d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x12, 0x3b, 0x0a, 0x0c, 0x64, 0x69,
+	0x73, 0x70, 0x6c, 0x61, 0x79, 0x5f, 0x61, 0x70, 0x70, 0x73, 0x18, 0x14, 0x20, 0x01, 0x28, 0x0b,
+	0x32, 0x18, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x44,
+	0x69, 0x73, 0x70, 0x6c, 0x61, 0x79, 0x41, 0x70, 0x70, 0x73, 0x52, 0x0b, 0x64, 0x69, 0x73, 0x70,
+	0x6c, 0x61, 0x79, 0x41, 0x70, 0x70, 0x73, 0x12, 0x2d, 0x0a, 0x07, 0x73, 0x63, 0x72, 0x69, 0x70,
+	0x74, 0x73, 0x18, 0x15, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x13, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69,
+	0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x53, 0x63, 0x72, 0x69, 0x70, 0x74, 0x52, 0x07, 0x73,
+	0x63, 0x72, 0x69, 0x70, 0x74, 0x73, 0x12, 0x2f, 0x0a, 0x0a, 0x65, 0x78, 0x74, 0x72, 0x61, 0x5f,
+	0x65, 0x6e, 0x76, 0x73, 0x18, 0x16, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x10, 0x2e, 0x70, 0x72, 0x6f,
+	0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x45, 0x6e, 0x76, 0x52, 0x09, 0x65, 0x78,
+	0x74, 0x72, 0x61, 0x45, 0x6e, 0x76, 0x73, 0x12, 0x14, 0x0a, 0x05, 0x6f, 0x72, 0x64, 0x65, 0x72,
+	0x18, 0x17, 0x20, 0x01, 0x28, 0x03, 0x52, 0x05, 0x6f, 0x72, 0x64, 0x65, 0x72, 0x12, 0x53, 0x0a,
+	0x14, 0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x73, 0x5f, 0x6d, 0x6f, 0x6e, 0x69, 0x74,
+	0x6f, 0x72, 0x69, 0x6e, 0x67, 0x18, 0x18, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x20, 0x2e, 0x70, 0x72,
+	0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72,
+	0x63, 0x65, 0x73, 0x4d, 0x6f, 0x6e, 0x69, 0x74, 0x6f, 0x72, 0x69, 0x6e, 0x67, 0x52, 0x13, 0x72,
 	0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x73, 0x4d, 0x6f, 0x6e, 0x69, 0x74, 0x6f, 0x72, 0x69,
-	0x6e, 0x67, 0x12, 0x3a, 0x0a, 0x06, 0x6d, 0x65, 0x6d, 0x6f, 0x72, 0x79, 0x18, 0x01, 0x20, 0x01,
-	0x28, 0x0b, 0x32, 0x22, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72,
-	0x2e, 0x4d, 0x65, 0x6d, 0x6f, 0x72, 0x79, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x4d,
-	0x6f, 0x6e, 0x69, 0x74, 0x6f, 0x72, 0x52, 0x06, 0x6d, 0x65, 0x6d, 0x6f, 0x72, 0x79, 0x12, 0x3c,
-	0x0a, 0x07, 0x76, 0x6f, 0x6c, 0x75, 0x6d, 0x65, 0x73, 0x18, 0x02, 0x20, 0x03, 0x28, 0x0b, 0x32,
-	0x22, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x56, 0x6f,
-	0x6c, 0x75, 0x6d, 0x65, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x4d, 0x6f, 0x6e, 0x69,
-	0x74, 0x6f, 0x72, 0x52, 0x07, 0x76, 0x6f, 0x6c, 0x75, 0x6d, 0x65, 0x73, 0x22, 0x4f, 0x0a, 0x15,
-	0x4d, 0x65, 0x6d, 0x6f, 0x72, 0x79, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x4d, 0x6f,
-	0x6e, 0x69, 0x74, 0x6f, 0x72, 0x12, 0x18, 0x0a, 0x07, 0x65, 0x6e, 0x61, 0x62, 0x6c, 0x65, 0x64,
-	0x18, 0x01, 0x20, 0x01, 0x28, 0x08, 0x52, 0x07, 0x65, 0x6e, 0x61, 0x62, 0x6c, 0x65, 0x64, 0x12,
-	0x1c, 0x0a, 0x09, 0x74, 0x68, 0x72, 0x65, 0x73, 0x68, 0x6f, 0x6c, 0x64, 0x18, 0x02, 0x20, 0x01,
-	0x28, 0x05, 0x52, 0x09, 0x74, 0x68, 0x72, 0x65, 0x73, 0x68, 0x6f, 0x6c, 0x64, 0x22, 0x63, 0x0a,
-	0x15, 0x56, 0x6f, 0x6c, 0x75, 0x6d, 0x65, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x4d,
-	0x6f, 0x6e, 0x69, 0x74, 0x6f, 0x72, 0x12, 0x12, 0x0a, 0x04, 0x70, 0x61, 0x74, 0x68, 0x18, 0x01,
-	0x20, 0x01, 0x28, 0x09, 0x52, 0x04, 0x70, 0x61, 0x74, 0x68, 0x12, 0x18, 0x0a, 0x07, 0x65, 0x6e,
-	0x61, 0x62, 0x6c, 0x65, 0x64, 0x18, 0x02, 0x20, 0x01, 0x28, 0x08, 0x52, 0x07, 0x65, 0x6e, 0x61,
-	0x62, 0x6c, 0x65, 0x64, 0x12, 0x1c, 0x0a, 0x09, 0x74, 0x68, 0x72, 0x65, 0x73, 0x68, 0x6f, 0x6c,
-	0x64, 0x18, 0x03, 0x20, 0x01, 0x28, 0x05, 0x52, 0x09, 0x74, 0x68, 0x72, 0x65, 0x73, 0x68, 0x6f,
-	0x6c, 0x64, 0x22, 0xc6, 0x01, 0x0a, 0x0b, 0x44, 0x69, 0x73, 0x70, 0x6c, 0x61, 0x79, 0x41, 0x70,
-	0x70, 0x73, 0x12, 0x16, 0x0a, 0x06, 0x76, 0x73, 0x63, 0x6f, 0x64, 0x65, 0x18, 0x01, 0x20, 0x01,
-	0x28, 0x08, 0x52, 0x06, 0x76, 0x73, 0x63, 0x6f, 0x64, 0x65, 0x12, 0x27, 0x0a, 0x0f, 0x76, 0x73,
-	0x63, 0x6f, 0x64, 0x65, 0x5f, 0x69, 0x6e, 0x73, 0x69, 0x64, 0x65, 0x72, 0x73, 0x18, 0x02, 0x20,
-	0x01, 0x28, 0x08, 0x52, 0x0e, 0x76, 0x73, 0x63, 0x6f, 0x64, 0x65, 0x49, 0x6e, 0x73, 0x69, 0x64,
-	0x65, 0x72, 0x73, 0x12, 0x21, 0x0a, 0x0c, 0x77, 0x65, 0x62, 0x5f, 0x74, 0x65, 0x72, 0x6d, 0x69,
-	0x6e, 0x61, 0x6c, 0x18, 0x03, 0x20, 0x01, 0x28, 0x08, 0x52, 0x0b, 0x77, 0x65, 0x62, 0x54, 0x65,
-	0x72, 0x6d, 0x69, 0x6e, 0x61, 0x6c, 0x12, 0x1d, 0x0a, 0x0a, 0x73, 0x73, 0x68, 0x5f, 0x68, 0x65,
-	0x6c, 0x70, 0x65, 0x72, 0x18, 0x04, 0x20, 0x01, 0x28, 0x08, 0x52, 0x09, 0x73, 0x73, 0x68, 0x48,
-	0x65, 0x6c, 0x70, 0x65, 0x72, 0x12, 0x34, 0x0a, 0x16, 0x70, 0x6f, 0x72, 0x74, 0x5f, 0x66, 0x6f,
-	0x72, 0x77, 0x61, 0x72, 0x64, 0x69, 0x6e, 0x67, 0x5f, 0x68, 0x65, 0x6c, 0x70, 0x65, 0x72, 0x18,
-	0x05, 0x20, 0x01, 0x28, 0x08, 0x52, 0x14, 0x70, 0x6f, 0x72, 0x74, 0x46, 0x6f, 0x72, 0x77, 0x61,
-	0x72, 0x64, 0x69, 0x6e, 0x67, 0x48, 0x65, 0x6c, 0x70, 0x65, 0x72, 0x22, 0x2f, 0x0a, 0x03, 0x45,
-	0x6e, 0x76, 0x12, 0x12, 0x0a, 0x04, 0x6e, 0x61, 0x6d, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09,
-	0x52, 0x04, 0x6e, 0x61, 0x6d, 0x65, 0x12, 0x14, 0x0a, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x18,
-	0x02, 0x20, 0x01, 0x28, 0x09, 0x52, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x22, 0x9f, 0x02, 0x0a,
-	0x06, 0x53, 0x63, 0x72, 0x69, 0x70, 0x74, 0x12, 0x21, 0x0a, 0x0c, 0x64, 0x69, 0x73, 0x70, 0x6c,
-	0x61, 0x79, 0x5f, 0x6e, 0x61, 0x6d, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x0b, 0x64,
-	0x69, 0x73, 0x70, 0x6c, 0x61, 0x79, 0x4e, 0x61, 0x6d, 0x65, 0x12, 0x12, 0x0a, 0x04, 0x69, 0x63,
-	0x6f, 0x6e, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x52, 0x04, 0x69, 0x63, 0x6f, 0x6e, 0x12, 0x16,
-	0x0a, 0x06, 0x73, 0x63, 0x72, 0x69, 0x70, 0x74, 0x18, 0x03, 0x20, 0x01, 0x28, 0x09, 0x52, 0x06,
-	0x73, 0x63, 0x72, 0x69, 0x70, 0x74, 0x12, 0x12, 0x0a, 0x04, 0x63, 0x72, 0x6f, 0x6e, 0x18, 0x04,
-	0x20, 0x01, 0x28, 0x09, 0x52, 0x04, 0x63, 0x72, 0x6f, 0x6e, 0x12, 0x2c, 0x0a, 0x12, 0x73, 0x74,
-	0x61, 0x72, 0x74, 0x5f, 0x62, 0x6c, 0x6f, 0x63, 0x6b, 0x73, 0x5f, 0x6c, 0x6f, 0x67, 0x69, 0x6e,
-	0x18, 0x05, 0x20, 0x01, 0x28, 0x08, 0x52, 0x10, 0x73, 0x74, 0x61, 0x72, 0x74, 0x42, 0x6c, 0x6f,
-	0x63, 0x6b, 0x73, 0x4c, 0x6f, 0x67, 0x69, 0x6e, 0x12, 0x20, 0x0a, 0x0c, 0x72, 0x75, 0x6e, 0x5f,
-	0x6f, 0x6e, 0x5f, 0x73, 0x74, 0x61, 0x72, 0x74, 0x18, 0x06, 0x20, 0x01, 0x28, 0x08, 0x52, 0x0a,
-	0x72, 0x75, 0x6e, 0x4f, 0x6e, 0x53, 0x74, 0x61, 0x72, 0x74, 0x12, 0x1e, 0x0a, 0x0b, 0x72, 0x75,
-	0x6e, 0x5f, 0x6f, 0x6e, 0x5f, 0x73, 0x74, 0x6f, 0x70, 0x18, 0x07, 0x20, 0x01, 0x28, 0x08, 0x52,
-	0x09, 0x72, 0x75, 0x6e, 0x4f, 0x6e, 0x53, 0x74, 0x6f, 0x70, 0x12, 0x27, 0x0a, 0x0f, 0x74, 0x69,
-	0x6d, 0x65, 0x6f, 0x75, 0x74, 0x5f, 0x73, 0x65, 0x63, 0x6f, 0x6e, 0x64, 0x73, 0x18, 0x08, 0x20,
-	0x01, 0x28, 0x05, 0x52, 0x0e, 0x74, 0x69, 0x6d, 0x65, 0x6f, 0x75, 0x74, 0x53, 0x65, 0x63, 0x6f,
-	0x6e, 0x64, 0x73, 0x12, 0x19, 0x0a, 0x08, 0x6c, 0x6f, 0x67, 0x5f, 0x70, 0x61, 0x74, 0x68, 0x18,
-	0x09, 0x20, 0x01, 0x28, 0x09, 0x52, 0x07, 0x6c, 0x6f, 0x67, 0x50, 0x61, 0x74, 0x68, 0x22, 0x6e,
-	0x0a, 0x0c, 0x44, 0x65, 0x76, 0x63, 0x6f, 0x6e, 0x74, 0x61, 0x69, 0x6e, 0x65, 0x72, 0x12, 0x29,
-	0x0a, 0x10, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x5f, 0x66, 0x6f, 0x6c, 0x64,
-	0x65, 0x72, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x0f, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70,
-	0x61, 0x63, 0x65, 0x46, 0x6f, 0x6c, 0x64, 0x65, 0x72, 0x12, 0x1f, 0x0a, 0x0b, 0x63, 0x6f, 0x6e,
-	0x66, 0x69, 0x67, 0x5f, 0x70, 0x61, 0x74, 0x68, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x52, 0x0a,
-	0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x50, 0x61, 0x74, 0x68, 0x12, 0x12, 0x0a, 0x04, 0x6e, 0x61,
-	0x6d, 0x65, 0x18, 0x03, 0x20, 0x01, 0x28, 0x09, 0x52, 0x04, 0x6e, 0x61, 0x6d, 0x65, 0x22, 0x94,
-	0x03, 0x0a, 0x03, 0x41, 0x70, 0x70, 0x12, 0x12, 0x0a, 0x04, 0x73, 0x6c, 0x75, 0x67, 0x18, 0x01,
-	0x20, 0x01, 0x28, 0x09, 0x52, 0x04, 0x73, 0x6c, 0x75, 0x67, 0x12, 0x21, 0x0a, 0x0c, 0x64, 0x69,
-	0x73, 0x70, 0x6c, 0x61, 0x79, 0x5f, 0x6e, 0x61, 0x6d, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09,
-	0x52, 0x0b, 0x64, 0x69, 0x73, 0x70, 0x6c, 0x61, 0x79, 0x4e, 0x61, 0x6d, 0x65, 0x12, 0x18, 0x0a,
-	0x07, 0x63, 0x6f, 0x6d, 0x6d, 0x61, 0x6e, 0x64, 0x18, 0x03, 0x20, 0x01, 0x28, 0x09, 0x52, 0x07,
-	0x63, 0x6f, 0x6d, 0x6d, 0x61, 0x6e, 0x64, 0x12, 0x10, 0x0a, 0x03, 0x75, 0x72, 0x6c, 0x18, 0x04,
-	0x20, 0x01, 0x28, 0x09, 0x52, 0x03, 0x75, 0x72, 0x6c, 0x12, 0x12, 0x0a, 0x04, 0x69, 0x63, 0x6f,
-	0x6e, 0x18, 0x05, 0x20, 0x01, 0x28, 0x09, 0x52, 0x04, 0x69, 0x63, 0x6f, 0x6e, 0x12, 0x1c, 0x0a,
-	0x09, 0x73, 0x75, 0x62, 0x64, 0x6f, 0x6d, 0x61, 0x69, 0x6e, 0x18, 0x06, 0x20, 0x01, 0x28, 0x08,
-	0x52, 0x09, 0x73, 0x75, 0x62, 0x64, 0x6f, 0x6d, 0x61, 0x69, 0x6e, 0x12, 0x3a, 0x0a, 0x0b, 0x68,
-	0x65, 0x61, 0x6c, 0x74, 0x68, 0x63, 0x68, 0x65, 0x63, 0x6b, 0x18, 0x07, 0x20, 0x01, 0x28, 0x0b,
-	0x32, 0x18, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x48,
-	0x65, 0x61, 0x6c, 0x74, 0x68, 0x63, 0x68, 0x65, 0x63, 0x6b, 0x52, 0x0b, 0x68, 0x65, 0x61, 0x6c,
-	0x74, 0x68, 0x63, 0x68, 0x65, 0x63, 0x6b, 0x12, 0x41, 0x0a, 0x0d, 0x73, 0x68, 0x61, 0x72, 0x69,
-	0x6e, 0x67, 0x5f, 0x6c, 0x65, 0x76, 0x65, 0x6c, 0x18, 0x08, 0x20, 0x01, 0x28, 0x0e, 0x32, 0x1c,
-	0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x41, 0x70, 0x70,
-	0x53, 0x68, 0x61, 0x72, 0x69, 0x6e, 0x67, 0x4c, 0x65, 0x76, 0x65, 0x6c, 0x52, 0x0c, 0x73, 0x68,
-	0x61, 0x72, 0x69, 0x6e, 0x67, 0x4c, 0x65, 0x76, 0x65, 0x6c, 0x12, 0x1a, 0x0a, 0x08, 0x65, 0x78,
-	0x74, 0x65, 0x72, 0x6e, 0x61, 0x6c, 0x18, 0x09, 0x20, 0x01, 0x28, 0x08, 0x52, 0x08, 0x65, 0x78,
-	0x74, 0x65, 0x72, 0x6e, 0x61, 0x6c, 0x12, 0x14, 0x0a, 0x05, 0x6f, 0x72, 0x64, 0x65, 0x72, 0x18,
-	0x0a, 0x20, 0x01, 0x28, 0x03, 0x52, 0x05, 0x6f, 0x72, 0x64, 0x65, 0x72, 0x12, 0x16, 0x0a, 0x06,
-	0x68, 0x69, 0x64, 0x64, 0x65, 0x6e, 0x18, 0x0b, 0x20, 0x01, 0x28, 0x08, 0x52, 0x06, 0x68, 0x69,
-	0x64, 0x64, 0x65, 0x6e, 0x12, 0x2f, 0x0a, 0x07, 0x6f, 0x70, 0x65, 0x6e, 0x5f, 0x69, 0x6e, 0x18,
-	0x0c, 0x20, 0x01, 0x28, 0x0e, 0x32, 0x16, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f,
-	0x6e, 0x65, 0x72, 0x2e, 0x41, 0x70, 0x70, 0x4f, 0x70, 0x65, 0x6e, 0x49, 0x6e, 0x52, 0x06, 0x6f,
-	0x70, 0x65, 0x6e, 0x49, 0x6e, 0x22, 0x59, 0x0a, 0x0b, 0x48, 0x65, 0x61, 0x6c, 0x74, 0x68, 0x63,
-	0x68, 0x65, 0x63, 0x6b, 0x12, 0x10, 0x0a, 0x03, 0x75, 0x72, 0x6c, 0x18, 0x01, 0x20, 0x01, 0x28,
-	0x09, 0x52, 0x03, 0x75, 0x72, 0x6c, 0x12, 0x1a, 0x0a, 0x08, 0x69, 0x6e, 0x74, 0x65, 0x72, 0x76,
-	0x61, 0x6c, 0x18, 0x02, 0x20, 0x01, 0x28, 0x05, 0x52, 0x08, 0x69, 0x6e, 0x74, 0x65, 0x72, 0x76,
-	0x61, 0x6c, 0x12, 0x1c, 0x0a, 0x09, 0x74, 0x68, 0x72, 0x65, 0x73, 0x68, 0x6f, 0x6c, 0x64, 0x18,
-	0x03, 0x20, 0x01, 0x28, 0x05, 0x52, 0x09, 0x74, 0x68, 0x72, 0x65, 0x73, 0x68, 0x6f, 0x6c, 0x64,
-	0x22, 0x92, 0x03, 0x0a, 0x08, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x12, 0x12, 0x0a,
-	0x04, 0x6e, 0x61, 0x6d, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x04, 0x6e, 0x61, 0x6d,
-	0x65, 0x12, 0x12, 0x0a, 0x04, 0x74, 0x79, 0x70, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x52,
-	0x04, 0x74, 0x79, 0x70, 0x65, 0x12, 0x2a, 0x0a, 0x06, 0x61, 0x67, 0x65, 0x6e, 0x74, 0x73, 0x18,
-	0x03, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x12, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f,
-	0x6e, 0x65, 0x72, 0x2e, 0x41, 0x67, 0x65, 0x6e, 0x74, 0x52, 0x06, 0x61, 0x67, 0x65, 0x6e, 0x74,
-	0x73, 0x12, 0x3a, 0x0a, 0x08, 0x6d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x18, 0x04, 0x20,
-	0x03, 0x28, 0x0b, 0x32, 0x1e, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65,
-	0x72, 0x2e, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x2e, 0x4d, 0x65, 0x74, 0x61, 0x64,
-	0x61, 0x74, 0x61, 0x52, 0x08, 0x6d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x12, 0x12, 0x0a,
-	0x04, 0x68, 0x69, 0x64, 0x65, 0x18, 0x05, 0x20, 0x01, 0x28, 0x08, 0x52, 0x04, 0x68, 0x69, 0x64,
-	0x65, 0x12, 0x12, 0x0a, 0x04, 0x69, 0x63, 0x6f, 0x6e, 0x18, 0x06, 0x20, 0x01, 0x28, 0x09, 0x52,
-	0x04, 0x69, 0x63, 0x6f, 0x6e, 0x12, 0x23, 0x0a, 0x0d, 0x69, 0x6e, 0x73, 0x74, 0x61, 0x6e, 0x63,
-	0x65, 0x5f, 0x74, 0x79, 0x70, 0x65, 0x18, 0x07, 0x20, 0x01, 0x28, 0x09, 0x52, 0x0c, 0x69, 0x6e,
-	0x73, 0x74, 0x61, 0x6e, 0x63, 0x65, 0x54, 0x79, 0x70, 0x65, 0x12, 0x1d, 0x0a, 0x0a, 0x64, 0x61,
-	0x69, 0x6c, 0x79, 0x5f, 0x63, 0x6f, 0x73, 0x74, 0x18, 0x08, 0x20, 0x01, 0x28, 0x05, 0x52, 0x09,
-	0x64, 0x61, 0x69, 0x6c, 0x79, 0x43, 0x6f, 0x73, 0x74, 0x12, 0x1f, 0x0a, 0x0b, 0x6d, 0x6f, 0x64,
-	0x75, 0x6c, 0x65, 0x5f, 0x70, 0x61, 0x74, 0x68, 0x18, 0x09, 0x20, 0x01, 0x28, 0x09, 0x52, 0x0a,
-	0x6d, 0x6f, 0x64, 0x75, 0x6c, 0x65, 0x50, 0x61, 0x74, 0x68, 0x1a, 0x69, 0x0a, 0x08, 0x4d, 0x65,
-	0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x12, 0x10, 0x0a, 0x03, 0x6b, 0x65, 0x79, 0x18, 0x01, 0x20,
-	0x01, 0x28, 0x09, 0x52, 0x03, 0x6b, 0x65, 0x79, 0x12, 0x14, 0x0a, 0x05, 0x76, 0x61, 0x6c, 0x75,
-	0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x52, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x12, 0x1c,
-	0x0a, 0x09, 0x73, 0x65, 0x6e, 0x73, 0x69, 0x74, 0x69, 0x76, 0x65, 0x18, 0x03, 0x20, 0x01, 0x28,
-	0x08, 0x52, 0x09, 0x73, 0x65, 0x6e, 0x73, 0x69, 0x74, 0x69, 0x76, 0x65, 0x12, 0x17, 0x0a, 0x07,
-	0x69, 0x73, 0x5f, 0x6e, 0x75, 0x6c, 0x6c, 0x18, 0x04, 0x20, 0x01, 0x28, 0x08, 0x52, 0x06, 0x69,
-	0x73, 0x4e, 0x75, 0x6c, 0x6c, 0x22, 0x4c, 0x0a, 0x06, 0x4d, 0x6f, 0x64, 0x75, 0x6c, 0x65, 0x12,
-	0x16, 0x0a, 0x06, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52,
-	0x06, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x12, 0x18, 0x0a, 0x07, 0x76, 0x65, 0x72, 0x73, 0x69,
-	0x6f, 0x6e, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x52, 0x07, 0x76, 0x65, 0x72, 0x73, 0x69, 0x6f,
-	0x6e, 0x12, 0x10, 0x0a, 0x03, 0x6b, 0x65, 0x79, 0x18, 0x03, 0x20, 0x01, 0x28, 0x09, 0x52, 0x03,
-	0x6b, 0x65, 0x79, 0x22, 0x31, 0x0a, 0x04, 0x52, 0x6f, 0x6c, 0x65, 0x12, 0x12, 0x0a, 0x04, 0x6e,
+	0x6e, 0x67, 0x12, 0x3f, 0x0a, 0x0d, 0x64, 0x65, 0x76, 0x63, 0x6f, 0x6e, 0x74, 0x61, 0x69, 0x6e,
+	0x65, 0x72, 0x73, 0x18, 0x19, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x19, 0x2e, 0x70, 0x72, 0x6f, 0x76,
+	0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x44, 0x65, 0x76, 0x63, 0x6f, 0x6e, 0x74, 0x61,
+	0x69, 0x6e, 0x65, 0x72, 0x52, 0x0d, 0x64, 0x65, 0x76, 0x63, 0x6f, 0x6e, 0x74, 0x61, 0x69, 0x6e,
+	0x65, 0x72, 0x73, 0x1a, 0xa3, 0x01, 0x0a, 0x08, 0x4d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61,
+	0x12, 0x10, 0x0a, 0x03, 0x6b, 0x65, 0x79, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x03, 0x6b,
+	0x65, 0x79, 0x12, 0x21, 0x0a, 0x0c, 0x64, 0x69, 0x73, 0x70, 0x6c, 0x61, 0x79, 0x5f, 0x6e, 0x61,
+	0x6d, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x52, 0x0b, 0x64, 0x69, 0x73, 0x70, 0x6c, 0x61,
+	0x79, 0x4e, 0x61, 0x6d, 0x65, 0x12, 0x16, 0x0a, 0x06, 0x73, 0x63, 0x72, 0x69, 0x70, 0x74, 0x18,
+	0x03, 0x20, 0x01, 0x28, 0x09, 0x52, 0x06, 0x73, 0x63, 0x72, 0x69, 0x70, 0x74, 0x12, 0x1a, 0x0a,
+	0x08, 0x69, 0x6e, 0x74, 0x65, 0x72, 0x76, 0x61, 0x6c, 0x18, 0x04, 0x20, 0x01, 0x28, 0x03, 0x52,
+	0x08, 0x69, 0x6e, 0x74, 0x65, 0x72, 0x76, 0x61, 0x6c, 0x12, 0x18, 0x0a, 0x07, 0x74, 0x69, 0x6d,
+	0x65, 0x6f, 0x75, 0x74, 0x18, 0x05, 0x20, 0x01, 0x28, 0x03, 0x52, 0x07, 0x74, 0x69, 0x6d, 0x65,
+	0x6f, 0x75, 0x74, 0x12, 0x14, 0x0a, 0x05, 0x6f, 0x72, 0x64, 0x65, 0x72, 0x18, 0x06, 0x20, 0x01,
+	0x28, 0x03, 0x52, 0x05, 0x6f, 0x72, 0x64, 0x65, 0x72, 0x1a, 0x36, 0x0a, 0x08, 0x45, 0x6e, 0x76,
+	0x45, 0x6e, 0x74, 0x72, 0x79, 0x12, 0x10, 0x0a, 0x03, 0x6b, 0x65, 0x79, 0x18, 0x01, 0x20, 0x01,
+	0x28, 0x09, 0x52, 0x03, 0x6b, 0x65, 0x79, 0x12, 0x14, 0x0a, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65,
+	0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x52, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x3a, 0x02, 0x38,
+	0x01, 0x42, 0x06, 0x0a, 0x04, 0x61, 0x75, 0x74, 0x68, 0x4a, 0x04, 0x08, 0x0e, 0x10, 0x0f, 0x52,
+	0x12, 0x6c, 0x6f, 0x67, 0x69, 0x6e, 0x5f, 0x62, 0x65, 0x66, 0x6f, 0x72, 0x65, 0x5f, 0x72, 0x65,
+	0x61, 0x64, 0x79, 0x22, 0x8f, 0x01, 0x0a, 0x13, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65,
+	0x73, 0x4d, 0x6f, 0x6e, 0x69, 0x74, 0x6f, 0x72, 0x69, 0x6e, 0x67, 0x12, 0x3a, 0x0a, 0x06, 0x6d,
+	0x65, 0x6d, 0x6f, 0x72, 0x79, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x22, 0x2e, 0x70, 0x72,
+	0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x4d, 0x65, 0x6d, 0x6f, 0x72, 0x79,
+	0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x4d, 0x6f, 0x6e, 0x69, 0x74, 0x6f, 0x72, 0x52,
+	0x06, 0x6d, 0x65, 0x6d, 0x6f, 0x72, 0x79, 0x12, 0x3c, 0x0a, 0x07, 0x76, 0x6f, 0x6c, 0x75, 0x6d,
+	0x65, 0x73, 0x18, 0x02, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x22, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69,
+	0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x56, 0x6f, 0x6c, 0x75, 0x6d, 0x65, 0x52, 0x65, 0x73,
+	0x6f, 0x75, 0x72, 0x63, 0x65, 0x4d, 0x6f, 0x6e, 0x69, 0x74, 0x6f, 0x72, 0x52, 0x07, 0x76, 0x6f,
+	0x6c, 0x75, 0x6d, 0x65, 0x73, 0x22, 0x4f, 0x0a, 0x15, 0x4d, 0x65, 0x6d, 0x6f, 0x72, 0x79, 0x52,
+	0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x4d, 0x6f, 0x6e, 0x69, 0x74, 0x6f, 0x72, 0x12, 0x18,
+	0x0a, 0x07, 0x65, 0x6e, 0x61, 0x62, 0x6c, 0x65, 0x64, 0x18, 0x01, 0x20, 0x01, 0x28, 0x08, 0x52,
+	0x07, 0x65, 0x6e, 0x61, 0x62, 0x6c, 0x65, 0x64, 0x12, 0x1c, 0x0a, 0x09, 0x74, 0x68, 0x72, 0x65,
+	0x73, 0x68, 0x6f, 0x6c, 0x64, 0x18, 0x02, 0x20, 0x01, 0x28, 0x05, 0x52, 0x09, 0x74, 0x68, 0x72,
+	0x65, 0x73, 0x68, 0x6f, 0x6c, 0x64, 0x22, 0x63, 0x0a, 0x15, 0x56, 0x6f, 0x6c, 0x75, 0x6d, 0x65,
+	0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x4d, 0x6f, 0x6e, 0x69, 0x74, 0x6f, 0x72, 0x12,
+	0x12, 0x0a, 0x04, 0x70, 0x61, 0x74, 0x68, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x04, 0x70,
+	0x61, 0x74, 0x68, 0x12, 0x18, 0x0a, 0x07, 0x65, 0x6e, 0x61, 0x62, 0x6c, 0x65, 0x64, 0x18, 0x02,
+	0x20, 0x01, 0x28, 0x08, 0x52, 0x07, 0x65, 0x6e, 0x61, 0x62, 0x6c, 0x65, 0x64, 0x12, 0x1c, 0x0a,
+	0x09, 0x74, 0x68, 0x72, 0x65, 0x73, 0x68, 0x6f, 0x6c, 0x64, 0x18, 0x03, 0x20, 0x01, 0x28, 0x05,
+	0x52, 0x09, 0x74, 0x68, 0x72, 0x65, 0x73, 0x68, 0x6f, 0x6c, 0x64, 0x22, 0xc6, 0x01, 0x0a, 0x0b,
+	0x44, 0x69, 0x73, 0x70, 0x6c, 0x61, 0x79, 0x41, 0x70, 0x70, 0x73, 0x12, 0x16, 0x0a, 0x06, 0x76,
+	0x73, 0x63, 0x6f, 0x64, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x08, 0x52, 0x06, 0x76, 0x73, 0x63,
+	0x6f, 0x64, 0x65, 0x12, 0x27, 0x0a, 0x0f, 0x76, 0x73, 0x63, 0x6f, 0x64, 0x65, 0x5f, 0x69, 0x6e,
+	0x73, 0x69, 0x64, 0x65, 0x72, 0x73, 0x18, 0x02, 0x20, 0x01, 0x28, 0x08, 0x52, 0x0e, 0x76, 0x73,
+	0x63, 0x6f, 0x64, 0x65, 0x49, 0x6e, 0x73, 0x69, 0x64, 0x65, 0x72, 0x73, 0x12, 0x21, 0x0a, 0x0c,
+	0x77, 0x65, 0x62, 0x5f, 0x74, 0x65, 0x72, 0x6d, 0x69, 0x6e, 0x61, 0x6c, 0x18, 0x03, 0x20, 0x01,
+	0x28, 0x08, 0x52, 0x0b, 0x77, 0x65, 0x62, 0x54, 0x65, 0x72, 0x6d, 0x69, 0x6e, 0x61, 0x6c, 0x12,
+	0x1d, 0x0a, 0x0a, 0x73, 0x73, 0x68, 0x5f, 0x68, 0x65, 0x6c, 0x70, 0x65, 0x72, 0x18, 0x04, 0x20,
+	0x01, 0x28, 0x08, 0x52, 0x09, 0x73, 0x73, 0x68, 0x48, 0x65, 0x6c, 0x70, 0x65, 0x72, 0x12, 0x34,
+	0x0a, 0x16, 0x70, 0x6f, 0x72, 0x74, 0x5f, 0x66, 0x6f, 0x72, 0x77, 0x61, 0x72, 0x64, 0x69, 0x6e,
+	0x67, 0x5f, 0x68, 0x65, 0x6c, 0x70, 0x65, 0x72, 0x18, 0x05, 0x20, 0x01, 0x28, 0x08, 0x52, 0x14,
+	0x70, 0x6f, 0x72, 0x74, 0x46, 0x6f, 0x72, 0x77, 0x61, 0x72, 0x64, 0x69, 0x6e, 0x67, 0x48, 0x65,
+	0x6c, 0x70, 0x65, 0x72, 0x22, 0x2f, 0x0a, 0x03, 0x45, 0x6e, 0x76, 0x12, 0x12, 0x0a, 0x04, 0x6e,
 	0x61, 0x6d, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x04, 0x6e, 0x61, 0x6d, 0x65, 0x12,
-	0x15, 0x0a, 0x06, 0x6f, 0x72, 0x67, 0x5f, 0x69, 0x64, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x52,
-	0x05, 0x6f, 0x72, 0x67, 0x49, 0x64, 0x22, 0x48, 0x0a, 0x15, 0x52, 0x75, 0x6e, 0x6e, 0x69, 0x6e,
-	0x67, 0x41, 0x67, 0x65, 0x6e, 0x74, 0x41, 0x75, 0x74, 0x68, 0x54, 0x6f, 0x6b, 0x65, 0x6e, 0x12,
-	0x19, 0x0a, 0x08, 0x61, 0x67, 0x65, 0x6e, 0x74, 0x5f, 0x69, 0x64, 0x18, 0x01, 0x20, 0x01, 0x28,
-	0x09, 0x52, 0x07, 0x61, 0x67, 0x65, 0x6e, 0x74, 0x49, 0x64, 0x12, 0x14, 0x0a, 0x05, 0x74, 0x6f,
-	0x6b, 0x65, 0x6e, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x52, 0x05, 0x74, 0x6f, 0x6b, 0x65, 0x6e,
-	0x22, 0xca, 0x09, 0x0a, 0x08, 0x4d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x12, 0x1b, 0x0a,
-	0x09, 0x63, 0x6f, 0x64, 0x65, 0x72, 0x5f, 0x75, 0x72, 0x6c, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09,
-	0x52, 0x08, 0x63, 0x6f, 0x64, 0x65, 0x72, 0x55, 0x72, 0x6c, 0x12, 0x53, 0x0a, 0x14, 0x77, 0x6f,
-	0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x5f, 0x74, 0x72, 0x61, 0x6e, 0x73, 0x69, 0x74, 0x69,
-	0x6f, 0x6e, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0e, 0x32, 0x20, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69,
-	0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x57, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65,
-	0x54, 0x72, 0x61, 0x6e, 0x73, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x52, 0x13, 0x77, 0x6f, 0x72, 0x6b,
-	0x73, 0x70, 0x61, 0x63, 0x65, 0x54, 0x72, 0x61, 0x6e, 0x73, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x12,
-	0x25, 0x0a, 0x0e, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x5f, 0x6e, 0x61, 0x6d,
-	0x65, 0x18, 0x03, 0x20, 0x01, 0x28, 0x09, 0x52, 0x0d, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61,
-	0x63, 0x65, 0x4e, 0x61, 0x6d, 0x65, 0x12, 0x27, 0x0a, 0x0f, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70,
-	0x61, 0x63, 0x65, 0x5f, 0x6f, 0x77, 0x6e, 0x65, 0x72, 0x18, 0x04, 0x20, 0x01, 0x28, 0x09, 0x52,
-	0x0e, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x4f, 0x77, 0x6e, 0x65, 0x72, 0x12,
-	0x21, 0x0a, 0x0c, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x5f, 0x69, 0x64, 0x18,
-	0x05, 0x20, 0x01, 0x28, 0x09, 0x52, 0x0b, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65,
-	0x49, 0x64, 0x12, 0x2c, 0x0a, 0x12, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x5f,
-	0x6f, 0x77, 0x6e, 0x65, 0x72, 0x5f, 0x69, 0x64, 0x18, 0x06, 0x20, 0x01, 0x28, 0x09, 0x52, 0x10,
-	0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x4f, 0x77, 0x6e, 0x65, 0x72, 0x49, 0x64,
-	0x12, 0x32, 0x0a, 0x15, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x5f, 0x6f, 0x77,
-	0x6e, 0x65, 0x72, 0x5f, 0x65, 0x6d, 0x61, 0x69, 0x6c, 0x18, 0x07, 0x20, 0x01, 0x28, 0x09, 0x52,
-	0x13, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x4f, 0x77, 0x6e, 0x65, 0x72, 0x45,
-	0x6d, 0x61, 0x69, 0x6c, 0x12, 0x23, 0x0a, 0x0d, 0x74, 0x65, 0x6d, 0x70, 0x6c, 0x61, 0x74, 0x65,
-	0x5f, 0x6e, 0x61, 0x6d, 0x65, 0x18, 0x08, 0x20, 0x01, 0x28, 0x09, 0x52, 0x0c, 0x74, 0x65, 0x6d,
-	0x70, 0x6c, 0x61, 0x74, 0x65, 0x4e, 0x61, 0x6d, 0x65, 0x12, 0x29, 0x0a, 0x10, 0x74, 0x65, 0x6d,
-	0x70, 0x6c, 0x61, 0x74, 0x65, 0x5f, 0x76, 0x65, 0x72, 0x73, 0x69, 0x6f, 0x6e, 0x18, 0x09, 0x20,
-	0x01, 0x28, 0x09, 0x52, 0x0f, 0x74, 0x65, 0x6d, 0x70, 0x6c, 0x61, 0x74, 0x65, 0x56, 0x65, 0x72,
-	0x73, 0x69, 0x6f, 0x6e, 0x12, 0x48, 0x0a, 0x21, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63,
-	0x65, 0x5f, 0x6f, 0x77, 0x6e, 0x65, 0x72, 0x5f, 0x6f, 0x69, 0x64, 0x63, 0x5f, 0x61, 0x63, 0x63,
-	0x65, 0x73, 0x73, 0x5f, 0x74, 0x6f, 0x6b, 0x65, 0x6e, 0x18, 0x0a, 0x20, 0x01, 0x28, 0x09, 0x52,
-	0x1d, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x4f, 0x77, 0x6e, 0x65, 0x72, 0x4f,
-	0x69, 0x64, 0x63, 0x41, 0x63, 0x63, 0x65, 0x73, 0x73, 0x54, 0x6f, 0x6b, 0x65, 0x6e, 0x12, 0x41,
-	0x0a, 0x1d, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x5f, 0x6f, 0x77, 0x6e, 0x65,
-	0x72, 0x5f, 0x73, 0x65, 0x73, 0x73, 0x69, 0x6f, 0x6e, 0x5f, 0x74, 0x6f, 0x6b, 0x65, 0x6e, 0x18,
-	0x0b, 0x20, 0x01, 0x28, 0x09, 0x52, 0x1a, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65,
-	0x4f, 0x77, 0x6e, 0x65, 0x72, 0x53, 0x65, 0x73, 0x73, 0x69, 0x6f, 0x6e, 0x54, 0x6f, 0x6b, 0x65,
-	0x6e, 0x12, 0x1f, 0x0a, 0x0b, 0x74, 0x65, 0x6d, 0x70, 0x6c, 0x61, 0x74, 0x65, 0x5f, 0x69, 0x64,
-	0x18, 0x0c, 0x20, 0x01, 0x28, 0x09, 0x52, 0x0a, 0x74, 0x65, 0x6d, 0x70, 0x6c, 0x61, 0x74, 0x65,
-	0x49, 0x64, 0x12, 0x30, 0x0a, 0x14, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x5f,
-	0x6f, 0x77, 0x6e, 0x65, 0x72, 0x5f, 0x6e, 0x61, 0x6d, 0x65, 0x18, 0x0d, 0x20, 0x01, 0x28, 0x09,
-	0x52, 0x12, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x4f, 0x77, 0x6e, 0x65, 0x72,
-	0x4e, 0x61, 0x6d, 0x65, 0x12, 0x34, 0x0a, 0x16, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63,
-	0x65, 0x5f, 0x6f, 0x77, 0x6e, 0x65, 0x72, 0x5f, 0x67, 0x72, 0x6f, 0x75, 0x70, 0x73, 0x18, 0x0e,
-	0x20, 0x03, 0x28, 0x09, 0x52, 0x14, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x4f,
-	0x77, 0x6e, 0x65, 0x72, 0x47, 0x72, 0x6f, 0x75, 0x70, 0x73, 0x12, 0x42, 0x0a, 0x1e, 0x77, 0x6f,
-	0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x5f, 0x6f, 0x77, 0x6e, 0x65, 0x72, 0x5f, 0x73, 0x73,
-	0x68, 0x5f, 0x70, 0x75, 0x62, 0x6c, 0x69, 0x63, 0x5f, 0x6b, 0x65, 0x79, 0x18, 0x0f, 0x20, 0x01,
-	0x28, 0x09, 0x52, 0x1a, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x4f, 0x77, 0x6e,
-	0x65, 0x72, 0x53, 0x73, 0x68, 0x50, 0x75, 0x62, 0x6c, 0x69, 0x63, 0x4b, 0x65, 0x79, 0x12, 0x44,
-	0x0a, 0x1f, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x5f, 0x6f, 0x77, 0x6e, 0x65,
-	0x72, 0x5f, 0x73, 0x73, 0x68, 0x5f, 0x70, 0x72, 0x69, 0x76, 0x61, 0x74, 0x65, 0x5f, 0x6b, 0x65,
-	0x79, 0x18, 0x10, 0x20, 0x01, 0x28, 0x09, 0x52, 0x1b, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61,
-	0x63, 0x65, 0x4f, 0x77, 0x6e, 0x65, 0x72, 0x53, 0x73, 0x68, 0x50, 0x72, 0x69, 0x76, 0x61, 0x74,
-	0x65, 0x4b, 0x65, 0x79, 0x12, 0x2c, 0x0a, 0x12, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63,
-	0x65, 0x5f, 0x62, 0x75, 0x69, 0x6c, 0x64, 0x5f, 0x69, 0x64, 0x18, 0x11, 0x20, 0x01, 0x28, 0x09,
-	0x52, 0x10, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x42, 0x75, 0x69, 0x6c, 0x64,
-	0x49, 0x64, 0x12, 0x3b, 0x0a, 0x1a, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x5f,
-	0x6f, 0x77, 0x6e, 0x65, 0x72, 0x5f, 0x6c, 0x6f, 0x67, 0x69, 0x6e, 0x5f, 0x74, 0x79, 0x70, 0x65,
-	0x18, 0x12, 0x20, 0x01, 0x28, 0x09, 0x52, 0x17, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63,
-	0x65, 0x4f, 0x77, 0x6e, 0x65, 0x72, 0x4c, 0x6f, 0x67, 0x69, 0x6e, 0x54, 0x79, 0x70, 0x65, 0x12,
-	0x4e, 0x0a, 0x1a, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x5f, 0x6f, 0x77, 0x6e,
-	0x65, 0x72, 0x5f, 0x72, 0x62, 0x61, 0x63, 0x5f, 0x72, 0x6f, 0x6c, 0x65, 0x73, 0x18, 0x13, 0x20,
-	0x03, 0x28, 0x0b, 0x32, 0x11, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65,
-	0x72, 0x2e, 0x52, 0x6f, 0x6c, 0x65, 0x52, 0x17, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63,
-	0x65, 0x4f, 0x77, 0x6e, 0x65, 0x72, 0x52, 0x62, 0x61, 0x63, 0x52, 0x6f, 0x6c, 0x65, 0x73, 0x12,
-	0x6d, 0x0a, 0x1e, 0x70, 0x72, 0x65, 0x62, 0x75, 0x69, 0x6c, 0x74, 0x5f, 0x77, 0x6f, 0x72, 0x6b,
-	0x73, 0x70, 0x61, 0x63, 0x65, 0x5f, 0x62, 0x75, 0x69, 0x6c, 0x64, 0x5f, 0x73, 0x74, 0x61, 0x67,
-	0x65, 0x18, 0x14, 0x20, 0x01, 0x28, 0x0e, 0x32, 0x28, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73,
-	0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x50, 0x72, 0x65, 0x62, 0x75, 0x69, 0x6c, 0x74, 0x57, 0x6f,
-	0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x42, 0x75, 0x69, 0x6c, 0x64, 0x53, 0x74, 0x61, 0x67,
-	0x65, 0x52, 0x1b, 0x70, 0x72, 0x65, 0x62, 0x75, 0x69, 0x6c, 0x74, 0x57, 0x6f, 0x72, 0x6b, 0x73,
-	0x70, 0x61, 0x63, 0x65, 0x42, 0x75, 0x69, 0x6c, 0x64, 0x53, 0x74, 0x61, 0x67, 0x65, 0x12, 0x5d,
-	0x0a, 0x19, 0x72, 0x75, 0x6e, 0x6e, 0x69, 0x6e, 0x67, 0x5f, 0x61, 0x67, 0x65, 0x6e, 0x74, 0x5f,
-	0x61, 0x75, 0x74, 0x68, 0x5f, 0x74, 0x6f, 0x6b, 0x65, 0x6e, 0x73, 0x18, 0x15, 0x20, 0x03, 0x28,
-	0x0b, 0x32, 0x22, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e,
-	0x52, 0x75, 0x6e, 0x6e, 0x69, 0x6e, 0x67, 0x41, 0x67, 0x65, 0x6e, 0x74, 0x41, 0x75, 0x74, 0x68,
-	0x54, 0x6f, 0x6b, 0x65, 0x6e, 0x52, 0x16, 0x72, 0x75, 0x6e, 0x6e, 0x69, 0x6e, 0x67, 0x41, 0x67,
-	0x65, 0x6e, 0x74, 0x41, 0x75, 0x74, 0x68, 0x54, 0x6f, 0x6b, 0x65, 0x6e, 0x73, 0x22, 0x8a, 0x01,
-	0x0a, 0x06, 0x43, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x12, 0x36, 0x0a, 0x17, 0x74, 0x65, 0x6d, 0x70,
-	0x6c, 0x61, 0x74, 0x65, 0x5f, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x5f, 0x61, 0x72, 0x63, 0x68,
-	0x69, 0x76, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0c, 0x52, 0x15, 0x74, 0x65, 0x6d, 0x70, 0x6c,
-	0x61, 0x74, 0x65, 0x53, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x41, 0x72, 0x63, 0x68, 0x69, 0x76, 0x65,
-	0x12, 0x14, 0x0a, 0x05, 0x73, 0x74, 0x61, 0x74, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0c, 0x52,
-	0x05, 0x73, 0x74, 0x61, 0x74, 0x65, 0x12, 0x32, 0x0a, 0x15, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73,
-	0x69, 0x6f, 0x6e, 0x65, 0x72, 0x5f, 0x6c, 0x6f, 0x67, 0x5f, 0x6c, 0x65, 0x76, 0x65, 0x6c, 0x18,
-	0x03, 0x20, 0x01, 0x28, 0x09, 0x52, 0x13, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e,
-	0x65, 0x72, 0x4c, 0x6f, 0x67, 0x4c, 0x65, 0x76, 0x65, 0x6c, 0x22, 0x0e, 0x0a, 0x0c, 0x50, 0x61,
-	0x72, 0x73, 0x65, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x22, 0xa3, 0x02, 0x0a, 0x0d, 0x50,
-	0x61, 0x72, 0x73, 0x65, 0x43, 0x6f, 0x6d, 0x70, 0x6c, 0x65, 0x74, 0x65, 0x12, 0x14, 0x0a, 0x05,
-	0x65, 0x72, 0x72, 0x6f, 0x72, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x05, 0x65, 0x72, 0x72,
-	0x6f, 0x72, 0x12, 0x4c, 0x0a, 0x12, 0x74, 0x65, 0x6d, 0x70, 0x6c, 0x61, 0x74, 0x65, 0x5f, 0x76,
-	0x61, 0x72, 0x69, 0x61, 0x62, 0x6c, 0x65, 0x73, 0x18, 0x02, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x1d,
-	0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x54, 0x65, 0x6d,
-	0x70, 0x6c, 0x61, 0x74, 0x65, 0x56, 0x61, 0x72, 0x69, 0x61, 0x62, 0x6c, 0x65, 0x52, 0x11, 0x74,
-	0x65, 0x6d, 0x70, 0x6c, 0x61, 0x74, 0x65, 0x56, 0x61, 0x72, 0x69, 0x61, 0x62, 0x6c, 0x65, 0x73,
-	0x12, 0x16, 0x0a, 0x06, 0x72, 0x65, 0x61, 0x64, 0x6d, 0x65, 0x18, 0x03, 0x20, 0x01, 0x28, 0x0c,
-	0x52, 0x06, 0x72, 0x65, 0x61, 0x64, 0x6d, 0x65, 0x12, 0x54, 0x0a, 0x0e, 0x77, 0x6f, 0x72, 0x6b,
-	0x73, 0x70, 0x61, 0x63, 0x65, 0x5f, 0x74, 0x61, 0x67, 0x73, 0x18, 0x04, 0x20, 0x03, 0x28, 0x0b,
-	0x32, 0x2d, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x50,
-	0x61, 0x72, 0x73, 0x65, 0x43, 0x6f, 0x6d, 0x70, 0x6c, 0x65, 0x74, 0x65, 0x2e, 0x57, 0x6f, 0x72,
-	0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x54, 0x61, 0x67, 0x73, 0x45, 0x6e, 0x74, 0x72, 0x79, 0x52,
-	0x0d, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x54, 0x61, 0x67, 0x73, 0x1a, 0x40,
-	0x0a, 0x12, 0x57, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x54, 0x61, 0x67, 0x73, 0x45,
-	0x6e, 0x74, 0x72, 0x79, 0x12, 0x10, 0x0a, 0x03, 0x6b, 0x65, 0x79, 0x18, 0x01, 0x20, 0x01, 0x28,
-	0x09, 0x52, 0x03, 0x6b, 0x65, 0x79, 0x12, 0x14, 0x0a, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x18,
-	0x02, 0x20, 0x01, 0x28, 0x09, 0x52, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x3a, 0x02, 0x38, 0x01,
-	0x22, 0xb5, 0x02, 0x0a, 0x0b, 0x50, 0x6c, 0x61, 0x6e, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74,
-	0x12, 0x31, 0x0a, 0x08, 0x6d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x18, 0x01, 0x20, 0x01,
-	0x28, 0x0b, 0x32, 0x15, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72,
-	0x2e, 0x4d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x52, 0x08, 0x6d, 0x65, 0x74, 0x61, 0x64,
-	0x61, 0x74, 0x61, 0x12, 0x53, 0x0a, 0x15, 0x72, 0x69, 0x63, 0x68, 0x5f, 0x70, 0x61, 0x72, 0x61,
-	0x6d, 0x65, 0x74, 0x65, 0x72, 0x5f, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x73, 0x18, 0x02, 0x20, 0x03,
-	0x28, 0x0b, 0x32, 0x1f, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72,
-	0x2e, 0x52, 0x69, 0x63, 0x68, 0x50, 0x61, 0x72, 0x61, 0x6d, 0x65, 0x74, 0x65, 0x72, 0x56, 0x61,
-	0x6c, 0x75, 0x65, 0x52, 0x13, 0x72, 0x69, 0x63, 0x68, 0x50, 0x61, 0x72, 0x61, 0x6d, 0x65, 0x74,
-	0x65, 0x72, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x73, 0x12, 0x43, 0x0a, 0x0f, 0x76, 0x61, 0x72, 0x69,
-	0x61, 0x62, 0x6c, 0x65, 0x5f, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x73, 0x18, 0x03, 0x20, 0x03, 0x28,
+	0x14, 0x0a, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x52, 0x05,
+	0x76, 0x61, 0x6c, 0x75, 0x65, 0x22, 0x9f, 0x02, 0x0a, 0x06, 0x53, 0x63, 0x72, 0x69, 0x70, 0x74,
+	0x12, 0x21, 0x0a, 0x0c, 0x64, 0x69, 0x73, 0x70, 0x6c, 0x61, 0x79, 0x5f, 0x6e, 0x61, 0x6d, 0x65,
+	0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x0b, 0x64, 0x69, 0x73, 0x70, 0x6c, 0x61, 0x79, 0x4e,
+	0x61, 0x6d, 0x65, 0x12, 0x12, 0x0a, 0x04, 0x69, 0x63, 0x6f, 0x6e, 0x18, 0x02, 0x20, 0x01, 0x28,
+	0x09, 0x52, 0x04, 0x69, 0x63, 0x6f, 0x6e, 0x12, 0x16, 0x0a, 0x06, 0x73, 0x63, 0x72, 0x69, 0x70,
+	0x74, 0x18, 0x03, 0x20, 0x01, 0x28, 0x09, 0x52, 0x06, 0x73, 0x63, 0x72, 0x69, 0x70, 0x74, 0x12,
+	0x12, 0x0a, 0x04, 0x63, 0x72, 0x6f, 0x6e, 0x18, 0x04, 0x20, 0x01, 0x28, 0x09, 0x52, 0x04, 0x63,
+	0x72, 0x6f, 0x6e, 0x12, 0x2c, 0x0a, 0x12, 0x73, 0x74, 0x61, 0x72, 0x74, 0x5f, 0x62, 0x6c, 0x6f,
+	0x63, 0x6b, 0x73, 0x5f, 0x6c, 0x6f, 0x67, 0x69, 0x6e, 0x18, 0x05, 0x20, 0x01, 0x28, 0x08, 0x52,
+	0x10, 0x73, 0x74, 0x61, 0x72, 0x74, 0x42, 0x6c, 0x6f, 0x63, 0x6b, 0x73, 0x4c, 0x6f, 0x67, 0x69,
+	0x6e, 0x12, 0x20, 0x0a, 0x0c, 0x72, 0x75, 0x6e, 0x5f, 0x6f, 0x6e, 0x5f, 0x73, 0x74, 0x61, 0x72,
+	0x74, 0x18, 0x06, 0x20, 0x01, 0x28, 0x08, 0x52, 0x0a, 0x72, 0x75, 0x6e, 0x4f, 0x6e, 0x53, 0x74,
+	0x61, 0x72, 0x74, 0x12, 0x1e, 0x0a, 0x0b, 0x72, 0x75, 0x6e, 0x5f, 0x6f, 0x6e, 0x5f, 0x73, 0x74,
+	0x6f, 0x70, 0x18, 0x07, 0x20, 0x01, 0x28, 0x08, 0x52, 0x09, 0x72, 0x75, 0x6e, 0x4f, 0x6e, 0x53,
+	0x74, 0x6f, 0x70, 0x12, 0x27, 0x0a, 0x0f, 0x74, 0x69, 0x6d, 0x65, 0x6f, 0x75, 0x74, 0x5f, 0x73,
+	0x65, 0x63, 0x6f, 0x6e, 0x64, 0x73, 0x18, 0x08, 0x20, 0x01, 0x28, 0x05, 0x52, 0x0e, 0x74, 0x69,
+	0x6d, 0x65, 0x6f, 0x75, 0x74, 0x53, 0x65, 0x63, 0x6f, 0x6e, 0x64, 0x73, 0x12, 0x19, 0x0a, 0x08,
+	0x6c, 0x6f, 0x67, 0x5f, 0x70, 0x61, 0x74, 0x68, 0x18, 0x09, 0x20, 0x01, 0x28, 0x09, 0x52, 0x07,
+	0x6c, 0x6f, 0x67, 0x50, 0x61, 0x74, 0x68, 0x22, 0x6e, 0x0a, 0x0c, 0x44, 0x65, 0x76, 0x63, 0x6f,
+	0x6e, 0x74, 0x61, 0x69, 0x6e, 0x65, 0x72, 0x12, 0x29, 0x0a, 0x10, 0x77, 0x6f, 0x72, 0x6b, 0x73,
+	0x70, 0x61, 0x63, 0x65, 0x5f, 0x66, 0x6f, 0x6c, 0x64, 0x65, 0x72, 0x18, 0x01, 0x20, 0x01, 0x28,
+	0x09, 0x52, 0x0f, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x46, 0x6f, 0x6c, 0x64,
+	0x65, 0x72, 0x12, 0x1f, 0x0a, 0x0b, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x5f, 0x70, 0x61, 0x74,
+	0x68, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x52, 0x0a, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x50,
+	0x61, 0x74, 0x68, 0x12, 0x12, 0x0a, 0x04, 0x6e, 0x61, 0x6d, 0x65, 0x18, 0x03, 0x20, 0x01, 0x28,
+	0x09, 0x52, 0x04, 0x6e, 0x61, 0x6d, 0x65, 0x22, 0x94, 0x03, 0x0a, 0x03, 0x41, 0x70, 0x70, 0x12,
+	0x12, 0x0a, 0x04, 0x73, 0x6c, 0x75, 0x67, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x04, 0x73,
+	0x6c, 0x75, 0x67, 0x12, 0x21, 0x0a, 0x0c, 0x64, 0x69, 0x73, 0x70, 0x6c, 0x61, 0x79, 0x5f, 0x6e,
+	0x61, 0x6d, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x52, 0x0b, 0x64, 0x69, 0x73, 0x70, 0x6c,
+	0x61, 0x79, 0x4e, 0x61, 0x6d, 0x65, 0x12, 0x18, 0x0a, 0x07, 0x63, 0x6f, 0x6d, 0x6d, 0x61, 0x6e,
+	0x64, 0x18, 0x03, 0x20, 0x01, 0x28, 0x09, 0x52, 0x07, 0x63, 0x6f, 0x6d, 0x6d, 0x61, 0x6e, 0x64,
+	0x12, 0x10, 0x0a, 0x03, 0x75, 0x72, 0x6c, 0x18, 0x04, 0x20, 0x01, 0x28, 0x09, 0x52, 0x03, 0x75,
+	0x72, 0x6c, 0x12, 0x12, 0x0a, 0x04, 0x69, 0x63, 0x6f, 0x6e, 0x18, 0x05, 0x20, 0x01, 0x28, 0x09,
+	0x52, 0x04, 0x69, 0x63, 0x6f, 0x6e, 0x12, 0x1c, 0x0a, 0x09, 0x73, 0x75, 0x62, 0x64, 0x6f, 0x6d,
+	0x61, 0x69, 0x6e, 0x18, 0x06, 0x20, 0x01, 0x28, 0x08, 0x52, 0x09, 0x73, 0x75, 0x62, 0x64, 0x6f,
+	0x6d, 0x61, 0x69, 0x6e, 0x12, 0x3a, 0x0a, 0x0b, 0x68, 0x65, 0x61, 0x6c, 0x74, 0x68, 0x63, 0x68,
+	0x65, 0x63, 0x6b, 0x18, 0x07, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x18, 0x2e, 0x70, 0x72, 0x6f, 0x76,
+	0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x48, 0x65, 0x61, 0x6c, 0x74, 0x68, 0x63, 0x68,
+	0x65, 0x63, 0x6b, 0x52, 0x0b, 0x68, 0x65, 0x61, 0x6c, 0x74, 0x68, 0x63, 0x68, 0x65, 0x63, 0x6b,
+	0x12, 0x41, 0x0a, 0x0d, 0x73, 0x68, 0x61, 0x72, 0x69, 0x6e, 0x67, 0x5f, 0x6c, 0x65, 0x76, 0x65,
+	0x6c, 0x18, 0x08, 0x20, 0x01, 0x28, 0x0e, 0x32, 0x1c, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73,
+	0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x41, 0x70, 0x70, 0x53, 0x68, 0x61, 0x72, 0x69, 0x6e, 0x67,
+	0x4c, 0x65, 0x76, 0x65, 0x6c, 0x52, 0x0c, 0x73, 0x68, 0x61, 0x72, 0x69, 0x6e, 0x67, 0x4c, 0x65,
+	0x76, 0x65, 0x6c, 0x12, 0x1a, 0x0a, 0x08, 0x65, 0x78, 0x74, 0x65, 0x72, 0x6e, 0x61, 0x6c, 0x18,
+	0x09, 0x20, 0x01, 0x28, 0x08, 0x52, 0x08, 0x65, 0x78, 0x74, 0x65, 0x72, 0x6e, 0x61, 0x6c, 0x12,
+	0x14, 0x0a, 0x05, 0x6f, 0x72, 0x64, 0x65, 0x72, 0x18, 0x0a, 0x20, 0x01, 0x28, 0x03, 0x52, 0x05,
+	0x6f, 0x72, 0x64, 0x65, 0x72, 0x12, 0x16, 0x0a, 0x06, 0x68, 0x69, 0x64, 0x64, 0x65, 0x6e, 0x18,
+	0x0b, 0x20, 0x01, 0x28, 0x08, 0x52, 0x06, 0x68, 0x69, 0x64, 0x64, 0x65, 0x6e, 0x12, 0x2f, 0x0a,
+	0x07, 0x6f, 0x70, 0x65, 0x6e, 0x5f, 0x69, 0x6e, 0x18, 0x0c, 0x20, 0x01, 0x28, 0x0e, 0x32, 0x16,
+	0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x41, 0x70, 0x70,
+	0x4f, 0x70, 0x65, 0x6e, 0x49, 0x6e, 0x52, 0x06, 0x6f, 0x70, 0x65, 0x6e, 0x49, 0x6e, 0x22, 0x59,
+	0x0a, 0x0b, 0x48, 0x65, 0x61, 0x6c, 0x74, 0x68, 0x63, 0x68, 0x65, 0x63, 0x6b, 0x12, 0x10, 0x0a,
+	0x03, 0x75, 0x72, 0x6c, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x03, 0x75, 0x72, 0x6c, 0x12,
+	0x1a, 0x0a, 0x08, 0x69, 0x6e, 0x74, 0x65, 0x72, 0x76, 0x61, 0x6c, 0x18, 0x02, 0x20, 0x01, 0x28,
+	0x05, 0x52, 0x08, 0x69, 0x6e, 0x74, 0x65, 0x72, 0x76, 0x61, 0x6c, 0x12, 0x1c, 0x0a, 0x09, 0x74,
+	0x68, 0x72, 0x65, 0x73, 0x68, 0x6f, 0x6c, 0x64, 0x18, 0x03, 0x20, 0x01, 0x28, 0x05, 0x52, 0x09,
+	0x74, 0x68, 0x72, 0x65, 0x73, 0x68, 0x6f, 0x6c, 0x64, 0x22, 0x92, 0x03, 0x0a, 0x08, 0x52, 0x65,
+	0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x12, 0x12, 0x0a, 0x04, 0x6e, 0x61, 0x6d, 0x65, 0x18, 0x01,
+	0x20, 0x01, 0x28, 0x09, 0x52, 0x04, 0x6e, 0x61, 0x6d, 0x65, 0x12, 0x12, 0x0a, 0x04, 0x74, 0x79,
+	0x70, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x52, 0x04, 0x74, 0x79, 0x70, 0x65, 0x12, 0x2a,
+	0x0a, 0x06, 0x61, 0x67, 0x65, 0x6e, 0x74, 0x73, 0x18, 0x03, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x12,
+	0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x41, 0x67, 0x65,
+	0x6e, 0x74, 0x52, 0x06, 0x61, 0x67, 0x65, 0x6e, 0x74, 0x73, 0x12, 0x3a, 0x0a, 0x08, 0x6d, 0x65,
+	0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x18, 0x04, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x1e, 0x2e, 0x70,
+	0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x52, 0x65, 0x73, 0x6f, 0x75,
+	0x72, 0x63, 0x65, 0x2e, 0x4d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x52, 0x08, 0x6d, 0x65,
+	0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x12, 0x12, 0x0a, 0x04, 0x68, 0x69, 0x64, 0x65, 0x18, 0x05,
+	0x20, 0x01, 0x28, 0x08, 0x52, 0x04, 0x68, 0x69, 0x64, 0x65, 0x12, 0x12, 0x0a, 0x04, 0x69, 0x63,
+	0x6f, 0x6e, 0x18, 0x06, 0x20, 0x01, 0x28, 0x09, 0x52, 0x04, 0x69, 0x63, 0x6f, 0x6e, 0x12, 0x23,
+	0x0a, 0x0d, 0x69, 0x6e, 0x73, 0x74, 0x61, 0x6e, 0x63, 0x65, 0x5f, 0x74, 0x79, 0x70, 0x65, 0x18,
+	0x07, 0x20, 0x01, 0x28, 0x09, 0x52, 0x0c, 0x69, 0x6e, 0x73, 0x74, 0x61, 0x6e, 0x63, 0x65, 0x54,
+	0x79, 0x70, 0x65, 0x12, 0x1d, 0x0a, 0x0a, 0x64, 0x61, 0x69, 0x6c, 0x79, 0x5f, 0x63, 0x6f, 0x73,
+	0x74, 0x18, 0x08, 0x20, 0x01, 0x28, 0x05, 0x52, 0x09, 0x64, 0x61, 0x69, 0x6c, 0x79, 0x43, 0x6f,
+	0x73, 0x74, 0x12, 0x1f, 0x0a, 0x0b, 0x6d, 0x6f, 0x64, 0x75, 0x6c, 0x65, 0x5f, 0x70, 0x61, 0x74,
+	0x68, 0x18, 0x09, 0x20, 0x01, 0x28, 0x09, 0x52, 0x0a, 0x6d, 0x6f, 0x64, 0x75, 0x6c, 0x65, 0x50,
+	0x61, 0x74, 0x68, 0x1a, 0x69, 0x0a, 0x08, 0x4d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x12,
+	0x10, 0x0a, 0x03, 0x6b, 0x65, 0x79, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x03, 0x6b, 0x65,
+	0x79, 0x12, 0x14, 0x0a, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09,
+	0x52, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x12, 0x1c, 0x0a, 0x09, 0x73, 0x65, 0x6e, 0x73, 0x69,
+	0x74, 0x69, 0x76, 0x65, 0x18, 0x03, 0x20, 0x01, 0x28, 0x08, 0x52, 0x09, 0x73, 0x65, 0x6e, 0x73,
+	0x69, 0x74, 0x69, 0x76, 0x65, 0x12, 0x17, 0x0a, 0x07, 0x69, 0x73, 0x5f, 0x6e, 0x75, 0x6c, 0x6c,
+	0x18, 0x04, 0x20, 0x01, 0x28, 0x08, 0x52, 0x06, 0x69, 0x73, 0x4e, 0x75, 0x6c, 0x6c, 0x22, 0x4c,
+	0x0a, 0x06, 0x4d, 0x6f, 0x64, 0x75, 0x6c, 0x65, 0x12, 0x16, 0x0a, 0x06, 0x73, 0x6f, 0x75, 0x72,
+	0x63, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x06, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65,
+	0x12, 0x18, 0x0a, 0x07, 0x76, 0x65, 0x72, 0x73, 0x69, 0x6f, 0x6e, 0x18, 0x02, 0x20, 0x01, 0x28,
+	0x09, 0x52, 0x07, 0x76, 0x65, 0x72, 0x73, 0x69, 0x6f, 0x6e, 0x12, 0x10, 0x0a, 0x03, 0x6b, 0x65,
+	0x79, 0x18, 0x03, 0x20, 0x01, 0x28, 0x09, 0x52, 0x03, 0x6b, 0x65, 0x79, 0x22, 0x31, 0x0a, 0x04,
+	0x52, 0x6f, 0x6c, 0x65, 0x12, 0x12, 0x0a, 0x04, 0x6e, 0x61, 0x6d, 0x65, 0x18, 0x01, 0x20, 0x01,
+	0x28, 0x09, 0x52, 0x04, 0x6e, 0x61, 0x6d, 0x65, 0x12, 0x15, 0x0a, 0x06, 0x6f, 0x72, 0x67, 0x5f,
+	0x69, 0x64, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x52, 0x05, 0x6f, 0x72, 0x67, 0x49, 0x64, 0x22,
+	0x48, 0x0a, 0x15, 0x52, 0x75, 0x6e, 0x6e, 0x69, 0x6e, 0x67, 0x41, 0x67, 0x65, 0x6e, 0x74, 0x41,
+	0x75, 0x74, 0x68, 0x54, 0x6f, 0x6b, 0x65, 0x6e, 0x12, 0x19, 0x0a, 0x08, 0x61, 0x67, 0x65, 0x6e,
+	0x74, 0x5f, 0x69, 0x64, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x07, 0x61, 0x67, 0x65, 0x6e,
+	0x74, 0x49, 0x64, 0x12, 0x14, 0x0a, 0x05, 0x74, 0x6f, 0x6b, 0x65, 0x6e, 0x18, 0x02, 0x20, 0x01,
+	0x28, 0x09, 0x52, 0x05, 0x74, 0x6f, 0x6b, 0x65, 0x6e, 0x22, 0xca, 0x09, 0x0a, 0x08, 0x4d, 0x65,
+	0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x12, 0x1b, 0x0a, 0x09, 0x63, 0x6f, 0x64, 0x65, 0x72, 0x5f,
+	0x75, 0x72, 0x6c, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x08, 0x63, 0x6f, 0x64, 0x65, 0x72,
+	0x55, 0x72, 0x6c, 0x12, 0x53, 0x0a, 0x14, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65,
+	0x5f, 0x74, 0x72, 0x61, 0x6e, 0x73, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x18, 0x02, 0x20, 0x01, 0x28,
+	0x0e, 0x32, 0x20, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e,
+	0x57, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x54, 0x72, 0x61, 0x6e, 0x73, 0x69, 0x74,
+	0x69, 0x6f, 0x6e, 0x52, 0x13, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x54, 0x72,
+	0x61, 0x6e, 0x73, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x12, 0x25, 0x0a, 0x0e, 0x77, 0x6f, 0x72, 0x6b,
+	0x73, 0x70, 0x61, 0x63, 0x65, 0x5f, 0x6e, 0x61, 0x6d, 0x65, 0x18, 0x03, 0x20, 0x01, 0x28, 0x09,
+	0x52, 0x0d, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x4e, 0x61, 0x6d, 0x65, 0x12,
+	0x27, 0x0a, 0x0f, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x5f, 0x6f, 0x77, 0x6e,
+	0x65, 0x72, 0x18, 0x04, 0x20, 0x01, 0x28, 0x09, 0x52, 0x0e, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70,
+	0x61, 0x63, 0x65, 0x4f, 0x77, 0x6e, 0x65, 0x72, 0x12, 0x21, 0x0a, 0x0c, 0x77, 0x6f, 0x72, 0x6b,
+	0x73, 0x70, 0x61, 0x63, 0x65, 0x5f, 0x69, 0x64, 0x18, 0x05, 0x20, 0x01, 0x28, 0x09, 0x52, 0x0b,
+	0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x49, 0x64, 0x12, 0x2c, 0x0a, 0x12, 0x77,
+	0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x5f, 0x6f, 0x77, 0x6e, 0x65, 0x72, 0x5f, 0x69,
+	0x64, 0x18, 0x06, 0x20, 0x01, 0x28, 0x09, 0x52, 0x10, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61,
+	0x63, 0x65, 0x4f, 0x77, 0x6e, 0x65, 0x72, 0x49, 0x64, 0x12, 0x32, 0x0a, 0x15, 0x77, 0x6f, 0x72,
+	0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x5f, 0x6f, 0x77, 0x6e, 0x65, 0x72, 0x5f, 0x65, 0x6d, 0x61,
+	0x69, 0x6c, 0x18, 0x07, 0x20, 0x01, 0x28, 0x09, 0x52, 0x13, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70,
+	0x61, 0x63, 0x65, 0x4f, 0x77, 0x6e, 0x65, 0x72, 0x45, 0x6d, 0x61, 0x69, 0x6c, 0x12, 0x23, 0x0a,
+	0x0d, 0x74, 0x65, 0x6d, 0x70, 0x6c, 0x61, 0x74, 0x65, 0x5f, 0x6e, 0x61, 0x6d, 0x65, 0x18, 0x08,
+	0x20, 0x01, 0x28, 0x09, 0x52, 0x0c, 0x74, 0x65, 0x6d, 0x70, 0x6c, 0x61, 0x74, 0x65, 0x4e, 0x61,
+	0x6d, 0x65, 0x12, 0x29, 0x0a, 0x10, 0x74, 0x65, 0x6d, 0x70, 0x6c, 0x61, 0x74, 0x65, 0x5f, 0x76,
+	0x65, 0x72, 0x73, 0x69, 0x6f, 0x6e, 0x18, 0x09, 0x20, 0x01, 0x28, 0x09, 0x52, 0x0f, 0x74, 0x65,
+	0x6d, 0x70, 0x6c, 0x61, 0x74, 0x65, 0x56, 0x65, 0x72, 0x73, 0x69, 0x6f, 0x6e, 0x12, 0x48, 0x0a,
+	0x21, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x5f, 0x6f, 0x77, 0x6e, 0x65, 0x72,
+	0x5f, 0x6f, 0x69, 0x64, 0x63, 0x5f, 0x61, 0x63, 0x63, 0x65, 0x73, 0x73, 0x5f, 0x74, 0x6f, 0x6b,
+	0x65, 0x6e, 0x18, 0x0a, 0x20, 0x01, 0x28, 0x09, 0x52, 0x1d, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70,
+	0x61, 0x63, 0x65, 0x4f, 0x77, 0x6e, 0x65, 0x72, 0x4f, 0x69, 0x64, 0x63, 0x41, 0x63, 0x63, 0x65,
+	0x73, 0x73, 0x54, 0x6f, 0x6b, 0x65, 0x6e, 0x12, 0x41, 0x0a, 0x1d, 0x77, 0x6f, 0x72, 0x6b, 0x73,
+	0x70, 0x61, 0x63, 0x65, 0x5f, 0x6f, 0x77, 0x6e, 0x65, 0x72, 0x5f, 0x73, 0x65, 0x73, 0x73, 0x69,
+	0x6f, 0x6e, 0x5f, 0x74, 0x6f, 0x6b, 0x65, 0x6e, 0x18, 0x0b, 0x20, 0x01, 0x28, 0x09, 0x52, 0x1a,
+	0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x4f, 0x77, 0x6e, 0x65, 0x72, 0x53, 0x65,
+	0x73, 0x73, 0x69, 0x6f, 0x6e, 0x54, 0x6f, 0x6b, 0x65, 0x6e, 0x12, 0x1f, 0x0a, 0x0b, 0x74, 0x65,
+	0x6d, 0x70, 0x6c, 0x61, 0x74, 0x65, 0x5f, 0x69, 0x64, 0x18, 0x0c, 0x20, 0x01, 0x28, 0x09, 0x52,
+	0x0a, 0x74, 0x65, 0x6d, 0x70, 0x6c, 0x61, 0x74, 0x65, 0x49, 0x64, 0x12, 0x30, 0x0a, 0x14, 0x77,
+	0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x5f, 0x6f, 0x77, 0x6e, 0x65, 0x72, 0x5f, 0x6e,
+	0x61, 0x6d, 0x65, 0x18, 0x0d, 0x20, 0x01, 0x28, 0x09, 0x52, 0x12, 0x77, 0x6f, 0x72, 0x6b, 0x73,
+	0x70, 0x61, 0x63, 0x65, 0x4f, 0x77, 0x6e, 0x65, 0x72, 0x4e, 0x61, 0x6d, 0x65, 0x12, 0x34, 0x0a,
+	0x16, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x5f, 0x6f, 0x77, 0x6e, 0x65, 0x72,
+	0x5f, 0x67, 0x72, 0x6f, 0x75, 0x70, 0x73, 0x18, 0x0e, 0x20, 0x03, 0x28, 0x09, 0x52, 0x14, 0x77,
+	0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x4f, 0x77, 0x6e, 0x65, 0x72, 0x47, 0x72, 0x6f,
+	0x75, 0x70, 0x73, 0x12, 0x42, 0x0a, 0x1e, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65,
+	0x5f, 0x6f, 0x77, 0x6e, 0x65, 0x72, 0x5f, 0x73, 0x73, 0x68, 0x5f, 0x70, 0x75, 0x62, 0x6c, 0x69,
+	0x63, 0x5f, 0x6b, 0x65, 0x79, 0x18, 0x0f, 0x20, 0x01, 0x28, 0x09, 0x52, 0x1a, 0x77, 0x6f, 0x72,
+	0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x4f, 0x77, 0x6e, 0x65, 0x72, 0x53, 0x73, 0x68, 0x50, 0x75,
+	0x62, 0x6c, 0x69, 0x63, 0x4b, 0x65, 0x79, 0x12, 0x44, 0x0a, 0x1f, 0x77, 0x6f, 0x72, 0x6b, 0x73,
+	0x70, 0x61, 0x63, 0x65, 0x5f, 0x6f, 0x77, 0x6e, 0x65, 0x72, 0x5f, 0x73, 0x73, 0x68, 0x5f, 0x70,
+	0x72, 0x69, 0x76, 0x61, 0x74, 0x65, 0x5f, 0x6b, 0x65, 0x79, 0x18, 0x10, 0x20, 0x01, 0x28, 0x09,
+	0x52, 0x1b, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x4f, 0x77, 0x6e, 0x65, 0x72,
+	0x53, 0x73, 0x68, 0x50, 0x72, 0x69, 0x76, 0x61, 0x74, 0x65, 0x4b, 0x65, 0x79, 0x12, 0x2c, 0x0a,
+	0x12, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x5f, 0x62, 0x75, 0x69, 0x6c, 0x64,
+	0x5f, 0x69, 0x64, 0x18, 0x11, 0x20, 0x01, 0x28, 0x09, 0x52, 0x10, 0x77, 0x6f, 0x72, 0x6b, 0x73,
+	0x70, 0x61, 0x63, 0x65, 0x42, 0x75, 0x69, 0x6c, 0x64, 0x49, 0x64, 0x12, 0x3b, 0x0a, 0x1a, 0x77,
+	0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x5f, 0x6f, 0x77, 0x6e, 0x65, 0x72, 0x5f, 0x6c,
+	0x6f, 0x67, 0x69, 0x6e, 0x5f, 0x74, 0x79, 0x70, 0x65, 0x18, 0x12, 0x20, 0x01, 0x28, 0x09, 0x52,
+	0x17, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x4f, 0x77, 0x6e, 0x65, 0x72, 0x4c,
+	0x6f, 0x67, 0x69, 0x6e, 0x54, 0x79, 0x70, 0x65, 0x12, 0x4e, 0x0a, 0x1a, 0x77, 0x6f, 0x72, 0x6b,
+	0x73, 0x70, 0x61, 0x63, 0x65, 0x5f, 0x6f, 0x77, 0x6e, 0x65, 0x72, 0x5f, 0x72, 0x62, 0x61, 0x63,
+	0x5f, 0x72, 0x6f, 0x6c, 0x65, 0x73, 0x18, 0x13, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x11, 0x2e, 0x70,
+	0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x52, 0x6f, 0x6c, 0x65, 0x52,
+	0x17, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x4f, 0x77, 0x6e, 0x65, 0x72, 0x52,
+	0x62, 0x61, 0x63, 0x52, 0x6f, 0x6c, 0x65, 0x73, 0x12, 0x6d, 0x0a, 0x1e, 0x70, 0x72, 0x65, 0x62,
+	0x75, 0x69, 0x6c, 0x74, 0x5f, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x5f, 0x62,
+	0x75, 0x69, 0x6c, 0x64, 0x5f, 0x73, 0x74, 0x61, 0x67, 0x65, 0x18, 0x14, 0x20, 0x01, 0x28, 0x0e,
+	0x32, 0x28, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x50,
+	0x72, 0x65, 0x62, 0x75, 0x69, 0x6c, 0x74, 0x57, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65,
+	0x42, 0x75, 0x69, 0x6c, 0x64, 0x53, 0x74, 0x61, 0x67, 0x65, 0x52, 0x1b, 0x70, 0x72, 0x65, 0x62,
+	0x75, 0x69, 0x6c, 0x74, 0x57, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x42, 0x75, 0x69,
+	0x6c, 0x64, 0x53, 0x74, 0x61, 0x67, 0x65, 0x12, 0x5d, 0x0a, 0x19, 0x72, 0x75, 0x6e, 0x6e, 0x69,
+	0x6e, 0x67, 0x5f, 0x61, 0x67, 0x65, 0x6e, 0x74, 0x5f, 0x61, 0x75, 0x74, 0x68, 0x5f, 0x74, 0x6f,
+	0x6b, 0x65, 0x6e, 0x73, 0x18, 0x15, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x22, 0x2e, 0x70, 0x72, 0x6f,
+	0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x52, 0x75, 0x6e, 0x6e, 0x69, 0x6e, 0x67,
+	0x41, 0x67, 0x65, 0x6e, 0x74, 0x41, 0x75, 0x74, 0x68, 0x54, 0x6f, 0x6b, 0x65, 0x6e, 0x52, 0x16,
+	0x72, 0x75, 0x6e, 0x6e, 0x69, 0x6e, 0x67, 0x41, 0x67, 0x65, 0x6e, 0x74, 0x41, 0x75, 0x74, 0x68,
+	0x54, 0x6f, 0x6b, 0x65, 0x6e, 0x73, 0x22, 0x8a, 0x01, 0x0a, 0x06, 0x43, 0x6f, 0x6e, 0x66, 0x69,
+	0x67, 0x12, 0x36, 0x0a, 0x17, 0x74, 0x65, 0x6d, 0x70, 0x6c, 0x61, 0x74, 0x65, 0x5f, 0x73, 0x6f,
+	0x75, 0x72, 0x63, 0x65, 0x5f, 0x61, 0x72, 0x63, 0x68, 0x69, 0x76, 0x65, 0x18, 0x01, 0x20, 0x01,
+	0x28, 0x0c, 0x52, 0x15, 0x74, 0x65, 0x6d, 0x70, 0x6c, 0x61, 0x74, 0x65, 0x53, 0x6f, 0x75, 0x72,
+	0x63, 0x65, 0x41, 0x72, 0x63, 0x68, 0x69, 0x76, 0x65, 0x12, 0x14, 0x0a, 0x05, 0x73, 0x74, 0x61,
+	0x74, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0c, 0x52, 0x05, 0x73, 0x74, 0x61, 0x74, 0x65, 0x12,
+	0x32, 0x0a, 0x15, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x5f, 0x6c,
+	0x6f, 0x67, 0x5f, 0x6c, 0x65, 0x76, 0x65, 0x6c, 0x18, 0x03, 0x20, 0x01, 0x28, 0x09, 0x52, 0x13,
+	0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x4c, 0x6f, 0x67, 0x4c, 0x65,
+	0x76, 0x65, 0x6c, 0x22, 0x0e, 0x0a, 0x0c, 0x50, 0x61, 0x72, 0x73, 0x65, 0x52, 0x65, 0x71, 0x75,
+	0x65, 0x73, 0x74, 0x22, 0xa3, 0x02, 0x0a, 0x0d, 0x50, 0x61, 0x72, 0x73, 0x65, 0x43, 0x6f, 0x6d,
+	0x70, 0x6c, 0x65, 0x74, 0x65, 0x12, 0x14, 0x0a, 0x05, 0x65, 0x72, 0x72, 0x6f, 0x72, 0x18, 0x01,
+	0x20, 0x01, 0x28, 0x09, 0x52, 0x05, 0x65, 0x72, 0x72, 0x6f, 0x72, 0x12, 0x4c, 0x0a, 0x12, 0x74,
+	0x65, 0x6d, 0x70, 0x6c, 0x61, 0x74, 0x65, 0x5f, 0x76, 0x61, 0x72, 0x69, 0x61, 0x62, 0x6c, 0x65,
+	0x73, 0x18, 0x02, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x1d, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73,
+	0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x54, 0x65, 0x6d, 0x70, 0x6c, 0x61, 0x74, 0x65, 0x56, 0x61,
+	0x72, 0x69, 0x61, 0x62, 0x6c, 0x65, 0x52, 0x11, 0x74, 0x65, 0x6d, 0x70, 0x6c, 0x61, 0x74, 0x65,
+	0x56, 0x61, 0x72, 0x69, 0x61, 0x62, 0x6c, 0x65, 0x73, 0x12, 0x16, 0x0a, 0x06, 0x72, 0x65, 0x61,
+	0x64, 0x6d, 0x65, 0x18, 0x03, 0x20, 0x01, 0x28, 0x0c, 0x52, 0x06, 0x72, 0x65, 0x61, 0x64, 0x6d,
+	0x65, 0x12, 0x54, 0x0a, 0x0e, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x5f, 0x74,
+	0x61, 0x67, 0x73, 0x18, 0x04, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x2d, 0x2e, 0x70, 0x72, 0x6f, 0x76,
+	0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x50, 0x61, 0x72, 0x73, 0x65, 0x43, 0x6f, 0x6d,
+	0x70, 0x6c, 0x65, 0x74, 0x65, 0x2e, 0x57, 0x6f, 0x72, 0x6b, 0x73, 0x70, 0x61, 0x63, 0x65, 0x54,
+	0x61, 0x67, 0x73, 0x45, 0x6e, 0x74, 0x72, 0x79, 0x52, 0x0d, 0x77, 0x6f, 0x72, 0x6b, 0x73, 0x70,
+	0x61, 0x63, 0x65, 0x54, 0x61, 0x67, 0x73, 0x1a, 0x40, 0x0a, 0x12, 0x57, 0x6f, 0x72, 0x6b, 0x73,
+	0x70, 0x61, 0x63, 0x65, 0x54, 0x61, 0x67, 0x73, 0x45, 0x6e, 0x74, 0x72, 0x79, 0x12, 0x10, 0x0a,
+	0x03, 0x6b, 0x65, 0x79, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x03, 0x6b, 0x65, 0x79, 0x12,
+	0x14, 0x0a, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x52, 0x05,
+	0x76, 0x61, 0x6c, 0x75, 0x65, 0x3a, 0x02, 0x38, 0x01, 0x22, 0xb5, 0x02, 0x0a, 0x0b, 0x50, 0x6c,
+	0x61, 0x6e, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x12, 0x31, 0x0a, 0x08, 0x6d, 0x65, 0x74,
+	0x61, 0x64, 0x61, 0x74, 0x61, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x15, 0x2e, 0x70, 0x72,
+	0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x4d, 0x65, 0x74, 0x61, 0x64, 0x61,
+	0x74, 0x61, 0x52, 0x08, 0x6d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x12, 0x53, 0x0a, 0x15,
+	0x72, 0x69, 0x63, 0x68, 0x5f, 0x70, 0x61, 0x72, 0x61, 0x6d, 0x65, 0x74, 0x65, 0x72, 0x5f, 0x76,
+	0x61, 0x6c, 0x75, 0x65, 0x73, 0x18, 0x02, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x1f, 0x2e, 0x70, 0x72,
+	0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x52, 0x69, 0x63, 0x68, 0x50, 0x61,
+	0x72, 0x61, 0x6d, 0x65, 0x74, 0x65, 0x72, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x52, 0x13, 0x72, 0x69,
+	0x63, 0x68, 0x50, 0x61, 0x72, 0x61, 0x6d, 0x65, 0x74, 0x65, 0x72, 0x56, 0x61, 0x6c, 0x75, 0x65,
+	0x73, 0x12, 0x43, 0x0a, 0x0f, 0x76, 0x61, 0x72, 0x69, 0x61, 0x62, 0x6c, 0x65, 0x5f, 0x76, 0x61,
+	0x6c, 0x75, 0x65, 0x73, 0x18, 0x03, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x1a, 0x2e, 0x70, 0x72, 0x6f,
+	0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x56, 0x61, 0x72, 0x69, 0x61, 0x62, 0x6c,
+	0x65, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x52, 0x0e, 0x76, 0x61, 0x72, 0x69, 0x61, 0x62, 0x6c, 0x65,
+	0x56, 0x61, 0x6c, 0x75, 0x65, 0x73, 0x12, 0x59, 0x0a, 0x17, 0x65, 0x78, 0x74, 0x65, 0x72, 0x6e,
+	0x61, 0x6c, 0x5f, 0x61, 0x75, 0x74, 0x68, 0x5f, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x64, 0x65, 0x72,
+	0x73, 0x18, 0x04, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x21, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73,
+	0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x45, 0x78, 0x74, 0x65, 0x72, 0x6e, 0x61, 0x6c, 0x41, 0x75,
+	0x74, 0x68, 0x50, 0x72, 0x6f, 0x76, 0x69, 0x64, 0x65, 0x72, 0x52, 0x15, 0x65, 0x78, 0x74, 0x65,
+	0x72, 0x6e, 0x61, 0x6c, 0x41, 0x75, 0x74, 0x68, 0x50, 0x72, 0x6f, 0x76, 0x69, 0x64, 0x65, 0x72,
+	0x73, 0x22, 0xf0, 0x03, 0x0a, 0x0c, 0x50, 0x6c, 0x61, 0x6e, 0x43, 0x6f, 0x6d, 0x70, 0x6c, 0x65,
+	0x74, 0x65, 0x12, 0x14, 0x0a, 0x05, 0x65, 0x72, 0x72, 0x6f, 0x72, 0x18, 0x01, 0x20, 0x01, 0x28,
+	0x09, 0x52, 0x05, 0x65, 0x72, 0x72, 0x6f, 0x72, 0x12, 0x33, 0x0a, 0x09, 0x72, 0x65, 0x73, 0x6f,
+	0x75, 0x72, 0x63, 0x65, 0x73, 0x18, 0x02, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x15, 0x2e, 0x70, 0x72,
+	0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72,
+	0x63, 0x65, 0x52, 0x09, 0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x73, 0x12, 0x3a, 0x0a,
+	0x0a, 0x70, 0x61, 0x72, 0x61, 0x6d, 0x65, 0x74, 0x65, 0x72, 0x73, 0x18, 0x03, 0x20, 0x03, 0x28,
 	0x0b, 0x32, 0x1a, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e,
-	0x56, 0x61, 0x72, 0x69, 0x61, 0x62, 0x6c, 0x65, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x52, 0x0e, 0x76,
-	0x61, 0x72, 0x69, 0x61, 0x62, 0x6c, 0x65, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x73, 0x12, 0x59, 0x0a,
-	0x17, 0x65, 0x78, 0x74, 0x65, 0x72, 0x6e, 0x61, 0x6c, 0x5f, 0x61, 0x75, 0x74, 0x68, 0x5f, 0x70,
-	0x72, 0x6f, 0x76, 0x69, 0x64, 0x65, 0x72, 0x73, 0x18, 0x04, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x21,
-	0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x45, 0x78, 0x74,
-	0x65, 0x72, 0x6e, 0x61, 0x6c, 0x41, 0x75, 0x74, 0x68, 0x50, 0x72, 0x6f, 0x76, 0x69, 0x64, 0x65,
-	0x72, 0x52, 0x15, 0x65, 0x78, 0x74, 0x65, 0x72, 0x6e, 0x61, 0x6c, 0x41, 0x75, 0x74, 0x68, 0x50,
-	0x72, 0x6f, 0x76, 0x69, 0x64, 0x65, 0x72, 0x73, 0x22, 0x99, 0x03, 0x0a, 0x0c, 0x50, 0x6c, 0x61,
-	0x6e, 0x43, 0x6f, 0x6d, 0x70, 0x6c, 0x65, 0x74, 0x65, 0x12, 0x14, 0x0a, 0x05, 0x65, 0x72, 0x72,
-	0x6f, 0x72, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x05, 0x65, 0x72, 0x72, 0x6f, 0x72, 0x12,
-	0x33, 0x0a, 0x09, 0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x73, 0x18, 0x02, 0x20, 0x03,
-	0x28, 0x0b, 0x32, 0x15, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72,
-	0x2e, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x52, 0x09, 0x72, 0x65, 0x73, 0x6f, 0x75,
-	0x72, 0x63, 0x65, 0x73, 0x12, 0x3a, 0x0a, 0x0a, 0x70, 0x61, 0x72, 0x61, 0x6d, 0x65, 0x74, 0x65,
-	0x72, 0x73, 0x18, 0x03, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x1a, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69,
-	0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x52, 0x69, 0x63, 0x68, 0x50, 0x61, 0x72, 0x61, 0x6d,
-	0x65, 0x74, 0x65, 0x72, 0x52, 0x0a, 0x70, 0x61, 0x72, 0x61, 0x6d, 0x65, 0x74, 0x65, 0x72, 0x73,
-	0x12, 0x61, 0x0a, 0x17, 0x65, 0x78, 0x74, 0x65, 0x72, 0x6e, 0x61, 0x6c, 0x5f, 0x61, 0x75, 0x74,
-	0x68, 0x5f, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x64, 0x65, 0x72, 0x73, 0x18, 0x04, 0x20, 0x03, 0x28,
-	0x0b, 0x32, 0x29, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e,
-	0x45, 0x78, 0x74, 0x65, 0x72, 0x6e, 0x61, 0x6c, 0x41, 0x75, 0x74, 0x68, 0x50, 0x72, 0x6f, 0x76,
-	0x69, 0x64, 0x65, 0x72, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x52, 0x15, 0x65, 0x78,
-	0x74, 0x65, 0x72, 0x6e, 0x61, 0x6c, 0x41, 0x75, 0x74, 0x68, 0x50, 0x72, 0x6f, 0x76, 0x69, 0x64,
-	0x65, 0x72, 0x73, 0x12, 0x2d, 0x0a, 0x07, 0x74, 0x69, 0x6d, 0x69, 0x6e, 0x67, 0x73, 0x18, 0x06,
-	0x20, 0x03, 0x28, 0x0b, 0x32, 0x13, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e,
-	0x65, 0x72, 0x2e, 0x54, 0x69, 0x6d, 0x69, 0x6e, 0x67, 0x52, 0x07, 0x74, 0x69, 0x6d, 0x69, 0x6e,
-	0x67, 0x73, 0x12, 0x2d, 0x0a, 0x07, 0x6d, 0x6f, 0x64, 0x75, 0x6c, 0x65, 0x73, 0x18, 0x07, 0x20,
-	0x03, 0x28, 0x0b, 0x32, 0x13, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65,
-	0x72, 0x2e, 0x4d, 0x6f, 0x64, 0x75, 0x6c, 0x65, 0x52, 0x07, 0x6d, 0x6f, 0x64, 0x75, 0x6c, 0x65,
-	0x73, 0x12, 0x2d, 0x0a, 0x07, 0x70, 0x72, 0x65, 0x73, 0x65, 0x74, 0x73, 0x18, 0x08, 0x20, 0x03,
-	0x28, 0x0b, 0x32, 0x13, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72,
-	0x2e, 0x50, 0x72, 0x65, 0x73, 0x65, 0x74, 0x52, 0x07, 0x70, 0x72, 0x65, 0x73, 0x65, 0x74, 0x73,
-	0x12, 0x12, 0x0a, 0x04, 0x70, 0x6c, 0x61, 0x6e, 0x18, 0x09, 0x20, 0x01, 0x28, 0x0c, 0x52, 0x04,
-	0x70, 0x6c, 0x61, 0x6e, 0x22, 0x41, 0x0a, 0x0c, 0x41, 0x70, 0x70, 0x6c, 0x79, 0x52, 0x65, 0x71,
+	0x52, 0x69, 0x63, 0x68, 0x50, 0x61, 0x72, 0x61, 0x6d, 0x65, 0x74, 0x65, 0x72, 0x52, 0x0a, 0x70,
+	0x61, 0x72, 0x61, 0x6d, 0x65, 0x74, 0x65, 0x72, 0x73, 0x12, 0x61, 0x0a, 0x17, 0x65, 0x78, 0x74,
+	0x65, 0x72, 0x6e, 0x61, 0x6c, 0x5f, 0x61, 0x75, 0x74, 0x68, 0x5f, 0x70, 0x72, 0x6f, 0x76, 0x69,
+	0x64, 0x65, 0x72, 0x73, 0x18, 0x04, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x29, 0x2e, 0x70, 0x72, 0x6f,
+	0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x45, 0x78, 0x74, 0x65, 0x72, 0x6e, 0x61,
+	0x6c, 0x41, 0x75, 0x74, 0x68, 0x50, 0x72, 0x6f, 0x76, 0x69, 0x64, 0x65, 0x72, 0x52, 0x65, 0x73,
+	0x6f, 0x75, 0x72, 0x63, 0x65, 0x52, 0x15, 0x65, 0x78, 0x74, 0x65, 0x72, 0x6e, 0x61, 0x6c, 0x41,
+	0x75, 0x74, 0x68, 0x50, 0x72, 0x6f, 0x76, 0x69, 0x64, 0x65, 0x72, 0x73, 0x12, 0x2d, 0x0a, 0x07,
+	0x74, 0x69, 0x6d, 0x69, 0x6e, 0x67, 0x73, 0x18, 0x06, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x13, 0x2e,
+	0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x54, 0x69, 0x6d, 0x69,
+	0x6e, 0x67, 0x52, 0x07, 0x74, 0x69, 0x6d, 0x69, 0x6e, 0x67, 0x73, 0x12, 0x2d, 0x0a, 0x07, 0x6d,
+	0x6f, 0x64, 0x75, 0x6c, 0x65, 0x73, 0x18, 0x07, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x13, 0x2e, 0x70,
+	0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x4d, 0x6f, 0x64, 0x75, 0x6c,
+	0x65, 0x52, 0x07, 0x6d, 0x6f, 0x64, 0x75, 0x6c, 0x65, 0x73, 0x12, 0x2d, 0x0a, 0x07, 0x70, 0x72,
+	0x65, 0x73, 0x65, 0x74, 0x73, 0x18, 0x08, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x13, 0x2e, 0x70, 0x72,
+	0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x50, 0x72, 0x65, 0x73, 0x65, 0x74,
+	0x52, 0x07, 0x70, 0x72, 0x65, 0x73, 0x65, 0x74, 0x73, 0x12, 0x12, 0x0a, 0x04, 0x70, 0x6c, 0x61,
+	0x6e, 0x18, 0x09, 0x20, 0x01, 0x28, 0x0c, 0x52, 0x04, 0x70, 0x6c, 0x61, 0x6e, 0x12, 0x55, 0x0a,
+	0x15, 0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x5f, 0x72, 0x65, 0x70, 0x6c, 0x61, 0x63,
+	0x65, 0x6d, 0x65, 0x6e, 0x74, 0x73, 0x18, 0x0a, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x20, 0x2e, 0x70,
+	0x72, 0x6f, 0x76, 0x69, 0x73, 0x69, 0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x52, 0x65, 0x73, 0x6f, 0x75,
+	0x72, 0x63, 0x65, 0x52, 0x65, 0x70, 0x6c, 0x61, 0x63, 0x65, 0x6d, 0x65, 0x6e, 0x74, 0x52, 0x14,
+	0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x52, 0x65, 0x70, 0x6c, 0x61, 0x63, 0x65, 0x6d,
+	0x65, 0x6e, 0x74, 0x73, 0x22, 0x41, 0x0a, 0x0c, 0x41, 0x70, 0x70, 0x6c, 0x79, 0x52, 0x65, 0x71,
 	0x75, 0x65, 0x73, 0x74, 0x12, 0x31, 0x0a, 0x08, 0x6d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61,
 	0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x15, 0x2e, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x73, 0x69,
 	0x6f, 0x6e, 0x65, 0x72, 0x2e, 0x4d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x52, 0x08, 0x6d,
@@ -4181,7 +4254,7 @@ func file_provisionersdk_proto_provisioner_proto_rawDescGZIP() []byte {
 }
 
 var file_provisionersdk_proto_provisioner_proto_enumTypes = make([]protoimpl.EnumInfo, 6)
-var file_provisionersdk_proto_provisioner_proto_msgTypes = make([]protoimpl.MessageInfo, 43)
+var file_provisionersdk_proto_provisioner_proto_msgTypes = make([]protoimpl.MessageInfo, 44)
 var file_provisionersdk_proto_provisioner_proto_goTypes = []interface{}{
 	(LogLevel)(0),                        // 0: provisioner.LogLevel
 	(AppSharingLevel)(0),                 // 1: provisioner.AppSharingLevel
@@ -4197,103 +4270,105 @@ var file_provisionersdk_proto_provisioner_proto_goTypes = []interface{}{
 	(*Prebuild)(nil),                     // 11: provisioner.Prebuild
 	(*Preset)(nil),                       // 12: provisioner.Preset
 	(*PresetParameter)(nil),              // 13: provisioner.PresetParameter
-	(*VariableValue)(nil),                // 14: provisioner.VariableValue
-	(*Log)(nil),                          // 15: provisioner.Log
-	(*InstanceIdentityAuth)(nil),         // 16: provisioner.InstanceIdentityAuth
-	(*ExternalAuthProviderResource)(nil), // 17: provisioner.ExternalAuthProviderResource
-	(*ExternalAuthProvider)(nil),         // 18: provisioner.ExternalAuthProvider
-	(*Agent)(nil),                        // 19: provisioner.Agent
-	(*ResourcesMonitoring)(nil),          // 20: provisioner.ResourcesMonitoring
-	(*MemoryResourceMonitor)(nil),        // 21: provisioner.MemoryResourceMonitor
-	(*VolumeResourceMonitor)(nil),        // 22: provisioner.VolumeResourceMonitor
-	(*DisplayApps)(nil),                  // 23: provisioner.DisplayApps
-	(*Env)(nil),                          // 24: provisioner.Env
-	(*Script)(nil),                       // 25: provisioner.Script
-	(*Devcontainer)(nil),                 // 26: provisioner.Devcontainer
-	(*App)(nil),                          // 27: provisioner.App
-	(*Healthcheck)(nil),                  // 28: provisioner.Healthcheck
-	(*Resource)(nil),                     // 29: provisioner.Resource
-	(*Module)(nil),                       // 30: provisioner.Module
-	(*Role)(nil),                         // 31: provisioner.Role
-	(*RunningAgentAuthToken)(nil),        // 32: provisioner.RunningAgentAuthToken
-	(*Metadata)(nil),                     // 33: provisioner.Metadata
-	(*Config)(nil),                       // 34: provisioner.Config
-	(*ParseRequest)(nil),                 // 35: provisioner.ParseRequest
-	(*ParseComplete)(nil),                // 36: provisioner.ParseComplete
-	(*PlanRequest)(nil),                  // 37: provisioner.PlanRequest
-	(*PlanComplete)(nil),                 // 38: provisioner.PlanComplete
-	(*ApplyRequest)(nil),                 // 39: provisioner.ApplyRequest
-	(*ApplyComplete)(nil),                // 40: provisioner.ApplyComplete
-	(*Timing)(nil),                       // 41: provisioner.Timing
-	(*CancelRequest)(nil),                // 42: provisioner.CancelRequest
-	(*Request)(nil),                      // 43: provisioner.Request
-	(*Response)(nil),                     // 44: provisioner.Response
-	(*Agent_Metadata)(nil),               // 45: provisioner.Agent.Metadata
-	nil,                                  // 46: provisioner.Agent.EnvEntry
-	(*Resource_Metadata)(nil),            // 47: provisioner.Resource.Metadata
-	nil,                                  // 48: provisioner.ParseComplete.WorkspaceTagsEntry
-	(*timestamppb.Timestamp)(nil),        // 49: google.protobuf.Timestamp
+	(*ResourceReplacement)(nil),          // 14: provisioner.ResourceReplacement
+	(*VariableValue)(nil),                // 15: provisioner.VariableValue
+	(*Log)(nil),                          // 16: provisioner.Log
+	(*InstanceIdentityAuth)(nil),         // 17: provisioner.InstanceIdentityAuth
+	(*ExternalAuthProviderResource)(nil), // 18: provisioner.ExternalAuthProviderResource
+	(*ExternalAuthProvider)(nil),         // 19: provisioner.ExternalAuthProvider
+	(*Agent)(nil),                        // 20: provisioner.Agent
+	(*ResourcesMonitoring)(nil),          // 21: provisioner.ResourcesMonitoring
+	(*MemoryResourceMonitor)(nil),        // 22: provisioner.MemoryResourceMonitor
+	(*VolumeResourceMonitor)(nil),        // 23: provisioner.VolumeResourceMonitor
+	(*DisplayApps)(nil),                  // 24: provisioner.DisplayApps
+	(*Env)(nil),                          // 25: provisioner.Env
+	(*Script)(nil),                       // 26: provisioner.Script
+	(*Devcontainer)(nil),                 // 27: provisioner.Devcontainer
+	(*App)(nil),                          // 28: provisioner.App
+	(*Healthcheck)(nil),                  // 29: provisioner.Healthcheck
+	(*Resource)(nil),                     // 30: provisioner.Resource
+	(*Module)(nil),                       // 31: provisioner.Module
+	(*Role)(nil),                         // 32: provisioner.Role
+	(*RunningAgentAuthToken)(nil),        // 33: provisioner.RunningAgentAuthToken
+	(*Metadata)(nil),                     // 34: provisioner.Metadata
+	(*Config)(nil),                       // 35: provisioner.Config
+	(*ParseRequest)(nil),                 // 36: provisioner.ParseRequest
+	(*ParseComplete)(nil),                // 37: provisioner.ParseComplete
+	(*PlanRequest)(nil),                  // 38: provisioner.PlanRequest
+	(*PlanComplete)(nil),                 // 39: provisioner.PlanComplete
+	(*ApplyRequest)(nil),                 // 40: provisioner.ApplyRequest
+	(*ApplyComplete)(nil),                // 41: provisioner.ApplyComplete
+	(*Timing)(nil),                       // 42: provisioner.Timing
+	(*CancelRequest)(nil),                // 43: provisioner.CancelRequest
+	(*Request)(nil),                      // 44: provisioner.Request
+	(*Response)(nil),                     // 45: provisioner.Response
+	(*Agent_Metadata)(nil),               // 46: provisioner.Agent.Metadata
+	nil,                                  // 47: provisioner.Agent.EnvEntry
+	(*Resource_Metadata)(nil),            // 48: provisioner.Resource.Metadata
+	nil,                                  // 49: provisioner.ParseComplete.WorkspaceTagsEntry
+	(*timestamppb.Timestamp)(nil),        // 50: google.protobuf.Timestamp
 }
 var file_provisionersdk_proto_provisioner_proto_depIdxs = []int32{
 	8,  // 0: provisioner.RichParameter.options:type_name -> provisioner.RichParameterOption
 	13, // 1: provisioner.Preset.parameters:type_name -> provisioner.PresetParameter
 	11, // 2: provisioner.Preset.prebuild:type_name -> provisioner.Prebuild
 	0,  // 3: provisioner.Log.level:type_name -> provisioner.LogLevel
-	46, // 4: provisioner.Agent.env:type_name -> provisioner.Agent.EnvEntry
-	27, // 5: provisioner.Agent.apps:type_name -> provisioner.App
-	45, // 6: provisioner.Agent.metadata:type_name -> provisioner.Agent.Metadata
-	23, // 7: provisioner.Agent.display_apps:type_name -> provisioner.DisplayApps
-	25, // 8: provisioner.Agent.scripts:type_name -> provisioner.Script
-	24, // 9: provisioner.Agent.extra_envs:type_name -> provisioner.Env
-	20, // 10: provisioner.Agent.resources_monitoring:type_name -> provisioner.ResourcesMonitoring
-	26, // 11: provisioner.Agent.devcontainers:type_name -> provisioner.Devcontainer
-	21, // 12: provisioner.ResourcesMonitoring.memory:type_name -> provisioner.MemoryResourceMonitor
-	22, // 13: provisioner.ResourcesMonitoring.volumes:type_name -> provisioner.VolumeResourceMonitor
-	28, // 14: provisioner.App.healthcheck:type_name -> provisioner.Healthcheck
+	47, // 4: provisioner.Agent.env:type_name -> provisioner.Agent.EnvEntry
+	28, // 5: provisioner.Agent.apps:type_name -> provisioner.App
+	46, // 6: provisioner.Agent.metadata:type_name -> provisioner.Agent.Metadata
+	24, // 7: provisioner.Agent.display_apps:type_name -> provisioner.DisplayApps
+	26, // 8: provisioner.Agent.scripts:type_name -> provisioner.Script
+	25, // 9: provisioner.Agent.extra_envs:type_name -> provisioner.Env
+	21, // 10: provisioner.Agent.resources_monitoring:type_name -> provisioner.ResourcesMonitoring
+	27, // 11: provisioner.Agent.devcontainers:type_name -> provisioner.Devcontainer
+	22, // 12: provisioner.ResourcesMonitoring.memory:type_name -> provisioner.MemoryResourceMonitor
+	23, // 13: provisioner.ResourcesMonitoring.volumes:type_name -> provisioner.VolumeResourceMonitor
+	29, // 14: provisioner.App.healthcheck:type_name -> provisioner.Healthcheck
 	1,  // 15: provisioner.App.sharing_level:type_name -> provisioner.AppSharingLevel
 	2,  // 16: provisioner.App.open_in:type_name -> provisioner.AppOpenIn
-	19, // 17: provisioner.Resource.agents:type_name -> provisioner.Agent
-	47, // 18: provisioner.Resource.metadata:type_name -> provisioner.Resource.Metadata
+	20, // 17: provisioner.Resource.agents:type_name -> provisioner.Agent
+	48, // 18: provisioner.Resource.metadata:type_name -> provisioner.Resource.Metadata
 	3,  // 19: provisioner.Metadata.workspace_transition:type_name -> provisioner.WorkspaceTransition
-	31, // 20: provisioner.Metadata.workspace_owner_rbac_roles:type_name -> provisioner.Role
+	32, // 20: provisioner.Metadata.workspace_owner_rbac_roles:type_name -> provisioner.Role
 	4,  // 21: provisioner.Metadata.prebuilt_workspace_build_stage:type_name -> provisioner.PrebuiltWorkspaceBuildStage
-	32, // 22: provisioner.Metadata.running_agent_auth_tokens:type_name -> provisioner.RunningAgentAuthToken
+	33, // 22: provisioner.Metadata.running_agent_auth_tokens:type_name -> provisioner.RunningAgentAuthToken
 	7,  // 23: provisioner.ParseComplete.template_variables:type_name -> provisioner.TemplateVariable
-	48, // 24: provisioner.ParseComplete.workspace_tags:type_name -> provisioner.ParseComplete.WorkspaceTagsEntry
-	33, // 25: provisioner.PlanRequest.metadata:type_name -> provisioner.Metadata
+	49, // 24: provisioner.ParseComplete.workspace_tags:type_name -> provisioner.ParseComplete.WorkspaceTagsEntry
+	34, // 25: provisioner.PlanRequest.metadata:type_name -> provisioner.Metadata
 	10, // 26: provisioner.PlanRequest.rich_parameter_values:type_name -> provisioner.RichParameterValue
-	14, // 27: provisioner.PlanRequest.variable_values:type_name -> provisioner.VariableValue
-	18, // 28: provisioner.PlanRequest.external_auth_providers:type_name -> provisioner.ExternalAuthProvider
-	29, // 29: provisioner.PlanComplete.resources:type_name -> provisioner.Resource
+	15, // 27: provisioner.PlanRequest.variable_values:type_name -> provisioner.VariableValue
+	19, // 28: provisioner.PlanRequest.external_auth_providers:type_name -> provisioner.ExternalAuthProvider
+	30, // 29: provisioner.PlanComplete.resources:type_name -> provisioner.Resource
 	9,  // 30: provisioner.PlanComplete.parameters:type_name -> provisioner.RichParameter
-	17, // 31: provisioner.PlanComplete.external_auth_providers:type_name -> provisioner.ExternalAuthProviderResource
-	41, // 32: provisioner.PlanComplete.timings:type_name -> provisioner.Timing
-	30, // 33: provisioner.PlanComplete.modules:type_name -> provisioner.Module
+	18, // 31: provisioner.PlanComplete.external_auth_providers:type_name -> provisioner.ExternalAuthProviderResource
+	42, // 32: provisioner.PlanComplete.timings:type_name -> provisioner.Timing
+	31, // 33: provisioner.PlanComplete.modules:type_name -> provisioner.Module
 	12, // 34: provisioner.PlanComplete.presets:type_name -> provisioner.Preset
-	33, // 35: provisioner.ApplyRequest.metadata:type_name -> provisioner.Metadata
-	29, // 36: provisioner.ApplyComplete.resources:type_name -> provisioner.Resource
-	9,  // 37: provisioner.ApplyComplete.parameters:type_name -> provisioner.RichParameter
-	17, // 38: provisioner.ApplyComplete.external_auth_providers:type_name -> provisioner.ExternalAuthProviderResource
-	41, // 39: provisioner.ApplyComplete.timings:type_name -> provisioner.Timing
-	49, // 40: provisioner.Timing.start:type_name -> google.protobuf.Timestamp
-	49, // 41: provisioner.Timing.end:type_name -> google.protobuf.Timestamp
-	5,  // 42: provisioner.Timing.state:type_name -> provisioner.TimingState
-	34, // 43: provisioner.Request.config:type_name -> provisioner.Config
-	35, // 44: provisioner.Request.parse:type_name -> provisioner.ParseRequest
-	37, // 45: provisioner.Request.plan:type_name -> provisioner.PlanRequest
-	39, // 46: provisioner.Request.apply:type_name -> provisioner.ApplyRequest
-	42, // 47: provisioner.Request.cancel:type_name -> provisioner.CancelRequest
-	15, // 48: provisioner.Response.log:type_name -> provisioner.Log
-	36, // 49: provisioner.Response.parse:type_name -> provisioner.ParseComplete
-	38, // 50: provisioner.Response.plan:type_name -> provisioner.PlanComplete
-	40, // 51: provisioner.Response.apply:type_name -> provisioner.ApplyComplete
-	43, // 52: provisioner.Provisioner.Session:input_type -> provisioner.Request
-	44, // 53: provisioner.Provisioner.Session:output_type -> provisioner.Response
-	53, // [53:54] is the sub-list for method output_type
-	52, // [52:53] is the sub-list for method input_type
-	52, // [52:52] is the sub-list for extension type_name
-	52, // [52:52] is the sub-list for extension extendee
-	0,  // [0:52] is the sub-list for field type_name
+	14, // 35: provisioner.PlanComplete.resource_replacements:type_name -> provisioner.ResourceReplacement
+	34, // 36: provisioner.ApplyRequest.metadata:type_name -> provisioner.Metadata
+	30, // 37: provisioner.ApplyComplete.resources:type_name -> provisioner.Resource
+	9,  // 38: provisioner.ApplyComplete.parameters:type_name -> provisioner.RichParameter
+	18, // 39: provisioner.ApplyComplete.external_auth_providers:type_name -> provisioner.ExternalAuthProviderResource
+	42, // 40: provisioner.ApplyComplete.timings:type_name -> provisioner.Timing
+	50, // 41: provisioner.Timing.start:type_name -> google.protobuf.Timestamp
+	50, // 42: provisioner.Timing.end:type_name -> google.protobuf.Timestamp
+	5,  // 43: provisioner.Timing.state:type_name -> provisioner.TimingState
+	35, // 44: provisioner.Request.config:type_name -> provisioner.Config
+	36, // 45: provisioner.Request.parse:type_name -> provisioner.ParseRequest
+	38, // 46: provisioner.Request.plan:type_name -> provisioner.PlanRequest
+	40, // 47: provisioner.Request.apply:type_name -> provisioner.ApplyRequest
+	43, // 48: provisioner.Request.cancel:type_name -> provisioner.CancelRequest
+	16, // 49: provisioner.Response.log:type_name -> provisioner.Log
+	37, // 50: provisioner.Response.parse:type_name -> provisioner.ParseComplete
+	39, // 51: provisioner.Response.plan:type_name -> provisioner.PlanComplete
+	41, // 52: provisioner.Response.apply:type_name -> provisioner.ApplyComplete
+	44, // 53: provisioner.Provisioner.Session:input_type -> provisioner.Request
+	45, // 54: provisioner.Provisioner.Session:output_type -> provisioner.Response
+	54, // [54:55] is the sub-list for method output_type
+	53, // [53:54] is the sub-list for method input_type
+	53, // [53:53] is the sub-list for extension type_name
+	53, // [53:53] is the sub-list for extension extendee
+	0,  // [0:53] is the sub-list for field type_name
 }
 
 func init() { file_provisionersdk_proto_provisioner_proto_init() }
@@ -4399,7 +4474,7 @@ func file_provisionersdk_proto_provisioner_proto_init() {
 			}
 		}
 		file_provisionersdk_proto_provisioner_proto_msgTypes[8].Exporter = func(v interface{}, i int) interface{} {
-			switch v := v.(*VariableValue); i {
+			switch v := v.(*ResourceReplacement); i {
 			case 0:
 				return &v.state
 			case 1:
@@ -4411,7 +4486,7 @@ func file_provisionersdk_proto_provisioner_proto_init() {
 			}
 		}
 		file_provisionersdk_proto_provisioner_proto_msgTypes[9].Exporter = func(v interface{}, i int) interface{} {
-			switch v := v.(*Log); i {
+			switch v := v.(*VariableValue); i {
 			case 0:
 				return &v.state
 			case 1:
@@ -4423,7 +4498,7 @@ func file_provisionersdk_proto_provisioner_proto_init() {
 			}
 		}
 		file_provisionersdk_proto_provisioner_proto_msgTypes[10].Exporter = func(v interface{}, i int) interface{} {
-			switch v := v.(*InstanceIdentityAuth); i {
+			switch v := v.(*Log); i {
 			case 0:
 				return &v.state
 			case 1:
@@ -4435,7 +4510,7 @@ func file_provisionersdk_proto_provisioner_proto_init() {
 			}
 		}
 		file_provisionersdk_proto_provisioner_proto_msgTypes[11].Exporter = func(v interface{}, i int) interface{} {
-			switch v := v.(*ExternalAuthProviderResource); i {
+			switch v := v.(*InstanceIdentityAuth); i {
 			case 0:
 				return &v.state
 			case 1:
@@ -4447,7 +4522,7 @@ func file_provisionersdk_proto_provisioner_proto_init() {
 			}
 		}
 		file_provisionersdk_proto_provisioner_proto_msgTypes[12].Exporter = func(v interface{}, i int) interface{} {
-			switch v := v.(*ExternalAuthProvider); i {
+			switch v := v.(*ExternalAuthProviderResource); i {
 			case 0:
 				return &v.state
 			case 1:
@@ -4459,7 +4534,7 @@ func file_provisionersdk_proto_provisioner_proto_init() {
 			}
 		}
 		file_provisionersdk_proto_provisioner_proto_msgTypes[13].Exporter = func(v interface{}, i int) interface{} {
-			switch v := v.(*Agent); i {
+			switch v := v.(*ExternalAuthProvider); i {
 			case 0:
 				return &v.state
 			case 1:
@@ -4471,7 +4546,7 @@ func file_provisionersdk_proto_provisioner_proto_init() {
 			}
 		}
 		file_provisionersdk_proto_provisioner_proto_msgTypes[14].Exporter = func(v interface{}, i int) interface{} {
-			switch v := v.(*ResourcesMonitoring); i {
+			switch v := v.(*Agent); i {
 			case 0:
 				return &v.state
 			case 1:
@@ -4483,7 +4558,7 @@ func file_provisionersdk_proto_provisioner_proto_init() {
 			}
 		}
 		file_provisionersdk_proto_provisioner_proto_msgTypes[15].Exporter = func(v interface{}, i int) interface{} {
-			switch v := v.(*MemoryResourceMonitor); i {
+			switch v := v.(*ResourcesMonitoring); i {
 			case 0:
 				return &v.state
 			case 1:
@@ -4495,7 +4570,7 @@ func file_provisionersdk_proto_provisioner_proto_init() {
 			}
 		}
 		file_provisionersdk_proto_provisioner_proto_msgTypes[16].Exporter = func(v interface{}, i int) interface{} {
-			switch v := v.(*VolumeResourceMonitor); i {
+			switch v := v.(*MemoryResourceMonitor); i {
 			case 0:
 				return &v.state
 			case 1:
@@ -4507,7 +4582,7 @@ func file_provisionersdk_proto_provisioner_proto_init() {
 			}
 		}
 		file_provisionersdk_proto_provisioner_proto_msgTypes[17].Exporter = func(v interface{}, i int) interface{} {
-			switch v := v.(*DisplayApps); i {
+			switch v := v.(*VolumeResourceMonitor); i {
 			case 0:
 				return &v.state
 			case 1:
@@ -4519,7 +4594,7 @@ func file_provisionersdk_proto_provisioner_proto_init() {
 			}
 		}
 		file_provisionersdk_proto_provisioner_proto_msgTypes[18].Exporter = func(v interface{}, i int) interface{} {
-			switch v := v.(*Env); i {
+			switch v := v.(*DisplayApps); i {
 			case 0:
 				return &v.state
 			case 1:
@@ -4531,7 +4606,7 @@ func file_provisionersdk_proto_provisioner_proto_init() {
 			}
 		}
 		file_provisionersdk_proto_provisioner_proto_msgTypes[19].Exporter = func(v interface{}, i int) interface{} {
-			switch v := v.(*Script); i {
+			switch v := v.(*Env); i {
 			case 0:
 				return &v.state
 			case 1:
@@ -4543,7 +4618,7 @@ func file_provisionersdk_proto_provisioner_proto_init() {
 			}
 		}
 		file_provisionersdk_proto_provisioner_proto_msgTypes[20].Exporter = func(v interface{}, i int) interface{} {
-			switch v := v.(*Devcontainer); i {
+			switch v := v.(*Script); i {
 			case 0:
 				return &v.state
 			case 1:
@@ -4555,7 +4630,7 @@ func file_provisionersdk_proto_provisioner_proto_init() {
 			}
 		}
 		file_provisionersdk_proto_provisioner_proto_msgTypes[21].Exporter = func(v interface{}, i int) interface{} {
-			switch v := v.(*App); i {
+			switch v := v.(*Devcontainer); i {
 			case 0:
 				return &v.state
 			case 1:
@@ -4567,7 +4642,7 @@ func file_provisionersdk_proto_provisioner_proto_init() {
 			}
 		}
 		file_provisionersdk_proto_provisioner_proto_msgTypes[22].Exporter = func(v interface{}, i int) interface{} {
-			switch v := v.(*Healthcheck); i {
+			switch v := v.(*App); i {
 			case 0:
 				return &v.state
 			case 1:
@@ -4579,7 +4654,7 @@ func file_provisionersdk_proto_provisioner_proto_init() {
 			}
 		}
 		file_provisionersdk_proto_provisioner_proto_msgTypes[23].Exporter = func(v interface{}, i int) interface{} {
-			switch v := v.(*Resource); i {
+			switch v := v.(*Healthcheck); i {
 			case 0:
 				return &v.state
 			case 1:
@@ -4591,7 +4666,7 @@ func file_provisionersdk_proto_provisioner_proto_init() {
 			}
 		}
 		file_provisionersdk_proto_provisioner_proto_msgTypes[24].Exporter = func(v interface{}, i int) interface{} {
-			switch v := v.(*Module); i {
+			switch v := v.(*Resource); i {
 			case 0:
 				return &v.state
 			case 1:
@@ -4603,7 +4678,7 @@ func file_provisionersdk_proto_provisioner_proto_init() {
 			}
 		}
 		file_provisionersdk_proto_provisioner_proto_msgTypes[25].Exporter = func(v interface{}, i int) interface{} {
-			switch v := v.(*Role); i {
+			switch v := v.(*Module); i {
 			case 0:
 				return &v.state
 			case 1:
@@ -4615,7 +4690,7 @@ func file_provisionersdk_proto_provisioner_proto_init() {
 			}
 		}
 		file_provisionersdk_proto_provisioner_proto_msgTypes[26].Exporter = func(v interface{}, i int) interface{} {
-			switch v := v.(*RunningAgentAuthToken); i {
+			switch v := v.(*Role); i {
 			case 0:
 				return &v.state
 			case 1:
@@ -4627,7 +4702,7 @@ func file_provisionersdk_proto_provisioner_proto_init() {
 			}
 		}
 		file_provisionersdk_proto_provisioner_proto_msgTypes[27].Exporter = func(v interface{}, i int) interface{} {
-			switch v := v.(*Metadata); i {
+			switch v := v.(*RunningAgentAuthToken); i {
 			case 0:
 				return &v.state
 			case 1:
@@ -4639,7 +4714,7 @@ func file_provisionersdk_proto_provisioner_proto_init() {
 			}
 		}
 		file_provisionersdk_proto_provisioner_proto_msgTypes[28].Exporter = func(v interface{}, i int) interface{} {
-			switch v := v.(*Config); i {
+			switch v := v.(*Metadata); i {
 			case 0:
 				return &v.state
 			case 1:
@@ -4651,7 +4726,7 @@ func file_provisionersdk_proto_provisioner_proto_init() {
 			}
 		}
 		file_provisionersdk_proto_provisioner_proto_msgTypes[29].Exporter = func(v interface{}, i int) interface{} {
-			switch v := v.(*ParseRequest); i {
+			switch v := v.(*Config); i {
 			case 0:
 				return &v.state
 			case 1:
@@ -4663,7 +4738,7 @@ func file_provisionersdk_proto_provisioner_proto_init() {
 			}
 		}
 		file_provisionersdk_proto_provisioner_proto_msgTypes[30].Exporter = func(v interface{}, i int) interface{} {
-			switch v := v.(*ParseComplete); i {
+			switch v := v.(*ParseRequest); i {
 			case 0:
 				return &v.state
 			case 1:
@@ -4675,7 +4750,7 @@ func file_provisionersdk_proto_provisioner_proto_init() {
 			}
 		}
 		file_provisionersdk_proto_provisioner_proto_msgTypes[31].Exporter = func(v interface{}, i int) interface{} {
-			switch v := v.(*PlanRequest); i {
+			switch v := v.(*ParseComplete); i {
 			case 0:
 				return &v.state
 			case 1:
@@ -4687,7 +4762,7 @@ func file_provisionersdk_proto_provisioner_proto_init() {
 			}
 		}
 		file_provisionersdk_proto_provisioner_proto_msgTypes[32].Exporter = func(v interface{}, i int) interface{} {
-			switch v := v.(*PlanComplete); i {
+			switch v := v.(*PlanRequest); i {
 			case 0:
 				return &v.state
 			case 1:
@@ -4699,7 +4774,7 @@ func file_provisionersdk_proto_provisioner_proto_init() {
 			}
 		}
 		file_provisionersdk_proto_provisioner_proto_msgTypes[33].Exporter = func(v interface{}, i int) interface{} {
-			switch v := v.(*ApplyRequest); i {
+			switch v := v.(*PlanComplete); i {
 			case 0:
 				return &v.state
 			case 1:
@@ -4711,7 +4786,7 @@ func file_provisionersdk_proto_provisioner_proto_init() {
 			}
 		}
 		file_provisionersdk_proto_provisioner_proto_msgTypes[34].Exporter = func(v interface{}, i int) interface{} {
-			switch v := v.(*ApplyComplete); i {
+			switch v := v.(*ApplyRequest); i {
 			case 0:
 				return &v.state
 			case 1:
@@ -4723,7 +4798,7 @@ func file_provisionersdk_proto_provisioner_proto_init() {
 			}
 		}
 		file_provisionersdk_proto_provisioner_proto_msgTypes[35].Exporter = func(v interface{}, i int) interface{} {
-			switch v := v.(*Timing); i {
+			switch v := v.(*ApplyComplete); i {
 			case 0:
 				return &v.state
 			case 1:
@@ -4735,7 +4810,7 @@ func file_provisionersdk_proto_provisioner_proto_init() {
 			}
 		}
 		file_provisionersdk_proto_provisioner_proto_msgTypes[36].Exporter = func(v interface{}, i int) interface{} {
-			switch v := v.(*CancelRequest); i {
+			switch v := v.(*Timing); i {
 			case 0:
 				return &v.state
 			case 1:
@@ -4747,7 +4822,7 @@ func file_provisionersdk_proto_provisioner_proto_init() {
 			}
 		}
 		file_provisionersdk_proto_provisioner_proto_msgTypes[37].Exporter = func(v interface{}, i int) interface{} {
-			switch v := v.(*Request); i {
+			switch v := v.(*CancelRequest); i {
 			case 0:
 				return &v.state
 			case 1:
@@ -4759,7 +4834,7 @@ func file_provisionersdk_proto_provisioner_proto_init() {
 			}
 		}
 		file_provisionersdk_proto_provisioner_proto_msgTypes[38].Exporter = func(v interface{}, i int) interface{} {
-			switch v := v.(*Response); i {
+			switch v := v.(*Request); i {
 			case 0:
 				return &v.state
 			case 1:
@@ -4771,6 +4846,18 @@ func file_provisionersdk_proto_provisioner_proto_init() {
 			}
 		}
 		file_provisionersdk_proto_provisioner_proto_msgTypes[39].Exporter = func(v interface{}, i int) interface{} {
+			switch v := v.(*Response); i {
+			case 0:
+				return &v.state
+			case 1:
+				return &v.sizeCache
+			case 2:
+				return &v.unknownFields
+			default:
+				return nil
+			}
+		}
+		file_provisionersdk_proto_provisioner_proto_msgTypes[40].Exporter = func(v interface{}, i int) interface{} {
 			switch v := v.(*Agent_Metadata); i {
 			case 0:
 				return &v.state
@@ -4782,7 +4869,7 @@ func file_provisionersdk_proto_provisioner_proto_init() {
 				return nil
 			}
 		}
-		file_provisionersdk_proto_provisioner_proto_msgTypes[41].Exporter = func(v interface{}, i int) interface{} {
+		file_provisionersdk_proto_provisioner_proto_msgTypes[42].Exporter = func(v interface{}, i int) interface{} {
 			switch v := v.(*Resource_Metadata); i {
 			case 0:
 				return &v.state
@@ -4796,18 +4883,18 @@ func file_provisionersdk_proto_provisioner_proto_init() {
 		}
 	}
 	file_provisionersdk_proto_provisioner_proto_msgTypes[3].OneofWrappers = []interface{}{}
-	file_provisionersdk_proto_provisioner_proto_msgTypes[13].OneofWrappers = []interface{}{
+	file_provisionersdk_proto_provisioner_proto_msgTypes[14].OneofWrappers = []interface{}{
 		(*Agent_Token)(nil),
 		(*Agent_InstanceId)(nil),
 	}
-	file_provisionersdk_proto_provisioner_proto_msgTypes[37].OneofWrappers = []interface{}{
+	file_provisionersdk_proto_provisioner_proto_msgTypes[38].OneofWrappers = []interface{}{
 		(*Request_Config)(nil),
 		(*Request_Parse)(nil),
 		(*Request_Plan)(nil),
 		(*Request_Apply)(nil),
 		(*Request_Cancel)(nil),
 	}
-	file_provisionersdk_proto_provisioner_proto_msgTypes[38].OneofWrappers = []interface{}{
+	file_provisionersdk_proto_provisioner_proto_msgTypes[39].OneofWrappers = []interface{}{
 		(*Response_Log)(nil),
 		(*Response_Parse)(nil),
 		(*Response_Plan)(nil),
@@ -4819,7 +4906,7 @@ func file_provisionersdk_proto_provisioner_proto_init() {
 			GoPackagePath: reflect.TypeOf(x{}).PkgPath(),
 			RawDescriptor: file_provisionersdk_proto_provisioner_proto_rawDesc,
 			NumEnums:      6,
-			NumMessages:   43,
+			NumMessages:   44,
 			NumExtensions: 0,
 			NumServices:   1,
 		},
diff --git a/provisionersdk/proto/provisioner.proto b/provisionersdk/proto/provisioner.proto
index 6c40b1599bd43..25c70b00a5486 100644
--- a/provisionersdk/proto/provisioner.proto
+++ b/provisionersdk/proto/provisioner.proto
@@ -73,6 +73,11 @@ message PresetParameter {
     string value = 2;
 }
 
+message ResourceReplacement {
+    string resource = 1;
+    repeated string paths = 2;
+}
+
 // VariableValue holds the key/value mapping of a Terraform variable.
 message VariableValue {
     string name = 1;
@@ -346,6 +351,7 @@ message PlanComplete {
     repeated Module modules = 7;
     repeated Preset presets = 8;
     bytes plan = 9;
+    repeated ResourceReplacement resource_replacements = 10;
 }
 
 // ApplyRequest asks the provisioner to apply the changes.  Apply MUST be preceded by a successful plan request/response
diff --git a/site/e2e/helpers.ts b/site/e2e/helpers.ts
index f4ad6485b2681..335cf0f1e7ddc 100644
--- a/site/e2e/helpers.ts
+++ b/site/e2e/helpers.ts
@@ -583,6 +583,7 @@ const createTemplateVersionTar = async (
 					externalAuthProviders: response.apply?.externalAuthProviders ?? [],
 					timings: response.apply?.timings ?? [],
 					presets: [],
+					resourceReplacements: [],
 					plan: emptyPlan,
 				},
 			};
@@ -706,6 +707,7 @@ const createTemplateVersionTar = async (
 			timings: [],
 			modules: [],
 			presets: [],
+			resourceReplacements: [],
 			plan: emptyPlan,
 			...response.plan,
 		} as PlanComplete;
diff --git a/site/e2e/provisionerGenerated.ts b/site/e2e/provisionerGenerated.ts
index a1194239636c2..fd23950631e6a 100644
--- a/site/e2e/provisionerGenerated.ts
+++ b/site/e2e/provisionerGenerated.ts
@@ -120,6 +120,11 @@ export interface PresetParameter {
   value: string;
 }
 
+export interface ResourceReplacement {
+  resource: string;
+  paths: string[];
+}
+
 /** VariableValue holds the key/value mapping of a Terraform variable. */
 export interface VariableValue {
   name: string;
@@ -371,6 +376,7 @@ export interface PlanComplete {
   modules: Module[];
   presets: Preset[];
   plan: Uint8Array;
+  resourceReplacements: ResourceReplacement[];
 }
 
 /**
@@ -570,6 +576,18 @@ export const PresetParameter = {
   },
 };
 
+export const ResourceReplacement = {
+  encode(message: ResourceReplacement, writer: _m0.Writer = _m0.Writer.create()): _m0.Writer {
+    if (message.resource !== "") {
+      writer.uint32(10).string(message.resource);
+    }
+    for (const v of message.paths) {
+      writer.uint32(18).string(v!);
+    }
+    return writer;
+  },
+};
+
 export const VariableValue = {
   encode(message: VariableValue, writer: _m0.Writer = _m0.Writer.create()): _m0.Writer {
     if (message.name !== "") {
@@ -1160,6 +1178,9 @@ export const PlanComplete = {
     if (message.plan.length !== 0) {
       writer.uint32(74).bytes(message.plan);
     }
+    for (const v of message.resourceReplacements) {
+      ResourceReplacement.encode(v!, writer.uint32(82).fork()).ldelim();
+    }
     return writer;
   },
 };

From fd0a84d3dd28edf0360efe354709d057859e4728 Mon Sep 17 00:00:00 2001
From: Danny Kopping <danny@coder.com>
Date: Thu, 15 May 2025 13:02:30 +0200
Subject: [PATCH 5/7] fix: add missing clause for tracking replacements
 (#17849)

We should only be tracking resource replacements during a prebuild
claim.

Signed-off-by: Danny Kopping <dannykopping@gmail.com>
---
 coderd/provisionerdserver/provisionerdserver.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/coderd/provisionerdserver/provisionerdserver.go b/coderd/provisionerdserver/provisionerdserver.go
index 5e3a2a84efc62..e084499f02f18 100644
--- a/coderd/provisionerdserver/provisionerdserver.go
+++ b/coderd/provisionerdserver/provisionerdserver.go
@@ -1751,7 +1751,7 @@ func (s *server) CompleteJob(ctx context.Context, completed *proto.CompletedJob)
 			})
 		}
 
-		if s.PrebuildsOrchestrator != nil {
+		if s.PrebuildsOrchestrator != nil && input.PrebuiltWorkspaceBuildStage == sdkproto.PrebuiltWorkspaceBuildStage_CLAIM {
 			// Track resource replacements, if there are any.
 			orchestrator := s.PrebuildsOrchestrator.Load()
 			if resourceReplacements := completed.GetWorkspaceBuild().GetResourceReplacements(); orchestrator != nil && len(resourceReplacements) > 0 {

From cef73131fa0e91f44dc7426a81e989a03ad992b2 Mon Sep 17 00:00:00 2001
From: Yevhenii Shcherbina <evgeniy.shcherbina.es@gmail.com>
Date: Thu, 15 May 2025 07:33:58 -0400
Subject: [PATCH 6/7] fix: exclude deleted templates from metrics collection
 (#17839)

Also add some clarification about the lack of database constraints for
soft template deletion.

---------

Signed-off-by: Danny Kopping <dannykopping@gmail.com>
Co-authored-by: Danny Kopping <dannykopping@gmail.com>
---
 coderd/database/queries.sql.go                |   4 +
 coderd/database/queries/prebuilds.sql         |   4 +
 .../coderd/prebuilds/metricscollector.go      |   4 +
 .../coderd/prebuilds/metricscollector_test.go | 189 ++++++++++++++++--
 enterprise/coderd/prebuilds/reconcile_test.go |  34 +++-
 5 files changed, 213 insertions(+), 22 deletions(-)

diff --git a/coderd/database/queries.sql.go b/coderd/database/queries.sql.go
index a63ff57b369e5..66535a9d5b5a9 100644
--- a/coderd/database/queries.sql.go
+++ b/coderd/database/queries.sql.go
@@ -5914,6 +5914,7 @@ WHERE w.id IN (
 		AND b.template_version_id = t.active_version_id
 		AND p.current_preset_id = $3::uuid
 		AND p.ready
+		AND NOT t.deleted
 	LIMIT 1 FOR UPDATE OF p SKIP LOCKED -- Ensure that a concurrent request will not select the same prebuild.
 )
 RETURNING w.id, w.name
@@ -5949,6 +5950,7 @@ FROM workspace_latest_builds wlb
 		-- prebuilds that are still building.
 		INNER JOIN templates t ON t.active_version_id = wlb.template_version_id
 WHERE wlb.job_status IN ('pending'::provisioner_job_status, 'running'::provisioner_job_status)
+  -- AND NOT t.deleted -- We don't exclude deleted templates because there's no constraint in the DB preventing a soft deletion on a template while workspaces are running.
 GROUP BY t.id, wpb.template_version_id, wpb.transition, wlb.template_version_preset_id
 `
 
@@ -6063,6 +6065,7 @@ WITH filtered_builds AS (
 	WHERE tvp.desired_instances IS NOT NULL -- Consider only presets that have a prebuild configuration.
 		AND wlb.transition = 'start'::workspace_transition
 		AND w.owner_id = 'c42fdf75-3097-471c-8c33-fb52454d81c0'
+		AND NOT t.deleted
 ),
 time_sorted_builds AS (
 	-- Group builds by preset, then sort each group by created_at.
@@ -6214,6 +6217,7 @@ FROM templates t
 		INNER JOIN template_version_presets tvp ON tvp.template_version_id = tv.id
 		INNER JOIN organizations o ON o.id = t.organization_id
 WHERE tvp.desired_instances IS NOT NULL -- Consider only presets that have a prebuild configuration.
+  -- AND NOT t.deleted -- We don't exclude deleted templates because there's no constraint in the DB preventing a soft deletion on a template while workspaces are running.
 	AND (t.id = $1::uuid OR $1 IS NULL)
 `
 
diff --git a/coderd/database/queries/prebuilds.sql b/coderd/database/queries/prebuilds.sql
index 1d3a827c98586..8c27ddf62b7c3 100644
--- a/coderd/database/queries/prebuilds.sql
+++ b/coderd/database/queries/prebuilds.sql
@@ -15,6 +15,7 @@ WHERE w.id IN (
 		AND b.template_version_id = t.active_version_id
 		AND p.current_preset_id = @preset_id::uuid
 		AND p.ready
+		AND NOT t.deleted
 	LIMIT 1 FOR UPDATE OF p SKIP LOCKED -- Ensure that a concurrent request will not select the same prebuild.
 )
 RETURNING w.id, w.name;
@@ -40,6 +41,7 @@ FROM templates t
 		INNER JOIN template_version_presets tvp ON tvp.template_version_id = tv.id
 		INNER JOIN organizations o ON o.id = t.organization_id
 WHERE tvp.desired_instances IS NOT NULL -- Consider only presets that have a prebuild configuration.
+  -- AND NOT t.deleted -- We don't exclude deleted templates because there's no constraint in the DB preventing a soft deletion on a template while workspaces are running.
 	AND (t.id = sqlc.narg('template_id')::uuid OR sqlc.narg('template_id') IS NULL);
 
 -- name: GetRunningPrebuiltWorkspaces :many
@@ -70,6 +72,7 @@ FROM workspace_latest_builds wlb
 		-- prebuilds that are still building.
 		INNER JOIN templates t ON t.active_version_id = wlb.template_version_id
 WHERE wlb.job_status IN ('pending'::provisioner_job_status, 'running'::provisioner_job_status)
+  -- AND NOT t.deleted -- We don't exclude deleted templates because there's no constraint in the DB preventing a soft deletion on a template while workspaces are running.
 GROUP BY t.id, wpb.template_version_id, wpb.transition, wlb.template_version_preset_id;
 
 -- GetPresetsBackoff groups workspace builds by preset ID.
@@ -98,6 +101,7 @@ WITH filtered_builds AS (
 	WHERE tvp.desired_instances IS NOT NULL -- Consider only presets that have a prebuild configuration.
 		AND wlb.transition = 'start'::workspace_transition
 		AND w.owner_id = 'c42fdf75-3097-471c-8c33-fb52454d81c0'
+		AND NOT t.deleted
 ),
 time_sorted_builds AS (
 	-- Group builds by preset, then sort each group by created_at.
diff --git a/enterprise/coderd/prebuilds/metricscollector.go b/enterprise/coderd/prebuilds/metricscollector.go
index 9f1cc837d0474..7a7734b6f8093 100644
--- a/enterprise/coderd/prebuilds/metricscollector.go
+++ b/enterprise/coderd/prebuilds/metricscollector.go
@@ -157,6 +157,10 @@ func (mc *MetricsCollector) Collect(metricsCh chan<- prometheus.Metric) {
 			continue
 		}
 
+		if preset.Deleted {
+			continue
+		}
+
 		presetSnapshot, err := currentState.snapshot.FilterByPreset(preset.ID)
 		if err != nil {
 			mc.logger.Error(context.Background(), "failed to filter by preset", slog.Error(err))
diff --git a/enterprise/coderd/prebuilds/metricscollector_test.go b/enterprise/coderd/prebuilds/metricscollector_test.go
index 07c3c3c6996bb..dce9e07dd110f 100644
--- a/enterprise/coderd/prebuilds/metricscollector_test.go
+++ b/enterprise/coderd/prebuilds/metricscollector_test.go
@@ -19,6 +19,7 @@ import (
 	"github.com/coder/coder/v2/coderd/database/dbauthz"
 	"github.com/coder/coder/v2/coderd/database/dbgen"
 	"github.com/coder/coder/v2/coderd/database/dbtestutil"
+	"github.com/coder/coder/v2/coderd/database/dbtime"
 	agplprebuilds "github.com/coder/coder/v2/coderd/prebuilds"
 	"github.com/coder/coder/v2/codersdk"
 	"github.com/coder/coder/v2/enterprise/coderd/prebuilds"
@@ -165,27 +166,12 @@ func TestMetricsCollector(t *testing.T) {
 			eligible:        []bool{false},
 		},
 		{
-			name:         "deleted templates never desire prebuilds",
-			transitions:  allTransitions,
-			jobStatuses:  allJobStatuses,
-			initiatorIDs: []uuid.UUID{agplprebuilds.SystemUserID},
-			ownerIDs:     []uuid.UUID{agplprebuilds.SystemUserID, uuid.New()},
-			metrics: []metricCheck{
-				{prebuilds.MetricDesiredGauge, ptr.To(0.0), false},
-			},
-			templateDeleted: []bool{true},
-			eligible:        []bool{false},
-		},
-		{
-			name:         "running prebuilds for deleted templates are still counted, so that they can be deleted",
-			transitions:  []database.WorkspaceTransition{database.WorkspaceTransitionStart},
-			jobStatuses:  []database.ProvisionerJobStatus{database.ProvisionerJobStatusSucceeded},
-			initiatorIDs: []uuid.UUID{agplprebuilds.SystemUserID},
-			ownerIDs:     []uuid.UUID{agplprebuilds.SystemUserID},
-			metrics: []metricCheck{
-				{prebuilds.MetricRunningGauge, ptr.To(1.0), false},
-				{prebuilds.MetricEligibleGauge, ptr.To(0.0), false},
-			},
+			name:            "deleted templates should not be included in exported metrics",
+			transitions:     allTransitions,
+			jobStatuses:     allJobStatuses,
+			initiatorIDs:    []uuid.UUID{agplprebuilds.SystemUserID},
+			ownerIDs:        []uuid.UUID{agplprebuilds.SystemUserID, uuid.New()},
+			metrics:         nil,
 			templateDeleted: []bool{true},
 			eligible:        []bool{false},
 		},
@@ -281,6 +267,12 @@ func TestMetricsCollector(t *testing.T) {
 												"organization_name": org.Name,
 											}
 
+											// If no expected metrics have been defined, ensure we don't find any metric series (i.e. metrics with given labels).
+											if test.metrics == nil {
+												series := findAllMetricSeries(metricsFamilies, labels)
+												require.Empty(t, series)
+											}
+
 											for _, check := range test.metrics {
 												metric := findMetric(metricsFamilies, check.name, labels)
 												if check.value == nil {
@@ -307,6 +299,131 @@ func TestMetricsCollector(t *testing.T) {
 	}
 }
 
+// TestMetricsCollector_DuplicateTemplateNames validates a bug that we saw previously which caused duplicate metric series
+// registration when a template was deleted and a new one created with the same name (and preset name).
+// We are now excluding deleted templates from our metric collection.
+func TestMetricsCollector_DuplicateTemplateNames(t *testing.T) {
+	t.Parallel()
+
+	if !dbtestutil.WillUsePostgres() {
+		t.Skip("this test requires postgres")
+	}
+
+	type metricCheck struct {
+		name      string
+		value     *float64
+		isCounter bool
+	}
+
+	type testCase struct {
+		transition  database.WorkspaceTransition
+		jobStatus   database.ProvisionerJobStatus
+		initiatorID uuid.UUID
+		ownerID     uuid.UUID
+		metrics     []metricCheck
+		eligible    bool
+	}
+
+	test := testCase{
+		transition:  database.WorkspaceTransitionStart,
+		jobStatus:   database.ProvisionerJobStatusSucceeded,
+		initiatorID: agplprebuilds.SystemUserID,
+		ownerID:     agplprebuilds.SystemUserID,
+		metrics: []metricCheck{
+			{prebuilds.MetricCreatedCount, ptr.To(1.0), true},
+			{prebuilds.MetricClaimedCount, ptr.To(0.0), true},
+			{prebuilds.MetricFailedCount, ptr.To(0.0), true},
+			{prebuilds.MetricDesiredGauge, ptr.To(1.0), false},
+			{prebuilds.MetricRunningGauge, ptr.To(1.0), false},
+			{prebuilds.MetricEligibleGauge, ptr.To(1.0), false},
+		},
+		eligible: true,
+	}
+
+	logger := slogtest.Make(t, &slogtest.Options{IgnoreErrors: true})
+	clock := quartz.NewMock(t)
+	db, pubsub := dbtestutil.NewDB(t)
+	reconciler := prebuilds.NewStoreReconciler(db, pubsub, codersdk.PrebuildsConfig{}, logger, quartz.NewMock(t), prometheus.NewRegistry(), newNoopEnqueuer())
+	ctx := testutil.Context(t, testutil.WaitLong)
+
+	collector := prebuilds.NewMetricsCollector(db, logger, reconciler)
+	registry := prometheus.NewPedanticRegistry()
+	registry.Register(collector)
+
+	presetName := "default-preset"
+	defaultOrg := dbgen.Organization(t, db, database.Organization{})
+	setupTemplateWithDeps := func() database.Template {
+		template := setupTestDBTemplateWithinOrg(t, db, test.ownerID, false, "default-template", defaultOrg)
+		templateVersionID := setupTestDBTemplateVersion(ctx, t, clock, db, pubsub, defaultOrg.ID, test.ownerID, template.ID)
+		preset := setupTestDBPreset(t, db, templateVersionID, 1, "default-preset")
+		workspace, _ := setupTestDBWorkspace(
+			t, clock, db, pubsub,
+			test.transition, test.jobStatus, defaultOrg.ID, preset, template.ID, templateVersionID, test.initiatorID, test.ownerID,
+		)
+		setupTestDBWorkspaceAgent(t, db, workspace.ID, test.eligible)
+		return template
+	}
+
+	// When: starting with a regular template.
+	template := setupTemplateWithDeps()
+	labels := map[string]string{
+		"template_name":     template.Name,
+		"preset_name":       presetName,
+		"organization_name": defaultOrg.Name,
+	}
+
+	// nolint:gocritic // Authz context needed to retrieve state.
+	ctx = dbauthz.AsPrebuildsOrchestrator(ctx)
+
+	// Then: metrics collect successfully.
+	require.NoError(t, collector.UpdateState(ctx, testutil.WaitLong))
+	metricsFamilies, err := registry.Gather()
+	require.NoError(t, err)
+	require.NotEmpty(t, findAllMetricSeries(metricsFamilies, labels))
+
+	// When: the template is deleted.
+	require.NoError(t, db.UpdateTemplateDeletedByID(ctx, database.UpdateTemplateDeletedByIDParams{
+		ID:        template.ID,
+		Deleted:   true,
+		UpdatedAt: dbtime.Now(),
+	}))
+
+	// Then: metrics collect successfully but are empty because the template is deleted.
+	require.NoError(t, collector.UpdateState(ctx, testutil.WaitLong))
+	metricsFamilies, err = registry.Gather()
+	require.NoError(t, err)
+	require.Empty(t, findAllMetricSeries(metricsFamilies, labels))
+
+	// When: a new template is created with the same name as the deleted template.
+	newTemplate := setupTemplateWithDeps()
+
+	// Ensure the database has both the new and old (delete) template.
+	{
+		deleted, err := db.GetTemplateByOrganizationAndName(ctx, database.GetTemplateByOrganizationAndNameParams{
+			OrganizationID: template.OrganizationID,
+			Deleted:        true,
+			Name:           template.Name,
+		})
+		require.NoError(t, err)
+		require.Equal(t, template.ID, deleted.ID)
+
+		current, err := db.GetTemplateByOrganizationAndName(ctx, database.GetTemplateByOrganizationAndNameParams{
+			// Use details from deleted template to ensure they're aligned.
+			OrganizationID: template.OrganizationID,
+			Deleted:        false,
+			Name:           template.Name,
+		})
+		require.NoError(t, err)
+		require.Equal(t, newTemplate.ID, current.ID)
+	}
+
+	// Then: metrics collect successfully.
+	require.NoError(t, collector.UpdateState(ctx, testutil.WaitLong))
+	metricsFamilies, err = registry.Gather()
+	require.NoError(t, err)
+	require.NotEmpty(t, findAllMetricSeries(metricsFamilies, labels))
+}
+
 func findMetric(metricsFamilies []*prometheus_client.MetricFamily, name string, labels map[string]string) *prometheus_client.Metric {
 	for _, metricFamily := range metricsFamilies {
 		if metricFamily.GetName() != name {
@@ -334,3 +451,33 @@ func findMetric(metricsFamilies []*prometheus_client.MetricFamily, name string,
 	}
 	return nil
 }
+
+// findAllMetricSeries finds all metrics with a given set of labels.
+func findAllMetricSeries(metricsFamilies []*prometheus_client.MetricFamily, labels map[string]string) map[string]*prometheus_client.Metric {
+	series := make(map[string]*prometheus_client.Metric)
+	for _, metricFamily := range metricsFamilies {
+		for _, metric := range metricFamily.GetMetric() {
+			labelPairs := metric.GetLabel()
+
+			if len(labelPairs) != len(labels) {
+				continue
+			}
+
+			// Convert label pairs to map for easier lookup
+			metricLabels := make(map[string]string, len(labelPairs))
+			for _, label := range labelPairs {
+				metricLabels[label.GetName()] = label.GetValue()
+			}
+
+			// Check if all requested labels match
+			for wantName, wantValue := range labels {
+				if metricLabels[wantName] != wantValue {
+					continue
+				}
+			}
+
+			series[metricFamily.GetName()] = metric
+		}
+	}
+	return series
+}
diff --git a/enterprise/coderd/prebuilds/reconcile_test.go b/enterprise/coderd/prebuilds/reconcile_test.go
index bdf447dcfae22..660b1733e6cc9 100644
--- a/enterprise/coderd/prebuilds/reconcile_test.go
+++ b/enterprise/coderd/prebuilds/reconcile_test.go
@@ -294,10 +294,15 @@ func TestPrebuildReconciliation(t *testing.T) {
 			templateDeleted:         []bool{false},
 		},
 		{
-			name:                      "delete prebuilds for deleted templates",
+			// Templates can be soft-deleted (`deleted=true`) or hard-deleted (row is removed).
+			// On the former there is *no* DB constraint to prevent soft deletion, so we have to ensure that if somehow
+			// the template was soft-deleted any running prebuilds will be removed.
+			// On the latter there is a DB constraint to prevent row deletion if any workspaces reference the deleting template.
+			name:                      "soft-deleted templates MAY have prebuilds",
 			prebuildLatestTransitions: []database.WorkspaceTransition{database.WorkspaceTransitionStart},
 			prebuildJobStatuses:       []database.ProvisionerJobStatus{database.ProvisionerJobStatusSucceeded},
 			templateVersionActive:     []bool{true, false},
+			shouldCreateNewPrebuild:   ptr.To(false),
 			shouldDeleteOldPrebuild:   ptr.To(true),
 			templateDeleted:           []bool{true},
 		},
@@ -1060,6 +1065,33 @@ func setupTestDBTemplate(
 	return org, template
 }
 
+// nolint:revive // It's a control flag, but this is a test.
+func setupTestDBTemplateWithinOrg(
+	t *testing.T,
+	db database.Store,
+	userID uuid.UUID,
+	templateDeleted bool,
+	templateName string,
+	org database.Organization,
+) database.Template {
+	t.Helper()
+
+	template := dbgen.Template(t, db, database.Template{
+		Name:           templateName,
+		CreatedBy:      userID,
+		OrganizationID: org.ID,
+		CreatedAt:      time.Now().Add(muchEarlier),
+	})
+	if templateDeleted {
+		ctx := testutil.Context(t, testutil.WaitShort)
+		require.NoError(t, db.UpdateTemplateDeletedByID(ctx, database.UpdateTemplateDeletedByIDParams{
+			ID:      template.ID,
+			Deleted: true,
+		}))
+	}
+	return template
+}
+
 const (
 	earlier     = -time.Hour
 	muchEarlier = -time.Hour * 2

From 7118b578617a1b77c7d6ed7cb273117a0becdd58 Mon Sep 17 00:00:00 2001
From: Danny Kopping <dannykopping@gmail.com>
Date: Thu, 15 May 2025 14:55:24 +0200
Subject: [PATCH 7/7] chore: make lint; make fmt

Signed-off-by: Danny Kopping <dannykopping@gmail.com>
---
 cli/agent.go | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/cli/agent.go b/cli/agent.go
index b174763f19d5d..0153c5f05b44d 100644
--- a/cli/agent.go
+++ b/cli/agent.go
@@ -358,12 +358,12 @@ func (r *RootCmd) workspaceAgent() *serpent.Command {
 					SSHMaxTimeout:        sshMaxTimeout,
 					Subsystems:           subsystems,
 
-				PrometheusRegistry: prometheusRegistry,
-				BlockFileTransfer:  blockFileTransfer,
-				Execer:             execer,
+					PrometheusRegistry: prometheusRegistry,
+					BlockFileTransfer:  blockFileTransfer,
+					Execer:             execer,
 
-				ExperimentalDevcontainersEnabled: experimentalDevcontainersEnabled,
-			})
+					ExperimentalDevcontainersEnabled: experimentalDevcontainersEnabled,
+				})
 
 				promHandler := agent.PrometheusMetricsHandler(prometheusRegistry, logger)
 				prometheusSrvClose := ServeHandler(ctx, logger, promHandler, prometheusAddress, "prometheus")