From 6c83a35d6d5eba27ea98ee5dc5a73be6f06cdf85 Mon Sep 17 00:00:00 2001
From: vitya <vitya.kuznetsov@gmail.com>
Date: Thu, 30 Apr 2026 00:33:05 +0300
Subject: [PATCH] =?UTF-8?q?feat(using-projects-meta):=20v1.1.0=20=E2=80=94?=
 =?UTF-8?q?=20mandatory=20Step=200=20freshness=20gate?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Cross-machine workflows broke silently when the agent reasoned on a stale
MCP cache, or hit sha-based optimistic-lock 422s on shared-wiki writes
because another host had pushed minutes earlier. Codify the missing
pre-flight as Step 0:

  1. Always probe mcp__projects-meta__meta_status first.
  2. If cache_age_minutes > 10 OR errors_count > 0 → run
     `node ~/.local/projects-meta-mcp/dist/sync.js` before any read.
  3. For shared-wiki WRITES (knowledge_ingest, knowledge_promote) →
     unconditional `git -C ~/projects/projects-wiki pull --ff-only`
     (sha-lock will reject the commit otherwise; failure is opaque).
  4. Tasks-mutations: sync via dist/sync.js is enough (no local clone
     of target tasks repo).
  5. Sync 401/403 → STOP, send user to ~/.config/projects-mcp/auth.toml
     to rotate gitea_token. No silent retry.

10-minute cache window chosen as the read threshold — balances
multi-machine drift detection against unnecessary Gitea round-trips.

Common mistakes + Red flags expanded to call out the new failure modes.
README mirrors the rule for human readers. Wiki concept page
projects-meta-skills.md gets a "Freshness gate (v1.1.0)" subsection.

Closes [using-projects-meta-freshness-gate].

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
---
 .tasks/STATUS.md                             |  11 +++-
 .tasks/using-projects-meta-freshness-gate.md |  34 ++++++++++++
 .wiki/concepts/projects-meta-skills.md       |  14 +++++
 .wiki/log.md                                 |   1 +
 dist/using-projects-meta.skill               | Bin 7077 -> 8870 bytes
 skills/using-projects-meta/README.md         |  26 ++++++++++
 skills/using-projects-meta/SKILL.md          |  52 +++++++++++++++++--
 7 files changed, 133 insertions(+), 5 deletions(-)
 create mode 100644 .tasks/using-projects-meta-freshness-gate.md

diff --git a/.tasks/STATUS.md b/.tasks/STATUS.md
index 08319aa..e9ed901 100644
--- a/.tasks/STATUS.md
+++ b/.tasks/STATUS.md
@@ -1,5 +1,5 @@
 # Task Board
-_Updated: 2026-04-29_
+_Updated: 2026-04-30_
 
 <!--
   Canonical layout. One block per task. Per-task deep context lives in
@@ -85,6 +85,15 @@ _Updated: 2026-04-29_
 **Next action:** when triggered (skill count crosses threshold), evaluate variant B (grouped by family) vs variant C (flat + manifest) from the original brainstorm in `.wiki/concepts/repo-layout.md`
 **Branch:** (not started)
 
+## 🟢 [using-projects-meta-freshness-gate] — добавить Step 0 freshness check в using-projects-meta
+
+**Status:** done
+**Where I stopped:** Step 0 добавлен в `using-projects-meta/SKILL.md` (cache_age>10мин или errors>0 → `dist/sync.js` для read; shared-wiki write — безусловный `git pull --ff-only`; 401/403 → auth.toml rotation); зеркалирован в README; bump 1.0.0→1.1.0; rebuild+install OK; description trimmed до 924 chars после регрессии (полное Step 0 в description ~1450 chars сломало парсинг — harness зафолбэкнулся на H1, скилл потерял все триггеры); Common mistakes + Red flags расширены; concept page + log обновлены; new feedback memory `skill_description_length_limit`
+**Next action:** (none — kept until merged)
+**Branch:** master
+
+---
+
 ## 🟢 [projects-meta-skills] — setup-projects-meta + using-projects-meta — пара скиллов для projects-meta-mcp
 
 **Status:** done
diff --git a/.tasks/using-projects-meta-freshness-gate.md b/.tasks/using-projects-meta-freshness-gate.md
new file mode 100644
index 0000000..7726c68
--- /dev/null
+++ b/.tasks/using-projects-meta-freshness-gate.md
@@ -0,0 +1,34 @@
+# using-projects-meta-freshness-gate
+
+## Goal
+Add an explicit Step 0 "Freshness gate" to `using-projects-meta` so the agent does not hit a stale MCP cache or a sha-based optimistic-lock conflict in cross-machine workflows. Pre-flight: always `meta_status`; if `cache_age` > 10 min or `errors_count` > 0, run `node ~/.local/projects-meta-mcp/dist/sync.js` for reads; for shared-wiki writes (`knowledge_ingest`, `knowledge_promote`) additionally `git -C ~/projects/projects-wiki pull --ff-only`. 401/403 from sync → token expired → send user to `~/.config/projects-mcp/auth.toml`. Tasks-mutations need only the sync (no local clone of target tasks repo). Bump skill 1.0.0 → 1.1.0 (additive, non-breaking).
+
+## Key files
+- `skills/using-projects-meta/SKILL.md` — add **Step 0 — Freshness gate** section before "Read (no confirmation needed)" and before "Mutate (always two-step)"; tweak Workflow ordering
+- `skills/using-projects-meta/README.md` — mirror the rule in a new "Freshness gate" subsection of "Two operation classes"
+- `.wiki/concepts/projects-meta-skills.md` — append a "Freshness gate (v1.1.0)" subsection
+- `.wiki/log.md` — one entry
+
+## Decisions log
+- 2026-04-30: Threshold = 10 min cache age. Reason: balance between catching cross-machine pushes and not hitting Gitea on every casual `tasks_aggregate`. User-supplied number, codified.
+- 2026-04-30: For shared-wiki writes, pull is **unconditional** (not gated by cache age). Reason: sha-based optimistic lock in `knowledge_ingest` will reject the commit otherwise with a 422, and the failure mode is opaque ("why did it fail?"). The pull is cheap (fast-forward is a no-op when already current).
+- 2026-04-30: For tasks-mutations, sync via `dist/sync.js` is enough. Reason: there's no local clone of the target tasks repo — mutations go straight through Gitea API. The sync only refreshes the local view of all repos' STATUS.md so the agent reasons from current state when writing.
+- 2026-04-30: 401/403 from sync → send user to rotate `gitea_token` in `~/.config/projects-mcp/auth.toml`. Reason: silently failing or pretending sync succeeded leaves the agent reasoning on stale data. Loud failure is the whole point of the check.
+- 2026-04-30: Version bump 1.0.0 → 1.1.0 (additive behavior change — adds a pre-flight step, doesn't break existing usage). `using-context7` precedent: `version` in frontmatter, semver discipline.
+
+## Open questions
+- [ ] Should Step 0 apply to `meta_status` itself? Decision: no — that would be circular. `meta_status` is the freshness probe, not a read that depends on freshness.
+
+## Completed steps
+- [x] Open task in STATUS.md as 🔴 active
+- [x] Add Step 0 — Freshness gate section to `using-projects-meta/SKILL.md` (between Workflow header and Read sub-section); add Step 0 reference to Read and Mutate sub-flows; extend Common mistakes (3 new rows: stale aggregate, skipped pull, sync 401/403); extend Red flags (2 new bullets)
+- [x] Mirror rule in `using-projects-meta/README.md` as new "Step 0 — Freshness gate (v1.1.0, mandatory pre-flight)" section
+- [x] Bump `version: 1.0.0` → `1.1.0` in SKILL.md frontmatter
+- [x] First rebuild + reinstall — caused regression: full Step 0 inlined into description took it to ~1450 chars, exceeded harness limit, description silently dropped → listing showed `using-projects-meta: Using the projects-meta MCP server` (H1 fallback); fixed by trimming description to 924 chars with one-sentence pointer "v1.1.0 mandates a Step 0 freshness gate ... see SKILL body"
+- [x] Saved feedback memory `skill_description_length_limit.md` so future me checks length after frontmatter edits
+- [x] Wiki: appended "Freshness gate (v1.1.0)" subsection to `concepts/projects-meta-skills.md`; one entry in `log.md`
+- [x] Closed in STATUS.md (🟢 done); next: commit + push + MCP round-trip close
+
+## Notes
+- User-supplied draft text for the skill (verbatim): _"Step 0 — Freshness gate. Always call mcp__projects-meta__meta_status first. If cache_age_minutes > 10 or errors.length > 0, run node ~/.local/projects-meta-mcp/dist/sync.js before any read. For shared-wiki writes (knowledge_ingest, knowledge_promote), additionally run git -C ~/projects/projects-wiki pull --ff-only — sha-based optimistic lock will reject your commit otherwise."_
+- Trigger reason from user: "projects-meta — это шина между машинами. Юзер на ноуте может не знать, что на десктопе уже был коммит в shared wiki 5 минут назад. Без этого шага write-флоу ломается случайным образом, и баг трудно воспроизвести."
diff --git a/.wiki/concepts/projects-meta-skills.md b/.wiki/concepts/projects-meta-skills.md
index 1b093f3..010a49a 100644
--- a/.wiki/concepts/projects-meta-skills.md
+++ b/.wiki/concepts/projects-meta-skills.md
@@ -67,6 +67,20 @@ Both `setup-projects-meta` and `using-projects-meta` now write the canon path. `
 
 This is a meta-lesson: **always pull shared/multi-machine resources before relying on cached anchors**. Saved as a feedback memory.
 
+## Freshness gate (v1.1.0)
+
+`using-projects-meta` v1.1.0 adds a mandatory pre-flight **Step 0** before any `tasks_*` / `knowledge_*` call:
+
+1. Probe `mcp__projects-meta__meta_status` (cache age + errors).
+2. If `cache_age_minutes > 10` or `errors_count > 0` → `node ~/.local/projects-meta-mcp/dist/sync.js`.
+3. For shared-wiki writes (`knowledge_ingest`, `knowledge_promote`) → **unconditional** `git -C ~/projects/projects-wiki pull --ff-only` (sha-based optimistic lock will reject otherwise with 422).
+4. For tasks-mutations (`tasks_create/update/close`) → sync via `dist/sync.js` is enough; no local clone of target tasks repo.
+5. 401/403 from sync → token dead → send user to `~/.config/projects-mcp/auth.toml`. Loud failure mandatory.
+
+Why: `projects-meta` is a bus between machines. Another host can push minutes ago without the agent knowing. Without Step 0, reads return stale data and writes hit opaque 422s — exactly the failure mode we hit during this very session (skipped initial pull → wiki anchors stale → had to rewrite three places after retroactive `git pull`). Codified the lesson into the skill so future sessions don't repeat it.
+
+10-minute threshold is the chosen balance: catches multi-machine drift, doesn't burn Gitea round-trips for casual back-to-back questions.
+
 ## Round-trip note
 
 The task `[projects-meta-skills]` was created on a different machine (`OpeItcLoc03@DESKTOP-NSEF0UK`) via `mcp__projects-meta__tasks_create target_project=claude-skills`. Closing it on this machine via `mcp__projects-meta__tasks_close target_project=claude-skills slug=projects-meta-skills` round-trips back to the same Gitea board — both sides see the 🟢 done state. First end-to-end multi-machine task lifecycle in the fleet.
diff --git a/.wiki/log.md b/.wiki/log.md
index 398b124..4414b73 100644
--- a/.wiki/log.md
+++ b/.wiki/log.md
@@ -30,5 +30,6 @@ Parseable: `grep "^## \[" .wiki/log.md | tail -20`.
 ## [2026-04-28] decision | install-portability — `install.sh`/`build.sh` patched to drop `mapfile`+`find -printf`; stock macOS (bash 3.2 + BSD find) now works; verified on git-bash (16 skills discovered, sorted, installed; build.sh produces archive)
 ## [2026-04-29] decision | projects-meta-skills — built `setup-projects-meta` (8-phase install of projects-meta-mcp + auth.toml + MCP registration) and `using-projects-meta` (runtime policy with local-first rule and two-step mutation); skill pair pattern applied for the 4th time (context7 / wiki / tasks / projects-meta); both built + installed; visible to the harness
 ## [2026-04-30] refactor | projects-meta-skills — wiki path canon corrected: `~/projects/.wiki` → `~/projects/projects-wiki/` (clone root), content at `~/projects/projects-wiki/.wiki/`. Old path caused write/read mismatch bug (fixed upstream in commit `621a69f` of `projects-meta-mcp`). Setup-projects-meta Phase 1 now detects legacy clone, Phase 4 re-clones to canon. Lesson: pull shared resources before relying on cached anchors
+## [2026-04-30] decision | using-projects-meta v1.1.0 — added mandatory Step 0 freshness gate: probe `meta_status`; if cache_age > 10min or errors > 0, `node dist/sync.js`; for shared-wiki writes unconditional `git -C ~/projects/projects-wiki pull --ff-only`; 401/403 → loud failure to user. Codifies the same-session lesson — `projects-meta` is a multi-machine bus, stale cache breaks read accuracy and write atomicity
 ## [2026-04-28] decision | project-bootstrap@1.1.0 — added Step 5.6: detects `superpowers@claude-plugins-official` via `~/.claude/plugins/installed_plugins.json` and prints install command + upstream link if missing; chat-only, never auto-installs (slash commands aren't callable from a skill, and silent plugin install is overreach)
 ## [2026-04-28] doc | README.md + README.ru.md — new "Using skills in projects" / "Использование в проектах" section after install quick-start; describes project-bootstrap workflow (git, .gitignore, README, .wiki/, .tasks/, CLAUDE.md, manifest, superpowers-plugin check) and the init/upgrade modes
diff --git a/dist/using-projects-meta.skill b/dist/using-projects-meta.skill
index 5f30ebea6261d0c3615cf3c36b70fcc76ec41705..e6cbc2dae09ca841d8c3ac4e5e33d18362eb4de8 100644
GIT binary patch
literal 8870
zcmaL7RZtvU6s3y?2pU|1YjAgWcXzkOY24j{yL;0R8h3Yx;1=9HNN|~d9%k-5%-nq*
zcI{KA*5j`F)>*0wuyEK=P*8|alduJb_JdL@Jg87mMx;<s-~YP>y4yL~FuAxn+gn+9
zxHCCgd6==NONmJ;NijQGrt57w5sl*X;1zlCCb2Ni{V7jtV=|?sH*A$d8LD^S1FjeS
zM)Qg~kevK(ZKJ~pO*w`>PbE4BBXtdneG-r}Qki^oj8myIhINnmlF!jtO)WJ!6Jh1X
z=YBNx{5<0|V_dSHZB9Hb{|ZrNz*7R2x3spjUM)#kRpeN6^PGlCx0KnJ(6@po==JnS
zlos^FArtY`ph+yF5sx6J)>ipT>lPPlTQ?1Y%NNV9-!lyNCD6>z{yAkVw@X7;r3uh*
zk!1S*`e6}goEZ4FbFFEg&PVvWi!<FbZK!Jo743Sv?Q_{oaQYkj@B=O;*j&t$s$-e=
zw4rpRPC~42s>9pw9A5a=r9?h|&eiO=eP$%*=x8-Ob*mcK-X~WV>xn~e{(7(;7ZdqI
zXhhjqr78t0_3_J3zIAj=7W|=Gp5jf;<G9Ra?G<L-f_tg0?4A|=$RnI_<0)+g?l#8a
z`UtJBGTrOo`m1_O%@Bh&`NKBL^K1ine`r#Eqou}6rdor-$ma1zVd^RfjjI*NXCAb{
zb1j}&@2W-Lvr4%?HuF`Mh`FV8OHOhmha%|D&;9;LQUv2?opV9-4$%kM%nn(uP;xPh
z@84@Kc=_$WdvGq}w0Dv83WmYD^d?-cV_-jLGS7v@j0|JSmlGrcPoG>Rop)9DijsAe
zbwbg&t2i&Orf93ghgQY+Y;3i%+w+Al>GYIYsr)MWvV-{E@9#?wA3a{!n0k$bjRU=2
zbo2vT-%>J6Sb9a?U7n|JCl^$_H*dfE(hrP~NzB}yzl~Zz&)DAI=UII}yxsWTqNM5y
ziJefhT7gaGauar<e)060k5NwSoP8n#X=N*S*h^2Vh$YdJ`8(pJJ+GV|tKyyoHT%PK
z7mn?Jigwbr{qD_7R1pz;Ke?ZM%6{8hNL2Z3P`k!%M|MD~EU@~36`!)ROgU(wuLL2-
zou_q6%Mhk}PViWEFLX$%YNpL_7^-VNAy>TkK1-rq=UlOMD>dvmRDPVEj{a&CQA~Id
zB3&lFiGnmZ61Pbut6ML&)j`<7sbr#0mNZy#pdVI?8g)b^IKkY>-gI1_`msF};+f@4
zM!b8=(cF>lEFl4a1kr&Huxs8(0HU~dyG2;nn8!>VXf1*91!Rqn%Eeqx-<UL|in#Vv
z<POR`@D76(B+O26)`VU0)DW%e9~6?C4ZiC(c9FQAl0!us<YjfTmKU7DYw{zBhqjFQ
zBBEjWLN2l{p%iQwiCurnRhZto1S9Vb)9}N5qJfzgo?K55vq9HptEDzK{^m2t#Qz4}
zu<<ui5uzs%n7?*UnqnYM-9Quhqc%?Ok|z4!h_*SBWXK7{u?yL~uQ1idd5M0$P_DR@
zhAh0p#Xd*n%EnfT$HBfSBnz#12!X;SngJE)bnLcA`QrHV9yWfSGLjCB{QUA6u~%A+
z>eG971~yS5<u<rtoh|2)S5^OCU^^^ZF<~J~B!jsNMN(WvT(E5e&>}cCue9RjOnT;g
zq9z{=>~_wE^8OI}quTfyQMY;h<-w+}SEgC|4|!C~=tc0<&!7Tkg%4kgSbVw2LHSu*
z6PQ=68An+c&J2AQHw@CD*8o}OU~^nqK?We_#I(1%Tm_ZGKRmf#s#4z#ji<R_TIb}3
zz6_NjnIiNu+LkDbLa5kVTPrFm`OcSCNACMHu?%!b@N}~SO+~2Hdl<zbqV(`!y}@W2
z1OVJJyo4*FrvR)U2Z|l0pu3`uiFb&Rwo(#N8R?9hmaJUn@3(ZBpCm3m&?{8JD8br@
z4+m37-cY2+sP29(+0T1V0jqs<XWT|es;6Ll%JR3!q6L|L6r^tPFRvcQB-DYIYWDro
z&usqxK)pW8TC0i+uVK0{*Mda&P-Runu<~yZ3;Vz3iYQLPP~|jx16$s0cTUFzJ<6e<
z9tC0_ixiX(`tYVTfAqLl@C_+D<W%;7f7u&YVx>!?=V)S1YhY}X30it5ERvT^Elj10
zAPL+)sdpDyY(g&Be8KH|Kuiwwdf20=Gu1WOA9b_SgDcKYDb^qjTL5p7u0k<1BFeBB
zj3dNXLJmW6p(BM?%nZeBchZkt*57CJ3%G5Iy$8Pl|1h9w4^~(WuZ2Vf^16qFA;#)^
zC@6t8)U8f^C&Z`1{G}$4rho5i_yIH-*bDdxb-#D^5jVBz`m*~j;H74B!G<Lo)lkHa
za6sYk8ltM39Wm-MFcvRR99GF!+8a8fEgC8GYe{X`ZMVl{W3K`95gZ;{-pQ{7{XGC8
zo0(0o+4t4P4LjVQoPPOyoH;0@<NPyE18r-OR`HRypUOFFTBVKGu>T#cBt?O_!NZS1
z3liB6_sw5PXf@IQs4r2<`q&@n%GnqB^(4G_`e-ed!k$~=@GDewH4Q_y!w=A%+DWvc
zMjTZp5k&|Zx+^%q2I`YOD(hdbQHkHLXXY*jZe~zV0LH3eE!#VSGt5ZqHYQ9p-zsBp
zQu>Igqn6Ooy(33UuP2w71<fs*BE@_urax)O+G&<k!wr$~0tnkU({C`a!02gm6B5u_
zbla}q$L>zVw_5MlokVqMBo1lX4w(3LvRO1UahanKy$qv$!ElOU(P6NzX#)fkN#edk
z+mpcI=Y&4jhDa?j!t>2rs%SG)s4^w&VwD~@#Wnt>fJK!?G(@_dikFV=g~Hd6<W=>Z
zrF`6l3polKxQ;SbN-2({2bk&)myh%%HCZHjB~=SpFnqd-gcs~#xjcTBto(iQSCRSl
z2_uv1@t6ZuFHYAxE(e=ZSUOX%fq^lvVU$5MNWnuWEY~Q91dxINoXKM&e%_%e7!tjT
zlecFlV{K%8@slyJR#n~DY9_iZI3BN(@eWS^V+lP?+_PPy&~lBu;efyG-oS<wCgTCi
zt!`(f?9n&Y7h0B5fNA8Lagw2>Mlnqj#Q!VG_OX57$%JU_k3S_Y@_QZsUSsx%u!JCp
zW)e;0_Snx}nMuj2&1TX0CC+H}n_;naU$y;pC@eSY;1SwNyMD?2D*dVmNH<}gK8n;+
zzIWTR`;>T$g|<(`o<`JYqQs;8Po!`n#kAv^>YEtCcbusu!v%NfBhgu4Ef>B+{-<=N
zE#-lR5bVCGePl|C+#RpI58Cr3o}WWHVUz{hEY}EA)Ojlj(bFr6Ac(Tq&Z)L|#YR@o
zwlW1V&?r?b&rCW$TrE>UP3D1lDt{YM@pEwziEhgHCapwo#Ed*};M10N4tjP~`mGsj
zr|V_}FajS)N0mdad|<f68v=KU#Dg6D%=j*@)g~%p`6sdP^Da0m(p7+uoqyJ!&bcCT
zC3}eNo(&(yr?4iRMGEh<&Tkl`xr_9dvT2oCR7RT7k@QN8h`PB_u{l~AH*WGc_Fnag
z+d-Ady5qd2cp9$aDr}KcbJ?i$fZF(JVu#xJG1hw@ncBvYuIIqhe>quLqFj022!rn@
zb8G(+9sN?5pI~P7&{_u^+l6q@fgX%WT;SUUM-wlAb<k*5R6gsV(cexw|CTyBWtKNq
zAP2Z~ayWC5h0L|Y4v|gp59?s4NoK)^O<{3-45pwnT_O0q;*z?iiH{H7Bhwh=SJdzm
zf_NFy<hX9GS@x0kul+W2GxU$ZDNrFkB5X+lr+6UPNKjZeu;=N0$Lm<Fc8U8ca$Z+_
zUz;AFvP1}>5HbED9XiNr)_$c0MGo;kXrf`x^Ta~8y4?!EoR5E^ei5KtZ|)a5hpOt?
z87D1-pP{>uk2@v)tr|8J)!%c0_(#8W!8VADT`6tz4K0{~OdR~3uoEJ`O6cSU`}fE|
zRz!h!bX?Dfz`Q^!Qdh42a72pm9xte;m*twFDY+j(LvA~@mOG%cvTA%`!(%7raLrYZ
zbKm52ele+2cP_z(UF>=r>{`R)0XN;PclkYGCqLs5cbS*<b))izCTD{kD}PfFWDPe4
zK*5z}5H5bQk~4#Pb1V{~W0J|9)z7*VbUZF~Cc?W(QLHK{%^T&Qxj$tTOIR)tym6LT
z1nr|KhRky`10r`37qCe3v0HYY8S4S9w<-J60*~!<{g%QE?L>lwiJr#cc>vnB<5boj
z?_M$~n@)7Uwfjhd4EZh1czIK_c>nm=q-71+n`!dv>Nm#Qe2g}B<^bLI0rW<lLe#gi
zM-mr$c5h8wL9(6S$Z1WKEIv%F641jd!4}5F0uc#}{CEYEit(wtn|@{wXO3i)MA+dE
z>2pk<If^tpKmWl?9p>kYdZrZZD7UmevG`2vAng9rkC!3ZE;Yw<4m52y9r%V`Cg!C%
zcu37KrsY2$g&Oxlj!v{75cN}8Q1%Ej)$39v5U1}^G9V8OvvSplWt7G2ijOd?hQDHR
zJN(gf?3$XlTZiR!!@`RH>kb1w8oEw8D(SD?wBNS0awag=a>0+`iyW_~%FRvtin9*l
z4^LcKxLD-d28GPa4M86(M;LT&DXIhjg>dqe18mk+nr+6YVD!y*#>cP&=P+|i=r8e3
zI2K+L90Y_VxHZJ1x7=OIL;pU|RsT0}UH?a1jB3t&D*pl4Feelg@&ALkG!*0%75@XS
za)a{(A{oyQ7SU_fqM$4eid;&Aei#mYf>?hd$%dvq-gPp>invXw2BB$)r<Xe&GeSQk
ztQ%Sk2JX4H59axr7k3W;xMpxM?pH~Y8S|O}pM5>H|7B)i*?8{By!|}GSHA1w{is}l
zXKlhXNtKIwHxOuDQbo+HSbn|5$0e1$3NYD3zxv|mbv;xOA4^sHv<50yt8O1(oWP~U
z|K*{%+MpR{rBCf+pH`^2hVn^h^|kr;8sTT$k({;szd@EyqZ|BQNR@|A$vr?jE4xBV
zQ^Zj6`Nq}8WOVdi-=~Y{3PqD|B_d`?M$YQqrKA+gUyqtL=EdJGwwaLrVk&J32P@yw
zGd;)K+LHaE&d??~7E5RnphvCdGc5WMq<3ns7by_J|087$WuT<==uSM7*C;0sf5}~Z
z&Q5=_lt;CD$xz4n?tJM_Wz3S))NE;cjPhIY3Gsa$XGiqWzo+7$tAq^8^i2}CkBvJP
z?(OQkAoW~l9%t_D{Lkuj|JG-9$DS?!ppWY5LT;0S&z!A|Hv(tJo`F)HT<4{u+2h_n
z{)ve}11Bsz+qXp9&L4MgkKUvl{>{$_61}@WJ@08!PU_+0hP4`4{Tr<8kelZTeg$*e
zp>Q_n?l}%xpl~Nb<JRI<v9=GBF|o&FNSQUrOI7o#f&jsm!fXg)dG?0chL>PFvk5)`
zSd$~CCJ|LB9(m)8AX+(<z9uUtWFk{ldNtX)lE&Kp>;BN#>|#~0TDkzBqUr8tn^-si
z*=YD&RH&3ADMWj@g1Y77nZ5t7y;T(TB_qp}ow@c|)b?9$EPz`nR;p-(Rt{2!Qt0fp
zlJDZR;(&|LpCPn&Xt!qXv}<MOW<RF62e$<s5)smcE1qR0%91#+bCpl-bGIqr+|M!o
z-7Yy{smeyhc!vzWD`(qJL1<KFohATP;2O>BzF1y%9{ke-d2KkxaT+SuL@%#%%2Asp
zl}f2<DD9PV;T<Z<&#lH}f6AlF5buEgLvX)zRHiT?Oo~{%*0XquzMVBU!X2BPRyL+P
zpojtrDRMswKJJiI23mxWOD5(PbN0Kx_BtcVqC%+!s4<X^b+6URl>RE2*YGaDy2?dn
zI#r%Ab=g+2D4YI=qD_t!iC2#deN#*fMW?PQvpB;ovM{P(YfkDj^pHGn1N;Q@w@@<m
zKBUE0v=|_xlkq;TKvyb_-S;|%h5E%81MP%z4KmkX9#ZqSA_@G?{lC0fST|yc|E_!G
z|LY&EGAGbdSkGfFUOkb7%`+{^qG9)uB4r~oKoZXI)RTMz|E?B|K*bPPtM<E$Dua3;
z76(qT+J4fpwsFC180sPx%EZuqvCOkD)?EV+L{>ldVCjhD>1Y{WB}zAzAu9($_wl1n
zgg4vh5d5b1FUTGI;cH*o?S*t(n1ln>X`T!YHO{Nv83NHLpv+7w1j>4AWP#~V=6X8F
zzwQ32Qp{{D^d(PV_O;$2ev&f7_q7F43kl>5+DxXxF`P9RGLLmK8#wWJ7>jN!gZSnC
zQAMbcDvuAX-1GVosc9I8lCzi9>7;z^bBMub-P#}Xwu+@6a^gfH8`OtOte^vgjQt2h
z<c0dd>0Up@UXZez#Lc9!T)!A%sheY;?G+=37?#N~;HUcn%cVzSCy1d`tt!zhW`#$;
zDDxvUY%o(c4r3(iQ4L{}&jC*EA3HY*3mQ@y*IXv~C}(_(A__-sKzNanIJBAUDc4<^
zqFFSl0>6X($<5VO6xv&W%iWXgl>r7P+t4T?wOTp^Ht+5mpbXY$RcC=JBB9=ENKVbV
zWByznhEic}SR>Ra%20-62p<x4mTgS=A?L06zN*MYmnW%I8KW!Tfm@{$<D}RnaU&g&
z7mQi;`8r7YQE7e~GOph~7gC5<pPwvg5qCjy>WdG%s*wx(!#+0JQG4s;mfDkqXRM7I
zM<E@NHb1mg!n3h+a;O-os4wCu8<Y(w>+Jltc9R!Y4a-yTsQ3;*f+EK$0PElbY#p^n
z2?C{b4?j<aw-|OE0W*p$h;p9e!RJa{D}$V&aG7+q9H`n<=54wH2xAhpW?f2^Zg>7D
zzb+vOde6ZeV@9x1HdDlbTWi?4$|=J~T+XK?GdVdLNt`Ve%Zq!VM&m}@H>lA^<VG|k
zsYXc8cLZSzi%ag!&%{cD%nz|l^WW$(1bV{Vbw^z^3+Y?uzXEk>8L0x-#By`C6=ODw
za@rsBcvb~LcG-!oay9$FtKV?Mo_cI9H|Oaaf8aZBX`kB-c5Kq-z3o>h-Y!tY$4afV
z=7@lcm&YA2f2~|#@l<kD!)^X<TV^C@5?+V<pgo#5psk&zsi;mMpz+PSLB42=e|ym2
z8Ac>62`4jztLq;9MwLLV4hkwAd8Z7<R=bc4-bccu*NcQ-k^e@>(HqOva-*fI%A*5K
zHsZ;jj`fqJ%rD;E^&5|-N_mdxAJ#H7d`kvtBs3?Cy+07D#(&3aNb58&<9DSA*(63N
zP~q^^imM|1TKQ0mVj*6yyat17YeVv)EJOReCISiG?Sf?@B#tuiQ3vf;c34bV*|=RJ
z?&18=QCZsb_u4jxv8;tVLU2Mb2~*-T_iwjwM1oIt?DU+V%>{856h1-<2{@9Jc7M4B
zLhc7udo+~c+Umma5?>-Ljh*n;_bVB2zDv&?ricC=X(s%99I2C4Xtbd)ct0Ln()!rE
zVBakdiP*`!Dm|p5D*yqbb(J`!4moj!^*fb0vmjFnU>tlhg>aUBXJ^gc^b!2u_9N$Y
zJrZYVfS&Ha5S~C9wu%pujW-eUKF(Lym9|dz$p`UUU{c)eaIWH7x>)lnrLJ`mwgJG_
z*0<@LtV)-$lmYmWdHF)SMeagV4dKadZ@^-XN|+ohlS(Y7sY-0BPno^=H===5z6W!k
zva4(GF-v|Tv5Y5@Lr~d+CH}hvGBSrck1k$RMVzD;+(NDNkfi9?fUhm-2%hzG=y8!r
z{<(<|rcc?%)fYRYZ_FS$Vl{Dl^GuHVwv+~s91qdZ*?3jV!Z)kBZ)0i0cTPpozndKp
zYK=)q0$8=*FE1>Mn9FDcC}KxdOoTo<>*rnbl00L`Vr<72B2^Z(z?o@mk%Olmvf;Af
z5*J0$8n-a#O)#*)v|70>q_~OdR3*T3FzBur`2+>cc#Zt9F+rMD3qR;hx2;>jPDgTr
z7TesmG^-t*VQaU2?CMlW9y?luMfNVKcbcn6x;?rc8^6QvIAkoN7|>>`e(6~uq<Sg1
z5oE#WK469Bmt(usLaE<e?mXfqijsDD%QJJ#Xd|B0C@MaZio~xWOHgSo!=cb#OG7#o
z916nOdU+Z)BZH14sQyZp2AZ>UXOXR-jZSdrr1~woMLu#N0oRC-F>c}-NYj<)TCR!y
zaE0|vWYtdxO;FhPL%fN}uks?MI9L(VKR)rxfEbKL{Y_r6e+0MWWdJ63GTN4(hBFQD
z>`M}&_KkW>wTtJ`l52~QJ}XQ(>74w*D{@*0c~N2V!bX~f<kit9vB%Xbz}S@ZVe+kl
z7*k1(Vy-`-P+DEcTjlq@%(cOcNN@_-YdxUWP#V)eNBJ;tq!uo36(}v2IVdN;velZF
z__xj~61BxJ&CNhsSKf|J?Nu^3gy1+24oP2WocJO-Ej*KhCJ$egx%fdFsqN@fNNw}I
zyST6NZU?80pH7<Mt<F><*LEmuOcvEh#}ILU;`R413l83RQ<af7j63<!PL)LPzIQZ$
znI&6Loj&$0S3w<kfWEGdVSEC^+|{gM0q@G7#1D+99MV{;;GYDpLB|ozAVOdZ*~s>>
zsT~>)%+vh?6zqWkZC13CGrB$kK*5bLJ80%wGZ<f({0q97VOX@_D7N&HinPVho0R>z
zU$2>*loOBqR2gFnelrPUdE5K=&lJVt#x*$uEBHt?G@|234VySpWN`7cnuR-FN^*MK
zok;Fh^onYSAhVI!9FCt-DVhax|GKWTa%*`%;bB5b0a0u+s!n(#9X<Vb@2fjfE&1mq
z6wb*%o#|t#4%oa*n!}*Nml9z9>7c<rwFHFEP<kPNA?!@%Q?#4i{DLn}&mfr}9?PvN
z@Dfy8nsbjQUp1JQC1RI*wzj>ryvh{o2ojQAVYn|#3)>3gGQL*AAsjMVDB6XiWVWx9
zt98%gi$c!&b^cw*p+}ugGk%KMogYm<*Cv;JTp#5c_mSV16MPenNp~y^kG1Ja<~|58
zZ<Ed}ha=yhG{iBk(kFQ$d96x1_b1N<=GZl~YST<sal>a~w+EGY#;ji<^ZwRZTZBYK
zP|lAWE8N!eyI+dJt<aSx4PF=Qvb9=Nl5sQKybm{!MR-i`^_00!x_uRx&-PV}SgI_E
zjQ<^?9hBJLp|#Lq_tL>wBJQL;54v%Kv7{>U<V(seG}|RHJp%%Nl{fh=+#7O;R1+E9
zKbISW`Hg5yC`<N%3tq1*9Qm2<2A7771JupmgQ8*0Q-8!?iqjJO6INGMFb?<wgHPaD
zgt6QI1G7NRlzpVWP)iZ#EAgh%zXcM@KNi*S*%pS~(;r>fvcdNuaW`qsFZ(NPkQbUP
z_@tF3t4D)aOFqgXJAI5T?}C<d=N@qmWbg|n?fhz<6LkHQYj;QIFk9=gr<q0XI08cR
z1Rn#DY{F4*9UYaC!1+*K#m3rk8QlR{{p?|Jc*ET9VxrWMuu1(Qffe7=FAMaJXEOX?
zhmPcgi0apsu?OArr$(S_NKeZjI?Z=K^LmB}STdR1u-jYHZ4oruG@R^E5jWu}5%)fb
z&IY+hpDL74?+o#2G2nFW#Jnc9Aw`+9?X(Dz>pd+7jUn>(A##;!<(wahOq(x}m?Lpx
z!-o?9h>PvviR9|}VIo+h51)xxWDN((ou$bCeV(w_ES@fxak;7qiAU~VW{QH{D^KD}
z;jchm^5t#L;1_DW(cI?i@*rK}=W!$|83}4+3D(qRYHRV0U?ZOXx{qbiMhbw&5+)QX
zdnRcg@LPopM1k|?M*C`N0-rXo*M%0eX`7c!E<MzpfoHhPM*Hj{4{fu3^jgtEO)9cI
z*T&2nv*l`SRCxW-`-VEK!m0^a{dt#;t|J95Ov<gV8$${0-B=_FY>B6M^RN>rU}>2?
zCRbl76MRjA2CAth{s`dQL)eOMGH70<MlLcrYJ)G-JL+5+=e4!d`_8!5=w~PVXVN;3
z<#Vbw==?+AJI&r1kd(Z660Cl1OiZ?G#ORUy2IEt1uAP~RpPQTl?P5GX!;f|{5^v*D
z?u@o97LM$HmmiW-;ajneeOofLj)d(Vp3&B)8wC6qeimV%sIk9GcU$?n1^58<IF(6O
zNZ|guw@CAdXb+B;!8pTv`iC0$a%H{il!_-T;tVLf(&xfbNaR~Vs;u!)EBi$j4#$E;
z2?laR<%XS0pR#i|*Cy!Sq5AZYPamfNDS^opxPK7hHd(D2lffWfh&0~=0xJfd#qnTj
zYL*`wL@P{+S&p+kYCB7K;U!Mb&7k=6C)@$U$+ZJ$*7Nh?XO8Yyn}f`r$mKwVz=5k9
zCXaU$?|+kb+khUvPduC#`9zOB=To)@37r}T2}I8kg~#=8{}fQ{Vs<IAar{j|2M<Q0
zTZ3eXB;)8cyzB2F@;Jg4$X@n9UXrHmvItc8<3E45w1rRN!|wXEnRPRzi`8iXe(b8U
zpN8G{+UBR3e;v&XA2n&a9XuH~!1_W@xhSx^hU>tU^~kb=-EFTJu3VRAbbn|GW|KCV
z)+N4a-}Z@Ckb`E>8g8C1CZSxd$6?s6`d{||25Nz&IiGG9h1y1C=B;G^jq61$#6tVf
zBAu6^wyuY4|I#;VpMYI$n0_Xn02WRh>Icjvz@}yCmDzCl7WfZOG6Azg<uZ?2n@^H#
z;GUE2Vlf@Yva2i??D|Nv7Oct8?kzO!qT$G`=M2ktGRwY)@g4LsPh&Mwpo4MiFGJ6+
z1DNby+cn2}H*EfWb_W4wSG+pTc4ov~!dOg?RBmeux3v+bPu{9GEf_pX7DEOA|A$9=
zrdMZrgOO3Sg1px$&NGhA=it|x7FA!zMXXe7qUJS>>>&T3X)U-zQxCoLT8=+e89F9K
z-3P{7C-Z(jHad@mWk0Ee$~?Vda^>&{<$&n)sw{N3yM7=tA99fAuu{r{W+u+JNb~YI
zT>x35MDC;&?Xj{liOh#Gj7|{g#U`oHs$b?6|3jApl?VDyri7<C8wFiI0P40UN3AP=
z$CxCK;oEA&oZea$az{n<y;<<**e0t9=uZ4Gr7ZDV3nBgVX7jl(oeMtw)pW)mQh-<a
zCIJ|x<50;s2AH2iBq1!pcSnlru^yuaamRgWifF#h{u*=x{_h_oh48Np70fC{l9Q~)
z2;;DNdD#_}1Cvolb;SK3oIIbMmD&|?P_^sGBx}DBsn$D5OvH74<Ct%r*%6I=MV;7b
z=`TjW0J=+ne+;W3RhSnUrI0G9D`Pq*lRY<W<nlm50e01?<xCe~-cY-2Qjm2fl`<b{
za~9x*KASneDxB*^ke+E&d=VTk5#h8aNtmf*6bDJ<u(vxRinM@ZX+k@j)MT*}c6nC6
zs=P<rj@+zA6*wO36(+prJ+OKh;PUPvEp}i%&i$*=L$^nm>!y@V=(zQ@6(T=gj_n_x
z^5?Ivlf}(al5v2uYo{{{(T_98s3%d)hG_K>=VC<?k(c#}ZB2!Um&_AEe@V(!re1DL
z)0dQaub<D$V*@EJNHV<4tnWA9dA;yTQ3zvh`QtHztDu1&Pj1PE21d|ITbq=yt(tSc
zHP=94KG4rTo2Y42cV60|{PE1~pMk?BR=j^R8xBHa-i)yFY*1O!cn!|L;AM~T-3Fl*
z8tRSEVzYw{|NclP#Abq`-l!wL7?S1yP<Mg-j`P#Wq$&s!ua2vs2poz%-NJbaQdNM4
z!G`*Ohd=&vBma;3|BZtDpHlxfSM&eVar-Y_@_&>1UmmBb0zAV1d=2y8N&m0ElK;=?
Fe*k1f>W2UT

literal 7077
zcmaKxMN}M&l7$;<9D;jrhd^)%!QI_mgG1x)(73z1TY@`j+%>`7z0qKq|1D<bE#6Gk
zqE6MRQ|qtpRgs5-#{~cYNPrEPe1o<<DUW#+03eA703iEk>JIwmXwB;E>SSwa?gnCY
zuyiwJQ<D^xP?Y@SV3DS~5x+K!*L$Q+TFcg4Bcrj4%i5@9Kq$3G7`3<9b<&9*eGo+|
zn^I<li}6jjpGwB8R5qv>A$k*$VfKZqMU{GLhFPXzoBo*kPS9EgJkMlzL}izh%m4RC
zP`E=Zjn`u_2mcZ-FTIy{t}MFPH;r{lVqx)sE^lELPa~fD;FBglElH$rid%Lf8|U8W
z*>3PBGlBe$%GrR^T3)!6oOzoqT5EUzUG`|BxT=K?UA`-lO%0|%DO)b4JDIfM6{X00
z|5s0@ALC!{ziDNv`O2AnJ$jKI;f>!CjHcHW8<vtNJ<nZN*{|(Cq*ZQn7TtMY{KMBd
zj+QW7Jxi3Q%RAxDGtb3oU4D3LS{B3q)K9vaQ5uDwawby7t8zl*2=!K@y_NrZ${V5c
zc6{>~z!HeFstj80aIXK-z3(+|>1t<+sgHjMHzrCdIffxj%jMcwe!p1NO?-lJ*1*Db
zT{d2{Jx<xi>IeAcZK$=tFuGJGY6-2C2Um}~7<9_!yPZr=c~U|~pPE0=lP2EmTj4{1
zx5sZ14EErgkvG1}tEXA(fvs9-cRE~HWali;Qlx4~BfroFUw}_1bmBxNWB=CnZWz}i
z(v~%+E(8P8U{I9O6fqo?KNu_3d9Auw^4OoiCr9JD5XTVuO-}K}_j?l)7WK3o1TB||
zqwiOl5bX%^L#Q@!`K#%lKhT9C%pZOdF<1D?_*-m$<zlV~j2Cuqb|VkyW1I+#*@X8%
zG2||`H|Rz}x_;6z<Qe2_0sS*hE-z<8p1zH;tlJ7J^Xez9)CmVSlq$6A50CRrN;9ih
znF+tDWky&jeWx<A<C_Y5+>wi4?f%e8gkNv5<cpnFK%a#ZFBlj9JnoJ`Qw}O7g!eeZ
ze@;kG^qnUQNSX~M`&XCiJ_R>IiNVxhdlvUpca`#EE~@!PXPjkBwF=E(6$ZvU%UKop
zC!m#2w-;0Gnw78Eqb$aki0uM4@+L@dhV!$~tu5bc5$!1x?CW}YDiL?{bOzo1Za|o#
z6-SdtwVD(!LJ6fruz@)^OzieoNEseVCxgKbT<DtkD$!sbe5(sTEK(c&FlgCB6sWsD
zgQiBgz`vJcMG|s7GsQq`V^hiqqL|D?oPR0;HHd%ho+8{J$qq@Y3Nn6S3|iPefJtrw
zLX|3b0<AA{fOe*Mgxs76Mu(u)KBV>y2ILRc_T}Wz95|D&qa0pQteE_$SC#yw2Vv%n
zkPt~r{sR%MbK|4hX-KJ4R_x7Npt1iwW~H?|EF`!iqI!Iyy*x6gcyUE-;2<qeD<F2;
zQ2`#V|B5R7+T@p~042P(Pw|JkEk%mjCbeARpJ8DqZd7AJhX|ZQZl$z@A6(#UIA=R@
zf;afzTE(hi=udK!qNs-vnDeENdW@9ce>U}`0C<zvL<+|_wLJMgX(hk;U`m`~`!<cX
zR0WY;gXwOG+x8EqopCuT6jhhFv)WR(cF~KAuaF*k`Y1=sOMX4_*0uP*@LzvytSR?^
zBw?9!0Jnx&g%#!Af#Mu^7=B!2`{e?utR_iNBj0z|@XIFghdOglDo(nh=Auf+9K<2^
z?rH=Bp^}d`KM~LqQAi~1&Q!R~XsmYVKP7H`$W@O=jg#JgymLlE@C_m-TTpy(N(nWT
zn<I@H3RX-;FJ8`LTI5KZStR|K)sfG3?^dT1bliduQ}t^Gwm63>a<!>So4R+D*?~~H
zgNx;JkAAy`wPumHI(>+z0H=Dq;m~#RB9E{{tG2?Pa$qRF<&cBC)}(I`JbY1r$zANj
z0P+;EnvacZgkh!$Uunip+Za4|K(WvxKjQopS=@$#{rq}_g5oW~0(j6H2zYaj{)mt1
zdufj;Y3sDVPyT6v!K0w4_LV@AJ>Dn=i@qoI!1}}!<>NksI}p=N;L66)Hg*cDh9Le|
zoFu@kocJdpFY#!}NxMov(;jtL?ILpTwoNwk8eZleHuE`bJ$XrWp*p(_yq3eFKqpc3
zK7{|HOSD}tlhntVD=mbzALugN3_TQPQEM|NK(vzi`7cP8zj()(g8G1_J{Sj@r|MMx
zn12PTfycZZ@!<{V-!1_={x#(36_eSf53Z-VAqt)EqkUIZM0L)osu{k}^5cuh`K!9@
z=O$*%fb4gSYg?{%;5sAY*gCu=c!81EIfsGnnjucNZndSnSd~x7rq_^dfmX+59TW;-
zokJa+J092CC7=J6(WqHc+L%XWY9v#`TC4Zx?ZSgnB(cIL8jCJ?i}jiQ#G-TrCC;in
zpsIqWsq4_ytw<6zKlpAVt?gMfC*T;8_>oZkO|<_nH>n;vKlVVCIMKVp3E%W!*nv7O
zI8+{bz#H;Yn9b0((9$WDqGaNbP&)Jp@o#aLC^L`c-nBV%^`G6i6AgVd-O4U&SWB^^
zvOKsexDs0jTNA%{FYZfYs*la*D;a<N(&#j8oFk-;bdgMAdt*nDTqL+(BJ@MQ+ug;~
zXcO%dJ^&hL(kK_RCnSCc^6w`dT!(7UUE>82o!n?En)X{Q%IjylZjzX_0<(KX{C<Ty
zv;hwMs@Lj?+ZBRNykcz)NLI{01?FKIUG+^L)yFU!m0N6(?ofJ`XcpX&g7vaIWEZ)L
z*9R(<Ws9sFE)7z!ud1nr!q$BPr&$4K5;MI|A=sbO=VaP?7a3(uy={i=yepB%oY)70
zdRPg1=2q1cHE~$;K(55gST7tok*Blt-XGACSz_VW^d=%gRen1Tc1BUhv$~gC23)zd
zm%9krltbKeh$}(BA9|eib@Tg%3ixhV)8h&tMHHy5)Xq?Z0#XiVb%JEjn!%E82${Qo
zO?l*H&579l9(O-wCyt|JJs6NFC718jT8Uu9d!w{0ctNZGT_V}bsSdu?L!1Rhs)2td
zXFKepiVq#D)-B-cg?V*`v}@62(!K3H))Qrm&isZQ-6s%I!BX^K8^YjJ;V`-hksDxz
z9cp-7ud9`n^9zAOOHIWz4b8<f&*<fVx#3zsfy4u4CMFg!%L*~wKc8|B)7hCkobyj5
zdCa+>mN+758mH!OpB0rc0h6G3uF;5<;)mO-#mad>;uk6FbngUn52vLTJ!^LRlJ)(v
zlPQCwrv89xbxwFbo>r6!JHjK)TyBvkx^5+uktRG>T>P%z!JK=7!;eogbnY`aK0jkK
z$n4*U)J=v3xTIdc1#!47!_v4Nt+Vmy6F?5(j68I#y~#xsR@+)_uGWPP$KlLfu%RM>
zpWoIeml@kv2@EDXp61VBk?YndXa7vES*bAShNGjJpxXNaXO(M^qr#fv8`4aX0{Y@L
ziRQ@D`%vUlrab+1S=QlR@6a}J@%1W5mD~$fs4~{aH$)1r@VDh49d_<BrtgGBgJwF1
zpF%d6Zv$q9ca(!(eF(e-S&T}Kr-pY!QknrkDtctO6TV$xTs@er2G5qyMi;A)Jtf>c
zzWUJFcldmFPGvk&gGL>LoDsv{Q(Bl^UwF2JP?E1Z#SS)`r~@CO!QA3gIZUXMUFV#}
zPR>|PE&Y}5Yc;z%UOiFjVWA_EHdw7@Xb|rUe=pLD0%?HEA#~|QX02E*N%gsKN(#1N
zidte<)YDyzy}?~1L=k>_s_K)LujwCSvT{eOxC`)6_N)?3k5-YKCu(dP^~es5I{h#o
zN_OEWAI+Cg?XkvOXhc4+@-xYL=6ZaO8|fRl%KyOd`adwdC8HDm9TNZ`W&i+4{|^{e
zmzPyg_!kT7ojH<>;JwdO5Y7s-%<a#6ga8vsi6V0NV9$SpQw2m+Z6dqGT?Y>?t*o`V
z;EH6__JO#pDtCcFuy0qLpHIu<Ur-jA_mQ8G-lnrwNF?P^wkKTqL5J%zp3~0kgl=a1
z+JeRG0{Lk3EPo^rI*2AUKM9U7aSDJvA?R0~o;^5BI2Hm^f0m@Bz(X2CW=R&D_IMnl
z*yfP#DAznGxzth#?7akRS-L|Gqum0NYI94-Ou=8x>wKt2k~}AlE63QP#5|+fL;>Q-
zoN7!>3ALV8ywAIbac0$|2E*lv!PtNdkke1+I19f3pGiNu2w*+F-$2O~lOkC<2yTY-
z7wHZMBemp0z+>(vM&FbEa(7Ik?m7AHvM;0{yGa(8FDMYp5S(OT8&=>FNv3`6^q(_S
zunb7cI8vvT0#AwskSl1iGlx_0AD5|epq4Mai~iXJm+yVi-Ew`NI?1Tf-o3*#yLY|!
zyI(jd7&@(3Qg3=Ty+6H+SxTs>s4$-ETncQmy+>=vZ!n5p3RD(0?it)m`2FT~pRC=j
z_qKN@Sc@2LT|@BuIfTezWy-dAf|v&9$fsVXd9YG}#R83uf-WsY@(@9bd9$Sd3lEJ>
zHdvtynMbxJrEru3?}$n#EZ<8+f0P_b10JPYh6_;$j@Tl&1SLh(&4{KFzU!>5oYuZ!
zs7>OWuK`gD@CD$`Vk}Ht)5MNWb!x(&{+#tiQGiDTa(s79%GEzdR6?v9j`%L_<xmG2
z{oWJFlDfYXgkX6=ny6ADiH$G@{AWJh7U6D{40)xxFqp_SQi<12im>VV<iYIz03nD<
zCrKT(lB#`ae?eNE`p}@`F8Kulce8QwROb%&)Xc{9swyE%K}|@xC~MAZ;GMK>pF-C(
zM@@EO!2EsTWc`}rWCIk6heDyNo|W{HF-S(b$^UxXpA*?jC_W=brf$$&m-m>GAYw^6
z=#NDqXd>8~`8_^B`0i<`5uZjTQeo`{Leq2w#+21`m|<A4<qM4~e!i7BXnfK*THZL0
zU7ZW4N^tlocnF#;#+9g_o~IzaWelg|ND+0TlgR@qdWSCx-wN=`)*$k@F$eBbc#PA4
zsMGXpYk#ozr6C^gBdy>mrKB{EvqjcvUNc)Ee9Bc<$?ID7rgF8*#}hUB0GjWwA5ft3
z+ODO*spP7VRxu|SD3Oh3*{)Fd)NK{SzZ7FPl~EcPPc^<+*vP1`COFP_U>JiY@Y$#W
z)ISn!!P4*eb;D(R6<Xn)pPjekTnuu0AX1xcvgXS9qzf74egCO(aWwEo)BX;mz3JMA
zB@L`qjTa-KO?=cD(i62MeR2%8$ggS|KOTy2FKiZ3GA%ZPdQ|oAtR&v?*^*mE<9u-W
zCXn}&5q4>kODSa-7lcx+D1GmD^a^SGk}i;3g4EkBOgCdRfA+-0RA>nQcaL;%Kqf!I
zq>Ol`gJjTbjF6_bPX=3PSU1&IGo6;Gx^zQg1vV>;!CI1(Q&tHK`9Z6@B$>hBUjn6a
z5Jw}AceIq4ZQOh@(>P{0*GEM)9;`IVpQI*?j}2{?LP~lojD<V=>E)2Exf^AHRn4Jz
zu5OkNF9|d#Xrx!6T<?lTm%D16Ryk!~W_lb$06vW;mL{FL`Sf@iLfK+8valH~40oj*
zYnyp3))O&gGnp<D+~HqBoE8P`Mr|lF8WCJ?Qn`;$sSa#2YB46d!(YFAz}#1hZLg&=
zwGX#tfq}5(2L~hBNywxAcD2L9b1bQkdgL<6d)j*3`l}eW|4>rqoFgQScb~->3GYk#
zVb1jfRf4o^^rFhZm&VMD>2&;Ufm)m$wP3wS3hJAg+QhayAA{$!c`%DgA9FBOmsNu`
zCB`O5*S!i&Lm7gIkc^OZA@OBcOY*3hNJ)U6A@`MFqBDW@)C|!IBBom+{Yn3`a~CQV
z&na(att`R_R&@>=ncrUCQU6jWjV{L(Wku@@P!-<+)?a>q4Y?#dL7%0m>zGeNIkU(v
zkyC91pmQ$DZAs$dkmgYAD+*=e<XsS=Fm7(FgFH`*HPA1?j~9x;+-Lf;7j-HJbiruQ
zVDv_@0>{OshXR(Y5;reS6h-_$C%We_b#Jt67L+ooT7KA&D8_*BdozmDNKO+)XB@@1
zab9YmK%2_`!n9D*TG<7;c?6;shf>Xalho8~Q_G?r7;^U0<~(%`^+eJZ0y8pc61jbg
z4l)ZupBjroVE23fN}%RAvrXA_*yx5E;f2IyY0LaB5Ci-WcdzPh|5IQUZl8MaHhTeL
zC?@-WyQ~Md{A>D6K<4*kDgNG%F4WRqcA^B`{7}v}qKY3Xk=(I3Nu>sLe4Y>dIfuFU
z?IEI}3l^sOb86WR4G)u#<R5vuZ?EmsD}Eb8@ORa%s#OBg{($EMZ?FfZ@+}ihiwGkR
zvRjH5M_HepoO+nni&fm6&Z7H+I7_HM7AK3c!579N)N$~j%AKb|{I@@r#(`%Pb-e{F
zkym|<6FA1up?u;m$^+qd<N!-Z{Zg|(s&BiKHC(Q1!M@WU`x_b>!v4H(ppza3A{TKG
zX1QDc;pfVP5(`oCdY$%OJo<}h5@x(&sv`3n|5Kg^@sM<LCf)06OSS9hJajlXP}f0A
z>5sM6OPBLay3{ur9F|B{)#vh#7Tg`mLMm8!hFlX&qidiEMG=NkHJYXh5RsG^-v&Fq
z22OPL8e(3q+m6`UvEe$*L^6i%iZ#|@$Lk^SeFboD)u8HcF|oHGpy1f!N|EIo)1^^(
zOp1Sh^S<MYDJ+27yYPYmW2HfT>cC0yJ(g4^Y{eDOt>WIRU%w(D797zr8b+)n9Uy1C
z@_gAzZlVEquP^ygC39sXJyrhm;+6Mq6U0X@<W!dU1VG+7R*S0InG*K5B(~Ql;2974
z7^ub8X>_D`dIy9Tu2oz<pa6{7^MUSsu9$&UE@AubRvl+wSsSUV;TJAbw@2e#5)bke
zPa(^r*Nbu$Oy&wx3&?Zw)I^WZv029@2bI=)+liBaAWY+0Y#(Ym!a|(<9d~-Ku?3{T
zP@K@2gy`7XSqW~86$5M!=feCb!9`WT0y%RAgjk$OsSsVo6XqU;9H{`&@y<;pc9vi5
z6m&9>bkyGw!5)xIF1w~?Ad;sqQR{3xe;esaS^X?}pH5--Es1rc2W)9uF5CO|496pq
zs}^Q>x)4rI2Lc$`-cfU1__bdwBDV5DTMdIBXkdt^b@e?G>TCf}jXuhD>U$3Yl*{IV
zVj1Vv4tU=(3>n|M{tf!F9knN>6EN$6;;d)Eg0+zn<xp6&+=gRD0H_ZvD*q#76F~)V
zpCLepVY4usT;@_=wT3iD)?#$%X<!*?@HW0Kss{1i(z=JjF^3eeu6DaxdB|8wJgpmC
zvMbGdi^bdFWFgNko;zm0I27PyUB!+-X4y~_cy*}O4k=2Yu0$QA`XqmO=`Qb@umpR5
zcUqCTi~a@@!zXJ}I<<~N7NUj~nD#~#hCN;_&ve{Zc`V`WCBGgW>=(SVPRws!vsef&
zH|O24B`%;(PAB2W?i^jc2ZWOPC=w20v1UcKD7@N-7mt*eAA>Gb5gT&)E~0szHcJIW
z@TJf@Rd5B*1eKHL>6-HB_ngzZq+o69vd;}e&S&`q0wUo4xUwr@6Wbb4eVthOEyV-1
ztj@;Zk{h&~!pBz6o$2WEilZl0;w;Ox#Bz6r|FBN7N#)~Pe{h%cR)HBMn~*Q4|N45-
zHdSR}uJt>UqSY!q1FJJBb{aXunCSw}Eqf3VRS|~qaKmiD&xzg)Aso?zv`9Ae2u5#`
zVWE~&a#ZA-V~_>NPu@A{i0D0uO!IRuEOZH`m<Bhu+ClT<DrT-Uzv@coJYiHv>p>p9
zYrYg0M{QwPbHnmZGdjvgh=pKA7j5T8UEvw6h?F$a@|J#F@N`@b>yJ4~3m-Q5=+sW!
zwpuoY&jk|-f#neN0WVhCrKOiIR8zmZ!QGzWAGK#EQ-3y8YefmUn0Iav?8zueAfV0I
zR;>uLBUNg^!#@w5WK;y=!ix=^W;s8a&S?Lwzx)}tv=@~2O&W7BUZBHikeLB0@ApD#
z{N@%c_A3|}JjHS`D`}#*h@q%n1*3V<UMMfmy4bHbNL<EU9%V`Ki-Ji^6Jftm)S-V7
zC=oXWqNJf5$0g!BhV{Y2*~4ykYv*T}+GwMM421K3PxQ6pjqOK1>%mhlw!5;j4``*Y
zy?A81!<;dxC(r$pol<mUmP!-FWpoD@dxstlE8Q=j`B0$qe0O)Y6tf_VoNc%e^wUtl
zkdA=`L=zy$8^rvzbxp-g)?Z{15hOIGqh>dMSm*nge&p@@+N(;ae^u4;DTgeuOQTPm
zOVFK7`=^cLaeW=P%Q@2ePwr>l%Z=YbN_}IsY_pB-m4aQdOs#0e%Y)^1#Y;(=xq3X%
z;io490uja5&<ap@zsK~u(^^z!-r{R~1M0bEu&+Dg8TMG*upzZ3iTA?Ea&o1;g;;0y
z_PTY-4ix*rf;lO*j3bU)xklabqyvS)g&;bD2^niFYj^rK*uVU%xUeosf%^D9|3Q{Z
zW}P-X8i{8O*V8!T1nlySdsJEDHxwPi)a#3&R)?@IU?mE8gx$0t+k1C+-J>_R#@Tp=
zj7`~GPWn)?YxLRK5qfOsOP#dv<P=vgv}Dxf)IP@&h%oyR-Ia`gXT|h;^L0;`YSkpe
zx23{<J5Q}xvU9~mp*N+(j8G@-o#}PgUvRe1Fvy%;%i0%k2J(lbun}G@^qWsh_h)fc
zC+kKOaf=$a+&Qs9@<KQ9lApP7U~AF8y_!QQr+y`(c(=DF>aJ&=f0*F%)>GF-*01qi
zg}t^{D;`dPni};7P+JCmhR>I07%S|p<$f&+OToX??;f5Jv2G+W@D`yFzeJ9UvN0>$
z8=f0Bw4W!S9u>5s&}SZY+AmefIlsKD9n#8}CHzYfv2HbQIayFGk}zj+ty~0*p+T)d
z_n19Q1|~3Z2?Vd7N1K0T2A@f~6vs8kcIV9cc!aimgH7mT)sG`LjXN-qcH0C$wR9n~
zAQGQP+|PzY_&6Fg$pdkFscT2HG?%=B19}JJ89PiElwkd4=Rw+n<k;LMtl}lNm+zYJ
zTl5yn+Pc>jX!oD!oA~%|*Yc~rl$+`kRlhRlepYTYrQAE5my&jCe?t$_>FQ|u>G}mI
zpxMnkd6(J1*twL(Xid~fF4B;Un^JW!^8Q*)Bw)m8^`vB|o_eKvo@t9TE)1gTiDv+U
z$u%f4l4jq=d-J40n>S2LgwJHE@+0Y}HUU|<+OjD5N4yjI-ntsouk!dD2=yuqOlohg
zRBXHmrrgbxH0g1cA_V+(Fb+q5Rpen{aRL9g_w~=m|8MdCI${5Q>OUz5|9b}=^*@_x
Y|E(ja$Rhy%wGI1Eru|c&iT~C87r-us9smFU

diff --git a/skills/using-projects-meta/README.md b/skills/using-projects-meta/README.md
index 4e3b9ee..612fcdc 100644
--- a/skills/using-projects-meta/README.md
+++ b/skills/using-projects-meta/README.md
@@ -49,6 +49,32 @@ wiki content. See the table below.
 | "Has the **shared** wiki got X?" | `mcp__projects-meta__knowledge_search` |
 | "Sync state across machines?" | `mcp__projects-meta__meta_status` |
 
+## Step 0 — Freshness gate (v1.1.0, mandatory pre-flight)
+
+`projects-meta` is a bus between machines — another host may have pushed
+minutes ago. Without this gate, reads return stale data and writes hit
+sha-based optimistic-lock 422s with no explanation.
+
+Before **any** `tasks_*` or `knowledge_*` call:
+
+1. `mcp__projects-meta__meta_status` — probe cache age + errors.
+2. If `cache_age_minutes` > 10 OR `errors_count` > 0 →
+   `node ~/.local/projects-meta-mcp/dist/sync.js`.
+3. For shared-wiki **writes** (`knowledge_ingest`, `knowledge_promote`) →
+   **also** `git -C ~/projects/projects-wiki pull --ff-only`. Unconditional.
+   The MCP server uses sha-based optimistic locking on the wiki repo;
+   without an up-to-date local SHA the commit is rejected with a 422.
+4. For tasks-mutations (`tasks_create`/`update`/`close`) → sync via
+   `dist/sync.js` is enough; there's no local clone of the target tasks repo.
+5. If sync returns **401 / 403** → STOP. Token is dead. Send the user to
+   `~/.config/projects-mcp/auth.toml` to rotate `gitea_token`. Don't
+   pretend success, don't retry silently.
+
+**Don't sync unconditionally** on every call — overhead + 401-risk for
+casual reads. The 10-minute window is the chosen threshold.
+
+**Don't apply Step 0 to `meta_status` itself** — it's the probe.
+
 ## Two operation classes
 
 ### Read (no confirmation)
diff --git a/skills/using-projects-meta/SKILL.md b/skills/using-projects-meta/SKILL.md
index c1a5898..bbadf40 100644
--- a/skills/using-projects-meta/SKILL.md
+++ b/skills/using-projects-meta/SKILL.md
@@ -1,7 +1,7 @@
 ---
 name: using-projects-meta
-version: 1.0.0
-description: Use when working across multiple projects on one or many machines — cross-project task aggregation (`mcp__projects-meta__tasks_*`), shared Gitea-backed wiki query / ingest (`mcp__projects-meta__knowledge_*`), or sync diagnostics (`mcp__projects-meta__meta_status`). Triggers on phrases like "across all projects", "what's on the boards", "check shared wiki", "search projects-wiki", "ingest into shared wiki", "что у меня на досках", "по всем проектам", "общая вики", "cross-project status", or any time the user wants to see / mutate state in another repo than the current cwd. Mutation tools (`tasks_create`, `tasks_update`, `tasks_close`, `knowledge_ingest`, `knowledge_promote`) require two-step preview → confirm. Skip for the **current** project's tasks/wiki — those live on disk in `.tasks/` / `.wiki/` and are read directly.
+version: 1.1.0
+description: Use when working across multiple projects on one or many machines — cross-project task aggregation (`mcp__projects-meta__tasks_*`), shared Gitea-backed wiki query / ingest (`mcp__projects-meta__knowledge_*`), or sync diagnostics (`mcp__projects-meta__meta_status`). Triggers on phrases like "across all projects", "what's on the boards", "check shared wiki", "search projects-wiki", "ingest into shared wiki", "что у меня на досках", "по всем проектам", "общая вики", "cross-project status", or any time the user wants to see / mutate state in another repo than the current cwd. v1.1.0 mandates a Step 0 freshness gate (probe `meta_status`, sync if stale, pull `projects-wiki` before shared-wiki writes) — see SKILL body. Mutation tools require two-step preview → confirm. Skip for the **current** project's tasks/wiki — those live on disk in `.tasks/` / `.wiki/`.
 ---
 
 # Using the projects-meta MCP server
@@ -56,11 +56,49 @@ Use MCP only for **other** projects, **other** machines, or **shared** wiki cont
 - Library / framework documentation — that's `using-context7`.
 - Code search — that's `Glob` / `Grep`.
 
+## Step 0 — Freshness gate (run before any tool)
+
+`projects-meta` is a bus between machines. Another host may have pushed minutes ago. Without this gate, reads return stale data and writes hit sha-based optimistic-lock 422s with no explanation. Mandatory pre-flight, every session, every workflow:
+
+```
+1. Call mcp__projects-meta__meta_status.
+
+2. Branch on cache freshness:
+   • If cache_age_minutes > 10 OR errors_count > 0:
+       run `node ~/.local/projects-meta-mcp/dist/sync.js`
+       (or `npm run sync` from ~/.local/projects-meta-mcp).
+   • Else: cache is fresh enough — skip sync, no need to hit the network.
+
+3. For shared-wiki WRITES (knowledge_ingest, knowledge_promote):
+   ALWAYS additionally run `git -C ~/projects/projects-wiki pull --ff-only`
+   regardless of cache age. The MCP server uses sha-based optimistic locking;
+   without an up-to-date local file SHA, the commit will be rejected (422)
+   and the failure mode is opaque to the user.
+
+4. For tasks-mutations (tasks_create, tasks_update, tasks_close):
+   sync via dist/sync.js is enough — there's no local clone of the target
+   tasks repo, mutations go straight through Gitea API. Sync only refreshes
+   the local view so you reason from current state.
+
+5. If sync returns 401 or 403:
+   STOP. The Gitea token in ~/.config/projects-mcp/auth.toml is dead or
+   wrong-scoped. Tell the user explicitly:
+     "Gitea sync failed with <401|403>. Rotate gitea_token in
+      ~/.config/projects-mcp/auth.toml (Gitea: settings/applications)
+      and rerun."
+   Do not pretend sync succeeded. Do not retry silently.
+```
+
+**Don't sync unconditionally on every call.** Network overhead + risk of 401 even on a casual "what's on my boards". The 10-minute cache window is the right balance — catches multi-machine drift without burning Gitea round-trips for back-to-back questions.
+
+**Don't apply Step 0 to `meta_status` itself** — it's the freshness probe, not a downstream read.
+
 ## Workflow
 
 ### Read (no confirmation needed)
 
 ```
+0. Run Step 0 — Freshness gate (above) first.
 1. Identify what you need: cross-project tasks? shared wiki page? sync state?
 2. Pick the right read tool (table below).
 3. Cite the result with the source slug / project name.
@@ -69,6 +107,9 @@ Use MCP only for **other** projects, **other** machines, or **shared** wiki cont
 ### Mutate (always two-step)
 
 ```
+0. Run Step 0 — Freshness gate (above) first.
+   For shared-wiki writes (knowledge_ingest, knowledge_promote): unconditional
+   `git -C ~/projects/projects-wiki pull --ff-only` is part of Step 0.
 1. Identify the mutation: tasks_create / tasks_update / tasks_close / knowledge_ingest / knowledge_promote.
 2. Call the tool WITHOUT `confirm: true` → returns a dry-run preview (the proposed file diff and the Gitea commit message).
 3. Show the preview to the user. Wait for explicit "ok" / "go" / "поехали".
@@ -180,7 +221,9 @@ User: "close `[projects-meta-skills]` in claude-skills"
 | Reading current project's tasks via `tasks_get` instead of disk | Read `.tasks/STATUS.md` directly. MCP is for *other* projects. |
 | Inlining `confirm: true` on the first mutation call | Always preview first; show user; only then `confirm: true`. |
 | Using `knowledge_search` for the project's own wiki | The shared wiki is a separate Gitea repo. Local `.wiki/` is in cwd. |
-| Acting on a stale `tasks_aggregate` without checking `meta_status` | If `age_seconds` > 3600 the cache may be behind reality. Either run `node dist/sync.js` or warn the user. |
+| Acting on a stale `tasks_aggregate` without checking `meta_status` | Step 0 — Freshness gate is mandatory. If `cache_age_minutes` > 10 (or errors > 0), run `node ~/.local/projects-meta-mcp/dist/sync.js` first. |
+| Skipping `git -C ~/projects/projects-wiki pull` before `knowledge_ingest` / `knowledge_promote` | sha-based optimistic lock will reject the commit (422) and the failure is opaque. Pull is unconditional for shared-wiki writes — fast-forward is a no-op when current. |
+| Treating sync 401/403 as "MCP is fine, the page just doesn't exist yet" | 401/403 means the Gitea token is dead. Stop, tell the user to rotate `gitea_token` in `~/.config/projects-mcp/auth.toml`. Never guess on stale data. |
 | Calling `knowledge_ingest` with the wrong `type` | `type` must be one of `entities` / `concepts` / `packages` / `sources` / `raw`. Mis-typed pages land in the wrong section and break `index.md`. |
 | Vague `knowledge_search` queries ("auth", "config") | Specific multi-word queries return targeted snippets; vague ones return noise. |
 | Forgetting `domain="all"` when searching across families | Default `domain` is auto-detected from cwd; use `"all"` if the wiki page lives in a different family. |
@@ -188,5 +231,6 @@ User: "close `[projects-meta-skills]` in claude-skills"
 ## Red flags
 
 - "I'll just commit it directly" → no. Mutation tools have a preview step for a reason — silent writes to another repo are a recipe for drift.
-- "The cache is fresh enough" → check `meta_status.age_seconds`. If it's >3600s and the user is about to act on the data, sync first.
+- "The cache is fresh enough" → run Step 0. The 10-minute window is the threshold; below it skip sync, above it sync. Don't eyeball this — the bus moves fast in cross-machine sessions.
+- "I'll skip the pull, my last write was 30 seconds ago" → another machine pushed in between. Always pull before shared-wiki writes; the sha-lock check is your only safety net.
 - "I'll skip the wiki page" → if you're answering a cross-cutting question and there's no wiki page, that's a `knowledge_ingest` candidate. Surface it to the user.