From 47dd6367ee39f87e45986c516fe0bca7e864702b Mon Sep 17 00:00:00 2001
From: wasimysaid <wasimysdev@gmail.com>
Date: Sat, 25 Apr 2026 04:40:21 +0200
Subject: [PATCH 1/7] fix(tauri): dedupe tray and brand nsis installer

---
 studio/src-tauri/tauri.conf.json         | 22 ++++++++++++++++------
 studio/src-tauri/tauri.windows.conf.json |  6 ------
 2 files changed, 16 insertions(+), 12 deletions(-)

diff --git a/studio/src-tauri/tauri.conf.json b/studio/src-tauri/tauri.conf.json
index 49819f8a25..705cf0ea94 100644
--- a/studio/src-tauri/tauri.conf.json
+++ b/studio/src-tauri/tauri.conf.json
@@ -21,12 +21,7 @@
         "visible": false,
         "resizable": false
       }
-    ],
-    "trayIcon": {
-      "iconPath": "icons/icon.png",
-      "id": "main",
-      "tooltip": "Unsloth Studio (Desktop)"
-    }
+    ]
   },
   "plugins": {
     "updater": {
@@ -42,6 +37,10 @@
   "bundle": {
     "active": true,
     "createUpdaterArtifacts": true,
+    "publisher": "Unsloth AI",
+    "homepage": "https://unsloth.ai/",
+    "copyright": "© 2026 Unsloth AI. All rights reserved.",
+    "license": "AGPL-3.0-only",
     "targets": ["app", "appimage", "deb", "dmg", "nsis"],
     "resources": {
       "../../install.sh": "install.sh",
@@ -54,6 +53,17 @@
       "icons/icon.ico",
       "icons/icon.icns"
     ],
+    "windows": {
+      "nsis": {
+        "installerHooks": "./windows/hooks.nsh",
+        "installerIcon": "./icons/icon.ico",
+        "headerImage": "./windows/branding/nsis-header.bmp",
+        "sidebarImage": "./windows/branding/nsis-sidebar.bmp",
+        "installMode": "currentUser",
+        "languages": ["English"],
+        "displayLanguageSelector": false
+      }
+    },
     "linux": {
       "deb": {
         "postRemoveScript": "./linux/postremove.sh"
diff --git a/studio/src-tauri/tauri.windows.conf.json b/studio/src-tauri/tauri.windows.conf.json
index a68cf6351f..83f685cda4 100644
--- a/studio/src-tauri/tauri.windows.conf.json
+++ b/studio/src-tauri/tauri.windows.conf.json
@@ -4,12 +4,6 @@
       "signCommand": {
         "cmd": "trusted-signing-cli",
         "args": ["-e", "https://eus.codesigning.azure.net", "-d", "Unsloth Studio (Desktop)", "%1"]
-      },
-      "nsis": {
-        "installerHooks": "./windows/hooks.nsh",
-        "installerIcon": "./icons/icon.ico",
-        "headerImage": "./windows/branding/nsis-header.bmp",
-        "sidebarImage": "./windows/branding/nsis-sidebar.bmp"
       }
     }
   }

From 1729454db0306143082d8257998a57aa1637e602 Mon Sep 17 00:00:00 2001
From: wasimysaid <wasimysdev@gmail.com>
Date: Sat, 25 Apr 2026 05:51:36 +0200
Subject: [PATCH 2/7] feat(tauri): add linux windows custom titlebar

---
 studio/frontend/src/app/provider.tsx          |  35 +-
 studio/frontend/src/app/routes/__root.tsx     |   2 +-
 .../src/components/tauri/startup-screen.tsx   |   2 +-
 .../src/components/tauri/update-screen.tsx    |   2 +-
 .../src/components/tauri/window-titlebar.tsx  | 329 ++++++++++++++++++
 .../features/auth/change-password-page.tsx    |   2 +-
 .../frontend/src/features/auth/login-page.tsx |   2 +-
 .../data-recipes/pages/data-recipes-page.tsx  |   2 +-
 .../data-recipes/pages/edit-recipe-page.tsx   |   2 +-
 .../src/features/export/export-page.tsx       |   2 +-
 .../onboarding/components/wizard-layout.tsx   |   2 +-
 .../recipe-studio/recipe-studio-page.tsx      |   2 +-
 .../src/features/studio/studio-page.tsx       |   2 +-
 studio/src-tauri/capabilities/default.json    |   5 +
 studio/src-tauri/src/main.rs                  |  11 +
 15 files changed, 389 insertions(+), 13 deletions(-)
 create mode 100644 studio/frontend/src/components/tauri/window-titlebar.tsx

diff --git a/studio/frontend/src/app/provider.tsx b/studio/frontend/src/app/provider.tsx
index b75998a169..92783ee2be 100644
--- a/studio/frontend/src/app/provider.tsx
+++ b/studio/frontend/src/app/provider.tsx
@@ -4,10 +4,15 @@
 import { StartupScreen } from "@/components/tauri/startup-screen";
 import { UpdateBanner } from "@/components/tauri/update-banner";
 import { UpdateScreen } from "@/components/tauri/update-screen";
+import {
+  WindowTitlebar,
+  shouldUseCustomWindowTitlebar,
+} from "@/components/tauri/window-titlebar";
 import { Toaster } from "@/components/ui/sonner";
 import { useTauriBackend } from "@/hooks/use-tauri-backend";
 import { useTauriUpdate } from "@/hooks/use-tauri-update";
 import { isTauri } from "@/lib/api-base";
+import { useRouterState } from "@tanstack/react-router";
 import { ThemeProvider } from "next-themes";
 import { useEffect, useRef, type ReactNode } from "react";
 
@@ -119,7 +124,15 @@ function TauriUpdateLayer({ isExternalServer }: { isExternalServer: boolean }) {
   );
 }
 
+const HIDDEN_TITLEBAR_SIDEBAR_ROUTES = new Set([
+  "/onboarding",
+  "/login",
+  "/change-password",
+  "/signup",
+]);
+
 function TauriWrapper({ children }: { children: ReactNode }) {
+  const pathname = useRouterState({ select: (s) => s.location.pathname });
   const {
     status, logs, error, isExternalServer,
     currentStepIndex, progressDetail, elevationPackages,
@@ -151,9 +164,13 @@ function TauriWrapper({ children }: { children: ReactNode }) {
   }, [status]);
 
   if (!isTauri) return <>{children}</>;
-  if (status === "running") return <><TauriUpdateLayer isExternalServer={isExternalServer} />{children}</>;
 
-  return (
+  const content = status === "running" ? (
+    <>
+      <TauriUpdateLayer isExternalServer={isExternalServer} />
+      {children}
+    </>
+  ) : (
     <StartupScreen
       status={status}
       logs={logs}
@@ -168,6 +185,20 @@ function TauriWrapper({ children }: { children: ReactNode }) {
       onStartServer={retry}
     />
   );
+
+  if (!shouldUseCustomWindowTitlebar()) return content;
+
+  const showSidebarSurface =
+    status === "running" && !HIDDEN_TITLEBAR_SIDEBAR_ROUTES.has(pathname);
+
+  return (
+    <div className="flex h-dvh min-h-0 flex-col overflow-hidden bg-background [--studio-titlebar-height:34px]">
+      <WindowTitlebar showSidebarSurface={showSidebarSurface} />
+      <div className="min-h-0 flex-1 overflow-hidden">
+        {content}
+      </div>
+    </div>
+  );
 }
 
 export function AppProvider({ children }: AppProviderProps) {
diff --git a/studio/frontend/src/app/routes/__root.tsx b/studio/frontend/src/app/routes/__root.tsx
index 19b5763557..22d149473c 100644
--- a/studio/frontend/src/app/routes/__root.tsx
+++ b/studio/frontend/src/app/routes/__root.tsx
@@ -81,7 +81,7 @@ function RootLayout() {
           pinned={pinned}
           setPinned={setPinned}
           togglePinned={togglePinned}
-          className="!min-h-0 h-dvh overflow-hidden"
+          className="!min-h-0 h-[calc(100dvh-var(--studio-titlebar-height,0px))] overflow-hidden"
         >
           <AppSidebar />
           <SidebarInset className={isChatRoute ? "overflow-hidden" : "overflow-y-auto"}>
diff --git a/studio/frontend/src/components/tauri/startup-screen.tsx b/studio/frontend/src/components/tauri/startup-screen.tsx
index af5f241416..2b8a204afe 100644
--- a/studio/frontend/src/components/tauri/startup-screen.tsx
+++ b/studio/frontend/src/components/tauri/startup-screen.tsx
@@ -381,7 +381,7 @@ export function StartupScreen({
   }
 
   return (
-    <div className="flex h-screen w-full flex-col items-center bg-background">
+    <div className="flex h-full w-full flex-col items-center bg-background">
       <div className="flex flex-1 w-full max-w-md items-center justify-center px-6">
         <AnimatePresence mode="wait">
           <motion.div
diff --git a/studio/frontend/src/components/tauri/update-screen.tsx b/studio/frontend/src/components/tauri/update-screen.tsx
index a8b77ab1fa..e02c839d58 100644
--- a/studio/frontend/src/components/tauri/update-screen.tsx
+++ b/studio/frontend/src/components/tauri/update-screen.tsx
@@ -100,7 +100,7 @@ export function UpdateScreen({
   const isError = status === "error";
 
   return (
-    <div className="flex h-screen w-full items-center justify-center bg-background">
+    <div className="flex h-full w-full items-center justify-center bg-background">
       <motion.div
         initial={{ opacity: 0, y: 8 }}
         animate={{ opacity: 1, y: 0 }}
diff --git a/studio/frontend/src/components/tauri/window-titlebar.tsx b/studio/frontend/src/components/tauri/window-titlebar.tsx
new file mode 100644
index 0000000000..b3180e6663
--- /dev/null
+++ b/studio/frontend/src/components/tauri/window-titlebar.tsx
@@ -0,0 +1,329 @@
+// SPDX-License-Identifier: AGPL-3.0-only
+// Copyright 2026-present the Unsloth AI Inc. team. All rights reserved. See /studio/LICENSE.AGPL-3.0
+
+import { useSidebarPin } from "@/hooks/use-sidebar-pin";
+import { isTauri } from "@/lib/api-base";
+import { cn } from "@/lib/utils";
+import type { Window as TauriWindow } from "@tauri-apps/api/window";
+import {
+  type MouseEvent,
+  type ReactElement,
+  type ReactNode,
+  useCallback,
+  useEffect,
+  useState,
+} from "react";
+
+const CUSTOM_TITLEBAR_PLATFORMS = ["win", "linux", "x11"] as const;
+
+type WindowResizeDirection =
+  | "East"
+  | "North"
+  | "NorthEast"
+  | "NorthWest"
+  | "South"
+  | "SouthEast"
+  | "SouthWest"
+  | "West";
+
+type NavigatorWithUserAgentData = Navigator & {
+  userAgentData?: {
+    platform?: string;
+  };
+};
+
+function getClientPlatform(): string {
+  if (typeof navigator === "undefined") {
+    return "";
+  }
+  const nav = navigator as NavigatorWithUserAgentData;
+  return (
+    nav.userAgentData?.platform ??
+    navigator.platform ??
+    navigator.userAgent
+  ).toLowerCase();
+}
+
+export function shouldUseCustomWindowTitlebar(): boolean {
+  if (!isTauri) {
+    return false;
+  }
+  const platform = getClientPlatform();
+  if (!platform || platform.includes("mac")) {
+    return false;
+  }
+  return CUSTOM_TITLEBAR_PLATFORMS.some((token) => platform.includes(token));
+}
+
+async function getAppWindow(): Promise<TauriWindow> {
+  const { getCurrentWindow } = await import("@tauri-apps/api/window");
+  return getCurrentWindow();
+}
+
+function WindowControlButton({
+  label,
+  className,
+  onClick,
+  children,
+}: {
+  label: string;
+  className?: string;
+  onClick: () => void;
+  children: ReactNode;
+}): ReactElement {
+  return (
+    <button
+      type="button"
+      aria-label={label}
+      title={label}
+      onClick={onClick}
+      className={cn(
+        "relative z-[80] inline-flex size-8 items-center justify-center rounded-md text-muted-foreground transition-colors hover:bg-muted/80 hover:text-foreground focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring",
+        className,
+      )}
+    >
+      {children}
+    </button>
+  );
+}
+
+function MinimizeGlyph(): ReactElement {
+  return (
+    <span aria-hidden="true" className="h-px w-3.5 rounded-full bg-current" />
+  );
+}
+
+function MaximizeGlyph(): ReactElement {
+  return (
+    <span
+      aria-hidden="true"
+      className="size-3 rounded-[2px] border border-current"
+    />
+  );
+}
+
+function RestoreGlyph(): ReactElement {
+  return (
+    <span aria-hidden="true" className="relative size-3.5">
+      <span className="absolute left-0.5 top-0 size-2.5 rounded-[2px] border border-current" />
+      <span className="absolute bottom-0 right-0 size-2.5 rounded-[2px] border border-current bg-muted" />
+    </span>
+  );
+}
+
+function CloseGlyph(): ReactElement {
+  return (
+    <span aria-hidden="true" className="relative size-3.5">
+      <span className="absolute left-1/2 top-0 h-3.5 w-px -translate-x-1/2 rotate-45 rounded-full bg-current" />
+      <span className="absolute left-1/2 top-0 h-3.5 w-px -translate-x-1/2 -rotate-45 rounded-full bg-current" />
+    </span>
+  );
+}
+
+export function WindowTitlebar({
+  showSidebarSurface = false,
+}: {
+  showSidebarSurface?: boolean;
+}): ReactElement | null {
+  const [enabled] = useState(shouldUseCustomWindowTitlebar);
+  const [maximized, setMaximized] = useState(false);
+  const { pinned } = useSidebarPin();
+
+  const refreshMaximized = useCallback(async () => {
+    if (!enabled) {
+      return;
+    }
+    try {
+      const appWindow = await getAppWindow();
+      setMaximized(await appWindow.isMaximized());
+    } catch {
+      // If a window permission is not ready yet, keep the previous visual state.
+    }
+  }, [enabled]);
+
+  useEffect(() => {
+    if (!enabled) {
+      return;
+    }
+    let mounted = true;
+    let unlistenResize: (() => void) | undefined;
+    let unlistenFocus: (() => void) | undefined;
+
+    const setupWindowListeners = async () => {
+      try {
+        const appWindow = await getAppWindow();
+        if (!mounted) {
+          return;
+        }
+        setMaximized(await appWindow.isMaximized());
+        unlistenResize = await appWindow.onResized(() => {
+          refreshMaximized().catch(() => undefined);
+        });
+        unlistenFocus = await appWindow.onFocusChanged(() => {
+          refreshMaximized().catch(() => undefined);
+        });
+      } catch {
+        // Missing capabilities should not break the rest of the app shell.
+      }
+    };
+
+    setupWindowListeners().catch(() => undefined);
+
+    return () => {
+      mounted = false;
+      unlistenResize?.();
+      unlistenFocus?.();
+    };
+  }, [enabled, refreshMaximized]);
+
+  const runWindowAction = useCallback(
+    (action: (appWindow: TauriWindow) => Promise<void>) => {
+      const runAction = async () => {
+        try {
+          const appWindow = await getAppWindow();
+          await action(appWindow);
+          await refreshMaximized();
+        } catch {
+          // Keep custom chrome inert rather than throwing into React on denied commands.
+        }
+      };
+
+      runAction().catch(() => undefined);
+    },
+    [refreshMaximized],
+  );
+
+  const handleDragMouseDown = useCallback(
+    (event: MouseEvent<HTMLDivElement>) => {
+      if (event.button !== 0 || event.detail > 1) {
+        return;
+      }
+      runWindowAction((appWindow) => appWindow.startDragging());
+    },
+    [runWindowAction],
+  );
+
+  const handleDragDoubleClick = useCallback(
+    (event: MouseEvent<HTMLDivElement>) => {
+      if (event.button !== 0) {
+        return;
+      }
+      runWindowAction((appWindow) => appWindow.toggleMaximize());
+    },
+    [runWindowAction],
+  );
+
+  const handleResizeMouseDown = useCallback(
+    (direction: WindowResizeDirection) =>
+      (event: MouseEvent<HTMLDivElement>) => {
+        if (event.button !== 0) {
+          return;
+        }
+        event.preventDefault();
+        event.stopPropagation();
+        runWindowAction(async (appWindow) => {
+          if (!(await appWindow.isResizable())) {
+            return;
+          }
+          await appWindow.startResizeDragging(direction);
+        });
+      },
+    [runWindowAction],
+  );
+
+  if (!enabled) {
+    return null;
+  }
+
+  return (
+    <>
+      <header
+        className="relative z-[60] flex h-[var(--studio-titlebar-height)] shrink-0 select-none items-center text-foreground"
+        aria-label="Window titlebar"
+      >
+        {showSidebarSurface && (
+          <div
+            className="h-full shrink-0 border-r border-sidebar-border bg-sidebar"
+            style={{ width: pinned ? "16rem" : "3rem" }}
+            onMouseDown={handleDragMouseDown}
+            onDoubleClick={handleDragDoubleClick}
+            aria-hidden="true"
+          />
+        )}
+        <div
+          className="h-full min-w-0 flex-1 border-b border-border/35 bg-muted/35"
+          onMouseDown={handleDragMouseDown}
+          onDoubleClick={handleDragDoubleClick}
+          aria-hidden="true"
+        />
+        <div
+          className="flex h-full shrink-0 items-center gap-0.5 border-b border-border/35 bg-muted/35 px-1"
+          role="toolbar"
+          aria-label="Window controls"
+        >
+          <WindowControlButton
+            label="Minimize window"
+            onClick={() => runWindowAction((appWindow) => appWindow.minimize())}
+          >
+            <MinimizeGlyph />
+          </WindowControlButton>
+          <WindowControlButton
+            label={maximized ? "Restore window" : "Maximize window"}
+            onClick={() =>
+              runWindowAction((appWindow) => appWindow.toggleMaximize())
+            }
+          >
+            {maximized ? <RestoreGlyph /> : <MaximizeGlyph />}
+          </WindowControlButton>
+          <WindowControlButton
+            label="Close window"
+            onClick={() => runWindowAction((appWindow) => appWindow.close())}
+            className="hover:bg-destructive hover:text-destructive-foreground focus-visible:ring-destructive/70"
+          >
+            <CloseGlyph />
+          </WindowControlButton>
+        </div>
+      </header>
+      <div
+        aria-hidden="true"
+        className="fixed inset-x-2 top-0 z-[70] h-1 cursor-n-resize"
+        onMouseDown={handleResizeMouseDown("North")}
+      />
+      <div
+        aria-hidden="true"
+        className="fixed inset-x-2 bottom-0 z-[70] h-1 cursor-s-resize"
+        onMouseDown={handleResizeMouseDown("South")}
+      />
+      <div
+        aria-hidden="true"
+        className="fixed inset-y-2 left-0 z-[70] w-1 cursor-w-resize"
+        onMouseDown={handleResizeMouseDown("West")}
+      />
+      <div
+        aria-hidden="true"
+        className="fixed inset-y-2 right-0 z-[70] w-1 cursor-e-resize"
+        onMouseDown={handleResizeMouseDown("East")}
+      />
+      <div
+        aria-hidden="true"
+        className="fixed left-0 top-0 z-[70] size-3 cursor-nw-resize"
+        onMouseDown={handleResizeMouseDown("NorthWest")}
+      />
+      <div
+        aria-hidden="true"
+        className="fixed right-0 top-0 z-[70] size-3 cursor-ne-resize"
+        onMouseDown={handleResizeMouseDown("NorthEast")}
+      />
+      <div
+        aria-hidden="true"
+        className="fixed bottom-0 left-0 z-[70] size-3 cursor-sw-resize"
+        onMouseDown={handleResizeMouseDown("SouthWest")}
+      />
+      <div
+        aria-hidden="true"
+        className="fixed bottom-0 right-0 z-[70] size-3 cursor-se-resize"
+        onMouseDown={handleResizeMouseDown("SouthEast")}
+      />
+    </>
+  );
+}
diff --git a/studio/frontend/src/features/auth/change-password-page.tsx b/studio/frontend/src/features/auth/change-password-page.tsx
index dd4ba711e0..96ee8dd1a8 100644
--- a/studio/frontend/src/features/auth/change-password-page.tsx
+++ b/studio/frontend/src/features/auth/change-password-page.tsx
@@ -7,7 +7,7 @@ import { AuthForm } from "./components/auth-form";
 
 export function ChangePasswordPage() {
   return (
-    <div className="relative flex min-h-screen items-center justify-center overflow-hidden bg-background px-4 py-8 sm:px-6 sm:py-10 md:px-10">
+    <div className="relative flex min-h-[calc(100dvh-var(--studio-titlebar-height,0px))] items-center justify-center overflow-hidden bg-background px-4 py-8 sm:px-6 sm:py-10 md:px-10">
       <LightRays
         count={6}
         color="rgba(34, 197, 94, 0.25)"
diff --git a/studio/frontend/src/features/auth/login-page.tsx b/studio/frontend/src/features/auth/login-page.tsx
index 502b35d22a..6f4d03f1a1 100644
--- a/studio/frontend/src/features/auth/login-page.tsx
+++ b/studio/frontend/src/features/auth/login-page.tsx
@@ -7,7 +7,7 @@ import { AuthForm } from "./components/auth-form";
 
 export function LoginPage() {
   return (
-    <div className="relative flex min-h-screen items-center justify-center overflow-hidden bg-background px-4 py-8 sm:px-6 sm:py-10 md:px-10">
+    <div className="relative flex min-h-[calc(100dvh-var(--studio-titlebar-height,0px))] items-center justify-center overflow-hidden bg-background px-4 py-8 sm:px-6 sm:py-10 md:px-10">
       <LightRays
         count={6}
         color="rgba(34, 197, 94, 0.25)"
diff --git a/studio/frontend/src/features/data-recipes/pages/data-recipes-page.tsx b/studio/frontend/src/features/data-recipes/pages/data-recipes-page.tsx
index 0a51f9df70..79566f21bf 100644
--- a/studio/frontend/src/features/data-recipes/pages/data-recipes-page.tsx
+++ b/studio/frontend/src/features/data-recipes/pages/data-recipes-page.tsx
@@ -399,7 +399,7 @@ export function DataRecipesPage(): ReactElement {
   const isBusy = creatingRecipe || Boolean(loadingTemplateId);
 
   return (
-    <div className="min-h-screen bg-background">
+    <div className="min-h-[calc(100dvh-var(--studio-titlebar-height,0px))] bg-background">
       <main className="mx-auto w-full max-w-7xl px-6 py-8">
         <div className="flex items-center justify-between gap-4">
           <div>
diff --git a/studio/frontend/src/features/data-recipes/pages/edit-recipe-page.tsx b/studio/frontend/src/features/data-recipes/pages/edit-recipe-page.tsx
index 8ade8a34af..ae87f92a53 100644
--- a/studio/frontend/src/features/data-recipes/pages/edit-recipe-page.tsx
+++ b/studio/frontend/src/features/data-recipes/pages/edit-recipe-page.tsx
@@ -28,7 +28,7 @@ function RecipeLoadState({
   onBack: () => void;
 }): ReactElement {
   return (
-    <div className="min-h-screen bg-background">
+    <div className="min-h-[calc(100dvh-var(--studio-titlebar-height,0px))] bg-background">
       <main className="mx-auto flex min-h-[70vh] w-full max-w-4xl items-center justify-center px-6 py-8">
         <div className="w-full rounded-2xl border bg-card p-8 text-center">
           <h1 className="text-lg font-semibold">{title}</h1>
diff --git a/studio/frontend/src/features/export/export-page.tsx b/studio/frontend/src/features/export/export-page.tsx
index 454ce40772..0d5d9c813c 100644
--- a/studio/frontend/src/features/export/export-page.tsx
+++ b/studio/frontend/src/features/export/export-page.tsx
@@ -523,7 +523,7 @@ export function ExportPage() {
 
   // ---- Render ----
   return (
-    <div className="min-h-screen bg-background">
+    <div className="min-h-[calc(100dvh-var(--studio-titlebar-height,0px))] bg-background">
       <main className="mx-auto max-w-7xl px-4 py-4 sm:px-6">
         <GuidedTour {...tour.tourProps} />
 
diff --git a/studio/frontend/src/features/onboarding/components/wizard-layout.tsx b/studio/frontend/src/features/onboarding/components/wizard-layout.tsx
index 6df873ffd3..22274c5d7d 100644
--- a/studio/frontend/src/features/onboarding/components/wizard-layout.tsx
+++ b/studio/frontend/src/features/onboarding/components/wizard-layout.tsx
@@ -73,7 +73,7 @@ export function WizardLayout() {
   }, [isFinalStep]);
 
   return (
-    <div className="relative min-h-screen flex items-center justify-center overflow-hidden bg-gradient-to-br from-primary/5 via-background to-primary/3 p-4 sm:p-6 md:p-8">
+    <div className="relative flex min-h-[calc(100dvh-var(--studio-titlebar-height,0px))] items-center justify-center overflow-hidden bg-gradient-to-br from-primary/5 via-background to-primary/3 p-4 sm:p-6 md:p-8">
       {showSplash && (
         <SplashScreen
           onStartOnboarding={() => setShowSplash(false)}
diff --git a/studio/frontend/src/features/recipe-studio/recipe-studio-page.tsx b/studio/frontend/src/features/recipe-studio/recipe-studio-page.tsx
index 5dbc004ffd..c1001c0322 100644
--- a/studio/frontend/src/features/recipe-studio/recipe-studio-page.tsx
+++ b/studio/frontend/src/features/recipe-studio/recipe-studio-page.tsx
@@ -776,7 +776,7 @@ export function RecipeStudioPage({
   }
 
   return (
-    <div className="min-h-screen bg-background">
+    <div className="min-h-[calc(100dvh-var(--studio-titlebar-height,0px))] bg-background">
       <main className="w-full px-6 py-8">
         <div
           className="relative w-full overflow-hidden rounded-2xl corner-squircle border"
diff --git a/studio/frontend/src/features/studio/studio-page.tsx b/studio/frontend/src/features/studio/studio-page.tsx
index 5c5e11907c..5018dc3baa 100644
--- a/studio/frontend/src/features/studio/studio-page.tsx
+++ b/studio/frontend/src/features/studio/studio-page.tsx
@@ -127,7 +127,7 @@ export function StudioPage(): ReactElement {
   })();
 
   return (
-    <div className="relative min-h-screen bg-background">
+    <div className="relative min-h-[calc(100dvh-var(--studio-titlebar-height,0px))] bg-background">
       <main className="relative z-10 mx-auto max-w-7xl px-4 py-4 sm:px-6">
         <GuidedTour {...tour.tourProps} celebrate={isConfigTour} />
 
diff --git a/studio/src-tauri/capabilities/default.json b/studio/src-tauri/capabilities/default.json
index 7b6033c721..23b046e9fd 100644
--- a/studio/src-tauri/capabilities/default.json
+++ b/studio/src-tauri/capabilities/default.json
@@ -13,6 +13,11 @@
     "core:window:allow-set-size-constraints",
     "core:window:allow-center",
     "core:window:allow-current-monitor",
+    "core:window:allow-start-dragging",
+    "core:window:allow-start-resize-dragging",
+    "core:window:allow-minimize",
+    "core:window:allow-toggle-maximize",
+    "core:window:allow-close",
     "core:tray:default",
     "process:default",
     {
diff --git a/studio/src-tauri/src/main.rs b/studio/src-tauri/src/main.rs
index f7d49cce60..4dc6f764d2 100644
--- a/studio/src-tauri/src/main.rs
+++ b/studio/src-tauri/src/main.rs
@@ -58,6 +58,15 @@ fn setup_logging() {
     }
 }
 
+#[cfg(any(target_os = "windows", target_os = "linux"))]
+fn setup_custom_titlebar(app: &tauri::App) -> Result<(), Box<dyn std::error::Error>> {
+    let window = app.get_webview_window("main").ok_or_else(|| {
+        std::io::Error::new(std::io::ErrorKind::NotFound, "main window not found")
+    })?;
+    window.set_decorations(false)?;
+    Ok(())
+}
+
 fn setup_tray(app: &tauri::App) -> Result<(), Box<dyn std::error::Error>> {
     let open = MenuItemBuilder::with_id("open", "Open Studio").build(app)?;
     let toggle = MenuItemBuilder::with_id("toggle", "Start/Stop Server").build(app)?;
@@ -153,6 +162,8 @@ fn main() {
             desktop_auth::desktop_auth,
         ])
         .setup(|app| {
+            #[cfg(any(target_os = "windows", target_os = "linux"))]
+            setup_custom_titlebar(app)?;
             setup_tray(app)?;
             Ok(())
         })

From c23e91e0093b8f821caceaf44be25154d0b1899e Mon Sep 17 00:00:00 2001
From: wasimysaid <wasimysaid@users.noreply.github.com>
Date: Mon, 27 Apr 2026 05:40:49 +0200
Subject: [PATCH 3/7] Fix desktop auth gate after backend startup

---
 studio/frontend/src/app/provider.tsx          | 49 +++++++++++++++++--
 .../src/features/auth/tauri-auto-auth.ts      | 27 +++++++---
 2 files changed, 63 insertions(+), 13 deletions(-)

diff --git a/studio/frontend/src/app/provider.tsx b/studio/frontend/src/app/provider.tsx
index 92783ee2be..cacf318deb 100644
--- a/studio/frontend/src/app/provider.tsx
+++ b/studio/frontend/src/app/provider.tsx
@@ -9,12 +9,13 @@ import {
   shouldUseCustomWindowTitlebar,
 } from "@/components/tauri/window-titlebar";
 import { Toaster } from "@/components/ui/sonner";
+import { getTauriAuthFailure, tauriAutoAuth } from "@/features/auth";
 import { useTauriBackend } from "@/hooks/use-tauri-backend";
 import { useTauriUpdate } from "@/hooks/use-tauri-update";
 import { isTauri } from "@/lib/api-base";
 import { useRouterState } from "@tanstack/react-router";
 import { ThemeProvider } from "next-themes";
-import { useEffect, useRef, type ReactNode } from "react";
+import { useEffect, useRef, useState, type ReactNode } from "react";
 
 interface AppProviderProps {
   children: ReactNode;
@@ -141,6 +142,8 @@ function TauriWrapper({ children }: { children: ReactNode }) {
 
   const hasResized = useRef(false);
   const abortRef = useRef(false);
+  const [desktopAuthReady, setDesktopAuthReady] = useState(!isTauri);
+  const [desktopAuthRetry, setDesktopAuthRetry] = useState(0);
 
   // Show the window once the frontend mounts (for pre-running states)
   useEffect(() => {
@@ -163,20 +166,56 @@ function TauriWrapper({ children }: { children: ReactNode }) {
     return () => { abortRef.current = true; };
   }, [status]);
 
+  useEffect(() => {
+    if (!isTauri) {
+      setDesktopAuthReady(true);
+      return;
+    }
+    if (status !== "running") {
+      setDesktopAuthReady(false);
+      setDesktopAuthRetry(0);
+      return;
+    }
+
+    let disposed = false;
+    setDesktopAuthReady(false);
+    tauriAutoAuth({ force: true }).then((authenticated) => {
+      if (disposed) return;
+      if (authenticated) {
+        setDesktopAuthReady(true);
+        return;
+      }
+      if (!getTauriAuthFailure()) {
+        window.setTimeout(() => {
+          if (!disposed) setDesktopAuthRetry((value) => value + 1);
+        }, 500);
+      }
+    });
+
+    return () => { disposed = true; };
+  }, [status, desktopAuthRetry]);
+
   if (!isTauri) return <>{children}</>;
 
-  const content = status === "running" ? (
+  const showApp = status === "running" && desktopAuthReady;
+  const startupStatus = status === "running" ? "starting" : status;
+  const startupProgressDetail =
+    status === "running" && !desktopAuthReady
+      ? "Signing in to desktop session..."
+      : progressDetail;
+
+  const content = showApp ? (
     <>
       <TauriUpdateLayer isExternalServer={isExternalServer} />
       {children}
     </>
   ) : (
     <StartupScreen
-      status={status}
+      status={startupStatus}
       logs={logs}
       error={error}
       currentStepIndex={currentStepIndex}
-      progressDetail={progressDetail}
+      progressDetail={startupProgressDetail}
       elevationPackages={elevationPackages}
       onInstall={startInstall}
       onRetry={retry}
@@ -189,7 +228,7 @@ function TauriWrapper({ children }: { children: ReactNode }) {
   if (!shouldUseCustomWindowTitlebar()) return content;
 
   const showSidebarSurface =
-    status === "running" && !HIDDEN_TITLEBAR_SIDEBAR_ROUTES.has(pathname);
+    showApp && !HIDDEN_TITLEBAR_SIDEBAR_ROUTES.has(pathname);
 
   return (
     <div className="flex h-dvh min-h-0 flex-col overflow-hidden bg-background [--studio-titlebar-height:34px]">
diff --git a/studio/frontend/src/features/auth/tauri-auto-auth.ts b/studio/frontend/src/features/auth/tauri-auto-auth.ts
index d67730d2d6..a0199f9ac3 100644
--- a/studio/frontend/src/features/auth/tauri-auto-auth.ts
+++ b/studio/frontend/src/features/auth/tauri-auto-auth.ts
@@ -15,9 +15,13 @@ type DesktopAuthResponse = {
   refresh_token: string;
 };
 
+type TauriAutoAuthOptions = {
+  force?: boolean;
+};
+
 // Concurrency guard: multiple route guards can call tauriAutoAuth simultaneously.
 // Without this, the first-launch password-change could race with itself.
-let pending: Promise<boolean> | null = null;
+let pending: { promise: Promise<boolean>; force: boolean } | null = null;
 let lastTauriAuthFailure: string | null = null;
 
 const TAURI_AUTH_FAILURE_FALLBACK =
@@ -49,15 +53,15 @@ function isBackendNotReady(error: unknown): boolean {
   return authFailureMessage(error).includes(BACKEND_NOT_READY_MESSAGE);
 }
 
-async function doTauriAutoAuth(): Promise<boolean> {
+async function doTauriAutoAuth(options: TauriAutoAuthOptions): Promise<boolean> {
   // Desktop must handle password-change state internally in Rust.
-  if (hasAuthToken() && !mustChangePassword()) {
+  if (!options.force && hasAuthToken() && !mustChangePassword()) {
     clearTauriAuthFailure();
     return true;
   }
 
   // Try refreshing existing session
-  if (hasRefreshToken()) {
+  if (!options.force && hasRefreshToken()) {
     const refreshed = await refreshSession();
     if (refreshed && hasAuthToken() && !mustChangePassword()) {
       clearTauriAuthFailure();
@@ -86,10 +90,17 @@ async function doTauriAutoAuth(): Promise<boolean> {
  * Returns true if authentication succeeded.
  * Concurrent calls are coalesced into a single in-flight attempt.
  */
-export function tauriAutoAuth(): Promise<boolean> {
+export function tauriAutoAuth(
+  options: TauriAutoAuthOptions = {},
+): Promise<boolean> {
   if (!isTauri) return Promise.resolve(false);
-  if (!pending) {
-    pending = doTauriAutoAuth().finally(() => { pending = null; });
+  const force = options.force === true;
+  if (!pending || (force && !pending.force)) {
+    let promise: Promise<boolean>;
+    promise = doTauriAutoAuth({ force }).finally(() => {
+      if (pending?.promise === promise) pending = null;
+    });
+    pending = { promise, force };
   }
-  return pending;
+  return pending.promise;
 }

From b3ed1af1a8cb209d04fe000939612977434ca93d Mon Sep 17 00:00:00 2001
From: wasimysaid <wasimysdev@gmail.com>
Date: Mon, 27 Apr 2026 06:59:01 +0200
Subject: [PATCH 4/7] Fix desktop installer assets and setup script skew

---
 install.ps1                                   |  31 +-----------------
 studio/src-tauri/tauri.conf.json              |   3 +-
 .../windows/branding/nsis-header.bmp          | Bin 25818 -> 25818 bytes
 .../windows/branding/nsis-sidebar.bmp         | Bin 154542 -> 154542 bytes
 4 files changed, 2 insertions(+), 32 deletions(-)

diff --git a/install.ps1 b/install.ps1
index 77c0034125..c1b19190f8 100644
--- a/install.ps1
+++ b/install.ps1
@@ -1027,35 +1027,6 @@ shell.Run cmd, 0, False
         }
     }
 
-    # Hotfix: patch install_python_stack.py for Windows GUI stdout
-    # The PyPI version crashes with OSError when stdout is piped from a GUI app.
-    # Copy our fixed version (bundled by Tauri) over the installed one.
-    # Remove this block once PyPI ships the fix from commit 18c5aae7.
-    if ($TauriMode) {
-        $rawPath = if ($PSCommandPath) { $PSCommandPath } else { $MyInvocation.ScriptName }
-        $scriptDir = Split-Path -Parent ($rawPath -replace '^\\\\\?\\', '')
-        $fixedPy = Join-Path $scriptDir "install_python_stack.py"
-        $target = Join-Path $VenvDir "Lib\site-packages\studio\install_python_stack.py"
-        $sentinel = "# UNSLOTH_DESKTOP_HOTFIX_APPLIED_v1"
-        $sentinelPattern = [regex]::Escape($sentinel)
-        if ((Test-Path $fixedPy) -and (Test-Path $target)) {
-            $installed = Get-Content $target -Raw
-            if ($installed -notmatch $sentinelPattern) {
-                Copy-Item $fixedPy $target -Force
-                Add-Content -Path $target -Value "`n$sentinel"
-                substep "patched install_python_stack.py (stdout fix)"
-            } else {
-                substep "install_python_stack.py already has stdout fix"
-            }
-        } elseif ((Test-Path $fixedPy) -and (Test-Path (Split-Path $target))) {
-            Copy-Item $fixedPy $target -Force
-            Add-Content -Path $target -Value "`n$sentinel"
-            substep "patched install_python_stack.py (stdout fix)"
-        } else {
-            Write-Host "[WARN] Could not patch install_python_stack.py (bundled file or target dir missing)" -ForegroundColor Yellow
-        }
-    }
-
     # ── Run studio setup ──
     # setup.ps1 will handle installing Git, CMake, Visual Studio Build Tools,
     # CUDA Toolkit, Node.js, and other dependencies automatically via winget.
@@ -1095,7 +1066,7 @@ shell.Run cmd, 0, False
     if ($setupExit -ne 0) {
         Write-TauriLog "ERROR" "unsloth studio setup failed (exit code $setupExit)"
         Write-Host "[ERROR] unsloth studio setup failed (exit code $setupExit)" -ForegroundColor Red
-        return
+        exit $setupExit
     }
 
     # ── Expose `unsloth` via a shim dir containing only unsloth.exe ──
diff --git a/studio/src-tauri/tauri.conf.json b/studio/src-tauri/tauri.conf.json
index 705cf0ea94..497e15731e 100644
--- a/studio/src-tauri/tauri.conf.json
+++ b/studio/src-tauri/tauri.conf.json
@@ -44,8 +44,7 @@
     "targets": ["app", "appimage", "deb", "dmg", "nsis"],
     "resources": {
       "../../install.sh": "install.sh",
-      "../../install.ps1": "install.ps1",
-      "../install_python_stack.py": "install_python_stack.py"
+      "../../install.ps1": "install.ps1"
     },
     "icon": [
       "icons/32x32.png",
diff --git a/studio/src-tauri/windows/branding/nsis-header.bmp b/studio/src-tauri/windows/branding/nsis-header.bmp
index 7eacdce7db5026855113aa5f03c47663d1e17561..aef7fea67b50bcb320d8ceaf3ab5f488f07a3107 100644
GIT binary patch
literal 25818
zcmeI21*lfb7RQf;g@K}|2#N{@ii#M|08#8lMX}>4Hew6UZpFaD1jWR_#>VdM?s|52
z-1mF_xr@#BT|c*+cYJ$aX5egR)~s2xX8mWyd|08@<$uO~ZzcHV<8L~D|KKlCTo%4+
zd(+0n{rB(B_J?aBw?JH6$PeJu|HEMz{!8F6bQp%;0^vV_^FxPW_$?6r6F5I~7>3^h
z;Xi@%Lx*AbEfD?_I6rh4hTj6=KY{Z@hhg|F5dIT5KXe#|-vZ%3f%8L$VfZZ&{u4Mq
zbQp%;0^vWwFZ$v8_wV1nefvK-_UF%^-@JMA?%g~8(%79PER4MbhM)4pmY~_MU%x(k
z_Uzxkw>^CL@b&B0e$+D_-xyxIc5Td<G1aP7D_5>u&z?Px9XrO^{`I{vg*-Ob@Y1DA
zCY}yfA2MVJQ~UPqV~Al+ojNsj>eQAkTb3$SszQYd{rmUdzkk1$Fv}Fo8#Zk43ORA&
z#E20iYSgGvrc9Yuty(Quuz>Bn4C-IKdUe8t35^>!ZqlR)YJjA+K6L1iml^t`Nt4)R
z<Hn6%y7fPP{J3SymQI~IWzU}d&;S4T`~Jl&!-o$)efqTN6T9ON!wVNKL?5AFzkVWu
z37g!$eOtpLM~-;+eDUIi=xf%jfj(-~sAy48mMmGqEEv|QQ->i)N(hwMvu8&yDNvw*
z_O-pvo;~YjJAV8)Sc$TJ{d!}g^Xb#4^5x4jHEr57FJ1j7Po8w`+SM!S|J9#2Zyv{w
z)-ZzN14B;Suwg@;qg%Ibt5>ha-u3I(x07K!q~5u6M-+_b-Q?xVm)M&r84|td0}-AK
z?3XWJ9yxNP7UI|}Y}2L<LvWLj6)RR~7S~$0Zr!e3yJpRrB?{kr_wI?!t0Y_O+`04V
z)29S#ZM}K(X0J+Mi?6bL?%cUvI(?Sl=aQc+S+b^0n@*lQdHneCHEY%sk#CM1Ife}z
zM)*jPB83strcK+SLx(9-rVy>FRH-6*zI^%MRO{2HPua3%jUQ&{#flXZC0n*^*cP)u
zB-R+);>C+2G>jhlz>okXkr<oPO9okS?AWoQ{}P5ks@Q9~oIihFauhwh7~&F|>f5)k
zHxHjXcTQ0b9V7=Z#kq9pQj<&w_*D$;%4E!#F(LxbpFclw;>7Gi{MQ!g)2G*_nKNfb
zCEJ(I=+UE@;--6v^cO8!lr(8lrm!kQIeg{Hl{u-GbK=B_lFawUjT_#n=)MmO4;(lk
zdD_-wAY1fb!qArEIk+xqr&+URk`wKRxD!)p(xidY7OF!^WGYv#T(4fef?^kq8)2Ll
z0(|-*H51uh%HU4OIePSH?%cWa=g*H<Gpty#BD3(&hmtN`Ix&+Vpl~-EG-xnjzySKR
zELpM$ZBlpb+O<1(?#!Knj;FCo8K-&k=BZMp5}g27wQ5z|Rq?Y$ixv_-W5$f{@_zX7
zf#Kf0dnN4Aqeosjs4RMH46(5{mLh>Ww{YP?VxyMpyLRnbrcmGOhXieA>(#4g{%;E4
zv|4!g?p=t6p_CC@3=Fk<L@c#iiR40s3KcC{lyAwBC5Zy66}2iF!yP+zu%i_SBnXDp
zt5+{wx-^~Z*RM;}_U+p<eDL4_QCekO-MV$jQxI?6x|JkJ60s4Gp_uDX{4tEtd|*gD
zDcSN96Bc1M%ZCxA1{mTkNFbZB_VMG#l`2(|K)ys9Qs0#;S0wh!moHunmn~Zc59x(M
z(e_n`bSfeD@85?Kp^SJ8!>wDldY5w}l;P*hnd7B{zbQtCnpVQaLt#hEgdU9{*Bl<J
zgj5l5G+}u2=1o9jVZnk0VdI`=&6;)h?%nh$;3$vjQ1IE-iog^Lin<&hh8QgYFpNke
zcDV_gD6)L{a+D=J&YU?D=stY-;MFby!^4LU>ttT<5<hhYQ>1?aAQTG<-n?WOswB3J
z2!py-1Y{%9;W=W4lzTvAYgBF2sF84h0nda^G_jgSfOPNPUCU3NJP8BgLl~L`2*uEG
zX^t=0iLtz3AQD<_Yve#7DI`ji2qJPA#%KwEA*WX`VcX}=pA(3r9rqXtSDzs-J+D$2
zPdOn1L*AA=mf+`VT1w;|liwthm@GNwhiA^5G0BD@o`YSLXQ+*MLu$F6tj5oaUUa^_
zdi8>S@#01LsZ*z>KHR>2JBcw<rcAYJ)nW=}QYAyYg=!hfk1!-o0vgq<a3gCVlk3S6
zu13zBIqA@dw8@hvC-30549ATdCuIf>9Qb|yho1z%P&@bN(PQY)p;jhSxKPBP23`sS
zXPQ2J`kp;|cxA%|g$Dt%5&00x!Gi}SkT1vL3RuV@5b+csF?Q+F#R?-H4KP5#ayYqC
zu_Sct*pYfd?@uVjix-dnMP%^c!D7yvH?Mv}!VkHLXhJ~dKI$Scq|v99C{beDwrvc1
z_wKE=y29LLMO~(JL+KEl^W@0`o8kp84Ek1GlW5?fv1x`386-`}i~g5i9~hFbCCr-~
z5N44_p@Z8aHo&1CQ(s?>f<?7Ip2o}CJF7m)2YY<`_RX6QwFCu}h`g%+O8FVndg<0D
z7LoUaA@8ns?b_KC9Rx<lXSTCbz(dR=hhtZQA$3N|lqq>Sf)CEgS{fE$Sh#Ru<TIqm
z)D|mOu4G8$EK;Nh9pEBN@KX~n2K(WMHxN_A7cFVsx-~bN3Krp{2?MZg+qSy<GR0qh
zePGB5NMbZq@g|0ZAUcH>L@uj_(1|mYBZCGF;@+=XwMvD#Eu=%%r(~uK#|cSFoCa*6
zN5oQF!r=%(JWyG}6~H;|WT?lZ4lBwS#7Tx|g6-{%Prf3AB7yDjH0&2~A8jK#FiVua
zmIl4V1nNiZMaGG!BfWZB-v@@q`x`nx!tkeC^TLo_t;A)C<-<*zHvLqBmw`K_D3?H3
z`4NlLM&Es}lGgvbU`R}pVHDVPKEp8Ljc=!q(IE~KDp^Qi{GE-kMIf->5MyX)Q-2o>
z`Tc?4!f1N(>wNLS&@2@EPVg|K0K%h)B=I*M)u5a+;(Zu@$$^p(Fbt_nDW!>EWTg1p
ziMIt+E7JJ2EB?{~D<NPQ2G&kNR?J}-WOV%L<}mbUryz4V41<i0KiwRL{_GTFE{9=|
z(ebC7!_c3dg3RSG3^F?YbaNQ`vr~|{9EL$g$DeKvLw|M(GMB?J$msaf&0*-zPC@2!
o7zP;~f4Vsg{n;tVTn@t^qvKCEhoL_^1)0lX7-V$(=@u9FA1``rssI20

literal 25818
zcmeI2M`%?|6vyAoYkB>pM+JLBK}E5|0vb>h4T7NJ!i|2eT)0utg{~Ag7ElNZE-XP%
z(S>}9pkT*}9g&D2*s&q@{{7~jWHPylFYkru{S0%txlTEA=FIt@|CyPX>YDn0e9kk9
z??8TP`KjW^@2lkN^VK!<JC%k{MN!(mf3*jEzQ5XhYdjvX82<ff$YN+Qw0o)d9<V&L
zJoG*a?Xkx4(DKmo(0dP99$FrHABA>5v^=ytv^@0Q1D1!Dhu%k_-487fEe|aZz4w6S
zq2;0XQE2x=%R|dU%R}!y&|V&vrBfxTL}@Bno=K6-_?Bf-Ql?5-Rhx&nOGb?<N|&aS
z=qX7hkvFrVXfRupd?qFGd|h2;wJe=PK#Xaew3(-wSDDv*MpFZ2G!!S}MTtN1Cga7)
z1ZKNz$g!F~hAcf1Eer+%1%7`)fj<%oW)ktja3~lkpq*&}BoquHfCEe`Qn4tF$cz6{
z@n|Fz3KXEj&r27>#ji!lcqkA+Bk+m_+K~?jgGeLHC}w2crhdxBsRZpxXMrDW1R8ds
zIUSFgl2mC#TdT2v+QM)cC4PUypZ-y3cpLv9ke;T-Mlm{FVj|uo+;X^XQ64CW7e-n&
z$uz!YIe!dekx1jj4ga!O9xAa&SR5%;m*;RQGWZ79CY>@>h6ya9i$$OzlZdG<zh6)S
zKs1Yh`DLIv1+fD%T0r~(nzSTiD!BAZG|`CJ4AG5JKp_^25)3FTEDRVrX(u{)WPu{4
zR1s6nB?BU-0;tKPR)>c|p@`v9Gjd(F{i>QLhB#Hs$7-C!iusD4FfexvNmHzjaDZ||
z9(;p8Xuy9|AvR^fu(BwfbX-mg%z=&c5)R^NzM898qDJ|A(MXsmAkU*p#B#)t)rmYS
znmTprjvYHroH(&(&z{+{XX9y<XEK@E+FDxr_3KBK2g#b6n%%p1A3uJ4@7}#g0$wZ@
zTfct&zs|FN|Nd30R`u`SAK_#&xq0*Eef#ze9H{>Kw`<p~%a<=deE9IOW5+gb+&FC5
zFs0F1W?p$UPYiJeli;UxJgUQjoGE!HXAD*JOVX$;R`hU~rVtQrm>AMUUTwKDWMopH
z6HCa<h!MvOk(PWhlsH1k+_`h#zJ2@d-Mb4HE<Aho?8Ao-3l}b=y`rMx?%lf|KYkoF
zO8pr&4*<S?{rda&?++h7{QC9l`}gnX&6}4<B(7Y!^7H3U#_~|OdGqG*;lqoHif-S&
z{pHJ-s;a8W%F3fhkJ9!0`SS-49#FV<@7{z76GW|Elq@9sH%|;D)(KWKQ1F=~vAi(E
zE|kFJSRs34K;>dWFcd_ai6L8@FyBm@vL<mk<YWlP6vm=~M!n*^Fx0|OYwg;#=g*&?
zKYxBYonE<eB@Tuy5Ujks{LY;_z&mo}NajKk2GYB3-8x7G-zdYrva+&Emo5P*wCvrx
z_xA1EX@|XCx^%g5;|38iX3UrsD^}2W=FFL)Lx*<n-hJ!Vtui(mRe7GhQLm!SLc1^o
zG4mMNJ`BMGOR-lTfPzRQMv|wAA;}ha*={MgRwDrgOFINZHIcKcV-HDh%9JT<)~q>n
z=#UU;*REakx-cYXo;-Q-$B!Q~X3Ss|Ec*26)77h2d-m*k@#01JHfho%+DDHb4ea;t
z--n9VuV06&)z#HUjvN8BMT-{6@=2ud`N@+flBHR)Yq43X`N*P1+}1t};T!fk99H)d
zP9#)u3`AmoV}}F^vDCy6NpUR)5!X5-c{<cp*OaV0j1n4pxSXyqz&z8iBPfHMXWF!B
z0v%k!_jPr3g9Z(v$Aw`$9zT8hG>LTj^y&1DA3vTnd+pk_UcGt=hG0ee;K74mzI^%k
z@nh&G7*3u%nVl94=ggVoOy~o;r%#_EhOo3~YuhaRP7FC)XjsTpl5b_df`nK~*mFj~
zMjXtm?i`M%O$^b%5QO=nL@x*pg00><vS0|>9EN4Ax^M(l)+Gz*M!Hm3HS&-X2@d9{
z0g=FG!GZ-NMvPzx`=OajT^Pbc7lsojPGr>L#f#B)?%cUPefmf)9XD>ABu~C_T4KM2
z&){ELTFMYC(JO7U@H;WY7U39iFF4R5E_V_aH6L9#kE+Oko-3D91!rLhX_G@0=s{_r
zF*v{_1W+qSN?IuMqEl~iOoRbU!7BjLLWr5}(ZNEOc>VI_%gdH6;|l_-SFhf%VFO3X
zH*em2`}U0-yKURHv17-QOX(FJN-l+I@R0qG_5%kF?A*EY)vH&ZKYu0=IMdv^bqk!y
zu8f81<XcX&TefVW44;=QS;Fi*1f6MH_HsKhEXZX)G`Bl34G@G&I7}Y`p_4EQ8S$&h
zL(GSqV4`J26<<I@vOJU40iwGoFhpb6(h>)J_pb=#-pJVE;^Ix4Hj&)$H+vN5afqp}
zuV-5W5FU^u@6DPu>)^qIFJ8Q0^JEmMl7xBc)Ttgldca|1c-ZAQqq6UDBm%>;XU{%*
z^hl1iGiT1^<b+O6IVfMcbg3L@AffBmBOQt%tHfc^a8r_0KF*}@J?&iNsB$smph>uM
zN#iaLZa5pCA!F`8M1kU-(~AJZmDin1w+lmA0osU8Bpq$sEzzbx0AcQ#43|vEm#O*f
z40P2PGLcxWh6kMA@ihJhNR-Q079xRw%Lfb?09&})VPiNPW~buhp&!nZTo?QH?Moq*
zN~x%c$A=6V!YG6pC6bIPDJd~^B7>x~fGSxU@Vj;ECM~3MoMu|pW;stDqK}0V`Yy$^
z(5@RDnT9H5d};1HT1>Rj%WDpA6+<QLTt}2PV=ifDxa^1EtY=3O(C`hxMNZCciCBeZ
zLP^3wocbrfSljaGCWdAC=8s_(WgXS^D-5&f2VU9eNC;ZYz%aka=28lENgO2nKl3sd
z=wYxnKKDXr!H^Z>b^I;)TpZAD40HG2|3R`7Vc6207DMAw+|oV2wFTcpD&F?x7Hu0F
zAhbk}{Qrk;?_`DlB@a89kAL@aEQa2tn~uWPVrVgRUlcnkwyd7qJz#lgd1!g)y$380
zEf2kq!rb?b&MIknXnAOP=)DIl4=oS9kHXHn%jLc<%R|dU%R}!yV0mbH=zSFCzHf9^
TNy|gaL(4<&Jz#m*8F=^~mCb?X

diff --git a/studio/src-tauri/windows/branding/nsis-sidebar.bmp b/studio/src-tauri/windows/branding/nsis-sidebar.bmp
index c3bd480fc8993fa88d280c35ad105a7ddf1bc7ff..fe66d78a1909ba9641816ac4a4c5d9e8ec0bf0f9 100644
GIT binary patch
literal 154542
zcmeI52YeM(_Qxr@=qji{u&%4CSk`rIsDG7@1#}e@)U}`}ie=qpZL7%I0IAZHUIauC
zL=>f_&_V*Ch7d|1bO?md0!auYgaG3I``&@;Fz@BPN%AH;%-r`0k2`nHoVoY+yXD+-
z%WKeN;tN$O`962>?>hc{$G^KPSE^LG(nW;iGrvZqO1^(5KgW(7)_<-?;81=Jf3DA_
z&L9YAuDw$XG}oGI?;zlvoa%b5x%LhM-pQ%1*P3hZAmE*x>UyoY_6`Ex$*Hc_nrrVM
z;GLZ6dab$k4g%iEsjk<WYwsZ7ot)}=t-1CN0^Z4~uGgAt?;zlvoa%b5x%LhM-pQ%1
z*P3hZAmE*x>UyoY_6`Ex$*Hc_nrrVM;GLZ6dab$k4g%iEsjk<WYwsZ7ot)}=t-1CN
z0^Z4~uGgAt?;zlvoa%b5x%LhM-pQ%1*P3hZAmE*xMzCIUfL3u)VML%iT3mFvl&VTA
zU(R$M*q^&UcV7km<rEbjEN7Y{!u7U{&0h@}^xA8$zWh>)etmmy+qxxV^Txh?dh?gN
zFPjvmuTCS(t^K*DoSU~MeU*si?A?Rd!Th}WNppz#*FWEA-u(GCAGDr4X+nP9iAR>F
zrf_S>;DH4P_N!cH@80>-_#axo{~q%1y#3bLF{86Gx2n4;uxHoK@5hcoA(Fh5VmWxw
zK(wt`ma1e3kbpr02N1t(=@MhS3X_=VDU;uQ_nrIhz4w+|ZmzJuJMX;XnP;9J(7)gM
zwdpD`r45vy>ve0=qoSfto_6W`zk2m^+qY{gF*|o`CrJsjXUS#u?p?+d&P|*x@%yrO
z@7TVrX_F>$Y5b=ANP(F;Ws=0_<?a(DuwSp<ZAM|jygg}7qVX-T4>d|GX>KCzk6gya
zOf^d8=IoVt%9t@;!W-AGd-|!rD?R_Kzz^fT4@{etm~wJW!$NtJTvHiGe>-YGzrLWY
zaM-;wi(~*VF~slPa|+iB<|T<FT*DyY`t|P_``wsjsVUUHsgo!D`TFaL95Z?pN~TYX
zB}@sI#$oH0P4X<?0|)evnL1_ou%TC8c?FkzR;8^_+3)aKdx`APy&F2Swr?vum@kE7
z=8S1di~wn%sv;a08*Pjyydx`962sk^HEXtP*|Kxz&Tqc?=H-`PF3S0C)Tq&W@4a`=
zJ@=>>0=M0ETbnj*I(F>%+;h)Wt5%JeGtM~U_19lVlFwUjz15&W10_$GNEL(p(@#I$
zp+g5W+<yD*N^JZO<4no3a#>EUsnn8yo;|uBK2#uYq%Om|#9QQAs{iV=6{f=Q?^dnQ
z^U;U@Me~elafIPoTJ_J`x8w508*f~<X0^&Gy~!gFKTP~9EngPn0s1bx>{4R-_v@p?
z@^bc;ifinLPe1t>C4B1DtCy9P_3O#c{{8zO_P>!^Q>RWPx?jJ3enH<Ch2f;2@BbxB
zmei<G1Fj1T3ytwfNl6!9d@=H4#*87JZ^Bn!eRWz|no+E8-@ZPj{?C@p8&!5J2Fl6x
z+&KyI>a7`@jc-&H)*{!t{7t>mfXxH%!-jq(G*Mx>rRp`cQW^nX9oX2;n>$C6gw4QH
zyLM#B<-+;%jQUH(HMtWdl`B_XwQ3dk4;eD#s;jP|x)EN#etp%dRS_6Fb}W~lfBv}$
zUwGk##l^+M^zPleMT-_085x8>`Q#JsN@;1|zCG=OC`?TBHGKmI4n$_afB}S4Q&R~q
zUAmO2-MV$_BS(&K`NkV3DiH>f%8tcAIk}dOnEqOfEA>)<mHdX`dj5$vTyc$2)cy0W
zR9<<UZ~AMg?22m|5O@>;`cU;!3GCjvLvE!kSxgKGkV}f6lB6sJ<(l}QZTRf?nWCgh
zl`8k%d+*(M-wn|X8#Wv@Y83eA=jWew)>#OcxPIuNhq$|Q=T3R{gAYF7GA_>7Itkae
z-g+zHx^?RwK75#4bO$|p^dQi!TeoYky_Nvg|FX+2lgB^%>@#9ku3SlZBj%+RFRJWV
z43v}W#M$w@7q01Wjc+WeUYm-<f|FcJ8$K;IM)Jiso%@IXZ8LNFG%B%ZHgZi{Et19t
zT*R>P<d)dditG9F=BgAbu4m7hsUitr2}q|L7jsH~J!!(vhJ;lgH*Q=}Q4z??r&q6D
za@WN5qmMp{0JUE3wrbUi%lLR7V%xWGCw%|?_sgx#n>TYw;lTzVK<D1HX;T7Jc@g0I
zzWeSYX5YSj=bUp6mk%~<U`)A{a0PSC*vFVEj4sIw1~9c%>RPjBpG{1NH%ao8;=15q
zKEtkS>el7iZ@wOGR7hBv>pQbDxkQh=f^wxK71s=)R3w2dn>L7W{Hz(q_?YM^63_R@
zkt4wzt`iaxu$qjP*yz!txz(vtClPMkxG|R-H*TagAO<sx%b7EMO@we=zkYqfv<bPn
zx!k(xrkiO033Tbw1+@fr?b;>JBG$Zlb7Hn`-AZ@QC1Vz23ax}Il50}fuI;B%g-P40
zmCL0PJ^x%Yj32xcGIlfCz_i|oNk$acVw*8QMj;<YSUfH=)a5I$yn@KKpMF9N<7n(>
zF8MGP5N{8{ifhdN)RZM+#nCij1d6a}7|SqR;`yFEdp4N&@86$rlO|1KV`B-|s#WWf
zOD>r>aiZKJe8B}5V3u<kf@=h7*RG8%hgf!YHl04!7vVmA`e1<{IB<Y)_wL=RSFetp
zmY$x@<>0}CB_)zU$+gArisV|2#qeq1j!@{)bPF%U6G@4s&7}1nI%KfabgAQtYZ-Gv
z4egjHK^uMs+I+dhqNCT|p1BokoPs2gjT<$3^_7;y(Cn)=L~h{)`uL*{m65<8!sLac
z8F}D=`$hPL7hV8!K9DE@jBN~T39Ii(lO{2A;!@Sk_uqe?%lY%?qbDyfkMOZ$$3*_<
z(W5ll#7m>WH(|^<xm!?BAc1x3*43#~N0LF&wMelND<{{2KW{fVNoa&6Nz#zgEz0HS
zQNCOlKRBtRT9G8!33OIa_13Rl!(9{CKKX4KGAJ`D#DOOASn|er6<)d|nKw!)!qhiu
zc;fNLNru8l1!z5#hGxy0VK#5uwvA@|*=L_6{->XQN=Zpsym;}#g$t9DlL=#G-F)-S
zT#g?<UfN;IX)a|%HhJ=7!r0gd4;wa2j5PFM*b~pUyo=H@VZsCo)ru7>sNjt2C7#k)
z2A63$xyByGjG@&v`Ypi+H>oc^CYqL+OU5jOslT+M8Cy2t$?Vm$2P3JaDai^<3D7=M
zFz}5aKwpfF$M8yS1#(S1SzfYu;fUeG7~l{6Y6u3HN(se}myR3zo#6B37rjU)F^t0K
z@r7#!XoS(+r}vkXy6JJT482WBQkNuKRQ+$iabC&jMkUN*pqyM=d`m>cf^r>JGhMS#
zBSSEe|IL>&{S?1hSZ$Q07hh=pzv3EuhJH;v#$l5hDByao=|qGYhKDNq$~H6kNR>c{
zz@dTzSZ*}w*y<Jb#{i!;FmP-VBAtP^T+cO~2ooIqF(g;nFAvvB$!Qljjks0=XVrt3
z8Ex8dsq74#%dF(Id+;>kn%0=HFhgB6$x>#t(Xf2kQnV@GY?)P^Mh~7wT%Sg$Iy0%7
zYiIIeN2)Z}cA)A^otkTB@?uA-G}m^Z>P(%QYiIIeN2)Z}cA)A^otkTB@?uA-G}m^Z
z>P(%QYiIIeN2)Z}cA)A^otkTB@?uA-G}m^Z>P(%QYiIIeN2)Z}cA)A^otkTB@?uA-
zG}m^Z>P(%QYiIIeN2)Z}cA)A^otkTB@?uA-G}m^Z>P(%QYiIIeN2)Z}cA)A^otkTB
z@?uA-G}m^Z>P(%QYiIIeN2)Z}cA)A^otkTB@?uA-G}m^Z>P(%QYiIIeN2)Z}cA)A^
zotkTB@?uA-G}m^Z>P(%QYiIIeN2)Z}cA)A^otkTB@?uA-G}m^Z>P(%QYiIIeN2)Z}
zcA)A^otkTB@?uA-G}m^Z>P(%QYiIIeN2)Z}cA)A^otkTB@?uA-G}m^Z>P(%QYiIIe
zN2)Z}cA)A^otkTB@?uA-G}m^Z>P(%QYiIIeN2)Z}cA)A^otkTB@?uA-G}m^Z>P(%Q
zYiIIeN2)Z}cA)A^otkTB@?uA-G}m^Z>P(%QYiIIeN2)Z}cA)A^otkTB@?uA-G}m^Z
z>P(%QYiIIeN2)Z}cA)A^otkTB@?uA-G}m^Z>P(%QYiIIeN2)Z}cA)A^otkTB@?uA-
zG}m^Z>P(%QYiIIeN2)Z}cA)A^otkTB@?uA-G}m^Z>P(%QYiIIeN2)Z}cA)A^otkTB
z@?uA-G}m^Z>P(%QYiIIeN2)Z}cA)A^otkTB@?uA-G}m^Z>P(%QYiIIeN2)Z}cA)A^
zotkTB@?uA-G}m^Z>P(%QYiIIeN2)Z}cA)A^otkTB@?uA-G}m^Z>P(%QYiIIeN2)Z}
zcA)A^otkTB@?uA-G}m^Z>P(%QYiIIeN2)Z}cA)A^otkTB@?uA-G}m^Z>P(%QYiIIe
zN2)5G>pi(!QZ_|TPVF`_>Gi?0n+}S9Y@o;f$nxOXPmp~;015!HgV{ix70GpGcKYPh
z&V3T21}&=7FDa^bLe!V>-u)x{fB+N#0xW<N$WCNqDu(OgqJp_=#`K>T#b3|qwR=p{
zf4?CBAc9QN+A#nXS$>V$DuC<4!n_G7?S~}S={e)K3~IVf2mlTc0Tgf<35sCYZmx?D
z7mQDCJ7{s89&wuJa0tZJrb!1bK#L&7N|oJQC$9RI;;M-@)#4H_<9xLn&=f%t4A{zb
z*4}mf=SS(LyF_M#*)6~YXh0W1mPM7VT>rSR9acxFa;k+v0MLN$G~#+sP6ne1ZFQHS
z^a2{t?a9rEEZz3i>*Nhnur$h$Q~d}C0386HE?iGY?t-sC6IV6_fDQmp7p_OlX^Cs7
zY&q3W0UZFIE?nc~#s#WbD;okpH#olO>B9A(_{N&+vJuTwKu2ZKT$dTZ)969X^=U*_
zIg_fnE+>Hg$D=w&pVeVX<&IO&>^Sud0-wiL?>WtJc7?~e?izb;hpAOz2eP_Pt7YPy
zm@YBD=dWAb1*Thu%P9CAwV*-rmI3Q_O-bMJ^PKe^`^8_~Df)LkN~YVO`Fw*a-$Vwt
zI!B*Pl1LcIGu<uErDwVB9#^yD)T#p$ZirdgYG(R>$1Hjnx>bDy@D5X}bd5P@c+&rU
zJ@0N1rq1>VC=68I4pXX(S@g)UUy6S<d~yr73{Jd}M}pRF$_C|USkfKClkV&_{i04&
z&-9n2D1^JlRwo&w7CbN`{R0v<DB%VYNm9#0v3k~<T>FVWW8Q{thmRgm6s_LzBWOc+
zx482=MOTYn@z2bh`Nx0#1%Z7B*T<&4{n?aCr@|fuO+ylI7A1!dAO7~+Z)eV&DGCo1
z?HrhJedp+Er`GOTaQE}l=eO=lI)3~Z%J(1Iws>>DE-`0+9$SM~_n!HO4SV8LlF&>d
z{d9+DSi((fo}3NwCfA=$sXSwKYXxaxVWEUKWzV3-!Qk@Dk?O7rB&=&s8BnzwcD|T#
zarS{V2tf1$4?IxG|9SV_cjb|t`%^!UJ&(VWHOtosOke%JQm6uJcTMUNa}JGm`i`F@
z^3b6}>Tc48&uP-tdrxY!O0kmn9@liQRmU!VRFK@db?bu<KKO?}{GngJeiHL_(p^)Q
zzb4_7l$3w^KWo>nm6#uwJViP2SJkL?lPk?x*HPl%e*0}9TE0L0@I#4Tx^*b6fuKz}
zp-1@j*W=vcy>Gqs)@!f5Hh1n^kxW?Ij$U5EqehLo;)*NozWeS~t5!+Oq-8BBC#N<M
zn(HtK&^~vIJ1_e{IvD2W=3aBnHHxF{+qV<BB6Bp&FM)aU=Kbz>zmvNcUwrZ2y?cq=
zdvI;f>2**-tJ{C}HAP4AL{ceHf#~RHZt?kcVM8h`wUTan%ih_<6ciNHty@<~PMtcH
z$V0_BbJuqvke{D_?z!ix_hw~f5y^}C%(|j$Ou0-okJam__ERdwrM(S$d|I?<p#ZO5
zz54FmyCt6QqeqY4aKjDiE`fji;~#Q&)|!t#omdGod+WYAB6;JDHyR}+Oj~jA;6Vgv
z<mu%<om7dsDH=Zd=p&>2WtUwhlEp`T@^mPdUV5n#XxzB5Je9ibYf6i1kjoJ86xVc}
zy{2EBe<&057A{<<@FY;betm&dzI*lRWxOll<m6=T9w^$;bJ~UTH}(|CPe1)MP*P&v
zc;gL`p%?Bo{nCR)ySSt~P|byUuuYpbA}QaGKmNG7MIbgdmUvA4{_%A&)XTuKJmM*?
z={m8m1kZ;be%OfTzy9?vh4$vno6kAt9OGRH-+AYqB7^ZPfoapG1&SGC#*Q5;l6i$&
zBw%{42v@CIH8nL=1o&>>zP(Y&9e3Ozw-_7xd;c<eX}rUA_h~h;v3KXM1h*9{Rv5t~
z+`M^n!Snd><J57}U3EEp_;3;9d+E}p=bd++x)n5V)>&sIBqXRuCQO(RRE$Wv4Ek}A
z{Lg>>V-ibDOypKh!A3^n-9tHcLYXVx;Tkje+l3E`8QiK>D-)Ph<YB{xVUIof=%c1v
z#>-l@YNe;AQyzZ)`R5BRxWIU;r105ipN(Dp%P+rRd((-RBt|@CY|flHGzB$l)-;Jd
z`|Pt)48|ot&XBNd&A4~CW~{Vq+XxWD(5+p&wh2t@mo;kCFqv&up1uD1>nSHzB!kNQ
z{`bG%xzjf~SdlrZ{bUAlWogDe!Zo9$FJ@d)aCi@J{rKaLLGg5W<lw=BNqk}PzP_{m
zgd3*}Rof$6Ger9Cr2pjUr=NB>twEF5pg{w;<}-QuEBNX)*Cio<`8t1N4}jXge}8$}
z(x5C<OeFojczc#-j`I8NLYZMfaqvLBu0@N-l+*UyMR3hnHG<Sst5)rgfBfU^x8L5V
zQKRRcd+x;-U&KH2{PWM_0AZkX<&{@LPy}B$dh}?rkW;XUSrX>pf)W}c(#2f+rU+xs
zrS-<EIdpEl;$yxM4HFaP1iwz5I*&c}SoiMTnbOM0$S_V)px^i@Dk|ExZ5v~*FTecq
z?|=XMC6`=M&R4(i!VBm>{_An9aWX{#R+F$HC|0-J$~8nY5sb^4nMyoehmYn93%A^I
zOW6QtC{4AUG-*;!PL7dK>tXDFT9sE`c_na2Wid%K6vf59iE`#c4<6pNV*BVXXIzTY
zz@l01R<3Ec`^>sBw_uZz3r4uKx)y;|VoZE=?ATHIN~5+ihj;DTg%9@XtFKnCuo$RZ
zxiVfL<9oAmlbKa9Oq+)4#NEm@##rLI4gyP;E?t;zphcZNeY!<dMGUXk#~*(zGh9Z5
zBNE0-*0X2N^UpuOR7qkv#Ia+?@C9}2)=iR;lJS*)x-%5Z(u}*3Yvz?$skI|71vHY9
zk_5~VBSs7wG{`!z_uY4&sS-tmVv`bl?@gOFwVo<km@#9<i2Ur?{u$E4dss4o13~r6
zB?Vl`H4S**Sy#!@pbi~62r@XCSsP#xRjM<NP!liqT~fg<Cah)4mao75x(KUj)=>)@
zVw{vjv5I#k*PUa|{$~DtLXGmA;BEfPU;Yvn(kfM|;J&tx){-<&nKA`OXxQZa^{;=u
z>#n;*OwE5yNNr(dYTK1ulko|uzTpX<QW@UNEn;cQgBHJOgc*F%Q|#NfPafH@VZ)3W
zGl(gz#m?x=3f-zau%tm&$}!hzrOS3D*Q~^wmF`>dm6w+n6&0nx2^;wS`|mAMj2N6g
z@x&9#u;)dzt~gcBJo8L>5hL-|ty{~Q6N_qNVq!41!=_UNC>WWUzI7L@M782cb0ybg
zd`ZS2KwuFFZL&q^+O=zEkrBj}FJBIoRy5;PqsUp;{KXevSWzo7%a$!eGxK*|t=F~i
zm9hF45NH)G;&#tH_gJTcMTxBQ6wNFdUAb~4E1GV-^;U^_^2sMD35ypm#%n4utSPdt
z9Lb<-S45TRd)BO3$g|oU6D91TV)xZ+**>!^XFeb>?{5Mp=p|ljRv=iXL#;9E-@m_l
z>VpqH5aluyl6YLB63J>MB^fq=&&T3Ih;P3625l^hwX$Btm0U9~ATu3s5tLk0B!0`V
z_!|WtdE^l^uzuSZxoOiTW<Bt?8$0Mdd-ljWrLVsF$|xK*%=$M|B7<JCG7VL@2k{Aq
z+;ryiw78J#xSGre?A*T;5IT46926o`BxV%@8Aji@E?LR2V8MblYu4=8u>%h_PO3m&
z($dm!#BJQTG4NJk49zU<fLcpt6gYC^2y?8gRbIb-J#9X#(U>K9_0?BzyX`hsznBsk
z^zzL&-$dd5LtEJw7S^5OQm$+4+P@qS+O};Q6r!+^Sahryzwp8f*(|^WCA&hxdP?Kt
z<0)Ew`t-p*Hxe2cW-NvW54Bfabrr9m;-7KG8DWzYRDgnk{`^DRS#{%8uFu<*@0%mQ
z{S_3VGDI>162iw~+~dPgXynL|ffP#&CIpNB%aDMekG%Zy%c#vS(p*Q9Yk|6V@7{qV
zPMkQ=L<G&kx^?RUC5H?dVv;Q9B`#CVwbbiRKKZ1aU<N)uf4<McH-1=K9w;_&;6S4c
zVaCGN{Um`3gT~;!K{Gp9tW1BnwZCRREFg61)F~)LVIy&tvhoD)N}y!Jh7C<5zVy;d
zfnsXMhZ273si#B?yNi+#w1foe2^}N*fAbDy^qPL57yIjJwftkQ#ej^Z6dJ3N?lM>w
zj_`V!WN?A9vPdyVfK3@D8G2;=Ek+qG)sR_=0b91qzsiwWJl?{75QbD<9CP^(Imygf
z00=C`GqGUtlAYJW6dN(H%1lp*x5`K*#@Iy{T_j>mMHx3|i5M|*7k<_F3uCWTlO3jH
zaESqc{(T46F=Zci?~nW1a9oA>NH=HuoQJru0`ajD!)RAg$q<Q}%jiZuC_AQ=fCQN5
zq72ZRGio;7;!<r3Wy^`;ns`<xjvqfhusErAg$~Fr@66mq{#9q@vwhUewFKPAb#3N8
zlDGIwBaC6|b00=j-+$kH(uHw3fy_7r5*i`~PSyOE?6EZpmtpOhq*hYGigB;bebi=7
zlPO)mJaFIu&I%)m7Q^s@15MF^Cr$OXfBMs(WHG0@YbC(my_;{oS>DcaQ2cW0DP~VB
zrphG7S~c<TEZEq~zgIWRk~3G<YZgv(){ub7;tdl-)-RhhX@Yx`=_*wvc~+gQqR6rs
zz$LC;%_$kUL1;a2s;kJ-25!3PCRr#Iy|R`6m<}&;&6z?h{{Q8;&y}rKXO)Dcs<0&q
z7~}u;x4#ATkXxaf2k*cCextU~;jjsltpU86y~dthZ^lTIxqt&jS>W*X*I$Q*l*+}D
zAtoQyi8Lk2v*yG&hh>FdlMMD7%Tr6zFY)XYpe12lQ&>lk%&3x0D~=Rb&U1;)$-!0}
z7YWp>SFaB3tzrT~7-2mR+wECb5ZJ}D;o3M=ZDO!gm(*@1v)GPpV*K*UFK^bY*>~T4
zr;g|elrcTR!4AB7Rn`wy3^NyVjVT_R_7+eaJ$mfA>#j4QWV$r*$UGxMB-WmBVg?o(
zke0dKE~yxB&eEbqi&)stD>$Nobu8*UJ$Yp4(4nS8nl9CTpSZMl{3qRo>8xGMHRH`;
zNq5Q#lg3FX6Jl~nvl*!^JdnuzNQfD+lGr!KbA&=zmzpdNCxc|uKe+ZT*PMjIj(|M}
zeCPh*`wB|2F_LaHB8&f(mwVi}aYp(|73L^KW7>j-u`$rOCqIpBl3D4wLVvq*%q3Z7
z$jQNv076|eo)Z`pIwDKE5-E^AR{SdEYEwp_Sm+oltB=_9jXNDZ>{+uivKByG%rzsg
zA#-l|<@ixBVH=cUAw&SWae9R2BE(%5qblX4T{|jjIiyr+2oYcn2J$pS!{**$u>pr}
z7jx}%j88pNjsV5RX47Q|^wcem3%0V53~P#`DVe5JYrk2EYBcy6N{1*Ffwyp?nvN?}
zNiqdE_K?jcXkgx!@_gzs*P(iCS94t(Z_>|8n+veiSrcd_UE+J}+O;c7Km!?3F={fJ
zMTv5>f@u>dd&evq030UF7(eW>cq+AQ`IlsnH7o8i)rq^CYo_@yT{s*Va9HwZbag7|
zN(x{J<I`Zk8+27+y?XW3gNUL3op;_*F$9>p!W*y3Mqq$Ns!U|F{FrqS#s@=(5f)#1
z_Q5qitE@C<7`mHl4wv9~s7cFS7N`S{D+~>+++`LLLrV^xRg|e+9wNhbe$zH;$`vcd
zmAo;)fSvUuWm{p$!e&u5F|~!?g;I(`?cC0FZMrjj#XItRE+$-3r9H>MSQyx;r`9l7
znNr~x2P4IVCr_UI&_fRyb(Sj3GG;kWJS%SrzyD&rr*^#^ezKqP{mzd1AplPQD;2yZ
zVVY2uCo!i9@1|RUmpHT)*9?b49BCW)Y|t2-tD^Ax<fi@&*QKb`ZnwjKGfEkRuHG?T
zfC@YN5EN%)Bn`On2L+6`jA8coVV==zhn;IPK2=hfmPE#bYj#es=oCF!+E3u%`Ziqh
z%h+VV>}%yG8yK+A7?uQSWaF6w4eO1!@<s-Xvb&Hh^ozfW?3j48a_JGSG192o6H-r%
zR#@U?1!3pNaIlXwN--<{?RS)wuJx9Z;2ExI$7+Gnk__Kzy?nyX4m*cv=58d-E4P0~
zH*L}T9az)7#C2`Xe53W-mXjpVsd)<L&>EN$)<H>XcjPVM$3EDC8c3qW7*BCcOU`dC
z^`3coUSS3RGAkYWR{#Q$uizNWNO8(>@_GOGYy1n1%F=p!uMPK^qwGniCI4Z`lTulj
zEn;O+1v6;zb$HZe$<vWz1svgpJCwv*tinOXJXWtyj6T>bFlJFBG0R!H|I9PbSj4}=
z#5i<CYV?s~h5R<F|Cpn45e@s^<eH50s~P+pZDDb?RPguSd#}QH4ErLr6M^HA{Y01X
z2R=--+p}CtW6u09hcgS^?8&ltaz$9O$}E5jm*YkyJuDC%o^)44YP68<S+2=GbTfn*
zF#9^(%K|Uwp_Rv9U1o~qL5{lO;1o$oX6{0MO0^7*P*YttUV52pp_{&&q4$=(zx`qw
zYdb^#kXAW44Sbvh!>nT$mib<~br?(BvAWA?j2Ve0>~XIBXz)`JtnRpg-&B>c7-+LM
zlda8x3&jIzDrXF@;6-Y)c0qA=Y}%X5!!kE*@w9&vp&>3c*Frb-2y2bggqCgdoen1-
zRw*#GWaV_?GBD2m0*<51&OTur@<!ZZgA)JZ|EaYwyK6%b8se7b+5k=zjwx)RkqaKk
z*qeBQZ@<fh9XBjjVEKI+I5j=OHWPk77lp?C1-SB<b>;V(StuCUcH59U-G-kSaT_tA
z2j_TCHpHc6eJ{WMBfJ+KDq=qf=iPB8dDvfRWCb8gQ#k#Slb>0z#3C^^crID8MArI>
zLX<N>IX>kXe(SSSbQymo)0pzmVO_6-;=`e)FwP>M0kf}XcQXfms%kC)wq_VlS};{!
zE}7uwcth5&2HozruV6h(y9XxxnXZ`~#JnzOG9nwPxekpdzwia)^yVYx)#ps|ti0qS
z#||mp*@_k7cT|m=3yvKx#!bh8z%$d^d_C_TUP@<y^3ZRO>|M>Z6+C^5)?&`ak<Lun
zz=Z36TH0)Pewr{&o6H!^wA4^lb2;UV9|#*d=Qe)x)Nc>aDW4to%pxnPDy@v>x>Sfk
zI=>JE=>!&T?tSc+-;TlIJkmh>O*Zl66mG)kD%HCEQl-kGu;$t#P^XGTQNdw+*xcJ!
zWPV$G^tW~3{0bOLg4t2a?`N@RQ0o4Q%+Y=iSP(n#RJHaBXs*kHHVwPjZ*$gnk{t)C
zD^~%QD|5($-#20}m0>fYxeg0aSOH8d3@tow%t<ZU+;_w7SbmiND{j-C8A%(u_L=!d
zI%xYw&0&+L1Wqrm2gW}}f>q)j6@cr`(bXWGkutqA-8!RY7WY!4oj^2L0o~yErpJyP
zj^N*+{2cxws8FdIF{fqk1c!2MD0sCPFZ)*jR>Y{;@ZK<e1kjC``-%cHA_4ojo{-$7
zUy}2=4uiRMb|NbYbO0C;ij@-kxK7?MWzeEJkww5e+JFuK6-^Nd*vIvroQyt+Q9Y+S
zwBk6q*Z>;P0boQZR!Z#Snpga|s9pbgx*0EZX$Q0)7q(R#MJiw`*I9el^`9Trb4IB%
z>*PvjciMmp(10#d6e~Tpa?M*3(nbwQuG1q<(`^lbxZ1!4Xo{c+2JGg#_;A7a<hFwr
zYq~9P9akHmfD6zfNU>67H`lzVurO~zN_&c{Zp=fp|9}HT00mr%oyZ0%fNK&=L7ls1
z3?>JE+A=pW4j_We+_htDs?kzrDu!!$S7vtl<YiqLO)z-GSAc5>Pv95vzHd+cNtVez
zAOHn`01MzmwiX9!t4OZp?R#>!q-=_wytLcMq}TA74~lQ>!9Oxi_5lGX03?tXJ7OxH
zYddnGby`6{b8Q7BcgSe2-NB=kTxhPXpyUo2&9ystw2}+WwH1`yA)~o=2ai^Ap}Dq#
zk~?HH*Y4oaN-i|lR#0+>jON-MJX*<x=GqEM?vT-3yMsq7xzJo&LCGC5nrnCPXeAe#
zYbz+ZLq>D$4j!%KLUU~eC3nbZuHC_-m0W19t)S!%8O^mjc(jrW&9xPj+##d6b_b7E
za-q4lf|5IAG}rFn(Mm2f*H%z+hm7Xh9Xwjeh347{O74)+T)TruE4k2ITS3VkGMa05
z@Mt9$nrka4xkE;C?G7HT<U(_81toXLXs+GCqm^7}uC1Wt4jIk0J9xB`3(d6^l-wbs
zxpoJSR&t@awt|v7WHi_A;L%DhG}l&8a)*rO+8sPv$%W?H3QF#f(OkQOM=QC|Tw6iO
d9Wt70ckpN>7n*A;D7iyMbL|cut>i+u{(k|D_6Yz0

literal 154542
zcmeI52YeL8+sBb6N=q;FUP3QHs?w!O5k&q178GoN1w;WsdJT{OAtBUMdQa~VAQb5e
zQk32ivCss3zq@m{+1y<&mxw@kC!ZzE?al6Oe!qF@JTup_^V+v^=Td$e@UII0g8A3@
zxm>xP%jHHZSFW!O@2f8izdT%v%0nU`5s(N-1SA3y0f~S_Kq4R!kO)WwBmxoviGV~v
zA|Mfv2uK7Z0ulj<fJ8tdAQ6xVNCYGT5&?;TL_i`S5s(N-1SA3y0f~S_Kq4R!kO)Ww
zBmxoviGV~vA|Mfv2uK7Z0ulj<fJ8tdAQ6xVNCYGT5&?;TL_i`S5s(P{e?y>>bCGh6
zg)2A}uHvHX!BW|!NM+|DqFq(IbSXkZ4-4<oho0Jb8Wq+1ly@x5TUuu;ci<EG+=@<x
zwVP;HiH5kRcre3#j1Q*uG=CE9E$t@Up^QVJ()I-(&%tK_g~?+)@t2V0T&TeFdGqAS
z{aoJM&lP$;Z%Mm?MGEA5K5uT9LIrp{h<h<#-U4~^l(H|Ve_Hn<FK`w887JJNSkV^?
zKc6pup4{ArgZ{3C3vk}U&901np#u5xypS(XImbfc4zN?K$O|v#&&wy$IbWXKMGNEu
zAN~Dlmvt<}lW<SE@i2T)q5OII(Beg3)b}i5_aY|?=FbbE`tzb))}c_*0{Quf+|RMo
zkb2P24)ZfwH{LSoX5Kl2Gr6C8E`Q$Kjs>5$_(<jt`54Y1DGo0_uismVHsJH9G#p;c
z4^v<zUX}o1H#_aA7$NilLk2LkikonqpijKykEK6@hnLSi_ng9}n;k^+p~?rSKU#we
z^(2;eDhz|hUb&nKK9Bh4&8=(~<y!cKv?p=1W7Khy$7Wb+k0%-o1D;Uaga;^4pg^8H
zY4_xOUiF8!L?7`xckbLKJ@e!d9TAC4F3*=Q-}BF>L8>3&CeQYmU&3P^_0I%Dr-B85
z8b}46{M9g`aP4U5W07lw4snA-c%eTUl97yBMjp9?G7_8$m$EAelnfZURdcg*E38n%
z4|0uk^De_iFv4%H6(H~=^x^63U&zmBfqHHwx^V|{t{EyOT=Un7{&3f>UAtw=mL(-6
ztyr<5XV0E6!p-gM?0kKFIa9G>Mdg8b$lSR*ckUb-8k(4xxN_x6dcyIGFTUvI<+WM;
zS+i!%=+UDqRjNei!i5XZnKNhAs#R60DBF}3D^~35ufL9nh=_}en>A}z?b@}KJF0)?
zlh@})*ufJGte~fgExH=qct{($<_|$X2xSG8+(bw&cTi+4J=bV;cuhk<_n~y=yif()
z5R0I6%a=zO0&dGk*v>U~Ky`BmetPxl^~WE7{Q2jfJ9qB9eEIUNTetf6@6UNxSJ&gm
zkKew1yFmkGUpamt`o@hL4<0-?ckbNZfB*g0Uw`%P-MdhsLVNe_{pX*5xRxIphYlU8
zTeq&gz5S0r{&?@+y+(~1xw*N;#>Vp2)vH&}o;^$B<jIrGnl%%*buOq_!zX(P*+Dk-
z15cyFcCN)=!A;PaT!rEiN)a0h??|PPYXl7~AuNJnbQuwV8leghb}r#1*8&tLX^Z=3
ziEFJhqB?o<<kZyEzJ2=^En4*3Z@+~Iqz{30adA0%^eDr?)6<jBq9+o~yEA6YKuD2a
z+DNmrv-9rVyP+O2FITSI(xpo|k2Y|3cRzUWAS0(?!-n5{^9?6cQc`Nws#U5~DSv-|
zaqSB)C`t@n`DBUa(-9)|N%EkFwTH<b*XV!#BJL)BAQZtwAtUK}u2J#~0}dJ<u4&d^
zdl;mi2l)3~m$o+yDxL>r+qP}ni4!M=hldNn3<?UuMw@Vru1-!)e)#ZVr%s)?3aPwv
z=gz);`^uClvuoEb<hMnO7My?SrI#2Ur%s(hv=1COfb6$y*)l3B3UWXA-~;jJqrlM*
z7cX8E)`7oQgZD`_{tefTs#7QIHJl2y55>qM_7~HPcq)HadaiNBh0Nnn36mlIcE}Y<
zTd0C8agB=(!iv34^TX}Lpc2TpZ{J=}jBLVDaB#4PhX-$&a9yxq!L3`jqQE<L?8v)K
zn>Izg@87?_Y}vAcYdGb6wQAL_U%!6g!Ue=xaNVX&8$1EHe&dZd#3w@WrAwFSMrU#6
zNl~nQZkD*Vdm+ExbP6XKbq%MuZTv-yUNkc_A<G=-3fg+E#Q@+EI`dmG@kV=%@)x?D
zal%P1B)p;<I^6iQY4(~?p(rBtS{kT*dJ^O4wUaWaR0n{!@T?#LmkGgy$M@cQuU@@+
zoX1}4b+`%F$h8UA&6_vps!u-oguCt7v7>zX@<N9<Y0^X}ZGH={4}Sptz&LSoa^e!6
z#Q0Y{F{_;=u6bsJ4k6+Yd~t?5fVn|4=gI|BfDEUi4{n}bhYLTP@xZ9yhno;Rq5Qdt
zPz(HrFI}vNat4h-AI{)ZaG;YlKU`ePXYnb5XwEPcm7!%k7?#>Y3U>DF*)wd|Fn+_-
zgb5R7&YX!0ee>qc`}gmo+ZQfe*tl_HbU5z{xfVJc$wjWQ*PLIwc5Pr_;IF^_diU;K
z1`NL0;lqa+4`_9+MRlO(@!tLX{Ai;eh71|PgYm=Q)E?|fHH=)RlL*CLtAVY(h_8*_
z6oMn3T>Fh}Rb<n(D55PqE8appwQyCrgBo88-wdu97*$-0!kv&}?N&4(m$AXEG>-J|
z!Ysa@@WXi$F<P_^oY4|B8ki#PrjLVzgO867N)=wPp|FfIcI?<O%r3<71LNr1?%lg@
z+_>@DwQCr6u0lnlsJCp{Qo3|$bOL?&!3yJ(W0!I5;CkD(ZRgLQ7jAr)E?w{dxhLKl
zHy=85sBp{>YSlSO8;9BxKF$Vc0IWed8zlm?Im3A+jCHlc2ogLa(YRRTOyC#55jXni
z<5~14bclE9K&lNw6$7fX*9zCFKZXFJv>EO2OJ{}_c^eT~GZOIRxm;*qej~XYXoHGQ
z2Cflj@#I{~9mu)i;hW<o{tz)9pr&%=%19rfG5L`E`SW8*@u0LH{Aa@L3Kc5QC{m;d
zSE15t)~v}@bml72ldBvZ9rgF54?V>h*vC3BNQxIPF3vC}0Zp%P%%Ah|oZ%S&ghT%@
zCMQi^BK62J%<3=Eo>shz0CG>mNlRRdx3~j6P41?AoSK1WbO9IRL3=`aLM|s6gqQ~F
zPa-~oJ`6cwAO!f2^Ecy=F=-Jf4Y6mckuld+{!H-ExYn@JbFDaLMnz=3!Q}+?r~(ub
z8sPC9<oaNl2e$rf&)U1$<r;SI0T5wxuG8hiZDU-s9o+3P914jxkH%+*@oaI;pRX~Z
zL6JSV)-IQg$AADFA*38w=YR8Y7+=I35743~_HXX|^k1uueA$o)NCYGT5&?;TL_i`S
z5s(N-1SA3y0f~S_Kq4R!kO)WwBmxoviGV~vA|Mfv2uK7Z0ulj<fJ8tdAQ6xVNCYGT
z5&?;TL_i`S5s(N-1SA3y0f~S_Kq4R!c*+o9uL*fb1SA3y0f~S_Kq4R!kO)WwBmxov
ziGV~vA|Mfv2uK7Z0ulj<fJ8tdAQ6xVNCYGT5&?;TL_i`S5s(N-1SA3y0f~S_Kq4R!
zkO)WwBmxoviGV~vA|Mfv2uK7Z0ulj<fJ8tdAQ6xVNCYGT5&?;TL_i`S5s(N-1SA3y
z0f~S_Kq4R!kO)WwBmxoviGV~vA|Mfv2uK7Z0ulj<fJ8tdAQ6xVNCYGT5&?;TL_i`S
z5s(N-1SA3y0f~S_Kq4R!kO)WwBmxoviGV~vA|Mfv2uK7Z0ulj<fJ8tdAQ6xVNCYGT
z5&?;TL_i`S5s(N-1SA3y0f~S_Kq4R!kO)WwBmxoviGV~vA|Mfv2uK7Z0uq57j6fAP
zJ9$V1BmxoviGV~vA|Mfv2uK7Z0ulj<fJ8tdAQ6xVNCYGT&kh2vc9mU}qgo03Mzx*0
zzfp4Vh`NJ6?9!}e#VW2vE4vh};wn>uIUE5PR9UW8+`dsA=kC2q3>jB(Qb>(C(RKWj
zUJ6<Nh2O041N(Go<WW}bCK=C}bi=ZXa@48l(7uEF$D_(k3iFs7SIaNCj&dZ`^-HR=
zB&O^7)qWdREcTl{ZopfwHS#E<$hfOyJm)YjSa!AZtmfFGPqA<2mY)?-)i<fSZ&D54
z#G1Z|wdQjq)t;YJ$3L;b^7Y?rS``?vHh9Cz#q(#4eXm!?29-*xbQgVg?ANn8W2Gu>
z&*~0uzUMxAaXIgp%5xK|%uT2|H^F0WLbZ7b)#oK@j6-*=#nD~Xt(p(lQ5(V{*N3iO
zv3Sn3(Qm*0s%NDVlJTc^w5xWxZe@p_{ai;aEIlixyiY;}pSX%Xah2x8SDq7JWp2EY
z@x<!BM#lXT>W8i$hG<7`ToD(sI%e}q7+(__Fmuw^eY&=;U$MCAwn-U(YP7oWzDn4&
z>)<rZySP_Wnc4AWXUCSC9ar8vu7bBpw~tEq9F1;8z+oJfUSnZ&yEQ9)BG!h)N3KbZ
z-IN%;K6=y2&1-^I1o}=JJG57aSL&8?myY^VA>*pjeyO%Y|F2vpuP-qxuGGw!(z9YY
z%FK>c828SE@fyAfwFB3Gi1v=!xI8&_<M!m}l*EXHsCAL+!#EkdaQ1|egL<@UQm3q&
zWc*1ouEfiB9lJP<Sm5pzU1DZT39p!vGnGRyUd9UJI+b3{FQ!S@iU}K61;%b(1<|{=
zC+^x7zcoIbmm60Ht_t>FGJo2buLgE&)3A0KSIPL}X53(%?ce^)W%9aWGh>T;MRSx8
zhf24eaRj{V>^OsrTQuSUo4TzGnY(FCP<-Ut9b01d?M~UhJ0*2%Tw?Twi1ndsLl=fF
zp0mJb;>geYcWz$4R%sW>_+w&R)!R)PI1HKQIz6hGS4{C43eno3XB+`9HA~Uz$hZ}i
zUUgo4%_XZoS{=L~d~HZV^!lAC@rU-M{%~OT-kn=h5+h^7S8rIkbj32?zy&jXXMQ()
z@Y|hUsaI1n{$EFPu69-3>|Sl}IC7DjS4^=P(b{2&@pLNPsu549;v4<avfxpxLjoe!
zg(Ssn*tIPIu8;kA;PC!kw3A{sMyv~66A}=z$Y-(dv^mp94f~`|hh}wZmU5Od{-4OW
ztDQ$NyUslv$F6Ymiglk6Ee?%t8k%%lQRx}EZI$P5Y#X#>3WP!{<YKsgJox>|V?V(7
z{@vTQB}HihzRZ8-!nu>Zr;PaG!``npu34j`lVto+GVZE)Vm<mfO<3zTBgTEYfoOBO
ztuSt?($g97_)2r)s`#z$5wyrlmF_gUPn|sa%Za1#4*N;5n{d&E1z$3MI!1ifq~V_p
z=+(AS4axYUq1)B2dP%!CKX96~-fc#-8$@e|QMw^Loq$`CalMyr(TG=^6I;zc^xdF^
zvsZ^K2wxYHXi(;RPM!Se-073Z_`&aY;Jn2}tlfl*9^@AkFniIwss6Ladrkam@cTX6
zHmqK~grk)4?31oabg%avCvS9Bh>kKI*<(BtBVJ)nRILTeK88f1t<7tL6QXd{;;`Dk
zoH%mf+^MstPW<%4{_l5gAt)p3vVO&q<;#4REl^at->h*n#t-}S-Pc=rdQ>Ye8P9sQ
zO|{Xl_j8=I9-?u)IgDJ3h6Tp;0&Yd6>*F%L5ijo(QE$QGA%P2Ktqk%*enlXLM4$ZW
z2k5?Z;S5^+@PXZ`&!z@tVGF~S%w6g?BVf*?`7_5(ANS=a?{sTfzp7+B3j$7f<!0CU
zb%*h*U8YC7s6-38(=%>?ZWEPmg>iEuPI9%p&t^~mMV|-y&s-5Wf8(lUcxBrXBZ<55
z)6Sjw`O2m97tftO@zdc0-)~2yGZ@eSsQu8zJ{a);pGkyf)5d=BQNOM&>Q(V5<{-6t
zrleCz(yFz?m{4bko)%>|{srS%ip$FRY--@Y@bhJUUdxxxLsv6DvL$Zwo*hXzX{Uca
z2HjULLpZX&fA20s7_J!cVE>Rs-okD3_4;n=cb^Y<tMe<hD@w+#&<)WI>)H?ZbJ7zn
z7@r>XZ)98_ml;E|bVl5mT#YO1v$?+CqCrdN&p<`54O>VKjZ7Nm`{3SGIELx#S1&<2
z)H49~>`2ClGg*cnz-<d&=uITPz<VN$PZ{&sfVVom4CC%n#?9=wt6lAi_Mc32oEGIg
zEt11UIgFxhWL(qdCMw;cqi&-SS5&$>fug3`;>vo5*Pg#*z!KkSWKq!4Oo7EktRdD$
zmX99ZcjlMlS1(`q_1YCg9Ov!u{@ui7h=25^6{OlQ_j<-Bj~?=V?~YAtl&|V$FAHD{
zVy^mQy$3o>33r+r>CB<htumgTZb*MbD!s(aXvI}i6RJ#qmsaRDBv;FLM^^J)_Vyy*
z$-x1$R|d_8M5s)T+k|g+Xx~o7VLN;3*K3!5y?*85`7^|2oa8NLNKyOg823?ReB!9V
z{a$ZN$&-Qc|2ot7bl)HC-KMSm*p*JxqTt#<_kYB=IyEL_x#UbH%c4sfC|2ke0<J{j
z-qBU(g>?^@KW3S~V!qd*&)0<{M6TVg3iy#jdkMfVUp#x``c-5cUmdsY(B9NtDe>tT
zSM4~S+dQu^-wprh&CbmmR4GZy_y27bD@50?W<PYU<Fsf&wDwyOa3kZHs&o^ro>A_l
zID|4gHaoWbg5;M%cXnBt(qc|rB?IFIx=V?<Q95kf!<^S5{H~D2KC6TMvCE2p$8N%c
zANYO;E;`XSD*eW<*AR09<NH#XAypXPq}p-CbMwIgfbrQ=Mt(K;ovv*g*Q;1UQD|z=
zVa0)Y*4|RJcb`EHsyJ&b>l-#Qo<0UA61NnWF*^p=tM<Hk>~h47zka#<_aA@Wx%~6h
z_>KDqc*mAkReBlaH*y_UanC9LfByLgv4uE1?U04DnfY3`d=cq2EO<&n1TOmFeLGJa
zJ%n?9^~%NHjEtk?6|KHK0XrVEc@@688lBBSMflC0Flo$}ANTLov4v;73dR3lF^*8T
zXkq`|a!q^dS=P5T0XH?`m~XPC#wkwxG56_F97gKXF|K%PYxnm1^X?T$)c^c_|JL`X
z0{jwds{*dj9k#Q}?R&q{=i$SL;o+MHzTa=s=%IlNyuy~uLBKJ}R3|1ztw*JQpPI}B
z89Myj>7QX-m2vF&>7S4P$a%&Cqk^#!zBU-g9&@nN&&zx2=#fJ|`k-I;4$bS={eQx^
zt6j~qc8c$9s=f6rYi+%Nr!lV1i5OgN9plABn<TkW!0A)mKe_&;n+FBU*REYVaNxji
zzx}3>e&TX;K=Mn9&lX*3=g)J*`J|*IH#fIjxpI{#=JxJeJr?*(rcMdUs7OR$QR&Qw
z?nsW_yK{?R{OswIS1zAd?D+L7m+;|E9zAmCdwh6`oyfjMZV213atZ00fVopAjv4ml
zp#J^)cI(jGvu^ofib{WWwK_uGp^L-B4Ng-HE}2HFm4=>iB`8y;LJV9hv_`p6ltMKr
z#VWMb36T;rq7<T$_qZb?1%v0$pYPPElcS?!%a$#pqM{I9aUOjhu%#iz#$rft{-cjR
zf@txRFJIpFZCi#e@ug}7#wkZ!7q*C?j1U{fVG|iAk$(KhK|-_37tRV_op}7rsS_A?
zOgu#q$wINO2?|^4>pgw!sILZp@oE3}`*!c}O8sY+aW$a+e3p$ut!H1*?KCAqvGOyb
z4B1hbr2-r_f4&-b{>JX37uU!9@D&RI=%AJ=6=wjPxxP(sI%UcfBZ0Y`oSf#)o%{FS
ze~Y(HU*DQ|bj-c`fAW$cQLS1vttXA=o_p@iH+!X~BvG7(K3~3cE?E?exWf3Rl}wWn
ziKDm4y&U~v9|8FJv%lcHUB7yn-?RzP5PyaQ-KdAzyf$Qs|Ln<QzZo&~(_upf41A|&
z$L5}O%DX>fGLBHc*3)6~COwInw8^euo%!t*U2;LPXGm%%TxBAr>5;A+K|5ZBV!@a8
z`}DOfOHy8eZiIT}?w*3dt5>hquU}u!V8Ma~XU?2?|Neb(;r$19MPuE%b<aQlyuPQP
zyKC33TauIFqr=CI8tONDB8+3iRmQ12Urtr()`SQ|m~=YK9zS}BJR3Q;tCudoI3YPN
zNwkt$SEBN`&1+XIn>%arxNpB2HT<)$zx?>4{%>|{(V%u&_h%&if>2km&yrB9M7!~O
z>9&?fF08wG>nz0me*66K%h6#wyRu^I{Ea;t#Sb1l(ApPn>{*=hGJ|B-&-28|&6_vB
z@WKlw3_|zRsZ;OVxuac(0v|YVph-9FrHiX;`SRrp7b;Y}YNdX?yH6YcO;EtB)xmy5
z;)G@_F^CIat=1$*kytyhXZw$bzCUsFFf3!kvE%4<EIVTU<H0>ln8rtM3|u^a#^kZ%
zM-TsQ<j_&W2Y*b)t$Bkw6szZOJC0Dde@(U2O6J6t!x<F~(Sh6BT>ayyMu%wJynXKE
zmAHrhC^i>gYxeBfZ@&4akB`rve=2&IpVQY<mhb9*{m)~xtuTlP4<0=D!i5X!MgN>T
zcdkm6DjK;~8o6`lc5`uR-n8MT1NzOHGMY3go*UKXIB!&;Gbu*!wIewO-L8;+a1REZ
zx));e^Jjh`UZahe?@8UVaZT9#IbPEyeK%?B$O&V<9y8*LK?C}9GRSz&^xUX9DP{N3
z_$*jzRj6GtxTmgd5k%a&b?c{}e)|3Q-^EMu8y-iE8ih%Pmppm$3?Dw+D5nq601qE3
zDw?axlqq9{xP}cIE?Kf<-@bicfBiK#vC`B0t$g|Nxx2YEYEbvRzHbCCo`(@fu`^}1
zc}-x{hUG+FgzDRqW03THySL%RVbclL@YPTM{1e8VbX-zgWZ;qo-d<CtPaZdA{1`|d
z`|X!QKIz?|WlfLb4mr+IN2r@Mwk4)clXv`W5@?$aeE8tuJ@|s+Pd@p?-QB%Mj~<sU
zUDD|O<(FU3s~QFQ^XH#1VS?s#iEd-YjL|w|)X1ARuY-dFzccD!%lSc{esb-~rBgp2
zV}1nNy(K;z0gu_dB63quT;wXU>)VrJc5h4Cw`=>My}OSb+Q-b<@uLTi{IGjlO2qON
z^L!VK^j<L7d&#>#VLf~|c9<H}sHrDQQOxFyp6={7$)f*#WF=9SMzN;e;d)j~860fE
zS3p33AObdtm^7|KLPAUkdhx{<QR&FL=(Bh4-cqGX*}~Mn?^B{giGv4~SRUu$&Yj!$
z?%n<4_nVh5pWeJ}bYSG$%cBObjv2l#e$>XqvEf@LL~ffHxnn|j>WKBJgI8|vw=}s^
zKtl5ciH&eR7i?(|u(iR0<OY2{D5u!&r=HxjCv>%|Q^|hVyeuei7-!mR@z!SKGl33^
z{PN2$3og)^>({RrJR-kuz4ewkM@5SkWo+ELckkz)e}47VSIs;8cV{pnckkXEKYslG
z{`bG5M-6VqPnR~c@Lwz)WksQG)v#fmIPdx;*Y!`X=b!9JxB<%?3sYViHMd5svW_`O
zjiZHHwYHzIE(`e+h=%U)gM)<kwRP*(B1MXrbBz!cD^|=RanRklbLU#MYFT{uzdMO*
z7Z(>NGzsn^J_f_`_PyU$?tWu#yoYZ>jd`Yv#5KCv2m-D->Z^=52-woVdvm>(FSCX;
zhln<dINa^}4skHfU0P7rn%>qLDDY`fu6s`}67oA^#tc0>*k8^gwu1%@(x1<28#k;_
zp+c^%u4T)Xg(D9SkII!R<Hb2UJDUe+Hr^by^UXKk2v?BtnUIhm{)8PTy;(0zc23<B
zz~Z(5V&4zJxS(4R@V7rIms8{#b3<7DrB9X=xHCkv*!JwNsQ^W~!$eV&tp4)LFZ=iJ
zPk?MA1zI<(Ika}`)@}6Y(b)Rr<m4ZI_~F#4Q-oc(d?d|q_Q;vX#>V>l`xB16^2#ev
zuU&3Sqjv4u#fujgJwN;GGr=`E9})sA9ffg=+X5*2ek3aUeyBUW7#I)O>N&!@TFo*!
z!y8vT@Fx121S@i_=xq+7EslUKjsCcE5uk3|xY3|N16x40(uX*@Zr!@Wh7F5|h&X%p
zEGAV@km>I~{`dp$Zu<1;O`A3?P@sU7kI=s*VnEKoyNDW?OJ%x^1*8z2@wNbIJH4ok
z*Yn>}f5w{HO*~m9oCDN2581W1C^WLdGV_~C;ei@wIg#%o+6qbSEYh1NPMj!NvZNl#
zEVb?I><H6VuU>umvf}1t`-dUNP1?3?i<Y+i0Z=1a)UfLpUv`0j=!`dl(C_q8TXEQu
z>duR++x7L5If82z;=MOKa|I63>OtyTNtYqr8}@%7G9lZxZPOex+d-x$8opPrURX?H
zb|u?9r(JmS=FJ5Q7F4WQ(e@`nnTYF|VZmM_+UmX^>9+nz+ZModZy&`!fB%beX+h0X
z9Dh+M`h~YGTpJ3Cgn+|!><_~QL`+6xNt6T&sC~rn_U+qgJUzM={y$E>rl_s+j_tT|
zMX8h^kGCYHIi*l6L(sPVu(&ONy3>my;}~(j<l4h$Rjygq;pwNlaRd8rgEB2aQS`P^
zv=sqIho>B$CdfgKtb=LtE-p0wIY#->ackjDls$a-;fJ;)RB`p=<Kwx--w*Dr{k|^=
zB8V2-0%W$gk4krPtqDOM4Qo3;{am-}?4U%}nN4<>b1h20fJi^@Y(lH~O9CiAKR?@D
zFTo;dE-lYyf!7R9k+%K#<Bx5jn?FI^Bl)KZ6gyE_q3!~qUtgA?N@s(<nH#IOZR`H@
zbKUd3%pEgEf(h5CuVa_O1wJE2j4<ca;+fK=OK;e)Ap>SCpGF%`o;<l<zkct&`|hk+
zvyL58=EZFP!QayodKMo^oP6VrH$;m5#|vvzp;pS<jEfO6VVvBHcXYMad#go>PqDFP
zD84_!F;k(|b4`sw^x-eB{dr6)9w0=u0;Bd8xoF}k>og&}#Ln~P&HMJ-Z^@ZYoH)^B
z{;N`@N}-{l`l;}YZitgcevBBO858XpGHQ^%6DIr8%>%v(HPvMZVgaefxY({ux3>@5
z0*DRz5~|LL^XUIY>8D?=Kby%Co=kMO@Vzn9gw<=l?{nwxn|g%NlNn*Cowv8QU%q^~
z{wnh}ej2(|%W`Pf!tanFL--WIJ26^VSeW_c;tZMj)YMe&)4X}}!i5WKH?iKJ<cSGW
z?r`hwHKyY!Wu(l8Dyg*1yR7c*!w#IEO)C5JbNzLI4O|-?Gc?<YD=`99a#=ff?j)bg
zRHk(#v6x6`rUn-kE&TbKHEX{9`s;#OaxA#(;uCl6+U4o#$!E1`(?;a6#d&^TzkVI-
z@WmHjG-=Yr7C|<7VCLqCCb-Xohxa$_|4^-WHEiXSe!Diyd;82us64_q2ZUXtLo%K6
zPy%Wp)T9o6yLB2&aC@lvL~tlI$u#LrPkkA%Mv%U7`0!ydAJL~zABs<Si`qgMVTy$K
zUF(U4f9<u`C`{7SIE_u4Her-)Pnww!EnYIx#HVaO;WfjsOPg^4sX@Rq+7^KHOT}?P
z<)41J9=|3N1x|Qn<l1@JwpO?A-2fAWTF70qX3g-LETSh)lB{MHOd~6!#-vG;=wGf}
zIciiyAF2((KPV{3BnC&KwNeL&_Vx9}Kv;PI8{Zl_bg1~;!{=Avm5DM}V{yB+?b<|K
zHf3!N;Cj-=Ou1I3s!5?>tVuOs(ZB?*nR^08<gR-4>Q?ZimRpm-jEF|Pivjb_JMWlu
zMuFf<Gi7G++L)La>dCEqy6tbh{r20!%1}~8-VD`E`MO%lt}PW;8Be!J+^Evy%FPJR
z0Xlrj=FGWP9d%_*?!qmN|G1;n7ct+&^kSw+Ld1?8J1o*<axyY9678*5*ErG$JLxs1
zGMPu)vnQ=2Ra}dJqtC@NFiVb~pXu{h>CmN17crvF-PpzShmmV#!Gck`MZ=tNWm^ER
zs2t#%O^r~>#%u|@=*D#I@3$3WN>+*)A}i2|w@6f)XkZhH^)K}jjfj2s-FNyVCz(u&
zSoHk~y~)h*L9ooKA3V1jHELw~NEvm|{JqP+ANEbG?iEwQWdAN5<9d~DSTH^_ItRpD
z(;{7!!h^`n8Aq<!*k6<fGn2?1Vn(=$^Dsq<Ot1rYNDZQT=FAzUAPKbbuA`%)nIqGT
zubxNrhDmKOcU!u2slE@YKr9OA-MhCKCy9xP?c29!O+hvkJM-Y8p85KpCvZVwHa*vh
zfTx#nJ>#XkqDnpezS*=$v4T=Cj(}T{ac2w}W&8k6l2g;488J=(g<7Uy`18*{fA78b
zSeMbbabsqnAOemkIK*=%lZK@hv8|p*@?+-3OO&YT`!HZkxaM6HJ0pru%;>2yI<Ilf
zVCEZ1W+=Pqiv1W(c5|}CIP26RO6CBr!<9vLVuc-vP*uh=V%(Y0&MIjjMNUacWrSN+
z&r?*)x(_{%xMU_ZhfI;9wDo<^59C1jtO^w>Xx=*=P!!}mv-%9JTD1}}`<35+U}h5$
z7K=$UV%$WfPu-|4)qlEkq?6aNyF0c?8OCaCrP8g|ew!I_W!3GTQws#(*wd`yX{A4W
z5j*RtB>hEV1ldPF@GilZ@RPMZjEB~(TZ?<5WcKghj}pFk@gg-UOkJ6L7BvYiTC^bN
zW^!J8NfJQJ$XxtwA7w}y*D#&|-Ra!62`h6zK79Q0k~3pV;dUA=l#X!=M%*##(B}f}
zWy_Yajz+`E_689*w%GhyrXaPIdg3F<QByQRM(g<T;~K^K26<Pl$Pk@Ru+I`s^T~AF
zNV4c#wrsJIQp4N`qkralig#=Ug=<z9rrQ=kBVEyi#zR%<F~z@Kk^|<szFk~;c3c@X
z+pla|A{ftDr8@@i=y2z6Wfc$c5y7?X6pNnJq9CDoXt?Mm*CM=x?RqLRZBx+l)mL9x
znYCmc3d@4TZ36=X%?FtF4CGhE#~r=6ku<o<wZ)AfEHKVi`9po&o_>2hY<6kyc*-!8
z8C&v2{FyMWs&s=9SF$KNm5wdDrmoZ@lW9wct$`^T<hn_Sf$EPx{)i}%+a$#;7KV^<
zwI#!5G62xq)22-mNj&Yd;1sWq>5|>McMHvr#^~F(uhzl5!TMiuX9}TJnMJ>)E6=bd
z<1xiP9_RY>bN%6{Qmntj!6w&dWSogS!8n>Kol3`EGZI)O0W8QAHqIP0>t_go#q1$>
zz=^^gf(}vii%AvrAtr3v@{$!CqJ)^4Zsu57=*Jm-z<%h^AuGui)V`Se;Ira>90AKS
zlqmqXwu$cPk;VEB$^msLz27h46I+F;SW#0a%5MxR-Dt!$l`dvLwCW>fnXNNx{w{=?
zOl~qkDMBX_BQRnMvsU_;_-|TImiCxGjCO{>COpHxAKYdE2zty&w4gf^#;0y}f32s}
z(=XQ@JG;*cXPJYCsEejtR#es*ReCxju8O(q`n~Tyc&O}dL7<e4*(L1q%9Sgbh5Yr`
zUzwsJ1u8Ia*RGwmI$PuDku-4WG29xn<_*#>JP)7s`|S%0w>E-kCH7PpHzD0<!I65S
z+s5}JOjzyKvZdqG&vg?|mnkbeD4HTC#+<vtxT?}s#)T2rRJ!7GV#}BT5nEK@Vr9c*
z12xiJr%oLZ){2es+19RIn<=vvlWf+nBAwfzLkDwy^=Cf#fcj@;-6*R+`12L@rQ3%y
zy^QPWRv4cV>po(Un`ez2P)Ay)qT{IfRVjR>gp5*H7*`j$pwfjAFQ*!DWv@szE+hS0
zk`7{X3>+To6PkKFt+a8aaHlgZIAr-JH4MahdP8iTXy(nCXw&D_%^!nL=bqv|?5Jj#
zz}0bWlyOa;r&H;0J$R~1jWYI6zg$->X8-ZXivC;bu~La@XV#^P^=m?<n;UUTYT;cg
zB3-p=6-6E90BUEf<4iZq^tf^3NU&RH?eyu>LfhkFvBJxGXYnrX8EXx!#987YxuIB`
zOHs<k{R7Do<AN&FxMrIwt6JTZalR3w&!;$MIe=>xr}TWQj9;QBOHIl7^R?7ugH^^+
z>B5L3;Auu2=MAn|`t<jGrHr2?b%aqGv*ry_9QZ{jNpha(ZK@GC!{R=sze#-%{4zgf
zi=2`S(c)<86RdMhj1U|gta$?FPo+P@3L~LXD7j&6H599p0&p!zR}8oQFfrm&Ho3Kb
z&9TydvYw0a^C%A<vUyW??@gWoTVLWYWqq;2c%o40su5S$EgDt2SQAm64i|shD*zuk
za-<$QlQurKpoYm!Oef-r5D{Fn+>%KO>y+u=)lX-T?#`%sflIhQmIar<<Vh^PWc+9f
zoPuE-5-1k)^_elQ2sqz<GA7uiVO=(#XYJmj<mJD(o4O{~={x^Ai&7f1Js`V7u#lWZ
z<t$87ReDXMO2=&zahdXc)<}2C@u`9f64B;!QhH#K;!LZB^|XpMBjK;V{t|6mGAy-r
zPckPKv!;kM$+4<ct7<(nZIDwHD^O72;Rio8p8`--x>3f{3pm0)BgS>m6zA%t*>*k$
zaIJb2_5;4CvN)yLqODC9ZfT@2o($tcrCTuKs;^#=ed@%TTr_Z|rKD)=@NmQ00drc-
z&oFO=&Sx^3NoqV~bS!O+IE2w;E}J_L6bu+JKueEnovk;-wg6my;kUimETd5CYjwn|
zpP*aS>ggHp`L1IQAzD#8sPT4fOZvq$Te9utMO&LLG%zkydYTbu7ZKJt7`7dVS9Tsa
zbk0!nO@Wa002aXU!6*&YMAe*M{TZgJ1xL(QFmJ__7FJcy8e)zVYnO;gF?|PH+Kj*>
zM~;Y_Bpewnl(v~@3*PmN8#YeoJ5a{1bZOc+XDD!C6d0CuDmqPA)L_|;7VI9W3OI}_
zDm`F}X2cP2LtKVd=OFT0zU%eB?kdS`M4LLyOyR|2@7c3wN=k|qYb%h~Poi-ZHHXyp
z>+es&1NRY~sc*^BB3$i0nowW=^Ei6Ul2GdfoOU|K;d;<ir|M-;;7_}y)?0t*?*FL=
zCBf`Axnx`O#RkSv>6VQ+!MJiH)YyL}Pyl}N<Vlk)VKqoi8Wb3?2N9`JWD0MMT$#yK
zCO3pflSwr5*o}QQ$h?t47Zt50pOWcI*7e{hiic;(o*HN2ft!$P{xXg3so~Du`{X1A
zE*Mw5@g~LRZEha8qm9Zq0uJM-bj^q(;OUIG8lBY$N$q&!FT+G6Hq`c%DRWzRbj&Ox
zutdScWn7Le5UU253$q@|K_z!!7X|%Bd71L7b-=6>lnJ6)!$oev2BFsTP7$^9sAW!k
zp;eCXz)j@3dP#@jQ|bq&zRH58W!qaL;7hj&l`f1p0*>33X2it~5=i&fW0M~~RQ8o6
zs`@u+G?E@zXKGQ#jvdS77ZrmVHIKYO0hKWKtU%m+;A3NurDrpfHjCii9p+fIcuvyZ
z8sms|moDWNC$<gR(JpX%+hs7mO<^3BZeqk2q#1D~7)SPhxt1hk1Wj(THFWl9B23HF
z*~{LYxvE~hdOW9i;G-8eFw3JF;!Ma*r{1HS#;tbZn=&f9<VdbD*|jS;kMnC1va4gz
zj`oC9M#eQG{<3*oCPK3{d){J(NTA35C)UI5Y;*KTE@TL?R#!agZ?{e{p3{+-xxH3~
z1YeNBKD}yKog=wMz%e~N-l({AO9!klwMGcIk@42)jkrE8Q+8|gPpVJMa__#f2OvLq
z(b@#oBO&Nf-Gryo0&_OG;;VwPEYS>xC?^)dwQftOl~ajUxK>4bykE1h-JKP>Q#%AJ
z0**@0#E7fWStE5DLuF==5R8@bHfAXw6_1(ThiOxu%9wk9$a+kw2eZL7LjB=5$LghW
zSg55LYpsFR?$)j1(xi@|yI$i99nv!{jJT%KMI^4oWoovq5wd^$vSEi|vYO;TfHzYL
z9#03Vh`qeLwCQhB-%R0UM|(#(ja}u`vQ^F&YC$)mU89WSi0O@%@9Gk|^R>{O2zaO9
zj8wW3i5ucFkzb|r*<ZJ-id-otV>b*dWx9`tWj=)xBQ|T&qIkX-h*W<zh*mDa{r<|)
zqePAuYC$)m-KIt91rhC+@9N6epTT%Y8smye*Npg5CHJDmWzE=P8X4!C9oQ63&`m0v
za-;0!Iv&+XU}lp_C-FS|K6xdU*kNj<O}oUHj0fVZk;|MKd*)R4ThrcJqq3Vl1q=f}
zuM?UI*9N+UfSagvB@#EpWd_DcxFO(NrO^$%Y_-7(nn%T*?f0QNlq@<sHfTiubZHZr
z-YMB48r~;wcIw`bTB987l9@j|n!J8h*U1Z8tk}~{rP~7I7UMD^aU~ev+AK7+Gez}c
z6HB0Gy*yiEJx+a2h8zpRq=_K<!Gn9$7cm=~J&A^Bg!+?7jy20aBidU}I-0zF+j0R>
z9hdL!9=1y`-bJYNOpJI6xfjKbBlRr)5{pCt90!=dmaL|z{I^{^v)YrLlvu<e%8CTh
zf8D*3aO7L+<+3f&5Iri;iLXS-(Q%fZUwvEA<nH$UKdu$By{nFHA>bB_xM^IbX4@d0
z^<Uc8Wr94r0WVy*@THetdgP2VsZCKUHHxh8H3n7+)qJlXE{7UhWyeMfe~d4k?DD3f
zy@5rK(lgUWlh-QeJYrgt6}!9RaV<x>4FYaKr5hvhwB)Mlwl!b8_2uO|yD`&E?m|cz
zzghZ0PJ{A;f4{8_GoDb)#2E=3ljUGHZ=FdxI+h7{6BjERFW(vFSS{xV)YeBPn!ItH
zV$%a#t=RLrO1GZzbShoAZRSQ?IO^opqYn?g@Z0yA1&49!7T8UNB2vCAl>~V9Bpn}s
z)jcNl#(&<qvj5C7JO{NFl)`>CJkLtHTh|%wJ!FPs-Kx)^nKq{$y4$uYGjDyn6?=qq
zo5;9<aa~-NF1c!m%hX7m=$lEgOE>r9DQPlJgMwkaW!C<%2?O(+?9M@;#Ns=0*NlNo
zWuFOgcE=KVl6&|6;;WOf9cq=J`dy#O!o%zm9qq(ke@z-bn`YXaYb+GXyldAA0nr_d
z%G`u*O{I%S+*)##Nij0*@kd6H(72_3ak-v!+GIR%o>?-_PB;`ZP;tuqCMholfcXk~
z&21xu7ljAZ$q@8SiC{BEWs|OKq(HTSfkclEc52nyfwGfl)l6HUn;IK;`~UT;x;VbW
z^4;Aq+(vz_SLqt#N~+By5?5zPwdATYA&$JS+xu?nNpJQO<I6YiKS(PcGhtu6#HnNJ
z8}=L~WTws>XPd$ma<HuArL2@GZ!sUue(!u&S{4frEJ!^>f49P^eV1q1A2TOfoI$kt
z?#RCVJr*al58KrxY*$wu-Fn8;8F4GgRS||m`jV6u44%kCL-@{I(&<!*P?LY_?sc>=
zt0p;2s7F^*xkRBUDH^uAqFRZ`Xf6MF`20#%4XYAufk91Xtv4Wg>`JH3JscR}Ijfc|
zBl@y>-az;JRTss#3)}S?u{LhGo^i!XPalcvjJU<*s;Gic>t57aWeOVc<#6d&?C!~G
z&<*?FU%#(EOMuVc*rmnkCe-U+vek*|k11b0W1USa?;42i=|IT&WQkU+=My>@8-niM
z{VMxKwhrCZiMW-lS~gU=d2$s2S7uL?;#Iz|QWUnOm8LUix@u2vDgY@XxqR~wU+jp~
zvo4t0C%(9W?ez$vF$Y|(eucWS_jUH@R%~>LQ-`i;68)sme&V02(yiF;E?vv{tZN>!
zld1+7M{j49ar2^=v>8%mF+#fKCrYidvSe8OUOdb(^DnFS^yVviBMuGb8#>6*u{?nt
zzYSY|s9Pc^E3mT2I1|&~EOKnsMzztZKla1{fAS9i4z6~uwk|a_uyJr|JKQj`rsgVL
zmwU0zh?`cfrdxiZTTv)h8>vf%W5tr;vNrGSlYtRecgz3W+p#HGP|32n;c&HUQqTSC
z8FiO#Z5^E2US(WS>6VN*F1qm2ZAh*vrRkO{SJf(I7Kxi|3n12zn(ytyj#bK@CnkIQ
zm|JS}_M}ZtAB=LWUqgwbpS&oUL;Vz-A<a^|f>ZxNRpv*&5|sL?%6RsTxNViIY0FPC
z*cL#1EsN#7eawwGdV5T$Q;&BXYLt}{o!K~dwPUioLx)l<5h7$(8OMlswra%Fsq~DJ
ztLpL-3ze&^A+>Q^0QEaNlubXhy?s<8E*5SmbCgrUo%p(w=FJVBn3QN+5J12^tGf*R
zvg*9>W~>~+cOtU3(TMBfvUJH+lgd?5<D@P|(3YQMvMqqNU7Ljs`l6ljw|fn6s8d<$
z?aaj4+=3wB#qHa+E-_+OorQ_bgHqdOMWt(HPPSIArfmzLYy@F6;<{}CGT7V4oo$OI
zZE*c?tkcU)r8sAuWgYJbc+GN-ufJJt{6f#g$t_tiMB%X-mt`{&PoG@15SRHIwgoV(
zAyxPN&^hXH#=U)FOU;TcIdyaK&u1!IUQotgNxES=;%w307W%l_S8}zhTiLl+pYr1u
zHdvI{GI(dZke!-J&r)*LWcf)8gAq?#QJ5|+v%I%Yd<F0La?>`I89KXo=N`_rDmW-C
z%fRa26Rq9B)s7e(#=G?>J92hC|L7J(;>J|lzfZ1eahcc%LcfMoG2+U$0EyM+C3?(B
zs4{hJg~5|bweREt%L>JkWsRdp+i<l*t5a~^rd7$0hu4@9)@(`gt1uq6y9))$Sx>I2
z%TLl(uCip<bXx%bEp^$h%{!{bn8lUf8C>d>W-irBNm>3^rrCn_&S;#V)!8P<-M&F}
z*RI{l4f(dt^x#((#kUVleT_O*N+5L8;@a#<Ml+<Q$yH^(Y+JL%+nO%g)_6g3L!a<^
zV;9vJ_*MB1or=|~${wN0M@w1G0$CZ6nAP*Dm=llJtLpM<>(cKGtoF^+hBL!j1w?lY
zN+IZ0N+1;8)hTkOO_jW>x)>o{b$Y5|#DjKF*w%V!N~?f`SLSSLGI44B&&OB)-+Sd-
zH7{1DvJ>M<Qv3w?wKyIi-C0rZ9wi(+tGl&nUb=VRs-F(8H^#f!%+NOTH@06C+bMAC
zYau(jgsMl#4%(fAws%~T)ZRa;jnBFkQ-hk0@bVn^MfIM&E3|yMczq8Srq{Wlr1)u}
z*dp)pq(nd>AQ6xVNCYGT5&?;TL_i`S5s(N-1SA3y0f~S_Kq4R!kO)WwBmxoviGV~v
zA|Mfv2uK7Z0ulj<fJ8tdAQ6xVNCYGT5&?;TL_i`S5s(N-1SA3y0f~S_Kq4R!kO)Ww
oBmxoviGV~vA|Mfv2uK7Z0ulj<fJ8tdAQ6xVNCYGTIRt_K1FqNS*8l(j


From 0bf893b19a608746b73de83ecf2d93156b24141e Mon Sep 17 00:00:00 2001
From: wasimysaid <wasimysdev@gmail.com>
Date: Mon, 27 Apr 2026 07:34:10 +0200
Subject: [PATCH 5/7] Scope setup failure exit to Tauri installer

---
 install.ps1 | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/install.ps1 b/install.ps1
index c1b19190f8..4406c3ab29 100644
--- a/install.ps1
+++ b/install.ps1
@@ -1066,7 +1066,10 @@ shell.Run cmd, 0, False
     if ($setupExit -ne 0) {
         Write-TauriLog "ERROR" "unsloth studio setup failed (exit code $setupExit)"
         Write-Host "[ERROR] unsloth studio setup failed (exit code $setupExit)" -ForegroundColor Red
-        exit $setupExit
+        if ($TauriMode) {
+            exit $setupExit
+        }
+        return
     }
 
     # ── Expose `unsloth` via a shim dir containing only unsloth.exe ──

From 7d3e01a9c5e41344993b1f2cfd59a8d1e0c53ab6 Mon Sep 17 00:00:00 2001
From: shine1i <wasimysdev@gmail.com>
Date: Tue, 28 Apr 2026 10:12:21 +0200
Subject: [PATCH 6/7] fix desktop updater production channel

---
 studio/src-tauri/tauri.conf.json | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/studio/src-tauri/tauri.conf.json b/studio/src-tauri/tauri.conf.json
index 497e15731e..77adf60438 100644
--- a/studio/src-tauri/tauri.conf.json
+++ b/studio/src-tauri/tauri.conf.json
@@ -25,9 +25,9 @@
   },
   "plugins": {
     "updater": {
-      "pubkey": "dW50cnVzdGVkIGNvbW1lbnQ6IG1pbmlzaWduIHB1YmxpYyBrZXk6IDJENjJENDYxMTQ1QTYyOEIKUldTTFlsb1VZZFJpTFY1aHgyRkRqZUdjWGg0Sm1BVEZoMDVWME5PdE42bjZiekFRc1Fsb0JNbmIK",
+      "pubkey": "dW50cnVzdGVkIGNvbW1lbnQ6IG1pbmlzaWduIHB1YmxpYyBrZXk6IEQ2RDhGMDMzNDNEMTlGMkQKUldRdG45RkRNL0RZMXZsaVo2TElUQlVHb1hVNWEyajhUOGFXeTdNVDFZTFdBVUtlZUh5L2wwWVYK",
       "endpoints": [
-        "https://github.com/danielhanchen/unsloth-staging-2/releases/latest/download/latest.json"
+        "https://github.com/unslothai/unsloth/releases/latest/download/latest.json"
       ],
       "windows": {
         "installMode": "passive"

From f8c7ca67b1add2ca792eae18ef861f1f77a04f54 Mon Sep 17 00:00:00 2001
From: shine1i <wasimysdev@gmail.com>
Date: Tue, 28 Apr 2026 10:44:22 +0200
Subject: [PATCH 7/7] fix desktop auth runtime installer regressions

---
 install.ps1                                   | 162 +++++++++++++-----
 install.sh                                    |  87 +++++++++-
 studio/frontend/src/app/auth-guards.ts        |   5 +-
 .../frontend/src/hooks/use-tauri-backend.ts   |  95 +++++++---
 studio/setup.ps1                              |  16 +-
 studio/src-tauri/Cargo.toml                   |   2 +-
 studio/src-tauri/src/commands.rs              | 113 +++++++++---
 studio/src-tauri/src/desktop_auth.rs          | 144 +++++++++++++---
 studio/src-tauri/src/install.rs               |  48 +++---
 studio/src-tauri/src/main.rs                  |  48 +++---
 studio/src-tauri/src/process.rs               |  77 +++++----
 studio/src-tauri/windows/hooks.nsh            |   9 +-
 12 files changed, 601 insertions(+), 205 deletions(-)

diff --git a/install.ps1 b/install.ps1
index 4406c3ab29..2b7fd0533b 100644
--- a/install.ps1
+++ b/install.ps1
@@ -8,6 +8,29 @@ function Install-UnslothStudio {
     $ErrorActionPreference = "Stop"
     $script:UnslothVerbose = ($env:UNSLOTH_VERBOSE -eq "1")
 
+    # ── Tauri structured output ──
+    function Write-TauriLog {
+        param([string]$Tag, [string]$Message)
+        if ($TauriMode) {
+            Write-Host "[TAURI:$Tag] $Message"
+        }
+    }
+
+    function Exit-InstallFailure {
+        param(
+            [Parameter(Mandatory = $true)][string]$Message,
+            [int]$Code = 1
+        )
+        if ($Code -eq 0) { $Code = 1 }
+        Write-TauriLog "ERROR" $Message
+        if (Get-Command Restore-StudioVenvRollback -CommandType Function -ErrorAction SilentlyContinue) {
+            Restore-StudioVenvRollback
+        }
+        if ($TauriMode) {
+            exit $Code
+        }
+    }
+
     # ── Parse flags ──
     $StudioLocalInstall = $false
     $PackageName = "unsloth"
@@ -26,7 +49,7 @@ function Install-UnslothStudio {
                 $i++
                 if ($i -ge $argList.Count) {
                     Write-Host "[ERROR] --package requires an argument." -ForegroundColor Red
-                    return
+                    return (Exit-InstallFailure "--package requires an argument.")
                 }
                 $PackageName = $argList[$i]
             }
@@ -42,22 +65,14 @@ function Install-UnslothStudio {
         $RepoRoot = (Resolve-Path (Split-Path -Parent $PSCommandPath)).Path
         if (-not (Test-Path (Join-Path $RepoRoot "pyproject.toml"))) {
             Write-Host "[ERROR] --local must be run from the unsloth repo root (pyproject.toml not found at $RepoRoot)" -ForegroundColor Red
-            return
+            return (Exit-InstallFailure "--local must be run from the unsloth repo root")
         }
     }
 
     # Validate --package to prevent injection into shell/Python commands
     if ($PackageName -notmatch '^[a-zA-Z0-9][a-zA-Z0-9._-]*$') {
         Write-Host "[ERROR] --package name contains invalid characters (allowed: a-z A-Z 0-9 . _ -)" -ForegroundColor Red
-        return
-    }
-
-    # ── Tauri structured output ──
-    function Write-TauriLog {
-        param([string]$Tag, [string]$Message)
-        if ($TauriMode) {
-            Write-Host "[TAURI:$Tag] $Message"
-        }
+        return (Exit-InstallFailure "--package name contains invalid characters")
     }
 
     $PythonVersion = "3.13"
@@ -630,7 +645,7 @@ shell.Run cmd, 0, False
         step "winget" "not available" "Red"
         substep "Install it from https://aka.ms/getwinget" "Yellow"
         substep "or install Python $PythonVersion and uv manually, then re-run." "Yellow"
-        return
+        return (Exit-InstallFailure "winget is not available")
     }
 
     # ── Helper: detect a working Python 3.11-3.13 on the system ──
@@ -749,7 +764,7 @@ shell.Run cmd, 0, False
             Write-Host "        Please install Python $PythonVersion manually from https://www.python.org/downloads/" -ForegroundColor Yellow
             Write-Host "        Make sure to check 'Add Python to PATH' during installation." -ForegroundColor Yellow
             Write-Host "        Then re-run this installer." -ForegroundColor Yellow
-            return
+            return (Exit-InstallFailure "Python installation failed")
         }
     }
 
@@ -773,7 +788,7 @@ shell.Run cmd, 0, False
     if (-not (Get-Command uv -ErrorAction SilentlyContinue)) {
         step "uv" "could not be installed" "Red"
         substep "Install it from https://docs.astral.sh/uv/" "Yellow"
-        return
+        return (Exit-InstallFailure "uv could not be installed")
     }
 
     # ── Create venv (migrate old layout if possible, otherwise fresh) ──
@@ -786,11 +801,68 @@ shell.Run cmd, 0, False
 
     $VenvPython = Join-Path $VenvDir "Scripts\python.exe"
     $_Migrated = $false
+    $script:StudioVenvRollbackDir = $null
+    $script:StudioVenvRollbackTarget = $VenvDir
+    $script:StudioVenvRollbackActive = $false
+
+    function Start-StudioVenvRollback {
+        param([Parameter(Mandatory = $true)][string]$ExistingDir)
+        $stamp = Get-Date -Format "yyyyMMddHHmmss"
+        $candidate = Join-Path $StudioHome "unsloth_studio.rollback.$stamp.$PID"
+        $suffix = 0
+        while (Test-Path $candidate) {
+            $suffix++
+            $candidate = Join-Path $StudioHome "unsloth_studio.rollback.$stamp.$PID.$suffix"
+        }
+        Move-Item -Path $ExistingDir -Destination $candidate -ErrorAction Stop
+        $script:StudioVenvRollbackDir = $candidate
+        $script:StudioVenvRollbackTarget = $ExistingDir
+        $script:StudioVenvRollbackActive = $true
+        substep "previous environment preserved for rollback"
+    }
+
+    function Restore-StudioVenvRollback {
+        if (-not $script:StudioVenvRollbackActive) { return }
+        $backup = $script:StudioVenvRollbackDir
+        $target = $script:StudioVenvRollbackTarget
+        if (-not $backup -or -not (Test-Path $backup)) {
+            $script:StudioVenvRollbackActive = $false
+            return
+        }
+        substep "restoring previous environment after failed install..." "Yellow"
+        try {
+            if (Test-Path $target) {
+                Remove-Item -Recurse -Force $target -ErrorAction SilentlyContinue
+            }
+            Move-Item -Path $backup -Destination $target -Force -ErrorAction Stop
+            substep "restored previous environment"
+            $script:StudioVenvRollbackActive = $false
+            $script:StudioVenvRollbackDir = $null
+        } catch {
+            Write-Host "[WARN] Could not restore previous environment from $backup to $target" -ForegroundColor Yellow
+            Write-Host "       $($_.Exception.Message)" -ForegroundColor Yellow
+        }
+    }
+
+    function Complete-StudioVenvRollback {
+        if (-not $script:StudioVenvRollbackActive) { return }
+        $backup = $script:StudioVenvRollbackDir
+        if ($backup -and (Test-Path $backup)) {
+            Remove-Item -Recurse -Force $backup -ErrorAction SilentlyContinue
+        }
+        $script:StudioVenvRollbackActive = $false
+        $script:StudioVenvRollbackDir = $null
+    }
 
     if (Test-Path $VenvPython) {
-        # New layout already exists -- nuke for fresh install
-        substep "removing existing environment for fresh install..."
-        Remove-Item -Recurse -Force $VenvDir
+        # New layout already exists -- replace only after preserving rollback copy.
+        substep "preserving existing environment for rollback..."
+        try {
+            Start-StudioVenvRollback -ExistingDir $VenvDir
+        } catch {
+            Write-Host "[ERROR] Could not prepare existing environment for reinstall: $($_.Exception.Message)" -ForegroundColor Red
+            return (Exit-InstallFailure "Could not prepare existing environment for reinstall")
+        }
     } elseif (Test-Path (Join-Path $StudioHome ".venv\Scripts\python.exe")) {
         # Old layout (~/.unsloth/studio/.venv) exists -- validate before migrating
         $OldVenv = Join-Path $StudioHome ".venv"
@@ -799,18 +871,23 @@ shell.Run cmd, 0, False
         $prevEAP2 = $ErrorActionPreference
         $ErrorActionPreference = "Continue"
         try {
-            & $OldPy -c "import torch; A = torch.ones((2,2)); B = A + A" 2>$null | Out-Null
-            $torchOk = ($LASTEXITCODE -eq 0)
-        } catch { $torchOk = $false }
+            if ($SkipTorch) {
+                & $OldPy -c "import sys; print(sys.executable)" 2>$null | Out-Null
+            } else {
+                & $OldPy -c "import torch; A = torch.ones((2,2)); B = A + A" 2>$null | Out-Null
+            }
+            $legacyOk = ($LASTEXITCODE -eq 0)
+        } catch { $legacyOk = $false }
         $ErrorActionPreference = $prevEAP2
-        if ($torchOk) {
+        if ($legacyOk) {
             substep "legacy environment is healthy -- migrating..."
             Move-Item -Path $OldVenv -Destination $VenvDir -Force
             substep "moved .venv -> unsloth_studio"
             $_Migrated = $true
         } else {
             substep "legacy environment failed validation -- creating fresh environment" "Yellow"
-            Remove-Item -Recurse -Force $OldVenv -ErrorAction SilentlyContinue
+            $invalidVenv = Join-Path $StudioHome (".venv.invalid.{0}.{1}" -f (Get-Date -Format "yyyyMMddHHmmss"), $PID)
+            Move-Item -Path $OldVenv -Destination $invalidVenv -Force -ErrorAction SilentlyContinue
         }
     } elseif (Test-Path (Join-Path $env:USERPROFILE "unsloth_studio\Scripts\python.exe")) {
         # CWD-relative venv from old install.ps1 -- migrate to absolute path
@@ -826,9 +903,8 @@ shell.Run cmd, 0, False
         substep "$VenvDir"
         $venvExit = Invoke-InstallCommand { uv venv $VenvDir --python "$($DetectedPython.Path)" }
         if ($venvExit -ne 0) {
-            Write-TauriLog "ERROR" "Failed to create virtual environment (exit code $venvExit)"
             Write-Host "[ERROR] Failed to create virtual environment (exit code $venvExit)" -ForegroundColor Red
-            return
+            return (Exit-InstallFailure "Failed to create virtual environment (exit code $venvExit)" $venvExit)
         }
     } else {
         step "venv" "using migrated environment"
@@ -946,14 +1022,14 @@ shell.Run cmd, 0, False
         }
         if ($baseInstallExit -ne 0) {
             Write-Host "[ERROR] Failed to install unsloth (exit code $baseInstallExit)" -ForegroundColor Red
-            return
+            return (Exit-InstallFailure "Failed to install unsloth (exit code $baseInstallExit)" $baseInstallExit)
         }
         if ($StudioLocalInstall) {
             substep "overlaying local repo (editable)..."
             $overlayExit = Invoke-InstallCommand { uv pip install --python $VenvPython -e $RepoRoot --no-deps }
             if ($overlayExit -ne 0) {
                 Write-Host "[ERROR] Failed to overlay local repo (exit code $overlayExit)" -ForegroundColor Red
-                return
+                return (Exit-InstallFailure "Failed to overlay local repo (exit code $overlayExit)" $overlayExit)
             }
         }
     } elseif ($TorchIndexUrl) {
@@ -964,9 +1040,8 @@ shell.Run cmd, 0, False
             substep "installing PyTorch ($TorchIndexUrl)..."
             $torchInstallExit = Invoke-InstallCommand { uv pip install --python $VenvPython "torch>=2.4,<2.11.0" torchvision torchaudio --index-url $TorchIndexUrl }
             if ($torchInstallExit -ne 0) {
-                Write-TauriLog "ERROR" "Failed to install PyTorch (exit code $torchInstallExit)"
                 Write-Host "[ERROR] Failed to install PyTorch (exit code $torchInstallExit)" -ForegroundColor Red
-                return
+                return (Exit-InstallFailure "Failed to install PyTorch (exit code $torchInstallExit)" $torchInstallExit)
             }
         }
 
@@ -988,9 +1063,8 @@ shell.Run cmd, 0, False
             $baseInstallExit = Invoke-InstallCommand { uv pip install --python $VenvPython --upgrade-package unsloth -- "$PackageName" }
         }
         if ($baseInstallExit -ne 0) {
-            Write-TauriLog "ERROR" "Failed to install unsloth (exit code $baseInstallExit)"
             Write-Host "[ERROR] Failed to install unsloth (exit code $baseInstallExit)" -ForegroundColor Red
-            return
+            return (Exit-InstallFailure "Failed to install unsloth (exit code $baseInstallExit)" $baseInstallExit)
         }
 
         if ($StudioLocalInstall) {
@@ -998,7 +1072,7 @@ shell.Run cmd, 0, False
             $overlayExit = Invoke-InstallCommand { uv pip install --python $VenvPython -e $RepoRoot --no-deps }
             if ($overlayExit -ne 0) {
                 Write-Host "[ERROR] Failed to overlay local repo (exit code $overlayExit)" -ForegroundColor Red
-                return
+                return (Exit-InstallFailure "Failed to overlay local repo (exit code $overlayExit)" $overlayExit)
             }
         }
     } else {
@@ -1009,20 +1083,19 @@ shell.Run cmd, 0, False
             $baseInstallExit = Invoke-InstallCommand { uv pip install --python $VenvPython unsloth-zoo "unsloth>=2026.4.8" --torch-backend=auto }
             if ($baseInstallExit -ne 0) {
                 Write-Host "[ERROR] Failed to install unsloth (exit code $baseInstallExit)" -ForegroundColor Red
-                return
+                return (Exit-InstallFailure "Failed to install unsloth (exit code $baseInstallExit)" $baseInstallExit)
             }
             substep "overlaying local repo (editable)..."
             $overlayExit = Invoke-InstallCommand { uv pip install --python $VenvPython -e $RepoRoot --no-deps }
             if ($overlayExit -ne 0) {
                 Write-Host "[ERROR] Failed to overlay local repo (exit code $overlayExit)" -ForegroundColor Red
-                return
+                return (Exit-InstallFailure "Failed to overlay local repo (exit code $overlayExit)" $overlayExit)
             }
         } else {
             $baseInstallExit = Invoke-InstallCommand { uv pip install --python $VenvPython --torch-backend=auto -- "$PackageName" }
             if ($baseInstallExit -ne 0) {
-                Write-TauriLog "ERROR" "Failed to install unsloth (exit code $baseInstallExit)"
                 Write-Host "[ERROR] Failed to install unsloth (exit code $baseInstallExit)" -ForegroundColor Red
-                return
+                return (Exit-InstallFailure "Failed to install unsloth (exit code $baseInstallExit)" $baseInstallExit)
             }
         }
     }
@@ -1034,12 +1107,11 @@ shell.Run cmd, 0, False
     step "setup" "running unsloth studio setup..."
     $UnslothExe = Join-Path $VenvDir "Scripts\unsloth.exe"
     if (-not (Test-Path $UnslothExe)) {
-        Write-TauriLog "ERROR" "unsloth CLI was not installed correctly"
         Write-Host "[ERROR] unsloth CLI was not installed correctly." -ForegroundColor Red
         Write-Host "        Expected: $UnslothExe" -ForegroundColor Yellow
         Write-Host "        This usually means an older unsloth version was installed that does not include the Studio CLI." -ForegroundColor Yellow
         Write-Host "        Try re-running the installer or see: https://github.com/unslothai/unsloth?tab=readme-ov-file#-quickstart" -ForegroundColor Yellow
-        return
+        return (Exit-InstallFailure "unsloth CLI was not installed correctly")
     }
     # Tell setup.ps1 to skip base package installation (install.ps1 already did it)
     $env:SKIP_STUDIO_BASE = "1"
@@ -1061,15 +1133,16 @@ shell.Run cmd, 0, False
     # and bypass the fast-path version check from PR #4667.
     $studioArgs = @('studio', 'setup')
     if ($script:UnslothVerbose) { $studioArgs += '--verbose' }
-    & $UnslothExe @studioArgs
-    $setupExit = $LASTEXITCODE
+    $env:UNSLOTH_INSTALL_ROLLBACK_MANAGED = "1"
+    try {
+        & $UnslothExe @studioArgs
+        $setupExit = $LASTEXITCODE
+    } finally {
+        Remove-Item Env:UNSLOTH_INSTALL_ROLLBACK_MANAGED -ErrorAction SilentlyContinue
+    }
     if ($setupExit -ne 0) {
-        Write-TauriLog "ERROR" "unsloth studio setup failed (exit code $setupExit)"
         Write-Host "[ERROR] unsloth studio setup failed (exit code $setupExit)" -ForegroundColor Red
-        if ($TauriMode) {
-            exit $setupExit
-        }
-        return
+        return (Exit-InstallFailure "unsloth studio setup failed (exit code $setupExit)" $setupExit)
     }
 
     # ── Expose `unsloth` via a shim dir containing only unsloth.exe ──
@@ -1142,6 +1215,7 @@ shell.Run cmd, 0, False
         step "path" "added unsloth launcher to PATH"
     }
     Refresh-SessionPath  # sync current session with registry
+    Complete-StudioVenvRollback
 
     # ── Tauri mode: done, skip shortcuts and auto-launch ──
     if ($TauriMode) {
diff --git a/install.sh b/install.sh
index 6c28b6eda4..95ab382f2d 100755
--- a/install.sh
+++ b/install.sh
@@ -165,6 +165,60 @@ tauri_log() {
 PYTHON_VERSION=""  # resolved after platform detection
 STUDIO_HOME="$HOME/.unsloth/studio"
 VENV_DIR="$STUDIO_HOME/unsloth_studio"
+_VENV_ROLLBACK_DIR=""
+_VENV_ROLLBACK_TARGET="$VENV_DIR"
+_VENV_ROLLBACK_ACTIVE=false
+
+_start_studio_venv_replacement() {
+    _existing_dir="$1"
+    _stamp=$(date +%Y%m%d%H%M%S 2>/dev/null || echo "time")
+    _candidate="$STUDIO_HOME/unsloth_studio.rollback.$_stamp.$$"
+    _suffix=0
+    while [ -e "$_candidate" ]; do
+        _suffix=$((_suffix + 1))
+        _candidate="$STUDIO_HOME/unsloth_studio.rollback.$_stamp.$$.$_suffix"
+    done
+    mv "$_existing_dir" "$_candidate"
+    _VENV_ROLLBACK_DIR="$_candidate"
+    _VENV_ROLLBACK_TARGET="$_existing_dir"
+    _VENV_ROLLBACK_ACTIVE=true
+    substep "previous environment preserved for rollback"
+}
+
+_restore_studio_venv_replacement() {
+    [ "$_VENV_ROLLBACK_ACTIVE" = true ] || return 0
+    [ -n "$_VENV_ROLLBACK_DIR" ] && [ -d "$_VENV_ROLLBACK_DIR" ] || {
+        _VENV_ROLLBACK_ACTIVE=false
+        return 0
+    }
+    substep "restoring previous environment after failed install..." "$C_WARN"
+    rm -rf "$_VENV_ROLLBACK_TARGET"
+    if mv "$_VENV_ROLLBACK_DIR" "$_VENV_ROLLBACK_TARGET"; then
+        substep "restored previous environment"
+        _VENV_ROLLBACK_ACTIVE=false
+        _VENV_ROLLBACK_DIR=""
+    else
+        echo "⚠️  Could not restore previous environment from $_VENV_ROLLBACK_DIR to $_VENV_ROLLBACK_TARGET" >&2
+    fi
+}
+
+_commit_studio_venv_replacement() {
+    [ "$_VENV_ROLLBACK_ACTIVE" = true ] || return 0
+    if [ -n "$_VENV_ROLLBACK_DIR" ] && [ -d "$_VENV_ROLLBACK_DIR" ]; then
+        rm -rf "$_VENV_ROLLBACK_DIR" || true
+    fi
+    _VENV_ROLLBACK_ACTIVE=false
+    _VENV_ROLLBACK_DIR=""
+}
+
+_on_install_exit() {
+    _status=$?
+    if [ "$_status" -ne 0 ]; then
+        _restore_studio_venv_replacement
+    fi
+    exit "$_status"
+}
+trap _on_install_exit EXIT
 
 # ── Helper: download a URL to a file (supports curl and wget) ──
 download() {
@@ -883,9 +937,15 @@ if [ -n "$MISSING" ]; then
             if command -v apt-get >/dev/null 2>&1; then
                 _smart_apt_install $MISSING
             else
-                echo "    apt-get is not available. Please install with your package manager:"
+                echo "    Automatic system package installation is supported on apt-based"
+                echo "    Linux distributions (Ubuntu/Debian) only. Please install the"
+                echo "    missing dependencies with your package manager, then re-run setup:"
                 echo "    $MISSING"
-                echo "    Then re-run Unsloth Studio setup."
+                echo ""
+                echo "    Examples:"
+                echo "      Fedora/RHEL: sudo dnf install cmake git gcc gcc-c++ make libcurl-devel"
+                echo "      Arch:       sudo pacman -S --needed cmake git base-devel curl"
+                echo "      openSUSE:   sudo zypper install cmake git gcc gcc-c++ make libcurl-devel"
                 exit 1
             fi
             ;;
@@ -957,12 +1017,19 @@ mkdir -p "$STUDIO_HOME"
 _MIGRATED=false
 
 if [ -x "$VENV_DIR/bin/python" ]; then
-    # New layout already exists — nuke for fresh install
-    rm -rf "$VENV_DIR"
+    # New layout already exists — replace only after preserving rollback copy.
+    substep "preserving existing environment for rollback..."
+    _start_studio_venv_replacement "$VENV_DIR"
 elif [ -x "$STUDIO_HOME/.venv/bin/python" ]; then
-    # Old layout exists — validate before migrating
+    # Old layout exists — validate before migrating.
+    # In no-torch mode, a missing torch package is expected; validate Python only.
     substep "found legacy Studio environment, validating..."
-    if "$STUDIO_HOME/.venv/bin/python" -c "
+    _legacy_ok=false
+    if [ "$SKIP_TORCH" = true ]; then
+        if "$STUDIO_HOME/.venv/bin/python" -c "import sys; print(sys.executable)" >/dev/null 2>&1; then
+            _legacy_ok=true
+        fi
+    elif "$STUDIO_HOME/.venv/bin/python" -c "
 import torch
 device = 'cuda' if torch.cuda.is_available() else 'cpu'
 A = torch.ones((10, 10), device=device)
@@ -972,13 +1039,17 @@ D = A + B
 E = D @ C
 torch.testing.assert_close(torch.unique(E), torch.tensor((20,), device=E.device, dtype=E.dtype))
 " >/dev/null 2>&1; then
+        _legacy_ok=true
+    fi
+    if [ "$_legacy_ok" = true ]; then
         echo "✅ Legacy environment is healthy — migrating..."
         mv "$STUDIO_HOME/.venv" "$VENV_DIR"
         echo "   Moved ~/.unsloth/studio/.venv → $VENV_DIR"
         _MIGRATED=true
     else
         echo "⚠️  Legacy environment failed validation — creating fresh environment"
-        rm -rf "$STUDIO_HOME/.venv"
+        _invalid_venv="$STUDIO_HOME/.venv.invalid.$(date +%Y%m%d%H%M%S 2>/dev/null || echo time).$$"
+        mv "$STUDIO_HOME/.venv" "$_invalid_venv" 2>/dev/null || true
     fi
 fi
 
@@ -1679,6 +1750,8 @@ if [ "$_SETUP_EXIT" -ne 0 ]; then
     exit "$_SETUP_EXIT"
 fi
 
+_commit_studio_venv_replacement
+
 # ── Tauri mode: done, skip shortcuts and auto-launch ──
 if [ "$TAURI_MODE" = true ]; then
     tauri_log "DONE" ""
diff --git a/studio/frontend/src/app/auth-guards.ts b/studio/frontend/src/app/auth-guards.ts
index 509b8f61af..52230f0b6f 100644
--- a/studio/frontend/src/app/auth-guards.ts
+++ b/studio/frontend/src/app/auth-guards.ts
@@ -9,7 +9,6 @@ import {
   hasRefreshToken,
   mustChangePassword,
   refreshSession,
-  tauriAutoAuth,
 } from "@/features/auth";
 
 async function hasActiveSession(): Promise<boolean> {
@@ -39,7 +38,7 @@ function authRedirect(to: "/login" | "/change-password"): never {
 
 export async function requireAuth(): Promise<void> {
   if (isTauri) {
-    await tauriAutoAuth();
+    // AppProvider owns backend startup + desktop auth; route guards run before it mounts.
     return;
   }
 
@@ -59,7 +58,6 @@ export async function requireAuth(): Promise<void> {
 
 export async function requireGuest(): Promise<void> {
   if (isTauri) {
-    await tauriAutoAuth();
     throw redirect({ to: "/chat" });
   }
   if (!(await hasActiveSession())) return;
@@ -68,7 +66,6 @@ export async function requireGuest(): Promise<void> {
 
 export async function requirePasswordChangeFlow(): Promise<void> {
   if (isTauri) {
-    await tauriAutoAuth();
     throw redirect({ to: "/chat" });
   }
 
diff --git a/studio/frontend/src/hooks/use-tauri-backend.ts b/studio/frontend/src/hooks/use-tauri-backend.ts
index ed697fe31e..445e37c1f6 100644
--- a/studio/frontend/src/hooks/use-tauri-backend.ts
+++ b/studio/frontend/src/hooks/use-tauri-backend.ts
@@ -35,6 +35,54 @@ interface DesktopPreflightResult {
   managed_bin: string | null;
 }
 
+const MANAGED_STARTUP_TIMEOUT_MS = 5 * 60_000;
+const MANAGED_STARTUP_POLL_MS = 500;
+
+type TauriInvoke = typeof import("@tauri-apps/api/core").invoke;
+type ManagedStartupResult =
+  | { status: "ready"; port: number }
+  | { status: "aborted" }
+  | { status: "missing-port" }
+  | { status: "unhealthy" };
+
+function wait(ms: number) {
+  return new Promise((resolve) => setTimeout(resolve, ms));
+}
+
+async function waitForManagedServerReady(
+  invoke: TauriInvoke,
+  getPort: () => number | null,
+  shouldContinue: () => boolean,
+): Promise<ManagedStartupResult> {
+  const deadline = Date.now() + MANAGED_STARTUP_TIMEOUT_MS;
+
+  while (Date.now() < deadline) {
+    if (!shouldContinue()) {
+      return { status: "aborted" };
+    }
+
+    const port = getPort();
+    if (port === null) {
+      await wait(MANAGED_STARTUP_POLL_MS);
+      continue;
+    }
+
+    const healthy = await invoke<boolean>("check_health", { port });
+    if (!shouldContinue()) {
+      return { status: "aborted" };
+    }
+    if (healthy && getPort() === port) {
+      return { status: "ready", port };
+    }
+
+    await wait(MANAGED_STARTUP_POLL_MS);
+  }
+
+  return getPort() === null
+    ? { status: "missing-port" }
+    : { status: "unhealthy" };
+}
+
 export function useTauriBackend() {
   const [status, setStatus] = useState<BackendStatus>("checking");
   const statusRef = useRef<BackendStatus>(status);
@@ -181,8 +229,11 @@ export function useTauriBackend() {
 
   async function startManagedServer() {
     // Prevent double-start race condition
-    if (startingRef.current) return;
+    if (startingRef.current) {
+      return;
+    }
     startingRef.current = true;
+    portRef.current = null;
 
     try {
       const { invoke } = await import("@tauri-apps/api/core");
@@ -192,23 +243,27 @@ export function useTauriBackend() {
 
       // Wait for the owned backend's server-port event. Do not attach to an
       // external backend if the managed start does not report a port.
-      for (let i = 0; i < 120; i++) {
-        if (portRef.current) {
-          const healthy = await invoke<boolean>("check_health", {
-            port: portRef.current,
-          });
-          if (healthy) {
-            setApiBase(portRef.current);
-            setRunningStatus();
-            startingRef.current = false;
-            return;
-          }
-        }
-        await new Promise((r) => setTimeout(r, 500));
+      const startupResult = await waitForManagedServerReady(
+        invoke,
+        () => portRef.current,
+        () => startingRef.current,
+      );
+
+      if (startupResult.status === "ready") {
+        setApiBase(startupResult.port);
+        setRunningStatus();
+        startingRef.current = false;
+        return;
       }
-      const message = !portRef.current
-        ? "Managed server started without reporting a port. Check the logs for details."
-        : "Server started but is not responding. Check the logs for details.";
+
+      if (startupResult.status === "aborted") {
+        return;
+      }
+
+      const message =
+        startupResult.status === "missing-port"
+          ? "Managed server started without reporting a port. Check the logs for details."
+          : "Server started but is not responding. Check the logs for details.";
       setBackendError(message);
     } catch (e) {
       const msg = String(e);
@@ -283,12 +338,12 @@ export function useTauriBackend() {
     const { invoke } = await import("@tauri-apps/api/core");
     try {
       await invoke("start_install");
-      // Install completed — this is the ONLY path that starts the server
-      // after install. The install-complete event listener does NOT call
+      // Install completed — validate the managed binary's desktop capability
+      // before starting it. The install-complete event listener does NOT call
       // startServer() to avoid a double-start race condition.
       setBackendStatus("starting");
       elevationResumeRef.current = null;
-      await startServer();
+      await checkInstallAndStart();
     } catch (e) {
       const msg = String(e);
       // NEEDS_ELEVATION is not a real error — the Rust side also emits
diff --git a/studio/setup.ps1 b/studio/setup.ps1
index 24ef3ef1eb..53557ad39c 100644
--- a/studio/setup.ps1
+++ b/studio/setup.ps1
@@ -1460,8 +1460,14 @@ substep "Using $PythonCmd ($(& $PythonCmd --version 2>&1))"
 $VenvDir = Join-Path $env:USERPROFILE ".unsloth\studio\unsloth_studio"
 
 # Stale-venv detection: if the venv exists but its torch flavor no longer
-# matches the current machine, wipe it so we get a clean install.
-if (Test-Path $VenvDir -PathType Container) {
+# matches the current machine, repair according to invocation context.
+# - install.ps1 sets UNSLOTH_INSTALL_ROLLBACK_MANAGED=1 so setup can delegate
+#   to the installer-level rollback that restores the previous environment.
+# - direct `unsloth studio update` keeps the pre-existing self-repair behavior.
+# In no-torch mode, a missing torch package is expected.
+$NoTorchMode = $env:UNSLOTH_NO_TORCH -match '^(?i:true|1|yes)$'
+$InstallerManagedSetup = $env:UNSLOTH_INSTALL_ROLLBACK_MANAGED -match '^(?i:true|1|yes)$'
+if ((Test-Path $VenvDir -PathType Container) -and -not $NoTorchMode) {
     $VenvPyExe = Join-Path $VenvDir "Scripts\python.exe"
     $installedTorchTag = $null
     $shouldRebuild = $false
@@ -1508,6 +1514,12 @@ if (Test-Path $VenvDir -PathType Container) {
 
     if ($shouldRebuild) {
         $reason = if ($installedTorchTag) { "torch $installedTorchTag != required $expectedTorchTag" } else { "torch could not be imported" }
+        if ($InstallerManagedSetup) {
+            substep "Stale venv detected ($reason)." "Yellow"
+            Write-Host "   [ERROR] The existing Studio environment needs repair." -ForegroundColor Red
+            Write-Host "           Re-run install.ps1 so it can replace the environment safely with rollback." -ForegroundColor Yellow
+            exit 1
+        }
         substep "Stale venv detected ($reason) -- rebuilding..." "Yellow"
         try {
             Remove-Item $VenvDir -Recurse -Force -ErrorAction Stop
diff --git a/studio/src-tauri/Cargo.toml b/studio/src-tauri/Cargo.toml
index ccb07cb9e2..e8cd44d039 100644
--- a/studio/src-tauri/Cargo.toml
+++ b/studio/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "unsloth-studio"
-version = "2026.4.7"
+version = "2026.4.8"
 description = "Unsloth Studio Desktop App"
 authors = ["Unsloth AI"]
 edition = "2021"
diff --git a/studio/src-tauri/src/commands.rs b/studio/src-tauri/src/commands.rs
index f2acb92e09..1bd92d9b64 100644
--- a/studio/src-tauri/src/commands.rs
+++ b/studio/src-tauri/src/commands.rs
@@ -2,8 +2,17 @@ use crate::install;
 use crate::process::{self, BackendState, ShutdownFlag};
 use crate::update;
 use log::{error, info, warn};
+use std::time::{Duration, Instant};
 use tauri::{AppHandle, Emitter};
 
+const BACKEND_STARTUP_GRACE_PERIOD: Duration = Duration::from_secs(5 * 60);
+const HEALTH_WATCHDOG_INTERVAL: Duration = Duration::from_secs(15);
+const HEALTH_WATCHDOG_MAX_FAILURES: u32 = 3;
+
+fn should_count_watchdog_failure(has_seen_healthy: bool, elapsed_since_start: Duration) -> bool {
+    has_seen_healthy || elapsed_since_start >= BACKEND_STARTUP_GRACE_PERIOD
+}
+
 async fn managed_install_ready_after_repair() -> bool {
     crate::preflight::managed_install_ready().await
 }
@@ -86,7 +95,7 @@ pub async fn start_server(
 ) -> Result<(), String> {
     info!("start_server command called with port {}", port);
 
-    process::start_backend(&app, &state, port, &shutdown)?;
+    let generation = process::start_backend(&app, &state, port, &shutdown)?;
 
     // Spawn health watchdog for the owned backend — detects
     // deadlocks and hangs that stdout-based crash detection misses.
@@ -94,7 +103,7 @@ pub async fn start_server(
     let watchdog_shutdown = shutdown.inner().clone();
     let watchdog_app = app.clone();
     tokio::spawn(async move {
-        health_watchdog(watchdog_app, watchdog_state, watchdog_shutdown).await;
+        health_watchdog(watchdog_app, watchdog_state, watchdog_shutdown, generation).await;
     });
 
     Ok(())
@@ -109,13 +118,13 @@ pub async fn start_managed_server(
     port: u16,
 ) -> Result<(), String> {
     info!("start_managed_server command called with port {}", port);
-    process::start_backend(&app, &state, port, &shutdown)?;
+    let generation = process::start_backend(&app, &state, port, &shutdown)?;
 
     let watchdog_state = state.inner().clone();
     let watchdog_shutdown = shutdown.inner().clone();
     let watchdog_app = app.clone();
     tokio::spawn(async move {
-        health_watchdog(watchdog_app, watchdog_state, watchdog_shutdown).await;
+        health_watchdog(watchdog_app, watchdog_state, watchdog_shutdown, generation).await;
     });
 
     Ok(())
@@ -403,6 +412,8 @@ pub async fn start_managed_repair(
 
 #[cfg(test)]
 mod tests {
+    use std::time::Duration;
+
     #[test]
     fn repair_elevation_is_not_a_terminal_repair_failure() {
         assert!(!super::should_emit_repair_failed("NEEDS_ELEVATION"));
@@ -410,61 +421,119 @@ mod tests {
             "Installer exited with code 1"
         ));
     }
+
+    #[test]
+    fn watchdog_ignores_startup_failures_within_grace_period() {
+        assert!(!super::should_count_watchdog_failure(
+            false,
+            super::BACKEND_STARTUP_GRACE_PERIOD - Duration::from_secs(1)
+        ));
+    }
+
+    #[test]
+    fn watchdog_counts_failures_after_backend_was_healthy() {
+        assert!(super::should_count_watchdog_failure(
+            true,
+            Duration::from_secs(1)
+        ));
+    }
+
+    #[test]
+    fn watchdog_counts_startup_failures_after_grace_period() {
+        assert!(super::should_count_watchdog_failure(
+            false,
+            super::BACKEND_STARTUP_GRACE_PERIOD
+        ));
+    }
 }
 
 /// Periodic health check that detects deadlocked or hung backends.
-/// Starts 30s after the backend is launched (to allow initial startup),
-/// then pings /api/health every 15s. After 3 consecutive failures (45s)
-/// with the process still alive, emits `server-crashed` so the frontend
-/// can offer a restart.
-async fn health_watchdog(app: AppHandle, state: BackendState, shutdown: ShutdownFlag) {
+/// During startup, failures are ignored for a generous grace period so a slow
+/// but legitimate backend boot is not killed. After the backend has answered at
+/// least once, or after the startup grace expires, 3 consecutive failed checks
+/// emit `server-crashed` so the frontend can offer a restart.
+async fn health_watchdog(
+    app: AppHandle,
+    state: BackendState,
+    shutdown: ShutdownFlag,
+    generation: u64,
+) {
     use std::sync::atomic::Ordering;
 
-    // Give the backend time to start up
-    tokio::time::sleep(std::time::Duration::from_secs(30)).await;
-
+    let started_at = Instant::now();
     let mut consecutive_failures: u32 = 0;
+    let mut has_seen_healthy = false;
 
     loop {
-        tokio::time::sleep(std::time::Duration::from_secs(15)).await;
+        tokio::time::sleep(HEALTH_WATCHDOG_INTERVAL).await;
 
         if shutdown.load(Ordering::SeqCst) {
             info!("Health watchdog: shutdown flag set, exiting");
             break;
         }
 
-        let (port, has_child) = {
+        let (port, has_child, current_generation) = {
             let proc = match state.lock() {
                 Ok(p) => p,
                 Err(_) => break,
             };
-            (proc.port, proc.child.is_some())
+            (proc.port, proc.child.is_some(), proc.generation)
         };
 
+        if current_generation != generation {
+            info!("Health watchdog: backend generation changed, exiting");
+            break;
+        }
+
         // Stop watching if the backend is gone
         if !has_child {
             info!("Health watchdog: backend stopped, exiting");
             break;
         }
 
+        let should_count_failure =
+            should_count_watchdog_failure(has_seen_healthy, started_at.elapsed());
+
         let Some(port) = port else {
-            continue; // Port not yet known
+            if should_count_failure {
+                consecutive_failures += 1;
+                warn!(
+                    "Health watchdog: backend has not reported a port ({}/{})",
+                    consecutive_failures, HEALTH_WATCHDOG_MAX_FAILURES
+                );
+            }
+
+            if consecutive_failures >= HEALTH_WATCHDOG_MAX_FAILURES {
+                error!(
+                    "Health watchdog: backend never reported a port, killing and declaring dead"
+                );
+                let _ = process::stop_backend(&state, &shutdown);
+                let _ = app.emit("server-crashed", ());
+                break;
+            }
+
+            continue;
         };
 
         match check_health_inner(port).await {
             Ok(true) => {
+                has_seen_healthy = true;
                 consecutive_failures = 0;
             }
+            _ if !should_count_failure => {
+                info!(
+                    "Health watchdog: startup health check failed on port {} before grace period elapsed",
+                    port
+                );
+            }
             _ => {
                 consecutive_failures += 1;
                 warn!(
-                    "Health watchdog: failure {}/3 on port {}",
-                    consecutive_failures, port
+                    "Health watchdog: failure {}/{} on port {}",
+                    consecutive_failures, HEALTH_WATCHDOG_MAX_FAILURES, port
                 );
-                if consecutive_failures >= 3 {
-                    error!(
-                        "Health watchdog: backend unresponsive for 45s, killing and declaring dead"
-                    );
+                if consecutive_failures >= HEALTH_WATCHDOG_MAX_FAILURES {
+                    error!("Health watchdog: backend unresponsive, killing and declaring dead");
                     // Kill the zombie process so retry can start fresh
                     let _ = process::stop_backend(&state, &shutdown);
                     let _ = app.emit("server-crashed", ());
diff --git a/studio/src-tauri/src/desktop_auth.rs b/studio/src-tauri/src/desktop_auth.rs
index df09df7a14..dca28a1321 100644
--- a/studio/src-tauri/src/desktop_auth.rs
+++ b/studio/src-tauri/src/desktop_auth.rs
@@ -1,6 +1,6 @@
 use crate::preflight::{DesktopPreflightDisposition, DesktopPreflightResult};
 use crate::process::BackendState;
-use log::info;
+use log::{info, warn};
 use reqwest::Client;
 use serde::{Deserialize, Serialize};
 use std::path::{Path, PathBuf};
@@ -39,13 +39,16 @@ struct BackendPort {
 #[derive(Debug)]
 enum AuthError {
     Connectivity(String),
+    StaleResponder(String),
     Failed(String),
 }
 
 impl AuthError {
     fn message(self) -> String {
         match self {
-            Self::Connectivity(message) | Self::Failed(message) => message,
+            Self::Connectivity(message) | Self::StaleResponder(message) | Self::Failed(message) => {
+                message
+            }
         }
     }
 }
@@ -73,11 +76,14 @@ fn read_secret_if_exists(path: &Path) -> Result<Option<String>, String> {
     match std::fs::read_to_string(path) {
         Ok(s) => Ok(Some(s.trim().to_string())),
         Err(e) if e.kind() == std::io::ErrorKind::NotFound => Ok(None),
-        Err(e) => Err(format!(
-            "Failed to read auth secret at {}: {}",
-            path.display(),
-            e
-        )),
+        Err(e) => {
+            warn!(
+                "Desktop auth: ignoring unreadable auth secret at {}: {}",
+                path.display(),
+                e
+            );
+            Ok(None)
+        }
     }
 }
 
@@ -138,7 +144,10 @@ fn classify_auth_send_error(error: reqwest::Error) -> AuthError {
 fn should_retry_with_discovered_port(source: PortSource, error: &AuthError) -> bool {
     matches!(
         (source, error),
-        (PortSource::Cached, AuthError::Connectivity(_))
+        (
+            PortSource::Cached,
+            AuthError::Connectivity(_) | AuthError::StaleResponder(_)
+        )
     )
 }
 
@@ -157,7 +166,7 @@ async fn exchange_desktop_secret(
         .map_err(classify_auth_send_error)?;
 
     if response.status() == reqwest::StatusCode::NOT_FOUND {
-        return Err(AuthError::Failed(
+        return Err(AuthError::StaleResponder(
             "Running Studio backend is too old for this desktop app. Update that backend and restart."
                 .to_string(),
         ));
@@ -166,7 +175,7 @@ async fn exchange_desktop_secret(
         return Ok(None);
     }
     if !response.status().is_success() {
-        return Err(AuthError::Failed("Desktop auth failed".to_string()));
+        return Err(AuthError::StaleResponder("Desktop auth failed".to_string()));
     }
 
     response
@@ -213,6 +222,33 @@ async fn provision_desktop_auth() -> Result<(), String> {
     ))
 }
 
+async fn retry_on_discovered_port(
+    client: &Client,
+    state: &tauri::State<'_, BackendState>,
+    previous: BackendPort,
+    secret: &str,
+) -> Result<Option<(Option<DesktopAuthResponse>, BackendPort)>, String> {
+    if previous.source != PortSource::Cached {
+        return Ok(None);
+    }
+    let Some(port) = discover_compatible_backend_port().await else {
+        return Ok(None);
+    };
+    if port == previous.port {
+        return Ok(None);
+    }
+
+    update_backend_port(state, port)?;
+    let backend = BackendPort {
+        port,
+        source: PortSource::Discovered,
+    };
+    exchange_desktop_secret(client, port, secret)
+        .await
+        .map(|tokens| Some((tokens, backend)))
+        .map_err(AuthError::message)
+}
+
 async fn authenticate_with_stale_port_retry(
     client: &Client,
     state: &tauri::State<'_, BackendState>,
@@ -220,20 +256,18 @@ async fn authenticate_with_stale_port_retry(
     secret: &str,
 ) -> Result<(Option<DesktopAuthResponse>, BackendPort), String> {
     match exchange_desktop_secret(client, backend.port, secret).await {
-        Ok(tokens) => Ok((tokens, backend)),
+        Ok(Some(tokens)) => Ok((Some(tokens), backend)),
+        Ok(None) => {
+            if let Some(retried) = retry_on_discovered_port(client, state, backend, secret).await? {
+                return Ok(retried);
+            }
+            Ok((None, backend))
+        }
         Err(error) if should_retry_with_discovered_port(backend.source, &error) => {
-            let Some(port) = discover_compatible_backend_port().await else {
-                return Err(error.message());
-            };
-            update_backend_port(state, port)?;
-            let backend = BackendPort {
-                port,
-                source: PortSource::Discovered,
-            };
-            exchange_desktop_secret(client, port, secret)
-                .await
-                .map(|tokens| (tokens, backend))
-                .map_err(AuthError::message)
+            if let Some(retried) = retry_on_discovered_port(client, state, backend, secret).await? {
+                return Ok(retried);
+            }
+            Err(error.message())
         }
         Err(error) => Err(error.message()),
     }
@@ -317,11 +351,15 @@ mod tests {
     }
 
     #[test]
-    fn retry_discovery_only_for_cached_connectivity_errors() {
+    fn retry_discovery_only_for_cached_recoverable_errors() {
         assert!(should_retry_with_discovered_port(
             PortSource::Cached,
             &AuthError::Connectivity("connection refused".to_string())
         ));
+        assert!(should_retry_with_discovered_port(
+            PortSource::Cached,
+            &AuthError::StaleResponder("old responder".to_string())
+        ));
         assert!(!should_retry_with_discovered_port(
             PortSource::Discovered,
             &AuthError::Connectivity("connection refused".to_string())
@@ -332,6 +370,64 @@ mod tests {
         ));
     }
 
+    #[test]
+    fn read_secret_returns_none_for_missing_file() {
+        let path = std::env::temp_dir().join(format!(
+            "unsloth-missing-desktop-secret-{}",
+            std::process::id()
+        ));
+        let _ = std::fs::remove_file(&path);
+
+        assert_eq!(read_secret_if_exists(&path).unwrap(), None);
+    }
+
+    #[test]
+    fn read_secret_trims_existing_file() {
+        let path =
+            std::env::temp_dir().join(format!("unsloth-desktop-secret-{}", std::process::id()));
+        std::fs::write(&path, "  desktop-secret\n").unwrap();
+
+        assert_eq!(
+            read_secret_if_exists(&path).unwrap(),
+            Some("desktop-secret".to_string())
+        );
+        std::fs::remove_file(path).unwrap();
+    }
+
+    #[test]
+    fn read_secret_treats_invalid_utf8_as_missing_for_repair() {
+        let path = std::env::temp_dir().join(format!(
+            "unsloth-invalid-desktop-secret-{}",
+            std::process::id()
+        ));
+        std::fs::write(&path, [0xff, 0xfe]).unwrap();
+
+        assert_eq!(read_secret_if_exists(&path).unwrap(), None);
+        std::fs::remove_file(path).unwrap();
+    }
+
+    #[cfg(unix)]
+    #[test]
+    fn read_secret_treats_permission_denied_as_missing_for_repair() {
+        use std::os::unix::fs::PermissionsExt;
+
+        let path = std::env::temp_dir().join(format!(
+            "unsloth-unreadable-desktop-secret-{}",
+            std::process::id()
+        ));
+        std::fs::write(&path, "desktop-stale").unwrap();
+        std::fs::set_permissions(&path, std::fs::Permissions::from_mode(0o000)).unwrap();
+
+        let result = read_secret_if_exists(&path);
+
+        std::fs::set_permissions(&path, std::fs::Permissions::from_mode(0o600)).unwrap();
+        std::fs::remove_file(path).unwrap();
+        if matches!(result, Ok(Some(_))) {
+            return;
+        }
+        assert_eq!(result.unwrap(), None);
+    }
+
     #[test]
     fn attached_ready_port_requires_attached_ready_with_port() {
         let compatible = DesktopPreflightResult {
diff --git a/studio/src-tauri/src/install.rs b/studio/src-tauri/src/install.rs
index 5760989353..b8198899d5 100644
--- a/studio/src-tauri/src/install.rs
+++ b/studio/src-tauri/src/install.rs
@@ -481,7 +481,7 @@ pub fn stop_install(state: &InstallState) -> Result<(), String> {
     }
 }
 
-/// Install system packages with elevated permissions (Linux only).
+/// Install apt system packages with elevated permissions (Linux only).
 /// Uses `elevated-command` crate for native auth dialog.
 #[cfg(target_os = "linux")]
 pub fn install_system_packages(packages: &[String]) -> Result<(), String> {
@@ -497,42 +497,44 @@ pub fn install_system_packages(packages: &[String]) -> Result<(), String> {
         }
     }
 
-    // AppImage bundles run on non-Debian distros too. Pick the first package
-    // manager we find. Names in `packages` are Debian-style; callers that want
-    // cross-distro support should translate before invoking.
-    let (program, base_args): (&str, &[&str]) = if Path::new("/usr/bin/apt-get").exists() {
-        ("apt-get", &["install", "-y"])
-    } else if Path::new("/usr/bin/dnf").exists() {
-        ("dnf", &["install", "-y"])
-    } else if Path::new("/usr/bin/zypper").exists() {
-        ("zypper", &["install", "-y"])
-    } else if Path::new("/usr/bin/pacman").exists() {
-        ("pacman", &["-S", "--noconfirm"])
-    } else {
+    // install.sh reports Debian package names. Do not pass them to dnf,
+    // zypper, or pacman where names differ; show an explicit support boundary
+    // instead of offering an elevation flow that is likely to fail.
+    if !Path::new("/usr/bin/apt-get").exists() {
         return Err(
-            "No supported system package manager found (apt-get, dnf, zypper, pacman)".to_string(),
+            "Automatic system package installation is supported on apt-based Linux distributions (Ubuntu/Debian) only. Install the missing dependencies with your package manager and retry."
+                .to_string(),
         );
-    };
+    }
 
     info!(
-        "[install] Elevated install of packages via {}: {}",
-        program,
+        "[install] Elevated install of apt packages: {}",
         packages.join(", ")
     );
 
-    let mut cmd = StdCommand::new(program);
-    cmd.args(base_args).args(packages);
+    let mut update_cmd = StdCommand::new("apt-get");
+    update_cmd.args(["update", "-y"]);
+    let elevated_update = elevated_command::Command::new(update_cmd)
+        .output()
+        .map_err(|e| format!("Elevated apt update failed: {}", e))?;
+    if !elevated_update.status.success() {
+        let stderr = String::from_utf8_lossy(&elevated_update.stderr);
+        return Err(format!("Package index update failed: {}", stderr));
+    }
 
-    let elevated = elevated_command::Command::new(cmd)
+    let mut install_cmd = StdCommand::new("apt-get");
+    install_cmd.args(["install", "-y"]).args(packages);
+
+    let elevated_install = elevated_command::Command::new(install_cmd)
         .output()
         .map_err(|e| format!("Elevated install failed: {}", e))?;
 
-    if !elevated.status.success() {
-        let stderr = String::from_utf8_lossy(&elevated.stderr);
+    if !elevated_install.status.success() {
+        let stderr = String::from_utf8_lossy(&elevated_install.stderr);
         return Err(format!("Package installation failed: {}", stderr));
     }
 
-    info!("[install] Elevated package install succeeded");
+    info!("[install] Elevated apt package install succeeded");
     Ok(())
 }
 
diff --git a/studio/src-tauri/src/main.rs b/studio/src-tauri/src/main.rs
index 4dc6f764d2..2d12c468a2 100644
--- a/studio/src-tauri/src/main.rs
+++ b/studio/src-tauri/src/main.rs
@@ -67,6 +67,21 @@ fn setup_custom_titlebar(app: &tauri::App) -> Result<(), Box<dyn std::error::Err
     Ok(())
 }
 
+fn cleanup_child_processes(app: &tauri::AppHandle) {
+    if let Some(install_state) = app.try_state::<install::InstallState>() {
+        let _ = install::stop_install(&install_state);
+    }
+    if let Some(update_state) = app.try_state::<update::UpdateState>() {
+        let _ = update::stop_update(&update_state);
+    }
+    if let Some(backend_state) = app.try_state::<process::BackendState>() {
+        let shutdown = app
+            .try_state::<process::ShutdownFlag>()
+            .expect("ShutdownFlag must be managed");
+        let _ = process::stop_backend(&backend_state, &shutdown);
+    }
+}
+
 fn setup_tray(app: &tauri::App) -> Result<(), Box<dyn std::error::Error>> {
     let open = MenuItemBuilder::with_id("open", "Open Studio").build(app)?;
     let toggle = MenuItemBuilder::with_id("toggle", "Start/Stop Server").build(app)?;
@@ -90,17 +105,15 @@ fn setup_tray(app: &tauri::App) -> Result<(), Box<dyn std::error::Error>> {
                 let _ = app.emit("tray-toggle-server", ());
             }
             "quit" => {
-                let install_state = app.state::<crate::install::InstallState>();
-                let _ = crate::install::stop_install(&install_state);
-                let update_state = app.state::<crate::update::UpdateState>();
-                let _ = crate::update::stop_update(&update_state);
-                // Detach the 5s graceful-wait so the tray click does not
-                // block the Tauri main loop. Exit runs the RunEvent::Exit
-                // safety net which also calls stop_backend synchronously.
-                let shutdown = app.state::<crate::process::ShutdownFlag>().inner().clone();
-                let backend_state = app.state::<crate::process::BackendState>().inner().clone();
-                crate::process::stop_backend_detached(backend_state, shutdown);
-                app.exit(0);
+                // Run cleanup off the menu callback, but only exit after the
+                // backend tree has been reaped. Exiting first can terminate this
+                // process while a detached cleanup thread is still waiting,
+                // leaving the backend orphaned.
+                let app_handle = app.clone();
+                std::thread::spawn(move || {
+                    cleanup_child_processes(&app_handle);
+                    app_handle.exit(0);
+                });
             }
             _ => {}
         })
@@ -183,18 +196,7 @@ fn main() {
         .run(|app, event| {
             if let tauri::RunEvent::Exit = event {
                 // Cleanup on ALL exit paths — safety net for non-tray exits
-                if let Some(install_state) = app.try_state::<install::InstallState>() {
-                    let _ = install::stop_install(&install_state);
-                }
-                if let Some(update_state) = app.try_state::<update::UpdateState>() {
-                    let _ = update::stop_update(&update_state);
-                }
-                if let Some(backend_state) = app.try_state::<process::BackendState>() {
-                    let shutdown = app
-                        .try_state::<process::ShutdownFlag>()
-                        .expect("ShutdownFlag must be managed");
-                    let _ = process::stop_backend(&backend_state, &shutdown);
-                }
+                cleanup_child_processes(app);
             }
         });
 }
diff --git a/studio/src-tauri/src/process.rs b/studio/src-tauri/src/process.rs
index beba8c1208..cc611ce17d 100644
--- a/studio/src-tauri/src/process.rs
+++ b/studio/src-tauri/src/process.rs
@@ -15,6 +15,7 @@ pub struct BackendProcess {
     pub port: Option<u16>,
     pub logs: VecDeque<String>,
     pub intentional_stop: bool,
+    pub generation: u64,
 }
 
 impl Default for BackendProcess {
@@ -24,6 +25,7 @@ impl Default for BackendProcess {
             port: None,
             logs: VecDeque::with_capacity(MAX_LOG_LINES),
             intentional_stop: false,
+            generation: 0,
         }
     }
 }
@@ -245,7 +247,7 @@ pub fn start_backend(
     state: &BackendState,
     port: u16,
     shutdown: &ShutdownFlag,
-) -> Result<(), String> {
+) -> Result<u64, String> {
     let bin = resolve_backend_binary()?;
 
     shutdown.store(false, Ordering::SeqCst);
@@ -308,17 +310,19 @@ pub fn start_backend(
     let stderr = child.stderr().take();
 
     // Store child in state
-    {
+    let generation = {
         let mut proc = state.lock().map_err(|e| e.to_string())?;
         proc.child = Some(child);
-    }
+        proc.generation = proc.generation.wrapping_add(1);
+        proc.generation
+    };
 
     // Spawn stdout reader thread
     if let Some(stdout) = stdout {
         let app_handle = app.clone();
         let state_clone = Arc::clone(state);
         std::thread::spawn(move || {
-            read_output_stream(stdout, &app_handle, &state_clone, false);
+            read_output_stream(stdout, &app_handle, &state_clone, false, generation);
         });
     }
 
@@ -327,11 +331,11 @@ pub fn start_backend(
         let app_handle = app.clone();
         let state_clone = Arc::clone(state);
         std::thread::spawn(move || {
-            read_output_stream(stderr, &app_handle, &state_clone, true);
+            read_output_stream(stderr, &app_handle, &state_clone, true, generation);
         });
     }
 
-    Ok(())
+    Ok(generation)
 }
 
 /// Read lines from a child process stream (stdout or stderr).
@@ -342,6 +346,7 @@ fn read_output_stream<R: std::io::Read>(
     app: &AppHandle,
     state: &BackendState,
     is_stderr: bool,
+    generation: u64,
 ) {
     let mut reader = std::io::BufReader::new(stream);
     let port_re = Regex::new(r"TAURI_PORT=(\d+)").unwrap();
@@ -360,26 +365,42 @@ fn read_output_stream<R: std::io::Read>(
                 };
 
                 // Check for TAURI_PORT on stdout only
-                if !is_stderr {
-                    if let Some(caps) = port_re.captures(&text) {
-                        if let Some(port_str) = caps.get(1) {
-                            if let Ok(port) = port_str.as_str().parse::<u16>() {
-                                info!("Detected backend port: {}", port);
-                                if let Ok(mut proc) = state.lock() {
-                                    proc.port = Some(port);
-                                }
-                                let _ = app.emit("server-port", port);
-                            }
+                let detected_port = if !is_stderr {
+                    port_re
+                        .captures(&text)
+                        .and_then(|caps| caps.get(1))
+                        .and_then(|port_str| port_str.as_str().parse::<u16>().ok())
+                } else {
+                    None
+                };
+
+                // Buffer the log line only for the current backend generation.
+                // Old reader threads can briefly outlive a stop/start cycle;
+                // they must not overwrite the new backend's port or logs.
+                let current_generation = if let Ok(mut proc) = state.lock() {
+                    if proc.generation != generation {
+                        false
+                    } else {
+                        if let Some(port) = detected_port {
+                            proc.port = Some(port);
                         }
+                        if proc.logs.len() >= MAX_LOG_LINES {
+                            proc.logs.pop_front();
+                        }
+                        proc.logs.push_back(log_line.clone());
+                        true
                     }
+                } else {
+                    false
+                };
+
+                if !current_generation {
+                    break;
                 }
 
-                // Buffer the log line
-                if let Ok(mut proc) = state.lock() {
-                    if proc.logs.len() >= MAX_LOG_LINES {
-                        proc.logs.pop_front();
-                    }
-                    proc.logs.push_back(log_line.clone());
+                if let Some(port) = detected_port {
+                    info!("Detected backend port: {}", port);
+                    let _ = app.emit("server-port", port);
                 }
 
                 info!("[backend] {}", log_line);
@@ -401,6 +422,9 @@ fn read_output_stream<R: std::io::Read>(
     // Stream closed. Only the stdout reader checks for crashes.
     if !is_stderr {
         if let Ok(mut proc) = state.lock() {
+            if proc.generation != generation {
+                return;
+            }
             let intentional = proc.intentional_stop;
             let exited = if let Some(ref mut child) = proc.child {
                 match child.try_wait() {
@@ -526,12 +550,3 @@ pub fn stop_backend(state: &BackendState, shutdown: &ShutdownFlag) -> Result<(),
         Ok(())
     }
 }
-
-/// Spawn `stop_backend` on a background thread and return immediately.
-/// Used by the tray "quit" path so the 5s graceful-wait does not block
-/// the Tauri main event loop before `app.exit(0)` fires.
-pub fn stop_backend_detached(state: BackendState, shutdown: ShutdownFlag) {
-    std::thread::spawn(move || {
-        let _ = stop_backend(&state, &shutdown);
-    });
-}
diff --git a/studio/src-tauri/windows/hooks.nsh b/studio/src-tauri/windows/hooks.nsh
index 64655e8f6e..8c68a3e54f 100644
--- a/studio/src-tauri/windows/hooks.nsh
+++ b/studio/src-tauri/windows/hooks.nsh
@@ -1,8 +1,9 @@
 ; Unsloth Studio NSIS installer hooks
 
 !macro NSIS_HOOK_POSTUNINSTALL
-  MessageBox MB_YESNO|MB_ICONQUESTION "Remove all Unsloth data ($PROFILE\.unsloth)?$\n$\nThis deletes installed models, training outputs, and configuration." IDNO skip_cleanup
-    RMDir /r "$PROFILE\.unsloth"
-    DetailPrint "Removed $PROFILE\.unsloth"
-  skip_cleanup:
+  ; Desktop uninstall must not remove $PROFILE\.unsloth. The CLI/web
+  ; installers also use that tree for environments, models, outputs, and
+  ; configuration, and there has been no prior public desktop release whose
+  ; private state needs cleanup here.
+  DetailPrint "Preserved shared Unsloth data at $PROFILE\.unsloth"
 !macroend