diff --git a/Cargo.lock b/Cargo.lock
index 18711e84c2948..4920d73538d3f 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1160,6 +1160,7 @@ version = "0.1.0"
 dependencies = [
  "anyhow",
  "crash_helper_common",
+ "mach2",
  "minidump-writer",
  "nix 0.30.1",
  "num-derive",
@@ -1173,6 +1174,8 @@ name = "crash_helper_common"
 version = "0.1.0"
 dependencies = [
  "getrandom 0.3.3",
+ "log",
+ "mach2",
  "minidump-writer",
  "nix 0.30.1",
  "num-derive",
diff --git a/browser/base/content/browser-sync.js b/browser/base/content/browser-sync.js
index 06811ddce9856..958c0cb40600c 100644
--- a/browser/base/content/browser-sync.js
+++ b/browser/base/content/browser-sync.js
@@ -19,6 +19,8 @@ const { UIState } = ChromeUtils.importESModule(
 );
 
 ChromeUtils.defineESModuleGetters(this, {
+  AIWindow:
+    "moz-src:///browser/components/aiwindow/ui/modules/AIWindow.sys.mjs",
   ASRouter: "resource:///modules/asrouter/ASRouter.sys.mjs",
   EnsureFxAccountsWebChannel:
     "resource://gre/modules/FxAccountsWebChannel.sys.mjs",
@@ -518,6 +520,7 @@ var gSync = {
         "browser/sync.ftl",
         "browser/syncedTabs.ftl",
         "browser/newtab/asrouter.ftl",
+        "preview/aiWindow.ftl",
       ],
       true
     ));
@@ -2384,9 +2387,13 @@ var gSync = {
       deleteLocalData: false,
     };
 
+    const bodyId = AIWindow.hasActiveAIWindows()
+      ? "fxa-signout-dialog-body-aiwindow"
+      : "fxa-signout-dialog-body";
+
     let [title, body, button, checkbox] = await document.l10n.formatValues([
       { id: "fxa-signout-dialog-title2" },
-      { id: "fxa-signout-dialog-body" },
+      { id: bodyId },
       { id: "fxa-signout-dialog2-button" },
       { id: "fxa-signout-dialog2-checkbox" },
     ]);
diff --git a/browser/base/content/browser-trustPanel.js b/browser/base/content/browser-trustPanel.js
index 3d133d2e89b23..a537b03b35a09 100644
--- a/browser/base/content/browser-trustPanel.js
+++ b/browser/base/content/browser-trustPanel.js
@@ -189,20 +189,19 @@ class TrustPanel {
 
   async onContentBlockingEvent(
     event,
-    webProgress,
+    _webProgress,
     _isSimulated,
     _previousState
   ) {
     // Only accept contentblocking events for uris that we initialised `updateIdentity`
     // with, this can go wrong if trustpanel is enabled mid page load.
-    if (!this.#enabled || webProgress.browsingContext.currentURI != this.#uri) {
+    if (!this.#enabled || !this.#uri) {
       return;
     }
 
     // First update all our internal state based on the allowlist and the
     // different blockers:
     this.anyDetected = false;
-    this.anyBlocking = false;
     this.#lastEvent = event;
 
     // Check whether the user has added an exception for this site.
@@ -219,7 +218,6 @@ class TrustPanel {
       // the data with the document directly.
       blocker.activated = blocker.isBlocking(event);
       this.anyDetected = this.anyDetected || blocker.isDetected(event);
-      this.anyBlocking = this.anyBlocking || blocker.activated;
     }
 
     if (this.#popup) {
diff --git a/browser/base/content/test/performance/browser_startup_flicker.js b/browser/base/content/test/performance/browser_startup_flicker.js
index 1eded47c4b003..ea0c5307762fc 100644
--- a/browser/base/content/test/performance/browser_startup_flicker.js
+++ b/browser/base/content/test/performance/browser_startup_flicker.js
@@ -27,17 +27,10 @@ add_task(async function () {
     let frame = frames[i],
       previousFrame = frames[i - 1];
     let rects = compareFrames(frame, previousFrame);
-    if (!alreadyFocused && isLikelyFocusChange(rects, frame)) {
-      todo(
-        false,
-        "bug 1445161 - the window should be focused at first paint, " +
-          rects.toSource()
-      );
-      continue;
-    }
-    alreadyFocused = true;
 
     let expectedRects = [];
+    let focusRects = [];
+
     rects = rects.filter(rect => {
       let width = frame.width;
 
@@ -83,14 +76,32 @@ add_task(async function () {
         }
       }
 
-      ok(false, "unexpected changed rect: " + rectText);
+      if (!alreadyFocused) {
+        focusRects.push(rect);
+      }
       return true;
     });
+
+    if (!alreadyFocused && isLikelyFocusChange(focusRects, frame)) {
+      todo(
+        false,
+        "bug 1445161 - the window should be focused at first paint, " +
+          focusRects.toSource()
+      );
+      continue;
+    }
+    alreadyFocused = true;
+
     if (!rects.length) {
       info("ignoring identical frame");
       continue;
     }
 
+    for (let rect of rects) {
+      let rectText = `${rect.toSource()}, window width: ${frame.width}`;
+      ok(false, "unexpected changed rect: " + rectText);
+    }
+
     await reportFlickerWithAPNG(previousFrame, frame, i, expectedRects);
     unexpectedRects += rects.length;
   }
diff --git a/browser/components/BrowserComponents.manifest b/browser/components/BrowserComponents.manifest
index d80e3ff90acea..cb214b44ab96f 100644
--- a/browser/components/BrowserComponents.manifest
+++ b/browser/components/BrowserComponents.manifest
@@ -105,6 +105,7 @@ category browser-quit-application-granted resource://gre/modules/UpdateListener.
 #endif
 category browser-quit-application-granted moz-src:///browser/components/urlbar/UrlbarSearchTermsPersistence.sys.mjs UrlbarSearchTermsPersistence.uninit
 category browser-quit-application-granted moz-src:///browser/components/ipprotection/IPProtectionService.sys.mjs IPProtectionService.uninit
+category browser-quit-application-granted moz-src:///browser/components/aiwindow/ui/modules/AIWindow.sys.mjs AIWindow.uninit
 
 category search-service-notification moz-src:///browser/components/search/SearchUIUtils.sys.mjs SearchUIUtils.showSearchServiceNotification
 
diff --git a/browser/components/aiwindow/ui/modules/AIWindow.sys.mjs b/browser/components/aiwindow/ui/modules/AIWindow.sys.mjs
index 2a2d0898a963e..5a3f31ad051ab 100644
--- a/browser/components/aiwindow/ui/modules/AIWindow.sys.mjs
+++ b/browser/components/aiwindow/ui/modules/AIWindow.sys.mjs
@@ -17,15 +17,16 @@ ChromeUtils.defineESModuleGetters(lazy, {
   AIWindowMenu:
     "moz-src:///browser/components/aiwindow/ui/modules/AIWindowMenu.sys.mjs",
   BrowserWindowTracker: "resource:///modules/BrowserWindowTracker.sys.mjs",
-  SearchService: "moz-src:///toolkit/components/search/SearchService.sys.mjs",
-  SearchUIUtils: "moz-src:///browser/components/search/SearchUIUtils.sys.mjs",
   ChatStore:
     "moz-src:///browser/components/aiwindow/ui/modules/ChatStore.sys.mjs",
   NewTabPagePreloading:
     "moz-src:///browser/components/tabbrowser/NewTabPagePreloading.sys.mjs",
+  ONLOGOUT_NOTIFICATION: "resource://gre/modules/FxAccountsCommon.sys.mjs",
   PanelMultiView:
     "moz-src:///browser/components/customizableui/PanelMultiView.sys.mjs",
   PrivateBrowsingUtils: "resource://gre/modules/PrivateBrowsingUtils.sys.mjs",
+  SearchService: "moz-src:///toolkit/components/search/SearchService.sys.mjs",
+  SearchUIUtils: "moz-src:///browser/components/search/SearchUIUtils.sys.mjs",
   MemoriesSchedulers:
     "moz-src:///browser/components/aiwindow/models/memories/MemoriesSchedulers.sys.mjs",
 });
@@ -62,6 +63,7 @@ export const AIWindow = {
     }
 
     ChromeUtils.defineLazyGetter(AIWindow, "chatStore", () => lazy.ChatStore);
+    Services.obs.addObserver(this, lazy.ONLOGOUT_NOTIFICATION);
     this._initialized = true;
 
     // On startup/restart, if the first window initialized is an
@@ -71,6 +73,42 @@ export const AIWindow = {
     }
   },
 
+  uninit() {
+    if (!this._initialized) {
+      return;
+    }
+    Services.obs.removeObserver(this, lazy.ONLOGOUT_NOTIFICATION);
+    this._initialized = false;
+  },
+
+  observe(_subject, topic) {
+    if (topic === lazy.ONLOGOUT_NOTIFICATION) {
+      this._onAccountLogout();
+    }
+  },
+
+  // Switches all active AI Windows back to classic mode when the user signs out
+  // of their Firefox Account.
+  _onAccountLogout() {
+    for (const win of Services.wm.getEnumerator("navigator:browser")) {
+      if (!win.closed && this.isAIWindowActive(win)) {
+        this.toggleAIWindow(win, false);
+      }
+    }
+  },
+
+  // Checks if there are any open AI Windows. It's used to determine if certain
+  // operations (like Account sign-out warnings) need to account for active AI
+  // Window sessions.
+  hasActiveAIWindows() {
+    for (const win of Services.wm.getEnumerator("navigator:browser")) {
+      if (!win.closed && this.isAIWindowActiveAndEnabled(win)) {
+        return true;
+      }
+    }
+    return false;
+  },
+
   _reconcileNewTabPages(win, previousNewTabURL) {
     const newTabURI = Services.io.newURI(win.BROWSER_NEW_TAB_URL);
     const oldTabURI = Services.io.newURI(previousNewTabURL);
@@ -194,13 +232,27 @@ export const AIWindow = {
       }
       aiWindowURI.data = initialURL;
       args.appendElement(aiWindowURI);
+    }
 
-      const aiOption = Cc["@mozilla.org/hash-property-bag;1"].createInstance(
+    let propBag;
+    try {
+      propBag = args.length > 1 && args.queryElementAt(1, Ci.nsIPropertyBag2);
+    } catch (e) {
+      console.error(
+        new Error(
+          "Tried to create AI window but property bag argument is wrong"
+        ),
+        propBag
+      );
+      return args;
+    }
+    if (!propBag) {
+      propBag = Cc["@mozilla.org/hash-property-bag;1"].createInstance(
         Ci.nsIWritablePropertyBag2
       );
-      aiOption.setPropertyAsBool("ai-window", aiWindow);
-      args.appendElement(aiOption);
+      args.appendElement(propBag);
     }
+    propBag.setPropertyAsBool("ai-window", true);
 
     return args;
   },
diff --git a/browser/components/aiwindow/ui/test/browser/browser.toml b/browser/components/aiwindow/ui/test/browser/browser.toml
index 4fd888dc63bf3..e82ad38254cdf 100644
--- a/browser/components/aiwindow/ui/test/browser/browser.toml
+++ b/browser/components/aiwindow/ui/test/browser/browser.toml
@@ -61,3 +61,5 @@ support-files = [
 ["browser_sidebar_aiwindow.js"]
 
 ["browser_smartwindow_init.js"]
+
+["browser_smartwindow_tab_move.js"]
diff --git a/browser/components/aiwindow/ui/test/browser/browser_aiwindow_memories.js b/browser/components/aiwindow/ui/test/browser/browser_aiwindow_memories.js
index 0a1cbcdf1e701..21df96658cd91 100644
--- a/browser/components/aiwindow/ui/test/browser/browser_aiwindow_memories.js
+++ b/browser/components/aiwindow/ui/test/browser/browser_aiwindow_memories.js
@@ -68,7 +68,8 @@ add_task(async function test_memories_scheduler_on_init_with_aiwindow() {
 
   testWin.document.documentElement.setAttribute("ai-window", "");
 
-  AIWindow._initialized = false;
+  // Use uninit() to properly clean up observer before re-initializing
+  AIWindow.uninit();
   AIWindow.init(testWin);
 
   Assert.ok(
@@ -89,7 +90,8 @@ add_task(
       private: false,
     });
 
-    AIWindow._initialized = false;
+    // Use uninit() to properly clean up observer before re-initializing
+    AIWindow.uninit();
     AIWindow.init(testWin);
 
     Assert.ok(
diff --git a/browser/components/aiwindow/ui/test/browser/browser_aiwindow_switcher.js b/browser/components/aiwindow/ui/test/browser/browser_aiwindow_switcher.js
index 38a7cc4c64661..5361e1f828e1a 100644
--- a/browser/components/aiwindow/ui/test/browser/browser_aiwindow_switcher.js
+++ b/browser/components/aiwindow/ui/test/browser/browser_aiwindow_switcher.js
@@ -235,3 +235,29 @@ add_task(async function test_switcher_repositions_on_pref_change() {
 
   await SpecialPowers.flushPrefEnv();
 });
+
+// Test that _onAccountLogout switches AI windows to classic mode
+add_task(async function test_onAccountLogout_switches_windows() {
+  const { AIWindow } = ChromeUtils.importESModule(
+    "moz-src:///browser/components/aiwindow/ui/modules/AIWindow.sys.mjs"
+  );
+
+  await SpecialPowers.pushPrefEnv({
+    set: [["browser.aiwindow.enabled", true]],
+  });
+
+  document.documentElement.setAttribute("ai-window", "");
+  Assert.ok(
+    AIWindow.isAIWindowActive(window),
+    "Window should start in AI mode"
+  );
+
+  AIWindow._onAccountLogout();
+
+  Assert.ok(
+    !AIWindow.isAIWindowActive(window),
+    "Window should switch to classic mode after logout"
+  );
+
+  await SpecialPowers.popPrefEnv();
+});
diff --git a/browser/components/aiwindow/ui/test/browser/browser_smartwindow_tab_move.js b/browser/components/aiwindow/ui/test/browser/browser_smartwindow_tab_move.js
new file mode 100644
index 0000000000000..869c70c310163
--- /dev/null
+++ b/browser/components/aiwindow/ui/test/browser/browser_smartwindow_tab_move.js
@@ -0,0 +1,47 @@
+/* Any copyright is dedicated to the Public Domain.
+ * http://creativecommons.org/publicdomain/zero/1.0/ */
+
+"use strict";
+
+const { TabStateFlusher } = ChromeUtils.importESModule(
+  "resource:///modules/sessionstore/TabStateFlusher.sys.mjs"
+);
+
+// Move a tab to a new window, check the new window is also an AI window.
+add_task(async function test() {
+  let tab1 = await BrowserTestUtils.addTab(gBrowser, "about:blank");
+  let tab2 = await BrowserTestUtils.addTab(gBrowser, "about:blank");
+
+  is(gBrowser.multiSelectedTabsCount, 0, "Zero multiselected tabs");
+
+  AIWindow.toggleAIWindow(window, true);
+  registerCleanupFunction(() => {
+    AIWindow.toggleAIWindow(window, false);
+  });
+  await BrowserTestUtils.switchTab(gBrowser, tab1);
+  let prevBrowser = tab1.linkedBrowser;
+
+  let delayedStartupPromise = BrowserTestUtils.waitForNewWindow();
+  let newWindow = gBrowser.replaceTabsWithWindow(tab1);
+  await delayedStartupPromise;
+
+  ok(
+    !prevBrowser.frameLoader,
+    "the swapped-from browser's frameloader has been destroyed"
+  );
+
+  let gBrowser2 = newWindow.gBrowser;
+  ok(AIWindow.isAIWindowActive(newWindow), "The new window is an AI window");
+
+  is(gBrowser.visibleTabs.length, 2, "Two tabs now in the old window");
+  is(gBrowser2.visibleTabs.length, 1, "One tab in the new window");
+
+  tab1 = gBrowser2.visibleTabs[0];
+  ok(tab1, "Got a tab1");
+  await tab1.focus();
+
+  await TabStateFlusher.flush(tab1.linkedBrowser);
+
+  await BrowserTestUtils.closeWindow(newWindow);
+  await BrowserTestUtils.removeTab(tab2);
+});
diff --git a/browser/components/preferences/home.js b/browser/components/preferences/home.js
index 1d6e2e154da37..0167a4d795c24 100644
--- a/browser/components/preferences/home.js
+++ b/browser/components/preferences/home.js
@@ -81,8 +81,8 @@ if (Services.prefs.getBoolPref("browser.settings-redesign.enabled")) {
     })
   );
 
-  // Set up `browser.startup.homepage` again to help make a pretty list of domains
-  // for displaying in the "Choose a specific website" link to the Custom Homepage subpage.
+  // Set up `browser.startup.homepage` again to update and display its value
+  // on the Homepage and Custom Homepage settings panes.
   Preferences.addSetting({
     id: "homepageDisplayPref",
     pref: "browser.startup.homepage",
@@ -99,22 +99,22 @@ if (Services.prefs.getBoolPref("browser.settings-redesign.enabled")) {
       gotoPref("customHomepage");
     },
 
-    getControlConfig(config, deps) {
-      const servicePages = [
-        "about:home",
-        "chrome://browser/content/blanktab.html",
-      ];
+    getControlConfig(config, { homepageDisplayPref }) {
       let customURLsDescription;
 
-      if (servicePages.includes(deps.homepageDisplayPref.value.trim())) {
-        // Make sure we only show user-provided values for custom URLs rather than
-        // values we set in `browser.startup.homepage` for "Firefox Home"
-        // and "Blank Page".
+      // Make sure we only show user-provided values for custom URLs rather than
+      // values we set in `browser.startup.homepage` for "Firefox Home"
+      // and "Blank Page".
+      if (
+        [DEFAULT_HOMEPAGE_URL, BLANK_HOMEPAGE_URL].includes(
+          homepageDisplayPref.value.trim()
+        )
+      ) {
         customURLsDescription = null;
       } else {
         // Add a comma-separated list of Custom URLs the user set for their homepage
         // to the description part of the "Choose a specific site" box button.
-        customURLsDescription = deps.homepageDisplayPref.value
+        customURLsDescription = homepageDisplayPref.value
           .split("|")
           .map(uri =>
             BrowserUtils.formatURIStringForDisplay(uri, {
@@ -135,30 +135,175 @@ if (Services.prefs.getBoolPref("browser.settings-redesign.enabled")) {
     },
   });
 
-  // Custom Homepage Subpage: layout items
+  /**
+   * Helper function to convert a pipe-delimited string of custom homepage URLs
+   * into an array of trimmed URLs.
+   *
+   * @param urls {string}
+   * @returns {string[]}
+   */
+  const getURLs = urls => {
+    return urls
+      .split("|")
+      .map(u => u.trim())
+      .filter(Boolean);
+  };
+
+  Preferences.addSetting(
+    /** @type {{ _inputValue: string } & SettingConfig } */ ({
+      id: "customHomepageAddUrlInput",
+      _inputValue: "",
+      get() {
+        return this._inputValue;
+      },
+
+      set(val, _, setting) {
+        this._inputValue = val.trim() ?? "";
+        setting.onChange();
+      },
+    })
+  );
+
   Preferences.addSetting({
-    id: "customHomepageCard",
+    id: "customHomepageAddAddressButton",
+    deps: ["homepageDisplayPref", "customHomepageAddUrlInput"],
+    onUserClick(e, { homepageDisplayPref, customHomepageAddUrlInput }) {
+      // Focus is being stolen by a parent component here (moz-fieldset).
+      // Focus on the button to get the input value.
+      e.target.focus();
+
+      let inputVal = customHomepageAddUrlInput.value;
+
+      // Don't do anything for empty strings
+      if (!inputVal) {
+        return;
+      }
+
+      if (
+        [DEFAULT_HOMEPAGE_URL, BLANK_HOMEPAGE_URL].includes(
+          homepageDisplayPref.value.trim()
+        )
+      ) {
+        // Replace the default homepage value with the new Custom URL.
+        homepageDisplayPref.value = inputVal;
+      } else {
+        // Append this URL to the list of Custom URLs saved in prefs.
+        let urls = getURLs(homepageDisplayPref.value);
+        urls.push(inputVal);
+        homepageDisplayPref.value = urls.join("|");
+      }
+
+      // Reset the field to empty string
+      customHomepageAddUrlInput.value = "";
+    },
   });
 
   Preferences.addSetting({
     id: "customHomepageBoxGroup",
-  });
+    deps: ["homepageDisplayPref"],
+    getControlConfig(config, { homepageDisplayPref }) {
+      const urls = getURLs(homepageDisplayPref.value);
+      let listItems = [];
+      let type = "list";
+
+      // Show a reorderable list of Custom URLs if the user has provided any.
+      // Make sure to exclude "Firefox Home" and "Blank Page" values that are also
+      // stored in the homepage pref.
+      if (
+        [DEFAULT_HOMEPAGE_URL, BLANK_HOMEPAGE_URL].includes(
+          homepageDisplayPref.value.trim()
+        ) === false
+      ) {
+        type = "reorderable-list";
+        listItems = urls.map((url, index) => ({
+          id: `customHomepageUrl-${index}`,
+          key: `url-${index}-${url}`,
+          control: "moz-box-item",
+          controlAttrs: { label: url, "data-url": url },
+          options: [
+            {
+              control: "moz-button",
+              iconSrc: "chrome://global/skin/icons/delete.svg",
+              l10nId: "home-custom-homepage-delete-address-button",
+              slot: "actions-start",
+              controlAttrs: {
+                "data-action": "delete",
+                "data-index": index,
+              },
+            },
+          ],
+        }));
+      } else {
+        // If no custom URLs have been set, show the "no results" string instead.
+        listItems = [
+          {
+            control: "moz-box-item",
+            l10nId: "home-custom-homepage-no-results",
+            controlAttrs: {
+              class: "description-deemphasized",
+            },
+          },
+        ];
+      }
 
-  Preferences.addSetting({
-    id: "customHomepageBoxForm",
-  });
+      return {
+        ...config,
+        controlAttrs: {
+          ...config.controlAttrs,
+          type,
+        },
+        options: [
+          {
+            id: "customHomepageBoxForm",
+            control: "moz-box-item",
+            slot: "header",
+            items: [
+              {
+                id: "customHomepageAddUrlInput",
+                l10nId: "home-custom-homepage-address",
+                control: "moz-input-text",
+              },
+              {
+                id: "customHomepageAddAddressButton",
+                l10nId: "home-custom-homepage-address-button",
+                control: "moz-button",
+                slot: "actions",
+              },
+            ],
+          },
+          ...listItems,
+          {
+            id: "customHomepageBoxActions",
+            control: "moz-box-item",
+            slot: "footer",
+            items: [], // "replace with" buttons
+          },
+        ],
+      };
+    },
+    onUserReorder(e, { homepageDisplayPref }) {
+      let urls = getURLs(homepageDisplayPref.value);
 
-  Preferences.addSetting({
-    id: "customHomepageBoxUrlList",
-  });
+      let { draggedIndex, targetIndex } = e.detail;
+      let [moved] = urls.splice(draggedIndex, 1);
+      urls.splice(targetIndex, 0, moved);
 
-  Preferences.addSetting({
-    id: "customHomepageBoxActions",
-  });
+      homepageDisplayPref.value = urls.join("|");
+    },
+    onUserClick(e, { homepageDisplayPref }) {
+      let urls = getURLs(homepageDisplayPref.value);
 
-  // temp filler id for Custom URL subpage setup - to be removed in follow-up patches
-  Preferences.addSetting({
-    id: "customHomepagePlaceholderButton",
+      if (
+        e.target.localName === "moz-button" &&
+        e.target.getAttribute("data-action") === "delete"
+      ) {
+        let index = Number(e.target.dataset.index);
+        if (Number.isInteger(index) && index >= 0 && index < urls.length) {
+          urls.splice(index, 1);
+          homepageDisplayPref.value = urls.join("|");
+        }
+      }
+    },
   });
 
   // Homepage / New Tabs
diff --git a/browser/components/preferences/main.js b/browser/components/preferences/main.js
index ef8d15e9c241b..c09759c6d7e0e 100644
--- a/browser/components/preferences/main.js
+++ b/browser/components/preferences/main.js
@@ -2556,53 +2556,15 @@ SettingGroupManager.registerGroups({
   customHomepage: {
     inProgress: true,
     headingLevel: 2,
+    l10nId: "home-custom-homepage-card-header",
+    iconSrc: "chrome://global/skin/icons/link.svg",
     items: [
       {
-        id: "customHomepageCard",
-        control: "moz-card",
-        l10nId: "home-custom-homepage-card",
-        iconSrc: "chrome://global/skin/icons/link.svg",
-        items: [
-          {
-            id: "customHomepageBoxGroup",
-            control: "moz-box-group",
-            controlAttrs: {
-              type: "list",
-            },
-            items: [
-              {
-                id: "customHomepageBoxForm",
-                control: "moz-box-item",
-                items: [
-                  {
-                    id: "customHomepagePlaceholderButton",
-                    control: "moz-button",
-                  },
-                ],
-              },
-              {
-                id: "customHomepageBoxUrlList",
-                control: "moz-box-item",
-                items: [
-                  {
-                    id: "customHomepagePlaceholderButton",
-                    control: "moz-button",
-                  },
-                ],
-              },
-              {
-                id: "customHomepageBoxActions",
-                control: "moz-box-item",
-                items: [
-                  {
-                    id: "customHomepagePlaceholderButton",
-                    control: "moz-button",
-                  },
-                ],
-              },
-            ],
-          },
-        ],
+        id: "customHomepageBoxGroup",
+        control: "moz-box-group",
+        controlAttrs: {
+          type: "list",
+        },
       },
     ],
   },
diff --git a/browser/components/preferences/preferences.js b/browser/components/preferences/preferences.js
index 9e6ec0c0b4acc..41840d7e51a31 100644
--- a/browser/components/preferences/preferences.js
+++ b/browser/components/preferences/preferences.js
@@ -262,7 +262,7 @@ const CONFIG_PANES = Object.freeze({
   etpCustomize: {
     parent: "etp",
     l10nId: "preferences-etp-customize-header",
-    groupIds: ["etpReset", "etpCustomize"],
+    groupIds: ["etpCustomize", "etpReset"],
   },
   manageAddresses: {
     parent: "privacy",
diff --git a/browser/components/tabbrowser/content/tabbrowser.js b/browser/components/tabbrowser/content/tabbrowser.js
index 545ee3629d88d..c3a3e0e56c5cb 100644
--- a/browser/components/tabbrowser/content/tabbrowser.js
+++ b/browser/components/tabbrowser/content/tabbrowser.js
@@ -6556,23 +6556,16 @@
      * in the current window, in which case this will do nothing.
      *
      * @param {MozTabbrowserTab|MozTabbrowserTabGroup|MozTabbrowserTabGroup.labelElement} aTab
+     * @param {object} [aOptions={}]
+     *   Key-value pairs that will be serialized into the features string.
      */
-    replaceTabWithWindow(aTab, aOptions) {
+    replaceTabWithWindow(aTab, aOptions = {}) {
       if (this.tabs.length == 1) {
         return null;
       }
       // TODO bug 1967925: Consider handling the case where aTab is a tab group
       // and also the only tab group in its window.
 
-      var options = "chrome,dialog=no,all";
-      for (var name in aOptions) {
-        options += "," + name + "=" + aOptions[name];
-      }
-
-      if (PrivateBrowsingUtils.isWindowPrivate(window)) {
-        options += ",private=1";
-      }
-
       // Play the tab closing animation to give immediate feedback while
       // waiting for the new window to appear.
       if (!gReduceMotion && this.isTab(aTab)) {
@@ -6581,12 +6574,16 @@
       }
 
       // tell a new window to take the "dropped" tab
-      return window.openDialog(
-        AppConstants.BROWSER_CHROME_URL,
-        "_blank",
-        options,
-        aTab
-      );
+      let args = Cc["@mozilla.org/array;1"].createInstance(Ci.nsIMutableArray);
+      args.appendElement(aTab);
+      return BrowserWindowTracker.openWindow({
+        private: PrivateBrowsingUtils.isWindowPrivate(window),
+        features: Object.entries(aOptions)
+          .map(([key, value]) => `${key}=${value}`)
+          .join(","),
+        openerWindow: window,
+        args,
+      });
     }
 
     /**
diff --git a/browser/components/urlbar/ActionsProviderContextualSearch.sys.mjs b/browser/components/urlbar/ActionsProviderContextualSearch.sys.mjs
index f2fa594174eb1..ce7dfdcaab736 100644
--- a/browser/components/urlbar/ActionsProviderContextualSearch.sys.mjs
+++ b/browser/components/urlbar/ActionsProviderContextualSearch.sys.mjs
@@ -228,8 +228,15 @@ class ProviderContextualSearch extends ActionsProvider {
     let searchStr = queryContext.trimmedSearchString.toLocaleLowerCase();
 
     for (let engine of await lazy.SearchService.getVisibleEngines()) {
+      let engineName = engine.name.toLocaleLowerCase();
+      let engineAliases = engine.aliases.map(a => a.toLocaleLowerCase());
+
+      const matches = (search, name) =>
+        search.length < 3 ? name.startsWith(search) : name.includes(search);
+
       if (
-        engine.name.toLocaleLowerCase().startsWith(searchStr) &&
+        (matches(searchStr, engineName) ||
+          engineAliases.some(alias => matches(searchStr, alias))) &&
         ((await this.#shouldskipRecentVisitCheck(searchStr)) ||
           (await this.#engineDomainHasRecentVisits(engine.searchUrlDomain)))
       ) {
diff --git a/browser/components/urlbar/UrlbarController.sys.mjs b/browser/components/urlbar/UrlbarController.sys.mjs
index 8752b701bc460..a751bd0118491 100644
--- a/browser/components/urlbar/UrlbarController.sys.mjs
+++ b/browser/components/urlbar/UrlbarController.sys.mjs
@@ -1636,42 +1636,42 @@ class TelemetryEvent {
     this.#previousSearchWordsSet = null;
   }
 
+  /**
+   * Prefs to record in telemetry.
+   *
+   * If a pref is a `fallbackPref` for a Nimbus variable, list the variable
+   * instead of the pref. That way, the metric will record the variable value
+   * when the variable is defined and the pref value otherwise.
+   */
   #PING_PREFS = {
     maxRichResults: Glean.urlbar.prefMaxResults,
-    "quicksuggest.online.available": Glean.urlbar.prefSuggestOnlineAvailable,
+    quickSuggestOnlineAvailable: Glean.urlbar.prefSuggestOnlineAvailable,
     "quicksuggest.online.enabled": Glean.urlbar.prefSuggestOnlineEnabled,
     "suggest.quicksuggest.all": Glean.urlbar.prefSuggestAll,
     "suggest.quicksuggest.sponsored": Glean.urlbar.prefSuggestSponsored,
     "suggest.topsites": Glean.urlbar.prefSuggestTopsites,
   };
 
-  // Used to record telemetry for prefs that are fallbacks for Nimbus variables.
-  // `onNimbusChanged` is called for these variables rather than `onPrefChanged`
-  // but we want to record telemetry as if the prefs themselves changed. This
-  // object maps Nimbus variable names to their fallback prefs.
-  #PING_NIMBUS_VARIABLES = {
-    quickSuggestOnlineAvailable: "quicksuggest.online.available",
-  };
-
   #readPingPrefs() {
     for (const p of Object.keys(this.#PING_PREFS)) {
       this.#recordPref(p);
     }
   }
 
-  #recordPref(pref, newValue = undefined) {
+  #recordPref(pref) {
     const metric = this.#PING_PREFS[pref];
-    const prefValue = newValue ?? lazy.UrlbarPrefs.get(pref);
     if (metric) {
-      metric.set(prefValue);
+      metric.set(lazy.UrlbarPrefs.get(pref));
     }
+
     switch (pref) {
       case "suggest.quicksuggest.all":
       case "suggest.quicksuggest.sponsored":
       case "quicksuggest.enabled":
-        if (!prefValue) {
+        if (!lazy.UrlbarPrefs.get(pref)) {
           this.handleDisableSuggest();
         }
+        break;
     }
   }
 
@@ -1679,10 +1679,8 @@ class TelemetryEvent {
     this.#recordPref(pref);
   }
 
-  onNimbusChanged(name, newValue) {
-    if (this.#PING_NIMBUS_VARIABLES.hasOwnProperty(name)) {
-      this.#recordPref(this.#PING_NIMBUS_VARIABLES[name], newValue);
-    }
+  onNimbusChanged(variable) {
+    this.#recordPref(variable);
   }
 
   // Used to avoid re-entering `record()`.
diff --git a/browser/components/urlbar/metrics.yaml b/browser/components/urlbar/metrics.yaml
index 8e30002486d51..791490f3fcc6b 100644
--- a/browser/components/urlbar/metrics.yaml
+++ b/browser/components/urlbar/metrics.yaml
@@ -800,6 +800,7 @@ urlbar:
       Corresponds to the value of the `browser.urlbar.maxRichResults` pref.
     bugs:
       - https://bugzilla.mozilla.org/show_bug.cgi?id=1817196
+      - https://bugzilla.mozilla.org/show_bug.cgi?id=2014318
     data_reviews:
       - https://bugzilla.mozilla.org/show_bug.cgi?id=1817196
     data_sensitivity:
@@ -809,6 +810,7 @@ urlbar:
     expires: never
     send_in_pings:
       - events
+      - metrics
 
   pref_suggest_all:
     lifetime: application
@@ -819,6 +821,7 @@ urlbar:
       `browser.urlbar.suggest.quicksuggest.all` pref.
     bugs:
       - https://bugzilla.mozilla.org/show_bug.cgi?id=1995574
+      - https://bugzilla.mozilla.org/show_bug.cgi?id=2014318
     data_reviews:
       - https://bugzilla.mozilla.org/show_bug.cgi?id=1995574
     data_sensitivity:
@@ -828,6 +831,7 @@ urlbar:
     expires: never
     send_in_pings:
       - events
+      - metrics
 
   pref_suggest_online_available:
     lifetime: application
@@ -840,6 +844,7 @@ urlbar:
       Suggest introduced in 146 with Terms of Use and OHTTP.
     bugs:
       - https://bugzilla.mozilla.org/show_bug.cgi?id=1995362
+      - https://bugzilla.mozilla.org/show_bug.cgi?id=2014318
     data_reviews:
       - https://bugzilla.mozilla.org/show_bug.cgi?id=1995362
     data_sensitivity:
@@ -849,6 +854,7 @@ urlbar:
     expires: never
     send_in_pings:
       - events
+      - metrics
 
   pref_suggest_online_enabled:
     lifetime: application
@@ -862,6 +868,7 @@ urlbar:
       Suggest introduced in 146 with Terms of Use and OHTTP.
     bugs:
       - https://bugzilla.mozilla.org/show_bug.cgi?id=1995362
+      - https://bugzilla.mozilla.org/show_bug.cgi?id=2014318
     data_reviews:
       - https://bugzilla.mozilla.org/show_bug.cgi?id=1995362
     data_sensitivity:
@@ -871,6 +878,7 @@ urlbar:
     expires: never
     send_in_pings:
       - events
+      - metrics
 
   pref_suggest_sponsored:
     lifetime: application
@@ -882,6 +890,7 @@ urlbar:
     bugs:
       - https://bugzilla.mozilla.org/show_bug.cgi?id=1847855
       - https://bugzilla.mozilla.org/show_bug.cgi?id=1849726
+      - https://bugzilla.mozilla.org/show_bug.cgi?id=2014318
     data_reviews:
       - https://bugzilla.mozilla.org/show_bug.cgi?id=1847855
     data_sensitivity:
@@ -891,6 +900,7 @@ urlbar:
     expires: never
     send_in_pings:
       - events
+      - metrics
 
   pref_suggest_topsites:
     lifetime: application
@@ -900,6 +910,7 @@ urlbar:
       Corresponds to the value of the `browser.urlbar.suggest.topsites` pref.
     bugs:
       - https://bugzilla.mozilla.org/show_bug.cgi?id=1817196
+      - https://bugzilla.mozilla.org/show_bug.cgi?id=2014318
     data_reviews:
       - https://bugzilla.mozilla.org/show_bug.cgi?id=1817196
     data_sensitivity:
@@ -909,6 +920,7 @@ urlbar:
     expires: never
     send_in_pings:
       - events
+      - metrics
 
   autofill_deletion:
     type: counter
diff --git a/browser/components/urlbar/tests/browser/browser_contextualsearch.js b/browser/components/urlbar/tests/browser/browser_contextualsearch.js
index 075777b19b3cc..67e6c8cb35410 100644
--- a/browser/components/urlbar/tests/browser/browser_contextualsearch.js
+++ b/browser/components/urlbar/tests/browser/browser_contextualsearch.js
@@ -32,7 +32,6 @@ const CONFIG = [
       },
     },
   },
-
   {
     identifier: "config-engine",
     base: {
@@ -141,6 +140,47 @@ add_task(async function test_engine_match() {
   await onLoad;
 });
 
+add_task(async function test_alias_match() {
+  let newConfig = [CONFIG[0]].concat([
+    {
+      identifier: "alias-engine",
+      base: {
+        urls: {
+          search: { base: "https://example.net", searchTermParamName: "q" },
+        },
+        aliases: ["test"],
+      },
+    },
+  ]);
+  await SearchTestUtils.updateRemoteSettingsConfig(newConfig);
+
+  await UrlbarTestUtils.promiseAutocompleteResultPopup({
+    window,
+    value: "test",
+  });
+
+  let onLoad = BrowserTestUtils.browserLoaded(
+    gBrowser.selectedBrowser,
+    false,
+    "https://example.net/?q=test"
+  );
+
+  EventUtils.synthesizeKey("KEY_Tab");
+  await UrlbarTestUtils.assertSearchMode(window, {
+    engineName: "alias-engine",
+    entry: "keywordoffer",
+    isPreview: true,
+    source: 3,
+  });
+
+  await UrlbarTestUtils.promisePopupClose(window, () => {
+    EventUtils.sendString("test");
+    EventUtils.synthesizeKey("KEY_Enter");
+  });
+
+  await onLoad;
+});
+
 add_task(async function test_actions() {
   let testActionCalled = 0;
   await loadUri("https://example.net/");
diff --git a/browser/components/urlbar/tests/engagementTelemetry/browser/browser_glean_telemetry_record_preferences.js b/browser/components/urlbar/tests/engagementTelemetry/browser/browser_glean_telemetry_record_preferences.js
index 5fd100a73fbe6..24aed5ca85adb 100644
--- a/browser/components/urlbar/tests/engagementTelemetry/browser/browser_glean_telemetry_record_preferences.js
+++ b/browser/components/urlbar/tests/engagementTelemetry/browser/browser_glean_telemetry_record_preferences.js
@@ -91,7 +91,7 @@ add_task(async function boolNimbusVariable() {
     Assert.equal(
       Glean.urlbar[glean].testGetValue(),
       initialValue,
-      `Record ${glean} when UrlbarController is initialized`
+      "Metric value should be correct initially: " + glean
     );
 
     let nimbusCleanup = await UrlbarTestUtils.initNimbusFeature({
@@ -101,7 +101,28 @@ add_task(async function boolNimbusVariable() {
     Assert.equal(
       Glean.urlbar[glean].testGetValue(),
       !initialValue,
-      `Record ${glean} when the ${variable} variable is set`
+      "Metric value should be correct after installing experiment: " + glean
+    );
+
+    // Open a new window and make sure the metric is still correct. These pref
+    // metrics are currently recorded by `TelemetryEvent`, an instance of which
+    // is created per browser window.
+    let win = await BrowserTestUtils.openNewBrowserWindow();
+    await TestUtils.waitForTick();
+
+    Assert.equal(
+      Glean.urlbar[glean].testGetValue(),
+      !initialValue,
+      "Metric value should remain correct after opening new window: " + glean
+    );
+
+    await BrowserTestUtils.closeWindow(win);
+    await TestUtils.waitForTick();
+
+    Assert.equal(
+      Glean.urlbar[glean].testGetValue(),
+      !initialValue,
+      "Metric value should remain correct after closing new window: " + glean
     );
 
     await nimbusCleanup();
@@ -109,7 +130,7 @@ add_task(async function boolNimbusVariable() {
     Assert.equal(
       Glean.urlbar[glean].testGetValue(),
       initialValue,
-      `Record ${glean} when the ${variable} variable is unset`
+      "Metric value should be reset after uninstalling experiment: " + glean
     );
   }
 });
diff --git a/browser/locales-preview/aiWindow.ftl b/browser/locales-preview/aiWindow.ftl
index 07347269c16ac..b4fe2c11554ea 100644
--- a/browser/locales-preview/aiWindow.ftl
+++ b/browser/locales-preview/aiWindow.ftl
@@ -113,3 +113,7 @@ aiwindow-memories-off =
 aiwindow-new-chat =
     .tooltiptext = New chat
     .aria-label = New chat
+
+## Sign out dialog
+
+fxa-signout-dialog-body-aiwindow = Synced data will remain in your account. Your open Smart Windows will switch to standard windows.
diff --git a/browser/locales/en-US/browser/preferences/preferences.ftl b/browser/locales/en-US/browser/preferences/preferences.ftl
index 36088350e1743..7c4755e0daf68 100644
--- a/browser/locales/en-US/browser/preferences/preferences.ftl
+++ b/browser/locales/en-US/browser/preferences/preferences.ftl
@@ -892,11 +892,8 @@ home-custom-homepage-subpage =
     .heading = Custom Homepage
 
 # Subheader on the Custom Homepage subpage. Followed by a form to enter URLs and a list of URLs already saved, if any.
-home-custom-homepage-subheader = Website address(es)
-
-# Subheader on the Custom Homepage subpage. Followed by a form to enter URLs and a list of URLs already saved, if any.
-home-custom-homepage-card =
-    .heading = Website address(es)
+home-custom-homepage-card-header =
+    .label = Website address(es)
 
 home-custom-homepage-address =
     .placeholder = Enter address
@@ -904,7 +901,12 @@ home-custom-homepage-address-button =
     .label = Add address
 
 # Shown when no custom websites/URLs to use as a homepage have been added yet
-home-custom-homepage-no-websites-yet = No websites added yet.
+home-custom-homepage-no-results =
+    .label = No websites added yet.
+
+home-custom-homepage-delete-address-button =
+    .aria-label = Delete address
+    .title = Delete address
 
 # Further options to use when setting the home page. Two action buttons are placed in line with this prompt
 # to replace the current home page with a currently open page or bookmark.
diff --git a/browser/locales/l10n-changesets.json b/browser/locales/l10n-changesets.json
index 0e4da36585229..0c2d27fce36ff 100644
--- a/browser/locales/l10n-changesets.json
+++ b/browser/locales/l10n-changesets.json
@@ -15,7 +15,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "af": {
         "pin": false,
@@ -33,7 +33,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "an": {
         "pin": false,
@@ -51,7 +51,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "ar": {
         "pin": false,
@@ -69,7 +69,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "ast": {
         "pin": false,
@@ -87,7 +87,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "az": {
         "pin": false,
@@ -105,7 +105,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "be": {
         "pin": false,
@@ -123,7 +123,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "bg": {
         "pin": false,
@@ -141,7 +141,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "bn": {
         "pin": false,
@@ -159,7 +159,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "bo": {
         "pin": false,
@@ -177,7 +177,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "br": {
         "pin": false,
@@ -195,7 +195,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "brx": {
         "pin": false,
@@ -213,7 +213,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "bs": {
         "pin": false,
@@ -231,7 +231,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "ca": {
         "pin": false,
@@ -249,7 +249,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "ca-valencia": {
         "pin": false,
@@ -267,7 +267,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "cak": {
         "pin": false,
@@ -285,7 +285,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "ckb": {
         "pin": false,
@@ -303,7 +303,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "cs": {
         "pin": false,
@@ -321,7 +321,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "cy": {
         "pin": false,
@@ -339,7 +339,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "da": {
         "pin": false,
@@ -357,7 +357,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "de": {
         "pin": false,
@@ -375,7 +375,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "dsb": {
         "pin": false,
@@ -393,7 +393,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "el": {
         "pin": false,
@@ -411,7 +411,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "en-CA": {
         "pin": false,
@@ -429,7 +429,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "en-GB": {
         "pin": false,
@@ -447,7 +447,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "eo": {
         "pin": false,
@@ -465,7 +465,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "es-AR": {
         "pin": false,
@@ -483,7 +483,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "es-CL": {
         "pin": false,
@@ -501,7 +501,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "es-ES": {
         "pin": false,
@@ -519,7 +519,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "es-MX": {
         "pin": false,
@@ -537,7 +537,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "et": {
         "pin": false,
@@ -555,7 +555,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "eu": {
         "pin": false,
@@ -573,7 +573,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "fa": {
         "pin": false,
@@ -591,7 +591,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "ff": {
         "pin": false,
@@ -609,7 +609,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "fi": {
         "pin": false,
@@ -627,7 +627,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "fr": {
         "pin": false,
@@ -645,7 +645,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "fur": {
         "pin": false,
@@ -663,7 +663,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "fy-NL": {
         "pin": false,
@@ -681,7 +681,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "ga-IE": {
         "pin": false,
@@ -699,7 +699,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "gd": {
         "pin": false,
@@ -717,7 +717,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "gl": {
         "pin": false,
@@ -735,7 +735,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "gn": {
         "pin": false,
@@ -753,7 +753,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "gu-IN": {
         "pin": false,
@@ -771,7 +771,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "he": {
         "pin": false,
@@ -789,7 +789,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "hi-IN": {
         "pin": false,
@@ -807,7 +807,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "hr": {
         "pin": false,
@@ -825,7 +825,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "hsb": {
         "pin": false,
@@ -843,7 +843,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "hu": {
         "pin": false,
@@ -861,7 +861,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "hy-AM": {
         "pin": false,
@@ -879,7 +879,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "hye": {
         "pin": false,
@@ -897,7 +897,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "ia": {
         "pin": false,
@@ -915,7 +915,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "id": {
         "pin": false,
@@ -933,7 +933,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "is": {
         "pin": false,
@@ -951,7 +951,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "it": {
         "pin": false,
@@ -969,7 +969,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "ja": {
         "pin": false,
@@ -985,7 +985,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "ja-JP-mac": {
         "pin": false,
@@ -993,7 +993,7 @@
             "macosx64",
             "macosx64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "ka": {
         "pin": false,
@@ -1011,7 +1011,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "kab": {
         "pin": false,
@@ -1029,7 +1029,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "kk": {
         "pin": false,
@@ -1047,7 +1047,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "km": {
         "pin": false,
@@ -1065,7 +1065,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "kn": {
         "pin": false,
@@ -1083,7 +1083,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "ko": {
         "pin": false,
@@ -1101,7 +1101,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "lij": {
         "pin": false,
@@ -1119,7 +1119,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "lo": {
         "pin": false,
@@ -1137,7 +1137,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "lt": {
         "pin": false,
@@ -1155,7 +1155,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "ltg": {
         "pin": false,
@@ -1173,7 +1173,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "lv": {
         "pin": false,
@@ -1191,7 +1191,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "meh": {
         "pin": false,
@@ -1209,7 +1209,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "mk": {
         "pin": false,
@@ -1227,7 +1227,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "ml": {
         "pin": false,
@@ -1245,7 +1245,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "mr": {
         "pin": false,
@@ -1263,7 +1263,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "ms": {
         "pin": false,
@@ -1281,7 +1281,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "my": {
         "pin": false,
@@ -1299,7 +1299,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "nb-NO": {
         "pin": false,
@@ -1317,7 +1317,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "ne-NP": {
         "pin": false,
@@ -1335,7 +1335,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "nl": {
         "pin": false,
@@ -1353,7 +1353,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "nn-NO": {
         "pin": false,
@@ -1371,7 +1371,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "oc": {
         "pin": false,
@@ -1389,7 +1389,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "pa-IN": {
         "pin": false,
@@ -1407,7 +1407,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "pl": {
         "pin": false,
@@ -1425,7 +1425,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "pt-BR": {
         "pin": false,
@@ -1443,7 +1443,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "pt-PT": {
         "pin": false,
@@ -1461,7 +1461,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "rm": {
         "pin": false,
@@ -1479,7 +1479,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "ro": {
         "pin": false,
@@ -1497,7 +1497,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "ru": {
         "pin": false,
@@ -1515,7 +1515,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "sat": {
         "pin": false,
@@ -1533,7 +1533,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "sc": {
         "pin": false,
@@ -1551,7 +1551,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "scn": {
         "pin": false,
@@ -1569,7 +1569,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "sco": {
         "pin": false,
@@ -1587,7 +1587,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "si": {
         "pin": false,
@@ -1605,7 +1605,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "sk": {
         "pin": false,
@@ -1623,7 +1623,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "skr": {
         "pin": false,
@@ -1641,7 +1641,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "sl": {
         "pin": false,
@@ -1659,7 +1659,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "son": {
         "pin": false,
@@ -1677,7 +1677,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "sq": {
         "pin": false,
@@ -1695,7 +1695,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "sr": {
         "pin": false,
@@ -1713,7 +1713,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "sv-SE": {
         "pin": false,
@@ -1731,7 +1731,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "szl": {
         "pin": false,
@@ -1749,7 +1749,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "ta": {
         "pin": false,
@@ -1767,7 +1767,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "te": {
         "pin": false,
@@ -1785,7 +1785,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "tg": {
         "pin": false,
@@ -1803,7 +1803,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "th": {
         "pin": false,
@@ -1821,7 +1821,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "tl": {
         "pin": false,
@@ -1839,7 +1839,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "tr": {
         "pin": false,
@@ -1857,7 +1857,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "trs": {
         "pin": false,
@@ -1875,7 +1875,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "uk": {
         "pin": false,
@@ -1893,7 +1893,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "ur": {
         "pin": false,
@@ -1911,7 +1911,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "uz": {
         "pin": false,
@@ -1929,7 +1929,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "vi": {
         "pin": false,
@@ -1947,7 +1947,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "wo": {
         "pin": false,
@@ -1965,7 +1965,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "xh": {
         "pin": false,
@@ -1983,7 +1983,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "zh-CN": {
         "pin": false,
@@ -2001,7 +2001,7 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "zh-TW": {
         "pin": false,
@@ -2019,6 +2019,6 @@
             "win64-aarch64-devedition",
             "win64-devedition"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     }
 }
\ No newline at end of file
diff --git a/browser/modules/BrowserWindowTracker.sys.mjs b/browser/modules/BrowserWindowTracker.sys.mjs
index 0f2f66e4bbc27..9aecab66d8f23 100644
--- a/browser/modules/BrowserWindowTracker.sys.mjs
+++ b/browser/modules/BrowserWindowTracker.sys.mjs
@@ -325,7 +325,6 @@ export const BrowserWindowTracker = {
     let {
       openerWindow = undefined,
       private: isPrivate = false,
-      aiWindow = false,
       features = undefined,
       all = true,
       args = null,
@@ -353,9 +352,6 @@ export const BrowserWindowTracker = {
     } else {
       windowFeatures += ",non-private";
     }
-    if (aiWindow) {
-      windowFeatures += ",ai-window";
-    }
     if (!args) {
       loadURIString ??= lazy.BrowserHandler.defaultArgs;
       args = Cc["@mozilla.org/supports-string;1"].createInstance(
diff --git a/devtools/client/debugger/test/mochitest/browser_aj.toml b/devtools/client/debugger/test/mochitest/browser_aj.toml
index ec6662d6ba999..7974cbc10e391 100644
--- a/devtools/client/debugger/test/mochitest/browser_aj.toml
+++ b/devtools/client/debugger/test/mochitest/browser_aj.toml
@@ -26,7 +26,8 @@ prefs = [
 
 ["browser_dbg-backgroundtask-debugging.js"]
 skip-if = [
-  "os == 'linux' && os_version == '24.04' && arch == 'x86_64' && display == 'x11' && asan", # Bug 1937229
+  "os == 'linux' && os_version == '24.04' && arch == 'x86_64' && display == 'x11' && asan", # Bug 1767707
+  "os == 'linux' && os_version == '24.04' && arch == 'x86_64' && display == 'x11' && debug", # Bug 1767707
   "os == 'mac' && os_version == '14.70' && arch == 'x86_64'", # Bug 1937229
 ]
 
diff --git a/docshell/base/nsDocShell.cpp b/docshell/base/nsDocShell.cpp
index d9ca09eed5ec0..db49c39ec7144 100644
--- a/docshell/base/nsDocShell.cpp
+++ b/docshell/base/nsDocShell.cpp
@@ -10692,7 +10692,8 @@ bool nsDocShell::ShouldDoInitialAboutBlankSyncLoad(
     return false;
   }
 
-  if (mHasStartedLoadingOtherThanInitialBlankURI ||
+  if (mHasStartedLoadingOtherThanInitialBlankURI || !mDocumentViewer ||
+      !mDocumentViewer->GetDocument() ||
       !mDocumentViewer->GetDocument()->IsUncommittedInitialDocument()) {
     return false;
   }
diff --git a/dom/base/nsContentUtils.cpp b/dom/base/nsContentUtils.cpp
index be53d54487d58..35f77abd53679 100644
--- a/dom/base/nsContentUtils.cpp
+++ b/dom/base/nsContentUtils.cpp
@@ -12097,11 +12097,12 @@ void nsContentUtils::ExtractErrorValues(
     // Try to process as an Error object.  Use the file/line/column values
     // from the Error as they will be more specific to the root cause of
     // the problem.
-    if (JSErrorReport* err = JS_ErrorFromException(aCx, obj)) {
+    JS::BorrowedErrorReport err(aCx);
+    if (JS_ErrorFromException(aCx, obj, err)) {
       // Use xpc to extract the error message only.  We don't actually send
       // this report anywhere.
       RefPtr<xpc::ErrorReport> report = new xpc::ErrorReport();
-      report->Init(err,
+      report->Init(err.get(),
                    nullptr,  // toString result
                    false,    // chrome
                    0);       // window ID
diff --git a/dom/canvas/CanvasRenderingContext2D.cpp b/dom/canvas/CanvasRenderingContext2D.cpp
index 7aaa3a6f82a99..4405898cad8e1 100644
--- a/dom/canvas/CanvasRenderingContext2D.cpp
+++ b/dom/canvas/CanvasRenderingContext2D.cpp
@@ -5238,7 +5238,7 @@ UniquePtr<TextMetrics> CanvasRenderingContext2D::DrawOrMeasureText(
       baselineAnchor = font->GetBaselines(fontOrientation).mAlphabetic;
       break;
     case CanvasTextBaseline::Ideographic:
-      baselineAnchor = font->GetBaselines(fontOrientation).mIdeographic;
+      baselineAnchor = font->GetBaselines(fontOrientation).mIdeographicUnder;
       break;
     case CanvasTextBaseline::Bottom:
       baselineAnchor = -fontMetrics.emDescent;
@@ -5281,7 +5281,7 @@ UniquePtr<TextMetrics> CanvasRenderingContext2D::DrawOrMeasureText(
         fontMetrics.emDescent + baselineAnchor,  // emHeightDescent
         baselines.mHanging - baselineAnchor,
         baselines.mAlphabetic - baselineAnchor,
-        baselines.mIdeographic - baselineAnchor);
+        baselines.mIdeographicUnder - baselineAnchor);
   }
 
   // If we did not actually calculate bounds, set up a simple bounding box
diff --git a/dom/chrome-webidl/InspectorUtils.webidl b/dom/chrome-webidl/InspectorUtils.webidl
index fbf015959bdfa..3d7df4e3b0ad2 100644
--- a/dom/chrome-webidl/InspectorUtils.webidl
+++ b/dom/chrome-webidl/InspectorUtils.webidl
@@ -147,6 +147,21 @@ namespace InspectorUtils {
   // Returns a set of GRID_* flags based on whether the element is a grid
   // container or not.
   unsigned short getGridContainerType(Element aElement);
+
+  // Given a DOM element, return the anchor named `anchorName`, or the default
+  // anchor otherwise.
+  InspectorAnchorElement? getAnchorFor(Element element, optional DOMString? anchorName = null);
+};
+
+enum InspectorAnchorType {
+  "explicit",
+  "popover",
+  "pseudo-element",
+};
+
+dictionary InspectorAnchorElement {
+  required Element element;
+  required InspectorAnchorType type;
 };
 
 enum DeclarationOrigin {
diff --git a/dom/file/FileReader.cpp b/dom/file/FileReader.cpp
index bbe07d065b823..f2e962ca4ba68 100644
--- a/dom/file/FileReader.cpp
+++ b/dom/file/FileReader.cpp
@@ -224,8 +224,8 @@ void FileReader::OnLoadEndArrayBuffer() {
   JS_ClearPendingException(jsapi.cx());
 
   JS::Rooted<JSObject*> exceptionObject(cx, &exceptionValue.toObject());
-  JSErrorReport* er = JS_ErrorFromException(cx, exceptionObject);
-  if (!er || er->message()) {
+  JS::BorrowedErrorReport er(cx);
+  if (!JS_ErrorFromException(cx, exceptionObject, er) || er->message()) {
     FreeDataAndDispatchError(NS_ERROR_OUT_OF_MEMORY);
     return;
   }
diff --git a/dom/html/HTMLSelectElement.cpp b/dom/html/HTMLSelectElement.cpp
index b8399338bf371..e78090b7f08fd 100644
--- a/dom/html/HTMLSelectElement.cpp
+++ b/dom/html/HTMLSelectElement.cpp
@@ -27,7 +27,6 @@
 #include "nsError.h"
 #include "nsGkAtoms.h"
 #include "nsIFrame.h"
-#include "nsISelectControlFrame.h"
 #include "nsLayoutUtils.h"
 #include "nsListControlFrame.h"
 #include "nsTextNode.h"
@@ -349,21 +348,21 @@ void HTMLSelectElement::InsertOptionsIntoList(nsIContent* aOptions,
     // Get the frame stuff for notification. No need to flush here
     // since if there's no frame for the select yet the select will
     // get into the right state once it's created.
-    nsISelectControlFrame* selectFrame = nullptr;
+    nsListControlFrame* listBoxFrame = nullptr;
     AutoWeakFrame weakSelectFrame;
     bool didGetFrame = false;
 
     // Actually select the options if the added options warrant it
     for (int32_t i = aListIndex; i < insertIndex; i++) {
       // Notify the frame that the option is added
-      if (!didGetFrame || (selectFrame && !weakSelectFrame.IsAlive())) {
-        selectFrame = GetSelectFrame();
-        weakSelectFrame = do_QueryFrame(selectFrame);
+      if (!didGetFrame || (listBoxFrame && !weakSelectFrame.IsAlive())) {
+        listBoxFrame = GetListBoxFrame();
+        weakSelectFrame = do_QueryFrame(listBoxFrame);
         didGetFrame = true;
       }
 
-      if (selectFrame) {
-        selectFrame->AddOption(i);
+      if (listBoxFrame) {
+        listBoxFrame->AddOption(i);
       }
 
       RefPtr<HTMLOptionElement> option = Item(i);
@@ -379,7 +378,7 @@ void HTMLSelectElement::InsertOptionsIntoList(nsIContent* aOptions,
         // This is sort of a hack ... we need to notify that the option was
         // set and change selectedIndex even though we didn't really change
         // its value.
-        OnOptionSelected(selectFrame, i, true, false, aNotify);
+        OnOptionSelected(listBoxFrame, i, true, false, aNotify);
       }
     }
 
@@ -427,10 +426,10 @@ nsresult HTMLSelectElement::RemoveOptionsFromList(nsIContent* aOptions,
 
   if (numRemoved) {
     // Tell the widget we removed the options
-    if (nsISelectControlFrame* selectFrame = GetSelectFrame()) {
+    if (nsListControlFrame* listBoxFrame = GetListBoxFrame()) {
       nsAutoScriptBlocker scriptBlocker;
       for (int32_t i = aListIndex; i < aListIndex + numRemoved; ++i) {
-        selectFrame->RemoveOption(i);
+        listBoxFrame->RemoveOption(i);
       }
     }
 
@@ -607,7 +606,7 @@ int32_t HTMLSelectElement::GetFirstChildOptionIndex(nsIContent* aOptions,
   return retval;
 }
 
-nsISelectControlFrame* HTMLSelectElement::GetSelectFrame() {
+nsListControlFrame* HTMLSelectElement::GetListBoxFrame() {
   return do_QueryFrame(GetPrimaryFrame());
 }
 
@@ -748,8 +747,8 @@ void HTMLSelectElement::SetSelectedIndexInternal(int32_t aIndex, bool aNotify) {
 
   SetOptionsSelectedByIndex(aIndex, aIndex, mask);
 
-  if (nsISelectControlFrame* selectFrame = GetSelectFrame()) {
-    selectFrame->OnSetSelectedIndex(oldSelectedIndex, mSelectedIndex);
+  if (nsListControlFrame* listBoxFrame = GetListBoxFrame()) {
+    listBoxFrame->OnSetSelectedIndex(oldSelectedIndex, mSelectedIndex);
   }
   OnSelectionChanged();
 }
@@ -759,7 +758,7 @@ bool HTMLSelectElement::IsOptionSelectedByIndex(int32_t aIndex) const {
   return option && option->Selected();
 }
 
-void HTMLSelectElement::OnOptionSelected(nsISelectControlFrame* aSelectFrame,
+void HTMLSelectElement::OnOptionSelected(nsListControlFrame* aSelectFrame,
                                          int32_t aIndex, bool aSelected,
                                          bool aChangeOptionState,
                                          bool aNotify) {
@@ -858,7 +857,7 @@ bool HTMLSelectElement::SetOptionsSelectedByIndex(int32_t aStartIndex,
   bool optionsSelected = false;
   bool optionsDeselected = false;
 
-  nsISelectControlFrame* selectFrame = nullptr;
+  nsListControlFrame* listBoxFrame = nullptr;
   bool didGetFrame = false;
   AutoWeakFrame weakSelectFrame;
 
@@ -915,11 +914,11 @@ bool HTMLSelectElement::SetOptionsSelectedByIndex(int32_t aStartIndex,
           // to flush here, if there's no frame yet we don't need to
           // force it to be created just to notify it about a change
           // in the select.
-          selectFrame = GetSelectFrame();
-          weakSelectFrame = do_QueryFrame(selectFrame);
+          listBoxFrame = GetListBoxFrame();
+          weakSelectFrame = do_QueryFrame(listBoxFrame);
           didGetFrame = true;
 
-          OnOptionSelected(selectFrame, optIndex, true, !option->Selected(),
+          OnOptionSelected(listBoxFrame, optIndex, true, !option->Selected(),
                            aOptionsMask.contains(OptionFlag::Notify));
           optionsSelected = true;
         }
@@ -939,17 +938,17 @@ bool HTMLSelectElement::SetOptionsSelectedByIndex(int32_t aStartIndex,
           HTMLOptionElement* option = Item(optIndex);
           // If the index is already deselected, ignore it.
           if (option && option->Selected()) {
-            if (!didGetFrame || (selectFrame && !weakSelectFrame.IsAlive())) {
+            if (!didGetFrame || (listBoxFrame && !weakSelectFrame.IsAlive())) {
               // To notify the frame if anything gets changed, don't
               // flush, if the frame doesn't exist we don't need to
               // create it just to tell it about this change.
-              selectFrame = GetSelectFrame();
-              weakSelectFrame = do_QueryFrame(selectFrame);
+              listBoxFrame = GetListBoxFrame();
+              weakSelectFrame = do_QueryFrame(listBoxFrame);
 
               didGetFrame = true;
             }
 
-            OnOptionSelected(selectFrame, optIndex, false, true,
+            OnOptionSelected(listBoxFrame, optIndex, false, true,
                              aOptionsMask.contains(OptionFlag::Notify));
             optionsDeselected = true;
 
@@ -973,17 +972,17 @@ bool HTMLSelectElement::SetOptionsSelectedByIndex(int32_t aStartIndex,
 
       // If the index is already selected, ignore it.
       if (option && option->Selected()) {
-        if (!didGetFrame || (selectFrame && !weakSelectFrame.IsAlive())) {
+        if (!didGetFrame || (listBoxFrame && !weakSelectFrame.IsAlive())) {
           // To notify the frame if anything gets changed, don't
           // flush, if the frame doesn't exist we don't need to
           // create it just to tell it about this change.
-          selectFrame = GetSelectFrame();
-          weakSelectFrame = do_QueryFrame(selectFrame);
+          listBoxFrame = GetListBoxFrame();
+          weakSelectFrame = do_QueryFrame(listBoxFrame);
 
           didGetFrame = true;
         }
 
-        OnOptionSelected(selectFrame, optIndex, false, true,
+        OnOptionSelected(listBoxFrame, optIndex, false, true,
                          aOptionsMask.contains(OptionFlag::Notify));
         optionsDeselected = true;
       }
@@ -1234,8 +1233,8 @@ void HTMLSelectElement::DoneAddingChildren(bool aHaveNotified) {
   }
 
   // Notify the frame
-  if (nsISelectControlFrame* selectFrame = GetSelectFrame()) {
-    selectFrame->DoneAddingChildren();
+  if (auto* listBoxFrame = GetListBoxFrame()) {
+    listBoxFrame->DoneAddingChildren();
   }
 
   if (!mInhibitStateRestoration) {
@@ -1520,7 +1519,7 @@ HTMLSelectElement::SubmitNamesValues(FormData* aFormData) {
 }
 
 void HTMLSelectElement::DispatchContentReset() {
-  if (nsListControlFrame* listFrame = do_QueryFrame(GetPrimaryFrame())) {
+  if (nsListControlFrame* listFrame = GetListBoxFrame()) {
     listFrame->OnContentReset();
   }
 }
diff --git a/dom/html/HTMLSelectElement.h b/dom/html/HTMLSelectElement.h
index 70f5a1b86dc6b..e8d1bafe06da4 100644
--- a/dom/html/HTMLSelectElement.h
+++ b/dom/html/HTMLSelectElement.h
@@ -22,7 +22,7 @@
 class nsContentList;
 class nsIDOMHTMLOptionElement;
 class nsIHTMLCollection;
-class nsISelectControlFrame;
+class nsListControlFrame;
 
 namespace mozilla {
 
@@ -396,7 +396,7 @@ class HTMLSelectElement final : public nsGenericHTMLFormControlElementWithState,
    *                           its selected state to aSelected.
    * @param aNotify whether to notify the style system and such
    */
-  void OnOptionSelected(nsISelectControlFrame* aSelectFrame, int32_t aIndex,
+  void OnOptionSelected(nsListControlFrame* aSelectFrame, int32_t aIndex,
                         bool aSelected, bool aChangeOptionState, bool aNotify);
   /**
    * Restore state to a particular state string (representing the options)
@@ -458,11 +458,8 @@ class HTMLSelectElement final : public nsGenericHTMLFormControlElementWithState,
   int32_t GetFirstChildOptionIndex(nsIContent* aOptions, int32_t aStartIndex,
                                    int32_t aEndIndex);
 
-  /**
-   * Get the frame as an nsISelectControlFrame (MAY RETURN nullptr)
-   * @return the select frame, or null
-   */
-  nsISelectControlFrame* GetSelectFrame();
+  /** Get the frame as an nsListControlFrame (MAY RETURN nullptr) */
+  nsListControlFrame* GetListBoxFrame();
 
   /**
    * Helper method for dispatching ContentReset notifications to list box
diff --git a/dom/ipc/ClonedErrorHolder.cpp b/dom/ipc/ClonedErrorHolder.cpp
index 72c8bfbaf7f2f..54b37302e73f6 100644
--- a/dom/ipc/ClonedErrorHolder.cpp
+++ b/dom/ipc/ClonedErrorHolder.cpp
@@ -50,7 +50,8 @@ void ClonedErrorHolder::Init(JSContext* aCx, JS::Handle<JSObject*> aError,
                              ErrorResult& aRv) {
   JS::Rooted<JSObject*> stack(aCx);
 
-  if (JSErrorReport* err = JS_ErrorFromException(aCx, aError)) {
+  JS::BorrowedErrorReport err(aCx);
+  if (JS_ErrorFromException(aCx, aError, err)) {
     mType = Type::JSError;
     if (err->message()) {
       mMessage = err->message().c_str();
@@ -309,7 +310,8 @@ bool ClonedErrorHolder::ToErrorValue(JSContext* aCx,
 
     if (!mSourceLine.IsVoid()) {
       JS::Rooted<JSObject*> errObj(aCx, &aResult.toObject());
-      if (JSErrorReport* err = JS_ErrorFromException(aCx, errObj)) {
+      JS::BorrowedErrorReport err(aCx);
+      if (JS_ErrorFromException(aCx, errObj, err)) {
         NS_ConvertUTF8toUTF16 sourceLine(mSourceLine);
         // Because this string ends up being consumed as an nsDependentString
         // in nsXPCComponents_Utils::ReportError, this needs to be a null
@@ -320,8 +322,8 @@ bool ClonedErrorHolder::ToErrorValue(JSContext* aCx,
           // Corrupt data, leave linebuf unset.
         } else if (JS::UniqueTwoByteChars buffer =
                        ToNullTerminatedJSStringBuffer(aCx, sourceLine)) {
-          err->initOwnedLinebuf(buffer.release(), sourceLine.Length(),
-                                mTokenOffset);
+          err.get()->initOwnedLinebuf(buffer.release(), sourceLine.Length(),
+                                      mTokenOffset);
         } else {
           // Just ignore OOM and continue if the string copy failed.
           JS_ClearPendingException(aCx);
diff --git a/dom/media/webrtc/transport/ipc/WebrtcTCPSocket.cpp b/dom/media/webrtc/transport/ipc/WebrtcTCPSocket.cpp
index 4f31f98e1ee4a..8927f6ea21d21 100644
--- a/dom/media/webrtc/transport/ipc/WebrtcTCPSocket.cpp
+++ b/dom/media/webrtc/transport/ipc/WebrtcTCPSocket.cpp
@@ -20,6 +20,7 @@
 #include "nsIIOService.h"
 #include "nsILoadInfo.h"
 #include "nsIProtocolProxyService.h"
+#include "nsISocketTransport.h"
 #include "nsISocketTransportService.h"
 #include "nsIURIMutator.h"
 #include "nsProxyRelease.h"
diff --git a/gfx/gl/ScopedGLHelpers.cpp b/gfx/gl/ScopedGLHelpers.cpp
index be20cdee5a0d8..558384535b1f4 100644
--- a/gfx/gl/ScopedGLHelpers.cpp
+++ b/gfx/gl/ScopedGLHelpers.cpp
@@ -4,8 +4,13 @@
  * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
 
 #include "GLContext.h"
+#include "GLContextEGL.h"
 #include "ScopedGLHelpers.h"
 
+#ifdef MOZ_WIDGET_ANDROID
+#  include "mozilla/layers/AndroidHardwareBuffer.h"
+#endif
+
 namespace mozilla {
 namespace gl {
 
@@ -111,6 +116,30 @@ ScopedRenderbuffer::~ScopedRenderbuffer() {
   mGL->fDeleteRenderbuffers(1, &mRB);
 }
 
+/* ScopedEGLImageForAndroidHardwareBuffer
+ * **************************************************************/
+
+ScopedEGLImageForAndroidHardwareBuffer::ScopedEGLImageForAndroidHardwareBuffer(
+    GLContextEGL* aGL, layers::AndroidHardwareBuffer* aHardwareBuffer)
+    : mGL(aGL), mImage(EGL_NO_IMAGE) {
+#ifdef MOZ_WIDGET_ANDROID
+  const EGLClientBuffer clientBuffer =
+      mGL->mEgl->mLib->fGetNativeClientBufferANDROID(
+          aHardwareBuffer->GetNativeBuffer());
+  if (clientBuffer) {
+    mImage = mGL->mEgl->fCreateImage(
+        EGL_NO_CONTEXT, LOCAL_EGL_NATIVE_BUFFER_ANDROID, clientBuffer, nullptr);
+  }
+#endif
+}
+
+ScopedEGLImageForAndroidHardwareBuffer::
+    ~ScopedEGLImageForAndroidHardwareBuffer() {
+  if (mImage) {
+    mGL->mEgl->fDestroyImage(mImage);
+  }
+}
+
 /* ScopedBindTexture **********************************************************/
 
 static GLuint GetBoundTexture(GLContext* gl, GLenum texTarget) {
diff --git a/gfx/gl/ScopedGLHelpers.h b/gfx/gl/ScopedGLHelpers.h
index 0e73b71136a53..dbeda0b586e87 100644
--- a/gfx/gl/ScopedGLHelpers.h
+++ b/gfx/gl/ScopedGLHelpers.h
@@ -9,9 +9,14 @@
 #include "GLDefs.h"
 
 namespace mozilla {
+namespace layers {
+class AndroidHardwareBuffer;
+}
+
 namespace gl {
 
 class GLContext;
+class GLContextEGL;
 
 #ifdef DEBUG
 bool IsContextCurrent(GLContext* gl);
@@ -97,6 +102,20 @@ struct ScopedRenderbuffer final {
   operator GLuint() const { return mRB; }
 };
 
+struct ScopedEGLImageForAndroidHardwareBuffer final {
+ private:
+  GLContextEGL* const mGL;
+  EGLImage mImage;
+
+ public:
+  explicit ScopedEGLImageForAndroidHardwareBuffer(
+      GLContextEGL* aGL, layers::AndroidHardwareBuffer* aHardwareBuffer);
+  ~ScopedEGLImageForAndroidHardwareBuffer();
+
+  EGLImage Image() const { return mImage; }
+  operator EGLImage() const { return mImage; }
+};
+
 struct ScopedBindTexture final {
  private:
   GLContext* const mGL;
diff --git a/gfx/layers/ipc/PUiCompositorController.ipdl b/gfx/layers/ipc/PUiCompositorController.ipdl
index b4c9d9370ea9c..2e67a5a176371 100644
--- a/gfx/layers/ipc/PUiCompositorController.ipdl
+++ b/gfx/layers/ipc/PUiCompositorController.ipdl
@@ -5,10 +5,8 @@
  * License, v. 2.0. If a copy of the MPL was not distributed with this
  * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
 
-using mozilla::CSSRect from "Units.h";
-using mozilla::CSSToScreenScale from "Units.h";
-using mozilla::ScreenIntSize from "Units.h";
-using mozilla::ScreenPoint from "Units.h";
+using mozilla::gfx::IntRect from "mozilla/gfx/Rect.h";
+using mozilla::gfx::IntSize from "mozilla/gfx/Point.h";
 using mozilla::layers::CompositorScrollUpdate from "mozilla/layers/CompositorScrollUpdate.h";
 
 include "mozilla/GfxMessageUtils.h";
@@ -38,12 +36,12 @@ parent:
   async MaxToolbarHeight(int32_t aHeight);
   async FixedBottomOffset(int32_t aOffset);
   async DefaultClearColor(uint32_t aColor);
-  async RequestScreenPixels();
+  async RequestScreenPixels(IntRect aSourceRect, IntSize aDestSize);
   async EnableLayerUpdateNotifications(bool aEnable);
 child:
   async ToolbarAnimatorMessageFromCompositor(int32_t aMessage);
   async NotifyCompositorScrollUpdate(CompositorScrollUpdate aUpdate);
-  async ScreenPixels(Shmem aMem, ScreenIntSize aSize, bool aNeedsYFlip);
+  async ScreenPixels(FileDescriptor? aHardwareBuffer, FileDescriptor? aAcquireFence);
 };
 
 } // layers
diff --git a/gfx/layers/ipc/UiCompositorControllerChild.cpp b/gfx/layers/ipc/UiCompositorControllerChild.cpp
index 27793d9d50acd..0225f6a1b7c7d 100644
--- a/gfx/layers/ipc/UiCompositorControllerChild.cpp
+++ b/gfx/layers/ipc/UiCompositorControllerChild.cpp
@@ -20,6 +20,7 @@
 #include "nsThreadUtils.h"
 
 #if defined(MOZ_WIDGET_ANDROID)
+#  include "mozilla/layers/AndroidHardwareBuffer.h"
 #  include "mozilla/widget/AndroidUiThread.h"
 
 static RefPtr<nsThread> GetUiThread() { return mozilla::GetAndroidUiThread(); }
@@ -138,12 +139,13 @@ bool UiCompositorControllerChild::SetDefaultClearColor(const uint32_t& aColor) {
   return SendDefaultClearColor(aColor);
 }
 
-bool UiCompositorControllerChild::RequestScreenPixels() {
+bool UiCompositorControllerChild::RequestScreenPixels(gfx::IntRect aSourceRect,
+                                                      gfx::IntSize aDestSize) {
   if (!mIsOpen) {
     return false;
   }
 
-  return SendRequestScreenPixels();
+  return SendRequestScreenPixels(aSourceRect, aDestSize);
 }
 
 bool UiCompositorControllerChild::EnableLayerUpdateNotifications(
@@ -188,10 +190,6 @@ void UiCompositorControllerChild::Destroy() {
   task.Wait();
 }
 
-bool UiCompositorControllerChild::DeallocPixelBuffer(Shmem& aMem) {
-  return DeallocShmem(aMem);
-}
-
 // protected:
 void UiCompositorControllerChild::ActorDestroy(ActorDestroyReason aWhy) {
   mIsOpen = false;
@@ -238,10 +236,20 @@ UiCompositorControllerChild::RecvNotifyCompositorScrollUpdate(
 }
 
 mozilla::ipc::IPCResult UiCompositorControllerChild::RecvScreenPixels(
-    ipc::Shmem&& aMem, const ScreenIntSize& aSize, bool aNeedsYFlip) {
+    Maybe<ipc::FileDescriptor>&& aHardwareBuffer,
+    Maybe<ipc::FileDescriptor>&& aAcquireFence) {
 #if defined(MOZ_WIDGET_ANDROID)
+  RefPtr<layers::AndroidHardwareBuffer> hardwareBuffer;
+  if (aHardwareBuffer) {
+    hardwareBuffer =
+        layers::AndroidHardwareBuffer::DeserializeFromFileDescriptor(
+            aHardwareBuffer->TakePlatformHandle());
+  }
+  if (hardwareBuffer && aAcquireFence) {
+    hardwareBuffer->SetAcquireFence(aAcquireFence->TakePlatformHandle());
+  }
   if (mWidget) {
-    mWidget->RecvScreenPixels(std::move(aMem), aSize, aNeedsYFlip);
+    mWidget->RecvScreenPixels(hardwareBuffer);
   }
 #endif  // defined(MOZ_WIDGET_ANDROID)
 
diff --git a/gfx/layers/ipc/UiCompositorControllerChild.h b/gfx/layers/ipc/UiCompositorControllerChild.h
index c8df8e2a6647b..d40f89f6b2bbf 100644
--- a/gfx/layers/ipc/UiCompositorControllerChild.h
+++ b/gfx/layers/ipc/UiCompositorControllerChild.h
@@ -10,7 +10,6 @@
 
 #include "mozilla/gfx/2D.h"
 #include "mozilla/Maybe.h"
-#include "mozilla/ipc/Shmem.h"
 #include "mozilla/layers/UiCompositorControllerParent.h"
 #include "mozilla/RefPtr.h"
 #include "nsThread.h"
@@ -46,13 +45,11 @@ class UiCompositorControllerChild final
   bool SetFixedBottomOffset(int32_t aOffset);
   bool ToolbarAnimatorMessageFromUI(const int32_t& aMessage);
   bool SetDefaultClearColor(const uint32_t& aColor);
-  bool RequestScreenPixels();
+  bool RequestScreenPixels(gfx::IntRect aSourceRect, gfx::IntSize aDestSize);
   bool EnableLayerUpdateNotifications(const bool& aEnable);
 
   void Destroy();
 
-  bool DeallocPixelBuffer(Shmem& aMem);
-
 #ifdef MOZ_WIDGET_ANDROID
   // Set mCompositorSurfaceManager. Must be called straight after initialization
   // for GPU process controllers. Do not call for in-process controllers. This
@@ -81,9 +78,9 @@ class UiCompositorControllerChild final
       const int32_t& aMessage);
   mozilla::ipc::IPCResult RecvNotifyCompositorScrollUpdate(
       const CompositorScrollUpdate& aUpdate);
-  mozilla::ipc::IPCResult RecvScreenPixels(Shmem&& aMem,
-                                           const ScreenIntSize& aSize,
-                                           bool aNeedsYFlip);
+  mozilla::ipc::IPCResult RecvScreenPixels(
+      Maybe<ipc::FileDescriptor>&& aHardwareBuffer,
+      Maybe<ipc::FileDescriptor>&& aAcquireFence);
 
  private:
   explicit UiCompositorControllerChild(const uint64_t& aProcessToken,
diff --git a/gfx/layers/ipc/UiCompositorControllerParent.cpp b/gfx/layers/ipc/UiCompositorControllerParent.cpp
index 97729b216b55c..006c209add5be 100644
--- a/gfx/layers/ipc/UiCompositorControllerParent.cpp
+++ b/gfx/layers/ipc/UiCompositorControllerParent.cpp
@@ -7,6 +7,7 @@
 
 #if defined(MOZ_WIDGET_ANDROID)
 #  include "apz/src/APZCTreeManager.h"
+#  include "mozilla/layers/AndroidHardwareBuffer.h"
 #  include "mozilla/widget/AndroidCompositorWidget.h"
 #endif
 #include <utility>
@@ -139,14 +140,33 @@ mozilla::ipc::IPCResult UiCompositorControllerParent::RecvDefaultClearColor(
   return IPC_OK();
 }
 
-mozilla::ipc::IPCResult
-UiCompositorControllerParent::RecvRequestScreenPixels() {
+mozilla::ipc::IPCResult UiCompositorControllerParent::RecvRequestScreenPixels(
+    gfx::IntRect aSourceRect, gfx::IntSize aDestSize) {
 #if defined(MOZ_WIDGET_ANDROID)
   LayerTreeState* state =
       CompositorBridgeParent::GetIndirectShadowTree(mRootLayerTreeId);
 
   if (state && state->mWrBridge) {
-    state->mWrBridge->RequestScreenPixels(this);
+    state->mWrBridge->RequestScreenPixels(aSourceRect, aDestSize)
+        ->Then(
+            GetCurrentSerialEventTarget(), __func__,
+            [target =
+                 RefPtr{this}](RefPtr<AndroidHardwareBuffer> aHardwareBuffer) {
+              UniqueFileHandle bufferFd =
+                  aHardwareBuffer->SerializeToFileDescriptor();
+              UniqueFileHandle fenceFd =
+                  aHardwareBuffer->GetAndResetAcquireFence();
+              (void)target->SendScreenPixels(
+                  aHardwareBuffer
+                      ? Some(ipc::FileDescriptor(std::move(bufferFd)))
+                      : Nothing(),
+                  fenceFd ? Some(ipc::FileDescriptor(std::move(fenceFd)))
+                          : Nothing());
+            },
+            [target = RefPtr{this}](nsresult aError) {
+              (void)target->SendScreenPixels(Nothing(), Nothing());
+            });
+    ;
     state->mWrBridge->ScheduleForcedGenerateFrame(wr::RenderReasons::OTHER);
   }
 #endif  // defined(MOZ_WIDGET_ANDROID)
@@ -186,12 +206,6 @@ void UiCompositorControllerParent::ToolbarAnimatorMessageFromCompositor(
   (void)SendToolbarAnimatorMessageFromCompositor(aMessage);
 }
 
-bool UiCompositorControllerParent::AllocPixelBuffer(const int32_t aSize,
-                                                    ipc::Shmem* aMem) {
-  MOZ_ASSERT(aSize > 0);
-  return AllocShmem(aSize, aMem);
-}
-
 void UiCompositorControllerParent::NotifyLayersUpdated() {
 #ifdef MOZ_WIDGET_ANDROID
   if (mCompositorLayersUpdateEnabled) {
diff --git a/gfx/layers/ipc/UiCompositorControllerParent.h b/gfx/layers/ipc/UiCompositorControllerParent.h
index 88ce66dc81247..98b7f6dbeffc1 100644
--- a/gfx/layers/ipc/UiCompositorControllerParent.h
+++ b/gfx/layers/ipc/UiCompositorControllerParent.h
@@ -9,7 +9,6 @@
 #include "mozilla/layers/PUiCompositorControllerParent.h"
 #include "mozilla/layers/CompositorScrollUpdate.h"
 #include "mozilla/layers/LayersTypes.h"
-#include "mozilla/ipc/Shmem.h"
 #include "mozilla/RefPtr.h"
 
 namespace mozilla {
@@ -44,14 +43,14 @@ class UiCompositorControllerParent final
   mozilla::ipc::IPCResult RecvMaxToolbarHeight(const int32_t& aHeight);
   mozilla::ipc::IPCResult RecvFixedBottomOffset(const int32_t& aOffset);
   mozilla::ipc::IPCResult RecvDefaultClearColor(const uint32_t& aColor);
-  mozilla::ipc::IPCResult RecvRequestScreenPixels();
+  mozilla::ipc::IPCResult RecvRequestScreenPixels(gfx::IntRect aSourceRect,
+                                                  gfx::IntSize aDestSize);
   mozilla::ipc::IPCResult RecvEnableLayerUpdateNotifications(
       const bool& aEnable);
   void ActorDestroy(ActorDestroyReason aWhy) override;
 
   // Class specific functions
   void ToolbarAnimatorMessageFromCompositor(int32_t aMessage);
-  bool AllocPixelBuffer(const int32_t aSize, Shmem* aMem);
 
   // Called when a layer has been updated so the UI thread may be notified if
   // necessary.
diff --git a/gfx/layers/wr/WebRenderBridgeParent.cpp b/gfx/layers/wr/WebRenderBridgeParent.cpp
index 181196f7d5cd3..d7ea4c3a7a265 100644
--- a/gfx/layers/wr/WebRenderBridgeParent.cpp
+++ b/gfx/layers/wr/WebRenderBridgeParent.cpp
@@ -57,6 +57,9 @@
 #if defined(MOZ_WIDGET_GTK)
 #  include "mozilla/widget/GtkCompositorWidget.h"
 #endif
+#ifdef MOZ_WIDGET_ANDROID
+#  include "mozilla/layers/AndroidHardwareBuffer.h"
+#endif
 
 bool is_in_main_thread() { return NS_IsMainThread(); }
 
@@ -1824,54 +1827,38 @@ void WebRenderBridgeParent::UpdateBoolParameters() {
 }
 
 #if defined(MOZ_WIDGET_ANDROID)
-void WebRenderBridgeParent::RequestScreenPixels(
-    UiCompositorControllerParent* aController) {
-  mScreenPixelsTarget = aController;
+RefPtr<WebRenderBridgeParent::ScreenPixelsPromise>
+WebRenderBridgeParent::RequestScreenPixels(gfx::IntRect aSourceRect,
+                                           gfx::IntSize aDestSize) {
+  if (!IsRootWebRenderBridgeParent()) {
+    return ScreenPixelsPromise::CreateAndReject(NS_ERROR_ILLEGAL_VALUE,
+                                                __func__);
+  }
+
+  mScreenPixelsRequest.emplace(ScreenPixelsRequest{
+      .mSourceRect = aSourceRect,
+      .mDestSize = aDestSize,
+      .mPromise = new ScreenPixelsPromise::Private(__func__),
+  });
+  return mScreenPixelsRequest->mPromise;
 }
 
 void WebRenderBridgeParent::MaybeCaptureScreenPixels() {
-  if (!mScreenPixelsTarget) {
-    return;
-  }
+  // This function should only get called in the root WRBP.
+  MOZ_ASSERT(IsRootWebRenderBridgeParent());
 
-  if (mDestroyed) {
+  if (!mScreenPixelsRequest) {
     return;
   }
+  auto request = mScreenPixelsRequest.extract();
 
-  if (auto* cbp = GetRootCompositorBridgeParent()) {
-    cbp->FlushPendingWrTransactionEventsWithWait();
-  }
-
-  // This function should only get called in the root WRBP.
-  MOZ_ASSERT(IsRootWebRenderBridgeParent());
 #  ifdef DEBUG
   CompositorBridgeParent* cbp = GetRootCompositorBridgeParent();
   MOZ_ASSERT(cbp && !cbp->IsPaused());
 #  endif
 
-  SurfaceFormat format = SurfaceFormat::R8G8B8A8;  // On android we use RGBA8
-  auto client_size = mWidget->GetClientSize();
-  size_t buffer_size =
-      client_size.width * client_size.height * BytesPerPixel(format);
-
-  ipc::Shmem mem;
-  if (!mScreenPixelsTarget->AllocPixelBuffer(buffer_size, &mem)) {
-    // Failed to alloc shmem, Just bail out.
-    return;
-  }
-
-  IntSize size(client_size.width, client_size.height);
-
-  bool needsYFlip = false;
-  mLateInit->mApi->Readback(TimeStamp::Now(), size, format,
-                            Range<uint8_t>(mem.get<uint8_t>(), buffer_size),
-                            &needsYFlip);
-
-  (void)mScreenPixelsTarget->SendScreenPixels(
-      std::move(mem), ScreenIntSize(client_size.width, client_size.height),
-      needsYFlip);
-
-  mScreenPixelsTarget = nullptr;
+  mLateInit->mApi->RequestScreenPixels(request.mSourceRect, request.mDestSize)
+      ->ChainTo(request.mPromise.forget(), __func__);
 }
 #endif
 
@@ -2556,6 +2543,12 @@ void WebRenderBridgeParent::MaybeGenerateFrame(VsyncId aId,
     }
   }
 
+#if defined(MOZ_WIDGET_ANDROID)
+  // Ensure the rendered pixels get captured for the frame we are about to
+  // generate. Must be called before we generate the frame.
+  MaybeCaptureScreenPixels();
+#endif
+
   SetOMTASampleTime();
   SetAPZSampleTime();
 
@@ -2574,10 +2567,6 @@ void WebRenderBridgeParent::MaybeGenerateFrame(VsyncId aId,
 
   mLateInit->mApi->SendTransaction(fastTxn);
 
-#if defined(MOZ_WIDGET_ANDROID)
-  MaybeCaptureScreenPixels();
-#endif
-
   mMostRecentComposite = TimeStamp::Now();
 
   // During disabling native compositor, webrender needs to render twice.
diff --git a/gfx/layers/wr/WebRenderBridgeParent.h b/gfx/layers/wr/WebRenderBridgeParent.h
index e52d5426d1d4d..81fb83921bf15 100644
--- a/gfx/layers/wr/WebRenderBridgeParent.h
+++ b/gfx/layers/wr/WebRenderBridgeParent.h
@@ -309,12 +309,15 @@ class WebRenderBridgeParent final : public PWebRenderBridgeParent,
   void BeginRecording(const TimeStamp& aRecordingStart);
 
 #if defined(MOZ_WIDGET_ANDROID)
+  using ScreenPixelsPromise =
+      MozPromise<RefPtr<layers::AndroidHardwareBuffer>, nsresult, true>;
   /**
    * Request a screengrab for android
    */
-  void RequestScreenPixels(UiCompositorControllerParent* aController);
-  void MaybeCaptureScreenPixels();
+  RefPtr<ScreenPixelsPromise> RequestScreenPixels(gfx::IntRect aSourceRect,
+                                                  gfx::IntSize aDestSize);
 #endif
+
   /**
    * Stop recording and the frames collected since the call to BeginRecording
    */
@@ -428,6 +431,13 @@ class WebRenderBridgeParent final : public PWebRenderBridgeParent,
   void MaybeGenerateFrame(VsyncId aId, bool aForceGenerateFrame,
                           wr::RenderReasons aReasons);
 
+#if defined(MOZ_WIDGET_ANDROID)
+  // If screen pixels have been requested via RequestScreenPixels(), sends the
+  // request to the renderer. Should be called immediately prior to generating
+  // the frame for which we want the pixels to be captured.
+  void MaybeCaptureScreenPixels();
+#endif
+
   VsyncId GetVsyncIdForEpoch(const wr::Epoch& aEpoch) {
     for (auto& id : mPendingTransactionIds) {
       if (id.mEpoch.mHandle == aEpoch.mHandle) {
@@ -513,8 +523,14 @@ class WebRenderBridgeParent final : public PWebRenderBridgeParent,
   RefPtr<WebRenderBridgeParentRef> mWebRenderBridgeRef;
 
 #if defined(MOZ_WIDGET_ANDROID)
-  UiCompositorControllerParent* mScreenPixelsTarget = nullptr;
+  struct ScreenPixelsRequest {
+    gfx::IntRect mSourceRect;
+    gfx::IntSize mDestSize;
+    RefPtr<ScreenPixelsPromise::Private> mPromise;
+  };
+  Maybe<ScreenPixelsRequest> mScreenPixelsRequest;
 #endif
+
   uint32_t mBoolParameterBits;
   uint16_t mBlobTileSize = 256;
   wr::RenderReasons mSkippedCompositeReasons = wr::RenderReasons::NONE;
diff --git a/gfx/src/nsFontMetrics.cpp b/gfx/src/nsFontMetrics.cpp
index ef081ebe40a44..3eceb6bde276f 100644
--- a/gfx/src/nsFontMetrics.cpp
+++ b/gfx/src/nsFontMetrics.cpp
@@ -165,6 +165,55 @@ void nsFontMetrics::Destroy() { mPresContext = nullptr; }
 #define ROUND_TO_TWIPS(x) (nscoord) floor(((x) * mP2A) + 0.5)
 #define CEIL_TO_TWIPS(x) (nscoord) ceil((x) * mP2A)
 
+static const gfxFont::Baselines& GetBaselines(
+    const nsFontMetrics* aFontMetrics,
+    nsFontMetrics::FontOrientation aOrientation) {
+  RefPtr<gfxFont> font =
+      aFontMetrics->GetThebesFontGroup()->GetFirstValidFont();
+  return font->GetBaselines(aOrientation);
+}
+
+static const gfxFont::Baselines& GetBaselines(
+    const nsFontMetrics* aFontMetrics) {
+  return GetBaselines(aFontMetrics, aFontMetrics->Orientation());
+}
+
+nscoord nsFontMetrics::AlphabeticBaseline() const {
+  return ROUND_TO_TWIPS(GetBaselines(this).mAlphabetic);
+}
+
+nscoord nsFontMetrics::CentralBaseline() const {
+  return ROUND_TO_TWIPS(GetBaselines(this).mCentral);
+}
+
+nscoord nsFontMetrics::XMiddleBaseline() const {
+  return (AlphabeticBaseline() + XHeight()) / 2;
+}
+
+nscoord nsFontMetrics::IdeographicUnderBaseline() const {
+  return ROUND_TO_TWIPS(GetBaselines(this).mIdeographicUnder);
+}
+
+nscoord nsFontMetrics::IdeographicOverBaseline() const {
+  return ROUND_TO_TWIPS(GetBaselines(this).mIdeographicOver);
+}
+
+nscoord nsFontMetrics::IdeographicInkUnderBaseline() const {
+  return ROUND_TO_TWIPS(GetBaselines(this).mIdeographicInkUnder);
+}
+
+nscoord nsFontMetrics::IdeographicInkOverBaseline() const {
+  return ROUND_TO_TWIPS(GetBaselines(this).mIdeographicInkOver);
+}
+
+nscoord nsFontMetrics::HangingBaseline() const {
+  return ROUND_TO_TWIPS(GetBaselines(this).mHanging);
+}
+
+nscoord nsFontMetrics::MathBaseline() const {
+  return ROUND_TO_TWIPS(GetBaselines(this).mMath);
+}
+
 static const gfxFont::Metrics& GetMetrics(
     const nsFontMetrics* aFontMetrics,
     nsFontMetrics::FontOrientation aOrientation) {
diff --git a/gfx/src/nsFontMetrics.h b/gfx/src/nsFontMetrics.h
index bf5a7974c847f..a7b37824e4d99 100644
--- a/gfx/src/nsFontMetrics.h
+++ b/gfx/src/nsFontMetrics.h
@@ -79,6 +79,51 @@ class nsFontMetrics final {
    */
   void Destroy();
 
+  /**
+   * Return the font's alphabetic baseline.
+   */
+  nscoord AlphabeticBaseline() const;
+
+  /**
+   * Return the font's central baseline.
+   */
+  nscoord CentralBaseline() const;
+
+  /**
+   * Return the font's x-middle baseline.
+   */
+  nscoord XMiddleBaseline() const;
+
+  /**
+   * Return the font's ideographic-under baseline.
+   */
+  nscoord IdeographicUnderBaseline() const;
+
+  /**
+   * Return the font's ideographic-over baseline.
+   */
+  nscoord IdeographicOverBaseline() const;
+
+  /**
+   * Return the font's ideographic-ink-under baseline.
+   */
+  nscoord IdeographicInkUnderBaseline() const;
+
+  /**
+   * Return the font's ideographic-ink-over baseline.
+   */
+  nscoord IdeographicInkOverBaseline() const;
+
+  /**
+   * Return the font's hanging baseline.
+   */
+  nscoord HangingBaseline() const;
+
+  /**
+   * Return the font's math baseline.
+   */
+  nscoord MathBaseline() const;
+
   /**
    * Return the font's x-height.
    */
diff --git a/gfx/thebes/gfxFont.cpp b/gfx/thebes/gfxFont.cpp
index 2852c11c6f759..67becd06d78e1 100644
--- a/gfx/thebes/gfxFont.cpp
+++ b/gfx/thebes/gfxFont.cpp
@@ -997,6 +997,8 @@ gfxFont::gfxFont(const RefPtr<UnscaledFont>& aUnscaledFont,
     mAntialiasOption = kAntialiasNone;
   }
 
+  InitBaselines(mHorizontalBaselines, nsFontMetrics::eHorizontal);
+
   mKerningSet = HasFeatureSet(HB_TAG('k', 'e', 'r', 'n'), mKerningEnabled);
 
   // Ensure the gfxFontEntry's unitsPerEm and extents fields are initialized,
@@ -1009,6 +1011,7 @@ gfxFont::~gfxFont() {
 
   // Delete objects owned through atomic pointers. (Some of these may be null,
   // but that's OK.)
+  delete mVerticalBaselines.exchange(nullptr);
   delete mVerticalMetrics.exchange(nullptr);
   delete mHarfBuzzShaper.exchange(nullptr);
   delete mGraphiteShaper.exchange(nullptr);
@@ -4424,69 +4427,58 @@ void gfxFont::SanitizeMetrics(gfxFont::Metrics* aMetrics,
   }
 }
 
-gfxFont::Baselines gfxFont::GetBaselines(Orientation aOrientation) {
-  // Approximated baselines for fonts lacking actual baseline data. These are
-  // fractions of the em ascent/descent from the alphabetic baseline.
-  const double kHangingBaselineDefault = 0.8;       // fraction of ascent
-  const double kIdeographicBaselineDefault = -0.5;  // fraction of descent
-
-  // If no BASE table is present, just return synthetic values immediately.
-  if (!mFontEntry->HasFontTable(TRUETYPE_TAG('B', 'A', 'S', 'E'))) {
-    // No baseline table; just synthesize them immediately.
-    const Metrics& metrics = GetMetrics(aOrientation);
-    return Baselines{
-        0.0,                                             // alphabetic
-        kHangingBaselineDefault * metrics.emAscent,      // hanging
-        kIdeographicBaselineDefault * metrics.emDescent  // ideographic
-    };
-  }
-
-  // Use harfbuzz to try to read the font's baseline metrics.
-  Baselines result{NAN, NAN, NAN};
+void gfxFont::InitBaselines(Baselines& aBaselines, Orientation aOrientation) {
+  // Use harfbuzz to try to read the font's baseline metrics. For
+  // missing baselines, harfbuzz will synthesize fallbacks according
+  // to the CSS Inline Layout Module Level 3 specification.
   hb_font_t* hbFont = gfxHarfBuzzShaper::CreateHBFont(this);
   hb_direction_t hbDir = aOrientation == nsFontMetrics::eHorizontal
                              ? HB_DIRECTION_LTR
                              : HB_DIRECTION_TTB;
   hb_position_t position;
-  unsigned count = 0;
   auto Fix2Float = [](hb_position_t f) -> gfxFloat { return f / 65536.0; };
-  if (hb_ot_layout_get_baseline(hbFont, HB_OT_LAYOUT_BASELINE_TAG_ROMAN, hbDir,
-                                HB_OT_TAG_DEFAULT_SCRIPT,
-                                HB_OT_TAG_DEFAULT_LANGUAGE, &position)) {
-    result.mAlphabetic = Fix2Float(position);
-    count++;
-  }
-  if (hb_ot_layout_get_baseline(hbFont, HB_OT_LAYOUT_BASELINE_TAG_HANGING,
-                                hbDir, HB_OT_TAG_DEFAULT_SCRIPT,
-                                HB_OT_TAG_DEFAULT_LANGUAGE, &position)) {
-    result.mHanging = Fix2Float(position);
-    count++;
-  }
-  if (hb_ot_layout_get_baseline(
-          hbFont, HB_OT_LAYOUT_BASELINE_TAG_IDEO_EMBOX_BOTTOM_OR_LEFT, hbDir,
-          HB_OT_TAG_DEFAULT_SCRIPT, HB_OT_TAG_DEFAULT_LANGUAGE, &position)) {
-    result.mIdeographic = Fix2Float(position);
-    count++;
-  }
-  hb_font_destroy(hbFont);
-  // If we successfully read all three, we can return now.
-  if (count == 3) {
-    return result;
-  }
 
-  // Synthesize the baselines that we didn't find in the font.
-  const Metrics& metrics = GetMetrics(aOrientation);
-  if (std::isnan(result.mAlphabetic)) {
-    result.mAlphabetic = 0.0;
-  }
-  if (std::isnan(result.mHanging)) {
-    result.mHanging = kHangingBaselineDefault * metrics.emAscent;
-  }
-  if (std::isnan(result.mIdeographic)) {
-    result.mIdeographic = kIdeographicBaselineDefault * metrics.emDescent;
-  }
+  hb_ot_layout_get_baseline_with_fallback(
+      hbFont, HB_OT_LAYOUT_BASELINE_TAG_ROMAN, hbDir, HB_OT_TAG_DEFAULT_SCRIPT,
+      HB_OT_TAG_DEFAULT_LANGUAGE, &position);
+  aBaselines.mAlphabetic = Fix2Float(position);
+
+  hb_ot_layout_get_baseline_with_fallback(
+      hbFont, HB_OT_LAYOUT_BASELINE_TAG_HANGING, hbDir,
+      HB_OT_TAG_DEFAULT_SCRIPT, HB_OT_TAG_DEFAULT_LANGUAGE, &position);
+  aBaselines.mHanging = Fix2Float(position);
+
+  hb_ot_layout_get_baseline_with_fallback(
+      hbFont, HB_OT_LAYOUT_BASELINE_TAG_IDEO_EMBOX_BOTTOM_OR_LEFT, hbDir,
+      HB_OT_TAG_DEFAULT_SCRIPT, HB_OT_TAG_DEFAULT_LANGUAGE, &position);
+  aBaselines.mIdeographicUnder = Fix2Float(position);
+
+  hb_ot_layout_get_baseline_with_fallback(
+      hbFont, HB_OT_LAYOUT_BASELINE_TAG_IDEO_EMBOX_TOP_OR_RIGHT, hbDir,
+      HB_OT_TAG_DEFAULT_SCRIPT, HB_OT_TAG_DEFAULT_LANGUAGE, &position);
+  aBaselines.mIdeographicOver = Fix2Float(position);
+
+  hb_ot_layout_get_baseline_with_fallback(
+      hbFont, HB_OT_LAYOUT_BASELINE_TAG_IDEO_FACE_BOTTOM_OR_LEFT, hbDir,
+      HB_OT_TAG_DEFAULT_SCRIPT, HB_OT_TAG_DEFAULT_LANGUAGE, &position);
+  aBaselines.mIdeographicInkUnder = Fix2Float(position);
+
+  hb_ot_layout_get_baseline_with_fallback(
+      hbFont, HB_OT_LAYOUT_BASELINE_TAG_IDEO_FACE_TOP_OR_RIGHT, hbDir,
+      HB_OT_TAG_DEFAULT_SCRIPT, HB_OT_TAG_DEFAULT_LANGUAGE, &position);
+  aBaselines.mIdeographicInkOver = Fix2Float(position);
+
+  hb_ot_layout_get_baseline_with_fallback(
+      hbFont, HB_OT_LAYOUT_BASELINE_TAG_IDEO_EMBOX_CENTRAL, hbDir,
+      HB_OT_TAG_DEFAULT_SCRIPT, HB_OT_TAG_DEFAULT_LANGUAGE, &position);
+  aBaselines.mCentral = Fix2Float(position);
+
+  hb_ot_layout_get_baseline_with_fallback(
+      hbFont, HB_OT_LAYOUT_BASELINE_TAG_MATH, hbDir, HB_OT_TAG_DEFAULT_SCRIPT,
+      HB_OT_TAG_DEFAULT_LANGUAGE, &position);
+  aBaselines.mMath = Fix2Float(position);
 
-  return result;
+  hb_font_destroy(hbFont);
 }
 
 // Create a Metrics record to be used for vertical layout. This should never
@@ -4686,6 +4678,15 @@ void gfxFont::CreateVerticalMetrics() {
   }
 }
 
+void gfxFont::CreateVerticalBaselines() {
+  auto* baselines = new Baselines();
+  InitBaselines(*baselines, nsFontMetrics::eVertical);
+
+  if (!mVerticalBaselines.compareExchange(nullptr, baselines)) {
+    delete baselines;
+  }
+}
+
 gfxFloat gfxFont::SynthesizeSpaceWidth(uint32_t aCh) {
   // return an appropriate width for various Unicode space characters
   // that we "fake" if they're not actually present in the font;
diff --git a/gfx/thebes/gfxFont.h b/gfx/thebes/gfxFont.h
index 2932931d71543..86c9a3fbd248a 100644
--- a/gfx/thebes/gfxFont.h
+++ b/gfx/thebes/gfxFont.h
@@ -1642,9 +1642,22 @@ class gfxFont {
   struct Baselines {
     gfxFloat mAlphabetic;
     gfxFloat mHanging;
-    gfxFloat mIdeographic;
+    gfxFloat mIdeographicUnder;
+    gfxFloat mIdeographicOver;
+    gfxFloat mIdeographicInkUnder;
+    gfxFloat mIdeographicInkOver;
+    gfxFloat mCentral;
+    gfxFloat mMath;
   };
-  Baselines GetBaselines(Orientation aOrientation);
+  const Baselines& GetBaselines(Orientation aOrientation) {
+    if (aOrientation == nsFontMetrics::eHorizontal) {
+      return mHorizontalBaselines;
+    }
+    if (!mVerticalBaselines) {
+      CreateVerticalBaselines();
+    }
+    return *mVerticalBaselines;
+  }
 
   /**
    * We let layout specify spacing on either side of any
@@ -1950,6 +1963,8 @@ class gfxFont {
   virtual const Metrics& GetHorizontalMetrics() const = 0;
 
   void CreateVerticalMetrics();
+  void CreateVerticalBaselines();
+  void InitBaselines(Baselines& aBaselines, Orientation aOrientation);
 
   bool MeasureGlyphs(const gfxTextRun* aTextRun, uint32_t aStart, uint32_t aEnd,
                      BoundingBoxType aBoundingBoxType,
@@ -2214,8 +2229,11 @@ class gfxFont {
 
   mozilla::Atomic<mozilla::gfx::ScaledFont*> mAzureScaledFont;
 
+  Baselines mHorizontalBaselines;
+
   // For vertical metrics, created on demand.
   mozilla::Atomic<Metrics*> mVerticalMetrics;
+  mozilla::Atomic<Baselines*> mVerticalBaselines;
 
   // Table used for MathML layout.
   mozilla::Atomic<gfxMathTable*> mMathTable;
diff --git a/gfx/webrender_bindings/RenderCompositor.h b/gfx/webrender_bindings/RenderCompositor.h
index 4097c5f002ef8..73b94485666b9 100644
--- a/gfx/webrender_bindings/RenderCompositor.h
+++ b/gfx/webrender_bindings/RenderCompositor.h
@@ -22,6 +22,7 @@ class GLContext;
 }
 
 namespace layers {
+class AndroidHardwareBuffer;
 class CompositionRecorder;
 class SyncObjectHost;
 }  // namespace layers
@@ -219,6 +220,13 @@ class RenderCompositor {
     return false;
   }
   virtual bool MaybeProcessScreenshotQueue() { return false; }
+#ifdef MOZ_WIDGET_ANDROID
+  virtual bool MaybeCaptureScreenPixels(
+      const gfx::IntRect& aSourceRect,
+      RefPtr<layers::AndroidHardwareBuffer> aHardwareBuffer) {
+    return false;
+  }
+#endif
 
   virtual RefPtr<layers::Fence> GetAndResetReleaseFence() { return nullptr; }
 
diff --git a/gfx/webrender_bindings/RenderCompositorOGLSWGL.cpp b/gfx/webrender_bindings/RenderCompositorOGLSWGL.cpp
index 4acd77c2422b1..868298bc942ea 100644
--- a/gfx/webrender_bindings/RenderCompositorOGLSWGL.cpp
+++ b/gfx/webrender_bindings/RenderCompositorOGLSWGL.cpp
@@ -10,6 +10,7 @@
 
 #include "GLContext.h"
 #include "GLContextEGL.h"
+#include "ScopedGLHelpers.h"
 #include "mozilla/layers/BuildConstants.h"
 #include "mozilla/layers/CompositorOGL.h"
 #include "mozilla/layers/Effects.h"
@@ -313,6 +314,43 @@ bool RenderCompositorOGLSWGL::MaybeReadback(
   return true;
 }
 
+#ifdef MOZ_WIDGET_ANDROID
+bool RenderCompositorOGLSWGL::MaybeCaptureScreenPixels(
+    const gfx::IntRect& aSourceRect,
+    RefPtr<layers::AndroidHardwareBuffer> aHardwareBuffer) {
+  auto* const gl = GetGLContext();
+  auto* const gle = gl::GLContextEGL::Cast(gl);
+  const auto& egl = gle->mEgl;
+  gl::ScopedEGLImageForAndroidHardwareBuffer eglImage(gle, aHardwareBuffer);
+  gl::ScopedBindFramebuffer scopedBind(gl);
+  gl::ScopedRenderbuffer rb(gl);
+  gl->fBindRenderbuffer(LOCAL_GL_RENDERBUFFER, rb);
+  gl->fEGLImageTargetRenderbufferStorage(LOCAL_GL_RENDERBUFFER, eglImage);
+  gl::ScopedFramebufferForRenderbuffer fb(gl, rb);
+
+  const auto srcRect =
+      gfx::IntRect(aSourceRect.x, GetBufferSize().height - aSourceRect.y,
+                   aSourceRect.width, -aSourceRect.height);
+  const auto destRect = gfx::IntRect({}, aHardwareBuffer->mSize);
+  gl->BindReadFB(0);
+  gl->BindDrawFB(fb.FB());
+  gl->fBlitFramebuffer(srcRect.x, srcRect.y, srcRect.XMost(), srcRect.YMost(),
+                       destRect.x, destRect.y, destRect.XMost(),
+                       destRect.YMost(), LOCAL_GL_COLOR_BUFFER_BIT,
+                       LOCAL_GL_LINEAR);
+
+  if (EGLSync sync =
+          egl->fCreateSync(LOCAL_EGL_SYNC_NATIVE_FENCE_ANDROID, nullptr)) {
+    auto fence = UniqueFileHandle(egl->fDupNativeFenceFDANDROID(sync));
+    if (fence) {
+      aHardwareBuffer->SetAcquireFence(std::move(fence));
+    }
+    egl->fDestroySync(sync);
+  }
+  return true;
+}
+#endif
+
 // This is a DataSourceSurface that represents a 0-based PBO for GLTextureImage.
 class PBOUnpackSurface : public gfx::DataSourceSurface {
  public:
diff --git a/gfx/webrender_bindings/RenderCompositorOGLSWGL.h b/gfx/webrender_bindings/RenderCompositorOGLSWGL.h
index 7752574311bf0..78d4cee312474 100644
--- a/gfx/webrender_bindings/RenderCompositorOGLSWGL.h
+++ b/gfx/webrender_bindings/RenderCompositorOGLSWGL.h
@@ -58,6 +58,11 @@ class RenderCompositorOGLSWGL : public RenderCompositorLayersSWGL {
                      const wr::ImageFormat& aReadbackFormat,
                      const Range<uint8_t>& aReadbackBuffer,
                      bool* aNeedsYFlip) override;
+#ifdef MOZ_WIDGET_ANDROID
+  bool MaybeCaptureScreenPixels(
+      const gfx::IntRect& aSourceRect,
+      RefPtr<layers::AndroidHardwareBuffer> aHardwareBuffer) override;
+#endif
 
  private:
   void HandleExternalImage(RenderTextureHost* aExternalImage,
diff --git a/gfx/webrender_bindings/RendererOGL.cpp b/gfx/webrender_bindings/RendererOGL.cpp
index 020405bd6d183..f6fd574019b5a 100644
--- a/gfx/webrender_bindings/RendererOGL.cpp
+++ b/gfx/webrender_bindings/RendererOGL.cpp
@@ -22,6 +22,12 @@
 #include "mozilla/webrender/RenderTextureHost.h"
 #include "mozilla/widget/CompositorWidget.h"
 
+#ifdef MOZ_WIDGET_ANDROID
+#  include "GLContextEGL.h"
+#  include "mozilla/layers/AndroidHardwareBuffer.h"
+#  include "ScopedGLHelpers.h"
+#endif
+
 namespace mozilla {
 namespace wr {
 
@@ -129,6 +135,11 @@ RendererOGL::RendererOGL(RefPtr<RenderThread>&& aThread,
 
 RendererOGL::~RendererOGL() {
   MOZ_COUNT_DTOR(RendererOGL);
+#ifdef MOZ_WIDGET_ANDROID
+  if (mPendingScreenPixelsRequest) {
+    mPendingScreenPixelsRequest->mPromise->Reject(NS_ERROR_ABORT, __func__);
+  }
+#endif
   if (!mCompositor->MakeCurrent()) {
     gfxCriticalNote
         << "Failed to make render context current during destroying.";
@@ -269,6 +280,10 @@ RenderedFrameId RendererOGL::UpdateAndRender(
       }
     }
 
+#ifdef MOZ_WIDGET_ANDROID
+    MaybeCaptureScreenPixels();
+#endif
+
     if (size.Width() != 0 && size.Height() != 0) {
       if (!mCompositor->MaybeGrabScreenshot(size.ToUnknownSize())) {
         mScreenshotGrabber.MaybeGrabScreenshot(this, size.ToUnknownSize());
@@ -461,6 +476,71 @@ Maybe<layers::FrameRecording> RendererOGL::EndRecording() {
   return maybeRecording;
 }
 
+#ifdef MOZ_WIDGET_ANDROID
+RefPtr<RendererOGL::ScreenPixelsPromise> RendererOGL::RequestScreenPixels(
+    gfx::IntRect aSourceRect, gfx::IntSize aDestSize) {
+  mPendingScreenPixelsRequest.emplace(ScreenPixelsRequest{
+      .mSourceRect = aSourceRect,
+      .mDestSize = aDestSize,
+      .mPromise = new ScreenPixelsPromise::Private(__func__),
+  });
+  return mPendingScreenPixelsRequest->mPromise;
+}
+
+void RendererOGL::MaybeCaptureScreenPixels() {
+  if (!mPendingScreenPixelsRequest || !EnsureAsyncScreenshot()) {
+    return;
+  }
+
+  auto request = mPendingScreenPixelsRequest.extract();
+
+  const RefPtr<layers::AndroidHardwareBuffer> hardwareBuffer =
+      layers::AndroidHardwareBuffer::Create(request.mDestSize,
+                                            gfx::SurfaceFormat::R8G8B8A8);
+
+  if (mCompositor->MaybeCaptureScreenPixels(request.mSourceRect,
+                                            hardwareBuffer)) {
+    request.mPromise->Resolve(hardwareBuffer, __func__);
+    return;
+  }
+
+  auto* const gle = gl::GLContextEGL::Cast(gl());
+  const auto& egl = gle->mEgl;
+  gl::ScopedEGLImageForAndroidHardwareBuffer eglImage(gle, hardwareBuffer);
+  gl::ScopedBindFramebuffer scopedBind(gl());
+  gl::ScopedRenderbuffer rb(gl());
+  gl()->fBindRenderbuffer(LOCAL_GL_RENDERBUFFER, rb);
+  gl()->fEGLImageTargetRenderbufferStorage(LOCAL_GL_RENDERBUFFER, eglImage);
+  gl::ScopedFramebufferForRenderbuffer fb(gl(), rb);
+
+  const auto srcRect =
+      mCompositor->SurfaceOriginIsTopLeft()
+          ? request.mSourceRect
+          : gfx::IntRect(
+                request.mSourceRect.x,
+                mCompositor->GetBufferSize().height - request.mSourceRect.y,
+                request.mSourceRect.width, -request.mSourceRect.height);
+  const auto destRect = gfx::IntRect({}, hardwareBuffer->mSize);
+  gl()->BindReadFB(0);
+  gl()->BindDrawFB(fb.FB());
+  gl()->fBlitFramebuffer(srcRect.x, srcRect.y, srcRect.XMost(), srcRect.YMost(),
+                         destRect.x, destRect.y, destRect.XMost(),
+                         destRect.YMost(), LOCAL_GL_COLOR_BUFFER_BIT,
+                         LOCAL_GL_LINEAR);
+
+  if (EGLSync sync =
+          egl->fCreateSync(LOCAL_EGL_SYNC_NATIVE_FENCE_ANDROID, nullptr)) {
+    auto fence = UniqueFileHandle(egl->fDupNativeFenceFDANDROID(sync));
+    if (fence) {
+      hardwareBuffer->SetAcquireFence(std::move(fence));
+    }
+    egl->fDestroySync(sync);
+  }
+
+  request.mPromise->Resolve(hardwareBuffer, __func__);
+}
+#endif
+
 void RendererOGL::FlushPipelineInfo() {
   RefPtr<WebRenderPipelineInfo> info = new WebRenderPipelineInfo;
   wr_renderer_flush_pipeline_info(mRenderer, &info->Raw());
diff --git a/gfx/webrender_bindings/RendererOGL.h b/gfx/webrender_bindings/RendererOGL.h
index bc7ace6d7844e..5f0c3139ae17a 100644
--- a/gfx/webrender_bindings/RendererOGL.h
+++ b/gfx/webrender_bindings/RendererOGL.h
@@ -25,6 +25,7 @@ class GLContext;
 }
 
 namespace layers {
+class AndroidHardwareBuffer;
 class CompositorBridgeParent;
 class Fence;
 class SyncObjectHost;
@@ -93,6 +94,15 @@ class RendererOGL {
 
   Maybe<layers::FrameRecording> EndRecording();
 
+#ifdef MOZ_WIDGET_ANDROID
+  using ScreenPixelsPromise =
+      MozPromise<RefPtr<layers::AndroidHardwareBuffer>, nsresult, true>;
+  // Captures the pixels for the next rendered frame. Returns a promise that
+  // resolves once the pixels are captured.
+  RefPtr<ScreenPixelsPromise> RequestScreenPixels(gfx::IntRect aSourceRect,
+                                                  gfx::IntSize aDestSize);
+#endif
+
   /// This can be called on the render thread only.
   ~RendererOGL();
 
@@ -147,6 +157,14 @@ class RendererOGL {
    */
   bool DidPaintContent(const wr::WebRenderPipelineInfo* aFrameEpochs);
 
+#ifdef MOZ_WIDGET_ANDROID
+  // If mPendingScreenPixelsRequest is set, captures the pixels of the frame
+  // that has just been rendered and resolves the request. Must be called after
+  // the frame has been rendered but before RenderCompositor::EndFrame() (which
+  // swaps buffers).
+  void MaybeCaptureScreenPixels();
+#endif
+
   RefPtr<RenderThread> mThread;
   UniquePtr<RenderCompositor> mCompositor;
   UniquePtr<layers::CompositionRecorder> mCompositionRecorder;  // can be null
@@ -157,6 +175,15 @@ class RendererOGL {
 
   bool mDisableNativeCompositor;
 
+#ifdef MOZ_WIDGET_ANDROID
+  struct ScreenPixelsRequest {
+    gfx::IntRect mSourceRect;
+    gfx::IntSize mDestSize;
+    RefPtr<ScreenPixelsPromise::Private> mPromise;
+  };
+  Maybe<ScreenPixelsRequest> mPendingScreenPixelsRequest;
+#endif
+
   RendererScreenshotGrabber mScreenshotGrabber;
 
   // The id of the root WebRender pipeline.
diff --git a/gfx/webrender_bindings/WebRenderAPI.cpp b/gfx/webrender_bindings/WebRenderAPI.cpp
index 7513992e01a5a..56e35e87ba5ff 100644
--- a/gfx/webrender_bindings/WebRenderAPI.cpp
+++ b/gfx/webrender_bindings/WebRenderAPI.cpp
@@ -27,6 +27,10 @@
 
 #include "source-repo.h"
 
+#ifdef MOZ_WIDGET_ANDROID
+#  include "mozilla/layers/AndroidHardwareBuffer.h"
+#endif
+
 static mozilla::LazyLogModule sWrDLLog("wr.dl");
 #define WRDL_LOG(...) \
   MOZ_LOG(sWrDLLog, LogLevel::Debug, ("WRDL(%p): " __VA_ARGS__))
@@ -967,6 +971,44 @@ RefPtr<WebRenderAPI::EndRecordingPromise> WebRenderAPI::EndRecording() {
   return promise;
 }
 
+#ifdef MOZ_WIDGET_ANDROID
+RefPtr<WebRenderAPI::ScreenPixelsPromise> WebRenderAPI::RequestScreenPixels(
+    gfx::IntRect aSourceRect, gfx::IntSize aDestSize) {
+  class ScreenshotEvent final : public RendererEvent {
+   public:
+    explicit ScreenshotEvent(gfx::IntRect aSourceRect, gfx::IntSize aDestSize,
+                             RefPtr<ScreenPixelsPromise::Private> aPromise)
+        : mSourceRect(aSourceRect), mDestSize(aDestSize), mPromise(aPromise) {
+      MOZ_COUNT_CTOR(ScreenshotEvent);
+    }
+
+    MOZ_COUNTED_DTOR(ScreenshotEvent);
+
+    void Run(RenderThread& aRenderThread, WindowId aWindowId) override {
+      RendererOGL* const renderer = aRenderThread.GetRenderer(aWindowId);
+      if (!renderer) {
+        mPromise->Reject(NS_ERROR_FAILURE, __func__);
+      }
+      renderer->RequestScreenPixels(mSourceRect, mDestSize)
+          ->ChainTo(mPromise.forget(), __func__);
+    }
+
+    const char* Name() override { return "ScreenshotEvent"; }
+
+   private:
+    const gfx::IntRect mSourceRect;
+    const gfx::IntSize mDestSize;
+    RefPtr<ScreenPixelsPromise::Private> mPromise;
+  };
+
+  auto promise = MakeRefPtr<ScreenPixelsPromise::Private>(__func__);
+  auto event = MakeUnique<ScreenshotEvent>(aSourceRect, aDestSize, promise);
+
+  RenderThread::Get()->PostEvent(mId, std::move(event));
+  return promise;
+}
+#endif
+
 void TransactionBuilder::Clear() { wr_resource_updates_clear(mTxn); }
 
 Transaction* TransactionBuilder::Take() {
diff --git a/gfx/webrender_bindings/WebRenderAPI.h b/gfx/webrender_bindings/WebRenderAPI.h
index 854cfbd6b0155..ba5d4d41aac34 100644
--- a/gfx/webrender_bindings/WebRenderAPI.h
+++ b/gfx/webrender_bindings/WebRenderAPI.h
@@ -326,6 +326,16 @@ class WebRenderAPI final {
 
   RefPtr<EndRecordingPromise> EndRecording();
 
+#ifdef MOZ_WIDGET_ANDROID
+  using ScreenPixelsPromise =
+      MozPromise<RefPtr<layers::AndroidHardwareBuffer>, nsresult, true>;
+  // Queues a task to the render thread to capture screen pixels for the next
+  // rendered frame. Returns a promise that resolves once the pixels are
+  // captured.
+  RefPtr<ScreenPixelsPromise> RequestScreenPixels(gfx::IntRect aSourceRect,
+                                                  gfx::IntSize aDestSize);
+#endif
+
   layers::RemoteTextureInfoList* GetPendingRemoteTextureInfoList();
   layers::AsyncImagePipelineOps* GetPendingAsyncImagePipelineOps(
       TransactionBuilder& aTxn);
diff --git a/image/DecoderFactory.cpp b/image/DecoderFactory.cpp
index 81ac3dff64e9a..07e8475bcc349 100644
--- a/image/DecoderFactory.cpp
+++ b/image/DecoderFactory.cpp
@@ -101,24 +101,6 @@ DecoderType DecoderFactory::GetDecoderType(const char* aMimeType) {
   return type;
 }
 
-/* static */
-DecoderFlags DecoderFactory::GetDefaultDecoderFlagsForType(DecoderType aType) {
-  auto flags = DefaultDecoderFlags();
-
-#ifdef MOZ_AV1
-  if (aType == DecoderType::AVIF) {
-    if (StaticPrefs::image_avif_sequence_enabled()) {
-      flags |= DecoderFlags::AVIF_SEQUENCES_ENABLED;
-    }
-    if (StaticPrefs::image_avif_sequence_animate_avif_major_branded_images()) {
-      flags |= DecoderFlags::AVIF_ANIMATE_AVIF_MAJOR;
-    }
-  }
-#endif
-
-  return flags;
-}
-
 /* static */
 already_AddRefed<Decoder> DecoderFactory::GetDecoder(DecoderType aType,
                                                      RasterImage* aImage,
diff --git a/image/DecoderFactory.h b/image/DecoderFactory.h
index 5927889876767..11bb2387043ec 100644
--- a/image/DecoderFactory.h
+++ b/image/DecoderFactory.h
@@ -30,9 +30,6 @@ class DecoderFactory {
   /// @return the type of decoder which is appropriate for @aMimeType.
   static DecoderType GetDecoderType(const char* aMimeType);
 
-  /// @return the default flags to use when creating a decoder of @aType.
-  static DecoderFlags GetDefaultDecoderFlagsForType(DecoderType aType);
-
   /**
    * Creates and initializes a decoder for non-animated images of type @aType.
    * (If the image *is* animated, only the first frame will be decoded.) The
diff --git a/image/DecoderFlags.h b/image/DecoderFlags.h
index a6cd1e18790be..afd7461c11a6d 100644
--- a/image/DecoderFlags.h
+++ b/image/DecoderFlags.h
@@ -32,24 +32,13 @@ enum class DecoderFlags : uint8_t {
    */
   CANNOT_SUBSTITUTE = 1 << 4,
 
-#ifdef MOZ_AV1
-  // The flags below are stored in RasterImage to allow a decoded image to
-  // remain consistent in whether it is animated or not.
-
-  // Set according to the "image.avif.sequence.enabled" preference.
-  AVIF_SEQUENCES_ENABLED = 1 << 5,
-  // Set according to the
-  // "image.avif.sequence.animate_avif_major_branded_images" preference.
-  AVIF_ANIMATE_AVIF_MAJOR = 1 << 6,
-#endif
-
   /**
    * By default, we don't count how many animated frames there are in an image,
    * as that would require us to iterate over the entire buffer for some image
    * formats. If the caller requires a full accounting of how many frames there
    * are.
    */
-  COUNT_FRAMES = 1 << 7,
+  COUNT_FRAMES = 1 << 5,
 };
 MOZ_MAKE_ENUM_CLASS_BITWISE_OPERATORS(DecoderFlags)
 
diff --git a/image/ImageOps.cpp b/image/ImageOps.cpp
index 60839da5635f5..13914d9e38b43 100644
--- a/image/ImageOps.cpp
+++ b/image/ImageOps.cpp
@@ -171,8 +171,7 @@ nsresult ImageOps::DecodeMetadata(ImageBuffer* aBuffer,
   // Create a decoder.
   DecoderType decoderType =
       DecoderFactory::GetDecoderType(PromiseFlatCString(aMimeType).get());
-  DecoderFlags decoderFlags =
-      DecoderFactory::GetDefaultDecoderFlagsForType(decoderType);
+  DecoderFlags decoderFlags = DefaultDecoderFlags();
   decoderFlags |= DecoderFlags::FIRST_FRAME_ONLY;
   RefPtr<Decoder> decoder = DecoderFactory::CreateAnonymousMetadataDecoder(
       decoderType, WrapNotNull(sourceBuffer), decoderFlags);
diff --git a/image/RasterImage.cpp b/image/RasterImage.cpp
index 8c4d34f53a69b..c333e20783519 100644
--- a/image/RasterImage.cpp
+++ b/image/RasterImage.cpp
@@ -126,11 +126,6 @@ nsresult RasterImage::Init(const char* aMimeType, uint32_t aFlags) {
     SurfaceCache::LockImage(ImageKey(this));
   }
 
-  // Set the default flags according to the decoder type to allow preferences to
-  // be stored if necessary.
-  mDefaultDecoderFlags =
-      DecoderFactory::GetDefaultDecoderFlagsForType(mDecoderType);
-
   // Mark us as initialized
   mInitialized = true;
 
@@ -1185,7 +1180,7 @@ void RasterImage::Decode(const OrientedIntSize& aSize, uint32_t aFlags,
   SurfaceCache::UnlockEntries(ImageKey(this));
 
   // Determine which flags we need to decode this image with.
-  DecoderFlags decoderFlags = mDefaultDecoderFlags;
+  DecoderFlags decoderFlags = DefaultDecoderFlags();
   if (aFlags & FLAG_ASYNC_NOTIFY) {
     decoderFlags |= DecoderFlags::ASYNC_NOTIFY;
   }
@@ -1269,7 +1264,7 @@ RasterImage::DecodeMetadata(uint32_t aFlags) {
 
   // Create a decoder.
   RefPtr<IDecodingTask> task = DecoderFactory::CreateMetadataDecoder(
-      mDecoderType, WrapNotNull(this), mDefaultDecoderFlags, mSourceBuffer);
+      mDecoderType, WrapNotNull(this), DefaultDecoderFlags(), mSourceBuffer);
 
   // Make sure DecoderFactory was able to create a decoder successfully.
   if (!task) {
diff --git a/image/RasterImage.h b/image/RasterImage.h
index 5adb700482bed..6d90d0653ca23 100644
--- a/image/RasterImage.h
+++ b/image/RasterImage.h
@@ -414,12 +414,6 @@ class RasterImage final : public ImageResource,
 
   TimeStamp mDrawStartTime;
 
-  // This field is set according to the DecoderType of this image once when
-  // initialized so that a decoder's flags can be set according to any
-  // preferences that affect its behavior in a way that would otherwise cause
-  // errors, such as enabling or disabling animation.
-  DecoderFlags mDefaultDecoderFlags = DefaultDecoderFlags();
-
   //////////////////////////////////////////////////////////////////////////////
   // Scaling.
   //////////////////////////////////////////////////////////////////////////////
diff --git a/image/decoders/nsAVIFDecoder.cpp b/image/decoders/nsAVIFDecoder.cpp
index e97662bee6f3f..564dee75d01ee 100644
--- a/image/decoders/nsAVIFDecoder.cpp
+++ b/image/decoders/nsAVIFDecoder.cpp
@@ -179,14 +179,12 @@ AVIFParser::~AVIFParser() {
 }
 
 Mp4parseStatus AVIFParser::Create(const Mp4parseIo* aIo, ByteStream* aBuffer,
-                                  UniquePtr<AVIFParser>& aParserOut,
-                                  bool aAllowSequences,
-                                  bool aAnimateAVIFMajor) {
+                                  UniquePtr<AVIFParser>& aParserOut) {
   MOZ_ASSERT(aIo);
   MOZ_ASSERT(!aParserOut);
 
   UniquePtr<AVIFParser> p(new AVIFParser(aIo));
-  Mp4parseStatus status = p->Init(aBuffer, aAllowSequences, aAnimateAVIFMajor);
+  Mp4parseStatus status = p->Init(aBuffer);
 
   if (status == MP4PARSE_STATUS_OK) {
     MOZ_ASSERT(p->mParser);
@@ -327,8 +325,7 @@ static Mp4parseStatus CreateSampleIterator(
   return MP4PARSE_STATUS_OK;
 }
 
-Mp4parseStatus AVIFParser::Init(ByteStream* aBuffer, bool aAllowSequences,
-                                bool aAnimateAVIFMajor) {
+Mp4parseStatus AVIFParser::Init(ByteStream* aBuffer) {
 #define CHECK_MP4PARSE_STATUS(v)     \
   do {                               \
     if ((v) != MP4PARSE_STATUS_OK) { \
@@ -355,12 +352,14 @@ Mp4parseStatus AVIFParser::Init(ByteStream* aBuffer, bool aAllowSequences,
 
   bool useSequence = mInfo.has_sequence;
   if (useSequence) {
-    if (!aAllowSequences) {
+    if (!StaticPrefs::image_avif_sequence_enabled_AtStartup()) {
       MOZ_LOG(sAVIFLog, LogLevel::Debug,
               ("[this=%p] AVIF sequences disabled", this));
       useSequence = false;
-    } else if (!aAnimateAVIFMajor &&
-               !!memcmp(mInfo.major_brand, "avis", sizeof(mInfo.major_brand))) {
+    } else if (
+        !StaticPrefs::
+            image_avif_sequence_animate_avif_major_branded_images_AtStartup() &&
+        !!memcmp(mInfo.major_brand, "avis", sizeof(mInfo.major_brand))) {
       useSequence = false;
       MOZ_LOG(sAVIFLog, LogLevel::Debug,
               ("[this=%p] AVIF prefers still image", this));
@@ -1258,10 +1257,8 @@ Mp4parseStatus nsAVIFDecoder::CreateParser() {
     Mp4parseIo io = {nsAVIFDecoder::ReadSource, this};
     mBufferStream = new AVIFDecoderStream(&mBufferedData);
 
-    Mp4parseStatus status = AVIFParser::Create(
-        &io, mBufferStream.get(), mParser,
-        bool(GetDecoderFlags() & DecoderFlags::AVIF_SEQUENCES_ENABLED),
-        bool(GetDecoderFlags() & DecoderFlags::AVIF_ANIMATE_AVIF_MAJOR));
+    Mp4parseStatus status =
+        AVIFParser::Create(&io, mBufferStream.get(), mParser);
 
     if (status != MP4PARSE_STATUS_OK) {
       return status;
diff --git a/image/decoders/nsAVIFDecoder.h b/image/decoders/nsAVIFDecoder.h
index 1f846291ab060..87e2acbc802ad 100644
--- a/image/decoders/nsAVIFDecoder.h
+++ b/image/decoders/nsAVIFDecoder.h
@@ -119,8 +119,7 @@ struct AVIFImage {
 class AVIFParser {
  public:
   static Mp4parseStatus Create(const Mp4parseIo* aIo, ByteStream* aBuffer,
-                               UniquePtr<AVIFParser>& aParserOut,
-                               bool aAllowSequences, bool aAnimateAVIFMajor);
+                               UniquePtr<AVIFParser>& aParserOut);
 
   ~AVIFParser();
 
@@ -135,8 +134,7 @@ class AVIFParser {
  private:
   explicit AVIFParser(const Mp4parseIo* aIo);
 
-  Mp4parseStatus Init(ByteStream* aBuffer, bool aAllowSequences,
-                      bool aAnimateAVIFMajor);
+  Mp4parseStatus Init(ByteStream* aBuffer);
 
   struct FreeAvifParser {
     void operator()(Mp4parseAvifParser* aPtr) { mp4parse_avif_free(aPtr); }
diff --git a/image/test/fuzzing/TestDecoders.cpp b/image/test/fuzzing/TestDecoders.cpp
index 20bc79330d0b8..fb0f149aafe7d 100644
--- a/image/test/fuzzing/TestDecoders.cpp
+++ b/image/test/fuzzing/TestDecoders.cpp
@@ -138,7 +138,6 @@ static int RunDecodeToSurfaceFuzzingJXL(nsCOMPtr<nsIInputStream> inputStream) {
 #endif
 
 int FuzzingInitImage(int* argc, char*** argv) {
-  Preferences::SetBool("image.avif.sequence.enabled", true);
   Preferences::SetInt("image.mem.max_legal_imgframe_size_kb", 65536);
 #ifdef MOZ_JXL
   Preferences::SetBool("image.jxl.enabled", true);
diff --git a/image/test/gtest/Common.cpp b/image/test/gtest/Common.cpp
index 9a4ea88f93066..b401f6d803724 100644
--- a/image/test/gtest/Common.cpp
+++ b/image/test/gtest/Common.cpp
@@ -39,13 +39,9 @@ AutoInitializeImageLib::AutoInitializeImageLib() {
   EXPECT_TRUE(NS_IsMainThread());
   sImageLibInitialized = true;
 
-  // Ensure AVIF sequence is enabled to run decoder tests.
-  nsresult rv = Preferences::SetBool("image.avif.sequence.enabled", true);
-  EXPECT_TRUE(rv == NS_OK);
-
 #ifdef MOZ_JXL
   // Ensure JXL is enabled to run decoder tests.
-  rv = Preferences::SetBool("image.jxl.enabled", true);
+  nsresult rv = Preferences::SetBool("image.jxl.enabled", true);
   EXPECT_TRUE(rv == NS_OK);
 #endif
 
diff --git a/image/test/gtest/TestDecoders.cpp b/image/test/gtest/TestDecoders.cpp
index da6ffa6dd7967..0c4dca8fa532a 100644
--- a/image/test/gtest/TestDecoders.cpp
+++ b/image/test/gtest/TestDecoders.cpp
@@ -206,8 +206,7 @@ void WithSingleChunkDecode(const ImageTestCase& aTestCase,
   // Create a decoder.
   DecoderType decoderType = DecoderFactory::GetDecoderType(aTestCase.mMimeType);
   DecoderFlags decoderFlags =
-      DecoderFactory::GetDefaultDecoderFlagsForType(decoderType) |
-      DecoderFlags::FIRST_FRAME_ONLY;
+      DefaultDecoderFlags() | DecoderFlags::FIRST_FRAME_ONLY;
   RefPtr<image::Decoder> decoder = DecoderFactory::CreateAnonymousDecoder(
       decoderType, sourceBuffer, aOutputSize, decoderFlags,
       aTestCase.mSurfaceFlags);
@@ -297,8 +296,7 @@ static void CheckDecoderMultiChunk(const ImageTestCase& aTestCase,
   sourceBuffer->ExpectLength(length);
   DecoderType decoderType = DecoderFactory::GetDecoderType(aTestCase.mMimeType);
   DecoderFlags decoderFlags =
-      DecoderFactory::GetDefaultDecoderFlagsForType(decoderType) |
-      DecoderFlags::FIRST_FRAME_ONLY;
+      DefaultDecoderFlags() | DecoderFlags::FIRST_FRAME_ONLY;
   RefPtr<image::Decoder> decoder = DecoderFactory::CreateAnonymousDecoder(
       decoderType, sourceBuffer, Nothing(), decoderFlags,
       aTestCase.mSurfaceFlags);
@@ -447,8 +445,7 @@ static void WithSingleChunkAnimationDecode(const ImageTestCase& aTestCase,
   // Create a metadata decoder first, because otherwise RasterImage will get
   // unhappy about finding out the image is animated during a full decode.
   DecoderType decoderType = DecoderFactory::GetDecoderType(aTestCase.mMimeType);
-  DecoderFlags decoderFlags =
-      DecoderFactory::GetDefaultDecoderFlagsForType(decoderType);
+  DecoderFlags decoderFlags = DefaultDecoderFlags();
   RefPtr<IDecodingTask> task = DecoderFactory::CreateMetadataDecoder(
       decoderType, rasterImage, decoderFlags, sourceBuffer);
   ASSERT_TRUE(task != nullptr);
diff --git a/image/test/gtest/TestFrameAnimator.cpp b/image/test/gtest/TestFrameAnimator.cpp
index 7269366554b03..0ecec9d27caf6 100644
--- a/image/test/gtest/TestFrameAnimator.cpp
+++ b/image/test/gtest/TestFrameAnimator.cpp
@@ -75,8 +75,7 @@ static void WithFrameAnimatorDecode(const ImageTestCase& aTestCase,
   // Create a metadata decoder first, because otherwise RasterImage will get
   // unhappy about finding out the image is animated during a full decode.
   DecoderType decoderType = DecoderFactory::GetDecoderType(aTestCase.mMimeType);
-  DecoderFlags decoderFlags =
-      DecoderFactory::GetDefaultDecoderFlagsForType(decoderType);
+  DecoderFlags decoderFlags = DefaultDecoderFlags();
   RefPtr<IDecodingTask> task = DecoderFactory::CreateMetadataDecoder(
       decoderType, rasterImage, decoderFlags, sourceBuffer);
   ASSERT_TRUE(task != nullptr);
diff --git a/image/test/gtest/TestMetadata.cpp b/image/test/gtest/TestMetadata.cpp
index f484e19f71420..c681e647b5b70 100644
--- a/image/test/gtest/TestMetadata.cpp
+++ b/image/test/gtest/TestMetadata.cpp
@@ -33,8 +33,7 @@ static void CheckMetadataFrameCount(
     NotNull<RefPtr<SourceBuffer>>& aSourceBuffer, BMPWithinICO aBMPWithinICO) {
   // Create a metadata decoder.
   DecoderType decoderType = DecoderFactory::GetDecoderType(aTestCase.mMimeType);
-  DecoderFlags decoderFlags =
-      DecoderFactory::GetDefaultDecoderFlagsForType(decoderType);
+  DecoderFlags decoderFlags = DefaultDecoderFlags();
   decoderFlags |= DecoderFlags::COUNT_FRAMES;
   RefPtr<image::Decoder> decoder =
       DecoderFactory::CreateAnonymousMetadataDecoder(decoderType, aSourceBuffer,
@@ -98,8 +97,7 @@ static void CheckMetadataCommon(const ImageTestCase& aTestCase,
                                 BMPWithinICO aBMPWithinICO) {
   // Create a metadata decoder.
   DecoderType decoderType = DecoderFactory::GetDecoderType(aTestCase.mMimeType);
-  DecoderFlags decoderFlags =
-      DecoderFactory::GetDefaultDecoderFlagsForType(decoderType);
+  DecoderFlags decoderFlags = DefaultDecoderFlags();
   decoderFlags |= DecoderFlags::FIRST_FRAME_ONLY;
   RefPtr<image::Decoder> decoder =
       DecoderFactory::CreateAnonymousMetadataDecoder(decoderType, aSourceBuffer,
diff --git a/image/test/mochitest/test_discardAnimatedImage.html b/image/test/mochitest/test_discardAnimatedImage.html
index 3b34cda3a5d32..eea66fbf522cd 100644
--- a/image/test/mochitest/test_discardAnimatedImage.html
+++ b/image/test/mochitest/test_discardAnimatedImage.html
@@ -52,8 +52,7 @@
 window.onload = function() {
   // Enable discarding for the test.
   SpecialPowers.pushPrefEnv({
-    'set':[['image.mem.discardable',true],
-           ['image.avif.sequence.enabled',true]]
+    'set':[['image.mem.discardable',true]]
   }, runTest);
 }
 
diff --git a/ipc/chromium/src/chrome/common/mach_ipc_mac.cc b/ipc/chromium/src/chrome/common/mach_ipc_mac.cc
index 7f2be34421371..78d902a48a916 100644
--- a/ipc/chromium/src/chrome/common/mach_ipc_mac.cc
+++ b/ipc/chromium/src/chrome/common/mach_ipc_mac.cc
@@ -113,7 +113,8 @@ static std::string FormatMachError(kern_return_t kr) {
 //==============================================================================
 bool MachChildProcessCheckIn(
     const char* bootstrap_service_name, mach_msg_timeout_t timeout,
-    std::vector<mozilla::UniqueMachSendRight>& send_rights) {
+    std::vector<mozilla::UniqueMachSendRight>& send_rights,
+    std::vector<mozilla::UniqueMachReceiveRight>& receive_rights) {
   mozilla::UniqueMachSendRight task_sender;
   kern_return_t kr = bootstrap_look_up(bootstrap_port, bootstrap_service_name,
                                        mozilla::getter_Transfers(task_sender));
@@ -133,10 +134,11 @@ bool MachChildProcessCheckIn(
   }
 
   // The buffer must be big enough to store a full reply including
-  // kMaxPassedMachSendRights port descriptors.
+  // kMaxPassedMachSendRights and kMaxPassedMachReceiveRights port descriptors.
   size_t buffer_size = sizeof(mach_msg_base_t) +
                        sizeof(mach_msg_port_descriptor_t) *
-                           mozilla::geckoargs::kMaxPassedMachSendRights +
+                           (mozilla::geckoargs::kMaxPassedMachSendRights +
+                            mozilla::geckoargs::kMaxPassedMachReceiveRights) +
                        sizeof(mach_msg_trailer_t);
   mozilla::UniquePtr<uint8_t[]> buffer =
       mozilla::MakeUnique<uint8_t[]>(buffer_size);
@@ -168,14 +170,19 @@ bool MachChildProcessCheckIn(
   mach_msg_base_t* reply = reinterpret_cast<mach_msg_base_t*>(buffer.get());
   MOZ_RELEASE_ASSERT(reply->header.msgh_bits & MACH_MSGH_BITS_COMPLEX);
   MOZ_RELEASE_ASSERT(reply->body.msgh_descriptor_count <=
-                     mozilla::geckoargs::kMaxPassedMachSendRights);
+                     (mozilla::geckoargs::kMaxPassedMachSendRights +
+                      mozilla::geckoargs::kMaxPassedMachReceiveRights));
 
   mach_msg_port_descriptor_t* descrs =
       reinterpret_cast<mach_msg_port_descriptor_t*>(reply + 1);
   for (size_t i = 0; i < reply->body.msgh_descriptor_count; ++i) {
     MOZ_RELEASE_ASSERT(descrs[i].type == MACH_MSG_PORT_DESCRIPTOR);
-    MOZ_RELEASE_ASSERT(descrs[i].disposition == MACH_MSG_TYPE_MOVE_SEND);
-    send_rights.emplace_back(descrs[i].name);
+    if (descrs[i].disposition == MACH_MSG_TYPE_MOVE_RECEIVE) {
+      receive_rights.emplace_back(descrs[i].name);
+    } else {
+      MOZ_RELEASE_ASSERT(descrs[i].disposition == MACH_MSG_TYPE_MOVE_SEND);
+      send_rights.emplace_back(descrs[i].name);
+    }
   }
 
   return true;
@@ -188,6 +195,7 @@ mozilla::Result<mozilla::Ok, mozilla::ipc::LaunchError>
 MachHandleProcessCheckInSync(
     mach_port_t endpoint, pid_t child_pid, mach_msg_timeout_t timeout,
     const std::vector<mozilla::UniqueMachSendRight>& send_rights,
+    std::vector<mozilla::UniqueMachReceiveRight>& receive_rights,
     task_t* child_task) {
   using mozilla::Err;
   using mozilla::Ok;
@@ -197,6 +205,10 @@ MachHandleProcessCheckInSync(
   MOZ_ASSERT(send_rights.size() <= mozilla::geckoargs::kMaxPassedMachSendRights,
              "Child process cannot receive more than kMaxPassedMachSendRights "
              "during check-in!");
+  MOZ_ASSERT(
+      receive_rights.size() <= mozilla::geckoargs::kMaxPassedMachReceiveRights,
+      "Child process cannot receive more than kMaxPassedMachReceiveRights "
+      "during check-in!");
 
   // Receive the check-in message from content. This will contain its 'task_t'
   // data, and a reply port which can be used to send the reply message.
@@ -252,7 +264,8 @@ MachHandleProcessCheckInSync(
   // with any send rights over to that child process which they should have on
   // startup.
   size_t reply_size = sizeof(mach_msg_base_t) +
-                      sizeof(mach_msg_port_descriptor_t) * send_rights.size();
+                      sizeof(mach_msg_port_descriptor_t) *
+                          (send_rights.size() + receive_rights.size());
   mozilla::UniquePtr<uint8_t[]> buffer =
       mozilla::MakeUnique<uint8_t[]>(reply_size);
   mach_msg_base_t* reply = reinterpret_cast<mach_msg_base_t*>(buffer.get());
@@ -260,7 +273,8 @@ MachHandleProcessCheckInSync(
       MACH_MSGH_BITS(MACH_MSG_TYPE_MOVE_SEND_ONCE, 0) | MACH_MSGH_BITS_COMPLEX;
   reply->header.msgh_size = reply_size;
   reply->header.msgh_remote_port = request.header.msgh_remote_port;
-  reply->body.msgh_descriptor_count = send_rights.size();
+  reply->body.msgh_descriptor_count =
+      send_rights.size() + receive_rights.size();
 
   // Fill the descriptors from our mChildArgs.
   mach_msg_port_descriptor_t* descrs =
@@ -270,6 +284,12 @@ MachHandleProcessCheckInSync(
     descrs[i].disposition = MACH_MSG_TYPE_COPY_SEND;
     descrs[i].name = send_rights[i].get();
   }
+  for (size_t i = 0; i < receive_rights.size(); ++i) {
+    size_t j = i + send_rights.size();
+    descrs[j].type = MACH_MSG_PORT_DESCRIPTOR;
+    descrs[j].disposition = MACH_MSG_TYPE_MOVE_RECEIVE;
+    descrs[j].name = receive_rights[i].release();
+  }
 
   // Send the reply.
   kr = mach_msg(&reply->header, MACH_SEND_MSG | MACH_SEND_TIMEOUT,
@@ -298,13 +318,16 @@ MachHandleProcessCheckInSync(
 
 class MachCheckInListener : public MessageLoopForIO::MachPortWatcher {
  public:
-  MachCheckInListener(MachHandleProcessCheckInPromise::Private* promise,
-                      mozilla::UniqueMachReceiveRight endpoint, pid_t child_pid,
-                      std::vector<mozilla::UniqueMachSendRight> send_rights)
+  MachCheckInListener(
+      MachHandleProcessCheckInPromise::Private* promise,
+      mozilla::UniqueMachReceiveRight endpoint, pid_t child_pid,
+      std::vector<mozilla::UniqueMachSendRight> send_rights,
+      std::vector<mozilla::UniqueMachReceiveRight> receive_rights)
       : promise_(promise),
         child_pid_(child_pid),
         endpoint_(std::move(endpoint)),
-        send_rights_(std::move(send_rights)) {}
+        send_rights_(std::move(send_rights)),
+        receive_rights_(std::move(receive_rights)) {}
 
   // Start listening for a check-in - can |delete this|.
   void Start(mozilla::TimeDuration timeout);
@@ -326,6 +349,7 @@ class MachCheckInListener : public MessageLoopForIO::MachPortWatcher {
   MessageLoopForIO::MachPortWatchController watch_controller_;
   nsCOMPtr<nsITimer> timeout_timer_;
   std::vector<mozilla::UniqueMachSendRight> send_rights_;
+  std::vector<mozilla::UniqueMachReceiveRight> receive_rights_;
 };
 
 void MachCheckInListener::Start(mozilla::TimeDuration timeout) {
@@ -356,9 +380,9 @@ void MachCheckInListener::OnMachMessageReceived(mach_port_t port) {
   MOZ_ASSERT(endpoint_.get() == port);
 
   task_t task = MACH_PORT_NULL;
-  auto result =
-      MachHandleProcessCheckInSync(endpoint_.get(), child_pid_,
-                                   /* timeout */ 0, send_rights_, &task);
+  auto result = MachHandleProcessCheckInSync(endpoint_.get(), child_pid_,
+                                             /* timeout */ 0, send_rights_,
+                                             receive_rights_, &task);
   CompleteAndDelete(result.map([&](const mozilla::Ok&) { return task; }));
 }
 
@@ -388,13 +412,14 @@ void MachCheckInListener::CompleteAndDelete(
 RefPtr<MachHandleProcessCheckInPromise> MachHandleProcessCheckIn(
     mozilla::UniqueMachReceiveRight endpoint, pid_t child_pid,
     mozilla::TimeDuration timeout,
-    std::vector<mozilla::UniqueMachSendRight> send_rights) {
+    std::vector<mozilla::UniqueMachSendRight> send_rights,
+    std::vector<mozilla::UniqueMachReceiveRight> receive_rights) {
   mozilla::ipc::AssertIOThread();
 
   auto promise =
       mozilla::MakeRefPtr<MachHandleProcessCheckInPromise::Private>(__func__);
   (new MachCheckInListener(promise, std::move(endpoint), child_pid,
-                           std::move(send_rights)))
+                           std::move(send_rights), std::move(receive_rights)))
       ->Start(timeout);
   return promise;
 }
diff --git a/ipc/chromium/src/chrome/common/mach_ipc_mac.h b/ipc/chromium/src/chrome/common/mach_ipc_mac.h
index d2d62fdc1b97f..30b0f0b034bd6 100644
--- a/ipc/chromium/src/chrome/common/mach_ipc_mac.h
+++ b/ipc/chromium/src/chrome/common/mach_ipc_mac.h
@@ -44,7 +44,8 @@ kern_return_t MachReceivePortSendRight(
 // the parent process.
 bool MachChildProcessCheckIn(
     const char* bootstrap_service_name, mach_msg_timeout_t timeout,
-    std::vector<mozilla::UniqueMachSendRight>& send_rights);
+    std::vector<mozilla::UniqueMachSendRight>& send_rights,
+    std::vector<mozilla::UniqueMachReceiveRight>& receive_rights);
 
 //==============================================================================
 // Called by MacProcessLauncher to transfer ports to the child process, and
@@ -54,7 +55,8 @@ using MachHandleProcessCheckInPromise =
 RefPtr<MachHandleProcessCheckInPromise> MachHandleProcessCheckIn(
     mozilla::UniqueMachReceiveRight endpoint, pid_t child_pid,
     mozilla::TimeDuration timeout,
-    std::vector<mozilla::UniqueMachSendRight> send_rights);
+    std::vector<mozilla::UniqueMachSendRight> send_rights,
+    std::vector<mozilla::UniqueMachReceiveRight> receive_rights);
 #endif
 
 #endif  // BASE_MACH_IPC_MAC_H_
diff --git a/ipc/glue/GeckoChildProcessHost.cpp b/ipc/glue/GeckoChildProcessHost.cpp
index 732eefff44fbb..ef75406acf6bf 100644
--- a/ipc/glue/GeckoChildProcessHost.cpp
+++ b/ipc/glue/GeckoChildProcessHost.cpp
@@ -1137,11 +1137,7 @@ Result<Ok, LaunchError> BaseProcessLauncher::DoSetup() {
     geckoargs::sCrashReporter.Put(std::move(childCrashFd), mChildArgs);
 #endif  // XP_UNIX && !XP_IOS
 
-    UniqueFileHandle crashHelperClientFd =
-        CrashReporter::RegisterChildIPCChannel();
-    if (crashHelperClientFd) {
-      geckoargs::sCrashHelper.Put(std::move(crashHelperClientFd), mChildArgs);
-    } else {
+    if (!CrashReporter::RegisterChildIPCChannel(mChildArgs)) {
       NS_WARNING("Could not create an IPC channel to the crash helper");
     }
   }
@@ -1548,10 +1544,12 @@ RefPtr<ProcessLaunchPromise> MacProcessLauncher::DoLaunch() {
         // Wait for the child process to send us its 'task_t' data, then
         // send it the mach send/receive rights which are being passed on
         // the commandline.
-        return MachHandleProcessCheckIn(std::move(self->mParentRecvPort),
-                                        base::GetProcId(aResults.mHandle),
-                                        mozilla::TimeDuration::FromSeconds(10),
-                                        std::move(self->mChildArgs.mSendRights))
+        return MachHandleProcessCheckIn(
+                   std::move(self->mParentRecvPort),
+                   base::GetProcId(aResults.mHandle),
+                   mozilla::TimeDuration::FromSeconds(10),
+                   std::move(self->mChildArgs.mSendRights),
+                   std::move(self->mChildArgs.mReceiveRights))
             ->Then(
                 XRE_GetAsyncIOEventTarget(), __func__,
                 [self, results = std::move(aResults)](task_t aTask) mutable {
diff --git a/js/loader/ImportMap.cpp b/js/loader/ImportMap.cpp
index a5b6a213875b9..6a11e1365ddca 100644
--- a/js/loader/ImportMap.cpp
+++ b/js/loader/ImportMap.cpp
@@ -408,7 +408,8 @@ UniquePtr<ImportMap> ImportMap::ParseString(
     }
     MOZ_ASSERT(exn.isObject());
     Rooted<JSObject*> obj(aCx, &exn.toObject());
-    JSErrorReport* err = JS_ErrorFromException(aCx, obj);
+    JS::BorrowedErrorReport err(aCx);
+    MOZ_ALWAYS_TRUE(JS_ErrorFromException(aCx, obj, err));
     if (err->exnType == JSEXN_SYNTAXERR) {
       JS_ClearPendingException(aCx);
       JS_ReportErrorNumberASCII(aCx, js::GetErrorMessage, nullptr,
diff --git a/js/public/ErrorReport.h b/js/public/ErrorReport.h
index 18852c245509e..6b711f051dde5 100644
--- a/js/public/ErrorReport.h
+++ b/js/public/ErrorReport.h
@@ -32,6 +32,7 @@
 #include "js/AllocPolicy.h"
 #include "js/CharacterEncoding.h"  // JS::ConstUTF8CharsZ
 #include "js/ColumnNumber.h"       // JS::ColumnNumberOneOrigin
+#include "js/Exception.h"          // JS::BorrowedErrorReport
 #include "js/RootingAPI.h"         // JS::HandleObject, JS::RootedObject
 #include "js/UniquePtr.h"          // js::UniquePtr
 #include "js/Value.h"              // JS::Value
@@ -414,14 +415,14 @@ struct MOZ_STACK_CLASS JS_PUBLIC_API ErrorReportBuilder {
   JSString* maybeCreateReportFromDOMException(JS::HandleObject obj,
                                               JSContext* cx);
 
-  // We may have a provided JSErrorReport, so need a way to represent that.
+  // If non-nullptr, this is either |&ownedReport| or |borrowedReport.report_|.
   JSErrorReport* reportp;
 
   // Or we may need to synthesize a JSErrorReport one of our own.
   JSErrorReport ownedReport;
 
-  // Root our exception value to keep a possibly borrowed |reportp| alive.
-  JS::RootedObject exnObject;
+  // Used to keep a possibly borrowed |reportp| alive.
+  JS::BorrowedErrorReport borrowedReport;
 
   // And for our filename.
   JS::UniqueChars filename;
diff --git a/js/public/Exception.h b/js/public/Exception.h
index a2e0c14613639..4f62cd380aa36 100644
--- a/js/public/Exception.h
+++ b/js/public/Exception.h
@@ -27,6 +27,37 @@ enum class ExceptionStackBehavior : bool {
   // retrieved by JS::GetPendingExceptionStack.
   Capture
 };
+
+// Represents a |JSErrorReport*| borrowed from an ErrorObject. The object root
+// ensures the error report won't be freed in the scope of this class.
+//
+// Typical usage:
+//
+//   BorrowedErrorReport report(cx);
+//   if (JS_ErrorFromException(cx, obj, report)) {
+//     // ... Use report->exnType, report.get(), etc.
+//   }
+class MOZ_RAII BorrowedErrorReport {
+  Rooted<JSObject*> owner_;
+  JSErrorReport* report_ = nullptr;
+
+ public:
+  explicit BorrowedErrorReport(JSContext* cx) : owner_(cx) {}
+
+  void init(JSObject* owner, JSErrorReport* report) {
+    MOZ_ASSERT(owner);
+    MOZ_ASSERT(report);
+    owner_ = owner;
+    report_ = report;
+  }
+
+  JSErrorReport* get() const {
+    MOZ_ASSERT(report_);
+    return report_;
+  }
+  const JSErrorReport* operator->() const { return get(); }
+};
+
 }  // namespace JS
 
 extern JS_PUBLIC_API bool JS_IsExceptionPending(JSContext* cx);
@@ -78,13 +109,13 @@ extern JS_PUBLIC_API void JS_ClearPendingException(JSContext* cx);
 
 /**
  * If the given object is an exception object, the exception will have (or be
- * able to lazily create) an error report struct, and this function will return
- * the address of that struct.  Otherwise, it returns nullptr. The lifetime
- * of the error report struct that might be returned is the same as the
- * lifetime of the exception object.
+ * able to lazily create) an error report struct, and this function will
+ * populate |errorReport| with it and return true. Otherwise, returns false.
+ *
+ * See |BorrowedErrorReport| for a usage example.
  */
-extern JS_PUBLIC_API JSErrorReport* JS_ErrorFromException(JSContext* cx,
-                                                          JS::HandleObject obj);
+extern JS_PUBLIC_API bool JS_ErrorFromException(
+    JSContext* cx, JS::HandleObject obj, JS::BorrowedErrorReport& errorReport);
 
 namespace JS {
 
diff --git a/js/public/JitCodeAPI.h b/js/public/JitCodeAPI.h
new file mode 100644
index 0000000000000..3d969b7ca70ce
--- /dev/null
+++ b/js/public/JitCodeAPI.h
@@ -0,0 +1,42 @@
+/* -*- Mode: C++; tab-width: 8; indent-tabs-mode: nil; c-basic-offset: 2 -*- */
+/* This Source Code Form is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
+
+/* SpiderMonkey API for obtaining JitCode information. */
+
+#ifndef js_JitCodeAPI_h
+#define js_JitCodeAPI_h
+
+#include "js/AllocPolicy.h"
+#include "js/ColumnNumber.h"  // JS::LimitedColumnNumberOneOrigin
+#include "js/Vector.h"
+
+namespace JS {
+
+struct JitCodeSourceInfo {
+  uint32_t offset = 0;
+
+  // Line number (1-origin).
+  uint32_t lineno = 0;
+  // Column number in UTF-16 code units.
+  JS::LimitedColumnNumberOneOrigin colno;
+};
+
+using SourceInfoVector =
+    js::Vector<JitCodeSourceInfo, 0, js::SystemAllocPolicy>;
+
+struct JitCodeRecord {
+  uint64_t code_addr = 0;
+  uint32_t instructionSize = 0;
+
+  SourceInfoVector sourceInfo;
+};
+
+// Lookup a JitCodeRecord by code address
+// Returns nullptr if not found
+JitCodeRecord* LookupJitCodeRecord(uint64_t addr);
+
+}  // namespace JS
+
+#endif /* js_JitCodeAPI_h */
diff --git a/js/public/JitPerfSpewer.h b/js/public/JitPerfSpewer.h
new file mode 100644
index 0000000000000..c1b27f1144f15
--- /dev/null
+++ b/js/public/JitPerfSpewer.h
@@ -0,0 +1,22 @@
+/* -*- Mode: C++; tab-width: 8; indent-tabs-mode: nil; c-basic-offset: 2 -*- */
+/* This Source Code Form is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
+
+/* SpiderMonkey JIT perf spewer control API. */
+
+#ifndef js_JitPerfSpewer_h
+#define js_JitPerfSpewer_h
+
+namespace js {
+namespace jit {
+
+// Reset the perf spewer state and enable/disable gecko profiling mode.
+// When enabled, JIT code generation will collect accurate native-to-bytecode
+// mappings for use by the Gecko Profiler.
+void ResetPerfSpewer(bool enabled);
+
+}  // namespace jit
+}  // namespace js
+
+#endif /* js_JitPerfSpewer_h */
diff --git a/js/public/ProfilingFrameIterator.h b/js/public/ProfilingFrameIterator.h
index fb001b0a9057b..ef0b495bef581 100644
--- a/js/public/ProfilingFrameIterator.h
+++ b/js/public/ProfilingFrameIterator.h
@@ -32,6 +32,10 @@ struct CallStackFrameInfo {
   // The script source ID for this frame. Used to identify which script source
   // this frame belongs to.
   uint32_t sourceId;
+  // Line number (1-origin, 0 means no line info available)
+  uint32_t line;
+  // Column number (1-origin, 0 means no column info available)
+  uint32_t column;
 };
 
 }  // namespace jit
@@ -173,6 +177,8 @@ class MOZ_NON_PARAM JS_PUBLIC_API ProfilingFrameIterator {
     JSScript* interpreterScript;
     uint64_t realmID;
     uint32_t sourceId;
+    uint32_t line;
+    uint32_t column;
 
    public:
     void* returnAddress() const {
@@ -248,16 +254,15 @@ class MOZ_STACK_CLASS ProfiledFrameHandle {
   js::jit::JitcodeGlobalEntry& entry_;
   void* addr_;
   void* canonicalAddr_;
-  const char* label_;
-  uint32_t sourceId_;
+  js::jit::CallStackFrameInfo frameInfo_;
   uint32_t depth_;
 
   ProfiledFrameHandle(JSRuntime* rt, js::jit::JitcodeGlobalEntry& entry,
-                      void* addr, const char* label, uint32_t sourceId,
+                      void* addr, const js::jit::CallStackFrameInfo& frameInfo,
                       uint32_t depth);
 
  public:
-  const char* label() const { return label_; }
+  const char* label() const { return frameInfo_.label; }
   uint32_t depth() const { return depth_; }
   void* canonicalAddress() const { return canonicalAddr_; }
 
@@ -265,7 +270,11 @@ class MOZ_STACK_CLASS ProfiledFrameHandle {
 
   JS_PUBLIC_API uint64_t realmID() const;
 
-  JS_PUBLIC_API uint32_t sourceId() const;
+  JS_PUBLIC_API uint32_t sourceId() const { return frameInfo_.sourceId; }
+
+  JS_PUBLIC_API uint32_t line() const { return frameInfo_.line; }
+
+  JS_PUBLIC_API uint32_t column() const { return frameInfo_.column; }
 };
 
 class ProfiledFrameRange {
diff --git a/js/public/friend/ErrorNumbers.msg b/js/public/friend/ErrorNumbers.msg
index 34cbfd39664c3..2214d9d18820a 100644
--- a/js/public/friend/ErrorNumbers.msg
+++ b/js/public/friend/ErrorNumbers.msg
@@ -908,6 +908,7 @@ MSG_DEF(JSMSG_TEMPORAL_PLAIN_TIME_INVALID_VALUE,    4, JSEXN_RANGEERR, "time val
 MSG_DEF(JSMSG_TEMPORAL_PLAIN_TIME_MISSING_UNIT,     0, JSEXN_TYPEERR, "Time-like objects must have at least one time unit")
 MSG_DEF(JSMSG_TEMPORAL_PLAIN_MONTH_DAY_INVALID,     0, JSEXN_RANGEERR, "month-day must be valid ISO date values")
 MSG_DEF(JSMSG_TEMPORAL_PLAIN_YEAR_MONTH_INVALID,    0, JSEXN_RANGEERR, "year-month must be valid ISO date values")
+MSG_DEF(JSMSG_TEMPORAL_PLAIN_YEAR_MONTH_BAD_DURATION, 1, JSEXN_RANGEERR, "duration \"{0}\" property must be zero")
 MSG_DEF(JSMSG_TEMPORAL_ZONED_DATE_TIME_NO_TIME_FOUND, 0, JSEXN_RANGEERR, "date-time can't be represented in the given time zone")
 MSG_DEF(JSMSG_TEMPORAL_ZONED_DATE_TIME_INCONSISTENT_INSTANT, 0, JSEXN_RANGEERR, "time zone computed inconsistent instant values")
 MSG_DEF(JSMSG_TEMPORAL_PARSER_NEGATIVE_ZERO_YEAR,       1, JSEXN_RANGEERR, "can't parse {0}: year 0 must not start with \"-\"")
diff --git a/js/src/builtin/TestingFunctions.cpp b/js/src/builtin/TestingFunctions.cpp
index e2ad748a7c5e9..eb4e72fc44917 100644
--- a/js/src/builtin/TestingFunctions.cpp
+++ b/js/src/builtin/TestingFunctions.cpp
@@ -5128,10 +5128,13 @@ static bool ReadGeckoProfilingStack(JSContext* cx, unsigned argc, Value* vp) {
   }
 
   struct InlineFrameInfo {
-    InlineFrameInfo(const char* kind, UniqueChars label)
-        : kind(kind), label(std::move(label)) {}
+    InlineFrameInfo(const char* kind, UniqueChars label, uint32_t line,
+                    uint32_t column)
+        : kind(kind), label(std::move(label)), line(line), column(column) {}
     const char* kind;
     UniqueChars label;
+    uint32_t line;
+    uint32_t column;
   };
 
   Vector<Vector<InlineFrameInfo, 0, TempAllocPolicy>, 0, TempAllocPolicy>
@@ -5176,7 +5179,8 @@ static bool ReadGeckoProfilingStack(JSContext* cx, unsigned argc, Value* vp) {
         return false;
       }
 
-      if (!frameInfo.back().emplaceBack(frameKindStr, std::move(label))) {
+      if (!frameInfo.back().emplaceBack(frameKindStr, std::move(label),
+                                        frames[i].line, frames[i].column)) {
         return false;
       }
     }
@@ -5225,6 +5229,16 @@ static bool ReadGeckoProfilingStack(JSContext* cx, unsigned argc, Value* vp) {
         return false;
       }
 
+      if (!JS_DefineProperty(cx, inlineFrameInfo, "line", inlineFrame.line,
+                             propAttrs)) {
+        return false;
+      }
+
+      if (!JS_DefineProperty(cx, inlineFrameInfo, "column", inlineFrame.column,
+                             propAttrs)) {
+        return false;
+      }
+
       idx = PropertyKey::Int(inlineFrameNo);
       if (!JS_DefinePropertyById(cx, inlineStack, idx, inlineFrameInfo, 0)) {
         return false;
diff --git a/js/src/builtin/temporal/Calendar.cpp b/js/src/builtin/temporal/Calendar.cpp
index 73516f6bde54e..38fb48a4d09d3 100644
--- a/js/src/builtin/temporal/Calendar.cpp
+++ b/js/src/builtin/temporal/Calendar.cpp
@@ -1899,6 +1899,123 @@ static bool CalendarDateToISO(JSContext* cx, CalendarId calendar,
   return NonISOCalendarDateToISO(cx, calendar, fields, overflow, result);
 }
 
+/**
+ * NonISOMonthDayToISOReferenceDate ( calendar, fields, overflow )
+ *
+ * Return the reference ISO year for "chinese" and "dangi" calendars. Return
+ * zero if no reference ISO year can be determined.
+ */
+static int32_t EastAsianCalendarReferenceISOYear(CalendarId calendar,
+                                                 MonthCode monthCode,
+                                                 int32_t day) {
+  MOZ_ASSERT(calendar == CalendarId::Chinese || calendar == CalendarId::Dangi);
+  MOZ_ASSERT(day > 0);
+
+  if (day < 30) {
+    switch (monthCode.code()) {
+      case MonthCode::Code::M01:
+      case MonthCode::Code::M02:
+      case MonthCode::Code::M03:
+      case MonthCode::Code::M04:
+      case MonthCode::Code::M05:
+      case MonthCode::Code::M06:
+      case MonthCode::Code::M07:
+      case MonthCode::Code::M08:
+      case MonthCode::Code::M09:
+      case MonthCode::Code::M10:
+      case MonthCode::Code::M11:
+      case MonthCode::Code::M12:
+        return 1972;
+
+      case MonthCode::Code::M01L:
+        return 0;
+      case MonthCode::Code::M02L:
+        return 1947;
+      case MonthCode::Code::M03L:
+        return 1966;
+      case MonthCode::Code::M04L:
+        return 1963;
+      case MonthCode::Code::M05L:
+        return 1971;
+      case MonthCode::Code::M06L:
+        return 1960;
+      case MonthCode::Code::M07L:
+        return 1968;
+      case MonthCode::Code::M08L:
+        return 1957;
+      case MonthCode::Code::M09L:
+        return 2014;
+      case MonthCode::Code::M10L:
+        return 1984;
+      case MonthCode::Code::M11L:
+        return day <= 10 ? 2033 : 2034;
+      case MonthCode::Code::M12L:
+        return 0;
+
+      case MonthCode::Code::Invalid:
+      case MonthCode::Code::M13:
+        break;
+    }
+  } else {
+    switch (monthCode.code()) {
+      case MonthCode::Code::M01:
+        return 1970;
+      case MonthCode::Code::M02:
+        return 1972;
+      case MonthCode::Code::M03:
+        return calendar == CalendarId::Chinese ? 1966 : 1968;
+      case MonthCode::Code::M04:
+        return 1970;
+      case MonthCode::Code::M05:
+        return 1972;
+      case MonthCode::Code::M06:
+        return 1971;
+      case MonthCode::Code::M07:
+        return 1972;
+      case MonthCode::Code::M08:
+        return 1971;
+      case MonthCode::Code::M09:
+        return 1972;
+      case MonthCode::Code::M10:
+        return 1972;
+      case MonthCode::Code::M11:
+        return 1970;
+      case MonthCode::Code::M12:
+        return 1972;
+
+      case MonthCode::Code::M01L:
+        return 0;
+      case MonthCode::Code::M02L:
+        return 0;
+      case MonthCode::Code::M03L:
+        return 1955;
+      case MonthCode::Code::M04L:
+        return 1944;
+      case MonthCode::Code::M05L:
+        return 1952;
+      case MonthCode::Code::M06L:
+        return 1941;
+      case MonthCode::Code::M07L:
+        return 1938;
+      case MonthCode::Code::M08L:
+        return 0;
+      case MonthCode::Code::M09L:
+        return 0;
+      case MonthCode::Code::M10L:
+        return 0;
+      case MonthCode::Code::M11L:
+        return 0;
+      case MonthCode::Code::M12L:
+        return 0;
+
+      case MonthCode::Code::Invalid:
+      case MonthCode::Code::M13:
+        break;
+    }
+  }
+  MOZ_CRASH("unexpected month code");
+}
+
 /**
  * CalendarMonthDayToISOReferenceDate ( calendar, fields, overflow )
  */
@@ -1907,7 +2024,7 @@ static bool NonISOMonthDayToISOReferenceDate(JSContext* cx, CalendarId calendar,
                                              ISODate startISODate,
                                              ISODate endISODate,
                                              MonthCode monthCode, int32_t day,
-                                             UniqueICU4XDate& resultDate) {
+                                             UniqueICU4XDate* resultDate) {
   MOZ_ASSERT(startISODate != endISODate);
 
   int32_t direction = startISODate > endISODate ? -1 : 1;
@@ -1948,11 +2065,11 @@ static bool NonISOMonthDayToISOReferenceDate(JSContext* cx, CalendarId calendar,
 
       // Stop searching if |endISODate| was reached.
       if (direction < 0 ? isoDate < endISODate : isoDate > endISODate) {
-        resultDate = nullptr;
+        *resultDate = nullptr;
         return true;
       }
 
-      resultDate = result.unwrap();
+      *resultDate = result.unwrap();
       return true;
     }
 
@@ -1996,7 +2113,7 @@ static bool NonISOMonthDayToISOReferenceDate(JSContext* cx, CalendarId calendar,
     return false;
   }
 
-  resultDate = nullptr;
+  *resultDate = nullptr;
   return true;
 }
 
@@ -2064,6 +2181,18 @@ static bool NonISOMonthDayToISOReferenceDate(JSContext* cx, CalendarId calendar,
   } else {
     MOZ_ASSERT(monthCode != MonthCode{});
 
+    if (calendar == CalendarId::Chinese || calendar == CalendarId::Dangi) {
+      int32_t referenceYear =
+          EastAsianCalendarReferenceISOYear(calendar, monthCode, day);
+      if (referenceYear == 0) {
+        if (overflow == TemporalOverflow::Reject) {
+          ReportCalendarFieldOverflow(cx, "day", day);
+          return false;
+        }
+        monthCode = MonthCode{monthCode.ordinal()};
+      }
+    }
+
     // Constrain `day` to maximum possible day of the input month.
     int32_t maxDaysInMonth = CalendarDaysInMonth(calendar, monthCode).second;
     if (overflow == TemporalOverflow::Constrain) {
@@ -2092,15 +2221,15 @@ static bool NonISOMonthDayToISOReferenceDate(JSContext* cx, CalendarId calendar,
       // If there is still no such date, it is the latest ISO 8601 date
       // corresponding to the calendar date on or before December 31, 1899.
       //
-      // Year -8000 is sufficient to find all possible month-days, even for
-      // rare cases like `{calendar: "chinese", monthCode: "M09L", day: 30}`.
-      {ISODate{1899, 12, 31}, ISODate{-8000, 1, 1}},
+      // Year 1600 is sufficient to find all possible month-days, even for
+      // rare cases like `{calendar: "chinese", monthCode: "M08L", day: 30}`.
+      {ISODate{1899, 12, 31}, ISODate{1600, 1, 1}},
   };
 
   UniqueICU4XDate date;
   for (auto& [start, end] : candidates) {
     if (!NonISOMonthDayToISOReferenceDate(cx, calendar, cal.get(), start, end,
-                                          monthCode, day, date)) {
+                                          monthCode, day, &date)) {
       return false;
     }
     if (date) {
@@ -2108,14 +2237,24 @@ static bool NonISOMonthDayToISOReferenceDate(JSContext* cx, CalendarId calendar,
     }
   }
 
-  // We shouldn't end up here with |maxIterations == 10'000|, but just in case
-  // still handle this case and report an error.
+  // We shouldn't end up here, but just in case still handle a missing date and
+  // report an error.
   if (!date) {
     ReportCalendarFieldOverflow(cx, "day", day);
     return false;
   }
 
   *result = ToISODate(date.get());
+
+  // FIXME: spec bug - missing handling for reference years when input fields
+  // have a year component:
+  // https://github.com/tc39/proposal-intl-era-monthcode/issues/113
+  MOZ_ASSERT_IF(
+      (calendar == CalendarId::Chinese || calendar == CalendarId::Dangi) &&
+          !(fields.has(CalendarField::Year) ||
+            fields.has(CalendarField::EraYear)),
+      result->year ==
+          EastAsianCalendarReferenceISOYear(calendar, monthCode, day));
   return true;
 }
 
@@ -2281,6 +2420,12 @@ bool js::temporal::CalendarEra(JSContext* cx, Handle<CalendarValue> calendar,
     return true;
   }
 
+  // TODO: Remove when we update to the next ICU4X release.
+  // See: https://github.com/unicode-org/icu4x/pull/7503
+  if (calendarId == CalendarId::Japanese && date.year <= 1872) {
+    calendarId = CalendarId::Gregorian;
+  }
+
   auto era = EraCode::Standard;
 
   // Call into ICU4X if the calendar has more than one era.
@@ -2341,6 +2486,12 @@ bool js::temporal::CalendarEraYear(JSContext* cx,
   }
   MOZ_ASSERT(eras.size() > 1);
 
+  // TODO: Remove when we update to the next ICU4X release.
+  // See: https://github.com/unicode-org/icu4x/pull/7503
+  if (calendarId == CalendarId::Japanese && date.year <= 1872) {
+    calendarId = CalendarId::Gregorian;
+  }
+
   auto cal = CreateICU4XCalendar(calendarId);
   auto dt = CreateICU4XDate(cx, date, calendarId, cal.get());
   if (!dt) {
@@ -3169,6 +3320,31 @@ static int32_t CompareCalendarDate(const CalendarDateWithOrdinalMonth& one,
                         ISODate{two.year, two.month, two.day});
 }
 
+/**
+ * ISODateSurpasses ( sign, baseDate, isoDate2, years, months, weeks, days )
+ */
+static inline bool ISODateSurpasses(int32_t sign, const ISODate& one,
+                                    const ISODate& two) {
+  return CompareISODate(one, two) * sign > 0;
+}
+
+/**
+ * CompareSurpasses ( sign, year, monthOrCode, day, target )
+ */
+static inline bool CompareSurpasses(int32_t sign, const CalendarDate& one,
+                                    const CalendarDate& two) {
+  return CompareCalendarDate(one, two) * sign > 0;
+}
+
+/**
+ * CompareSurpasses ( sign, year, monthOrCode, day, target )
+ */
+static inline bool CompareSurpasses(int32_t sign,
+                                    const CalendarDateWithOrdinalMonth& one,
+                                    const CalendarDateWithOrdinalMonth& two) {
+  return CompareCalendarDate(one, two) * sign > 0;
+}
+
 static CalendarDate ToCalendarDate(CalendarId calendarId,
                                    const icu4x::capi::Date* dt) {
   int32_t year = CalendarDateYear(calendarId, dt);
@@ -3219,6 +3395,7 @@ static bool AddYearMonthDuration(JSContext* cx, CalendarId calendarId,
                                  const icu4x::capi::Calendar* calendar,
                                  const CalendarDate& calendarDate,
                                  const DateDuration& duration,
+                                 TemporalOverflow overflow,
                                  CalendarDate* result) {
   MOZ_ASSERT(CalendarHasLeapMonths(calendarId));
   MOZ_ASSERT(IsValidDuration(duration));
@@ -3234,17 +3411,17 @@ static bool AddYearMonthDuration(JSContext* cx, CalendarId calendarId,
   }
   year = durationYear.value();
 
+  // Regulate according to |overflow|.
+  auto firstDayOfMonth = CreateDateFromCodes(cx, calendarId, calendar, year,
+                                             monthCode, 1, overflow);
+  if (!firstDayOfMonth) {
+    return false;
+  }
+
   // Months per year are variable, so we have construct a new date for each
   // year to balance the years and months.
   int64_t months = duration.months;
   if (months != 0) {
-    auto firstDayOfMonth =
-        CreateDateFromCodes(cx, calendarId, calendar, year, monthCode, 1,
-                            TemporalOverflow::Constrain);
-    if (!firstDayOfMonth) {
-      return false;
-    }
-
     if (months > 0) {
       while (true) {
         // Check if adding |months| is still in the current year.
@@ -3326,7 +3503,7 @@ static bool AddNonISODate(JSContext* cx, CalendarId calendarId,
   } else {
     auto date = ToCalendarDate(calendarId, dt.get());
     if (!AddYearMonthDuration(cx, calendarId, cal.get(), date, duration,
-                              &calendarDate)) {
+                              overflow, &calendarDate)) {
       return false;
     }
   }
@@ -3445,37 +3622,30 @@ bool js::temporal::CalendarDateAdd(JSContext* cx,
  */
 static DateDuration DifferenceISODate(const ISODate& one, const ISODate& two,
                                       TemporalUnit largestUnit) {
-  MOZ_ASSERT(IsValidISODate(one));
-  MOZ_ASSERT(IsValidISODate(two));
-
-  // Both inputs are also within the date limits.
+  MOZ_ASSERT(one != two);
   MOZ_ASSERT(ISODateWithinLimits(one));
   MOZ_ASSERT(ISODateWithinLimits(two));
 
   MOZ_ASSERT(TemporalUnit::Year <= largestUnit &&
              largestUnit <= TemporalUnit::Day);
 
-  // Step 1.a.
+  // Step 3.a.
   int32_t sign = -CompareISODate(one, two);
+  MOZ_ASSERT(sign != 0);
 
-  // Step 1.b.
-  if (sign == 0) {
-    return {};
-  }
-
-  // Step 1.c.
+  // Step 3.b.
   int32_t years = 0;
 
-  // Step 1.e. (Reordered)
+  // Step 3.d. (Reordered)
   int32_t months = 0;
 
-  // Steps 1.d and 1.f.
+  // Steps 3.c and 3.e.
   if (largestUnit == TemporalUnit::Year || largestUnit == TemporalUnit::Month) {
     years = two.year - one.year;
     months = two.month - one.month;
 
     auto intermediate = ISODate{one.year + years, one.month, one.day};
-    if (CompareISODate(intermediate, two) * sign > 0) {
+    if (ISODateSurpasses(sign, intermediate, two)) {
       years -= sign;
       months += 12 * sign;
     }
@@ -3488,7 +3658,7 @@ static DateDuration DifferenceISODate(const ISODate& one, const ISODate& two,
       intermediate.month += 12;
       intermediate.year -= 1;
     }
-    if (CompareISODate(intermediate, two) * sign > 0) {
+    if (ISODateSurpasses(sign, intermediate, two)) {
       months -= sign;
     }
 
@@ -3503,19 +3673,19 @@ static DateDuration DifferenceISODate(const ISODate& one, const ISODate& two,
   auto constrained = ConstrainISODate(
       ISODate{int32_t(intermediate.year), intermediate.month, one.day});
 
-  // Step 1.g.
+  // Step 3.f.
   int64_t weeks = 0;
 
-  // Steps 1.i-k.
+  // Steps 3.h-j.
   int64_t days = MakeDay(two) - MakeDay(constrained);
 
-  // Step 1.h. (Weeks computed from days.)
+  // Step 3.g. (Weeks computed from days.)
   if (largestUnit == TemporalUnit::Week) {
     weeks = days / 7;
     days %= 7;
   }
 
-  // Step 1.l.
+  // Step 3.k.
   auto result = DateDuration{
       int64_t(years),
       int64_t(months),
@@ -3526,21 +3696,24 @@ static DateDuration DifferenceISODate(const ISODate& one, const ISODate& two,
   return result;
 }
 
+/**
+ * NonISODateUntil ( calendar, one, two, largestUnit )
+ */
 static bool DifferenceNonISODate(JSContext* cx, CalendarId calendarId,
                                  const ISODate& one, const ISODate& two,
                                  TemporalUnit largestUnit,
                                  DateDuration* result) {
-  // Both inputs are also within the date limits.
+  MOZ_ASSERT(!CalendarHasLeapMonths(calendarId));
+  MOZ_ASSERT(one != two);
   MOZ_ASSERT(ISODateWithinLimits(one));
   MOZ_ASSERT(ISODateWithinLimits(two));
 
   MOZ_ASSERT(TemporalUnit::Year <= largestUnit &&
              largestUnit <= TemporalUnit::Month);
 
-  if (one == two) {
-    *result = {};
-    return true;
-  }
+  // If the months per year are fixed, we can use a modified DifferenceISODate
+  // implementation to compute the date duration.
+  const int32_t monthsPerYear = CalendarMonthsPerYear(calendarId);
 
   auto cal = CreateICU4XCalendar(calendarId);
 
@@ -3554,171 +3727,213 @@ static bool DifferenceNonISODate(JSContext* cx, CalendarId calendarId,
     return false;
   }
 
-  int32_t years = 0;
-  int32_t months = 0;
+  auto oneDate = ToCalendarDateWithOrdinalMonth(calendarId, dtOne.get());
+  auto twoDate = ToCalendarDateWithOrdinalMonth(calendarId, dtTwo.get());
 
-  ISODate constrainedIso;
-  if (!CalendarHasLeapMonths(calendarId)) {
-    // If the months per year are fixed, we can use a modified DifferenceISODate
-    // implementation to compute the date duration.
-    int32_t monthsPerYear = CalendarMonthsPerYear(calendarId);
+  int32_t sign = -CompareCalendarDate(oneDate, twoDate);
+  MOZ_ASSERT(sign != 0);
 
-    auto oneDate = ToCalendarDateWithOrdinalMonth(calendarId, dtOne.get());
-    auto twoDate = ToCalendarDateWithOrdinalMonth(calendarId, dtTwo.get());
+  int32_t years = twoDate.year - oneDate.year;
+  int32_t months = twoDate.month - oneDate.month;
 
-    int32_t sign = -CompareCalendarDate(oneDate, twoDate);
-    MOZ_ASSERT(sign != 0);
+  // If |oneDate + years| surpasses |twoDate|, reduce |years| by one and add
+  // |monthsPerYear| to |months|. The next step will balance the intermediate
+  // result.
+  auto intermediate = CalendarDateWithOrdinalMonth{oneDate.year + years,
+                                                   oneDate.month, oneDate.day};
+  if (CompareSurpasses(sign, intermediate, twoDate)) {
+    years -= sign;
+    months += monthsPerYear * sign;
+  }
 
-    years = twoDate.year - oneDate.year;
-    months = twoDate.month - oneDate.month;
+  // Add both |years| and |months| and then balance the intermediate result to
+  // ensure its month is within the valid bounds.
+  intermediate = CalendarDateWithOrdinalMonth{
+      oneDate.year + years, oneDate.month + months, oneDate.day};
+  if (intermediate.month > monthsPerYear) {
+    intermediate.month -= monthsPerYear;
+    intermediate.year += 1;
+  } else if (intermediate.month < 1) {
+    intermediate.month += monthsPerYear;
+    intermediate.year -= 1;
+  }
 
-    // If |oneDate + years| surpasses |twoDate|, reduce |years| by one and add
-    // |monthsPerYear| to |months|. The next step will balance the intermediate
-    // result.
-    auto intermediate = CalendarDateWithOrdinalMonth{
-        oneDate.year + years, oneDate.month, oneDate.day};
-    if (CompareCalendarDate(intermediate, twoDate) * sign > 0) {
-      years -= sign;
-      months += monthsPerYear * sign;
-    }
+  // If |intermediate| surpasses |twoDate|, reduce |month| by one.
+  if (CompareSurpasses(sign, intermediate, twoDate)) {
+    months -= sign;
+  }
 
-    // Add both |years| and |months| and then balance the intermediate result to
-    // ensure its month is within the valid bounds.
-    intermediate = CalendarDateWithOrdinalMonth{
-        oneDate.year + years, oneDate.month + months, oneDate.day};
-    if (intermediate.month > monthsPerYear) {
-      intermediate.month -= monthsPerYear;
-      intermediate.year += 1;
-    } else if (intermediate.month < 1) {
-      intermediate.month += monthsPerYear;
-      intermediate.year -= 1;
-    }
+  // Convert years to months if necessary.
+  if (largestUnit == TemporalUnit::Month) {
+    months += years * monthsPerYear;
+    years = 0;
+  }
 
-    // If |intermediate| surpasses |twoDate|, reduce |month| by one.
-    if (CompareCalendarDate(intermediate, twoDate) * sign > 0) {
-      months -= sign;
-    }
+  // Constrain to a proper calendar date.
+  auto balanced = BalanceYearMonth(oneDate.year + years, oneDate.month + months,
+                                   monthsPerYear);
 
-    // Convert years to months if necessary.
-    if (largestUnit == TemporalUnit::Month) {
-      months += years * monthsPerYear;
-      years = 0;
-    }
+  auto constrained =
+      CreateDateFrom(cx, calendarId, cal.get(), balanced.year, balanced.month,
+                     oneDate.day, TemporalOverflow::Constrain);
+  if (!constrained) {
+    return false;
+  }
 
-    // Constrain to a proper date.
-    auto balanced = BalanceYearMonth(oneDate.year + years,
-                                     oneDate.month + months, monthsPerYear);
+  auto constrainedIso = ToISODate(constrained.get());
+  MOZ_ASSERT(!ISODateSurpasses(sign, constrainedIso, two),
+             "constrained doesn't surpass two");
 
-    auto constrained =
-        CreateDateFrom(cx, calendarId, cal.get(), balanced.year, balanced.month,
-                       oneDate.day, TemporalOverflow::Constrain);
-    if (!constrained) {
-      return false;
-    }
-    constrainedIso = ToISODate(constrained.get());
+  int64_t days = MakeDay(two) - MakeDay(constrainedIso);
 
-    MOZ_ASSERT(CompareISODate(constrainedIso, two) * sign <= 0,
-               "constrained doesn't surpass two");
-  } else {
-    auto oneDate = ToCalendarDate(calendarId, dtOne.get());
-    auto twoDate = ToCalendarDate(calendarId, dtTwo.get());
+  *result = DateDuration{
+      int64_t(years),
+      int64_t(months),
+      0,
+      int64_t(days),
+  };
+  MOZ_ASSERT(IsValidDuration(*result));
+  return true;
+}
 
-    int32_t sign = -CompareCalendarDate(oneDate, twoDate);
-    MOZ_ASSERT(sign != 0);
+/**
+ * NonISODateUntil ( calendar, one, two, largestUnit )
+ */
+static bool DifferenceNonISODateWithLeapMonth(
+    JSContext* cx, CalendarId calendarId, const ISODate& one,
+    const ISODate& two, TemporalUnit largestUnit, DateDuration* result) {
+  MOZ_ASSERT(CalendarHasLeapMonths(calendarId));
+  MOZ_ASSERT(one != two);
+  MOZ_ASSERT(ISODateWithinLimits(one));
+  MOZ_ASSERT(ISODateWithinLimits(two));
 
-    years = twoDate.year - oneDate.year;
+  MOZ_ASSERT(TemporalUnit::Year <= largestUnit &&
+             largestUnit <= TemporalUnit::Month);
 
-    // If |oneDate + years| surpasses |twoDate|, reduce |years| by one and add
-    // |monthsPerYear| to |months|. The next step will balance the intermediate
-    // result.
-    auto constrained = CreateDateFromCodes(
-        cx, calendarId, cal.get(), oneDate.year + years, oneDate.monthCode,
-        oneDate.day, TemporalOverflow::Constrain);
-    if (!constrained) {
-      return false;
-    }
+  auto cal = CreateICU4XCalendar(calendarId);
 
-    auto constrainedDate = ToCalendarDate(calendarId, constrained.get());
-    if (CompareCalendarDate(constrainedDate, twoDate) * sign > 0) {
-      years -= sign;
-    }
+  auto dtOne = CreateICU4XDate(cx, one, calendarId, cal.get());
+  if (!dtOne) {
+    return false;
+  }
 
-    // Add as many months as possible without surpassing |twoDate|.
-    while (true) {
-      CalendarDate intermediateDate;
-      if (!AddYearMonthDuration(cx, calendarId, cal.get(), oneDate,
-                                {years, months + sign}, &intermediateDate)) {
-        return false;
-      }
-      if (CompareCalendarDate(intermediateDate, twoDate) * sign > 0) {
-        break;
-      }
-      months += sign;
-      constrainedDate = intermediateDate;
-    }
-    MOZ_ASSERT(std::abs(months) < CalendarMonthsPerYear(calendarId));
+  auto dtTwo = CreateICU4XDate(cx, two, calendarId, cal.get());
+  if (!dtTwo) {
+    return false;
+  }
 
-    // Convert years to months if necessary.
-    if (largestUnit == TemporalUnit::Month && years != 0) {
-      auto monthsUntilEndOfYear = [](const icu4x::capi::Date* date) {
-        int32_t month = OrdinalMonth(date);
-        int32_t monthsInYear = MonthsInYear(date);
-        MOZ_ASSERT(1 <= month && month <= monthsInYear);
+  auto oneDate = ToCalendarDate(calendarId, dtOne.get());
+  auto twoDate = ToCalendarDate(calendarId, dtTwo.get());
 
-        return monthsInYear - month + 1;
-      };
+  int32_t sign = -CompareCalendarDate(oneDate, twoDate);
+  MOZ_ASSERT(sign != 0);
 
-      auto monthsSinceStartOfYear = [](const icu4x::capi::Date* date) {
-        return OrdinalMonth(date) - 1;
-      };
+  int32_t years = twoDate.year - oneDate.year;
 
-      // Add months until end of year resp. since start of year.
-      if (sign > 0) {
-        months += monthsUntilEndOfYear(dtOne.get());
-      } else {
-        months -= monthsSinceStartOfYear(dtOne.get());
-      }
+  // If |oneDate + years| surpasses |twoDate|, reduce |years| by one. The next
+  // step will balance the intermediate result.
+  auto unconstrainedDate =
+      CalendarDate{oneDate.year + years, oneDate.monthCode, oneDate.day};
+  if (CompareSurpasses(sign, unconstrainedDate, twoDate)) {
+    years -= sign;
+  }
 
-      // Months in full year.
-      for (int32_t y = sign; y != years; y += sign) {
-        auto dt =
-            CreateDateFromCodes(cx, calendarId, cal.get(), oneDate.year + y,
-                                MonthCode{1}, 1, TemporalOverflow::Constrain);
-        if (!dt) {
-          return false;
-        }
-        months += MonthsInYear(dt.get()) * sign;
-      }
+  auto constrainedStartOfMonth =
+      CreateDateFromCodes(cx, calendarId, cal.get(), oneDate.year + years,
+                          oneDate.monthCode, 1, TemporalOverflow::Constrain);
+  if (!constrainedStartOfMonth) {
+    return false;
+  }
 
-      // Add months since start of year resp. until end of year.
-      auto dt = CreateDateFromCodes(cx, calendarId, cal.get(),
-                                    oneDate.year + years, oneDate.monthCode, 1,
-                                    TemporalOverflow::Constrain);
+  auto constrainedDateStartOfMonth =
+      ToCalendarDate(calendarId, constrainedStartOfMonth.get());
+
+  auto constrainedDate = CalendarDate{
+      .year = constrainedDateStartOfMonth.year,
+      .monthCode = constrainedDateStartOfMonth.monthCode,
+      .day = oneDate.day,
+  };
+  if (CompareSurpasses(sign, constrainedDate, twoDate)) {
+    years -= sign;
+  }
+
+  // Add as many months as possible without surpassing |twoDate|.
+  int32_t months = 0;
+  while (true) {
+    CalendarDate intermediateDate;
+    if (!AddYearMonthDuration(cx, calendarId, cal.get(), oneDate,
+                              {years, months + sign},
+                              TemporalOverflow::Constrain, &intermediateDate)) {
+      return false;
+    }
+    if (CompareSurpasses(sign, intermediateDate, twoDate)) {
+      break;
+    }
+    months += sign;
+    constrainedDate = intermediateDate;
+  }
+  MOZ_ASSERT(std::abs(months) < CalendarMonthsPerYear(calendarId));
+
+  // Convert years to months if necessary.
+  if (largestUnit == TemporalUnit::Month && years != 0) {
+    auto monthsUntilEndOfYear = [](const icu4x::capi::Date* date) {
+      int32_t month = OrdinalMonth(date);
+      int32_t monthsInYear = MonthsInYear(date);
+      MOZ_ASSERT(1 <= month && month <= monthsInYear);
+
+      return monthsInYear - month + 1;
+    };
+
+    auto monthsSinceStartOfYear = [](const icu4x::capi::Date* date) {
+      return OrdinalMonth(date) - 1;
+    };
+
+    // Add months until end of year resp. since start of year.
+    if (sign > 0) {
+      months += monthsUntilEndOfYear(dtOne.get());
+    } else {
+      months -= monthsSinceStartOfYear(dtOne.get());
+    }
+
+    // Months in full year.
+    for (int32_t y = sign; y != years; y += sign) {
+      auto dt =
+          CreateDateFromCodes(cx, calendarId, cal.get(), oneDate.year + y,
+                              MonthCode{1}, 1, TemporalOverflow::Constrain);
       if (!dt) {
         return false;
       }
-      if (sign > 0) {
-        months += monthsSinceStartOfYear(dt.get());
-      } else {
-        months -= monthsUntilEndOfYear(dt.get());
-      }
-
-      years = 0;
+      months += MonthsInYear(dt.get()) * sign;
     }
 
-    constrained =
-        CreateDateFromCodes(cx, calendarId, cal.get(), constrainedDate.year,
-                            constrainedDate.monthCode, constrainedDate.day,
-                            TemporalOverflow::Constrain);
-    if (!constrained) {
+    // Add months since start of year resp. until end of year.
+    auto dt =
+        CreateDateFromCodes(cx, calendarId, cal.get(), oneDate.year + years,
+                            oneDate.monthCode, 1, TemporalOverflow::Constrain);
+    if (!dt) {
       return false;
     }
-    constrainedIso = ToISODate(constrained.get());
+    if (sign > 0) {
+      months += monthsSinceStartOfYear(dt.get());
+    } else {
+      months -= monthsUntilEndOfYear(dt.get());
+    }
 
-    MOZ_ASSERT(CompareISODate(constrainedIso, two) * sign <= 0,
-               "constrained doesn't surpass two");
+    years = 0;
+  }
+
+  auto constrained =
+      CreateDateFromCodes(cx, calendarId, cal.get(), constrainedDate.year,
+                          constrainedDate.monthCode, constrainedDate.day,
+                          TemporalOverflow::Constrain);
+  if (!constrained) {
+    return false;
   }
 
+  auto constrainedIso = ToISODate(constrained.get());
+  MOZ_ASSERT(!ISODateSurpasses(sign, constrainedIso, two),
+             "constrained doesn't surpass two");
+
   int64_t days = MakeDay(two) - MakeDay(constrainedIso);
 
   *result = DateDuration{
@@ -3760,12 +3975,9 @@ static bool NonISODateUntil(JSContext* cx, CalendarId calendarId,
       *result = DifferenceISODate(one, two, largestUnit);
       return true;
 
-    case CalendarId::Chinese:
     case CalendarId::Coptic:
-    case CalendarId::Dangi:
     case CalendarId::Ethiopian:
     case CalendarId::EthiopianAmeteAlem:
-    case CalendarId::Hebrew:
     case CalendarId::Indian:
     case CalendarId::IslamicCivil:
     case CalendarId::IslamicTabular:
@@ -3773,6 +3985,12 @@ static bool NonISODateUntil(JSContext* cx, CalendarId calendarId,
     case CalendarId::Persian:
       return DifferenceNonISODate(cx, calendarId, one, two, largestUnit,
                                   result);
+
+    case CalendarId::Chinese:
+    case CalendarId::Dangi:
+    case CalendarId::Hebrew:
+      return DifferenceNonISODateWithLeapMonth(cx, calendarId, one, two,
+                                               largestUnit, result);
   }
   MOZ_CRASH("invalid calendar id");
 }
@@ -3785,16 +4003,23 @@ bool js::temporal::CalendarDateUntil(JSContext* cx,
                                      const ISODate& one, const ISODate& two,
                                      TemporalUnit largestUnit,
                                      DateDuration* result) {
+  MOZ_ASSERT(ISODateWithinLimits(one));
+  MOZ_ASSERT(ISODateWithinLimits(two));
   MOZ_ASSERT(largestUnit <= TemporalUnit::Day);
 
-  auto calendarId = calendar.identifier();
+  // Steps 1-2.
+  if (one == two) {
+    *result = {};
+    return true;
+  }
 
-  // Step 1.
+  // Step 3.
+  auto calendarId = calendar.identifier();
   if (calendarId == CalendarId::ISO8601) {
     *result = DifferenceISODate(one, two, largestUnit);
     return true;
   }
 
-  // Step 2.
+  // Step 4.
   return NonISODateUntil(cx, calendarId, one, two, largestUnit, result);
 }
diff --git a/js/src/builtin/temporal/PlainYearMonth.cpp b/js/src/builtin/temporal/PlainYearMonth.cpp
index fd1a3d2273172..a624047ebbf3b 100644
--- a/js/src/builtin/temporal/PlainYearMonth.cpp
+++ b/js/src/builtin/temporal/PlainYearMonth.cpp
@@ -483,6 +483,34 @@ static bool DifferenceTemporalPlainYearMonth(JSContext* cx,
   return true;
 }
 
+const char* NonZeroDurationPartAfterMonths(const Duration& duration) {
+  if (duration.weeks != 0) {
+    return "weeks";
+  }
+  if (duration.days != 0) {
+    return "days";
+  }
+  if (duration.hours != 0) {
+    return "hours";
+  }
+  if (duration.minutes != 0) {
+    return "minutes";
+  }
+  if (duration.seconds != 0) {
+    return "seconds";
+  }
+  if (duration.milliseconds != 0) {
+    return "milliseconds";
+  }
+  if (duration.microseconds != 0) {
+    return "microseconds";
+  }
+  if (duration.nanoseconds != 0) {
+    return "nanoseconds";
+  }
+  return nullptr;
+}
+
 /**
  * AddDurationToYearMonth ( operation, yearMonth, temporalDurationLike, options
  * )
@@ -503,86 +531,58 @@ static bool AddDurationToYearMonth(JSContext* cx, TemporalAddDuration operation,
     duration = duration.negate();
   }
 
-  // Steps 3-4.
+  // Step 3.
+  auto internalDuration = ToInternalDurationRecord(duration);
+
+  // Steps 4-5.
   auto overflow = TemporalOverflow::Constrain;
   if (args.hasDefined(1)) {
-    // Step 3.
+    // Step 4.
     Rooted<JSObject*> options(
         cx, RequireObjectArg(cx, "options", ToName(operation), args[1]));
     if (!options) {
       return false;
     }
 
-    // Step 4.
+    // Step 5.
     if (!GetTemporalOverflowOption(cx, options, &overflow)) {
       return false;
     }
   }
 
-  // Step 5.
-  int32_t sign = DurationSign(duration);
-
   // Step 6.
-  auto calendar = yearMonth.calendar();
+  const auto& durationToAdd = internalDuration.date;
 
   // Step 7.
-  Rooted<CalendarFields> fields(cx);
-  if (!ISODateToFields(cx, yearMonth, &fields)) {
+  if (durationToAdd.weeks != 0 || durationToAdd.days != 0 ||
+      internalDuration.time != TimeDuration{}) {
+    JS_ReportErrorNumberASCII(cx, GetErrorMessage, nullptr,
+                              JSMSG_TEMPORAL_PLAIN_YEAR_MONTH_BAD_DURATION,
+                              NonZeroDurationPartAfterMonths(duration));
     return false;
   }
 
   // Step 8.
-  MOZ_ASSERT(!fields.has(CalendarField::Day));
-  fields.setDay(1);
+  auto calendar = yearMonth.calendar();
 
   // Step 9.
-  Rooted<PlainDate> intermediateDate(cx);
-  if (!CalendarDateFromFields(cx, calendar, fields, TemporalOverflow::Constrain,
-                              &intermediateDate)) {
+  Rooted<CalendarFields> fields(cx);
+  if (!ISODateToFields(cx, yearMonth, &fields)) {
     return false;
   }
 
-  // Steps 10-11.
-  ISODate date;
-  if (sign < 0) {
-    // |intermediateDate| is initialized to the first day of |yearMonth|'s
-    // month. Compute the last day of |yearMonth|'s month by first adding one
-    // month and then subtracting one day.
-    //
-    // This is roughly equivalent to these calls:
-    //
-    // js> var ym = new Temporal.PlainYearMonth(2023, 1);
-    // js> ym.toPlainDate({day: 1}).add({months: 1}).subtract({days: 1}).day
-    // 31
-    //
-    // For many calendars this is equivalent to `ym.daysInMonth`, except when
-    // some days are skipped, for example consider the Julian-to-Gregorian
-    // calendar transition.
-
-    // Step 10.a.
-    auto oneMonthDuration = DateDuration{0, 1};
-
-    // Step 10.b.
-    ISODate nextMonth;
-    if (!CalendarDateAdd(cx, calendar, intermediateDate, oneMonthDuration,
-                         TemporalOverflow::Constrain, &nextMonth)) {
-      return false;
-    }
-
-    // Step 10.c.
-    date = BalanceISODate(nextMonth, -1);
+  // Step 10.
+  MOZ_ASSERT(!fields.has(CalendarField::Day));
+  fields.setDay(1);
 
-    // Step 10.d.
-    MOZ_ASSERT(ISODateWithinLimits(date));
-  } else {
-    // Step 11.a.
-    date = intermediateDate;
+  // Step 11.
+  Rooted<PlainDate> date(cx);
+  if (!CalendarDateFromFields(cx, calendar, fields, TemporalOverflow::Constrain,
+                              &date)) {
+    return false;
   }
 
-  // Steps 12.
-  auto durationToAdd = ToDateDurationRecordWithoutTime(duration);
-
-  // Step 13.
+  // Step 12.
   ISODate addedDate;
   if (!CalendarDateAdd(cx, calendar, date, durationToAdd, overflow,
                        &addedDate)) {
@@ -593,21 +593,21 @@ static bool AddDurationToYearMonth(JSContext* cx, TemporalAddDuration operation,
   Rooted<PlainYearMonth> addedYearMonth(cx,
                                         PlainYearMonth{addedDate, calendar});
 
-  // Step 14.
+  // Step 13.
   Rooted<CalendarFields> addedDateFields(cx);
   if (!ISODateToFields(cx, addedYearMonth, &addedDateFields)) {
     return false;
   }
 
-  // Step 15.
-  Rooted<PlainYearMonth> result(cx);
+  // Step 14.
+  Rooted<PlainYearMonth> isoDate(cx);
   if (!CalendarYearMonthFromFields(cx, calendar, addedDateFields, overflow,
-                                   &result)) {
+                                   &isoDate)) {
     return false;
   }
 
-  // Step 16.
-  auto* obj = CreateTemporalYearMonth(cx, result);
+  // Step 15.
+  auto* obj = CreateTemporalYearMonth(cx, isoDate);
   if (!obj) {
     return false;
   }
diff --git a/js/src/builtin/temporal/ZonedDateTime.cpp b/js/src/builtin/temporal/ZonedDateTime.cpp
index cf4be87e23de9..b00e53d6fb5f0 100644
--- a/js/src/builtin/temporal/ZonedDateTime.cpp
+++ b/js/src/builtin/temporal/ZonedDateTime.cpp
@@ -682,7 +682,7 @@ static bool DifferenceZonedDateTime(JSContext* cx, const EpochNanoseconds& ns1,
   }
 
   // Step 4.
-  if (CompareISODate(startDateTime.date, endDateTime.date) == 0) {
+  if (startDateTime.date == endDateTime.date) {
     // Step 4.a.
     auto timeDuration = TimeDurationFromEpochNanosecondsDifference(ns2, ns1);
 
diff --git a/js/src/gc/GC.h b/js/src/gc/GC.h
index 014099b8668df..9593824ddb3c4 100644
--- a/js/src/gc/GC.h
+++ b/js/src/gc/GC.h
@@ -93,7 +93,8 @@ class ArenaChunk;
   _("generateMissingAllocSites", JSGC_GENERATE_MISSING_ALLOC_SITES, true)   \
   _("highFrequencyMode", JSGC_HIGH_FREQUENCY_MODE, false)                   \
   _("storeBufferEntries", JSGC_STORE_BUFFER_ENTRIES, true)                  \
-  _("storeBufferScaling", JSGC_STORE_BUFFER_SCALING, true)
+  _("storeBufferScaling", JSGC_STORE_BUFFER_SCALING, true)                  \
+  _("incrementalWeakMapMarkingEnabled", JSGC_INCREMENTAL_WEAKMAP_ENABLED, true)
 
 // Get the key and writability give a GC parameter name.
 extern bool GetGCParameterInfo(const char* name, JSGCParamKey* keyOut,
diff --git a/js/src/jit-test/jit_test.py b/js/src/jit-test/jit_test.py
index 2381ec8672988..e27233d33efa2 100755
--- a/js/src/jit-test/jit_test.py
+++ b/js/src/jit-test/jit_test.py
@@ -11,6 +11,7 @@
 import subprocess
 import sys
 import traceback
+from copy import deepcopy
 
 read_input = input
 
@@ -485,17 +486,7 @@ def main(argv):
     job_count = len(test_list)
 
     if options.repeat:
-
-        def repeat_copy(job_list_generator, repeat):
-            job_list = list(job_list_generator)
-            for i in range(repeat):
-                for test in job_list:
-                    if i == 0:
-                        yield test
-                    else:
-                        yield test.copy()
-
-        job_list = repeat_copy(job_list, options.repeat)
+        job_list = (deepcopy(test) for test in job_list for _ in range(options.repeat))
         job_count *= options.repeat
 
     if options.ignore_timeouts:
diff --git a/js/src/jit-test/tests/errors/nuke-error-wrapper.js b/js/src/jit-test/tests/errors/nuke-error-wrapper.js
new file mode 100644
index 0000000000000..0250a1e748b42
--- /dev/null
+++ b/js/src/jit-test/tests/errors/nuke-error-wrapper.js
@@ -0,0 +1,35 @@
+// |jit-test| error:finished
+var g = newGlobal({newCompartment: true});
+g.evaluate(`
+  // Override Error.prototype.name with a getter that nukes CCWs
+  Object.defineProperty(Error.prototype, 'name', {
+    get: function() {
+      // Nuke all cross-compartment wrappers pointing into this realm.
+      // This makes the CCW in the main compartment (that roots our ErrorObject)
+      // become a dead proxy, removing the only reference to our ErrorObject.
+      nukeAllCCWs();
+
+      // Force a full GC to tenure the ErrorObject and compact heap.
+      // ErrorObject survives this GC because it's 'this' (on the C++ stack).
+      gc();
+      
+      // Set maxBytes to current gcBytes so the NEXT allocation triggers GC.
+      // The next GC will collect the ErrorObject, freeing its JSErrorReport.
+      gcparam('maxBytes', gcparam('gcBytes'));
+
+      // Return undefined (not a string) to force fallback to reportp->exnType
+      // and then reportp->newMessageString (both UAF after GC collects ErrorObject)
+      return undefined;
+    }
+  });
+
+  // Create the Error object in this compartment
+  this.err = new Error("finished");
+`);
+
+// Get a CCW (cross-compartment wrapper) to the ErrorObject.
+// Then clear the reference in compartment A so the only reference is through our CCW.
+// Then throw the foreign error at top level.
+var foreignError = g.err;
+g.err = null;
+throw foreignError;
diff --git a/js/src/jit-test/tests/gc/gcparam.js b/js/src/jit-test/tests/gc/gcparam.js
index cdacc2c2cef6e..46db3a836a3fb 100644
--- a/js/src/jit-test/tests/gc/gcparam.js
+++ b/js/src/jit-test/tests/gc/gcparam.js
@@ -63,3 +63,4 @@ testChangeParam("semispaceNurseryEnabled");
 testChangeParam("nurseryMaxTimeGoalMS");
 testChangeParam("storeBufferEntries");
 testChangeParam("storeBufferScaling");
+testChangeParam("incrementalWeakMapMarkingEnabled");
diff --git a/js/src/jit-test/tests/profiler/frame-line-column-numbers.js b/js/src/jit-test/tests/profiler/frame-line-column-numbers.js
new file mode 100644
index 0000000000000..d477a57524dbe
--- /dev/null
+++ b/js/src/jit-test/tests/profiler/frame-line-column-numbers.js
@@ -0,0 +1,69 @@
+// |jit-test| skip-if: !getJitCompilerOptions()['baseline.enable'] && !getJitCompilerOptions()['ion.enable']
+// Test that JIT frames (both Baseline and Ion) report accurate line and column
+// numbers when captured via the Gecko profiler. This verifies that the profiler
+// correctly attributes stack samples to the source line where execution occurs.
+
+setJitCompilerOption("baseline.warmup.trigger", 0);
+setJitCompilerOption("ion.warmup.trigger", 10);
+
+// Update these values if the line and column numbers of readGeckoProfilingStack
+// call inside testLoop changes.
+const EXPECTED_LINE = 22;
+const EXPECTED_COLUMN = 17;
+// Run enough iterations to ensure JIT compilation occurs.
+const ITERATION_COUNT = 100;
+const stacks = [];
+
+function testLoop() {
+  const items = Array.from({ length: ITERATION_COUNT }, (_, i) => i);
+
+  for (const item of items) {
+    Math.abs(item);
+    stacks.push(readGeckoProfilingStack());
+    Math.cos(item);
+  }
+}
+
+enableGeckoProfiling();
+testLoop();
+disableGeckoProfiling();
+
+assertEq(stacks.length, ITERATION_COUNT, "Should have captured the expected number of stacks");
+
+let stacksWithCorrectFrame = 0;
+let stacksWithIncorrectFrame = 0;
+
+// Now let's check that the `testLoop` frame line/column numbers are attributed
+// to the correct ones. We need to skip the baseline-interpreter frames because
+// the line/column number collection of them happens in a different location.
+for (const stack of stacks) {
+  for (const physicalFrame of stack) {
+    const testLoopFrame = physicalFrame.find(
+      frame =>
+        frame.label &&
+        frame.label.includes("testLoop") &&
+        frame.kind !== "baseline-interpreter"
+    );
+
+    if (testLoopFrame) {
+      if (
+        testLoopFrame.line === EXPECTED_LINE &&
+        testLoopFrame.column === EXPECTED_COLUMN
+      ) {
+        stacksWithCorrectFrame++;
+      } else {
+        print(
+          `ERROR: testLoop line ${testLoopFrame.line} and column ${testLoopFrame.column} is outside expected line ${EXPECTED_LINE} and column ${EXPECTED_COLUMN} (kind: ${testLoopFrame.kind})`
+        );
+        stacksWithIncorrectFrame++;
+      }
+    }
+  }
+}
+
+print(`Total stacks captured: ${stacks.length}`);
+print(`Stacks with correct testLoop frame: ${stacksWithCorrectFrame}`);
+print(`Stacks with incorrect testLoop frame: ${stacksWithIncorrectFrame}`);
+
+assertEq(stacksWithCorrectFrame > 0, true, "Should have captured some correct JIT frames");
+assertEq(stacksWithIncorrectFrame, 0, "All JIT frames should have correct line numbers");
diff --git a/js/src/jit/BaselineCodeGen.cpp b/js/src/jit/BaselineCodeGen.cpp
index 44473a3f7e83c..70f444188bf6a 100644
--- a/js/src/jit/BaselineCodeGen.cpp
+++ b/js/src/jit/BaselineCodeGen.cpp
@@ -265,6 +265,9 @@ MethodStatus BaselineCompiler::compile(JSContext* cx) {
   JitSpew(JitSpew_Codegen, "# Emitting baseline code for script %s:%u:%u",
           script->filename(), script->lineno(),
           script->column().oneOriginValue());
+  if (runtime->geckoProfiler().enabled()) {
+    masm.enableProfilingInstrumentation();
+  }
 
   MOZ_ASSERT(!script->hasBaselineScript());
 
@@ -892,8 +895,7 @@ bool BaselineCodeGen<Handler>::callVMInternal(VMFunctionId id,
     masm.push(FrameDescriptor(FrameType::BaselineJS));
   }
   // Perform the call.
-  masm.call(code);
-  uint32_t callOffset = masm.currentOffset();
+  uint32_t callOffset = masm.callJit(code);
 
   // Pop arguments from framePushed.
   masm.implicitPop(argSize);
@@ -1996,6 +1998,15 @@ void BaselineCodeGen<Handler>::emitProfilerExitFrame() {
   profilerExitFrameToggleOffset_ = toggleOffset;
 }
 
+template <typename Handler>
+void BaselineCodeGen<Handler>::emitProfilerCallSiteInstrumentation() {
+  if (!handler.needsProfilerCallSiteInstrumentation()) {
+    return;
+  }
+
+  masm.instrumentProfilerCallSite();
+}
+
 template <typename Handler>
 bool BaselineCodeGen<Handler>::emit_Nop() {
   return true;
@@ -4732,6 +4743,10 @@ template <>
 bool BaselineCompilerCodeGen::emitCall(JSOp op) {
   MOZ_ASSERT(IsInvokeOp(op));
 
+  // Record call site for profiler sampling. IC stub calls use raw masm.call()
+  // which doesn't automatically instrument, unlike callJit/callWithABI.
+  emitProfilerCallSiteInstrumentation();
+
   frame.syncStack(0);
 
   uint32_t argc = GET_ARGC(handler.pc());
@@ -4775,6 +4790,10 @@ template <typename Handler>
 bool BaselineCodeGen<Handler>::emitSpreadCall(JSOp op) {
   MOZ_ASSERT(IsInvokeOp(op));
 
+  // Record call site for profiler sampling. IC stub calls use raw masm.call()
+  // which doesn't automatically instrument, unlike callJit/callWithABI.
+  emitProfilerCallSiteInstrumentation();
+
   frame.syncStack(0);
   masm.move32(Imm32(1), R0.scratchReg());
 
diff --git a/js/src/jit/BaselineCodeGen.h b/js/src/jit/BaselineCodeGen.h
index 1f1e9e23a63c8..a59d2dcabdf04 100644
--- a/js/src/jit/BaselineCodeGen.h
+++ b/js/src/jit/BaselineCodeGen.h
@@ -289,6 +289,7 @@ class BaselineCodeGen {
 
   void emitProfilerEnterFrame();
   void emitProfilerExitFrame();
+  void emitProfilerCallSiteInstrumentation();
 
   void emitOutOfLinePostBarrierSlot();
 };
@@ -440,6 +441,8 @@ class BaselineCompilerHandler {
     return JS::Prefs::experimental_self_hosted_cache() &&
            script()->selfHosted();
   }
+
+  bool needsProfilerCallSiteInstrumentation() const { return true; }
 };
 
 using BaselineCompilerCodeGen = BaselineCodeGen<BaselineCompilerHandler>;
@@ -572,6 +575,8 @@ class BaselineInterpreterHandler {
   bool addEnvAllocSite() { return false; }  // Not supported.
 
   bool realmIndependentJitcode() const { return true; }
+
+  bool needsProfilerCallSiteInstrumentation() const { return false; }
 };
 
 using BaselineInterpreterCodeGen = BaselineCodeGen<BaselineInterpreterHandler>;
diff --git a/js/src/jit/BaselineIC.h b/js/src/jit/BaselineIC.h
index 5b469b300acfc..88de0e06ac73c 100644
--- a/js/src/jit/BaselineIC.h
+++ b/js/src/jit/BaselineIC.h
@@ -299,7 +299,9 @@ class ICCacheIRStub final : public ICStub {
   void trace(JSTracer* trc);
   bool traceWeak(JSTracer* trc);
 
-  ICCacheIRStub* clone(JSRuntime* rt, ICStubSpace& newSpace);
+  enum class ICScriptHandling { MarkActive, AssertActive };
+  ICCacheIRStub* clone(JSRuntime* rt, ICStubSpace& newSpace,
+                       ICScriptHandling icScriptHandling);
 
   // Returns true if this stub can call JS or VM code that can trigger a GC.
   bool makesGCCalls() const;
diff --git a/js/src/jit/CacheIR.cpp b/js/src/jit/CacheIR.cpp
index 3ae32cdc03c56..1946de3347629 100644
--- a/js/src/jit/CacheIR.cpp
+++ b/js/src/jit/CacheIR.cpp
@@ -242,6 +242,9 @@ uint32_t CacheIRCloner::getRawInt32Field(uint32_t stubOffset) {
 const void* CacheIRCloner::getRawPointerField(uint32_t stubOffset) {
   return reinterpret_cast<const void*>(readStubWord(stubOffset));
 }
+const ICScript* CacheIRCloner::getICScriptField(uint32_t stubOffset) {
+  return reinterpret_cast<const ICScript*>(readStubWord(stubOffset));
+}
 uint64_t CacheIRCloner::getRawInt64Field(uint32_t stubOffset) {
   return static_cast<uint64_t>(readStubInt64(stubOffset));
 }
diff --git a/js/src/jit/CacheIR.h b/js/src/jit/CacheIR.h
index 544e3cb76059a..893cc2c1801f2 100644
--- a/js/src/jit/CacheIR.h
+++ b/js/src/jit/CacheIR.h
@@ -241,6 +241,7 @@ class StubField {
     // These fields take up a single word.
     RawInt32,
     RawPointer,
+    ICScript,
     Shape,
     WeakShape,
     JSObject,
@@ -314,6 +315,8 @@ inline const char* StubFieldTypeName(StubField::Type ty) {
       return "RawInt32";
     case StubField::Type::RawPointer:
       return "RawPointer";
+    case StubField::Type::ICScript:
+      return "ICScript";
     case StubField::Type::Shape:
       return "Shape";
     case StubField::Type::WeakShape:
diff --git a/js/src/jit/CacheIRCloner.h b/js/src/jit/CacheIRCloner.h
index 2ecf37cc2f451..6ccb58619fde8 100644
--- a/js/src/jit/CacheIRCloner.h
+++ b/js/src/jit/CacheIRCloner.h
@@ -70,6 +70,7 @@ class MOZ_RAII CacheIRCloner {
   JitCode* getJitCodeField(uint32_t stubOffset);
   uint32_t getRawInt32Field(uint32_t stubOffset);
   const void* getRawPointerField(uint32_t stubOffset);
+  const ICScript* getICScriptField(uint32_t stubOffset);
   jsid getIdField(uint32_t stubOffset);
   Value getValueField(uint32_t stubOffset);
   Value getWeakValueField(uint32_t stubOffset);
diff --git a/js/src/jit/CacheIRCompiler.cpp b/js/src/jit/CacheIRCompiler.cpp
index 3a3825c4d9e93..0a4edd05f6200 100644
--- a/js/src/jit/CacheIRCompiler.cpp
+++ b/js/src/jit/CacheIRCompiler.cpp
@@ -1127,6 +1127,7 @@ static void InitWordStubField(StubField::Type type, void* dest,
   switch (type) {
     case StubField::Type::RawInt32:
     case StubField::Type::RawPointer:
+    case StubField::Type::ICScript:
     case StubField::Type::AllocSite:
       *static_cast<uintptr_t*>(dest) = value;
       break;
@@ -1188,6 +1189,7 @@ static void InitInt64StubField(StubField::Type type, void* dest,
       break;
     case StubField::Type::RawInt32:
     case StubField::Type::RawPointer:
+    case StubField::Type::ICScript:
     case StubField::Type::AllocSite:
     case StubField::Type::Shape:
     case StubField::Type::WeakShape:
@@ -1217,7 +1219,8 @@ void CacheIRWriter::copyStubData(uint8_t* dest) const {
   }
 }
 
-ICCacheIRStub* ICCacheIRStub::clone(JSRuntime* rt, ICStubSpace& newSpace) {
+ICCacheIRStub* ICCacheIRStub::clone(JSRuntime* rt, ICStubSpace& newSpace,
+                                    ICScriptHandling icScriptHandling) {
   const CacheIRStubInfo* info = stubInfo();
   MOZ_ASSERT(info->makesGCCalls());
 
@@ -1250,6 +1253,15 @@ ICCacheIRStub* ICCacheIRStub::clone(JSRuntime* rt, ICStubSpace& newSpace) {
       InitWordStubField(type, dest, *srcField);
       src += sizeof(uintptr_t);
       dest += sizeof(uintptr_t);
+      if (type == StubField::Type::ICScript) {
+        auto* icScript = reinterpret_cast<ICScript*>(*srcField);
+        if (icScriptHandling == ICScriptHandling::MarkActive) {
+          icScript->setActive();
+        } else {
+          MOZ_ASSERT(icScriptHandling == ICScriptHandling::AssertActive);
+          MOZ_RELEASE_ASSERT(icScript->active());
+        }
+      }
     } else {
       const uint64_t* srcField = reinterpret_cast<const uint64_t*>(src);
       InitInt64StubField(type, dest, *srcField);
@@ -1286,6 +1298,7 @@ void jit::TraceCacheIRStub(JSTracer* trc, T* stub,
     switch (fieldType) {
       case Type::RawInt32:
       case Type::RawPointer:
+      case Type::ICScript:
       case Type::RawInt64:
       case Type::Double:
         break;
@@ -1431,6 +1444,7 @@ bool jit::TraceWeakCacheIRStub(JSTracer* trc, T* stub,
         return !isDead;
       case Type::RawInt32:
       case Type::RawPointer:
+      case Type::ICScript:
       case Type::Shape:
       case Type::JSObject:
       case Type::Symbol:
diff --git a/js/src/jit/CacheIROps.yaml b/js/src/jit/CacheIROps.yaml
index 2c9ace661579b..310b08360a73b 100644
--- a/js/src/jit/CacheIROps.yaml
+++ b/js/src/jit/CacheIROps.yaml
@@ -2064,7 +2064,7 @@
     receiver: ObjId
     callee: ObjId
     rhs: ValId
-    icScript: RawPointerField
+    icScript: ICScriptField
     sameRealm: BoolImm
     nargsAndFlags: RawInt32Field
 
@@ -2257,7 +2257,7 @@
   args:
     callee: ObjId
     argc: Int32Id
-    icScript: RawPointerField
+    icScript: ICScriptField
     flags: CallFlagsImm
     argcFixed: UInt32Imm
 
@@ -2704,7 +2704,7 @@
   args:
     receiver: ValId
     callee: ObjId
-    icScript: RawPointerField
+    icScript: ICScriptField
     sameRealm: BoolImm
     nargsAndFlags: RawInt32Field
 
diff --git a/js/src/jit/CacheIRWriter.h b/js/src/jit/CacheIRWriter.h
index d0b9cc4c0645e..9d52f04dab816 100644
--- a/js/src/jit/CacheIRWriter.h
+++ b/js/src/jit/CacheIRWriter.h
@@ -237,6 +237,9 @@ class MOZ_RAII CacheIRWriter : public JS::CustomAutoRooter {
   void writeRawPointerField(const void* ptr) {
     addStubField(uintptr_t(ptr), StubField::Type::RawPointer);
   }
+  void writeICScriptField(const ICScript* icScript) {
+    addStubField(uintptr_t(icScript), StubField::Type::ICScript);
+  }
   void writeIdField(jsid id) {
     addStubField(id.asRawBits(), StubField::Type::Id);
   }
diff --git a/js/src/jit/GenerateCacheIRFiles.py b/js/src/jit/GenerateCacheIRFiles.py
index 40c3b504530dd..6ed6a20aae504 100644
--- a/js/src/jit/GenerateCacheIRFiles.py
+++ b/js/src/jit/GenerateCacheIRFiles.py
@@ -75,6 +75,7 @@ def load_yaml(yaml_path):
     "JitCodeField": ("JitCode*", "writeJitCodeField"),
     "RawInt32Field": ("uint32_t", "writeRawInt32Field"),
     "RawPointerField": ("const void*", "writeRawPointerField"),
+    "ICScriptField": ("const ICScript*", "writeICScriptField"),
     "IdField": ("jsid", "writeIdField"),
     "ValueField": ("const Value&", "writeValueField"),
     "WeakValueField": ("const Value&", "writeWeakValueField"),
@@ -181,6 +182,7 @@ def gen_writer_method(name, args, custom_writer):
     "JitCodeField": ("uint32_t", "Offset", "reader.stubOffset()"),
     "RawInt32Field": ("uint32_t", "Offset", "reader.stubOffset()"),
     "RawPointerField": ("uint32_t", "Offset", "reader.stubOffset()"),
+    "ICScriptField": ("uint32_t", "Offset", "reader.stubOffset()"),
     "IdField": ("uint32_t", "Offset", "reader.stubOffset()"),
     "ValueField": ("uint32_t", "Offset", "reader.stubOffset()"),
     "WeakValueField": ("uint32_t", "Offset", "reader.stubOffset()"),
@@ -326,6 +328,7 @@ def gen_reader_method(name, args):
     "JitCodeField": "spewField",
     "RawInt32Field": "spewField",
     "RawPointerField": "spewField",
+    "ICScriptField": "spewField",
     "IdField": "spewField",
     "ValueField": "spewField",
     "WeakValueField": "spewField",
@@ -469,6 +472,7 @@ def gen_clone_method(name, args):
     "JitCodeField": 1,
     "RawInt32Field": 1,
     "RawPointerField": 1,
+    "ICScriptField": 1,
     "RawInt64Field": 1,
     "DoubleField": 1,
     "IdField": 1,
diff --git a/js/src/jit/Ion.cpp b/js/src/jit/Ion.cpp
index bbde1d3e7e256..2078fd70e657f 100644
--- a/js/src/jit/Ion.cpp
+++ b/js/src/jit/Ion.cpp
@@ -1815,7 +1815,7 @@ static AbortReason IonCompile(JSContext* cx, HandleScript script,
   }
 
   auto clearDependencies =
-      mozilla::MakeScopeExit([mirGen]() { mirGen->tracker.reset(); });
+      mozilla::MakeScopeExit([mirGen]() { mirGen->cleanup(); });
 
   MOZ_ASSERT(!script->baselineScript()->hasPendingIonCompileTask());
   MOZ_ASSERT(!script->hasIonScript());
diff --git a/js/src/jit/IonCompileTask.cpp b/js/src/jit/IonCompileTask.cpp
index f42a7183b6b84..4f09701c494c6 100644
--- a/js/src/jit/IonCompileTask.cpp
+++ b/js/src/jit/IonCompileTask.cpp
@@ -156,7 +156,7 @@ void jit::AttachFinishedCompilations(JSContext* cx) {
 static UniquePtr<LifoAlloc> FreeIonCompileTask(IonCompileTask* task) {
   // To correctly free compilation dependencies, which may have virtual
   // destructors we need to explicitly empty the MIRGenerator's list here.
-  task->mirGen().tracker.reset();
+  task->mirGen().cleanup();
 
   // The task is allocated into its LifoAlloc, so destroying that will
   // destroy the task and all other data accumulated during compilation,
diff --git a/js/src/jit/JitScript.cpp b/js/src/jit/JitScript.cpp
index dc4151e258130..55b3e0c08c27e 100644
--- a/js/src/jit/JitScript.cpp
+++ b/js/src/jit/JitScript.cpp
@@ -552,7 +552,8 @@ void ICScript::purgeStubs(Zone* zone, ICStubSpace& newStubSpace) {
       ICCacheIRStub* prev = nullptr;
       ICStub* stub = entry.firstStub();
       while (stub != fallback) {
-        ICCacheIRStub* clone = stub->toCacheIRStub()->clone(rt, newStubSpace);
+        ICCacheIRStub* clone = stub->toCacheIRStub()->clone(
+            rt, newStubSpace, ICCacheIRStub::ICScriptHandling::AssertActive);
         if (prev) {
           prev->setNext(clone);
         } else {
@@ -771,26 +772,26 @@ static void MarkActiveICScriptsAndCopyStubs(
           ICCacheIRStub* stub = layout->maybeStubPtr()->toCacheIRStub();
           auto lookup = alreadyClonedStubs.lookupForAdd(stub);
           if (!lookup) {
-            ICCacheIRStub* newStub = stub->clone(cx->runtime(), newStubSpace);
+            ICCacheIRStub* newStub =
+                stub->clone(cx->runtime(), newStubSpace,
+                            ICCacheIRStub::ICScriptHandling::MarkActive);
             AutoEnterOOMUnsafeRegion oomUnsafe;
             if (!alreadyClonedStubs.add(lookup, stub, newStub)) {
               oomUnsafe.crash("MarkActiveICScriptsAndCopyStubs");
             }
           }
           layout->setStubPtr(lookup->value());
-
-          // If this is a trial-inlining call site, also preserve the callee
-          // ICScript. Inlined constructor calls invoke CreateThisFromIC (which
-          // can trigger GC) before using the inlined ICScript.
+#ifdef DEBUG
           JSJitFrameIter parentFrame(frame);
           ++parentFrame;
           BaselineFrame* blFrame = parentFrame.baselineFrame();
           jsbytecode* pc;
           parentFrame.baselineScriptAndPc(nullptr, &pc);
           uint32_t pcOffset = blFrame->script()->pcToOffset(pc);
-          if (blFrame->icScript()->hasInlinedChild(pcOffset)) {
-            blFrame->icScript()->findInlinedChild(pcOffset)->setActive();
-          }
+          ICScript* icScript = blFrame->icScript();
+          MOZ_ASSERT_IF(icScript->hasInlinedChild(pcOffset),
+                        icScript->findInlinedChild(pcOffset)->active());
+#endif
         }
         break;
       }
diff --git a/js/src/jit/JitcodeMap.cpp b/js/src/jit/JitcodeMap.cpp
index 6d4bce2efd33d..c421597cb8391 100644
--- a/js/src/jit/JitcodeMap.cpp
+++ b/js/src/jit/JitcodeMap.cpp
@@ -15,6 +15,8 @@
 #include "jit/InlineScriptTree.h"
 #include "jit/JitRuntime.h"
 #include "jit/JitSpewer.h"
+#include "js/JitCodeAPI.h"
+#include "js/ProfilingFrameIterator.h"
 #include "js/Vector.h"
 #include "vm/BytecodeLocation.h"  // for BytecodeLocation
 #include "vm/GeckoProfiler.h"
@@ -27,6 +29,35 @@ using mozilla::Maybe;
 namespace js {
 namespace jit {
 
+static void GetLineInfoFromJitCodeRecord(uint64_t addr, uint32_t* line,
+                                         uint32_t* column) {
+  JS::JitCodeRecord* record = JS::LookupJitCodeRecord(addr);
+  if (!record || record->sourceInfo.empty()) {
+    *line = 0;
+    *column = 0;
+    return;
+  }
+
+  // Calculate offset from the base address
+  uint32_t codeOffset = addr - record->code_addr;
+
+  // Binary search for the largest offset <= codeOffset
+  // We know for sure that sourceInfo is sorted by offset.
+  auto* it = std::upper_bound(
+      record->sourceInfo.begin(), record->sourceInfo.end(), codeOffset,
+      [](uint32_t offset, const JS::JitCodeSourceInfo& info) {
+        return offset < info.offset;
+      });
+
+  // Upper_bound returns first element > codeOffset, so go back one.
+  if (it != record->sourceInfo.begin()) {
+    --it;
+  }
+
+  *line = it->lineno;
+  *column = it->colno.oneOriginValue();
+}
+
 static inline JitcodeRegionEntry RegionAtAddr(const IonEntry& entry, void* ptr,
                                               uint32_t* ptrOffset) {
   MOZ_ASSERT(entry.containsPointer(ptr));
@@ -63,6 +94,29 @@ uint32_t IonEntry::callStackAtAddr(void* ptr, CallStackFrameInfo* results,
 
     results[count].label = getStr(scriptIdx);
     results[count].sourceId = getScriptSource(scriptIdx).scriptSource->id();
+
+    // Calculate line numbers during sampling
+    // For the first entry (innermost frame), use precise PC offset from
+    // delta-run
+    if (count == 0) {
+      pcOffset = region.findPcOffset(ptrOffset, pcOffset);
+    }
+
+    const IonScriptData& scriptData = getScriptData(scriptIdx);
+    ImmutableScriptData* isd = scriptData.sharedData->get();
+    jsbytecode* code = isd->code();
+    jsbytecode* pc = code + pcOffset;
+    MOZ_ASSERT(pcOffset < isd->codeLength());
+
+    SrcNote* notes = isd->notes();
+    SrcNote* notesEnd = notes + isd->noteLength();
+
+    JS::LimitedColumnNumberOneOrigin col;
+    uint32_t line = PCToLineNumber(scriptData.lineno, scriptData.column, notes,
+                                   notesEnd, code, pc, &col);
+    results[count].line = line;
+    results[count].column = col.oneOriginValue();
+
     count++;
     if (count >= maxResults) {
       break;
@@ -119,6 +173,10 @@ uint32_t BaselineEntry::callStackAtAddr(void* ptr, CallStackFrameInfo* results,
 
   results[0].label = str();
   results[0].sourceId = scriptSource().scriptSource->id();
+  uint64_t addr = reinterpret_cast<uint64_t>(ptr);
+
+  GetLineInfoFromJitCodeRecord(addr, &results[0].line, &results[0].column);
+
   return 1;
 }
 
@@ -156,6 +214,8 @@ uint32_t RealmIndependentSharedEntry::callStackAtAddr(
 
   results[0].label = str();
   results[0].sourceId = 0;
+  results[0].line = 0;
+  results[0].column = 0;
   return 1;
 }
 
@@ -690,7 +750,8 @@ bool JitcodeRegionEntry::WriteRun(CompactBufferWriter& writer,
       // NB: scriptList is guaranteed to contain curTree->script()
       uint32_t scriptIdx = 0;
       for (; scriptIdx < scriptList.length(); scriptIdx++) {
-        if (scriptList[scriptIdx].sourceAndExtent.matches(curTree->script())) {
+        if (scriptList[scriptIdx].scriptData.sourceAndExtent.matches(
+                curTree->script())) {
           break;
         }
       }
@@ -870,18 +931,18 @@ bool JitcodeIonTable::WriteIonTable(CompactBufferWriter& writer,
 
   JitSpew(JitSpew_Profiling,
           "Writing native to bytecode map for %s (offset %u-%u) (%zu entries)",
-          scriptList[0].sourceAndExtent.scriptSource->filename(),
-          scriptList[0].sourceAndExtent.toStringStart,
-          scriptList[0].sourceAndExtent.toStringEnd,
+          scriptList[0].scriptData.sourceAndExtent.scriptSource->filename(),
+          scriptList[0].scriptData.sourceAndExtent.toStringStart,
+          scriptList[0].scriptData.sourceAndExtent.toStringEnd,
           mozilla::PointerRangeSize(start, end));
 
   JitSpew(JitSpew_Profiling, "  ScriptList of size %u",
           unsigned(scriptList.length()));
   for (uint32_t i = 0; i < scriptList.length(); i++) {
     JitSpew(JitSpew_Profiling, "  Script %u - %s (offset %u-%u)", i,
-            scriptList[i].sourceAndExtent.scriptSource->filename(),
-            scriptList[i].sourceAndExtent.toStringStart,
-            scriptList[i].sourceAndExtent.toStringEnd);
+            scriptList[i].scriptData.sourceAndExtent.scriptSource->filename(),
+            scriptList[i].scriptData.sourceAndExtent.toStringStart,
+            scriptList[i].scriptData.sourceAndExtent.toStringEnd);
   }
 
   // Write out runs first.  Keep a vector tracking the positive offsets from
@@ -956,16 +1017,14 @@ bool JitcodeIonTable::WriteIonTable(CompactBufferWriter& writer,
 }  // namespace jit
 }  // namespace js
 
-JS::ProfiledFrameHandle::ProfiledFrameHandle(JSRuntime* rt,
-                                             js::jit::JitcodeGlobalEntry& entry,
-                                             void* addr, const char* label,
-                                             uint32_t sourceId, uint32_t depth)
+JS::ProfiledFrameHandle::ProfiledFrameHandle(
+    JSRuntime* rt, js::jit::JitcodeGlobalEntry& entry, void* addr,
+    const js::jit::CallStackFrameInfo& frameInfo, uint32_t depth)
     : rt_(rt),
       entry_(entry),
       addr_(addr),
       canonicalAddr_(nullptr),
-      label_(label),
-      sourceId_(sourceId),
+      frameInfo_(frameInfo),
       depth_(depth) {
   if (!canonicalAddr_) {
     canonicalAddr_ = entry_.canonicalNativeAddrFor(rt_, addr_);
@@ -990,10 +1049,6 @@ JS_PUBLIC_API uint64_t JS::ProfiledFrameHandle::realmID() const {
   return entry_.realmID(rt_);
 }
 
-JS_PUBLIC_API uint32_t JS::ProfiledFrameHandle::sourceId() const {
-  return sourceId_;
-}
-
 JS_PUBLIC_API JS::ProfiledFrameRange JS::GetProfiledFrames(JSContext* cx,
                                                            void* addr) {
   // Ensure ProfiledFrameRange::MaxInliningDepth matches
@@ -1022,6 +1077,5 @@ JS::ProfiledFrameHandle JS::ProfiledFrameRange::Iter::operator*() const {
   // and the depth we need to pass to ProfiledFrameHandle goes down.
   uint32_t depth = range_.depth_ - 1 - index_;
   return ProfiledFrameHandle(range_.rt_, *range_.entry_, range_.addr_,
-                             range_.frames_[depth].label,
-                             range_.frames_[depth].sourceId, depth);
+                             range_.frames_[depth], depth);
 }
diff --git a/js/src/jit/JitcodeMap.h b/js/src/jit/JitcodeMap.h
index 1d686a80740c5..87553289b101a 100644
--- a/js/src/jit/JitcodeMap.h
+++ b/js/src/jit/JitcodeMap.h
@@ -233,13 +233,26 @@ struct ScriptSourceAndExtent {
   }
 };
 
+struct IonScriptData {
+  ScriptSourceAndExtent sourceAndExtent;
+  RefPtr<SharedImmutableScriptData> sharedData;
+  uint32_t lineno;
+  JS::LimitedColumnNumberOneOrigin column;
+
+  explicit IonScriptData(JSScript* script)
+      : sourceAndExtent(script),
+        sharedData(script->sharedData()),
+        lineno(script->lineno()),
+        column(script->column()) {}
+};
+
 class IonEntry : public JitcodeGlobalEntry {
  public:
   struct ScriptListEntry {
-    ScriptSourceAndExtent sourceAndExtent;
+    IonScriptData scriptData;
     UniqueChars str;
     ScriptListEntry(JSScript* script, UniqueChars str)
-        : sourceAndExtent(script), str(std::move(str)) {}
+        : scriptData(script), str(std::move(str)) {}
   };
 
   using ScriptList = Vector<ScriptListEntry, 2, SystemAllocPolicy>;
@@ -275,7 +288,12 @@ class IonEntry : public JitcodeGlobalEntry {
 
   const ScriptSourceAndExtent& getScriptSource(unsigned idx) const {
     MOZ_ASSERT(idx < numScripts());
-    return scriptList_[idx].sourceAndExtent;
+    return scriptList_[idx].scriptData.sourceAndExtent;
+  }
+
+  const IonScriptData& getScriptData(unsigned idx) const {
+    MOZ_ASSERT(idx < numScripts());
+    return scriptList_[idx].scriptData;
   }
 
   const char* getStr(unsigned idx) const {
@@ -291,8 +309,6 @@ class IonEntry : public JitcodeGlobalEntry {
                            uint32_t maxResults) const;
 
   uint64_t realmID() const { return realmId_; }
-
-  bool trace(JSTracer* trc);
 };
 
 class IonICEntry : public JitcodeGlobalEntry {
@@ -317,8 +333,6 @@ class IonICEntry : public JitcodeGlobalEntry {
                            uint32_t maxResults) const;
 
   uint64_t realmID(JSRuntime* rt) const;
-
-  bool trace(JSTracer* trc);
 };
 
 class BaselineEntry : public JitcodeGlobalEntry {
@@ -347,8 +361,6 @@ class BaselineEntry : public JitcodeGlobalEntry {
                            uint32_t maxResults) const;
 
   uint64_t realmID() const { return realmId_; }
-
-  bool trace(JSTracer* trc);
 };
 
 class RealmIndependentSharedEntry : public JitcodeGlobalEntry {
diff --git a/js/src/jit/MIRGenerator.h b/js/src/jit/MIRGenerator.h
index 3bc1c406f48f1..ad5118bd17ef0 100644
--- a/js/src/jit/MIRGenerator.h
+++ b/js/src/jit/MIRGenerator.h
@@ -189,6 +189,14 @@ class MIRGenerator final {
   void spewPass(const char* name, BacktrackingAllocator* ra = nullptr);
   void spewEndFunction();
 
+  // Explicitly reset compilation dependencies and perf spewer debug info.
+  // This must be called to correctly free compilation dependencies, which may
+  // have virtual destructors.
+  void cleanup() {
+    tracker.reset();
+    perfSpewer().reset();
+  }
+
   CompilationDependencyTracker tracker;
 };
 
diff --git a/js/src/jit/MacroAssembler.cpp b/js/src/jit/MacroAssembler.cpp
index 8fbadd64d412f..6bc0d3c45d344 100644
--- a/js/src/jit/MacroAssembler.cpp
+++ b/js/src/jit/MacroAssembler.cpp
@@ -4469,6 +4469,10 @@ void MacroAssembler::link(JitCode* code) {
   linkProfilerCallSites(code);
 }
 
+void MacroAssembler::instrumentProfilerCallSite() {
+  AutoProfilerCallInstrumentation profiler(*this);
+}
+
 MacroAssembler::AutoProfilerCallInstrumentation::
     AutoProfilerCallInstrumentation(MacroAssembler& masm) {
   if (!masm.emitProfilingInstrumentation_) {
diff --git a/js/src/jit/MacroAssembler.h b/js/src/jit/MacroAssembler.h
index 3ac00b8528dbb..a25bc26553fd2 100644
--- a/js/src/jit/MacroAssembler.h
+++ b/js/src/jit/MacroAssembler.h
@@ -5964,6 +5964,8 @@ class MacroAssembler : public MacroAssemblerSpecific {
     emitProfilingInstrumentation_ = true;
   }
 
+  void instrumentProfilerCallSite();
+
  private:
   // This class is used to surround call sites throughout the assembler. This
   // is used by callWithABI, and callJit functions, except if suffixed by
diff --git a/js/src/jit/PerfSpewer.cpp b/js/src/jit/PerfSpewer.cpp
index 715b7f95e514b..a66fa38278321 100644
--- a/js/src/jit/PerfSpewer.cpp
+++ b/js/src/jit/PerfSpewer.cpp
@@ -72,6 +72,7 @@ pid_t gettid_pthread() {
 #include "jit/MIR-wasm.h"
 #include "jit/MIR.h"
 #include "js/ColumnNumber.h"  // JS::LimitedColumnNumberOneOrigin, JS::ColumnNumberOffset
+#include "js/JitCodeAPI.h"
 #include "js/Printf.h"
 #include "vm/BytecodeUtil.h"
 #include "vm/MutexIDs.h"
@@ -100,12 +101,19 @@ using namespace js::jit;
 
 enum class PerfModeType { None, Function, Source, IR, IROperands, IRGraph };
 
+static std::atomic<bool> geckoProfiling = false;
 static std::atomic<PerfModeType> PerfMode = PerfModeType::None;
 
 // Mutex to guard access to the profiler vectors and jitdump file if perf
 // profiling is enabled.
 MOZ_RUNINIT static js::Mutex PerfMutex(mutexid::PerfSpewer);
 
+MOZ_RUNINIT static PersistentRooted<
+    GCVector<JitCode*, 0, js::SystemAllocPolicy>>
+    jitCodeVector;
+MOZ_RUNINIT static ProfilerJitCodeVector profilerData;
+
+static bool IsGeckoProfiling() { return geckoProfiling; }
 #ifdef JS_ION_PERF
 MOZ_RUNINIT static UniqueChars spew_dir;
 static FILE* JitDumpFilePtr = nullptr;
@@ -352,12 +360,27 @@ void PerfSpewer::Init() {
 #endif
 }
 
+static void ResetPerfSpewer(AutoLockPerfSpewer& lock, bool enabled) {
+  profilerData.clear();
+  jitCodeVector.clear();
+  geckoProfiling = enabled;
+}
+
+void js::jit::ResetPerfSpewer(bool enabled) {
+  AutoLockPerfSpewer lock;
+  ::ResetPerfSpewer(lock, enabled);
+}
+
 static void DisablePerfSpewer(AutoLockPerfSpewer& lock) {
   fprintf(stderr, "Warning: Disabling PerfSpewer.");
 
 #ifdef XP_WIN
   etwCollection = false;
 #endif
+  ResetPerfSpewer(lock, false);
+  if (PerfMode == PerfModeType::None) {
+    return;
+  }
   PerfMode = PerfModeType::None;
 #ifdef JS_ION_PERF
   long page_size = sysconf(_SC_PAGESIZE);
@@ -374,7 +397,55 @@ static void DisablePerfSpewer() {
   DisablePerfSpewer(lock);
 }
 
-static bool PerfSrcEnabled() { return PerfMode == PerfModeType::Source; }
+static bool MaybeCreateProfilerEntry(AutoLockPerfSpewer& lock,
+                                     JS::JitCodeRecord*& outProfilerRecord) {
+  outProfilerRecord = nullptr;
+  if (!IsGeckoProfiling()) {
+    return true;
+  }
+
+  if (!profilerData.growBy(1)) {
+    DisablePerfSpewer(lock);
+    return false;
+  }
+
+  outProfilerRecord = &profilerData.back();
+  return true;
+}
+
+static JS::JitCodeSourceInfo* CreateProfilerSourceEntry(
+    JS::JitCodeRecord* record, AutoLockPerfSpewer& lock) {
+  MOZ_ASSERT(record);
+
+  if (!record->sourceInfo.growBy(1)) {
+    DisablePerfSpewer(lock);
+    return nullptr;
+  }
+  return &record->sourceInfo.back();
+}
+
+// API to lookup JitCode data for the Gecko Profiler.
+JS::JitCodeRecord* JS::LookupJitCodeRecord(uint64_t addr) {
+  if (!JS_IsInitialized()) {
+    return nullptr;
+  }
+
+  AutoLockPerfSpewer lock;
+
+  // Search through profilerData for a record that contains this address
+  for (auto& record : profilerData) {
+    if (addr >= record.code_addr &&
+        addr < record.code_addr + record.instructionSize) {
+      return &record;
+    }
+  }
+
+  return nullptr;
+}
+
+static bool PerfSrcEnabled() {
+  return PerfMode == PerfModeType::Source || IsGeckoProfiling();
+}
 
 #ifdef JS_JITSPEW
 static bool PerfIROpsEnabled() { return PerfMode == PerfModeType::IROperands; }
@@ -387,7 +458,9 @@ static bool PerfIREnabled() {
          (PerfMode == PerfModeType::IR);
 }
 
-bool js::jit::PerfEnabled() { return PerfMode != PerfModeType::None; }
+bool js::jit::PerfEnabled() {
+  return PerfMode != PerfModeType::None || IsGeckoProfiling();
+}
 
 void InlineCachePerfSpewer::recordInstruction(MacroAssembler& masm,
                                               const CacheOp& op) {
@@ -672,13 +745,23 @@ const char* InlineCachePerfSpewer::CodeName(uint32_t op) {
 }
 
 void PerfSpewer::CollectJitCodeInfo(UniqueChars& function_name, JitCode* code,
+                                    JS::JitCodeRecord* maybeProfilerRecord,
                                     AutoLockPerfSpewer& lock) {
+  // Hold the JitCode objects here so they are not GC'd during profiling.
+  if (IsGeckoProfiling()) {
+    if (!jitCodeVector.append(code)) {
+      DisablePerfSpewer(lock);
+      return;
+    }
+  }
+
   CollectJitCodeInfo(function_name, reinterpret_cast<void*>(code->raw()),
-                     code->instructionsSize(), lock);
+                     code->instructionsSize(), maybeProfilerRecord, lock);
 }
 
 void PerfSpewer::CollectJitCodeInfo(UniqueChars& function_name, void* code_addr,
                                     uint64_t code_size,
+                                    JS::JitCodeRecord* maybeProfilerRecord,
                                     AutoLockPerfSpewer& lock) {
 #ifdef JS_ION_PERF
   static uint64_t codeIndex = 1;
@@ -747,6 +830,12 @@ void PerfSpewer::CollectJitCodeInfo(UniqueChars& function_name, void* code_addr,
     }
   }
 #endif
+
+  if (IsGeckoProfiling()) {
+    MOZ_ASSERT(maybeProfilerRecord);
+    maybeProfilerRecord->instructionSize = code_size;
+    maybeProfilerRecord->code_addr = uint64_t(code_addr);
+  }
 }
 
 void PerfSpewer::recordOffset(MacroAssembler& masm, const char* msg) {
@@ -792,30 +881,65 @@ void PerfSpewer::recordOpcode(uint32_t offset, JS::UniqueChars&& str) {
 }
 
 void PerfSpewer::saveDebugInfo(const char* filename, uintptr_t base,
+                               JS::JitCodeRecord* maybeProfilerRecord,
                                AutoLockPerfSpewer& lock) {
 #ifdef JS_ION_PERF
-  if (!IsPerfProfiling()) {
-    return;
+  if (IsPerfProfiling()) {
+    JitDumpDebugRecord debug_record = {};
+
+    uint64_t n_records = debugInfo_.length();
+
+    debug_record.header.id = JIT_CODE_DEBUG_INFO;
+    debug_record.header.total_size =
+        sizeof(debug_record) +
+        n_records * (sizeof(JitDumpDebugEntry) + strlen(filename) + 1);
+    debug_record.header.timestamp = GetMonotonicTimestamp();
+    debug_record.code_addr = uint64_t(base);
+    debug_record.nr_entry = n_records;
+
+    WriteToJitDumpFile(&debug_record, sizeof(debug_record), lock);
+    for (DebugEntry& entry : debugInfo_) {
+      WriteJitDumpDebugEntry(uint64_t(base) + entry.offset, filename,
+                             entry.line, entry.column, lock);
+    }
   }
+#endif
 
-  JitDumpDebugRecord debug_record = {};
+  // Populate profiler record with source info
+  if (maybeProfilerRecord) {
+#ifdef DEBUG
+    uint32_t lastOffset = 0;
+#endif
+    uint32_t lastLine = 0;
+    uint32_t lastColumn = 0;
+
+    for (DebugEntry& entry : debugInfo_) {
+      MOZ_ASSERT(entry.offset >= lastOffset,
+                 "debugInfo_ must be sorted by offset");
+#ifdef DEBUG
+      lastOffset = entry.offset;
+#endif
 
-  uint64_t n_records = debugInfo_.length();
+      // Skip consecutive entries with the same line/column to reduce memory
+      // usage and improve binary search performance.
+      if (entry.line == lastLine && entry.column == lastColumn) {
+        continue;
+      }
 
-  debug_record.header.id = JIT_CODE_DEBUG_INFO;
-  debug_record.header.total_size =
-      sizeof(debug_record) +
-      n_records * (sizeof(JitDumpDebugEntry) + strlen(filename) + 1);
-  debug_record.header.timestamp = GetMonotonicTimestamp();
-  debug_record.code_addr = uint64_t(base);
-  debug_record.nr_entry = n_records;
+      JS::JitCodeSourceInfo* srcInfo =
+          CreateProfilerSourceEntry(maybeProfilerRecord, lock);
+      if (!srcInfo) {
+        return;
+      }
+      srcInfo->offset = entry.offset;
+      srcInfo->lineno = entry.line;
+      srcInfo->colno = JS::LimitedColumnNumberOneOrigin::fromUnlimited(
+          entry.column == 0 ? 1 : entry.column);
 
-  WriteToJitDumpFile(&debug_record, sizeof(debug_record), lock);
-  for (DebugEntry& entry : debugInfo_) {
-    WriteJitDumpDebugEntry(uint64_t(base) + entry.offset, filename, entry.line,
-                           entry.column, lock);
+      lastLine = entry.line;
+      lastColumn = entry.column;
+    }
   }
-#endif
 }
 
 static UniqueChars GetFunctionDesc(const char* tierName, JSContext* cx,
@@ -839,6 +963,7 @@ static UniqueChars GetFunctionDesc(const char* tierName, JSContext* cx,
 }
 
 void PerfSpewer::saveJitCodeDebugInfo(JSScript* script, JitCode* code,
+                                      JS::JitCodeRecord* maybeProfilerRecord,
                                       AutoLockPerfSpewer& lock) {
   MOZ_ASSERT(code);
 
@@ -848,17 +973,20 @@ void PerfSpewer::saveJitCodeDebugInfo(JSScript* script, JitCode* code,
   if (PerfIREnabled()) {
     // We should have generated a debug file to use here.
     MOZ_ASSERT(irFileName_.get());
-    saveDebugInfo(irFileName_.get(), uintptr_t(code->raw()), lock);
+    saveDebugInfo(irFileName_.get(), uintptr_t(code->raw()),
+                  maybeProfilerRecord, lock);
     return;
   }
 
   if (!PerfSrcEnabled() || !script || !script->filename()) {
     return;
   }
-  saveDebugInfo(script->filename(), uintptr_t(code->raw()), lock);
+  saveDebugInfo(script->filename(), uintptr_t(code->raw()), maybeProfilerRecord,
+                lock);
 }
 
 void PerfSpewer::saveWasmCodeDebugInfo(uintptr_t base,
+                                       JS::JitCodeRecord* maybeProfilerRecord,
                                        AutoLockPerfSpewer& lock) {
   // We should be done with the temp IR file, if we were using it.
   MOZ_ASSERT(!irFile_);
@@ -866,7 +994,7 @@ void PerfSpewer::saveWasmCodeDebugInfo(uintptr_t base,
   if (!PerfIREnabled()) {
     return;
   }
-  saveDebugInfo(irFileName_.get(), base, lock);
+  saveDebugInfo(irFileName_.get(), base, maybeProfilerRecord, lock);
 }
 
 void PerfSpewer::saveJSProfile(JitCode* code, UniqueChars& desc,
@@ -874,9 +1002,13 @@ void PerfSpewer::saveJSProfile(JitCode* code, UniqueChars& desc,
   MOZ_ASSERT(PerfEnabled());
   MOZ_ASSERT(code && desc);
   AutoLockPerfSpewer lock;
+  JS::JitCodeRecord* maybeProfilerRecord = nullptr;
+  if (!MaybeCreateProfilerEntry(lock, maybeProfilerRecord)) {
+    return;  // Allocation failure.
+  }
 
-  saveJitCodeDebugInfo(script, code, lock);
-  CollectJitCodeInfo(desc, code, lock);
+  saveJitCodeDebugInfo(script, code, maybeProfilerRecord, lock);
+  CollectJitCodeInfo(desc, code, maybeProfilerRecord, lock);
 }
 
 void PerfSpewer::saveWasmProfile(uintptr_t base, size_t size,
@@ -884,16 +1016,18 @@ void PerfSpewer::saveWasmProfile(uintptr_t base, size_t size,
   MOZ_ASSERT(PerfEnabled());
   MOZ_ASSERT(desc);
   AutoLockPerfSpewer lock;
+  JS::JitCodeRecord* maybeProfilerRecord = nullptr;
+  if (!MaybeCreateProfilerEntry(lock, maybeProfilerRecord)) {
+    return;  // Allocation failure.
+  }
 
-  saveWasmCodeDebugInfo(base, lock);
+  saveWasmCodeDebugInfo(base, maybeProfilerRecord, lock);
   PerfSpewer::CollectJitCodeInfo(desc, reinterpret_cast<void*>(base),
-                                 uint64_t(size), lock);
+                                 uint64_t(size), maybeProfilerRecord, lock);
 }
 
 void PerfSpewer::disable(AutoLockPerfSpewer& lock) {
-  endRecording();
-  debugInfo_.clear();
-  irFileName_ = UniqueChars();
+  reset();
   DisablePerfSpewer(lock);
 }
 
@@ -937,8 +1071,8 @@ void PerfSpewer::endRecording() {
 }
 
 PerfSpewer::~PerfSpewer() {
-  // Close the file, if it hasn't yet.
-  endRecording();
+  // Free the allocated resources if they haven’t been freed yet.
+  reset();
 }
 
 PerfSpewer::PerfSpewer(PerfSpewer&& other) {
@@ -978,6 +1112,10 @@ void IonICPerfSpewer::saveProfile(JSContext* cx, JSScript* script,
     return;
   }
   UniqueChars desc = GetFunctionDesc("IonIC", cx, script, stubName);
+  if (!desc) {
+    disable();
+    return;
+  }
   PerfSpewer::saveJSProfile(code, desc, script);
 }
 
@@ -986,6 +1124,10 @@ void BaselineICPerfSpewer::saveProfile(JitCode* code, const char* stubName) {
     return;
   }
   UniqueChars desc = JS_smprintf("BaselineIC: %s", stubName);
+  if (!desc) {
+    disable();
+    return;
+  }
   PerfSpewer::saveJSProfile(code, desc, nullptr);
 }
 
@@ -995,6 +1137,10 @@ void BaselinePerfSpewer::saveProfile(JSContext* cx, JSScript* script,
     return;
   }
   UniqueChars desc = GetFunctionDesc("Baseline", cx, script);
+  if (!desc) {
+    disable();
+    return;
+  }
   PerfSpewer::saveJSProfile(code, desc, script);
 }
 
@@ -1023,6 +1169,9 @@ void BaselineInterpreterPerfSpewer::saveProfile(JitCode* code) {
     }
     ops_.clear();
     UniqueChars desc = DuplicateString("BaselineInterpreter");
+    if (!desc) {
+      return;
+    }
     PerfSpewer::saveJSProfile(code, desc, nullptr);
     return;
   }
@@ -1086,6 +1235,10 @@ void IonPerfSpewer::saveJSProfile(JSContext* cx, JSScript* script,
     return;
   }
   UniqueChars desc = GetFunctionDesc("Ion", cx, script);
+  if (!desc) {
+    disable();
+    return;
+  }
   PerfSpewer::saveJSProfile(code, desc, script);
 }
 
@@ -1114,8 +1267,16 @@ void js::jit::CollectPerfSpewerJitCodeProfile(JitCode* code, const char* msg) {
   if (size > 0) {
     AutoLockPerfSpewer lock;
 
+    JS::JitCodeRecord* maybeProfilerRecord = nullptr;
+    if (!MaybeCreateProfilerEntry(lock, maybeProfilerRecord)) {
+      return;  // Allocation failure.
+    }
     UniqueChars desc = JS_smprintf("%s", msg);
-    PerfSpewer::CollectJitCodeInfo(desc, code, lock);
+    if (!desc) {
+      DisablePerfSpewer();
+      return;
+    }
+    PerfSpewer::CollectJitCodeInfo(desc, code, maybeProfilerRecord, lock);
   }
 }
 
@@ -1128,9 +1289,17 @@ void js::jit::CollectPerfSpewerJitCodeProfile(uintptr_t base, uint64_t size,
   if (size > 0) {
     AutoLockPerfSpewer lock;
 
+    JS::JitCodeRecord* maybeProfilerRecord = nullptr;
+    if (!MaybeCreateProfilerEntry(lock, maybeProfilerRecord)) {
+      return;  // Allocation failure.
+    }
     UniqueChars desc = JS_smprintf("%s", msg);
+    if (!desc) {
+      DisablePerfSpewer();
+      return;
+    }
     PerfSpewer::CollectJitCodeInfo(desc, reinterpret_cast<void*>(base), size,
-                                   lock);
+                                   maybeProfilerRecord, lock);
   }
 }
 
@@ -1140,9 +1309,13 @@ void js::jit::CollectPerfSpewerWasmMap(uintptr_t base, uintptr_t size,
     return;
   }
   AutoLockPerfSpewer lock;
+  JS::JitCodeRecord* maybeProfilerRecord = nullptr;
+  if (!MaybeCreateProfilerEntry(lock, maybeProfilerRecord)) {
+    return;  // Allocation failure.
+  }
 
   PerfSpewer::CollectJitCodeInfo(desc, reinterpret_cast<void*>(base),
-                                 uint64_t(size), lock);
+                                 uint64_t(size), maybeProfilerRecord, lock);
 }
 
 void js::jit::PerfSpewerRangeRecorder::appendEntry(UniqueChars& desc) {
@@ -1157,6 +1330,10 @@ void js::jit::PerfSpewerRangeRecorder::recordOffset(const char* name) {
     return;
   }
   UniqueChars desc = DuplicateString(name);
+  if (!desc) {
+    DisablePerfSpewer();
+    return;
+  }
   appendEntry(desc);
 }
 
@@ -1166,6 +1343,10 @@ void js::jit::PerfSpewerRangeRecorder::recordVMWrapperOffset(const char* name) {
   }
 
   UniqueChars desc = JS_smprintf("VMWrapper: %s", name);
+  if (!desc) {
+    DisablePerfSpewer();
+    return;
+  }
   appendEntry(desc);
 }
 
@@ -1176,6 +1357,10 @@ void js::jit::PerfSpewerRangeRecorder::recordOffset(const char* name,
     return;
   }
   UniqueChars desc = GetFunctionDesc(name, cx, script);
+  if (!desc) {
+    DisablePerfSpewer();
+    return;
+  }
   appendEntry(desc);
 }
 
diff --git a/js/src/jit/PerfSpewer.h b/js/src/jit/PerfSpewer.h
index 72a4685b80152..8df794283dbe1 100644
--- a/js/src/jit/PerfSpewer.h
+++ b/js/src/jit/PerfSpewer.h
@@ -12,6 +12,7 @@
 #endif
 #include "js/AllocPolicy.h"
 #include "js/ColumnNumber.h"
+#include "js/JitCodeAPI.h"
 #include "js/Vector.h"
 
 #ifdef JS_JITSPEW
@@ -39,6 +40,10 @@ class MIRGraph;
 class LInstruction;
 enum class CacheOp : uint16_t;
 
+using ProfilerJitCodeVector = Vector<JS::JitCodeRecord, 0, SystemAllocPolicy>;
+
+void ResetPerfSpewer(bool enabled);
+
 struct AutoLockPerfSpewer {
   AutoLockPerfSpewer();
   ~AutoLockPerfSpewer();
@@ -85,16 +90,20 @@ class PerfSpewer {
 
   // Save the debugInfo_ vector to the JIT dump file.
   void saveDebugInfo(const char* filename, uintptr_t base,
+                     JS::JitCodeRecord* maybeProfilerRecord,
                      AutoLockPerfSpewer& lock);
 
   // Save the generated IR file, if any, and the debug info to the JIT dump
   // file.
   void saveJitCodeDebugInfo(JSScript* script, JitCode* code,
+                            JS::JitCodeRecord* maybeProfilerRecord,
                             AutoLockPerfSpewer& lock);
 
   // Save the generated IR file, if any, and the debug info to the JIT dump
   // file.
-  void saveWasmCodeDebugInfo(uintptr_t codeBase, AutoLockPerfSpewer& lock);
+  void saveWasmCodeDebugInfo(uintptr_t codeBase,
+                             JS::JitCodeRecord* maybeProfilerRecord,
+                             AutoLockPerfSpewer& lock);
 
   void saveJSProfile(JitCode* code, JS::UniqueChars& desc, JSScript* script);
   void saveWasmProfile(uintptr_t codeBase, size_t codeSize,
@@ -124,10 +133,21 @@ class PerfSpewer {
   static void Init();
 
   static void CollectJitCodeInfo(JS::UniqueChars& function_name, JitCode* code,
+                                 JS::JitCodeRecord* maybeProfilerRecord,
                                  AutoLockPerfSpewer& lock);
   static void CollectJitCodeInfo(JS::UniqueChars& function_name,
                                  void* code_addr, uint64_t code_size,
+                                 JS::JitCodeRecord* maybeProfilerRecord,
                                  AutoLockPerfSpewer& lock);
+
+  // Explicitly free heap memory allocated using the system allocator. This must
+  // be called when the PerfSpewer is allocated in a LifoAlloc, since the
+  // destructor won't be called when the LifoAlloc is freed.
+  void reset() {
+    endRecording();
+    debugInfo_.clearAndFree();
+    irFileName_ = JS::UniqueChars();
+  }
 };
 
 void CollectPerfSpewerJitCodeProfile(JitCode* code, const char* msg);
diff --git a/js/src/jit/WarpBuilder.cpp b/js/src/jit/WarpBuilder.cpp
index e467333edce93..43c3867e02a1e 100644
--- a/js/src/jit/WarpBuilder.cpp
+++ b/js/src/jit/WarpBuilder.cpp
@@ -674,7 +674,8 @@ bool WarpBuilder::buildBody() {
       return false;
     }
 #endif
-    bool wantPreciseLineNumbers = js::jit::PerfEnabled();
+    bool wantPreciseLineNumbers =
+        js::jit::PerfEnabled() || mirGen().isProfilerInstrumentationEnabled();
     if (wantPreciseLineNumbers && !hasTerminatedBlock()) {
       current->updateTrackedSite(newBytecodeSite(loc));
     }
diff --git a/js/src/jit/WarpOracle.cpp b/js/src/jit/WarpOracle.cpp
index 3539425af80f8..b03841f81f3b5 100644
--- a/js/src/jit/WarpOracle.cpp
+++ b/js/src/jit/WarpOracle.cpp
@@ -1570,6 +1570,7 @@ bool WarpScriptOracle::replaceNurseryAndAllocSitePointers(
     switch (fieldType) {
       case StubField::Type::RawInt32:
       case StubField::Type::RawPointer:
+      case StubField::Type::ICScript:
       case StubField::Type::RawInt64:
       case StubField::Type::Double:
         break;
diff --git a/js/src/jit/WarpSnapshot.cpp b/js/src/jit/WarpSnapshot.cpp
index 8d75514776158..5d807947a8cc0 100644
--- a/js/src/jit/WarpSnapshot.cpp
+++ b/js/src/jit/WarpSnapshot.cpp
@@ -379,6 +379,7 @@ void WarpCacheIRBase::traceData(JSTracer* trc) {
       switch (fieldType) {
         case StubField::Type::RawInt32:
         case StubField::Type::RawPointer:
+        case StubField::Type::ICScript:
         case StubField::Type::RawInt64:
         case StubField::Type::Double:
           break;
diff --git a/js/src/jit/shared/CodeGenerator-shared.cpp b/js/src/jit/shared/CodeGenerator-shared.cpp
index c31517c7da864..da2fb2bf6c452 100644
--- a/js/src/jit/shared/CodeGenerator-shared.cpp
+++ b/js/src/jit/shared/CodeGenerator-shared.cpp
@@ -760,7 +760,7 @@ bool CodeGeneratorShared::createNativeToBytecodeScriptList(
     // Add script from current tree.
     bool found = false;
     for (uint32_t i = 0; i < scripts.length(); i++) {
-      if (scripts[i].sourceAndExtent.matches(tree->script())) {
+      if (scripts[i].scriptData.sourceAndExtent.matches(tree->script())) {
         found = true;
         break;
       }
diff --git a/js/src/jsapi-tests/testFrontendErrors.cpp b/js/src/jsapi-tests/testFrontendErrors.cpp
index 47acf559d79e9..9a0e725cb2f08 100644
--- a/js/src/jsapi-tests/testFrontendErrors.cpp
+++ b/js/src/jsapi-tests/testFrontendErrors.cpp
@@ -89,8 +89,8 @@ BEGIN_TEST(testFrontendErrors_error) {
     CHECK(exception.isObject());
     JS::Rooted<JSObject*> exceptionObj(cx, &exception.toObject());
 
-    const JSErrorReport* report = JS_ErrorFromException(cx, exceptionObj);
-    CHECK(report);
+    JS::BorrowedErrorReport report(cx);
+    CHECK(JS_ErrorFromException(cx, exceptionObj, report));
 
     CHECK(report->errorNumber == JSMSG_UNEXPECTED_TOKEN_NO_EXPECT);
     // Runtime's error report doesn't borrow the filename.
@@ -269,8 +269,8 @@ BEGIN_TEST(testFrontendErrors_overRecursed) {
     CHECK(exception.isObject());
     JS::Rooted<JSObject*> exceptionObj(cx, &exception.toObject());
 
-    const JSErrorReport* report = JS_ErrorFromException(cx, exceptionObj);
-    CHECK(report);
+    JS::BorrowedErrorReport report(cx);
+    CHECK(JS_ErrorFromException(cx, exceptionObj, report));
 
     CHECK(report->errorNumber == JSMSG_OVER_RECURSED);
   }
@@ -327,8 +327,8 @@ BEGIN_TEST(testFrontendErrors_allocationOverflow) {
     CHECK(exception.isObject());
     JS::Rooted<JSObject*> exceptionObj(cx, &exception.toObject());
 
-    const JSErrorReport* report = JS_ErrorFromException(cx, exceptionObj);
-    CHECK(report);
+    JS::BorrowedErrorReport report(cx);
+    CHECK(JS_ErrorFromException(cx, exceptionObj, report));
 
     CHECK(report->errorNumber == JSMSG_ALLOC_OVERFLOW);
   }
diff --git a/js/src/jsapi-tests/testWeakMap.cpp b/js/src/jsapi-tests/testWeakMap.cpp
index ab94559451500..943482e1ad775 100644
--- a/js/src/jsapi-tests/testWeakMap.cpp
+++ b/js/src/jsapi-tests/testWeakMap.cpp
@@ -90,7 +90,8 @@ BEGIN_TEST(testWeakMap_setWeakMapEntry_invalid_key) {
   JS::Rooted<JS::Value> exn(cx);
   CHECK(JS_GetPendingException(cx, &exn));
   JS::Rooted<JSObject*> obj(cx, &exn.toObject());
-  JSErrorReport* err = JS_ErrorFromException(cx, obj);
+  JS::BorrowedErrorReport err(cx);
+  CHECK(JS_ErrorFromException(cx, obj, err));
   CHECK(err->exnType == JSEXN_TYPEERR);
 
   JS_ClearPendingException(cx);
diff --git a/js/src/jsapi.cpp b/js/src/jsapi.cpp
index fdd31505b7761..e75ece4ff41c2 100644
--- a/js/src/jsapi.cpp
+++ b/js/src/jsapi.cpp
@@ -4121,12 +4121,12 @@ JS::AutoSaveExceptionState::~AutoSaveExceptionState() {
   }
 }
 
-JS_PUBLIC_API JSErrorReport* JS_ErrorFromException(JSContext* cx,
-                                                   HandleObject obj) {
+JS_PUBLIC_API bool JS_ErrorFromException(JSContext* cx, HandleObject obj,
+                                         JS::BorrowedErrorReport& errorReport) {
   AssertHeapIsIdle();
   CHECK_THREAD(cx);
   cx->check(obj);
-  return ErrorFromException(cx, obj);
+  return ErrorFromException(cx, obj, errorReport);
 }
 
 void JSErrorReport::initBorrowedLinebuf(const char16_t* linebufArg,
diff --git a/js/src/moz.build b/js/src/moz.build
index 32f26a75f8ad9..767c92fc1d707 100644
--- a/js/src/moz.build
+++ b/js/src/moz.build
@@ -136,6 +136,7 @@ EXPORTS.js += [
     "../public/Initialization.h",
     "../public/Interrupt.h",
     "../public/Iterator.h",
+    "../public/JitCodeAPI.h",
     "../public/JSON.h",
     "../public/LocaleSensitive.h",
     "../public/MapAndSet.h",
diff --git a/js/src/tests/jstests.list b/js/src/tests/jstests.list
index 19f1ed50fe291..d3bee8e009f5a 100644
--- a/js/src/tests/jstests.list
+++ b/js/src/tests/jstests.list
@@ -904,93 +904,3 @@ skip script test262/built-ins/Temporal/ZonedDateTime/from/argument-string-limits
 skip script test262/built-ins/Temporal/ZonedDateTime/prototype/equals/argument-string-limits.js
 skip script test262/built-ins/Temporal/ZonedDateTime/prototype/since/argument-string-limits.js
 skip script test262/built-ins/Temporal/ZonedDateTime/prototype/until/argument-string-limits.js
-
-# https://github.com/tc39/proposal-temporal/pull/3253
-skip script test262/built-ins/Temporal/PlainYearMonth/prototype/add/overflow.js
-skip script test262/built-ins/Temporal/PlainYearMonth/prototype/add/subtract-from-last-representable-month.js
-skip script test262/built-ins/Temporal/PlainYearMonth/prototype/add/argument-lower-units.js
-skip script test262/built-ins/Temporal/PlainYearMonth/prototype/add/options-read-before-algorithmic-validation.js
-skip script test262/built-ins/Temporal/PlainYearMonth/prototype/subtract/overflow.js
-skip script test262/built-ins/Temporal/PlainYearMonth/prototype/subtract/subtract-from-last-representable-month.js
-skip script test262/built-ins/Temporal/PlainYearMonth/prototype/subtract/argument-lower-units.js
-skip script test262/built-ins/Temporal/PlainYearMonth/prototype/subtract/options-read-before-algorithmic-validation.js
-
-# https://github.com/tc39/proposal-intl-era-monthcode/pull/102
-skip script test262/intl402/Temporal/ZonedDateTime/from/era-boundary-japanese.js
-skip script test262/intl402/Temporal/PlainDate/from/era-boundary-japanese.js
-skip script test262/intl402/Temporal/PlainDateTime/from/era-boundary-japanese.js
-skip script test262/intl402/Temporal/PlainYearMonth/from/era-boundary-japanese.js
-
-# https://github.com/tc39/proposal-intl-era-monthcode/issues/96
-skip script test262/intl402/Temporal/PlainDateTime/prototype/since/leap-months-chinese.js
-skip script test262/intl402/Temporal/PlainDateTime/prototype/since/leap-months-dangi.js
-skip script test262/intl402/Temporal/PlainDateTime/prototype/since/leap-months-hebrew.js
-skip script test262/intl402/Temporal/PlainDateTime/prototype/until/leap-months-chinese.js
-skip script test262/intl402/Temporal/PlainDateTime/prototype/until/leap-months-dangi.js
-skip script test262/intl402/Temporal/PlainDateTime/prototype/until/leap-months-hebrew.js
-skip script test262/intl402/Temporal/ZonedDateTime/prototype/since/leap-months-chinese.js
-skip script test262/intl402/Temporal/ZonedDateTime/prototype/since/leap-months-dangi.js
-skip script test262/intl402/Temporal/ZonedDateTime/prototype/since/leap-months-hebrew.js
-skip script test262/intl402/Temporal/ZonedDateTime/prototype/until/leap-months-chinese.js
-skip script test262/intl402/Temporal/ZonedDateTime/prototype/until/leap-months-dangi.js
-skip script test262/intl402/Temporal/ZonedDateTime/prototype/until/leap-months-hebrew.js
-skip script test262/intl402/Temporal/PlainDate/prototype/since/leap-months-chinese.js
-skip script test262/intl402/Temporal/PlainDate/prototype/since/leap-months-dangi.js
-skip script test262/intl402/Temporal/PlainDate/prototype/since/leap-months-hebrew.js
-skip script test262/intl402/Temporal/PlainDate/prototype/until/leap-months-chinese.js
-skip script test262/intl402/Temporal/PlainDate/prototype/until/leap-months-dangi.js
-skip script test262/intl402/Temporal/PlainDate/prototype/until/leap-months-hebrew.js
-skip script test262/intl402/Temporal/PlainYearMonth/prototype/until/leap-months-hebrew.js
-skip script test262/intl402/Temporal/PlainYearMonth/prototype/until/leap-months-dangi.js
-skip script test262/intl402/Temporal/PlainYearMonth/prototype/until/leap-months-chinese.js
-skip script test262/intl402/Temporal/PlainYearMonth/prototype/since/leap-months-hebrew.js
-skip script test262/intl402/Temporal/PlainYearMonth/prototype/since/leap-months-dangi.js
-skip script test262/intl402/Temporal/PlainYearMonth/prototype/since/leap-months-chinese.js
-
-# https://github.com/tc39/proposal-intl-era-monthcode/pull/101
-skip script test262/intl402/Temporal/ZonedDateTime/prototype/since/wrapping-at-end-of-month-hebrew.js
-skip script test262/intl402/Temporal/ZonedDateTime/prototype/since/wrapping-at-end-of-month-chinese.js
-skip script test262/intl402/Temporal/ZonedDateTime/prototype/since/wrapping-at-end-of-month-dangi.js
-skip script test262/intl402/Temporal/ZonedDateTime/prototype/until/wrapping-at-end-of-month-hebrew.js
-skip script test262/intl402/Temporal/ZonedDateTime/prototype/until/wrapping-at-end-of-month-chinese.js
-skip script test262/intl402/Temporal/ZonedDateTime/prototype/until/wrapping-at-end-of-month-dangi.js
-skip script test262/intl402/Temporal/PlainDate/prototype/since/wrapping-at-end-of-month-hebrew.js
-skip script test262/intl402/Temporal/PlainDate/prototype/since/wrapping-at-end-of-month-chinese.js
-skip script test262/intl402/Temporal/PlainDate/prototype/since/wrapping-at-end-of-month-dangi.js
-skip script test262/intl402/Temporal/PlainDate/prototype/until/wrapping-at-end-of-month-hebrew.js
-skip script test262/intl402/Temporal/PlainDate/prototype/until/wrapping-at-end-of-month-chinese.js
-skip script test262/intl402/Temporal/PlainDate/prototype/until/wrapping-at-end-of-month-dangi.js
-skip script test262/intl402/Temporal/PlainDateTime/prototype/since/wrapping-at-end-of-month-hebrew.js
-skip script test262/intl402/Temporal/PlainDateTime/prototype/since/wrapping-at-end-of-month-chinese.js
-skip script test262/intl402/Temporal/PlainDateTime/prototype/since/wrapping-at-end-of-month-dangi.js
-skip script test262/intl402/Temporal/PlainDateTime/prototype/until/wrapping-at-end-of-month-hebrew.js
-skip script test262/intl402/Temporal/PlainDateTime/prototype/until/wrapping-at-end-of-month-chinese.js
-skip script test262/intl402/Temporal/PlainDateTime/prototype/until/wrapping-at-end-of-month-dangi.js
-skip script test262/intl402/Temporal/PlainYearMonth/prototype/add/leap-year-japanese.js
-skip script test262/intl402/Temporal/PlainYearMonth/prototype/add/leap-year-roc.js
-skip script test262/intl402/Temporal/PlainYearMonth/prototype/add/leap-year-islamic-tbla.js
-skip script test262/intl402/Temporal/PlainYearMonth/prototype/add/leap-year-ethioaa.js
-skip script test262/intl402/Temporal/PlainYearMonth/prototype/add/leap-year-islamic-civil.js
-skip script test262/intl402/Temporal/PlainYearMonth/prototype/add/leap-year-gregory.js
-skip script test262/intl402/Temporal/PlainYearMonth/prototype/add/leap-year-coptic.js
-skip script test262/intl402/Temporal/PlainYearMonth/prototype/add/leap-year-ethiopic.js
-skip script test262/intl402/Temporal/PlainYearMonth/prototype/add/leap-months-dangi.js
-skip script test262/intl402/Temporal/PlainYearMonth/prototype/add/leap-year-persian.js
-skip script test262/intl402/Temporal/PlainYearMonth/prototype/add/leap-year-indian.js
-skip script test262/intl402/Temporal/PlainYearMonth/prototype/add/leap-months-hebrew.js
-skip script test262/intl402/Temporal/PlainYearMonth/prototype/add/leap-months-chinese.js
-skip script test262/intl402/Temporal/PlainYearMonth/prototype/add/leap-year-buddhist.js
-skip script test262/intl402/Temporal/PlainYearMonth/prototype/subtract/leap-year-japanese.js
-skip script test262/intl402/Temporal/PlainYearMonth/prototype/subtract/leap-year-roc.js
-skip script test262/intl402/Temporal/PlainYearMonth/prototype/subtract/leap-year-islamic-tbla.js
-skip script test262/intl402/Temporal/PlainYearMonth/prototype/subtract/leap-year-ethioaa.js
-skip script test262/intl402/Temporal/PlainYearMonth/prototype/subtract/leap-year-islamic-civil.js
-skip script test262/intl402/Temporal/PlainYearMonth/prototype/subtract/leap-year-coptic.js
-skip script test262/intl402/Temporal/PlainYearMonth/prototype/subtract/leap-year-gregory.js
-skip script test262/intl402/Temporal/PlainYearMonth/prototype/subtract/leap-year-ethiopic.js
-skip script test262/intl402/Temporal/PlainYearMonth/prototype/subtract/leap-months-dangi.js
-skip script test262/intl402/Temporal/PlainYearMonth/prototype/subtract/leap-year-persian.js
-skip script test262/intl402/Temporal/PlainYearMonth/prototype/subtract/leap-year-indian.js
-skip script test262/intl402/Temporal/PlainYearMonth/prototype/subtract/leap-months-hebrew.js
-skip script test262/intl402/Temporal/PlainYearMonth/prototype/subtract/leap-months-chinese.js
-skip script test262/intl402/Temporal/PlainYearMonth/prototype/subtract/leap-year-buddhist.js
diff --git a/js/src/tests/non262/Temporal/PlainMonthDay/reference-dates-chinese-calendar.js b/js/src/tests/non262/Temporal/PlainMonthDay/reference-dates-chinese-calendar.js
index e9fc352eb0af9..b4a407dac2301 100644
--- a/js/src/tests/non262/Temporal/PlainMonthDay/reference-dates-chinese-calendar.js
+++ b/js/src/tests/non262/Temporal/PlainMonthDay/reference-dates-chinese-calendar.js
@@ -70,10 +70,10 @@ const tests = [
       "1941-08-22[u-ca=chinese]",
       "1938-09-23[u-ca=chinese]",
       "1691-10-21[u-ca=chinese]",
-      "-005738-11-17[u-ca=chinese]",
-      "-004098-12-19[u-ca=chinese]",
-      "-002172-01-19[u-ca=chinese]",
-      "-000179-02-18[u-ca=chinese]",
+      "1843-11-21[u-ca=chinese]",
+      "1737-12-21[u-ca=chinese]",
+      "1890-01-20[u-ca=chinese]",
+      "1784-02-20[u-ca=chinese]",
     ],
   },
 ];
@@ -83,14 +83,30 @@ for (let {day, leapMonth, expected} of tests) {
 
   for (let i = 1; i <= 12; ++i) {
     let expectedToString = expected[i - 1];
+    let monthCode = "M" + String(i).padStart(2, "0") + (leapMonth ? "L" : "");
+
+    // Ensure the expected reference years are still correct. (Updating ICU4X
+    // may require to adjust the expected results.)
+    let pd = Temporal.PlainDate.from(expectedToString);
+    assertEq(pd.monthCode, monthCode);
+    assertEq(pd.day, day);
+    assertEq(pd.toString(), expectedToString);
 
-    // Skip over dates which are too far into the past (and therefore are likely
-    // incorrect anyway). This avoids slowing down this test.
-    if (expectedToString.startsWith("-")) {
-      continue;
+    // This is subject to change:
+    // https://github.com/tc39/proposal-intl-era-monthcode/issues/113
+    {
+      let pmd = pd.toPlainMonthDay();
+      assertEq(pmd.monthCode, monthCode);
+      assertEq(pmd.day, day);
+      assertEq(pmd.toString(), expectedToString);
     }
 
-    let monthCode = "M" + String(i).padStart(2, "0") + (leapMonth ? "L" : "");
+    // Dates before ISO year 1900 are changed to use the non-leap month.
+    if (leapMonth && pd.withCalendar("iso8601").year < 1900) {
+      // Use the expected string from the non-leap month case.
+      expectedToString = tests.find(e => e.day === day && !e.leapMonth).expected[i - 1];
+      monthCode = monthCode.slice(0, -1);
+    }
 
     let pmd = Temporal.PlainMonthDay.from({calendar, monthCode, day});
     assertEq(pmd.monthCode, monthCode);
diff --git a/js/src/vm/ErrorObject.cpp b/js/src/vm/ErrorObject.cpp
index 4bab5897dd6d0..41a6a26d1417a 100644
--- a/js/src/vm/ErrorObject.cpp
+++ b/js/src/vm/ErrorObject.cpp
@@ -1264,7 +1264,8 @@ JSString* js::ComputeStackString(JSContext* cx) {
   return str.get();
 }
 
-JSErrorReport* js::ErrorFromException(JSContext* cx, HandleObject objArg) {
+bool js::ErrorFromException(JSContext* cx, HandleObject objArg,
+                            JS::BorrowedErrorReport& errorReport) {
   // It's ok to UncheckedUnwrap here, since all we do is get the
   // JSErrorReport, and consumers are careful with the information they get
   // from that anyway.  Anyone doing things that would expose anything in the
@@ -1273,16 +1274,21 @@ JSErrorReport* js::ErrorFromException(JSContext* cx, HandleObject objArg) {
   // will fail if they can't unwrap it.
   RootedObject obj(cx, UncheckedUnwrap(objArg));
   if (!obj->is<ErrorObject>()) {
-    return nullptr;
+    return false;
   }
 
   JSErrorReport* report = obj->as<ErrorObject>().getOrCreateErrorReport(cx);
   if (!report) {
     MOZ_ASSERT(cx->isThrowingOutOfMemory());
     cx->recoverFromOutOfMemory();
+    return false;
   }
 
-  return report;
+  // Note: it's important to use the unwrapped object here. CCWs can be cut when
+  // nuking wrappers so they're not guaranteed to keep the target object and its
+  // JSErrorReport alive.
+  errorReport.init(obj, report);
+  return true;
 }
 
 JS_PUBLIC_API JSObject* JS::ExceptionStackOrNull(HandleObject objArg) {
@@ -1502,7 +1508,7 @@ static JSString* ErrorReportToString(JSContext* cx, HandleObject exn,
 }
 
 JS::ErrorReportBuilder::ErrorReportBuilder(JSContext* cx)
-    : reportp(nullptr), exnObject(cx) {}
+    : reportp(nullptr), borrowedReport(cx) {}
 
 JS::ErrorReportBuilder::~ErrorReportBuilder() = default;
 
@@ -1566,14 +1572,20 @@ bool JS::ErrorReportBuilder::init(JSContext* cx,
   MOZ_ASSERT(!cx->isExceptionPending());
   MOZ_ASSERT(!reportp);
 
+  Rooted<JSObject*> exnObject(cx);
+
   if (exnStack.exception().isObject()) {
     // Because ToString below could error and an exception object could become
     // unrooted, we must root our exception object, if any.
     exnObject = &exnStack.exception().toObject();
-    reportp = ErrorFromException(cx, exnObject);
 
-    if (reportp && reportp->isMuted) {
-      sniffingBehavior = SniffingBehavior::NoSideEffects;
+    if (ErrorFromException(cx, exnObject, borrowedReport)) {
+      reportp = borrowedReport.get();
+      if (reportp->isMuted) {
+        sniffingBehavior = SniffingBehavior::NoSideEffects;
+      }
+    } else {
+      reportp = nullptr;
     }
   }
 
diff --git a/js/src/vm/ErrorObject.h b/js/src/vm/ErrorObject.h
index e6bf7af363bfa..6d1fe4566df8b 100644
--- a/js/src/vm/ErrorObject.h
+++ b/js/src/vm/ErrorObject.h
@@ -202,7 +202,8 @@ JSString* ComputeStackString(JSContext* cx);
 extern bool ErrorToException(JSContext* cx, JSErrorReport* reportp,
                              JSErrorCallback callback, void* userRef);
 
-extern JSErrorReport* ErrorFromException(JSContext* cx, HandleObject obj);
+extern bool ErrorFromException(JSContext* cx, HandleObject obj,
+                               JS::BorrowedErrorReport& errorReport);
 
 /*
  * Make a copy of errobj parented to cx's compartment's global.
diff --git a/js/src/vm/GeckoProfiler.cpp b/js/src/vm/GeckoProfiler.cpp
index 56e180a0ca324..4fcb7e1276812 100644
--- a/js/src/vm/GeckoProfiler.cpp
+++ b/js/src/vm/GeckoProfiler.cpp
@@ -123,6 +123,9 @@ void GeckoProfilerRuntime::enable(bool enabled) {
     cx->jitActivation->setLastProfilingCallSite(nullptr);
   }
 
+  // Enable/disable JIT code info collection for the Gecko Profiler.
+  jit::ResetPerfSpewer(enabled);
+
   enabled_ = enabled;
 
   scriptSources_.writeLock()->clear();
diff --git a/js/src/vm/Stack.cpp b/js/src/vm/Stack.cpp
index 2968272ad4192..3f6e2deb8078b 100644
--- a/js/src/vm/Stack.cpp
+++ b/js/src/vm/Stack.cpp
@@ -668,6 +668,8 @@ JS::ProfilingFrameIterator::getPhysicalFrameAndEntry(
     // TODO: get the realm ID of wasm frames. Bug 1596235.
     frame.realmID = 0;
     frame.sourceId = 0;
+    frame.line = 0;
+    frame.column = 0;
     return mozilla::Some(frame);
   }
 
@@ -733,6 +735,10 @@ JS::ProfilingFrameIterator::getPhysicalFrameAndEntry(
   }
   frame.activation = activation_;
   frame.endStackAddress = endStackAddress_;
+  // Initialize line and column info (will be populated later during
+  // extractStack)
+  frame.line = 0;
+  frame.column = 0;
   return mozilla::Some(frame);
 }
 
@@ -775,6 +781,8 @@ uint32_t JS::ProfilingFrameIterator::extractStack(Frame* frames,
     frames[offset + i] = physicalFrame.value();
     frames[offset + i].label = frameInfos[i].label;
     frames[offset + i].sourceId = frameInfos[i].sourceId;
+    frames[offset + i].line = frameInfos[i].line;
+    frames[offset + i].column = frameInfos[i].column;
   }
 
   return depth;
diff --git a/js/xpconnect/src/XPCComponents.cpp b/js/xpconnect/src/XPCComponents.cpp
index c96e67eee53c6..a4474f8f09abf 100644
--- a/js/xpconnect/src/XPCComponents.cpp
+++ b/js/xpconnect/src/XPCComponents.cpp
@@ -1406,8 +1406,8 @@ nsXPCComponents_Utils::ReportError(HandleValue error, HandleValue stack,
     scripterr = CreateScriptError(win, exception, nullptr, nullptr);
   }
 
-  JSErrorReport* err = errorObj ? JS_ErrorFromException(cx, errorObj) : nullptr;
-  if (err) {
+  JS::BorrowedErrorReport err(cx);
+  if (errorObj && JS_ErrorFromException(cx, errorObj, err)) {
     // It's a proper JS Error
     uint32_t flags = err->isWarning() ? nsIScriptError::warningFlag
                                       : nsIScriptError::errorFlag;
diff --git a/js/xpconnect/src/XPCConvert.cpp b/js/xpconnect/src/XPCConvert.cpp
index 59f97da941671..54faeb6447fc9 100644
--- a/js/xpconnect/src/XPCConvert.cpp
+++ b/js/xpconnect/src/XPCConvert.cpp
@@ -1191,15 +1191,15 @@ nsresult XPCConvert::JSValToXPCException(JSContext* cx, MutableHandleValue s,
 
       // If it is an engine Error with an error report then let's
       // extract the report and build an xpcexception from that
-      const JSErrorReport* report;
-      if (nullptr != (report = JS_ErrorFromException(cx, obj))) {
+      JS::BorrowedErrorReport report(cx);
+      if (JS_ErrorFromException(cx, obj, report)) {
         JS::UniqueChars toStringResult;
         RootedString str(cx, ToString(cx, s));
         if (str) {
           toStringResult = JS_EncodeStringToUTF8(cx, str);
         }
         return JSErrorToXPCException(cx, toStringResult.get(), ifaceName,
-                                     methodName, report, exceptn);
+                                     methodName, report.get(), exceptn);
       }
 
       // XXX we should do a check against 'js_ErrorClass' here and
diff --git a/layout/base/AnchorPositioningUtils.cpp b/layout/base/AnchorPositioningUtils.cpp
index 4943a84593ccd..9da764333927e 100644
--- a/layout/base/AnchorPositioningUtils.cpp
+++ b/layout/base/AnchorPositioningUtils.cpp
@@ -942,38 +942,42 @@ Maybe<ScopedNameRef> AnchorPositioningUtils::GetUsedAnchorName(
   return Nothing{};
 }
 
-nsIFrame* AnchorPositioningUtils::GetAnchorPosImplicitAnchor(
-    const nsIFrame* aFrame) {
-  const auto* frameContent = aFrame->GetContent();
-  const bool hasElement = frameContent && frameContent->IsElement();
-  if (!aFrame->Style()->IsPseudoElement() && !hasElement) {
-    return nullptr;
+auto AnchorPositioningUtils::GetAnchorPosImplicitAnchor(const nsIFrame* aFrame)
+    -> ImplicitAnchorResult {
+  const auto* element = dom::Element::FromNodeOrNull(aFrame->GetContent());
+  if (!aFrame->Style()->IsPseudoElement() && !element) {
+    return {};
   }
 
-  if (MOZ_LIKELY(hasElement)) {
-    const auto* element = frameContent->AsElement();
-    MOZ_ASSERT(element);
-    const dom::PopoverData* popoverData = element->GetPopoverData();
-    if (MOZ_UNLIKELY(popoverData)) {
+  if (element) [[likely]] {
+    if (const dom::PopoverData* popoverData = element->GetPopoverData())
+        [[unlikely]] {
       if (const RefPtr<dom::Element>& invoker = popoverData->GetInvoker()) {
-        return invoker->GetPrimaryFrame();
+        return {invoker->GetPrimaryFrame(), ImplicitAnchorKind::Popover};
       }
     }
   }
 
   const auto* pseudoRoot = aFrame->GetClosestNativeAnonymousSubtreeRoot();
   if (!pseudoRoot) {
-    return nullptr;
+    return {};
   }
 
   auto* pseudoRootFrame = pseudoRoot->GetPrimaryFrame();
   if (!pseudoRootFrame) {
-    return nullptr;
+    return {};
   }
 
-  return pseudoRootFrame->HasAnyStateBits(NS_FRAME_OUT_OF_FLOW)
-             ? pseudoRootFrame->GetPlaceholderFrame()->GetParent()
-             : pseudoRootFrame->GetParent();
+  // FIXME(emilio, bug 2013896): Is this really right? It's just returning the
+  // in-flow parent of the pseudo-element, but
+  // GetClosestNativeAnonymousSubtreeRootParent()'s primary frame seems most
+  // likely to be the intended thing in presence of anonymous boxes like
+  // fieldsets and so on...
+  auto* implicitAnchor =
+      pseudoRootFrame->HasAnyStateBits(NS_FRAME_OUT_OF_FLOW)
+          ? pseudoRootFrame->GetPlaceholderFrame()->GetParent()
+          : pseudoRootFrame->GetParent();
+  return {implicitAnchor, ImplicitAnchorKind::PseudoElement};
 }
 
 AnchorPositioningUtils::ContainingBlockInfo
diff --git a/layout/base/AnchorPositioningUtils.h b/layout/base/AnchorPositioningUtils.h
index 505798cfb0010..8c30881425b07 100644
--- a/layout/base/AnchorPositioningUtils.h
+++ b/layout/base/AnchorPositioningUtils.h
@@ -7,11 +7,9 @@
 #ifndef AnchorPositioningUtils_h_
 #define AnchorPositioningUtils_h_
 
-#include "WritingModes.h"
 #include "mozilla/Maybe.h"
-#include "nsHashKeys.h"
+#include "mozilla/WritingModes.h"
 #include "nsRect.h"
-#include "nsTHashMap.h"
 
 class nsAtom;
 class nsIFrame;
@@ -360,7 +358,13 @@ struct AnchorPositioningUtils {
    * element. For popovers, this returns the primary frame of the invoker. In
    * all other cases, returns null.
    */
-  static nsIFrame* GetAnchorPosImplicitAnchor(const nsIFrame* aFrame);
+  enum class ImplicitAnchorKind : uint8_t { None, Popover, PseudoElement };
+  struct ImplicitAnchorResult {
+    nsIFrame* mAnchorFrame = nullptr;
+    ImplicitAnchorKind mKind = ImplicitAnchorKind::None;
+  };
+  static ImplicitAnchorResult GetAnchorPosImplicitAnchor(
+      const nsIFrame* aFrame);
 
   struct NearestScrollFrameInfo {
     const nsIFrame* mScrollContainer = nullptr;
diff --git a/layout/base/PresShell.cpp b/layout/base/PresShell.cpp
index b72d07ef415e6..74484b875d320 100644
--- a/layout/base/PresShell.cpp
+++ b/layout/base/PresShell.cpp
@@ -11335,7 +11335,8 @@ nsIFrame* PresShell::GetAnchorPosAnchor(
   MOZ_ASSERT(!aName.mName->IsEmpty());
   MOZ_ASSERT(mLazyAnchorPosAnchorChanges.IsEmpty());
   if (aName.mName == nsGkAtoms::AnchorPosImplicitAnchor) {
-    return AnchorPositioningUtils::GetAnchorPosImplicitAnchor(aPositionedFrame);
+    return AnchorPositioningUtils::GetAnchorPosImplicitAnchor(aPositionedFrame)
+        .mAnchorFrame;
   }
   if (const auto& entry = mAnchorPosAnchors.Lookup(aName.mName)) {
     return AnchorPositioningUtils::FindFirstAcceptableAnchor(
diff --git a/layout/forms/moz.build b/layout/forms/moz.build
index 3ff5cdb4bbb4b..73bc8d3f34abc 100644
--- a/layout/forms/moz.build
+++ b/layout/forms/moz.build
@@ -10,10 +10,6 @@ with Files("**"):
 MOCHITEST_MANIFESTS += ["test/mochitest.toml"]
 MOCHITEST_CHROME_MANIFESTS += ["test/chrome.toml"]
 
-EXPORTS += [
-    "nsISelectControlFrame.h",
-]
-
 UNIFIED_SOURCES += [
     "ButtonControlFrame.cpp",
     "HTMLSelectEventListener.cpp",
diff --git a/layout/forms/nsISelectControlFrame.h b/layout/forms/nsISelectControlFrame.h
deleted file mode 100644
index 92dcd0a374941..0000000000000
--- a/layout/forms/nsISelectControlFrame.h
+++ /dev/null
@@ -1,42 +0,0 @@
-/* -*- Mode: C++; tab-width: 8; indent-tabs-mode: nil; c-basic-offset: 2 -*- */
-/* vim: set ts=8 sts=2 et sw=2 tw=80: */
-/* This Source Code Form is subject to the terms of the Mozilla Public
- * License, v. 2.0. If a copy of the MPL was not distributed with this
- * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
-
-#ifndef nsISelectControlFrame_h_
-#define nsISelectControlFrame_h_
-
-#include "nsQueryFrame.h"
-
-/**
- * nsISelectControlFrame is the interface for combo boxes and listboxes
- */
-class nsISelectControlFrame : public nsQueryFrame {
- public:
-  NS_DECL_QUERYFRAME_TARGET(nsISelectControlFrame)
-
-  /** Adds an option to the list at index */
-  NS_IMETHOD AddOption(int32_t index) = 0;
-
-  /**
-   * Removes the option at index.  The caller must have a live script
-   * blocker while calling this method.
-   */
-  NS_IMETHOD RemoveOption(int32_t index) = 0;
-
-  /** Called when the parser is done adding children */
-  NS_IMETHOD DoneAddingChildren() = 0;
-
-  /** Notify the frame when an option is selected */
-  NS_IMETHOD OnOptionSelected(int32_t aIndex, bool aSelected) = 0;
-
-  /**
-   * Notify the frame when selectedIndex was changed.  This might
-   * destroy the frame.
-   */
-  NS_IMETHOD_(void)
-  OnSetSelectedIndex(int32_t aOldIndex, int32_t aNewIndex) = 0;
-};
-
-#endif
diff --git a/layout/forms/nsListControlFrame.cpp b/layout/forms/nsListControlFrame.cpp
index c06a9378bd2b1..2986a90e87338 100644
--- a/layout/forms/nsListControlFrame.cpp
+++ b/layout/forms/nsListControlFrame.cpp
@@ -87,7 +87,6 @@ bool nsListControlFrame::IsFocused() const {
 void nsListControlFrame::InvalidateFocus() { InvalidateFrame(); }
 
 NS_QUERYFRAME_HEAD(nsListControlFrame)
-  NS_QUERYFRAME_ENTRY(nsISelectControlFrame)
   NS_QUERYFRAME_ENTRY(nsListControlFrame)
 NS_QUERYFRAME_TAIL_INHERITING(ScrollContainerFrame)
 
@@ -579,12 +578,10 @@ dom::HTMLOptionElement* nsListControlFrame::GetOption(uint32_t aIndex) const {
   return Select().Item(aIndex);
 }
 
-NS_IMETHODIMP
-nsListControlFrame::OnOptionSelected(int32_t aIndex, bool aSelected) {
+void nsListControlFrame::OnOptionSelected(int32_t aIndex, bool aSelected) {
   if (aSelected) {
     ScrollToIndex(aIndex);
   }
-  return NS_OK;
 }
 
 void nsListControlFrame::OnContentReset() { ResetList(true); }
@@ -646,27 +643,15 @@ uint32_t nsListControlFrame::GetNumberOfOptions() {
   return options->Length();
 }
 
-//----------------------------------------------------------------------
-// nsISelectControlFrame
-//----------------------------------------------------------------------
-
-NS_IMETHODIMP
-nsListControlFrame::DoneAddingChildren() {
-  ResetList(true);
-  return NS_OK;
-}
+void nsListControlFrame::DoneAddingChildren() { ResetList(true); }
 
-NS_IMETHODIMP
-nsListControlFrame::AddOption(int32_t aIndex) {
+void nsListControlFrame::AddOption(int32_t aIndex) {
   // Make sure we scroll to the selected option as needed
   mNeedToReset = true;
 
-  if (!Select().IsDoneAddingChildren()) {
-    return NS_OK;
+  if (Select().IsDoneAddingChildren()) {
+    mPostChildrenLoadedReset = true;
   }
-
-  mPostChildrenLoadedReset = true;
-  return NS_OK;
 }
 
 static int32_t DecrementAndClamp(int32_t aSelectionIndex, int32_t aLength) {
@@ -674,8 +659,7 @@ static int32_t DecrementAndClamp(int32_t aSelectionIndex, int32_t aLength) {
                       : std::max(0, aSelectionIndex - 1);
 }
 
-NS_IMETHODIMP
-nsListControlFrame::RemoveOption(int32_t aIndex) {
+void nsListControlFrame::RemoveOption(int32_t aIndex) {
   MOZ_ASSERT(aIndex >= 0, "negative <option> index");
 
   // Need to reset if we're a dropdown
@@ -703,7 +687,6 @@ nsListControlFrame::RemoveOption(int32_t aIndex) {
   }
 
   InvalidateFocus();
-  return NS_OK;
 }
 
 //---------------------------------------------------------
@@ -757,7 +740,7 @@ bool nsListControlFrame::UpdateSelection() {
   return true;
 }
 
-NS_IMETHODIMP_(void)
+void
 nsListControlFrame::OnSetSelectedIndex(int32_t aOldIndex, int32_t aNewIndex) {
 #ifdef ACCESSIBILITY
   nsCOMPtr<nsIContent> prevOption = GetCurrentOption();
@@ -779,10 +762,6 @@ nsListControlFrame::OnSetSelectedIndex(int32_t aOldIndex, int32_t aNewIndex) {
 #endif
 }
 
-//----------------------------------------------------------------------
-// End nsISelectControlFrame
-//----------------------------------------------------------------------
-
 class AsyncReset final : public Runnable {
  public:
   AsyncReset(nsListControlFrame* aFrame, bool aScroll)
diff --git a/layout/forms/nsListControlFrame.h b/layout/forms/nsListControlFrame.h
index 6ca4578e4c293..935b1cb26af85 100644
--- a/layout/forms/nsListControlFrame.h
+++ b/layout/forms/nsListControlFrame.h
@@ -9,7 +9,6 @@
 #include "mozilla/Attributes.h"
 #include "mozilla/ScrollContainerFrame.h"
 #include "mozilla/StaticPtr.h"
-#include "nsISelectControlFrame.h"
 
 class nsComboboxControlFrame;
 class nsPresContext;
@@ -30,8 +29,7 @@ class HTMLOptionsCollection;
  * Frame-based listbox.
  */
 
-class nsListControlFrame final : public mozilla::ScrollContainerFrame,
-                                 public nsISelectControlFrame {
+class nsListControlFrame final : public mozilla::ScrollContainerFrame {
  public:
   using HTMLOptionElement = mozilla::dom::HTMLOptionElement;
 
@@ -92,22 +90,19 @@ class nsListControlFrame final : public mozilla::ScrollContainerFrame,
   uint32_t GetNumberOfOptions();
 
   MOZ_CAN_RUN_SCRIPT_BOUNDARY void OnContentReset();
-
-  // nsISelectControlFrame
-  NS_IMETHOD AddOption(int32_t index) final;
-  NS_IMETHOD RemoveOption(int32_t index) final;
+  void AddOption(int32_t aIndex);
+  void RemoveOption(int32_t aIndex);
   MOZ_CAN_RUN_SCRIPT_BOUNDARY
-  NS_IMETHOD DoneAddingChildren() final;
+  void DoneAddingChildren();
 
   /**
    * Gets the content (an option) by index and then set it as
    * being selected or not selected.
    */
   MOZ_CAN_RUN_SCRIPT_BOUNDARY
-  NS_IMETHOD OnOptionSelected(int32_t aIndex, bool aSelected) final;
+  void OnOptionSelected(int32_t aIndex, bool aSelected);
   MOZ_CAN_RUN_SCRIPT_BOUNDARY
-  NS_IMETHOD_(void)
-  OnSetSelectedIndex(int32_t aOldIndex, int32_t aNewIndex) final;
+  void OnSetSelectedIndex(int32_t aOldIndex, int32_t aNewIndex);
 
   /**
    * Mouse event listeners.
diff --git a/layout/generic/FrameClasses.py b/layout/generic/FrameClasses.py
index a24f360a85d0d..6a25e2ca4066d 100644
--- a/layout/generic/FrameClasses.py
+++ b/layout/generic/FrameClasses.py
@@ -190,7 +190,6 @@
     AbstractFrame("nsIPercentBSizeObserver"),
     AbstractFrame("nsIPopupContainer"),
     AbstractFrame("nsIScrollbarMediator"),
-    AbstractFrame("nsISelectControlFrame"),
     AbstractFrame("nsIStatefulFrame"),
     AbstractFrame("ISVGDisplayableFrame"),
     AbstractFrame("ISVGSVGFrame"),
diff --git a/layout/inspector/InspectorUtils.cpp b/layout/inspector/InspectorUtils.cpp
index 320a14752f8d5..3212e2677a9d4 100644
--- a/layout/inspector/InspectorUtils.cpp
+++ b/layout/inspector/InspectorUtils.cpp
@@ -6,6 +6,7 @@
 
 #include "mozilla/dom/InspectorUtils.h"
 
+#include "AnchorPositioningUtils.h"
 #include "ChildIterator.h"
 #include "Units.h"
 #include "gfxTextRun.h"
@@ -54,6 +55,7 @@
 #include "nsGlobalWindowInner.h"
 #include "nsGridContainerFrame.h"
 #include "nsIContentInlines.h"
+#include "nsIFrameInlines.h"
 #include "nsLayoutUtils.h"
 #include "nsNameSpaceManager.h"
 #include "nsPresContext.h"
@@ -1382,4 +1384,57 @@ uint16_t InspectorUtils::GetGridContainerType(GlobalObject&,
   return result;
 }
 
+void InspectorUtils::GetAnchorFor(GlobalObject&, Element& aElement,
+                                  const nsAString& aName,
+                                  Nullable<InspectorAnchorElement>& aResult) {
+  auto* frame = aElement.GetPrimaryFrame(FlushType::Frames);
+  if (!frame || !frame->IsAbsolutelyPositioned()) {
+    return;
+  }
+
+  nsIFrame* anchor = nullptr;
+  RefPtr<nsAtom> name;
+  ScopedNameRef scopedName{nullptr, StyleCascadeLevel::Default()};
+  InspectorAnchorType type = InspectorAnchorType::Explicit;
+  if (aName.IsEmpty()) {
+    // Anchor name, otherwise implicit anchor.
+    const auto& positionAnchor = frame->StylePosition()->mPositionAnchor;
+    if (positionAnchor.value.IsIdent()) {
+      scopedName = {positionAnchor.value.AsIdent().AsAtom(),
+                    positionAnchor.scope};
+    } else {
+      auto implicit = AnchorPositioningUtils::GetAnchorPosImplicitAnchor(frame);
+      anchor = implicit.mAnchorFrame;
+      if (!anchor) {
+        return;
+      }
+      switch (implicit.mKind) {
+        case AnchorPositioningUtils::ImplicitAnchorKind::None:
+          break;
+        case AnchorPositioningUtils::ImplicitAnchorKind::Popover:
+          type = InspectorAnchorType::Popover;
+          break;
+        case AnchorPositioningUtils::ImplicitAnchorKind::PseudoElement:
+          type = InspectorAnchorType::Pseudo_element;
+          break;
+      }
+      auto& result = aResult.SetValue();
+      result.mElement = *anchor->GetContent()->AsElement();
+      result.mType = type;
+      return;
+    }
+  } else {
+    // TODO(emilio): Allow looking up names from other trees.
+    name = NS_Atomize(aName);
+    scopedName = {name, StyleCascadeLevel::Default()};
+  }
+  anchor = frame->PresShell()->GetAnchorPosAnchor(scopedName, frame);
+  if (!anchor) {
+    return;
+  }
+  auto& result = aResult.SetValue();
+  result.mElement = *anchor->GetContent()->AsElement();
+  result.mType = type;
+}
+
 }  // namespace mozilla::dom
diff --git a/layout/inspector/InspectorUtils.h b/layout/inspector/InspectorUtils.h
index 9a6524828c2dc..176e9af9d7036 100644
--- a/layout/inspector/InspectorUtils.h
+++ b/layout/inspector/InspectorUtils.h
@@ -314,6 +314,8 @@ class InspectorUtils {
                                          BrowsingContext* aContext,
                                          mozilla::CSSCoord aHeight);
   static uint16_t GetGridContainerType(GlobalObject&, Element&);
+  static void GetAnchorFor(GlobalObject&, Element&, const nsAString& aName,
+                           Nullable<InspectorAnchorElement>&);
 };
 
 }  // namespace mozilla::dom
diff --git a/layout/mathml/nsMathMLChar.cpp b/layout/mathml/nsMathMLChar.cpp
index 025f77a5630c1..caec0533e5c2a 100644
--- a/layout/mathml/nsMathMLChar.cpp
+++ b/layout/mathml/nsMathMLChar.cpp
@@ -546,8 +546,8 @@ void nsMathMLChar::SetData(nsString& aData) {
 // -----------------------------------------------------------------------------
 
 // plain TeX settings (TeXbook p.152)
-#define NS_MATHML_DELIMITER_FACTOR 0.901f
-#define NS_MATHML_DELIMITER_SHORTFALL_POINTS 5.0f
+static constexpr float kMathMLDelimiterFactor = 0.901;
+static constexpr float kMathMLDelimiterShortfallPoints = 5.0;
 
 static bool IsSizeOK(nscoord a, nscoord b, MathMLStretchFlags aStretchFlags) {
   // Normal: True if 'a' is around +/-10% of the target 'b' (10% is
@@ -556,7 +556,7 @@ static bool IsSizeOK(nscoord a, nscoord b, MathMLStretchFlags aStretchFlags) {
   // <mrow></mrow>
   bool isNormal =
       (aStretchFlags.contains(MathMLStretchFlag::Normal)) &&
-      Abs<float>(a - b) < (1.0f - NS_MATHML_DELIMITER_FACTOR) * float(b);
+      Abs<float>(a - b) < (1.0f - kMathMLDelimiterFactor) * float(b);
 
   // Nearer: True if 'a' is around max{ +/-10% of 'b' , 'b' - 5pt },
   // as documented in The TeXbook, Ch.17, p.152.
@@ -564,16 +564,16 @@ static bool IsSizeOK(nscoord a, nscoord b, MathMLStretchFlags aStretchFlags) {
   bool isNearer = false;
   if (aStretchFlags.contains(MathMLStretchFlag::Nearer) ||
       aStretchFlags.contains(MathMLStretchFlag::LargeOperator)) {
-    float c = std::max(float(b) * NS_MATHML_DELIMITER_FACTOR,
+    float c = std::max(float(b) * kMathMLDelimiterFactor,
                        float(b) - nsPresContext::CSSPointsToAppUnits(
-                                      NS_MATHML_DELIMITER_SHORTFALL_POINTS));
+                                      kMathMLDelimiterShortfallPoints));
     isNearer = Abs<float>(b - a) <= float(b) - c;
   }
 
   // Smaller: Mainly for transitory use, to compare two candidate
   // choices
   bool isSmaller = aStretchFlags.contains(MathMLStretchFlag::Smaller) &&
-                   float(a) >= NS_MATHML_DELIMITER_FACTOR * float(b) && a <= b;
+                   float(a) >= kMathMLDelimiterFactor * float(b) && a <= b;
 
   // Larger: Critical to the sqrt code to ensure that the radical
   // size is tall enough
@@ -631,7 +631,7 @@ static nscoord ComputeSizeFromParts(nsPresContext* aPresContext,
   }
 
   // Get the minimum allowable size using some flex.
-  nscoord minSize = NSToCoordRound(NS_MATHML_DELIMITER_FACTOR * sum);
+  nscoord minSize = NSToCoordRound(kMathMLDelimiterFactor * sum);
 
   if (minSize > aTargetSize) {
     return minSize;  // settle with the minimum size
@@ -1257,9 +1257,9 @@ nsresult nsMathMLChar::StretchInternal(
       aStretchFlags += MathMLStretchFlag::Smaller;
     }
 
-    // Use NS_MATHML_DELIMITER_FACTOR to allow some slightly larger glyphs as
+    // Use kMathMLDelimiterFactor to allow some slightly larger glyphs as
     // maxsize is not enforced exactly.
-    if (aMaxSize == NS_MATHML_OPERATOR_SIZE_INFINITY) {
+    if (aMaxSize == kMathMLOperatorSizeInfinity) {
       aDesiredStretchSize.ascent = nscoord_MAX;
       aDesiredStretchSize.descent = 0;
     } else {
@@ -1267,13 +1267,13 @@ nsresult nsMathMLChar::StretchInternal(
       if (height == 0) {
         if (aMaxSizeIsAbsolute) {
           aDesiredStretchSize.ascent =
-              NSToCoordRound(aMaxSize / NS_MATHML_DELIMITER_FACTOR);
+              NSToCoordRound(aMaxSize / kMathMLDelimiterFactor);
           aDesiredStretchSize.descent = 0;
         }
         // else: leave height as 0
       } else {
         float scale = aMaxSizeIsAbsolute ? aMaxSize / height : aMaxSize;
-        scale /= NS_MATHML_DELIMITER_FACTOR;
+        scale /= kMathMLDelimiterFactor;
         aDesiredStretchSize.ascent =
             NSToCoordRound(scale * aDesiredStretchSize.ascent);
         aDesiredStretchSize.descent =
@@ -1839,7 +1839,7 @@ nsresult nsMathMLChar::PaintVertically(nsPresContext* aPresContext,
       // this won't change the glyph too much.  If the glyph is too small to
       // clip then we'll overlap rather than have a gap.
       nscoord height = mBmData[i].ascent + mBmData[i].descent;
-      if (height * (1.0 - NS_MATHML_DELIMITER_FACTOR) > oneDevPixel) {
+      if (height * (1.0 - kMathMLDelimiterFactor) > oneDevPixel) {
         if (0 == i) {  // top
           clipRect.height = end[i] - clipRect.y;
         } else if (2 == i) {  // bottom
@@ -2002,7 +2002,7 @@ nsresult nsMathMLChar::PaintHorizontally(nsPresContext* aPresContext,
       // this won't change the glyph too much.  If the glyph is too small to
       // clip then we'll overlap rather than have a gap.
       nscoord width = mBmData[i].rightBearing - mBmData[i].leftBearing;
-      if (width * (1.0 - NS_MATHML_DELIMITER_FACTOR) > oneDevPixel) {
+      if (width * (1.0 - kMathMLDelimiterFactor) > oneDevPixel) {
         if (0 == i) {  // left
           clipRect.width = end[i] - clipRect.x;
         } else if (2 == i) {  // right
diff --git a/layout/mathml/nsMathMLChar.h b/layout/mathml/nsMathMLChar.h
index b5bc870282875..f46599698fdc3 100644
--- a/layout/mathml/nsMathMLChar.h
+++ b/layout/mathml/nsMathMLChar.h
@@ -209,7 +209,7 @@ class nsMathMLChar {
                            const nsBoundingMetrics& aContainerSize,
                            nsBoundingMetrics& aDesiredStretchSize,
                            MathMLStretchFlags aStretchFlags,
-                           float aMaxSize = NS_MATHML_OPERATOR_SIZE_INFINITY,
+                           float aMaxSize = kMathMLOperatorSizeInfinity,
                            bool aMaxSizeIsAbsolute = false);
 
   nsresult PaintVertically(nsPresContext* aPresContext,
diff --git a/layout/mathml/nsMathMLOperators.h b/layout/mathml/nsMathMLOperators.h
index f5c1eb4517ea4..c827d4c70dc61 100644
--- a/layout/mathml/nsMathMLOperators.h
+++ b/layout/mathml/nsMathMLOperators.h
@@ -10,6 +10,7 @@
 #include <stdint.h>
 
 #include "mozilla/EnumSet.h"
+#include "mozilla/FloatingPoint.h"
 #include "nsStringFwd.h"
 
 enum class StretchDirection : uint8_t {
@@ -85,7 +86,8 @@ class nsOperatorFlags {
   uint8_t mFormAndDirection = 0;
 };
 
-#define NS_MATHML_OPERATOR_SIZE_INFINITY (mozilla::PositiveInfinity<float>())
+constexpr inline float kMathMLOperatorSizeInfinity =
+    mozilla::PositiveInfinity<float>();
 
 class nsMathMLOperators {
  public:
diff --git a/layout/mathml/nsMathMLmoFrame.cpp b/layout/mathml/nsMathMLmoFrame.cpp
index 55dd921f471ab..e0902ac5f503f 100644
--- a/layout/mathml/nsMathMLmoFrame.cpp
+++ b/layout/mathml/nsMathMLmoFrame.cpp
@@ -552,7 +552,7 @@ void nsMathMLmoFrame::ProcessOperatorData() {
   // give a multiple of the defaut value but a multiple of the operator at
   // normal size.
   //
-  mMaxSize = NS_MATHML_OPERATOR_SIZE_INFINITY;
+  mMaxSize = kMathMLOperatorSizeInfinity;
   mContent->AsElement()->GetAttr(nsGkAtoms::maxsize, value);
   if (!value.IsEmpty()) {
     nsCSSValue cssValue;
@@ -672,7 +672,7 @@ nsMathMLmoFrame::Stretch(DrawTarget* aDrawTarget,
 
       // check for user-desired min-max size
 
-      if (mMaxSize != NS_MATHML_OPERATOR_SIZE_INFINITY && mMaxSize > 0.0f) {
+      if (mMaxSize != kMathMLOperatorSizeInfinity && mMaxSize > 0.0f) {
         // if we are here, there is a user defined maxsize ...
         // XXX Set stretchFlags = MathMLStretchFlag::Normal? to honor the
         // maxsize as close as possible?
diff --git a/layout/mathml/output.txt b/layout/mathml/output.txt
new file mode 100644
index 0000000000000..e69de29bb2d1d
diff --git a/mobile/android/android-components/components/browser/engine-gecko/src/main/java/mozilla/components/browser/engine/gecko/prompt/GeckoPromptDelegate.kt b/mobile/android/android-components/components/browser/engine-gecko/src/main/java/mozilla/components/browser/engine/gecko/prompt/GeckoPromptDelegate.kt
index 5b03f64b21066..31d93df3b678f 100644
--- a/mobile/android/android-components/components/browser/engine-gecko/src/main/java/mozilla/components/browser/engine/gecko/prompt/GeckoPromptDelegate.kt
+++ b/mobile/android/android-components/components/browser/engine-gecko/src/main/java/mozilla/components/browser/engine/gecko/prompt/GeckoPromptDelegate.kt
@@ -14,6 +14,8 @@ import mozilla.components.browser.engine.gecko.ext.toAutocompleteAddress
 import mozilla.components.browser.engine.gecko.ext.toAutocompleteCreditCard
 import mozilla.components.browser.engine.gecko.ext.toCreditCardEntry
 import mozilla.components.browser.engine.gecko.ext.toLoginEntry
+import mozilla.components.browser.engine.gecko.prompt.ext.toLoginHint
+import mozilla.components.browser.engine.gecko.prompt.ext.toSelectOption
 import mozilla.components.concept.engine.prompt.Choice
 import mozilla.components.concept.engine.prompt.PromptRequest
 import mozilla.components.concept.engine.prompt.PromptRequest.File.Companion.DEFAULT_UPLOADS_DIR_NAME
@@ -28,11 +30,13 @@ import mozilla.components.concept.storage.CreditCardEntry
 import mozilla.components.concept.storage.Login
 import mozilla.components.concept.storage.LoginEntry
 import mozilla.components.support.ktx.android.net.toFileUri
+import mozilla.components.support.ktx.kotlin.ifNullOrEmpty
 import mozilla.components.support.ktx.kotlin.toDate
 import mozilla.components.support.utils.TimePicker.shouldShowMillisecondsPicker
 import mozilla.components.support.utils.TimePicker.shouldShowSecondsPicker
 import org.mozilla.geckoview.AllowOrDeny
 import org.mozilla.geckoview.Autocomplete
+import org.mozilla.geckoview.Autocomplete.SelectOption.Hint
 import org.mozilla.geckoview.GeckoResult
 import org.mozilla.geckoview.GeckoSession
 import org.mozilla.geckoview.GeckoSession.PromptDelegate
@@ -309,33 +313,52 @@ internal class GeckoPromptDelegate(private val geckoEngineSession: GeckoEngineSe
         val promptOptions = prompt.options
 
         val generatedPassword = promptOptions
-            .firstOrNull { option -> option.hint == Autocomplete.SelectOption.Hint.GENERATED }?.value?.password
+            .firstOrNull { option -> option.hint == Hint.GENERATED }?.value?.password
 
         val geckoResult = GeckoResult<PromptResponse>()
         val onConfirmSelect: (Login) -> Unit = { login ->
             if (!prompt.isComplete) {
-                var hint = Autocomplete.SelectOption.Hint.NONE
-                if (generatedPassword != null && login.password == generatedPassword) {
-                    hint = Autocomplete.SelectOption.Hint.GENERATED
-                }
-                geckoResult.complete(prompt.confirm(Autocomplete.LoginSelectOption(login.toLoginEntry(), hint)))
+                geckoResult.complete(
+                    prompt.confirm(
+                        Autocomplete.LoginSelectOption(
+                            login.toLoginEntry(),
+                            login.hint.toSelectOption(),
+                        ),
+                    ),
+                )
             }
         }
         val onDismiss: () -> Unit = {
             prompt.dismissSafely(geckoResult)
         }
 
-        // `guid` plus exactly one of `httpRealm` and `formSubmitURL` must be present to be a valid login entry.
-        val loginList = promptOptions.filter { option ->
-            option.value.guid != null && (option.value.formActionOrigin != null || option.value.httpRealm != null)
-        }.map { option ->
+        val loginList = promptOptions.map { option ->
+            /**
+             * N.B: Even though the data structure says we need to always have a guid, the
+             * LoginStorage implementation doesn't seem to care that we don't have a valid one
+             * because it's generated eventually within the `crate::login::LoginDb::add`
+             * in application-services.
+             *
+             * @see [appservices](https://searchfox.org/mozilla-mobile/rev/fc0c36b437d53e65a6d85362c9c981feaf074385/application-services/components/logins/src/db.rs#569)
+             */
+            val guid = option.value.guid.ifNullOrEmpty { "" }
+            // `guid` plus exactly one of `httpRealm` and `formSubmitURL` must be present to be a valid login entry.
+            val hasHttpRealm = !option.value.httpRealm.isNullOrBlank()
+            val hasFormActionOrigin = !option.value.formActionOrigin.isNullOrBlank()
+            val formActionOrigin = if (!hasHttpRealm && !hasFormActionOrigin) {
+                geckoEngineSession.currentUrl
+            } else {
+                option.value.formActionOrigin
+            }
+
             Login(
-                guid = option.value.guid!!,
+                guid = guid,
                 origin = option.value.origin,
-                formActionOrigin = option.value.formActionOrigin,
+                formActionOrigin = formActionOrigin,
                 httpRealm = option.value.httpRealm,
                 username = option.value.username,
                 password = option.value.password,
+                hint = option.hint.toLoginHint(),
             )
         }
 
diff --git a/mobile/android/android-components/components/browser/engine-gecko/src/main/java/mozilla/components/browser/engine/gecko/prompt/ext/SelectOptionHint.kt b/mobile/android/android-components/components/browser/engine-gecko/src/main/java/mozilla/components/browser/engine/gecko/prompt/ext/SelectOptionHint.kt
new file mode 100644
index 0000000000000..b1dac06fa3088
--- /dev/null
+++ b/mobile/android/android-components/components/browser/engine-gecko/src/main/java/mozilla/components/browser/engine/gecko/prompt/ext/SelectOptionHint.kt
@@ -0,0 +1,37 @@
+/* This Source Code Form is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
+
+package mozilla.components.browser.engine.gecko.prompt.ext
+
+import mozilla.components.concept.storage.LoginHint
+import org.mozilla.geckoview.Autocomplete
+
+/**
+ * Converts a GeckoView [Autocomplete.SelectOption.Hint] integer constant to a [LoginHint] enum value.
+ *
+ * @return The corresponding [LoginHint] enum value, or [LoginHint.NONE] if the hint is not recognized.
+ */
+fun @receiver:Autocomplete.SelectOption.SelectOptionHint Int.toLoginHint() = when (this) {
+    Autocomplete.SelectOption.Hint.GENERATED -> LoginHint.GENERATED
+    Autocomplete.SelectOption.Hint.INSECURE_FORM -> LoginHint.INSECURE_FORM
+    Autocomplete.SelectOption.Hint.DUPLICATE_USERNAME -> LoginHint.DUPLICATE_USERNAME
+    Autocomplete.SelectOption.Hint.MATCHING_ORIGIN -> LoginHint.MATCHING_ORIGIN
+    Autocomplete.SelectOption.Hint.FIREFOX_RELAY -> LoginHint.EMAIL_MASK
+    else -> LoginHint.NONE
+}
+
+/**
+ * Converts a [LoginHint] enum value to a GeckoView [Autocomplete.SelectOption.Hint] integer constant.
+ *
+ * @return The corresponding [Autocomplete.SelectOption.Hint] integer constant.
+ */
+@Autocomplete.SelectOption.SelectOptionHint
+fun LoginHint.toSelectOption() = when (this) {
+    LoginHint.GENERATED -> Autocomplete.SelectOption.Hint.GENERATED
+    LoginHint.INSECURE_FORM -> Autocomplete.SelectOption.Hint.INSECURE_FORM
+    LoginHint.DUPLICATE_USERNAME -> Autocomplete.SelectOption.Hint.DUPLICATE_USERNAME
+    LoginHint.MATCHING_ORIGIN -> Autocomplete.SelectOption.Hint.MATCHING_ORIGIN
+    LoginHint.EMAIL_MASK -> Autocomplete.SelectOption.Hint.FIREFOX_RELAY
+    LoginHint.NONE -> Autocomplete.SelectOption.Hint.NONE
+}
diff --git a/mobile/android/android-components/components/browser/engine-gecko/src/test/java/mozilla/components/browser/engine/gecko/prompt/GeckoPromptDelegateTest.kt b/mobile/android/android-components/components/browser/engine-gecko/src/test/java/mozilla/components/browser/engine/gecko/prompt/GeckoPromptDelegateTest.kt
index a404ea4087c4c..fed28079b6225 100644
--- a/mobile/android/android-components/components/browser/engine-gecko/src/test/java/mozilla/components/browser/engine/gecko/prompt/GeckoPromptDelegateTest.kt
+++ b/mobile/android/android-components/components/browser/engine-gecko/src/test/java/mozilla/components/browser/engine/gecko/prompt/GeckoPromptDelegateTest.kt
@@ -77,6 +77,10 @@ class GeckoPromptDelegateTest {
     private lateinit var runtime: GeckoRuntime
     private var downloadFileUtils = FakeDownloadFileUtils()
 
+    private val testUrl = "https://mozilla.org"
+    private val testUrlWithFormAction = "https://sitewithformaction.com"
+    private val testHttpRealm = "testRealm"
+
     @Before
     fun setup() {
         runtime = mock()
@@ -1019,6 +1023,181 @@ class GeckoPromptDelegateTest {
         assertFalse(onLoginSelected)
     }
 
+    @Test
+    fun `onLoginSelect with both httpRealm and formActionOrigin provided uses original values`() {
+        val mockSession = GeckoEngineSession(runtime, downloadFileUtils = mock()).also {
+            it.currentUrl = testUrl
+        }
+        var receivedPrompt: PromptRequest.SelectLoginPrompt? = null
+
+        val promptDelegate = GeckoPromptDelegate(mockSession)
+
+        mockSession.register(
+            object : EngineSession.Observer {
+                override fun onPromptRequest(promptRequest: PromptRequest) {
+                    receivedPrompt = promptRequest as PromptRequest.SelectLoginPrompt
+                }
+            },
+        )
+
+        val loginEntry = createLoginEntry(
+            httpRealm = testHttpRealm,
+            formActionOrigin = testUrlWithFormAction,
+        )
+        val loginSelectOption = Autocomplete.LoginSelectOption(loginEntry.toLoginEntry())
+
+        promptDelegate.onLoginSelect(
+            mock(),
+            geckoLoginSelectPrompt(arrayOf(loginSelectOption)),
+        )
+        shadowOf(getMainLooper()).idle()
+
+        val logins = receivedPrompt!!.logins
+        assertEquals(1, logins.size)
+        assertEquals(testHttpRealm, logins[0].httpRealm)
+        assertEquals(testUrlWithFormAction, logins[0].formActionOrigin)
+    }
+
+    @Test
+    fun `onLoginSelect with only httpRealm provided uses null for formActionOrigin`() {
+        val mockSession = GeckoEngineSession(runtime, downloadFileUtils = mock()).also {
+            it.currentUrl = testUrl
+        }
+        var receivedPrompt: PromptRequest.SelectLoginPrompt? = null
+
+        val promptDelegate = GeckoPromptDelegate(mockSession)
+
+        mockSession.register(
+            object : EngineSession.Observer {
+                override fun onPromptRequest(promptRequest: PromptRequest) {
+                    receivedPrompt = promptRequest as PromptRequest.SelectLoginPrompt
+                }
+            },
+        )
+
+        val loginEntry = createLoginEntry(
+            httpRealm = testHttpRealm,
+            formActionOrigin = null,
+        )
+        val loginSelectOption = Autocomplete.LoginSelectOption(loginEntry.toLoginEntry())
+
+        promptDelegate.onLoginSelect(
+            mock(),
+            geckoLoginSelectPrompt(arrayOf(loginSelectOption)),
+        )
+        shadowOf(getMainLooper()).idle()
+
+        val logins = receivedPrompt!!.logins
+        assertEquals(1, logins.size)
+        assertEquals(testHttpRealm, logins[0].httpRealm)
+        assertNull(logins[0].formActionOrigin)
+    }
+
+    @Test
+    fun `onLoginSelect with only formActionOrigin provided uses null for httpRealm`() {
+        val mockSession = GeckoEngineSession(runtime, downloadFileUtils = mock()).also {
+            it.currentUrl = testUrl
+        }
+        var receivedPrompt: PromptRequest.SelectLoginPrompt? = null
+
+        val promptDelegate = GeckoPromptDelegate(mockSession)
+
+        mockSession.register(
+            object : EngineSession.Observer {
+                override fun onPromptRequest(promptRequest: PromptRequest) {
+                    receivedPrompt = promptRequest as PromptRequest.SelectLoginPrompt
+                }
+            },
+        )
+
+        val loginEntry = createLoginEntry(
+            httpRealm = null,
+            formActionOrigin = testUrlWithFormAction,
+        )
+        val loginSelectOption = Autocomplete.LoginSelectOption(loginEntry.toLoginEntry())
+
+        promptDelegate.onLoginSelect(
+            mock(),
+            geckoLoginSelectPrompt(arrayOf(loginSelectOption)),
+        )
+        shadowOf(getMainLooper()).idle()
+
+        val logins = receivedPrompt!!.logins
+        assertEquals(1, logins.size)
+        assertNull(logins[0].httpRealm)
+        assertEquals(testUrlWithFormAction, logins[0].formActionOrigin)
+    }
+
+    @Test
+    fun `onLoginSelect with neither httpRealm nor formActionOrigin uses currentUrl as formActionOrigin`() {
+        val mockSession = GeckoEngineSession(runtime, downloadFileUtils = mock()).also {
+            it.currentUrl = testUrl
+        }
+        var receivedPrompt: PromptRequest.SelectLoginPrompt? = null
+
+        val promptDelegate = GeckoPromptDelegate(mockSession)
+
+        mockSession.register(
+            object : EngineSession.Observer {
+                override fun onPromptRequest(promptRequest: PromptRequest) {
+                    receivedPrompt = promptRequest as PromptRequest.SelectLoginPrompt
+                }
+            },
+        )
+
+        val loginEntry = createLoginEntry(
+            httpRealm = null,
+            formActionOrigin = null,
+        )
+        val loginSelectOption = Autocomplete.LoginSelectOption(loginEntry.toLoginEntry())
+
+        promptDelegate.onLoginSelect(
+            mock(),
+            geckoLoginSelectPrompt(arrayOf(loginSelectOption)),
+        )
+        shadowOf(getMainLooper()).idle()
+
+        val logins = receivedPrompt!!.logins
+        assertEquals(1, logins.size)
+        assertNull(logins[0].httpRealm)
+        assertEquals(testUrl, logins[0].formActionOrigin)
+    }
+
+    @Test
+    fun `onLoginSelect with blank httpRealm and formActionOrigin uses currentUrl as formActionOrigin`() {
+        val mockSession = GeckoEngineSession(runtime, downloadFileUtils = mock()).also {
+            it.currentUrl = testUrl
+        }
+        var receivedPrompt: PromptRequest.SelectLoginPrompt? = null
+
+        val promptDelegate = GeckoPromptDelegate(mockSession)
+
+        mockSession.register(
+            object : EngineSession.Observer {
+                override fun onPromptRequest(promptRequest: PromptRequest) {
+                    receivedPrompt = promptRequest as PromptRequest.SelectLoginPrompt
+                }
+            },
+        )
+
+        val loginEntry = createLoginEntry(
+            httpRealm = "",
+            formActionOrigin = "",
+        )
+        val loginSelectOption = Autocomplete.LoginSelectOption(loginEntry.toLoginEntry())
+
+        promptDelegate.onLoginSelect(
+            mock(),
+            geckoLoginSelectPrompt(arrayOf(loginSelectOption)),
+        )
+        shadowOf(getMainLooper()).idle()
+
+        val logins = receivedPrompt!!.logins
+        assertEquals(1, logins.size)
+        assertEquals("", logins[0].httpRealm)
+        assertEquals(testUrl, logins[0].formActionOrigin)
+    }
+
     fun createLogin(
         guid: String = "id",
         password: String = "password",
@@ -1043,8 +1222,8 @@ class GeckoPromptDelegateTest {
         password: String = "password",
         username: String = "username",
         origin: String = "https://www.origin.com",
-        httpRealm: String = "httpRealm",
-        formActionOrigin: String = "https://www.origin.com",
+        httpRealm: String? = "httpRealm",
+        formActionOrigin: String? = "https://www.origin.com",
         usernameField: String = "usernameField",
         passwordField: String = "passwordField",
     ) = LoginEntry(
diff --git a/mobile/android/android-components/components/concept/storage/src/main/java/mozilla/components/concept/storage/LoginsStorage.kt b/mobile/android/android-components/components/concept/storage/src/main/java/mozilla/components/concept/storage/LoginsStorage.kt
index 8e93ba2544f1a..bc15ecd66f1d7 100644
--- a/mobile/android/android-components/components/concept/storage/src/main/java/mozilla/components/concept/storage/LoginsStorage.kt
+++ b/mobile/android/android-components/components/concept/storage/src/main/java/mozilla/components/concept/storage/LoginsStorage.kt
@@ -6,6 +6,29 @@ package mozilla.components.concept.storage
 
 import kotlinx.coroutines.Deferred
 
+/**
+ * Hint types that provide context in which a login entry was created or presented.
+ */
+enum class LoginHint {
+    /** No hint specified. */
+    NONE,
+
+    /** Auto-generated secure password. */
+    GENERATED,
+
+    /** The form that is considered insecure. */
+    INSECURE_FORM,
+
+    /** The username is shared with another login entry. */
+    DUPLICATE_USERNAME,
+
+    /** The login entry's origin matches the login form origin. */
+    MATCHING_ORIGIN,
+
+    /** Indicates that an email mask should be offered. */
+    EMAIL_MASK,
+}
+
 /**
  * A login stored in the database
  */
@@ -75,6 +98,11 @@ data class Login(
      * This field is set on Desktop when a user discards the warning message of the breach.
      */
     val timeLastBreachAlertDismissed: Long? = null,
+    /**
+     * A hint provides context in which this item was created. For example, [LoginHint.GENERATED]
+     * tells a consumer that the password was generated.
+     */
+    val hint: LoginHint = LoginHint.NONE,
 ) {
     /**
      * Converts [Login] into a [LoginEntry].
diff --git a/mobile/android/android-components/components/feature/prompts/src/main/java/mozilla/components/feature/prompts/PromptFeature.kt b/mobile/android/android-components/components/feature/prompts/src/main/java/mozilla/components/feature/prompts/PromptFeature.kt
index f843f99599161..fffcc106f269f 100644
--- a/mobile/android/android-components/components/feature/prompts/src/main/java/mozilla/components/feature/prompts/PromptFeature.kt
+++ b/mobile/android/android-components/components/feature/prompts/src/main/java/mozilla/components/feature/prompts/PromptFeature.kt
@@ -54,6 +54,7 @@ import mozilla.components.concept.storage.CreditCardEntry
 import mozilla.components.concept.storage.CreditCardValidationDelegate
 import mozilla.components.concept.storage.Login
 import mozilla.components.concept.storage.LoginEntry
+import mozilla.components.concept.storage.LoginHint
 import mozilla.components.concept.storage.LoginValidationDelegate
 import mozilla.components.feature.prompts.address.AddressDelegate
 import mozilla.components.feature.prompts.address.AddressPicker
@@ -677,25 +678,33 @@ class PromptFeature private constructor(
                     return
                 }
 
-                if (promptRequest.generatedPassword != null) {
-                    if (shouldAutomaticallyShowSuggestedPassword.invoke()) {
-                        onFirstTimeEngagedWithSignup.invoke()
-                        handleDialogsRequest(
-                            promptRequest,
-                            session,
-                        )
-                    } else {
-                        strongPasswordPromptViewListener?.onGeneratedPasswordPromptClick = {
+                val loginsByHint = promptRequest.logins.groupBy { it.hint }
+                when {
+                    LoginHint.GENERATED in loginsByHint -> {
+                        if (shouldAutomaticallyShowSuggestedPassword.invoke()) {
+                            onFirstTimeEngagedWithSignup.invoke()
                             handleDialogsRequest(
                                 promptRequest,
                                 session,
                             )
+                        } else {
+                            strongPasswordPromptViewListener?.onGeneratedPasswordPromptClick = {
+                                handleDialogsRequest(
+                                    promptRequest,
+                                    session,
+                                )
+                            }
+                            strongPasswordPromptViewListener?.handleSuggestStrongPasswordRequest()
                         }
-                        strongPasswordPromptViewListener?.handleSuggestStrongPasswordRequest()
                     }
-                } else {
-                    loginPicker?.handleSelectLoginRequest(promptRequest)
+                    LoginHint.EMAIL_MASK in loginsByHint -> {
+                        // no-op; implemented with Bug 2012397.
+                    }
+                    else -> {
+                        loginPicker?.handleSelectLoginRequest(promptRequest)
+                    }
                 }
+
                 emitPromptDisplayedFact(promptName = "SelectLoginPrompt")
             }
 
diff --git a/mobile/android/android-components/components/feature/prompts/src/main/java/mozilla/components/feature/prompts/login/PasswordGeneratorDialogFragment.kt b/mobile/android/android-components/components/feature/prompts/src/main/java/mozilla/components/feature/prompts/login/PasswordGeneratorDialogFragment.kt
index 059bb35c5fed8..48da79ee829ff 100644
--- a/mobile/android/android-components/components/feature/prompts/src/main/java/mozilla/components/feature/prompts/login/PasswordGeneratorDialogFragment.kt
+++ b/mobile/android/android-components/components/feature/prompts/src/main/java/mozilla/components/feature/prompts/login/PasswordGeneratorDialogFragment.kt
@@ -19,6 +19,7 @@ import androidx.fragment.compose.content
 import com.google.android.material.bottomsheet.BottomSheetBehavior
 import com.google.android.material.bottomsheet.BottomSheetDialog
 import mozilla.components.concept.storage.Login
+import mozilla.components.concept.storage.LoginHint
 import mozilla.components.feature.prompts.R
 import mozilla.components.feature.prompts.dialog.KEY_PROMPT_UID
 import mozilla.components.feature.prompts.dialog.KEY_SESSION_ID
@@ -95,6 +96,7 @@ internal class PasswordGeneratorDialogFragment : PromptDialogFragment() {
             httpRealm = currentUrl,
             username = "",
             password = generatedPassword,
+            hint = LoginHint.GENERATED,
         )
         feature?.onConfirm(sessionId, promptRequestUID, login)
         emitGeneratedPasswordFilledFact()
diff --git a/mobile/android/android-components/docs/changelog.md b/mobile/android/android-components/docs/changelog.md
index ab3b105edf4bc..28a2c911b734f 100644
--- a/mobile/android/android-components/docs/changelog.md
+++ b/mobile/android/android-components/docs/changelog.md
@@ -5,13 +5,14 @@ permalink: /changelog/
 ---
 
 # 149.0 (In Development)
-* **engine-gecko**
+* **browser-engine-gecko**
   * ⚠️ **Breaking change**: Added `DownloadFileUtils` parameter to `GeckoServiceWorkerDelegate`,
     `SpeculativeSessionFactory`, `GeckoEngine`, `AndroidDownloadManager` and `GeckoEngineSession` [Bug 2004990] (https://bugzilla.mozilla.org/show_bug.cgi?id=2004990)
-* **browser-engine-gecko**
-  * 🆕 New Engine Settings API `firefoxRelay` that can be see to different modes with `FirefoxRelayMode`.
 * **browser-engine-gecko** and **concept-engine**
+  * 🆕 New Engine Settings API `firefoxRelay` that can be see to different modes with `FirefoxRelayMode`.
   * Updated GeckoEngine and BrowserPreferencesRuntime to accommodate registering and unregistering multiple browser preferences at a time for observation. [Bug 2006095](https://bugzilla.mozilla.org/show_bug.cgi?id=2006095)
+* **concept-storage**
+  * Introduced `Login.hint` for context on the login origin that an embedder can use to determine how to handle it.
 
 # 148.0
 * **support-utils**
diff --git a/mobile/android/android-components/plugins/dependencies/src/main/java/ApplicationServices.kt b/mobile/android/android-components/plugins/dependencies/src/main/java/ApplicationServices.kt
index 8845d37f3fca0..563a13d2e57de 100644
--- a/mobile/android/android-components/plugins/dependencies/src/main/java/ApplicationServices.kt
+++ b/mobile/android/android-components/plugins/dependencies/src/main/java/ApplicationServices.kt
@@ -3,7 +3,7 @@
  * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
 
 // These lines are generated by android-components/automation/application-services-nightly-bump.py
-val VERSION = "149.20260203050225"
+val VERSION = "149.20260204050206"
 val CHANNEL = ApplicationServicesChannel.NIGHTLY
 
 object ApplicationServicesConfig {
diff --git a/mobile/android/android-components/plugins/dependencies/src/main/java/moz.yaml b/mobile/android/android-components/plugins/dependencies/src/main/java/moz.yaml
index 8f4ec1856e109..0dc53a647f10a 100644
--- a/mobile/android/android-components/plugins/dependencies/src/main/java/moz.yaml
+++ b/mobile/android/android-components/plugins/dependencies/src/main/java/moz.yaml
@@ -31,11 +31,11 @@ origin:
 
   # Human-readable identifier for this version/release
   # Generally "version NNN", "tag SSS", "bookmark SSS"
-  release: 50fa3cb0d77ff645bff220d61321f74676af4ebf (2026-02-03T05:02:25).
+  release: 42c175c2ecb5aa39346dcd9c7b45ff02325562d8 (2026-02-04T05:02:06).
 
   # Revision to pull in
   # Must be a long or short commit SHA (long preferred)
-  revision: 50fa3cb0d77ff645bff220d61321f74676af4ebf
+  revision: 42c175c2ecb5aa39346dcd9c7b45ff02325562d8
 
   # The package's license, where possible using the mnemonic from
   # https://spdx.org/licenses/
diff --git a/mobile/android/fenix/.buildconfig.yml b/mobile/android/fenix/.buildconfig.yml
index 5c550dfa554e1..7d6542bd634de 100644
--- a/mobile/android/fenix/.buildconfig.yml
+++ b/mobile/android/fenix/.buildconfig.yml
@@ -69,6 +69,7 @@ projects:
     - components:lib-state
     - components:service-digitalassetlinks
     - components:service-firefox-accounts
+    - components:service-firefox-relay
     - components:service-glean
     - components:service-location
     - components:service-mars
diff --git a/mobile/android/fenix/app/build.gradle b/mobile/android/fenix/app/build.gradle
index 1ece34112904e..8d54b9df69861 100644
--- a/mobile/android/fenix/app/build.gradle
+++ b/mobile/android/fenix/app/build.gradle
@@ -597,6 +597,7 @@ dependencies {
     implementation project(':components:feature-webnotifications')
     implementation project(':components:service-digitalassetlinks')
     implementation project(':components:service-firefox-accounts')
+    implementation project(":components:service-firefox-relay")
     implementation project(':components:service-glean')
     implementation project(':components:service-location')
     implementation project(':components:service-mars')
diff --git a/mobile/android/fenix/app/src/androidTest/java/org/mozilla/fenix/ui/MainMenuTest.kt b/mobile/android/fenix/app/src/androidTest/java/org/mozilla/fenix/ui/MainMenuTest.kt
index 04ea41cda88a9..abdc8b162710b 100644
--- a/mobile/android/fenix/app/src/androidTest/java/org/mozilla/fenix/ui/MainMenuTest.kt
+++ b/mobile/android/fenix/app/src/androidTest/java/org/mozilla/fenix/ui/MainMenuTest.kt
@@ -837,7 +837,7 @@ class MainMenuTest : TestSetup() {
         }
     }
 
-    // TestRail link: https://mozilla.testrail.io/index.php?/cases/view/2939173
+    // TestRail link: https://mozilla.testrail.io/index.php?/cases/view/2937924
     @Test
     fun verifyTheWhatIsBrokenErrorMessageTest() {
         val defaultWebPage = mockWebServer.getGenericAsset(1)
@@ -857,7 +857,7 @@ class MainMenuTest : TestSetup() {
         }
     }
 
-    // TestRail link: https://mozilla.testrail.io/index.php?/cases/view/2939175
+    // TestRail link: https://mozilla.testrail.io/index.php?/cases/view/2937926
     @Test
     fun verifyThatTheBrokenSiteFormSubmissionCanBeCanceledTest() {
         val defaultWebPage = mockWebServer.getGenericAsset(1)
@@ -878,7 +878,7 @@ class MainMenuTest : TestSetup() {
         }
     }
 
-    // TestRail link: https://mozilla.testrail.io/index.php?/cases/view/2939176
+    // TestRail link: https://mozilla.testrail.io/index.php?/cases/view/2937927
     @Ignore("Failing, see https://bugzilla.mozilla.org/show_bug.cgi?id=1968653")
     @Test
     fun verifyTheBrokenSiteFormSubmissionWithOptionalFieldsTest() {
@@ -908,7 +908,7 @@ class MainMenuTest : TestSetup() {
         }
     }
 
-    // TestRail link: https://mozilla.testrail.io/index.php?/cases/view/2939179
+    // TestRail link: https://mozilla.testrail.io/index.php?/cases/view/2937930
     @Test
     fun verifyThatTheBrokenSiteFormInfoPersistsTest() {
         val defaultWebPage = mockWebServer.getGenericAsset(1)
@@ -933,7 +933,7 @@ class MainMenuTest : TestSetup() {
         }
     }
 
-    // TestRail link: https://mozilla.testrail.io/index.php?/cases/view/2939180
+    // TestRail link: https://mozilla.testrail.io/index.php?/cases/view/2937931
     @Test
     fun verifyTheBrokenSiteFormIsEmptyWithoutSubmittingThePreviousOneTest() {
         val firstWebPage = mockWebServer.getGenericAsset(1)
@@ -965,7 +965,7 @@ class MainMenuTest : TestSetup() {
         }
     }
 
-    // TestRail link: https://mozilla.testrail.io/index.php?/cases/view/2939181
+    // TestRail link: https://mozilla.testrail.io/index.php?/cases/view/2937932
     @Test
     fun verifyThatTheBrokenSiteFormInfoIsErasedWhenKillingTheAppTest() {
         val defaultWebPage = mockWebServer.getGenericAsset(1)
@@ -995,7 +995,7 @@ class MainMenuTest : TestSetup() {
         }
     }
 
-    // TestRail link: https://mozilla.testrail.io/index.php?/cases/view/2939182
+    // TestRail link: https://mozilla.testrail.io/index.php?/cases/view/2937933
     @Test
     fun verifyReportBrokenSiteFormNotDisplayedWhenTelemetryIsDisabledTest() {
         val defaultWebPage = mockWebServer.getGenericAsset(1)
diff --git a/mobile/android/fenix/app/src/main/java/org/mozilla/fenix/browser/BaseBrowserFragment.kt b/mobile/android/fenix/app/src/main/java/org/mozilla/fenix/browser/BaseBrowserFragment.kt
index e1331d0affd7f..0058af04ca926 100644
--- a/mobile/android/fenix/app/src/main/java/org/mozilla/fenix/browser/BaseBrowserFragment.kt
+++ b/mobile/android/fenix/app/src/main/java/org/mozilla/fenix/browser/BaseBrowserFragment.kt
@@ -126,7 +126,11 @@ import mozilla.components.feature.webauthn.WebAuthnFeature
 import mozilla.components.lib.state.ext.consumeFlow
 import mozilla.components.lib.state.ext.consumeFrom
 import mozilla.components.lib.state.ext.flowScoped
+import mozilla.components.lib.state.helpers.StoreProvider.Companion.activityStore
 import mozilla.components.lib.state.helpers.StoreProvider.Companion.fragmentStore
+import mozilla.components.service.fxrelay.eligibility.RelayEligibilityStore
+import mozilla.components.service.fxrelay.eligibility.RelayFeature
+import mozilla.components.service.fxrelay.eligibility.RelayState
 import mozilla.components.service.sync.autofill.DefaultCreditCardValidationDelegate
 import mozilla.components.service.sync.logins.DefaultLoginValidationDelegate
 import mozilla.components.service.sync.logins.LoginsApiException
@@ -327,6 +331,7 @@ abstract class BaseBrowserFragment :
     private val shareResourceFeature = ViewBoundFeatureWrapper<ShareResourceFeature>()
     private val copyDownloadsFeature = ViewBoundFeatureWrapper<CopyDownloadFeature>()
     private val promptsFeature = ViewBoundFeatureWrapper<PromptFeature>()
+    private val relayFeature = ViewBoundFeatureWrapper<RelayFeature>()
 
     @VisibleForTesting
     internal val findInPageIntegration = ViewBoundFeatureWrapper<FindInPageIntegration>()
@@ -1208,6 +1213,21 @@ abstract class BaseBrowserFragment :
             view = view,
         )
 
+        if (context.settings().isEmailMaskFeatureEnabled && context.settings().isEmailMaskSuggestionEnabled) {
+            relayFeature.set(
+                feature = RelayFeature(
+                    accountManager = requireComponents.backgroundServices.accountManager,
+                    store = activityStore(RelayState()) {
+                        RelayEligibilityStore(
+                            initialState = it,
+                        )
+                    }.value,
+                ),
+                owner = this,
+                view = view,
+            )
+        }
+
         sessionFeature.set(
             feature = SessionFeature(
                 requireComponents.core.store,
diff --git a/mobile/android/fenix/app/src/main/java/org/mozilla/fenix/search/BrowserToolbarToFenixSearchMapperMiddleware.kt b/mobile/android/fenix/app/src/main/java/org/mozilla/fenix/search/BrowserToolbarToFenixSearchMapperMiddleware.kt
index 1dc101929b637..c368d5a45892a 100644
--- a/mobile/android/fenix/app/src/main/java/org/mozilla/fenix/search/BrowserToolbarToFenixSearchMapperMiddleware.kt
+++ b/mobile/android/fenix/app/src/main/java/org/mozilla/fenix/search/BrowserToolbarToFenixSearchMapperMiddleware.kt
@@ -43,6 +43,8 @@ class BrowserToolbarToFenixSearchMapperMiddleware(
         next: (SearchFragmentAction) -> Unit,
         action: SearchFragmentAction,
     ) {
+        next(action)
+
         if (action is Init) {
             syncSearchStatus(store)
 
@@ -50,8 +52,6 @@ class BrowserToolbarToFenixSearchMapperMiddleware(
                 syncUserQuery(store)
             }
         }
-
-        next(action)
     }
 
     private fun syncSearchStatus(store: Store<SearchFragmentState, SearchFragmentAction>) {
diff --git a/mobile/android/fenix/app/src/main/java/org/mozilla/fenix/search/FenixSearchMiddleware.kt b/mobile/android/fenix/app/src/main/java/org/mozilla/fenix/search/FenixSearchMiddleware.kt
index 863741218bebd..da7f34ae66b1c 100644
--- a/mobile/android/fenix/app/src/main/java/org/mozilla/fenix/search/FenixSearchMiddleware.kt
+++ b/mobile/android/fenix/app/src/main/java/org/mozilla/fenix/search/FenixSearchMiddleware.kt
@@ -243,7 +243,8 @@ class FenixSearchMiddleware(
         val showPrivatePrompt = with(store.state) {
             !settings.showSearchSuggestionsInPrivateOnboardingFinished &&
                     browsingModeManager.mode.isPrivate &&
-                    !isSearchSuggestionsFeatureEnabled() && !showSearchShortcuts && url != query
+                    !isSearchSuggestionsFeatureEnabled() && !showSearchShortcuts &&
+                    query.isNotBlank() && url != query
         }
 
         store.dispatch(
diff --git a/mobile/android/fenix/app/src/test/java/org/mozilla/fenix/search/FenixSearchMiddlewareTest.kt b/mobile/android/fenix/app/src/test/java/org/mozilla/fenix/search/FenixSearchMiddlewareTest.kt
index 40ee11fa2d9d2..7147bb3affe65 100644
--- a/mobile/android/fenix/app/src/test/java/org/mozilla/fenix/search/FenixSearchMiddlewareTest.kt
+++ b/mobile/android/fenix/app/src/test/java/org/mozilla/fenix/search/FenixSearchMiddlewareTest.kt
@@ -276,6 +276,32 @@ class FenixSearchMiddlewareTest {
         }
     }
 
+    @Test
+    fun `GIVEN browsing mode is private and suggestions in private mode not allowed WHEN the query is empty THEN don't show the private suggestions banner`() {
+        val (_, store) = buildMiddlewareAndAddToSearchStore()
+        every { settings.showSearchSuggestionsInPrivateOnboardingFinished } returns false
+        every { settings.shouldShowSearchSuggestions } returns true
+        every { settings.shouldShowSearchSuggestionsInPrivate } returns false
+        every { browsingModeManager.mode } returns BrowsingMode.Private
+
+        store.dispatch(SearchFragmentAction.UpdateQuery(""))
+
+        assertFalse(store.state.showSearchSuggestionsHint)
+    }
+
+    @Test
+    fun `GIVEN browsing mode is private and suggestions in private mode not allowed WHEN the query is not empty THEN show the private suggestions banner`() {
+        val (_, store) = buildMiddlewareAndAddToSearchStore()
+        every { settings.showSearchSuggestionsInPrivateOnboardingFinished } returns false
+        every { settings.shouldShowSearchSuggestions } returns true
+        every { settings.shouldShowSearchSuggestionsInPrivate } returns false
+        every { browsingModeManager.mode } returns BrowsingMode.Private
+
+        store.dispatch(SearchFragmentAction.UpdateQuery("test"))
+
+        assertTrue(store.state.showSearchSuggestionsHint)
+    }
+
     @Test
     fun `GIVEN browsing mode is private and user has allowed suggestions in private mode WHEN search query is different than the current URL and not empty THEN show search suggestions`() {
         val (_, store) = buildMiddlewareAndAddToSearchStore()
diff --git a/mobile/android/fenix/plugins/apksize/src/main/java/ApkSizePlugin.kt b/mobile/android/fenix/plugins/apksize/src/main/java/ApkSizePlugin.kt
index 9484a6ada35ea..a9f9af88ba7d7 100644
--- a/mobile/android/fenix/plugins/apksize/src/main/java/ApkSizePlugin.kt
+++ b/mobile/android/fenix/plugins/apksize/src/main/java/ApkSizePlugin.kt
@@ -30,7 +30,7 @@ class ApkSizePlugin : Plugin<Project> {
         project.plugins.withType<AppPlugin>().configureEach {
             val androidComponents = project.extensions.getByType(AndroidComponentsExtension::class.java)
             androidComponents.onVariants { variant ->
-                val taskName = "apkSize${variant.name.capitalize()}"
+                val taskName = "apkSize${variant.name.replaceFirstChar { it.uppercase() }}"
                 val task = project.tasks.register(taskName, ApkSizeTask::class.java)
                 task.configure {
                     artifactsDirectory.set(variant.artifacts.get(SingleArtifact.APK))
@@ -64,7 +64,7 @@ abstract class ApkSizeTask : DefaultTask() {
         val builtArtifacts = artifactsLoader.get().load(artifactsDirectory.get())
             ?: throw RuntimeException("Cannot load APK metadata")
 
-        val variantName = builtArtifacts.variantName.capitalize()
+        val variantName = builtArtifacts.variantName.replaceFirstChar { it.uppercase() }
         val apkSizes = determineApkSizes(builtArtifacts.elements)
         val json = buildPerfherderJson(variantName, apkSizes)
 
diff --git a/mobile/android/geckoview/src/androidTest/java/org/mozilla/geckoview/test/ScreenshotTest.kt b/mobile/android/geckoview/src/androidTest/java/org/mozilla/geckoview/test/ScreenshotTest.kt
index 4538c34e3d182..8bd9beaad90de 100644
--- a/mobile/android/geckoview/src/androidTest/java/org/mozilla/geckoview/test/ScreenshotTest.kt
+++ b/mobile/android/geckoview/src/androidTest/java/org/mozilla/geckoview/test/ScreenshotTest.kt
@@ -93,7 +93,7 @@ class ScreenshotTest : BaseSessionTest() {
             assertThat(
                 "Images are almost identical",
                 imageElementDifference(comparisonImage, it),
-                lessThanOrEqualTo(1),
+                lessThanOrEqualTo(2),
             )
         }
     }
diff --git a/mobile/locales/l10n-changesets.json b/mobile/locales/l10n-changesets.json
index be19ddb560cbe..665443996e8b7 100644
--- a/mobile/locales/l10n-changesets.json
+++ b/mobile/locales/l10n-changesets.json
@@ -6,7 +6,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "an": {
         "pin": false,
@@ -15,7 +15,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "ar": {
         "pin": false,
@@ -24,7 +24,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "ast": {
         "pin": false,
@@ -33,7 +33,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "az": {
         "pin": false,
@@ -42,7 +42,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "be": {
         "pin": false,
@@ -51,7 +51,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "bg": {
         "pin": false,
@@ -60,7 +60,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "bn": {
         "pin": false,
@@ -69,7 +69,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "br": {
         "pin": false,
@@ -78,7 +78,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "bs": {
         "pin": false,
@@ -87,7 +87,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "ca": {
         "pin": false,
@@ -96,7 +96,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "cak": {
         "pin": false,
@@ -105,7 +105,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "cs": {
         "pin": false,
@@ -114,7 +114,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "cy": {
         "pin": false,
@@ -123,7 +123,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "da": {
         "pin": false,
@@ -132,7 +132,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "de": {
         "pin": false,
@@ -141,7 +141,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "dsb": {
         "pin": false,
@@ -150,7 +150,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "el": {
         "pin": false,
@@ -159,7 +159,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "en-CA": {
         "pin": false,
@@ -168,7 +168,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "en-GB": {
         "pin": false,
@@ -177,7 +177,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "eo": {
         "pin": false,
@@ -186,7 +186,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "es-AR": {
         "pin": false,
@@ -195,7 +195,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "es-CL": {
         "pin": false,
@@ -204,7 +204,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "es-ES": {
         "pin": false,
@@ -213,7 +213,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "es-MX": {
         "pin": false,
@@ -222,7 +222,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "et": {
         "pin": false,
@@ -231,7 +231,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "eu": {
         "pin": false,
@@ -240,7 +240,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "fa": {
         "pin": false,
@@ -249,7 +249,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "ff": {
         "pin": false,
@@ -258,7 +258,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "fi": {
         "pin": false,
@@ -267,7 +267,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "fr": {
         "pin": false,
@@ -276,7 +276,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "fy-NL": {
         "pin": false,
@@ -285,7 +285,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "ga-IE": {
         "pin": false,
@@ -294,7 +294,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "gd": {
         "pin": false,
@@ -303,7 +303,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "gl": {
         "pin": false,
@@ -312,7 +312,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "gn": {
         "pin": false,
@@ -321,7 +321,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "gu-IN": {
         "pin": false,
@@ -330,7 +330,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "he": {
         "pin": false,
@@ -339,7 +339,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "hi-IN": {
         "pin": false,
@@ -348,7 +348,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "hr": {
         "pin": false,
@@ -357,7 +357,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "hsb": {
         "pin": false,
@@ -366,7 +366,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "hu": {
         "pin": false,
@@ -375,7 +375,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "hy-AM": {
         "pin": false,
@@ -384,7 +384,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "ia": {
         "pin": false,
@@ -393,7 +393,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "id": {
         "pin": false,
@@ -402,7 +402,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "is": {
         "pin": false,
@@ -411,7 +411,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "it": {
         "pin": false,
@@ -420,7 +420,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "ja": {
         "pin": false,
@@ -429,7 +429,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "ka": {
         "pin": false,
@@ -438,7 +438,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "kab": {
         "pin": false,
@@ -447,7 +447,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "kk": {
         "pin": false,
@@ -456,7 +456,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "km": {
         "pin": false,
@@ -465,7 +465,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "kn": {
         "pin": false,
@@ -474,7 +474,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "ko": {
         "pin": false,
@@ -483,7 +483,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "lij": {
         "pin": false,
@@ -492,7 +492,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "lo": {
         "pin": false,
@@ -501,7 +501,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "lt": {
         "pin": false,
@@ -510,7 +510,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "ltg": {
         "pin": false,
@@ -519,7 +519,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "lv": {
         "pin": false,
@@ -528,7 +528,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "meh": {
         "pin": false,
@@ -537,7 +537,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "mix": {
         "pin": false,
@@ -546,7 +546,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "ml": {
         "pin": false,
@@ -555,7 +555,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "mr": {
         "pin": false,
@@ -564,7 +564,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "ms": {
         "pin": false,
@@ -573,7 +573,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "my": {
         "pin": false,
@@ -582,7 +582,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "nb-NO": {
         "pin": false,
@@ -591,7 +591,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "ne-NP": {
         "pin": false,
@@ -600,7 +600,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "nl": {
         "pin": false,
@@ -609,7 +609,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "nn-NO": {
         "pin": false,
@@ -618,7 +618,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "oc": {
         "pin": false,
@@ -627,7 +627,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "pa-IN": {
         "pin": false,
@@ -636,7 +636,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "pl": {
         "pin": false,
@@ -645,7 +645,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "pt-BR": {
         "pin": false,
@@ -654,7 +654,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "pt-PT": {
         "pin": false,
@@ -663,7 +663,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "rm": {
         "pin": false,
@@ -672,7 +672,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "ro": {
         "pin": false,
@@ -681,7 +681,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "ru": {
         "pin": false,
@@ -690,7 +690,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "sk": {
         "pin": false,
@@ -699,7 +699,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "sl": {
         "pin": false,
@@ -708,7 +708,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "son": {
         "pin": false,
@@ -717,7 +717,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "sq": {
         "pin": false,
@@ -726,7 +726,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "sr": {
         "pin": false,
@@ -735,7 +735,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "sv-SE": {
         "pin": false,
@@ -744,7 +744,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "ta": {
         "pin": false,
@@ -753,7 +753,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "te": {
         "pin": false,
@@ -762,7 +762,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "th": {
         "pin": false,
@@ -771,7 +771,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "tl": {
         "pin": false,
@@ -780,7 +780,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "tr": {
         "pin": false,
@@ -789,7 +789,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "trs": {
         "pin": false,
@@ -798,7 +798,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "uk": {
         "pin": false,
@@ -807,7 +807,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "ur": {
         "pin": false,
@@ -816,7 +816,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "uz": {
         "pin": false,
@@ -825,7 +825,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "vi": {
         "pin": false,
@@ -834,7 +834,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "wo": {
         "pin": false,
@@ -843,7 +843,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "xh": {
         "pin": false,
@@ -852,7 +852,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "zam": {
         "pin": false,
@@ -861,7 +861,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "zh-CN": {
         "pin": false,
@@ -870,7 +870,7 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     },
     "zh-TW": {
         "pin": false,
@@ -879,6 +879,6 @@
             "android-arm",
             "android-multilocale"
         ],
-        "revision": "ecdfdca74a53222f4937e831829de0ab6e1ee5f8"
+        "revision": "a7420bb8974bc65bbc7efed4fe2c97056ff3ec0e"
     }
 }
\ No newline at end of file
diff --git a/modules/libpref/init/StaticPrefList.yaml b/modules/libpref/init/StaticPrefList.yaml
index a524b69436284..0ddf5e8239b31 100644
--- a/modules/libpref/init/StaticPrefList.yaml
+++ b/modules/libpref/init/StaticPrefList.yaml
@@ -8635,16 +8635,16 @@
 
 # Whether to allow decoding of animated AVIF sequences.
 - name: image.avif.sequence.enabled
-  type: RelaxedAtomicBool
+  type: bool
   value: true
-  mirror: always
+  mirror: once
 
 # Whether AVIF files containing sequences should be animated even when the
 # major brand is set to 'avif'.
 - name: image.avif.sequence.animate_avif_major_branded_images
-  type: RelaxedAtomicBool
+  type: bool
   value: false
-  mirror: always
+  mirror: once
 
 # Whether we attempt to decode JXL images or not.
 - name: image.jxl.enabled
@@ -14042,6 +14042,13 @@
   value: true
   mirror: always
 
+# When MOZ_DISABLE_NONLOCAL_CONNECTIONS is set, allow these non-local domains
+# which are required for testing.
+- name: network.socket.allowed_nonlocal_domains
+  type: DataMutexString
+  value: ""
+  mirror: always
+
 # Set true to allow resolving proxy for localhost
 - name: network.proxy.allow_hijacking_localhost
   type: RelaxedAtomicBool
diff --git a/mozglue/baseprofiler/core/platform.cpp b/mozglue/baseprofiler/core/platform.cpp
index 6f08bc7a1040e..60f57d6e3270d 100644
--- a/mozglue/baseprofiler/core/platform.cpp
+++ b/mozglue/baseprofiler/core/platform.cpp
@@ -37,7 +37,6 @@
 #include <string_view>
 
 // #include "memory_hooks.h"
-#include "mozilla/AutoProfilerLabel.h"
 #include "mozilla/BaseAndGeckoProfilerDetail.h"
 #include "mozilla/BaseProfiler.h"
 #include "mozilla/BaseProfilerDetail.h"
@@ -2865,24 +2864,6 @@ Maybe<ProfilerBufferInfo> profiler_get_buffer_info() {
   return Some(ActivePS::Buffer(lock).GetProfilerBufferInfo());
 }
 
-// This basically duplicates AutoProfilerLabel's constructor.
-static void* MozGlueBaseLabelEnter(const char* aLabel,
-                                   const char* aDynamicString, void* aSp) {
-  ProfilingStack* profilingStack = AutoProfilerLabel::sProfilingStack.get();
-  if (profilingStack) {
-    profilingStack->pushLabelFrame(aLabel, aDynamicString, aSp,
-                                   ProfilingCategoryPair::OTHER);
-  }
-  return profilingStack;
-}
-
-// This basically duplicates AutoProfilerLabel's destructor.
-static void MozGlueBaseLabelExit(void* sProfilingStack) {
-  if (sProfilingStack) {
-    reinterpret_cast<ProfilingStack*>(sProfilingStack)->pop();
-  }
-}
-
 static void locked_profiler_start(PSLockRef aLock, PowerOfTwo32 aCapacity,
                                   double aInterval, uint32_t aFeatures,
                                   const char** aFilters, uint32_t aFilterCount,
@@ -2949,9 +2930,6 @@ static void locked_profiler_start(PSLockRef aLock, PowerOfTwo32 aCapacity,
     }
   }
 
-  // Setup support for pushing/popping labels in mozglue.
-  RegisterProfilerLabelEnterExit(MozGlueBaseLabelEnter, MozGlueBaseLabelExit);
-
   // At the very end, set up RacyFeatures.
   RacyFeatures::SetActive(ActivePS::Features(aLock));
 }
@@ -3056,9 +3034,6 @@ void profiler_ensure_started(PowerOfTwo32 aCapacity, double aInterval,
   //   mozilla::profiler::install_memory_counter(false);
   // #endif
 
-  // Remove support for pushing/popping labels in mozglue.
-  RegisterProfilerLabelEnterExit(nullptr, nullptr);
-
   // Stop sampling live threads.
   const Vector<LiveProfiledThreadData>& liveProfiledThreads =
       ActivePS::LiveProfiledThreads(aLock);
diff --git a/mozglue/misc/AutoProfilerLabel.cpp b/mozglue/misc/AutoProfilerLabel.cpp
deleted file mode 100644
index c6d01c2700e22..0000000000000
--- a/mozglue/misc/AutoProfilerLabel.cpp
+++ /dev/null
@@ -1,110 +0,0 @@
-/* -*- Mode: C++; tab-width: 2; indent-tabs-mode: nil; c-basic-offset: 2 -*- */
-/* vim: set ts=8 sts=2 et sw=2 tw=80: */
-/* This Source Code Form is subject to the terms of the Mozilla Public
- * License, v. 2.0. If a copy of the MPL was not distributed with this
- * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
-
-#include "mozilla/AutoProfilerLabel.h"
-
-#include "mozilla/Assertions.h"
-#include "mozilla/PlatformMutex.h"
-
-namespace mozilla {
-
-// RAII class that encapsulates all shared static data, and enforces locking
-// when accessing this data.
-class MOZ_RAII AutoProfilerLabelData {
- public:
-  AutoProfilerLabelData() { sAPLMutex.Lock(); }
-
-  ~AutoProfilerLabelData() { sAPLMutex.Unlock(); }
-
-  AutoProfilerLabelData(const AutoProfilerLabelData&) = delete;
-  void operator=(const AutoProfilerLabelData&) = delete;
-
-  const ProfilerLabelEnter& EnterCRef() const { return sEnter; }
-  ProfilerLabelEnter& EnterRef() { return sEnter; }
-
-  const ProfilerLabelExit& ExitCRef() const { return sExit; }
-  ProfilerLabelExit& ExitRef() { return sExit; }
-
-  const uint32_t& GenerationCRef() const { return sGeneration; }
-  uint32_t& GenerationRef() { return sGeneration; }
-
-  static bool RacyIsProfilerPresent() { return !!sGeneration; }
-
- private:
-  // Thin shell around mozglue PlatformMutex, for local internal use.
-  // Does not preserve behavior in JS record/replay.
-  class Mutex : private mozilla::detail::MutexImpl {
-   public:
-    Mutex() = default;
-    void Lock() { mozilla::detail::MutexImpl::lock(); }
-    void Unlock() { mozilla::detail::MutexImpl::unlock(); }
-  };
-
-  // Mutex protecting access to the following static members.
-  static Mutex sAPLMutex MOZ_UNANNOTATED;
-
-  static ProfilerLabelEnter sEnter;
-  static ProfilerLabelExit sExit;
-
-  // Current "generation" of RegisterProfilerLabelEnterExit calls.
-  static uint32_t sGeneration;
-};
-
-MOZ_RUNINIT /* static */ AutoProfilerLabelData::Mutex
-    AutoProfilerLabelData::sAPLMutex;
-/* static */ ProfilerLabelEnter AutoProfilerLabelData::sEnter = nullptr;
-/* static */ ProfilerLabelExit AutoProfilerLabelData::sExit = nullptr;
-/* static */ uint32_t AutoProfilerLabelData::sGeneration = 0;
-
-void RegisterProfilerLabelEnterExit(ProfilerLabelEnter aEnter,
-                                    ProfilerLabelExit aExit) {
-  MOZ_ASSERT(!aEnter == !aExit, "Must provide both null or both non-null");
-
-  AutoProfilerLabelData data;
-  MOZ_ASSERT(!aEnter != !data.EnterRef(),
-             "Must go from null to non-null, or from non-null to null");
-  data.EnterRef() = aEnter;
-  data.ExitRef() = aExit;
-  ++data.GenerationRef();
-}
-
-bool IsProfilerPresent() {
-  return AutoProfilerLabelData::RacyIsProfilerPresent();
-}
-
-ProfilerLabel ProfilerLabelBegin(const char* aLabelName,
-                                 const char* aDynamicString, void* aSp) {
-  const AutoProfilerLabelData data;
-  void* entryContext = (data.EnterCRef())
-                           ? data.EnterCRef()(aLabelName, aDynamicString, aSp)
-                           : nullptr;
-  uint32_t generation = data.GenerationCRef();
-
-  return std::make_tuple(entryContext, generation);
-}
-
-void ProfilerLabelEnd(const ProfilerLabel& aLabel) {
-  if (!IsValidProfilerLabel(aLabel)) {
-    return;
-  }
-
-  const AutoProfilerLabelData data;
-  if (data.ExitCRef() && (std::get<1>(aLabel) == data.GenerationCRef())) {
-    data.ExitCRef()(std::get<0>(aLabel));
-  }
-}
-
-AutoProfilerLabel::AutoProfilerLabel(const char* aLabel,
-                                     const char* aDynamicString) {
-  std::tie(mEntryContext, mGeneration) =
-      ProfilerLabelBegin(aLabel, aDynamicString, this);
-}
-
-AutoProfilerLabel::~AutoProfilerLabel() {
-  ProfilerLabelEnd(std::make_tuple(mEntryContext, mGeneration));
-}
-
-}  // namespace mozilla
diff --git a/mozglue/misc/AutoProfilerLabel.h b/mozglue/misc/AutoProfilerLabel.h
deleted file mode 100644
index c904b579a6848..0000000000000
--- a/mozglue/misc/AutoProfilerLabel.h
+++ /dev/null
@@ -1,72 +0,0 @@
-/* -*- Mode: C++; tab-width: 2; indent-tabs-mode: nil; c-basic-offset: 2 -*- */
-/* vim: set ts=8 sts=2 et sw=2 tw=80: */
-/* This Source Code Form is subject to the terms of the Mozilla Public
- * License, v. 2.0. If a copy of the MPL was not distributed with this
- * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
-
-#ifndef mozilla_AutoProfilerLabel_h
-#define mozilla_AutoProfilerLabel_h
-
-#include "mozilla/Attributes.h"
-
-#include "mozilla/Types.h"
-#include <cstdint>
-#include <tuple>
-
-// The Gecko Profiler defines AutoProfilerLabel, an RAII class for
-// pushing/popping frames to/from the ProfilingStack.
-//
-// This file defines a class of the same name that does much the same thing,
-// but which can be used in (and only in) mozglue. A different class is
-// necessary because mozglue cannot directly access sProfilingStack.
-//
-// Note that this class is slightly slower than the other AutoProfilerLabel,
-// and it lacks the macro wrappers. It also is effectively hardwired to use
-// JS::ProfilingCategory::OTHER as the category pair, because that's what
-// the callbacks provided by the profiler use. (Specifying the categories in
-// this file would require #including ProfilingCategory.h in mozglue, which we
-// don't want to do.)
-
-namespace mozilla {
-
-// Enter should return a pointer that will be given to Exit.
-typedef void* (*ProfilerLabelEnter)(const char* aLabel,
-                                    const char* aDynamicString, void* aSp);
-typedef void (*ProfilerLabelExit)(void* EntryContext);
-
-// Register callbacks that do the entry/exit work involving sProfilingStack.
-MFBT_API void RegisterProfilerLabelEnterExit(ProfilerLabelEnter aEnter,
-                                             ProfilerLabelExit aExit);
-
-// This #ifdef prevents this AutoProfilerLabel from being defined in libxul,
-// which would conflict with the one in the profiler.
-#ifdef IMPL_MFBT
-
-class MOZ_RAII AutoProfilerLabel {
- public:
-  AutoProfilerLabel(const char* aLabel, const char* aDynamicString);
-  ~AutoProfilerLabel();
-
- private:
-  void* mEntryContext;
-  // Number of RegisterProfilerLabelEnterExit calls, to avoid giving an entry
-  // context from one generation to the next.
-  uint32_t mGeneration;
-};
-
-using ProfilerLabel = std::tuple<void*, uint32_t>;
-
-bool IsProfilerPresent();
-ProfilerLabel ProfilerLabelBegin(const char* aLabelName,
-                                 const char* aDynamicString, void* aSp);
-void ProfilerLabelEnd(const ProfilerLabel& aLabel);
-
-inline bool IsValidProfilerLabel(const ProfilerLabel& aLabel) {
-  return !!std::get<0>(aLabel);
-}
-
-#endif
-
-}  // namespace mozilla
-
-#endif  // mozilla_AutoProfilerLabel_h
diff --git a/mozglue/misc/moz.build b/mozglue/misc/moz.build
index 58a834edcf3e0..ca12f05767969 100644
--- a/mozglue/misc/moz.build
+++ b/mozglue/misc/moz.build
@@ -7,7 +7,6 @@
 FINAL_LIBRARY = "mozglue"
 
 EXPORTS.mozilla += [
-    "AutoProfilerLabel.h",
     "AwakeTimeStamp.h",
     "decimal/Decimal.h",
     "decimal/DoubleConversion.h",
@@ -42,7 +41,6 @@ if CONFIG["OS_ARCH"] == "WINNT":
     ]
 
 SOURCES += [
-    "AutoProfilerLabel.cpp",
     "AwakeTimeStamp.cpp",
     "Debug.cpp",
     "LoggingCore.cpp",
diff --git a/netwerk/base/nsSocketTransport2.cpp b/netwerk/base/nsSocketTransport2.cpp
index a46c400aba279..8394f34621e3a 100644
--- a/netwerk/base/nsSocketTransport2.cpp
+++ b/netwerk/base/nsSocketTransport2.cpp
@@ -1232,7 +1232,7 @@ nsresult nsSocketTransport::BuildSocket(PRFileDesc*& fd, bool& proxyTransparent,
   return rv;
 }
 
-static bool ShouldBlockAddress(const NetAddr& aAddr) {
+static bool ShouldBlockAddress(const NetAddr& aAddr, const nsCString& aHost) {
   if (!xpc::AreNonLocalConnectionsDisabled()) {
     return false;
   }
@@ -1241,8 +1241,26 @@ static bool ShouldBlockAddress(const NetAddr& aAddr) {
   bool hasOverride = FindNetAddrOverride(aAddr, overrideAddr);
   const NetAddr& addrToCheck = hasOverride ? overrideAddr : aAddr;
 
-  return !(addrToCheck.IsIPAddrAny() || addrToCheck.IsIPAddrLocal() ||
-           addrToCheck.IsIPAddrShared() || addrToCheck.IsLoopbackAddr());
+  if (addrToCheck.IsIPAddrAny() || addrToCheck.IsIPAddrLocal() ||
+      addrToCheck.IsIPAddrShared() || addrToCheck.IsLoopbackAddr()) {
+    return false;
+  }
+
+  nsAutoCString allowlist;
+  {
+    const auto prefLock =
+        mozilla::StaticPrefs::network_socket_allowed_nonlocal_domains();
+    allowlist = *prefLock;
+  }
+
+  for (const nsACString& host :
+       nsCCharSeparatedTokenizer(allowlist, ',').ToRange()) {
+    if (aHost == host) {
+      return false;
+    }
+  }
+
+  return true;
 }
 
 nsresult nsSocketTransport::InitiateSocket() {
@@ -1279,7 +1297,7 @@ nsresult nsSocketTransport::InitiateSocket() {
     }
 #endif
 
-    if (NS_SUCCEEDED(mCondition) && ShouldBlockAddress(mNetAddr)) {
+    if (NS_SUCCEEDED(mCondition) && ShouldBlockAddress(mNetAddr, mHost)) {
       nsAutoCString ipaddr;
       RefPtr<nsNetAddr> netaddr = new nsNetAddr(&mNetAddr);
       netaddr->GetAddress(ipaddr);
diff --git a/netwerk/mime/nsMimeTypes.h b/netwerk/mime/nsMimeTypes.h
index 768c46db12065..65bfa9888a1e4 100644
--- a/netwerk/mime/nsMimeTypes.h
+++ b/netwerk/mime/nsMimeTypes.h
@@ -255,7 +255,6 @@
  */
 #define PARAM_PROTOCOL "protocol"
 #define PARAM_MICALG "micalg"
-#define PARAM_MICALG_MD2 "rsa-md2"
 #define PARAM_MICALG_MD5 "rsa-md5"
 #define PARAM_MICALG_MD5_2 "md5"
 #define PARAM_MICALG_SHA1 "sha1"
diff --git a/netwerk/protocol/http/ConnectionEntry.cpp b/netwerk/protocol/http/ConnectionEntry.cpp
index 95a656983bed6..3d95bbb92aee9 100644
--- a/netwerk/protocol/http/ConnectionEntry.cpp
+++ b/netwerk/protocol/http/ConnectionEntry.cpp
@@ -15,6 +15,7 @@
 #include "ConnectionEntry.h"
 #include "HttpConnectionUDP.h"
 #include "nsQueryObject.h"
+#include "nsHttpConnectionMgr.h"
 #include "mozilla/StaticPrefs_network.h"
 #include "nsHttpHandler.h"
 #include "mozilla/net/neqo_glue_ffi_generated.h"
diff --git a/netwerk/protocol/http/DnsAndConnectSocket.cpp b/netwerk/protocol/http/DnsAndConnectSocket.cpp
index 3afb2d8892174..ad694d4d7dbe5 100644
--- a/netwerk/protocol/http/DnsAndConnectSocket.cpp
+++ b/netwerk/protocol/http/DnsAndConnectSocket.cpp
@@ -22,6 +22,7 @@
 #include "mozilla/SyncRunnable.h"
 #include "mozilla/glean/NetwerkProtocolHttpMetrics.h"
 #include "nsHttpHandler.h"
+#include "nsHttpConnectionMgr.h"
 #include "ConnectionEntry.h"
 #include "HttpConnectionUDP.h"
 #include "NullHttpTransaction.h"
diff --git a/netwerk/protocol/http/Http2Session.cpp b/netwerk/protocol/http/Http2Session.cpp
index 4d118a39cd69d..a0bccc8567f0c 100644
--- a/netwerk/protocol/http/Http2Session.cpp
+++ b/netwerk/protocol/http/Http2Session.cpp
@@ -34,6 +34,7 @@
 #include "nsHttp.h"
 #include "nsHttpConnection.h"
 #include "nsHttpHandler.h"
+#include "nsHttpConnectionMgr.h"
 #include "nsIRequestContext.h"
 #include "nsISupportsPriority.h"
 #include "nsITLSSocketControl.h"
diff --git a/netwerk/protocol/http/Http2StreamBase.cpp b/netwerk/protocol/http/Http2StreamBase.cpp
index 46b4e8b5fe337..8fb6488b6ee17 100644
--- a/netwerk/protocol/http/Http2StreamBase.cpp
+++ b/netwerk/protocol/http/Http2StreamBase.cpp
@@ -27,7 +27,9 @@
 #include "nsHttp.h"
 #include "nsHttpHandler.h"
 #include "nsHttpRequestHead.h"
+#include "nsHttpTransaction.h"
 #include "nsIClassOfService.h"
+#include "nsISocketTransport.h"
 #include "prnetdb.h"
 
 namespace mozilla::net {
diff --git a/netwerk/protocol/http/Http2StreamTunnel.cpp b/netwerk/protocol/http/Http2StreamTunnel.cpp
index 82687666c518b..48fcff291ed99 100644
--- a/netwerk/protocol/http/Http2StreamTunnel.cpp
+++ b/netwerk/protocol/http/Http2StreamTunnel.cpp
@@ -14,6 +14,7 @@
 #define LOG_ENABLED() LOG5_ENABLED()
 
 #include "nsHttpHandler.h"
+#include "nsHttpConnectionMgr.h"
 #include "Http2StreamTunnel.h"
 #include "nsHttpConnectionInfo.h"
 #include "nsQueryObject.h"
diff --git a/netwerk/protocol/http/Http3Session.cpp b/netwerk/protocol/http/Http3Session.cpp
index a08ba824402f6..5cfa8364ec690 100644
--- a/netwerk/protocol/http/Http3Session.cpp
+++ b/netwerk/protocol/http/Http3Session.cpp
@@ -25,7 +25,9 @@
 #include "mozilla/glean/NetwerkMetrics.h"
 #include "mozilla/glean/NetwerkProtocolHttpMetrics.h"
 #include "mozilla/net/DNS.h"
+#include "nsHttpConnectionMgr.h"
 #include "nsHttpHandler.h"
+#include "nsHttpTransaction.h"
 #include "nsIHttpActivityObserver.h"
 #include "nsIOService.h"
 #include "nsITLSSocketControl.h"
diff --git a/netwerk/protocol/http/Http3Stream.cpp b/netwerk/protocol/http/Http3Stream.cpp
index ef79af89e5052..4f119bbe07d04 100644
--- a/netwerk/protocol/http/Http3Stream.cpp
+++ b/netwerk/protocol/http/Http3Stream.cpp
@@ -12,6 +12,7 @@
 #include "nsHttpTransaction.h"
 #include "nsIClassOfService.h"
 #include "nsISocketTransport.h"
+#include "nsISupportsPriority.h"
 #include "nsSocketTransportService2.h"
 #include "mozilla/StaticPrefs_network.h"
 #include "mozilla/glean/NetwerkProtocolHttpMetrics.h"
diff --git a/netwerk/protocol/http/Http3StreamTunnel.cpp b/netwerk/protocol/http/Http3StreamTunnel.cpp
index 80b5bd227d7f8..1d89c8981ef46 100644
--- a/netwerk/protocol/http/Http3StreamTunnel.cpp
+++ b/netwerk/protocol/http/Http3StreamTunnel.cpp
@@ -7,6 +7,7 @@
 // HttpLog.h should generally be included first
 #include "HttpLog.h"
 
+#include "nsHttpConnectionMgr.h"
 #include "nsHttpHandler.h"
 #include "Http3StreamTunnel.h"
 #include "Http3Session.h"
diff --git a/netwerk/protocol/http/HttpChannelChild.cpp b/netwerk/protocol/http/HttpChannelChild.cpp
index c9979640d69f2..5e6c7b30c82f0 100644
--- a/netwerk/protocol/http/HttpChannelChild.cpp
+++ b/netwerk/protocol/http/HttpChannelChild.cpp
@@ -35,6 +35,7 @@
 #include "nsCOMPtr.h"
 #include "nsContentPolicyUtils.h"
 #include "nsDOMNavigationTiming.h"
+#include "nsISocketTransport.h"
 #include "nsIThreadRetargetableStreamListener.h"
 #include "nsIStreamTransportService.h"
 #include "nsStringStream.h"
diff --git a/netwerk/protocol/http/HttpConnectionBase.h b/netwerk/protocol/http/HttpConnectionBase.h
index ea790883728e8..d0401ab336230 100644
--- a/netwerk/protocol/http/HttpConnectionBase.h
+++ b/netwerk/protocol/http/HttpConnectionBase.h
@@ -7,7 +7,6 @@
 #define HttpConnectionBase_h_
 
 #include "nsHttpConnectionInfo.h"
-#include "nsHttpResponseHead.h"
 #include "nsAHttpTransaction.h"
 #include "nsCOMPtr.h"
 #include "nsProxyRelease.h"
@@ -34,6 +33,7 @@ class ConnectionEntry;
 class nsHttpHandler;
 class ASpdySession;
 class WebTransportSessionBase;
+class nsHttpResponseHead;
 
 enum class ConnectionState : uint32_t {
   HALF_OPEN = 0,
diff --git a/netwerk/protocol/http/HttpConnectionUDP.cpp b/netwerk/protocol/http/HttpConnectionUDP.cpp
index a857e48f2b28e..f42405ebde570 100644
--- a/netwerk/protocol/http/HttpConnectionUDP.cpp
+++ b/netwerk/protocol/http/HttpConnectionUDP.cpp
@@ -22,9 +22,12 @@
 #include "mozilla/StaticPrefs_network.h"
 #include "mozilla/glean/NetwerkMetrics.h"
 #include "HttpConnectionUDP.h"
+#include "nsHttpConnectionMgr.h"
 #include "nsHttpHandler.h"
+#include "nsHttpTransaction.h"
 #include "Http3Session.h"
 #include "nsComponentManagerUtils.h"
+#include "nsIDNSRecord.h"
 #include "nsIHttpChannelInternal.h"
 #include "nsISocketProvider.h"
 #include "nsNetAddr.h"
diff --git a/netwerk/protocol/http/HttpInfo.cpp b/netwerk/protocol/http/HttpInfo.cpp
index d46fe45e68cba..067a2a754aef0 100644
--- a/netwerk/protocol/http/HttpInfo.cpp
+++ b/netwerk/protocol/http/HttpInfo.cpp
@@ -6,6 +6,7 @@
 #include "HttpLog.h"
 
 #include "nsHttpHandler.h"
+#include "nsHttpConnectionMgr.h"
 #include "HttpInfo.h"
 
 void mozilla::net::HttpInfo::GetHttpConnectionData(
diff --git a/netwerk/protocol/http/HttpTransactionChild.cpp b/netwerk/protocol/http/HttpTransactionChild.cpp
index 2849b436b8990..3dd6f51b79204 100644
--- a/netwerk/protocol/http/HttpTransactionChild.cpp
+++ b/netwerk/protocol/http/HttpTransactionChild.cpp
@@ -17,8 +17,10 @@
 #include "mozilla/ScopeExit.h"
 #include "mozilla/StaticPrefs_network.h"
 #include "nsInputStreamPump.h"
+#include "nsISocketTransport.h"
 #include "nsITransportSecurityInfo.h"
 #include "nsHttpHandler.h"
+#include "nsHttpTransaction.h"
 #include "nsNetUtil.h"
 #include "nsProxyInfo.h"
 #include "nsProxyRelease.h"
diff --git a/netwerk/protocol/http/InterceptedHttpChannel.h b/netwerk/protocol/http/InterceptedHttpChannel.h
index 7a2a4f2910d74..eb287a6fc9f78 100644
--- a/netwerk/protocol/http/InterceptedHttpChannel.h
+++ b/netwerk/protocol/http/InterceptedHttpChannel.h
@@ -12,6 +12,7 @@
 #include "nsINetworkInterceptController.h"
 #include "nsIInputStream.h"
 #include "nsICacheInfoChannel.h"
+#include "nsInputStreamPump.h"
 #include "nsIThreadRetargetableRequest.h"
 #include "nsIThreadRetargetableStreamListener.h"
 
diff --git a/netwerk/protocol/http/NullHttpTransaction.cpp b/netwerk/protocol/http/NullHttpTransaction.cpp
index 191cd4f3885cf..8468f75db0ace 100644
--- a/netwerk/protocol/http/NullHttpTransaction.cpp
+++ b/netwerk/protocol/http/NullHttpTransaction.cpp
@@ -9,6 +9,7 @@
 
 #include "mozilla/net/NeckoChannelParams.h"  // For HttpActivityArgs.
 #include "mozilla/Components.h"
+#include "nsAHttpConnection.h"
 #include "nsHttp.h"
 #include "NullHttpTransaction.h"
 #include "nsHttpHandler.h"
diff --git a/netwerk/protocol/http/SpeculativeTransaction.cpp b/netwerk/protocol/http/SpeculativeTransaction.cpp
index 15caf4787a983..d7b5319bca1ec 100644
--- a/netwerk/protocol/http/SpeculativeTransaction.cpp
+++ b/netwerk/protocol/http/SpeculativeTransaction.cpp
@@ -9,6 +9,7 @@
 #include "SpeculativeTransaction.h"
 #include "HTTPSRecordResolver.h"
 #include "nsICachingChannel.h"
+#include "nsHttpConnectionMgr.h"
 #include "nsHttpHandler.h"
 
 namespace mozilla {
diff --git a/netwerk/protocol/http/TRRServiceChannel.cpp b/netwerk/protocol/http/TRRServiceChannel.cpp
index 06d78770831ba..ee444e1f45291 100644
--- a/netwerk/protocol/http/TRRServiceChannel.cpp
+++ b/netwerk/protocol/http/TRRServiceChannel.cpp
@@ -15,6 +15,7 @@
 #include "mozilla/StaticPrefs_network.h"
 #include "nsDNSPrefetch.h"
 #include "nsEscape.h"
+#include "nsHttpConnectionMgr.h"
 #include "nsHttpTransaction.h"
 #include "nsICancelable.h"
 #include "nsICachingChannel.h"
diff --git a/netwerk/protocol/http/TRRServiceChannel.h b/netwerk/protocol/http/TRRServiceChannel.h
index c9dc47a118c9c..c3ecb54da0eaf 100644
--- a/netwerk/protocol/http/TRRServiceChannel.h
+++ b/netwerk/protocol/http/TRRServiceChannel.h
@@ -14,6 +14,7 @@
 #include "nsIProtocolProxyCallback.h"
 #include "nsIProxiedChannel.h"
 #include "nsIStreamListener.h"
+#include "nsITransport.h"
 #include "nsWeakReference.h"
 
 class nsDNSPrefetch;
diff --git a/netwerk/protocol/http/nsCORSListenerProxy.cpp b/netwerk/protocol/http/nsCORSListenerProxy.cpp
index 6a3c6d17ed7c6..73eac586cd41a 100644
--- a/netwerk/protocol/http/nsCORSListenerProxy.cpp
+++ b/netwerk/protocol/http/nsCORSListenerProxy.cpp
@@ -28,6 +28,7 @@
 #include "nsGkAtoms.h"
 #include "nsWhitespaceTokenizer.h"
 #include "nsIChannelEventSink.h"
+#include "nsIDNSRecord.h"
 #include "nsIDNSService.h"
 #include "nsIAsyncVerifyRedirectCallback.h"
 #include "nsCharSeparatedTokenizer.h"
diff --git a/netwerk/protocol/http/nsHttpChannel.cpp b/netwerk/protocol/http/nsHttpChannel.cpp
index b7ed0671c8214..26666f1d6ff28 100644
--- a/netwerk/protocol/http/nsHttpChannel.cpp
+++ b/netwerk/protocol/http/nsHttpChannel.cpp
@@ -26,6 +26,7 @@
 #include "nsHttp.h"
 #include "nsHttpChannel.h"
 #include "nsHttpChannelAuthProvider.h"
+#include "nsHttpConnectionMgr.h"
 #include "nsHttpHandler.h"
 #include "nsIStreamConverter.h"
 #include "nsString.h"
diff --git a/netwerk/protocol/http/nsHttpChannel.h b/netwerk/protocol/http/nsHttpChannel.h
index 3bcc4cf59bdaa..ec9960bbacab7 100644
--- a/netwerk/protocol/http/nsHttpChannel.h
+++ b/netwerk/protocol/http/nsHttpChannel.h
@@ -10,6 +10,7 @@
 #include "AlternateServices.h"
 #include "AutoClose.h"
 #include "HttpBaseChannel.h"
+#include "HttpTransactionShell.h"
 #include "nsIReplacedHttpResponse.h"
 #include "TimingStruct.h"
 #include "mozilla/AtomicBitfields.h"
@@ -31,6 +32,7 @@
 #include "nsIStreamListener.h"
 #include "nsIThreadRetargetableRequest.h"
 #include "nsIThreadRetargetableStreamListener.h"
+#include "nsITransport.h"
 #include "nsITransportSecurityInfo.h"
 #include "nsTArray.h"
 #include "nsWeakReference.h"
diff --git a/netwerk/protocol/http/nsHttpConnection.cpp b/netwerk/protocol/http/nsHttpConnection.cpp
index 659a8c9c9d010..6c7ff4e521905 100644
--- a/netwerk/protocol/http/nsHttpConnection.cpp
+++ b/netwerk/protocol/http/nsHttpConnection.cpp
@@ -23,6 +23,7 @@
 #include "mozpkix/pkixnss.h"
 #include "nsCRT.h"
 #include "nsHttpConnection.h"
+#include "nsHttpConnectionMgr.h"
 #include "nsHttpHandler.h"
 #include "nsHttpRequestHead.h"
 #include "nsHttpResponseHead.h"
diff --git a/netwerk/protocol/http/nsHttpConnectionMgr.h b/netwerk/protocol/http/nsHttpConnectionMgr.h
index 9981a46f3dd7b..21cf9f8ebb31d 100644
--- a/netwerk/protocol/http/nsHttpConnectionMgr.h
+++ b/netwerk/protocol/http/nsHttpConnectionMgr.h
@@ -7,7 +7,6 @@
 #define nsHttpConnectionMgr_h_
 
 #include "DnsAndConnectSocket.h"
-#include "HttpConnectionBase.h"
 #include "HttpConnectionMgrShell.h"
 #include "nsHttpConnection.h"
 #include "nsHttpTransaction.h"
@@ -28,6 +27,7 @@ class nsIHttpUpgradeListener;
 
 namespace mozilla::net {
 class EventTokenBucket;
+class HttpConnectionBase;
 class NullHttpTransaction;
 struct HttpRetParams;
 struct Http3ConnectionStatsParams;
diff --git a/netwerk/protocol/http/nsHttpHandler.cpp b/netwerk/protocol/http/nsHttpHandler.cpp
index 0fc582d28e060..f34e852b25aba 100644
--- a/netwerk/protocol/http/nsHttpHandler.cpp
+++ b/netwerk/protocol/http/nsHttpHandler.cpp
@@ -13,6 +13,7 @@
 #include "nsCORSListenerProxy.h"
 #include "nsError.h"
 #include "nsHttp.h"
+#include "nsHttpConnectionMgr.h"
 #include "nsHttpHandler.h"
 #include "nsHttpChannel.h"
 #include "nsHTTPCompressConv.h"
@@ -37,6 +38,7 @@
 #include "mozilla/Sprintf.h"
 #include "mozilla/StaticPrefs_network.h"
 #include "mozilla/StaticPrefs_privacy.h"
+#include "mozilla/StaticPrefs_security.h"
 #include "mozilla/StoragePrincipalHelper.h"
 #include "nsAsyncRedirectVerifyHelper.h"
 #include "nsSocketTransportService2.h"
diff --git a/netwerk/protocol/http/nsHttpHandler.h b/netwerk/protocol/http/nsHttpHandler.h
index 6794c4534f175..7310ac1b31a65 100644
--- a/netwerk/protocol/http/nsHttpHandler.h
+++ b/netwerk/protocol/http/nsHttpHandler.h
@@ -10,10 +10,11 @@
 
 #include "nsHttp.h"
 #include "nsHttpAuthCache.h"
-#include "nsHttpConnectionMgr.h"
+#include "nsHttpConnectionInfo.h"
 #include "AlternateServices.h"
 #include "ASpdySession.h"
 #include "HttpTrafficAnalyzer.h"
+#include "EventTokenBucket.h"
 
 #include "mozilla/Mutex.h"
 #include "mozilla/StaticPtr.h"
@@ -22,6 +23,7 @@
 #include "nsCOMPtr.h"
 #include "nsWeakReference.h"
 #include "mozilla/net/Dictionary.h"
+#include "mozilla/net/HttpConnectionMgrShell.h"
 
 #include "nsIHttpProtocolHandler.h"
 #include "nsIObserver.h"
@@ -53,6 +55,7 @@ namespace mozilla::net {
 
 class ATokenBucketEvent;
 class EventTokenBucket;
+class HttpActivityArgs;
 class Tickler;
 class nsHttpConnection;
 class nsHttpConnectionInfo;
diff --git a/netwerk/protocol/http/nsHttpTransaction.cpp b/netwerk/protocol/http/nsHttpTransaction.cpp
index df8412068cacf..ba4bce17b31a8 100644
--- a/netwerk/protocol/http/nsHttpTransaction.cpp
+++ b/netwerk/protocol/http/nsHttpTransaction.cpp
@@ -30,6 +30,7 @@
 #include "nsHttpChunkedDecoder.h"
 #include "nsHttpDigestAuth.h"
 #include "nsHttpHandler.h"
+#include "nsHttpConnectionMgr.h"
 #include "nsHttpNTLMAuth.h"
 #ifdef MOZ_AUTH_EXTENSION
 #  include "nsHttpNegotiateAuth.h"
diff --git a/netwerk/protocol/websocket/IPCTransportProvider.h b/netwerk/protocol/websocket/IPCTransportProvider.h
index de54be127aba1..faa496ef38175 100644
--- a/netwerk/protocol/websocket/IPCTransportProvider.h
+++ b/netwerk/protocol/websocket/IPCTransportProvider.h
@@ -11,6 +11,7 @@
 #include "mozilla/net/PTransportProviderParent.h"
 #include "mozilla/net/PTransportProviderChild.h"
 #include "nsIHttpChannelInternal.h"
+#include "nsISocketTransport.h"
 #include "nsITransportProvider.h"
 
 /*
diff --git a/python/l10n/fluent_migrations/bug_2009118_settings_redesign_custom_homepage.py b/python/l10n/fluent_migrations/bug_2009118_settings_redesign_custom_homepage.py
new file mode 100644
index 0000000000000..8baa3e897c3f3
--- /dev/null
+++ b/python/l10n/fluent_migrations/bug_2009118_settings_redesign_custom_homepage.py
@@ -0,0 +1,26 @@
+# Any copyright is dedicated to the Public Domain.
+# http://creativecommons.org/publicdomain/zero/1.0/
+
+from fluent.migrate.helpers import transforms_from
+
+
+def migrate(ctx):
+    """Bug 2009118 - Custom Homepage Settings: show a reorderable, deletable list of user-added custom URLs, part {index}."""
+
+    source = "browser/browser/preferences/preferences.ftl"
+    target = source
+
+    ctx.add_transforms(
+        target,
+        target,
+        transforms_from(
+            """
+home-custom-homepage-card-header =
+    .label = { COPY_PATTERN(from_path, "home-custom-homepage-subheader")}
+
+home-custom-homepage-no-results =
+    .label = { COPY_PATTERN(from_path, "home-custom-homepage-no-websites-yet")}
+""",
+            from_path=source,
+        ),
+    )
diff --git a/python/mach/mach/settings.py b/python/mach/mach/settings.py
index a80625e8769fc..5095612ccfb09 100644
--- a/python/mach/mach/settings.py
+++ b/python/mach/mach/settings.py
@@ -95,6 +95,12 @@ def try_config_settings():
                     "Do not automatically open a browser during authentication.",
                     False,
                 ),
+                (
+                    "try.noartifact",
+                    "boolean",
+                    "Do not autodetect artifact mode base on mozconfig. The '--artifact' flag must be used explicitly if artifact try pushes are desired.",
+                    False,
+                ),
             ]
 
         def taskgraph_config_settings():
diff --git a/remote/shared/Capture.sys.mjs b/remote/shared/Capture.sys.mjs
index a6824f6b7f2d3..28c9bdcd181e0 100644
--- a/remote/shared/Capture.sys.mjs
+++ b/remote/shared/Capture.sys.mjs
@@ -5,15 +5,11 @@
 const lazy = {};
 
 ChromeUtils.defineESModuleGetters(lazy, {
-  Log: "chrome://remote/content/shared/Log.sys.mjs",
+  error: "chrome://remote/content/shared/webdriver/Errors.sys.mjs",
 });
 
-ChromeUtils.defineLazyGetter(lazy, "logger", () => lazy.Log.get());
-
 const CONTEXT_2D = "2d";
 const BG_COLOUR = "rgb(255,255,255)";
-const MAX_CANVAS_DIMENSION = 32767;
-const MAX_CANVAS_AREA = 472907776;
 const XHTML_NS = "http://www.w3.org/1999/xhtml";
 
 /**
@@ -78,73 +74,47 @@ capture.canvas = async function (
   let canvasHeight = height * scale;
   let canvasWidth = width * scale;
 
-  // Cap the screenshot size for width and height at 2^16 pixels,
-  // which is the maximum allowed canvas size. Higher dimensions will
-  // trigger exceptions in Gecko.
-  if (canvasWidth > MAX_CANVAS_DIMENSION) {
-    lazy.logger.warn(
-      "Limiting screen capture width to maximum allowed " +
-        MAX_CANVAS_DIMENSION +
-        " pixels"
-    );
-    width = Math.floor(MAX_CANVAS_DIMENSION / scale);
-    canvasWidth = width * scale;
-  }
-
-  if (canvasHeight > MAX_CANVAS_DIMENSION) {
-    lazy.logger.warn(
-      "Limiting screen capture height to maximum allowed " +
-        MAX_CANVAS_DIMENSION +
-        " pixels"
-    );
-    height = Math.floor(MAX_CANVAS_DIMENSION / scale);
-    canvasHeight = height * scale;
-  }
-
-  // If the area is larger, reduce the height to keep the full width.
-  if (canvasWidth * canvasHeight > MAX_CANVAS_AREA) {
-    lazy.logger.warn(
-      "Limiting screen capture area to maximum allowed " +
-        MAX_CANVAS_AREA +
-        " pixels"
-    );
-    height = Math.floor(MAX_CANVAS_AREA / (canvasWidth * scale));
-    canvasHeight = height * scale;
-  }
-
-  if (canvas === null) {
-    canvas = win.document.createElementNS(XHTML_NS, "canvas");
-    canvas.width = canvasWidth;
-    canvas.height = canvasHeight;
-  }
-
-  const ctx = canvas.getContext(CONTEXT_2D);
-
-  if (readback) {
-    if (flags === null) {
-      flags =
-        ctx.DRAWWINDOW_DRAW_CARET |
-        ctx.DRAWWINDOW_DRAW_VIEW |
-        ctx.DRAWWINDOW_USE_WIDGET_LAYERS;
+  try {
+    if (canvas === null) {
+      canvas = win.document.createElementNS(XHTML_NS, "canvas");
+      canvas.width = canvasWidth;
+      canvas.height = canvasHeight;
     }
 
-    // drawWindow doesn't take scaling into account.
-    ctx.scale(scale, scale);
-    ctx.drawWindow(win, left + dX, top + dY, width, height, BG_COLOUR, flags);
-  } else {
-    let rect = new DOMRect(left, top, width, height);
-    let snapshot = await browsingContext.currentWindowGlobal.drawSnapshot(
-      rect,
-      scale,
-      BG_COLOUR
+    const ctx = canvas.getContext(CONTEXT_2D);
+
+    if (readback) {
+      if (flags === null) {
+        flags =
+          ctx.DRAWWINDOW_DRAW_CARET |
+          ctx.DRAWWINDOW_DRAW_VIEW |
+          ctx.DRAWWINDOW_USE_WIDGET_LAYERS;
+      }
+
+      // drawWindow doesn't take scaling into account.
+      ctx.scale(scale, scale);
+      ctx.drawWindow(win, left + dX, top + dY, width, height, BG_COLOUR, flags);
+    } else {
+      let rect = new DOMRect(left, top, width, height);
+      let snapshot = await browsingContext.currentWindowGlobal.drawSnapshot(
+        rect,
+        scale,
+        BG_COLOUR
+      );
+
+      ctx.drawImage(snapshot, 0, 0);
+
+      // Bug 1574935 - Huge dimensions can trigger an OOM because multiple copies
+      // of the bitmap will exist in memory. Force the removal of the snapshot
+      // because it is no longer needed.
+      snapshot.close();
+    }
+  } catch (e) {
+    // If we failed to create the canvas or draw the snapshot (likely due to OOM
+    // or excessive dimensions), we treat this as an unsupported operation.
+    throw new lazy.error.UnsupportedOperationError(
+      `Unable to capture screenshot: ${e.message}`
     );
-
-    ctx.drawImage(snapshot, 0, 0);
-
-    // Bug 1574935 - Huge dimensions can trigger an OOM because multiple copies
-    // of the bitmap will exist in memory. Force the removal of the snapshot
-    // because it is no longer needed.
-    snapshot.close();
   }
 
   return canvas;
diff --git a/services/fxaccounts/FxAccountsCommon.sys.mjs b/services/fxaccounts/FxAccountsCommon.sys.mjs
index f37d1580d8272..884939bfda7f3 100644
--- a/services/fxaccounts/FxAccountsCommon.sys.mjs
+++ b/services/fxaccounts/FxAccountsCommon.sys.mjs
@@ -142,6 +142,8 @@ export let COMMAND_PROFILE_CHANGE = "profile:change";
 export let COMMAND_CAN_LINK_ACCOUNT = "fxaccounts:can_link_account";
 export let COMMAND_LOGIN = "fxaccounts:login";
 export let COMMAND_OAUTH = "fxaccounts:oauth_login";
+export let COMMAND_OAUTH_FLOW_IS_ACTIVE = "fxaccounts:oauth_flow_is_active";
+export let COMMAND_OAUTH_FLOW_BEGIN = "fxaccounts:oauth_flow_begin";
 export let COMMAND_LOGOUT = "fxaccounts:logout";
 export let COMMAND_DELETE = "fxaccounts:delete";
 export let COMMAND_SYNC_PREFERENCES = "fxaccounts:sync_preferences";
diff --git a/services/fxaccounts/FxAccountsWebChannel.sys.mjs b/services/fxaccounts/FxAccountsWebChannel.sys.mjs
index 9e0da4fed0544..dbcba447d21e1 100644
--- a/services/fxaccounts/FxAccountsWebChannel.sys.mjs
+++ b/services/fxaccounts/FxAccountsWebChannel.sys.mjs
@@ -28,6 +28,8 @@ import {
   COMMAND_PAIR_COMPLETE,
   COMMAND_PAIR_PREFERENCES,
   COMMAND_FIREFOX_VIEW,
+  COMMAND_OAUTH_FLOW_IS_ACTIVE,
+  COMMAND_OAUTH_FLOW_BEGIN,
   OAUTH_CLIENT_ID,
   ON_PROFILE_CHANGE_NOTIFICATION,
   PREF_LAST_FXA_USER_UID,
@@ -289,6 +291,22 @@ FxAccountsWebChannel.prototype = {
           sendingContext
         );
         break;
+      case COMMAND_OAUTH_FLOW_IS_ACTIVE: {
+        const isActive = this._helpers.oauthFlowIsActive();
+        await this._channel.send(
+          { command, messageId: message.messageId, data: { isActive } },
+          sendingContext
+        );
+        break;
+      }
+      case COMMAND_OAUTH_FLOW_BEGIN: {
+        let params = await this._helpers.oauthBegin(data.scopes);
+        await this._channel.send(
+          { command, messageId: message.messageId, data: params },
+          sendingContext
+        );
+        break;
+      }
       case COMMAND_LOGOUT:
       case COMMAND_DELETE:
         await this._helpers.logout(data.uid);
@@ -736,6 +754,27 @@ FxAccountsWebChannelHelpers.prototype = {
     log.debug("Webchannel completed oauth flows");
   },
 
+  /**
+   * Starts a new oauth flow but DOES NOT open any UI for the flow.
+   *
+   * A browser-driven login takes 2 steps - it begins an oauth flow, then opens a login URL specifying a number of query-params
+   * derived from the oauth flow just started. This webchannel message starts a new flow and returns just the query params back over
+   * the web channel - it is the responsibility of FxA itself to start a new UI flow using these params.
+   *
+   * @param [String] scopes: An array of strings.
+   */
+  async oauthBegin(scopes) {
+    log.debug(`Webchannel is starting a new oauth flow for scopes ${scopes}`);
+    return await this._fxAccounts._internal.oauth.beginOAuthFlow(scopes);
+  },
+
+  /**
+   * Returns a boolean to indicate whether an oauth flow is in progress.
+   */
+  oauthFlowIsActive() {
+    return this._fxAccounts._internal.oauth.numOfFlows() != 0;
+  },
+
   /**
    * Disconnects the user from Sync and FxA
    */
diff --git a/services/fxaccounts/tests/xpcshell/test_web_channel.js b/services/fxaccounts/tests/xpcshell/test_web_channel.js
index 82963571b3518..f50ac522e3d78 100644
--- a/services/fxaccounts/tests/xpcshell/test_web_channel.js
+++ b/services/fxaccounts/tests/xpcshell/test_web_channel.js
@@ -1357,6 +1357,94 @@ add_task(async function test_helpers_change_password_with_error() {
   }
 });
 
+add_test(function test_oauth_flow_is_active() {
+  let mockMessage = {
+    command: "fxaccounts:oauth_flow_is_active",
+    messageId: "12345",
+    data: {},
+  };
+
+  let channel = new FxAccountsWebChannel({
+    channel_id: WEBCHANNEL_ID,
+    content_uri: URL_STRING,
+  });
+
+  channel._channel = {
+    send(response, context) {
+      Assert.equal(response.command, "fxaccounts:oauth_flow_is_active");
+      Assert.equal(response.messageId, "12345");
+      Assert.equal(response.data.isActive, false);
+      Assert.equal(context, mockSendingContext);
+      run_next_test();
+    },
+  };
+
+  channel._channelCallback(WEBCHANNEL_ID, mockMessage, mockSendingContext);
+});
+
+add_test(function test_oauth_flow_begin() {
+  let mockMessage = {
+    command: "fxaccounts:oauth_flow_begin",
+    messageId: "12347",
+    data: {
+      scopes: ["profile", "https://identity.mozilla.com/apps/oldsync"],
+    },
+  };
+
+  let channel = new FxAccountsWebChannel({
+    channel_id: WEBCHANNEL_ID,
+    content_uri: URL_STRING,
+  });
+
+  channel._channel = {
+    send(response, context) {
+      Assert.equal(response.command, "fxaccounts:oauth_flow_begin");
+      Assert.equal(response.messageId, "12347");
+      Assert.ok(response.data);
+
+      Assert.equal(response.data.action, "email");
+      Assert.equal(response.data.response_type, "code");
+      Assert.equal(response.data.access_type, "offline");
+      Assert.equal(
+        response.data.scope,
+        "profile https://identity.mozilla.com/apps/oldsync"
+      );
+      Assert.ok(response.data.client_id);
+      Assert.ok(response.data.state);
+
+      Assert.equal(context, mockSendingContext);
+
+      // Now verify that a flow is in progress
+      let inProgressMessage = {
+        command: "fxaccounts:oauth_flow_is_active",
+        messageId: "12348",
+        data: {},
+      };
+
+      channel._channel = {
+        send(inProgressResponse, inProgressContext) {
+          Assert.equal(
+            inProgressResponse.command,
+            "fxaccounts:oauth_flow_is_active"
+          );
+          Assert.equal(inProgressResponse.messageId, "12348");
+          Assert.equal(inProgressResponse.data.isActive, true);
+          Assert.equal(inProgressContext, mockSendingContext);
+          run_next_test();
+        },
+      };
+
+      channel._channelCallback(
+        WEBCHANNEL_ID,
+        inProgressMessage,
+        mockSendingContext
+      );
+    },
+  };
+
+  channel._channelCallback(WEBCHANNEL_ID, mockMessage, mockSendingContext);
+});
+
 function makeObserver(aObserveTopic, aObserveFunc) {
   let callback = function (aSubject, aTopic, aData) {
     log.debug("observed " + aTopic + " " + aData);
diff --git a/servo/components/style/dom.rs b/servo/components/style/dom.rs
index 5ad759737ba46..b18a047fbc8a6 100644
--- a/servo/components/style/dom.rs
+++ b/servo/components/style/dom.rs
@@ -996,7 +996,7 @@ pub struct AttributeTracker<'a> {
     /// The element that queries for attributes.
     pub provider: &'a dyn AttributeProvider,
     /// The set of attributes we have queried.
-    pub references: Box<PrecomputedHashSet<AtomIdent>>,
+    pub references: AttributeReferences,
 }
 
 impl<'a> AttributeTracker<'a> {
@@ -1004,7 +1004,7 @@ impl<'a> AttributeTracker<'a> {
     pub fn new(provider: &'a dyn AttributeProvider) -> Self {
         Self {
             provider,
-            references: Default::default(),
+            references: None,
         }
     }
 
@@ -1012,18 +1012,18 @@ impl<'a> AttributeTracker<'a> {
     pub fn new_dummy() -> Self {
         Self {
             provider: &DummyAttributeProvider {},
-            references: Default::default(),
+            references: None,
         }
     }
 
     /// Extract the queried references and consume self
-    pub fn finalize(self) -> Box<PrecomputedHashSet<AtomIdent>> {
+    pub fn finalize(self) -> AttributeReferences {
         self.references
     }
 
     /// Query the value and save the name of the attribtue.
     pub fn query(&mut self, name: &LocalName) -> Option<String> {
-        self.references.insert(name.clone());
+        self.references.get_or_insert_default().insert(name.clone());
         self.provider.get_attr(name)
     }
 }
diff --git a/servo/components/style/properties/cascade.rs b/servo/components/style/properties/cascade.rs
index 9931b777c8fa1..b63fe3fa9fed5 100644
--- a/servo/components/style/properties/cascade.rs
+++ b/servo/components/style/properties/cascade.rs
@@ -401,9 +401,7 @@ where
         &mut attribute_tracker,
     );
 
-    if !attribute_tracker.references.is_empty() {
-        context.builder.attribute_references = Some(attribute_tracker.finalize());
-    }
+    context.builder.attribute_references = attribute_tracker.finalize();
 
     cascade.finished_applying_properties(&mut context.builder);
 
diff --git a/servo/components/style/properties/helpers.mako.rs b/servo/components/style/properties/helpers.mako.rs
index 57be0ece17f72..e03ebdbd0c857 100644
--- a/servo/components/style/properties/helpers.mako.rs
+++ b/servo/components/style/properties/helpers.mako.rs
@@ -2,11 +2,7 @@
  * License, v. 2.0. If a copy of the MPL was not distributed with this
  * file, You can obtain one at https://mozilla.org/MPL/2.0/. */
 
-<%!
-    from data import Keyword, to_rust_ident, to_phys, to_camel_case, SYSTEM_FONT_LONGHANDS
-    from data import (LOGICAL_CORNERS, PHYSICAL_CORNERS, LOGICAL_SIDES,
-                      PHYSICAL_SIDES, LOGICAL_SIZES, LOGICAL_AXES)
-%>
+<%! from data import to_rust_ident, to_camel_case, SYSTEM_FONT_LONGHANDS %>
 
 <%def name="longhand(property)">
 /// ${property.spec}
@@ -14,33 +10,18 @@ pub mod ${property.ident} {
     #[allow(unused_imports)]
     use crate::derives::*;
     #[allow(unused_imports)]
-    use cssparser::{Parser, BasicParseError, Token};
-    #[allow(unused_imports)]
-    use crate::parser::{Parse, ParserContext};
-    #[allow(unused_imports)]
-    use crate::properties::{self, UnparsedValue, ShorthandId};
-    #[allow(unused_imports)]
-    use crate::error_reporting::ParseErrorReporter;
-    #[allow(unused_imports)]
-    use crate::properties::longhands;
-    #[allow(unused_imports)]
-    use crate::properties::{LonghandId, LonghandIdSet};
-    #[allow(unused_imports)]
-    use crate::properties::{CSSWideKeyword, ComputedValues, PropertyDeclaration};
-    #[allow(unused_imports)]
-    use crate::properties::style_structs;
+    use crate::values::{computed, generics, specified};
     #[allow(unused_imports)]
-    use selectors::parser::SelectorParseErrorKind;
+    use crate::values::computed::ToComputedValue;
     #[allow(unused_imports)]
     use servo_arc::Arc;
+    use cssparser::Parser;
     #[allow(unused_imports)]
-    use style_traits::{ParseError, StyleParseErrorKind};
-    #[allow(unused_imports)]
-    use crate::values::computed::{Context, ToComputedValue};
-    #[allow(unused_imports)]
-    use crate::values::{computed, generics, specified};
+    use crate::parser::{Parse, ParserContext};
+    use style_traits::ParseError;
     #[allow(unused_imports)]
-    use crate::Atom;
+    use crate::properties::{longhands, LonghandId, CSSWideKeyword, PropertyDeclaration};
+
     #[allow(unused_variables)]
     pub unsafe fn cascade_property(
         declaration: &PropertyDeclaration,
@@ -86,7 +67,7 @@ pub mod ${property.ident} {
                                 let old_zoom = context.builder.effective_zoom;
                                 context.builder.effective_zoom = context.builder.effective_zoom_for_inheritance;
                                 let computed = context.builder.inherited_style.clone_${property.ident}();
-                                let specified = ToComputedValue::from_computed_value(&computed);
+                                let specified = computed::ToComputedValue::from_computed_value(&computed);
                                 % if property.boxed:
                                 let specified = Box::new(specified);
                                 % endif
@@ -121,7 +102,7 @@ pub mod ${property.ident} {
 
         % if property.ident in SYSTEM_FONT_LONGHANDS and engine == "gecko":
         if let Some(sf) = specified_value.get_system() {
-            properties::gecko::system_font::resolve_system_font(sf, context);
+            crate::properties::gecko::system_font::resolve_system_font(sf, context);
         }
         % endif
 
@@ -510,7 +491,7 @@ pub mod ${property.ident} {
     impl SpecifiedValue {
         fn compute_iter<'a, 'cx, 'cx_a>(
             &'a self,
-            context: &'cx Context<'cx_a>,
+            context: &'cx computed::Context<'cx_a>,
         ) -> computed_value::Iter<'a, 'cx, 'cx_a> {
             computed_value::Iter::new(context, &self.0)
         }
@@ -521,7 +502,7 @@ pub mod ${property.ident} {
         type ComputedValue = computed_value::T;
 
         #[inline]
-        fn to_computed_value(&self, context: &Context) -> computed_value::T {
+        fn to_computed_value(&self, context: &computed::Context) -> computed_value::T {
             % if not is_shared_list:
             use std::iter::FromIterator;
             % endif
@@ -537,22 +518,20 @@ pub mod ${property.ident} {
         }
     }
     % endif
-
 }
 </%def>
 
 <%def name="shorthand(shorthand)">
     /// ${shorthand.spec}
     pub mod ${shorthand.ident} {
-        use cssparser::Parser;
+        #[allow(unused_imports)]
+        use crate::derives::*;
         use crate::parser::ParserContext;
         use crate::properties::{PropertyDeclaration, SourcePropertyDeclaration, longhands};
+        use cssparser::Parser;
         #[allow(unused_imports)]
         use std::fmt::{self, Write};
-        #[allow(unused_imports)]
-        use style_traits::{CssWriter, KeywordsCollectFn, SpecifiedValueInfo, ToCss, ParseError};
-        #[allow(unused_imports)]
-        use style_derive::{Animate, ComputeSquaredDistance, ToAnimatedValue, Parse, ToAnimatedZero, ToComputedValue, ToResolvedValue, ToCss, SpecifiedValueInfo, ToTyped};
+        use style_traits::{CssWriter, ToCss, ParseError};
 
         % if shorthand.derive_value_info:
         #[derive(SpecifiedValueInfo)]
@@ -742,7 +721,7 @@ pub mod ${property.ident} {
     impl<'a> ToCss for LonghandsToSerialize<'a> {
         fn to_css<W>(&self, dest: &mut CssWriter<W>) -> fmt::Result
         where
-            W: Write,
+            W: fmt::Write,
         {
             let rect = Rect::new(
                 % for index in range(4):
diff --git a/servo/components/style/properties/properties.mako.rs b/servo/components/style/properties/properties.mako.rs
index e4dd60d4045d1..b317a9699e67b 100644
--- a/servo/components/style/properties/properties.mako.rs
+++ b/servo/components/style/properties/properties.mako.rs
@@ -6,6 +6,7 @@
 
 <%namespace name="helpers" file="/helpers.mako.rs" />
 <% from itertools import groupby %>
+<% from data import PropertyRestrictions, to_camel_case, RULE_VALUES, SYSTEM_FONT_LONGHANDS, PRIORITARY_PROPERTIES %>
 
 use servo_arc::{Arc, UniqueArc};
 use std::{ops, ptr, fmt, mem};
@@ -42,13 +43,6 @@ use super::{
 };
 use debug_unreachable::debug_unreachable;
 
-<%!
-    from collections import defaultdict
-    from data import Method, PropertyRestrictions, Keyword, to_rust_ident, \
-                     to_camel_case, RULE_VALUES, SYSTEM_FONT_LONGHANDS, PRIORITARY_PROPERTIES
-    import os.path
-%>
-
 /// Conversion with fewer impls than From/Into
 pub trait MaybeBoxed<Out> {
     /// Convert
diff --git a/servo/components/style/properties/shorthands.rs b/servo/components/style/properties/shorthands.rs
index eb6ca9ddce421..a4f40c010153e 100644
--- a/servo/components/style/properties/shorthands.rs
+++ b/servo/components/style/properties/shorthands.rs
@@ -308,11 +308,11 @@ pub mod border_image {
             return Err(input.new_custom_error(StyleParseErrorKind::UnspecifiedError));
         }
         Ok(expanded! {
-               border_image_outset: outset,
-               border_image_repeat: repeat,
-               border_image_slice: slice,
-               border_image_source: source,
-               border_image_width: width,
+           border_image_outset: outset,
+           border_image_repeat: repeat,
+           border_image_slice: slice,
+           border_image_source: source,
+           border_image_width: width,
         })
     }
 
@@ -925,30 +925,21 @@ pub mod text_wrap {
     ) -> Result<Longhands, ParseError<'i>> {
         let mut mode = None;
         let mut style = None;
-
+        let mut parsed = 0;
         loop {
-            if mode.is_none() {
-                if let Ok(value) = input.try_parse(|input| text_wrap_mode::parse(context, input)) {
-                    mode = Some(value);
-                    continue;
-                }
-            }
-            if style.is_none() {
-                if let Ok(value) = input.try_parse(|input| text_wrap_style::parse(context, input)) {
-                    style = Some(value);
-                    continue;
-                }
-            }
+            parsed += 1;
+            try_parse_one!(context, input, mode, text_wrap_mode::parse);
+            try_parse_one!(context, input, style, text_wrap_style::parse);
+            parsed -= 1;
             break;
         }
-        if mode.is_some() || style.is_some() {
-            Ok(expanded! {
-                text_wrap_mode: unwrap_or_initial!(text_wrap_mode, mode),
-                text_wrap_style: unwrap_or_initial!(text_wrap_style, style),
-            })
-        } else {
-            Err(input.new_custom_error(StyleParseErrorKind::UnspecifiedError))
+        if parsed == 0 {
+            return Err(input.new_custom_error(StyleParseErrorKind::UnspecifiedError));
         }
+        Ok(expanded! {
+            text_wrap_mode: unwrap_or_initial!(text_wrap_mode, mode),
+            text_wrap_style: unwrap_or_initial!(text_wrap_style, style),
+        })
     }
 
     impl<'a> ToCss for LonghandsToSerialize<'a> {
@@ -1007,33 +998,24 @@ pub mod white_space {
 
         let mut wrap = None;
         let mut collapse = None;
+        let mut parsed = 0;
 
         loop {
-            if wrap.is_none() {
-                if let Ok(value) = input.try_parse(|input| text_wrap_mode::parse(context, input)) {
-                    wrap = Some(value);
-                    continue;
-                }
-            }
-            if collapse.is_none() {
-                if let Ok(value) =
-                    input.try_parse(|input| white_space_collapse::parse(context, input))
-                {
-                    collapse = Some(value);
-                    continue;
-                }
-            }
+            parsed += 1;
+            try_parse_one!(context, input, wrap, text_wrap_mode::parse);
+            try_parse_one!(context, input, collapse, white_space_collapse::parse);
+            parsed -= 1;
             break;
         }
 
-        if wrap.is_some() || collapse.is_some() {
-            Ok(expanded! {
-                text_wrap_mode: unwrap_or_initial!(text_wrap_mode, wrap),
-                white_space_collapse: unwrap_or_initial!(white_space_collapse, collapse),
-            })
-        } else {
-            Err(input.new_custom_error(StyleParseErrorKind::UnspecifiedError))
+        if parsed == 0 {
+            return Err(input.new_custom_error(StyleParseErrorKind::UnspecifiedError));
         }
+
+        Ok(expanded! {
+            text_wrap_mode: unwrap_or_initial!(text_wrap_mode, wrap),
+            white_space_collapse: unwrap_or_initial!(white_space_collapse, collapse),
+        })
     }
 
     impl<'a> ToCss for LonghandsToSerialize<'a> {
@@ -1100,35 +1082,21 @@ pub mod _webkit_text_stroke {
     ) -> Result<Longhands, ParseError<'i>> {
         let mut color = None;
         let mut width = None;
+        let mut parsed = 0;
         loop {
-            if color.is_none() {
-                if let Ok(value) =
-                    input.try_parse(|input| _webkit_text_stroke_color::parse(context, input))
-                {
-                    color = Some(value);
-                    continue;
-                }
-            }
-
-            if width.is_none() {
-                if let Ok(value) =
-                    input.try_parse(|input| _webkit_text_stroke_width::parse(context, input))
-                {
-                    width = Some(value);
-                    continue;
-                }
-            }
+            parsed += 1;
+            try_parse_one!(context, input, color, _webkit_text_stroke_color::parse);
+            try_parse_one!(context, input, width, _webkit_text_stroke_width::parse);
+            parsed -= 1;
             break;
         }
-
-        if color.is_some() || width.is_some() {
-            Ok(expanded! {
-                _webkit_text_stroke_color: unwrap_or_initial!(_webkit_text_stroke_color, color),
-                _webkit_text_stroke_width: unwrap_or_initial!(_webkit_text_stroke_width, width),
-            })
-        } else {
-            Err(input.new_custom_error(StyleParseErrorKind::UnspecifiedError))
+        if parsed == 0 {
+            return Err(input.new_custom_error(StyleParseErrorKind::UnspecifiedError));
         }
+        Ok(expanded! {
+            _webkit_text_stroke_color: unwrap_or_initial!(_webkit_text_stroke_color, color),
+            _webkit_text_stroke_width: unwrap_or_initial!(_webkit_text_stroke_width, width),
+        })
     }
 }
 
@@ -1268,13 +1236,12 @@ pub mod gap {
         where
             W: fmt::Write,
         {
-            if self.row_gap == self.column_gap {
-                self.row_gap.to_css(dest)
-            } else {
-                self.row_gap.to_css(dest)?;
+            self.row_gap.to_css(dest)?;
+            if self.row_gap != self.column_gap {
                 dest.write_char(' ')?;
-                self.column_gap.to_css(dest)
+                self.column_gap.to_css(dest)?;
             }
+            Ok(())
         }
     }
 }
@@ -1322,25 +1289,17 @@ pub mod flex_flow {
         context: &ParserContext,
         input: &mut Parser<'i, 't>,
     ) -> Result<Longhands, ParseError<'i>> {
+        let mut parsed = 0;
         let mut direction = None;
         let mut wrap = None;
         loop {
-            if direction.is_none() {
-                if let Ok(value) = input.try_parse(|input| flex_direction::parse(context, input)) {
-                    direction = Some(value);
-                    continue;
-                }
-            }
-            if wrap.is_none() {
-                if let Ok(value) = input.try_parse(|input| flex_wrap::parse(context, input)) {
-                    wrap = Some(value);
-                    continue;
-                }
-            }
+            parsed += 1;
+            try_parse_one!(context, input, direction, flex_direction::parse);
+            try_parse_one!(context, input, wrap, flex_wrap::parse);
+            parsed -= 1;
             break;
         }
-
-        if direction.is_none() && wrap.is_none() {
+        if parsed == 0 {
             return Err(input.new_custom_error(StyleParseErrorKind::UnspecifiedError));
         }
         Ok(expanded! {
@@ -3437,16 +3396,7 @@ pub mod animation {
                     writer.item(&self.animation_play_state.0[i])?;
                 }
 
-                let has_any = {
-                    has_duration
-                        || has_timing_function
-                        || has_delay
-                        || has_iteration_count
-                        || has_direction
-                        || has_fill_mode
-                        || has_play_state
-                };
-                if has_name || !has_any {
+                if has_name || !writer.has_written() {
                     writer.item(animation_name)?;
                 }
             }
@@ -3751,16 +3701,14 @@ pub mod mask_position {
         // always push at least one item if parsing succeeds.
         let mut position_x = Vec::with_capacity(1);
         let mut position_y = Vec::with_capacity(1);
-        let mut any = false;
         input.parse_comma_separated(|input| {
             let value = Position::parse(context, input)?;
             position_x.push(value.horizontal);
             position_y.push(value.vertical);
-            any = true;
             Ok(())
         })?;
 
-        if !any {
+        if position_x.is_empty() {
             return Err(input.new_custom_error(StyleParseErrorKind::UnspecifiedError));
         }
 
diff --git a/taskcluster/kinds/docker-image/kind.yml b/taskcluster/kinds/docker-image/kind.yml
index d8da6a2112774..a89a0b15a4cc7 100644
--- a/taskcluster/kinds/docker-image/kind.yml
+++ b/taskcluster/kinds/docker-image/kind.yml
@@ -328,9 +328,7 @@ tasks:
             - deb12-python-zstandard
     fetch:
         symbol: I(fetch)
-        parent: debian12-raw
-        packages:
-            - deb12-python-zstandard
+        parent: debian13-raw
     fetch-more:
         symbol: I(fetch-more)
         parent: fetch
diff --git a/taskcluster/kinds/mochitest/kind.yml b/taskcluster/kinds/mochitest/kind.yml
index 8500008e3c623..992a59338faa2 100644
--- a/taskcluster/kinds/mochitest/kind.yml
+++ b/taskcluster/kinds/mochitest/kind.yml
@@ -935,8 +935,11 @@ tasks:
                     default: true
             extra-options:
                 by-test-platform:
+                    android-hw.*:
+                        - --setpref=network.socket.allowed_nonlocal_domains='www.googleapis.com'
                     android-em.*:
                         - --setpref=gfx.canvas.accelerated=false
+                        - --setpref=network.socket.allowed_nonlocal_domains='www.googleapis.com'
                     default: []
         tier:
             by-variant:
diff --git a/testing/android-test/mach_commands.py b/testing/android-test/mach_commands.py
index da31a6687085c..7b1bb71cd960d 100644
--- a/testing/android-test/mach_commands.py
+++ b/testing/android-test/mach_commands.py
@@ -21,19 +21,34 @@ def classname_for_test(test, test_path):
         .removeprefix(os.path.sep)
         .replace(os.path.sep, ".")
         .removesuffix(".kt")
+        .removesuffix(".java")
     )
 
 
-def project_for_ac(test, test_path):
+def project_for_test(test, prefix):
+    """Get android project that test belongs to"""
+    # Example:
+    # test      = mobile/android/android-components/components/feature/addons/src/test/java/mozilla/components/feature/addons/ui/PermissionsDialogFragmentTest.kt
+    # prefix    = mobile/android
+    # returns   = android-components
+    return (
+        os.path.normpath(test)
+        .split(os.path.normpath(prefix))[-1]
+        .removeprefix(os.path.sep)
+        .split(os.path.sep)[0]
+    )
+
+
+def project_for_ac(test, prefix, test_path):
     """Get project name for android-component subprojects from path of test file"""
     # Example:
     # test      = mobile/android/android-components/components/feature/addons/src/test/java/mozilla/components/feature/addons/ui/PermissionsDialogFragmentTest.kt
+    # prefix    = mobile/android/android-components/components
     # test_path = src/test/java
     # returns   = feature-addons
-    dir = os.path.normpath("mobile/android/android-components/components")
     return (
         os.path.normpath(test)
-        .split(os.path.normpath(dir))[-1]
+        .split(os.path.normpath(prefix))[-1]
         .split(os.path.normpath(test_path))[0]
         .removeprefix(os.path.sep)
         .removesuffix(os.path.sep)
@@ -41,6 +56,19 @@ def project_for_ac(test, test_path):
     )
 
 
+def flavor_for_test(test):
+    """Get the type of the test"""
+    # Example:
+    # test      = mobile/android/fenix/app/src/androidTest/java/org/mozilla/fenix/components/MenuItemTest.kt
+    # returns   = android
+
+    android_prefix = os.path.join("src", "androidTest", "java")
+    if android_prefix in os.path.normpath(test):
+        return "android"
+    else:
+        return "unit"
+
+
 @Command(
     "android-test",
     category="testing",
@@ -49,54 +77,122 @@ def project_for_ac(test, test_path):
 @CommandArgument(
     "--subproject",
     default="fenix",
-    choices=["fenix", "focus", "android-components", "ac"],
+    choices=["fenix", "focus", "android-components", "ac", "geckoview", "gv"],
     help="Android subproject to run tests for.",
 )
+@CommandArgument(
+    "--flavor",
+    default="unit",
+    choices=["unit", "android", "both"],
+    help="The unit test suite runs on host using JUnit or Robolectric, while"
+    + " the android suite requires an emulator or device. This is determined"
+    + " automatically if a specific test is specified.",
+)
+@CommandArgument(
+    "--gradle-variant",
+    default=None,
+    help="The gradle project variant to use (eg. Debug, FocusNightly).",
+)
 @CommandArgument(
     "--test",
     default=None,
-    help="Test to run",
+    help="File path of test to run.",
 )
-def run_android_test(command_context, subproject, test=None, test_objects=[], **kwargs):
-    gradle_command = []
-    AC = ("android-components", "ac")
+def run_android_test(
+    command_context,
+    subproject,
+    flavor="unit",
+    gradle_variant=None,
+    test=None,
+    test_objects=[],
+    **kwargs,
+):
+    # Test paths may be a single command line, or a list from the test harness
+    tests = [test["name"] for test in test_objects]
+    if test:
+        tests.append(test.strip())
+
+    # Override subproject if test explicitly set
+    if test:
+        prefix = os.path.join("mobile", "android")
+        subproject = project_for_test(test, prefix)
+
+    # Resolve subproject aliases to match directory name as the canonical one
+    ALIASES = {
+        "focus": "focus-android",
+        "ac": "android-components",
+        "gv": "geckoview",
+    }
+    subproject = ALIASES.get(subproject, subproject)
+
+    # Determine default gradle variant
+    if not gradle_variant:
+        gradle_variant = "FocusDebug" if (subproject == "focus-android") else "Debug"
+
+    # Runs gradle in "quiet" mode
+    gradle_command = ["-q"]
+
+    # Determine gradle project directory
     if subproject == "fenix":
-        gradle_command = ["testDebug", "testDebugUnitTest"]
-        subdir = os.path.join("mobile", "android", "fenix")
-        test_path = os.path.join(subdir, "app", "src", "test", "java")
-    elif subproject == "focus":
-        gradle_command = ["testFocusDebugUnitTest"]
-        subdir = os.path.join("mobile", "android", "focus-android")
-        test_path = os.path.join(subdir, "app", "src", "test", "java")
-    elif subproject in AC:
+        subdir = os.path.join("mobile", "android", "fenix", "app")
+    elif subproject == "focus-android":
+        subdir = os.path.join("mobile", "android", "focus-android", "app")
+    elif subproject == "android-components":
         subdir = os.path.join("mobile", "android", "android-components")
-        if not test_objects and not test:
-            return command_context._mach_context.commands.dispatch(
-                "gradle",
-                command_context._mach_context,
-                args=["-q", "test", "--rerun", "-p", subdir],
-            )
-        test_path = os.path.join("src", "test", "java")
+    elif subproject == "geckoview":
+        subdir = os.path.join("mobile", "android", "geckoview")
     else:
         return None
-    for test_object in test_objects:
-        if subproject in AC:
-            gradle_command.append(
-                ":components:"
-                + project_for_ac(test_object["name"], test_path)
-                + ":testDebugUnitTest"
-            )
-        gradle_command.append("--tests")
-        gradle_command.append(classname_for_test(test_object["name"], test_path))
-    if test:
-        if subproject in AC:
+    gradle_command.append("-p")
+    gradle_command.append(subdir)
+
+    # Partition tests based on type
+    unit_tests = [t for t in tests if flavor_for_test(t) == "unit"]
+    android_tests = [t for t in tests if flavor_for_test(t) == "android"]
+
+    def project_name(test, test_path):
+        prefix = os.path.join(subdir, "components")
+        return project_for_ac(test, prefix, test_path)
+
+    # Tests based on 'testUnitTest' family of tasks
+    gradle_unittest = f"test{gradle_variant}UnitTest"
+    if unit_tests:
+        test_path = os.path.join("src", "test", "java")
+        if subproject == "android-components":
+            for p in dict.fromkeys(project_name(t, test_path) for t in unit_tests):
+                gradle_command.append(f":components:{p}:{gradle_unittest}")
+        else:
+            gradle_command.append(gradle_unittest)
+
+        # Compute the class names from file names
+        gradle_command.append("--rerun")
+        for t in unit_tests:
+            gradle_command.append("--tests")
+            gradle_command.append(classname_for_test(t, test_path))
+
+    # Tests based on 'connectedAndroidTest' family of tasks
+    gradle_androidtest = f"connected{gradle_variant}AndroidTest"
+    if android_tests:
+        test_path = os.path.join("src", "androidTest", "java")
+        if subproject == "android-components":
+            for p in dict.fromkeys(project_name(t, test_path) for t in android_tests):
+                gradle_command.append(f":components:{p}:{gradle_androidtest}")
+        else:
+            gradle_command.append(gradle_androidtest)
+
+        for t in android_tests:
+            name = classname_for_test(t, test_path)
             gradle_command.append(
-                ":components:" + project_for_ac(test, test_path) + ":testDebugUnitTest"
+                f"-Pandroid.testInstrumentationRunnerArguments.class={name}"
             )
-        gradle_command.append("--tests")
-        gradle_command.append(classname_for_test(test, test_path))
+
+    # If no tests specified, run whole suite based on flavor
+    if not tests:
+        if flavor in ("both", "unit"):
+            gradle_command.append(gradle_unittest)
+        if flavor in ("both", "android"):
+            gradle_command.append(gradle_androidtest)
+
     return command_context._mach_context.commands.dispatch(
-        "gradle",
-        command_context._mach_context,
-        args=gradle_command + ["-q", "--rerun", "-p", subdir],
+        "gradle", command_context._mach_context, args=gradle_command
     )
diff --git a/testing/android-test/tests/python.toml b/testing/android-test/tests/python.toml
new file mode 100644
index 0000000000000..545631b50a63c
--- /dev/null
+++ b/testing/android-test/tests/python.toml
@@ -0,0 +1,4 @@
+[DEFAULT]
+subsuite = "testing"
+
+["test_mach_commands.py"]
diff --git a/testing/android-test/tests/test_mach_commands.py b/testing/android-test/tests/test_mach_commands.py
new file mode 100644
index 0000000000000..c5e48abc49e94
--- /dev/null
+++ b/testing/android-test/tests/test_mach_commands.py
@@ -0,0 +1,298 @@
+#!/usr/bin/env python
+# This Source Code Form is subject to the terms of the Mozilla Public
+# License, v. 2.0. If a copy of the MPL was not distributed with this
+# file, You can obtain one at http://mozilla.org/MPL/2.0/.
+
+import os
+import sys
+import unittest
+from unittest import mock
+
+from mach.registrar import Registrar
+from mozunit import main
+
+# Ensure testing category is registered before importing mach_commands
+Registrar.categories["testing"] = []
+Registrar.commands_by_category["testing"] = set()
+Registrar.register_category("testing", "testing", "testing")
+
+# Add parent directory to path to import mach_commands
+sys.path.insert(0, os.path.join(os.path.dirname(__file__), ".."))
+from mach_commands import (
+    classname_for_test,
+    flavor_for_test,
+    project_for_ac,
+    project_for_test,
+)
+
+
+class TestAndroidMachCommands(unittest.TestCase):
+    TEST_CASES = [
+        # (test_path, expected_project, expected_component, expected_flavor, expected_class)
+        (
+            "mobile/android/geckoview/src/test/java/org/mozilla/gecko/util/GeckoBundleTest.java",
+            "geckoview",
+            None,
+            "unit",
+            "org.mozilla.gecko.util.GeckoBundleTest",
+        ),
+        (
+            "mobile/android/android-components/components/concept/engine/src/test/java/mozilla/components/concept/engine/EngineTest.kt",
+            "android-components",
+            "concept-engine",
+            "unit",
+            "mozilla.components.concept.engine.EngineTest",
+        ),
+        (
+            "mobile/android/android-components/components/browser/engine-gecko/src/test/java/mozilla/components/browser/engine/gecko/GeckoEngineTest.kt",
+            "android-components",
+            "browser-engine-gecko",
+            "unit",
+            "mozilla.components.browser.engine.gecko.GeckoEngineTest",
+        ),
+        (
+            "mobile/android/fenix/app/src/test/java/org/mozilla/fenix/home/HomeFragmentTest.kt",
+            "fenix",
+            None,
+            "unit",
+            "org.mozilla.fenix.home.HomeFragmentTest",
+        ),
+        (
+            "mobile/android/focus-android/app/src/test/java/org/mozilla/focus/components/EngineProviderTest.kt",
+            "focus-android",
+            None,
+            "unit",
+            "org.mozilla.focus.components.EngineProviderTest",
+        ),
+        (
+            "mobile/android/fenix/app/src/androidTest/java/org/mozilla/fenix/components/MenuItemTest.kt",
+            "fenix",
+            None,
+            "android",
+            "org.mozilla.fenix.components.MenuItemTest",
+        ),
+    ]
+
+    def cleanup_gradle_args(self, args):
+        """Given a list of arguments for a gradle invocation, remove those that are not
+        interesting for this test suite to simplify matching."""
+        IGNORE = ["-q", "--rerun"]
+        return [x for x in args if x not in IGNORE]
+
+    def test_classname_for_test(self):
+        """Test extraction of class name from test path."""
+        TEST_PATH_PREFIX = "src/test/java"
+        ANDROIDTEST_PATH_PREFIX = "src/androidTest/java"
+        for test_path, _, _, _, expected in self.TEST_CASES:
+            with self.subTest(test_path=test_path):
+                if flavor_for_test(test_path) == "unit":
+                    result = classname_for_test(test_path, TEST_PATH_PREFIX)
+                else:
+                    result = classname_for_test(test_path, ANDROIDTEST_PATH_PREFIX)
+                self.assertEqual(result, expected)
+
+    def test_project_for_test(self):
+        """Test extraction of project name from test path."""
+        PROJECT_PREFIX = "mobile/android"
+
+        for test_path, expected, _, _, _ in self.TEST_CASES:
+            with self.subTest(project=expected):
+                result = project_for_test(test_path, PROJECT_PREFIX)
+                self.assertEqual(result, expected)
+
+    def test_project_for_ac(self):
+        """Test extraction of android-components subproject name."""
+        COMPONENT_PREFIX = "mobile/android/android-components/components"
+        TEST_PATH_PREFIX = "src/test/java"
+        for test_path, project, expected, _, _ in self.TEST_CASES:
+            if project != "android-components":
+                continue
+            with self.subTest(component=expected):
+                result = project_for_ac(test_path, COMPONENT_PREFIX, TEST_PATH_PREFIX)
+                self.assertEqual(result, expected)
+
+    def test_flavor_for_test(self):
+        """Test extraction of test flavor from test path."""
+        for test_path, _, _, expected, _ in self.TEST_CASES:
+            with self.subTest(flavor=expected):
+                result = flavor_for_test(test_path)
+                self.assertEqual(result, expected)
+
+    def test_android_test_implicit_subproject(self):
+        """Test that run_android_test derives subproject if a specific test is requested."""
+        from mach_commands import run_android_test
+
+        command_context = mock.MagicMock()
+        mock_dispatch = command_context._mach_context.commands.dispatch = (
+            mock.MagicMock(return_value=0)
+        )
+
+        TEST_PATH = "mobile/android/focus-android/app/src/test/java/org/mozilla/focus/components/EngineProviderTest.kt"
+        run_android_test(command_context, subproject=None, test=TEST_PATH)
+
+        mock_dispatch.assert_called_once()
+        gradle_args = mock_dispatch.call_args[1]["args"]
+        self.assertEqual(
+            self.cleanup_gradle_args(gradle_args),
+            [
+                "-p",
+                "mobile/android/focus-android/app",
+                "testFocusDebugUnitTest",
+                "--tests",
+                "org.mozilla.focus.components.EngineProviderTest",
+            ],
+        )
+
+    def test_run_android_test_fenix(self):
+        """Test that run_android_test calls dispatch with correct arguments for fenix."""
+        from mach_commands import run_android_test
+
+        command_context = mock.MagicMock()
+        mock_dispatch = command_context._mach_context.commands.dispatch = (
+            mock.MagicMock(return_value=0)
+        )
+
+        run_android_test(
+            command_context,
+            subproject="fenix",
+        )
+
+        mock_dispatch.assert_called_once()
+        gradle_args = mock_dispatch.call_args[1]["args"]
+
+        self.assertEqual(
+            self.cleanup_gradle_args(gradle_args),
+            ["-p", "mobile/android/fenix/app", "testDebugUnitTest"],
+        )
+
+    def test_run_android_test_androidTest(self):
+        """Test that run_android_test can run instrumented test types."""
+        from mach_commands import run_android_test
+
+        command_context = mock.MagicMock()
+        mock_dispatch = command_context._mach_context.commands.dispatch = (
+            mock.MagicMock(return_value=0)
+        )
+
+        TEST_PATH = "mobile/android/fenix/app/src/androidTest/java/org/mozilla/fenix/components/MenuItemTest.kt"
+        run_android_test(
+            command_context,
+            subproject=None,
+            test=TEST_PATH,
+        )
+
+        mock_dispatch.assert_called_once()
+        gradle_args = mock_dispatch.call_args[1]["args"]
+
+        self.assertEqual(
+            self.cleanup_gradle_args(gradle_args),
+            [
+                "-p",
+                "mobile/android/fenix/app",
+                "connectedDebugAndroidTest",
+                "-Pandroid.testInstrumentationRunnerArguments.class=org.mozilla.fenix.components.MenuItemTest",
+            ],
+        )
+
+    def test_run_android_test_gradle_variant(self):
+        """Test that run_android_test handles --gradle-variant."""
+        from mach_commands import run_android_test
+
+        command_context = mock.MagicMock()
+        mock_dispatch = command_context._mach_context.commands.dispatch = (
+            mock.MagicMock(return_value=0)
+        )
+
+        run_android_test(
+            command_context,
+            subproject="geckoview",
+            gradle_variant="Release",
+        )
+
+        mock_dispatch.assert_called_once()
+        gradle_args = mock_dispatch.call_args[1]["args"]
+
+        self.assertEqual(
+            self.cleanup_gradle_args(gradle_args),
+            ["-p", "mobile/android/geckoview", "testReleaseUnitTest"],
+        )
+
+    def test_run_android_test_flavor(self):
+        """Test that run_android_test handles --flavor."""
+        from mach_commands import run_android_test
+
+        command_context = mock.MagicMock()
+        mock_dispatch = command_context._mach_context.commands.dispatch = (
+            mock.MagicMock(return_value=0)
+        )
+
+        run_android_test(
+            command_context,
+            subproject="geckoview",
+            flavor="both",
+        )
+
+        mock_dispatch.assert_called_once()
+        gradle_args = mock_dispatch.call_args[1]["args"]
+
+        self.assertEqual(
+            self.cleanup_gradle_args(gradle_args),
+            [
+                "-p",
+                "mobile/android/geckoview",
+                "testDebugUnitTest",
+                "connectedDebugAndroidTest",
+            ],
+        )
+
+    def test_run_android_test_with_multi_component(self):
+        """Test that multiple android-component tests resolve the their component projects"""
+        from mach_commands import run_android_test
+
+        command_context = mock.MagicMock()
+        mock_dispatch = mock.MagicMock(return_value=0)
+        command_context._mach_context.commands.dispatch = mock_dispatch
+
+        test_objects = [
+            {
+                "name": "mobile/android/android-components/components/concept/engine/src/test/java/mozilla/components/concept/engine/EngineTest.kt",
+            },
+            {
+                "name": "mobile/android/android-components/components/concept/engine/src/test/java/mozilla/components/concept/engine/EngineViewTest.kt",
+            },
+            {
+                "name": "mobile/android/android-components/components/browser/engine-gecko/src/test/java/mozilla/components/browser/engine/gecko/GeckoEngineTest.kt",
+            },
+            {
+                "name": "mobile/android/android-components/components/browser/engine-gecko/src/androidTest/java/mozilla/components/browser/engine/gecko/fetch/geckoview/GeckoViewFetchTestCases.kt",
+            },
+        ]
+
+        run_android_test(
+            command_context,
+            subproject="android-components",
+            test_objects=test_objects,
+        )
+
+        gradle_args = mock_dispatch.call_args[1]["args"]
+        self.assertEqual(
+            self.cleanup_gradle_args(gradle_args),
+            [
+                "-p",
+                "mobile/android/android-components",
+                ":components:concept-engine:testDebugUnitTest",
+                ":components:browser-engine-gecko:testDebugUnitTest",
+                "--tests",
+                "mozilla.components.concept.engine.EngineTest",
+                "--tests",
+                "mozilla.components.concept.engine.EngineViewTest",
+                "--tests",
+                "mozilla.components.browser.engine.gecko.GeckoEngineTest",
+                ":components:browser-engine-gecko:connectedDebugAndroidTest",
+                "-Pandroid.testInstrumentationRunnerArguments.class=mozilla.components.browser.engine.gecko.fetch.geckoview.GeckoViewFetchTestCases",
+            ],
+        )
+
+
+if __name__ == "__main__":
+    main()
diff --git a/testing/moz.build b/testing/moz.build
index a292b509bc592..08e053b8e4a7e 100644
--- a/testing/moz.build
+++ b/testing/moz.build
@@ -14,7 +14,14 @@ with Files("*cppunittest*"):
 with Files("remote*"):
     BUG_COMPONENT = ("GeckoView", "General")
 
-PYTHON_UNITTEST_MANIFESTS += ["test/python.toml"]
+PYTHON_UNITTEST_MANIFESTS += [
+    "test/python.toml",
+]
+
+if not CONFIG["JS_STANDALONE"]:
+    PYTHON_UNITTEST_MANIFESTS += [
+        "android-test/tests/python.toml",
+    ]
 
 SPHINX_TREES["/testing"] = "docs"
 
diff --git a/testing/web-platform/meta/webdriver/tests/classic/take_element_screenshot/screenshot.py.ini b/testing/web-platform/meta/webdriver/tests/classic/take_element_screenshot/screenshot.py.ini
new file mode 100644
index 0000000000000..5892b5738db21
--- /dev/null
+++ b/testing/web-platform/meta/webdriver/tests/classic/take_element_screenshot/screenshot.py.ini
@@ -0,0 +1,4 @@
+[screenshot.py]
+  [test_clip_huge_element_to_viewport]
+    bug: https://bugzilla.mozilla.org/show_bug.cgi?id=2013176
+    expected: FAIL
diff --git a/testing/web-platform/mozilla/tests/webdriver/classic/take_full_screenshot/screenshot.py b/testing/web-platform/mozilla/tests/webdriver/classic/take_full_screenshot/screenshot.py
index 5254cfa43b8aa..191d700da82ee 100644
--- a/testing/web-platform/mozilla/tests/webdriver/classic/take_full_screenshot/screenshot.py
+++ b/testing/web-platform/mozilla/tests/webdriver/classic/take_full_screenshot/screenshot.py
@@ -47,3 +47,12 @@ def test_document_extends_beyond_viewport(session, inline):
     value = assert_success(response)
     assert_png(value)
     assert png_dimensions(value) == document_dimensions(session)
+
+
+def test_huge_full_screenshot(session, inline):
+    session.url = inline(
+        "<div style='width: 32768px; height: 32768px; background-color: black;'></div>"
+    )
+
+    response = take_full_screenshot(session)
+    assert_error(response, "unsupported operation")
diff --git a/testing/web-platform/tests/webdriver/tests/bidi/browsing_context/capture_screenshot/capture_screenshot.py b/testing/web-platform/tests/webdriver/tests/bidi/browsing_context/capture_screenshot/capture_screenshot.py
index 414f5ae2d01ea..be8543fedcc55 100644
--- a/testing/web-platform/tests/webdriver/tests/bidi/browsing_context/capture_screenshot/capture_screenshot.py
+++ b/testing/web-platform/tests/webdriver/tests/bidi/browsing_context/capture_screenshot/capture_screenshot.py
@@ -105,3 +105,23 @@ async def test_capture_with_different_dpr(bidi_session, new_tab, inline, dpr):
     assert floor(expected_width) <= actual_width <= ceil(expected_width)
     assert floor(expected_height) <= actual_height <= ceil(expected_height)
 
+
+@pytest.mark.asyncio
+async def test_clip_huge_element_to_viewport(bidi_session, top_context, inline):
+    width = "32768px"
+    height = "32768px"
+
+    url = inline(f"<div style='width: {width}; height: {height}; background-color: black;'></div>")
+    await bidi_session.browsing_context.navigate(
+        context=top_context["context"], url=url, wait="complete"
+    )
+
+    data = await bidi_session.browsing_context.capture_screenshot(
+        context=top_context["context"]
+    )
+
+    viewport = await get_viewport_dimensions(bidi_session, top_context)
+    (actual_width, actual_height) = png_dimensions(data)
+
+    assert actual_width == viewport["width"]
+    assert actual_height == viewport["height"]
diff --git a/testing/web-platform/tests/webdriver/tests/bidi/browsing_context/capture_screenshot/origin.py b/testing/web-platform/tests/webdriver/tests/bidi/browsing_context/capture_screenshot/origin.py
index 7161d3633630c..83f55fa03829d 100644
--- a/testing/web-platform/tests/webdriver/tests/bidi/browsing_context/capture_screenshot/origin.py
+++ b/testing/web-platform/tests/webdriver/tests/bidi/browsing_context/capture_screenshot/origin.py
@@ -4,6 +4,8 @@
 
 from . import get_physical_document_dimensions, get_physical_viewport_dimensions
 
+import webdriver.bidi.error as error
+
 
 @pytest.mark.asyncio
 async def test_origin(bidi_session, top_context, inline):
@@ -54,3 +56,20 @@ async def test_origin_consistency(bidi_session, top_context, inline, origin):
     )
 
     assert screenshot_a == screenshot_b
+
+
+@pytest.mark.asyncio
+async def test_capture_huge_document_origin(bidi_session, top_context, inline):
+    width = "32768px"
+    height = "32768px"
+
+    url = inline(f"<div style='width: {width}; height: {height}; background-color: black;'></div>")
+    await bidi_session.browsing_context.navigate(
+        context=top_context["context"], url=url, wait="complete"
+    )
+
+    with pytest.raises(error.UnsupportedOperationException):
+        await bidi_session.browsing_context.capture_screenshot(
+            context=top_context["context"],
+            origin="document"
+        )
diff --git a/testing/web-platform/tests/webdriver/tests/classic/take_element_screenshot/screenshot.py b/testing/web-platform/tests/webdriver/tests/classic/take_element_screenshot/screenshot.py
index 1f41720d68268..2650cc7f25ab8 100644
--- a/testing/web-platform/tests/webdriver/tests/classic/take_element_screenshot/screenshot.py
+++ b/testing/web-platform/tests/webdriver/tests/classic/take_element_screenshot/screenshot.py
@@ -88,3 +88,29 @@ def test_format_and_dimensions(session, inline):
     screenshot = assert_success(response)
 
     assert png_dimensions(screenshot) == element_dimensions(session, element)
+
+
+def test_clip_huge_element_to_viewport(session, inline):
+    width = "32768px"
+    height = "32768px"
+
+    session.url = inline(f"<div style='width: {width}; height: {height}; background-color: black;'></div>")
+    element = session.find.css("div", all=False)
+
+    response = take_element_screenshot(session, element.id)
+
+    screenshot = assert_success(response)
+
+    viewport = session.execute_script("""
+        return {
+            width: window.innerWidth,
+            height: window.innerHeight,
+            devicePixelRatio: window.devicePixelRatio
+        };
+    """)
+
+    expected_width = round(viewport["width"] * viewport["devicePixelRatio"])
+    expected_height = round(viewport["height"] * viewport["devicePixelRatio"])
+
+    # 5. Assert the screenshot was clipped to the viewport size
+    assert png_dimensions(screenshot) == (expected_width, expected_height)
diff --git a/testing/web-platform/tests/webdriver/tests/classic/take_screenshot/screenshot.py b/testing/web-platform/tests/webdriver/tests/classic/take_screenshot/screenshot.py
index 9e71a633c708b..1d7e0f4d22c98 100644
--- a/testing/web-platform/tests/webdriver/tests/classic/take_screenshot/screenshot.py
+++ b/testing/web-platform/tests/webdriver/tests/classic/take_screenshot/screenshot.py
@@ -1,3 +1,5 @@
+import pytest
+
 from tests.support.asserts import assert_error, assert_png, assert_success
 from tests.support.image import png_dimensions
 
@@ -32,3 +34,16 @@ def test_format_and_dimensions(session, inline):
 
     assert_png(value)
     assert png_dimensions(value) == viewport_dimensions(session)
+
+
+def test_huge_document_clips_to_viewport(session, inline):
+    width = "32768px"
+    height = "32768px"
+
+    session.url = inline(f"<div style='width: {width}; height: {height}; background-color: black;'></div>")
+
+    response = take_screenshot(session)
+    value = assert_success(response)
+
+    assert_png(value)
+    assert png_dimensions(value) == viewport_dimensions(session)
diff --git a/testing/web-platform/tests/webtransport/echo-large-bidirectional-streams.https.any.js b/testing/web-platform/tests/webtransport/echo-large-bidirectional-streams.https.any.js
index 3f46530327eea..247ea5b292ee6 100644
--- a/testing/web-platform/tests/webtransport/echo-large-bidirectional-streams.https.any.js
+++ b/testing/web-platform/tests/webtransport/echo-large-bidirectional-streams.https.any.js
@@ -1,6 +1,7 @@
 // META: global=window,worker
 // META: script=/common/get-host-info.sub.js
 // META: script=resources/webtransport-test-helpers.sub.js
+// META: timeout=long
 
 // A test that aims to reproduce https://crbug.com/1369030 -- note that since
 // the bug in question is a race condition, this test will probably be flaky if
diff --git a/toolkit/components/extensions/test/xpcshell/test_MatchPattern.js b/toolkit/components/extensions/test/xpcshell/test_MatchPattern.js
index 4d7da529e367b..5eace4c663b91 100644
--- a/toolkit/components/extensions/test/xpcshell/test_MatchPattern.js
+++ b/toolkit/components/extensions/test/xpcshell/test_MatchPattern.js
@@ -2,6 +2,17 @@
 /* vim: set sts=2 sw=2 et tw=80: */
 "use strict";
 
+// Get main thread CPU time, in ms.
+async function getMainThreadCpuTime() {
+  let proc = await ChromeUtils.requestProcInfo();
+  let thread =
+    proc.threads.find(t => t.name === "MainThread" || t.tid == proc.pid) ??
+    // Apparently the main thread has an empty name "" in xpcshell,
+    // so fall back to the first one.
+    proc.threads[0];
+  return Math.round(thread.cpuTime / 1_000_000);
+}
+
 registerCleanupFunction(async () => {
   Services.prefs.clearUserPref("network.url.useDefaultURI");
 });
@@ -490,16 +501,16 @@ add_task(async function test_MatchGlob() {
 add_task(async function test_MatchGlob_redundant_wildcards_backtracking() {
   const slow_build =
     AppConstants.DEBUG || AppConstants.TSAN || AppConstants.ASAN;
-  const first_limit = slow_build ? 200 : 20;
+  const first_limit = slow_build ? 200 : 30;
   {
     // Bug 1570868 - repeated * in tabs.query glob causes too much backtracking.
-    let title = `Monster${"*".repeat(99)}Mash`;
+    let title = `Monster${"*".repeat(999)}Mash`;
 
     // The first run could take longer than subsequent runs, as the DFA is lazily created.
-    let first_start = Date.now();
+    let first_start = await getMainThreadCpuTime();
     let glob = new MatchGlob(title);
     let first_matches = glob.matches(title);
-    let first_duration = Date.now() - first_start;
+    let first_duration = (await getMainThreadCpuTime()) - first_start;
     ok(first_matches, `Expected match: ${title}, ${title}`);
     Assert.less(
       first_duration,
@@ -507,22 +518,22 @@ add_task(async function test_MatchGlob_redundant_wildcards_backtracking() {
       `First matching duration: ${first_duration}ms (limit: ${first_limit}ms)`
     );
 
-    let start = Date.now();
+    let start = await getMainThreadCpuTime();
     let matches = glob.matches(title);
-    let duration = Date.now() - start;
+    let duration = (await getMainThreadCpuTime()) - start;
 
     ok(matches, `Expected match: ${title}, ${title}`);
     Assert.less(duration, 10, `Matching duration: ${duration}ms`);
   }
   {
     // Similarly with any continuous combination of ?**???****? wildcards.
-    let title = `Monster${"?*".repeat(99)}Mash`;
+    let title = `Monster${"?*".repeat(999)}Mash`;
 
     // The first run could take longer than subsequent runs, as the DFA is lazily created.
-    let first_start = Date.now();
+    let first_start = await getMainThreadCpuTime();
     let glob = new MatchGlob(title);
     let first_matches = glob.matches(title);
-    let first_duration = Date.now() - first_start;
+    let first_duration = (await getMainThreadCpuTime()) - first_start;
     ok(first_matches, `Expected match: ${title}, ${title}`);
     Assert.less(
       first_duration,
@@ -530,9 +541,9 @@ add_task(async function test_MatchGlob_redundant_wildcards_backtracking() {
       `First matching duration: ${first_duration}ms (limit: ${first_limit}ms)`
     );
 
-    let start = Date.now();
+    let start = await getMainThreadCpuTime();
     let matches = glob.matches(title);
-    let duration = Date.now() - start;
+    let duration = (await getMainThreadCpuTime()) - start;
 
     ok(matches, `Expected match: ${title}, ${title}`);
     Assert.less(duration, 10, `Matching duration: ${duration}ms`);
diff --git a/toolkit/components/pdfjs/content/build/pdf.mjs b/toolkit/components/pdfjs/content/build/pdf.mjs
index 6817711e299b1..b8b857ce1d1f9 100644
--- a/toolkit/components/pdfjs/content/build/pdf.mjs
+++ b/toolkit/components/pdfjs/content/build/pdf.mjs
@@ -21,8 +21,8 @@
  */
 
 /**
- * pdfjsVersion = 5.4.590
- * pdfjsBuild = 550520193
+ * pdfjsVersion = 5.4.647
+ * pdfjsBuild = 222a24c62
  */
 /******/ // The require scope
 /******/ var __webpack_require__ = {};
@@ -892,36 +892,6 @@ function _isValidExplicitDest(validRef, validName, dest) {
 function MathClamp(v, min, max) {
   return Math.min(Math.max(v, min), max);
 }
-function toHexUtil(arr) {
-  if (Uint8Array.prototype.toHex) {
-    return arr.toHex();
-  }
-  return Array.from(arr, num => hexNumbers[num]).join("");
-}
-function toBase64Util(arr) {
-  if (Uint8Array.prototype.toBase64) {
-    return arr.toBase64();
-  }
-  return btoa(bytesToString(arr));
-}
-function fromBase64Util(str) {
-  if (Uint8Array.fromBase64) {
-    return Uint8Array.fromBase64(str);
-  }
-  return stringToBytes(atob(str));
-}
-if (typeof Promise.try !== "function") {
-  Promise.try = function (fn, ...args) {
-    return new Promise(resolve => {
-      resolve(fn(...args));
-    });
-  };
-}
-if (typeof Math.sumPrecise !== "function") {
-  Math.sumPrecise = function (numbers) {
-    return numbers.reduce((a, b) => a + b, 0);
-  };
-}
 
 ;// ./src/display/xfa_text.js
 class XfaText {
@@ -1664,7 +1634,7 @@ class CSSConstants {
   }
 }
 function applyOpacity(r, g, b, opacity) {
-  opacity = Math.min(Math.max(opacity ?? 1, 0), 1);
+  opacity = MathClamp(opacity ?? 1, 0, 1);
   const white = 255 * (1 - opacity);
   r = Math.round(r * opacity + white);
   g = Math.round(g * opacity + white);
@@ -7234,7 +7204,7 @@ class FontFaceObject {
     if (!this.data || this.disableFontFace) {
       return null;
     }
-    const url = `url(data:${this.mimetype};base64,${toBase64Util(this.data)});`;
+    const url = `url(data:${this.mimetype};base64,${this.data.toBase64()});`;
     let rule;
     if (!this.cssFontInfo) {
       rule = `@font-face {font-family:"${this.loadedName}";src:${url}}`;
@@ -12541,148 +12511,203 @@ class OptionalContentConfig {
   }
 }
 
+;// ./src/shared/base_pdf_stream.js
+
+class BasePDFStream {
+  #PDFStreamReader = null;
+  #PDFStreamRangeReader = null;
+  _fullReader = null;
+  _rangeReaders = new Set();
+  _source = null;
+  constructor(source, PDFStreamReader, PDFStreamRangeReader) {
+    this._source = source;
+    this.#PDFStreamReader = PDFStreamReader;
+    this.#PDFStreamRangeReader = PDFStreamRangeReader;
+  }
+  get _progressiveDataLength() {
+    return this._fullReader?._loaded ?? 0;
+  }
+  getFullReader() {
+    assert(!this._fullReader, "BasePDFStream.getFullReader can only be called once.");
+    return this._fullReader = new this.#PDFStreamReader(this);
+  }
+  getRangeReader(begin, end) {
+    if (end <= this._progressiveDataLength) {
+      return null;
+    }
+    const reader = new this.#PDFStreamRangeReader(this, begin, end);
+    this._rangeReaders.add(reader);
+    return reader;
+  }
+  cancelAllRequests(reason) {
+    this._fullReader?.cancel(reason);
+    for (const reader of new Set(this._rangeReaders)) {
+      reader.cancel(reason);
+    }
+  }
+}
+class BasePDFStreamReader {
+  onProgress = null;
+  _contentLength = 0;
+  _filename = null;
+  _headersCapability = Promise.withResolvers();
+  _isRangeSupported = false;
+  _isStreamingSupported = false;
+  _loaded = 0;
+  _stream = null;
+  constructor(stream) {
+    this._stream = stream;
+  }
+  _callOnProgress() {
+    this.onProgress?.({
+      loaded: this._loaded,
+      total: this._contentLength
+    });
+  }
+  get headersReady() {
+    return this._headersCapability.promise;
+  }
+  get filename() {
+    return this._filename;
+  }
+  get contentLength() {
+    return this._contentLength;
+  }
+  get isRangeSupported() {
+    return this._isRangeSupported;
+  }
+  get isStreamingSupported() {
+    return this._isStreamingSupported;
+  }
+  async read() {
+    unreachable("Abstract method `read` called");
+  }
+  cancel(reason) {
+    unreachable("Abstract method `cancel` called");
+  }
+}
+class BasePDFStreamRangeReader {
+  _stream = null;
+  constructor(stream, begin, end) {
+    this._stream = stream;
+  }
+  async read() {
+    unreachable("Abstract method `read` called");
+  }
+  cancel(reason) {
+    unreachable("Abstract method `cancel` called");
+  }
+}
+
 ;// ./src/display/transport_stream.js
 
 
-class PDFDataTransportStream {
-  constructor(pdfDataRangeTransport, {
-    disableRange = false,
-    disableStream = false
-  }) {
-    assert(pdfDataRangeTransport, 'PDFDataTransportStream - missing required "pdfDataRangeTransport" argument.');
+
+function getArrayBuffer(val) {
+  return val instanceof Uint8Array && val.byteLength === val.buffer.byteLength ? val.buffer : new Uint8Array(val).buffer;
+}
+class PDFDataTransportStream extends BasePDFStream {
+  _progressiveDone = false;
+  _queuedChunks = [];
+  constructor(source) {
+    super(source, PDFDataTransportStreamReader, PDFDataTransportStreamRangeReader);
+    const {
+      pdfDataRangeTransport
+    } = source;
     const {
-      length,
       initialData,
-      progressiveDone,
-      contentDispositionFilename
+      progressiveDone
     } = pdfDataRangeTransport;
-    this._queuedChunks = [];
-    this._progressiveDone = progressiveDone;
-    this._contentDispositionFilename = contentDispositionFilename;
     if (initialData?.length > 0) {
-      const buffer = initialData instanceof Uint8Array && initialData.byteLength === initialData.buffer.byteLength ? initialData.buffer : new Uint8Array(initialData).buffer;
+      const buffer = getArrayBuffer(initialData);
       this._queuedChunks.push(buffer);
     }
-    this._pdfDataRangeTransport = pdfDataRangeTransport;
-    this._isStreamingSupported = !disableStream;
-    this._isRangeSupported = !disableRange;
-    this._contentLength = length;
-    this._fullRequestReader = null;
-    this._rangeReaders = [];
+    this._progressiveDone = progressiveDone;
     pdfDataRangeTransport.addRangeListener((begin, chunk) => {
-      this._onReceiveData({
-        begin,
-        chunk
-      });
-    });
-    pdfDataRangeTransport.addProgressListener((loaded, total) => {
-      this._onProgress({
-        loaded,
-        total
-      });
+      this.#onReceiveData(begin, chunk);
     });
     pdfDataRangeTransport.addProgressiveReadListener(chunk => {
-      this._onReceiveData({
-        chunk
-      });
+      this.#onReceiveData(undefined, chunk);
     });
     pdfDataRangeTransport.addProgressiveDoneListener(() => {
-      this._onProgressiveDone();
+      this._fullReader?.progressiveDone();
+      this._progressiveDone = true;
     });
     pdfDataRangeTransport.transportReady();
   }
-  _onReceiveData({
-    begin,
-    chunk
-  }) {
-    const buffer = chunk instanceof Uint8Array && chunk.byteLength === chunk.buffer.byteLength ? chunk.buffer : new Uint8Array(chunk).buffer;
+  #onReceiveData(begin, chunk) {
+    const buffer = getArrayBuffer(chunk);
     if (begin === undefined) {
-      if (this._fullRequestReader) {
-        this._fullRequestReader._enqueue(buffer);
+      if (this._fullReader) {
+        this._fullReader._enqueue(buffer);
       } else {
         this._queuedChunks.push(buffer);
       }
     } else {
-      const found = this._rangeReaders.some(function (rangeReader) {
-        if (rangeReader._begin !== begin) {
-          return false;
-        }
-        rangeReader._enqueue(buffer);
-        return true;
-      });
-      assert(found, "_onReceiveData - no `PDFDataTransportStreamRangeReader` instance found.");
-    }
-  }
-  get _progressiveDataLength() {
-    return this._fullRequestReader?._loaded ?? 0;
-  }
-  _onProgress(evt) {
-    if (evt.total === undefined) {
-      this._rangeReaders[0]?.onProgress?.({
-        loaded: evt.loaded
-      });
-    } else {
-      this._fullRequestReader?.onProgress?.({
-        loaded: evt.loaded,
-        total: evt.total
-      });
-    }
-  }
-  _onProgressiveDone() {
-    this._fullRequestReader?.progressiveDone();
-    this._progressiveDone = true;
-  }
-  _removeRangeReader(reader) {
-    const i = this._rangeReaders.indexOf(reader);
-    if (i >= 0) {
-      this._rangeReaders.splice(i, 1);
+      const rangeReader = this._rangeReaders.keys().find(r => r._begin === begin);
+      assert(rangeReader, "#onReceiveData - no `PDFDataTransportStreamRangeReader` instance found.");
+      rangeReader._enqueue(buffer);
     }
   }
   getFullReader() {
-    assert(!this._fullRequestReader, "PDFDataTransportStream.getFullReader can only be called once.");
-    const queuedChunks = this._queuedChunks;
+    const reader = super.getFullReader();
     this._queuedChunks = null;
-    return new PDFDataTransportStreamReader(this, queuedChunks, this._progressiveDone, this._contentDispositionFilename);
+    return reader;
   }
   getRangeReader(begin, end) {
-    if (end <= this._progressiveDataLength) {
-      return null;
+    const reader = super.getRangeReader(begin, end);
+    if (reader) {
+      reader.onDone = () => this._rangeReaders.delete(reader);
+      this._source.pdfDataRangeTransport.requestDataRange(begin, end);
     }
-    const reader = new PDFDataTransportStreamRangeReader(this, begin, end);
-    this._pdfDataRangeTransport.requestDataRange(begin, end);
-    this._rangeReaders.push(reader);
     return reader;
   }
   cancelAllRequests(reason) {
-    this._fullRequestReader?.cancel(reason);
-    for (const reader of this._rangeReaders.slice(0)) {
-      reader.cancel(reason);
-    }
-    this._pdfDataRangeTransport.abort();
+    super.cancelAllRequests(reason);
+    this._source.pdfDataRangeTransport.abort();
   }
 }
-class PDFDataTransportStreamReader {
-  constructor(stream, queuedChunks, progressiveDone = false, contentDispositionFilename = null) {
-    this._stream = stream;
-    this._done = progressiveDone || false;
-    this._filename = isPdfFile(contentDispositionFilename) ? contentDispositionFilename : null;
-    this._queuedChunks = queuedChunks || [];
-    this._loaded = 0;
+class PDFDataTransportStreamReader extends BasePDFStreamReader {
+  _done = false;
+  _queuedChunks = null;
+  _requests = [];
+  constructor(stream) {
+    super(stream);
+    const {
+      pdfDataRangeTransport,
+      disableRange,
+      disableStream
+    } = stream._source;
+    const {
+      length,
+      contentDispositionFilename
+    } = pdfDataRangeTransport;
+    this._queuedChunks = stream._queuedChunks || [];
     for (const chunk of this._queuedChunks) {
       this._loaded += chunk.byteLength;
     }
-    this._requests = [];
-    this._headersReady = Promise.resolve();
-    stream._fullRequestReader = this;
-    this.onProgress = null;
+    this._done = stream._progressiveDone;
+    this._contentLength = length;
+    this._isStreamingSupported = !disableStream;
+    this._isRangeSupported = !disableRange;
+    if (isPdfFile(contentDispositionFilename)) {
+      this._filename = contentDispositionFilename;
+    }
+    this._headersCapability.resolve();
+    const loaded = this._loaded;
+    Promise.resolve().then(() => {
+      if (loaded > 0 && this._loaded === loaded) {
+        this._callOnProgress();
+      }
+    });
   }
   _enqueue(chunk) {
     if (this._done) {
       return;
     }
     if (this._requests.length > 0) {
-      const requestCapability = this._requests.shift();
-      requestCapability.resolve({
+      const capability = this._requests.shift();
+      capability.resolve({
         value: chunk,
         done: false
       });
@@ -12690,21 +12715,7 @@ class PDFDataTransportStreamReader {
       this._queuedChunks.push(chunk);
     }
     this._loaded += chunk.byteLength;
-  }
-  get headersReady() {
-    return this._headersReady;
-  }
-  get filename() {
-    return this._filename;
-  }
-  get isRangeSupported() {
-    return this._stream._isRangeSupported;
-  }
-  get isStreamingSupported() {
-    return this._stream._isStreamingSupported;
-  }
-  get contentLength() {
-    return this._stream._contentLength;
+    this._callOnProgress();
   }
   async read() {
     if (this._queuedChunks.length > 0) {
@@ -12720,14 +12731,14 @@ class PDFDataTransportStreamReader {
         done: true
       };
     }
-    const requestCapability = Promise.withResolvers();
-    this._requests.push(requestCapability);
-    return requestCapability.promise;
+    const capability = Promise.withResolvers();
+    this._requests.push(capability);
+    return capability.promise;
   }
   cancel(reason) {
     this._done = true;
-    for (const requestCapability of this._requests) {
-      requestCapability.resolve({
+    for (const capability of this._requests) {
+      capability.resolve({
         value: undefined,
         done: true
       });
@@ -12735,21 +12746,18 @@ class PDFDataTransportStreamReader {
     this._requests.length = 0;
   }
   progressiveDone() {
-    if (this._done) {
-      return;
-    }
-    this._done = true;
+    this._done ||= true;
   }
 }
-class PDFDataTransportStreamRangeReader {
+class PDFDataTransportStreamRangeReader extends BasePDFStreamRangeReader {
+  onDone = null;
+  _begin = -1;
+  _done = false;
+  _queuedChunk = null;
+  _requests = [];
   constructor(stream, begin, end) {
-    this._stream = stream;
+    super(stream, begin, end);
     this._begin = begin;
-    this._end = end;
-    this._queuedChunk = null;
-    this._requests = [];
-    this._done = false;
-    this.onProgress = null;
   }
   _enqueue(chunk) {
     if (this._done) {
@@ -12758,13 +12766,13 @@ class PDFDataTransportStreamRangeReader {
     if (this._requests.length === 0) {
       this._queuedChunk = chunk;
     } else {
-      const requestsCapability = this._requests.shift();
-      requestsCapability.resolve({
+      const firstCapability = this._requests.shift();
+      firstCapability.resolve({
         value: chunk,
         done: false
       });
-      for (const requestCapability of this._requests) {
-        requestCapability.resolve({
+      for (const capability of this._requests) {
+        capability.resolve({
           value: undefined,
           done: true
         });
@@ -12772,10 +12780,7 @@ class PDFDataTransportStreamRangeReader {
       this._requests.length = 0;
     }
     this._done = true;
-    this._stream._removeRangeReader(this);
-  }
-  get isStreamingSupported() {
-    return false;
+    this.onDone?.();
   }
   async read() {
     if (this._queuedChunk) {
@@ -12792,20 +12797,20 @@ class PDFDataTransportStreamRangeReader {
         done: true
       };
     }
-    const requestCapability = Promise.withResolvers();
-    this._requests.push(requestCapability);
-    return requestCapability.promise;
+    const capability = Promise.withResolvers();
+    this._requests.push(capability);
+    return capability.promise;
   }
   cancel(reason) {
     this._done = true;
-    for (const requestCapability of this._requests) {
-      requestCapability.resolve({
+    for (const capability of this._requests) {
+      capability.resolve({
         value: undefined,
         done: true
       });
     }
     this._requests.length = 0;
-    this._stream._removeRangeReader(this);
+    this.onDone?.();
   }
 }
 
@@ -13312,7 +13317,7 @@ function getDocument(src = {}) {
   }
   const docParams = {
     docId,
-    apiVersion: "5.4.590",
+    apiVersion: "5.4.647",
     data,
     password,
     disableAutoFetch,
@@ -13342,6 +13347,7 @@ function getDocument(src = {}) {
     ownerDocument,
     pdfBug,
     styleElement,
+    enableHWA,
     loadingParams: {
       disableAutoFetch,
       enableXfa
@@ -13357,7 +13363,8 @@ function getDocument(src = {}) {
     const workerIdPromise = worker.messageHandler.sendWithPromise("GetDocRequest", docParams, data ? [data.buffer] : null);
     let networkStream;
     if (rangeTransport) {
-      networkStream = new PDFDataTransportStream(rangeTransport, {
+      networkStream = new PDFDataTransportStream({
+        pdfDataRangeTransport: rangeTransport,
         disableRange,
         disableStream
       });
@@ -13372,7 +13379,7 @@ function getDocument(src = {}) {
         throw new Error("Worker was destroyed");
       }
       const messageHandler = new MessageHandler(docId, workerId, worker.port);
-      const transport = new WorkerTransport(messageHandler, task, networkStream, transportParams, transportFactory, enableHWA);
+      const transport = new WorkerTransport(messageHandler, task, networkStream, transportParams, transportFactory);
       task._transport = transport;
       messageHandler.send("Ready", null);
     });
@@ -13416,7 +13423,6 @@ class PDFDataRangeTransport {
   #capability = Promise.withResolvers();
   #progressiveDoneListeners = [];
   #progressiveReadListeners = [];
-  #progressListeners = [];
   #rangeListeners = [];
   constructor(length, initialData, progressiveDone = false, contentDispositionFilename = null) {
     this.length = length;
@@ -13427,9 +13433,6 @@ class PDFDataRangeTransport {
   addRangeListener(listener) {
     this.#rangeListeners.push(listener);
   }
-  addProgressListener(listener) {
-    this.#progressListeners.push(listener);
-  }
   addProgressiveReadListener(listener) {
     this.#progressiveReadListeners.push(listener);
   }
@@ -13441,13 +13444,6 @@ class PDFDataRangeTransport {
       listener(begin, chunk);
     }
   }
-  onDataProgress(loaded, total) {
-    this.#capability.promise.then(() => {
-      for (const listener of this.#progressListeners) {
-        listener(loaded, total);
-      }
-    });
-  }
   onDataProgressiveRead(chunk) {
     this.#capability.promise.then(() => {
       for (const listener of this.#progressiveReadListeners) {
@@ -14195,20 +14191,25 @@ class PDFWorker {
   }
 }
 class WorkerTransport {
+  downloadInfoCapability = Promise.withResolvers();
+  #fullReader = null;
   #methodPromises = new Map();
+  #networkStream = null;
   #pageCache = new Map();
   #pagePromises = new Map();
   #pageRefCache = new Map();
   #passwordCapability = null;
   #pagesMapper = PagesMapper.instance;
-  constructor(messageHandler, loadingTask, networkStream, params, factory, enableHWA) {
+  constructor(messageHandler, loadingTask, networkStream, params, factory) {
     this.messageHandler = messageHandler;
     this.loadingTask = loadingTask;
+    this.#networkStream = networkStream;
     this.commonObjs = new PDFObjects();
     this.fontLoader = new FontLoader({
       ownerDocument: params.ownerDocument,
       styleElement: params.styleElement
     });
+    this.enableHWA = params.enableHWA;
     this.loadingParams = params.loadingParams;
     this._params = params;
     this.canvasFactory = factory.canvasFactory;
@@ -14218,11 +14219,6 @@ class WorkerTransport {
     this.wasmFactory = factory.wasmFactory;
     this.destroyed = false;
     this.destroyCapability = null;
-    this._networkStream = networkStream;
-    this._fullReader = null;
-    this._lastProgress = null;
-    this.downloadInfoCapability = Promise.withResolvers();
-    this.enableHWA = enableHWA;
     this.setupMessageHandler();
     this.#pagesMapper.addListener(this.#updateCaches.bind(this));
   }
@@ -14252,6 +14248,16 @@ class WorkerTransport {
     this.#methodPromises.set(name, promise);
     return promise;
   }
+  #onProgress({
+    loaded,
+    total
+  }) {
+    this.loadingTask.onProgress?.({
+      loaded,
+      total,
+      percent: MathClamp(Math.round(loaded / total * 100), 0, 100)
+    });
+  }
   get annotationStorage() {
     return shadow(this, "annotationStorage", new AnnotationStorage());
   }
@@ -14330,7 +14336,7 @@ class WorkerTransport {
       this.#methodPromises.clear();
       this.filterFactory.destroy();
       TextLayer.cleanup();
-      this._networkStream?.cancelAllRequests(new AbortException("Worker was terminated."));
+      this.#networkStream?.cancelAllRequests(new AbortException("Worker was terminated."));
       this.messageHandler?.destroy();
       this.messageHandler = null;
       this.destroyCapability.resolve();
@@ -14343,16 +14349,11 @@ class WorkerTransport {
       loadingTask
     } = this;
     messageHandler.on("GetReader", (data, sink) => {
-      assert(this._networkStream, "GetReader - no `IPDFStream` instance available.");
-      this._fullReader = this._networkStream.getFullReader();
-      this._fullReader.onProgress = evt => {
-        this._lastProgress = {
-          loaded: evt.loaded,
-          total: evt.total
-        };
-      };
+      assert(this.#networkStream, "GetReader - no `BasePDFStream` instance available.");
+      this.#fullReader = this.#networkStream.getFullReader();
+      this.#fullReader.onProgress = evt => this.#onProgress(evt);
       sink.onPull = () => {
-        this._fullReader.read().then(function ({
+        this.#fullReader.read().then(function ({
           value,
           done
         }) {
@@ -14367,7 +14368,7 @@ class WorkerTransport {
         });
       };
       sink.onCancel = reason => {
-        this._fullReader.cancel(reason);
+        this.#fullReader.cancel(reason);
         sink.ready.catch(readyReason => {
           if (this.destroyed) {
             return;
@@ -14377,22 +14378,14 @@ class WorkerTransport {
       };
     });
     messageHandler.on("ReaderHeadersReady", async data => {
-      await this._fullReader.headersReady;
+      await this.#fullReader.headersReady;
       const {
         isStreamingSupported,
         isRangeSupported,
         contentLength
-      } = this._fullReader;
-      if (!isStreamingSupported || !isRangeSupported) {
-        if (this._lastProgress) {
-          loadingTask.onProgress?.(this._lastProgress);
-        }
-        this._fullReader.onProgress = evt => {
-          loadingTask.onProgress?.({
-            loaded: evt.loaded,
-            total: evt.total
-          });
-        };
+      } = this.#fullReader;
+      if (isStreamingSupported && isRangeSupported) {
+        this.#fullReader.onProgress = null;
       }
       return {
         isStreamingSupported,
@@ -14401,8 +14394,8 @@ class WorkerTransport {
       };
     });
     messageHandler.on("GetRangeReader", (data, sink) => {
-      assert(this._networkStream, "GetRangeReader - no `IPDFStream` instance available.");
-      const rangeReader = this._networkStream.getRangeReader(data.begin, data.end);
+      assert(this.#networkStream, "GetRangeReader - no `BasePDFStream` instance available.");
+      const rangeReader = this.#networkStream.getRangeReader(data.begin, data.end);
       if (!rangeReader) {
         sink.close();
         return;
@@ -14466,7 +14459,7 @@ class WorkerTransport {
       return this.#passwordCapability.promise;
     });
     messageHandler.on("DataLoaded", data => {
-      loadingTask.onProgress?.({
+      this.#onProgress({
         loaded: data.length,
         total: data.length
       });
@@ -14564,10 +14557,7 @@ class WorkerTransport {
       if (this.destroyed) {
         return;
       }
-      loadingTask.onProgress?.({
-        loaded: data.loaded,
-        total: data.total
-      });
+      this.#onProgress(data);
     });
     messageHandler.on("FetchBinaryData", async data => {
       throw new Error("Not implemented: FetchBinaryData");
@@ -14588,7 +14578,7 @@ class WorkerTransport {
       isPureXfa: !!this._htmlForXfa,
       numPages: this._numPages,
       annotationStorage: map,
-      filename: this._fullReader?.filename ?? null
+      filename: this.#fullReader?.filename ?? null
     }, transfer).finally(() => {
       this.annotationStorage.resetModified();
     });
@@ -14715,8 +14705,8 @@ class WorkerTransport {
     const promise = this.messageHandler.sendWithPromise(name, null).then(results => ({
       info: results[0],
       metadata: results[1] ? new Metadata(results[1]) : null,
-      contentDispositionFilename: this._fullReader?.filename ?? null,
-      contentLength: this._fullReader?.contentLength ?? null,
+      contentDispositionFilename: this.#fullReader?.filename ?? null,
+      contentLength: this.#fullReader?.contentLength ?? null,
       hasStructTree: results[2]
     }));
     this.#methodPromises.set(name, promise);
@@ -14932,8 +14922,8 @@ class InternalRenderTask {
     }
   }
 }
-const version = "5.4.590";
-const build = "550520193";
+const version = "5.4.647";
+const build = "222a24c62";
 
 ;// ./src/display/editor/color_picker.js
 
@@ -23002,11 +22992,11 @@ class SignatureExtractor {
     writer.close();
     const buf = await new Response(cs.readable).arrayBuffer();
     const bytes = new Uint8Array(buf);
-    return toBase64Util(bytes);
+    return bytes.toBase64();
   }
   static async decompressSignature(signatureData) {
     try {
-      const bytes = fromBase64Util(signatureData);
+      const bytes = Uint8Array.fromBase64(signatureData);
       const {
         readable,
         writable
diff --git a/toolkit/components/pdfjs/content/build/pdf.scripting.mjs b/toolkit/components/pdfjs/content/build/pdf.scripting.mjs
index f924044a64184..3452090b7d19a 100644
--- a/toolkit/components/pdfjs/content/build/pdf.scripting.mjs
+++ b/toolkit/components/pdfjs/content/build/pdf.scripting.mjs
@@ -21,8 +21,8 @@
  */
 
 /**
- * pdfjsVersion = 5.4.590
- * pdfjsBuild = 550520193
+ * pdfjsVersion = 5.4.647
+ * pdfjsBuild = 222a24c62
  */
 
 ;// ./src/scripting_api/constants.js
diff --git a/toolkit/components/pdfjs/content/build/pdf.worker.mjs b/toolkit/components/pdfjs/content/build/pdf.worker.mjs
index e038fe0744a2d..dc9607df5e6c8 100644
--- a/toolkit/components/pdfjs/content/build/pdf.worker.mjs
+++ b/toolkit/components/pdfjs/content/build/pdf.worker.mjs
@@ -21,8 +21,8 @@
  */
 
 /**
- * pdfjsVersion = 5.4.590
- * pdfjsBuild = 550520193
+ * pdfjsVersion = 5.4.647
+ * pdfjsBuild = 222a24c62
  */
 /******/ // The require scope
 /******/ var __webpack_require__ = {};
@@ -892,36 +892,6 @@ function _isValidExplicitDest(validRef, validName, dest) {
 function MathClamp(v, min, max) {
   return Math.min(Math.max(v, min), max);
 }
-function toHexUtil(arr) {
-  if (Uint8Array.prototype.toHex) {
-    return arr.toHex();
-  }
-  return Array.from(arr, num => hexNumbers[num]).join("");
-}
-function toBase64Util(arr) {
-  if (Uint8Array.prototype.toBase64) {
-    return arr.toBase64();
-  }
-  return btoa(bytesToString(arr));
-}
-function fromBase64Util(str) {
-  if (Uint8Array.fromBase64) {
-    return Uint8Array.fromBase64(str);
-  }
-  return stringToBytes(atob(str));
-}
-if (typeof Promise.try !== "function") {
-  Promise.try = function (fn, ...args) {
-    return new Promise(resolve => {
-      resolve(fn(...args));
-    });
-  };
-}
-if (typeof Math.sumPrecise !== "function") {
-  Math.sumPrecise = function (numbers) {
-    return numbers.reduce((a, b) => a + b, 0);
-  };
-}
 
 ;// ./src/core/primitives.js
 
@@ -2930,14 +2900,14 @@ class NullStream extends Stream {
 
 
 class ChunkedStream extends Stream {
+  progressiveDataLength = 0;
+  _lastSuccessfulEnsureByteChunk = -1;
+  _loadedChunks = new Set();
   constructor(length, chunkSize, manager) {
     super(new Uint8Array(length), 0, length, null);
     this.chunkSize = chunkSize;
-    this._loadedChunks = new Set();
     this.numChunks = Math.ceil(length / chunkSize);
     this.manager = manager;
-    this.progressiveDataLength = 0;
-    this.lastSuccessfulEnsureByteChunk = -1;
   }
   getMissingChunks() {
     const chunks = [];
@@ -2989,13 +2959,13 @@ class ChunkedStream extends Stream {
     if (chunk > this.numChunks) {
       return;
     }
-    if (chunk === this.lastSuccessfulEnsureByteChunk) {
+    if (chunk === this._lastSuccessfulEnsureByteChunk) {
       return;
     }
     if (!this._loadedChunks.has(chunk)) {
       throw new MissingDataException(pos, pos + 1);
     }
-    this.lastSuccessfulEnsureByteChunk = chunk;
+    this._lastSuccessfulEnsureByteChunk = chunk;
   }
   ensureRange(begin, end) {
     if (begin >= end) {
@@ -3112,28 +3082,23 @@ class ChunkedStream extends Stream {
   }
 }
 class ChunkedStreamManager {
-  constructor(pdfNetworkStream, args) {
+  aborted = false;
+  currRequestId = 0;
+  _chunksNeededByRequest = new Map();
+  _loadedStreamCapability = Promise.withResolvers();
+  _promisesByRequest = new Map();
+  _requestsByChunk = new Map();
+  constructor(pdfStream, args) {
     this.length = args.length;
     this.chunkSize = args.rangeChunkSize;
     this.stream = new ChunkedStream(this.length, this.chunkSize, this);
-    this.pdfNetworkStream = pdfNetworkStream;
+    this.pdfStream = pdfStream;
     this.disableAutoFetch = args.disableAutoFetch;
     this.msgHandler = args.msgHandler;
-    this.currRequestId = 0;
-    this._chunksNeededByRequest = new Map();
-    this._requestsByChunk = new Map();
-    this._promisesByRequest = new Map();
-    this.progressiveDataLength = 0;
-    this.aborted = false;
-    this._loadedStreamCapability = Promise.withResolvers();
   }
   sendRequest(begin, end) {
-    const rangeReader = this.pdfNetworkStream.getRangeReader(begin, end);
-    if (!rangeReader.isStreamingSupported) {
-      rangeReader.onProgress = this.onProgress.bind(this);
-    }
-    let chunks = [],
-      loaded = 0;
+    const rangeReader = this.pdfStream.getRangeReader(begin, end);
+    let chunks = [];
     return new Promise((resolve, reject) => {
       const readChunk = ({
         value,
@@ -3141,17 +3106,10 @@ class ChunkedStreamManager {
       }) => {
         try {
           if (done) {
-            const chunkData = arrayBuffersToBytes(chunks);
+            resolve(arrayBuffersToBytes(chunks));
             chunks = null;
-            resolve(chunkData);
             return;
           }
-          loaded += value.byteLength;
-          if (rangeReader.isStreamingSupported) {
-            this.onProgress({
-              loaded
-            });
-          }
           chunks.push(value);
           rangeReader.read().then(readChunk, reject);
         } catch (e) {
@@ -3268,27 +3226,25 @@ class ChunkedStreamManager {
     }
     return groupedChunks;
   }
-  onProgress(args) {
-    this.msgHandler.send("DocProgress", {
-      loaded: this.stream.numChunksLoaded * this.chunkSize + args.loaded,
-      total: this.length
-    });
-  }
   onReceiveData(args) {
+    const {
+      chunkSize,
+      length,
+      stream
+    } = this;
     const chunk = args.chunk;
     const isProgressive = args.begin === undefined;
-    const begin = isProgressive ? this.progressiveDataLength : args.begin;
+    const begin = isProgressive ? stream.progressiveDataLength : args.begin;
     const end = begin + chunk.byteLength;
-    const beginChunk = Math.floor(begin / this.chunkSize);
-    const endChunk = end < this.length ? Math.floor(end / this.chunkSize) : Math.ceil(end / this.chunkSize);
+    const beginChunk = Math.floor(begin / chunkSize);
+    const endChunk = end < length ? Math.floor(end / chunkSize) : Math.ceil(end / chunkSize);
     if (isProgressive) {
-      this.stream.onReceiveProgressiveData(chunk);
-      this.progressiveDataLength = end;
+      stream.onReceiveProgressiveData(chunk);
     } else {
-      this.stream.onReceiveData(begin, chunk);
+      stream.onReceiveData(begin, chunk);
     }
-    if (this.stream.isDataLoaded) {
-      this._loadedStreamCapability.resolve(this.stream);
+    if (stream.isDataLoaded) {
+      this._loadedStreamCapability.resolve(stream);
     }
     const loadedRequests = [];
     for (let curChunk = beginChunk; curChunk < endChunk; ++curChunk) {
@@ -3310,13 +3266,13 @@ class ChunkedStreamManager {
     }
     if (!this.disableAutoFetch && this._requestsByChunk.size === 0) {
       let nextEmptyChunk;
-      if (this.stream.numChunksLoaded === 1) {
-        const lastChunk = this.stream.numChunks - 1;
-        if (!this.stream.hasChunk(lastChunk)) {
+      if (stream.numChunksLoaded === 1) {
+        const lastChunk = stream.numChunks - 1;
+        if (!stream.hasChunk(lastChunk)) {
           nextEmptyChunk = lastChunk;
         }
       } else {
-        nextEmptyChunk = this.stream.nextEmptyChunk(endChunk);
+        nextEmptyChunk = stream.nextEmptyChunk(endChunk);
       }
       if (Number.isInteger(nextEmptyChunk)) {
         this._requestChunks([nextEmptyChunk]);
@@ -3328,8 +3284,8 @@ class ChunkedStreamManager {
       capability.resolve();
     }
     this.msgHandler.send("DocProgress", {
-      loaded: this.stream.numChunksLoaded * this.chunkSize,
-      total: this.length
+      loaded: stream.numChunksLoaded * chunkSize,
+      total: length
     });
   }
   onError(err) {
@@ -3343,7 +3299,7 @@ class ChunkedStreamManager {
   }
   abort(reason) {
     this.aborted = true;
-    this.pdfNetworkStream?.cancelAllRequests(reason);
+    this.pdfStream?.cancelAllRequests(reason);
     for (const capability of this._promisesByRequest.values()) {
       capability.reject(reason);
     }
@@ -3892,7 +3848,7 @@ async function JBig2(moduleArg = {}) {
   }
   function initRuntime() {
     runtimeInitialized = true;
-    wasmExports["h"]();
+    wasmExports["j"]();
   }
   function postRun() {
     if (Module["postRun"]) {
@@ -4015,6 +3971,9 @@ async function JBig2(moduleArg = {}) {
     };
     return 0;
   };
+  function _createImageData(size) {
+    Module.imageData = new Uint8Array(size);
+  }
   var getHeapMax = () => 2147483648;
   var alignMemory = (size, alignment) => Math.ceil(size / alignment) * alignment;
   var growMemory = size => {
@@ -4055,6 +4014,9 @@ async function JBig2(moduleArg = {}) {
       imageData.set(HEAPU8.subarray(srcStart, srcStart + pitch8), destStart);
     }
   }
+  function _setLineData(line_ptr, pitch8, offset) {
+    Module.imageData.set(HEAPU8.subarray(line_ptr, line_ptr + pitch8), offset);
+  }
   var writeArrayToMemory = (array, buffer) => {
     HEAP8.set(array, buffer);
   };
@@ -4071,22 +4033,25 @@ async function JBig2(moduleArg = {}) {
     }
   }
   Module["writeArrayToMemory"] = writeArrayToMemory;
-  var _malloc, _free, _jbig2_decode, __emscripten_timeout, memory, __indirect_function_table, wasmMemory;
+  var _malloc, _free, _jbig2_decode, _ccitt_decode, __emscripten_timeout, memory, __indirect_function_table, wasmMemory;
   function assignWasmExports(wasmExports) {
-    _malloc = Module["_malloc"] = wasmExports["i"];
-    _free = Module["_free"] = wasmExports["j"];
-    _jbig2_decode = Module["_jbig2_decode"] = wasmExports["k"];
-    __emscripten_timeout = wasmExports["l"];
-    memory = wasmMemory = wasmExports["g"];
+    _malloc = Module["_malloc"] = wasmExports["k"];
+    _free = Module["_free"] = wasmExports["l"];
+    _jbig2_decode = Module["_jbig2_decode"] = wasmExports["m"];
+    _ccitt_decode = Module["_ccitt_decode"] = wasmExports["n"];
+    __emscripten_timeout = wasmExports["o"];
+    memory = wasmMemory = wasmExports["i"];
     __indirect_function_table = wasmExports["__indirect_function_table"];
   }
   var wasmImports = {
     e: __abort_js,
     b: __emscripten_runtime_keepalive_clear,
     c: __setitimer_js,
+    g: _createImageData,
     d: _emscripten_resize_heap,
     a: _proc_exit,
-    f: _setImageData
+    h: _setImageData,
+    f: _setLineData
   };
   function run() {
     preRun();
@@ -4122,7 +4087,7 @@ async function JBig2(moduleArg = {}) {
   return moduleRtn;
 }
 /* harmony default export */ const jbig2 = (JBig2);
-;// ./src/core/jbig2_wasm.js
+;// ./src/core/jbig2_ccittFax_wasm.js
 
 
 
@@ -4131,7 +4096,7 @@ class JBig2Error extends BaseException {
     super(msg, "Jbig2Error");
   }
 }
-class JBig2WasmImage {
+class JBig2CCITTFaxWasmImage {
   static #buffer = null;
   static #handler = null;
   static #modulePromise = null;
@@ -4173,7 +4138,7 @@ class JBig2WasmImage {
       this.#handler = null;
     }
   }
-  static async decode(bytes, width, height, globals) {
+  static async decode(bytes, width, height, globals, CCITTOptions) {
     if (!this.#modulePromise) {
       const {
         promise,
@@ -4199,12 +4164,16 @@ class JBig2WasmImage {
       const size = bytes.length;
       ptr = module._malloc(size);
       module.writeArrayToMemory(bytes, ptr);
-      const globalsSize = globals ? globals.length : 0;
-      if (globalsSize > 0) {
-        globalsPtr = module._malloc(globalsSize);
-        module.writeArrayToMemory(globals, globalsPtr);
+      if (CCITTOptions) {
+        module._ccitt_decode(ptr, size, width, height, CCITTOptions.K, CCITTOptions.EndOfLine ? 1 : 0, CCITTOptions.EncodedByteAlign ? 1 : 0, CCITTOptions.BlackIs1 ? 1 : 0, CCITTOptions.Columns, CCITTOptions.Rows);
+      } else {
+        const globalsSize = globals ? globals.length : 0;
+        if (globalsSize > 0) {
+          globalsPtr = module._malloc(globalsSize);
+          module.writeArrayToMemory(globals, globalsPtr);
+        }
+        module._jbig2_decode(ptr, size, width, height, globalsPtr, globalsSize);
       }
-      module._jbig2_decode(ptr, size, width, height, globalsPtr, globalsSize);
       if (!module.imageData) {
         throw new JBig2Error("Unknown error");
       }
@@ -4300,12 +4269,49 @@ class DecodeStream extends BaseStream {
   async getImageData(length, decoderOptions) {
     if (!this.canAsyncDecodeImageFromBuffer) {
       if (this.isAsyncDecoder) {
-        return this.decodeImage(null, decoderOptions);
+        return this.decodeImage(null, length, decoderOptions);
       }
       return this.getBytes(length, decoderOptions);
     }
     const data = await this.stream.asyncGetBytes();
-    return this.decodeImage(data, decoderOptions);
+    return this.decodeImage(data, length, decoderOptions);
+  }
+  async asyncGetBytesFromDecompressionStream(name) {
+    this.stream.reset();
+    const bytes = this.stream.isAsync ? await this.stream.asyncGetBytes() : this.stream.getBytes();
+    try {
+      const {
+        readable,
+        writable
+      } = new DecompressionStream(name);
+      const writer = writable.getWriter();
+      await writer.ready;
+      writer.write(bytes).then(async () => {
+        await writer.ready;
+        await writer.close();
+      }).catch(() => {});
+      const chunks = [];
+      let totalLength = 0;
+      for await (const chunk of readable) {
+        chunks.push(chunk);
+        totalLength += chunk.byteLength;
+      }
+      const data = new Uint8Array(totalLength);
+      let offset = 0;
+      for (const chunk of chunks) {
+        data.set(chunk, offset);
+        offset += chunk.byteLength;
+      }
+      return {
+        decompressed: data,
+        compressed: bytes
+      };
+    } catch {
+      return {
+        decompressed: null,
+        compressed: bytes
+      };
+    }
   }
   reset() {
     this.pos = 0;
@@ -7523,6 +7529,1982 @@ class AsciiHexStream extends DecodeStream {
   }
 }
 
+;// ./external/brotli/decode.js
+let Options;
+let makeBrotliDecode = () => {
+  const MAX_HUFFMAN_TABLE_SIZE = Int32Array.from([256, 402, 436, 468, 500, 534, 566, 598, 630, 662, 694, 726, 758, 790, 822, 854, 886, 920, 952, 984, 1016, 1048, 1080]);
+  const CODE_LENGTH_CODE_ORDER = Int32Array.from([1, 2, 3, 4, 0, 5, 17, 6, 16, 7, 8, 9, 10, 11, 12, 13, 14, 15]);
+  const DISTANCE_SHORT_CODE_INDEX_OFFSET = Int32Array.from([0, 3, 2, 1, 0, 0, 0, 0, 0, 0, 3, 3, 3, 3, 3, 3]);
+  const DISTANCE_SHORT_CODE_VALUE_OFFSET = Int32Array.from([0, 0, 0, 0, -1, 1, -2, 2, -3, 3, -1, 1, -2, 2, -3, 3]);
+  const FIXED_TABLE = Int32Array.from([0x020000, 0x020004, 0x020003, 0x030002, 0x020000, 0x020004, 0x020003, 0x040001, 0x020000, 0x020004, 0x020003, 0x030002, 0x020000, 0x020004, 0x020003, 0x040005]);
+  const BLOCK_LENGTH_OFFSET = Int32Array.from([1, 5, 9, 13, 17, 25, 33, 41, 49, 65, 81, 97, 113, 145, 177, 209, 241, 305, 369, 497, 753, 1265, 2289, 4337, 8433, 16625]);
+  const BLOCK_LENGTH_N_BITS = Int32Array.from([2, 2, 2, 2, 3, 3, 3, 3, 4, 4, 4, 4, 5, 5, 5, 5, 6, 6, 7, 8, 9, 10, 11, 12, 13, 24]);
+  const INSERT_LENGTH_N_BITS = Int16Array.from([0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01, 0x01, 0x02, 0x02, 0x03, 0x03, 0x04, 0x04, 0x05, 0x05, 0x06, 0x07, 0x08, 0x09, 0x0A, 0x0C, 0x0E, 0x18]);
+  const COPY_LENGTH_N_BITS = Int16Array.from([0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01, 0x01, 0x02, 0x02, 0x03, 0x03, 0x04, 0x04, 0x05, 0x05, 0x06, 0x07, 0x08, 0x09, 0x0A, 0x18]);
+  const CMD_LOOKUP = new Int16Array(2816);
+  unpackCommandLookupTable(CMD_LOOKUP);
+  function log2floor(i) {
+    let result = -1;
+    let step = 16;
+    let v = i;
+    while (step > 0) {
+      let next = v >> step;
+      if (next !== 0) {
+        result += step;
+        v = next;
+      }
+      step = step >> 1;
+    }
+    return result + v;
+  }
+  function calculateDistanceAlphabetSize(npostfix, ndirect, maxndistbits) {
+    return 16 + ndirect + 2 * (maxndistbits << npostfix);
+  }
+  function calculateDistanceAlphabetLimit(s, maxDistance, npostfix, ndirect) {
+    if (maxDistance < ndirect + (2 << npostfix)) {
+      return makeError(s, -23);
+    }
+    const offset = (maxDistance - ndirect >> npostfix) + 4;
+    const ndistbits = log2floor(offset) - 1;
+    const group = ndistbits - 1 << 1 | offset >> ndistbits & 1;
+    return (group - 1 << npostfix) + (1 << npostfix) + ndirect + 16;
+  }
+  function unpackCommandLookupTable(cmdLookup) {
+    const insertLengthOffsets = new Int32Array(24);
+    const copyLengthOffsets = new Int32Array(24);
+    copyLengthOffsets[0] = 2;
+    for (let i = 0; i < 23; ++i) {
+      insertLengthOffsets[i + 1] = insertLengthOffsets[i] + (1 << INSERT_LENGTH_N_BITS[i]);
+      copyLengthOffsets[i + 1] = copyLengthOffsets[i] + (1 << COPY_LENGTH_N_BITS[i]);
+    }
+    for (let cmdCode = 0; cmdCode < 704; ++cmdCode) {
+      let rangeIdx = cmdCode >> 6;
+      let distanceContextOffset = -4;
+      if (rangeIdx >= 2) {
+        rangeIdx -= 2;
+        distanceContextOffset = 0;
+      }
+      const insertCode = (0x29850 >> rangeIdx * 2 & 0x3) << 3 | cmdCode >> 3 & 7;
+      const copyCode = (0x26244 >> rangeIdx * 2 & 0x3) << 3 | cmdCode & 7;
+      const copyLengthOffset = copyLengthOffsets[copyCode];
+      const distanceContext = distanceContextOffset + Math.min(copyLengthOffset, 5) - 2;
+      const index = cmdCode * 4;
+      cmdLookup[index] = INSERT_LENGTH_N_BITS[insertCode] | COPY_LENGTH_N_BITS[copyCode] << 8;
+      cmdLookup[index + 1] = insertLengthOffsets[insertCode];
+      cmdLookup[index + 2] = copyLengthOffsets[copyCode];
+      cmdLookup[index + 3] = distanceContext;
+    }
+  }
+  function decodeWindowBits(s) {
+    const largeWindowEnabled = s.isLargeWindow;
+    s.isLargeWindow = 0;
+    if (s.bitOffset >= 16) {
+      s.accumulator32 = s.shortBuffer[s.halfOffset++] << 16 | s.accumulator32 >>> 16;
+      s.bitOffset -= 16;
+    }
+    if (readFewBits(s, 1) === 0) {
+      return 16;
+    }
+    let n = readFewBits(s, 3);
+    if (n !== 0) {
+      return 17 + n;
+    }
+    n = readFewBits(s, 3);
+    if (n !== 0) {
+      if (n === 1) {
+        if (largeWindowEnabled === 0) {
+          return -1;
+        }
+        s.isLargeWindow = 1;
+        if (readFewBits(s, 1) === 1) {
+          return -1;
+        }
+        n = readFewBits(s, 6);
+        if (n < 10 || n > 30) {
+          return -1;
+        }
+        return n;
+      }
+      return 8 + n;
+    }
+    return 17;
+  }
+  function attachDictionaryChunk(s, data) {
+    if (s.runningState !== 1) {
+      return makeError(s, -24);
+    }
+    if (s.cdNumChunks === 0) {
+      s.cdChunks = new Array(16);
+      s.cdChunkOffsets = new Int32Array(16);
+      s.cdBlockBits = -1;
+    }
+    if (s.cdNumChunks === 15) {
+      return makeError(s, -27);
+    }
+    s.cdChunks[s.cdNumChunks] = data;
+    s.cdNumChunks++;
+    s.cdTotalSize += data.length;
+    s.cdChunkOffsets[s.cdNumChunks] = s.cdTotalSize;
+    return 0;
+  }
+  function initState(s) {
+    if (s.runningState !== 0) {
+      return makeError(s, -26);
+    }
+    s.blockTrees = new Int32Array(3091);
+    s.blockTrees[0] = 7;
+    s.distRbIdx = 3;
+    let result = calculateDistanceAlphabetLimit(s, 0x7FFFFFFC, 3, 120);
+    if (result < 0) {
+      return result;
+    }
+    const maxDistanceAlphabetLimit = result;
+    s.distExtraBits = new Int8Array(maxDistanceAlphabetLimit);
+    s.distOffset = new Int32Array(maxDistanceAlphabetLimit);
+    result = initBitReader(s);
+    if (result < 0) {
+      return result;
+    }
+    s.runningState = 1;
+    return 0;
+  }
+  function close(s) {
+    if (s.runningState === 0) {
+      return makeError(s, -25);
+    }
+    if (s.runningState > 0) {
+      s.runningState = 11;
+    }
+    return 0;
+  }
+  function decodeVarLenUnsignedByte(s) {
+    if (s.bitOffset >= 16) {
+      s.accumulator32 = s.shortBuffer[s.halfOffset++] << 16 | s.accumulator32 >>> 16;
+      s.bitOffset -= 16;
+    }
+    if (readFewBits(s, 1) !== 0) {
+      const n = readFewBits(s, 3);
+      if (n === 0) {
+        return 1;
+      }
+      return readFewBits(s, n) + (1 << n);
+    }
+    return 0;
+  }
+  function decodeMetaBlockLength(s) {
+    if (s.bitOffset >= 16) {
+      s.accumulator32 = s.shortBuffer[s.halfOffset++] << 16 | s.accumulator32 >>> 16;
+      s.bitOffset -= 16;
+    }
+    s.inputEnd = readFewBits(s, 1);
+    s.metaBlockLength = 0;
+    s.isUncompressed = 0;
+    s.isMetadata = 0;
+    if (s.inputEnd !== 0 && readFewBits(s, 1) !== 0) {
+      return 0;
+    }
+    const sizeNibbles = readFewBits(s, 2) + 4;
+    if (sizeNibbles === 7) {
+      s.isMetadata = 1;
+      if (readFewBits(s, 1) !== 0) {
+        return makeError(s, -6);
+      }
+      const sizeBytes = readFewBits(s, 2);
+      if (sizeBytes === 0) {
+        return 0;
+      }
+      for (let i = 0; i < sizeBytes; ++i) {
+        if (s.bitOffset >= 16) {
+          s.accumulator32 = s.shortBuffer[s.halfOffset++] << 16 | s.accumulator32 >>> 16;
+          s.bitOffset -= 16;
+        }
+        const bits = readFewBits(s, 8);
+        if (bits === 0 && i + 1 === sizeBytes && sizeBytes > 1) {
+          return makeError(s, -8);
+        }
+        s.metaBlockLength += bits << i * 8;
+      }
+    } else {
+      for (let i = 0; i < sizeNibbles; ++i) {
+        if (s.bitOffset >= 16) {
+          s.accumulator32 = s.shortBuffer[s.halfOffset++] << 16 | s.accumulator32 >>> 16;
+          s.bitOffset -= 16;
+        }
+        const bits = readFewBits(s, 4);
+        if (bits === 0 && i + 1 === sizeNibbles && sizeNibbles > 4) {
+          return makeError(s, -8);
+        }
+        s.metaBlockLength += bits << i * 4;
+      }
+    }
+    s.metaBlockLength++;
+    if (s.inputEnd === 0) {
+      s.isUncompressed = readFewBits(s, 1);
+    }
+    return 0;
+  }
+  function readSymbol(tableGroup, tableIdx, s) {
+    let offset = tableGroup[tableIdx];
+    const v = s.accumulator32 >>> s.bitOffset;
+    offset += v & 0xFF;
+    const bits = tableGroup[offset] >> 16;
+    const sym = tableGroup[offset] & 0xFFFF;
+    if (bits <= 8) {
+      s.bitOffset += bits;
+      return sym;
+    }
+    offset += sym;
+    const mask = (1 << bits) - 1;
+    offset += (v & mask) >>> 8;
+    s.bitOffset += (tableGroup[offset] >> 16) + 8;
+    return tableGroup[offset] & 0xFFFF;
+  }
+  function readBlockLength(tableGroup, tableIdx, s) {
+    if (s.bitOffset >= 16) {
+      s.accumulator32 = s.shortBuffer[s.halfOffset++] << 16 | s.accumulator32 >>> 16;
+      s.bitOffset -= 16;
+    }
+    const code = readSymbol(tableGroup, tableIdx, s);
+    const n = BLOCK_LENGTH_N_BITS[code];
+    if (s.bitOffset >= 16) {
+      s.accumulator32 = s.shortBuffer[s.halfOffset++] << 16 | s.accumulator32 >>> 16;
+      s.bitOffset -= 16;
+    }
+    return BLOCK_LENGTH_OFFSET[code] + (n <= 16 ? readFewBits(s, n) : readManyBits(s, n));
+  }
+  function moveToFront(v, index) {
+    let i = index;
+    const value = v[i];
+    while (i > 0) {
+      v[i] = v[i - 1];
+      i--;
+    }
+    v[0] = value;
+  }
+  function inverseMoveToFrontTransform(v, vLen) {
+    const mtf = new Int32Array(256);
+    for (let i = 0; i < 256; ++i) {
+      mtf[i] = i;
+    }
+    for (let i = 0; i < vLen; ++i) {
+      const index = v[i] & 0xFF;
+      v[i] = mtf[index];
+      if (index !== 0) {
+        moveToFront(mtf, index);
+      }
+    }
+  }
+  function readHuffmanCodeLengths(codeLengthCodeLengths, numSymbols, codeLengths, s) {
+    let symbol = 0;
+    let prevCodeLen = 8;
+    let repeat = 0;
+    let repeatCodeLen = 0;
+    let space = 32768;
+    const table = new Int32Array(33);
+    const tableIdx = table.length - 1;
+    buildHuffmanTable(table, tableIdx, 5, codeLengthCodeLengths, 18);
+    while (symbol < numSymbols && space > 0) {
+      if (s.halfOffset > 2030) {
+        const result = readMoreInput(s);
+        if (result < 0) {
+          return result;
+        }
+      }
+      if (s.bitOffset >= 16) {
+        s.accumulator32 = s.shortBuffer[s.halfOffset++] << 16 | s.accumulator32 >>> 16;
+        s.bitOffset -= 16;
+      }
+      const p = s.accumulator32 >>> s.bitOffset & 31;
+      s.bitOffset += table[p] >> 16;
+      const codeLen = table[p] & 0xFFFF;
+      if (codeLen < 16) {
+        repeat = 0;
+        codeLengths[symbol++] = codeLen;
+        if (codeLen !== 0) {
+          prevCodeLen = codeLen;
+          space -= 32768 >> codeLen;
+        }
+      } else {
+        const extraBits = codeLen - 14;
+        let newLen = 0;
+        if (codeLen === 16) {
+          newLen = prevCodeLen;
+        }
+        if (repeatCodeLen !== newLen) {
+          repeat = 0;
+          repeatCodeLen = newLen;
+        }
+        const oldRepeat = repeat;
+        if (repeat > 0) {
+          repeat -= 2;
+          repeat = repeat << extraBits;
+        }
+        if (s.bitOffset >= 16) {
+          s.accumulator32 = s.shortBuffer[s.halfOffset++] << 16 | s.accumulator32 >>> 16;
+          s.bitOffset -= 16;
+        }
+        repeat += readFewBits(s, extraBits) + 3;
+        const repeatDelta = repeat - oldRepeat;
+        if (symbol + repeatDelta > numSymbols) {
+          return makeError(s, -2);
+        }
+        for (let i = 0; i < repeatDelta; ++i) {
+          codeLengths[symbol++] = repeatCodeLen;
+        }
+        if (repeatCodeLen !== 0) {
+          space -= repeatDelta << 15 - repeatCodeLen;
+        }
+      }
+    }
+    if (space !== 0) {
+      return makeError(s, -18);
+    }
+    codeLengths.fill(0, symbol, numSymbols);
+    return 0;
+  }
+  function checkDupes(s, symbols, length) {
+    for (let i = 0; i < length - 1; ++i) {
+      for (let j = i + 1; j < length; ++j) {
+        if (symbols[i] === symbols[j]) {
+          return makeError(s, -7);
+        }
+      }
+    }
+    return 0;
+  }
+  function readSimpleHuffmanCode(alphabetSizeMax, alphabetSizeLimit, tableGroup, tableIdx, s) {
+    const codeLengths = new Int32Array(alphabetSizeLimit);
+    const symbols = new Int32Array(4);
+    const maxBits = 1 + log2floor(alphabetSizeMax - 1);
+    const numSymbols = readFewBits(s, 2) + 1;
+    for (let i = 0; i < numSymbols; ++i) {
+      if (s.bitOffset >= 16) {
+        s.accumulator32 = s.shortBuffer[s.halfOffset++] << 16 | s.accumulator32 >>> 16;
+        s.bitOffset -= 16;
+      }
+      const symbol = readFewBits(s, maxBits);
+      if (symbol >= alphabetSizeLimit) {
+        return makeError(s, -15);
+      }
+      symbols[i] = symbol;
+    }
+    const result = checkDupes(s, symbols, numSymbols);
+    if (result < 0) {
+      return result;
+    }
+    let histogramId = numSymbols;
+    if (numSymbols === 4) {
+      histogramId += readFewBits(s, 1);
+    }
+    switch (histogramId) {
+      case 1:
+        codeLengths[symbols[0]] = 1;
+        break;
+      case 2:
+        codeLengths[symbols[0]] = 1;
+        codeLengths[symbols[1]] = 1;
+        break;
+      case 3:
+        codeLengths[symbols[0]] = 1;
+        codeLengths[symbols[1]] = 2;
+        codeLengths[symbols[2]] = 2;
+        break;
+      case 4:
+        codeLengths[symbols[0]] = 2;
+        codeLengths[symbols[1]] = 2;
+        codeLengths[symbols[2]] = 2;
+        codeLengths[symbols[3]] = 2;
+        break;
+      case 5:
+        codeLengths[symbols[0]] = 1;
+        codeLengths[symbols[1]] = 2;
+        codeLengths[symbols[2]] = 3;
+        codeLengths[symbols[3]] = 3;
+        break;
+      default:
+        break;
+    }
+    return buildHuffmanTable(tableGroup, tableIdx, 8, codeLengths, alphabetSizeLimit);
+  }
+  function readComplexHuffmanCode(alphabetSizeLimit, skip, tableGroup, tableIdx, s) {
+    const codeLengths = new Int32Array(alphabetSizeLimit);
+    const codeLengthCodeLengths = new Int32Array(18);
+    let space = 32;
+    let numCodes = 0;
+    for (let i = skip; i < 18; ++i) {
+      const codeLenIdx = CODE_LENGTH_CODE_ORDER[i];
+      if (s.bitOffset >= 16) {
+        s.accumulator32 = s.shortBuffer[s.halfOffset++] << 16 | s.accumulator32 >>> 16;
+        s.bitOffset -= 16;
+      }
+      const p = s.accumulator32 >>> s.bitOffset & 15;
+      s.bitOffset += FIXED_TABLE[p] >> 16;
+      const v = FIXED_TABLE[p] & 0xFFFF;
+      codeLengthCodeLengths[codeLenIdx] = v;
+      if (v !== 0) {
+        space -= 32 >> v;
+        numCodes++;
+        if (space <= 0) {
+          break;
+        }
+      }
+    }
+    if (space !== 0 && numCodes !== 1) {
+      return makeError(s, -4);
+    }
+    const result = readHuffmanCodeLengths(codeLengthCodeLengths, alphabetSizeLimit, codeLengths, s);
+    if (result < 0) {
+      return result;
+    }
+    return buildHuffmanTable(tableGroup, tableIdx, 8, codeLengths, alphabetSizeLimit);
+  }
+  function readHuffmanCode(alphabetSizeMax, alphabetSizeLimit, tableGroup, tableIdx, s) {
+    if (s.halfOffset > 2030) {
+      const result = readMoreInput(s);
+      if (result < 0) {
+        return result;
+      }
+    }
+    if (s.bitOffset >= 16) {
+      s.accumulator32 = s.shortBuffer[s.halfOffset++] << 16 | s.accumulator32 >>> 16;
+      s.bitOffset -= 16;
+    }
+    const simpleCodeOrSkip = readFewBits(s, 2);
+    if (simpleCodeOrSkip === 1) {
+      return readSimpleHuffmanCode(alphabetSizeMax, alphabetSizeLimit, tableGroup, tableIdx, s);
+    }
+    return readComplexHuffmanCode(alphabetSizeLimit, simpleCodeOrSkip, tableGroup, tableIdx, s);
+  }
+  function decodeContextMap(contextMapSize, contextMap, s) {
+    let result;
+    if (s.halfOffset > 2030) {
+      result = readMoreInput(s);
+      if (result < 0) {
+        return result;
+      }
+    }
+    const numTrees = decodeVarLenUnsignedByte(s) + 1;
+    if (numTrees === 1) {
+      contextMap.fill(0, 0, contextMapSize);
+      return numTrees;
+    }
+    if (s.bitOffset >= 16) {
+      s.accumulator32 = s.shortBuffer[s.halfOffset++] << 16 | s.accumulator32 >>> 16;
+      s.bitOffset -= 16;
+    }
+    const useRleForZeros = readFewBits(s, 1);
+    let maxRunLengthPrefix = 0;
+    if (useRleForZeros !== 0) {
+      maxRunLengthPrefix = readFewBits(s, 4) + 1;
+    }
+    const alphabetSize = numTrees + maxRunLengthPrefix;
+    const tableSize = MAX_HUFFMAN_TABLE_SIZE[alphabetSize + 31 >> 5];
+    const table = new Int32Array(tableSize + 1);
+    const tableIdx = table.length - 1;
+    result = readHuffmanCode(alphabetSize, alphabetSize, table, tableIdx, s);
+    if (result < 0) {
+      return result;
+    }
+    let i = 0;
+    while (i < contextMapSize) {
+      if (s.halfOffset > 2030) {
+        result = readMoreInput(s);
+        if (result < 0) {
+          return result;
+        }
+      }
+      if (s.bitOffset >= 16) {
+        s.accumulator32 = s.shortBuffer[s.halfOffset++] << 16 | s.accumulator32 >>> 16;
+        s.bitOffset -= 16;
+      }
+      const code = readSymbol(table, tableIdx, s);
+      if (code === 0) {
+        contextMap[i] = 0;
+        i++;
+      } else if (code <= maxRunLengthPrefix) {
+        if (s.bitOffset >= 16) {
+          s.accumulator32 = s.shortBuffer[s.halfOffset++] << 16 | s.accumulator32 >>> 16;
+          s.bitOffset -= 16;
+        }
+        let reps = (1 << code) + readFewBits(s, code);
+        while (reps !== 0) {
+          if (i >= contextMapSize) {
+            return makeError(s, -3);
+          }
+          contextMap[i] = 0;
+          i++;
+          reps--;
+        }
+      } else {
+        contextMap[i] = code - maxRunLengthPrefix;
+        i++;
+      }
+    }
+    if (s.bitOffset >= 16) {
+      s.accumulator32 = s.shortBuffer[s.halfOffset++] << 16 | s.accumulator32 >>> 16;
+      s.bitOffset -= 16;
+    }
+    if (readFewBits(s, 1) === 1) {
+      inverseMoveToFrontTransform(contextMap, contextMapSize);
+    }
+    return numTrees;
+  }
+  function decodeBlockTypeAndLength(s, treeType, numBlockTypes) {
+    const ringBuffers = s.rings;
+    const offset = 4 + treeType * 2;
+    if (s.bitOffset >= 16) {
+      s.accumulator32 = s.shortBuffer[s.halfOffset++] << 16 | s.accumulator32 >>> 16;
+      s.bitOffset -= 16;
+    }
+    let blockType = readSymbol(s.blockTrees, 2 * treeType, s);
+    const result = readBlockLength(s.blockTrees, 2 * treeType + 1, s);
+    if (blockType === 1) {
+      blockType = ringBuffers[offset + 1] + 1;
+    } else if (blockType === 0) {
+      blockType = ringBuffers[offset];
+    } else {
+      blockType -= 2;
+    }
+    if (blockType >= numBlockTypes) {
+      blockType -= numBlockTypes;
+    }
+    ringBuffers[offset] = ringBuffers[offset + 1];
+    ringBuffers[offset + 1] = blockType;
+    return result;
+  }
+  function decodeLiteralBlockSwitch(s) {
+    s.literalBlockLength = decodeBlockTypeAndLength(s, 0, s.numLiteralBlockTypes);
+    const literalBlockType = s.rings[5];
+    s.contextMapSlice = literalBlockType << 6;
+    s.literalTreeIdx = s.contextMap[s.contextMapSlice] & 0xFF;
+    const contextMode = s.contextModes[literalBlockType];
+    s.contextLookupOffset1 = contextMode << 9;
+    s.contextLookupOffset2 = s.contextLookupOffset1 + 256;
+  }
+  function decodeCommandBlockSwitch(s) {
+    s.commandBlockLength = decodeBlockTypeAndLength(s, 1, s.numCommandBlockTypes);
+    s.commandTreeIdx = s.rings[7];
+  }
+  function decodeDistanceBlockSwitch(s) {
+    s.distanceBlockLength = decodeBlockTypeAndLength(s, 2, s.numDistanceBlockTypes);
+    s.distContextMapSlice = s.rings[9] << 2;
+  }
+  function maybeReallocateRingBuffer(s) {
+    let newSize = s.maxRingBufferSize;
+    if (newSize > s.expectedTotalSize) {
+      const minimalNewSize = s.expectedTotalSize;
+      while (newSize >> 1 > minimalNewSize) {
+        newSize = newSize >> 1;
+      }
+      if (s.inputEnd === 0 && newSize < 16384 && s.maxRingBufferSize >= 16384) {
+        newSize = 16384;
+      }
+    }
+    if (newSize <= s.ringBufferSize) {
+      return;
+    }
+    const ringBufferSizeWithSlack = newSize + 37;
+    const newBuffer = new Int8Array(ringBufferSizeWithSlack);
+    const oldBuffer = s.ringBuffer;
+    if (oldBuffer.length !== 0) {
+      newBuffer.set(oldBuffer.subarray(0, s.ringBufferSize), 0);
+    }
+    s.ringBuffer = newBuffer;
+    s.ringBufferSize = newSize;
+  }
+  function readNextMetablockHeader(s) {
+    if (s.inputEnd !== 0) {
+      s.nextRunningState = 10;
+      s.runningState = 12;
+      return 0;
+    }
+    s.literalTreeGroup = new Int32Array(0);
+    s.commandTreeGroup = new Int32Array(0);
+    s.distanceTreeGroup = new Int32Array(0);
+    let result;
+    if (s.halfOffset > 2030) {
+      result = readMoreInput(s);
+      if (result < 0) {
+        return result;
+      }
+    }
+    result = decodeMetaBlockLength(s);
+    if (result < 0) {
+      return result;
+    }
+    if (s.metaBlockLength === 0 && s.isMetadata === 0) {
+      return 0;
+    }
+    if (s.isUncompressed !== 0 || s.isMetadata !== 0) {
+      result = jumpToByteBoundary(s);
+      if (result < 0) {
+        return result;
+      }
+      if (s.isMetadata === 0) {
+        s.runningState = 6;
+      } else {
+        s.runningState = 5;
+      }
+    } else {
+      s.runningState = 3;
+    }
+    if (s.isMetadata !== 0) {
+      return 0;
+    }
+    s.expectedTotalSize += s.metaBlockLength;
+    if (s.expectedTotalSize > 1 << 30) {
+      s.expectedTotalSize = 1 << 30;
+    }
+    if (s.ringBufferSize < s.maxRingBufferSize) {
+      maybeReallocateRingBuffer(s);
+    }
+    return 0;
+  }
+  function readMetablockPartition(s, treeType, numBlockTypes) {
+    let offset = s.blockTrees[2 * treeType];
+    if (numBlockTypes <= 1) {
+      s.blockTrees[2 * treeType + 1] = offset;
+      s.blockTrees[2 * treeType + 2] = offset;
+      return 1 << 28;
+    }
+    const blockTypeAlphabetSize = numBlockTypes + 2;
+    let result = readHuffmanCode(blockTypeAlphabetSize, blockTypeAlphabetSize, s.blockTrees, 2 * treeType, s);
+    if (result < 0) {
+      return result;
+    }
+    offset += result;
+    s.blockTrees[2 * treeType + 1] = offset;
+    const blockLengthAlphabetSize = 26;
+    result = readHuffmanCode(blockLengthAlphabetSize, blockLengthAlphabetSize, s.blockTrees, 2 * treeType + 1, s);
+    if (result < 0) {
+      return result;
+    }
+    offset += result;
+    s.blockTrees[2 * treeType + 2] = offset;
+    return readBlockLength(s.blockTrees, 2 * treeType + 1, s);
+  }
+  function calculateDistanceLut(s, alphabetSizeLimit) {
+    const distExtraBits = s.distExtraBits;
+    const distOffset = s.distOffset;
+    const npostfix = s.distancePostfixBits;
+    const ndirect = s.numDirectDistanceCodes;
+    const postfix = 1 << npostfix;
+    let bits = 1;
+    let half = 0;
+    let i = 16;
+    for (let j = 0; j < ndirect; ++j) {
+      distExtraBits[i] = 0;
+      distOffset[i] = j + 1;
+      ++i;
+    }
+    while (i < alphabetSizeLimit) {
+      const base = ndirect + ((2 + half << bits) - 4 << npostfix) + 1;
+      for (let j = 0; j < postfix; ++j) {
+        distExtraBits[i] = bits;
+        distOffset[i] = base + j;
+        ++i;
+      }
+      bits = bits + half;
+      half = half ^ 1;
+    }
+  }
+  function readMetablockHuffmanCodesAndContextMaps(s) {
+    s.numLiteralBlockTypes = decodeVarLenUnsignedByte(s) + 1;
+    let result = readMetablockPartition(s, 0, s.numLiteralBlockTypes);
+    if (result < 0) {
+      return result;
+    }
+    s.literalBlockLength = result;
+    s.numCommandBlockTypes = decodeVarLenUnsignedByte(s) + 1;
+    result = readMetablockPartition(s, 1, s.numCommandBlockTypes);
+    if (result < 0) {
+      return result;
+    }
+    s.commandBlockLength = result;
+    s.numDistanceBlockTypes = decodeVarLenUnsignedByte(s) + 1;
+    result = readMetablockPartition(s, 2, s.numDistanceBlockTypes);
+    if (result < 0) {
+      return result;
+    }
+    s.distanceBlockLength = result;
+    if (s.halfOffset > 2030) {
+      result = readMoreInput(s);
+      if (result < 0) {
+        return result;
+      }
+    }
+    if (s.bitOffset >= 16) {
+      s.accumulator32 = s.shortBuffer[s.halfOffset++] << 16 | s.accumulator32 >>> 16;
+      s.bitOffset -= 16;
+    }
+    s.distancePostfixBits = readFewBits(s, 2);
+    s.numDirectDistanceCodes = readFewBits(s, 4) << s.distancePostfixBits;
+    s.contextModes = new Int8Array(s.numLiteralBlockTypes);
+    let i = 0;
+    while (i < s.numLiteralBlockTypes) {
+      const limit = Math.min(i + 96, s.numLiteralBlockTypes);
+      while (i < limit) {
+        if (s.bitOffset >= 16) {
+          s.accumulator32 = s.shortBuffer[s.halfOffset++] << 16 | s.accumulator32 >>> 16;
+          s.bitOffset -= 16;
+        }
+        s.contextModes[i] = readFewBits(s, 2);
+        i++;
+      }
+      if (s.halfOffset > 2030) {
+        result = readMoreInput(s);
+        if (result < 0) {
+          return result;
+        }
+      }
+    }
+    const contextMapLength = s.numLiteralBlockTypes << 6;
+    s.contextMap = new Int8Array(contextMapLength);
+    result = decodeContextMap(contextMapLength, s.contextMap, s);
+    if (result < 0) {
+      return result;
+    }
+    const numLiteralTrees = result;
+    s.trivialLiteralContext = 1;
+    for (let j = 0; j < contextMapLength; ++j) {
+      if (s.contextMap[j] !== j >> 6) {
+        s.trivialLiteralContext = 0;
+        break;
+      }
+    }
+    s.distContextMap = new Int8Array(s.numDistanceBlockTypes << 2);
+    result = decodeContextMap(s.numDistanceBlockTypes << 2, s.distContextMap, s);
+    if (result < 0) {
+      return result;
+    }
+    const numDistTrees = result;
+    s.literalTreeGroup = new Int32Array(huffmanTreeGroupAllocSize(256, numLiteralTrees));
+    result = decodeHuffmanTreeGroup(256, 256, numLiteralTrees, s, s.literalTreeGroup);
+    if (result < 0) {
+      return result;
+    }
+    s.commandTreeGroup = new Int32Array(huffmanTreeGroupAllocSize(704, s.numCommandBlockTypes));
+    result = decodeHuffmanTreeGroup(704, 704, s.numCommandBlockTypes, s, s.commandTreeGroup);
+    if (result < 0) {
+      return result;
+    }
+    let distanceAlphabetSizeMax = calculateDistanceAlphabetSize(s.distancePostfixBits, s.numDirectDistanceCodes, 24);
+    let distanceAlphabetSizeLimit = distanceAlphabetSizeMax;
+    if (s.isLargeWindow === 1) {
+      distanceAlphabetSizeMax = calculateDistanceAlphabetSize(s.distancePostfixBits, s.numDirectDistanceCodes, 62);
+      result = calculateDistanceAlphabetLimit(s, 0x7FFFFFFC, s.distancePostfixBits, s.numDirectDistanceCodes);
+      if (result < 0) {
+        return result;
+      }
+      distanceAlphabetSizeLimit = result;
+    }
+    s.distanceTreeGroup = new Int32Array(huffmanTreeGroupAllocSize(distanceAlphabetSizeLimit, numDistTrees));
+    result = decodeHuffmanTreeGroup(distanceAlphabetSizeMax, distanceAlphabetSizeLimit, numDistTrees, s, s.distanceTreeGroup);
+    if (result < 0) {
+      return result;
+    }
+    calculateDistanceLut(s, distanceAlphabetSizeLimit);
+    s.contextMapSlice = 0;
+    s.distContextMapSlice = 0;
+    s.contextLookupOffset1 = s.contextModes[0] * 512;
+    s.contextLookupOffset2 = s.contextLookupOffset1 + 256;
+    s.literalTreeIdx = 0;
+    s.commandTreeIdx = 0;
+    s.rings[4] = 1;
+    s.rings[5] = 0;
+    s.rings[6] = 1;
+    s.rings[7] = 0;
+    s.rings[8] = 1;
+    s.rings[9] = 0;
+    return 0;
+  }
+  function copyUncompressedData(s) {
+    const ringBuffer = s.ringBuffer;
+    let result;
+    if (s.metaBlockLength <= 0) {
+      result = reload(s);
+      if (result < 0) {
+        return result;
+      }
+      s.runningState = 2;
+      return 0;
+    }
+    const chunkLength = Math.min(s.ringBufferSize - s.pos, s.metaBlockLength);
+    result = copyRawBytes(s, ringBuffer, s.pos, chunkLength);
+    if (result < 0) {
+      return result;
+    }
+    s.metaBlockLength -= chunkLength;
+    s.pos += chunkLength;
+    if (s.pos === s.ringBufferSize) {
+      s.nextRunningState = 6;
+      s.runningState = 12;
+      return 0;
+    }
+    result = reload(s);
+    if (result < 0) {
+      return result;
+    }
+    s.runningState = 2;
+    return 0;
+  }
+  function writeRingBuffer(s) {
+    const toWrite = Math.min(s.outputLength - s.outputUsed, s.ringBufferBytesReady - s.ringBufferBytesWritten);
+    if (toWrite !== 0) {
+      s.output.set(s.ringBuffer.subarray(s.ringBufferBytesWritten, s.ringBufferBytesWritten + toWrite), s.outputOffset + s.outputUsed);
+      s.outputUsed += toWrite;
+      s.ringBufferBytesWritten += toWrite;
+    }
+    if (s.outputUsed < s.outputLength) {
+      return 0;
+    }
+    return 2;
+  }
+  function huffmanTreeGroupAllocSize(alphabetSizeLimit, n) {
+    const maxTableSize = MAX_HUFFMAN_TABLE_SIZE[alphabetSizeLimit + 31 >> 5];
+    return n + n * maxTableSize;
+  }
+  function decodeHuffmanTreeGroup(alphabetSizeMax, alphabetSizeLimit, n, s, group) {
+    let next = n;
+    for (let i = 0; i < n; ++i) {
+      group[i] = next;
+      const result = readHuffmanCode(alphabetSizeMax, alphabetSizeLimit, group, i, s);
+      if (result < 0) {
+        return result;
+      }
+      next += result;
+    }
+    return 0;
+  }
+  function calculateFence(s) {
+    let result = s.ringBufferSize;
+    if (s.isEager !== 0) {
+      result = Math.min(result, s.ringBufferBytesWritten + s.outputLength - s.outputUsed);
+    }
+    return result;
+  }
+  function doUseDictionary(s, fence) {
+    if (s.distance > 0x7FFFFFFC) {
+      return makeError(s, -9);
+    }
+    const address = s.distance - s.maxDistance - 1 - s.cdTotalSize;
+    if (address < 0) {
+      const result = initializeCompoundDictionaryCopy(s, -address - 1, s.copyLength);
+      if (result < 0) {
+        return result;
+      }
+      s.runningState = 14;
+    } else {
+      const dictionaryData = data;
+      const wordLength = s.copyLength;
+      if (wordLength > 31) {
+        return makeError(s, -9);
+      }
+      const shift = sizeBits[wordLength];
+      if (shift === 0) {
+        return makeError(s, -9);
+      }
+      let offset = offsets[wordLength];
+      const mask = (1 << shift) - 1;
+      const wordIdx = address & mask;
+      const transformIdx = address >> shift;
+      offset += wordIdx * wordLength;
+      const transforms = RFC_TRANSFORMS;
+      if (transformIdx >= transforms.numTransforms) {
+        return makeError(s, -9);
+      }
+      const len = transformDictionaryWord(s.ringBuffer, s.pos, dictionaryData, offset, wordLength, transforms, transformIdx);
+      s.pos += len;
+      s.metaBlockLength -= len;
+      if (s.pos >= fence) {
+        s.nextRunningState = 4;
+        s.runningState = 12;
+        return 0;
+      }
+      s.runningState = 4;
+    }
+    return 0;
+  }
+  function initializeCompoundDictionary(s) {
+    s.cdBlockMap = new Int8Array(256);
+    let blockBits = 8;
+    while (s.cdTotalSize - 1 >> blockBits !== 0) {
+      blockBits++;
+    }
+    blockBits -= 8;
+    s.cdBlockBits = blockBits;
+    let cursor = 0;
+    let index = 0;
+    while (cursor < s.cdTotalSize) {
+      while (s.cdChunkOffsets[index + 1] < cursor) {
+        index++;
+      }
+      s.cdBlockMap[cursor >> blockBits] = index;
+      cursor += 1 << blockBits;
+    }
+  }
+  function initializeCompoundDictionaryCopy(s, address, length) {
+    if (s.cdBlockBits === -1) {
+      initializeCompoundDictionary(s);
+    }
+    let index = s.cdBlockMap[address >> s.cdBlockBits];
+    while (address >= s.cdChunkOffsets[index + 1]) {
+      index++;
+    }
+    if (s.cdTotalSize > address + length) {
+      return makeError(s, -9);
+    }
+    s.distRbIdx = s.distRbIdx + 1 & 0x3;
+    s.rings[s.distRbIdx] = s.distance;
+    s.metaBlockLength -= length;
+    s.cdBrIndex = index;
+    s.cdBrOffset = address - s.cdChunkOffsets[index];
+    s.cdBrLength = length;
+    s.cdBrCopied = 0;
+    return 0;
+  }
+  function copyFromCompoundDictionary(s, fence) {
+    let pos = s.pos;
+    const origPos = pos;
+    while (s.cdBrLength !== s.cdBrCopied) {
+      const space = fence - pos;
+      const chunkLength = s.cdChunkOffsets[s.cdBrIndex + 1] - s.cdChunkOffsets[s.cdBrIndex];
+      const remChunkLength = chunkLength - s.cdBrOffset;
+      let length = s.cdBrLength - s.cdBrCopied;
+      if (length > remChunkLength) {
+        length = remChunkLength;
+      }
+      if (length > space) {
+        length = space;
+      }
+      s.ringBuffer.set(s.cdChunks[s.cdBrIndex].subarray(s.cdBrOffset, s.cdBrOffset + length), pos);
+      pos += length;
+      s.cdBrOffset += length;
+      s.cdBrCopied += length;
+      if (length === remChunkLength) {
+        s.cdBrIndex++;
+        s.cdBrOffset = 0;
+      }
+      if (pos >= fence) {
+        break;
+      }
+    }
+    return pos - origPos;
+  }
+  function decompress(s) {
+    let result;
+    if (s.runningState === 0) {
+      return makeError(s, -25);
+    }
+    if (s.runningState < 0) {
+      return makeError(s, -28);
+    }
+    if (s.runningState === 11) {
+      return makeError(s, -22);
+    }
+    if (s.runningState === 1) {
+      const windowBits = decodeWindowBits(s);
+      if (windowBits === -1) {
+        return makeError(s, -11);
+      }
+      s.maxRingBufferSize = 1 << windowBits;
+      s.maxBackwardDistance = s.maxRingBufferSize - 16;
+      s.runningState = 2;
+    }
+    let fence = calculateFence(s);
+    let ringBufferMask = s.ringBufferSize - 1;
+    let ringBuffer = s.ringBuffer;
+    while (s.runningState !== 10) {
+      switch (s.runningState) {
+        case 2:
+          if (s.metaBlockLength < 0) {
+            return makeError(s, -10);
+          }
+          result = readNextMetablockHeader(s);
+          if (result < 0) {
+            return result;
+          }
+          fence = calculateFence(s);
+          ringBufferMask = s.ringBufferSize - 1;
+          ringBuffer = s.ringBuffer;
+          continue;
+        case 3:
+          result = readMetablockHuffmanCodesAndContextMaps(s);
+          if (result < 0) {
+            return result;
+          }
+          s.runningState = 4;
+          continue;
+        case 4:
+          if (s.metaBlockLength <= 0) {
+            s.runningState = 2;
+            continue;
+          }
+          if (s.halfOffset > 2030) {
+            result = readMoreInput(s);
+            if (result < 0) {
+              return result;
+            }
+          }
+          if (s.commandBlockLength === 0) {
+            decodeCommandBlockSwitch(s);
+          }
+          s.commandBlockLength--;
+          if (s.bitOffset >= 16) {
+            s.accumulator32 = s.shortBuffer[s.halfOffset++] << 16 | s.accumulator32 >>> 16;
+            s.bitOffset -= 16;
+          }
+          const cmdCode = readSymbol(s.commandTreeGroup, s.commandTreeIdx, s) << 2;
+          const insertAndCopyExtraBits = CMD_LOOKUP[cmdCode];
+          const insertLengthOffset = CMD_LOOKUP[cmdCode + 1];
+          const copyLengthOffset = CMD_LOOKUP[cmdCode + 2];
+          s.distanceCode = CMD_LOOKUP[cmdCode + 3];
+          if (s.bitOffset >= 16) {
+            s.accumulator32 = s.shortBuffer[s.halfOffset++] << 16 | s.accumulator32 >>> 16;
+            s.bitOffset -= 16;
+          }
+          const insertLengthExtraBits = insertAndCopyExtraBits & 0xFF;
+          s.insertLength = insertLengthOffset + (insertLengthExtraBits <= 16 ? readFewBits(s, insertLengthExtraBits) : readManyBits(s, insertLengthExtraBits));
+          if (s.bitOffset >= 16) {
+            s.accumulator32 = s.shortBuffer[s.halfOffset++] << 16 | s.accumulator32 >>> 16;
+            s.bitOffset -= 16;
+          }
+          const copyLengthExtraBits = insertAndCopyExtraBits >> 8;
+          s.copyLength = copyLengthOffset + (copyLengthExtraBits <= 16 ? readFewBits(s, copyLengthExtraBits) : readManyBits(s, copyLengthExtraBits));
+          s.j = 0;
+          s.runningState = 7;
+          continue;
+        case 7:
+          if (s.trivialLiteralContext !== 0) {
+            while (s.j < s.insertLength) {
+              if (s.halfOffset > 2030) {
+                result = readMoreInput(s);
+                if (result < 0) {
+                  return result;
+                }
+              }
+              if (s.literalBlockLength === 0) {
+                decodeLiteralBlockSwitch(s);
+              }
+              s.literalBlockLength--;
+              if (s.bitOffset >= 16) {
+                s.accumulator32 = s.shortBuffer[s.halfOffset++] << 16 | s.accumulator32 >>> 16;
+                s.bitOffset -= 16;
+              }
+              ringBuffer[s.pos] = readSymbol(s.literalTreeGroup, s.literalTreeIdx, s);
+              s.pos++;
+              s.j++;
+              if (s.pos >= fence) {
+                s.nextRunningState = 7;
+                s.runningState = 12;
+                break;
+              }
+            }
+          } else {
+            let prevByte1 = ringBuffer[s.pos - 1 & ringBufferMask] & 0xFF;
+            let prevByte2 = ringBuffer[s.pos - 2 & ringBufferMask] & 0xFF;
+            while (s.j < s.insertLength) {
+              if (s.halfOffset > 2030) {
+                result = readMoreInput(s);
+                if (result < 0) {
+                  return result;
+                }
+              }
+              if (s.literalBlockLength === 0) {
+                decodeLiteralBlockSwitch(s);
+              }
+              const literalContext = LOOKUP[s.contextLookupOffset1 + prevByte1] | LOOKUP[s.contextLookupOffset2 + prevByte2];
+              const literalTreeIdx = s.contextMap[s.contextMapSlice + literalContext] & 0xFF;
+              s.literalBlockLength--;
+              prevByte2 = prevByte1;
+              if (s.bitOffset >= 16) {
+                s.accumulator32 = s.shortBuffer[s.halfOffset++] << 16 | s.accumulator32 >>> 16;
+                s.bitOffset -= 16;
+              }
+              prevByte1 = readSymbol(s.literalTreeGroup, literalTreeIdx, s);
+              ringBuffer[s.pos] = prevByte1;
+              s.pos++;
+              s.j++;
+              if (s.pos >= fence) {
+                s.nextRunningState = 7;
+                s.runningState = 12;
+                break;
+              }
+            }
+          }
+          if (s.runningState !== 7) {
+            continue;
+          }
+          s.metaBlockLength -= s.insertLength;
+          if (s.metaBlockLength <= 0) {
+            s.runningState = 4;
+            continue;
+          }
+          let distanceCode = s.distanceCode;
+          if (distanceCode < 0) {
+            s.distance = s.rings[s.distRbIdx];
+          } else {
+            if (s.halfOffset > 2030) {
+              result = readMoreInput(s);
+              if (result < 0) {
+                return result;
+              }
+            }
+            if (s.distanceBlockLength === 0) {
+              decodeDistanceBlockSwitch(s);
+            }
+            s.distanceBlockLength--;
+            if (s.bitOffset >= 16) {
+              s.accumulator32 = s.shortBuffer[s.halfOffset++] << 16 | s.accumulator32 >>> 16;
+              s.bitOffset -= 16;
+            }
+            const distTreeIdx = s.distContextMap[s.distContextMapSlice + distanceCode] & 0xFF;
+            distanceCode = readSymbol(s.distanceTreeGroup, distTreeIdx, s);
+            if (distanceCode < 16) {
+              const index = s.distRbIdx + DISTANCE_SHORT_CODE_INDEX_OFFSET[distanceCode] & 0x3;
+              s.distance = s.rings[index] + DISTANCE_SHORT_CODE_VALUE_OFFSET[distanceCode];
+              if (s.distance < 0) {
+                return makeError(s, -12);
+              }
+            } else {
+              const extraBits = s.distExtraBits[distanceCode];
+              let bits;
+              if (s.bitOffset + extraBits <= 32) {
+                bits = readFewBits(s, extraBits);
+              } else {
+                if (s.bitOffset >= 16) {
+                  s.accumulator32 = s.shortBuffer[s.halfOffset++] << 16 | s.accumulator32 >>> 16;
+                  s.bitOffset -= 16;
+                }
+                bits = extraBits <= 16 ? readFewBits(s, extraBits) : readManyBits(s, extraBits);
+              }
+              s.distance = s.distOffset[distanceCode] + (bits << s.distancePostfixBits);
+            }
+          }
+          if (s.maxDistance !== s.maxBackwardDistance && s.pos < s.maxBackwardDistance) {
+            s.maxDistance = s.pos;
+          } else {
+            s.maxDistance = s.maxBackwardDistance;
+          }
+          if (s.distance > s.maxDistance) {
+            s.runningState = 9;
+            continue;
+          }
+          if (distanceCode > 0) {
+            s.distRbIdx = s.distRbIdx + 1 & 0x3;
+            s.rings[s.distRbIdx] = s.distance;
+          }
+          if (s.copyLength > s.metaBlockLength) {
+            return makeError(s, -9);
+          }
+          s.j = 0;
+          s.runningState = 8;
+          continue;
+        case 8:
+          let src = s.pos - s.distance & ringBufferMask;
+          let dst = s.pos;
+          const copyLength = s.copyLength - s.j;
+          const srcEnd = src + copyLength;
+          const dstEnd = dst + copyLength;
+          if (srcEnd < ringBufferMask && dstEnd < ringBufferMask) {
+            if (copyLength < 12 || srcEnd > dst && dstEnd > src) {
+              const numQuads = copyLength + 3 >> 2;
+              for (let k = 0; k < numQuads; ++k) {
+                ringBuffer[dst++] = ringBuffer[src++];
+                ringBuffer[dst++] = ringBuffer[src++];
+                ringBuffer[dst++] = ringBuffer[src++];
+                ringBuffer[dst++] = ringBuffer[src++];
+              }
+            } else {
+              ringBuffer.copyWithin(dst, src, srcEnd);
+            }
+            s.j += copyLength;
+            s.metaBlockLength -= copyLength;
+            s.pos += copyLength;
+          } else {
+            while (s.j < s.copyLength) {
+              ringBuffer[s.pos] = ringBuffer[s.pos - s.distance & ringBufferMask];
+              s.metaBlockLength--;
+              s.pos++;
+              s.j++;
+              if (s.pos >= fence) {
+                s.nextRunningState = 8;
+                s.runningState = 12;
+                break;
+              }
+            }
+          }
+          if (s.runningState === 8) {
+            s.runningState = 4;
+          }
+          continue;
+        case 9:
+          result = doUseDictionary(s, fence);
+          if (result < 0) {
+            return result;
+          }
+          continue;
+        case 14:
+          s.pos += copyFromCompoundDictionary(s, fence);
+          if (s.pos >= fence) {
+            s.nextRunningState = 14;
+            s.runningState = 12;
+            return 2;
+          }
+          s.runningState = 4;
+          continue;
+        case 5:
+          while (s.metaBlockLength > 0) {
+            if (s.halfOffset > 2030) {
+              result = readMoreInput(s);
+              if (result < 0) {
+                return result;
+              }
+            }
+            if (s.bitOffset >= 16) {
+              s.accumulator32 = s.shortBuffer[s.halfOffset++] << 16 | s.accumulator32 >>> 16;
+              s.bitOffset -= 16;
+            }
+            readFewBits(s, 8);
+            s.metaBlockLength--;
+          }
+          s.runningState = 2;
+          continue;
+        case 6:
+          result = copyUncompressedData(s);
+          if (result < 0) {
+            return result;
+          }
+          continue;
+        case 12:
+          s.ringBufferBytesReady = Math.min(s.pos, s.ringBufferSize);
+          s.runningState = 13;
+          continue;
+        case 13:
+          result = writeRingBuffer(s);
+          if (result !== 0) {
+            return result;
+          }
+          if (s.pos >= s.maxBackwardDistance) {
+            s.maxDistance = s.maxBackwardDistance;
+          }
+          if (s.pos >= s.ringBufferSize) {
+            if (s.pos > s.ringBufferSize) {
+              ringBuffer.copyWithin(0, s.ringBufferSize, s.pos);
+            }
+            s.pos = s.pos & ringBufferMask;
+            s.ringBufferBytesWritten = 0;
+          }
+          s.runningState = s.nextRunningState;
+          continue;
+        default:
+          return makeError(s, -28);
+      }
+    }
+    if (s.runningState !== 10) {
+      return makeError(s, -29);
+    }
+    if (s.metaBlockLength < 0) {
+      return makeError(s, -10);
+    }
+    result = jumpToByteBoundary(s);
+    if (result !== 0) {
+      return result;
+    }
+    result = checkHealth(s, 1);
+    if (result !== 0) {
+      return result;
+    }
+    return 1;
+  }
+  function Transforms(numTransforms, prefixSuffixLen, prefixSuffixCount) {
+    this.numTransforms = 0;
+    this.triplets = new Int32Array(0);
+    this.prefixSuffixStorage = new Int8Array(0);
+    this.prefixSuffixHeads = new Int32Array(0);
+    this.params = new Int16Array(0);
+    this.numTransforms = numTransforms;
+    this.triplets = new Int32Array(numTransforms * 3);
+    this.params = new Int16Array(numTransforms);
+    this.prefixSuffixStorage = new Int8Array(prefixSuffixLen);
+    this.prefixSuffixHeads = new Int32Array(prefixSuffixCount + 1);
+  }
+  const RFC_TRANSFORMS = new Transforms(121, 167, 50);
+  function unpackTransforms(prefixSuffix, prefixSuffixHeads, transforms, prefixSuffixSrc, transformsSrc) {
+    const prefixSuffixBytes = toUtf8Runes(prefixSuffixSrc);
+    const n = prefixSuffixBytes.length;
+    let index = 1;
+    let j = 0;
+    for (let i = 0; i < n; ++i) {
+      const c = prefixSuffixBytes[i];
+      if (c === 35) {
+        prefixSuffixHeads[index++] = j;
+      } else {
+        prefixSuffix[j++] = c;
+      }
+    }
+    for (let i = 0; i < 363; ++i) {
+      transforms[i] = transformsSrc.charCodeAt(i) - 32;
+    }
+  }
+  unpackTransforms(RFC_TRANSFORMS.prefixSuffixStorage, RFC_TRANSFORMS.prefixSuffixHeads, RFC_TRANSFORMS.triplets, "# #s #, #e #.# the #.com/#\xC2\xA0# of # and # in # to #\"#\">#\n#]# for # a # that #. # with #'# from # by #. The # on # as # is #ing #\n\t#:#ed #(# at #ly #=\"# of the #. This #,# not #er #al #='#ful #ive #less #est #ize #ous #", "     !! ! ,  *!  &!  \" !  ) *   * -  ! # !  #!*!  +  ,$ !  -  %  .  / #   0  1 .  \"   2  3!*   4%  ! # /   5  6  7  8 0  1 &   $   9 +   :  ;  < '  !=  >  ?! 4  @ 4  2  &   A *# (   B  C& ) %  ) !*# *-% A +! *.  D! %'  & E *6  F  G% ! *A *%  H! D  I!+!  J!+   K +- *4! A  L!*4  M  N +6  O!*% +.! K *G  P +%(  ! G *D +D  Q +# *K!*G!+D!+# +G +A +4!+% +K!+4!*D!+K!*K");
+  function transformDictionaryWord(dst, dstOffset, src, srcOffset, wordLen, transforms, transformIndex) {
+    let offset = dstOffset;
+    const triplets = transforms.triplets;
+    const prefixSuffixStorage = transforms.prefixSuffixStorage;
+    const prefixSuffixHeads = transforms.prefixSuffixHeads;
+    const transformOffset = 3 * transformIndex;
+    const prefixIdx = triplets[transformOffset];
+    const transformType = triplets[transformOffset + 1];
+    const suffixIdx = triplets[transformOffset + 2];
+    let prefix = prefixSuffixHeads[prefixIdx];
+    const prefixEnd = prefixSuffixHeads[prefixIdx + 1];
+    let suffix = prefixSuffixHeads[suffixIdx];
+    const suffixEnd = prefixSuffixHeads[suffixIdx + 1];
+    let omitFirst = transformType - 11;
+    let omitLast = transformType;
+    if (omitFirst < 1 || omitFirst > 9) {
+      omitFirst = 0;
+    }
+    if (omitLast < 1 || omitLast > 9) {
+      omitLast = 0;
+    }
+    while (prefix !== prefixEnd) {
+      dst[offset++] = prefixSuffixStorage[prefix++];
+    }
+    let len = wordLen;
+    if (omitFirst > len) {
+      omitFirst = len;
+    }
+    let dictOffset = srcOffset + omitFirst;
+    len -= omitFirst;
+    len -= omitLast;
+    let i = len;
+    while (i > 0) {
+      dst[offset++] = src[dictOffset++];
+      i--;
+    }
+    if (transformType === 10 || transformType === 11) {
+      let uppercaseOffset = offset - len;
+      if (transformType === 10) {
+        len = 1;
+      }
+      while (len > 0) {
+        const c0 = dst[uppercaseOffset] & 0xFF;
+        if (c0 < 0xC0) {
+          if (c0 >= 97 && c0 <= 122) {
+            dst[uppercaseOffset] = dst[uppercaseOffset] ^ 32;
+          }
+          uppercaseOffset += 1;
+          len -= 1;
+        } else if (c0 < 0xE0) {
+          dst[uppercaseOffset + 1] = dst[uppercaseOffset + 1] ^ 32;
+          uppercaseOffset += 2;
+          len -= 2;
+        } else {
+          dst[uppercaseOffset + 2] = dst[uppercaseOffset + 2] ^ 5;
+          uppercaseOffset += 3;
+          len -= 3;
+        }
+      }
+    } else if (transformType === 21 || transformType === 22) {
+      let shiftOffset = offset - len;
+      const param = transforms.params[transformIndex];
+      let scalar = (param & 0x7FFF) + (0x1000000 - (param & 0x8000));
+      while (len > 0) {
+        let step = 1;
+        const c0 = dst[shiftOffset] & 0xFF;
+        if (c0 < 0x80) {
+          scalar += c0;
+          dst[shiftOffset] = scalar & 0x7F;
+        } else if (c0 < 0xC0) {} else if (c0 < 0xE0) {
+          if (len >= 2) {
+            const c1 = dst[shiftOffset + 1];
+            scalar += c1 & 0x3F | (c0 & 0x1F) << 6;
+            dst[shiftOffset] = 0xC0 | scalar >> 6 & 0x1F;
+            dst[shiftOffset + 1] = c1 & 0xC0 | scalar & 0x3F;
+            step = 2;
+          } else {
+            step = len;
+          }
+        } else if (c0 < 0xF0) {
+          if (len >= 3) {
+            const c1 = dst[shiftOffset + 1];
+            const c2 = dst[shiftOffset + 2];
+            scalar += c2 & 0x3F | (c1 & 0x3F) << 6 | (c0 & 0x0F) << 12;
+            dst[shiftOffset] = 0xE0 | scalar >> 12 & 0x0F;
+            dst[shiftOffset + 1] = c1 & 0xC0 | scalar >> 6 & 0x3F;
+            dst[shiftOffset + 2] = c2 & 0xC0 | scalar & 0x3F;
+            step = 3;
+          } else {
+            step = len;
+          }
+        } else if (c0 < 0xF8) {
+          if (len >= 4) {
+            const c1 = dst[shiftOffset + 1];
+            const c2 = dst[shiftOffset + 2];
+            const c3 = dst[shiftOffset + 3];
+            scalar += c3 & 0x3F | (c2 & 0x3F) << 6 | (c1 & 0x3F) << 12 | (c0 & 0x07) << 18;
+            dst[shiftOffset] = 0xF0 | scalar >> 18 & 0x07;
+            dst[shiftOffset + 1] = c1 & 0xC0 | scalar >> 12 & 0x3F;
+            dst[shiftOffset + 2] = c2 & 0xC0 | scalar >> 6 & 0x3F;
+            dst[shiftOffset + 3] = c3 & 0xC0 | scalar & 0x3F;
+            step = 4;
+          } else {
+            step = len;
+          }
+        }
+        shiftOffset += step;
+        len -= step;
+        if (transformType === 21) {
+          len = 0;
+        }
+      }
+    }
+    while (suffix !== suffixEnd) {
+      dst[offset++] = prefixSuffixStorage[suffix++];
+    }
+    return offset - dstOffset;
+  }
+  function getNextKey(key, len) {
+    let step = 1 << len - 1;
+    while ((key & step) !== 0) {
+      step = step >> 1;
+    }
+    return (key & step - 1) + step;
+  }
+  function replicateValue(table, offset, step, end, item) {
+    let pos = end;
+    while (pos > 0) {
+      pos -= step;
+      table[offset + pos] = item;
+    }
+  }
+  function nextTableBitSize(count, len, rootBits) {
+    let bits = len;
+    let left = 1 << bits - rootBits;
+    while (bits < 15) {
+      left -= count[bits];
+      if (left <= 0) {
+        break;
+      }
+      bits++;
+      left = left << 1;
+    }
+    return bits - rootBits;
+  }
+  function buildHuffmanTable(tableGroup, tableIdx, rootBits, codeLengths, codeLengthsSize) {
+    const tableOffset = tableGroup[tableIdx];
+    const sorted = new Int32Array(codeLengthsSize);
+    const count = new Int32Array(16);
+    const offset = new Int32Array(16);
+    for (let sym = 0; sym < codeLengthsSize; ++sym) {
+      count[codeLengths[sym]]++;
+    }
+    offset[1] = 0;
+    for (let len = 1; len < 15; ++len) {
+      offset[len + 1] = offset[len] + count[len];
+    }
+    for (let sym = 0; sym < codeLengthsSize; ++sym) {
+      if (codeLengths[sym] !== 0) {
+        sorted[offset[codeLengths[sym]]++] = sym;
+      }
+    }
+    let tableBits = rootBits;
+    let tableSize = 1 << tableBits;
+    let totalSize = tableSize;
+    if (offset[15] === 1) {
+      for (let k = 0; k < totalSize; ++k) {
+        tableGroup[tableOffset + k] = sorted[0];
+      }
+      return totalSize;
+    }
+    let key = 0;
+    let symbol = 0;
+    let step = 1;
+    for (let len = 1; len <= rootBits; ++len) {
+      step = step << 1;
+      while (count[len] > 0) {
+        replicateValue(tableGroup, tableOffset + key, step, tableSize, len << 16 | sorted[symbol++]);
+        key = getNextKey(key, len);
+        count[len]--;
+      }
+    }
+    const mask = totalSize - 1;
+    let low = -1;
+    let currentOffset = tableOffset;
+    step = 1;
+    for (let len = rootBits + 1; len <= 15; ++len) {
+      step = step << 1;
+      while (count[len] > 0) {
+        if ((key & mask) !== low) {
+          currentOffset += tableSize;
+          tableBits = nextTableBitSize(count, len, rootBits);
+          tableSize = 1 << tableBits;
+          totalSize += tableSize;
+          low = key & mask;
+          tableGroup[tableOffset + low] = tableBits + rootBits << 16 | currentOffset - tableOffset - low;
+        }
+        replicateValue(tableGroup, currentOffset + (key >> rootBits), step, tableSize, len - rootBits << 16 | sorted[symbol++]);
+        key = getNextKey(key, len);
+        count[len]--;
+      }
+    }
+    return totalSize;
+  }
+  function readMoreInput(s) {
+    if (s.endOfStreamReached !== 0) {
+      if (halfAvailable(s) >= -2) {
+        return 0;
+      }
+      return makeError(s, -16);
+    }
+    const readOffset = s.halfOffset << 1;
+    let bytesInBuffer = 4096 - readOffset;
+    s.byteBuffer.copyWithin(0, readOffset, 4096);
+    s.halfOffset = 0;
+    while (bytesInBuffer < 4096) {
+      const spaceLeft = 4096 - bytesInBuffer;
+      const len = readInput(s, s.byteBuffer, bytesInBuffer, spaceLeft);
+      if (len < -1) {
+        return len;
+      }
+      if (len <= 0) {
+        s.endOfStreamReached = 1;
+        s.tailBytes = bytesInBuffer;
+        bytesInBuffer += 1;
+        break;
+      }
+      bytesInBuffer += len;
+    }
+    bytesToNibbles(s, bytesInBuffer);
+    return 0;
+  }
+  function checkHealth(s, endOfStream) {
+    if (s.endOfStreamReached === 0) {
+      return 0;
+    }
+    const byteOffset = (s.halfOffset << 1) + (s.bitOffset + 7 >> 3) - 4;
+    if (byteOffset > s.tailBytes) {
+      return makeError(s, -13);
+    }
+    if (endOfStream !== 0 && byteOffset !== s.tailBytes) {
+      return makeError(s, -17);
+    }
+    return 0;
+  }
+  function readFewBits(s, n) {
+    const v = s.accumulator32 >>> s.bitOffset & (1 << n) - 1;
+    s.bitOffset += n;
+    return v;
+  }
+  function readManyBits(s, n) {
+    const low = readFewBits(s, 16);
+    s.accumulator32 = s.shortBuffer[s.halfOffset++] << 16 | s.accumulator32 >>> 16;
+    s.bitOffset -= 16;
+    return low | readFewBits(s, n - 16) << 16;
+  }
+  function initBitReader(s) {
+    s.byteBuffer = new Int8Array(4160);
+    s.accumulator32 = 0;
+    s.shortBuffer = new Int16Array(2080);
+    s.bitOffset = 32;
+    s.halfOffset = 2048;
+    s.endOfStreamReached = 0;
+    return prepare(s);
+  }
+  function prepare(s) {
+    if (s.halfOffset > 2030) {
+      const result = readMoreInput(s);
+      if (result !== 0) {
+        return result;
+      }
+    }
+    let health = checkHealth(s, 0);
+    if (health !== 0) {
+      return health;
+    }
+    s.accumulator32 = s.shortBuffer[s.halfOffset++] << 16 | s.accumulator32 >>> 16;
+    s.bitOffset -= 16;
+    s.accumulator32 = s.shortBuffer[s.halfOffset++] << 16 | s.accumulator32 >>> 16;
+    s.bitOffset -= 16;
+    return 0;
+  }
+  function reload(s) {
+    if (s.bitOffset === 32) {
+      return prepare(s);
+    }
+    return 0;
+  }
+  function jumpToByteBoundary(s) {
+    const padding = 32 - s.bitOffset & 7;
+    if (padding !== 0) {
+      const paddingBits = readFewBits(s, padding);
+      if (paddingBits !== 0) {
+        return makeError(s, -5);
+      }
+    }
+    return 0;
+  }
+  function halfAvailable(s) {
+    let limit = 2048;
+    if (s.endOfStreamReached !== 0) {
+      limit = s.tailBytes + 1 >> 1;
+    }
+    return limit - s.halfOffset;
+  }
+  function copyRawBytes(s, data, offset, length) {
+    let pos = offset;
+    let len = length;
+    if ((s.bitOffset & 7) !== 0) {
+      return makeError(s, -30);
+    }
+    while (s.bitOffset !== 32 && len !== 0) {
+      data[pos++] = s.accumulator32 >>> s.bitOffset;
+      s.bitOffset += 8;
+      len--;
+    }
+    if (len === 0) {
+      return 0;
+    }
+    const copyNibbles = Math.min(halfAvailable(s), len >> 1);
+    if (copyNibbles > 0) {
+      const readOffset = s.halfOffset << 1;
+      const delta = copyNibbles << 1;
+      data.set(s.byteBuffer.subarray(readOffset, readOffset + delta), pos);
+      pos += delta;
+      len -= delta;
+      s.halfOffset += copyNibbles;
+    }
+    if (len === 0) {
+      return 0;
+    }
+    if (halfAvailable(s) > 0) {
+      if (s.bitOffset >= 16) {
+        s.accumulator32 = s.shortBuffer[s.halfOffset++] << 16 | s.accumulator32 >>> 16;
+        s.bitOffset -= 16;
+      }
+      while (len !== 0) {
+        data[pos++] = s.accumulator32 >>> s.bitOffset;
+        s.bitOffset += 8;
+        len--;
+      }
+      return checkHealth(s, 0);
+    }
+    while (len > 0) {
+      const chunkLen = readInput(s, data, pos, len);
+      if (chunkLen < -1) {
+        return chunkLen;
+      }
+      if (chunkLen <= 0) {
+        return makeError(s, -16);
+      }
+      pos += chunkLen;
+      len -= chunkLen;
+    }
+    return 0;
+  }
+  function bytesToNibbles(s, byteLen) {
+    const byteBuffer = s.byteBuffer;
+    const halfLen = byteLen >> 1;
+    const shortBuffer = s.shortBuffer;
+    for (let i = 0; i < halfLen; ++i) {
+      shortBuffer[i] = byteBuffer[i * 2] & 0xFF | (byteBuffer[i * 2 + 1] & 0xFF) << 8;
+    }
+  }
+  const LOOKUP = new Int32Array(2048);
+  function unpackLookupTable(lookup, utfMap, utfRle) {
+    for (let i = 0; i < 256; ++i) {
+      lookup[i] = i & 0x3F;
+      lookup[512 + i] = i >> 2;
+      lookup[1792 + i] = 2 + (i >> 6);
+    }
+    for (let i = 0; i < 128; ++i) {
+      lookup[1024 + i] = 4 * (utfMap.charCodeAt(i) - 32);
+    }
+    for (let i = 0; i < 64; ++i) {
+      lookup[1152 + i] = i & 1;
+      lookup[1216 + i] = 2 + (i & 1);
+    }
+    let offset = 1280;
+    for (let k = 0; k < 19; ++k) {
+      const value = k & 3;
+      const rep = utfRle.charCodeAt(k) - 32;
+      for (let i = 0; i < rep; ++i) {
+        lookup[offset++] = value;
+      }
+    }
+    for (let i = 0; i < 16; ++i) {
+      lookup[1792 + i] = 1;
+      lookup[2032 + i] = 6;
+    }
+    lookup[1792] = 0;
+    lookup[2047] = 7;
+    for (let i = 0; i < 256; ++i) {
+      lookup[1536 + i] = lookup[1792 + i] << 3;
+    }
+  }
+  unpackLookupTable(LOOKUP, "         !!  !                  \"#$##%#$&'##(#)#++++++++++((&*'##,---,---,-----,-----,-----&#'###.///.///./////./////./////&#'# ", "A/*  ':  & : $  \x81 @");
+  function State() {
+    this.ringBuffer = new Int8Array(0);
+    this.contextModes = new Int8Array(0);
+    this.contextMap = new Int8Array(0);
+    this.distContextMap = new Int8Array(0);
+    this.distExtraBits = new Int8Array(0);
+    this.output = new Int8Array(0);
+    this.byteBuffer = new Int8Array(0);
+    this.shortBuffer = new Int16Array(0);
+    this.intBuffer = new Int32Array(0);
+    this.rings = new Int32Array(0);
+    this.blockTrees = new Int32Array(0);
+    this.literalTreeGroup = new Int32Array(0);
+    this.commandTreeGroup = new Int32Array(0);
+    this.distanceTreeGroup = new Int32Array(0);
+    this.distOffset = new Int32Array(0);
+    this.accumulator64 = 0;
+    this.runningState = 0;
+    this.nextRunningState = 0;
+    this.accumulator32 = 0;
+    this.bitOffset = 0;
+    this.halfOffset = 0;
+    this.tailBytes = 0;
+    this.endOfStreamReached = 0;
+    this.metaBlockLength = 0;
+    this.inputEnd = 0;
+    this.isUncompressed = 0;
+    this.isMetadata = 0;
+    this.literalBlockLength = 0;
+    this.numLiteralBlockTypes = 0;
+    this.commandBlockLength = 0;
+    this.numCommandBlockTypes = 0;
+    this.distanceBlockLength = 0;
+    this.numDistanceBlockTypes = 0;
+    this.pos = 0;
+    this.maxDistance = 0;
+    this.distRbIdx = 0;
+    this.trivialLiteralContext = 0;
+    this.literalTreeIdx = 0;
+    this.commandTreeIdx = 0;
+    this.j = 0;
+    this.insertLength = 0;
+    this.contextMapSlice = 0;
+    this.distContextMapSlice = 0;
+    this.contextLookupOffset1 = 0;
+    this.contextLookupOffset2 = 0;
+    this.distanceCode = 0;
+    this.numDirectDistanceCodes = 0;
+    this.distancePostfixBits = 0;
+    this.distance = 0;
+    this.copyLength = 0;
+    this.maxBackwardDistance = 0;
+    this.maxRingBufferSize = 0;
+    this.ringBufferSize = 0;
+    this.expectedTotalSize = 0;
+    this.outputOffset = 0;
+    this.outputLength = 0;
+    this.outputUsed = 0;
+    this.ringBufferBytesWritten = 0;
+    this.ringBufferBytesReady = 0;
+    this.isEager = 0;
+    this.isLargeWindow = 0;
+    this.cdNumChunks = 0;
+    this.cdTotalSize = 0;
+    this.cdBrIndex = 0;
+    this.cdBrOffset = 0;
+    this.cdBrLength = 0;
+    this.cdBrCopied = 0;
+    this.cdChunks = new Array(0);
+    this.cdChunkOffsets = new Int32Array(0);
+    this.cdBlockBits = 0;
+    this.cdBlockMap = new Int8Array(0);
+    this.input = new InputStream(new Int8Array(0));
+    this.ringBuffer = new Int8Array(0);
+    this.rings = new Int32Array(10);
+    this.rings[0] = 16;
+    this.rings[1] = 15;
+    this.rings[2] = 11;
+    this.rings[3] = 4;
+  }
+  let data = new Int8Array(0);
+  const offsets = new Int32Array(32);
+  const sizeBits = new Int32Array(32);
+  function setData(newData, newSizeBits) {
+    const dictionaryOffsets = offsets;
+    const dictionarySizeBits = sizeBits;
+    for (let i = 0; i < newSizeBits.length; ++i) {
+      dictionarySizeBits[i] = newSizeBits[i];
+    }
+    let pos = 0;
+    for (let i = 0; i < newSizeBits.length; ++i) {
+      dictionaryOffsets[i] = pos;
+      const bits = dictionarySizeBits[i];
+      if (bits !== 0) {
+        pos += i << (bits & 31);
+      }
+    }
+    for (let i = newSizeBits.length; i < 32; ++i) {
+      dictionaryOffsets[i] = pos;
+    }
+    data = newData;
+  }
+  function unpackDictionaryData(dictionary, data0, data1, skipFlip, sizeBits, sizeBitsData) {
+    const dict = toUsAsciiBytes(data0 + data1);
+    const skipFlipRunes = toUtf8Runes(skipFlip);
+    let offset = 0;
+    const n = skipFlipRunes.length >> 1;
+    for (let i = 0; i < n; ++i) {
+      const skip = skipFlipRunes[2 * i] - 36;
+      const flip = skipFlipRunes[2 * i + 1] - 36;
+      for (let j = 0; j < skip; ++j) {
+        dict[offset] = dict[offset] ^ 3;
+        offset++;
+      }
+      for (let j = 0; j < flip; ++j) {
+        dict[offset] = dict[offset] ^ 236;
+        offset++;
+      }
+    }
+    for (let i = 0; i < sizeBitsData.length; ++i) {
+      sizeBits[i] = sizeBitsData.charCodeAt(i) - 65;
+    }
+    dictionary.set(dict);
+  }
+  const dictionaryData = new Int8Array(122784);
+  const dictionarySizeBits = new Int32Array(25);
+  unpackDictionaryData(dictionaryData, "wjnfgltmojefofewab`h`lgfgbwbpkltlmozpjwf`jwzlsfmivpwojhfeqfftlqhwf{wzfbqlufqalgzolufelqnallhsobzojufojmfkfosklnfpjgfnlqftlqgolmdwkfnujftejmgsbdfgbzpevookfbgwfqnfb`kbqfbeqlnwqvfnbqhbaofvslmkjdkgbwfobmgmftpfufmmf{w`bpfalwkslpwvpfgnbgfkbmgkfqftkbwmbnfOjmhaoldpjyfabpfkfognbhfnbjmvpfq$*#(klogfmgptjwkMftpqfbgtfqfpjdmwbhfkbufdbnfpffm`boosbwktfoosovpnfmvejonsbqwiljmwkjpojpwdllgmffgtbzptfpwilapnjmgboploldlqj`kvpfpobpwwfbnbqnzellghjmdtjoofbpwtbqgafpwejqfSbdfhmltbtbz-smdnlufwkbmolbgdjufpfoemlwfnv`keffgnbmzql`hj`lmlm`follhkjgfgjfgKlnfqvofklpwbib{jmel`ovaobtpofppkboeplnfpv`kylmf233&lmfp`bqfWjnfqb`faovfelvqtffheb`fklsfdbufkbqgolpwtkfmsbqhhfswsbpppkjsqllnKWNOsobmWzsfglmfpbufhffseobdojmhplogejufwllhqbwfwltmivnswkvpgbqh`bqgejofefbqpwbzhjoowkbweboobvwlfufq-`lnwbohpklsulwfgffsnlgfqfpwwvqmalqmabmgefooqlpfvqo+phjmqlof`lnfb`wpbdfpnffwdlog-isdjwfnubqzefowwkfmpfmggqlsUjft`lsz2-3!?,b=pwlsfopfojfpwlvqsb`h-djesbpw`pp<dqbznfbm%dw8qjgfpklwobwfpbjgqlbgubq#effoilkmqj`hslqwebpw$VB.gfbg?,a=sllqajoowzsfV-P-tllgnvpw1s{8JmelqbmhtjgftbmwtbooofbgX3^8sbvotbufpvqf'+$ tbjwnbppbqnpdlfpdbjmobmdsbjg\"..#ol`hvmjwqllwtbohejqntjef{no!plmdwfpw13s{hjmgqltpwlloelmwnbjopbefpwbqnbsp`lqfqbjmeoltabazpsbmpbzp7s{85s{8bqwpellwqfbotjhjkfbwpwfswqjslqd,obhftfbhwlogElqn`bpwebmpabmhufqzqvmpivozwbph2s{8dlbodqftpoltfgdfjg>!pfwp6s{8-ip<73s{je#+pllmpfbwmlmfwvafyfqlpfmwqffgeb`wjmwldjewkbqn2;s{`bnfkjooalogyllnuljgfbpzqjmdejoosfbhjmjw`lpw0s{8ib`hwbdpajwpqloofgjwhmftmfbq?\"..dqltIPLMgvwzMbnfpbofzlv#olwpsbjmibyy`logfzfpejpkttt-qjphwbapsqfu23s{qjpf16s{Aovfgjmd033/abooelqgfbqmtjogal{-ebjqob`hufqpsbjqivmfwf`kje+\"sj`hfujo'+! tbqnolqgglfpsvoo/333jgfbgqbtkvdfpslwevmgavqmkqfe`foohfzpwj`hklvqolppevfo21s{pvjwgfboQPP!bdfgdqfzDFW!fbpfbjnpdjqobjgp;s{8mbuzdqjgwjsp :::tbqpobgz`bqp*8#~sks<kfoowbootklnyk9\t),\x0E\t#233kboo-\t\tB4s{8svpk`kbw3s{8`qft),?,kbpk46s{eobwqbqf#%%#wfoo`bnslmwlobjgnjppphjswfmwejmfnbofdfwpsolw733/\x0E\t\x0E\t`lloeffw-sks?aq=fqj`nlpwdvjgafoogfp`kbjqnbwkbwln,jnd% ;1ov`h`fmw3338wjmzdlmfkwnopfoogqvdEQFFmlgfmj`h<jg>olpfmvooubpwtjmgQPP#tfbqqfozaffmpbnfgvhfmbpb`bsftjpkdvoeW109kjwppolwdbwfhj`haovqwkfz26s{$$*8*8!=npjftjmpajqgplqwafwbpffhW2;9lqgpwqffnboo53s{ebqn\x0ElupalzpX3^-$*8!SLPWafbqhjgp*8~~nbqzwfmg+VH*rvbgyk9\n.pjy....sqls$*8\x0EojewW2:9uj`fbmgzgfaw=QPPsllomf`haoltW259gllqfuboW249ofwpebjolqbosloomlub`lopdfmf#\x0Elxplewqlnfwjooqlpp?k0=slvqebgfsjmh?wq=njmj*\x7F\"+njmfyk9\x04abqpkfbq33*8njoh#..=jqlmeqfggjphtfmwpljosvwp,ip,klozW119JPAMW139bgbnpffp?k1=iplm$/#$`lmwW129#QPPollsbpjbnllm?,s=plvoOJMFelqw`bqwW279?k2=;3s{\"..?:s{8W379njhf975Ymj`fjm`kZlqhqj`fyk9\b$**8svqfnbdfsbqbwlmfalmg904Y\\le\\$^*8333/yk9\x0Bwbmhzbqgaltoavpk965YIbub03s{\t\x7F~\t&@0&907YifeeF[SJ`bpkujpbdloepmltyk9\x05rvfq-`pppj`hnfbwnjm-ajmggfookjqfsj`pqfmw905YKWWS.132elwltloeFMG#{al{967YALGZgj`h8\t~\tf{jw906Yubqpafbw$~*8gjfw:::8bmmf~~?,Xj^-Obmdhn.^tjqfwlzpbggppfbobof{8\t\n~f`klmjmf-lqd336*wlmziftppbmgofdpqlle333*#133tjmfdfbqgldpallwdbqz`vwpwzofwfnswjlm-{no`l`hdbmd'+$-63s{Sk-Gnjp`bobmolbmgfphnjofqzbmvmj{gjp`*8~\tgvpw`ojs*-\t\t43s{.133GUGp4^=?wbsfgfnlj((*tbdffvqlskjolswpklofEBRpbpjm.15WobapsfwpVQO#avoh`llh8~\x0E\tKFBGX3^*baaqivbm+2:;ofpkwtjm?,j=plmzdvzpev`hsjsf\x7F.\t\"331*mgltX2^8X^8\tOld#pbow\x0E\t\n\nabmdwqjnabwk*x\x0E\t33s{\t~*8hl9\0effpbg=\x0Ep9,,#X^8wloosovd+*x\tx\x0E\t#-ip$133sgvboalbw-ISD*8\t~rvlw*8\t\t$*8\t\x0E\t~\x0E1327132613251324132;132:13131312131113101317131613151314131;131:130313021301130013071306130513041320132113221323133:133;133413351336133713301331133213332:::2::;2::42::52::62::72::02::12::22::32:;:2:;;2:;42:;52:;62:;72:;02:;12:;22:;32:4:2:4;2:442:452:462:472:402:412:422:432:5:2:5;2:542:552:562:572:502:512:522:532:6:2:6;2:642:652:662:672:602:612:622:632333231720:73333::::`lnln/Mpfpwffpwbsfqlwlglkb`f`bgbb/]lajfmg/Abbp/Aujgb`bpllwqlelqlplollwqb`vbogjilpjgldqbmwjslwfnbgfafbodlrv/Efpwlmbgbwqfpsl`l`bpbabilwlgbpjmlbdvbsvfpvmlpbmwfgj`fovjpfoobnbzlylmbbnlqsjpllaqb`oj`foolgjlpklqb`bpj<[<\\<Q<\\<R<P=l<\\=l=o=n<\\<Q<Y<S<R<R=n<T<[<Q<R<X<R=n<R<Z<Y<R<Q<T=i<q<\\<Y<Y<]=g<P=g<~=g=m<R<^=g<^<R<q<R<R<]<s<R<W<T<Q<T<L<H<q<Y<p=g=n=g<r<Q<T<P<X<\\<{<\\<x<\\<q=o<r<]=n<Y<t<[<Y<U<Q=o<P<P<N=g=o<Z5m5f4O5j5i4K5i4U5o5h4O5d4]4C5f4K5m5e5k5d5h5i5h5o4K5d5h5k4D4_4K5h4I5j5k5f4O5f5n4C5k5h4G5i4D5k5h5d5h5f4D5h4K5f4D5o4X5f4K5i4O5i5j4F4D5f5h5j4A4D5k5i5i4X5d4Xejqpwujgflojdkwtlqognfgjbtkjwf`olpfaob`hqjdkwpnbooallhpsob`fnvpj`ejfoglqgfqsljmwubovfofufowbaofalbqgklvpfdqlvstlqhpzfbqppwbwfwlgbztbwfqpwbqwpwzofgfbwksltfqsklmfmjdkwfqqlqjmsvwbalvwwfqnpwjwofwllopfufmwol`bowjnfpobqdftlqgpdbnfppklqwpsb`fel`vp`ofbqnlgfoaol`hdvjgfqbgjlpkbqftlnfmbdbjmnlmfzjnbdfmbnfpzlvmdojmfpobwfq`lolqdqffmeqlmw%bns8tbw`kelq`fsqj`fqvofpafdjmbewfqujpjwjppvfbqfbpafoltjmgf{wlwboklvqpobafosqjmwsqfppavjowojmhppsffgpwvgzwqbgfelvmgpfmpfvmgfqpkltmelqnpqbmdfbggfgpwjoonlufgwbhfmbalufeobpkej{fglewfmlwkfqujftp`kf`hofdboqjufqjwfnprvj`hpkbsfkvnbmf{jpwdljmdnlujfwkjqgabpj`sfb`fpwbdftjgwkoldjmjgfbptqlwfsbdfpvpfqpgqjufpwlqfaqfbhplvwkulj`fpjwfpnlmwktkfqfavjogtkj`kfbqwkelqvnwkqffpslqwsbqwz@oj`holtfqojufp`obppobzfqfmwqzpwlqzvpbdfplvmg`lvqwzlvq#ajqwkslsvswzsfpbssozJnbdfafjmdvssfqmlwfpfufqzpkltpnfbmpf{wqbnbw`kwqb`hhmltmfbqozafdbmpvsfqsbsfqmlqwkofbqmdjufmmbnfgfmgfgWfqnpsbqwpDqlvsaqbmgvpjmdtlnbmebopfqfbgzbvgjlwbhfptkjof-`ln,ojufg`bpfpgbjoz`kjogdqfbwivgdfwklpfvmjwpmfufqaqlbg`lbpw`lufqbssofejofp`z`ofp`fmfsobmp`oj`htqjwfrvffmsjf`ffnbjoeqbnflogfqsklwlojnjw`b`kf`jujop`boffmwfqwkfnfwkfqfwlv`kalvmgqlzbobphfgtklofpjm`fpwl`h#mbnfebjwkkfbqwfnswzleefqp`lsfltmfgnjdkwboavnwkjmhaollgbqqbznbilqwqvpw`bmlmvmjlm`lvmwubojgpwlmfPwzofOldjmkbsszl``vqofew9eqfpkrvjwfejonpdqbgfmffgpvqabmejdkwabpjpklufqbvwl8qlvwf-kwnonj{fgejmboZlvq#pojgfwlsj`aqltmbolmfgqbtmpsojwqfb`kQjdkwgbwfpnbq`krvlwfdllgpOjmhpglvawbpzm`wkvnaboolt`kjfezlvwkmlufo23s{8pfqufvmwjokbmgp@kf`hPsb`frvfqzibnfpfrvbowtj`f3/333Pwbqwsbmfoplmdpqlvmgfjdkwpkjewtlqwkslpwpofbgptffhpbuljgwkfpfnjofpsobmfpnbqwboskbsobmwnbqhpqbwfpsobzp`objnpbofpwf{wppwbqptqlmd?,k0=wkjmd-lqd,nvowjkfbqgSltfqpwbmgwlhfmplojg+wkjpaqjmdpkjsppwbeewqjfg`boopevoozeb`wpbdfmwWkjp#,,..=bgnjmfdzswFufmw26s{8Fnbjowqvf!`qlpppsfmwaoldpal{!=mlwfgofbuf`kjmbpjyfpdvfpw?,k7=qlalwkfbuzwqvf/pfufmdqbmg`qjnfpjdmpbtbqfgbm`fskbpf=?\"..fm\\VP% 0:8133s{\\mbnfobwjmfmilzbib{-bwjlmpnjwkV-P-#klogpsfwfqjmgjbmbu!=`kbjmp`lqf`lnfpgljmdsqjlqPkbqf2::3pqlnbmojpwpibsbmeboopwqjboltmfqbdqff?,k1=bavpfbofqwlsfqb!.,,T`bqgpkjoopwfbnpSklwlwqvwk`ofbm-sks<pbjmwnfwboolvjpnfbmwsqlleaqjfeqlt!=dfmqfwqv`hollhpUbovfEqbnf-mfw,..=\t?wqz#x\tubq#nbhfp`lpwpsobjmbgvowrvfpwwqbjmobalqkfosp`bvpfnbdj`nlwlqwkfjq163s{ofbpwpwfsp@lvmw`lvogdobpppjgfpevmgpklwfobtbqgnlvwknlufpsbqjpdjufpgvw`kwf{bpeqvjwmvoo/\x7F\x7FX^8wls!=\t?\"..SLPW!l`fbm?aq,=eollqpsfbhgfswk#pjyfabmhp`bw`k`kbqw13s{8bojdmgfboptlvog63s{8vqo>!sbqhpnlvpfNlpw#---?,bnlmdaqbjmalgz#mlmf8abpfg`bqqzgqbewqfefqsbdf\\klnf-nfwfqgfobzgqfbnsqlufiljmw?,wq=gqvdp?\"..#bsqjojgfboboofmf{b`welqwk`lgfpoldj`Ujft#pffnpaobmhslqwp#+133pbufg\\ojmhdlbopdqbmwdqffhklnfpqjmdpqbwfg03s{8tklpfsbqpf+*8!#Aol`hojmv{ilmfpsj{fo$*8!=*8je+.ofewgbujgklqpfEl`vpqbjpfal{fpWqb`hfnfmw?,fn=abq!=-pq`>wltfqbow>!`baofkfmqz17s{8pfwvsjwbozpkbqsnjmlqwbpwftbmwpwkjp-qfpfwtkffodjqop,`pp,233&8`ovappwveeajaofulwfp#2333hlqfb~*8\x0E\tabmgprvfvf>#x~8;3s{8`hjmdx\x0E\t\n\nbkfbg`ol`hjqjpkojhf#qbwjlpwbwpElqn!zbkll*X3^8Balvwejmgp?,k2=gfavdwbphpVQO#>`foop~*+*821s{8sqjnfwfoopwvqmp3{533-isd!psbjmafb`kwb{fpnj`qlbmdfo..=?,djewppwfuf.ojmhalgz-~*8\t\nnlvmw#+2::EBR?,qldfqeqbmh@obpp1;s{8effgp?k2=?p`lwwwfpwp11s{8gqjmh*#\x7F\x7F#oftjppkboo 30:8#elq#olufgtbpwf33s{8ib9\x0Fnpjnlm?elmwqfsoznffwpvmwfq`kfbswjdkwAqbmg*#\">#gqfpp`ojspqllnplmhfznlajonbjm-Mbnf#sobwfevmmzwqffp`ln,!2-isdtnlgfsbqbnPWBQWofew#jggfm/#132*8\t~\telqn-ujqvp`kbjqwqbmptlqpwSbdfpjwjlmsbw`k?\"..\tl.`b`ejqnpwlvqp/333#bpjbmj((*xbglaf$*X3^jg>23alwk8nfmv#-1-nj-smd!hfujm`lb`k@kjogaqv`f1-isdVQO*(-isd\x7Fpvjwfpoj`fkbqqz213!#ptffwwq=\x0E\tmbnf>gjfdlsbdf#ptjpp..=\t\t eee8!=Old-`ln!wqfbwpkffw*#%%#27s{8poffsmwfmwejofgib9\x0Fojg>!`Mbnf!tlqpfpklwp.al{.gfowb\t%ow8afbqp97;Y?gbwb.qvqbo?,b=#psfmgabhfqpklsp>#!!8sks!=`wjlm20s{8aqjbmkfoolpjyf>l>&1E#iljmnbzaf?jnd#jnd!=/#eipjnd!#!*X3^NWlsAWzsf!mftozGbmph`yf`kwqbjohmltp?,k6=ebr!=yk.`m23*8\t.2!*8wzsf>aovfpwqvozgbujp-ip$8=\x0E\t?\"pwffo#zlv#k1=\x0E\telqn#ifpvp233&#nfmv-\x0E\t\n\x0E\ttbofpqjphpvnfmwggjmda.ojhwfb`kdje!#ufdbpgbmphffpwjpkrjspvlnjplaqfgfpgffmwqfwlglpsvfgfb/]lpfpw/Mwjfmfkbpwblwqlpsbqwfglmgfmvfulkb`fqelqnbnjpnlnfilqnvmglbrv/Ag/Abpp/_olbzvgbef`kbwlgbpwbmwlnfmlpgbwlplwqbppjwjlnv`klbklqbovdbqnbzlqfpwlpklqbpwfmfqbmwfpelwlpfpwbpsb/Apmvfubpbovgelqlpnfgjlrvjfmnfpfpslgfq`kjofpfq/Muf`fpgf`jqilp/Efpwbqufmwbdqvslkf`klfoolpwfmdlbnjdl`lpbpmjufodfmwfnjpnbbjqfpivojlwfnbpkb`jbebulqivmjlojaqfsvmwlavfmlbvwlqbaqjoavfmbwf{wlnbqylpbafqojpwbovfdl`/_nlfmfqlivfdlsfq/Vkbafqfpwlzmvm`bnvifqubolqevfqbojaqldvpwbjdvboulwlp`bplpdv/Absvfglplnlpbujplvpwfggfafmml`kfavp`bebowbfvqlppfqjfgj`kl`vqpl`obuf`bpbpof/_msobylobqdllaqbpujpwbbslzlivmwlwqbwbujpwl`qfbq`bnslkfnlp`jm`l`bqdlsjplplqgfmkb`fm/Mqfbgjp`lsfgql`fq`bsvfgbsbsfonfmlq/Vwjo`obqlilqdf`boofslmfqwbqgfmbgjfnbq`bpjdvffoobppjdol`l`kfnlwlpnbgqf`obpfqfpwlmj/]lrvfgbsbpbqabm`lkjilpujbifsbaol/Epwfujfmfqfjmlgfibqelmgl`bmbomlqwfofwqb`bvpbwlnbqnbmlpovmfpbvwlpujoobufmglsfpbqwjslpwfmdbnbq`loofubsbgqfvmjglubnlpylmbpbnalpabmgbnbqjbbavplnv`kbpvajqqjlibujujqdqbgl`kj`bboo/Ailufmgj`kbfpwbmwbofppbojqpvfolsfplpejmfpoobnbavp`l/Epwboofdbmfdqlsobybkvnlqsbdbqivmwbglaofjpobpalopbab/]lkbaobov`kb/mqfbgj`fmivdbqmlwbpuboofboo/M`bqdbglolqbabilfpw/Edvpwlnfmwfnbqjlejqnb`lpwlej`kbsobwbkldbqbqwfpofzfpbrvfonvpflabpfpsl`lpnjwbg`jfol`kj`lnjfgldbmbqpbmwlfwbsbgfafpsobzbqfgfppjfwf`lqwf`lqfbgvgbpgfpflujfilgfpfbbdvbp%rvlw8glnbjm`lnnlmpwbwvpfufmwpnbpwfqpzpwfnb`wjlmabmmfqqfnlufp`qloovsgbwfdolabonfgjvnejowfqmvnafq`kbmdfqfpvowsvaoj`p`qffm`kllpfmlqnbowqbufojppvfpplvq`fwbqdfwpsqjmdnlgvofnlajofptjw`ksklwlpalqgfqqfdjlmjwpfoepl`jbob`wjuf`lovnmqf`lqgelooltwjwof=fjwkfqofmdwkebnjozeqjfmgobzlvwbvwklq`qfbwfqfujftpvnnfqpfqufqsobzfgsobzfqf{sbmgsloj`zelqnbwglvaofsljmwppfqjfpsfqplmojujmdgfpjdmnlmwkpelq`fpvmjrvftfjdkwsflsoffmfqdzmbwvqfpfbq`kejdvqfkbujmd`vpwlnleepfwofwwfqtjmgltpvanjwqfmgfqdqlvspvsolbgkfbowknfwklgujgflpp`klloevwvqfpkbgltgfabwfubovfpLaif`wlwkfqpqjdkwpofbdvf`kqlnfpjnsofmlwj`fpkbqfgfmgjmdpfbplmqfslqwlmojmfprvbqfavwwlmjnbdfpfmbaofnlujmdobwfpwtjmwfqEqbm`fsfqjlgpwqlmdqfsfbwOlmglmgfwbjoelqnfggfnbmgpf`vqfsbppfgwlddofsob`fpgfuj`fpwbwj``jwjfppwqfbnzfooltbwwb`hpwqffweojdkwkjggfmjmel!=lsfmfgvpfevouboofz`bvpfpofbgfqpf`qfwpf`lmggbnbdfpslqwpf{`fswqbwjmdpjdmfgwkjmdpfeef`wejfogppwbwfpleej`fujpvbofgjwlqulovnfQfslqwnvpfvnnlujfpsbqfmwb``fppnlpwoznlwkfq!#jg>!nbqhfwdqlvmg`kbm`fpvqufzafelqfpznalonlnfmwpsff`knlwjlmjmpjgfnbwwfq@fmwfqlaif`wf{jpwpnjggofFvqlsfdqltwkofdb`znbmmfqfmlvdk`bqffqbmptfqlqjdjmslqwbo`ojfmwpfof`wqbmgln`olpfgwlsj`p`lnjmdebwkfqlswjlmpjnsozqbjpfgfp`bsf`klpfm`kvq`kgfejmfqfbplm`lqmfqlvwsvwnfnlqzjeqbnfsloj`fnlgfopMvnafqgvqjmdleefqppwzofphjoofgojpwfg`boofgpjoufqnbqdjmgfofwfafwwfqaqltpfojnjwpDolabopjmdoftjgdfw`fmwfqavgdfwmltqbs`qfgjw`objnpfmdjmfpbefwz`klj`fpsjqjw.pwzofpsqfbgnbhjmdmffgfgqvppjbsofbpff{wfmwP`qjswaqlhfmbooltp`kbqdfgjujgfeb`wlqnfnafq.abpfgwkflqz`lmejdbqlvmgtlqhfgkfosfg@kvq`kjnsb`wpklvogbotbzpoldl!#alwwlnojpw!=*xubq#sqfej{lqbmdfKfbgfq-svpk+`lvsofdbqgfmaqjgdfobvm`kQfujftwbhjmdujpjlmojwwofgbwjmdAvwwlmafbvwzwkfnfpelqdlwPfbq`kbm`klqbonlpwolbgfg@kbmdfqfwvqmpwqjmdqfolbgNlajofjm`lnfpvssozPlvq`flqgfqpujftfg%maps8`lvqpfBalvw#jpobmg?kwno#`llhjfmbnf>!bnbylmnlgfqmbguj`fjm?,b=9#Wkf#gjboldklvpfpAFDJM#Nf{j`lpwbqwp`fmwqfkfjdkwbggjmdJpobmgbppfwpFnsjqfP`kllofeelqwgjqf`wmfbqoznbmvboPfof`w-\t\tLmfiljmfgnfmv!=SkjojsbtbqgpkbmgofjnslqwLeej`fqfdbqgphjoopmbwjlmPslqwpgfdqfftffhoz#+f-d-afkjmggl`wlqolddfgvmjwfg?,a=?,afdjmpsobmwpbppjpwbqwjpwjppvfg033s{\x7F`bmbgbbdfm`zp`kfnfqfnbjmAqbyjopbnsofoldl!=afzlmg.p`bofb``fswpfqufgnbqjmfEllwfq`bnfqb?,k2=\t\\elqn!ofbufppwqfpp!#,=\x0E\t-dje!#lmolbgolbgfqL{elqgpjpwfqpvqujuojpwfmefnbofGfpjdmpjyf>!bssfbowf{w!=ofufopwkbmhpkjdkfqelq`fgbmjnbobmzlmfBeqj`bbdqffgqf`fmwSflsof?aq#,=tlmgfqsqj`fpwvqmfg\x7F\x7F#x~8nbjm!=jmojmfpvmgbztqbs!=ebjofg`fmpvpnjmvwfafb`lmrvlwfp263s{\x7Ffpwbwfqfnlwffnbjo!ojmhfgqjdkw8pjdmboelqnbo2-kwnopjdmvssqjm`feolbw9-smd!#elqvn-B``fppsbsfqpplvmgpf{wfmgKfjdkwpojgfqVWE.;!%bns8#Afelqf-#TjwkpwvgjlltmfqpnbmbdfsqlejwiRvfqzbmmvbosbqbnpalvdkwebnlvpdlldofolmdfqj((*#xjpqbfopbzjmdgf`jgfklnf!=kfbgfqfmpvqfaqbm`ksjf`fpaol`h8pwbwfgwls!=?qb`jmdqfpjyf..%dw8sb`jwzpf{vboavqfbv-isd!#23/333lawbjmwjwofpbnlvmw/#Jm`-`lnfgznfmv!#ozqj`pwlgbz-jmgffg`lvmwz\\oldl-EbnjozollhfgNbqhfwopf#jeSobzfqwvqhfz*8ubq#elqfpwdjujmdfqqlqpGlnbjm~fopfxjmpfqwAold?,ellwfqoldjm-ebpwfqbdfmwp?algz#23s{#3sqbdnbeqjgbzivmjlqgloobqsob`fg`lufqpsovdjm6/333#sbdf!=alpwlm-wfpw+bubwbqwfpwfg\\`lvmwelqvnpp`kfnbjmgf{/ejoofgpkbqfpqfbgfqbofqw+bssfbqPvanjwojmf!=algz!=\t)#WkfWklvdkpffjmdifqpfzMftp?,ufqjezf{sfqwjmivqztjgwk>@llhjfPWBQW#b`qlpp\\jnbdfwkqfbgmbwjufsl`hfwal{!=\tPzpwfn#Gbujg`bm`fqwbaofpsqlufgBsqjo#qfboozgqjufqjwfn!=nlqf!=albqgp`lolqp`bnsvpejqpw#\x7F\x7F#X^8nfgjb-dvjwbqejmjpktjgwk9pkltfgLwkfq#-sks!#bppvnfobzfqptjoplmpwlqfpqfojfeptfgfm@vpwlnfbpjoz#zlvq#Pwqjmd\t\tTkjowbzolq`ofbq9qfplqweqfm`kwklvdk!*#(#!?algz=avzjmdaqbmgpNfnafqmbnf!=lssjmdpf`wlq6s{8!=upsb`fslpwfqnbilq#`leeffnbqwjmnbwvqfkbssfm?,mbu=hbmpbpojmh!=Jnbdfp>ebopftkjof#kpsb`f3%bns8#\t\tJm##sltfqSlophj.`lolqilqgbmAlwwlnPwbqw#.`lvmw1-kwnomftp!=32-isdLmojmf.qjdkwnjoofqpfmjlqJPAM#33/333#dvjgfpubovf*f`wjlmqfsbjq-{no!##qjdkwp-kwno.aol`hqfdF{s9klufqtjwkjmujqdjmsklmfp?,wq=\x0Evpjmd#\t\nubq#=$*8\t\n?,wg=\t?,wq=\tabkbpbaqbpjodbofdlnbdzbqslophjpqsphj4]4C5d\bTA\nzk\x0BBl\bQ\x7F\x0BUm\x05Gx\bSM\nmC\bTA\twQ\nd}\bW@\bTl\bTF\ti@\tcT\x0BBM\x0B|j\x04BV\tqw\tcC\bWI\npa\tfM\n{Z\x05{X\bTF\bVV\bVK\t\x7Fm\x04kF\t[]\bPm\bTv\nsI\x0Bpg\t[I\bQp\x04mx\x0B_W\n^M\npe\x0BQ}\x0BGu\nel\npe\x04Ch\x04BV\bTA\tSo\nzk\x0BGL\x0BxD\nd[\x05Jz\x05MY\bQp\x04li\nfl\npC\x05{B\x05Nt\x0BwT\ti_\bTg\x04QQ\n|p\x0BXN\bQS\x0BxD\x04QC\bWZ\tpD\x0BVS\bTW\x05Nt\x04Yh\nzu\x04Kj\x05N}\twr\tHa\n_D\tj`\x0BQ}\x0BWp\nxZ\x04{c\tji\tBU\nbD\x04a|\tTn\tpV\nZd\nmC\x0BEV\x05{X\tc}\tTo\bWl\bUd\tIQ\tcg\x0Bxs\nXW\twR\x0Bek\tc}\t]y\tJn\nrp\neg\npV\nz\\\x05{W\npl\nz\\\nzU\tPc\t`{\bV@\nc|\bRw\ti_\bVb\nwX\tHv\x04Su\bTF\x0B_W\x0BWs\x0BsI\x05m\x7F\nTT\ndc\tUS\t}f\tiZ\bWz\tc}\x04MD\tBe\tiD\x0B@@\bTl\bPv\t}t\x04Sw\x04M`\x0BnU\tkW\x0Bed\nqo\x0BxY\tA|\bTz\x0By`\x04BR\x04BM\tia\x04XU\nyu\x04n^\tfL\tiI\nXW\tfD\bWz\bW@\tyj\t\x7Fm\tav\tBN\x0Bb\\\tpD\bTf\nY[\tJn\bQy\t[^\x0BWc\x0Byu\x04Dl\x04CJ\x0BWj\x0BHR\t`V\x0BuW\tQy\np@\x0BGu\x05pl\x04Jm\bW[\nLP\nxC\n`m\twQ\x05ui\x05\x7FR\nbI\twQ\tBZ\tWV\x04BR\npg\tcg\x05ti\x04CW\n_y\tRg\bQa\x0BQB\x0BWc\nYb\x05le\ngE\x04Su\nL[\tQ\x7F\tea\tdj\x0B]W\nb~\x04M`\twL\bTV\bVH\nt\x7F\npl\t|b\x05s_\bU|\bTa\x04oQ\x05lv\x04Sk\x04M`\bTv\x0BK}\nfl\tcC\x04oQ\x04BR\tHk\t|d\bQp\tHK\tBZ\x0BHR\bPv\x0BLx\x0BEZ\bT\x7F\bTv\tiD\x05oD\x05MU\x0BwB\x04Su\x05k`\x04St\ntC\tPl\tKg\noi\tjY\x0BxY\x04h}\nzk\bWZ\t\x7Fm\x0Be`\tTB\tfE\nzk\t`z\x04Yh\nV|\tHK\tAJ\tAJ\bUL\tp\\\tql\nYc\x04Kd\nfy\x04Yh\t[I\x0BDg\x04Jm\n]n\nlb\bUd\n{Z\tlu\tfs\x04oQ\bTW\x04Jm\x0BwB\tea\x04Yh\x04BC\tsb\tTn\nzU\n_y\x0BxY\tQ]\ngw\x04mt\tO\\\ntb\bWW\bQy\tmI\tV[\ny\\\naB\x0BRb\twQ\n]Q\x04QJ\bWg\x0BWa\bQj\ntC\bVH\nYm\x0Bxs\bVK\nel\bWI\x0BxY\x04Cq\ntR\x0BHV\bTl\bVw\tay\bQa\bVV\t}t\tdj\nr|\tp\\\twR\n{i\nTT\t[I\ti[\tAJ\x0Bxs\x0B_W\td{\x0BQ}\tcg\tTz\tA|\tCj\x0BLm\x05N}\x05m\x7F\nbK\tdZ\tp\\\t`V\tsV\np@\tiD\twQ\x0BQ}\bTf\x05ka\x04Jm\x0B@@\bV`\tzp\n@N\x04Sw\tiI\tcg\noi\x04Su\bVw\x04lo\x04Cy\tc}\x0Bb\\\tsU\x04BA\bWI\bTf\nxS\tVp\nd|\bTV\x0BbC\tNo\x05Ju\nTC\t|`\n{Z\tD]\bU|\tc}\x05lm\bTl\tBv\tPl\tc}\bQp\t\x7Fm\nLk\tkj\n@N\x04Sb\x04KO\tj_\tp\\\nzU\bTl\bTg\bWI\tcf\x04XO\bWW\ndz\x04li\tBN\nd[\bWO\x04MD\x0BKC\tdj\tI_\bVV\ny\\\x0BLm\x05xl\txB\tkV\x0Bb\\\x0BJW\x0BVS\tVx\x0BxD\td{\x04MD\bTa\t|`\x0BPz\x04R}\x0BWs\x04BM\nsI\x04CN\bTa\x04Jm\npe\ti_\npV\nrh\tRd\tHv\n~A\nxR\x0BWh\x0BWk\nxS\x0BAz\x0BwX\nbI\x04oQ\tfw\nqI\nV|\nun\x05z\x7F\x0Bpg\td\\\x0BoA\x05{D\ti_\x05xB\bT\x7F\t`V\x05qr\tTT\x04g]\x04CA\x0BuR\tVJ\tT`\npw\x0BRb\tI_\nCx\x04Ro\x0BsI\x04Cj\x04Kh\tBv\tWV\x04BB\x05oD\x05{D\nhc\x04Km\x0B^R\tQE\n{I\np@\nc|\x05Gt\tc}\x04Dl\nzU\x05qN\tsV\x05k}\tHh\x0B|j\nqo\x05u|\tQ]\x0Bek\x05\x7FZ\x04M`\x04St\npe\tdj\bVG\x0BeE\t\x7Fm\x0BWc\x04|I\n[W\tfL\bT\x7F\tBZ\x04Su\x0BKa\x04Cq\x05Nt\x04Y[\nqI\bTv\tfM\ti@\t}f\x04B\\\tQy\x0BBl\bWg\x04XD\x05kc\x0Bx[\bVV\tQ]\t\x7Fa\tPy\x0BxD\nfI\t}f\x05oD\tdj\tSG\x05ls\t~D\x04CN\n{Z\t\\v\n_D\nhc\x0Bx_\x04C[\tAJ\nLM\tVx\x04CI\tbj\tc^\tcF\ntC\x04Sx\twr\x04XA\bU\\\t|a\x0BK\\\bTV\bVj\nd|\tfs\x04CX\ntb\bRw\tVx\tAE\tA|\bT\x7F\x05Nt\x0BDg\tVc\bTl\x04d@\npo\t\x7FM\tcF\npe\tiZ\tBo\bSq\nfH\x04l`\bTx\bWf\tHE\x0BF{\tcO\tfD\nlm\x0BfZ\nlm\x0BeU\tdG\x04BH\bTV\tSi\x05MW\nwX\nz\\\t\\c\x04CX\nd}\tl}\bQp\bTV\tF~\bQ\x7F\t`i\ng@\x05nO\bUd\bTl\nL[\twQ\tji\ntC\t|J\nLU\naB\x0BxY\x04Kj\tAJ\x05uN\ti[\npe\x04Sk\x0BDg\x0Bx]\bVb\bVV\nea\tkV\nqI\bTa\x04Sk\nAO\tpD\ntb\nts\nyi\bVg\ti_\x0B_W\nLk\x05Nt\tyj\tfM\x04R\x7F\tiI\bTl\x0BwX\tsV\x0BMl\nyu\tAJ\bVj\x04KO\tWV\x0BA}\x0BW\x7F\nrp\tiD\x0B|o\x05lv\x0BsI\x04BM\td~\tCU\bVb\x04eV\npC\x0BwT\tj`\tc}\x0Bxs\x0Bps\x0Bvh\tWV\x0BGg\x0BAe\x0BVK\x0B]W\trg\x0BWc\x05F`\tBr\x0Bb\\\tdZ\bQp\nqI\x04kF\nLk\x0BAR\bWI\bTg\tbs\tdw\n{L\n_y\tiZ\bTA\tlg\bVV\bTl\tdk\n`k\ta{\ti_\x05{A\x05wj\twN\x0B@@\bTe\ti_\n_D\twL\nAH\x0BiK\x0Bek\n[]\tp_\tyj\bTv\tUS\t[r\n{I\nps\x05Gt\x0BVK\npl\x04S}\x0BWP\t|d\x04MD\x0BHV\bT\x7F\x04R}\x04M`\bTV\bVH\x05lv\x04Ch\bW[\x04Ke\tR{\x0B^R\tab\tBZ\tVA\tB`\nd|\nhs\x04Ke\tBe\x04Oi\tR{\td\\\x05nB\bWZ\tdZ\tVJ\x05Os\t\x7Fm\x04uQ\x0BhZ\x04Q@\x04QQ\nfI\bW[\x04B\\\x04li\nzU\nMd\x04M`\nxS\bVV\n\\}\x0BxD\t\x7Fm\bTp\x04IS\nc|\tkV\x05i~\tV{\x0BhZ\t|b\bWt\n@R\x0BoA\x0BnU\bWI\tea\tB`\tiD\tc}\tTz\x04BR\x0BQB\x05Nj\tCP\t[I\bTv\t`W\x05uN\x0Bpg\x0Bpg\x0BWc\tiT\tbs\twL\tU_\tc\\\t|h\x0BKa\tNr\tfL\nq|\nzu\nz\\\tNr\bUg\t|b\x04m`\bTv\nyd\nrp\bWf\tUX\x04BV\nzk\nd}\twQ\t}f\x04Ce\x0Bed\bTW\bSB\nxU\tcn\bTb\ne\x7F\ta\\\tSG\bU|\npV\nN\\\x04Kn\x0BnU\tAt\tpD\x0B^R\x0BIr\x04b[\tR{\tdE\x0BxD\x0BWK\x0BWA\bQL\bW@\x04Su\bUd\nDM\tPc\x04CA\x04Dl\x04oQ\tHs\x05wi\x04ub\n\x7Fa\bQp\x05Ob\nLP\bTl\x04Y[\x0BK}\tAJ\bQ\x7F\x04n^\x0BsA\bSM\nqM\bWZ\n^W\x0Bz{\x04S|\tfD\bVK\bTv\bPv\x04BB\tCP\x04dF\tid\x0Bxs\x04mx\x0Bws\tcC\ntC\tyc\x05M`\x0BW\x7F\nrh\bQp\x0BxD\x04\\o\nsI\x04_k\nzu\x04kF\tfD\x04Xs\x04XO\tjp\bTv\x04BS\x05{B\tBr\nzQ\nbI\tc{\x04BD\x04BV\x05nO\bTF\tca\x05Jd\tfL\tPV\tI_\nlK\x04`o\twX\npa\tgu\bP}\x05{^\bWf\n{I\tBN\npa\x04Kl\x0Bpg\tcn\tfL\x0Bvh\x04Cq\bTl\x0BnU\bSq\x04Cm\twR\bUJ\npe\nyd\nYg\x04Cy\x0BKW\tfD\nea\x04oQ\tj_\tBv\x04nM\x0BID\bTa\nzA\x05pl\n]n\bTa\tR{\tfr\n_y\bUg\x05{X\x05kk\x0BxD\x04|I\x05xl\nfy\x04Ce\x0BwB\nLk\x0Bd]\noi\n}h\tQ]\npe\bVw\x04Hk\x04OQ\nzk\tAJ\npV\bPv\ny\\\tA{\x04Oi\bSB\x04XA\x0BeE\tjp\nq}\tiD\x05qN\x0B^R\t\x7Fm\tiZ\tBr\bVg\noi\n\\X\tU_\nc|\x0BHV\bTf\tTn\x04\\N\x04\\N\nuB\x05lv\nyu\tTd\bTf\bPL\x0B]W\tdG\nA`\nw^\ngI\npe\tdw\nz\\\x05ia\bWZ\tcF\x04Jm\n{Z\bWO\x04_k\x04Df\x04RR\td\\\bVV\x0Bxs\x04BN\x05ti\x04lm\tTd\t]y\x0BHV\tSo\x0B|j\x04XX\tA|\x0BZ^\x0BGu\bTW\x05M`\x04kF\x0BhZ\x0BVK\tdG\x0BBl\tay\nxU\x05qE\x05nO\bVw\nqI\x04CX\ne\x7F\tPl\bWO\x0BLm\tdL\x05uH\x04Cm\tdT\x04fn\x0BwB\x05ka\x0BnU\n@M\nyT\tHv\t\\}\x04Kh\td~\x04Yh\x05k}\neR\td\\\bWI\t|b\tHK\tiD\bTW\x05MY\npl\bQ_\twr\x0BAx\tHE\bTg\bSq\x05vp\x0Bb\\\bWO\nOl\nsI\nfy\x0BID\t\\c\n{Z\n^~\npe\nAO\tTT\x0Bxv\x04k_\bWO\x0B|j\x0BwB\tQy\ti@\tPl\tHa\tdZ\x05k}\x04ra\tUT\x0BJc\x0Bed\np@\tQN\nd|\tkj\tHk\x04M`\noi\twr\td\\\nlq\no_\nlb\nL[\tac\x04BB\x04BH\x04Cm\npl\tIQ\bVK\x0Bxs\n`e\x0BiK\npa\x04Oi\tUS\bTp\tfD\nPG\x05kk\x04XA\nz\\\neg\x0BWh\twR\x05qN\nqS\tcn\x04lo\nxS\n^W\tBU\nt\x7F\tHE\tp\\\tfF\tfw\bVV\bW@\tak\x0BVK\x05ls\tVJ\bVV\x0BeE\x04\\o\nyX\nYm\x04M`\x05lL\nd|\nzk\tA{\x05sE\twQ\x04XT\nt\x7F\tPl\t]y\x0BwT\x05{p\x04MD\x0Bb\\\tQ]\x04Kj\tJn\nAH\x0BRb\tBU\tHK\t\\c\nfI\x05m\x7F\nqM\n@R\tSo\noi\x04BT\tHv\n_y\x04Kh\tBZ\t]i\bUJ\tV{\x04Sr\nbI\x0BGg\ta_\bTR\nfI\nfl\t[K\tII\x04S|\x0BuW\tiI\bWI\nqI\x0B|j\x04BV\bVg\bWZ\x04kF\x0Bx]\bTA\tab\tfr\ti@\tJd\tJd\x0Bps\nAO\bTa\x05xu\tiD\nzk\t|d\t|`\bW[\tlP\tdG\bVV\x0Bw}\x0BqO\ti[\bQ\x7F\bTz\x0BVF\twN\x05ts\tdw\bTv\neS\ngi\tNr\x05yS\npe\bVV\bSq\n`m\tyj\tBZ\x0BWX\bSB\tc\\\nUR\t[J\tc_\x04nM\bWQ\x0BAx\nMd\tBr\x05ui\x0BxY\bSM\x0BWc\x0B|j\x0Bxs\t}Q\tBO\bPL\bWW\tfM\nAO\tPc\x0BeU\x04e^\bTg\nqI\tac\bPv\tcF\x04oQ\tQ\x7F\x0BhZ\x05ka\nz\\\tiK\tBU\n`k\tCP\x04S|\x04M`\n{I\tS{\x04_O\tBZ\x04Zi\x04Sk\tps\tp\\\nYu\n]s\nxC\bWt\nbD\tkV\x0BGu\x05yS\nqA\t[r\neK\x04M`\tdZ\x05lL\bUg\bTl\nbD\tUS\x0Bb\\\tpV\ncc\x04S\\\tct\t`z\bPL\x0BWs\nA`\neg\bSq\x05uE\x04CR\x0BDg\t`W\x0Bz{\x0BWc\x04Sk\x04Sk\tbW\bUg\tea\nxZ\tiI\tUX\tVJ\nqn\tS{\x0BRb\bTQ\npl\x05Gt\x0BuW\x05uj\npF\nqI\tfL\t[I\tia\x04XO\nyu\x0BDg\x0Bed\tq{\x04VG\bQ\x7F\x05ka\tVj\tkV\txB\nd|\np@\tQN\tPc\tps\x04]j\tkV\toU\bTp\nzU\x05nB\x0BB]\ta{\bV@\n]n\x04m`\tcz\tR{\x04m`\bQa\x0BwT\bSM\x05MY\x05qN\tdj\x05~s\x0BQ}\x05MY\x0BMB\tBv\twR\bRg\x0BQ}\tql\x0BKC\nrm\x05xu\x04CC\x0BwB\x0Bvh\tBq\x04Xq\npV\ti_\x05Ob\x05uE\nbd\nqo\x0B{i\nC~\tBL\x0BeE\x05uH\bVj\x04Ey\x04Gz\x0BzR\x0B{i\tcf\n{Z\n]n\x04XA\x0BGu\x0BnU\thS\x0BGI\nCc\tHE\bTA\tHB\x04BH\x04Cj\nCc\bTF\tHE\nXI\tA{\bQ\x7F\tc\\\x0BmO\x0BWX\nfH\np@\x05MY\bTF\nlK\tBt\nzU\tTT\x04Km\x0BwT\npV\ndt\x0ByI\tVx\tQ\x7F\tRg\tTd\nzU\bRS\nLM\twA\x04nM\tTn\ndS\t]g\nLc\x0BwB\t}t\t[I\tCP\x04kX\x0BFm\x0BhZ\x05m\x7F\ti[\np@\x0BQ}\x0BW\x7F\t|d\nMO\nMd\tf_\tfD\tcJ\tHz\x0BRb\tio\tPy\x04Y[\nxU\tct\x0B@@\tww\bPv\x04BM\x04FF\ntb\x05v|\x0BKm\tBq\tBq\x04Kh\x04`o\nZd\x04XU\ti]\t|`\tSt\x04B\\\bQ\x7F\x0B_W\tTJ\nqI\t|a\tA{\x0BuP\x04MD\tPl\nxR\tfL\x0Bws\tc{\td\\\bV`\neg\tHK\x05kc\nd|\bVV\ny\\\x05kc\ti]\bVG\t`V\tss\tI_\tAE\tbs\tdu\nel\tpD\x0BW\x7F\nqs\x05lv\bSM\x04Zi\x0BVK\x05ia\x0BQB\tQ\x7F\n{Z\bPt\x0BKl\nlK\nhs\ndS\bVK\x05mf\nd^\tkV\tcO\nc|\bVH\t\\]\bTv\bSq\tmI\x0BDg\tVJ\tcn\ny\\\bVg\bTv\nyX\bTF\t]]\bTp\noi\nhs\x0BeU\nBf\tdj\x05Mr\n|p\t\\g\t]r\bVb\x05{D\nd[\x04XN\tfM\tO\\\x05s_\tcf\tiZ\x04XN\x0BWc\tqv\n`m\tU^\x05oD\nd|\x0BGg\tdE\x0Bwf\x04lo\x04u}\nd|\x05oQ\t`i\x04Oi\x0BxD\ndZ\nCx\x04Yw\nzk\ntb\ngw\tyj\tB`\nyX\x0Bps\ntC\x0BpP\x0Bqw\bPu\bPX\tDm\npw\x05Nj\tss\taG\x0Bxs\bPt\noL\x04Gz\tOk\ti@\ti]\x04eC\tIQ\tii\tdj\x0B@J\t|d\x05uh\bWZ\x0BeU\x0BnU\bTa\tcC\x04g]\nzk\x04Yh\bVK\nLU\np@\ntb\ntR\tCj\x0BNP\ti@\bP{\n\\}\n{c\nwX\tfL\bVG\tc{\t|`\tAJ\t|C\tfD\x05ln\t|d\tbs\nqI\x05{B\x0BAx\np@\nzk\x0BRb\x05Os\x0BWS\x04e^\x0BD_\tBv\x0BWd\bVb\x0Bxs\x0BeE\bRw\n]n\n|p\x0Bg|\tfw\x05kc\bTI\x05ka\n\\T\x04Sp\tju\x0Bps\npe\x05u|\x0BGr\bVe\tCU\x04]M\x04XU\x0BxD\bTa\tIQ\x0BWq\tCU\tam\tdj\bSo\x04Sw\x0BnU\x04Ch\tQ]\x05s_\bPt\tfS\bTa\t\\}\n@O\x04Yc\tUZ\bTx\npe\x0BnU\nzU\t|}\tiD\nz\\\bSM\x0BxD\x04BR\nzQ\tQN\x04]M\x04Yh\nLP\x0BFm\x0BLX\x05vc\x0Bql\x05ka\tHK\bVb\ntC\nCy\bTv\nuV\x04oQ\t`z\t[I\tB`\x0BRb\tyj\tsb\x0BWs\bTl\tkV\x0Bed\ne\x7F\x05lL\x0BxN\t\x7Fm\nJn\tjY\x0BxD\bVb\bSq\x0Byu\twL\x0BXL\bTA\tpg\tAt\tnD\x04XX\twR\npl\nhw\x05yS\nps\tcO\bW[\x0B|j\x04XN\tsV\tp\\\tBe\nb~\nAJ\n]e\x05k`\x05qN\tdw\tWV\tHE\x0BEV\x05Jz\tid\tB`\tzh\x05E]\tfD\bTg\x05qN\bTa\tja\x04Cv\bSM\nhc\bUe\x05t_\tie\x04g]\twQ\nPn\bVB\tjw\bVg\x0BbE\tBZ\x0BRH\bP{\tjp\n\\}\ta_\tcC\t|a\x0BD]\tBZ\ti[\tfD\x0BxW\no_\td\\\n_D\ntb\t\\c\tAJ\nlK\x04oQ\x04lo\x0BLx\x0BM@\bWZ\x04Kn\x0Bpg\nTi\nIv\n|r\x0B@}\x05Jz\x05Lm\x05Wh\x05k}\x05ln\x0BxD\n]s\x04gc\x0Bps\tBr\bTW\x0BBM\x05tZ\nBY\x04DW\tjf\x0BSW\x04C}\nqo\tdE\tmv\tIQ\bPP\bUb\x05lv\x04BC\nzQ\t[I\x0Bgl\nig\bUs\x04BT\x0BbC\bSq\tsU\tiW\nJn\tSY\tHK\trg\npV\x0BID\x0B|j\x04KO\t`S\t|a`vbmglfmujbqnbgqjgavp`bqjmj`jlwjfnslslqrvf`vfmwbfpwbglsvfgfmivfdlp`lmwqbfpw/Mmmlnaqfwjfmfmsfqejonbmfqbbnjdlp`jvgbg`fmwqlbvmrvfsvfgfpgfmwqlsqjnfqsqf`jlpfd/Vmavfmlpuloufqsvmwlppfnbmbkba/Abbdlpwlmvfulpvmjglp`bqolpfrvjslmj/]lpnv`klpbodvmb`lqqfljnbdfmsbqwjqbqqjabnbq/Abklnaqffnsoflufqgbg`bnajlnv`kbpevfqlmsbpbglo/Amfbsbqf`fmvfubp`vqplpfpwbabrvjfqlojaqlp`vbmwlb``fplnjdvfoubqjlp`vbwqlwjfmfpdqvslppfq/Mmfvqlsbnfgjlpeqfmwfb`fq`bgfn/Mplefqwb`l`kfpnlgfoljwbojbofwqbpbod/Vm`lnsqb`vbofpf{jpwf`vfqslpjfmglsqfmpboofdbqujbifpgjmfqlnvq`jbslgq/Msvfpwlgjbqjlsvfaolrvjfqfnbmvfosqlsjl`qjpjp`jfqwlpfdvqlnvfqwfevfmwf`fqqbqdqbmgffef`wlsbqwfpnfgjgbsqlsjbleqf`fwjfqqbf.nbjoubqjbpelqnbpevwvqllaifwlpfdvjqqjfpdlmlqnbpnjpnlp/Vmj`l`bnjmlpjwjlpqby/_mgfajglsqvfabwlofglwfm/Abifp/Vpfpsfql`l`jmblqjdfmwjfmgb`jfmwl`/Mgjykbaobqpfq/Abobwjmbevfqybfpwjoldvfqqbfmwqbq/E{jwlo/_sfybdfmgbu/Agflfujwbqsbdjmbnfwqlpibujfqsbgqfpe/M`jo`bafyb/Mqfbppbojgbfmu/Alibs/_mbavplpajfmfpwf{wlpoofubqsvfgbmevfqwf`ln/Vm`obpfpkvnbmlwfmjglajoablvmjgbgfpw/Mpfgjwbq`qfbgl<X<W=c=k=n<R<V<\\<V<T<W<T=a=n<R<^=m<Y<Y<_<R<S=l<T=n<\\<V<Y=e<Y=o<Z<Y<v<\\<V<]<Y<[<]=g<W<R<Q<T<~=m<Y<S<R<X<A=n<R=n<R<P=k<Y<P<Q<Y=n<W<Y=n=l<\\<[<R<Q<\\<_<X<Y<P<Q<Y<x<W=c<s=l<T<Q<\\=m<Q<T=i=n<Y<P<V=n<R<_<R<X<^<R=n=n<\\<P<M<D<|<P<\\=c<K=n<R<^<\\=m<^<\\<P<Y<P=o<N<\\<V<X<^<\\<Q<\\<P=a=n<T=a=n=o<~<\\<P=n<Y=i<S=l<R=n=o=n<Q<\\<X<X<Q=c<~<R=n=n=l<T<Q<Y<U<~<\\=m<Q<T<P=m<\\<P=n<R=n=l=o<]<r<Q<T<P<T=l<Q<Y<Y<r<r<r<W<T=j=a=n<\\<r<Q<\\<Q<Y<P<X<R<P<P<R<U<X<^<Y<R<Q<R=m=o<X\fHy\fIk\fHU\fId\fHy\fIl\fHT\fIk\fHy\fHR\fHy\fIg\fHx\fH\\\fHF\fH\\\fHD\fIk\fHc\fHy\fHy\fHS\fHA\fIl\fHk\fHT\fHy\fH\\\fHH\fIg\fHU\fIg\fHj\fHF\fHU\fIl\fHC\fHU\fHC\fHR\fHH\fHy\fHI\fHRibdqbm\fHj\fHp\fHp\fIg\fHi\fH@\fHJ\fIg\fH{\fHd\fHp\fHR\fH{\fHc\fHU\fHB\fHk\fHD\fHY\fHU\fHC\fIk\fHI\fIk\fHI\fIl\fHt\fH\\\fHp\fH@\fHJ\fIl\fHy\fHd\fHp\fIl\fHY\fIk\fHD\fHd\fHD\fHc\fHU\fH\\\fHe\fHT\fHB\fIk\fHy\fHB\fHY\fIg\fH^\fIk\fHT\fH@\fHB\fHd\fHJ\fIk\fH\x7F\fH\\\fHj\fHB\fH@\fHT\fHA\fH\\\fH@\fHD\fHv\fH^\fHB\fHD\fHj\fH{\fHT\fIl\fH^\fIl4U5h5e4I5h5e5k4\\4K4N4B4]4U4C4C4K5h5e5k4\\5k4Y5d4]4V5f4]5o4K5j5d5h4K4D5f5j4U4]4Z4\\5h5o5k5j4K5f5d5i5n4K5h4U5h5f4K5j4K5h5o5j4A4F5e5n4D5h5d4A4E4K4B4]5m5n4[4U4D4C4]5o5j4I4\\4K5o5i4K4K4A4C4I5h4K5m5f5k4D4U4Z5o5f5m4D4A4G5d5i5j5d5k5d4O5j4K4@4C4K5h5k4K4_5h5i4U5j4C5h5f4_4U4D4]4Y5h5e5i5j4\\4D5k4K4O5j5k5i4G5h5o5j4F4K5h4K4A5f4G5i4Y4]4X4]4A4A5d5h5d5m5f4K4\\4K5h5o5h5i4]4E4K5j4F4K5h5m4O4D5d4B4K4Y4O5j4F4K5j5k4K5h5f4U4Z5d5d5n4C4K4D5j4B5f4]4D5j4F5h5o5i4X4K4M5d5k5f4K4D5d5n4Y4Y5d5i4K4]5n5i4O4A4C5j4A5j4U4C5i4]4O5f4K4A4E5o4F4D4C5d5j5f4@4D5i5j5k4F4A4F4@5k4E4_5j4E5f4F5i5o4]4E4V4^4E5j5m4_4D5f4F5h5h5k5h5j4K4F5h5o5n5h4D5h5i4K4U5j5k4O5d5h4X5f4M5j5d4]4O5i4K5m5f5o4D5o5h4\\4K4F4]4F4D4D4O5j5k5i4_4K5j5o4D5f4U5m5n4C4A4_5j5h5k5i4X4U4]4O5k5h4X5k4]5n4[4]4[5h4Dsqlejofpfquj`fgfebvowkjnpfoegfwbjop`lmwfmwpvsslqwpwbqwfgnfppbdfpv``fppebpkjlm?wjwof=`lvmwqzb``lvmw`qfbwfgpwlqjfpqfpvowpqvmmjmdsql`fpptqjwjmdlaif`wpujpjaoftfo`lnfbqwj`ofvmhmltmmfwtlqh`lnsbmzgzmbnj`aqltpfqsqjub`zsqlaofnPfquj`fqfpsf`wgjpsobzqfrvfpwqfpfquftfapjwfkjpwlqzeqjfmgplswjlmptlqhjmdufqpjlmnjoojlm`kbmmfotjmglt-bggqfppujpjwfgtfbwkfq`lqqf`wsqlgv`wfgjqf`welqtbqgzlv#`bmqfnlufgpvaif`w`lmwqlobq`kjuf`vqqfmwqfbgjmdojaqbqzojnjwfgnbmbdfqevqwkfqpvnnbqznb`kjmfnjmvwfpsqjubwf`lmwf{wsqldqbnpl`jfwzmvnafqptqjwwfmfmbaofgwqjddfqplvq`fpolbgjmdfofnfmwsbqwmfqejmboozsfqef`wnfbmjmdpzpwfnphffsjmd`vowvqf%rvlw8/ilvqmbosqlif`wpvqeb`fp%rvlw8f{sjqfpqfujftpabobm`fFmdojpk@lmwfmwwkqlvdkSofbpf#lsjmjlm`lmwb`wbufqbdfsqjnbqzujoobdfPsbmjpkdboofqzgf`ojmfnffwjmdnjppjlmslsvobqrvbojwznfbpvqfdfmfqbopsf`jfppfppjlmpf`wjlmtqjwfqp`lvmwfqjmjwjboqfslqwpejdvqfpnfnafqpklogjmdgjpsvwffbqojfqf{sqfppgjdjwbosj`wvqfBmlwkfqnbqqjfgwqbeej`ofbgjmd`kbmdfg`fmwqbouj`wlqzjnbdfp,qfbplmppwvgjfpefbwvqfojpwjmdnvpw#afp`kllopUfqpjlmvpvboozfsjplgfsobzjmddqltjmdlaujlvplufqobzsqfpfmwb`wjlmp?,vo=\x0E\ttqbssfqboqfbgz`fqwbjmqfbojwzpwlqbdfbmlwkfqgfphwlsleefqfgsbwwfqmvmvpvboGjdjwbo`bsjwboTfapjwfebjovqf`lmmf`wqfgv`fgBmgqljggf`bgfpqfdvobq#%bns8#bmjnbopqfofbpfBvwlnbwdfwwjmdnfwklgpmlwkjmdSlsvobq`bswjlmofwwfqp`bswvqfp`jfm`foj`fmpf`kbmdfpFmdobmg>2%bns8Kjpwlqz#>#mft#@fmwqbovsgbwfgPsf`jboMfwtlqhqfrvjqf`lnnfmwtbqmjmd@loofdfwlloabqqfnbjmpaf`bvpffof`wfgGfvwp`kejmbm`ftlqhfqprvj`hozafwtffmf{b`wozpfwwjmdgjpfbpfPl`jfwztfbslmpf{kjajw%ow8\"..@lmwqlo`obppfp`lufqfglvwojmfbwwb`hpgfuj`fp+tjmgltsvqslpfwjwof>!Nlajof#hjoojmdpkltjmdJwbojbmgqlssfgkfbujozfeef`wp.2$^*8\t`lmejqn@vqqfmwbgubm`fpkbqjmdlsfmjmdgqbtjmdajoojlmlqgfqfgDfqnbmzqfobwfg?,elqn=jm`ovgftkfwkfqgfejmfgP`jfm`f`bwboldBqwj`ofavwwlmpobqdfpwvmjelqnilvqmfzpjgfabq@kj`bdlklojgbzDfmfqbosbppbdf/%rvlw8bmjnbwfeffojmdbqqjufgsbppjmdmbwvqboqlvdkoz-\t\tWkf#avw#mlwgfmpjwzAqjwbjm@kjmfpfob`h#lewqjavwfJqfobmg!#gbwb.eb`wlqpqf`fjufwkbw#jpOjaqbqzkvpabmgjm#eb`wbeebjqp@kbqofpqbgj`boaqlvdkwejmgjmdobmgjmd9obmd>!qfwvqm#ofbgfqpsobmmfgsqfnjvnsb`hbdfBnfqj`bFgjwjlm^%rvlw8Nfppbdfmffg#wlubovf>!`lnsof{ollhjmdpwbwjlmafojfufpnboofq.nlajofqf`lqgptbmw#wlhjmg#leEjqfel{zlv#bqfpjnjobqpwvgjfgnb{jnvnkfbgjmdqbsjgoz`ojnbwfhjmdglnfnfqdfgbnlvmwpelvmgfgsjlmffqelqnvobgzmbpwzklt#wl#Pvsslqwqfufmvff`lmlnzQfpvowpaqlwkfqplogjfqobqdfoz`boojmd-%rvlw8B``lvmwFgtbqg#pfdnfmwQlafqw#feelqwpSb`jej`ofbqmfgvs#tjwkkfjdkw9tf#kbufBmdfofpmbwjlmp\\pfbq`kbssojfgb`rvjqfnbppjufdqbmwfg9#ebopfwqfbwfgajddfpwafmfejwgqjujmdPwvgjfpnjmjnvnsfqkbspnlqmjmdpfoojmdjp#vpfgqfufqpfubqjbmw#qlof>!njppjmdb`kjfufsqlnlwfpwvgfmwplnflmff{wqfnfqfpwlqfalwwln9fuloufgboo#wkfpjwfnbsfmdojpktbz#wl##Bvdvpwpznalop@lnsbmznbwwfqpnvpj`bobdbjmpwpfqujmd~*+*8\x0E\tsbznfmwwqlvaof`lm`fsw`lnsbqfsbqfmwpsobzfqpqfdjlmpnlmjwlq#$$Wkf#tjmmjmdf{solqfbgbswfgDboofqzsqlgv`fbajojwzfmkbm`f`bqffqp*-#Wkf#`loof`wPfbq`k#bm`jfmwf{jpwfgellwfq#kbmgofqsqjmwfg`lmplofFbpwfqmf{slqwptjmgltp@kbmmfojoofdbomfvwqbopvddfpw\\kfbgfqpjdmjmd-kwno!=pfwwofgtfpwfqm`bvpjmd.tfahjw`objnfgIvpwj`f`kbswfquj`wjnpWklnbp#nlyjoobsqlnjpfsbqwjfpfgjwjlmlvwpjgf9ebopf/kvmgqfgLoznsj`\\avwwlmbvwklqpqfb`kfg`kqlmj`gfnbmgppf`lmgpsqlwf`wbglswfgsqfsbqfmfjwkfqdqfbwozdqfbwfqlufqboojnsqluf`lnnbmgpsf`jbopfbq`k-tlqpkjsevmgjmdwklvdkwkjdkfpwjmpwfbgvwjojwzrvbqwfq@vowvqfwfpwjmd`ofbqozf{slpfgAqltpfqojafqbo~#`bw`kSqlif`wf{bnsofkjgf+*8EolqjgbbmptfqpbooltfgFnsfqlqgfefmpfpfqjlvpeqffglnPfufqbo.avwwlmEvqwkfqlvw#le#\">#mvoowqbjmfgGfmnbqhuljg+3*,boo-ipsqfufmwQfrvfpwPwfskfm\t\tTkfm#lapfquf?,k1=\x0E\tNlgfqm#sqlujgf!#bow>!alqgfqp-\t\tElq#\t\tNbmz#bqwjpwpsltfqfgsfqelqnej`wjlmwzsf#lenfgj`bowj`hfwplsslpfg@lvm`jotjwmfppivpwj`fDflqdf#Afodjvn---?,b=wtjwwfqmlwbaoztbjwjmdtbqebqf#Lwkfq#qbmhjmdskqbpfpnfmwjlmpvqujufp`klobq?,s=\x0E\t#@lvmwqzjdmlqfgolpp#leivpw#bpDflqdjbpwqbmdf?kfbg=?pwlssfg2$^*8\x0E\tjpobmgpmlwbaofalqgfq9ojpw#le`bqqjfg233/333?,k0=\t#pfufqboaf`lnfppfof`w#tfggjmd33-kwnonlmbq`klee#wkfwfb`kfqkjdkoz#ajloldzojef#lelq#fufmqjpf#le%qbrvl8sovplmfkvmwjmd+wklvdkGlvdobpiljmjmd`jq`ofpElq#wkfBm`jfmwUjfwmbnufkj`ofpv`k#bp`qzpwboubovf#>Tjmgltpfmilzfgb#pnboobppvnfg?b#jg>!elqfjdm#Boo#qjklt#wkfGjpsobzqfwjqfgkltfufqkjggfm8abwwofppffhjmd`bajmfwtbp#mlwollh#bw`lmgv`wdfw#wkfIbmvbqzkbssfmpwvqmjmdb9klufqLmojmf#Eqfm`k#ob`hjmdwzsj`bof{wqb`wfmfnjfpfufm#jedfmfqbwgf`jgfgbqf#mlw,pfbq`kafojfep.jnbdf9ol`bwfgpwbwj`-oldjm!=`lmufqwujlofmwfmwfqfgejqpw!=`jq`vjwEjmobmg`kfnjpwpkf#tbp23s{8!=bp#pv`kgjujgfg?,psbm=tjoo#afojmf#leb#dqfbwnzpwfqz,jmgf{-eboojmdgvf#wl#qbjotbz`loofdfnlmpwfqgfp`fmwjw#tjwkmv`ofbqIftjpk#sqlwfpwAqjwjpkeoltfqpsqfgj`wqfelqnpavwwlm#tkl#tbpof`wvqfjmpwbmwpvj`jgfdfmfqj`sfqjlgpnbqhfwpPl`jbo#ejpkjmd`lnajmfdqbskj`tjmmfqp?aq#,=?az#wkf#MbwvqboSqjub`z`llhjfplvw`lnfqfploufPtfgjpkaqjfeozSfqpjbmpl#nv`k@fmwvqzgfsj`wp`lovnmpklvpjmdp`qjswpmf{w#wlafbqjmdnbssjmdqfujpfgiRvfqz+.tjgwk9wjwof!=wllowjsPf`wjlmgfpjdmpWvqhjpkzlvmdfq-nbw`k+~*+*8\t\tavqmjmdlsfqbwfgfdqffpplvq`f>Qj`kbqg`olpfozsobpwj`fmwqjfp?,wq=\x0E\t`lolq9 vo#jg>!slppfppqloojmdskzpj`pebjojmdf{f`vwf`lmwfpwojmh#wlGfebvow?aq#,=\t9#wqvf/`kbqwfqwlvqjpn`obppj`sql`ffgf{sobjm?,k2=\x0E\tlmojmf-<{no#ufkfosjmdgjbnlmgvpf#wkfbjqojmffmg#..=*-bwwq+qfbgfqpklpwjmd eeeeeeqfbojyfUjm`fmwpjdmbop#pq`>!,Sqlgv`wgfpsjwfgjufqpfwfoojmdSvaoj`#kfog#jmIlpfsk#wkfbwqfbeef`wp?pwzof=b#obqdfglfpm$wobwfq/#Fofnfmwebuj`lm`qfbwlqKvmdbqzBjqslqwpff#wkfpl#wkbwNj`kbfoPzpwfnpSqldqbnp/#bmg##tjgwk>f%rvlw8wqbgjmdofew!=\tsfqplmpDlogfm#Beebjqpdqbnnbqelqnjmdgfpwqlzjgfb#le`bpf#lelogfpw#wkjp#jp-pq`#>#`bqwllmqfdjpwq@lnnlmpNvpojnpTkbw#jpjm#nbmznbqhjmdqfufbopJmgffg/frvbooz,pklt\\blvwgllqfp`bsf+Bvpwqjbdfmfwj`pzpwfn/Jm#wkf#pjwwjmdKf#boplJpobmgpB`bgfnz\t\n\n?\"..Gbmjfo#ajmgjmdaol`h!=jnslpfgvwjojyfBaqbkbn+f{`fswxtjgwk9svwwjmd*-kwno+\x7F\x7F#X^8\tGBWBX#)hjw`kfmnlvmwfgb`wvbo#gjbof`wnbjmoz#\\aobmh$jmpwboof{sfqwpje+wzsfJw#bopl%`lsz8#!=Wfqnpalqm#jmLswjlmpfbpwfqmwbohjmd`lm`fqmdbjmfg#lmdljmdivpwjez`qjwj`peb`wlqzjwp#ltmbppbvowjmujwfgobpwjmdkjp#ltmkqfe>!,!#qfo>!gfufols`lm`fqwgjbdqbngloobqp`ovpwfqsks<jg>bo`lklo*8~*+*8vpjmd#b=?psbm=ufppfopqfujuboBggqfppbnbwfvqbmgqljgboofdfgjoomfpptbohjmd`fmwfqprvbojeznbw`kfpvmjejfgf{wjm`wGfefmpfgjfg#jm\t\n?\"..#`vpwlnpojmhjmdOjwwof#Allh#lefufmjmdnjm-ip<bqf#wkfhlmwbhwwlgbz$p-kwno!#wbqdfw>tfbqjmdBoo#Qjd8\t~*+*8qbjpjmd#Bopl/#`qv`jbobalvw!=gf`obqf..=\t?p`ejqfel{bp#nv`kbssojfpjmgf{/#p/#avw#wzsf#>#\t\x0E\t?\"..wltbqgpQf`lqgpSqjubwfElqfjdmSqfnjfq`klj`fpUjqwvboqfwvqmp@lnnfmwSltfqfgjmojmf8slufqwz`kbnafqOjujmd#ulovnfpBmwklmzoldjm!#QfobwfgF`lmlnzqfb`kfp`vwwjmddqbujwzojef#jm@kbswfq.pkbgltMlwbaof?,wg=\x0E\t#qfwvqmpwbgjvntjgdfwpubqzjmdwqbufopkfog#aztkl#bqftlqh#jmeb`vowzbmdvobqtkl#kbgbjqslqwwltm#le\t\tPlnf#$`oj`h$`kbqdfphfztlqgjw#tjoo`jwz#le+wkjp*8Bmgqft#vmjrvf#`kf`hfglq#nlqf033s{8#qfwvqm8qpjlm>!sovdjmptjwkjm#kfqpfoePwbwjlmEfgfqboufmwvqfsvaojpkpfmw#wlwfmpjlmb`wqfpp`lnf#wlejmdfqpGvhf#lesflsof/f{soljwtkbw#jpkbqnlmzb#nbilq!9!kwwsjm#kjp#nfmv!=\tnlmwkozleej`fq`lvm`jodbjmjmdfufm#jmPvnnbqzgbwf#leolzbowzejwmfppbmg#tbpfnsfqlqpvsqfnfPf`lmg#kfbqjmdQvppjbmolmdfpwBoafqwbobwfqbopfw#le#pnboo!=-bssfmggl#tjwkefgfqboabmh#leafmfbwkGfpsjwf@bsjwbodqlvmgp*/#bmg#sfq`fmwjw#eqln`olpjmd`lmwbjmJmpwfbgejewffmbp#tfoo-zbkll-qfpslmgejdkwfqlap`vqfqfeof`wlqdbmj`>#Nbwk-fgjwjmdlmojmf#sbggjmdb#tkloflmfqqlqzfbq#lefmg#le#abqqjfqtkfm#jwkfbgfq#klnf#leqfpvnfgqfmbnfgpwqlmd=kfbwjmdqfwbjmp`olvgeqtbz#le#Nbq`k#2hmltjmdjm#sbqwAfwtffmofpplmp`olpfpwujqwvboojmhp!=`qlppfgFMG#..=ebnlvp#btbqgfgOj`fmpfKfbowk#ebjqoz#tfbowkznjmjnboBeqj`bm`lnsfwfobafo!=pjmdjmdebqnfqpAqbpjo*gjp`vppqfsob`fDqfdlqzelmw#`lsvqpvfgbssfbqpnbhf#vsqlvmgfgalwk#leaol`hfgpbt#wkfleej`fp`lolvqpje+gl`vtkfm#kffmelq`fsvpk+evBvdvpw#VWE.;!=Ebmwbpzjm#nlpwjmivqfgVpvboozebqnjmd`olpvqflaif`w#gfefm`fvpf#le#Nfgj`bo?algz=\tfujgfmwaf#vpfghfz@lgfpj{wffmJpobnj` 333333fmwjqf#tjgfoz#b`wjuf#+wzsflelmf#`bm`lolq#>psfbhfqf{wfmgpSkzpj`pwfqqbjm?walgz=evmfqboujftjmdnjggof#`qj`hfwsqlskfwpkjewfggl`wlqpQvppfoo#wbqdfw`lnsb`wbodfaqbpl`jbo.avoh#lenbm#bmg?,wg=\t#kf#ofew*-ubo+*ebopf*8oldj`boabmhjmdklnf#wlmbnjmd#Bqjylmb`qfgjwp*8\t~*8\telvmgfqjm#wvqm@loojmpafelqf#Avw#wkf`kbqdfgWjwof!=@bswbjmpsfoofgdlggfppWbd#..=Bggjmd9avw#tbpQf`fmw#sbwjfmwab`h#jm>ebopf%Ojm`lomtf#hmlt@lvmwfqIvgbjpnp`qjsw#bowfqfg$^*8\t##kbp#wkfvm`ofbqFufmw$/alwk#jmmlw#boo\t\t?\"..#sob`jmdkbqg#wl#`fmwfqplqw#le`ojfmwppwqffwpAfqmbqgbppfqwpwfmg#wlebmwbpzgltm#jmkbqalvqEqffglniftfoqz,balvw--pfbq`kofdfmgpjp#nbgfnlgfqm#lmoz#lmlmoz#wljnbdf!#ojmfbq#sbjmwfqbmg#mlwqbqfoz#b`qlmzngfojufqpklqwfq33%bns8bp#nbmztjgwk>!,)#?\"X@wjwof#>le#wkf#oltfpw#sj`hfg#fp`bsfgvpfp#lesflsofp#Svaoj`Nbwwkftwb`wj`pgbnbdfgtbz#elqobtp#lefbpz#wl#tjmgltpwqlmd##pjnsof~`bw`k+pfufmwkjmelal{tfmw#wlsbjmwfg`jwjyfmJ#glm$wqfwqfbw-#Plnf#tt-!*8\talnajmdnbjowl9nbgf#jm-#Nbmz#`bqqjfp\x7F\x7Fx~8tjtlqh#lepzmlmzngfefbwpebulqfglswj`bosbdfWqbvmofpp#pfmgjmdofew!=?`lnP`lqBoo#wkfiRvfqz-wlvqjpw@obppj`ebopf!#Tjokfonpvavqapdfmvjmfajpklsp-psojw+dolabo#elooltpalgz#lemlnjmbo@lmwb`wpf`vobqofew#wl`kjfeoz.kjggfm.abmmfq?,oj=\t\t-#Tkfm#jm#alwkgjpnjppF{solqfbotbzp#ujb#wkfpsb/]lotfoebqfqvojmd#bqqbmdf`bswbjmkjp#plmqvof#lekf#wllhjwpfoe/>3%bns8+`boofgpbnsofpwl#nbhf`ln,sbdNbqwjm#Hfmmfgzb``fswpevoo#lekbmgofgAfpjgfp,,..=?,baof#wlwbqdfwpfppfm`fkjn#wl#jwp#az#`lnnlm-njmfqbowl#wbhftbzp#wlp-lqd,obgujpfgsfmbowzpjnsof9je#wkfzOfwwfqpb#pklqwKfqafqwpwqjhfp#dqlvsp-ofmdwkeojdkwplufqobspoltoz#ofppfq#pl`jbo#?,s=\t\n\njw#jmwlqbmhfg#qbwf#levo=\x0E\t##bwwfnswsbjq#lenbhf#jwHlmwbhwBmwlmjlkbujmd#qbwjmdp#b`wjufpwqfbnpwqbssfg!*-`pp+klpwjofofbg#wlojwwof#dqlvsp/Sj`wvqf..=\x0E\t\x0E\t#qltp>!#laif`wjmufqpf?ellwfq@vpwlnU=?_,p`qploujmd@kbnafqpobufqztlvmgfgtkfqfbp\">#$vmgelq#boosbqwoz#.qjdkw9Bqbajbmab`hfg#`fmwvqzvmjw#lenlajof.Fvqlsf/jp#klnfqjph#legfpjqfg@ojmwlm`lpw#lebdf#le#af`lnf#mlmf#les%rvlw8Njggof#fbg$*X3@qjwj`ppwvgjlp=%`lsz8dqlvs!=bppfnaonbhjmd#sqfppfgtjgdfw-sp9!#<#qfavjowaz#plnfElqnfq#fgjwlqpgfobzfg@bmlmj`kbg#wkfsvpkjmd`obpp>!avw#bqfsbqwjboAbazolmalwwln#`bqqjfq@lnnbmgjwp#vpfBp#tjwk`lvqpfpb#wkjqggfmlwfpbopl#jmKlvpwlm13s{8!=b``vpfgglvaof#dlbo#leEbnlvp#*-ajmg+sqjfpwp#Lmojmfjm#Ivozpw#(#!d`lmpvowgf`jnbokfosevoqfujufgjp#ufqzq$($jswolpjmd#efnbofpjp#boplpwqjmdpgbzp#lebqqjuboevwvqf#?laif`welq`jmdPwqjmd+!#,=\t\n\nkfqf#jpfm`lgfg-##Wkf#aboollmglmf#az,`lnnlmad`lolqobt#le#Jmgjbmbbuljgfgavw#wkf1s{#0s{irvfqz-bewfq#bsloj`z-nfm#bmgellwfq.>#wqvf8elq#vpfp`qffm-Jmgjbm#jnbdf#>ebnjoz/kwws9,,#%maps8gqjufqpfwfqmbopbnf#bpmlwj`fgujftfqp~*+*8\t#jp#nlqfpfbplmpelqnfq#wkf#mftjp#ivpw`lmpfmw#Pfbq`ktbp#wkftkz#wkfpkjssfgaq=?aq=tjgwk9#kfjdkw>nbgf#le`vjpjmfjp#wkbwb#ufqz#Bgnjqbo#ej{fg8mlqnbo#NjppjlmSqfpp/#lmwbqjl`kbqpfwwqz#wl#jmubgfg>!wqvf!psb`jmdjp#nlpwb#nlqf#wlwboozeboo#le~*8\x0E\t##jnnfmpfwjnf#jmpfw#lvwpbwjpezwl#ejmggltm#wlolw#le#Sobzfqpjm#Ivmfrvbmwvnmlw#wkfwjnf#wlgjpwbmwEjmmjpkpq`#>#+pjmdof#kfos#leDfqnbm#obt#bmgobafofgelqfpwp`llhjmdpsb`f!=kfbgfq.tfoo#bpPwbmofzaqjgdfp,dolabo@qlbwjb#Balvw#X3^8\t##jw/#bmgdqlvsfgafjmd#b*xwkqltkf#nbgfojdkwfqfwkj`boEEEEEE!alwwln!ojhf#b#fnsolzpojuf#jmbp#pffmsqjmwfqnlpw#leva.ojmhqfif`wpbmg#vpfjnbdf!=pv``ffgeffgjmdMv`ofbqjmelqnbwl#kfosTlnfm$pMfjwkfqNf{j`bmsqlwfjm?wbaof#az#nbmzkfbowkzobtpvjwgfujpfg-svpk+xpfoofqppjnsoz#Wkqlvdk-`llhjf#Jnbdf+logfq!=vp-ip!=#Pjm`f#vmjufqpobqdfq#lsfm#wl\"..#fmgojfp#jm$^*8\x0E\t##nbqhfwtkl#jp#+!GLN@lnbmbdfglmf#elqwzsfle#Hjmdglnsqlejwpsqlslpfwl#pklt`fmwfq8nbgf#jwgqfppfgtfqf#jmnj{wvqfsqf`jpfbqjpjmdpq`#>#$nbhf#b#pf`vqfgAbswjpwulwjmd#\t\n\nubq#Nbq`k#1dqft#vs@ojnbwf-qfnlufphjoofgtbz#wkf?,kfbg=eb`f#leb`wjmd#qjdkw!=wl#tlqhqfgv`fpkbp#kbgfqf`wfgpklt+*8b`wjlm>allh#lebm#bqfb>>#!kww?kfbgfq\t?kwno=`lmelqneb`jmd#`llhjf-qfoz#lmklpwfg#-`vpwlnkf#tfmwavw#elqpsqfbg#Ebnjoz#b#nfbmplvw#wkfelqvnp-ellwbdf!=Nlajo@ofnfmwp!#jg>!bp#kjdkjmwfmpf..=?\"..efnbof#jp#pffmjnsojfgpfw#wkfb#pwbwfbmg#kjpebpwfpwafpjgfpavwwlm\\alvmgfg!=?jnd#Jmelal{fufmwp/b#zlvmdbmg#bqfMbwjuf#`kfbsfqWjnflvwbmg#kbpfmdjmfptlm#wkf+nlpwozqjdkw9#ejmg#b#.alwwlnSqjm`f#bqfb#lenlqf#lepfbq`k\\mbwvqf/ofdboozsfqjlg/obmg#lelq#tjwkjmgv`fgsqlujmdnjppjofol`boozBdbjmpwwkf#tbzh%rvlw8s{8!=\x0E\tsvpkfg#babmglmmvnfqbo@fqwbjmJm#wkjpnlqf#jmlq#plnfmbnf#jpbmg/#jm`qltmfgJPAM#3.`qfbwfpL`wlafqnbz#mlw`fmwfq#obwf#jmGfefm`ffmb`wfgtjpk#wlaqlbgoz`llojmdlmolbg>jw-#Wkfqf`lufqNfnafqpkfjdkw#bppvnfp?kwno=\tsflsof-jm#lmf#>tjmgltellwfq\\b#dllg#qfhobnblwkfqp/wl#wkjp\\`llhjfsbmfo!=Olmglm/gfejmfp`qvpkfgabswjpn`lbpwbopwbwvp#wjwof!#nluf#wlolpw#jmafwwfq#jnsojfpqjuboqzpfqufqp#PzpwfnSfqkbspfp#bmg#`lmwfmgeoltjmdobpwfg#qjpf#jmDfmfpjpujft#leqjpjmd#pffn#wlavw#jm#ab`hjmdkf#tjoodjufm#bdjujmd#`jwjfp-eolt#le#Obwfq#boo#avwKjdktbzlmoz#azpjdm#lekf#glfpgjeefqpabwwfqz%bns8obpjmdofpwkqfbwpjmwfdfqwbhf#lmqfevpfg`boofg#>VP%bnsPff#wkfmbwjufpaz#wkjppzpwfn-kfbg#le9klufq/ofpajbmpvqmbnfbmg#boo`lnnlm,kfbgfq\\\\sbqbnpKbqubqg,sj{fo-qfnlubopl#olmdqlof#leiljmwozphzp`qbVmj`lgfaq#,=\x0E\tBwobmwbmv`ofvp@lvmwz/svqfoz#`lvmw!=fbpjoz#avjog#blm`oj`hb#djufmsljmwfqk%rvlw8fufmwp#fopf#x\tgjwjlmpmlt#wkf/#tjwk#nbm#tkllqd,Tfalmf#bmg`buboqzKf#gjfgpfbwwof33/333#xtjmgltkbuf#wlje+tjmgbmg#jwpplofoz#n%rvlw8qfmftfgGfwqljwbnlmdpwfjwkfq#wkfn#jmPfmbwlqVp?,b=?Hjmd#leEqbm`jp.sqlgv`kf#vpfgbqw#bmgkjn#bmgvpfg#azp`lqjmdbw#klnfwl#kbufqfobwfpjajojwzeb`wjlmAveebolojmh!=?tkbw#kfeqff#wl@jwz#le`lnf#jmpf`wlqp`lvmwfglmf#gbzmfqulvpprvbqf#~8je+dljm#tkbwjnd!#bojp#lmozpfbq`k,wvfpgbzollpfozPlolnlmpf{vbo#.#?b#kqnfgjvn!GL#MLW#Eqbm`f/tjwk#b#tbq#bmgpf`lmg#wbhf#b#=\x0E\t\x0E\t\x0E\tnbqhfw-kjdktbzglmf#jm`wjujwz!obpw!=laojdfgqjpf#wl!vmgfejnbgf#wl#Fbqoz#sqbjpfgjm#jwp#elq#kjpbwkofwfIvsjwfqZbkll\"#wfqnfg#pl#nbmzqfbooz#p-#Wkf#b#tlnbm<ubovf>gjqf`w#qjdkw!#aj`z`ofb`jmd>!gbz#bmgpwbwjmdQbwkfq/kjdkfq#Leej`f#bqf#mltwjnfp/#tkfm#b#sbz#elqlm#wkjp.ojmh!=8alqgfqbqlvmg#bmmvbo#wkf#Mftsvw#wkf-`ln!#wbhjm#wlb#aqjfe+jm#wkfdqlvsp-8#tjgwkfmyznfppjnsof#jm#obwfxqfwvqmwkfqbszb#sljmwabmmjmdjmhp!=\t+*8!#qfb#sob`f_v330@bbalvw#bwq=\x0E\t\n\n``lvmw#djufp#b?P@QJSWQbjotbzwkfnfp,wlloal{AzJg+!{kvnbmp/tbw`kfpjm#plnf#je#+tj`lnjmd#elqnbwp#Vmgfq#avw#kbpkbmgfg#nbgf#azwkbm#jmefbq#legfmlwfg,jeqbnfofew#jmulowbdfjm#fb`kb%rvlw8abpf#leJm#nbmzvmgfqdlqfdjnfpb`wjlm#?,s=\x0E\t?vpwlnUb8%dw8?,jnslqwplq#wkbwnlpwoz#%bns8qf#pjyf>!?,b=?,kb#`obppsbppjufKlpw#>#TkfwkfqefqwjofUbqjlvp>X^8+ev`bnfqbp,=?,wg=b`wp#bpJm#plnf=\x0E\t\x0E\t?\"lqdbmjp#?aq#,=Afjijmd`bwbo/Lgfvwp`kfvqlsfvfvphbqbdbfjodfpufmphbfpsb/]bnfmpbifvpvbqjlwqbabiln/E{j`ls/Mdjmbpjfnsqfpjpwfnbl`wvaqfgvqbmwfb/]bgjqfnsqfpbnlnfmwlmvfpwqlsqjnfqbwqbu/Epdqb`jbpmvfpwqbsql`fplfpwbglp`bojgbgsfqplmbm/Vnfqlb`vfqgln/Vpj`bnjfnaqllefqwbpbodvmlpsb/Apfpfifnsolgfqf`klbgfn/Mpsqjubglbdqfdbqfmob`fpslpjaofklwfofppfujoobsqjnfql/Vowjnlfufmwlpbq`kjul`vowvqbnvifqfpfmwqbgbbmvm`jlfnabqdlnfq`bgldqbmgfpfpwvgjlnfilqfpefaqfqlgjpf/]lwvqjpnl`/_gjdlslqwbgbfpsb`jlebnjojbbmwlmjlsfqnjwfdvbqgbqbodvmbpsqf`jlpbodvjfmpfmwjglujpjwbpw/Awvol`lml`fqpfdvmgl`lmpfileqbm`jbnjmvwlppfdvmgbwfmfnlpfef`wlpn/Mobdbpfpj/_mqfujpwbdqbmbgb`lnsqbqjmdqfpldbq`/Abb``j/_mf`vbglqrvjfmfpjm`ovplgfafq/Mnbwfqjbklnaqfpnvfpwqbslgq/Abnb/]bmb/Vowjnbfpwbnlplej`jbowbnajfmmjmd/Vmpbovglpslgfnlpnfilqbqslpjwjlmavpjmfppklnfsbdfpf`vqjwzobmdvbdfpwbmgbqg`bnsbjdmefbwvqfp`bwfdlqzf{wfqmbo`kjogqfmqfpfqufgqfpfbq`kf{`kbmdfebulqjwfwfnsobwfnjojwbqzjmgvpwqzpfquj`fpnbwfqjbosqlgv`wpy.jmgf{9`lnnfmwpplewtbqf`lnsofwf`bofmgbqsobwelqnbqwj`ofpqfrvjqfgnlufnfmwrvfpwjlmavjogjmdslojwj`pslppjaofqfojdjlmskzpj`boeffgab`hqfdjpwfqsj`wvqfpgjpbaofgsqlwl`lobvgjfm`fpfwwjmdpb`wjujwzfofnfmwpofbqmjmdbmzwkjmdbapwqb`wsqldqfpplufqujftnbdbyjmff`lmlnj`wqbjmjmdsqfppvqfubqjlvp#?pwqlmd=sqlsfqwzpklssjmdwldfwkfqbgubm`fgafkbujlqgltmolbgefbwvqfgellwaboopfof`wfgObmdvbdfgjpwbm`fqfnfnafqwqb`hjmdsbpptlqgnlgjejfgpwvgfmwpgjqf`wozejdkwjmdmlqwkfqmgbwbabpfefpwjuboaqfbhjmdol`bwjlmjmwfqmfwgqlsgltmsqb`wj`ffujgfm`fevm`wjlmnbqqjbdfqfpslmpfsqlaofnpmfdbwjufsqldqbnpbmbozpjpqfofbpfgabmmfq!=svq`kbpfsloj`jfpqfdjlmbo`qfbwjufbqdvnfmwallhnbqhqfefqqfq`kfnj`bogjujpjlm`booab`hpfsbqbwfsqlif`wp`lmeoj`wkbqgtbqfjmwfqfpwgfojufqznlvmwbjmlawbjmfg>#ebopf8elq+ubq#b``fswfg`bsb`jwz`lnsvwfqjgfmwjwzbjq`qbewfnsolzfgsqlslpfgglnfpwj`jm`ovgfpsqlujgfgklpsjwboufqwj`bo`loobspfbssqlb`ksbqwmfqpoldl!=?bgbvdkwfqbvwklq!#`vowvqboebnjojfp,jnbdfp,bppfnaozsltfqevowfb`kjmdejmjpkfggjpwqj`w`qjwj`bo`dj.ajm,svqslpfpqfrvjqfpfof`wjlmaf`lnjmdsqlujgfpb`bgfnj`f{fq`jpfb`wvbooznfgj`jmf`lmpwbmwb``jgfmwNbdbyjmfgl`vnfmwpwbqwjmdalwwln!=lapfqufg9#%rvlw8f{wfmgfgsqfujlvpPlewtbqf`vpwlnfqgf`jpjlmpwqfmdwkgfwbjofgpojdkwozsobmmjmdwf{wbqfb`vqqfm`zfufqzlmfpwqbjdkwwqbmpefqslpjwjufsqlgv`fgkfqjwbdfpkjssjmdbaplovwfqf`fjufgqfofubmwavwwlm!#ujlofm`fbmztkfqfafmfejwpobvm`kfgqf`fmwozboojbm`felooltfgnvowjsofavoofwjmjm`ovgfgl``vqqfgjmwfqmbo'+wkjp*-qfsvaoj`=?wq=?wg`lmdqfppqf`lqgfgvowjnbwfplovwjlm?vo#jg>!gjp`lufqKlnf?,b=tfapjwfpmfwtlqhpbowklvdkfmwjqfoznfnlqjbonfppbdfp`lmwjmvfb`wjuf!=plnftkbwuj`wlqjbTfpwfqm##wjwof>!Ol`bwjlm`lmwqb`wujpjwlqpGltmolbgtjwklvw#qjdkw!=\tnfbpvqfptjgwk#>#ubqjbaofjmuloufgujqdjmjbmlqnboozkbssfmfgb``lvmwppwbmgjmdmbwjlmboQfdjpwfqsqfsbqfg`lmwqlopb``vqbwfajqwkgbzpwqbwfdzleej`jbodqbskj`p`qjnjmboslppjaoz`lmpvnfqSfqplmbopsfbhjmdubojgbwfb`kjfufg-isd!#,=nb`kjmfp?,k1=\t##hfztlqgpeqjfmgozaqlwkfqp`lnajmfglqjdjmbo`lnslpfgf{sf`wfgbgfrvbwfsbhjpwbmeloolt!#ubovbaof?,obafo=qfobwjufaqjmdjmdjm`qfbpfdlufqmlqsovdjmp,Ojpw#le#Kfbgfq!=!#mbnf>!#+%rvlw8dqbgvbwf?,kfbg=\t`lnnfq`fnbobzpjbgjqf`wlqnbjmwbjm8kfjdkw9p`kfgvof`kbmdjmdab`h#wl#`bwkloj`sbwwfqmp`lolq9# dqfbwfpwpvssojfpqfojbaof?,vo=\t\n\n?pfof`w#`jwjyfmp`olwkjmdtbw`kjmd?oj#jg>!psf`jej``bqqzjmdpfmwfm`f?`fmwfq=`lmwqbpwwkjmhjmd`bw`k+f*plvwkfqmNj`kbfo#nfq`kbmw`bqlvpfosbggjmd9jmwfqjlq-psojw+!ojybwjlmL`wlafq#*xqfwvqmjnsqlufg..%dw8\t\t`lufqbdf`kbjqnbm-smd!#,=pvaif`wpQj`kbqg#tkbwfufqsqlabaozqf`lufqzabpfabooivgdnfmw`lmmf`w--`pp!#,=#tfapjwfqfslqwfggfebvow!,=?,b=\x0E\tfof`wqj`p`lwobmg`qfbwjlmrvbmwjwz-#JPAM#3gjg#mlw#jmpwbm`f.pfbq`k.!#obmd>!psfbhfqp@lnsvwfq`lmwbjmpbq`kjufpnjmjpwfqqfb`wjlmgjp`lvmwJwbojbml`qjwfqjbpwqlmdoz9#$kwws9$p`qjsw$`lufqjmdleefqjmdbssfbqfgAqjwjpk#jgfmwjezEb`fallhmvnfqlvpufkj`ofp`lm`fqmpBnfqj`bmkbmgojmdgju#jg>!Tjoojbn#sqlujgfq\\`lmwfmwb``vqb`zpf`wjlm#bmgfqplmeof{jaof@bwfdlqzobtqfm`f?p`qjsw=obzlvw>!bssqlufg#nb{jnvnkfbgfq!=?,wbaof=Pfquj`fpkbnjowlm`vqqfmw#`bmbgjbm`kbmmfop,wkfnfp,,bqwj`oflswjlmboslqwvdboubovf>!!jmwfqubotjqfofppfmwjwofgbdfm`jfpPfbq`k!#nfbpvqfgwklvpbmgpsfmgjmd%kfoojs8mft#Gbwf!#pjyf>!sbdfMbnfnjggof!#!#,=?,b=kjggfm!=pfrvfm`fsfqplmbolufqeoltlsjmjlmpjoojmljpojmhp!=\t\n?wjwof=ufqpjlmppbwvqgbzwfqnjmbojwfnsqlsfmdjmffqpf`wjlmpgfpjdmfqsqlslpbo>!ebopf!Fpsb/]loqfofbpfppvanjw!#fq%rvlw8bggjwjlmpznswlnplqjfmwfgqfplvq`fqjdkw!=?sofbpvqfpwbwjlmpkjpwlqz-ofbujmd##alqgfq>`lmwfmwp`fmwfq!=-\t\tPlnf#gjqf`wfgpvjwbaofavodbqjb-pklt+*8gfpjdmfgDfmfqbo#`lm`fswpF{bnsofptjoojbnpLqjdjmbo!=?psbm=pfbq`k!=lsfqbwlqqfrvfpwpb#%rvlw8booltjmdGl`vnfmwqfujpjlm-#\t\tWkf#zlvqpfoe@lmwb`w#nj`kjdbmFmdojpk#`lovnajbsqjlqjwzsqjmwjmdgqjmhjmdeb`jojwzqfwvqmfg@lmwfmw#leej`fqpQvppjbm#dfmfqbwf.;;6:.2!jmgj`bwfebnjojbq#rvbojwznbqdjm93#`lmwfmwujftslqw`lmwb`wp.wjwof!=slqwbaof-ofmdwk#fojdjaofjmuloufpbwobmwj`lmolbg>!gfebvow-pvssojfgsbznfmwpdolppbqz\t\tBewfq#dvjgbm`f?,wg=?wgfm`lgjmdnjggof!=`bnf#wl#gjpsobzpp`lwwjpkilmbwkbmnbilqjwztjgdfwp-`ojmj`bowkbjobmgwfb`kfqp?kfbg=\t\nbeef`wfgpvsslqwpsljmwfq8wlPwqjmd?,pnboo=lhobklnbtjoo#af#jmufpwlq3!#bow>!klojgbzpQfplvq`foj`fmpfg#+tkj`k#-#Bewfq#`lmpjgfqujpjwjmdf{solqfqsqjnbqz#pfbq`k!#bmgqljg!rvj`hoz#nffwjmdpfpwjnbwf8qfwvqm#8`lolq9 #kfjdkw>bssqlubo/#%rvlw8#`kf`hfg-njm-ip!nbdmfwj`=?,b=?,kelqf`bpw-#Tkjof#wkvqpgbzgufqwjpf%fb`vwf8kbp@obppfubovbwflqgfqjmdf{jpwjmdsbwjfmwp#Lmojmf#`lolqbglLswjlmp!`bnsafoo?\"..#fmg?,psbm=??aq#,=\x0E\t\\slsvsp\x7Fp`jfm`fp/%rvlw8#rvbojwz#Tjmgltp#bppjdmfgkfjdkw9#?a#`obppof%rvlw8#ubovf>!#@lnsbmzf{bnsofp?jeqbnf#afojfufpsqfpfmwpnbqpkboosbqw#le#sqlsfqoz*-\t\tWkf#wb{lmlnznv`k#le#?,psbm=\t!#gbwb.pqwvdv/Fpp`qlooWl#sqlif`w?kfbg=\x0E\tbwwlqmfzfnskbpjppslmplqpebm`zal{tlqog$p#tjogojef`kf`hfg>pfppjlmpsqldqbnns{8elmw.#Sqlif`wilvqmbopafojfufgub`bwjlmwklnsplmojdkwjmdbmg#wkf#psf`jbo#alqgfq>3`kf`hjmd?,walgz=?avwwlm#@lnsofwf`ofbqej{\t?kfbg=\tbqwj`of#?pf`wjlmejmgjmdpqlof#jm#slsvobq##L`wlafqtfapjwf#f{slpvqfvpfg#wl##`kbmdfplsfqbwfg`oj`hjmdfmwfqjmd`lnnbmgpjmelqnfg#mvnafqp##?,gju=`qfbwjmdlmPvanjwnbqzobmg`loofdfpbmbozwj`ojpwjmdp`lmwb`w-olddfgJmbgujplqzpjaojmdp`lmwfmw!p%rvlw8*p-#Wkjp#sb`hbdfp`kf`hal{pvddfpwpsqfdmbmwwlnlqqltpsb`jmd>j`lm-smdibsbmfpf`lgfabpfavwwlm!=dbnaojmdpv`k#bp#/#tkjof#?,psbm=#njpplvqjpslqwjmdwls92s{#-?,psbm=wfmpjlmptjgwk>!1obyzolbgmlufnafqvpfg#jm#kfjdkw>!`qjsw!=\t%maps8?,?wq=?wg#kfjdkw91,sqlgv`w`lvmwqz#jm`ovgf#ellwfq!#%ow8\"..#wjwof!=?,irvfqz-?,elqn=\t+\x0BBl\bQ\x7F*+\x0BUm\x05Gx*kqubwphjjwbojbmlqln/Nm(ow/Pqh/Kf4K4]4C5dwbnaj/Emmlwj`jbpnfmpbifpsfqplmbpgfqf`klpmb`jlmbopfquj`jl`lmwb`wlvpvbqjlpsqldqbnbdlajfqmlfnsqfpbpbmvm`jlpubofm`jb`lolnajbgfpsv/Epgfslqwfpsqlzf`wlsqlgv`wls/Vaoj`lmlplwqlpkjpwlqjbsqfpfmwfnjoolmfpnfgjbmwfsqfdvmwbbmwfqjlqqf`vqplpsqlaofnbpbmwjbdlmvfpwqlplsjmj/_mjnsqjnjqnjfmwqbpbn/Eqj`bufmgfglqpl`jfgbgqfpsf`wlqfbojybqqfdjpwqlsbobaqbpjmwfq/Epfmwlm`fpfpsf`jbonjfnaqlpqfbojgbg`/_qglabybqbdlybs/Mdjmbppl`jbofpaolrvfbqdfpwj/_mborvjofqpjpwfnbp`jfm`jbp`lnsofwlufqpj/_m`lnsofwbfpwvgjlps/Vaoj`blaifwjulboj`bmwfavp`bglq`bmwjgbgfmwqbgbpb``jlmfpbq`kjulppvsfqjlqnbzlq/Abbofnbmjbevm`j/_m/Vowjnlpkb`jfmglbrvfoolpfgj`j/_mefqmbmglbnajfmwfeb`fallhmvfpwqbp`ojfmwfpsql`fplpabpwbmwfsqfpfmwbqfslqwbq`lmdqfplsvaoj`bq`lnfq`jl`lmwqbwli/_ufmfpgjpwqjwlw/E`mj`b`lmivmwlfmfqd/Abwqbabibqbpwvqjbpqf`jfmwfvwjojybqalofw/Ampboubglq`lqqf`wbwqbabilpsqjnfqlpmfdl`jlpojafqwbggfwboofpsbmwboobsq/_{jnlbonfq/Abbmjnbofprvj/Emfp`lqby/_mpf``j/_mavp`bmglls`jlmfpf{wfqjlq`lm`fswlwlgbu/Abdbofq/Abfp`qjajqnfgj`jmboj`fm`jb`lmpvowbbpsf`wlp`q/Awj`bg/_obqfpivpwj`jbgfafq/Mmsfq/Alglmf`fpjwbnbmwfmfqsfrvf/]lqf`jajgbwqjavmbowfmfqjef`bm`j/_m`bmbqjbpgfp`bqdbgjufqplpnboolq`bqfrvjfqfw/E`mj`lgfafq/Abujujfmgbejmbmybpbgfobmwfevm`jlmb`lmpfilpgje/A`jo`jvgbgfpbmwjdvbpbubmybgbw/Eqnjmlvmjgbgfpp/Mm`kfy`bnsb/]bplewlmj`qfujpwbp`lmwjfmfpf`wlqfpnlnfmwlpeb`vowbg`q/Egjwlgjufqpbppvsvfpwleb`wlqfppfdvmglpsfrvf/]b<_<R<X<\\<Y=m<W<T<Y=m=n=`<]=g<W<R<]=g=n=`=a=n<R<P<y=m<W<T=n<R<_<R<P<Y<Q=c<^=m<Y=i=a=n<R<U<X<\\<Z<Y<]=g<W<T<_<R<X=o<X<Y<Q=`=a=n<R=n<]=g<W<\\=m<Y<]=c<R<X<T<Q=m<Y<]<Y<Q<\\<X<R=m<\\<U=n=h<R=n<R<Q<Y<_<R=m<^<R<T=m<^<R<U<T<_=l=g=n<R<Z<Y<^=m<Y<P=m<^<R=b<W<T=d=`=a=n<T=i<S<R<V<\\<X<Q<Y<U<X<R<P<\\<P<T=l<\\<W<T<]<R=n<Y<P=o=i<R=n=c<X<^=o=i=m<Y=n<T<W=b<X<T<X<Y<W<R<P<T=l<Y=n<Y<]=c=m<^<R<Y<^<T<X<Y=k<Y<_<R=a=n<T<P=m=k<Y=n=n<Y<P=g=j<Y<Q=g=m=n<\\<W<^<Y<X=`=n<Y<P<Y<^<R<X=g=n<Y<]<Y<^=g=d<Y<Q<\\<P<T=n<T<S<\\=n<R<P=o<S=l<\\<^<W<T=j<\\<R<X<Q<\\<_<R<X=g<[<Q<\\=b<P<R<_=o<X=l=o<_<^=m<Y<U<T<X<Y=n<V<T<Q<R<R<X<Q<R<X<Y<W<\\<X<Y<W<Y=m=l<R<V<T=b<Q=c<^<Y=m=`<y=m=n=`=l<\\<[<\\<Q<\\=d<T4K5h5h5k4K5h4F5f4@5i5f4U4B4K4Y4E4K5h4\\5f4U5h5f5k4@4C5f4C4K5h4N5j4K5h4]4C4F4A5o5i4Y5m4A4E5o4K5j4F4K5h5h5f5f5o5d5j4X4D5o4E5m5f5k4K4D5j4K4F4A5d4K4M4O5o4G4]4B5h4K5h4K5h4A4D4C5h5f5h4C4]5d4_4K4Z4V4[4F5o5d5j5k5j4K5o4_4K4A4E5j4K4C5f4K5h4[4D4U5h5f5o4X5o4]4K5f5i5o5j5i5j5k4K4X4]5o4E4]4J5f4_5j4X5f4[5i4K4\\4K4K5h5m5j4X4D4K4D4F4U4D4]4]4A5i4E5o4K5m4E5f5n5d5h5i4]5o4^5o5h5i4E4O4A5i4C5n5h4D5f5f4U5j5f4Y5d4]4E4[4]5f5n4X4K4]5o4@5d4K5h4O4B4]5e5i4U5j4K4K4D4A4G4U4]5d4Z4D4X5o5h5i4_4@5h4D5j4K5j4B4K5h4C5o4F4K4D5o5h5f4E4D4C5d5j4O5f4Z4K5f5d4@4C5m4]5f5n5o4F4D4F4O5m4Z5h5i4[4D4B4K5o4G4]4D4K4]5o4K5m4Z5h4K4A5h5e5j5m4_5k4O5f4K5i4]4C5d4C4O5j5k4K4C5f5j4K4K5h4K5j5i4U4]4Z4F4U5h5i4C4K4B5h5i5i5o5j\x03\x03\x03\x03\x03\x03\x03\x03\x02\x03\x02\x03\x02\x03\x02\x03\x01\x03\x01\x03\x01\x03\x01\x03\x07\x03\x07\x03\x07\x03\x07\x03\x03\x02\x01\0\x07\x06\x05\x04\x04\x05\x06\x07\0\x01\x02\x03\x0B\n\t\b\x0F\x0E\r\f\f\r\x0E\x0F\b\t\n\x0B\x13\x12\x11\x10\x17\x16\x15\x14\x14\x15\x16\x17\x10\x11\x12\x13\x1B\x1A\x19\x18\x1F\x1E\x1D\x1C\x1C\x1D\x1E\x1F\x18\x19\x1A\x1B\x13\x13\x13\x13\x03\x03\x03\x03\x03\x03\x03\x03\x13\x13\x13\x13\x02\x03\x03\x03\x01\x03\x03\x03\x01\x03\x03\x03\x02\x03\x03\x03\x02\x03\x03\x03\0\x03\x03\x03\x13\x13\x03\x02\x03\x03\x03\x02\x03\x03\x13\x13\x03\x02\x03\x03\x03\x0B\x03\x0B\x03\x0B\x03\x0B\x03\x03\x03\x02\x03\x01\x03\0\x03\x07\x03\x06\x03\x05\x03\x04qfplvq`fp`lvmwqjfprvfpwjlmpfrvjsnfmw`lnnvmjwzbubjobaofkjdkojdkwGWG,{kwnonbqhfwjmdhmltofgdfplnfwkjmd`lmwbjmfqgjqf`wjlmpvap`qjafbgufqwjpf`kbqb`wfq!#ubovf>!?,pfof`w=Bvpwqbojb!#`obpp>!pjwvbwjlmbvwklqjwzelooltjmdsqjnbqjozlsfqbwjlm`kboofmdfgfufolsfgbmlmznlvpevm`wjlm#evm`wjlmp`lnsbmjfppwqv`wvqfbdqffnfmw!#wjwof>!slwfmwjbofgv`bwjlmbqdvnfmwppf`lmgbqz`lszqjdkwobmdvbdfpf{`ovpjuf`lmgjwjlm?,elqn=\x0E\tpwbwfnfmwbwwfmwjlmAjldqbskz~#fopf#x\tplovwjlmptkfm#wkf#Bmbozwj`pwfnsobwfpgbmdfqlvppbwfoojwfgl`vnfmwpsvaojpkfqjnslqwbmwsqlwlwzsfjmeovfm`f%qbrvl8?,feef`wjufdfmfqboozwqbmpelqnafbvwjevowqbmpslqwlqdbmjyfgsvaojpkfgsqlnjmfmwvmwjo#wkfwkvnambjoMbwjlmbo#-el`vp+*8lufq#wkf#njdqbwjlmbmmlvm`fgellwfq!=\tf{`fswjlmofpp#wkbmf{sfmpjufelqnbwjlmeqbnftlqhwfqqjwlqzmgj`bwjlm`vqqfmwoz`obppMbnf`qjwj`jpnwqbgjwjlmfopftkfqfBof{bmgfqbssljmwfgnbwfqjbopaqlbg`bpwnfmwjlmfgbeejojbwf?,lswjlm=wqfbwnfmwgjeefqfmw,gfebvow-Sqfpjgfmwlm`oj`h>!ajldqbskzlwkfqtjpfsfqnbmfmwEqbm/KbjpKlooztllgf{sbmpjlmpwbmgbqgp?,pwzof=\tqfgv`wjlmGf`fnafq#sqfefqqfg@bnaqjgdflsslmfmwpAvpjmfpp#`lmevpjlm=\t?wjwof=sqfpfmwfgf{sobjmfgglfp#mlw#tlqogtjgfjmwfqeb`fslpjwjlmpmftpsbsfq?,wbaof=\tnlvmwbjmpojhf#wkf#fppfmwjboejmbm`jbopfof`wjlmb`wjlm>!,babmglmfgFgv`bwjlmsbqpfJmw+pwbajojwzvmbaof#wl?,wjwof=\tqfobwjlmpMlwf#wkbwfeej`jfmwsfqelqnfgwtl#zfbqpPjm`f#wkfwkfqfelqftqbssfq!=bowfqmbwfjm`qfbpfgAbwwof#lesfq`fjufgwqzjmd#wlmf`fppbqzslqwqbzfgfof`wjlmpFojybafwk?,jeqbnf=gjp`lufqzjmpvqbm`fp-ofmdwk8ofdfmgbqzDfldqbskz`bmgjgbwf`lqslqbwfplnfwjnfppfquj`fp-jmkfqjwfg?,pwqlmd=@lnnvmjwzqfojdjlvpol`bwjlmp@lnnjwwffavjogjmdpwkf#tlqogml#olmdfqafdjmmjmdqfefqfm`f`bmmlw#afeqfrvfm`zwzsj`boozjmwl#wkf#qfobwjuf8qf`lqgjmdsqfpjgfmwjmjwjboozwf`kmjrvfwkf#lwkfqjw#`bm#aff{jpwfm`fvmgfqojmfwkjp#wjnfwfofsklmfjwfnp`lsfsqb`wj`fpbgubmwbdf*8qfwvqm#Elq#lwkfqsqlujgjmdgfnl`qb`zalwk#wkf#f{wfmpjufpveefqjmdpvsslqwfg`lnsvwfqp#evm`wjlmsqb`wj`bopbjg#wkbwjw#nbz#afFmdojpk?,eqln#wkf#p`kfgvofggltmolbgp?,obafo=\tpvpsf`wfgnbqdjm9#3psjqjwvbo?,kfbg=\t\tnj`qlplewdqbgvboozgjp`vppfgkf#af`bnff{f`vwjufirvfqz-ipklvpfklog`lmejqnfgsvq`kbpfgojwfqboozgfpwqlzfgvs#wl#wkfubqjbwjlmqfnbjmjmdjw#jp#mlw`fmwvqjfpIbsbmfpf#bnlmd#wkf`lnsofwfgbodlqjwknjmwfqfpwpqfafoojlmvmgfejmfgfm`lvqbdfqfpjybaofjmuloujmdpfmpjwjufvmjufqpbosqlujpjlm+bowklvdkefbwvqjmd`lmgv`wfg*/#tkj`k#`lmwjmvfg.kfbgfq!=Efaqvbqz#mvnfqlvp#lufqeolt9`lnslmfmweqbdnfmwpf{`foofmw`lopsbm>!wf`kmj`bomfbq#wkf#Bgubm`fg#plvq`f#lef{sqfppfgKlmd#Hlmd#Eb`fallhnvowjsof#nf`kbmjpnfofubwjlmleefmpjuf?,elqn=\t\npslmplqfggl`vnfmw-lq#%rvlw8wkfqf#bqfwklpf#tklnlufnfmwpsql`fppfpgjeej`vowpvanjwwfgqf`lnnfmg`lmujm`fgsqlnlwjmd!#tjgwk>!-qfsob`f+`obppj`bo`lbojwjlmkjp#ejqpwgf`jpjlmpbppjpwbmwjmgj`bwfgfulovwjlm.tqbssfq!fmlvdk#wlbolmd#wkfgfojufqfg..=\x0E\t?\"..Bnfqj`bm#sqlwf`wfgMlufnafq#?,pwzof=?evqmjwvqfJmwfqmfw##lmaovq>!pvpsfmgfgqf`jsjfmwabpfg#lm#Nlqflufq/balojpkfg`loof`wfgtfqf#nbgffnlwjlmbofnfqdfm`zmbqqbwjufbgul`bwfps{8alqgfq`lnnjwwfggjq>!owq!fnsolzffpqfpfbq`k-#pfof`wfgpv``fpplq`vpwlnfqpgjpsobzfgPfswfnafqbgg@obpp+Eb`fallh#pvddfpwfgbmg#obwfqlsfqbwjmdfobalqbwfPlnfwjnfpJmpwjwvwf`fqwbjmozjmpwboofgelooltfqpIfqvpbofnwkfz#kbuf`lnsvwjmddfmfqbwfgsqlujm`fpdvbqbmwffbqajwqbqzqf`ldmjyftbmwfg#wls{8tjgwk9wkflqz#leafkbujlvqTkjof#wkffpwjnbwfgafdbm#wl#jw#af`bnfnbdmjwvgfnvpw#kbufnlqf#wkbmGjqf`wlqzf{wfmpjlmpf`qfwbqzmbwvqboozl``vqqjmdubqjbaofpdjufm#wkfsobwelqn-?,obafo=?ebjofg#wl`lnslvmgphjmgp#le#pl`jfwjfpbolmdpjgf#..%dw8\t\tplvwktfpwwkf#qjdkwqbgjbwjlmnbz#kbuf#vmfp`bsf+pslhfm#jm!#kqfe>!,sqldqbnnflmoz#wkf#`lnf#eqlngjqf`wlqzavqjfg#jmb#pjnjobqwkfz#tfqf?,elmw=?,Mlqtfdjbmpsf`jejfgsqlgv`jmdsbppfmdfq+mft#Gbwfwfnslqbqzej`wjlmboBewfq#wkffrvbwjlmpgltmolbg-qfdvobqozgfufolsfqbaluf#wkfojmhfg#wlskfmlnfmbsfqjlg#lewllowjs!=pvapwbm`fbvwlnbwj`bpsf`w#leBnlmd#wkf`lmmf`wfgfpwjnbwfpBjq#Elq`fpzpwfn#lelaif`wjufjnnfgjbwfnbhjmd#jwsbjmwjmdp`lmrvfqfgbqf#pwjoosql`fgvqfdqltwk#lekfbgfg#azFvqlsfbm#gjujpjlmpnlof`vofpeqbm`kjpfjmwfmwjlmbwwqb`wfg`kjogkllgbopl#vpfggfgj`bwfgpjmdbslqfgfdqff#leebwkfq#le`lmeoj`wp?,b=?,s=\t`bnf#eqlntfqf#vpfgmlwf#wkbwqf`fjujmdF{f`vwjuffufm#nlqfb``fpp#wl`lnnbmgfqSlojwj`bonvpj`jbmpgfoj`jlvpsqjplmfqpbgufmw#leVWE.;!#,=?\"X@GBWBX!=@lmwb`wPlvwkfqm#ad`lolq>!pfqjfp#le-#Jw#tbp#jm#Fvqlsfsfqnjwwfgubojgbwf-bssfbqjmdleej`jboppfqjlvpoz.obmdvbdfjmjwjbwfgf{wfmgjmdolmd.wfqnjmeobwjlmpv`k#wkbwdfw@llhjfnbqhfg#az?,avwwlm=jnsofnfmwavw#jw#jpjm`qfbpfpgltm#wkf#qfrvjqjmdgfsfmgfmw..=\t?\"..#jmwfqujftTjwk#wkf#`lsjfp#le`lmpfmpvptbp#avjowUfmfyvfob+elqnfqozwkf#pwbwfsfqplmmfopwqbwfdj`ebulvq#lejmufmwjlmTjhjsfgjb`lmwjmfmwujqwvbooztkj`k#tbpsqjm`jsof@lnsofwf#jgfmwj`bopklt#wkbwsqjnjwjufbtbz#eqlnnlof`vobqsqf`jpfozgjpploufgVmgfq#wkfufqpjlm>!=%maps8?,Jw#jp#wkf#Wkjp#jp#tjoo#kbuflqdbmjpnpplnf#wjnfEqjfgqj`ktbp#ejqpwwkf#lmoz#eb`w#wkbwelqn#jg>!sqf`fgjmdWf`kmj`boskzpj`jpwl``vqp#jmmbujdbwlqpf`wjlm!=psbm#jg>!plvdkw#wlafolt#wkfpvqujujmd~?,pwzof=kjp#gfbwkbp#jm#wkf`bvpfg#azsbqwjboozf{jpwjmd#vpjmd#wkftbp#djufmb#ojpw#leofufop#lemlwjlm#leLeej`jbo#gjpnjppfgp`jfmwjpwqfpfnaofpgvsoj`bwff{solpjufqf`lufqfgboo#lwkfqdboofqjfpxsbggjmd9sflsof#leqfdjlm#lebggqfppfpbppl`jbwfjnd#bow>!jm#nlgfqmpklvog#afnfwklg#leqfslqwjmdwjnfpwbnsmffgfg#wlwkf#Dqfbwqfdbqgjmdpffnfg#wlujftfg#bpjnsb`w#lmjgfb#wkbwwkf#Tlqogkfjdkw#lef{sbmgjmdWkfpf#bqf`vqqfmw!=`bqfevooznbjmwbjmp`kbqdf#le@obppj`bobggqfppfgsqfgj`wfgltmfqpkjs?gju#jg>!qjdkw!=\x0E\tqfpjgfm`fofbuf#wkf`lmwfmw!=bqf#lewfm##~*+*8\x0E\tsqlabaoz#Sqlefpplq.avwwlm!#qfpslmgfgpbzp#wkbwkbg#wl#afsob`fg#jmKvmdbqjbmpwbwvp#lepfqufp#bpVmjufqpbof{f`vwjlmbddqfdbwfelq#tkj`kjmef`wjlmbdqffg#wlkltfufq/#slsvobq!=sob`fg#lm`lmpwqv`wfof`wlqbopznalo#lejm`ovgjmdqfwvqm#wlbq`kjwf`w@kqjpwjbmsqfujlvp#ojujmd#jmfbpjfq#wlsqlefpplq\t%ow8\"..#feef`w#lebmbozwj`ptbp#wbhfmtkfqf#wkfwllh#lufqafojfe#jmBeqjhbbmpbp#ebq#bpsqfufmwfgtlqh#tjwkb#psf`jbo?ejfogpfw@kqjpwnbpQfwqjfufg\t\tJm#wkf#ab`h#jmwlmlqwkfbpwnbdbyjmfp=?pwqlmd=`lnnjwwffdlufqmjmddqlvsp#lepwlqfg#jmfpwbaojpkb#dfmfqbojwp#ejqpwwkfjq#ltmslsvobwfgbm#laif`w@bqjaafbmboolt#wkfgjpwqj`wptjp`lmpjmol`bwjlm-8#tjgwk9#jmkbajwfgPl`jbojpwIbmvbqz#2?,ellwfq=pjnjobqoz`klj`f#lewkf#pbnf#psf`jej`#avpjmfpp#Wkf#ejqpw-ofmdwk8#gfpjqf#wlgfbo#tjwkpjm`f#wkfvpfqBdfmw`lm`fjufgjmgf{-sksbp#%rvlw8fmdbdf#jmqf`fmwoz/eft#zfbqptfqf#bopl\t?kfbg=\t?fgjwfg#azbqf#hmltm`jwjfp#jmb``fpphfz`lmgfnmfgbopl#kbufpfquj`fp/ebnjoz#leP`kllo#le`lmufqwfgmbwvqf#le#obmdvbdfnjmjpwfqp?,laif`w=wkfqf#jp#b#slsvobqpfrvfm`fpbgul`bwfgWkfz#tfqfbmz#lwkfqol`bwjlm>fmwfq#wkfnv`k#nlqfqfeof`wfgtbp#mbnfglqjdjmbo#b#wzsj`botkfm#wkfzfmdjmffqp`lvog#mlwqfpjgfmwptfgmfpgbzwkf#wkjqg#sqlgv`wpIbmvbqz#1tkbw#wkfzb#`fqwbjmqfb`wjlmpsql`fpplqbewfq#kjpwkf#obpw#`lmwbjmfg!=?,gju=\t?,b=?,wg=gfsfmg#lmpfbq`k!=\tsjf`fp#le`lnsfwjmdQfefqfm`fwfmmfppfftkj`k#kbp#ufqpjlm>?,psbm=#??,kfbgfq=djufp#wkfkjpwlqjbmubovf>!!=sbggjmd93ujft#wkbwwldfwkfq/wkf#nlpw#tbp#elvmgpvapfw#lebwwb`h#lm`kjogqfm/sljmwp#lesfqplmbo#slpjwjlm9boofdfgoz@ofufobmgtbp#obwfqbmg#bewfqbqf#djufmtbp#pwjoop`qloojmdgfpjdm#lenbhfp#wkfnv`k#ofppBnfqj`bmp-\t\tBewfq#/#avw#wkfNvpfvn#leolvjpjbmb+eqln#wkfnjmmfplwbsbqwj`ofpb#sql`fppGlnjmj`bmulovnf#leqfwvqmjmdgfefmpjuf33s{\x7Fqjdknbgf#eqlnnlvpflufq!#pwzof>!pwbwfp#le+tkj`k#jp`lmwjmvfpEqbm`jp`lavjogjmd#tjwklvw#btjwk#plnftkl#tlvogb#elqn#leb#sbqw#leafelqf#jwhmltm#bp##Pfquj`fpol`bwjlm#bmg#lewfmnfbpvqjmdbmg#jw#jpsbsfqab`hubovfp#le\x0E\t?wjwof=>#tjmglt-gfwfqnjmffq%rvlw8#sobzfg#azbmg#fbqoz?,`fmwfq=eqln#wkjpwkf#wkqffsltfq#bmgle#%rvlw8jmmfqKWNO?b#kqfe>!z9jmojmf8@kvq`k#lewkf#fufmwufqz#kjdkleej`jbo#.kfjdkw9#`lmwfmw>!,`dj.ajm,wl#`qfbwfbeqjhbbmpfpsfqbmwleqbm/Kbjpobwujf)Mvojfwvuj)_(`f)Mwjmb(af)Mwjmb\fUh\fT{\fTN\n{I\np@\x04Fr\x0BBl\bQ\x7F\tA{\x0BUm\x05Gx\tA{\x01yp\x06YA\0zX\bTV\bWl\bUd\x04BM\x0BB{\npV\x0B@x\x04B\\\np@\x04Db\x04Gz\tal\npa\tfM\tuD\bV~\x04mx\x0BQ}\ndS\tp\\\bVK\bS]\bU|\x05oD\tkV\x0Bed\x0BHR\nb~\x04M`\nJp\x05oD\x04|Q\nLP\x04Sw\bTl\nAI\nxC\bWt\tBq\x05F`\x04Cm\x0BLm\tKx\t}t\bPv\ny\\\naB\tV\x7F\nZd\x04XU\x04li\tfr\ti@\tBH\x04BD\x04BV\t`V\n[]\tp_\tTn\n~A\nxR\tuD\t`{\bV@\tTn\tHK\tAJ\x0Bxs\x04Zf\nqI\x04Zf\x0BBM\x0B|j\t}t\bSM\nmC\x0BQ}pfquj`jlpbqw/A`volbqdfmwjmbabq`folmb`vborvjfqsvaoj`bglsqlgv`wlpslo/Awj`bqfpsvfpwbtjhjsfgjbpjdvjfmwfa/Vprvfgb`lnvmjgbgpfdvqjgbgsqjm`jsbosqfdvmwbp`lmwfmjglqfpslmgfqufmfyvfobsqlaofnbpgj`jfnaqfqfob`j/_mmlujfnaqfpjnjobqfpsqlzf`wlpsqldqbnbpjmpwjwvwlb`wjujgbgfm`vfmwqbf`lmln/Abjn/Mdfmfp`lmwb`wbqgfp`bqdbqmf`fpbqjlbwfm`j/_mwfo/Eelml`lnjpj/_m`bm`jlmfp`bsb`jgbgfm`lmwqbqbm/Mojpjpebulqjwlpw/Eqnjmlpsqlujm`jbfwjrvfwbpfofnfmwlpevm`jlmfpqfpvowbgl`bq/M`wfqsqlsjfgbgsqjm`jsjlmf`fpjgbgnvmj`jsbo`qfb`j/_mgfp`bqdbpsqfpfm`jb`lnfq`jbolsjmjlmfpfifq`j`jlfgjwlqjbopbobnbm`bdlmy/Mofygl`vnfmwlsfo/A`vobqf`jfmwfpdfmfqbofpwbqqbdlmbsq/M`wj`bmlufgbgfpsqlsvfpwbsb`jfmwfpw/E`mj`bplaifwjulp`lmwb`wlp\fHB\fIk\fHn\fH^\fHS\fHc\fHU\fId\fHn\fH{\fHC\fHR\fHT\fHR\fHI\fHc\fHY\fHn\fH\\\fHU\fIk\fHy\fIg\fHd\fHy\fIm\fHw\fH\\\fHU\fHR\fH@\fHR\fHJ\fHy\fHU\fHR\fHT\fHA\fIl\fHU\fIm\fHc\fH\\\fHU\fIl\fHB\fId\fHn\fHJ\fHS\fHD\fH@\fHR\fHHgjsolgl`p\fHT\fHB\fHC\fH\\\fIn\fHF\fHD\fHR\fHB\fHF\fHH\fHR\fHG\fHS\fH\\\fHx\fHT\fHH\fHH\fH\\\fHU\fH^\fIg\fH{\fHU\fIm\fHj\fH@\fHR\fH\\\fHJ\fIk\fHZ\fHU\fIm\fHd\fHz\fIk\fH^\fHC\fHJ\fHS\fHy\fHR\fHB\fHY\fIk\fH@\fHH\fIl\fHD\fH@\fIl\fHv\fHB\fI`\fHH\fHT\fHR\fH^\fH^\fIk\fHz\fHp\fIe\fH@\fHB\fHJ\fHJ\fHH\fHI\fHR\fHD\fHU\fIl\fHZ\fHU\fH\\\fHi\fH^\fH{\fHy\fHA\fIl\fHD\fH{\fH\\\fHF\fHR\fHT\fH\\\fHR\fHH\fHy\fHS\fHc\fHe\fHT\fIk\fH{\fHC\fIl\fHU\fIn\fHm\fHj\fH{\fIk\fHs\fIl\fHB\fHz\fIg\fHp\fHy\fHR\fH\\\fHi\fHA\fIl\fH{\fHC\fIk\fHH\fIm\fHB\fHY\fIg\fHs\fHJ\fIk\fHn\fHi\fH{\fH\\\fH|\fHT\fIk\fHB\fIk\fH^\fH^\fH{\fHR\fHU\fHR\fH^\fHf\fHF\fH\\\fHv\fHR\fH\\\fH|\fHT\fHR\fHJ\fIk\fH\\\fHp\fHS\fHT\fHJ\fHS\fH^\fH@\fHn\fHJ\fH@\fHD\fHR\fHU\fIn\fHn\fH^\fHR\fHz\fHp\fIl\fHH\fH@\fHs\fHD\fHB\fHS\fH^\fHk\fHT\fIk\fHj\fHD\fIk\fHD\fHC\fHR\fHy\fIm\fH^\fH^\fIe\fH{\fHA\fHR\fH{\fH\\\fIk\fH^\fHp\fH{\fHU\fH\\\fHR\fHB\fH^\fH{\fIk\fHF\fIk\fHp\fHU\fHR\fHI\fHk\fHT\fIl\fHT\fHU\fIl\fHy\fH^\fHR\fHL\fIl\fHy\fHU\fHR\fHm\fHJ\fIn\fH\\\fHH\fHU\fHH\fHT\fHR\fHH\fHC\fHR\fHJ\fHj\fHC\fHR\fHF\fHR\fHy\fHy\fI`\fHD\fHZ\fHR\fHB\fHJ\fIk\fHz\fHC\fHU\fIl\fH\\\fHR\fHC\fHz\fIm\fHJ\fH^\fH{\fIl`bwfdlqjfpf{sfqjfm`f?,wjwof=\x0E\t@lszqjdkw#ibubp`qjsw`lmgjwjlmpfufqzwkjmd?s#`obpp>!wf`kmloldzab`hdqlvmg?b#`obpp>!nbmbdfnfmw%`lsz8#132ibubP`qjsw`kbqb`wfqpaqfbg`qvnawkfnpfoufpklqjylmwbodlufqmnfmw@bojelqmjbb`wjujwjfpgjp`lufqfgMbujdbwjlmwqbmpjwjlm`lmmf`wjlmmbujdbwjlmbssfbqbm`f?,wjwof=?n`kf`hal{!#wf`kmjrvfpsqlwf`wjlmbssbqfmwozbp#tfoo#bpvmw$/#$VB.qfplovwjlmlsfqbwjlmpwfofujpjlmwqbmpobwfgTbpkjmdwlmmbujdbwlq-#>#tjmglt-jnsqfppjlm%ow8aq%dw8ojwfqbwvqfslsvobwjlmad`lolq>! fpsf`jbooz#`lmwfmw>!sqlgv`wjlmmftpofwwfqsqlsfqwjfpgfejmjwjlmofbgfqpkjsWf`kmloldzSbqojbnfmw`lnsbqjplmvo#`obpp>!-jmgf{Le+!`lm`ovpjlmgjp`vppjlm`lnslmfmwpajloldj`boQfulovwjlm\\`lmwbjmfqvmgfqpwllgmlp`qjsw=?sfqnjppjlmfb`k#lwkfqbwnlpskfqf#lmel`vp>!?elqn#jg>!sql`fppjmdwkjp-ubovfdfmfqbwjlm@lmefqfm`fpvapfrvfmwtfoo.hmltmubqjbwjlmpqfsvwbwjlmskfmlnfmlmgjp`jsojmfoldl-smd!#+gl`vnfmw/alvmgbqjfpf{sqfppjlmpfwwofnfmwAb`hdqlvmglvw#le#wkffmwfqsqjpf+!kwwsp9!#vmfp`bsf+!sbpptlqg!#gfnl`qbwj`?b#kqfe>!,tqbssfq!=\tnfnafqpkjsojmdvjpwj`s{8sbggjmdskjolplskzbppjpwbm`fvmjufqpjwzeb`jojwjfpqf`ldmjyfgsqfefqfm`fje#+wzsflenbjmwbjmfgul`bavobqzkzslwkfpjp-pvanjw+*8%bns8maps8bmmlwbwjlmafkjmg#wkfElvmgbwjlmsvaojpkfq!bppvnswjlmjmwqlgv`fg`lqqvswjlmp`jfmwjpwpf{soj`jwozjmpwfbg#legjnfmpjlmp#lm@oj`h>!`lmpjgfqfggfsbqwnfmwl``vsbwjlmpllm#bewfqjmufpwnfmwsqlmlvm`fgjgfmwjejfgf{sfqjnfmwNbmbdfnfmwdfldqbskj`!#kfjdkw>!ojmh#qfo>!-qfsob`f+,gfsqfppjlm`lmefqfm`fsvmjpknfmwfojnjmbwfgqfpjpwbm`fbgbswbwjlmlsslpjwjlmtfoo#hmltmpvssofnfmwgfwfqnjmfgk2#`obpp>!3s{8nbqdjmnf`kbmj`bopwbwjpwj`p`fofaqbwfgDlufqmnfmw\t\tGvqjmd#wgfufolsfqpbqwjej`jbofrvjubofmwlqjdjmbwfg@lnnjppjlmbwwb`knfmw?psbm#jg>!wkfqf#tfqfMfgfqobmgpafzlmg#wkfqfdjpwfqfgilvqmbojpweqfrvfmwozboo#le#wkfobmd>!fm!#?,pwzof=\x0E\tbaplovwf8#pvsslqwjmdf{wqfnfoz#nbjmpwqfbn?,pwqlmd=#slsvobqjwzfnsolznfmw?,wbaof=\x0E\t#`lopsbm>!?,elqn=\t##`lmufqpjlmbalvw#wkf#?,s=?,gju=jmwfdqbwfg!#obmd>!fmSlqwvdvfpfpvapwjwvwfjmgjujgvbojnslppjaofnvowjnfgjbbonlpw#boos{#plojg# bsbqw#eqlnpvaif`w#wljm#Fmdojpk`qjwj`jyfgf{`fsw#elqdvjgfojmfplqjdjmboozqfnbqhbaofwkf#pf`lmgk1#`obpp>!?b#wjwof>!+jm`ovgjmdsbqbnfwfqpsqlkjajwfg>#!kwws9,,gj`wjlmbqzsfq`fswjlmqfulovwjlmelvmgbwjlms{8kfjdkw9pv``fppevopvsslqwfqpnjoofmmjvnkjp#ebwkfqwkf#%rvlw8ml.qfsfbw8`lnnfq`jbojmgvpwqjbofm`lvqbdfgbnlvmw#le#vmleej`jbofeej`jfm`zQfefqfm`fp`llqgjmbwfgjp`objnfqf{sfgjwjlmgfufolsjmd`bo`vobwfgpjnsojejfgofdjwjnbwfpvapwqjmd+3!#`obpp>!`lnsofwfozjoovpwqbwfejuf#zfbqpjmpwqvnfmwSvaojpkjmd2!#`obpp>!spz`kloldz`lmejgfm`fmvnafq#le#bapfm`f#leel`vpfg#lmiljmfg#wkfpwqv`wvqfpsqfujlvpoz=?,jeqbnf=lm`f#bdbjmavw#qbwkfqjnnjdqbmwple#`lvqpf/b#dqlvs#leOjwfqbwvqfVmojhf#wkf?,b=%maps8\tevm`wjlm#jw#tbp#wkf@lmufmwjlmbvwlnlajofSqlwfpwbmwbddqfppjufbewfq#wkf#Pjnjobqoz/!#,=?,gju=`loof`wjlm\x0E\tevm`wjlmujpjajojwzwkf#vpf#leulovmwffqpbwwqb`wjlmvmgfq#wkf#wkqfbwfmfg)?\"X@GBWBXjnslqwbm`fjm#dfmfqbowkf#obwwfq?,elqn=\t?,-jmgf{Le+$j#>#38#j#?gjeefqfm`fgfulwfg#wlwqbgjwjlmppfbq`k#elqvowjnbwfozwlvqmbnfmwbwwqjavwfppl.`boofg#~\t?,pwzof=fubovbwjlmfnskbpjyfgb``fppjaof?,pf`wjlm=pv``fppjlmbolmd#tjwkNfbmtkjof/jmgvpwqjfp?,b=?aq#,=kbp#af`lnfbpsf`wp#leWfofujpjlmpveej`jfmwabphfwabooalwk#pjgfp`lmwjmvjmdbm#bqwj`of?jnd#bow>!bgufmwvqfpkjp#nlwkfqnbm`kfpwfqsqjm`jsofpsbqwj`vobq`lnnfmwbqzfeef`wp#legf`jgfg#wl!=?pwqlmd=svaojpkfqpIlvqmbo#legjeej`vowzeb`jojwbwfb``fswbaofpwzof-`pp!\nevm`wjlm#jmmlubwjlm=@lszqjdkwpjwvbwjlmptlvog#kbufavpjmfppfpGj`wjlmbqzpwbwfnfmwplewfm#vpfgsfqpjpwfmwjm#Ibmvbqz`lnsqjpjmd?,wjwof=\t\ngjsolnbwj``lmwbjmjmdsfqelqnjmdf{wfmpjlmpnbz#mlw#af`lm`fsw#le#lm`oj`h>!Jw#jp#boplejmbm`jbo#nbhjmd#wkfOv{fnalvqdbggjwjlmbobqf#`boofgfmdbdfg#jm!p`qjsw!*8avw#jw#tbpfof`wqlmj`lmpvanjw>!\t?\"..#Fmg#fof`wqj`boleej`jboozpvddfpwjlmwls#le#wkfvmojhf#wkfBvpwqbojbmLqjdjmboozqfefqfm`fp\t?,kfbg=\x0E\tqf`ldmjpfgjmjwjbojyfojnjwfg#wlBof{bmgqjbqfwjqfnfmwBgufmwvqfpelvq#zfbqp\t\t%ow8\"..#jm`qfbpjmdgf`lqbwjlmk0#`obpp>!lqjdjmp#lelaojdbwjlmqfdvobwjlm`obppjejfg+evm`wjlm+bgubmwbdfpafjmd#wkf#kjpwlqjbmp?abpf#kqfeqfsfbwfgoztjoojmd#wl`lnsbqbaofgfpjdmbwfgmlnjmbwjlmevm`wjlmbojmpjgf#wkfqfufobwjlmfmg#le#wkfp#elq#wkf#bvwklqjyfgqfevpfg#wlwbhf#sob`fbvwlmlnlvp`lnsqlnjpfslojwj`bo#qfpwbvqbmwwtl#le#wkfEfaqvbqz#1rvbojwz#leptelaif`w-vmgfqpwbmgmfbqoz#bootqjwwfm#azjmwfqujftp!#tjgwk>!2tjwkgqbtboeolbw9ofewjp#vpvbooz`bmgjgbwfpmftpsbsfqpnzpwfqjlvpGfsbqwnfmwafpw#hmltmsbqojbnfmwpvssqfppfg`lmufmjfmwqfnfnafqfggjeefqfmw#pzpwfnbwj`kbp#ofg#wlsqlsbdbmgb`lmwqloofgjmeovfm`fp`fqfnlmjbosql`objnfgSqlwf`wjlmoj#`obpp>!P`jfmwjej``obpp>!ml.wqbgfnbqhpnlqf#wkbm#tjgfpsqfbgOjafqbwjlmwllh#sob`fgbz#le#wkfbp#olmd#bpjnsqjplmfgBggjwjlmbo\t?kfbg=\t?nObalqbwlqzMlufnafq#1f{`fswjlmpJmgvpwqjboubqjfwz#leeolbw9#ofeGvqjmd#wkfbppfppnfmwkbuf#affm#gfbop#tjwkPwbwjpwj`pl``vqqfm`f,vo=?,gju=`ofbqej{!=wkf#svaoj`nbmz#zfbqptkj`k#tfqflufq#wjnf/pzmlmznlvp`lmwfmw!=\tsqfpvnbaozkjp#ebnjozvpfqBdfmw-vmf{sf`wfgjm`ovgjmd#`kboofmdfgb#njmlqjwzvmgfejmfg!afolmdp#wlwbhfm#eqlnjm#L`wlafqslpjwjlm9#pbjg#wl#afqfojdjlvp#Efgfqbwjlm#qltpsbm>!lmoz#b#eftnfbmw#wkbwofg#wl#wkf..=\x0E\t?gju#?ejfogpfw=Bq`kajpkls#`obpp>!mlafjmd#vpfgbssqlb`kfpsqjujofdfpmlp`qjsw=\tqfpvowp#jmnbz#af#wkfFbpwfq#fddnf`kbmjpnpqfbplmbaofSlsvobwjlm@loof`wjlmpfof`wfg!=mlp`qjsw=\x0E,jmgf{-sksbqqjubo#le.ippgh$**8nbmbdfg#wljm`lnsofwf`bpvbowjfp`lnsofwjlm@kqjpwjbmpPfswfnafq#bqjwknfwj`sql`fgvqfpnjdkw#kbufSqlgv`wjlmjw#bssfbqpSkjolplskzeqjfmgpkjsofbgjmd#wldjujmd#wkfwltbqg#wkfdvbqbmwffggl`vnfmwfg`lolq9 333ujgfl#dbnf`lnnjppjlmqfeof`wjmd`kbmdf#wkfbppl`jbwfgpbmp.pfqjelmhfzsqfpp8#sbggjmd9Kf#tbp#wkfvmgfqozjmdwzsj`booz#/#bmg#wkf#pq`Fofnfmwpv``fppjufpjm`f#wkf#pklvog#af#mfwtlqhjmdb``lvmwjmdvpf#le#wkfoltfq#wkbmpkltp#wkbw?,psbm=\t\n\n`lnsobjmwp`lmwjmvlvprvbmwjwjfpbpwqlmlnfqkf#gjg#mlwgvf#wl#jwpbssojfg#wlbm#bufqbdffeelqwp#wlwkf#evwvqfbwwfnsw#wlWkfqfelqf/`bsbajojwzQfsvaoj`bmtbp#elqnfgFof`wqlmj`hjolnfwfqp`kboofmdfpsvaojpkjmdwkf#elqnfqjmgjdfmlvpgjqf`wjlmppvapjgjbqz`lmpsjqb`zgfwbjop#lebmg#jm#wkfbeelqgbaofpvapwbm`fpqfbplm#elq`lmufmwjlmjwfnwzsf>!baplovwfozpvsslpfgozqfnbjmfg#bbwwqb`wjufwqbufoojmdpfsbqbwfozel`vpfp#lmfofnfmwbqzbssoj`baofelvmg#wkbwpwzofpkffwnbmvp`qjswpwbmgp#elq#ml.qfsfbw+plnfwjnfp@lnnfq`jbojm#Bnfqj`bvmgfqwbhfmrvbqwfq#lebm#f{bnsofsfqplmboozjmgf{-sks<?,avwwlm=\tsfq`fmwbdfafpw.hmltm`qfbwjmd#b!#gjq>!owqOjfvwfmbmw\t?gju#jg>!wkfz#tlvogbajojwz#lenbgf#vs#lemlwfg#wkbw`ofbq#wkbwbqdvf#wkbwwl#bmlwkfq`kjogqfm$psvqslpf#leelqnvobwfgabpfg#vslmwkf#qfdjlmpvaif`w#lesbppfmdfqpslppfppjlm-\t\tJm#wkf#Afelqf#wkfbewfqtbqgp`vqqfmwoz#b`qlpp#wkfp`jfmwjej``lnnvmjwz-`bsjwbojpnjm#Dfqnbmzqjdkw.tjmdwkf#pzpwfnPl`jfwz#leslojwj`jbmgjqf`wjlm9tfmw#lm#wlqfnlubo#le#Mft#Zlqh#bsbqwnfmwpjmgj`bwjlmgvqjmd#wkfvmofpp#wkfkjpwlqj`bokbg#affm#bgfejmjwjufjmdqfgjfmwbwwfmgbm`f@fmwfq#elqsqlnjmfm`fqfbgzPwbwfpwqbwfdjfpavw#jm#wkfbp#sbqw#le`lmpwjwvwf`objn#wkbwobalqbwlqz`lnsbwjaofebjovqf#le/#pv`k#bp#afdbm#tjwkvpjmd#wkf#wl#sqlujgfefbwvqf#leeqln#tkj`k,!#`obpp>!dfloldj`bopfufqbo#legfojafqbwfjnslqwbmw#klogp#wkbwjmd%rvlw8#ubojdm>wlswkf#Dfqnbmlvwpjgf#lemfdlwjbwfgkjp#`bqffqpfsbqbwjlmjg>!pfbq`ktbp#`boofgwkf#elvqwkqf`qfbwjlmlwkfq#wkbmsqfufmwjlmtkjof#wkf#fgv`bwjlm/`lmmf`wjmdb``vqbwfoztfqf#avjowtbp#hjoofgbdqffnfmwpnv`k#nlqf#Gvf#wl#wkftjgwk9#233plnf#lwkfqHjmdgln#lewkf#fmwjqfebnlvp#elqwl#`lmmf`wlaif`wjufpwkf#Eqfm`ksflsof#bmgefbwvqfg!=jp#pbjg#wlpwqv`wvqboqfefqfmgvnnlpw#lewfmb#pfsbqbwf.=\t?gju#jg#Leej`jbo#tlqogtjgf-bqjb.obafowkf#sobmfwbmg#jw#tbpg!#ubovf>!ollhjmd#bwafmfej`jbobqf#jm#wkfnlmjwlqjmdqfslqwfgozwkf#nlgfqmtlqhjmd#lmbooltfg#wltkfqf#wkf#jmmlubwjuf?,b=?,gju=plvmgwqb`hpfbq`kElqnwfmg#wl#afjmsvw#jg>!lsfmjmd#leqfpwqj`wfgbglswfg#azbggqfppjmdwkfloldjbmnfwklgp#leubqjbmw#le@kqjpwjbm#ufqz#obqdfbvwlnlwjufaz#ebq#wkfqbmdf#eqlnsvqpvjw#leeloolt#wkfaqlvdkw#wljm#Fmdobmgbdqff#wkbwb``vpfg#le`lnfp#eqlnsqfufmwjmdgju#pwzof>kjp#lq#kfqwqfnfmglvpeqffgln#le`lm`fqmjmd3#2fn#2fn8Abphfwaboo,pwzof-`ppbm#fbqojfqfufm#bewfq,!#wjwof>!-`ln,jmgf{wbhjmd#wkfsjwwpavqdk`lmwfmw!=\x0E?p`qjsw=+ewvqmfg#lvwkbujmd#wkf?,psbm=\x0E\t#l``bpjlmboaf`bvpf#jwpwbqwfg#wlskzpj`booz=?,gju=\t##`qfbwfg#az@vqqfmwoz/#ad`lolq>!wbajmgf{>!gjpbpwqlvpBmbozwj`p#bopl#kbp#b=?gju#jg>!?,pwzof=\t?`boofg#elqpjmdfq#bmg-pq`#>#!,,ujlobwjlmpwkjp#sljmw`lmpwbmwozjp#ol`bwfgqf`lqgjmdpg#eqln#wkfmfgfqobmgpslqwvdv/Fp;N;};D;u;F5m4K4]4_7`gfpbqqlool`lnfmwbqjlfgv`b`j/_mpfswjfnaqfqfdjpwqbglgjqf``j/_mvaj`b`j/_msvaoj`jgbgqfpsvfpwbpqfpvowbglpjnslqwbmwfqfpfqubglpbqw/A`volpgjefqfmwfppjdvjfmwfpqfs/Vaoj`bpjwvb`j/_mnjmjpwfqjlsqjub`jgbggjqf`wlqjlelqnb`j/_mslaob`j/_msqfpjgfmwf`lmw", "fmjglpb``fplqjlpwf`kmlqbwjsfqplmbofp`bwfdlq/Abfpsf`jbofpgjpslmjaofb`wvbojgbgqfefqfm`jbuboobglojgajaojlwf`bqfob`jlmfp`bofmgbqjlslo/Awj`bpbmwfqjlqfpgl`vnfmwlpmbwvqbofybnbwfqjbofpgjefqfm`jbf`lm/_nj`bwqbmpslqwfqlgq/Advfysbqwj`jsbqfm`vfmwqbmgjp`vpj/_mfpwqv`wvqbevmgb`j/_meqf`vfmwfpsfqnbmfmwfwlwbonfmwf<P<R<Z<Q<R<]=o<X<Y=n<P<R<Z<Y=n<^=l<Y<P=c=n<\\<V<Z<Y=k=n<R<]=g<]<R<W<Y<Y<R=k<Y<Q=`=a=n<R<_<R<V<R<_<X<\\<S<R=m<W<Y<^=m<Y<_<R=m<\\<U=n<Y=k<Y=l<Y<[<P<R<_=o=n=m<\\<U=n<\\<Z<T<[<Q<T<P<Y<Z<X=o<]=o<X=o=n<s<R<T=m<V<[<X<Y=m=`<^<T<X<Y<R=m<^=c<[<T<Q=o<Z<Q<R=m<^<R<Y<U<W=b<X<Y<U<S<R=l<Q<R<P<Q<R<_<R<X<Y=n<Y<U=m<^<R<T=i<S=l<\\<^<\\=n<\\<V<R<U<P<Y=m=n<R<T<P<Y<Y=n<Z<T<[<Q=`<R<X<Q<R<U<W=o=k=d<Y<S<Y=l<Y<X=k<\\=m=n<T=k<\\=m=n=`=l<\\<]<R=n<Q<R<^=g=i<S=l<\\<^<R=m<R<]<R<U<S<R=n<R<P<P<Y<Q<Y<Y=k<T=m<W<Y<Q<R<^=g<Y=o=m<W=o<_<R<V<R<W<R<Q<\\<[<\\<X=n<\\<V<R<Y=n<R<_<X<\\<S<R=k=n<T<s<R=m<W<Y=n<\\<V<T<Y<Q<R<^=g<U=m=n<R<T=n=n<\\<V<T=i=m=l<\\<[=o<M<\\<Q<V=n=h<R=l=o<P<v<R<_<X<\\<V<Q<T<_<T=m<W<R<^<\\<Q<\\=d<Y<U<Q<\\<U=n<T=m<^<R<T<P=m<^=c<[=`<W=b<]<R<U=k<\\=m=n<R=m=l<Y<X<T<v=l<R<P<Y<H<R=l=o<P=l=g<Q<V<Y=m=n<\\<W<T<S<R<T=m<V=n=g=m=c=k<P<Y=m=c=j=j<Y<Q=n=l=n=l=o<X<\\=m<\\<P=g=i=l=g<Q<V<\\<q<R<^=g<U=k<\\=m<R<^<P<Y=m=n<\\=h<T<W=`<P<P<\\=l=n<\\=m=n=l<\\<Q<P<Y=m=n<Y=n<Y<V=m=n<Q<\\=d<T=i<P<T<Q=o=n<T<P<Y<Q<T<T<P<Y=b=n<Q<R<P<Y=l<_<R=l<R<X=m<\\<P<R<P=a=n<R<P=o<V<R<Q=j<Y=m<^<R<Y<P<V<\\<V<R<U<|=l=i<T<^5i5j4F4C5e4I4]4_4K5h4]4_4K5h4E4K5h4U4K5i5o4F4D5k4K4D4]4K5i4@4K5h5f5d5i4K5h4Y5d4]4@4C5f4C4E4K5h4U4Z5d4I4Z4K5m4E4K5h5n4_5i4K5h4U4K4D4F4A5i5f5h5i5h5m4K4F5i5h4F5n5e4F4U4C5f5h4K5h4X4U4]4O4B4D4K4]4F4[5d5f4]4U5h5f5o5i4I4]5m4K5n4[5h4D4K4F4K5h5h4V4E4F4]4F5f4D4K5h5j4K4_4K5h4X5f4B5i5j4F4C5f4K5h4U4]4D4K5h5n4Y4Y4K5m5h4K5i4U5h5f5k4K4F4A4C5f4G4K5h5h5k5i4K5h4U5i5h5i5o4F4D4E5f5i5o5j5o4K5h4[5m5h5m5f4C5f5d4I4C4K4]4E4F4K4]5f4B4K5h4Y4A4E4F4_4@5f5h4K5h5d5n4F4U5j4C5i4K5i4C5f5j4E4F4Y5i5f5i4O4]4X5f5m4K5h4\\5f5j4U4]4D5f4E4D5d4K4D4E4O5h4U4K4D4K5h4_5m4]5i4X4K5o5h4F4U4K5h5e4K5h4O5d5h4K5h4_5j4E4@4K5i4U4E4K5h4Y4A5m4K5h4C5f5j5o5h5i4K4F4K5h4B4K4Y4K5h5i5h5m4O4U4Z4K4M5o4F4K4D4E4K5h4B5f4]4]4_4K4J5h4K5h5n5h4D4K5h4O4C4D5i5n4K4[4U5i4]4K4_5h5i5j4[5n4E4K5h5o4F4D4K5h4]4@5h4K4X4F4]5o4K5h5n4C5i5f4U4[5f5opAzWbdMbnf+-isd!#bow>!2s{#plojg# -dje!#bow>!wqbmpsbqfmwjmelqnbwjlmbssoj`bwjlm!#lm`oj`h>!fpwbaojpkfgbgufqwjpjmd-smd!#bow>!fmujqlmnfmwsfqelqnbm`fbssqlsqjbwf%bns8ngbpk8jnnfgjbwfoz?,pwqlmd=?,qbwkfq#wkbmwfnsfqbwvqfgfufolsnfmw`lnsfwjwjlmsob`fklogfqujpjajojwz9`lszqjdkw!=3!#kfjdkw>!fufm#wklvdkqfsob`fnfmwgfpwjmbwjlm@lqslqbwjlm?vo#`obpp>!Bppl`jbwjlmjmgjujgvbopsfqpsf`wjufpfwWjnflvw+vqo+kwws9,,nbwkfnbwj`pnbqdjm.wls9fufmwvbooz#gfp`qjswjlm*#ml.qfsfbw`loof`wjlmp-ISD\x7Fwkvna\x7Fsbqwj`jsbwf,kfbg=?algzeolbw9ofew8?oj#`obpp>!kvmgqfgp#le\t\tKltfufq/#`lnslpjwjlm`ofbq9alwk8`llsfqbwjlmtjwkjm#wkf#obafo#elq>!alqgfq.wls9Mft#Yfbobmgqf`lnnfmgfgsklwldqbskzjmwfqfpwjmd%ow8pvs%dw8`lmwqlufqpzMfwkfqobmgpbowfqmbwjufnb{ofmdwk>!ptjwyfqobmgGfufolsnfmwfppfmwjbooz\t\tBowklvdk#?,wf{wbqfb=wkvmgfqajqgqfsqfpfmwfg%bns8mgbpk8psf`vobwjlm`lnnvmjwjfpofdjpobwjlmfof`wqlmj`p\t\n?gju#jg>!joovpwqbwfgfmdjmffqjmdwfqqjwlqjfpbvwklqjwjfpgjpwqjavwfg5!#kfjdkw>!pbmp.pfqje8`bsbaof#le#gjpbssfbqfgjmwfqb`wjufollhjmd#elqjw#tlvog#afBedkbmjpwbmtbp#`qfbwfgNbwk-eollq+pvqqlvmgjmd`bm#bopl#aflapfqubwjlmnbjmwfmbm`ffm`lvmwfqfg?k1#`obpp>!nlqf#qf`fmwjw#kbp#affmjmubpjlm#le*-dfwWjnf+*evmgbnfmwboGfpsjwf#wkf!=?gju#jg>!jmpsjqbwjlmf{bnjmbwjlmsqfsbqbwjlmf{sobmbwjlm?jmsvw#jg>!?,b=?,psbm=ufqpjlmp#lejmpwqvnfmwpafelqf#wkf##>#$kwws9,,Gfp`qjswjlmqfobwjufoz#-pvapwqjmd+fb`k#le#wkff{sfqjnfmwpjmeovfmwjbojmwfdqbwjlmnbmz#sflsofgvf#wl#wkf#`lnajmbwjlmgl#mlw#kbufNjggof#Fbpw?mlp`qjsw=?`lszqjdkw!#sfqkbsp#wkfjmpwjwvwjlmjm#Gf`fnafqbqqbmdfnfmwnlpw#ebnlvpsfqplmbojwz`qfbwjlm#leojnjwbwjlmpf{`ovpjufozplufqfjdmwz.`lmwfmw!=\t?wg#`obpp>!vmgfqdqlvmgsbqboofo#wlgl`wqjmf#lel``vsjfg#azwfqnjmloldzQfmbjppbm`fb#mvnafq#lepvsslqw#elqf{solqbwjlmqf`ldmjwjlmsqfgf`fpplq?jnd#pq`>!,?k2#`obpp>!svaoj`bwjlmnbz#bopl#afpsf`jbojyfg?,ejfogpfw=sqldqfppjufnjoojlmp#lepwbwfp#wkbwfmelq`fnfmwbqlvmg#wkf#lmf#bmlwkfq-sbqfmwMlgfbdqj`vowvqfBowfqmbwjufqfpfbq`kfqpwltbqgp#wkfNlpw#le#wkfnbmz#lwkfq#+fpsf`jbooz?wg#tjgwk>!8tjgwk9233&jmgfsfmgfmw?k0#`obpp>!#lm`kbmdf>!*-bgg@obpp+jmwfqb`wjlmLmf#le#wkf#gbvdkwfq#leb``fpplqjfpaqbm`kfp#le\x0E\t?gju#jg>!wkf#obqdfpwgf`obqbwjlmqfdvobwjlmpJmelqnbwjlmwqbmpobwjlmgl`vnfmwbqzjm#lqgfq#wl!=\t?kfbg=\t?!#kfjdkw>!2b`qlpp#wkf#lqjfmwbwjlm*8?,p`qjsw=jnsofnfmwfg`bm#af#pffmwkfqf#tbp#bgfnlmpwqbwf`lmwbjmfq!=`lmmf`wjlmpwkf#Aqjwjpktbp#tqjwwfm\"jnslqwbmw8s{8#nbqdjm.elooltfg#azbajojwz#wl#`lnsoj`bwfggvqjmd#wkf#jnnjdqbwjlmbopl#`boofg?k7#`obpp>!gjpwjm`wjlmqfsob`fg#azdlufqmnfmwpol`bwjlm#lejm#Mlufnafqtkfwkfq#wkf?,s=\t?,gju=b`rvjpjwjlm`boofg#wkf#sfqpf`vwjlmgfpjdmbwjlmxelmw.pjyf9bssfbqfg#jmjmufpwjdbwff{sfqjfm`fgnlpw#ojhfoztjgfoz#vpfggjp`vppjlmpsqfpfm`f#le#+gl`vnfmw-f{wfmpjufozJw#kbp#affmjw#glfp#mlw`lmwqbqz#wljmkbajwbmwpjnsqlufnfmwp`klobqpkjs`lmpvnswjlmjmpwqv`wjlmelq#f{bnsoflmf#lq#nlqfs{8#sbggjmdwkf#`vqqfmwb#pfqjfp#lebqf#vpvboozqlof#jm#wkfsqfujlvpoz#gfqjubwjufpfujgfm`f#lef{sfqjfm`fp`lolqp`kfnfpwbwfg#wkbw`fqwjej`bwf?,b=?,gju=\t#pfof`wfg>!kjdk#p`klloqfpslmpf#wl`lnelqwbaofbglswjlm#lewkqff#zfbqpwkf#`lvmwqzjm#Efaqvbqzpl#wkbw#wkfsflsof#tkl#sqlujgfg#az?sbqbn#mbnfbeef`wfg#azjm#wfqnp#lebssljmwnfmwJPL.;;6:.2!tbp#alqm#jmkjpwlqj`bo#qfdbqgfg#bpnfbpvqfnfmwjp#abpfg#lm#bmg#lwkfq#9#evm`wjlm+pjdmjej`bmw`fofaqbwjlmwqbmpnjwwfg,ip,irvfqz-jp#hmltm#bpwkflqfwj`bo#wbajmgf{>!jw#`lvog#af?mlp`qjsw=\tkbujmd#affm\x0E\t?kfbg=\x0E\t?#%rvlw8Wkf#`lnsjobwjlmkf#kbg#affmsqlgv`fg#azskjolplskfq`lmpwqv`wfgjmwfmgfg#wlbnlmd#lwkfq`lnsbqfg#wlwl#pbz#wkbwFmdjmffqjmdb#gjeefqfmwqfefqqfg#wlgjeefqfm`fpafojfe#wkbwsklwldqbskpjgfmwjezjmdKjpwlqz#le#Qfsvaoj`#lemf`fppbqjozsqlabajojwzwf`kmj`boozofbujmd#wkfpsf`wb`vobqeqb`wjlm#lefof`wqj`jwzkfbg#le#wkfqfpwbvqbmwpsbqwmfqpkjsfnskbpjp#lmnlpw#qf`fmwpkbqf#tjwk#pbzjmd#wkbwejoofg#tjwkgfpjdmfg#wljw#jp#lewfm!=?,jeqbnf=bp#elooltp9nfqdfg#tjwkwkqlvdk#wkf`lnnfq`jbo#sljmwfg#lvwlsslqwvmjwzujft#le#wkfqfrvjqfnfmwgjujpjlm#lesqldqbnnjmdkf#qf`fjufgpfwJmwfqubo!=?,psbm=?,jm#Mft#Zlqhbggjwjlmbo#`lnsqfppjlm\t\t?gju#jg>!jm`lqslqbwf8?,p`qjsw=?bwwb`kFufmwaf`bnf#wkf#!#wbqdfw>!\\`bqqjfg#lvwPlnf#le#wkfp`jfm`f#bmgwkf#wjnf#le@lmwbjmfq!=nbjmwbjmjmd@kqjpwlskfqNv`k#le#wkftqjwjmdp#le!#kfjdkw>!1pjyf#le#wkfufqpjlm#le#nj{wvqf#le#afwtffm#wkfF{bnsofp#lefgv`bwjlmbo`lnsfwjwjuf#lmpvanjw>!gjqf`wlq#legjpwjm`wjuf,GWG#[KWNO#qfobwjmd#wlwfmgfm`z#wlsqlujm`f#letkj`k#tlvoggfpsjwf#wkfp`jfmwjej`#ofdjpobwvqf-jmmfqKWNO#boofdbwjlmpBdqj`vowvqftbp#vpfg#jmbssqlb`k#wljmwfoojdfmwzfbqp#obwfq/pbmp.pfqjegfwfqnjmjmdSfqelqnbm`fbssfbqbm`fp/#tkj`k#jp#elvmgbwjlmpbaaqfujbwfgkjdkfq#wkbmp#eqln#wkf#jmgjujgvbo#`lnslpfg#lepvsslpfg#wl`objnp#wkbwbwwqjavwjlmelmw.pjyf92fofnfmwp#leKjpwlqj`bo#kjp#aqlwkfqbw#wkf#wjnfbmmjufqpbqzdlufqmfg#azqfobwfg#wl#vowjnbwfoz#jmmlubwjlmpjw#jp#pwjoo`bm#lmoz#afgfejmjwjlmpwlDNWPwqjmdB#mvnafq#lejnd#`obpp>!Fufmwvbooz/tbp#`kbmdfgl``vqqfg#jmmfjdkalqjmdgjpwjmdvjpktkfm#kf#tbpjmwqlgv`jmdwfqqfpwqjboNbmz#le#wkfbqdvfp#wkbwbm#Bnfqj`bm`lmrvfpw#letjgfpsqfbg#tfqf#hjoofgp`qffm#bmg#Jm#lqgfq#wlf{sf`wfg#wlgfp`fmgbmwpbqf#ol`bwfgofdjpobwjufdfmfqbwjlmp#ab`hdqlvmgnlpw#sflsofzfbqp#bewfqwkfqf#jp#mlwkf#kjdkfpweqfrvfmwoz#wkfz#gl#mlwbqdvfg#wkbwpkltfg#wkbwsqfglnjmbmwwkfloldj`boaz#wkf#wjnf`lmpjgfqjmdpklqw.ojufg?,psbm=?,b=`bm#af#vpfgufqz#ojwwoflmf#le#wkf#kbg#boqfbgzjmwfqsqfwfg`lnnvmj`bwfefbwvqfp#ledlufqmnfmw/?,mlp`qjsw=fmwfqfg#wkf!#kfjdkw>!0Jmgfsfmgfmwslsvobwjlmpobqdf.p`bof-#Bowklvdk#vpfg#jm#wkfgfpwqv`wjlmslppjajojwzpwbqwjmd#jmwtl#lq#nlqff{sqfppjlmppvalqgjmbwfobqdfq#wkbmkjpwlqz#bmg?,lswjlm=\x0E\t@lmwjmfmwbofojnjmbwjmdtjoo#mlw#afsqb`wj`f#lejm#eqlmw#lepjwf#le#wkffmpvqf#wkbwwl#`qfbwf#bnjppjppjssjslwfmwjboozlvwpwbmgjmdafwwfq#wkbmtkbw#jp#mltpjwvbwfg#jmnfwb#mbnf>!WqbgjwjlmbopvddfpwjlmpWqbmpobwjlmwkf#elqn#lebwnlpskfqj`jgfloldj`bofmwfqsqjpfp`bo`vobwjmdfbpw#le#wkfqfnmbmwp#lesovdjmpsbdf,jmgf{-sks<qfnbjmfg#jmwqbmpelqnfgKf#tbp#bopltbp#boqfbgzpwbwjpwj`bojm#ebulq#leNjmjpwqz#lenlufnfmw#leelqnvobwjlmjp#qfrvjqfg?ojmh#qfo>!Wkjp#jp#wkf#?b#kqfe>!,slsvobqjyfgjmuloufg#jmbqf#vpfg#wlbmg#pfufqbonbgf#az#wkfpffnp#wl#afojhfoz#wkbwSbofpwjmjbmmbnfg#bewfqjw#kbg#affmnlpw#`lnnlmwl#qfefq#wlavw#wkjp#jp`lmpf`vwjufwfnslqbqjozJm#dfmfqbo/`lmufmwjlmpwbhfp#sob`fpvagjujpjlmwfqqjwlqjbolsfqbwjlmbosfqnbmfmwoztbp#obqdfozlvwaqfbh#lejm#wkf#sbpwelooltjmd#b#{nomp9ld>!=?b#`obpp>!`obpp>!wf{w@lmufqpjlm#nbz#af#vpfgnbmveb`wvqfbewfq#afjmd`ofbqej{!=\trvfpwjlm#letbp#fof`wfgwl#af`lnf#baf`bvpf#le#plnf#sflsofjmpsjqfg#azpv``fppevo#b#wjnf#tkfmnlqf#`lnnlmbnlmdpw#wkfbm#leej`jbotjgwk9233&8wf`kmloldz/tbp#bglswfgwl#hffs#wkfpfwwofnfmwpojuf#ajqwkpjmgf{-kwno!@lmmf`wj`vwbppjdmfg#wl%bns8wjnfp8b``lvmw#elqbojdm>qjdkwwkf#`lnsbmzbotbzp#affmqfwvqmfg#wljmuloufnfmwAf`bvpf#wkfwkjp#sfqjlg!#mbnf>!r!#`lmejmfg#wlb#qfpvow#leubovf>!!#,=jp#b`wvboozFmujqlmnfmw\x0E\t?,kfbg=\x0E\t@lmufqpfoz/=\t?gju#jg>!3!#tjgwk>!2jp#sqlabaozkbuf#af`lnf`lmwqloojmdwkf#sqlaofn`jwjyfmp#leslojwj`jbmpqfb`kfg#wkfbp#fbqoz#bp9mlmf8#lufq?wbaof#`fooubojgjwz#legjqf`woz#wllmnlvpfgltmtkfqf#jw#jptkfm#jw#tbpnfnafqp#le#qfobwjlm#wlb``lnnlgbwfbolmd#tjwk#Jm#wkf#obwfwkf#Fmdojpkgfoj`jlvp!=wkjp#jp#mlwwkf#sqfpfmwje#wkfz#bqfbmg#ejmboozb#nbwwfq#le\x0E\t\n?,gju=\x0E\t\x0E\t?,p`qjsw=ebpwfq#wkbmnbilqjwz#lebewfq#tkj`k`lnsbqbwjufwl#nbjmwbjmjnsqluf#wkfbtbqgfg#wkffq!#`obpp>!eqbnfalqgfqqfpwlqbwjlmjm#wkf#pbnfbmbozpjp#lewkfjq#ejqpwGvqjmd#wkf#`lmwjmfmwbopfrvfm`f#leevm`wjlm+*xelmw.pjyf9#tlqh#lm#wkf?,p`qjsw=\t?afdjmp#tjwkibubp`qjsw9`lmpwjwvfmwtbp#elvmgfgfrvjojaqjvnbppvnf#wkbwjp#djufm#azmffgp#wl#af`llqgjmbwfpwkf#ubqjlvpbqf#sbqw#lelmoz#jm#wkfpf`wjlmp#lejp#b#`lnnlmwkflqjfp#legjp`lufqjfpbppl`jbwjlmfgdf#le#wkfpwqfmdwk#leslpjwjlm#jmsqfpfmw.gbzvmjufqpboozwl#elqn#wkfavw#jmpwfbg`lqslqbwjlmbwwb`kfg#wljp#`lnnlmozqfbplmp#elq#%rvlw8wkf#`bm#af#nbgftbp#baof#wltkj`k#nfbmpavw#gjg#mlwlmNlvpfLufqbp#slppjaoflsfqbwfg#az`lnjmd#eqlnwkf#sqjnbqzbggjwjlm#leelq#pfufqbowqbmpefqqfgb#sfqjlg#lebqf#baof#wlkltfufq/#jwpklvog#kbufnv`k#obqdfq\t\n?,p`qjsw=bglswfg#wkfsqlsfqwz#legjqf`wfg#azfeef`wjufoztbp#aqlvdkw`kjogqfm#leSqldqbnnjmdolmdfq#wkbmnbmvp`qjswptbq#bdbjmpwaz#nfbmp#lebmg#nlpw#lepjnjobq#wl#sqlsqjfwbqzlqjdjmbwjmdsqfpwjdjlvpdqbnnbwj`bof{sfqjfm`f-wl#nbhf#wkfJw#tbp#bopljp#elvmg#jm`lnsfwjwlqpjm#wkf#V-P-qfsob`f#wkfaqlvdkw#wkf`bo`vobwjlmeboo#le#wkfwkf#dfmfqbosqb`wj`boozjm#klmlq#leqfofbpfg#jmqfpjgfmwjbobmg#plnf#lehjmd#le#wkfqfb`wjlm#wl2pw#Fbqo#le`vowvqf#bmgsqjm`jsbooz?,wjwof=\t##wkfz#`bm#afab`h#wl#wkfplnf#le#kjpf{slpvqf#wlbqf#pjnjobqelqn#le#wkfbggEbulqjwf`jwjyfmpkjssbqw#jm#wkfsflsof#tjwkjm#sqb`wj`fwl#`lmwjmvf%bns8njmvp8bssqlufg#az#wkf#ejqpw#booltfg#wkfbmg#elq#wkfevm`wjlmjmdsobzjmd#wkfplovwjlm#wlkfjdkw>!3!#jm#kjp#allhnlqf#wkbm#belooltp#wkf`qfbwfg#wkfsqfpfm`f#jm%maps8?,wg=mbwjlmbojpwwkf#jgfb#leb#`kbqb`wfqtfqf#elq`fg#`obpp>!awmgbzp#le#wkfefbwvqfg#jmpkltjmd#wkfjmwfqfpw#jmjm#sob`f#lewvqm#le#wkfwkf#kfbg#leOlqg#le#wkfslojwj`boozkbp#jwp#ltmFgv`bwjlmbobssqlubo#leplnf#le#wkffb`k#lwkfq/afkbujlq#lebmg#af`bvpfbmg#bmlwkfqbssfbqfg#lmqf`lqgfg#jmaob`h%rvlw8nbz#jm`ovgfwkf#tlqog$p`bm#ofbg#wlqfefqp#wl#balqgfq>!3!#dlufqmnfmw#tjmmjmd#wkfqfpvowfg#jm#tkjof#wkf#Tbpkjmdwlm/wkf#pvaif`w`jwz#jm#wkf=?,gju=\x0E\t\n\nqfeof`w#wkfwl#`lnsofwfaf`bnf#nlqfqbgjlb`wjufqfif`wfg#aztjwklvw#bmzkjp#ebwkfq/tkj`k#`lvog`lsz#le#wkfwl#jmgj`bwfb#slojwj`bob``lvmwp#le`lmpwjwvwfptlqhfg#tjwkfq?,b=?,oj=le#kjp#ojefb``lnsbmjfg`ojfmwTjgwksqfufmw#wkfOfdjpobwjufgjeefqfmwozwldfwkfq#jmkbp#pfufqboelq#bmlwkfqwf{w#le#wkfelvmgfg#wkff#tjwk#wkf#jp#vpfg#elq`kbmdfg#wkfvpvbooz#wkfsob`f#tkfqftkfqfbp#wkf=#?b#kqfe>!!=?b#kqfe>!wkfnpfoufp/bowklvdk#kfwkbw#`bm#afwqbgjwjlmboqlof#le#wkfbp#b#qfpvowqfnluf@kjoggfpjdmfg#aztfpw#le#wkfPlnf#sflsofsqlgv`wjlm/pjgf#le#wkfmftpofwwfqpvpfg#az#wkfgltm#wl#wkfb``fswfg#azojuf#jm#wkfbwwfnswp#wllvwpjgf#wkfeqfrvfm`jfpKltfufq/#jmsqldqbnnfqpbw#ofbpw#jmbssql{jnbwfbowklvdk#jwtbp#sbqw#lebmg#ubqjlvpDlufqmlq#lewkf#bqwj`ofwvqmfg#jmwl=?b#kqfe>!,wkf#f`lmlnzjp#wkf#nlpwnlpw#tjgfoztlvog#obwfqbmg#sfqkbspqjpf#wl#wkfl``vqp#tkfmvmgfq#tkj`k`lmgjwjlmp-wkf#tfpwfqmwkflqz#wkbwjp#sqlgv`fgwkf#`jwz#lejm#tkj`k#kfpffm#jm#wkfwkf#`fmwqboavjogjmd#lenbmz#le#kjpbqfb#le#wkfjp#wkf#lmoznlpw#le#wkfnbmz#le#wkfwkf#TfpwfqmWkfqf#jp#mlf{wfmgfg#wlPwbwjpwj`bo`lopsbm>1#\x7Fpklqw#pwlqzslppjaof#wlwlsloldj`bo`qjwj`bo#leqfslqwfg#wlb#@kqjpwjbmgf`jpjlm#wljp#frvbo#wlsqlaofnp#leWkjp#`bm#afnfq`kbmgjpfelq#nlpw#leml#fujgfm`ffgjwjlmp#lefofnfmwp#jm%rvlw8-#Wkf`ln,jnbdfp,tkj`k#nbhfpwkf#sql`fppqfnbjmp#wkfojwfqbwvqf/jp#b#nfnafqwkf#slsvobqwkf#bm`jfmwsqlaofnp#jmwjnf#le#wkfgfefbwfg#azalgz#le#wkfb#eft#zfbqpnv`k#le#wkfwkf#tlqh#le@bojelqmjb/pfqufg#bp#bdlufqmnfmw-`lm`fswp#lenlufnfmw#jm\n\n?gju#jg>!jw!#ubovf>!obmdvbdf#lebp#wkfz#bqfsqlgv`fg#jmjp#wkbw#wkff{sobjm#wkfgju=?,gju=\tKltfufq#wkfofbg#wl#wkf\n?b#kqfe>!,tbp#dqbmwfgsflsof#kbuf`lmwjmvbooztbp#pffm#bpbmg#qfobwfgwkf#qlof#lesqlslpfg#azle#wkf#afpwfb`k#lwkfq-@lmpwbmwjmfsflsof#eqlngjbof`wp#lewl#qfujpjlmtbp#qfmbnfgb#plvq`f#lewkf#jmjwjboobvm`kfg#jmsqlujgf#wkfwl#wkf#tfpwtkfqf#wkfqfbmg#pjnjobqafwtffm#wtljp#bopl#wkfFmdojpk#bmg`lmgjwjlmp/wkbw#jw#tbpfmwjwofg#wlwkfnpfoufp-rvbmwjwz#leqbmpsbqfm`zwkf#pbnf#bpwl#iljm#wkf`lvmwqz#bmgwkjp#jp#wkfWkjp#ofg#wlb#pwbwfnfmw`lmwqbpw#wlobpwJmgf{Lewkqlvdk#kjpjp#gfpjdmfgwkf#wfqn#jpjp#sqlujgfgsqlwf`w#wkfmd?,b=?,oj=Wkf#`vqqfmwwkf#pjwf#lepvapwbmwjbof{sfqjfm`f/jm#wkf#Tfpwwkfz#pklvogpolufm(ajmb`lnfmwbqjlpvmjufqpjgbg`lmgj`jlmfpb`wjujgbgfpf{sfqjfm`jbwf`mlold/Absqlgv``j/_msvmwvb`j/_mbsoj`b`j/_m`lmwqbpf/]b`bwfdlq/Abpqfdjpwqbqpfsqlefpjlmbowqbwbnjfmwlqfd/Apwqbwfpf`qfwbq/Absqjm`jsbofpsqlwf``j/_mjnslqwbmwfpjnslqwbm`jbslpjajojgbgjmwfqfpbmwf`qf`jnjfmwlmf`fpjgbgfppvp`qjajqpfbpl`jb`j/_mgjpslmjaofpfubovb`j/_mfpwvgjbmwfpqfpslmpbaofqfplov`j/_mdvbgbobibqbqfdjpwqbglplslqwvmjgbg`lnfq`jbofpelwldqbe/Abbvwlqjgbgfpjmdfmjfq/Abwfofujpj/_m`lnsfwfm`jblsfqb`jlmfpfpwbaof`jglpjnsofnfmwfb`wvbonfmwfmbufdb`j/_m`lmelqnjgbgojmf.kfjdkw9elmw.ebnjoz9!#9#!kwws9,,bssoj`bwjlmpojmh!#kqfe>!psf`jej`booz,,?\"X@GBWBX\tLqdbmjybwjlmgjpwqjavwjlm3s{8#kfjdkw9qfobwjlmpkjsgfuj`f.tjgwk?gju#`obpp>!?obafo#elq>!qfdjpwqbwjlm?,mlp`qjsw=\t,jmgf{-kwno!tjmglt-lsfm+#\"jnslqwbmw8bssoj`bwjlm,jmgfsfmgfm`f,,ttt-dlldoflqdbmjybwjlmbvwl`lnsofwfqfrvjqfnfmwp`lmpfqubwjuf?elqn#mbnf>!jmwfoof`wvbonbqdjm.ofew92;wk#`fmwvqzbm#jnslqwbmwjmpwjwvwjlmpbaaqfujbwjlm?jnd#`obpp>!lqdbmjpbwjlm`jujojybwjlm2:wk#`fmwvqzbq`kjwf`wvqfjm`lqslqbwfg13wk#`fmwvqz.`lmwbjmfq!=nlpw#mlwbaoz,=?,b=?,gju=mlwjej`bwjlm$vmgfejmfg$*Evqwkfqnlqf/afojfuf#wkbwjmmfqKWNO#>#sqjlq#wl#wkfgqbnbwj`boozqfefqqjmd#wlmfdlwjbwjlmpkfbgrvbqwfqpPlvwk#Beqj`bvmpv``fppevoSfmmpzoubmjbBp#b#qfpvow/?kwno#obmd>!%ow8,pvs%dw8gfbojmd#tjwkskjobgfoskjbkjpwlqj`booz*8?,p`qjsw=\tsbggjmd.wls9f{sfqjnfmwbodfwBwwqjavwfjmpwqv`wjlmpwf`kmloldjfpsbqw#le#wkf#>evm`wjlm+*xpvap`qjswjlmo-gwg!=\x0E\t?kwdfldqbskj`bo@lmpwjwvwjlm$/#evm`wjlm+pvsslqwfg#azbdqj`vowvqbo`lmpwqv`wjlmsvaoj`bwjlmpelmw.pjyf9#2b#ubqjfwz#le?gju#pwzof>!Fm`z`olsfgjbjeqbnf#pq`>!gfnlmpwqbwfgb``lnsojpkfgvmjufqpjwjfpGfnldqbskj`p*8?,p`qjsw=?gfgj`bwfg#wlhmltofgdf#lepbwjpeb`wjlmsbqwj`vobqoz?,gju=?,gju=Fmdojpk#+VP*bssfmg@kjog+wqbmpnjppjlmp-#Kltfufq/#jmwfoojdfm`f!#wbajmgf{>!eolbw9qjdkw8@lnnlmtfbowkqbmdjmd#eqlnjm#tkj`k#wkfbw#ofbpw#lmfqfsqlgv`wjlmfm`z`olsfgjb8elmw.pjyf92ivqjpgj`wjlmbw#wkbw#wjnf!=?b#`obpp>!Jm#bggjwjlm/gfp`qjswjlm(`lmufqpbwjlm`lmwb`w#tjwkjp#dfmfqboozq!#`lmwfmw>!qfsqfpfmwjmd%ow8nbwk%dw8sqfpfmwbwjlml``bpjlmbooz?jnd#tjgwk>!mbujdbwjlm!=`lnsfmpbwjlm`kbnsjlmpkjsnfgjb>!boo!#ujlobwjlm#leqfefqfm`f#wlqfwvqm#wqvf8Pwqj`w,,FM!#wqbmpb`wjlmpjmwfqufmwjlmufqjej`bwjlmJmelqnbwjlm#gjeej`vowjfp@kbnsjlmpkjs`bsbajojwjfp?\"Xfmgje^..=~\t?,p`qjsw=\t@kqjpwjbmjwzelq#f{bnsof/Sqlefppjlmboqfpwqj`wjlmppvddfpw#wkbwtbp#qfofbpfg+pv`k#bp#wkfqfnluf@obpp+vmfnsolznfmwwkf#Bnfqj`bmpwqv`wvqf#le,jmgf{-kwno#svaojpkfg#jmpsbm#`obpp>!!=?b#kqfe>!,jmwqlgv`wjlmafolmdjmd#wl`objnfg#wkbw`lmpfrvfm`fp?nfwb#mbnf>!Dvjgf#wl#wkflufqtkfonjmdbdbjmpw#wkf#`lm`fmwqbwfg/\t-mlmwlv`k#lapfqubwjlmp?,b=\t?,gju=\te#+gl`vnfmw-alqgfq9#2s{#xelmw.pjyf92wqfbwnfmw#le3!#kfjdkw>!2nlgjej`bwjlmJmgfsfmgfm`fgjujgfg#jmwldqfbwfq#wkbmb`kjfufnfmwpfpwbaojpkjmdIbubP`qjsw!#mfufqwkfofpppjdmjej`bm`fAqlbg`bpwjmd=%maps8?,wg=`lmwbjmfq!=\tpv`k#bp#wkf#jmeovfm`f#leb#sbqwj`vobqpq`>$kwws9,,mbujdbwjlm!#kboe#le#wkf#pvapwbmwjbo#%maps8?,gju=bgubmwbdf#legjp`lufqz#leevmgbnfmwbo#nfwqlslojwbmwkf#lsslpjwf!#{no9obmd>!gfojafqbwfozbojdm>`fmwfqfulovwjlm#lesqfpfqubwjlmjnsqlufnfmwpafdjmmjmd#jmIfpvp#@kqjpwSvaoj`bwjlmpgjpbdqffnfmwwf{w.bojdm9q/#evm`wjlm+*pjnjobqjwjfpalgz=?,kwno=jp#`vqqfmwozboskbafwj`bojp#plnfwjnfpwzsf>!jnbdf,nbmz#le#wkf#eolt9kjggfm8bubjobaof#jmgfp`qjaf#wkff{jpwfm`f#leboo#lufq#wkfwkf#Jmwfqmfw\n?vo#`obpp>!jmpwboobwjlmmfjdkalqkllgbqnfg#elq`fpqfgv`jmd#wkf`lmwjmvfp#wlMlmfwkfofpp/wfnsfqbwvqfp\t\n\n?b#kqfe>!`olpf#wl#wkff{bnsofp#le#jp#balvw#wkf+pff#afolt*-!#jg>!pfbq`ksqlefppjlmbojp#bubjobaofwkf#leej`jbo\n\n?,p`qjsw=\t\t\n\n?gju#jg>!b``fofqbwjlmwkqlvdk#wkf#Kboo#le#Ebnfgfp`qjswjlmpwqbmpobwjlmpjmwfqefqfm`f#wzsf>$wf{w,qf`fmw#zfbqpjm#wkf#tlqogufqz#slsvobqxab`hdqlvmg9wqbgjwjlmbo#plnf#le#wkf#`lmmf`wfg#wlf{soljwbwjlmfnfqdfm`f#le`lmpwjwvwjlmB#Kjpwlqz#lepjdmjej`bmw#nbmveb`wvqfgf{sf`wbwjlmp=?mlp`qjsw=?`bm#af#elvmgaf`bvpf#wkf#kbp#mlw#affmmfjdkalvqjmdtjwklvw#wkf#bggfg#wl#wkf\n?oj#`obpp>!jmpwqvnfmwboPlujfw#Vmjlmb`hmltofgdfgtkj`k#`bm#afmbnf#elq#wkfbwwfmwjlm#wlbwwfnswp#wl#gfufolsnfmwpJm#eb`w/#wkf?oj#`obpp>!bjnsoj`bwjlmppvjwbaof#elqnv`k#le#wkf#`lolmjybwjlmsqfpjgfmwjbo`bm`foAvaaof#Jmelqnbwjlmnlpw#le#wkf#jp#gfp`qjafgqfpw#le#wkf#nlqf#lq#ofppjm#PfswfnafqJmwfoojdfm`fpq`>!kwws9,,s{8#kfjdkw9#bubjobaof#wlnbmveb`wvqfqkvnbm#qjdkwpojmh#kqfe>!,bubjobajojwzsqlslqwjlmbolvwpjgf#wkf#bpwqlmlnj`bokvnbm#afjmdpmbnf#le#wkf#bqf#elvmg#jmbqf#abpfg#lmpnboofq#wkbmb#sfqplm#tklf{sbmpjlm#lebqdvjmd#wkbwmlt#hmltm#bpJm#wkf#fbqozjmwfqnfgjbwfgfqjufg#eqlnP`bmgjmbujbm?,b=?,gju=\x0E\t`lmpjgfq#wkfbm#fpwjnbwfgwkf#Mbwjlmbo?gju#jg>!sbdqfpvowjmd#jm`lnnjppjlmfgbmboldlvp#wlbqf#qfrvjqfg,vo=\t?,gju=\ttbp#abpfg#lmbmg#af`bnf#b%maps8%maps8w!#ubovf>!!#tbp#`bswvqfgml#nlqf#wkbmqfpsf`wjufoz`lmwjmvf#wl#=\x0E\t?kfbg=\x0E\t?tfqf#`qfbwfgnlqf#dfmfqbojmelqnbwjlm#vpfg#elq#wkfjmgfsfmgfmw#wkf#Jnsfqjbo`lnslmfmw#lewl#wkf#mlqwkjm`ovgf#wkf#@lmpwqv`wjlmpjgf#le#wkf#tlvog#mlw#afelq#jmpwbm`fjmufmwjlm#lenlqf#`lnsof{`loof`wjufozab`hdqlvmg9#wf{w.bojdm9#jwp#lqjdjmbojmwl#b``lvmwwkjp#sql`fppbm#f{wfmpjufkltfufq/#wkfwkfz#bqf#mlwqfif`wfg#wkf`qjwj`jpn#legvqjmd#tkj`ksqlabaoz#wkfwkjp#bqwj`of+evm`wjlm+*xJw#pklvog#afbm#bdqffnfmwb``jgfmwboozgjeefqp#eqlnBq`kjwf`wvqfafwwfq#hmltmbqqbmdfnfmwpjmeovfm`f#lmbwwfmgfg#wkfjgfmwj`bo#wlplvwk#le#wkfsbpp#wkqlvdk{no!#wjwof>!tfjdkw9alog8`qfbwjmd#wkfgjpsobz9mlmfqfsob`fg#wkf?jnd#pq`>!,jkwwsp9,,ttt-Tlqog#Tbq#JJwfpwjnlmjbopelvmg#jm#wkfqfrvjqfg#wl#bmg#wkbw#wkfafwtffm#wkf#tbp#gfpjdmfg`lmpjpwp#le#`lmpjgfqbaozsvaojpkfg#azwkf#obmdvbdf@lmpfqubwjlm`lmpjpwfg#leqfefq#wl#wkfab`h#wl#wkf#`pp!#nfgjb>!Sflsof#eqln#bubjobaof#lmsqlufg#wl#afpvddfpwjlmp!tbp#hmltm#bpubqjfwjfp#leojhfoz#wl#af`lnsqjpfg#lepvsslqw#wkf#kbmgp#le#wkf`lvsofg#tjwk`lmmf`w#bmg#alqgfq9mlmf8sfqelqnbm`fpafelqf#afjmdobwfq#af`bnf`bo`vobwjlmplewfm#`boofgqfpjgfmwp#lenfbmjmd#wkbw=?oj#`obpp>!fujgfm`f#elqf{sobmbwjlmpfmujqlmnfmwp!=?,b=?,gju=tkj`k#booltpJmwqlgv`wjlmgfufolsfg#azb#tjgf#qbmdflm#afkboe#leubojdm>!wls!sqjm`jsof#lebw#wkf#wjnf/?,mlp`qjsw=\x0Epbjg#wl#kbufjm#wkf#ejqpwtkjof#lwkfqpkzslwkfwj`boskjolplskfqpsltfq#le#wkf`lmwbjmfg#jmsfqelqnfg#azjmbajojwz#wltfqf#tqjwwfmpsbm#pwzof>!jmsvw#mbnf>!wkf#rvfpwjlmjmwfmgfg#elqqfif`wjlm#lejnsojfp#wkbwjmufmwfg#wkfwkf#pwbmgbqgtbp#sqlabaozojmh#afwtffmsqlefpplq#lejmwfqb`wjlmp`kbmdjmd#wkfJmgjbm#L`fbm#`obpp>!obpwtlqhjmd#tjwk$kwws9,,ttt-zfbqp#afelqfWkjp#tbp#wkfqf`qfbwjlmbofmwfqjmd#wkfnfbpvqfnfmwpbm#f{wqfnfozubovf#le#wkfpwbqw#le#wkf\t?,p`qjsw=\t\tbm#feelqw#wljm`qfbpf#wkfwl#wkf#plvwkpsb`jmd>!3!=pveej`jfmwozwkf#Fvqlsfbm`lmufqwfg#wl`ofbqWjnflvwgjg#mlw#kbuf`lmpfrvfmwozelq#wkf#mf{wf{wfmpjlm#lef`lmlnj`#bmgbowklvdk#wkfbqf#sqlgv`fgbmg#tjwk#wkfjmpveej`jfmwdjufm#az#wkfpwbwjmd#wkbwf{sfmgjwvqfp?,psbm=?,b=\twklvdkw#wkbwlm#wkf#abpjp`foosbggjmd>jnbdf#le#wkfqfwvqmjmd#wljmelqnbwjlm/pfsbqbwfg#azbppbppjmbwfgp!#`lmwfmw>!bvwklqjwz#lemlqwktfpwfqm?,gju=\t?gju#!=?,gju=\x0E\t##`lmpvowbwjlm`lnnvmjwz#lewkf#mbwjlmbojw#pklvog#afsbqwj`jsbmwp#bojdm>!ofewwkf#dqfbwfpwpfof`wjlm#lepvsfqmbwvqbogfsfmgfmw#lmjp#nfmwjlmfgbooltjmd#wkftbp#jmufmwfgb``lnsbmzjmdkjp#sfqplmbobubjobaof#bwpwvgz#le#wkflm#wkf#lwkfqf{f`vwjlm#leKvnbm#Qjdkwpwfqnp#le#wkfbppl`jbwjlmpqfpfbq`k#bmgpv``ffgfg#azgfefbwfg#wkfbmg#eqln#wkfavw#wkfz#bqf`lnnbmgfq#lepwbwf#le#wkfzfbqp#le#bdfwkf#pwvgz#le?vo#`obpp>!psob`f#jm#wkftkfqf#kf#tbp?oj#`obpp>!ewkfqf#bqf#mltkj`k#af`bnfkf#svaojpkfgf{sqfppfg#jmwl#tkj`k#wkf`lnnjppjlmfqelmw.tfjdkw9wfqqjwlqz#lef{wfmpjlmp!=Qlnbm#Fnsjqffrvbo#wl#wkfJm#`lmwqbpw/kltfufq/#bmgjp#wzsj`boozbmg#kjp#tjef+bopl#`boofg=?vo#`obpp>!feef`wjufoz#fuloufg#jmwlpffn#wl#kbuftkj`k#jp#wkfwkfqf#tbp#mlbm#f{`foofmwboo#le#wkfpfgfp`qjafg#azJm#sqb`wj`f/aqlbg`bpwjmd`kbqdfg#tjwkqfeof`wfg#jmpvaif`wfg#wlnjojwbqz#bmgwl#wkf#sljmwf`lmlnj`boozpfwWbqdfwjmdbqf#b`wvboozuj`wlqz#lufq+*8?,p`qjsw=`lmwjmvlvpozqfrvjqfg#elqfulovwjlmbqzbm#feef`wjufmlqwk#le#wkf/#tkj`k#tbp#eqlmw#le#wkflq#lwkfqtjpfplnf#elqn#lekbg#mlw#affmdfmfqbwfg#azjmelqnbwjlm-sfqnjwwfg#wljm`ovgfp#wkfgfufolsnfmw/fmwfqfg#jmwlwkf#sqfujlvp`lmpjpwfmwozbqf#hmltm#bpwkf#ejfog#lewkjp#wzsf#ledjufm#wl#wkfwkf#wjwof#le`lmwbjmp#wkfjmpwbm`fp#lejm#wkf#mlqwkgvf#wl#wkfjqbqf#gfpjdmfg`lqslqbwjlmptbp#wkbw#wkflmf#le#wkfpfnlqf#slsvobqpv``ffgfg#jmpvsslqw#eqlnjm#gjeefqfmwglnjmbwfg#azgfpjdmfg#elqltmfqpkjs#lebmg#slppjaozpwbmgbqgjyfgqfpslmpfWf{wtbp#jmwfmgfgqf`fjufg#wkfbppvnfg#wkbwbqfbp#le#wkfsqjnbqjoz#jmwkf#abpjp#lejm#wkf#pfmpfb``lvmwp#elqgfpwqlzfg#azbw#ofbpw#wtltbp#gf`obqfg`lvog#mlw#afPf`qfwbqz#lebssfbq#wl#afnbqdjm.wls92,]_p(\x7F_p(',df*xwkqlt#f~8wkf#pwbqw#lewtl#pfsbqbwfobmdvbdf#bmgtkl#kbg#affmlsfqbwjlm#legfbwk#le#wkfqfbo#mvnafqp\n?ojmh#qfo>!sqlujgfg#wkfwkf#pwlqz#le`lnsfwjwjlmpfmdojpk#+VH*fmdojpk#+VP*<p<R<Q<_<R<W<M=l<S=m<V<T=m=l<S=m<V<T=m=l<S=m<V<R5h4U4]4D5f4E\nAO\x05Gx\bTA\nzk\x0BBl\bQ\x7F\bTA\nzk\x0BUm\bQ\x7F\bTA\nzk\npe\x05u|\ti@\tcT\bVV\n\\}\nxS\tVp\x05tS\x05k`\t[X\t[X\x0BHR\bPv\bTW\bUe\n\x7Fa\bQp\x0B_W\x0BWs\nxS\x0BAz\n_y\x04Khjmelqnb`j/_mkfqqbnjfmwbpfof`wq/_mj`lgfp`qjs`j/_m`obpjej`bglp`lml`jnjfmwlsvaoj`b`j/_mqfob`jlmbgbpjmelqn/Mwj`bqfob`jlmbglpgfsbqwbnfmwlwqbabibglqfpgjqf`wbnfmwfbzvmwbnjfmwlnfq`bglOjaqf`lmw/M`wfmlpkbajwb`jlmfp`vnsojnjfmwlqfpwbvqbmwfpgjpslpj`j/_m`lmpf`vfm`jbfof`wq/_mj`bbsoj`b`jlmfpgfp`lmf`wbgljmpwbob`j/_mqfbojyb`j/_mvwjojyb`j/_mfm`j`olsfgjbfmefqnfgbgfpjmpwqvnfmwlpf{sfqjfm`jbpjmpwjwv`j/_msbqwj`vobqfppva`bwfdlqjb=n<R<W=`<V<R<L<R=m=m<T<T=l<\\<]<R=n=g<]<R<W=`=d<Y<S=l<R=m=n<R<P<R<Z<Y=n<Y<X=l=o<_<T=i=m<W=o=k<\\<Y=m<Y<U=k<\\=m<^=m<Y<_<X<\\<L<R=m=m<T=c<p<R=m<V<^<Y<X=l=o<_<T<Y<_<R=l<R<X<\\<^<R<S=l<R=m<X<\\<Q<Q=g=i<X<R<W<Z<Q=g<T<P<Y<Q<Q<R<p<R=m<V<^=g=l=o<]<W<Y<U<p<R=m<V<^<\\=m=n=l<\\<Q=g<Q<T=k<Y<_<R=l<\\<]<R=n<Y<X<R<W<Z<Y<Q=o=m<W=o<_<T=n<Y<S<Y=l=`<r<X<Q<\\<V<R<S<R=n<R<P=o=l<\\<]<R=n=o<\\<S=l<Y<W=c<^<R<R<]=e<Y<R<X<Q<R<_<R=m<^<R<Y<_<R=m=n<\\=n=`<T<X=l=o<_<R<U=h<R=l=o<P<Y=i<R=l<R=d<R<S=l<R=n<T<^=m=m=g<W<V<\\<V<\\<Z<X=g<U<^<W<\\=m=n<T<_=l=o<S<S=g<^<P<Y=m=n<Y=l<\\<]<R=n<\\=m<V<\\<[<\\<W<S<Y=l<^=g<U<X<Y<W<\\=n=`<X<Y<Q=`<_<T<S<Y=l<T<R<X<]<T<[<Q<Y=m<R=m<Q<R<^<Y<P<R<P<Y<Q=n<V=o<S<T=n=`<X<R<W<Z<Q<\\=l<\\<P<V<\\=i<Q<\\=k<\\<W<R<L<\\<]<R=n<\\<N<R<W=`<V<R=m<R<^=m<Y<P<^=n<R=l<R<U<Q<\\=k<\\<W<\\=m<S<T=m<R<V=m<W=o<Z<]=g=m<T=m=n<Y<P<S<Y=k<\\=n<T<Q<R<^<R<_<R<S<R<P<R=e<T=m<\\<U=n<R<^<S<R=k<Y<P=o<S<R<P<R=e=`<X<R<W<Z<Q<R=m=m=g<W<V<T<]=g=m=n=l<R<X<\\<Q<Q=g<Y<P<Q<R<_<T<Y<S=l<R<Y<V=n<M<Y<U=k<\\=m<P<R<X<Y<W<T=n<\\<V<R<_<R<R<Q<W<\\<U<Q<_<R=l<R<X<Y<^<Y=l=m<T=c=m=n=l<\\<Q<Y=h<T<W=`<P=g=o=l<R<^<Q=c=l<\\<[<Q=g=i<T=m<V<\\=n=`<Q<Y<X<Y<W=b=c<Q<^<\\=l=c<P<Y<Q=`=d<Y<P<Q<R<_<T=i<X<\\<Q<Q<R<U<[<Q<\\=k<T=n<Q<Y<W=`<[=c=h<R=l=o<P<\\<N<Y<S<Y=l=`<P<Y=m=c=j<\\<[<\\=e<T=n=g<w=o=k=d<T<Y\fHD\fHU\fIl\fHn\fHy\fH\\\fHD\fIk\fHi\fHF\fHD\fIk\fHy\fHS\fHC\fHR\fHy\fH\\\fIk\fHn\fHi\fHD\fIa\fHC\fHy\fIa\fHC\fHR\fH{\fHR\fHk\fHM\fH@\fHR\fH\\\fIk\fHy\fHS\fHT\fIl\fHJ\fHS\fHC\fHR\fHF\fHU\fH^\fIk\fHT\fHS\fHn\fHU\fHA\fHR\fH\\\fHH\fHi\fHF\fHD\fIl\fHY\fHR\fH^\fIk\fHT\fIk\fHY\fHR\fHy\fH\\\fHH\fIk\fHB\fIk\fH\\\fIk\fHU\fIg\fHD\fIk\fHT\fHy\fHH\fIk\fH@\fHU\fIm\fHH\fHT\fHR\fHk\fHs\fHU\fIg\fH{\fHR\fHp\fHR\fHD\fIk\fHB\fHS\fHD\fHs\fHy\fH\\\fHH\fHR\fHy\fH\\\fHD\fHR\fHe\fHD\fHy\fIk\fHC\fHU\fHR\fHm\fHT\fH@\fHT\fIk\fHA\fHR\fH[\fHR\fHj\fHF\fHy\fIk\fH^\fHS\fHC\fIk\fHZ\fIm\fH\\\fIn\fHk\fHT\fHy\fIk\fHt\fHn\fHs\fIk\fHB\fIk\fH\\\fIl\fHT\fHy\fHH\fHR\fHB\fIk\fH\\\fHR\fH^\fIk\fHy\fH\\\fHi\fHK\fHS\fHy\fHi\fHF\fHD\fHR\fHT\fHB\fHR\fHp\fHB\fIm\fHq\fIk\fHy\fHR\fH\\\fHO\fHU\fIg\fHH\fHR\fHy\fHM\fHP\fIl\fHC\fHU\fHR\fHn\fHU\fIg\fHs\fH^\fHZ\fH@\fIa\fHJ\fH^\fHS\fHC\fHR\fHp\fIl\fHY\fHD\fHp\fHR\fHH\fHR\fHy\fId\fHT\fIk\fHj\fHF\fHy\fHR\fHY\fHR\fH^\fIl\fHJ\fIk\fHD\fIk\fHF\fIn\fH\\\fIl\fHF\fHR\fHD\fIl\fHe\fHT\fHy\fIk\fHU\fIg\fH{\fIl\fH@\fId\fHL\fHy\fHj\fHF\fHy\fIl\fHY\fH\\\fIa\fH[\fH{\fHR\fHn\fHY\fHj\fHF\fHy\fIg\fHp\fHS\fH^\fHR\fHp\fHR\fHD\fHR\fHT\fHU\fHB\fHH\fHU\fHB\fIk\fHn\fHe\fHD\fHy\fIl\fHC\fHR\fHU\fIn\fHJ\fH\\\fIa\fHp\fHT\fIn\fHv\fIl\fHF\fHT\fHn\fHJ\fHT\fHY\fHR\fH^\fHU\fIg\fHD\fHR\fHU\fIg\fHH\fIl\fHp\fId\fHT\fIk\fHY\fHR\fHF\fHT\fHp\fHD\fHH\fHR\fHD\fIk\fHH\fHR\fHp\fHR\fH\\\fIl\fHt\fHR\fHC\fH^\fHp\fHS\fH^\fIk\fHD\fIl\fHv\fIk\fHp\fHR\fHn\fHv\fHF\fHH\fIa\fH\\\fH{\fIn\fH{\fH^\fHp\fHR\fHH\fIk\fH@\fHR\fHU\fH\\\fHj\fHF\fHD\fIk\fHY\fHR\fHU\fHD\fHk\fHT\fHy\fHR\fHT\fIm\fH@\fHU\fH\\\fHU\fHD\fIk\fHk\fHT\fHT\fIk\fHT\fHU\fHS\fHH\fH@\fHM\fHP\fIk\fHt\fHs\fHD\fHR\fHH\fH^\fHR\fHZ\fHF\fHR\fHn\fHv\fHZ\fIa\fH\\\fIl\fH@\fHM\fHP\fIl\fHU\fIg\fHH\fIk\fHT\fHR\fHd\fHs\fHZ\fHR\fHC\fHJ\fHT\fHy\fHH\fIl\fHp\fHR\fHH\fIl\fHY\fHR\fH^\fHR\fHU\fHp\fHR\fH\\\fHF\fHs\fHD\fHR\fH\\\fHz\fHD\fIk\fHT\fHM\fHP\fHy\fHB\fHS\fH^\fHR\fHe\fHT\fHy\fIl\fHy\fIk\fHY\fH^\fH^\fH{\fHH\fHR\fHz\fHR\fHD\fHR\fHi\fH\\\fIa\fHI\fHp\fHU\fHR\fHn\fHJ\fIk\fHz\fHR\fHF\fHU\fH^\fIl\fHD\fHS\fHC\fHB\fH@\fHS\fHD\fHR\fH@\fId\fHn\fHy\fHy\fHU\fIl\fHn\fHy\fHU\fHD\fHR\fHJ\fIk\fHH\fHR\fHU\fHB\fH^\fIk\fHy\fHR\fHG\fIl\fHp\fH@\fHy\fHS\fHH\fIm\fH\\\fHH\fHB\fHR\fHn\fH{\fHY\fHU\fIl\fHn\fH\\\fIg\fHp\fHP\fHB\fHS\fH^\fIl\fHj\fH\\\fIg\fHF\fHT\fIk\fHD\fHR\fHC\fHR\fHJ\fHY\fH^\fIk\fHD\fIk\fHz\fHR\fHH\fHR\fHy\fH\\\fIl\fH@\fHe\fHD\fHy\fHR\fHp\fHY\fHR\fH@\fHF\fIn\fH\\\fHR\fH@\fHM\fHP\fHR\fHT\fI`\fHJ\fHR\fHZ\fIk\fHC\fH\\\fHy\fHS\fHC\fIk\fHy\fHU\fHR\fHn\fHi\fHy\fHT\fH\\\fH@\fHD\fHR\fHc\fHY\fHU\fHR\fHn\fHT\fIa\fHI\fH^\fHB\fHS\fH^\fIk\fH^\fIk\fHz\fHy\fHY\fHS\fH[\fHC\fHy\fIa\fH\\\fHn\fHT\fHB\fIn\fHU\fHI\fHR\fHD\fHR4F4_4F4[5f4U5i4X4K4]5o4E4D5d4K4_4[4E4K5h4Y5m4A4E5i5d4K4Z5f4U4K5h4B4K4Y4E4K5h5i4^5f4C4K5h4U4K5i4E4K5h5o4K4F4D4K5h4]4C5d4C4D4]5j4K5i4@4K5h4C5d5h4E4K5h4U4K5h5i4K5h5i5d5n4U4K5h4U4]4D5f4K5h4_4]5f4U4K5h4@5d4K5h4K5h4\\5k4K4D4K5h4A5f4K4E4K5h4A5n5d5n4K5h5o4]5f5i4K5h4U4]4K5n5i4A5m5d4T4E4K5h4G4K5j5f5i4X4K5k4C4E4K5h5i4]4O4E4K5h5n4]4N5j4K5h4X4D4K4D4K5h4A5d4K4]4K5h4@4C5f4C4K5h4O4_4]4E4K5h4U5h5d5i5i4@5i5d4U4E4K5h4]4A5i5j4K5h5j5n4K4[5m5h4_4[5f5j4K5h5o5d5f4F4K5h4C5j5f4K4D4]5o4K4F5k4K5h4]5f4K4Z4F4A5f4K4F5f4D4F5d5n5f4F4K5h4O5d5h5e4K5h4D4]5f4C4K5h5o5h4K5i4K5h4]4K4D4[4K5h4X4B4Y5f4_5f4K4]4K4F4K5h4G4K5h4G4K5h4Y5h4K4E4K5h4A4C5f4G4K5h4^5d4K4]4K5h4B5h5f4@4K5h4@5i5f4U4K5h4U4K5i5k4K5h4@5i4K5h4K5h4_4K4U4E5i4X4K5k4C5k4K5h4]4J5f4_4K5h4C4B5d5h4K5h5m5j5f4E4K5h5o4F4K4D4K5h4C5d4]5f4K5h4C4]5d4_4K4_4F4V4]5n4F4Y4K5i5f5i4K5h4D5j4K4F4K5h4U4T5f5ifmwfqwbjmnfmwvmgfqpwbmgjmd#>#evm`wjlm+*-isd!#tjgwk>!`lmejdvqbwjlm-smd!#tjgwk>!?algz#`obpp>!Nbwk-qbmgln+*`lmwfnslqbqz#Vmjwfg#Pwbwfp`jq`vnpwbm`fp-bssfmg@kjog+lqdbmjybwjlmp?psbm#`obpp>!!=?jnd#pq`>!,gjpwjmdvjpkfgwklvpbmgp#le#`lnnvmj`bwjlm`ofbq!=?,gju=jmufpwjdbwjlmebuj`lm-j`l!#nbqdjm.qjdkw9abpfg#lm#wkf#Nbppb`kvpfwwpwbaof#alqgfq>jmwfqmbwjlmbobopl#hmltm#bpsqlmvm`jbwjlmab`hdqlvmg9 esbggjmd.ofew9Elq#f{bnsof/#njp`foobmflvp%ow8,nbwk%dw8spz`kloldj`bojm#sbqwj`vobqfbq`k!#wzsf>!elqn#nfwklg>!bp#lsslpfg#wlPvsqfnf#@lvqwl``bpjlmbooz#Bggjwjlmbooz/Mlqwk#Bnfqj`bs{8ab`hdqlvmglsslqwvmjwjfpFmwfqwbjmnfmw-wlOltfq@bpf+nbmveb`wvqjmdsqlefppjlmbo#`lnajmfg#tjwkElq#jmpwbm`f/`lmpjpwjmd#le!#nb{ofmdwk>!qfwvqm#ebopf8`lmp`jlvpmfppNfgjwfqqbmfbmf{wqblqgjmbqzbppbppjmbwjlmpvapfrvfmwoz#avwwlm#wzsf>!wkf#mvnafq#lewkf#lqjdjmbo#`lnsqfkfmpjufqfefqp#wl#wkf?,vo=\t?,gju=\tskjolplskj`bool`bwjlm-kqfetbp#svaojpkfgPbm#Eqbm`jp`l+evm`wjlm+*x\t?gju#jg>!nbjmplskjpwj`bwfgnbwkfnbwj`bo#,kfbg=\x0E\t?algzpvddfpwp#wkbwgl`vnfmwbwjlm`lm`fmwqbwjlmqfobwjlmpkjspnbz#kbuf#affm+elq#f{bnsof/Wkjp#bqwj`of#jm#plnf#`bpfpsbqwp#le#wkf#gfejmjwjlm#leDqfbw#Aqjwbjm#`foosbggjmd>frvjubofmw#wlsob`fklogfq>!8#elmw.pjyf9#ivpwjej`bwjlmafojfufg#wkbwpveefqfg#eqlnbwwfnswfg#wl#ofbgfq#le#wkf`qjsw!#pq`>!,+evm`wjlm+*#xbqf#bubjobaof\t\n?ojmh#qfo>!#pq`>$kwws9,,jmwfqfpwfg#jm`lmufmwjlmbo#!#bow>!!#,=?,bqf#dfmfqboozkbp#bopl#affmnlpw#slsvobq#`lqqfpslmgjmd`qfgjwfg#tjwkwzof>!alqgfq9?,b=?,psbm=?,-dje!#tjgwk>!?jeqbnf#pq`>!wbaof#`obpp>!jmojmf.aol`h8b``lqgjmd#wl#wldfwkfq#tjwkbssql{jnbwfozsbqojbnfmwbqznlqf#bmg#nlqfgjpsobz9mlmf8wqbgjwjlmboozsqfglnjmbmwoz%maps8\x7F%maps8%maps8?,psbm=#`foopsb`jmd>?jmsvw#mbnf>!lq!#`lmwfmw>!`lmwqlufqpjbosqlsfqwz>!ld9,{.pkl`htbuf.gfnlmpwqbwjlmpvqqlvmgfg#azMfufqwkfofpp/tbp#wkf#ejqpw`lmpjgfqbaof#Bowklvdk#wkf#`loobalqbwjlmpklvog#mlw#afsqlslqwjlm#le?psbm#pwzof>!hmltm#bp#wkf#pklqwoz#bewfqelq#jmpwbm`f/gfp`qjafg#bp#,kfbg=\t?algz#pwbqwjmd#tjwkjm`qfbpjmdoz#wkf#eb`w#wkbwgjp`vppjlm#lenjggof#le#wkfbm#jmgjujgvbogjeej`vow#wl#sljmw#le#ujftklnlpf{vbojwzb``fswbm`f#le?,psbm=?,gju=nbmveb`wvqfqplqjdjm#le#wkf`lnnlmoz#vpfgjnslqwbm`f#legfmlnjmbwjlmpab`hdqlvmg9# ofmdwk#le#wkfgfwfqnjmbwjlmb#pjdmjej`bmw!#alqgfq>!3!=qfulovwjlmbqzsqjm`jsofp#lejp#`lmpjgfqfgtbp#gfufolsfgJmgl.Fvqlsfbmuvomfqbaof#wlsqlslmfmwp#lebqf#plnfwjnfp`olpfq#wl#wkfMft#Zlqh#@jwz#mbnf>!pfbq`kbwwqjavwfg#wl`lvqpf#le#wkfnbwkfnbwj`jbmaz#wkf#fmg#lebw#wkf#fmg#le!#alqgfq>!3!#wf`kmloldj`bo-qfnluf@obpp+aqbm`k#le#wkffujgfm`f#wkbw\"Xfmgje^..=\x0E\tJmpwjwvwf#le#jmwl#b#pjmdofqfpsf`wjufoz-bmg#wkfqfelqfsqlsfqwjfp#lejp#ol`bwfg#jmplnf#le#tkj`kWkfqf#jp#bopl`lmwjmvfg#wl#bssfbqbm`f#le#%bns8mgbpk8#gfp`qjafp#wkf`lmpjgfqbwjlmbvwklq#le#wkfjmgfsfmgfmwozfrvjssfg#tjwkglfp#mlw#kbuf?,b=?b#kqfe>!`lmevpfg#tjwk?ojmh#kqfe>!,bw#wkf#bdf#lebssfbq#jm#wkfWkfpf#jm`ovgfqfdbqgofpp#le`lvog#af#vpfg#pwzof>%rvlw8pfufqbo#wjnfpqfsqfpfmw#wkfalgz=\t?,kwno=wklvdkw#wl#afslsvobwjlm#leslppjajojwjfpsfq`fmwbdf#leb``fpp#wl#wkfbm#bwwfnsw#wlsqlgv`wjlm#leirvfqz,irvfqzwtl#gjeefqfmwafolmd#wl#wkffpwbaojpknfmwqfsob`jmd#wkfgfp`qjswjlm!#gfwfqnjmf#wkfbubjobaof#elqB``lqgjmd#wl#tjgf#qbmdf#le\n?gju#`obpp>!nlqf#`lnnlmozlqdbmjpbwjlmpevm`wjlmbojwztbp#`lnsofwfg#%bns8ngbpk8#sbqwj`jsbwjlmwkf#`kbqb`wfqbm#bggjwjlmbobssfbqp#wl#afeb`w#wkbw#wkfbm#f{bnsof#lepjdmjej`bmwozlmnlvpflufq>!af`bvpf#wkfz#bpzm`#>#wqvf8sqlaofnp#tjwkpffnp#wl#kbufwkf#qfpvow#le#pq`>!kwws9,,ebnjojbq#tjwkslppfppjlm#leevm`wjlm#+*#xwllh#sob`f#jmbmg#plnfwjnfppvapwbmwjbooz?psbm=?,psbm=jp#lewfm#vpfgjm#bm#bwwfnswdqfbw#gfbo#leFmujqlmnfmwbopv``fppevooz#ujqwvbooz#boo13wk#`fmwvqz/sqlefppjlmbopmf`fppbqz#wl#gfwfqnjmfg#az`lnsbwjajojwzaf`bvpf#jw#jpGj`wjlmbqz#lenlgjej`bwjlmpWkf#elooltjmdnbz#qfefq#wl9@lmpfrvfmwoz/Jmwfqmbwjlmbobowklvdk#plnfwkbw#tlvog#aftlqog$p#ejqpw`obppjejfg#bpalwwln#le#wkf+sbqwj`vobqozbojdm>!ofew!#nlpw#`lnnlmozabpjp#elq#wkfelvmgbwjlm#le`lmwqjavwjlmpslsvobqjwz#le`fmwfq#le#wkfwl#qfgv`f#wkfivqjpgj`wjlmpbssql{jnbwjlm#lmnlvpflvw>!Mft#Wfpwbnfmw`loof`wjlm#le?,psbm=?,b=?,jm#wkf#Vmjwfgejon#gjqf`wlq.pwqj`w-gwg!=kbp#affm#vpfgqfwvqm#wl#wkfbowklvdk#wkjp`kbmdf#jm#wkfpfufqbo#lwkfqavw#wkfqf#bqfvmsqf`fgfmwfgjp#pjnjobq#wlfpsf`jbooz#jmtfjdkw9#alog8jp#`boofg#wkf`lnsvwbwjlmbojmgj`bwf#wkbwqfpwqj`wfg#wl\n?nfwb#mbnf>!bqf#wzsj`booz`lmeoj`w#tjwkKltfufq/#wkf#Bm#f{bnsof#le`lnsbqfg#tjwkrvbmwjwjfp#leqbwkfq#wkbm#b`lmpwfoobwjlmmf`fppbqz#elqqfslqwfg#wkbwpsf`jej`bwjlmslojwj`bo#bmg%maps8%maps8?qfefqfm`fp#wlwkf#pbnf#zfbqDlufqmnfmw#ledfmfqbwjlm#lekbuf#mlw#affmpfufqbo#zfbqp`lnnjwnfmw#wl\n\n?vo#`obpp>!ujpvbojybwjlm2:wk#`fmwvqz/sqb`wjwjlmfqpwkbw#kf#tlvogbmg#`lmwjmvfgl``vsbwjlm#lejp#gfejmfg#bp`fmwqf#le#wkfwkf#bnlvmw#le=?gju#pwzof>!frvjubofmw#legjeefqfmwjbwfaqlvdkw#balvwnbqdjm.ofew9#bvwlnbwj`boozwklvdkw#le#bpPlnf#le#wkfpf\t?gju#`obpp>!jmsvw#`obpp>!qfsob`fg#tjwkjp#lmf#le#wkffgv`bwjlm#bmgjmeovfm`fg#azqfsvwbwjlm#bp\t?nfwb#mbnf>!b``lnnlgbwjlm?,gju=\t?,gju=obqdf#sbqw#leJmpwjwvwf#elqwkf#pl.`boofg#bdbjmpw#wkf#Jm#wkjp#`bpf/tbp#bssljmwfg`objnfg#wl#afKltfufq/#wkjpGfsbqwnfmw#lewkf#qfnbjmjmdfeef`w#lm#wkfsbqwj`vobqoz#gfbo#tjwk#wkf\t?gju#pwzof>!bonlpw#botbzpbqf#`vqqfmwozf{sqfppjlm#leskjolplskz#leelq#nlqf#wkbm`jujojybwjlmplm#wkf#jpobmgpfof`wfgJmgf{`bm#qfpvow#jm!#ubovf>!!#,=wkf#pwqv`wvqf#,=?,b=?,gju=Nbmz#le#wkfpf`bvpfg#az#wkfle#wkf#Vmjwfgpsbm#`obpp>!n`bm#af#wqb`fgjp#qfobwfg#wlaf`bnf#lmf#lejp#eqfrvfmwozojujmd#jm#wkfwkflqfwj`boozElooltjmd#wkfQfulovwjlmbqzdlufqmnfmw#jmjp#gfwfqnjmfgwkf#slojwj`bojmwqlgv`fg#jmpveej`jfmw#wlgfp`qjswjlm!=pklqw#pwlqjfppfsbqbwjlm#lebp#wl#tkfwkfqhmltm#elq#jwptbp#jmjwjboozgjpsobz9aol`hjp#bm#f{bnsofwkf#sqjm`jsbo`lmpjpwp#le#bqf`ldmjyfg#bp,algz=?,kwno=b#pvapwbmwjboqf`lmpwqv`wfgkfbg#le#pwbwfqfpjpwbm`f#wlvmgfqdqbgvbwfWkfqf#bqf#wtldqbujwbwjlmbobqf#gfp`qjafgjmwfmwjlmboozpfqufg#bp#wkf`obpp>!kfbgfqlsslpjwjlm#wlevmgbnfmwboozglnjmbwfg#wkfbmg#wkf#lwkfqboojbm`f#tjwktbp#elq`fg#wlqfpsf`wjufoz/bmg#slojwj`bojm#pvsslqw#lesflsof#jm#wkf13wk#`fmwvqz-bmg#svaojpkfgolbg@kbqwafbwwl#vmgfqpwbmgnfnafq#pwbwfpfmujqlmnfmwboejqpw#kboe#le`lvmwqjfp#bmgbq`kjwf`wvqboaf#`lmpjgfqfg`kbqb`wfqjyfg`ofbqJmwfqubobvwklqjwbwjufEfgfqbwjlm#letbp#pv``ffgfgbmg#wkfqf#bqfb#`lmpfrvfm`fwkf#Sqfpjgfmwbopl#jm`ovgfgeqff#plewtbqfpv``fppjlm#legfufolsfg#wkftbp#gfpwqlzfgbtbz#eqln#wkf8\t?,p`qjsw=\t?bowklvdk#wkfzelooltfg#az#bnlqf#sltfqevoqfpvowfg#jm#bVmjufqpjwz#leKltfufq/#nbmzwkf#sqfpjgfmwKltfufq/#plnfjp#wklvdkw#wlvmwjo#wkf#fmgtbp#bmmlvm`fgbqf#jnslqwbmwbopl#jm`ovgfp=?jmsvw#wzsf>wkf#`fmwfq#le#GL#MLW#BOWFQvpfg#wl#qfefqwkfnfp,<plqw>wkbw#kbg#affmwkf#abpjp#elqkbp#gfufolsfgjm#wkf#pvnnfq`lnsbqbwjufozgfp`qjafg#wkfpv`k#bp#wklpfwkf#qfpvowjmdjp#jnslppjaofubqjlvp#lwkfqPlvwk#Beqj`bmkbuf#wkf#pbnffeef`wjufmfppjm#tkj`k#`bpf8#wf{w.bojdm9pwqv`wvqf#bmg8#ab`hdqlvmg9qfdbqgjmd#wkfpvsslqwfg#wkfjp#bopl#hmltmpwzof>!nbqdjmjm`ovgjmd#wkfabkbpb#Nfobzvmlqph#alhn/Iomlqph#mzmlqphpolufm)M(ajmbjmwfqmb`jlmbo`bojej`b`j/_m`lnvmj`b`j/_m`lmpwqv``j/_m!=?gju#`obpp>!gjpbnajdvbwjlmGlnbjmMbnf$/#$bgnjmjpwqbwjlmpjnvowbmflvpozwqbmpslqwbwjlmJmwfqmbwjlmbo#nbqdjm.alwwln9qfpslmpjajojwz?\"Xfmgje^..=\t?,=?nfwb#mbnf>!jnsofnfmwbwjlmjmeqbpwqv`wvqfqfsqfpfmwbwjlmalqgfq.alwwln9?,kfbg=\t?algz=>kwws&0B&1E&1E?elqn#nfwklg>!nfwklg>!slpw!#,ebuj`lm-j`l!#~*8\t?,p`qjsw=\t-pfwBwwqjavwf+Bgnjmjpwqbwjlm>#mft#Bqqbz+*8?\"Xfmgje^..=\x0E\tgjpsobz9aol`h8Vmelqwvmbwfoz/!=%maps8?,gju=,ebuj`lm-j`l!=>$pwzofpkffw$#jgfmwjej`bwjlm/#elq#f{bnsof/?oj=?b#kqfe>!,bm#bowfqmbwjufbp#b#qfpvow#lesw!=?,p`qjsw=\twzsf>!pvanjw!#\t+evm`wjlm+*#xqf`lnnfmgbwjlmelqn#b`wjlm>!,wqbmpelqnbwjlmqf`lmpwqv`wjlm-pwzof-gjpsobz#B``lqgjmd#wl#kjggfm!#mbnf>!bolmd#tjwk#wkfgl`vnfmw-algz-bssql{jnbwfoz#@lnnvmj`bwjlmpslpw!#b`wjlm>!nfbmjmd#%rvlw8..?\"Xfmgje^..=Sqjnf#Njmjpwfq`kbqb`wfqjpwj`?,b=#?b#`obpp>wkf#kjpwlqz#le#lmnlvpflufq>!wkf#dlufqmnfmwkqfe>!kwwsp9,,tbp#lqjdjmbooztbp#jmwqlgv`fg`obppjej`bwjlmqfsqfpfmwbwjufbqf#`lmpjgfqfg?\"Xfmgje^..=\t\tgfsfmgp#lm#wkfVmjufqpjwz#le#jm#`lmwqbpw#wl#sob`fklogfq>!jm#wkf#`bpf#lejmwfqmbwjlmbo#`lmpwjwvwjlmbopwzof>!alqgfq.9#evm`wjlm+*#xAf`bvpf#le#wkf.pwqj`w-gwg!=\t?wbaof#`obpp>!b``lnsbmjfg#azb``lvmw#le#wkf?p`qjsw#pq`>!,mbwvqf#le#wkf#wkf#sflsof#jm#jm#bggjwjlm#wlp*8#ip-jg#>#jg!#tjgwk>!233&!qfdbqgjmd#wkf#Qlnbm#@bwkloj`bm#jmgfsfmgfmwelooltjmd#wkf#-dje!#tjgwk>!2wkf#elooltjmd#gjp`qjnjmbwjlmbq`kbfloldj`bosqjnf#njmjpwfq-ip!=?,p`qjsw=`lnajmbwjlm#le#nbqdjmtjgwk>!`qfbwfFofnfmw+t-bwwb`kFufmw+?,b=?,wg=?,wq=pq`>!kwwsp9,,bJm#sbqwj`vobq/#bojdm>!ofew!#@yf`k#Qfsvaoj`Vmjwfg#Hjmdgln`lqqfpslmgfm`f`lm`ovgfg#wkbw-kwno!#wjwof>!+evm`wjlm#+*#x`lnfp#eqln#wkfbssoj`bwjlm#le?psbm#`obpp>!pafojfufg#wl#affnfmw+$p`qjsw$?,b=\t?,oj=\t?ojufqz#gjeefqfmw=?psbm#`obpp>!lswjlm#ubovf>!+bopl#hmltm#bp\n?oj=?b#kqfe>!=?jmsvw#mbnf>!pfsbqbwfg#eqlnqfefqqfg#wl#bp#ubojdm>!wls!=elvmgfq#le#wkfbwwfnswjmd#wl#`bqalm#gjl{jgf\t\t?gju#`obpp>!`obpp>!pfbq`k.,algz=\t?,kwno=lsslqwvmjwz#wl`lnnvmj`bwjlmp?,kfbg=\x0E\t?algz#pwzof>!tjgwk9Wj\rVSmd#Uj\rWkw`kbmdfp#jm#wkfalqgfq.`lolq9 3!#alqgfq>!3!#?,psbm=?,gju=?tbp#gjp`lufqfg!#wzsf>!wf{w!#*8\t?,p`qjsw=\t\tGfsbqwnfmw#le#f``ofpjbpwj`bowkfqf#kbp#affmqfpvowjmd#eqln?,algz=?,kwno=kbp#mfufq#affmwkf#ejqpw#wjnfjm#qfpslmpf#wlbvwlnbwj`booz#?,gju=\t\t?gju#jtbp#`lmpjgfqfgsfq`fmw#le#wkf!#,=?,b=?,gju=`loof`wjlm#le#gfp`fmgfg#eqlnpf`wjlm#le#wkfb``fsw.`kbqpfwwl#af#`lmevpfgnfnafq#le#wkf#sbggjmd.qjdkw9wqbmpobwjlm#lejmwfqsqfwbwjlm#kqfe>$kwws9,,tkfwkfq#lq#mlwWkfqf#bqf#boplwkfqf#bqf#nbmzb#pnboo#mvnafqlwkfq#sbqwp#lejnslppjaof#wl##`obpp>!avwwlmol`bwfg#jm#wkf-#Kltfufq/#wkfbmg#fufmwvboozBw#wkf#fmg#le#af`bvpf#le#jwpqfsqfpfmwp#wkf?elqn#b`wjlm>!#nfwklg>!slpw!jw#jp#slppjaofnlqf#ojhfoz#wlbm#jm`qfbpf#jmkbuf#bopl#affm`lqqfpslmgp#wlbmmlvm`fg#wkbwbojdm>!qjdkw!=nbmz#`lvmwqjfpelq#nbmz#zfbqpfbqojfpw#hmltmaf`bvpf#jw#tbpsw!=?,p`qjsw=\x0E#ubojdm>!wls!#jmkbajwbmwp#leelooltjmd#zfbq\x0E\t?gju#`obpp>!njoojlm#sflsof`lmwqlufqpjbo#`lm`fqmjmd#wkfbqdvf#wkbw#wkfdlufqmnfmw#bmgb#qfefqfm`f#wlwqbmpefqqfg#wlgfp`qjajmd#wkf#pwzof>!`lolq9bowklvdk#wkfqfafpw#hmltm#elqpvanjw!#mbnf>!nvowjsoj`bwjlmnlqf#wkbm#lmf#qf`ldmjwjlm#le@lvm`jo#le#wkffgjwjlm#le#wkf##?nfwb#mbnf>!Fmwfqwbjmnfmw#btbz#eqln#wkf#8nbqdjm.qjdkw9bw#wkf#wjnf#lejmufpwjdbwjlmp`lmmf`wfg#tjwkbmg#nbmz#lwkfqbowklvdk#jw#jpafdjmmjmd#tjwk#?psbm#`obpp>!gfp`fmgbmwp#le?psbm#`obpp>!j#bojdm>!qjdkw!?,kfbg=\t?algz#bpsf`wp#le#wkfkbp#pjm`f#affmFvqlsfbm#Vmjlmqfnjmjp`fmw#lenlqf#gjeej`vowUj`f#Sqfpjgfmw`lnslpjwjlm#lesbppfg#wkqlvdknlqf#jnslqwbmwelmw.pjyf922s{f{sobmbwjlm#lewkf#`lm`fsw#letqjwwfm#jm#wkf\n?psbm#`obpp>!jp#lmf#le#wkf#qfpfnaobm`f#wllm#wkf#dqlvmgptkj`k#`lmwbjmpjm`ovgjmd#wkf#gfejmfg#az#wkfsvaoj`bwjlm#lenfbmp#wkbw#wkflvwpjgf#le#wkfpvsslqw#le#wkf?jmsvw#`obpp>!?psbm#`obpp>!w+Nbwk-qbmgln+*nlpw#sqlnjmfmwgfp`qjswjlm#le@lmpwbmwjmlsoftfqf#svaojpkfg?gju#`obpp>!pfbssfbqp#jm#wkf2!#kfjdkw>!2!#nlpw#jnslqwbmwtkj`k#jm`ovgfptkj`k#kbg#affmgfpwqv`wjlm#lewkf#slsvobwjlm\t\n?gju#`obpp>!slppjajojwz#leplnfwjnfp#vpfgbssfbq#wl#kbufpv``fpp#le#wkfjmwfmgfg#wl#afsqfpfmw#jm#wkfpwzof>!`ofbq9a\x0E\t?,p`qjsw=\x0E\t?tbp#elvmgfg#jmjmwfqujft#tjwk\\jg!#`lmwfmw>!`bsjwbo#le#wkf\x0E\t?ojmh#qfo>!pqfofbpf#le#wkfsljmw#lvw#wkbw{NOKwwsQfrvfpwbmg#pvapfrvfmwpf`lmg#obqdfpwufqz#jnslqwbmwpsf`jej`bwjlmppvqeb`f#le#wkfbssojfg#wl#wkfelqfjdm#sloj`z\\pfwGlnbjmMbnffpwbaojpkfg#jmjp#afojfufg#wlJm#bggjwjlm#wlnfbmjmd#le#wkfjp#mbnfg#bewfqwl#sqlwf`w#wkfjp#qfsqfpfmwfgGf`obqbwjlm#lenlqf#feej`jfmw@obppjej`bwjlmlwkfq#elqnp#lekf#qfwvqmfg#wl?psbm#`obpp>!`sfqelqnbm`f#le+evm`wjlm+*#x\x0Eje#bmg#lmoz#jeqfdjlmp#le#wkfofbgjmd#wl#wkfqfobwjlmp#tjwkVmjwfg#Mbwjlmppwzof>!kfjdkw9lwkfq#wkbm#wkfzsf!#`lmwfmw>!Bppl`jbwjlm#le\t?,kfbg=\t?algzol`bwfg#lm#wkfjp#qfefqqfg#wl+jm`ovgjmd#wkf`lm`fmwqbwjlmpwkf#jmgjujgvbobnlmd#wkf#nlpwwkbm#bmz#lwkfq,=\t?ojmh#qfo>!#qfwvqm#ebopf8wkf#svqslpf#lewkf#bajojwz#wl8`lolq9 eee~\t-\t?psbm#`obpp>!wkf#pvaif`w#legfejmjwjlmp#le=\x0E\t?ojmh#qfo>!`objn#wkbw#wkfkbuf#gfufolsfg?wbaof#tjgwk>!`fofaqbwjlm#leElooltjmd#wkf#wl#gjpwjmdvjpk?psbm#`obpp>!awbhfp#sob`f#jmvmgfq#wkf#mbnfmlwfg#wkbw#wkf=?\"Xfmgje^..=\tpwzof>!nbqdjm.jmpwfbg#le#wkfjmwqlgv`fg#wkfwkf#sql`fpp#lejm`qfbpjmd#wkfgjeefqfm`fp#jmfpwjnbwfg#wkbwfpsf`jbooz#wkf,gju=?gju#jg>!tbp#fufmwvboozwkqlvdklvw#kjpwkf#gjeefqfm`fplnfwkjmd#wkbwpsbm=?,psbm=?,pjdmjej`bmwoz#=?,p`qjsw=\x0E\t\x0E\tfmujqlmnfmwbo#wl#sqfufmw#wkfkbuf#affm#vpfgfpsf`jbooz#elqvmgfqpwbmg#wkfjp#fppfmwjbooztfqf#wkf#ejqpwjp#wkf#obqdfpwkbuf#affm#nbgf!#pq`>!kwws9,,jmwfqsqfwfg#bppf`lmg#kboe#le`qloojmd>!ml!#jp#`lnslpfg#leJJ/#Kloz#Qlnbmjp#f{sf`wfg#wlkbuf#wkfjq#ltmgfejmfg#bp#wkfwqbgjwjlmbooz#kbuf#gjeefqfmwbqf#lewfm#vpfgwl#fmpvqf#wkbwbdqffnfmw#tjwk`lmwbjmjmd#wkfbqf#eqfrvfmwozjmelqnbwjlm#lmf{bnsof#jp#wkfqfpvowjmd#jm#b?,b=?,oj=?,vo=#`obpp>!ellwfqbmg#fpsf`jboozwzsf>!avwwlm!#?,psbm=?,psbm=tkj`k#jm`ovgfg=\t?nfwb#mbnf>!`lmpjgfqfg#wkf`bqqjfg#lvw#azKltfufq/#jw#jpaf`bnf#sbqw#lejm#qfobwjlm#wlslsvobq#jm#wkfwkf#`bsjwbo#letbp#leej`jbooztkj`k#kbp#affmwkf#Kjpwlqz#lebowfqmbwjuf#wlgjeefqfmw#eqlnwl#pvsslqw#wkfpvddfpwfg#wkbwjm#wkf#sql`fpp##?gju#`obpp>!wkf#elvmgbwjlmaf`bvpf#le#kjp`lm`fqmfg#tjwkwkf#vmjufqpjwzlsslpfg#wl#wkfwkf#`lmwf{w#le?psbm#`obpp>!swf{w!#mbnf>!r!\n\n?gju#`obpp>!wkf#p`jfmwjej`qfsqfpfmwfg#aznbwkfnbwj`jbmpfof`wfg#az#wkfwkbw#kbuf#affm=?gju#`obpp>!`gju#jg>!kfbgfqjm#sbqwj`vobq/`lmufqwfg#jmwl*8\t?,p`qjsw=\t?skjolplskj`bo#pqsphlkqubwphjwj\rVSmd#Uj\rWkw<L=o=m=m<V<T<U=l=o=m=m<V<T<Ujmufpwjdb`j/_msbqwj`jsb`j/_m<V<R=n<R=l=g<Y<R<]<W<\\=m=n<T<V<R=n<R=l=g<U=k<Y<W<R<^<Y<V=m<T=m=n<Y<P=g<q<R<^<R=m=n<T<V<R=n<R=l=g=i<R<]<W<\\=m=n=`<^=l<Y<P<Y<Q<T<V<R=n<R=l<\\=c=m<Y<_<R<X<Q=c=m<V<\\=k<\\=n=`<Q<R<^<R=m=n<T<O<V=l<\\<T<Q=g<^<R<S=l<R=m=g<V<R=n<R=l<R<U=m<X<Y<W<\\=n=`<S<R<P<R=e=`=b=m=l<Y<X=m=n<^<R<]=l<\\<[<R<P=m=n<R=l<R<Q=g=o=k<\\=m=n<T<Y=n<Y=k<Y<Q<T<Y<\x7F<W<\\<^<Q<\\=c<T=m=n<R=l<T<T=m<T=m=n<Y<P<\\=l<Y=d<Y<Q<T=c<M<V<\\=k<\\=n=`<S<R=a=n<R<P=o=m<W<Y<X=o<Y=n=m<V<\\<[<\\=n=`=n<R<^<\\=l<R<^<V<R<Q<Y=k<Q<R=l<Y=d<Y<Q<T<Y<V<R=n<R=l<R<Y<R=l<_<\\<Q<R<^<V<R=n<R=l<R<P<L<Y<V<W<\\<P<\\4K5h5i5j4F4C5e5i5j4F4C5f4K4F4K5h5i5d4Z5d4U4K5h4D4]4K5i4@4K5h5i5d4K5n4U4K5h4]4_4K4J5h5i4X4K4]5o4K4F4K5h4O4U4Z4K4M4K5h4]5f4K4Z4E4K5h4F4Y5i5f5i4K5h4K4U4Z4K4M4K5h5j4F4K4J4@4K5h4O5h4U4K4D4K5h4F4_4@5f5h4K5h4O5n4_4K5i4K5h4Z4V4[4K4F4K5h5m5f4C5f5d4K5h4F4]4A5f4D4K5h4@4C5f4C4E4K5h4F4U5h5f5i4K5h4O4B4D4K4]4K5h4K5m5h4K5i4K5h4O5m5h4K5i4K5h4F4K4]5f4B4K5h4F5n5j5f4E4K5h4K5h4U4K4D4K5h4B5d4K4[4]4K5h5i4@4F5i4U4K5h4C5f5o5d4]4K5h4_5f4K4A4E4U4D4C4K5h5h5k4K5h4F4]4D5f4E4K5h4]5d4K4D4[4K5h4O4C4D5f4E4K5h4K4B4D4K4]4K5h5i4F4A4C4E4K5h4K4V4K5j5f`vqplq9sljmwfq8?,wjwof=\t?nfwb#!#kqfe>!kwws9,,!=?psbm#`obpp>!nfnafqp#le#wkf#tjmglt-ol`bwjlmufqwj`bo.bojdm9,b=#\x7F#?b#kqfe>!?\"gl`wzsf#kwno=nfgjb>!p`qffm!#?lswjlm#ubovf>!ebuj`lm-j`l!#,=\t\n\n?gju#`obpp>!`kbqb`wfqjpwj`p!#nfwklg>!dfw!#,algz=\t?,kwno=\tpklqw`vw#j`lm!#gl`vnfmw-tqjwf+sbggjmd.alwwln9qfsqfpfmwbwjufppvanjw!#ubovf>!bojdm>!`fmwfq!#wkqlvdklvw#wkf#p`jfm`f#ej`wjlm\t##?gju#`obpp>!pvanjw!#`obpp>!lmf#le#wkf#nlpw#ubojdm>!wls!=?tbp#fpwbaojpkfg*8\x0E\t?,p`qjsw=\x0E\tqfwvqm#ebopf8!=*-pwzof-gjpsobzaf`bvpf#le#wkf#gl`vnfmw-`llhjf?elqn#b`wjlm>!,~algzxnbqdjm938Fm`z`olsfgjb#leufqpjlm#le#wkf#-`qfbwfFofnfmw+mbnf!#`lmwfmw>!?,gju=\t?,gju=\t\tbgnjmjpwqbwjuf#?,algz=\t?,kwno=kjpwlqz#le#wkf#!=?jmsvw#wzsf>!slqwjlm#le#wkf#bp#sbqw#le#wkf#%maps8?b#kqfe>!lwkfq#`lvmwqjfp!=\t?gju#`obpp>!?,psbm=?,psbm=?Jm#lwkfq#tlqgp/gjpsobz9#aol`h8`lmwqlo#le#wkf#jmwqlgv`wjlm#le,=\t?nfwb#mbnf>!bp#tfoo#bp#wkf#jm#qf`fmw#zfbqp\x0E\t\n?gju#`obpp>!?,gju=\t\n?,gju=\tjmpsjqfg#az#wkfwkf#fmg#le#wkf#`lnsbwjaof#tjwkaf`bnf#hmltm#bp#pwzof>!nbqdjm9-ip!=?,p`qjsw=?#Jmwfqmbwjlmbo#wkfqf#kbuf#affmDfqnbm#obmdvbdf#pwzof>!`lolq9 @lnnvmjpw#Sbqwz`lmpjpwfmw#tjwkalqgfq>!3!#`foo#nbqdjmkfjdkw>!wkf#nbilqjwz#le!#bojdm>!`fmwfqqfobwfg#wl#wkf#nbmz#gjeefqfmw#Lqwklgl{#@kvq`kpjnjobq#wl#wkf#,=\t?ojmh#qfo>!ptbp#lmf#le#wkf#vmwjo#kjp#gfbwk~*+*8\t?,p`qjsw=lwkfq#obmdvbdfp`lnsbqfg#wl#wkfslqwjlmp#le#wkfwkf#Mfwkfqobmgpwkf#nlpw#`lnnlmab`hdqlvmg9vqo+bqdvfg#wkbw#wkfp`qloojmd>!ml!#jm`ovgfg#jm#wkfMlqwk#Bnfqj`bm#wkf#mbnf#le#wkfjmwfqsqfwbwjlmpwkf#wqbgjwjlmbogfufolsnfmw#le#eqfrvfmwoz#vpfgb#`loof`wjlm#leufqz#pjnjobq#wlpvqqlvmgjmd#wkff{bnsof#le#wkjpbojdm>!`fmwfq!=tlvog#kbuf#affmjnbdf\\`bswjlm#>bwwb`kfg#wl#wkfpvddfpwjmd#wkbwjm#wkf#elqn#le#jmuloufg#jm#wkfjp#gfqjufg#eqlnmbnfg#bewfq#wkfJmwqlgv`wjlm#wlqfpwqj`wjlmp#lm#pwzof>!tjgwk9#`bm#af#vpfg#wl#wkf#`qfbwjlm#lenlpw#jnslqwbmw#jmelqnbwjlm#bmgqfpvowfg#jm#wkf`loobspf#le#wkfWkjp#nfbmp#wkbwfofnfmwp#le#wkftbp#qfsob`fg#azbmbozpjp#le#wkfjmpsjqbwjlm#elqqfdbqgfg#bp#wkfnlpw#pv``fppevohmltm#bp#%rvlw8b#`lnsqfkfmpjufKjpwlqz#le#wkf#tfqf#`lmpjgfqfgqfwvqmfg#wl#wkfbqf#qfefqqfg#wlVmplvq`fg#jnbdf=\t\n?gju#`obpp>!`lmpjpwp#le#wkfpwlsSqlsbdbwjlmjmwfqfpw#jm#wkfbubjobajojwz#lebssfbqp#wl#kbuffof`wqlnbdmfwj`fmbaofPfquj`fp+evm`wjlm#le#wkfJw#jp#jnslqwbmw?,p`qjsw=?,gju=evm`wjlm+*xubq#qfobwjuf#wl#wkfbp#b#qfpvow#le#wkf#slpjwjlm#leElq#f{bnsof/#jm#nfwklg>!slpw!#tbp#elooltfg#az%bns8ngbpk8#wkfwkf#bssoj`bwjlmip!=?,p`qjsw=\x0E\tvo=?,gju=?,gju=bewfq#wkf#gfbwktjwk#qfpsf`w#wlpwzof>!sbggjmd9jp#sbqwj`vobqozgjpsobz9jmojmf8#wzsf>!pvanjw!#jp#gjujgfg#jmwl\bTA\nzk#+\x0BBl\bQ\x7F*qfpslmpbajojgbgbgnjmjpwqb`j/_mjmwfqmb`jlmbofp`lqqfpslmgjfmwf\fHe\fHF\fHC\fIg\fH{\fHF\fIn\fH\\\fIa\fHY\fHU\fHB\fHR\fH\\\fIk\fH^\fIg\fH{\fIg\fHn\fHv\fIm\fHD\fHR\fHY\fH^\fIk\fHy\fHS\fHD\fHT\fH\\\fHy\fHR\fH\\\fHF\fIm\fH^\fHS\fHT\fHz\fIg\fHp\fIk\fHn\fHv\fHR\fHU\fHS\fHc\fHA\fIk\fHp\fIk\fHn\fHZ\fHR\fHB\fHS\fH^\fHU\fHB\fHR\fH\\\fIl\fHp\fHR\fH{\fH\\\fHO\fH@\fHD\fHR\fHD\fIk\fHy\fIm\fHB\fHR\fH\\\fH@\fIa\fH^\fIe\fH{\fHB\fHR\fH^\fHS\fHy\fHB\fHU\fHS\fH^\fHR\fHF\fIo\fH[\fIa\fHL\fH@\fHN\fHP\fHH\fIk\fHA\fHR\fHp\fHF\fHR\fHy\fIa\fH^\fHS\fHy\fHs\fIa\fH\\\fIk\fHD\fHz\fHS\fH^\fHR\fHG\fHJ\fI`\fH\\\fHR\fHD\fHB\fHR\fHB\fH^\fIk\fHB\fHH\fHJ\fHR\fHD\fH@\fHR\fHp\fHR\fH\\\fHY\fHS\fHy\fHR\fHT\fHy\fIa\fHC\fIg\fHn\fHv\fHR\fHU\fHH\fIk\fHF\fHU\fIm\fHm\fHv\fH@\fHH\fHR\fHC\fHR\fHT\fHn\fHY\fHR\fHJ\fHJ\fIk\fHz\fHD\fIk\fHF\fHS\fHw\fH^\fIk\fHY\fHS\fHZ\fIk\fH[\fH\\\fHR\fHp\fIa\fHC\fHe\fHH\fIa\fHH\fH\\\fHB\fIm\fHn\fH@\fHd\fHJ\fIg\fHD\fIg\fHn\fHe\fHF\fHy\fH\\\fHO\fHF\fHN\fHP\fIk\fHn\fHT\fIa\fHI\fHS\fHH\fHG\fHS\fH^\fIa\fHB\fHB\fIm\fHz\fIa\fHC\fHi\fHv\fIa\fHw\fHR\fHw\fIn\fHs\fHH\fIl\fHT\fHn\fH{\fIl\fHH\fHp\fHR\fHc\fH{\fHR\fHY\fHS\fHA\fHR\fH{\fHt\fHO\fIa\fHs\fIk\fHJ\fIn\fHT\fH\\\fIk\fHJ\fHS\fHD\fIg\fHn\fHU\fHH\fIa\fHC\fHR\fHT\fIk\fHy\fIa\fHT\fH{\fHR\fHn\fHK\fIl\fHY\fHS\fHZ\fIa\fHY\fH\\\fHR\fHH\fIk\fHn\fHJ\fId\fHs\fIa\fHT\fHD\fHy\fIa\fHZ\fHR\fHT\fHR\fHB\fHD\fIk\fHi\fHJ\fHR\fH^\fHH\fH@\fHS\fHp\fH^\fIl\fHF\fIm\fH\\\fIn\fH[\fHU\fHS\fHn\fHJ\fIl\fHB\fHS\fHH\fIa\fH\\\fHy\fHY\fHS\fHH\fHR\fH\\\fIm\fHF\fHC\fIk\fHT\fIa\fHI\fHR\fHD\fHy\fH\\\fIg\fHM\fHP\fHB\fIm\fHy\fIa\fHH\fHC\fIg\fHp\fHD\fHR\fHy\fIo\fHF\fHC\fHR\fHF\fIg\fHT\fIa\fHs\fHt\fH\\\fIk\fH^\fIn\fHy\fHR\fH\\\fIa\fHC\fHY\fHS\fHv\fHR\fH\\\fHT\fIn\fHv\fHD\fHR\fHB\fIn\fH^\fIa\fHC\fHJ\fIk\fHz\fIk\fHn\fHU\fHB\fIk\fHZ\fHR\fHT\fIa\fHy\fIn\fH^\fHB\fId\fHn\fHD\fIk\fHH\fId\fHC\fHR\fH\\\fHp\fHS\fHT\fHy\fIkqpp({no!#wjwof>!.wzsf!#`lmwfmw>!wjwof!#`lmwfmw>!bw#wkf#pbnf#wjnf-ip!=?,p`qjsw=\t?!#nfwklg>!slpw!#?,psbm=?,b=?,oj=ufqwj`bo.bojdm9w,irvfqz-njm-ip!=-`oj`h+evm`wjlm+#pwzof>!sbggjmd.~*+*8\t?,p`qjsw=\t?,psbm=?b#kqfe>!?b#kqfe>!kwws9,,*8#qfwvqm#ebopf8wf{w.gf`lqbwjlm9#p`qloojmd>!ml!#alqgfq.`loobspf9bppl`jbwfg#tjwk#Abkbpb#JmglmfpjbFmdojpk#obmdvbdf?wf{w#{no9psb`f>-dje!#alqgfq>!3!?,algz=\t?,kwno=\tlufqeolt9kjggfm8jnd#pq`>!kwws9,,bggFufmwOjpwfmfqqfpslmpjaof#elq#p-ip!=?,p`qjsw=\t,ebuj`lm-j`l!#,=lsfqbwjmd#pzpwfn!#pwzof>!tjgwk92wbqdfw>!\\aobmh!=Pwbwf#Vmjufqpjwzwf{w.bojdm9ofew8\tgl`vnfmw-tqjwf+/#jm`ovgjmd#wkf#bqlvmg#wkf#tlqog*8\x0E\t?,p`qjsw=\x0E\t?!#pwzof>!kfjdkw98lufqeolt9kjggfmnlqf#jmelqnbwjlmbm#jmwfqmbwjlmbob#nfnafq#le#wkf#lmf#le#wkf#ejqpw`bm#af#elvmg#jm#?,gju=\t\n\n?,gju=\tgjpsobz9#mlmf8!=!#,=\t?ojmh#qfo>!\t##+evm`wjlm+*#xwkf#26wk#`fmwvqz-sqfufmwGfebvow+obqdf#mvnafq#le#Azybmwjmf#Fnsjqf-isd\x7Fwkvna\x7Fofew\x7Fubpw#nbilqjwz#lenbilqjwz#le#wkf##bojdm>!`fmwfq!=Vmjufqpjwz#Sqfppglnjmbwfg#az#wkfPf`lmg#Tlqog#Tbqgjpwqjavwjlm#le#pwzof>!slpjwjlm9wkf#qfpw#le#wkf#`kbqb`wfqjyfg#az#qfo>!mleloolt!=gfqjufp#eqln#wkfqbwkfq#wkbm#wkf#b#`lnajmbwjlm#lepwzof>!tjgwk9233Fmdojpk.psfbhjmd`lnsvwfq#p`jfm`falqgfq>!3!#bow>!wkf#f{jpwfm`f#leGfnl`qbwj`#Sbqwz!#pwzof>!nbqdjm.Elq#wkjp#qfbplm/-ip!=?,p`qjsw=\t\npAzWbdMbnf+p*X3^ip!=?,p`qjsw=\x0E\t?-ip!=?,p`qjsw=\x0E\tojmh#qfo>!j`lm!#$#bow>$$#`obpp>$elqnbwjlm#le#wkfufqpjlmp#le#wkf#?,b=?,gju=?,gju=,sbdf=\t##?sbdf=\t?gju#`obpp>!`lmwaf`bnf#wkf#ejqpwabkbpb#Jmglmfpjbfmdojpk#+pjnsof*\"y\"W\"W\"[\"Q\"U\"V\"@=i=l<^<\\=n=m<V<T<V<R<P<S<\\<Q<T<T=c<^<W=c<Y=n=m=c<x<R<]<\\<^<T=n=`=k<Y<W<R<^<Y<V<\\=l<\\<[<^<T=n<T=c<t<Q=n<Y=l<Q<Y=n<r=n<^<Y=n<T=n=`<Q<\\<S=l<T<P<Y=l<T<Q=n<Y=l<Q<Y=n<V<R=n<R=l<R<_<R=m=n=l<\\<Q<T=j=g<V<\\=k<Y=m=n<^<Y=o=m<W<R<^<T=c=i<S=l<R<]<W<Y<P=g<S<R<W=o=k<T=n=`=c<^<W=c=b=n=m=c<Q<\\<T<]<R<W<Y<Y<V<R<P<S<\\<Q<T=c<^<Q<T<P<\\<Q<T<Y=m=l<Y<X=m=n<^<\\4K5h5i5d4K4Z5f4U4K5h4]4J5f4_5f4E4K5h4K5j4F5n4K5h5i4X4K4]5o4K4F5o4K5h4_5f4K4]4K4F4K5h5i5o4F5d4D4E4K5h4_4U5d4C5f4E4K4A4Y4K4J5f4K4F4K5h4U4K5h5i5f4E4K5h4Y5d4F5f4K4F4K5h4K5j4F4]5j4F4K5h4F4Y4K5i5f5i4K5h4I4_5h4K5i5f4K5h5i4X4K4]5o4E4K5h5i4]4J5f4K4Fqlalwp!#`lmwfmw>!?gju#jg>!ellwfq!=wkf#Vmjwfg#Pwbwfp?jnd#pq`>!kwws9,,-isd\x7Fqjdkw\x7Fwkvna\x7F-ip!=?,p`qjsw=\x0E\t?ol`bwjlm-sqlwl`loeqbnfalqgfq>!3!#p!#,=\t?nfwb#mbnf>!?,b=?,gju=?,gju=?elmw.tfjdkw9alog8%rvlw8#bmg#%rvlw8gfsfmgjmd#lm#wkf#nbqdjm938sbggjmd9!#qfo>!mleloolt!#Sqfpjgfmw#le#wkf#wtfmwjfwk#`fmwvqzfujpjlm=\t##?,sbdfJmwfqmfw#F{solqfqb-bpzm`#>#wqvf8\x0E\tjmelqnbwjlm#balvw?gju#jg>!kfbgfq!=!#b`wjlm>!kwws9,,?b#kqfe>!kwwsp9,,?gju#jg>!`lmwfmw!?,gju=\x0E\t?,gju=\x0E\t?gfqjufg#eqln#wkf#?jnd#pq`>$kwws9,,b``lqgjmd#wl#wkf#\t?,algz=\t?,kwno=\tpwzof>!elmw.pjyf9p`qjsw#obmdvbdf>!Bqjbo/#Kfoufwj`b/?,b=?psbm#`obpp>!?,p`qjsw=?p`qjsw#slojwj`bo#sbqwjfpwg=?,wq=?,wbaof=?kqfe>!kwws9,,ttt-jmwfqsqfwbwjlm#leqfo>!pwzofpkffw!#gl`vnfmw-tqjwf+$?`kbqpfw>!vwe.;!=\tafdjmmjmd#le#wkf#qfufbofg#wkbw#wkfwfofujpjlm#pfqjfp!#qfo>!mleloolt!=#wbqdfw>!\\aobmh!=`objnjmd#wkbw#wkfkwws&0B&1E&1Ettt-nbmjefpwbwjlmp#leSqjnf#Njmjpwfq#lejmeovfm`fg#az#wkf`obpp>!`ofbqej{!=,gju=\x0E\t?,gju=\x0E\t\x0E\twkqff.gjnfmpjlmbo@kvq`k#le#Fmdobmgle#Mlqwk#@bqlojmbprvbqf#hjolnfwqfp-bggFufmwOjpwfmfqgjpwjm`w#eqln#wkf`lnnlmoz#hmltm#bpSklmfwj`#Boskbafwgf`obqfg#wkbw#wkf`lmwqloofg#az#wkfAfmibnjm#Eqbmhojmqlof.sobzjmd#dbnfwkf#Vmjufqpjwz#lejm#Tfpwfqm#Fvqlsfsfqplmbo#`lnsvwfqSqlif`w#Dvwfmafqdqfdbqgofpp#le#wkfkbp#affm#sqlslpfgwldfwkfq#tjwk#wkf=?,oj=?oj#`obpp>!jm#plnf#`lvmwqjfpnjm-ip!=?,p`qjsw=le#wkf#slsvobwjlmleej`jbo#obmdvbdf?jnd#pq`>!jnbdfp,jgfmwjejfg#az#wkfmbwvqbo#qfplvq`fp`obppjej`bwjlm#le`bm#af#`lmpjgfqfgrvbmwvn#nf`kbmj`pMfufqwkfofpp/#wkfnjoojlm#zfbqp#bdl?,algz=\x0E\t?,kwno=\x0E\"y\"W\"W\"[\"Q\"U\"V\"@\twbhf#bgubmwbdf#lebmg/#b``lqgjmd#wlbwwqjavwfg#wl#wkfNj`qlplew#Tjmgltpwkf#ejqpw#`fmwvqzvmgfq#wkf#`lmwqlogju#`obpp>!kfbgfqpklqwoz#bewfq#wkfmlwbaof#f{`fswjlmwfmp#le#wklvpbmgppfufqbo#gjeefqfmwbqlvmg#wkf#tlqog-qfb`kjmd#njojwbqzjplobwfg#eqln#wkflsslpjwjlm#wl#wkfwkf#Log#WfpwbnfmwBeqj`bm#Bnfqj`bmpjmpfqwfg#jmwl#wkfpfsbqbwf#eqln#wkfnfwqlslojwbm#bqfbnbhfp#jw#slppjaofb`hmltofgdfg#wkbwbqdvbaoz#wkf#nlpwwzsf>!wf{w,`pp!=\twkf#JmwfqmbwjlmboB``lqgjmd#wl#wkf#sf>!wf{w,`pp!#,=\t`ljm`jgf#tjwk#wkfwtl.wkjqgp#le#wkfGvqjmd#wkjp#wjnf/gvqjmd#wkf#sfqjlgbmmlvm`fg#wkbw#kfwkf#jmwfqmbwjlmbobmg#nlqf#qf`fmwozafojfufg#wkbw#wkf`lmp`jlvpmfpp#bmgelqnfqoz#hmltm#bppvqqlvmgfg#az#wkfejqpw#bssfbqfg#jml``bpjlmbooz#vpfgslpjwjlm9baplovwf8!#wbqdfw>!\\aobmh!#slpjwjlm9qfobwjuf8wf{w.bojdm9`fmwfq8ib{,ojap,irvfqz,2-ab`hdqlvmg.`lolq9 wzsf>!bssoj`bwjlm,bmdvbdf!#`lmwfmw>!?nfwb#kwws.frvju>!Sqjub`z#Sloj`z?,b=f+!&0@p`qjsw#pq`>$!#wbqdfw>!\\aobmh!=Lm#wkf#lwkfq#kbmg/-isd\x7Fwkvna\x7Fqjdkw\x7F1?,gju=?gju#`obpp>!?gju#pwzof>!eolbw9mjmfwffmwk#`fmwvqz?,algz=\x0E\t?,kwno=\x0E\t?jnd#pq`>!kwws9,,p8wf{w.bojdm9`fmwfqelmw.tfjdkw9#alog8#B``lqgjmd#wl#wkf#gjeefqfm`f#afwtffm!#eqbnfalqgfq>!3!#!#pwzof>!slpjwjlm9ojmh#kqfe>!kwws9,,kwno7,ollpf-gwg!=\tgvqjmd#wkjp#sfqjlg?,wg=?,wq=?,wbaof=`olpfoz#qfobwfg#wlelq#wkf#ejqpw#wjnf8elmw.tfjdkw9alog8jmsvw#wzsf>!wf{w!#?psbm#pwzof>!elmw.lmqfbgzpwbwf`kbmdf\n?gju#`obpp>!`ofbqgl`vnfmw-ol`bwjlm-#Elq#f{bnsof/#wkf#b#tjgf#ubqjfwz#le#?\"GL@WZSF#kwno=\x0E\t?%maps8%maps8%maps8!=?b#kqfe>!kwws9,,pwzof>!eolbw9ofew8`lm`fqmfg#tjwk#wkf>kwws&0B&1E&1Ettt-jm#slsvobq#`vowvqfwzsf>!wf{w,`pp!#,=jw#jp#slppjaof#wl#Kbqubqg#Vmjufqpjwzwzofpkffw!#kqfe>!,wkf#nbjm#`kbqb`wfqL{elqg#Vmjufqpjwz##mbnf>!hfztlqgp!#`pwzof>!wf{w.bojdm9wkf#Vmjwfg#Hjmdglnefgfqbo#dlufqmnfmw?gju#pwzof>!nbqdjm#gfsfmgjmd#lm#wkf#gfp`qjswjlm#le#wkf?gju#`obpp>!kfbgfq-njm-ip!=?,p`qjsw=gfpwqv`wjlm#le#wkfpojdkwoz#gjeefqfmwjm#b``lqgbm`f#tjwkwfof`lnnvmj`bwjlmpjmgj`bwfp#wkbw#wkfpklqwoz#wkfqfbewfqfpsf`jbooz#jm#wkf#Fvqlsfbm#`lvmwqjfpKltfufq/#wkfqf#bqfpq`>!kwws9,,pwbwj`pvddfpwfg#wkbw#wkf!#pq`>!kwws9,,ttt-b#obqdf#mvnafq#le#Wfof`lnnvmj`bwjlmp!#qfo>!mleloolt!#wKloz#Qlnbm#Fnsfqlqbonlpw#f{`ovpjufoz!#alqgfq>!3!#bow>!Pf`qfwbqz#le#Pwbwf`vonjmbwjmd#jm#wkf@JB#Tlqog#Eb`wallhwkf#nlpw#jnslqwbmwbmmjufqpbqz#le#wkfpwzof>!ab`hdqlvmg.?oj=?fn=?b#kqfe>!,wkf#Bwobmwj`#L`fbmpwqj`woz#psfbhjmd/pklqwoz#afelqf#wkfgjeefqfmw#wzsfp#lewkf#Lwwlnbm#Fnsjqf=?jnd#pq`>!kwws9,,Bm#Jmwqlgv`wjlm#wl`lmpfrvfm`f#le#wkfgfsbqwvqf#eqln#wkf@lmefgfqbwf#Pwbwfpjmgjdfmlvp#sflsofpSql`ffgjmdp#le#wkfjmelqnbwjlm#lm#wkfwkflqjfp#kbuf#affmjmuloufnfmw#jm#wkfgjujgfg#jmwl#wkqffbgib`fmw#`lvmwqjfpjp#qfpslmpjaof#elqgjpplovwjlm#le#wkf`loobalqbwjlm#tjwktjgfoz#qfdbqgfg#bpkjp#`lmwfnslqbqjfpelvmgjmd#nfnafq#leGlnjmj`bm#Qfsvaoj`dfmfqbooz#b``fswfgwkf#slppjajojwz#lebqf#bopl#bubjobaofvmgfq#`lmpwqv`wjlmqfpwlqbwjlm#le#wkfwkf#dfmfqbo#svaoj`jp#bonlpw#fmwjqfozsbppfp#wkqlvdk#wkfkbp#affm#pvddfpwfg`lnsvwfq#bmg#ujgflDfqnbmj`#obmdvbdfp#b``lqgjmd#wl#wkf#gjeefqfmw#eqln#wkfpklqwoz#bewfqtbqgpkqfe>!kwwsp9,,ttt-qf`fmw#gfufolsnfmwAlbqg#le#Gjqf`wlqp?gju#`obpp>!pfbq`k\x7F#?b#kqfe>!kwws9,,Jm#sbqwj`vobq/#wkfNvowjsof#ellwmlwfplq#lwkfq#pvapwbm`fwklvpbmgp#le#zfbqpwqbmpobwjlm#le#wkf?,gju=\x0E\t?,gju=\x0E\t\x0E\t?b#kqfe>!jmgf{-skstbp#fpwbaojpkfg#jmnjm-ip!=?,p`qjsw=\tsbqwj`jsbwf#jm#wkfb#pwqlmd#jmeovfm`fpwzof>!nbqdjm.wls9qfsqfpfmwfg#az#wkfdqbgvbwfg#eqln#wkfWqbgjwjlmbooz/#wkfFofnfmw+!p`qjsw!*8Kltfufq/#pjm`f#wkf,gju=\t?,gju=\t?gju#ofew8#nbqdjm.ofew9sqlwf`wjlm#bdbjmpw38#ufqwj`bo.bojdm9Vmelqwvmbwfoz/#wkfwzsf>!jnbdf,{.j`lm,gju=\t?gju#`obpp>!#`obpp>!`ofbqej{!=?gju#`obpp>!ellwfq\n\n?,gju=\t\n\n?,gju=\twkf#nlwjlm#sj`wvqf<}=f<W<_<\\=l=m<V<T<]=f<W<_<\\=l=m<V<T<H<Y<X<Y=l<\\=j<T<T<Q<Y=m<V<R<W=`<V<R=m<R<R<]=e<Y<Q<T<Y=m<R<R<]=e<Y<Q<T=c<S=l<R<_=l<\\<P<P=g<r=n<S=l<\\<^<T=n=`<]<Y=m<S<W<\\=n<Q<R<P<\\=n<Y=l<T<\\<W=g<S<R<[<^<R<W=c<Y=n<S<R=m<W<Y<X<Q<T<Y=l<\\<[<W<T=k<Q=g=i<S=l<R<X=o<V=j<T<T<S=l<R<_=l<\\<P<P<\\<S<R<W<Q<R=m=n=`=b<Q<\\=i<R<X<T=n=m=c<T<[<]=l<\\<Q<Q<R<Y<Q<\\=m<Y<W<Y<Q<T=c<T<[<P<Y<Q<Y<Q<T=c<V<\\=n<Y<_<R=l<T<T<|<W<Y<V=m<\\<Q<X=l\fHJ\fIa\fHY\fHR\fH\\\fHR\fHB\fId\fHD\fIm\fHi\fH^\fHF\fIa\fH\\\fHJ\fHR\fHD\fHA\fHR\fH\\\fHH\fIl\fHC\fHi\fHD\fIm\fHJ\fIk\fHZ\fHU\fHS\fHD\fIa\fHJ\fIl\fHk\fHn\fHM\fHS\fHC\fHR\fHJ\fHS\fH^\fIa\fH^\fIl\fHi\fHK\fHS\fHy\fHR\fH\\\fHY\fIl\fHM\fHS\fHC\fIg\fHv\fHS\fHs\fIa\fHL\fIk\fHT\fHB\fHR\fHv\fHR\fH\\\fHp\fHn\fHy\fIa\fHZ\fHD\fHJ\fIm\fHD\fHS\fHC\fHR\fHF\fIa\fH\\\fHC\fIg\fH{\fHi\fHD\fIm\fHT\fHR\fH\\\fH}\fHD\fH^\fHR\fHk\fHD\fHF\fHR\fH\\\fIa\fHs\fIl\fHZ\fH\\\fIa\fHH\fIg\fHn\fH^\fIg\fHy\fHT\fHA\fHR\fHG\fHP\fIa\fH^\fId\fHZ\fHZ\fH\\\fIa\fHH\fIk\fHn\fHF\fIa\fH\\\fHJ\fIk\fHZ\fHF\fIa\fH^\fIk\fHC\fH\\\fHy\fIk\fHn\fHJ\fIa\fH\\\fHT\fIa\fHI\fHS\fHH\fHS\fHe\fHH\fIa\fHF\fHR\fHJ\fHe\fHD\fIa\fHU\fIk\fHn\fHv\fHS\fHs\fIa\fHL\fHR\fHC\fHR\fHH\fIa\fH\\\fHR\fHp\fIa\fHC\fHR\fHJ\fHR\fHF\fIm\fH\\\fHR\fHD\fIk\fHp\fIg\fHM\fHP\fIk\fHn\fHi\fHD\fIm\fHY\fHR\fHJ\fHZ\fIa\fH\\\fIk\fHO\fIl\fHZ\fHS\fHy\fIa\fH[\fHR\fHT\fH\\\fHy\fHR\fH\\\fIl\fHT\fHn\fH{\fIa\fH\\\fHU\fHF\fH\\\fHS\fHO\fHR\fHB\fH@\fIa\fH\\\fHR\fHn\fHM\fH@\fHv\fIa\fHv\fIg\fHn\fHe\fHF\fH^\fH@\fIa\fHK\fHB\fHn\fHH\fIa\fH\\\fIl\fHT\fHn\fHF\fH\\\fIa\fHy\fHe\fHB\fIa\fHB\fIl\fHJ\fHB\fHR\fHK\fIa\fHC\fHB\fHT\fHU\fHR\fHC\fHH\fHR\fHZ\fH@\fIa\fHJ\fIg\fHn\fHB\fIl\fHM\fHS\fHC\fHR\fHj\fHd\fHF\fIl\fHc\fH^\fHB\fIg\fH@\fHR\fHk\fH^\fHT\fHn\fHz\fIa\fHC\fHR\fHj\fHF\fH\\\fIk\fHZ\fHD\fHi\fHD\fIm\fH@\fHn\fHK\fH@\fHR\fHp\fHP\fHR\fH\\\fHD\fHY\fIl\fHD\fHH\fHB\fHF\fIa\fH\\\fHB\fIm\fHz\fHF\fIa\fH\\\fHZ\fIa\fHD\fHF\fH\\\fHS\fHY\fHR\fH\\\fHD\fIm\fHy\fHT\fHR\fHD\fHT\fHB\fH\\\fIa\fHI\fHD\fHj\fHC\fIg\fHp\fHS\fHH\fHT\fIg\fHB\fHY\fHR\fH\\4K5h5i4X4K4]5o4K4F4K5h5i5j4F4C5f4K4F4K5h5o5i4D5f5d4F4]4K5h5i4X4K5k4C4K4F4U4C4C4K5h4^5d4K4]4U4C4C4K5h4]4C5d4C4K5h4I4_5h4K5i5f4E4K5h5m5d4F5d4X5d4D4K5h5i4_4K4D5n4K4F4K5h5i4U5h5d5i4K4F4K5h5i4_5h4_5h4K4F4K5h4@4]4K5m5f5o4_4K5h4K4_5h4K5i5f4E4K5h4K4F4Y4K5h4K4Fhfztlqgp!#`lmwfmw>!t0-lqd,2:::,{kwno!=?b#wbqdfw>!\\aobmh!#wf{w,kwno8#`kbqpfw>!#wbqdfw>!\\aobmh!=?wbaof#`foosbggjmd>!bvwl`lnsofwf>!lee!#wf{w.bojdm9#`fmwfq8wl#obpw#ufqpjlm#az#ab`hdqlvmg.`lolq9# !#kqfe>!kwws9,,ttt-,gju=?,gju=?gju#jg>?b#kqfe>! !#`obpp>!!=?jnd#pq`>!kwws9,,`qjsw!#pq`>!kwws9,,\t?p`qjsw#obmdvbdf>!,,FM!#!kwws9,,ttt-tfm`lgfVQJ@lnslmfmw+!#kqfe>!ibubp`qjsw9?gju#`obpp>!`lmwfmwgl`vnfmw-tqjwf+$?p`slpjwjlm9#baplovwf8p`qjsw#pq`>!kwws9,,#pwzof>!nbqdjm.wls9-njm-ip!=?,p`qjsw=\t?,gju=\t?gju#`obpp>!t0-lqd,2:::,{kwno!#\t\x0E\t?,algz=\x0E\t?,kwno=gjpwjm`wjlm#afwtffm,!#wbqdfw>!\\aobmh!=?ojmh#kqfe>!kwws9,,fm`lgjmd>!vwe.;!<=\tt-bggFufmwOjpwfmfq<b`wjlm>!kwws9,,ttt-j`lm!#kqfe>!kwws9,,#pwzof>!ab`hdqlvmg9wzsf>!wf{w,`pp!#,=\tnfwb#sqlsfqwz>!ld9w?jmsvw#wzsf>!wf{w!##pwzof>!wf{w.bojdm9wkf#gfufolsnfmw#le#wzofpkffw!#wzsf>!wfkwno8#`kbqpfw>vwe.;jp#`lmpjgfqfg#wl#afwbaof#tjgwk>!233&!#Jm#bggjwjlm#wl#wkf#`lmwqjavwfg#wl#wkf#gjeefqfm`fp#afwtffmgfufolsnfmw#le#wkf#Jw#jp#jnslqwbmw#wl#?,p`qjsw=\t\t?p`qjsw##pwzof>!elmw.pjyf92=?,psbm=?psbm#jg>daOjaqbqz#le#@lmdqfpp?jnd#pq`>!kwws9,,jnFmdojpk#wqbmpobwjlmB`bgfnz#le#P`jfm`fpgju#pwzof>!gjpsobz9`lmpwqv`wjlm#le#wkf-dfwFofnfmwAzJg+jg*jm#`lmivm`wjlm#tjwkFofnfmw+$p`qjsw$*8#?nfwb#sqlsfqwz>!ld9<}=f<W<_<\\=l=m<V<T\t#wzsf>!wf{w!#mbnf>!=Sqjub`z#Sloj`z?,b=bgnjmjpwfqfg#az#wkffmbaofPjmdofQfrvfpwpwzof>%rvlw8nbqdjm9?,gju=?,gju=?,gju=?=?jnd#pq`>!kwws9,,j#pwzof>%rvlw8eolbw9qfefqqfg#wl#bp#wkf#wlwbo#slsvobwjlm#lejm#Tbpkjmdwlm/#G-@-#pwzof>!ab`hdqlvmg.bnlmd#lwkfq#wkjmdp/lqdbmjybwjlm#le#wkfsbqwj`jsbwfg#jm#wkfwkf#jmwqlgv`wjlm#lejgfmwjejfg#tjwk#wkfej`wjlmbo#`kbqb`wfq#L{elqg#Vmjufqpjwz#njpvmgfqpwbmgjmd#leWkfqf#bqf/#kltfufq/pwzofpkffw!#kqfe>!,@lovnajb#Vmjufqpjwzf{sbmgfg#wl#jm`ovgfvpvbooz#qfefqqfg#wljmgj`bwjmd#wkbw#wkfkbuf#pvddfpwfg#wkbwbeejojbwfg#tjwk#wkf`lqqfobwjlm#afwtffmmvnafq#le#gjeefqfmw=?,wg=?,wq=?,wbaof=Qfsvaoj`#le#Jqfobmg\t?,p`qjsw=\t?p`qjsw#vmgfq#wkf#jmeovfm`f`lmwqjavwjlm#wl#wkfLeej`jbo#tfapjwf#lekfbgrvbqwfqp#le#wkf`fmwfqfg#bqlvmg#wkfjnsoj`bwjlmp#le#wkfkbuf#affm#gfufolsfgEfgfqbo#Qfsvaoj`#leaf`bnf#jm`qfbpjmdoz`lmwjmvbwjlm#le#wkfMlwf/#kltfufq/#wkbwpjnjobq#wl#wkbw#le#`bsbajojwjfp#le#wkfb``lqgbm`f#tjwk#wkfsbqwj`jsbmwp#jm#wkfevqwkfq#gfufolsnfmwvmgfq#wkf#gjqf`wjlmjp#lewfm#`lmpjgfqfgkjp#zlvmdfq#aqlwkfq?,wg=?,wq=?,wbaof=?b#kwws.frvju>![.VB.skzpj`bo#sqlsfqwjfple#Aqjwjpk#@lovnajbkbp#affm#`qjwj`jyfg+tjwk#wkf#f{`fswjlmrvfpwjlmp#balvw#wkfsbppjmd#wkqlvdk#wkf3!#`foosbggjmd>!3!#wklvpbmgp#le#sflsofqfgjqf`wp#kfqf-#Elqkbuf#`kjogqfm#vmgfq&0F&0@,p`qjsw&0F!**8?b#kqfe>!kwws9,,ttt-?oj=?b#kqfe>!kwws9,,pjwf\\mbnf!#`lmwfmw>!wf{w.gf`lqbwjlm9mlmfpwzof>!gjpsobz9#mlmf?nfwb#kwws.frvju>![.mft#Gbwf+*-dfwWjnf+*#wzsf>!jnbdf,{.j`lm!?,psbm=?psbm#`obpp>!obmdvbdf>!ibubp`qjswtjmglt-ol`bwjlm-kqfe?b#kqfe>!ibubp`qjsw9..=\x0E\t?p`qjsw#wzsf>!w?b#kqfe>$kwws9,,ttt-klqw`vw#j`lm!#kqfe>!?,gju=\x0E\t?gju#`obpp>!?p`qjsw#pq`>!kwws9,,!#qfo>!pwzofpkffw!#w?,gju=\t?p`qjsw#wzsf>,b=#?b#kqfe>!kwws9,,#booltWqbmpsbqfm`z>![.VB.@lnsbwjaof!#`lmqfobwjlmpkjs#afwtffm\t?,p`qjsw=\x0E\t?p`qjsw#?,b=?,oj=?,vo=?,gju=bppl`jbwfg#tjwk#wkf#sqldqbnnjmd#obmdvbdf?,b=?b#kqfe>!kwws9,,?,b=?,oj=?oj#`obpp>!elqn#b`wjlm>!kwws9,,?gju#pwzof>!gjpsobz9wzsf>!wf{w!#mbnf>!r!?wbaof#tjgwk>!233&!#ab`hdqlvmg.slpjwjlm9!#alqgfq>!3!#tjgwk>!qfo>!pklqw`vw#j`lm!#k5=?vo=?oj=?b#kqfe>!##?nfwb#kwws.frvju>!`pp!#nfgjb>!p`qffm!#qfpslmpjaof#elq#wkf#!#wzsf>!bssoj`bwjlm,!#pwzof>!ab`hdqlvmg.kwno8#`kbqpfw>vwe.;!#booltwqbmpsbqfm`z>!pwzofpkffw!#wzsf>!wf\x0E\t?nfwb#kwws.frvju>!=?,psbm=?psbm#`obpp>!3!#`foopsb`jmd>!3!=8\t?,p`qjsw=\t?p`qjsw#plnfwjnfp#`boofg#wkfglfp#mlw#mf`fppbqjozElq#nlqf#jmelqnbwjlmbw#wkf#afdjmmjmd#le#?\"GL@WZSF#kwno=?kwnosbqwj`vobqoz#jm#wkf#wzsf>!kjggfm!#mbnf>!ibubp`qjsw9uljg+3*8!feef`wjufmfpp#le#wkf#bvwl`lnsofwf>!lee!#dfmfqbooz#`lmpjgfqfg=?jmsvw#wzsf>!wf{w!#!=?,p`qjsw=\x0E\t?p`qjswwkqlvdklvw#wkf#tlqog`lnnlm#njp`lm`fswjlmbppl`jbwjlm#tjwk#wkf?,gju=\t?,gju=\t?gju#`gvqjmd#kjp#ojefwjnf/`lqqfpslmgjmd#wl#wkfwzsf>!jnbdf,{.j`lm!#bm#jm`qfbpjmd#mvnafqgjsolnbwj`#qfobwjlmpbqf#lewfm#`lmpjgfqfgnfwb#`kbqpfw>!vwe.;!#?jmsvw#wzsf>!wf{w!#f{bnsofp#jm`ovgf#wkf!=?jnd#pq`>!kwws9,,jsbqwj`jsbwjlm#jm#wkfwkf#fpwbaojpknfmw#le\t?,gju=\t?gju#`obpp>!%bns8maps8%bns8maps8wl#gfwfqnjmf#tkfwkfqrvjwf#gjeefqfmw#eqlnnbqhfg#wkf#afdjmmjmdgjpwbm`f#afwtffm#wkf`lmwqjavwjlmp#wl#wkf`lmeoj`w#afwtffm#wkftjgfoz#`lmpjgfqfg#wltbp#lmf#le#wkf#ejqpwtjwk#ubqzjmd#gfdqffpkbuf#psf`vobwfg#wkbw+gl`vnfmw-dfwFofnfmwsbqwj`jsbwjmd#jm#wkflqjdjmbooz#gfufolsfgfwb#`kbqpfw>!vwe.;!=#wzsf>!wf{w,`pp!#,=\tjmwfq`kbmdfbaoz#tjwknlqf#`olpfoz#qfobwfgpl`jbo#bmg#slojwj`bowkbw#tlvog#lwkfqtjpfsfqsfmgj`vobq#wl#wkfpwzof#wzsf>!wf{w,`ppwzsf>!pvanjw!#mbnf>!ebnjojfp#qfpjgjmd#jmgfufolsjmd#`lvmwqjfp`lnsvwfq#sqldqbnnjmdf`lmlnj`#gfufolsnfmwgfwfqnjmbwjlm#le#wkfelq#nlqf#jmelqnbwjlmlm#pfufqbo#l``bpjlmpslqwvdv/Fp#+Fvqlsfv*<O<V=l<\\={<Q=m=`<V<\\=o<V=l<\\={<Q=m=`<V<\\<L<R=m=m<T<U=m<V<R<U<P<\\=n<Y=l<T<\\<W<R<^<T<Q=h<R=l<P<\\=j<T<T=o<S=l<\\<^<W<Y<Q<T=c<Q<Y<R<]=i<R<X<T<P<R<T<Q=h<R=l<P<\\=j<T=c<t<Q=h<R=l<P<\\=j<T=c<L<Y=m<S=o<]<W<T<V<T<V<R<W<T=k<Y=m=n<^<R<T<Q=h<R=l<P<\\=j<T=b=n<Y=l=l<T=n<R=l<T<T<X<R=m=n<\\=n<R=k<Q<R4K5h5i4F5d4K4@4C5d5j4K5h4K4X4F4]4K5o4K4F4K5h4K5n4F4]4K4A4K4Fkwno8#`kbqpfw>VWE.;!#pfwWjnflvw+evm`wjlm+*gjpsobz9jmojmf.aol`h8?jmsvw#wzsf>!pvanjw!#wzsf#>#$wf{w,ibubp`qj?jnd#pq`>!kwws9,,ttt-!#!kwws9,,ttt-t0-lqd,pklqw`vw#j`lm!#kqfe>!!#bvwl`lnsofwf>!lee!#?,b=?,gju=?gju#`obpp>?,b=?,oj=\t?oj#`obpp>!`pp!#wzsf>!wf{w,`pp!#?elqn#b`wjlm>!kwws9,,{w,`pp!#kqfe>!kwws9,,ojmh#qfo>!bowfqmbwf!#\x0E\t?p`qjsw#wzsf>!wf{w,#lm`oj`h>!ibubp`qjsw9+mft#Gbwf*-dfwWjnf+*~kfjdkw>!2!#tjgwk>!2!#Sflsof$p#Qfsvaoj`#le##?b#kqfe>!kwws9,,ttt-wf{w.gf`lqbwjlm9vmgfqwkf#afdjmmjmd#le#wkf#?,gju=\t?,gju=\t?,gju=\tfpwbaojpknfmw#le#wkf#?,gju=?,gju=?,gju=?,g ujftslqwxnjm.kfjdkw9\t?p`qjsw#pq`>!kwws9,,lswjlm=?lswjlm#ubovf>lewfm#qfefqqfg#wl#bp#,lswjlm=\t?lswjlm#ubov?\"GL@WZSF#kwno=\t?\"..XJmwfqmbwjlmbo#Bjqslqw=\t?b#kqfe>!kwws9,,ttt?,b=?b#kqfe>!kwws9,,t\fTL\fT^\fTE\fT^\fUh\fT{\fTN\roI\ro|\roL\ro{\roO\rov\rot\nAO\x05Gx\bTA\nzk#+\x0BUm\x05Gx*\fHD\fHS\fH\\\fIa\fHJ\fIk\fHZ\fHM\fHR\fHe\fHD\fH^\fIg\fHM\fHy\fIa\fH[\fIk\fHH\fIa\fH\\\fHp\fHR\fHD\fHy\fHR\fH\\\fIl\fHT\fHn\fH@\fHn\fHK\fHS\fHH\fHT\fIa\fHI\fHR\fHF\fHD\fHR\fHT\fIa\fHY\fIl\fHy\fHR\fH\\\fHT\fHn\fHT\fIa\fHy\fH\\\fHO\fHT\fHR\fHB\fH{\fIa\fH\\\fIl\fHv\fHS\fHs\fIa\fHL\fIg\fHn\fHY\fHS\fHp\fIa\fHr\fHR\fHD\fHi\fHB\fIk\fH\\\fHS\fHy\fHR\fHY\fHS\fHA\fHS\fHD\fIa\fHD\fH{\fHR\fHM\fHS\fHC\fHR\fHm\fHy\fIa\fHC\fIg\fHn\fHy\fHS\fHT\fIm\fH\\\fHy\fIa\fH[\fHR\fHF\fHU\fIm\fHm\fHv\fHH\fIl\fHF\fIa\fH\\\fH@\fHn\fHK\fHD\fHs\fHS\fHF\fIa\fHF\fHO\fIl\fHy\fIa\fH\\\fHS\fHy\fIk\fHs\fHF\fIa\fH\\\fHR\fH\\\fHn\fHA\fHF\fIa\fH\\\fHR\fHF\fIa\fHH\fHB\fHR\fH^\fHS\fHy\fIg\fHn\fH\\\fHG\fHP\fIa\fHH\fHR\fH\\\fHD\fHS\fH\\\fIa\fHB\fHR\fHO\fH^\fHS\fHB\fHS\fHs\fIk\fHMgfp`qjswjlm!#`lmwfmw>!gl`vnfmw-ol`bwjlm-sqlw-dfwFofnfmwpAzWbdMbnf+?\"GL@WZSF#kwno=\t?kwno#?nfwb#`kbqpfw>!vwe.;!=9vqo!#`lmwfmw>!kwws9,,-`pp!#qfo>!pwzofpkffw!pwzof#wzsf>!wf{w,`pp!=wzsf>!wf{w,`pp!#kqfe>!t0-lqd,2:::,{kwno!#{nowzsf>!wf{w,ibubp`qjsw!#nfwklg>!dfw!#b`wjlm>!ojmh#qfo>!pwzofpkffw!##>#gl`vnfmw-dfwFofnfmwwzsf>!jnbdf,{.j`lm!#,=`foosbggjmd>!3!#`foops-`pp!#wzsf>!wf{w,`pp!#?,b=?,oj=?oj=?b#kqfe>!!#tjgwk>!2!#kfjdkw>!2!!=?b#kqfe>!kwws9,,ttt-pwzof>!gjpsobz9mlmf8!=bowfqmbwf!#wzsf>!bssoj.,,T0@,,GWG#[KWNO#2-3#foopsb`jmd>!3!#`foosbg#wzsf>!kjggfm!#ubovf>!,b=%maps8?psbm#qlof>!p\t?jmsvw#wzsf>!kjggfm!#obmdvbdf>!IbubP`qjsw!##gl`vnfmw-dfwFofnfmwpAd>!3!#`foopsb`jmd>!3!#zsf>!wf{w,`pp!#nfgjb>!wzsf>$wf{w,ibubp`qjsw$tjwk#wkf#f{`fswjlm#le#zsf>!wf{w,`pp!#qfo>!pw#kfjdkw>!2!#tjgwk>!2!#>$(fm`lgfVQJ@lnslmfmw+?ojmh#qfo>!bowfqmbwf!#\talgz/#wq/#jmsvw/#wf{wnfwb#mbnf>!qlalwp!#`lmnfwklg>!slpw!#b`wjlm>!=\t?b#kqfe>!kwws9,,ttt-`pp!#qfo>!pwzofpkffw!#?,gju=?,gju=?gju#`obppobmdvbdf>!ibubp`qjsw!=bqjb.kjggfm>!wqvf!=.[?qjsw!#wzsf>!wf{w,ibubpo>38~*+*8\t+evm`wjlm+*xab`hdqlvmg.jnbdf9#vqo+,b=?,oj=?oj=?b#kqfe>!k\n\n?oj=?b#kqfe>!kwws9,,bwlq!#bqjb.kjggfm>!wqv=#?b#kqfe>!kwws9,,ttt-obmdvbdf>!ibubp`qjsw!#,lswjlm=\t?lswjlm#ubovf,gju=?,gju=?gju#`obpp>qbwlq!#bqjb.kjggfm>!wqf>+mft#Gbwf*-dfwWjnf+*slqwvdv/Fp#+gl#Aqbpjo*<R=l<_<\\<Q<T<[<\\=j<T<T<^<R<[<P<R<Z<Q<R=m=n=`<R<]=l<\\<[<R<^<\\<Q<T=c=l<Y<_<T=m=n=l<\\=j<T<T<^<R<[<P<R<Z<Q<R=m=n<T<R<]=c<[<\\=n<Y<W=`<Q<\\?\"GL@WZSF#kwno#SVAOJ@#!mw.Wzsf!#`lmwfmw>!wf{w,?nfwb#kwws.frvju>!@lmwfqbmpjwjlmbo,,FM!#!kwws9?kwno#{nomp>!kwws9,,ttt.,,T0@,,GWG#[KWNO#2-3#WGWG,{kwno2.wqbmpjwjlmbo,,ttt-t0-lqd,WQ,{kwno2,sf#>#$wf{w,ibubp`qjsw$8?nfwb#mbnf>!gfp`qjswjlmsbqfmwMlgf-jmpfqwAfelqf?jmsvw#wzsf>!kjggfm!#mbip!#wzsf>!wf{w,ibubp`qj+gl`vnfmw*-qfbgz+evm`wjp`qjsw#wzsf>!wf{w,ibubpjnbdf!#`lmwfmw>!kwws9,,VB.@lnsbwjaof!#`lmwfmw>wno8#`kbqpfw>vwe.;!#,=\tojmh#qfo>!pklqw`vw#j`lm?ojmh#qfo>!pwzofpkffw!#?,p`qjsw=\t?p`qjsw#wzsf>>#gl`vnfmw-`qfbwfFofnfm?b#wbqdfw>!\\aobmh!#kqfe>#gl`vnfmw-dfwFofnfmwpAjmsvw#wzsf>!wf{w!#mbnf>b-wzsf#>#$wf{w,ibubp`qjmsvw#wzsf>!kjggfm!#mbnfkwno8#`kbqpfw>vwe.;!#,=gwg!=\t?kwno#{nomp>!kwws.,,T0@,,GWG#KWNO#7-32#WfmwpAzWbdMbnf+$p`qjsw$*jmsvw#wzsf>!kjggfm!#mbn?p`qjsw#wzsf>!wf{w,ibubp!#pwzof>!gjpsobz9mlmf8!=gl`vnfmw-dfwFofnfmwAzJg+>gl`vnfmw-`qfbwfFofnfmw+$#wzsf>$wf{w,ibubp`qjsw$jmsvw#wzsf>!wf{w!#mbnf>!g-dfwFofnfmwpAzWbdMbnf+pmj`bo!#kqfe>!kwws9,,ttt-@,,GWG#KWNO#7-32#Wqbmpjw?pwzof#wzsf>!wf{w,`pp!=\t\t?pwzof#wzsf>!wf{w,`pp!=jlmbo-gwg!=\t?kwno#{nomp>kwws.frvju>!@lmwfmw.Wzsfgjmd>!3!#`foopsb`jmd>!3!kwno8#`kbqpfw>vwe.;!#,=\t#pwzof>!gjpsobz9mlmf8!=??oj=?b#kqfe>!kwws9,,ttt-#wzsf>$wf{w,ibubp`qjsw$=<X<Y=c=n<Y<W=`<Q<R=m=n<T=m<R<R=n<^<Y=n=m=n<^<T<T<S=l<R<T<[<^<R<X=m=n<^<\\<]<Y<[<R<S<\\=m<Q<R=m=n<T\fHF\fIm\fHT\fIa\fHH\fHS\fHy\fHR\fHy\fHR\fHn\fH{\fIa\fH\\\fIk\fHT\fHe\fHD\fIa\fHU\fIg\fHn\fHD\fIk\fHY\fHS\fHK\fHR\fHD\fHT\fHA\fHR\fHG\fHS\fHy\fIa\fHT\fHS\fHn\fH{\fHT\fIm\fH\\\fHy\fIa\fH[\fHS\fHH\fHy\fIe\fHF\fIl\fH\\\fHR\fHk\fHs\fHY\fHS\fHp\fIa\fHr\fHR\fHF\fHD\fHy\fHR\fH\\\fIa\fH\\\fHY\fHR\fHd\fHT\fHy\fIa\fH\\\fHS\fHC\fHH\fHR", "\u06F7%\u018C'T%\x85'W%\xD7%O%g%\xA6&\u0193%\u01E5&>&*&'&^&\x88\u0178\u0C3E&\u01AD&\u0192&)&^&%&'&\x82&P&1&\xB1&3&]&m&u&E&t&C&\xCF&V&V&/&>&6&\u0F76\u177Co&p&@&E&M&P&x&@&F&e&\xCC&7&:&(&D&0&C&)&.&F&-&1&(&L&F&1\u025E*\u03EA\u21F3&\u1372&K&;&)&E&H&P&0&?&9&V&\x81&-&v&a&,&E&)&?&=&'&'&B&\u0D2E&\u0503&\u0316*&*8&%&%&&&%,)&\x9A&>&\x86&7&]&F&2&>&J&6&n&2&%&?&\x8E&2&6&J&g&-&0&,&*&J&*&O&)&6&(&<&B&N&.&P&@&2&.&W&M&%\u053C\x84(,(<&,&\u03DA&\u18C7&-&,(%&(&%&(\u013B0&X&D&\x81&j&'&J&(&.&B&3&Z&R&h&3&E&E&<\xC6-\u0360\u1EF3&%8?&@&,&Z&@&0&J&,&^&x&_&6&C&6&C\u072C\u2A25&f&-&-&-&-&,&J&2&8&z&8&C&Y&8&-&d&\u1E78\xCC-&7&1&F&7&t&W&7&I&.&.&^&=\u0F9C\u19D3&8(>&/&/&\u077B')'\u1065')'%@/&0&%\u043E\u09C0*&*@&C\u053D\u05D4\u0274\u05EB4\u0DD7\u071A\u04D16\u0D84&/\u0178\u0303Z&*%\u0246\u03FF&\u0134&1\xA8\u04B4\u0174", dictionarySizeBits, "AAAAKKLLKKKKKJJIHHIHHGGFF");
+  setData(dictionaryData, dictionarySizeBits);
+  function InputStream(data) {
+    this.data = new Int8Array(0);
+    this.offset = 0;
+    this.data = data;
+  }
+  function readInput(s, dst, offset, length) {
+    if (s.input === null) {
+      return -1;
+    }
+    const src = s.input;
+    const end = Math.min(src.offset + length, src.data.length);
+    const bytesRead = end - src.offset;
+    dst.set(src.data.subarray(src.offset, end), offset);
+    src.offset += bytesRead;
+    return bytesRead;
+  }
+  function closeInput(s) {
+    s.input = new InputStream(new Int8Array(0));
+  }
+  function toUsAsciiBytes(src) {
+    const n = src.length;
+    const result = new Int8Array(n);
+    for (let i = 0; i < n; ++i) {
+      result[i] = src.charCodeAt(i);
+    }
+    return result;
+  }
+  function toUtf8Runes(src) {
+    const n = src.length;
+    const result = new Int32Array(n);
+    for (let i = 0; i < n; ++i) {
+      result[i] = src.charCodeAt(i);
+    }
+    return result;
+  }
+  function makeError(s, code) {
+    if (code >= 0) {
+      return code;
+    }
+    if (s.runningState >= 0) {
+      s.runningState = code;
+    }
+    throw new Error("Brotli error code: " + code);
+  }
+  let ByteBuffer;
+  function decode(bytes, options) {
+    let s = new State();
+    s.input = new InputStream(bytes);
+    initState(s);
+    if (options) {
+      let customDictionary = options["customDictionary"];
+      if (customDictionary) attachDictionaryChunk(s, customDictionary);
+    }
+    let totalOutput = 0;
+    let chunks = [];
+    while (true) {
+      let chunk = new Int8Array(16384);
+      chunks.push(chunk);
+      s.output = chunk;
+      s.outputOffset = 0;
+      s.outputLength = 16384;
+      s.outputUsed = 0;
+      decompress(s);
+      totalOutput += s.outputUsed;
+      if (s.outputUsed < 16384) break;
+    }
+    close(s);
+    closeInput(s);
+    let result = new Int8Array(totalOutput);
+    let offset = 0;
+    for (let i = 0; i < chunks.length; ++i) {
+      let chunk = chunks[i];
+      let end = Math.min(totalOutput, offset + 16384);
+      let len = end - offset;
+      if (len < 16384) {
+        result.set(chunk.subarray(0, len), offset);
+      } else {
+        result.set(chunk, offset);
+      }
+      offset += len;
+    }
+    return result;
+  }
+  return decode;
+};
+let BrotliDecode = makeBrotliDecode();
+;// ./src/core/brotli_stream.js
+
+
+
+class BrotliStream extends DecodeStream {
+  #isAsync = true;
+  constructor(stream, maybeLength) {
+    super(maybeLength);
+    this.stream = stream;
+    this.dict = stream.dict;
+  }
+  readBlock() {
+    const bytes = this.stream.getBytes();
+    const decodedData = BrotliDecode(new Int8Array(bytes.buffer, bytes.byteOffset, bytes.length));
+    this.buffer = new Uint8Array(decodedData.buffer, decodedData.byteOffset, decodedData.length);
+    this.bufferLength = this.buffer.length;
+    this.eof = true;
+  }
+  async getImageData(length, _decoderOptions) {
+    const data = await this.asyncGetBytes();
+    if (!data) {
+      return this.getBytes(length);
+    }
+    if (data.length <= length) {
+      return data;
+    }
+    return data.subarray(0, length);
+  }
+  async asyncGetBytes() {
+    const {
+      decompressed,
+      compressed
+    } = await this.asyncGetBytesFromDecompressionStream("brotli");
+    if (decompressed) {
+      return decompressed;
+    }
+    this.#isAsync = false;
+    this.stream = new Stream(compressed, 0, compressed.length, this.stream.dict);
+    this.reset();
+    return null;
+  }
+  get isAsync() {
+    return this.#isAsync;
+  }
+}
+
 ;// ./src/core/ccitt.js
 
 const ccittEOL = -2;
@@ -7543,19 +9525,29 @@ const blackTable1 = [[-1, -1], [-1, -1], [12, ccittEOL], [12, ccittEOL], [-1, -1
 const blackTable2 = [[8, 13], [8, 13], [8, 13], [8, 13], [8, 13], [8, 13], [8, 13], [8, 13], [8, 13], [8, 13], [8, 13], [8, 13], [8, 13], [8, 13], [8, 13], [8, 13], [11, 23], [11, 23], [12, 50], [12, 51], [12, 44], [12, 45], [12, 46], [12, 47], [12, 57], [12, 58], [12, 61], [12, 256], [10, 16], [10, 16], [10, 16], [10, 16], [10, 17], [10, 17], [10, 17], [10, 17], [12, 48], [12, 49], [12, 62], [12, 63], [12, 30], [12, 31], [12, 32], [12, 33], [12, 40], [12, 41], [11, 22], [11, 22], [8, 14], [8, 14], [8, 14], [8, 14], [8, 14], [8, 14], [8, 14], [8, 14], [8, 14], [8, 14], [8, 14], [8, 14], [8, 14], [8, 14], [8, 14], [8, 14], [7, 10], [7, 10], [7, 10], [7, 10], [7, 10], [7, 10], [7, 10], [7, 10], [7, 10], [7, 10], [7, 10], [7, 10], [7, 10], [7, 10], [7, 10], [7, 10], [7, 10], [7, 10], [7, 10], [7, 10], [7, 10], [7, 10], [7, 10], [7, 10], [7, 10], [7, 10], [7, 10], [7, 10], [7, 10], [7, 10], [7, 10], [7, 10], [7, 11], [7, 11], [7, 11], [7, 11], [7, 11], [7, 11], [7, 11], [7, 11], [7, 11], [7, 11], [7, 11], [7, 11], [7, 11], [7, 11], [7, 11], [7, 11], [7, 11], [7, 11], [7, 11], [7, 11], [7, 11], [7, 11], [7, 11], [7, 11], [7, 11], [7, 11], [7, 11], [7, 11], [7, 11], [7, 11], [7, 11], [7, 11], [9, 15], [9, 15], [9, 15], [9, 15], [9, 15], [9, 15], [9, 15], [9, 15], [12, 128], [12, 192], [12, 26], [12, 27], [12, 28], [12, 29], [11, 19], [11, 19], [11, 20], [11, 20], [12, 34], [12, 35], [12, 36], [12, 37], [12, 38], [12, 39], [11, 21], [11, 21], [12, 42], [12, 43], [10, 0], [10, 0], [10, 0], [10, 0], [7, 12], [7, 12], [7, 12], [7, 12], [7, 12], [7, 12], [7, 12], [7, 12], [7, 12], [7, 12], [7, 12], [7, 12], [7, 12], [7, 12], [7, 12], [7, 12], [7, 12], [7, 12], [7, 12], [7, 12], [7, 12], [7, 12], [7, 12], [7, 12], [7, 12], [7, 12], [7, 12], [7, 12], [7, 12], [7, 12], [7, 12], [7, 12]];
 const blackTable3 = [[-1, -1], [-1, -1], [-1, -1], [-1, -1], [6, 9], [6, 8], [5, 7], [5, 7], [4, 6], [4, 6], [4, 6], [4, 6], [4, 5], [4, 5], [4, 5], [4, 5], [3, 1], [3, 1], [3, 1], [3, 1], [3, 1], [3, 1], [3, 1], [3, 1], [3, 4], [3, 4], [3, 4], [3, 4], [3, 4], [3, 4], [3, 4], [3, 4], [2, 3], [2, 3], [2, 3], [2, 3], [2, 3], [2, 3], [2, 3], [2, 3], [2, 3], [2, 3], [2, 3], [2, 3], [2, 3], [2, 3], [2, 3], [2, 3], [2, 2], [2, 2], [2, 2], [2, 2], [2, 2], [2, 2], [2, 2], [2, 2], [2, 2], [2, 2], [2, 2], [2, 2], [2, 2], [2, 2], [2, 2], [2, 2]];
 class CCITTFaxDecoder {
-  constructor(source, options = {}) {
+  constructor(source, options = {
+    K: 0,
+    EndOfLine: false,
+    EncodedByteAlign: false,
+    Columns: 1728,
+    Rows: 0,
+    EndOfBlock: true,
+    BlackIs1: false
+  }) {
     if (typeof source?.next !== "function") {
       throw new Error('CCITTFaxDecoder - invalid "source" parameter.');
     }
     this.source = source;
     this.eof = false;
-    this.encoding = options.K || 0;
-    this.eoline = options.EndOfLine || false;
-    this.byteAlign = options.EncodedByteAlign || false;
-    this.columns = options.Columns || 1728;
-    this.rows = options.Rows || 0;
-    this.eoblock = options.EndOfBlock ?? true;
-    this.black = options.BlackIs1 || false;
+    ({
+      K: this.encoding,
+      EndOfLine: this.eoline,
+      EncodedByteAlign: this.byteAlign,
+      Columns: this.columns,
+      Rows: this.rows,
+      EndOfBlock: this.eoblock,
+      BlackIs1: this.black
+    } = options);
     this.codingLine = new Uint32Array(this.columns + 1);
     this.refLine = new Uint32Array(this.columns + 2);
     this.codingLine[0] = this.columns;
@@ -8037,42 +10029,91 @@ class CCITTFaxDecoder {
 
 
 
+
+
 class CCITTFaxStream extends DecodeStream {
   constructor(str, maybeLength, params) {
     super(maybeLength);
     this.stream = str;
+    this.maybeLength = maybeLength;
     this.dict = str.dict;
     if (!(params instanceof Dict)) {
       params = Dict.empty;
     }
+    this.params = {
+      K: params.get("K") || 0,
+      EndOfLine: !!params.get("EndOfLine"),
+      EncodedByteAlign: !!params.get("EncodedByteAlign"),
+      Columns: params.get("Columns") || 1728,
+      Rows: params.get("Rows") || 0,
+      EndOfBlock: !!(params.get("EndOfBlock") ?? true),
+      BlackIs1: !!params.get("BlackIs1")
+    };
+  }
+  get bytes() {
+    return shadow(this, "bytes", this.stream.getBytes(this.maybeLength));
+  }
+  readBlock() {
+    this.decodeImageFallback();
+  }
+  get isImageStream() {
+    return true;
+  }
+  get isAsyncDecoder() {
+    return true;
+  }
+  async decodeImage(bytes, length, _decoderOptions) {
+    if (this.eof) {
+      return this.buffer;
+    }
+    if (!bytes) {
+      bytes = this.stream.isAsync ? (await this.stream.asyncGetBytes()) || this.bytes : this.bytes;
+    }
+    try {
+      this.buffer = await JBig2CCITTFaxWasmImage.decode(bytes, this.dict.get("W", "Width"), this.dict.get("H", "Height"), null, this.params);
+    } catch {
+      warn("CCITTFaxStream: Falling back to JS CCITTFax decoder.");
+      return this.decodeImageFallback(bytes, length);
+    }
+    this.bufferLength = this.buffer.length;
+    this.eof = true;
+    return this.buffer;
+  }
+  decodeImageFallback(bytes, length) {
+    if (this.eof) {
+      return this.buffer;
+    }
+    const {
+      params
+    } = this;
+    if (!bytes) {
+      this.stream.reset();
+      bytes = this.bytes;
+    }
+    let pos = 0;
     const source = {
       next() {
-        return str.getByte();
+        return bytes[pos++] ?? -1;
       }
     };
-    this.ccittFaxDecoder = new CCITTFaxDecoder(source, {
-      K: params.get("K"),
-      EndOfLine: params.get("EndOfLine"),
-      EncodedByteAlign: params.get("EncodedByteAlign"),
-      Columns: params.get("Columns"),
-      Rows: params.get("Rows"),
-      EndOfBlock: params.get("EndOfBlock"),
-      BlackIs1: params.get("BlackIs1")
-    });
-  }
-  readBlock() {
+    if (length && this.buffer.byteLength < length) {
+      this.buffer = new Uint8Array(length);
+    }
+    this.ccittFaxDecoder = new CCITTFaxDecoder(source, params);
+    let outPos = 0;
     while (!this.eof) {
       const c = this.ccittFaxDecoder.readNextChar();
       if (c === -1) {
         this.eof = true;
-        return;
+        break;
+      }
+      if (!length) {
+        this.ensureBuffer(outPos + 1);
       }
-      this.ensureBuffer(this.bufferLength + 1);
-      this.buffer[this.bufferLength++] = c;
+      this.buffer[outPos++] = c;
     }
-  }
-  get isImageStream() {
-    return true;
+    this.bufferLength = this.buffer.length;
+    return this.buffer.subarray(0, length || this.bufferLength);
   }
 }
 
@@ -8119,38 +10160,17 @@ class FlateStream extends DecodeStream {
     return data.subarray(0, length);
   }
   async asyncGetBytes() {
-    this.stream.reset();
-    const bytes = this.stream.isAsync ? await this.stream.asyncGetBytes() : this.stream.getBytes();
-    try {
-      const {
-        readable,
-        writable
-      } = new DecompressionStream("deflate");
-      const writer = writable.getWriter();
-      await writer.ready;
-      writer.write(bytes).then(async () => {
-        await writer.ready;
-        await writer.close();
-      }).catch(() => {});
-      const chunks = [];
-      let totalLength = 0;
-      for await (const chunk of readable) {
-        chunks.push(chunk);
-        totalLength += chunk.byteLength;
-      }
-      const data = new Uint8Array(totalLength);
-      let offset = 0;
-      for (const chunk of chunks) {
-        data.set(chunk, offset);
-        offset += chunk.byteLength;
-      }
-      return data;
-    } catch {
-      this.#isAsync = false;
-      this.stream = new Stream(bytes, 2, bytes.length, this.stream.dict);
-      this.reset();
-      return null;
-    }
+    const {
+      decompressed,
+      compressed
+    } = await this.asyncGetBytesFromDecompressionStream("deflate");
+    if (decompressed) {
+      return decompressed;
+    }
+    this.#isAsync = false;
+    this.stream = new Stream(compressed, 2, compressed.length, this.stream.dict);
+    this.reset();
+    return null;
   }
   get isAsync() {
     return this.#isAsync;
@@ -10462,7 +12482,7 @@ class Jbig2Stream extends DecodeStream {
   }
   ensureBuffer(requested) {}
   readBlock() {
-    this.decodeImage();
+    this.decodeImageFallback();
   }
   get isAsyncDecoder() {
     return true;
@@ -10470,7 +12490,7 @@ class Jbig2Stream extends DecodeStream {
   get isImageStream() {
     return true;
   }
-  async decodeImage(bytes, _decoderOptions) {
+  async decodeImage(bytes, length, _decoderOptions) {
     if (this.eof) {
       return this.buffer;
     }
@@ -10483,16 +12503,16 @@ class Jbig2Stream extends DecodeStream {
           globals = globalsStream.getBytes();
         }
       }
-      this.buffer = await JBig2WasmImage.decode(bytes, this.dict.get("Width"), this.dict.get("Height"), globals);
+      this.buffer = await JBig2CCITTFaxWasmImage.decode(bytes, this.dict.get("Width"), this.dict.get("Height"), globals);
     } catch {
       warn("Jbig2Stream: Falling back to JS JBIG2 decoder.");
-      return this.decodeImageFallback(bytes);
+      return this.decodeImageFallback(bytes, length);
     }
     this.bufferLength = this.buffer.length;
     this.eof = true;
     return this.buffer;
   }
-  async decodeImageFallback(bytes) {
+  decodeImageFallback(bytes, _length) {
     if (this.eof) {
       return this.buffer;
     }
@@ -10552,7 +12572,7 @@ class JpxStream extends DecodeStream {
   get isAsyncDecoder() {
     return true;
   }
-  async decodeImage(bytes, decoderOptions) {
+  async decodeImage(bytes, _length, decoderOptions) {
     if (this.eof) {
       return this.buffer;
     }
@@ -10924,6 +12944,7 @@ class RunLengthStream extends DecodeStream {
 
 
 
+
 const MAX_LENGTH_TO_CACHE = 1000;
 function getInlineImageCacheKey(bytes) {
   const strBuf = [],
@@ -11515,6 +13536,8 @@ class Parser {
           return new RunLengthStream(stream, maybeLength);
         case "JBIG2Decode":
           return new Jbig2Stream(stream, maybeLength, params);
+        case "BrotliDecode":
+          return new BrotliStream(stream, maybeLength);
       }
       warn(`Filter "${name}" is not supported.`);
       return stream;
@@ -37043,19 +39066,12 @@ function clearGlobalCaches() {
 
 
 function pickPlatformItem(dict) {
-  if (!(dict instanceof Dict)) {
-    return null;
-  }
-  if (dict.has("UF")) {
-    return dict.get("UF");
-  } else if (dict.has("F")) {
-    return dict.get("F");
-  } else if (dict.has("Unix")) {
-    return dict.get("Unix");
-  } else if (dict.has("Mac")) {
-    return dict.get("Mac");
-  } else if (dict.has("DOS")) {
-    return dict.get("DOS");
+  if (dict instanceof Dict) {
+    for (const key of ["UF", "F", "Unix", "Mac", "DOS"]) {
+      if (dict.has(key)) {
+        return dict.get(key);
+      }
+    }
   }
   return null;
 }
@@ -37064,11 +39080,10 @@ function stripPath(str) {
 }
 class FileSpec {
   #contentAvailable = false;
-  constructor(root, xref, skipContent = false) {
+  constructor(root, skipContent = false) {
     if (!(root instanceof Dict)) {
       return;
     }
-    this.xref = xref;
     this.root = root;
     if (root.has("FS")) {
       this.fs = root.get("FS");
@@ -37085,45 +39100,41 @@ class FileSpec {
     }
   }
   get filename() {
-    let filename = "";
     const item = pickPlatformItem(this.root);
     if (item && typeof item === "string") {
-      filename = stringToPDFString(item, true).replaceAll("\\\\", "\\").replaceAll("\\/", "/").replaceAll("\\", "/");
+      return stringToPDFString(item, true).replaceAll("\\\\", "\\").replaceAll("\\/", "/").replaceAll("\\", "/");
     }
-    return shadow(this, "filename", filename || "unnamed");
+    return "";
   }
   get content() {
     if (!this.#contentAvailable) {
       return null;
     }
-    this._contentRef ||= pickPlatformItem(this.root?.get("EF"));
-    let content = null;
-    if (this._contentRef) {
-      const fileObj = this.xref.fetchIfRef(this._contentRef);
-      if (fileObj instanceof BaseStream) {
-        content = fileObj.getBytes();
-      } else {
-        warn("Embedded file specification points to non-existing/invalid content");
-      }
-    } else {
-      warn("Embedded file specification does not have any content");
+    const ef = pickPlatformItem(this.root?.get("EF"));
+    if (ef instanceof BaseStream) {
+      return ef.getBytes();
     }
-    return content;
+    warn("Embedded file specification points to non-existing/invalid content");
+    return null;
   }
   get description() {
-    let description = "";
     const desc = this.root?.get("Desc");
     if (desc && typeof desc === "string") {
-      description = stringToPDFString(desc);
+      return stringToPDFString(desc);
     }
-    return shadow(this, "description", description);
+    return "";
   }
   get serializable() {
+    const {
+      filename,
+      content,
+      description
+    } = this;
     return {
-      rawFilename: this.filename,
-      filename: stripPath(this.filename),
-      content: this.content,
-      description: this.description
+      rawFilename: filename,
+      filename: stripPath(filename) || "unnamed",
+      content,
+      description
     };
   }
 }
@@ -39348,7 +41359,7 @@ class Catalog {
     if (obj instanceof Dict && obj.has("EmbeddedFiles")) {
       const nameTree = new NameTree(obj.getRaw("EmbeddedFiles"), this.xref);
       for (const [key, value] of nameTree.getAll()) {
-        const fs = new FileSpec(value, this.xref);
+        const fs = new FileSpec(value);
         attachments ??= Object.create(null);
         attachments[stringToPDFString(key, true)] = fs.serializable;
       }
@@ -39780,16 +41791,17 @@ class Catalog {
         case "GoToR":
           const urlDict = action.get("F");
           if (urlDict instanceof Dict) {
-            const fs = new FileSpec(urlDict, null, true);
-            const {
-              rawFilename
-            } = fs.serializable;
-            url = rawFilename;
+            const fs = new FileSpec(urlDict, true);
+            ({
+              rawFilename: url
+            } = fs.serializable);
           } else if (typeof urlDict === "string") {
             url = urlDict;
+          } else {
+            break;
           }
           const remoteDest = fetchRemoteDest(action);
-          if (remoteDest && typeof url === "string") {
+          if (remoteDest) {
             url = url.split("#", 1)[0] + "#" + remoteDest;
           }
           const newWindow = action.get("NewWindow");
@@ -44943,7 +46955,7 @@ class Image extends StringObject {
       return HTMLResult.EMPTY;
     }
     if (!buffer && this.transferEncoding === "base64") {
-      buffer = fromBase64Util(this[$content]);
+      buffer = Uint8Array.fromBase64(this[$content]);
     }
     if (!buffer) {
       return HTMLResult.EMPTY;
@@ -54230,10 +56242,9 @@ class FileAttachmentAnnotation extends MarkupAnnotation {
   constructor(params) {
     super(params);
     const {
-      dict,
-      xref
+      dict
     } = params;
-    const file = new FileSpec(dict.get("FS"), xref);
+    const file = new FileSpec(dict.get("FS"));
     this.data.annotationType = AnnotationType.FILEATTACHMENT;
     this.data.hasOwnCanvas = this.data.noRotate;
     this.data.noHTML = false;
@@ -57609,7 +59620,7 @@ class PDFDocument {
     } else {
       hashOriginal = calculateMD5(this.stream.getByteRange(0, FINGERPRINT_FIRST_BYTES), 0, FINGERPRINT_FIRST_BYTES);
     }
-    return shadow(this, "fingerprints", [toHexUtil(hashOriginal), hashModified ? toHexUtil(hashModified) : null]);
+    return shadow(this, "fingerprints", [hashOriginal.toHex(), hashModified?.toHex() ?? null]);
   }
   async #getLinearizationPage(pageIndex) {
     const {
@@ -57951,7 +59962,7 @@ class BasePdfManager {
     JpxImage.setOptions(options);
     IccColorSpace.setOptions(options);
     CmykICCBasedCS.setOptions(options);
-    JBig2WasmImage.setOptions(options);
+    JBig2CCITTFaxWasmImage.setOptions(options);
   }
   get docId() {
     return this._docId;
@@ -60196,58 +62207,116 @@ class PDFEditor {
   }
 }
 
-;// ./src/core/worker_stream.js
+;// ./src/shared/base_pdf_stream.js
 
-class PDFWorkerStream {
-  constructor(msgHandler) {
-    this._msgHandler = msgHandler;
-    this._contentLength = null;
-    this._fullRequestReader = null;
-    this._rangeRequestReaders = [];
+class BasePDFStream {
+  #PDFStreamReader = null;
+  #PDFStreamRangeReader = null;
+  _fullReader = null;
+  _rangeReaders = new Set();
+  _source = null;
+  constructor(source, PDFStreamReader, PDFStreamRangeReader) {
+    this._source = source;
+    this.#PDFStreamReader = PDFStreamReader;
+    this.#PDFStreamRangeReader = PDFStreamRangeReader;
+  }
+  get _progressiveDataLength() {
+    return this._fullReader?._loaded ?? 0;
   }
   getFullReader() {
-    assert(!this._fullRequestReader, "PDFWorkerStream.getFullReader can only be called once.");
-    this._fullRequestReader = new PDFWorkerStreamReader(this._msgHandler);
-    return this._fullRequestReader;
+    assert(!this._fullReader, "BasePDFStream.getFullReader can only be called once.");
+    return this._fullReader = new this.#PDFStreamReader(this);
   }
   getRangeReader(begin, end) {
-    const reader = new PDFWorkerStreamRangeReader(begin, end, this._msgHandler);
-    this._rangeRequestReaders.push(reader);
+    if (end <= this._progressiveDataLength) {
+      return null;
+    }
+    const reader = new this.#PDFStreamRangeReader(this, begin, end);
+    this._rangeReaders.add(reader);
     return reader;
   }
   cancelAllRequests(reason) {
-    this._fullRequestReader?.cancel(reason);
-    for (const reader of this._rangeRequestReaders.slice(0)) {
+    this._fullReader?.cancel(reason);
+    for (const reader of new Set(this._rangeReaders)) {
       reader.cancel(reason);
     }
   }
 }
-class PDFWorkerStreamReader {
-  constructor(msgHandler) {
-    this._msgHandler = msgHandler;
-    this.onProgress = null;
-    this._contentLength = null;
-    this._isRangeSupported = false;
-    this._isStreamingSupported = false;
-    const readableStream = this._msgHandler.sendWithStream("GetReader");
-    this._reader = readableStream.getReader();
-    this._headersReady = this._msgHandler.sendWithPromise("ReaderHeadersReady").then(data => {
-      this._isStreamingSupported = data.isStreamingSupported;
-      this._isRangeSupported = data.isRangeSupported;
-      this._contentLength = data.contentLength;
+class BasePDFStreamReader {
+  onProgress = null;
+  _contentLength = 0;
+  _filename = null;
+  _headersCapability = Promise.withResolvers();
+  _isRangeSupported = false;
+  _isStreamingSupported = false;
+  _loaded = 0;
+  _stream = null;
+  constructor(stream) {
+    this._stream = stream;
+  }
+  _callOnProgress() {
+    this.onProgress?.({
+      loaded: this._loaded,
+      total: this._contentLength
     });
   }
   get headersReady() {
-    return this._headersReady;
+    return this._headersCapability.promise;
+  }
+  get filename() {
+    return this._filename;
   }
   get contentLength() {
     return this._contentLength;
   }
+  get isRangeSupported() {
+    return this._isRangeSupported;
+  }
   get isStreamingSupported() {
     return this._isStreamingSupported;
   }
-  get isRangeSupported() {
-    return this._isRangeSupported;
+  async read() {
+    unreachable("Abstract method `read` called");
+  }
+  cancel(reason) {
+    unreachable("Abstract method `cancel` called");
+  }
+}
+class BasePDFStreamRangeReader {
+  _stream = null;
+  constructor(stream, begin, end) {
+    this._stream = stream;
+  }
+  async read() {
+    unreachable("Abstract method `read` called");
+  }
+  cancel(reason) {
+    unreachable("Abstract method `cancel` called");
+  }
+}
+
+;// ./src/core/worker_stream.js
+
+class PDFWorkerStream extends BasePDFStream {
+  constructor(source) {
+    super(source, PDFWorkerStreamReader, PDFWorkerStreamRangeReader);
+  }
+}
+class PDFWorkerStreamReader extends BasePDFStreamReader {
+  _reader = null;
+  constructor(stream) {
+    super(stream);
+    const {
+      msgHandler
+    } = stream._source;
+    const readableStream = msgHandler.sendWithStream("GetReader");
+    this._reader = readableStream.getReader();
+    msgHandler.sendWithPromise("ReaderHeadersReady").then(data => {
+      this._contentLength = data.contentLength;
+      this._isStreamingSupported = data.isStreamingSupported;
+      this._isRangeSupported = data.isRangeSupported;
+      this._headersCapability.resolve();
+    }, this._headersCapability.reject);
   }
   async read() {
     const {
@@ -60269,19 +62338,19 @@ class PDFWorkerStreamReader {
     this._reader.cancel(reason);
   }
 }
-class PDFWorkerStreamRangeReader {
-  constructor(begin, end, msgHandler) {
-    this._msgHandler = msgHandler;
-    this.onProgress = null;
-    const readableStream = this._msgHandler.sendWithStream("GetRangeReader", {
+class PDFWorkerStreamRangeReader extends BasePDFStreamRangeReader {
+  _reader = null;
+  constructor(stream, begin, end) {
+    super(stream, begin, end);
+    const {
+      msgHandler
+    } = stream._source;
+    const readableStream = msgHandler.sendWithStream("GetRangeReader", {
       begin,
       end
     });
     this._reader = readableStream.getReader();
   }
-  get isStreamingSupported() {
-    return false;
-  }
   async read() {
     const {
       value,
@@ -60366,7 +62435,7 @@ class WorkerMessageHandler {
       docId,
       apiVersion
     } = docParams;
-    const workerVersion = "5.4.590";
+    const workerVersion = "5.4.647";
     if (apiVersion !== workerVersion) {
       throw new Error(`The API version "${apiVersion}" does not match ` + `the Worker version "${workerVersion}".`);
     }
@@ -60431,19 +62500,21 @@ class WorkerMessageHandler {
         pdfManagerArgs.source = data;
         return new LocalPdfManager(pdfManagerArgs);
       }
-      const pdfStream = new PDFWorkerStream(handler),
-        fullRequest = pdfStream.getFullReader();
+      const pdfStream = new PDFWorkerStream({
+          msgHandler: handler
+        }),
+        fullReader = pdfStream.getFullReader();
       const pdfManagerCapability = Promise.withResolvers();
       let newPdfManager,
         cachedChunks = [],
         loaded = 0;
-      fullRequest.headersReady.then(function () {
-        if (!fullRequest.isRangeSupported) {
+      fullReader.headersReady.then(function () {
+        if (!fullReader.isRangeSupported) {
           return;
         }
         pdfManagerArgs.source = pdfStream;
-        pdfManagerArgs.length = fullRequest.contentLength;
-        pdfManagerArgs.disableAutoFetch ||= fullRequest.isStreamingSupported;
+        pdfManagerArgs.length = fullReader.contentLength;
+        pdfManagerArgs.disableAutoFetch ||= fullReader.isStreamingSupported;
         newPdfManager = new NetworkPdfManager(pdfManagerArgs);
         for (const chunk of cachedChunks) {
           newPdfManager.sendProgressiveData(chunk);
@@ -60477,10 +62548,10 @@ class WorkerMessageHandler {
               return;
             }
             loaded += value.byteLength;
-            if (!fullRequest.isStreamingSupported) {
+            if (!fullReader.isStreamingSupported) {
               handler.send("DocProgress", {
                 loaded,
-                total: Math.max(loaded, fullRequest.contentLength || 0)
+                total: Math.max(loaded, fullReader.contentLength || 0)
               });
             }
             if (newPdfManager) {
@@ -60488,12 +62559,12 @@ class WorkerMessageHandler {
             } else {
               cachedChunks.push(value);
             }
-            fullRequest.read().then(readChunk, reject);
+            fullReader.read().then(readChunk, reject);
           } catch (e) {
             reject(e);
           }
         };
-        fullRequest.read().then(readChunk, reject);
+        fullReader.read().then(readChunk, reject);
       }).catch(function (e) {
         pdfManagerCapability.reject(e);
         cancelXHRs = null;
diff --git a/toolkit/components/pdfjs/content/web/viewer-geckoview.mjs b/toolkit/components/pdfjs/content/web/viewer-geckoview.mjs
index 8e0003acb18d9..251eec1be1a7a 100644
--- a/toolkit/components/pdfjs/content/web/viewer-geckoview.mjs
+++ b/toolkit/components/pdfjs/content/web/viewer-geckoview.mjs
@@ -21,8 +21,8 @@
  */
 
 /**
- * pdfjsVersion = 5.4.590
- * pdfjsBuild = 550520193
+ * pdfjsVersion = 5.4.647
+ * pdfjsBuild = 222a24c62
  */
 /******/ // The require scope
 /******/ var __webpack_require__ = {};
@@ -120,12 +120,6 @@ const UNKNOWN_SCALE = 0;
 const MAX_AUTO_SCALE = 1.25;
 const SCROLLBAR_PADDING = 40;
 const VERTICAL_PADDING = 5;
-const RenderingStates = {
-  INITIAL: 0,
-  RUNNING: 1,
-  PAUSED: 2,
-  FINISHED: 3
-};
 const PresentationModeState = {
   UNKNOWN: 0,
   NORMAL: 1,
@@ -487,7 +481,7 @@ class ProgressBar {
     return this.#percent;
   }
   set percent(val) {
-    this.#percent = MathClamp(val, 0, 100);
+    this.#percent = val;
     if (isNaN(val)) {
       this.#classList.add("indeterminate");
       return;
@@ -1466,6 +1460,51 @@ class FirefoxEventBus extends EventBus {
   }
 }
 
+;// ./web/base_download_manager.js
+
+class BaseDownloadManager {
+  #openBlobUrls = new WeakMap();
+  _triggerDownload(blobUrl, originalUrl, filename, isAttachment = false) {
+    throw new Error("Not implemented: _triggerDownload");
+  }
+  _getOpenDataUrl(blobUrl, filename, dest = null) {
+    throw new Error("Not implemented: _getOpenDataUrl");
+  }
+  downloadData(data, filename, contentType) {
+    const blobUrl = URL.createObjectURL(new Blob([data], {
+      type: contentType
+    }));
+    this._triggerDownload(blobUrl, blobUrl, filename, true);
+  }
+  openOrDownloadData(data, filename, dest = null) {
+    const isPdfData = isPdfFile(filename);
+    const contentType = isPdfData ? "application/pdf" : "";
+    if (isPdfData) {
+      let blobUrl;
+      try {
+        blobUrl = this.#openBlobUrls.getOrInsertComputed(data, () => URL.createObjectURL(new Blob([data], {
+          type: contentType
+        })));
+        const viewerUrl = this._getOpenDataUrl(blobUrl, filename, dest);
+        window.open(viewerUrl);
+        return true;
+      } catch (ex) {
+        console.error("openOrDownloadData:", ex);
+        URL.revokeObjectURL(blobUrl);
+        this.#openBlobUrls.delete(data);
+      }
+    }
+    this.downloadData(data, filename, contentType);
+    return false;
+  }
+  download(data, url, filename) {
+    const blobUrl = data ? URL.createObjectURL(new Blob([data], {
+      type: "application/pdf"
+    })) : null;
+    this._triggerDownload(blobUrl, url, filename);
+  }
+}
+
 ;// ./web/external_services.js
 class BaseExternalServices {
   updateFindControlState(data) {}
@@ -1491,51 +1530,7 @@ class BaseExternalServices {
 ;// ./web/preferences.js
 
 class BasePreferences {
-  #defaults = Object.freeze({
-    altTextLearnMoreUrl: "https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/pdf-alt-text",
-    annotationEditorMode: 0,
-    annotationMode: 2,
-    capCanvasAreaFactor: 200,
-    commentLearnMoreUrl: "https://support.mozilla.org/%LOCALE%/kb/view-pdf-files-firefox-or-choose-another-viewer#w_add-a-comment-to-a-pdf",
-    cursorToolOnLoad: 0,
-    defaultZoomDelay: 400,
-    defaultZoomValue: "",
-    disablePageLabels: false,
-    enableAltText: false,
-    enableAltTextModelDownload: true,
-    enableAutoLinking: true,
-    enableComment: false,
-    enableGuessAltText: true,
-    enableHighlightFloatingButton: false,
-    enableNewAltTextWhenAddingImage: true,
-    enableOptimizedPartialRendering: false,
-    enablePermissions: false,
-    enablePrintAutoRotate: true,
-    enableScripting: true,
-    enableSignatureEditor: false,
-    enableSplitMerge: false,
-    enableUpdatedAddImage: false,
-    externalLinkTarget: 0,
-    highlightEditorColors: "yellow=#FFFF98,green=#53FFBC,blue=#80EBFF,pink=#FFCBE6,red=#FF4F5F,yellow_HCM=#FFFFCC,green_HCM=#53FFBC,blue_HCM=#80EBFF,pink_HCM=#F6B8FF,red_HCM=#C50043",
-    historyUpdateUrl: false,
-    ignoreDestinationZoom: false,
-    forcePageColors: false,
-    pageColorsBackground: "Canvas",
-    pageColorsForeground: "CanvasText",
-    pdfBugEnabled: false,
-    sidebarViewOnLoad: -1,
-    scrollModeOnLoad: -1,
-    spreadModeOnLoad: -1,
-    textLayerMode: 1,
-    viewerCssTheme: 0,
-    viewOnLoad: 0,
-    disableAutoFetch: false,
-    disableFontFace: false,
-    disableRange: false,
-    disableStream: false,
-    enableHWA: false,
-    enableXfa: true
-  });
+  #defaults = Object.freeze(AppOptions.getAll(OptionKind.PREFERENCE, true));
   #initializedPromise = null;
   constructor() {
     this.#initializedPromise = this._readFromStorage(this.#defaults).then(({
@@ -1580,6 +1575,9 @@ class BasePreferences {
   async get(name) {
     throw new Error("Not implemented: get");
   }
+  get defaults() {
+    return this.#defaults;
+  }
   get initializedPromise() {
     return this.#initializedPromise;
   }
@@ -1686,6 +1684,7 @@ const GenericL10n = null;
 
 
 
+
 let viewerApp = {
   initialized: false
 };
@@ -1722,55 +1721,21 @@ class FirefoxCom {
     request.dispatchEvent(sender);
   }
 }
-class DownloadManager {
-  #openBlobUrls = new WeakMap();
-  downloadData(data, filename, contentType) {
-    const blobUrl = URL.createObjectURL(new Blob([data], {
-      type: contentType
-    }));
+class DownloadManager extends BaseDownloadManager {
+  _triggerDownload(blobUrl, originalUrl, filename, isAttachment = false) {
     FirefoxCom.request("download", {
       blobUrl,
-      originalUrl: blobUrl,
+      originalUrl,
       filename,
-      isAttachment: true
+      isAttachment
     });
   }
-  openOrDownloadData(data, filename, dest = null) {
-    const isPdfData = isPdfFile(filename);
-    const contentType = isPdfData ? "application/pdf" : "";
-    if (isPdfData) {
-      let blobUrl = this.#openBlobUrls.get(data);
-      if (!blobUrl) {
-        blobUrl = URL.createObjectURL(new Blob([data], {
-          type: contentType
-        }));
-        this.#openBlobUrls.set(data, blobUrl);
-      }
-      let viewerUrl = blobUrl + "#filename=" + encodeURIComponent(filename);
-      if (dest) {
-        viewerUrl += `&filedest=${escape(dest)}`;
-      }
-      try {
-        window.open(viewerUrl);
-        return true;
-      } catch (ex) {
-        console.error("openOrDownloadData:", ex);
-        URL.revokeObjectURL(blobUrl);
-        this.#openBlobUrls.delete(data);
-      }
+  _getOpenDataUrl(blobUrl, filename, dest = null) {
+    let url = blobUrl + "#filename=" + encodeURIComponent(filename);
+    if (dest) {
+      url += `&filedest=${escape(dest)}`;
     }
-    this.downloadData(data, filename, contentType);
-    return false;
-  }
-  download(data, url, filename) {
-    const blobUrl = data ? URL.createObjectURL(new Blob([data], {
-      type: "application/pdf"
-    })) : null;
-    FirefoxCom.request("download", {
-      blobUrl,
-      originalUrl: url,
-      filename
-    });
+    return url;
   }
 }
 class Preferences extends BasePreferences {
@@ -2189,18 +2154,15 @@ class ExternalServices extends BaseExternalServices {
         case "range":
           pdfDataRangeTransport.onDataRange(args.begin, args.chunk);
           break;
-        case "rangeProgress":
-          pdfDataRangeTransport.onDataProgress(args.loaded);
-          break;
         case "progressiveRead":
           pdfDataRangeTransport.onDataProgressiveRead(args.chunk);
-          pdfDataRangeTransport.onDataProgress(args.loaded, args.total);
           break;
         case "progressiveDone":
           pdfDataRangeTransport?.onDataProgressiveDone();
           break;
         case "progress":
-          viewerApp.progress(args.loaded / args.total);
+          const percent = MathClamp(Math.round(args.loaded / args.total * 100), 0, 100);
+          viewerApp.progress(percent);
           break;
         case "complete":
           if (!args.data) {
@@ -2489,8 +2451,8 @@ class Sidebar {
     this.#isResizerOnTheLeft = isResizerOnTheLeft;
     const style = window.getComputedStyle(sidebar);
     this.#initialWidth = this.#width = parseFloat(style.getPropertyValue("--sidebar-width"));
-    resizer.ariaValueMin = parseFloat(style.getPropertyValue("--sidebar-min-width"));
-    resizer.ariaValueMax = parseFloat(style.getPropertyValue("--sidebar-max-width"));
+    resizer.ariaValueMin = parseFloat(style.getPropertyValue("--sidebar-min-width")) || 0;
+    resizer.ariaValueMax = parseFloat(style.getPropertyValue("--sidebar-max-width")) || Infinity;
     resizer.ariaValueNow = this.#width;
     this.#makeSidebarResizable();
     toggleButton.addEventListener("click", this.toggle.bind(this));
@@ -2543,7 +2505,7 @@ class Sidebar {
         signal
       });
       window.addEventListener("pointermove", ev => {
-        if (!pointerMoveAC) {
+        if (!pointerMoveAC || Math.abs(ev.clientX - this.#prevX) < 1) {
           return;
         }
         stopEvent(ev);
@@ -5211,6 +5173,15 @@ class XfaLayerBuilder {
 
 
 
+class BasePrintServiceFactory {
+  static initGlobals(app) {}
+  static get supportsPrinting() {
+    throw new Error("Not implemented: supportsPrinting");
+  }
+  static createPrintService(params) {
+    throw new Error("Not implemented: createPrintService");
+  }
+}
 function getXfaHtmlForPrinting(printContainer, pdfDocument) {
   const xfaHtml = pdfDocument.allXfaHtml;
   const linkService = new SimpleLinkService();
@@ -5354,7 +5325,7 @@ class FirefoxPrintService {
     }
   }
 }
-class PDFPrintServiceFactory {
+class PDFPrintServiceFactory extends BasePrintServiceFactory {
   static get supportsPrinting() {
     const canvas = document.createElement("canvas");
     return shadow(this, "supportsPrinting", "mozPrintCallback" in canvas);
@@ -5364,6 +5335,28 @@ class PDFPrintServiceFactory {
   }
 }
 
+;// ./web/renderable_view.js
+const RenderingStates = {
+  INITIAL: 0,
+  RUNNING: 1,
+  PAUSED: 2,
+  FINISHED: 3
+};
+class RenderableView {
+  renderingId = "";
+  renderTask = null;
+  resume = null;
+  get renderingState() {
+    throw new Error("Abstract getter `renderingState` accessed");
+  }
+  set renderingState(state) {
+    throw new Error("Abstract setter `renderingState` accessed");
+  }
+  async draw() {
+    throw new Error("Not implemented: draw");
+  }
+}
+
 ;// ./web/pdf_rendering_queue.js
 
 
@@ -5489,6 +5482,7 @@ class PDFRenderingQueue {
 ;// ./web/pdf_scripting_manager.js
 
 
+
 class PDFScriptingManager {
   #closeCapability = null;
   #destroyCapability = null;
@@ -6309,7 +6303,7 @@ class Autolinker {
   static #regex;
   static #numericTLDRegex;
   static findLinks(text) {
-    this.#regex ??= /\b(?:https?:\/\/|mailto:|www\.)(?:[\S--[\p{P}<>]]|\/|[\S--[\[\]]]+[\S--[\p{P}<>]])+|(?=\p{L})[\S--[@\p{Ps}\p{Pe}<>]]+@([\S--[\p{P}<>]]+(?:\.[\S--[\p{P}<>]]+)+)/gmv;
+    this.#regex ??= /\b(?:https?:\/\/|mailto:|www\.)(?:[\S--[\p{P}<>]]|\/|[\S--[\[\]]]+[\S--[\p{P}<>]])+|(?=\p{L})[\S--[@\p{Ps}\p{Pe}<>]]+@([\S--[[\p{P}--\-]<>]]+(?:\.[\S--[[\p{P}--\-]<>]]+)+)/gmv;
     const [normalizedText, diffs] = normalize(text, {
       ignoreDashEOL: true
     });
@@ -6353,7 +6347,7 @@ class Autolinker {
 ;// ./web/base_pdf_page_view.js
 
 
-class BasePDFPageView {
+class BasePDFPageView extends RenderableView {
   #loadingId = null;
   #minDurationToUpdateCanvas = 0;
   #renderError = null;
@@ -6369,9 +6363,8 @@ class BasePDFPageView {
   pageColors = null;
   recordedBBoxes = null;
   renderingQueue = null;
-  renderTask = null;
-  resume = null;
   constructor(options) {
+    super();
     this.eventBus = options.eventBus;
     this.id = options.id;
     this.pageColors = options.pageColors || null;
@@ -6607,9 +6600,9 @@ class PDFPageDetailView extends BasePDFPageView {
   get renderingState() {
     return super.renderingState;
   }
-  set renderingState(value) {
+  set renderingState(state) {
     this.renderingCancelled = false;
-    super.renderingState = value;
+    super.renderingState = state;
   }
   reset({
     keepCanvas = false
@@ -7647,6 +7640,7 @@ class TextLayerBuilder {
 
 
 
+
 const DEFAULT_LAYER_PROPERTIES = null;
 const LAYERS_ORDER = new Map([["canvasWrapper", 0], ["textLayer", 1], ["annotationLayer", 2], ["annotationEditorLayer", 3], ["xfaLayer", 3]]);
 class PDFPageView extends BasePDFPageView {
@@ -8410,6 +8404,7 @@ class PDFPageView extends BasePDFPageView {
 
 
 
+
 const DEFAULT_CACHE_SIZE = 10;
 const PagesCountLimit = {
   FORCE_SCROLL_MODE_PAGE: 10000,
@@ -8503,7 +8498,7 @@ class PDFViewer {
   #viewerAlert = null;
   #pagesMapper = PagesMapper.instance;
   constructor(options) {
-    const viewerVersion = "5.4.590";
+    const viewerVersion = "5.4.647";
     if (version !== viewerVersion) {
       throw new Error(`The API version "${version}" does not match the Viewer version "${viewerVersion}".`);
     }
@@ -10259,6 +10254,7 @@ class ViewHistory {
 
 
 
+
 
 
 const FORCE_PAGES_LOADED_TIMEOUT = 10000;
@@ -10914,12 +10910,7 @@ const PDFViewerApplication = {
       this.passwordPrompt.setUpdateCallback(updateCallback, reason);
       this.passwordPrompt.open();
     };
-    loadingTask.onProgress = ({
-      loaded,
-      total
-    }) => {
-      this.progress(loaded / total);
-    };
+    loadingTask.onProgress = evt => this.progress(evt.percent);
     return loadingTask.promise.then(pdfDocument => {
       this.load(pdfDocument);
     }, reason => {
@@ -11009,8 +11000,7 @@ const PDFViewerApplication = {
     console.error(`${message}\n\n${moreInfoText.join("\n")}`);
     return message;
   },
-  progress(level) {
-    const percent = Math.round(level * 100);
+  progress(percent) {
     if (!this.loadingBar || percent <= this.loadingBar.percent) {
       return;
     }
@@ -11687,6 +11677,7 @@ const PDFViewerApplication = {
   }
 };
 initCom(PDFViewerApplication);
+PDFPrintServiceFactory.initGlobals(PDFViewerApplication);
 function onPageRender({
   pageNumber
 }) {
@@ -12231,6 +12222,7 @@ function beforeUnload(evt) {
 
 
 
+
 const AppConstants = null;
 window.PDFViewerApplication = PDFViewerApplication;
 window.PDFViewerApplicationConstants = AppConstants;
diff --git a/toolkit/components/pdfjs/content/web/viewer.css b/toolkit/components/pdfjs/content/web/viewer.css
index d3bfd3b71e745..02b69dd47fffe 100644
--- a/toolkit/components/pdfjs/content/web/viewer.css
+++ b/toolkit/components/pdfjs/content/web/viewer.css
@@ -4515,22 +4515,6 @@
       display:flex;
       flex-direction:column;
       gap:12px;
-
-      button{
-        width:fit-content;
-      }
-
-      &.download{
-        #deleteModelButton{
-          display:none;
-        }
-      }
-
-      &:not(.download){
-        #downloadModelButton{
-          display:none;
-        }
-      }
     }
 
     #automaticAltText,
@@ -5589,6 +5573,7 @@ button.hasPopupMenu{
   min-width:var(--sidebar-min-width);
   max-width:var(--sidebar-max-width);
   backdrop-filter:var(--sidebar-backdrop-filter);
+  box-sizing:border-box;
 
   .sidebarResizer{
     width:var(--resizer-width);
diff --git a/toolkit/components/pdfjs/content/web/viewer.html b/toolkit/components/pdfjs/content/web/viewer.html
index d4272c7a4d753..2c47721c1eda9 100644
--- a/toolkit/components/pdfjs/content/web/viewer.html
+++ b/toolkit/components/pdfjs/content/web/viewer.html
@@ -216,7 +216,7 @@
                     <div id="attachmentsView" class="hidden"></div>
                     <div id="layersView" class="treeView hidden"></div>
                   </div>
-                  <div id="viewsManagerResizer" class="sidebarResizer"></div>
+                  <div id="viewsManagerResizer" class="sidebarResizer" role="separator" aria-controls="viewsManager" tabindex="0"></div>
                 </div>
                 <!-- sidebarContainer -->
 
@@ -986,20 +986,6 @@
                     ></a>
                   </div>
                 </div>
-                <div id="aiModelSettings">
-                  <div>
-                    <span data-l10n-id="pdfjs-editor-alt-text-settings-download-model-label" data-l10n-args='{ "totalSize": 180 }'></span>
-                    <div id="aiModelDescription" class="description">
-                      <span data-l10n-id="pdfjs-editor-alt-text-settings-ai-model-description"></span>
-                    </div>
-                  </div>
-                  <button id="deleteModelButton" type="button" class="secondaryButton" tabindex="0">
-                    <span data-l10n-id="pdfjs-editor-alt-text-settings-delete-model-button"></span>
-                  </button>
-                  <button id="downloadModelButton" type="button" class="secondaryButton" tabindex="0">
-                    <span data-l10n-id="pdfjs-editor-alt-text-settings-download-model-button"></span>
-                  </button>
-                </div>
               </div>
             </div>
             <div class="dialogSeparator"></div>
diff --git a/toolkit/components/pdfjs/content/web/viewer.mjs b/toolkit/components/pdfjs/content/web/viewer.mjs
index 5ccf20ac637a7..f21cb5b0e9d2e 100644
--- a/toolkit/components/pdfjs/content/web/viewer.mjs
+++ b/toolkit/components/pdfjs/content/web/viewer.mjs
@@ -21,8 +21,8 @@
  */
 
 /**
- * pdfjsVersion = 5.4.590
- * pdfjsBuild = 550520193
+ * pdfjsVersion = 5.4.647
+ * pdfjsBuild = 222a24c62
  */
 /******/ // The require scope
 /******/ var __webpack_require__ = {};
@@ -120,12 +120,6 @@ const UNKNOWN_SCALE = 0;
 const MAX_AUTO_SCALE = 1.25;
 const SCROLLBAR_PADDING = 40;
 const VERTICAL_PADDING = 5;
-const RenderingStates = {
-  INITIAL: 0,
-  RUNNING: 1,
-  PAUSED: 2,
-  FINISHED: 3
-};
 const PresentationModeState = {
   UNKNOWN: 0,
   NORMAL: 1,
@@ -487,7 +481,7 @@ class ProgressBar {
     return this.#percent;
   }
   set percent(val) {
-    this.#percent = MathClamp(val, 0, 100);
+    this.#percent = val;
     if (isNaN(val)) {
       this.#classList.add("indeterminate");
       return;
@@ -1466,6 +1460,51 @@ class FirefoxEventBus extends EventBus {
   }
 }
 
+;// ./web/base_download_manager.js
+
+class BaseDownloadManager {
+  #openBlobUrls = new WeakMap();
+  _triggerDownload(blobUrl, originalUrl, filename, isAttachment = false) {
+    throw new Error("Not implemented: _triggerDownload");
+  }
+  _getOpenDataUrl(blobUrl, filename, dest = null) {
+    throw new Error("Not implemented: _getOpenDataUrl");
+  }
+  downloadData(data, filename, contentType) {
+    const blobUrl = URL.createObjectURL(new Blob([data], {
+      type: contentType
+    }));
+    this._triggerDownload(blobUrl, blobUrl, filename, true);
+  }
+  openOrDownloadData(data, filename, dest = null) {
+    const isPdfData = isPdfFile(filename);
+    const contentType = isPdfData ? "application/pdf" : "";
+    if (isPdfData) {
+      let blobUrl;
+      try {
+        blobUrl = this.#openBlobUrls.getOrInsertComputed(data, () => URL.createObjectURL(new Blob([data], {
+          type: contentType
+        })));
+        const viewerUrl = this._getOpenDataUrl(blobUrl, filename, dest);
+        window.open(viewerUrl);
+        return true;
+      } catch (ex) {
+        console.error("openOrDownloadData:", ex);
+        URL.revokeObjectURL(blobUrl);
+        this.#openBlobUrls.delete(data);
+      }
+    }
+    this.downloadData(data, filename, contentType);
+    return false;
+  }
+  download(data, url, filename) {
+    const blobUrl = data ? URL.createObjectURL(new Blob([data], {
+      type: "application/pdf"
+    })) : null;
+    this._triggerDownload(blobUrl, url, filename);
+  }
+}
+
 ;// ./web/external_services.js
 class BaseExternalServices {
   updateFindControlState(data) {}
@@ -1491,51 +1530,7 @@ class BaseExternalServices {
 ;// ./web/preferences.js
 
 class BasePreferences {
-  #defaults = Object.freeze({
-    altTextLearnMoreUrl: "https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/pdf-alt-text",
-    annotationEditorMode: 0,
-    annotationMode: 2,
-    capCanvasAreaFactor: 200,
-    commentLearnMoreUrl: "https://support.mozilla.org/%LOCALE%/kb/view-pdf-files-firefox-or-choose-another-viewer#w_add-a-comment-to-a-pdf",
-    cursorToolOnLoad: 0,
-    defaultZoomDelay: 400,
-    defaultZoomValue: "",
-    disablePageLabels: false,
-    enableAltText: false,
-    enableAltTextModelDownload: true,
-    enableAutoLinking: true,
-    enableComment: false,
-    enableGuessAltText: true,
-    enableHighlightFloatingButton: false,
-    enableNewAltTextWhenAddingImage: true,
-    enableOptimizedPartialRendering: false,
-    enablePermissions: false,
-    enablePrintAutoRotate: true,
-    enableScripting: true,
-    enableSignatureEditor: false,
-    enableSplitMerge: false,
-    enableUpdatedAddImage: false,
-    externalLinkTarget: 0,
-    highlightEditorColors: "yellow=#FFFF98,green=#53FFBC,blue=#80EBFF,pink=#FFCBE6,red=#FF4F5F,yellow_HCM=#FFFFCC,green_HCM=#53FFBC,blue_HCM=#80EBFF,pink_HCM=#F6B8FF,red_HCM=#C50043",
-    historyUpdateUrl: false,
-    ignoreDestinationZoom: false,
-    forcePageColors: false,
-    pageColorsBackground: "Canvas",
-    pageColorsForeground: "CanvasText",
-    pdfBugEnabled: false,
-    sidebarViewOnLoad: -1,
-    scrollModeOnLoad: -1,
-    spreadModeOnLoad: -1,
-    textLayerMode: 1,
-    viewerCssTheme: 0,
-    viewOnLoad: 0,
-    disableAutoFetch: false,
-    disableFontFace: false,
-    disableRange: false,
-    disableStream: false,
-    enableHWA: false,
-    enableXfa: true
-  });
+  #defaults = Object.freeze(AppOptions.getAll(OptionKind.PREFERENCE, true));
   #initializedPromise = null;
   constructor() {
     this.#initializedPromise = this._readFromStorage(this.#defaults).then(({
@@ -1580,6 +1575,9 @@ class BasePreferences {
   async get(name) {
     throw new Error("Not implemented: get");
   }
+  get defaults() {
+    return this.#defaults;
+  }
   get initializedPromise() {
     return this.#initializedPromise;
   }
@@ -1686,6 +1684,7 @@ const GenericL10n = null;
 
 
 
+
 let viewerApp = {
   initialized: false
 };
@@ -1722,55 +1721,21 @@ class FirefoxCom {
     request.dispatchEvent(sender);
   }
 }
-class DownloadManager {
-  #openBlobUrls = new WeakMap();
-  downloadData(data, filename, contentType) {
-    const blobUrl = URL.createObjectURL(new Blob([data], {
-      type: contentType
-    }));
+class DownloadManager extends BaseDownloadManager {
+  _triggerDownload(blobUrl, originalUrl, filename, isAttachment = false) {
     FirefoxCom.request("download", {
       blobUrl,
-      originalUrl: blobUrl,
+      originalUrl,
       filename,
-      isAttachment: true
+      isAttachment
     });
   }
-  openOrDownloadData(data, filename, dest = null) {
-    const isPdfData = isPdfFile(filename);
-    const contentType = isPdfData ? "application/pdf" : "";
-    if (isPdfData) {
-      let blobUrl = this.#openBlobUrls.get(data);
-      if (!blobUrl) {
-        blobUrl = URL.createObjectURL(new Blob([data], {
-          type: contentType
-        }));
-        this.#openBlobUrls.set(data, blobUrl);
-      }
-      let viewerUrl = blobUrl + "#filename=" + encodeURIComponent(filename);
-      if (dest) {
-        viewerUrl += `&filedest=${escape(dest)}`;
-      }
-      try {
-        window.open(viewerUrl);
-        return true;
-      } catch (ex) {
-        console.error("openOrDownloadData:", ex);
-        URL.revokeObjectURL(blobUrl);
-        this.#openBlobUrls.delete(data);
-      }
+  _getOpenDataUrl(blobUrl, filename, dest = null) {
+    let url = blobUrl + "#filename=" + encodeURIComponent(filename);
+    if (dest) {
+      url += `&filedest=${escape(dest)}`;
     }
-    this.downloadData(data, filename, contentType);
-    return false;
-  }
-  download(data, url, filename) {
-    const blobUrl = data ? URL.createObjectURL(new Blob([data], {
-      type: "application/pdf"
-    })) : null;
-    FirefoxCom.request("download", {
-      blobUrl,
-      originalUrl: url,
-      filename
-    });
+    return url;
   }
 }
 class Preferences extends BasePreferences {
@@ -2154,18 +2119,15 @@ class ExternalServices extends BaseExternalServices {
         case "range":
           pdfDataRangeTransport.onDataRange(args.begin, args.chunk);
           break;
-        case "rangeProgress":
-          pdfDataRangeTransport.onDataProgress(args.loaded);
-          break;
         case "progressiveRead":
           pdfDataRangeTransport.onDataProgressiveRead(args.chunk);
-          pdfDataRangeTransport.onDataProgress(args.loaded, args.total);
           break;
         case "progressiveDone":
           pdfDataRangeTransport?.onDataProgressiveDone();
           break;
         case "progress":
-          viewerApp.progress(args.loaded / args.total);
+          const percent = MathClamp(Math.round(args.loaded / args.total * 100), 0, 100);
+          viewerApp.progress(percent);
           break;
         case "complete":
           if (!args.data) {
@@ -2286,7 +2248,20 @@ class NewAltTextManager {
         }
       });
       if (this.#uiManager) {
-        this.#uiManager.setPreference("enableGuessAltText", checked);
+        const isAltTextEnabled = await this.#uiManager.mlManager.isEnabledFor("altText");
+        this.#createAutomaticallyButton.disabled = true;
+        if (checked && !isAltTextEnabled) {
+          this.#textarea.value = "";
+          this.#setProgress();
+          this.#uiManager.setPreference("enableGuessAltText", true);
+          await this.#uiManager.mlManager.downloadModel("altText");
+          this.#setPref("enableAltTextModelDownload", true);
+        } else if (!checked && isAltTextEnabled) {
+          this.#uiManager.setPreference("enableGuessAltText", false);
+          await this.#uiManager.mlManager.deleteModel("altText");
+          this.#setPref("enableAltTextModelDownload", false);
+        }
+        this.#createAutomaticallyButton.disabled = false;
         await this.#uiManager.mlManager.toggleService("altText", checked);
       }
       this.#toggleGuessAltText(checked, false);
@@ -2325,6 +2300,13 @@ class NewAltTextManager {
       });
     });
   }
+  #setPref(name, value) {
+    this.#eventBus.dispatch("setpreference", {
+      source: this,
+      name,
+      value
+    });
+  }
   #toggleLoading(value) {
     if (!this.#uiManager || this.#isAILoading === value) {
       return;
@@ -2338,7 +2320,7 @@ class NewAltTextManager {
     }
     this.#dialog.classList.toggle("error", value);
   }
-  async #toggleGuessAltText(value, isInitial = false) {
+  async #toggleGuessAltText(value, isInitial) {
     if (!this.#uiManager) {
       return;
     }
@@ -2467,17 +2449,16 @@ class NewAltTextManager {
       return;
     }
     this.#firstTime = firstTime;
-    let {
+    const {
       mlManager
     } = uiManager;
-    let hasAI = !!mlManager;
+    const hasAI = !!mlManager;
     this.#toggleTitleAndDisclaimer();
     if (mlManager && !mlManager.isReady("altText")) {
-      hasAI = false;
       if (mlManager.hasProgress) {
         this.#setProgress();
       } else {
-        mlManager = null;
+        this.#createAutomaticallyButton.setAttribute("aria-pressed", false);
       }
     } else {
       this.#downloadModel.classList.toggle("hidden", true);
@@ -2607,9 +2588,7 @@ class NewAltTextManager {
   }
 }
 class ImageAltTextSettings {
-  #aiModelSettings;
   #createModelButton;
-  #downloadModelButton;
   #dialog;
   #eventBus;
   #mlManager;
@@ -2618,17 +2597,12 @@ class ImageAltTextSettings {
   constructor({
     dialog,
     createModelButton,
-    aiModelSettings,
     learnMore,
     closeButton,
-    deleteModelButton,
-    downloadModelButton,
     showAltTextDialogButton
   }, overlayManager, eventBus, mlManager) {
     this.#dialog = dialog;
-    this.#aiModelSettings = aiModelSettings;
     this.#createModelButton = createModelButton;
-    this.#downloadModelButton = downloadModelButton;
     this.#showAltTextDialogButton = showAltTextDialogButton;
     this.#overlayManager = overlayManager;
     this.#eventBus = eventBus;
@@ -2642,6 +2616,7 @@ class ImageAltTextSettings {
     dialog.addEventListener("contextmenu", noContextMenu);
     createModelButton.addEventListener("click", async e => {
       const checked = this.#togglePref("enableGuessAltText", e);
+      await (checked ? this.#download(true) : this.#delete(true));
       await mlManager.toggleService("altText", checked);
       this.#reportTelemetry({
         type: "stamp",
@@ -2661,8 +2636,6 @@ class ImageAltTextSettings {
         }
       });
     });
-    deleteModelButton.addEventListener("click", this.#delete.bind(this, true));
-    downloadModelButton.addEventListener("click", this.#download.bind(this, true));
     closeButton.addEventListener("click", this.#finish.bind(this));
     learnMore.addEventListener("click", () => {
       this.#reportTelemetry({
@@ -2695,19 +2668,11 @@ class ImageAltTextSettings {
   }
   async #download(isFromUI = false) {
     if (isFromUI) {
-      this.#downloadModelButton.disabled = true;
-      const span = this.#downloadModelButton.firstElementChild;
-      span.setAttribute("data-l10n-id", "pdfjs-editor-alt-text-settings-downloading-model-button");
       await this.#mlManager.downloadModel("altText");
-      span.setAttribute("data-l10n-id", "pdfjs-editor-alt-text-settings-download-model-button");
-      this.#createModelButton.disabled = false;
       this.#setPref("enableGuessAltText", true);
       this.#mlManager.toggleService("altText", true);
       this.#setPref("enableAltTextModelDownload", true);
-      this.#downloadModelButton.disabled = false;
     }
-    this.#aiModelSettings.classList.toggle("download", false);
-    this.#createModelButton.setAttribute("aria-pressed", true);
   }
   async #delete(isFromUI = false) {
     if (isFromUI) {
@@ -2715,8 +2680,6 @@ class ImageAltTextSettings {
       this.#setPref("enableGuessAltText", false);
       this.#setPref("enableAltTextModelDownload", false);
     }
-    this.#aiModelSettings.classList.toggle("download", true);
-    this.#createModelButton.disabled = true;
     this.#createModelButton.setAttribute("aria-pressed", false);
   }
   async open({
@@ -2726,10 +2689,8 @@ class ImageAltTextSettings {
     const {
       enableAltTextModelDownload
     } = this.#mlManager;
-    this.#createModelButton.disabled = !enableAltTextModelDownload;
     this.#createModelButton.setAttribute("aria-pressed", enableAltTextModelDownload && enableGuessAltText);
     this.#showAltTextDialogButton.setAttribute("aria-pressed", enableNewAltTextWhenAddingImage);
-    this.#aiModelSettings.classList.toggle("download", !enableAltTextModelDownload);
     await this.#overlayManager.open(this.#dialog);
     this.#reportTelemetry({
       type: "stamp",
@@ -3346,8 +3307,8 @@ class Sidebar {
     this.#isResizerOnTheLeft = isResizerOnTheLeft;
     const style = window.getComputedStyle(sidebar);
     this.#initialWidth = this.#width = parseFloat(style.getPropertyValue("--sidebar-width"));
-    resizer.ariaValueMin = parseFloat(style.getPropertyValue("--sidebar-min-width"));
-    resizer.ariaValueMax = parseFloat(style.getPropertyValue("--sidebar-max-width"));
+    resizer.ariaValueMin = parseFloat(style.getPropertyValue("--sidebar-min-width")) || 0;
+    resizer.ariaValueMax = parseFloat(style.getPropertyValue("--sidebar-max-width")) || Infinity;
     resizer.ariaValueNow = this.#width;
     this.#makeSidebarResizable();
     toggleButton.addEventListener("click", this.toggle.bind(this));
@@ -3400,7 +3361,7 @@ class Sidebar {
         signal
       });
       window.addEventListener("pointermove", ev => {
-        if (!pointerMoveAC) {
+        if (!pointerMoveAC || Math.abs(ev.clientX - this.#prevX) < 1) {
           return;
         }
         stopEvent(ev);
@@ -7571,6 +7532,15 @@ class XfaLayerBuilder {
 
 
 
+class BasePrintServiceFactory {
+  static initGlobals(app) {}
+  static get supportsPrinting() {
+    throw new Error("Not implemented: supportsPrinting");
+  }
+  static createPrintService(params) {
+    throw new Error("Not implemented: createPrintService");
+  }
+}
 function getXfaHtmlForPrinting(printContainer, pdfDocument) {
   const xfaHtml = pdfDocument.allXfaHtml;
   const linkService = new SimpleLinkService();
@@ -7714,7 +7684,7 @@ class FirefoxPrintService {
     }
   }
 }
-class PDFPrintServiceFactory {
+class PDFPrintServiceFactory extends BasePrintServiceFactory {
   static get supportsPrinting() {
     const canvas = document.createElement("canvas");
     return shadow(this, "supportsPrinting", "mozPrintCallback" in canvas);
@@ -7724,6 +7694,28 @@ class PDFPrintServiceFactory {
   }
 }
 
+;// ./web/renderable_view.js
+const RenderingStates = {
+  INITIAL: 0,
+  RUNNING: 1,
+  PAUSED: 2,
+  FINISHED: 3
+};
+class RenderableView {
+  renderingId = "";
+  renderTask = null;
+  resume = null;
+  get renderingState() {
+    throw new Error("Abstract getter `renderingState` accessed");
+  }
+  set renderingState(state) {
+    throw new Error("Abstract setter `renderingState` accessed");
+  }
+  async draw() {
+    throw new Error("Not implemented: draw");
+  }
+}
+
 ;// ./web/pdf_rendering_queue.js
 
 
@@ -7849,6 +7841,7 @@ class PDFRenderingQueue {
 ;// ./web/pdf_scripting_manager.js
 
 
+
 class PDFScriptingManager {
   #closeCapability = null;
   #destroyCapability = null;
@@ -8438,7 +8431,8 @@ class TempImageFactory {
     return [tempCanvas, ctx];
   }
 }
-class PDFThumbnailView {
+class PDFThumbnailView extends RenderableView {
+  #renderingState = RenderingStates.INITIAL;
   constructor({
     container,
     eventBus,
@@ -8452,6 +8446,7 @@ class PDFThumbnailView {
     pageColors,
     enableSplitMerge = false
   }) {
+    super();
     this.id = id;
     this.renderingId = `thumbnail${id}`;
     this.pageLabel = null;
@@ -8466,9 +8461,6 @@ class PDFThumbnailView {
     this.eventBus = eventBus;
     this.linkService = linkService;
     this.renderingQueue = renderingQueue;
-    this.renderTask = null;
-    this.renderingState = RenderingStates.INITIAL;
-    this.resume = null;
     this.placeholder = null;
     const imageContainer = this.div = document.createElement("div");
     imageContainer.className = "thumbnail";
@@ -8506,6 +8498,12 @@ class PDFThumbnailView {
     this.scale = canvasWidth / width;
     this.image.style.height = `${canvasHeight}px`;
   }
+  get renderingState() {
+    return this.#renderingState;
+  }
+  set renderingState(state) {
+    this.#renderingState = state;
+  }
   setPdfPage(pdfPage) {
     this.pdfPage = pdfPage;
     this.pdfPageRotate = pdfPage.rotate;
@@ -8734,6 +8732,7 @@ class PDFThumbnailView {
 
 
 
+
 const SCROLL_OPTIONS = {
   behavior: "instant",
   block: "nearest",
@@ -9914,7 +9913,7 @@ class Autolinker {
   static #regex;
   static #numericTLDRegex;
   static findLinks(text) {
-    this.#regex ??= /\b(?:https?:\/\/|mailto:|www\.)(?:[\S--[\p{P}<>]]|\/|[\S--[\[\]]]+[\S--[\p{P}<>]])+|(?=\p{L})[\S--[@\p{Ps}\p{Pe}<>]]+@([\S--[\p{P}<>]]+(?:\.[\S--[\p{P}<>]]+)+)/gmv;
+    this.#regex ??= /\b(?:https?:\/\/|mailto:|www\.)(?:[\S--[\p{P}<>]]|\/|[\S--[\[\]]]+[\S--[\p{P}<>]])+|(?=\p{L})[\S--[@\p{Ps}\p{Pe}<>]]+@([\S--[[\p{P}--\-]<>]]+(?:\.[\S--[[\p{P}--\-]<>]]+)+)/gmv;
     const [normalizedText, diffs] = normalize(text, {
       ignoreDashEOL: true
     });
@@ -9958,7 +9957,7 @@ class Autolinker {
 ;// ./web/base_pdf_page_view.js
 
 
-class BasePDFPageView {
+class BasePDFPageView extends RenderableView {
   #loadingId = null;
   #minDurationToUpdateCanvas = 0;
   #renderError = null;
@@ -9974,9 +9973,8 @@ class BasePDFPageView {
   pageColors = null;
   recordedBBoxes = null;
   renderingQueue = null;
-  renderTask = null;
-  resume = null;
   constructor(options) {
+    super();
     this.eventBus = options.eventBus;
     this.id = options.id;
     this.pageColors = options.pageColors || null;
@@ -10212,9 +10210,9 @@ class PDFPageDetailView extends BasePDFPageView {
   get renderingState() {
     return super.renderingState;
   }
-  set renderingState(value) {
+  set renderingState(state) {
     this.renderingCancelled = false;
-    super.renderingState = value;
+    super.renderingState = state;
   }
   reset({
     keepCanvas = false
@@ -11252,6 +11250,7 @@ class TextLayerBuilder {
 
 
 
+
 const DEFAULT_LAYER_PROPERTIES = null;
 const LAYERS_ORDER = new Map([["canvasWrapper", 0], ["textLayer", 1], ["annotationLayer", 2], ["annotationEditorLayer", 3], ["xfaLayer", 3]]);
 class PDFPageView extends BasePDFPageView {
@@ -12015,6 +12014,7 @@ class PDFPageView extends BasePDFPageView {
 
 
 
+
 const DEFAULT_CACHE_SIZE = 10;
 const PagesCountLimit = {
   FORCE_SCROLL_MODE_PAGE: 10000,
@@ -12108,7 +12108,7 @@ class PDFViewer {
   #viewerAlert = null;
   #pagesMapper = PagesMapper.instance;
   constructor(options) {
-    const viewerVersion = "5.4.590";
+    const viewerVersion = "5.4.647";
     if (version !== viewerVersion) {
       throw new Error(`The API version "${version}" does not match the Viewer version "${viewerVersion}".`);
     }
@@ -15614,6 +15614,7 @@ class ViewsManager extends Sidebar {
 
 
 
+
 
 
 const FORCE_PAGES_LOADED_TIMEOUT = 10000;
@@ -16268,12 +16269,7 @@ const PDFViewerApplication = {
       this.passwordPrompt.setUpdateCallback(updateCallback, reason);
       this.passwordPrompt.open();
     };
-    loadingTask.onProgress = ({
-      loaded,
-      total
-    }) => {
-      this.progress(loaded / total);
-    };
+    loadingTask.onProgress = evt => this.progress(evt.percent);
     return loadingTask.promise.then(pdfDocument => {
       this.load(pdfDocument);
     }, reason => {
@@ -16363,8 +16359,7 @@ const PDFViewerApplication = {
     console.error(`${message}\n\n${moreInfoText.join("\n")}`);
     return message;
   },
-  progress(level) {
-    const percent = Math.round(level * 100);
+  progress(percent) {
     if (!this.loadingBar || percent <= this.loadingBar.percent) {
       return;
     }
@@ -17074,6 +17069,7 @@ const PDFViewerApplication = {
   }
 };
 initCom(PDFViewerApplication);
+PDFPrintServiceFactory.initGlobals(PDFViewerApplication);
 function onPageRender({
   pageNumber
 }) {
@@ -17618,6 +17614,7 @@ function beforeUnload(evt) {
 
 
 
+
 const AppConstants = null;
 window.PDFViewerApplication = PDFViewerApplication;
 window.PDFViewerApplicationConstants = AppConstants;
@@ -17776,10 +17773,7 @@ function getViewerConfiguration() {
     altTextSettingsDialog: {
       dialog: document.getElementById("altTextSettingsDialog"),
       createModelButton: document.getElementById("createModelButton"),
-      aiModelSettings: document.getElementById("aiModelSettings"),
       learnMore: document.getElementById("altTextSettingsLearnMore"),
-      deleteModelButton: document.getElementById("deleteModelButton"),
-      downloadModelButton: document.getElementById("downloadModelButton"),
       showAltTextDialogButton: document.getElementById("showAltTextDialogButton"),
       altTextSettingsCloseButton: document.getElementById("altTextSettingsCloseButton"),
       closeButton: document.getElementById("altTextSettingsCloseButton")
diff --git a/toolkit/components/pdfjs/content/web/wasm/jbig2.wasm b/toolkit/components/pdfjs/content/web/wasm/jbig2.wasm
index 04a4a374f9196..187ab6f038e6c 100644
Binary files a/toolkit/components/pdfjs/content/web/wasm/jbig2.wasm and b/toolkit/components/pdfjs/content/web/wasm/jbig2.wasm differ
diff --git a/toolkit/components/pdfjs/moz.yaml b/toolkit/components/pdfjs/moz.yaml
index c669a174a0106..6624a213cf114 100644
--- a/toolkit/components/pdfjs/moz.yaml
+++ b/toolkit/components/pdfjs/moz.yaml
@@ -20,8 +20,8 @@ origin:
 
   # Human-readable identifier for this version/release
   # Generally "version NNN", "tag SSS", "bookmark SSS"
-  release: 550520193085788c1dbb1dac0d4565109fbbb49f (2026-01-26T18:25:50Z).
-  revision: 550520193085788c1dbb1dac0d4565109fbbb49f
+  release: 222a24c623d0c4c7023f2c6f0c1b3ff0fcaad7d9 (2026-02-04T13:13:05Z).
+  revision: 222a24c623d0c4c7023f2c6f0c1b3ff0fcaad7d9
 
   # The package's license, where possible using the mnemonic from
   # https://spdx.org/licenses/
diff --git a/toolkit/components/pdfjs/test/browser_pdfjs_alttext_telemetry.js b/toolkit/components/pdfjs/test/browser_pdfjs_alttext_telemetry.js
index 92806df4b1355..90e7525d8c836 100644
--- a/toolkit/components/pdfjs/test/browser_pdfjs_alttext_telemetry.js
+++ b/toolkit/components/pdfjs/test/browser_pdfjs_alttext_telemetry.js
@@ -145,12 +145,12 @@ add_task(async function test_telemetry_new_alt_text_settings() {
       ]);
 
       telemetryPromise = getPromise("model_deleted");
-      await clickOn(browser, "#deleteModelButton");
+      await clickOn(browser, "#createModelButton");
       await telemetryPromise;
       await testTelemetryEventExtra(Glean.pdfjsImageAltText.modelDeleted, [{}]);
 
       telemetryPromise = getPromise("model_download_complete");
-      await clickOn(browser, "#downloadModelButton");
+      await clickOn(browser, "#createModelButton");
       await telemetryPromise;
       await testTelemetryEventExtra(
         Glean.pdfjsImageAltText.modelDownloadStart,
diff --git a/toolkit/content/widgets/moz-box-item/moz-box-item.css b/toolkit/content/widgets/moz-box-item/moz-box-item.css
index 104ddfdc59182..ab6d82cea0c20 100644
--- a/toolkit/content/widgets/moz-box-item/moz-box-item.css
+++ b/toolkit/content/widgets/moz-box-item/moz-box-item.css
@@ -74,6 +74,7 @@ slot[name="actions-start"] {
   border-radius: var(--button-border-radius);
   -moz-context-properties: fill;
   fill: currentColor;
+  flex-shrink: 0;
 }
 
 .actions:has(> slot:not(:has-slotted)) {
diff --git a/toolkit/crashreporter/CrashAnnotations.yaml b/toolkit/crashreporter/CrashAnnotations.yaml
index 6e030662564a9..c381cceb419e9 100644
--- a/toolkit/crashreporter/CrashAnnotations.yaml
+++ b/toolkit/crashreporter/CrashAnnotations.yaml
@@ -231,11 +231,9 @@ AppInitDLLs:
 
 ApplicationBuildID:
   description: >
-    Product application's build ID.
+    The Android application's build ID.
   type: string
   scope: ping
-  glean:
-    metric: crash.app_build
 
 ApplicationServicesVersion:
   description: The version of Application Services libraries.
@@ -365,6 +363,8 @@ BuildID:
     Application build ID, the format is YYYYMMDDHHMMSS.
   type: string
   scope: ping
+  glean:
+    metric: crash.app_build
 
 CrashType:
   description: The type of crash that occurred (Android-only).
diff --git a/toolkit/crashreporter/client/app/src/logic.rs b/toolkit/crashreporter/client/app/src/logic.rs
index 46639381f1e85..86db4f00e6617 100644
--- a/toolkit/crashreporter/client/app/src/logic.rs
+++ b/toolkit/crashreporter/client/app/src/logic.rs
@@ -105,6 +105,7 @@ impl ReportCrash {
     pub fn run(mut self) -> anyhow::Result<bool> {
         self.memtest_according_to_settings();
         self.set_log_file();
+        self.set_extra_context();
         let hash = self.compute_minidump_hash();
         let ping_uuid = self.send_crash_ping(hash.as_deref());
         if let Err(e) = self.update_events_file(hash.as_deref(), ping_uuid) {
@@ -131,6 +132,25 @@ impl ReportCrash {
         }
     }
 
+    /// Set the process type and crash time, if not already set.
+    ///
+    /// NOTE: this assumes that the crashreporter client (in the default mode) is only used to send
+    /// main process crashes.
+    fn set_extra_context(&mut self) {
+        let Some(obj) = self.extra.as_object_mut() else {
+            log::error!("expected extra data to be an object");
+            return;
+        };
+        obj.entry("ProcessType").or_insert("main".into());
+        if !obj.contains_key("CrashTime") {
+            if let Ok(time) = crate::std::time::SystemTime::now()
+                .duration_since(crate::std::time::SystemTime::UNIX_EPOCH)
+            {
+                obj.insert("CrashTime".into(), time.as_secs().to_string().into());
+            }
+        }
+    }
+
     /// Compute the SHA256 hash of the minidump file contents, set it in the extra file, and return
     /// it as a hex string.
     fn compute_minidump_hash(&mut self) -> Option<String> {
diff --git a/toolkit/crashreporter/client/app/src/test.rs b/toolkit/crashreporter/client/app/src/test.rs
index 7bb53cbcdd528..c7ed066652fa5 100644
--- a/toolkit/crashreporter/client/app/src/test.rs
+++ b/toolkit/crashreporter/client/app/src/test.rs
@@ -115,8 +115,11 @@ static MOCK_MINIDUMP_EXTRA_EXPECTED: std::sync::LazyLock<String> = std::sync::La
         "TelemetrySessionId": "telemetry_session",
         "SomeNestedJson": {{ "foo": "bar" }},
         "URL": "https://url.example.com",
+        "ProcessType": "main",
+        "CrashTime": "{time}",
         "MinidumpSha256Hash": "{MOCK_MINIDUMP_SHA256}"
-    }}"#
+    }}"#,
+        time = current_unix_time()
     )
 });
 
@@ -422,6 +425,8 @@ impl AssertFiles {
                     "metadata": {
                         "AsyncShutdownTimeout": "{}",
                         "BuildID": "1234",
+                        "CrashTime": current_unix_time().to_string(),
+                        "ProcessType": "main",
                         "ProductName": "Bar",
                         "ReleaseChannel": "release",
                         "Version": "100.0",
@@ -623,8 +628,11 @@ fn no_restart_with_windows_error_reporting() {
             "SomeNestedJson": {{ "foo": "bar" }},
             "URL": "https://url.example.com",
             "WindowsErrorReporting": "1",
+            "ProcessType": "main",
+            "CrashTime": "{time}",
             "MinidumpSha256Hash": "{MOCK_MINIDUMP_SHA256}"
-        }}"#
+        }}"#,
+        time = current_unix_time()
     );
     test.files = {
         let mock_files = MockFiles::new();
@@ -931,7 +939,9 @@ fn details_window() {
         assert_eq!(details_text,
             format!("AsyncShutdownTimeout: {{}}\n\
              BuildID: 1234\n\
+             CrashTime: {time}\n\
              MinidumpSha256Hash: {MOCK_MINIDUMP_SHA256}\n\
+             ProcessType: main\n\
              ProductName: Bar\n\
              ReleaseChannel: release\n\
              SubmittedFrom: Client\n\
@@ -939,7 +949,9 @@ fn details_window() {
              URL: https://url.example.com\n\
              Vendor: FooCorp\n\
              Version: 100.0\n\
-             This report also contains technical information about the state of the application when it crashed.\n")
+             This report also contains technical information about the state of the application when it crashed.\n",
+             time = current_unix_time()
+             )
         );
     });
 }
@@ -1295,6 +1307,8 @@ fn background_task_network_backend() {
                                 "AsyncShutdownTimeout":"{}",
                                 "Version":"100.0",
                                 "URL":"https://url.example.com",
+                                "ProcessType": "main",
+                                "CrashTime": current_unix_time().to_string(),
                                 "MinidumpSha256Hash": MOCK_MINIDUMP_SHA256,
                                 "SubmittedFrom":"Client",
                                 "Throttleable":"1"
@@ -1458,6 +1472,8 @@ fn background_task_curl_fallback() {
                                     "AsyncShutdownTimeout":"{}",
                                     "Version":"100.0",
                                     "URL":"https://url.example.com",
+                                    "ProcessType": "main",
+                                    "CrashTime": current_unix_time().to_string(),
                                     "MinidumpSha256Hash": MOCK_MINIDUMP_SHA256,
                                     "SubmittedFrom":"Client",
                                     "Throttleable":"1"
diff --git a/toolkit/crashreporter/crash_helper/crashhelper.cpp b/toolkit/crashreporter/crash_helper/crashhelper.cpp
index 20404b3ff2df3..e639ba4538188 100644
--- a/toolkit/crashreporter/crash_helper/crashhelper.cpp
+++ b/toolkit/crashreporter/crash_helper/crashhelper.cpp
@@ -7,9 +7,9 @@
 
 #if defined(XP_WIN)
 #  include <windows.h>  // for HANDLE
-#endif                  // defined(XP_WIN)
-
-#if defined(XP_LINUX)
+#elif defined(XP_DARWIN)
+#  include <mach/port.h>  // for mach_port_t
+#elif defined(XP_LINUX)
 // For DirectAuxvDumpInfo
 #  include "mozilla/toolkit/crashreporter/rust_minidump_writer_linux_ffi_generated.h"
 #endif  // defined(XP_LINUX)
diff --git a/toolkit/crashreporter/crash_helper/crashhelper_android.cpp b/toolkit/crashreporter/crash_helper/crashhelper_android.cpp
index 6fc48853afa4f..184841db68885 100644
--- a/toolkit/crashreporter/crash_helper/crashhelper_android.cpp
+++ b/toolkit/crashreporter/crash_helper/crashhelper_android.cpp
@@ -9,8 +9,6 @@
 #include <sys/socket.h>
 #include <sys/un.h>
 
-// For DirectAuxvDumpInfo
-#include "mozilla/toolkit/crashreporter/rust_minidump_writer_linux_ffi_generated.h"
 #include "mozilla/crash_helper_ffi_generated.h"
 
 #define CRASH_HELPER_LOGTAG "GeckoCrashHelper"
@@ -23,11 +21,7 @@ Java_org_mozilla_gecko_crashhelper_CrashHelper_set_1breakpad_1opts(
   // version that's too recent for us.
   const int val = 1;
   int res = setsockopt(breakpad_fd, SOL_SOCKET, SO_PASSCRED, &val, sizeof(val));
-  if (res < 0) {
-    return false;
-  }
-
-  return true;
+  return res >= 0;
 }
 
 extern "C" JNIEXPORT void JNICALL
@@ -53,6 +47,7 @@ Java_org_mozilla_gecko_crashhelper_CrashHelper_crash_1generator(
 
   const char* minidump_path_str =
       jenv->GetStringUTFChars(minidump_path, nullptr);
-  crash_generator_logic_android(pid, breakpad_fd, minidump_path_str, server_fd);
+  const RawIPCConnector pipe = {.socket = server_fd};
+  crash_generator_logic_android(pid, breakpad_fd, minidump_path_str, pipe);
   jenv->ReleaseStringUTFChars(minidump_path, minidump_path_str);
 }
diff --git a/toolkit/crashreporter/crash_helper_client/Cargo.toml b/toolkit/crashreporter/crash_helper_client/Cargo.toml
index 820835f492099..19390e73c8a39 100644
--- a/toolkit/crashreporter/crash_helper_client/Cargo.toml
+++ b/toolkit/crashreporter/crash_helper_client/Cargo.toml
@@ -14,6 +14,9 @@ num-traits = "0.2"
 [target."cfg(any(target_os = \"android\", target_os = \"linux\", target_os = \"macos\"))".dependencies]
 nix = { version = "0.30", features = ["process"] }
 
+[target."cfg(target_os = \"macos\")".dependencies]
+mach2 = { version = "0.4" }
+
 [target."cfg(any(target_os = \"android\", target_os = \"linux\"))".dependencies]
 minidump-writer = "0.11"
 rust_minidump_writer_linux = { path = "../rust_minidump_writer_linux" }
diff --git a/toolkit/crashreporter/crash_helper_client/src/lib.rs b/toolkit/crashreporter/crash_helper_client/src/lib.rs
index 9526d6d204e6d..2e3166c67d8cb 100644
--- a/toolkit/crashreporter/crash_helper_client/src/lib.rs
+++ b/toolkit/crashreporter/crash_helper_client/src/lib.rs
@@ -5,8 +5,7 @@
 use anyhow::{bail, Result};
 use crash_helper_common::{
     messages::{self},
-    AncillaryData, BreakpadString, IPCClientChannel, IPCConnector, IntoRawAncillaryData,
-    ProcessHandle, RawAncillaryData, INVALID_ANCILLARY_DATA,
+    BreakpadString, IPCClientChannel, IPCConnector, ProcessHandle, RawIPCConnector,
 };
 #[cfg(any(target_os = "android", target_os = "linux"))]
 use minidump_writer::minidump_writer::{AuxvType, DirectAuxvDumpInfo};
@@ -44,7 +43,7 @@ impl CrashHelperClient {
         Ok(())
     }
 
-    fn register_child_process(&mut self) -> Result<AncillaryData> {
+    fn register_child_process(&mut self) -> Result<IPCConnector> {
         let ipc_channel = IPCClientChannel::new()?;
         let (server_endpoint, client_endpoint) = ipc_channel.deconstruct();
 
@@ -63,7 +62,7 @@ impl CrashHelperClient {
         let message = messages::RegisterChildProcess::new(server_endpoint.into_ancillary());
         self.connector.send_message(message)?;
 
-        Ok(client_endpoint.into_ancillary())
+        Ok(client_endpoint)
     }
 
     #[cfg(any(target_os = "android", target_os = "linux"))]
@@ -149,7 +148,9 @@ pub unsafe extern "C" fn crash_helper_launch(
 #[cfg(target_os = "android")]
 #[no_mangle]
 pub unsafe extern "C" fn crash_helper_connect(client_socket: RawFd) -> *mut CrashHelperClient {
-    if let Ok(crash_helper) = CrashHelperClient::new(client_socket) {
+    if let Ok(crash_helper) = CrashHelperClient::new(RawIPCConnector {
+        socket: client_socket,
+    }) {
         let crash_helper_box = Box::new(crash_helper);
 
         // The object will be owned by the C++ code from now on, until it is
@@ -200,24 +201,31 @@ pub unsafe extern "C" fn set_crash_report_path(
 /// Creates a new IPC channel to connect a soon-to-be-created child process
 /// with the crash helper client. The server-side endpoint of this channel
 /// will be sent to the crash helper, and the client-side endpoint will be
-/// returned.
+/// stored in the structure pointed by the `connector` argument.
 ///
-/// This function will return an invalid file handle if creation failed.
+/// This function will return false if we failed to create the IPC channel.
 ///
 /// # Safety
 ///
 /// The `client` parameter must be a valid pointer to the crash helper client
 /// object returned by the [`crash_helper_launch()`] or
-/// [`crash_helper_connect()`] functions.
+/// [`crash_helper_connect()`] functions. The `connector` pointer must be a
+/// valid pointer to a `RawIPCConnector` structure.
 #[no_mangle]
 pub unsafe extern "C" fn register_child_ipc_channel(
     client: *mut CrashHelperClient,
-) -> RawAncillaryData {
+    connector: *mut RawIPCConnector,
+) -> bool {
     let client = client.as_mut().unwrap();
     if let Ok(client_endpoint) = client.register_child_process() {
-        client_endpoint.into_raw()
+        let raw_connector = client_endpoint.into_raw_connector();
+        unsafe {
+            connector.write(raw_connector);
+        }
+
+        true
     } else {
-        INVALID_ANCILLARY_DATA
+        false
     }
 }
 
@@ -369,7 +377,7 @@ pub unsafe extern "C" fn unregister_child_auxv_info(
 // signal/exception-safe. We will access this endpoint only from within the
 // exception handler with bare syscalls so we can leave the `IPCConnector`
 // object behind.
-static CHILD_IPC_ENDPOINT: OnceLock<Box<RawAncillaryData>> = OnceLock::new();
+static CHILD_IPC_ENDPOINT: OnceLock<Box<RawIPCConnector>> = OnceLock::new();
 static RENDEZVOUS_FAILED: AtomicBool = AtomicBool::new(false);
 
 /// Let a client rendez-vous with the crash helper process. This step ensures
@@ -382,8 +390,8 @@ static RENDEZVOUS_FAILED: AtomicBool = AtomicBool::new(false);
 /// a valid pipe handle (on Windows) or a valid file descriptor (on all other
 /// platforms).
 #[no_mangle]
-pub unsafe extern "C" fn crash_helper_rendezvous(client_endpoint: RawAncillaryData) {
-    let Ok(connector) = IPCConnector::from_raw_ancillary(client_endpoint) else {
+pub unsafe extern "C" fn crash_helper_rendezvous(raw_connector: RawIPCConnector) {
+    let Ok(connector) = IPCConnector::from_raw_connector(raw_connector) else {
         RENDEZVOUS_FAILED.store(true, Ordering::Relaxed);
         return;
     };
@@ -392,10 +400,10 @@ pub unsafe extern "C" fn crash_helper_rendezvous(client_endpoint: RawAncillaryDa
         if let Ok(message) = connector.recv_reply::<messages::ChildProcessRendezVous>() {
             let res = CrashHelperClient::prepare_for_minidump(message.crash_helper_pid);
             let message = messages::ChildProcessRendezVousReply::new(res, process::id() as Pid);
-            if let Ok(_) = connector.send_message(message) {
+            if connector.send_message(message).is_ok() {
                 assert!(
                     CHILD_IPC_ENDPOINT
-                        .set(Box::new(connector.into_raw_ancillary()))
+                        .set(Box::new(connector.into_raw_connector()))
                         .is_ok(),
                     "The crash_helper_rendezvous() function must only be called once"
                 );
diff --git a/toolkit/crashreporter/crash_helper_client/src/platform.rs b/toolkit/crashreporter/crash_helper_client/src/platform.rs
index b016a7c6dd284..c8de0c9ff8ef3 100644
--- a/toolkit/crashreporter/crash_helper_client/src/platform.rs
+++ b/toolkit/crashreporter/crash_helper_client/src/platform.rs
@@ -11,5 +11,8 @@ pub(crate) mod unix;
 #[cfg(target_os = "linux")]
 pub(crate) mod linux;
 
+#[cfg(target_os = "macos")]
+pub(crate) mod macos;
+
 #[cfg(target_os = "android")]
 pub(crate) mod android;
diff --git a/toolkit/crashreporter/crash_helper_client/src/platform/android.rs b/toolkit/crashreporter/crash_helper_client/src/platform/android.rs
index 0d1d3be5f30fc..e474b2b1733eb 100644
--- a/toolkit/crashreporter/crash_helper_client/src/platform/android.rs
+++ b/toolkit/crashreporter/crash_helper_client/src/platform/android.rs
@@ -3,16 +3,14 @@
  * You can obtain one at http://mozilla.org/MPL/2.0/. */
 
 use anyhow::Result;
-use crash_helper_common::{IPCConnector, Pid, RawAncillaryData};
+use crash_helper_common::{IPCConnector, Pid, RawIPCConnector};
 
 use crate::CrashHelperClient;
 
 impl CrashHelperClient {
-    pub(crate) fn new(server_socket: RawAncillaryData) -> Result<CrashHelperClient> {
+    pub(crate) fn new(server_socket: RawIPCConnector) -> Result<CrashHelperClient> {
         // SAFETY: The `server_socket` passed in from the application is valid
-        let connector = unsafe {
-          IPCConnector::from_raw_ancillary(server_socket)?
-        };
+        let connector = unsafe { IPCConnector::from_raw_connector(server_socket)? };
 
         Ok(CrashHelperClient {
             connector,
diff --git a/toolkit/crashreporter/crash_helper_client/src/platform/macos.rs b/toolkit/crashreporter/crash_helper_client/src/platform/macos.rs
new file mode 100644
index 0000000000000..bdb673304d2c9
--- /dev/null
+++ b/toolkit/crashreporter/crash_helper_client/src/platform/macos.rs
@@ -0,0 +1,15 @@
+/* This Source Code Form is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this file,
+ * You can obtain one at http://mozilla.org/MPL/2.0/. */
+
+use crash_helper_common::Pid;
+
+use crate::CrashHelperClient;
+
+impl CrashHelperClient {
+    pub(crate) fn prepare_for_minidump(_crash_helper_pid: Pid) -> bool {
+        // TODO: Send back the right returned by `mach_task_self()` to give the
+        // crash helper client the necessary permissions to access this task.
+        true
+    }
+}
diff --git a/toolkit/crashreporter/crash_helper_client/src/platform/unix.rs b/toolkit/crashreporter/crash_helper_client/src/platform/unix.rs
index 47392216a29b8..017fbde2376d7 100644
--- a/toolkit/crashreporter/crash_helper_client/src/platform/unix.rs
+++ b/toolkit/crashreporter/crash_helper_client/src/platform/unix.rs
@@ -2,11 +2,11 @@
  * License, v. 2.0. If a copy of the MPL was not distributed with this file,
  * You can obtain one at http://mozilla.org/MPL/2.0/. */
 
-use anyhow::Result;
+use anyhow::{bail, Result};
 use crash_helper_common::{ignore_eintr, BreakpadChar, BreakpadData, IPCChannel, IPCConnector};
 use nix::{
     spawn::{posix_spawn, PosixSpawnAttr, PosixSpawnFileActions},
-    sys::wait::waitpid,
+    sys::wait::{waitpid, WaitStatus},
     unistd::getpid,
 };
 use std::{
@@ -24,6 +24,17 @@ impl CrashHelperClient {
     ) -> Result<CrashHelperClient> {
         let channel = IPCChannel::new()?;
         let (_listener, server_endpoint, client_endpoint) = channel.deconstruct();
+        // SAFETY: `program` is guaranteed to point to a valid nul-terminated
+        // string by the caller.
+        let program = unsafe { CStr::from_ptr(program) };
+        // SAFETY: `breakpad_data` is guaranteed to point to a valid
+        // nul-terminated string by the caller.
+        let breakpad_data =
+            unsafe { CString::from_vec_unchecked(breakpad_data.to_string().into_bytes()) };
+        // SAFETY: `minidump_path` is guaranteed to point to a valid
+        // nul-terminated string by the caller.
+        let minidump_path = unsafe { CStr::from_ptr(minidump_path) };
+
         CrashHelperClient::spawn_crash_helper(
             program,
             breakpad_data,
@@ -38,18 +49,14 @@ impl CrashHelperClient {
     }
 
     fn spawn_crash_helper(
-        program: *const BreakpadChar,
-        breakpad_data: BreakpadData,
-        minidump_path: *const BreakpadChar,
-        endpoint: IPCConnector,
+        program: &CStr,
+        breakpad_data: CString,
+        minidump_path: &CStr,
+        server_endpoint: IPCConnector,
     ) -> Result<()> {
         let parent_pid = getpid().to_string();
         let parent_pid_arg = unsafe { CString::from_vec_unchecked(parent_pid.into_bytes()) };
-        let program = unsafe { CStr::from_ptr(program) };
-        let breakpad_data_arg =
-            unsafe { CString::from_vec_unchecked(breakpad_data.to_string().into_bytes()) };
-        let minidump_path = unsafe { CStr::from_ptr(minidump_path) };
-        let endpoint_arg = endpoint.serialize();
+        let endpoint_arg = server_endpoint.serialize()?;
 
         let file_actions = PosixSpawnFileActions::init()?;
         let attr = PosixSpawnAttr::init()?;
@@ -66,7 +73,7 @@ impl CrashHelperClient {
             &[
                 program,
                 &parent_pid_arg,
-                &breakpad_data_arg,
+                &breakpad_data,
                 minidump_path,
                 &endpoint_arg,
             ],
@@ -75,12 +82,16 @@ impl CrashHelperClient {
 
         // The child should exit quickly after having forked off the
         // actual crash helper process, let's wait for it.
-        ignore_eintr!(waitpid(pid, None))?;
+        let status = ignore_eintr!(waitpid(pid, None))?;
 
-        Ok(())
+        if let WaitStatus::Exited(_, _) = status {
+            Ok(())
+        } else {
+            bail!("The crash helper process failed to start and exited with status: {status:?}");
+        }
     }
 
-    #[cfg(not(target_os = "linux"))]
+    #[cfg(not(any(target_os = "linux", target_os = "macos")))]
     pub(crate) fn prepare_for_minidump(_pid: crash_helper_common::Pid) -> bool {
         // This is a no-op on platforms that don't need it
         true
diff --git a/toolkit/crashreporter/crash_helper_client/src/platform/windows.rs b/toolkit/crashreporter/crash_helper_client/src/platform/windows.rs
index 9989b17379da6..1722a880d0f6e 100644
--- a/toolkit/crashreporter/crash_helper_client/src/platform/windows.rs
+++ b/toolkit/crashreporter/crash_helper_client/src/platform/windows.rs
@@ -73,9 +73,9 @@ impl CrashHelperClient {
         cmd_line.push(" ");
         cmd_line.push(escape_cmd_line_arg(&minidump_path));
         cmd_line.push(" ");
-        cmd_line.push(escape_cmd_line_arg(&endpoint.serialize()));
+        cmd_line.push(escape_cmd_line_arg(&endpoint.serialize()?));
         cmd_line.push(" ");
-        cmd_line.push(escape_cmd_line_arg(&listener.serialize()));
+        cmd_line.push(escape_cmd_line_arg(&listener.serialize()?));
         cmd_line.push("\0");
         let mut cmd_line: Vec<u16> = cmd_line.encode_wide().collect();
 
diff --git a/toolkit/crashreporter/crash_helper_common/Cargo.toml b/toolkit/crashreporter/crash_helper_common/Cargo.toml
index d2ea544814b4f..6c5c342102c64 100644
--- a/toolkit/crashreporter/crash_helper_common/Cargo.toml
+++ b/toolkit/crashreporter/crash_helper_common/Cargo.toml
@@ -13,6 +13,11 @@ thiserror = "2"
 [target."cfg(any(target_os = \"android\", target_os = \"linux\", target_os = \"macos\"))".dependencies]
 nix = { version = "0.30", features = ["fs", "poll", "socket", "uio"] }
 
+[target."cfg(any(target_os = \"ios\", target_os = \"macos\"))".dependencies]
+getrandom = { version = "0.3" }
+mach2 = "0.4"
+log = "0.4"
+
 [target."cfg(any(target_os = \"android\", target_os = \"linux\"))".dependencies]
 minidump-writer = "0.11"
 
diff --git a/toolkit/crashreporter/crash_helper_common/src/errors.rs b/toolkit/crashreporter/crash_helper_common/src/errors.rs
index bc85911ac7085..3d7b6232b4236 100644
--- a/toolkit/crashreporter/crash_helper_common/src/errors.rs
+++ b/toolkit/crashreporter/crash_helper_common/src/errors.rs
@@ -2,14 +2,8 @@
  * License, v. 2.0. If a copy of the MPL was not distributed with this file,
  * You can obtain one at http://mozilla.org/MPL/2.0/. */
 
-use std::num::TryFromIntError;
 use thiserror::Error;
 
-#[cfg(not(target_os = "windows"))]
-pub use nix::errno::Errno as SystemError;
-#[cfg(target_os = "windows")]
-pub use windows_sys::Win32::Foundation::WIN32_ERROR as SystemError;
-
 use crate::{
     messages::{self, MessageError},
     platform::PlatformError,
@@ -19,16 +13,18 @@ use crate::{
 pub enum IPCError {
     #[error("Message error")]
     BadMessage(#[from] MessageError),
-    #[error("Could not connect to a socket: {0}")]
-    ConnectionFailure(SystemError),
+    #[error("Could not connect to the server: {0}")]
+    ConnectionFailure(PlatformError),
     #[error("Failed to create a connector: {0}")]
     CreationFailure(PlatformError),
-    #[error("Buffer length exceeds a 32-bit integer")]
-    InvalidSize(#[from] TryFromIntError),
-    #[error("Error while parsing a file descriptor string")]
-    ParseError,
+    #[error("Failed to deserialize connector: {0}")]
+    Deserialize(PlatformError),
+    #[error("Invalid ancillary data was provided")]
+    InvalidAncillary,
     #[error("Could not receive data: {0}")]
     ReceptionFailure(PlatformError),
+    #[error("Could not serialize connector for use in another process: {0}")]
+    Serialize(PlatformError),
     #[error("An operation timed out")]
     Timeout,
     #[error("Could not send data: {0}")]
diff --git a/toolkit/crashreporter/crash_helper_common/src/ipc_channel.rs b/toolkit/crashreporter/crash_helper_common/src/ipc_channel.rs
index a02004d301b62..90f0123411964 100644
--- a/toolkit/crashreporter/crash_helper_common/src/ipc_channel.rs
+++ b/toolkit/crashreporter/crash_helper_common/src/ipc_channel.rs
@@ -16,8 +16,8 @@ pub enum IPCChannelError {
     Connector(#[from] IPCError),
     #[error("Could not create a listener: {0}")]
     Listener(#[from] IPCListenerError),
-    #[error("Could not create a socketpair: {0}")]
-    SocketPair(#[from] PlatformError),
+    #[error("Could not create an IPC channel: {0}")]
+    Channel(#[from] PlatformError),
 }
 
 /*****************************************************************************
@@ -31,11 +31,21 @@ pub use windows::{IPCChannel, IPCClientChannel};
 pub(crate) mod windows;
 
 /*****************************************************************************
- * Android, macOS & Linux                                                    *
-*****************************************************************************/
+ * Android & Linux                                                           *
+ *****************************************************************************/
 
-#[cfg(any(target_os = "android", target_os = "linux", target_os = "macos"))]
+#[cfg(any(target_os = "android", target_os = "linux"))]
 pub use unix::{IPCChannel, IPCClientChannel};
 
-#[cfg(any(target_os = "android", target_os = "linux", target_os = "macos"))]
+#[cfg(any(target_os = "android", target_os = "linux"))]
 pub(crate) mod unix;
+
+/*****************************************************************************
+ * macOS.                                                                    *
+ *****************************************************************************/
+
+#[cfg(target_os = "macos")]
+pub use mach::{IPCChannel, IPCClientChannel};
+
+#[cfg(target_os = "macos")]
+pub(crate) mod mach;
diff --git a/toolkit/crashreporter/crash_helper_common/src/ipc_channel/mach.rs b/toolkit/crashreporter/crash_helper_common/src/ipc_channel/mach.rs
new file mode 100644
index 0000000000000..3bf71180b7ff0
--- /dev/null
+++ b/toolkit/crashreporter/crash_helper_common/src/ipc_channel/mach.rs
@@ -0,0 +1,73 @@
+/* This Source Code Form is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at https://mozilla.org/MPL/2.0/. */
+
+use std::process;
+
+use crate::{
+    ipc_channel::IPCChannelError, platform::mach::ReceiveRight, IPCConnector, IPCListener, Pid,
+};
+
+pub struct IPCChannel {
+    listener: IPCListener,
+    client_endpoint: IPCConnector,
+    server_endpoint: IPCConnector,
+}
+
+impl IPCChannel {
+    /// Create a new IPC channel for use between the browser main process and
+    /// the crash helper. This includes a dummy listener endpoint and two
+    /// connected endpoints.
+    pub fn new() -> Result<IPCChannel, IPCChannelError> {
+        let listener = IPCListener::new(process::id() as Pid)?;
+        let client_recv = ReceiveRight::new()?;
+        let helper_recv = ReceiveRight::new()?;
+        let client_send = helper_recv.insert_send_right()?;
+        let helper_send = client_recv.insert_send_right()?;
+
+        let client_endpoint = IPCConnector::from_rights(client_send, client_recv)?;
+        let server_endpoint = IPCConnector::from_rights(helper_send, helper_recv)?;
+
+        Ok(IPCChannel {
+            listener,
+            client_endpoint,
+            server_endpoint,
+        })
+    }
+
+    /// Deconstruct the IPC channel, returning the listener, the connected
+    /// server-side endpoint and the connected client-side endpoint.
+    pub fn deconstruct(self) -> (IPCListener, IPCConnector, IPCConnector) {
+        (self.listener, self.server_endpoint, self.client_endpoint)
+    }
+}
+
+pub struct IPCClientChannel {
+    client_endpoint: IPCConnector,
+    server_endpoint: IPCConnector,
+}
+
+impl IPCClientChannel {
+    /// Create a new IPC channel for use between one of the browser's child
+    /// processes and the crash helper.
+    pub fn new() -> Result<IPCClientChannel, IPCChannelError> {
+        let client_recv = ReceiveRight::new()?;
+        let helper_recv = ReceiveRight::new()?;
+        let client_send = helper_recv.insert_send_right()?;
+        let helper_send = client_recv.insert_send_right()?;
+
+        let client_endpoint = IPCConnector::from_rights(client_send, client_recv)?;
+        let server_endpoint = IPCConnector::from_rights(helper_send, helper_recv)?;
+
+        Ok(IPCClientChannel {
+            client_endpoint,
+            server_endpoint,
+        })
+    }
+
+    /// Deconstruct the IPC channel, returning the connected server-side
+    /// endpoint and the connected client-side endpoint.
+    pub fn deconstruct(self) -> (IPCConnector, IPCConnector) {
+        (self.server_endpoint, self.client_endpoint)
+    }
+}
diff --git a/toolkit/crashreporter/crash_helper_common/src/ipc_channel/unix.rs b/toolkit/crashreporter/crash_helper_common/src/ipc_channel/unix.rs
index 85e0aeae86d5e..c70eee5f48ce7 100644
--- a/toolkit/crashreporter/crash_helper_common/src/ipc_channel/unix.rs
+++ b/toolkit/crashreporter/crash_helper_common/src/ipc_channel/unix.rs
@@ -6,8 +6,6 @@ use std::process;
 
 #[cfg(any(target_os = "android", target_os = "linux"))]
 use crate::platform::linux::unix_socketpair;
-#[cfg(target_os = "macos")]
-use crate::platform::macos::unix_socketpair;
 use crate::{ipc_channel::IPCChannelError, IPCConnector, IPCListener, Pid};
 
 pub struct IPCChannel {
@@ -17,15 +15,15 @@ pub struct IPCChannel {
 }
 
 impl IPCChannel {
-    /// Create a new IPCChannel, this includes a listening endpoint that
-    /// will use the current process PID as part of its address and two
-    /// connected endpoints. The listener and the server-side endpoint can be
-    /// inherited by a child process, the client-side endpoint cannot.
+    /// Create a new IPC channel for use between the browser main process and
+    /// the crash helper. This includes a dummy listener and two connected
+    /// endpoints. The the server-side endpoint can be inherited by a child
+    /// process, the client-side endpoint cannot.
     pub fn new() -> Result<IPCChannel, IPCChannelError> {
         let listener = IPCListener::new(process::id() as Pid)?;
 
         // Only the server-side socket will be left open after an exec().
-        let pair = unix_socketpair().map_err(IPCChannelError::SocketPair)?;
+        let pair = unix_socketpair()?;
         let client_endpoint = IPCConnector::from_fd(pair.0)?;
         let server_endpoint = IPCConnector::from_fd_inheritable(pair.1)?;
 
@@ -36,9 +34,8 @@ impl IPCChannel {
         })
     }
 
-    /// Deconstruct the IPC channel, returning the listening endpoint,
-    /// the connected server-side endpoint and the connected client-side
-    /// endpoint.
+    /// Deconstruct the IPC channel, returning the listener, the connected
+    /// server-side endpoint and the connected client-side endpoint.
     pub fn deconstruct(self) -> (IPCListener, IPCConnector, IPCConnector) {
         (self.listener, self.server_endpoint, self.client_endpoint)
     }
@@ -53,7 +50,7 @@ impl IPCClientChannel {
     /// Create a new IPC channel for use between one of the browser's child
     /// processes and the crash helper.
     pub fn new() -> Result<IPCClientChannel, IPCChannelError> {
-        let pair = unix_socketpair().map_err(IPCChannelError::SocketPair)?;
+        let pair = unix_socketpair()?;
         let client_endpoint = IPCConnector::from_fd(pair.0)?;
         let server_endpoint = IPCConnector::from_fd(pair.1)?;
 
@@ -63,9 +60,8 @@ impl IPCClientChannel {
         })
     }
 
-    /// Deconstruct the IPC channel, returning the listening endpoint,
-    /// the connected server-side endpoint and the connected client-side
-    /// endpoint.
+    /// Deconstruct the IPC channel, returning the connected server-side
+    /// endpoint and the connected client-side endpoint.
     pub fn deconstruct(self) -> (IPCConnector, IPCConnector) {
         (self.server_endpoint, self.client_endpoint)
     }
diff --git a/toolkit/crashreporter/crash_helper_common/src/ipc_channel/windows.rs b/toolkit/crashreporter/crash_helper_common/src/ipc_channel/windows.rs
index f2fd78dce88a6..6842016025a8f 100644
--- a/toolkit/crashreporter/crash_helper_common/src/ipc_channel/windows.rs
+++ b/toolkit/crashreporter/crash_helper_common/src/ipc_channel/windows.rs
@@ -20,9 +20,9 @@ pub struct IPCChannel {
 }
 
 impl IPCChannel {
-    /// Create a new IPCChannel, this includes a listening endpoint that
-    /// will use the current process PID as part of its address and two
-    /// connected endpoints.
+    /// Create a new IPC channel for use between the browser main process and
+    /// the crash helper. This includes a listener that will use the current
+    /// process PID as part of its address and two connected endpoints.
     pub fn new() -> Result<IPCChannel, IPCChannelError> {
         let pid = process::id() as Pid;
         let mut listener = IPCListener::new(server_addr(pid))?;
@@ -37,9 +37,8 @@ impl IPCChannel {
         })
     }
 
-    /// Deconstruct the IPC channel, returning the listening endpoint,
-    /// the connected server-side endpoint and the connected client-side
-    /// endpoint.
+    /// Deconstruct the IPC channel, returning the listener, the connected
+    /// server-side endpoint and the connected client-side endpoint.
     pub fn deconstruct(self) -> (IPCListener, IPCConnector, IPCConnector) {
         (self.listener, self.server_endpoint, self.client_endpoint)
     }
@@ -96,9 +95,8 @@ impl IPCClientChannel {
         ))
     }
 
-    /// Deconstruct the IPC channel, returning the listening endpoint,
-    /// the connected server-side endpoint and the connected client-side
-    /// endpoint.
+    /// Deconstruct the IPC channel, returning the connected server-side
+    /// endpoint and the connected client-side endpoint.
     pub fn deconstruct(self) -> (IPCConnector, IPCConnector) {
         (self.server_endpoint, self.client_endpoint)
     }
diff --git a/toolkit/crashreporter/crash_helper_common/src/ipc_connector.rs b/toolkit/crashreporter/crash_helper_common/src/ipc_connector.rs
index 75128fea68027..1943b28c06157 100644
--- a/toolkit/crashreporter/crash_helper_common/src/ipc_connector.rs
+++ b/toolkit/crashreporter/crash_helper_common/src/ipc_connector.rs
@@ -8,7 +8,7 @@ use crate::messages::Header;
 
 pub enum IPCEvent {
     Connect(Rc<IPCConnector>),
-    Message(IPCConnectorKey, Header, Vec<u8>, Option<AncillaryData>),
+    Message(IPCConnectorKey, Header, Vec<u8>, Vec<AncillaryData>),
     Disconnect(IPCConnectorKey),
 }
 
@@ -18,20 +18,32 @@ pub enum IPCEvent {
 
 #[cfg(target_os = "windows")]
 pub use windows::{
-    AncillaryData, IPCConnector, IPCConnectorKey, RawAncillaryData, INVALID_ANCILLARY_DATA,
+    AncillaryData, IPCConnector, IPCConnectorKey, RawIPCConnector, CONNECTOR_ANCILLARY_DATA_LEN,
 };
 
 #[cfg(target_os = "windows")]
 pub(crate) mod windows;
 
 /*****************************************************************************
- * Android, macOS & Linux                                                    *
+ * Android & Linux                                                           *
  *****************************************************************************/
 
-#[cfg(any(target_os = "android", target_os = "linux", target_os = "macos"))]
+#[cfg(any(target_os = "android", target_os = "linux"))]
 pub use unix::{
-    AncillaryData, IPCConnector, IPCConnectorKey, RawAncillaryData, INVALID_ANCILLARY_DATA,
+    AncillaryData, IPCConnector, IPCConnectorKey, RawIPCConnector, CONNECTOR_ANCILLARY_DATA_LEN,
 };
 
-#[cfg(any(target_os = "android", target_os = "linux", target_os = "macos"))]
+#[cfg(any(target_os = "android", target_os = "linux"))]
 pub(crate) mod unix;
+
+/*****************************************************************************
+ * iOS & macOS                                                               *
+ *****************************************************************************/
+
+#[cfg(any(target_os = "ios", target_os = "macos"))]
+pub use mach::{
+    AncillaryData, IPCConnector, IPCConnectorKey, RawIPCConnector, CONNECTOR_ANCILLARY_DATA_LEN,
+};
+
+#[cfg(any(target_os = "ios", target_os = "macos"))]
+pub(crate) mod mach;
diff --git a/toolkit/crashreporter/crash_helper_common/src/ipc_connector/mach.rs b/toolkit/crashreporter/crash_helper_common/src/ipc_connector/mach.rs
new file mode 100644
index 0000000000000..e9f40816ec744
--- /dev/null
+++ b/toolkit/crashreporter/crash_helper_common/src/ipc_connector/mach.rs
@@ -0,0 +1,411 @@
+/* This Source Code Form is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at https://mozilla.org/MPL/2.0/. */
+
+use std::{
+    ffi::{c_int, CStr, CString},
+    thread,
+};
+
+use mach2::{
+    bootstrap::{bootstrap_port, name_t, BOOTSTRAP_SUCCESS},
+    kern_return::{kern_return_t, KERN_SUCCESS},
+    mach_types::ipc_space_t,
+    message::{
+        mach_msg_id_t, mach_msg_port_descriptor_t, mach_msg_type_name_t, MACH_MSGH_BITS,
+        MACH_MSGH_BITS_REMOTE_MASK, MACH_MSG_TYPE_COPY_SEND, MACH_MSG_TYPE_MAKE_SEND,
+        MACH_MSG_TYPE_MAKE_SEND_ONCE, MACH_MSG_TYPE_MOVE_RECEIVE, MACH_MSG_TYPE_MOVE_SEND,
+    },
+    port::{mach_port_name_t, mach_port_t, MACH_PORT_NULL},
+    traps::mach_task_self,
+};
+
+use crate::{
+    errors::IPCError,
+    mach_msg_recv,
+    messages::{self, Message, MessageError},
+    platform::{
+        mach::{mach_msg_send, AsRawPort, MachMessageWrapper, ReceiveRight, SendRight},
+        OwnedRight, PlatformError,
+    },
+    ProcessHandle,
+};
+
+#[allow(non_camel_case_types)]
+type mach_port_mscount_t = u32;
+
+unsafe extern "C" {
+    fn bootstrap_register(
+        bp: mach_port_t,
+        service_name: *const i8,
+        sp: mach_port_t,
+    ) -> kern_return_t;
+    fn bootstrap_look_up(
+        bp: mach_port_t,
+        service_name: *const i8,
+        sp: *mut mach_port_t,
+    ) -> kern_return_t;
+
+    fn mach_port_request_notification(
+        task: ipc_space_t,
+        name: mach_port_name_t,
+        variant: mach_msg_id_t,
+        sync: mach_port_mscount_t,
+        notify: mach_port_t,
+        notifyPoly: mach_msg_type_name_t,
+        previous: *mut mach_port_t,
+    ) -> kern_return_t;
+}
+
+const MACH_NOTIFY_NO_SENDERS: c_int = 0o106;
+
+pub type AncillaryData = OwnedRight;
+pub const CONNECTOR_ANCILLARY_DATA_LEN: usize = 2;
+
+#[repr(C)]
+pub struct RawIPCConnector {
+    pub send: mach_port_t,
+    pub recv: mach_port_t,
+}
+
+pub type IPCConnectorKey = mach_port_t;
+
+pub struct IPCConnector {
+    send: SendRight,
+    recv: ReceiveRight,
+}
+
+impl IPCConnector {
+    pub(crate) fn from_rights(
+        send: SendRight,
+        recv: ReceiveRight,
+    ) -> Result<IPCConnector, IPCError> {
+        let connector = IPCConnector { send, recv };
+        connector
+            .notify_disconnect()
+            .map_err(IPCError::CreationFailure)?;
+        Ok(connector)
+    }
+
+    pub fn from_ancillary(
+        ancillary_data: [AncillaryData; CONNECTOR_ANCILLARY_DATA_LEN],
+    ) -> Result<IPCConnector, IPCError> {
+        let mut iter = ancillary_data.into_iter();
+        let OwnedRight::Send(send) = iter.next().unwrap() else {
+            return Err(IPCError::InvalidAncillary);
+        };
+        let OwnedRight::Receive(recv) = iter.next().unwrap() else {
+            return Err(IPCError::InvalidAncillary);
+        };
+
+        IPCConnector::from_rights(send, recv)
+    }
+
+    /// Create a connector from a raw connector structure holding a couple of
+    /// send and receive rights.
+    ///
+    /// # Safety
+    ///
+    /// The `connector` argument must point to a `RawIPCConnector` object and
+    /// the `send` and `recv` fields of this structure must be valid send and
+    /// receive rights to a mach port.
+    pub unsafe fn from_raw_connector(connector: RawIPCConnector) -> Result<IPCConnector, IPCError> {
+        let send = SendRight::from_raw_port(connector.send);
+        let recv = ReceiveRight::from_raw_port(connector.recv);
+        IPCConnector::from_rights(send, recv)
+    }
+
+    pub fn set_process(&mut self, _process: ProcessHandle) {}
+
+    // Send a message when the last send right for this port is dropped
+    fn notify_disconnect(&self) -> Result<(), PlatformError> {
+        let mut previous = MACH_PORT_NULL;
+        let recv = self.recv.as_raw_port();
+
+        // SAFETY: The `recv` right is a valid receive right as it's owned by
+        // this connector, the pointer to `notifyPoly` is also valid as it's a
+        // reference to the `previous` variable we just declared.
+        let rv = unsafe {
+            mach_port_request_notification(
+                mach_task_self(),
+                recv,
+                MACH_NOTIFY_NO_SENDERS,
+                /* sync */ 0,
+                recv,
+                MACH_MSG_TYPE_MAKE_SEND_ONCE,
+                &mut previous,
+            )
+        };
+
+        if rv != KERN_SUCCESS {
+            Err(PlatformError::RequestNotification(rv))
+        } else {
+            Ok(())
+        }
+    }
+
+    // This creates a temporary service that will be used to transfer the port
+    // right to the receiving process. The value returned by this function is
+    // the name of this service. Note that the service will be spawned in this
+    // function and run asynchronously, the function will return as soon as it
+    // has been launched, so that the other process is sure to find it.
+    //
+    // Once the connector's rights are transferred, or if receiving the message
+    // from the other process times out, the service is torn down.
+    pub fn serialize(self) -> Result<CString, IPCError> {
+        let send_right = self.send;
+        let recv_right = self.recv;
+        let service_receive_right = ReceiveRight::new().map_err(IPCError::Serialize)?;
+
+        const ATTEMPTS: u32 = 5;
+
+        // We pick the service name at random so that it cannot be predicted by
+        // a different process. There could be name clashes even though it's
+        // unlikely, so try a few times before giving up.
+
+        let mut i = ATTEMPTS;
+        loop {
+            // The `getrandom` crate documentation states that if a call fails
+            // then it's likely that all following calls will fail, so just bail
+            // out if we cannot get a random number.
+            let random_id =
+                getrandom::u64().map_err(|e| IPCError::Serialize(PlatformError::GetRandom(e)))?;
+            let name = format!("org.mozilla.crashhelper.{}", random_id);
+
+            // Names longer than 128 bytes are truncated by the kernel, make sure
+            // we don't accidentally make one that is too long.
+            assert!(name.len() < size_of::<name_t>());
+
+            // SAFETY: We just created this string and it has no interior nuls.
+            let cname = unsafe { CString::from_vec_unchecked(name.clone().into_bytes()) };
+            // SAFETY: We control all the pointers and rights going into the
+            // `bootstrap_register()` call and guarantee that they are valid.
+            let rv = unsafe {
+                bootstrap_register(
+                    bootstrap_port,
+                    cname.as_ptr(),
+                    service_receive_right.as_raw_port(),
+                )
+            };
+
+            if rv as u32 != BOOTSTRAP_SUCCESS {
+                if i == 0 {
+                    return Err(IPCError::Serialize(PlatformError::BootstrapRegister(rv)));
+                } else {
+                    i -= 1;
+                    continue;
+                }
+            }
+
+            // We won't wait on this thread, its purpose is precisely not to
+            // block startup while we launch the crash helper.
+            let _ = thread::spawn(move || {
+                let msg = match mach_msg_recv(&service_receive_right, 0, 0) {
+                    Ok(msg) => msg,
+                    Err(err) => {
+                        log::error!(
+                            "No reply from crash helper, mach_msg_recv() failed with = {err}",
+                        );
+                        return;
+                    }
+                };
+
+                let header = msg.header();
+
+                if (header.msgh_bits & MACH_MSGH_BITS_REMOTE_MASK) != MACH_MSG_TYPE_MOVE_SEND {
+                    log::error!("Wrong or no send rend right received from the crash helper");
+                    return;
+                }
+
+                // SAFETY: We just verified that the remote port contains a send right.
+                let reply_port = unsafe { SendRight::from_raw_port(header.msgh_remote_port) };
+                let mut msg = MachMessageWrapper::for_send(0, 2);
+                let descriptors = msg.descriptors_mut();
+                descriptors[0] = mach_msg_port_descriptor_t::new(
+                    send_right.into_raw_port(),
+                    MACH_MSG_TYPE_MOVE_SEND,
+                );
+                descriptors[1] = mach_msg_port_descriptor_t::new(
+                    recv_right.into_raw_port(),
+                    MACH_MSG_TYPE_MOVE_RECEIVE,
+                );
+
+                if let Err(err) = mach_msg_send(&reply_port, &mut msg) {
+                    log::error!(
+                            "Could not send right to the crash helper, mach_msg_recv() failed with = {err}",
+                        );
+                }
+            });
+
+            return Ok(cname);
+        }
+    }
+
+    // Looks up the service we set up in `IPCConnector::deserialize()` and
+    // receives the actual port rights of this connector from it.
+    pub fn deserialize(string: &CStr) -> Result<IPCConnector, IPCError> {
+        let mut service_port = MACH_PORT_NULL;
+        let rv = unsafe { bootstrap_look_up(bootstrap_port, string.as_ptr(), &mut service_port) };
+
+        if rv as u32 != BOOTSTRAP_SUCCESS {
+            return Err(IPCError::Deserialize(PlatformError::BootstrapLookUp(rv)));
+        }
+
+        // SAFETY: This is a valid send right we just obtained from `bootstrap_look_up()`
+        let service_port = unsafe { SendRight::from_raw_port(service_port) };
+        let reply_port = ReceiveRight::new().map_err(IPCError::Deserialize)?;
+
+        // Send a message that will carry the send right to the temporary port
+        // we just created. This will be used by the main process to contact us.
+        let mut msg = MachMessageWrapper::for_send(0, 0);
+        let header = msg.header_mut();
+        header.msgh_bits |= MACH_MSGH_BITS(0, MACH_MSG_TYPE_MAKE_SEND);
+        header.msgh_local_port = reply_port.as_raw_port();
+        mach_msg_send(&service_port, &mut msg).map_err(IPCError::CreationFailure)?;
+
+        // Wait for the main process to reply with the connector.
+        let res = mach_msg_recv(&reply_port, 0, 2).map_err(IPCError::CreationFailure)?;
+        let descriptors = res.descriptors();
+        veryify_descriptors(descriptors)?;
+
+        // SAFETY: We've just verified that this is a valid send right.
+        let send_right = unsafe { SendRight::from_raw_port(descriptors[0].name) };
+        // SAFETY: We've just verified that this is a valid receive right.
+        let recv_right = unsafe { ReceiveRight::from_raw_port(descriptors[1].name) };
+        IPCConnector::from_rights(send_right, recv_right)
+    }
+
+    pub fn into_ancillary(self) -> [AncillaryData; CONNECTOR_ANCILLARY_DATA_LEN] {
+        [OwnedRight::Send(self.send), OwnedRight::Receive(self.recv)]
+    }
+
+    pub fn into_raw_connector(self) -> RawIPCConnector {
+        RawIPCConnector {
+            send: self.send.into_raw_port(),
+            recv: self.recv.into_raw_port(),
+        }
+    }
+
+    pub fn key(&self) -> IPCConnectorKey {
+        self.raw_recv_right()
+    }
+
+    // Returns the raw value of the receive right of this connector. The right
+    // is owned by the connector and remains so.
+    pub(crate) fn raw_recv_right(&self) -> mach_port_t {
+        self.recv.as_raw_port()
+    }
+
+    pub fn send_message<T>(&self, message: T) -> Result<(), IPCError>
+    where
+        T: Message,
+    {
+        let expected_payload_len = message.payload_size();
+        let expected_ancillary_len = message.ancillary_data_len();
+        self.send(&message.header(), vec![])
+            .map_err(IPCError::TransmissionFailure)?;
+        let (payload, ancillary_data) = message.into_payload();
+        assert!(payload.len() == expected_payload_len);
+        assert!(ancillary_data.len() == expected_ancillary_len);
+        self.send(&payload, ancillary_data)
+            .map_err(IPCError::TransmissionFailure)
+    }
+
+    pub fn recv_reply<T>(&self) -> Result<T, IPCError>
+    where
+        T: Message,
+    {
+        let header = self.recv_header()?;
+
+        if header.kind != T::kind() {
+            return Err(IPCError::UnexpectedMessage(header.kind));
+        }
+
+        let (data, ancillary_data) = self.recv(header.size)?;
+        T::decode(&data, ancillary_data).map_err(IPCError::from)
+    }
+
+    // This is a blocking send operation
+    fn send(&self, buff: &[u8], rights: Vec<AncillaryData>) -> Result<(), PlatformError> {
+        let mut msg = MachMessageWrapper::for_send(
+            buff.len(),
+            rights
+                .len()
+                .try_into()
+                .map_err(|_| PlatformError::ValueTooLarge)?,
+        );
+
+        // Buffers in Mach messages are always multiples of 4 bytes, hence the
+        // need for trimming the destination before we copy into it.
+        msg.data_mut()[0..buff.len()].copy_from_slice(buff);
+
+        let descriptors = msg.descriptors_mut();
+
+        for (i, right) in rights.into_iter().enumerate() {
+            descriptors[i] = match right {
+                OwnedRight::Receive(recv) => mach_msg_port_descriptor_t::new(
+                    recv.into_raw_port(),
+                    MACH_MSG_TYPE_MOVE_RECEIVE,
+                ),
+                OwnedRight::Send(send) => {
+                    mach_msg_port_descriptor_t::new(send.into_raw_port(), MACH_MSG_TYPE_MOVE_SEND)
+                }
+            };
+        }
+
+        mach_msg_send(&self.send, &mut msg)
+    }
+
+    pub(crate) fn recv_header(&self) -> Result<messages::Header, IPCError> {
+        let (header, _) = self.recv(messages::HEADER_SIZE)?;
+        messages::Header::decode(&header).map_err(IPCError::BadMessage)
+    }
+
+    // This is a blocking receive
+    pub(crate) fn recv(
+        &self,
+        expected_size: usize,
+    ) -> Result<(Vec<u8>, Vec<AncillaryData>), IPCError> {
+        let msg = mach_msg_recv(
+            &self.recv,
+            expected_size,
+            CONNECTOR_ANCILLARY_DATA_LEN as u32,
+        )
+        .map_err(IPCError::ReceptionFailure)?;
+
+        let data = &msg.data()[0..expected_size];
+        let mut ancillary_data = vec![];
+        for descriptor in msg.descriptors() {
+            let name = descriptor.name;
+            let right = match descriptor.disposition as u32 {
+                MACH_MSG_TYPE_MOVE_RECEIVE => {
+                    // SAFETY: This disposition denotes that this is a valid receive right
+                    OwnedRight::Receive(unsafe { ReceiveRight::from_raw_port(name) })
+                }
+                MACH_MSG_TYPE_MOVE_SEND => {
+                    // SAFETY: This disposition denotes that this is a valid send right
+                    OwnedRight::Send(unsafe { SendRight::from_raw_port(name) })
+                }
+                MACH_MSG_TYPE_COPY_SEND => {
+                    // SAFETY: This disposition denotes that this is a valid send right
+                    OwnedRight::Send(unsafe { SendRight::from_raw_port(name) })
+                }
+                _ => return Err(IPCError::InvalidAncillary),
+            };
+
+            ancillary_data.push(right);
+        }
+
+        Ok((Vec::from(data), ancillary_data))
+    }
+}
+
+fn veryify_descriptors(descriptors: &[mach_msg_port_descriptor_t]) -> Result<(), MessageError> {
+    if (descriptors[0].disposition == MACH_MSG_TYPE_MOVE_SEND as u8)
+        && (descriptors[1].disposition == MACH_MSG_TYPE_MOVE_RECEIVE as u8)
+    {
+        Ok(())
+    } else {
+        Err(MessageError::InvalidData)
+    }
+}
diff --git a/toolkit/crashreporter/crash_helper_common/src/ipc_connector/unix.rs b/toolkit/crashreporter/crash_helper_common/src/ipc_connector/unix.rs
index c2ed863f5f5c6..009b563c9265e 100644
--- a/toolkit/crashreporter/crash_helper_common/src/ipc_connector/unix.rs
+++ b/toolkit/crashreporter/crash_helper_common/src/ipc_connector/unix.rs
@@ -7,7 +7,11 @@ use crate::platform::linux::{set_socket_cloexec, set_socket_default_flags};
 #[cfg(target_os = "macos")]
 use crate::platform::macos::{set_socket_cloexec, set_socket_default_flags};
 use crate::{
-    ignore_eintr, platform::PlatformError, IntoRawAncillaryData, ProcessHandle, IO_TIMEOUT,
+    errors::IPCError,
+    ignore_eintr,
+    messages::{self, Message},
+    platform::PlatformError,
+    ProcessHandle, IO_TIMEOUT,
 };
 
 use nix::{
@@ -19,26 +23,18 @@ use nix::{
 use std::{
     ffi::{CStr, CString},
     io::{IoSlice, IoSliceMut},
-    os::fd::{AsFd, AsRawFd, FromRawFd, IntoRawFd, OwnedFd, RawFd},
+    os::fd::{AsFd, AsRawFd, BorrowedFd, FromRawFd, IntoRawFd, OwnedFd, RawFd},
     str::FromStr,
 };
 
-use crate::{
-    errors::IPCError,
-    messages::{self, Message},
-};
-
-pub type RawAncillaryData = RawFd;
 pub type AncillaryData = OwnedFd;
 
-impl IntoRawAncillaryData for AncillaryData {
-    fn into_raw(self) -> RawAncillaryData {
-        self.into_raw_fd()
-    }
-}
+pub const CONNECTOR_ANCILLARY_DATA_LEN: usize = 1;
 
-// This must match `kInvalidHandle` in `mfbt/UniquePtrExt.h`
-pub const INVALID_ANCILLARY_DATA: RawAncillaryData = -1;
+#[repr(C)]
+pub struct RawIPCConnector {
+    pub socket: RawFd,
+}
 
 pub type IPCConnectorKey = RawFd;
 
@@ -64,20 +60,23 @@ impl IPCConnector {
         Ok(IPCConnector { socket })
     }
 
-    pub fn from_ancillary(socket: AncillaryData) -> Result<IPCConnector, IPCError> {
-        IPCConnector::from_fd(socket)
+    pub fn from_ancillary(
+        ancillary_data: [AncillaryData; CONNECTOR_ANCILLARY_DATA_LEN],
+    ) -> Result<IPCConnector, IPCError> {
+        IPCConnector::from_fd(ancillary_data.into_iter().next().unwrap())
     }
 
-    /// Create a connector from a raw file descriptor.
+    /// Create a connector from a raw connector structure holding a file
+    /// descriptor. The newly created `IPCConnector` object takes ownership
+    /// of the file descriptor contained in the `connector` argument.
     ///
     /// # Safety
     ///
-    /// The `ancillary_data` argument must be an open file descriptor
+    /// The `connector` argument must point to a `RawIPCConnector` object and
+    /// the `socket` field of this structure must be an open file descriptor
     /// representing a connected Unix socket.
-    pub unsafe fn from_raw_ancillary(
-        ancillary_data: RawAncillaryData,
-    ) -> Result<IPCConnector, IPCError> {
-        IPCConnector::from_fd(OwnedFd::from_raw_fd(ancillary_data))
+    pub unsafe fn from_raw_connector(connector: RawIPCConnector) -> Result<IPCConnector, IPCError> {
+        IPCConnector::from_fd(OwnedFd::from_raw_fd(connector.socket))
     }
 
     pub fn set_process(&mut self, _process: ProcessHandle) {}
@@ -85,31 +84,42 @@ impl IPCConnector {
     /// Serialize this connector into a string that can be passed on the
     /// command-line to a child process. This only works for newly
     /// created connectors because they are explicitly created as inheritable.
-    pub fn serialize(&self) -> CString {
-        CString::new(self.as_raw().to_string()).unwrap()
+    pub fn serialize(&self) -> Result<CString, IPCError> {
+        CString::new(self.as_raw().to_string())
+            .map_err(|e| IPCError::Serialize(PlatformError::InteriorNul(e)))
     }
 
     /// Deserialize a connector from an argument passed on the command-line.
     pub fn deserialize(string: &CStr) -> Result<IPCConnector, IPCError> {
-        let string = string.to_str().map_err(|_e| IPCError::ParseError)?;
-        let fd = RawFd::from_str(string).map_err(|_e| IPCError::ParseError)?;
+        let string = string
+            .to_str()
+            .map_err(|_e| IPCError::Deserialize(PlatformError::ParseFileDescriptor))?;
+        let fd = RawFd::from_str(string)
+            .map_err(|_e| IPCError::Deserialize(PlatformError::ParseFileDescriptor))?;
+
         // SAFETY: This is a file descriptor we passed in ourselves.
         let socket = unsafe { OwnedFd::from_raw_fd(fd) };
         Ok(IPCConnector { socket })
     }
 
-    pub fn into_ancillary(self) -> AncillaryData {
-        self.socket
+    pub fn into_ancillary(self) -> [AncillaryData; CONNECTOR_ANCILLARY_DATA_LEN] {
+        [self.socket]
     }
 
-    pub fn into_raw_ancillary(self) -> RawAncillaryData {
-        self.socket.into_raw()
+    pub fn into_raw_connector(self) -> RawIPCConnector {
+        RawIPCConnector {
+            socket: self.socket.into_raw_fd(),
+        }
     }
 
     pub(crate) fn as_raw(&self) -> RawFd {
         self.socket.as_raw_fd()
     }
 
+    pub fn as_raw_ref(&self) -> BorrowedFd<'_> {
+        self.socket.as_fd()
+    }
+
     pub fn key(&self) -> IPCConnectorKey {
         self.socket.as_raw_fd()
     }
@@ -132,14 +142,12 @@ impl IPCConnector {
         T: Message,
     {
         let expected_payload_len = message.payload_size();
-        let expected_ancillary_data = message.has_ancillary_data();
-        self.send(&message.header(), None)
+        let expected_ancillary_len = message.ancillary_data_len();
+        self.send(&message.header(), vec![])
             .map_err(IPCError::TransmissionFailure)?;
         let (payload, ancillary_data) = message.into_payload();
-        assert!(
-            payload.len() == expected_payload_len
-        );
-        assert!(ancillary_data.is_some() == expected_ancillary_data);
+        assert!(payload.len() == expected_payload_len);
+        assert!(ancillary_data.len() == expected_ancillary_len);
         self.send(&payload, ancillary_data)
             .map_err(IPCError::TransmissionFailure)
     }
@@ -159,13 +167,13 @@ impl IPCConnector {
             return Err(IPCError::UnexpectedMessage(header.kind));
         }
 
-        let (data, _) = self.recv(header.size)?;
-        T::decode(&data, None).map_err(IPCError::from)
+        let (data, ancillary_data) = self.recv(header.size)?;
+        T::decode(&data, ancillary_data).map_err(IPCError::from)
     }
 
-    fn send_nonblock(&self, buff: &[u8], fd: &Option<AncillaryData>) -> Result<(), PlatformError> {
+    fn send_nonblock(&self, buff: &[u8], fds: &[AncillaryData]) -> Result<(), PlatformError> {
         let iov = [IoSlice::new(buff)];
-        let scm_fds: Vec<i32> = fd.iter().map(|fd| fd.as_raw_fd()).collect();
+        let scm_fds: Vec<i32> = fds.iter().map(|fd| fd.as_raw_fd()).collect();
         let scm = ControlMessage::ScmRights(&scm_fds);
 
         let res = ignore_eintr!(sendmsg::<()>(
@@ -191,14 +199,14 @@ impl IPCConnector {
         }
     }
 
-    fn send(&self, buff: &[u8], fd: Option<AncillaryData>) -> Result<(), PlatformError> {
-        let res = self.send_nonblock(buff, &fd);
+    fn send(&self, buff: &[u8], fds: Vec<AncillaryData>) -> Result<(), PlatformError> {
+        let res = self.send_nonblock(buff, &fds);
         match res {
             Err(PlatformError::SendFailure(Errno::EAGAIN)) => {
                 // If the socket was not ready to send data wait for it to
                 // become unblocked then retry sending just once.
                 self.poll(PollFlags::POLLOUT)?;
-                self.send_nonblock(buff, &fd)
+                self.send_nonblock(buff, &fds)
             }
             _ => res,
         }
@@ -212,7 +220,7 @@ impl IPCConnector {
     fn recv_nonblock(
         &self,
         expected_size: usize,
-    ) -> Result<(Vec<u8>, Option<AncillaryData>), PlatformError> {
+    ) -> Result<(Vec<u8>, Vec<AncillaryData>), PlatformError> {
         let mut buff: Vec<u8> = vec![0; expected_size];
         let mut cmsg_buffer = cmsg_space!(RawFd);
         let mut iov = [IoSliceMut::new(&mut buff)];
@@ -243,15 +251,15 @@ impl IPCConnector {
             Ok(val) => val,
         };
 
-        let fd = if let Some(cmsg) = res.cmsgs()?.next() {
+        let mut owned_fds = Vec::<OwnedFd>::with_capacity(1);
+        let cmsgs = res.cmsgs().map_err(PlatformError::ReceiveFailure)?;
+        for cmsg in cmsgs {
             if let ControlMessageOwned::ScmRights(fds) = cmsg {
-                fds.first().map(|&fd| unsafe { OwnedFd::from_raw_fd(fd) })
+                owned_fds.extend(fds.iter().map(|&fd| unsafe { OwnedFd::from_raw_fd(fd) }));
             } else {
                 return Err(PlatformError::ReceiveMissingCredentials);
             }
-        } else {
-            None
-        };
+        }
 
         if res.bytes != expected_size {
             return Err(PlatformError::ReceiveTooShort {
@@ -260,10 +268,10 @@ impl IPCConnector {
             });
         }
 
-        Ok((buff, fd))
+        Ok((buff, owned_fds))
     }
 
-    pub fn recv(&self, expected_size: usize) -> Result<(Vec<u8>, Option<AncillaryData>), IPCError> {
+    pub fn recv(&self, expected_size: usize) -> Result<(Vec<u8>, Vec<AncillaryData>), IPCError> {
         let res = self.recv_nonblock(expected_size);
         match res {
             Err(PlatformError::ReceiveFailure(Errno::EAGAIN)) => {
diff --git a/toolkit/crashreporter/crash_helper_common/src/ipc_connector/windows.rs b/toolkit/crashreporter/crash_helper_common/src/ipc_connector/windows.rs
index 2769eccfd1d1c..a578dc883a235 100644
--- a/toolkit/crashreporter/crash_helper_common/src/ipc_connector/windows.rs
+++ b/toolkit/crashreporter/crash_helper_common/src/ipc_connector/windows.rs
@@ -5,15 +5,15 @@
 use crate::{
     errors::IPCError,
     messages::{self, Message, HEADER_SIZE},
-    platform::windows::{
-        create_manual_reset_event, get_last_error, OverlappedOperation, PlatformError,
+    platform::{
+        windows::{create_manual_reset_event, get_last_error, OverlappedOperation},
+        PlatformError,
     },
-    IntoRawAncillaryData, IO_TIMEOUT,
+    IO_TIMEOUT,
 };
 
 use std::{
     ffi::{CStr, OsString},
-    io::Error,
     os::windows::io::{
         AsHandle, AsRawHandle, FromRawHandle, IntoRawHandle, OwnedHandle, RawHandle,
     },
@@ -39,32 +39,25 @@ use windows_sys::Win32::{
 };
 
 pub type AncillaryData = OwnedHandle;
-pub type RawAncillaryData = HANDLE;
 
-impl IntoRawAncillaryData for AncillaryData {
-    fn into_raw(self) -> RawAncillaryData {
-        self.into_raw_handle() as HANDLE
-    }
-}
-
-// This must match `kInvalidHandle` in `mfbt/UniquePtrExt.h`
-pub const INVALID_ANCILLARY_DATA: RawAncillaryData = 0;
+pub const CONNECTOR_ANCILLARY_DATA_LEN: usize = 1;
 
+const INVALID_ANCILLARY_DATA: HANDLE = 0;
 const HANDLE_SIZE: usize = size_of::<HANDLE>();
 
 // We encode handles at the beginning of every transmitted message. This
 // function extracts the handle (if present) and returns it together with
 // the rest of the buffer.
-fn extract_buffer_and_handle(buffer: Vec<u8>) -> Result<(Vec<u8>, Option<OwnedHandle>), IPCError> {
+fn extract_buffer_and_handle(buffer: Vec<u8>) -> Result<(Vec<u8>, Vec<OwnedHandle>), IPCError> {
     let handle_bytes = &buffer[0..HANDLE_SIZE];
     let data = &buffer[HANDLE_SIZE..];
     let handle_bytes: Result<[u8; HANDLE_SIZE], _> = handle_bytes.try_into();
     let Ok(handle_bytes) = handle_bytes else {
-        return Err(IPCError::ParseError);
+        return Err(IPCError::InvalidAncillary);
     };
     let handle = match HANDLE::from_ne_bytes(handle_bytes) {
-        INVALID_ANCILLARY_DATA => None,
-        handle => Some(unsafe { OwnedHandle::from_raw_handle(handle as RawHandle) }),
+        INVALID_ANCILLARY_DATA => vec![],
+        handle => vec![unsafe { OwnedHandle::from_raw_handle(handle as RawHandle) }],
     };
 
     Ok((data.to_vec(), handle))
@@ -72,6 +65,11 @@ fn extract_buffer_and_handle(buffer: Vec<u8>) -> Result<(Vec<u8>, Option<OwnedHa
 
 pub type IPCConnectorKey = usize;
 
+#[repr(C)]
+pub struct RawIPCConnector {
+    pub handle: HANDLE,
+}
+
 pub struct IPCConnector {
     /// A connected pipe handle
     handle: Rc<OwnedHandle>,
@@ -83,7 +81,7 @@ pub struct IPCConnector {
 }
 
 impl IPCConnector {
-    pub fn from_ancillary(handle: OwnedHandle) -> Result<IPCConnector, IPCError> {
+    pub(crate) fn from_handle(handle: OwnedHandle) -> Result<IPCConnector, IPCError> {
         let event = create_manual_reset_event().map_err(IPCError::CreationFailure)?;
 
         Ok(IPCConnector {
@@ -99,10 +97,25 @@ impl IPCConnector {
     ///
     /// The `ancillary_data` argument must be a valid HANDLE representing the
     /// endpoint of a named pipe.
-    pub unsafe fn from_raw_ancillary(
-        ancillary_data: RawAncillaryData,
+    unsafe fn from_raw_handle(handle: HANDLE) -> Result<IPCConnector, IPCError> {
+        IPCConnector::from_handle(OwnedHandle::from_raw_handle(handle as RawHandle))
+    }
+
+    pub fn from_ancillary(
+        ancillary_data: [AncillaryData; CONNECTOR_ANCILLARY_DATA_LEN],
     ) -> Result<IPCConnector, IPCError> {
-        IPCConnector::from_ancillary(OwnedHandle::from_raw_handle(ancillary_data as RawHandle))
+        IPCConnector::from_handle(ancillary_data.into_iter().next().unwrap())
+    }
+
+    /// Create a connector from a raw connector structure holding a HANDLE.
+    ///
+    /// # Safety
+    ///
+    /// The `connector` argument must point to a `RawIPCConnector` object and
+    /// the `handle` field of this structure must be a valid HANDLE representing
+    /// a connected pipe.
+    pub unsafe fn from_raw_connector(connector: RawIPCConnector) -> Result<IPCConnector, IPCError> {
+        IPCConnector::from_raw_handle(connector.handle)
     }
 
     pub fn set_process(&mut self, process: OwnedHandle) {
@@ -168,10 +181,14 @@ impl IPCConnector {
 
                 // If the pipe hasn't been created yet loop over and try again
                 if (res == FALSE) && (error != ERROR_FILE_NOT_FOUND) {
-                    return Err(IPCError::ConnectionFailure(error));
+                    return Err(IPCError::ConnectionFailure(
+                        PlatformError::WaitNamedPipeFailed(error),
+                    ));
                 }
             } else {
-                return Err(IPCError::ConnectionFailure(error));
+                return Err(IPCError::ConnectionFailure(
+                    PlatformError::CreatePipeFailure(error),
+                ));
             }
         }
 
@@ -188,35 +205,47 @@ impl IPCConnector {
             )
         };
         if res == FALSE {
-            return Err(IPCError::ConnectionFailure(get_last_error()));
+            return Err(IPCError::ConnectionFailure(
+                PlatformError::SetNamedPipeHandleState(get_last_error()),
+            ));
         }
 
         // SAFETY: We've verified above that the pipe handle is valid
-        unsafe { IPCConnector::from_raw_ancillary(pipe) }
+        unsafe { IPCConnector::from_raw_handle(pipe) }
     }
 
     /// Serialize this connector into a string that can be passed on the
     /// command-line to a child process. This only works for newly
     /// created connectors because they are explicitly created as inheritable.
-    pub fn serialize(&self) -> OsString {
+    pub fn serialize(&self) -> Result<OsString, IPCError> {
         let raw_handle = self.handle.as_raw_handle() as usize;
-        OsString::from_str(raw_handle.to_string().as_ref()).unwrap()
+        OsString::from_str(raw_handle.to_string().as_ref())
+            .map_err(|_e| IPCError::Serialize(PlatformError::InvalidString))
     }
 
     /// Deserialize a connector from an argument passed on the command-line.
     pub fn deserialize(string: &CStr) -> Result<IPCConnector, IPCError> {
-        let string = string.to_str().map_err(|_e| IPCError::ParseError)?;
-        let handle = usize::from_str(string).map_err(|_e| IPCError::ParseError)?;
+        let string = string
+            .to_str()
+            .map_err(|_e| IPCError::Deserialize(PlatformError::ParseHandle))?;
+        let handle = usize::from_str(string)
+            .map_err(|_e| IPCError::Deserialize(PlatformError::ParseHandle))?;
+
         // SAFETY: This is a handle we passed in ourselves.
-        unsafe { IPCConnector::from_raw_ancillary(handle as HANDLE) }
+        unsafe { IPCConnector::from_raw_handle(handle as HANDLE) }
     }
 
-    pub fn into_ancillary(self) -> AncillaryData {
-        Rc::try_unwrap(self.handle).expect("Multiple references to the underlying handle")
+    pub fn into_ancillary(self) -> [AncillaryData; CONNECTOR_ANCILLARY_DATA_LEN] {
+        let handle =
+            Rc::try_unwrap(self.handle).expect("Multiple references to the underlying handle");
+        [handle]
     }
 
-    pub fn into_raw_ancillary(self) -> RawAncillaryData {
-        self.into_ancillary().into_raw()
+    pub fn into_raw_connector(self) -> RawIPCConnector {
+        let handle =
+            Rc::try_unwrap(self.handle).expect("Multiple references to the underlying handle");
+        let handle = handle.into_raw_handle() as HANDLE;
+        RawIPCConnector { handle }
     }
 
     pub fn send_message<T>(&self, message: T) -> Result<(), IPCError>
@@ -232,17 +261,17 @@ impl IPCConnector {
         T: Message,
     {
         let expected_payload_len = message.payload_size();
-        let expected_ancillary_data = message.has_ancillary_data();
+        let expected_ancillary_data_len = message.ancillary_data_len();
         let header = message.header();
-        let (payload, ancillary_data) = message.into_payload();
+        let (payload, mut ancillary_data) = message.into_payload();
         assert!(payload.len() == expected_payload_len);
-        assert!(ancillary_data.is_some() == expected_ancillary_data);
+        assert!(ancillary_data.len() == expected_ancillary_data_len);
 
         // Send the message header
         OverlappedOperation::send(&self.handle, self.event.as_handle(), header)?;
 
         // Send the message payload plus the optional handles
-        let handle = if let Some(handle) = ancillary_data {
+        let handle = if let Some(handle) = ancillary_data.pop() {
             self.clone_handle(handle)?
         } else {
             INVALID_ANCILLARY_DATA
@@ -260,7 +289,7 @@ impl IPCConnector {
         T: Message,
     {
         let header = self
-            .recv_buffer(messages::HEADER_SIZE)
+            .recv_buffer(HEADER_SIZE)
             .map_err(IPCError::ReceptionFailure)?;
         let header = messages::Header::decode(&header).map_err(IPCError::BadMessage)?;
 
@@ -280,7 +309,7 @@ impl IPCConnector {
     pub(crate) fn recv(
         &self,
         expected_size: usize,
-    ) -> Result<(Vec<u8>, Option<AncillaryData>), IPCError> {
+    ) -> Result<(Vec<u8>, Vec<AncillaryData>), IPCError> {
         let buffer = self
             .recv_buffer(HANDLE_SIZE + expected_size)
             .map_err(IPCError::ReceptionFailure)?;
@@ -313,9 +342,7 @@ impl IPCConnector {
         };
 
         if res == 0 {
-            return Err(PlatformError::CloneHandleFailed(Error::from_raw_os_error(
-                get_last_error() as i32,
-            )));
+            return Err(PlatformError::DuplicateHandleFailed(get_last_error()));
         }
 
         Ok(dst_handle)
diff --git a/toolkit/crashreporter/crash_helper_common/src/ipc_listener.rs b/toolkit/crashreporter/crash_helper_common/src/ipc_listener.rs
index 1d22475b1aac2..a5ba25801c103 100644
--- a/toolkit/crashreporter/crash_helper_common/src/ipc_listener.rs
+++ b/toolkit/crashreporter/crash_helper_common/src/ipc_listener.rs
@@ -18,12 +18,12 @@ pub enum IPCListenerError {
     ConnectorError(#[from] IPCError),
     #[error("Could not create listener: {0}")]
     CreationError(PlatformError),
+    #[error("Could not deserialize a listener: {0}")]
+    Deserialize(PlatformError),
     #[error("Could not listen for incoming connections: {0}")]
     ListenError(PlatformError),
-    #[error("Could not parse handle: {0}")]
-    ParseError(String),
-    #[error("Could not create a new pipe: {0}")]
-    PipeCreationFailure(PlatformError),
+    #[error("Could not serialize listener for use in another process: {0}")]
+    Serialize(PlatformError),
 }
 
 /*****************************************************************************
diff --git a/toolkit/crashreporter/crash_helper_common/src/ipc_listener/unix.rs b/toolkit/crashreporter/crash_helper_common/src/ipc_listener/unix.rs
index e02fa63035c65..11d3dd9950f2b 100644
--- a/toolkit/crashreporter/crash_helper_common/src/ipc_listener/unix.rs
+++ b/toolkit/crashreporter/crash_helper_common/src/ipc_listener/unix.rs
@@ -4,7 +4,7 @@
 
 use std::ffi::CStr;
 
-use crate::{errors::IPCError, Pid};
+use crate::{IPCListenerError, Pid};
 
 pub struct IPCListener {}
 
@@ -12,14 +12,14 @@ impl IPCListener {
     /// Create a new dummy listener. This is not used on Linux and macOS but
     /// we keep the type around so that the shared logic is the same as for
     /// Windows where this type is used.
-    pub fn new(_pid: Pid) -> Result<IPCListener, IPCError> {
+    pub fn new(_pid: Pid) -> Result<IPCListener, IPCListenerError> {
         Ok(IPCListener {})
     }
 
     /// Deserialize a listener from an argument passed on the command-line.
     /// This produces a dummy listener and is only kept to provide shared logic
     /// with Windows.
-    pub fn deserialize(_string: &CStr, _pid: Pid) -> Result<IPCListener, IPCError> {
+    pub fn deserialize(_string: &CStr, _pid: Pid) -> Result<IPCListener, IPCListenerError> {
         Ok(IPCListener {})
     }
 }
diff --git a/toolkit/crashreporter/crash_helper_common/src/ipc_listener/windows.rs b/toolkit/crashreporter/crash_helper_common/src/ipc_listener/windows.rs
index 26ce1cbfed4dd..7e8b6b732bbda 100644
--- a/toolkit/crashreporter/crash_helper_common/src/ipc_listener/windows.rs
+++ b/toolkit/crashreporter/crash_helper_common/src/ipc_listener/windows.rs
@@ -41,7 +41,7 @@ pub struct IPCListener {
 impl IPCListener {
     pub(crate) fn new(server_addr: CString) -> Result<IPCListener, IPCListenerError> {
         let pipe = create_named_pipe(&server_addr, /* first_instance */ true)
-            .map_err(IPCListenerError::PipeCreationFailure)?;
+            .map_err(IPCListenerError::CreationError)?;
 
         Ok(IPCListener {
             server_addr,
@@ -78,12 +78,12 @@ impl IPCListener {
 
     pub(crate) fn replace_pipe(&self) -> Result<IPCConnector, IPCListenerError> {
         let new_pipe = create_named_pipe(&self.server_addr, /* first_instance */ false)
-            .map_err(IPCListenerError::PipeCreationFailure)?;
+            .map_err(IPCListenerError::AcceptError)?;
         let connected_pipe = self.handle.replace(Rc::new(new_pipe));
 
         // We can guarantee that there's only one reference to this handle at
         // this point in time.
-        Ok(IPCConnector::from_ancillary(
+        Ok(IPCConnector::from_handle(
             Rc::<OwnedHandle>::try_unwrap(connected_pipe).unwrap(),
         )?)
     }
@@ -91,17 +91,21 @@ impl IPCListener {
     /// Serialize this listener into a string that can be passed on the
     /// command-line to a child process. This only works for newly
     /// created listeners because they are explicitly created as inheritable.
-    pub fn serialize(&self) -> OsString {
+    pub fn serialize(&self) -> Result<OsString, IPCListenerError> {
         let raw_handle = self.handle.borrow().as_raw_handle() as usize;
-        OsString::from_str(raw_handle.to_string().as_ref()).unwrap()
+        OsString::from_str(raw_handle.to_string().as_ref())
+            .map_err(|_e| IPCListenerError::Serialize(PlatformError::InvalidString))
     }
 
     /// Deserialize a listener from an argument passed on the command-line.
     /// The resulting listener is ready to accept new connections.
     pub fn deserialize(string: &CStr, pid: Pid) -> Result<IPCListener, IPCListenerError> {
         let server_addr = server_addr(pid);
-        let string = string.to_str().map_err(|_e| IPCError::ParseError)?;
-        let handle = usize::from_str(string).map_err(|_e| IPCError::ParseError)?;
+        let string = string
+            .to_str()
+            .map_err(|_e| IPCError::Deserialize(PlatformError::InvalidString))?;
+        let handle = usize::from_str(string)
+            .map_err(|_e| IPCError::Deserialize(PlatformError::ParseHandle))?;
         // SAFETY: This is a handle we passed in ourselves.
         let handle = unsafe { OwnedHandle::from_raw_handle(handle as RawHandle) };
 
diff --git a/toolkit/crashreporter/crash_helper_common/src/ipc_queue.rs b/toolkit/crashreporter/crash_helper_common/src/ipc_queue.rs
index 495d8918e5c11..f5794f0bbf330 100644
--- a/toolkit/crashreporter/crash_helper_common/src/ipc_queue.rs
+++ b/toolkit/crashreporter/crash_helper_common/src/ipc_queue.rs
@@ -4,11 +4,7 @@
 
 use thiserror::Error;
 
-use crate::{
-    errors::{IPCError, SystemError},
-    messages::MessageError,
-    IPCListenerError,
-};
+use crate::{errors::IPCError, messages::MessageError, platform::PlatformError, IPCListenerError};
 
 /*****************************************************************************
  * Error definitions                                                         *
@@ -17,13 +13,11 @@ use crate::{
 #[derive(Debug, Error)]
 pub enum IPCQueueError {
     #[error("Could not create queue: {0}")]
-    CreationFailure(SystemError),
+    CreationFailure(PlatformError),
     #[error("Could not register with queue: {0}")]
-    RegistrationFailure(SystemError),
-    #[error("Could not post an event on the queue: {0}")]
-    PostEventFailure(SystemError),
+    RegistrationFailure(PlatformError),
     #[error("Could not wait for events: {0}")]
-    WaitError(SystemError),
+    WaitError(PlatformError),
     #[error("Underlying IPC connector error: {0}")]
     IPCError(#[from] IPCError),
     #[error("Underlying IPC listener error: {0}")]
@@ -46,8 +40,18 @@ pub(crate) mod windows;
  * Android, macOS & Linux                                                    *
  *****************************************************************************/
 
-#[cfg(any(target_os = "android", target_os = "linux", target_os = "macos"))]
+#[cfg(any(target_os = "android", target_os = "linux"))]
 pub use unix::IPCQueue;
 
-#[cfg(any(target_os = "android", target_os = "linux", target_os = "macos"))]
+#[cfg(any(target_os = "android", target_os = "linux"))]
 pub(crate) mod unix;
+
+/*****************************************************************************
+ * macOS & iOS                                                               *
+ *****************************************************************************/
+
+#[cfg(any(target_os = "ios", target_os = "macos"))]
+pub use mach::IPCQueue;
+
+#[cfg(any(target_os = "ios", target_os = "macos"))]
+pub(crate) mod mach;
diff --git a/toolkit/crashreporter/crash_helper_common/src/ipc_queue/mach.rs b/toolkit/crashreporter/crash_helper_common/src/ipc_queue/mach.rs
new file mode 100644
index 0000000000000..c976d301bccd2
--- /dev/null
+++ b/toolkit/crashreporter/crash_helper_common/src/ipc_queue/mach.rs
@@ -0,0 +1,114 @@
+/* This Source Code Form is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at https://mozilla.org/MPL/2.0/. */
+
+use std::{
+    collections::HashMap,
+    mem::zeroed,
+    os::fd::{AsRawFd, FromRawFd, OwnedFd},
+    ptr::{null, null_mut},
+    rc::Rc,
+};
+
+use mach2::port::mach_port_t;
+use nix::{
+    errno::Errno,
+    libc::{kevent, kqueue, EVFILT_MACHPORT, EV_ADD, EV_ENABLE},
+};
+
+use crate::{
+    errors::IPCError, ipc_queue::IPCQueueError, platform::PlatformError, IPCConnector,
+    IPCConnectorKey, IPCEvent, IPCListener,
+};
+
+pub struct IPCQueue {
+    queue: OwnedFd,
+    connectors: HashMap<IPCConnectorKey, Rc<IPCConnector>>,
+}
+
+impl IPCQueue {
+    pub fn new(_listener: IPCListener) -> Result<IPCQueue, IPCQueueError> {
+        let queue = unsafe {
+            let fd = kqueue();
+
+            if fd < 0 {
+                return Err(IPCQueueError::CreationFailure(
+                    PlatformError::KernelQueueError(Errno::last()),
+                ));
+            }
+
+            OwnedFd::from_raw_fd(fd)
+        };
+        let connectors = HashMap::with_capacity(10);
+
+        Ok(IPCQueue { queue, connectors })
+    }
+
+    pub fn add_connector(&mut self, connector: &Rc<IPCConnector>) -> Result<(), IPCQueueError> {
+        let event = kevent {
+            ident: connector.raw_recv_right() as usize,
+            filter: EVFILT_MACHPORT,
+            flags: EV_ADD | EV_ENABLE,
+            fflags: 0,
+            data: 0,
+            udata: null_mut(),
+        };
+        let res = unsafe { kevent(self.queue.as_raw_fd(), &event, 1, null_mut(), 0, null()) };
+        if res < 0 {
+            return Err(IPCQueueError::RegistrationFailure(
+                PlatformError::KernelEventError(Errno::last()),
+            ));
+        }
+
+        let res = self.connectors.insert(connector.key(), connector.clone());
+        debug_assert!(res.is_none());
+
+        Ok(())
+    }
+
+    pub fn wait_for_events(&mut self) -> Result<Vec<IPCEvent>, IPCQueueError> {
+        // SAFETY: This must be zeroed as it will be populated by `kqueue()`
+        let mut event = kevent {
+            ..unsafe { zeroed() }
+        };
+
+        let res = unsafe { kevent(self.queue.as_raw_fd(), null(), 0, &mut event, 1, null()) };
+        if res < 0 {
+            return Err(IPCQueueError::WaitError(PlatformError::KernelEventError(
+                Errno::last(),
+            )));
+        }
+
+        let raw_mach_port: mach_port_t = event
+            .data
+            .try_into()
+            .expect("event.data must contain a valid Mach port");
+        let connector = self
+            .connectors
+            .get(&raw_mach_port)
+            .expect("Event did not match a known connector");
+
+        let header = match connector.recv_header() {
+            Ok(header) => header,
+            Err(_error @ IPCError::ReceptionFailure(PlatformError::NoMoreSenders)) => {
+                return Ok(vec![IPCEvent::Disconnect(raw_mach_port)]);
+            }
+            Err(error) => return Err(IPCQueueError::IPCError(error)),
+        };
+
+        let payload = match connector.recv(header.size) {
+            Ok(payload) => payload,
+            Err(_error @ IPCError::ReceptionFailure(PlatformError::NoMoreSenders)) => {
+                return Ok(vec![IPCEvent::Disconnect(raw_mach_port)]);
+            }
+            Err(error) => return Err(IPCQueueError::IPCError(error)),
+        };
+
+        Ok(vec![IPCEvent::Message(
+            raw_mach_port,
+            header,
+            payload.0,
+            payload.1,
+        )])
+    }
+}
diff --git a/toolkit/crashreporter/crash_helper_common/src/ipc_queue/unix.rs b/toolkit/crashreporter/crash_helper_common/src/ipc_queue/unix.rs
index a5f2f19ef6028..b91a940e50d04 100644
--- a/toolkit/crashreporter/crash_helper_common/src/ipc_queue/unix.rs
+++ b/toolkit/crashreporter/crash_helper_common/src/ipc_queue/unix.rs
@@ -6,7 +6,8 @@ use nix::poll::{poll, PollFd, PollFlags, PollTimeout};
 use std::{collections::HashMap, os::fd::BorrowedFd, rc::Rc};
 
 use crate::{
-    ignore_eintr, ipc_queue::IPCQueueError, IPCConnector, IPCConnectorKey, IPCEvent, IPCListener,
+    ignore_eintr, ipc_queue::IPCQueueError, platform::PlatformError, IPCConnector, IPCConnectorKey,
+    IPCEvent, IPCListener,
 };
 
 pub struct IPCQueue {
@@ -41,7 +42,7 @@ impl IPCQueue {
 
         let mut events = Vec::<IPCEvent>::new();
         let mut num_events = ignore_eintr!(poll(&mut pollfds, PollTimeout::NONE))
-            .map_err(IPCQueueError::WaitError)?;
+            .map_err(|e| IPCQueueError::WaitError(PlatformError::PollFailure(e)))?;
 
         for (pollfd, (&key, connector)) in pollfds.iter().zip(&self.connectors) {
             // revents() returns None only if the kernel sends back data
diff --git a/toolkit/crashreporter/crash_helper_common/src/ipc_queue/windows.rs b/toolkit/crashreporter/crash_helper_common/src/ipc_queue/windows.rs
index 8468de956b49f..6acca81e2ce06 100644
--- a/toolkit/crashreporter/crash_helper_common/src/ipc_queue/windows.rs
+++ b/toolkit/crashreporter/crash_helper_common/src/ipc_queue/windows.rs
@@ -57,7 +57,9 @@ impl IPCQueue {
         };
 
         if port.is_null() {
-            return Err(IPCQueueError::CreationFailure(get_last_error()));
+            return Err(IPCQueueError::CreationFailure(
+                PlatformError::CreateIoCompletionPortFailed(get_last_error()),
+            ));
         }
 
         let mut queue = IPCQueue {
@@ -101,7 +103,9 @@ impl IPCQueue {
         };
 
         if port.is_null() {
-            return Err(IPCQueueError::RegistrationFailure(get_last_error()));
+            return Err(IPCQueueError::RegistrationFailure(
+                PlatformError::CreateIoCompletionPortFailed(get_last_error()),
+            ));
         }
 
         Ok(())
@@ -128,7 +132,7 @@ impl IPCQueue {
             }
         }
 
-        if self.connectors.len() == 0 {
+        if self.connectors.is_empty() {
             // The last client disconnected.
             return Ok(events);
         }
@@ -169,7 +173,7 @@ impl IPCQueue {
                 debug_assert!(element.is_some(), "Completion on missing connector");
                 events.push(IPCEvent::Disconnect(completion_key));
             } else {
-                return Err(IPCQueueError::WaitError(err));
+                return Err(IPCQueueError::WaitError(PlatformError::IOError(err)));
             }
         } else {
             // SAFETY: `GetQueueCompletionStatus()` successfully retrieved a
@@ -189,9 +193,7 @@ impl IPCQueue {
                 );
                 let operation = self.listen_operation.take();
                 if let Some(operation) = operation {
-                    operation
-                        .accept()
-                        .map_err(|_e| IPCQueueError::RegistrationFailure(0))?;
+                    operation.accept().map_err(IPCQueueError::WaitError)?;
                 }
                 let connector = Rc::new(self.listener.replace_pipe()?);
                 self.insert_connector(&connector);
diff --git a/toolkit/crashreporter/crash_helper_common/src/lib.rs b/toolkit/crashreporter/crash_helper_common/src/lib.rs
index 3078c78a3bce7..9d97ff4457f87 100644
--- a/toolkit/crashreporter/crash_helper_common/src/lib.rs
+++ b/toolkit/crashreporter/crash_helper_common/src/lib.rs
@@ -20,8 +20,7 @@ use messages::MessageError;
 pub use crate::breakpad::{BreakpadChar, BreakpadData, BreakpadRawData, Pid};
 pub use crate::ipc_channel::{IPCChannel, IPCClientChannel};
 pub use crate::ipc_connector::{
-    AncillaryData, IPCConnector, IPCConnectorKey, IPCEvent, RawAncillaryData,
-    INVALID_ANCILLARY_DATA,
+    AncillaryData, IPCConnector, IPCConnectorKey, IPCEvent, RawIPCConnector,
 };
 pub use crate::ipc_listener::{IPCListener, IPCListenerError};
 pub use crate::ipc_queue::IPCQueue;
@@ -30,6 +29,11 @@ pub use crate::platform::ProcessHandle;
 #[cfg(target_os = "windows")]
 pub use crate::platform::server_addr;
 
+#[cfg(any(target_os = "macos", target_os = "ios"))]
+pub use crate::platform::{
+    mach_msg_recv, mach_msg_send, AsRawPort, MachMessageWrapper, ReceiveRight, SendRight,
+};
+
 /// OsString extensions to convert from/to C strings. The strings will be
 /// regular nul-terminated byte strings on most platforms but will use wide
 /// characters instead on Windows.
@@ -63,9 +67,4 @@ pub trait BreakpadString {
     unsafe fn from_raw(ptr: *mut BreakpadChar) -> OsString;
 }
 
-/// Owned handle or file descriptor conversion to their respective raw versions
-pub trait IntoRawAncillaryData {
-    fn into_raw(self) -> RawAncillaryData;
-}
-
 pub const IO_TIMEOUT: u16 = 2 * 1000;
diff --git a/toolkit/crashreporter/crash_helper_common/src/messages.rs b/toolkit/crashreporter/crash_helper_common/src/messages.rs
index 267d54df2c493..c75473cf54cd4 100644
--- a/toolkit/crashreporter/crash_helper_common/src/messages.rs
+++ b/toolkit/crashreporter/crash_helper_common/src/messages.rs
@@ -15,7 +15,11 @@ use thiserror::Error;
 #[cfg(target_os = "windows")]
 use windows_sys::Win32::System::Diagnostics::Debug::{CONTEXT, EXCEPTION_RECORD};
 
-use crate::{breakpad::Pid, ipc_connector::AncillaryData, BreakpadString};
+use crate::{
+    breakpad::Pid,
+    ipc_connector::{AncillaryData, CONNECTOR_ANCILLARY_DATA_LEN},
+    BreakpadString,
+};
 
 #[derive(Debug, Error)]
 pub enum MessageError {
@@ -79,10 +83,10 @@ pub enum Kind {
 pub trait Message {
     fn kind() -> Kind;
     fn payload_size(&self) -> usize;
-    fn has_ancillary_data(&self) -> bool;
+    fn ancillary_data_len(&self) -> usize;
     fn header(&self) -> Vec<u8>;
-    fn into_payload(self) -> (Vec<u8>, Option<AncillaryData>);
-    fn decode(data: &[u8], ancillary_data: Option<AncillaryData>) -> Result<Self, MessageError>
+    fn into_payload(self) -> (Vec<u8>, Vec<AncillaryData>);
+    fn decode(data: &[u8], ancillary_data: Vec<AncillaryData>) -> Result<Self, MessageError>
     where
         Self: Sized;
 }
@@ -141,8 +145,8 @@ impl Message for SetCrashReportPath {
         size_of::<usize>() + path_len
     }
 
-    fn has_ancillary_data(&self) -> bool {
-        false
+    fn ancillary_data_len(&self) -> usize {
+        0
     }
 
     fn header(&self) -> Vec<u8> {
@@ -153,19 +157,19 @@ impl Message for SetCrashReportPath {
         .encode()
     }
 
-    fn into_payload(self) -> (Vec<u8>, Option<AncillaryData>) {
+    fn into_payload(self) -> (Vec<u8>, Vec<AncillaryData>) {
         let mut payload = Vec::with_capacity(self.payload_size());
         let path = self.path.serialize();
         payload.extend(path.len().to_ne_bytes());
         payload.extend(self.path.serialize());
-        (payload, None)
+        (payload, vec![])
     }
 
     fn decode(
         data: &[u8],
-        ancillary_data: Option<AncillaryData>,
+        ancillary_data: Vec<AncillaryData>,
     ) -> Result<SetCrashReportPath, MessageError> {
-        if ancillary_data.is_some() {
+        if !ancillary_data.is_empty() {
             return Err(MessageError::UnexpectedAncillaryData);
         }
 
@@ -202,8 +206,8 @@ impl Message for TransferMinidump {
         size_of::<Pid>()
     }
 
-    fn has_ancillary_data(&self) -> bool {
-        false
+    fn ancillary_data_len(&self) -> usize {
+        0
     }
 
     fn header(&self) -> Vec<u8> {
@@ -214,15 +218,15 @@ impl Message for TransferMinidump {
         .encode()
     }
 
-    fn into_payload(self) -> (Vec<u8>, Option<AncillaryData>) {
-        (self.pid.to_ne_bytes().to_vec(), None)
+    fn into_payload(self) -> (Vec<u8>, Vec<AncillaryData>) {
+        (self.pid.to_ne_bytes().to_vec(), vec![])
     }
 
     fn decode(
         data: &[u8],
-        ancillary_data: Option<AncillaryData>,
+        ancillary_data: Vec<AncillaryData>,
     ) -> Result<TransferMinidump, MessageError> {
-        if ancillary_data.is_some() {
+        if !ancillary_data.is_empty() {
             return Err(MessageError::UnexpectedAncillaryData);
         }
 
@@ -263,8 +267,8 @@ impl Message for TransferMinidumpReply {
                 .map_or(0, |error| error.as_bytes().len())
     }
 
-    fn has_ancillary_data(&self) -> bool {
-        false
+    fn ancillary_data_len(&self) -> usize {
+        0
     }
 
     fn header(&self) -> Vec<u8> {
@@ -275,7 +279,7 @@ impl Message for TransferMinidumpReply {
         .encode()
     }
 
-    fn into_payload(self) -> (Vec<u8>, Option<AncillaryData>) {
+    fn into_payload(self) -> (Vec<u8>, Vec<AncillaryData>) {
         let path_bytes = self.path.serialize();
         let mut buffer = Vec::with_capacity(self.payload_size());
         buffer.extend(path_bytes.len().to_ne_bytes());
@@ -292,14 +296,14 @@ impl Message for TransferMinidumpReply {
                 .as_ref()
                 .map_or(Vec::new(), |error| Vec::from(error.as_bytes())),
         );
-        (buffer, None)
+        (buffer, vec![])
     }
 
     fn decode(
         data: &[u8],
-        ancillary_data: Option<AncillaryData>,
+        ancillary_data: Vec<AncillaryData>,
     ) -> Result<TransferMinidumpReply, MessageError> {
-        if ancillary_data.is_some() {
+        if !ancillary_data.is_empty() {
             return Err(MessageError::UnexpectedAncillaryData);
         }
 
@@ -366,8 +370,8 @@ impl Message for WindowsErrorReportingMinidump {
             + size_of::<CONTEXT>()
     }
 
-    fn has_ancillary_data(&self) -> bool {
-        false
+    fn ancillary_data_len(&self) -> usize {
+        0
     }
 
     fn header(&self) -> Vec<u8> {
@@ -378,7 +382,7 @@ impl Message for WindowsErrorReportingMinidump {
         .encode()
     }
 
-    fn into_payload(self) -> (Vec<u8>, Option<AncillaryData>) {
+    fn into_payload(self) -> (Vec<u8>, Vec<AncillaryData>) {
         let mut buffer = Vec::<u8>::with_capacity(self.payload_size());
         buffer.extend(self.pid.to_ne_bytes());
         buffer.extend(self.tid.to_ne_bytes());
@@ -390,14 +394,14 @@ impl Message for WindowsErrorReportingMinidump {
         }
         let bytes: [u8; size_of::<CONTEXT>()] = unsafe { std::mem::transmute(self.context) };
         buffer.extend(bytes);
-        (buffer, None)
+        (buffer, vec![])
     }
 
     fn decode(
         data: &[u8],
-        ancillary_data: Option<AncillaryData>,
+        ancillary_data: Vec<AncillaryData>,
     ) -> Result<WindowsErrorReportingMinidump, MessageError> {
-        if ancillary_data.is_some() {
+        if !ancillary_data.is_empty() {
             return Err(MessageError::UnexpectedAncillaryData);
         }
 
@@ -470,8 +474,8 @@ impl Message for WindowsErrorReportingMinidumpReply {
         0
     }
 
-    fn has_ancillary_data(&self) -> bool {
-        false
+    fn ancillary_data_len(&self) -> usize {
+        0
     }
 
     fn header(&self) -> Vec<u8> {
@@ -482,15 +486,15 @@ impl Message for WindowsErrorReportingMinidumpReply {
         .encode()
     }
 
-    fn into_payload(self) -> (Vec<u8>, Option<AncillaryData>) {
-        (Vec::<u8>::new(), None)
+    fn into_payload(self) -> (Vec<u8>, Vec<AncillaryData>) {
+        (Vec::<u8>::new(), vec![])
     }
 
     fn decode(
         data: &[u8],
-        ancillary_data: Option<AncillaryData>,
+        ancillary_data: Vec<AncillaryData>,
     ) -> Result<WindowsErrorReportingMinidumpReply, MessageError> {
-        if ancillary_data.is_some() {
+        if !ancillary_data.is_empty() {
             return Err(MessageError::UnexpectedAncillaryData);
         }
 
@@ -529,8 +533,8 @@ impl Message for RegisterAuxvInfo {
         size_of::<Pid>() + (size_of::<AuxvType>() * 4)
     }
 
-    fn has_ancillary_data(&self) -> bool {
-        false
+    fn ancillary_data_len(&self) -> usize {
+        0
     }
 
     fn header(&self) -> Vec<u8> {
@@ -541,21 +545,21 @@ impl Message for RegisterAuxvInfo {
         .encode()
     }
 
-    fn into_payload(self) -> (Vec<u8>, Option<AncillaryData>) {
+    fn into_payload(self) -> (Vec<u8>, Vec<AncillaryData>) {
         let mut payload = Vec::with_capacity(self.payload_size());
         payload.extend(self.pid.to_ne_bytes());
         payload.extend(self.auxv_info.program_header_count.to_ne_bytes());
         payload.extend(self.auxv_info.program_header_address.to_ne_bytes());
         payload.extend(self.auxv_info.linux_gate_address.to_ne_bytes());
         payload.extend(self.auxv_info.entry_address.to_ne_bytes());
-        (payload, None)
+        (payload, vec![])
     }
 
     fn decode(
         data: &[u8],
-        ancillary_data: Option<AncillaryData>,
+        ancillary_data: Vec<AncillaryData>,
     ) -> Result<RegisterAuxvInfo, MessageError> {
-        if ancillary_data.is_some() {
+        if !ancillary_data.is_empty() {
             return Err(MessageError::UnexpectedAncillaryData);
         }
 
@@ -618,8 +622,8 @@ impl Message for UnregisterAuxvInfo {
         size_of::<Pid>()
     }
 
-    fn has_ancillary_data(&self) -> bool {
-        false
+    fn ancillary_data_len(&self) -> usize {
+        0
     }
 
     fn header(&self) -> Vec<u8> {
@@ -630,17 +634,17 @@ impl Message for UnregisterAuxvInfo {
         .encode()
     }
 
-    fn into_payload(self) -> (Vec<u8>, Option<AncillaryData>) {
+    fn into_payload(self) -> (Vec<u8>, Vec<AncillaryData>) {
         let mut payload = Vec::with_capacity(self.payload_size());
         payload.extend(self.pid.to_ne_bytes());
-        (payload, None)
+        (payload, vec![])
     }
 
     fn decode(
         data: &[u8],
-        ancillary_data: Option<AncillaryData>,
+        ancillary_data: Vec<AncillaryData>,
     ) -> Result<UnregisterAuxvInfo, MessageError> {
-        if ancillary_data.is_some() {
+        if !ancillary_data.is_empty() {
             return Err(MessageError::UnexpectedAncillaryData);
         }
 
@@ -653,23 +657,17 @@ impl Message for UnregisterAuxvInfo {
 
 /* Message sent from the main process to the crash helper to register a new
  * child process which is about to be spawned. This message contains the IPC
- * endpoint which the crash helper will use to talk to the child.
- *
- * Note that these processes should only contain an IPC endpoint and no actual
- * data, however they declare a 1-byte sized payload which is transferred but
- * ignored on the receiving size. This is a workaround to an issue with macOS
- * 10.15 implementation of Unix sockets which would sometimes fail to deliver
- * a message that would only contain control data and no buffer. See bug
- * 1989686 for more information. This dummy payload can be removed once bug
- * 2002791 is implemented. */
+ * endpoint which the crash helper will use to talk to the child. */
 
 pub struct RegisterChildProcess {
-    pub ipc_endpoint: AncillaryData,
+    pub ancillary_data: [AncillaryData; CONNECTOR_ANCILLARY_DATA_LEN],
 }
 
 impl RegisterChildProcess {
-    pub fn new(ipc_endpoint: AncillaryData) -> RegisterChildProcess {
-        RegisterChildProcess { ipc_endpoint }
+    pub fn new(
+        ancillary_data: [AncillaryData; CONNECTOR_ANCILLARY_DATA_LEN],
+    ) -> RegisterChildProcess {
+        RegisterChildProcess { ancillary_data }
     }
 }
 
@@ -679,11 +677,11 @@ impl Message for RegisterChildProcess {
     }
 
     fn payload_size(&self) -> usize {
-        1 // HACK, see the comment above
+        0
     }
 
-    fn has_ancillary_data(&self) -> bool {
-        true
+    fn ancillary_data_len(&self) -> usize {
+        self.ancillary_data.len()
     }
 
     fn header(&self) -> Vec<u8> {
@@ -694,19 +692,25 @@ impl Message for RegisterChildProcess {
         .encode()
     }
 
-    fn into_payload(self) -> (Vec<u8>, Option<AncillaryData>) {
-        (vec![0], Some(self.ipc_endpoint))
+    fn into_payload(self) -> (Vec<u8>, Vec<AncillaryData>) {
+        (vec![], self.ancillary_data.into())
     }
 
     fn decode(
         _data: &[u8],
-        ancillary_data: Option<AncillaryData>,
+        mut ancillary_data: Vec<AncillaryData>,
     ) -> Result<RegisterChildProcess, MessageError> {
-        let Some(ipc_endpoint) = ancillary_data else {
-            return Err(MessageError::MissingAncillary);
+        #[cfg(any(target_os = "ios", target_os = "macos"))]
+        let ancillary_data: [AncillaryData; CONNECTOR_ANCILLARY_DATA_LEN] = {
+            let receive_right = ancillary_data.pop().ok_or(MessageError::MissingAncillary)?;
+            let send_right = ancillary_data.pop().ok_or(MessageError::MissingAncillary)?;
+            [send_right, receive_right]
         };
+        #[cfg(not(any(target_os = "ios", target_os = "macos")))]
+        let ancillary_data: [AncillaryData; CONNECTOR_ANCILLARY_DATA_LEN] =
+            [ancillary_data.pop().ok_or(MessageError::MissingAncillary)?];
 
-        Ok(RegisterChildProcess { ipc_endpoint })
+        Ok(RegisterChildProcess { ancillary_data })
     }
 }
 
@@ -736,8 +740,8 @@ impl Message for ChildProcessRendezVous {
         size_of::<Pid>()
     }
 
-    fn has_ancillary_data(&self) -> bool {
-        false
+    fn ancillary_data_len(&self) -> usize {
+        0
     }
 
     fn header(&self) -> Vec<u8> {
@@ -748,15 +752,15 @@ impl Message for ChildProcessRendezVous {
         .encode()
     }
 
-    fn into_payload(self) -> (Vec<u8>, Option<AncillaryData>) {
-        (self.crash_helper_pid.to_ne_bytes().to_vec(), None)
+    fn into_payload(self) -> (Vec<u8>, Vec<AncillaryData>) {
+        (self.crash_helper_pid.to_ne_bytes().to_vec(), vec![])
     }
 
     fn decode(
         data: &[u8],
-        ancillary_data: Option<AncillaryData>,
+        ancillary_data: Vec<AncillaryData>,
     ) -> Result<ChildProcessRendezVous, MessageError> {
-        if ancillary_data.is_some() {
+        if !ancillary_data.is_empty() {
             return Err(MessageError::UnexpectedAncillaryData);
         }
 
@@ -798,8 +802,8 @@ impl Message for ChildProcessRendezVousReply {
         size_of::<u8>() + size_of::<Pid>()
     }
 
-    fn has_ancillary_data(&self) -> bool {
-        false
+    fn ancillary_data_len(&self) -> usize {
+        0
     }
 
     fn header(&self) -> Vec<u8> {
@@ -810,24 +814,24 @@ impl Message for ChildProcessRendezVousReply {
         .encode()
     }
 
-    fn into_payload(self) -> (Vec<u8>, Option<AncillaryData>) {
+    fn into_payload(self) -> (Vec<u8>, Vec<AncillaryData>) {
         let mut payload = Vec::with_capacity(self.payload_size());
         payload.push(self.dumpable.into());
         payload.extend(self.child_pid.to_ne_bytes());
         debug_assert!(self.payload_size() == payload.len());
-        (payload, None)
+        (payload, vec![])
     }
 
     fn decode(
         data: &[u8],
-        ancillary_data: Option<AncillaryData>,
+        ancillary_data: Vec<AncillaryData>,
     ) -> Result<ChildProcessRendezVousReply, MessageError> {
-        if ancillary_data.is_some() {
+        if !ancillary_data.is_empty() {
             return Err(MessageError::UnexpectedAncillaryData);
         }
 
         let dumpable_bytes: [u8; size_of::<u8>()] = data[0..size_of::<u8>()].try_into()?;
-        let dumpable = if dumpable_bytes[0] == 0 { false } else { true };
+        let dumpable = dumpable_bytes[0] != 0;
         let offset = size_of::<u8>();
 
         let child_pid_bytes: [u8; size_of::<Pid>()] =
diff --git a/toolkit/crashreporter/crash_helper_common/src/platform.rs b/toolkit/crashreporter/crash_helper_common/src/platform.rs
index 4159b594bcb74..1671a8f2c806b 100644
--- a/toolkit/crashreporter/crash_helper_common/src/platform.rs
+++ b/toolkit/crashreporter/crash_helper_common/src/platform.rs
@@ -14,11 +14,14 @@ pub use linux::{PlatformError, ProcessHandle};
 #[cfg(any(target_os = "android", target_os = "linux"))]
 pub(crate) mod linux;
 
-#[cfg(target_os = "macos")]
-pub use macos::{PlatformError, ProcessHandle};
+#[cfg(any(target_os = "macos", target_os = "ios"))]
+pub use mach::{
+    mach_msg_recv, mach_msg_send, AsRawPort, MachMessageWrapper, OwnedRight, PlatformError,
+    ProcessHandle, ReceiveRight, SendRight,
+};
 
-#[cfg(target_os = "macos")]
-pub(crate) mod macos;
+#[cfg(any(target_os = "macos", target_os = "ios"))]
+pub(crate) mod mach;
 
 #[cfg(any(target_os = "android", target_os = "linux", target_os = "macos"))]
 #[macro_export]
diff --git a/toolkit/crashreporter/crash_helper_common/src/platform/linux.rs b/toolkit/crashreporter/crash_helper_common/src/platform/linux.rs
index 1f1c00f2bc3fb..94fd51ed3dd6a 100644
--- a/toolkit/crashreporter/crash_helper_common/src/platform/linux.rs
+++ b/toolkit/crashreporter/crash_helper_common/src/platform/linux.rs
@@ -11,13 +11,20 @@ use nix::{
     },
     sys::socket::{socketpair, AddressFamily, SockFlag, SockType},
 };
-use std::os::fd::{BorrowedFd, OwnedFd};
+use std::{
+    ffi::NulError,
+    os::fd::{BorrowedFd, OwnedFd},
+};
 use thiserror::Error;
 
 pub type ProcessHandle = ();
 
 #[derive(Error, Debug)]
 pub enum PlatformError {
+    #[error("A C string contained an interior NUL character")]
+    InteriorNul(#[from] NulError),
+    #[error("Could not parse file descriptor")]
+    ParseFileDescriptor,
     #[error("poll() call failed with error: {0}")]
     PollFailure(Errno),
     #[error("Could not set socket in non-blocking mode: {0}")]
@@ -25,7 +32,7 @@ pub enum PlatformError {
     #[error("Could not flag socket as close-after-exec: {0}")]
     SocketCloexecError(Errno),
     #[error("Could not create a socket pair: {0}")]
-    SocketpairFailure(#[from] Errno),
+    SocketpairFailure(Errno),
     #[error("sendmsg() call failed with error: {0}")]
     SendFailure(Errno),
     #[error("Sending {expected} bytes failed, only {sent} bytes sent")]
@@ -50,7 +57,9 @@ pub(crate) fn unix_socketpair() -> Result<(OwnedFd, OwnedFd), PlatformError> {
 
 pub(crate) fn set_socket_default_flags(socket: BorrowedFd) -> Result<(), PlatformError> {
     // All our sockets are in non-blocking mode.
-    let flags = OFlag::from_bits_retain(fcntl(socket, F_GETFL)?);
+    let flags = OFlag::from_bits_retain(
+        fcntl(socket, F_GETFL).map_err(PlatformError::SocketNonBlockError)?,
+    );
     fcntl(socket, F_SETFL(flags.union(OFlag::O_NONBLOCK)))
         .map(|_res| ())
         .map_err(PlatformError::SocketNonBlockError)
diff --git a/toolkit/crashreporter/crash_helper_common/src/platform/mach.rs b/toolkit/crashreporter/crash_helper_common/src/platform/mach.rs
new file mode 100644
index 0000000000000..cb5669159bff4
--- /dev/null
+++ b/toolkit/crashreporter/crash_helper_common/src/platform/mach.rs
@@ -0,0 +1,385 @@
+/* This Source Code Form is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at https://mozilla.org/MPL/2.0/. */
+
+use mach2::{
+    kern_return::{kern_return_t, KERN_SUCCESS},
+    mach_port::{
+        mach_port_allocate, mach_port_deallocate, mach_port_insert_right, mach_port_mod_refs,
+    },
+    message::{
+        mach_msg, mach_msg_base_t, mach_msg_body_t, mach_msg_header_t, mach_msg_port_descriptor_t,
+        mach_msg_trailer_t, MACH_MSGH_BITS, MACH_MSGH_BITS_COMPLEX, MACH_MSG_SUCCESS,
+        MACH_MSG_TYPE_COPY_SEND, MACH_MSG_TYPE_MAKE_SEND, MACH_RCV_MSG, MACH_RCV_TIMEOUT,
+        MACH_SEND_MSG, MACH_SEND_TIMEOUT,
+    },
+    port::{mach_port_name_t, mach_port_t, MACH_PORT_NULL, MACH_PORT_RIGHT_RECEIVE},
+    traps::mach_task_self,
+};
+use nix::errno::Errno;
+use std::{
+    alloc::{alloc_zeroed, dealloc, Layout},
+    cmp::max,
+    fmt::Display,
+    mem::ManuallyDrop,
+    result, slice,
+};
+use thiserror::Error;
+
+use crate::IO_TIMEOUT;
+
+pub type Result<T> = result::Result<T, PlatformError>;
+
+pub type ProcessHandle = ();
+
+#[derive(Error, Debug)]
+pub enum PlatformError {
+    #[error("Bootstrap look-up failure: {0}")]
+    BootstrapLookUp(kern_return_t),
+    #[error("Bootstrap registration failure: {0}")]
+    BootstrapRegister(kern_return_t),
+    #[error("Could not get random value: {0}")]
+    GetRandom(getrandom::Error),
+    #[error("Could not insert a send right: {0}")]
+    InsertSendRight(kern_return_t),
+    #[error("kevent() call failed with error: {0}")]
+    KernelEventError(Errno),
+    #[error("kqueue() call failed with error: {0}")]
+    KernelQueueError(Errno),
+    #[error("Could not create a mach port: {0}")]
+    MachPortAllocate(kern_return_t),
+    #[error("No more senders remain for this port")]
+    NoMoreSenders,
+    #[error("mach_msg() call failed with error: {0}")]
+    ReceiveFailure(kern_return_t),
+    #[error("mach_port_request_notification failed with error: {0}")]
+    RequestNotification(kern_return_t),
+    #[error("mach_msg() call failed with error: {0}")]
+    SendFailure(kern_return_t),
+    #[error("Value exceeds a 32-bit integer")]
+    ValueTooLarge,
+}
+
+/****************************************************************************
+ * Ports and rights                                                         *
+ ****************************************************************************/
+
+pub trait AsRawPort {
+    fn as_raw_port(&self) -> mach_port_t;
+}
+
+#[repr(transparent)]
+pub struct ReceiveRight(mach_port_name_t);
+
+impl ReceiveRight {
+    pub fn new() -> Result<ReceiveRight> {
+        let mut receive_right: mach_port_name_t = MACH_PORT_NULL;
+        let rv = unsafe {
+            mach_port_allocate(
+                mach_task_self(),
+                MACH_PORT_RIGHT_RECEIVE,
+                &mut receive_right,
+            )
+        };
+
+        if rv == KERN_SUCCESS {
+            Ok(ReceiveRight(receive_right))
+        } else {
+            Err(PlatformError::MachPortAllocate(rv))
+        }
+    }
+
+    pub(crate) unsafe fn from_raw_port(port: mach_port_name_t) -> ReceiveRight {
+        ReceiveRight(port)
+    }
+
+    pub fn into_raw_port(self) -> mach_port_name_t {
+        ManuallyDrop::new(self).0
+    }
+
+    pub(crate) fn insert_send_right(&self) -> Result<SendRight> {
+        let rv = unsafe {
+            mach_port_insert_right(
+                mach_task_self(),
+                /* name */ self.0,
+                /* right */ self.0,
+                MACH_MSG_TYPE_MAKE_SEND,
+            )
+        };
+
+        if rv == KERN_SUCCESS {
+            // SAFETY: We verified that `self.0` contains a valid send right
+            // which we just inserted.
+            Ok(unsafe { SendRight::from_raw_port(self.0) })
+        } else {
+            Err(PlatformError::InsertSendRight(rv))
+        }
+    }
+}
+
+impl Drop for ReceiveRight {
+    fn drop(&mut self) {
+        let rv =
+            unsafe { mach_port_mod_refs(mach_task_self(), self.0, MACH_PORT_RIGHT_RECEIVE, -1) };
+        assert!(
+            rv == KERN_SUCCESS,
+            "Could not dispose of a receive right, error {rv}"
+        );
+    }
+}
+
+impl AsRawPort for ReceiveRight {
+    fn as_raw_port(&self) -> mach_port_name_t {
+        self.0
+    }
+}
+
+#[repr(transparent)]
+pub struct SendRight(mach_port_name_t);
+
+impl SendRight {
+    /// Create an owned send right from a raw port right name.
+    ///
+    /// # Safety
+    ///
+    /// `port` must be a valid send right to a Mach port.
+    pub unsafe fn from_raw_port(port: mach_port_name_t) -> SendRight {
+        SendRight(port)
+    }
+
+    pub fn into_raw_port(self) -> mach_port_name_t {
+        ManuallyDrop::new(self).0
+    }
+}
+
+impl AsRawPort for SendRight {
+    fn as_raw_port(&self) -> mach_port_name_t {
+        self.0
+    }
+}
+
+impl Drop for SendRight {
+    fn drop(&mut self) {
+        // We use `mach_port_deallocate()` instead of `mach_port_mod_refs()`
+        // because it doesn't fail if the corresponding receive right has
+        // already been destroyed.
+        let rv = unsafe { mach_port_deallocate(mach_task_self(), self.0) };
+        assert!(
+            rv == KERN_SUCCESS,
+            "Could not dispose of a send right {}, error {rv}",
+            self.0,
+        );
+    }
+}
+
+pub enum OwnedRight {
+    Send(SendRight),
+    Receive(ReceiveRight),
+}
+
+/****************************************************************************
+ * Mach messages                                                            *
+ ****************************************************************************/
+
+pub struct MachMessageWrapper {
+    layout: Layout,
+    ptr: *mut u8,
+}
+
+impl MachMessageWrapper {
+    pub fn for_send(size: usize, descriptors: u32) -> MachMessageWrapper {
+        let total_size = MachMessageWrapper::compute_size(size, descriptors);
+        let layout = Layout::from_size_align(total_size as usize, align_of::<u32>())
+            .expect("Invalid layout for a Mach message");
+        let ptr = unsafe { alloc_zeroed(layout) };
+        let base_msg = unsafe { &mut *(ptr as *mut mach_msg_base_t) };
+        base_msg.header.msgh_size = total_size;
+        base_msg.body.msgh_descriptor_count = descriptors;
+
+        MachMessageWrapper { layout, ptr }
+    }
+
+    pub fn for_recv(expected_size: usize, expected_descriptors: u32) -> MachMessageWrapper {
+        let total_size = MachMessageWrapper::compute_size(
+            expected_size + size_of::<mach_msg_trailer_t>(),
+            expected_descriptors,
+        );
+        let layout = Layout::from_size_align(total_size as usize, align_of::<u32>())
+            .expect("Invalid layout for a Mach message");
+        let ptr = unsafe { alloc_zeroed(layout) };
+        let base_msg = unsafe { &mut *(ptr as *mut mach_msg_base_t) };
+        base_msg.header.msgh_size = total_size;
+        base_msg.body.msgh_descriptor_count = expected_descriptors;
+
+        MachMessageWrapper { layout, ptr }
+    }
+
+    pub fn as_ptr(&self) -> *mut mach_msg_header_t {
+        self.ptr as *mut mach_msg_header_t
+    }
+
+    pub fn data_size(&self) -> usize {
+        // `data_offset()` measures everything but the data in the message.
+        self.header().msgh_size as usize - self.data_offset()
+    }
+
+    pub fn descriptors_len(&self) -> usize {
+        self.body().msgh_descriptor_count as usize
+    }
+
+    pub fn header(&self) -> &mach_msg_header_t {
+        unsafe { &*(self.ptr as *const mach_msg_header_t) }
+    }
+
+    pub fn header_mut(&mut self) -> &mut mach_msg_header_t {
+        unsafe { &mut *(self.ptr as *mut mach_msg_header_t) }
+    }
+
+    fn body_offset() -> usize {
+        size_of::<mach_msg_header_t>()
+    }
+
+    pub fn body(&self) -> &mach_msg_body_t {
+        unsafe { &*(self.ptr.add(Self::body_offset()) as *const mach_msg_body_t) }
+    }
+
+    pub fn body_mut(&mut self) -> &mut mach_msg_body_t {
+        unsafe { &mut *(self.ptr.add(Self::body_offset()) as *mut mach_msg_body_t) }
+    }
+
+    fn descriptors_offset() -> usize {
+        Self::body_offset() + size_of::<mach_msg_body_t>()
+    }
+
+    pub fn descriptors(&self) -> &[mach_msg_port_descriptor_t] {
+        unsafe {
+            let ptr = self.ptr.add(Self::descriptors_offset()) as *const mach_msg_port_descriptor_t;
+            slice::from_raw_parts(ptr, self.descriptors_len())
+        }
+    }
+
+    pub fn descriptors_mut(&mut self) -> &mut [mach_msg_port_descriptor_t] {
+        unsafe {
+            let ptr = self.ptr.add(Self::descriptors_offset()) as *mut mach_msg_port_descriptor_t;
+            slice::from_raw_parts_mut(ptr, self.descriptors_len())
+        }
+    }
+
+    fn data_offset(&self) -> usize {
+        Self::descriptors_offset()
+            + (self.descriptors_len() * size_of::<mach_msg_port_descriptor_t>())
+    }
+
+    pub fn data(&self) -> &[u8] {
+        unsafe {
+            let ptr = self.ptr.add(self.data_offset());
+            slice::from_raw_parts(ptr, self.data_size())
+        }
+    }
+
+    pub fn data_mut(&mut self) -> &mut [u8] {
+        unsafe {
+            let ptr = self.ptr.add(self.data_offset());
+            slice::from_raw_parts_mut(ptr, self.data_size())
+        }
+    }
+
+    fn size(&self) -> u32 {
+        self.header().msgh_size
+    }
+
+    fn compute_size(size: usize, descriptors: u32) -> u32 {
+        // mach message data is packed on 4-bytes boundaries
+        let rounded_data = size.next_multiple_of(4);
+        (size_of::<mach_msg_header_t>()
+            + size_of::<mach_msg_body_t>()
+            + (size_of::<mach_msg_port_descriptor_t>() * (descriptors as usize))
+            + rounded_data)
+            .try_into()
+            .expect("Mach messages cannot be larger than 4 GiB")
+    }
+}
+
+impl Display for MachMessageWrapper {
+    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
+        let header = self.header();
+        let body = self.body();
+        write!(f, "{header:?} {body:?}")
+    }
+}
+
+impl Drop for MachMessageWrapper {
+    fn drop(&mut self) {
+        unsafe { dealloc(self.ptr, self.layout) }
+    }
+}
+
+pub fn mach_msg_send(port: &SendRight, msg: &mut MachMessageWrapper) -> Result<()> {
+    let msgh_bits = MACH_MSGH_BITS(MACH_MSG_TYPE_COPY_SEND, 0)
+        | if msg.body().msgh_descriptor_count != 0 {
+            MACH_MSGH_BITS_COMPLEX
+        } else {
+            0
+        };
+
+    let header = msg.header_mut();
+    header.msgh_bits |= msgh_bits;
+    header.msgh_remote_port = port.as_raw_port();
+
+    let rv = unsafe {
+        mach_msg(
+            msg.as_ptr(),
+            MACH_SEND_MSG | MACH_SEND_TIMEOUT,
+            msg.size(),
+            0,
+            MACH_PORT_NULL,
+            IO_TIMEOUT as u32,
+            MACH_PORT_NULL,
+        )
+    };
+
+    if rv == MACH_MSG_SUCCESS {
+        Ok(())
+    } else {
+        Err(PlatformError::SendFailure(rv))
+    }
+}
+
+// Remove when we vendor mach2 0.6.0
+static MACH_NOTIFY_NO_SENDERS: i32 = 0o106;
+
+pub fn mach_msg_recv(
+    port: &ReceiveRight,
+    expected_size: usize,
+    expected_descriptors: u32,
+) -> Result<MachMessageWrapper> {
+    // We can receive a MACH_NOTIFY_NO_SENDERS message at any time and it comes
+    // with an 8-byte sized payload which we must account for.
+    const MIN_MESSAGE_SIZE: usize = 8;
+    let expected_size = max(expected_size, MIN_MESSAGE_SIZE);
+    let mut msg = MachMessageWrapper::for_recv(expected_size, expected_descriptors);
+    msg.header_mut().msgh_local_port = port.as_raw_port();
+
+    let rv = unsafe {
+        mach_msg(
+            msg.as_ptr(),
+            MACH_RCV_MSG | MACH_RCV_TIMEOUT,
+            0,
+            msg.size(),
+            port.as_raw_port(),
+            IO_TIMEOUT as u32,
+            MACH_PORT_NULL,
+        )
+    };
+
+    if msg.header().msgh_id == MACH_NOTIFY_NO_SENDERS {
+        // We've got a message, but it's a disconnection
+        return Err(PlatformError::NoMoreSenders);
+    }
+
+    if rv == MACH_MSG_SUCCESS {
+        Ok(msg)
+    } else {
+        Err(PlatformError::ReceiveFailure(rv))
+    }
+}
diff --git a/toolkit/crashreporter/crash_helper_common/src/platform/macos.rs b/toolkit/crashreporter/crash_helper_common/src/platform/macos.rs
deleted file mode 100644
index 45433f7e5665b..0000000000000
--- a/toolkit/crashreporter/crash_helper_common/src/platform/macos.rs
+++ /dev/null
@@ -1,84 +0,0 @@
-/* This Source Code Form is subject to the terms of the Mozilla Public
- * License, v. 2.0. If a copy of the MPL was not distributed with this
- * file, You can obtain one at https://mozilla.org/MPL/2.0/. */
-
-use nix::{
-    errno::Errno,
-    fcntl::{
-        fcntl,
-        FcntlArg::{F_GETFL, F_SETFD, F_SETFL},
-        FdFlag, OFlag,
-    },
-    libc::{setsockopt, SOL_SOCKET, SO_NOSIGPIPE},
-    sys::socket::{socketpair, AddressFamily, SockFlag, SockType},
-};
-use std::{
-    mem::size_of,
-    os::fd::{AsRawFd, BorrowedFd, OwnedFd},
-};
-use thiserror::Error;
-
-pub type ProcessHandle = ();
-
-#[derive(Error, Debug)]
-pub enum PlatformError {
-    #[error("poll() call failed with error: {0}")]
-    PollFailure(Errno),
-    #[error("Could not set socket in non-blocking mode: {0}")]
-    SocketNonBlockError(Errno),
-    #[error("Could not flag socket as close-after-exec: {0}")]
-    SocketCloexecError(Errno),
-    #[error("Could not create a socket pair: {0}")]
-    SocketpairFailure(#[from] Errno),
-    #[error("sendmsg() call failed with error: {0}")]
-    SendFailure(Errno),
-    #[error("Sending {expected} bytes failed, only {sent} bytes sent")]
-    SendTooShort { expected: usize, sent: usize },
-    #[error("recvmsg() call failed with error: {0}")]
-    ReceiveFailure(Errno),
-    #[error("Missing SCM credentials")]
-    ReceiveMissingCredentials,
-    #[error("Receiving {expected} bytes failed, only {received} bytes received")]
-    ReceiveTooShort { expected: usize, received: usize },
-}
-
-pub(crate) fn unix_socketpair() -> Result<(OwnedFd, OwnedFd), PlatformError> {
-    socketpair(
-        AddressFamily::Unix,
-        SockType::Stream,
-        None,
-        SockFlag::empty(),
-    )
-    .map_err(PlatformError::SocketpairFailure)
-}
-
-pub(crate) fn set_socket_default_flags(socket: BorrowedFd) -> Result<(), PlatformError> {
-    // All our sockets are in non-blocking mode.
-    let flags = OFlag::from_bits_retain(fcntl(socket, F_GETFL)?);
-    fcntl(socket, F_SETFL(flags.union(OFlag::O_NONBLOCK)))?;
-
-    // TODO: nix doesn't have a safe wrapper for SO_NOSIGPIPE yet, but we need
-    // to set this flag because we're using stream sockets unlike Linux, where
-    // we use sequential packets that don't raise SIGPIPE.
-    let res = unsafe {
-        setsockopt(
-            socket.as_raw_fd(),
-            SOL_SOCKET,
-            SO_NOSIGPIPE,
-            (&1 as *const i32).cast(),
-            size_of::<i32>() as _,
-        )
-    };
-
-    if res < 0 {
-        return Err(PlatformError::SocketNonBlockError(Errno::last()));
-    }
-
-    Ok(())
-}
-
-pub(crate) fn set_socket_cloexec(socket: BorrowedFd) -> Result<(), PlatformError> {
-    fcntl(socket, F_SETFD(FdFlag::FD_CLOEXEC))
-        .map(|_res| ())
-        .map_err(PlatformError::SocketCloexecError)
-}
diff --git a/toolkit/crashreporter/crash_helper_common/src/platform/windows.rs b/toolkit/crashreporter/crash_helper_common/src/platform/windows.rs
index a9ec8fd548bbd..f46dbc9c8f4d2 100644
--- a/toolkit/crashreporter/crash_helper_common/src/platform/windows.rs
+++ b/toolkit/crashreporter/crash_helper_common/src/platform/windows.rs
@@ -34,18 +34,24 @@ pub enum PlatformError {
     AcceptFailed(WIN32_ERROR),
     #[error("Broken pipe")]
     BrokenPipe,
-    #[error("Failed to duplicate clone handle")]
-    CloneHandleFailed(#[source] std::io::Error),
+    #[error("Failed to duplicate handle: {0}")]
+    DuplicateHandleFailed(WIN32_ERROR),
     #[error("Could not create event: {0}")]
     CreateEventFailed(WIN32_ERROR),
+    #[error("Could not create or add an I/O completion port: {0}")]
+    CreateIoCompletionPortFailed(WIN32_ERROR),
     #[error("Could not create a pipe: {0}")]
     CreatePipeFailure(WIN32_ERROR),
+    #[error("Malformed string cannot be converted")]
+    InvalidString,
     #[error("I/O error: {0}")]
     IOError(WIN32_ERROR),
     #[error("No process handle specified")]
     MissingProcessHandle,
     #[error("Could not listen for incoming connections: {0}")]
     ListenFailed(WIN32_ERROR),
+    #[error("Could not parse HANDLE from string")]
+    ParseHandle,
     #[error("Receiving {expected} bytes failed, only {received} bytes received")]
     ReceiveTooShort { expected: usize, received: usize },
     #[error("Could not reset event: {0}")]
@@ -54,8 +60,12 @@ pub enum PlatformError {
     SendTooShort { expected: usize, sent: usize },
     #[error("Could not set event: {0}")]
     SetEventFailed(WIN32_ERROR),
-    #[error("Value too large")]
+    #[error("Could not set pipe state in message mode: {0}")]
+    SetNamedPipeHandleState(WIN32_ERROR),
+    #[error("Value exceeds a 32-bit integer")]
     ValueTooLarge,
+    #[error("Waiting for pipe failed: {0}")]
+    WaitNamedPipeFailed(WIN32_ERROR),
 }
 
 pub(crate) fn get_last_error() -> WIN32_ERROR {
diff --git a/toolkit/crashreporter/crash_helper_server/src/ipc_server.rs b/toolkit/crashreporter/crash_helper_server/src/ipc_server.rs
index d7759cea09a83..9767e60210d1f 100644
--- a/toolkit/crashreporter/crash_helper_server/src/ipc_server.rs
+++ b/toolkit/crashreporter/crash_helper_server/src/ipc_server.rs
@@ -117,7 +117,7 @@ impl IPCServer {
         key: IPCConnectorKey,
         header: &Header,
         data: Vec<u8>,
-        ancillary_data: Option<AncillaryData>,
+        ancillary_data: Vec<AncillaryData>,
         generator: &mut CrashGenerator,
     ) -> Result<()> {
         let connection = self
@@ -141,7 +141,7 @@ impl IPCServer {
                 }
                 messages::Kind::RegisterChildProcess => {
                     let message = messages::RegisterChildProcess::decode(&data, ancillary_data)?;
-                    let connector = IPCConnector::from_ancillary(message.ipc_endpoint)?;
+                    let connector = IPCConnector::from_ancillary(message.ancillary_data)?;
                     connector.send_message(messages::ChildProcessRendezVous::new(
                         process::id() as Pid
                     ))?;
diff --git a/toolkit/crashreporter/crash_helper_server/src/lib.rs b/toolkit/crashreporter/crash_helper_server/src/lib.rs
index 02391fc01f824..9a7d3e69cb82e 100644
--- a/toolkit/crashreporter/crash_helper_server/src/lib.rs
+++ b/toolkit/crashreporter/crash_helper_server/src/lib.rs
@@ -12,7 +12,7 @@ mod logging;
 mod phc;
 
 #[cfg(target_os = "android")]
-use crash_helper_common::RawAncillaryData;
+use crash_helper_common::RawIPCConnector;
 use crash_helper_common::{BreakpadData, BreakpadRawData, IPCConnector, IPCListener, Pid};
 use std::{
     ffi::{c_char, CStr, OsString},
@@ -93,7 +93,7 @@ pub unsafe extern "C" fn crash_generator_logic_android(
     pid: Pid,
     breakpad_data: BreakpadRawData,
     minidump_path: *const c_char,
-    pipe: RawAncillaryData,
+    pipe: RawIPCConnector,
 ) {
     logging::init();
 
@@ -116,7 +116,7 @@ pub unsafe extern "C" fn crash_generator_logic_android(
         // SAFETY: The `pipe` file descriptor passed in from the caller is
         // guaranteed to be valid.
         let connector = unwrap_with_message(
-            unsafe { IPCConnector::from_raw_ancillary(pipe) },
+            unsafe { IPCConnector::from_raw_connector(pipe) },
             "Could not use the pipe",
         );
         let ipc_server = unwrap_with_message(
diff --git a/toolkit/crashreporter/crashping/generated_metrics.yaml b/toolkit/crashreporter/crashping/generated_metrics.yaml
index 19f88c1b10c9b..3df67ed14fade 100644
--- a/toolkit/crashreporter/crashping/generated_metrics.yaml
+++ b/toolkit/crashreporter/crashping/generated_metrics.yaml
@@ -17,7 +17,7 @@ crash:
     - https://bugzilla.mozilla.org/1950749
     data_sensitivity:
     - technical
-    description: Product application's build ID.
+    description: Application build ID, the format is YYYYMMDDHHMMSS.
     expires: never
     notification_emails:
     - crash-reporting-wg@mozilla.org
@@ -55,6 +55,21 @@ crash:
     send_in_pings:
     - crash
     type: string
+  application_build_id:
+    bugs:
+    - https://bugzilla.mozilla.org/1950749
+    data_reviews:
+    - https://bugzilla.mozilla.org/1950749
+    data_sensitivity:
+    - technical
+    description: The Android application's build ID.
+    expires: never
+    notification_emails:
+    - crash-reporting-wg@mozilla.org
+    - stability@mozilla.org
+    send_in_pings:
+    - crash
+    type: string
   async_shutdown_timeout:
     bugs:
     - https://bugzilla.mozilla.org/1950749
@@ -99,21 +114,6 @@ crash:
     send_in_pings:
     - crash
     type: string
-  build_id:
-    bugs:
-    - https://bugzilla.mozilla.org/1950749
-    data_reviews:
-    - https://bugzilla.mozilla.org/1950749
-    data_sensitivity:
-    - technical
-    description: Application build ID, the format is YYYYMMDDHHMMSS.
-    expires: never
-    notification_emails:
-    - crash-reporting-wg@mozilla.org
-    - stability@mozilla.org
-    send_in_pings:
-    - crash
-    type: string
   crash_type:
     bugs:
     - https://bugzilla.mozilla.org/1950749
diff --git a/toolkit/crashreporter/nsDummyExceptionHandler.cpp b/toolkit/crashreporter/nsDummyExceptionHandler.cpp
index 037e2ebf1db11..eaecae1e57836 100644
--- a/toolkit/crashreporter/nsDummyExceptionHandler.cpp
+++ b/toolkit/crashreporter/nsDummyExceptionHandler.cpp
@@ -207,7 +207,9 @@ void SetNotificationPipeForChild(FileHandle breakpadFd,
 
 CrashPipeType GetChildNotificationPipe() { return nullptr; }
 
-UniqueFileHandle RegisterChildIPCChannel() { return UniqueFileHandle(); }
+bool RegisterChildIPCChannel(mozilla::geckoargs::ChildProcessArgs& aArgs) {
+  return false;
+}
 
 #if defined(MOZ_WIDGET_ANDROID)
 void SetCrashHelperPipes(FileHandle breakpadFd, FileHandle crashHelperFd) {}
@@ -215,10 +217,7 @@ void SetCrashHelperPipes(FileHandle breakpadFd, FileHandle crashHelperFd) {}
 
 bool GetLastRunCrashID(nsAString& id) { return false; }
 
-bool SetRemoteExceptionHandler(CrashPipeType aCrashPipe,
-                               UniqueFileHandle aCrashHelperPipe) {
-  return false;
-}
+bool SetRemoteExceptionHandler(int& aArgc, char** aArgv) { return false; }
 
 bool TakeMinidumpForChild(ProcessId childPid, nsIFile** dump,
                           AnnotationTable& aAnnotations) {
diff --git a/toolkit/crashreporter/nsExceptionHandler.cpp b/toolkit/crashreporter/nsExceptionHandler.cpp
index 1816b4a3934e4..d3f4571df0cbc 100644
--- a/toolkit/crashreporter/nsExceptionHandler.cpp
+++ b/toolkit/crashreporter/nsExceptionHandler.cpp
@@ -17,6 +17,7 @@
 #include "nsNetUtil.h"
 #include "nsString.h"
 #include "mozilla/DebugOnly.h"
+#include "mozilla/GeckoArgs.h"
 #include "mozilla/EnumeratedRange.h"
 #include "mozilla/Services.h"
 #include "nsIObserverService.h"
@@ -3328,21 +3329,80 @@ CrashPipeType GetChildNotificationPipe() {
 #endif
 }
 
-UniqueFileHandle RegisterChildIPCChannel() {
+bool RegisterChildIPCChannel(mozilla::geckoargs::ChildProcessArgs& aArgs) {
   StaticMutexAutoLock lock(gCrashHelperClientMutex);
   if (gCrashHelperClient) {
-    RawAncillaryData ipc_endpoint =
-        register_child_ipc_channel(gCrashHelperClient);
-    return UniqueFileHandle{ipc_endpoint};
+    RawIPCConnector connector = {};
+    if (!register_child_ipc_channel(gCrashHelperClient, &connector)) {
+      return false;
+    }
+
+#if defined(XP_DARWIN)
+    UniqueMachSendRight send_right{connector.send};
+    UniqueMachReceiveRight recv_right{connector.recv};
+
+    if (!send_right || !recv_right) {
+      return false;
+    }
+
+    geckoargs::sCrashHelperSend.Put(std::move(send_right), aArgs);
+    geckoargs::sCrashHelperRecv.Put(std::move(recv_right), aArgs);
+#else
+#  if defined(XP_WIN)
+    UniqueFileHandle endpoint{connector.handle};
+#  else
+    UniqueFileHandle endpoint{connector.socket};
+#  endif  // defined(XP_WIN)
+
+    if (!endpoint) {
+      return false;
+    }
+
+    geckoargs::sCrashHelper.Put(std::move(endpoint), aArgs);
+#endif
+    return true;
   }
 
-  return UniqueFileHandle();
+  return false;
 }
 
-bool SetRemoteExceptionHandler(CrashPipeType aCrashPipe,
-                               UniqueFileHandle aCrashHelperPipe) {
+bool SetRemoteExceptionHandler(int& aArgc, char** aArgv) {
   MOZ_ASSERT(!gExceptionHandler, "crash client already init'd");
-  crash_helper_rendezvous(aCrashHelperPipe.release());
+  auto crash_pipe = geckoargs::sCrashReporter.Get(aArgc, aArgv);
+
+  if (crash_pipe.isNothing()) {
+    return false;
+  }
+
+#if defined(XP_DARWIN)
+  auto send_right = geckoargs::sCrashHelperSend.Get(aArgc, aArgv);
+  auto recv_right = geckoargs::sCrashHelperRecv.Get(aArgc, aArgv);
+
+  if (send_right.isNothing() || recv_right.isNothing()) {
+    return false;
+  }
+
+  struct RawIPCConnector raw_connector = {
+      .send = send_right->release(),
+      .recv = recv_right->release(),
+  };
+
+  crash_helper_rendezvous(raw_connector);
+#else
+  auto endpoint = geckoargs::sCrashHelper.Get(aArgc, aArgv);
+
+  if (endpoint.isNothing()) {
+    return false;
+  }
+
+#  if defined(XP_WIN)
+  RawIPCConnector raw_connector = {.handle = endpoint->release()};
+#  else
+  RawIPCConnector raw_connector = {.socket = endpoint->release()};
+#  endif  // defined(XP_WIN)
+
+  crash_helper_rendezvous(raw_connector);
+#endif    // defined(XP_DARWIN)
   RegisterRuntimeExceptionModule();
   InitializeAppNotes();
   RegisterAnnotations();
@@ -3363,7 +3423,7 @@ bool SetRemoteExceptionHandler(CrashPipeType aCrashPipe,
       nullptr,  // no callback
       nullptr,  // no callback context
       google_breakpad::ExceptionHandler::HANDLER_ALL, GetMinidumpType(),
-      (const wchar_t*)NS_ConvertUTF8toUTF16(aCrashPipe).BeginReading(),
+      (const wchar_t*)NS_ConvertUTF8toUTF16(*crash_pipe).BeginReading(),
       nullptr  // no custom info
   );
   gExceptionHandler->set_handle_debug_exceptions(true);
@@ -3380,23 +3440,27 @@ bool SetRemoteExceptionHandler(CrashPipeType aCrashPipe,
                                             nullptr,  // no callback
                                             nullptr,  // no callback context
                                             true,     // install signal handlers
-                                            aCrashPipe.release());
+                                            crash_pipe->release());
 #elif defined(XP_MACOSX)
   gExceptionHandler =
       new google_breakpad::ExceptionHandler("", ChildFilter,
                                             nullptr,  // no callback
                                             nullptr,  // no callback context
                                             true,     // install signal handlers
-                                            aCrashPipe);
+                                            *crash_pipe);
 #endif
 
   RecordMainThreadId();
 
   oldTerminateHandler = std::set_terminate(&TerminateHandler);
 
-  // we either do remote or nothing, no fallback to regular crash reporting
+  // If we didn't fail earlier because of a missing IPC channel then all of the
+  // above should have succeeded.
+  MOZ_ASSERT(gExceptionHandler->IsOutOfProcess(),
+             "Should have been able to set remote exception handler");
+
   return gExceptionHandler->IsOutOfProcess();
-}
+}  // namespace CrashReporter
 
 bool TakeMinidumpForChild(ProcessId childPid, nsIFile** dump,
                           AnnotationTable& aAnnotations) {
diff --git a/toolkit/crashreporter/nsExceptionHandler.h b/toolkit/crashreporter/nsExceptionHandler.h
index 9e1004c75f733..298ba5acb4d8f 100644
--- a/toolkit/crashreporter/nsExceptionHandler.h
+++ b/toolkit/crashreporter/nsExceptionHandler.h
@@ -37,6 +37,10 @@ struct DirectAuxvDumpInfo;
 
 class nsIFile;
 
+namespace mozilla::geckoargs {
+struct ChildProcessArgs;
+}
+
 namespace CrashReporter {
 
 using mozilla::Maybe;
@@ -270,11 +274,10 @@ using CrashPipeType = mozilla::UniqueFileHandle;
 void SetCrashHelperPipes(FileHandle breakpadFd, FileHandle crashHelperFd);
 #endif
 CrashPipeType GetChildNotificationPipe();
-mozilla::UniqueFileHandle RegisterChildIPCChannel();
+bool RegisterChildIPCChannel(mozilla::geckoargs::ChildProcessArgs& aArgs);
 
 // Child-side API
-MOZ_EXPORT bool SetRemoteExceptionHandler(
-    CrashPipeType aCrashPipe, mozilla::UniqueFileHandle aCrashHelperPipe);
+MOZ_EXPORT bool SetRemoteExceptionHandler(int& aArgc, char** aArgv);
 bool UnsetRemoteExceptionHandler(bool wasSet = true);
 
 }  // namespace CrashReporter
diff --git a/toolkit/locales/en-US/toolkit/pdfviewer/viewer.ftl b/toolkit/locales/en-US/toolkit/pdfviewer/viewer.ftl
index 9c6636de7829a..ee2f85e9885cc 100644
--- a/toolkit/locales/en-US/toolkit/pdfviewer/viewer.ftl
+++ b/toolkit/locales/en-US/toolkit/pdfviewer/viewer.ftl
@@ -532,15 +532,6 @@ pdfjs-editor-alt-text-settings-automatic-title = Automatic alt text
 pdfjs-editor-alt-text-settings-create-model-button-label = Create alt text automatically
 pdfjs-editor-alt-text-settings-create-model-description = Suggests descriptions to help people who can’t see the image or when the image doesn’t load.
 
-# Variables:
-#   $totalSize (Number) - the total size (in MB) of the AI model.
-pdfjs-editor-alt-text-settings-download-model-label = Alt text AI model ({ $totalSize } MB)
-
-pdfjs-editor-alt-text-settings-ai-model-description = Runs locally on your device so your data stays private. Required for automatic alt text.
-pdfjs-editor-alt-text-settings-delete-model-button = Delete
-pdfjs-editor-alt-text-settings-download-model-button = Download
-pdfjs-editor-alt-text-settings-downloading-model-button = Downloading…
-
 pdfjs-editor-alt-text-settings-editor-title = Alt text editor
 pdfjs-editor-alt-text-settings-show-dialog-button-label = Show alt text editor right away when adding an image
 pdfjs-editor-alt-text-settings-show-dialog-description = Helps you make sure all your images have alt text.
diff --git a/toolkit/system/gnome/nsGIOService.cpp b/toolkit/system/gnome/nsGIOService.cpp
index 77e3f8f732102..2a4f90cfc5fd0 100644
--- a/toolkit/system/gnome/nsGIOService.cpp
+++ b/toolkit/system/gnome/nsGIOService.cpp
@@ -715,6 +715,9 @@ nsGIOService::GetAppForURIScheme(const nsACString& aURIScheme,
                                  nsIHandlerApp** aApp) {
   *aApp = nullptr;
 
+  LOG("nsGIOService::GetAppForURIScheme() %s",
+      PromiseFlatCString(aURIScheme).get());
+
   // Portals works with DBus only.
 #ifdef MOZ_ENABLE_DBUS
   // Application in flatpak sandbox does not have access to the list
@@ -722,7 +725,9 @@ nsGIOService::GetAppForURIScheme(const nsACString& aURIScheme,
   // method to check if the URI scheme is supported and then use
   // generic nsFlatpakHandlerApp which forwards launch call to the system.
   if (widget::ShouldUsePortal(widget::PortalKind::MimeHandler)) {
+    LOG("  using portal");
     if (mozilla::net::IsLoopbackHostname(aURIScheme)) {
+      LOG("  quit, IsLoopbackHostname");
       // When the user writes foo:1234, we try to handle it natively using
       // GetAppForURIScheme, and if that fails, we carry on. On flatpak there's
       // no way to know if an app has handlers or not. Some things like
@@ -758,7 +763,7 @@ nsGIOService::GetAppForURIScheme(const nsACString& aURIScheme,
       if (error->code == G_DBUS_ERROR_UNKNOWN_METHOD) {
         // The method "SchemeSupported" not available, seems like we're running
         // older portal. Be optimistic about supported scheme handler
-        LOG("SchemeSupported method not found, fallback to flatpak handler");
+        LOG("  SchemeSupported method not found, fallback to flatpak handler");
         RefPtr<nsFlatpakHandlerApp> mozApp = new nsFlatpakHandlerApp();
         mozApp.forget(aApp);
         return NS_OK;
@@ -770,11 +775,11 @@ nsGIOService::GetAppForURIScheme(const nsACString& aURIScheme,
     gboolean supported;
     g_variant_get(result, "(b)", &supported);
     if (!supported) {
-      LOG("Scheme '%s' is NOT supported.\n",
+      LOG("  Scheme '%s' is NOT supported.",
           PromiseFlatCString(aURIScheme).get());
       return NS_ERROR_FAILURE;
     }
-    LOG("Scheme '%s' is supported.\n", PromiseFlatCString(aURIScheme).get());
+    LOG("  Scheme '%s' is supported.", PromiseFlatCString(aURIScheme).get());
     RefPtr<nsFlatpakHandlerApp> mozApp = new nsFlatpakHandlerApp();
     mozApp.forget(aApp);
     return NS_OK;
@@ -784,8 +789,11 @@ nsGIOService::GetAppForURIScheme(const nsACString& aURIScheme,
   RefPtr<GAppInfo> app_info = dont_AddRef(g_app_info_get_default_for_uri_scheme(
       PromiseFlatCString(aURIScheme).get()));
   if (!app_info) {
+    LOG("  Failed to get info from g_app_info_get_default_for_uri_scheme()");
     return NS_ERROR_FAILURE;
   }
+  LOG("  g_app_info_get_default_for_uri_scheme() provides %s : %s",
+      g_app_info_get_name(app_info), g_app_info_get_executable(app_info));
   RefPtr<nsGIOMimeApp> mozApp = new nsGIOMimeApp(app_info.forget());
   mozApp.forget(aApp);
   return NS_OK;
@@ -807,6 +815,8 @@ nsGIOService::GetAppsForURIScheme(const nsACString& aURIScheme,
   nsAutoCString contentType("x-scheme-handler/");
   contentType.Append(aURIScheme);
 
+  LOG("nsGIOService::GetAppsForURIScheme() %s", contentType.get());
+
   GList* appInfoList = g_app_info_get_all_for_type(contentType.get());
   // g_app_info_get_all_for_type returns NULL when no appinfo is found
   // or error occurs (contentType is NULL). We are fine with empty app list
@@ -817,9 +827,13 @@ nsGIOService::GetAppsForURIScheme(const nsACString& aURIScheme,
       nsCOMPtr<nsIGIOMimeApp> mimeApp =
           new nsGIOMimeApp(dont_AddRef(G_APP_INFO(appInfo->data)));
       handlersArray->AppendElement(mimeApp);
+      LOG("  adding %s : %s", g_app_info_get_name(G_APP_INFO(appInfo->data)),
+          g_app_info_get_executable(G_APP_INFO(appInfo->data)));
       appInfo = appInfo->next;
     }
     g_list_free(appInfoList);
+  } else {
+    LOG("  g_app_info_get_all_for_type() is empty");
   }
   handlersArray.forget(aResult);
   return NS_OK;
@@ -830,17 +844,24 @@ nsGIOService::GetAppForMimeType(const nsACString& aMimeType,
                                 nsIHandlerApp** aApp) {
   *aApp = nullptr;
 
+  LOG("nsGIOService::GetAppForMimeType() %s",
+      PromiseFlatCString(aMimeType).get());
+
   // Flatpak does not reveal installed application to the sandbox,
   // we need to create generic system handler.
   if (widget::ShouldUsePortal(widget::PortalKind::MimeHandler)) {
+    LOG("  using portal");
     RefPtr<nsFlatpakHandlerApp> mozApp = new nsFlatpakHandlerApp();
     mozApp.forget(aApp);
     return NS_OK;
   }
 
+  LOG("  g_content_type_from_mime_type(%s)",
+      PromiseFlatCString(aMimeType).get());
   GUniquePtr<char> content_type(
       g_content_type_from_mime_type(PromiseFlatCString(aMimeType).get()));
   if (!content_type) {
+    LOG("  g_content_type_from_mime_type() failed.");
     return NS_ERROR_FAILURE;
   }
 
@@ -848,14 +869,18 @@ nsGIOService::GetAppForMimeType(const nsACString& aMimeType,
   // useless. It's better to fallback to create appinfo from file extension
   // later.
   if (g_content_type_is_unknown(content_type.get())) {
+    LOG("  g_content_type_from_mime_type() return unknown app.");
     return NS_ERROR_NOT_AVAILABLE;
   }
 
   RefPtr<GAppInfo> app_info =
       dont_AddRef(g_app_info_get_default_for_type(content_type.get(), false));
   if (!app_info) {
+    LOG("  g_app_info_get_default_for_type() failed.");
     return NS_ERROR_FAILURE;
   }
+  LOG("  g_app_info_get_default_for_type() gives us %s : %s",
+      g_app_info_get_name(app_info), g_app_info_get_executable(app_info));
 #ifdef __OpenBSD__
   char* t;
   t = g_find_program_in_path(g_app_info_get_executable(app_info));
@@ -896,6 +921,8 @@ static nsresult ShowURIImpl(nsIURI* aURI, const char* aXDGToken = nullptr) {
   nsAutoCString spec;
   MOZ_TRY(aURI->GetSpec(spec));
   GUniquePtr<GError> error;
+  LOG("ShowURIImpl() spec %s : aXDGToken %s", spec.get(),
+      aXDGToken ? aXDGToken : "none");
 #ifdef __OpenBSD__
   if (!g_app_info_launch_default_for_uri_openbsd(
           spec.get(), GetLaunchContext(aXDGToken).get(),
@@ -914,14 +941,22 @@ static nsresult ShowURIImpl(nsIURI* aURI, const char* aXDGToken = nullptr) {
 nsresult nsGIOService::ShowURI(nsIURI* aURI) {
   auto promise = mozilla::widget::RequestWaylandFocusPromise();
   if (!promise) {
+    LOG("nsGIOService::ShowURI() failed to get focus promise, fallback to "
+        "ShowURIImpl()");
     return ShowURIImpl(aURI);
   }
   promise->Then(
       GetMainThreadSerialEventTarget(), __func__,
       /* resolve */
-      [uri = RefPtr{aURI}](nsCString token) { ShowURIImpl(uri, token.get()); },
+      [uri = RefPtr{aURI}](nsCString token) {
+        LOG("nsGIOService::ShowURI() received XDG focus token");
+        ShowURIImpl(uri, token.get());
+      },
       /* reject */
-      [uri = RefPtr{aURI}](bool state) { ShowURIImpl(uri); });
+      [uri = RefPtr{aURI}](bool state) {
+        LOG("nsGIOService::ShowURI() without XDG focus token");
+        ShowURIImpl(uri);
+      });
   return NS_OK;
 }
 
@@ -930,6 +965,8 @@ static nsresult LaunchPathImpl(const nsACString& aPath,
   RefPtr<GFile> file = dont_AddRef(
       g_file_new_for_commandline_arg(PromiseFlatCString(aPath).get()));
   GUniquePtr<char> spec(g_file_get_uri(file));
+  LOG("LaunchPathImpl() file %s : aXDGToken %s",
+      PromiseFlatCString(aPath).get(), aXDGToken ? aXDGToken : "none");
   GUniquePtr<GError> error;
 #ifdef __OpenBSD__
   g_app_info_launch_default_for_uri_openbsd(spec.get(),
@@ -949,16 +986,22 @@ static nsresult LaunchPathImpl(const nsACString& aPath,
 static nsresult LaunchPath(const nsACString& aPath) {
   auto promise = mozilla::widget::RequestWaylandFocusPromise();
   if (!promise) {
+    LOG("LaunchPath() failed to get focus promise, fallback to "
+        "LaunchPathImpl()");
     return LaunchPathImpl(aPath);
   }
   promise->Then(
       GetMainThreadSerialEventTarget(), __func__,
       /* resolve */
       [path = nsCString{aPath}](nsCString token) {
+        LOG("LaunchPath() received XDG focus token");
         LaunchPathImpl(path, token.get());
       },
       /* reject */
-      [path = nsCString{aPath}](bool state) { LaunchPathImpl(path); });
+      [path = nsCString{aPath}](bool state) {
+        LOG("LaunchPath() without XDG focus token");
+        LaunchPathImpl(path);
+      });
   return NS_OK;
 }
 
@@ -968,11 +1011,13 @@ nsresult nsGIOService::LaunchFile(const nsACString& aPath) {
 
 nsresult nsGIOService::GetIsRunningUnderFlatpak(bool* aResult) {
   *aResult = mozilla::widget::IsRunningUnderFlatpak();
+  LOG("nsGIOService::GetIsRunningUnderFlatpak() %d", *aResult);
   return NS_OK;
 }
 
 nsresult nsGIOService::GetIsRunningUnderSnap(bool* aResult) {
   *aResult = mozilla::widget::IsRunningUnderSnap();
+  LOG("nsGIOService::IsRunningUnderSnap() %d", *aResult);
   return NS_OK;
 }
 
@@ -1146,12 +1191,16 @@ nsGIOService::FindAppFromCommand(nsACString const& aCmd,
                                  nsIGIOMimeApp** aAppInfo) {
   RefPtr<GAppInfo> app_info;
 
+  LOG("nsGIOService::FindAppFromCommand() %s", PromiseFlatCString(aCmd).get());
+
   GList* apps = g_app_info_get_all();
 
   // Try to find relevant and existing GAppInfo in all installed application
   // We do this by comparing each GAppInfo's executable with out own
   for (GList* node = apps; node; node = node->next) {
     RefPtr<GAppInfo> app_info_from_list = dont_AddRef((GAppInfo*)node->data);
+    LOG("  checking %s : %s", g_app_info_get_name(app_info_from_list),
+        g_app_info_get_executable(app_info_from_list));
     node->data = nullptr;
     if (!app_info) {
       // If the executable is not absolute, get it's full path
@@ -1161,6 +1210,8 @@ nsGIOService::FindAppFromCommand(nsACString const& aCmd,
       if (executable &&
           strcmp(executable.get(), PromiseFlatCString(aCmd).get()) == 0) {
         app_info = std::move(app_info_from_list);
+        LOG("  found %s : %s", g_app_info_get_name(app_info),
+            g_app_info_get_executable(app_info));
         // Can't break here because we need to keep iterating to unref the other
         // nodes.
       }
@@ -1169,6 +1220,7 @@ nsGIOService::FindAppFromCommand(nsACString const& aCmd,
 
   g_list_free(apps);
   if (!app_info) {
+    LOG("  failed to get application");
     *aAppInfo = nullptr;
     return NS_ERROR_NOT_AVAILABLE;
   }
@@ -1185,9 +1237,12 @@ nsGIOService::FindAppFromCommand(nsACString const& aCmd,
 NS_IMETHODIMP
 nsGIOService::CreateHandlerAppFromAppId(const char* aAppId,
                                         nsIGIOHandlerApp** aResult) {
+  LOG("nsGIOService::CreateHandlerAppFromAppId() %s", aAppId);
+
   RefPtr<GAppInfo> appInfo =
       dont_AddRef((GAppInfo*)g_desktop_app_info_new(aAppId));
   if (!appInfo) {
+    LOG("  Appinfo not found");
     g_warning("Appinfo not found for: %s", aAppId);
     return NS_ERROR_FAILURE;
   }
@@ -1212,6 +1267,9 @@ nsGIOService::CreateAppFromCommand(nsACString const& cmd,
                                    nsIGIOMimeApp** appInfo) {
   *appInfo = nullptr;
 
+  LOG("nsGIOService::CreateAppFromCommand() %s : %s",
+      PromiseFlatCString(appName).get(), PromiseFlatCString(cmd).get());
+
   // Using G_APP_INFO_CREATE_SUPPORTS_URIS calling
   // g_app_info_create_from_commandline appends %u to the cmd even when cmd
   // already contains this parameter. To avoid that we're going to remove
@@ -1234,6 +1292,7 @@ nsGIOService::CreateAppFromCommand(nsACString const& cmd,
   GUniquePtr<gchar> executableWithFullPath(
       g_find_program_in_path(commandWithoutArgs.BeginReading()));
   if (!executableWithFullPath) {
+    LOG("  quit, program not found in path");
     return NS_ERROR_FILE_NOT_FOUND;
   }
   RefPtr<nsGIOMimeApp> mozApp = new nsGIOMimeApp(app_info.forget());
diff --git a/toolkit/xre/GeckoArgs.cpp b/toolkit/xre/GeckoArgs.cpp
index e643b360c72d3..059c6f391c802 100644
--- a/toolkit/xre/GeckoArgs.cpp
+++ b/toolkit/xre/GeckoArgs.cpp
@@ -55,12 +55,24 @@ void AddToFdsToRemap(const ChildProcessArgs& aArgs,
 // Table of mach send rights which have been sent by the parent process.
 static mach_port_t gMachSendRights[kMaxPassedMachSendRights] = {MACH_PORT_NULL};
 
+// Table of mach receive rights which have been sent by the parent process.
+static mach_port_t gMachReceiveRights[kMaxPassedMachReceiveRights] = {
+    MACH_PORT_NULL};
+
 void SetPassedMachSendRights(std::vector<UniqueMachSendRight>&& aSendRights) {
   MOZ_RELEASE_ASSERT(aSendRights.size() <= std::size(gMachSendRights));
   for (size_t i = 0; i < aSendRights.size(); ++i) {
     gMachSendRights[i] = aSendRights[i].release();
   }
 }
+
+void SetPassedMachReceiveRights(
+    std::vector<UniqueMachReceiveRight>&& aReceiveRights) {
+  MOZ_RELEASE_ASSERT(aReceiveRights.size() <= std::size(gMachReceiveRights));
+  for (size_t i = 0; i < aReceiveRights.size(); ++i) {
+    gMachReceiveRights[i] = aReceiveRights[i].release();
+  }
+}
 #endif
 
 static void ParseHandleArgument(uint32_t aArg, UniqueFileHandle& aOutHandle) {
@@ -154,7 +166,43 @@ void CommandLineArg<UniqueMachSendRight>::PutCommon(const char* aName,
     CommandLineArg<uint32_t>::PutCommon(aName, *arg, aArgs);
   }
 }
-#endif
+
+static void ParseHandleArgument(uint32_t aArg,
+                                UniqueMachReceiveRight& aOutHandle) {
+  MOZ_RELEASE_ASSERT(aArg < std::size(gMachReceiveRights));
+  aOutHandle = UniqueMachReceiveRight{
+      std::exchange(gMachReceiveRights[aArg], MACH_PORT_NULL)};
+}
+
+static Maybe<uint32_t> SerializeHandleArgument(UniqueMachReceiveRight&& aValue,
+                                               ChildProcessArgs& aArgs) {
+  if (aValue) {
+    aArgs.mReceiveRights.push_back(std::move(aValue));
+    return Some(static_cast<uint32_t>(aArgs.mReceiveRights.size() - 1));
+  }
+  return Nothing();
+}
+
+template <>
+Maybe<UniqueMachReceiveRight> CommandLineArg<UniqueMachReceiveRight>::GetCommon(
+    const char* aMatch, int& aArgc, char** aArgv, const CheckArgFlag aFlags) {
+  if (Maybe<uint32_t> arg =
+          CommandLineArg<uint32_t>::GetCommon(aMatch, aArgc, aArgv, aFlags)) {
+    UniqueMachReceiveRight h;
+    ParseHandleArgument(*arg, h);
+    return Some(std::move(h));
+  }
+  return Nothing();
+}
+
+template <>
+void CommandLineArg<UniqueMachReceiveRight>::PutCommon(
+    const char* aName, UniqueMachReceiveRight aValue, ChildProcessArgs& aArgs) {
+  if (auto arg = SerializeHandleArgument(std::move(aValue), aArgs)) {
+    CommandLineArg<uint32_t>::PutCommon(aName, *arg, aArgs);
+  }
+}
+#endif  // XP_DARWIN
 
 // Shared memory handles are passed as a (handle, size) pair, which both turn
 // into numeric CLI arguments, so it's safe to use ":" as a separator.
diff --git a/toolkit/xre/GeckoArgs.h b/toolkit/xre/GeckoArgs.h
index 42c543f6ed0f2..088e40fd7c3b4 100644
--- a/toolkit/xre/GeckoArgs.h
+++ b/toolkit/xre/GeckoArgs.h
@@ -27,6 +27,7 @@ struct ChildProcessArgs {
   std::vector<UniqueFileHandle> mFiles;
 #ifdef XP_DARWIN
   std::vector<UniqueMachSendRight> mSendRights;
+  std::vector<UniqueMachReceiveRight> mReceiveRights;
 #endif
 };
 
@@ -46,9 +47,16 @@ void AddToFdsToRemap(const ChildProcessArgs& aArgs,
 // to the number of mach send rights which can be passed on the command line.
 constexpr size_t kMaxPassedMachSendRights = 10;
 
+// Size of the internal static array of mach receive rights. This acts as a
+// limit to the number of mach receive rights which can be passed on the
+// command line.
+constexpr size_t kMaxPassedMachReceiveRights = 1;
+
 // Fill the internal static array with the mach send rights which were passed
 // from the parent process.
 void SetPassedMachSendRights(std::vector<UniqueMachSendRight>&& aSendRights);
+void SetPassedMachReceiveRights(
+    std::vector<UniqueMachReceiveRight>&& aReceiveRights);
 #endif
 
 template <typename T>
@@ -135,7 +143,10 @@ Maybe<UniqueFileHandle> CommandLineArg<UniqueFileHandle>::GetCommon(
 template <>
 Maybe<UniqueMachSendRight> CommandLineArg<UniqueMachSendRight>::GetCommon(
     const char* aMatch, int& aArgc, char** aArgv, const CheckArgFlag aFlags);
-#endif
+template <>
+Maybe<UniqueMachReceiveRight> CommandLineArg<UniqueMachReceiveRight>::GetCommon(
+    const char* aMatch, int& aArgc, char** aArgv, const CheckArgFlag aFlags);
+#endif  // XP_DARWIN
 
 template <>
 Maybe<mozilla::ipc::ReadOnlySharedMemoryHandle>
@@ -185,7 +196,10 @@ template <>
 void CommandLineArg<UniqueMachSendRight>::PutCommon(const char* aName,
                                                     UniqueMachSendRight aValue,
                                                     ChildProcessArgs& aArgs);
-#endif
+template <>
+void CommandLineArg<UniqueMachReceiveRight>::PutCommon(
+    const char* aName, UniqueMachReceiveRight aValue, ChildProcessArgs& aArgs);
+#endif  // XP_DARWIN
 
 template <>
 void CommandLineArg<mozilla::ipc::ReadOnlySharedMemoryHandle>::PutCommon(
@@ -237,8 +251,15 @@ static CommandLineArg<const char*> sCrashReporter{"-crashReporter",
 static CommandLineArg<UniqueFileHandle> sCrashReporter{"-crashReporter",
                                                        "crashreporter"};
 #endif
+#if defined(XP_DARWIN)
+static CommandLineArg<UniqueMachSendRight> sCrashHelperSend{"-crashHelperSend",
+                                                            "crashhelpersend"};
+static CommandLineArg<UniqueMachReceiveRight> sCrashHelperRecv{
+    "-crashHelperRecv", "crashhelperrecv"};
+#else
 static CommandLineArg<UniqueFileHandle> sCrashHelper{"-crashHelper",
                                                      "crashhelper"};
+#endif  // XP_DARWIN
 
 #if defined(XP_WIN)
 #  if defined(MOZ_SANDBOX)
diff --git a/toolkit/xre/dllservices/mozglue/LoaderObserver.cpp b/toolkit/xre/dllservices/mozglue/LoaderObserver.cpp
index 5885d5a0f32e8..5e3d2c48b727b 100644
--- a/toolkit/xre/dllservices/mozglue/LoaderObserver.cpp
+++ b/toolkit/xre/dllservices/mozglue/LoaderObserver.cpp
@@ -6,7 +6,6 @@
 
 #include "LoaderObserver.h"
 
-#include "mozilla/AutoProfilerLabel.h"
 #include "mozilla/BaseProfilerMarkers.h"
 #include "mozilla/glue/WindowsUnicode.h"
 #include "mozilla/StackWalk_windows.h"
@@ -22,14 +21,12 @@ namespace glue {
 void LoaderObserver::OnBeginDllLoad(void** aContext,
                                     PCUNICODE_STRING aRequestedDllName) {
   MOZ_ASSERT(aContext);
-  if (IsProfilerPresent()) {
-    UniquePtr<char[]> utf8RequestedDllName(WideToUTF8(aRequestedDllName));
-    BASE_PROFILER_MARKER_TEXT(
-        "DllLoad", OTHER, MarkerTiming::IntervalStart(),
-        mozilla::ProfilerString8View::WrapNullTerminatedString(
-            utf8RequestedDllName.get()));
-    *aContext = utf8RequestedDllName.release();
-  }
+  UniquePtr<char[]> utf8RequestedDllName(WideToUTF8(aRequestedDllName));
+  BASE_PROFILER_MARKER_TEXT(
+      "DllLoad", OTHER, MarkerTiming::IntervalStart(),
+      mozilla::ProfilerString8View::WrapNullTerminatedString(
+          utf8RequestedDllName.get()));
+  *aContext = utf8RequestedDllName.release();
 
 #if defined(_M_AMD64) || defined(_M_ARM64)
   // Prevent the stack walker from suspending this thread when LdrLoadDll
diff --git a/toolkit/xre/dllservices/mozglue/WindowsDllBlocklist.cpp b/toolkit/xre/dllservices/mozglue/WindowsDllBlocklist.cpp
index 05c001801257c..016c4923f1dfc 100644
--- a/toolkit/xre/dllservices/mozglue/WindowsDllBlocklist.cpp
+++ b/toolkit/xre/dllservices/mozglue/WindowsDllBlocklist.cpp
@@ -23,7 +23,6 @@
 #include "mozilla/WinHeaderOnlyUtils.h"
 #include "nsWindowsHelpers.h"
 #include "WindowsDllBlocklist.h"
-#include "mozilla/AutoProfilerLabel.h"
 #include "mozilla/glue/Debug.h"
 #include "mozilla/glue/WindowsDllServices.h"
 #include "mozilla/glue/WinUtils.h"
diff --git a/toolkit/xre/nsEmbedFunctions.cpp b/toolkit/xre/nsEmbedFunctions.cpp
index 612f0fed2e949..ae65619b38387 100644
--- a/toolkit/xre/nsEmbedFunctions.cpp
+++ b/toolkit/xre/nsEmbedFunctions.cpp
@@ -328,12 +328,14 @@ nsresult XRE_InitChildProcess(int aArgc, char* aArgv[],
   const int kTimeoutMs = 1000;
 
   std::vector<mozilla::UniqueMachSendRight> sendRights;
-  if (NS_WARN_IF(
-          !MachChildProcessCheckIn(mach_port_name, kTimeoutMs, sendRights))) {
+  std::vector<mozilla::UniqueMachReceiveRight> receiveRights;
+  if (NS_WARN_IF(!MachChildProcessCheckIn(mach_port_name, kTimeoutMs,
+                                          sendRights, receiveRights))) {
     return NS_ERROR_FAILURE;
   }
 
   geckoargs::SetPassedMachSendRights(std::move(sendRights));
+  geckoargs::SetPassedMachReceiveRights(std::move(receiveRights));
 
 #  if defined(MOZ_SANDBOX)
   std::string sandboxError;
@@ -349,18 +351,12 @@ nsresult XRE_InitChildProcess(int aArgc, char* aArgv[],
 
   bool exceptionHandlerIsSet = false;
   if (!CrashReporter::IsDummy()) {
-    auto crashReporterArg = geckoargs::sCrashReporter.Get(aArgc, aArgv);
-    auto crashHelperArg = geckoargs::sCrashHelper.Get(aArgc, aArgv);
-    if (crashReporterArg && crashHelperArg) {
-      exceptionHandlerIsSet = CrashReporter::SetRemoteExceptionHandler(
-          std::move(*crashReporterArg), std::move(*crashHelperArg));
-      MOZ_ASSERT(exceptionHandlerIsSet,
-                 "Should have been able to set remote exception handler");
-
-      if (!exceptionHandlerIsSet) {
-        // Bug 684322 will add better visibility into this condition
-        NS_WARNING("Could not setup crash reporting\n");
-      }
+    exceptionHandlerIsSet =
+        CrashReporter::SetRemoteExceptionHandler(aArgc, aArgv);
+
+    if (!exceptionHandlerIsSet) {
+      // Bug 684322 will add better visibility into this condition
+      NS_WARNING("Could not setup crash reporting\n");
     } else {
       // We might have registered a runtime exception module very early in
       // process startup to catch early crashes. This is before we process the
diff --git a/tools/profiler/core/ProfileBufferEntry.cpp b/tools/profiler/core/ProfileBufferEntry.cpp
index 86387a813a308..17d9509537481 100644
--- a/tools/profiler/core/ProfileBufferEntry.cpp
+++ b/tools/profiler/core/ProfileBufferEntry.cpp
@@ -340,7 +340,8 @@ bool UniqueStacks::FrameKey::NormalFrameData::operator==(
 bool UniqueStacks::FrameKey::JITFrameData::operator==(
     const JITFrameData& aOther) const {
   return mCanonicalAddress == aOther.mCanonicalAddress &&
-         mDepth == aOther.mDepth && mRangeIndex == aOther.mRangeIndex;
+         mDepth == aOther.mDepth && mRangeIndex == aOther.mRangeIndex &&
+         mLine == aOther.mLine && mColumn == aOther.mColumn;
 }
 
 // Consume aJITFrameInfo by stealing its string table and its JIT frame info
@@ -417,7 +418,8 @@ UniqueStacks::LookupFramesForJITAddressFromBufferPos(void* aJITAddress,
   MOZ_RELEASE_ASSERT(frameKeys.initCapacity(jitFrameKeys->value().length()));
   for (const JITFrameKey& jitFrameKey : jitFrameKeys->value()) {
     FrameKey frameKey(jitFrameKey.mCanonicalAddress, jitFrameKey.mDepth,
-                      rangeIter - mJITInfoRanges.begin());
+                      rangeIter - mJITInfoRanges.begin(), jitFrameKey.mLine,
+                      jitFrameKey.mColumn);
     uint32_t index = mFrameToIndexMap.count();
     auto entry = mFrameToIndexMap.lookupForAdd(frameKey);
     if (!entry) {
@@ -592,6 +594,12 @@ static void StreamJITFrame(JSContext* aContext, SpliceableJSONWriter& aWriter,
                            ? MakeStringSpan("ion")
                            : MakeStringSpan("baseline"));
 
+  // Output line and column information if available.
+  if (aJITFrame.line() != 0) {
+    writer.IntElement(LINE, aJITFrame.line());
+    writer.IntElement(COLUMN, aJITFrame.column());
+  }
+
   const JS::ProfilingCategoryPairInfo& info = JS::GetProfilingCategoryPairInfo(
       frameKind == JS::ProfilingFrameIterator::Frame_Ion
           ? JS::ProfilingCategoryPair::JS_IonMonkey
@@ -647,7 +655,8 @@ void JITFrameInfo::AddInfoForRange(
       for (JS::ProfiledFrameHandle handle :
            JS::GetProfiledFrames(aCx, aJITAddress)) {
         uint32_t depth = jitFrameKeys.length();
-        JITFrameKey jitFrameKey{handle.canonicalAddress(), depth};
+        JITFrameKey jitFrameKey{handle.canonicalAddress(), depth, handle.line(),
+                                handle.column()};
         auto frameEntry = jitFrameToFrameJSONMap.lookupForAdd(jitFrameKey);
         if (!frameEntry) {
           if (!jitFrameToFrameJSONMap.add(
diff --git a/tools/profiler/core/ProfileBufferEntry.h b/tools/profiler/core/ProfileBufferEntry.h
index a9e54bcdcaf3b..8755b821b33cf 100644
--- a/tools/profiler/core/ProfileBufferEntry.h
+++ b/tools/profiler/core/ProfileBufferEntry.h
@@ -112,7 +112,8 @@ struct JITFrameInfoForBufferRange final {
   struct JITFrameKey {
     bool operator==(const JITFrameKey& aOther) const {
       return mCanonicalAddress == aOther.mCanonicalAddress &&
-             mDepth == aOther.mDepth;
+             mDepth == aOther.mDepth && mLine == aOther.mLine &&
+             mColumn == aOther.mColumn;
     }
     bool operator!=(const JITFrameKey& aOther) const {
       return !(*this == aOther);
@@ -120,6 +121,8 @@ struct JITFrameInfoForBufferRange final {
 
     void* mCanonicalAddress;
     uint32_t mDepth;
+    uint32_t mLine;
+    uint32_t mColumn;
   };
   struct JITFrameKeyHasher {
     using Lookup = JITFrameKey;
@@ -128,6 +131,8 @@ struct JITFrameInfoForBufferRange final {
       mozilla::HashNumber hash = 0;
       hash = mozilla::AddToHash(hash, aLookup.mCanonicalAddress);
       hash = mozilla::AddToHash(hash, aLookup.mDepth);
+      hash = mozilla::AddToHash(hash, aLookup.mLine);
+      hash = mozilla::AddToHash(hash, aLookup.mColumn);
       return hash;
     }
 
@@ -234,8 +239,10 @@ class UniqueStacks final : public mozilla::FailureLatch {
                                 aInnerWindowID, aSourceId, aLine, aColumn,
                                 aCategoryPair}) {}
 
-    FrameKey(void* aJITAddress, uint32_t aJITDepth, uint32_t aRangeIndex)
-        : mData(JITFrameData{aJITAddress, aJITDepth, aRangeIndex}) {}
+    FrameKey(void* aJITAddress, uint32_t aJITDepth, uint32_t aRangeIndex,
+             uint32_t aLine, uint32_t aColumn)
+        : mData(JITFrameData{aJITAddress, aJITDepth, aRangeIndex, aLine,
+                             aColumn}) {}
 
     FrameKey(const FrameKey& aToCopy) = default;
 
@@ -277,6 +284,8 @@ class UniqueStacks final : public mozilla::FailureLatch {
       void* mCanonicalAddress;
       uint32_t mDepth;
       uint32_t mRangeIndex;
+      uint32_t mLine;
+      uint32_t mColumn;
     };
     mozilla::Variant<NormalFrameData, JITFrameData> mData;
   };
@@ -313,6 +322,8 @@ class UniqueStacks final : public mozilla::FailureLatch {
         hash = mozilla::AddToHash(hash, data.mCanonicalAddress);
         hash = mozilla::AddToHash(hash, data.mDepth);
         hash = mozilla::AddToHash(hash, data.mRangeIndex);
+        hash = mozilla::AddToHash(hash, data.mLine);
+        hash = mozilla::AddToHash(hash, data.mColumn);
       }
       return hash;
     }
diff --git a/tools/profiler/core/platform.cpp b/tools/profiler/core/platform.cpp
index 6eb18030c65f3..1122202d055cf 100644
--- a/tools/profiler/core/platform.cpp
+++ b/tools/profiler/core/platform.cpp
@@ -67,7 +67,6 @@
 #include "memory_hooks.h"
 #include "memory_markers.h"
 #include "mozilla/ArrayAlgorithm.h"
-#include "mozilla/AutoProfilerLabel.h"
 #include "mozilla/BaseAndGeckoProfilerDetail.h"
 #include "mozilla/BaseProfiler.h"
 #include "mozilla/CycleCollectedJSContext.h"
@@ -5732,28 +5731,6 @@ static void locked_profiler_start(PSLockRef aLock, PowerOfTwo32 aCapacity,
                                   uint64_t aActiveTabID,
                                   const Maybe<double>& aDuration);
 
-// This basically duplicates AutoProfilerLabel's constructor.
-static void* MozGlueLabelEnter(const char* aLabel, const char* aDynamicString,
-                               void* aSp) {
-  ThreadRegistration::OnThreadPtr onThreadPtr =
-      ThreadRegistration::GetOnThreadPtr();
-  if (!onThreadPtr) {
-    return nullptr;
-  }
-  ProfilingStack& profilingStack =
-      onThreadPtr->UnlockedConstReaderAndAtomicRWRef().ProfilingStackRef();
-  profilingStack.pushLabelFrame(aLabel, aDynamicString, aSp,
-                                JS::ProfilingCategoryPair::OTHER);
-  return &profilingStack;
-}
-
-// This basically duplicates AutoProfilerLabel's destructor.
-static void MozGlueLabelExit(void* aProfilingStack) {
-  if (aProfilingStack) {
-    reinterpret_cast<ProfilingStack*>(aProfilingStack)->pop();
-  }
-}
-
 static Vector<const char*> SplitAtCommas(const char* aString,
                                          UniquePtr<char[]>& aStorage) {
   size_t len = strlen(aString);
@@ -6830,9 +6807,6 @@ static void locked_profiler_start(PSLockRef aLock, PowerOfTwo32 aCapacity,
     }
   }
 
-  // Setup support for pushing/popping labels in mozglue.
-  RegisterProfilerLabelEnterExit(MozGlueLabelEnter, MozGlueLabelExit);
-
 #if defined(GP_OS_android)
   if (ActivePS::FeatureJava(aLock)) {
     int javaInterval = interval;
@@ -7018,9 +6992,6 @@ void profiler_ensure_started(PowerOfTwo32 aCapacity, double aInterval,
   }
 #endif
 
-  // Remove support for pushing/popping labels in mozglue.
-  RegisterProfilerLabelEnterExit(nullptr, nullptr);
-
   // Stop sampling live threads.
   ThreadRegistry::LockedRegistry lockedRegistry;
   for (ThreadRegistry::OffThreadRef offThreadRef : lockedRegistry) {
diff --git a/tools/tryselect/mach_commands.py b/tools/tryselect/mach_commands.py
index 16e826a90540b..ad3185653d4ab 100644
--- a/tools/tryselect/mach_commands.py
+++ b/tools/tryselect/mach_commands.py
@@ -42,11 +42,12 @@ def generic_parser():
 
 
 def init(command_context):
-    from tryselect import lando, push
+    from tryselect import lando, push, task_config
 
     mach_context = command_context._mach_context
     lando.LAUNCH_BROWSER = not mach_context.settings["try"]["nobrowser"]
     push.MAX_HISTORY = mach_context.settings["try"]["maxhistory"]
+    task_config.SKIP_ARTIFACT_BUILD_CHECK = mach_context.settings["try"]["noartifact"]
 
 
 @memoize
diff --git a/tools/tryselect/task_config.py b/tools/tryselect/task_config.py
index fd6df19ff460d..90fd82aa867a7 100644
--- a/tools/tryselect/task_config.py
+++ b/tools/tryselect/task_config.py
@@ -26,6 +26,9 @@
 here = pathlib.Path(__file__).parent
 build = MozbuildObject.from_environment(cwd=str(here))
 
+# Set from mach settings in mach_commands.init()
+SKIP_ARTIFACT_BUILD_CHECK = False
+
 
 class ParameterConfig:
     __metaclass__ = ABCMeta
@@ -109,6 +112,11 @@ def try_config(self, artifact, no_artifact, **kwargs):
         if no_artifact:
             return
 
+        # If 'try.noartifact' is set in mach settings, default to non-artifact
+        # try instead of checking current build environment.
+        if SKIP_ARTIFACT_BUILD_CHECK:
+            return
+
         if self.is_artifact_build():
             print("Artifact builds enabled, pass --no-artifact to disable")
             return {"use-artifact-builds": True, "disable-pgo": True}
diff --git a/widget/android/moz.build b/widget/android/moz.build
index 919569de23b40..134e88c2054e4 100644
--- a/widget/android/moz.build
+++ b/widget/android/moz.build
@@ -90,13 +90,13 @@ classes_with_WrapForJNI = [
     "XPCOMEventTarget",
 ]
 
-natives_from_WrapForJNI = sorted(
-    ["GeneratedJNI/{}Natives.h".format(c) for c in classes_with_WrapForJNI]
-)
+natives_from_WrapForJNI = sorted([
+    "GeneratedJNI/{}Natives.h".format(c) for c in classes_with_WrapForJNI
+])
 
-wrappers_from_WrapForJNI = sorted(
-    ["GeneratedJNI/{}Wrappers.h".format(c) for c in classes_with_WrapForJNI]
-)
+wrappers_from_WrapForJNI = sorted([
+    "GeneratedJNI/{}Wrappers.h".format(c) for c in classes_with_WrapForJNI
+])
 
 sources_from_WrapForJNI = sorted(
     "GeneratedJNI/{}Wrappers.cpp".format(c) for c in classes_with_WrapForJNI
@@ -226,4 +226,4 @@ LOCAL_INCLUDES += [
     "/xpcom/threads",
 ]
 
-OS_LIBS += ["android"]
+OS_LIBS += ["android", "jnigraphics"]
diff --git a/widget/android/nsWindow.cpp b/widget/android/nsWindow.cpp
index ac034cefaebd1..095d1d2df0fc2 100644
--- a/widget/android/nsWindow.cpp
+++ b/widget/android/nsWindow.cpp
@@ -6,6 +6,7 @@
 
 #include <algorithm>
 #include <atomic>
+#include <android/bitmap.h>
 #include <android/log.h>
 #include <android/native_window.h>
 #include <android/native_window_jni.h>
@@ -67,6 +68,7 @@
 #include "mozilla/MiscEvents.h"
 #include "mozilla/MouseEvents.h"
 #include "mozilla/Preferences.h"
+#include "mozilla/ScopeExit.h"
 #include "mozilla/StaticPrefs_android.h"
 #include "mozilla/StaticPrefs_ui.h"
 #include "mozilla/StaticPrefs_widget.h"
@@ -95,6 +97,7 @@
 #include "mozilla/java/SessionAccessibilityWrappers.h"
 #include "mozilla/java/SurfaceControlManagerWrappers.h"
 #include "mozilla/jni/NativesInlines.h"
+#include "mozilla/layers/AndroidHardwareBuffer.h"
 #include "mozilla/layers/APZEventState.h"
 #include "mozilla/layers/APZInputBridge.h"
 #include "mozilla/layers/APZThreadUtils.h"
@@ -120,6 +123,7 @@ using namespace mozilla::ipc;
 using mozilla::dom::ContentChild;
 using mozilla::dom::ContentParent;
 using mozilla::gfx::DataSourceSurface;
+using mozilla::gfx::IntRect;
 using mozilla::gfx::IntSize;
 using mozilla::gfx::Matrix;
 using mozilla::gfx::SurfaceFormat;
@@ -1096,8 +1100,7 @@ class LayerViewSupport final
     explicit CaptureRequest() : mResult(nullptr) {}
     explicit CaptureRequest(java::GeckoResult::GlobalRef aResult,
                             java::sdk::Bitmap::GlobalRef aBitmap,
-                            const ScreenRect& aSource,
-                            const IntSize& aOutputSize)
+                            const IntRect& aSource, const IntSize& aOutputSize)
         : mResult(aResult),
           mBitmap(aBitmap),
           mSource(aSource),
@@ -1109,7 +1112,7 @@ class LayerViewSupport final
     // where to store the pixels
     java::sdk::Bitmap::GlobalRef mBitmap;
 
-    ScreenRect mSource;
+    IntRect mSource;
 
     IntSize mOutputSize;
   };
@@ -1266,36 +1269,6 @@ class LayerViewSupport final
 
   java::sdk::Surface::Param GetSurface() { return mSurface; }
 
- private:
-  already_AddRefed<DataSourceSurface> FlipScreenPixels(
-      Shmem& aMem, const ScreenIntSize& aInSize, const ScreenRect& aInRegion,
-      const IntSize& aOutSize) {
-    RefPtr<gfx::DataSourceSurface> image =
-        gfx::Factory::CreateWrappingDataSourceSurface(
-            aMem.get<uint8_t>(),
-            StrideForFormatAndWidth(SurfaceFormat::B8G8R8A8, aInSize.width),
-            IntSize(aInSize.width, aInSize.height), SurfaceFormat::B8G8R8A8);
-    RefPtr<gfx::DrawTarget> drawTarget =
-        gfxPlatform::GetPlatform()->CreateOffscreenContentDrawTarget(
-            aOutSize, SurfaceFormat::B8G8R8A8);
-    if (!drawTarget) {
-      return nullptr;
-    }
-
-    drawTarget->SetTransform(Matrix::Scaling(1.0, -1.0) *
-                             Matrix::Translation(0, aOutSize.height));
-
-    gfx::Rect srcRect(aInRegion.x,
-                      (aInSize.height - aInRegion.height) - aInRegion.y,
-                      aInRegion.width, aInRegion.height);
-    gfx::Rect destRect(0, 0, aOutSize.width, aOutSize.height);
-    drawTarget->DrawSurface(image, destRect, srcRect);
-
-    RefPtr<gfx::SourceSurface> snapshot = drawTarget->Snapshot();
-    RefPtr<gfx::DataSourceSurface> data = snapshot->GetDataSurface();
-    return data.forget();
-  }
-
   /**
    * Compositor methods
    */
@@ -1689,18 +1662,20 @@ class LayerViewSupport final
       mCapturePixelsResults.push(CaptureRequest(
           java::GeckoResult::GlobalRef(result),
           java::sdk::Bitmap::GlobalRef(java::sdk::Bitmap::LocalRef(aTarget)),
-          ScreenRect(aXOffset, aYOffset, aSrcWidth, aSrcHeight),
+          IntRect(aXOffset, aYOffset, aSrcWidth, aSrcHeight),
           IntSize(aOutWidth, aOutHeight)));
       size = mCapturePixelsResults.size();
     }
 
     if (size == 1) {
-      mUiCompositorControllerChild->RequestScreenPixels();
+      mUiCompositorControllerChild->RequestScreenPixels(
+          IntRect(aXOffset, aYOffset, aSrcWidth, aSrcHeight),
+          IntSize(aOutWidth, aOutHeight));
     }
   }
 
-  void RecvScreenPixels(Shmem&& aMem, const ScreenIntSize& aSize,
-                        bool aNeedsYFlip) {
+  void RecvScreenPixels(
+      RefPtr<mozilla::layers::AndroidHardwareBuffer> aHardwareBuffer) {
     MOZ_ASSERT(AndroidBridge::IsJavaUiThread());
     CaptureRequest request;
     java::GeckoResult::LocalRef result = nullptr;
@@ -1714,51 +1689,105 @@ class LayerViewSupport final
         bitmap = java::sdk::Bitmap::LocalRef(request.mBitmap);
         mCapturePixelsResults.pop();
       }
-    }
 
-    if (result) {
-      if (bitmap) {
-        RefPtr<DataSourceSurface> surf;
-        if (aNeedsYFlip) {
-          surf = FlipScreenPixels(aMem, aSize, request.mSource,
-                                  request.mOutputSize);
-        } else {
-          surf = gfx::Factory::CreateWrappingDataSourceSurface(
-              aMem.get<uint8_t>(),
-              StrideForFormatAndWidth(SurfaceFormat::B8G8R8A8, aSize.width),
-              IntSize(aSize.width, aSize.height), SurfaceFormat::B8G8R8A8);
-        }
-        if (surf) {
-          DataSourceSurface::ScopedMap smap(surf, DataSourceSurface::READ);
-          auto pixels = mozilla::jni::ByteBuffer::New(
-              reinterpret_cast<int8_t*>(smap.GetData()),
-              smap.GetStride() * request.mOutputSize.height);
-          bitmap->CopyPixelsFromBuffer(pixels);
-          result->Complete(bitmap);
-        } else {
-          result->CompleteExceptionally(
-              java::sdk::IllegalStateException::New(
-                  "Failed to create flipped snapshot surface (probably out "
-                  "of memory)")
-                  .Cast<jni::Throwable>());
+      // If there are still outstanding requests then send the next request to
+      // the compositor.
+      if (!mCapturePixelsResults.empty()) {
+        // If the compositor was lost we should have already rejected all the
+        // results.
+        MOZ_ASSERT(mUiCompositorControllerChild);
+        if (mUiCompositorControllerChild) {
+          mUiCompositorControllerChild->RequestScreenPixels(
+              mCapturePixelsResults.front().mSource,
+              mCapturePixelsResults.front().mOutputSize);
         }
-      } else {
-        result->CompleteExceptionally(java::sdk::IllegalArgumentException::New(
-                                          "No target bitmap argument provided")
-                                          .Cast<jni::Throwable>());
       }
     }
 
-    // Pixels have been copied, so Dealloc Shmem
-    if (mUiCompositorControllerChild) {
-      mUiCompositorControllerChild->DeallocPixelBuffer(aMem);
+    if (!result) {
+      return;
+    }
 
-      if (auto window = mWindow.Access()) {
-        if (!mCapturePixelsResults.empty()) {
-          mUiCompositorControllerChild->RequestScreenPixels();
-        }
+    if (!aHardwareBuffer) {
+      result->CompleteExceptionally(
+          java::sdk::IllegalStateException::New(
+              "Failed to capture screen pixels (probably out of memory)")
+              .Cast<jni::Throwable>());
+      return;
+    }
+
+    if (!bitmap) {
+      result->CompleteExceptionally(java::sdk::IllegalArgumentException::New(
+                                        "No target bitmap argument provided")
+                                        .Cast<jni::Throwable>());
+      return;
+    }
+
+    JNIEnv* const env = jni::GetEnvForThread();
+    AndroidBitmapInfo info;
+    int res = AndroidBitmap_getInfo(env, bitmap.Get(), &info);
+    if (res < 0) {
+      result->CompleteExceptionally(
+          java::sdk::IllegalStateException::New(
+              "Failed to get Bitmap info for screen pixels")
+              .Cast<jni::Throwable>());
+      return;
+    }
+
+    MOZ_RELEASE_ASSERT(IntSize(info.width, info.height) ==
+                       aHardwareBuffer->mSize);
+    MOZ_RELEASE_ASSERT(info.format == ANDROID_BITMAP_FORMAT_RGBA_8888);
+    MOZ_RELEASE_ASSERT(aHardwareBuffer->mFormat == SurfaceFormat::R8G8B8A8);
+
+    UniqueFileHandle acquireFence = aHardwareBuffer->GetAndResetAcquireFence();
+    uint8_t* srcBuf;
+    res = AHardwareBuffer_lock(aHardwareBuffer->GetNativeBuffer(),
+                               AHARDWAREBUFFER_USAGE_CPU_READ_OFTEN,
+                               acquireFence.release(), nullptr,
+                               reinterpret_cast<void**>(&srcBuf));
+    if (res < 0) {
+      result->CompleteExceptionally(
+          java::sdk::IllegalStateException::New(
+              "Failed to lock screen pixels HardwareBuffer")
+              .Cast<jni::Throwable>());
+      return;
+    }
+    auto hardwareBufferUnlock = MakeScopeExit([&]() {
+      AHardwareBuffer_unlock(aHardwareBuffer->GetNativeBuffer(), nullptr);
+    });
+
+    uint8_t* destBuf;
+    res = AndroidBitmap_lockPixels(env, bitmap.Get(),
+                                   reinterpret_cast<void**>(&destBuf));
+    if (res < 0) {
+      result->CompleteExceptionally(
+          java::sdk::IllegalStateException::New(
+              "Failed to get lock Bitmap for screen pixels")
+              .Cast<jni::Throwable>());
+      return;
+    }
+    auto bitmapUnlock =
+        MakeScopeExit([&]() { AndroidBitmap_unlockPixels(env, bitmap.Get()); });
+
+    // If the source and dest strides are equal we can do a single memcpy(),
+    // else we must copy row-by-row. It appears common for Hardware Buffers to
+    // have strides aligned to a certain value, whereas as bitmaps appear to be
+    // tightly packed. Note that AndroidBitmapInfo::stride is in bytes and
+    // AndroidHardwareBuffer::mStride is in pixels.
+    const int bpp = gfx::BytesPerPixel(aHardwareBuffer->mFormat);
+    if (info.stride == aHardwareBuffer->mStride * bpp) {
+      memcpy(destBuf, srcBuf, info.stride * info.height);
+    } else {
+      uint8_t* srcRow = srcBuf;
+      uint8_t* dstRow = destBuf;
+      for (uint32_t i = 0; i < info.height; i++) {
+        memcpy(dstRow, srcRow, info.width * bpp);
+        srcRow += aHardwareBuffer->mStride * bpp;
+        dstRow += info.stride;
       }
     }
+
+    result->Complete(bitmap);
   }
 
   void EnableLayerUpdateNotifications(bool aEnable) {
@@ -3291,12 +3320,12 @@ void nsWindow::NotifyCompositorScrollUpdate(
   }
 }
 
-void nsWindow::RecvScreenPixels(Shmem&& aMem, const ScreenIntSize& aSize,
-                                bool aNeedsYFlip) {
+void nsWindow::RecvScreenPixels(
+    RefPtr<mozilla::layers::AndroidHardwareBuffer> aHardwareBuffer) {
   MOZ_ASSERT(AndroidBridge::IsJavaUiThread());
   if (::mozilla::jni::NativeWeakPtr<LayerViewSupport>::Accessor lvs{
           mLayerViewSupport.Access()}) {
-    lvs->RecvScreenPixels(std::move(aMem), aSize, aNeedsYFlip);
+    lvs->RecvScreenPixels(aHardwareBuffer);
   }
 }
 
diff --git a/widget/android/nsWindow.h b/widget/android/nsWindow.h
index 18d4f1eadc787..511243d5f0915 100644
--- a/widget/android/nsWindow.h
+++ b/widget/android/nsWindow.h
@@ -44,10 +44,6 @@ class NPZCSupport;
 class PlatformCompositorWidgetDelegate;
 }  // namespace widget
 
-namespace ipc {
-class Shmem;
-}  // namespace ipc
-
 namespace a11y {
 class SessionAccessibility;
 }  // namespace a11y
@@ -240,8 +236,8 @@ class nsWindow final : public nsIWidget {
   void RecvToolbarAnimatorMessageFromCompositor(int32_t aMessage) override;
   void NotifyCompositorScrollUpdate(
       const mozilla::layers::CompositorScrollUpdate& aUpdate) override;
-  void RecvScreenPixels(mozilla::ipc::Shmem&& aMem, const ScreenIntSize& aSize,
-                        bool aNeedsYFlip) override;
+  void RecvScreenPixels(
+      RefPtr<mozilla::layers::AndroidHardwareBuffer> aHardwareBuffer) override;
   void UpdateDynamicToolbarMaxHeight(mozilla::ScreenIntCoord aHeight) override;
   mozilla::ScreenIntCoord GetDynamicToolbarMaxHeight() const override {
     return mDynamicToolbarMaxHeight;
diff --git a/widget/gtk/WaylandSurface.cpp b/widget/gtk/WaylandSurface.cpp
index 08f82f5d7afaf..16e83fef0c74a 100644
--- a/widget/gtk/WaylandSurface.cpp
+++ b/widget/gtk/WaylandSurface.cpp
@@ -206,6 +206,8 @@ void WaylandSurface::RequestFrameCallbackLocked(
 
   // Frame callback will be added by Map.
   if (!mIsMapped) {
+    LOGVERBOSE(
+        "WaylandSurface::RequestFrameCallbackLocked(): is not mapped, quit.");
     return;
   }
 
@@ -228,10 +230,15 @@ void WaylandSurface::RequestFrameCallbackLocked(
   }
 
   if (!mFrameCallbackEnabled || !mFrameCallbackHandler.IsSet()) {
+    LOGVERBOSE(
+        "WaylandSurface::RequestFrameCallbackLocked(): quit, frame callback is "
+        "not set/enabled.");
     return;
   }
 
   if (!mFrameCallback) {
+    LOGVERBOSE(
+        "WaylandSurface::RequestFrameCallbackLocked(): adding frame callback");
     static const struct wl_callback_listener listener{
         [](void* aData, struct wl_callback* callback, uint32_t time) {
           RefPtr waylandSurface = static_cast<WaylandSurface*>(aData);
@@ -287,12 +294,14 @@ void WaylandSurface::RequestFrameCallbackLocked(
 
 void WaylandSurface::ClearFrameCallbackLocked(
     const WaylandSurfaceLock& aProofOfLock) {
+  LOGVERBOSE("WaylandSurface::ClearFrameCallbackLocked()");
   MOZ_DIAGNOSTIC_ASSERT(&aProofOfLock == mSurfaceLock);
   MozClearPointer(mFrameCallback, wl_callback_destroy);
 }
 
 void WaylandSurface::ClearFrameCallbackHandlerLocked(
     const WaylandSurfaceLock& aProofOfLock) {
+  LOGVERBOSE("WaylandSurface::ClearFrameCallbackHandlerLocked()");
   MOZ_DIAGNOSTIC_ASSERT(&aProofOfLock == mSurfaceLock);
   mFrameCallbackHandler = FrameCallback{};
 }
@@ -332,6 +341,7 @@ void WaylandSurface::SetFrameCallbackStateLocked(
 void WaylandSurface::SetFrameCallbackStateHandlerLocked(
     const WaylandSurfaceLock& aProofOfLock,
     const std::function<void(bool)>& aFrameCallbackStateHandler) {
+  LOGVERBOSE("WaylandSurface::SetFrameCallbackStateHandlerLocked()");
   MOZ_DIAGNOSTIC_ASSERT(&aProofOfLock == mSurfaceLock);
   mFrameCallbackStateHandler = aFrameCallbackStateHandler;
 }
@@ -447,9 +457,6 @@ bool WaylandSurface::MapLocked(const WaylandSurfaceLock& aProofOfLock,
   LOGWAYLAND(" subsurface position [%d,%d]", (int)mSubsurfacePosition.x,
              (int)mSubsurfacePosition.y);
 
-  LOGWAYLAND("  register frame callback");
-  RequestFrameCallbackLocked(aProofOfLock);
-
   MOZ_DIAGNOSTIC_ASSERT(!mVisibleFrameCallback);
   static const struct wl_callback_listener listener{
       [](void* aData, struct wl_callback* callback, uint32_t time) {
@@ -459,11 +466,14 @@ bool WaylandSurface::MapLocked(const WaylandSurfaceLock& aProofOfLock,
   mVisibleFrameCallback = wl_surface_frame(mSurface);
   wl_callback_add_listener(mVisibleFrameCallback, &listener, this);
 
+  mIsMapped = true;
+
+  LOGWAYLAND("  register frame callback");
+  RequestFrameCallbackLocked(aProofOfLock);
+
   CommitLocked(aProofOfLock, /* aForceCommit */ true,
                /* aForceDisplayFlush */ true);
 
-  mIsMapped = true;
-
   if (mUseDMABufFormats) {
     EnableDMABufFormatsLocked(aProofOfLock, mDMABufFormatRefreshCallback);
   }
diff --git a/widget/nsIWidget.h b/widget/nsIWidget.h
index 22101dc0af6c0..1108889e9d792 100644
--- a/widget/nsIWidget.h
+++ b/widget/nsIWidget.h
@@ -85,11 +85,6 @@ enum class WindowShadow : uint8_t {
   Tooltip,
 };
 
-#if defined(MOZ_WIDGET_ANDROID)
-namespace ipc {
-class Shmem;
-}
-#endif  // defined(MOZ_WIDGET_ANDROID)
 namespace dom {
 class BrowserChild;
 enum class CallerType : uint32_t;
@@ -100,6 +95,7 @@ class DrawTarget;
 class SourceSurface;
 }  // namespace gfx
 namespace layers {
+class AndroidHardwareBuffer;
 class APZEventState;
 class AsyncDragMetrics;
 class Compositor;
@@ -2311,11 +2307,11 @@ class nsIWidget : public nsSupportsWeakReference {
    * RecvScreenPixels Buffer containing the pixel from the frame buffer. Used
    * for android robocop tests.
    *
-   * @param aMem  shared memory containing the frame buffer pixels.
-   * @param aSize size of the buffer in screen pixels.
+   * @param aHardwareBuffer Android HardwareBuffer containing the frame buffer
+   * pixels.
    */
-  virtual void RecvScreenPixels(mozilla::ipc::Shmem&& aMem,
-                                const ScreenIntSize& aSize, bool aNeedsYFlip) {}
+  virtual void RecvScreenPixels(
+      RefPtr<mozilla::layers::AndroidHardwareBuffer> aHardwareBuffer) {}
 
   virtual void UpdateDynamicToolbarMaxHeight(mozilla::ScreenIntCoord aHeight) {}
   virtual mozilla::ScreenIntCoord GetDynamicToolbarMaxHeight() const {
diff --git a/widget/windows/nsLookAndFeel.cpp b/widget/windows/nsLookAndFeel.cpp
index 0fc8cca45bca4..f1aff6ce5bae7 100644
--- a/widget/windows/nsLookAndFeel.cpp
+++ b/widget/windows/nsLookAndFeel.cpp
@@ -899,7 +899,8 @@ nscolor nsLookAndFeel::GetColorForSysColorIndex(int index) {
 auto nsLookAndFeel::ComputeTitlebarColors() -> TitlebarColors {
   TitlebarColors result;
 
-  // Start with the native / non-accent-in-titlebar colors.
+  // Start with the native / non-accent-in-titlebar colors for light mode, and
+  // non-native colors always for dark mode.
   result.mActiveLight = {GetColorForSysColorIndex(COLOR_ACTIVECAPTION),
                          GetColorForSysColorIndex(COLOR_CAPTIONTEXT),
                          GetColorForSysColorIndex(COLOR_ACTIVEBORDER)};
@@ -907,9 +908,15 @@ auto nsLookAndFeel::ComputeTitlebarColors() -> TitlebarColors {
   result.mInactiveLight = {GetColorForSysColorIndex(COLOR_INACTIVECAPTION),
                            GetColorForSysColorIndex(COLOR_INACTIVECAPTIONTEXT),
                            GetColorForSysColorIndex(COLOR_INACTIVEBORDER)};
+  result.mActiveDark = {*GenericDarkColor(ColorID::Activecaption),
+                        *GenericDarkColor(ColorID::Captiontext),
+                        *GenericDarkColor(ColorID::Activeborder)};
+  result.mInactiveDark = {*GenericDarkColor(ColorID::Inactivecaption),
+                          *GenericDarkColor(ColorID::Inactivecaptiontext),
+                          *GenericDarkColor(ColorID::Inactiveborder)};
 
   if (!mHighContrastOn) {
-    // Use our non-native colors.
+    // Use our non-native light colors.
     result.mActiveLight = {
         GetStandinForNativeColor(ColorID::Activecaption, ColorScheme::Light),
         GetStandinForNativeColor(ColorID::Captiontext, ColorScheme::Light),
@@ -919,16 +926,13 @@ auto nsLookAndFeel::ComputeTitlebarColors() -> TitlebarColors {
         GetStandinForNativeColor(ColorID::Inactivecaptiontext,
                                  ColorScheme::Light),
         GetStandinForNativeColor(ColorID::Inactiveborder, ColorScheme::Light)};
+    if (WinUtils::MicaEnabled()) {
+      // Use transparent titlebar backgrounds when using mica.
+      result.mActiveDark.mBg = result.mActiveLight.mBg =
+          result.mInactiveDark.mBg = result.mInactiveLight.mBg = NS_TRANSPARENT;
+    }
   }
 
-  // Our dark colors are always non-native.
-  result.mActiveDark = {*GenericDarkColor(ColorID::Activecaption),
-                        *GenericDarkColor(ColorID::Captiontext),
-                        *GenericDarkColor(ColorID::Activeborder)};
-  result.mInactiveDark = {*GenericDarkColor(ColorID::Inactivecaption),
-                          *GenericDarkColor(ColorID::Inactivecaptiontext),
-                          *GenericDarkColor(ColorID::Inactiveborder)};
-
   // TODO(bug 1825241): Somehow get notified when this changes? Hopefully the
   // sys color notification is enough.
   WinRegistry::Key dwmKey(HKEY_CURRENT_USER,
@@ -951,16 +955,12 @@ auto nsLookAndFeel::ComputeTitlebarColors() -> TitlebarColors {
   result.mAccentInactive = dwmKey.GetValueAsDword(u"AccentColorInactive"_ns);
   result.mAccentInactiveText = GetAccentColorText(result.mAccentInactive);
 
-  if (WinUtils::MicaEnabled()) {
-    // Use transparent titlebar backgrounds when using mica.
-    result.mActiveDark.mBg = result.mActiveLight.mBg =
-        result.mInactiveDark.mBg = result.mInactiveLight.mBg = NS_TRANSPARENT;
-  }
-
   // The ColorPrevalence value is set to 1 when the "Show color on title bar"
   // setting in the Color section of Window's Personalization settings is
-  // turned on.
+  // turned on. This setting is not supposed to have an effect in high contrast
+  // mode, see bug 2007306.
   result.mUseAccent =
+      !mHighContrastOn &&
       dwmKey.GetValueAsDword(u"ColorPrevalence"_ns).valueOr(0) == 1;
   if (!result.mUseAccent) {
     return result;