Private/Config/Merge-AvmTflintConfig.ps1
|
function Test-AvmHclTrivia { [CmdletBinding()] [OutputType([bool])] param( [Parameter(Mandatory)] [AllowEmptyString()] [string] $Text ) $withoutComments = $Text $withoutComments = [regex]::Replace($withoutComments, '(?m)(?:#|//)[^\r\n]*(?:\r?\n|$)', '') $withoutComments = [regex]::Replace($withoutComments, '(?s)/\*.*?\*/', '') return [string]::IsNullOrWhiteSpace($withoutComments) } function Get-AvmTflintOverrideBlock { [CmdletBinding()] [OutputType([object[]])] param( [Parameter(Mandatory)] [string] $Path ) $text = [System.IO.File]::ReadAllText($Path) $pattern = '(?ms)^[ \t]*(?<type>[A-Za-z_][A-Za-z0-9_-]*)[ \t]+"(?<label>(?:\\.|[^"])*)"[ \t]*\{(?<body>[^{}]*)\}' $matches = [regex]::Matches($text, $pattern) $blocks = New-Object System.Collections.Generic.List[object] $cursor = 0 foreach ($match in $matches) { if (-not (Test-AvmHclTrivia -Text $text.Substring($cursor, $match.Index - $cursor))) { throw [AvmConfigurationException]::new( "TFLint override '$Path' contains unsupported HCL before block '$($match.Groups['type'].Value)'.") } $body = $match.Groups['body'].Value $attributes = New-Object System.Collections.Generic.List[object] $attributePattern = '(?m)^[ \t]*(?<name>[A-Za-z_][A-Za-z0-9_-]*)[ \t]*=[ \t]*(?<value>[^\r\n]+?)[ \t]*(?:\r?$)' $attributeMatches = [regex]::Matches($body, $attributePattern) $bodyCursor = 0 foreach ($attributeMatch in $attributeMatches) { if (-not (Test-AvmHclTrivia -Text $body.Substring($bodyCursor, $attributeMatch.Index - $bodyCursor))) { throw [AvmConfigurationException]::new( "TFLint override '$Path' contains unsupported nested HCL in block '$($match.Groups['type'].Value) ""$($match.Groups['label'].Value)""'.") } $attributes.Add([pscustomobject]@{ Name = $attributeMatch.Groups['name'].Value Value = $attributeMatch.Groups['value'].Value.Trim() }) $bodyCursor = $attributeMatch.Index + $attributeMatch.Length } if (-not (Test-AvmHclTrivia -Text $body.Substring($bodyCursor))) { throw [AvmConfigurationException]::new( "TFLint override '$Path' contains unsupported nested HCL in block '$($match.Groups['type'].Value) ""$($match.Groups['label'].Value)""'.") } $blocks.Add([pscustomobject]@{ Type = $match.Groups['type'].Value Label = $match.Groups['label'].Value Attributes = $attributes.ToArray() Text = $match.Value.Trim() }) $cursor = $match.Index + $match.Length } if ($blocks.Count -eq 0 -or -not (Test-AvmHclTrivia -Text $text.Substring($cursor))) { throw [AvmConfigurationException]::new( "TFLint override '$Path' contains unsupported HCL; expected labelled blocks with direct attributes.") } return $blocks.ToArray() } function Get-AvmTflintOverrideWarning { [CmdletBinding()] [OutputType([object[]])] param( [Parameter(Mandatory)] [string] $Root, [Parameter(Mandatory)] [AllowEmptyCollection()] [string[]] $OverridePaths ) $rootFull = (Resolve-Path -LiteralPath $Root).ProviderPath $warnings = [System.Collections.Generic.List[object]]::new() $seen = [System.Collections.Generic.HashSet[string]]::new([System.StringComparer]::Ordinal) foreach ($overridePath in $OverridePaths) { $file = [System.IO.Path]::GetRelativePath($rootFull, $overridePath).Replace('\', '/') foreach ($block in (Get-AvmTflintOverrideBlock -Path $overridePath)) { if ($block.Type -cne 'rule') { continue } $enabled = @($block.Attributes | Where-Object { $_.Name -ceq 'enabled' } | Select-Object -Last 1) if ($enabled.Count -eq 0 -or $enabled[0].Value -cne 'false') { continue } $rule = [string]$block.Label $key = "$file`0$rule" if (-not $seen.Add($key)) { continue } $warnings.Add([pscustomobject][ordered]@{ File = $file Rule = $rule }) } } return $warnings.ToArray() } function Merge-AvmTflintConfig { [CmdletBinding()] param( [Parameter(Mandatory)] [string] $BasePath, [Parameter(Mandatory)] [string] $OverridePath, [Parameter(Mandatory)] [string] $DestinationPath ) $merged = [System.IO.File]::ReadAllText($BasePath) foreach ($overrideBlock in (Get-AvmTflintOverrideBlock -Path $OverridePath)) { $typePattern = [regex]::Escape($overrideBlock.Type) $labelPattern = [regex]::Escape($overrideBlock.Label) $blockPattern = "(?ms)^[ \t]*$typePattern[ \t]+`"$labelPattern`"[ \t]*\{(?<body>[^{}]*)\}" $baseMatches = [regex]::Matches($merged, $blockPattern) if ($baseMatches.Count -eq 0) { $merged = $merged.TrimEnd() + "`n`n" + $overrideBlock.Text + "`n" continue } $baseMatch = $baseMatches[$baseMatches.Count - 1] $body = $baseMatch.Groups['body'].Value foreach ($attribute in $overrideBlock.Attributes) { $attributePattern = '(?m)^(?<indent>[ \t]*)' + [regex]::Escape($attribute.Name) + '[ \t]*=[^\r\n]*(?:\r?$)' $attributeMatches = [regex]::Matches($body, $attributePattern) $replacement = if ($attributeMatches.Count -gt 0) { $indent = $attributeMatches[$attributeMatches.Count - 1].Groups['indent'].Value "$indent$($attribute.Name) = $($attribute.Value)" } else { " $($attribute.Name) = $($attribute.Value)" } if ($attributeMatches.Count -gt 0) { $attributeMatch = $attributeMatches[$attributeMatches.Count - 1] $body = $body.Remove($attributeMatch.Index, $attributeMatch.Length).Insert($attributeMatch.Index, $replacement) } else { $body = $body.TrimEnd() + "`n$replacement`n" } } $replacementBlock = $baseMatch.Value.Substring(0, $baseMatch.Groups['body'].Index - $baseMatch.Index) + $body + '}' $merged = $merged.Remove($baseMatch.Index, $baseMatch.Length).Insert($baseMatch.Index, $replacementBlock) } [System.IO.File]::WriteAllText( $DestinationPath, ($merged -replace "`r`n", "`n"), [System.Text.UTF8Encoding]::new($false)) } function Get-AvmTflintScopeOverridePath { [CmdletBinding()] [OutputType([string])] param( [Parameter(Mandatory)] [string] $Root, [Parameter(Mandatory)] [string] $RelPath ) $segments = @($RelPath -split '[\\/]') if ( $segments.Count -ne 2 -or $segments[0] -notin @('modules', 'examples') -or ($segments | Where-Object { [string]::IsNullOrWhiteSpace($_) -or $_ -in @('.', '..') }) ) { throw [AvmConfigurationException]::new( "TFLint scope '$RelPath' cannot be mapped to a per-scope override path.") } $rootFull = [System.IO.Path]::GetFullPath($Root) $candidate = $rootFull foreach ($segment in $segments) { $candidate = Join-Path $candidate $segment } $candidate = [System.IO.Path]::GetFullPath( (Join-Path $candidate 'avm.tflint.override.hcl')) $relativeCandidate = [System.IO.Path]::GetRelativePath($rootFull, $candidate) $relativeSegments = @($relativeCandidate -split '[\\/]') $outsideRoot = ( [System.IO.Path]::IsPathRooted($relativeCandidate) -or @($relativeSegments | Where-Object { $_ -eq '..' }).Count -gt 0 ) if ($outsideRoot) { throw [AvmConfigurationException]::new( "TFLint scope '$RelPath' resolves outside the repository root.") } if (Test-Path -LiteralPath $candidate -PathType Leaf) { return $candidate } return $null } function New-AvmTflintConfigSet { [CmdletBinding()] [OutputType([pscustomobject])] param( [Parameter(Mandatory)] [string] $Root, [Parameter(Mandatory)] [string] $BaseConfigDir, [object[]] $Scopes = @() ) $names = @( $Scopes | ForEach-Object { [System.IO.Path]::GetFileName([string]$_.Config) } | Sort-Object -Unique ) $overrides = @{} $overridePaths = [System.Collections.Generic.List[string]]::new() foreach ($name in $names) { $overrideName = $name -replace '\.hcl$', '.override.hcl' $overridePath = Join-Path $Root $overrideName if (Test-Path -LiteralPath $overridePath -PathType Leaf) { $overrides[$name] = $overridePath $overridePaths.Add($overridePath) } } $scopeOverrides = [System.Collections.Generic.Dictionary[string, string]]::new( [System.StringComparer]::Ordinal) $scopeByPath = [System.Collections.Generic.Dictionary[string, object]]::new( [System.StringComparer]::Ordinal) foreach ($scope in $Scopes) { $relPath = [string]$scope.RelPath $scopeByPath.Add($relPath, $scope) if ($relPath -eq '.') { continue } $overridePath = Get-AvmTflintScopeOverridePath -Root $Root -RelPath $relPath if ($overridePath) { $scopeOverrides.Add($relPath, $overridePath) $overridePaths.Add($overridePath) } } if ($overrides.Count -eq 0 -and $scopeOverrides.Count -eq 0) { return [pscustomobject]@{ ConfigDir = $BaseConfigDir OverridePaths = @() ScopeConfigNames = @{} StageDir = $null } } $stageRoot = Join-Path (Get-AvmFolder -Kind Cache) 'tflint-config-stage' if (-not (Test-Path -LiteralPath $stageRoot)) { New-Item -ItemType Directory -Path $stageRoot -Force | Out-Null } $stageDir = Join-Path $stageRoot ([Guid]::NewGuid().ToString('N')) New-Item -ItemType Directory -Path $stageDir -Force | Out-Null try { foreach ($name in $names) { $basePath = Join-Path $BaseConfigDir $name $destinationPath = Join-Path $stageDir $name if ($overrides.ContainsKey($name)) { Merge-AvmTflintConfig ` -BasePath $basePath ` -OverridePath $overrides[$name] ` -DestinationPath $destinationPath } else { Copy-Item -LiteralPath $basePath -Destination $destinationPath } } $scopeConfigNames = [System.Collections.Generic.Dictionary[string, string]]::new( [System.StringComparer]::Ordinal) foreach ($relPath in ($scopeOverrides.Keys | Sort-Object)) { $scope = $scopeByPath[$relPath] $baseName = [System.IO.Path]::GetFileName([string]$scope.Config) $scopeHash = [Convert]::ToHexString( [System.Security.Cryptography.SHA256]::HashData( [System.Text.Encoding]::UTF8.GetBytes($relPath))).ToLowerInvariant() $scopeConfigName = ( '{0}.scope-{1}.hcl' -f [System.IO.Path]::GetFileNameWithoutExtension($baseName), $scopeHash.Substring(0, 16)) Merge-AvmTflintConfig ` -BasePath (Join-Path $stageDir $baseName) ` -OverridePath $scopeOverrides[$relPath] ` -DestinationPath (Join-Path $stageDir $scopeConfigName) $scopeConfigNames.Add($relPath, $scopeConfigName) } return [pscustomobject]@{ ConfigDir = $stageDir OverridePaths = $overridePaths.ToArray() ScopeConfigNames = $scopeConfigNames StageDir = $stageDir } } catch { Remove-Item ` -LiteralPath $stageDir ` -Recurse ` -Force ` -ErrorAction SilentlyContinue ` -ProgressAction SilentlyContinue throw } } # SIG # Begin signature block # MIInNwYJKoZIhvcNAQcCoIInKDCCJyQCAQExDzANBglghkgBZQMEAgEFADB5Bgor # BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG # KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCAVwGCKfw/hpv1X # 8L2xnfNt0+W9VfNlfEhza1K+BlfGraCCDMkwggYEMIID7KADAgECAhMzAAACHPrN # xZvoL37EAAAAAAIcMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMR4wHAYD # VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBD # b2RlIFNpZ25pbmcgUENBIDIwMjQwHhcNMjYwNDE2MTg1OTQxWhcNMjcwNDE1MTg1 # OTQxWjB0MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE # BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYD # VQQDExVNaWNyb3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IB # DwAwggEKAoIBAQDVsZfgOKmM31HPfoWOoNEiw0SlCiIxUMC0I9NMWbucKOw/e9lP # oAoehQVu6SG65V4EPzrYsnBnFPNoi4/HoOdjhz1qkrEt4I6tEcxXU6oOeY9zGveC # /3iBeuhLYxM3M/PkcUoebF+Nednm8OkdSPoDu8imViHPQq/8CQUu0WRR4rE+dMRf # rpVqfmNi2qWCX94T4MsepijGVkwE//tJg0ryAiYdHT34LSnlG/RSBZmQRGWZ5g8j # qnKjRParSqMft1gvjuUTVgtWNZfgcLFSK5Wa0myrq8OPcgTGGsRgun+tnSS+IxDT # xVsAPH1OzvPjwomguByhUe/OcvUN0D5Wmp7xAgMBAAGjggGqMIIBpjAOBgNVHQ8B # Af8EBAMCB4AwHwYDVR0lBBgwFgYKKwYBBAGCN0wIAQYIKwYBBQUHAwMwHQYDVR0O # BBYEFNoH7a2YDjOSwpkp6DHcmUS7J+0yMFQGA1UdEQRNMEukSTBHMS0wKwYDVQQL # EyRNaWNyb3NvZnQgSXJlbGFuZCBPcGVyYXRpb25zIExpbWl0ZWQxFjAUBgNVBAUT # DTIzMDAxMis1MDc1NjkwHwYDVR0jBBgwFoAUf1k/VCHarU/vBeXmo9ctBpQSCDEw # YAYDVR0fBFkwVzBVoFOgUYZPaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9w # cy9jcmwvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNy # bDBtBggrBgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUWh0dHA6Ly93d3cubWljcm9z # b2Z0LmNvbS9wa2lvcHMvY2VydHMvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmcl # MjBQQ0ElMjAyMDI0LmNydDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4IC # AQAUnEqhaRXe0T3hIJjvdQErEkrA/7bByjn6t5IArODkkRjzkYwtKMc2yYj2quaN # rLutWw2YZcngKPy1b71YyDJQTy4NDRwaSh9Tw5thrk3NmcPrAHia5vtcBJ1CgtKK # 7mQbIcQ22d/N3813ayCDDFewu1+jsZmX+r/aTEqaOM4TVxVtRSkuCy8nAXKuChOK # Li/zA4XuH8iEYqIsj2YoNaeSxVmeGiERXpKdo3dDmYi0kO5w2D8VS4c3+9h6gElY # BaAAg/dYErBg27qT3vv0zRDJhJufvCNylA8S7/+8H5E/PV5cng6na9VV/w9OV3qu # uND6zdGa2EX38Glp50F9AIQk3p2xXmcvorDeM4XJ7UlWYBi6g80J1SSOQnInCYFE # msfUNn3+1AaTJKSJL83quKArTac2pKhu0Yzzzrzo6HrsRiQKzpnRBb1/dMa6P3hz # 75XbMRBctNsFhZC07WCmjExdLg2eHW5uV0TY8D5+6wozJf7vF3+WHkYPO85Z+BC6 # U4FkNbYNycZ9cE4j1tXRdyDCfml6c0HWPHjNVDObrv9lKt3qUqFpX38VCqVCyNOO # 1UcXfQiVjJw32U2WUKZjt/neJKHEBsm9kFsLuWzkQ53+qcaSaytmsCnk2gOglrlD # 5d3kKyvvAw+rzm0lT8K38P6PLxfZQHhu4W8dV7Av8N2ZmDCCBr0wggSloAMCAQIC # EzMAAAA5O7Y3Gb8GHWcAAAAAADkwDQYJKoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYT # AlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYD # VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBS # b290IENlcnRpZmljYXRlIEF1dGhvcml0eSAyMDExMB4XDTI0MDgwODIwNTQxOFoX # DTM2MDMyMjIyMTMwNFowVzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFU1pY3Jvc29m # dCBDb3Jwb3JhdGlvbjEoMCYGA1UEAxMfTWljcm9zb2Z0IENvZGUgU2lnbmluZyBQ # Q0EgMjAyNDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANgBnB7jOMeq # lRYHNa265v4IY9fH8TKhemHfPINe1gpLaV3dhg324WwH06LcHbpnsBukCDNitryo # 0dtS/EW6I/yEL/bLSY8hKpbfQuWusBPr9qazYcDxCW/qnjb5JsI1s8bNOg3bVATv # QVL4tcf03aTycsz8QeCdM0l/yHRObJ9QqazM1r6VPEOJ7LL+uEEb73w6QCuhs89a # 1uv1zerOYMnsneRRwCbpyW11IcggU0cRKDDq1pjVJzIbIF6+oiXXbReOsgeI8zu1 # FyQfK0fVkaya8SmVHQ/tOf23mZ4W9k0Ri22QW9p3UgSC5OUDktKxxcCmGL6tXLfO # GSWHIIV4YrTJTT6PNty5REojHJuZHArkF9VnHTERWoTjAzfI3kP+5b4alUdhgAZ7 # ttOu1bVnXfHaqPYl2rPs20ji03LOVWsh/radgE17es5hL+t6lV0eVHrVhsssROWJ # uz2MXMCt7iw7lFPG9LXKGjsmonn2gotGdHIuEg5JnJMJVmixd5LRlkmgYRZKzhxS # CwyoGIq0PhaA7Y+VPct5pCHkijcIIDm0nlkK+0KyepolcqGm0T/GYQRMhHJlGOOm # VQop36wUVUYklUy++vDWeEgEo4s7hxN6mIbf2MSIQ/iIfMZgJxC69oukMUXCrOC3 # SkE/xIkgpfl22MM1itkZ35nNXkMolU1lAgMBAAGjggFOMIIBSjAOBgNVHQ8BAf8E # BAMCAYYwEAYJKwYBBAGCNxUBBAMCAQAwHQYDVR0OBBYEFH9ZP1Qh2q1P7wXl5qPX # LQaUEggxMBkGCSsGAQQBgjcUAgQMHgoAUwB1AGIAQwBBMA8GA1UdEwEB/wQFMAMB # Af8wHwYDVR0jBBgwFoAUci06AjGQQ7kUBU7h6qfHMdEjiTQwWgYDVR0fBFMwUTBP # oE2gS4ZJaHR0cDovL2NybC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMv # TWljUm9vQ2VyQXV0MjAxMV8yMDExXzAzXzIyLmNybDBeBggrBgEFBQcBAQRSMFAw # TgYIKwYBBQUHMAKGQmh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvY2VydHMv # TWljUm9vQ2VyQXV0MjAxMV8yMDExXzAzXzIyLmNydDANBgkqhkiG9w0BAQwFAAOC # AgEAFJQfOChP7onn6fLIMKrSlN1WYKwDFgAddymOUO3FrM8d7B/W/iQ6DxXsDn7D # 5W4wMwYeLystcEqfkjz4NURRgazyMu5yRzQh4LqjA4tStTcJh1opExo7nn5PuPBY # nbu0+THSuVHTe0VTTPVhily/piFrDo3axQ9P4C+Ol5yet+2gTfekICS5xS+cYfSI # vgn0JksVBVMYVI5QFu/qhnLhsEFEUzG8fvv0hjgkO+lkpV9ty6GkN4vdnd7ya6Q6 # aR9y34aiM1qmxaxBi6OUnyNl6fkuun/diTFnYDLTppOkr/mg5WSfCiDVMNCxtj4w # PKC5OmHm1DQIt/MNokbbH3UGsFP1QbzsLocuSqLCvH09Io3fDPTmscR9Y75G4qX7 # RTX8AdBPo0I6OEojf39zuFZt0qOHm65YWQE69cZM2ueE1MB05dNNgHK9gTE7zKvK # /fg8B2qjW88MT/WF5V5uvZGtqa9FSL2RazArA+rDPuf6JGYz4HpgMZHB4S6szWSK # YBv0VisCzfxgeU+dquXW9bd0auYlOB58DPcOYKdc3Se94g+xL4pcEhbB54JOgAkw # YTu/9dLeH2pDqeJZAABVDWRQCaXfO5LgyKwKCLYXpigrZYCjUSBcr+Ve8PFWMhVT # Ql0v4q8J/AUmQN5W4n101cY2L4A7GTQG1h32HHAvfQESWP0xghnEMIIZwAIBATBu # MFcxCzAJBgNVBAYTAlVTMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24x # KDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMjQCEzMAAAIc # +s3Fm+gvfsQAAAAAAhwwDQYJYIZIAWUDBAIBBQCggZAwGQYJKoZIhvcNAQkDMQwG # CisGAQQBgjcCAQQwLwYJKoZIhvcNAQkEMSIEIL6ayUgnnzQT2yOK+bxVXEboFsE4 # pOkdlabqE9Mvo+t9MEIGCisGAQQBgjcCAQwxNDAyoBSAEgBNAGkAYwByAG8AcwBv # AGYAdKEagBhodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20wDQYJKoZIhvcNAQEBBQAE # ggEARXQfjlyG6Vh60rHeXau5nqJmZMM2Dy3aaYmHOOZlMuT699d3922xUkXOw2gl # 2kPIbEiFG2ijpMnNfmJnlLtGSx7UbOqC5cWYlv3W9O3AHXAAho4pR1b9AfbmaD4a # Di1ba/TZ6APjTPh92DHy2Swf7UdkIt0GF5JoMH0iFdSDRfukZcy1hiY4tMab++cQ # NTko+kbdVreXwtxuTNeZAya6KfjLikpX5GnhR6VLV+tJfSGo/3QFi76E2qsvE0en # fuWfWiHkIeI8hMcQQZDOWS01B/+eIUT15mylA7ey0cxAVgmNRNwiGDHofI7dY2Qs # dlXdSqhK6pS6SWlsK06mBDLflqGCF5QwgheQBgorBgEEAYI3AwMBMYIXgDCCF3wG # CSqGSIb3DQEHAqCCF20wghdpAgEDMQ8wDQYJYIZIAWUDBAIBBQAwggFSBgsqhkiG # 9w0BCRABBKCCAUEEggE9MIIBOQIBAQYKKwYBBAGEWQoDATAxMA0GCWCGSAFlAwQC # AQUABCB7P8NwXVDqDWf9F/n3wIhSwxaMfkFEmXNVXQyXSFMRbgIGaqpJfyGjGBMy # MDI2MDkxODIyNDkzMi4wODlaMASAAgH0oIHRpIHOMIHLMQswCQYDVQQGEwJVUzET # MBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMV # TWljcm9zb2Z0IENvcnBvcmF0aW9uMSUwIwYDVQQLExxNaWNyb3NvZnQgQW1lcmlj # YSBPcGVyYXRpb25zMScwJQYDVQQLEx5uU2hpZWxkIFRTUyBFU046MzcwMy0wNUUw # LUQ5NDcxJTAjBgNVBAMTHE1pY3Jvc29mdCBUaW1lLVN0YW1wIFNlcnZpY2WgghHq # MIIHIDCCBQigAwIBAgITMwAAAh86cGnkojAulQABAAACHzANBgkqhkiG9w0BAQsF # ADB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMH # UmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQD # Ex1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMDAeFw0yNjAyMTkxOTM5NTFa # Fw0yNzA1MTcxOTM5NTFaMIHLMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGlu # Z3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBv # cmF0aW9uMSUwIwYDVQQLExxNaWNyb3NvZnQgQW1lcmljYSBPcGVyYXRpb25zMScw # JQYDVQQLEx5uU2hpZWxkIFRTUyBFU046MzcwMy0wNUUwLUQ5NDcxJTAjBgNVBAMT # HE1pY3Jvc29mdCBUaW1lLVN0YW1wIFNlcnZpY2UwggIiMA0GCSqGSIb3DQEBAQUA # A4ICDwAwggIKAoICAQDLO8XFOcfGqAqgiz0+AmQmFl3dZ0aTG4UFJkqqNdMHy28D # aheCBs6ONufukye5x42CWkzgRIy9kE2VWwEntZ8ZkgyrykC0bIqsID7+6FxguseT # Xf1Vwvm1D8104VmetoBJlJ4uGbuyJZUvXDx55nVh50ygLTzZ24WkQsnPpvRZv2kP # c39f3bhLyHVtnHsa/W/86Vrftd+AfFveA+qN/EY+XGj5c/DPMXCYECb0arYb92dD # JWtwzpyBrp4gfHlgY1UEpc4l4AGELrf2J4wrxTzTW+SM8XhV1dOOPrYjD080IbZq # L8B+IF0RCdn269YXrGK6QIHipznKZcCS8jN30YAHnTJVN5Zzs6t/2YsqBGDquvDa # d7934FFTwzvUcO3VoIyd93XWwvP8/SCFVJh21W8oGQTptGHyly+Fl4henVMVZF1v # 6osOtirX8GFTiEhnf8nRdOg7yZYAJ0xy9CtDfbXaTn/cf3Lq3N/GCYKFjC+5mUCE # +AJhmxMuMdvSUGmKiAFdiPAjUTqsWWBBZJm0eCwgeGJFmmQA+V7/98BKcE+gUL7O # 9eWRDQwKeAcvo6rxNv2Y4jKrHA6Z/wi3a/fKUhLCNZES8qGdrpDAm7qh+6FjYxyt # AbkiKM6uTNy/ULPlwtlYZoAJDDQP7eYCywwVbNTbHXRBSS+NccC0sSB4W7U67wID # AQABo4IBSTCCAUUwHQYDVR0OBBYEFNk72sGDlH0r5DwvfGR5XwJI8B7bMB8GA1Ud # IwQYMBaAFJ+nFV0AXmJdg/Tl0mWnG1M1GelyMF8GA1UdHwRYMFYwVKBSoFCGTmh0 # dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvY3JsL01pY3Jvc29mdCUyMFRp # bWUtU3RhbXAlMjBQQ0ElMjAyMDEwKDEpLmNybDBsBggrBgEFBQcBAQRgMF4wXAYI # KwYBBQUHMAKGUGh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvY2VydHMv # TWljcm9zb2Z0JTIwVGltZS1TdGFtcCUyMFBDQSUyMDIwMTAoMSkuY3J0MAwGA1Ud # EwEB/wQCMAAwFgYDVR0lAQH/BAwwCgYIKwYBBQUHAwgwDgYDVR0PAQH/BAQDAgeA # MA0GCSqGSIb3DQEBCwUAA4ICAQBlbu3IoynnPz0K1iPbeNnsej2b15l5sdl2FAFB # BGT9lRdc2gNV8LAIusPYHHhUvRDcsx4lbMNhVKPGu4TDLaqNt/CI+SFtGuqdRLpV # P1XE9cCLyKrKPpcJFJCqPpV+efoAtYBmIUQcxxwT7WIQ7gag8+rkKvrMkCoRqKS0 # mKv8J1sKfi85+G2uhZ/1RteSVdYZOZOj+Sb4wzonTCTj7EtgMN/BX35W5dTzd7wJ # dGepYkVi871dSrC2Tr1ZFzAR7S44drCWZpJ6phJabVNOsNxFJKgSykugOGWzQ318 # Rr3MTPg2s3Bns+pUPVgMijd4bUOH2BlEsLMMwOcolTTZqg1HYrdY1jxpUAI9ipjB # QRINL/O705Z+/f2LjNmJQooCVJVX24adpZ519SsfazGoqXGt91bmqKo0fI09Il4s # UHh4ih6rpiQDBlyL7vmvCejwVxYevY4qVwTZ/o3gvl+R0lFxYS9feIM4NeG0+WsD # Z7jLci5MFeuNwosQY3z26Xg1oj0U9u+ncR9uTU+xBmJ8BtlCdhQ13RNMX5P+krRY # PB3XCp9Jm6XaO1995q32AIZm1mzBGI6yHlviXaEC5TzGiO1LXuPtXZU2X93oQJbM # oe3v8+5CPKrQalGWyYuh2a3V1pwbj+W0FEmEFPpu8TI+qYO1IIQWUSRvFjXth5Ob # 02hMMjCCB3EwggVZoAMCAQICEzMAAAAVxedrngKbSZkAAAAAABUwDQYJKoZIhvcN # AQELBQAwgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYD # VQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xMjAw # BgNVBAMTKU1pY3Jvc29mdCBSb290IENlcnRpZmljYXRlIEF1dGhvcml0eSAyMDEw # MB4XDTIxMDkzMDE4MjIyNVoXDTMwMDkzMDE4MzIyNVowfDELMAkGA1UEBhMCVVMx # EzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoT # FU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUt # U3RhbXAgUENBIDIwMTAwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDk # 4aZM57RyIQt5osvXJHm9DtWC0/3unAcH0qlsTnXIyjVX9gF/bErg4r25PhdgM/9c # T8dm95VTcVrifkpa/rg2Z4VGIwy1jRPPdzLAEBjoYH1qUoNEt6aORmsHFPPFdvWG # UNzBRMhxXFExN6AKOG6N7dcP2CZTfDlhAnrEqv1yaa8dq6z2Nr41JmTamDu6Gnsz # rYBbfowQHJ1S/rboYiXcag/PXfT+jlPP1uyFVk3v3byNpOORj7I5LFGc6XBpDco2 # LXCOMcg1KL3jtIckw+DJj361VI/c+gVVmG1oO5pGve2krnopN6zL64NF50ZuyjLV # wIYwXE8s4mKyzbnijYjklqwBSru+cakXW2dg3viSkR4dPf0gz3N9QZpGdc3EXzTd # EonW/aUgfX782Z5F37ZyL9t9X4C626p+Nuw2TPYrbqgSUei/BQOj0XOmTTd0lBw0 # gg/wEPK3Rxjtp+iZfD9M269ewvPV2HM9Q07BMzlMjgK8QmguEOqEUUbi0b1qGFph # AXPKZ6Je1yh2AuIzGHLXpyDwwvoSCtdjbwzJNmSLW6CmgyFdXzB0kZSU2LlQ+QuJ # YfM2BjUYhEfb3BvR/bLUHMVr9lxSUV0S2yW6r1AFemzFER1y7435UsSFF5PAPBXb # GjfHCBUYP3irRbb1Hode2o+eFnJpxq57t7c+auIurQIDAQABo4IB3TCCAdkwEgYJ # KwYBBAGCNxUBBAUCAwEAATAjBgkrBgEEAYI3FQIEFgQUKqdS/mTEmr6CkTxGNSnP # EP8vBO4wHQYDVR0OBBYEFJ+nFV0AXmJdg/Tl0mWnG1M1GelyMFwGA1UdIARVMFMw # UQYMKwYBBAGCN0yDfQEBMEEwPwYIKwYBBQUHAgEWM2h0dHA6Ly93d3cubWljcm9z # b2Z0LmNvbS9wa2lvcHMvRG9jcy9SZXBvc2l0b3J5Lmh0bTATBgNVHSUEDDAKBggr # BgEFBQcDCDAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMAQTALBgNVHQ8EBAMCAYYw # DwYDVR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBTV9lbLj+iiXGJo0T2UkFvXzpoY # xDBWBgNVHR8ETzBNMEugSaBHhkVodHRwOi8vY3JsLm1pY3Jvc29mdC5jb20vcGtp # L2NybC9wcm9kdWN0cy9NaWNSb29DZXJBdXRfMjAxMC0wNi0yMy5jcmwwWgYIKwYB # BQUHAQEETjBMMEoGCCsGAQUFBzAChj5odHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20v # cGtpL2NlcnRzL01pY1Jvb0NlckF1dF8yMDEwLTA2LTIzLmNydDANBgkqhkiG9w0B # AQsFAAOCAgEAnVV9/Cqt4SwfZwExJFvhnnJL/Klv6lwUtj5OR2R4sQaTlz0xM7U5 # 18JxNj/aZGx80HU5bbsPMeTCj/ts0aGUGCLu6WZnOlNN3Zi6th542DYunKmCVgAD # sAW+iehp4LoJ7nvfam++Kctu2D9IdQHZGN5tggz1bSNU5HhTdSRXud2f8449xvNo # 32X2pFaq95W2KFUn0CS9QKC/GbYSEhFdPSfgQJY4rPf5KYnDvBewVIVCs/wMnosZ # iefwC2qBwoEZQhlSdYo2wh3DYXMuLGt7bj8sCXgU6ZGyqVvfSaN0DLzskYDSPeZK # PmY7T7uG+jIa2Zb0j/aRAfbOxnT99kxybxCrdTDFNLB62FD+CljdQDzHVG2dY3RI # LLFORy3BFARxv2T5JL5zbcqOCb2zAVdJVGTZc9d/HltEAY5aGZFrDZ+kKNxnGSgk # ujhLmm77IVRrakURR6nxt67I6IleT53S0Ex2tVdUCbFpAUR+fKFhbHP+CrvsQWY9 # af3LwUFJfn6Tvsv4O+S3Fb+0zj6lMVGEvL8CwYKiexcdFYmNcP7ntdAoGokLjzba # ukz5m/8K6TT4JDVnK+ANuOaMmdbhIurwJ0I9JZTmdHRbatGePu1+oDEzfbzL6Xu/ # OHBE0ZDxyKs6ijoIYn/ZcGNTTY3ugm2lBRDBcQZqELQdVTNYs6FwZvKhggNNMIIC # NQIBATCB+aGB0aSBzjCByzELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0 # b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3Jh # dGlvbjElMCMGA1UECxMcTWljcm9zb2Z0IEFtZXJpY2EgT3BlcmF0aW9uczEnMCUG # A1UECxMeblNoaWVsZCBUU1MgRVNOOjM3MDMtMDVFMC1EOTQ3MSUwIwYDVQQDExxN # aWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2aWNloiMKAQEwBwYFKw4DAhoDFQBLIMg1 # P7sNuCXpmbH2IXT2tXeEEKCBgzCBgKR+MHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQI # EwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3Nv # ZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBD # QSAyMDEwMA0GCSqGSIb3DQEBCwUAAgUA7lgTRTAiGA8yMDI2MDkxODE5NDUwOVoY # DzIwMjYwOTE5MTk0NTA5WjB0MDoGCisGAQQBhFkKBAExLDAqMAoCBQDuWBNFAgEA # MAcCAQACAg0/MAcCAQACAhPiMAoCBQDuWWTFAgEAMDYGCisGAQQBhFkKBAIxKDAm # MAwGCisGAQQBhFkKAwKgCjAIAgEAAgMHoSChCjAIAgEAAgMBhqAwDQYJKoZIhvcN # AQELBQADggEBAClChN4CXGPbVri7YkgeNWinWjHdKaCfPk7pCtSq8tjW48B30/i2 # BDMEOt1MsjxqtinmyB21H8sVd5xOsXK/5V5d4fuXCjRb7NlfUg67REdiZwsSxt1s # Cj0WIuWZLn+odPgjo0IPo7jmo0ylKyu5LOTKSHo2LbD+1EEQZULtx53XpJV1kkq7 # eGlJ36ZFssD6SopIE9dTlcs1YF1zl/Jfert+Vz7fJXzvIxqtmT4kUpGGAkZ8NN0r # +k8G3FUuK55y+cLbPkBBAR7M8wTctRREDV+yPZb9JElG3pBG0Qcpaf6SBs6LQ1x7 # hxlwnrkwSrb0FtDxvEmSVB4KIbO/rYeGOOMxggQNMIIECQIBATCBkzB8MQswCQYD # VQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEe # MBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3Nv # ZnQgVGltZS1TdGFtcCBQQ0EgMjAxMAITMwAAAh86cGnkojAulQABAAACHzANBglg # hkgBZQMEAgEFAKCCAUowGgYJKoZIhvcNAQkDMQ0GCyqGSIb3DQEJEAEEMC8GCSqG # SIb3DQEJBDEiBCD7qYiePIGyQ0ZXo5+o1/qgxV6ZDc8XGCpYzGskDGDPRDCB+gYL # KoZIhvcNAQkQAi8xgeowgecwgeQwgb0EILAkCt9WkCsMtURkFu6TY0P3UXdRnCiY # uPZhe3ykLfwUMIGYMIGApH4wfDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hp # bmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jw # b3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTAC # EzMAAAIfOnBp5KIwLpUAAQAAAh8wIgQg2D0kiyhoB7brulMXwTEZT64GIN+Ccb6+ # yksI8krE9mEwDQYJKoZIhvcNAQELBQAEggIARofkIXkY6Ghst9hWVuSezwLvP3Xa # T365jezOEEMgPI5N8qEI4barWsklT+lyv3JuPx34TUVxn8Yoi0PnKV5EC55PHWri # PQkBLTPGlEoPBDSmvAlXZXfG0gfAy7i8uoEzB5467tkOjA8JIljPJxWGpGj2s6tY # FgzMHBk8ogHCHLNzNvnkE8qer+Orlh6t+1D7cuLY/0Ikafjv/b05uXcqHyr1Jzwv # yqj4jumSCYqWJf3URivOsTcu3x1rix58ydtqcMgjEWjEMW0uJV/CS1pBswi6MRSa # wQDM2bTXzP7O4kREU6Dr9pxpG3LNMh3NjzSzE1mFc4k5f5jIVIJ5PbHHhxbaIfn/ # Ra8Xg7DhsMQhGXbKUpbvldSTLNtBcsOjOrUetn5hY62F44oEUhJ5PDGLtbXqNZR9 # JVow85k/tXifJkYm0+Mk35oudGtaWIMJqo4mcOW9JwVu0BpVDaWrM1WiAwnFD/W8 # ARyt9kvuAPhTsa+ZRWx/dmLPfZUzjpJ+tuxcAPsbRdtaWyaoP5lX7n0Truy0alic # p45utAGgv0AE5Y0o7rZQyYi3UWTyVLVZGzxSFJ+LoRr0deUoUcrMFQjyP4phuYfm # 6qtBGnUxBImRVdAl635XVC/x27a/gT0tsu7bp4VWK5yQJ3G24ek4RcF5BTcvC2fV # JM7+E2uVYdR04zk= # SIG # End signature block |