Private/Tests/Get-AvmBicepCiParameter.ps1

function Get-AvmBicepCiParameter {
    [CmdletBinding()]
    [OutputType([hashtable])]
    param(
        [Parameter(Mandatory)]
        [AllowEmptyCollection()]
        [System.Collections.IDictionary] $TemplateParameters,

        [System.Collections.IDictionary] $TemplateDefinitions = @{},

        [System.Collections.IDictionary] $Variables = @{},

        [System.Collections.IDictionary] $Secrets = @{},

        [string] $KeyVaultName
    )

    Set-StrictMode -Version 3.0
    $ErrorActionPreference = 'Stop'

    $names = [System.Collections.Generic.Dictionary[string, string]]::new(
        [System.StringComparer]::OrdinalIgnoreCase)
    foreach ($name in $TemplateParameters.psbase.Keys) {
        if ($name -isnot [string] -or [string]::IsNullOrWhiteSpace($name) -or
            -not $names.TryAdd($name, $name)) {
            throw [AvmConfigurationException]::new('Template parameter names must be distinct, nonempty strings ignoring case.')
        }
    }
    $selected = @{}
    foreach ($source in @(
            @{ Name = 'variables'; Values = $Variables; Secret = $false }
            @{ Name = 'secrets'; Values = $Secrets; Secret = $true }
        )) {
        $aliases = @{}
        foreach ($key in $source.Values.psbase.Keys) {
            if ($key -isnot [string] -or $key -ieq 'CI_KEY_VAULT_NAME') { continue }
            $name = if ($key.StartsWith('CI__', [System.StringComparison]::OrdinalIgnoreCase)) {
                $key.Substring(4)
            }
            elseif ($key.StartsWith('CI_', [System.StringComparison]::OrdinalIgnoreCase)) {
                $key.Substring(3).Replace('_', '')
            }
            else { continue }
            if (-not $names.ContainsKey($name)) { continue }
            $name = $names[$name]
            if (-not $aliases.ContainsKey($name)) { $aliases[$name] = @() }
            $aliases[$name] += $key
        }
        foreach ($name in $aliases.psbase.Keys) {
            $preferred = @($aliases[$name] | Where-Object {
                    -not $_.StartsWith('CI__', [System.StringComparison]::OrdinalIgnoreCase)
                })
            if ($preferred.Count -eq 0) { $preferred = @($aliases[$name]) }
            if ($preferred.Count -ne 1) {
                throw [AvmConfigurationException]::new(
                    "Multiple CI $($source.Name) names in the preferred prefix target parameter '$name'.")
            }
            $selected[$name] = @{
                Name   = $preferred[0]
                Value  = $source.Values[$preferred[0]]
                Secret = $source.Secret
            }
        }
    }
    $result = @{}
    foreach ($name in $selected.psbase.Keys) {
        $entry = $selected[$name]
        $value = $entry.Value
        if ($value -isnot [string]) {
            throw [AvmConfigurationException]::new("CI value for parameter '$name' must be a string.")
        }
        $definition = $TemplateParameters[$name]
        $visited = [System.Collections.Generic.HashSet[string]]::new([System.StringComparer]::Ordinal)
        while ($definition -is [System.Collections.IDictionary] -and
            -not $definition['type'] -and $definition.Contains('$ref')) {
            $reference = $definition['$ref']
            if ($reference -isnot [string] -or
                -not $reference.StartsWith('#/definitions/', [System.StringComparison]::Ordinal)) {
                throw [AvmConfigurationException]::new("Parameter '$name' has an unsupported type reference.")
            }
            $typeName = $reference.Substring('#/definitions/'.Length).Replace('~1', '/').Replace('~0', '~')
            if (-not $visited.Add($typeName) -or -not $TemplateDefinitions.Contains($typeName)) {
                throw [AvmConfigurationException]::new("Parameter '$name' has an unresolved or circular type reference.")
            }
            $definition = $TemplateDefinitions[$typeName]
        }
        $type = Get-AvmPropertyValue -InputObject $definition -Name 'type'
        if ($entry.Secret -and $type -notin @('secureString', 'secureObject')) {
            Write-AvmLog -Level Warning -Message "CI secret '$($entry.Name)' targets non-secure parameter '$name'."
        }
        switch ($type) {
            'string' { $result[$name] = $value }
            'secureString' {
                $secureValue = [System.Security.SecureString]::new()
                foreach ($character in $value.ToCharArray()) { $secureValue.AppendChar($character) }
                $secureValue.MakeReadOnly()
                $result[$name] = $secureValue
            }
            { $_ -in @('int', 'bool', 'array', 'object', 'secureObject') } {
                try {
                    $converted = ConvertFrom-Json -InputObject $value -AsHashtable -NoEnumerate -ErrorAction Stop
                }
                catch [System.ArgumentException] {
                    throw [AvmConfigurationException]::new("CI parameter '$name' must be JSON of type '$type'.")
                }
                $valid = switch ($type) {
                    'int' { $converted -is [int] -or $converted -is [long] }
                    'bool' { $converted -is [bool] }
                    'array' { $converted -is [array] }
                    default { $converted -is [System.Collections.IDictionary] }
                }
                if (-not $valid) {
                    throw [AvmConfigurationException]::new("CI parameter '$name' must be JSON of type '$type'.")
                }
                $result[$name] = $converted
            }
            default {
                throw [AvmConfigurationException]::new("Parameter '$name' has an unsupported CI parameter type.")
            }
        }
    }
    if (-not [string]::IsNullOrWhiteSpace($KeyVaultName) -and
        $result.psbase.Count -lt $names.Count) {
        Write-AvmLog -Level Warning -Message 'CI Key Vault inputs are deprecated; prefer CI-prefixed variables or secrets.'
        foreach ($secret in Get-AzKeyVaultSecret -VaultName $KeyVaultName -ErrorAction Stop) {
            if ($secret.Name -notmatch '^CI-.+') { continue }
            $name = $secret.Name.Substring(3)
            if (-not $names.ContainsKey($name) -or $result.ContainsKey($name)) { continue }
            $value = Get-AzKeyVaultSecret -VaultName $KeyVaultName -Name $secret.Name -ErrorAction Stop
            if ($value.SecretValue -isnot [System.Security.SecureString]) {
                throw [AvmProcessException]::new("Key Vault did not return a secure value for CI parameter '$name'.")
            }
            $result[$names[$name]] = $value.SecretValue
        }
    }
    return $result
}

# SIG # Begin signature block
# MIInNQYJKoZIhvcNAQcCoIInJjCCJyICAQExDzANBglghkgBZQMEAgEFADB5Bgor
# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG
# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCANlnah4/jx+YCy
# 7ylJAJdUbTIC9gEj06sCZPsnuUNYiaCCDMkwggYEMIID7KADAgECAhMzAAACHPrN
# xZvoL37EAAAAAAIcMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMR4wHAYD
# VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBD
# b2RlIFNpZ25pbmcgUENBIDIwMjQwHhcNMjYwNDE2MTg1OTQxWhcNMjcwNDE1MTg1
# OTQxWjB0MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE
# BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYD
# VQQDExVNaWNyb3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IB
# DwAwggEKAoIBAQDVsZfgOKmM31HPfoWOoNEiw0SlCiIxUMC0I9NMWbucKOw/e9lP
# oAoehQVu6SG65V4EPzrYsnBnFPNoi4/HoOdjhz1qkrEt4I6tEcxXU6oOeY9zGveC
# /3iBeuhLYxM3M/PkcUoebF+Nednm8OkdSPoDu8imViHPQq/8CQUu0WRR4rE+dMRf
# rpVqfmNi2qWCX94T4MsepijGVkwE//tJg0ryAiYdHT34LSnlG/RSBZmQRGWZ5g8j
# qnKjRParSqMft1gvjuUTVgtWNZfgcLFSK5Wa0myrq8OPcgTGGsRgun+tnSS+IxDT
# xVsAPH1OzvPjwomguByhUe/OcvUN0D5Wmp7xAgMBAAGjggGqMIIBpjAOBgNVHQ8B
# Af8EBAMCB4AwHwYDVR0lBBgwFgYKKwYBBAGCN0wIAQYIKwYBBQUHAwMwHQYDVR0O
# BBYEFNoH7a2YDjOSwpkp6DHcmUS7J+0yMFQGA1UdEQRNMEukSTBHMS0wKwYDVQQL
# EyRNaWNyb3NvZnQgSXJlbGFuZCBPcGVyYXRpb25zIExpbWl0ZWQxFjAUBgNVBAUT
# DTIzMDAxMis1MDc1NjkwHwYDVR0jBBgwFoAUf1k/VCHarU/vBeXmo9ctBpQSCDEw
# YAYDVR0fBFkwVzBVoFOgUYZPaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9w
# cy9jcmwvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNy
# bDBtBggrBgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUWh0dHA6Ly93d3cubWljcm9z
# b2Z0LmNvbS9wa2lvcHMvY2VydHMvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmcl
# MjBQQ0ElMjAyMDI0LmNydDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4IC
# AQAUnEqhaRXe0T3hIJjvdQErEkrA/7bByjn6t5IArODkkRjzkYwtKMc2yYj2quaN
# rLutWw2YZcngKPy1b71YyDJQTy4NDRwaSh9Tw5thrk3NmcPrAHia5vtcBJ1CgtKK
# 7mQbIcQ22d/N3813ayCDDFewu1+jsZmX+r/aTEqaOM4TVxVtRSkuCy8nAXKuChOK
# Li/zA4XuH8iEYqIsj2YoNaeSxVmeGiERXpKdo3dDmYi0kO5w2D8VS4c3+9h6gElY
# BaAAg/dYErBg27qT3vv0zRDJhJufvCNylA8S7/+8H5E/PV5cng6na9VV/w9OV3qu
# uND6zdGa2EX38Glp50F9AIQk3p2xXmcvorDeM4XJ7UlWYBi6g80J1SSOQnInCYFE
# msfUNn3+1AaTJKSJL83quKArTac2pKhu0Yzzzrzo6HrsRiQKzpnRBb1/dMa6P3hz
# 75XbMRBctNsFhZC07WCmjExdLg2eHW5uV0TY8D5+6wozJf7vF3+WHkYPO85Z+BC6
# U4FkNbYNycZ9cE4j1tXRdyDCfml6c0HWPHjNVDObrv9lKt3qUqFpX38VCqVCyNOO
# 1UcXfQiVjJw32U2WUKZjt/neJKHEBsm9kFsLuWzkQ53+qcaSaytmsCnk2gOglrlD
# 5d3kKyvvAw+rzm0lT8K38P6PLxfZQHhu4W8dV7Av8N2ZmDCCBr0wggSloAMCAQIC
# EzMAAAA5O7Y3Gb8GHWcAAAAAADkwDQYJKoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYT
# AlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYD
# VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBS
# b290IENlcnRpZmljYXRlIEF1dGhvcml0eSAyMDExMB4XDTI0MDgwODIwNTQxOFoX
# DTM2MDMyMjIyMTMwNFowVzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFU1pY3Jvc29m
# dCBDb3Jwb3JhdGlvbjEoMCYGA1UEAxMfTWljcm9zb2Z0IENvZGUgU2lnbmluZyBQ
# Q0EgMjAyNDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANgBnB7jOMeq
# lRYHNa265v4IY9fH8TKhemHfPINe1gpLaV3dhg324WwH06LcHbpnsBukCDNitryo
# 0dtS/EW6I/yEL/bLSY8hKpbfQuWusBPr9qazYcDxCW/qnjb5JsI1s8bNOg3bVATv
# QVL4tcf03aTycsz8QeCdM0l/yHRObJ9QqazM1r6VPEOJ7LL+uEEb73w6QCuhs89a
# 1uv1zerOYMnsneRRwCbpyW11IcggU0cRKDDq1pjVJzIbIF6+oiXXbReOsgeI8zu1
# FyQfK0fVkaya8SmVHQ/tOf23mZ4W9k0Ri22QW9p3UgSC5OUDktKxxcCmGL6tXLfO
# GSWHIIV4YrTJTT6PNty5REojHJuZHArkF9VnHTERWoTjAzfI3kP+5b4alUdhgAZ7
# ttOu1bVnXfHaqPYl2rPs20ji03LOVWsh/radgE17es5hL+t6lV0eVHrVhsssROWJ
# uz2MXMCt7iw7lFPG9LXKGjsmonn2gotGdHIuEg5JnJMJVmixd5LRlkmgYRZKzhxS
# CwyoGIq0PhaA7Y+VPct5pCHkijcIIDm0nlkK+0KyepolcqGm0T/GYQRMhHJlGOOm
# VQop36wUVUYklUy++vDWeEgEo4s7hxN6mIbf2MSIQ/iIfMZgJxC69oukMUXCrOC3
# SkE/xIkgpfl22MM1itkZ35nNXkMolU1lAgMBAAGjggFOMIIBSjAOBgNVHQ8BAf8E
# BAMCAYYwEAYJKwYBBAGCNxUBBAMCAQAwHQYDVR0OBBYEFH9ZP1Qh2q1P7wXl5qPX
# LQaUEggxMBkGCSsGAQQBgjcUAgQMHgoAUwB1AGIAQwBBMA8GA1UdEwEB/wQFMAMB
# Af8wHwYDVR0jBBgwFoAUci06AjGQQ7kUBU7h6qfHMdEjiTQwWgYDVR0fBFMwUTBP
# oE2gS4ZJaHR0cDovL2NybC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMv
# TWljUm9vQ2VyQXV0MjAxMV8yMDExXzAzXzIyLmNybDBeBggrBgEFBQcBAQRSMFAw
# TgYIKwYBBQUHMAKGQmh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvY2VydHMv
# TWljUm9vQ2VyQXV0MjAxMV8yMDExXzAzXzIyLmNydDANBgkqhkiG9w0BAQwFAAOC
# AgEAFJQfOChP7onn6fLIMKrSlN1WYKwDFgAddymOUO3FrM8d7B/W/iQ6DxXsDn7D
# 5W4wMwYeLystcEqfkjz4NURRgazyMu5yRzQh4LqjA4tStTcJh1opExo7nn5PuPBY
# nbu0+THSuVHTe0VTTPVhily/piFrDo3axQ9P4C+Ol5yet+2gTfekICS5xS+cYfSI
# vgn0JksVBVMYVI5QFu/qhnLhsEFEUzG8fvv0hjgkO+lkpV9ty6GkN4vdnd7ya6Q6
# aR9y34aiM1qmxaxBi6OUnyNl6fkuun/diTFnYDLTppOkr/mg5WSfCiDVMNCxtj4w
# PKC5OmHm1DQIt/MNokbbH3UGsFP1QbzsLocuSqLCvH09Io3fDPTmscR9Y75G4qX7
# RTX8AdBPo0I6OEojf39zuFZt0qOHm65YWQE69cZM2ueE1MB05dNNgHK9gTE7zKvK
# /fg8B2qjW88MT/WF5V5uvZGtqa9FSL2RazArA+rDPuf6JGYz4HpgMZHB4S6szWSK
# YBv0VisCzfxgeU+dquXW9bd0auYlOB58DPcOYKdc3Se94g+xL4pcEhbB54JOgAkw
# YTu/9dLeH2pDqeJZAABVDWRQCaXfO5LgyKwKCLYXpigrZYCjUSBcr+Ve8PFWMhVT
# Ql0v4q8J/AUmQN5W4n101cY2L4A7GTQG1h32HHAvfQESWP0xghnCMIIZvgIBATBu
# MFcxCzAJBgNVBAYTAlVTMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24x
# KDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMjQCEzMAAAIc
# +s3Fm+gvfsQAAAAAAhwwDQYJYIZIAWUDBAIBBQCggZAwGQYJKoZIhvcNAQkDMQwG
# CisGAQQBgjcCAQQwLwYJKoZIhvcNAQkEMSIEIK9HbxvzIa7rLhFeiX2l27P8S1Y/
# JckArXO7/utn7df6MEIGCisGAQQBgjcCAQwxNDAyoBSAEgBNAGkAYwByAG8AcwBv
# AGYAdKEagBhodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20wDQYJKoZIhvcNAQEBBQAE
# ggEAsrOQchH1HPYfE23BAiWL3kcaFyKp329IscX6Q24a0y7vQjxO2tgvRdl5s0Gd
# f4n4YQEu0hs8nU52WZRDL3vJQCRGx1mvL1M7OMm0lWqomSDogQZpvY1Q4HORIX0a
# CVbRxVXNNQtit9FGaoOdToe/YRNIA3phoIGdZ8ug71+KHblLSg8+13iX2Ln+Ifyl
# 5boIryFbr4Eugvg5TKNEZ8WxtMfHOc9DENdxNUmFKPwzX0IAaX+Pgj+IjVZOa/ky
# L4yRmOLhQfqreSKaUwwlR86j2FfWUk314oY5CDRx6zZP6nKAIGXCX3QNKXiFliHQ
# cjzyOx3Ckq+AGs7lYzeE4sq6AKGCF5IwgheOBgorBgEEAYI3AwMBMYIXfjCCF3oG
# CSqGSIb3DQEHAqCCF2swghdnAgEDMQ8wDQYJYIZIAWUDBAIBBQAwggFQBgsqhkiG
# 9w0BCRABBKCCAT8EggE7MIIBNwIBAQYKKwYBBAGEWQoDATAxMA0GCWCGSAFlAwQC
# AQUABCCdjd/jELXFQGLezRrOj5fxmzjakEpUBxYU/bvHHzm2RAIGaqnQ8oaFGBEy
# MDI2MTAwNjIyMzQwOS4zWjAEgAIB9KCB0aSBzjCByzELMAkGA1UEBhMCVVMxEzAR
# BgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1p
# Y3Jvc29mdCBDb3Jwb3JhdGlvbjElMCMGA1UECxMcTWljcm9zb2Z0IEFtZXJpY2Eg
# T3BlcmF0aW9uczEnMCUGA1UECxMeblNoaWVsZCBUU1MgRVNOOkRDMDAtMDVFMC1E
# OTQ3MSUwIwYDVQQDExxNaWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2aWNloIIR6jCC
# ByAwggUIoAMCAQICEzMAAAIkO4QhsCysZCIAAQAAAiQwDQYJKoZIhvcNAQELBQAw
# fDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1Jl
# ZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMd
# TWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTAwHhcNMjYwMjE5MTkzOTU5WhcN
# MjcwNTE3MTkzOTU5WjCByzELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0
# b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3Jh
# dGlvbjElMCMGA1UECxMcTWljcm9zb2Z0IEFtZXJpY2EgT3BlcmF0aW9uczEnMCUG
# A1UECxMeblNoaWVsZCBUU1MgRVNOOkRDMDAtMDVFMC1EOTQ3MSUwIwYDVQQDExxN
# aWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2aWNlMIICIjANBgkqhkiG9w0BAQEFAAOC
# Ag8AMIICCgKCAgEAo+lt1GkNma+ITb0su4+1DDxVcrO2hMRgfiRcMpM814N42smJ
# vYDi1ye7TYVNnpoay0AjmXIC78+hZKpoIc0Mc5pICrS2IimhM4aIDv3HtJU4XSzX
# VbTMEDmIKPl7VwGXFYgV+C3B5N/EbrGYhe8MUmubfy8YnNOPmf4ZctYCUKSHhQ6q
# eGvT7i7fK7Hx9Ob1vaVPbq4hnQ8XyV5/5XOPQsW16gNxF9ey9uG3OrfphbjwwCSi
# qWot116hdpyZaUz33awNvbFk0jSooPQrQQubc0I9H5W7Gv+MKjvbvkZLsKWW92+6
# p1uRXRaw0db0Jl345clD/WTt/PN/TcEroh7b7BQjZEzSF/Di+V1atZ7Csrv/xniG
# fWLsbHywXnahtNuDwxEcqwLNKb31Fji2qVUGoxz6Ap7jUir2xIe7OSENGILqRo4v
# h+6yA8dv5iBCPukPFsAbZN2McoY49Bl8PdPYtBJE5FcsvtcgA48EgvG8NqjOPjHO
# IcsrZWc0nNCD1AatWBp2MAoyMGuf5TFtKRZ/x6SXQel3jLk7WEzqWj6KOuBY0K8i
# 11o3eKL6cOZTsO1/r9xPZMDfVQQvsCREgRAgtYGTAkuU2lcHxNcOKZ1129ak/W44
# EbD4OHZJa7lE3aJ/90jbdGtEOTXNlJfqzJUMV6D/YrF8DDZyjuSSZKkQ0VUCAwEA
# AaOCAUkwggFFMB0GA1UdDgQWBBRzH5F9bv8ySwjHtIKmIrcdbQB3qDAfBgNVHSME
# GDAWgBSfpxVdAF5iXYP05dJlpxtTNRnpcjBfBgNVHR8EWDBWMFSgUqBQhk5odHRw
# Oi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2NybC9NaWNyb3NvZnQlMjBUaW1l
# LVN0YW1wJTIwUENBJTIwMjAxMCgxKS5jcmwwbAYIKwYBBQUHAQEEYDBeMFwGCCsG
# AQUFBzAChlBodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2NlcnRzL01p
# Y3Jvc29mdCUyMFRpbWUtU3RhbXAlMjBQQ0ElMjAyMDEwKDEpLmNydDAMBgNVHRMB
# Af8EAjAAMBYGA1UdJQEB/wQMMAoGCCsGAQUFBwMIMA4GA1UdDwEB/wQEAwIHgDAN
# BgkqhkiG9w0BAQsFAAOCAgEAPsB0m5oSKTPAkVWeLZOtuIUPi3WVxOKqHkLou+wn
# jWt46tRTs4uzESpJKOnYhAx1zzVrwGoMWrLQnsD85uUwjYdbOKgh4eEdhv6+PMFP
# zKXOvP1g5icuQiEJ/xcKbNbGzVBLuwc4NNOKlCyFSfet46P2puMcCoMIfr0lS+/3
# YbH0+3b4aUXXW2C0Ex2YMLjQekIXBBLIKIC1cDUY9+1RFmQ4sKDHccgu2GK0LujA
# lbYsx5zrZEl+xaiKIuo5XH6n6Otfbgx/a/JNqgDhwnhAKilyspiFwzHBhpRHQxW2
# Ig2YDwgTNCB4AHopVEqJ9O8Ix7tHtLLAZrQWnz2+BnfuRbkZ1ht1xnvdTQqSyqph
# Wv+BpFc/TjM2VIPKHM8Qv+CU9x3+OSRLbM06F8DbJFdyTQnLtiCLa+kiR5otxA1Q
# Aw0UjYXcxUaWJqZRhJT5eRkaD7SYgxL0SG7+TBSiMNsfYJ3oX+SLwYwuGZAYPuBk
# 6ahhN5pp8xd5yHpDpF+LoNP9Jjdgkmq4bkovTZhyDqVDdnkB1LYE2//hpqu4JLQj
# MCKvyTgmCIk2Kqb9aG4wBinVjDwq5UsjQLNI2WM5IWud+defDTMfsARr7HxaFbAj
# BuTnKer1ugl8rlkW1FajFNTq0Gx33csyaW4SQtT2wGSMiQmzflQYA0wM0ymPMOCE
# ksEwggdxMIIFWaADAgECAhMzAAAAFcXna54Cm0mZAAAAAAAVMA0GCSqGSIb3DQEB
# CwUAMIGIMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE
# BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMTIwMAYD
# VQQDEylNaWNyb3NvZnQgUm9vdCBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgMjAxMDAe
# Fw0yMTA5MzAxODIyMjVaFw0zMDA5MzAxODMyMjVaMHwxCzAJBgNVBAYTAlVTMRMw
# EQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVN
# aWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0
# YW1wIFBDQSAyMDEwMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA5OGm
# TOe0ciELeaLL1yR5vQ7VgtP97pwHB9KpbE51yMo1V/YBf2xK4OK9uT4XYDP/XE/H
# ZveVU3Fa4n5KWv64NmeFRiMMtY0Tz3cywBAY6GB9alKDRLemjkZrBxTzxXb1hlDc
# wUTIcVxRMTegCjhuje3XD9gmU3w5YQJ6xKr9cmmvHaus9ja+NSZk2pg7uhp7M62A
# W36MEBydUv626GIl3GoPz130/o5Tz9bshVZN7928jaTjkY+yOSxRnOlwaQ3KNi1w
# jjHINSi947SHJMPgyY9+tVSP3PoFVZhtaDuaRr3tpK56KTesy+uDRedGbsoy1cCG
# MFxPLOJiss254o2I5JasAUq7vnGpF1tnYN74kpEeHT39IM9zfUGaRnXNxF803RKJ
# 1v2lIH1+/NmeRd+2ci/bfV+AutuqfjbsNkz2K26oElHovwUDo9Fzpk03dJQcNIIP
# 8BDyt0cY7afomXw/TNuvXsLz1dhzPUNOwTM5TI4CvEJoLhDqhFFG4tG9ahhaYQFz
# ymeiXtcodgLiMxhy16cg8ML6EgrXY28MyTZki1ugpoMhXV8wdJGUlNi5UPkLiWHz
# NgY1GIRH29wb0f2y1BzFa/ZcUlFdEtsluq9QBXpsxREdcu+N+VLEhReTwDwV2xo3
# xwgVGD94q0W29R6HXtqPnhZyacaue7e3PmriLq0CAwEAAaOCAd0wggHZMBIGCSsG
# AQQBgjcVAQQFAgMBAAEwIwYJKwYBBAGCNxUCBBYEFCqnUv5kxJq+gpE8RjUpzxD/
# LwTuMB0GA1UdDgQWBBSfpxVdAF5iXYP05dJlpxtTNRnpcjBcBgNVHSAEVTBTMFEG
# DCsGAQQBgjdMg30BATBBMD8GCCsGAQUFBwIBFjNodHRwOi8vd3d3Lm1pY3Jvc29m
# dC5jb20vcGtpb3BzL0RvY3MvUmVwb3NpdG9yeS5odG0wEwYDVR0lBAwwCgYIKwYB
# BQUHAwgwGQYJKwYBBAGCNxQCBAweCgBTAHUAYgBDAEEwCwYDVR0PBAQDAgGGMA8G
# A1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAU1fZWy4/oolxiaNE9lJBb186aGMQw
# VgYDVR0fBE8wTTBLoEmgR4ZFaHR0cDovL2NybC5taWNyb3NvZnQuY29tL3BraS9j
# cmwvcHJvZHVjdHMvTWljUm9vQ2VyQXV0XzIwMTAtMDYtMjMuY3JsMFoGCCsGAQUF
# BwEBBE4wTDBKBggrBgEFBQcwAoY+aHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3Br
# aS9jZXJ0cy9NaWNSb29DZXJBdXRfMjAxMC0wNi0yMy5jcnQwDQYJKoZIhvcNAQEL
# BQADggIBAJ1VffwqreEsH2cBMSRb4Z5yS/ypb+pcFLY+TkdkeLEGk5c9MTO1OdfC
# cTY/2mRsfNB1OW27DzHkwo/7bNGhlBgi7ulmZzpTTd2YurYeeNg2LpypglYAA7AF
# vonoaeC6Ce5732pvvinLbtg/SHUB2RjebYIM9W0jVOR4U3UkV7ndn/OOPcbzaN9l
# 9qRWqveVtihVJ9AkvUCgvxm2EhIRXT0n4ECWOKz3+SmJw7wXsFSFQrP8DJ6LGYnn
# 8AtqgcKBGUIZUnWKNsIdw2FzLixre24/LAl4FOmRsqlb30mjdAy87JGA0j3mSj5m
# O0+7hvoyGtmW9I/2kQH2zsZ0/fZMcm8Qq3UwxTSwethQ/gpY3UA8x1RtnWN0SCyx
# TkctwRQEcb9k+SS+c23Kjgm9swFXSVRk2XPXfx5bRAGOWhmRaw2fpCjcZxkoJLo4
# S5pu+yFUa2pFEUep8beuyOiJXk+d0tBMdrVXVAmxaQFEfnyhYWxz/gq77EFmPWn9
# y8FBSX5+k77L+DvktxW/tM4+pTFRhLy/AsGConsXHRWJjXD+57XQKBqJC4822rpM
# +Zv/Cuk0+CQ1ZyvgDbjmjJnW4SLq8CdCPSWU5nR0W2rRnj7tfqAxM328y+l7vzhw
# RNGQ8cirOoo6CGJ/2XBjU02N7oJtpQUQwXEGahC0HVUzWLOhcGbyoYIDTTCCAjUC
# AQEwgfmhgdGkgc4wgcsxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9u
# MRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRp
# b24xJTAjBgNVBAsTHE1pY3Jvc29mdCBBbWVyaWNhIE9wZXJhdGlvbnMxJzAlBgNV
# BAsTHm5TaGllbGQgVFNTIEVTTjpEQzAwLTA1RTAtRDk0NzElMCMGA1UEAxMcTWlj
# cm9zb2Z0IFRpbWUtU3RhbXAgU2VydmljZaIjCgEBMAcGBSsOAwIaAxUApgjx25rH
# gEn3v/2xrV/XkBvtPuOggYMwgYCkfjB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMK
# V2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0
# IENvcnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0Eg
# MjAxMDANBgkqhkiG9w0BAQsFAAIFAO5uqiIwIhgPMjAyNjEwMDUyMjU4NDJaGA8y
# MDI2MTAwNjIyNTg0MlowdDA6BgorBgEEAYRZCgQBMSwwKjAKAgUA7m6qIgIBADAH
# AgEAAgISDzAHAgEAAgISVzAKAgUA7m/7ogIBADA2BgorBgEEAYRZCgQCMSgwJjAM
# BgorBgEEAYRZCgMCoAowCAIBAAIDB6EgoQowCAIBAAIDAYagMA0GCSqGSIb3DQEB
# CwUAA4IBAQCIM/Nkgf9AOplFMRkD2NnKKUbOUDdfJfAItym6qOK+ou/eJE9z76ZC
# bLga75p2UN1SKjdzLuc7pOfkm5a7hULZZqsxQyIr60WuFsRRcZLD0R/WQq4OZ0iK
# YLAHprSuUe43TdwCYc4Z1hbjSiAR5wpDFcBWqKjjed+OmlsVgdUjD7l4YssD6yWf
# vmGixCzmI8vboyXmlUVZ+RnLrWF9fjnSdiCijZIvEmyJlL5sFwEJxr7NIt63ePK+
# xxge+UwTg0Bb9RSFfMMY9TB0doKqCcOa6aMEGTHh/1a78B0FDoJYj5KCzQD3XX/y
# IM2XrV5qPlh1wHVfsGJHP2LW7EUSxDVpMYIEDTCCBAkCAQEwgZMwfDELMAkGA1UE
# BhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAc
# BgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0
# IFRpbWUtU3RhbXAgUENBIDIwMTACEzMAAAIkO4QhsCysZCIAAQAAAiQwDQYJYIZI
# AWUDBAIBBQCgggFKMBoGCSqGSIb3DQEJAzENBgsqhkiG9w0BCRABBDAvBgkqhkiG
# 9w0BCQQxIgQgefurulUwxajHcwLhmUAh9495jgfOi6vu1pk3eb8MWkEwgfoGCyqG
# SIb3DQEJEAIvMYHqMIHnMIHkMIG9BCBIIT03apv3UcmdAXM13HZaFRKiAnXJqVTW
# x/QhFc1kjjCBmDCBgKR+MHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5n
# dG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9y
# YXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwAhMz
# AAACJDuEIbAsrGQiAAEAAAIkMCIEIBwDy13HfcTRaq51rfird6sQbD/kqMPEMVMb
# YzK18GvMMA0GCSqGSIb3DQEBCwUABIICAJ1fhEbiZolhDuOkCrjheSQuIjlT/Gvj
# NLThy+6rYSI9AFv60inp/ezpsE/z49E5HToTSbrqghbwks9T9hqBuGR1wsrWcAwo
# d9qJnmz34/AaS1mxpAhZBtsyaihYeq8Kx9jcOZKuyehCgD9TbP44z5jljKfrHQJZ
# uU5zgbjiUW2aRpOPwuBkhCYMxgju8tJDR0jB0olKVKTeGqUrhIs/uEbcOlinSe00
# S54fNnGTcR3xSCCxlU/LyKmXD4P2rdSAjIvgY15qn7dvOFfNdO3m4OJIAtXD5qzB
# AI3Ia+aIWb24tXGZ6BEuUcWPClPb7YIi0A53k6qoSuMKqO9nxcfYxAEjhoN1UB5c
# hCoKcruABF1W5QGIWv/PhbXiJnrLsDupV/rCT7HOMzcD1E6sYB+TAx/HRkxI+DvQ
# iLnrVymD5TWMFtePP20STXM3F689Auzj7TjU2dvTE94FtN96b8sGylb5c/JEWtM9
# GW6JDpyzH0/PF6WIEI9dUSBa0yUOqObNi64OWKN4xbsVZWu5uuOzyFPHzeYDdXZM
# UEYLtgJdWIF1x9Npqkk+VOrJaLz1kJE6LiNUT/qzef8M9sS2AISL5SlDQtjkbcHv
# grmcuWYNlPDAXii4ag9dOOYbJ9FPF94yu/9txE5dm9X0P+J8Xc1LhPY8QSseRMvk
# nr/Joira9jst
# SIG # End signature block