Private/Config/Merge-AvmTflintConfig.ps1
|
function Test-AvmHclTrivia { [CmdletBinding()] [OutputType([bool])] param( [Parameter(Mandatory)] [AllowEmptyString()] [string] $Text ) $withoutComments = $Text $withoutComments = [regex]::Replace($withoutComments, '(?m)(?:#|//)[^\r\n]*(?:\r?\n|$)', '') $withoutComments = [regex]::Replace($withoutComments, '(?s)/\*.*?\*/', '') return [string]::IsNullOrWhiteSpace($withoutComments) } function Get-AvmTflintOverrideBlock { [CmdletBinding()] [OutputType([object[]])] param( [Parameter(Mandatory)] [string] $Path ) $text = [System.IO.File]::ReadAllText($Path) $pattern = '(?ms)^[ \t]*(?<type>[A-Za-z_][A-Za-z0-9_-]*)[ \t]+"(?<label>(?:\\.|[^"])*)"[ \t]*\{(?<body>[^{}]*)\}' $blockMatches = [regex]::Matches($text, $pattern) $blocks = New-Object System.Collections.Generic.List[object] $cursor = 0 foreach ($match in $blockMatches) { if (-not (Test-AvmHclTrivia -Text $text.Substring($cursor, $match.Index - $cursor))) { throw [AvmConfigurationException]::new( "TFLint override '$Path' contains unsupported HCL before block '$($match.Groups['type'].Value)'.") } $body = $match.Groups['body'].Value $attributes = New-Object System.Collections.Generic.List[object] $attributePattern = '(?m)^[ \t]*(?<name>[A-Za-z_][A-Za-z0-9_-]*)[ \t]*=[ \t]*(?<value>[^\r\n]+?)[ \t]*(?:\r?$)' $attributeMatches = [regex]::Matches($body, $attributePattern) $bodyCursor = 0 foreach ($attributeMatch in $attributeMatches) { if (-not (Test-AvmHclTrivia -Text $body.Substring($bodyCursor, $attributeMatch.Index - $bodyCursor))) { throw [AvmConfigurationException]::new( "TFLint override '$Path' contains unsupported nested HCL in block '$($match.Groups['type'].Value) ""$($match.Groups['label'].Value)""'.") } $attributes.Add([pscustomobject]@{ Name = $attributeMatch.Groups['name'].Value Value = $attributeMatch.Groups['value'].Value.Trim() }) $bodyCursor = $attributeMatch.Index + $attributeMatch.Length } if (-not (Test-AvmHclTrivia -Text $body.Substring($bodyCursor))) { throw [AvmConfigurationException]::new( "TFLint override '$Path' contains unsupported nested HCL in block '$($match.Groups['type'].Value) ""$($match.Groups['label'].Value)""'.") } $blocks.Add([pscustomobject]@{ Type = $match.Groups['type'].Value Label = $match.Groups['label'].Value Attributes = $attributes.ToArray() Text = $match.Value.Trim() }) $cursor = $match.Index + $match.Length } if ($blocks.Count -eq 0 -or -not (Test-AvmHclTrivia -Text $text.Substring($cursor))) { throw [AvmConfigurationException]::new( "TFLint override '$Path' contains unsupported HCL; expected labelled blocks with direct attributes.") } return $blocks.ToArray() } function Get-AvmTflintOverrideWarning { [CmdletBinding()] [OutputType([object[]])] param( [Parameter(Mandatory)] [string] $Root, [Parameter(Mandatory)] [AllowEmptyCollection()] [string[]] $OverridePaths ) $rootFull = (Resolve-Path -LiteralPath $Root).ProviderPath $warnings = [System.Collections.Generic.List[object]]::new() $seen = [System.Collections.Generic.HashSet[string]]::new([System.StringComparer]::Ordinal) foreach ($overridePath in $OverridePaths) { $file = [System.IO.Path]::GetRelativePath($rootFull, $overridePath).Replace('\', '/') foreach ($block in (Get-AvmTflintOverrideBlock -Path $overridePath)) { if ($block.Type -cne 'rule') { continue } $enabled = @($block.Attributes | Where-Object { $_.Name -ceq 'enabled' } | Select-Object -Last 1) if ($enabled.Count -eq 0 -or $enabled[0].Value -cne 'false') { continue } $rule = [string]$block.Label $key = "$file`0$rule" if (-not $seen.Add($key)) { continue } $warnings.Add([pscustomobject][ordered]@{ File = $file Rule = $rule }) } } return $warnings.ToArray() } function Merge-AvmTflintBlock { [CmdletBinding()] [OutputType([string])] param( [Parameter(Mandatory)] [AllowEmptyString()] [string] $Text, [Parameter(Mandatory)] [AllowEmptyCollection()] [object[]] $Blocks ) $merged = $Text foreach ($overrideBlock in $Blocks) { $typePattern = [regex]::Escape($overrideBlock.Type) $labelPattern = [regex]::Escape($overrideBlock.Label) $blockPattern = "(?ms)^[ \t]*$typePattern[ \t]+`"$labelPattern`"[ \t]*\{(?<body>[^{}]*)\}" $baseMatches = [regex]::Matches($merged, $blockPattern) if ($baseMatches.Count -eq 0) { $merged = $merged.TrimEnd() + "`n`n" + $overrideBlock.Text + "`n" continue } $baseMatch = $baseMatches[$baseMatches.Count - 1] $body = $baseMatch.Groups['body'].Value foreach ($attribute in $overrideBlock.Attributes) { $attributePattern = '(?m)^(?<indent>[ \t]*)' + [regex]::Escape($attribute.Name) + '[ \t]*=[^\r\n]*(?:\r?$)' $attributeMatches = [regex]::Matches($body, $attributePattern) $replacement = if ($attributeMatches.Count -gt 0) { $indent = $attributeMatches[$attributeMatches.Count - 1].Groups['indent'].Value "$indent$($attribute.Name) = $($attribute.Value)" } else { " $($attribute.Name) = $($attribute.Value)" } if ($attributeMatches.Count -gt 0) { $attributeMatch = $attributeMatches[$attributeMatches.Count - 1] $body = $body.Remove($attributeMatch.Index, $attributeMatch.Length).Insert($attributeMatch.Index, $replacement) } else { $body = $body.TrimEnd() + "`n$replacement`n" } } $replacementBlock = $baseMatch.Value.Substring(0, $baseMatch.Groups['body'].Index - $baseMatch.Index) + $body + '}' $merged = $merged.Remove($baseMatch.Index, $baseMatch.Length).Insert($baseMatch.Index, $replacementBlock) } return $merged } function Merge-AvmTflintConfig { [CmdletBinding(SupportsShouldProcess, ConfirmImpact = 'Low')] param( [Parameter(Mandatory)] [string] $BasePath, [Parameter(Mandatory)] [string] $OverridePath, [Parameter(Mandatory)] [string] $DestinationPath ) $baseText = [System.IO.File]::ReadAllText($BasePath) $overrideBlocks = @(Get-AvmTflintOverrideBlock -Path $OverridePath) $merged = Merge-AvmTflintBlock -Text $baseText -Blocks $overrideBlocks $plugins = [regex]::Matches($merged, '(?ms)^[ \t]*plugin[ \t]+"avm"[ \t]*\{(?<body>[^{}]*)\}') $currentPlugin = $false if ($plugins.Count -eq 1) { $body = $plugins[0].Groups['body'].Value $currentPlugin = [regex]::Matches($body, '(?m)^\s*(?:version|source|enabled)\s*=').Count -eq 3 -and $body -cmatch '(?m)^\s*version\s*=\s*"1\.0\.0"\s*$' -and $body -cmatch '(?m)^\s*source\s*=\s*"github\.com/Azure/tflint-ruleset-avm"\s*$' -and $body -cmatch '(?m)^\s*enabled\s*=\s*true\s*$' } if ($currentPlugin) { $legacyRules = [ordered]@{ required_output_rmfr7 = 'avm_output_resource_id_required' terraform_output_separate = $null } foreach ($legacyName in $legacyRules.Keys) { $legacyPattern = '(?ms)^[ \t]*rule[ \t]+"' + [regex]::Escape($legacyName) + '"[ \t]*\{(?<body>[^{}]*)\}' $legacy = @($overrideBlocks | Where-Object { $_.Type -ceq 'rule' -and $_.Label -ceq $legacyName }) if ([regex]::IsMatch($baseText, $legacyPattern) -or $legacy.Count -ne 1 -or $legacy[0].Attributes.Count -ne 1) { continue } $attribute = $legacy[0].Attributes[0] $disabled = $attribute.Name -ceq 'enabled' -and $attribute.Value.StartsWith('false', [System.StringComparison]::Ordinal) -and (Test-AvmHclTrivia -Text $attribute.Value.Substring(5)) if (-not $disabled) { continue } $replacementName = $legacyRules[$legacyName] if ($replacementName) { $replacementPattern = '(?ms)^[ \t]*rule[ \t]+"' + [regex]::Escape($replacementName) + '"[ \t]*\{(?<body>[^{}]*)\}' $replacementMatches = [regex]::Matches($merged, $replacementPattern) $replacementOverrides = @($overrideBlocks | Where-Object { $_.Type -ceq 'rule' -and $_.Label -ceq $replacementName }) if ($replacementMatches.Count -gt 1 -or $replacementOverrides.Count -gt 1) { continue } if ($replacementOverrides.Count -eq 1) { $enabled = @($replacementOverrides[0].Attributes | Where-Object { $_.Name -ceq 'enabled' }) if ($enabled.Count -ne 1 -or -not $enabled[0].Value.StartsWith('false', [System.StringComparison]::Ordinal) -or -not (Test-AvmHclTrivia -Text $enabled[0].Value.Substring(5))) { continue } } $replacement = [pscustomobject]@{ Type = 'rule' Label = $replacementName Attributes = $legacy[0].Attributes Text = $legacy[0].Text.Replace('"' + $legacyName + '"', '"' + $replacementName + '"') } $merged = Merge-AvmTflintBlock -Text $merged -Blocks @($replacement) $message = "tflint: migrated disabled rule '$legacyName' to '$replacementName' from '$OverridePath'; rename the authored override for AVM ruleset 1.0.0." } else { $message = "tflint: omitted obsolete disabled rule '$legacyName' from '$OverridePath'; AVM ruleset 1.0.0 removed it without a replacement. Remove that override." } $merged = [regex]::Replace($merged, $legacyPattern, '') Write-AvmLog $message -Level Warning | Out-Null } } if (-not $PSCmdlet.ShouldProcess($DestinationPath, 'Write merged TFLint config')) { throw [System.OperationCanceledException]::new('TFLint config staging was not approved.') } [System.IO.File]::WriteAllText( $DestinationPath, ($merged -replace "`r`n", "`n"), [System.Text.UTF8Encoding]::new($false)) } function Get-AvmTflintScopeOverridePath { [CmdletBinding()] [OutputType([string])] param( [Parameter(Mandatory)] [string] $Root, [Parameter(Mandatory)] [string] $RelPath ) $segments = @($RelPath -split '[\\/]') if ( $segments.Count -ne 2 -or $segments[0] -notin @('modules', 'examples') -or ($segments | Where-Object { [string]::IsNullOrWhiteSpace($_) -or $_ -in @('.', '..') }) ) { throw [AvmConfigurationException]::new( "TFLint scope '$RelPath' cannot be mapped to a per-scope override path.") } $rootFull = [System.IO.Path]::GetFullPath($Root) $candidate = $rootFull foreach ($segment in $segments) { $candidate = Join-Path $candidate $segment } $candidate = [System.IO.Path]::GetFullPath( (Join-Path $candidate 'avm.tflint.override.hcl')) $relativeCandidate = [System.IO.Path]::GetRelativePath($rootFull, $candidate) $relativeSegments = @($relativeCandidate -split '[\\/]') $outsideRoot = ( [System.IO.Path]::IsPathRooted($relativeCandidate) -or @($relativeSegments | Where-Object { $_ -eq '..' }).Count -gt 0 ) if ($outsideRoot) { throw [AvmConfigurationException]::new( "TFLint scope '$RelPath' resolves outside the repository root.") } if (Test-Path -LiteralPath $candidate -PathType Leaf) { return $candidate } return $null } function New-AvmTflintConfigSet { [CmdletBinding(SupportsShouldProcess, ConfirmImpact = 'Low')] [OutputType([pscustomobject])] param( [Parameter(Mandatory)] [string] $Root, [Parameter(Mandatory)] [string] $BaseConfigDir, [object[]] $Scopes = @() ) $names = @( $Scopes | ForEach-Object { [System.IO.Path]::GetFileName([string]$_.Config) } | Sort-Object -Unique ) $overrides = @{} $overridePaths = [System.Collections.Generic.List[string]]::new() foreach ($name in $names) { $overrideName = $name -replace '\.hcl$', '.override.hcl' $overridePath = Join-Path $Root $overrideName if (Test-Path -LiteralPath $overridePath -PathType Leaf) { $overrides[$name] = $overridePath $overridePaths.Add($overridePath) } } $scopeOverrides = [System.Collections.Generic.Dictionary[string, string]]::new( [System.StringComparer]::Ordinal) $scopeByPath = [System.Collections.Generic.Dictionary[string, object]]::new( [System.StringComparer]::Ordinal) foreach ($scope in $Scopes) { $relPath = [string]$scope.RelPath $scopeByPath.Add($relPath, $scope) if ($relPath -eq '.') { continue } $overridePath = Get-AvmTflintScopeOverridePath -Root $Root -RelPath $relPath if ($overridePath) { $scopeOverrides.Add($relPath, $overridePath) $overridePaths.Add($overridePath) } } if ($overrides.Count -eq 0 -and $scopeOverrides.Count -eq 0) { return [pscustomobject]@{ ConfigDir = $BaseConfigDir OverridePaths = @() ScopeConfigNames = @{} StageDir = $null } } $stageRoot = Join-Path (Get-AvmFolder -Kind Cache -NoCreate) 'tflint-config-stage' if (-not $PSCmdlet.ShouldProcess($stageRoot, 'Stage TFLint config overrides')) { throw [System.OperationCanceledException]::new('TFLint config staging was not approved.') } $null = Get-AvmFolder -Kind Cache if (-not (Test-Path -LiteralPath $stageRoot)) { New-Item -ItemType Directory -Path $stageRoot -Force | Out-Null } $stageDir = Join-Path $stageRoot ([Guid]::NewGuid().ToString('N')) New-Item -ItemType Directory -Path $stageDir -Force | Out-Null try { foreach ($name in $names) { $basePath = Join-Path $BaseConfigDir $name $destinationPath = Join-Path $stageDir $name if ($overrides.ContainsKey($name)) { Merge-AvmTflintConfig ` -BasePath $basePath ` -OverridePath $overrides[$name] ` -DestinationPath $destinationPath } else { Copy-Item -LiteralPath $basePath -Destination $destinationPath } } $scopeConfigNames = [System.Collections.Generic.Dictionary[string, string]]::new( [System.StringComparer]::Ordinal) foreach ($relPath in ($scopeOverrides.Keys | Sort-Object)) { $scope = $scopeByPath[$relPath] $baseName = [System.IO.Path]::GetFileName([string]$scope.Config) $scopeHash = [Convert]::ToHexString( [System.Security.Cryptography.SHA256]::HashData( [System.Text.Encoding]::UTF8.GetBytes($relPath))).ToLowerInvariant() $scopeConfigName = ( '{0}.scope-{1}.hcl' -f [System.IO.Path]::GetFileNameWithoutExtension($baseName), $scopeHash.Substring(0, 16)) Merge-AvmTflintConfig ` -BasePath (Join-Path $stageDir $baseName) ` -OverridePath $scopeOverrides[$relPath] ` -DestinationPath (Join-Path $stageDir $scopeConfigName) $scopeConfigNames.Add($relPath, $scopeConfigName) } return [pscustomobject]@{ ConfigDir = $stageDir OverridePaths = $overridePaths.ToArray() ScopeConfigNames = $scopeConfigNames StageDir = $stageDir } } catch { Remove-Item ` -LiteralPath $stageDir ` -Recurse ` -Force ` -ErrorAction SilentlyContinue ` -ProgressAction SilentlyContinue throw } } # SIG # Begin signature block # MIInQAYJKoZIhvcNAQcCoIInMTCCJy0CAQExDzANBglghkgBZQMEAgEFADB5Bgor # BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG # KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCAjr9+HLod0CpL8 # 89Saqz4cluweYXYxcv4hZEIGwT6iwKCCDLowggX1MIID3aADAgECAhMzAAACHU0Z # yE7XD1dIAAAAAAIdMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMR4wHAYD # VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBD # b2RlIFNpZ25pbmcgUENBIDIwMjQwHhcNMjYwNDE2MTg1OTQzWhcNMjcwNDE1MTg1 # OTQzWjB0MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE # BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYD # VQQDExVNaWNyb3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IB # DwAwggEKAoIBAQDQvewXxx9gZZFC6Ys1WBay8BJ8kGA4JQnH5CMafqOASlTpK9H8 # o5ZXTXt0caVQTNMUPt445wXYD+dFtaKWTwDn1I52oUSrC9vJin1Gsqt+zyKJL5Dg # 3eQXbQNR61DmMy20GLTIO3SFed9Rfi/ophgCLGFLDR3r0KvHjwMb/jYWS0celV/4 # Lz27LfAekm8v9E5IXaeiXbAUYZKK090n4CVl3JBtbN+9DtI9SNu/yjvozW52/u7R # X/Ttpa/KDlpuokZ+Zcbvmtd9ur9gFLvZzh41o9MsE/clQtdaFWGvuo6Jua/ntpgk # ey3E5/vBFe+MJPG6phdnuo6r57ZudCudiI1bAgMBAAGjggGbMIIBlzAOBgNVHQ8B # Af8EBAMCB4AwHwYDVR0lBBgwFgYKKwYBBAGCN0wIAQYIKwYBBQUHAwMwHQYDVR0O # BBYEFH6QuMwqcPG0hQlQ6c5jCtTTLrVeMEUGA1UdEQQ+MDykOjA4MR4wHAYDVQQL # ExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xFjAUBgNVBAUTDTIzMDAxMis1MDc1NTkw # HwYDVR0jBBgwFoAUf1k/VCHarU/vBeXmo9ctBpQSCDEwYAYDVR0fBFkwVzBVoFOg # UYZPaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jcmwvTWljcm9zb2Z0 # JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNybDBtBggrBgEFBQcBAQRh # MF8wXQYIKwYBBQUHMAKGUWh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMv # Y2VydHMvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNy # dDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4ICAQBKTbYOjzwTG/DXGaz9 # s6+fQeaTtDcFmMY+5UyVFCyj7Pv+5i37qfX8lSL/tBIfYQfWsMuBQlfZurJD6r4H # VJ2CeH+1fgiq8dcHdVKoZ3Sa2qXoX3cq9iS8cVb06B7+5/XJ7I0OxHH9fDsvJ3T3 # w5V/ZtAIFmLrl+P0CtG+92uzRsn0nTbdFjOkLMLWPLAU3THohKRlSEMgFJpPkm5n # 5UAZ35xX6FWCrDLsSKb555bTifwa8mJBwdlof0bmfYidH+dxZ1FdDxvLnNl9zeKs # A4kejaaIqqIPguhwAti5Ql7BlTNoJNwxCvBmqW2MQLnCkYN/VVUsR3V2x/rcTNzo # Bf/Z/SpROvdaA2ZOOd1uioXJt3tdLQ7vHpqpib0KfWr/FWXW10q38VxfCnRQBqzb # SuztR7nEMuzX7Ck+B/XaPDXd1qh72+QYyB0Z2VzWmO9zsnb9Uq/dwu8LGeQqnyu6 # 7SDGACvnXii2fb9+US492VTnXSnFKyqwgzUyFMtZK1/sHYTv6bG4TtQUygQxTN+Z # V+aJIlKO2MqZ7bKrAnOzS9m6NgoTdWOq11bTOZwKlIEV/EhV9SWkDmdpR/hPPT2v # 6TEj4F8PT/zHjRezIU5c/DGlt/VhY/pK0XkJtEyMmmS1BMtjU/rqBZVMIm3dnxQs # /TBByr+Cf8Z1r7aifQVQ+WSqzjCCBr0wggSloAMCAQICEzMAAAA5O7Y3Gb8GHWcA # AAAAADkwDQYJKoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpX # YXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQg # Q29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBSb290IENlcnRpZmljYXRl # IEF1dGhvcml0eSAyMDExMB4XDTI0MDgwODIwNTQxOFoXDTM2MDMyMjIyMTMwNFow # VzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEo # MCYGA1UEAxMfTWljcm9zb2Z0IENvZGUgU2lnbmluZyBQQ0EgMjAyNDCCAiIwDQYJ # KoZIhvcNAQEBBQADggIPADCCAgoCggIBANgBnB7jOMeqlRYHNa265v4IY9fH8TKh # emHfPINe1gpLaV3dhg324WwH06LcHbpnsBukCDNitryo0dtS/EW6I/yEL/bLSY8h # KpbfQuWusBPr9qazYcDxCW/qnjb5JsI1s8bNOg3bVATvQVL4tcf03aTycsz8QeCd # M0l/yHRObJ9QqazM1r6VPEOJ7LL+uEEb73w6QCuhs89a1uv1zerOYMnsneRRwCbp # yW11IcggU0cRKDDq1pjVJzIbIF6+oiXXbReOsgeI8zu1FyQfK0fVkaya8SmVHQ/t # Of23mZ4W9k0Ri22QW9p3UgSC5OUDktKxxcCmGL6tXLfOGSWHIIV4YrTJTT6PNty5 # REojHJuZHArkF9VnHTERWoTjAzfI3kP+5b4alUdhgAZ7ttOu1bVnXfHaqPYl2rPs # 20ji03LOVWsh/radgE17es5hL+t6lV0eVHrVhsssROWJuz2MXMCt7iw7lFPG9LXK # Gjsmonn2gotGdHIuEg5JnJMJVmixd5LRlkmgYRZKzhxSCwyoGIq0PhaA7Y+VPct5 # pCHkijcIIDm0nlkK+0KyepolcqGm0T/GYQRMhHJlGOOmVQop36wUVUYklUy++vDW # eEgEo4s7hxN6mIbf2MSIQ/iIfMZgJxC69oukMUXCrOC3SkE/xIkgpfl22MM1itkZ # 35nNXkMolU1lAgMBAAGjggFOMIIBSjAOBgNVHQ8BAf8EBAMCAYYwEAYJKwYBBAGC # NxUBBAMCAQAwHQYDVR0OBBYEFH9ZP1Qh2q1P7wXl5qPXLQaUEggxMBkGCSsGAQQB # gjcUAgQMHgoAUwB1AGIAQwBBMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAU # ci06AjGQQ7kUBU7h6qfHMdEjiTQwWgYDVR0fBFMwUTBPoE2gS4ZJaHR0cDovL2Ny # bC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMvTWljUm9vQ2VyQXV0MjAx # MV8yMDExXzAzXzIyLmNybDBeBggrBgEFBQcBAQRSMFAwTgYIKwYBBQUHMAKGQmh0 # dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvY2VydHMvTWljUm9vQ2VyQXV0MjAx # MV8yMDExXzAzXzIyLmNydDANBgkqhkiG9w0BAQwFAAOCAgEAFJQfOChP7onn6fLI # MKrSlN1WYKwDFgAddymOUO3FrM8d7B/W/iQ6DxXsDn7D5W4wMwYeLystcEqfkjz4 # NURRgazyMu5yRzQh4LqjA4tStTcJh1opExo7nn5PuPBYnbu0+THSuVHTe0VTTPVh # ily/piFrDo3axQ9P4C+Ol5yet+2gTfekICS5xS+cYfSIvgn0JksVBVMYVI5QFu/q # hnLhsEFEUzG8fvv0hjgkO+lkpV9ty6GkN4vdnd7ya6Q6aR9y34aiM1qmxaxBi6OU # nyNl6fkuun/diTFnYDLTppOkr/mg5WSfCiDVMNCxtj4wPKC5OmHm1DQIt/MNokbb # H3UGsFP1QbzsLocuSqLCvH09Io3fDPTmscR9Y75G4qX7RTX8AdBPo0I6OEojf39z # uFZt0qOHm65YWQE69cZM2ueE1MB05dNNgHK9gTE7zKvK/fg8B2qjW88MT/WF5V5u # vZGtqa9FSL2RazArA+rDPuf6JGYz4HpgMZHB4S6szWSKYBv0VisCzfxgeU+dquXW # 9bd0auYlOB58DPcOYKdc3Se94g+xL4pcEhbB54JOgAkwYTu/9dLeH2pDqeJZAABV # DWRQCaXfO5LgyKwKCLYXpigrZYCjUSBcr+Ve8PFWMhVTQl0v4q8J/AUmQN5W4n10 # 1cY2L4A7GTQG1h32HHAvfQESWP0xghncMIIZ2AIBATBuMFcxCzAJBgNVBAYTAlVT # MR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jv # c29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMjQCEzMAAAIdTRnITtcPV0gAAAAAAh0w # DQYJYIZIAWUDBAIBBQCggZAwGQYJKoZIhvcNAQkDMQwGCisGAQQBgjcCAQQwLwYJ # KoZIhvcNAQkEMSIEICjDGvZMABkR2Q0FIOW63bab3x2QN4SUfyQ0IiISbR0kMEIG # CisGAQQBgjcCAQwxNDAyoBSAEgBNAGkAYwByAG8AcwBvAGYAdKEagBhodHRwOi8v # d3d3Lm1pY3Jvc29mdC5jb20wDQYJKoZIhvcNAQEBBQAEggEAFuiYV5mgMIktfjP7 # FyJjNgD6XhXY22nDoe9Cgy7YO0DkEncotIVi523P496tocAS3tyqVabOcQakFrnR # Q0GL9qT4tTUbSVUs3K86Oia7QJx7ZPUlBpl4Wwl3Xz+/R5yGWzxKnYjFHNBS1CYL # 9A70pxGB1a2XcpCuistzIabLd9goeod9F4QC5flITy+5s/LrvSFfmR0IfYldqNJI # +CSxO1rShDsrA+zc4oEDlcoe5adl9/T1aoakTyBM8P9gTDbKHn9SQEFlwvgrMYIZ # eFAw0XhExqAoMjRipuwWNQvnbUNvB/iAifvM8GrZZfrSZk+mrGS8/JWD7RUpy/AB # frW5JKGCF6wwgheoBgorBgEEAYI3AwMBMYIXmDCCF5QGCSqGSIb3DQEHAqCCF4Uw # gheBAgEDMQ8wDQYJYIZIAWUDBAIBBQAwggFZBgsqhkiG9w0BCRABBKCCAUgEggFE # MIIBQAIBAQYKKwYBBAGEWQoDATAxMA0GCWCGSAFlAwQCAQUABCA93PTOD5vmn+Oy # FEeR3OyMB5Qn3fT58nXvSCDtli4XLwIGaq9VE29sGBIyMDI2MTAwODA3NTYzOS4x # NlowBIACAfSggdmkgdYwgdMxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5n # dG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9y # YXRpb24xLTArBgNVBAsTJE1pY3Jvc29mdCBJcmVsYW5kIE9wZXJhdGlvbnMgTGlt # aXRlZDEnMCUGA1UECxMeblNoaWVsZCBUU1MgRVNOOjY1MUEtMDVFMC1EOTQ3MSUw # IwYDVQQDExxNaWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2aWNloIIR+zCCBygwggUQ # oAMCAQICEzMAAAIVGAPTgQcmfFMAAQAAAhUwDQYJKoZIhvcNAQELBQAwfDELMAkG # A1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQx # HjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9z # b2Z0IFRpbWUtU3RhbXAgUENBIDIwMTAwHhcNMjUwODE0MTg0ODIwWhcNMjYxMTEz # MTg0ODIwWjCB0zELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAO # BgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEt # MCsGA1UECxMkTWljcm9zb2Z0IElyZWxhbmQgT3BlcmF0aW9ucyBMaW1pdGVkMScw # JQYDVQQLEx5uU2hpZWxkIFRTUyBFU046NjUxQS0wNUUwLUQ5NDcxJTAjBgNVBAMT # HE1pY3Jvc29mdCBUaW1lLVN0YW1wIFNlcnZpY2UwggIiMA0GCSqGSIb3DQEBAQUA # A4ICDwAwggIKAoICAQDDcdXeFXEvSURg9XTdd40pnnXtUhuB7GGUM92lfANLQFi3 # E/CLhdillHWV3S7pyvZeO66B2DnQNTHlYcvRCFjZ32+QlKTTasT/vmFwq33WbYiH # bztBHFEyYW7cEXrjrqTyqnm5e197q5yKrj1hpLyn53O/e5NqsPiFDxRPstr3mk4m # JGrHF3So4YsQK8csRc9eKg1LH2nKHOGbqW3t7MvEl4VVi3FKGRq8+hk3R04KJh6H # gqCgqjJqDMy5KIsKIxRbhR7hCybrnwUk0ZM2HtXmpdhUDqTnGPDlZ5Z0o7PSL0Dm # MFxtj19U6j9wDyLVvK3NwNPFvedy1yXLz85h42y2Rpv8iyrcLF7W+r3p8gcTX5ka # YmORrWyh3Co/JxWn/a1v4GO6U8vkPquBRdM8XzhTzZEsodXntsHx8dGmCeNxYFC5 # c+BV5JekRFaKa3Q0XaUI4vOqCu9L+9ip17kuf1iUoqEBn/EMTRMsgivr4j/YlO1c # /fid+NMQ1WowEhJZxqQjEDAZvdEHnIcLHKcgU1Utx8oCwR0LlTZ6bR8C+ZW/Syie # qe/Xty5piLZ4ItaGgrUhzzkPDuz+WFxesGljif9GXmXfAfOzi84iG7zsMjLlBRoS # 6kSzJjQ1aqAjgFaXq/XCCx76XwNYV5Reh+FS4KBVO5Mc3cryJ2gxufxDd51QgQID # AQABo4IBSTCCAUUwHQYDVR0OBBYEFIkhd/FyoDAWoaP2N3BC11Kpp2PXMB8GA1Ud # IwQYMBaAFJ+nFV0AXmJdg/Tl0mWnG1M1GelyMF8GA1UdHwRYMFYwVKBSoFCGTmh0 # dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvY3JsL01pY3Jvc29mdCUyMFRp # bWUtU3RhbXAlMjBQQ0ElMjAyMDEwKDEpLmNybDBsBggrBgEFBQcBAQRgMF4wXAYI # KwYBBQUHMAKGUGh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvY2VydHMv # TWljcm9zb2Z0JTIwVGltZS1TdGFtcCUyMFBDQSUyMDIwMTAoMSkuY3J0MAwGA1Ud # EwEB/wQCMAAwFgYDVR0lAQH/BAwwCgYIKwYBBQUHAwgwDgYDVR0PAQH/BAQDAgeA # MA0GCSqGSIb3DQEBCwUAA4ICAQB3jYe1X6QZu/HMsFMLk7u+QIgE/L8HCmMLN4vn # eECIQ55un5V02fCb0ZUJ9ircox+uPhS8pBNQBpLlmTB7WC9neWNJKcI7JLk7A271 # 2mDfDD5BbZ45xIuTJUBYWsufoiKDdML/NYy9WGpe10WEbYonWVJs3bbZyxjcTf8G # saW4CW8RP2CbFXLLE3Ln3/skXnMgZwmJvJ3Gz3gkvUG0+Bck59nND7/eJNzp4O2Z # pZPoMp2cmhynzCRcpY8iwER+QPqTVCK3C+3SYes5FqHvlKN5w4q3ihZrJUuQ9OGj # XZ7SieASDVyN7l/FJka2GsytYq8jhHscQLuTyZof148DdWIfQJVJI559o9MYzMiE # cKjmneMblIxzI7d4D24RphAkhMmUsbcHDAabKljsL/z+ePVI6GDHUeAnTLA4kv3F # 8/gA5xaYJ9uyqAZsJoLtYfmwg13N8xqvxXtg0WqRsIZQqFzwakjIT4wqfJWffeOy # 5oYCU1GDt1VFRKhgsnG9SzD0Y7DIGkHBsT2yo4ub4ew7TSgXbc8yKjtYVdwVNkCO # ne6OKEEB8utcgKAY4c92RnTja7Utmo5yeWvdfO+Ax76Y8/Jqxbx/Su3MmPdXkT8Q # qLJCU/GP0x+rbH2GKaeVdYZkJU94QFE6s1sNgF9rNPIs0I5OxG2Sw5JXcUG0+elC # 0s3vnjCCB3EwggVZoAMCAQICEzMAAAAVxedrngKbSZkAAAAAABUwDQYJKoZIhvcN # AQELBQAwgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYD # VQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xMjAw # BgNVBAMTKU1pY3Jvc29mdCBSb290IENlcnRpZmljYXRlIEF1dGhvcml0eSAyMDEw # MB4XDTIxMDkzMDE4MjIyNVoXDTMwMDkzMDE4MzIyNVowfDELMAkGA1UEBhMCVVMx # EzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoT # FU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUt # U3RhbXAgUENBIDIwMTAwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDk # 4aZM57RyIQt5osvXJHm9DtWC0/3unAcH0qlsTnXIyjVX9gF/bErg4r25PhdgM/9c # T8dm95VTcVrifkpa/rg2Z4VGIwy1jRPPdzLAEBjoYH1qUoNEt6aORmsHFPPFdvWG # UNzBRMhxXFExN6AKOG6N7dcP2CZTfDlhAnrEqv1yaa8dq6z2Nr41JmTamDu6Gnsz # rYBbfowQHJ1S/rboYiXcag/PXfT+jlPP1uyFVk3v3byNpOORj7I5LFGc6XBpDco2 # LXCOMcg1KL3jtIckw+DJj361VI/c+gVVmG1oO5pGve2krnopN6zL64NF50ZuyjLV # wIYwXE8s4mKyzbnijYjklqwBSru+cakXW2dg3viSkR4dPf0gz3N9QZpGdc3EXzTd # EonW/aUgfX782Z5F37ZyL9t9X4C626p+Nuw2TPYrbqgSUei/BQOj0XOmTTd0lBw0 # gg/wEPK3Rxjtp+iZfD9M269ewvPV2HM9Q07BMzlMjgK8QmguEOqEUUbi0b1qGFph # AXPKZ6Je1yh2AuIzGHLXpyDwwvoSCtdjbwzJNmSLW6CmgyFdXzB0kZSU2LlQ+QuJ # YfM2BjUYhEfb3BvR/bLUHMVr9lxSUV0S2yW6r1AFemzFER1y7435UsSFF5PAPBXb # GjfHCBUYP3irRbb1Hode2o+eFnJpxq57t7c+auIurQIDAQABo4IB3TCCAdkwEgYJ # KwYBBAGCNxUBBAUCAwEAATAjBgkrBgEEAYI3FQIEFgQUKqdS/mTEmr6CkTxGNSnP # EP8vBO4wHQYDVR0OBBYEFJ+nFV0AXmJdg/Tl0mWnG1M1GelyMFwGA1UdIARVMFMw # UQYMKwYBBAGCN0yDfQEBMEEwPwYIKwYBBQUHAgEWM2h0dHA6Ly93d3cubWljcm9z # b2Z0LmNvbS9wa2lvcHMvRG9jcy9SZXBvc2l0b3J5Lmh0bTATBgNVHSUEDDAKBggr # BgEFBQcDCDAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMAQTALBgNVHQ8EBAMCAYYw # DwYDVR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBTV9lbLj+iiXGJo0T2UkFvXzpoY # xDBWBgNVHR8ETzBNMEugSaBHhkVodHRwOi8vY3JsLm1pY3Jvc29mdC5jb20vcGtp # L2NybC9wcm9kdWN0cy9NaWNSb29DZXJBdXRfMjAxMC0wNi0yMy5jcmwwWgYIKwYB # BQUHAQEETjBMMEoGCCsGAQUFBzAChj5odHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20v # cGtpL2NlcnRzL01pY1Jvb0NlckF1dF8yMDEwLTA2LTIzLmNydDANBgkqhkiG9w0B # AQsFAAOCAgEAnVV9/Cqt4SwfZwExJFvhnnJL/Klv6lwUtj5OR2R4sQaTlz0xM7U5 # 18JxNj/aZGx80HU5bbsPMeTCj/ts0aGUGCLu6WZnOlNN3Zi6th542DYunKmCVgAD # sAW+iehp4LoJ7nvfam++Kctu2D9IdQHZGN5tggz1bSNU5HhTdSRXud2f8449xvNo # 32X2pFaq95W2KFUn0CS9QKC/GbYSEhFdPSfgQJY4rPf5KYnDvBewVIVCs/wMnosZ # iefwC2qBwoEZQhlSdYo2wh3DYXMuLGt7bj8sCXgU6ZGyqVvfSaN0DLzskYDSPeZK # PmY7T7uG+jIa2Zb0j/aRAfbOxnT99kxybxCrdTDFNLB62FD+CljdQDzHVG2dY3RI # LLFORy3BFARxv2T5JL5zbcqOCb2zAVdJVGTZc9d/HltEAY5aGZFrDZ+kKNxnGSgk # ujhLmm77IVRrakURR6nxt67I6IleT53S0Ex2tVdUCbFpAUR+fKFhbHP+CrvsQWY9 # af3LwUFJfn6Tvsv4O+S3Fb+0zj6lMVGEvL8CwYKiexcdFYmNcP7ntdAoGokLjzba # ukz5m/8K6TT4JDVnK+ANuOaMmdbhIurwJ0I9JZTmdHRbatGePu1+oDEzfbzL6Xu/ # OHBE0ZDxyKs6ijoIYn/ZcGNTTY3ugm2lBRDBcQZqELQdVTNYs6FwZvKhggNWMIIC # PgIBATCCAQGhgdmkgdYwgdMxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5n # dG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9y # YXRpb24xLTArBgNVBAsTJE1pY3Jvc29mdCBJcmVsYW5kIE9wZXJhdGlvbnMgTGlt # aXRlZDEnMCUGA1UECxMeblNoaWVsZCBUU1MgRVNOOjY1MUEtMDVFMC1EOTQ3MSUw # IwYDVQQDExxNaWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2aWNloiMKAQEwBwYFKw4D # AhoDFQCPp5N6Nu5gTUh+Nt+u3q1d68JRIKCBgzCBgKR+MHwxCzAJBgNVBAYTAlVT # MRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQK # ExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1l # LVN0YW1wIFBDQSAyMDEwMA0GCSqGSIb3DQEBCwUAAgUA7nGMhTAiGA8yMDI2MTAw # ODAzMjkwOVoYDzIwMjYxMDA5MDMyOTA5WjB0MDoGCisGAQQBhFkKBAExLDAqMAoC # BQDucYyFAgEAMAcCAQACAgrlMAcCAQACAhNnMAoCBQDuct4FAgEAMDYGCisGAQQB # hFkKBAIxKDAmMAwGCisGAQQBhFkKAwKgCjAIAgEAAgMHoSChCjAIAgEAAgMBhqAw # DQYJKoZIhvcNAQELBQADggEBAAOZjbhgh14eMDBazHvdtIZPn3jUMYGrrRQskhlD # DrTZpBeqxnxpSOAJTePpyHecIu15RtNF7xI6/3x46vb5r+dlG4Ss/49KTJGHiahn # 38nRk7b4H/DpbgaOu50MIMA9xmJPgbq1ny9OlqnXDnEZ9PsCOB08syt9um8XiCk4 # 7j06jCTwqKlPtA4JE28LmfMHdJ7aAJq5G06X/+IWEBj3bmW07GtCYCc9kL8YMFv0 # x6GLSaTM2M9y5obMjVaNVF/doD76oSwZpNWyKUEnfJIndXvbOkcKXvafFwGdHcP3 # WMmI7ZPkwYRgtubaAXHpBYCxh4zNKplJq9bq8SVj6nZrmPYxggQNMIIECQIBATCB # kzB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMH # UmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQD # Ex1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMAITMwAAAhUYA9OBByZ8UwAB # AAACFTANBglghkgBZQMEAgEFAKCCAUowGgYJKoZIhvcNAQkDMQ0GCyqGSIb3DQEJ # EAEEMC8GCSqGSIb3DQEJBDEiBCC9LiC0suAcVCmoYP7XlzhQngKZpVQEZc7pAcyv # w8SOVTCB+gYLKoZIhvcNAQkQAi8xgeowgecwgeQwgb0EIHAQ9HY8OtMUtyu1Cwqt # SLujPkk1EIX8pEcyKFI17uyKMIGYMIGApH4wfDELMAkGA1UEBhMCVVMxEzARBgNV # BAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jv # c29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAg # UENBIDIwMTACEzMAAAIVGAPTgQcmfFMAAQAAAhUwIgQgX0uF/h7vIQHEI8dDrwJI # KhadO4HZ96X216ALUiPQaSAwDQYJKoZIhvcNAQELBQAEggIAfd6VzrgaeWs5J3Ft # kaiGmxDCl2BH9Rwce4H6y+1SxJKpjbqeWD2lH5JtNHnUrIt7AfUTkMnuPA/E7Iw6 # g5WPINABgurVADhj3tSiL2iDlFd9faFflhcbBu7ZnLeEkY7kHdoio9jYwRFDPy9Q # vuje6tXOm2MuGt9dtXjT4gGZVjrRaGOnaJfvwniBJ9QebzWC2CMcJbZKiCKBcQOR # UpRjEnyiO2Bsmo0IDyTv2vr+CU2/O2IcX2yqq7JO0QQ74dmN2fJSSrokzKX6AGQE # VQ7WFo+idv5p9ey1nVU0LGW6uH5ac/kZqTOFOXIeFIHZ3fE3MXcOEH+HKxEcHEA3 # r0X+xkaioFyPtcEPT195puuXn9NKeCrQYaZpY5Yg2yuOVhczQ5ESQ6cS3OajXLLX # y9pRq20SWo89TvWAiAnyYzGMIZf7RqTBiuEVzkAh+QPnnX0Pe8g9EU9m8s/bjD/N # +F1azumSLoMUte4734DuP99OBuYQ+0YsNRsXmohU6JSHFCBbAnmyvvqmC1lqJK7L # 3Pf3GnTD9i+RBQOov6sH7xQoa46euSOfKx9oPeG/xILhT3KDKfi02xEU++dIKJc5 # oo3HH+iqMeMuKCKt80jGq8eqbNSYZQ+eJfu7admJhKDqx6dq2FY13XQOIj34Xr9+ # iHgXV5E6QZx7Yk0fs1lhgj5N2JA= # SIG # End signature block |