Private/Tests/New-AvmBicepNativeDeployment.ps1

function New-AvmBicepNativeDeployment {
    [CmdletBinding(SupportsShouldProcess)]
    [OutputType([pscustomobject])]
    param(
        [Parameter(Mandatory)] [System.Collections.IDictionary] $State,
        [Parameter(Mandatory)] [string] $StatePath,
        [Parameter(Mandatory)] [hashtable] $DeploymentInput,
        [ValidateRange(1, 3)] [int] $Attempt = 1,
        [ValidateSet('Initial', 'InPlace', 'Fresh')] [string] $Mode = 'Initial',
        [string] $NamingId,
        [string] $ResourceLocation,
        [switch] $ClassifyRetry,
        [ValidateScript({ $_.Kind -eq [System.DateTimeKind]::Utc })]
        [datetime] $RecoveryDeadlineUtc
    )

    Set-StrictMode -Version 3.0
    $ErrorActionPreference = 'Stop'

    $name = $DeploymentInput['DeploymentName']
    if (-not $name) { $name = 'avm-e2e-{0}-t{1}' -f $State['runId'], $Attempt }
    $id = Get-AvmBicepScopedDeploymentId -Scope $DeploymentInput.Scope -SubscriptionId $State['subscriptionId'] `
        -DeploymentName $name -ResourceGroupName $DeploymentInput['ResourceGroupName'] `
        -ManagementGroupId $DeploymentInput['ManagementGroupId']
    if (-not $PSCmdlet.ShouldProcess($id, 'Record and submit Bicep test deployment')) {
        return [pscustomobject]@{ Status = 'skipped'; DeploymentName = $name; DeploymentId = $id; Outputs = @{} }
    }
    $inputOptions = $DeploymentInput.Clone()
    $inputOptions.DeploymentName = $name
    $observationOptions = @{}
    if ($PSBoundParameters.ContainsKey('RecoveryDeadlineUtc')) { $observationOptions.RecoveryDeadlineUtc = $RecoveryDeadlineUtc }
    if ($DeploymentInput.Scope -in @('mg', 'sub')) {
        $submissionProfile = Get-AzContext -ErrorAction Stop
        $tenant = Get-AvmPropertyValue -InputObject $submissionProfile -Name 'Tenant'
        $tenantId = Get-AvmPropertyValue -InputObject $tenant -Name 'Id' -NoEnumerate
        if ($tenantId -isnot [string] -or [string]::IsNullOrWhiteSpace($tenantId)) {
            throw [AvmConfigurationException]::new('Submission requires an authenticated Azure tenant context.')
        }
        $inputOptions.DefaultProfile = $submissionProfile
        $observationOptions.DefaultProfile = $submissionProfile
    }
    $entries = @($State['deployments'] | Where-Object { $_['id'] -ieq $id })
    if ($Mode -eq 'InPlace') {
        if ($entries.Count -ne 1 -or $entries[0]['status'] -cne 'Failed') {
            throw [AvmConfigurationException]::new('An in-place retry requires the exact previously failed deployment.')
        }
        $entry = $entries[0]
        $entry['status'] = 'Attempted'
        $entry['preflightRejected'] = $false
    }
    else {
        if ($entries.Count -ne 0) { throw [AvmConfigurationException]::new('A fresh deployment identity was already recorded.') }
        $entry = @{ id = $id; status = 'Attempted'; preflightRejected = $false }
        $State['deployments'] = @($State['deployments']) + @($entry)
    }
    if ($State.Contains('attempts')) {
        $State['case']['resourceGroupName'] = [string]$DeploymentInput['ResourceGroupName']
        $State['attempts'] = @($State['attempts']) + @([ordered]@{
                number = $Attempt; mode = $Mode; namingId = $NamingId; deploymentId = $id
                resourceGroupName = [string]$DeploymentInput['ResourceGroupName']; resourceLocation = $ResourceLocation
            })
    }
    Save-AvmBicepCleanupState -State $State -Path $StatePath -Confirm:$false
    $failure = $null
    $recoveryFailure = $null
    $kind = 'Other'
    $outputs = $null
    $submissionReturned = $false
    $failureQueryAllowed = $false
    $recoveredFailure = $false
    try {
        $response = Invoke-AvmBicepNativeArmOperation @inputOptions -Operation Create -Confirm:$false
        $submissionReturned = $true
        if ($null -eq $response -or $response -is [System.Collections.IList] -or
            (Get-AvmPropertyValue -InputObject $response -Name 'Id' -NoEnumerate) -isnot [string] -or
            (Get-AvmPropertyValue -InputObject $response -Name 'Id' -NoEnumerate) -ine $id -or
            $null -ne (Get-AvmPropertyValue -InputObject $response -Name 'Error' -NoEnumerate)) {
            throw [AvmProcessException]::new('The native deployment response did not identify the recorded deployment.')
        }
        $provisioningState = Get-AvmPropertyValue -InputObject $response -Name 'ProvisioningState' -NoEnumerate
        $entry['status'] = if ($provisioningState -is [string] -and $provisioningState -cin @('Succeeded', 'Failed')) {
            $provisioningState
        }
        else { 'Unknown' }
        $outputs = Get-AvmPropertyValue -InputObject $response -Name 'Outputs' -NoEnumerate
        if ($null -ne $outputs -and $outputs -isnot [System.Collections.IDictionary]) {
            throw [AvmProcessException]::new('The native deployment returned invalid outputs.')
        }
    }
    catch {
        $failure = $_
        $kind = Get-AvmBicepDeploymentErrorKind -ErrorRecord $_
        $failedPattern = "^(?:\d{2}:\d{2}:\d{2} - )?The deployment '$([regex]::Escape($name))' failed with error\(s\)\. " +
        '(?:Showing \d+ out of \d+ error\(s\)\. Status Message: (?:(?!\(Code:)[^\r\n])* )?\(Code: DeploymentFailed\)(?:\s|$)'
        if (Test-AvmBicepDeploymentPreflightRejection -ErrorRecord $_ -DeploymentName $name) {
            $entry['status'] = 'Rejected'
            $entry['preflightRejected'] = $true
        }
        elseif (-not $submissionReturned -and $kind -eq 'Other' -and $_.Exception.Message -cmatch $failedPattern) {
            $entry['status'] = 'Failed'
        }
        else { $entry['status'] = 'Unknown' }
        $failureQueryAllowed = -not $submissionReturned -and $kind -eq 'Other' -and -not $entry['preflightRejected']
        if ($kind -eq 'Cancellation') {
            Save-AvmBicepCleanupState -State $State -Path $StatePath -Confirm:$false
            throw
        }
        $canObserve = Test-AvmBicepRetryErrorRecord -ErrorRecord $_ -Kind MetadataTimeout
        if (-not $submissionReturned -and $DeploymentInput.Scope -eq 'mg' -and $kind -eq 'Forbidden') { $canObserve = $true }
        if (-not $submissionReturned -and $DeploymentInput.Scope -eq 'sub' -and $kind -eq 'Other') {
            $canObserve = Test-AvmBicepNestedDeploymentReadFailure -ErrorRecord $_ -DeploymentId $id -DefaultProfile $submissionProfile
        }
        if ($canObserve -and $entry['status'] -eq 'Unknown') {
            Save-AvmBicepCleanupState -State $State -Path $StatePath -Confirm:$false
            Write-AvmLog -Level Warning -Message "Request for deployment '$name' returned $kind; watching it without resubmitting."
            try {
                $recovered = Wait-AvmBicepNativeDeployment -DeploymentId $id @observationOptions
                $entry['status'] = $recovered.State
                $failureQueryAllowed = $false
                if ($kind -eq 'Forbidden' -and $recovered.State -ne 'Succeeded') {
                    throw [AvmProcessException]::new("The original management-group deployment '$id' failed after HTTP 403.")
                }
                $outputs = $recovered.Outputs
                $recoveredFailure = $recovered.State -eq 'Failed'
            }
            catch {
                $recoveryFailure = $_
                if ((Get-AvmBicepDeploymentErrorKind -ErrorRecord $_) -eq 'Cancellation') {
                    Save-AvmBicepCleanupState -State $State -Path $StatePath -Confirm:$false
                    throw
                }
                Write-AvmLog -Level Warning -Message "Status recovery for '$name' did not confirm success; outcome '$($entry['status'])'."
            }
        }
    }
    $retryMode = ''
    if ($ClassifyRetry -and $kind -ne 'Forbidden' -and $null -eq $recoveryFailure -and
        ($entry['status'] -eq 'Failed' -or $failureQueryAllowed)) {
        $classificationFailure = $failure
        if ($recoveredFailure) { $classificationFailure = $null }
        elseif ($null -ne $failure -and $failure.CategoryInfo.Category -eq 'OperationStopped') {
            $classificationFailure = [System.Management.Automation.ErrorRecord]::new(
                $failure.Exception, 'AvmBicepConfirmedDeploymentFailure',
                [System.Management.Automation.ErrorCategory]::InvalidResult, $null)
        }
        try {
            $retryKind = Get-AvmBicepDeploymentRetryKind -DeploymentId $id -SubscriptionId $State['subscriptionId'] `
                -ResourceLocation $ResourceLocation -Failure $classificationFailure
            $retryMode = switch ($retryKind) { 'Regional' { 'Fresh' } 'Transient' { 'InPlace' } default { '' } }
            if ($retryMode) { $entry['status'] = 'Failed' }
        }
        catch {
            if ((Get-AvmBicepDeploymentErrorKind -ErrorRecord $_) -eq 'Cancellation') {
                Save-AvmBicepCleanupState -State $State -Path $StatePath -Confirm:$false
                throw
            }
            $recoveryFailure = $_
            Write-AvmLog -Level Warning -Message "Failure evidence for '$name' could not be confirmed; no retry is permitted."
        }
    }
    Save-AvmBicepCleanupState -State $State -Path $StatePath -Confirm:$false
    if ($null -eq $outputs) { $outputs = @{} }
    return [pscustomobject]@{
        Status = if ($entry['status'] -eq 'Succeeded') { 'pass' } else { 'fail' }
        DeploymentName = $name; DeploymentId = $id; Outputs = $outputs; Attempt = $Attempt
        RetryMode = $retryMode; ErrorKind = $kind; Outcome = $entry['status']
        ErrorRecord = $failure; RecoveryErrorRecord = $recoveryFailure
    }
}

# SIG # Begin signature block
# MIInUAYJKoZIhvcNAQcCoIInQTCCJz0CAQExDzANBglghkgBZQMEAgEFADB5Bgor
# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG
# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCDMFNPJWW/vHbw+
# dO4NGy+/jP4ht5fp+1Up+HMj6oZv8KCCDMkwggYEMIID7KADAgECAhMzAAACHPrN
# xZvoL37EAAAAAAIcMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMR4wHAYD
# VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBD
# b2RlIFNpZ25pbmcgUENBIDIwMjQwHhcNMjYwNDE2MTg1OTQxWhcNMjcwNDE1MTg1
# OTQxWjB0MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE
# BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYD
# VQQDExVNaWNyb3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IB
# DwAwggEKAoIBAQDVsZfgOKmM31HPfoWOoNEiw0SlCiIxUMC0I9NMWbucKOw/e9lP
# oAoehQVu6SG65V4EPzrYsnBnFPNoi4/HoOdjhz1qkrEt4I6tEcxXU6oOeY9zGveC
# /3iBeuhLYxM3M/PkcUoebF+Nednm8OkdSPoDu8imViHPQq/8CQUu0WRR4rE+dMRf
# rpVqfmNi2qWCX94T4MsepijGVkwE//tJg0ryAiYdHT34LSnlG/RSBZmQRGWZ5g8j
# qnKjRParSqMft1gvjuUTVgtWNZfgcLFSK5Wa0myrq8OPcgTGGsRgun+tnSS+IxDT
# xVsAPH1OzvPjwomguByhUe/OcvUN0D5Wmp7xAgMBAAGjggGqMIIBpjAOBgNVHQ8B
# Af8EBAMCB4AwHwYDVR0lBBgwFgYKKwYBBAGCN0wIAQYIKwYBBQUHAwMwHQYDVR0O
# BBYEFNoH7a2YDjOSwpkp6DHcmUS7J+0yMFQGA1UdEQRNMEukSTBHMS0wKwYDVQQL
# EyRNaWNyb3NvZnQgSXJlbGFuZCBPcGVyYXRpb25zIExpbWl0ZWQxFjAUBgNVBAUT
# DTIzMDAxMis1MDc1NjkwHwYDVR0jBBgwFoAUf1k/VCHarU/vBeXmo9ctBpQSCDEw
# YAYDVR0fBFkwVzBVoFOgUYZPaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9w
# cy9jcmwvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNy
# bDBtBggrBgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUWh0dHA6Ly93d3cubWljcm9z
# b2Z0LmNvbS9wa2lvcHMvY2VydHMvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmcl
# MjBQQ0ElMjAyMDI0LmNydDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4IC
# AQAUnEqhaRXe0T3hIJjvdQErEkrA/7bByjn6t5IArODkkRjzkYwtKMc2yYj2quaN
# rLutWw2YZcngKPy1b71YyDJQTy4NDRwaSh9Tw5thrk3NmcPrAHia5vtcBJ1CgtKK
# 7mQbIcQ22d/N3813ayCDDFewu1+jsZmX+r/aTEqaOM4TVxVtRSkuCy8nAXKuChOK
# Li/zA4XuH8iEYqIsj2YoNaeSxVmeGiERXpKdo3dDmYi0kO5w2D8VS4c3+9h6gElY
# BaAAg/dYErBg27qT3vv0zRDJhJufvCNylA8S7/+8H5E/PV5cng6na9VV/w9OV3qu
# uND6zdGa2EX38Glp50F9AIQk3p2xXmcvorDeM4XJ7UlWYBi6g80J1SSOQnInCYFE
# msfUNn3+1AaTJKSJL83quKArTac2pKhu0Yzzzrzo6HrsRiQKzpnRBb1/dMa6P3hz
# 75XbMRBctNsFhZC07WCmjExdLg2eHW5uV0TY8D5+6wozJf7vF3+WHkYPO85Z+BC6
# U4FkNbYNycZ9cE4j1tXRdyDCfml6c0HWPHjNVDObrv9lKt3qUqFpX38VCqVCyNOO
# 1UcXfQiVjJw32U2WUKZjt/neJKHEBsm9kFsLuWzkQ53+qcaSaytmsCnk2gOglrlD
# 5d3kKyvvAw+rzm0lT8K38P6PLxfZQHhu4W8dV7Av8N2ZmDCCBr0wggSloAMCAQIC
# EzMAAAA5O7Y3Gb8GHWcAAAAAADkwDQYJKoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYT
# AlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYD
# VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBS
# b290IENlcnRpZmljYXRlIEF1dGhvcml0eSAyMDExMB4XDTI0MDgwODIwNTQxOFoX
# DTM2MDMyMjIyMTMwNFowVzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFU1pY3Jvc29m
# dCBDb3Jwb3JhdGlvbjEoMCYGA1UEAxMfTWljcm9zb2Z0IENvZGUgU2lnbmluZyBQ
# Q0EgMjAyNDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANgBnB7jOMeq
# lRYHNa265v4IY9fH8TKhemHfPINe1gpLaV3dhg324WwH06LcHbpnsBukCDNitryo
# 0dtS/EW6I/yEL/bLSY8hKpbfQuWusBPr9qazYcDxCW/qnjb5JsI1s8bNOg3bVATv
# QVL4tcf03aTycsz8QeCdM0l/yHRObJ9QqazM1r6VPEOJ7LL+uEEb73w6QCuhs89a
# 1uv1zerOYMnsneRRwCbpyW11IcggU0cRKDDq1pjVJzIbIF6+oiXXbReOsgeI8zu1
# FyQfK0fVkaya8SmVHQ/tOf23mZ4W9k0Ri22QW9p3UgSC5OUDktKxxcCmGL6tXLfO
# GSWHIIV4YrTJTT6PNty5REojHJuZHArkF9VnHTERWoTjAzfI3kP+5b4alUdhgAZ7
# ttOu1bVnXfHaqPYl2rPs20ji03LOVWsh/radgE17es5hL+t6lV0eVHrVhsssROWJ
# uz2MXMCt7iw7lFPG9LXKGjsmonn2gotGdHIuEg5JnJMJVmixd5LRlkmgYRZKzhxS
# CwyoGIq0PhaA7Y+VPct5pCHkijcIIDm0nlkK+0KyepolcqGm0T/GYQRMhHJlGOOm
# VQop36wUVUYklUy++vDWeEgEo4s7hxN6mIbf2MSIQ/iIfMZgJxC69oukMUXCrOC3
# SkE/xIkgpfl22MM1itkZ35nNXkMolU1lAgMBAAGjggFOMIIBSjAOBgNVHQ8BAf8E
# BAMCAYYwEAYJKwYBBAGCNxUBBAMCAQAwHQYDVR0OBBYEFH9ZP1Qh2q1P7wXl5qPX
# LQaUEggxMBkGCSsGAQQBgjcUAgQMHgoAUwB1AGIAQwBBMA8GA1UdEwEB/wQFMAMB
# Af8wHwYDVR0jBBgwFoAUci06AjGQQ7kUBU7h6qfHMdEjiTQwWgYDVR0fBFMwUTBP
# oE2gS4ZJaHR0cDovL2NybC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMv
# TWljUm9vQ2VyQXV0MjAxMV8yMDExXzAzXzIyLmNybDBeBggrBgEFBQcBAQRSMFAw
# TgYIKwYBBQUHMAKGQmh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvY2VydHMv
# TWljUm9vQ2VyQXV0MjAxMV8yMDExXzAzXzIyLmNydDANBgkqhkiG9w0BAQwFAAOC
# AgEAFJQfOChP7onn6fLIMKrSlN1WYKwDFgAddymOUO3FrM8d7B/W/iQ6DxXsDn7D
# 5W4wMwYeLystcEqfkjz4NURRgazyMu5yRzQh4LqjA4tStTcJh1opExo7nn5PuPBY
# nbu0+THSuVHTe0VTTPVhily/piFrDo3axQ9P4C+Ol5yet+2gTfekICS5xS+cYfSI
# vgn0JksVBVMYVI5QFu/qhnLhsEFEUzG8fvv0hjgkO+lkpV9ty6GkN4vdnd7ya6Q6
# aR9y34aiM1qmxaxBi6OUnyNl6fkuun/diTFnYDLTppOkr/mg5WSfCiDVMNCxtj4w
# PKC5OmHm1DQIt/MNokbbH3UGsFP1QbzsLocuSqLCvH09Io3fDPTmscR9Y75G4qX7
# RTX8AdBPo0I6OEojf39zuFZt0qOHm65YWQE69cZM2ueE1MB05dNNgHK9gTE7zKvK
# /fg8B2qjW88MT/WF5V5uvZGtqa9FSL2RazArA+rDPuf6JGYz4HpgMZHB4S6szWSK
# YBv0VisCzfxgeU+dquXW9bd0auYlOB58DPcOYKdc3Se94g+xL4pcEhbB54JOgAkw
# YTu/9dLeH2pDqeJZAABVDWRQCaXfO5LgyKwKCLYXpigrZYCjUSBcr+Ve8PFWMhVT
# Ql0v4q8J/AUmQN5W4n101cY2L4A7GTQG1h32HHAvfQESWP0xghndMIIZ2QIBATBu
# MFcxCzAJBgNVBAYTAlVTMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24x
# KDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMjQCEzMAAAIc
# +s3Fm+gvfsQAAAAAAhwwDQYJYIZIAWUDBAIBBQCggZAwGQYJKoZIhvcNAQkDMQwG
# CisGAQQBgjcCAQQwLwYJKoZIhvcNAQkEMSIEIAyxiMELrK81qjGz3/MqVDdjg5e1
# Of48wwpGYAuhDXOrMEIGCisGAQQBgjcCAQwxNDAyoBSAEgBNAGkAYwByAG8AcwBv
# AGYAdKEagBhodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20wDQYJKoZIhvcNAQEBBQAE
# ggEA1R/4UN7JY8d2d+8eeTP3MA9kJw9qVXhl0H5j3BVYGrkScHgpbkUs5CdF60IF
# a0CnwJ8MclOYf/+zfN4C8a7e1tIduZAmuGvzpPxXa/DuL1OqhqmQQKpREDiM/uBh
# h898wQI3aIW3KcnBIOfVCvgfe8BEJjD/yUFNMcAxSz+EJpjFV+1yz+22g544bPdX
# tw4O+cseB+MHbjKLTUdYkamVxo2CJThh6n6WRygePJn5/VKiiZel0f2R6rGCYGB0
# NeWiBN01MbDK+EnnV3v/tTw/rr+bvzI3OcvriY4a2RiZACQ11oUHF5lxa91wqqZS
# 6ejdS/JeWyXR5aIbxKpQuqiJ0qGCF60wghepBgorBgEEAYI3AwMBMYIXmTCCF5UG
# CSqGSIb3DQEHAqCCF4YwgheCAgEDMQ8wDQYJYIZIAWUDBAIBBQAwggFaBgsqhkiG
# 9w0BCRABBKCCAUkEggFFMIIBQQIBAQYKKwYBBAGEWQoDATAxMA0GCWCGSAFlAwQC
# AQUABCC1wBlxnvp2LR78QP5a1IPhYwMtPDU8WIyKzv/7e9lkQwIGaq7w24LSGBMy
# MDI2MTAyMDE0MTA0OS44MzhaMASAAgH0oIHZpIHWMIHTMQswCQYDVQQGEwJVUzET
# MBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMV
# TWljcm9zb2Z0IENvcnBvcmF0aW9uMS0wKwYDVQQLEyRNaWNyb3NvZnQgSXJlbGFu
# ZCBPcGVyYXRpb25zIExpbWl0ZWQxJzAlBgNVBAsTHm5TaGllbGQgVFNTIEVTTjo1
# OTFBLTA1RTAtRDk0NzElMCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAgU2Vy
# dmljZaCCEfswggcoMIIFEKADAgECAhMzAAACFI3NI0TuBt9yAAEAAAIUMA0GCSqG
# SIb3DQEBCwUAMHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAw
# DgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24x
# JjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwMB4XDTI1MDgx
# NDE4NDgxOFoXDTI2MTExMzE4NDgxOFowgdMxCzAJBgNVBAYTAlVTMRMwEQYDVQQI
# EwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3Nv
# ZnQgQ29ycG9yYXRpb24xLTArBgNVBAsTJE1pY3Jvc29mdCBJcmVsYW5kIE9wZXJh
# dGlvbnMgTGltaXRlZDEnMCUGA1UECxMeblNoaWVsZCBUU1MgRVNOOjU5MUEtMDVF
# MC1EOTQ3MSUwIwYDVQQDExxNaWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2aWNlMIIC
# IjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAyU+nWgCUyvfyGP1zTFkLkdgO
# utXcVteP/0CeXfrF/66chKl4/MZDCQ6E8Ur4kqgCxQvef7Lg1gfso1EWWKG6vix1
# VxtvO1kPGK4PZKmOeoeL68F6+Mw2ERPy4BL2vJKf6Lo5Z7X0xkRjtcvfM9T0HDgf
# HUW6z1CbgQiqrExs2NH27rWpUkyTYrMG6TXy39+GdMOTgXyUDiRGVHAy3EqYNw3z
# SWusn0zedl6a/1DbnXIcvn9FaHzd/96EPNBOCd2vOpS0Ck7kgkjVxwOptsWa8I+m
# +DA43cwlErPaId84GbdGzo3VoO7YhCmQIoRab0d8or5Pmyg+VMl8jeoN9SeUxVZp
# BI/cQ4TXXKlLDkfbzzSQriViQGJGJLtKS3DTVNuBqpjXLdu2p2Yq9ODPqZCoiNBh
# 4CB6X2iLYUSO8tmbUVLMMEegbvHSLXQR88QNICjFoBBDCDydoTo9/TNkq80mO77w
# DM04tPdvbMmxT01GTod60JJxUGmMTgseghdBGjkN+D6GsUpY7ta7hP9PzLrs+Alx
# u46XT217bBn6EwJsAYAc9C28mKRUcoIZWQRb+McoZaSu2EcSzuIlAaNIQNtGlz2P
# F3foSeGmc/V7gCGs8AHkiKwXzJSPftnsH8O/R3pJw2D/2hHE3JzxH2SrLX1FdI7D
# rw145PkL0hbFL6MVCCkCAwEAAaOCAUkwggFFMB0GA1UdDgQWBBTbX/bs1cSpyTYn
# Yuf/Mt9CPNhwGzAfBgNVHSMEGDAWgBSfpxVdAF5iXYP05dJlpxtTNRnpcjBfBgNV
# HR8EWDBWMFSgUqBQhk5odHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2Ny
# bC9NaWNyb3NvZnQlMjBUaW1lLVN0YW1wJTIwUENBJTIwMjAxMCgxKS5jcmwwbAYI
# KwYBBQUHAQEEYDBeMFwGCCsGAQUFBzAChlBodHRwOi8vd3d3Lm1pY3Jvc29mdC5j
# b20vcGtpb3BzL2NlcnRzL01pY3Jvc29mdCUyMFRpbWUtU3RhbXAlMjBQQ0ElMjAy
# MDEwKDEpLmNydDAMBgNVHRMBAf8EAjAAMBYGA1UdJQEB/wQMMAoGCCsGAQUFBwMI
# MA4GA1UdDwEB/wQEAwIHgDANBgkqhkiG9w0BAQsFAAOCAgEAP3xp9D4Gu0SH9B+1
# JH0hswFquINaTT+RjpfEr8UmUOeDl4U5uV+i28/eSYXMxgem3yBZywYDyvf4qMXU
# vbDcllNqRyL2Rv8jSu8wclt/VS1+c5cVCJfM+WHvkUr+dCfUlOy9n4exCPX1L6uW
# wFH5eoFfqPEp3Fw30irMN2SonHBK3mB8vDj3D80oJKqe2tatO38yMTiREdC2HD7e
# VIUWL7d54UtoYxzwkJN1t7gEEGosgBpdmwKVYYDO1USWSNmZELglYA4LoVoGDuWb
# N7mD8VozYBsfkZarOyrJYlF/UCDZLB8XaLfrMfMyZTMCOuEuPD4zj8jy/Jt40clr
# IW04cvLhkhkydBzcrmC2HxeE36gJsh+jzmivS9YvyiPhLkom1FP0DIFr4VlqyXHK
# agrtnqSF8QyEpqtQS7wS7ZzZF0eZe0fsYD0J1RarbVuDxmWsq45n1vjRdontuGUd
# mrG2OGeKd8AtiNghfnabVBbgpYgcx/eLyW/n40eTbKIlsm0cseyuWvYFyOqQXjoW
# tL4/sUHxlWIsrjnNarNr+POkL8C1jGBCJuvm0UYgjhIaL+XBXavrbOtX9mrZ3y8G
# QDxWXn3mhqM21ZcGk83xSRqB9ecfGYNRG6g65v635gSzUmBKZWWcDNzwAoxsgEjT
# FXz6ahfyrBLqshrjJXPKfO+9Ar8wggdxMIIFWaADAgECAhMzAAAAFcXna54Cm0mZ
# AAAAAAAVMA0GCSqGSIb3DQEBCwUAMIGIMQswCQYDVQQGEwJVUzETMBEGA1UECBMK
# V2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0
# IENvcnBvcmF0aW9uMTIwMAYDVQQDEylNaWNyb3NvZnQgUm9vdCBDZXJ0aWZpY2F0
# ZSBBdXRob3JpdHkgMjAxMDAeFw0yMTA5MzAxODIyMjVaFw0zMDA5MzAxODMyMjVa
# MHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdS
# ZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMT
# HU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwMIICIjANBgkqhkiG9w0BAQEF
# AAOCAg8AMIICCgKCAgEA5OGmTOe0ciELeaLL1yR5vQ7VgtP97pwHB9KpbE51yMo1
# V/YBf2xK4OK9uT4XYDP/XE/HZveVU3Fa4n5KWv64NmeFRiMMtY0Tz3cywBAY6GB9
# alKDRLemjkZrBxTzxXb1hlDcwUTIcVxRMTegCjhuje3XD9gmU3w5YQJ6xKr9cmmv
# Haus9ja+NSZk2pg7uhp7M62AW36MEBydUv626GIl3GoPz130/o5Tz9bshVZN7928
# jaTjkY+yOSxRnOlwaQ3KNi1wjjHINSi947SHJMPgyY9+tVSP3PoFVZhtaDuaRr3t
# pK56KTesy+uDRedGbsoy1cCGMFxPLOJiss254o2I5JasAUq7vnGpF1tnYN74kpEe
# HT39IM9zfUGaRnXNxF803RKJ1v2lIH1+/NmeRd+2ci/bfV+AutuqfjbsNkz2K26o
# ElHovwUDo9Fzpk03dJQcNIIP8BDyt0cY7afomXw/TNuvXsLz1dhzPUNOwTM5TI4C
# vEJoLhDqhFFG4tG9ahhaYQFzymeiXtcodgLiMxhy16cg8ML6EgrXY28MyTZki1ug
# poMhXV8wdJGUlNi5UPkLiWHzNgY1GIRH29wb0f2y1BzFa/ZcUlFdEtsluq9QBXps
# xREdcu+N+VLEhReTwDwV2xo3xwgVGD94q0W29R6HXtqPnhZyacaue7e3PmriLq0C
# AwEAAaOCAd0wggHZMBIGCSsGAQQBgjcVAQQFAgMBAAEwIwYJKwYBBAGCNxUCBBYE
# FCqnUv5kxJq+gpE8RjUpzxD/LwTuMB0GA1UdDgQWBBSfpxVdAF5iXYP05dJlpxtT
# NRnpcjBcBgNVHSAEVTBTMFEGDCsGAQQBgjdMg30BATBBMD8GCCsGAQUFBwIBFjNo
# dHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL0RvY3MvUmVwb3NpdG9yeS5o
# dG0wEwYDVR0lBAwwCgYIKwYBBQUHAwgwGQYJKwYBBAGCNxQCBAweCgBTAHUAYgBD
# AEEwCwYDVR0PBAQDAgGGMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAU1fZW
# y4/oolxiaNE9lJBb186aGMQwVgYDVR0fBE8wTTBLoEmgR4ZFaHR0cDovL2NybC5t
# aWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMvTWljUm9vQ2VyQXV0XzIwMTAt
# MDYtMjMuY3JsMFoGCCsGAQUFBwEBBE4wTDBKBggrBgEFBQcwAoY+aHR0cDovL3d3
# dy5taWNyb3NvZnQuY29tL3BraS9jZXJ0cy9NaWNSb29DZXJBdXRfMjAxMC0wNi0y
# My5jcnQwDQYJKoZIhvcNAQELBQADggIBAJ1VffwqreEsH2cBMSRb4Z5yS/ypb+pc
# FLY+TkdkeLEGk5c9MTO1OdfCcTY/2mRsfNB1OW27DzHkwo/7bNGhlBgi7ulmZzpT
# Td2YurYeeNg2LpypglYAA7AFvonoaeC6Ce5732pvvinLbtg/SHUB2RjebYIM9W0j
# VOR4U3UkV7ndn/OOPcbzaN9l9qRWqveVtihVJ9AkvUCgvxm2EhIRXT0n4ECWOKz3
# +SmJw7wXsFSFQrP8DJ6LGYnn8AtqgcKBGUIZUnWKNsIdw2FzLixre24/LAl4FOmR
# sqlb30mjdAy87JGA0j3mSj5mO0+7hvoyGtmW9I/2kQH2zsZ0/fZMcm8Qq3UwxTSw
# ethQ/gpY3UA8x1RtnWN0SCyxTkctwRQEcb9k+SS+c23Kjgm9swFXSVRk2XPXfx5b
# RAGOWhmRaw2fpCjcZxkoJLo4S5pu+yFUa2pFEUep8beuyOiJXk+d0tBMdrVXVAmx
# aQFEfnyhYWxz/gq77EFmPWn9y8FBSX5+k77L+DvktxW/tM4+pTFRhLy/AsGConsX
# HRWJjXD+57XQKBqJC4822rpM+Zv/Cuk0+CQ1ZyvgDbjmjJnW4SLq8CdCPSWU5nR0
# W2rRnj7tfqAxM328y+l7vzhwRNGQ8cirOoo6CGJ/2XBjU02N7oJtpQUQwXEGahC0
# HVUzWLOhcGbyoYIDVjCCAj4CAQEwggEBoYHZpIHWMIHTMQswCQYDVQQGEwJVUzET
# MBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMV
# TWljcm9zb2Z0IENvcnBvcmF0aW9uMS0wKwYDVQQLEyRNaWNyb3NvZnQgSXJlbGFu
# ZCBPcGVyYXRpb25zIExpbWl0ZWQxJzAlBgNVBAsTHm5TaGllbGQgVFNTIEVTTjo1
# OTFBLTA1RTAtRDk0NzElMCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAgU2Vy
# dmljZaIjCgEBMAcGBSsOAwIaAxUA2RysX196RXLTwA/P8RFWdUTpUsaggYMwgYCk
# fjB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMH
# UmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQD
# Ex1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMDANBgkqhkiG9w0BAQsFAAIF
# AO6BoZ8wIhgPMjAyNjEwMjAwODE1MjdaGA8yMDI2MTAyMTA4MTUyN1owdDA6Bgor
# BgEEAYRZCgQBMSwwKjAKAgUA7oGhnwIBADAHAgEAAgIBTjAHAgEAAgIUQTAKAgUA
# 7oLzHwIBADA2BgorBgEEAYRZCgQCMSgwJjAMBgorBgEEAYRZCgMCoAowCAIBAAID
# B6EgoQowCAIBAAIDAYagMA0GCSqGSIb3DQEBCwUAA4IBAQA2dj42IVJxkaCaXxmt
# APhtJVIgkQ+GsE5ipHgiYUyoufmEhHTSW2rUGVbbYx3uUmZ+NvCyGyFMtBqK1ieU
# 0dFSa+nZei3JJ5kA+jAXncS2r2rxSWe7b2ecVTm8I3b7Y//8LsETHLCDbdzKpSwu
# 4EvyRIyfsIs0f9oqFKw6W1Qg75v/u35QIVfSJT0HO7C6WNJfNdL3Ah/U26zbYwsn
# QeWSWEZyhnCwtR8YZHVojp58qErukCjT4OejAk/UwCtXddPR2TFTRwwowlxpoMxj
# htr2M3nCv7z8Bh8+slxqMwMYt5vx6CaNEYsVo7QqTc4diD66M2uIXU7kJ0w76V5N
# 2EbjMYIEDTCCBAkCAQEwgZMwfDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hp
# bmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jw
# b3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTAC
# EzMAAAIUjc0jRO4G33IAAQAAAhQwDQYJYIZIAWUDBAIBBQCgggFKMBoGCSqGSIb3
# DQEJAzENBgsqhkiG9w0BCRABBDAvBgkqhkiG9w0BCQQxIgQgAbtUCDvbyfB7PAPh
# vy55QevBZX8STuiv7UsiuGJpp3swgfoGCyqGSIb3DQEJEAIvMYHqMIHnMIHkMIG9
# BCA2eKvvWx5bcoi43bRO3+EttQUCvyeD2dbXy/6+0xK+xzCBmDCBgKR+MHwxCzAJ
# BgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25k
# MR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jv
# c29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwAhMzAAACFI3NI0TuBt9yAAEAAAIUMCIE
# INjhMcR/9po9OdttSbINPmV/npW7m6K+mTW7NSanxHfrMA0GCSqGSIb3DQEBCwUA
# BIICACWGzJbKCSmXrciR6U17z6oXFuLfIzZZhwAqkdAXU4SWLSCt9SiPYXyzzVqg
# rLEeikik3Da6O04CrdhJpjTAH5reu6sxzjySvoIHxAI5lmyLDeufk1HsIggaWYgj
# G0hf77zcwNmeHN5Ag+OKltLLKhGO9JcVzpejaZVIs627pWPj2OsQzBDezSbcqarZ
# a0mRKnKljegi7sPpu/kS11Qze6vT9TI5E7FCf27UDU92Hf7t/tkq4LtQeIR3Fogl
# Uv3d654tQJ3lMK1TEHS4nIx/J4WCwT8qATwohjCnupXVbWA4VTrUe24v5c9LGsPu
# 5uJX5MsNzH1kXA8p2UzhpGxAQMLD0L2dFWDvhJ2eGGGOQemI6s8dq0lomIV8XJt2
# YTVL1cvuPEsTFTFas57aubOAaBy/Vj/It+7wDsTNJky/5sQeIeK6RfVOuuA4Nbox
# LkBY0eOSvoZAU0BpwY5UHLcw9bIOGMoTqRCsuT7TB73es5K3vPsB8AIxGXLtBeHY
# TLAARAWbEtq4WORWjB9+kMU/1lvGB/42BnTDyj4nou44q+HNLLEQq/s0OtvHlFwA
# NtNQSv9KAQ2taxk8MENVE3yBNGdFaY4nNU0EGHnKCFJSTiLVHNeEezML7LPIWmF5
# x4d+pveUzkaZ2r3NJrKUWPB0ZcKpvO0UUIB95zHzuVb+EnQr
# SIG # End signature block