Private/Tests/Cleanup/Get-AvmBicepDeploymentCleanupTarget.ps1

function Get-AvmBicepDeploymentCleanupTarget {
    [CmdletBinding()]
    [OutputType([pscustomobject])]
    param(
        [AllowEmptyCollection()]
        [string[]] $DeploymentIds = @(),

        [string[]] $PreflightRejectedDeploymentIds = @(),

        [ValidateRange(1, 1000)]
        [int] $SearchRetryLimit = 40,

        [ValidateRange(0, 3600)]
        [int] $SearchRetryInterval = 60,

        [System.Collections.IDictionary] $IsolationState = @{},

        # A retry snapshot requires terminal records and complete Create history, but deletes nothing.
        [switch] $RequireCompleteRemoval
    )

    Set-StrictMode -Version 3.0
    $ErrorActionPreference = 'Stop'

    $records = [System.Collections.Generic.Dictionary[string, hashtable]]::new(
        [System.StringComparer]::OrdinalIgnoreCase)
    foreach ($deployment in ConvertTo-AvmBicepCleanupResource -ResourceIds $DeploymentIds) {
        Assert-AvmBicepIsolationBoundary -State $IsolationState -ResourceIds @($deployment.resourceId)
        if ($deployment.type -ine 'Microsoft.Resources/deployments') {
            throw [AvmConfigurationException]::new("Not a deployment ID: $($deployment.resourceId)")
        }
        $records[$deployment.resourceId] = @{
            Id                = $deployment.resourceId
            Required          = $true
            Depth             = 0
            PreflightRejected = $false
            Status            = 'Pending'
            ErrorCode         = ''
            ErrorMessage      = ''
            References        = 0
        }
    }
    foreach ($rejectedId in $PreflightRejectedDeploymentIds) {
        if (-not $records.ContainsKey($rejectedId)) {
            throw [AvmConfigurationException]::new(
                'Preflight rejection metadata contains IDs outside the attempted deployments.')
        }
        $records[$rejectedId].PreflightRejected = $true
    }
    $resources = [System.Collections.Generic.HashSet[string]]::new(
        [System.StringComparer]::OrdinalIgnoreCase)

    for ($round = 1; $round -le $SearchRetryLimit; $round++) {
        $queue = [System.Collections.Generic.Queue[string]]::new()
        foreach ($record in $records.Values) {
            if ($record.Status -eq 'Pending') {
                $queue.Enqueue($record.Id)
            }
        }
        while ($queue.Count -gt 0) {
            $record = $records[$queue.Dequeue()]
            $nextPath = $record.Id + '/operations?api-version=2025-04-01'
            $visitedPages = [System.Collections.Generic.HashSet[string]]::new(
                [System.StringComparer]::Ordinal)
            $operations = [System.Collections.Generic.List[object]]::new()
            $children = [System.Collections.Generic.HashSet[string]]::new([System.StringComparer]::OrdinalIgnoreCase)
            $exports = @{}
            try {
                if ($RequireCompleteRemoval) {
                    Assert-AvmBicepCleanupDeploymentTerminal -Record $record
                    if ($record.Status -eq 'RejectedWithoutRecord') { continue }
                }
                while (-not [string]::IsNullOrEmpty($nextPath)) {
                    if (-not $visitedPages.Add($nextPath) -or $visitedPages.Count -gt 1000) {
                        throw [AvmProcessException]::new("Repeated or excessive deployment operations page: $nextPath")
                    }
                    $response = Invoke-AvmBicepRead -Activity 'Read cleanup operation page' -Read {
                        Invoke-AzRestMethod -Method GET -Path $nextPath -ErrorAction Stop
                    }
                    $document = ConvertFrom-AvmBicepRestResponse -Response $response -Activity 'Read cleanup operation page' `
                        -AllowedStatus @(200, 404)
                    if ([int]$response.StatusCode -ne 200) {
                        $errorBody = Get-AvmPropertyValue -InputObject $document -Name 'error'
                        $errorCode = [string](Get-AvmPropertyValue -InputObject $errorBody -Name 'code')
                        $groupScope = $record.Id -match '^/subscriptions/[^/]+/resourceGroups/[^/]+/providers/Microsoft\.Resources/deployments/[^/]+$'
                        if ([int]$response.StatusCode -eq 404 -and $groupScope -and $errorCode -ceq 'ResourceGroupNotFound') {
                            $record.Status = 'ContainerRemoved'
                            break
                        }
                        if ([int]$response.StatusCode -eq 404 -and $errorCode -ceq 'DeploymentNotFound') {
                            if ($RequireCompleteRemoval) {
                                throw [AvmProcessException]::new("Existing deployment has no complete operation history: $($record.Id)")
                            }
                            if ($visitedPages.Count -gt 1) {
                                throw [AvmProcessException]::new(
                                    "Deployment record disappeared during pagination: $($record.Id)")
                            }
                            if ($record.PreflightRejected) {
                                $record.Status = 'RejectedWithoutRecord'
                            }
                            elseif (-not $record.Required) {
                                $record.Status = 'NestedRecordAbsent'
                                Write-AvmLog -Message "Nested deployment record is absent: $($record.Id)" -Level Warning
                            }
                            $record.ErrorCode = 'DeploymentNotFound'
                            break
                        }
                        throw [AvmProcessException]::new(
                            "Deployment operations lookup failed: HTTP $($response.StatusCode), code '$errorCode', deployment '$($record.Id)'.")
                    }
                    if ($document -isnot [System.Collections.IDictionary] -or
                        -not $document.Contains('value') -or $document['value'] -isnot [array] -or
                        @($document.psbase.Keys | Where-Object { $_ -cnotin @('value', 'nextLink') }).Count -gt 0) {
                        throw [AvmProcessException]::new("Invalid deployment operations response: $($record.Id)")
                    }
                    foreach ($operation in $document['value']) {
                        $properties = Get-AvmPropertyValue -InputObject $operation -Name 'properties' -NoEnumerate
                        if ($properties -isnot [System.Collections.IDictionary]) {
                            throw [AvmProcessException]::new("Invalid deployment operation properties: $($record.Id)")
                        }
                        if ($RequireCompleteRemoval -and
                            ($properties['provisioningState'] -isnot [string] -or
                            $properties['provisioningState'] -cnotin @('Succeeded', 'Failed') -or
                            $properties['provisioningOperation'] -isnot [string] -or
                            [string]::IsNullOrWhiteSpace($properties['provisioningOperation']))) {
                            throw [AvmProcessException]::new("Deployment has an incomplete operation: $($record.Id)")
                        }
                        $operations.Add($properties)
                        if ((Get-AvmPropertyValue -InputObject $properties -Name 'provisioningOperation') -ine 'Create') {
                            continue
                        }
                        $target = Get-AvmPropertyValue -InputObject $properties -Name 'targetResource' -NoEnumerate
                        if ($null -eq $target -and -not $RequireCompleteRemoval) {
                            continue
                        }
                        $targetId = $null
                        if ($target -is [System.Collections.IDictionary]) { $targetId = $target['id'] }
                        if ($targetId -isnot [string] -or [string]::IsNullOrWhiteSpace($targetId)) {
                            if (Test-AvmBicepExistingGraphLookup -Operation $properties -DeploymentId $record.Id -Exports $exports) {
                                continue
                            }
                            throw [AvmProcessException]::new("Deployment operation has an invalid target ID: $($record.Id)")
                        }
                        foreach ($resource in @(Resolve-AvmBicepCleanupResource -ResourceId $targetId)) {
                            Assert-AvmBicepIsolationBoundary -State $IsolationState -ResourceIds @($resource.resourceId)
                            if ($resource.type -ieq 'Microsoft.Resources/deployments') {
                                if (-not $records.ContainsKey($resource.resourceId)) {
                                    $records.Add($resource.resourceId, @{
                                            Id                = $resource.resourceId
                                            Required          = $false
                                            Depth             = $record.Depth + 1
                                            PreflightRejected = $false
                                            Status            = 'Pending'
                                            ErrorCode         = ''
                                            ErrorMessage      = ''
                                            References        = 0
                                        })
                                    $queue.Enqueue($resource.resourceId)
                                }
                                $child = $records[$resource.resourceId]
                                $child.References++
                                $null = $children.Add($resource.resourceId)
                                if ($RequireCompleteRemoval -and -not $child.Required -and $child.References -gt 1) {
                                    $child.PreflightRejected = $false
                                    if ($child.Status -eq 'RejectedWithoutRecord') {
                                        $child.Status = 'Failed'
                                        $child.ErrorCode = 'AmbiguousPreflightRejection'
                                        $child.ErrorMessage = "Multiple operations reference preflight-rejected deployment '$($child.Id)'."
                                    }
                                }
                            }
                            else {
                                $null = $resources.Add($resource.resourceId)
                            }
                        }
                    }
                    $nextPath = Resolve-AvmBicepCleanupNextLink -ExpectedPath ($record.Id + '/operations') -NextLink (
                        Get-AvmPropertyValue -InputObject $document -Name 'nextLink' -NoEnumerate)
                    if ([string]::IsNullOrEmpty($nextPath)) {
                        $record.Status = 'Resolved'
                        $record.ErrorCode = ''
                    }
                }
                if ($RequireCompleteRemoval -and $record.Status -eq 'Resolved' -and $record.ProvisioningState -ceq 'Failed') {
                    foreach ($childId in $children) {
                        $child = $records[$childId]
                        if (-not $child.Required -and $child.References -eq 1) {
                            $child.PreflightRejected = Test-AvmBicepNestedPreflightRejection -DeploymentId $childId -Operations $operations.ToArray()
                        }
                    }
                }
            }
            catch {
                if ((Get-AvmBicepDeploymentErrorKind -ErrorRecord $_) -eq 'Cancellation' -or
                    $_.FullyQualifiedErrorId.Split(',')[0] -eq 'AvmBicepContextRestoreFailed') {
                    throw
                }
                $record.Status = 'Failed'
                $record.ErrorCode = 'LookupFailed'
                $record.ErrorMessage = $_.Exception.Message
                Write-AvmLog -Message (
                    "Deployment lookup failed for '$($record.Id)'; known targets will still be cleaned. $($_.Exception.Message)"
                ) -Level Warning
            }
        }
        $pending = @($records.Values | Where-Object { $_.Status -eq 'Pending' })
        if ($pending.Count -eq 0 -or $round -eq $SearchRetryLimit) {
            break
        }
        Write-AvmLog -Message (
            "Waiting for $($pending.Count) deployment record(s); lookup round $round/$SearchRetryLimit."
        ) -Level Info
        Start-Sleep -Seconds $SearchRetryInterval
    }

    $issues = [System.Collections.Generic.List[object]]::new()
    foreach ($record in $records.Values) {
        if ($record.Status -eq 'Pending') {
            $record.Status = 'Missing'
            $record.ErrorMessage = "Deployment record not found after $SearchRetryLimit lookups: $($record.Id)"
        }
        $unresolved = $RequireCompleteRemoval -and $record.Status -in @('NestedRecordAbsent', 'ContainerRemoved')
        if ($unresolved) {
            $record.ErrorMessage = "Deployment record could not be resolved ($($record.Status)): $($record.Id)"
        }
        if ($record.Status -in @('Missing', 'Failed') -or $unresolved) {
            $issues.Add([pscustomobject]@{
                    DeploymentId = $record.Id
                    Code         = $record.ErrorCode
                    Message      = $record.ErrorMessage
                })
        }
    }
    [pscustomobject]@{
        ResourceIds = [string[]]@($resources)
        Deployments = @($records.Values)
        Issues      = $issues.ToArray()
    }
}

# SIG # Begin signature block
# MIInRAYJKoZIhvcNAQcCoIInNTCCJzECAQExDzANBglghkgBZQMEAgEFADB5Bgor
# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG
# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCBu92YHriPalWfz
# xzba+mHCZK8DS5yP1oNY6/Kw84jxJqCCDLowggX1MIID3aADAgECAhMzAAACHU0Z
# yE7XD1dIAAAAAAIdMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMR4wHAYD
# VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBD
# b2RlIFNpZ25pbmcgUENBIDIwMjQwHhcNMjYwNDE2MTg1OTQzWhcNMjcwNDE1MTg1
# OTQzWjB0MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE
# BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYD
# VQQDExVNaWNyb3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IB
# DwAwggEKAoIBAQDQvewXxx9gZZFC6Ys1WBay8BJ8kGA4JQnH5CMafqOASlTpK9H8
# o5ZXTXt0caVQTNMUPt445wXYD+dFtaKWTwDn1I52oUSrC9vJin1Gsqt+zyKJL5Dg
# 3eQXbQNR61DmMy20GLTIO3SFed9Rfi/ophgCLGFLDR3r0KvHjwMb/jYWS0celV/4
# Lz27LfAekm8v9E5IXaeiXbAUYZKK090n4CVl3JBtbN+9DtI9SNu/yjvozW52/u7R
# X/Ttpa/KDlpuokZ+Zcbvmtd9ur9gFLvZzh41o9MsE/clQtdaFWGvuo6Jua/ntpgk
# ey3E5/vBFe+MJPG6phdnuo6r57ZudCudiI1bAgMBAAGjggGbMIIBlzAOBgNVHQ8B
# Af8EBAMCB4AwHwYDVR0lBBgwFgYKKwYBBAGCN0wIAQYIKwYBBQUHAwMwHQYDVR0O
# BBYEFH6QuMwqcPG0hQlQ6c5jCtTTLrVeMEUGA1UdEQQ+MDykOjA4MR4wHAYDVQQL
# ExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xFjAUBgNVBAUTDTIzMDAxMis1MDc1NTkw
# HwYDVR0jBBgwFoAUf1k/VCHarU/vBeXmo9ctBpQSCDEwYAYDVR0fBFkwVzBVoFOg
# UYZPaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jcmwvTWljcm9zb2Z0
# JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNybDBtBggrBgEFBQcBAQRh
# MF8wXQYIKwYBBQUHMAKGUWh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMv
# Y2VydHMvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNy
# dDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4ICAQBKTbYOjzwTG/DXGaz9
# s6+fQeaTtDcFmMY+5UyVFCyj7Pv+5i37qfX8lSL/tBIfYQfWsMuBQlfZurJD6r4H
# VJ2CeH+1fgiq8dcHdVKoZ3Sa2qXoX3cq9iS8cVb06B7+5/XJ7I0OxHH9fDsvJ3T3
# w5V/ZtAIFmLrl+P0CtG+92uzRsn0nTbdFjOkLMLWPLAU3THohKRlSEMgFJpPkm5n
# 5UAZ35xX6FWCrDLsSKb555bTifwa8mJBwdlof0bmfYidH+dxZ1FdDxvLnNl9zeKs
# A4kejaaIqqIPguhwAti5Ql7BlTNoJNwxCvBmqW2MQLnCkYN/VVUsR3V2x/rcTNzo
# Bf/Z/SpROvdaA2ZOOd1uioXJt3tdLQ7vHpqpib0KfWr/FWXW10q38VxfCnRQBqzb
# SuztR7nEMuzX7Ck+B/XaPDXd1qh72+QYyB0Z2VzWmO9zsnb9Uq/dwu8LGeQqnyu6
# 7SDGACvnXii2fb9+US492VTnXSnFKyqwgzUyFMtZK1/sHYTv6bG4TtQUygQxTN+Z
# V+aJIlKO2MqZ7bKrAnOzS9m6NgoTdWOq11bTOZwKlIEV/EhV9SWkDmdpR/hPPT2v
# 6TEj4F8PT/zHjRezIU5c/DGlt/VhY/pK0XkJtEyMmmS1BMtjU/rqBZVMIm3dnxQs
# /TBByr+Cf8Z1r7aifQVQ+WSqzjCCBr0wggSloAMCAQICEzMAAAA5O7Y3Gb8GHWcA
# AAAAADkwDQYJKoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpX
# YXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQg
# Q29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBSb290IENlcnRpZmljYXRl
# IEF1dGhvcml0eSAyMDExMB4XDTI0MDgwODIwNTQxOFoXDTM2MDMyMjIyMTMwNFow
# VzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEo
# MCYGA1UEAxMfTWljcm9zb2Z0IENvZGUgU2lnbmluZyBQQ0EgMjAyNDCCAiIwDQYJ
# KoZIhvcNAQEBBQADggIPADCCAgoCggIBANgBnB7jOMeqlRYHNa265v4IY9fH8TKh
# emHfPINe1gpLaV3dhg324WwH06LcHbpnsBukCDNitryo0dtS/EW6I/yEL/bLSY8h
# KpbfQuWusBPr9qazYcDxCW/qnjb5JsI1s8bNOg3bVATvQVL4tcf03aTycsz8QeCd
# M0l/yHRObJ9QqazM1r6VPEOJ7LL+uEEb73w6QCuhs89a1uv1zerOYMnsneRRwCbp
# yW11IcggU0cRKDDq1pjVJzIbIF6+oiXXbReOsgeI8zu1FyQfK0fVkaya8SmVHQ/t
# Of23mZ4W9k0Ri22QW9p3UgSC5OUDktKxxcCmGL6tXLfOGSWHIIV4YrTJTT6PNty5
# REojHJuZHArkF9VnHTERWoTjAzfI3kP+5b4alUdhgAZ7ttOu1bVnXfHaqPYl2rPs
# 20ji03LOVWsh/radgE17es5hL+t6lV0eVHrVhsssROWJuz2MXMCt7iw7lFPG9LXK
# Gjsmonn2gotGdHIuEg5JnJMJVmixd5LRlkmgYRZKzhxSCwyoGIq0PhaA7Y+VPct5
# pCHkijcIIDm0nlkK+0KyepolcqGm0T/GYQRMhHJlGOOmVQop36wUVUYklUy++vDW
# eEgEo4s7hxN6mIbf2MSIQ/iIfMZgJxC69oukMUXCrOC3SkE/xIkgpfl22MM1itkZ
# 35nNXkMolU1lAgMBAAGjggFOMIIBSjAOBgNVHQ8BAf8EBAMCAYYwEAYJKwYBBAGC
# NxUBBAMCAQAwHQYDVR0OBBYEFH9ZP1Qh2q1P7wXl5qPXLQaUEggxMBkGCSsGAQQB
# gjcUAgQMHgoAUwB1AGIAQwBBMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAU
# ci06AjGQQ7kUBU7h6qfHMdEjiTQwWgYDVR0fBFMwUTBPoE2gS4ZJaHR0cDovL2Ny
# bC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMvTWljUm9vQ2VyQXV0MjAx
# MV8yMDExXzAzXzIyLmNybDBeBggrBgEFBQcBAQRSMFAwTgYIKwYBBQUHMAKGQmh0
# dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvY2VydHMvTWljUm9vQ2VyQXV0MjAx
# MV8yMDExXzAzXzIyLmNydDANBgkqhkiG9w0BAQwFAAOCAgEAFJQfOChP7onn6fLI
# MKrSlN1WYKwDFgAddymOUO3FrM8d7B/W/iQ6DxXsDn7D5W4wMwYeLystcEqfkjz4
# NURRgazyMu5yRzQh4LqjA4tStTcJh1opExo7nn5PuPBYnbu0+THSuVHTe0VTTPVh
# ily/piFrDo3axQ9P4C+Ol5yet+2gTfekICS5xS+cYfSIvgn0JksVBVMYVI5QFu/q
# hnLhsEFEUzG8fvv0hjgkO+lkpV9ty6GkN4vdnd7ya6Q6aR9y34aiM1qmxaxBi6OU
# nyNl6fkuun/diTFnYDLTppOkr/mg5WSfCiDVMNCxtj4wPKC5OmHm1DQIt/MNokbb
# H3UGsFP1QbzsLocuSqLCvH09Io3fDPTmscR9Y75G4qX7RTX8AdBPo0I6OEojf39z
# uFZt0qOHm65YWQE69cZM2ueE1MB05dNNgHK9gTE7zKvK/fg8B2qjW88MT/WF5V5u
# vZGtqa9FSL2RazArA+rDPuf6JGYz4HpgMZHB4S6szWSKYBv0VisCzfxgeU+dquXW
# 9bd0auYlOB58DPcOYKdc3Se94g+xL4pcEhbB54JOgAkwYTu/9dLeH2pDqeJZAABV
# DWRQCaXfO5LgyKwKCLYXpigrZYCjUSBcr+Ve8PFWMhVTQl0v4q8J/AUmQN5W4n10
# 1cY2L4A7GTQG1h32HHAvfQESWP0xghngMIIZ3AIBATBuMFcxCzAJBgNVBAYTAlVT
# MR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jv
# c29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMjQCEzMAAAIdTRnITtcPV0gAAAAAAh0w
# DQYJYIZIAWUDBAIBBQCggZAwGQYJKoZIhvcNAQkDMQwGCisGAQQBgjcCAQQwLwYJ
# KoZIhvcNAQkEMSIEIAccwEMd/TaL7uV5hEUIZN4m4XyErDbwOXKWYyLvBVHnMEIG
# CisGAQQBgjcCAQwxNDAyoBSAEgBNAGkAYwByAG8AcwBvAGYAdKEagBhodHRwOi8v
# d3d3Lm1pY3Jvc29mdC5jb20wDQYJKoZIhvcNAQEBBQAEggEAQ0aj6hmvWRUy/8pY
# z3JTwcoycPI3/2dpKzNFannZ+ypgmJZYvnMwx9vSE3FDqqR+pa+pMJUaDzR+1AAx
# dVfSl4NgUTizOLuFSwxhpBjLbZ7vNI12C/Aadf1l7grY89vb0Qhp01sDqggxFyYn
# sPOSFkac5KiA2bwcn9Dvi7qOEpcmA5G4IhIn7ri0po/W05ZMq+Kn5Cxt0gwIYeYe
# lNXIFSuMBBLV3a5iUO61XRJr1yvw9dsKzqGI81/Ae4gVZoU3CllFIZxM+m6hXhoJ
# q4ZDVeYvS98ePT2roVTBQ4pHuYUH+99034AnNV4UoxfYxt0H9ti5HKdRyv3QrUlg
# gd9puqGCF7AwghesBgorBgEEAYI3AwMBMYIXnDCCF5gGCSqGSIb3DQEHAqCCF4kw
# gheFAgEDMQ8wDQYJYIZIAWUDBAIBBQAwggFaBgsqhkiG9w0BCRABBKCCAUkEggFF
# MIIBQQIBAQYKKwYBBAGEWQoDATAxMA0GCWCGSAFlAwQCAQUABCDy+p4PuJ2+otVU
# DMp1zNeUBCdd7mIyQJjihlYkGmwo6QIGaq465W9kGBMyMDI2MTAyMTIyMDg1NS45
# MjFaMASAAgH0oIHZpIHWMIHTMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGlu
# Z3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBv
# cmF0aW9uMS0wKwYDVQQLEyRNaWNyb3NvZnQgSXJlbGFuZCBPcGVyYXRpb25zIExp
# bWl0ZWQxJzAlBgNVBAsTHm5TaGllbGQgVFNTIEVTTjo0MDFBLTA1RTAtRDk0NzEl
# MCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAgU2VydmljZaCCEf4wggcoMIIF
# EKADAgECAhMzAAACGV6y2FR19LGNAAEAAAIZMA0GCSqGSIb3DQEBCwUAMHwxCzAJ
# BgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25k
# MR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jv
# c29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwMB4XDTI1MDgxNDE4NDgyNloXDTI2MTEx
# MzE4NDgyNlowgdMxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAw
# DgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24x
# LTArBgNVBAsTJE1pY3Jvc29mdCBJcmVsYW5kIE9wZXJhdGlvbnMgTGltaXRlZDEn
# MCUGA1UECxMeblNoaWVsZCBUU1MgRVNOOjQwMUEtMDVFMC1EOTQ3MSUwIwYDVQQD
# ExxNaWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2aWNlMIICIjANBgkqhkiG9w0BAQEF
# AAOCAg8AMIICCgKCAgEApqFIyUkzIyxpL3Q03WmLuy4G9YIUScznhKr+cHOT+/u7
# ParxI96gxxb1WrWuAxB8qjGLfsbImx8V3ouK1nUcf+R/nsnXas5/iTgV/Tl3QTRG
# T0DeuXBNbpHqc+wC1NiTyA76gLnirvSBEoBzlrpNQFEnuwdbPLCLpTS3KWSCu5J0
# 2b+RFWR/kcFzVxnhoE3gIaeURtrGKGBZGKLBXvqggkDENtKkvtvRT32xLvAvL/Rp
# Reu5z18ZojCs72ZSoa74Dy8YbaWsDm3OZOpJRZxZsPKCHZ6xNqgFKf0xNHj0t9v0
# Q3W+2z5gAVaasJJCvR52Sl0XJ2AOf3l0LSetXgUA5gD5IQ1RvEslTmNnSouTrGID
# 3D1njY7mBu0puiIdPK2jK/1Weef2+YR4cQpWQkeBZmXidh9AuWdlwxKQL15LJ6K2
# dw8y/t/PBhmLyt6QAf0CepWRdgZnMytVAUuWHwlZRV9JLY7aX8D55eL9+cOLpX3b
# GNOmN24UpIW8qtZaqXaesFvIOW23JNLhaaQVvObr1eu7GE/5Mn43e+/DbtdYl/bL
# P2IQ1xYEJdSbcUkDFfW3KlZEh+nBKDtaRnNRkbgIgxIbKdT38OKQwZ/aA4uSsiAg
# 6nEPiWBHGuytIo5wU75M5VdjhEqqTHfXYu8BJi6GTzvWT+9ekfMXezqCkksxaG8C
# AwEAAaOCAUkwggFFMB0GA1UdDgQWBBSAaOo5HWatNzqZn1IF1fcD6nr3ITAfBgNV
# HSMEGDAWgBSfpxVdAF5iXYP05dJlpxtTNRnpcjBfBgNVHR8EWDBWMFSgUqBQhk5o
# dHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2NybC9NaWNyb3NvZnQlMjBU
# aW1lLVN0YW1wJTIwUENBJTIwMjAxMCgxKS5jcmwwbAYIKwYBBQUHAQEEYDBeMFwG
# CCsGAQUFBzAChlBodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2NlcnRz
# L01pY3Jvc29mdCUyMFRpbWUtU3RhbXAlMjBQQ0ElMjAyMDEwKDEpLmNydDAMBgNV
# HRMBAf8EAjAAMBYGA1UdJQEB/wQMMAoGCCsGAQUFBwMIMA4GA1UdDwEB/wQEAwIH
# gDANBgkqhkiG9w0BAQsFAAOCAgEAXxzVZLLXBFfoCCCTiY7MHXdb7civJSTfrHYJ
# C5Ok2NN75NpzTMT9V2TcIQjfQ3AFUbh1NBAYtMUuwxC6D4ceEXG5lXAnbvkC9Yje
# LVDRyImXYYmft7z+Qpl9t3C/8a0tiqnOz8Ue8/DYLtMTgvWMnsqLNjILDaImOfnH
# I36TLCjGFe8RYLXGdCUdOLlfAdMGePxSTA3TAAOc+GQbmPWjrguLWbxvnl3NVjRv
# rBZVkxFMoVZH0f7qGwDOShjpnv5nYnQ48ufL0uBz52RbPGdX4Fv9+UGOrBprmcHz
# mIutFtJec2Y4kujNtTK2wBGgWscEOVhFiaVdje8VLJ7MVNKE5TmsuGM3jTLr1nuR
# 5AFGs3UKkP7g3cQD4cHK7XdLiTm7e606QJ+WqeQsADYE9dvU9wIUbI9Dl4UcIErF
# w+FHaWSTrkfJ4SvLmhKnl5khhpJ1sF3z6e1BxepUliXHqzRLiHWihWIWESF8IHEl
# F3POxbP4VJqHBiYvaXMV0SyRgwoD6zXddbUnX9WR6JL2BlqAjjHxINwelsp/VhxA
# WThzuMA58LxvE/VAzjfFF4Wm7a1ZALmJVw3oL/s/uxo1Op4tcT+hfZ9uN1htC1JN
# 4DuRqFfLttjuoAmUQobO5zUFRzvCn8Ck/hiO+bzR15sqkjlxLMyMjpkc/ef4SUUi
# kD468vUwggdxMIIFWaADAgECAhMzAAAAFcXna54Cm0mZAAAAAAAVMA0GCSqGSIb3
# DQEBCwUAMIGIMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4G
# A1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMTIw
# MAYDVQQDEylNaWNyb3NvZnQgUm9vdCBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgMjAx
# MDAeFw0yMTA5MzAxODIyMjVaFw0zMDA5MzAxODMyMjVaMHwxCzAJBgNVBAYTAlVT
# MRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQK
# ExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1l
# LVN0YW1wIFBDQSAyMDEwMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA
# 5OGmTOe0ciELeaLL1yR5vQ7VgtP97pwHB9KpbE51yMo1V/YBf2xK4OK9uT4XYDP/
# XE/HZveVU3Fa4n5KWv64NmeFRiMMtY0Tz3cywBAY6GB9alKDRLemjkZrBxTzxXb1
# hlDcwUTIcVxRMTegCjhuje3XD9gmU3w5YQJ6xKr9cmmvHaus9ja+NSZk2pg7uhp7
# M62AW36MEBydUv626GIl3GoPz130/o5Tz9bshVZN7928jaTjkY+yOSxRnOlwaQ3K
# Ni1wjjHINSi947SHJMPgyY9+tVSP3PoFVZhtaDuaRr3tpK56KTesy+uDRedGbsoy
# 1cCGMFxPLOJiss254o2I5JasAUq7vnGpF1tnYN74kpEeHT39IM9zfUGaRnXNxF80
# 3RKJ1v2lIH1+/NmeRd+2ci/bfV+AutuqfjbsNkz2K26oElHovwUDo9Fzpk03dJQc
# NIIP8BDyt0cY7afomXw/TNuvXsLz1dhzPUNOwTM5TI4CvEJoLhDqhFFG4tG9ahha
# YQFzymeiXtcodgLiMxhy16cg8ML6EgrXY28MyTZki1ugpoMhXV8wdJGUlNi5UPkL
# iWHzNgY1GIRH29wb0f2y1BzFa/ZcUlFdEtsluq9QBXpsxREdcu+N+VLEhReTwDwV
# 2xo3xwgVGD94q0W29R6HXtqPnhZyacaue7e3PmriLq0CAwEAAaOCAd0wggHZMBIG
# CSsGAQQBgjcVAQQFAgMBAAEwIwYJKwYBBAGCNxUCBBYEFCqnUv5kxJq+gpE8RjUp
# zxD/LwTuMB0GA1UdDgQWBBSfpxVdAF5iXYP05dJlpxtTNRnpcjBcBgNVHSAEVTBT
# MFEGDCsGAQQBgjdMg30BATBBMD8GCCsGAQUFBwIBFjNodHRwOi8vd3d3Lm1pY3Jv
# c29mdC5jb20vcGtpb3BzL0RvY3MvUmVwb3NpdG9yeS5odG0wEwYDVR0lBAwwCgYI
# KwYBBQUHAwgwGQYJKwYBBAGCNxQCBAweCgBTAHUAYgBDAEEwCwYDVR0PBAQDAgGG
# MA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAU1fZWy4/oolxiaNE9lJBb186a
# GMQwVgYDVR0fBE8wTTBLoEmgR4ZFaHR0cDovL2NybC5taWNyb3NvZnQuY29tL3Br
# aS9jcmwvcHJvZHVjdHMvTWljUm9vQ2VyQXV0XzIwMTAtMDYtMjMuY3JsMFoGCCsG
# AQUFBwEBBE4wTDBKBggrBgEFBQcwAoY+aHR0cDovL3d3dy5taWNyb3NvZnQuY29t
# L3BraS9jZXJ0cy9NaWNSb29DZXJBdXRfMjAxMC0wNi0yMy5jcnQwDQYJKoZIhvcN
# AQELBQADggIBAJ1VffwqreEsH2cBMSRb4Z5yS/ypb+pcFLY+TkdkeLEGk5c9MTO1
# OdfCcTY/2mRsfNB1OW27DzHkwo/7bNGhlBgi7ulmZzpTTd2YurYeeNg2LpypglYA
# A7AFvonoaeC6Ce5732pvvinLbtg/SHUB2RjebYIM9W0jVOR4U3UkV7ndn/OOPcbz
# aN9l9qRWqveVtihVJ9AkvUCgvxm2EhIRXT0n4ECWOKz3+SmJw7wXsFSFQrP8DJ6L
# GYnn8AtqgcKBGUIZUnWKNsIdw2FzLixre24/LAl4FOmRsqlb30mjdAy87JGA0j3m
# Sj5mO0+7hvoyGtmW9I/2kQH2zsZ0/fZMcm8Qq3UwxTSwethQ/gpY3UA8x1RtnWN0
# SCyxTkctwRQEcb9k+SS+c23Kjgm9swFXSVRk2XPXfx5bRAGOWhmRaw2fpCjcZxko
# JLo4S5pu+yFUa2pFEUep8beuyOiJXk+d0tBMdrVXVAmxaQFEfnyhYWxz/gq77EFm
# PWn9y8FBSX5+k77L+DvktxW/tM4+pTFRhLy/AsGConsXHRWJjXD+57XQKBqJC482
# 2rpM+Zv/Cuk0+CQ1ZyvgDbjmjJnW4SLq8CdCPSWU5nR0W2rRnj7tfqAxM328y+l7
# vzhwRNGQ8cirOoo6CGJ/2XBjU02N7oJtpQUQwXEGahC0HVUzWLOhcGbyoYIDWTCC
# AkECAQEwggEBoYHZpIHWMIHTMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGlu
# Z3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBv
# cmF0aW9uMS0wKwYDVQQLEyRNaWNyb3NvZnQgSXJlbGFuZCBPcGVyYXRpb25zIExp
# bWl0ZWQxJzAlBgNVBAsTHm5TaGllbGQgVFNTIEVTTjo0MDFBLTA1RTAtRDk0NzEl
# MCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAgU2VydmljZaIjCgEBMAcGBSsO
# AwIaAxUAMXYp/Wqqdyb0enigrLfxl0InAz6ggYMwgYCkfjB8MQswCQYDVQQGEwJV
# UzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UE
# ChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGlt
# ZS1TdGFtcCBQQ0EgMjAxMDANBgkqhkiG9w0BAQsFAAIFAO6DjnUwIhgPMjAyNjEw
# MjExOTE4MTNaGA8yMDI2MTAyMjE5MTgxM1owdzA9BgorBgEEAYRZCgQBMS8wLTAK
# AgUA7oOOdQIBADAKAgEAAgIjFgIB/zAHAgEAAgIStDAKAgUA7oTf9QIBADA2Bgor
# BgEEAYRZCgQCMSgwJjAMBgorBgEEAYRZCgMCoAowCAIBAAIDB6EgoQowCAIBAAID
# AYagMA0GCSqGSIb3DQEBCwUAA4IBAQAJ7uPrLGtbQoLyxdniUHAL63hyprQvKIM/
# vc3scbhiXzFxrh5E3nBch+aovsu+B4XpvRt3zHWOyAvuUrYVOptdyQqnG1SgjdyT
# /AwaQEivy1ZMM7aBE+oi67gYX58DvLcnNc96d/ntzTXo4LXlY5uzddRH3WhUpOZs
# MRinTmz+F386K2ZOLIMF6p0pE26/ep+JLA2kZlabh/IlEV/hjOiUpepYY4BziA/Y
# 1Ilt6MnAkfb7mRDOBE5kPfUfguXr0YfV2SwQtvaeUwN+qkZwMHjzQHi3xxfjDccm
# jEsnVtqi1m3cxNAqeDwKStnL0LubS5upCRwdJ8oI04yL+7NU9h7OMYIEDTCCBAkC
# AQEwgZMwfDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNV
# BAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQG
# A1UEAxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTACEzMAAAIZXrLYVHX0
# sY0AAQAAAhkwDQYJYIZIAWUDBAIBBQCgggFKMBoGCSqGSIb3DQEJAzENBgsqhkiG
# 9w0BCRABBDAvBgkqhkiG9w0BCQQxIgQgZBgurmlW1RzcpaFYJq1AUKC2ez1nokAG
# UnolxBL6azQwgfoGCyqGSIb3DQEJEAIvMYHqMIHnMIHkMIG9BCDckX633E1y1EF3
# 2V18zQcrsgjzI9+3Le7mlvk2OebthjCBmDCBgKR+MHwxCzAJBgNVBAYTAlVTMRMw
# EQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVN
# aWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0
# YW1wIFBDQSAyMDEwAhMzAAACGV6y2FR19LGNAAEAAAIZMCIEIHFMVAe9mrvKZDFk
# Pr8w79AKALlu3uCT43eJoKOqadVZMA0GCSqGSIb3DQEBCwUABIICAF/mhBytSmLr
# BphRBYdZUzhWY9lpweXxA79woLBdSghPhA5/fl/2Eflo1O8Ww4kLt7EPlGj6QXlQ
# RZmIdqPoDcSsuYspn+PNao5ZH0TUAJFK74I8JNgiIZ8EqgeJC6Csa5xDgzi6yzPh
# oeRGvxczae1revPpecLPKL04mXWr1GJpdJ8biHdjZX9jC86atoUM+dqaB3qrjZ9G
# g/saIhHsRUgq6MYC8VmaCo3xVlQv3+rEGwZISopWpid/smSj61fFRimVwk8za8XG
# rccmSUH68MF4jKE0WADKO1L7FyaoP1bv6DDolbTbtuurSIyd2+JZfS5JZoeJqpKG
# P3x17hvczIeXWXgmHaQ62vhZNAHCAd54+WlUqvS2CVQH/bCwXU6IIHlRNjrDZhPI
# juB1DV9f73wf57yZIiXEv6jlqBq1Jjj7NFbBlPhhyNk/Y70jin7nGcTdlpViMc0r
# IHvqtKs+1FRU8MbYsfiiEcJs1yenwWEkgFvoVHIGW0rpRu6gmh2335P6bbqWKl6a
# 9kTp+rD2w8K8K6M9tmm/sHzhWNhfxEdz4GOXGW5Zc55Owy4FyAdqv0EI63JMvkRi
# jgOCgh9wmSBefTZgA/E8YbR20ZdePhOQF4LeUVR50B0FBu1Ox/inMj3rV31ghhPb
# PVCtQplkQq03SN+7n/9riq9QeTyYywvb
# SIG # End signature block