Avm.Authoring

0.33.0

Private/Tests/Cleanup/Get-AvmBicepDeploymentCleanupTarget.ps1

                                function Get-AvmBicepDeploymentCleanupTarget {

    [CmdletBinding()]

    [OutputType([pscustomobject])]

    param(

        [AllowEmptyCollection()]

        [string[]] $DeploymentIds = @(),

        [string[]] $PreflightRejectedDeploymentIds = @(),

        [ValidateRange(1, 1000)]

        [int] $SearchRetryLimit = 40,

        [ValidateRange(0, 3600)]

        [int] $SearchRetryInterval = 60,

        [System.Collections.IDictionary] $IsolationState = @{},

        # A retry snapshot requires terminal records and complete Create history, but deletes nothing.

        [switch] $RequireCompleteRemoval

    )

    Set-StrictMode -Version 3.0

    $ErrorActionPreference = 'Stop'

    $records = [System.Collections.Generic.Dictionary[string, hashtable]]::new(

        [System.StringComparer]::OrdinalIgnoreCase)

    foreach ($deployment in ConvertTo-AvmBicepCleanupResource -ResourceIds $DeploymentIds) {

        Assert-AvmBicepIsolationBoundary -State $IsolationState -ResourceIds @($deployment.resourceId)

        if ($deployment.type -ine 'Microsoft.Resources/deployments') {

            throw [AvmConfigurationException]::new("Not a deployment ID: $($deployment.resourceId)")

        }

        $records[$deployment.resourceId] = @{

            Id                = $deployment.resourceId

            Required          = $true

            Depth             = 0

            PreflightRejected = $false

            Status            = 'Pending'

            ErrorCode         = ''

            ErrorMessage      = ''

            References        = 0

        }

    }

    foreach ($rejectedId in $PreflightRejectedDeploymentIds) {

        if (-not $records.ContainsKey($rejectedId)) {

            throw [AvmConfigurationException]::new(

                'Preflight rejection metadata contains IDs outside the attempted deployments.')

        }

        $records[$rejectedId].PreflightRejected = $true

    }

    $resources = [System.Collections.Generic.HashSet[string]]::new(

        [System.StringComparer]::OrdinalIgnoreCase)

    for ($round = 1; $round -le $SearchRetryLimit; $round++) {

        $queue = [System.Collections.Generic.Queue[string]]::new()

        foreach ($record in $records.Values) {

            if ($record.Status -eq 'Pending') {

                $queue.Enqueue($record.Id)

            }

        }

        while ($queue.Count -gt 0) {

            $record = $records[$queue.Dequeue()]

            $nextPath = $record.Id + '/operations?api-version=2025-04-01'

            $visitedPages = [System.Collections.Generic.HashSet[string]]::new(

                [System.StringComparer]::Ordinal)

            $operations = [System.Collections.Generic.List[object]]::new()

            $children = [System.Collections.Generic.HashSet[string]]::new([System.StringComparer]::OrdinalIgnoreCase)

            $exports = @{}

            try {

                if ($RequireCompleteRemoval) {

                    Assert-AvmBicepCleanupDeploymentTerminal -Record $record

                    if ($record.Status -eq 'RejectedWithoutRecord') { continue }

                }

                while (-not [string]::IsNullOrEmpty($nextPath)) {

                    if (-not $visitedPages.Add($nextPath) -or $visitedPages.Count -gt 1000) {

                        throw [AvmProcessException]::new("Repeated or excessive deployment operations page: $nextPath")

                    }

                    $response = Invoke-AvmBicepRead -Activity 'Read cleanup operation page' -Read {

                        Invoke-AzRestMethod -Method GET -Path $nextPath -ErrorAction Stop

                    }

                    $document = ConvertFrom-AvmBicepRestResponse -Response $response -Activity 'Read cleanup operation page' `

                        -AllowedStatus @(200, 404)

                    if ([int]$response.StatusCode -ne 200) {

                        $errorBody = Get-AvmPropertyValue -InputObject $document -Name 'error'

                        $errorCode = [string](Get-AvmPropertyValue -InputObject $errorBody -Name 'code')

                        $groupScope = $record.Id -match '^/subscriptions/[^/]+/resourceGroups/[^/]+/providers/Microsoft\.Resources/deployments/[^/]+$'

                        if ([int]$response.StatusCode -eq 404 -and $groupScope -and $errorCode -ceq 'ResourceGroupNotFound') {

                            $record.Status = 'ContainerRemoved'

                            break

                        }

                        if ([int]$response.StatusCode -eq 404 -and $errorCode -ceq 'DeploymentNotFound') {

                            if ($RequireCompleteRemoval) {

                                throw [AvmProcessException]::new("Existing deployment has no complete operation history: $($record.Id)")

                            }

                            if ($visitedPages.Count -gt 1) {

                                throw [AvmProcessException]::new(

                                    "Deployment record disappeared during pagination: $($record.Id)")

                            }

                            if ($record.PreflightRejected) {

                                $record.Status = 'RejectedWithoutRecord'

                            }

                            elseif (-not $record.Required) {

                                $record.Status = 'NestedRecordAbsent'

                                Write-AvmLog -Message "Nested deployment record is absent: $($record.Id)" -Level Warning

                            }

                            $record.ErrorCode = 'DeploymentNotFound'

                            break

                        }

                        throw [AvmProcessException]::new(

                            "Deployment operations lookup failed: HTTP $($response.StatusCode), code '$errorCode', deployment '$($record.Id)'.")

                    }

                    if ($document -isnot [System.Collections.IDictionary] -or

                        -not $document.Contains('value') -or $document['value'] -isnot [array] -or

                        @($document.psbase.Keys | Where-Object { $_ -cnotin @('value', 'nextLink') }).Count -gt 0) {

                        throw [AvmProcessException]::new("Invalid deployment operations response: $($record.Id)")

                    }

                    foreach ($operation in $document['value']) {

                        $properties = Get-AvmPropertyValue -InputObject $operation -Name 'properties' -NoEnumerate

                        if ($properties -isnot [System.Collections.IDictionary]) {

                            throw [AvmProcessException]::new("Invalid deployment operation properties: $($record.Id)")

                        }

                        if ($RequireCompleteRemoval -and

                            ($properties['provisioningState'] -isnot [string] -or

                            $properties['provisioningState'] -cnotin @('Succeeded', 'Failed') -or

                            $properties['provisioningOperation'] -isnot [string] -or

                            [string]::IsNullOrWhiteSpace($properties['provisioningOperation']))) {

                            throw [AvmProcessException]::new("Deployment has an incomplete operation: $($record.Id)")

                        }

                        $operations.Add($properties)

                        if ((Get-AvmPropertyValue -InputObject $properties -Name 'provisioningOperation') -ine 'Create') {

                            continue

                        }

                        $target = Get-AvmPropertyValue -InputObject $properties -Name 'targetResource' -NoEnumerate

                        if ($null -eq $target -and -not $RequireCompleteRemoval) {

                            continue

                        }

                        $targetId = $null

                        if ($target -is [System.Collections.IDictionary]) { $targetId = $target['id'] }

                        if ($targetId -isnot [string] -or [string]::IsNullOrWhiteSpace($targetId)) {

                            if (Test-AvmBicepExistingGraphLookup -Operation $properties -DeploymentId $record.Id -Exports $exports) {

                                continue

                            }

                            throw [AvmProcessException]::new("Deployment operation has an invalid target ID: $($record.Id)")

                        }

                        foreach ($resource in @(Resolve-AvmBicepCleanupResource -ResourceId $targetId)) {

                            Assert-AvmBicepIsolationBoundary -State $IsolationState -ResourceIds @($resource.resourceId)

                            if ($resource.type -ieq 'Microsoft.Resources/deployments') {

                                if (-not $records.ContainsKey($resource.resourceId)) {

                                    $records.Add($resource.resourceId, @{

                                            Id                = $resource.resourceId

                                            Required          = $false

                                            Depth             = $record.Depth + 1

                                            PreflightRejected = $false

                                            Status            = 'Pending'

                                            ErrorCode         = ''

                                            ErrorMessage      = ''

                                            References        = 0

                                        })

                                    $queue.Enqueue($resource.resourceId)

                                }

                                $child = $records[$resource.resourceId]

                                $child.References++

                                $null = $children.Add($resource.resourceId)

                                if ($RequireCompleteRemoval -and -not $child.Required -and $child.References -gt 1) {

                                    $child.PreflightRejected = $false

                                    if ($child.Status -eq 'RejectedWithoutRecord') {

                                        $child.Status = 'Failed'

                                        $child.ErrorCode = 'AmbiguousPreflightRejection'

                                        $child.ErrorMessage = "Multiple operations reference preflight-rejected deployment '$($child.Id)'."

                                    }

                                }

                            }

                            else {

                                $null = $resources.Add($resource.resourceId)

                            }

                        }

                    }

                    $nextPath = Resolve-AvmBicepCleanupNextLink -ExpectedPath ($record.Id + '/operations') -NextLink (

                        Get-AvmPropertyValue -InputObject $document -Name 'nextLink' -NoEnumerate)

                    if ([string]::IsNullOrEmpty($nextPath)) {

                        $record.Status = 'Resolved'

                        $record.ErrorCode = ''

                    }

                }

                if ($RequireCompleteRemoval -and $record.Status -eq 'Resolved' -and $record.ProvisioningState -ceq 'Failed') {

                    foreach ($childId in $children) {

                        $child = $records[$childId]

                        if (-not $child.Required -and $child.References -eq 1) {

                            $child.PreflightRejected = Test-AvmBicepNestedPreflightRejection -DeploymentId $childId -Operations $operations.ToArray()

                        }

                    }

                }

            }

            catch {

                if ((Get-AvmBicepDeploymentErrorKind -ErrorRecord $_) -eq 'Cancellation' -or

                    $_.FullyQualifiedErrorId.Split(',')[0] -eq 'AvmBicepContextRestoreFailed') {

                    throw

                }

                $record.Status = 'Failed'

                $record.ErrorCode = 'LookupFailed'

                $record.ErrorMessage = $_.Exception.Message

                Write-AvmLog -Message (

                    "Deployment lookup failed for '$($record.Id)'; known targets will still be cleaned. $($_.Exception.Message)"

                ) -Level Warning

            }

        }

        $pending = @($records.Values | Where-Object { $_.Status -eq 'Pending' })

        if ($pending.Count -eq 0 -or $round -eq $SearchRetryLimit) {

            break

        }

        Write-AvmLog -Message (

            "Waiting for $($pending.Count) deployment record(s); lookup round $round/$SearchRetryLimit."

        ) -Level Info

        Start-Sleep -Seconds $SearchRetryInterval

    }

    $issues = [System.Collections.Generic.List[object]]::new()

    foreach ($record in $records.Values) {

        if ($record.Status -eq 'Pending') {

            $record.Status = 'Missing'

            $record.ErrorMessage = "Deployment record not found after $SearchRetryLimit lookups: $($record.Id)"

        }

        $unresolved = $RequireCompleteRemoval -and $record.Status -in @('NestedRecordAbsent', 'ContainerRemoved')

        if ($unresolved) {

            $record.ErrorMessage = "Deployment record could not be resolved ($($record.Status)): $($record.Id)"

        }

        if ($record.Status -in @('Missing', 'Failed') -or $unresolved) {

            $issues.Add([pscustomobject]@{

                    DeploymentId = $record.Id

                    Code         = $record.ErrorCode

                    Message      = $record.ErrorMessage

                })

        }

    }

    [pscustomobject]@{

        ResourceIds = [string[]]@($resources)

        Deployments = @($records.Values)

        Issues      = $issues.ToArray()

    }

}

# SIG # Begin signature block

# MIInOQYJKoZIhvcNAQcCoIInKjCCJyYCAQExDzANBglghkgBZQMEAgEFADB5Bgor

# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG

# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCBu92YHriPalWfz

# xzba+mHCZK8DS5yP1oNY6/Kw84jxJqCCDMkwggYEMIID7KADAgECAhMzAAACHPrN

# xZvoL37EAAAAAAIcMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMR4wHAYD

# VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBD

# b2RlIFNpZ25pbmcgUENBIDIwMjQwHhcNMjYwNDE2MTg1OTQxWhcNMjcwNDE1MTg1

# OTQxWjB0MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE

# BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYD

# VQQDExVNaWNyb3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IB

# DwAwggEKAoIBAQDVsZfgOKmM31HPfoWOoNEiw0SlCiIxUMC0I9NMWbucKOw/e9lP

# oAoehQVu6SG65V4EPzrYsnBnFPNoi4/HoOdjhz1qkrEt4I6tEcxXU6oOeY9zGveC

# /3iBeuhLYxM3M/PkcUoebF+Nednm8OkdSPoDu8imViHPQq/8CQUu0WRR4rE+dMRf

# rpVqfmNi2qWCX94T4MsepijGVkwE//tJg0ryAiYdHT34LSnlG/RSBZmQRGWZ5g8j

# qnKjRParSqMft1gvjuUTVgtWNZfgcLFSK5Wa0myrq8OPcgTGGsRgun+tnSS+IxDT

# xVsAPH1OzvPjwomguByhUe/OcvUN0D5Wmp7xAgMBAAGjggGqMIIBpjAOBgNVHQ8B

# Af8EBAMCB4AwHwYDVR0lBBgwFgYKKwYBBAGCN0wIAQYIKwYBBQUHAwMwHQYDVR0O

# BBYEFNoH7a2YDjOSwpkp6DHcmUS7J+0yMFQGA1UdEQRNMEukSTBHMS0wKwYDVQQL

# EyRNaWNyb3NvZnQgSXJlbGFuZCBPcGVyYXRpb25zIExpbWl0ZWQxFjAUBgNVBAUT

# DTIzMDAxMis1MDc1NjkwHwYDVR0jBBgwFoAUf1k/VCHarU/vBeXmo9ctBpQSCDEw

# YAYDVR0fBFkwVzBVoFOgUYZPaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9w

# cy9jcmwvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNy

# bDBtBggrBgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUWh0dHA6Ly93d3cubWljcm9z

# b2Z0LmNvbS9wa2lvcHMvY2VydHMvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmcl

# MjBQQ0ElMjAyMDI0LmNydDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4IC

# AQAUnEqhaRXe0T3hIJjvdQErEkrA/7bByjn6t5IArODkkRjzkYwtKMc2yYj2quaN

# rLutWw2YZcngKPy1b71YyDJQTy4NDRwaSh9Tw5thrk3NmcPrAHia5vtcBJ1CgtKK

# 7mQbIcQ22d/N3813ayCDDFewu1+jsZmX+r/aTEqaOM4TVxVtRSkuCy8nAXKuChOK

# Li/zA4XuH8iEYqIsj2YoNaeSxVmeGiERXpKdo3dDmYi0kO5w2D8VS4c3+9h6gElY

# BaAAg/dYErBg27qT3vv0zRDJhJufvCNylA8S7/+8H5E/PV5cng6na9VV/w9OV3qu

# uND6zdGa2EX38Glp50F9AIQk3p2xXmcvorDeM4XJ7UlWYBi6g80J1SSOQnInCYFE

# msfUNn3+1AaTJKSJL83quKArTac2pKhu0Yzzzrzo6HrsRiQKzpnRBb1/dMa6P3hz

# 75XbMRBctNsFhZC07WCmjExdLg2eHW5uV0TY8D5+6wozJf7vF3+WHkYPO85Z+BC6

# U4FkNbYNycZ9cE4j1tXRdyDCfml6c0HWPHjNVDObrv9lKt3qUqFpX38VCqVCyNOO

# 1UcXfQiVjJw32U2WUKZjt/neJKHEBsm9kFsLuWzkQ53+qcaSaytmsCnk2gOglrlD

# 5d3kKyvvAw+rzm0lT8K38P6PLxfZQHhu4W8dV7Av8N2ZmDCCBr0wggSloAMCAQIC

# EzMAAAA5O7Y3Gb8GHWcAAAAAADkwDQYJKoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYT

# AlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYD

# VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBS

# b290IENlcnRpZmljYXRlIEF1dGhvcml0eSAyMDExMB4XDTI0MDgwODIwNTQxOFoX

# DTM2MDMyMjIyMTMwNFowVzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFU1pY3Jvc29m

# dCBDb3Jwb3JhdGlvbjEoMCYGA1UEAxMfTWljcm9zb2Z0IENvZGUgU2lnbmluZyBQ

# Q0EgMjAyNDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANgBnB7jOMeq

# lRYHNa265v4IY9fH8TKhemHfPINe1gpLaV3dhg324WwH06LcHbpnsBukCDNitryo

# 0dtS/EW6I/yEL/bLSY8hKpbfQuWusBPr9qazYcDxCW/qnjb5JsI1s8bNOg3bVATv

# QVL4tcf03aTycsz8QeCdM0l/yHRObJ9QqazM1r6VPEOJ7LL+uEEb73w6QCuhs89a

# 1uv1zerOYMnsneRRwCbpyW11IcggU0cRKDDq1pjVJzIbIF6+oiXXbReOsgeI8zu1

# FyQfK0fVkaya8SmVHQ/tOf23mZ4W9k0Ri22QW9p3UgSC5OUDktKxxcCmGL6tXLfO

# GSWHIIV4YrTJTT6PNty5REojHJuZHArkF9VnHTERWoTjAzfI3kP+5b4alUdhgAZ7

# ttOu1bVnXfHaqPYl2rPs20ji03LOVWsh/radgE17es5hL+t6lV0eVHrVhsssROWJ

# uz2MXMCt7iw7lFPG9LXKGjsmonn2gotGdHIuEg5JnJMJVmixd5LRlkmgYRZKzhxS

# CwyoGIq0PhaA7Y+VPct5pCHkijcIIDm0nlkK+0KyepolcqGm0T/GYQRMhHJlGOOm

# VQop36wUVUYklUy++vDWeEgEo4s7hxN6mIbf2MSIQ/iIfMZgJxC69oukMUXCrOC3

# SkE/xIkgpfl22MM1itkZ35nNXkMolU1lAgMBAAGjggFOMIIBSjAOBgNVHQ8BAf8E

# BAMCAYYwEAYJKwYBBAGCNxUBBAMCAQAwHQYDVR0OBBYEFH9ZP1Qh2q1P7wXl5qPX

# LQaUEggxMBkGCSsGAQQBgjcUAgQMHgoAUwB1AGIAQwBBMA8GA1UdEwEB/wQFMAMB

# Af8wHwYDVR0jBBgwFoAUci06AjGQQ7kUBU7h6qfHMdEjiTQwWgYDVR0fBFMwUTBP

# oE2gS4ZJaHR0cDovL2NybC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMv

# TWljUm9vQ2VyQXV0MjAxMV8yMDExXzAzXzIyLmNybDBeBggrBgEFBQcBAQRSMFAw

# TgYIKwYBBQUHMAKGQmh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvY2VydHMv

# TWljUm9vQ2VyQXV0MjAxMV8yMDExXzAzXzIyLmNydDANBgkqhkiG9w0BAQwFAAOC

# AgEAFJQfOChP7onn6fLIMKrSlN1WYKwDFgAddymOUO3FrM8d7B/W/iQ6DxXsDn7D

# 5W4wMwYeLystcEqfkjz4NURRgazyMu5yRzQh4LqjA4tStTcJh1opExo7nn5PuPBY

# nbu0+THSuVHTe0VTTPVhily/piFrDo3axQ9P4C+Ol5yet+2gTfekICS5xS+cYfSI

# vgn0JksVBVMYVI5QFu/qhnLhsEFEUzG8fvv0hjgkO+lkpV9ty6GkN4vdnd7ya6Q6

# aR9y34aiM1qmxaxBi6OUnyNl6fkuun/diTFnYDLTppOkr/mg5WSfCiDVMNCxtj4w

# PKC5OmHm1DQIt/MNokbbH3UGsFP1QbzsLocuSqLCvH09Io3fDPTmscR9Y75G4qX7

# RTX8AdBPo0I6OEojf39zuFZt0qOHm65YWQE69cZM2ueE1MB05dNNgHK9gTE7zKvK

# /fg8B2qjW88MT/WF5V5uvZGtqa9FSL2RazArA+rDPuf6JGYz4HpgMZHB4S6szWSK

# YBv0VisCzfxgeU+dquXW9bd0auYlOB58DPcOYKdc3Se94g+xL4pcEhbB54JOgAkw

# YTu/9dLeH2pDqeJZAABVDWRQCaXfO5LgyKwKCLYXpigrZYCjUSBcr+Ve8PFWMhVT

# Ql0v4q8J/AUmQN5W4n101cY2L4A7GTQG1h32HHAvfQESWP0xghnGMIIZwgIBATBu

# MFcxCzAJBgNVBAYTAlVTMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24x

# KDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMjQCEzMAAAIc

# +s3Fm+gvfsQAAAAAAhwwDQYJYIZIAWUDBAIBBQCggZAwGQYJKoZIhvcNAQkDMQwG

# CisGAQQBgjcCAQQwLwYJKoZIhvcNAQkEMSIEIAccwEMd/TaL7uV5hEUIZN4m4XyE

# rDbwOXKWYyLvBVHnMEIGCisGAQQBgjcCAQwxNDAyoBSAEgBNAGkAYwByAG8AcwBv

# AGYAdKEagBhodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20wDQYJKoZIhvcNAQEBBQAE

# ggEAcELiHov5RPJruPKDdmu9n0Nvw2ivH7hKjZukNZ62r+2H+Jr82/ctQLinFVfw

# UZypJQgwsDWCOU4wHs9C3BMhVO6NGC1b3jq68hMo947Hiue12lGhh6kRI/UWIZuw

# s3fJcJzQTgu4aLS74F/ka9OV12TwcMdpzSWaDDK5d+Pzvr6kbeoUbHiG2WrRBtwn

# aLUJguOsbkNOAwWqmB5o3OR3IGCoL5nhYRtmIEAj9DCsYyu3+EA7HVBwj9XrL4df

# K+kQ1VCrJz8946y03Yn7cnzC+oUHVVgXvO0DCBAIH65u+fr5DAVEoP3kvhcPOBO4

# 4CUmblPvJwFY5yXd2zPma+BDk6GCF5YwgheSBgorBgEEAYI3AwMBMYIXgjCCF34G

# CSqGSIb3DQEHAqCCF28wghdrAgEDMQ8wDQYJYIZIAWUDBAIBBQAwggFRBgsqhkiG

# 9w0BCRABBKCCAUAEggE8MIIBOAIBAQYKKwYBBAGEWQoDATAxMA0GCWCGSAFlAwQC

# AQUABCAPq9MnUyIB+9kMxDTSMkQ83S+0pe6rgcu2DcWhv1SopAIGaqpQN0LqGBIy

# MDI2MTAyNjIwNDEyNC4yN1owBIACAfSggdGkgc4wgcsxCzAJBgNVBAYTAlVTMRMw

# EQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVN

# aWNyb3NvZnQgQ29ycG9yYXRpb24xJTAjBgNVBAsTHE1pY3Jvc29mdCBBbWVyaWNh

# IE9wZXJhdGlvbnMxJzAlBgNVBAsTHm5TaGllbGQgVFNTIEVTTjozNzAzLTA1RTAt

# RDk0NzElMCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAgU2VydmljZaCCEe0w

# ggcgMIIFCKADAgECAhMzAAACHzpwaeSiMC6VAAEAAAIfMA0GCSqGSIb3DQEBCwUA

# MHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdS

# ZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMT

# HU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwMB4XDTI2MDIxOTE5Mzk1MVoX

# DTI3MDUxNzE5Mzk1MVowgcsxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5n

# dG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9y

# YXRpb24xJTAjBgNVBAsTHE1pY3Jvc29mdCBBbWVyaWNhIE9wZXJhdGlvbnMxJzAl

# BgNVBAsTHm5TaGllbGQgVFNTIEVTTjozNzAzLTA1RTAtRDk0NzElMCMGA1UEAxMc

# TWljcm9zb2Z0IFRpbWUtU3RhbXAgU2VydmljZTCCAiIwDQYJKoZIhvcNAQEBBQAD

# ggIPADCCAgoCggIBAMs7xcU5x8aoCqCLPT4CZCYWXd1nRpMbhQUmSqo10wfLbwNq

# F4IGzo425+6TJ7nHjYJaTOBEjL2QTZVbASe1nxmSDKvKQLRsiqwgPv7oXGC6x5Nd

# /VXC+bUPzXThWZ62gEmUni4Zu7IllS9cPHnmdWHnTKAtPNnbhaRCyc+m9Fm/aQ9z

# f1/duEvIdW2cexr9b/zpWt+134B8W94D6o38Rj5caPlz8M8xcJgQJvRqthv3Z0Ml

# a3DOnIGuniB8eWBjVQSlziXgAYQut/YnjCvFPNNb5IzxeFXV044+tiMPTzQhtmov

# wH4gXREJ2fbr1hesYrpAgeKnOcplwJLyM3fRgAedMlU3lnOzq3/ZiyoEYOq68Np3

# v3fgUVPDO9Rw7dWgjJ33ddbC8/z9IIVUmHbVbygZBOm0YfKXL4WXiF6dUxVkXW/q

# iw62KtfwYVOISGd/ydF06DvJlgAnTHL0K0N9tdpOf9x/curc38YJgoWML7mZQIT4

# AmGbEy4x29JQaYqIAV2I8CNROqxZYEFkmbR4LCB4YkWaZAD5Xv/3wEpwT6BQvs71

# 5ZENDAp4By+jqvE2/ZjiMqscDpn/CLdr98pSEsI1kRLyoZ2ukMCbuqH7oWNjHK0B

# uSIozq5M3L9Qs+XC2VhmgAkMNA/t5gLLDBVs1NsddEFJL41xwLSxIHhbtTrvAgMB

# AAGjggFJMIIBRTAdBgNVHQ4EFgQU2TvawYOUfSvkPC98ZHlfAkjwHtswHwYDVR0j

# BBgwFoAUn6cVXQBeYl2D9OXSZacbUzUZ6XIwXwYDVR0fBFgwVjBUoFKgUIZOaHR0

# cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jcmwvTWljcm9zb2Z0JTIwVGlt

# ZS1TdGFtcCUyMFBDQSUyMDIwMTAoMSkuY3JsMGwGCCsGAQUFBwEBBGAwXjBcBggr

# BgEFBQcwAoZQaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jZXJ0cy9N

# aWNyb3NvZnQlMjBUaW1lLVN0YW1wJTIwUENBJTIwMjAxMCgxKS5jcnQwDAYDVR0T

# AQH/BAIwADAWBgNVHSUBAf8EDDAKBggrBgEFBQcDCDAOBgNVHQ8BAf8EBAMCB4Aw

# DQYJKoZIhvcNAQELBQADggIBAGVu7cijKec/PQrWI9t42ex6PZvXmXmx2XYUAUEE

# ZP2VF1zaA1XwsAi6w9gceFS9ENyzHiVsw2FUo8a7hMMtqo238Ij5IW0a6p1EulU/

# VcT1wIvIqso+lwkUkKo+lX55+gC1gGYhRBzHHBPtYhDuBqDz6uQq+syQKhGopLSY

# q/wnWwp+Lzn4ba6Fn/VG15JV1hk5k6P5JvjDOidMJOPsS2Aw38Ffflbl1PN3vAl0

# Z6liRWLzvV1KsLZOvVkXMBHtLjh2sJZmknqmElptU06w3EUkqBLKS6A4ZbNDfXxG

# vcxM+DazcGez6lQ9WAyKN3htQ4fYGUSwswzA5yiVNNmqDUdit1jWPGlQAj2KmMFB

# Eg0v87vTln79/YuM2YlCigJUlVfbhp2lnnX1Kx9rMaipca33VuaoqjR8jT0iXixQ

# eHiKHqumJAMGXIvu+a8J6PBXFh69jipXBNn+jeC+X5HSUXFhL194gzg14bT5awNn

# uMtyLkwV643CixBjfPbpeDWiPRT276dxH25NT7EGYnwG2UJ2FDXdE0xfk/6StFg8

# HdcKn0mbpdo7X33mrfYAhmbWbMEYjrIeW+JdoQLlPMaI7Ute4+1dlTZf3ehAlsyh

# 7e/z7kI8qtBqUZbJi6HZrdXWnBuP5bQUSYQU+m7xMj6pg7UghBZRJG8WNe2Hk5vT

# aEwyMIIHcTCCBVmgAwIBAgITMwAAABXF52ueAptJmQAAAAAAFTANBgkqhkiG9w0B

# AQsFADCBiDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNV

# BAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEyMDAG

# A1UEAxMpTWljcm9zb2Z0IFJvb3QgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IDIwMTAw

# HhcNMjEwOTMwMTgyMjI1WhcNMzAwOTMwMTgzMjI1WjB8MQswCQYDVQQGEwJVUzET

# MBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMV

# TWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1T

# dGFtcCBQQ0EgMjAxMDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAOTh

# pkzntHIhC3miy9ckeb0O1YLT/e6cBwfSqWxOdcjKNVf2AX9sSuDivbk+F2Az/1xP

# x2b3lVNxWuJ+Slr+uDZnhUYjDLWNE893MsAQGOhgfWpSg0S3po5GawcU88V29YZQ

# 3MFEyHFcUTE3oAo4bo3t1w/YJlN8OWECesSq/XJprx2rrPY2vjUmZNqYO7oaezOt

# gFt+jBAcnVL+tuhiJdxqD89d9P6OU8/W7IVWTe/dvI2k45GPsjksUZzpcGkNyjYt

# cI4xyDUoveO0hyTD4MmPfrVUj9z6BVWYbWg7mka97aSueik3rMvrg0XnRm7KMtXA

# hjBcTyziYrLNueKNiOSWrAFKu75xqRdbZ2De+JKRHh09/SDPc31BmkZ1zcRfNN0S

# idb9pSB9fvzZnkXftnIv231fgLrbqn427DZM9ituqBJR6L8FA6PRc6ZNN3SUHDSC

# D/AQ8rdHGO2n6Jl8P0zbr17C89XYcz1DTsEzOUyOArxCaC4Q6oRRRuLRvWoYWmEB

# c8pnol7XKHYC4jMYctenIPDC+hIK12NvDMk2ZItboKaDIV1fMHSRlJTYuVD5C4lh

# 8zYGNRiER9vcG9H9stQcxWv2XFJRXRLbJbqvUAV6bMURHXLvjflSxIUXk8A8Fdsa

# N8cIFRg/eKtFtvUeh17aj54WcmnGrnu3tz5q4i6tAgMBAAGjggHdMIIB2TASBgkr

# BgEEAYI3FQEEBQIDAQABMCMGCSsGAQQBgjcVAgQWBBQqp1L+ZMSavoKRPEY1Kc8Q

# /y8E7jAdBgNVHQ4EFgQUn6cVXQBeYl2D9OXSZacbUzUZ6XIwXAYDVR0gBFUwUzBR

# BgwrBgEEAYI3TIN9AQEwQTA/BggrBgEFBQcCARYzaHR0cDovL3d3dy5taWNyb3Nv

# ZnQuY29tL3BraW9wcy9Eb2NzL1JlcG9zaXRvcnkuaHRtMBMGA1UdJQQMMAoGCCsG

# AQUFBwMIMBkGCSsGAQQBgjcUAgQMHgoAUwB1AGIAQwBBMAsGA1UdDwQEAwIBhjAP

# BgNVHRMBAf8EBTADAQH/MB8GA1UdIwQYMBaAFNX2VsuP6KJcYmjRPZSQW9fOmhjE

# MFYGA1UdHwRPME0wS6BJoEeGRWh0dHA6Ly9jcmwubWljcm9zb2Z0LmNvbS9wa2kv

# Y3JsL3Byb2R1Y3RzL01pY1Jvb0NlckF1dF8yMDEwLTA2LTIzLmNybDBaBggrBgEF

# BQcBAQROMEwwSgYIKwYBBQUHMAKGPmh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9w

# a2kvY2VydHMvTWljUm9vQ2VyQXV0XzIwMTAtMDYtMjMuY3J0MA0GCSqGSIb3DQEB

# CwUAA4ICAQCdVX38Kq3hLB9nATEkW+Geckv8qW/qXBS2Pk5HZHixBpOXPTEztTnX

# wnE2P9pkbHzQdTltuw8x5MKP+2zRoZQYIu7pZmc6U03dmLq2HnjYNi6cqYJWAAOw

# Bb6J6Gngugnue99qb74py27YP0h1AdkY3m2CDPVtI1TkeFN1JFe53Z/zjj3G82jf

# ZfakVqr3lbYoVSfQJL1AoL8ZthISEV09J+BAljis9/kpicO8F7BUhUKz/AyeixmJ

# 5/ALaoHCgRlCGVJ1ijbCHcNhcy4sa3tuPywJeBTpkbKpW99Jo3QMvOyRgNI95ko+

# ZjtPu4b6MhrZlvSP9pEB9s7GdP32THJvEKt1MMU0sHrYUP4KWN1APMdUbZ1jdEgs

# sU5HLcEUBHG/ZPkkvnNtyo4JvbMBV0lUZNlz138eW0QBjloZkWsNn6Qo3GcZKCS6

# OEuabvshVGtqRRFHqfG3rsjoiV5PndLQTHa1V1QJsWkBRH58oWFsc/4Ku+xBZj1p

# /cvBQUl+fpO+y/g75LcVv7TOPqUxUYS8vwLBgqJ7Fx0ViY1w/ue10CgaiQuPNtq6

# TPmb/wrpNPgkNWcr4A245oyZ1uEi6vAnQj0llOZ0dFtq0Z4+7X6gMTN9vMvpe784

# cETRkPHIqzqKOghif9lwY1NNje6CbaUFEMFxBmoQtB1VM1izoXBm8qGCA1AwggI4

# AgEBMIH5oYHRpIHOMIHLMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3Rv

# bjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0

# aW9uMSUwIwYDVQQLExxNaWNyb3NvZnQgQW1lcmljYSBPcGVyYXRpb25zMScwJQYD

# VQQLEx5uU2hpZWxkIFRTUyBFU046MzcwMy0wNUUwLUQ5NDcxJTAjBgNVBAMTHE1p

# Y3Jvc29mdCBUaW1lLVN0YW1wIFNlcnZpY2WiIwoBATAHBgUrDgMCGgMVAEsgyDU/

# uw24JemZsfYhdPa1d4QQoIGDMIGApH4wfDELMAkGA1UEBhMCVVMxEzARBgNVBAgT

# Cldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29m

# dCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENB

# IDIwMTAwDQYJKoZIhvcNAQELBQACBQDuiixFMCIYDzIwMjYxMDI2MTk0NTA5WhgP

# MjAyNjEwMjcxOTQ1MDlaMHcwPQYKKwYBBAGEWQoEATEvMC0wCgIFAO6KLEUCAQAw

# CgIBAAICAoACAf8wBwIBAAICEjEwCgIFAO6LfcUCAQAwNgYKKwYBBAGEWQoEAjEo

# MCYwDAYKKwYBBAGEWQoDAqAKMAgCAQACAwehIKEKMAgCAQACAwGGoDANBgkqhkiG

# 9w0BAQsFAAOCAQEAKk0ODUP3+4AE2LjqHixkfGgxSM+eQ5A+kW4NIntzqEoFn3Pd

# bluZv51SSN8PdofrZPYkYC9dleYfXSGCWQOwz7VSy6xd/em3FyvAFyeykEO654mR

# hPQBvp5/6TluF2mMX1klFrJAaURcURH6YsA76E1gM7aWBtYhcqLc7N0FEPoVPwYd

# +odvjlwCtXHiWlTig4yOaZu5hfwrRebgKgzQ5W5HbJJh9vzn9PL3CLmlwY0VbPcB

# Hu2ErOt9ADMPlM6hH6WBmrQ0IOMiUCScExp1GTZ/sGLqwuUl2ZRi1gS6aldIuzKH

# z3DGdq2xjZsJZQwbZb2OyB7EEyHEdLlJnNAlHDGCBA0wggQJAgEBMIGTMHwxCzAJ

# BgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25k

# MR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jv

# c29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwAhMzAAACHzpwaeSiMC6VAAEAAAIfMA0G

# CWCGSAFlAwQCAQUAoIIBSjAaBgkqhkiG9w0BCQMxDQYLKoZIhvcNAQkQAQQwLwYJ

# KoZIhvcNAQkEMSIEIA0t8QJZJtttLwfka9bG/zkNg/Kn/geehll2e6gbRxTJMIH6

# BgsqhkiG9w0BCRACLzGB6jCB5zCB5DCBvQQgsCQK31aQKwy1RGQW7pNjQ/dRd1Gc

# KJi49mF7fKQt/BQwgZgwgYCkfjB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2Fz

# aGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENv

# cnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAx

# MAITMwAAAh86cGnkojAulQABAAACHzAiBCBKYNEQlfbtJ8/A+DXPXWTFs8W99qiq

# riVjUC4XWvLZuzANBgkqhkiG9w0BAQsFAASCAgC1EOc/mQIeoHE72H50tgySPhQB

# f7nDg8wsT0dDYFyMqlpNJJif5PqcKEYc8XilncIgR8uVJGYluoU/FtUdx5PxtgIQ

# LmsJx+ae8QLcwrxMhi8Q1teCy1AS4Z3StOnBPn3XjKv6JWpQs2Et67kPFcJDa8Yz

# 5FXVqOCeC3C2+ow493iTH1rbH+Y4mTETU4o/epSoLxHfck5udatlchmcB+12nptJ

# v1VfRCdPYvv4qw67SpTv61isQfOkwAajkHvv2on21R/hRDkKgdY6DwLknibSz9PL

# p2mIzAIbmmv/oTqFmFWmlBuTo5q4wjs2TJx1KkCVKgaOkM/na7g51cFYvS6bohHT

# 3eLOnjvgzB5wyCA0/zmAT2zfdSqNpdgpR+7DyFzLbfQ9H9r5SbcVu68pYiUVORcJ

# kTdFB84ybbwhjTVe6sGIFM4CplW+E9JMUNRsv97irVzvmse2FovStb5UFPLLzI0E

# luOmnr7+Fnec1oQznZs8/nf/uZz1zeqKwwhYN5ZJU+MTTQRWYwcDq0FeSAHgQbO2

# DgnSIbRJnXehptovdpXzwOkfOQ0xr2DiGxAqPj5c4C/n2v/E89HJh06US55x+cWJ

# b6Hyv5nrZuCIMPUsRjC73xKRaSaZJCSwz507bH5IHnYBjVDN1INSXuhyXOrF4cl5

# vsZ7ou+H1CDa92O45Q==

# SIG # End signature block