Resources/bicep/conventions/Workflow.Tests.ps1

#Requires -Version 7.4
[Diagnostics.CodeAnalysis.SuppressMessageAttribute('PSUseDeclaredVarsMoreThanAssignments', 'environment', Justification = 'Pester BeforeAll shares this value with It blocks.')]
[Diagnostics.CodeAnalysis.SuppressMessageAttribute('PSUseDeclaredVarsMoreThanAssignments', 'inputs', Justification = 'Pester BeforeAll shares this value with It blocks.')]
[Diagnostics.CodeAnalysis.SuppressMessageAttribute('PSUseDeclaredVarsMoreThanAssignments', 'paths', Justification = 'Pester BeforeAll shares this value with It blocks.')]
[Diagnostics.CodeAnalysis.SuppressMessageAttribute('PSUseDeclaredVarsMoreThanAssignments', 'expectedPaths', Justification = 'Pester BeforeAll shares this value with It blocks.')]
param(
    [Parameter(Mandatory)]
    [System.Collections.IDictionary] $Convention
)

$cases = @($Convention.Workflows | ForEach-Object {
        @{ Scope = $_.Scope; WorkflowInput = $_.Input; Label = $_.Scope.ModuleRelativePath; IssuePath = $_.Input.Path; IssueRoot = $_.Scope.RepositoryRoot }
    })
$Convention.NativeWorkflowExpected = 0

Describe 'Bicep workflow: <Label>' -ForEach $cases {
    $Convention.NativeWorkflowExpected++
    $inputCode = if ($WorkflowInput.Issues.Count -gt 0) { $WorkflowInput.Issues[0].Code } else { 'avm.bicep.workflow-file' }
    It 'loads a regular, exact-case workflow as YAML' -Tag $inputCode {
        @($WorkflowInput.Issues) | Should -HaveCount 0 -Because (@($WorkflowInput.Issues | ForEach-Object Message) -join '; ')
        $WorkflowInput.Workflow | Should -BeOfType ([System.Collections.IDictionary])
    }
    if ($WorkflowInput.Issues.Count -eq 0 -and $WorkflowInput.Workflow -is [System.Collections.IDictionary]) {
        $Convention.NativeWorkflowExpected += 19
        BeforeAll {
            $workflow = $WorkflowInput.Workflow
            $environment = if ($workflow['env'] -is [System.Collections.IDictionary]) { $workflow['env'] } else { @{} }
            $events = if ($workflow['on'] -is [System.Collections.IDictionary]) { $workflow['on'] } else { @{} }
            $dispatch = if ($events['workflow_dispatch'] -is [System.Collections.IDictionary]) { $events['workflow_dispatch'] } else { @{} }
            $inputs = if ($dispatch['inputs'] -is [System.Collections.IDictionary]) { $dispatch['inputs'] } else { @{} }
            $push = if ($events['push'] -is [System.Collections.IDictionary]) { $events['push'] } else { @{} }
            $paths = @(if ($push.Contains('paths')) { $push['paths'] })
            $expectedPaths = @(".github/workflows/$($WorkflowInput.FileName)", "$($Scope.ModuleRelativePath)/**", '!*/**/README.md', '!avm/**/metadata.json')
        }
        It 'declares env.<Name>' -ForEach @(@{ Name = 'workflowPath' }, @{ Name = 'modulePath' }) -Tag 'avm.bicep.workflow-env' {
            $environment.Contains($Name) | Should -BeTrue
        }
        It 'sets the canonical workflow path' -Tag 'avm.bicep.workflow-path' {
            $environment['workflowPath'] | Should -BeOfType ([string])
            $environment['workflowPath'] | Should -BeExactly ".github/workflows/$($WorkflowInput.FileName)"
        }
        It 'sets the canonical module path' -Tag 'avm.bicep.workflow-module-path' {
            $environment['modulePath'] | Should -BeOfType ([string])
            $environment['modulePath'] | Should -BeExactly $Scope.ModuleRelativePath
        }
        It 'permits only manual and push triggers' -Tag 'avm.bicep.workflow-trigger' {
            @($events.psbase.Keys | Where-Object { $_ -cnotin @('workflow_dispatch', 'push') }) | Should -HaveCount 0
        }
        It 'declares dispatch input <Name>' -ForEach @(
            @{ Name = 'customLocation' }, @{ Name = 'staticValidation' },
            @{ Name = 'deploymentValidation' }, @{ Name = 'removeDeployment' }
        ) -Tag 'avm.bicep.workflow-dispatch' {
            $inputs[$Name] | Should -BeOfType ([System.Collections.IDictionary])
        }
        It 'enables static validation by default' -Tag 'avm.bicep.workflow-staticValidation-default' {
            $inputs['staticValidation'] | Should -BeOfType ([System.Collections.IDictionary])
            $inputs['staticValidation']['default'] | Should -BeOfType ([bool])
            $inputs['staticValidation']['default'] | Should -BeTrue
        }
        It 'enables deployment validation by default' -Tag 'avm.bicep.workflow-deploymentValidation-default' {
            $inputs['deploymentValidation'] | Should -BeOfType ([System.Collections.IDictionary])
            $inputs['deploymentValidation']['default'] | Should -BeOfType ([bool])
            $inputs['deploymentValidation']['default'] | Should -BeTrue
        }
        It 'does not default the custom location' -Tag 'avm.bicep.workflow-custom-location' {
            $inputs['customLocation'] | Should -BeOfType ([System.Collections.IDictionary])
            $inputs['customLocation'].Contains('default') | Should -BeFalse
        }
        It 'limits push options to branches and paths' -Tag 'avm.bicep.workflow-push-options' {
            @($push.psbase.Keys | Where-Object { $_ -cnotin @('branches', 'paths') }) | Should -HaveCount 0
        }
        It 'runs automatically only on main' -Tag 'avm.bicep.workflow-push-branches' {
            $branches = @(if ($push.Contains('branches')) { $push['branches'] })
            @($branches) | Should -HaveCount 1
            $branches[0] | Should -BeOfType ([string])
            $branches[0] | Should -BeExactly 'main'
        }
        It 'includes every canonical push filter' -Tag 'avm.bicep.workflow-push-paths-missing' {
            @($expectedPaths | Where-Object { $paths -cnotcontains $_ }) | Should -HaveCount 0
        }
        It 'has exactly four canonical push filters' -Tag 'avm.bicep.workflow-push-paths-excess' {
            @($paths) | Should -HaveCount 4
            @($paths | Where-Object { $_ -isnot [string] -or $_ -cnotin $expectedPaths }) | Should -HaveCount 0
            @($paths | Select-Object -Unique) | Should -HaveCount 4
        }
        It 'excludes metadata after all positive filters' -Tag 'avm.bicep.workflow-push-metadata-last' {
            @($paths) | Should -Not -BeNullOrEmpty
            $paths[-1] | Should -BeExactly '!avm/**/metadata.json'
        }
        It 'orders push filters canonically' -Tag 'avm.bicep.workflow-push-paths-order' {
            @($paths) | Should -HaveCount 4
            for ($index = 0; $index -lt 4; $index++) {
                $paths[$index] | Should -BeExactly $expectedPaths[$index]
            }
        }
        It 'guards initialization against cancellation and automatic fork runs' -Tag 'avm.bicep.workflow-condition' {
            $workflow['jobs'] | Should -BeOfType ([System.Collections.IDictionary])
            $workflow['jobs']['job_initialize_pipeline'] | Should -BeOfType ([System.Collections.IDictionary])
            $condition = $workflow['jobs']['job_initialize_pipeline']['if']
            $condition | Should -BeOfType ([string])
            $expression = $condition.Trim()
            if ($expression.StartsWith('${{', [System.StringComparison]::Ordinal) -and
                $expression.EndsWith('}}', [System.StringComparison]::Ordinal)) {
                $expression = $expression.Substring(3, $expression.Length - 5).Trim()
            }
            $expression | Should -MatchExactly "^\s*!cancelled\(\)\s*&&\s*!\(\s*github\.repository\s*!=\s*'Azure/bicep-registry-modules'\s*&&\s*github\.event_name\s*!=\s*'workflow_dispatch'\s*\)\s*$"
        }
    }
}

# SIG # Begin signature block
# MIInTwYJKoZIhvcNAQcCoIInQDCCJzwCAQExDzANBglghkgBZQMEAgEFADB5Bgor
# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG
# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCBBrnBcz5wwVbpM
# nSqzUP46KPtvWJMKHGcaC2jcEcLkVqCCDMkwggYEMIID7KADAgECAhMzAAACHPrN
# xZvoL37EAAAAAAIcMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMR4wHAYD
# VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBD
# b2RlIFNpZ25pbmcgUENBIDIwMjQwHhcNMjYwNDE2MTg1OTQxWhcNMjcwNDE1MTg1
# OTQxWjB0MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE
# BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYD
# VQQDExVNaWNyb3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IB
# DwAwggEKAoIBAQDVsZfgOKmM31HPfoWOoNEiw0SlCiIxUMC0I9NMWbucKOw/e9lP
# oAoehQVu6SG65V4EPzrYsnBnFPNoi4/HoOdjhz1qkrEt4I6tEcxXU6oOeY9zGveC
# /3iBeuhLYxM3M/PkcUoebF+Nednm8OkdSPoDu8imViHPQq/8CQUu0WRR4rE+dMRf
# rpVqfmNi2qWCX94T4MsepijGVkwE//tJg0ryAiYdHT34LSnlG/RSBZmQRGWZ5g8j
# qnKjRParSqMft1gvjuUTVgtWNZfgcLFSK5Wa0myrq8OPcgTGGsRgun+tnSS+IxDT
# xVsAPH1OzvPjwomguByhUe/OcvUN0D5Wmp7xAgMBAAGjggGqMIIBpjAOBgNVHQ8B
# Af8EBAMCB4AwHwYDVR0lBBgwFgYKKwYBBAGCN0wIAQYIKwYBBQUHAwMwHQYDVR0O
# BBYEFNoH7a2YDjOSwpkp6DHcmUS7J+0yMFQGA1UdEQRNMEukSTBHMS0wKwYDVQQL
# EyRNaWNyb3NvZnQgSXJlbGFuZCBPcGVyYXRpb25zIExpbWl0ZWQxFjAUBgNVBAUT
# DTIzMDAxMis1MDc1NjkwHwYDVR0jBBgwFoAUf1k/VCHarU/vBeXmo9ctBpQSCDEw
# YAYDVR0fBFkwVzBVoFOgUYZPaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9w
# cy9jcmwvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNy
# bDBtBggrBgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUWh0dHA6Ly93d3cubWljcm9z
# b2Z0LmNvbS9wa2lvcHMvY2VydHMvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmcl
# MjBQQ0ElMjAyMDI0LmNydDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4IC
# AQAUnEqhaRXe0T3hIJjvdQErEkrA/7bByjn6t5IArODkkRjzkYwtKMc2yYj2quaN
# rLutWw2YZcngKPy1b71YyDJQTy4NDRwaSh9Tw5thrk3NmcPrAHia5vtcBJ1CgtKK
# 7mQbIcQ22d/N3813ayCDDFewu1+jsZmX+r/aTEqaOM4TVxVtRSkuCy8nAXKuChOK
# Li/zA4XuH8iEYqIsj2YoNaeSxVmeGiERXpKdo3dDmYi0kO5w2D8VS4c3+9h6gElY
# BaAAg/dYErBg27qT3vv0zRDJhJufvCNylA8S7/+8H5E/PV5cng6na9VV/w9OV3qu
# uND6zdGa2EX38Glp50F9AIQk3p2xXmcvorDeM4XJ7UlWYBi6g80J1SSOQnInCYFE
# msfUNn3+1AaTJKSJL83quKArTac2pKhu0Yzzzrzo6HrsRiQKzpnRBb1/dMa6P3hz
# 75XbMRBctNsFhZC07WCmjExdLg2eHW5uV0TY8D5+6wozJf7vF3+WHkYPO85Z+BC6
# U4FkNbYNycZ9cE4j1tXRdyDCfml6c0HWPHjNVDObrv9lKt3qUqFpX38VCqVCyNOO
# 1UcXfQiVjJw32U2WUKZjt/neJKHEBsm9kFsLuWzkQ53+qcaSaytmsCnk2gOglrlD
# 5d3kKyvvAw+rzm0lT8K38P6PLxfZQHhu4W8dV7Av8N2ZmDCCBr0wggSloAMCAQIC
# EzMAAAA5O7Y3Gb8GHWcAAAAAADkwDQYJKoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYT
# AlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYD
# VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBS
# b290IENlcnRpZmljYXRlIEF1dGhvcml0eSAyMDExMB4XDTI0MDgwODIwNTQxOFoX
# DTM2MDMyMjIyMTMwNFowVzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFU1pY3Jvc29m
# dCBDb3Jwb3JhdGlvbjEoMCYGA1UEAxMfTWljcm9zb2Z0IENvZGUgU2lnbmluZyBQ
# Q0EgMjAyNDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANgBnB7jOMeq
# lRYHNa265v4IY9fH8TKhemHfPINe1gpLaV3dhg324WwH06LcHbpnsBukCDNitryo
# 0dtS/EW6I/yEL/bLSY8hKpbfQuWusBPr9qazYcDxCW/qnjb5JsI1s8bNOg3bVATv
# QVL4tcf03aTycsz8QeCdM0l/yHRObJ9QqazM1r6VPEOJ7LL+uEEb73w6QCuhs89a
# 1uv1zerOYMnsneRRwCbpyW11IcggU0cRKDDq1pjVJzIbIF6+oiXXbReOsgeI8zu1
# FyQfK0fVkaya8SmVHQ/tOf23mZ4W9k0Ri22QW9p3UgSC5OUDktKxxcCmGL6tXLfO
# GSWHIIV4YrTJTT6PNty5REojHJuZHArkF9VnHTERWoTjAzfI3kP+5b4alUdhgAZ7
# ttOu1bVnXfHaqPYl2rPs20ji03LOVWsh/radgE17es5hL+t6lV0eVHrVhsssROWJ
# uz2MXMCt7iw7lFPG9LXKGjsmonn2gotGdHIuEg5JnJMJVmixd5LRlkmgYRZKzhxS
# CwyoGIq0PhaA7Y+VPct5pCHkijcIIDm0nlkK+0KyepolcqGm0T/GYQRMhHJlGOOm
# VQop36wUVUYklUy++vDWeEgEo4s7hxN6mIbf2MSIQ/iIfMZgJxC69oukMUXCrOC3
# SkE/xIkgpfl22MM1itkZ35nNXkMolU1lAgMBAAGjggFOMIIBSjAOBgNVHQ8BAf8E
# BAMCAYYwEAYJKwYBBAGCNxUBBAMCAQAwHQYDVR0OBBYEFH9ZP1Qh2q1P7wXl5qPX
# LQaUEggxMBkGCSsGAQQBgjcUAgQMHgoAUwB1AGIAQwBBMA8GA1UdEwEB/wQFMAMB
# Af8wHwYDVR0jBBgwFoAUci06AjGQQ7kUBU7h6qfHMdEjiTQwWgYDVR0fBFMwUTBP
# oE2gS4ZJaHR0cDovL2NybC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMv
# TWljUm9vQ2VyQXV0MjAxMV8yMDExXzAzXzIyLmNybDBeBggrBgEFBQcBAQRSMFAw
# TgYIKwYBBQUHMAKGQmh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvY2VydHMv
# TWljUm9vQ2VyQXV0MjAxMV8yMDExXzAzXzIyLmNydDANBgkqhkiG9w0BAQwFAAOC
# AgEAFJQfOChP7onn6fLIMKrSlN1WYKwDFgAddymOUO3FrM8d7B/W/iQ6DxXsDn7D
# 5W4wMwYeLystcEqfkjz4NURRgazyMu5yRzQh4LqjA4tStTcJh1opExo7nn5PuPBY
# nbu0+THSuVHTe0VTTPVhily/piFrDo3axQ9P4C+Ol5yet+2gTfekICS5xS+cYfSI
# vgn0JksVBVMYVI5QFu/qhnLhsEFEUzG8fvv0hjgkO+lkpV9ty6GkN4vdnd7ya6Q6
# aR9y34aiM1qmxaxBi6OUnyNl6fkuun/diTFnYDLTppOkr/mg5WSfCiDVMNCxtj4w
# PKC5OmHm1DQIt/MNokbbH3UGsFP1QbzsLocuSqLCvH09Io3fDPTmscR9Y75G4qX7
# RTX8AdBPo0I6OEojf39zuFZt0qOHm65YWQE69cZM2ueE1MB05dNNgHK9gTE7zKvK
# /fg8B2qjW88MT/WF5V5uvZGtqa9FSL2RazArA+rDPuf6JGYz4HpgMZHB4S6szWSK
# YBv0VisCzfxgeU+dquXW9bd0auYlOB58DPcOYKdc3Se94g+xL4pcEhbB54JOgAkw
# YTu/9dLeH2pDqeJZAABVDWRQCaXfO5LgyKwKCLYXpigrZYCjUSBcr+Ve8PFWMhVT
# Ql0v4q8J/AUmQN5W4n101cY2L4A7GTQG1h32HHAvfQESWP0xghncMIIZ2AIBATBu
# MFcxCzAJBgNVBAYTAlVTMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24x
# KDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMjQCEzMAAAIc
# +s3Fm+gvfsQAAAAAAhwwDQYJYIZIAWUDBAIBBQCggZAwGQYJKoZIhvcNAQkDMQwG
# CisGAQQBgjcCAQQwLwYJKoZIhvcNAQkEMSIEIK2xCzS3MMTHVOugTp1Vwl4wLAvR
# 2x4cEmZr9cBNGjdRMEIGCisGAQQBgjcCAQwxNDAyoBSAEgBNAGkAYwByAG8AcwBv
# AGYAdKEagBhodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20wDQYJKoZIhvcNAQEBBQAE
# ggEAjFmz4D00Glqqe9U7nXKEyzTx27oKftYEuGqWM9StA9aZcSiSQygTCn9jew+9
# eoO/gXbkwl2jtWD08Mys8Xi51g9yT/HOhlWBlhWkBgCRTW6jHgdE5O/CSSjExZZz
# 836NYSxc/LvLpTff1yotBSIe4rCbGPndmtOVulMlv9NeC6nS2NB8/aOpQL60Pkjf
# 3dPSWGH5oB58yp09fk48hceqxUWu+vaetLb2Q1WC8XbCUhgpo5+geC+IXwxqNdxW
# NO/BjwUWTjJdYuWNBJUv9j+HkXzce/c6cjSwbguhPZhykWYSoYGCDqabjBkXrzWI
# +n56O4Hu5+5eGQsKBqEb5FWcW6GCF6wwgheoBgorBgEEAYI3AwMBMYIXmDCCF5QG
# CSqGSIb3DQEHAqCCF4UwgheBAgEDMQ8wDQYJYIZIAWUDBAIBBQAwggFZBgsqhkiG
# 9w0BCRABBKCCAUgEggFEMIIBQAIBAQYKKwYBBAGEWQoDATAxMA0GCWCGSAFlAwQC
# AQUABCCvexaiWid2frcVGjt7R9Z88ml5fxQoNgRF6NNTNZAujAIGatxz1MNOGBIy
# MDI2MTAyNjIwNDA1Ni41NlowBIACAfSggdmkgdYwgdMxCzAJBgNVBAYTAlVTMRMw
# EQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVN
# aWNyb3NvZnQgQ29ycG9yYXRpb24xLTArBgNVBAsTJE1pY3Jvc29mdCBJcmVsYW5k
# IE9wZXJhdGlvbnMgTGltaXRlZDEnMCUGA1UECxMeblNoaWVsZCBUU1MgRVNOOjQw
# MUEtMDVFMC1EOTQ3MSUwIwYDVQQDExxNaWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2
# aWNloIIR+zCCBygwggUQoAMCAQICEzMAAAIZXrLYVHX0sY0AAQAAAhkwDQYJKoZI
# hvcNAQELBQAwfDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAO
# BgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEm
# MCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTAwHhcNMjUwODE0
# MTg0ODI2WhcNMjYxMTEzMTg0ODI2WjCB0zELMAkGA1UEBhMCVVMxEzARBgNVBAgT
# Cldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29m
# dCBDb3Jwb3JhdGlvbjEtMCsGA1UECxMkTWljcm9zb2Z0IElyZWxhbmQgT3BlcmF0
# aW9ucyBMaW1pdGVkMScwJQYDVQQLEx5uU2hpZWxkIFRTUyBFU046NDAxQS0wNUUw
# LUQ5NDcxJTAjBgNVBAMTHE1pY3Jvc29mdCBUaW1lLVN0YW1wIFNlcnZpY2UwggIi
# MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCmoUjJSTMjLGkvdDTdaYu7Lgb1
# ghRJzOeEqv5wc5P7+7s9qvEj3qDHFvVata4DEHyqMYt+xsibHxXei4rWdRx/5H+e
# yddqzn+JOBX9OXdBNEZPQN65cE1ukepz7ALU2JPIDvqAueKu9IESgHOWuk1AUSe7
# B1s8sIulNLcpZIK7knTZv5EVZH+RwXNXGeGgTeAhp5RG2sYoYFkYosFe+qCCQMQ2
# 0qS+29FPfbEu8C8v9GlF67nPXxmiMKzvZlKhrvgPLxhtpawObc5k6klFnFmw8oId
# nrE2qAUp/TE0ePS32/RDdb7bPmABVpqwkkK9HnZKXRcnYA5/eXQtJ61eBQDmAPkh
# DVG8SyVOY2dKi5OsYgPcPWeNjuYG7Sm6Ih08raMr/VZ55/b5hHhxClZCR4FmZeJ2
# H0C5Z2XDEpAvXksnorZ3DzL+388GGYvK3pAB/QJ6lZF2BmczK1UBS5YfCVlFX0kt
# jtpfwPnl4v35w4ulfdsY06Y3bhSkhbyq1lqpdp6wW8g5bbck0uFppBW85uvV67sY
# T/kyfjd778Nu11iX9ss/YhDXFgQl1JtxSQMV9bcqVkSH6cEoO1pGc1GRuAiDEhsp
# 1Pfw4pDBn9oDi5KyICDqcQ+JYEca7K0ijnBTvkzlV2OESqpMd9di7wEmLoZPO9ZP
# 716R8xd7OoKSSzFobwIDAQABo4IBSTCCAUUwHQYDVR0OBBYEFIBo6jkdZq03Opmf
# UgXV9wPqevchMB8GA1UdIwQYMBaAFJ+nFV0AXmJdg/Tl0mWnG1M1GelyMF8GA1Ud
# HwRYMFYwVKBSoFCGTmh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvY3Js
# L01pY3Jvc29mdCUyMFRpbWUtU3RhbXAlMjBQQ0ElMjAyMDEwKDEpLmNybDBsBggr
# BgEFBQcBAQRgMF4wXAYIKwYBBQUHMAKGUGh0dHA6Ly93d3cubWljcm9zb2Z0LmNv
# bS9wa2lvcHMvY2VydHMvTWljcm9zb2Z0JTIwVGltZS1TdGFtcCUyMFBDQSUyMDIw
# MTAoMSkuY3J0MAwGA1UdEwEB/wQCMAAwFgYDVR0lAQH/BAwwCgYIKwYBBQUHAwgw
# DgYDVR0PAQH/BAQDAgeAMA0GCSqGSIb3DQEBCwUAA4ICAQBfHNVkstcEV+gIIJOJ
# jswdd1vtyK8lJN+sdgkLk6TY03vk2nNMxP1XZNwhCN9DcAVRuHU0EBi0xS7DELoP
# hx4RcbmVcCdu+QL1iN4tUNHIiZdhiZ+3vP5CmX23cL/xrS2Kqc7PxR7z8Ngu0xOC
# 9Yyeyos2MgsNoiY5+ccjfpMsKMYV7xFgtcZ0JR04uV8B0wZ4/FJMDdMAA5z4ZBuY
# 9aOuC4tZvG+eXc1WNG+sFlWTEUyhVkfR/uobAM5KGOme/mdidDjy58vS4HPnZFs8
# Z1fgW/35QY6sGmuZwfOYi60W0l5zZjiS6M21MrbAEaBaxwQ5WEWJpV2N7xUsnsxU
# 0oTlOay4YzeNMuvWe5HkAUazdQqQ/uDdxAPhwcrtd0uJObt7rTpAn5ap5CwANgT1
# 29T3AhRsj0OXhRwgSsXD4UdpZJOuR8nhK8uaEqeXmSGGknWwXfPp7UHF6lSWJcer
# NEuIdaKFYhYRIXwgcSUXc87Fs/hUmocGJi9pcxXRLJGDCgPrNd11tSdf1ZHokvYG
# WoCOMfEg3B6Wyn9WHEBZOHO4wDnwvG8T9UDON8UXhabtrVkAuYlXDegv+z+7GjU6
# ni1xP6F9n243WG0LUk3gO5GoV8u22O6gCZRChs7nNQVHO8KfwKT+GI75vNHXmyqS
# OXEszIyOmRz95/hJRSKQPjry9TCCB3EwggVZoAMCAQICEzMAAAAVxedrngKbSZkA
# AAAAABUwDQYJKoZIhvcNAQELBQAwgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpX
# YXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQg
# Q29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBSb290IENlcnRpZmljYXRl
# IEF1dGhvcml0eSAyMDEwMB4XDTIxMDkzMDE4MjIyNVoXDTMwMDkzMDE4MzIyNVow
# fDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1Jl
# ZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMd
# TWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTAwggIiMA0GCSqGSIb3DQEBAQUA
# A4ICDwAwggIKAoICAQDk4aZM57RyIQt5osvXJHm9DtWC0/3unAcH0qlsTnXIyjVX
# 9gF/bErg4r25PhdgM/9cT8dm95VTcVrifkpa/rg2Z4VGIwy1jRPPdzLAEBjoYH1q
# UoNEt6aORmsHFPPFdvWGUNzBRMhxXFExN6AKOG6N7dcP2CZTfDlhAnrEqv1yaa8d
# q6z2Nr41JmTamDu6GnszrYBbfowQHJ1S/rboYiXcag/PXfT+jlPP1uyFVk3v3byN
# pOORj7I5LFGc6XBpDco2LXCOMcg1KL3jtIckw+DJj361VI/c+gVVmG1oO5pGve2k
# rnopN6zL64NF50ZuyjLVwIYwXE8s4mKyzbnijYjklqwBSru+cakXW2dg3viSkR4d
# Pf0gz3N9QZpGdc3EXzTdEonW/aUgfX782Z5F37ZyL9t9X4C626p+Nuw2TPYrbqgS
# Uei/BQOj0XOmTTd0lBw0gg/wEPK3Rxjtp+iZfD9M269ewvPV2HM9Q07BMzlMjgK8
# QmguEOqEUUbi0b1qGFphAXPKZ6Je1yh2AuIzGHLXpyDwwvoSCtdjbwzJNmSLW6Cm
# gyFdXzB0kZSU2LlQ+QuJYfM2BjUYhEfb3BvR/bLUHMVr9lxSUV0S2yW6r1AFemzF
# ER1y7435UsSFF5PAPBXbGjfHCBUYP3irRbb1Hode2o+eFnJpxq57t7c+auIurQID
# AQABo4IB3TCCAdkwEgYJKwYBBAGCNxUBBAUCAwEAATAjBgkrBgEEAYI3FQIEFgQU
# KqdS/mTEmr6CkTxGNSnPEP8vBO4wHQYDVR0OBBYEFJ+nFV0AXmJdg/Tl0mWnG1M1
# GelyMFwGA1UdIARVMFMwUQYMKwYBBAGCN0yDfQEBMEEwPwYIKwYBBQUHAgEWM2h0
# dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvRG9jcy9SZXBvc2l0b3J5Lmh0
# bTATBgNVHSUEDDAKBggrBgEFBQcDCDAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMA
# QTALBgNVHQ8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBTV9lbL
# j+iiXGJo0T2UkFvXzpoYxDBWBgNVHR8ETzBNMEugSaBHhkVodHRwOi8vY3JsLm1p
# Y3Jvc29mdC5jb20vcGtpL2NybC9wcm9kdWN0cy9NaWNSb29DZXJBdXRfMjAxMC0w
# Ni0yMy5jcmwwWgYIKwYBBQUHAQEETjBMMEoGCCsGAQUFBzAChj5odHRwOi8vd3d3
# Lm1pY3Jvc29mdC5jb20vcGtpL2NlcnRzL01pY1Jvb0NlckF1dF8yMDEwLTA2LTIz
# LmNydDANBgkqhkiG9w0BAQsFAAOCAgEAnVV9/Cqt4SwfZwExJFvhnnJL/Klv6lwU
# tj5OR2R4sQaTlz0xM7U518JxNj/aZGx80HU5bbsPMeTCj/ts0aGUGCLu6WZnOlNN
# 3Zi6th542DYunKmCVgADsAW+iehp4LoJ7nvfam++Kctu2D9IdQHZGN5tggz1bSNU
# 5HhTdSRXud2f8449xvNo32X2pFaq95W2KFUn0CS9QKC/GbYSEhFdPSfgQJY4rPf5
# KYnDvBewVIVCs/wMnosZiefwC2qBwoEZQhlSdYo2wh3DYXMuLGt7bj8sCXgU6ZGy
# qVvfSaN0DLzskYDSPeZKPmY7T7uG+jIa2Zb0j/aRAfbOxnT99kxybxCrdTDFNLB6
# 2FD+CljdQDzHVG2dY3RILLFORy3BFARxv2T5JL5zbcqOCb2zAVdJVGTZc9d/HltE
# AY5aGZFrDZ+kKNxnGSgkujhLmm77IVRrakURR6nxt67I6IleT53S0Ex2tVdUCbFp
# AUR+fKFhbHP+CrvsQWY9af3LwUFJfn6Tvsv4O+S3Fb+0zj6lMVGEvL8CwYKiexcd
# FYmNcP7ntdAoGokLjzbaukz5m/8K6TT4JDVnK+ANuOaMmdbhIurwJ0I9JZTmdHRb
# atGePu1+oDEzfbzL6Xu/OHBE0ZDxyKs6ijoIYn/ZcGNTTY3ugm2lBRDBcQZqELQd
# VTNYs6FwZvKhggNWMIICPgIBATCCAQGhgdmkgdYwgdMxCzAJBgNVBAYTAlVTMRMw
# EQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVN
# aWNyb3NvZnQgQ29ycG9yYXRpb24xLTArBgNVBAsTJE1pY3Jvc29mdCBJcmVsYW5k
# IE9wZXJhdGlvbnMgTGltaXRlZDEnMCUGA1UECxMeblNoaWVsZCBUU1MgRVNOOjQw
# MUEtMDVFMC1EOTQ3MSUwIwYDVQQDExxNaWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2
# aWNloiMKAQEwBwYFKw4DAhoDFQAxdin9aqp3JvR6eKCst/GXQicDPqCBgzCBgKR+
# MHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdS
# ZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMT
# HU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwMA0GCSqGSIb3DQEBCwUAAgUA
# 7omVKTAiGA8yMDI2MTAyNjA5MDAyNVoYDzIwMjYxMDI3MDkwMDI1WjB0MDoGCisG
# AQQBhFkKBAExLDAqMAoCBQDuiZUpAgEAMAcCAQACAggCMAcCAQACAhItMAoCBQDu
# iuapAgEAMDYGCisGAQQBhFkKBAIxKDAmMAwGCisGAQQBhFkKAwKgCjAIAgEAAgMH
# oSChCjAIAgEAAgMBhqAwDQYJKoZIhvcNAQELBQADggEBAH+B4rzEH7RNGdk0bfDd
# LzrPNTErqWTxy+lb/MedkY9ew74YY+zLA5Lvb5jNSscUZn7JGOF18DnwlKWtryyo
# StZbdGMpmBJ9CeAQqEVXadSdZTpivlAGVfs31SYqs3NDzHZPcCybth3jhIc9KR3M
# 0Hk+iK4lX292zbuG+wO4E00sQBBEsr7OnW3IPIXEKMXJtW0L+WLqCdb0BGqHHjuA
# XSM8Y/oOEqETwPXaa3bdEgpQsWdJjH+52hJ31LznVhfqxa0NS7G/iUKKTs8kecbA
# 1lK2uowd0BomNIfMpJocFnYyOKzsbs+LiQOXlLKkanyeNp37UjTA/ZJC9bsRgYVu
# EEExggQNMIIECQIBATCBkzB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGlu
# Z3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBv
# cmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMAIT
# MwAAAhlesthUdfSxjQABAAACGTANBglghkgBZQMEAgEFAKCCAUowGgYJKoZIhvcN
# AQkDMQ0GCyqGSIb3DQEJEAEEMC8GCSqGSIb3DQEJBDEiBCBjbi/FjgrZr3WiUjCb
# H2lyJIl8bV+IYXGh0DQz7NjL4zCB+gYLKoZIhvcNAQkQAi8xgeowgecwgeQwgb0E
# INyRfrfcTXLUQXfZXXzNByuyCPMj37ct7uaW+TY55u2GMIGYMIGApH4wfDELMAkG
# A1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQx
# HjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9z
# b2Z0IFRpbWUtU3RhbXAgUENBIDIwMTACEzMAAAIZXrLYVHX0sY0AAQAAAhkwIgQg
# 3IWMJ7iOB9v1eS7sNcbBUmqVYHVjcHrKbMxjPFTTnjkwDQYJKoZIhvcNAQELBQAE
# ggIAb46IiebMy+8EYIzMrFFEf/MpTXP5z1ktttFzT59CLibz7UKAEI6ZhbbrYcH7
# v+A4bQY8mVQBUcMV6pzTL2QQdIwcvb6HktluDj0jm2rTKDhncXPGRkkUHN/7FeRD
# +g3naCGxO1T6iEvxiaEv6Fi5PgeSmNcSpXbtIDXMrytegC5elJeOfdlpamBm/z53
# l3dJ3QCdvpK+Tqp7LDH+iZIPy9QHSeUhSfc29i+i0Ng3+O85fY9PhEo3X7URVn0M
# TorLibL3UbF1QBKWyUWR7MG63QcWn2IeBnoJFBz5m0cGucGFdrjyt7WKOvVXKJc8
# Mvj5u6mm0fTHgIAksC4dCMxlDG2g12tb6zUleE01vj9CLsSKMcJC6NUSusY8K0bA
# FJm2z7C9obb8u6PBDIPF8QbyVBbP6mHXd9/9fDyhsMEqMnm5cVQoGTu3GoM4qFAV
# H6x+puCSoI+7uwPxmLFqVU552WEe5RzK3F65HMvm4ior4Prl9/ywKfuOdYm1KCKT
# m6EqkS8YX+XdMr9cC21MjuVin5Nb2ejqmedIA9DVjMpRAIuISG4sXQjnx8FnaMxV
# c9L2tSM2ZPCUJSNe3OciDMCavSHGWDby5cyJyYcTu/HvXhk/CAbrrl7/UOi6i3/T
# YI6b0eysvSoz5ZszkWAaKlwRGcZVhCmJJrxUVCTbcvb1ACo=
# SIG # End signature block