Private/Tests/Cleanup/Get-AvmBicepDeploymentCleanupTarget.ps1

function Get-AvmBicepDeploymentCleanupTarget {
    [CmdletBinding()]
    [OutputType([pscustomobject])]
    param(
        [AllowEmptyCollection()]
        [string[]] $DeploymentIds = @(),

        [string[]] $PreflightRejectedDeploymentIds = @(),

        [ValidateRange(1, 1000)]
        [int] $SearchRetryLimit = 40,

        [ValidateRange(0, 3600)]
        [int] $SearchRetryInterval = 60,

        [System.Collections.IDictionary] $IsolationState = @{},

        # A retry snapshot requires terminal records and complete Create history, but deletes nothing.
        [switch] $RequireCompleteRemoval
    )

    Set-StrictMode -Version 3.0
    $ErrorActionPreference = 'Stop'

    $records = [System.Collections.Generic.Dictionary[string, hashtable]]::new(
        [System.StringComparer]::OrdinalIgnoreCase)
    foreach ($deployment in ConvertTo-AvmBicepCleanupResource -ResourceIds $DeploymentIds) {
        Assert-AvmBicepIsolationBoundary -State $IsolationState -ResourceIds @($deployment.resourceId)
        if ($deployment.type -ine 'Microsoft.Resources/deployments') {
            throw [AvmConfigurationException]::new("Not a deployment ID: $($deployment.resourceId)")
        }
        $records[$deployment.resourceId] = @{
            Id                = $deployment.resourceId
            Required          = $true
            Depth             = 0
            PreflightRejected = $false
            Status            = 'Pending'
            ErrorCode         = ''
            ErrorMessage      = ''
            References        = 0
        }
    }
    foreach ($rejectedId in $PreflightRejectedDeploymentIds) {
        if (-not $records.ContainsKey($rejectedId)) {
            throw [AvmConfigurationException]::new(
                'Preflight rejection metadata contains IDs outside the attempted deployments.')
        }
        $records[$rejectedId].PreflightRejected = $true
    }
    $resources = [System.Collections.Generic.HashSet[string]]::new(
        [System.StringComparer]::OrdinalIgnoreCase)

    for ($round = 1; $round -le $SearchRetryLimit; $round++) {
        $queue = [System.Collections.Generic.Queue[string]]::new()
        foreach ($record in $records.Values) {
            if ($record.Status -eq 'Pending') {
                $queue.Enqueue($record.Id)
            }
        }
        while ($queue.Count -gt 0) {
            $record = $records[$queue.Dequeue()]
            $nextPath = $record.Id + '/operations?api-version=2025-04-01'
            $visitedPages = [System.Collections.Generic.HashSet[string]]::new(
                [System.StringComparer]::Ordinal)
            $operations = [System.Collections.Generic.List[object]]::new()
            $children = [System.Collections.Generic.HashSet[string]]::new([System.StringComparer]::OrdinalIgnoreCase)
            $exports = @{}
            try {
                if ($RequireCompleteRemoval) {
                    Assert-AvmBicepCleanupDeploymentTerminal -Record $record
                    if ($record.Status -eq 'RejectedWithoutRecord') { continue }
                }
                while (-not [string]::IsNullOrEmpty($nextPath)) {
                    if (-not $visitedPages.Add($nextPath) -or $visitedPages.Count -gt 1000) {
                        throw [AvmProcessException]::new("Repeated or excessive deployment operations page: $nextPath")
                    }
                    $response = Invoke-AvmBicepRead -Activity 'Read cleanup operation page' -Read {
                        Invoke-AzRestMethod -Method GET -Path $nextPath -ErrorAction Stop
                    }
                    $document = ConvertFrom-AvmBicepRestResponse -Response $response -Activity 'Read cleanup operation page' `
                        -AllowedStatus @(200, 404)
                    if ([int]$response.StatusCode -ne 200) {
                        $errorBody = Get-AvmPropertyValue -InputObject $document -Name 'error'
                        $errorCode = [string](Get-AvmPropertyValue -InputObject $errorBody -Name 'code')
                        $groupScope = $record.Id -match '^/subscriptions/[^/]+/resourceGroups/[^/]+/providers/Microsoft\.Resources/deployments/[^/]+$'
                        if ([int]$response.StatusCode -eq 404 -and $groupScope -and $errorCode -ceq 'ResourceGroupNotFound') {
                            $record.Status = 'ContainerRemoved'
                            break
                        }
                        if ([int]$response.StatusCode -eq 404 -and $errorCode -ceq 'DeploymentNotFound') {
                            if ($RequireCompleteRemoval) {
                                throw [AvmProcessException]::new("Existing deployment has no complete operation history: $($record.Id)")
                            }
                            if ($visitedPages.Count -gt 1) {
                                throw [AvmProcessException]::new(
                                    "Deployment record disappeared during pagination: $($record.Id)")
                            }
                            if ($record.PreflightRejected) {
                                $record.Status = 'RejectedWithoutRecord'
                            }
                            elseif (-not $record.Required) {
                                $record.Status = 'NestedRecordAbsent'
                                Write-AvmLog -Message "Nested deployment record is absent: $($record.Id)" -Level Warning
                            }
                            $record.ErrorCode = 'DeploymentNotFound'
                            break
                        }
                        throw [AvmProcessException]::new(
                            "Deployment operations lookup failed: HTTP $($response.StatusCode), code '$errorCode', deployment '$($record.Id)'.")
                    }
                    if ($document -isnot [System.Collections.IDictionary] -or
                        -not $document.Contains('value') -or $document['value'] -isnot [array] -or
                        @($document.psbase.Keys | Where-Object { $_ -cnotin @('value', 'nextLink') }).Count -gt 0) {
                        throw [AvmProcessException]::new("Invalid deployment operations response: $($record.Id)")
                    }
                    foreach ($operation in $document['value']) {
                        $properties = Get-AvmPropertyValue -InputObject $operation -Name 'properties' -NoEnumerate
                        if ($properties -isnot [System.Collections.IDictionary]) {
                            throw [AvmProcessException]::new("Invalid deployment operation properties: $($record.Id)")
                        }
                        if ($RequireCompleteRemoval -and
                            ($properties['provisioningState'] -isnot [string] -or
                            $properties['provisioningState'] -cnotin @('Succeeded', 'Failed') -or
                            $properties['provisioningOperation'] -isnot [string] -or
                            [string]::IsNullOrWhiteSpace($properties['provisioningOperation']))) {
                            throw [AvmProcessException]::new("Deployment has an incomplete operation: $($record.Id)")
                        }
                        $operations.Add($properties)
                        if ((Get-AvmPropertyValue -InputObject $properties -Name 'provisioningOperation') -ine 'Create') {
                            continue
                        }
                        $target = Get-AvmPropertyValue -InputObject $properties -Name 'targetResource' -NoEnumerate
                        if ($null -eq $target -and -not $RequireCompleteRemoval) {
                            continue
                        }
                        $targetId = $null
                        if ($target -is [System.Collections.IDictionary]) { $targetId = $target['id'] }
                        if ($targetId -isnot [string] -or [string]::IsNullOrWhiteSpace($targetId)) {
                            if (Test-AvmBicepExistingGraphLookup -Operation $properties -DeploymentId $record.Id -Exports $exports) {
                                continue
                            }
                            throw [AvmProcessException]::new("Deployment operation has an invalid target ID: $($record.Id)")
                        }
                        foreach ($resource in @(Resolve-AvmBicepCleanupResource -ResourceId $targetId)) {
                            Assert-AvmBicepIsolationBoundary -State $IsolationState -ResourceIds @($resource.resourceId)
                            if ($resource.type -ieq 'Microsoft.Resources/deployments') {
                                if (-not $records.ContainsKey($resource.resourceId)) {
                                    $records.Add($resource.resourceId, @{
                                            Id                = $resource.resourceId
                                            Required          = $false
                                            Depth             = $record.Depth + 1
                                            PreflightRejected = $false
                                            Status            = 'Pending'
                                            ErrorCode         = ''
                                            ErrorMessage      = ''
                                            References        = 0
                                        })
                                    $queue.Enqueue($resource.resourceId)
                                }
                                $child = $records[$resource.resourceId]
                                $child.References++
                                $null = $children.Add($resource.resourceId)
                                if ($RequireCompleteRemoval -and -not $child.Required -and $child.References -gt 1) {
                                    $child.PreflightRejected = $false
                                    if ($child.Status -eq 'RejectedWithoutRecord') {
                                        $child.Status = 'Failed'
                                        $child.ErrorCode = 'AmbiguousPreflightRejection'
                                        $child.ErrorMessage = "Multiple operations reference preflight-rejected deployment '$($child.Id)'."
                                    }
                                }
                            }
                            else {
                                $null = $resources.Add($resource.resourceId)
                            }
                        }
                    }
                    $nextPath = Resolve-AvmBicepCleanupNextLink -ExpectedPath ($record.Id + '/operations') -NextLink (
                        Get-AvmPropertyValue -InputObject $document -Name 'nextLink' -NoEnumerate)
                    if ([string]::IsNullOrEmpty($nextPath)) {
                        $record.Status = 'Resolved'
                        $record.ErrorCode = ''
                    }
                }
                if ($RequireCompleteRemoval -and $record.Status -eq 'Resolved' -and $record.ProvisioningState -ceq 'Failed') {
                    foreach ($childId in $children) {
                        $child = $records[$childId]
                        if (-not $child.Required -and $child.References -eq 1) {
                            $child.PreflightRejected = Test-AvmBicepNestedPreflightRejection -DeploymentId $childId -Operations $operations.ToArray()
                        }
                    }
                }
            }
            catch {
                if ((Get-AvmBicepDeploymentErrorKind -ErrorRecord $_) -eq 'Cancellation' -or
                    $_.FullyQualifiedErrorId.Split(',')[0] -eq 'AvmBicepContextRestoreFailed') {
                    throw
                }
                $record.Status = 'Failed'
                $record.ErrorCode = 'LookupFailed'
                $record.ErrorMessage = $_.Exception.Message
                Write-AvmLog -Message (
                    "Deployment lookup failed for '$($record.Id)'; known targets will still be cleaned. $($_.Exception.Message)"
                ) -Level Warning
            }
        }
        $pending = @($records.Values | Where-Object { $_.Status -eq 'Pending' })
        if ($pending.Count -eq 0 -or $round -eq $SearchRetryLimit) {
            break
        }
        Write-AvmLog -Message (
            "Waiting for $($pending.Count) deployment record(s); lookup round $round/$SearchRetryLimit."
        ) -Level Info
        Start-Sleep -Seconds $SearchRetryInterval
    }

    $issues = [System.Collections.Generic.List[object]]::new()
    foreach ($record in $records.Values) {
        if ($record.Status -eq 'Pending') {
            $record.Status = 'Missing'
            $record.ErrorMessage = "Deployment record not found after $SearchRetryLimit lookups: $($record.Id)"
        }
        $unresolved = $RequireCompleteRemoval -and $record.Status -in @('NestedRecordAbsent', 'ContainerRemoved')
        if ($unresolved) {
            $record.ErrorMessage = "Deployment record could not be resolved ($($record.Status)): $($record.Id)"
        }
        if ($record.Status -in @('Missing', 'Failed') -or $unresolved) {
            $issues.Add([pscustomobject]@{
                    DeploymentId = $record.Id
                    Code         = $record.ErrorCode
                    Message      = $record.ErrorMessage
                })
        }
    }
    [pscustomobject]@{
        ResourceIds = [string[]]@($resources)
        Deployments = @($records.Values)
        Issues      = $issues.ToArray()
    }
}

# SIG # Begin signature block
# MIInNQYJKoZIhvcNAQcCoIInJjCCJyICAQExDzANBglghkgBZQMEAgEFADB5Bgor
# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG
# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCBu92YHriPalWfz
# xzba+mHCZK8DS5yP1oNY6/Kw84jxJqCCDMkwggYEMIID7KADAgECAhMzAAACHPrN
# xZvoL37EAAAAAAIcMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMR4wHAYD
# VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBD
# b2RlIFNpZ25pbmcgUENBIDIwMjQwHhcNMjYwNDE2MTg1OTQxWhcNMjcwNDE1MTg1
# OTQxWjB0MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE
# BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYD
# VQQDExVNaWNyb3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IB
# DwAwggEKAoIBAQDVsZfgOKmM31HPfoWOoNEiw0SlCiIxUMC0I9NMWbucKOw/e9lP
# oAoehQVu6SG65V4EPzrYsnBnFPNoi4/HoOdjhz1qkrEt4I6tEcxXU6oOeY9zGveC
# /3iBeuhLYxM3M/PkcUoebF+Nednm8OkdSPoDu8imViHPQq/8CQUu0WRR4rE+dMRf
# rpVqfmNi2qWCX94T4MsepijGVkwE//tJg0ryAiYdHT34LSnlG/RSBZmQRGWZ5g8j
# qnKjRParSqMft1gvjuUTVgtWNZfgcLFSK5Wa0myrq8OPcgTGGsRgun+tnSS+IxDT
# xVsAPH1OzvPjwomguByhUe/OcvUN0D5Wmp7xAgMBAAGjggGqMIIBpjAOBgNVHQ8B
# Af8EBAMCB4AwHwYDVR0lBBgwFgYKKwYBBAGCN0wIAQYIKwYBBQUHAwMwHQYDVR0O
# BBYEFNoH7a2YDjOSwpkp6DHcmUS7J+0yMFQGA1UdEQRNMEukSTBHMS0wKwYDVQQL
# EyRNaWNyb3NvZnQgSXJlbGFuZCBPcGVyYXRpb25zIExpbWl0ZWQxFjAUBgNVBAUT
# DTIzMDAxMis1MDc1NjkwHwYDVR0jBBgwFoAUf1k/VCHarU/vBeXmo9ctBpQSCDEw
# YAYDVR0fBFkwVzBVoFOgUYZPaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9w
# cy9jcmwvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNy
# bDBtBggrBgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUWh0dHA6Ly93d3cubWljcm9z
# b2Z0LmNvbS9wa2lvcHMvY2VydHMvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmcl
# MjBQQ0ElMjAyMDI0LmNydDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4IC
# AQAUnEqhaRXe0T3hIJjvdQErEkrA/7bByjn6t5IArODkkRjzkYwtKMc2yYj2quaN
# rLutWw2YZcngKPy1b71YyDJQTy4NDRwaSh9Tw5thrk3NmcPrAHia5vtcBJ1CgtKK
# 7mQbIcQ22d/N3813ayCDDFewu1+jsZmX+r/aTEqaOM4TVxVtRSkuCy8nAXKuChOK
# Li/zA4XuH8iEYqIsj2YoNaeSxVmeGiERXpKdo3dDmYi0kO5w2D8VS4c3+9h6gElY
# BaAAg/dYErBg27qT3vv0zRDJhJufvCNylA8S7/+8H5E/PV5cng6na9VV/w9OV3qu
# uND6zdGa2EX38Glp50F9AIQk3p2xXmcvorDeM4XJ7UlWYBi6g80J1SSOQnInCYFE
# msfUNn3+1AaTJKSJL83quKArTac2pKhu0Yzzzrzo6HrsRiQKzpnRBb1/dMa6P3hz
# 75XbMRBctNsFhZC07WCmjExdLg2eHW5uV0TY8D5+6wozJf7vF3+WHkYPO85Z+BC6
# U4FkNbYNycZ9cE4j1tXRdyDCfml6c0HWPHjNVDObrv9lKt3qUqFpX38VCqVCyNOO
# 1UcXfQiVjJw32U2WUKZjt/neJKHEBsm9kFsLuWzkQ53+qcaSaytmsCnk2gOglrlD
# 5d3kKyvvAw+rzm0lT8K38P6PLxfZQHhu4W8dV7Av8N2ZmDCCBr0wggSloAMCAQIC
# EzMAAAA5O7Y3Gb8GHWcAAAAAADkwDQYJKoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYT
# AlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYD
# VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBS
# b290IENlcnRpZmljYXRlIEF1dGhvcml0eSAyMDExMB4XDTI0MDgwODIwNTQxOFoX
# DTM2MDMyMjIyMTMwNFowVzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFU1pY3Jvc29m
# dCBDb3Jwb3JhdGlvbjEoMCYGA1UEAxMfTWljcm9zb2Z0IENvZGUgU2lnbmluZyBQ
# Q0EgMjAyNDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANgBnB7jOMeq
# lRYHNa265v4IY9fH8TKhemHfPINe1gpLaV3dhg324WwH06LcHbpnsBukCDNitryo
# 0dtS/EW6I/yEL/bLSY8hKpbfQuWusBPr9qazYcDxCW/qnjb5JsI1s8bNOg3bVATv
# QVL4tcf03aTycsz8QeCdM0l/yHRObJ9QqazM1r6VPEOJ7LL+uEEb73w6QCuhs89a
# 1uv1zerOYMnsneRRwCbpyW11IcggU0cRKDDq1pjVJzIbIF6+oiXXbReOsgeI8zu1
# FyQfK0fVkaya8SmVHQ/tOf23mZ4W9k0Ri22QW9p3UgSC5OUDktKxxcCmGL6tXLfO
# GSWHIIV4YrTJTT6PNty5REojHJuZHArkF9VnHTERWoTjAzfI3kP+5b4alUdhgAZ7
# ttOu1bVnXfHaqPYl2rPs20ji03LOVWsh/radgE17es5hL+t6lV0eVHrVhsssROWJ
# uz2MXMCt7iw7lFPG9LXKGjsmonn2gotGdHIuEg5JnJMJVmixd5LRlkmgYRZKzhxS
# CwyoGIq0PhaA7Y+VPct5pCHkijcIIDm0nlkK+0KyepolcqGm0T/GYQRMhHJlGOOm
# VQop36wUVUYklUy++vDWeEgEo4s7hxN6mIbf2MSIQ/iIfMZgJxC69oukMUXCrOC3
# SkE/xIkgpfl22MM1itkZ35nNXkMolU1lAgMBAAGjggFOMIIBSjAOBgNVHQ8BAf8E
# BAMCAYYwEAYJKwYBBAGCNxUBBAMCAQAwHQYDVR0OBBYEFH9ZP1Qh2q1P7wXl5qPX
# LQaUEggxMBkGCSsGAQQBgjcUAgQMHgoAUwB1AGIAQwBBMA8GA1UdEwEB/wQFMAMB
# Af8wHwYDVR0jBBgwFoAUci06AjGQQ7kUBU7h6qfHMdEjiTQwWgYDVR0fBFMwUTBP
# oE2gS4ZJaHR0cDovL2NybC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMv
# TWljUm9vQ2VyQXV0MjAxMV8yMDExXzAzXzIyLmNybDBeBggrBgEFBQcBAQRSMFAw
# TgYIKwYBBQUHMAKGQmh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvY2VydHMv
# TWljUm9vQ2VyQXV0MjAxMV8yMDExXzAzXzIyLmNydDANBgkqhkiG9w0BAQwFAAOC
# AgEAFJQfOChP7onn6fLIMKrSlN1WYKwDFgAddymOUO3FrM8d7B/W/iQ6DxXsDn7D
# 5W4wMwYeLystcEqfkjz4NURRgazyMu5yRzQh4LqjA4tStTcJh1opExo7nn5PuPBY
# nbu0+THSuVHTe0VTTPVhily/piFrDo3axQ9P4C+Ol5yet+2gTfekICS5xS+cYfSI
# vgn0JksVBVMYVI5QFu/qhnLhsEFEUzG8fvv0hjgkO+lkpV9ty6GkN4vdnd7ya6Q6
# aR9y34aiM1qmxaxBi6OUnyNl6fkuun/diTFnYDLTppOkr/mg5WSfCiDVMNCxtj4w
# PKC5OmHm1DQIt/MNokbbH3UGsFP1QbzsLocuSqLCvH09Io3fDPTmscR9Y75G4qX7
# RTX8AdBPo0I6OEojf39zuFZt0qOHm65YWQE69cZM2ueE1MB05dNNgHK9gTE7zKvK
# /fg8B2qjW88MT/WF5V5uvZGtqa9FSL2RazArA+rDPuf6JGYz4HpgMZHB4S6szWSK
# YBv0VisCzfxgeU+dquXW9bd0auYlOB58DPcOYKdc3Se94g+xL4pcEhbB54JOgAkw
# YTu/9dLeH2pDqeJZAABVDWRQCaXfO5LgyKwKCLYXpigrZYCjUSBcr+Ve8PFWMhVT
# Ql0v4q8J/AUmQN5W4n101cY2L4A7GTQG1h32HHAvfQESWP0xghnCMIIZvgIBATBu
# MFcxCzAJBgNVBAYTAlVTMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24x
# KDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMjQCEzMAAAIc
# +s3Fm+gvfsQAAAAAAhwwDQYJYIZIAWUDBAIBBQCggZAwGQYJKoZIhvcNAQkDMQwG
# CisGAQQBgjcCAQQwLwYJKoZIhvcNAQkEMSIEIAccwEMd/TaL7uV5hEUIZN4m4XyE
# rDbwOXKWYyLvBVHnMEIGCisGAQQBgjcCAQwxNDAyoBSAEgBNAGkAYwByAG8AcwBv
# AGYAdKEagBhodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20wDQYJKoZIhvcNAQEBBQAE
# ggEAcELiHov5RPJruPKDdmu9n0Nvw2ivH7hKjZukNZ62r+2H+Jr82/ctQLinFVfw
# UZypJQgwsDWCOU4wHs9C3BMhVO6NGC1b3jq68hMo947Hiue12lGhh6kRI/UWIZuw
# s3fJcJzQTgu4aLS74F/ka9OV12TwcMdpzSWaDDK5d+Pzvr6kbeoUbHiG2WrRBtwn
# aLUJguOsbkNOAwWqmB5o3OR3IGCoL5nhYRtmIEAj9DCsYyu3+EA7HVBwj9XrL4df
# K+kQ1VCrJz8946y03Yn7cnzC+oUHVVgXvO0DCBAIH65u+fr5DAVEoP3kvhcPOBO4
# 4CUmblPvJwFY5yXd2zPma+BDk6GCF5IwgheOBgorBgEEAYI3AwMBMYIXfjCCF3oG
# CSqGSIb3DQEHAqCCF2swghdnAgEDMQ8wDQYJYIZIAWUDBAIBBQAwggFQBgsqhkiG
# 9w0BCRABBKCCAT8EggE7MIIBNwIBAQYKKwYBBAGEWQoDATAxMA0GCWCGSAFlAwQC
# AQUABCAPq9MnUyIB+9kMxDTSMkQ83S+0pe6rgcu2DcWhv1SopAIGaqoyfyPcGBEy
# MDI2MTAyNzE0NDg0Ny42WjAEgAIB9KCB0aSBzjCByzELMAkGA1UEBhMCVVMxEzAR
# BgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1p
# Y3Jvc29mdCBDb3Jwb3JhdGlvbjElMCMGA1UECxMcTWljcm9zb2Z0IEFtZXJpY2Eg
# T3BlcmF0aW9uczEnMCUGA1UECxMeblNoaWVsZCBUU1MgRVNOOjg5MDAtMDVFMC1E
# OTQ3MSUwIwYDVQQDExxNaWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2aWNloIIR6jCC
# ByAwggUIoAMCAQICEzMAAAIiQdL2qv/Itf8AAQAAAiIwDQYJKoZIhvcNAQELBQAw
# fDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1Jl
# ZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMd
# TWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTAwHhcNMjYwMjE5MTkzOTU2WhcN
# MjcwNTE3MTkzOTU2WjCByzELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0
# b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3Jh
# dGlvbjElMCMGA1UECxMcTWljcm9zb2Z0IEFtZXJpY2EgT3BlcmF0aW9uczEnMCUG
# A1UECxMeblNoaWVsZCBUU1MgRVNOOjg5MDAtMDVFMC1EOTQ3MSUwIwYDVQQDExxN
# aWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2aWNlMIICIjANBgkqhkiG9w0BAQEFAAOC
# Ag8AMIICCgKCAgEAtbniibpCLlLAACaPwGOQ2Uah+24YL+wlhjZRHW0RqCE63ROl
# rJ+ezWjbtQU3YwWxXL+0X4sbXtMfh0b10qrA/lnkl/+v8vcBNDM/sUT0xiGNtCu2
# kA2uvDss1clHlAsqcmQv4Fv98rTv2Tp1PR9q4u+5CT/AAa6sstVMV/zrHhILx7I/
# MopFk9AEba41m1zBxc0jqOYUHH1JjFyqlls+vjdPlMp4RstZ/naFuFmYKR/GOVu4
# aUqJFo9TPy7uMIt6Og8/b1VrpHIFBRoywJeGGaToWoex7ogv2pVyJjEH/AtwPKv+
# v9YRaHiGQeFBpMsMQfzkkzkrC+vt/aQ6szOwoDqX+Fe/fZDfeMjPblySOU/0ogOT
# HSGSIRFtPm4fOUag4eWFt/6Gr+eET8cOTj5R+uEFeiiZJdBSBJTFaCzaPFFkUHDA
# 9e/ce1gEowui7GjWe8itKnBEiLC9cIkJnX0AcXKqxQqSEH55kBZDqfSMl1Fqs2vL
# Zqc/BOml4PW9XogE9z1U4KzpT4v4WGQnz8V/+oxrcj48tQosDpiWpqIZklP/wjgH
# p30U9hthzEVKQl9c7PgJg5nUDNV0Wm+GEgCywJQ8xgrICO+557iY6FwJYiZr+zX6
# 71gHAOSqglDlkOpEj7ea9vDHyl1iSaUl7RXkvzJA8ycv4iUVch3BcvwfjLcCAwEA
# AaOCAUkwggFFMB0GA1UdDgQWBBRZB8BqAyeWWxBIrvCrLYrrKmqM0DAfBgNVHSME
# GDAWgBSfpxVdAF5iXYP05dJlpxtTNRnpcjBfBgNVHR8EWDBWMFSgUqBQhk5odHRw
# Oi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2NybC9NaWNyb3NvZnQlMjBUaW1l
# LVN0YW1wJTIwUENBJTIwMjAxMCgxKS5jcmwwbAYIKwYBBQUHAQEEYDBeMFwGCCsG
# AQUFBzAChlBodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2NlcnRzL01p
# Y3Jvc29mdCUyMFRpbWUtU3RhbXAlMjBQQ0ElMjAyMDEwKDEpLmNydDAMBgNVHRMB
# Af8EAjAAMBYGA1UdJQEB/wQMMAoGCCsGAQUFBwMIMA4GA1UdDwEB/wQEAwIHgDAN
# BgkqhkiG9w0BAQsFAAOCAgEAYgDPp6q6cBtvbcUl7+NqPgrE3tguG6GkXxY7vSWl
# pC0x8Ku6ZJzTjS95/lBt8fwdPNxCl4hWKwJrpewUxwhl1Ot/8UbGdsI92ZkdAOHf
# Z3/bGgiVZuI7j1RQWov6JLTjmB9o/tfszO9MKDeaJ4Af6b8u1/AH2OiQeFz72/NE
# M+32OXnXW58I84NbGYVDxW23MHlngAiDa86hSutpjHlypobbnzK2qKICXiV31mN8
# eP6W7m4BDU9/qV0+udtNwjxfZH3ShOxigCEWMt8ZAUw7xXfHbn4zqQp9/JyuqjJV
# bZwYw4VkBtDzNxP6MQbOVAayOqQWJJiB7W44nw6rh0/k4WlVe8R3OiJ6EnN2jc1+
# PSR1IEJrrw3TIy5G2F3gNP9auSMUoNlPsnGQTrwIt7nWTyoQOVczg43/7nLv7xbV
# 62HEZJhijd47o2it/8jGYtibuTRC9yElqK8Ke0Y3mYPiTCCtH6LLlY/mApua+uCx
# /w/UCQwI/l32WjXhXb/dCuQNEEURj/6aAfckyFYxF4/7ic6fC+A3eOLAKrqgzoh3
# ZC4MXyvJz6qQklj2fRvkQj5vOaPXAH8RDba0rjsHKcis8bEQmAi/jyuPvfKK4rfR
# FSfyy6Anhvoy5Y9Cmg+EMurGXuK1jK9W60C6LEwWTcBZ18TYyJwlgXdIu4rNck0v
# +KkwggdxMIIFWaADAgECAhMzAAAAFcXna54Cm0mZAAAAAAAVMA0GCSqGSIb3DQEB
# CwUAMIGIMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE
# BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMTIwMAYD
# VQQDEylNaWNyb3NvZnQgUm9vdCBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgMjAxMDAe
# Fw0yMTA5MzAxODIyMjVaFw0zMDA5MzAxODMyMjVaMHwxCzAJBgNVBAYTAlVTMRMw
# EQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVN
# aWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0
# YW1wIFBDQSAyMDEwMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA5OGm
# TOe0ciELeaLL1yR5vQ7VgtP97pwHB9KpbE51yMo1V/YBf2xK4OK9uT4XYDP/XE/H
# ZveVU3Fa4n5KWv64NmeFRiMMtY0Tz3cywBAY6GB9alKDRLemjkZrBxTzxXb1hlDc
# wUTIcVxRMTegCjhuje3XD9gmU3w5YQJ6xKr9cmmvHaus9ja+NSZk2pg7uhp7M62A
# W36MEBydUv626GIl3GoPz130/o5Tz9bshVZN7928jaTjkY+yOSxRnOlwaQ3KNi1w
# jjHINSi947SHJMPgyY9+tVSP3PoFVZhtaDuaRr3tpK56KTesy+uDRedGbsoy1cCG
# MFxPLOJiss254o2I5JasAUq7vnGpF1tnYN74kpEeHT39IM9zfUGaRnXNxF803RKJ
# 1v2lIH1+/NmeRd+2ci/bfV+AutuqfjbsNkz2K26oElHovwUDo9Fzpk03dJQcNIIP
# 8BDyt0cY7afomXw/TNuvXsLz1dhzPUNOwTM5TI4CvEJoLhDqhFFG4tG9ahhaYQFz
# ymeiXtcodgLiMxhy16cg8ML6EgrXY28MyTZki1ugpoMhXV8wdJGUlNi5UPkLiWHz
# NgY1GIRH29wb0f2y1BzFa/ZcUlFdEtsluq9QBXpsxREdcu+N+VLEhReTwDwV2xo3
# xwgVGD94q0W29R6HXtqPnhZyacaue7e3PmriLq0CAwEAAaOCAd0wggHZMBIGCSsG
# AQQBgjcVAQQFAgMBAAEwIwYJKwYBBAGCNxUCBBYEFCqnUv5kxJq+gpE8RjUpzxD/
# LwTuMB0GA1UdDgQWBBSfpxVdAF5iXYP05dJlpxtTNRnpcjBcBgNVHSAEVTBTMFEG
# DCsGAQQBgjdMg30BATBBMD8GCCsGAQUFBwIBFjNodHRwOi8vd3d3Lm1pY3Jvc29m
# dC5jb20vcGtpb3BzL0RvY3MvUmVwb3NpdG9yeS5odG0wEwYDVR0lBAwwCgYIKwYB
# BQUHAwgwGQYJKwYBBAGCNxQCBAweCgBTAHUAYgBDAEEwCwYDVR0PBAQDAgGGMA8G
# A1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAU1fZWy4/oolxiaNE9lJBb186aGMQw
# VgYDVR0fBE8wTTBLoEmgR4ZFaHR0cDovL2NybC5taWNyb3NvZnQuY29tL3BraS9j
# cmwvcHJvZHVjdHMvTWljUm9vQ2VyQXV0XzIwMTAtMDYtMjMuY3JsMFoGCCsGAQUF
# BwEBBE4wTDBKBggrBgEFBQcwAoY+aHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3Br
# aS9jZXJ0cy9NaWNSb29DZXJBdXRfMjAxMC0wNi0yMy5jcnQwDQYJKoZIhvcNAQEL
# BQADggIBAJ1VffwqreEsH2cBMSRb4Z5yS/ypb+pcFLY+TkdkeLEGk5c9MTO1OdfC
# cTY/2mRsfNB1OW27DzHkwo/7bNGhlBgi7ulmZzpTTd2YurYeeNg2LpypglYAA7AF
# vonoaeC6Ce5732pvvinLbtg/SHUB2RjebYIM9W0jVOR4U3UkV7ndn/OOPcbzaN9l
# 9qRWqveVtihVJ9AkvUCgvxm2EhIRXT0n4ECWOKz3+SmJw7wXsFSFQrP8DJ6LGYnn
# 8AtqgcKBGUIZUnWKNsIdw2FzLixre24/LAl4FOmRsqlb30mjdAy87JGA0j3mSj5m
# O0+7hvoyGtmW9I/2kQH2zsZ0/fZMcm8Qq3UwxTSwethQ/gpY3UA8x1RtnWN0SCyx
# TkctwRQEcb9k+SS+c23Kjgm9swFXSVRk2XPXfx5bRAGOWhmRaw2fpCjcZxkoJLo4
# S5pu+yFUa2pFEUep8beuyOiJXk+d0tBMdrVXVAmxaQFEfnyhYWxz/gq77EFmPWn9
# y8FBSX5+k77L+DvktxW/tM4+pTFRhLy/AsGConsXHRWJjXD+57XQKBqJC4822rpM
# +Zv/Cuk0+CQ1ZyvgDbjmjJnW4SLq8CdCPSWU5nR0W2rRnj7tfqAxM328y+l7vzhw
# RNGQ8cirOoo6CGJ/2XBjU02N7oJtpQUQwXEGahC0HVUzWLOhcGbyoYIDTTCCAjUC
# AQEwgfmhgdGkgc4wgcsxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9u
# MRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRp
# b24xJTAjBgNVBAsTHE1pY3Jvc29mdCBBbWVyaWNhIE9wZXJhdGlvbnMxJzAlBgNV
# BAsTHm5TaGllbGQgVFNTIEVTTjo4OTAwLTA1RTAtRDk0NzElMCMGA1UEAxMcTWlj
# cm9zb2Z0IFRpbWUtU3RhbXAgU2VydmljZaIjCgEBMAcGBSsOAwIaAxUAu8nF1Wcd
# 27A6SZK+1bnIKZLKM7iggYMwgYCkfjB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMK
# V2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0
# IENvcnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0Eg
# MjAxMDANBgkqhkiG9w0BAQsFAAIFAO6KtwwwIhgPMjAyNjEwMjcwNTM3MTZaGA8y
# MDI2MTAyODA1MzcxNlowdDA6BgorBgEEAYRZCgQBMSwwKjAKAgUA7oq3DAIBADAH
# AgEAAgIHaTAHAgEAAgIS8TAKAgUA7owIjAIBADA2BgorBgEEAYRZCgQCMSgwJjAM
# BgorBgEEAYRZCgMCoAowCAIBAAIDB6EgoQowCAIBAAIDAYagMA0GCSqGSIb3DQEB
# CwUAA4IBAQBQCg37mXhjyR7i/6NNXI++wXARgic4Zcb2eL9xqMjltQUDG1eKQFvK
# 34+AxJ5uMKsCibYPLvto8ccEuJAgfh4xmhz3UfWKITDo6xzXWFzzErkc/cXBdtzf
# W+KtkLsxNGP7tdsCa2HCUmgiOLvoo/SlKwkD07ZHRbiZfGz8OrVGDTuok0so3TKm
# eSxEn4C0KFao90xd6qse6Ejvepy2s2usOic3w6Sye3lGkYIBwzumFrsbRwd6/V/y
# xhq/NFbeawYJsXFyonYt4aUyVSws9Pvzo1jW6069P3d3BIVxu04lP2OpYVQmLr8z
# 5PVe/tZnhRxxt7CSJH2o2IhYbNnT5ORGMYIEDTCCBAkCAQEwgZMwfDELMAkGA1UE
# BhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAc
# BgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0
# IFRpbWUtU3RhbXAgUENBIDIwMTACEzMAAAIiQdL2qv/Itf8AAQAAAiIwDQYJYIZI
# AWUDBAIBBQCgggFKMBoGCSqGSIb3DQEJAzENBgsqhkiG9w0BCRABBDAvBgkqhkiG
# 9w0BCQQxIgQgUVA69/TFZSFnJNTUGdUbrTIvuFpUK6ELtyVDz5P8kVIwgfoGCyqG
# SIb3DQEJEAIvMYHqMIHnMIHkMIG9BCAFYF0BCgTnxoIzbJJgzpm3BCDpxxjcAPkH
# Ebnw0eQJEzCBmDCBgKR+MHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5n
# dG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9y
# YXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwAhMz
# AAACIkHS9qr/yLX/AAEAAAIiMCIEIGfgFtkBPQCJqvcjCjTHdcpsVL0LLYH98VJ4
# d91lNAXcMA0GCSqGSIb3DQEBCwUABIICAGgBPy8dBxhNr8eVAmJK/dUM/LAmZVmZ
# kPCd5BLUuFBH+1AIVu8EJq/QyXDpGeVy3jYCXSXo3JekM0iR7+F+X1YRgiUCSGK7
# 9/jrhH+LshzeN2/kI0YyfWchYlloX+duIqO53QDIMzfEhW7bbIKghlLq90muj1CM
# jzDoqw3WgImBlsn/B/bzHpV/wn4KWV/bI4JzML4au+Ff1E9EwUtNZrxpHGmb20VF
# 56s6gdswhFEO+tdxgbWAPtKlDkja6aiua0whCxxPXXic/+X4fZxQdzsV1eddFsvQ
# Hzh4LZuoroUF1UlQUBa3S8pUZItmoXF5SlWsxrEu0vOqXOXeRvSmxm/9tNVnHnq8
# G5RW4D7Rx5TTvxQEcrCj10vMe65hUAhTJD9Q3CULes3DvdkOUT4FSM/Wtq9P1u73
# UmeMMVTZ5pa9Iap49Uw9JVnXVV2b2pj4b4K8VRWY5h+uEEUBxden3gi+7BthB916
# YQlu7QjQz+bZLDArWLnFA068vFSMKHX72syrEg8UFFr6hneyg+8lVtecn96W1uKl
# VKfgsB5oy1tuJ7o1cOUpsqrOdLQylehug4dmVvK94GH0za0clFf9isbE5v6K5fcp
# Gb/am8NUu4ad8BVxzQ5wfvtn0XQH5y9TPwE623jVLbZykkgmZMzfGoylFNAG5xQg
# JDXM6UQ4jg2h
# SIG # End signature block