Private/Tests/Get-AvmBicepCiParameter.ps1

function Get-AvmBicepCiParameter {
    [CmdletBinding()]
    [OutputType([hashtable])]
    param(
        [Parameter(Mandatory)]
        [AllowEmptyCollection()]
        [System.Collections.IDictionary] $TemplateParameters,

        [System.Collections.IDictionary] $TemplateDefinitions = @{},

        [System.Collections.IDictionary] $Variables = @{},

        [System.Collections.IDictionary] $Secrets = @{},

        [string] $KeyVaultName
    )

    Set-StrictMode -Version 3.0
    $ErrorActionPreference = 'Stop'

    $names = [System.Collections.Generic.Dictionary[string, string]]::new(
        [System.StringComparer]::OrdinalIgnoreCase)
    foreach ($name in $TemplateParameters.psbase.Keys) {
        if ($name -isnot [string] -or [string]::IsNullOrWhiteSpace($name) -or
            -not $names.TryAdd($name, $name)) {
            throw [AvmConfigurationException]::new('Template parameter names must be distinct, nonempty strings ignoring case.')
        }
    }
    $selected = @{}
    foreach ($source in @(
            @{ Name = 'variables'; Values = $Variables; Secret = $false }
            @{ Name = 'secrets'; Values = $Secrets; Secret = $true }
        )) {
        $aliases = @{}
        foreach ($key in $source.Values.psbase.Keys) {
            if ($key -isnot [string] -or $key -ieq 'CI_KEY_VAULT_NAME') { continue }
            $name = if ($key.StartsWith('CI__', [System.StringComparison]::OrdinalIgnoreCase)) {
                $key.Substring(4)
            }
            elseif ($key.StartsWith('CI_', [System.StringComparison]::OrdinalIgnoreCase)) {
                $key.Substring(3).Replace('_', '')
            }
            else { continue }
            if (-not $names.ContainsKey($name)) { continue }
            $name = $names[$name]
            if (-not $aliases.ContainsKey($name)) { $aliases[$name] = @() }
            $aliases[$name] += $key
        }
        foreach ($name in $aliases.psbase.Keys) {
            $preferred = @($aliases[$name] | Where-Object {
                    -not $_.StartsWith('CI__', [System.StringComparison]::OrdinalIgnoreCase)
                })
            if ($preferred.Count -eq 0) { $preferred = @($aliases[$name]) }
            if ($preferred.Count -ne 1) {
                throw [AvmConfigurationException]::new(
                    "Multiple CI $($source.Name) names in the preferred prefix target parameter '$name'.")
            }
            $selected[$name] = @{
                Name   = $preferred[0]
                Value  = $source.Values[$preferred[0]]
                Secret = $source.Secret
            }
        }
    }
    $result = @{}
    foreach ($name in $selected.psbase.Keys) {
        $entry = $selected[$name]
        $value = $entry.Value
        if ($value -isnot [string]) {
            throw [AvmConfigurationException]::new("CI value for parameter '$name' must be a string.")
        }
        $definition = $TemplateParameters[$name]
        $visited = [System.Collections.Generic.HashSet[string]]::new([System.StringComparer]::Ordinal)
        while ($definition -is [System.Collections.IDictionary] -and
            -not $definition['type'] -and $definition.Contains('$ref')) {
            $reference = $definition['$ref']
            if ($reference -isnot [string] -or
                -not $reference.StartsWith('#/definitions/', [System.StringComparison]::Ordinal)) {
                throw [AvmConfigurationException]::new("Parameter '$name' has an unsupported type reference.")
            }
            $typeName = $reference.Substring('#/definitions/'.Length).Replace('~1', '/').Replace('~0', '~')
            if (-not $visited.Add($typeName) -or -not $TemplateDefinitions.Contains($typeName)) {
                throw [AvmConfigurationException]::new("Parameter '$name' has an unresolved or circular type reference.")
            }
            $definition = $TemplateDefinitions[$typeName]
        }
        $type = Get-AvmPropertyValue -InputObject $definition -Name 'type'
        if ($entry.Secret -and $type -notin @('secureString', 'secureObject')) {
            Write-AvmLog -Level Warning -Message "CI secret '$($entry.Name)' targets non-secure parameter '$name'."
        }
        switch ($type) {
            'string' { $result[$name] = $value }
            'secureString' {
                $secureValue = [System.Security.SecureString]::new()
                foreach ($character in $value.ToCharArray()) { $secureValue.AppendChar($character) }
                $secureValue.MakeReadOnly()
                $result[$name] = $secureValue
            }
            { $_ -in @('int', 'bool', 'array', 'object', 'secureObject') } {
                try {
                    $converted = ConvertFrom-AvmStrictJson -Json $value -AllowArray -AllowScalar
                }
                catch [System.ArgumentException] {
                    throw [AvmConfigurationException]::new("CI parameter '$name' must be JSON of type '$type'.")
                }
                $valid = switch ($type) {
                    'int' { $converted -is [int] -or $converted -is [long] }
                    'bool' { $converted -is [bool] }
                    'array' { $converted -is [array] }
                    default { $converted -is [System.Collections.IDictionary] }
                }
                if (-not $valid) {
                    throw [AvmConfigurationException]::new("CI parameter '$name' must be JSON of type '$type'.")
                }
                $result[$name] = $converted
            }
            default {
                throw [AvmConfigurationException]::new("Parameter '$name' has an unsupported CI parameter type.")
            }
        }
    }
    if (-not [string]::IsNullOrWhiteSpace($KeyVaultName) -and
        $result.psbase.Count -lt $names.Count) {
        Write-AvmLog -Level Warning -Message 'CI Key Vault inputs are deprecated; prefer CI-prefixed variables or secrets.'
        foreach ($secret in Get-AzKeyVaultSecret -VaultName $KeyVaultName -ErrorAction Stop) {
            if ($secret.Name -notmatch '^CI-.+') { continue }
            $name = $secret.Name.Substring(3)
            if (-not $names.ContainsKey($name) -or $result.ContainsKey($name)) { continue }
            $value = Get-AzKeyVaultSecret -VaultName $KeyVaultName -Name $secret.Name -ErrorAction Stop
            if ($value.SecretValue -isnot [System.Security.SecureString]) {
                throw [AvmProcessException]::new("Key Vault did not return a secure value for CI parameter '$name'.")
            }
            $result[$names[$name]] = $value.SecretValue
        }
    }
    return $result
}

# SIG # Begin signature block
# MIInNgYJKoZIhvcNAQcCoIInJzCCJyMCAQExDzANBglghkgBZQMEAgEFADB5Bgor
# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG
# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCBHjRBUK2y6RmKX
# iRXwV8hV5PT/Ur6huOlATWc0GdMeKaCCDMkwggYEMIID7KADAgECAhMzAAACHPrN
# xZvoL37EAAAAAAIcMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMR4wHAYD
# VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBD
# b2RlIFNpZ25pbmcgUENBIDIwMjQwHhcNMjYwNDE2MTg1OTQxWhcNMjcwNDE1MTg1
# OTQxWjB0MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE
# BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYD
# VQQDExVNaWNyb3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IB
# DwAwggEKAoIBAQDVsZfgOKmM31HPfoWOoNEiw0SlCiIxUMC0I9NMWbucKOw/e9lP
# oAoehQVu6SG65V4EPzrYsnBnFPNoi4/HoOdjhz1qkrEt4I6tEcxXU6oOeY9zGveC
# /3iBeuhLYxM3M/PkcUoebF+Nednm8OkdSPoDu8imViHPQq/8CQUu0WRR4rE+dMRf
# rpVqfmNi2qWCX94T4MsepijGVkwE//tJg0ryAiYdHT34LSnlG/RSBZmQRGWZ5g8j
# qnKjRParSqMft1gvjuUTVgtWNZfgcLFSK5Wa0myrq8OPcgTGGsRgun+tnSS+IxDT
# xVsAPH1OzvPjwomguByhUe/OcvUN0D5Wmp7xAgMBAAGjggGqMIIBpjAOBgNVHQ8B
# Af8EBAMCB4AwHwYDVR0lBBgwFgYKKwYBBAGCN0wIAQYIKwYBBQUHAwMwHQYDVR0O
# BBYEFNoH7a2YDjOSwpkp6DHcmUS7J+0yMFQGA1UdEQRNMEukSTBHMS0wKwYDVQQL
# EyRNaWNyb3NvZnQgSXJlbGFuZCBPcGVyYXRpb25zIExpbWl0ZWQxFjAUBgNVBAUT
# DTIzMDAxMis1MDc1NjkwHwYDVR0jBBgwFoAUf1k/VCHarU/vBeXmo9ctBpQSCDEw
# YAYDVR0fBFkwVzBVoFOgUYZPaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9w
# cy9jcmwvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNy
# bDBtBggrBgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUWh0dHA6Ly93d3cubWljcm9z
# b2Z0LmNvbS9wa2lvcHMvY2VydHMvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmcl
# MjBQQ0ElMjAyMDI0LmNydDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4IC
# AQAUnEqhaRXe0T3hIJjvdQErEkrA/7bByjn6t5IArODkkRjzkYwtKMc2yYj2quaN
# rLutWw2YZcngKPy1b71YyDJQTy4NDRwaSh9Tw5thrk3NmcPrAHia5vtcBJ1CgtKK
# 7mQbIcQ22d/N3813ayCDDFewu1+jsZmX+r/aTEqaOM4TVxVtRSkuCy8nAXKuChOK
# Li/zA4XuH8iEYqIsj2YoNaeSxVmeGiERXpKdo3dDmYi0kO5w2D8VS4c3+9h6gElY
# BaAAg/dYErBg27qT3vv0zRDJhJufvCNylA8S7/+8H5E/PV5cng6na9VV/w9OV3qu
# uND6zdGa2EX38Glp50F9AIQk3p2xXmcvorDeM4XJ7UlWYBi6g80J1SSOQnInCYFE
# msfUNn3+1AaTJKSJL83quKArTac2pKhu0Yzzzrzo6HrsRiQKzpnRBb1/dMa6P3hz
# 75XbMRBctNsFhZC07WCmjExdLg2eHW5uV0TY8D5+6wozJf7vF3+WHkYPO85Z+BC6
# U4FkNbYNycZ9cE4j1tXRdyDCfml6c0HWPHjNVDObrv9lKt3qUqFpX38VCqVCyNOO
# 1UcXfQiVjJw32U2WUKZjt/neJKHEBsm9kFsLuWzkQ53+qcaSaytmsCnk2gOglrlD
# 5d3kKyvvAw+rzm0lT8K38P6PLxfZQHhu4W8dV7Av8N2ZmDCCBr0wggSloAMCAQIC
# EzMAAAA5O7Y3Gb8GHWcAAAAAADkwDQYJKoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYT
# AlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYD
# VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBS
# b290IENlcnRpZmljYXRlIEF1dGhvcml0eSAyMDExMB4XDTI0MDgwODIwNTQxOFoX
# DTM2MDMyMjIyMTMwNFowVzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFU1pY3Jvc29m
# dCBDb3Jwb3JhdGlvbjEoMCYGA1UEAxMfTWljcm9zb2Z0IENvZGUgU2lnbmluZyBQ
# Q0EgMjAyNDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANgBnB7jOMeq
# lRYHNa265v4IY9fH8TKhemHfPINe1gpLaV3dhg324WwH06LcHbpnsBukCDNitryo
# 0dtS/EW6I/yEL/bLSY8hKpbfQuWusBPr9qazYcDxCW/qnjb5JsI1s8bNOg3bVATv
# QVL4tcf03aTycsz8QeCdM0l/yHRObJ9QqazM1r6VPEOJ7LL+uEEb73w6QCuhs89a
# 1uv1zerOYMnsneRRwCbpyW11IcggU0cRKDDq1pjVJzIbIF6+oiXXbReOsgeI8zu1
# FyQfK0fVkaya8SmVHQ/tOf23mZ4W9k0Ri22QW9p3UgSC5OUDktKxxcCmGL6tXLfO
# GSWHIIV4YrTJTT6PNty5REojHJuZHArkF9VnHTERWoTjAzfI3kP+5b4alUdhgAZ7
# ttOu1bVnXfHaqPYl2rPs20ji03LOVWsh/radgE17es5hL+t6lV0eVHrVhsssROWJ
# uz2MXMCt7iw7lFPG9LXKGjsmonn2gotGdHIuEg5JnJMJVmixd5LRlkmgYRZKzhxS
# CwyoGIq0PhaA7Y+VPct5pCHkijcIIDm0nlkK+0KyepolcqGm0T/GYQRMhHJlGOOm
# VQop36wUVUYklUy++vDWeEgEo4s7hxN6mIbf2MSIQ/iIfMZgJxC69oukMUXCrOC3
# SkE/xIkgpfl22MM1itkZ35nNXkMolU1lAgMBAAGjggFOMIIBSjAOBgNVHQ8BAf8E
# BAMCAYYwEAYJKwYBBAGCNxUBBAMCAQAwHQYDVR0OBBYEFH9ZP1Qh2q1P7wXl5qPX
# LQaUEggxMBkGCSsGAQQBgjcUAgQMHgoAUwB1AGIAQwBBMA8GA1UdEwEB/wQFMAMB
# Af8wHwYDVR0jBBgwFoAUci06AjGQQ7kUBU7h6qfHMdEjiTQwWgYDVR0fBFMwUTBP
# oE2gS4ZJaHR0cDovL2NybC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMv
# TWljUm9vQ2VyQXV0MjAxMV8yMDExXzAzXzIyLmNybDBeBggrBgEFBQcBAQRSMFAw
# TgYIKwYBBQUHMAKGQmh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvY2VydHMv
# TWljUm9vQ2VyQXV0MjAxMV8yMDExXzAzXzIyLmNydDANBgkqhkiG9w0BAQwFAAOC
# AgEAFJQfOChP7onn6fLIMKrSlN1WYKwDFgAddymOUO3FrM8d7B/W/iQ6DxXsDn7D
# 5W4wMwYeLystcEqfkjz4NURRgazyMu5yRzQh4LqjA4tStTcJh1opExo7nn5PuPBY
# nbu0+THSuVHTe0VTTPVhily/piFrDo3axQ9P4C+Ol5yet+2gTfekICS5xS+cYfSI
# vgn0JksVBVMYVI5QFu/qhnLhsEFEUzG8fvv0hjgkO+lkpV9ty6GkN4vdnd7ya6Q6
# aR9y34aiM1qmxaxBi6OUnyNl6fkuun/diTFnYDLTppOkr/mg5WSfCiDVMNCxtj4w
# PKC5OmHm1DQIt/MNokbbH3UGsFP1QbzsLocuSqLCvH09Io3fDPTmscR9Y75G4qX7
# RTX8AdBPo0I6OEojf39zuFZt0qOHm65YWQE69cZM2ueE1MB05dNNgHK9gTE7zKvK
# /fg8B2qjW88MT/WF5V5uvZGtqa9FSL2RazArA+rDPuf6JGYz4HpgMZHB4S6szWSK
# YBv0VisCzfxgeU+dquXW9bd0auYlOB58DPcOYKdc3Se94g+xL4pcEhbB54JOgAkw
# YTu/9dLeH2pDqeJZAABVDWRQCaXfO5LgyKwKCLYXpigrZYCjUSBcr+Ve8PFWMhVT
# Ql0v4q8J/AUmQN5W4n101cY2L4A7GTQG1h32HHAvfQESWP0xghnDMIIZvwIBATBu
# MFcxCzAJBgNVBAYTAlVTMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24x
# KDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMjQCEzMAAAIc
# +s3Fm+gvfsQAAAAAAhwwDQYJYIZIAWUDBAIBBQCggZAwGQYJKoZIhvcNAQkDMQwG
# CisGAQQBgjcCAQQwLwYJKoZIhvcNAQkEMSIEIFoXQ3v8YnyB9oKRsdDAhJITD52d
# uvsfxG7TSes3bucDMEIGCisGAQQBgjcCAQwxNDAyoBSAEgBNAGkAYwByAG8AcwBv
# AGYAdKEagBhodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20wDQYJKoZIhvcNAQEBBQAE
# ggEAJXvuGq8c0X2PH8vs9svO1PhSusoposhyISWUIBCZ7vPQboTHNVBQpExbOXuJ
# t6NXAK18/t/NllGzBfmgVB93PJU5iCI7ybRFK4o5niwDNwle04CZUjEpOrycUQye
# Lhu603rBi+SSLJJpBu+lBgMAcvgta53FYo1mH4KqdxDJUZ3GJHvoLUkYKrrAynqt
# O6x2EBgiTQWxgFX4ZiArbCbwxGILGVgsv4kKdKxmqLEl9eiTJ2TJnFsLEu+1UdPb
# TsSaRpeHqGIRPZmYWzPxaRdnqIdC4jOzhlCPWD6kEjN9WHIUcUuUUWo/40kbtHH2
# +AD32JDSf5knSB3lu9hcmhOinKGCF5MwghePBgorBgEEAYI3AwMBMYIXfzCCF3sG
# CSqGSIb3DQEHAqCCF2wwghdoAgEDMQ8wDQYJYIZIAWUDBAIBBQAwggFRBgsqhkiG
# 9w0BCRABBKCCAUAEggE8MIIBOAIBAQYKKwYBBAGEWQoDATAxMA0GCWCGSAFlAwQC
# AQUABCC1vXLrNrq0EY4AIJr5zREfipd0N0JDqGCCcozqj9Oy1gIGateCN9gYGBIy
# MDI2MTAyNzE0NDkyMC4yN1owBIACAfSggdGkgc4wgcsxCzAJBgNVBAYTAlVTMRMw
# EQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVN
# aWNyb3NvZnQgQ29ycG9yYXRpb24xJTAjBgNVBAsTHE1pY3Jvc29mdCBBbWVyaWNh
# IE9wZXJhdGlvbnMxJzAlBgNVBAsTHm5TaGllbGQgVFNTIEVTTjpBNDAwLTA1RTAt
# RDk0NzElMCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAgU2VydmljZaCCEeow
# ggcgMIIFCKADAgECAhMzAAACKPClh9fzyB5AAAEAAAIoMA0GCSqGSIb3DQEBCwUA
# MHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdS
# ZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMT
# HU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwMB4XDTI2MDIxOTE5NDAwNloX
# DTI3MDUxNzE5NDAwNlowgcsxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5n
# dG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9y
# YXRpb24xJTAjBgNVBAsTHE1pY3Jvc29mdCBBbWVyaWNhIE9wZXJhdGlvbnMxJzAl
# BgNVBAsTHm5TaGllbGQgVFNTIEVTTjpBNDAwLTA1RTAtRDk0NzElMCMGA1UEAxMc
# TWljcm9zb2Z0IFRpbWUtU3RhbXAgU2VydmljZTCCAiIwDQYJKoZIhvcNAQEBBQAD
# ggIPADCCAgoCggIBAK6O9uT+ypwJJF5lol8K5/U3BFxzteSeETrCQuh+Q2PWbEQC
# DfmrLbFwWOCNqu1W8DT1bxAdynIypVJc5PE0cmyaTSo/YIMu9QC6VaDtpLmgE5Gk
# RfWjPefRHac+p4fQgcrXMnGPFodbbUBu5nRn7AzdZg3OQGVweZV7TdkbuuWTbyHv
# avk/kwTwUakWZhbkeXumwpuAsR+tgCK2m22xv6xmwFQj6EwqXi4slii0rJm/V7A4
# iKcF9FTxCiyK+Oh9oF7NR/011X6IataHfbVadKwrcD8mXoYu1tJZdwlZQuBvG6qe
# hs8r5iUHfXvhMxZOBfhhaMbujQ63P+mMc0IoFsHvzx3KeEt0ZjoHTwT37hIatGmy
# 3LiIkc7J0cIDkziLnJhHCx2636Ca/EilPzI1clyMkKDS87ya/+cVj1bK2/aqYK0I
# UWK8ZRapTbT+xR5GihBkaJA4lCfT3kKPeKwiy9E/wpTuE38QMjwdWxv80/MwUu9H
# OetGePRM6cOI5NRydjCaT5d+hLWjCyRwIILAedsLTQPnzPzfLsrlkkHvjmFyfgIT
# adHd7pEayvjbLmq23ox3P+zsxOcNLZSZUdZfVf8dl7dSVfyCP+3rcvnTEg+qREIE
# R0zUAM1RpJ+j05CIpv9uPV2JkIZN8QNQEEuinWaGTAgXzZ9qmVXZu6xn5TiRAgMB
# AAGjggFJMIIBRTAdBgNVHQ4EFgQUqsmljPjy3Oi69WQFW2EBIWlD3cMwHwYDVR0j
# BBgwFoAUn6cVXQBeYl2D9OXSZacbUzUZ6XIwXwYDVR0fBFgwVjBUoFKgUIZOaHR0
# cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jcmwvTWljcm9zb2Z0JTIwVGlt
# ZS1TdGFtcCUyMFBDQSUyMDIwMTAoMSkuY3JsMGwGCCsGAQUFBwEBBGAwXjBcBggr
# BgEFBQcwAoZQaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jZXJ0cy9N
# aWNyb3NvZnQlMjBUaW1lLVN0YW1wJTIwUENBJTIwMjAxMCgxKS5jcnQwDAYDVR0T
# AQH/BAIwADAWBgNVHSUBAf8EDDAKBggrBgEFBQcDCDAOBgNVHQ8BAf8EBAMCB4Aw
# DQYJKoZIhvcNAQELBQADggIBAJDo18uatFqGBW2BaDfzcZpLTt8fKh3puFxQ423a
# 1637oFo24fSvsAGRUeF46nEF2tSs4RhURoiKL10rdy5ks2anWJQDH9VuY5liXvHP
# 602uMJaquDWNCarShEHyIThAmnA2EY/ruhjmG5ghTQPiWEOhqGp+Aomf/QGT71Qo
# M/DleVRiat4WYmWP1hDNw896nwzEFfGH9jkju9B5FpblKO2ItA4tGTeCC+toOzlJ
# /j0wlXr8HDFcLau9R8QVfpJQOiioogT02BUhGrRFm7s63SLQiz4e88/SEHorA7Ey
# DVJYo59O0Wlal2jwwm+AoIeQ+lcTOCms/6nIge47uBVGVJOxtgEUuHbIh3+K0zi5
# gvRH7ZJIEFOlJJG2Gsa4SYSUjkEIczHMyD+iodI/BkAgCQzYLjHGLRK3uoy4D6b5
# nMViR+gXjVChImf4eOqGpZhDSb9I738qclEklTAx3lOIyeNn4T8MmJSvLm52JbJC
# m9+PaFAUjR2OFqGgBcNrN4RyIsXa4SdO6v1R+NzA66f+gxj5Qt+2c6LaMosyut5X
# T3tqTPP8nGmcOBglT+2BTt9B+WDsiqIv37Tbvr6OhAejbWZV5jlgPwqH+RRpjomb
# 85Mzzwbt69PP+qdG6bGi9OMxK2+lsAc1GGZJN0g9NXfYLK7EMpL9XlrmLAD5/1WI
# Gj7CMIIHcTCCBVmgAwIBAgITMwAAABXF52ueAptJmQAAAAAAFTANBgkqhkiG9w0B
# AQsFADCBiDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNV
# BAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEyMDAG
# A1UEAxMpTWljcm9zb2Z0IFJvb3QgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IDIwMTAw
# HhcNMjEwOTMwMTgyMjI1WhcNMzAwOTMwMTgzMjI1WjB8MQswCQYDVQQGEwJVUzET
# MBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMV
# TWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1T
# dGFtcCBQQ0EgMjAxMDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAOTh
# pkzntHIhC3miy9ckeb0O1YLT/e6cBwfSqWxOdcjKNVf2AX9sSuDivbk+F2Az/1xP
# x2b3lVNxWuJ+Slr+uDZnhUYjDLWNE893MsAQGOhgfWpSg0S3po5GawcU88V29YZQ
# 3MFEyHFcUTE3oAo4bo3t1w/YJlN8OWECesSq/XJprx2rrPY2vjUmZNqYO7oaezOt
# gFt+jBAcnVL+tuhiJdxqD89d9P6OU8/W7IVWTe/dvI2k45GPsjksUZzpcGkNyjYt
# cI4xyDUoveO0hyTD4MmPfrVUj9z6BVWYbWg7mka97aSueik3rMvrg0XnRm7KMtXA
# hjBcTyziYrLNueKNiOSWrAFKu75xqRdbZ2De+JKRHh09/SDPc31BmkZ1zcRfNN0S
# idb9pSB9fvzZnkXftnIv231fgLrbqn427DZM9ituqBJR6L8FA6PRc6ZNN3SUHDSC
# D/AQ8rdHGO2n6Jl8P0zbr17C89XYcz1DTsEzOUyOArxCaC4Q6oRRRuLRvWoYWmEB
# c8pnol7XKHYC4jMYctenIPDC+hIK12NvDMk2ZItboKaDIV1fMHSRlJTYuVD5C4lh
# 8zYGNRiER9vcG9H9stQcxWv2XFJRXRLbJbqvUAV6bMURHXLvjflSxIUXk8A8Fdsa
# N8cIFRg/eKtFtvUeh17aj54WcmnGrnu3tz5q4i6tAgMBAAGjggHdMIIB2TASBgkr
# BgEEAYI3FQEEBQIDAQABMCMGCSsGAQQBgjcVAgQWBBQqp1L+ZMSavoKRPEY1Kc8Q
# /y8E7jAdBgNVHQ4EFgQUn6cVXQBeYl2D9OXSZacbUzUZ6XIwXAYDVR0gBFUwUzBR
# BgwrBgEEAYI3TIN9AQEwQTA/BggrBgEFBQcCARYzaHR0cDovL3d3dy5taWNyb3Nv
# ZnQuY29tL3BraW9wcy9Eb2NzL1JlcG9zaXRvcnkuaHRtMBMGA1UdJQQMMAoGCCsG
# AQUFBwMIMBkGCSsGAQQBgjcUAgQMHgoAUwB1AGIAQwBBMAsGA1UdDwQEAwIBhjAP
# BgNVHRMBAf8EBTADAQH/MB8GA1UdIwQYMBaAFNX2VsuP6KJcYmjRPZSQW9fOmhjE
# MFYGA1UdHwRPME0wS6BJoEeGRWh0dHA6Ly9jcmwubWljcm9zb2Z0LmNvbS9wa2kv
# Y3JsL3Byb2R1Y3RzL01pY1Jvb0NlckF1dF8yMDEwLTA2LTIzLmNybDBaBggrBgEF
# BQcBAQROMEwwSgYIKwYBBQUHMAKGPmh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9w
# a2kvY2VydHMvTWljUm9vQ2VyQXV0XzIwMTAtMDYtMjMuY3J0MA0GCSqGSIb3DQEB
# CwUAA4ICAQCdVX38Kq3hLB9nATEkW+Geckv8qW/qXBS2Pk5HZHixBpOXPTEztTnX
# wnE2P9pkbHzQdTltuw8x5MKP+2zRoZQYIu7pZmc6U03dmLq2HnjYNi6cqYJWAAOw
# Bb6J6Gngugnue99qb74py27YP0h1AdkY3m2CDPVtI1TkeFN1JFe53Z/zjj3G82jf
# ZfakVqr3lbYoVSfQJL1AoL8ZthISEV09J+BAljis9/kpicO8F7BUhUKz/AyeixmJ
# 5/ALaoHCgRlCGVJ1ijbCHcNhcy4sa3tuPywJeBTpkbKpW99Jo3QMvOyRgNI95ko+
# ZjtPu4b6MhrZlvSP9pEB9s7GdP32THJvEKt1MMU0sHrYUP4KWN1APMdUbZ1jdEgs
# sU5HLcEUBHG/ZPkkvnNtyo4JvbMBV0lUZNlz138eW0QBjloZkWsNn6Qo3GcZKCS6
# OEuabvshVGtqRRFHqfG3rsjoiV5PndLQTHa1V1QJsWkBRH58oWFsc/4Ku+xBZj1p
# /cvBQUl+fpO+y/g75LcVv7TOPqUxUYS8vwLBgqJ7Fx0ViY1w/ue10CgaiQuPNtq6
# TPmb/wrpNPgkNWcr4A245oyZ1uEi6vAnQj0llOZ0dFtq0Z4+7X6gMTN9vMvpe784
# cETRkPHIqzqKOghif9lwY1NNje6CbaUFEMFxBmoQtB1VM1izoXBm8qGCA00wggI1
# AgEBMIH5oYHRpIHOMIHLMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3Rv
# bjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0
# aW9uMSUwIwYDVQQLExxNaWNyb3NvZnQgQW1lcmljYSBPcGVyYXRpb25zMScwJQYD
# VQQLEx5uU2hpZWxkIFRTUyBFU046QTQwMC0wNUUwLUQ5NDcxJTAjBgNVBAMTHE1p
# Y3Jvc29mdCBUaW1lLVN0YW1wIFNlcnZpY2WiIwoBATAHBgUrDgMCGgMVAHWtuYWT
# NLuoArU5q/TwBSeFs0hSoIGDMIGApH4wfDELMAkGA1UEBhMCVVMxEzARBgNVBAgT
# Cldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29m
# dCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENB
# IDIwMTAwDQYJKoZIhvcNAQELBQACBQDuipCkMCIYDzIwMjYxMDI3MDI1MzI0WhgP
# MjAyNjEwMjgwMjUzMjRaMHQwOgYKKwYBBAGEWQoEATEsMCowCgIFAO6KkKQCAQAw
# BwIBAAICG+4wBwIBAAICF1swCgIFAO6L4iQCAQAwNgYKKwYBBAGEWQoEAjEoMCYw
# DAYKKwYBBAGEWQoDAqAKMAgCAQACAwehIKEKMAgCAQACAwGGoDANBgkqhkiG9w0B
# AQsFAAOCAQEAOI5SvZ2/PCvygd1imoK002AKDRVFfv+AZlDjbb/bexv9HmWzUW/7
# I6EkHSojtbZJTQ+u8NyHhL2lCqdmkxdYXhNilleKmeRoXYKK8m/UutkG6ZhKTJqB
# 46yBMV1JjCUbwznnvj+n8FL8bX1iZ6jpJBjpHC8mAkuBL+6lXkJ+5GFGXIGPqJ2L
# rRAsYDsScrpsXb5+gnt9AnGAltvfHpFgeqeIVKXWCXxgexo/yY6fqHuhKn+QkyFF
# Qxcp69IFzh5X0qCFPb9t6sKfcQi/gR02FH69Lkbk+k5Ta1Rn+wgjLk3Hav0CT9sr
# B+8nThOK2alGH+0HuI0QrjB5T9MsMKUaiDGCBA0wggQJAgEBMIGTMHwxCzAJBgNV
# BAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4w
# HAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29m
# dCBUaW1lLVN0YW1wIFBDQSAyMDEwAhMzAAACKPClh9fzyB5AAAEAAAIoMA0GCWCG
# SAFlAwQCAQUAoIIBSjAaBgkqhkiG9w0BCQMxDQYLKoZIhvcNAQkQAQQwLwYJKoZI
# hvcNAQkEMSIEIAh1lsON72LPgwe3++1mk6oF85f6Fu63GBkpx8BUd6+6MIH6Bgsq
# hkiG9w0BCRACLzGB6jCB5zCB5DCBvQQgVbGKRlFgY1/igRVkrV5Pjkf7cZDf+rFX
# vlXC4G36ItcwgZgwgYCkfjB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGlu
# Z3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBv
# cmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMAIT
# MwAAAijwpYfX88geQAABAAACKDAiBCBvdeB13qbsVLVg3gZO3VWfURma31G4wZk8
# TCIn/ceDWTANBgkqhkiG9w0BAQsFAASCAgBiR2GIyYzMs80RwoxVRrs6xSeBnnmw
# d+nGokR01S9PTO70IFubb0HusnGSUrANySCl80OQNsFTmkVPPV82P9VgcGtr5Nq4
# OVc1eS4sVTNKc1vXz9shlpEqlUakEoNeyPa2z+5uvcbCNPnC0JRwWehdvV6n8fqD
# nOBdlnZEgbQeFYdqncOxTOAi2SxisJ6YX7rIkYEHtOJIrsCEks2du2iFDVmsOb40
# 21NwTfX2frk1L80GljjTiDcw3l9aXEJOLqiqLNn4rEDuQv84QAoSoL2gkB17HT+b
# kwrj1rX4JwLZgG6MOT9EPV+afmx0QNoK1RK0CUVzrGuvD0XcWVZUR+dH5hKnbNif
# n/paoJDSqZZ7KMR/ShXdqmOYhkdb1dWBALgGxwPsnfdZS5j1TQbkwQZxpfRwqyVq
# kNBvBDN+w4+uI606L2sOTEt8UEQCCTXxDPOxkojNSn4fE7AHwgPh4pLh9+WMOKnZ
# CdxViQUigiH+ol0cAcYLNqahgFFJ79VqNX4dapuRSN1n2ZNC++FbXq7iOCEXSo33
# SfQ8qLDH5yUYTAA93wbwUyLENylIlMrmc7ZnACcE55X+j0CfZ3mie6sWr9c5w1c7
# 7bj4KMnBC24KKfFUVy7LVciW6gjr5KpTeuuYzOaLFGlFfX4Ea+F1Og7W3Dj5K9dk
# MO4yNmQ5FhL3Qg==
# SIG # End signature block