Avm.Authoring

0.39.0

Private/Tests/Cleanup/Get-AvmBicepDeploymentCleanupTarget.ps1

                                function Get-AvmBicepDeploymentCleanupTarget {

    [CmdletBinding()]

    [OutputType([pscustomobject])]

    param(

        [AllowEmptyCollection()]

        [string[]] $DeploymentIds = @(),

        [string[]] $PreflightRejectedDeploymentIds = @(),

        [ValidateRange(1, 1000)]

        [int] $SearchRetryLimit = 40,

        [ValidateRange(0, 3600)]

        [int] $SearchRetryInterval = 60,

        [System.Collections.IDictionary] $IsolationState = @{},

        # A retry snapshot requires terminal records and complete Create history, but deletes nothing.

        [switch] $RequireCompleteRemoval

    )

    Set-StrictMode -Version 3.0

    $ErrorActionPreference = 'Stop'

    $records = [System.Collections.Generic.Dictionary[string, hashtable]]::new(

        [System.StringComparer]::OrdinalIgnoreCase)

    foreach ($deployment in ConvertTo-AvmBicepCleanupResource -ResourceIds $DeploymentIds) {

        Assert-AvmBicepIsolationBoundary -State $IsolationState -ResourceIds @($deployment.resourceId)

        if ($deployment.type -ine 'Microsoft.Resources/deployments') {

            throw [AvmConfigurationException]::new("Not a deployment ID: $($deployment.resourceId)")

        }

        $records[$deployment.resourceId] = @{

            Id                = $deployment.resourceId

            Required          = $true

            Depth             = 0

            PreflightRejected = $false

            Status            = 'Pending'

            ErrorCode         = ''

            ErrorMessage      = ''

            References        = 0

        }

    }

    foreach ($rejectedId in $PreflightRejectedDeploymentIds) {

        if (-not $records.ContainsKey($rejectedId)) {

            throw [AvmConfigurationException]::new(

                'Preflight rejection metadata contains IDs outside the attempted deployments.')

        }

        $records[$rejectedId].PreflightRejected = $true

    }

    $resources = [System.Collections.Generic.HashSet[string]]::new(

        [System.StringComparer]::OrdinalIgnoreCase)

    for ($round = 1; $round -le $SearchRetryLimit; $round++) {

        $queue = [System.Collections.Generic.Queue[string]]::new()

        foreach ($record in $records.Values) {

            if ($record.Status -eq 'Pending') {

                $queue.Enqueue($record.Id)

            }

        }

        while ($queue.Count -gt 0) {

            $record = $records[$queue.Dequeue()]

            $nextPath = $record.Id + '/operations?api-version=2025-04-01'

            $visitedPages = [System.Collections.Generic.HashSet[string]]::new(

                [System.StringComparer]::Ordinal)

            $operations = [System.Collections.Generic.List[object]]::new()

            $children = [System.Collections.Generic.HashSet[string]]::new([System.StringComparer]::OrdinalIgnoreCase)

            $exports = @{}

            try {

                if ($RequireCompleteRemoval) {

                    Assert-AvmBicepCleanupDeploymentTerminal -Record $record

                    if ($record.Status -eq 'RejectedWithoutRecord') { continue }

                }

                while (-not [string]::IsNullOrEmpty($nextPath)) {

                    if (-not $visitedPages.Add($nextPath) -or $visitedPages.Count -gt 1000) {

                        throw [AvmProcessException]::new("Repeated or excessive deployment operations page: $nextPath")

                    }

                    $response = Invoke-AvmBicepRead -Activity 'Read cleanup operation page' -Read {

                        Invoke-AzRestMethod -Method GET -Path $nextPath -ErrorAction Stop

                    }

                    $document = ConvertFrom-AvmBicepRestResponse -Response $response -Activity 'Read cleanup operation page' `

                        -AllowedStatus @(200, 404)

                    if ([int]$response.StatusCode -ne 200) {

                        $errorBody = Get-AvmPropertyValue -InputObject $document -Name 'error'

                        $errorCode = [string](Get-AvmPropertyValue -InputObject $errorBody -Name 'code')

                        $groupScope = $record.Id -match '^/subscriptions/[^/]+/resourceGroups/[^/]+/providers/Microsoft\.Resources/deployments/[^/]+$'

                        if ([int]$response.StatusCode -eq 404 -and $groupScope -and $errorCode -ceq 'ResourceGroupNotFound') {

                            $record.Status = 'ContainerRemoved'

                            break

                        }

                        if ([int]$response.StatusCode -eq 404 -and $errorCode -ceq 'DeploymentNotFound') {

                            if ($RequireCompleteRemoval) {

                                throw [AvmProcessException]::new("Existing deployment has no complete operation history: $($record.Id)")

                            }

                            if ($visitedPages.Count -gt 1) {

                                throw [AvmProcessException]::new(

                                    "Deployment record disappeared during pagination: $($record.Id)")

                            }

                            if ($record.PreflightRejected) {

                                $record.Status = 'RejectedWithoutRecord'

                            }

                            elseif (-not $record.Required) {

                                $record.Status = 'NestedRecordAbsent'

                                Write-AvmLog -Message "Nested deployment record is absent: $($record.Id)" -Level Warning

                            }

                            $record.ErrorCode = 'DeploymentNotFound'

                            break

                        }

                        throw [AvmProcessException]::new(

                            "Deployment operations lookup failed: HTTP $($response.StatusCode), code '$errorCode', deployment '$($record.Id)'.")

                    }

                    if ($document -isnot [System.Collections.IDictionary] -or

                        -not $document.Contains('value') -or $document['value'] -isnot [array] -or

                        @($document.psbase.Keys | Where-Object { $_ -cnotin @('value', 'nextLink') }).Count -gt 0) {

                        throw [AvmProcessException]::new("Invalid deployment operations response: $($record.Id)")

                    }

                    foreach ($operation in $document['value']) {

                        $properties = Get-AvmPropertyValue -InputObject $operation -Name 'properties' -NoEnumerate

                        if ($properties -isnot [System.Collections.IDictionary]) {

                            throw [AvmProcessException]::new("Invalid deployment operation properties: $($record.Id)")

                        }

                        if ($RequireCompleteRemoval -and

                            ($properties['provisioningState'] -isnot [string] -or

                            $properties['provisioningState'] -cnotin @('Succeeded', 'Failed') -or

                            $properties['provisioningOperation'] -isnot [string] -or

                            [string]::IsNullOrWhiteSpace($properties['provisioningOperation']))) {

                            throw [AvmProcessException]::new("Deployment has an incomplete operation: $($record.Id)")

                        }

                        $operations.Add($properties)

                        if ((Get-AvmPropertyValue -InputObject $properties -Name 'provisioningOperation') -ine 'Create') {

                            continue

                        }

                        $target = Get-AvmPropertyValue -InputObject $properties -Name 'targetResource' -NoEnumerate

                        if ($null -eq $target -and -not $RequireCompleteRemoval) {

                            continue

                        }

                        $targetId = $null

                        if ($target -is [System.Collections.IDictionary]) { $targetId = $target['id'] }

                        if ($targetId -isnot [string] -or [string]::IsNullOrWhiteSpace($targetId)) {

                            if (Test-AvmBicepExistingGraphLookup -Operation $properties -DeploymentId $record.Id -Exports $exports) {

                                continue

                            }

                            throw [AvmProcessException]::new("Deployment operation has an invalid target ID: $($record.Id)")

                        }

                        foreach ($resource in @(Resolve-AvmBicepCleanupResource -ResourceId $targetId)) {

                            Assert-AvmBicepIsolationBoundary -State $IsolationState -ResourceIds @($resource.resourceId)

                            if ($resource.type -ieq 'Microsoft.Resources/deployments') {

                                if (-not $records.ContainsKey($resource.resourceId)) {

                                    $records.Add($resource.resourceId, @{

                                            Id                = $resource.resourceId

                                            Required          = $false

                                            Depth             = $record.Depth + 1

                                            PreflightRejected = $false

                                            Status            = 'Pending'

                                            ErrorCode         = ''

                                            ErrorMessage      = ''

                                            References        = 0

                                        })

                                    $queue.Enqueue($resource.resourceId)

                                }

                                $child = $records[$resource.resourceId]

                                $child.References++

                                $null = $children.Add($resource.resourceId)

                                if ($RequireCompleteRemoval -and -not $child.Required -and $child.References -gt 1) {

                                    $child.PreflightRejected = $false

                                    if ($child.Status -eq 'RejectedWithoutRecord') {

                                        $child.Status = 'Failed'

                                        $child.ErrorCode = 'AmbiguousPreflightRejection'

                                        $child.ErrorMessage = "Multiple operations reference preflight-rejected deployment '$($child.Id)'."

                                    }

                                }

                            }

                            else {

                                $null = $resources.Add($resource.resourceId)

                            }

                        }

                    }

                    $nextPath = Resolve-AvmBicepCleanupNextLink -ExpectedPath ($record.Id + '/operations') -NextLink (

                        Get-AvmPropertyValue -InputObject $document -Name 'nextLink' -NoEnumerate)

                    if ([string]::IsNullOrEmpty($nextPath)) {

                        $record.Status = 'Resolved'

                        $record.ErrorCode = ''

                    }

                }

                if ($RequireCompleteRemoval -and $record.Status -eq 'Resolved' -and $record.ProvisioningState -ceq 'Failed') {

                    foreach ($childId in $children) {

                        $child = $records[$childId]

                        if (-not $child.Required -and $child.References -eq 1) {

                            $child.PreflightRejected = Test-AvmBicepNestedPreflightRejection -DeploymentId $childId -Operations $operations.ToArray()

                        }

                    }

                }

            }

            catch {

                if ((Get-AvmBicepDeploymentErrorKind -ErrorRecord $_) -eq 'Cancellation' -or

                    $_.FullyQualifiedErrorId.Split(',')[0] -eq 'AvmBicepContextRestoreFailed') {

                    throw

                }

                $record.Status = 'Failed'

                $record.ErrorCode = 'LookupFailed'

                $record.ErrorMessage = $_.Exception.Message

                Write-AvmLog -Message (

                    "Deployment lookup failed for '$($record.Id)'; known targets will still be cleaned. $($_.Exception.Message)"

                ) -Level Warning

            }

        }

        $pending = @($records.Values | Where-Object { $_.Status -eq 'Pending' })

        if ($pending.Count -eq 0 -or $round -eq $SearchRetryLimit) {

            break

        }

        Write-AvmLog -Message (

            "Waiting for $($pending.Count) deployment record(s); lookup round $round/$SearchRetryLimit."

        ) -Level Info

        Start-Sleep -Seconds $SearchRetryInterval

    }

    $issues = [System.Collections.Generic.List[object]]::new()

    foreach ($record in $records.Values) {

        if ($record.Status -eq 'Pending') {

            $record.Status = 'Missing'

            $record.ErrorMessage = "Deployment record not found after $SearchRetryLimit lookups: $($record.Id)"

        }

        $unresolved = $RequireCompleteRemoval -and $record.Status -in @('NestedRecordAbsent', 'ContainerRemoved')

        if ($unresolved) {

            $record.ErrorMessage = "Deployment record could not be resolved ($($record.Status)): $($record.Id)"

        }

        if ($record.Status -in @('Missing', 'Failed') -or $unresolved) {

            $issues.Add([pscustomobject]@{

                    DeploymentId = $record.Id

                    Code         = $record.ErrorCode

                    Message      = $record.ErrorMessage

                })

        }

    }

    [pscustomobject]@{

        ResourceIds = [string[]]@($resources)

        Deployments = @($records.Values)

        Issues      = $issues.ToArray()

    }

}

# SIG # Begin signature block

# MIInMwYJKoZIhvcNAQcCoIInJDCCJyACAQExDzANBglghkgBZQMEAgEFADB5Bgor

# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG

# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCBu92YHriPalWfz

# xzba+mHCZK8DS5yP1oNY6/Kw84jxJqCCDMkwggYEMIID7KADAgECAhMzAAACHPrN

# xZvoL37EAAAAAAIcMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMR4wHAYD

# VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBD

# b2RlIFNpZ25pbmcgUENBIDIwMjQwHhcNMjYwNDE2MTg1OTQxWhcNMjcwNDE1MTg1

# OTQxWjB0MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE

# BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYD

# VQQDExVNaWNyb3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IB

# DwAwggEKAoIBAQDVsZfgOKmM31HPfoWOoNEiw0SlCiIxUMC0I9NMWbucKOw/e9lP

# oAoehQVu6SG65V4EPzrYsnBnFPNoi4/HoOdjhz1qkrEt4I6tEcxXU6oOeY9zGveC

# /3iBeuhLYxM3M/PkcUoebF+Nednm8OkdSPoDu8imViHPQq/8CQUu0WRR4rE+dMRf

# rpVqfmNi2qWCX94T4MsepijGVkwE//tJg0ryAiYdHT34LSnlG/RSBZmQRGWZ5g8j

# qnKjRParSqMft1gvjuUTVgtWNZfgcLFSK5Wa0myrq8OPcgTGGsRgun+tnSS+IxDT

# xVsAPH1OzvPjwomguByhUe/OcvUN0D5Wmp7xAgMBAAGjggGqMIIBpjAOBgNVHQ8B

# Af8EBAMCB4AwHwYDVR0lBBgwFgYKKwYBBAGCN0wIAQYIKwYBBQUHAwMwHQYDVR0O

# BBYEFNoH7a2YDjOSwpkp6DHcmUS7J+0yMFQGA1UdEQRNMEukSTBHMS0wKwYDVQQL

# EyRNaWNyb3NvZnQgSXJlbGFuZCBPcGVyYXRpb25zIExpbWl0ZWQxFjAUBgNVBAUT

# DTIzMDAxMis1MDc1NjkwHwYDVR0jBBgwFoAUf1k/VCHarU/vBeXmo9ctBpQSCDEw

# YAYDVR0fBFkwVzBVoFOgUYZPaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9w

# cy9jcmwvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNy

# bDBtBggrBgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUWh0dHA6Ly93d3cubWljcm9z

# b2Z0LmNvbS9wa2lvcHMvY2VydHMvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmcl

# MjBQQ0ElMjAyMDI0LmNydDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4IC

# AQAUnEqhaRXe0T3hIJjvdQErEkrA/7bByjn6t5IArODkkRjzkYwtKMc2yYj2quaN

# rLutWw2YZcngKPy1b71YyDJQTy4NDRwaSh9Tw5thrk3NmcPrAHia5vtcBJ1CgtKK

# 7mQbIcQ22d/N3813ayCDDFewu1+jsZmX+r/aTEqaOM4TVxVtRSkuCy8nAXKuChOK

# Li/zA4XuH8iEYqIsj2YoNaeSxVmeGiERXpKdo3dDmYi0kO5w2D8VS4c3+9h6gElY

# BaAAg/dYErBg27qT3vv0zRDJhJufvCNylA8S7/+8H5E/PV5cng6na9VV/w9OV3qu

# uND6zdGa2EX38Glp50F9AIQk3p2xXmcvorDeM4XJ7UlWYBi6g80J1SSOQnInCYFE

# msfUNn3+1AaTJKSJL83quKArTac2pKhu0Yzzzrzo6HrsRiQKzpnRBb1/dMa6P3hz

# 75XbMRBctNsFhZC07WCmjExdLg2eHW5uV0TY8D5+6wozJf7vF3+WHkYPO85Z+BC6

# U4FkNbYNycZ9cE4j1tXRdyDCfml6c0HWPHjNVDObrv9lKt3qUqFpX38VCqVCyNOO

# 1UcXfQiVjJw32U2WUKZjt/neJKHEBsm9kFsLuWzkQ53+qcaSaytmsCnk2gOglrlD

# 5d3kKyvvAw+rzm0lT8K38P6PLxfZQHhu4W8dV7Av8N2ZmDCCBr0wggSloAMCAQIC

# EzMAAAA5O7Y3Gb8GHWcAAAAAADkwDQYJKoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYT

# AlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYD

# VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBS

# b290IENlcnRpZmljYXRlIEF1dGhvcml0eSAyMDExMB4XDTI0MDgwODIwNTQxOFoX

# DTM2MDMyMjIyMTMwNFowVzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFU1pY3Jvc29m

# dCBDb3Jwb3JhdGlvbjEoMCYGA1UEAxMfTWljcm9zb2Z0IENvZGUgU2lnbmluZyBQ

# Q0EgMjAyNDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANgBnB7jOMeq

# lRYHNa265v4IY9fH8TKhemHfPINe1gpLaV3dhg324WwH06LcHbpnsBukCDNitryo

# 0dtS/EW6I/yEL/bLSY8hKpbfQuWusBPr9qazYcDxCW/qnjb5JsI1s8bNOg3bVATv

# QVL4tcf03aTycsz8QeCdM0l/yHRObJ9QqazM1r6VPEOJ7LL+uEEb73w6QCuhs89a

# 1uv1zerOYMnsneRRwCbpyW11IcggU0cRKDDq1pjVJzIbIF6+oiXXbReOsgeI8zu1

# FyQfK0fVkaya8SmVHQ/tOf23mZ4W9k0Ri22QW9p3UgSC5OUDktKxxcCmGL6tXLfO

# GSWHIIV4YrTJTT6PNty5REojHJuZHArkF9VnHTERWoTjAzfI3kP+5b4alUdhgAZ7

# ttOu1bVnXfHaqPYl2rPs20ji03LOVWsh/radgE17es5hL+t6lV0eVHrVhsssROWJ

# uz2MXMCt7iw7lFPG9LXKGjsmonn2gotGdHIuEg5JnJMJVmixd5LRlkmgYRZKzhxS

# CwyoGIq0PhaA7Y+VPct5pCHkijcIIDm0nlkK+0KyepolcqGm0T/GYQRMhHJlGOOm

# VQop36wUVUYklUy++vDWeEgEo4s7hxN6mIbf2MSIQ/iIfMZgJxC69oukMUXCrOC3

# SkE/xIkgpfl22MM1itkZ35nNXkMolU1lAgMBAAGjggFOMIIBSjAOBgNVHQ8BAf8E

# BAMCAYYwEAYJKwYBBAGCNxUBBAMCAQAwHQYDVR0OBBYEFH9ZP1Qh2q1P7wXl5qPX

# LQaUEggxMBkGCSsGAQQBgjcUAgQMHgoAUwB1AGIAQwBBMA8GA1UdEwEB/wQFMAMB

# Af8wHwYDVR0jBBgwFoAUci06AjGQQ7kUBU7h6qfHMdEjiTQwWgYDVR0fBFMwUTBP

# oE2gS4ZJaHR0cDovL2NybC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMv

# TWljUm9vQ2VyQXV0MjAxMV8yMDExXzAzXzIyLmNybDBeBggrBgEFBQcBAQRSMFAw

# TgYIKwYBBQUHMAKGQmh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvY2VydHMv

# TWljUm9vQ2VyQXV0MjAxMV8yMDExXzAzXzIyLmNydDANBgkqhkiG9w0BAQwFAAOC

# AgEAFJQfOChP7onn6fLIMKrSlN1WYKwDFgAddymOUO3FrM8d7B/W/iQ6DxXsDn7D

# 5W4wMwYeLystcEqfkjz4NURRgazyMu5yRzQh4LqjA4tStTcJh1opExo7nn5PuPBY

# nbu0+THSuVHTe0VTTPVhily/piFrDo3axQ9P4C+Ol5yet+2gTfekICS5xS+cYfSI

# vgn0JksVBVMYVI5QFu/qhnLhsEFEUzG8fvv0hjgkO+lkpV9ty6GkN4vdnd7ya6Q6

# aR9y34aiM1qmxaxBi6OUnyNl6fkuun/diTFnYDLTppOkr/mg5WSfCiDVMNCxtj4w

# PKC5OmHm1DQIt/MNokbbH3UGsFP1QbzsLocuSqLCvH09Io3fDPTmscR9Y75G4qX7

# RTX8AdBPo0I6OEojf39zuFZt0qOHm65YWQE69cZM2ueE1MB05dNNgHK9gTE7zKvK

# /fg8B2qjW88MT/WF5V5uvZGtqa9FSL2RazArA+rDPuf6JGYz4HpgMZHB4S6szWSK

# YBv0VisCzfxgeU+dquXW9bd0auYlOB58DPcOYKdc3Se94g+xL4pcEhbB54JOgAkw

# YTu/9dLeH2pDqeJZAABVDWRQCaXfO5LgyKwKCLYXpigrZYCjUSBcr+Ve8PFWMhVT

# Ql0v4q8J/AUmQN5W4n101cY2L4A7GTQG1h32HHAvfQESWP0xghnAMIIZvAIBATBu

# MFcxCzAJBgNVBAYTAlVTMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24x

# KDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMjQCEzMAAAIc

# +s3Fm+gvfsQAAAAAAhwwDQYJYIZIAWUDBAIBBQCggZAwGQYJKoZIhvcNAQkDMQwG

# CisGAQQBgjcCAQQwLwYJKoZIhvcNAQkEMSIEIAccwEMd/TaL7uV5hEUIZN4m4XyE

# rDbwOXKWYyLvBVHnMEIGCisGAQQBgjcCAQwxNDAyoBSAEgBNAGkAYwByAG8AcwBv

# AGYAdKEagBhodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20wDQYJKoZIhvcNAQEBBQAE

# ggEAcELiHov5RPJruPKDdmu9n0Nvw2ivH7hKjZukNZ62r+2H+Jr82/ctQLinFVfw

# UZypJQgwsDWCOU4wHs9C3BMhVO6NGC1b3jq68hMo947Hiue12lGhh6kRI/UWIZuw

# s3fJcJzQTgu4aLS74F/ka9OV12TwcMdpzSWaDDK5d+Pzvr6kbeoUbHiG2WrRBtwn

# aLUJguOsbkNOAwWqmB5o3OR3IGCoL5nhYRtmIEAj9DCsYyu3+EA7HVBwj9XrL4df

# K+kQ1VCrJz8946y03Yn7cnzC+oUHVVgXvO0DCBAIH65u+fr5DAVEoP3kvhcPOBO4

# 4CUmblPvJwFY5yXd2zPma+BDk6GCF5AwgheMBgorBgEEAYI3AwMBMYIXfDCCF3gG

# CSqGSIb3DQEHAqCCF2kwghdlAgEDMQ8wDQYJYIZIAWUDBAIBBQAwggFOBgsqhkiG

# 9w0BCRABBKCCAT0EggE5MIIBNQIBAQYKKwYBBAGEWQoDATAxMA0GCWCGSAFlAwQC

# AQUABCAPq9MnUyIB+9kMxDTSMkQ83S+0pe6rgcu2DcWhv1SopAIGatlNWmfcGA8y

# MDI2MTEwMzE0MjIxM1owBIACAfSggdGkgc4wgcsxCzAJBgNVBAYTAlVTMRMwEQYD

# VQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNy

# b3NvZnQgQ29ycG9yYXRpb24xJTAjBgNVBAsTHE1pY3Jvc29mdCBBbWVyaWNhIE9w

# ZXJhdGlvbnMxJzAlBgNVBAsTHm5TaGllbGQgVFNTIEVTTjpEQzAwLTA1RTAtRDk0

# NzElMCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAgU2VydmljZaCCEeowggcg

# MIIFCKADAgECAhMzAAACJDuEIbAsrGQiAAEAAAIkMA0GCSqGSIb3DQEBCwUAMHwx

# CzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRt

# b25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1p

# Y3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwMB4XDTI2MDIxOTE5Mzk1OVoXDTI3

# MDUxNzE5Mzk1OVowgcsxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9u

# MRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRp

# b24xJTAjBgNVBAsTHE1pY3Jvc29mdCBBbWVyaWNhIE9wZXJhdGlvbnMxJzAlBgNV

# BAsTHm5TaGllbGQgVFNTIEVTTjpEQzAwLTA1RTAtRDk0NzElMCMGA1UEAxMcTWlj

# cm9zb2Z0IFRpbWUtU3RhbXAgU2VydmljZTCCAiIwDQYJKoZIhvcNAQEBBQADggIP

# ADCCAgoCggIBAKPpbdRpDZmviE29LLuPtQw8VXKztoTEYH4kXDKTPNeDeNrJib2A

# 4tcnu02FTZ6aGstAI5lyAu/PoWSqaCHNDHOaSAq0tiIpoTOGiA79x7SVOF0s11W0

# zBA5iCj5e1cBlxWIFfgtweTfxG6xmIXvDFJrm38vGJzTj5n+GXLWAlCkh4UOqnhr

# 0+4u3yux8fTm9b2lT26uIZ0PF8lef+Vzj0LFteoDcRfXsvbhtzq36YW48MAkoqlq

# LddeoXacmWlM992sDb2xZNI0qKD0K0ELm3NCPR+Vuxr/jCo7275GS7Cllvdvuqdb

# kV0WsNHW9CZd+OXJQ/1k7fzzf03BK6Ie2+wUI2RM0hfw4vldWrWewrK7/8Z4hn1i

# 7Gx8sF52obTbg8MRHKsCzSm99RY4tqlVBqMc+gKe41Iq9sSHuzkhDRiC6kaOL4fu

# sgPHb+YgQj7pDxbAG2TdjHKGOPQZfD3T2LQSRORXLL7XIAOPBILxvDaozj4xziHL

# K2VnNJzQg9QGrVgadjAKMjBrn+UxbSkWf8ekl0Hpd4y5O1hM6lo+ijrgWNCvItda

# N3ii+nDmU7Dtf6/cT2TA31UEL7AkRIEQILWBkwJLlNpXB8TXDimdddvWpP1uOBGw

# +Dh2SWu5RN2if/dI23RrRDk1zZSX6syVDFeg/2KxfAw2co7kkmSpENFVAgMBAAGj

# ggFJMIIBRTAdBgNVHQ4EFgQUcx+RfW7/MksIx7SCpiK3HW0Ad6gwHwYDVR0jBBgw

# FoAUn6cVXQBeYl2D9OXSZacbUzUZ6XIwXwYDVR0fBFgwVjBUoFKgUIZOaHR0cDov

# L3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jcmwvTWljcm9zb2Z0JTIwVGltZS1T

# dGFtcCUyMFBDQSUyMDIwMTAoMSkuY3JsMGwGCCsGAQUFBwEBBGAwXjBcBggrBgEF

# BQcwAoZQaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jZXJ0cy9NaWNy

# b3NvZnQlMjBUaW1lLVN0YW1wJTIwUENBJTIwMjAxMCgxKS5jcnQwDAYDVR0TAQH/

# BAIwADAWBgNVHSUBAf8EDDAKBggrBgEFBQcDCDAOBgNVHQ8BAf8EBAMCB4AwDQYJ

# KoZIhvcNAQELBQADggIBAD7AdJuaEikzwJFVni2TrbiFD4t1lcTiqh5C6LvsJ41r

# eOrUU7OLsxEqSSjp2IQMdc81a8BqDFqy0J7A/OblMI2HWzioIeHhHYb+vjzBT8yl

# zrz9YOYnLkIhCf8XCmzWxs1QS7sHODTTipQshUn3reOj9qbjHAqDCH69JUvv92Gx

# 9Pt2+GlF11tgtBMdmDC40HpCFwQSyCiAtXA1GPftURZkOLCgx3HILthitC7owJW2

# LMec62RJfsWoiiLqOVx+p+jrX24Mf2vyTaoA4cJ4QCopcrKYhcMxwYaUR0MVtiIN

# mA8IEzQgeAB6KVRKifTvCMe7R7SywGa0Fp89vgZ37kW5GdYbdcZ73U0KksqqYVr/

# gaRXP04zNlSDyhzPEL/glPcd/jkkS2zNOhfA2yRXck0Jy7Ygi2vpIkeaLcQNUAMN

# FI2F3MVGliamUYSU+XkZGg+0mIMS9Ehu/kwUojDbH2Cd6F/ki8GMLhmQGD7gZOmo

# YTeaafMXech6Q6Rfi6DT/SY3YJJquG5KL02Ycg6lQ3Z5AdS2BNv/4aaruCS0IzAi

# r8k4JgiJNiqm/WhuMAYp1Yw8KuVLI0CzSNljOSFrnfnXnw0zH7AEa+x8WhWwIwbk

# 5ynq9boJfK5ZFtRWoxTU6tBsd93LMmluEkLU9sBkjIkJs35UGANMDNMpjzDghJLB

# MIIHcTCCBVmgAwIBAgITMwAAABXF52ueAptJmQAAAAAAFTANBgkqhkiG9w0BAQsF

# ADCBiDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcT

# B1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEyMDAGA1UE

# AxMpTWljcm9zb2Z0IFJvb3QgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IDIwMTAwHhcN

# MjEwOTMwMTgyMjI1WhcNMzAwOTMwMTgzMjI1WjB8MQswCQYDVQQGEwJVUzETMBEG

# A1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWlj

# cm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1TdGFt

# cCBQQ0EgMjAxMDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAOThpkzn

# tHIhC3miy9ckeb0O1YLT/e6cBwfSqWxOdcjKNVf2AX9sSuDivbk+F2Az/1xPx2b3

# lVNxWuJ+Slr+uDZnhUYjDLWNE893MsAQGOhgfWpSg0S3po5GawcU88V29YZQ3MFE

# yHFcUTE3oAo4bo3t1w/YJlN8OWECesSq/XJprx2rrPY2vjUmZNqYO7oaezOtgFt+

# jBAcnVL+tuhiJdxqD89d9P6OU8/W7IVWTe/dvI2k45GPsjksUZzpcGkNyjYtcI4x

# yDUoveO0hyTD4MmPfrVUj9z6BVWYbWg7mka97aSueik3rMvrg0XnRm7KMtXAhjBc

# TyziYrLNueKNiOSWrAFKu75xqRdbZ2De+JKRHh09/SDPc31BmkZ1zcRfNN0Sidb9

# pSB9fvzZnkXftnIv231fgLrbqn427DZM9ituqBJR6L8FA6PRc6ZNN3SUHDSCD/AQ

# 8rdHGO2n6Jl8P0zbr17C89XYcz1DTsEzOUyOArxCaC4Q6oRRRuLRvWoYWmEBc8pn

# ol7XKHYC4jMYctenIPDC+hIK12NvDMk2ZItboKaDIV1fMHSRlJTYuVD5C4lh8zYG

# NRiER9vcG9H9stQcxWv2XFJRXRLbJbqvUAV6bMURHXLvjflSxIUXk8A8FdsaN8cI

# FRg/eKtFtvUeh17aj54WcmnGrnu3tz5q4i6tAgMBAAGjggHdMIIB2TASBgkrBgEE

# AYI3FQEEBQIDAQABMCMGCSsGAQQBgjcVAgQWBBQqp1L+ZMSavoKRPEY1Kc8Q/y8E

# 7jAdBgNVHQ4EFgQUn6cVXQBeYl2D9OXSZacbUzUZ6XIwXAYDVR0gBFUwUzBRBgwr

# BgEEAYI3TIN9AQEwQTA/BggrBgEFBQcCARYzaHR0cDovL3d3dy5taWNyb3NvZnQu

# Y29tL3BraW9wcy9Eb2NzL1JlcG9zaXRvcnkuaHRtMBMGA1UdJQQMMAoGCCsGAQUF

# BwMIMBkGCSsGAQQBgjcUAgQMHgoAUwB1AGIAQwBBMAsGA1UdDwQEAwIBhjAPBgNV

# HRMBAf8EBTADAQH/MB8GA1UdIwQYMBaAFNX2VsuP6KJcYmjRPZSQW9fOmhjEMFYG

# A1UdHwRPME0wS6BJoEeGRWh0dHA6Ly9jcmwubWljcm9zb2Z0LmNvbS9wa2kvY3Js

# L3Byb2R1Y3RzL01pY1Jvb0NlckF1dF8yMDEwLTA2LTIzLmNybDBaBggrBgEFBQcB

# AQROMEwwSgYIKwYBBQUHMAKGPmh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kv

# Y2VydHMvTWljUm9vQ2VyQXV0XzIwMTAtMDYtMjMuY3J0MA0GCSqGSIb3DQEBCwUA

# A4ICAQCdVX38Kq3hLB9nATEkW+Geckv8qW/qXBS2Pk5HZHixBpOXPTEztTnXwnE2

# P9pkbHzQdTltuw8x5MKP+2zRoZQYIu7pZmc6U03dmLq2HnjYNi6cqYJWAAOwBb6J

# 6Gngugnue99qb74py27YP0h1AdkY3m2CDPVtI1TkeFN1JFe53Z/zjj3G82jfZfak

# Vqr3lbYoVSfQJL1AoL8ZthISEV09J+BAljis9/kpicO8F7BUhUKz/AyeixmJ5/AL

# aoHCgRlCGVJ1ijbCHcNhcy4sa3tuPywJeBTpkbKpW99Jo3QMvOyRgNI95ko+ZjtP

# u4b6MhrZlvSP9pEB9s7GdP32THJvEKt1MMU0sHrYUP4KWN1APMdUbZ1jdEgssU5H

# LcEUBHG/ZPkkvnNtyo4JvbMBV0lUZNlz138eW0QBjloZkWsNn6Qo3GcZKCS6OEua

# bvshVGtqRRFHqfG3rsjoiV5PndLQTHa1V1QJsWkBRH58oWFsc/4Ku+xBZj1p/cvB

# QUl+fpO+y/g75LcVv7TOPqUxUYS8vwLBgqJ7Fx0ViY1w/ue10CgaiQuPNtq6TPmb

# /wrpNPgkNWcr4A245oyZ1uEi6vAnQj0llOZ0dFtq0Z4+7X6gMTN9vMvpe784cETR

# kPHIqzqKOghif9lwY1NNje6CbaUFEMFxBmoQtB1VM1izoXBm8qGCA00wggI1AgEB

# MIH5oYHRpIHOMIHLMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQ

# MA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9u

# MSUwIwYDVQQLExxNaWNyb3NvZnQgQW1lcmljYSBPcGVyYXRpb25zMScwJQYDVQQL

# Ex5uU2hpZWxkIFRTUyBFU046REMwMC0wNUUwLUQ5NDcxJTAjBgNVBAMTHE1pY3Jv

# c29mdCBUaW1lLVN0YW1wIFNlcnZpY2WiIwoBATAHBgUrDgMCGgMVAKYI8duax4BJ

# 97/9sa1f15Ab7T7joIGDMIGApH4wfDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldh

# c2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBD

# b3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIw

# MTAwDQYJKoZIhvcNAQELBQACBQDulEWeMCIYDzIwMjYxMTAzMTEzNTU4WhgPMjAy

# NjExMDQxMTM1NThaMHQwOgYKKwYBBAGEWQoEATEsMCowCgIFAO6URZ4CAQAwBwIB

# AAICBzgwBwIBAAICEkYwCgIFAO6Vlx4CAQAwNgYKKwYBBAGEWQoEAjEoMCYwDAYK

# KwYBBAGEWQoDAqAKMAgCAQACAwehIKEKMAgCAQACAwGGoDANBgkqhkiG9w0BAQsF

# AAOCAQEAcBjMkCx/LG319SWJIONkqLozMDD8VKX0LUANczmlbFYGUrY/l0vCXGEj

# 6GcuienTgq59mCDFi0lkIXPwkeLQj+BRCES8n16keGgR2bC51gzef/IVrlGx9ukw

# LUl57gqpPOlbf51MO8o0FwT6FLWpHoNVZBDKIJNxvYGzp8vtJA3e8LxFZQvLiCQw

# XoL8YVii/i5r+RvXYCUw9dWifcxbit9ustAh/rM3Z4Tw8atPSRWUjX9dm4TqWAuX

# DTdUH4Oq8ZBNUWDPfsSPCMw34o9ygpJ1WYEPlluwkF1qCsV9gL1y7M/rtMkNRzF3

# TR+b8AIIDVYZIUHuIdVyKeJQqtpqWjGCBA0wggQJAgEBMIGTMHwxCzAJBgNVBAYT

# AlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYD

# VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBU

# aW1lLVN0YW1wIFBDQSAyMDEwAhMzAAACJDuEIbAsrGQiAAEAAAIkMA0GCWCGSAFl

# AwQCAQUAoIIBSjAaBgkqhkiG9w0BCQMxDQYLKoZIhvcNAQkQAQQwLwYJKoZIhvcN

# AQkEMSIEINn3tJ17/HuhLAWdCAL/xU263rwAi+Gv0NyFnHW0m/EiMIH6BgsqhkiG

# 9w0BCRACLzGB6jCB5zCB5DCBvQQgSCE9N2qb91HJnQFzNdx2WhUSogJ1yalU1sf0

# IRXNZI4wgZgwgYCkfjB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3Rv

# bjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0

# aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMAITMwAA

# AiQ7hCGwLKxkIgABAAACJDAiBCCmOe9CP5SUdo9o9Vbz2DS5iqOvDFIl+f1UMDBz

# a5CuYDANBgkqhkiG9w0BAQsFAASCAgBFfTBLtwRYpIFqYk2rJS+JuxFeKsq0b9iK

# TI9VXgFo7a5Rgkg6A33GVMfr5Xa8F+PtRSlWvKSGkWCUA4R58KiG8o8bWdJHP1dc

# mJ2LspKCujkq1WvBZ/GtlLT85NerBAKt6oD6okuwsI13RZOIZL41wvNMOvLvBZNe

# KbljxfSyE7C3D2+wD+fzfT9dB2lAnC5Sr/NoX61YQKoevNUeS+nOvxoZwUuXO1vg

# /o9vvqvWjTKhSR8rzU0W3XElyMQo3DVDmJvO6gSv9qJgGtXpJSjdkxouQLDWbcvn

# 6skBfOLa7hjBkAwvw20bAmWTHo+V8J3iYUTmvcxaFQBbwwrLTpvkXi4opE9iYZMa

# Gd0VAw6zJiUcBOzUxmGzXhfOJBwEIKLQpRdzDT2kNNMaWhNda9kIlNbr46whGNHx

# MuVZ5vpdDQ4Wk6nsQQbDkOyKttpsKUVNSP3W2cIuIir5LoL3yreopifVmWNcAeeo

# wu1KJzOyOL+XXpqpM8Si8XiJLrIJzWIpA1RmRHWK2y7Oai39oW22dX7s2PbgEuWM

# zy8cSjcn23Hq+SN7QjHMbeFDb7es8LdiBHUbiitBVu9pUTH1y0sgdOVOEkCqJR2r

# WPvHauYgikUfyYTO0SDcO/22XbZbvzHoHidtGCfYkd9ZQSSpo6871/ASX4+959rT

# n2PiLgyLDw==

# SIG # End signature block