Private/Tools/Install-AvmToolFromPins.ps1
|
function Install-AvmToolFromPins { <# .SYNOPSIS Install a single tool entry from a parsed avm.pins into the cache. .DESCRIPTION Internal worker invoked by the public Install-AvmTool. Performs the full install pipeline for one (tool, platform) pair: 1. Resolve cache target '<Data>/tools/<name>/<version>/'. 2. If '.verified' marker exists and -Force not set, return path. 3. Acquire cross-process lock under '<Data>/tools/<name>/.lock'. 4. Re-check '.verified' (another process may have raced ahead). 5. Stage download into '<Data>/tools/<name>/.staging/<uuid>/'. 6. Verify SHA256 (in Invoke-AvmHttp). 7. Expand archive into the staging dir. 8. Move-Item staging dir to final '<version>/' (atomic rename). If the rename loses a race, discard staging and use the existing dir. 9. Write .meta.json and touch .verified marker. 10. Release lock; return final path. #> [CmdletBinding()] [Diagnostics.CodeAnalysis.SuppressMessageAttribute('PSUseSingularNouns', '', Justification = 'Noun mirrors the avm.pins.jsonc manifest, which holds many pins.')] [OutputType([pscustomobject])] param( [Parameter(Mandatory)] [hashtable] $Tool, [Parameter(Mandatory)] [string] $Platform, [switch] $Force ) Set-StrictMode -Version 3.0 $ErrorActionPreference = 'Stop' if ($Tool.ContainsKey('unsupportedPlatforms') -and (@($Tool.unsupportedPlatforms) -ccontains $Platform)) { throw [AvmToolException]::new( "Tool '$($Tool.name)' does not ship a release for '$Platform'.", 'AVM1012') } $overridden = $Tool.ContainsKey('versionOverride') if (-not $overridden -and -not $Tool.sha256.ContainsKey($Platform)) { throw [AvmToolException]::new( "Tool '$($Tool.name)' has no sha256 entry for platform '$Platform'.", 'AVM1012') } $cache = Get-AvmToolCacheEntry -Tool $Tool -Platform $Platform $versionDir = $cache.Directory $toolDir = Split-Path -Path $versionDir -Parent $verified = $cache.Marker $entrypointPath = $cache.Path $entrypointName = Split-Path -Path $entrypointPath -Leaf $isModule = $Tool.ContainsKey('kind') -and $Tool.kind -ceq 'powershell-module' Write-AvmLog ("install: target directory = {0}" -f $versionDir) -Level Verbose | Out-Null if ($cache.Cached -and -not $Force) { Write-AvmLog ("install: cache hit for {0}/{1}" -f $Tool.name, $Tool.version) -Level Verbose | Out-Null return [pscustomobject]@{ Name = $Tool.name Version = $Tool.version Platform = $Platform Path = $entrypointPath Action = 'cache-hit' } } if (-not (Test-Path -LiteralPath $toolDir)) { New-Item -ItemType Directory -Path $toolDir -Force | Out-Null } $lockFile = Join-Path $toolDir '.lock' Write-AvmLog ("install: acquiring cache lock {0}" -f $lockFile) -Level Verbose | Out-Null $lock = Lock-AvmToolCache -LockFile $lockFile try { if ((Get-AvmToolCacheEntry -Tool $Tool -Platform $Platform).Cached -and -not $Force) { Write-AvmLog ("install: post-lock cache hit for {0}/{1}" -f $Tool.name, $Tool.version) -Level Verbose | Out-Null return [pscustomobject]@{ Name = $Tool.name Version = $Tool.version Platform = $Platform Path = $entrypointPath Action = 'cache-hit' } } $osPart, $archPart = $Platform.Split('-', 2) $url = $Tool.urlTemplate $url = $url.Replace('{version}', $Tool.version) $url = $url.Replace('{os}', $osPart) $url = $url.Replace('{arch}', $archPart) if ($Tool.ContainsKey('platformAliases')) { $alias = [string]$Tool.platformAliases[$Platform] $url = $url.Replace('{platform}', $alias) } $resolvedArchive = $Tool.archive if ($Tool.ContainsKey('archives') -and $Tool.archives.ContainsKey($Platform)) { $resolvedArchive = [string]$Tool.archives[$Platform] } $extToken = switch ($resolvedArchive) { 'zip' { '.zip' } 'tar.gz' { '.tar.gz' } 'raw' { '' } } $url = $url.Replace('{ext}', $extToken) Write-AvmLog ("install: source = {0}" -f $url) -Level Verbose | Out-Null $expectedSha256 = if ($overridden) { $null } else { $Tool.sha256[$Platform] } $useRepositoryDownload = $isModule -and -not $url.StartsWith('file://') -and [string]::IsNullOrWhiteSpace($env:AVM_MIRROR) Write-AvmLog ("install: archive = {0}; expected sha256 = {1}" -f $resolvedArchive, ($expectedSha256 ?? 'disabled by tool-version-overrides.json')) -Level Verbose | Out-Null $stagingRoot = Join-Path $toolDir '.staging' if (-not (Test-Path -LiteralPath $stagingRoot)) { New-Item -ItemType Directory -Path $stagingRoot -Force | Out-Null } $stagingDir = $null try { for ($attempt = 1; $attempt -le 2; $attempt++) { $stagingDir = Join-Path $stagingRoot ([Guid]::NewGuid().ToString('N')) New-Item -ItemType Directory -Path $stagingDir -Force | Out-Null $archivePath = Join-Path $stagingDir ("download" + $extToken) Write-AvmLog ("install: downloading to {0}" -f $archivePath) -Level Verbose | Out-Null $download = @{ Url = $url; Destination = $archivePath } if (-not $overridden) { $download.ExpectedSha256 = $expectedSha256 } else { $download.UnverifiedToolVersionOverride = $true } if ($useRepositoryDownload) { $moduleDownload = @{ Name = $Tool.name; Version = $Tool.version; Destination = $archivePath } if ($overridden) { $moduleDownload.UnverifiedToolVersionOverride = $true } else { $moduleDownload.ExpectedSha256 = $expectedSha256 } $url = Save-AvmPowerShellModuleArchive @moduleDownload } else { Invoke-AvmHttp @download | Out-Null } try { if ($isModule -and $resolvedArchive -eq 'zip') { Assert-AvmPowerShellModuleArchive -Path $archivePath -Name $Tool.name -Version $Tool.version } Write-AvmLog ("install: expanding {0}" -f $resolvedArchive) -Level Verbose | Out-Null Expand-AvmToolArchive -ArchivePath $archivePath -Archive $resolvedArchive -TargetDir $stagingDir -EntrypointBasename $Tool.entrypoint } catch [System.IO.InvalidDataException] { if (-not $isModule -or $resolvedArchive -ne 'zip' -or $attempt -eq 2) { throw } Write-AvmLog -Level Warning -Message ( "Downloaded module archive for '$($Tool.name)' $($Tool.version) is corrupt; retrying once in a fresh staging directory.") Remove-Item -LiteralPath $stagingDir -Recurse -Force -ErrorAction Stop -ProgressAction SilentlyContinue $stagingDir = $null continue } Remove-Item -LiteralPath $archivePath -Force -ErrorAction Stop break } $stagedEntrypoint = Join-Path $stagingDir $entrypointName if (-not (Test-Path -LiteralPath $stagedEntrypoint)) { throw [AvmToolException]::new( "Expected entrypoint '$entrypointName' missing after extracting $($Tool.name) $($Tool.version) for $Platform.", 'AVM1013') } if ($isModule) { $manifest = Import-PowerShellDataFile -LiteralPath $stagedEntrypoint -ErrorAction Stop if ([version]$manifest.ModuleVersion -ne [version]$Tool.version) { throw [AvmToolException]::new("Downloaded module '$($Tool.name)' does not declare version $($Tool.version).", 'AVM1013') } } $meta = [pscustomobject]@{ name = $Tool.name version = $Tool.version platform = $Platform url = $url sha256 = $expectedSha256 checksumVerified = -not $overridden urlTemplate = $Tool.urlTemplate archive = $resolvedArchive installedAt = [DateTime]::UtcNow.ToString('o') } $meta | ConvertTo-Json -Depth 5 | Set-Content -LiteralPath (Join-Path $stagingDir '.meta.json') -Encoding utf8 try { if (Test-Path -LiteralPath $versionDir) { Remove-Item -LiteralPath $versionDir -Recurse -Force -ProgressAction SilentlyContinue } Move-Item -LiteralPath $stagingDir -Destination $versionDir -Force } catch [System.IO.IOException] { if ((Get-AvmToolCacheEntry -Tool $Tool -Platform $Platform).Cached) { Write-AvmLog ("install: rename race lost for {0}/{1}; using completed cache entry" -f $Tool.name, $Tool.version) -Level Verbose | Out-Null Remove-Item ` -LiteralPath $stagingDir ` -Recurse ` -Force ` -ErrorAction SilentlyContinue ` -ProgressAction SilentlyContinue return [pscustomobject]@{ Name = $Tool.name Version = $Tool.version Platform = $Platform Path = $entrypointPath Action = 'race-loss' } } throw } New-Item -ItemType File -Path $verified -Force | Out-Null Write-AvmLog ("install: verified marker written to {0}" -f $verified) -Level Verbose | Out-Null return [pscustomobject]@{ Name = $Tool.name Version = $Tool.version Platform = $Platform Path = $entrypointPath Action = 'installed' } } finally { if ($stagingDir -and (Test-Path -LiteralPath $stagingDir)) { Remove-Item ` -LiteralPath $stagingDir ` -Recurse ` -Force ` -ErrorAction SilentlyContinue ` -ProgressAction SilentlyContinue } } } finally { $lock.Dispose() } } # SIG # Begin signature block # MIInTwYJKoZIhvcNAQcCoIInQDCCJzwCAQExDzANBglghkgBZQMEAgEFADB5Bgor # BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG # KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCANx3Beuja5vz+d # Z91oPMR+h9v1o7RH816aubSWLH5IhqCCDMkwggYEMIID7KADAgECAhMzAAACHPrN # xZvoL37EAAAAAAIcMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMR4wHAYD # VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBD # b2RlIFNpZ25pbmcgUENBIDIwMjQwHhcNMjYwNDE2MTg1OTQxWhcNMjcwNDE1MTg1 # OTQxWjB0MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE # BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYD # VQQDExVNaWNyb3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IB # DwAwggEKAoIBAQDVsZfgOKmM31HPfoWOoNEiw0SlCiIxUMC0I9NMWbucKOw/e9lP # oAoehQVu6SG65V4EPzrYsnBnFPNoi4/HoOdjhz1qkrEt4I6tEcxXU6oOeY9zGveC # /3iBeuhLYxM3M/PkcUoebF+Nednm8OkdSPoDu8imViHPQq/8CQUu0WRR4rE+dMRf # rpVqfmNi2qWCX94T4MsepijGVkwE//tJg0ryAiYdHT34LSnlG/RSBZmQRGWZ5g8j # qnKjRParSqMft1gvjuUTVgtWNZfgcLFSK5Wa0myrq8OPcgTGGsRgun+tnSS+IxDT # xVsAPH1OzvPjwomguByhUe/OcvUN0D5Wmp7xAgMBAAGjggGqMIIBpjAOBgNVHQ8B # Af8EBAMCB4AwHwYDVR0lBBgwFgYKKwYBBAGCN0wIAQYIKwYBBQUHAwMwHQYDVR0O # BBYEFNoH7a2YDjOSwpkp6DHcmUS7J+0yMFQGA1UdEQRNMEukSTBHMS0wKwYDVQQL # EyRNaWNyb3NvZnQgSXJlbGFuZCBPcGVyYXRpb25zIExpbWl0ZWQxFjAUBgNVBAUT # DTIzMDAxMis1MDc1NjkwHwYDVR0jBBgwFoAUf1k/VCHarU/vBeXmo9ctBpQSCDEw # YAYDVR0fBFkwVzBVoFOgUYZPaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9w # cy9jcmwvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNy # bDBtBggrBgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUWh0dHA6Ly93d3cubWljcm9z # b2Z0LmNvbS9wa2lvcHMvY2VydHMvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmcl # MjBQQ0ElMjAyMDI0LmNydDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4IC # AQAUnEqhaRXe0T3hIJjvdQErEkrA/7bByjn6t5IArODkkRjzkYwtKMc2yYj2quaN # rLutWw2YZcngKPy1b71YyDJQTy4NDRwaSh9Tw5thrk3NmcPrAHia5vtcBJ1CgtKK # 7mQbIcQ22d/N3813ayCDDFewu1+jsZmX+r/aTEqaOM4TVxVtRSkuCy8nAXKuChOK # Li/zA4XuH8iEYqIsj2YoNaeSxVmeGiERXpKdo3dDmYi0kO5w2D8VS4c3+9h6gElY # BaAAg/dYErBg27qT3vv0zRDJhJufvCNylA8S7/+8H5E/PV5cng6na9VV/w9OV3qu # uND6zdGa2EX38Glp50F9AIQk3p2xXmcvorDeM4XJ7UlWYBi6g80J1SSOQnInCYFE # msfUNn3+1AaTJKSJL83quKArTac2pKhu0Yzzzrzo6HrsRiQKzpnRBb1/dMa6P3hz # 75XbMRBctNsFhZC07WCmjExdLg2eHW5uV0TY8D5+6wozJf7vF3+WHkYPO85Z+BC6 # U4FkNbYNycZ9cE4j1tXRdyDCfml6c0HWPHjNVDObrv9lKt3qUqFpX38VCqVCyNOO # 1UcXfQiVjJw32U2WUKZjt/neJKHEBsm9kFsLuWzkQ53+qcaSaytmsCnk2gOglrlD # 5d3kKyvvAw+rzm0lT8K38P6PLxfZQHhu4W8dV7Av8N2ZmDCCBr0wggSloAMCAQIC # EzMAAAA5O7Y3Gb8GHWcAAAAAADkwDQYJKoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYT # AlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYD # VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBS # b290IENlcnRpZmljYXRlIEF1dGhvcml0eSAyMDExMB4XDTI0MDgwODIwNTQxOFoX # DTM2MDMyMjIyMTMwNFowVzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFU1pY3Jvc29m # dCBDb3Jwb3JhdGlvbjEoMCYGA1UEAxMfTWljcm9zb2Z0IENvZGUgU2lnbmluZyBQ # Q0EgMjAyNDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANgBnB7jOMeq # lRYHNa265v4IY9fH8TKhemHfPINe1gpLaV3dhg324WwH06LcHbpnsBukCDNitryo # 0dtS/EW6I/yEL/bLSY8hKpbfQuWusBPr9qazYcDxCW/qnjb5JsI1s8bNOg3bVATv # QVL4tcf03aTycsz8QeCdM0l/yHRObJ9QqazM1r6VPEOJ7LL+uEEb73w6QCuhs89a # 1uv1zerOYMnsneRRwCbpyW11IcggU0cRKDDq1pjVJzIbIF6+oiXXbReOsgeI8zu1 # FyQfK0fVkaya8SmVHQ/tOf23mZ4W9k0Ri22QW9p3UgSC5OUDktKxxcCmGL6tXLfO # GSWHIIV4YrTJTT6PNty5REojHJuZHArkF9VnHTERWoTjAzfI3kP+5b4alUdhgAZ7 # ttOu1bVnXfHaqPYl2rPs20ji03LOVWsh/radgE17es5hL+t6lV0eVHrVhsssROWJ # uz2MXMCt7iw7lFPG9LXKGjsmonn2gotGdHIuEg5JnJMJVmixd5LRlkmgYRZKzhxS # CwyoGIq0PhaA7Y+VPct5pCHkijcIIDm0nlkK+0KyepolcqGm0T/GYQRMhHJlGOOm # VQop36wUVUYklUy++vDWeEgEo4s7hxN6mIbf2MSIQ/iIfMZgJxC69oukMUXCrOC3 # SkE/xIkgpfl22MM1itkZ35nNXkMolU1lAgMBAAGjggFOMIIBSjAOBgNVHQ8BAf8E # BAMCAYYwEAYJKwYBBAGCNxUBBAMCAQAwHQYDVR0OBBYEFH9ZP1Qh2q1P7wXl5qPX # LQaUEggxMBkGCSsGAQQBgjcUAgQMHgoAUwB1AGIAQwBBMA8GA1UdEwEB/wQFMAMB # Af8wHwYDVR0jBBgwFoAUci06AjGQQ7kUBU7h6qfHMdEjiTQwWgYDVR0fBFMwUTBP # oE2gS4ZJaHR0cDovL2NybC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMv # TWljUm9vQ2VyQXV0MjAxMV8yMDExXzAzXzIyLmNybDBeBggrBgEFBQcBAQRSMFAw # TgYIKwYBBQUHMAKGQmh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvY2VydHMv # TWljUm9vQ2VyQXV0MjAxMV8yMDExXzAzXzIyLmNydDANBgkqhkiG9w0BAQwFAAOC # AgEAFJQfOChP7onn6fLIMKrSlN1WYKwDFgAddymOUO3FrM8d7B/W/iQ6DxXsDn7D # 5W4wMwYeLystcEqfkjz4NURRgazyMu5yRzQh4LqjA4tStTcJh1opExo7nn5PuPBY # nbu0+THSuVHTe0VTTPVhily/piFrDo3axQ9P4C+Ol5yet+2gTfekICS5xS+cYfSI # vgn0JksVBVMYVI5QFu/qhnLhsEFEUzG8fvv0hjgkO+lkpV9ty6GkN4vdnd7ya6Q6 # aR9y34aiM1qmxaxBi6OUnyNl6fkuun/diTFnYDLTppOkr/mg5WSfCiDVMNCxtj4w # PKC5OmHm1DQIt/MNokbbH3UGsFP1QbzsLocuSqLCvH09Io3fDPTmscR9Y75G4qX7 # RTX8AdBPo0I6OEojf39zuFZt0qOHm65YWQE69cZM2ueE1MB05dNNgHK9gTE7zKvK # /fg8B2qjW88MT/WF5V5uvZGtqa9FSL2RazArA+rDPuf6JGYz4HpgMZHB4S6szWSK # YBv0VisCzfxgeU+dquXW9bd0auYlOB58DPcOYKdc3Se94g+xL4pcEhbB54JOgAkw # YTu/9dLeH2pDqeJZAABVDWRQCaXfO5LgyKwKCLYXpigrZYCjUSBcr+Ve8PFWMhVT # Ql0v4q8J/AUmQN5W4n101cY2L4A7GTQG1h32HHAvfQESWP0xghncMIIZ2AIBATBu # MFcxCzAJBgNVBAYTAlVTMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24x # KDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMjQCEzMAAAIc # +s3Fm+gvfsQAAAAAAhwwDQYJYIZIAWUDBAIBBQCggZAwGQYJKoZIhvcNAQkDMQwG # CisGAQQBgjcCAQQwLwYJKoZIhvcNAQkEMSIEIEYeAllwFi/APb7PsWsOfTvHfoJ5 # 3ci9mASxORmcmU1EMEIGCisGAQQBgjcCAQwxNDAyoBSAEgBNAGkAYwByAG8AcwBv # AGYAdKEagBhodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20wDQYJKoZIhvcNAQEBBQAE # ggEAkazfLj9WQlcme3MGt9cQDTVnUIVFBPFQRMEDLhXD4B1Aa5snnTDIJAyhHdh1 # x95XeTbVxQ+XcAioaPlr3/wZYKBdAYL/Mc+82cLLp265QMhuec2SQh9z5Svh6Znd # aex5zaBkjJmp7s+MHGrDfrOQ73XM/em63R4yiJcwsv/XAkOMxaIOK3WS2Zlh3Mwc # 8tqTO8z5SWladbtNW1gX3eKHbENBYIjb3LEiMPr9TE89WjTOiIRjXoQ5FTWW/2WU # 26S0xkgm4qo64RPW/UzLaSutoiI+qH5N2zAMARLjaVWo+E2TUeJ8H7mECbMhmLG8 # QqT1i//xWUOeHFQnQDH/v8LiQKGCF6wwgheoBgorBgEEAYI3AwMBMYIXmDCCF5QG # CSqGSIb3DQEHAqCCF4UwgheBAgEDMQ8wDQYJYIZIAWUDBAIBBQAwggFZBgsqhkiG # 9w0BCRABBKCCAUgEggFEMIIBQAIBAQYKKwYBBAGEWQoDATAxMA0GCWCGSAFlAwQC # AQUABCCddnQISr0CwBLGkERPHIdIlYR3BdaGyODmMj8hr3GQXwIGavNocbrsGBIy # MDI2MTExMjE2MTA0My4xMlowBIACAfSggdmkgdYwgdMxCzAJBgNVBAYTAlVTMRMw # EQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVN # aWNyb3NvZnQgQ29ycG9yYXRpb24xLTArBgNVBAsTJE1pY3Jvc29mdCBJcmVsYW5k # IE9wZXJhdGlvbnMgTGltaXRlZDEnMCUGA1UECxMeblNoaWVsZCBUU1MgRVNOOjM2 # MDUtMDVFMC1EOTQ3MSUwIwYDVQQDExxNaWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2 # aWNloIIR+zCCBygwggUQoAMCAQICEzMAAAIxVpeZ1fGAB0MAAQAAAjEwDQYJKoZI # hvcNAQELBQAwfDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAO # BgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEm # MCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTAwHhcNMjYxMDE1 # MTgzNzM3WhcNMjgwMTExMTgzNzM3WjCB0zELMAkGA1UEBhMCVVMxEzARBgNVBAgT # Cldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29m # dCBDb3Jwb3JhdGlvbjEtMCsGA1UECxMkTWljcm9zb2Z0IElyZWxhbmQgT3BlcmF0 # aW9ucyBMaW1pdGVkMScwJQYDVQQLEx5uU2hpZWxkIFRTUyBFU046MzYwNS0wNUUw # LUQ5NDcxJTAjBgNVBAMTHE1pY3Jvc29mdCBUaW1lLVN0YW1wIFNlcnZpY2UwggIi # MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDPFAbV8sN1K0egXMgga0OCmpyM # 6WANpBAhmq1rLHR5iVDSyIop341TrKCNyLeUyXf2XhIu88Q7sl0/t980hI1/GEFw # 1otbKFgrdlHdWpJgl+QGtOwbFJubUL3rubxz0QLlDcoL0ekEqxO9ftIW2qCCSEVG # VSnyrQXZzh+2fsup644RvWFY1urkLuH5pCfVrgnQAN26KXXJg8K8fpdepj/Ek08i # hIOzwiJxTXI99myNQVRXd4oLbByyOUSDeoV0bJL+IGCEzrGDXcgcHO6L/VcP97Q2 # ghAyn2jyxKSqO2DZ4sUNPm+v+fCspkmJ6iRajNM4kt2VVOkfT+cxJMyF9XKQ8dl0 # qhgr/2bpRhIYPAHQwRxn4LuXckucnXRsM9Gk5QZzz/iIMz95CFRhMbmJ2I56b48i # sLE3rd8DUvq9YU4F3qUdndF1FBnQ1sBucy7gQMCBwW1y2VwxFV+htdvBvNqWY7FZ # P+Y0wW3rUciEeBOrA4K2cZ1BLSPVciDZ4ovDgANAtbshvoCqyvgj7fjQXUitGBvy # 43tEm/wJgx7GLCPfSkfggdtvDCI3/viAj42s5dX3jDhgEa4T/vQK7mgY6F/OXW+4 # BZFZjKr9Ol3oUC4DPS3yiAsnrex70uAVBYMV9NbZ9NR5ILCS8NJ8O+GsodzS+Dah # EgbFfoBQwANrrgCmjQIDAQABo4IBSTCCAUUwHQYDVR0OBBYEFP35CZQupbv6KKti # ZHJaDdtQnTbFMB8GA1UdIwQYMBaAFJ+nFV0AXmJdg/Tl0mWnG1M1GelyMF8GA1Ud # HwRYMFYwVKBSoFCGTmh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvY3Js # L01pY3Jvc29mdCUyMFRpbWUtU3RhbXAlMjBQQ0ElMjAyMDEwKDEpLmNybDBsBggr # BgEFBQcBAQRgMF4wXAYIKwYBBQUHMAKGUGh0dHA6Ly93d3cubWljcm9zb2Z0LmNv # bS9wa2lvcHMvY2VydHMvTWljcm9zb2Z0JTIwVGltZS1TdGFtcCUyMFBDQSUyMDIw # MTAoMSkuY3J0MAwGA1UdEwEB/wQCMAAwFgYDVR0lAQH/BAwwCgYIKwYBBQUHAwgw # DgYDVR0PAQH/BAQDAgeAMA0GCSqGSIb3DQEBCwUAA4ICAQCSgynZWPx+jXMNihbO # XbXLHJ5Q1VwFbtYlsBZT30G8t6ao6tosOJqLTzgfgK2edgM1ANOacXTtwzTJu8QN # Vi1KffBlo/QpCLwd9ovmvgaGQi0cTK9EXicaOeaTHtkDp9mm1LFyMNHWmP1CjfjT # s31tZxBdJuuoiTT4HiFHeuQWN5d2IHx1gTt8BOT9k6ajvnhMoFxxpm2ii9g+dk+m # 1CFXIFzg36aszSRX7ugRcQidn3iAuGf4xE8CHCBBdmtds8rUvgdvSgAxmCr0+Di5 # OEKoxT+Dxm6BcLP5eTVcKvNDs+zGcxyP3G1tCzcJKYdes6d/aljm57KJnt47og6K # wMP7pcF6HKiXfytVQwdPmyn9CR/NlWjHQjM5spt2b6XFNoBzB107JpbZU3bmGYWX # hGej5Ett5hRRwUnvCtcufccmbk5ZHoIIknIRFyj85nESp7KYxD4ZEzakp22F8Phz # w4Yt6mIL2IsN73KsUrzqCBSyWKeOnCGv2jInC7Luulo33uoP/2ZbgOXgy5BXo6jp # 1oVEZMNp/F6WMlPe2PfIzvinghgkx1G8A3fjTTR9K832X3dFa7QPYyLcFWFF36PZ # 8ZzmUVDBcBKU/Quts2GKG62mlsNdKuTgGEXvVG+AasbVvdijmOUAmb3vos6id7wD # qEE60DxlFI2w/B6ZhCLr7TZKnjCCB3EwggVZoAMCAQICEzMAAAAVxedrngKbSZkA # AAAAABUwDQYJKoZIhvcNAQELBQAwgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpX # YXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQg # Q29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBSb290IENlcnRpZmljYXRl # IEF1dGhvcml0eSAyMDEwMB4XDTIxMDkzMDE4MjIyNVoXDTMwMDkzMDE4MzIyNVow # fDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1Jl # ZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMd # TWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTAwggIiMA0GCSqGSIb3DQEBAQUA # A4ICDwAwggIKAoICAQDk4aZM57RyIQt5osvXJHm9DtWC0/3unAcH0qlsTnXIyjVX # 9gF/bErg4r25PhdgM/9cT8dm95VTcVrifkpa/rg2Z4VGIwy1jRPPdzLAEBjoYH1q # UoNEt6aORmsHFPPFdvWGUNzBRMhxXFExN6AKOG6N7dcP2CZTfDlhAnrEqv1yaa8d # q6z2Nr41JmTamDu6GnszrYBbfowQHJ1S/rboYiXcag/PXfT+jlPP1uyFVk3v3byN # pOORj7I5LFGc6XBpDco2LXCOMcg1KL3jtIckw+DJj361VI/c+gVVmG1oO5pGve2k # rnopN6zL64NF50ZuyjLVwIYwXE8s4mKyzbnijYjklqwBSru+cakXW2dg3viSkR4d # Pf0gz3N9QZpGdc3EXzTdEonW/aUgfX782Z5F37ZyL9t9X4C626p+Nuw2TPYrbqgS # Uei/BQOj0XOmTTd0lBw0gg/wEPK3Rxjtp+iZfD9M269ewvPV2HM9Q07BMzlMjgK8 # QmguEOqEUUbi0b1qGFphAXPKZ6Je1yh2AuIzGHLXpyDwwvoSCtdjbwzJNmSLW6Cm # gyFdXzB0kZSU2LlQ+QuJYfM2BjUYhEfb3BvR/bLUHMVr9lxSUV0S2yW6r1AFemzF # ER1y7435UsSFF5PAPBXbGjfHCBUYP3irRbb1Hode2o+eFnJpxq57t7c+auIurQID # AQABo4IB3TCCAdkwEgYJKwYBBAGCNxUBBAUCAwEAATAjBgkrBgEEAYI3FQIEFgQU # KqdS/mTEmr6CkTxGNSnPEP8vBO4wHQYDVR0OBBYEFJ+nFV0AXmJdg/Tl0mWnG1M1 # GelyMFwGA1UdIARVMFMwUQYMKwYBBAGCN0yDfQEBMEEwPwYIKwYBBQUHAgEWM2h0 # dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvRG9jcy9SZXBvc2l0b3J5Lmh0 # bTATBgNVHSUEDDAKBggrBgEFBQcDCDAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMA # QTALBgNVHQ8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBTV9lbL # j+iiXGJo0T2UkFvXzpoYxDBWBgNVHR8ETzBNMEugSaBHhkVodHRwOi8vY3JsLm1p # Y3Jvc29mdC5jb20vcGtpL2NybC9wcm9kdWN0cy9NaWNSb29DZXJBdXRfMjAxMC0w # Ni0yMy5jcmwwWgYIKwYBBQUHAQEETjBMMEoGCCsGAQUFBzAChj5odHRwOi8vd3d3 # Lm1pY3Jvc29mdC5jb20vcGtpL2NlcnRzL01pY1Jvb0NlckF1dF8yMDEwLTA2LTIz # LmNydDANBgkqhkiG9w0BAQsFAAOCAgEAnVV9/Cqt4SwfZwExJFvhnnJL/Klv6lwU # tj5OR2R4sQaTlz0xM7U518JxNj/aZGx80HU5bbsPMeTCj/ts0aGUGCLu6WZnOlNN # 3Zi6th542DYunKmCVgADsAW+iehp4LoJ7nvfam++Kctu2D9IdQHZGN5tggz1bSNU # 5HhTdSRXud2f8449xvNo32X2pFaq95W2KFUn0CS9QKC/GbYSEhFdPSfgQJY4rPf5 # KYnDvBewVIVCs/wMnosZiefwC2qBwoEZQhlSdYo2wh3DYXMuLGt7bj8sCXgU6ZGy # qVvfSaN0DLzskYDSPeZKPmY7T7uG+jIa2Zb0j/aRAfbOxnT99kxybxCrdTDFNLB6 # 2FD+CljdQDzHVG2dY3RILLFORy3BFARxv2T5JL5zbcqOCb2zAVdJVGTZc9d/HltE # AY5aGZFrDZ+kKNxnGSgkujhLmm77IVRrakURR6nxt67I6IleT53S0Ex2tVdUCbFp # AUR+fKFhbHP+CrvsQWY9af3LwUFJfn6Tvsv4O+S3Fb+0zj6lMVGEvL8CwYKiexcd # FYmNcP7ntdAoGokLjzbaukz5m/8K6TT4JDVnK+ANuOaMmdbhIurwJ0I9JZTmdHRb # atGePu1+oDEzfbzL6Xu/OHBE0ZDxyKs6ijoIYn/ZcGNTTY3ugm2lBRDBcQZqELQd # VTNYs6FwZvKhggNWMIICPgIBATCCAQGhgdmkgdYwgdMxCzAJBgNVBAYTAlVTMRMw # EQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVN # aWNyb3NvZnQgQ29ycG9yYXRpb24xLTArBgNVBAsTJE1pY3Jvc29mdCBJcmVsYW5k # IE9wZXJhdGlvbnMgTGltaXRlZDEnMCUGA1UECxMeblNoaWVsZCBUU1MgRVNOOjM2 # MDUtMDVFMC1EOTQ3MSUwIwYDVQQDExxNaWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2 # aWNloiMKAQEwBwYFKw4DAhoDFQCGoNdOig0Ick25UjQs1aFsUaf+M6CBgzCBgKR+ # MHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdS # ZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMT # HU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwMA0GCSqGSIb3DQEBCwUAAgUA # 7p/g5DAiGA8yMDI2MTExMjA2NTMyNFoYDzIwMjYxMTEzMDY1MzI0WjB0MDoGCisG # AQQBhFkKBAExLDAqMAoCBQDun+DkAgEAMAcCAQACAgGDMAcCAQACAhJgMAoCBQDu # oTJkAgEAMDYGCisGAQQBhFkKBAIxKDAmMAwGCisGAQQBhFkKAwKgCjAIAgEAAgMH # oSChCjAIAgEAAgMBhqAwDQYJKoZIhvcNAQELBQADggEBAGIoySviXm+hHlG8YOv8 # SiAH9SZJKLNoAPh4EpiCkvmYNbOIxBBKZesQ+MlGfU57Qav4RRNzTbbordlUQBSY # fwNEIRj3g6fKIaPgVgNPypsI9YMHafNijLeordhKA6CoBEnLs8CAOiD5gGgY7WTK # yc+sCRuoi6SKwTkBRvQdrlhARqOvnlHF0c7l05+I3vyDJcRn5h2KaHsuGkd/yZQb # Ua1pCBb4o4olgodTZIkoymcl5+DYssqF7g2ylLWtN1tjsNA04V5SvoafJnUWg++i # Rt2MQi67kG4h7tA9lpEUZTr4B4+GgapjFvM86OF63lHu4kPIdr6JKyi43zaSTrky # tJcxggQNMIIECQIBATCBkzB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGlu # Z3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBv # cmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMAIT # MwAAAjFWl5nV8YAHQwABAAACMTANBglghkgBZQMEAgEFAKCCAUowGgYJKoZIhvcN # AQkDMQ0GCyqGSIb3DQEJEAEEMC8GCSqGSIb3DQEJBDEiBCCuJx70SPR/dq8YmD/X # iepk0hML+3uf9dGi9hihLY/lWTCB+gYLKoZIhvcNAQkQAi8xgeowgecwgeQwgb0E # IO1pHuFNVxpfihMWqys8thOBeJqfSgEdvbl6j4L1dYxOMIGYMIGApH4wfDELMAkG # A1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQx # HjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9z # b2Z0IFRpbWUtU3RhbXAgUENBIDIwMTACEzMAAAIxVpeZ1fGAB0MAAQAAAjEwIgQg # iYlMDockIzlm72Aey15LJDe9DMEA4fqaMMSBAqmE+kMwDQYJKoZIhvcNAQELBQAE # ggIAcgQBxAfYzn6/tYPOdCLjAoWlP/UpCIzW7tBrO5sQaWvD/5jvqVfuyPLbtCPu # fgpToBfuZ1PitZAa4aWrGgLJX1688uStB9GQgpTx5qNc9lXMcAS1ok/z91er8EMZ # ociH+F1LQ9AeJQDOUy5MICjbR018+P/tv7Afi8kZCHKOFt0R16yVzoLHRqNCaYXR # MFu8x93aDBBQ05LLBXG3sK4eX2QP56bNexJCfCq+wt7cbR/4dd54kOxqg/ryZo8F # tjR2QLN8hbd7YbEKvlvrAl5sopH7E3m1pjykfszIMYbNlZO7Mgqh5G0RKqM34fCJ # f8yBdSmBiJviA60dlyBQqT2+YJ5s3S7gAVoya6GCVtAdQE3EXucKB3GYVwNvWU0v # w5IxcmMdkM9uM2Gphq0IzSMUoEbv8o0KbqzrHbHdTI5gJUNqBxZ/I2OqdRJ7rqL7 # wkyfFqQCjMfa8nFIv537YIR6yd5mgar1BjIXqQu+c7+WugqKsB8DyOEXfWBIEYe3 # 2OBMMmAnmJJHfDSg3V7PyWn+25W0p+A0HwAFbTHEEuP3vcB97OgmWp9aTn/k/+F3 # ffGjrK0gwdzOa+0cG9DY3bWBUv/BL+PhFrkwuWLVxZK7ffUDLgf+KbArRG3KeWMj # dq47rltSYRZYgKhrUYQvG4/g8PIFnxghto+kVHQtn4j43N0= # SIG # End signature block |