Private/Tools/Install-AvmToolFromPins.ps1

function Install-AvmToolFromPins {
    <#
    .SYNOPSIS
        Install a single tool entry from a parsed avm.pins into the cache.

    .DESCRIPTION
        Internal worker invoked by the public Install-AvmTool. Performs the
        full install pipeline for one (tool, platform) pair:

            1. Resolve cache target '<Data>/tools/<name>/<version>/'.
            2. If '.verified' marker exists and -Force not set, return path.
            3. Acquire cross-process lock under '<Data>/tools/<name>/.lock'.
            4. Re-check '.verified' (another process may have raced ahead).
            5. Stage download into '<Data>/tools/<name>/.staging/<uuid>/'.
            6. Verify SHA256 (in Invoke-AvmHttp).
            7. Expand archive into the staging dir.
            8. Move-Item staging dir to final '<version>/' (atomic rename).
               If the rename loses a race, discard staging and use the
               existing dir.
            9. Write .meta.json and touch .verified marker.
           10. Release lock; return final path.
    #>

    [CmdletBinding()]
    [Diagnostics.CodeAnalysis.SuppressMessageAttribute('PSUseSingularNouns', '',
        Justification = 'Noun mirrors the avm.pins.jsonc manifest, which holds many pins.')]
    [OutputType([pscustomobject])]
    param(
        [Parameter(Mandatory)] [hashtable] $Tool,
        [Parameter(Mandatory)] [string] $Platform,
        [switch] $Force
    )

    Set-StrictMode -Version 3.0
    $ErrorActionPreference = 'Stop'

    if ($Tool.ContainsKey('unsupportedPlatforms') -and (@($Tool.unsupportedPlatforms) -ccontains $Platform)) {
        throw [AvmToolException]::new(
            "Tool '$($Tool.name)' does not ship a release for '$Platform'.",
            'AVM1012')
    }

    $overridden = $Tool.ContainsKey('versionOverride')
    if (-not $overridden -and -not $Tool.sha256.ContainsKey($Platform)) {
        throw [AvmToolException]::new(
            "Tool '$($Tool.name)' has no sha256 entry for platform '$Platform'.",
            'AVM1012')
    }

    $cache = Get-AvmToolCacheEntry -Tool $Tool -Platform $Platform
    $versionDir = $cache.Directory
    $toolDir = Split-Path -Path $versionDir -Parent
    $verified = $cache.Marker
    $entrypointPath = $cache.Path
    $entrypointName = Split-Path -Path $entrypointPath -Leaf
    $isModule = $Tool.ContainsKey('kind') -and $Tool.kind -ceq 'powershell-module'
    Write-AvmLog ("install: target directory = {0}" -f $versionDir) -Level Verbose | Out-Null

    if ($cache.Cached -and -not $Force) {
        Write-AvmLog ("install: cache hit for {0}/{1}" -f $Tool.name, $Tool.version) -Level Verbose | Out-Null
        return [pscustomobject]@{
            Name     = $Tool.name
            Version  = $Tool.version
            Platform = $Platform
            Path     = $entrypointPath
            Action   = 'cache-hit'
        }
    }

    if (-not (Test-Path -LiteralPath $toolDir)) {
        New-Item -ItemType Directory -Path $toolDir -Force | Out-Null
    }

    $lockFile = Join-Path $toolDir '.lock'
    Write-AvmLog ("install: acquiring cache lock {0}" -f $lockFile) -Level Verbose | Out-Null
    $lock = Lock-AvmToolCache -LockFile $lockFile
    try {
        if ((Get-AvmToolCacheEntry -Tool $Tool -Platform $Platform).Cached -and -not $Force) {
            Write-AvmLog ("install: post-lock cache hit for {0}/{1}" -f $Tool.name, $Tool.version) -Level Verbose | Out-Null
            return [pscustomobject]@{
                Name     = $Tool.name
                Version  = $Tool.version
                Platform = $Platform
                Path     = $entrypointPath
                Action   = 'cache-hit'
            }
        }

        $osPart, $archPart = $Platform.Split('-', 2)
        $url = $Tool.urlTemplate
        $url = $url.Replace('{version}', $Tool.version)
        $url = $url.Replace('{os}', $osPart)
        $url = $url.Replace('{arch}', $archPart)
        if ($Tool.ContainsKey('platformAliases')) {
            $alias = [string]$Tool.platformAliases[$Platform]
            $url = $url.Replace('{platform}', $alias)
        }

        $resolvedArchive = $Tool.archive
        if ($Tool.ContainsKey('archives') -and $Tool.archives.ContainsKey($Platform)) {
            $resolvedArchive = [string]$Tool.archives[$Platform]
        }
        $extToken = switch ($resolvedArchive) {
            'zip' { '.zip' }
            'tar.gz' { '.tar.gz' }
            'raw' { '' }
        }
        $url = $url.Replace('{ext}', $extToken)
        Write-AvmLog ("install: source = {0}" -f $url) -Level Verbose | Out-Null
        $expectedSha256 = if ($overridden) { $null } else { $Tool.sha256[$Platform] }
        $useRepositoryDownload = $isModule -and -not $url.StartsWith('file://') -and [string]::IsNullOrWhiteSpace($env:AVM_MIRROR)
        Write-AvmLog ("install: archive = {0}; expected sha256 = {1}" -f $resolvedArchive, ($expectedSha256 ?? 'disabled by tool-version-overrides.json')) -Level Verbose | Out-Null

        $stagingRoot = Join-Path $toolDir '.staging'
        if (-not (Test-Path -LiteralPath $stagingRoot)) {
            New-Item -ItemType Directory -Path $stagingRoot -Force | Out-Null
        }
        $stagingDir = $null
        try {
            for ($attempt = 1; $attempt -le 2; $attempt++) {
                $stagingDir = Join-Path $stagingRoot ([Guid]::NewGuid().ToString('N'))
                New-Item -ItemType Directory -Path $stagingDir -Force | Out-Null
                $archivePath = Join-Path $stagingDir ("download" + $extToken)

                Write-AvmLog ("install: downloading to {0}" -f $archivePath) -Level Verbose | Out-Null
                $download = @{ Url = $url; Destination = $archivePath }
                if (-not $overridden) { $download.ExpectedSha256 = $expectedSha256 }
                else { $download.UnverifiedToolVersionOverride = $true }
                if ($useRepositoryDownload) {
                    $moduleDownload = @{ Name = $Tool.name; Version = $Tool.version; Destination = $archivePath }
                    if ($overridden) { $moduleDownload.UnverifiedToolVersionOverride = $true }
                    else { $moduleDownload.ExpectedSha256 = $expectedSha256 }
                    $url = Save-AvmPowerShellModuleArchive @moduleDownload
                }
                else {
                    Invoke-AvmHttp @download | Out-Null
                }
                try {
                    if ($isModule -and $resolvedArchive -eq 'zip') {
                        Assert-AvmPowerShellModuleArchive -Path $archivePath -Name $Tool.name -Version $Tool.version
                    }
                    Write-AvmLog ("install: expanding {0}" -f $resolvedArchive) -Level Verbose | Out-Null
                    Expand-AvmToolArchive -ArchivePath $archivePath -Archive $resolvedArchive -TargetDir $stagingDir -EntrypointBasename $Tool.entrypoint
                }
                catch [System.IO.InvalidDataException] {
                    if (-not $isModule -or $resolvedArchive -ne 'zip' -or $attempt -eq 2) { throw }
                    Write-AvmLog -Level Warning -Message (
                        "Downloaded module archive for '$($Tool.name)' $($Tool.version) is corrupt; retrying once in a fresh staging directory.")
                    Remove-Item -LiteralPath $stagingDir -Recurse -Force -ErrorAction Stop -ProgressAction SilentlyContinue
                    $stagingDir = $null
                    continue
                }
                Remove-Item -LiteralPath $archivePath -Force -ErrorAction Stop
                break
            }

            $stagedEntrypoint = Join-Path $stagingDir $entrypointName
            if (-not (Test-Path -LiteralPath $stagedEntrypoint)) {
                throw [AvmToolException]::new(
                    "Expected entrypoint '$entrypointName' missing after extracting $($Tool.name) $($Tool.version) for $Platform.",
                    'AVM1013')
            }
            if ($isModule) {
                $manifest = Import-PowerShellDataFile -LiteralPath $stagedEntrypoint -ErrorAction Stop
                if ([version]$manifest.ModuleVersion -ne [version]$Tool.version) {
                    throw [AvmToolException]::new("Downloaded module '$($Tool.name)' does not declare version $($Tool.version).", 'AVM1013')
                }
            }

            $meta = [pscustomobject]@{
                name             = $Tool.name
                version          = $Tool.version
                platform         = $Platform
                url              = $url
                sha256           = $expectedSha256
                checksumVerified = -not $overridden
                urlTemplate      = $Tool.urlTemplate
                archive          = $resolvedArchive
                installedAt      = [DateTime]::UtcNow.ToString('o')
            }
            $meta | ConvertTo-Json -Depth 5 | Set-Content -LiteralPath (Join-Path $stagingDir '.meta.json') -Encoding utf8

            try {
                if (Test-Path -LiteralPath $versionDir) {
                    Remove-Item -LiteralPath $versionDir -Recurse -Force -ProgressAction SilentlyContinue
                }
                Move-Item -LiteralPath $stagingDir -Destination $versionDir -Force
            }
            catch [System.IO.IOException] {
                if ((Get-AvmToolCacheEntry -Tool $Tool -Platform $Platform).Cached) {
                    Write-AvmLog ("install: rename race lost for {0}/{1}; using completed cache entry" -f $Tool.name, $Tool.version) -Level Verbose | Out-Null
                    Remove-Item `
                        -LiteralPath $stagingDir `
                        -Recurse `
                        -Force `
                        -ErrorAction SilentlyContinue `
                        -ProgressAction SilentlyContinue
                    return [pscustomobject]@{
                        Name     = $Tool.name
                        Version  = $Tool.version
                        Platform = $Platform
                        Path     = $entrypointPath
                        Action   = 'race-loss'
                    }
                }
                throw
            }

            New-Item -ItemType File -Path $verified -Force | Out-Null
            Write-AvmLog ("install: verified marker written to {0}" -f $verified) -Level Verbose | Out-Null

            return [pscustomobject]@{
                Name     = $Tool.name
                Version  = $Tool.version
                Platform = $Platform
                Path     = $entrypointPath
                Action   = 'installed'
            }
        }
        finally {
            if ($stagingDir -and (Test-Path -LiteralPath $stagingDir)) {
                Remove-Item `
                    -LiteralPath $stagingDir `
                    -Recurse `
                    -Force `
                    -ErrorAction SilentlyContinue `
                    -ProgressAction SilentlyContinue
            }
        }
    }
    finally {
        $lock.Dispose()
    }
}

# SIG # Begin signature block
# MIInTwYJKoZIhvcNAQcCoIInQDCCJzwCAQExDzANBglghkgBZQMEAgEFADB5Bgor
# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG
# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCANx3Beuja5vz+d
# Z91oPMR+h9v1o7RH816aubSWLH5IhqCCDMkwggYEMIID7KADAgECAhMzAAACHPrN
# xZvoL37EAAAAAAIcMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMR4wHAYD
# VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBD
# b2RlIFNpZ25pbmcgUENBIDIwMjQwHhcNMjYwNDE2MTg1OTQxWhcNMjcwNDE1MTg1
# OTQxWjB0MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE
# BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYD
# VQQDExVNaWNyb3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IB
# DwAwggEKAoIBAQDVsZfgOKmM31HPfoWOoNEiw0SlCiIxUMC0I9NMWbucKOw/e9lP
# oAoehQVu6SG65V4EPzrYsnBnFPNoi4/HoOdjhz1qkrEt4I6tEcxXU6oOeY9zGveC
# /3iBeuhLYxM3M/PkcUoebF+Nednm8OkdSPoDu8imViHPQq/8CQUu0WRR4rE+dMRf
# rpVqfmNi2qWCX94T4MsepijGVkwE//tJg0ryAiYdHT34LSnlG/RSBZmQRGWZ5g8j
# qnKjRParSqMft1gvjuUTVgtWNZfgcLFSK5Wa0myrq8OPcgTGGsRgun+tnSS+IxDT
# xVsAPH1OzvPjwomguByhUe/OcvUN0D5Wmp7xAgMBAAGjggGqMIIBpjAOBgNVHQ8B
# Af8EBAMCB4AwHwYDVR0lBBgwFgYKKwYBBAGCN0wIAQYIKwYBBQUHAwMwHQYDVR0O
# BBYEFNoH7a2YDjOSwpkp6DHcmUS7J+0yMFQGA1UdEQRNMEukSTBHMS0wKwYDVQQL
# EyRNaWNyb3NvZnQgSXJlbGFuZCBPcGVyYXRpb25zIExpbWl0ZWQxFjAUBgNVBAUT
# DTIzMDAxMis1MDc1NjkwHwYDVR0jBBgwFoAUf1k/VCHarU/vBeXmo9ctBpQSCDEw
# YAYDVR0fBFkwVzBVoFOgUYZPaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9w
# cy9jcmwvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNy
# bDBtBggrBgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUWh0dHA6Ly93d3cubWljcm9z
# b2Z0LmNvbS9wa2lvcHMvY2VydHMvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmcl
# MjBQQ0ElMjAyMDI0LmNydDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4IC
# AQAUnEqhaRXe0T3hIJjvdQErEkrA/7bByjn6t5IArODkkRjzkYwtKMc2yYj2quaN
# rLutWw2YZcngKPy1b71YyDJQTy4NDRwaSh9Tw5thrk3NmcPrAHia5vtcBJ1CgtKK
# 7mQbIcQ22d/N3813ayCDDFewu1+jsZmX+r/aTEqaOM4TVxVtRSkuCy8nAXKuChOK
# Li/zA4XuH8iEYqIsj2YoNaeSxVmeGiERXpKdo3dDmYi0kO5w2D8VS4c3+9h6gElY
# BaAAg/dYErBg27qT3vv0zRDJhJufvCNylA8S7/+8H5E/PV5cng6na9VV/w9OV3qu
# uND6zdGa2EX38Glp50F9AIQk3p2xXmcvorDeM4XJ7UlWYBi6g80J1SSOQnInCYFE
# msfUNn3+1AaTJKSJL83quKArTac2pKhu0Yzzzrzo6HrsRiQKzpnRBb1/dMa6P3hz
# 75XbMRBctNsFhZC07WCmjExdLg2eHW5uV0TY8D5+6wozJf7vF3+WHkYPO85Z+BC6
# U4FkNbYNycZ9cE4j1tXRdyDCfml6c0HWPHjNVDObrv9lKt3qUqFpX38VCqVCyNOO
# 1UcXfQiVjJw32U2WUKZjt/neJKHEBsm9kFsLuWzkQ53+qcaSaytmsCnk2gOglrlD
# 5d3kKyvvAw+rzm0lT8K38P6PLxfZQHhu4W8dV7Av8N2ZmDCCBr0wggSloAMCAQIC
# EzMAAAA5O7Y3Gb8GHWcAAAAAADkwDQYJKoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYT
# AlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYD
# VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBS
# b290IENlcnRpZmljYXRlIEF1dGhvcml0eSAyMDExMB4XDTI0MDgwODIwNTQxOFoX
# DTM2MDMyMjIyMTMwNFowVzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFU1pY3Jvc29m
# dCBDb3Jwb3JhdGlvbjEoMCYGA1UEAxMfTWljcm9zb2Z0IENvZGUgU2lnbmluZyBQ
# Q0EgMjAyNDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANgBnB7jOMeq
# lRYHNa265v4IY9fH8TKhemHfPINe1gpLaV3dhg324WwH06LcHbpnsBukCDNitryo
# 0dtS/EW6I/yEL/bLSY8hKpbfQuWusBPr9qazYcDxCW/qnjb5JsI1s8bNOg3bVATv
# QVL4tcf03aTycsz8QeCdM0l/yHRObJ9QqazM1r6VPEOJ7LL+uEEb73w6QCuhs89a
# 1uv1zerOYMnsneRRwCbpyW11IcggU0cRKDDq1pjVJzIbIF6+oiXXbReOsgeI8zu1
# FyQfK0fVkaya8SmVHQ/tOf23mZ4W9k0Ri22QW9p3UgSC5OUDktKxxcCmGL6tXLfO
# GSWHIIV4YrTJTT6PNty5REojHJuZHArkF9VnHTERWoTjAzfI3kP+5b4alUdhgAZ7
# ttOu1bVnXfHaqPYl2rPs20ji03LOVWsh/radgE17es5hL+t6lV0eVHrVhsssROWJ
# uz2MXMCt7iw7lFPG9LXKGjsmonn2gotGdHIuEg5JnJMJVmixd5LRlkmgYRZKzhxS
# CwyoGIq0PhaA7Y+VPct5pCHkijcIIDm0nlkK+0KyepolcqGm0T/GYQRMhHJlGOOm
# VQop36wUVUYklUy++vDWeEgEo4s7hxN6mIbf2MSIQ/iIfMZgJxC69oukMUXCrOC3
# SkE/xIkgpfl22MM1itkZ35nNXkMolU1lAgMBAAGjggFOMIIBSjAOBgNVHQ8BAf8E
# BAMCAYYwEAYJKwYBBAGCNxUBBAMCAQAwHQYDVR0OBBYEFH9ZP1Qh2q1P7wXl5qPX
# LQaUEggxMBkGCSsGAQQBgjcUAgQMHgoAUwB1AGIAQwBBMA8GA1UdEwEB/wQFMAMB
# Af8wHwYDVR0jBBgwFoAUci06AjGQQ7kUBU7h6qfHMdEjiTQwWgYDVR0fBFMwUTBP
# oE2gS4ZJaHR0cDovL2NybC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMv
# TWljUm9vQ2VyQXV0MjAxMV8yMDExXzAzXzIyLmNybDBeBggrBgEFBQcBAQRSMFAw
# TgYIKwYBBQUHMAKGQmh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvY2VydHMv
# TWljUm9vQ2VyQXV0MjAxMV8yMDExXzAzXzIyLmNydDANBgkqhkiG9w0BAQwFAAOC
# AgEAFJQfOChP7onn6fLIMKrSlN1WYKwDFgAddymOUO3FrM8d7B/W/iQ6DxXsDn7D
# 5W4wMwYeLystcEqfkjz4NURRgazyMu5yRzQh4LqjA4tStTcJh1opExo7nn5PuPBY
# nbu0+THSuVHTe0VTTPVhily/piFrDo3axQ9P4C+Ol5yet+2gTfekICS5xS+cYfSI
# vgn0JksVBVMYVI5QFu/qhnLhsEFEUzG8fvv0hjgkO+lkpV9ty6GkN4vdnd7ya6Q6
# aR9y34aiM1qmxaxBi6OUnyNl6fkuun/diTFnYDLTppOkr/mg5WSfCiDVMNCxtj4w
# PKC5OmHm1DQIt/MNokbbH3UGsFP1QbzsLocuSqLCvH09Io3fDPTmscR9Y75G4qX7
# RTX8AdBPo0I6OEojf39zuFZt0qOHm65YWQE69cZM2ueE1MB05dNNgHK9gTE7zKvK
# /fg8B2qjW88MT/WF5V5uvZGtqa9FSL2RazArA+rDPuf6JGYz4HpgMZHB4S6szWSK
# YBv0VisCzfxgeU+dquXW9bd0auYlOB58DPcOYKdc3Se94g+xL4pcEhbB54JOgAkw
# YTu/9dLeH2pDqeJZAABVDWRQCaXfO5LgyKwKCLYXpigrZYCjUSBcr+Ve8PFWMhVT
# Ql0v4q8J/AUmQN5W4n101cY2L4A7GTQG1h32HHAvfQESWP0xghncMIIZ2AIBATBu
# MFcxCzAJBgNVBAYTAlVTMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24x
# KDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMjQCEzMAAAIc
# +s3Fm+gvfsQAAAAAAhwwDQYJYIZIAWUDBAIBBQCggZAwGQYJKoZIhvcNAQkDMQwG
# CisGAQQBgjcCAQQwLwYJKoZIhvcNAQkEMSIEIEYeAllwFi/APb7PsWsOfTvHfoJ5
# 3ci9mASxORmcmU1EMEIGCisGAQQBgjcCAQwxNDAyoBSAEgBNAGkAYwByAG8AcwBv
# AGYAdKEagBhodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20wDQYJKoZIhvcNAQEBBQAE
# ggEAkazfLj9WQlcme3MGt9cQDTVnUIVFBPFQRMEDLhXD4B1Aa5snnTDIJAyhHdh1
# x95XeTbVxQ+XcAioaPlr3/wZYKBdAYL/Mc+82cLLp265QMhuec2SQh9z5Svh6Znd
# aex5zaBkjJmp7s+MHGrDfrOQ73XM/em63R4yiJcwsv/XAkOMxaIOK3WS2Zlh3Mwc
# 8tqTO8z5SWladbtNW1gX3eKHbENBYIjb3LEiMPr9TE89WjTOiIRjXoQ5FTWW/2WU
# 26S0xkgm4qo64RPW/UzLaSutoiI+qH5N2zAMARLjaVWo+E2TUeJ8H7mECbMhmLG8
# QqT1i//xWUOeHFQnQDH/v8LiQKGCF6wwgheoBgorBgEEAYI3AwMBMYIXmDCCF5QG
# CSqGSIb3DQEHAqCCF4UwgheBAgEDMQ8wDQYJYIZIAWUDBAIBBQAwggFZBgsqhkiG
# 9w0BCRABBKCCAUgEggFEMIIBQAIBAQYKKwYBBAGEWQoDATAxMA0GCWCGSAFlAwQC
# AQUABCCddnQISr0CwBLGkERPHIdIlYR3BdaGyODmMj8hr3GQXwIGavNocbrsGBIy
# MDI2MTExMjE2MTA0My4xMlowBIACAfSggdmkgdYwgdMxCzAJBgNVBAYTAlVTMRMw
# EQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVN
# aWNyb3NvZnQgQ29ycG9yYXRpb24xLTArBgNVBAsTJE1pY3Jvc29mdCBJcmVsYW5k
# IE9wZXJhdGlvbnMgTGltaXRlZDEnMCUGA1UECxMeblNoaWVsZCBUU1MgRVNOOjM2
# MDUtMDVFMC1EOTQ3MSUwIwYDVQQDExxNaWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2
# aWNloIIR+zCCBygwggUQoAMCAQICEzMAAAIxVpeZ1fGAB0MAAQAAAjEwDQYJKoZI
# hvcNAQELBQAwfDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAO
# BgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEm
# MCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTAwHhcNMjYxMDE1
# MTgzNzM3WhcNMjgwMTExMTgzNzM3WjCB0zELMAkGA1UEBhMCVVMxEzARBgNVBAgT
# Cldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29m
# dCBDb3Jwb3JhdGlvbjEtMCsGA1UECxMkTWljcm9zb2Z0IElyZWxhbmQgT3BlcmF0
# aW9ucyBMaW1pdGVkMScwJQYDVQQLEx5uU2hpZWxkIFRTUyBFU046MzYwNS0wNUUw
# LUQ5NDcxJTAjBgNVBAMTHE1pY3Jvc29mdCBUaW1lLVN0YW1wIFNlcnZpY2UwggIi
# MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDPFAbV8sN1K0egXMgga0OCmpyM
# 6WANpBAhmq1rLHR5iVDSyIop341TrKCNyLeUyXf2XhIu88Q7sl0/t980hI1/GEFw
# 1otbKFgrdlHdWpJgl+QGtOwbFJubUL3rubxz0QLlDcoL0ekEqxO9ftIW2qCCSEVG
# VSnyrQXZzh+2fsup644RvWFY1urkLuH5pCfVrgnQAN26KXXJg8K8fpdepj/Ek08i
# hIOzwiJxTXI99myNQVRXd4oLbByyOUSDeoV0bJL+IGCEzrGDXcgcHO6L/VcP97Q2
# ghAyn2jyxKSqO2DZ4sUNPm+v+fCspkmJ6iRajNM4kt2VVOkfT+cxJMyF9XKQ8dl0
# qhgr/2bpRhIYPAHQwRxn4LuXckucnXRsM9Gk5QZzz/iIMz95CFRhMbmJ2I56b48i
# sLE3rd8DUvq9YU4F3qUdndF1FBnQ1sBucy7gQMCBwW1y2VwxFV+htdvBvNqWY7FZ
# P+Y0wW3rUciEeBOrA4K2cZ1BLSPVciDZ4ovDgANAtbshvoCqyvgj7fjQXUitGBvy
# 43tEm/wJgx7GLCPfSkfggdtvDCI3/viAj42s5dX3jDhgEa4T/vQK7mgY6F/OXW+4
# BZFZjKr9Ol3oUC4DPS3yiAsnrex70uAVBYMV9NbZ9NR5ILCS8NJ8O+GsodzS+Dah
# EgbFfoBQwANrrgCmjQIDAQABo4IBSTCCAUUwHQYDVR0OBBYEFP35CZQupbv6KKti
# ZHJaDdtQnTbFMB8GA1UdIwQYMBaAFJ+nFV0AXmJdg/Tl0mWnG1M1GelyMF8GA1Ud
# HwRYMFYwVKBSoFCGTmh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvY3Js
# L01pY3Jvc29mdCUyMFRpbWUtU3RhbXAlMjBQQ0ElMjAyMDEwKDEpLmNybDBsBggr
# BgEFBQcBAQRgMF4wXAYIKwYBBQUHMAKGUGh0dHA6Ly93d3cubWljcm9zb2Z0LmNv
# bS9wa2lvcHMvY2VydHMvTWljcm9zb2Z0JTIwVGltZS1TdGFtcCUyMFBDQSUyMDIw
# MTAoMSkuY3J0MAwGA1UdEwEB/wQCMAAwFgYDVR0lAQH/BAwwCgYIKwYBBQUHAwgw
# DgYDVR0PAQH/BAQDAgeAMA0GCSqGSIb3DQEBCwUAA4ICAQCSgynZWPx+jXMNihbO
# XbXLHJ5Q1VwFbtYlsBZT30G8t6ao6tosOJqLTzgfgK2edgM1ANOacXTtwzTJu8QN
# Vi1KffBlo/QpCLwd9ovmvgaGQi0cTK9EXicaOeaTHtkDp9mm1LFyMNHWmP1CjfjT
# s31tZxBdJuuoiTT4HiFHeuQWN5d2IHx1gTt8BOT9k6ajvnhMoFxxpm2ii9g+dk+m
# 1CFXIFzg36aszSRX7ugRcQidn3iAuGf4xE8CHCBBdmtds8rUvgdvSgAxmCr0+Di5
# OEKoxT+Dxm6BcLP5eTVcKvNDs+zGcxyP3G1tCzcJKYdes6d/aljm57KJnt47og6K
# wMP7pcF6HKiXfytVQwdPmyn9CR/NlWjHQjM5spt2b6XFNoBzB107JpbZU3bmGYWX
# hGej5Ett5hRRwUnvCtcufccmbk5ZHoIIknIRFyj85nESp7KYxD4ZEzakp22F8Phz
# w4Yt6mIL2IsN73KsUrzqCBSyWKeOnCGv2jInC7Luulo33uoP/2ZbgOXgy5BXo6jp
# 1oVEZMNp/F6WMlPe2PfIzvinghgkx1G8A3fjTTR9K832X3dFa7QPYyLcFWFF36PZ
# 8ZzmUVDBcBKU/Quts2GKG62mlsNdKuTgGEXvVG+AasbVvdijmOUAmb3vos6id7wD
# qEE60DxlFI2w/B6ZhCLr7TZKnjCCB3EwggVZoAMCAQICEzMAAAAVxedrngKbSZkA
# AAAAABUwDQYJKoZIhvcNAQELBQAwgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpX
# YXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQg
# Q29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBSb290IENlcnRpZmljYXRl
# IEF1dGhvcml0eSAyMDEwMB4XDTIxMDkzMDE4MjIyNVoXDTMwMDkzMDE4MzIyNVow
# fDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1Jl
# ZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMd
# TWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTAwggIiMA0GCSqGSIb3DQEBAQUA
# A4ICDwAwggIKAoICAQDk4aZM57RyIQt5osvXJHm9DtWC0/3unAcH0qlsTnXIyjVX
# 9gF/bErg4r25PhdgM/9cT8dm95VTcVrifkpa/rg2Z4VGIwy1jRPPdzLAEBjoYH1q
# UoNEt6aORmsHFPPFdvWGUNzBRMhxXFExN6AKOG6N7dcP2CZTfDlhAnrEqv1yaa8d
# q6z2Nr41JmTamDu6GnszrYBbfowQHJ1S/rboYiXcag/PXfT+jlPP1uyFVk3v3byN
# pOORj7I5LFGc6XBpDco2LXCOMcg1KL3jtIckw+DJj361VI/c+gVVmG1oO5pGve2k
# rnopN6zL64NF50ZuyjLVwIYwXE8s4mKyzbnijYjklqwBSru+cakXW2dg3viSkR4d
# Pf0gz3N9QZpGdc3EXzTdEonW/aUgfX782Z5F37ZyL9t9X4C626p+Nuw2TPYrbqgS
# Uei/BQOj0XOmTTd0lBw0gg/wEPK3Rxjtp+iZfD9M269ewvPV2HM9Q07BMzlMjgK8
# QmguEOqEUUbi0b1qGFphAXPKZ6Je1yh2AuIzGHLXpyDwwvoSCtdjbwzJNmSLW6Cm
# gyFdXzB0kZSU2LlQ+QuJYfM2BjUYhEfb3BvR/bLUHMVr9lxSUV0S2yW6r1AFemzF
# ER1y7435UsSFF5PAPBXbGjfHCBUYP3irRbb1Hode2o+eFnJpxq57t7c+auIurQID
# AQABo4IB3TCCAdkwEgYJKwYBBAGCNxUBBAUCAwEAATAjBgkrBgEEAYI3FQIEFgQU
# KqdS/mTEmr6CkTxGNSnPEP8vBO4wHQYDVR0OBBYEFJ+nFV0AXmJdg/Tl0mWnG1M1
# GelyMFwGA1UdIARVMFMwUQYMKwYBBAGCN0yDfQEBMEEwPwYIKwYBBQUHAgEWM2h0
# dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvRG9jcy9SZXBvc2l0b3J5Lmh0
# bTATBgNVHSUEDDAKBggrBgEFBQcDCDAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMA
# QTALBgNVHQ8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBTV9lbL
# j+iiXGJo0T2UkFvXzpoYxDBWBgNVHR8ETzBNMEugSaBHhkVodHRwOi8vY3JsLm1p
# Y3Jvc29mdC5jb20vcGtpL2NybC9wcm9kdWN0cy9NaWNSb29DZXJBdXRfMjAxMC0w
# Ni0yMy5jcmwwWgYIKwYBBQUHAQEETjBMMEoGCCsGAQUFBzAChj5odHRwOi8vd3d3
# Lm1pY3Jvc29mdC5jb20vcGtpL2NlcnRzL01pY1Jvb0NlckF1dF8yMDEwLTA2LTIz
# LmNydDANBgkqhkiG9w0BAQsFAAOCAgEAnVV9/Cqt4SwfZwExJFvhnnJL/Klv6lwU
# tj5OR2R4sQaTlz0xM7U518JxNj/aZGx80HU5bbsPMeTCj/ts0aGUGCLu6WZnOlNN
# 3Zi6th542DYunKmCVgADsAW+iehp4LoJ7nvfam++Kctu2D9IdQHZGN5tggz1bSNU
# 5HhTdSRXud2f8449xvNo32X2pFaq95W2KFUn0CS9QKC/GbYSEhFdPSfgQJY4rPf5
# KYnDvBewVIVCs/wMnosZiefwC2qBwoEZQhlSdYo2wh3DYXMuLGt7bj8sCXgU6ZGy
# qVvfSaN0DLzskYDSPeZKPmY7T7uG+jIa2Zb0j/aRAfbOxnT99kxybxCrdTDFNLB6
# 2FD+CljdQDzHVG2dY3RILLFORy3BFARxv2T5JL5zbcqOCb2zAVdJVGTZc9d/HltE
# AY5aGZFrDZ+kKNxnGSgkujhLmm77IVRrakURR6nxt67I6IleT53S0Ex2tVdUCbFp
# AUR+fKFhbHP+CrvsQWY9af3LwUFJfn6Tvsv4O+S3Fb+0zj6lMVGEvL8CwYKiexcd
# FYmNcP7ntdAoGokLjzbaukz5m/8K6TT4JDVnK+ANuOaMmdbhIurwJ0I9JZTmdHRb
# atGePu1+oDEzfbzL6Xu/OHBE0ZDxyKs6ijoIYn/ZcGNTTY3ugm2lBRDBcQZqELQd
# VTNYs6FwZvKhggNWMIICPgIBATCCAQGhgdmkgdYwgdMxCzAJBgNVBAYTAlVTMRMw
# EQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVN
# aWNyb3NvZnQgQ29ycG9yYXRpb24xLTArBgNVBAsTJE1pY3Jvc29mdCBJcmVsYW5k
# IE9wZXJhdGlvbnMgTGltaXRlZDEnMCUGA1UECxMeblNoaWVsZCBUU1MgRVNOOjM2
# MDUtMDVFMC1EOTQ3MSUwIwYDVQQDExxNaWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2
# aWNloiMKAQEwBwYFKw4DAhoDFQCGoNdOig0Ick25UjQs1aFsUaf+M6CBgzCBgKR+
# MHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdS
# ZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMT
# HU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwMA0GCSqGSIb3DQEBCwUAAgUA
# 7p/g5DAiGA8yMDI2MTExMjA2NTMyNFoYDzIwMjYxMTEzMDY1MzI0WjB0MDoGCisG
# AQQBhFkKBAExLDAqMAoCBQDun+DkAgEAMAcCAQACAgGDMAcCAQACAhJgMAoCBQDu
# oTJkAgEAMDYGCisGAQQBhFkKBAIxKDAmMAwGCisGAQQBhFkKAwKgCjAIAgEAAgMH
# oSChCjAIAgEAAgMBhqAwDQYJKoZIhvcNAQELBQADggEBAGIoySviXm+hHlG8YOv8
# SiAH9SZJKLNoAPh4EpiCkvmYNbOIxBBKZesQ+MlGfU57Qav4RRNzTbbordlUQBSY
# fwNEIRj3g6fKIaPgVgNPypsI9YMHafNijLeordhKA6CoBEnLs8CAOiD5gGgY7WTK
# yc+sCRuoi6SKwTkBRvQdrlhARqOvnlHF0c7l05+I3vyDJcRn5h2KaHsuGkd/yZQb
# Ua1pCBb4o4olgodTZIkoymcl5+DYssqF7g2ylLWtN1tjsNA04V5SvoafJnUWg++i
# Rt2MQi67kG4h7tA9lpEUZTr4B4+GgapjFvM86OF63lHu4kPIdr6JKyi43zaSTrky
# tJcxggQNMIIECQIBATCBkzB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGlu
# Z3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBv
# cmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMAIT
# MwAAAjFWl5nV8YAHQwABAAACMTANBglghkgBZQMEAgEFAKCCAUowGgYJKoZIhvcN
# AQkDMQ0GCyqGSIb3DQEJEAEEMC8GCSqGSIb3DQEJBDEiBCCuJx70SPR/dq8YmD/X
# iepk0hML+3uf9dGi9hihLY/lWTCB+gYLKoZIhvcNAQkQAi8xgeowgecwgeQwgb0E
# IO1pHuFNVxpfihMWqys8thOBeJqfSgEdvbl6j4L1dYxOMIGYMIGApH4wfDELMAkG
# A1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQx
# HjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9z
# b2Z0IFRpbWUtU3RhbXAgUENBIDIwMTACEzMAAAIxVpeZ1fGAB0MAAQAAAjEwIgQg
# iYlMDockIzlm72Aey15LJDe9DMEA4fqaMMSBAqmE+kMwDQYJKoZIhvcNAQELBQAE
# ggIAcgQBxAfYzn6/tYPOdCLjAoWlP/UpCIzW7tBrO5sQaWvD/5jvqVfuyPLbtCPu
# fgpToBfuZ1PitZAa4aWrGgLJX1688uStB9GQgpTx5qNc9lXMcAS1ok/z91er8EMZ
# ociH+F1LQ9AeJQDOUy5MICjbR018+P/tv7Afi8kZCHKOFt0R16yVzoLHRqNCaYXR
# MFu8x93aDBBQ05LLBXG3sK4eX2QP56bNexJCfCq+wt7cbR/4dd54kOxqg/ryZo8F
# tjR2QLN8hbd7YbEKvlvrAl5sopH7E3m1pjykfszIMYbNlZO7Mgqh5G0RKqM34fCJ
# f8yBdSmBiJviA60dlyBQqT2+YJ5s3S7gAVoya6GCVtAdQE3EXucKB3GYVwNvWU0v
# w5IxcmMdkM9uM2Gphq0IzSMUoEbv8o0KbqzrHbHdTI5gJUNqBxZ/I2OqdRJ7rqL7
# wkyfFqQCjMfa8nFIv537YIR6yd5mgar1BjIXqQu+c7+WugqKsB8DyOEXfWBIEYe3
# 2OBMMmAnmJJHfDSg3V7PyWn+25W0p+A0HwAFbTHEEuP3vcB97OgmWp9aTn/k/+F3
# ffGjrK0gwdzOa+0cG9DY3bWBUv/BL+PhFrkwuWLVxZK7ffUDLgf+KbArRG3KeWMj
# dq47rltSYRZYgKhrUYQvG4/g8PIFnxghto+kVHQtn4j43N0=
# SIG # End signature block