Private/AzStackHci.VMCheckpointHealth.Policy.ps1

Set-StrictMode -Version 1.0

function Get-CheckpointHealthDefaultPolicy {
    [OutputType([pscustomobject])]
    param()

    [pscustomobject]@{
        SchemaVersion = 1
        Source = 'BuiltInDefaults'
        Storage = [pscustomobject]@{
            ImageLibraryPathPatterns = @(
                '(?i)[\\/](?:image|images|imagestore|template|templates|library|gallery|golden)(?:[\\/]|$)'
            )
        }
        Orphan = [pscustomobject]@{
            LiveMountPathPatterns = @('(?i)rubriklivemount', '(?i)_temp_')
            ClassifyZeroByteAsLiveMount = $true
        }
        CsvFreeSpace = [pscustomobject]@{
            Enabled = $false
            MinimumFreePercent = 15.0
            MinimumFreeGB = 100.0
        }
        Replication = [pscustomobject]@{
            Hrl = [pscustomobject]@{
                Enabled = $true
                CadenceMultiplier = 10.0
                MinimumStaleMinutes = 15.0
                RequireReplicationConcern = $true
            }
        }
    }
}
function Get-CheckpointHealthPolicyProperty {
    param(
        [AllowNull()]$Object,
        [Parameter(Mandatory)][string]$Name
    )
    if ($null -eq $Object) { return [pscustomobject]@{ Exists = $false; Value = $null } }
    if ($Object -is [System.Collections.IDictionary]) {
        foreach ($key in $Object.Keys) {
            if (([string]$key).Equals($Name, [StringComparison]::OrdinalIgnoreCase)) {
                return [pscustomobject]@{ Exists = $true; Value = $Object[$key] }
            }
        }
        return [pscustomobject]@{ Exists = $false; Value = $null }
    }
    $property = $Object.PSObject.Properties[$Name]
    if ($property) { return [pscustomobject]@{ Exists = $true; Value = $property.Value } }
    return [pscustomobject]@{ Exists = $false; Value = $null }
}

function Test-CheckpointHealthRegexPatterns {
    param([string[]]$Patterns, [string]$PropertyName)
    foreach ($pattern in @($Patterns)) {
        if ([string]::IsNullOrWhiteSpace($pattern)) { throw "$PropertyName cannot contain an empty pattern." }
        try { [void][regex]::new($pattern) }
        catch { throw "Invalid regular expression in $PropertyName ('$pattern'): $($_.Exception.Message)" }
    }
}

function ConvertFrom-CheckpointHealthPolicyYaml {
    [OutputType([System.Collections.IDictionary])]
    param([Parameter(Mandatory)][AllowEmptyString()][string]$Yaml)

    $parsed = [ordered]@{}
    $context = [System.Collections.Generic.List[object]]::new()
    $lines = $Yaml -split "`r?`n"
    for ($lineNumber = 1; $lineNumber -le $lines.Count; $lineNumber++) {
        $line = $lines[$lineNumber - 1]
        if ([string]::IsNullOrWhiteSpace($line) -or $line -match '^\s*#') { continue }
        if ($line -match "`t") { throw "Policy YAML line $lineNumber contains a tab. Use spaces for indentation." }
        $indent = $line.Length - $line.TrimStart(' ').Length
        $content = $line.Trim()

        while ($context.Count -gt 0 -and [int]$context[$context.Count - 1].Indent -ge $indent) {
            $context.RemoveAt($context.Count - 1)
        }

        if ($content -match '^\-\s+(.+)$') {
            $path = @($context | ForEach-Object Name) -join '.'
            if ($path -notin @('storage.imageLibraryPathPatterns', 'orphan.liveMountPathPatterns')) {
                throw "Unsupported policy YAML list at line $lineNumber."
            }
            $listValue = $Matches[1].Trim()
            if ($listValue -notmatch "^'(.*)'$") {
                throw "Policy YAML list value at line $lineNumber must be single-quoted."
            }
            $listValue = $Matches[1] -replace "''", "'"
            if ($path -eq 'storage.imageLibraryPathPatterns') {
                $parsed.storage.imageLibraryPathPatterns = @($parsed.storage.imageLibraryPathPatterns) + @($listValue)
            } else {
                $parsed.orphan.liveMountPathPatterns = @($parsed.orphan.liveMountPathPatterns) + @($listValue)
            }
            continue
        }

        if ($content -notmatch '^([A-Za-z][A-Za-z0-9]*):(?:\s*(.*))?$') {
            throw "Unsupported policy YAML syntax at line $lineNumber."
        }
        $name = $Matches[1]
        $valueText = $Matches[2].Trim()
        $parentPath = @($context | ForEach-Object Name) -join '.'
        $path = (@($parentPath, $name) | Where-Object { $_ }) -join '.'
        if ($valueText -eq '') {
            if ($path -notin @('storage', 'orphan', 'csvFreeSpace', 'replication', 'replication.hrl', 'storage.imageLibraryPathPatterns', 'orphan.liveMountPathPatterns')) {
                throw "Unsupported policy YAML property '$path' at line $lineNumber."
            }
            switch ($path) {
                'storage' { $parsed.storage = [ordered]@{} }
                'orphan' { $parsed.orphan = [ordered]@{} }
                'csvFreeSpace' { $parsed.csvFreeSpace = [ordered]@{} }
                'replication' { $parsed.replication = [ordered]@{} }
                'replication.hrl' { $parsed.replication.hrl = [ordered]@{} }
                'storage.imageLibraryPathPatterns' { $parsed.storage.imageLibraryPathPatterns = @() }
                'orphan.liveMountPathPatterns' { $parsed.orphan.liveMountPathPatterns = @() }
            }
            [void]$context.Add([pscustomobject]@{ Indent = $indent; Name = $name })
            continue
        }

        $value = if ($valueText -eq '[]') { @() }
            elseif ($valueText -match '^(?i:true|false)$') { [bool]::Parse($valueText) }
            elseif ($valueText -match '^-?\d+(?:\.\d+)?$') { [double]::Parse($valueText, [Globalization.CultureInfo]::InvariantCulture) }
            elseif ($valueText -match "^'(.*)'$") { $Matches[1] -replace "''", "'" }
            else { throw "Unsupported policy YAML value at line $lineNumber. Use a boolean, number, [], or single-quoted string." }

        switch ($path) {
            'schemaVersion' { $parsed.schemaVersion = $value }
            'storage.imageLibraryPathPatterns' { $parsed.storage.imageLibraryPathPatterns = @($value) }
            'orphan.liveMountPathPatterns' { $parsed.orphan.liveMountPathPatterns = @($value) }
            'orphan.classifyZeroByteAsLiveMount' { $parsed.orphan.classifyZeroByteAsLiveMount = $value }
            'csvFreeSpace.enabled' { $parsed.csvFreeSpace.enabled = $value }
            'csvFreeSpace.minimumFreePercent' { $parsed.csvFreeSpace.minimumFreePercent = $value }
            'csvFreeSpace.minimumFreeGB' { $parsed.csvFreeSpace.minimumFreeGB = $value }
            'replication.hrl.enabled' { $parsed.replication.hrl.enabled = $value }
            'replication.hrl.cadenceMultiplier' { $parsed.replication.hrl.cadenceMultiplier = $value }
            'replication.hrl.minimumStaleMinutes' { $parsed.replication.hrl.minimumStaleMinutes = $value }
            'replication.hrl.requireReplicationConcern' { $parsed.replication.hrl.requireReplicationConcern = $value }
            default { throw "Unsupported policy YAML property '$path' at line $lineNumber." }
        }
    }
    return $parsed
}

function Import-CheckpointHealthPolicy {
    [CmdletBinding()]
    [OutputType([pscustomobject])]
    param([Parameter(Mandatory)][ValidateNotNullOrEmpty()][string]$Path)

    if (-not (Test-Path -LiteralPath $Path -PathType Leaf)) { throw "Policy file was not found: $Path" }
    $rawText = Get-Content -LiteralPath $Path -Raw -ErrorAction Stop
    if ([string]::IsNullOrWhiteSpace($rawText)) { throw 'The policy file is empty.' }
    $raw = ConvertFrom-CheckpointHealthPolicyYaml -Yaml $rawText

    $schemaProperty = Get-CheckpointHealthPolicyProperty -Object $raw -Name 'schemaVersion'
    if (-not $schemaProperty.Exists -or [int]$schemaProperty.Value -ne 1) {
        throw "Unsupported policy schemaVersion '$($schemaProperty.Value)'. This module supports schemaVersion 1."
    }

    $policy = Get-CheckpointHealthDefaultPolicy
    $policy.Source = [System.IO.Path]::GetFullPath($Path)
    $property = Get-CheckpointHealthPolicyProperty -Object $raw -Name 'storage'
    $storage = if ($property.Exists) { $property.Value } else { $null }
    $property = Get-CheckpointHealthPolicyProperty -Object $raw -Name 'orphan'
    $orphan = if ($property.Exists) { $property.Value } else { $null }
    $property = Get-CheckpointHealthPolicyProperty -Object $raw -Name 'csvFreeSpace'
    $csv = if ($property.Exists) { $property.Value } else { $null }
    $property = Get-CheckpointHealthPolicyProperty -Object $raw -Name 'replication'
    $replication = if ($property.Exists) { $property.Value } else { $null }
    $property = Get-CheckpointHealthPolicyProperty -Object $replication -Name 'hrl'
    $hrl = if ($property.Exists) { $property.Value } else { $null }

    $property = Get-CheckpointHealthPolicyProperty -Object $storage -Name 'imageLibraryPathPatterns'
    if ($property.Exists) { $policy.Storage.ImageLibraryPathPatterns = @($property.Value | ForEach-Object { [string]$_ }) }
    $property = Get-CheckpointHealthPolicyProperty -Object $orphan -Name 'liveMountPathPatterns'
    if ($property.Exists) { $policy.Orphan.LiveMountPathPatterns = @($property.Value | ForEach-Object { [string]$_ }) }
    $property = Get-CheckpointHealthPolicyProperty -Object $orphan -Name 'classifyZeroByteAsLiveMount'
    if ($property.Exists) { $policy.Orphan.ClassifyZeroByteAsLiveMount = [bool]$property.Value }
    $property = Get-CheckpointHealthPolicyProperty -Object $csv -Name 'enabled'
    if ($property.Exists) { $policy.CsvFreeSpace.Enabled = [bool]$property.Value }
    $property = Get-CheckpointHealthPolicyProperty -Object $csv -Name 'minimumFreePercent'
    if ($property.Exists) { $policy.CsvFreeSpace.MinimumFreePercent = [double]$property.Value }
    $property = Get-CheckpointHealthPolicyProperty -Object $csv -Name 'minimumFreeGB'
    if ($property.Exists) { $policy.CsvFreeSpace.MinimumFreeGB = [double]$property.Value }
    $property = Get-CheckpointHealthPolicyProperty -Object $hrl -Name 'enabled'
    if ($property.Exists) { $policy.Replication.Hrl.Enabled = [bool]$property.Value }
    $property = Get-CheckpointHealthPolicyProperty -Object $hrl -Name 'cadenceMultiplier'
    if ($property.Exists) { $policy.Replication.Hrl.CadenceMultiplier = [double]$property.Value }
    $property = Get-CheckpointHealthPolicyProperty -Object $hrl -Name 'minimumStaleMinutes'
    if ($property.Exists) { $policy.Replication.Hrl.MinimumStaleMinutes = [double]$property.Value }
    $property = Get-CheckpointHealthPolicyProperty -Object $hrl -Name 'requireReplicationConcern'
    if ($property.Exists) { $policy.Replication.Hrl.RequireReplicationConcern = [bool]$property.Value }

    if ($policy.CsvFreeSpace.MinimumFreePercent -lt 0 -or $policy.CsvFreeSpace.MinimumFreePercent -gt 100) { throw 'csvFreeSpace.minimumFreePercent must be between 0 and 100.' }
    if ($policy.CsvFreeSpace.MinimumFreeGB -lt 0) { throw 'csvFreeSpace.minimumFreeGB must be zero or greater.' }
    if ($policy.Replication.Hrl.CadenceMultiplier -lt 1) { throw 'replication.hrl.cadenceMultiplier must be at least 1.' }
    if ($policy.Replication.Hrl.MinimumStaleMinutes -lt 1) { throw 'replication.hrl.minimumStaleMinutes must be at least 1.' }
    Test-CheckpointHealthRegexPatterns -Patterns $policy.Storage.ImageLibraryPathPatterns -PropertyName 'storage.imageLibraryPathPatterns'
    Test-CheckpointHealthRegexPatterns -Patterns $policy.Orphan.LiveMountPathPatterns -PropertyName 'orphan.liveMountPathPatterns'
    return $policy
}

function Test-CheckpointHealthPathPattern {
    [OutputType([bool])]
    param([AllowEmptyString()][string]$Path, [string[]]$Patterns = @())
    foreach ($pattern in @($Patterns)) { if ($Path -match $pattern) { return $true } }
    return $false
}

function Get-CsvFreeSpaceAssessment {
    [OutputType([pscustomobject])]
    param(
        [object[]]$Volumes = @(),
        [Parameter(Mandatory)]$Policy
    )
    $breaches = @($Volumes | Where-Object {
        ([double]$_.FreePct -lt [double]$Policy.MinimumFreePercent) -or
        ([double]$_.FreeGB -lt [double]$Policy.MinimumFreeGB)
    })
    [pscustomobject]@{
        Enabled = [bool]$Policy.Enabled
        IsConcern = ([bool]$Policy.Enabled -and $breaches.Count -gt 0)
        MinimumFreePercent = [double]$Policy.MinimumFreePercent
        MinimumFreeGB = [double]$Policy.MinimumFreeGB
        Breaches = $breaches
    }
}

function Get-HrlCadenceAssessment {
    [OutputType([pscustomobject])]
    param(
        [object[]]$Files = @(),
        [bool]$ReplicationEnabled,
        [double]$FrequencySeconds,
        [bool]$ReplicationConcern,
        [Parameter(Mandatory)]$Policy,
        [datetime]$NowUtc = [datetime]::UtcNow
    )
    $cadenceMinutes = if ($FrequencySeconds -gt 0) { $FrequencySeconds / 60.0 } else { 0.0 }
    $thresholdMinutes = [math]::Max([double]$Policy.MinimumStaleMinutes, ($cadenceMinutes * [double]$Policy.CadenceMultiplier))
    $rows = @($Files | ForEach-Object {
        $ageMinutes = if ($_.LastWriteTimeUtc) { ($NowUtc.ToUniversalTime() - ([datetime]$_.LastWriteTimeUtc).ToUniversalTime()).TotalMinutes } else { $null }
        [pscustomobject]@{
            Name = [string]$_.Name
            FullName = [string]$_.FullName
            Length = [long]$_.Length
            LastWriteTimeUtc = $_.LastWriteTimeUtc
            AgeMinutes = $ageMinutes
            ExceedsCadence = ($null -ne $ageMinutes -and $ageMinutes -ge $thresholdMinutes)
        }
    })
    $staleRows = @($rows | Where-Object ExceedsCadence)
    $corroborated = (-not [bool]$Policy.RequireReplicationConcern) -or $ReplicationConcern
    [pscustomobject]@{
        Enabled = [bool]$Policy.Enabled
        ReplicationEnabled = $ReplicationEnabled
        CadenceMinutes = $cadenceMinutes
        ThresholdMinutes = $thresholdMinutes
        ExceedsCadenceCount = $staleRows.Count
        IsConcern = ([bool]$Policy.Enabled -and $ReplicationEnabled -and $staleRows.Count -gt 0 -and $corroborated)
        CorroboratedByReplication = [bool]($ReplicationConcern -and $staleRows.Count -gt 0)
        Rows = $rows
    }
}

# SIG # Begin signature block
# MIInNwYJKoZIhvcNAQcCoIInKDCCJyQCAQExDzANBglghkgBZQMEAgEFADB5Bgor
# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG
# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCAtM/aRKl5pr79a
# phWjhZSdlVrrklw5nVp3eDm0TwrgcaCCDMkwggYEMIID7KADAgECAhMzAAACHPrN
# xZvoL37EAAAAAAIcMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMR4wHAYD
# VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBD
# b2RlIFNpZ25pbmcgUENBIDIwMjQwHhcNMjYwNDE2MTg1OTQxWhcNMjcwNDE1MTg1
# OTQxWjB0MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE
# BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYD
# VQQDExVNaWNyb3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IB
# DwAwggEKAoIBAQDVsZfgOKmM31HPfoWOoNEiw0SlCiIxUMC0I9NMWbucKOw/e9lP
# oAoehQVu6SG65V4EPzrYsnBnFPNoi4/HoOdjhz1qkrEt4I6tEcxXU6oOeY9zGveC
# /3iBeuhLYxM3M/PkcUoebF+Nednm8OkdSPoDu8imViHPQq/8CQUu0WRR4rE+dMRf
# rpVqfmNi2qWCX94T4MsepijGVkwE//tJg0ryAiYdHT34LSnlG/RSBZmQRGWZ5g8j
# qnKjRParSqMft1gvjuUTVgtWNZfgcLFSK5Wa0myrq8OPcgTGGsRgun+tnSS+IxDT
# xVsAPH1OzvPjwomguByhUe/OcvUN0D5Wmp7xAgMBAAGjggGqMIIBpjAOBgNVHQ8B
# Af8EBAMCB4AwHwYDVR0lBBgwFgYKKwYBBAGCN0wIAQYIKwYBBQUHAwMwHQYDVR0O
# BBYEFNoH7a2YDjOSwpkp6DHcmUS7J+0yMFQGA1UdEQRNMEukSTBHMS0wKwYDVQQL
# EyRNaWNyb3NvZnQgSXJlbGFuZCBPcGVyYXRpb25zIExpbWl0ZWQxFjAUBgNVBAUT
# DTIzMDAxMis1MDc1NjkwHwYDVR0jBBgwFoAUf1k/VCHarU/vBeXmo9ctBpQSCDEw
# YAYDVR0fBFkwVzBVoFOgUYZPaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9w
# cy9jcmwvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNy
# bDBtBggrBgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUWh0dHA6Ly93d3cubWljcm9z
# b2Z0LmNvbS9wa2lvcHMvY2VydHMvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmcl
# MjBQQ0ElMjAyMDI0LmNydDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4IC
# AQAUnEqhaRXe0T3hIJjvdQErEkrA/7bByjn6t5IArODkkRjzkYwtKMc2yYj2quaN
# rLutWw2YZcngKPy1b71YyDJQTy4NDRwaSh9Tw5thrk3NmcPrAHia5vtcBJ1CgtKK
# 7mQbIcQ22d/N3813ayCDDFewu1+jsZmX+r/aTEqaOM4TVxVtRSkuCy8nAXKuChOK
# Li/zA4XuH8iEYqIsj2YoNaeSxVmeGiERXpKdo3dDmYi0kO5w2D8VS4c3+9h6gElY
# BaAAg/dYErBg27qT3vv0zRDJhJufvCNylA8S7/+8H5E/PV5cng6na9VV/w9OV3qu
# uND6zdGa2EX38Glp50F9AIQk3p2xXmcvorDeM4XJ7UlWYBi6g80J1SSOQnInCYFE
# msfUNn3+1AaTJKSJL83quKArTac2pKhu0Yzzzrzo6HrsRiQKzpnRBb1/dMa6P3hz
# 75XbMRBctNsFhZC07WCmjExdLg2eHW5uV0TY8D5+6wozJf7vF3+WHkYPO85Z+BC6
# U4FkNbYNycZ9cE4j1tXRdyDCfml6c0HWPHjNVDObrv9lKt3qUqFpX38VCqVCyNOO
# 1UcXfQiVjJw32U2WUKZjt/neJKHEBsm9kFsLuWzkQ53+qcaSaytmsCnk2gOglrlD
# 5d3kKyvvAw+rzm0lT8K38P6PLxfZQHhu4W8dV7Av8N2ZmDCCBr0wggSloAMCAQIC
# EzMAAAA5O7Y3Gb8GHWcAAAAAADkwDQYJKoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYT
# AlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYD
# VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBS
# b290IENlcnRpZmljYXRlIEF1dGhvcml0eSAyMDExMB4XDTI0MDgwODIwNTQxOFoX
# DTM2MDMyMjIyMTMwNFowVzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFU1pY3Jvc29m
# dCBDb3Jwb3JhdGlvbjEoMCYGA1UEAxMfTWljcm9zb2Z0IENvZGUgU2lnbmluZyBQ
# Q0EgMjAyNDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANgBnB7jOMeq
# lRYHNa265v4IY9fH8TKhemHfPINe1gpLaV3dhg324WwH06LcHbpnsBukCDNitryo
# 0dtS/EW6I/yEL/bLSY8hKpbfQuWusBPr9qazYcDxCW/qnjb5JsI1s8bNOg3bVATv
# QVL4tcf03aTycsz8QeCdM0l/yHRObJ9QqazM1r6VPEOJ7LL+uEEb73w6QCuhs89a
# 1uv1zerOYMnsneRRwCbpyW11IcggU0cRKDDq1pjVJzIbIF6+oiXXbReOsgeI8zu1
# FyQfK0fVkaya8SmVHQ/tOf23mZ4W9k0Ri22QW9p3UgSC5OUDktKxxcCmGL6tXLfO
# GSWHIIV4YrTJTT6PNty5REojHJuZHArkF9VnHTERWoTjAzfI3kP+5b4alUdhgAZ7
# ttOu1bVnXfHaqPYl2rPs20ji03LOVWsh/radgE17es5hL+t6lV0eVHrVhsssROWJ
# uz2MXMCt7iw7lFPG9LXKGjsmonn2gotGdHIuEg5JnJMJVmixd5LRlkmgYRZKzhxS
# CwyoGIq0PhaA7Y+VPct5pCHkijcIIDm0nlkK+0KyepolcqGm0T/GYQRMhHJlGOOm
# VQop36wUVUYklUy++vDWeEgEo4s7hxN6mIbf2MSIQ/iIfMZgJxC69oukMUXCrOC3
# SkE/xIkgpfl22MM1itkZ35nNXkMolU1lAgMBAAGjggFOMIIBSjAOBgNVHQ8BAf8E
# BAMCAYYwEAYJKwYBBAGCNxUBBAMCAQAwHQYDVR0OBBYEFH9ZP1Qh2q1P7wXl5qPX
# LQaUEggxMBkGCSsGAQQBgjcUAgQMHgoAUwB1AGIAQwBBMA8GA1UdEwEB/wQFMAMB
# Af8wHwYDVR0jBBgwFoAUci06AjGQQ7kUBU7h6qfHMdEjiTQwWgYDVR0fBFMwUTBP
# oE2gS4ZJaHR0cDovL2NybC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMv
# TWljUm9vQ2VyQXV0MjAxMV8yMDExXzAzXzIyLmNybDBeBggrBgEFBQcBAQRSMFAw
# TgYIKwYBBQUHMAKGQmh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvY2VydHMv
# TWljUm9vQ2VyQXV0MjAxMV8yMDExXzAzXzIyLmNydDANBgkqhkiG9w0BAQwFAAOC
# AgEAFJQfOChP7onn6fLIMKrSlN1WYKwDFgAddymOUO3FrM8d7B/W/iQ6DxXsDn7D
# 5W4wMwYeLystcEqfkjz4NURRgazyMu5yRzQh4LqjA4tStTcJh1opExo7nn5PuPBY
# nbu0+THSuVHTe0VTTPVhily/piFrDo3axQ9P4C+Ol5yet+2gTfekICS5xS+cYfSI
# vgn0JksVBVMYVI5QFu/qhnLhsEFEUzG8fvv0hjgkO+lkpV9ty6GkN4vdnd7ya6Q6
# aR9y34aiM1qmxaxBi6OUnyNl6fkuun/diTFnYDLTppOkr/mg5WSfCiDVMNCxtj4w
# PKC5OmHm1DQIt/MNokbbH3UGsFP1QbzsLocuSqLCvH09Io3fDPTmscR9Y75G4qX7
# RTX8AdBPo0I6OEojf39zuFZt0qOHm65YWQE69cZM2ueE1MB05dNNgHK9gTE7zKvK
# /fg8B2qjW88MT/WF5V5uvZGtqa9FSL2RazArA+rDPuf6JGYz4HpgMZHB4S6szWSK
# YBv0VisCzfxgeU+dquXW9bd0auYlOB58DPcOYKdc3Se94g+xL4pcEhbB54JOgAkw
# YTu/9dLeH2pDqeJZAABVDWRQCaXfO5LgyKwKCLYXpigrZYCjUSBcr+Ve8PFWMhVT
# Ql0v4q8J/AUmQN5W4n101cY2L4A7GTQG1h32HHAvfQESWP0xghnEMIIZwAIBATBu
# MFcxCzAJBgNVBAYTAlVTMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24x
# KDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMjQCEzMAAAIc
# +s3Fm+gvfsQAAAAAAhwwDQYJYIZIAWUDBAIBBQCggZAwGQYJKoZIhvcNAQkDMQwG
# CisGAQQBgjcCAQQwLwYJKoZIhvcNAQkEMSIEIFEJRRuFcHPuefXLQgnYCMikOZP6
# biIgrDFAjSnxQPehMEIGCisGAQQBgjcCAQwxNDAyoBSAEgBNAGkAYwByAG8AcwBv
# AGYAdKEagBhodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20wDQYJKoZIhvcNAQEBBQAE
# ggEACCcbBum5m2He2H/BOhjdpUpnV7mzMocmlqppk9iHj0wxHT17T1V/uDhEpreS
# iZUyp7vUtb73IyHo09F8EJ1AYn98fMyIo8p/RcggED3mpDH4abMJonJEMce1YR2d
# enm/+qL1rvxSTUp1oAbCYUHPUUaKvBS+IlwhiPBySzuO3gyewqrGll6gmjIu5XEa
# V2uQkKKw1dkPnq78YDrmLaeOc1A+SXddA3ZikFSLZKGI1q2nscGGp0QgGZkjBw8w
# 4gf2QhhbGvOsmUL6Kumwy6bbfGMwX4xExnmrd8To1sPm2qSdiQsR3CvJD7ULXRJH
# gRhlgBeDCluyzXu09+vYpu/6dKGCF5QwgheQBgorBgEEAYI3AwMBMYIXgDCCF3wG
# CSqGSIb3DQEHAqCCF20wghdpAgEDMQ8wDQYJYIZIAWUDBAIBBQAwggFSBgsqhkiG
# 9w0BCRABBKCCAUEEggE9MIIBOQIBAQYKKwYBBAGEWQoDATAxMA0GCWCGSAFlAwQC
# AQUABCAwZL8+bFfLbt3CTV46fIgqiOJUP0ApV/k5zAOKqzMz3gIGaoSTP7P1GBMy
# MDI2MDgyODE0NTUzMy45MTZaMASAAgH0oIHRpIHOMIHLMQswCQYDVQQGEwJVUzET
# MBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMV
# TWljcm9zb2Z0IENvcnBvcmF0aW9uMSUwIwYDVQQLExxNaWNyb3NvZnQgQW1lcmlj
# YSBPcGVyYXRpb25zMScwJQYDVQQLEx5uU2hpZWxkIFRTUyBFU046QTAwMC0wNUUw
# LUQ5NDcxJTAjBgNVBAMTHE1pY3Jvc29mdCBUaW1lLVN0YW1wIFNlcnZpY2WgghHq
# MIIHIDCCBQigAwIBAgITMwAAAiu7AFD/TTuaoQABAAACKzANBgkqhkiG9w0BAQsF
# ADB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMH
# UmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQD
# Ex1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMDAeFw0yNjAyMTkxOTQwMTFa
# Fw0yNzA1MTcxOTQwMTFaMIHLMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGlu
# Z3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBv
# cmF0aW9uMSUwIwYDVQQLExxNaWNyb3NvZnQgQW1lcmljYSBPcGVyYXRpb25zMScw
# JQYDVQQLEx5uU2hpZWxkIFRTUyBFU046QTAwMC0wNUUwLUQ5NDcxJTAjBgNVBAMT
# HE1pY3Jvc29mdCBUaW1lLVN0YW1wIFNlcnZpY2UwggIiMA0GCSqGSIb3DQEBAQUA
# A4ICDwAwggIKAoICAQCX3mi6OD3syUqQm4QqgkrKPbcsK/Qx3fYctL8+VM1uOY3b
# ooi5GxwauTgQf6JFHITToxS7gjqKlK8OFLzL6UTl0jxEK5t6DuOcgJXdvutimoTl
# OS0C3kyITXBAXoj/gp6hRR9z6WRip1Ktkilb3dJXCjQqT9P2Cuujr+Vz8r+Z+jDl
# 09ji/ic/4G34r3mVwjs//Gnx9Pu31V8rXFicNiAzxpubawpbd8pqfzlWT2vnG3kF
# 9l6MiREbvJ3XHLUwHQsh0t/TrSFx/s/yCqpJWYJ6oClG70tvsFH0aRP8wB4cP/CF
# a2ILvk26i3OcJBl+pqKjHTSBy9mvwTPEDlnzco0Nt8R6pSPTXZgBsscHhoKfC0WQ
# mOzY2keXbAmRTcZMyXz5v/AJbmoI0y07Bazvt5NkXddG9TErQWwtsFyIKrElDgWf
# HeCoTu1wu2ciD3dK72z3ca2gzoEDxT2j9BXIUKaiTzTdQPRsAMaO3dU0zaGwMMlw
# tSJyDh14YEgZoUu5vS8MugMqdrNjphyL65yKhjpAWbhYkIHO/0uZju95tP8zZNqX
# IRh4tdfWHJPATn9r+cxkyuh2x0VLdfx1lmK9X3NjH0NtgAs5JB/wOlkyuudxmFTf
# WVyRrL37ispOZ8aPAFgvyR6cNTkGpkFo35JRjciNmZiU4qT9Uty+V5gudFk1jwID
# AQABo4IBSTCCAUUwHQYDVR0OBBYEFD4WjuQTUJbtbd3jmvZku0FZ2eU2MB8GA1Ud
# IwQYMBaAFJ+nFV0AXmJdg/Tl0mWnG1M1GelyMF8GA1UdHwRYMFYwVKBSoFCGTmh0
# dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvY3JsL01pY3Jvc29mdCUyMFRp
# bWUtU3RhbXAlMjBQQ0ElMjAyMDEwKDEpLmNybDBsBggrBgEFBQcBAQRgMF4wXAYI
# KwYBBQUHMAKGUGh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvY2VydHMv
# TWljcm9zb2Z0JTIwVGltZS1TdGFtcCUyMFBDQSUyMDIwMTAoMSkuY3J0MAwGA1Ud
# EwEB/wQCMAAwFgYDVR0lAQH/BAwwCgYIKwYBBQUHAwgwDgYDVR0PAQH/BAQDAgeA
# MA0GCSqGSIb3DQEBCwUAA4ICAQDO/CKsciEM8kr1fqH4TlfT66ENoTjxXw810pyE
# q0PdrgLwfgT3x+1gz7CQHtUdevqMQ5qHyDLhm6pT911CYkGN+6g+MU7fMYTr6d3S
# xieJwBIoWkfR4g7SitGzMKU465KEYejfddoUgovC/xcRpaALO5p3/A248ByhJiMt
# tBQNDtsT/HaCFwRFCURby/f8c1kky8F8xkCXFz+/MtZ5d1lWFjwOI2geZHWq9Xih
# DOgee5nS2koo5V6n8XG220UTevVf+pgmpIH71XKDVIYTGGZJs6yPlfJ2aXqw1ME4
# NR6okNsY3P1M31H6DMYRfJGNBNep595kXGh3YzA3cCiyg+jmJ58h/fTvjngIpuUF
# fODpDjFx0ic1YoLANxhCF3RhS9qYM7K40NEhKshYuaAkIG2XBKYig3r/0/b0sjvj
# Bws55AYonMm3A8qcX/6k9Vfc0mv9dtonHuWGfA2b+qE2qpCnhzGbdDHq7iOSZEw0
# 1nNupAMf1c41k9IoTQ2z3iw6w4ZZoLOyg4TKMbp1krpT4trip/y30Cv5khyqCDNq
# aXQpBkOYON8LgtoQ3amVOX7ix5jdrnx/vUxTUSigXvrWdL7Uk8kpmS0zto2Toy7a
# T5oBzCTvfj9iJ/BN/E1vhFBkhJCvZ7PVvsMSnTTmkx2Fal2lVkztuAI44fD/uyLJ
# daMQSzCCB3EwggVZoAMCAQICEzMAAAAVxedrngKbSZkAAAAAABUwDQYJKoZIhvcN
# AQELBQAwgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYD
# VQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xMjAw
# BgNVBAMTKU1pY3Jvc29mdCBSb290IENlcnRpZmljYXRlIEF1dGhvcml0eSAyMDEw
# MB4XDTIxMDkzMDE4MjIyNVoXDTMwMDkzMDE4MzIyNVowfDELMAkGA1UEBhMCVVMx
# EzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoT
# FU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUt
# U3RhbXAgUENBIDIwMTAwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDk
# 4aZM57RyIQt5osvXJHm9DtWC0/3unAcH0qlsTnXIyjVX9gF/bErg4r25PhdgM/9c
# T8dm95VTcVrifkpa/rg2Z4VGIwy1jRPPdzLAEBjoYH1qUoNEt6aORmsHFPPFdvWG
# UNzBRMhxXFExN6AKOG6N7dcP2CZTfDlhAnrEqv1yaa8dq6z2Nr41JmTamDu6Gnsz
# rYBbfowQHJ1S/rboYiXcag/PXfT+jlPP1uyFVk3v3byNpOORj7I5LFGc6XBpDco2
# LXCOMcg1KL3jtIckw+DJj361VI/c+gVVmG1oO5pGve2krnopN6zL64NF50ZuyjLV
# wIYwXE8s4mKyzbnijYjklqwBSru+cakXW2dg3viSkR4dPf0gz3N9QZpGdc3EXzTd
# EonW/aUgfX782Z5F37ZyL9t9X4C626p+Nuw2TPYrbqgSUei/BQOj0XOmTTd0lBw0
# gg/wEPK3Rxjtp+iZfD9M269ewvPV2HM9Q07BMzlMjgK8QmguEOqEUUbi0b1qGFph
# AXPKZ6Je1yh2AuIzGHLXpyDwwvoSCtdjbwzJNmSLW6CmgyFdXzB0kZSU2LlQ+QuJ
# YfM2BjUYhEfb3BvR/bLUHMVr9lxSUV0S2yW6r1AFemzFER1y7435UsSFF5PAPBXb
# GjfHCBUYP3irRbb1Hode2o+eFnJpxq57t7c+auIurQIDAQABo4IB3TCCAdkwEgYJ
# KwYBBAGCNxUBBAUCAwEAATAjBgkrBgEEAYI3FQIEFgQUKqdS/mTEmr6CkTxGNSnP
# EP8vBO4wHQYDVR0OBBYEFJ+nFV0AXmJdg/Tl0mWnG1M1GelyMFwGA1UdIARVMFMw
# UQYMKwYBBAGCN0yDfQEBMEEwPwYIKwYBBQUHAgEWM2h0dHA6Ly93d3cubWljcm9z
# b2Z0LmNvbS9wa2lvcHMvRG9jcy9SZXBvc2l0b3J5Lmh0bTATBgNVHSUEDDAKBggr
# BgEFBQcDCDAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMAQTALBgNVHQ8EBAMCAYYw
# DwYDVR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBTV9lbLj+iiXGJo0T2UkFvXzpoY
# xDBWBgNVHR8ETzBNMEugSaBHhkVodHRwOi8vY3JsLm1pY3Jvc29mdC5jb20vcGtp
# L2NybC9wcm9kdWN0cy9NaWNSb29DZXJBdXRfMjAxMC0wNi0yMy5jcmwwWgYIKwYB
# BQUHAQEETjBMMEoGCCsGAQUFBzAChj5odHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20v
# cGtpL2NlcnRzL01pY1Jvb0NlckF1dF8yMDEwLTA2LTIzLmNydDANBgkqhkiG9w0B
# AQsFAAOCAgEAnVV9/Cqt4SwfZwExJFvhnnJL/Klv6lwUtj5OR2R4sQaTlz0xM7U5
# 18JxNj/aZGx80HU5bbsPMeTCj/ts0aGUGCLu6WZnOlNN3Zi6th542DYunKmCVgAD
# sAW+iehp4LoJ7nvfam++Kctu2D9IdQHZGN5tggz1bSNU5HhTdSRXud2f8449xvNo
# 32X2pFaq95W2KFUn0CS9QKC/GbYSEhFdPSfgQJY4rPf5KYnDvBewVIVCs/wMnosZ
# iefwC2qBwoEZQhlSdYo2wh3DYXMuLGt7bj8sCXgU6ZGyqVvfSaN0DLzskYDSPeZK
# PmY7T7uG+jIa2Zb0j/aRAfbOxnT99kxybxCrdTDFNLB62FD+CljdQDzHVG2dY3RI
# LLFORy3BFARxv2T5JL5zbcqOCb2zAVdJVGTZc9d/HltEAY5aGZFrDZ+kKNxnGSgk
# ujhLmm77IVRrakURR6nxt67I6IleT53S0Ex2tVdUCbFpAUR+fKFhbHP+CrvsQWY9
# af3LwUFJfn6Tvsv4O+S3Fb+0zj6lMVGEvL8CwYKiexcdFYmNcP7ntdAoGokLjzba
# ukz5m/8K6TT4JDVnK+ANuOaMmdbhIurwJ0I9JZTmdHRbatGePu1+oDEzfbzL6Xu/
# OHBE0ZDxyKs6ijoIYn/ZcGNTTY3ugm2lBRDBcQZqELQdVTNYs6FwZvKhggNNMIIC
# NQIBATCB+aGB0aSBzjCByzELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0
# b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3Jh
# dGlvbjElMCMGA1UECxMcTWljcm9zb2Z0IEFtZXJpY2EgT3BlcmF0aW9uczEnMCUG
# A1UECxMeblNoaWVsZCBUU1MgRVNOOkEwMDAtMDVFMC1EOTQ3MSUwIwYDVQQDExxN
# aWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2aWNloiMKAQEwBwYFKw4DAhoDFQAJrD90
# ykHpo/0AGb7lmwvsCtqROaCBgzCBgKR+MHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQI
# EwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3Nv
# ZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBD
# QSAyMDEwMA0GCSqGSIb3DQEBCwUAAgUA7juWTzAiGA8yMDI2MDgyODA1MDgzMVoY
# DzIwMjYwODI5MDUwODMxWjB0MDoGCisGAQQBhFkKBAExLDAqMAoCBQDuO5ZPAgEA
# MAcCAQACAhMXMAcCAQACAhOcMAoCBQDuPOfPAgEAMDYGCisGAQQBhFkKBAIxKDAm
# MAwGCisGAQQBhFkKAwKgCjAIAgEAAgMHoSChCjAIAgEAAgMBhqAwDQYJKoZIhvcN
# AQELBQADggEBAIv/Oi1vGioItk+sURZ0Y9r7tA3T88Xkfu+UPOQxvkWQBMa6tixI
# FkztnRKN+AEZFY0CV7puqvdo9v4Xa9P7QeY8cvoZv6M6osp6mcExkDieivkmkZV2
# ROAqkzCI913kZ9+VH0wnMs4jEjceqEiHrsRrv91z4dOSG7EGksHkUYxGgzDQt+P3
# BlC07U07NVAu7e3xXMBPE2dTIoP8+6y2sbMkSMifkoqC9K0nRR8TD2JcQ93F/TLE
# gZXqAntBY063Do/tRD85+8auFeecyrrdHa0eco05euax5D7eeX6c38hUE7DwVwDI
# evAqEJFsiNAULhwScf43ea2yHfu9PG+BGywxggQNMIIECQIBATCBkzB8MQswCQYD
# VQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEe
# MBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3Nv
# ZnQgVGltZS1TdGFtcCBQQ0EgMjAxMAITMwAAAiu7AFD/TTuaoQABAAACKzANBglg
# hkgBZQMEAgEFAKCCAUowGgYJKoZIhvcNAQkDMQ0GCyqGSIb3DQEJEAEEMC8GCSqG
# SIb3DQEJBDEiBCDrcsMaAYwxPsbps2qU9kqmYBcFAluqvdP85GTYgCzKZDCB+gYL
# KoZIhvcNAQkQAi8xgeowgecwgeQwgb0EIHIOI/Q/kFftYA+M2OY+1Bx3ajBD6/WD
# AtPT2vFkv25SMIGYMIGApH4wfDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hp
# bmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jw
# b3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTAC
# EzMAAAIruwBQ/007mqEAAQAAAiswIgQgOVBEZYOUzWc0Vldvrphi85u3LZwvqms8
# kNR9AJLzo6cwDQYJKoZIhvcNAQELBQAEggIAbgORAuNEvAo4TPaNivvA9BQAsXuH
# 5pY/r0weH+evbEz8BtpYHy4oPZce+V1f/F9bDU8CSQULsPYwaHsgrp4WyL5YSG07
# 0FbbRvH8Foj6CD6fo0NrvlnH7e2nrsYAEAqXNhGcqtuXx36w/LlgI7TWxbA61Jhx
# r4IryRZ+A7xCpA/VmQojFePccON4KlxDkjib1CqS+Z3nq+odKw9zlbpcUicS//oV
# sbLtdilKcSGkoDS56sJ3EBJIavZAky1KmHpmupF95e/4p/ZJVCpXWrpfVLwBZXLe
# 0wQWTLfOJ26RM4pPL8R3qy+tl+facP+JQTmhXMQS59VqTTePii9mL+XLTU8pdDcC
# 8xRoANGwCBGWe6EuIF0LCVB5jStqKXDUW3EUCmLmyDCWzbC2I9nZbpoi/LZNbXBg
# CmarcZbQ70aVppDJLghBcfCXOFlgg6fCTFXtYiJ82uH5X4IqZQTeWSIspqtW6A97
# MCBL1lsfG6Iv7p7MVJqiDT4XkIu341arjXkTF7owj2rFMJ9ptqaf3Ewd8uTEafuB
# 9P4lUUViGEbQoQG6tisBhFd11QPKdtXuIvtfM7K5PeMt2SIvayOYUN2svicn5qEd
# pC/7Ms2QvE8vW4tUA+JwcdTMWFm82aSrBh9fKH8VANBMNpPyTtPMizCDWFFw5iHw
# 5wSloiHX15VQIB4=
# SIG # End signature block