Microsoft.PowerPlatform.EnterprisePolicies

0.19.1

Private/CacheMethods.ps1

                                <#

SAMPLE CODE NOTICE

THIS SAMPLE CODE IS MADE AVAILABLE AS IS. MICROSOFT MAKES NO WARRANTIES, WHETHER EXPRESS OR IMPLIED,

OF FITNESS FOR A PARTICULAR PURPOSE, OF ACCURACY OR COMPLETENESS OF RESPONSES, OF RESULTS, OR CONDITIONS OF MERCHANTABILITY.

THE ENTIRE RISK OF THE USE OR THE RESULTS FROM THE USE OF THIS SAMPLE CODE REMAINS WITH THE USER.

NO TECHNICAL SUPPORT IS PROVIDED. YOU MAY NOT DISTRIBUTE THIS CODE UNLESS YOU HAVE A LICENSE AGREEMENT WITH MICROSOFT THAT ALLOWS YOU TO DO SO.

#>

$script:CachePath = Join-Path $([Environment]::GetFolderPath('LocalApplicationData')) 'Microsoft.PowerPlatform.EnterprisePolicies\config.json'

$script:CacheData = $null

$script:CurrentCacheVersion = "1.1"

function Get-EmptyCache{

    return [PSCustomObject]@{

        Version = $script:CurrentCacheVersion

        SubscriptionsValidated = @()

        RegionCache = [PSCustomObject]@{}

        RoleDefinitions = @{}

        AuthorizationServiceClientId = ""

        Configuration = [PSCustomObject]@{}

    }

}

function Update-CacheVersion{

    param(

        [Parameter(Mandatory)]

        [PSCustomObject]$Cache

    )

    while($Cache.Version -ne $script:CurrentCacheVersion){

        switch($Cache.Version){

            "1.0" {

                $Cache | Add-Member -NotePropertyName "RegionCache" -NotePropertyValue ([PSCustomObject]@{})

                $Cache.Version = "1.1"

                Write-Verbose "Upgraded cache from 1.0 to 1.1"

            }

            default {

                Write-Warning "Unknown cache version '$($Cache.Version)'. Resetting to empty cache."

                return Get-EmptyCache

            }

        }

    }

    return $Cache

}

function Initialize-Cache{

    if(-not(Test-Path -Path $script:CachePath)){

        Write-Verbose "Cache file not found. Initializing new cache."

        $script:CacheData = Get-EmptyCache

    }

    else{

        Write-Verbose "Loading cache from $script:CachePath"

        $content = Get-Content -Path $script:CachePath

        if([string]::IsNullOrWhiteSpace($content)){

            Write-Verbose "Cache file is empty. Initializing new cache."

            $script:CacheData = Get-EmptyCache

        }

        else{

            $script:CacheData = $content | ConvertFrom-Json

            $script:CacheData = Update-CacheVersion -Cache $script:CacheData

            foreach($key in $script:CacheData.RegionCache.PSObject.Properties.Name){

                $entry = $script:CacheData.RegionCache.$key

                if($entry.Expiry -is [string]){

                    $entry.Expiry = [DateTime]::Parse($entry.Expiry).ToUniversalTime()

                }

            }

        }

    }

}

function Save-Cache{

    if(-not(Test-Path -Path (Split-Path -Path $script:CachePath))){

        New-Item -ItemType Directory -Path (Split-Path -Path $script:CachePath) -Force | Out-Null

    }

    $script:CacheData | ConvertTo-Json -Depth 10 | Out-File -FilePath $script:CachePath -Force

}

function Test-SubscriptionValidated{

    param(

        [Parameter(Mandatory)]

        [ValidateNotNullOrEmpty()]

        [string]$SubscriptionId

    )

    return $script:CacheData.SubscriptionsValidated -contains $SubscriptionId

}

function Add-ValidatedSubscriptionToCache{

    param(

        [Parameter(Mandatory)]

        [ValidateNotNullOrEmpty()]

        [string]$SubscriptionId

    )

    if(-not($script:CacheData.SubscriptionsValidated -contains $SubscriptionId)){

        $script:CacheData.SubscriptionsValidated += $SubscriptionId

        Save-Cache

    }

}

function Get-CachedRoleDefinitions{

    param(

        [Parameter(Mandatory)]

        [ValidateNotNullOrEmpty()]

        [string]$Endpoint

    )

    # Ensure RoleDefinitions key exists (for caches created before this feature)

    if($null -eq $script:CacheData.RoleDefinitions){

        $script:CacheData | Add-Member -NotePropertyName "RoleDefinitions" -NotePropertyValue @{} -Force

    }

    $entry = $script:CacheData.RoleDefinitions.$Endpoint

    if($null -eq $entry){

        return $null

    }

    $fetchedAt = [DateTime]::Parse($entry.fetchedAt).ToUniversalTime()

    $age = [DateTime]::UtcNow - $fetchedAt

    if($age.TotalHours -ge 1){

        return $null

    }

    return $entry.value

}

function Set-CachedRoleDefinitions{

    param(

        [Parameter(Mandatory)]

        [ValidateNotNullOrEmpty()]

        [string]$Endpoint,

        [Parameter(Mandatory)]

        $RoleDefinitions

    )

    # Ensure RoleDefinitions key exists

    if($null -eq $script:CacheData.RoleDefinitions){

        $script:CacheData | Add-Member -NotePropertyName "RoleDefinitions" -NotePropertyValue @{} -Force

    }

    $entry = @{

        fetchedAt = [DateTime]::UtcNow.ToString("o")

        value = $RoleDefinitions

    }

    # CacheData.RoleDefinitions may be a PSCustomObject (from JSON) or a hashtable

    if($script:CacheData.RoleDefinitions -is [hashtable]){

        $script:CacheData.RoleDefinitions[$Endpoint] = $entry

    }

    else{

        $script:CacheData.RoleDefinitions | Add-Member -NotePropertyName $Endpoint -NotePropertyValue $entry -Force

    }

    Save-Cache

}

function Get-CachedConfiguration{

    param(

        [Parameter(Mandatory=$false)]

        [string]$Name

    )

    # Reads from the generic configuration container in the cache. With no name, returns the

    # entire container; with a name, returns that entry's value (or $null when it is not set).

    if($null -eq $script:CacheData.Configuration){

        if([string]::IsNullOrWhiteSpace($Name)){

            return [PSCustomObject]@{}

        }

        return $null

    }

    if([string]::IsNullOrWhiteSpace($Name)){

        return $script:CacheData.Configuration

    }

    # Configuration may be a PSCustomObject (from JSON) or a hashtable (in-memory)

    if($script:CacheData.Configuration -is [hashtable]){

        if($script:CacheData.Configuration.ContainsKey($Name)){

            return $script:CacheData.Configuration[$Name]

        }

        return $null

    }

    $property = $script:CacheData.Configuration.PSObject.Properties[$Name]

    if($null -eq $property){

        return $null

    }

    return $property.Value

}

function Set-CachedConfiguration{

    param(

        [Parameter(Mandatory)]

        [ValidateNotNullOrEmpty()]

        [string]$Name,

        [Parameter(Mandatory)]

        [AllowNull()]

        [object]$Value

    )

    # Ensure the configuration container exists (for caches created before this feature)

    if($null -eq $script:CacheData.Configuration){

        if($script:CacheData -is [hashtable]){

            $script:CacheData["Configuration"] = [PSCustomObject]@{}

        }

        else{

            $script:CacheData | Add-Member -NotePropertyName "Configuration" -NotePropertyValue ([PSCustomObject]@{}) -Force

        }

    }

    if($script:CacheData.Configuration -is [hashtable]){

        if($null -eq $Value){

            $script:CacheData.Configuration.Remove($Name)

        }

        else{

            $script:CacheData.Configuration[$Name] = $Value

        }

    }

    else{

        if($null -eq $Value){

            if($null -ne $script:CacheData.Configuration.PSObject.Properties[$Name]){

                $script:CacheData.Configuration.PSObject.Properties.Remove($Name)

            }

        }

        else{

            $script:CacheData.Configuration | Add-Member -NotePropertyName $Name -NotePropertyValue $Value -Force

        }

    }

    Save-Cache

}

function Get-CachedAuthorizationServiceClientId{

    # Ensure AuthorizationServiceClientId key exists (for caches created before this feature)

    if($null -eq $script:CacheData.AuthorizationServiceClientId){

        return $null

    }

    if([string]::IsNullOrWhiteSpace($script:CacheData.AuthorizationServiceClientId)){

        return $null

    }

    return $script:CacheData.AuthorizationServiceClientId

}

function Set-CachedAuthorizationServiceClientId{

    param(

        [Parameter(Mandatory)]

        [ValidateNotNullOrEmpty()]

        [string]$AuthorizationServiceClientId

    )

    # CacheData may be a hashtable (from Get-EmptyCache) or PSCustomObject (from JSON)

    if($script:CacheData -is [hashtable]){

        $script:CacheData["AuthorizationServiceClientId"] = $AuthorizationServiceClientId

    }

    else{

        $script:CacheData | Add-Member -NotePropertyName "AuthorizationServiceClientId" -NotePropertyValue $AuthorizationServiceClientId -Force

    }

    Save-Cache

}

function Get-CachedServicePrincipalAuth{

    # Reads the service principal auth configuration from the generic configuration

    # container in the cache. Returns $null when it has not been configured.

    return Get-CachedConfiguration -Name "ServicePrincipalAuth"

}

function Get-EnvironmentRegionFromCache{

    param(

        [Parameter(Mandatory)]

        [ValidateNotNullOrEmpty()]

        [string]$EnvironmentId,

        [Parameter(Mandatory)]

        [PPEndpoint]$Endpoint,

        [Parameter(Mandatory=$false)]

        [string]$TenantId

    )

    $cacheKey = "$EnvironmentId|$Endpoint"

    # Check for cached entry

    if($script:CacheData.RegionCache.PSObject.Properties.Name -contains $cacheKey){

        $now = [DateTime]::UtcNow

        $entry = $script:CacheData.RegionCache.$cacheKey

        $expiry = if($entry.Expiry -is [DateTime]){

                $entry.Expiry.ToUniversalTime()

            }

            else{

                $entry.Expiry = $now

            }

        if($expiry -gt $now){

            $remainingMinutes = [math]::Round(($expiry - $now).TotalMinutes, 1)

            Write-Verbose "Region cache hit for $cacheKey. Region: $($entry.Region). Cache valid for $remainingMinutes more minutes."

            return $entry.Region

        }

    }

    # Cache miss or expired - call Get-EnvironmentRegion

    Write-Verbose "Region cache miss for $cacheKey. Calling Get-EnvironmentRegion."

    $params = @{

        EnvironmentId = $EnvironmentId

        Endpoint = $Endpoint

    }

    if(-not([string]::IsNullOrWhiteSpace($TenantId))){

        $params["TenantId"] = $TenantId

    }

    $region = Get-EnvironmentRegion @params

    Write-Verbose "Region resolved for $cacheKey. Region: $region. Caching for 1 hour."

    # Store in cache with 1-hour expiry

    $cacheEntry = [PSCustomObject]@{

        Region = $region

        Expiry = [DateTime]::UtcNow.AddHours(1)

    }

    if($script:CacheData.RegionCache.PSObject.Properties.Name -contains $cacheKey){

        $script:CacheData.RegionCache.$cacheKey = $cacheEntry

    }

    else{

        $script:CacheData.RegionCache | Add-Member -NotePropertyName $cacheKey -NotePropertyValue $cacheEntry

    }

    Save-Cache

    return $region

}

# SIG # Begin signature block

# MIInbgYJKoZIhvcNAQcCoIInXzCCJ1sCAQExDzANBglghkgBZQMEAgEFADB5Bgor

# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG

# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCBA5P3ggF6q/fXg

# Mw1sMmRvq90As6pCfg2iX+RFc4YHSqCCDMkwggYEMIID7KADAgECAhMzAAACHPrN

# xZvoL37EAAAAAAIcMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMR4wHAYD

# VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBD

# b2RlIFNpZ25pbmcgUENBIDIwMjQwHhcNMjYwNDE2MTg1OTQxWhcNMjcwNDE1MTg1

# OTQxWjB0MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE

# BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYD

# VQQDExVNaWNyb3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IB

# DwAwggEKAoIBAQDVsZfgOKmM31HPfoWOoNEiw0SlCiIxUMC0I9NMWbucKOw/e9lP

# oAoehQVu6SG65V4EPzrYsnBnFPNoi4/HoOdjhz1qkrEt4I6tEcxXU6oOeY9zGveC

# /3iBeuhLYxM3M/PkcUoebF+Nednm8OkdSPoDu8imViHPQq/8CQUu0WRR4rE+dMRf

# rpVqfmNi2qWCX94T4MsepijGVkwE//tJg0ryAiYdHT34LSnlG/RSBZmQRGWZ5g8j

# qnKjRParSqMft1gvjuUTVgtWNZfgcLFSK5Wa0myrq8OPcgTGGsRgun+tnSS+IxDT

# xVsAPH1OzvPjwomguByhUe/OcvUN0D5Wmp7xAgMBAAGjggGqMIIBpjAOBgNVHQ8B

# Af8EBAMCB4AwHwYDVR0lBBgwFgYKKwYBBAGCN0wIAQYIKwYBBQUHAwMwHQYDVR0O

# BBYEFNoH7a2YDjOSwpkp6DHcmUS7J+0yMFQGA1UdEQRNMEukSTBHMS0wKwYDVQQL

# EyRNaWNyb3NvZnQgSXJlbGFuZCBPcGVyYXRpb25zIExpbWl0ZWQxFjAUBgNVBAUT

# DTIzMDAxMis1MDc1NjkwHwYDVR0jBBgwFoAUf1k/VCHarU/vBeXmo9ctBpQSCDEw

# YAYDVR0fBFkwVzBVoFOgUYZPaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9w

# cy9jcmwvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNy

# bDBtBggrBgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUWh0dHA6Ly93d3cubWljcm9z

# b2Z0LmNvbS9wa2lvcHMvY2VydHMvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmcl

# MjBQQ0ElMjAyMDI0LmNydDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4IC

# AQAUnEqhaRXe0T3hIJjvdQErEkrA/7bByjn6t5IArODkkRjzkYwtKMc2yYj2quaN

# rLutWw2YZcngKPy1b71YyDJQTy4NDRwaSh9Tw5thrk3NmcPrAHia5vtcBJ1CgtKK

# 7mQbIcQ22d/N3813ayCDDFewu1+jsZmX+r/aTEqaOM4TVxVtRSkuCy8nAXKuChOK

# Li/zA4XuH8iEYqIsj2YoNaeSxVmeGiERXpKdo3dDmYi0kO5w2D8VS4c3+9h6gElY

# BaAAg/dYErBg27qT3vv0zRDJhJufvCNylA8S7/+8H5E/PV5cng6na9VV/w9OV3qu

# uND6zdGa2EX38Glp50F9AIQk3p2xXmcvorDeM4XJ7UlWYBi6g80J1SSOQnInCYFE

# msfUNn3+1AaTJKSJL83quKArTac2pKhu0Yzzzrzo6HrsRiQKzpnRBb1/dMa6P3hz

# 75XbMRBctNsFhZC07WCmjExdLg2eHW5uV0TY8D5+6wozJf7vF3+WHkYPO85Z+BC6

# U4FkNbYNycZ9cE4j1tXRdyDCfml6c0HWPHjNVDObrv9lKt3qUqFpX38VCqVCyNOO

# 1UcXfQiVjJw32U2WUKZjt/neJKHEBsm9kFsLuWzkQ53+qcaSaytmsCnk2gOglrlD

# 5d3kKyvvAw+rzm0lT8K38P6PLxfZQHhu4W8dV7Av8N2ZmDCCBr0wggSloAMCAQIC

# EzMAAAA5O7Y3Gb8GHWcAAAAAADkwDQYJKoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYT

# AlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYD

# VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBS

# b290IENlcnRpZmljYXRlIEF1dGhvcml0eSAyMDExMB4XDTI0MDgwODIwNTQxOFoX

# DTM2MDMyMjIyMTMwNFowVzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFU1pY3Jvc29m

# dCBDb3Jwb3JhdGlvbjEoMCYGA1UEAxMfTWljcm9zb2Z0IENvZGUgU2lnbmluZyBQ

# Q0EgMjAyNDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANgBnB7jOMeq

# lRYHNa265v4IY9fH8TKhemHfPINe1gpLaV3dhg324WwH06LcHbpnsBukCDNitryo

# 0dtS/EW6I/yEL/bLSY8hKpbfQuWusBPr9qazYcDxCW/qnjb5JsI1s8bNOg3bVATv

# QVL4tcf03aTycsz8QeCdM0l/yHRObJ9QqazM1r6VPEOJ7LL+uEEb73w6QCuhs89a

# 1uv1zerOYMnsneRRwCbpyW11IcggU0cRKDDq1pjVJzIbIF6+oiXXbReOsgeI8zu1

# FyQfK0fVkaya8SmVHQ/tOf23mZ4W9k0Ri22QW9p3UgSC5OUDktKxxcCmGL6tXLfO

# GSWHIIV4YrTJTT6PNty5REojHJuZHArkF9VnHTERWoTjAzfI3kP+5b4alUdhgAZ7

# ttOu1bVnXfHaqPYl2rPs20ji03LOVWsh/radgE17es5hL+t6lV0eVHrVhsssROWJ

# uz2MXMCt7iw7lFPG9LXKGjsmonn2gotGdHIuEg5JnJMJVmixd5LRlkmgYRZKzhxS

# CwyoGIq0PhaA7Y+VPct5pCHkijcIIDm0nlkK+0KyepolcqGm0T/GYQRMhHJlGOOm

# VQop36wUVUYklUy++vDWeEgEo4s7hxN6mIbf2MSIQ/iIfMZgJxC69oukMUXCrOC3

# SkE/xIkgpfl22MM1itkZ35nNXkMolU1lAgMBAAGjggFOMIIBSjAOBgNVHQ8BAf8E

# BAMCAYYwEAYJKwYBBAGCNxUBBAMCAQAwHQYDVR0OBBYEFH9ZP1Qh2q1P7wXl5qPX

# LQaUEggxMBkGCSsGAQQBgjcUAgQMHgoAUwB1AGIAQwBBMA8GA1UdEwEB/wQFMAMB

# Af8wHwYDVR0jBBgwFoAUci06AjGQQ7kUBU7h6qfHMdEjiTQwWgYDVR0fBFMwUTBP

# oE2gS4ZJaHR0cDovL2NybC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMv

# TWljUm9vQ2VyQXV0MjAxMV8yMDExXzAzXzIyLmNybDBeBggrBgEFBQcBAQRSMFAw

# TgYIKwYBBQUHMAKGQmh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvY2VydHMv

# TWljUm9vQ2VyQXV0MjAxMV8yMDExXzAzXzIyLmNydDANBgkqhkiG9w0BAQwFAAOC

# AgEAFJQfOChP7onn6fLIMKrSlN1WYKwDFgAddymOUO3FrM8d7B/W/iQ6DxXsDn7D

# 5W4wMwYeLystcEqfkjz4NURRgazyMu5yRzQh4LqjA4tStTcJh1opExo7nn5PuPBY

# nbu0+THSuVHTe0VTTPVhily/piFrDo3axQ9P4C+Ol5yet+2gTfekICS5xS+cYfSI

# vgn0JksVBVMYVI5QFu/qhnLhsEFEUzG8fvv0hjgkO+lkpV9ty6GkN4vdnd7ya6Q6

# aR9y34aiM1qmxaxBi6OUnyNl6fkuun/diTFnYDLTppOkr/mg5WSfCiDVMNCxtj4w

# PKC5OmHm1DQIt/MNokbbH3UGsFP1QbzsLocuSqLCvH09Io3fDPTmscR9Y75G4qX7

# RTX8AdBPo0I6OEojf39zuFZt0qOHm65YWQE69cZM2ueE1MB05dNNgHK9gTE7zKvK

# /fg8B2qjW88MT/WF5V5uvZGtqa9FSL2RazArA+rDPuf6JGYz4HpgMZHB4S6szWSK

# YBv0VisCzfxgeU+dquXW9bd0auYlOB58DPcOYKdc3Se94g+xL4pcEhbB54JOgAkw

# YTu/9dLeH2pDqeJZAABVDWRQCaXfO5LgyKwKCLYXpigrZYCjUSBcr+Ve8PFWMhVT

# Ql0v4q8J/AUmQN5W4n101cY2L4A7GTQG1h32HHAvfQESWP0xghn7MIIZ9wIBATBu

# MFcxCzAJBgNVBAYTAlVTMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24x

# KDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMjQCEzMAAAIc

# +s3Fm+gvfsQAAAAAAhwwDQYJYIZIAWUDBAIBBQCgga4wGQYJKoZIhvcNAQkDMQwG

# CisGAQQBgjcCAQQwHAYKKwYBBAGCNwIBCzEOMAwGCisGAQQBgjcCARUwLwYJKoZI

# hvcNAQkEMSIEIJcvB0GXVQkOVsjnjweGzRopMlTPSKhT61aiqzIinjOWMEIGCisG

# AQQBgjcCAQwxNDAyoBSAEgBNAGkAYwByAG8AcwBvAGYAdKEagBhodHRwOi8vd3d3

# Lm1pY3Jvc29mdC5jb20wDQYJKoZIhvcNAQEBBQAEggEABXdDlTt/ygE9fEl9PVSZ

# ffKMjFfE48XGHdxV/qQRjnxU9NauOOjlMW+YhEskr92WoTHk58Mf+5XY6aanmdyU

# BHqMTPs34kteJStbQu7pDQ3DtCy++j9neC45ECXl8rTxJjZf+8k/DNAMqtn56+up

# 8hFlvL2c7WHwXovO8m1XeD04opb8r43qhdqun14jd2cgb0bQYrvJSLKvuobbBHix

# aHpFfEVJVSxQStdLk+/X2UdQOOjoYAedjOcJBRXmup2dZ+TvaOKYjVENQRdbIeqv

# Aq/h6dYJSj/Zf7p95i91iEYhN79L2MtC2qzUh70Mq196dHEn2vZiPHhEd3pMKSRb

# wKGCF60wghepBgorBgEEAYI3AwMBMYIXmTCCF5UGCSqGSIb3DQEHAqCCF4YwgheC

# AgEDMQ8wDQYJYIZIAWUDBAIBBQAwggFaBgsqhkiG9w0BCRABBKCCAUkEggFFMIIB

# QQIBAQYKKwYBBAGEWQoDATAxMA0GCWCGSAFlAwQCAQUABCAWz1nmxVHQcO8d5O9i

# VVmZUxKKak6bKXYotWwdVJ40+QIGamO427u9GBMyMDI2MDgwNzE2MTEzMi41ODRa

# MASAAgH0oIHZpIHWMIHTMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3Rv

# bjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0

# aW9uMS0wKwYDVQQLEyRNaWNyb3NvZnQgSXJlbGFuZCBPcGVyYXRpb25zIExpbWl0

# ZWQxJzAlBgNVBAsTHm5TaGllbGQgVFNTIEVTTjo1MjFBLTA1RTAtRDk0NzElMCMG

# A1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAgU2VydmljZaCCEfswggcoMIIFEKAD

# AgECAhMzAAACF3H7LqWvAR3qAAEAAAIXMA0GCSqGSIb3DQEBCwUAMHwxCzAJBgNV

# BAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4w

# HAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29m

# dCBUaW1lLVN0YW1wIFBDQSAyMDEwMB4XDTI1MDgxNDE4NDgyM1oXDTI2MTExMzE4

# NDgyM1owgdMxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYD

# VQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xLTAr

# BgNVBAsTJE1pY3Jvc29mdCBJcmVsYW5kIE9wZXJhdGlvbnMgTGltaXRlZDEnMCUG

# A1UECxMeblNoaWVsZCBUU1MgRVNOOjUyMUEtMDVFMC1EOTQ3MSUwIwYDVQQDExxN

# aWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2aWNlMIICIjANBgkqhkiG9w0BAQEFAAOC

# Ag8AMIICCgKCAgEAwM82sEw+39vYR7iGCIFDnYNhRM+BzF2AYiq5dUpZpJFPRjCc

# ipQ6RUbI+RAYNRApExx5ygrXbaWtuwvqsqAVSWbU/W6fecujjILkPqn9pngtWRkf

# QgbYgvaXALl6PY2yOH9f72MD+6AyxQenSpAMdUzY/Qk/jtjsHdFXVBe+tshlIkSJ

# 3GZw8VVKqTg3GZElztwbJWNtrhBEvhf6anxMegQMJP7tO8/BJ7ITs4/AV3D2bv8e

# Hk81Y+fOmQ8mQ61WLq2wItvlzIT5bzelK9LvEycf5x1lXxAwEw5a7dpS+CKTanht

# v+Q2mwebAybjf9io4k48stTaq1rtcrOiDwddqVm1S9e8h1TszXFzjLLvE9EmjnNf

# IewsY+RChUaHnY4FFwwJEnEv/JS76oHT0oGdy7+J60fGOl7A1UoUyAkhpb2Bja+S

# wSIiHbQ4FDyJiLlZ6drZZ84MoJ852JSxM0hBjGO6FZlPO8iuNyk680Di8VnbSNpI

# dJN+DhlepeTUMBDHqCmd0mVWRWZPm1pvgty93asNt/Ng6o4m2dnooWOdM3yKsJaW

# jyHqic9gfTrZBM+PCXqeTaO1oEiaQ+h4w0nHVdV+XSvI2m1yN4iibqjm5HPaAO3O

# J+OmNLftNVmr4Z6U2T6pIcLBysoKcDUvCqycXj4C/+n1KFBpDGdDMw9gmu8CAwEA

# AaOCAUkwggFFMB0GA1UdDgQWBBRQrN9jlwNOoeE5ZQqnF5x8S1bJQzAfBgNVHSME

# GDAWgBSfpxVdAF5iXYP05dJlpxtTNRnpcjBfBgNVHR8EWDBWMFSgUqBQhk5odHRw

# Oi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2NybC9NaWNyb3NvZnQlMjBUaW1l

# LVN0YW1wJTIwUENBJTIwMjAxMCgxKS5jcmwwbAYIKwYBBQUHAQEEYDBeMFwGCCsG

# AQUFBzAChlBodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2NlcnRzL01p

# Y3Jvc29mdCUyMFRpbWUtU3RhbXAlMjBQQ0ElMjAyMDEwKDEpLmNydDAMBgNVHRMB

# Af8EAjAAMBYGA1UdJQEB/wQMMAoGCCsGAQUFBwMIMA4GA1UdDwEB/wQEAwIHgDAN

# BgkqhkiG9w0BAQsFAAOCAgEARmgFdhB7xIAIHEEg5I/5S+gx67aR6RiW8ZAwtE3m

# z8o0dyn+pIP+lidNR1IKQQ0r+RjYgI9cZ6mbvAyvh3e2q/BV8rjHE3ud9PyYyq32

# euFgdZ3vX4b5QXePWlpBAYrdziR27rHz6WwpH5dZsSypbXDBbQkWkNl6g82yTy3A

# bBbKDXBdzxZsEauaOplatK7Er4dhglKBex8JQ2dMSkSZweCNDXqd9r/9W2VdRZsD

# JKP/Xc4UyQlVsboBotKtYESXFkjwR1HVsH+Q0C69/N5CP/Tq3YgI1ub4b9+3MJFK

# WhJXCcJGFZkcLwUmYwoFg1XLo7DLJdGjrIH1jsI2NFXJFQHef6AdRe1ERvYQeqty

# rBvxIvR+P/83FNYyzx04inUT9TF2AwTOuqCC6Z67oNwR4pEEJyAIEREvkdhjjfWc

# gsk/nGTlfahvNY/SOHrNRKo49KDlccNzRCJQyQ+D59r7/qebNSyQPTfwI9++jEY0

# Q/UWKVNLhio55GYBseJ99s7NzkdxOr9Uftp597HEovbA69qGlZ3OpUE3H1RBGDVp

# /FvM2uXTum8LrMkPXx5Ap/kbPASsC9ju9oMCe2IEXO2SeD1aD3IqvAOdHFKHg1vp

# bPUQSWb6g2xfBV30wFcqaPYgzcbxPWPyZqK+S8l7zw64aO5hmJ7eQwoMfTu0Vay6

# r48wggdxMIIFWaADAgECAhMzAAAAFcXna54Cm0mZAAAAAAAVMA0GCSqGSIb3DQEB

# CwUAMIGIMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE

# BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMTIwMAYD

# VQQDEylNaWNyb3NvZnQgUm9vdCBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgMjAxMDAe

# Fw0yMTA5MzAxODIyMjVaFw0zMDA5MzAxODMyMjVaMHwxCzAJBgNVBAYTAlVTMRMw

# EQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVN

# aWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0

# YW1wIFBDQSAyMDEwMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA5OGm

# TOe0ciELeaLL1yR5vQ7VgtP97pwHB9KpbE51yMo1V/YBf2xK4OK9uT4XYDP/XE/H

# ZveVU3Fa4n5KWv64NmeFRiMMtY0Tz3cywBAY6GB9alKDRLemjkZrBxTzxXb1hlDc

# wUTIcVxRMTegCjhuje3XD9gmU3w5YQJ6xKr9cmmvHaus9ja+NSZk2pg7uhp7M62A

# W36MEBydUv626GIl3GoPz130/o5Tz9bshVZN7928jaTjkY+yOSxRnOlwaQ3KNi1w

# jjHINSi947SHJMPgyY9+tVSP3PoFVZhtaDuaRr3tpK56KTesy+uDRedGbsoy1cCG

# MFxPLOJiss254o2I5JasAUq7vnGpF1tnYN74kpEeHT39IM9zfUGaRnXNxF803RKJ

# 1v2lIH1+/NmeRd+2ci/bfV+AutuqfjbsNkz2K26oElHovwUDo9Fzpk03dJQcNIIP

# 8BDyt0cY7afomXw/TNuvXsLz1dhzPUNOwTM5TI4CvEJoLhDqhFFG4tG9ahhaYQFz

# ymeiXtcodgLiMxhy16cg8ML6EgrXY28MyTZki1ugpoMhXV8wdJGUlNi5UPkLiWHz

# NgY1GIRH29wb0f2y1BzFa/ZcUlFdEtsluq9QBXpsxREdcu+N+VLEhReTwDwV2xo3

# xwgVGD94q0W29R6HXtqPnhZyacaue7e3PmriLq0CAwEAAaOCAd0wggHZMBIGCSsG

# AQQBgjcVAQQFAgMBAAEwIwYJKwYBBAGCNxUCBBYEFCqnUv5kxJq+gpE8RjUpzxD/

# LwTuMB0GA1UdDgQWBBSfpxVdAF5iXYP05dJlpxtTNRnpcjBcBgNVHSAEVTBTMFEG

# DCsGAQQBgjdMg30BATBBMD8GCCsGAQUFBwIBFjNodHRwOi8vd3d3Lm1pY3Jvc29m

# dC5jb20vcGtpb3BzL0RvY3MvUmVwb3NpdG9yeS5odG0wEwYDVR0lBAwwCgYIKwYB

# BQUHAwgwGQYJKwYBBAGCNxQCBAweCgBTAHUAYgBDAEEwCwYDVR0PBAQDAgGGMA8G

# A1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAU1fZWy4/oolxiaNE9lJBb186aGMQw

# VgYDVR0fBE8wTTBLoEmgR4ZFaHR0cDovL2NybC5taWNyb3NvZnQuY29tL3BraS9j

# cmwvcHJvZHVjdHMvTWljUm9vQ2VyQXV0XzIwMTAtMDYtMjMuY3JsMFoGCCsGAQUF

# BwEBBE4wTDBKBggrBgEFBQcwAoY+aHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3Br

# aS9jZXJ0cy9NaWNSb29DZXJBdXRfMjAxMC0wNi0yMy5jcnQwDQYJKoZIhvcNAQEL

# BQADggIBAJ1VffwqreEsH2cBMSRb4Z5yS/ypb+pcFLY+TkdkeLEGk5c9MTO1OdfC

# cTY/2mRsfNB1OW27DzHkwo/7bNGhlBgi7ulmZzpTTd2YurYeeNg2LpypglYAA7AF

# vonoaeC6Ce5732pvvinLbtg/SHUB2RjebYIM9W0jVOR4U3UkV7ndn/OOPcbzaN9l

# 9qRWqveVtihVJ9AkvUCgvxm2EhIRXT0n4ECWOKz3+SmJw7wXsFSFQrP8DJ6LGYnn

# 8AtqgcKBGUIZUnWKNsIdw2FzLixre24/LAl4FOmRsqlb30mjdAy87JGA0j3mSj5m

# O0+7hvoyGtmW9I/2kQH2zsZ0/fZMcm8Qq3UwxTSwethQ/gpY3UA8x1RtnWN0SCyx

# TkctwRQEcb9k+SS+c23Kjgm9swFXSVRk2XPXfx5bRAGOWhmRaw2fpCjcZxkoJLo4

# S5pu+yFUa2pFEUep8beuyOiJXk+d0tBMdrVXVAmxaQFEfnyhYWxz/gq77EFmPWn9

# y8FBSX5+k77L+DvktxW/tM4+pTFRhLy/AsGConsXHRWJjXD+57XQKBqJC4822rpM

# +Zv/Cuk0+CQ1ZyvgDbjmjJnW4SLq8CdCPSWU5nR0W2rRnj7tfqAxM328y+l7vzhw

# RNGQ8cirOoo6CGJ/2XBjU02N7oJtpQUQwXEGahC0HVUzWLOhcGbyoYIDVjCCAj4C

# AQEwggEBoYHZpIHWMIHTMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3Rv

# bjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0

# aW9uMS0wKwYDVQQLEyRNaWNyb3NvZnQgSXJlbGFuZCBPcGVyYXRpb25zIExpbWl0

# ZWQxJzAlBgNVBAsTHm5TaGllbGQgVFNTIEVTTjo1MjFBLTA1RTAtRDk0NzElMCMG

# A1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAgU2VydmljZaIjCgEBMAcGBSsOAwIa

# AxUAabKAFaKt2haUdqkHfFYzAzfgSMuggYMwgYCkfjB8MQswCQYDVQQGEwJVUzET

# MBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMV

# TWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1T

# dGFtcCBQQ0EgMjAxMDANBgkqhkiG9w0BAQsFAAIFAO4gAlIwIhgPMjAyNjA4MDcw

# NzA1NTRaGA8yMDI2MDgwODA3MDU1NFowdDA6BgorBgEEAYRZCgQBMSwwKjAKAgUA

# 7iACUgIBADAHAgEAAgIR2TAHAgEAAgISWTAKAgUA7iFT0gIBADA2BgorBgEEAYRZ

# CgQCMSgwJjAMBgorBgEEAYRZCgMCoAowCAIBAAIDB6EgoQowCAIBAAIDAYagMA0G

# CSqGSIb3DQEBCwUAA4IBAQARecTxmvYIAyei8sxWAU1jtYTdv/PTiSVdPDe4L4IO

# z9Mn8t/qeqipU2wON1C+ISBgGoNC9wsgeSljcmbCEgetZ8d7NiLK828+KWJ/W6UE

# xIJVzla6MoB8zgnL7VrCn+xY4H2hF/xiPxS6shoyHsYRnS7zjhhW+p8+PAzyNUov

# IP2oIbwqmDQjTPVer4vV0JNMfqtqlGok6pgzR9bgx6sm2EYZjAkJK5+1lsmd14zz

# intjI2B0UeAzmfUabzlQJkQknJNj4B8Tld2M2PD0XiaQgN3IiFEGSIavE+7eP32D

# +9YSX+hqXd9SE7zheoDW9tsTRTIxKd2wXF4KlSVw/KotMYIEDTCCBAkCAQEwgZMw

# fDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1Jl

# ZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMd

# TWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTACEzMAAAIXcfsupa8BHeoAAQAA

# AhcwDQYJYIZIAWUDBAIBBQCgggFKMBoGCSqGSIb3DQEJAzENBgsqhkiG9w0BCRAB

# BDAvBgkqhkiG9w0BCQQxIgQgOvlKPGl5VvzpQgPFZncuWqQIrfclY8sNpP5p7uWI

# 8PwwgfoGCyqGSIb3DQEJEAIvMYHqMIHnMIHkMIG9BCDQ8lBgPl23yZ0SzUSt5phO

# IegHPywrkNwevxe2k+RaWzCBmDCBgKR+MHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQI

# EwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3Nv

# ZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBD

# QSAyMDEwAhMzAAACF3H7LqWvAR3qAAEAAAIXMCIEIOd/uM7JxNu8zaj/awJf6OzT

# gI7CqfWLEKjt7JYpDxIeMA0GCSqGSIb3DQEBCwUABIICADqkqn8A0gwWV3bPjkRl

# oGnhI7wjnUY4/b34NoJRzaeYw43Z2tDtEzlbzADnNP+YP7vPtl5rspEce3esGBqW

# D7T2SHcq1BdM8np2mUhNvmd1BkbIwBxtxLewil8pxAS0MKZ4XPNhB5ssQN6Tjdr8

# 3Kz+0ZKfSpX8zPjJWSYoCMGR7RnGaPGubdP1DPGE/cHY0LdSMSnOMhRHMF5hMQRO

# gdiRNxNIU1ljBr1ZDUpbneu3es/GXTh/BLl2IwU4oxypWrXgAcIE9IqtK41CHKHT

# YmznME+5YOrjx92zNsT+panq/qx38D1/5nSy2nH1Vwa/lFZSc1QlvUdZHnuxqJmK

# tlVeBVaeTPrf59V5BAAV8uYplhMI54DNkp+YOpTCnhMN/yzMCjKhYdkQ1wn/NZSy

# 1QaFiNvxxEpJZ0tsk8q9p8mya1ALs9MiqXR06povORy+OQFed82YfN/QiUwiNWA7

# yAlsbJLsWrv0anlGRGkFx1JSDweGvmUt54mxWeWYdR2wHdOMxlt+qK3K1DnV5MTF

# NoXTwx94jKPQc9LFmeBFGnKNdeAcgB944Bl9HbtA0v0n5CeyTNZuzyDo61PnK6ON

# ljLlpg+bzOB3h6KwdkuPZ3mrv0Wu3S4iSMWMjmQAOq529Ih63ClNVF+Xo/m/IzAF

# Nu7PCMKnRwSau2YtKOg46s3B

# SIG # End signature block