Avm.Authoring

0.40.0

Private/Tests/Cleanup/Get-AvmBicepDeploymentCleanupTarget.ps1

                                function Get-AvmBicepDeploymentCleanupTarget {

    [CmdletBinding()]

    [OutputType([pscustomobject])]

    param(

        [AllowEmptyCollection()]

        [string[]] $DeploymentIds = @(),

        [string[]] $PreflightRejectedDeploymentIds = @(),

        [ValidateRange(1, 1000)]

        [int] $SearchRetryLimit = 40,

        [ValidateRange(0, 3600)]

        [int] $SearchRetryInterval = 60,

        [System.Collections.IDictionary] $IsolationState = @{},

        # A retry snapshot requires terminal records and complete Create history, but deletes nothing.

        [switch] $RequireCompleteRemoval

    )

    Set-StrictMode -Version 3.0

    $ErrorActionPreference = 'Stop'

    $records = [System.Collections.Generic.Dictionary[string, hashtable]]::new(

        [System.StringComparer]::OrdinalIgnoreCase)

    foreach ($deployment in ConvertTo-AvmBicepCleanupResource -ResourceIds $DeploymentIds) {

        Assert-AvmBicepIsolationBoundary -State $IsolationState -ResourceIds @($deployment.resourceId)

        if ($deployment.type -ine 'Microsoft.Resources/deployments') {

            throw [AvmConfigurationException]::new("Not a deployment ID: $($deployment.resourceId)")

        }

        $records[$deployment.resourceId] = @{

            Id                = $deployment.resourceId

            Required          = $true

            Depth             = 0

            PreflightRejected = $false

            Status            = 'Pending'

            ErrorCode         = ''

            ErrorMessage      = ''

            References        = 0

        }

    }

    foreach ($rejectedId in $PreflightRejectedDeploymentIds) {

        if (-not $records.ContainsKey($rejectedId)) {

            throw [AvmConfigurationException]::new(

                'Preflight rejection metadata contains IDs outside the attempted deployments.')

        }

        $records[$rejectedId].PreflightRejected = $true

    }

    $resources = [System.Collections.Generic.HashSet[string]]::new(

        [System.StringComparer]::OrdinalIgnoreCase)

    for ($round = 1; $round -le $SearchRetryLimit; $round++) {

        $queue = [System.Collections.Generic.Queue[string]]::new()

        foreach ($record in $records.Values) {

            if ($record.Status -eq 'Pending') {

                $queue.Enqueue($record.Id)

            }

        }

        while ($queue.Count -gt 0) {

            $record = $records[$queue.Dequeue()]

            $nextPath = $record.Id + '/operations?api-version=2025-04-01'

            $visitedPages = [System.Collections.Generic.HashSet[string]]::new(

                [System.StringComparer]::Ordinal)

            $operations = [System.Collections.Generic.List[object]]::new()

            $children = [System.Collections.Generic.HashSet[string]]::new([System.StringComparer]::OrdinalIgnoreCase)

            $exports = @{}

            try {

                if ($RequireCompleteRemoval) {

                    Assert-AvmBicepCleanupDeploymentTerminal -Record $record

                    if ($record.Status -eq 'RejectedWithoutRecord') { continue }

                }

                while (-not [string]::IsNullOrEmpty($nextPath)) {

                    if (-not $visitedPages.Add($nextPath) -or $visitedPages.Count -gt 1000) {

                        throw [AvmProcessException]::new("Repeated or excessive deployment operations page: $nextPath")

                    }

                    $response = Invoke-AvmBicepRead -Activity 'Read cleanup operation page' `

                        -DiagnosticTarget $record.Id -RetryAuthorizationPropagation -Read {

                        Invoke-AzRestMethod -Method GET -Path $nextPath -ErrorAction Stop

                    }

                    $document = ConvertFrom-AvmBicepRestResponse -Response $response -Activity 'Read cleanup operation page' `

                        -AllowedStatus @(200, 404)

                    if ([int]$response.StatusCode -ne 200) {

                        $errorBody = Get-AvmPropertyValue -InputObject $document -Name 'error'

                        $errorCode = [string](Get-AvmPropertyValue -InputObject $errorBody -Name 'code')

                        $groupScope = $record.Id -match '^/subscriptions/[^/]+/resourceGroups/[^/]+/providers/Microsoft\.Resources/deployments/[^/]+$'

                        if ([int]$response.StatusCode -eq 404 -and $groupScope -and $errorCode -ceq 'ResourceGroupNotFound') {

                            $record.Status = 'ContainerRemoved'

                            break

                        }

                        if ([int]$response.StatusCode -eq 404 -and $errorCode -ceq 'DeploymentNotFound') {

                            if ($RequireCompleteRemoval) {

                                throw [AvmProcessException]::new("Existing deployment has no complete operation history: $($record.Id)")

                            }

                            if ($visitedPages.Count -gt 1) {

                                throw [AvmProcessException]::new(

                                    "Deployment record disappeared during pagination: $($record.Id)")

                            }

                            if ($record.PreflightRejected) {

                                $record.Status = 'RejectedWithoutRecord'

                            }

                            elseif (-not $record.Required) {

                                $record.Status = 'NestedRecordAbsent'

                                Write-AvmLog -Message "Nested deployment record is absent: $($record.Id)" -Level Warning

                            }

                            $record.ErrorCode = 'DeploymentNotFound'

                            break

                        }

                        throw [AvmProcessException]::new(

                            "Deployment operations lookup failed: HTTP $($response.StatusCode), code '$errorCode', deployment '$($record.Id)'.")

                    }

                    if ($document -isnot [System.Collections.IDictionary] -or

                        -not $document.Contains('value') -or $document['value'] -isnot [array] -or

                        @($document.psbase.Keys | Where-Object { $_ -cnotin @('value', 'nextLink') }).Count -gt 0) {

                        throw [AvmProcessException]::new("Invalid deployment operations response: $($record.Id)")

                    }

                    foreach ($operation in $document['value']) {

                        $properties = Get-AvmPropertyValue -InputObject $operation -Name 'properties' -NoEnumerate

                        if ($properties -isnot [System.Collections.IDictionary]) {

                            throw [AvmProcessException]::new("Invalid deployment operation properties: $($record.Id)")

                        }

                        if ($RequireCompleteRemoval -and

                            ($properties['provisioningState'] -isnot [string] -or

                            $properties['provisioningState'] -cnotin @('Succeeded', 'Failed') -or

                            $properties['provisioningOperation'] -isnot [string] -or

                            [string]::IsNullOrWhiteSpace($properties['provisioningOperation']))) {

                            throw [AvmProcessException]::new("Deployment has an incomplete operation: $($record.Id)")

                        }

                        $operations.Add($properties)

                        if ((Get-AvmPropertyValue -InputObject $properties -Name 'provisioningOperation') -ine 'Create') {

                            continue

                        }

                        $target = Get-AvmPropertyValue -InputObject $properties -Name 'targetResource' -NoEnumerate

                        if ($null -eq $target -and -not $RequireCompleteRemoval) {

                            continue

                        }

                        $targetId = $null

                        if ($target -is [System.Collections.IDictionary]) { $targetId = $target['id'] }

                        if ($targetId -isnot [string] -or [string]::IsNullOrWhiteSpace($targetId)) {

                            if (Test-AvmBicepExistingGraphLookup -Operation $properties -DeploymentId $record.Id -Exports $exports) {

                                continue

                            }

                            throw [AvmProcessException]::new("Deployment operation has an invalid target ID: $($record.Id)")

                        }

                        foreach ($resource in @(Resolve-AvmBicepCleanupResource -ResourceId $targetId)) {

                            Assert-AvmBicepIsolationBoundary -State $IsolationState -ResourceIds @($resource.resourceId)

                            if ($resource.type -ieq 'Microsoft.Resources/deployments') {

                                if (-not $records.ContainsKey($resource.resourceId)) {

                                    $records.Add($resource.resourceId, @{

                                            Id                = $resource.resourceId

                                            Required          = $false

                                            Depth             = $record.Depth + 1

                                            PreflightRejected = $false

                                            Status            = 'Pending'

                                            ErrorCode         = ''

                                            ErrorMessage      = ''

                                            References        = 0

                                        })

                                    $queue.Enqueue($resource.resourceId)

                                }

                                $child = $records[$resource.resourceId]

                                $child.References++

                                $null = $children.Add($resource.resourceId)

                                if ($RequireCompleteRemoval -and -not $child.Required -and $child.References -gt 1) {

                                    $child.PreflightRejected = $false

                                    if ($child.Status -eq 'RejectedWithoutRecord') {

                                        $child.Status = 'Failed'

                                        $child.ErrorCode = 'AmbiguousPreflightRejection'

                                        $child.ErrorMessage = "Multiple operations reference preflight-rejected deployment '$($child.Id)'."

                                    }

                                }

                            }

                            else {

                                $null = $resources.Add($resource.resourceId)

                            }

                        }

                    }

                    $nextPath = Resolve-AvmBicepCleanupNextLink -ExpectedPath ($record.Id + '/operations') -NextLink (

                        Get-AvmPropertyValue -InputObject $document -Name 'nextLink' -NoEnumerate)

                    if ([string]::IsNullOrEmpty($nextPath)) {

                        $record.Status = 'Resolved'

                        $record.ErrorCode = ''

                    }

                }

                if ($RequireCompleteRemoval -and $record.Status -eq 'Resolved' -and $record.ProvisioningState -ceq 'Failed') {

                    foreach ($childId in $children) {

                        $child = $records[$childId]

                        if (-not $child.Required -and $child.References -eq 1) {

                            $child.PreflightRejected = Test-AvmBicepNestedPreflightRejection -DeploymentId $childId -Operations $operations.ToArray()

                        }

                    }

                }

            }

            catch {

                if ((Get-AvmBicepDeploymentErrorKind -ErrorRecord $_) -eq 'Cancellation' -or

                    $_.FullyQualifiedErrorId.Split(',')[0] -eq 'AvmBicepContextRestoreFailed') {

                    throw

                }

                $record.Status = 'Failed'

                $record.ErrorCode = 'LookupFailed'

                $record.ErrorMessage = $_.Exception.Message

                Write-AvmLog -Message (

                    "Deployment lookup failed for '$($record.Id)'; known targets will still be cleaned. $($_.Exception.Message)"

                ) -Level Warning

            }

        }

        $pending = @($records.Values | Where-Object { $_.Status -eq 'Pending' })

        if ($pending.Count -eq 0 -or $round -eq $SearchRetryLimit) {

            break

        }

        Write-AvmLog -Message (

            "Waiting for $($pending.Count) deployment record(s); lookup round $round/$SearchRetryLimit."

        ) -Level Info

        Start-Sleep -Seconds $SearchRetryInterval

    }

    $issues = [System.Collections.Generic.List[object]]::new()

    foreach ($record in $records.Values) {

        if ($record.Status -eq 'Pending') {

            $record.Status = 'Missing'

            $record.ErrorMessage = "Deployment record not found after $SearchRetryLimit lookups: $($record.Id)"

        }

        $unresolved = $RequireCompleteRemoval -and $record.Status -in @('NestedRecordAbsent', 'ContainerRemoved')

        if ($unresolved) {

            $record.ErrorMessage = "Deployment record could not be resolved ($($record.Status)): $($record.Id)"

        }

        if ($record.Status -in @('Missing', 'Failed') -or $unresolved) {

            $issues.Add([pscustomobject]@{

                    DeploymentId = $record.Id

                    Code         = $record.ErrorCode

                    Message      = $record.ErrorMessage

                })

        }

    }

    [pscustomobject]@{

        ResourceIds = [string[]]@($resources)

        Deployments = @($records.Values)

        Issues      = $issues.ToArray()

    }

}

# SIG # Begin signature block

# MIInUAYJKoZIhvcNAQcCoIInQTCCJz0CAQExDzANBglghkgBZQMEAgEFADB5Bgor

# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG

# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCACC3zZwwgGzYHv

# o0D/Po/RYF3pYRGfLEzfc7b37XBxNaCCDMkwggYEMIID7KADAgECAhMzAAACHPrN

# xZvoL37EAAAAAAIcMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMR4wHAYD

# VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBD

# b2RlIFNpZ25pbmcgUENBIDIwMjQwHhcNMjYwNDE2MTg1OTQxWhcNMjcwNDE1MTg1

# OTQxWjB0MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE

# BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYD

# VQQDExVNaWNyb3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IB

# DwAwggEKAoIBAQDVsZfgOKmM31HPfoWOoNEiw0SlCiIxUMC0I9NMWbucKOw/e9lP

# oAoehQVu6SG65V4EPzrYsnBnFPNoi4/HoOdjhz1qkrEt4I6tEcxXU6oOeY9zGveC

# /3iBeuhLYxM3M/PkcUoebF+Nednm8OkdSPoDu8imViHPQq/8CQUu0WRR4rE+dMRf

# rpVqfmNi2qWCX94T4MsepijGVkwE//tJg0ryAiYdHT34LSnlG/RSBZmQRGWZ5g8j

# qnKjRParSqMft1gvjuUTVgtWNZfgcLFSK5Wa0myrq8OPcgTGGsRgun+tnSS+IxDT

# xVsAPH1OzvPjwomguByhUe/OcvUN0D5Wmp7xAgMBAAGjggGqMIIBpjAOBgNVHQ8B

# Af8EBAMCB4AwHwYDVR0lBBgwFgYKKwYBBAGCN0wIAQYIKwYBBQUHAwMwHQYDVR0O

# BBYEFNoH7a2YDjOSwpkp6DHcmUS7J+0yMFQGA1UdEQRNMEukSTBHMS0wKwYDVQQL

# EyRNaWNyb3NvZnQgSXJlbGFuZCBPcGVyYXRpb25zIExpbWl0ZWQxFjAUBgNVBAUT

# DTIzMDAxMis1MDc1NjkwHwYDVR0jBBgwFoAUf1k/VCHarU/vBeXmo9ctBpQSCDEw

# YAYDVR0fBFkwVzBVoFOgUYZPaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9w

# cy9jcmwvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNy

# bDBtBggrBgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUWh0dHA6Ly93d3cubWljcm9z

# b2Z0LmNvbS9wa2lvcHMvY2VydHMvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmcl

# MjBQQ0ElMjAyMDI0LmNydDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4IC

# AQAUnEqhaRXe0T3hIJjvdQErEkrA/7bByjn6t5IArODkkRjzkYwtKMc2yYj2quaN

# rLutWw2YZcngKPy1b71YyDJQTy4NDRwaSh9Tw5thrk3NmcPrAHia5vtcBJ1CgtKK

# 7mQbIcQ22d/N3813ayCDDFewu1+jsZmX+r/aTEqaOM4TVxVtRSkuCy8nAXKuChOK

# Li/zA4XuH8iEYqIsj2YoNaeSxVmeGiERXpKdo3dDmYi0kO5w2D8VS4c3+9h6gElY

# BaAAg/dYErBg27qT3vv0zRDJhJufvCNylA8S7/+8H5E/PV5cng6na9VV/w9OV3qu

# uND6zdGa2EX38Glp50F9AIQk3p2xXmcvorDeM4XJ7UlWYBi6g80J1SSOQnInCYFE

# msfUNn3+1AaTJKSJL83quKArTac2pKhu0Yzzzrzo6HrsRiQKzpnRBb1/dMa6P3hz

# 75XbMRBctNsFhZC07WCmjExdLg2eHW5uV0TY8D5+6wozJf7vF3+WHkYPO85Z+BC6

# U4FkNbYNycZ9cE4j1tXRdyDCfml6c0HWPHjNVDObrv9lKt3qUqFpX38VCqVCyNOO

# 1UcXfQiVjJw32U2WUKZjt/neJKHEBsm9kFsLuWzkQ53+qcaSaytmsCnk2gOglrlD

# 5d3kKyvvAw+rzm0lT8K38P6PLxfZQHhu4W8dV7Av8N2ZmDCCBr0wggSloAMCAQIC

# EzMAAAA5O7Y3Gb8GHWcAAAAAADkwDQYJKoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYT

# AlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYD

# VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBS

# b290IENlcnRpZmljYXRlIEF1dGhvcml0eSAyMDExMB4XDTI0MDgwODIwNTQxOFoX

# DTM2MDMyMjIyMTMwNFowVzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFU1pY3Jvc29m

# dCBDb3Jwb3JhdGlvbjEoMCYGA1UEAxMfTWljcm9zb2Z0IENvZGUgU2lnbmluZyBQ

# Q0EgMjAyNDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANgBnB7jOMeq

# lRYHNa265v4IY9fH8TKhemHfPINe1gpLaV3dhg324WwH06LcHbpnsBukCDNitryo

# 0dtS/EW6I/yEL/bLSY8hKpbfQuWusBPr9qazYcDxCW/qnjb5JsI1s8bNOg3bVATv

# QVL4tcf03aTycsz8QeCdM0l/yHRObJ9QqazM1r6VPEOJ7LL+uEEb73w6QCuhs89a

# 1uv1zerOYMnsneRRwCbpyW11IcggU0cRKDDq1pjVJzIbIF6+oiXXbReOsgeI8zu1

# FyQfK0fVkaya8SmVHQ/tOf23mZ4W9k0Ri22QW9p3UgSC5OUDktKxxcCmGL6tXLfO

# GSWHIIV4YrTJTT6PNty5REojHJuZHArkF9VnHTERWoTjAzfI3kP+5b4alUdhgAZ7

# ttOu1bVnXfHaqPYl2rPs20ji03LOVWsh/radgE17es5hL+t6lV0eVHrVhsssROWJ

# uz2MXMCt7iw7lFPG9LXKGjsmonn2gotGdHIuEg5JnJMJVmixd5LRlkmgYRZKzhxS

# CwyoGIq0PhaA7Y+VPct5pCHkijcIIDm0nlkK+0KyepolcqGm0T/GYQRMhHJlGOOm

# VQop36wUVUYklUy++vDWeEgEo4s7hxN6mIbf2MSIQ/iIfMZgJxC69oukMUXCrOC3

# SkE/xIkgpfl22MM1itkZ35nNXkMolU1lAgMBAAGjggFOMIIBSjAOBgNVHQ8BAf8E

# BAMCAYYwEAYJKwYBBAGCNxUBBAMCAQAwHQYDVR0OBBYEFH9ZP1Qh2q1P7wXl5qPX

# LQaUEggxMBkGCSsGAQQBgjcUAgQMHgoAUwB1AGIAQwBBMA8GA1UdEwEB/wQFMAMB

# Af8wHwYDVR0jBBgwFoAUci06AjGQQ7kUBU7h6qfHMdEjiTQwWgYDVR0fBFMwUTBP

# oE2gS4ZJaHR0cDovL2NybC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMv

# TWljUm9vQ2VyQXV0MjAxMV8yMDExXzAzXzIyLmNybDBeBggrBgEFBQcBAQRSMFAw

# TgYIKwYBBQUHMAKGQmh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvY2VydHMv

# TWljUm9vQ2VyQXV0MjAxMV8yMDExXzAzXzIyLmNydDANBgkqhkiG9w0BAQwFAAOC

# AgEAFJQfOChP7onn6fLIMKrSlN1WYKwDFgAddymOUO3FrM8d7B/W/iQ6DxXsDn7D

# 5W4wMwYeLystcEqfkjz4NURRgazyMu5yRzQh4LqjA4tStTcJh1opExo7nn5PuPBY

# nbu0+THSuVHTe0VTTPVhily/piFrDo3axQ9P4C+Ol5yet+2gTfekICS5xS+cYfSI

# vgn0JksVBVMYVI5QFu/qhnLhsEFEUzG8fvv0hjgkO+lkpV9ty6GkN4vdnd7ya6Q6

# aR9y34aiM1qmxaxBi6OUnyNl6fkuun/diTFnYDLTppOkr/mg5WSfCiDVMNCxtj4w

# PKC5OmHm1DQIt/MNokbbH3UGsFP1QbzsLocuSqLCvH09Io3fDPTmscR9Y75G4qX7

# RTX8AdBPo0I6OEojf39zuFZt0qOHm65YWQE69cZM2ueE1MB05dNNgHK9gTE7zKvK

# /fg8B2qjW88MT/WF5V5uvZGtqa9FSL2RazArA+rDPuf6JGYz4HpgMZHB4S6szWSK

# YBv0VisCzfxgeU+dquXW9bd0auYlOB58DPcOYKdc3Se94g+xL4pcEhbB54JOgAkw

# YTu/9dLeH2pDqeJZAABVDWRQCaXfO5LgyKwKCLYXpigrZYCjUSBcr+Ve8PFWMhVT

# Ql0v4q8J/AUmQN5W4n101cY2L4A7GTQG1h32HHAvfQESWP0xghndMIIZ2QIBATBu

# MFcxCzAJBgNVBAYTAlVTMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24x

# KDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMjQCEzMAAAIc

# +s3Fm+gvfsQAAAAAAhwwDQYJYIZIAWUDBAIBBQCggZAwGQYJKoZIhvcNAQkDMQwG

# CisGAQQBgjcCAQQwLwYJKoZIhvcNAQkEMSIEIFjqTbad3t5ckwEmmjsjS0ilDcvM

# d9voXqYRt4BgM/8CMEIGCisGAQQBgjcCAQwxNDAyoBSAEgBNAGkAYwByAG8AcwBv

# AGYAdKEagBhodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20wDQYJKoZIhvcNAQEBBQAE

# ggEAUhpdOb+vuC8Y4kkncob9zdgzqQcdNmtQ2mTj8+MuWk7Eq6EYdpIrTDqMhMbR

# ErI5ExzD+DFY5WnhMME7vLOmE0g9cOwyxOG1/1w6JTXVaSE9et5/sWc7LHTPOLc/

# LAyJjwUmMRIgNNhGHFqtxe8ZezgiJHy/ABf0OoBaustPKPoHg5qStp70DUci6cvv

# 6ikdH3hHqxI9QXvcw3ayyHnBMHLPx+qw3bvSdIXrp600d0WUOkw8DI2bdHZvvI0L

# olHiU5NA3rVKQGpDq4uggWglTG7aTS9eqAfwEZWQC/w4JtF+8bLprdizcPjIeSxN

# QzTDaCrpRGIqvWiBMItHcOmxoqGCF60wghepBgorBgEEAYI3AwMBMYIXmTCCF5UG

# CSqGSIb3DQEHAqCCF4YwgheCAgEDMQ8wDQYJYIZIAWUDBAIBBQAwggFaBgsqhkiG

# 9w0BCRABBKCCAUkEggFFMIIBQQIBAQYKKwYBBAGEWQoDATAxMA0GCWCGSAFlAwQC

# AQUABCByBt0Dm3iIHgMztS/A1qUDjUcgkZMgnAW6rNdvpsyWQwIGauvdb53hGBMy

# MDI2MTEwOTA5MzU0NC40MzFaMASAAgH0oIHZpIHWMIHTMQswCQYDVQQGEwJVUzET

# MBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMV

# TWljcm9zb2Z0IENvcnBvcmF0aW9uMS0wKwYDVQQLEyRNaWNyb3NvZnQgSXJlbGFu

# ZCBPcGVyYXRpb25zIExpbWl0ZWQxJzAlBgNVBAsTHm5TaGllbGQgVFNTIEVTTjo2

# NTFBLTA1RTAtRDk0NzElMCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAgU2Vy

# dmljZaCCEfswggcoMIIFEKADAgECAhMzAAACMrHO+nAftd3BAAEAAAIyMA0GCSqG

# SIb3DQEBCwUAMHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAw

# DgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24x

# JjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwMB4XDTI2MTAx

# NTE4MzczOFoXDTI4MDExMTE4MzczOFowgdMxCzAJBgNVBAYTAlVTMRMwEQYDVQQI

# EwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3Nv

# ZnQgQ29ycG9yYXRpb24xLTArBgNVBAsTJE1pY3Jvc29mdCBJcmVsYW5kIE9wZXJh

# dGlvbnMgTGltaXRlZDEnMCUGA1UECxMeblNoaWVsZCBUU1MgRVNOOjY1MUEtMDVF

# MC1EOTQ3MSUwIwYDVQQDExxNaWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2aWNlMIIC

# IjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAuIiojJUFGaQHk5FKZE4QkQ7j

# Bn+TBudexQaUYa5N3LDCKKXyMrON90zB3QoSsm/WWrYW3hflk/tXi1SqgDtriVrL

# wjfv243JIygUzdTjd8hwpafHuT5ZBpw1NOy1p36GO6DqQwsYC/Z2WQLQUCxAP362

# TPeAJonJzdjbhhjuQtspg9U9ih4DEyHVfMNkkrvu2W8pfZKyLXq6QV3uNQduGYMf

# oxyEsOIZgQTOfaxebc1pTWNwJhTqCqepbFD62M+kVdK/q7CBknvah07Z3P+FZxh3

# v6KWJ7bavkDwVw384RWg/paevpkI9LW0OxIufTFMrmtXi3wUwJd2ZNurXWJdq+aE

# QBVZnUD+9q7G26uK3uQZWESOy76E2vpr8xfyPmeJSgF9CQPwFnENUmAh808If42/

# hBe4bw7GFnqYMs/JH9t/mzFCs6F6tWnmMwv7p1RSSsGTpeywoLFBvzoR8MEV/7pp

# JpIUyu3NEOGLPRuMVsUNipwnkktnOTC2K9A0VQ2AQHJHm8famiGSF2pEhBx8fOQh

# bpOhZMdgbhOkC5+1qCOUQNDfpK3TIu+L+RnOYuDkQWHzw9zejS6Ii0iAaV9hNWsS

# QAhXggbHvbBOuqChobJ+CnTJNK3/chAIqTQILEj/SCPORAOMLZSNTdAgrDlIOIkH

# co+p2cZ+FXRYx13iG2MCAwEAAaOCAUkwggFFMB0GA1UdDgQWBBRSt7ZncULM67S+

# eRuxJ8BCTAZUWTAfBgNVHSMEGDAWgBSfpxVdAF5iXYP05dJlpxtTNRnpcjBfBgNV

# HR8EWDBWMFSgUqBQhk5odHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2Ny

# bC9NaWNyb3NvZnQlMjBUaW1lLVN0YW1wJTIwUENBJTIwMjAxMCgxKS5jcmwwbAYI

# KwYBBQUHAQEEYDBeMFwGCCsGAQUFBzAChlBodHRwOi8vd3d3Lm1pY3Jvc29mdC5j

# b20vcGtpb3BzL2NlcnRzL01pY3Jvc29mdCUyMFRpbWUtU3RhbXAlMjBQQ0ElMjAy

# MDEwKDEpLmNydDAMBgNVHRMBAf8EAjAAMBYGA1UdJQEB/wQMMAoGCCsGAQUFBwMI

# MA4GA1UdDwEB/wQEAwIHgDANBgkqhkiG9w0BAQsFAAOCAgEAm1xzRV0I/x8ww2CH

# vm0vp6wRGrfdwHap1D/rmTJHXLS+wCyQmq4lf7+G7zt6ayfU/M8k/HgHsftpbDB5

# LPutZ5vbMgmSdlfr+xvn8CaIzS60YfhR5GxVR+KznS71hnB2UW5oCB4RR6e66LMv

# RZPqtt+K+gNPiAELIj0IG6+hffJEVTMQ3JGiPD2MRPzygmXWeT5dFOKpR1ivRB+1

# JgmDhYLKvG/mlsg1leNEcHmGI7BXXJE6SNgEkLL/qIt9+34OlE2e0PlAb/9xpIqd

# KjpLrvqeYj5sRGvGUAcGkpbzHnyG9sd5FXdmt8ga1bcKieoxjL+7Rngg5RMrrbxU

# wMfXylym+YGSYqzPP75kdjwpBG7NboAAOTLkn0oJELziroQJUMCly8bz2vAOQQbz

# tAtKQPJHy9ny7v9NR2rUmNVOOj5RdrNO6eBOLShcdZl7Vg6k2DS8BHnKcZSAg/Cx

# LhCp4Gr3p27bYC0UJ3eBJRyYhFVmDZ5dXWbwrmSh6as6H6DrRfNiqJ0h65JOoDND

# mdmXyKZdeO8nfYqqEVhSZXF94MZb8orCK3BKvSfLGhiIC+VdKDBN0qnjsdeEcrkF

# lmO16DPSLV3kya8PtB4legWj0+s7cr6Mofm90tuHInNCFYn2uGHuJCF2nVVf4wK4

# GCg0nafC0I789iQqukkCUXOoWyIwggdxMIIFWaADAgECAhMzAAAAFcXna54Cm0mZ

# AAAAAAAVMA0GCSqGSIb3DQEBCwUAMIGIMQswCQYDVQQGEwJVUzETMBEGA1UECBMK

# V2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0

# IENvcnBvcmF0aW9uMTIwMAYDVQQDEylNaWNyb3NvZnQgUm9vdCBDZXJ0aWZpY2F0

# ZSBBdXRob3JpdHkgMjAxMDAeFw0yMTA5MzAxODIyMjVaFw0zMDA5MzAxODMyMjVa

# MHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdS

# ZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMT

# HU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwMIICIjANBgkqhkiG9w0BAQEF

# AAOCAg8AMIICCgKCAgEA5OGmTOe0ciELeaLL1yR5vQ7VgtP97pwHB9KpbE51yMo1

# V/YBf2xK4OK9uT4XYDP/XE/HZveVU3Fa4n5KWv64NmeFRiMMtY0Tz3cywBAY6GB9

# alKDRLemjkZrBxTzxXb1hlDcwUTIcVxRMTegCjhuje3XD9gmU3w5YQJ6xKr9cmmv

# Haus9ja+NSZk2pg7uhp7M62AW36MEBydUv626GIl3GoPz130/o5Tz9bshVZN7928

# jaTjkY+yOSxRnOlwaQ3KNi1wjjHINSi947SHJMPgyY9+tVSP3PoFVZhtaDuaRr3t

# pK56KTesy+uDRedGbsoy1cCGMFxPLOJiss254o2I5JasAUq7vnGpF1tnYN74kpEe

# HT39IM9zfUGaRnXNxF803RKJ1v2lIH1+/NmeRd+2ci/bfV+AutuqfjbsNkz2K26o

# ElHovwUDo9Fzpk03dJQcNIIP8BDyt0cY7afomXw/TNuvXsLz1dhzPUNOwTM5TI4C

# vEJoLhDqhFFG4tG9ahhaYQFzymeiXtcodgLiMxhy16cg8ML6EgrXY28MyTZki1ug

# poMhXV8wdJGUlNi5UPkLiWHzNgY1GIRH29wb0f2y1BzFa/ZcUlFdEtsluq9QBXps

# xREdcu+N+VLEhReTwDwV2xo3xwgVGD94q0W29R6HXtqPnhZyacaue7e3PmriLq0C

# AwEAAaOCAd0wggHZMBIGCSsGAQQBgjcVAQQFAgMBAAEwIwYJKwYBBAGCNxUCBBYE

# FCqnUv5kxJq+gpE8RjUpzxD/LwTuMB0GA1UdDgQWBBSfpxVdAF5iXYP05dJlpxtT

# NRnpcjBcBgNVHSAEVTBTMFEGDCsGAQQBgjdMg30BATBBMD8GCCsGAQUFBwIBFjNo

# dHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL0RvY3MvUmVwb3NpdG9yeS5o

# dG0wEwYDVR0lBAwwCgYIKwYBBQUHAwgwGQYJKwYBBAGCNxQCBAweCgBTAHUAYgBD

# AEEwCwYDVR0PBAQDAgGGMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAU1fZW

# y4/oolxiaNE9lJBb186aGMQwVgYDVR0fBE8wTTBLoEmgR4ZFaHR0cDovL2NybC5t

# aWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMvTWljUm9vQ2VyQXV0XzIwMTAt

# MDYtMjMuY3JsMFoGCCsGAQUFBwEBBE4wTDBKBggrBgEFBQcwAoY+aHR0cDovL3d3

# dy5taWNyb3NvZnQuY29tL3BraS9jZXJ0cy9NaWNSb29DZXJBdXRfMjAxMC0wNi0y

# My5jcnQwDQYJKoZIhvcNAQELBQADggIBAJ1VffwqreEsH2cBMSRb4Z5yS/ypb+pc

# FLY+TkdkeLEGk5c9MTO1OdfCcTY/2mRsfNB1OW27DzHkwo/7bNGhlBgi7ulmZzpT

# Td2YurYeeNg2LpypglYAA7AFvonoaeC6Ce5732pvvinLbtg/SHUB2RjebYIM9W0j

# VOR4U3UkV7ndn/OOPcbzaN9l9qRWqveVtihVJ9AkvUCgvxm2EhIRXT0n4ECWOKz3

# +SmJw7wXsFSFQrP8DJ6LGYnn8AtqgcKBGUIZUnWKNsIdw2FzLixre24/LAl4FOmR

# sqlb30mjdAy87JGA0j3mSj5mO0+7hvoyGtmW9I/2kQH2zsZ0/fZMcm8Qq3UwxTSw

# ethQ/gpY3UA8x1RtnWN0SCyxTkctwRQEcb9k+SS+c23Kjgm9swFXSVRk2XPXfx5b

# RAGOWhmRaw2fpCjcZxkoJLo4S5pu+yFUa2pFEUep8beuyOiJXk+d0tBMdrVXVAmx

# aQFEfnyhYWxz/gq77EFmPWn9y8FBSX5+k77L+DvktxW/tM4+pTFRhLy/AsGConsX

# HRWJjXD+57XQKBqJC4822rpM+Zv/Cuk0+CQ1ZyvgDbjmjJnW4SLq8CdCPSWU5nR0

# W2rRnj7tfqAxM328y+l7vzhwRNGQ8cirOoo6CGJ/2XBjU02N7oJtpQUQwXEGahC0

# HVUzWLOhcGbyoYIDVjCCAj4CAQEwggEBoYHZpIHWMIHTMQswCQYDVQQGEwJVUzET

# MBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMV

# TWljcm9zb2Z0IENvcnBvcmF0aW9uMS0wKwYDVQQLEyRNaWNyb3NvZnQgSXJlbGFu

# ZCBPcGVyYXRpb25zIExpbWl0ZWQxJzAlBgNVBAsTHm5TaGllbGQgVFNTIEVTTjo2

# NTFBLTA1RTAtRDk0NzElMCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAgU2Vy

# dmljZaIjCgEBMAcGBSsOAwIaAxUAO44GpS2jiIOHc9wHT5UVTk1901CggYMwgYCk

# fjB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMH

# UmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQD

# Ex1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMDANBgkqhkiG9w0BAQsFAAIF

# AO6boXowIhgPMjAyNjExMDkwMTMzNDZaGA8yMDI2MTExMDAxMzM0NlowdDA6Bgor

# BgEEAYRZCgQBMSwwKjAKAgUA7puhegIBADAHAgEAAgINWzAHAgEAAgITxzAKAgUA

# 7pzy+gIBADA2BgorBgEEAYRZCgQCMSgwJjAMBgorBgEEAYRZCgMCoAowCAIBAAID

# B6EgoQowCAIBAAIDAYagMA0GCSqGSIb3DQEBCwUAA4IBAQBjulRHh6f9ne2/7eq8

# zgexO3xlsF7g3VxFDN4i3S8SzCIYaRh2CANidJzOUNfuB9S64/rN+2uiGxnXEouX

# syKlnYBulQ5kQ7ON24LSLsqI3yjbfU0BBg4QYPwNdNOv+C/HL8bcer/0bs9SxTGi

# st4avaiPI3xJ3f6ZYXLLc6SFuYySYVFFsiITUhvkWJhFCFwN+N3i+9icNtv54idH

# gLvuudVmPOkDPH54+jsdmgOtRQ2h18nlqAmUxGGqF8Qzp4NxpfI5F+1UPTUg0nni

# yV/sXAAO0xspXiWoUwfpU2oK2nZzle0/1IDWoDhzqn7XVlkoQsQ2WkpZe1WNS2Ef

# pnTbMYIEDTCCBAkCAQEwgZMwfDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hp

# bmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jw

# b3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTAC

# EzMAAAIysc76cB+13cEAAQAAAjIwDQYJYIZIAWUDBAIBBQCgggFKMBoGCSqGSIb3

# DQEJAzENBgsqhkiG9w0BCRABBDAvBgkqhkiG9w0BCQQxIgQgJJWvC2FWqz2moeuj

# RR7cAxV24SYbcWulReaUfM3GU+UwgfoGCyqGSIb3DQEJEAIvMYHqMIHnMIHkMIG9

# BCBF5zy9kKrZ5pfsI+uP8sTSbHoR5+qNFqg/IJxwNn6uNjCBmDCBgKR+MHwxCzAJ

# BgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25k

# MR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jv

# c29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwAhMzAAACMrHO+nAftd3BAAEAAAIyMCIE

# IHQ8mmJJxS8ZP8+r+s2ofGILSz50vgDVp6phS8TZQczlMA0GCSqGSIb3DQEBCwUA

# BIICAKIfsyBPA3TCF84atXOJoBtZECBaD8r/hKmfWsY++sgU5GJ/c6LAFWPutTjM

# I4h29xGnIIo/yxPegULsLvOjy8OXx7RCj683rpsI0rGHmmQopNw/3Htr7a6VZ5gn

# jzg0+PKByX2FMPjblj1hP+9/2ExDMQer7dtUJgMOz1Wg8hYLIz+FyrvIQWtEbmRK

# ZcF2xXZPbxZZw5stsel+RGoRvsvEqMlsljD7eWKnMgaeeyGe2P5vsDxGKEX1dgUn

# zYIACe1iDFoWWdxiTPEz6PEMdtbNk1JloEyO7cchLVJehQEt7r7KG0KL2/ZaaePa

# dfvVR9cgJ/o/21X9d8xyARe5St2cDjBV1zscm+n6uOz3m+yodsyBjEKp/au4/7WS

# 6yBPaxDdpl7G13y7Oz6AMqVilo83H8RgB0Eds3XxzW7OxC4u+CCX67An/PmfUWsd

# /ZBt9Rz/tswSWt0d3NZI1HWDzzn1DO9MWVqYb6HVpxezgrCTGYwsqVOlqCDQ8wAS

# rBhfbUcFb4kRHC6KGSj0+wD2vSBGCbTncgEyx2WUc/RFuktLd5l73wiyZJU7AsQF

# spYQq+F9NkUN7BRcPaA3EsOas1uoZlOFc+GheST3CucnM7V7reMIu0KK6jIi9sqe

# PliByb2/FwR67S5v8eV3RRTiu8mJR/4PSzPbWebgCisJBW8Z

# SIG # End signature block