Avm.Authoring

0.5.2

Public/Invoke-AvmPreCommit.ps1

                                function Invoke-AvmPreCommit {

    <#

    .SYNOPSIS

        Run the standard pre-commit gauntlet against the resolved module:

        bicep:     format -> lint -> validate -> docs.

        terraform: sync -> check convention -> transform -> format -> docs.

    .DESCRIPTION

        Composition cmdlet. Resolves the module context once with

        Get-AvmModuleContext, then invokes the per-ecosystem step chain

        in sequence against that same module root. Each step's structured

        result is captured. The overall Status is 'pass' only when every

        executed step reports Status='pass' (format reports an implicit

        pass when no errors are thrown).

        The Terraform chain follows the upstream avm-terraform-governance

        pre-commit.porch.yaml philosophy: after an initial managed-files

        sync it stays fast and fully offline

        (check convention -> transform -> format -> docs), so it

        never needs `terraform init`. The `sync` step runs FIRST so the

        rest of the chain sees the freshest governed files; it fetches the

        managed-file source (the Azure/avm-terraform-governance repo by

        default, overridable or pinned to a local path - see Invoke-AvmSync)

        and writes any adds/updates/removals straight into the working tree.

        The two checks that require an

        initialised working directory - lint (tflint) and validate

        (`terraform validate`) - live in `avm pr-check` instead, mirroring

        upstream porch, which runs tflint and the policy/plan checks in

        pr-check rather than pre-commit.

        Status semantics:

          - 'pass'    : step returned Status='pass' (or didn't throw for

                        format).

          - 'fail'    : step returned Status='fail'.

          - 'error'   : step threw any exception other than

                        AvmConfigurationException; the chain aborts.

          - 'skipped' : step threw AvmConfigurationException - the engine

                        is a deliberate placeholder for a future slice

                        (e.g. bicep-docs, terraform transform). The

                        chain CONTINUES and overall status is NOT

                        marked failed by a skip.

        By default the gauntlet is fail-soft: a step that returns

        Status='fail' (e.g. lint diagnostics) does NOT abort subsequent

        steps - the caller gets the full picture in one run. A step that

        THROWS (non-AvmConfigurationException) IS fatal and aborts the

        rest of the chain. Set -StopOnFail to abort on the first

        Status='fail' instead.

        Routed by the dispatcher: 'avm pre-commit'.

    .PARAMETER Path

        Working directory whose enclosing module to validate. Defaults to

        the current location.

    .PARAMETER Ecosystem

        Force the ecosystem selector. Defaults to 'auto'.

    .PARAMETER AllowPathFallback

        When set, accept a PATH-resolved tool binary that self-reports the

        lock-pinned version. Forwarded to each step.

    .PARAMETER StopOnFail

        When set, abort the chain on the first step whose Status is 'fail'.

        A throwing step is always fatal regardless of this flag.

    .PARAMETER ManagedFilesRepo

        owner/name of the git repo holding the managed files. Forwarded only to

        the Terraform sync step.

    .PARAMETER ManagedFilesRef

        Git ref to fetch for the managed files. Forwarded only to the Terraform

        sync step.

    .PARAMETER ManagedFilesPath

        Path within the source repo to the managed-files base folder. Forwarded

        only to the Terraform sync step.

    .PARAMETER ManagedFilesLocalPath

        Direct local path to the managed-files base folder. Skips the managed

        files git fetch and is forwarded only to the Terraform sync step.

    .PARAMETER ConfigRepo

        owner/name of the git repo holding the managed-files config folder.

        Forwarded only to the Terraform sync step.

    .PARAMETER ConfigRef

        Git ref for the config repo. Forwarded only to the Terraform sync step.

    .PARAMETER ConfigPath

        Path within the config repo to the folder holding 'config.json' and

        'deprecated-files.json'. Forwarded only to the Terraform sync step.

    .PARAMETER ConfigLocalPath

        Direct local path to the managed-files config folder. Skips the config

        repo fetch and is forwarded only to the Terraform sync step.

    .PARAMETER RepoId

        Repository id used to look up overlays/exclusions in config.json.

        Forwarded only to the Terraform sync step.

    .OUTPUTS

        pscustomobject with:

          - Path        : the resolved module root

          - Ecosystem   : bicep | terraform

          - Status      : pass | fail | error

          - Steps       : array of { Step, Status, Error?, Result? }

          - DurationMs  : total wall-clock cost

    .EXAMPLE

        avm pre-commit

    .EXAMPLE

        Invoke-AvmPreCommit -Path C:\repos\my-module -StopOnFail

    .EXAMPLE

        avm pre-commit -Ecosystem terraform -ManagedFilesRepo Contoso/governance -ManagedFilesRef v1.2.3 -ConfigRepo Contoso/governance -ConfigRef v1.2.3 -RepoId avm-res-foo

    .EXAMPLE

        avm pre-commit -Ecosystem terraform -ManagedFilesLocalPath D:\gov\managed-files -ConfigLocalPath D:\gov\repository-config -RepoId avm-res-foo

    #>

    [CmdletBinding()]

    [OutputType([pscustomobject])]

    param(

        [Parameter(Position = 0)]

        [string] $Path = $PWD.Path,

        [ValidateSet('auto', 'bicep', 'terraform')]

        [string] $Ecosystem = 'auto',

        [switch] $AllowPathFallback,

        [switch] $StopOnFail,

        [string] $ManagedFilesRepo,

        [string] $ManagedFilesRef,

        [string] $ManagedFilesPath,

        [string] $ManagedFilesLocalPath,

        [string] $ConfigRepo,

        [string] $ConfigRef,

        [string] $ConfigPath,

        [string] $ConfigLocalPath,

        [string] $RepoId,

        [switch] $SkipModuleVersionCheck

    )

    Set-StrictMode -Version 3.0

    $ErrorActionPreference = 'Stop'

    Test-AvmModuleVersion -SkipModuleVersionCheck:$SkipModuleVersionCheck

    $startTime = [datetime]::UtcNow

    $sw = [System.Diagnostics.Stopwatch]::StartNew()

    $context = Get-AvmModuleContext -Path $Path -Ecosystem $Ecosystem

    Write-AvmLog ("pre-commit: module root = {0}; ecosystem = {1}" -f $context.Root, $context.Ecosystem) -Level Verbose | Out-Null

    $null = Resolve-AvmCommandTool -Command 'pre-commit' -Ecosystem $context.Ecosystem -AllowPathFallback:$AllowPathFallback

    $stepDefs = if ($context.Ecosystem -eq 'terraform') {

        @(

            [pscustomobject]@{ Name = 'sync'; Cmdlet = 'Invoke-AvmSync' }

            [pscustomobject]@{ Name = 'check convention'; Cmdlet = 'Invoke-AvmCheckConvention' }

            [pscustomobject]@{ Name = 'transform'; Cmdlet = 'Invoke-AvmTransform' }

            [pscustomobject]@{ Name = 'format'; Cmdlet = 'Invoke-AvmFormat' }

            [pscustomobject]@{ Name = 'docs'; Cmdlet = 'Invoke-AvmDocs' }

        )

    }

    else {

        @(

            [pscustomobject]@{ Name = 'format'; Cmdlet = 'Invoke-AvmFormat' }

            [pscustomobject]@{ Name = 'lint'; Cmdlet = 'Invoke-AvmLint' }

            [pscustomobject]@{ Name = 'validate'; Cmdlet = 'Invoke-AvmTest' }

            [pscustomobject]@{ Name = 'docs'; Cmdlet = 'Invoke-AvmDocs' }

        )

    }

    $steps = New-Object System.Collections.Generic.List[object]

    $overall = 'pass'

    $stepIndex = 0

    $syncParameterNames = @(

        'ManagedFilesRepo'

        'ManagedFilesRef'

        'ManagedFilesPath'

        'ManagedFilesLocalPath'

        'ConfigRepo'

        'ConfigRef'

        'ConfigPath'

        'ConfigLocalPath'

        'RepoId'

    )

    foreach ($def in $stepDefs) {

        $stepStatus = 'pass'

        $stepError = $null

        $stepResult = $null

        $stepIndex++

        $stepStart = [datetime]::UtcNow

        $stepSw = [System.Diagnostics.Stopwatch]::StartNew()

        Write-AvmLog ('step {0}/{1}: {2} (started {3})' -f $stepIndex, $stepDefs.Count, $def.Name, (Format-AvmTimestamp -Timestamp $stepStart)) -Level Info | Out-Null

        try {

            $stepParameters = @{

                Path              = $context.Root

                Ecosystem         = $context.Ecosystem

                AllowPathFallback = $AllowPathFallback

            }

            if ($def.Name -eq 'sync') {

                foreach ($parameterName in $syncParameterNames) {

                    if ($PSBoundParameters.ContainsKey($parameterName)) {

                        $stepParameters[$parameterName] = $PSBoundParameters[$parameterName]

                    }

                }

            }

            $stepResult = & $def.Cmdlet @stepParameters

            # Engine result objects carry their own Status; format does not

            # (it has no concept of failure unless something throws).

            if ($stepResult -and $stepResult.PSObject.Properties.Name -contains 'Status') {

                $stepStatus = $stepResult.Status

            }

        }

        catch [AvmNotSupportedException] {

            # Verb genuinely does not apply to this ecosystem (e.g. bicep-docs).

            # Continue the chain; do not flip overall status.

            $stepStatus = 'skipped'

            $stepError = $_.Exception.Message

        }

        catch [AvmConfigurationException] {

            # The repo is misconfigured, not unsupported. This must fail rather

            # than skip: a skip renders as a benign gauntlet pass, which is how

            # a step that never actually ran gets to look green.

            $stepStatus = 'fail'

            $stepError = $_.Exception.Message

        }

        catch {

            $stepStatus = 'error'

            $stepError = $_.Exception.Message

        }

        $stepSw.Stop()

        $stepEnd = $stepStart.AddMilliseconds($stepSw.Elapsed.TotalMilliseconds)

        $completionLevel = if ($stepStatus -eq 'pass') { 'Pass' } else { 'Info' }

        Write-AvmLog ('step {0}/{1}: {2} -> {3} ({4})' -f $stepIndex, $stepDefs.Count, $def.Name, $stepStatus, (Format-AvmDuration -Duration $stepSw.Elapsed)) -Level $completionLevel | Out-Null

        if ($stepStatus -in @('fail', 'error') -and -not [string]::IsNullOrWhiteSpace($stepError)) {

            # F41: narration only. Assert-AvmCommandSuccess promotes the same

            # text to the single GitHub Actions annotation for the run.

            Write-AvmLog ('  {0}: {1}' -f $def.Name, $stepError) -Level Info | Out-Null

        }

        $steps.Add([pscustomobject][ordered]@{

                Step       = $def.Name

                Status     = $stepStatus

                Error      = $stepError

                Result     = $stepResult

                StartTime  = $stepStart

                EndTime    = $stepEnd

                DurationMs = [int]$stepSw.Elapsed.TotalMilliseconds

            })

        if ($stepStatus -eq 'fail' -or $stepStatus -eq 'error') { $overall = $stepStatus }

        if ($stepStatus -eq 'error') { break }

        if ($StopOnFail -and $stepStatus -eq 'fail') { break }

    }

    $sw.Stop()

    return [pscustomobject][ordered]@{

        Path       = $context.Root

        Ecosystem  = $context.Ecosystem

        Status     = $overall

        Steps      = $steps.ToArray()

        StartTime  = $startTime

        EndTime    = $startTime.AddMilliseconds($sw.Elapsed.TotalMilliseconds)

        DurationMs = [int]$sw.Elapsed.TotalMilliseconds

    }

}

# SIG # Begin signature block

# MIInQQYJKoZIhvcNAQcCoIInMjCCJy4CAQExDzANBglghkgBZQMEAgEFADB5Bgor

# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG

# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCAiNY8tNw4+XVDf

# CoOvqPMOfReEMaZJ2/ZIqGR3gbgE3qCCDLowggX1MIID3aADAgECAhMzAAACHU0Z

# yE7XD1dIAAAAAAIdMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMR4wHAYD

# VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBD

# b2RlIFNpZ25pbmcgUENBIDIwMjQwHhcNMjYwNDE2MTg1OTQzWhcNMjcwNDE1MTg1

# OTQzWjB0MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE

# BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYD

# VQQDExVNaWNyb3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IB

# DwAwggEKAoIBAQDQvewXxx9gZZFC6Ys1WBay8BJ8kGA4JQnH5CMafqOASlTpK9H8

# o5ZXTXt0caVQTNMUPt445wXYD+dFtaKWTwDn1I52oUSrC9vJin1Gsqt+zyKJL5Dg

# 3eQXbQNR61DmMy20GLTIO3SFed9Rfi/ophgCLGFLDR3r0KvHjwMb/jYWS0celV/4

# Lz27LfAekm8v9E5IXaeiXbAUYZKK090n4CVl3JBtbN+9DtI9SNu/yjvozW52/u7R

# X/Ttpa/KDlpuokZ+Zcbvmtd9ur9gFLvZzh41o9MsE/clQtdaFWGvuo6Jua/ntpgk

# ey3E5/vBFe+MJPG6phdnuo6r57ZudCudiI1bAgMBAAGjggGbMIIBlzAOBgNVHQ8B

# Af8EBAMCB4AwHwYDVR0lBBgwFgYKKwYBBAGCN0wIAQYIKwYBBQUHAwMwHQYDVR0O

# BBYEFH6QuMwqcPG0hQlQ6c5jCtTTLrVeMEUGA1UdEQQ+MDykOjA4MR4wHAYDVQQL

# ExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xFjAUBgNVBAUTDTIzMDAxMis1MDc1NTkw

# HwYDVR0jBBgwFoAUf1k/VCHarU/vBeXmo9ctBpQSCDEwYAYDVR0fBFkwVzBVoFOg

# UYZPaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jcmwvTWljcm9zb2Z0

# JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNybDBtBggrBgEFBQcBAQRh

# MF8wXQYIKwYBBQUHMAKGUWh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMv

# Y2VydHMvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNy

# dDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4ICAQBKTbYOjzwTG/DXGaz9

# s6+fQeaTtDcFmMY+5UyVFCyj7Pv+5i37qfX8lSL/tBIfYQfWsMuBQlfZurJD6r4H

# VJ2CeH+1fgiq8dcHdVKoZ3Sa2qXoX3cq9iS8cVb06B7+5/XJ7I0OxHH9fDsvJ3T3

# w5V/ZtAIFmLrl+P0CtG+92uzRsn0nTbdFjOkLMLWPLAU3THohKRlSEMgFJpPkm5n

# 5UAZ35xX6FWCrDLsSKb555bTifwa8mJBwdlof0bmfYidH+dxZ1FdDxvLnNl9zeKs

# A4kejaaIqqIPguhwAti5Ql7BlTNoJNwxCvBmqW2MQLnCkYN/VVUsR3V2x/rcTNzo

# Bf/Z/SpROvdaA2ZOOd1uioXJt3tdLQ7vHpqpib0KfWr/FWXW10q38VxfCnRQBqzb

# SuztR7nEMuzX7Ck+B/XaPDXd1qh72+QYyB0Z2VzWmO9zsnb9Uq/dwu8LGeQqnyu6

# 7SDGACvnXii2fb9+US492VTnXSnFKyqwgzUyFMtZK1/sHYTv6bG4TtQUygQxTN+Z

# V+aJIlKO2MqZ7bKrAnOzS9m6NgoTdWOq11bTOZwKlIEV/EhV9SWkDmdpR/hPPT2v

# 6TEj4F8PT/zHjRezIU5c/DGlt/VhY/pK0XkJtEyMmmS1BMtjU/rqBZVMIm3dnxQs

# /TBByr+Cf8Z1r7aifQVQ+WSqzjCCBr0wggSloAMCAQICEzMAAAA5O7Y3Gb8GHWcA

# AAAAADkwDQYJKoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpX

# YXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQg

# Q29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBSb290IENlcnRpZmljYXRl

# IEF1dGhvcml0eSAyMDExMB4XDTI0MDgwODIwNTQxOFoXDTM2MDMyMjIyMTMwNFow

# VzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEo

# MCYGA1UEAxMfTWljcm9zb2Z0IENvZGUgU2lnbmluZyBQQ0EgMjAyNDCCAiIwDQYJ

# KoZIhvcNAQEBBQADggIPADCCAgoCggIBANgBnB7jOMeqlRYHNa265v4IY9fH8TKh

# emHfPINe1gpLaV3dhg324WwH06LcHbpnsBukCDNitryo0dtS/EW6I/yEL/bLSY8h

# KpbfQuWusBPr9qazYcDxCW/qnjb5JsI1s8bNOg3bVATvQVL4tcf03aTycsz8QeCd

# M0l/yHRObJ9QqazM1r6VPEOJ7LL+uEEb73w6QCuhs89a1uv1zerOYMnsneRRwCbp

# yW11IcggU0cRKDDq1pjVJzIbIF6+oiXXbReOsgeI8zu1FyQfK0fVkaya8SmVHQ/t

# Of23mZ4W9k0Ri22QW9p3UgSC5OUDktKxxcCmGL6tXLfOGSWHIIV4YrTJTT6PNty5

# REojHJuZHArkF9VnHTERWoTjAzfI3kP+5b4alUdhgAZ7ttOu1bVnXfHaqPYl2rPs

# 20ji03LOVWsh/radgE17es5hL+t6lV0eVHrVhsssROWJuz2MXMCt7iw7lFPG9LXK

# Gjsmonn2gotGdHIuEg5JnJMJVmixd5LRlkmgYRZKzhxSCwyoGIq0PhaA7Y+VPct5

# pCHkijcIIDm0nlkK+0KyepolcqGm0T/GYQRMhHJlGOOmVQop36wUVUYklUy++vDW

# eEgEo4s7hxN6mIbf2MSIQ/iIfMZgJxC69oukMUXCrOC3SkE/xIkgpfl22MM1itkZ

# 35nNXkMolU1lAgMBAAGjggFOMIIBSjAOBgNVHQ8BAf8EBAMCAYYwEAYJKwYBBAGC

# NxUBBAMCAQAwHQYDVR0OBBYEFH9ZP1Qh2q1P7wXl5qPXLQaUEggxMBkGCSsGAQQB

# gjcUAgQMHgoAUwB1AGIAQwBBMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAU

# ci06AjGQQ7kUBU7h6qfHMdEjiTQwWgYDVR0fBFMwUTBPoE2gS4ZJaHR0cDovL2Ny

# bC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMvTWljUm9vQ2VyQXV0MjAx

# MV8yMDExXzAzXzIyLmNybDBeBggrBgEFBQcBAQRSMFAwTgYIKwYBBQUHMAKGQmh0

# dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvY2VydHMvTWljUm9vQ2VyQXV0MjAx

# MV8yMDExXzAzXzIyLmNydDANBgkqhkiG9w0BAQwFAAOCAgEAFJQfOChP7onn6fLI

# MKrSlN1WYKwDFgAddymOUO3FrM8d7B/W/iQ6DxXsDn7D5W4wMwYeLystcEqfkjz4

# NURRgazyMu5yRzQh4LqjA4tStTcJh1opExo7nn5PuPBYnbu0+THSuVHTe0VTTPVh

# ily/piFrDo3axQ9P4C+Ol5yet+2gTfekICS5xS+cYfSIvgn0JksVBVMYVI5QFu/q

# hnLhsEFEUzG8fvv0hjgkO+lkpV9ty6GkN4vdnd7ya6Q6aR9y34aiM1qmxaxBi6OU

# nyNl6fkuun/diTFnYDLTppOkr/mg5WSfCiDVMNCxtj4wPKC5OmHm1DQIt/MNokbb

# H3UGsFP1QbzsLocuSqLCvH09Io3fDPTmscR9Y75G4qX7RTX8AdBPo0I6OEojf39z

# uFZt0qOHm65YWQE69cZM2ueE1MB05dNNgHK9gTE7zKvK/fg8B2qjW88MT/WF5V5u

# vZGtqa9FSL2RazArA+rDPuf6JGYz4HpgMZHB4S6szWSKYBv0VisCzfxgeU+dquXW

# 9bd0auYlOB58DPcOYKdc3Se94g+xL4pcEhbB54JOgAkwYTu/9dLeH2pDqeJZAABV

# DWRQCaXfO5LgyKwKCLYXpigrZYCjUSBcr+Ve8PFWMhVTQl0v4q8J/AUmQN5W4n10

# 1cY2L4A7GTQG1h32HHAvfQESWP0xghndMIIZ2QIBATBuMFcxCzAJBgNVBAYTAlVT

# MR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jv

# c29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMjQCEzMAAAIdTRnITtcPV0gAAAAAAh0w

# DQYJYIZIAWUDBAIBBQCggZAwGQYJKoZIhvcNAQkDMQwGCisGAQQBgjcCAQQwLwYJ

# KoZIhvcNAQkEMSIEIHSR6dddKtlnwMQeOrKiWw/9yFAZELc67D7werYVDcPqMEIG

# CisGAQQBgjcCAQwxNDAyoBSAEgBNAGkAYwByAG8AcwBvAGYAdKEagBhodHRwOi8v

# d3d3Lm1pY3Jvc29mdC5jb20wDQYJKoZIhvcNAQEBBQAEggEAesuSWQW8/NvhZJvg

# c0g6fIzh0u8y1STzQhLjkLyMrW6A2iYI1wIBq4JEbygZJXHA8TtbRcyYZX5xltJr

# MTrdWJw8X72l3WOYeEkOQJvT06j2l2umBnD3JpjQGAfEPjcs20GN2ItX5sM4ja2c

# /WHSbwn8FufFyC208oDzN9LjFv1fCIVH7NDHalhf+TEajy5rxodJW6JJnIFENnlK

# +vZQ/dBuOsddPpgiDvjrerueZhGEG/yFrqoaWv4tUbgpxh5EWLdefquIvBTIlKil

# aSyV2EgsXIMF0i41iLpbOf6tyDGWu8BsfN72WUD1xB0hmSQm/w+SV7k+RFk6Z7Uz

# Y/UQgaGCF60wghepBgorBgEEAYI3AwMBMYIXmTCCF5UGCSqGSIb3DQEHAqCCF4Yw

# gheCAgEDMQ8wDQYJYIZIAWUDBAIBBQAwggFaBgsqhkiG9w0BCRABBKCCAUkEggFF

# MIIBQQIBAQYKKwYBBAGEWQoDATAxMA0GCWCGSAFlAwQCAQUABCAwdpj9Pxqa6QYa

# RvTxEVFd4bN/vUI8msCYNyudyNZvDwIGamRW3oNAGBMyMDI2MDgwNzE5MjgyMC4y

# NDFaMASAAgH0oIHZpIHWMIHTMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGlu

# Z3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBv

# cmF0aW9uMS0wKwYDVQQLEyRNaWNyb3NvZnQgSXJlbGFuZCBPcGVyYXRpb25zIExp

# bWl0ZWQxJzAlBgNVBAsTHm5TaGllbGQgVFNTIEVTTjo2RjFBLTA1RTAtRDk0NzEl

# MCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAgU2VydmljZaCCEfswggcoMIIF

# EKADAgECAhMzAAACHAlVFdfDWQfRAAEAAAIcMA0GCSqGSIb3DQEBCwUAMHwxCzAJ

# BgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25k

# MR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jv

# c29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwMB4XDTI1MDgxNDE4NDgzMVoXDTI2MTEx

# MzE4NDgzMVowgdMxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAw

# DgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24x

# LTArBgNVBAsTJE1pY3Jvc29mdCBJcmVsYW5kIE9wZXJhdGlvbnMgTGltaXRlZDEn

# MCUGA1UECxMeblNoaWVsZCBUU1MgRVNOOjZGMUEtMDVFMC1EOTQ3MSUwIwYDVQQD

# ExxNaWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2aWNlMIICIjANBgkqhkiG9w0BAQEF

# AAOCAg8AMIICCgKCAgEAow0xEAUaFIyyLIXeFzeI8IKyBON2u0Dr02ISE5p9G5CU

# XfnFu2S0E1gWCMvDWpopX6lRxjmgnqaL3BtnWlBVTo8xUNRZu23ie4YBMAJB7Ut6

# mnqnHVwvDJxGO4TD3SnrCd+yg35B9QFejq3o4+OByvXjynaypZyukcQaLsKQvoxE

# 8ElHH7zcOXEJWmU3rnXzaW/S4SH3OPhoUbTTcy6nUgKx5pRWiQ24UEPLYzcxGJjq

# jkz+GiCWGPFHDMdW86laWvmCslouQPsN2eBk8dxJcEZmW4l6p4TthoXcfexEA9Yd

# YaMz10aMhZNpdsNaDtDQUMDEC3k1D1My69MXSPlUmD9xFyDlkXiVa7BCEp3XcVtq

# TgzHGwr28JD6oE7zEPYeuZOiuCBXTZSo/wk3tbDlsESbIPV6inYqrzxiMYqlxfCd

# zC3Cimh9/NT/Lk9/aU+Iyyc9b3OaT0dZ8wgLaVDCGELRMrqyImdFHv0MudctzW/k

# PsV3Ja9ufpKWujEiN3CW//X8hFa9j5ImNeQzcMit3MoSaoGwnbiZJX1IyibIphlq

# ccXFk4oTTSOQBsAUw8U0gwOnM5UJD8mBUBd65Np6NBkx2cviJ4I34GyXFCWyy5Ft

# 1QsBYyVfAG3KOhCfPHQf8lQzJvLr57YW0bD/xVs4Ag4gTS6KZNyFEfX9jFdRlr0C

# AwEAAaOCAUkwggFFMB0GA1UdDgQWBBRa3mOCzB8u7zpvDh8MGKVYLCk7ZDAfBgNV

# HSMEGDAWgBSfpxVdAF5iXYP05dJlpxtTNRnpcjBfBgNVHR8EWDBWMFSgUqBQhk5o

# dHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2NybC9NaWNyb3NvZnQlMjBU

# aW1lLVN0YW1wJTIwUENBJTIwMjAxMCgxKS5jcmwwbAYIKwYBBQUHAQEEYDBeMFwG

# CCsGAQUFBzAChlBodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2NlcnRz

# L01pY3Jvc29mdCUyMFRpbWUtU3RhbXAlMjBQQ0ElMjAyMDEwKDEpLmNydDAMBgNV

# HRMBAf8EAjAAMBYGA1UdJQEB/wQMMAoGCCsGAQUFBwMIMA4GA1UdDwEB/wQEAwIH

# gDANBgkqhkiG9w0BAQsFAAOCAgEAklb6w/deaid3BujQCtWFBe0n9pkyRy+yyWEg

# 70iDwoJ5u0e0O+4GerNzdZb1zTPsHJ8EGMyo1K7ytL21+pmdFMTl19PC8OJ5Y2p+

# XKUQy2dD+hggRMmJgDQsgbOCxHYeO+jg4t+vg61wUrovzzLkH3z0PJXXvoNuBj9L

# da9CiNMd60451Kube99ArSf6ZMj3t0p4rFbgSazDs+8TJ+8KA5GVaYjPHj9rlMuI

# 3WjohEc9apnQ6hMjMck3jlHZIwluVYeUQE0qjmApfMtTAEzbMUdY8sLTunL1GkbD

# SeKn9O7llBGnNtyM1uM9Mdv1VyWh0z/IriQKIjntqqGyoF0HvDHOFZCyUDBPLfly

# iu7Y1zQ/sPounsb96aBfQdq3h3LOn6t+m9EnNz/G6MzzWvpJk6YgTHTIqeQN/F/X

# piPvbfek3nq/PYbL3au+kBfRUHiCFXSvt6lor0HC626vUmz9ZNPOxwEWLuccomxs

# y3JwWH79vsM/7ARqoG5h6d6NahfaOuRP4XI9xtdH3Pa/NCLyQjxKXyLxzwQzjddk

# X2EpTJnlypuhPmEdea59Uz2E303LxyXSnKBvGsAnyWYAfnejr3YAiL9YrN2l2dn1

# 98RpA4DCm9QtZYiwC0q2fuUvui34PfPIUZByf7wHuuWu50hY9WLx1kOMI8xyo7AI

# 6TaNrnIwggdxMIIFWaADAgECAhMzAAAAFcXna54Cm0mZAAAAAAAVMA0GCSqGSIb3

# DQEBCwUAMIGIMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4G

# A1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMTIw

# MAYDVQQDEylNaWNyb3NvZnQgUm9vdCBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgMjAx

# MDAeFw0yMTA5MzAxODIyMjVaFw0zMDA5MzAxODMyMjVaMHwxCzAJBgNVBAYTAlVT

# MRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQK

# ExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1l

# LVN0YW1wIFBDQSAyMDEwMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA

# 5OGmTOe0ciELeaLL1yR5vQ7VgtP97pwHB9KpbE51yMo1V/YBf2xK4OK9uT4XYDP/

# XE/HZveVU3Fa4n5KWv64NmeFRiMMtY0Tz3cywBAY6GB9alKDRLemjkZrBxTzxXb1

# hlDcwUTIcVxRMTegCjhuje3XD9gmU3w5YQJ6xKr9cmmvHaus9ja+NSZk2pg7uhp7

# M62AW36MEBydUv626GIl3GoPz130/o5Tz9bshVZN7928jaTjkY+yOSxRnOlwaQ3K

# Ni1wjjHINSi947SHJMPgyY9+tVSP3PoFVZhtaDuaRr3tpK56KTesy+uDRedGbsoy

# 1cCGMFxPLOJiss254o2I5JasAUq7vnGpF1tnYN74kpEeHT39IM9zfUGaRnXNxF80

# 3RKJ1v2lIH1+/NmeRd+2ci/bfV+AutuqfjbsNkz2K26oElHovwUDo9Fzpk03dJQc

# NIIP8BDyt0cY7afomXw/TNuvXsLz1dhzPUNOwTM5TI4CvEJoLhDqhFFG4tG9ahha

# YQFzymeiXtcodgLiMxhy16cg8ML6EgrXY28MyTZki1ugpoMhXV8wdJGUlNi5UPkL

# iWHzNgY1GIRH29wb0f2y1BzFa/ZcUlFdEtsluq9QBXpsxREdcu+N+VLEhReTwDwV

# 2xo3xwgVGD94q0W29R6HXtqPnhZyacaue7e3PmriLq0CAwEAAaOCAd0wggHZMBIG

# CSsGAQQBgjcVAQQFAgMBAAEwIwYJKwYBBAGCNxUCBBYEFCqnUv5kxJq+gpE8RjUp

# zxD/LwTuMB0GA1UdDgQWBBSfpxVdAF5iXYP05dJlpxtTNRnpcjBcBgNVHSAEVTBT

# MFEGDCsGAQQBgjdMg30BATBBMD8GCCsGAQUFBwIBFjNodHRwOi8vd3d3Lm1pY3Jv

# c29mdC5jb20vcGtpb3BzL0RvY3MvUmVwb3NpdG9yeS5odG0wEwYDVR0lBAwwCgYI

# KwYBBQUHAwgwGQYJKwYBBAGCNxQCBAweCgBTAHUAYgBDAEEwCwYDVR0PBAQDAgGG

# MA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAU1fZWy4/oolxiaNE9lJBb186a

# GMQwVgYDVR0fBE8wTTBLoEmgR4ZFaHR0cDovL2NybC5taWNyb3NvZnQuY29tL3Br

# aS9jcmwvcHJvZHVjdHMvTWljUm9vQ2VyQXV0XzIwMTAtMDYtMjMuY3JsMFoGCCsG

# AQUFBwEBBE4wTDBKBggrBgEFBQcwAoY+aHR0cDovL3d3dy5taWNyb3NvZnQuY29t

# L3BraS9jZXJ0cy9NaWNSb29DZXJBdXRfMjAxMC0wNi0yMy5jcnQwDQYJKoZIhvcN

# AQELBQADggIBAJ1VffwqreEsH2cBMSRb4Z5yS/ypb+pcFLY+TkdkeLEGk5c9MTO1

# OdfCcTY/2mRsfNB1OW27DzHkwo/7bNGhlBgi7ulmZzpTTd2YurYeeNg2LpypglYA

# A7AFvonoaeC6Ce5732pvvinLbtg/SHUB2RjebYIM9W0jVOR4U3UkV7ndn/OOPcbz

# aN9l9qRWqveVtihVJ9AkvUCgvxm2EhIRXT0n4ECWOKz3+SmJw7wXsFSFQrP8DJ6L

# GYnn8AtqgcKBGUIZUnWKNsIdw2FzLixre24/LAl4FOmRsqlb30mjdAy87JGA0j3m

# Sj5mO0+7hvoyGtmW9I/2kQH2zsZ0/fZMcm8Qq3UwxTSwethQ/gpY3UA8x1RtnWN0

# SCyxTkctwRQEcb9k+SS+c23Kjgm9swFXSVRk2XPXfx5bRAGOWhmRaw2fpCjcZxko

# JLo4S5pu+yFUa2pFEUep8beuyOiJXk+d0tBMdrVXVAmxaQFEfnyhYWxz/gq77EFm

# PWn9y8FBSX5+k77L+DvktxW/tM4+pTFRhLy/AsGConsXHRWJjXD+57XQKBqJC482

# 2rpM+Zv/Cuk0+CQ1ZyvgDbjmjJnW4SLq8CdCPSWU5nR0W2rRnj7tfqAxM328y+l7

# vzhwRNGQ8cirOoo6CGJ/2XBjU02N7oJtpQUQwXEGahC0HVUzWLOhcGbyoYIDVjCC

# Aj4CAQEwggEBoYHZpIHWMIHTMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGlu

# Z3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBv

# cmF0aW9uMS0wKwYDVQQLEyRNaWNyb3NvZnQgSXJlbGFuZCBPcGVyYXRpb25zIExp

# bWl0ZWQxJzAlBgNVBAsTHm5TaGllbGQgVFNTIEVTTjo2RjFBLTA1RTAtRDk0NzEl

# MCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAgU2VydmljZaIjCgEBMAcGBSsO

# AwIaAxUAWmTiA01u5mxq/nVxiRJLMOskVGeggYMwgYCkfjB8MQswCQYDVQQGEwJV

# UzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UE

# ChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGlt

# ZS1TdGFtcCBQQ0EgMjAxMDANBgkqhkiG9w0BAQsFAAIFAO4goFcwIhgPMjAyNjA4

# MDcxODIwMDdaGA8yMDI2MDgwODE4MjAwN1owdDA6BgorBgEEAYRZCgQBMSwwKjAK

# AgUA7iCgVwIBADAHAgEAAgIonTAHAgEAAgITbjAKAgUA7iHx1wIBADA2BgorBgEE

# AYRZCgQCMSgwJjAMBgorBgEEAYRZCgMCoAowCAIBAAIDB6EgoQowCAIBAAIDAYag

# MA0GCSqGSIb3DQEBCwUAA4IBAQAF2Zhw6w22EWaLIBwSjlY6GVHY1fVv1ISPdeG9

# lKed3EiMYOKiN4qcw7A+eo/QYHf0TKDhShXJo7Vin5bnw/wzM90FH50L5oUO85hb

# T71fVsxJuTzy0ySPMSG5mAA6+23iCYukXyaKVosd+dAg1l3uB9qjJ2eiuNSJIZ+m

# anDTxP65ZPh3LeCAFPtV/4vmDoSE8n5AcvjWwq7Xy4pzNHGO42NXLj7zpqTJRee4

# CelvjA1I8SDe4q0GjIymcNadZvovOUIq1qSR0493e2JB6AZuDb0kxmZaqa+5cH30

# X5nup6RNQFgJHQLvKvyJuvn0SLHGvzslc4v9HBy6v+lPYANlMYIEDTCCBAkCAQEw

# gZMwfDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcT

# B1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UE

# AxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTACEzMAAAIcCVUV18NZB9EA

# AQAAAhwwDQYJYIZIAWUDBAIBBQCgggFKMBoGCSqGSIb3DQEJAzENBgsqhkiG9w0B

# CRABBDAvBgkqhkiG9w0BCQQxIgQgNdZsG5DJg8cGOGebUD5DhbP+qVkLf9xYMrZ9

# qSuB76AwgfoGCyqGSIb3DQEJEAIvMYHqMIHnMIHkMIG9BCCgIGkmNhdo7+KE7dWh

# I+E2Ctx2RLWoYvvJodCIciHHaDCBmDCBgKR+MHwxCzAJBgNVBAYTAlVTMRMwEQYD

# VQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNy

# b3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1w

# IFBDQSAyMDEwAhMzAAACHAlVFdfDWQfRAAEAAAIcMCIEICrxT57mEEctUHXwsmEZ

# isY7gN4o31ZKWQvJs/F+GRYDMA0GCSqGSIb3DQEBCwUABIICAFXEEXPzsUOJ6a+k

# dFvymJreCiNUxHld9hX4lXdzASsbLPRQ43kUcpH6ywVxNWEQRsuVjb2B3BucPvf8

# LQ8sjsheSbAzmW6+Qx6Izq4BaV1L/YIp+ZUgN30mCj+IJZcEkyik4vHcH6FCGQZX

# P6w4p/Bd1S6TDzfp7yDoDKfEdRHcW0ga4bNRLnvIdsQGGRqqbjxkkb1iq/6iPpS7

# YwThp3Ckb+MyoLX4hpeWFCdT1gXmzz5Gh1YQT4hiJ+WFCRVJ8K4uudWbQS/QilKR

# lsT1IMIZ74HpOmmIAwM0oMJr6dv2aVzANn6jhERr1v2I1p8CTX00I5bi0tWIWNzi

# Xc0JUgE5R5h8em/ofO+/IZ2ytdqoNWxyY3r82d2hXsuWC+Wd/xLzH0IlIeRjQn6A

# +EkcUZrrbrbsIIj2Z3ePeeFUWV35Nf0/f9MccZgqhb9jHK2OgJ42Z/6TZRJqW6tN

# NF1kyhw4hDe7YN1DHaUvYyFbhoKsTenCwRqiYCxPBCBJHJvD6dY5LqBl00rQ0Q12

# DXNyCjWRkI2M+z5FfjoeFi84ySX+Q2O6Z6SKPDE1ywrUKneLcofpUcBtgZ6Kobqg

# 19INlcDjVnIQCNuU+ov1gwZTuM7h2+DBWYKpYwEzumdjt7WasXJQVPCzAjmRPLqj

# JdQupMucqUCKJhRu2Tkc8w/6c4v1

# SIG # End signature block