BcContainerHelper

6.0.26-preview1247

AppHandling/Run-AlCops.ps1

                                <#

 .Synopsis

  Run AL Cops

 .Description

  Run AL Cops

 .Parameter containerName

  Name of the validation container. Default is bcserver.

 .Parameter credential

  These are the credentials used for the container. If not provided, the Run-AlValidation function will generate a random password and use that.

 .Parameter previousApps

  Array or comma separated list of previous version of apps to use for AppSourceCop validation and upgrade test

 .Parameter apps

  Array or comma separated list of apps to validate

 .Parameter affixes

  Array or comma separated list of affixes to use for AppSourceCop validation

 .Parameter supportedCountries

  Array or comma separated list of supportedCountries to use for AppSourceCop validation

 .Parameter obsoleteTagMinAllowedMajorMinor

  Objects that are pending obsoletion with an obsolete tag version lower than the minimum set in the AppSourceCop.json file are not allowed. (AS0105)

 .Parameter appPackagesFolder

  Folder in which symbols and apps will be cached. The folder must be shared with the container.

 .Parameter enableAppSourceCop

  Include this switch to enable AppSource Cop

 .Parameter enableCodeCop

  Include this switch to enable Code Cop

 .Parameter enableUICop

  Include this switch to enable UI Cop

 .Parameter enablePerTenantExtensionCop

  Include this switch to enable Per Tenant Extension Cop

 .Parameter failOnError

  Include this switch if you want to fail on the first error instead of returning all errors to the caller

 .Parameter ignoreWarnings

  Include this switch if you want to ignore Warnings

 .Parameter doNotIgnoreInfos

  Include this switch if you don't want to ignore Infos

 .Parameter rulesetFile

  Filename of the ruleset file for Compile-AppInBcContainer

 .Parameter skipVerification

  Include this parameter to skip verification of code signing certificate. Note that you cannot request Microsoft to set this parameter when validating for AppSource.

 .Parameter reportSuppressedDiagnostics

  Set reportSuppressedDiagnostics flag on ALC when compiling to ignore pragma warning disables

 .Parameter CompileAppInBcContainer

  Override function parameter for Compile-AppInBcContainer

#>

function Run-AlCops {

    Param(

        $containerName = $bcContainerHelperConfig.defaultContainerName,

        [PSCredential] $credential,

        $previousApps,

        $apps,

        $affixes,

        $supportedCountries,

        [string] $obsoleteTagMinAllowedMajorMinor = "",

        $appPackagesFolder = (Join-Path $bcContainerHelperConfig.hostHelperFolder ([Guid]::NewGuid().ToString())),

        [switch] $enableAppSourceCop,

        [switch] $enableCodeCop,

        [switch] $enableUICop,

        [switch] $enablePerTenantExtensionCop,

        [switch] $failOnError,

        [switch] $ignoreWarnings,

        [switch] $doNotIgnoreInfos,

        [switch] $reportsuppresseddiagnostics = $true,

        [switch] $skipVerification,

        [string] $rulesetFile = "",

        [scriptblock] $CompileAppInBcContainer

    )

    $telemetryScope = InitTelemetryScope -name $MyInvocation.InvocationName -parameterValues $PSBoundParameters -includeParameters @()

    try {

        if ($previousApps -is [String]) { $previousApps = @($previousApps.Split(',').Trim() | Where-Object { $_ }) }

        if ($apps -is [String]) { $apps = @($apps.Split(',').Trim()  | Where-Object { $_ }) }

        if ($affixes -is [String]) { $affixes = @($affixes.Split(',').Trim() | Where-Object { $_ }) }

        if ($supportedCountries -is [String]) { $supportedCountries = @($supportedCountries.Split(',').Trim() | Where-Object { $_ }) }

        $supportedCountries = $supportedCountries | Where-Object { $_ } | ForEach-Object { getCountryCode -countryCode $_ }

        if ($CompileAppInBcContainer) {

            Write-Host -ForegroundColor Yellow "CompileAppInBcContainer override"; Write-Host $CompileAppInBcContainer.ToString()

        }

        else {

            $CompileAppInBcContainer = { Param([Hashtable]$parameters) Compile-AppInBcContainer @parameters }

        }

        if ($enableAppSourceCop -and $enablePerTenantExtensionCop) {

            throw "You cannot run AppSourceCop and PerTenantExtensionCop at the same time"

        }

        $appsFolder = Join-Path $bcContainerHelperConfig.hostHelperFolder ([Guid]::NewGuid().ToString())

        New-Item -Path $appsFolder -ItemType Directory | Out-Null

        $apps = Sort-AppFilesByDependencies -containerName $containerName -appFiles @(CopyAppFilesToFolder -appFiles $apps -folder $appsFolder) -WarningAction SilentlyContinue

        $appPackFolderCreated = $false

        if (!(Test-Path $appPackagesFolder)) {

            New-Item -Path $appPackagesFolder -ItemType Directory | Out-Null

            $appPackFolderCreated = $true

        }

        $previousAppVersions = @{}

        if ($enableAppSourceCop -and $previousApps) {

            Write-Host "Copying previous apps to packages folder"

            $appList = CopyAppFilesToFolder -appFiles $previousApps -folder $appPackagesFolder

            $previousApps = Sort-AppFilesByDependencies -containerName $containerName -appFiles $appList -WarningAction SilentlyContinue

            $previousApps | ForEach-Object {

                $appFile = $_

                $tmpFolder = Join-Path ([System.IO.Path]::GetTempPath()) ([Guid]::NewGuid().ToString())

                try {

                    Extract-AppFileToFolder -appFilename $appFile -appFolder $tmpFolder -generateAppJson

                    $xappJsonFile = Join-Path $tmpFolder "app.json"

                    $xappJson = [System.IO.File]::ReadAllLines($xappJsonFile) | ConvertFrom-Json

                    Write-Host "$($xappJson.Publisher)_$($xappJson.Name) = $($xappJson.Version)"

                    $previousAppVersions += @{ "$($xappJson.Publisher)_$($xappJson.Name)" = $xappJson.Version }

                }

                catch {

                    throw "Cannot use previous app $([System.IO.Path]::GetFileName($appFile)), it might be a runtime package."

                }

                finally {

                    if (Test-Path $tmpFolder) {

                        Remove-Item $tmpFolder -Recurse -Force

                    }

                }

            }

        }

        $artifactUrl = Get-BcContainerArtifactUrl -containerName $containerName

        $artifactVersion = [System.Version]$artifactUrl.Split('/')[4]

        $latestSupportedRuntimeVersion = ''

        try {

            $latestSupportedRuntimeVersion = RunAlTool -usePrereleaseAlTool -arguments @('GetLatestSupportedRuntimeVersion',"$($artifactVersion.Major).$($artifactVersion.Minor)")

            Write-Host "Latest Supported Runtime Version: $latestSupportedRuntimeVersion"

        }

        catch {

            Write-Host -ForegroundColor Yellow "Cannot determine latest supported runtime version, will skip runtime version compatibility check"

        }

        $global:_validationResult = @()

        $apps | ForEach-Object {

            $appFile = $_

            $appFileName = [System.IO.Path]::GetFileName($appFile)

            $tmpFolder = Join-Path $bcContainerHelperConfig.hostHelperFolder ([Guid]::NewGuid().ToString())

            try {

                $length = $global:_validationResult.Length

                if (!$skipVerification) {

                    Copy-Item -path $appFile -Destination "$tmpFolder.app"

                    $signResult = Invoke-ScriptInBcContainer -containerName $containerName -scriptBlock { Param($appTmpFile)

                        if (!(Test-Path "C:\Windows\System32\vcruntime140_1.dll")) {

                            Write-Host "Downloading vcredist_x64 (version 140)"

                            (New-Object System.Net.WebClient).DownloadFile('https://aka.ms/vs/17/release/vc_redist.x64.exe', 'c:\run\install\vcredist_x64-140.exe')

                            Write-Host "Installing vcredist_x64 (version 140)"

                            start-process -Wait -FilePath c:\run\install\vcredist_x64-140.exe -ArgumentList /q, /norestart

                        }

                        Get-AuthenticodeSignature -FilePath $appTmpFile

                    } -argumentList (Get-BcContainerPath -containerName $containerName -path "$tmpFolder.app")

                    Remove-Item "$tmpFolder.app" -Force

                    if ($signResult.Status.Value -eq "valid") {

                        Write-Host -ForegroundColor Green "$appFileName is Signed with $($signResult.SignatureType.Value) certificate: $($signResult.SignerCertificate.Subject)"

                    }

                    else {

                        Write-Host -ForegroundColor Red "$appFileName is not signed, result is $($signResult.Status.Value)"

                        $global:_validationResult += @("$appFileName is not signed, result is $($signResult.Status.Value)")

                    }

                }

                Extract-AppFileToFolder -appFilename $appFile -appFolder $tmpFolder -generateAppJson -latestSupportedRuntimeVersion $latestSupportedRuntimeVersion

                $appJson = [System.IO.File]::ReadAllLines((Join-Path $tmpFolder "app.json")) | ConvertFrom-Json

                $ruleset = $null

                if ("$rulesetFile" -ne "" -or $enableAppSourceCop) {

                    $ruleset = [ordered]@{

                        "name"             = "Run-AlCops RuleSet"

                        "description"      = "Generated by Run-AlCops"

                        "includedRuleSets" = @()

                    }

                }

                if ($rulesetFile) {

                    $customRulesetFile = Join-Path $tmpFolder "custom.ruleset.json"

                    Copy-Item -Path $rulesetFile -Destination $customRulesetFile

                    $ruleset.includedRuleSets += @(@{

                            "action" = "Default"

                            "path"   = Get-BcContainerPath -containerName $containerName -path $customRulesetFile

                        })

                }

                if ($enableAppSourceCop) {

                    Write-Host "Analyzing: $appFileName"

                    Write-Host "Using affixes: $([string]::Join(',',$affixes))"

                    $appSourceCopJson = @{

                        "mandatoryAffixes" = @($affixes)

                    }

                    if ($obsoleteTagMinAllowedMajorMinor) {

                        $appSourceCopJson += @{

                            "ObsoleteTagMinAllowedMajorMinor" = $obsoleteTagMinAllowedMajorMinor

                        }

                    }

                    if ($supportedCountries) {

                        Write-Host "Using supportedCountries: $([string]::Join(',',$supportedCountries))"

                        $appSourceCopJson += @{

                            "supportedCountries" = @($supportedCountries)

                        }

                    }

                    if ($previousAppVersions.ContainsKey("$($appJson.Publisher)_$($appJson.Name)")) {

                        $previousVersion = $previousAppVersions."$($appJson.Publisher)_$($appJson.Name)"

                        if ($previousVersion -ne $appJson.Version) {

                            $appSourceCopJson += @{

                                "Publisher" = $appJson.Publisher

                                "Name"      = $appJson.Name

                                "Version"   = $previousVersion

                            }

                            Write-Host "Using previous app: $($appJson.Publisher)_$($appJson.Name)_$previousVersion.app"

                        }

                    }

                    $appSourceCopJson | ConvertTo-Json -Depth 99 | Set-Content (Join-Path $tmpFolder "appSourceCop.json") -Encoding UTF8

                    $appSourceRuleSetName = 'appsource.default.ruleset.json'

                    $appSourceRulesetFile = Join-Path $tmpFolder $appSourceRuleSetName

                    Copy-Item -Path (Join-Path $PSScriptRoot $appSourceRuleSetName) -Destination $appSourceRulesetFile -Force

                    $ruleset.includedRuleSets += @(@{

                            "action" = "Default"

                            "path"   = Get-BcContainerPath -containerName $containerName -path $appSourceRulesetFile

                        })

                    Write-Host "AppSourceCop.json content:"

                    [System.IO.File]::ReadAllLines((Join-Path $tmpFolder "appSourceCop.json")) | Out-Host

                }

                Remove-Item -Path (Join-Path $tmpFolder '*.xml') -Force

                $Parameters = @{

                    "containerName"               = $containerName

                    "credential"                  = $credential

                    "appProjectFolder"            = $tmpFolder

                    "appOutputFolder"             = $tmpFolder

                    "appSymbolsFolder"            = $appPackagesFolder

                    "CopySymbolsFromContainer"    = $true

                    "GenerateReportLayout"        = "No"

                    "EnableAppSourceCop"          = $enableAppSourceCop

                    "EnableUICop"                 = $enableUICop

                    "EnableCodeCop"               = $enableCodeCop

                    "EnablePerTenantExtensionCop" = $enablePerTenantExtensionCop

                    "Reportsuppresseddiagnostics" = $reportsuppresseddiagnostics

                    "outputTo"                    = { Param($line)

                        Write-Host $line

                        if ($line -like "error *" -or $line -like "warning *") {

                            $global:_validationResult += $line

                        }

                        elseif ($line -like "$($tmpFolder)*") {

                            $global:_validationResult += $line.SubString($tmpFolder.Length + 1)

                        }

                    }

                }

                if (!$failOnError) {

                    $Parameters += @{ "ErrorAction" = "SilentlyContinue" }

                }

                if ($ruleset) {

                    $myRulesetFile = Join-Path $tmpFolder "ruleset.json"

                    $ruleset | ConvertTo-Json -Depth 99 | Set-Content $myRulesetFile -Encoding UTF8

                    $Parameters += @{

                        "ruleset" = $myRulesetFile

                    }

                    Write-Host "Ruleset.json content:"

                    [System.IO.File]::ReadAllLines($myRulesetFile) | Out-Host

                }

                try {

                    Invoke-Command -ScriptBlock $CompileAppInBcContainer -ArgumentList ($Parameters) | Out-Null

                }

                catch {

                    Write-Host "ERROR $($_.Exception.Message)"

                    $global:_validationResult += $_.Exception.Message

                }

                if ($ignoreWarnings) {

                    Write-Host "Ignoring warnings"

                    $global:_validationResult = @($global:_validationResult | Where-Object { $_ -notlike "*: warning *" -and $_ -notlike "warning *" })

                }

                if (!$doNotIgnoreInfos) {

                    Write-Host "Ignoring infos"

                    $global:_validationResult = @($global:_validationResult | Where-Object { $_ -notlike "*: info *" -and $_ -notlike "info *" })

                }

                $lines = $global:_validationResult.Length - $length

                if ($lines -gt 0) {

                    $i = 0

                    $global:_validationResult = $global:_validationResult | ForEach-Object {

                        if ($i++ -eq $length) {

                            "$lines $(if ($ignoreWarnings) { "errors" } else { "errors/warnings"}) found in $([System.IO.Path]::GetFileName($appFile)) on $($artifactUrl.Split('?')[0]):"

                        }

                        $_

                    }

                    $global:_validationResult += ""

                }

                Invoke-ScriptInBcContainer -containerName $containerName -scriptblock { Param($appFile, $appPackagesFolder)

                    # Copy inside container to ensure files are ready

                    Write-Host "Copy $appFile to $appPackagesFolder"

                    Copy-Item -Path $appFile -Destination $appPackagesFolder -Force

                } -argumentList (Get-BcContainerPath -containerName $containerName -path $appFile), (Get-BcContainerPath -containerName $containerName -path $appPackagesFolder) | Out-Null

            }

            finally {

                if (Test-Path "$tmpFolder.app") {

                    Remove-Item -Path "$tmpFolder.app" -Force

                }

                if (Test-Path $tmpFolder) {

                    Remove-Item -Path $tmpFolder -Recurse -Force

                }

            }

        }

        if ($appPackFolderCreated) {

            Remove-Item $appPackagesFolder -Recurse -Force

        }

        Remove-Item $appsFolder -Recurse -Force

        $global:_validationResult

        Clear-Variable -Scope global -Name "_validationResult"

    }

    catch {

        TrackException -telemetryScope $telemetryScope -errorRecord $_

        throw

    }

    finally {

        TrackTrace -telemetryScope $telemetryScope

    }

}

Export-ModuleMember -Function Run-AlCops

# SIG # Begin signature block

# MIImZgYJKoZIhvcNAQcCoIImVzCCJlMCAQExDzANBglghkgBZQMEAgEFADB5Bgor

# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG

# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCATjyDOrvECXbw8

# aLbXYal48E8WungBV7/pEwHDNo279KCCH34wggWNMIIEdaADAgECAhAOmxiO+dAt

# 5+/bUOIIQBhaMA0GCSqGSIb3DQEBDAUAMGUxCzAJBgNVBAYTAlVTMRUwEwYDVQQK

# EwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xJDAiBgNV

# BAMTG0RpZ2lDZXJ0IEFzc3VyZWQgSUQgUm9vdCBDQTAeFw0yMjA4MDEwMDAwMDBa

# Fw0zMTExMDkyMzU5NTlaMGIxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2Vy

# dCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xITAfBgNVBAMTGERpZ2lD

# ZXJ0IFRydXN0ZWQgUm9vdCBHNDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoC

# ggIBAL/mkHNo3rvkXUo8MCIwaTPswqclLskhPfKK2FnC4SmnPVirdprNrnsbhA3E

# MB/zG6Q4FutWxpdtHauyefLKEdLkX9YFPFIPUh/GnhWlfr6fqVcWWVVyr2iTcMKy

# unWZanMylNEQRBAu34LzB4TmdDttceItDBvuINXJIB1jKS3O7F5OyJP4IWGbNOsF

# xl7sWxq868nPzaw0QF+xembud8hIqGZXV59UWI4MK7dPpzDZVu7Ke13jrclPXuU1

# 5zHL2pNe3I6PgNq2kZhAkHnDeMe2scS1ahg4AxCN2NQ3pC4FfYj1gj4QkXCrVYJB

# MtfbBHMqbpEBfCFM1LyuGwN1XXhm2ToxRJozQL8I11pJpMLmqaBn3aQnvKFPObUR

# WBf3JFxGj2T3wWmIdph2PVldQnaHiZdpekjw4KISG2aadMreSx7nDmOu5tTvkpI6

# nj3cAORFJYm2mkQZK37AlLTSYW3rM9nF30sEAMx9HJXDj/chsrIRt7t/8tWMcCxB

# YKqxYxhElRp2Yn72gLD76GSmM9GJB+G9t+ZDpBi4pncB4Q+UDCEdslQpJYls5Q5S

# UUd0viastkF13nqsX40/ybzTQRESW+UQUOsxxcpyFiIJ33xMdT9j7CFfxCBRa2+x

# q4aLT8LWRV+dIPyhHsXAj6KxfgommfXkaS+YHS312amyHeUbAgMBAAGjggE6MIIB

# NjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTs1+OC0nFdZEzfLmc/57qYrhwP

# TzAfBgNVHSMEGDAWgBRF66Kv9JLLgjEtUYunpyGd823IDzAOBgNVHQ8BAf8EBAMC

# AYYweQYIKwYBBQUHAQEEbTBrMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdp

# Y2VydC5jb20wQwYIKwYBBQUHMAKGN2h0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNv

# bS9EaWdpQ2VydEFzc3VyZWRJRFJvb3RDQS5jcnQwRQYDVR0fBD4wPDA6oDigNoY0

# aHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0QXNzdXJlZElEUm9vdENB

# LmNybDARBgNVHSAECjAIMAYGBFUdIAAwDQYJKoZIhvcNAQEMBQADggEBAHCgv0Nc

# Vec4X6CjdBs9thbX979XB72arKGHLOyFXqkauyL4hxppVCLtpIh3bb0aFPQTSnov

# Lbc47/T/gLn4offyct4kvFIDyE7QKt76LVbP+fT3rDB6mouyXtTP0UNEm0Mh65Zy

# oUi0mcudT6cGAxN3J0TU53/oWajwvy8LpunyNDzs9wPHh6jSTEAZNUZqaVSwuKFW

# juyk1T3osdz9HNj0d1pcVIxv76FQPfx2CWiEn2/K2yCNNWAcAgPLILCsWKAOQGPF

# mCLBsln1VWvPJ6tsds5vIy30fnFqI2si/xK4VC0nftg62fC2h5b9W9FcrBjDTZ9z

# twGpn1eqXijiuZQwggYaMIIEAqADAgECAhBiHW0MUgGeO5B5FSCJIRwKMA0GCSqG

# SIb3DQEBDAUAMFYxCzAJBgNVBAYTAkdCMRgwFgYDVQQKEw9TZWN0aWdvIExpbWl0

# ZWQxLTArBgNVBAMTJFNlY3RpZ28gUHVibGljIENvZGUgU2lnbmluZyBSb290IFI0

# NjAeFw0yMTAzMjIwMDAwMDBaFw0zNjAzMjEyMzU5NTlaMFQxCzAJBgNVBAYTAkdC

# MRgwFgYDVQQKEw9TZWN0aWdvIExpbWl0ZWQxKzApBgNVBAMTIlNlY3RpZ28gUHVi

# bGljIENvZGUgU2lnbmluZyBDQSBSMzYwggGiMA0GCSqGSIb3DQEBAQUAA4IBjwAw

# ggGKAoIBgQCbK51T+jU/jmAGQ2rAz/V/9shTUxjIztNsfvxYB5UXeWUzCxEeAEZG

# bEN4QMgCsJLZUKhWThj/yPqy0iSZhXkZ6Pg2A2NVDgFigOMYzB2OKhdqfWGVoYW3

# haT29PSTahYkwmMv0b/83nbeECbiMXhSOtbam+/36F09fy1tsB8je/RV0mIk8XL/

# tfCK6cPuYHE215wzrK0h1SWHTxPbPuYkRdkP05ZwmRmTnAO5/arnY83jeNzhP06S

# hdnRqtZlV59+8yv+KIhE5ILMqgOZYAENHNX9SJDm+qxp4VqpB3MV/h53yl41aHU5

# pledi9lCBbH9JeIkNFICiVHNkRmq4TpxtwfvjsUedyz8rNyfQJy/aOs5b4s+ac7I

# H60B+Ja7TVM+EKv1WuTGwcLmoU3FpOFMbmPj8pz44MPZ1f9+YEQIQty/NQd/2yGg

# W+ufflcZ/ZE9o1M7a5Jnqf2i2/uMSWymR8r2oQBMdlyh2n5HirY4jKnFH/9gRvd+

# QOfdRrJZb1sCAwEAAaOCAWQwggFgMB8GA1UdIwQYMBaAFDLrkpr/NZZILyhAQnAg

# NpFcF4XmMB0GA1UdDgQWBBQPKssghyi47G9IritUpimqF6TNDDAOBgNVHQ8BAf8E

# BAMCAYYwEgYDVR0TAQH/BAgwBgEB/wIBADATBgNVHSUEDDAKBggrBgEFBQcDAzAb

# BgNVHSAEFDASMAYGBFUdIAAwCAYGZ4EMAQQBMEsGA1UdHwREMEIwQKA+oDyGOmh0

# dHA6Ly9jcmwuc2VjdGlnby5jb20vU2VjdGlnb1B1YmxpY0NvZGVTaWduaW5nUm9v

# dFI0Ni5jcmwwewYIKwYBBQUHAQEEbzBtMEYGCCsGAQUFBzAChjpodHRwOi8vY3J0

# LnNlY3RpZ28uY29tL1NlY3RpZ29QdWJsaWNDb2RlU2lnbmluZ1Jvb3RSNDYucDdj

# MCMGCCsGAQUFBzABhhdodHRwOi8vb2NzcC5zZWN0aWdvLmNvbTANBgkqhkiG9w0B

# AQwFAAOCAgEABv+C4XdjNm57oRUgmxP/BP6YdURhw1aVcdGRP4Wh60BAscjW4HL9

# hcpkOTz5jUug2oeunbYAowbFC2AKK+cMcXIBD0ZdOaWTsyNyBBsMLHqafvIhrCym

# laS98+QpoBCyKppP0OcxYEdU0hpsaqBBIZOtBajjcw5+w/KeFvPYfLF/ldYpmlG+

# vd0xqlqd099iChnyIMvY5HexjO2AmtsbpVn0OhNcWbWDRF/3sBp6fWXhz7DcML4i

# TAWS+MVXeNLj1lJziVKEoroGs9Mlizg0bUMbOalOhOfCipnx8CaLZeVme5yELg09

# Jlo8BMe80jO37PU8ejfkP9/uPak7VLwELKxAMcJszkyeiaerlphwoKx1uHRzNyE6

# bxuSKcutisqmKL5OTunAvtONEoteSiabkPVSZ2z76mKnzAfZxCl/3dq3dUNw4rg3

# sTCggkHSRqTqlLMS7gjrhTqBmzu1L90Y1KWN/Y5JKdGvspbOrTfOXyXvmPL6E52z

# 1NZJ6ctuMFBQZH3pwWvqURR8AgQdULUvrxjUYbHHj95Ejza63zdrEcxWLDX6xWls

# /GDnVNueKjWUH3fTv1Y8Wdho698YADR7TNx8X8z2Bev6SivBBOHY+uqiirZtg0y9

# ShQoPzmCcn63Syatatvx157YK9hlcPmVoa1oDE5/L9Uo2bC5a4CH2RwwggZZMIIE

# waADAgECAhANIM3qwHRbWKHw+Zq6JhzlMA0GCSqGSIb3DQEBDAUAMFQxCzAJBgNV

# BAYTAkdCMRgwFgYDVQQKEw9TZWN0aWdvIExpbWl0ZWQxKzApBgNVBAMTIlNlY3Rp

# Z28gUHVibGljIENvZGUgU2lnbmluZyBDQSBSMzYwHhcNMjExMDIyMDAwMDAwWhcN

# MjQxMDIxMjM1OTU5WjBdMQswCQYDVQQGEwJESzEUMBIGA1UECAwLSG92ZWRzdGFk

# ZW4xGzAZBgNVBAoMEkZyZWRkeSBLcmlzdGlhbnNlbjEbMBkGA1UEAwwSRnJlZGR5

# IEtyaXN0aWFuc2VuMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAgYC5

# tlg+VRktRRkahxxaV8+DAd6vHoDpcO6w7yT24lnSoMuA6nR7kgy90Y/sHIwKE9Ww

# t/px/GAY8eBePWjJrFpG8fBtJbXadRTVd/470Hs/q9t+kh6A/0ELj7wYsKSNOyuF

# Poy4rtClOv9ZmrRpoDVnh8Epwg2DpklX2BNzykzBQxIbkpp+xVo2mhPNWDIesntc

# 4/BnSebLGw1Vkxmu2acKkIjYrne/7lsuyL9ue0vk8TGk9JBPNPbGKJvHu9szP9oG

# oH36fU1sEZ+AacXrp+onsyPf/hkkpAMHAhzQHl+5Ikvcus/cDm06twm7VywmZcas

# 2rFAV5MyE6WMEaYAolwAHiPz9WAs2GDhFtZZg1tzbRjJIIgPpR+doTIcpcDBcHnN

# dSdgWKrTkr2f339oT5bnJfo7oVzc/2HGWvb8Fom6LQAqSC11vWmznHYsCm72g+fo

# TKqW8lLDfLF0+aFvToLosrtW9l6Z+l+RQ8MtJ9EHOm2Ny8cFLzZCDZYw32BydwcL

# V5rKdy4Ica9on5xZvyMOLiFwuL4v2V4pjEgKJaGSS/IVSMEGjrM9DHT6YS4/oq9q

# 20rQUmMZZQmGmEyyKQ8t11si8VHtScN5m0Li8peoWfCU9mRFxSESwTWow8d462+o

# 9/SzmDxCACdFwzvfKx4JqDMm55cL+beunIvc0NsCAwEAAaOCAZwwggGYMB8GA1Ud

# IwQYMBaAFA8qyyCHKLjsb0iuK1SmKaoXpM0MMB0GA1UdDgQWBBTZD6uy9ZWIIqQh

# 3srYu1FlUhdM0TAOBgNVHQ8BAf8EBAMCB4AwDAYDVR0TAQH/BAIwADATBgNVHSUE

# DDAKBggrBgEFBQcDAzARBglghkgBhvhCAQEEBAMCBBAwSgYDVR0gBEMwQTA1Bgwr

# BgEEAbIxAQIBAwIwJTAjBggrBgEFBQcCARYXaHR0cHM6Ly9zZWN0aWdvLmNvbS9D

# UFMwCAYGZ4EMAQQBMEkGA1UdHwRCMEAwPqA8oDqGOGh0dHA6Ly9jcmwuc2VjdGln

# by5jb20vU2VjdGlnb1B1YmxpY0NvZGVTaWduaW5nQ0FSMzYuY3JsMHkGCCsGAQUF

# BwEBBG0wazBEBggrBgEFBQcwAoY4aHR0cDovL2NydC5zZWN0aWdvLmNvbS9TZWN0

# aWdvUHVibGljQ29kZVNpZ25pbmdDQVIzNi5jcnQwIwYIKwYBBQUHMAGGF2h0dHA6

# Ly9vY3NwLnNlY3RpZ28uY29tMA0GCSqGSIb3DQEBDAUAA4IBgQASEbZACurQeQN8

# WDTR+YyNpoQ29YAbbdBRhhzHkT/1ao7LE0QIOgGR4GwKRzufCAwu8pCBiMOUTDHT

# ezkh0rQrG6khxBX2nSTBL5i4LwKMR08HgZBsbECciABy15yexYWoB/D0H8WuGe63

# PhGWueR4IFPbIz+jEVxfW0Nyyr7bXTecpKd1iprm+TOmzc2E6ab95dkcXdJVx6Zy

# s++QrrOfQ+a57qEXkS/wnjjbN9hukL0zg+g8L4DHLKTodzfiQOampvV8QzbnB7Y8

# YjNcxR9s/nptnlQH3jorNFhktiBXvD62jc8pAIg6wyH6NxSMjtTsn7QhkIp2kusw

# IQwD8hN/fZ/m6gkXZhRJWFr2WRZOz+edZ62Jf25C/NYWscwfBwn2hzRZf1HgyxkX

# Al88dvvUA3kw1T6uo8aAB9IcL6Owiy7q4T+RLRF7oqx0vcw0193Yhq/gPOaUFlqz

# ExP6TQ5TR9XWVPQk+a1B1ATKMLi1JShO6KWTmNkFkgkgpkW69BEwggauMIIElqAD

# AgECAhAHNje3JFR82Ees/ShmKl5bMA0GCSqGSIb3DQEBCwUAMGIxCzAJBgNVBAYT

# AlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2Vy

# dC5jb20xITAfBgNVBAMTGERpZ2lDZXJ0IFRydXN0ZWQgUm9vdCBHNDAeFw0yMjAz

# MjMwMDAwMDBaFw0zNzAzMjIyMzU5NTlaMGMxCzAJBgNVBAYTAlVTMRcwFQYDVQQK

# Ew5EaWdpQ2VydCwgSW5jLjE7MDkGA1UEAxMyRGlnaUNlcnQgVHJ1c3RlZCBHNCBS

# U0E0MDk2IFNIQTI1NiBUaW1lU3RhbXBpbmcgQ0EwggIiMA0GCSqGSIb3DQEBAQUA

# A4ICDwAwggIKAoICAQDGhjUGSbPBPXJJUVXHJQPE8pE3qZdRodbSg9GeTKJtoLDM

# g/la9hGhRBVCX6SI82j6ffOciQt/nR+eDzMfUBMLJnOWbfhXqAJ9/UO0hNoR8XOx

# s+4rgISKIhjf69o9xBd/qxkrPkLcZ47qUT3w1lbU5ygt69OxtXXnHwZljZQp09ns

# ad/ZkIdGAHvbREGJ3HxqV3rwN3mfXazL6IRktFLydkf3YYMZ3V+0VAshaG43IbtA

# rF+y3kp9zvU5EmfvDqVjbOSmxR3NNg1c1eYbqMFkdECnwHLFuk4fsbVYTXn+149z

# k6wsOeKlSNbwsDETqVcplicu9Yemj052FVUmcJgmf6AaRyBD40NjgHt1biclkJg6

# OBGz9vae5jtb7IHeIhTZgirHkr+g3uM+onP65x9abJTyUpURK1h0QCirc0PO30qh

# HGs4xSnzyqqWc0Jon7ZGs506o9UD4L/wojzKQtwYSH8UNM/STKvvmz3+DrhkKvp1

# KCRB7UK/BZxmSVJQ9FHzNklNiyDSLFc1eSuo80VgvCONWPfcYd6T/jnA+bIwpUzX

# 6ZhKWD7TA4j+s4/TXkt2ElGTyYwMO1uKIqjBJgj5FBASA31fI7tk42PgpuE+9sJ0

# sj8eCXbsq11GdeJgo1gJASgADoRU7s7pXcheMBK9Rp6103a50g5rmQzSM7TNsQID

# AQABo4IBXTCCAVkwEgYDVR0TAQH/BAgwBgEB/wIBADAdBgNVHQ4EFgQUuhbZbU2F

# L3MpdpovdYxqII+eyG8wHwYDVR0jBBgwFoAU7NfjgtJxXWRM3y5nP+e6mK4cD08w

# DgYDVR0PAQH/BAQDAgGGMBMGA1UdJQQMMAoGCCsGAQUFBwMIMHcGCCsGAQUFBwEB

# BGswaTAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEEGCCsG

# AQUFBzAChjVodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRUcnVz

# dGVkUm9vdEc0LmNydDBDBgNVHR8EPDA6MDigNqA0hjJodHRwOi8vY3JsMy5kaWdp

# Y2VydC5jb20vRGlnaUNlcnRUcnVzdGVkUm9vdEc0LmNybDAgBgNVHSAEGTAXMAgG

# BmeBDAEEAjALBglghkgBhv1sBwEwDQYJKoZIhvcNAQELBQADggIBAH1ZjsCTtm+Y

# qUQiAX5m1tghQuGwGC4QTRPPMFPOvxj7x1Bd4ksp+3CKDaopafxpwc8dB+k+YMjY

# C+VcW9dth/qEICU0MWfNthKWb8RQTGIdDAiCqBa9qVbPFXONASIlzpVpP0d3+3J0

# FNf/q0+KLHqrhc1DX+1gtqpPkWaeLJ7giqzl/Yy8ZCaHbJK9nXzQcAp876i8dU+6

# WvepELJd6f8oVInw1YpxdmXazPByoyP6wCeCRK6ZJxurJB4mwbfeKuv2nrF5mYGj

# VoarCkXJ38SNoOeY+/umnXKvxMfBwWpx2cYTgAnEtp/Nh4cku0+jSbl3ZpHxcpzp

# SwJSpzd+k1OsOx0ISQ+UzTl63f8lY5knLD0/a6fxZsNBzU+2QJshIUDQtxMkzdwd

# eDrknq3lNHGS1yZr5Dhzq6YBT70/O3itTK37xJV77QpfMzmHQXh6OOmc4d0j/R0o

# 08f56PGYX/sr2H7yRp11LB4nLCbbbxV7HhmLNriT1ObyF5lZynDwN7+YAN8gFk8n

# +2BnFqFmut1VwDophrCYoCvtlUG3OtUVmDG0YgkPCr2B2RP+v6TR81fZvAT6gt4y

# 3wSJ8ADNXcL50CN/AAvkdgIm2fBldkKmKYcJRyvmfxqkhQ/8mJb2VVQrH4D6wPIO

# K+XW+6kvRBVK5xMOHds3OBqhK/bt1nz8MIIGvDCCBKSgAwIBAgIQC65mvFq6f5WH

# xvnpBOMzBDANBgkqhkiG9w0BAQsFADBjMQswCQYDVQQGEwJVUzEXMBUGA1UEChMO

# RGlnaUNlcnQsIEluYy4xOzA5BgNVBAMTMkRpZ2lDZXJ0IFRydXN0ZWQgRzQgUlNB

# NDA5NiBTSEEyNTYgVGltZVN0YW1waW5nIENBMB4XDTI0MDkyNjAwMDAwMFoXDTM1

# MTEyNTIzNTk1OVowQjELMAkGA1UEBhMCVVMxETAPBgNVBAoTCERpZ2lDZXJ0MSAw

# HgYDVQQDExdEaWdpQ2VydCBUaW1lc3RhbXAgMjAyNDCCAiIwDQYJKoZIhvcNAQEB

# BQADggIPADCCAgoCggIBAL5qc5/2lSGrljC6W23mWaO16P2RHxjEiDtqmeOlwf0K

# MCBDEr4IxHRGd7+L660x5XltSVhhK64zi9CeC9B6lUdXM0s71EOcRe8+CEJp+3R2

# O8oo76EO7o5tLuslxdr9Qq82aKcpA9O//X6QE+AcaU/byaCagLD/GLoUb35SfWHh

# 43rOH3bpLEx7pZ7avVnpUVmPvkxT8c2a2yC0WMp8hMu60tZR0ChaV76Nhnj37DEY

# TX9ReNZ8hIOYe4jl7/r419CvEYVIrH6sN00yx49boUuumF9i2T8UuKGn9966fR5X

# 6kgXj3o5WHhHVO+NBikDO0mlUh902wS/Eeh8F/UFaRp1z5SnROHwSJ+QQRZ1fisD

# 8UTVDSupWJNstVkiqLq+ISTdEjJKGjVfIcsgA4l9cbk8Smlzddh4EfvFrpVNnes4

# c16Jidj5XiPVdsn5n10jxmGpxoMc6iPkoaDhi6JjHd5ibfdp5uzIXp4P0wXkgNs+

# CO/CacBqU0R4k+8h6gYldp4FCMgrXdKWfM4N0u25OEAuEa3JyidxW48jwBqIJqIm

# d93NRxvd1aepSeNeREXAu2xUDEW8aqzFQDYmr9ZONuc2MhTMizchNULpUEoA6Vva

# 7b1XCB+1rxvbKmLqfY/M/SdV6mwWTyeVy5Z/JkvMFpnQy5wR14GJcv6dQ4aEKOX5

# AgMBAAGjggGLMIIBhzAOBgNVHQ8BAf8EBAMCB4AwDAYDVR0TAQH/BAIwADAWBgNV

# HSUBAf8EDDAKBggrBgEFBQcDCDAgBgNVHSAEGTAXMAgGBmeBDAEEAjALBglghkgB

# hv1sBwEwHwYDVR0jBBgwFoAUuhbZbU2FL3MpdpovdYxqII+eyG8wHQYDVR0OBBYE

# FJ9XLAN3DigVkGalY17uT5IfdqBbMFoGA1UdHwRTMFEwT6BNoEuGSWh0dHA6Ly9j

# cmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFRydXN0ZWRHNFJTQTQwOTZTSEEyNTZU

# aW1lU3RhbXBpbmdDQS5jcmwwgZAGCCsGAQUFBwEBBIGDMIGAMCQGCCsGAQUFBzAB

# hhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wWAYIKwYBBQUHMAKGTGh0dHA6Ly9j

# YWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFRydXN0ZWRHNFJTQTQwOTZTSEEy

# NTZUaW1lU3RhbXBpbmdDQS5jcnQwDQYJKoZIhvcNAQELBQADggIBAD2tHh92mVvj

# OIQSR9lDkfYR25tOCB3RKE/P09x7gUsmXqt40ouRl3lj+8QioVYq3igpwrPvBmZd

# rlWBb0HvqT00nFSXgmUrDKNSQqGTdpjHsPy+LaalTW0qVjvUBhcHzBMutB6Hzele

# dbDCzFzUy34VarPnvIWrqVogK0qM8gJhh/+qDEAIdO/KkYesLyTVOoJ4eTq7gj9U

# FAL1UruJKlTnCVaM2UeUUW/8z3fvjxhN6hdT98Vr2FYlCS7Mbb4Hv5swO+aAXxWU

# m3WpByXtgVQxiBlTVYzqfLDbe9PpBKDBfk+rabTFDZXoUke7zPgtd7/fvWTlCs30

# VAGEsshJmLbJ6ZbQ/xll/HjO9JbNVekBv2Tgem+mLptR7yIrpaidRJXrI+UzB6vA

# lk/8a1u7cIqV0yef4uaZFORNekUgQHTqddmsPCEIYQP7xGxZBIhdmm4bhYsVA6G2

# WgNFYagLDBzpmk9104WQzYuVNsxyoVLObhx3RugaEGru+SojW4dHPoWrUhftNpFC

# 5H7QEY7MhKRyrBe7ucykW7eaCuWBsBb4HOKRFVDcrZgdwaSIqMDiCLg4D+TPVgKx

# 2EgEdeoHNHT9l3ZDBD+XgbF+23/zBjeCtxz+dL/9NWR6P2eZRi7zcEO1xwcdcqJs

# yz/JceENc2Sg8h3KeFUCS7tpFk7CrDqkMYIGPjCCBjoCAQEwaDBUMQswCQYDVQQG

# EwJHQjEYMBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMSswKQYDVQQDEyJTZWN0aWdv

# IFB1YmxpYyBDb2RlIFNpZ25pbmcgQ0EgUjM2AhANIM3qwHRbWKHw+Zq6JhzlMA0G

# CWCGSAFlAwQCAQUAoIGEMBgGCisGAQQBgjcCAQwxCjAIoAKAAKECgAAwGQYJKoZI

# hvcNAQkDMQwGCisGAQQBgjcCAQQwHAYKKwYBBAGCNwIBCzEOMAwGCisGAQQBgjcC

# ARUwLwYJKoZIhvcNAQkEMSIEIHGpi2e/L7HLXhK2Lg4SJmqNhOXpkrA2fnvT6tcR

# Kkk1MA0GCSqGSIb3DQEBAQUABIICAGBV9JjLCz9goYwJfHeL/MztG0ujJsJS8pdj

# MUW5w+qhysmihoom6PB5kP0lwiMW5buPtG72/KXwx+lQeE93s9JczbEc1HY6i/ba

# FSi9lI2q+0PWu1lNti9jWamntEyjy3IP4WuQqRsLLaXHyHiYTbapUTPqcyDyVAHL

# bmgFyiIWNMoL2lmf2mJp8a+Runb13kZXUV8uTjtKlAaQpwk5lM2pFPOxbEp2U1H9

# jBGi0wh8odAwNIF77qMpo7AJyhaQ9tHad38MwHihTlgFzYk70a3oWSZ+JNCDdItA

# i1w5vJZcXvIlgzXPVxHaM4GEHT8M4ijzgtHo0ICYGHk2ZV3+QxtriVx+qk/17owk

# IEXGmtrDuUAs06ZlJFwwT5qMHjRYrjT3NK9VvmY7bxV+Gaxx3vhLBuTqbT5N5cfs

# /7h78wdkF0GH6f2E+N+e2/2Yt0alOpuyrAD5vBDbFGJKRE+G/UtIRkMi7csDScnH

# kRFC8Iv82plE08k/QAhR7zaDI0Ad6ABmnh6x4iuilYIQW2YTRpYwDMAc45v4XYoe

# Ou8UYOiW18Tk2+3fadlKKvOX9xuHqmR4puAR1ft9KOhicQFllXi+mEpBIHGc34ce

# I1y7CSmQT9gCsCvusxiLpSGmXNxleQAR8w+pbpgXfeBFcYcZbWOfqXPt5cNbJgae

# 1UoaZDiHoYIDIDCCAxwGCSqGSIb3DQEJBjGCAw0wggMJAgEBMHcwYzELMAkGA1UE

# BhMCVVMxFzAVBgNVBAoTDkRpZ2lDZXJ0LCBJbmMuMTswOQYDVQQDEzJEaWdpQ2Vy

# dCBUcnVzdGVkIEc0IFJTQTQwOTYgU0hBMjU2IFRpbWVTdGFtcGluZyBDQQIQC65m

# vFq6f5WHxvnpBOMzBDANBglghkgBZQMEAgEFAKBpMBgGCSqGSIb3DQEJAzELBgkq

# hkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTI0MTAxMDA2MzcyN1owLwYJKoZIhvcN

# AQkEMSIEIDqJERDbCkaHTp+Pv1J49DEAsNBnRr4SXJQkZ+/kxjPKMA0GCSqGSIb3

# DQEBAQUABIICAFWKDmzoN3g/plFthnF4UtZV0vfCO0gYcMyRiJS0AGXAo8+zVbJn

# G63n1M75PCFHQjHSRPQhFHeJvcRxgQr2JwT7y5C/PcllnTyZ/IyfNO98l4zf+mGI

# eg+1b77TuGrkFuJvHZrf1EKMUsZTNNmbophMvXx4FarUyacRL6D8o4DEpLpM3eXB

# ypv+xD/hxa6C9yRQ6XVIWu7jommzC2NueRLQ+FG/sdT/R1avCVHFd7FP0eVD9cP/

# VYE4T2+pryIW4n0WtDb2+ioYO+XACObkt1iW4OVygZ5wjM28GF5If/8lsAq1blNd

# vDncEIuaViW1IPKWdeY9UO3amG/bZtIUExTYpvParlUArwu9rro6jZeYGJOObiq7

# bvhOMiy5ViHupT2aCNK0xPkobE+0SsMPZ9znCd/p7wiAQD1vpZIcqmwktXp9qjDe

# iGo30XKnCjrFFaVp2FRNkCIolvFmT4Ki7Nq2heu84UVYexdp3w7/IJLFY56LNQiq

# XwOwGIxB/XODXmooC/VjSKqpETDu0Drokmk0DJy1PAwtJBTwGntRQsbFUMm9aTGw

# ziaMFWWP8A6cwonPHECUO8HgNVNwhJChaCtsVkSSgNtFb5u3sTm2EXdaZjAaHOO5

# YDwUG9z6MEpno/NrW1CwOvQSlIHoINfXrr7isx0bS0SqlLwSL+a6fCKl

# SIG # End signature block