@microsoft/windows-admin-center-sdk
Version:
Microsoft - Windows Admin Center Shell
665 lines (662 loc) • 33.7 kB
JavaScript
import { of, throwError } from 'rxjs';
import { catchError, map, tap } from 'rxjs/operators';
import { Net } from '../data/net';
import { LogLevel } from '../diagnostics/log-level';
import { Logging } from '../diagnostics/logging';
import { EnvironmentModule } from '../manifest/environment-modules';
import { ConnectionUtility } from './connection';
/**
* The live connection status type.
*/
export var LiveConnectionStatusType;
(function (LiveConnectionStatusType) {
/**
* Online status.
*/
LiveConnectionStatusType[LiveConnectionStatusType["Online"] = 0] = "Online";
/**
* Warning status.
*/
LiveConnectionStatusType[LiveConnectionStatusType["Warning"] = 1] = "Warning";
/**
* Unauthorized status.
*/
LiveConnectionStatusType[LiveConnectionStatusType["Unauthorized"] = 2] = "Unauthorized";
/**
* Error status.
*/
LiveConnectionStatusType[LiveConnectionStatusType["Error"] = 3] = "Error";
/**
* Fatal status.
*/
LiveConnectionStatusType[LiveConnectionStatusType["Fatal"] = 4] = "Fatal";
/**
* Unknown status (used for loading status).
*/
LiveConnectionStatusType[LiveConnectionStatusType["Unknown"] = 5] = "Unknown";
/**
* Forbidden status.
*/
LiveConnectionStatusType[LiveConnectionStatusType["Forbidden"] = 6] = "Forbidden";
})(LiveConnectionStatusType || (LiveConnectionStatusType = {}));
/**
* ConnectionStream class that enables to get all connections once and listen to the change.
*
* TODO:
* 1. Support live connection status for a single connection in such a way that one could subscribe to it from ActiveConnection
* with that observable always being for the active connection.
* 2. Support updating all connection status on an interval. (using existing expiration field in cache)
* 3. Support preserving status across sessions during the interval time.
* currently we are using session storage, this may also require credentials to be preserved across sessions.
*/
export class ConnectionStream {
rpc;
connectionManager;
powershellConnection;
gatewayConnection;
nodeConnection;
authorizationManager;
extensionBroker;
statusLabelMap = {};
connectionStrings = MsftSme.getStrings().MsftSmeShell.Core.Connection;
cacheLiveConnection;
/**
* Initializes a new instance of the ConnectionStream class.
* @param connectionManager the connection manager object.
* @param powershellConnection the powerShell connection object.
* @param gatewayConnection the gateway connection object.
*/
constructor(rpc, connectionManager, powershellConnection, gatewayConnection, nodeConnection, authorizationManager, extensionBroker) {
this.rpc = rpc;
this.connectionManager = connectionManager;
this.powershellConnection = powershellConnection;
this.gatewayConnection = gatewayConnection;
this.nodeConnection = nodeConnection;
this.authorizationManager = authorizationManager;
this.extensionBroker = extensionBroker;
this.statusLabelMap[LiveConnectionStatusType.Error] = this.connectionStrings.ErrorState.label;
this.statusLabelMap[LiveConnectionStatusType.Fatal] = this.connectionStrings.FatalState.label;
this.statusLabelMap[LiveConnectionStatusType.Online] = this.connectionStrings.OnlineState.label;
this.statusLabelMap[LiveConnectionStatusType.Unauthorized] = this.connectionStrings.NeedsAuthorizationState.label;
this.statusLabelMap[LiveConnectionStatusType.Unknown] = this.connectionStrings.UnknownState.label;
this.statusLabelMap[LiveConnectionStatusType.Warning] = this.connectionStrings.WarningState.label;
}
/**
* Wraps a connection in a live connection object by retrieving its current status
* @param connection the connection object.
*/
getLiveConnection(connection) {
// get the connection types status provider
const typeInfo = ConnectionUtility.getConnectionTypeInfo(connection);
if (typeInfo && typeInfo.provider && typeInfo.provider.connectionStatusProvider) {
const now = Date.now();
const statusProvider = typeInfo.provider.connectionStatusProvider;
if (statusProvider.skipStatusCheck) {
return of({
connection: connection,
loading: false,
status: {
type: LiveConnectionStatusType.Online
},
isPowerShell: false,
powerShellEndpoint: null
});
}
if (this.cacheLiveConnection
&& this.cacheLiveConnection.status.type === LiveConnectionStatusType.Online
&& this.cacheLiveConnection.connection
&& this.cacheLiveConnection.connection.name === connection.name
&& this.cacheLiveConnection.connection.type === connection.type
&& now - this.cacheLiveConnection.lastUpdated < 2000) {
return of(this.cacheLiveConnection);
}
else {
return this.getConnectionStatus(statusProvider, connection, connection.name)
.pipe(map(data => {
this.cacheLiveConnection = data;
return data;
}));
}
}
// this should not happen, it means we have a malformed manifest or the user has uninstalled the relevant connection manager extension.
const logMessage = this.connectionStrings.NoStatusProvider.message.format(connection.type);
// log warning about this condition
Logging.log({
source: 'ConnectionStream',
level: LogLevel.Warning,
message: logMessage
});
// we dont need to fail, we can set this items status to unknown and continue
const statusLabel = this.connectionStrings.NoStatusProvider.label;
return of({
connection: connection,
loading: false,
status: {
label: statusLabel,
type: LiveConnectionStatusType.Unknown,
details: logMessage
},
isPowerShell: false,
powerShellEndpoint: null
});
}
/**
* Get connection status and aliases from statusProvider, retry alaises when connection nodeName NotFound
* @param statusProvider status provider from typeInfo manifest
* @param connection original connection
* @param nodeName retry nodeName, can be connection.name or alias
*/
getConnectionStatus(statusProvider, connection, nodeName) {
// collect the status data from the status provider
let statusAwaiter;
if (statusProvider.powerShell) {
statusAwaiter = this.getConnectionStatusFromPowershell(nodeName, statusProvider.powerShell);
}
else if (statusProvider.relativeGatewayUrl) {
statusAwaiter = this.getConnectionStatusFromGatewayUrl(nodeName, statusProvider.relativeGatewayUrl);
}
else if (statusProvider.service) {
statusAwaiter = this.getConnectionStatusFromService(nodeName, statusProvider.service);
}
else if (statusProvider.worker) {
statusAwaiter = this.getConnectionStatusFromWorker(nodeName, statusProvider.worker);
}
return statusAwaiter
.pipe(map(statusData => {
// create connection object to return
const liveConnection = {
connection: connection,
loading: false,
lastUpdated: Date.now(),
isPowerShell: !!statusProvider.powerShell,
powerShellEndpoint: statusProvider.powerShell && this.authorizationManager.getJeaEndpoint(connection.name)
};
// extract the status field from the data
if (statusData.status) {
liveConnection.status = statusData.status;
delete statusData.status;
}
else {
// if there is no status field, assume everything is good since we got this far.
liveConnection.status = {
type: LiveConnectionStatusType.Online
};
}
// load localized values for label and details
if (statusProvider.displayValueMap) {
const label = statusProvider.displayValueMap[liveConnection.status.label];
const details = statusProvider.displayValueMap[liveConnection.status.details];
liveConnection.status.label = label || liveConnection.status.label;
liveConnection.status.details = details || liveConnection.status.details;
}
// extract the aliases field from the data
if (statusData.aliases) {
this.connectionManager.saveAliasesData(statusData.aliases, connection, nodeName);
delete statusData.aliases;
}
// any other properties returned by status call live in property bag.
liveConnection.properties = statusData;
// fill properties of connection with status data.
connection.properties = connection.properties || {};
Object.assign(connection.properties, statusData);
// return the new live connection
return liveConnection;
}), catchError((error) => {
const liveConnection = {
connection: connection,
loading: false,
lastUpdated: Date.now(),
isPowerShell: !!statusProvider.powerShell,
powerShellEndpoint: statusProvider.powerShell && this.authorizationManager.getJeaEndpoint(connection.name)
};
if (Net.isUnauthorized(error)) {
liveConnection.status = {
type: LiveConnectionStatusType.Unauthorized
};
}
else if (Net.isForbidden(error)) {
liveConnection.status = {
type: LiveConnectionStatusType.Forbidden
};
}
else if (error.status === 404 /* HttpStatusCode.NotFound */ || error.status === 400 /* HttpStatusCode.BadRequest */) {
// failed connect to target node
const alias = this.connectionManager.getActiveAlias(connection.name);
// found alias, retry
if (alias) {
return this.getConnectionStatus(statusProvider, connection, alias);
}
else { // no alias, return error
// For Badrequest(400), try to extract the PS error code.
if (error.status === 400 /* HttpStatusCode.BadRequest */) {
liveConnection.status = {
type: LiveConnectionStatusType.Fatal,
details: Net.getErrorMessage(error)
};
}
else { // else just show the default connection failure error.
const label = this.connectionStrings.NoConnection.label;
const message = this.connectionStrings.NoConnection.message;
liveConnection.status = {
label: label,
type: LiveConnectionStatusType.Unknown,
details: message
};
}
}
}
else {
liveConnection.status = {
type: LiveConnectionStatusType.Fatal,
details: Net.getErrorMessage(error)
};
}
return of(liveConnection);
}), tap(liveConnection => {
if (!liveConnection.status.label) {
liveConnection.status.label = this.statusLabelMap[liveConnection.status.type]
|| this.statusLabelMap[LiveConnectionStatusType.Unknown];
}
}));
}
/**
* Retrieves a connections status from a powershell status provider
* @param nodeName the node name.
* @param options The powershell options.
*/
getConnectionStatusFromPowershell(nodeName, options) {
if (!nodeName) {
// log warning about this condition
const message = this.connectionStrings.ErrorNodeName.message;
Logging.log({
source: 'ConnectionStream',
level: LogLevel.Error,
message: message.format(nodeName)
});
return throwError(() => new Error(message));
}
const psSession = this.powershellConnection.createAutomaticSession(nodeName, { noAuth: true });
return this.powershellConnection.run(psSession, options.command ? options : options.script)
.pipe(map(response => {
// we expect the script to return an object as the first result.
// The object should have some property called 'status' but we will check this later.
return response.results[0];
}));
}
/**
* Retrieves a connections status from a gatewayUrl status provider
* @param nodeName the node name.
* @param relativeUrl the relative url from the relativeGatewayUrl provider.
*/
getConnectionStatusFromGatewayUrl(nodeName, relativeUrl) {
if (!relativeUrl) {
// log warning about this condition
const message = this.connectionStrings.ErrorGatewayUrl.message;
Logging.logError('ConnectionStream', message);
return throwError(() => new Error(message));
}
relativeUrl = relativeUrl.replace('$connectionName', nodeName);
// scan GWv2 API and use nodeConnection API so it can include authorization information.
// /Services/LinuxBase/ssh/nodes/$connectionName/connectionstatus
const segments = MsftSme.trimStart(relativeUrl, '/').split('/');
if (segments.length > 4 && segments[0].localeCompareIgnoreCase('services') === 0) {
segments.shift();
const serviceName = segments.shift();
const controllerName = segments.shift();
segments.shift();
segments.shift();
const remained = segments.join('/');
return this.nodeConnection.get({ serviceName, controllerName, nodeName }, remained, { noAuth: true });
}
return this.gatewayConnection.get(relativeUrl);
}
/**
* Retrieves a connections status from a extension service method
*/
getConnectionStatusFromService(nodeName, methodId) {
if (!methodId) {
// log warning about this condition
const message = this.connectionStrings.ErrorService.message;
Logging.log({
source: 'ConnectionStream',
level: LogLevel.Error,
message: message
});
return throwError(() => new Error(message));
}
const entryPointId = EnvironmentModule.createEntrypointId(methodId.module, methodId.name);
return this.extensionBroker.callService(entryPointId, methodId.method, methodId.version, nodeName);
}
/**
* Retrieves a connections status from a extension worker method
*/
getConnectionStatusFromWorker(nodeName, methodId) {
if (!methodId) {
// log warning about this condition
const message = this.connectionStrings.ErrorWorker.message;
Logging.log({
source: 'ConnectionStream',
level: LogLevel.Error,
message: message
});
return throwError(() => new Error(message));
}
const entryPointId = EnvironmentModule.createEntrypointId(methodId.module, methodId.name);
return this.extensionBroker.runWorker(entryPointId, methodId.method, methodId.version, nodeName);
}
}
//# sourceMappingURL=connection-stream.js.map
// SIG // Begin signature block
// SIG // MIIoKAYJKoZIhvcNAQcCoIIoGTCCKBUCAQExDzANBglg
// SIG // hkgBZQMEAgEFADB3BgorBgEEAYI3AgEEoGkwZzAyBgor
// SIG // BgEEAYI3AgEeMCQCAQEEEBDgyQbOONQRoqMAEEvTUJAC
// SIG // AQACAQACAQACAQACAQAwMTANBglghkgBZQMEAgEFAAQg
// SIG // +hIU4rWw2Ga1j5XxjlyEYK6s3mCyAHAyfAg5s3+CLtmg
// SIG // gg12MIIF9DCCA9ygAwIBAgITMwAABARsdAb/VysncgAA
// SIG // AAAEBDANBgkqhkiG9w0BAQsFADB+MQswCQYDVQQGEwJV
// SIG // UzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMH
// SIG // UmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBv
// SIG // cmF0aW9uMSgwJgYDVQQDEx9NaWNyb3NvZnQgQ29kZSBT
// SIG // aWduaW5nIFBDQSAyMDExMB4XDTI0MDkxMjIwMTExNFoX
// SIG // DTI1MDkxMTIwMTExNFowdDELMAkGA1UEBhMCVVMxEzAR
// SIG // BgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1v
// SIG // bmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlv
// SIG // bjEeMBwGA1UEAxMVTWljcm9zb2Z0IENvcnBvcmF0aW9u
// SIG // MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA
// SIG // tCg32mOdDA6rBBnZSMwxwXegqiDEUFlvQH9Sxww07hY3
// SIG // w7L52tJxLg0mCZjcszQddI6W4NJYb5E9QM319kyyE0l8
// SIG // EvA/pgcxgljDP8E6XIlgVf6W40ms286Cr0azaA1f7vaJ
// SIG // jjNhGsMqOSSSXTZDNnfKs5ENG0bkXeB2q5hrp0qLsm/T
// SIG // WO3oFjeROZVHN2tgETswHR3WKTm6QjnXgGNj+V6rSZJO
// SIG // /WkTqc8NesAo3Up/KjMwgc0e67x9llZLxRyyMWUBE9co
// SIG // T2+pUZqYAUDZ84nR1djnMY3PMDYiA84Gw5JpceeED38O
// SIG // 0cEIvKdX8uG8oQa047+evMfDRr94MG9EWwIDAQABo4IB
// SIG // czCCAW8wHwYDVR0lBBgwFgYKKwYBBAGCN0wIAQYIKwYB
// SIG // BQUHAwMwHQYDVR0OBBYEFPIboTWxEw1PmVpZS+AzTDwo
// SIG // oxFOMEUGA1UdEQQ+MDykOjA4MR4wHAYDVQQLExVNaWNy
// SIG // b3NvZnQgQ29ycG9yYXRpb24xFjAUBgNVBAUTDTIzMDAx
// SIG // Mis1MDI5MjMwHwYDVR0jBBgwFoAUSG5k5VAF04KqFzc3
// SIG // IrVtqMp1ApUwVAYDVR0fBE0wSzBJoEegRYZDaHR0cDov
// SIG // L3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jcmwvTWlj
// SIG // Q29kU2lnUENBMjAxMV8yMDExLTA3LTA4LmNybDBhBggr
// SIG // BgEFBQcBAQRVMFMwUQYIKwYBBQUHMAKGRWh0dHA6Ly93
// SIG // d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvY2VydHMvTWlj
// SIG // Q29kU2lnUENBMjAxMV8yMDExLTA3LTA4LmNydDAMBgNV
// SIG // HRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4ICAQCI5g/S
// SIG // KUFb3wdUHob6Qhnu0Hk0JCkO4925gzI8EqhS+K4umnvS
// SIG // BU3acsJ+bJprUiMimA59/5x7WhJ9F9TQYy+aD9AYwMtb
// SIG // KsQ/rst+QflfML+Rq8YTAyT/JdkIy7R/1IJUkyIS6srf
// SIG // G1AKlX8n6YeAjjEb8MI07wobQp1F1wArgl2B1mpTqHND
// SIG // lNqBjfpjySCScWjUHNbIwbDGxiFr93JoEh5AhJqzL+8m
// SIG // onaXj7elfsjzIpPnl8NyH2eXjTojYC9a2c4EiX0571Ko
// SIG // mhENF3RtR25A7/X7+gk6upuE8tyMy4sBkl2MUSF08U+E
// SIG // 2LOVcR8trhYxV1lUi9CdgEU2CxODspdcFwxdT1+G8YNc
// SIG // gzHyjx3BNSI4nOZcdSnStUpGhCXbaOIXfvtOSfQX/UwJ
// SIG // oruhCugvTnub0Wna6CQiturglCOMyIy/6hu5rMFvqk9A
// SIG // ltIJ0fSR5FwljW6PHHDJNbCWrZkaEgIn24M2mG1M/Ppb
// SIG // /iF8uRhbgJi5zWxo2nAdyDBqWvpWxYIoee/3yIWpquVY
// SIG // cYGhJp/1I1sq/nD4gBVrk1SKX7Do2xAMMO+cFETTNSJq
// SIG // fTSSsntTtuBLKRB5mw5qglHKuzapDiiBuD1Zt4QwxA/1
// SIG // kKcyQ5L7uBayG78kxlVNNbyrIOFH3HYmdH0Pv1dIX/Mq
// SIG // 7avQpAfIiLpOWwcbjzCCB3owggVioAMCAQICCmEOkNIA
// SIG // AAAAAAMwDQYJKoZIhvcNAQELBQAwgYgxCzAJBgNVBAYT
// SIG // AlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQH
// SIG // EwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29y
// SIG // cG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBSb290
// SIG // IENlcnRpZmljYXRlIEF1dGhvcml0eSAyMDExMB4XDTEx
// SIG // MDcwODIwNTkwOVoXDTI2MDcwODIxMDkwOVowfjELMAkG
// SIG // A1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAO
// SIG // BgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29m
// SIG // dCBDb3Jwb3JhdGlvbjEoMCYGA1UEAxMfTWljcm9zb2Z0
// SIG // IENvZGUgU2lnbmluZyBQQ0EgMjAxMTCCAiIwDQYJKoZI
// SIG // hvcNAQEBBQADggIPADCCAgoCggIBAKvw+nIQHC6t2G6q
// SIG // ghBNNLrytlghn0IbKmvpWlCquAY4GgRJun/DDB7dN2vG
// SIG // EtgL8DjCmQawyDnVARQxQtOJDXlkh36UYCRsr55JnOlo
// SIG // XtLfm1OyCizDr9mpK656Ca/XllnKYBoF6WZ26DJSJhIv
// SIG // 56sIUM+zRLdd2MQuA3WraPPLbfM6XKEW9Ea64DhkrG5k
// SIG // NXimoGMPLdNAk/jj3gcN1Vx5pUkp5w2+oBN3vpQ97/vj
// SIG // K1oQH01WKKJ6cuASOrdJXtjt7UORg9l7snuGG9k+sYxd
// SIG // 6IlPhBryoS9Z5JA7La4zWMW3Pv4y07MDPbGyr5I4ftKd
// SIG // gCz1TlaRITUlwzluZH9TupwPrRkjhMv0ugOGjfdf8NBS
// SIG // v4yUh7zAIXQlXxgotswnKDglmDlKNs98sZKuHCOnqWbs
// SIG // YR9q4ShJnV+I4iVd0yFLPlLEtVc/JAPw0XpbL9Uj43Bd
// SIG // D1FGd7P4AOG8rAKCX9vAFbO9G9RVS+c5oQ/pI0m8GLhE
// SIG // fEXkwcNyeuBy5yTfv0aZxe/CHFfbg43sTUkwp6uO3+xb
// SIG // n6/83bBm4sGXgXvt1u1L50kppxMopqd9Z4DmimJ4X7Iv
// SIG // hNdXnFy/dygo8e1twyiPLI9AN0/B4YVEicQJTMXUpUMv
// SIG // dJX3bvh4IFgsE11glZo+TzOE2rCIF96eTvSWsLxGoGyY
// SIG // 0uDWiIwLAgMBAAGjggHtMIIB6TAQBgkrBgEEAYI3FQEE
// SIG // AwIBADAdBgNVHQ4EFgQUSG5k5VAF04KqFzc3IrVtqMp1
// SIG // ApUwGQYJKwYBBAGCNxQCBAweCgBTAHUAYgBDAEEwCwYD
// SIG // VR0PBAQDAgGGMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0j
// SIG // BBgwFoAUci06AjGQQ7kUBU7h6qfHMdEjiTQwWgYDVR0f
// SIG // BFMwUTBPoE2gS4ZJaHR0cDovL2NybC5taWNyb3NvZnQu
// SIG // Y29tL3BraS9jcmwvcHJvZHVjdHMvTWljUm9vQ2VyQXV0
// SIG // MjAxMV8yMDExXzAzXzIyLmNybDBeBggrBgEFBQcBAQRS
// SIG // MFAwTgYIKwYBBQUHMAKGQmh0dHA6Ly93d3cubWljcm9z
// SIG // b2Z0LmNvbS9wa2kvY2VydHMvTWljUm9vQ2VyQXV0MjAx
// SIG // MV8yMDExXzAzXzIyLmNydDCBnwYDVR0gBIGXMIGUMIGR
// SIG // BgkrBgEEAYI3LgMwgYMwPwYIKwYBBQUHAgEWM2h0dHA6
// SIG // Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvZG9jcy9w
// SIG // cmltYXJ5Y3BzLmh0bTBABggrBgEFBQcCAjA0HjIgHQBM
// SIG // AGUAZwBhAGwAXwBwAG8AbABpAGMAeQBfAHMAdABhAHQA
// SIG // ZQBtAGUAbgB0AC4gHTANBgkqhkiG9w0BAQsFAAOCAgEA
// SIG // Z/KGpZjgVHkaLtPYdGcimwuWEeFjkplCln3SeQyQwWVf
// SIG // Liw++MNy0W2D/r4/6ArKO79HqaPzadtjvyI1pZddZYSQ
// SIG // fYtGUFXYDJJ80hpLHPM8QotS0LD9a+M+By4pm+Y9G6XU
// SIG // tR13lDni6WTJRD14eiPzE32mkHSDjfTLJgJGKsKKELuk
// SIG // qQUMm+1o+mgulaAqPyprWEljHwlpblqYluSD9MCP80Yr
// SIG // 3vw70L01724lruWvJ+3Q3fMOr5kol5hNDj0L8giJ1h/D
// SIG // Mhji8MUtzluetEk5CsYKwsatruWy2dsViFFFWDgycSca
// SIG // f7H0J/jeLDogaZiyWYlobm+nt3TDQAUGpgEqKD6CPxNN
// SIG // ZgvAs0314Y9/HG8VfUWnduVAKmWjw11SYobDHWM2l4bf
// SIG // 2vP48hahmifhzaWX0O5dY0HjWwechz4GdwbRBrF1HxS+
// SIG // YWG18NzGGwS+30HHDiju3mUv7Jf2oVyW2ADWoUa9WfOX
// SIG // pQlLSBCZgB/QACnFsZulP0V3HjXG0qKin3p6IvpIlR+r
// SIG // +0cjgPWe+L9rt0uX4ut1eBrs6jeZeRhL/9azI2h15q/6
// SIG // /IvrC4DqaTuv/DDtBEyO3991bWORPdGdVk5Pv4BXIqF4
// SIG // ETIheu9BCrE/+6jMpF3BoYibV3FWTkhFwELJm3ZbCoBI
// SIG // a/15n8G9bW1qyVJzEw16UM0xghoKMIIaBgIBATCBlTB+
// SIG // MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3Rv
// SIG // bjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWlj
// SIG // cm9zb2Z0IENvcnBvcmF0aW9uMSgwJgYDVQQDEx9NaWNy
// SIG // b3NvZnQgQ29kZSBTaWduaW5nIFBDQSAyMDExAhMzAAAE
// SIG // BGx0Bv9XKydyAAAAAAQEMA0GCWCGSAFlAwQCAQUAoIGu
// SIG // MBkGCSqGSIb3DQEJAzEMBgorBgEEAYI3AgEEMBwGCisG
// SIG // AQQBgjcCAQsxDjAMBgorBgEEAYI3AgEVMC8GCSqGSIb3
// SIG // DQEJBDEiBCBRvNSDhgv2wWnaFd87+2pCKHMJaNlyUX6F
// SIG // 9SRRG0hf1zBCBgorBgEEAYI3AgEMMTQwMqAUgBIATQBp
// SIG // AGMAcgBvAHMAbwBmAHShGoAYaHR0cDovL3d3dy5taWNy
// SIG // b3NvZnQuY29tMA0GCSqGSIb3DQEBAQUABIIBAKtpYVXF
// SIG // bQjMQWKKqWtGfIJ7N7ege7ZNdCdp7fqywnbtJeqZqZxL
// SIG // d5c0o6OJ7NI/s9Msy+VFZrXqWB+swNyvpSmCFD+iRb1s
// SIG // /RCXLtmoGoQ2bZ5VD3QeeQKPapfx4QByPc0tSKPj593S
// SIG // ZvJKPK24bGrbk8NuhStcO2x5A0HFqmngxTx4BvWLrJPz
// SIG // XXwNqP6wwjhtU5+M74pG12PH2KmD2tl4cvW8Xk3n/c6M
// SIG // +1/lt66BBqQZOIYvFMcoL3/Tj713IIshtO2dLHvgLiAy
// SIG // wG4t7ndjIWSy+1y6MjlMfv7afSDTrbeM7B5OABjQIorB
// SIG // ZBHiUNh/n6Q+GjKOGJCEUGWBR9ShgheUMIIXkAYKKwYB
// SIG // BAGCNwMDATGCF4Awghd8BgkqhkiG9w0BBwKgghdtMIIX
// SIG // aQIBAzEPMA0GCWCGSAFlAwQCAQUAMIIBUgYLKoZIhvcN
// SIG // AQkQAQSgggFBBIIBPTCCATkCAQEGCisGAQQBhFkKAwEw
// SIG // MTANBglghkgBZQMEAgEFAAQgRPkOeyCrMrF1NBuJrO8K
// SIG // g0QUdODMzauhlUhUt5SkkvYCBmeuC228NhgTMjAyNTAy
// SIG // MjAxNTI4NDYuMjQ3WjAEgAIB9KCB0aSBzjCByzELMAkG
// SIG // A1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAO
// SIG // BgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29m
// SIG // dCBDb3Jwb3JhdGlvbjElMCMGA1UECxMcTWljcm9zb2Z0
// SIG // IEFtZXJpY2EgT3BlcmF0aW9uczEnMCUGA1UECxMeblNo
// SIG // aWVsZCBUU1MgRVNOOjdGMDAtMDVFMC1EOTQ3MSUwIwYD
// SIG // VQQDExxNaWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2aWNl
// SIG // oIIR6jCCByAwggUIoAMCAQICEzMAAAHwKnwdWTvmH60A
// SIG // AQAAAfAwDQYJKoZIhvcNAQELBQAwfDELMAkGA1UEBhMC
// SIG // VVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcT
// SIG // B1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jw
// SIG // b3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUt
// SIG // U3RhbXAgUENBIDIwMTAwHhcNMjMxMjA2MTg0NTUxWhcN
// SIG // MjUwMzA1MTg0NTUxWjCByzELMAkGA1UEBhMCVVMxEzAR
// SIG // BgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1v
// SIG // bmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlv
// SIG // bjElMCMGA1UECxMcTWljcm9zb2Z0IEFtZXJpY2EgT3Bl
// SIG // cmF0aW9uczEnMCUGA1UECxMeblNoaWVsZCBUU1MgRVNO
// SIG // OjdGMDAtMDVFMC1EOTQ3MSUwIwYDVQQDExxNaWNyb3Nv
// SIG // ZnQgVGltZS1TdGFtcCBTZXJ2aWNlMIICIjANBgkqhkiG
// SIG // 9w0BAQEFAAOCAg8AMIICCgKCAgEAtR4tU6M4dztHMxPM
// SIG // X0Z68ppSTQmhlqJpj8tHiDX/uBCa+63/LUs5YBPCJeGY
// SIG // +PE+X00zgIepyE0X9pSu/rqXJ2f8YNACqA2KQUDlqy/T
// SIG // mxUocpSB36/w0OD7EV/BkbSJ7ibDJMEoOt23weENlIpD
// SIG // BD/wrWR4vMVuV7QCqfeXLN5r1AjLyAAPNya/1MgAwAiV
// SIG // 1VOJmmIrHM1M+ydddXg9SqxvZkPiE4J0Uf19sUwzAs/o
// SIG // qPGWRRxsBGYPnN75j6fO5uDqjilsoXKjFLqT73jv4EAv
// SIG // Ub+LMyzRg2qHj3iuiFNCanBo16sW3BKEv7NYQoD3e1Me
// SIG // mFnlq1F2sW2/iaLIDms1IFBrNWqqZy489GCn1Kp/IuU2
// SIG // 5kdXahJUeEAPjmX3lYaU6J6zOLBPzJSdSS6UdhcACB1H
// SIG // jH6LVzUIsrWH0QVDiRxXiWBH5WYFZNF8f+JGQXc4BUDz
// SIG // ln1XdjaM15QtnqRrVI2pbgNqLDr0B2cxjqCk71lD1/fT
// SIG // LLBjmztMSR3dA8oD/yQFafm0RiamtruwKi5tvrQE9usi
// SIG // Ob3nHA5jWbIN7w4dR3KQiWvUKUVvzA92vgBdsoFdbEZx
// SIG // lVFRt1Tg19wYRk/EzFPxolMt4ewpVzsZmfsHgriDswpE
// SIG // w2yuTpQEvKkj6YKflxpTixD2jN9TIH+mE6aQGnj9KKYc
// SIG // d+OaIbcCAwEAAaOCAUkwggFFMB0GA1UdDgQWBBTQgrKn
// SIG // V0cvzJo2RlUwL8e2BVqbJTAfBgNVHSMEGDAWgBSfpxVd
// SIG // AF5iXYP05dJlpxtTNRnpcjBfBgNVHR8EWDBWMFSgUqBQ
// SIG // hk5odHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3Bz
// SIG // L2NybC9NaWNyb3NvZnQlMjBUaW1lLVN0YW1wJTIwUENB
// SIG // JTIwMjAxMCgxKS5jcmwwbAYIKwYBBQUHAQEEYDBeMFwG
// SIG // CCsGAQUFBzAChlBodHRwOi8vd3d3Lm1pY3Jvc29mdC5j
// SIG // b20vcGtpb3BzL2NlcnRzL01pY3Jvc29mdCUyMFRpbWUt
// SIG // U3RhbXAlMjBQQ0ElMjAyMDEwKDEpLmNydDAMBgNVHRMB
// SIG // Af8EAjAAMBYGA1UdJQEB/wQMMAoGCCsGAQUFBwMIMA4G
// SIG // A1UdDwEB/wQEAwIHgDANBgkqhkiG9w0BAQsFAAOCAgEA
// SIG // OCL0m56+IxD4KOVuMY9//tHQhsLM/Ot0BmdpgfWeEsLR
// SIG // hizL8H7EVLNzSJTw/y7FgMXVWB5JQM8C08EOTPj0Xcvd
// SIG // gxn7chDhjB37rexqvC90VHL6769AC/zTbXxKWwBJAhc7
// SIG // HnsbWObN4c49619sL6AWZtsrYcHC3mZjIB0Apo2af9tH
// SIG // x1iYK4z2I7HukQybVE5b1LI6/vO/P7fr60BCKpZnmwnh
// SIG // IvlUFcXO8BdC7jE8P4AlnXKh6Ki+diaLcSs2PI2UkO3H
// SIG // DR4QuHhxhUaWinokkNBl7ZWxiGz+JFtTtyc5So38Butj
// SIG // Qkr35jNYjw/dF2IhZu//JoEdegJqnnw7H4wQlsH96oXi
// SIG // DH4Gc1qnhM/JWhZjPA3ZF47jgkBP9i9E8Ya41LXTJAE3
// SIG // 13WY2EZbHAQ8q/MxjJaaxQuy3Magl5YcYbXdgjPpqXE3
// SIG // PEQdg9xKK9FHaD9+kPa+F1glVf9ip9AF7b1sbyH8jhZu
// SIG // Wi5dHhM5IX7/15lJQXjghJUu43XXVqQZUIybhx1B4zlR
// SIG // l5ayU+1+IYnBdaNt8eVPo+6jygXHq8j9v9aMX5h3OrgV
// SIG // 5VwSrpFf0AmQVQIgTGCYZ5LWpFh6aPbiHkp2E+kMe8H9
// SIG // kWrmByBEfEi0Zm5TMzzrPiR0M674e8Urcd9dCzqftA2j
// SIG // l7PMY2b4aZ/lrmYo+UZmYowwggdxMIIFWaADAgECAhMz
// SIG // AAAAFcXna54Cm0mZAAAAAAAVMA0GCSqGSIb3DQEBCwUA
// SIG // MIGIMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGlu
// SIG // Z3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMV
// SIG // TWljcm9zb2Z0IENvcnBvcmF0aW9uMTIwMAYDVQQDEylN
// SIG // aWNyb3NvZnQgUm9vdCBDZXJ0aWZpY2F0ZSBBdXRob3Jp
// SIG // dHkgMjAxMDAeFw0yMTA5MzAxODIyMjVaFw0zMDA5MzAx
// SIG // ODMyMjVaMHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpX
// SIG // YXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYD
// SIG // VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNV
// SIG // BAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEw
// SIG // MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA
// SIG // 5OGmTOe0ciELeaLL1yR5vQ7VgtP97pwHB9KpbE51yMo1
// SIG // V/YBf2xK4OK9uT4XYDP/XE/HZveVU3Fa4n5KWv64NmeF
// SIG // RiMMtY0Tz3cywBAY6GB9alKDRLemjkZrBxTzxXb1hlDc
// SIG // wUTIcVxRMTegCjhuje3XD9gmU3w5YQJ6xKr9cmmvHaus
// SIG // 9ja+NSZk2pg7uhp7M62AW36MEBydUv626GIl3GoPz130
// SIG // /o5Tz9bshVZN7928jaTjkY+yOSxRnOlwaQ3KNi1wjjHI
// SIG // NSi947SHJMPgyY9+tVSP3PoFVZhtaDuaRr3tpK56KTes
// SIG // y+uDRedGbsoy1cCGMFxPLOJiss254o2I5JasAUq7vnGp
// SIG // F1tnYN74kpEeHT39IM9zfUGaRnXNxF803RKJ1v2lIH1+
// SIG // /NmeRd+2ci/bfV+AutuqfjbsNkz2K26oElHovwUDo9Fz
// SIG // pk03dJQcNIIP8BDyt0cY7afomXw/TNuvXsLz1dhzPUNO
// SIG // wTM5TI4CvEJoLhDqhFFG4tG9ahhaYQFzymeiXtcodgLi
// SIG // Mxhy16cg8ML6EgrXY28MyTZki1ugpoMhXV8wdJGUlNi5
// SIG // UPkLiWHzNgY1GIRH29wb0f2y1BzFa/ZcUlFdEtsluq9Q
// SIG // BXpsxREdcu+N+VLEhReTwDwV2xo3xwgVGD94q0W29R6H
// SIG // XtqPnhZyacaue7e3PmriLq0CAwEAAaOCAd0wggHZMBIG
// SIG // CSsGAQQBgjcVAQQFAgMBAAEwIwYJKwYBBAGCNxUCBBYE
// SIG // FCqnUv5kxJq+gpE8RjUpzxD/LwTuMB0GA1UdDgQWBBSf
// SIG // pxVdAF5iXYP05dJlpxtTNRnpcjBcBgNVHSAEVTBTMFEG
// SIG // DCsGAQQBgjdMg30BATBBMD8GCCsGAQUFBwIBFjNodHRw
// SIG // Oi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL0RvY3Mv
// SIG // UmVwb3NpdG9yeS5odG0wEwYDVR0lBAwwCgYIKwYBBQUH
// SIG // AwgwGQYJKwYBBAGCNxQCBAweCgBTAHUAYgBDAEEwCwYD
// SIG // VR0PBAQDAgGGMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0j
// SIG // BBgwFoAU1fZWy4/oolxiaNE9lJBb186aGMQwVgYDVR0f
// SIG // BE8wTTBLoEmgR4ZFaHR0cDovL2NybC5taWNyb3NvZnQu
// SIG // Y29tL3BraS9jcmwvcHJvZHVjdHMvTWljUm9vQ2VyQXV0
// SIG // XzIwMTAtMDYtMjMuY3JsMFoGCCsGAQUFBwEBBE4wTDBK
// SIG // BggrBgEFBQcwAoY+aHR0cDovL3d3dy5taWNyb3NvZnQu
// SIG // Y29tL3BraS9jZXJ0cy9NaWNSb29DZXJBdXRfMjAxMC0w
// SIG // Ni0yMy5jcnQwDQYJKoZIhvcNAQELBQADggIBAJ1Vffwq
// SIG // reEsH2cBMSRb4Z5yS/ypb+pcFLY+TkdkeLEGk5c9MTO1
// SIG // OdfCcTY/2mRsfNB1OW27DzHkwo/7bNGhlBgi7ulmZzpT
// SIG // Td2YurYeeNg2LpypglYAA7AFvonoaeC6Ce5732pvvinL
// SIG // btg/SHUB2RjebYIM9W0jVOR4U3UkV7ndn/OOPcbzaN9l
// SIG // 9qRWqveVtihVJ9AkvUCgvxm2EhIRXT0n4ECWOKz3+SmJ
// SIG // w7wXsFSFQrP8DJ6LGYnn8AtqgcKBGUIZUnWKNsIdw2Fz
// SIG // Lixre24/LAl4FOmRsqlb30mjdAy87JGA0j3mSj5mO0+7
// SIG // hvoyGtmW9I/2kQH2zsZ0/fZMcm8Qq3UwxTSwethQ/gpY
// SIG // 3UA8x1RtnWN0SCyxTkctwRQEcb9k+SS+c23Kjgm9swFX
// SIG // SVRk2XPXfx5bRAGOWhmRaw2fpCjcZxkoJLo4S5pu+yFU
// SIG // a2pFEUep8beuyOiJXk+d0tBMdrVXVAmxaQFEfnyhYWxz
// SIG // /gq77EFmPWn9y8FBSX5+k77L+DvktxW/tM4+pTFRhLy/
// SIG // AsGConsXHRWJjXD+57XQKBqJC4822rpM+Zv/Cuk0+CQ1
// SIG // ZyvgDbjmjJnW4SLq8CdCPSWU5nR0W2rRnj7tfqAxM328
// SIG // y+l7vzhwRNGQ8cirOoo6CGJ/2XBjU02N7oJtpQUQwXEG
// SIG // ahC0HVUzWLOhcGbyoYIDTTCCAjUCAQEwgfmhgdGkgc4w
// SIG // gcsxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5n
// SIG // dG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVN
// SIG // aWNyb3NvZnQgQ29ycG9yYXRpb24xJTAjBgNVBAsTHE1p
// SIG // Y3Jvc29mdCBBbWVyaWNhIE9wZXJhdGlvbnMxJzAlBgNV
// SIG // BAsTHm5TaGllbGQgVFNTIEVTTjo3RjAwLTA1RTAtRDk0
// SIG // NzElMCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAg
// SIG // U2VydmljZaIjCgEBMAcGBSsOAwIaAxUAwigGSir+ZbHQ
// SIG // tsqDBimIkMu/af+ggYMwgYCkfjB8MQswCQYDVQQGEwJV
// SIG // UzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMH
// SIG // UmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBv
// SIG // cmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1T
// SIG // dGFtcCBQQ0EgMjAxMDANBgkqhkiG9w0BAQsFAAIFAOth
// SIG // w94wIhgPMjAyNTAyMjAxNTA4MTRaGA8yMDI1MDIyMTE1
// SIG // MDgxNFowdDA6BgorBgEEAYRZCgQBMSwwKjAKAgUA62HD
// SIG // 3gIBADAHAgEAAgIX3zAHAgEAAgISPjAKAgUA62MVXgIB
// SIG // ADA2BgorBgEEAYRZCgQCMSgwJjAMBgorBgEEAYRZCgMC
// SIG // oAowCAIBAAIDB6EgoQowCAIBAAIDAYagMA0GCSqGSIb3
// SIG // DQEBCwUAA4IBAQBTCwRZN+RQnPzfRg+SwFhXnr5AWd1c
// SIG // VHxADo35cG3C1mb197EFGcSfOb1+Nny36CQTIVq4R0YW
// SIG // md4BkwMvlAvgW5iHWo09TiVM65vL1PQsp0ik6DssIb5q
// SIG // np7urfjkYs4G9qYK5Q+5xbetXsdGNdERGXo3FSRO8cy0
// SIG // TjRanuVlVpxD35g7Was96kwEQche0jFhUKwYaGL+1a6m
// SIG // g/vjg5BrGRQC0dS1PdfXjYWn+jhCWJdjLikdGFZxrVdc
// SIG // uX1ZLKwpUzxG+iRa/7ZnV/XDd1BxUhLzPNJyfwmNwNRA
// SIG // fKGWaPJHHj8cjvy7ThUBeEidXvKfm+hG93fQ9bYu1lv4
// SIG // ECNiMYIEDTCCBAkCAQEwgZMwfDELMAkGA1UEBhMCVVMx
// SIG // EzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1Jl
// SIG // ZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3Jh
// SIG // dGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUtU3Rh
// SIG // bXAgUENBIDIwMTACEzMAAAHwKnwdWTvmH60AAQAAAfAw
// SIG // DQYJYIZIAWUDBAIBBQCgggFKMBoGCSqGSIb3DQEJAzEN
// SIG // BgsqhkiG9w0BCRABBDAvBgkqhkiG9w0BCQQxIgQgp8Pn
// SIG // 3SD2nYxFb1smi7wNVzLZEtFBKgdlK8AmPNdYDSYwgfoG
// SIG // CyqGSIb3DQEJEAIvMYHqMIHnMIHkMIG9BCBcAZqjpXL9
// SIG // 5FO5gAebFke+EBQIkupm/gjOmrJxQGVLizCBmDCBgKR+
// SIG // MHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5n
// SIG // dG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVN
// SIG // aWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1p
// SIG // Y3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwAhMzAAAB
// SIG // 8Cp8HVk75h+tAAEAAAHwMCIEICfu7D/aEYVtoD42f8pa
// SIG // W2rfdnAyYN5qaKGMxqC6AkyoMA0GCSqGSIb3DQEBCwUA
// SIG // BIICAK9jSx/EH4GP1z/bvHFIvi8y3Wv1AfcBjwe56rii
// SIG // TJtbq9Kwfe/n6Ey0Y1eRtvTMF16fuRmxmGw8egHEnbPf
// SIG // TxvQ8k5wdrndTRR4pQfMy0EbNSWzlVWFEQalOsPcKJhP
// SIG // fqLFFLt8cX59JXIuG+qfPuVDcfMxfDPfwk73Tl5WvpVn
// SIG // tF/DO1vTxxN1t9jhN4i/RJXHj93oFJ1L8Y5hpWfbqUcn
// SIG // dFLcqxuZiyNXpYw0AFgSLR96Itz/Ujhc1IwFh8ADupYW
// SIG // zOM86SU4UVu68BxbAfQdtT2T2stF0OXInA8TSu1wJiL8
// SIG // u/EDa6RWqM48m1DeyI7+wnnhGmzcQZ1BApbwAdWgZdJB
// SIG // KsTKoJllCFimIHp0Fexs28B+X56pP0vVZT6PtIwPb5x3
// SIG // f8J3mqwy+dtpim0zJMExJ4MhzQM3fWC0M0vmtdDo2WwS
// SIG // M5Pp1fZtyKCGrRqs2+i8KSjCltoz6RyZL9TCV6GAUreb
// SIG // HByFCzmq3X/0lE6qyJpvyGIM+vcdtseQj7kSSKOdQbkF
// SIG // 9cTVU+WG7pcBoklFc6KYK4ZE9OM8tRx0gi89wq3R4DTH
// SIG // 25uYv+TtWIn+L704FFx1uxo/LguNSQwnq6JaxvDn+KPP
// SIG // zMR275p5dHaedOCITG0gUrpL2jVy2guwG/LuiXw61Zg/
// SIG // ttYm6Cy+jaDhox9pCeT8B7iJgR8D
// SIG // End signature block