
    Vh;j                    n   U d dl mZ dZd dlZd dlZd dlZd dlZd dlZd dlZd dl	Z
d dlmZ d dlmZ d dlmZmZmZmZ d dlmZmZ d dlmZ d d	lmZ d d
lmZ d dlmZmZm Z   e       Z!dZ" ejF                  d      Z$e%Z&de'd<   erejL                  Z& G d de&      Z(i Z)de'd<   i Z*de'd<    G d de      Z+y)    )annotationsa  
    author: Ansible Core Team
    name: paramiko
    short_description: Run tasks via Python SSH (paramiko)
    description:
        - Use the Python SSH implementation (Paramiko) to connect to targets
        - The paramiko transport is provided because many distributions, in particular EL6 and before do not support ControlPersist
          in their SSH implementations.
        - This is needed on the Ansible control machine to be reasonably efficient with connections.
          Thus paramiko is faster for most users on these platforms.
          Users with ControlPersist capability can consider using -c ssh or configuring the transport in the configuration file.
        - This plugin also borrows a lot of settings from the ssh plugin as they both cover the same protocol.
    version_added: "0.1"
    options:
      remote_addr:
        description:
            - Address of the remote target
        default: inventory_hostname
        type: string
        vars:
            - name: inventory_hostname
            - name: ansible_host
            - name: ansible_ssh_host
            - name: ansible_paramiko_host
      port:
          description: Remote port to connect to.
          type: int
          default: 22
          ini:
            - section: defaults
              key: remote_port
            - section: paramiko_connection
              key: remote_port
              version_added: '2.15'
          env:
            - name: ANSIBLE_REMOTE_PORT
            - name: ANSIBLE_REMOTE_PARAMIKO_PORT
              version_added: '2.15'
          vars:
            - name: ansible_port
            - name: ansible_ssh_port
            - name: ansible_paramiko_port
              version_added: '2.15'
          keyword:
            - name: port
      remote_user:
        description:
            - User to login/authenticate as
            - Can be set from the CLI via the C(--user) or C(-u) options.
        type: string
        vars:
            - name: ansible_user
            - name: ansible_ssh_user
            - name: ansible_paramiko_user
        env:
            - name: ANSIBLE_REMOTE_USER
            - name: ANSIBLE_PARAMIKO_REMOTE_USER
              version_added: '2.5'
        ini:
            - section: defaults
              key: remote_user
            - section: paramiko_connection
              key: remote_user
              version_added: '2.5'
        keyword:
            - name: remote_user
      password:
        description:
          - Secret used to either login the ssh server or as a passphrase for ssh keys that require it
          - Can be set from the CLI via the C(--ask-pass) option.
        type: string
        vars:
            - name: ansible_password
            - name: ansible_ssh_pass
            - name: ansible_ssh_password
            - name: ansible_paramiko_pass
            - name: ansible_paramiko_password
              version_added: '2.5'
      use_rsa_sha2_algorithms:
        description:
            - Whether or not to enable RSA SHA2 algorithms for pubkeys and hostkeys
            - On paramiko versions older than 2.9, this only affects hostkeys
            - For behavior matching paramiko<2.9 set this to V(False)
        vars:
            - name: ansible_paramiko_use_rsa_sha2_algorithms
        ini:
            - {key: use_rsa_sha2_algorithms, section: paramiko_connection}
        env:
            - {name: ANSIBLE_PARAMIKO_USE_RSA_SHA2_ALGORITHMS}
        default: True
        type: boolean
        version_added: '2.14'
      host_key_auto_add:
        description: 'Automatically add host keys'
        env: [{name: ANSIBLE_PARAMIKO_HOST_KEY_AUTO_ADD}]
        ini:
          - {key: host_key_auto_add, section: paramiko_connection}
        type: boolean
      look_for_keys:
        default: True
        description: 'False to disable searching for private key files in ~/.ssh/'
        env: [{name: ANSIBLE_PARAMIKO_LOOK_FOR_KEYS}]
        ini:
        - {key: look_for_keys, section: paramiko_connection}
        type: boolean
      proxy_command:
        default: ''
        description:
            - Proxy information for running the connection via a jumphost.
        type: string
        env: [{name: ANSIBLE_PARAMIKO_PROXY_COMMAND}]
        ini:
          - {key: proxy_command, section: paramiko_connection}
        vars:
          - name: ansible_paramiko_proxy_command
            version_added: '2.15'
      pty:
        default: True
        description: 'SUDO usually requires a PTY, True to give a PTY and False to not give a PTY.'
        env:
          - name: ANSIBLE_PARAMIKO_PTY
        ini:
          - section: paramiko_connection
            key: pty
        type: boolean
      record_host_keys:
        default: True
        description: 'Save the host keys to a file'
        env: [{name: ANSIBLE_PARAMIKO_RECORD_HOST_KEYS}]
        ini:
          - section: paramiko_connection
            key: record_host_keys
        type: boolean
      host_key_checking:
        description: 'Set this to "False" if you want to avoid host key checking by the underlying tools Ansible uses to connect to the host'
        type: boolean
        default: True
        env:
          - name: ANSIBLE_HOST_KEY_CHECKING
          - name: ANSIBLE_SSH_HOST_KEY_CHECKING
            version_added: '2.5'
          - name: ANSIBLE_PARAMIKO_HOST_KEY_CHECKING
            version_added: '2.5'
        ini:
          - section: defaults
            key: host_key_checking
          - section: paramiko_connection
            key: host_key_checking
            version_added: '2.5'
        vars:
          - name: ansible_host_key_checking
            version_added: '2.5'
          - name: ansible_ssh_host_key_checking
            version_added: '2.5'
          - name: ansible_paramiko_host_key_checking
            version_added: '2.5'
      use_persistent_connections:
        description: 'Toggles the use of persistence for connections'
        type: boolean
        default: False
        env:
          - name: ANSIBLE_USE_PERSISTENT_CONNECTIONS
        ini:
          - section: defaults
            key: use_persistent_connections
      banner_timeout:
        type: float
        default: 30
        version_added: '2.14'
        description:
          - Configures, in seconds, the amount of time to wait for the SSH
            banner to be presented. This option is supported by paramiko
            version 1.15.0 or newer.
        ini:
          - section: paramiko_connection
            key: banner_timeout
        env:
          - name: ANSIBLE_PARAMIKO_BANNER_TIMEOUT
      timeout:
        type: int
        default: 10
        description: Number of seconds until the plugin gives up on failing to establish a TCP connection.
        ini:
          - section: defaults
            key: timeout
          - section: ssh_connection
            key: timeout
            version_added: '2.11'
          - section: paramiko_connection
            key: timeout
            version_added: '2.15'
        env:
          - name: ANSIBLE_TIMEOUT
          - name: ANSIBLE_SSH_TIMEOUT
            version_added: '2.11'
          - name: ANSIBLE_PARAMIKO_TIMEOUT
            version_added: '2.15'
        vars:
          - name: ansible_ssh_timeout
            version_added: '2.11'
          - name: ansible_paramiko_timeout
            version_added: '2.15'
        cli:
          - name: timeout
      private_key_file:
          description:
              - Path to private key file to use for authentication.
          type: string
          ini:
            - section: defaults
              key: private_key_file
            - section: paramiko_connection
              key: private_key_file
              version_added: '2.15'
          env:
            - name: ANSIBLE_PRIVATE_KEY_FILE
            - name: ANSIBLE_PARAMIKO_PRIVATE_KEY_FILE
              version_added: '2.15'
          vars:
            - name: ansible_private_key_file
            - name: ansible_ssh_private_key_file
            - name: ansible_paramiko_private_key_file
              version_added: '2.15'
          cli:
            - name: private_key_file
              option: '--private-key'
N)LooseVersion)hexlify)AnsibleAuthenticationFailureAnsibleConnectionFailureAnsibleErrorAnsibleFileNotFound)PARAMIKO_IMPORT_ERRparamiko)ConnectionBase)Display)makedirs_safe)to_bytes	to_nativeto_textz
paramiko: The authenticity of host '%s' can't be established.
The %s key fingerprint is %s.
Are you sure you want to continue connecting (yes/no)?
z(\w+)(?:\s*=\s*|\s+)(.+)typeMissingHostKeyPolicyc                       e Zd ZdZddZddZy)MyAddPolicya
  
    Based on AutoAddPolicy in paramiko so we can determine when keys are added

    and also prompt for input.

    Policy for automatically adding the hostname and new host key to the
    local L{HostKeys} object, and saving it.  This is used by L{SSHClient}.
    c                4    || _         |j                  | _        y N)
connection_options)selfr   s     W/home/dcms/DCMS/lib/python3.12/site-packages/ansible/plugins/connection/paramiko_ssh.py__init__zMyAddPolicy.__init__  s    $"++    c                B   t        | j                  j                  d      | j                  j                  d       f      rt        |j	                               }|j                         }| j                  j                  d      s| j                  j                  rt        t        dd |||fz        t        t        j                  t        |||fz  d      d	      }|d
vrt        d      d|_        |j                  j                  ||j                         |       y )Nhost_key_checkinghost_key_auto_adduse_persistent_connections   \   F)privatesurrogate_or_stricterrors)yesy z host connection rejected by userT)allr   
get_optionr   get_fingerprintget_nameforce_persistencer   AUTHENTICITY_MSGr   displayprompt_until_added_by_ansible_this_time
_host_keysadd)r   clienthostnamekeyfingerprintktypeinps          r   missing_host_keyzMyAddPolicy.missing_host_key   s    **+>?T__E_E_`sEtAtuv!#"5"5"78KLLNE))*FG4??KlKl ##3Ab#9Xuk<Z#Z[[$$%55+8V%V`e$f,C
 **"#EFF*.' 	h<r   N)r   
ConnectionreturnNoner>   r?   )__name__
__module____qualname____doc__r   r<    r   r   r   r     s    ,=r   r   z$dict[str, paramiko.client.SSHClient]SSH_CONNECTION_CACHEz*dict[str, paramiko.sftp_client.SFTPClient]SFTP_CONNECTION_CACHEc                       e Zd ZU dZdZdZded<   ddZddZddZ	ddd	Z
dd
Zdd fdZd fdZddZd fdZddZddZddZddZ xZS ) r=   z% SSH based connections with Paramiko r   Nz
str | None_log_channelc                N    | j                  d      d| j                  d      dS Nremote_addr__remote_user)r,   r   s    r   
_cache_keyzConnection._cache_keyI  s    !__];T__]=[\\r   c                    | j                         }|t        v rt        |   | _        n| j                         x| _        t        |<   d| _        | S NT)rP   rF   ssh_connect_uncached
_connected)r   	cache_keys     r   _connectzConnection._connectL  sJ    OO%	,,+I6DH9=9O9O9QQDH+I6r   c                    || _         y)z(Mimic paramiko.SSHClient.set_log_channelN)rI   )r   names     r   _set_log_channelzConnection._set_log_channelV  s
     r   c                   | j                  d      xs d }i }|r| j                  d      || j                  d      d}|j                         D ]   \  }}|j                  |t        |            }" 	 dt	        j
                  |      i}t        j                  d|z  | j                  d             |S |S # t        $ r t        j                  d       Y |S w xY w)	Nproxy_commandrL   rN   )z%hz%pz%rsockz*CONFIGURE PROXY COMMAND FOR CONNECTION: %shostzwParamiko ProxyCommand support unavailable. Please upgrade to Paramiko 1.9.0 or newer. Not using configured ProxyCommand)
r,   itemsreplacestrr   ProxyCommandr1   vvvAttributeErrorwarning)r   portr\   
sock_kwarg	replacersfindra   s          r   _parse_proxy_commandzConnection._parse_proxy_commandZ  s    8@D
oom4oom4I
 "+!2 Jg - 5 5dCL IJE$h&;&;M&JK
H=X_c_n_no|_}~ z " E !D E Es   2A B6 6CCc                   t         t        dt        t              z        | j	                  d      }t
        j                  d| j	                  d      d|d| j	                  d      | j	                  d      	       t        j                         }t        t         j                  d
d      }t        t         j                  dd      }| j	                  d      }i }|s.|rt        d |D              |d<   |rt        d |D              |d<   | j                  |j                  | j                         t        j                  j                  d      | _        | j	                  d      r*dD ]  }	 |j#                  |        n |j#                          | j'                  |      }|j)                  t+        |              | j	                  d      }	d}
|	d}
	 d}| j	                  d      r.t        j                  j                  | j	                  d            }t-        t         j.                        t-        d      k\  r| j	                  d      |d<   t-        t         j.                        t-        d      k\  r| j	                  d      |d<    |j0                  | j	                  d      j3                         f| j	                  d      |
| j	                  d      ||	| j	                  d      ||d| |S # t$        $ r Y w xY w# t         j4                  j6                  $ r}t9        d |j:                  z        d}~wt         j4                  j<                  $ r*}d!j?                  tA        |            }tC        |      d}~wtD        $ rf}tA        |      }d"|v rt        d#      d$|v r8d%| j	                  d      d&| jG                  d      d'|d(|d)	}t9        |      t9        |      d}~ww xY w)*z! activates the connection object Nzparamiko is not installed: %srg   z,ESTABLISH PARAMIKO SSH CONNECTION FOR USER: rN   z	 on PORT  TO rL   r^   _preferred_pubkeysrE   _preferred_keysuse_rsa_sha2_algorithmsc              3  *   K   | ]  }d |v s|  ywzrsa-sha2NrE   .0as     r   	<genexpr>z/Connection._connect_uncached.<locals>.<genexpr>  s     6pQ`jno`oq6p   	pubkeysc              3  *   K   | ]  }d |v s|  ywrr   rE   rs   s     r   rv   z/Connection._connect_uncached.<locals>.<genexpr>  s     3n!^hlm^mA3nrw   keysz~/.ssh/known_hostsr   )z/etc/ssh/ssh_known_hostsz/etc/openssh/ssh_known_hostspasswordTFprivate_key_filez2.2.0timeoutauth_timeoutz1.15.0banner_timeoutlook_for_keys)usernameallow_agentr   key_filenamer{   r}   rg   disabled_algorithmszhost key mismatch for %szFailed to authenticate: {0}zPID check failedzNparamiko version issue, please upgrade paramiko on the machine running ansiblezPrivate key file is encryptedzssh @:z : z3
To connect as a different user, use -u <username>.)$r   r   r   r
   r,   r1   rd   	SSHClientgetattr	TransporttuplerI   set_log_channelospath
expanduserkeyfileload_system_host_keysIOErrorrk   set_missing_host_key_policyr   r   __version__connectlowerssh_exceptionBadHostKeyExceptionr   r7   AuthenticationExceptionformatr   r   	Exceptionget_options)r   rg   rS   paramiko_preferred_pubkeysparamiko_preferred_hostkeysrp   r   ssh_known_hostsssh_connect_kwargsconn_passwordr   r   emsgs                 r   rT   zConnection._connect_uncachedp  s    >K^A__``v&Y]YhYhivYwy}  @D  @O  @O  P]  @^  _7 	 	9   "
 &-X-?-?AUWY%Z"&-h.@.@BSUW&X#"&//2K"L<>&)166pB\6p1p#I.*.33n?Z3n.n#F+ ( 1 12ww))*>???./#_ --o>	 %%'!66t<''D(9:
3$K'	4L12!ww11$//BT2UV H001\'5JJ59__Y5O">2 H001\(5KK7;GW7X"#34CKK.4467'"ooo>)&	2$7 %8 
q  P %%99 	T*+E

+RSS%%== 	4/66wqzBC.s33 		4!*C"c)"#stt1S8OOM2D4D4D]4SUY[^`.s33.s33		4sD   /K1DL 1	K>=K>O-L66 O-%M;;O-A!O((O-c           
        t         t        |   |||       |rt        d      d}	 | j                  j                         j                  d       | j                  j                         j                         }| j                  d      rd|rb|j                  t        j                  d	d
      t!        t        j                  dd            t!        t        j                  dd                   t"        j%                  d|z  | j                  d             t'        |d      }d}	d}
d}	 |j                  |       | j(                  rV| j(                  j+                         r;d}d}|s|st"        j-                  d       |j/                  |      }t"        j-                  d|z         |s7d|v r2t        | j(                  j                  d            }t        d|z        n^||z  }|j1                  d      D ]@  }| j(                  j3                  |      rd} n!| j(                  j5                  |      s>d} n |s|s|rR| j(                  r;| j(                  j                  d      }|j7                  t'        |d      dz          nt        d      |	|z  }	|
|z  }
dj=                  |j?                  d |            }dj=                  |jA                  d |            }|jC                         |	|z   |	|z   fS # t        $ r0}t        |      }d}|r|d|z  z  }t        t        |            d}~ww xY w# t8        j:                  $ r t        dt        |      z         w xY w)!z" run a command on the remote host )in_datasudoablezHInternal Error: this module does not support optimized module pipeliningi      zFailed to open sessionz: %sNptyTERMvt100COLUMNSr   LINES)termwidthheightzEXEC %srL   r^   r%   r&   r   Fz&Waiting for Privilege Escalation inputzchunk is: %rs   unknown userbecome_userzuser %s does not existTbecome_pass   
z,A password is required but none was suppliedz0ssh timed out waiting for privilege escalation.
rb)"superr=   exec_commandr   rS   get_transportset_keepaliveopen_sessionr   r   r   r   r,   get_ptyr   getenvintr1   rd   r   becomeexpect_promptdebugrecv
splitlinescheck_successcheck_password_promptsendallsocketr}   joinmakefilemakefile_stderrrecv_exit_status)r   cmdr   r   bufsizechanr   text_er   no_prompt_outno_prompt_errbecome_output
passpromptbecome_sucesschunkn_become_userliner   stdoutstderr	__class__s                       r   r   zConnection.exec_command  s    	j$,S'H,Uijj	;HH""$221588))+88:D ??5!hLLbii8BIIiYZD[@\ehikirirsz|}i~eL  AIO$//-*HIs#89'	mc"{{t{{88:"
 %(JMM"JK IIg.EMM.5"89 *m;,5dkk6L6L]6[,\M"./G-/W"XX!!U*M !. 8 8 > ";;44T:,0M!![[>>tD)-J!"! )J0 {{&*kk&<&<]&KXkBW%X[`%`a*+YZZ!]2M!]2M $--g67$..tW=>%%')?QWAWXXC  	;QZF+Cw''*9S>::	;v ~~ 	mRU\]jUkkll	ms2   AK: +DL6 7	L6 AL6 :	L3+L..L36+M!c                   t         t        |   ||       t        j	                  d|d|| j                  d             t        j                  j                  t        |d            st        d|z        	 | j                  j                         | _        	 | j                  j!                  t        |d      t        |d             y	# t        $ r}t        d|z        d	}~ww xY w# t"        $ r t        d
|z        w xY w)z& transfer a file from local to remote zPUT rm   rL   r^   r%   r&   z!file or module does not exist: %s%failed to open a SFTP connection (%s)Nzfailed to transfer file to %s)r   r=   put_filer1   rd   r,   r   r   existsr   r	   rS   	open_sftpsftpr   r   putr   r   in_pathout_pathr   r   s       r   r   zConnection.put_file  s     	j$((;gx8t}?]^ww~~hw7LMN%&IG&STT	L**,DI	KIIMM(73HI8T\ezK{|	  	LFJKK	L
  	K>IJJ	Ks$   ;C 2C- 	C*C%%C*-Dc                    | j                  d      d| j                  d      d}|t        v r	t        |   S | j                         j                  j	                         x}t        |<   |S rK   )r,   rG   rW   rS   r   )r   rV   results      r   _connect_sftpzConnection._connect_sftp3  s]    "&//-"@$//R_B`a	--(338<8K8K8U8U8WWF*95Mr   c                   t         t        |   ||       t        j	                  d|d|| j                  d             	 | j                         | _        	 | j                  j                  t        |d      t        |d             y# t        $ r}t        dt        |      z        d}~ww xY w# t        $ r t        d	|z        w xY w)
z* save a remote file to the specified path zFETCH rm   rL   r^   r   Nr%   r&   zfailed to transfer file from %s)r   r=   
fetch_filer1   rd   r,   r   r   r   r   r   getr   r   r   s       r   r   zConnection.fetch_file<  s     	j$*7H=:Q^A_`	W**,DI	LIIMM(73HI8T\ezK{|	  	WFSTUVV	W
  	L@7JKK	Ls$   B 2B4 	B1B,,B14Cc                    | j                   j                  j                         D ]/  \  }}|j                         D ]  \  }}t        |dd      }|s  y 1 y)Nr3   FT)rS   r4   r`   r   )r   r7   rz   keytyper8   added_this_times         r   _any_keys_addedzConnection._any_keys_addedM  s[    "hh11779 	 NHd $

  ")#/Le"T" 	 
 r   c                   | j                         syt        j                  j                  d      }t	        |       t        |d      5 }| j                  j                  j                         D ]U  \  }}|j                         D ]=  \  }}t        |dd      }|r|j                  |d|d|j                         d       ? W | j                  j                  j                         D ]U  \  }}|j                         D ]=  \  }}t        |dd      }|s|j                  |d|d|j                         d       ? W 	 ddd       y# 1 sw Y   yxY w)z
        not using the paramiko save_ssh_host_keys function as we want to add new SSH keys at the bottom so folks
        don't complain about it :)
        Nz~/.sshwr3   F 
)r   r   r   r   r   openrS   r4   r`   r   write
get_base64)	r   filenamer   fr7   rz   r   r8   r   s	            r   _save_ssh_host_keyszConnection._save_ssh_host_keysV  s8    ##%ww!!(+d(C  	VA"&(("5"5";";"= V$$(JJL VLGS '.c3PRW&XO*'3>>CS TUVV #'(("5"5";";"= V$$(JJL VLGS&-c3PRW&XO&'3>>CS TUVV	V 	V 	Vs   AEA;E,EEc                ^    | j                   sy | j                          | j                          y r   )rU   closerW   rO   s    r   resetzConnection.resett  s    

r   c                   | j                         }t        j                  |d       t        j                  |d       t	        | d      r&| j
                  | j
                  j                          | j                  d      r| j                  d      ry| j                         rh| j                  j                  dd      }t        j                  j                  | j                        }t        |       t        |d      }t!        j"                  |t         j$                         	 | j&                  j)                          | j&                  j*                  j-                  | j&                  j.                         t        j                  j                  | j                        }t        j                  j1                  | j                        rDt        j2                  | j                        }|j4                  }|j6                  }|j8                  }	n*d}t        j:                         }t        j<                         }	t?        j@                  |d	
      }
t        jB                  |
jD                  |dz         t        jF                  |
jD                  ||	       | jI                  |
jD                         |
j                          t        jJ                  |
jD                  | j                         t!        j"                  |t         jR                         | j&                  j                          d	| _*        y# tL        $ r tO        jP                          Y ew xY w)z terminate the connection Nr   r   record_host_keysknown_hostsz.known_hosts.lockr   i  F)dirdeletei  )+rP   rF   poprG   hasattrr   r   r,   r   r   ra   r   r   dirnamer   r   fcntllockfLOCK_EXrS   r   r4   update_system_host_keysr   statst_modest_uidst_gidgetuidgetgidtempfileNamedTemporaryFilechmodrY   chownr   renamer   	traceback	print_excLOCK_UNrU   )r   rV   lockfiler   KEY_LOCKkey_dirkey_statmodeuidgidtmp_keyfiles              r   r   zConnection.closez  s=    OO%	  D1!!)T24 yy$		!??./DOODV4W\`\p\p\r ||++M;NOHggoodll3G'"Hc*HKK%--0%& ..0##**488+E+EF
 ''//$,,777>>$,,/!wwt||4H#++D"//C"//C D))+C))+C '99geT))4&=9))34(()9)9:!!#		+**DLL9 KK%--0  & ##%	&s   %GL. .MM)r>   rb   )r>   r=   )rY   rb   r>   r?   )   )rg   r   r>   zdict[str, t.Any])r>   zparamiko.SSHClientrR   )r   rb   r   zbytes | Noner   boolr>   ztuple[int, bytes, bytes])r   rb   r   rb   r>   r?   )r>   zparamiko.sftp_client.SFTPClient)r>   r  )r   rb   r>   r?   r@   )rA   rB   rC   rD   	transportrI   __annotations__rP   rW   rZ   rk   rT   r   r   r   r   r   r   r   r   __classcell__)r   s   @r   r=   r=   C  s`    /I#L*#]!,]~NY`K(L"V<A r   r=   ),
__future__r   DOCUMENTATIONr   r   r  r  r   retypingt#ansible.module_utils.compat.versionr   binasciir   ansible.errorsr   r   r   r	   $ansible.module_utils.compat.paramikor
   r   ansible.plugins.connectionr   ansible.utils.displayr   ansible.utils.pathr   +ansible.module_utils.common.text.convertersr   r   r   r1   r0   compileSETTINGS_REGEXobjectr   r  r   rF   rG   r=   rE   r   r   <module>r0     s    #bH 
     	  <   O 5 ) , T T
)  78# d ##88%=& %=Z >@ : ?DF A Fx  x r   