@itwin/core-frontend 5.13.0-dev.16 → 5.13.0-dev.17

package/lib/esm/tile/map/MapLayerImageryProvider.js

@@ -16,6 +16,34 @@ import { headersIncludeAuthMethod, setBasicAuthorization, setRequestTimeout } fr
 const tileImageSize = 256, untiledImageSize = 256;
 const earthRadius = 6378137;
 const doDebugToolTips = false;
+/** Escapes HTML metacharacters so the text renders literally when assigned to `innerHTML`.
+ * Use for any server- or user-supplied string that ends up in the map tooltip, which is rendered
+ * as HTML by [[MapLayerTileTreeReference.getToolTip]].
+ * @internal
+ */
+export function escapeHtml(text) {
+    return text.replace(/[&<>"']/g, (c) => `&#${c.charCodeAt(0)};`);
+}
+/** Returns the origin (scheme + host + port) of the given URL, or undefined if it cannot be parsed or does
+ * not denote a distinct network origin.
+ *
+ * Only `http:` and `https:` URLs yield an origin. Every other scheme is rejected because opaque URLs
+ * — `file:`, `data:`, `about:`, `blob:null`, and the custom protocols Electron hosts commonly register —
+ * all serialize to the literal string `"null"`. Comparing those would make unrelated URLs look same-origin,
+ * so a single trusted entry could unlock all of them. Callers use this for credential-trust decisions, and
+ * returning `undefined` keeps those decisions fail-closed.
+ * @internal
+ */
+export function tryGetOrigin(url) {
+    let parsed;
+    try {
+        parsed = new URL(url);
+    }
+    catch {
+        return undefined;
+    }
+    return (parsed.protocol === "http:" || parsed.protocol === "https:") ? parsed.origin : undefined;
+}
 /** The status of the map layer imagery provider that lets you know if authentication is needed to request tiles.
  * @public
  */
@@ -23,6 +51,12 @@ export var MapLayerImageryProviderStatus;
 (function (MapLayerImageryProviderStatus) {
     MapLayerImageryProviderStatus[MapLayerImageryProviderStatus["Valid"] = 0] = "Valid";
     MapLayerImageryProviderStatus[MapLayerImageryProviderStatus["RequireAuth"] = 1] = "RequireAuth";
+    /** A request received an authentication challenge, but credentials were withheld because the request origin
+     * is not trusted (see [[MapLayerFormatRegistry.restrictCredentialsToTrustedOrigins]]).
+     * The blocked origins are available via [[MapLayerImageryProvider.blockedOrigins]].
+     * @beta
+     */
+    MapLayerImageryProviderStatus[MapLayerImageryProviderStatus["UntrustedOrigin"] = 2] = "UntrustedOrigin";
 })(MapLayerImageryProviderStatus || (MapLayerImageryProviderStatus = {}));
 /** Abstract class for map layer imagery providers.
  * Map layer imagery providers request and provide tile images and other data. Each map layer from a separate source needs its own imagery provider object.
@@ -40,7 +74,41 @@ export class MapLayerImageryProvider {
     /** @internal */
     _status = MapLayerImageryProviderStatus.Valid;
     /** @internal */
-    _includeUserCredentials = false;
+    _blockedOrigins = new Set();
+    /** Origins of requests for which credentials were withheld because they are not trusted
+     * (see [[MapLayerFormatRegistry.restrictCredentialsToTrustedOrigins]]).
+     * Populated when [[status]] transitions to [[MapLayerImageryProviderStatus.UntrustedOrigin]];
+     * [[onStatusChanged]] is raised again each time a new origin is added. Cleared by [[resetStatus]].
+     * @beta
+     */
+    get blockedOrigins() { return [...this._blockedOrigins]; }
+    /** Origins for which a previous SSO handshake (i.e. Windows Authentication) succeeded.
+     * Browser credentials are only included for subsequent requests targeting these origins,
+     * so that a successful handshake with one host does not leak credentials to other hosts
+     * this provider may contact.
+     * @internal
+     */
+    _ssoSucceededOrigins = new Set();
+    /** Returns true if browser credentials should be included for the given URL because a previous
+     * SSO handshake succeeded for its origin AND the origin is still allowed by the current policy
+     * (see [[MapLayerFormatRegistry.isSsoAllowed]]). Re-checking the policy ensures a handshake recorded
+     * while enforcement was disabled — or before an origin was removed from
+     * [[MapLayerFormatRegistry.trustedCredentialsOrigins]] — does not keep latching credentials on.
+     * @internal
+     */
+    includeUserCredentials(url) {
+        const origin = tryGetOrigin(url);
+        return origin !== undefined && this._ssoSucceededOrigins.has(origin) && this.isSsoAllowed(url);
+    }
+    /** Records that an SSO handshake succeeded for the given URL's origin, so subsequent requests
+     * to that origin include browser credentials without going through another 401 challenge.
+     * @internal
+     */
+    recordSsoSucceeded(url) {
+        const origin = tryGetOrigin(url);
+        if (origin !== undefined)
+            this._ssoSucceededOrigins.add(origin);
+    }
     /** @internal */
     onFirstRequestCompleted = new BeEvent();
     /** @internal */
@@ -56,7 +124,17 @@ export class MapLayerImageryProvider {
      * @public
      */
     get supportsMapFeatureInfo() { return false; }
-    resetStatus() { this.setStatus(MapLayerImageryProviderStatus.Valid); }
+    /** Reset the provider's status to [[MapLayerImageryProviderStatus.Valid]] and clear the list of
+     * [[blockedOrigins]] accumulated while in the [[MapLayerImageryProviderStatus.UntrustedOrigin]] state.
+     * Raises [[onStatusChanged]] if the status actually changes.
+     * Typically called after the user has provided credentials or the application has updated
+     * [[MapLayerFormatRegistry.trustedCredentialsOrigins]], so that subsequent requests are re-attempted.
+     * @beta
+     */
+    resetStatus() {
+        this._blockedOrigins.clear();
+        this.setStatus(MapLayerImageryProviderStatus.Valid);
+    }
     /** @internal */
     get tileSize() { return this._usesCachedTiles ? tileImageSize : untiledImageSize; }
     /** @internal */
@@ -230,6 +308,32 @@ export class MapLayerImageryProvider {
             setBasicAuthorization(headers, this._settings.userName, this._settings.password);
         }
     }
+    /** Returns true if the given URL has the same origin as this layer's settings URL.
+     * Used to avoid leaking credentials to third-party hosts.
+     * @internal
+     */
+    matchesSettingsUrlOrigin(url) {
+        const origin = tryGetOrigin(url);
+        return origin !== undefined && origin === tryGetOrigin(this._settings.url);
+    }
+    /** Returns true if the basic-auth credentials from the layer settings may be attached to a request to the given URL.
+     * Always true unless [[MapLayerFormatRegistry.restrictCredentialsToTrustedOrigins]] is enabled (opt-in).
+     * When enabled, the origin of this layer's settings URL is implicitly trusted (the credentials belong to that
+     * server); other origins must be listed in [[MapLayerFormatRegistry.trustedCredentialsOrigins]].
+     * See [[MapLayerFormatRegistry.isCredentialsSharingAllowed]].
+     * @internal
+     */
+    isCredentialsSharingAllowed(url) {
+        return IModelApp.mapLayerFormatRegistry.isCredentialsSharingAllowed(url, this._settings.url);
+    }
+    /** Returns true if a request to the given URL may be retried with browser credentials included
+     * (i.e. SSO / Windows Authentication) after an NTLM or Negotiate http 401 challenge.
+     * See [[MapLayerFormatRegistry.isSsoAllowed]].
+     * @internal
+     */
+    isSsoAllowed(url) {
+        return IModelApp.mapLayerFormatRegistry.isSsoAllowed(url);
+    }
     /** @internal */
     async makeTileRequest(url, timeoutMs, authorization) {
         // We want to complete the first request before letting other requests go;
@@ -249,40 +353,132 @@ export class MapLayerImageryProvider {
             throw new Error("fetch call failed");
         return response;
     }
+    /** Records the given URL's origin and transitions the status to [[MapLayerImageryProviderStatus.UntrustedOrigin]].
+     * Called when a request received an authentication challenge that could not be answered because the origin
+     * is not trusted (see [[MapLayerFormatRegistry.restrictCredentialsToTrustedOrigins]]).
+     * Raises [[onStatusChanged]] on the status transition, and again whenever a new origin is added.
+     * @internal
+     */
+    reportBlockedOrigin(url) {
+        const origin = tryGetOrigin(url) ?? url;
+        const isNewOrigin = !this._blockedOrigins.has(origin);
+        this._blockedOrigins.add(origin);
+        if (this._status !== MapLayerImageryProviderStatus.UntrustedOrigin)
+            this.setStatus(MapLayerImageryProviderStatus.UntrustedOrigin);
+        else if (isNewOrigin)
+            this.onStatusChanged.raiseEvent(this); // status unchanged, but a new origin was blocked
+    }
+    /** Logs a warning (once per origin, app-wide) when credentials are sent to an origin that would be blocked
+     * if [[MapLayerFormatRegistry.restrictCredentialsToTrustedOrigins]] were enabled.
+     * Helps applications discover the origins they need to whitelist before opting in to the restriction.
+     * See [[MapLayerFormatRegistry.logUntrustedOriginUse]].
+     * @internal
+     */
+    logUntrustedOriginUse(url) {
+        IModelApp.mapLayerFormatRegistry.logUntrustedOriginUse(url);
+    }
+    /** The redirect policy to apply to a request that carries browser credentials (see [[includeUserCredentials]]).
+     *
+     * When [[MapLayerFormatRegistry.restrictCredentialsToTrustedOrigins]] is enabled, redirects are refused
+     * outright (`"error"`). `fetch` cannot be asked to follow only same-origin redirects, and by the time a
+     * followed redirect can be inspected the credentials have already been delivered to the destination — so
+     * refusing is the only way to honour the guarantee that credentials reach none but the origins listed in
+     * [[MapLayerFormatRegistry.trustedCredentialsOrigins]]. Legitimate same-origin redirects fail as a result;
+     * that is the cost of the opt-in restriction.
+     *
+     * When the restriction is disabled (the default), redirects are followed as before and
+     * [[checkCredentialedRedirect]] reports the destination after the fact.
+     * @internal
+     */
+    get credentialedRedirect() {
+        return IModelApp.mapLayerFormatRegistry.restrictCredentialsToTrustedOrigins ? "error" : undefined;
+    }
+    /** Detects that a request carrying browser credentials (see [[includeUserCredentials]]) was transparently
+     * redirected to a different origin, and reports or logs that origin.
+     *
+     * This is a **best-effort, after-the-fact** signal used only while
+     * [[MapLayerFormatRegistry.restrictCredentialsToTrustedOrigins]] is disabled, where credentialed requests
+     * still follow redirects (see [[credentialedRedirect]]). It cannot prevent the exposure — the credentials
+     * have already been sent — and it does not fire at all when the destination denies CORS, because `fetch`
+     * then rejects instead of returning a `Response`. The destination origin is never latched as SSO-succeeded,
+     * so credentials do not keep flowing to it.
+     * @internal
+     */
+    checkCredentialedRedirect(requestedUrl, response) {
+        const finalOrigin = tryGetOrigin(response.url);
+        if (!response.url || finalOrigin === undefined || finalOrigin === tryGetOrigin(requestedUrl))
+            return;
+        if (!this.isSsoAllowed(response.url))
+            this.reportBlockedOrigin(response.url);
+        else
+            this.logUntrustedOriginUse(response.url); // no-op when the restriction is enabled
+    }
     /** @internal */
     async makeRequest(url, timeoutMs, authorization) {
         let response;
         let headers;
         let hasCreds = false;
+        // Whether this request had basic-auth credentials of its own to offer. Requests carrying a caller-supplied
+        // `authorization` are excluded: those bypass the origin policy entirely.
+        const hasSettingsCreds = !authorization && !!this._settings.userName && !!this._settings.password;
         if (authorization) {
             headers = new Headers();
             headers.set("Authorization", authorization);
         }
-        else if (this._settings.userName && this._settings.password) {
-            hasCreds = true;
-            headers = new Headers();
-            this.setRequestAuthorization(headers);
+        else if (hasSettingsCreds) {
+            if (this.isCredentialsSharingAllowed(url)) {
+                hasCreds = true;
+                headers = new Headers();
+                this.setRequestAuthorization(headers);
+                if (!this.matchesSettingsUrlOrigin(url))
+                    this.logUntrustedOriginUse(url);
+            }
         }
+        const includeCredentials = this.includeUserCredentials(url);
         const opts = {
             method: "GET",
             headers,
-            credentials: this._includeUserCredentials ? "include" : undefined,
+            credentials: includeCredentials ? "include" : undefined,
+            redirect: includeCredentials ? this.credentialedRedirect : undefined,
         };
         if (timeoutMs !== undefined)
             setRequestTimeout(opts, timeoutMs);
         response = await fetch(url, opts);
+        if (includeCredentials)
+            this.checkCredentialedRedirect(url, response);
+        // fetch follows redirects transparently, so all trust decisions below target the final
+        // (post-redirect) URL reported by the response, not the URL we asked for.
+        const challengedUrl = response.url || url;
         if (response.status === 401
             && headersIncludeAuthMethod(response.headers, ["ntlm", "negotiate"])
-            && !this._includeUserCredentials
+            && !includeCredentials
             && !hasCreds) {
-            // Removed the previous headers and make sure "include" credentials is set
-            opts.headers = undefined;
-            opts.credentials = "include";
-            // We got a http 401 challenge, lets try again with SSO enabled (i.e. Windows Authentication)
-            response = await fetch(url, opts);
-            if (response.status === 200) {
-                this._includeUserCredentials = true; // avoid going through 401 challenges over and over
+            if (this.isSsoAllowed(challengedUrl)) {
+                // Removed the previous headers and make sure "include" credentials is set
+                opts.headers = undefined;
+                opts.credentials = "include";
+                // A Negotiate/NTLM handshake is normally a same-URL 401 round-trip, but in legacy mode we preserve
+                // the previous behavior and allow the browser to follow redirects after the authenticated retry.
+                opts.redirect = IModelApp.mapLayerFormatRegistry.restrictCredentialsToTrustedOrigins ? "error" : undefined;
+                this.logUntrustedOriginUse(challengedUrl);
+                // We got a http 401 challenge, lets try again with SSO enabled (i.e. Windows Authentication)
+                response = await fetch(challengedUrl, opts);
+                if (response.status === 200) {
+                    this.recordSsoSucceeded(challengedUrl); // avoid going through 401 challenges over and over for this origin
+                }
             }
+            else {
+                this.reportBlockedOrigin(challengedUrl);
+            }
+        }
+        else if ((response.status === 401 || response.status === 403) && hasSettingsCreds && !this.isCredentialsSharingAllowed(challengedUrl)) {
+            // Some servers answer an unauthenticated request with 403 (Forbidden) rather than a 401 challenge;
+            // since this request could not present its credentials to the challenging origin, either status most
+            // likely results from that. The permission is recomputed for the challenged URL rather than reusing the
+            // decision made for the requested one: `fetch` strips the Authorization header when it follows a
+            // cross-origin redirect, so a trusted request can still arrive unauthenticated at an untrusted origin,
+            // and conversely a request that started out untrusted may end up at an origin that is trusted.
+            this.reportBlockedOrigin(challengedUrl);
         }
         return response;
     }
@@ -314,16 +510,28 @@ export class MapLayerImageryProvider {
     }
     /** @internal */
     async toolTipFromUrl(strings, url) {
-        const headers = new Headers();
-        this.setRequestAuthorization(headers);
+        let headers;
+        if (this.isCredentialsSharingAllowed(url)) {
+            headers = new Headers();
+            this.setRequestAuthorization(headers);
+        }
         try {
+            const includeCredentials = this.includeUserCredentials(url);
             const response = await fetch(url, {
                 method: "GET",
                 headers,
-                credentials: this._includeUserCredentials ? "include" : undefined,
+                credentials: includeCredentials ? "include" : undefined,
+                redirect: includeCredentials ? this.credentialedRedirect : undefined,
             });
-            const text = await response.text();
-            if (undefined !== text) {
+            if (includeCredentials)
+                this.checkCredentialedRedirect(url, response);
+            let text = await response.text();
+            if (text) {
+                // Tooltip content (e.g. WMS GetFeatureInfo responses) is rendered as HTML downstream and may
+                // deliberately contain markup; text from origins not trusted for credentials is escaped.
+                // fetch follows redirects transparently, so the text may come from a different origin than requested.
+                if (!this.isCredentialsSharingAllowed(response.url || url))
+                    text = escapeHtml(text);
                 strings.push(text);
             }
         }

package/lib/esm/tile/map/MapLayerImageryProvider.js.map

@@ -1 +1 @@
-{"version":3,"file":"MapLayerImageryProvider.js","sourceRoot":"","sources":["../../../../src/tile/map/MapLayerImageryProvider.ts"],"names":[],"mappings":"AAAA;;;+FAG+F;AAC/F;;GAEG;AAEH,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAuC,WAAW,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACzG,OAAO,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAC7C,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAExF,OAAO,EAAE,iBAAiB,EAAE,sBAAsB,EAA8H,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAE7N,OAAO,EAAE,wBAAwB,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAGzG,gBAAgB;AAChB,MAAM,aAAa,GAAG,GAAG,EAAE,gBAAgB,GAAG,GAAG,CAAC;AAClD,MAAM,WAAW,GAAG,OAAO,CAAC;AAC5B,MAAM,eAAe,GAAG,KAAK,CAAC;AAE9B;;GAEG;AACH,MAAM,CAAN,IAAY,6BAGX;AAHD,WAAY,6BAA6B;IACvC,mFAAK,CAAA;IACL,+FAAW,CAAA;AACb,CAAC,EAHW,6BAA6B,KAA7B,6BAA6B,QAGxC;AAWD;;;GAGG;AACH,MAAM,OAAgB,uBAAuB;IAoGZ;IAA4C;IAnGjE,2BAA2B,GAAG,KAAK,CAAC;IAC9B,eAAe,GAAG,IAAI,OAAO,EAA+C,CAAC;IAE7F,gBAAgB;IACC,qBAAqB,GAAG,IAAI,uBAAuB,EAAE,CAAC;IAEvE,gBAAgB;IACC,uBAAuB,GAAG,IAAI,sBAAsB,EAAE,CAAC;IAExE,gBAAgB;IACR,OAAO,GAAG,6BAA6B,CAAC,KAAK,CAAC;IAEtD,gBAAgB;IACN,uBAAuB,GAAG,KAAK,CAAC;IAE1C,gBAAgB;IACG,uBAAuB,GAAG,IAAI,OAAO,EAAc,CAAC;IAEvE,gBAAgB;IACN,oBAAoB,CAA0B;IAExD;;;OAGG;IACH,IAAW,MAAM,KAAK,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAE5C;;;;OAIG;IACH,IAAW,sBAAsB,KAAc,OAAO,KAAK,CAAC,CAAC,CAAC;IAEvD,WAAW,KAAK,IAAI,CAAC,SAAS,CAAC,6BAA6B,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAE7E,gBAAgB;IAChB,IAAW,QAAQ,KAAa,OAAO,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAElG,gBAAgB;IAChB,IAAW,iBAAiB,KAAK,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IAE5D,IAAW,gBAAgB,KAAa,OAAO,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC;IAE9E,IAAW,gBAAgB,KAAa,OAAO,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC;IAE9E,gBAAgB;IAChB,IAAW,eAAe,KAAK,OAAO,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAE9D,IAAW,uBAAuB,KAAc,OAAO,KAAK,CAAC,CAAC,CAAC;IAE/D,gBAAgB;IAChB,IAAW,yBAAyB,KAAK,OAAO,KAAK,CAAC,CAAC,CAAC;IAEhD,WAAW,CAAqB;IAExC;;;;OAIG;IACK,MAAM,CAAC,YAAY,CAAC,KAAoC;QAC9D,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;YACxD,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YAC1D,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;YAC5D,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACxE,CAAC;IAED;;;OAGG;IACH,IAAW,UAAU;QACnB,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED,IAAW,UAAU,CAAC,KAAoC;QACxD,IAAI,CAAC,WAAW,GAAG,uBAAuB,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IACrF,CAAC;IAED;;;OAGG;IACgB,uBAAuB,GAAG,CAAC,CAAC;IAE/C;;;OAGG;IACgB,uBAAuB,GAAG,EAAE,CAAC;IAEhD,gBAAgB;IAChB,IAAc,mBAAmB,KAAK,OAAO,IAAI,CAAC,CAAC,CAAC;IAEpD,YAA+B,SAAgC,EAAY,gBAAyB;QAArE,cAAS,GAAT,SAAS,CAAuB;QAAY,qBAAgB,GAAhB,gBAAgB,CAAS;QAClG,IAAI,CAAC,qBAAqB,GAAG,IAAI,uBAAuB,EAAE,CAAC;QAC3D,IAAI,CAAC,uBAAuB,GAAG,IAAI,sBAAsB,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IACxE,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,UAAU;QACrB,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,uBAAuB,CAAC,CAAC,IAAI,CAAC,CAAC,QAAiC,EAAE,EAAE;YAC3F,IAAI,QAAQ,KAAK,SAAS;gBACxB,IAAI,CAAC,gBAAgB,GAAG,QAAQ,CAAC,IAAkB,CAAC;QACxD,CAAC,CAAC,CAAC;IACL,CAAC;IAID,IAAW,YAAY,KAAsB,OAAO,IAAI,CAAC,yBAAyB,CAAC,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC;IAEjJ,kGAAkG;IAC3F,YAAY,CAAC,MAAwB,EAAE,SAAyB,IAAU,CAAC;IAElF;;;;;OAKG;IACI,KAAK,CAAC,eAAe,CAAC,KAAuB,EAAE,EAAkB;QACtE,4DAA4D;QAC5D,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;IACvD,CAAC;IAED,gBAAgB;IACN,gBAAgB,CAAc;IAExC,gBAAgB;IAChB,IAAW,2BAA2B,KAAa,OAAO,IAAI,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAEpH,gBAAgB;IACN,KAAK,CAAC,qBAAqB,CAAC,KAAqB,IAAsB,OAAO,IAAI,CAAC,CAAC,CAAC;IAE/F,gBAAgB;IACT,oBAAoB,CAAC,MAAc;QACxC,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC;QACpC,OAAO,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC,2BAA2B,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,2BAA2B,CAAC,UAAU,CAAC,CAAC,CAAC;IAClJ,CAAC;IAED;;;;;;OAMG;IACO,iBAAiB,CAAC,MAAc,EAAE,eAA6C;QACvF,eAAe,CAAC,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC;IACrD,CAAC;IAED,gBAAgB;IACT,gBAAgB,CAAC,IAAoB,EAAE,eAA6C;QACzF,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,gBAAgB,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,mBAAmB,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;YAC3J,IAAI,CAAC,OAAO,EAAE,CAAC;YACf,OAAO;QACT,CAAC;QACD,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IACvD,CAAC;IAED;;;;;;;OAOG;IACI,KAAK,CAAC,UAAU,CAAC,OAAiB,EAAE,MAAc,EAAE,MAAoB,EAAE,IAAwB;QACvG,IAAI,eAAe,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,MAAM,CAAC,sBAAsB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAC/D,OAAO,CAAC,IAAI,CAAC,WAAW,MAAM,CAAC,WAAW,UAAU,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,UAAU,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC;QAC9H,CAAC;IACH,CAAC;IAED,gBAAgB;IACT,KAAK,CAAC,cAAc,CAAC,YAAmC,EAAE,OAAe,EAAE,MAAoB,EAAE,KAAyB,EAAE,IAAe,EAAE,QAAgC;QAClL,8DAA8D;QAC9D,YAAY,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC;IAED,gBAAgB;IACR,QAAQ,CAAC,QAAyB;IAC1C,CAAC;IAED,gBAAgB;IACN,KAAK,CAAC,wBAAwB,CAAC,YAAsB,EAAE,SAAiB;QAChF,MAAM,WAAW,GAAG,MAAM,YAAY,CAAC,WAAW,EAAE,CAAC;QACrD,MAAM,SAAS,GAAe,IAAI,UAAU,CAAC,WAAW,CAAC,CAAC;QAC1D,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC;YACxC,OAAO,SAAS,CAAC;QACnB,IAAI,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC;YACrD,OAAO,SAAS,CAAC;QAEnB,MAAM,WAAW,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,WAAW,EAAE,CAAC;QAC5E,IAAI,WAA0C,CAAC;QAC/C,IAAI,WAAW,EAAE,CAAC;YAChB,mFAAmF;YACnF,+EAA+E;YAC/E,IAAI,WAAW,CAAC,QAAQ,CAAC,YAAY,CAAC;gBACpC,WAAW,GAAG,iBAAiB,CAAC,IAAI,CAAC;iBAClC,IAAI,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC;gBACxC,WAAW,GAAG,iBAAiB,CAAC,GAAG,CAAC;QACxC,CAAC;QAED,IAAI,WAAW,KAAK,SAAS;YAC3B,OAAO,IAAI,WAAW,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QAEjD,MAAM,CAAC,KAAK,EAAE,2BAA2B,CAAC,CAAC;QAC3C,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;OAIG;IACI,SAAS,CAAC,MAAqC;QACpD,IAAI,IAAI,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;YAC5B,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;YAC7B,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;YACtB,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAED;;OAEG;IACO,eAAe,CAAC,UAAyC,IAAI,CAAC;IAExE,gBAAgB;IACN,uBAAuB,CAAC,OAAgB;QAChD,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC;YACvD,qBAAqB,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;IAED,gBAAgB;IACT,KAAK,CAAC,eAAe,CAAC,GAAW,EAAE,SAAkB,EAAE,aAAsB;QAElF,0EAA0E;QAC1E,uEAAuE;QACvE,IAAI,CAAC,IAAI,CAAC,oBAAoB;YAC5B,IAAI,CAAC,oBAAoB,GAAI,IAAI,OAAO,CAAO,CAAC,OAAY,EAAE,EAAE,CAAC,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,GAAE,EAAE,CAAA,OAAO,EAAE,CAAC,CAAC,CAAC;;YAEtH,MAAM,IAAI,CAAC,oBAAoB,CAAC;QAElC,IAAI,QAA4B,CAAC;QACjC,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;QACnE,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,uBAAuB,CAAC,UAAU,EAAE,CAAC;QAC5C,CAAC;QAED,IAAI,QAAQ,KAAK,SAAS;YACxB,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAEvC,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,gBAAgB;IACT,KAAK,CAAC,WAAW,CAAC,GAAW,EAAE,SAAkB,EAAE,aAAsB;QAE9E,IAAI,QAA4B,CAAC;QAEjC,IAAI,OAA4B,CAAC;QACjC,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,aAAa,EAAE,CAAC;YAClB,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;YACxB,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,aAAa,CAAC,CAAC;QAC9C,CAAC;aAAM,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC;YAC9D,QAAQ,GAAG,IAAI,CAAC;YAChB,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;YACxB,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC;QACxC,CAAC;QACD,MAAM,IAAI,GAAgB;YACxB,MAAM,EAAE,KAAK;YACb,OAAO;YACP,WAAW,EAAE,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;SAClE,CAAC;QAEF,IAAI,SAAS,KAAK,SAAS;YACzB,iBAAiB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAErC,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAElC,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;eAClB,wBAAwB,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;eACjE,CAAC,IAAI,CAAC,uBAAuB;eAC7B,CAAC,QAAQ,EAChB,CAAC;YACD,0EAA0E;YAC1E,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC;YACzB,IAAI,CAAC,WAAW,GAAG,SAAS,CAAC;YAE7B,6FAA6F;YAC7F,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAG,IAAI,CAAC,CAAC;YACnC,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC5B,IAAI,CAAC,uBAAuB,GAAG,IAAI,CAAC,CAAI,mDAAmD;YAC7F,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,0DAA0D;IACnD,KAAK,CAAC,QAAQ,CAAC,GAAW,EAAE,MAAc,EAAE,SAAiB;QAElE,IAAI,CAAC;YACH,MAAM,OAAO,GAAW,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;YACxE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;gBACtB,OAAO,SAAS,CAAC;YAEnB,MAAM,YAAY,GAAa,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;YAEnE,IAAI,CAAC,IAAI,CAAC,2BAA2B,EAAE,CAAC;gBACtC,IAAI,CAAC,2BAA2B,GAAG,IAAI,CAAC;YAC1C,CAAC;YAED,OAAO,MAAM,IAAI,CAAC,wBAAwB,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;QACtE,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,IAAI,KAAK,EAAE,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC1B,IAAI,CAAC,SAAS,CAAC,6BAA6B,CAAC,WAAW,CAAC,CAAC;gBAE1D,0EAA0E;gBAC1E,kFAAkF;gBAClF,yCAAyC;gBACzC,IAAI,IAAI,CAAC,2BAA2B,EAAE,CAAC;oBACrC,MAAM,GAAG,GAAG,SAAS,CAAC,YAAY,CAAC,kBAAkB,CAAC,gDAAgD,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;oBAC5I,SAAS,CAAC,aAAa,CAAC,aAAa,CAAC,IAAI,oBAAoB,CAAC,qBAAqB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;gBACtG,CAAC;YAEH,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAED,gBAAgB;IACN,KAAK,CAAC,cAAc,CAAC,OAAiB,EAAE,GAAW;QAC3D,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;QAC9B,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC;QAEtC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAChC,MAAM,EAAE,KAAK;gBACb,OAAO;gBACP,WAAW,EAAE,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;aAClE,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;gBACvB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;QACT,CAAC;IACH,CAAC;IAED,gBAAgB;IACT,kBAAkB,CAAC,QAAoB;QAC5C,IAAI,CAAC,IAAI,CAAC,gBAAgB;YACxB,OAAO,KAAK,CAAC;QACf,IAAI,QAAQ,CAAC,MAAM,KAAK,IAAI,CAAC,gBAAgB,CAAC,MAAM;YAClD,OAAO,KAAK,CAAC;QACf,KAAK,IAAI,CAAC,GAAW,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;YACrD,IAAI,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7C,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;OAIG;IACI,YAAY,CAAC,SAAiB;QACnC,OAAO,SAAS,GAAG,WAAW,GAAG,KAAK,CAAC;IACzC,CAAC;IAED;;;;OAIG;IACI,YAAY,CAAC,QAAgB;QAClC,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,QAAQ,CAAC,GAAG,IAAI,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC;QACtF,OAAO,CAAC,GAAG,WAAW,GAAG,KAAK,CAAC;IACjC,CAAC;IAED;;;;OAIG;IACI,cAAc,CAAC,KAAa;QACjC,OAAO,KAAK,CAAC,gBAAgB,CAAC,KAAK,GAAG,WAAW,CAAC,CAAC;IACrD,CAAC;IAED;;;;OAIG;IACI,cAAc,CAAC,KAAa;QACjC,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,WAAW,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QACvE,OAAO,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;IACnC,CAAC;IAED;;;;;;;;OAQG;IACI,iBAAiB,CAAC,GAAW,EAAE,MAAc,EAAE,SAAiB;QACrE,oGAAoG;QACpG,wEAAwE;QACxE,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC;QACxC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,GAAG,GAAG,CAAC;QAEpC,MAAM,aAAa,GAAG,GAAG,GAAG,CAAC,CAAC,QAAQ,GAAG,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC;QACzD,MAAM,EAAE,GAAG,GAAG,GAAG,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC,CAAC;QACvD,MAAM,cAAc,GAAG,IAAI,GAAG,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC;QAEvF,MAAM,cAAc,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC;QAC5E,MAAM,EAAE,GAAG,GAAG,GAAG,CAAC,OAAO,GAAG,OAAO,CAAC,CAAC;QACrC,MAAM,WAAW,GAAG,IAAI,GAAG,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC;QAEpF,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,WAAW,EAAE,cAAc,EAAE,CAAC;IACxE,CAAC;IAED;;;;;;OAMG;IACI,iBAAiB,CAAC,GAAW,EAAE,MAAc,EAAE,SAAiB;QACrE,MAAM,cAAc,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;QAEtE,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC;QAC7D,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,cAAc,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,cAAc,CAAC,CAAC;QAChE,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;QAE1D,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IACtC,CAAC;IAED,gBAAgB;IACT,uBAAuB,CAAC,GAAW,EAAE,MAAc,EAAE,SAAiB;QAC3E,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;QAClE,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IACrI,CAAC;IAED,gBAAgB;IACT,2BAA2B,CAAC,GAAW,EAAE,MAAc,EAAE,SAAiB,EAAE,mBAA4B;QAC7G,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;QAClE,OAAO,IAAI,CAAC,uBAAuB,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAC;IAEvE,CAAC;IAED,gBAAgB;IACT,uBAAuB,CAAC,UAAuB,EAAE,mBAA4B;QAElF,IAAI,mBAAmB,EAAE,CAAC;YACxB,OAAO,GAAG,UAAU,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACvK,CAAC;aAAM,CAAC;YACN,OAAO,GAAG,UAAU,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACvK,CAAC;IACH,CAAC;IAED;;OAEG;IACO,kBAAkB,CAAC,GAAW;QACtC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,gBAAgB,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,kBAAkB;YACxE,OAAO,GAAG,CAAC;QAEb,IAAI,MAAM,GAAG,iBAAiB,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;QACrE,MAAM,GAAG,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;QACtE,OAAO,MAAM,CAAC;IAChB,CAAC;CACF","sourcesContent":["/*---------------------------------------------------------------------------------------------\r\n* Copyright (c) Bentley Systems, Incorporated. All rights reserved.\r\n* See LICENSE.md in the project root for license terms and full copyright notice.\r\n*--------------------------------------------------------------------------------------------*/\r\n/** @packageDocumentation\r\n * @module MapLayers\r\n */\r\n\r\nimport { assert, BeEvent } from \"@itwin/core-bentley\";\r\nimport { Cartographic, ImageMapLayerSettings, ImageSource, ImageSourceFormat } from \"@itwin/core-common\";\r\nimport { Angle } from \"@itwin/core-geometry\";\r\nimport { IModelApp } from \"../../IModelApp\";\r\nimport { NotifyMessageDetails, OutputMessagePriority } from \"../../NotificationManager\";\r\nimport { ScreenViewport } from \"../../Viewport\";\r\nimport { appendQueryParams, GeographicTilingScheme, ImageryMapTile, ImageryMapTileTree, MapCartoRectangle, MapFeatureInfoOptions, MapLayerFeatureInfo, MapTilingScheme, QuadId, WebMercatorTilingScheme } from \"../internal\";\r\nimport { HitDetail } from \"../../HitDetail\";\r\nimport { headersIncludeAuthMethod, setBasicAuthorization, setRequestTimeout } from \"../../request/utils\";\r\nimport { DecorateContext } from \"../../ViewContext\";\r\n\r\n/** @internal */\r\nconst tileImageSize = 256, untiledImageSize = 256;\r\nconst earthRadius = 6378137;\r\nconst doDebugToolTips = false;\r\n\r\n/** The status of the map layer imagery provider that lets you know if authentication is needed to request tiles.\r\n * @public\r\n */\r\nexport enum MapLayerImageryProviderStatus {\r\n  Valid,\r\n  RequireAuth,\r\n}\r\n\r\n/** @internal */\r\nexport interface WGS84Extent\r\n{\r\n  longitudeLeft: number;\r\n  longitudeRight: number;\r\n  latitudeTop: number;\r\n  latitudeBottom: number;\r\n}\r\n\r\n/** Abstract class for map layer imagery providers.\r\n * Map layer imagery providers request and provide tile images and other data. Each map layer from a separate source needs its own imagery provider object.\r\n * @beta\r\n */\r\nexport abstract class MapLayerImageryProvider {\r\n  protected _hasSuccessfullyFetchedTile = false;\r\n  public readonly onStatusChanged = new BeEvent<(provider: MapLayerImageryProvider) => void>();\r\n\r\n  /** @internal */\r\n  private readonly _mercatorTilingScheme = new WebMercatorTilingScheme();\r\n\r\n  /** @internal */\r\n  private readonly _geographicTilingScheme = new GeographicTilingScheme();\r\n\r\n  /** @internal */\r\n  private _status = MapLayerImageryProviderStatus.Valid;\r\n\r\n  /** @internal */\r\n  protected _includeUserCredentials = false;\r\n\r\n  /** @internal */\r\n  protected readonly onFirstRequestCompleted = new BeEvent<() => void>();\r\n\r\n  /** @internal */\r\n  protected _firstRequestPromise: Promise<void>|undefined;\r\n\r\n  /**\r\n   * The status of the map layer imagery provider.\r\n   * @public @preview\r\n   */\r\n  public get status() { return this._status; }\r\n\r\n  /** Determine if this provider supports map feature info.\r\n   * For example, this can be used to show the map feature info tool only when a provider is registered to support it.\r\n   * @returns true if provider supports map feature info else return false.\r\n   * @public\r\n   */\r\n  public get supportsMapFeatureInfo(): boolean { return false; }\r\n\r\n  public resetStatus() { this.setStatus(MapLayerImageryProviderStatus.Valid); }\r\n\r\n  /** @internal */\r\n  public get tileSize(): number { return this._usesCachedTiles ? tileImageSize : untiledImageSize; }\r\n\r\n  /** @internal */\r\n  public get maximumScreenSize() { return 2 * this.tileSize; }\r\n\r\n  public get minimumZoomLevel(): number { return this.defaultMinimumZoomLevel; }\r\n\r\n  public get maximumZoomLevel(): number { return this.defaultMaximumZoomLevel; }\r\n\r\n  /** @internal */\r\n  public get usesCachedTiles() { return this._usesCachedTiles; }\r\n\r\n  public get mutualExclusiveSubLayer(): boolean { return false; }\r\n\r\n  /** @internal */\r\n  public get useGeographicTilingScheme() { return false; }\r\n\r\n  private _cartoRange?: MapCartoRectangle;\r\n\r\n  /** Validates a cartographic range for NaN and infinite values.\r\n   * @param range The cartographic range to validate.\r\n   * @returns true if the range is valid, false otherwise.\r\n   * @internal\r\n   */\r\n  private static isRangeValid(range: MapCartoRectangle | undefined): boolean {\r\n    if (!range) {\r\n      return false;\r\n    }\r\n\r\n    return !Number.isNaN(range.low.x) && !Number.isNaN(range.low.y) &&\r\n           !Number.isNaN(range.high.x) && !Number.isNaN(range.high.y) &&\r\n           Number.isFinite(range.low.x) && Number.isFinite(range.low.y) &&\r\n           Number.isFinite(range.high.x) && Number.isFinite(range.high.y);\r\n  }\r\n\r\n  /** Gets or sets the cartographic range for this provider.\r\n   * When setting, if the range is invalid (contains NaN or infinite values), it will be stored as undefined.\r\n   * When getting, returns undefined if the range was set to an invalid value.\r\n   */\r\n  public get cartoRange(): MapCartoRectangle | undefined {\r\n    return this._cartoRange;\r\n  }\r\n\r\n  public set cartoRange(range: MapCartoRectangle | undefined) {\r\n    this._cartoRange = MapLayerImageryProvider.isRangeValid(range) ? range : undefined;\r\n  }\r\n\r\n  /**\r\n   * This value is used internally for various computations, this should not get overriden.\r\n   * @internal\r\n   */\r\n  protected readonly defaultMinimumZoomLevel = 0;\r\n\r\n  /**\r\n   * This value is used internally for various computations, this should not get overriden.\r\n   * @internal\r\n   */\r\n  protected readonly defaultMaximumZoomLevel = 22;\r\n\r\n  /** @internal */\r\n  protected get _filterByCartoRange() { return true; }\r\n\r\n  constructor(protected readonly _settings: ImageMapLayerSettings, protected _usesCachedTiles: boolean) {\r\n    this._mercatorTilingScheme = new WebMercatorTilingScheme();\r\n    this._geographicTilingScheme = new GeographicTilingScheme(2, 1, true);\r\n  }\r\n\r\n  /**\r\n   * Initialize the provider by loading the first tile at its default maximum zoom level.\r\n   * @beta\r\n   */\r\n  public async initialize(): Promise<void> {\r\n    this.loadTile(0, 0, this.defaultMaximumZoomLevel).then((tileData: ImageSource | undefined) => { // eslint-disable-line @typescript-eslint/no-floating-promises\r\n      if (tileData !== undefined)\r\n        this._missingTileData = tileData.data as Uint8Array;\r\n    });\r\n  }\r\n\r\n  public abstract constructUrl(row: number, column: number, zoomLevel: number): Promise<string>;\r\n\r\n  public get tilingScheme(): MapTilingScheme { return this.useGeographicTilingScheme ? this._geographicTilingScheme : this._mercatorTilingScheme; }\r\n\r\n  /** @deprecated in 5.0 - might be removed in next major version. Use [addAttributions] instead. */\r\n  public addLogoCards(_cards: HTMLTableElement, _viewport: ScreenViewport): void { }\r\n\r\n  /**\r\n   * Add attribution logo cards for the data supplied by this provider to the [[Viewport]]'s logo div.\r\n   * @param _cards Logo cards HTML element that may contain custom data attributes.\r\n   * @param _viewport Viewport to add logo cards to.\r\n   * @beta\r\n   */\r\n  public async addAttributions(cards: HTMLTableElement, vp: ScreenViewport): Promise<void> {\r\n    // eslint-disable-next-line @typescript-eslint/no-deprecated\r\n    return Promise.resolve(this.addLogoCards(cards, vp));\r\n  }\r\n\r\n  /** @internal */\r\n  protected _missingTileData?: Uint8Array;\r\n\r\n  /** @internal */\r\n  public get transparentBackgroundString(): string { return this._settings.transparentBackground ? \"true\" : \"false\"; }\r\n\r\n  /** @internal */\r\n  protected async _areChildrenAvailable(_tile: ImageryMapTile): Promise<boolean> { return true; }\r\n\r\n  /** @internal */\r\n  public getPotentialChildIds(quadId: QuadId): QuadId[] {\r\n    const childLevel = quadId.level + 1;\r\n    return quadId.getChildIds(this.tilingScheme.getNumberOfXChildrenAtLevel(childLevel), this.tilingScheme.getNumberOfYChildrenAtLevel(childLevel));\r\n  }\r\n\r\n  /**\r\n   * Get child IDs of a quad and generate tiles based on these child IDs.\r\n   * See [[ImageryTileTree._loadChildren]] for the definition of `resolveChildren` where this function is commonly called.\r\n   * @param quadId quad to generate child IDs for.\r\n   * @param resolveChildren Function that creates tiles from child IDs.\r\n   * @beta\r\n   */\r\n  protected _generateChildIds(quadId: QuadId, resolveChildren: (childIds: QuadId[]) => void) {\r\n    resolveChildren(this.getPotentialChildIds(quadId));\r\n  }\r\n\r\n  /** @internal */\r\n  public generateChildIds(tile: ImageryMapTile, resolveChildren: (childIds: QuadId[]) => void) {\r\n    if (tile.depth >= this.maximumZoomLevel || (undefined !== this.cartoRange && this._filterByCartoRange && !this.cartoRange.intersectsRange(tile.rectangle))) {\r\n      tile.setLeaf();\r\n      return;\r\n    }\r\n    this._generateChildIds(tile.quadId, resolveChildren);\r\n  }\r\n\r\n  /**\r\n   * Get tooltip text for a specific quad and cartographic position.\r\n   * @param strings List of strings to contain tooltip text.\r\n   * @param quadId Quad ID to get tooltip for.\r\n   * @param _carto Cartographic that may be used to retrieve and/or format tooltip text.\r\n   * @param tree Tree associated with the quad to get the tooltip for.\r\n   * @internal\r\n   */\r\n  public async getToolTip(strings: string[], quadId: QuadId, _carto: Cartographic, tree: ImageryMapTileTree): Promise<void> {\r\n    if (doDebugToolTips) {\r\n      const range = quadId.getLatLongRangeDegrees(tree.tilingScheme);\r\n      strings.push(`QuadId: ${quadId.debugString}, Lat: ${range.low.x} - ${range.high.x} Long: ${range.low.y} - ${range.high.y}`);\r\n    }\r\n  }\r\n\r\n  /** @internal */\r\n  public async getFeatureInfo(featureInfos: MapLayerFeatureInfo[], _quadId: QuadId, _carto: Cartographic, _tree: ImageryMapTileTree, _hit: HitDetail, _options?: MapFeatureInfoOptions): Promise<void> {\r\n    // default implementation; simply return an empty feature info\r\n    featureInfos.push({ layerName: this._settings.name });\r\n  }\r\n\r\n  /** @internal */\r\n  public  decorate(_context: DecorateContext): void {\r\n  }\r\n\r\n  /** @internal */\r\n  protected async getImageFromTileResponse(tileResponse: Response, zoomLevel: number) {\r\n    const arrayBuffer = await tileResponse.arrayBuffer();\r\n    const byteArray: Uint8Array = new Uint8Array(arrayBuffer);\r\n    if (!byteArray || (byteArray.length === 0))\r\n      return undefined;\r\n    if (this.matchesMissingTile(byteArray) && zoomLevel > 8)\r\n      return undefined;\r\n\r\n    const contentType = tileResponse.headers.get(\"content-type\")?.toLowerCase();\r\n    let imageFormat: ImageSourceFormat | undefined;\r\n    if (contentType) {\r\n      // Note: 'includes' is used here instead of exact comparison because we encountered\r\n      // some servers that would give content type such as 'image/png;charset=UTF-8'.\r\n      if (contentType.includes(\"image/jpeg\"))\r\n        imageFormat = ImageSourceFormat.Jpeg;\r\n      else if (contentType.includes(\"image/png\"))\r\n        imageFormat = ImageSourceFormat.Png;\r\n    }\r\n\r\n    if (imageFormat !== undefined)\r\n      return new ImageSource(byteArray, imageFormat);\r\n\r\n    assert(false, \"Invalid tile content type\");\r\n    return undefined;\r\n  }\r\n\r\n  /**\r\n   * Change the status of this provider.\r\n   * Sub-classes should override 'onStatusUpdated' instead of this method.\r\n   * @internal\r\n   */\r\n  public setStatus(status: MapLayerImageryProviderStatus) {\r\n    if (this._status !== status) {\r\n      this.onStatusUpdated(status);\r\n      this._status = status;\r\n      this.onStatusChanged.raiseEvent(this);\r\n    }\r\n  }\r\n\r\n  /** Method called whenever the status changes, giving the opportunity to sub-classes to have a custom behavior.\r\n   *  @internal\r\n   */\r\n  protected onStatusUpdated(_newStatus: MapLayerImageryProviderStatus) { }\r\n\r\n  /** @internal */\r\n  protected setRequestAuthorization(headers: Headers) {\r\n    if (this._settings.userName && this._settings.password) {\r\n      setBasicAuthorization(headers, this._settings.userName, this._settings.password);\r\n    }\r\n  }\r\n\r\n  /** @internal */\r\n  public async makeTileRequest(url: string, timeoutMs?: number, authorization?: string): Promise<Response> {\r\n\r\n    // We want to complete the first request before letting other requests go;\r\n    // this done to avoid flooding server with requests missing credentials\r\n    if (!this._firstRequestPromise)\r\n      this._firstRequestPromise  = new Promise<void>((resolve: any) => this.onFirstRequestCompleted.addOnce(()=>resolve()));\r\n    else\r\n      await this._firstRequestPromise;\r\n\r\n    let response: Response|undefined;\r\n    try {\r\n      response = await this.makeRequest(url, timeoutMs, authorization);\r\n    } finally {\r\n      this.onFirstRequestCompleted.raiseEvent();\r\n    }\r\n\r\n    if (response === undefined)\r\n      throw new Error(\"fetch call failed\");\r\n\r\n    return response;\r\n  }\r\n\r\n  /** @internal */\r\n  public async makeRequest(url: string, timeoutMs?: number, authorization?: string): Promise<Response> {\r\n\r\n    let response: Response|undefined;\r\n\r\n    let headers: Headers | undefined;\r\n    let hasCreds = false;\r\n    if (authorization) {\r\n      headers = new Headers();\r\n      headers.set(\"Authorization\", authorization);\r\n    } else if (this._settings.userName && this._settings.password) {\r\n      hasCreds = true;\r\n      headers = new Headers();\r\n      this.setRequestAuthorization(headers);\r\n    }\r\n    const opts: RequestInit = {\r\n      method: \"GET\",\r\n      headers,\r\n      credentials: this._includeUserCredentials ? \"include\" : undefined,\r\n    };\r\n\r\n    if (timeoutMs !== undefined)\r\n      setRequestTimeout(opts, timeoutMs);\r\n\r\n    response = await fetch(url, opts);\r\n\r\n    if (response.status === 401\r\n          && headersIncludeAuthMethod(response.headers, [\"ntlm\", \"negotiate\"])\r\n          && !this._includeUserCredentials\r\n          && !hasCreds\r\n    ) {\r\n      // Removed the previous headers and make sure \"include\" credentials is set\r\n      opts.headers = undefined;\r\n      opts.credentials = \"include\";\r\n\r\n      // We got a http 401 challenge, lets try again with SSO enabled (i.e. Windows Authentication)\r\n      response = await fetch(url,  opts);\r\n      if (response.status === 200) {\r\n        this._includeUserCredentials = true;    // avoid going through 401 challenges over and over\r\n      }\r\n    }\r\n\r\n    return response;\r\n  }\r\n\r\n  /** Returns a map layer tile at the specified settings. */\r\n  public async loadTile(row: number, column: number, zoomLevel: number): Promise<ImageSource | undefined> {\r\n\r\n    try {\r\n      const tileUrl: string = await this.constructUrl(row, column, zoomLevel);\r\n      if (tileUrl.length === 0)\r\n        return undefined;\r\n\r\n      const tileResponse: Response = await this.makeTileRequest(tileUrl);\r\n\r\n      if (!this._hasSuccessfullyFetchedTile) {\r\n        this._hasSuccessfullyFetchedTile = true;\r\n      }\r\n\r\n      return await this.getImageFromTileResponse(tileResponse, zoomLevel);\r\n    } catch (error: any) {\r\n      if (error?.status === 401) {\r\n        this.setStatus(MapLayerImageryProviderStatus.RequireAuth);\r\n\r\n        // Only report error to end-user if we were previously able to fetch tiles\r\n        // and then encountered an error, otherwise I assume an error was already reported\r\n        // through the source validation process.\r\n        if (this._hasSuccessfullyFetchedTile) {\r\n          const msg = IModelApp.localization.getLocalizedString(\"iModelJs:MapLayers.Messages.LoadTileTokenError\", { layerName: this._settings.name });\r\n          IModelApp.notifications.outputMessage(new NotifyMessageDetails(OutputMessagePriority.Warning, msg));\r\n        }\r\n\r\n      }\r\n      return undefined;\r\n    }\r\n  }\r\n\r\n  /** @internal */\r\n  protected async toolTipFromUrl(strings: string[], url: string): Promise<void> {\r\n    const headers = new Headers();\r\n    this.setRequestAuthorization(headers);\r\n\r\n    try {\r\n      const response = await fetch(url, {\r\n        method: \"GET\",\r\n        headers,\r\n        credentials: this._includeUserCredentials ? \"include\" : undefined,\r\n      });\r\n      const text = await response.text();\r\n      if (undefined !== text) {\r\n        strings.push(text);\r\n      }\r\n    } catch {\r\n    }\r\n  }\r\n\r\n  /** @internal */\r\n  public matchesMissingTile(tileData: Uint8Array): boolean {\r\n    if (!this._missingTileData)\r\n      return false;\r\n    if (tileData.length !== this._missingTileData.length)\r\n      return false;\r\n    for (let i: number = 0; i < tileData.length; i += 10) {\r\n      if (this._missingTileData[i] !== tileData[i]) {\r\n        return false;\r\n      }\r\n    }\r\n    return true;\r\n  }\r\n\r\n  /**\r\n   * Calculates the projected x cartesian coordinate in EPSG:3857 from the longitude in EPSG:4326 (WGS84)\r\n   * @param longitude Longitude in EPSG:4326 (WGS84)\r\n   * @internal\r\n   */\r\n  public getEPSG3857X(longitude: number): number {\r\n    return longitude * 20037508.34 / 180.0;\r\n  }\r\n\r\n  /**\r\n   * Calculates the projected y cartesian coordinate in EPSG:3857 from the latitude in EPSG:4326 (WGS84)\r\n   * @param latitude Latitude in EPSG:4326 (WGS84)\r\n   * @internal\r\n   */\r\n  public getEPSG3857Y(latitude: number): number {\r\n    const y = Math.log(Math.tan((90.0 + latitude) * Math.PI / 360.0)) / (Math.PI / 180.0);\r\n    return y * 20037508.34 / 180.0;\r\n  }\r\n\r\n  /**\r\n   * Calculates the longitude in EPSG:4326 (WGS84) from the projected x cartesian coordinate in EPSG:3857\r\n   * @param x3857 Projected x cartesian coordinate in EPSG:3857\r\n   * @internal\r\n   */\r\n  public getEPSG4326Lon(x3857: number): number {\r\n    return Angle.radiansToDegrees(x3857 / earthRadius);\r\n  }\r\n\r\n  /**\r\n   * Calculates the latitude in EPSG:4326 (WGS84) from the projected y cartesian coordinate in EPSG:3857\r\n   * @param y3857 Projected y cartesian coordinate in EPSG:3857\r\n   * @internal\r\n   */\r\n  public getEPSG4326Lat(y3857: number): number {\r\n    const y = 2 * Math.atan(Math.exp(y3857 / earthRadius)) - (Math.PI / 2);\r\n    return Angle.radiansToDegrees(y);\r\n  }\r\n\r\n  /**\r\n   * Get the bounding box/extents of a tile in EPSG:4326 (WGS84) format.\r\n   * Map tile providers like Bing and Mapbox allow the URL to be constructed directly from the zoom level and tile coordinates.\r\n   * However, WMS-based servers take a bounding box instead. This method can help get that bounding box from a tile.\r\n   * @param row Row of the tile\r\n   * @param column Column of the tile\r\n   * @param zoomLevel Desired zoom level of the tile\r\n   * @internal\r\n   */\r\n  public getEPSG4326Extent(row: number, column: number, zoomLevel: number): WGS84Extent {\r\n    // Shift left (this.tileSize << zoomLevel) overflow when using 512 pixels tile at higher resolution,\r\n    // so use Math.pow instead (I assume the performance lost to be minimal)\r\n    const mapSize = this.tileSize * Math.pow(2, zoomLevel);\r\n    const leftGrid = this.tileSize * column;\r\n    const topGrid = this.tileSize * row;\r\n\r\n    const longitudeLeft = 360 * ((leftGrid / mapSize) - 0.5);\r\n    const y0 = 0.5 - ((topGrid + this.tileSize) / mapSize);\r\n    const latitudeBottom = 90.0 - 360.0 * Math.atan(Math.exp(-y0 * 2 * Math.PI)) / Math.PI;\r\n\r\n    const longitudeRight = 360 * (((leftGrid + this.tileSize) / mapSize) - 0.5);\r\n    const y1 = 0.5 - (topGrid / mapSize);\r\n    const latitudeTop = 90.0 - 360.0 * Math.atan(Math.exp(-y1 * 2 * Math.PI)) / Math.PI;\r\n\r\n    return { longitudeLeft, longitudeRight, latitudeTop, latitudeBottom };\r\n  }\r\n\r\n  /**\r\n   * Get the bounding box/extents of a tile in EPSG:3857 format.\r\n   * @param row Row of the tile\r\n   * @param column Column of the tile\r\n   * @param zoomLevel Desired zoom level of the tile\r\n   * @internal\r\n   */\r\n  public getEPSG3857Extent(row: number, column: number, zoomLevel: number): { left: number, right: number, top: number, bottom: number } {\r\n    const epsg4326Extent = this.getEPSG4326Extent(row, column, zoomLevel);\r\n\r\n    const left = this.getEPSG3857X(epsg4326Extent.longitudeLeft);\r\n    const right = this.getEPSG3857X(epsg4326Extent.longitudeRight);\r\n    const bottom = this.getEPSG3857Y(epsg4326Extent.latitudeBottom);\r\n    const top = this.getEPSG3857Y(epsg4326Extent.latitudeTop);\r\n\r\n    return { left, right, bottom, top };\r\n  }\r\n\r\n  /** @internal */\r\n  public getEPSG3857ExtentString(row: number, column: number, zoomLevel: number) {\r\n    const tileExtent = this.getEPSG3857Extent(row, column, zoomLevel);\r\n    return `${tileExtent.left.toFixed(2)},${tileExtent.bottom.toFixed(2)},${tileExtent.right.toFixed(2)},${tileExtent.top.toFixed(2)}`;\r\n  }\r\n\r\n  /** @internal */\r\n  public getEPSG4326TileExtentString(row: number, column: number, zoomLevel: number, latLongAxisOrdering: boolean) {\r\n    const tileExtent = this.getEPSG4326Extent(row, column, zoomLevel);\r\n    return this.getEPSG4326ExtentString(tileExtent, latLongAxisOrdering);\r\n\r\n  }\r\n\r\n  /** @internal */\r\n  public getEPSG4326ExtentString(tileExtent: WGS84Extent, latLongAxisOrdering: boolean) {\r\n\r\n    if (latLongAxisOrdering) {\r\n      return `${tileExtent.latitudeBottom.toFixed(8)},${tileExtent.longitudeLeft.toFixed(8)},${tileExtent.latitudeTop.toFixed(8)},${tileExtent.longitudeRight.toFixed(8)}`;\r\n    } else {\r\n      return `${tileExtent.longitudeLeft.toFixed(8)},${tileExtent.latitudeBottom.toFixed(8)},${tileExtent.longitudeRight.toFixed(8)},${tileExtent.latitudeTop.toFixed(8)}`;\r\n    }\r\n  }\r\n\r\n  /** Append custom parameters for settings to provided URL object.\r\n   * @internal\r\n   */\r\n  protected appendCustomParams(url: string) {\r\n    if (!this._settings.savedQueryParams && !this._settings.unsavedQueryParams)\r\n      return url;\r\n\r\n    let tmpUrl = appendQueryParams(url, this._settings.savedQueryParams);\r\n    tmpUrl = appendQueryParams(tmpUrl, this._settings.unsavedQueryParams);\r\n    return tmpUrl;\r\n  }\r\n}\r\n"]}
+{"version":3,"file":"MapLayerImageryProvider.js","sourceRoot":"","sources":["../../../../src/tile/map/MapLayerImageryProvider.ts"],"names":[],"mappings":"AAAA;;;+FAG+F;AAC/F;;GAEG;AAEH,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAuC,WAAW,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACzG,OAAO,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAC7C,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAExF,OAAO,EAAE,iBAAiB,EAAE,sBAAsB,EAA8H,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAE7N,OAAO,EAAE,wBAAwB,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAGzG,gBAAgB;AAChB,MAAM,aAAa,GAAG,GAAG,EAAE,gBAAgB,GAAG,GAAG,CAAC;AAClD,MAAM,WAAW,GAAG,OAAO,CAAC;AAC5B,MAAM,eAAe,GAAG,KAAK,CAAC;AAE9B;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;AAClE,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,CAAC,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACnG,CAAC;AAED;;GAEG;AACH,MAAM,CAAN,IAAY,6BASX;AATD,WAAY,6BAA6B;IACvC,mFAAK,CAAA;IACL,+FAAW,CAAA;IACX;;;;OAIG;IACH,uGAAe,CAAA;AACjB,CAAC,EATW,6BAA6B,KAA7B,6BAA6B,QASxC;AAWD;;;GAGG;AACH,MAAM,OAAgB,uBAAuB;IAoJZ;IAA4C;IAnJjE,2BAA2B,GAAG,KAAK,CAAC;IAC9B,eAAe,GAAG,IAAI,OAAO,EAA+C,CAAC;IAE7F,gBAAgB;IACC,qBAAqB,GAAG,IAAI,uBAAuB,EAAE,CAAC;IAEvE,gBAAgB;IACC,uBAAuB,GAAG,IAAI,sBAAsB,EAAE,CAAC;IAExE,gBAAgB;IACR,OAAO,GAAG,6BAA6B,CAAC,KAAK,CAAC;IAEtD,gBAAgB;IACC,eAAe,GAAG,IAAI,GAAG,EAAU,CAAC;IAErD;;;;;OAKG;IACH,IAAW,cAAc,KAA4B,OAAO,CAAC,GAAG,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IAExF;;;;;OAKG;IACc,oBAAoB,GAAG,IAAI,GAAG,EAAU,CAAC;IAE1D;;;;;;OAMG;IACO,sBAAsB,CAAC,GAAW;QAC1C,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QACjC,OAAO,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IACjG,CAAC;IAED;;;OAGG;IACO,kBAAkB,CAAC,GAAW;QACtC,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,MAAM,KAAK,SAAS;YACtB,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC1C,CAAC;IAED,gBAAgB;IACG,uBAAuB,GAAG,IAAI,OAAO,EAAc,CAAC;IAEvE,gBAAgB;IACN,oBAAoB,CAA0B;IAExD;;;OAGG;IACH,IAAW,MAAM,KAAK,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAE5C;;;;OAIG;IACH,IAAW,sBAAsB,KAAc,OAAO,KAAK,CAAC,CAAC,CAAC;IAE9D;;;;;;OAMG;IACI,WAAW;QAChB,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;QAC7B,IAAI,CAAC,SAAS,CAAC,6BAA6B,CAAC,KAAK,CAAC,CAAC;IACtD,CAAC;IAED,gBAAgB;IAChB,IAAW,QAAQ,KAAa,OAAO,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAElG,gBAAgB;IAChB,IAAW,iBAAiB,KAAK,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IAE5D,IAAW,gBAAgB,KAAa,OAAO,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC;IAE9E,IAAW,gBAAgB,KAAa,OAAO,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC;IAE9E,gBAAgB;IAChB,IAAW,eAAe,KAAK,OAAO,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAE9D,IAAW,uBAAuB,KAAc,OAAO,KAAK,CAAC,CAAC,CAAC;IAE/D,gBAAgB;IAChB,IAAW,yBAAyB,KAAK,OAAO,KAAK,CAAC,CAAC,CAAC;IAEhD,WAAW,CAAqB;IAExC;;;;OAIG;IACK,MAAM,CAAC,YAAY,CAAC,KAAoC;QAC9D,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;YACxD,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YAC1D,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;YAC5D,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACxE,CAAC;IAED;;;OAGG;IACH,IAAW,UAAU;QACnB,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED,IAAW,UAAU,CAAC,KAAoC;QACxD,IAAI,CAAC,WAAW,GAAG,uBAAuB,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IACrF,CAAC;IAED;;;OAGG;IACgB,uBAAuB,GAAG,CAAC,CAAC;IAE/C;;;OAGG;IACgB,uBAAuB,GAAG,EAAE,CAAC;IAEhD,gBAAgB;IAChB,IAAc,mBAAmB,KAAK,OAAO,IAAI,CAAC,CAAC,CAAC;IAEpD,YAA+B,SAAgC,EAAY,gBAAyB;QAArE,cAAS,GAAT,SAAS,CAAuB;QAAY,qBAAgB,GAAhB,gBAAgB,CAAS;QAClG,IAAI,CAAC,qBAAqB,GAAG,IAAI,uBAAuB,EAAE,CAAC;QAC3D,IAAI,CAAC,uBAAuB,GAAG,IAAI,sBAAsB,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IACxE,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,UAAU;QACrB,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,uBAAuB,CAAC,CAAC,IAAI,CAAC,CAAC,QAAiC,EAAE,EAAE;YAC3F,IAAI,QAAQ,KAAK,SAAS;gBACxB,IAAI,CAAC,gBAAgB,GAAG,QAAQ,CAAC,IAAkB,CAAC;QACxD,CAAC,CAAC,CAAC;IACL,CAAC;IAID,IAAW,YAAY,KAAsB,OAAO,IAAI,CAAC,yBAAyB,CAAC,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC;IAEjJ,kGAAkG;IAC3F,YAAY,CAAC,MAAwB,EAAE,SAAyB,IAAU,CAAC;IAElF;;;;;OAKG;IACI,KAAK,CAAC,eAAe,CAAC,KAAuB,EAAE,EAAkB;QACtE,4DAA4D;QAC5D,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;IACvD,CAAC;IAED,gBAAgB;IACN,gBAAgB,CAAc;IAExC,gBAAgB;IAChB,IAAW,2BAA2B,KAAa,OAAO,IAAI,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAEpH,gBAAgB;IACN,KAAK,CAAC,qBAAqB,CAAC,KAAqB,IAAsB,OAAO,IAAI,CAAC,CAAC,CAAC;IAE/F,gBAAgB;IACT,oBAAoB,CAAC,MAAc;QACxC,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC;QACpC,OAAO,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC,2BAA2B,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,2BAA2B,CAAC,UAAU,CAAC,CAAC,CAAC;IAClJ,CAAC;IAED;;;;;;OAMG;IACO,iBAAiB,CAAC,MAAc,EAAE,eAA6C;QACvF,eAAe,CAAC,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC;IACrD,CAAC;IAED,gBAAgB;IACT,gBAAgB,CAAC,IAAoB,EAAE,eAA6C;QACzF,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,gBAAgB,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,mBAAmB,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;YAC3J,IAAI,CAAC,OAAO,EAAE,CAAC;YACf,OAAO;QACT,CAAC;QACD,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IACvD,CAAC;IAED;;;;;;;OAOG;IACI,KAAK,CAAC,UAAU,CAAC,OAAiB,EAAE,MAAc,EAAE,MAAoB,EAAE,IAAwB;QACvG,IAAI,eAAe,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,MAAM,CAAC,sBAAsB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAC/D,OAAO,CAAC,IAAI,CAAC,WAAW,MAAM,CAAC,WAAW,UAAU,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,UAAU,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC;QAC9H,CAAC;IACH,CAAC;IAED,gBAAgB;IACT,KAAK,CAAC,cAAc,CAAC,YAAmC,EAAE,OAAe,EAAE,MAAoB,EAAE,KAAyB,EAAE,IAAe,EAAE,QAAgC;QAClL,8DAA8D;QAC9D,YAAY,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC;IAED,gBAAgB;IACR,QAAQ,CAAC,QAAyB;IAC1C,CAAC;IAED,gBAAgB;IACN,KAAK,CAAC,wBAAwB,CAAC,YAAsB,EAAE,SAAiB;QAChF,MAAM,WAAW,GAAG,MAAM,YAAY,CAAC,WAAW,EAAE,CAAC;QACrD,MAAM,SAAS,GAAe,IAAI,UAAU,CAAC,WAAW,CAAC,CAAC;QAC1D,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC;YACxC,OAAO,SAAS,CAAC;QACnB,IAAI,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC;YACrD,OAAO,SAAS,CAAC;QAEnB,MAAM,WAAW,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,WAAW,EAAE,CAAC;QAC5E,IAAI,WAA0C,CAAC;QAC/C,IAAI,WAAW,EAAE,CAAC;YAChB,mFAAmF;YACnF,+EAA+E;YAC/E,IAAI,WAAW,CAAC,QAAQ,CAAC,YAAY,CAAC;gBACpC,WAAW,GAAG,iBAAiB,CAAC,IAAI,CAAC;iBAClC,IAAI,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC;gBACxC,WAAW,GAAG,iBAAiB,CAAC,GAAG,CAAC;QACxC,CAAC;QAED,IAAI,WAAW,KAAK,SAAS;YAC3B,OAAO,IAAI,WAAW,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QAEjD,MAAM,CAAC,KAAK,EAAE,2BAA2B,CAAC,CAAC;QAC3C,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;OAIG;IACI,SAAS,CAAC,MAAqC;QACpD,IAAI,IAAI,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;YAC5B,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;YAC7B,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;YACtB,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAED;;OAEG;IACO,eAAe,CAAC,UAAyC,IAAI,CAAC;IAExE,gBAAgB;IACN,uBAAuB,CAAC,OAAgB;QAChD,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC;YACvD,qBAAqB,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;IAED;;;OAGG;IACO,wBAAwB,CAAC,GAAW;QAC5C,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QACjC,OAAO,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC7E,CAAC;IAED;;;;;;OAMG;IACO,2BAA2B,CAAC,GAAW;QAC/C,OAAO,SAAS,CAAC,sBAAsB,CAAC,2BAA2B,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC/F,CAAC;IAED;;;;OAIG;IACO,YAAY,CAAC,GAAW;QAChC,OAAO,SAAS,CAAC,sBAAsB,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IAC5D,CAAC;IAED,gBAAgB;IACT,KAAK,CAAC,eAAe,CAAC,GAAW,EAAE,SAAkB,EAAE,aAAsB;QAElF,0EAA0E;QAC1E,uEAAuE;QACvE,IAAI,CAAC,IAAI,CAAC,oBAAoB;YAC5B,IAAI,CAAC,oBAAoB,GAAI,IAAI,OAAO,CAAO,CAAC,OAAY,EAAE,EAAE,CAAC,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,GAAE,EAAE,CAAA,OAAO,EAAE,CAAC,CAAC,CAAC;;YAEtH,MAAM,IAAI,CAAC,oBAAoB,CAAC;QAElC,IAAI,QAA4B,CAAC;QACjC,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;QACnE,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,uBAAuB,CAAC,UAAU,EAAE,CAAC;QAC5C,CAAC;QAED,IAAI,QAAQ,KAAK,SAAS;YACxB,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAEvC,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;;;;OAKG;IACO,mBAAmB,CAAC,GAAW;QACvC,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC;QACxC,MAAM,WAAW,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACtD,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAEjC,IAAI,IAAI,CAAC,OAAO,KAAK,6BAA6B,CAAC,eAAe;YAChE,IAAI,CAAC,SAAS,CAAC,6BAA6B,CAAC,eAAe,CAAC,CAAC;aAC3D,IAAI,WAAW;YAClB,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAG,iDAAiD;IAC9F,CAAC;IAED;;;;;OAKG;IACO,qBAAqB,CAAC,GAAW;QACzC,SAAS,CAAC,sBAAsB,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC;IAC9D,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,IAAc,oBAAoB;QAChC,OAAO,SAAS,CAAC,sBAAsB,CAAC,mCAAmC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IACpG,CAAC;IAED;;;;;;;;;;OAUG;IACO,yBAAyB,CAAC,YAAoB,EAAE,QAAkB;QAC1E,MAAM,WAAW,GAAG,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC/C,IAAI,CAAC,QAAQ,CAAC,GAAG,IAAI,WAAW,KAAK,SAAS,IAAI,WAAW,KAAK,YAAY,CAAC,YAAY,CAAC;YAC1F,OAAO;QAET,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC;YAClC,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;;YAEvC,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAG,wCAAwC;IACxF,CAAC;IAED,gBAAgB;IACT,KAAK,CAAC,WAAW,CAAC,GAAW,EAAE,SAAkB,EAAE,aAAsB;QAE9E,IAAI,QAA4B,CAAC;QAEjC,IAAI,OAA4B,CAAC;QACjC,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,2GAA2G;QAC3G,yEAAyE;QACzE,MAAM,gBAAgB,GAAG,CAAC,aAAa,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;QAClG,IAAI,aAAa,EAAE,CAAC;YAClB,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;YACxB,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,aAAa,CAAC,CAAC;QAC9C,CAAC;aAAM,IAAI,gBAAgB,EAAE,CAAC;YAC5B,IAAI,IAAI,CAAC,2BAA2B,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC1C,QAAQ,GAAG,IAAI,CAAC;gBAChB,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;gBACxB,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC;gBACtC,IAAI,CAAC,IAAI,CAAC,wBAAwB,CAAC,GAAG,CAAC;oBACrC,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC;YACpC,CAAC;QACH,CAAC;QACD,MAAM,kBAAkB,GAAG,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC;QAC5D,MAAM,IAAI,GAAgB;YACxB,MAAM,EAAE,KAAK;YACb,OAAO;YACP,WAAW,EAAE,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;YACvD,QAAQ,EAAE,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS;SACrE,CAAC;QAEF,IAAI,SAAS,KAAK,SAAS;YACzB,iBAAiB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAErC,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAElC,IAAI,kBAAkB;YACpB,IAAI,CAAC,yBAAyB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAEhD,uFAAuF;QACvF,0EAA0E;QAC1E,MAAM,aAAa,GAAG,QAAQ,CAAC,GAAG,IAAI,GAAG,CAAC;QAE1C,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;eAClB,wBAAwB,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;eACjE,CAAC,kBAAkB;eACnB,CAAC,QAAQ,EAChB,CAAC;YACD,IAAI,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,EAAE,CAAC;gBACrC,0EAA0E;gBAC1E,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC;gBACzB,IAAI,CAAC,WAAW,GAAG,SAAS,CAAC;gBAC7B,mGAAmG;gBACnG,iGAAiG;gBACjG,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC,sBAAsB,CAAC,mCAAmC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;gBAC3G,IAAI,CAAC,qBAAqB,CAAC,aAAa,CAAC,CAAC;gBAE1C,6FAA6F;gBAC7F,QAAQ,GAAG,MAAM,KAAK,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;gBAC5C,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBAC5B,IAAI,CAAC,kBAAkB,CAAC,aAAa,CAAC,CAAC,CAAI,mEAAmE;gBAChH,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,mBAAmB,CAAC,aAAa,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC;aAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC,IAAI,gBAAgB,IAAI,CAAC,IAAI,CAAC,2BAA2B,CAAC,aAAa,CAAC,EAAE,CAAC;YACxI,mGAAmG;YACnG,qGAAqG;YACrG,wGAAwG;YACxG,iGAAiG;YACjG,uGAAuG;YACvG,+FAA+F;YAC/F,IAAI,CAAC,mBAAmB,CAAC,aAAa,CAAC,CAAC;QAC1C,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,0DAA0D;IACnD,KAAK,CAAC,QAAQ,CAAC,GAAW,EAAE,MAAc,EAAE,SAAiB;QAElE,IAAI,CAAC;YACH,MAAM,OAAO,GAAW,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;YACxE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;gBACtB,OAAO,SAAS,CAAC;YAEnB,MAAM,YAAY,GAAa,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;YAEnE,IAAI,CAAC,IAAI,CAAC,2BAA2B,EAAE,CAAC;gBACtC,IAAI,CAAC,2BAA2B,GAAG,IAAI,CAAC;YAC1C,CAAC;YAED,OAAO,MAAM,IAAI,CAAC,wBAAwB,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;QACtE,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,IAAI,KAAK,EAAE,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC1B,IAAI,CAAC,SAAS,CAAC,6BAA6B,CAAC,WAAW,CAAC,CAAC;gBAE1D,0EAA0E;gBAC1E,kFAAkF;gBAClF,yCAAyC;gBACzC,IAAI,IAAI,CAAC,2BAA2B,EAAE,CAAC;oBACrC,MAAM,GAAG,GAAG,SAAS,CAAC,YAAY,CAAC,kBAAkB,CAAC,gDAAgD,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;oBAC5I,SAAS,CAAC,aAAa,CAAC,aAAa,CAAC,IAAI,oBAAoB,CAAC,qBAAqB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;gBACtG,CAAC;YAEH,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAED,gBAAgB;IACN,KAAK,CAAC,cAAc,CAAC,OAAiB,EAAE,GAAW;QAC3D,IAAI,OAA4B,CAAC;QACjC,IAAI,IAAI,CAAC,2BAA2B,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1C,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;YACxB,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC;QACxC,CAAC;QAED,IAAI,CAAC;YACH,MAAM,kBAAkB,GAAG,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC;YAC5D,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAChC,MAAM,EAAE,KAAK;gBACb,OAAO;gBACP,WAAW,EAAE,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;gBACvD,QAAQ,EAAE,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS;aACrE,CAAC,CAAC;YACH,IAAI,kBAAkB;gBACpB,IAAI,CAAC,yBAAyB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YAChD,IAAI,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACjC,IAAI,IAAI,EAAE,CAAC;gBACT,6FAA6F;gBAC7F,yFAAyF;gBACzF,sGAAsG;gBACtG,IAAI,CAAC,IAAI,CAAC,2BAA2B,CAAC,QAAQ,CAAC,GAAG,IAAI,GAAG,CAAC;oBACxD,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;gBAC1B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;QACT,CAAC;IACH,CAAC;IAED,gBAAgB;IACT,kBAAkB,CAAC,QAAoB;QAC5C,IAAI,CAAC,IAAI,CAAC,gBAAgB;YACxB,OAAO,KAAK,CAAC;QACf,IAAI,QAAQ,CAAC,MAAM,KAAK,IAAI,CAAC,gBAAgB,CAAC,MAAM;YAClD,OAAO,KAAK,CAAC;QACf,KAAK,IAAI,CAAC,GAAW,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;YACrD,IAAI,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7C,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;OAIG;IACI,YAAY,CAAC,SAAiB;QACnC,OAAO,SAAS,GAAG,WAAW,GAAG,KAAK,CAAC;IACzC,CAAC;IAED;;;;OAIG;IACI,YAAY,CAAC,QAAgB;QAClC,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,QAAQ,CAAC,GAAG,IAAI,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC;QACtF,OAAO,CAAC,GAAG,WAAW,GAAG,KAAK,CAAC;IACjC,CAAC;IAED;;;;OAIG;IACI,cAAc,CAAC,KAAa;QACjC,OAAO,KAAK,CAAC,gBAAgB,CAAC,KAAK,GAAG,WAAW,CAAC,CAAC;IACrD,CAAC;IAED;;;;OAIG;IACI,cAAc,CAAC,KAAa;QACjC,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,WAAW,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QACvE,OAAO,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;IACnC,CAAC;IAED;;;;;;;;OAQG;IACI,iBAAiB,CAAC,GAAW,EAAE,MAAc,EAAE,SAAiB;QACrE,oGAAoG;QACpG,wEAAwE;QACxE,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC;QACxC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,GAAG,GAAG,CAAC;QAEpC,MAAM,aAAa,GAAG,GAAG,GAAG,CAAC,CAAC,QAAQ,GAAG,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC;QACzD,MAAM,EAAE,GAAG,GAAG,GAAG,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC,CAAC;QACvD,MAAM,cAAc,GAAG,IAAI,GAAG,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC;QAEvF,MAAM,cAAc,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC;QAC5E,MAAM,EAAE,GAAG,GAAG,GAAG,CAAC,OAAO,GAAG,OAAO,CAAC,CAAC;QACrC,MAAM,WAAW,GAAG,IAAI,GAAG,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC;QAEpF,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,WAAW,EAAE,cAAc,EAAE,CAAC;IACxE,CAAC;IAED;;;;;;OAMG;IACI,iBAAiB,CAAC,GAAW,EAAE,MAAc,EAAE,SAAiB;QACrE,MAAM,cAAc,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;QAEtE,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC;QAC7D,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,cAAc,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,cAAc,CAAC,CAAC;QAChE,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;QAE1D,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IACtC,CAAC;IAED,gBAAgB;IACT,uBAAuB,CAAC,GAAW,EAAE,MAAc,EAAE,SAAiB;QAC3E,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;QAClE,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IACrI,CAAC;IAED,gBAAgB;IACT,2BAA2B,CAAC,GAAW,EAAE,MAAc,EAAE,SAAiB,EAAE,mBAA4B;QAC7G,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;QAClE,OAAO,IAAI,CAAC,uBAAuB,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAC;IAEvE,CAAC;IAED,gBAAgB;IACT,uBAAuB,CAAC,UAAuB,EAAE,mBAA4B;QAElF,IAAI,mBAAmB,EAAE,CAAC;YACxB,OAAO,GAAG,UAAU,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACvK,CAAC;aAAM,CAAC;YACN,OAAO,GAAG,UAAU,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACvK,CAAC;IACH,CAAC;IAED;;OAEG;IACO,kBAAkB,CAAC,GAAW;QACtC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,gBAAgB,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,kBAAkB;YACxE,OAAO,GAAG,CAAC;QAEb,IAAI,MAAM,GAAG,iBAAiB,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;QACrE,MAAM,GAAG,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;QACtE,OAAO,MAAM,CAAC;IAChB,CAAC;CACF","sourcesContent":["/*---------------------------------------------------------------------------------------------\r\n* Copyright (c) Bentley Systems, Incorporated. All rights reserved.\r\n* See LICENSE.md in the project root for license terms and full copyright notice.\r\n*--------------------------------------------------------------------------------------------*/\r\n/** @packageDocumentation\r\n * @module MapLayers\r\n */\r\n\r\nimport { assert, BeEvent } from \"@itwin/core-bentley\";\r\nimport { Cartographic, ImageMapLayerSettings, ImageSource, ImageSourceFormat } from \"@itwin/core-common\";\r\nimport { Angle } from \"@itwin/core-geometry\";\r\nimport { IModelApp } from \"../../IModelApp\";\r\nimport { NotifyMessageDetails, OutputMessagePriority } from \"../../NotificationManager\";\r\nimport { ScreenViewport } from \"../../Viewport\";\r\nimport { appendQueryParams, GeographicTilingScheme, ImageryMapTile, ImageryMapTileTree, MapCartoRectangle, MapFeatureInfoOptions, MapLayerFeatureInfo, MapTilingScheme, QuadId, WebMercatorTilingScheme } from \"../internal\";\r\nimport { HitDetail } from \"../../HitDetail\";\r\nimport { headersIncludeAuthMethod, setBasicAuthorization, setRequestTimeout } from \"../../request/utils\";\r\nimport { DecorateContext } from \"../../ViewContext\";\r\n\r\n/** @internal */\r\nconst tileImageSize = 256, untiledImageSize = 256;\r\nconst earthRadius = 6378137;\r\nconst doDebugToolTips = false;\r\n\r\n/** Escapes HTML metacharacters so the text renders literally when assigned to `innerHTML`.\r\n * Use for any server- or user-supplied string that ends up in the map tooltip, which is rendered\r\n * as HTML by [[MapLayerTileTreeReference.getToolTip]].\r\n * @internal\r\n */\r\nexport function escapeHtml(text: string): string {\r\n  return text.replace(/[&<>\"']/g, (c) => `&#${c.charCodeAt(0)};`);\r\n}\r\n\r\n/** Returns the origin (scheme + host + port) of the given URL, or undefined if it cannot be parsed or does\r\n * not denote a distinct network origin.\r\n *\r\n * Only `http:` and `https:` URLs yield an origin. Every other scheme is rejected because opaque URLs\r\n * — `file:`, `data:`, `about:`, `blob:null`, and the custom protocols Electron hosts commonly register —\r\n * all serialize to the literal string `\"null\"`. Comparing those would make unrelated URLs look same-origin,\r\n * so a single trusted entry could unlock all of them. Callers use this for credential-trust decisions, and\r\n * returning `undefined` keeps those decisions fail-closed.\r\n * @internal\r\n */\r\nexport function tryGetOrigin(url: string): string | undefined {\r\n  let parsed: URL;\r\n  try {\r\n    parsed = new URL(url);\r\n  } catch {\r\n    return undefined;\r\n  }\r\n\r\n  return (parsed.protocol === \"http:\" || parsed.protocol === \"https:\") ? parsed.origin : undefined;\r\n}\r\n\r\n/** The status of the map layer imagery provider that lets you know if authentication is needed to request tiles.\r\n * @public\r\n */\r\nexport enum MapLayerImageryProviderStatus {\r\n  Valid,\r\n  RequireAuth,\r\n  /** A request received an authentication challenge, but credentials were withheld because the request origin\r\n   * is not trusted (see [[MapLayerFormatRegistry.restrictCredentialsToTrustedOrigins]]).\r\n   * The blocked origins are available via [[MapLayerImageryProvider.blockedOrigins]].\r\n   * @beta\r\n   */\r\n  UntrustedOrigin,\r\n}\r\n\r\n/** @internal */\r\nexport interface WGS84Extent\r\n{\r\n  longitudeLeft: number;\r\n  longitudeRight: number;\r\n  latitudeTop: number;\r\n  latitudeBottom: number;\r\n}\r\n\r\n/** Abstract class for map layer imagery providers.\r\n * Map layer imagery providers request and provide tile images and other data. Each map layer from a separate source needs its own imagery provider object.\r\n * @beta\r\n */\r\nexport abstract class MapLayerImageryProvider {\r\n  protected _hasSuccessfullyFetchedTile = false;\r\n  public readonly onStatusChanged = new BeEvent<(provider: MapLayerImageryProvider) => void>();\r\n\r\n  /** @internal */\r\n  private readonly _mercatorTilingScheme = new WebMercatorTilingScheme();\r\n\r\n  /** @internal */\r\n  private readonly _geographicTilingScheme = new GeographicTilingScheme();\r\n\r\n  /** @internal */\r\n  private _status = MapLayerImageryProviderStatus.Valid;\r\n\r\n  /** @internal */\r\n  private readonly _blockedOrigins = new Set<string>();\r\n\r\n  /** Origins of requests for which credentials were withheld because they are not trusted\r\n   * (see [[MapLayerFormatRegistry.restrictCredentialsToTrustedOrigins]]).\r\n   * Populated when [[status]] transitions to [[MapLayerImageryProviderStatus.UntrustedOrigin]];\r\n   * [[onStatusChanged]] is raised again each time a new origin is added. Cleared by [[resetStatus]].\r\n   * @beta\r\n   */\r\n  public get blockedOrigins(): ReadonlyArray<string> { return [...this._blockedOrigins]; }\r\n\r\n  /** Origins for which a previous SSO handshake (i.e. Windows Authentication) succeeded.\r\n   * Browser credentials are only included for subsequent requests targeting these origins,\r\n   * so that a successful handshake with one host does not leak credentials to other hosts\r\n   * this provider may contact.\r\n   * @internal\r\n   */\r\n  private readonly _ssoSucceededOrigins = new Set<string>();\r\n\r\n  /** Returns true if browser credentials should be included for the given URL because a previous\r\n   * SSO handshake succeeded for its origin AND the origin is still allowed by the current policy\r\n   * (see [[MapLayerFormatRegistry.isSsoAllowed]]). Re-checking the policy ensures a handshake recorded\r\n   * while enforcement was disabled — or before an origin was removed from\r\n   * [[MapLayerFormatRegistry.trustedCredentialsOrigins]] — does not keep latching credentials on.\r\n   * @internal\r\n   */\r\n  protected includeUserCredentials(url: string): boolean {\r\n    const origin = tryGetOrigin(url);\r\n    return origin !== undefined && this._ssoSucceededOrigins.has(origin) && this.isSsoAllowed(url);\r\n  }\r\n\r\n  /** Records that an SSO handshake succeeded for the given URL's origin, so subsequent requests\r\n   * to that origin include browser credentials without going through another 401 challenge.\r\n   * @internal\r\n   */\r\n  protected recordSsoSucceeded(url: string): void {\r\n    const origin = tryGetOrigin(url);\r\n    if (origin !== undefined)\r\n      this._ssoSucceededOrigins.add(origin);\r\n  }\r\n\r\n  /** @internal */\r\n  protected readonly onFirstRequestCompleted = new BeEvent<() => void>();\r\n\r\n  /** @internal */\r\n  protected _firstRequestPromise: Promise<void>|undefined;\r\n\r\n  /**\r\n   * The status of the map layer imagery provider.\r\n   * @public @preview\r\n   */\r\n  public get status() { return this._status; }\r\n\r\n  /** Determine if this provider supports map feature info.\r\n   * For example, this can be used to show the map feature info tool only when a provider is registered to support it.\r\n   * @returns true if provider supports map feature info else return false.\r\n   * @public\r\n   */\r\n  public get supportsMapFeatureInfo(): boolean { return false; }\r\n\r\n  /** Reset the provider's status to [[MapLayerImageryProviderStatus.Valid]] and clear the list of\r\n   * [[blockedOrigins]] accumulated while in the [[MapLayerImageryProviderStatus.UntrustedOrigin]] state.\r\n   * Raises [[onStatusChanged]] if the status actually changes.\r\n   * Typically called after the user has provided credentials or the application has updated\r\n   * [[MapLayerFormatRegistry.trustedCredentialsOrigins]], so that subsequent requests are re-attempted.\r\n   * @beta\r\n   */\r\n  public resetStatus() {\r\n    this._blockedOrigins.clear();\r\n    this.setStatus(MapLayerImageryProviderStatus.Valid);\r\n  }\r\n\r\n  /** @internal */\r\n  public get tileSize(): number { return this._usesCachedTiles ? tileImageSize : untiledImageSize; }\r\n\r\n  /** @internal */\r\n  public get maximumScreenSize() { return 2 * this.tileSize; }\r\n\r\n  public get minimumZoomLevel(): number { return this.defaultMinimumZoomLevel; }\r\n\r\n  public get maximumZoomLevel(): number { return this.defaultMaximumZoomLevel; }\r\n\r\n  /** @internal */\r\n  public get usesCachedTiles() { return this._usesCachedTiles; }\r\n\r\n  public get mutualExclusiveSubLayer(): boolean { return false; }\r\n\r\n  /** @internal */\r\n  public get useGeographicTilingScheme() { return false; }\r\n\r\n  private _cartoRange?: MapCartoRectangle;\r\n\r\n  /** Validates a cartographic range for NaN and infinite values.\r\n   * @param range The cartographic range to validate.\r\n   * @returns true if the range is valid, false otherwise.\r\n   * @internal\r\n   */\r\n  private static isRangeValid(range: MapCartoRectangle | undefined): boolean {\r\n    if (!range) {\r\n      return false;\r\n    }\r\n\r\n    return !Number.isNaN(range.low.x) && !Number.isNaN(range.low.y) &&\r\n           !Number.isNaN(range.high.x) && !Number.isNaN(range.high.y) &&\r\n           Number.isFinite(range.low.x) && Number.isFinite(range.low.y) &&\r\n           Number.isFinite(range.high.x) && Number.isFinite(range.high.y);\r\n  }\r\n\r\n  /** Gets or sets the cartographic range for this provider.\r\n   * When setting, if the range is invalid (contains NaN or infinite values), it will be stored as undefined.\r\n   * When getting, returns undefined if the range was set to an invalid value.\r\n   */\r\n  public get cartoRange(): MapCartoRectangle | undefined {\r\n    return this._cartoRange;\r\n  }\r\n\r\n  public set cartoRange(range: MapCartoRectangle | undefined) {\r\n    this._cartoRange = MapLayerImageryProvider.isRangeValid(range) ? range : undefined;\r\n  }\r\n\r\n  /**\r\n   * This value is used internally for various computations, this should not get overriden.\r\n   * @internal\r\n   */\r\n  protected readonly defaultMinimumZoomLevel = 0;\r\n\r\n  /**\r\n   * This value is used internally for various computations, this should not get overriden.\r\n   * @internal\r\n   */\r\n  protected readonly defaultMaximumZoomLevel = 22;\r\n\r\n  /** @internal */\r\n  protected get _filterByCartoRange() { return true; }\r\n\r\n  constructor(protected readonly _settings: ImageMapLayerSettings, protected _usesCachedTiles: boolean) {\r\n    this._mercatorTilingScheme = new WebMercatorTilingScheme();\r\n    this._geographicTilingScheme = new GeographicTilingScheme(2, 1, true);\r\n  }\r\n\r\n  /**\r\n   * Initialize the provider by loading the first tile at its default maximum zoom level.\r\n   * @beta\r\n   */\r\n  public async initialize(): Promise<void> {\r\n    this.loadTile(0, 0, this.defaultMaximumZoomLevel).then((tileData: ImageSource | undefined) => { // eslint-disable-line @typescript-eslint/no-floating-promises\r\n      if (tileData !== undefined)\r\n        this._missingTileData = tileData.data as Uint8Array;\r\n    });\r\n  }\r\n\r\n  public abstract constructUrl(row: number, column: number, zoomLevel: number): Promise<string>;\r\n\r\n  public get tilingScheme(): MapTilingScheme { return this.useGeographicTilingScheme ? this._geographicTilingScheme : this._mercatorTilingScheme; }\r\n\r\n  /** @deprecated in 5.0 - might be removed in next major version. Use [addAttributions] instead. */\r\n  public addLogoCards(_cards: HTMLTableElement, _viewport: ScreenViewport): void { }\r\n\r\n  /**\r\n   * Add attribution logo cards for the data supplied by this provider to the [[Viewport]]'s logo div.\r\n   * @param _cards Logo cards HTML element that may contain custom data attributes.\r\n   * @param _viewport Viewport to add logo cards to.\r\n   * @beta\r\n   */\r\n  public async addAttributions(cards: HTMLTableElement, vp: ScreenViewport): Promise<void> {\r\n    // eslint-disable-next-line @typescript-eslint/no-deprecated\r\n    return Promise.resolve(this.addLogoCards(cards, vp));\r\n  }\r\n\r\n  /** @internal */\r\n  protected _missingTileData?: Uint8Array;\r\n\r\n  /** @internal */\r\n  public get transparentBackgroundString(): string { return this._settings.transparentBackground ? \"true\" : \"false\"; }\r\n\r\n  /** @internal */\r\n  protected async _areChildrenAvailable(_tile: ImageryMapTile): Promise<boolean> { return true; }\r\n\r\n  /** @internal */\r\n  public getPotentialChildIds(quadId: QuadId): QuadId[] {\r\n    const childLevel = quadId.level + 1;\r\n    return quadId.getChildIds(this.tilingScheme.getNumberOfXChildrenAtLevel(childLevel), this.tilingScheme.getNumberOfYChildrenAtLevel(childLevel));\r\n  }\r\n\r\n  /**\r\n   * Get child IDs of a quad and generate tiles based on these child IDs.\r\n   * See [[ImageryTileTree._loadChildren]] for the definition of `resolveChildren` where this function is commonly called.\r\n   * @param quadId quad to generate child IDs for.\r\n   * @param resolveChildren Function that creates tiles from child IDs.\r\n   * @beta\r\n   */\r\n  protected _generateChildIds(quadId: QuadId, resolveChildren: (childIds: QuadId[]) => void) {\r\n    resolveChildren(this.getPotentialChildIds(quadId));\r\n  }\r\n\r\n  /** @internal */\r\n  public generateChildIds(tile: ImageryMapTile, resolveChildren: (childIds: QuadId[]) => void) {\r\n    if (tile.depth >= this.maximumZoomLevel || (undefined !== this.cartoRange && this._filterByCartoRange && !this.cartoRange.intersectsRange(tile.rectangle))) {\r\n      tile.setLeaf();\r\n      return;\r\n    }\r\n    this._generateChildIds(tile.quadId, resolveChildren);\r\n  }\r\n\r\n  /**\r\n   * Get tooltip text for a specific quad and cartographic position.\r\n   * @param strings List of strings to contain tooltip text.\r\n   * @param quadId Quad ID to get tooltip for.\r\n   * @param _carto Cartographic that may be used to retrieve and/or format tooltip text.\r\n   * @param tree Tree associated with the quad to get the tooltip for.\r\n   * @internal\r\n   */\r\n  public async getToolTip(strings: string[], quadId: QuadId, _carto: Cartographic, tree: ImageryMapTileTree): Promise<void> {\r\n    if (doDebugToolTips) {\r\n      const range = quadId.getLatLongRangeDegrees(tree.tilingScheme);\r\n      strings.push(`QuadId: ${quadId.debugString}, Lat: ${range.low.x} - ${range.high.x} Long: ${range.low.y} - ${range.high.y}`);\r\n    }\r\n  }\r\n\r\n  /** @internal */\r\n  public async getFeatureInfo(featureInfos: MapLayerFeatureInfo[], _quadId: QuadId, _carto: Cartographic, _tree: ImageryMapTileTree, _hit: HitDetail, _options?: MapFeatureInfoOptions): Promise<void> {\r\n    // default implementation; simply return an empty feature info\r\n    featureInfos.push({ layerName: this._settings.name });\r\n  }\r\n\r\n  /** @internal */\r\n  public  decorate(_context: DecorateContext): void {\r\n  }\r\n\r\n  /** @internal */\r\n  protected async getImageFromTileResponse(tileResponse: Response, zoomLevel: number) {\r\n    const arrayBuffer = await tileResponse.arrayBuffer();\r\n    const byteArray: Uint8Array = new Uint8Array(arrayBuffer);\r\n    if (!byteArray || (byteArray.length === 0))\r\n      return undefined;\r\n    if (this.matchesMissingTile(byteArray) && zoomLevel > 8)\r\n      return undefined;\r\n\r\n    const contentType = tileResponse.headers.get(\"content-type\")?.toLowerCase();\r\n    let imageFormat: ImageSourceFormat | undefined;\r\n    if (contentType) {\r\n      // Note: 'includes' is used here instead of exact comparison because we encountered\r\n      // some servers that would give content type such as 'image/png;charset=UTF-8'.\r\n      if (contentType.includes(\"image/jpeg\"))\r\n        imageFormat = ImageSourceFormat.Jpeg;\r\n      else if (contentType.includes(\"image/png\"))\r\n        imageFormat = ImageSourceFormat.Png;\r\n    }\r\n\r\n    if (imageFormat !== undefined)\r\n      return new ImageSource(byteArray, imageFormat);\r\n\r\n    assert(false, \"Invalid tile content type\");\r\n    return undefined;\r\n  }\r\n\r\n  /**\r\n   * Change the status of this provider.\r\n   * Sub-classes should override 'onStatusUpdated' instead of this method.\r\n   * @internal\r\n   */\r\n  public setStatus(status: MapLayerImageryProviderStatus) {\r\n    if (this._status !== status) {\r\n      this.onStatusUpdated(status);\r\n      this._status = status;\r\n      this.onStatusChanged.raiseEvent(this);\r\n    }\r\n  }\r\n\r\n  /** Method called whenever the status changes, giving the opportunity to sub-classes to have a custom behavior.\r\n   *  @internal\r\n   */\r\n  protected onStatusUpdated(_newStatus: MapLayerImageryProviderStatus) { }\r\n\r\n  /** @internal */\r\n  protected setRequestAuthorization(headers: Headers) {\r\n    if (this._settings.userName && this._settings.password) {\r\n      setBasicAuthorization(headers, this._settings.userName, this._settings.password);\r\n    }\r\n  }\r\n\r\n  /** Returns true if the given URL has the same origin as this layer's settings URL.\r\n   * Used to avoid leaking credentials to third-party hosts.\r\n   * @internal\r\n   */\r\n  protected matchesSettingsUrlOrigin(url: string): boolean {\r\n    const origin = tryGetOrigin(url);\r\n    return origin !== undefined && origin === tryGetOrigin(this._settings.url);\r\n  }\r\n\r\n  /** Returns true if the basic-auth credentials from the layer settings may be attached to a request to the given URL.\r\n   * Always true unless [[MapLayerFormatRegistry.restrictCredentialsToTrustedOrigins]] is enabled (opt-in).\r\n   * When enabled, the origin of this layer's settings URL is implicitly trusted (the credentials belong to that\r\n   * server); other origins must be listed in [[MapLayerFormatRegistry.trustedCredentialsOrigins]].\r\n   * See [[MapLayerFormatRegistry.isCredentialsSharingAllowed]].\r\n   * @internal\r\n   */\r\n  protected isCredentialsSharingAllowed(url: string): boolean {\r\n    return IModelApp.mapLayerFormatRegistry.isCredentialsSharingAllowed(url, this._settings.url);\r\n  }\r\n\r\n  /** Returns true if a request to the given URL may be retried with browser credentials included\r\n   * (i.e. SSO / Windows Authentication) after an NTLM or Negotiate http 401 challenge.\r\n   * See [[MapLayerFormatRegistry.isSsoAllowed]].\r\n   * @internal\r\n   */\r\n  protected isSsoAllowed(url: string): boolean {\r\n    return IModelApp.mapLayerFormatRegistry.isSsoAllowed(url);\r\n  }\r\n\r\n  /** @internal */\r\n  public async makeTileRequest(url: string, timeoutMs?: number, authorization?: string): Promise<Response> {\r\n\r\n    // We want to complete the first request before letting other requests go;\r\n    // this done to avoid flooding server with requests missing credentials\r\n    if (!this._firstRequestPromise)\r\n      this._firstRequestPromise  = new Promise<void>((resolve: any) => this.onFirstRequestCompleted.addOnce(()=>resolve()));\r\n    else\r\n      await this._firstRequestPromise;\r\n\r\n    let response: Response|undefined;\r\n    try {\r\n      response = await this.makeRequest(url, timeoutMs, authorization);\r\n    } finally {\r\n      this.onFirstRequestCompleted.raiseEvent();\r\n    }\r\n\r\n    if (response === undefined)\r\n      throw new Error(\"fetch call failed\");\r\n\r\n    return response;\r\n  }\r\n\r\n  /** Records the given URL's origin and transitions the status to [[MapLayerImageryProviderStatus.UntrustedOrigin]].\r\n   * Called when a request received an authentication challenge that could not be answered because the origin\r\n   * is not trusted (see [[MapLayerFormatRegistry.restrictCredentialsToTrustedOrigins]]).\r\n   * Raises [[onStatusChanged]] on the status transition, and again whenever a new origin is added.\r\n   * @internal\r\n   */\r\n  protected reportBlockedOrigin(url: string): void {\r\n    const origin = tryGetOrigin(url) ?? url;\r\n    const isNewOrigin = !this._blockedOrigins.has(origin);\r\n    this._blockedOrigins.add(origin);\r\n\r\n    if (this._status !== MapLayerImageryProviderStatus.UntrustedOrigin)\r\n      this.setStatus(MapLayerImageryProviderStatus.UntrustedOrigin);\r\n    else if (isNewOrigin)\r\n      this.onStatusChanged.raiseEvent(this);   // status unchanged, but a new origin was blocked\r\n  }\r\n\r\n  /** Logs a warning (once per origin, app-wide) when credentials are sent to an origin that would be blocked\r\n   * if [[MapLayerFormatRegistry.restrictCredentialsToTrustedOrigins]] were enabled.\r\n   * Helps applications discover the origins they need to whitelist before opting in to the restriction.\r\n   * See [[MapLayerFormatRegistry.logUntrustedOriginUse]].\r\n   * @internal\r\n   */\r\n  protected logUntrustedOriginUse(url: string): void {\r\n    IModelApp.mapLayerFormatRegistry.logUntrustedOriginUse(url);\r\n  }\r\n\r\n  /** The redirect policy to apply to a request that carries browser credentials (see [[includeUserCredentials]]).\r\n   *\r\n   * When [[MapLayerFormatRegistry.restrictCredentialsToTrustedOrigins]] is enabled, redirects are refused\r\n   * outright (`\"error\"`). `fetch` cannot be asked to follow only same-origin redirects, and by the time a\r\n   * followed redirect can be inspected the credentials have already been delivered to the destination — so\r\n   * refusing is the only way to honour the guarantee that credentials reach none but the origins listed in\r\n   * [[MapLayerFormatRegistry.trustedCredentialsOrigins]]. Legitimate same-origin redirects fail as a result;\r\n   * that is the cost of the opt-in restriction.\r\n   *\r\n   * When the restriction is disabled (the default), redirects are followed as before and\r\n   * [[checkCredentialedRedirect]] reports the destination after the fact.\r\n   * @internal\r\n   */\r\n  protected get credentialedRedirect(): RequestRedirect | undefined {\r\n    return IModelApp.mapLayerFormatRegistry.restrictCredentialsToTrustedOrigins ? \"error\" : undefined;\r\n  }\r\n\r\n  /** Detects that a request carrying browser credentials (see [[includeUserCredentials]]) was transparently\r\n   * redirected to a different origin, and reports or logs that origin.\r\n   *\r\n   * This is a **best-effort, after-the-fact** signal used only while\r\n   * [[MapLayerFormatRegistry.restrictCredentialsToTrustedOrigins]] is disabled, where credentialed requests\r\n   * still follow redirects (see [[credentialedRedirect]]). It cannot prevent the exposure — the credentials\r\n   * have already been sent — and it does not fire at all when the destination denies CORS, because `fetch`\r\n   * then rejects instead of returning a `Response`. The destination origin is never latched as SSO-succeeded,\r\n   * so credentials do not keep flowing to it.\r\n   * @internal\r\n   */\r\n  protected checkCredentialedRedirect(requestedUrl: string, response: Response): void {\r\n    const finalOrigin = tryGetOrigin(response.url);\r\n    if (!response.url || finalOrigin === undefined || finalOrigin === tryGetOrigin(requestedUrl))\r\n      return;\r\n\r\n    if (!this.isSsoAllowed(response.url))\r\n      this.reportBlockedOrigin(response.url);\r\n    else\r\n      this.logUntrustedOriginUse(response.url);   // no-op when the restriction is enabled\r\n  }\r\n\r\n  /** @internal */\r\n  public async makeRequest(url: string, timeoutMs?: number, authorization?: string): Promise<Response> {\r\n\r\n    let response: Response|undefined;\r\n\r\n    let headers: Headers | undefined;\r\n    let hasCreds = false;\r\n    // Whether this request had basic-auth credentials of its own to offer. Requests carrying a caller-supplied\r\n    // `authorization` are excluded: those bypass the origin policy entirely.\r\n    const hasSettingsCreds = !authorization && !!this._settings.userName && !!this._settings.password;\r\n    if (authorization) {\r\n      headers = new Headers();\r\n      headers.set(\"Authorization\", authorization);\r\n    } else if (hasSettingsCreds) {\r\n      if (this.isCredentialsSharingAllowed(url)) {\r\n        hasCreds = true;\r\n        headers = new Headers();\r\n        this.setRequestAuthorization(headers);\r\n        if (!this.matchesSettingsUrlOrigin(url))\r\n          this.logUntrustedOriginUse(url);\r\n      }\r\n    }\r\n    const includeCredentials = this.includeUserCredentials(url);\r\n    const opts: RequestInit = {\r\n      method: \"GET\",\r\n      headers,\r\n      credentials: includeCredentials ? \"include\" : undefined,\r\n      redirect: includeCredentials ? this.credentialedRedirect : undefined,\r\n    };\r\n\r\n    if (timeoutMs !== undefined)\r\n      setRequestTimeout(opts, timeoutMs);\r\n\r\n    response = await fetch(url, opts);\r\n\r\n    if (includeCredentials)\r\n      this.checkCredentialedRedirect(url, response);\r\n\r\n    // fetch follows redirects transparently, so all trust decisions below target the final\r\n    // (post-redirect) URL reported by the response, not the URL we asked for.\r\n    const challengedUrl = response.url || url;\r\n\r\n    if (response.status === 401\r\n          && headersIncludeAuthMethod(response.headers, [\"ntlm\", \"negotiate\"])\r\n          && !includeCredentials\r\n          && !hasCreds\r\n    ) {\r\n      if (this.isSsoAllowed(challengedUrl)) {\r\n        // Removed the previous headers and make sure \"include\" credentials is set\r\n        opts.headers = undefined;\r\n        opts.credentials = \"include\";\r\n        // A Negotiate/NTLM handshake is normally a same-URL 401 round-trip, but in legacy mode we preserve\r\n        // the previous behavior and allow the browser to follow redirects after the authenticated retry.\r\n        opts.redirect = IModelApp.mapLayerFormatRegistry.restrictCredentialsToTrustedOrigins ? \"error\" : undefined;\r\n        this.logUntrustedOriginUse(challengedUrl);\r\n\r\n        // We got a http 401 challenge, lets try again with SSO enabled (i.e. Windows Authentication)\r\n        response = await fetch(challengedUrl, opts);\r\n        if (response.status === 200) {\r\n          this.recordSsoSucceeded(challengedUrl);    // avoid going through 401 challenges over and over for this origin\r\n        }\r\n      } else {\r\n        this.reportBlockedOrigin(challengedUrl);\r\n      }\r\n    } else if ((response.status === 401 || response.status === 403) && hasSettingsCreds && !this.isCredentialsSharingAllowed(challengedUrl)) {\r\n      // Some servers answer an unauthenticated request with 403 (Forbidden) rather than a 401 challenge;\r\n      // since this request could not present its credentials to the challenging origin, either status most\r\n      // likely results from that. The permission is recomputed for the challenged URL rather than reusing the\r\n      // decision made for the requested one: `fetch` strips the Authorization header when it follows a\r\n      // cross-origin redirect, so a trusted request can still arrive unauthenticated at an untrusted origin,\r\n      // and conversely a request that started out untrusted may end up at an origin that is trusted.\r\n      this.reportBlockedOrigin(challengedUrl);\r\n    }\r\n\r\n    return response;\r\n  }\r\n\r\n  /** Returns a map layer tile at the specified settings. */\r\n  public async loadTile(row: number, column: number, zoomLevel: number): Promise<ImageSource | undefined> {\r\n\r\n    try {\r\n      const tileUrl: string = await this.constructUrl(row, column, zoomLevel);\r\n      if (tileUrl.length === 0)\r\n        return undefined;\r\n\r\n      const tileResponse: Response = await this.makeTileRequest(tileUrl);\r\n\r\n      if (!this._hasSuccessfullyFetchedTile) {\r\n        this._hasSuccessfullyFetchedTile = true;\r\n      }\r\n\r\n      return await this.getImageFromTileResponse(tileResponse, zoomLevel);\r\n    } catch (error: any) {\r\n      if (error?.status === 401) {\r\n        this.setStatus(MapLayerImageryProviderStatus.RequireAuth);\r\n\r\n        // Only report error to end-user if we were previously able to fetch tiles\r\n        // and then encountered an error, otherwise I assume an error was already reported\r\n        // through the source validation process.\r\n        if (this._hasSuccessfullyFetchedTile) {\r\n          const msg = IModelApp.localization.getLocalizedString(\"iModelJs:MapLayers.Messages.LoadTileTokenError\", { layerName: this._settings.name });\r\n          IModelApp.notifications.outputMessage(new NotifyMessageDetails(OutputMessagePriority.Warning, msg));\r\n        }\r\n\r\n      }\r\n      return undefined;\r\n    }\r\n  }\r\n\r\n  /** @internal */\r\n  protected async toolTipFromUrl(strings: string[], url: string): Promise<void> {\r\n    let headers: Headers | undefined;\r\n    if (this.isCredentialsSharingAllowed(url)) {\r\n      headers = new Headers();\r\n      this.setRequestAuthorization(headers);\r\n    }\r\n\r\n    try {\r\n      const includeCredentials = this.includeUserCredentials(url);\r\n      const response = await fetch(url, {\r\n        method: \"GET\",\r\n        headers,\r\n        credentials: includeCredentials ? \"include\" : undefined,\r\n        redirect: includeCredentials ? this.credentialedRedirect : undefined,\r\n      });\r\n      if (includeCredentials)\r\n        this.checkCredentialedRedirect(url, response);\r\n      let text = await response.text();\r\n      if (text) {\r\n        // Tooltip content (e.g. WMS GetFeatureInfo responses) is rendered as HTML downstream and may\r\n        // deliberately contain markup; text from origins not trusted for credentials is escaped.\r\n        // fetch follows redirects transparently, so the text may come from a different origin than requested.\r\n        if (!this.isCredentialsSharingAllowed(response.url || url))\r\n          text = escapeHtml(text);\r\n        strings.push(text);\r\n      }\r\n    } catch {\r\n    }\r\n  }\r\n\r\n  /** @internal */\r\n  public matchesMissingTile(tileData: Uint8Array): boolean {\r\n    if (!this._missingTileData)\r\n      return false;\r\n    if (tileData.length !== this._missingTileData.length)\r\n      return false;\r\n    for (let i: number = 0; i < tileData.length; i += 10) {\r\n      if (this._missingTileData[i] !== tileData[i]) {\r\n        return false;\r\n      }\r\n    }\r\n    return true;\r\n  }\r\n\r\n  /**\r\n   * Calculates the projected x cartesian coordinate in EPSG:3857 from the longitude in EPSG:4326 (WGS84)\r\n   * @param longitude Longitude in EPSG:4326 (WGS84)\r\n   * @internal\r\n   */\r\n  public getEPSG3857X(longitude: number): number {\r\n    return longitude * 20037508.34 / 180.0;\r\n  }\r\n\r\n  /**\r\n   * Calculates the projected y cartesian coordinate in EPSG:3857 from the latitude in EPSG:4326 (WGS84)\r\n   * @param latitude Latitude in EPSG:4326 (WGS84)\r\n   * @internal\r\n   */\r\n  public getEPSG3857Y(latitude: number): number {\r\n    const y = Math.log(Math.tan((90.0 + latitude) * Math.PI / 360.0)) / (Math.PI / 180.0);\r\n    return y * 20037508.34 / 180.0;\r\n  }\r\n\r\n  /**\r\n   * Calculates the longitude in EPSG:4326 (WGS84) from the projected x cartesian coordinate in EPSG:3857\r\n   * @param x3857 Projected x cartesian coordinate in EPSG:3857\r\n   * @internal\r\n   */\r\n  public getEPSG4326Lon(x3857: number): number {\r\n    return Angle.radiansToDegrees(x3857 / earthRadius);\r\n  }\r\n\r\n  /**\r\n   * Calculates the latitude in EPSG:4326 (WGS84) from the projected y cartesian coordinate in EPSG:3857\r\n   * @param y3857 Projected y cartesian coordinate in EPSG:3857\r\n   * @internal\r\n   */\r\n  public getEPSG4326Lat(y3857: number): number {\r\n    const y = 2 * Math.atan(Math.exp(y3857 / earthRadius)) - (Math.PI / 2);\r\n    return Angle.radiansToDegrees(y);\r\n  }\r\n\r\n  /**\r\n   * Get the bounding box/extents of a tile in EPSG:4326 (WGS84) format.\r\n   * Map tile providers like Bing and Mapbox allow the URL to be constructed directly from the zoom level and tile coordinates.\r\n   * However, WMS-based servers take a bounding box instead. This method can help get that bounding box from a tile.\r\n   * @param row Row of the tile\r\n   * @param column Column of the tile\r\n   * @param zoomLevel Desired zoom level of the tile\r\n   * @internal\r\n   */\r\n  public getEPSG4326Extent(row: number, column: number, zoomLevel: number): WGS84Extent {\r\n    // Shift left (this.tileSize << zoomLevel) overflow when using 512 pixels tile at higher resolution,\r\n    // so use Math.pow instead (I assume the performance lost to be minimal)\r\n    const mapSize = this.tileSize * Math.pow(2, zoomLevel);\r\n    const leftGrid = this.tileSize * column;\r\n    const topGrid = this.tileSize * row;\r\n\r\n    const longitudeLeft = 360 * ((leftGrid / mapSize) - 0.5);\r\n    const y0 = 0.5 - ((topGrid + this.tileSize) / mapSize);\r\n    const latitudeBottom = 90.0 - 360.0 * Math.atan(Math.exp(-y0 * 2 * Math.PI)) / Math.PI;\r\n\r\n    const longitudeRight = 360 * (((leftGrid + this.tileSize) / mapSize) - 0.5);\r\n    const y1 = 0.5 - (topGrid / mapSize);\r\n    const latitudeTop = 90.0 - 360.0 * Math.atan(Math.exp(-y1 * 2 * Math.PI)) / Math.PI;\r\n\r\n    return { longitudeLeft, longitudeRight, latitudeTop, latitudeBottom };\r\n  }\r\n\r\n  /**\r\n   * Get the bounding box/extents of a tile in EPSG:3857 format.\r\n   * @param row Row of the tile\r\n   * @param column Column of the tile\r\n   * @param zoomLevel Desired zoom level of the tile\r\n   * @internal\r\n   */\r\n  public getEPSG3857Extent(row: number, column: number, zoomLevel: number): { left: number, right: number, top: number, bottom: number } {\r\n    const epsg4326Extent = this.getEPSG4326Extent(row, column, zoomLevel);\r\n\r\n    const left = this.getEPSG3857X(epsg4326Extent.longitudeLeft);\r\n    const right = this.getEPSG3857X(epsg4326Extent.longitudeRight);\r\n    const bottom = this.getEPSG3857Y(epsg4326Extent.latitudeBottom);\r\n    const top = this.getEPSG3857Y(epsg4326Extent.latitudeTop);\r\n\r\n    return { left, right, bottom, top };\r\n  }\r\n\r\n  /** @internal */\r\n  public getEPSG3857ExtentString(row: number, column: number, zoomLevel: number) {\r\n    const tileExtent = this.getEPSG3857Extent(row, column, zoomLevel);\r\n    return `${tileExtent.left.toFixed(2)},${tileExtent.bottom.toFixed(2)},${tileExtent.right.toFixed(2)},${tileExtent.top.toFixed(2)}`;\r\n  }\r\n\r\n  /** @internal */\r\n  public getEPSG4326TileExtentString(row: number, column: number, zoomLevel: number, latLongAxisOrdering: boolean) {\r\n    const tileExtent = this.getEPSG4326Extent(row, column, zoomLevel);\r\n    return this.getEPSG4326ExtentString(tileExtent, latLongAxisOrdering);\r\n\r\n  }\r\n\r\n  /** @internal */\r\n  public getEPSG4326ExtentString(tileExtent: WGS84Extent, latLongAxisOrdering: boolean) {\r\n\r\n    if (latLongAxisOrdering) {\r\n      return `${tileExtent.latitudeBottom.toFixed(8)},${tileExtent.longitudeLeft.toFixed(8)},${tileExtent.latitudeTop.toFixed(8)},${tileExtent.longitudeRight.toFixed(8)}`;\r\n    } else {\r\n      return `${tileExtent.longitudeLeft.toFixed(8)},${tileExtent.latitudeBottom.toFixed(8)},${tileExtent.longitudeRight.toFixed(8)},${tileExtent.latitudeTop.toFixed(8)}`;\r\n    }\r\n  }\r\n\r\n  /** Append custom parameters for settings to provided URL object.\r\n   * @internal\r\n   */\r\n  protected appendCustomParams(url: string) {\r\n    if (!this._settings.savedQueryParams && !this._settings.unsavedQueryParams)\r\n      return url;\r\n\r\n    let tmpUrl = appendQueryParams(url, this._settings.savedQueryParams);\r\n    tmpUrl = appendQueryParams(tmpUrl, this._settings.unsavedQueryParams);\r\n    return tmpUrl;\r\n  }\r\n}\r\n"]}

package/lib/esm/tile/map/MapLayerSources.d.ts

@@ -24,7 +24,13 @@ export declare enum MapLayerSourceStatus {
     InvalidCoordinateSystem = 6,
     /** Format is not compatible with the URL provided.
      */
-    IncompatibleFormat = 7
+    IncompatibleFormat = 7,
+    /** Authentication could not be attempted because the source's origin is not trusted
+     * (see [MapLayerFormatRegistry.restrictCredentialsToTrustedOrigins]($frontend)). Add the origin to
+     * [MapLayerFormatRegistry.trustedCredentialsOrigins]($frontend) rather than prompting for credentials.
+     * @beta
+     */
+    UntrustedOrigin = 8
 }
 /** JSON representation of a map layer source.
  * @see [ImageryMapLayerFormatId]($common)

package/lib/esm/tile/map/MapLayerSources.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"MapLayerSources.d.ts","sourceRoot":"","sources":["../../../../src/tile/map/MapLayerSources.ts"],"names":[],"mappings":"AAIA;;GAEG;AAGH,OAAO,EAC2D,4BAA4B,EAAE,qBAAqB,EAAE,gBAAgB,EACtI,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE1D,OAAO,EAAsC,wBAAwB,EAAE,MAAM,aAAa,CAAC;AAE3F;;GAEG;AACH,oBAAY,oBAAoB;IAC9B,4BAA4B;IAC5B,KAAK,IAAA;IACL,iEAAiE;IACjE,kBAAkB,IAAA;IAClB,6EAA6E;IAC7E,aAAa,IAAA;IACb,uDAAuD;IACvD,eAAe,IAAA;IACf,oEAAoE;IACpE,UAAU,IAAA;IACV,iEAAiE;IACjE,WAAW,IAAA;IACX,mDAAmD;IACnD,uBAAuB,IAAA;IACvB;OACG;IACH,kBAAkB,IAAA;CACnB;AAED;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IAClC,2DAA2D;IAC3D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW;IACX,IAAI,EAAE,MAAM,CAAC;IACb,oCAAoC;IACpC,GAAG,EAAE,MAAM,CAAC;IACZ,uEAAuE;IACvE,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,0FAA0F;IAC1F,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB;;MAEE;IACF,WAAW,CAAC,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,CAAC;CACzC;AAED;;GAEG;AACH,qBAAa,cAAc;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,UAAS;IAChB,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAEzB;;MAEE;IACK,gBAAgB,CAAC,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,CAAC;IAEpD;;MAEE;IACK,kBAAkB,CAAC,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,CAAC;IAEtD,OAAO;WASO,QAAQ,CAAC,IAAI,EAAE,mBAAmB,GAAG,cAAc,GAAG,SAAS;IAOhE,cAAc,CAAC,WAAW,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,wBAAwB,CAAC;IAIrF,eAAe;WACD,sBAAsB,CAAC,KAAK,EAAE,4BAA4B;IAajE,MAAM,IAAI,IAAI,CAAC,mBAAmB,EAAE,UAAU,CAAC,GAAG;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAC;IAIpE,eAAe,CAAC,SAAS,CAAC,EAAE,gBAAgB,EAAE,GAAG,qBAAqB,GAAG,SAAS;IAiBzF,OAAO,CAAC,cAAc;IAItB;;KAEC;IACM,kBAAkB;;;CAU1B;AAED;;GAEG;AACH,qBAAa,eAAe;IAEN,OAAO,CAAC,QAAQ;IADpC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAkB;IAC3C,OAAO;WAEO,WAAW;IAElB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,OAAe,GAAG,cAAc,GAAG,SAAS;IAQrF,IAAW,MAAM,IAAI,cAAc,EAAE,CAQpC;IACD,IAAW,SAAS,qBAA4B;IAChD,IAAW,KAAK,IAAI,cAAc,EAAE,CAQnC;IAED,OAAO,CAAC,MAAM,CAAC,qBAAqB;IAYpC,OAAO,CAAC,MAAM,CAAC,oBAAoB;WAYf,MAAM,CAAC,MAAM,CAAC,EAAE,gBAAgB,EAAE,qBAAqB,UAAQ,EAAE,gBAAgB,UAAQ,GAAG,OAAO,CAAC,eAAe,CAAC;WAsDpH,0BAA0B,CAAC,cAAc,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC;WAavG,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;CAYvD"}
+{"version":3,"file":"MapLayerSources.d.ts","sourceRoot":"","sources":["../../../../src/tile/map/MapLayerSources.ts"],"names":[],"mappings":"AAIA;;GAEG;AAGH,OAAO,EAC2D,4BAA4B,EAAE,qBAAqB,EAAE,gBAAgB,EACtI,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE1D,OAAO,EAAsC,wBAAwB,EAAE,MAAM,aAAa,CAAC;AAE3F;;GAEG;AACH,oBAAY,oBAAoB;IAC9B,4BAA4B;IAC5B,KAAK,IAAA;IACL,iEAAiE;IACjE,kBAAkB,IAAA;IAClB,6EAA6E;IAC7E,aAAa,IAAA;IACb,uDAAuD;IACvD,eAAe,IAAA;IACf,oEAAoE;IACpE,UAAU,IAAA;IACV,iEAAiE;IACjE,WAAW,IAAA;IACX,mDAAmD;IACnD,uBAAuB,IAAA;IACvB;OACG;IACH,kBAAkB,IAAA;IAClB;;;;OAIG;IACH,eAAe,IAAA;CAChB;AAED;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IAClC,2DAA2D;IAC3D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW;IACX,IAAI,EAAE,MAAM,CAAC;IACb,oCAAoC;IACpC,GAAG,EAAE,MAAM,CAAC;IACZ,uEAAuE;IACvE,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,0FAA0F;IAC1F,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB;;MAEE;IACF,WAAW,CAAC,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,CAAC;CACzC;AAED;;GAEG;AACH,qBAAa,cAAc;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,UAAS;IAChB,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAEzB;;MAEE;IACK,gBAAgB,CAAC,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,CAAC;IAEpD;;MAEE;IACK,kBAAkB,CAAC,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,CAAC;IAEtD,OAAO;WASO,QAAQ,CAAC,IAAI,EAAE,mBAAmB,GAAG,cAAc,GAAG,SAAS;IAOhE,cAAc,CAAC,WAAW,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,wBAAwB,CAAC;IAIrF,eAAe;WACD,sBAAsB,CAAC,KAAK,EAAE,4BAA4B;IAajE,MAAM,IAAI,IAAI,CAAC,mBAAmB,EAAE,UAAU,CAAC,GAAG;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAC;IAIpE,eAAe,CAAC,SAAS,CAAC,EAAE,gBAAgB,EAAE,GAAG,qBAAqB,GAAG,SAAS;IAiBzF,OAAO,CAAC,cAAc;IAItB;;KAEC;IACM,kBAAkB;;;CAU1B;AAED;;GAEG;AACH,qBAAa,eAAe;IAEN,OAAO,CAAC,QAAQ;IADpC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAkB;IAC3C,OAAO;WAEO,WAAW;IAElB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,OAAe,GAAG,cAAc,GAAG,SAAS;IAQrF,IAAW,MAAM,IAAI,cAAc,EAAE,CAQpC;IACD,IAAW,SAAS,qBAA4B;IAChD,IAAW,KAAK,IAAI,cAAc,EAAE,CAQnC;IAED,OAAO,CAAC,MAAM,CAAC,qBAAqB;IAYpC,OAAO,CAAC,MAAM,CAAC,oBAAoB;WAYf,MAAM,CAAC,MAAM,CAAC,EAAE,gBAAgB,EAAE,qBAAqB,UAAQ,EAAE,gBAAgB,UAAQ,GAAG,OAAO,CAAC,eAAe,CAAC;WAsDpH,0BAA0B,CAAC,cAAc,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC;WAavG,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;CAYvD"}

package/lib/esm/tile/map/MapLayerSources.js

@@ -33,6 +33,12 @@ export var MapLayerSourceStatus;
     /** Format is not compatible with the URL provided.
      */
     MapLayerSourceStatus[MapLayerSourceStatus["IncompatibleFormat"] = 7] = "IncompatibleFormat";
+    /** Authentication could not be attempted because the source's origin is not trusted
+     * (see [MapLayerFormatRegistry.restrictCredentialsToTrustedOrigins]($frontend)). Add the origin to
+     * [MapLayerFormatRegistry.trustedCredentialsOrigins]($frontend) rather than prompting for credentials.
+     * @beta
+     */
+    MapLayerSourceStatus[MapLayerSourceStatus["UntrustedOrigin"] = 8] = "UntrustedOrigin";
 })(MapLayerSourceStatus || (MapLayerSourceStatus = {}));
 /** A source for map layers. These may be catalogued for convenient use by users or applications.
  * @public