@itwin/core-frontend 5.16.0-dev.3 → 5.16.0-dev.5

package/lib/esm/tile/map/MapLayerImageryProvider.js

@@ -5,17 +5,18 @@
 /** @packageDocumentation
  * @module MapLayers
  */
-import { assert, BeEvent } from "@itwin/core-bentley";
+import { assert, BeEvent, BentleyError, Logger } from "@itwin/core-bentley";
 import { ImageSource, ImageSourceFormat } from "@itwin/core-common";
 import { Angle } from "@itwin/core-geometry";
 import { IModelApp } from "../../IModelApp";
 import { NotifyMessageDetails, OutputMessagePriority } from "../../NotificationManager";
-import { appendQueryParams, GeographicTilingScheme, WebMercatorTilingScheme } from "../internal";
+import { appendQueryParams, credentialedFetchRedirect, fetchMapLayerRequest, GeographicTilingScheme, MapLayerAuthenticationFailedError, WebMercatorTilingScheme } from "../internal";
 import { headersIncludeAuthMethod, setBasicAuthorization, setRequestTimeout } from "../../request/utils";
 /** @internal */
 const tileImageSize = 256, untiledImageSize = 256;
 const earthRadius = 6378137;
 const doDebugToolTips = false;
+const loggerCategory = "MapLayerImageryProvider";
 /** Escapes HTML metacharacters so the text renders literally when assigned to `innerHTML`.
  * Use for any server- or user-supplied string that ends up in the map tooltip, which is rendered
  * as HTML by [[MapLayerTileTreeReference.getToolTip]].
@@ -302,12 +303,37 @@ export class MapLayerImageryProvider {
      *  @internal
      */
     onStatusUpdated(_newStatus) { }
+    /** Transitions to [[MapLayerImageryProviderStatus.RequireAuth]] after a [[MapLayerFetchHandler]] reported an
+     * unrecoverable authentication failure. The user is notified once per transition, and only if tiles had
+     * loaded before: an initialization failure was already reported through source validation.
+     * @internal
+     */
+    reportAuthenticationFailure() {
+        const alreadyReported = this._status === MapLayerImageryProviderStatus.RequireAuth;
+        this.setStatus(MapLayerImageryProviderStatus.RequireAuth);
+        if (alreadyReported || !this._hasSuccessfullyFetchedTile)
+            return;
+        const msg = IModelApp.localization.getLocalizedString("iModelJs:MapLayers.Messages.LoadTileTokenError", { layerName: this._settings.name });
+        IModelApp.notifications.outputMessage(new NotifyMessageDetails(OutputMessagePriority.Warning, msg));
+    }
     /** @internal */
     setRequestAuthorization(headers) {
         if (this._settings.userName && this._settings.password) {
             setBasicAuthorization(headers, this._settings.userName, this._settings.password);
         }
     }
+    /** The access client registered for this layer's format, if any.
+     * @internal
+     */
+    get accessClient() {
+        return IModelApp.mapLayerFormatRegistry?.getAccessClient(this._settings.formatId);
+    }
+    /** True while at least one [[MapLayerFetchHandler]] is registered via [[MapLayerFormatRegistry.addMapLayerFetchHandler]].
+     * @internal
+     */
+    get hasFetchHandler() {
+        return (IModelApp.mapLayerFormatRegistry?.mapLayerFetchHandlers.length ?? 0) > 0;
+    }
     /** Returns true if the given URL has the same origin as this layer's settings URL.
      * Used to avoid leaking credentials to third-party hosts.
      * @internal
@@ -377,28 +403,12 @@ export class MapLayerImageryProvider {
     logUntrustedOriginUse(url) {
         IModelApp.mapLayerFormatRegistry.logUntrustedOriginUse(url);
     }
-    /** The redirect policy to apply to a request that carries browser credentials (see [[includeUserCredentials]]).
-     *
-     * When [[MapLayerFormatRegistry.restrictCredentialsToTrustedOrigins]] is enabled, redirects are refused
-     * outright (`"error"`). `fetch` cannot be asked to follow only same-origin redirects, and by the time a
-     * followed redirect can be inspected the credentials have already been delivered to the destination — so
-     * refusing is the only way to honour the guarantee that credentials reach none but the origins listed in
-     * [[MapLayerFormatRegistry.trustedCredentialsOrigins]]. Legitimate same-origin redirects fail as a result;
-     * that is the cost of the opt-in restriction.
-     *
-     * When the restriction is disabled (the default), redirects are followed as before and
-     * [[checkCredentialedRedirect]] reports the destination after the fact.
-     * @internal
-     */
-    get credentialedRedirect() {
-        return IModelApp.mapLayerFormatRegistry.restrictCredentialsToTrustedOrigins ? "error" : undefined;
-    }
     /** Detects that a request carrying browser credentials (see [[includeUserCredentials]]) was transparently
      * redirected to a different origin, and reports or logs that origin.
      *
      * This is a **best-effort, after-the-fact** signal used only while
      * [[MapLayerFormatRegistry.restrictCredentialsToTrustedOrigins]] is disabled, where credentialed requests
-     * still follow redirects (see [[credentialedRedirect]]). It cannot prevent the exposure — the credentials
+     * still follow redirects (see [[credentialedFetchRedirect]]). It cannot prevent the exposure — the credentials
      * have already been sent — and it does not fire at all when the destination denies CORS, because `fetch`
      * then rejects instead of returning a `Response`. The destination origin is never latched as SSO-succeeded,
      * so credentials do not keep flowing to it.
@@ -413,46 +423,32 @@ export class MapLayerImageryProvider {
         else
             this.logUntrustedOriginUse(response.url); // no-op when the restriction is enabled
     }
-    /** @internal */
-    async makeRequest(url, timeoutMs, authorization) {
-        let response;
-        let headers;
-        let hasCreds = false;
-        // Whether this request had basic-auth credentials of its own to offer. Requests carrying a caller-supplied
-        // `authorization` are excluded: those bypass the origin policy entirely.
-        const hasSettingsCreds = !authorization && !!this._settings.userName && !!this._settings.password;
-        if (authorization) {
-            headers = new Headers();
-            headers.set("Authorization", authorization);
-        }
-        else if (hasSettingsCreds) {
-            if (this.isCredentialsSharingAllowed(url)) {
-                hasCreds = true;
-                headers = new Headers();
-                this.setRequestAuthorization(headers);
-                if (!this.matchesSettingsUrlOrigin(url))
-                    this.logUntrustedOriginUse(url);
-            }
-        }
-        const includeCredentials = this.includeUserCredentials(url);
+    /** The default send for [[makeRequest]]: legacy redirect policy, NTLM/SSO handling and origin-trust
+     * checks for one request. The SSO retry never applies to sends a fetch handler modified.
+     */
+    async sendDefaultRequest(request, credentialed, hasCreds, hasSettingsCreds, timeoutMs) {
+        const requestUrl = request.url;
+        const includeCredentials = this.includeUserCredentials(requestUrl);
         const opts = {
             method: "GET",
-            headers,
+            headers: request.headers,
             credentials: includeCredentials ? "include" : undefined,
-            redirect: includeCredentials ? this.credentialedRedirect : undefined,
+            // Sends the handler modified may carry injected secrets: same redirect policy as credentialed ones.
+            redirect: (includeCredentials || credentialed) ? credentialedFetchRedirect() : undefined,
         };
         if (timeoutMs !== undefined)
             setRequestTimeout(opts, timeoutMs);
-        response = await fetch(url, opts);
-        if (includeCredentials)
-            this.checkCredentialedRedirect(url, response);
+        let rsp = await fetch(requestUrl, opts);
+        if (includeCredentials || credentialed)
+            this.checkCredentialedRedirect(requestUrl, rsp);
         // fetch follows redirects transparently, so all trust decisions below target the final
         // (post-redirect) URL reported by the response, not the URL we asked for.
-        const challengedUrl = response.url || url;
-        if (response.status === 401
-            && headersIncludeAuthMethod(response.headers, ["ntlm", "negotiate"])
+        const challengedUrl = rsp.url || requestUrl;
+        if (rsp.status === 401
+            && headersIncludeAuthMethod(rsp.headers, ["ntlm", "negotiate"])
             && !includeCredentials
-            && !hasCreds) {
+            && !hasCreds
+            && !credentialed) {
             if (this.isSsoAllowed(challengedUrl)) {
                 // Removed the previous headers and make sure "include" credentials is set
                 opts.headers = undefined;
@@ -462,8 +458,8 @@ export class MapLayerImageryProvider {
                 opts.redirect = IModelApp.mapLayerFormatRegistry.restrictCredentialsToTrustedOrigins ? "error" : undefined;
                 this.logUntrustedOriginUse(challengedUrl);
                 // We got a http 401 challenge, lets try again with SSO enabled (i.e. Windows Authentication)
-                response = await fetch(challengedUrl, opts);
-                if (response.status === 200) {
+                rsp = await fetch(challengedUrl, opts);
+                if (rsp.status === 200) {
                     this.recordSsoSucceeded(challengedUrl); // avoid going through 401 challenges over and over for this origin
                 }
             }
@@ -471,16 +467,69 @@ export class MapLayerImageryProvider {
                 this.reportBlockedOrigin(challengedUrl);
             }
         }
-        else if ((response.status === 401 || response.status === 403) && hasSettingsCreds && !this.isCredentialsSharingAllowed(challengedUrl)) {
+        else if ((rsp.status === 401 || rsp.status === 403) && hasSettingsCreds && !credentialed && !this.isCredentialsSharingAllowed(challengedUrl)) {
             // Some servers answer an unauthenticated request with 403 (Forbidden) rather than a 401 challenge;
             // since this request could not present its credentials to the challenging origin, either status most
-            // likely results from that. The permission is recomputed for the challenged URL rather than reusing the
+            // likely results from that (never on a send the handler modified: the handler classifies those).
+            // The permission is recomputed for the challenged URL rather than reusing the
             // decision made for the requested one: `fetch` strips the Authorization header when it follows a
             // cross-origin redirect, so a trusted request can still arrive unauthenticated at an untrusted origin,
             // and conversely a request that started out untrusted may end up at an origin that is trusted.
             this.reportBlockedOrigin(challengedUrl);
         }
-        return response;
+        return rsp;
+    }
+    /** @internal */
+    async makeRequest(url, timeoutMs, authorization) {
+        let headers;
+        let hasCreds = false;
+        // Whether this request had basic-auth credentials of its own to offer. Requests carrying a caller-supplied
+        // `authorization` are excluded: those bypass the origin policy entirely.
+        const hasSettingsCreds = !authorization && !!this._settings.userName && !!this._settings.password;
+        if (authorization) {
+            headers = new Headers();
+            headers.set("Authorization", authorization);
+        }
+        else if (hasSettingsCreds) {
+            if (this.isCredentialsSharingAllowed(url)) {
+                hasCreds = true;
+                headers = new Headers();
+                this.setRequestAuthorization(headers);
+                if (!this.matchesSettingsUrlOrigin(url))
+                    this.logUntrustedOriginUse(url);
+            }
+        }
+        // Route the request through the registered fetch handler (if any), which has full control: it may
+        // send a copy with other query parameters and headers, retry, or short-circuit. Handler failures propagate: the
+        // request must never silently degrade to an unauthenticated one.
+        try {
+            const { response, managedByHandler } = await fetchMapLayerRequest({
+                url,
+                formatId: this._settings.formatId,
+                layerUrl: this._settings.url,
+                layerProperties: this._settings.properties,
+                headers,
+                send: async (request, credentialed) => this.sendDefaultRequest(request, credentialed, hasCreds, hasSettingsCreds, timeoutMs),
+            });
+            if (managedByHandler)
+                this._handlerManagedResponses.add(response);
+            return response;
+        }
+        catch (error) {
+            if (error instanceof MapLayerAuthenticationFailedError)
+                this.reportAuthenticationFailure();
+            throw error;
+        }
+    }
+    /** Responses of [[makeRequest]] managed by a fetch handler (see [[MapLayerFetchResult.managedByHandler]]). */
+    _handlerManagedResponses = new WeakSet();
+    /** Returns true if a fetch handler returned this [[makeRequest]] response as its own, in which case the
+     * provider applies none of its default response handling (status-code or protocol-error classification):
+     * the handler reports authentication failures by throwing [[MapLayerAuthenticationFailedError]] instead.
+     * @internal
+     */
+    isManagedByHandler(response) {
+        return this._handlerManagedResponses.has(response);
     }
     /** Returns a map layer tile at the specified settings. */
     async loadTile(row, column, zoomLevel) {
@@ -515,16 +564,39 @@ export class MapLayerImageryProvider {
             headers = new Headers();
             this.setRequestAuthorization(headers);
         }
+        let response;
         try {
-            const includeCredentials = this.includeUserCredentials(url);
-            const response = await fetch(url, {
-                method: "GET",
+            ({ response } = await fetchMapLayerRequest({
+                url,
+                formatId: this._settings.formatId,
+                layerUrl: this._settings.url,
+                layerProperties: this._settings.properties,
                 headers,
-                credentials: includeCredentials ? "include" : undefined,
-                redirect: includeCredentials ? this.credentialedRedirect : undefined,
-            });
-            if (includeCredentials)
-                this.checkCredentialedRedirect(url, response);
+                send: async (request, credentialed) => {
+                    const requestUrl = request.url;
+                    const includeCredentials = this.includeUserCredentials(requestUrl);
+                    const rsp = await fetch(requestUrl, {
+                        method: "GET",
+                        headers: request.headers,
+                        credentials: includeCredentials ? "include" : undefined,
+                        redirect: (includeCredentials || credentialed) ? credentialedFetchRedirect() : undefined,
+                    });
+                    if (includeCredentials || credentialed)
+                        this.checkCredentialedRedirect(requestUrl, rsp);
+                    return rsp;
+                },
+            }));
+        }
+        catch (error) {
+            // Never degrade to an unauthenticated request or reject (getToolTip callers do not catch); skip the tooltip.
+            // The status transition the handler asked for still applies.
+            if (error instanceof MapLayerAuthenticationFailedError)
+                this.reportAuthenticationFailure();
+            if (this.hasFetchHandler)
+                Logger.logWarning(loggerCategory, `Map-layer fetch handler failed for tooltip request: ${BentleyError.getErrorMessage(error)}`);
+            return;
+        }
+        try {
             let text = await response.text();
             if (text) {
                 // Tooltip content (e.g. WMS GetFeatureInfo responses) is rendered as HTML downstream and may
@@ -646,11 +718,7 @@ export class MapLayerImageryProvider {
      * @internal
      */
     appendCustomParams(url) {
-        if (!this._settings.savedQueryParams && !this._settings.unsavedQueryParams)
-            return url;
-        let tmpUrl = appendQueryParams(url, this._settings.savedQueryParams);
-        tmpUrl = appendQueryParams(tmpUrl, this._settings.unsavedQueryParams);
-        return tmpUrl;
+        return appendQueryParams(url, this._settings.collectQueryParams());
     }
 }
 //# sourceMappingURL=MapLayerImageryProvider.js.map

package/lib/esm/tile/map/MapLayerImageryProvider.js.map

@@ -1 +1 @@
-{"version":3,"file":"MapLayerImageryProvider.js","sourceRoot":"","sources":["../../../../src/tile/map/MapLayerImageryProvider.ts"],"names":[],"mappings":"AAAA;;;+FAG+F;AAC/F;;GAEG;AAEH,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAuC,WAAW,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACzG,OAAO,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAC7C,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAExF,OAAO,EAAE,iBAAiB,EAAE,sBAAsB,EAA8H,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAE7N,OAAO,EAAE,wBAAwB,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAGzG,gBAAgB;AAChB,MAAM,aAAa,GAAG,GAAG,EAAE,gBAAgB,GAAG,GAAG,CAAC;AAClD,MAAM,WAAW,GAAG,OAAO,CAAC;AAC5B,MAAM,eAAe,GAAG,KAAK,CAAC;AAE9B;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;AAClE,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,CAAC,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACnG,CAAC;AAED;;GAEG;AACH,MAAM,CAAN,IAAY,6BASX;AATD,WAAY,6BAA6B;IACvC,mFAAK,CAAA;IACL,+FAAW,CAAA;IACX;;;;OAIG;IACH,uGAAe,CAAA;AACjB,CAAC,EATW,6BAA6B,KAA7B,6BAA6B,QASxC;AAWD;;;GAGG;AACH,MAAM,OAAgB,uBAAuB;IAoJZ;IAA4C;IAnJjE,2BAA2B,GAAG,KAAK,CAAC;IAC9B,eAAe,GAAG,IAAI,OAAO,EAA+C,CAAC;IAE7F,gBAAgB;IACC,qBAAqB,GAAG,IAAI,uBAAuB,EAAE,CAAC;IAEvE,gBAAgB;IACC,uBAAuB,GAAG,IAAI,sBAAsB,EAAE,CAAC;IAExE,gBAAgB;IACR,OAAO,GAAG,6BAA6B,CAAC,KAAK,CAAC;IAEtD,gBAAgB;IACC,eAAe,GAAG,IAAI,GAAG,EAAU,CAAC;IAErD;;;;;OAKG;IACH,IAAW,cAAc,KAA4B,OAAO,CAAC,GAAG,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IAExF;;;;;OAKG;IACc,oBAAoB,GAAG,IAAI,GAAG,EAAU,CAAC;IAE1D;;;;;;OAMG;IACO,sBAAsB,CAAC,GAAW;QAC1C,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QACjC,OAAO,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IACjG,CAAC;IAED;;;OAGG;IACO,kBAAkB,CAAC,GAAW;QACtC,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,MAAM,KAAK,SAAS;YACtB,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC1C,CAAC;IAED,gBAAgB;IACG,uBAAuB,GAAG,IAAI,OAAO,EAAc,CAAC;IAEvE,gBAAgB;IACN,oBAAoB,CAA0B;IAExD;;;OAGG;IACH,IAAW,MAAM,KAAK,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAE5C;;;;OAIG;IACH,IAAW,sBAAsB,KAAc,OAAO,KAAK,CAAC,CAAC,CAAC;IAE9D;;;;;;OAMG;IACI,WAAW;QAChB,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;QAC7B,IAAI,CAAC,SAAS,CAAC,6BAA6B,CAAC,KAAK,CAAC,CAAC;IACtD,CAAC;IAED,gBAAgB;IAChB,IAAW,QAAQ,KAAa,OAAO,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAElG,gBAAgB;IAChB,IAAW,iBAAiB,KAAK,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IAE5D,IAAW,gBAAgB,KAAa,OAAO,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC;IAE9E,IAAW,gBAAgB,KAAa,OAAO,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC;IAE9E,gBAAgB;IAChB,IAAW,eAAe,KAAK,OAAO,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAE9D,IAAW,uBAAuB,KAAc,OAAO,KAAK,CAAC,CAAC,CAAC;IAE/D,gBAAgB;IAChB,IAAW,yBAAyB,KAAK,OAAO,KAAK,CAAC,CAAC,CAAC;IAEhD,WAAW,CAAqB;IAExC;;;;OAIG;IACK,MAAM,CAAC,YAAY,CAAC,KAAoC;QAC9D,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;YACxD,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YAC1D,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;YAC5D,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACxE,CAAC;IAED;;;OAGG;IACH,IAAW,UAAU;QACnB,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED,IAAW,UAAU,CAAC,KAAoC;QACxD,IAAI,CAAC,WAAW,GAAG,uBAAuB,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IACrF,CAAC;IAED;;;OAGG;IACgB,uBAAuB,GAAG,CAAC,CAAC;IAE/C;;;OAGG;IACgB,uBAAuB,GAAG,EAAE,CAAC;IAEhD,gBAAgB;IAChB,IAAc,mBAAmB,KAAK,OAAO,IAAI,CAAC,CAAC,CAAC;IAEpD,YAA+B,SAAgC,EAAY,gBAAyB;QAArE,cAAS,GAAT,SAAS,CAAuB;QAAY,qBAAgB,GAAhB,gBAAgB,CAAS;QAClG,IAAI,CAAC,qBAAqB,GAAG,IAAI,uBAAuB,EAAE,CAAC;QAC3D,IAAI,CAAC,uBAAuB,GAAG,IAAI,sBAAsB,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IACxE,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,UAAU;QACrB,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,uBAAuB,CAAC,CAAC,IAAI,CAAC,CAAC,QAAiC,EAAE,EAAE;YAC3F,IAAI,QAAQ,KAAK,SAAS;gBACxB,IAAI,CAAC,gBAAgB,GAAG,QAAQ,CAAC,IAAkB,CAAC;QACxD,CAAC,CAAC,CAAC;IACL,CAAC;IAID,IAAW,YAAY,KAAsB,OAAO,IAAI,CAAC,yBAAyB,CAAC,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC;IAEjJ,kGAAkG;IAC3F,YAAY,CAAC,MAAwB,EAAE,SAAyB,IAAU,CAAC;IAElF;;;;;OAKG;IACI,KAAK,CAAC,eAAe,CAAC,KAAuB,EAAE,EAAkB;QACtE,4DAA4D;QAC5D,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;IACvD,CAAC;IAED,gBAAgB;IACN,gBAAgB,CAAc;IAExC,gBAAgB;IAChB,IAAW,2BAA2B,KAAa,OAAO,IAAI,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAEpH,gBAAgB;IACN,KAAK,CAAC,qBAAqB,CAAC,KAAqB,IAAsB,OAAO,IAAI,CAAC,CAAC,CAAC;IAE/F,gBAAgB;IACT,oBAAoB,CAAC,MAAc;QACxC,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC;QACpC,OAAO,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC,2BAA2B,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,2BAA2B,CAAC,UAAU,CAAC,CAAC,CAAC;IAClJ,CAAC;IAED;;;;;;OAMG;IACO,iBAAiB,CAAC,MAAc,EAAE,eAA6C;QACvF,eAAe,CAAC,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC;IACrD,CAAC;IAED,gBAAgB;IACT,gBAAgB,CAAC,IAAoB,EAAE,eAA6C;QACzF,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,gBAAgB,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,mBAAmB,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;YAC3J,IAAI,CAAC,OAAO,EAAE,CAAC;YACf,OAAO;QACT,CAAC;QACD,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IACvD,CAAC;IAED;;;;;;;OAOG;IACI,KAAK,CAAC,UAAU,CAAC,OAAiB,EAAE,MAAc,EAAE,MAAoB,EAAE,IAAwB;QACvG,IAAI,eAAe,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,MAAM,CAAC,sBAAsB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAC/D,OAAO,CAAC,IAAI,CAAC,WAAW,MAAM,CAAC,WAAW,UAAU,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,UAAU,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC;QAC9H,CAAC;IACH,CAAC;IAED,gBAAgB;IACT,KAAK,CAAC,cAAc,CAAC,YAAmC,EAAE,OAAe,EAAE,MAAoB,EAAE,KAAyB,EAAE,IAAe,EAAE,QAAgC;QAClL,8DAA8D;QAC9D,YAAY,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC;IAED,gBAAgB;IACR,QAAQ,CAAC,QAAyB;IAC1C,CAAC;IAED,gBAAgB;IACN,KAAK,CAAC,wBAAwB,CAAC,YAAsB,EAAE,SAAiB;QAChF,MAAM,WAAW,GAAG,MAAM,YAAY,CAAC,WAAW,EAAE,CAAC;QACrD,MAAM,SAAS,GAAe,IAAI,UAAU,CAAC,WAAW,CAAC,CAAC;QAC1D,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC;YACxC,OAAO,SAAS,CAAC;QACnB,IAAI,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC;YACrD,OAAO,SAAS,CAAC;QAEnB,MAAM,WAAW,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,WAAW,EAAE,CAAC;QAC5E,IAAI,WAA0C,CAAC;QAC/C,IAAI,WAAW,EAAE,CAAC;YAChB,mFAAmF;YACnF,+EAA+E;YAC/E,IAAI,WAAW,CAAC,QAAQ,CAAC,YAAY,CAAC;gBACpC,WAAW,GAAG,iBAAiB,CAAC,IAAI,CAAC;iBAClC,IAAI,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC;gBACxC,WAAW,GAAG,iBAAiB,CAAC,GAAG,CAAC;QACxC,CAAC;QAED,IAAI,WAAW,KAAK,SAAS;YAC3B,OAAO,IAAI,WAAW,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QAEjD,MAAM,CAAC,KAAK,EAAE,2BAA2B,CAAC,CAAC;QAC3C,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;OAIG;IACI,SAAS,CAAC,MAAqC;QACpD,IAAI,IAAI,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;YAC5B,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;YAC7B,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;YACtB,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAED;;OAEG;IACO,eAAe,CAAC,UAAyC,IAAI,CAAC;IAExE,gBAAgB;IACN,uBAAuB,CAAC,OAAgB;QAChD,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC;YACvD,qBAAqB,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;IAED;;;OAGG;IACO,wBAAwB,CAAC,GAAW;QAC5C,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QACjC,OAAO,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC7E,CAAC;IAED;;;;;;OAMG;IACO,2BAA2B,CAAC,GAAW;QAC/C,OAAO,SAAS,CAAC,sBAAsB,CAAC,2BAA2B,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC/F,CAAC;IAED;;;;OAIG;IACO,YAAY,CAAC,GAAW;QAChC,OAAO,SAAS,CAAC,sBAAsB,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IAC5D,CAAC;IAED,gBAAgB;IACT,KAAK,CAAC,eAAe,CAAC,GAAW,EAAE,SAAkB,EAAE,aAAsB;QAElF,0EAA0E;QAC1E,uEAAuE;QACvE,IAAI,CAAC,IAAI,CAAC,oBAAoB;YAC5B,IAAI,CAAC,oBAAoB,GAAI,IAAI,OAAO,CAAO,CAAC,OAAY,EAAE,EAAE,CAAC,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,GAAE,EAAE,CAAA,OAAO,EAAE,CAAC,CAAC,CAAC;;YAEtH,MAAM,IAAI,CAAC,oBAAoB,CAAC;QAElC,IAAI,QAA4B,CAAC;QACjC,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;QACnE,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,uBAAuB,CAAC,UAAU,EAAE,CAAC;QAC5C,CAAC;QAED,IAAI,QAAQ,KAAK,SAAS;YACxB,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAEvC,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;;;;OAKG;IACO,mBAAmB,CAAC,GAAW;QACvC,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC;QACxC,MAAM,WAAW,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACtD,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAEjC,IAAI,IAAI,CAAC,OAAO,KAAK,6BAA6B,CAAC,eAAe;YAChE,IAAI,CAAC,SAAS,CAAC,6BAA6B,CAAC,eAAe,CAAC,CAAC;aAC3D,IAAI,WAAW;YAClB,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAG,iDAAiD;IAC9F,CAAC;IAED;;;;;OAKG;IACO,qBAAqB,CAAC,GAAW;QACzC,SAAS,CAAC,sBAAsB,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC;IAC9D,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,IAAc,oBAAoB;QAChC,OAAO,SAAS,CAAC,sBAAsB,CAAC,mCAAmC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IACpG,CAAC;IAED;;;;;;;;;;OAUG;IACO,yBAAyB,CAAC,YAAoB,EAAE,QAAkB;QAC1E,MAAM,WAAW,GAAG,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC/C,IAAI,CAAC,QAAQ,CAAC,GAAG,IAAI,WAAW,KAAK,SAAS,IAAI,WAAW,KAAK,YAAY,CAAC,YAAY,CAAC;YAC1F,OAAO;QAET,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC;YAClC,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;;YAEvC,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAG,wCAAwC;IACxF,CAAC;IAED,gBAAgB;IACT,KAAK,CAAC,WAAW,CAAC,GAAW,EAAE,SAAkB,EAAE,aAAsB;QAE9E,IAAI,QAA4B,CAAC;QAEjC,IAAI,OAA4B,CAAC;QACjC,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,2GAA2G;QAC3G,yEAAyE;QACzE,MAAM,gBAAgB,GAAG,CAAC,aAAa,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;QAClG,IAAI,aAAa,EAAE,CAAC;YAClB,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;YACxB,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,aAAa,CAAC,CAAC;QAC9C,CAAC;aAAM,IAAI,gBAAgB,EAAE,CAAC;YAC5B,IAAI,IAAI,CAAC,2BAA2B,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC1C,QAAQ,GAAG,IAAI,CAAC;gBAChB,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;gBACxB,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC;gBACtC,IAAI,CAAC,IAAI,CAAC,wBAAwB,CAAC,GAAG,CAAC;oBACrC,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC;YACpC,CAAC;QACH,CAAC;QACD,MAAM,kBAAkB,GAAG,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC;QAC5D,MAAM,IAAI,GAAgB;YACxB,MAAM,EAAE,KAAK;YACb,OAAO;YACP,WAAW,EAAE,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;YACvD,QAAQ,EAAE,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS;SACrE,CAAC;QAEF,IAAI,SAAS,KAAK,SAAS;YACzB,iBAAiB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAErC,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAElC,IAAI,kBAAkB;YACpB,IAAI,CAAC,yBAAyB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAEhD,uFAAuF;QACvF,0EAA0E;QAC1E,MAAM,aAAa,GAAG,QAAQ,CAAC,GAAG,IAAI,GAAG,CAAC;QAE1C,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;eAClB,wBAAwB,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;eACjE,CAAC,kBAAkB;eACnB,CAAC,QAAQ,EAChB,CAAC;YACD,IAAI,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,EAAE,CAAC;gBACrC,0EAA0E;gBAC1E,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC;gBACzB,IAAI,CAAC,WAAW,GAAG,SAAS,CAAC;gBAC7B,mGAAmG;gBACnG,iGAAiG;gBACjG,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC,sBAAsB,CAAC,mCAAmC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;gBAC3G,IAAI,CAAC,qBAAqB,CAAC,aAAa,CAAC,CAAC;gBAE1C,6FAA6F;gBAC7F,QAAQ,GAAG,MAAM,KAAK,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;gBAC5C,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBAC5B,IAAI,CAAC,kBAAkB,CAAC,aAAa,CAAC,CAAC,CAAI,mEAAmE;gBAChH,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,mBAAmB,CAAC,aAAa,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC;aAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC,IAAI,gBAAgB,IAAI,CAAC,IAAI,CAAC,2BAA2B,CAAC,aAAa,CAAC,EAAE,CAAC;YACxI,mGAAmG;YACnG,qGAAqG;YACrG,wGAAwG;YACxG,iGAAiG;YACjG,uGAAuG;YACvG,+FAA+F;YAC/F,IAAI,CAAC,mBAAmB,CAAC,aAAa,CAAC,CAAC;QAC1C,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,0DAA0D;IACnD,KAAK,CAAC,QAAQ,CAAC,GAAW,EAAE,MAAc,EAAE,SAAiB;QAElE,IAAI,CAAC;YACH,MAAM,OAAO,GAAW,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;YACxE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;gBACtB,OAAO,SAAS,CAAC;YAEnB,MAAM,YAAY,GAAa,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;YAEnE,IAAI,CAAC,IAAI,CAAC,2BAA2B,EAAE,CAAC;gBACtC,IAAI,CAAC,2BAA2B,GAAG,IAAI,CAAC;YAC1C,CAAC;YAED,OAAO,MAAM,IAAI,CAAC,wBAAwB,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;QACtE,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,IAAI,KAAK,EAAE,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC1B,IAAI,CAAC,SAAS,CAAC,6BAA6B,CAAC,WAAW,CAAC,CAAC;gBAE1D,0EAA0E;gBAC1E,kFAAkF;gBAClF,yCAAyC;gBACzC,IAAI,IAAI,CAAC,2BAA2B,EAAE,CAAC;oBACrC,MAAM,GAAG,GAAG,SAAS,CAAC,YAAY,CAAC,kBAAkB,CAAC,gDAAgD,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;oBAC5I,SAAS,CAAC,aAAa,CAAC,aAAa,CAAC,IAAI,oBAAoB,CAAC,qBAAqB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;gBACtG,CAAC;YAEH,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAED,gBAAgB;IACN,KAAK,CAAC,cAAc,CAAC,OAAiB,EAAE,GAAW;QAC3D,IAAI,OAA4B,CAAC;QACjC,IAAI,IAAI,CAAC,2BAA2B,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1C,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;YACxB,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC;QACxC,CAAC;QAED,IAAI,CAAC;YACH,MAAM,kBAAkB,GAAG,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC;YAC5D,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAChC,MAAM,EAAE,KAAK;gBACb,OAAO;gBACP,WAAW,EAAE,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;gBACvD,QAAQ,EAAE,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS;aACrE,CAAC,CAAC;YACH,IAAI,kBAAkB;gBACpB,IAAI,CAAC,yBAAyB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YAChD,IAAI,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACjC,IAAI,IAAI,EAAE,CAAC;gBACT,6FAA6F;gBAC7F,yFAAyF;gBACzF,sGAAsG;gBACtG,IAAI,CAAC,IAAI,CAAC,2BAA2B,CAAC,QAAQ,CAAC,GAAG,IAAI,GAAG,CAAC;oBACxD,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;gBAC1B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;QACT,CAAC;IACH,CAAC;IAED,gBAAgB;IACT,kBAAkB,CAAC,QAAoB;QAC5C,IAAI,CAAC,IAAI,CAAC,gBAAgB;YACxB,OAAO,KAAK,CAAC;QACf,IAAI,QAAQ,CAAC,MAAM,KAAK,IAAI,CAAC,gBAAgB,CAAC,MAAM;YAClD,OAAO,KAAK,CAAC;QACf,KAAK,IAAI,CAAC,GAAW,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;YACrD,IAAI,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7C,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;OAIG;IACI,YAAY,CAAC,SAAiB;QACnC,OAAO,SAAS,GAAG,WAAW,GAAG,KAAK,CAAC;IACzC,CAAC;IAED;;;;OAIG;IACI,YAAY,CAAC,QAAgB;QAClC,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,QAAQ,CAAC,GAAG,IAAI,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC;QACtF,OAAO,CAAC,GAAG,WAAW,GAAG,KAAK,CAAC;IACjC,CAAC;IAED;;;;OAIG;IACI,cAAc,CAAC,KAAa;QACjC,OAAO,KAAK,CAAC,gBAAgB,CAAC,KAAK,GAAG,WAAW,CAAC,CAAC;IACrD,CAAC;IAED;;;;OAIG;IACI,cAAc,CAAC,KAAa;QACjC,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,WAAW,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QACvE,OAAO,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;IACnC,CAAC;IAED;;;;;;;;OAQG;IACI,iBAAiB,CAAC,GAAW,EAAE,MAAc,EAAE,SAAiB;QACrE,oGAAoG;QACpG,wEAAwE;QACxE,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC;QACxC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,GAAG,GAAG,CAAC;QAEpC,MAAM,aAAa,GAAG,GAAG,GAAG,CAAC,CAAC,QAAQ,GAAG,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC;QACzD,MAAM,EAAE,GAAG,GAAG,GAAG,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC,CAAC;QACvD,MAAM,cAAc,GAAG,IAAI,GAAG,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC;QAEvF,MAAM,cAAc,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC;QAC5E,MAAM,EAAE,GAAG,GAAG,GAAG,CAAC,OAAO,GAAG,OAAO,CAAC,CAAC;QACrC,MAAM,WAAW,GAAG,IAAI,GAAG,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC;QAEpF,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,WAAW,EAAE,cAAc,EAAE,CAAC;IACxE,CAAC;IAED;;;;;;OAMG;IACI,iBAAiB,CAAC,GAAW,EAAE,MAAc,EAAE,SAAiB;QACrE,MAAM,cAAc,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;QAEtE,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC;QAC7D,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,cAAc,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,cAAc,CAAC,CAAC;QAChE,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;QAE1D,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IACtC,CAAC;IAED,gBAAgB;IACT,uBAAuB,CAAC,GAAW,EAAE,MAAc,EAAE,SAAiB;QAC3E,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;QAClE,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IACrI,CAAC;IAED,gBAAgB;IACT,2BAA2B,CAAC,GAAW,EAAE,MAAc,EAAE,SAAiB,EAAE,mBAA4B;QAC7G,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;QAClE,OAAO,IAAI,CAAC,uBAAuB,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAC;IAEvE,CAAC;IAED,gBAAgB;IACT,uBAAuB,CAAC,UAAuB,EAAE,mBAA4B;QAElF,IAAI,mBAAmB,EAAE,CAAC;YACxB,OAAO,GAAG,UAAU,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACvK,CAAC;aAAM,CAAC;YACN,OAAO,GAAG,UAAU,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACvK,CAAC;IACH,CAAC;IAED;;OAEG;IACO,kBAAkB,CAAC,GAAW;QACtC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,gBAAgB,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,kBAAkB;YACxE,OAAO,GAAG,CAAC;QAEb,IAAI,MAAM,GAAG,iBAAiB,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;QACrE,MAAM,GAAG,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;QACtE,OAAO,MAAM,CAAC;IAChB,CAAC;CACF","sourcesContent":["/*---------------------------------------------------------------------------------------------\r\n* Copyright (c) Bentley Systems, Incorporated. All rights reserved.\r\n* See LICENSE.md in the project root for license terms and full copyright notice.\r\n*--------------------------------------------------------------------------------------------*/\r\n/** @packageDocumentation\r\n * @module MapLayers\r\n */\r\n\r\nimport { assert, BeEvent } from \"@itwin/core-bentley\";\r\nimport { Cartographic, ImageMapLayerSettings, ImageSource, ImageSourceFormat } from \"@itwin/core-common\";\r\nimport { Angle } from \"@itwin/core-geometry\";\r\nimport { IModelApp } from \"../../IModelApp\";\r\nimport { NotifyMessageDetails, OutputMessagePriority } from \"../../NotificationManager\";\r\nimport { ScreenViewport } from \"../../Viewport\";\r\nimport { appendQueryParams, GeographicTilingScheme, ImageryMapTile, ImageryMapTileTree, MapCartoRectangle, MapFeatureInfoOptions, MapLayerFeatureInfo, MapTilingScheme, QuadId, WebMercatorTilingScheme } from \"../internal\";\r\nimport { HitDetail } from \"../../HitDetail\";\r\nimport { headersIncludeAuthMethod, setBasicAuthorization, setRequestTimeout } from \"../../request/utils\";\r\nimport { DecorateContext } from \"../../ViewContext\";\r\n\r\n/** @internal */\r\nconst tileImageSize = 256, untiledImageSize = 256;\r\nconst earthRadius = 6378137;\r\nconst doDebugToolTips = false;\r\n\r\n/** Escapes HTML metacharacters so the text renders literally when assigned to `innerHTML`.\r\n * Use for any server- or user-supplied string that ends up in the map tooltip, which is rendered\r\n * as HTML by [[MapLayerTileTreeReference.getToolTip]].\r\n * @internal\r\n */\r\nexport function escapeHtml(text: string): string {\r\n  return text.replace(/[&<>\"']/g, (c) => `&#${c.charCodeAt(0)};`);\r\n}\r\n\r\n/** Returns the origin (scheme + host + port) of the given URL, or undefined if it cannot be parsed or does\r\n * not denote a distinct network origin.\r\n *\r\n * Only `http:` and `https:` URLs yield an origin. Every other scheme is rejected because opaque URLs\r\n * — `file:`, `data:`, `about:`, `blob:null`, and the custom protocols Electron hosts commonly register —\r\n * all serialize to the literal string `\"null\"`. Comparing those would make unrelated URLs look same-origin,\r\n * so a single trusted entry could unlock all of them. Callers use this for credential-trust decisions, and\r\n * returning `undefined` keeps those decisions fail-closed.\r\n * @internal\r\n */\r\nexport function tryGetOrigin(url: string): string | undefined {\r\n  let parsed: URL;\r\n  try {\r\n    parsed = new URL(url);\r\n  } catch {\r\n    return undefined;\r\n  }\r\n\r\n  return (parsed.protocol === \"http:\" || parsed.protocol === \"https:\") ? parsed.origin : undefined;\r\n}\r\n\r\n/** The status of the map layer imagery provider that lets you know if authentication is needed to request tiles.\r\n * @public\r\n */\r\nexport enum MapLayerImageryProviderStatus {\r\n  Valid,\r\n  RequireAuth,\r\n  /** A request received an authentication challenge, but credentials were withheld because the request origin\r\n   * is not trusted (see [[MapLayerFormatRegistry.restrictCredentialsToTrustedOrigins]]).\r\n   * The blocked origins are available via [[MapLayerImageryProvider.blockedOrigins]].\r\n   * @beta\r\n   */\r\n  UntrustedOrigin,\r\n}\r\n\r\n/** @internal */\r\nexport interface WGS84Extent\r\n{\r\n  longitudeLeft: number;\r\n  longitudeRight: number;\r\n  latitudeTop: number;\r\n  latitudeBottom: number;\r\n}\r\n\r\n/** Abstract class for map layer imagery providers.\r\n * Map layer imagery providers request and provide tile images and other data. Each map layer from a separate source needs its own imagery provider object.\r\n * @beta\r\n */\r\nexport abstract class MapLayerImageryProvider {\r\n  protected _hasSuccessfullyFetchedTile = false;\r\n  public readonly onStatusChanged = new BeEvent<(provider: MapLayerImageryProvider) => void>();\r\n\r\n  /** @internal */\r\n  private readonly _mercatorTilingScheme = new WebMercatorTilingScheme();\r\n\r\n  /** @internal */\r\n  private readonly _geographicTilingScheme = new GeographicTilingScheme();\r\n\r\n  /** @internal */\r\n  private _status = MapLayerImageryProviderStatus.Valid;\r\n\r\n  /** @internal */\r\n  private readonly _blockedOrigins = new Set<string>();\r\n\r\n  /** Origins of requests for which credentials were withheld because they are not trusted\r\n   * (see [[MapLayerFormatRegistry.restrictCredentialsToTrustedOrigins]]).\r\n   * Populated when [[status]] transitions to [[MapLayerImageryProviderStatus.UntrustedOrigin]];\r\n   * [[onStatusChanged]] is raised again each time a new origin is added. Cleared by [[resetStatus]].\r\n   * @beta\r\n   */\r\n  public get blockedOrigins(): ReadonlyArray<string> { return [...this._blockedOrigins]; }\r\n\r\n  /** Origins for which a previous SSO handshake (i.e. Windows Authentication) succeeded.\r\n   * Browser credentials are only included for subsequent requests targeting these origins,\r\n   * so that a successful handshake with one host does not leak credentials to other hosts\r\n   * this provider may contact.\r\n   * @internal\r\n   */\r\n  private readonly _ssoSucceededOrigins = new Set<string>();\r\n\r\n  /** Returns true if browser credentials should be included for the given URL because a previous\r\n   * SSO handshake succeeded for its origin AND the origin is still allowed by the current policy\r\n   * (see [[MapLayerFormatRegistry.isSsoAllowed]]). Re-checking the policy ensures a handshake recorded\r\n   * while enforcement was disabled — or before an origin was removed from\r\n   * [[MapLayerFormatRegistry.trustedCredentialsOrigins]] — does not keep latching credentials on.\r\n   * @internal\r\n   */\r\n  protected includeUserCredentials(url: string): boolean {\r\n    const origin = tryGetOrigin(url);\r\n    return origin !== undefined && this._ssoSucceededOrigins.has(origin) && this.isSsoAllowed(url);\r\n  }\r\n\r\n  /** Records that an SSO handshake succeeded for the given URL's origin, so subsequent requests\r\n   * to that origin include browser credentials without going through another 401 challenge.\r\n   * @internal\r\n   */\r\n  protected recordSsoSucceeded(url: string): void {\r\n    const origin = tryGetOrigin(url);\r\n    if (origin !== undefined)\r\n      this._ssoSucceededOrigins.add(origin);\r\n  }\r\n\r\n  /** @internal */\r\n  protected readonly onFirstRequestCompleted = new BeEvent<() => void>();\r\n\r\n  /** @internal */\r\n  protected _firstRequestPromise: Promise<void>|undefined;\r\n\r\n  /**\r\n   * The status of the map layer imagery provider.\r\n   * @public @preview\r\n   */\r\n  public get status() { return this._status; }\r\n\r\n  /** Determine if this provider supports map feature info.\r\n   * For example, this can be used to show the map feature info tool only when a provider is registered to support it.\r\n   * @returns true if provider supports map feature info else return false.\r\n   * @public\r\n   */\r\n  public get supportsMapFeatureInfo(): boolean { return false; }\r\n\r\n  /** Reset the provider's status to [[MapLayerImageryProviderStatus.Valid]] and clear the list of\r\n   * [[blockedOrigins]] accumulated while in the [[MapLayerImageryProviderStatus.UntrustedOrigin]] state.\r\n   * Raises [[onStatusChanged]] if the status actually changes.\r\n   * Typically called after the user has provided credentials or the application has updated\r\n   * [[MapLayerFormatRegistry.trustedCredentialsOrigins]], so that subsequent requests are re-attempted.\r\n   * @beta\r\n   */\r\n  public resetStatus() {\r\n    this._blockedOrigins.clear();\r\n    this.setStatus(MapLayerImageryProviderStatus.Valid);\r\n  }\r\n\r\n  /** @internal */\r\n  public get tileSize(): number { return this._usesCachedTiles ? tileImageSize : untiledImageSize; }\r\n\r\n  /** @internal */\r\n  public get maximumScreenSize() { return 2 * this.tileSize; }\r\n\r\n  public get minimumZoomLevel(): number { return this.defaultMinimumZoomLevel; }\r\n\r\n  public get maximumZoomLevel(): number { return this.defaultMaximumZoomLevel; }\r\n\r\n  /** @internal */\r\n  public get usesCachedTiles() { return this._usesCachedTiles; }\r\n\r\n  public get mutualExclusiveSubLayer(): boolean { return false; }\r\n\r\n  /** @internal */\r\n  public get useGeographicTilingScheme() { return false; }\r\n\r\n  private _cartoRange?: MapCartoRectangle;\r\n\r\n  /** Validates a cartographic range for NaN and infinite values.\r\n   * @param range The cartographic range to validate.\r\n   * @returns true if the range is valid, false otherwise.\r\n   * @internal\r\n   */\r\n  private static isRangeValid(range: MapCartoRectangle | undefined): boolean {\r\n    if (!range) {\r\n      return false;\r\n    }\r\n\r\n    return !Number.isNaN(range.low.x) && !Number.isNaN(range.low.y) &&\r\n           !Number.isNaN(range.high.x) && !Number.isNaN(range.high.y) &&\r\n           Number.isFinite(range.low.x) && Number.isFinite(range.low.y) &&\r\n           Number.isFinite(range.high.x) && Number.isFinite(range.high.y);\r\n  }\r\n\r\n  /** Gets or sets the cartographic range for this provider.\r\n   * When setting, if the range is invalid (contains NaN or infinite values), it will be stored as undefined.\r\n   * When getting, returns undefined if the range was set to an invalid value.\r\n   */\r\n  public get cartoRange(): MapCartoRectangle | undefined {\r\n    return this._cartoRange;\r\n  }\r\n\r\n  public set cartoRange(range: MapCartoRectangle | undefined) {\r\n    this._cartoRange = MapLayerImageryProvider.isRangeValid(range) ? range : undefined;\r\n  }\r\n\r\n  /**\r\n   * This value is used internally for various computations, this should not get overriden.\r\n   * @internal\r\n   */\r\n  protected readonly defaultMinimumZoomLevel = 0;\r\n\r\n  /**\r\n   * This value is used internally for various computations, this should not get overriden.\r\n   * @internal\r\n   */\r\n  protected readonly defaultMaximumZoomLevel = 22;\r\n\r\n  /** @internal */\r\n  protected get _filterByCartoRange() { return true; }\r\n\r\n  constructor(protected readonly _settings: ImageMapLayerSettings, protected _usesCachedTiles: boolean) {\r\n    this._mercatorTilingScheme = new WebMercatorTilingScheme();\r\n    this._geographicTilingScheme = new GeographicTilingScheme(2, 1, true);\r\n  }\r\n\r\n  /**\r\n   * Initialize the provider by loading the first tile at its default maximum zoom level.\r\n   * @beta\r\n   */\r\n  public async initialize(): Promise<void> {\r\n    this.loadTile(0, 0, this.defaultMaximumZoomLevel).then((tileData: ImageSource | undefined) => { // eslint-disable-line @typescript-eslint/no-floating-promises\r\n      if (tileData !== undefined)\r\n        this._missingTileData = tileData.data as Uint8Array;\r\n    });\r\n  }\r\n\r\n  public abstract constructUrl(row: number, column: number, zoomLevel: number): Promise<string>;\r\n\r\n  public get tilingScheme(): MapTilingScheme { return this.useGeographicTilingScheme ? this._geographicTilingScheme : this._mercatorTilingScheme; }\r\n\r\n  /** @deprecated in 5.0 - might be removed in next major version. Use [addAttributions] instead. */\r\n  public addLogoCards(_cards: HTMLTableElement, _viewport: ScreenViewport): void { }\r\n\r\n  /**\r\n   * Add attribution logo cards for the data supplied by this provider to the [[Viewport]]'s logo div.\r\n   * @param _cards Logo cards HTML element that may contain custom data attributes.\r\n   * @param _viewport Viewport to add logo cards to.\r\n   * @beta\r\n   */\r\n  public async addAttributions(cards: HTMLTableElement, vp: ScreenViewport): Promise<void> {\r\n    // eslint-disable-next-line @typescript-eslint/no-deprecated\r\n    return Promise.resolve(this.addLogoCards(cards, vp));\r\n  }\r\n\r\n  /** @internal */\r\n  protected _missingTileData?: Uint8Array;\r\n\r\n  /** @internal */\r\n  public get transparentBackgroundString(): string { return this._settings.transparentBackground ? \"true\" : \"false\"; }\r\n\r\n  /** @internal */\r\n  protected async _areChildrenAvailable(_tile: ImageryMapTile): Promise<boolean> { return true; }\r\n\r\n  /** @internal */\r\n  public getPotentialChildIds(quadId: QuadId): QuadId[] {\r\n    const childLevel = quadId.level + 1;\r\n    return quadId.getChildIds(this.tilingScheme.getNumberOfXChildrenAtLevel(childLevel), this.tilingScheme.getNumberOfYChildrenAtLevel(childLevel));\r\n  }\r\n\r\n  /**\r\n   * Get child IDs of a quad and generate tiles based on these child IDs.\r\n   * See [[ImageryTileTree._loadChildren]] for the definition of `resolveChildren` where this function is commonly called.\r\n   * @param quadId quad to generate child IDs for.\r\n   * @param resolveChildren Function that creates tiles from child IDs.\r\n   * @beta\r\n   */\r\n  protected _generateChildIds(quadId: QuadId, resolveChildren: (childIds: QuadId[]) => void) {\r\n    resolveChildren(this.getPotentialChildIds(quadId));\r\n  }\r\n\r\n  /** @internal */\r\n  public generateChildIds(tile: ImageryMapTile, resolveChildren: (childIds: QuadId[]) => void) {\r\n    if (tile.depth >= this.maximumZoomLevel || (undefined !== this.cartoRange && this._filterByCartoRange && !this.cartoRange.intersectsRange(tile.rectangle))) {\r\n      tile.setLeaf();\r\n      return;\r\n    }\r\n    this._generateChildIds(tile.quadId, resolveChildren);\r\n  }\r\n\r\n  /**\r\n   * Get tooltip text for a specific quad and cartographic position.\r\n   * @param strings List of strings to contain tooltip text.\r\n   * @param quadId Quad ID to get tooltip for.\r\n   * @param _carto Cartographic that may be used to retrieve and/or format tooltip text.\r\n   * @param tree Tree associated with the quad to get the tooltip for.\r\n   * @internal\r\n   */\r\n  public async getToolTip(strings: string[], quadId: QuadId, _carto: Cartographic, tree: ImageryMapTileTree): Promise<void> {\r\n    if (doDebugToolTips) {\r\n      const range = quadId.getLatLongRangeDegrees(tree.tilingScheme);\r\n      strings.push(`QuadId: ${quadId.debugString}, Lat: ${range.low.x} - ${range.high.x} Long: ${range.low.y} - ${range.high.y}`);\r\n    }\r\n  }\r\n\r\n  /** @internal */\r\n  public async getFeatureInfo(featureInfos: MapLayerFeatureInfo[], _quadId: QuadId, _carto: Cartographic, _tree: ImageryMapTileTree, _hit: HitDetail, _options?: MapFeatureInfoOptions): Promise<void> {\r\n    // default implementation; simply return an empty feature info\r\n    featureInfos.push({ layerName: this._settings.name });\r\n  }\r\n\r\n  /** @internal */\r\n  public  decorate(_context: DecorateContext): void {\r\n  }\r\n\r\n  /** @internal */\r\n  protected async getImageFromTileResponse(tileResponse: Response, zoomLevel: number) {\r\n    const arrayBuffer = await tileResponse.arrayBuffer();\r\n    const byteArray: Uint8Array = new Uint8Array(arrayBuffer);\r\n    if (!byteArray || (byteArray.length === 0))\r\n      return undefined;\r\n    if (this.matchesMissingTile(byteArray) && zoomLevel > 8)\r\n      return undefined;\r\n\r\n    const contentType = tileResponse.headers.get(\"content-type\")?.toLowerCase();\r\n    let imageFormat: ImageSourceFormat | undefined;\r\n    if (contentType) {\r\n      // Note: 'includes' is used here instead of exact comparison because we encountered\r\n      // some servers that would give content type such as 'image/png;charset=UTF-8'.\r\n      if (contentType.includes(\"image/jpeg\"))\r\n        imageFormat = ImageSourceFormat.Jpeg;\r\n      else if (contentType.includes(\"image/png\"))\r\n        imageFormat = ImageSourceFormat.Png;\r\n    }\r\n\r\n    if (imageFormat !== undefined)\r\n      return new ImageSource(byteArray, imageFormat);\r\n\r\n    assert(false, \"Invalid tile content type\");\r\n    return undefined;\r\n  }\r\n\r\n  /**\r\n   * Change the status of this provider.\r\n   * Sub-classes should override 'onStatusUpdated' instead of this method.\r\n   * @internal\r\n   */\r\n  public setStatus(status: MapLayerImageryProviderStatus) {\r\n    if (this._status !== status) {\r\n      this.onStatusUpdated(status);\r\n      this._status = status;\r\n      this.onStatusChanged.raiseEvent(this);\r\n    }\r\n  }\r\n\r\n  /** Method called whenever the status changes, giving the opportunity to sub-classes to have a custom behavior.\r\n   *  @internal\r\n   */\r\n  protected onStatusUpdated(_newStatus: MapLayerImageryProviderStatus) { }\r\n\r\n  /** @internal */\r\n  protected setRequestAuthorization(headers: Headers) {\r\n    if (this._settings.userName && this._settings.password) {\r\n      setBasicAuthorization(headers, this._settings.userName, this._settings.password);\r\n    }\r\n  }\r\n\r\n  /** Returns true if the given URL has the same origin as this layer's settings URL.\r\n   * Used to avoid leaking credentials to third-party hosts.\r\n   * @internal\r\n   */\r\n  protected matchesSettingsUrlOrigin(url: string): boolean {\r\n    const origin = tryGetOrigin(url);\r\n    return origin !== undefined && origin === tryGetOrigin(this._settings.url);\r\n  }\r\n\r\n  /** Returns true if the basic-auth credentials from the layer settings may be attached to a request to the given URL.\r\n   * Always true unless [[MapLayerFormatRegistry.restrictCredentialsToTrustedOrigins]] is enabled (opt-in).\r\n   * When enabled, the origin of this layer's settings URL is implicitly trusted (the credentials belong to that\r\n   * server); other origins must be listed in [[MapLayerFormatRegistry.trustedCredentialsOrigins]].\r\n   * See [[MapLayerFormatRegistry.isCredentialsSharingAllowed]].\r\n   * @internal\r\n   */\r\n  protected isCredentialsSharingAllowed(url: string): boolean {\r\n    return IModelApp.mapLayerFormatRegistry.isCredentialsSharingAllowed(url, this._settings.url);\r\n  }\r\n\r\n  /** Returns true if a request to the given URL may be retried with browser credentials included\r\n   * (i.e. SSO / Windows Authentication) after an NTLM or Negotiate http 401 challenge.\r\n   * See [[MapLayerFormatRegistry.isSsoAllowed]].\r\n   * @internal\r\n   */\r\n  protected isSsoAllowed(url: string): boolean {\r\n    return IModelApp.mapLayerFormatRegistry.isSsoAllowed(url);\r\n  }\r\n\r\n  /** @internal */\r\n  public async makeTileRequest(url: string, timeoutMs?: number, authorization?: string): Promise<Response> {\r\n\r\n    // We want to complete the first request before letting other requests go;\r\n    // this done to avoid flooding server with requests missing credentials\r\n    if (!this._firstRequestPromise)\r\n      this._firstRequestPromise  = new Promise<void>((resolve: any) => this.onFirstRequestCompleted.addOnce(()=>resolve()));\r\n    else\r\n      await this._firstRequestPromise;\r\n\r\n    let response: Response|undefined;\r\n    try {\r\n      response = await this.makeRequest(url, timeoutMs, authorization);\r\n    } finally {\r\n      this.onFirstRequestCompleted.raiseEvent();\r\n    }\r\n\r\n    if (response === undefined)\r\n      throw new Error(\"fetch call failed\");\r\n\r\n    return response;\r\n  }\r\n\r\n  /** Records the given URL's origin and transitions the status to [[MapLayerImageryProviderStatus.UntrustedOrigin]].\r\n   * Called when a request received an authentication challenge that could not be answered because the origin\r\n   * is not trusted (see [[MapLayerFormatRegistry.restrictCredentialsToTrustedOrigins]]).\r\n   * Raises [[onStatusChanged]] on the status transition, and again whenever a new origin is added.\r\n   * @internal\r\n   */\r\n  protected reportBlockedOrigin(url: string): void {\r\n    const origin = tryGetOrigin(url) ?? url;\r\n    const isNewOrigin = !this._blockedOrigins.has(origin);\r\n    this._blockedOrigins.add(origin);\r\n\r\n    if (this._status !== MapLayerImageryProviderStatus.UntrustedOrigin)\r\n      this.setStatus(MapLayerImageryProviderStatus.UntrustedOrigin);\r\n    else if (isNewOrigin)\r\n      this.onStatusChanged.raiseEvent(this);   // status unchanged, but a new origin was blocked\r\n  }\r\n\r\n  /** Logs a warning (once per origin, app-wide) when credentials are sent to an origin that would be blocked\r\n   * if [[MapLayerFormatRegistry.restrictCredentialsToTrustedOrigins]] were enabled.\r\n   * Helps applications discover the origins they need to whitelist before opting in to the restriction.\r\n   * See [[MapLayerFormatRegistry.logUntrustedOriginUse]].\r\n   * @internal\r\n   */\r\n  protected logUntrustedOriginUse(url: string): void {\r\n    IModelApp.mapLayerFormatRegistry.logUntrustedOriginUse(url);\r\n  }\r\n\r\n  /** The redirect policy to apply to a request that carries browser credentials (see [[includeUserCredentials]]).\r\n   *\r\n   * When [[MapLayerFormatRegistry.restrictCredentialsToTrustedOrigins]] is enabled, redirects are refused\r\n   * outright (`\"error\"`). `fetch` cannot be asked to follow only same-origin redirects, and by the time a\r\n   * followed redirect can be inspected the credentials have already been delivered to the destination — so\r\n   * refusing is the only way to honour the guarantee that credentials reach none but the origins listed in\r\n   * [[MapLayerFormatRegistry.trustedCredentialsOrigins]]. Legitimate same-origin redirects fail as a result;\r\n   * that is the cost of the opt-in restriction.\r\n   *\r\n   * When the restriction is disabled (the default), redirects are followed as before and\r\n   * [[checkCredentialedRedirect]] reports the destination after the fact.\r\n   * @internal\r\n   */\r\n  protected get credentialedRedirect(): RequestRedirect | undefined {\r\n    return IModelApp.mapLayerFormatRegistry.restrictCredentialsToTrustedOrigins ? \"error\" : undefined;\r\n  }\r\n\r\n  /** Detects that a request carrying browser credentials (see [[includeUserCredentials]]) was transparently\r\n   * redirected to a different origin, and reports or logs that origin.\r\n   *\r\n   * This is a **best-effort, after-the-fact** signal used only while\r\n   * [[MapLayerFormatRegistry.restrictCredentialsToTrustedOrigins]] is disabled, where credentialed requests\r\n   * still follow redirects (see [[credentialedRedirect]]). It cannot prevent the exposure — the credentials\r\n   * have already been sent — and it does not fire at all when the destination denies CORS, because `fetch`\r\n   * then rejects instead of returning a `Response`. The destination origin is never latched as SSO-succeeded,\r\n   * so credentials do not keep flowing to it.\r\n   * @internal\r\n   */\r\n  protected checkCredentialedRedirect(requestedUrl: string, response: Response): void {\r\n    const finalOrigin = tryGetOrigin(response.url);\r\n    if (!response.url || finalOrigin === undefined || finalOrigin === tryGetOrigin(requestedUrl))\r\n      return;\r\n\r\n    if (!this.isSsoAllowed(response.url))\r\n      this.reportBlockedOrigin(response.url);\r\n    else\r\n      this.logUntrustedOriginUse(response.url);   // no-op when the restriction is enabled\r\n  }\r\n\r\n  /** @internal */\r\n  public async makeRequest(url: string, timeoutMs?: number, authorization?: string): Promise<Response> {\r\n\r\n    let response: Response|undefined;\r\n\r\n    let headers: Headers | undefined;\r\n    let hasCreds = false;\r\n    // Whether this request had basic-auth credentials of its own to offer. Requests carrying a caller-supplied\r\n    // `authorization` are excluded: those bypass the origin policy entirely.\r\n    const hasSettingsCreds = !authorization && !!this._settings.userName && !!this._settings.password;\r\n    if (authorization) {\r\n      headers = new Headers();\r\n      headers.set(\"Authorization\", authorization);\r\n    } else if (hasSettingsCreds) {\r\n      if (this.isCredentialsSharingAllowed(url)) {\r\n        hasCreds = true;\r\n        headers = new Headers();\r\n        this.setRequestAuthorization(headers);\r\n        if (!this.matchesSettingsUrlOrigin(url))\r\n          this.logUntrustedOriginUse(url);\r\n      }\r\n    }\r\n    const includeCredentials = this.includeUserCredentials(url);\r\n    const opts: RequestInit = {\r\n      method: \"GET\",\r\n      headers,\r\n      credentials: includeCredentials ? \"include\" : undefined,\r\n      redirect: includeCredentials ? this.credentialedRedirect : undefined,\r\n    };\r\n\r\n    if (timeoutMs !== undefined)\r\n      setRequestTimeout(opts, timeoutMs);\r\n\r\n    response = await fetch(url, opts);\r\n\r\n    if (includeCredentials)\r\n      this.checkCredentialedRedirect(url, response);\r\n\r\n    // fetch follows redirects transparently, so all trust decisions below target the final\r\n    // (post-redirect) URL reported by the response, not the URL we asked for.\r\n    const challengedUrl = response.url || url;\r\n\r\n    if (response.status === 401\r\n          && headersIncludeAuthMethod(response.headers, [\"ntlm\", \"negotiate\"])\r\n          && !includeCredentials\r\n          && !hasCreds\r\n    ) {\r\n      if (this.isSsoAllowed(challengedUrl)) {\r\n        // Removed the previous headers and make sure \"include\" credentials is set\r\n        opts.headers = undefined;\r\n        opts.credentials = \"include\";\r\n        // A Negotiate/NTLM handshake is normally a same-URL 401 round-trip, but in legacy mode we preserve\r\n        // the previous behavior and allow the browser to follow redirects after the authenticated retry.\r\n        opts.redirect = IModelApp.mapLayerFormatRegistry.restrictCredentialsToTrustedOrigins ? \"error\" : undefined;\r\n        this.logUntrustedOriginUse(challengedUrl);\r\n\r\n        // We got a http 401 challenge, lets try again with SSO enabled (i.e. Windows Authentication)\r\n        response = await fetch(challengedUrl, opts);\r\n        if (response.status === 200) {\r\n          this.recordSsoSucceeded(challengedUrl);    // avoid going through 401 challenges over and over for this origin\r\n        }\r\n      } else {\r\n        this.reportBlockedOrigin(challengedUrl);\r\n      }\r\n    } else if ((response.status === 401 || response.status === 403) && hasSettingsCreds && !this.isCredentialsSharingAllowed(challengedUrl)) {\r\n      // Some servers answer an unauthenticated request with 403 (Forbidden) rather than a 401 challenge;\r\n      // since this request could not present its credentials to the challenging origin, either status most\r\n      // likely results from that. The permission is recomputed for the challenged URL rather than reusing the\r\n      // decision made for the requested one: `fetch` strips the Authorization header when it follows a\r\n      // cross-origin redirect, so a trusted request can still arrive unauthenticated at an untrusted origin,\r\n      // and conversely a request that started out untrusted may end up at an origin that is trusted.\r\n      this.reportBlockedOrigin(challengedUrl);\r\n    }\r\n\r\n    return response;\r\n  }\r\n\r\n  /** Returns a map layer tile at the specified settings. */\r\n  public async loadTile(row: number, column: number, zoomLevel: number): Promise<ImageSource | undefined> {\r\n\r\n    try {\r\n      const tileUrl: string = await this.constructUrl(row, column, zoomLevel);\r\n      if (tileUrl.length === 0)\r\n        return undefined;\r\n\r\n      const tileResponse: Response = await this.makeTileRequest(tileUrl);\r\n\r\n      if (!this._hasSuccessfullyFetchedTile) {\r\n        this._hasSuccessfullyFetchedTile = true;\r\n      }\r\n\r\n      return await this.getImageFromTileResponse(tileResponse, zoomLevel);\r\n    } catch (error: any) {\r\n      if (error?.status === 401) {\r\n        this.setStatus(MapLayerImageryProviderStatus.RequireAuth);\r\n\r\n        // Only report error to end-user if we were previously able to fetch tiles\r\n        // and then encountered an error, otherwise I assume an error was already reported\r\n        // through the source validation process.\r\n        if (this._hasSuccessfullyFetchedTile) {\r\n          const msg = IModelApp.localization.getLocalizedString(\"iModelJs:MapLayers.Messages.LoadTileTokenError\", { layerName: this._settings.name });\r\n          IModelApp.notifications.outputMessage(new NotifyMessageDetails(OutputMessagePriority.Warning, msg));\r\n        }\r\n\r\n      }\r\n      return undefined;\r\n    }\r\n  }\r\n\r\n  /** @internal */\r\n  protected async toolTipFromUrl(strings: string[], url: string): Promise<void> {\r\n    let headers: Headers | undefined;\r\n    if (this.isCredentialsSharingAllowed(url)) {\r\n      headers = new Headers();\r\n      this.setRequestAuthorization(headers);\r\n    }\r\n\r\n    try {\r\n      const includeCredentials = this.includeUserCredentials(url);\r\n      const response = await fetch(url, {\r\n        method: \"GET\",\r\n        headers,\r\n        credentials: includeCredentials ? \"include\" : undefined,\r\n        redirect: includeCredentials ? this.credentialedRedirect : undefined,\r\n      });\r\n      if (includeCredentials)\r\n        this.checkCredentialedRedirect(url, response);\r\n      let text = await response.text();\r\n      if (text) {\r\n        // Tooltip content (e.g. WMS GetFeatureInfo responses) is rendered as HTML downstream and may\r\n        // deliberately contain markup; text from origins not trusted for credentials is escaped.\r\n        // fetch follows redirects transparently, so the text may come from a different origin than requested.\r\n        if (!this.isCredentialsSharingAllowed(response.url || url))\r\n          text = escapeHtml(text);\r\n        strings.push(text);\r\n      }\r\n    } catch {\r\n    }\r\n  }\r\n\r\n  /** @internal */\r\n  public matchesMissingTile(tileData: Uint8Array): boolean {\r\n    if (!this._missingTileData)\r\n      return false;\r\n    if (tileData.length !== this._missingTileData.length)\r\n      return false;\r\n    for (let i: number = 0; i < tileData.length; i += 10) {\r\n      if (this._missingTileData[i] !== tileData[i]) {\r\n        return false;\r\n      }\r\n    }\r\n    return true;\r\n  }\r\n\r\n  /**\r\n   * Calculates the projected x cartesian coordinate in EPSG:3857 from the longitude in EPSG:4326 (WGS84)\r\n   * @param longitude Longitude in EPSG:4326 (WGS84)\r\n   * @internal\r\n   */\r\n  public getEPSG3857X(longitude: number): number {\r\n    return longitude * 20037508.34 / 180.0;\r\n  }\r\n\r\n  /**\r\n   * Calculates the projected y cartesian coordinate in EPSG:3857 from the latitude in EPSG:4326 (WGS84)\r\n   * @param latitude Latitude in EPSG:4326 (WGS84)\r\n   * @internal\r\n   */\r\n  public getEPSG3857Y(latitude: number): number {\r\n    const y = Math.log(Math.tan((90.0 + latitude) * Math.PI / 360.0)) / (Math.PI / 180.0);\r\n    return y * 20037508.34 / 180.0;\r\n  }\r\n\r\n  /**\r\n   * Calculates the longitude in EPSG:4326 (WGS84) from the projected x cartesian coordinate in EPSG:3857\r\n   * @param x3857 Projected x cartesian coordinate in EPSG:3857\r\n   * @internal\r\n   */\r\n  public getEPSG4326Lon(x3857: number): number {\r\n    return Angle.radiansToDegrees(x3857 / earthRadius);\r\n  }\r\n\r\n  /**\r\n   * Calculates the latitude in EPSG:4326 (WGS84) from the projected y cartesian coordinate in EPSG:3857\r\n   * @param y3857 Projected y cartesian coordinate in EPSG:3857\r\n   * @internal\r\n   */\r\n  public getEPSG4326Lat(y3857: number): number {\r\n    const y = 2 * Math.atan(Math.exp(y3857 / earthRadius)) - (Math.PI / 2);\r\n    return Angle.radiansToDegrees(y);\r\n  }\r\n\r\n  /**\r\n   * Get the bounding box/extents of a tile in EPSG:4326 (WGS84) format.\r\n   * Map tile providers like Bing and Mapbox allow the URL to be constructed directly from the zoom level and tile coordinates.\r\n   * However, WMS-based servers take a bounding box instead. This method can help get that bounding box from a tile.\r\n   * @param row Row of the tile\r\n   * @param column Column of the tile\r\n   * @param zoomLevel Desired zoom level of the tile\r\n   * @internal\r\n   */\r\n  public getEPSG4326Extent(row: number, column: number, zoomLevel: number): WGS84Extent {\r\n    // Shift left (this.tileSize << zoomLevel) overflow when using 512 pixels tile at higher resolution,\r\n    // so use Math.pow instead (I assume the performance lost to be minimal)\r\n    const mapSize = this.tileSize * Math.pow(2, zoomLevel);\r\n    const leftGrid = this.tileSize * column;\r\n    const topGrid = this.tileSize * row;\r\n\r\n    const longitudeLeft = 360 * ((leftGrid / mapSize) - 0.5);\r\n    const y0 = 0.5 - ((topGrid + this.tileSize) / mapSize);\r\n    const latitudeBottom = 90.0 - 360.0 * Math.atan(Math.exp(-y0 * 2 * Math.PI)) / Math.PI;\r\n\r\n    const longitudeRight = 360 * (((leftGrid + this.tileSize) / mapSize) - 0.5);\r\n    const y1 = 0.5 - (topGrid / mapSize);\r\n    const latitudeTop = 90.0 - 360.0 * Math.atan(Math.exp(-y1 * 2 * Math.PI)) / Math.PI;\r\n\r\n    return { longitudeLeft, longitudeRight, latitudeTop, latitudeBottom };\r\n  }\r\n\r\n  /**\r\n   * Get the bounding box/extents of a tile in EPSG:3857 format.\r\n   * @param row Row of the tile\r\n   * @param column Column of the tile\r\n   * @param zoomLevel Desired zoom level of the tile\r\n   * @internal\r\n   */\r\n  public getEPSG3857Extent(row: number, column: number, zoomLevel: number): { left: number, right: number, top: number, bottom: number } {\r\n    const epsg4326Extent = this.getEPSG4326Extent(row, column, zoomLevel);\r\n\r\n    const left = this.getEPSG3857X(epsg4326Extent.longitudeLeft);\r\n    const right = this.getEPSG3857X(epsg4326Extent.longitudeRight);\r\n    const bottom = this.getEPSG3857Y(epsg4326Extent.latitudeBottom);\r\n    const top = this.getEPSG3857Y(epsg4326Extent.latitudeTop);\r\n\r\n    return { left, right, bottom, top };\r\n  }\r\n\r\n  /** @internal */\r\n  public getEPSG3857ExtentString(row: number, column: number, zoomLevel: number) {\r\n    const tileExtent = this.getEPSG3857Extent(row, column, zoomLevel);\r\n    return `${tileExtent.left.toFixed(2)},${tileExtent.bottom.toFixed(2)},${tileExtent.right.toFixed(2)},${tileExtent.top.toFixed(2)}`;\r\n  }\r\n\r\n  /** @internal */\r\n  public getEPSG4326TileExtentString(row: number, column: number, zoomLevel: number, latLongAxisOrdering: boolean) {\r\n    const tileExtent = this.getEPSG4326Extent(row, column, zoomLevel);\r\n    return this.getEPSG4326ExtentString(tileExtent, latLongAxisOrdering);\r\n\r\n  }\r\n\r\n  /** @internal */\r\n  public getEPSG4326ExtentString(tileExtent: WGS84Extent, latLongAxisOrdering: boolean) {\r\n\r\n    if (latLongAxisOrdering) {\r\n      return `${tileExtent.latitudeBottom.toFixed(8)},${tileExtent.longitudeLeft.toFixed(8)},${tileExtent.latitudeTop.toFixed(8)},${tileExtent.longitudeRight.toFixed(8)}`;\r\n    } else {\r\n      return `${tileExtent.longitudeLeft.toFixed(8)},${tileExtent.latitudeBottom.toFixed(8)},${tileExtent.longitudeRight.toFixed(8)},${tileExtent.latitudeTop.toFixed(8)}`;\r\n    }\r\n  }\r\n\r\n  /** Append custom parameters for settings to provided URL object.\r\n   * @internal\r\n   */\r\n  protected appendCustomParams(url: string) {\r\n    if (!this._settings.savedQueryParams && !this._settings.unsavedQueryParams)\r\n      return url;\r\n\r\n    let tmpUrl = appendQueryParams(url, this._settings.savedQueryParams);\r\n    tmpUrl = appendQueryParams(tmpUrl, this._settings.unsavedQueryParams);\r\n    return tmpUrl;\r\n  }\r\n}\r\n"]}
+{"version":3,"file":"MapLayerImageryProvider.js","sourceRoot":"","sources":["../../../../src/tile/map/MapLayerImageryProvider.ts"],"names":[],"mappings":"AAAA;;;+FAG+F;AAC/F;;GAEG;AAEH,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC5E,OAAO,EAAuC,WAAW,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACzG,OAAO,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAC7C,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAExF,OAAO,EAAE,iBAAiB,EAAE,yBAAyB,EAAE,oBAAoB,EAAE,sBAAsB,EAAsG,iCAAiC,EAAiE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAExV,OAAO,EAAE,wBAAwB,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAGzG,gBAAgB;AAChB,MAAM,aAAa,GAAG,GAAG,EAAE,gBAAgB,GAAG,GAAG,CAAC;AAClD,MAAM,WAAW,GAAG,OAAO,CAAC;AAC5B,MAAM,eAAe,GAAG,KAAK,CAAC;AAC9B,MAAM,cAAc,GAAG,yBAAyB,CAAC;AAEjD;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;AAClE,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,CAAC,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACnG,CAAC;AAED;;GAEG;AACH,MAAM,CAAN,IAAY,6BASX;AATD,WAAY,6BAA6B;IACvC,mFAAK,CAAA;IACL,+FAAW,CAAA;IACX;;;;OAIG;IACH,uGAAe,CAAA;AACjB,CAAC,EATW,6BAA6B,KAA7B,6BAA6B,QASxC;AAWD;;;GAGG;AACH,MAAM,OAAgB,uBAAuB;IAoJZ;IAA4C;IAnJjE,2BAA2B,GAAG,KAAK,CAAC;IAC9B,eAAe,GAAG,IAAI,OAAO,EAA+C,CAAC;IAE7F,gBAAgB;IACC,qBAAqB,GAAG,IAAI,uBAAuB,EAAE,CAAC;IAEvE,gBAAgB;IACC,uBAAuB,GAAG,IAAI,sBAAsB,EAAE,CAAC;IAExE,gBAAgB;IACR,OAAO,GAAG,6BAA6B,CAAC,KAAK,CAAC;IAEtD,gBAAgB;IACC,eAAe,GAAG,IAAI,GAAG,EAAU,CAAC;IAErD;;;;;OAKG;IACH,IAAW,cAAc,KAA4B,OAAO,CAAC,GAAG,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IAExF;;;;;OAKG;IACc,oBAAoB,GAAG,IAAI,GAAG,EAAU,CAAC;IAE1D;;;;;;OAMG;IACO,sBAAsB,CAAC,GAAW;QAC1C,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QACjC,OAAO,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IACjG,CAAC;IAED;;;OAGG;IACO,kBAAkB,CAAC,GAAW;QACtC,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,MAAM,KAAK,SAAS;YACtB,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC1C,CAAC;IAED,gBAAgB;IACG,uBAAuB,GAAG,IAAI,OAAO,EAAc,CAAC;IAEvE,gBAAgB;IACN,oBAAoB,CAA0B;IAExD;;;OAGG;IACH,IAAW,MAAM,KAAK,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAE5C;;;;OAIG;IACH,IAAW,sBAAsB,KAAc,OAAO,KAAK,CAAC,CAAC,CAAC;IAE9D;;;;;;OAMG;IACI,WAAW;QAChB,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;QAC7B,IAAI,CAAC,SAAS,CAAC,6BAA6B,CAAC,KAAK,CAAC,CAAC;IACtD,CAAC;IAED,gBAAgB;IAChB,IAAW,QAAQ,KAAa,OAAO,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAElG,gBAAgB;IAChB,IAAW,iBAAiB,KAAK,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IAE5D,IAAW,gBAAgB,KAAa,OAAO,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC;IAE9E,IAAW,gBAAgB,KAAa,OAAO,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC;IAE9E,gBAAgB;IAChB,IAAW,eAAe,KAAK,OAAO,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAE9D,IAAW,uBAAuB,KAAc,OAAO,KAAK,CAAC,CAAC,CAAC;IAE/D,gBAAgB;IAChB,IAAW,yBAAyB,KAAK,OAAO,KAAK,CAAC,CAAC,CAAC;IAEhD,WAAW,CAAqB;IAExC;;;;OAIG;IACK,MAAM,CAAC,YAAY,CAAC,KAAoC;QAC9D,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;YACxD,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YAC1D,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;YAC5D,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACxE,CAAC;IAED;;;OAGG;IACH,IAAW,UAAU;QACnB,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED,IAAW,UAAU,CAAC,KAAoC;QACxD,IAAI,CAAC,WAAW,GAAG,uBAAuB,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IACrF,CAAC;IAED;;;OAGG;IACgB,uBAAuB,GAAG,CAAC,CAAC;IAE/C;;;OAGG;IACgB,uBAAuB,GAAG,EAAE,CAAC;IAEhD,gBAAgB;IAChB,IAAc,mBAAmB,KAAK,OAAO,IAAI,CAAC,CAAC,CAAC;IAEpD,YAA+B,SAAgC,EAAY,gBAAyB;QAArE,cAAS,GAAT,SAAS,CAAuB;QAAY,qBAAgB,GAAhB,gBAAgB,CAAS;QAClG,IAAI,CAAC,qBAAqB,GAAG,IAAI,uBAAuB,EAAE,CAAC;QAC3D,IAAI,CAAC,uBAAuB,GAAG,IAAI,sBAAsB,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IACxE,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,UAAU;QACrB,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,uBAAuB,CAAC,CAAC,IAAI,CAAC,CAAC,QAAiC,EAAE,EAAE;YAC3F,IAAI,QAAQ,KAAK,SAAS;gBACxB,IAAI,CAAC,gBAAgB,GAAG,QAAQ,CAAC,IAAkB,CAAC;QACxD,CAAC,CAAC,CAAC;IACL,CAAC;IAID,IAAW,YAAY,KAAsB,OAAO,IAAI,CAAC,yBAAyB,CAAC,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC;IAEjJ,kGAAkG;IAC3F,YAAY,CAAC,MAAwB,EAAE,SAAyB,IAAU,CAAC;IAElF;;;;;OAKG;IACI,KAAK,CAAC,eAAe,CAAC,KAAuB,EAAE,EAAkB;QACtE,4DAA4D;QAC5D,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;IACvD,CAAC;IAED,gBAAgB;IACN,gBAAgB,CAAc;IAExC,gBAAgB;IAChB,IAAW,2BAA2B,KAAa,OAAO,IAAI,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAEpH,gBAAgB;IACN,KAAK,CAAC,qBAAqB,CAAC,KAAqB,IAAsB,OAAO,IAAI,CAAC,CAAC,CAAC;IAE/F,gBAAgB;IACT,oBAAoB,CAAC,MAAc;QACxC,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC;QACpC,OAAO,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC,2BAA2B,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,2BAA2B,CAAC,UAAU,CAAC,CAAC,CAAC;IAClJ,CAAC;IAED;;;;;;OAMG;IACO,iBAAiB,CAAC,MAAc,EAAE,eAA6C;QACvF,eAAe,CAAC,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC;IACrD,CAAC;IAED,gBAAgB;IACT,gBAAgB,CAAC,IAAoB,EAAE,eAA6C;QACzF,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,gBAAgB,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,mBAAmB,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;YAC3J,IAAI,CAAC,OAAO,EAAE,CAAC;YACf,OAAO;QACT,CAAC;QACD,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IACvD,CAAC;IAED;;;;;;;OAOG;IACI,KAAK,CAAC,UAAU,CAAC,OAAiB,EAAE,MAAc,EAAE,MAAoB,EAAE,IAAwB;QACvG,IAAI,eAAe,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,MAAM,CAAC,sBAAsB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAC/D,OAAO,CAAC,IAAI,CAAC,WAAW,MAAM,CAAC,WAAW,UAAU,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,UAAU,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC;QAC9H,CAAC;IACH,CAAC;IAED,gBAAgB;IACT,KAAK,CAAC,cAAc,CAAC,YAAmC,EAAE,OAAe,EAAE,MAAoB,EAAE,KAAyB,EAAE,IAAe,EAAE,QAAgC;QAClL,8DAA8D;QAC9D,YAAY,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC;IAED,gBAAgB;IACR,QAAQ,CAAC,QAAyB;IAC1C,CAAC;IAED,gBAAgB;IACN,KAAK,CAAC,wBAAwB,CAAC,YAAsB,EAAE,SAAiB;QAChF,MAAM,WAAW,GAAG,MAAM,YAAY,CAAC,WAAW,EAAE,CAAC;QACrD,MAAM,SAAS,GAAe,IAAI,UAAU,CAAC,WAAW,CAAC,CAAC;QAC1D,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC;YACxC,OAAO,SAAS,CAAC;QACnB,IAAI,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC;YACrD,OAAO,SAAS,CAAC;QAEnB,MAAM,WAAW,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,WAAW,EAAE,CAAC;QAC5E,IAAI,WAA0C,CAAC;QAC/C,IAAI,WAAW,EAAE,CAAC;YAChB,mFAAmF;YACnF,+EAA+E;YAC/E,IAAI,WAAW,CAAC,QAAQ,CAAC,YAAY,CAAC;gBACpC,WAAW,GAAG,iBAAiB,CAAC,IAAI,CAAC;iBAClC,IAAI,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC;gBACxC,WAAW,GAAG,iBAAiB,CAAC,GAAG,CAAC;QACxC,CAAC;QAED,IAAI,WAAW,KAAK,SAAS;YAC3B,OAAO,IAAI,WAAW,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QAEjD,MAAM,CAAC,KAAK,EAAE,2BAA2B,CAAC,CAAC;QAC3C,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;OAIG;IACI,SAAS,CAAC,MAAqC;QACpD,IAAI,IAAI,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;YAC5B,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;YAC7B,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;YACtB,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAED;;OAEG;IACO,eAAe,CAAC,UAAyC,IAAI,CAAC;IAExE;;;;OAIG;IACO,2BAA2B;QACnC,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,KAAK,6BAA6B,CAAC,WAAW,CAAC;QACnF,IAAI,CAAC,SAAS,CAAC,6BAA6B,CAAC,WAAW,CAAC,CAAC;QAC1D,IAAI,eAAe,IAAI,CAAC,IAAI,CAAC,2BAA2B;YACtD,OAAO;QAET,MAAM,GAAG,GAAG,SAAS,CAAC,YAAY,CAAC,kBAAkB,CAAC,gDAAgD,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;QAC5I,SAAS,CAAC,aAAa,CAAC,aAAa,CAAC,IAAI,oBAAoB,CAAC,qBAAqB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;IACtG,CAAC;IAED,gBAAgB;IACN,uBAAuB,CAAC,OAAgB;QAChD,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC;YACvD,qBAAqB,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;IAED;;OAEG;IACH,IAAc,YAAY;QACxB,OAAO,SAAS,CAAC,sBAAsB,EAAE,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACpF,CAAC;IAED;;OAEG;IACH,IAAc,eAAe;QAC3B,OAAO,CAAC,SAAS,CAAC,sBAAsB,EAAE,qBAAqB,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IACnF,CAAC;IAED;;;OAGG;IACO,wBAAwB,CAAC,GAAW;QAC5C,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QACjC,OAAO,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC7E,CAAC;IAED;;;;;;OAMG;IACO,2BAA2B,CAAC,GAAW;QAC/C,OAAO,SAAS,CAAC,sBAAsB,CAAC,2BAA2B,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC/F,CAAC;IAED;;;;OAIG;IACO,YAAY,CAAC,GAAW;QAChC,OAAO,SAAS,CAAC,sBAAsB,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IAC5D,CAAC;IAED,gBAAgB;IACT,KAAK,CAAC,eAAe,CAAC,GAAW,EAAE,SAAkB,EAAE,aAAsB;QAElF,0EAA0E;QAC1E,uEAAuE;QACvE,IAAI,CAAC,IAAI,CAAC,oBAAoB;YAC5B,IAAI,CAAC,oBAAoB,GAAI,IAAI,OAAO,CAAO,CAAC,OAAY,EAAE,EAAE,CAAC,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,GAAE,EAAE,CAAA,OAAO,EAAE,CAAC,CAAC,CAAC;;YAEtH,MAAM,IAAI,CAAC,oBAAoB,CAAC;QAElC,IAAI,QAA4B,CAAC;QACjC,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;QACnE,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,uBAAuB,CAAC,UAAU,EAAE,CAAC;QAC5C,CAAC;QAED,IAAI,QAAQ,KAAK,SAAS;YACxB,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAEvC,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;;;;OAKG;IACO,mBAAmB,CAAC,GAAW;QACvC,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC;QACxC,MAAM,WAAW,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACtD,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAEjC,IAAI,IAAI,CAAC,OAAO,KAAK,6BAA6B,CAAC,eAAe;YAChE,IAAI,CAAC,SAAS,CAAC,6BAA6B,CAAC,eAAe,CAAC,CAAC;aAC3D,IAAI,WAAW;YAClB,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAG,iDAAiD;IAC9F,CAAC;IAED;;;;;OAKG;IACO,qBAAqB,CAAC,GAAW;QACzC,SAAS,CAAC,sBAAsB,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC;IAC9D,CAAC;IAED;;;;;;;;;;OAUG;IACO,yBAAyB,CAAC,YAAoB,EAAE,QAAkB;QAC1E,MAAM,WAAW,GAAG,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC/C,IAAI,CAAC,QAAQ,CAAC,GAAG,IAAI,WAAW,KAAK,SAAS,IAAI,WAAW,KAAK,YAAY,CAAC,YAAY,CAAC;YAC1F,OAAO;QAET,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC;YAClC,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;;YAEvC,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAG,wCAAwC;IACxF,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,kBAAkB,CAAC,OAAwB,EAAE,YAAqB,EAAE,QAAiB,EAAE,gBAAyB,EAAE,SAAkB;QAChJ,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC;QAC/B,MAAM,kBAAkB,GAAG,IAAI,CAAC,sBAAsB,CAAC,UAAU,CAAC,CAAC;QACnE,MAAM,IAAI,GAAgB;YACxB,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,WAAW,EAAE,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;YACvD,oGAAoG;YACpG,QAAQ,EAAE,CAAC,kBAAkB,IAAI,YAAY,CAAC,CAAC,CAAC,CAAC,yBAAyB,EAAE,CAAC,CAAC,CAAC,SAAS;SACzF,CAAC;QAEF,IAAI,SAAS,KAAK,SAAS;YACzB,iBAAiB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAErC,IAAI,GAAG,GAAG,MAAM,KAAK,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QAExC,IAAI,kBAAkB,IAAI,YAAY;YACpC,IAAI,CAAC,yBAAyB,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QAElD,uFAAuF;QACvF,0EAA0E;QAC1E,MAAM,aAAa,GAAG,GAAG,CAAC,GAAG,IAAI,UAAU,CAAC;QAE5C,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;eACb,wBAAwB,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;eAC5D,CAAC,kBAAkB;eACnB,CAAC,QAAQ;eACT,CAAC,YAAY,EACpB,CAAC;YACD,IAAI,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,EAAE,CAAC;gBACrC,0EAA0E;gBAC1E,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC;gBACzB,IAAI,CAAC,WAAW,GAAG,SAAS,CAAC;gBAC7B,mGAAmG;gBACnG,iGAAiG;gBACjG,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC,sBAAsB,CAAC,mCAAmC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;gBAC3G,IAAI,CAAC,qBAAqB,CAAC,aAAa,CAAC,CAAC;gBAE1C,6FAA6F;gBAC7F,GAAG,GAAG,MAAM,KAAK,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;gBACvC,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBACvB,IAAI,CAAC,kBAAkB,CAAC,aAAa,CAAC,CAAC,CAAI,mEAAmE;gBAChH,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,mBAAmB,CAAC,aAAa,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC;aAAM,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,IAAI,gBAAgB,IAAI,CAAC,YAAY,IAAI,CAAC,IAAI,CAAC,2BAA2B,CAAC,aAAa,CAAC,EAAE,CAAC;YAC/I,mGAAmG;YACnG,qGAAqG;YACrG,iGAAiG;YACjG,8EAA8E;YAC9E,iGAAiG;YACjG,uGAAuG;YACvG,+FAA+F;YAC/F,IAAI,CAAC,mBAAmB,CAAC,aAAa,CAAC,CAAC;QAC1C,CAAC;QAED,OAAO,GAAG,CAAC;IACb,CAAC;IAED,gBAAgB;IACT,KAAK,CAAC,WAAW,CAAC,GAAW,EAAE,SAAkB,EAAE,aAAsB;QAE9E,IAAI,OAA4B,CAAC;QACjC,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,2GAA2G;QAC3G,yEAAyE;QACzE,MAAM,gBAAgB,GAAG,CAAC,aAAa,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;QAClG,IAAI,aAAa,EAAE,CAAC;YAClB,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;YACxB,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,aAAa,CAAC,CAAC;QAC9C,CAAC;aAAM,IAAI,gBAAgB,EAAE,CAAC;YAC5B,IAAI,IAAI,CAAC,2BAA2B,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC1C,QAAQ,GAAG,IAAI,CAAC;gBAChB,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;gBACxB,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC;gBACtC,IAAI,CAAC,IAAI,CAAC,wBAAwB,CAAC,GAAG,CAAC;oBACrC,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC;YACpC,CAAC;QACH,CAAC;QAED,kGAAkG;QAClG,gHAAgH;QAChH,iEAAiE;QACjE,IAAI,CAAC;YACH,MAAM,EAAE,QAAQ,EAAE,gBAAgB,EAAE,GAAG,MAAM,oBAAoB,CAAC;gBAChE,GAAG;gBACH,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ;gBACjC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG;gBAC5B,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU;gBAC1C,OAAO;gBACP,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,gBAAgB,EAAE,SAAS,CAAC;aAC7H,CAAC,CAAC;YACH,IAAI,gBAAgB;gBAClB,IAAI,CAAC,wBAAwB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC9C,OAAO,QAAQ,CAAC;QAClB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,iCAAiC;gBACpD,IAAI,CAAC,2BAA2B,EAAE,CAAC;YACrC,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,8GAA8G;IAC7F,wBAAwB,GAAG,IAAI,OAAO,EAAY,CAAC;IAEpE;;;;OAIG;IACO,kBAAkB,CAAC,QAAkB;QAC7C,OAAO,IAAI,CAAC,wBAAwB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACrD,CAAC;IAED,0DAA0D;IACnD,KAAK,CAAC,QAAQ,CAAC,GAAW,EAAE,MAAc,EAAE,SAAiB;QAElE,IAAI,CAAC;YACH,MAAM,OAAO,GAAW,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;YACxE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;gBACtB,OAAO,SAAS,CAAC;YAEnB,MAAM,YAAY,GAAa,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;YAEnE,IAAI,CAAC,IAAI,CAAC,2BAA2B,EAAE,CAAC;gBACtC,IAAI,CAAC,2BAA2B,GAAG,IAAI,CAAC;YAC1C,CAAC;YAED,OAAO,MAAM,IAAI,CAAC,wBAAwB,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;QACtE,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,IAAI,KAAK,EAAE,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC1B,IAAI,CAAC,SAAS,CAAC,6BAA6B,CAAC,WAAW,CAAC,CAAC;gBAE1D,0EAA0E;gBAC1E,kFAAkF;gBAClF,yCAAyC;gBACzC,IAAI,IAAI,CAAC,2BAA2B,EAAE,CAAC;oBACrC,MAAM,GAAG,GAAG,SAAS,CAAC,YAAY,CAAC,kBAAkB,CAAC,gDAAgD,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;oBAC5I,SAAS,CAAC,aAAa,CAAC,aAAa,CAAC,IAAI,oBAAoB,CAAC,qBAAqB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;gBACtG,CAAC;YAEH,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAED,gBAAgB;IACN,KAAK,CAAC,cAAc,CAAC,OAAiB,EAAE,GAAW;QAC3D,IAAI,OAA4B,CAAC;QACjC,IAAI,IAAI,CAAC,2BAA2B,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1C,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;YACxB,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC;QACxC,CAAC;QAED,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,CAAC,EAAE,QAAQ,EAAE,GAAG,MAAM,oBAAoB,CAAC;gBACzC,GAAG;gBACH,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ;gBACjC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG;gBAC5B,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU;gBAC1C,OAAO;gBACP,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,EAAE;oBACpC,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC;oBAC/B,MAAM,kBAAkB,GAAG,IAAI,CAAC,sBAAsB,CAAC,UAAU,CAAC,CAAC;oBACnE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,UAAU,EAAE;wBAClC,MAAM,EAAE,KAAK;wBACb,OAAO,EAAE,OAAO,CAAC,OAAO;wBACxB,WAAW,EAAE,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;wBACvD,QAAQ,EAAE,CAAC,kBAAkB,IAAI,YAAY,CAAC,CAAC,CAAC,CAAC,yBAAyB,EAAE,CAAC,CAAC,CAAC,SAAS;qBACzF,CAAC,CAAC;oBACH,IAAI,kBAAkB,IAAI,YAAY;wBACpC,IAAI,CAAC,yBAAyB,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;oBAClD,OAAO,GAAG,CAAC;gBACb,CAAC;aACF,CAAC,CAAC,CAAC;QACN,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,6GAA6G;YAC7G,6DAA6D;YAC7D,IAAI,KAAK,YAAY,iCAAiC;gBACpD,IAAI,CAAC,2BAA2B,EAAE,CAAC;YACrC,IAAI,IAAI,CAAC,eAAe;gBACtB,MAAM,CAAC,UAAU,CAAC,cAAc,EAAE,uDAAuD,YAAY,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAClI,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,IAAI,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACjC,IAAI,IAAI,EAAE,CAAC;gBACT,6FAA6F;gBAC7F,yFAAyF;gBACzF,sGAAsG;gBACtG,IAAI,CAAC,IAAI,CAAC,2BAA2B,CAAC,QAAQ,CAAC,GAAG,IAAI,GAAG,CAAC;oBACxD,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;gBAC1B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;QACT,CAAC;IACH,CAAC;IAED,gBAAgB;IACT,kBAAkB,CAAC,QAAoB;QAC5C,IAAI,CAAC,IAAI,CAAC,gBAAgB;YACxB,OAAO,KAAK,CAAC;QACf,IAAI,QAAQ,CAAC,MAAM,KAAK,IAAI,CAAC,gBAAgB,CAAC,MAAM;YAClD,OAAO,KAAK,CAAC;QACf,KAAK,IAAI,CAAC,GAAW,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;YACrD,IAAI,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7C,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;OAIG;IACI,YAAY,CAAC,SAAiB;QACnC,OAAO,SAAS,GAAG,WAAW,GAAG,KAAK,CAAC;IACzC,CAAC;IAED;;;;OAIG;IACI,YAAY,CAAC,QAAgB;QAClC,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,QAAQ,CAAC,GAAG,IAAI,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC;QACtF,OAAO,CAAC,GAAG,WAAW,GAAG,KAAK,CAAC;IACjC,CAAC;IAED;;;;OAIG;IACI,cAAc,CAAC,KAAa;QACjC,OAAO,KAAK,CAAC,gBAAgB,CAAC,KAAK,GAAG,WAAW,CAAC,CAAC;IACrD,CAAC;IAED;;;;OAIG;IACI,cAAc,CAAC,KAAa;QACjC,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,WAAW,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QACvE,OAAO,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;IACnC,CAAC;IAED;;;;;;;;OAQG;IACI,iBAAiB,CAAC,GAAW,EAAE,MAAc,EAAE,SAAiB;QACrE,oGAAoG;QACpG,wEAAwE;QACxE,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC;QACxC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,GAAG,GAAG,CAAC;QAEpC,MAAM,aAAa,GAAG,GAAG,GAAG,CAAC,CAAC,QAAQ,GAAG,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC;QACzD,MAAM,EAAE,GAAG,GAAG,GAAG,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC,CAAC;QACvD,MAAM,cAAc,GAAG,IAAI,GAAG,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC;QAEvF,MAAM,cAAc,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC;QAC5E,MAAM,EAAE,GAAG,GAAG,GAAG,CAAC,OAAO,GAAG,OAAO,CAAC,CAAC;QACrC,MAAM,WAAW,GAAG,IAAI,GAAG,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC;QAEpF,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,WAAW,EAAE,cAAc,EAAE,CAAC;IACxE,CAAC;IAED;;;;;;OAMG;IACI,iBAAiB,CAAC,GAAW,EAAE,MAAc,EAAE,SAAiB;QACrE,MAAM,cAAc,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;QAEtE,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC;QAC7D,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,cAAc,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,cAAc,CAAC,CAAC;QAChE,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;QAE1D,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IACtC,CAAC;IAED,gBAAgB;IACT,uBAAuB,CAAC,GAAW,EAAE,MAAc,EAAE,SAAiB;QAC3E,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;QAClE,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IACrI,CAAC;IAED,gBAAgB;IACT,2BAA2B,CAAC,GAAW,EAAE,MAAc,EAAE,SAAiB,EAAE,mBAA4B;QAC7G,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;QAClE,OAAO,IAAI,CAAC,uBAAuB,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAC;IAEvE,CAAC;IAED,gBAAgB;IACT,uBAAuB,CAAC,UAAuB,EAAE,mBAA4B;QAElF,IAAI,mBAAmB,EAAE,CAAC;YACxB,OAAO,GAAG,UAAU,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACvK,CAAC;aAAM,CAAC;YACN,OAAO,GAAG,UAAU,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACvK,CAAC;IACH,CAAC;IAED;;OAEG;IACO,kBAAkB,CAAC,GAAW;QACtC,OAAO,iBAAiB,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,kBAAkB,EAAE,CAAC,CAAC;IACrE,CAAC;CACF","sourcesContent":["/*---------------------------------------------------------------------------------------------\r\n* Copyright (c) Bentley Systems, Incorporated. All rights reserved.\r\n* See LICENSE.md in the project root for license terms and full copyright notice.\r\n*--------------------------------------------------------------------------------------------*/\r\n/** @packageDocumentation\r\n * @module MapLayers\r\n */\r\n\r\nimport { assert, BeEvent, BentleyError, Logger } from \"@itwin/core-bentley\";\r\nimport { Cartographic, ImageMapLayerSettings, ImageSource, ImageSourceFormat } from \"@itwin/core-common\";\r\nimport { Angle } from \"@itwin/core-geometry\";\r\nimport { IModelApp } from \"../../IModelApp\";\r\nimport { NotifyMessageDetails, OutputMessagePriority } from \"../../NotificationManager\";\r\nimport { ScreenViewport } from \"../../Viewport\";\r\nimport { appendQueryParams, credentialedFetchRedirect, fetchMapLayerRequest, GeographicTilingScheme, ImageryMapTile, ImageryMapTileTree, MapCartoRectangle, MapFeatureInfoOptions, MapLayerAccessClient, MapLayerAuthenticationFailedError, MapLayerFeatureInfo, MapLayerRequest, MapTilingScheme, QuadId, WebMercatorTilingScheme } from \"../internal\";\r\nimport { HitDetail } from \"../../HitDetail\";\r\nimport { headersIncludeAuthMethod, setBasicAuthorization, setRequestTimeout } from \"../../request/utils\";\r\nimport { DecorateContext } from \"../../ViewContext\";\r\n\r\n/** @internal */\r\nconst tileImageSize = 256, untiledImageSize = 256;\r\nconst earthRadius = 6378137;\r\nconst doDebugToolTips = false;\r\nconst loggerCategory = \"MapLayerImageryProvider\";\r\n\r\n/** Escapes HTML metacharacters so the text renders literally when assigned to `innerHTML`.\r\n * Use for any server- or user-supplied string that ends up in the map tooltip, which is rendered\r\n * as HTML by [[MapLayerTileTreeReference.getToolTip]].\r\n * @internal\r\n */\r\nexport function escapeHtml(text: string): string {\r\n  return text.replace(/[&<>\"']/g, (c) => `&#${c.charCodeAt(0)};`);\r\n}\r\n\r\n/** Returns the origin (scheme + host + port) of the given URL, or undefined if it cannot be parsed or does\r\n * not denote a distinct network origin.\r\n *\r\n * Only `http:` and `https:` URLs yield an origin. Every other scheme is rejected because opaque URLs\r\n * — `file:`, `data:`, `about:`, `blob:null`, and the custom protocols Electron hosts commonly register —\r\n * all serialize to the literal string `\"null\"`. Comparing those would make unrelated URLs look same-origin,\r\n * so a single trusted entry could unlock all of them. Callers use this for credential-trust decisions, and\r\n * returning `undefined` keeps those decisions fail-closed.\r\n * @internal\r\n */\r\nexport function tryGetOrigin(url: string): string | undefined {\r\n  let parsed: URL;\r\n  try {\r\n    parsed = new URL(url);\r\n  } catch {\r\n    return undefined;\r\n  }\r\n\r\n  return (parsed.protocol === \"http:\" || parsed.protocol === \"https:\") ? parsed.origin : undefined;\r\n}\r\n\r\n/** The status of the map layer imagery provider that lets you know if authentication is needed to request tiles.\r\n * @public\r\n */\r\nexport enum MapLayerImageryProviderStatus {\r\n  Valid,\r\n  RequireAuth,\r\n  /** A request received an authentication challenge, but credentials were withheld because the request origin\r\n   * is not trusted (see [[MapLayerFormatRegistry.restrictCredentialsToTrustedOrigins]]).\r\n   * The blocked origins are available via [[MapLayerImageryProvider.blockedOrigins]].\r\n   * @beta\r\n   */\r\n  UntrustedOrigin,\r\n}\r\n\r\n/** @internal */\r\nexport interface WGS84Extent\r\n{\r\n  longitudeLeft: number;\r\n  longitudeRight: number;\r\n  latitudeTop: number;\r\n  latitudeBottom: number;\r\n}\r\n\r\n/** Abstract class for map layer imagery providers.\r\n * Map layer imagery providers request and provide tile images and other data. Each map layer from a separate source needs its own imagery provider object.\r\n * @beta\r\n */\r\nexport abstract class MapLayerImageryProvider {\r\n  protected _hasSuccessfullyFetchedTile = false;\r\n  public readonly onStatusChanged = new BeEvent<(provider: MapLayerImageryProvider) => void>();\r\n\r\n  /** @internal */\r\n  private readonly _mercatorTilingScheme = new WebMercatorTilingScheme();\r\n\r\n  /** @internal */\r\n  private readonly _geographicTilingScheme = new GeographicTilingScheme();\r\n\r\n  /** @internal */\r\n  private _status = MapLayerImageryProviderStatus.Valid;\r\n\r\n  /** @internal */\r\n  private readonly _blockedOrigins = new Set<string>();\r\n\r\n  /** Origins of requests for which credentials were withheld because they are not trusted\r\n   * (see [[MapLayerFormatRegistry.restrictCredentialsToTrustedOrigins]]).\r\n   * Populated when [[status]] transitions to [[MapLayerImageryProviderStatus.UntrustedOrigin]];\r\n   * [[onStatusChanged]] is raised again each time a new origin is added. Cleared by [[resetStatus]].\r\n   * @beta\r\n   */\r\n  public get blockedOrigins(): ReadonlyArray<string> { return [...this._blockedOrigins]; }\r\n\r\n  /** Origins for which a previous SSO handshake (i.e. Windows Authentication) succeeded.\r\n   * Browser credentials are only included for subsequent requests targeting these origins,\r\n   * so that a successful handshake with one host does not leak credentials to other hosts\r\n   * this provider may contact.\r\n   * @internal\r\n   */\r\n  private readonly _ssoSucceededOrigins = new Set<string>();\r\n\r\n  /** Returns true if browser credentials should be included for the given URL because a previous\r\n   * SSO handshake succeeded for its origin AND the origin is still allowed by the current policy\r\n   * (see [[MapLayerFormatRegistry.isSsoAllowed]]). Re-checking the policy ensures a handshake recorded\r\n   * while enforcement was disabled — or before an origin was removed from\r\n   * [[MapLayerFormatRegistry.trustedCredentialsOrigins]] — does not keep latching credentials on.\r\n   * @internal\r\n   */\r\n  protected includeUserCredentials(url: string): boolean {\r\n    const origin = tryGetOrigin(url);\r\n    return origin !== undefined && this._ssoSucceededOrigins.has(origin) && this.isSsoAllowed(url);\r\n  }\r\n\r\n  /** Records that an SSO handshake succeeded for the given URL's origin, so subsequent requests\r\n   * to that origin include browser credentials without going through another 401 challenge.\r\n   * @internal\r\n   */\r\n  protected recordSsoSucceeded(url: string): void {\r\n    const origin = tryGetOrigin(url);\r\n    if (origin !== undefined)\r\n      this._ssoSucceededOrigins.add(origin);\r\n  }\r\n\r\n  /** @internal */\r\n  protected readonly onFirstRequestCompleted = new BeEvent<() => void>();\r\n\r\n  /** @internal */\r\n  protected _firstRequestPromise: Promise<void>|undefined;\r\n\r\n  /**\r\n   * The status of the map layer imagery provider.\r\n   * @public @preview\r\n   */\r\n  public get status() { return this._status; }\r\n\r\n  /** Determine if this provider supports map feature info.\r\n   * For example, this can be used to show the map feature info tool only when a provider is registered to support it.\r\n   * @returns true if provider supports map feature info else return false.\r\n   * @public\r\n   */\r\n  public get supportsMapFeatureInfo(): boolean { return false; }\r\n\r\n  /** Reset the provider's status to [[MapLayerImageryProviderStatus.Valid]] and clear the list of\r\n   * [[blockedOrigins]] accumulated while in the [[MapLayerImageryProviderStatus.UntrustedOrigin]] state.\r\n   * Raises [[onStatusChanged]] if the status actually changes.\r\n   * Typically called after the user has provided credentials or the application has updated\r\n   * [[MapLayerFormatRegistry.trustedCredentialsOrigins]], so that subsequent requests are re-attempted.\r\n   * @beta\r\n   */\r\n  public resetStatus() {\r\n    this._blockedOrigins.clear();\r\n    this.setStatus(MapLayerImageryProviderStatus.Valid);\r\n  }\r\n\r\n  /** @internal */\r\n  public get tileSize(): number { return this._usesCachedTiles ? tileImageSize : untiledImageSize; }\r\n\r\n  /** @internal */\r\n  public get maximumScreenSize() { return 2 * this.tileSize; }\r\n\r\n  public get minimumZoomLevel(): number { return this.defaultMinimumZoomLevel; }\r\n\r\n  public get maximumZoomLevel(): number { return this.defaultMaximumZoomLevel; }\r\n\r\n  /** @internal */\r\n  public get usesCachedTiles() { return this._usesCachedTiles; }\r\n\r\n  public get mutualExclusiveSubLayer(): boolean { return false; }\r\n\r\n  /** @internal */\r\n  public get useGeographicTilingScheme() { return false; }\r\n\r\n  private _cartoRange?: MapCartoRectangle;\r\n\r\n  /** Validates a cartographic range for NaN and infinite values.\r\n   * @param range The cartographic range to validate.\r\n   * @returns true if the range is valid, false otherwise.\r\n   * @internal\r\n   */\r\n  private static isRangeValid(range: MapCartoRectangle | undefined): boolean {\r\n    if (!range) {\r\n      return false;\r\n    }\r\n\r\n    return !Number.isNaN(range.low.x) && !Number.isNaN(range.low.y) &&\r\n           !Number.isNaN(range.high.x) && !Number.isNaN(range.high.y) &&\r\n           Number.isFinite(range.low.x) && Number.isFinite(range.low.y) &&\r\n           Number.isFinite(range.high.x) && Number.isFinite(range.high.y);\r\n  }\r\n\r\n  /** Gets or sets the cartographic range for this provider.\r\n   * When setting, if the range is invalid (contains NaN or infinite values), it will be stored as undefined.\r\n   * When getting, returns undefined if the range was set to an invalid value.\r\n   */\r\n  public get cartoRange(): MapCartoRectangle | undefined {\r\n    return this._cartoRange;\r\n  }\r\n\r\n  public set cartoRange(range: MapCartoRectangle | undefined) {\r\n    this._cartoRange = MapLayerImageryProvider.isRangeValid(range) ? range : undefined;\r\n  }\r\n\r\n  /**\r\n   * This value is used internally for various computations, this should not get overriden.\r\n   * @internal\r\n   */\r\n  protected readonly defaultMinimumZoomLevel = 0;\r\n\r\n  /**\r\n   * This value is used internally for various computations, this should not get overriden.\r\n   * @internal\r\n   */\r\n  protected readonly defaultMaximumZoomLevel = 22;\r\n\r\n  /** @internal */\r\n  protected get _filterByCartoRange() { return true; }\r\n\r\n  constructor(protected readonly _settings: ImageMapLayerSettings, protected _usesCachedTiles: boolean) {\r\n    this._mercatorTilingScheme = new WebMercatorTilingScheme();\r\n    this._geographicTilingScheme = new GeographicTilingScheme(2, 1, true);\r\n  }\r\n\r\n  /**\r\n   * Initialize the provider by loading the first tile at its default maximum zoom level.\r\n   * @beta\r\n   */\r\n  public async initialize(): Promise<void> {\r\n    this.loadTile(0, 0, this.defaultMaximumZoomLevel).then((tileData: ImageSource | undefined) => { // eslint-disable-line @typescript-eslint/no-floating-promises\r\n      if (tileData !== undefined)\r\n        this._missingTileData = tileData.data as Uint8Array;\r\n    });\r\n  }\r\n\r\n  public abstract constructUrl(row: number, column: number, zoomLevel: number): Promise<string>;\r\n\r\n  public get tilingScheme(): MapTilingScheme { return this.useGeographicTilingScheme ? this._geographicTilingScheme : this._mercatorTilingScheme; }\r\n\r\n  /** @deprecated in 5.0 - might be removed in next major version. Use [addAttributions] instead. */\r\n  public addLogoCards(_cards: HTMLTableElement, _viewport: ScreenViewport): void { }\r\n\r\n  /**\r\n   * Add attribution logo cards for the data supplied by this provider to the [[Viewport]]'s logo div.\r\n   * @param _cards Logo cards HTML element that may contain custom data attributes.\r\n   * @param _viewport Viewport to add logo cards to.\r\n   * @beta\r\n   */\r\n  public async addAttributions(cards: HTMLTableElement, vp: ScreenViewport): Promise<void> {\r\n    // eslint-disable-next-line @typescript-eslint/no-deprecated\r\n    return Promise.resolve(this.addLogoCards(cards, vp));\r\n  }\r\n\r\n  /** @internal */\r\n  protected _missingTileData?: Uint8Array;\r\n\r\n  /** @internal */\r\n  public get transparentBackgroundString(): string { return this._settings.transparentBackground ? \"true\" : \"false\"; }\r\n\r\n  /** @internal */\r\n  protected async _areChildrenAvailable(_tile: ImageryMapTile): Promise<boolean> { return true; }\r\n\r\n  /** @internal */\r\n  public getPotentialChildIds(quadId: QuadId): QuadId[] {\r\n    const childLevel = quadId.level + 1;\r\n    return quadId.getChildIds(this.tilingScheme.getNumberOfXChildrenAtLevel(childLevel), this.tilingScheme.getNumberOfYChildrenAtLevel(childLevel));\r\n  }\r\n\r\n  /**\r\n   * Get child IDs of a quad and generate tiles based on these child IDs.\r\n   * See [[ImageryTileTree._loadChildren]] for the definition of `resolveChildren` where this function is commonly called.\r\n   * @param quadId quad to generate child IDs for.\r\n   * @param resolveChildren Function that creates tiles from child IDs.\r\n   * @beta\r\n   */\r\n  protected _generateChildIds(quadId: QuadId, resolveChildren: (childIds: QuadId[]) => void) {\r\n    resolveChildren(this.getPotentialChildIds(quadId));\r\n  }\r\n\r\n  /** @internal */\r\n  public generateChildIds(tile: ImageryMapTile, resolveChildren: (childIds: QuadId[]) => void) {\r\n    if (tile.depth >= this.maximumZoomLevel || (undefined !== this.cartoRange && this._filterByCartoRange && !this.cartoRange.intersectsRange(tile.rectangle))) {\r\n      tile.setLeaf();\r\n      return;\r\n    }\r\n    this._generateChildIds(tile.quadId, resolveChildren);\r\n  }\r\n\r\n  /**\r\n   * Get tooltip text for a specific quad and cartographic position.\r\n   * @param strings List of strings to contain tooltip text.\r\n   * @param quadId Quad ID to get tooltip for.\r\n   * @param _carto Cartographic that may be used to retrieve and/or format tooltip text.\r\n   * @param tree Tree associated with the quad to get the tooltip for.\r\n   * @internal\r\n   */\r\n  public async getToolTip(strings: string[], quadId: QuadId, _carto: Cartographic, tree: ImageryMapTileTree): Promise<void> {\r\n    if (doDebugToolTips) {\r\n      const range = quadId.getLatLongRangeDegrees(tree.tilingScheme);\r\n      strings.push(`QuadId: ${quadId.debugString}, Lat: ${range.low.x} - ${range.high.x} Long: ${range.low.y} - ${range.high.y}`);\r\n    }\r\n  }\r\n\r\n  /** @internal */\r\n  public async getFeatureInfo(featureInfos: MapLayerFeatureInfo[], _quadId: QuadId, _carto: Cartographic, _tree: ImageryMapTileTree, _hit: HitDetail, _options?: MapFeatureInfoOptions): Promise<void> {\r\n    // default implementation; simply return an empty feature info\r\n    featureInfos.push({ layerName: this._settings.name });\r\n  }\r\n\r\n  /** @internal */\r\n  public  decorate(_context: DecorateContext): void {\r\n  }\r\n\r\n  /** @internal */\r\n  protected async getImageFromTileResponse(tileResponse: Response, zoomLevel: number) {\r\n    const arrayBuffer = await tileResponse.arrayBuffer();\r\n    const byteArray: Uint8Array = new Uint8Array(arrayBuffer);\r\n    if (!byteArray || (byteArray.length === 0))\r\n      return undefined;\r\n    if (this.matchesMissingTile(byteArray) && zoomLevel > 8)\r\n      return undefined;\r\n\r\n    const contentType = tileResponse.headers.get(\"content-type\")?.toLowerCase();\r\n    let imageFormat: ImageSourceFormat | undefined;\r\n    if (contentType) {\r\n      // Note: 'includes' is used here instead of exact comparison because we encountered\r\n      // some servers that would give content type such as 'image/png;charset=UTF-8'.\r\n      if (contentType.includes(\"image/jpeg\"))\r\n        imageFormat = ImageSourceFormat.Jpeg;\r\n      else if (contentType.includes(\"image/png\"))\r\n        imageFormat = ImageSourceFormat.Png;\r\n    }\r\n\r\n    if (imageFormat !== undefined)\r\n      return new ImageSource(byteArray, imageFormat);\r\n\r\n    assert(false, \"Invalid tile content type\");\r\n    return undefined;\r\n  }\r\n\r\n  /**\r\n   * Change the status of this provider.\r\n   * Sub-classes should override 'onStatusUpdated' instead of this method.\r\n   * @internal\r\n   */\r\n  public setStatus(status: MapLayerImageryProviderStatus) {\r\n    if (this._status !== status) {\r\n      this.onStatusUpdated(status);\r\n      this._status = status;\r\n      this.onStatusChanged.raiseEvent(this);\r\n    }\r\n  }\r\n\r\n  /** Method called whenever the status changes, giving the opportunity to sub-classes to have a custom behavior.\r\n   *  @internal\r\n   */\r\n  protected onStatusUpdated(_newStatus: MapLayerImageryProviderStatus) { }\r\n\r\n  /** Transitions to [[MapLayerImageryProviderStatus.RequireAuth]] after a [[MapLayerFetchHandler]] reported an\r\n   * unrecoverable authentication failure. The user is notified once per transition, and only if tiles had\r\n   * loaded before: an initialization failure was already reported through source validation.\r\n   * @internal\r\n   */\r\n  protected reportAuthenticationFailure(): void {\r\n    const alreadyReported = this._status === MapLayerImageryProviderStatus.RequireAuth;\r\n    this.setStatus(MapLayerImageryProviderStatus.RequireAuth);\r\n    if (alreadyReported || !this._hasSuccessfullyFetchedTile)\r\n      return;\r\n\r\n    const msg = IModelApp.localization.getLocalizedString(\"iModelJs:MapLayers.Messages.LoadTileTokenError\", { layerName: this._settings.name });\r\n    IModelApp.notifications.outputMessage(new NotifyMessageDetails(OutputMessagePriority.Warning, msg));\r\n  }\r\n\r\n  /** @internal */\r\n  protected setRequestAuthorization(headers: Headers) {\r\n    if (this._settings.userName && this._settings.password) {\r\n      setBasicAuthorization(headers, this._settings.userName, this._settings.password);\r\n    }\r\n  }\r\n\r\n  /** The access client registered for this layer's format, if any.\r\n   * @internal\r\n   */\r\n  protected get accessClient(): MapLayerAccessClient | undefined {\r\n    return IModelApp.mapLayerFormatRegistry?.getAccessClient(this._settings.formatId);\r\n  }\r\n\r\n  /** True while at least one [[MapLayerFetchHandler]] is registered via [[MapLayerFormatRegistry.addMapLayerFetchHandler]].\r\n   * @internal\r\n   */\r\n  protected get hasFetchHandler(): boolean {\r\n    return (IModelApp.mapLayerFormatRegistry?.mapLayerFetchHandlers.length ?? 0) > 0;\r\n  }\r\n\r\n  /** Returns true if the given URL has the same origin as this layer's settings URL.\r\n   * Used to avoid leaking credentials to third-party hosts.\r\n   * @internal\r\n   */\r\n  protected matchesSettingsUrlOrigin(url: string): boolean {\r\n    const origin = tryGetOrigin(url);\r\n    return origin !== undefined && origin === tryGetOrigin(this._settings.url);\r\n  }\r\n\r\n  /** Returns true if the basic-auth credentials from the layer settings may be attached to a request to the given URL.\r\n   * Always true unless [[MapLayerFormatRegistry.restrictCredentialsToTrustedOrigins]] is enabled (opt-in).\r\n   * When enabled, the origin of this layer's settings URL is implicitly trusted (the credentials belong to that\r\n   * server); other origins must be listed in [[MapLayerFormatRegistry.trustedCredentialsOrigins]].\r\n   * See [[MapLayerFormatRegistry.isCredentialsSharingAllowed]].\r\n   * @internal\r\n   */\r\n  protected isCredentialsSharingAllowed(url: string): boolean {\r\n    return IModelApp.mapLayerFormatRegistry.isCredentialsSharingAllowed(url, this._settings.url);\r\n  }\r\n\r\n  /** Returns true if a request to the given URL may be retried with browser credentials included\r\n   * (i.e. SSO / Windows Authentication) after an NTLM or Negotiate http 401 challenge.\r\n   * See [[MapLayerFormatRegistry.isSsoAllowed]].\r\n   * @internal\r\n   */\r\n  protected isSsoAllowed(url: string): boolean {\r\n    return IModelApp.mapLayerFormatRegistry.isSsoAllowed(url);\r\n  }\r\n\r\n  /** @internal */\r\n  public async makeTileRequest(url: string, timeoutMs?: number, authorization?: string): Promise<Response> {\r\n\r\n    // We want to complete the first request before letting other requests go;\r\n    // this done to avoid flooding server with requests missing credentials\r\n    if (!this._firstRequestPromise)\r\n      this._firstRequestPromise  = new Promise<void>((resolve: any) => this.onFirstRequestCompleted.addOnce(()=>resolve()));\r\n    else\r\n      await this._firstRequestPromise;\r\n\r\n    let response: Response|undefined;\r\n    try {\r\n      response = await this.makeRequest(url, timeoutMs, authorization);\r\n    } finally {\r\n      this.onFirstRequestCompleted.raiseEvent();\r\n    }\r\n\r\n    if (response === undefined)\r\n      throw new Error(\"fetch call failed\");\r\n\r\n    return response;\r\n  }\r\n\r\n  /** Records the given URL's origin and transitions the status to [[MapLayerImageryProviderStatus.UntrustedOrigin]].\r\n   * Called when a request received an authentication challenge that could not be answered because the origin\r\n   * is not trusted (see [[MapLayerFormatRegistry.restrictCredentialsToTrustedOrigins]]).\r\n   * Raises [[onStatusChanged]] on the status transition, and again whenever a new origin is added.\r\n   * @internal\r\n   */\r\n  protected reportBlockedOrigin(url: string): void {\r\n    const origin = tryGetOrigin(url) ?? url;\r\n    const isNewOrigin = !this._blockedOrigins.has(origin);\r\n    this._blockedOrigins.add(origin);\r\n\r\n    if (this._status !== MapLayerImageryProviderStatus.UntrustedOrigin)\r\n      this.setStatus(MapLayerImageryProviderStatus.UntrustedOrigin);\r\n    else if (isNewOrigin)\r\n      this.onStatusChanged.raiseEvent(this);   // status unchanged, but a new origin was blocked\r\n  }\r\n\r\n  /** Logs a warning (once per origin, app-wide) when credentials are sent to an origin that would be blocked\r\n   * if [[MapLayerFormatRegistry.restrictCredentialsToTrustedOrigins]] were enabled.\r\n   * Helps applications discover the origins they need to whitelist before opting in to the restriction.\r\n   * See [[MapLayerFormatRegistry.logUntrustedOriginUse]].\r\n   * @internal\r\n   */\r\n  protected logUntrustedOriginUse(url: string): void {\r\n    IModelApp.mapLayerFormatRegistry.logUntrustedOriginUse(url);\r\n  }\r\n\r\n  /** Detects that a request carrying browser credentials (see [[includeUserCredentials]]) was transparently\r\n   * redirected to a different origin, and reports or logs that origin.\r\n   *\r\n   * This is a **best-effort, after-the-fact** signal used only while\r\n   * [[MapLayerFormatRegistry.restrictCredentialsToTrustedOrigins]] is disabled, where credentialed requests\r\n   * still follow redirects (see [[credentialedFetchRedirect]]). It cannot prevent the exposure — the credentials\r\n   * have already been sent — and it does not fire at all when the destination denies CORS, because `fetch`\r\n   * then rejects instead of returning a `Response`. The destination origin is never latched as SSO-succeeded,\r\n   * so credentials do not keep flowing to it.\r\n   * @internal\r\n   */\r\n  protected checkCredentialedRedirect(requestedUrl: string, response: Response): void {\r\n    const finalOrigin = tryGetOrigin(response.url);\r\n    if (!response.url || finalOrigin === undefined || finalOrigin === tryGetOrigin(requestedUrl))\r\n      return;\r\n\r\n    if (!this.isSsoAllowed(response.url))\r\n      this.reportBlockedOrigin(response.url);\r\n    else\r\n      this.logUntrustedOriginUse(response.url);   // no-op when the restriction is enabled\r\n  }\r\n\r\n  /** The default send for [[makeRequest]]: legacy redirect policy, NTLM/SSO handling and origin-trust\r\n   * checks for one request. The SSO retry never applies to sends a fetch handler modified.\r\n   */\r\n  private async sendDefaultRequest(request: MapLayerRequest, credentialed: boolean, hasCreds: boolean, hasSettingsCreds: boolean, timeoutMs?: number): Promise<Response> {\r\n    const requestUrl = request.url;\r\n    const includeCredentials = this.includeUserCredentials(requestUrl);\r\n    const opts: RequestInit = {\r\n      method: \"GET\",\r\n      headers: request.headers,\r\n      credentials: includeCredentials ? \"include\" : undefined,\r\n      // Sends the handler modified may carry injected secrets: same redirect policy as credentialed ones.\r\n      redirect: (includeCredentials || credentialed) ? credentialedFetchRedirect() : undefined,\r\n    };\r\n\r\n    if (timeoutMs !== undefined)\r\n      setRequestTimeout(opts, timeoutMs);\r\n\r\n    let rsp = await fetch(requestUrl, opts);\r\n\r\n    if (includeCredentials || credentialed)\r\n      this.checkCredentialedRedirect(requestUrl, rsp);\r\n\r\n    // fetch follows redirects transparently, so all trust decisions below target the final\r\n    // (post-redirect) URL reported by the response, not the URL we asked for.\r\n    const challengedUrl = rsp.url || requestUrl;\r\n\r\n    if (rsp.status === 401\r\n          && headersIncludeAuthMethod(rsp.headers, [\"ntlm\", \"negotiate\"])\r\n          && !includeCredentials\r\n          && !hasCreds\r\n          && !credentialed\r\n    ) {\r\n      if (this.isSsoAllowed(challengedUrl)) {\r\n        // Removed the previous headers and make sure \"include\" credentials is set\r\n        opts.headers = undefined;\r\n        opts.credentials = \"include\";\r\n        // A Negotiate/NTLM handshake is normally a same-URL 401 round-trip, but in legacy mode we preserve\r\n        // the previous behavior and allow the browser to follow redirects after the authenticated retry.\r\n        opts.redirect = IModelApp.mapLayerFormatRegistry.restrictCredentialsToTrustedOrigins ? \"error\" : undefined;\r\n        this.logUntrustedOriginUse(challengedUrl);\r\n\r\n        // We got a http 401 challenge, lets try again with SSO enabled (i.e. Windows Authentication)\r\n        rsp = await fetch(challengedUrl, opts);\r\n        if (rsp.status === 200) {\r\n          this.recordSsoSucceeded(challengedUrl);    // avoid going through 401 challenges over and over for this origin\r\n        }\r\n      } else {\r\n        this.reportBlockedOrigin(challengedUrl);\r\n      }\r\n    } else if ((rsp.status === 401 || rsp.status === 403) && hasSettingsCreds && !credentialed && !this.isCredentialsSharingAllowed(challengedUrl)) {\r\n      // Some servers answer an unauthenticated request with 403 (Forbidden) rather than a 401 challenge;\r\n      // since this request could not present its credentials to the challenging origin, either status most\r\n      // likely results from that (never on a send the handler modified: the handler classifies those).\r\n      // The permission is recomputed for the challenged URL rather than reusing the\r\n      // decision made for the requested one: `fetch` strips the Authorization header when it follows a\r\n      // cross-origin redirect, so a trusted request can still arrive unauthenticated at an untrusted origin,\r\n      // and conversely a request that started out untrusted may end up at an origin that is trusted.\r\n      this.reportBlockedOrigin(challengedUrl);\r\n    }\r\n\r\n    return rsp;\r\n  }\r\n\r\n  /** @internal */\r\n  public async makeRequest(url: string, timeoutMs?: number, authorization?: string): Promise<Response> {\r\n\r\n    let headers: Headers | undefined;\r\n    let hasCreds = false;\r\n    // Whether this request had basic-auth credentials of its own to offer. Requests carrying a caller-supplied\r\n    // `authorization` are excluded: those bypass the origin policy entirely.\r\n    const hasSettingsCreds = !authorization && !!this._settings.userName && !!this._settings.password;\r\n    if (authorization) {\r\n      headers = new Headers();\r\n      headers.set(\"Authorization\", authorization);\r\n    } else if (hasSettingsCreds) {\r\n      if (this.isCredentialsSharingAllowed(url)) {\r\n        hasCreds = true;\r\n        headers = new Headers();\r\n        this.setRequestAuthorization(headers);\r\n        if (!this.matchesSettingsUrlOrigin(url))\r\n          this.logUntrustedOriginUse(url);\r\n      }\r\n    }\r\n\r\n    // Route the request through the registered fetch handler (if any), which has full control: it may\r\n    // send a copy with other query parameters and headers, retry, or short-circuit. Handler failures propagate: the\r\n    // request must never silently degrade to an unauthenticated one.\r\n    try {\r\n      const { response, managedByHandler } = await fetchMapLayerRequest({\r\n        url,\r\n        formatId: this._settings.formatId,\r\n        layerUrl: this._settings.url,\r\n        layerProperties: this._settings.properties,\r\n        headers,\r\n        send: async (request, credentialed) => this.sendDefaultRequest(request, credentialed, hasCreds, hasSettingsCreds, timeoutMs),\r\n      });\r\n      if (managedByHandler)\r\n        this._handlerManagedResponses.add(response);\r\n      return response;\r\n    } catch (error) {\r\n      if (error instanceof MapLayerAuthenticationFailedError)\r\n        this.reportAuthenticationFailure();\r\n      throw error;\r\n    }\r\n  }\r\n\r\n  /** Responses of [[makeRequest]] managed by a fetch handler (see [[MapLayerFetchResult.managedByHandler]]). */\r\n  private readonly _handlerManagedResponses = new WeakSet<Response>();\r\n\r\n  /** Returns true if a fetch handler returned this [[makeRequest]] response as its own, in which case the\r\n   * provider applies none of its default response handling (status-code or protocol-error classification):\r\n   * the handler reports authentication failures by throwing [[MapLayerAuthenticationFailedError]] instead.\r\n   * @internal\r\n   */\r\n  protected isManagedByHandler(response: Response): boolean {\r\n    return this._handlerManagedResponses.has(response);\r\n  }\r\n\r\n  /** Returns a map layer tile at the specified settings. */\r\n  public async loadTile(row: number, column: number, zoomLevel: number): Promise<ImageSource | undefined> {\r\n\r\n    try {\r\n      const tileUrl: string = await this.constructUrl(row, column, zoomLevel);\r\n      if (tileUrl.length === 0)\r\n        return undefined;\r\n\r\n      const tileResponse: Response = await this.makeTileRequest(tileUrl);\r\n\r\n      if (!this._hasSuccessfullyFetchedTile) {\r\n        this._hasSuccessfullyFetchedTile = true;\r\n      }\r\n\r\n      return await this.getImageFromTileResponse(tileResponse, zoomLevel);\r\n    } catch (error: any) {\r\n      if (error?.status === 401) {\r\n        this.setStatus(MapLayerImageryProviderStatus.RequireAuth);\r\n\r\n        // Only report error to end-user if we were previously able to fetch tiles\r\n        // and then encountered an error, otherwise I assume an error was already reported\r\n        // through the source validation process.\r\n        if (this._hasSuccessfullyFetchedTile) {\r\n          const msg = IModelApp.localization.getLocalizedString(\"iModelJs:MapLayers.Messages.LoadTileTokenError\", { layerName: this._settings.name });\r\n          IModelApp.notifications.outputMessage(new NotifyMessageDetails(OutputMessagePriority.Warning, msg));\r\n        }\r\n\r\n      }\r\n      return undefined;\r\n    }\r\n  }\r\n\r\n  /** @internal */\r\n  protected async toolTipFromUrl(strings: string[], url: string): Promise<void> {\r\n    let headers: Headers | undefined;\r\n    if (this.isCredentialsSharingAllowed(url)) {\r\n      headers = new Headers();\r\n      this.setRequestAuthorization(headers);\r\n    }\r\n\r\n    let response: Response;\r\n    try {\r\n      ({ response } = await fetchMapLayerRequest({\r\n        url,\r\n        formatId: this._settings.formatId,\r\n        layerUrl: this._settings.url,\r\n        layerProperties: this._settings.properties,\r\n        headers,\r\n        send: async (request, credentialed) => {\r\n          const requestUrl = request.url;\r\n          const includeCredentials = this.includeUserCredentials(requestUrl);\r\n          const rsp = await fetch(requestUrl, {\r\n            method: \"GET\",\r\n            headers: request.headers,\r\n            credentials: includeCredentials ? \"include\" : undefined,\r\n            redirect: (includeCredentials || credentialed) ? credentialedFetchRedirect() : undefined,\r\n          });\r\n          if (includeCredentials || credentialed)\r\n            this.checkCredentialedRedirect(requestUrl, rsp);\r\n          return rsp;\r\n        },\r\n      }));\r\n    } catch (error) {\r\n      // Never degrade to an unauthenticated request or reject (getToolTip callers do not catch); skip the tooltip.\r\n      // The status transition the handler asked for still applies.\r\n      if (error instanceof MapLayerAuthenticationFailedError)\r\n        this.reportAuthenticationFailure();\r\n      if (this.hasFetchHandler)\r\n        Logger.logWarning(loggerCategory, `Map-layer fetch handler failed for tooltip request: ${BentleyError.getErrorMessage(error)}`);\r\n      return;\r\n    }\r\n\r\n    try {\r\n      let text = await response.text();\r\n      if (text) {\r\n        // Tooltip content (e.g. WMS GetFeatureInfo responses) is rendered as HTML downstream and may\r\n        // deliberately contain markup; text from origins not trusted for credentials is escaped.\r\n        // fetch follows redirects transparently, so the text may come from a different origin than requested.\r\n        if (!this.isCredentialsSharingAllowed(response.url || url))\r\n          text = escapeHtml(text);\r\n        strings.push(text);\r\n      }\r\n    } catch {\r\n    }\r\n  }\r\n\r\n  /** @internal */\r\n  public matchesMissingTile(tileData: Uint8Array): boolean {\r\n    if (!this._missingTileData)\r\n      return false;\r\n    if (tileData.length !== this._missingTileData.length)\r\n      return false;\r\n    for (let i: number = 0; i < tileData.length; i += 10) {\r\n      if (this._missingTileData[i] !== tileData[i]) {\r\n        return false;\r\n      }\r\n    }\r\n    return true;\r\n  }\r\n\r\n  /**\r\n   * Calculates the projected x cartesian coordinate in EPSG:3857 from the longitude in EPSG:4326 (WGS84)\r\n   * @param longitude Longitude in EPSG:4326 (WGS84)\r\n   * @internal\r\n   */\r\n  public getEPSG3857X(longitude: number): number {\r\n    return longitude * 20037508.34 / 180.0;\r\n  }\r\n\r\n  /**\r\n   * Calculates the projected y cartesian coordinate in EPSG:3857 from the latitude in EPSG:4326 (WGS84)\r\n   * @param latitude Latitude in EPSG:4326 (WGS84)\r\n   * @internal\r\n   */\r\n  public getEPSG3857Y(latitude: number): number {\r\n    const y = Math.log(Math.tan((90.0 + latitude) * Math.PI / 360.0)) / (Math.PI / 180.0);\r\n    return y * 20037508.34 / 180.0;\r\n  }\r\n\r\n  /**\r\n   * Calculates the longitude in EPSG:4326 (WGS84) from the projected x cartesian coordinate in EPSG:3857\r\n   * @param x3857 Projected x cartesian coordinate in EPSG:3857\r\n   * @internal\r\n   */\r\n  public getEPSG4326Lon(x3857: number): number {\r\n    return Angle.radiansToDegrees(x3857 / earthRadius);\r\n  }\r\n\r\n  /**\r\n   * Calculates the latitude in EPSG:4326 (WGS84) from the projected y cartesian coordinate in EPSG:3857\r\n   * @param y3857 Projected y cartesian coordinate in EPSG:3857\r\n   * @internal\r\n   */\r\n  public getEPSG4326Lat(y3857: number): number {\r\n    const y = 2 * Math.atan(Math.exp(y3857 / earthRadius)) - (Math.PI / 2);\r\n    return Angle.radiansToDegrees(y);\r\n  }\r\n\r\n  /**\r\n   * Get the bounding box/extents of a tile in EPSG:4326 (WGS84) format.\r\n   * Map tile providers like Bing and Mapbox allow the URL to be constructed directly from the zoom level and tile coordinates.\r\n   * However, WMS-based servers take a bounding box instead. This method can help get that bounding box from a tile.\r\n   * @param row Row of the tile\r\n   * @param column Column of the tile\r\n   * @param zoomLevel Desired zoom level of the tile\r\n   * @internal\r\n   */\r\n  public getEPSG4326Extent(row: number, column: number, zoomLevel: number): WGS84Extent {\r\n    // Shift left (this.tileSize << zoomLevel) overflow when using 512 pixels tile at higher resolution,\r\n    // so use Math.pow instead (I assume the performance lost to be minimal)\r\n    const mapSize = this.tileSize * Math.pow(2, zoomLevel);\r\n    const leftGrid = this.tileSize * column;\r\n    const topGrid = this.tileSize * row;\r\n\r\n    const longitudeLeft = 360 * ((leftGrid / mapSize) - 0.5);\r\n    const y0 = 0.5 - ((topGrid + this.tileSize) / mapSize);\r\n    const latitudeBottom = 90.0 - 360.0 * Math.atan(Math.exp(-y0 * 2 * Math.PI)) / Math.PI;\r\n\r\n    const longitudeRight = 360 * (((leftGrid + this.tileSize) / mapSize) - 0.5);\r\n    const y1 = 0.5 - (topGrid / mapSize);\r\n    const latitudeTop = 90.0 - 360.0 * Math.atan(Math.exp(-y1 * 2 * Math.PI)) / Math.PI;\r\n\r\n    return { longitudeLeft, longitudeRight, latitudeTop, latitudeBottom };\r\n  }\r\n\r\n  /**\r\n   * Get the bounding box/extents of a tile in EPSG:3857 format.\r\n   * @param row Row of the tile\r\n   * @param column Column of the tile\r\n   * @param zoomLevel Desired zoom level of the tile\r\n   * @internal\r\n   */\r\n  public getEPSG3857Extent(row: number, column: number, zoomLevel: number): { left: number, right: number, top: number, bottom: number } {\r\n    const epsg4326Extent = this.getEPSG4326Extent(row, column, zoomLevel);\r\n\r\n    const left = this.getEPSG3857X(epsg4326Extent.longitudeLeft);\r\n    const right = this.getEPSG3857X(epsg4326Extent.longitudeRight);\r\n    const bottom = this.getEPSG3857Y(epsg4326Extent.latitudeBottom);\r\n    const top = this.getEPSG3857Y(epsg4326Extent.latitudeTop);\r\n\r\n    return { left, right, bottom, top };\r\n  }\r\n\r\n  /** @internal */\r\n  public getEPSG3857ExtentString(row: number, column: number, zoomLevel: number) {\r\n    const tileExtent = this.getEPSG3857Extent(row, column, zoomLevel);\r\n    return `${tileExtent.left.toFixed(2)},${tileExtent.bottom.toFixed(2)},${tileExtent.right.toFixed(2)},${tileExtent.top.toFixed(2)}`;\r\n  }\r\n\r\n  /** @internal */\r\n  public getEPSG4326TileExtentString(row: number, column: number, zoomLevel: number, latLongAxisOrdering: boolean) {\r\n    const tileExtent = this.getEPSG4326Extent(row, column, zoomLevel);\r\n    return this.getEPSG4326ExtentString(tileExtent, latLongAxisOrdering);\r\n\r\n  }\r\n\r\n  /** @internal */\r\n  public getEPSG4326ExtentString(tileExtent: WGS84Extent, latLongAxisOrdering: boolean) {\r\n\r\n    if (latLongAxisOrdering) {\r\n      return `${tileExtent.latitudeBottom.toFixed(8)},${tileExtent.longitudeLeft.toFixed(8)},${tileExtent.latitudeTop.toFixed(8)},${tileExtent.longitudeRight.toFixed(8)}`;\r\n    } else {\r\n      return `${tileExtent.longitudeLeft.toFixed(8)},${tileExtent.latitudeBottom.toFixed(8)},${tileExtent.longitudeRight.toFixed(8)},${tileExtent.latitudeTop.toFixed(8)}`;\r\n    }\r\n  }\r\n\r\n  /** Append custom parameters for settings to provided URL object.\r\n   * @internal\r\n   */\r\n  protected appendCustomParams(url: string) {\r\n    return appendQueryParams(url, this._settings.collectQueryParams());\r\n  }\r\n}\r\n"]}

package/lib/esm/tile/map/MapLayerSources.d.ts

@@ -65,13 +65,27 @@ export declare class MapLayerSource {
     transparentBackground?: boolean;
     userName?: string;
     password?: string;
-    /** List of query parameters that will get appended to the source URL that should be be persisted part of the JSON representation.
+    /** Former name of [[queryParams]], which stores the value; retained as the backing field so existing subclasses
+     * and `delete` keep working.
+     * @deprecated in 5.16. Use [[queryParams]].
      * @beta
     */
     savedQueryParams?: {
         [key: string]: string;
     };
+    /** Non-secret query parameters appended to every request made for the source, persisted as part of the JSON
+     * representation ([[MapLayerSourceProps.queryParams]]). Secrets must never be placed here; the hosting application
+     * injects them per session through a [[MapLayerFetchHandler]].
+     * @beta
+    */
+    get queryParams(): {
+        [key: string]: string;
+    } | undefined;
+    set queryParams(value: {
+        [key: string]: string;
+    } | undefined);
     /** List of query parameters that will get appended to the source URL that should *not* be be persisted part of the JSON representation.
+     * @deprecated in 5.16. Register a [[MapLayerFetchHandler]] ([[MapLayerFormatRegistry.addMapLayerFetchHandler]]) to inject secret or per-session parameters, which unlike this field are protected against leaking through redirects; use [[queryParams]] for non-secret parameters.
      * @beta
     */
     unsavedQueryParams?: {
@@ -87,9 +101,10 @@ export declare class MapLayerSource {
     };
     toLayerSettings(subLayers?: MapSubLayerProps[]): ImageMapLayerSettings | undefined;
     private getCredentials;
-    /** Collect all query parameters
-   * @beta
-   */
+    /** The query parameters actually sent with requests: [[queryParams]] overlaid with the deprecated `unsavedQueryParams`
+     * (a key present in both takes the latter's value). Equals a copy of [[queryParams]] once `unsavedQueryParams` is removed.
+     * @beta
+     */
     collectQueryParams(): {
         [key: string]: string;
     };

package/lib/esm/tile/map/MapLayerSources.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"MapLayerSources.d.ts","sourceRoot":"","sources":["../../../../src/tile/map/MapLayerSources.ts"],"names":[],"mappings":"AAIA;;GAEG;AAGH,OAAO,EAC2D,4BAA4B,EAAE,qBAAqB,EAAE,gBAAgB,EACtI,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE1D,OAAO,EAAsC,wBAAwB,EAAE,MAAM,aAAa,CAAC;AAE3F;;GAEG;AACH,oBAAY,oBAAoB;IAC9B,4BAA4B;IAC5B,KAAK,IAAA;IACL,iEAAiE;IACjE,kBAAkB,IAAA;IAClB,6EAA6E;IAC7E,aAAa,IAAA;IACb,uDAAuD;IACvD,eAAe,IAAA;IACf,oEAAoE;IACpE,UAAU,IAAA;IACV,iEAAiE;IACjE,WAAW,IAAA;IACX,mDAAmD;IACnD,uBAAuB,IAAA;IACvB;OACG;IACH,kBAAkB,IAAA;IAClB;;;;OAIG;IACH,eAAe,IAAA;CAChB;AAED;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IAClC,2DAA2D;IAC3D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW;IACX,IAAI,EAAE,MAAM,CAAC;IACb,oCAAoC;IACpC,GAAG,EAAE,MAAM,CAAC;IACZ,uEAAuE;IACvE,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,0FAA0F;IAC1F,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB;;MAEE;IACF,WAAW,CAAC,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,CAAC;CACzC;AAED;;GAEG;AACH,qBAAa,cAAc;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,UAAS;IAChB,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAEzB;;MAEE;IACK,gBAAgB,CAAC,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,CAAC;IAEpD;;MAEE;IACK,kBAAkB,CAAC,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,CAAC;IAEtD,OAAO;WASO,QAAQ,CAAC,IAAI,EAAE,mBAAmB,GAAG,cAAc,GAAG,SAAS;IAOhE,cAAc,CAAC,WAAW,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,wBAAwB,CAAC;IAIrF,eAAe;WACD,sBAAsB,CAAC,KAAK,EAAE,4BAA4B;IAajE,MAAM,IAAI,IAAI,CAAC,mBAAmB,EAAE,UAAU,CAAC,GAAG;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAC;IAIpE,eAAe,CAAC,SAAS,CAAC,EAAE,gBAAgB,EAAE,GAAG,qBAAqB,GAAG,SAAS;IAiBzF,OAAO,CAAC,cAAc;IAItB;;KAEC;IACM,kBAAkB;;;CAU1B;AAED;;GAEG;AACH,qBAAa,eAAe;IAEN,OAAO,CAAC,QAAQ;IADpC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAkB;IAC3C,OAAO;WAEO,WAAW;IAElB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,OAAe,GAAG,cAAc,GAAG,SAAS;IAQrF,IAAW,MAAM,IAAI,cAAc,EAAE,CAQpC;IACD,IAAW,SAAS,qBAA4B;IAChD,IAAW,KAAK,IAAI,cAAc,EAAE,CAQnC;IAED,OAAO,CAAC,MAAM,CAAC,qBAAqB;IAYpC,OAAO,CAAC,MAAM,CAAC,oBAAoB;WAYf,MAAM,CAAC,MAAM,CAAC,EAAE,gBAAgB,EAAE,qBAAqB,UAAQ,EAAE,gBAAgB,UAAQ,GAAG,OAAO,CAAC,eAAe,CAAC;WAsDpH,0BAA0B,CAAC,cAAc,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC;WAavG,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;CAYvD"}
+{"version":3,"file":"MapLayerSources.d.ts","sourceRoot":"","sources":["../../../../src/tile/map/MapLayerSources.ts"],"names":[],"mappings":"AAIA;;GAEG;AAGH,OAAO,EAC2D,4BAA4B,EAAE,qBAAqB,EAAE,gBAAgB,EACtI,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE1D,OAAO,EAAsC,wBAAwB,EAAE,MAAM,aAAa,CAAC;AAE3F;;GAEG;AACH,oBAAY,oBAAoB;IAC9B,4BAA4B;IAC5B,KAAK,IAAA;IACL,iEAAiE;IACjE,kBAAkB,IAAA;IAClB,6EAA6E;IAC7E,aAAa,IAAA;IACb,uDAAuD;IACvD,eAAe,IAAA;IACf,oEAAoE;IACpE,UAAU,IAAA;IACV,iEAAiE;IACjE,WAAW,IAAA;IACX,mDAAmD;IACnD,uBAAuB,IAAA;IACvB;OACG;IACH,kBAAkB,IAAA;IAClB;;;;OAIG;IACH,eAAe,IAAA;CAChB;AAED;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IAClC,2DAA2D;IAC3D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW;IACX,IAAI,EAAE,MAAM,CAAC;IACb,oCAAoC;IACpC,GAAG,EAAE,MAAM,CAAC;IACZ,uEAAuE;IACvE,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,0FAA0F;IAC1F,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB;;MAEE;IACF,WAAW,CAAC,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,CAAC;CACzC;AAED;;GAEG;AACH,qBAAa,cAAc;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,UAAS;IAChB,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAEzB;;;;MAIE;IACK,gBAAgB,CAAC,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,CAAC;IAEpD;;;;MAIE;IAEF,IAAW,WAAW,IAAI;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,GAAG,SAAS,CAAkC;IAEjG,IAAW,WAAW,CAAC,KAAK,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,GAAG,SAAS,EAAoC;IAEvG;;;MAGE;IACK,kBAAkB,CAAC,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,CAAC;IAEtD,OAAO;WASO,QAAQ,CAAC,IAAI,EAAE,mBAAmB,GAAG,cAAc,GAAG,SAAS;IAOhE,cAAc,CAAC,WAAW,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,wBAAwB,CAAC;IAIrF,eAAe;WACD,sBAAsB,CAAC,KAAK,EAAE,4BAA4B;IAajE,MAAM,IAAI,IAAI,CAAC,mBAAmB,EAAE,UAAU,CAAC,GAAG;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAC;IAIpE,eAAe,CAAC,SAAS,CAAC,EAAE,gBAAgB,EAAE,GAAG,qBAAqB,GAAG,SAAS;IAmBzF,OAAO,CAAC,cAAc;IAItB;;;OAGG;IACI,kBAAkB;;;CAY1B;AAED;;GAEG;AACH,qBAAa,eAAe;IAEN,OAAO,CAAC,QAAQ;IADpC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAkB;IAC3C,OAAO;WAEO,WAAW;IAElB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,OAAe,GAAG,cAAc,GAAG,SAAS;IAQrF,IAAW,MAAM,IAAI,cAAc,EAAE,CAQpC;IACD,IAAW,SAAS,qBAA4B;IAChD,IAAW,KAAK,IAAI,cAAc,EAAE,CAQnC;IAED,OAAO,CAAC,MAAM,CAAC,qBAAqB;IAYpC,OAAO,CAAC,MAAM,CAAC,oBAAoB;WAYf,MAAM,CAAC,MAAM,CAAC,EAAE,gBAAgB,EAAE,qBAAqB,UAAQ,EAAE,gBAAgB,UAAQ,GAAG,OAAO,CAAC,eAAe,CAAC;WAsDpH,0BAA0B,CAAC,cAAc,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC;WAavG,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;CAYvD"}