restore: roll back to 7d854ff (stable pre-security state)

Full restore of the 7d854ff snapshot (2026-06-16 18:05, before the security
review). Forward commit, no history rewrite — f8a1310 and all later commits
remain recoverable in history.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

app/Livewire/LayerManager.php

@@ -8,9 +8,11 @@ use Livewire\Attributes\Layout;
 use App\Models\Project;
 use App\Models\Phase;
 use App\Models\Layer;
-use App\Services\SpatialFileConverter;
 use App\Models\Feature;
+use App\Models\InspectionTemplate;
+use App\Services\SpatialFileConverter;
 use Illuminate\Support\Facades\Auth;
+use Illuminate\Support\Facades\DB;
 use Illuminate\Support\Facades\Storage;
 
 #[Layout('layouts.app')]
@@ -19,104 +21,109 @@ class LayerManager extends Component
     use WithFileUploads;
 
     public Project $project;
-    public Phase $phase;
+    public Phase   $phase;
     public $layers;
     public $selectedLayer = null;
-    public $visibleLayers = [];          // IDs de capas visibles
+    public $visibleLayers = [];
 
-    public $uploadFile = null;
-    public $layerName = '';
-    public $layerColor = '#3b82f6';
-    public $manualGeojson = null;
-    public $drawingMode = false;
+    public $uploadFile  = null;
+    public $layerName   = '';
+    public $layerColor  = '#3b82f6';
 
-    protected $rules = [
-        'uploadFile' => 'required|file|mimes:geojson,kmz,kml,shp,dwg,zip|max:51200',
-        'layerName' => 'required|string|max:255',
-        'layerColor' => 'nullable|string|size:7',
-    ];
+    // Batch assign
+    public $templates       = [];
+    public $batchTemplateId = null;
+    public $batchStatus     = '';
 
     public function mount(Project $project, Phase $phase)
     {
         $this->project = $project;
-        $this->phase = $phase;
+        $this->phase   = $phase;
 
-        if ($this->phase->project_id !== $this->project->id) {
-            abort(404);
-        }
+        if ($this->phase->project_id !== $this->project->id) abort(404);
 
         $user = Auth::user();
         if (!$user->hasRole('Admin') && !$project->users()->where('user_id', $user->id)->exists()) {
             abort(403);
         }
 
+        $this->templates = InspectionTemplate::where('project_id', $this->project->id)->get();
         $this->loadLayers();
-        // Por defecto todas visibles
         $this->visibleLayers = $this->layers->pluck('id')->toArray();
         $this->emitInitialLayersData();
     }
 
+    // ── Data loaders ──────────────────────────────────────────────────────────
+
     public function loadLayers()
     {
-        $this->layers = Layer::with('features')->where('phase_id', $this->phase->id)->latest()->get();
-        $this->visibleLayers = array_intersect($this->visibleLayers, $this->layers->pluck('id')->toArray());
+        $this->layers = Layer::withCount('features')
+            ->withAvg('features', 'progress')
+            ->where('phase_id', $this->phase->id)
+            ->latest()
+            ->get();
+
+        $this->visibleLayers = array_values(
+            array_intersect($this->visibleLayers, $this->layers->pluck('id')->toArray())
+        );
+    }
+
+    private function buildLayerPayload(Layer $layer): array
+    {
+        $color    = $layer->color ?: '#3b82f6';
+        $features = ($layer->relationLoaded('features') ? $layer->features : $layer->features()->get())
+            ->map(fn($f) => [
+                'type'       => 'Feature',
+                'id'         => $f->id,
+                'geometry'   => $f->geometry,
+                'properties' => [
+                    'name'        => $f->name ?? 'Elemento',
+                    'progress'    => $f->progress,
+                    'status'      => $f->status ?? 'planned',
+                    'responsible' => $f->responsible,
+                    'template_id' => $f->template_id,
+                ],
+            ])->values()->toArray();
+
+        return [
+            'id'     => $layer->id,
+            'color'  => $color,
+            'geojson' => [
+                'type'     => 'FeatureCollection',
+                'features' => $features,
+                'style'    => ['color' => $color],
+            ],
+        ];
     }
 
     private function emitInitialLayersData()
     {
-        $layersData = $this->layers->map(function($layer) {
-            // Usar el color guardado en BD o el color del formulario
-            $color = $layer->color ?: ($this->layerColor ?: '#3b82f6');
-
-            // Construir FeatureCollection a partir de los features de esta capa
-            $features = $layer->features->map(function($feature) {
-                return [
-                    'type' => 'Feature',
-                    'id' => $feature->id,
-                    'geometry' => $feature->geometry,
-                    'properties' => [
-                        'name' => $feature->name,
-                        'progress' => $feature->progress,
-                        'responsible' => $feature->responsible,
-                        'template_id' => $feature->template_id,
-                    ]
-                ];
-            })->values()->toArray();
-
-            $geojson = [
-                'type' => 'FeatureCollection',
-                'features' => $features,
-                'style' => ['color' => $color]
-            ];
-
-            return [
-                'id' => $layer->id,
-                'geojson' => $geojson,
-                'color' => $color,
-            ];
-        });
-
+        $this->layers->loadMissing('features');
         $this->dispatch('initialLayersData', [
-            'layers' => $layersData,
-            'visibleLayers' => $this->visibleLayers,
+            'layers'          => $this->layers->map(fn($l) => $this->buildLayerPayload($l)),
+            'visibleLayers'   => $this->visibleLayers,
             'selectedLayerId' => $this->selectedLayer?->id,
         ]);
     }
 
+    // ── Visibility ────────────────────────────────────────────────────────────
+
     public function toggleLayerVisibility($layerId)
     {
         if ($this->selectedLayer && $this->selectedLayer->id == $layerId) {
-            session()->flash('info', 'No puedes ocultar la capa que estás editando.');
+            $this->dispatch('notify', 'No puedes ocultar la capa que estás editando');
             return;
         }
         if (in_array($layerId, $this->visibleLayers)) {
-            $this->visibleLayers = array_diff($this->visibleLayers, [$layerId]);
+            $this->visibleLayers = array_values(array_diff($this->visibleLayers, [$layerId]));
         } else {
             $this->visibleLayers[] = $layerId;
         }
         $this->dispatch('visibilityChanged', $this->visibleLayers);
     }
 
+    // ── Select ────────────────────────────────────────────────────────────────
+
     public function selectLayer($layerId)
     {
         $this->selectedLayer = Layer::with('features')->find($layerId);
@@ -127,186 +134,259 @@ class LayerManager extends Component
             $this->dispatch('visibilityChanged', $this->visibleLayers);
         }
 
-        // Construir el GeoJSON desde los features de la capa seleccionada
-        $features = $this->selectedLayer->features->map(function($feature) {
-            return [
-                'type' => 'Feature',
-                'id' => $feature->id,
-                'geometry' => $feature->geometry,
-                'properties' => [
-                    'name' => $feature->name,
-                    'progress' => $feature->progress,
-                    'responsible' => $feature->responsible,
-                    'template_id' => $feature->template_id,
-                ]
-            ];
-        })->values()->toArray();
-
-        $color = $this->selectedLayer->color ?: ($this->layerColor ?: '#3b82f6');
-        $geojson = [
-            'type' => 'FeatureCollection',
-            'features' => $features,
-            'style' => ['color' => $color]
-        ];
-
+        $payload = $this->buildLayerPayload($this->selectedLayer);
         $this->dispatch('layerSelectedForEdit', [
             'layerId' => $layerId,
-            'geojson' => $geojson,
-            'color' => $color,
+            'geojson' => $payload['geojson'],
+            'color'   => $payload['color'],
         ]);
-        session()->flash('info', 'Editando capa: ' . $this->selectedLayer->name);
+        $this->dispatch('notify', 'Editando: ' . $this->selectedLayer->name);
     }
 
+    // ── Import file ───────────────────────────────────────────────────────────
+
     public function importFile()
     {
         $user = Auth::user();
         if (!$user->can('upload layers') && !$user->hasRole('Admin')) {
-            session()->flash('error', 'Sin permisos.');
+            $this->dispatch('notify', 'Sin permisos para subir capas');
             return;
         }
 
-        // Validar campos obligatorios y tamaño máximo
         $this->validate([
             'uploadFile' => 'required|file|max:51200',
-            'layerName' => 'required|string|max:255',
+            'layerName'  => 'required|string|max:255',
             'layerColor' => 'nullable|string|size:7',
         ]);
 
-        $extension = strtolower($this->uploadFile->getClientOriginalExtension());
-        $mime = $this->uploadFile->getMimeType();
-
-        $allowedExtensions = ['geojson', 'kmz', 'kml', 'shp', 'dwg', 'zip'];
-        $allowedMimes = [
-            'application/vnd.google-earth.kml+xml',
-            'application/vnd.google-earth.kmz',
-            'application/zip',
-            'application/x-zip-compressed',
-            'application/x-shapefile',
-            'image/vnd.dwg',
-            'application/acad',
-            'application/geo+json',
-            'text/xml',          // ✅ Aceptar KML con text/xml
-            'application/xml',   // ✅ Alternativa
-        ];
-
-        if (!in_array($extension, $allowedExtensions) && !in_array($mime, $allowedMimes)) {
-            session()->flash('error', 'Tipo de archivo no permitido. Extensiones válidas: ' . implode(', ', $allowedExtensions));
+        $ext     = strtolower($this->uploadFile->getClientOriginalExtension());
+        $allowed = ['geojson', 'json', 'kmz', 'kml', 'shp', 'dwg', 'zip'];
+        if (!in_array($ext, $allowed)) {
+            $this->dispatch('notify', 'Extensión no permitida. Válidas: ' . implode(', ', $allowed));
             return;
         }
 
-        $projectDir = "uploads/projects/{$this->project->id}/layers";
-        $originalPath = $this->uploadFile->store($projectDir, 'public');
         $geojson = SpatialFileConverter::convertToGeoJson($this->uploadFile);
-        
         if (!$geojson) {
-            session()->flash('error', 'Conversión fallida. Asegúrate de que el archivo sea válido (KML, GeoJSON, etc.).');
+            $this->dispatch('notify', 'No se pudo convertir el archivo. Comprueba que sea GeoJSON, KML o Shapefile válido.');
             return;
         }
-        
+
         $layerColor = $this->layerColor ?: '#3b82f6';
-        $geojson['style'] = ['color' => $layerColor];
+        $layerName  = $this->layerName;
 
-        $layer = Layer::create([
-            'project_id' => $this->project->id,
-            'phase_id' => $this->phase->id,
-            'name' => $this->layerName,
-            'color' => $layerColor,
-            'original_file' => $originalPath,
-            'uploaded_by' => $user->id,
-        ]);
+        try {
+            DB::transaction(function () use ($geojson, $layerColor, $layerName, $user) {
+                $path = $this->uploadFile->store(
+                    "uploads/projects/{$this->project->id}/layers", 'public'
+                );
 
-        // Crear features a partir del GeoJSON
-        if (isset($geojson['features'])) {
-            foreach ($geojson['features'] as $featureData) {
-                Feature::create([
-                    'layer_id' => $layer->id,
-                    'name' => $featureData['properties']['name'] ?? null,
-                    'geometry' => $featureData['geometry'],
-                    'properties' => $featureData['properties'] ?? [],
-                    'template_id' => $featureData['properties']['template_id'] ?? null,
-                    'progress' => $featureData['properties']['progress'] ?? 0,
-                    'responsible' => $featureData['properties']['responsible'] ?? null,
+                $layer = Layer::create([
+                    'project_id'    => $this->project->id,
+                    'phase_id'      => $this->phase->id,
+                    'name'          => $layerName,
+                    'color'         => $layerColor,
+                    'original_file' => $path,
+                    'uploaded_by'   => $user->id,
                 ]);
-            }
+
+                $idx = 0;
+                foreach ($geojson['features'] ?? [] as $fd) {
+                    $idx++;
+                    $name = trim($fd['properties']['name'] ?? '');
+                    if ($name === '') $name = $layerName . ' — Elemento ' . $idx;
+
+                    Feature::create([
+                        'layer_id'    => $layer->id,
+                        'name'        => $name,
+                        'geometry'    => $fd['geometry'],
+                        'properties'  => $fd['properties'] ?? [],
+                        'template_id' => $fd['properties']['template_id'] ?? null,
+                        'progress'    => $fd['properties']['progress'] ?? 0,
+                        'status'      => in_array($fd['properties']['status'] ?? '', Feature::STATUSES)
+                                            ? $fd['properties']['status']
+                                            : 'planned',
+                        'responsible' => $fd['properties']['responsible'] ?? null,
+                    ]);
+                }
+
+                $this->visibleLayers[] = $layer->id;
+            });
+        } catch (\Throwable $e) {
+            $this->dispatch('notify', 'Error al importar: ' . $e->getMessage());
+            return;
         }
 
         $this->loadLayers();
-        $this->visibleLayers[] = $layer->id;
         $this->reset(['uploadFile', 'layerName']);
         $this->emitInitialLayersData();
-        session()->flash('message', 'Capa importada correctamente.');
+        $this->dispatch('notify', 'Capa importada correctamente');
     }
 
+    // ── Create empty layer ────────────────────────────────────────────────────
+
     public function createEmptyLayer()
     {
         $user = Auth::user();
+        if (!$user->can('upload layers') && !$user->hasRole('Admin')) {
+            $this->dispatch('notify', 'Sin permisos para crear capas');
+            return;
+        }
+
         $layer = Layer::create([
-            'project_id' => $this->project->id,
-            'phase_id' => $this->phase->id,
-            'name' => $this->layerName ?: 'Nueva capa',
-            'color' => $this->layerColor ?: '#3b82f6',
+            'project_id'    => $this->project->id,
+            'phase_id'      => $this->phase->id,
+            'name'          => $this->layerName ?: 'Nueva capa',
+            'color'         => $this->layerColor ?: '#3b82f6',
             'original_file' => null,
-            'uploaded_by' => $user->id,
+            'uploaded_by'   => $user->id,
         ]);
+
         $this->loadLayers();
         $this->visibleLayers[] = $layer->id;
         $this->selectLayer($layer->id);
         $this->emitInitialLayersData();
-        session()->flash('message', 'Capa vacía creada. Usa el editor para añadir elementos.');
+        $this->dispatch('notify', 'Capa vacía creada. Dibuja elementos en el mapa.');
     }
 
+    // ── Save drawn GeoJSON ────────────────────────────────────────────────────
+
     public function saveManualGeojson($geojsonString)
     {
         if (!$this->selectedLayer) {
-            session()->flash('error', 'No hay capa seleccionada.');
+            $this->dispatch('notify', 'No hay capa seleccionada');
             return;
         }
+
         $geojson = json_decode($geojsonString, true);
         if (json_last_error() !== JSON_ERROR_NONE || !isset($geojson['features'])) {
-            session()->flash('error', 'GeoJSON inválido.');
+            $this->dispatch('notify', 'GeoJSON inválido');
             return;
         }
 
-        // Eliminar todos los features existentes de esta capa
-        $this->selectedLayer->features()->delete();
+        $layerId   = $this->selectedLayer->id;
+        $layerName = $this->selectedLayer->name;
 
-        // Crear nuevos features a partir del GeoJSON
-        foreach ($geojson['features'] as $featureData) {
-            Feature::create([
-                'layer_id' => $this->selectedLayer->id,
-                'name' => $featureData['properties']['name'] ?? null,
-                'geometry' => $featureData['geometry'],
-                'properties' => $featureData['properties'] ?? [],
-                'template_id' => $featureData['properties']['template_id'] ?? null,
-                'progress' => $featureData['properties']['progress'] ?? 0,
-                'responsible' => $featureData['properties']['responsible'] ?? null,
-            ]);
+        try {
+            DB::transaction(function () use ($geojson, $layerId, $layerName) {
+                // forceDelete: reemplazamos completamente los elementos de la capa
+                Feature::where('layer_id', $layerId)->forceDelete();
+
+                $idx = 0;
+                foreach ($geojson['features'] as $fd) {
+                    $idx++;
+                    $name = trim($fd['properties']['name'] ?? '');
+                    if ($name === '') $name = $layerName . ' — Elemento ' . $idx;
+
+                    Feature::create([
+                        'layer_id'    => $layerId,
+                        'name'        => $name,
+                        'geometry'    => $fd['geometry'],
+                        'properties'  => $fd['properties'] ?? [],
+                        'template_id' => $fd['properties']['template_id'] ?? null,
+                        'progress'    => $fd['properties']['progress'] ?? 0,
+                        'status'      => in_array($fd['properties']['status'] ?? '', Feature::STATUSES)
+                                            ? $fd['properties']['status']
+                                            : 'planned',
+                        'responsible' => $fd['properties']['responsible'] ?? null,
+                    ]);
+                }
+            });
+        } catch (\Throwable $e) {
+            $this->dispatch('notify', 'Error al guardar: ' . $e->getMessage());
+            return;
         }
 
         $this->loadLayers();
         $this->selectLayer($this->selectedLayer->id);
         $this->emitInitialLayersData();
-        session()->flash('message', 'Capa guardada con ' . count($geojson['features']) . ' elementos.');
+        $this->dispatch('notify', count($geojson['features']) . ' elementos guardados');
     }
 
+    // ── Delete layer ──────────────────────────────────────────────────────────
+
     public function deleteLayer($layerId)
     {
         $user = Auth::user();
         if (!$user->can('delete layers') && !$user->hasRole('Admin')) abort(403);
-        // Verify layer belongs to this phase (prevents cross-project deletion)
+
+        // Verify it belongs to this phase (prevents cross-project deletion)
         $layer = Layer::where('id', $layerId)->where('phase_id', $this->phase->id)->first();
         if (!$layer) return;
+
         if ($layer->original_file) Storage::disk('public')->delete($layer->original_file);
-        $layer->features()->delete(); // opcional, si no usas cascade
+        $layer->features()->delete();
         $layer->delete();
+
         $this->loadLayers();
         if ($this->selectedLayer && $this->selectedLayer->id == $layerId) {
             $this->selectedLayer = null;
+            $this->dispatch('layerSelectedForEdit', null);
         }
         $this->emitInitialLayersData();
-        session()->flash('message', 'Capa eliminada.');
+        $this->dispatch('notify', 'Capa eliminada');
     }
 
+    // ── Export GeoJSON ────────────────────────────────────────────────────────
+
+    public function exportLayer($layerId)
+    {
+        $layer = Layer::with('features')
+            ->where('id', $layerId)
+            ->where('phase_id', $this->phase->id)
+            ->first();
+        if (!$layer) return;
+
+        $fc = [
+            'type'     => 'FeatureCollection',
+            'name'     => $layer->name,
+            'features' => $layer->features->map(fn($f) => [
+                'type'       => 'Feature',
+                'geometry'   => $f->geometry,
+                'properties' => array_merge($f->properties ?? [], [
+                    'name'        => $f->name,
+                    'progress'    => $f->progress,
+                    'status'      => $f->status,
+                    'responsible' => $f->responsible,
+                    'template_id' => $f->template_id,
+                ]),
+            ])->values()->toArray(),
+        ];
+
+        $filename = preg_replace('/[^a-z0-9_\-]/i', '_', $layer->name) . '.geojson';
+
+        return response()->streamDownload(function () use ($fc) {
+            echo json_encode($fc, JSON_UNESCAPED_UNICODE | JSON_PRETTY_PRINT | JSON_UNESCAPED_SLASHES);
+        }, $filename, ['Content-Type' => 'application/geo+json']);
+    }
+
+    // ── Batch assign template / status ────────────────────────────────────────
+
+    public function batchAssign($layerId)
+    {
+        $layer = Layer::where('id', $layerId)->where('phase_id', $this->phase->id)->first();
+        if (!$layer) return;
+
+        $data = [];
+        if ($this->batchStatus && in_array($this->batchStatus, Feature::STATUSES)) {
+            $data['status'] = $this->batchStatus;
+        }
+        if ($this->batchTemplateId) {
+            $data['template_id'] = (int) $this->batchTemplateId;
+        }
+        if (empty($data)) {
+            $this->dispatch('notify', 'Selecciona un estado o template para asignar');
+            return;
+        }
+
+        $count = $layer->features()->update($data);
+        $this->loadLayers();
+        $this->emitInitialLayersData();
+        $this->dispatch('notify', "$count elemento(s) actualizados");
+    }
+
+    // ── Cancel editing ────────────────────────────────────────────────────────
+
     public function cancelEditing()
     {
         $this->selectedLayer = null;
@@ -317,4 +397,4 @@ class LayerManager extends Component
     {
         return view('livewire.layers.layer-manager');
     }
-}
+}