layer-registry.js

// ============================================================================
// LAYER REGISTRY AND FIELD POLICY
// ============================================================================
// This file defines which layers are queryable, what fields are allowed,
// and what query modes are permitted. Layers not in this registry cannot
// be queried (explicit allowlist approach).
//
// STEP 1 of hardening: Server-side "Layer Registry and Field Policy"
// ============================================================================

export const QUERY_MODES = {
  BY_POINT: "by_point",
  BY_OBJECT_IDS: "by_object_ids",
  BY_BBOX: "by_bbox",
  BY_ADDRESS: "by_address",
};

export const DEFAULT_MAX_RECORDS = 10;
export const ABSOLUTE_MAX_RECORDS = 50;
export const MAX_OBJECT_IDS_PER_QUERY = 25;
export const MAX_BBOX_SIZE_DEGREES = 0.1; // ~11km at equator
export const MAX_EXPLICIT_FIELDS = 40;
export const DEFAULT_RADIUS_METERS = 100;
export const MAX_RADIUS_METERS = 1000;

export const LAYER_REGISTRY = {
  // Layer 24: Official_Zoning
  24: {
    id: 24,
    name: "Official_Zoning",
    displayName: "Official Zoning Districts",
    geometryType: "esriGeometryPolygon",
    description: "Official zoning district boundaries for Lebanon, NH",
    allowedQueryModes: [QUERY_MODES.BY_POINT, QUERY_MODES.BY_BBOX],
    fieldsProfileSummary: ["OBJECTID", "ACAD_TEXT", "Text_"],
    fieldsProfileFull: [
      "OBJECTID",
      "ACAD_TEXT",
      "Text_",
      "Shape__Area",
      "Shape__Length",
    ],
    blockedFields: [
      "GlobalID",
      "CreationDate",
      "Creator",
      "EditDate",
      "Editor",
    ],
    maxRecords: 10,
    allowGeometry: false,
  },

  // Layer 5: Address Layer (Master Address Table)
  5: {
    id: 5,
    name: "LebanonNHMATMassGeoExport_Layer",
    displayName: "Master Address Table",
    geometryType: "esriGeometryPoint",
    description: "Master Address Table with address points for Lebanon, NH",
    allowedQueryModes: [QUERY_MODES.BY_POINT, QUERY_MODES.BY_OBJECT_IDS],
    addressSearchField: "StNam_Full",
    fieldsProfileSummary: [
      "OBJECTID",
      "AddNo_Full",
      "StNam_Full",
      "SubAddress",
      "Inc_Muni",
      "State",
      "Zip_Code",
      "Latitude",
      "Longitude",
      "d_gis_zone",
    ],
    fieldsProfileFull: [
      "OBJECTID",
      "AddNo_Full",
      "StNam_Full",
      "SubAddress",
      "County",
      "Inc_Muni",
      "Nbrhd_Comm",
      "State",
      "Zip_Code",
      "Longitude",
      "Latitude",
      "Parcel_ID",
      "MATID",
      "Sewer",
      "Water",
      "propertyid",
      "d_gis_lot_size",
      "d_gis_zone",
    ],
    blockedFields: [
      "GlobalID",
      "CreationDate",
      "Creator",
      "EditDate",
      "Editor",
    ],
    maxRecords: 10,
    allowGeometry: false,
  },

  // Layer 18: Parcel
  18: {
    id: 18,
    name: "Parcel (parcel_poly)",
    displayName: "Parcels",
    geometryType: "esriGeometryPolygon",
    description: "Property parcel boundaries for Lebanon, NH",
    allowedQueryModes: [
      QUERY_MODES.BY_POINT,
      QUERY_MODES.BY_OBJECT_IDS,
      QUERY_MODES.BY_BBOX,
    ],
    fieldsProfileSummary: ["OBJECTID", "GIS_ID", "MAP_LOT", "CALC_ACRES"],
    fieldsProfileFull: [
      "OBJECTID",
      "GIS_ID",
      "MAP_LOT",
      "SOURCE",
      "CALC_ACRES",
      "NOTE",
      "PNTPOLYCNT",
      "Shape__Area",
      "Shape__Length",
    ],
    blockedFields: [
      "GlobalID",
      "CreationDate",
      "Creator",
      "EditDate",
      "Editor",
    ],
    maxRecords: 10,
    allowGeometry: false,
  },

  // Layer 23: Wetland Conservation District
  23: {
    id: 23,
    name: "Wetland Convservation District (LebWetlands)",
    displayName: "Wetland Conservation District",
    geometryType: "esriGeometryPolygon",
    description: "Wetland conservation district boundaries",
    allowedQueryModes: [QUERY_MODES.BY_POINT],
    fieldsProfileSummary: ["OBJECTID"],
    fieldsProfileFull: ["OBJECTID", "Shape__Area", "Shape__Length"],
    blockedFields: [
      "GlobalID",
      "CreationDate",
      "Creator",
      "EditDate",
      "Editor",
    ],
    maxRecords: 5,
    allowGeometry: false,
  },

  // Layer 22: Wetland Buffer
  22: {
    id: 22,
    name: "Wetland 100' Buffer (WetlandBuffer)",
    displayName: "Wetland 100ft Buffer",
    geometryType: "esriGeometryPolygon",
    description: "100-foot buffer zones around wetlands",
    allowedQueryModes: [QUERY_MODES.BY_POINT],
    fieldsProfileSummary: ["OBJECTID"],
    fieldsProfileFull: ["OBJECTID", "Shape__Area", "Shape__Length"],
    blockedFields: [
      "GlobalID",
      "CreationDate",
      "Creator",
      "EditDate",
      "Editor",
    ],
    maxRecords: 5,
    allowGeometry: false,
  },

  // Layer 0: Gravity Sewer Connection
  0: {
    id: 0,
    name: "Gravity Sewer Connection (GSewerMain100Buff)",
    displayName: "Gravity Sewer Connection Zone",
    geometryType: "esriGeometryPolygon",
    description:
      "100-foot buffer around gravity sewer mains for connection availability",
    allowedQueryModes: [QUERY_MODES.BY_POINT],
    fieldsProfileSummary: ["OBJECTID"],
    fieldsProfileFull: ["OBJECTID", "Shape__Area", "Shape__Length"],
    blockedFields: [
      "GlobalID",
      "CreationDate",
      "Creator",
      "EditDate",
      "Editor",
    ],
    maxRecords: 5,
    allowGeometry: false,
  },

  // Layer 1: Water Main Connection
  1: {
    id: 1,
    name: "Water Main Connection (WaterMain100Buff)",
    displayName: "Water Main Connection Zone",
    geometryType: "esriGeometryPolygon",
    description:
      "100-foot buffer around water mains for connection availability",
    allowedQueryModes: [QUERY_MODES.BY_POINT],
    fieldsProfileSummary: ["OBJECTID"],
    fieldsProfileFull: ["OBJECTID", "Shape__Area", "Shape__Length"],
    blockedFields: [
      "GlobalID",
      "CreationDate",
      "Creator",
      "EditDate",
      "Editor",
    ],
    maxRecords: 5,
    allowGeometry: false,
  },

  // Layer 12: Historic District
  12: {
    id: 12,
    name: "Historic District (hd)",
    displayName: "Historic District",
    geometryType: "esriGeometryPolygon",
    description: "Historic district boundaries",
    allowedQueryModes: [QUERY_MODES.BY_POINT],
    fieldsProfileSummary: ["OBJECTID"],
    fieldsProfileFull: ["OBJECTID", "Shape__Area", "Shape__Length"],
    blockedFields: [
      "GlobalID",
      "CreationDate",
      "Creator",
      "EditDate",
      "Editor",
    ],
    maxRecords: 5,
    allowGeometry: false,
  },

  // Layer 13: FEMA Flood Hazard
  13: {
    id: 13,
    name: "FEMA FLood Hazard (FEMAFlood08)",
    displayName: "FEMA Flood Hazard Zones",
    geometryType: "esriGeometryPolygon",
    description: "FEMA flood hazard zones from 2008 data",
    allowedQueryModes: [QUERY_MODES.BY_POINT],
    fieldsProfileSummary: ["OBJECTID"],
    fieldsProfileFull: ["OBJECTID", "Shape__Area", "Shape__Length"],
    blockedFields: [
      "GlobalID",
      "CreationDate",
      "Creator",
      "EditDate",
      "Editor",
    ],
    maxRecords: 5,
    allowGeometry: false,
  },

  // Layer 14: Riverbank Protection District
  14: {
    id: 14,
    name: "Riverbank Protection District (RiverbankBuffer)",
    displayName: "Riverbank Protection District",
    geometryType: "esriGeometryPolygon",
    description: "Riverbank protection buffer zones",
    allowedQueryModes: [QUERY_MODES.BY_POINT],
    fieldsProfileSummary: ["OBJECTID"],
    fieldsProfileFull: ["OBJECTID", "Shape__Area", "Shape__Length"],
    blockedFields: [
      "GlobalID",
      "CreationDate",
      "Creator",
      "EditDate",
      "Editor",
    ],
    maxRecords: 5,
    allowGeometry: false,
  },

  // Layer 15: NH Shoreland Protection
  15: {
    id: 15,
    name: "NH Shoreland Protection (ShorelandBuffer)",
    displayName: "NH Shoreland Protection Zone",
    geometryType: "esriGeometryPolygon",
    description: "New Hampshire shoreland protection buffer zones",
    allowedQueryModes: [QUERY_MODES.BY_POINT],
    fieldsProfileSummary: ["OBJECTID"],
    fieldsProfileFull: ["OBJECTID", "Shape__Area", "Shape__Length"],
    blockedFields: [
      "GlobalID",
      "CreationDate",
      "Creator",
      "EditDate",
      "Editor",
    ],
    maxRecords: 5,
    allowGeometry: false,
  },

  // Layer 17: Current Use Property
  17: {
    id: 17,
    name: "Current Use Property (CurrentUse)",
    displayName: "Current Use Properties",
    geometryType: "esriGeometryPolygon",
    description: "Properties enrolled in current use tax program",
    allowedQueryModes: [QUERY_MODES.BY_POINT],
    fieldsProfileSummary: ["OBJECTID"],
    fieldsProfileFull: ["OBJECTID", "Shape__Area", "Shape__Length"],
    blockedFields: [
      "GlobalID",
      "CreationDate",
      "Creator",
      "EditDate",
      "Editor",
    ],
    maxRecords: 5,
    allowGeometry: false,
  },

  // Layer 30: Airport Protection District
  30: {
    id: 30,
    name: "AirProtDist",
    displayName: "Airport Protection District",
    geometryType: "esriGeometryPolygon",
    description: "Airport protection district overlay zones",
    allowedQueryModes: [QUERY_MODES.BY_POINT],
    fieldsProfileSummary: ["OBJECTID"],
    fieldsProfileFull: ["OBJECTID", "Shape__Area", "Shape__Length"],
    blockedFields: [
      "GlobalID",
      "CreationDate",
      "Creator",
      "EditDate",
      "Editor",
    ],
    maxRecords: 5,
    allowGeometry: false,
  },
};

export function getLayerConfig(layerId) {
  const id = typeof layerId === "string" ? parseInt(layerId, 10) : layerId;
  return LAYER_REGISTRY[id] || null;
}

export function getLayerConfigByName(layerName) {
  if (typeof layerName !== 'string' || layerName.trim().length === 0) {
    return null;
  }

  const normalized = layerName.trim().toLowerCase();
  return Object.values(LAYER_REGISTRY).find(layer =>
    layer.name.toLowerCase() === normalized ||
    layer.displayName.toLowerCase() === normalized
  ) || null;
}

export function isLayerAllowed(layerId) {
  return getLayerConfig(layerId) !== null;
}

export function isQueryModeAllowed(layerId, mode) {
  const config = getLayerConfig(layerId);
  if (!config) return false;
  return config.allowedQueryModes.includes(mode);
}

export function getFieldsForProfile(layerId, profile) {
  const config = getLayerConfig(layerId);
  if (!config) return [];

  if (profile === "full") {
    return config.fieldsProfileFull;
  }
  return config.fieldsProfileSummary;
}

export function filterBlockedFields(layerId, fields) {
  const config = getLayerConfig(layerId);
  if (!config) return [];

  const blocked = new Set(config.blockedFields.map((f) => f.toUpperCase()));
  return fields.filter((f) => !blocked.has(f.toUpperCase()));
}

export function validateExplicitFields(layerId, requestedFields, maxFields) {
  const config = getLayerConfig(layerId);
  if (!config) return { valid: false, error: "Layer not found" };

  const limit =
    typeof maxFields === "number" && maxFields > 0
      ? maxFields
      : MAX_EXPLICIT_FIELDS;
  if (requestedFields.length > limit) {
    return {
      valid: false,
      error: `Too many fields requested. Maximum is ${limit}.`,
    };
  }

  const allowed = new Set([
    ...config.fieldsProfileFull.map((f) => f.toUpperCase()),
  ]);
  const blocked = new Set(config.blockedFields.map((f) => f.toUpperCase()));

  const invalidFields = [];
  const blockedRequested = [];

  for (const field of requestedFields) {
    const upper = field.toUpperCase();
    if (blocked.has(upper)) {
      blockedRequested.push(field);
    } else if (!allowed.has(upper)) {
      invalidFields.push(field);
    }
  }

  if (blockedRequested.length > 0) {
    return {
      valid: false,
      error: `Blocked fields requested: ${blockedRequested.join(", ")}`,
    };
  }

  if (invalidFields.length > 0) {
    return {
      valid: false,
      error: `Unknown fields requested: ${invalidFields.join(", ")}`,
    };
  }

  return { valid: true };
}

export function getAllRegisteredLayers() {
  return Object.values(LAYER_REGISTRY).map((layer) => ({
    id: layer.id,
    name: layer.displayName,
    geometryType: layer.geometryType,
    description: layer.description,
  }));
}

export function getLayerMetadata(layerId) {
  const config = getLayerConfig(layerId);
  if (!config) return null;

  return {
    id: config.id,
    name: config.displayName,
    internalName: config.name,
    geometryType: config.geometryType,
    description: config.description,
    allowedQueryModes: config.allowedQueryModes,
    fieldsProfileSummary: config.fieldsProfileSummary,
    fieldsProfileFull: config.fieldsProfileFull,
    maxRecords: config.maxRecords,
    allowGeometry: config.allowGeometry,
  };
}