private $baseDir;

private $boardsDir;

public function __construct() {

$this->baseDir = __DIR__;

$this->boardsDir = $this->baseDir . '/boards';

// Ensure directories exist

if (!file_exists($this->boardsDir)) {

mkdir($this->boardsDir, 0755, true);

}

}

public function run() {

// Only intercept if this is an API request

if (isset($_GET['action'])) {

$this->handleApi($_GET['action']);

}

}

private function handleApi($action) {

header('Content-Type: application/json');

try {

// parse JSON input

$input = json_decode(file_get_contents('php://input'), true) ?? [];

// Context setup

$boardId = $_GET['board'] ?? 'main';

$boardId = preg_replace('/[^a-z0-9-_]/i', '', $boardId);

$boardDir = $boardId ? $this->boardsDir . '/' . $boardId : null;

// Route action to method (e.g., 'list_boards' -> 'actionListBoards')

$methodName = 'action' . str_replace(' ', '', ucwords(str_replace('_', ' ', $action)));

if (method_exists($this, $methodName)) {

$response = $this->$methodName($input, $boardId, $boardDir);

echo json_encode($response);

} else {

throw new Exception("Invalid action");

}

} catch (Exception $e) {

http_response_code(500);

echo json_encode(['error' => $e->getMessage()]);

}

exit; // Stop execution so HTML doesn't render

}

// --- API Actions ---

protected function actionCheckUpdates() {

$stateFile = $this->boardsDir . '/update_state.json';

$state = file_exists($stateFile) ? json_decode(file_get_contents($stateFile), true) : ['last_check' => 0, 'latest_version' => BECKON_VERSION];

if (time() - ($state['last_check'] ?? 0) > 86400) {

$ch = curl_init();

curl_setopt_array($ch, [

CURLOPT_URL => 'https://github.com/austinginder/beckon/releases/latest',

CURLOPT_RETURNTRANSFER => true,

CURLOPT_HEADER => true,

CURLOPT_NOBODY => true,

CURLOPT_FOLLOWLOCATION => true,

CURLOPT_USERAGENT => 'Beckon-Updater'

]);

curl_exec($ch);

$effectiveUrl = curl_getinfo($ch, CURLINFO_EFFECTIVE_URL);

curl_close($ch);

$latestVersion = basename($effectiveUrl);

$state = ['last_check' => time(), 'latest_version' => $latestVersion];

$this->atomicWrite($stateFile, $state);

}

return [

'update_available' => version_compare(ltrim($state['latest_version'], 'v'), ltrim(BECKON_VERSION, 'v'), '>'),

'latest_version' => $state['latest_version']

];

}

protected function actionPerformUpdate($input) {

$targetVersion = $input['version'] ?? null;

if (!$targetVersion || !preg_match('/^v?[\d\.]+$/', $targetVersion)) throw new Exception("Invalid version");

$url = "https://raw.githubusercontent.com/austinginder/beckon/{$targetVersion}/index.php";

$newContent = @file_get_contents($url);

if (!$newContent || strpos($newContent, '<?php') !== 0) throw new Exception("Download failed or invalid file signature.");

if (!copy(__FILE__, __FILE__ . '.bak')) throw new Exception("Could not create backup.");

$this->atomicWrite(__FILE__, $newContent);

if (function_exists('opcache_reset')) {

opcache_reset();

}

return ['status' => 'updated'];

}

protected function actionImportTrello($input) {

if (!isset($_FILES['file'])) throw new Exception("No file");

$json = json_decode(file_get_contents($_FILES['file']['tmp_name']), true);

if (!$json) throw new Exception("Invalid JSON");

// 1. Create Directories

$slug = $this->slugify($json['name'] ?? 'Imported');

$slug = substr($slug ?: 'board', 0, 30) . '-' . date('ymd');

$baseSlug = $slug;

$counter = 1;

while(file_exists($this->boardsDir . '/' . $slug)) {

$slug = $baseSlug . '-' . $counter++;

}

$targetDir = $this->boardsDir . '/' . $slug;

mkdir($targetDir, 0755, true);

mkdir("$targetDir/uploads", 0755, true);

mkdir("$targetDir/uploads/avatars", 0755, true);

// 2. Process Members

$usersMap = [];

$avatarDir = "$targetDir/uploads/avatars";

$downloadAvatar = function($id, $hash) use ($avatarDir, $slug) {

if (!$hash) return null;

$url = "https://trello-members.s3.amazonaws.com/{$id}/{$hash}/170.png";

$filename = "{$id}.png";

$content = @file_get_contents($url);

if ($content) {

$this->atomicWrite("$avatarDir/$filename", $content);

return "boards/$slug/uploads/avatars/$filename";

}

return null;

};

if (isset($json['members']) && is_array($json['members'])) {

foreach ($json['members'] as $m) {

$usersMap[$m['id']] = [

'id' => $m['id'],

'username' => $m['username'] ?? '',

'fullName' => $m['fullName'] ?? 'Unknown',

'initials' => $m['initials'] ?? '?',

'avatarHash' => $m['avatarHash'] ?? null,

'avatarFile' => $downloadAvatar($m['id'], $m['avatarHash'] ?? null)

];

}

}

// 3. Process Lists

$lists = [];

$listMap = [];

$closedListIds = [];

foreach ($json['lists'] as $l) {

if ($l['closed']) {

$closedListIds[$l['id']] = true;

continue;

}

$lists[] = ['id' => $l['id'], 'title' => $l['name'], 'cards' => []];

$listMap[$l['id']] = count($lists) - 1;

}

// 4. Checklists & Actions

$checklists = [];

foreach ($json['checklists'] ?? [] as $cl) $checklists[$cl['idCard']][] = $cl;

$cardMeta = [];

foreach (array_reverse($json['actions'] ?? []) as $act) {

if (!isset($act['data']['card']['id'])) continue;

$cid = $act['data']['card']['id'];

// Import missing users

if (isset($act['memberCreator']['id']) && !isset($usersMap[$act['memberCreator']['id']])) {

$m = $act['memberCreator'];

$usersMap[$m['id']] = [

'id' => $m['id'],

'fullName' => $m['fullName'] ?? 'Unknown',

'initials' => $m['initials'] ?? '?',

'avatarFile' => $downloadAvatar($m['id'], $m['avatarHash'] ?? null)

];

}

if (!isset($cardMeta[$cid])) $cardMeta[$cid] = ['comments' => [], 'activity' => [], 'revisions' => []];

$actor = $act['memberCreator']['fullName'] ?? 'Someone';

$date = $act['date'];

if ($act['type'] === 'commentCard') {

// Trello JSON exports do not include reaction data, so we initialize as empty.

$mappedReactions = [];

$cardMeta[$cid]['comments'][] = [

'id' => $act['id'],

'text' => $act['data']['text'],

'date' => $date,

'user_id' => $act['memberCreator']['id'] ?? null,

'user' => ['name' => $actor, 'initials' => $act['memberCreator']['initials'] ?? '?'],

'reactions' => $mappedReactions // Add to comment structure

];

} elseif ($act['type'] === 'createCard') {

$cardMeta[$cid]['activity'][] = ['text' => "Created by $actor", 'date' => $date];

} elseif ($act['type'] === 'updateCard') {

if (isset($act['data']['listAfter'])) {

$cardMeta[$cid]['activity'][] = ['text' => "Moved to {$act['data']['listAfter']['name']} by $actor", 'date' => $date];

}

if (isset($act['data']['old']['desc'])) {

array_unshift($cardMeta[$cid]['revisions'], [

'id' => $act['id'], 'date' => $date, 'text' => $act['data']['old']['desc'], 'user' => $actor

]);

$cardMeta[$cid]['activity'][] = ['text' => "Updated description by $actor", 'date' => $date];

}

}

}

// 5. Attachments

$attachmentMap = [];

foreach ($json['cards'] as $cTemp) {

if (isset($cTemp['attachments'])) {

foreach ($cTemp['attachments'] as $att) {

$ext = pathinfo($att['name'], PATHINFO_EXTENSION) ?: pathinfo(parse_url($att['url'], PHP_URL_PATH), PATHINFO_EXTENSION);

$attachmentMap[$att['id']] = [

'url' => $att['url'], 'name' => $att['name'], 'ext' => $ext, 'id' => $att['id']

];

}

}

}

// 6. Process Cards

$archive = [];

$colorMap = ['green'=>'green', 'yellow'=>'yellow', 'orange'=>'orange', 'red'=>'red', 'purple'=>'purple', 'blue'=>'blue', 'sky'=>'sky', 'lime'=>'lime', 'pink'=>'pink', 'black'=>'slate'];

usort($json['cards'], fn($a, $b) => $a['pos'] <=> $b['pos']);

foreach ($json['cards'] as $c) {

$isArchived = $c['closed'] || isset($closedListIds[$c['idList']]) || !isset($listMap[$c['idList']]);

$timestamp = hexdec(substr($c['id'], 0, 8));

$createdDate = date('c', $timestamp);

$datePrefix = date('Y-m-d', $timestamp);

$newId = "{$datePrefix}_{$c['id']}";

$coverImagePath = null;

if (!empty($c['idAttachmentCover']) && isset($attachmentMap[$c['idAttachmentCover']])) {

$att = $attachmentMap[$c['idAttachmentCover']];

$cleanName = preg_replace('/[^a-z0-9-]/i', '-', pathinfo($att['name'], PATHINFO_FILENAME));

$filename = strtolower($cleanName . '-' . $att['id'] . '.' . $att['ext']);

$coverImagePath = "boards/$slug/uploads/$filename";

}

$cardChecklists = [];

$checklistStats = ['total' => 0, 'done' => 0];

if (isset($checklists[$c['id']])) {

foreach ($checklists[$c['id']] as $cl) {

usort($cl['checkItems'], fn($a, $b) => $a['pos'] <=> $b['pos']);

$items = [];

foreach ($cl['checkItems'] as $item) {

$items[] = ['id' => $item['id'], 'name' => $item['name'], 'state' => $item['state']];

$checklistStats['total']++;

if ($item['state'] === 'complete') $checklistStats['done']++;

}

$cardChecklists[] = ['id' => $cl['id'], 'name' => $cl['name'], 'items' => $items];

}

}

$mappedLabels = [];

foreach ($c['labels'] ?? [] as $l) {

$colorKey = $l['color'] ?? 'black';

$name = $l['name'];

if (empty($name) && isset($json['labelNames'][$colorKey])) $name = $json['labelNames'][$colorKey];

$mappedLabels[] = ['color' => $colorMap[$colorKey] ?? 'slate', 'name' => $name ?: ucfirst($colorKey)];

}

$cardData = [

'id' => $newId,

'title' => $c['name'],

'labels' => $mappedLabels,

'startDate' => (isset($c['start']) && $c['start']) ? substr($c['start'], 0, 10) : null,

'dueDate' => $c['due'] ? substr($c['due'], 0, 10) : null,

'assignees' => $c['idMembers'] ?? [],

'coverImage' => $coverImagePath,

'created_at' => $createdDate,

'checklistStats' => $checklistStats['total'] > 0 ? $checklistStats : null

];

if ($isArchived) $archive[] = $cardData;

else $lists[$listMap[$c['idList']]]['cards'][] = $cardData;

$this->atomicWrite("$targetDir/{$newId}.md", $c['desc']);

$meta = $cardMeta[$c['id']] ?? ['comments' => [], 'activity' => [], 'revisions' => []];

$meta['activity'] = array_reverse($meta['activity']);

$meta['comments'] = array_reverse($meta['comments']);

$meta['assigned_to'] = $c['idMembers'] ?? [];

$meta['created_at'] = $createdDate;

$meta['checklists'] = $cardChecklists;

$meta['title'] = $c['name'];

$meta['labels'] = $mappedLabels;

$this->atomicWrite("$targetDir/{$newId}.json", $meta);

}

$this->atomicWrite("$targetDir/layout.json", [

'title' => $json['name'], 'lists' => $lists, 'archive' => $archive

]);

$this->atomicWrite("$targetDir/users.json", (object)$usersMap);

return ['status' => 'imported', 'board' => $slug];

}

protected function actionSaveUsers($input, $boardId, $boardDir) {

$this->atomicWrite("$boardDir/users.json", $input['users']);

return ['status' => 'saved'];

}

protected function actionUploadAvatar($input, $boardId, $boardDir) {

if (!isset($_FILES['file'])) throw new Exception('No file');

$dir = "$boardDir/uploads/avatars";

if (!is_dir($dir)) mkdir($dir, 0755, true);

$ext = strtolower(pathinfo($_FILES['file']['name'], PATHINFO_EXTENSION));

$filename = uniqid('u_') . ".$ext";

move_uploaded_file($_FILES['file']['tmp_name'], "$dir/$filename");

return ['url' => "boards/$boardId/uploads/avatars/$filename"];

}

protected function actionImportAttachment($input) {

if (!isset($input['board'], $input['card'], $input['url'])) throw new Exception("Missing parameters");

$slug = $this->slugify($input['board']);

$cardId = $this->slugify($input['card']);

$boardPath = $this->boardsDir . '/' . $slug;

$uploadDir = "$boardPath/uploads";

if (!is_dir($uploadDir)) mkdir($uploadDir, 0755, true);

// Name Generation

$rawName = $input['name'] ?? 'file';

$ext = pathinfo($rawName, PATHINFO_EXTENSION) ?: pathinfo(parse_url($input['url'], PHP_URL_PATH), PATHINFO_EXTENSION);

$cleanName = preg_replace('/[^a-z0-9-]/i', '-', pathinfo($rawName, PATHINFO_FILENAME));

if (!empty($input['attachmentId'])) {

$filename = strtolower("$cleanName-{$input['attachmentId']}.$ext");

} else {

$filename = strtolower("$cleanName.$ext");

$counter = 1;

while(file_exists("$uploadDir/$filename")) $filename = strtolower("$cleanName-" . $counter++ . ".$ext");

}

// Curl Download

$ch = curl_init($input['url']);

$fp = fopen("$uploadDir/$filename", 'wb');

curl_setopt_array($ch, [

CURLOPT_FILE => $fp, CURLOPT_HEADER => 0, CURLOPT_FOLLOWLOCATION => true,

CURLOPT_USERAGENT => 'Mozilla/5.0 (Beckon-Importer)', CURLOPT_SSL_VERIFYPEER => false,

CURLOPT_FAILONERROR => true

]);

if (!empty($input['cookies'])) curl_setopt($ch, CURLOPT_COOKIE, $input['cookies']);

curl_exec($ch);

$code = curl_getinfo($ch, CURLINFO_HTTP_CODE);

curl_close($ch);

fclose($fp);

if ($code >= 400) {

@unlink("$uploadDir/$filename");

throw new Exception("HTTP Error: $code");

}

$mdPath = "$boardPath/$cardId.md";

// If exact ID.md not found, try to resolve the timestamped version (YYYY-MM-DD_ID.md)

if (!file_exists($mdPath) && preg_match('/^[a-f0-9]{24}$/', $cardId)) {

$timestamp = hexdec(substr($cardId, 0, 8));

$datePrefix = date('Y-m-d', $timestamp);

$prefixedPath = "$boardPath/{$datePrefix}_{$cardId}.md";

if (file_exists($prefixedPath)) {

$mdPath = $prefixedPath;

}

}

// Append to Markdown

if (file_exists($mdPath)) {

$isImg = in_array(strtolower($ext), ['jpg','jpeg','png','gif','webp']);

$append = "\n\n" . ($isImg ? '!' : '') . "[$rawName](boards/$slug/uploads/$filename)";

file_put_contents($mdPath, $append, FILE_APPEND);

}

return ['status' => 'ok'];

}

// --- WordPress Actions ---

protected function actionWpUpload($input, $boardId, $boardDir) {

$this->validateWpCreds($input);

$localPath = $input['local_path'];

$realPath = realpath($this->baseDir . '/' . $localPath);

// Security: Ensure we are only uploading files from inside the 'boards' directory

if (!$realPath || strpos($realPath, $this->boardsDir) !== 0 || !file_exists($realPath)) {

throw new Exception("File not found or access denied: $localPath");

}

$filename = basename($realPath);

$mime = mime_content_type($realPath);

$fileData = file_get_contents($realPath);

// Upload to WordPress

$url = rtrim($input['wp_url'], '/') . "/wp-json/wp/v2/media";

$headers = [

"Authorization: Basic " . base64_encode($input['wp_user'] . ":" . $input['wp_pass']),

"Content-Disposition: attachment; filename=\"$filename\"",

"Content-Type: $mime",

"User-Agent: Beckon/1.0"

];

$ch = curl_init($url);

curl_setopt_array($ch, [

CURLOPT_POST => true,

CURLOPT_RETURNTRANSFER => true,

CURLOPT_HTTPHEADER => $headers,

CURLOPT_POSTFIELDS => $fileData,

CURLOPT_SSL_VERIFYPEER => false, // Dev friendly

CURLOPT_SSL_VERIFYHOST => false

]);

$res = curl_exec($ch);

$code = curl_getinfo($ch, CURLINFO_HTTP_CODE);

$err = curl_error($ch);

curl_close($ch);

if ($code !== 201) {

$json = json_decode($res, true);

$msg = $json['message'] ?? $err ?? "HTTP $code";

throw new Exception("WP Upload Failed: $msg");

}

$data = json_decode($res, true);

return ['id' => $data['id'], 'url' => $data['source_url']];

}

protected function actionWpPost($input, $boardId, $boardDir) {

$this->validateWpCreds($input);

$html = $input['html'];

// --- Block Grammar Transformation ---

// 1. Image Blocks

// We look for <img> tags that now have 'data-wp-id'.

// We assume they are wrapped in <p> by markdown-it.

$html = preg_replace_callback(

'/<p>\s*<img\s+[^>]*data-wp-id="(\d+)"[^>]*src="([^"]+)"[^>]*>\s*<\/p>/i',

function($m) {

$id = $m[1];

$src = $m[2];

return sprintf(

'<figure class="wp-block-image size-full"><img src="%s" class="wp-image-%d"/></figure>',

$id, $src, $id

);

},

$html

);

// 2. Standard Blocks

$transforms = [

'/<h([1-6])>(.*?)<\/h\1>/' => '<h$1>$2</h$1>',

'/<ul>(.*?)<\/ul>/s' => '<ul>$1</ul>',

'/<ol>(.*?)<\/ol>/s' => '<ol>$1</ol>',

'/<blockquote>(.*?)<\/blockquote>/s' => '<blockquote class="wp-block-quote">$1</blockquote>',

'/<pre><code[^>]*>(.*?)<\/code><\/pre>/s' => '<pre class="wp-block-code"><code>$1</code></pre>',

'/<p>(.*?)<\/p>/' => '<p>$1</p>'

];

$html = preg_replace(array_keys($transforms), array_values($transforms), $html);

// Send Post

$url = rtrim($input['wp_url'], '/') . "/wp-json/wp/v2/posts";

$postData = [

'title' => $input['title'],

'content' => $html,

'status' => 'draft',

'featured_media' => $input['featured_media'] ?? null

];

$ch = curl_init($url);

curl_setopt_array($ch, [

CURLOPT_POST => true,

CURLOPT_RETURNTRANSFER => true,

CURLOPT_HTTPHEADER => [

"Authorization: Basic " . base64_encode($input['wp_user'] . ":" . $input['wp_pass']),

"Content-Type: application/json",

"User-Agent: Beckon/1.0"

],

CURLOPT_POSTFIELDS => json_encode($postData),

CURLOPT_SSL_VERIFYPEER => false,

CURLOPT_SSL_VERIFYHOST => false

]);

$res = curl_exec($ch);

$code = curl_getinfo($ch, CURLINFO_HTTP_CODE);

curl_close($ch);

if ($code !== 201) throw new Exception("WP Post Failed: HTTP $code");

$post = json_decode($res, true);

return [

'link' => $post['link'],

'edit_link' => rtrim($input['wp_url'], '/') . "/wp-admin/post.php?post={$post['id']}&action=edit"

];

}

private function validateWpCreds($input) {

if (empty($input['wp_url']) || empty($input['wp_user']) || empty($input['wp_pass'])) {

throw new Exception("Missing WordPress credentials");

}

}

protected function actionListBoards() {

$boards = [];

foreach (glob($this->boardsDir . '/*', GLOB_ONLYDIR) as $dir) {

$id = basename($dir);

$layout = json_decode(@file_get_contents("$dir/layout.json"), true);

$boards[] = ['id' => $id, 'name' => $layout['title'] ?? $id];

}

return ['boards' => $boards];

}

protected function actionCreateBoard($input) {

$title = $input['title'] ?? 'New Board';

$slug = $input['slug'] ?: $this->slugify($title);

if (!$slug) $slug = 'board-' . date('ymd');

$baseSlug = $slug;

$counter = 1;

while(file_exists($this->getBoardPath($slug))) $slug = $baseSlug . '-' . $counter++;

$p = $this->getBoardPath($slug);

mkdir($p, 0755, true);

mkdir("$p/uploads", 0755, true);

$this->atomicWrite("$p/layout.json", ['version' => 1, 'title' => $title, 'lists' => []]);

$this->atomicWrite("$p/users.json", new \stdClass());

return ['status' => 'ok', 'id' => $slug];

}

protected function actionDeleteBoard($input) {

$p = $this->getBoardPath($input['board']);

if (is_dir($p) && !is_link($p)) {

$files = new RecursiveIteratorIterator(

new RecursiveDirectoryIterator($p, RecursiveDirectoryIterator::SKIP_DOTS),

RecursiveIteratorIterator::CHILD_FIRST

);

foreach ($files as $fileinfo) {

$todo = ($fileinfo->isDir() ? 'rmdir' : 'unlink');

$todo($fileinfo->getRealPath());

}

rmdir($p);

}

return ['status' => 'ok'];

}

protected function actionRenameBoard($input, $boardId, $boardDir) {

$newTitle = $input['title'];

$newSlug = $this->slugify($newTitle);

if (!$newSlug) throw new Exception("Invalid title");

$layout = json_decode(file_get_contents("$boardDir/layout.json"), true);

$layout['title'] = $newTitle;

$this->atomicWrite("$boardDir/layout.json", $layout);

if ($boardId !== $newSlug) {

$newPath = $this->boardsDir . '/' . $newSlug;

if (file_exists($newPath)) throw new Exception("Board exists");

// Fix MD links

foreach (glob("$boardDir/*.md") as $file) {

$c = file_get_contents($file);

$newC = str_replace("boards/$boardId/uploads/", "boards/$newSlug/uploads/", $c);

if ($c !== $newC) $this->atomicWrite($file, $newC);

}

rename($boardDir, $newPath);

return ['status' => 'renamed', 'id' => $newSlug, 'name' => $newTitle];

}

return ['status' => 'updated', 'id' => $boardId, 'name' => $newTitle];

}

protected function actionLoad($input, $boardId, $boardDir) {

$layoutPath = "$boardDir/layout.json";

// Use a shared lock for reading to prevent reading while a write is happening

$fp = fopen($layoutPath, 'r');

if (flock($fp, LOCK_SH)) {

$data = json_decode(stream_get_contents($fp), true) ?? [];

flock($fp, LOCK_UN);

} else {

// Fallback if lock fails (rare)

$data = json_decode(file_get_contents($layoutPath), true) ?? [];

}

fclose($fp);

$users = json_decode(@file_get_contents("$boardDir/users.json"), true) ?? [];

// --- Migration Check ---

if (!isset($data['version']) || $data['version'] < 2) {

// Upgrade lock

$data = $this->withBoardLock($boardId, function() use ($boardId, $boardDir, $layoutPath) {

$lockedData = json_decode(@file_get_contents($layoutPath), true) ?? [];

if ($this->migrateBoard($boardId, $boardDir, $lockedData)) {

$this->atomicWrite($layoutPath, $lockedData);

}

return $lockedData;

});

}

// Ensure defaults

if (!isset($data['lists'])) $data['lists'] = [['id' => 'l1', 'title' => 'Start', 'cards' => []]];

if (!isset($data['archive'])) $data['archive'] = [];

if (!isset($data['title'])) $data['title'] = ucfirst(basename($boardDir));

$data['users'] = $users;

return $data;

}

protected function actionGetCard($input, $boardId, $boardDir) {

$id = $input['id'];

if (!$id) throw new Exception("No ID");

$description = @file_get_contents("$boardDir/$id.md") ?: '';

$meta = json_decode(@file_get_contents("$boardDir/$id.json"), true) ?? [];

// Merge defaults

$meta = array_merge([

'comments' => [],

'activity' => [],

'revisions' => [],

'assigned_to' => [],

'checklists' => []

], $meta);

return [

'description' => $description,

'meta' => $meta

];

}

protected function actionLoadCardMeta($input, $boardId, $boardDir) {

$meta = json_decode(@file_get_contents("$boardDir/{$input['id']}.json"), true) ?? [];

return array_merge(['comments' => [], 'activity' => [], 'revisions' => [], 'assigned_to' => []], $meta);

}

protected function actionSaveLayout($input, $boardId, $boardDir) {

return $this->withBoardLock($boardId, function() use ($input, $boardDir) {

// 1. Schema: Ensure version exists

$input['version'] = $input['version'] ?? 1;

// Strip descriptions (keep layout lightweight)

foreach ($input['lists'] as &$list) {

foreach ($list['cards'] as &$card) {

unset($card['description']);

// Resilience: In a heavier app, we would write to ID.json here,

// but for v1 performance, we rely on the lock to protect layout.json.

}

}

if (isset($input['archive'])) {

foreach ($input['archive'] as &$card) unset($card['description']);

}

// 2. Write safely inside the lock

$this->atomicWrite("$boardDir/layout.json", $input);

return ['status' => 'saved', 'version' => 1];

});

}

protected function actionSaveCard($input, $boardId, $boardDir) {

$this->atomicWrite("$boardDir/{$input['id']}.md", $input['description'] ?? '');

return ['status' => 'saved'];

}

protected function actionSaveCardMeta($input, $boardId, $boardDir) {

$meta = $input['meta'];

if (isset($input['title'])) $meta['title'] = $input['title'];

if (isset($input['labels'])) $meta['labels'] = $input['labels'];

$this->atomicWrite("$boardDir/{$input['id']}.json", $meta);

return ['status' => 'saved'];

}

protected function actionToggleReaction($input, $boardId, $boardDir) {

$cardId = $input['card_id'] ?? null;

$commentId = $input['comment_id'] ?? null;

$emoji = $input['emoji'] ?? null;

$userId = $input['user_id'] ?? null;

if (!$cardId || !$commentId || !$emoji || !$userId) throw new Exception("Missing parameters");

// Load meta

$metaPath = "$boardDir/$cardId.json";

$meta = json_decode(@file_get_contents($metaPath), true) ?? [];

$meta['comments'] = $meta['comments'] ?? [];

$found = false;

foreach ($meta['comments'] as &$comment) {

if ($comment['id'] === $commentId) {

$comment['reactions'] = $comment['reactions'] ?? [];

$reactionFound = false;

foreach ($comment['reactions'] as $key => &$reaction) {

if ($reaction['emoji'] === $emoji) {

$reactionFound = true;

// Toggle User

$userIndex = array_search($userId, $reaction['users']);

if ($userIndex !== false) {

// Remove user

array_splice($reaction['users'], $userIndex, 1);

// If empty, remove reaction entirely

if (count($reaction['users']) === 0) {

array_splice($comment['reactions'], $key, 1);

}

} else {

// Add user

$reaction['users'][] = $userId;

}

break;

}

}

if (!$reactionFound) {

// Create new reaction

$comment['reactions'][] = ['emoji' => $emoji, 'users' => [$userId]];

}

$found = true;

break;

}

}

if ($found) {

$this->atomicWrite($metaPath, $meta);

return ['status' => 'saved', 'comments' => $meta['comments']];

}

throw new Exception("Comment not found");

}

protected function actionGetBoardLists($input) {

$targetBoardId = $input['board_id'] ?? null;

if (!$targetBoardId) throw new Exception("No board ID provided");

$targetBoardPath = $this->getBoardPath($targetBoardId);

if (!file_exists($targetBoardPath)) throw new Exception("Target board not found");

$layout = json_decode(@file_get_contents("$targetBoardPath/layout.json"), true) ?? ['lists' => []];

$lists = array_map(function($list) {

return ['id' => $list['id'], 'title' => $list['title']];

}, $layout['lists'] ?? []);

return ['lists' => $lists];

}

protected function actionMoveCardToBoard($input, $boardId, $boardDir) {

$targetId = $input['target_board'];

// Canonical Locking Order (Deadlock Prevention)

$firstLock = ($boardId < $targetId) ? $boardId : $targetId;

$secondLock = ($boardId < $targetId) ? $targetId : $boardId;

// Lock Source Board

return $this->withBoardLock($boardId, function() use ($input, $boardId, $boardDir, $targetId) {

// Lock Target Board (Nested Lock)

return $this->withBoardLock($targetId, function() use ($input, $boardId, $boardDir, $targetId) {

// --- Start Transaction Logic ---

$cardId = $input['id'];

$targetListId = $input['target_list_id'] ?? null;

$targetPath = $this->getBoardPath($targetId);

// 1. Read Source (Safe read due to lock)

$sourceLayout = json_decode(file_get_contents("$boardDir/layout.json"), true);

$cardData = null;

// Find and remove from source

foreach ($sourceLayout['lists'] as &$list) {

foreach ($list['cards'] as $key => $card) {

if ($card['id'] == $cardId) {

$cardData = $card;

array_splice($list['cards'], $key, 1);

break 2;

}

}

}

// Check archive if not found in lists

if (!$cardData && isset($sourceLayout['archive'])) {

foreach ($sourceLayout['archive'] as $key => $card) {

if ($card['id'] == $cardId) {

$cardData = $card;

array_splice($sourceLayout['archive'], $key, 1);

break;

}

}

}

if (!$cardData) throw new Exception("Card not found");

// 2. Read Target (Safe read due to lock)

$targetLayout = json_decode(@file_get_contents("$targetPath/layout.json"), true) ?? [];

if (empty($targetLayout['lists'])) $targetLayout['lists'] = [['id' => 'l1', 'title' => 'Inbox', 'cards' => []]];

// Add to target

$listFound = false;

if ($targetListId) {

foreach ($targetLayout['lists'] as &$list) {

if ($list['id'] == $targetListId) {

array_unshift($list['cards'], $cardData);

$listFound = true;

break;

}

}

}

if (!$listFound) array_unshift($targetLayout['lists'][0]['cards'], $cardData);

// 3. Move Physical Files

foreach (["$cardId.md", "$cardId.json"] as $f) {

if (file_exists("$boardDir/$f")) rename("$boardDir/$f", "$targetPath/$f");

}

// 4. Update Activity Log

$metaFile = "$targetPath/$cardId.json";

$meta = json_decode(@file_get_contents($metaFile), true) ?? [];

$meta['activity'] = $meta['activity'] ?? [];

$targetTitle = $targetLayout['title'] ?? $targetId;

array_unshift($meta['activity'], ['text' => "Moved from board '{$sourceLayout['title']}' to '{$targetTitle}'", 'date' => date('c')]);