Method opCopyFiles

src/FileRise/Domain/McpCoreOpsService.php:860–1018

* @param array $payload * @return array */

(McpOpsContext $ctx, array $payload)

     * @return array<string,mixed>
     */
    private static function opCopyFiles(McpOpsContext $ctx, array $payload): array
    {
        self::assertWritableAccount($ctx, true);

        $sourceFolder = self::normalizeFolder((string)($payload['source'] ?? 'root'));
        $destinationFolder = self::normalizeFolder((string)($payload['destination'] ?? 'root'));
        $files = self::normalizeFileList($payload['files'] ?? []);

        $sourcePair = self::resolveSourcePair($payload);
        $sourceId = $sourcePair['sourceId'];
        $destSourceId = $sourcePair['destSourceId'];
        $crossSource = $sourcePair['crossSource'];

        if ($crossSource && (!class_exists(SourceContext::class) || !SourceContext::sourcesEnabled())) {
            throw new RuntimeException('Cross-source operations require sources to be enabled.', 400);
        }

        if ($crossSource) {
            if ($sourceId === '' || $destSourceId === '') {
                throw new RuntimeException('Cross-source copy requires both source ids.', 400);
            }

            $username = $ctx->username();
            $perms = $ctx->permissions();

            self::withSourceContext(
                $ctx,
                ['sourceId' => $sourceId],
                true,
                function () use ($ctx, $sourceFolder, $files, $username, $perms): array {
                    $hasSourceView = ACL::canReadOwn($username, $perms, $sourceFolder)
                        || ACL::ownsFolderOrAncestor($username, $perms, $sourceFolder);
                    if (!$hasSourceView) {
                        throw new RuntimeException('Forbidden: no read access to source.', 403);
                    }

                    $needScope = ACL::canRead($username, $perms, $sourceFolder) ? 'read' : 'read_own';
                    self::assertFolderScope($ctx, $sourceFolder, $needScope);

                    if (
                        !$ctx->canBypassOwnership()
                        && !ACL::canRead($username, $perms, $sourceFolder)
                        && ACL::hasGrant($username, $sourceFolder, 'read_own')
                    ) {
                        self::assertFilesOwnedByUser($sourceFolder, $files, $username);
                    }

                    return ['ok' => true];
                }
            );

            self::withSourceContext(
                $ctx,
                ['sourceId' => $destSourceId],
                true,
                function () use ($ctx, $destinationFolder, $username, $perms): array {
                    $hasDestCopy = ACL::canCopy($username, $perms, $destinationFolder)
                        || ACL::ownsFolderOrAncestor($username, $perms, $destinationFolder);