Method opMoveFolder

src/FileRise/Domain/McpCoreOpsService.php:1278–1472

* @param array $payload * @return array */

(McpOpsContext $ctx, array $payload)

     * @return array<string,mixed>
     */
    private static function opMoveFolder(McpOpsContext $ctx, array $payload): array
    {
        self::assertWritableAccount($ctx, false);

        $source = self::normalizeFolder((string)($payload['source'] ?? ''));
        if ($source === '' || $source === 'root') {
            throw new RuntimeException('Invalid source folder.', 400);
        }

        $destinationRaw = trim((string)($payload['destination'] ?? 'root'));
        $destination = self::normalizeFolder($destinationRaw === '' ? 'root' : $destinationRaw);

        $mode = strtolower(trim((string)($payload['mode'] ?? 'move')));
        if ($mode !== '' && $mode !== 'move') {
            throw new RuntimeException('Unsupported mode for MCP folder move.', 400);
        }

        $sourcePair = self::resolveSourcePair($payload);
        $sourceId = $sourcePair['sourceId'];
        $destSourceId = $sourcePair['destSourceId'];
        $crossSource = $sourcePair['crossSource'];

        if ($crossSource && (!class_exists(SourceContext::class) || !SourceContext::sourcesEnabled())) {
            throw new RuntimeException('Cross-source operations require sources to be enabled.', 400);
        }

        $srcNorm = trim($source, "/\\ ");
        $dstNorm = $destination === 'root' ? '' : trim($destination, "/\\ ");
        if (
            !$crossSource
            && $dstNorm !== ''
            && (strcasecmp($dstNorm, $srcNorm) === 0 || strpos($dstNorm . '/', $srcNorm . '/') === 0)
        ) {
            throw new RuntimeException('Destination cannot be the source or its descendant.', 400);
        }

        $baseName = basename(str_replace('\\', '/', $srcNorm));
        if ($baseName === '' || !preg_match((string)REGEX_FOLDER_NAME, $baseName)) {
            throw new RuntimeException('Invalid source folder.', 400);
        }
        $target = $destination === 'root' ? $baseName : rtrim($destination, "/\\ ") . '/' . $baseName;
        $target = self::normalizeFolder($target);

        $username = $ctx->username();
        $perms = $ctx->permissions();

        if ($crossSource) {
            self::assertWritableAccount($ctx, true);
            if ($sourceId === '' || $destSourceId === '') {
                throw new RuntimeException('Cross-source move requires both source ids.', 400);
            }

            self::withSourceContext(
                $ctx,
                ['sourceId' => $sourceId],
                true,
                function () use ($ctx, $source, $username, $perms): array {
                    $canManageSource = ACL::canManage($username, $perms, $source)