xref: /plugin/calendar/sync_outlook.php (revision 2866e8271e4daef3b32eacb3a9082d02159b592b)

#!/usr/bin/env php
<?php
/**
 * DokuWiki Calendar → Outlook Sync (Delta Mode)
 *
 * Syncs calendar events from DokuWiki to Office 365/Outlook via Microsoft Graph API.
 * Uses hash-based change tracking to only sync new, modified, or deleted events.
 * Unchanged events are skipped entirely (zero API calls).
 *
 * Usage:
 *   php sync_outlook.php                       # Delta sync (only changes)
 *   php sync_outlook.php --dry-run             # Show what would change
 *   php sync_outlook.php --namespace=work      # Sync only specific namespace
 *   php sync_outlook.php --force               # Force re-sync ALL events
 *   php sync_outlook.php --clean-duplicates    # Remove duplicate events
 *   php sync_outlook.php --reset               # Reset sync state, rebuild from scratch
 *
 * First run after upgrade: existing sync_state.json will be auto-migrated
 * to v2 format with hash tracking. All events will re-sync once to populate hashes.
 * Subsequent runs will only touch changed events.
 *
 * Setup:
 *   1. Edit sync_config.php with your Azure credentials
 *   2. Run: php sync_outlook.php --dry-run
 *   3. If looks good: php sync_outlook.php
 *   4. Add to cron (see documentation for cron syntax)
 */

// Parse command line options
$options = getopt('', ['dry-run', 'namespace:', 'force', 'verbose', 'clean-duplicates', 'reset']);
$dryRun = isset($options['dry-run']);
$forceSync = isset($options['force']);
$verbose = isset($options['verbose']) || $dryRun;
$cleanDuplicates = isset($options['clean-duplicates']);
$reset = isset($options['reset']);
$filterNamespace = isset($options['namespace']) ? $options['namespace'] : null;

// Determine script directory
$scriptDir = __DIR__;
$dokuwikiRoot = dirname(dirname(dirname($scriptDir))); // Go up to dokuwiki root

// Determine meta directory
// Parse DokuWiki's local.php for custom metadir/savedir (farm-safe, no include)
$metaDir = $dokuwikiRoot . '/data/meta';
$localConf = $dokuwikiRoot . '/conf/local.php';
if (file_exists($localConf)) {
    $localContent = file_get_contents($localConf);
    // Look for $conf['metadir'] = '...';
    if (preg_match("/\\$conf\['metadir'\]\s*=\s*'([^']+)'/", $localContent, $m)) {
        $metaDir = rtrim($m[1], '/');
    } elseif (preg_match("/\\$conf\['savedir'\]\s*=\s*'([^']+)'/", $localContent, $m)) {
        $candidateMetaDir = rtrim($m[1], '/') . '/meta';
        if (is_dir($candidateMetaDir)) {
            $metaDir = $candidateMetaDir;
        }
    }
}

// Load sync configuration
// Priority: plugin directory first (original/working location), per-wiki override second
$configFile = $scriptDir . '/sync_config.php';
$perWikiConfig = $metaDir . '/calendar/sync_config.php';
// Per-wiki config only takes priority if it exists (explicit opt-in for farm setups)
if (file_exists($perWikiConfig)) {
    $configFile = $perWikiConfig;
}
if (!file_exists($configFile)) {
    die("ERROR: Configuration file not found: $configFile\n" .
        "Please copy sync_config.php and add your credentials.\n");
}

// Debug: show which config file is being used
if ($verbose) {
    echo "[CONFIG] Loading: $configFile\n";
}

$config = require $configFile;

// Validate configuration
if (empty($config['tenant_id']) || strpos($config['tenant_id'], 'YOUR_') !== false) {
    die("ERROR: Please configure your Azure credentials in sync_config.php\n");
}

// Files - store in DokuWiki data directory (writable), not plugin directory
$dataDir = $metaDir . '/calendar/';
if (!is_dir($dataDir)) {
    mkdir($dataDir, 0755, true);
}
$stateFile = $dataDir . 'sync_state.json';
$logFile = $dataDir . 'sync.log';

// Initialize
$stats = [
    'scanned' => 0,
    'created' => 0,
    'updated' => 0,
    'deleted' => 0,
    'recreated' => 0,
    'skipped' => 0,
    'errors' => 0
];

// Logging
function logMessage($message, $level = 'INFO') {
    global $logFile, $verbose, $config;

    // Use timezone from config, fallback to America/Los_Angeles
    $timezone = isset($config['timezone']) ? $config['timezone'] : 'America/Los_Angeles';
    $tz = new DateTimeZone($timezone);
    $now = new DateTime('now', $tz);
    $timestamp = $now->format('Y-m-d H:i:s');

    $logLine = "[$timestamp] [$level] $message\n";

    if ($verbose || $level === 'ERROR') {
        echo $logLine;
    }

    file_put_contents($logFile, $logLine, FILE_APPEND);
}

logMessage("=== DokuWiki → Outlook Sync Started ===");
if ($dryRun) logMessage("DRY RUN MODE - No changes will be made");
if ($filterNamespace) logMessage("Filtering namespace: $filterNamespace");
if ($reset) logMessage("RESET MODE - Will rebuild sync state from scratch");
if ($cleanDuplicates) logMessage("CLEAN DUPLICATES MODE - Will remove all duplicate events");

// =============================================================================
// MICROSOFT GRAPH API CLIENT
// =============================================================================

class MicrosoftGraphClient {
    private $config;
    private $accessToken = null;
    private $tokenExpiry = 0;

    public function __construct($config) {
        $this->config = $config;
    }

    public function getAccessToken() {
        // Check if we have a valid cached token
        if ($this->accessToken && time() < $this->tokenExpiry) {
            return $this->accessToken;
        }

        // Request new token
        $tokenUrl = "https://login.microsoftonline.com/{$this->config['tenant_id']}/oauth2/v2.0/token";

        $data = [
            'grant_type' => 'client_credentials',
            'client_id' => $this->config['client_id'],
            'client_secret' => $this->config['client_secret'],
            'scope' => 'https://graph.microsoft.com/.default'
        ];

        $ch = curl_init($tokenUrl);
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
        curl_setopt($ch, CURLOPT_POST, true);
        curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query($data));
        curl_setopt($ch, CURLOPT_TIMEOUT, $this->config['api_timeout']);

        $response = curl_exec($ch);
        $httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
        curl_close($ch);

        if ($httpCode !== 200) {
            throw new Exception("Failed to get access token: HTTP $httpCode - $response");
        }

        $result = json_decode($response, true);
        if (!isset($result['access_token'])) {
            throw new Exception("No access token in response: $response");
        }

        $this->accessToken = $result['access_token'];
        $this->tokenExpiry = time() + ($result['expires_in'] - 300); // Refresh 5min early

        return $this->accessToken;
    }

    public function apiRequest($method, $endpoint, $data = null) {
        $token = $this->getAccessToken();
        $url = "https://graph.microsoft.com/v1.0" . $endpoint;

        $ch = curl_init($url);
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
        curl_setopt($ch, CURLOPT_TIMEOUT, $this->config['api_timeout']);
        curl_setopt($ch, CURLOPT_HTTPHEADER, [
            'Authorization: Bearer ' . $token,
            'Content-Type: application/json',
            'Prefer: outlook.timezone="' . $this->config['timezone'] . '"'
        ]);

        if ($method !== 'GET') {
            curl_setopt($ch, CURLOPT_CUSTOMREQUEST, $method);
        }

        if ($data !== null) {
            $jsonData = json_encode($data, JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES);
            if ($jsonData === false) {
                throw new Exception("Failed to encode JSON: " . json_last_error_msg());
            }
            curl_setopt($ch, CURLOPT_POSTFIELDS, $jsonData);
        }

        $response = curl_exec($ch);
        $httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
        curl_close($ch);

        if ($httpCode >= 400) {
            throw new Exception("API request failed: $method $endpoint - HTTP $httpCode - $response");
        }

        return json_decode($response, true);
    }

    public function createEvent($userEmail, $eventData) {
        return $this->apiRequest('POST', "/users/$userEmail/events", $eventData);
    }

    public function updateEvent($userEmail, $outlookId, $eventData) {
        return $this->apiRequest('PATCH', "/users/$userEmail/events/$outlookId", $eventData);
    }

    public function deleteEvent($userEmail, $outlookId) {
        return $this->apiRequest('DELETE', "/users/$userEmail/events/$outlookId");
    }

    public function getEvent($userEmail, $outlookId) {
        try {
            return $this->apiRequest('GET', "/users/$userEmail/events/$outlookId");
        } catch (Exception $e) {
            return null; // Event not found
        }
    }

    public function findEventByDokuWikiId($userEmail, $dokuwikiId) {
        // Search for events with our custom extended property
        $filter = rawurlencode("singleValueExtendedProperties/Any(ep: ep/id eq 'String {66f5a359-4659-4830-9070-00047ec6ac6e} Name DokuWikiId' and ep/value eq '$dokuwikiId')");

        try {
            $result = $this->apiRequest('GET', "/users/$userEmail/events?\$filter=$filter&\$select=id,subject");
            return isset($result['value']) ? $result['value'] : [];
        } catch (Exception $e) {
            logMessage("ERROR searching for event: " . $e->getMessage(), 'ERROR');
            return [];
        }
    }

    public function deleteAllDuplicates($userEmail, $dokuwikiId) {
        $events = $this->findEventByDokuWikiId($userEmail, $dokuwikiId);

        if (count($events) <= 1) {
            return 0; // No duplicates
        }

        // Keep the first one, delete the rest
        $deleted = 0;
        for ($i = 1; $i < count($events); $i++) {
            try {
                $this->deleteEvent($userEmail, $events[$i]['id']);
                $deleted++;
                logMessage("Deleted duplicate: {$events[$i]['subject']}", 'DEBUG');
            } catch (Exception $e) {
                logMessage("ERROR deleting duplicate: " . $e->getMessage(), 'ERROR');
            }
        }

        return $deleted;
    }
}

// =============================================================================
// DOKUWIKI CALENDAR READER
// =============================================================================

function loadDokuWikiEvents($dokuwikiRoot, $filterNamespace = null) {
    // Use the global $metaDir set at script startup (respects conf overrides)
    global $metaDir;
    $allEvents = [];

    if (!is_dir($metaDir)) {
        logMessage("ERROR: Meta directory not found: $metaDir", 'ERROR');
        return [];
    }

    scanCalendarDirs($metaDir, '', $allEvents, $filterNamespace);

    return $allEvents;
}

function scanCalendarDirs($dir, $namespace, &$allEvents, $filterNamespace) {
    $items = @scandir($dir);
    if (!$items) return;

    foreach ($items as $item) {
        if ($item === '.' || $item === '..') continue;

        $path = $dir . '/' . $item;

        if (is_dir($path)) {
            if ($item === 'calendar') {
                // Found a calendar directory
                $currentNamespace = trim($namespace, ':');

                // Check filter
                if ($filterNamespace !== null && $currentNamespace !== $filterNamespace) {
                    continue;
                }

                logMessage("Scanning calendar: $currentNamespace", 'DEBUG');
                loadCalendarFiles($path, $currentNamespace, $allEvents);
            } else {
                // Recurse into subdirectory
                $newNamespace = $namespace ? $namespace . ':' . $item : $item;
                scanCalendarDirs($path, $newNamespace, $allEvents, $filterNamespace);
            }
        }
    }
}

function loadCalendarFiles($calendarDir, $namespace, &$allEvents) {
    global $stats;

    $files = glob($calendarDir . '/*.json');

    foreach ($files as $file) {
        $contents = file_get_contents($file);

        // Skip empty files
        if (trim($contents) === '' || trim($contents) === '{}' || trim($contents) === '[]') {
            continue;
        }

        $data = json_decode($contents, true);

        // Check for JSON errors
        if (json_last_error() !== JSON_ERROR_NONE) {
            logMessage("ERROR: Invalid JSON in $file: " . json_last_error_msg(), 'ERROR');
            continue;
        }

        if (!is_array($data)) continue;
        if (empty($data)) continue;

        // MATCH DOKUWIKI LOGIC: Load everything from the file, no filtering
        foreach ($data as $dateKey => $events) {
            if (!is_array($events)) continue;

            foreach ($events as $event) {
                if (!isset($event['id'])) continue;

                $stats['scanned']++;

                // Get event's namespace field
                $eventNamespace = isset($event['namespace']) ? $event['namespace'] : '';

                // Create unique ID based on event's namespace field
                // Empty namespace = root namespace
                if ($eventNamespace === '') {
                    $uniqueId = ':' . $event['id'];
                } else {
                    $uniqueId = $eventNamespace . ':' . $event['id'];
                }

                // Store file location for reference
                $event['_fileNamespace'] = $namespace;
                $event['_dateKey'] = $dateKey;

                // Add to collection - just like DokuWiki does
                $allEvents[$uniqueId] = $event;
            }
        }
    }
}

// =============================================================================
// EVENT CONVERSION
// =============================================================================

function convertToOutlookEvent($dwEvent, $config) {
    $timezone = $config['timezone'];

    // Parse date and time
    $dateKey = $dwEvent['_dateKey'];
    $startDate = $dateKey;
    $endDate = isset($dwEvent['endDate']) && $dwEvent['endDate'] ? $dwEvent['endDate'] : $dateKey;

    // Handle time
    $isAllDay = empty($dwEvent['time']);

    if ($isAllDay) {
        // All-day events: Use just the date, and end date is next day
        $startDateTime = $startDate;

        // For all-day events, end date must be the day AFTER the last day
        $endDateObj = new DateTime($endDate);
        $endDateObj->modify('+1 day');
        $endDateTime = $endDateObj->format('Y-m-d');
    } else {
        // Timed events: Add time to date
        $startDateTime = $startDate . 'T' . $dwEvent['time'] . ':00';

        // End time: if no end date, add 1 hour to start time
        if ($endDate === $dateKey) {
            $dt = new DateTime($startDateTime, new DateTimeZone($timezone));
            $dt->modify('+1 hour');
            $endDateTime = $dt->format('Y-m-d\TH:i:s');
        } else {
            $endDateTime = $endDate . 'T23:59:59';
        }
    }

    // Determine category based on namespace FIRST (takes precedence)
    $namespace = isset($dwEvent['namespace']) ? $dwEvent['namespace'] : '';
    $category = null;

    // Priority 1: Namespace mapping
    if (!empty($namespace) && isset($config['category_mapping'][$namespace])) {
        $category = $config['category_mapping'][$namespace];
    }

    // Priority 2: Color mapping (fallback if no namespace or namespace not mapped)
    if ($category === null && isset($dwEvent['color'])) {
        $colorToCategoryMap = [
            '#3498db' => 'Blue Category',      // Blue
            '#2ecc71' => 'Green Category',     // Green
            '#f39c12' => 'Orange Category',    // Orange
            '#e74c3c' => 'Red Category',       // Red
            '#f1c40f' => 'Yellow Category',    // Yellow
            '#9b59b6' => 'Purple Category',    // Purple
        ];

        $eventColor = strtolower($dwEvent['color']);
        foreach ($colorToCategoryMap as $color => $cat) {
            if (strtolower($color) === $eventColor) {
                $category = $cat;
                break;
            }
        }
    }

    // Priority 3: Default category
    if ($category === null) {
        $category = $config['default_category'];
    }

    // Clean and sanitize text fields
    $title = isset($dwEvent['title']) ? trim($dwEvent['title']) : 'Untitled Event';
    $description = isset($dwEvent['description']) ? trim($dwEvent['description']) : '';

    // Remove any null bytes and control characters that can break JSON
    $title = preg_replace('/[\x00-\x1F\x7F]/u', '', $title);
    $description = preg_replace('/[\x00-\x1F\x7F]/u', '', $description);

    // Ensure proper UTF-8 encoding
    if (!mb_check_encoding($title, 'UTF-8')) {
        $title = mb_convert_encoding($title, 'UTF-8', 'UTF-8');
    }
    if (!mb_check_encoding($description, 'UTF-8')) {
        $description = mb_convert_encoding($description, 'UTF-8', 'UTF-8');
    }

    // Build Outlook event structure
    if ($isAllDay) {
        // All-day events use different format (no time component, no timezone)
        $outlookEvent = [
            'subject' => $title,
            'body' => [
                'contentType' => 'text',
                'content' => $description
            ],
            'start' => [
                'dateTime' => $startDateTime,
                'timeZone' => 'UTC'  // All-day events should use UTC
            ],
            'end' => [
                'dateTime' => $endDateTime,
                'timeZone' => 'UTC'
            ],
            'isAllDay' => true,
            'categories' => [$category],
            'isReminderOn' => false,  // All-day events typically don't need reminders
            'singleValueExtendedProperties' => [
                [
                    'id' => 'String {66f5a359-4659-4830-9070-00047ec6ac6e} Name DokuWikiId',
                    'value' => $namespace . ':' . $dwEvent['id']
                ]
            ]
        ];
    } else {
        // Timed events
        $outlookEvent = [
            'subject' => $title,
            'body' => [
                'contentType' => 'text',
                'content' => $description
            ],
            'start' => [
                'dateTime' => $startDateTime,
                'timeZone' => $timezone
            ],
            'end' => [
                'dateTime' => $endDateTime,
                'timeZone' => $timezone
            ],
            'isAllDay' => false,
            'categories' => [$category],
            'isReminderOn' => true,
            'reminderMinutesBeforeStart' => $config['reminder_minutes'],
            'singleValueExtendedProperties' => [
                [
                    'id' => 'String {66f5a359-4659-4830-9070-00047ec6ac6e} Name DokuWikiId',
                    'value' => $namespace . ':' . $dwEvent['id']
                ]
            ]
        ];
    }

    return $outlookEvent;
}

// =============================================================================
// SYNC STATE MANAGEMENT (with hash-based change tracking)
// =============================================================================

/**
 * Compute a hash of all sync-relevant event fields.
 * If any of these fields change, the event will be re-synced to Outlook.
 */
function computeEventHash($dwEvent) {
    $fields = [
        'title'       => isset($dwEvent['title']) ? trim($dwEvent['title']) : '',
        'description' => isset($dwEvent['description']) ? trim($dwEvent['description']) : '',
        'time'        => isset($dwEvent['time']) ? $dwEvent['time'] : '',
        'endTime'     => isset($dwEvent['endTime']) ? $dwEvent['endTime'] : '',
        'endDate'     => isset($dwEvent['endDate']) ? $dwEvent['endDate'] : '',
        'color'       => isset($dwEvent['color']) ? $dwEvent['color'] : '',
        'namespace'   => isset($dwEvent['namespace']) ? $dwEvent['namespace'] : '',
        'isTask'      => !empty($dwEvent['isTask']) ? '1' : '0',
        'completed'   => !empty($dwEvent['completed']) ? '1' : '0',
        'dateKey'     => isset($dwEvent['_dateKey']) ? $dwEvent['_dateKey'] : '',
    ];
    return md5(json_encode($fields));
}

function loadSyncState($stateFile) {
    if (!file_exists($stateFile)) {
        return ['mapping' => [], 'last_sync' => 0, 'version' => 2];
    }

    $data = json_decode(file_get_contents($stateFile), true);
    if (!$data) {
        return ['mapping' => [], 'last_sync' => 0, 'version' => 2];
    }

    // Migrate v1 state (mapping was dwId => outlookId string)
    // to v2 state (mapping is dwId => {outlookId, hash})
    if (!isset($data['version']) || $data['version'] < 2) {
        logMessage("Migrating sync state from v1 to v2 (adding hash tracking)...");
        $newMapping = [];
        foreach ($data['mapping'] as $dwId => $value) {
            if (is_string($value)) {
                // v1 format: dwId => outlookId
                $newMapping[$dwId] = ['outlookId' => $value, 'hash' => ''];
            } else {
                // Already v2
                $newMapping[$dwId] = $value;
            }
        }
        $data['mapping'] = $newMapping;
        $data['version'] = 2;
        logMessage("Migration complete - " . count($newMapping) . " entries migrated (will re-sync all on first run)");
    }

    return $data;
}

function saveSyncState($stateFile, $state) {
    $state['last_sync'] = time();
    $state['version'] = 2;
    file_put_contents($stateFile, json_encode($state, JSON_PRETTY_PRINT));
}

// =============================================================================
// MAIN SYNC LOGIC
// =============================================================================

try {
    // Initialize API client
    $client = new MicrosoftGraphClient($config);
    logMessage("Authenticating with Microsoft Graph API...");
    $client->getAccessToken();
    logMessage("Authentication successful");

    // Load sync state
    $state = loadSyncState($stateFile);
    $mapping = $state['mapping']; // dwId => {outlookId, hash}

    // Reset mode - clear the mapping
    if ($reset) {
        logMessage("Resetting sync state...");
        $mapping = [];
    }

    // Load DokuWiki events
    logMessage("Loading DokuWiki calendar events...");
    $dwEvents = loadDokuWikiEvents($dokuwikiRoot, $filterNamespace);
    logMessage("Found " . count($dwEvents) . " events in DokuWiki");

    // Clean duplicates mode
    if ($cleanDuplicates) {
        logMessage("=== Cleaning Duplicates ===");
        $duplicatesFound = 0;
        $duplicatesDeleted = 0;

        foreach ($dwEvents as $dwId => $dwEvent) {
            $existingEvents = $client->findEventByDokuWikiId($config['user_email'], $dwId);

            if (count($existingEvents) > 1) {
                $duplicatesFound += count($existingEvents) - 1;
                logMessage("Found " . count($existingEvents) . " copies of: {$dwEvent['title']}");

                if (!$dryRun) {
                    $deleted = $client->deleteAllDuplicates($config['user_email'], $dwId);
                    $duplicatesDeleted += $deleted;

                    // Update mapping with the remaining event
                    $remaining = $client->findEventByDokuWikiId($config['user_email'], $dwId);
                    if (count($remaining) == 1) {
                        $hash = computeEventHash($dwEvent);
                        $mapping[$dwId] = ['outlookId' => $remaining[0]['id'], 'hash' => $hash];
                    }
                }
            }
        }

        logMessage("=== Duplicate Cleanup Complete ===");
        logMessage("Duplicates found: $duplicatesFound");
        logMessage("Duplicates deleted: $duplicatesDeleted");

        if (!$dryRun) {
            $state['mapping'] = $mapping;
            saveSyncState($stateFile, $state);
        }

        exit(0);
    }

    // =========================================================================
    // DELTA DETECTION - classify events as new, modified, unchanged, or deleted
    // =========================================================================

    $newEvents = [];       // In DokuWiki but not in mapping
    $modifiedEvents = [];  // In both but hash changed
    $unchangedEvents = []; // In both and hash matches
    $deletedIds = [];      // In mapping but not in DokuWiki

    // Classify current DokuWiki events
    foreach ($dwEvents as $dwId => $dwEvent) {
        $currentHash = computeEventHash($dwEvent);

        if (!isset($mapping[$dwId])) {
            $newEvents[$dwId] = $dwEvent;
        } elseif ($forceSync || $mapping[$dwId]['hash'] !== $currentHash) {
            $modifiedEvents[$dwId] = $dwEvent;
        } else {
            $unchangedEvents[$dwId] = $dwEvent;
        }
    }

    // Find deleted events (in mapping but no longer in DokuWiki)
    foreach ($mapping as $dwId => $entry) {
        if (!isset($dwEvents[$dwId])) {
            $deletedIds[] = $dwId;
        }
    }

    logMessage("=== Delta Analysis ===");
    logMessage("  New:       " . count($newEvents));
    logMessage("  Modified:  " . count($modifiedEvents));
    logMessage("  Unchanged: " . count($unchangedEvents) . " (skipping)");
    logMessage("  Deleted:   " . count($deletedIds));
    $totalApiCalls = count($newEvents) + count($modifiedEvents) + count($deletedIds);
    logMessage("  API calls: ~$totalApiCalls (vs " . count($dwEvents) . " full sync)");

    if ($totalApiCalls === 0) {
        logMessage("Nothing to sync - calendar is up to date!");
    }

    // =========================================================================
    // SYNC NEW EVENTS
    // =========================================================================

    foreach ($newEvents as $dwId => $dwEvent) {
        // Check for abort flag
        if (file_exists(__DIR__ . '/.sync_abort')) {
            logMessage("=== SYNC ABORTED BY USER ===", 'WARN');
            @unlink(__DIR__ . '/.sync_abort');
            break;
        }

        // Skip completed tasks if configured
        if (!$config['sync_completed_tasks'] &&
            !empty($dwEvent['isTask']) &&
            !empty($dwEvent['completed'])) {
            $stats['skipped']++;
            continue;
        }

        $outlookEvent = convertToOutlookEvent($dwEvent, $config);
        $eventNamespace = isset($dwEvent['namespace']) ? $dwEvent['namespace'] : '';
        $hash = computeEventHash($dwEvent);

        try {
            // Check if event already exists in Outlook (unmapped from previous sync)
            $existingEvents = $client->findEventByDokuWikiId($config['user_email'], $dwId);

            if (count($existingEvents) >= 1) {
                // Already exists - update and map it
                $outlookId = $existingEvents[0]['id'];

                if (!$dryRun) {
                    $client->updateEvent($config['user_email'], $outlookId, $outlookEvent);
                    $mapping[$dwId] = ['outlookId' => $outlookId, 'hash' => $hash];

                    // Clean any duplicates
                    if (count($existingEvents) > 1) {
                        $client->deleteAllDuplicates($config['user_email'], $dwId);
                        logMessage("  Cleaned " . (count($existingEvents) - 1) . " duplicate(s)");
                    }
                }
                $stats['updated']++;
                logMessage("Mapped & updated: {$dwEvent['title']} [$eventNamespace]");
            } else {
                // Truly new - create in Outlook
                if (!$dryRun) {
                    $result = $client->createEvent($config['user_email'], $outlookEvent);
                    $mapping[$dwId] = ['outlookId' => $result['id'], 'hash' => $hash];
                    logMessage("Created: {$dwEvent['title']} [$eventNamespace]");
                } else {
                    logMessage("Would create: {$dwEvent['title']} [$eventNamespace]");
                }
                $stats['created']++;
            }
        } catch (Exception $e) {
            $stats['errors']++;
            logMessage("ERROR creating {$dwEvent['title']}: " . $e->getMessage(), 'ERROR');
        }
    }

    // =========================================================================
    // SYNC MODIFIED EVENTS
    // =========================================================================

    foreach ($modifiedEvents as $dwId => $dwEvent) {
        if (file_exists(__DIR__ . '/.sync_abort')) {
            logMessage("=== SYNC ABORTED BY USER ===", 'WARN');
            @unlink(__DIR__ . '/.sync_abort');
            break;
        }

        if (!$config['sync_completed_tasks'] &&
            !empty($dwEvent['isTask']) &&
            !empty($dwEvent['completed'])) {
            $stats['skipped']++;
            continue;
        }

        $outlookEvent = convertToOutlookEvent($dwEvent, $config);
        $eventNamespace = isset($dwEvent['namespace']) ? $dwEvent['namespace'] : '';
        $hash = computeEventHash($dwEvent);
        $outlookId = $mapping[$dwId]['outlookId'];

        try {
            if (!$dryRun) {
                try {
                    $client->updateEvent($config['user_email'], $outlookId, $outlookEvent);
                    $mapping[$dwId] = ['outlookId' => $outlookId, 'hash' => $hash];
                    $stats['updated']++;
                    logMessage("Updated: {$dwEvent['title']} [$eventNamespace]");
                } catch (Exception $e) {
                    // 404 = event was deleted from Outlook, recreate it
                    if (strpos($e->getMessage(), 'HTTP 404') !== false ||
                        strpos($e->getMessage(), 'ErrorItemNotFound') !== false) {

                        logMessage("Event deleted from Outlook, recreating: {$dwEvent['title']}", 'WARN');
                        $result = $client->createEvent($config['user_email'], $outlookEvent);
                        $mapping[$dwId] = ['outlookId' => $result['id'], 'hash' => $hash];
                        $stats['recreated']++;
                        logMessage("Recreated: {$dwEvent['title']} [$eventNamespace]");
                    } else {
                        throw $e;
                    }
                }
            } else {
                $stats['updated']++;
                logMessage("Would update: {$dwEvent['title']} [$eventNamespace]");
            }
        } catch (Exception $e) {
            $stats['errors']++;
            logMessage("ERROR updating {$dwEvent['title']}: " . $e->getMessage(), 'ERROR');
        }
    }

    // =========================================================================
    // DELETE REMOVED EVENTS
    // =========================================================================

    if ($config['delete_outlook_events'] && !empty($deletedIds)) {
        logMessage("=== Deleting " . count($deletedIds) . " removed events ===");

        foreach ($deletedIds as $dwId) {
            $outlookId = $mapping[$dwId]['outlookId'];

            try {
                if (!$dryRun) {
                    $client->deleteEvent($config['user_email'], $outlookId);
                    logMessage("Deleted: $dwId");
                } else {
                    logMessage("Would delete: $dwId");
                }
                unset($mapping[$dwId]);
                $stats['deleted']++;
            } catch (Exception $e) {
                if (strpos($e->getMessage(), 'HTTP 404') !== false ||
                    strpos($e->getMessage(), 'ErrorItemNotFound') !== false) {
                    logMessage("Already gone from Outlook: $dwId", 'DEBUG');
                    unset($mapping[$dwId]);
                    $stats['deleted']++;
                } else {
                    logMessage("ERROR deleting $dwId: " . $e->getMessage(), 'ERROR');
                    $stats['errors']++;
                }
            }
        }
    }

    // Save state after every sync (checkpoint)
    if (!$dryRun) {
        $state['mapping'] = $mapping;
        saveSyncState($stateFile, $state);
    }

    // Count unchanged as skipped for stats
    $stats['skipped'] += count($unchangedEvents);

    // Summary
    logMessage("=== Sync Complete ===");
    logMessage("New:       {$stats['created']}");
    logMessage("Updated:   {$stats['updated']}");
    logMessage("Recreated: {$stats['recreated']}");
    logMessage("Deleted:   {$stats['deleted']}");
    logMessage("Unchanged: " . count($unchangedEvents));
    logMessage("Skipped:   {$stats['skipped']}");
    logMessage("Errors:    {$stats['errors']}");

    logMessage("");
    if ($dryRun) {
        logMessage("DRY RUN - No changes were made");
    } else {
        logMessage("Sync completed successfully!");
    }

    exit($stats['errors'] > 0 ? 1 : 0);

} catch (Exception $e) {
    logMessage("FATAL ERROR: " . $e->getMessage(), 'ERROR');
    exit(1);
}