← All changes | includes/api.php +543 -107 1.2.0 → 1.4.1 View file →

		@@ -30,20 +30,39 @@
30	30	*/
31	31
32	32	public function register_routes() {
33	33	$this->add_route( '/verifyCredentials', 'verifyCredentials', 'POST' );
34		- $this->add_route( '/permissions/checkExist', 'verifyBucketExist', 'POST' );
35		- $this->add_route( '/permissions/addNewBucket', 'createBucket', 'POST' );
36		- $this->add_route( '/permissions/write', 'verifyObjectWrite', 'POST' );
	34	+ $this->add_route( '/bucket/checkExist', 'verifyBucketExist', 'POST' );
	35	+ $this->add_route( '/bucket/addNew', 'createBucket', 'POST' );
	36	+ $this->add_route( '/permissions/status', 'verifyStatus', 'POST' );
	37	+ $this->add_route( '/permissions/write', 'verifyWrite', 'POST' );
37	38	$this->add_route( '/permissions/delete', 'verifyObjectDelete', 'POST' );
	39	+ $this->add_route( '/permissions/read', 'verifyRead', 'POST' );
38	40
39	41	$this->add_route( '/security/get_security', 'getBucketSecuritySettings', 'POST' );
40	42	$this->add_route( '/security/block_public_access', 'changePublicAccess', 'POST' );
41	43	$this->add_route( '/security/object_ownership_enforce', 'changeObjectOwnership', 'POST' );
42	44
	45	+ $this->add_route( '/getSettings', 'getSettings' );
43	46	$this->add_route( '/saveConfig', 'saveConfig', 'POST' );
44		- $this->add_route( '/getSettings', 'getSettings' );
45		- $this->add_route( '/uploadCredentials', 'uploadCredentials', 'POST' );
	47	+ $this->add_route( '/refreshCounts', 'refreshCounts', 'POST' );
	48	+ $this->add_route( '/getErrorLogs', 'getErrorLogs', 'POST' );
	49	+ $this->add_route( '/clearErrorLogs', 'clearErrorLogs', 'POST' );
	50	+
	51	+ // Upgrade Database Routes
	52	+ $this->add_route( '/upgrade/status', 'getUpgradeStatus' );
	53	+ $this->add_route( '/upgrade/start', 'startUpgrade', 'POST' );
	54	+
	55	+ // Sync Routes
	56	+ $this->add_route( '/sync/status', 'getStatus' );
	57	+ $this->add_route( '/sync/start', 'startSync', 'POST' );
	58	+ $this->add_route( '/sync/pause', 'pauseSync', 'POST' );
	59	+ $this->add_route( '/sync/resume', 'resumeSync', 'POST' );
	60	+ $this->add_route( '/sync/stop', 'stopSync', 'POST' );
	61	+ $this->add_route( '/sync/tick', 'tickSync', 'POST' );
	62	+ $this->add_route( '/sync/setMethod', 'setSyncMethod', 'POST' );
	63	+
	64	+ $this->add_route( '/sync/retrySingle', 'retrySingle', 'POST' );
46	65	}
47	66
48	67	/**
49	68	* Verify the Service Credentials
		@@ -48,10 +67,9 @@
48	67	/**
49	68	* Verify the Service Credentials
50	69	*/
51	70	public function verifyCredentials( $data ) {
52		- global $wpmcsService;
53		- return new WP_REST_Response( $wpmcsService->verifyCredentials($data->get_params()), 200 );
	71	+ return new WP_REST_Response( Service::instance()->verifyCredentials($data->get_params()), 200 );
54	72	}
55	73
56	74	/**
57	75	* Verify the Bucket exist
		@@ -56,10 +74,9 @@
56	74	/**
57	75	* Verify the Bucket exist
58	76	*/
59	77	public function verifyBucketExist( $data ) {
60		- global $wpmcsService;
61		- return new WP_REST_Response( $wpmcsService->verifyBucketExist($data->get_params()), 200 );
	78	+ return new WP_REST_Response( Service::instance()->verifyBucketExist($data->get_params()), 200 );
62	79	}
63	80
64	81	/**
65	82	* Create the bucket
		@@ -64,35 +81,53 @@
64	81	/**
65	82	* Create the bucket
66	83	*/
67	84	public function createBucket( $data ) {
68		- global $wpmcsService;
69		- return new WP_REST_Response( $wpmcsService->createBucket($data->get_params()), 200 );
	85	+ return new WP_REST_Response( Service::instance()->createBucket($data->get_params()), 200 );
70	86	}
71	87
72		-
73	88	/**
74		- * Verify the Bucket Write Permission
	89	+ * Saved connection status checks (storage, CDN).
	90	+ * @since 1.3.11
75	91	*/
76		- public function verifyObjectWrite( $data ) {
77		- global $wpmcsService;
78		- return new WP_REST_Response( $wpmcsService->verifyObjectWritePermission($data->get_params()), 200 );
	92	+ public function verifyStatus( $data ) {
	93	+ $params = $data->get_params();
	94	+ $check = isset( $params['check'] ) ? sanitize_text_field( $params['check'] ) : 'storage';
	95	+ return new WP_REST_Response( Service::instance()->verifyStatus( $check ), 200 );
79	96	}
80	97
81	98	/**
	99	+ * Verify bucket write permission (configure wizard) or saved storage status (legacy route).
	100	+ * @since 1.3.11
	101	+ */
	102	+ public function verifyWrite( $data ) {
	103	+ $params = $data->get_params();
	104	+ if ( !empty( $params['service'] ) ) {
	105	+ return new WP_REST_Response( Service::instance()->verifyObjectWritePermission( $params ), 200 );
	106	+ }
	107	+ return new WP_REST_Response( Service::instance()->verifyStatus( 'storage' ), 200 );
	108	+ }
	109	+
	110	+ /**
82	111	* Verify the Bucket delete Permission
83	112	*/
84	113	public function verifyObjectDelete( $data ) {
85		- global $wpmcsService;
86		- return new WP_REST_Response( $wpmcsService->verifyObjectDeletePermission($data->get_params()), 200 );
	114	+ return new WP_REST_Response( Service::instance()->verifyObjectDeletePermission($data->get_params()), 200 );
87	115	}
88	116
89	117	/**
	118	+ * Verify delivery read access (legacy route).
	119	+ * @since 1.3.11
	120	+ */
	121	+ public function verifyRead( $data ) {
	122	+ return new WP_REST_Response( Service::instance()->verifyStatus( 'cdn' ), 200 );
	123	+ }
	124	+
	125	+ /**
90	126	* Get the Security Settings
91	127	*/
92	128	public function getBucketSecuritySettings( $data ) {
93		- global $wpmcsService;
94		- return new WP_REST_Response( $wpmcsService->getBucketSecuritySettings($data->get_params()), 200 );
	129	+ return new WP_REST_Response( Service::instance()->getBucketSecuritySettings($data->get_params()), 200 );
95	130	}
96	131
97	132
98	133	/**
		@@ -98,10 +133,9 @@
98	133	/**
99	134	* Change the Public Access
100	135	*/
101	136	public function changePublicAccess( $data ) {
102		- global $wpmcsService;
103		- return new WP_REST_Response( $wpmcsService->changePublicAccess($data->get_params()), 200 );
	137	+ return new WP_REST_Response( Service::instance()->changePublicAccess($data->get_params()), 200 );
104	138	}
105	139
106	140
107	141	/**
		@@ -107,10 +141,9 @@
107	141	/**
108	142	* Change the Object Ownership
109	143	*/
110	144	public function changeObjectOwnership( $data ) {
111		- global $wpmcsService;
112		- return new WP_REST_Response( $wpmcsService->changeObjectOwnership($data->get_params()), 200 );
	145	+ return new WP_REST_Response( Service::instance()->changeObjectOwnership($data->get_params()), 200 );
113	146	}
114	147
115	148	/**
116	149	* Get Settings
		@@ -115,15 +148,30 @@
115	148	/**
116	149	* Get Settings
117	150	*/
118	151	public function getSettings( ) {
	152	+ // Fetch and update media counts for make sure they are up to date
	153	+ Counter::fetch_and_update();
	154	+
119	155	$data = [
120		- 'credentials' => Utils::get_credentials(),
121		- 'common' => [
122		- 'version' => WPMCS_VERSION,
123		- 'uploaded' => Counter::get( 'uploaded' ),
	156	+ 'credentials' => Utils::get_credentials( '', [], true ),
	157	+ 'serviceEnabled' => Utils::is_service_enabled(),
	158	+ 'serviceError' => Utils::get_service_configuration_error(),
	159	+ 'common' => [
	160	+ 'version' => defined('WPMCS_PRO_VERSION') ? WPMCS_PRO_VERSION : WPMCS_VERSION,
	161	+ 'counts' => [
	162	+ 'all' => Counter::get_count(),
	163	+ 'categorized' => $this->getSortedMediaCounts()
	164	+ ],
	165	+ 'status' => Utils::get_status('', false),
124	166	'settings' => Utils::get_settings(),
125		- ]
	167	+ ],
	168	+ 'sync' => Sync::instance()->get_status(),
	169	+ 'license' => defined('WPMCS_PRO_VERSION') ? Utils::get_safe_license_data() : [],
	170	+ 'file_manager' => defined('WPMCS_PRO_VERSION') ? [
	171	+ 'delete_enabled' => (bool) Utils::get_option('delete_enabled', false, Schema::getConstant('FILE_MANAGER_SETTINGS_KEY')),
	172	+ 'root_folder' => Utils::get_option('root_folder', '', Schema::getConstant('FILE_MANAGER_SETTINGS_KEY')),
	173	+ ] : [],
126	174	];
127	175
128	176	return new WP_REST_Response( $data, 200 );
129	177	}
		@@ -141,10 +189,12 @@
141	189	$action = isset($saveData['action']) ? $saveData['action'] : false;
142	190	if($action === false) return new WP_REST_Response( $result, 200 );
143	191
144	192	$service = isset($saveData['service']) ? $saveData['service'] : false;
	193	+ $serviceLabel = isset($saveData['serviceLabel']) ? $saveData['serviceLabel'] : '';
145	194	$cdn = isset($saveData['cdn']) ? $saveData['cdn'] : [];
146	195	$config = isset($saveData['config']) ? $saveData['config'] : false;
	196	+ $configSource = isset($saveData['configSource']) ? $saveData['configSource'] : 'database';
147	197	$bucketConfig = isset($saveData['bucketConfig']) ? $saveData['bucketConfig'] : [];
148	198	$security = isset($saveData['security']) ? $saveData['security'] : [];
149	199	$settings = isset($saveData['settings']) ? $saveData['settings'] : [];
150	200
		@@ -151,24 +201,51 @@
151	201	$serviceOk = true;
152	202	$settingsOk = true;
153	203
154	204	if( $action === 'cdn' ){
	205	+ // Switching delivery provider resets the previously selected one's own fields
	206	+ // back to their defaults (see ChooseCDN.jsx) — that can include private_path/
	207	+ // enable_private_media, since those live in a delivery entry's own field list,
	208	+ // so this write needs the same guard the plain settings save uses below.
	209	+ $validation = apply_filters( 'wpmcs_validate_settings_save', ['ok' => true, 'message' => ''], $settings, $action );
	210	+ if ( empty( $validation['ok'] ) ) {
	211	+ return new WP_REST_Response( [
	212	+ 'success' => false,
	213	+ 'message' => !empty($validation['message']) ? $validation['message'] : esc_html__('Settings could not be saved.', 'media-cloud-sync')
	214	+ ], 200 );
	215	+ }
	216	+
155	217	$existing = Utils::get_credentials();
156	218	$existing['cdn'] = $cdn;
	219	+
157	220	$updated = Utils::update_option('credentials', $existing, Schema::getConstant('GLOBAL_SETTINGS_KEY'));
	221	+ $updatedSettings = Utils::update_option('settings', $settings, Schema::getConstant('GLOBAL_SETTINGS_KEY'));
	222	+
158	223	if(!$updated) $serviceOk = false;
	224	+ if(!$updatedSettings) $settingsOk = false;
	225	+
	226	+ // Only once both writes actually persisted — a failed credentials write can
	227	+ // leave the object cache holding an unpersisted bucket identity (see
	228	+ // Cache::set_object_cache()), so gating on $settingsOk alone isn't enough.
	229	+ if ($serviceOk && $settingsOk) {
	230	+ do_action('wpmcs_after_settings_save', $settings, $action);
	231	+ }
159	232	}
160	233
161	234
162	235	if($action === 'all' || $action === 'service'){
163		- if ( $service === false || empty($config) || empty($bucketConfig)) return new WP_REST_Response( $result, 200 );
	236	+ // In 'config' source mode the credentials live in the WPMCS_CONFIG constant,
	237	+ // so an empty config payload is expected and must not block the save.
	238	+ if ( $service === false || ($configSource !== 'config' && empty($config)) || empty($bucketConfig)) return new WP_REST_Response( $result, 200 );
164	239
165	240	$updated = Utils::update_option(
166	241	'credentials',
167	242	[
168	243	'service' => $service,
	244	+ 'serviceLabel' => $serviceLabel,
169	245	'cdn' => $cdn,
170		- 'config' => $config,
	246	+ 'config' => $configSource === 'config' ? [] : $config,
	247	+ 'configSource' => $configSource,
171	248	'bucketConfig' => $bucketConfig,
172	249	'security' => $security
173	250	],
174	251	Schema::getConstant('GLOBAL_SETTINGS_KEY')
		@@ -173,16 +250,62 @@
173	250	],
174	251	Schema::getConstant('GLOBAL_SETTINGS_KEY')
175	252	);
176	253	if(!$updated) $serviceOk = false;
	254	+
	255	+ if($serviceOk) {
	256	+ Utils::set_status('cdnRead', [
	257	+ 'status' => false,
	258	+ 'message' => '',
	259	+ 'lastChecked' => null
	260	+ ]);
	261	+ Utils::set_status('storageCredentials', [
	262	+ 'status' => false,
	263	+ 'message' => '',
	264	+ 'lastChecked' => null
	265	+ ]);
	266	+ }
177	267	}
178	268
179	269	if(($action === 'all' || $action === 'settings')) {
	270	+ // Extension point for a pro-only settings-save guard (e.g. private media
	271	+ // refusing a private_path/base_path change while items are still private
	272	+ // under the currently-applied path) — free has no opinion here, default
	273	+ // is "allow". ['ok' => bool, 'message' => string].
	274	+ $validation = apply_filters( 'wpmcs_validate_settings_save', ['ok' => true, 'message' => ''], $settings, $action );
	275	+ if ( empty( $validation['ok'] ) ) {
	276	+ return new WP_REST_Response( [
	277	+ 'success' => false,
	278	+ 'message' => !empty($validation['message']) ? $validation['message'] : esc_html__('Settings could not be saved.', 'media-cloud-sync')
	279	+ ], 200 );
	280	+ }
	281	+
180	282	$updatedSettings = Utils::update_option('settings', $settings, Schema::getConstant('GLOBAL_SETTINGS_KEY'));
181	283	if(!$updatedSettings) $settingsOk = false;
	284	+
	285	+ // Only once both writes actually persisted — a failed credentials write can
	286	+ // leave the object cache holding an unpersisted bucket identity (see
	287	+ // Cache::set_object_cache()), so gating on $settingsOk alone isn't enough.
	288	+ if ($serviceOk && $settingsOk) {
	289	+ do_action('wpmcs_after_settings_save', $settings, $action);
	290	+ }
182	291	}
183	292
	293	+ // Clear plugin caches and refresh counts after any configuration save.
	294	+ if(in_array($action, ['all', 'service', 'settings', 'cdn'], true)) {
	295	+ if($action === 'all' || $action === 'service' || $action === 'settings') {
	296	+ Integration::instance()->clear_all_meta(false);
	297	+ }
184	298
	299	+ if($action === 'all' || $action === 'settings') {
	300	+ Utils::clear_all_content_meta(false, false);
	301	+ }
	302	+
	303	+ Cache::flush_object_cache();
	304	+ Counter::instance()->fetch_and_update();
	305	+ }
	306	+
	307	+
185	308	if($serviceOk && $settingsOk) {
186	309	$result = [
187	310	'success' => true,
188	311	'message' => esc_html__('Configuration saved successfully', 'media-cloud-sync')
		@@ -193,98 +316,411 @@
193	316	}
194	317
195	318
196	319	/**
197		- * Upload Credentials
198		- * @since 1.0.0
199		- */
200		- public function uploadCredentials($request) {
201		- if (isset($_FILES['file']) && !empty($_FILES['file'])) {
202		- $config_file = $_FILES['file'];
203		- if (isset($config_file['type']) && $config_file['type'] == 'application/json') {
204		- if (file_exists($config_file["tmp_name"])) {
	320	+ * Refresh the Media Counts
	321	+ *
	322	+ */
	323	+ public function refreshCounts( ) {
	324	+ Cache::flush_object_cache();
	325	+ Integration::instance()->clear_all_meta();
	326	+ Counter::instance()->fetch_and_update();
205	327
206		- add_filter( 'upload_dir', [ $this, 'change_file_upload_dir' ]);
207		- add_filter( 'mime_types', [ $this, 'add_custom_mime_type_json' ]);
	328	+ $result = [
	329	+ 'success' => true,
	330	+ 'counts' => [
	331	+ 'all' => Counter::get_count(),
	332	+ 'categorized' => $this->getSortedMediaCounts()
	333	+ ],
	334	+ 'message' => esc_html__('Media counts refreshed successfully', 'media-cloud-sync')
	335	+ ];
	336	+ return new WP_REST_Response( $result, 200 );
	337	+ }
208	338
209		- if ( ! function_exists( 'wp_handle_upload' ) ) {
210		- require_once( ABSPATH . 'wp-admin/includes/file.php' );
211		- }
212	339
213		- $upload_overrides = [
214		- 'test_form' => false,
215		- 'test_type' => true,
216		- 'mimes' => [ 'json'=>'application/json' ]
217		- ];
	340	+ /**
	341	+ * Start Upgrade
	342	+ * @since 1.3.6
	343	+ */
	344	+ public function startUpgrade( $request ) {
	345	+ $result = Upgrade::instance()->start_upgrade();
	346	+ return new WP_REST_Response( $result, 200 );
	347	+ }
218	348
219		- $movefile = wp_handle_upload( $config_file, $upload_overrides );
220	349
221		- remove_filter( 'upload_dir', [ $this, 'change_file_upload_dir' ]);
222		- remove_filter( 'mime_types', [ $this, 'add_custom_mime_type_json' ]);
	350	+ /**
	351	+ * Get Upgrade Status
	352	+ * @since 1.3.6
	353	+ */ public function getUpgradeStatus( $request ) {
	354	+ $result = Upgrade::instance()->get_progress();
	355	+ return new WP_REST_Response( $result, 200 );
	356	+ }
223	357
224		- if ($movefile && !isset($movefile['error'])) {
225		- $result = [
226		- 'success' => true,
227		- 'file_path' => $movefile['file'],
228		- 'file_name' => basename($movefile['file']),
229		- ];
230		- return new WP_REST_Response($result, 200);
231		- } else {
232		- $result = [
233		- 'success' => false,
234		- 'message' => $movefile['error'],
235		- ];
236		- return new WP_REST_Response($result, 200);
237		- }
238		- }
239		- } else {
240		- $result = [
241		- 'success' => false,
242		- 'message' => esc_html__('Invalid file format', 'media-cloud-sync'),
243		- ];
244		- return new WP_REST_Response($result, 200);
245		- }
246		- } else {
247		- $result = [
248		- 'success' => false,
249		- 'message' => esc_html__('Insufficient data. Please try again', 'media-cloud-sync'),
	358	+
	359	+ /**
	360	+ * Get Media Error Logs
	361	+ * @since 1.2.13
	362	+ */
	363	+ public function getErrorLogs( $request ) {
	364	+ $params = $request->get_params();
	365	+ $type = isset($params['type']) ? $params['type'] : 'all';
	366	+ $page = isset($params['page']) ? $params['page'] : null;
	367	+ $per_page = isset($params['per_page']) ? $params['per_page'] : null;
	368	+
	369	+ if($type !== 'all') {
	370	+ $logs = Logger::instance()->get_logs_by_type($type, $page, $per_page);
	371	+ } else {
	372	+ $logs = Logger::instance()->get_all_logs($page, $per_page);
	373	+ }
	374	+
	375	+ $result = [
	376	+ 'success' => true,
	377	+ 'logs' => $logs,
	378	+ 'message' => esc_html__('Error logs fetched successfully', 'media-cloud-sync')
	379	+ ];
	380	+ return new WP_REST_Response( $result, 200 );
	381	+ }
	382	+
	383	+
	384	+ /**
	385	+ * Clear all error logs for a sync type (e.g. stale entries from earlier failed attempts).
	386	+ * @since 1.3.13
	387	+ */
	388	+ public function clearErrorLogs( $request ) {
	389	+ $type = isset($request->get_params()['type']) ? $request->get_params()['type'] : '';
	390	+
	391	+ if (empty($type) || !Sync::instance()->get_class_by_action($type)) {
	392	+ return new WP_REST_Response( [
	393	+ 'success' => false,
	394	+ 'message' => esc_html__('Invalid action', 'media-cloud-sync')
	395	+ ], 200 );
	396	+ }
	397	+
	398	+ Logger::instance()->remove_logs_by_type($type);
	399	+
	400	+ $result = [
	401	+ 'success' => true,
	402	+ 'message' => esc_html__('Error logs cleared', 'media-cloud-sync')
	403	+ ];
	404	+ return new WP_REST_Response( $result, 200 );
	405	+ }
	406	+
	407	+
	408	+ /**
	409	+ * Get Status
	410	+ * @since 1.2.13
	411	+ */
	412	+ public function getStatus( $request ) {
	413	+ // Fetch and update media counts for make sure they are up to date
	414	+ $action = isset($request->get_params()['action']) ? $request->get_params()['action'] : 'all';
	415	+ $status = Sync::instance()->get_status();
	416	+
	417	+ if($action !== 'all') {
	418	+ $status = isset($status[$action]) ? $status[$action] : [];
	419	+ }
	420	+
	421	+ $result = [
	422	+ 'success' => true,
	423	+ 'status' => $status,
	424	+ 'counts' => [
	425	+ 'all' => Counter::get_count(),
	426	+ 'categorized' => $this->getSortedMediaCounts()
	427	+ ],
	428	+ 'message' => esc_html__('Status fetched successfully', 'media-cloud-sync')
	429	+ ];
	430	+
	431	+ return new WP_REST_Response( $result, 200 );
	432	+ }
	433	+
	434	+
	435	+ /**
	436	+ * Start Sync
	437	+ * @since 1.2.13
	438	+ */
	439	+ public function startSync( $data ) {
	440	+ $action = isset($data->get_params()['action']) ? $data->get_params()['action'] : '';
	441	+ if ( ! Sync::instance()->get_class_by_action( $action ) ) {
	442	+ $result = [
	443	+ 'success' => false,
	444	+ 'message' => esc_html__('Invalid action', 'media-cloud-sync')
250	445	];
251		- return new WP_REST_Response($result, 200);
252		- }
253		- }
	446	+ return new WP_REST_Response( $result, 200 );
	447	+ }
	448	+ if(!Utils::is_service_enabled()) {
	449	+ $result = [
	450	+ 'success' => false,
	451	+ 'message' => Utils::get_service_configuration_error() ?: esc_html__('Storage is not configured correctly.', 'media-cloud-sync')
	452	+ ];
	453	+ return new WP_REST_Response( $result, 200 );
	454	+ }
	455	+ $options = isset($data->get_params()['options']) && is_array($data->get_params()['options']) ? $data->get_params()['options'] : [];
	456	+ $status = Sync::instance()->start($action, $options);
254	457
	458	+ // Sync::start() passes a job's own precondition-failure array straight through
	459	+ // (e.g. no destination configured) instead of masking it as a started status.
	460	+ if (is_array($status) && isset($status['success']) && $status['success'] === false) {
	461	+ return new WP_REST_Response( $status, 200 );
	462	+ }
	463	+
	464	+ $result = [
	465	+ 'success' => true,
	466	+ 'status' => $status,
	467	+ 'message' => esc_html__('Sync started successfully', 'media-cloud-sync')
	468	+ ];
	469	+ return new WP_REST_Response( $result, 200 );
	470	+ }
	471	+
	472	+
255	473	/**
256		- * Change File Upload Directory
257		- * @since 1.0.0
258		- */
259		- public function change_file_upload_dir($upload) {
260		- $wpmcs_path = '/' . Schema::getConstant('UPLOADS');
261		- $path = $upload['basedir'] . $wpmcs_path;
262		- $url = $upload['baseurl'] . $wpmcs_path;
	474	+ * Pause Sync
	475	+ * @since 1.2.13
	476	+ */
	477	+ public function pauseSync( $data ) {
	478	+ $action = isset($data->get_params()['action']) ? $data->get_params()['action'] : '';
	479	+ if ( ! Sync::instance()->get_class_by_action( $action ) ) {
	480	+ $result = [
	481	+ 'success' => false,
	482	+ 'message' => esc_html__('Invalid action', 'media-cloud-sync')
	483	+ ];
	484	+ return new WP_REST_Response( $result, 200 );
	485	+ }
	486	+ $status = Sync::instance()->pause($action);
263	487
264		- if (!is_dir($path)) {
265		- do_action( $this->token.'_create_plugin_dir' );
266		- }
	488	+ $result = [
	489	+ 'success' => true,
	490	+ 'status' => $status,
	491	+ 'message' => esc_html__('Sync paused successfully', 'media-cloud-sync')
	492	+ ];
	493	+ return new WP_REST_Response( $result, 200 );
	494	+ }
267	495
268		- $upload['subdir'] = $wpmcs_path;
269		- $upload['path'] = $upload['basedir'] . $wpmcs_path;
270		- $upload['url'] = $upload['baseurl'] . $wpmcs_path;
271	496
272		- return $upload;
273		- }
	497	+ /**
	498	+ * Save the sync method ('ajax'|'cron'|'mixed') preference for a sync type.
	499	+ * @since 1.3.13
	500	+ */
	501	+ public function setSyncMethod( $data ) {
	502	+ $params = $data->get_params();
	503	+ $action = isset($params['action']) ? sanitize_text_field($params['action']) : '';
	504	+ $method = isset($params['sync_method']) ? sanitize_text_field($params['sync_method']) : '';
274	505
275		- /**
276		- * Add Custom Mime Type JSON
277		- * @since 1.0.0
278		- */
279		- public function add_custom_mime_type_json($mimes) {
280		- $mimes['json'] = 'application/json';
281		- // Return the array back to the function with our added mime type.
282		- return $mimes;
283		- }
	506	+ if ( ! Sync::instance()->get_class_by_action( $action ) ) {
	507	+ return new WP_REST_Response( [
	508	+ 'success' => false,
	509	+ 'message' => esc_html__('Invalid action', 'media-cloud-sync')
	510	+ ], 200 );
	511	+ }
284	512
	513	+ $saved = Sync::instance()->set_sync_method($action, $method);
	514	+ if(!$saved) {
	515	+ return new WP_REST_Response( [
	516	+ 'success' => false,
	517	+ 'message' => esc_html__('Invalid sync method', 'media-cloud-sync')
	518	+ ], 200 );
	519	+ }
285	520
	521	+ $result = [
	522	+ 'success' => true,
	523	+ 'sync_method' => $method,
	524	+ 'status' => Sync::instance()->get_class_by_action($action)->get_status(),
	525	+ ];
	526	+ return new WP_REST_Response( $result, 200 );
	527	+ }
	528	+
286	529	/**
	530	+ * Resume Sync
	531	+ * @since 1.2.13
	532	+ */
	533	+ public function resumeSync( $data ) {
	534	+ $action = isset($data->get_params()['action']) ? $data->get_params()['action'] : '';
	535	+ if ( ! Sync::instance()->get_class_by_action( $action ) ) {
	536	+ $result = [
	537	+ 'success' => false,
	538	+ 'message' => esc_html__('Invalid action', 'media-cloud-sync')
	539	+ ];
	540	+ return new WP_REST_Response( $result, 200 );
	541	+ }
	542	+ $status = Sync::instance()->resume($action);
	543	+
	544	+ $result = [
	545	+ 'success' => true,
	546	+ 'status' => $status,
	547	+ 'message' => esc_html__('Sync resumed successfully', 'media-cloud-sync')
	548	+ ];
	549	+ return new WP_REST_Response( $result, 200 );
	550	+ }
	551	+
	552	+
	553	+ /**
	554	+ * Stop Sync
	555	+ * @since 1.2.13
	556	+ */
	557	+ public function stopSync( $data ) {
	558	+ $action = isset($data->get_params()['action']) ? $data->get_params()['action'] : '';
	559	+ if ( ! Sync::instance()->get_class_by_action( $action ) ) {
	560	+ $result = [
	561	+ 'success' => false,
	562	+ 'message' => esc_html__('Invalid action', 'media-cloud-sync')
	563	+ ];
	564	+ return new WP_REST_Response( $result, 200 );
	565	+ }
	566	+ $status = Sync::instance()->stop($action);
	567	+
	568	+ $result = [
	569	+ 'success' => true,
	570	+ 'status' => $status,
	571	+ 'counts' => [
	572	+ 'all' => Counter::get_count(),
	573	+ 'categorized' => $this->getSortedMediaCounts()
	574	+ ],
	575	+ 'message' => esc_html__('Sync stopped successfully', 'media-cloud-sync')
	576	+ ];
	577	+ return new WP_REST_Response( $result, 200 );
	578	+ }
	579	+
	580	+
	581	+ /**
	582	+ * Tick Sync — process a small batch synchronously, driving Ajax/Mixed sync mode.
	583	+ * @since 1.3.13
	584	+ */
	585	+ public function tickSync( $data ) {
	586	+ $params = $data->get_params();
	587	+ $action = isset($params['action']) ? $params['action'] : '';
	588	+
	589	+ if ( ! Sync::instance()->get_class_by_action( $action ) ) {
	590	+ $result = [
	591	+ 'success' => false,
	592	+ 'message' => esc_html__('Invalid action', 'media-cloud-sync')
	593	+ ];
	594	+ return new WP_REST_Response( $result, 200 );
	595	+ }
	596	+
	597	+ // Defense in depth — the frontend should never call this in free/unlicensed mode, but
	598	+ // the endpoint must not trust that, and must not silently no-op: an unlicensed call
	599	+ // needs a clear rejection so the frontend's tick loop stops instead of retrying forever.
	600	+ if ( ! Utils::is_pro_licensed() ) {
	601	+ $result = [
	602	+ 'success' => false,
	603	+ 'message' => esc_html__('Ajax sync requires an active Pro license', 'media-cloud-sync')
	604	+ ];
	605	+ return new WP_REST_Response( $result, 200 );
	606	+ }
	607	+
	608	+ // Clamp regardless of what the frontend sends — the endpoint itself must enforce the
	609	+ // ceiling, since a batch of slow uploads processed sequentially in one request risks
	610	+ // exceeding reverse-proxy/webserver timeouts that process_iterations() can't see.
	611	+ $batch = isset($params['batch']) ? (int) $params['batch'] : 5;
	612	+ $batch = min(10, max(1, $batch));
	613	+
	614	+ $status = Sync::instance()->tick($action, $batch);
	615	+
	616	+ $result = [
	617	+ 'success' => true,
	618	+ 'status' => $status,
	619	+ 'message' => esc_html__('Sync ticked successfully', 'media-cloud-sync')
	620	+ ];
	621	+
	622	+ // Deliberately omitted on every tick (this endpoint may be hit ~once/second while a
	623	+ // sync runs, and Counter::get_count() is a real query) — but the Dashboard's own
	624	+ // Statistics widget reads a *different* redux slice (common.counts) than the Sync
	625	+ // screen's progress (sync[action]), only refreshed via the slower ~2-3s useSyncPolling
	626	+ // cadence. That's an acceptable few-seconds lag while a sync is actively running, but
	627	+ // right when it finishes it becomes a visibly wrong, stuck-looking number on the
	628	+ // Dashboard until the next poll happens to catch up. Only pay for the query at that
	629	+ // one transition, not on every tick.
	630	+ if ( isset( $status['status'] ) && $status['status'] !== 'running' ) {
	631	+ $result['counts'] = [
	632	+ 'all' => Counter::get_count(),
	633	+ 'categorized' => $this->getSortedMediaCounts()
	634	+ ];
	635	+ }
	636	+ return new WP_REST_Response( $result, 200 );
	637	+ }
	638	+
	639	+
	640	+ /**
	641	+ * Retry a Media Sync Error
	642	+ */
	643	+ public function retrySingle( $data ) {
	644	+ $params = $data->get_params();
	645	+ $id = isset($params['id']) ? $params['id'] : '';
	646	+ $source_type = isset($params['source_type']) ? $params['source_type'] : 'media_library';
	647	+ $type = isset($params['type']) ? $params['type'] : '';
	648	+ $status = false;
	649	+ if(empty($id) || empty($source_type) || empty($type)) {
	650	+ $result = [
	651	+ 'success' => false,
	652	+ 'message' => esc_html__('Invalid parameters', 'media-cloud-sync')
	653	+ ];
	654	+ return new WP_REST_Response( $result, 200 );
	655	+ }
	656	+ // Retry Sync
	657	+ $handler = Sync::instance()->get_class_by_action($type);
	658	+ if(!$handler) {
	659	+ $result = [
	660	+ 'success' => false,
	661	+ 'message' => esc_html__('Invalid action', 'media-cloud-sync')
	662	+ ];
	663	+ return new WP_REST_Response( $result, 200 );
	664	+ }
	665	+ if(!method_exists($handler, 'retry_single')) {
	666	+ $result = [
	667	+ 'success' => false,
	668	+ 'message' => esc_html__('Retry is not available for this sync type.', 'media-cloud-sync')
	669	+ ];
	670	+ return new WP_REST_Response( $result, 200 );
	671	+ }
	672	+ $handler->retry_single($id, $source_type);
	673	+
	674	+ $status = Utils::is_empty(Logger::instance()->get_log($type, $id, $source_type)) ? true : false;
	675	+
	676	+ $result = [
	677	+ 'success' => $status,
	678	+ 'message' => $status ? esc_html__('Media synced successfully', 'media-cloud-sync') : esc_html__('Media sync failed', 'media-cloud-sync')
	679	+ ];
	680	+ return new WP_REST_Response( $result, 200 );
	681	+ }
	682	+
	683	+
	684	+ /**
	685	+ * Get Sorted Media Counts
	686	+ * Sorts media counts by source type
	687	+ * @since 1.2.13
	688	+ */
	689	+ private function getSortedMediaCounts() {
	690	+ $sorted_counts = [];
	691	+ $detailed_counts = Counter::get_count( 'all', false );
	692	+ if(!empty($detailed_counts)) {
	693	+ $source_labels = Integration::$source_labels;
	694	+ if(!empty($source_labels)) {
	695	+ $prefixes = array_keys($source_labels);
	696	+ foreach($detailed_counts as $source_type => $counts) {
	697	+ $found_prefix = false;
	698	+ foreach($prefixes as $prefix) {
	699	+ $found_prefix = strpos($source_type, $prefix) === 0 ? $prefix : false;
	700	+ if($found_prefix !== false) break;
	701	+ }
	702	+
	703	+ if($found_prefix !== false) {
	704	+ $sorted_counts[$found_prefix] = [
	705	+ 'label' => $source_labels[$found_prefix],
	706	+ 'uploaded' => isset( $sorted_counts[ $found_prefix ]['uploaded'] )
	707	+ ? $sorted_counts[ $found_prefix ]['uploaded'] + $counts['uploaded']
	708	+ : $counts['uploaded'],
	709	+ 'total' => isset( $sorted_counts[ $found_prefix ]['total'] )
	710	+ ? $sorted_counts[ $found_prefix ]['total'] + $counts['total']
	711	+ : $counts['total']
	712	+ ];
	713	+ }
	714	+ }
	715	+ }
	716	+ }
	717	+
	718	+ return $sorted_counts;
	719	+ }
	720	+
	721	+
	722	+ /**
287	723	* Helper function to create Adding Route
288	724	* @since 1.0.0
289	725	*/
290	726	private function add_route( $slug, $callBack, $method = 'GET' ) {
		@@ -301,12 +737,12 @@
301	737	/**
302	738	* Permission Callback
303	739	**/
304	740	public function getPermission() {
305		- if ( current_user_can( 'administrator' ) ) {
	741	+ if ( current_user_can( 'manage_options' ) ) {
306	742	return true;
307	743	} else {
308		- return true;
	744	+ return false;
309	745	}
310	746	}
311	747
312	748	/**