← All changes | includes/api.php +529 -102 1.2.5 → 1.4.2 View file →

		@@ -30,21 +30,39 @@
30	30	*/
31	31
32	32	public function register_routes() {
33	33	$this->add_route( '/verifyCredentials', 'verifyCredentials', 'POST' );
34		- $this->add_route( '/permissions/checkExist', 'verifyBucketExist', 'POST' );
35		- $this->add_route( '/permissions/addNewBucket', 'createBucket', 'POST' );
36		- $this->add_route( '/permissions/write', 'verifyObjectWrite', 'POST' );
	34	+ $this->add_route( '/bucket/checkExist', 'verifyBucketExist', 'POST' );
	35	+ $this->add_route( '/bucket/addNew', 'createBucket', 'POST' );
	36	+ $this->add_route( '/permissions/status', 'verifyStatus', 'POST' );
	37	+ $this->add_route( '/permissions/write', 'verifyWrite', 'POST' );
37	38	$this->add_route( '/permissions/delete', 'verifyObjectDelete', 'POST' );
38		- $this->add_route( '/permissions/read', 'verifyObjectRead', 'POST' );
	39	+ $this->add_route( '/permissions/read', 'verifyRead', 'POST' );
39	40
40	41	$this->add_route( '/security/get_security', 'getBucketSecuritySettings', 'POST' );
41	42	$this->add_route( '/security/block_public_access', 'changePublicAccess', 'POST' );
42	43	$this->add_route( '/security/object_ownership_enforce', 'changeObjectOwnership', 'POST' );
43	44
	45	+ $this->add_route( '/getSettings', 'getSettings' );
44	46	$this->add_route( '/saveConfig', 'saveConfig', 'POST' );
45		- $this->add_route( '/getSettings', 'getSettings' );
46		- $this->add_route( '/uploadCredentials', 'uploadCredentials', 'POST' );
	47	+ $this->add_route( '/refreshCounts', 'refreshCounts', 'POST' );
	48	+ $this->add_route( '/getErrorLogs', 'getErrorLogs', 'POST' );
	49	+ $this->add_route( '/clearErrorLogs', 'clearErrorLogs', 'POST' );
	50	+
	51	+ // Upgrade Database Routes
	52	+ $this->add_route( '/upgrade/status', 'getUpgradeStatus' );
	53	+ $this->add_route( '/upgrade/start', 'startUpgrade', 'POST' );
	54	+
	55	+ // Sync Routes
	56	+ $this->add_route( '/sync/status', 'getStatus' );
	57	+ $this->add_route( '/sync/start', 'startSync', 'POST' );
	58	+ $this->add_route( '/sync/pause', 'pauseSync', 'POST' );
	59	+ $this->add_route( '/sync/resume', 'resumeSync', 'POST' );
	60	+ $this->add_route( '/sync/stop', 'stopSync', 'POST' );
	61	+ $this->add_route( '/sync/tick', 'tickSync', 'POST' );
	62	+ $this->add_route( '/sync/setMethod', 'setSyncMethod', 'POST' );
	63	+
	64	+ $this->add_route( '/sync/retrySingle', 'retrySingle', 'POST' );
47	65	}
48	66
49	67	/**
50	68	* Verify the Service Credentials
		@@ -66,17 +84,31 @@
66	84	public function createBucket( $data ) {
67	85	return new WP_REST_Response( Service::instance()->createBucket($data->get_params()), 200 );
68	86	}
69	87
70		-
71	88	/**
72		- * Verify the Bucket Write Permission
	89	+ * Saved connection status checks (storage, CDN).
	90	+ * @since 1.3.11
73	91	*/
74		- public function verifyObjectWrite( $data ) {
75		- return new WP_REST_Response( Service::instance()->verifyObjectWritePermission($data->get_params()), 200 );
	92	+ public function verifyStatus( $data ) {
	93	+ $params = $data->get_params();
	94	+ $check = isset( $params['check'] ) ? sanitize_text_field( $params['check'] ) : 'storage';
	95	+ return new WP_REST_Response( Service::instance()->verifyStatus( $check ), 200 );
76	96	}
77	97
78	98	/**
	99	+ * Verify bucket write permission (configure wizard) or saved storage status (legacy route).
	100	+ * @since 1.3.11
	101	+ */
	102	+ public function verifyWrite( $data ) {
	103	+ $params = $data->get_params();
	104	+ if ( !empty( $params['service'] ) ) {
	105	+ return new WP_REST_Response( Service::instance()->verifyObjectWritePermission( $params ), 200 );
	106	+ }
	107	+ return new WP_REST_Response( Service::instance()->verifyStatus( 'storage' ), 200 );
	108	+ }
	109	+
	110	+ /**
79	111	* Verify the Bucket delete Permission
80	112	*/
81	113	public function verifyObjectDelete( $data ) {
82	114	return new WP_REST_Response( Service::instance()->verifyObjectDeletePermission($data->get_params()), 200 );
		@@ -82,12 +114,13 @@
82	114	return new WP_REST_Response( Service::instance()->verifyObjectDeletePermission($data->get_params()), 200 );
83	115	}
84	116
85	117	/**
86		- * Verify the Bucket Read Permission
	118	+ * Verify delivery read access (legacy route).
	119	+ * @since 1.3.11
87	120	*/
88		- public function verifyObjectRead( $data ) {
89		- return new WP_REST_Response( Service::instance()->verifyObjectReadPermission($data->get_params()), 200 );
	121	+ public function verifyRead( $data ) {
	122	+ return new WP_REST_Response( Service::instance()->verifyStatus( 'cdn' ), 200 );
90	123	}
91	124
92	125	/**
93	126	* Get the Security Settings
		@@ -115,16 +148,30 @@
115	148	/**
116	149	* Get Settings
117	150	*/
118	151	public function getSettings( ) {
	152	+ // Fetch and update media counts for make sure they are up to date
	153	+ Counter::fetch_and_update();
	154	+
119	155	$data = [
120		- 'credentials' => Utils::get_credentials(),
121		- 'common' => [
122		- 'version' => WPMCS_VERSION,
123		- 'uploaded' => Counter::get( 'uploaded' ),
	156	+ 'credentials' => Utils::get_credentials( '', [], true ),
	157	+ 'serviceEnabled' => Utils::is_service_enabled(),
	158	+ 'serviceError' => Utils::get_service_configuration_error(),
	159	+ 'common' => [
	160	+ 'version' => defined('WPMCS_PRO_VERSION') ? WPMCS_PRO_VERSION : WPMCS_VERSION,
	161	+ 'counts' => [
	162	+ 'all' => Counter::get_count(),
	163	+ 'categorized' => $this->getSortedMediaCounts()
	164	+ ],
124	165	'status' => Utils::get_status('', false),
125	166	'settings' => Utils::get_settings(),
126		- ]
	167	+ ],
	168	+ 'sync' => Sync::instance()->get_status(),
	169	+ 'license' => defined('WPMCS_PRO_VERSION') ? Utils::get_safe_license_data() : [],
	170	+ 'file_manager' => defined('WPMCS_PRO_VERSION') ? [
	171	+ 'delete_enabled' => (bool) Utils::get_option('delete_enabled', false, Schema::getConstant('FILE_MANAGER_SETTINGS_KEY')),
	172	+ 'root_folder' => Utils::get_option('root_folder', '', Schema::getConstant('FILE_MANAGER_SETTINGS_KEY')),
	173	+ ] : [],
127	174	];
128	175
129	176	return new WP_REST_Response( $data, 200 );
130	177	}
		@@ -142,10 +189,12 @@
142	189	$action = isset($saveData['action']) ? $saveData['action'] : false;
143	190	if($action === false) return new WP_REST_Response( $result, 200 );
144	191
145	192	$service = isset($saveData['service']) ? $saveData['service'] : false;
	193	+ $serviceLabel = isset($saveData['serviceLabel']) ? $saveData['serviceLabel'] : '';
146	194	$cdn = isset($saveData['cdn']) ? $saveData['cdn'] : [];
147	195	$config = isset($saveData['config']) ? $saveData['config'] : false;
	196	+ $configSource = isset($saveData['configSource']) ? $saveData['configSource'] : 'database';
148	197	$bucketConfig = isset($saveData['bucketConfig']) ? $saveData['bucketConfig'] : [];
149	198	$security = isset($saveData['security']) ? $saveData['security'] : [];
150	199	$settings = isset($saveData['settings']) ? $saveData['settings'] : [];
151	200
		@@ -152,27 +201,51 @@
152	201	$serviceOk = true;
153	202	$settingsOk = true;
154	203
155	204	if( $action === 'cdn' ){
	205	+ // Switching delivery provider resets the previously selected one's own fields
	206	+ // back to their defaults (see ChooseCDN.jsx) — that can include private_path/
	207	+ // enable_private_media, since those live in a delivery entry's own field list,
	208	+ // so this write needs the same guard the plain settings save uses below.
	209	+ $validation = apply_filters( 'wpmcs_validate_settings_save', ['ok' => true, 'message' => ''], $settings, $action );
	210	+ if ( empty( $validation['ok'] ) ) {
	211	+ return new WP_REST_Response( [
	212	+ 'success' => false,
	213	+ 'message' => !empty($validation['message']) ? $validation['message'] : esc_html__('Settings could not be saved.', 'media-cloud-sync')
	214	+ ], 200 );
	215	+ }
	216	+
156	217	$existing = Utils::get_credentials();
157	218	$existing['cdn'] = $cdn;
158		-
	219	+
159	220	$updated = Utils::update_option('credentials', $existing, Schema::getConstant('GLOBAL_SETTINGS_KEY'));
160	221	$updatedSettings = Utils::update_option('settings', $settings, Schema::getConstant('GLOBAL_SETTINGS_KEY'));
161	222
162	223	if(!$updated) $serviceOk = false;
	224	+ if(!$updatedSettings) $settingsOk = false;
	225	+
	226	+ // Only once both writes actually persisted — a failed credentials write can
	227	+ // leave the object cache holding an unpersisted bucket identity (see
	228	+ // Cache::set_object_cache()), so gating on $settingsOk alone isn't enough.
	229	+ if ($serviceOk && $settingsOk) {
	230	+ do_action('wpmcs_after_settings_save', $settings, $action);
	231	+ }
163	232	}
164	233
165	234
166	235	if($action === 'all' || $action === 'service'){
167		- if ( $service === false || empty($config) || empty($bucketConfig)) return new WP_REST_Response( $result, 200 );
	236	+ // In 'config' source mode the credentials live in the WPMCS_CONFIG constant,
	237	+ // so an empty config payload is expected and must not block the save.
	238	+ if ( $service === false || ($configSource !== 'config' && empty($config)) || empty($bucketConfig)) return new WP_REST_Response( $result, 200 );
168	239
169	240	$updated = Utils::update_option(
170	241	'credentials',
171	242	[
172	243	'service' => $service,
	244	+ 'serviceLabel' => $serviceLabel,
173	245	'cdn' => $cdn,
174		- 'config' => $config,
	246	+ 'config' => $configSource === 'config' ? [] : $config,
	247	+ 'configSource' => $configSource,
175	248	'bucketConfig' => $bucketConfig,
176	249	'security' => $security
177	250	],
178	251	Schema::getConstant('GLOBAL_SETTINGS_KEY')
		@@ -177,22 +250,63 @@
177	250	],
178	251	Schema::getConstant('GLOBAL_SETTINGS_KEY')
179	252	);
180	253	if(!$updated) $serviceOk = false;
	254	+
	255	+ if($serviceOk) {
	256	+ Utils::set_status('cdnRead', [
	257	+ 'status' => false,
	258	+ 'message' => '',
	259	+ 'lastChecked' => null
	260	+ ]);
	261	+ Utils::set_status('storageCredentials', [
	262	+ 'status' => false,
	263	+ 'message' => '',
	264	+ 'lastChecked' => null
	265	+ ]);
	266	+ }
181	267	}
182	268
183	269	if(($action === 'all' || $action === 'settings')) {
	270	+ // Extension point for a pro-only settings-save guard (e.g. private media
	271	+ // refusing a private_path/base_path change while items are still private
	272	+ // under the currently-applied path) — free has no opinion here, default
	273	+ // is "allow". ['ok' => bool, 'message' => string].
	274	+ $validation = apply_filters( 'wpmcs_validate_settings_save', ['ok' => true, 'message' => ''], $settings, $action );
	275	+ if ( empty( $validation['ok'] ) ) {
	276	+ return new WP_REST_Response( [
	277	+ 'success' => false,
	278	+ 'message' => !empty($validation['message']) ? $validation['message'] : esc_html__('Settings could not be saved.', 'media-cloud-sync')
	279	+ ], 200 );
	280	+ }
	281	+
184	282	$updatedSettings = Utils::update_option('settings', $settings, Schema::getConstant('GLOBAL_SETTINGS_KEY'));
185	283	if(!$updatedSettings) $settingsOk = false;
	284	+
	285	+ // Only once both writes actually persisted — a failed credentials write can
	286	+ // leave the object cache holding an unpersisted bucket identity (see
	287	+ // Cache::set_object_cache()), so gating on $settingsOk alone isn't enough.
	288	+ if ($serviceOk && $settingsOk) {
	289	+ do_action('wpmcs_after_settings_save', $settings, $action);
	290	+ }
186	291	}
187	292
	293	+ // Clear plugin caches and refresh counts after any configuration save.
	294	+ if(in_array($action, ['all', 'service', 'settings', 'cdn'], true)) {
	295	+ if($action === 'all' || $action === 'service' || $action === 'settings') {
	296	+ Integration::instance()->clear_all_meta(false);
	297	+ }
188	298
	299	+ if($action === 'all' || $action === 'settings') {
	300	+ Utils::clear_all_content_meta(false, false);
	301	+ }
	302	+
	303	+ Cache::flush_object_cache();
	304	+ Counter::instance()->fetch_and_update();
	305	+ }
	306	+
	307	+
189	308	if($serviceOk && $settingsOk) {
190		- Utils::set_status('cdnRead', [
191		- 'status' => false,
192		- 'message' => '',
193		- 'lastChecked' => null
194		- ]);
195	309	$result = [
196	310	'success' => true,
197	311	'message' => esc_html__('Configuration saved successfully', 'media-cloud-sync')
198	312	];
		@@ -202,98 +316,411 @@
202	316	}
203	317
204	318
205	319	/**
206		- * Upload Credentials
207		- * @since 1.0.0
208		- */
209		- public function uploadCredentials($request) {
210		- if (isset($_FILES['file']) && !empty($_FILES['file'])) {
211		- $config_file = $_FILES['file'];
212		- if (isset($config_file['type']) && $config_file['type'] == 'application/json') {
213		- if (file_exists($config_file["tmp_name"])) {
	320	+ * Refresh the Media Counts
	321	+ *
	322	+ */
	323	+ public function refreshCounts( ) {
	324	+ Cache::flush_object_cache();
	325	+ Integration::instance()->clear_all_meta();
	326	+ Counter::instance()->fetch_and_update();
214	327
215		- add_filter( 'upload_dir', [ $this, 'change_file_upload_dir' ]);
216		- add_filter( 'mime_types', [ $this, 'add_custom_mime_type_json' ]);
	328	+ $result = [
	329	+ 'success' => true,
	330	+ 'counts' => [
	331	+ 'all' => Counter::get_count(),
	332	+ 'categorized' => $this->getSortedMediaCounts()
	333	+ ],
	334	+ 'message' => esc_html__('Media counts refreshed successfully', 'media-cloud-sync')
	335	+ ];
	336	+ return new WP_REST_Response( $result, 200 );
	337	+ }
217	338
218		- if ( ! function_exists( 'wp_handle_upload' ) ) {
219		- require_once( ABSPATH . 'wp-admin/includes/file.php' );
220		- }
221	339
222		- $upload_overrides = [
223		- 'test_form' => false,
224		- 'test_type' => true,
225		- 'mimes' => [ 'json'=>'application/json' ]
226		- ];
	340	+ /**
	341	+ * Start Upgrade
	342	+ * @since 1.3.6
	343	+ */
	344	+ public function startUpgrade( $request ) {
	345	+ $result = Upgrade::instance()->start_upgrade();
	346	+ return new WP_REST_Response( $result, 200 );
	347	+ }
227	348
228		- $movefile = wp_handle_upload( $config_file, $upload_overrides );
229	349
230		- remove_filter( 'upload_dir', [ $this, 'change_file_upload_dir' ]);
231		- remove_filter( 'mime_types', [ $this, 'add_custom_mime_type_json' ]);
	350	+ /**
	351	+ * Get Upgrade Status
	352	+ * @since 1.3.6
	353	+ */ public function getUpgradeStatus( $request ) {
	354	+ $result = Upgrade::instance()->get_progress();
	355	+ return new WP_REST_Response( $result, 200 );
	356	+ }
232	357
233		- if ($movefile && !isset($movefile['error'])) {
234		- $result = [
235		- 'success' => true,
236		- 'file_path' => $movefile['file'],
237		- 'file_name' => basename($movefile['file']),
238		- ];
239		- return new WP_REST_Response($result, 200);
240		- } else {
241		- $result = [
242		- 'success' => false,
243		- 'message' => $movefile['error'],
244		- ];
245		- return new WP_REST_Response($result, 200);
246		- }
247		- }
248		- } else {
249		- $result = [
250		- 'success' => false,
251		- 'message' => esc_html__('Invalid file format', 'media-cloud-sync'),
252		- ];
253		- return new WP_REST_Response($result, 200);
254		- }
255		- } else {
256		- $result = [
257		- 'success' => false,
258		- 'message' => esc_html__('Insufficient data. Please try again', 'media-cloud-sync'),
	358	+
	359	+ /**
	360	+ * Get Media Error Logs
	361	+ * @since 1.2.13
	362	+ */
	363	+ public function getErrorLogs( $request ) {
	364	+ $params = $request->get_params();
	365	+ $type = isset($params['type']) ? $params['type'] : 'all';
	366	+ $page = isset($params['page']) ? $params['page'] : null;
	367	+ $per_page = isset($params['per_page']) ? $params['per_page'] : null;
	368	+
	369	+ if($type !== 'all') {
	370	+ $logs = Logger::instance()->get_logs_by_type($type, $page, $per_page);
	371	+ } else {
	372	+ $logs = Logger::instance()->get_all_logs($page, $per_page);
	373	+ }
	374	+
	375	+ $result = [
	376	+ 'success' => true,
	377	+ 'logs' => $logs,
	378	+ 'message' => esc_html__('Error logs fetched successfully', 'media-cloud-sync')
	379	+ ];
	380	+ return new WP_REST_Response( $result, 200 );
	381	+ }
	382	+
	383	+
	384	+ /**
	385	+ * Clear all error logs for a sync type (e.g. stale entries from earlier failed attempts).
	386	+ * @since 1.3.13
	387	+ */
	388	+ public function clearErrorLogs( $request ) {
	389	+ $type = isset($request->get_params()['type']) ? $request->get_params()['type'] : '';
	390	+
	391	+ if (empty($type) || !Sync::instance()->get_class_by_action($type)) {
	392	+ return new WP_REST_Response( [
	393	+ 'success' => false,
	394	+ 'message' => esc_html__('Invalid action', 'media-cloud-sync')
	395	+ ], 200 );
	396	+ }
	397	+
	398	+ Logger::instance()->remove_logs_by_type($type);
	399	+
	400	+ $result = [
	401	+ 'success' => true,
	402	+ 'message' => esc_html__('Error logs cleared', 'media-cloud-sync')
	403	+ ];
	404	+ return new WP_REST_Response( $result, 200 );
	405	+ }
	406	+
	407	+
	408	+ /**
	409	+ * Get Status
	410	+ * @since 1.2.13
	411	+ */
	412	+ public function getStatus( $request ) {
	413	+ // Fetch and update media counts for make sure they are up to date
	414	+ $action = isset($request->get_params()['action']) ? $request->get_params()['action'] : 'all';
	415	+ $status = Sync::instance()->get_status();
	416	+
	417	+ if($action !== 'all') {
	418	+ $status = isset($status[$action]) ? $status[$action] : [];
	419	+ }
	420	+
	421	+ $result = [
	422	+ 'success' => true,
	423	+ 'status' => $status,
	424	+ 'counts' => [
	425	+ 'all' => Counter::get_count(),
	426	+ 'categorized' => $this->getSortedMediaCounts()
	427	+ ],
	428	+ 'message' => esc_html__('Status fetched successfully', 'media-cloud-sync')
	429	+ ];
	430	+
	431	+ return new WP_REST_Response( $result, 200 );
	432	+ }
	433	+
	434	+
	435	+ /**
	436	+ * Start Sync
	437	+ * @since 1.2.13
	438	+ */
	439	+ public function startSync( $data ) {
	440	+ $action = isset($data->get_params()['action']) ? $data->get_params()['action'] : '';
	441	+ if ( ! Sync::instance()->get_class_by_action( $action ) ) {
	442	+ $result = [
	443	+ 'success' => false,
	444	+ 'message' => esc_html__('Invalid action', 'media-cloud-sync')
259	445	];
260		- return new WP_REST_Response($result, 200);
261		- }
262		- }
	446	+ return new WP_REST_Response( $result, 200 );
	447	+ }
	448	+ if(!Utils::is_service_enabled()) {
	449	+ $result = [
	450	+ 'success' => false,
	451	+ 'message' => Utils::get_service_configuration_error() ?: esc_html__('Storage is not configured correctly.', 'media-cloud-sync')
	452	+ ];
	453	+ return new WP_REST_Response( $result, 200 );
	454	+ }
	455	+ $options = isset($data->get_params()['options']) && is_array($data->get_params()['options']) ? $data->get_params()['options'] : [];
	456	+ $status = Sync::instance()->start($action, $options);
263	457
	458	+ // Sync::start() passes a job's own precondition-failure array straight through
	459	+ // (e.g. no destination configured) instead of masking it as a started status.
	460	+ if (is_array($status) && isset($status['success']) && $status['success'] === false) {
	461	+ return new WP_REST_Response( $status, 200 );
	462	+ }
	463	+
	464	+ $result = [
	465	+ 'success' => true,
	466	+ 'status' => $status,
	467	+ 'message' => esc_html__('Sync started successfully', 'media-cloud-sync')
	468	+ ];
	469	+ return new WP_REST_Response( $result, 200 );
	470	+ }
	471	+
	472	+
264	473	/**
265		- * Change File Upload Directory
266		- * @since 1.0.0
267		- */
268		- public function change_file_upload_dir($upload) {
269		- $wpmcs_path = '/' . Schema::getConstant('UPLOADS');
270		- $path = $upload['basedir'] . $wpmcs_path;
271		- $url = $upload['baseurl'] . $wpmcs_path;
	474	+ * Pause Sync
	475	+ * @since 1.2.13
	476	+ */
	477	+ public function pauseSync( $data ) {
	478	+ $action = isset($data->get_params()['action']) ? $data->get_params()['action'] : '';
	479	+ if ( ! Sync::instance()->get_class_by_action( $action ) ) {
	480	+ $result = [
	481	+ 'success' => false,
	482	+ 'message' => esc_html__('Invalid action', 'media-cloud-sync')
	483	+ ];
	484	+ return new WP_REST_Response( $result, 200 );
	485	+ }
	486	+ $status = Sync::instance()->pause($action);
272	487
273		- if (!is_dir($path)) {
274		- do_action( $this->token.'_create_plugin_dir' );
275		- }
	488	+ $result = [
	489	+ 'success' => true,
	490	+ 'status' => $status,
	491	+ 'message' => esc_html__('Sync paused successfully', 'media-cloud-sync')
	492	+ ];
	493	+ return new WP_REST_Response( $result, 200 );
	494	+ }
276	495
277		- $upload['subdir'] = $wpmcs_path;
278		- $upload['path'] = $upload['basedir'] . $wpmcs_path;
279		- $upload['url'] = $upload['baseurl'] . $wpmcs_path;
280	496
281		- return $upload;
282		- }
	497	+ /**
	498	+ * Save the sync method ('ajax'|'cron'|'mixed') preference for a sync type.
	499	+ * @since 1.3.13
	500	+ */
	501	+ public function setSyncMethod( $data ) {
	502	+ $params = $data->get_params();
	503	+ $action = isset($params['action']) ? sanitize_text_field($params['action']) : '';
	504	+ $method = isset($params['sync_method']) ? sanitize_text_field($params['sync_method']) : '';
283	505
284		- /**
285		- * Add Custom Mime Type JSON
286		- * @since 1.0.0
287		- */
288		- public function add_custom_mime_type_json($mimes) {
289		- $mimes['json'] = 'application/json';
290		- // Return the array back to the function with our added mime type.
291		- return $mimes;
292		- }
	506	+ if ( ! Sync::instance()->get_class_by_action( $action ) ) {
	507	+ return new WP_REST_Response( [
	508	+ 'success' => false,
	509	+ 'message' => esc_html__('Invalid action', 'media-cloud-sync')
	510	+ ], 200 );
	511	+ }
293	512
	513	+ $saved = Sync::instance()->set_sync_method($action, $method);
	514	+ if(!$saved) {
	515	+ return new WP_REST_Response( [
	516	+ 'success' => false,
	517	+ 'message' => esc_html__('Invalid sync method', 'media-cloud-sync')
	518	+ ], 200 );
	519	+ }
294	520
	521	+ $result = [
	522	+ 'success' => true,
	523	+ 'sync_method' => $method,
	524	+ 'status' => Sync::instance()->get_class_by_action($action)->get_status(),
	525	+ ];
	526	+ return new WP_REST_Response( $result, 200 );
	527	+ }
	528	+
295	529	/**
	530	+ * Resume Sync
	531	+ * @since 1.2.13
	532	+ */
	533	+ public function resumeSync( $data ) {
	534	+ $action = isset($data->get_params()['action']) ? $data->get_params()['action'] : '';
	535	+ if ( ! Sync::instance()->get_class_by_action( $action ) ) {
	536	+ $result = [
	537	+ 'success' => false,
	538	+ 'message' => esc_html__('Invalid action', 'media-cloud-sync')
	539	+ ];
	540	+ return new WP_REST_Response( $result, 200 );
	541	+ }
	542	+ $status = Sync::instance()->resume($action);
	543	+
	544	+ $result = [
	545	+ 'success' => true,
	546	+ 'status' => $status,
	547	+ 'message' => esc_html__('Sync resumed successfully', 'media-cloud-sync')
	548	+ ];
	549	+ return new WP_REST_Response( $result, 200 );
	550	+ }
	551	+
	552	+
	553	+ /**
	554	+ * Stop Sync
	555	+ * @since 1.2.13
	556	+ */
	557	+ public function stopSync( $data ) {
	558	+ $action = isset($data->get_params()['action']) ? $data->get_params()['action'] : '';
	559	+ if ( ! Sync::instance()->get_class_by_action( $action ) ) {
	560	+ $result = [
	561	+ 'success' => false,
	562	+ 'message' => esc_html__('Invalid action', 'media-cloud-sync')
	563	+ ];
	564	+ return new WP_REST_Response( $result, 200 );
	565	+ }
	566	+ $status = Sync::instance()->stop($action);
	567	+
	568	+ $result = [
	569	+ 'success' => true,
	570	+ 'status' => $status,
	571	+ 'counts' => [
	572	+ 'all' => Counter::get_count(),
	573	+ 'categorized' => $this->getSortedMediaCounts()
	574	+ ],
	575	+ 'message' => esc_html__('Sync stopped successfully', 'media-cloud-sync')
	576	+ ];
	577	+ return new WP_REST_Response( $result, 200 );
	578	+ }
	579	+
	580	+
	581	+ /**
	582	+ * Tick Sync — process a small batch synchronously, driving Ajax/Mixed sync mode.
	583	+ * @since 1.3.13
	584	+ */
	585	+ public function tickSync( $data ) {
	586	+ $params = $data->get_params();
	587	+ $action = isset($params['action']) ? $params['action'] : '';
	588	+
	589	+ if ( ! Sync::instance()->get_class_by_action( $action ) ) {
	590	+ $result = [
	591	+ 'success' => false,
	592	+ 'message' => esc_html__('Invalid action', 'media-cloud-sync')
	593	+ ];
	594	+ return new WP_REST_Response( $result, 200 );
	595	+ }
	596	+
	597	+ // Defense in depth — the frontend should never call this in free/unlicensed mode, but
	598	+ // the endpoint must not trust that, and must not silently no-op: an unlicensed call
	599	+ // needs a clear rejection so the frontend's tick loop stops instead of retrying forever.
	600	+ if ( ! Utils::is_pro_licensed() ) {
	601	+ $result = [
	602	+ 'success' => false,
	603	+ 'message' => esc_html__('Ajax sync requires an active Pro license', 'media-cloud-sync')
	604	+ ];
	605	+ return new WP_REST_Response( $result, 200 );
	606	+ }
	607	+
	608	+ // Clamp regardless of what the frontend sends — the endpoint itself must enforce the
	609	+ // ceiling, since a batch of slow uploads processed sequentially in one request risks
	610	+ // exceeding reverse-proxy/webserver timeouts that process_iterations() can't see.
	611	+ $batch = isset($params['batch']) ? (int) $params['batch'] : 5;
	612	+ $batch = min(10, max(1, $batch));
	613	+
	614	+ $status = Sync::instance()->tick($action, $batch);
	615	+
	616	+ $result = [
	617	+ 'success' => true,
	618	+ 'status' => $status,
	619	+ 'message' => esc_html__('Sync ticked successfully', 'media-cloud-sync')
	620	+ ];
	621	+
	622	+ // Deliberately omitted on every tick (this endpoint may be hit ~once/second while a
	623	+ // sync runs, and Counter::get_count() is a real query) — but the Dashboard's own
	624	+ // Statistics widget reads a *different* redux slice (common.counts) than the Sync
	625	+ // screen's progress (sync[action]), only refreshed via the slower ~2-3s useSyncPolling
	626	+ // cadence. That's an acceptable few-seconds lag while a sync is actively running, but
	627	+ // right when it finishes it becomes a visibly wrong, stuck-looking number on the
	628	+ // Dashboard until the next poll happens to catch up. Only pay for the query at that
	629	+ // one transition, not on every tick.
	630	+ if ( isset( $status['status'] ) && $status['status'] !== 'running' ) {
	631	+ $result['counts'] = [
	632	+ 'all' => Counter::get_count(),
	633	+ 'categorized' => $this->getSortedMediaCounts()
	634	+ ];
	635	+ }
	636	+ return new WP_REST_Response( $result, 200 );
	637	+ }
	638	+
	639	+
	640	+ /**
	641	+ * Retry a Media Sync Error
	642	+ */
	643	+ public function retrySingle( $data ) {
	644	+ $params = $data->get_params();
	645	+ $id = isset($params['id']) ? $params['id'] : '';
	646	+ $source_type = isset($params['source_type']) ? $params['source_type'] : 'media_library';
	647	+ $type = isset($params['type']) ? $params['type'] : '';
	648	+ $status = false;
	649	+ if(empty($id) || empty($source_type) || empty($type)) {
	650	+ $result = [
	651	+ 'success' => false,
	652	+ 'message' => esc_html__('Invalid parameters', 'media-cloud-sync')
	653	+ ];
	654	+ return new WP_REST_Response( $result, 200 );
	655	+ }
	656	+ // Retry Sync
	657	+ $handler = Sync::instance()->get_class_by_action($type);
	658	+ if(!$handler) {
	659	+ $result = [
	660	+ 'success' => false,
	661	+ 'message' => esc_html__('Invalid action', 'media-cloud-sync')
	662	+ ];
	663	+ return new WP_REST_Response( $result, 200 );
	664	+ }
	665	+ if(!method_exists($handler, 'retry_single')) {
	666	+ $result = [
	667	+ 'success' => false,
	668	+ 'message' => esc_html__('Retry is not available for this sync type.', 'media-cloud-sync')
	669	+ ];
	670	+ return new WP_REST_Response( $result, 200 );
	671	+ }
	672	+ $handler->retry_single($id, $source_type);
	673	+
	674	+ $status = Utils::is_empty(Logger::instance()->get_log($type, $id, $source_type)) ? true : false;
	675	+
	676	+ $result = [
	677	+ 'success' => $status,
	678	+ 'message' => $status ? esc_html__('Media synced successfully', 'media-cloud-sync') : esc_html__('Media sync failed', 'media-cloud-sync')
	679	+ ];
	680	+ return new WP_REST_Response( $result, 200 );
	681	+ }
	682	+
	683	+
	684	+ /**
	685	+ * Get Sorted Media Counts
	686	+ * Sorts media counts by source type
	687	+ * @since 1.2.13
	688	+ */
	689	+ private function getSortedMediaCounts() {
	690	+ $sorted_counts = [];
	691	+ $detailed_counts = Counter::get_count( 'all', false );
	692	+ if(!empty($detailed_counts)) {
	693	+ $source_labels = Integration::$source_labels;
	694	+ if(!empty($source_labels)) {
	695	+ $prefixes = array_keys($source_labels);
	696	+ foreach($detailed_counts as $source_type => $counts) {
	697	+ $found_prefix = false;
	698	+ foreach($prefixes as $prefix) {
	699	+ $found_prefix = strpos($source_type, $prefix) === 0 ? $prefix : false;
	700	+ if($found_prefix !== false) break;
	701	+ }
	702	+
	703	+ if($found_prefix !== false) {
	704	+ $sorted_counts[$found_prefix] = [
	705	+ 'label' => $source_labels[$found_prefix],
	706	+ 'uploaded' => isset( $sorted_counts[ $found_prefix ]['uploaded'] )
	707	+ ? $sorted_counts[ $found_prefix ]['uploaded'] + $counts['uploaded']
	708	+ : $counts['uploaded'],
	709	+ 'total' => isset( $sorted_counts[ $found_prefix ]['total'] )
	710	+ ? $sorted_counts[ $found_prefix ]['total'] + $counts['total']
	711	+ : $counts['total']
	712	+ ];
	713	+ }
	714	+ }
	715	+ }
	716	+ }
	717	+
	718	+ return $sorted_counts;
	719	+ }
	720	+
	721	+
	722	+ /**
296	723	* Helper function to create Adding Route
297	724	* @since 1.0.0
298	725	*/
299	726	private function add_route( $slug, $callBack, $method = 'GET' ) {
		@@ -310,12 +737,12 @@
310	737	/**
311	738	* Permission Callback
312	739	**/
313	740	public function getPermission() {
314		- if ( current_user_can( 'administrator' ) ) {
	741	+ if ( current_user_can( 'manage_options' ) ) {
315	742	return true;
316	743	} else {
317		- return true;
	744	+ return false;
318	745	}
319	746	}
320	747
321	748	/**