# wdesignkit/2.7.0/includes/abilities/widgets/wdesignkit-push-widget.php WDesignKit – AI Templates, Widget Builder & MCP Workflow, version 2.7.0. 295 lines. - Page: https://pluginprobe.com/plugins/wdesignkit/2.7.0/code/includes/abilities/widgets/wdesignkit-push-widget.php - Raw: https://pluginprobe.com/plugins/wdesignkit/2.7.0/raw/includes/abilities/widgets/wdesignkit-push-widget.php - Modified: 2026-08-21T06:20:04+00:00 Line numbers below start at 1. Link to a line or a range by appending a fragment to the page URL, for example `https://pluginprobe.com/plugins/wdesignkit/2.7.0/code/includes/abilities/widgets/wdesignkit-push-widget.php#L10-L20`. ```php __('Push WDesignKit Widget to Cloud', 'wdesignkit'), 'description' => __( 'Uploads a local widget to the WDesignKit cloud marketplace. Reads the widget files from disk, packages them, and posts to the save_widget endpoint. Requires cloud login. After a successful push the cloud returns a marketplace record ID (r_id) which is written back to the local JSON so future version checks work correctly.', 'wdesignkit', ), 'category' => 'wdesignkit', 'input_schema' => [ 'type' => 'object', 'properties' => [ 'builder' => [ 'type' => 'string', 'description' => 'Builder type of the widget.', 'enum' => ['elementor', 'gutenberg', 'gutenberg_core', 'bricks'], ], 'folder' => [ 'type' => 'string', 'description' => 'Widget folder name (from wdesignkit/list-widgets).', ], 'type' => [ 'type' => 'string', 'description' => 'Push type: "new" for first-time push, "update" to push an update to an existing record.', 'enum' => ['new', 'update'], ], ], 'required' => ['builder', 'folder'], 'additionalProperties' => false, ], 'output_schema' => [ 'type' => 'object', 'properties' => [ 'success' => ['type' => 'boolean'], 'message' => ['type' => 'string'], 'r_id' => ['type' => 'integer', 'description' => 'Cloud marketplace record ID on success (0 if the cloud did not return one). Use this — not a value dug out of "response" — with wdesignkit/download-widget or wdesignkit/manage-workspace-widget to reference this widget afterwards.'], 'response' => ['type' => 'object'], ], ], 'execute_callback' => 'wdesignkit_mcp_push_widget', 'permission_callback' => 'wdesignkit_mcp_permission_callback', 'meta' => [ 'public' => true, 'show_in_rest' => true, 'mcp' => ['public' => true], 'annotations' => [ 'instructions' => implode("\n", [ 'Pushes a local widget to the WDesignKit cloud marketplace. Requires login.', 'type defaults to "new". If the widget already has an r_id in its JSON, use "update".', 'After a successful push the local JSON is updated with the returned r_id and cloud image URL.', 'The response\'s top-level "r_id" field is the value to use afterwards — with wdesignkit/download-widget,', 'wdesignkit/manage-workspace-widget, or wdesignkit/get-my-cloud-widgets to find it again later.', ]), 'readonly' => false, 'destructive' => false, 'idempotent' => false, ], ], ]); function wdesignkit_mcp_push_widget(array $input): array { // Timeout guard: cloud push uses a 60s HTTP timeout; set PHP limit beyond that. set_time_limit(90); if (!defined('WDKIT_BUILDER_PATH') || !defined('WDKIT_SERVER_API_URL')) { return ['success' => false, 'message' => 'WDesignKit plugin is not active.']; } $auth = wdesignkit_mcp_template_get_auth(); if (empty($auth['logged_in'])) { return ['success' => false, 'message' => $auth['message'] ?? 'Not logged in.']; } $builder = sanitize_text_field((string) ($input['builder'] ?? '')); $folder = sanitize_file_name((string) ($input['folder'] ?? '')); $type = sanitize_text_field((string) ($input['type'] ?? 'new')); $allowed_builders = ['elementor', 'gutenberg', 'gutenberg_core', 'bricks']; if (!in_array($builder, $allowed_builders, true)) { return ['success' => false, 'message' => 'Invalid builder type.']; } $widget_dir = WDKIT_BUILDER_PATH . '/' . $builder . '/' . $folder; if (!is_dir($widget_dir)) { return ['success' => false, 'message' => "Widget folder not found: {$builder}/{$folder}"]; } $real_widget = realpath($widget_dir); $real_base = realpath(WDKIT_BUILDER_PATH); if (!$real_widget || !$real_base || strpos($real_widget, $real_base . DIRECTORY_SEPARATOR) !== 0) { return ['success' => false, 'message' => 'Invalid widget path.']; } $files = array_diff(@scandir($widget_dir) ?: [], ['.', '..']); $json_path = null; $json_data = null; $img_path = null; $img_ext = null; foreach ($files as $f) { $ext = pathinfo($f, PATHINFO_EXTENSION); if ($ext === 'json' && $json_path === null) { $json_path = $widget_dir . '/' . $f; $raw = @file_get_contents($json_path); $json_data = ($raw !== false) ? json_decode($raw, true) : null; } elseif (in_array($ext, ['jpg', 'jpeg', 'png', 'webp'], true) && $img_path === null) { $img_path = $widget_dir . '/' . $f; $img_ext = $ext; } } if (!is_array($json_data)) { return ['success' => false, 'message' => "Could not read JSON config from {$builder}/{$folder}"]; } $widgetdata = $json_data['widget_data']['widgetdata'] ?? []; $title = sanitize_text_field((string) ($widgetdata['name'] ?? '')); $widget_id = sanitize_text_field((string) ($widgetdata['widget_id'] ?? '')); $r_id = (int) ($widgetdata['r_id'] ?? 0); $w_version = (string) ($widgetdata['widget_version'] ?? '1.0.0'); $version_detail = $widgetdata['version_detail'] ?? []; if (!is_array($version_detail)) { $version_detail = []; } if ($title === '' || $widget_id === '') { return ['success' => false, 'message' => 'Widget JSON is missing name or widget_id.']; } // Pre-flight: version must be a non-empty semver string (x.y.z). // The cloud SetSaveWidget() endpoint rejects empty or non-semver versions with // "Not allowed version number". Catch this locally before wasting a round-trip. if ($w_version === '' || !preg_match('/^\d+\.\d+\.\d+$/', $w_version)) { return [ 'success' => false, 'message' => "Widget '{$title}' has an invalid widget_version '{$w_version}'. Set a valid semver version (e.g. '1.0.0') using wdesignkit/update-widget before pushing.", ]; } // Pre-flight: re-push version check. // When r_id > 0 the widget is already in the marketplace. The cloud rejects // pushes where the incoming w_version matches the already-published version. // The UI enforces a "new version must be higher" rule — replicate it here so // the caller gets a clear message instead of the opaque "Not allowed version number". // We cannot know the exact cloud version without a network call, but we can // detect the case where version_detail has only one entry (never bumped) and // r_id > 0, which is the most common trigger of this error. if ($r_id > 0 && count($version_detail) <= 1 && $w_version === '1.0.0') { return [ 'success' => false, 'message' => "Widget '{$title}' (r_id: {$r_id}) appears to already be published at version '1.0.0'. Bump widget_version (e.g. to '1.0.1') and update version_detail using wdesignkit/update-widget before re-pushing.", 'hint' => 'The cloud rejects re-pushes with the same version number. Increment widget_version in the JSON config first.', ]; } // Thumbnail is OPTIONAL, matching the manual "Push to Cloud" UI. SetSaveWidget // (wdk-server WdkitPluginController) reads w_image with a '' default and only stores // a file inside if( !empty($w_image) ) — it never validates or rejects an imageless // push. Blocking here made this ability stricter than the product it wraps. (bug: 86d3rc7q4) $w_image_body = ''; $w_imgext = ''; if ($img_path && file_exists($img_path)) { $w_image_body = @file_get_contents($img_path); $w_imgext = $img_ext; if (false === $w_image_body) { $w_image_body = ''; $w_imgext = ''; } } $array_data = [ 'token' => $auth['token'], // The cloud save_widget endpoint only understands 'add' — it determines // new vs update by checking whether the widget already exists in the DB // (matched by w_unique). The MCP 'new'/'update' distinction is irrelevant // to the server; always send 'add'. 'type' => 'add', 'title' => $title, 'content' => '', 'builder' => $builder, 'w_data' => wp_json_encode($json_data), 'w_unique' => $widget_id, 'w_image' => $w_image_body, 'w_imgext' => $w_imgext, 'w_version' => $w_version, // Use the widget's actual version_detail array (mirrors the JS frontend which sends // all_files.WcardData.widgetdata.version_detail). Sending serialize([]) was causing // "Not allowed version number" from the cloud because an empty w_updates signals // no version history, which the server treats as an invalid push. 'w_updates' => serialize($version_detail), 'r_id' => $r_id, 'unique_id' => get_option('wdkit_unique_id', ''), ]; $response = wp_remote_post( WDKIT_SERVER_API_URL . 'api/wp/save_widget', [ 'method' => 'POST', 'body' => $array_data, 'timeout' => 60, ] ); if (is_wp_error($response)) { return ['success' => false, 'message' => $response->get_error_message()]; } $status = wp_remote_retrieve_response_code($response); $body = wp_remote_retrieve_body($response); $data = json_decode($body, true); // HTTP 200 with an empty/null body ( [], '', null ) means the cloud silently rejected // the request — the account lacks marketplace publish rights, or a required metadata // field is absent. (A missing thumbnail is NOT a cause: save_widget stores the image // only when one is sent.) Guard covers both json_decode('[]') → [] and json_decode('') → null. if (200 === (int) $status && ($data === null || (is_array($data) && empty($data)))) { return [ 'success' => false, 'message' => 'Invalid API response format: empty array. The cloud returned HTTP 200 but an empty response body. Check that the WDesignKit account has marketplace publish rights and that all required metadata fields (name, widget_id, widget_version) are present.', 'response' => ['raw' => $body], ]; } if (200 !== (int) $status || empty($data['success'])) { $raw_msg = is_array($data) ? ($data['massage'] ?? $data['message'] ?? null) : null; $msg = is_string($raw_msg) ? $raw_msg : (is_null($raw_msg) ? "Cloud returned status {$status}." : json_encode($raw_msg)); // Enrich version-rejection errors with actionable guidance. // The cloud returns "Not allowed version number" when the incoming w_version // matches or is lower than the already-published version for this widget. if (stripos($msg, 'version') !== false && stripos($msg, 'not allowed') !== false) { $msg .= " To fix: use wdesignkit/update-widget to bump widget_version (e.g. '1.0.0' → '1.0.1') and add a new entry to version_detail, then push again."; } return [ 'success' => false, 'message' => $msg, 'response' => wdesignkit_mcp_ensure_object($data, $body), ]; } // Write back r_id and updated image URL to local JSON. // $res_data IS the cloud's "data" object already ({imgurl, id}) — reading a further // ['data'] level off of it (the previous code) always missed, so img_url and the id were // silently '' / 0 on every push regardless of what the cloud sent. 'id' is kit_widgets.id // (added server-side in SetSaveWidget) — the identifier download-widget / get-my-cloud-widgets // / manage-workspace-widget all key on; it is NOT the same thing as the widgetdata.r_id this // ability's own re-publish check reads (that column tracks copy lineage, not "my widget's id"), // but this ability's response has always called it r_id, so keep that external name. $res_data = is_array($data['data'] ?? null) ? $data['data'] : []; $img_url = $res_data['imgurl'] ?? ''; $new_r_id = $res_data['id'] ?? ($res_data['r_id'] ?? 0); $json_dirty = false; if ($new_r_id) { $json_data['widget_data']['widgetdata']['r_id'] = $new_r_id; $json_dirty = true; } if ($img_url) { $json_data['widget_data']['widgetdata']['w_image'] = $img_url; $json_dirty = true; } // The write must run whenever EITHER field changed — previously it only ran inside the // $img_url check, so an imageless push (now valid: the thumbnail pre-flight was removed // in 86d3rc7q4) got a real r_id back from the cloud but never persisted it, leaving the // widget permanently unrecognized as already-published on every later push/download call. if ($json_dirty && $json_path) { @file_put_contents($json_path, wp_json_encode($json_data, JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES)); } return [ 'success' => true, 'message' => "Widget '{$title}' pushed to cloud." . ($new_r_id ? " Marketplace record ID: {$new_r_id}." : ''), // Surfaced as a first-class field — callers previously had to dig it out of the raw // cloud response shape (response.data.data.r_id), which QA correctly flagged as // effectively undiscoverable. 'r_id' => (int) $new_r_id, 'response' => wdesignkit_mcp_ensure_object($data, $body), ]; } ```