Changeset 3699356

Timestamp:

09/16/2026 11:50:17 PM (5 weeks ago)

Author:

bilalhameed001

Message:

Release 2.1.4: Updraft list_archives with signed download URLs for Hosting migrate pull.

Location:

my-agent-crew-connector/trunk

Files:

• includes/capability-manifests/updraftplus.php (modified) (3 diffs)
• includes/class-cbregen-capability-runtime.php (modified) (1 diff)
• includes/class-cbregen-updraftplus-adapter.php (modified) (3 diffs)
• my-agent-crew-connector.php (modified) (2 diffs)
• readme.txt (modified) (2 diffs)

my-agent-crew-connector/trunk/includes/capability-manifests/updraftplus.php

@@ -3 +3 @@
         'schema'      => 'cbregen-capability-manifest@1',
         'manifest_id' => 'updraftplus_core',
-        'version'     => '1.1.0',
+        'version'     => '1.2.0',
         'slug'        => 'updraftplus',
         'source'      => array(
@@ -11 +11 @@
                 'key'               => 'adapter:updraftplus',
                 'label'             => 'UpdraftPlus (PHP adapter)',
-                'description'       => 'Backup Now, list backups, restore, and status via UpdraftPlus PHP (shared hosting; no WP-CLI required).',
+                'description'       => 'Backup Now, list backups, list archives (signed download URLs for migrate), restore, and status via UpdraftPlus PHP.',
                 'legacy_enable_keys'=> array( 'cli:updraftplus' ),
         ),
@@ -75 +75 @@
                 ),
                 array(
+                        'id'          => 'list_archives',
+                        'name'        => 'adapter_updraftplus_list_archives',
+                        'description' => 'List local Updraft archive filenames for a backup set and return short-lived signed download URLs (for MyAgentCrew Hosting migrate pull). Prefers newest local_ready backup if timestamp omitted. Skips encrypted .crypt files. Poll after Backup Now finishes.',
+                        'inputSchema' => array(
+                                'type'       => 'object',
+                                'properties' => array(
+                                        'timestamp' => array(
+                                                'type'        => 'integer',
+                                                'description' => 'Backup timestamp/key from list_backups. Optional — defaults to newest local_ready.',
+                                        ),
+                                        'backupKey' => array(
+                                                'type'        => 'string',
+                                                'description' => 'Alias for timestamp.',
+                                        ),
+                                        'ttl'       => array(
+                                                'type'        => 'integer',
+                                                'description' => 'Signed URL lifetime in seconds (default 7200, max 86400).',
+                                        ),
+                                ),
+                        ),
+                        'execute'     => array(
+                                'primitive' => 'callback',
+                                'handler'   => 'updraftplus_list_archives',
+                        ),
+                ),
+                array(
                         'id'          => 'restore_backup',
                         'name'        => 'adapter_updraftplus_restore_backup',

my-agent-crew-connector/trunk/includes/class-cbregen-capability-runtime.php

@@ -219 +219 @@
                         'updraftplus_backup_status'   => array( 'CBRegen_UpdraftPlus_Adapter', 'backup_status' ),
                         'updraftplus_list_backups'    => array( 'CBRegen_UpdraftPlus_Adapter', 'list_backups' ),
+                        'updraftplus_list_archives'   => array( 'CBRegen_UpdraftPlus_Adapter', 'list_archives' ),
                         'updraftplus_restore_backup'  => array( 'CBRegen_UpdraftPlus_Adapter', 'restore_backup' ),
                         'updraftplus_restore_status'  => array( 'CBRegen_UpdraftPlus_Adapter', 'restore_status' ),

my-agent-crew-connector/trunk/includes/class-cbregen-updraftplus-adapter.php

@@ -14 +14 @@
         const RESTORE_JOB_OPTION = 'cbregen_updraft_adapter_restore_job';
         const RESTORE_CRON_HOOK  = 'cbregen_updraftplus_do_restore';
+        /** Signed archive download TTL (seconds). Large backups need a long window. */
+        const ARCHIVE_URL_TTL    = 7200;
 
         /**
@@ -20 +22 @@
         public static function boot() {
                 add_action( self::RESTORE_CRON_HOOK, array( __CLASS__, 'execute_restore_job' ), 10, 1 );
+                add_action( 'rest_api_init', array( __CLASS__, 'register_stream_routes' ) );
+        }
+
+        /**
+         * Public signed download routes for Provision pull (no Bearer — HMAC token).
+         */
+        public static function register_stream_routes() {
+                foreach ( array( 'my-agent-crew/v1', 'chatbot-regen/v1' ) as $namespace ) {
+                        register_rest_route(
+                                $namespace,
+                                '/updraft/archive',
+                                array(
+                                        'methods'             => 'GET',
+                                        'callback'            => array( __CLASS__, 'stream_archive' ),
+                                        'permission_callback' => '__return_true',
+                                        'args'                => array(
+                                                'token' => array(
+                                                        'required' => true,
+                                                        'type'     => 'string',
+                                                ),
+                                        ),
+                                )
+                        );
+                }
         }
 
@@ -931 +957 @@
 
         /**
+         * List local Updraft archive files for a backup set + short-lived signed download URLs.
+         * Used by MyAgentCrew Provision migrate pull (External site → Contabo).
+         *
+         * @param array<string,mixed> $manifest Manifest.
+         * @param array<string,mixed> $tool     Tool definition.
+         * @param array<string,mixed> $args     Request args.
+         * @return array<string,mixed>|WP_Error
+         */
+        public static function list_archives( array $manifest, array $tool, array $args ) {
+                if ( ! self::is_available() ) {
+                        return new WP_Error(
+                                'cbregen_updraft_missing',
+                                'UpdraftPlus is not installed or active.',
+                                array( 'status' => 404 )
+                        );
+                }
+                if ( ! self::bootstrap_updraft() ) {
+                        return new WP_Error( 'cbregen_updraft_bootstrap', 'Could not bootstrap UpdraftPlus.' );
+                }
+
+                $history = self::get_backup_history();
+                $timestamp = 0;
+                if ( isset( $args['timestamp'] ) ) {
+                        $timestamp = (int) $args['timestamp'];
+                } elseif ( isset( $args['backupKey'] ) && is_numeric( $args['backupKey'] ) ) {
+                        $timestamp = (int) $args['backupKey'];
+                } elseif ( isset( $args['backup_key'] ) && is_numeric( $args['backup_key'] ) ) {
+                        $timestamp = (int) $args['backup_key'];
+                } elseif ( isset( $args['key'] ) && is_numeric( $args['key'] ) ) {
+                        $timestamp = (int) $args['key'];
+                }
+
+                $row = null;
+                $key = null;
+                if ( $timestamp > 0 && ! empty( $history[ $timestamp ] ) && is_array( $history[ $timestamp ] ) ) {
+                        $key = $timestamp;
+                        $row = $history[ $timestamp ];
+                } else {
+                        // Newest local_ready backup.
+                        $summaries = array();
+                        foreach ( $history as $hkey => $hrow ) {
+                                $sum = self::summarize_backup_row( $hkey, $hrow );
+                                if ( $sum && ! empty( $sum['local_ready'] ) ) {
+                                        $summaries[] = array( 'key' => $hkey, 'row' => $hrow, 'ts' => (int) $sum['timestamp'] );
+                                }
+                        }
+                        usort(
+                                $summaries,
+                                static function ( $a, $b ) {
+                                        return $b['ts'] - $a['ts'];
+                                }
+                        );
+                        if ( empty( $summaries ) ) {
+                                return new WP_Error(
+                                        'cbregen_updraft_no_local_backup',
+                                        'No local_ready Updraft backup found. Run Backup Now with nocloud first.',
+                                        array( 'status' => 404, 'admin_url' => self::updraft_admin_url() )
+                                );
+                        }
+                        $key = $summaries[0]['key'];
+                        $row = $summaries[0]['row'];
+                        $timestamp = $summaries[0]['ts'];
+                }
+
+                $summary = self::summarize_backup_row( $key, $row );
+                if ( ! $summary || empty( $summary['local_ready'] ) ) {
+                        return new WP_Error(
+                                'cbregen_updraft_not_local',
+                                'Backup ' . $timestamp . ' is not fully present on local disk (local_ready=false).',
+                                array( 'status' => 409, 'admin_url' => self::updraft_admin_url() )
+                        );
+                }
+
+                $dir = self::backups_dir();
+                $ttl = isset( $args['ttl'] ) ? max( 300, min( 86400, (int) $args['ttl'] ) ) : self::ARCHIVE_URL_TTL;
+                $files = array();
+                $skipped_crypt = array();
+
+                foreach ( $summary['components'] as $entity ) {
+                        $st = self::entity_local_status( $row, $entity );
+                        foreach ( $st['files'] as $filename ) {
+                                $filename = basename( (string) $filename );
+                                if ( $filename === '' ) {
+                                        continue;
+                                }
+                                if ( preg_match( '/\.crypt(\.|$)/i', $filename ) ) {
+                                        $skipped_crypt[] = $filename;
+                                        continue;
+                                }
+                                $path = trailingslashit( $dir ) . $filename;
+                                if ( ! is_file( $path ) || filesize( $path ) <= 0 ) {
+                                        continue;
+                                }
+                                $token = self::sign_archive_token( $timestamp, $filename, $ttl );
+                                $url   = rest_url( 'my-agent-crew/v1/updraft/archive?token=' . rawurlencode( $token ) );
+                                $files[] = array(
+                                        'name'      => $filename,
+                                        'size'      => (int) filesize( $path ),
+                                        'url'       => $url,
+                                        'headers'   => array(),
+                                        'entity'    => $entity,
+                                        'backupKey' => (string) $timestamp,
+                                );
+                        }
+                }
+
+                if ( empty( $files ) ) {
+                        $msg = 'No downloadable archive files found for this backup.';
+                        if ( ! empty( $skipped_crypt ) ) {
+                                $msg .= ' Encrypted (.crypt) archives are not supported for migrate pull.';
+                        }
+                        return new WP_Error(
+                                'cbregen_updraft_no_files',
+                                $msg,
+                                array(
+                                        'status'         => 404,
+                                        'skipped_crypt'  => $skipped_crypt,
+                                        'admin_url'      => self::updraft_admin_url(),
+                                )
+                        );
+                }
+
+                return array(
+                        'ok'            => true,
+                        'tool'          => isset( $tool['name'] ) ? $tool['name'] : 'adapter_updraftplus_list_archives',
+                        'backupKey'     => (string) $timestamp,
+                        'timestamp'     => (int) $timestamp,
+                        'key'           => $key,
+                        'local_ready'   => true,
+                        'components'    => $summary['components'],
+                        'files'         => $files,
+                        'fileCount'     => count( $files ),
+                        'bytesTotal'    => array_sum( array_map( static function ( $f ) { return (int) $f['size']; }, $files ) ),
+                        'expiresIn'     => $ttl,
+                        'skipped_crypt' => $skipped_crypt,
+                        'admin_url'     => self::updraft_admin_url(),
+                        'message'       => sprintf(
+                                'Listed %d Updraft archive file(s) for backup %s with signed download URLs (TTL %ds).',
+                                count( $files ),
+                                $timestamp,
+                                $ttl
+                        ),
+                );
+        }
+
+        /**
+         * Stream one Updraft archive file after verifying HMAC token.
+         * Supports HTTP Range for Provision resume downloads.
+         *
+         * @param WP_REST_Request $request Request.
+         * @return WP_REST_Response|WP_Error
+         */
+        public static function stream_archive( $request ) {
+                $token = (string) $request->get_param( 'token' );
+                $payload = self::verify_archive_token( $token );
+                if ( is_wp_error( $payload ) ) {
+                        return $payload;
+                }
+
+                $filename = basename( (string) $payload['file'] );
+                if ( $filename === '' || preg_match( '/\.crypt(\.|$)/i', $filename ) ) {
+                        return new WP_Error( 'cbregen_updraft_forbidden', 'File not allowed.', array( 'status' => 403 ) );
+                }
+
+                $path = trailingslashit( self::backups_dir() ) . $filename;
+                if ( ! is_file( $path ) || ! is_readable( $path ) ) {
+                        return new WP_Error( 'cbregen_updraft_missing_file', 'Archive file not found on disk.', array( 'status' => 404 ) );
+                }
+
+                $size = (int) filesize( $path );
+                $start = 0;
+                $end   = $size - 1;
+                $status = 200;
+
+                $range = isset( $_SERVER['HTTP_RANGE'] ) ? (string) $_SERVER['HTTP_RANGE'] : '';
+                if ( $range && preg_match( '/bytes=(\d*)-(\d*)/', $range, $m ) ) {
+                        if ( $m[1] !== '' ) {
+                                $start = (int) $m[1];
+                        }
+                        if ( $m[2] !== '' ) {
+                                $end = (int) $m[2];
+                        }
+                        if ( $start > $end || $start >= $size ) {
+                                status_header( 416 );
+                                header( 'Content-Range: bytes */' . $size );
+                                exit;
+                        }
+                        $status = 206;
+                }
+
+                $length = $end - $start + 1;
+
+                // Bypass WP JSON wrapper — stream raw bytes.
+                status_header( $status );
+                header( 'Content-Type: application/octet-stream' );
+                header( 'Content-Disposition: attachment; filename="' . rawurlencode( $filename ) . '"' );
+                header( 'Accept-Ranges: bytes' );
+                header( 'Content-Length: ' . $length );
+                if ( 206 === $status ) {
+                        header( 'Content-Range: bytes ' . $start . '-' . $end . '/' . $size );
+                }
+                header( 'Cache-Control: no-store' );
+                header( 'X-AgentCrew-Updraft-File: ' . $filename );
+
+                // phpcs:ignore WordPress.WP.AlternativeFunctions.file_system_operations_fopen
+                $fh = fopen( $path, 'rb' );
+                if ( ! $fh ) {
+                        status_header( 500 );
+                        echo 'Could not open archive.';
+                        exit;
+                }
+                if ( $start > 0 ) {
+                        fseek( $fh, $start );
+                }
+                $remaining = $length;
+                while ( $remaining > 0 && ! feof( $fh ) ) {
+                        $chunk = fread( $fh, min( 1024 * 1024, $remaining ) );
+                        if ( false === $chunk || $chunk === '' ) {
+                                break;
+                        }
+                        echo $chunk;
+                        $remaining -= strlen( $chunk );
+                        if ( function_exists( 'fastcgi_finish_request' ) ) {
+                                // Keep streaming; do not finish early.
+                        }
+                        if ( connection_aborted() ) {
+                                break;
+                        }
+                }
+                fclose( $fh );
+                exit;
+        }
+
+        /**
+         * @return string
+         */
+        private static function backups_dir() {
+                global $updraftplus;
+                $dir = '';
+                if ( is_a( $updraftplus, 'UpdraftPlus' ) && method_exists( $updraftplus, 'backups_dir_location' ) ) {
+                        $dir = (string) $updraftplus->backups_dir_location();
+                }
+                if ( $dir === '' ) {
+                        $upload = wp_upload_dir();
+                        $dir    = trailingslashit( $upload['basedir'] ) . 'updraft';
+                }
+                return $dir;
+        }
+
+        /**
+         * @return string
+         */
+        private static function archive_signing_secret() {
+                $api = '';
+                if ( class_exists( 'CBRegen_Auth' ) ) {
+                        $api = (string) get_option( CBRegen_Auth::OPTION_KEY, '' );
+                }
+                return hash( 'sha256', 'cbregen-updraft-archive|' . wp_salt( 'auth' ) . '|' . $api . '|' . home_url( '/' ), true );
+        }
+
+        /**
+         * @param int    $timestamp Backup key.
+         * @param string $filename  Basename.
+         * @param int    $ttl       Seconds.
+         * @return string
+         */
+        private static function sign_archive_token( $timestamp, $filename, $ttl ) {
+                $payload = array(
+                        'ts'   => (int) $timestamp,
+                        'file' => basename( (string) $filename ),
+                        'exp'  => time() + (int) $ttl,
+                        'n'    => wp_generate_password( 8, false, false ),
+                );
+                $json = wp_json_encode( $payload );
+                $b64  = rtrim( strtr( base64_encode( $json ), '+/', '-_' ), '=' );
+                $sig  = hash_hmac( 'sha256', $b64, self::archive_signing_secret() );
+                return $b64 . '.' . $sig;
+        }
+
+        /**
+         * @param string $token Token.
+         * @return array<string,mixed>|WP_Error
+         */
+        private static function verify_archive_token( $token ) {
+                $token = (string) $token;
+                $parts = explode( '.', $token );
+                if ( count( $parts ) !== 2 ) {
+                        return new WP_Error( 'cbregen_updraft_bad_token', 'Invalid download token.', array( 'status' => 403 ) );
+                }
+                list( $b64, $sig ) = $parts;
+                $expect = hash_hmac( 'sha256', $b64, self::archive_signing_secret() );
+                if ( ! hash_equals( $expect, $sig ) ) {
+                        return new WP_Error( 'cbregen_updraft_bad_token', 'Invalid download token signature.', array( 'status' => 403 ) );
+                }
+                $pad  = strlen( $b64 ) % 4;
+                $raw  = base64_decode( strtr( $b64, '-_', '+/' ) . ( $pad ? str_repeat( '=', 4 - $pad ) : '' ) );
+                $data = json_decode( (string) $raw, true );
+                if ( ! is_array( $data ) || empty( $data['file'] ) || empty( $data['exp'] ) ) {
+                        return new WP_Error( 'cbregen_updraft_bad_token', 'Corrupt download token.', array( 'status' => 403 ) );
+                }
+                if ( (int) $data['exp'] < time() ) {
+                        return new WP_Error( 'cbregen_updraft_token_expired', 'Download token expired. Call list_archives again.', array( 'status' => 403 ) );
+                }
+                return $data;
+        }
+
+        /**
          * @param string                   $status Status.
          * @param array<string,mixed>|null $latest Latest backup.

my-agent-crew-connector/trunk/my-agent-crew-connector.php

@@ -4 +4 @@
  * Plugin URI:        https://myagentcrew.com/wordpress-connector/
  * Description:       Connect WordPress to a My Agent Crew agent. Phase 2 MCP gateway: curated capabilities plus dynamic discovery of enabled third-party /wp-json/ namespaces.
- * Version:           2.1.3
+ * Version:           2.1.4
  * Requires at least: 5.6
  * Requires PHP:      7.4
@@ -19 +19 @@
 }
 
-define( 'CBREGEN_VERSION', '2.1.3' );
+define( 'CBREGEN_VERSION', '2.1.4' );
 define( 'CBREGEN_DIR', plugin_dir_path( __FILE__ ) );
 

my-agent-crew-connector/trunk/readme.txt

@@ -5 +5 @@
 Tested up to: 7.0
 Requires PHP: 7.4
-Stable tag: 2.1.3
+Stable tag: 2.1.4
 License: GPLv2 or later
 License URI: https://www.gnu.org/licenses/gpl-2.0.html
@@ -70 +70 @@
 
 == Changelog ==
+
+= 2.1.4 =
+* Updraft migrate stream: `adapter_updraftplus_list_archives` returns local archive files with short-lived signed download URLs (`GET /my-agent-crew/v1/updraft/archive?token=…`, HTTP Range supported) for MyAgentCrew Hosting Provision pull.
+* Skips encrypted `.crypt` archives (not supported by Provision migrate).
 
 = 2.1.3 =