updatepulse-server/updatepulse-server.php

<?php
/**
 * Plugin Name: UpdatePulse Server
 * Plugin URI: https://github.com/anyape/updatepulse-server/
 * Description: Run your own update server.
 * Version: 1.0.12
 * Author: Alexandre Froger
 * Author URI: https://froger.me/
 * License: GPLv2 or later
 * Text Domain: updatepulse-server
 * Domain Path: /languages
 *
 * @package UPServ
 *
 * UpdatePulse Server is a WordPress plugin that enables users to host their own
 * update server for WordPress themes and plugins, or generic packages.
 * It handles license verification, package distribution, and update management
 * through a set of APIs and managers.
 */

// Exit if accessed directly to prevent unauthorized access
if ( ! defined( 'ABSPATH' ) ) {
	exit; // Exit if accessed directly
}

// Skip processing during WordPress heartbeat requests for performance optimization
if (
	defined( 'DOING_AJAX' ) &&
	DOING_AJAX &&
	'heartbeat' === sanitize_text_field( wp_unslash( filter_input( INPUT_POST, 'action' ) ) )
) {
	return;
}

// Store performance metrics when debugging is enabled
if ( defined( 'WP_DEBUG' ) && WP_DEBUG && defined( 'SAVEQUERIES' ) && SAVEQUERIES ) {
	global $wpdb, $upserv_mem_before, $upserv_scripts_before, $upserv_queries_before;

	$upserv_mem_before     = memory_get_peak_usage();
	$upserv_scripts_before = get_included_files();
	$upserv_queries_before = $wpdb->queries;
}

// Import required namespace components for the plugin
use Anyape\UpdatePulse\Server\Nonce\Nonce;
use Anyape\UpdatePulse\Server\API\License_API;
use Anyape\UpdatePulse\Server\API\Webhook_API;
use Anyape\UpdatePulse\Server\API\Update_API;
use Anyape\UpdatePulse\Server\API\Package_API;
use Anyape\UpdatePulse\Server\Manager\Cloud_Storage_Manager;
use Anyape\UpdatePulse\Server\Manager\Data_Manager;
use Anyape\UpdatePulse\Server\Manager\Remote_Sources_Manager;
use Anyape\UpdatePulse\Server\Manager\Package_Manager;
use Anyape\UpdatePulse\Server\Manager\License_Manager;
use Anyape\UpdatePulse\Server\Manager\API_Manager;
use Anyape\UpdatePulse\Server\Scheduler\Scheduler;
use Anyape\UpdatePulse\Server\UPServ;

// Define essential plugin constants for file paths and URLs
if ( ! defined( 'UPSERV_PLUGIN_PATH' ) ) {
	define( 'UPSERV_PLUGIN_PATH', plugin_dir_path( __FILE__ ) );
}

if ( ! defined( 'UPSERV_PLUGIN_FILE' ) ) {
	define( 'UPSERV_PLUGIN_FILE', __FILE__ );
}

if ( ! defined( 'UPSERV_PLUGIN_URL' ) ) {
	define( 'UPSERV_PLUGIN_URL', plugin_dir_url( __FILE__ ) );
}

if ( ! defined( 'UPSERV_MB_TO_B' ) ) {
	define( 'UPSERV_MB_TO_B', 1000000 );
}

// Load required files, allowing for extension via filter
$require = apply_filters( 'upserv_mu_require', array( UPSERV_PLUGIN_PATH . 'autoload.php' ) );

foreach ( $require as $file ) {

	if ( file_exists( $file ) ) {
		require_once $file;
	}
}

// Load plugin options and extract private API keys for authentication
$options      = json_decode( get_option( 'upserv_options' ), true );
$private_keys = array();

if ( is_array( $options ) && ! empty( $options ) && isset( $options['api'] ) ) {

	foreach ( $options['api'] as $index => $option ) {

		if ( isset( $option['private_api_keys'] ) ) {
			$private_keys = array_merge( $private_keys, $option['private_api_keys'] );
		}
	}
}

// Initialize nonce authentication with the extracted private keys
Nonce::register();
Nonce::init_auth( $private_keys );

// Register activation, deactivation and uninstall hooks for core plugin classes
// Skip during API requests to optimize performance
if (
	! Update_API::is_doing_api_request() &&
	! License_API::is_doing_api_request()
) {
	$plugin_registration_classes = apply_filters(
		'upserv_mu_plugin_registration_classes',
		array(
			'Anyape\\UpdatePulse\\Server\\UPServ',
			'Anyape\\UpdatePulse\\Server\\Manager\\License_Manager',
			'Anyape\\UpdatePulse\\Server\\Nonce\\Nonce',
			'Anyape\\UpdatePulse\\Server\\Manager\\Webhook_Manager',
			'Anyape\\UpdatePulse\\Server\\Manager\\Data_Manager',
			'Anyape\\UpdatePulse\\Server\\Manager\\Remote_Sources_Manager',
		)
	);

	foreach ( $plugin_registration_classes as $class ) {

		if ( method_exists( $class, 'activate' ) ) {
			register_activation_hook( UPSERV_PLUGIN_FILE, array( $class, 'activate' ) );
		}

		if ( method_exists( $class, 'deactivate' ) ) {
			register_deactivation_hook( UPSERV_PLUGIN_FILE, array( $class, 'deactivate' ) );
		}

		if ( method_exists( $class, 'uninstall' ) ) {
			register_uninstall_hook( UPSERV_PLUGIN_FILE, array( $class, 'uninstall ' ) );
		}
	}
}

// Register WP-CLI commands if the CLI environment is active
if ( defined( 'WP_CLI' ) && constant( 'WP_CLI' ) ) {
	require_once UPSERV_PLUGIN_PATH . 'functions.php';

	WP_CLI::add_command( 'updatepulse-server', 'Anyape\\UpdatePulse\\Server\\CLI\\CLI' );
}

/**
 * Main initialization function for UpdatePulse Server plugin.
 *
 * This function is responsible for initializing different components based on request type:
 * - Sets up caching
 * - Loads required dependencies
 * - Initializes core components like Scheduler and APIs
 * - Conditionally loads admin-specific components
 *
 * The function intelligently loads only what's needed for each request type to optimize performance.
 *
 * @since 1.0.0
 * @return void
 */
function upserv_run() {

	if ( ! did_action( 'upserv_mu_optimizer_ready' ) ) {
		wp_cache_add_non_persistent_groups( 'updatepulse-server' );
	}

	do_action( 'upserv_mu_ready' );

	require_once UPSERV_PLUGIN_PATH . 'functions.php';

	// Determine request type to optimize component loading
	$license_api_request  = upserv_is_doing_license_api_request();
	$priority_api_request = apply_filters( 'upserv_is_priority_api_request', $license_api_request );
	$is_api_request       = $priority_api_request;
	$objects              = apply_filters( 'upserv_objects', array() );

	// Initialize core API components needed for all request types
	if ( ! isset( $objects['scheduler'] ) ) {
		$objects['scheduler'] = new Scheduler( true );
	}

	if ( ! isset( $objects['license_api'] ) ) {
		$objects['license_api'] = new License_API( true, false );
	}

	if ( ! isset( $objects['webhook_api'] ) ) {
		$objects['webhook_api'] = new Webhook_API( true );
	}

	// Load additional components for non-priority API requests
	if ( ! $priority_api_request ) {
		require_once ABSPATH . 'wp-admin/includes/plugin.php';
		require_once ABSPATH . 'wp-admin/includes/file.php';

		do_action( 'upserv_no_priority_api_includes' );

		// Check for other API request types
		$is_api_request = (
			upserv_is_doing_update_api_request() ||
			upserv_is_doing_webhook_api_request() ||
			upserv_is_doing_package_api_request()
		);

		if ( ! isset( $objects['update_api'] ) ) {
			$objects['update_api'] = new Update_API( true );
		}

		if ( ! isset( $objects['package_api'] ) ) {
			$objects['package_api'] = new Package_API( true );
		}

		if ( ! isset( $objects['cloud_storage_manager'] ) ) {
			$objects['cloud_storage_manager'] = new Cloud_Storage_Manager( true );
		}
	}

	$is_api_request = apply_filters( 'upserv_is_api_request', $is_api_request );

	// Load admin interface components only when not handling API requests
	if ( ! $is_api_request ) {

		if ( ! class_exists( 'WP_List_Table' ) ) {
			require_once ABSPATH . 'wp-admin/includes/class-wp-list-table.php';
		}

		do_action( 'upserv_no_api_includes' );

		if ( ! isset( $objects['data_manager'] ) ) {
			$objects['data_manager'] = new Data_Manager( true );
		}

		if ( ! isset( $objects['remote_sources_manager'] ) ) {
			$objects['remote_sources_manager'] = new Remote_Sources_Manager( true );
		}

		if ( ! isset( $objects['package_manager'] ) ) {
			$objects['package_manager'] = new Package_Manager( true );
		}

		if ( ! isset( $objects['license_manager'] ) ) {
			$objects['license_manager'] = new License_Manager( true );
		}

		if ( ! isset( $objects['api_manager'] ) ) {
			$objects['api_manager'] = new API_Manager( true );
		}

		if ( ! isset( $objects['plugin'] ) ) {
			$objects['plugin'] = new UPServ( true );
		}
	}

	do_action( 'upserv_ready', $objects );
}
add_action( 'plugins_loaded', 'upserv_run', PHP_INT_MIN + 100, 0 );

/**
 * Handles plugin updates and migrations.
 *
 * This function checks if we're in an API context, and if not, loads the update/migration
 * functionality. During admin page loads, it hooks into plugins_loaded at a very early
 * priority to ensure migrations run before the main plugin code.
 *
 * @since 1.0.0
 * @return void
 */
function upserv_updater() {
	$doing_api = wp_cache_get( 'upserv_mu_doing_api', 'updatepulse-server' );

	if ( ! $doing_api ) {
		require_once __DIR__ . '/lib/wp-update-migrate/class-wp-update-migrate.php';

		if ( ! wp_doing_ajax() && is_admin() && ! wp_doing_cron() ) {
			add_action(
				'plugins_loaded',
				function () {
					$update_migrate = WP_Update_Migrate::get_instance( UPSERV_PLUGIN_FILE, 'upserv' );

					if ( false === $update_migrate->get_result() ) {

						if ( false !== has_action( 'plugins_loaded', 'upserv_run' ) ) {
							remove_action( 'plugins_loaded', 'upserv_run', -99 );
						}
					}
				},
				PHP_INT_MIN
			);
		}
	}
}
upserv_updater();

// Load testing functionality if enabled via constant
if ( defined( 'UPSERV_ENABLE_TEST' ) && constant( 'UPSERV_ENABLE_TEST' ) ) {

	if ( Update_API::is_doing_api_request() || License_API::is_doing_api_request() ) {
		require_once UPSERV_PLUGIN_PATH . 'tests.php';
	}
}