'https://api.mercadolibre.com',
'timeout' => 30,
]);
function getCredentials(mysqli $conn): array
{
$res = $conn->query("
SELECT user_id, access_token, refresh_token, expires_in, updated_at
FROM tb_marketplace_tokens
WHERE idMP=1
ORDER BY updated_at DESC
LIMIT 1
");
if (!$row = $res->fetch_assoc()) {
die("ERROR: Ejecuta authorize.php primero.
");
}
return [
'user_id' => $row['user_id'],
'access_token' => $row['access_token'],
'refresh_token' => $row['refresh_token'],
'expires_in' => $row['expires_in'],
'updated_at' => $row['updated_at'],
];
}
function refreshTokenIfNeeded(Client $http, array &$creds, mysqli $conn)
{
$expTs = strtotime($creds['updated_at']) + $creds['expires_in'];
if (time() < $expTs - 60) return;
$r = $http->post('/oauth/token', [
'form_params' => [
'grant_type' => 'refresh_token',
'client_id' => '3658695067033012',
'client_secret' => 'GZBg63xJNM9Eeb2cOhF9JwsOEv6vTxo7',
'refresh_token' => $creds['refresh_token']
],
'headers' => ['Accept' => 'application/json']
]);
$d = json_decode((string)$r->getBody(), true);
foreach (['access_token', 'refresh_token', 'expires_in'] as $k) {
$creds[$k] = $d[$k];
}
$u = $conn->prepare("
UPDATE tb_marketplace_tokens
SET access_token=?, refresh_token=?, expires_in=?, updated_at=NOW()
WHERE user_id=?
");
$u->bind_param(
'ssis',
$creds['access_token'],
$creds['refresh_token'],
$creds['expires_in'],
$creds['user_id']
);
$u->execute();
$u->close();
}
function updateWithRetry(Client $http, string $m, string $e, string $t, array $p = [], int $r = 3)
{
$a = 0;
while (true) {
try {
usleep(100000);
$opts = [
'headers' => [
'Authorization' => "Bearer {$t}",
'Content-Type' => 'application/json'
]
];
if ($m !== 'GET') $opts['json'] = $p;
$resp = match ($m) {
'GET' => $http->get($e, $opts),
'POST' => $http->post($e, $opts),
default => $http->put($e, $opts)
};
return json_decode((string)$resp->getBody(), true);
} catch (RequestException $x) {
$code = $x->getResponse()?->getStatusCode() ?: 0;
if ($code === 429 && $a++ < $r) {
sleep((int)$x->getResponse()->getHeaderLine('Retry-After') ?: 5);
continue;
}
throw $x;
}
}
}
function predictCategories(Client $http, string $token, string $q): array
{
try {
$r = $http->get("/sites/" . SITE_ID . "/domain_discovery/search", [
'headers' => ['Authorization' => "Bearer {$token}", 'Accept' => 'application/json'],
'query' => ['limit' => PREDICT_LIMIT, 'q' => $q]
]);
return json_decode((string)$r->getBody(), true) ?: [];
} catch (RequestException) {
return [];
}
}
/**
* Ahora recibe también el token y devuelve siempre:
* - "Padre › Hijo › Nieto…" si existe path_from_root
* - o bien el campo 'name' de la categoría
* - o el catId como último recurso
*/
function fetchCategoryPath(Client $http, string $token, string $catId): string
{
try {
// incluimos la Authorization para no depender de CORS o de endpoints públicos
$resp = $http->get("/categories/{$catId}", [
'headers' => [
'Authorization' => "Bearer {$token}",
'Accept' => 'application/json'
]
]);
$d = json_decode((string)$resp->getBody(), true);
// 1) intentamos la ruta completa
$path = array_column($d['path_from_root'] ?? [], 'name');
if (!empty($path)) {
return implode(' › ', $path);
}
// 2) fallback al nombre simple
if (!empty($d['name'])) {
return $d['name'];
}
// 3) si algo falla, devolvemos el ID
return $catId;
} catch (RequestException $e) {
return $catId;
}
}
function uploadPicture(Client $http, string $token, string $url): ?string
{
try {
$r = $http->post('/pictures', [
'headers' => ['Authorization' => "Bearer {$token}", 'Content-Type' => 'application/json'],
'json' => ['source' => $url]
]);
$d = json_decode((string)$r->getBody(), true);
// ——>> LOG: respuesta completa
file_put_contents(__DIR__ . '/ml_pictures.log', date('c') . " | URL: {$url}\n" . print_r($d, true) . "\n", FILE_APPEND);
return $d['id'] ?? null;
} catch (RequestException $x) {
file_put_contents(__DIR__ . '/ml_pictures.log', date('c') . " | ERROR cargando {$url}: " . $x->getMessage() . "\n", FILE_APPEND);
return null;
}
}
function e(?string $s): string
{
return htmlspecialchars((string)$s, ENT_QUOTES);
}
// ───────────────────── AJAX proxy a Node (MercadoLibre) ─────────────────────
if (isset($_GET['ajax'])) {
header('Content-Type: application/json; charset=utf-8');
$base = cpn_node_api_base();
$token = $_SESSION['node_token'] ?? '';
if (!is_string($token) || trim($token) === '') {
http_response_code(401);
echo json_encode(['ok' => false, 'error' => ['message' => 'Token de sesión Node no disponible. Inicie sesión de nuevo.']]);
exit;
}
$ajax = (string)$_GET['ajax'];
if ($ajax === 'ml_import_start') {
$url = rtrim($base, '/') . '/api/integrations/mercadolibre/import?async=1';
$resp = cpn_node_request('POST', $url, $token, []);
if (!empty($resp['ok'])) {
cpn_activity_log_event('marketplace', 'marketplace.mercadolibre_import_start', 'Inició importación MercadoLibre (async)', 'marketplace', 1, []);
}
echo json_encode($resp);
exit;
}
if ($ajax === 'ml_import_progress') {
$url = rtrim($base, '/') . '/api/integrations/mercadolibre/import/progress';
$resp = cpn_node_request('GET', $url, $token, null);
echo json_encode($resp);
exit;
}
if ($ajax === 'ml_sync_start') {
$url = rtrim($base, '/') . '/api/integrations/mercadolibre/sync?async=1';
$resp = cpn_node_request('POST', $url, $token, []);
if (!empty($resp['ok'])) {
cpn_activity_log_event('marketplace', 'marketplace.mercadolibre_sync_start', 'Inició sincronización MercadoLibre (async)', 'marketplace', 1, []);
}
echo json_encode($resp);
exit;
}
if ($ajax === 'ml_sync_progress') {
$url = rtrim($base, '/') . '/api/integrations/mercadolibre/sync/progress';
$resp = cpn_node_request('GET', $url, $token, null);
echo json_encode($resp);
exit;
}
http_response_code(400);
echo json_encode(['ok' => false, 'error' => ['message' => 'Acción AJAX inválida']]);
exit;
}
// — 0) Manejar "Actualizar MP" —
if (isset($_GET['action']) && $_GET['action'] === 'update_mp') {
$ok = $conn->query("CALL actualizarTituloMarketplace()");
if ($ok !== false) {
cpn_activity_log_event('marketplace', 'marketplace.mercadolibre_actualizar_titulo', 'Ejecutó actualizarTituloMarketplace()', 'marketplace', 1, []);
}
$qs = $_GET;
unset($qs['action']);
header('Location: ' . $_SERVER['PHP_SELF'] . '?' . http_build_query($qs));
exit;
}
// — 0) Manejar "Actualizar MP" —
if (isset($_GET['action']) && $_GET['action'] === 'update_full_mp') {
$ok = $conn->query("CALL actualizarMarketplace()");
if ($ok !== false) {
cpn_activity_log_event('marketplace', 'marketplace.mercadolibre_actualizar_full', 'Ejecutó actualizarMarketplace()', 'marketplace', 1, []);
}
$qs = $_GET;
unset($qs['action']);
header('Location: ' . $_SERVER['PHP_SELF'] . '?' . http_build_query($qs));
exit;
}
// — Preload credenciales & token —
$creds = getCredentials($conn);
refreshTokenIfNeeded($http, $creds, $conn);
$token = $creds['access_token'];
$stage = $_REQUEST['stage'] ?? 'list';
$product_id = (int)($_REQUEST['product_id'] ?? 0);
$page = isset($_GET['page']) ? max(1, intval($_GET['page'])) : 1;
$limit = 50;
$offset = ($page - 1) * $limit;
// previo a HTML: manejo de POST en select_category
if ($stage === 'select_category' && $_SERVER['REQUEST_METHOD'] === 'POST') {
header("Location:?stage=fill_attributes&product_id={$product_id}&category_id={$_POST['category_id']}");
exit;
}
?>
Import (pull + reconciliar)
Stage: -
Progreso: 0/0
Inicio: -
Fin: -
Error: -
Sync (push a ML)
Stage: -
Progreso: 0/0
Inicio: -
Fin: -
Error: -
Nota: el job diario de las 4:00am lo corre Node. Este botón dispara el mismo flujo manualmente.
'p.tituloPublicacion'];
$sortKey = $_GET['sort'] ?? 'titulo';
$order = strtoupper($_GET['order'] ?? 'ASC');
if (!in_array($order, ['ASC', 'DESC'], true)) $order = 'ASC';
$sortCol = $allowedSort[$sortKey] ?? $allowedSort['titulo'];
// Para alternar al hacer clic
$nextOrder = $order === 'ASC' ? 'DESC' : 'ASC';
// --------------------------------------------------
$cnt = intval($conn->query("
SELECT COUNT(*) AS cnt
FROM tb_marketplace_productos p
WHERE p.idMarketplace=1 AND p.activo=1 AND p.refMP IS NULL AND p.stockPublicacion >0
")->fetch_assoc()['cnt']);
$totalPages = max(1, ceil($cnt / $limit));
$res = $conn->query("
SELECT p.skuMP, p.tituloPublicacion, pr.descripcion, p.id AS pid, p.idProducto
FROM tb_marketplace_productos p
JOIN tb_productos pr ON p.idProducto=pr.id
WHERE p.idMarketplace=1 AND p.activo=1 AND p.refMP IS NULL AND p.stockPublicacion >0 AND pr.wp_id >0
ORDER BY {$sortCol} {$order}
LIMIT {$limit} OFFSET {$offset}
");
?>
Lista de productos a publicar en Mercadolibre
query("
SELECT p.tituloPublicacion, pr.descripcion, pr.txtMedidas, pr.txtMaterial, p.idCategoria
FROM tb_marketplace_productos p
JOIN tb_productos pr ON p.idProducto=pr.id
WHERE p.id={$product_id}
")->fetch_assoc();
$title = $row['tituloPublicacion'];
$desc = $row['descripcion'];
$med = $row['txtMedidas'];
$mat = $row['txtMaterial'];
$currentCat = $row['idCategoria'] ?? '';
$search = $_REQUEST['search_query'] ?? $title;
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
$cat = $_POST['category_id'];
header("Location:?stage=fill_attributes&product_id={$product_id}&category_id={$cat}");
exit;
}
// 1) Predice categorías:
$preds = predictCategories($http, $token, $search);
$candidates = [];
foreach ($preds as $p) {
// 2) Filtrar sólo las que admiten variaciones
$attrs = updateWithRetry($http, 'GET', "/categories/{$p['category_id']}/attributes", $token);
$hasVariation = false;
foreach ($attrs as $a) {
if ((($a['hierarchy'] ?? '') === 'CHILD_PK')
|| ! empty($a['tags']['variation_attribute'])
) {
$hasVariation = true;
break;
}
}
if (! $hasVariation) {
continue;
}
// 3) Aquí usamos la función corregida
$ruta = fetchCategoryPath($http, $token, $p['category_id']);
$candidates[] = [
'id' => $p['category_id'],
'name' => e($ruta)
];
}
// 4) Fallback por si no queda ninguna
if (empty($candidates)) {
$candidates[] = [
'id' => CATEGORY_FALLBACK,
'name' => CATEGORY_FALLBACK . ' (fallback)'
];
}
?>
2) Selecciona categoría
query("
SELECT p.tituloPublicacion, pr.descripcion, pr.txtMedidas, pr.txtMaterial,
p.precioPublicacion, p.stockPublicacion, p.skuMP, p.combo
FROM tb_marketplace_productos p
JOIN tb_productos pr ON p.idProducto=pr.id
WHERE p.id={$product_id}
")->fetch_assoc();
$stmt = $conn->prepare("
SELECT v.idVariante, v.skuMPVariante, v.precioPublicacion, v.stockPublicacion,
v.colorTipoVariante, iv.linkImagen
FROM tb_marketplace_variantes v
JOIN tb_imagenes_variantes iv ON v.idVariante=iv.idVariante
WHERE v.idMarketplaceProducto=? AND v.stockPublicacion>0
");
$stmt->bind_param('i', $product_id);
$stmt->execute();
$stmt->bind_result($idVar, $vs, $vp, $vsx, $vc, $vi);
$vars = [];
while ($stmt->fetch()) {
$vars[] = [
'id' => $idVar,
'sku' => $vs,
'price' => $vp,
'stock' => $vsx,
'color' => $vc,
'img' => str_replace('J:/', 'https://sistema.compranet.com.co/', (string)$vi)
];
}
$stmt->close();
try {
$tech = updateWithRetry($http, 'GET', "/categories/{$category_id}/technical_specs/input", $token, [], 1);
// —> NEW: carga todos los atributos de la categoría
// — carga meta-atributos de la categoría —
$metaAttrs = updateWithRetry($http, 'GET', "/categories/{$category_id}/attributes", $token);
// — sólo tomo los CHILD_PK válidos —
$rawAttrs = [];
foreach ($metaAttrs as $a) {
if (($a['hierarchy'] ?? '') === 'CHILD_PK') {
$rawAttrs[$a['id']] = $a['name'];
}
}
// — reordeno según preferencia —
$preferred = ['COLOR', 'EXTERIOR_COLOR'];
$variantAttrs = [];
foreach ($preferred as $pid) {
if (isset($rawAttrs[$pid])) {
$variantAttrs[$pid] = $rawAttrs[$pid];
unset($rawAttrs[$pid]);
}
}
// — agrego el resto al final —
$variantAttrs += $rawAttrs;
} catch (RequestException) {
$tech = ['groups' => []];
}
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
$qs = http_build_query([
'stage' => 'publish',
'product_id' => $product_id,
'category_id' => $category_id
]);
header("Location:?{$qs}&" . http_build_query($_POST));
exit;
}
?>
3) Completa atributos y variaciones
query("
SELECT p.tituloPublicacion,
p.descripcionPublicacion AS descripcion,
p.idProducto,
pr.txtMedidas,
pr.txtMaterial,
p.precioPublicacion,
p.stockPublicacion,
p.skuMP,
p.combo
FROM tb_marketplace_productos p
JOIN tb_productos pr ON p.idProducto=pr.id
WHERE p.id={$product_id}
")->fetch_assoc();
// definimos $prod para poder usar $prod['combo'] más abajo
$prod = $row;
$title = $row['tituloPublicacion'];
$description = $row['descripcion'];
$price = $row['precioPublicacion'];
$stock = $row['stockPublicacion'];
$sku_main = $row['skuMP'];
$stmt = $conn->prepare("
SELECT v.idVariante, v.skuMPVariante, v.precioPublicacion, v.stockPublicacion, iv.linkImagen
FROM tb_marketplace_variantes v
JOIN tb_imagenes_variantes iv ON v.idVariante=iv.idVariante
WHERE v.idMarketplaceProducto=? AND v.stockPublicacion>0
");
$stmt->bind_param('i', $product_id);
$stmt->execute();
$stmt->bind_result($idVar, $vs, $vp, $vsx, $vi);
$vars = [];
while ($stmt->fetch()) {
$vars[] = [
'id' => $idVar,
'sku' => $vs,
'price' => $vp,
'stock' => $vsx,
'img' => str_replace('J:/', 'https://sistema.compranet.com.co/', (string)$vi)
];
}
$stmt->close();
$meta = updateWithRetry($http, 'GET', "/categories/{$category_id}/attributes", $token, [], 1);
$allowed = array_filter($meta, function ($a) {
$tags = $a['tags'] ?? [];
foreach (['hidden', 'read_only', 'variation_attribute'] as $t) {
if ((isset($tags[$t]) && $tags[$t]) || in_array($t, $tags, true)) {
return false;
}
}
if (strpos($a['id'], 'PACKAGE_') === 0) {
return false;
}
return true;
});
$allowedIds = array_column($allowed, 'id');
$topAttrs = [];
foreach ($_GET as $k => $v) {
if (!str_starts_with($k, 'attr_') || $v === '') continue;
$aid = substr($k, 5);
if (!in_array($aid, $allowedIds, true)) continue;
// antes
$topAttrs[] = [
'id' => $aid,
'value_name' => (string)$v
];
}
$topAttrs = array_values(array_filter($topAttrs, fn($a) => strpos($a['id'], 'PACKAGE_') !== 0));
// Determinar atributo de variación: primero de variantAttrs, si no existe usar 'COLOR'
$chosen = $_REQUEST['chosen_var_attr'] ?? null;
if ($chosen === '') {
$varAttrId = 'COLOR';
} elseif ($chosen !== null) {
$varAttrId = $chosen;
} else {
$varAttrId = !empty($variantAttrs)
? array_key_first($variantAttrs)
: 'COLOR';
}
// Auto-set sale format y unidades por pack si combo>1
// — Auto-set sale format y unidades por pack sólo si no vienen como "" —
if ($prod['combo'] > 1) {
// SALE_FORMAT
if (!isset($_GET['attr_SALE_FORMAT']) || $_GET['attr_SALE_FORMAT'] !== '') {
$value = $_GET['attr_SALE_FORMAT'] ?? 'Pack';
$topAttrs[] = ['id' => 'SALE_FORMAT', 'value_name' => $value];
}
// UNITS_PER_PACK
if (!isset($_GET['attr_UNITS_PER_PACK']) || $_GET['attr_UNITS_PER_PACK'] !== '') {
$value = $_GET['attr_UNITS_PER_PACK'] ?? (string)$prod['combo'];
$topAttrs[] = ['id' => 'UNITS_PER_PACK', 'value_name' => $value];
}
}
$varsPayload = [];
foreach ($vars as $i => $v) {
$vp = (float)($_GET["var_{$i}_price"] ?? $v['price']);
$vs = (int)($_GET["var_{$i}_stock"] ?? $v['stock']);
$vc = $_GET["var_{$i}_combo"] ?? '';
$comb = $vc ? [['id' => $varAttrId, 'value_name' => $vc]] : [];
$entry = [
'seller_custom_field' => $v['sku'],
'price' => $vp,
'available_quantity' => $vs,
'attribute_combinations' => $comb,
'attributes' => [
['id' => 'SELLER_SKU', 'value_name' => $v['sku']]
]
];
if ($pic = uploadPicture($http, $token, $v['img'])) {
$entry['picture_ids'] = [$pic];
} else {
file_put_contents(__DIR__ . '/ml_pictures.log', date('c') . " | NO se obtuvo ID para SKU {$v['sku']} URL {$v['img']}\n", FILE_APPEND);
}
$varsPayload[] = $entry;
}
$sale_terms = [
['id' => 'WARRANTY_TYPE', 'value_id' => '2230280'],
['id' => 'WARRANTY_TIME', 'value_name' => '30 días'],
['id' => 'MANUFACTURING_TIME', 'value_name' => '3 días'],
];
$payload = [
'site_id' => SITE_ID,
'title' => $title,
'category_id' => $category_id,
'price' => $price,
'currency_id' => 'COP',
'available_quantity' => $stock,
'buying_mode' => 'buy_it_now',
'listing_type_id' => 'gold_pro',
'condition' => 'new',
'seller_custom_field' => $sku_main,
'accepts_mercadopago' => true,
'shipping' => [
'mode' => 'not_specified',
'free_shipping' => false,
'local_pick_up' => false,
],
'sale_terms' => $sale_terms,
'pictures' => [],
'attributes' => $topAttrs,
'variations' => $varsPayload
];
?>
4) Resultado de la publicación
$description]
);
// Actualizo variantes
$itemData = updateWithRetry($http, 'GET', "/items/{$ml}", $token, [], 1);
foreach ($itemData['variations'] ?? [] as $var) {
$remoteVarId = $var['id'];
$localSku = $var['seller_custom_field'];
$upVar = $conn->prepare("
UPDATE tb_marketplace_variantes
SET refMPVariante = ?
WHERE skuMPVariante = ? AND idMarketplaceProducto = ?
");
$upVar->bind_param('ssi', $remoteVarId, $localSku, $product_id);
$upVar->execute();
$upVar->close();
}
// Actualizo producto
$u = $conn->prepare("
UPDATE tb_marketplace_productos
SET refMP = ?, fechaSincronizacion = NOW()
WHERE id = ?
");
$u->bind_param('si', $ml, $product_id);
$u->execute();
$u->close();
cpn_activity_log_event('marketplace', 'marketplace.mercadolibre_publish', 'Publicó producto en MercadoLibre', 'producto', $row['idProducto'] ?? null, [
'marketplaceProductId' => $product_id,
'mlItemId' => $ml,
]);
echo "✅ Publicado con ID {$ml}
";
} else {
echo "❌ No devolvió ID.
";
}
} catch (RequestException $x) {
$err = json_decode((string)$x->getResponse()->getBody(), true);
// 1) toma 'cause' o array vacío
$causes = $err['cause'] ?? [];
// 2) si no es array, lo convertimos en uno (o extraemos el mensaje principal)
if (!is_array($causes)) {
// si 'cause' viene como string, o no viene, usamos el mensaje principal
$msgs = [$err['message'] ?? $err['status'] ?? 'Unknown error'];
} else {
// si es array, lo iteramos
$msgs = array_map(function ($c) {
return $c['message'] ?? $c['field'] ?? json_encode($c);
}, $causes);
}
// ahora puedes mostrarlo sin TypeError
echo "❗ " . implode(', ', $msgs) . "
";
echo "Volver ";
}
?>
← Empezar otro
Etapa desconocida.