feat(reindex): token-secured HTTP reindex API endpoint

GET /reindex/api/run?token=<token>[&flush=1] runs a full reindex (and optional
cache flush) without shell access — fixes a stale catalog_category_flat
(landing pages stuck in product-list mode) or a stale merged CSS/JS bundle
after a deploy. Reuses MMD_Reindex Cron::run() so results land in the Reindex
Logs + Scheduler; the existing daily cron still handles scheduled runs.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: alfredang

app/code/local/MMD/Reindex/controllers/ApiController.php

@@ -0,0 +1,50 @@
+<?php
+/**
+ * Token-secured HTTP reindex endpoint — lets ops trigger a full reindex (and
+ * optional cache flush) on any environment without shell access. Reuses the
+ * same Cron::run() the scheduled job uses, so results are logged to
+ * mmd_reindex_log and the Reindex Scheduler page.
+ *
+ *   GET /reindex/api/run?token=<token>            full reindex
+ *   GET /reindex/api/run?token=<token>&flush=1    flush cache first (fixes a
+ *                                                  stale merged CSS/JS bundle)
+ *
+ * Token is mmd_reindex/api/token (default in config.xml; override in
+ * core_config_data for production).
+ */
+class MMD_Reindex_ApiController extends Mage_Core_Controller_Front_Action
+{
+    public function runAction()
+    {
+        $res = $this->getResponse();
+        $res->setHeader('Content-Type', 'application/json', true);
+        $res->setHeader('Cache-Control', 'no-store', true);
+
+        $token    = (string) $this->getRequest()->getParam('token');
+        $expected = (string) Mage::getStoreConfig('mmd_reindex/api/token');
+        if ($expected === '' || !hash_equals($expected, $token)) {
+            $res->setHttpResponseCode(403)->setBody(json_encode(array('ok' => false, 'error' => 'forbidden')));
+            return;
+        }
+
+        $flush = (bool) $this->getRequest()->getParam('flush');
+        try {
+            if ($flush) {
+                Mage::app()->cleanCache();
+                Mage::app()->getCacheInstance()->flush();
+            }
+            $results = Mage::getModel('mmd_reindex/cron')->run('api');
+            $failed  = array_filter($results, function ($v) { return strpos((string) $v, 'fail') === 0; });
+            $res->setBody(json_encode(array(
+                'ok'        => empty($failed),
+                'flushed'   => $flush,
+                'reindexed' => count($results),
+                'failed'    => count($failed),
+                'results'   => $results,
+            ), JSON_PRETTY_PRINT));
+        } catch (Exception $e) {
+            Mage::logException($e);
+            $res->setHttpResponseCode(500)->setBody(json_encode(array('ok' => false, 'error' => $e->getMessage())));
+        }
+    }
+}

app/code/local/MMD/Reindex/etc/config.xml

@@ -42,6 +42,17 @@
             </adminhtml>
         </routers>
     </admin>
+    <frontend>
+        <routers>
+            <mmd_reindex>
+                <use>standard</use>
+                <args>
+                    <module>MMD_Reindex</module>
+                    <frontName>reindex</frontName>
+                </args>
+            </mmd_reindex>
+        </routers>
+    </frontend>
     <crontab>
         <jobs>
             <mmd_reindex_scheduled>
@@ -52,5 +63,10 @@
     </crontab>
     <default>
         <crontab><mmd_reindex><schedule>0 3 * * *</schedule></mmd_reindex></crontab>
+        <mmd_reindex>
+            <api>
+                <token>5e9b1d7c3a4f86e20b9c7d1a4f8e6c3b</token>
+            </api>
+        </mmd_reindex>
     </default>
 </config>