<?php

declare(strict_types=1);

namespace Sentinelo\Scanner\Checks;

use Sentinelo\AgentCore\Scanner\Check\AuthorEnumerationScorer;
use Sentinelo\AgentCore\Scanner\CheckResult;

/**
 * Thin WordPress adapter: probes `?author=1` without following redirects and
 * delegates enumeration detection to the framework-agnostic scorer.
 */
class AuthorEnumerationCheck
{
    public function run(): CheckResult
    {
        try {
            $response = wp_remote_get(site_url('/?author=1'), [
                'timeout'     => 8,
                'redirection' => 0,
            ]);
            if (is_wp_error($response)) {
                return new CheckResult(
                    'author_enumeration',
                    'skip',
                    3,
                    3,
                    'info',
                    ['error' => $response->get_error_message()],
                    'Vérification ignorée : ' . $response->get_error_message()
                );
            }

            $code = (int) wp_remote_retrieve_response_code($response);
            $location = (string) wp_remote_retrieve_header($response, 'location');

            return AuthorEnumerationScorer::score($code, $location);
        } catch (\Throwable $e) {
            return new CheckResult(
                'author_enumeration',
                'skip',
                3,
                3,
                'info',
                ['error' => $e->getMessage()],
                'Vérification ignorée (exception interne) : ' . $e->getMessage()
            );
        }
    }
}