<?php

declare(strict_types=1);

namespace Sentinelo\Scanner\Checks;

use Sentinelo\AgentCore\Scanner\Check\DirectoryListingScorer;
use Sentinelo\AgentCore\Scanner\CheckResult;

/**
 * Thin WordPress adapter: fetches the directories to probe and delegates the
 * autoindex detection + scoring to the framework-agnostic DirectoryListingScorer.
 */
class DirectoryListingCheck
{
    public function run(): CheckResult
    {
        try {
            $urls = [
                content_url('/'),
                includes_url(),
            ];

            $uploadDir = wp_upload_dir(null, false);
            if (empty($uploadDir['error']) && !empty($uploadDir['baseurl'])) {
                $urls[] = trailingslashit($uploadDir['baseurl']);
            }

            $responses = [];
            foreach ($urls as $url) {
                $response = wp_remote_get($url, ['timeout' => 10]);
                if (is_wp_error($response)) {
                    continue;
                }
                $responses[] = [
                    'url'  => $url,
                    'code' => (int) wp_remote_retrieve_response_code($response),
                    'body' => (string) wp_remote_retrieve_body($response),
                ];
            }

            return DirectoryListingScorer::score($responses);
        } catch (\Throwable $e) {
            return new CheckResult(
                'directory_listing',
                'skip',
                2,
                2,
                'info',
                ['error' => $e->getMessage()],
                'Vérification ignorée (exception interne) : ' . $e->getMessage()
            );
        }
    }
}