<?php

declare(strict_types=1);

namespace Sentinelo\Scanner\Checks;

use Sentinelo\AgentCore\Scanner\Check\RestApiExposureScorer;
use Sentinelo\AgentCore\Scanner\CheckResult;

/**
 * Thin WordPress adapter: fetches the users REST endpoint and delegates scoring to
 * the framework-agnostic RestApiExposureScorer.
 */
class RestApiExposureCheck
{
    public function run(): CheckResult
    {
        $endpoint = '/wp-json/wp/v2/users';

        try {
            $response = wp_remote_get(site_url($endpoint), ['timeout' => 10]);
            $code = is_wp_error($response) ? 0 : (int) wp_remote_retrieve_response_code($response);
            $body = is_wp_error($response) ? '' : (string) wp_remote_retrieve_body($response);

            return RestApiExposureScorer::score($code, $body, $endpoint);
        } catch (\Throwable $e) {
            return new CheckResult(
                'rest_api_exposure',
                'skip',
                3,
                3,
                'info',
                ['error' => $e->getMessage()],
                'Vérification ignorée (exception interne) : ' . $e->getMessage()
            );
        }
    }
}