<?php

declare(strict_types=1);

namespace Sentinelo\Scanner\Checks;

use Sentinelo\AgentCore\Scanner\Check\SecurityHeadersScorer;
use Sentinelo\AgentCore\Scanner\CheckResult;

/**
 * Thin WordPress adapter: fetches the home page headers and delegates the weighted
 * scoring to the framework-agnostic SecurityHeadersScorer.
 */
class SecurityHeadersCheck
{
    public function run(): CheckResult
    {
        try {
            $response = wp_remote_get(site_url(), ['timeout' => 10]);
            if (is_wp_error($response)) {
                return new CheckResult(
                    'security_headers',
                    'skip',
                    0,
                    8,
                    'medium',
                    ['error' => 'Impossible de récupérer les headers'],
                    'Vérifiez que le site est accessible'
                );
            }

            $headers = wp_remote_retrieve_headers($response);
            $headers = is_array($headers) ? $headers : $headers->getAll();
            $headers = array_change_key_case($headers, CASE_LOWER);

            return SecurityHeadersScorer::score($headers);
        } catch (\Throwable $e) {
            return new CheckResult(
                'security_headers',
                'skip',
                8,
                8,
                'info',
                ['error' => $e->getMessage()],
                'Vérification ignorée (exception interne) : ' . $e->getMessage()
            );
        }
    }
}