@extends('layouts.app')

@section('content')
  <div class="container">

    {{-- ===== 頁首：標題 + 主機摘要 ===== --}}
    <div class="d-flex justify-content-between align-items-start mb-4">
      <div>
        <h2 class="mb-1"><i class="bi bi-server me-2"></i>{{ $host->name }}</h2>
        <p class="text-muted mb-0">
          {{ $reportData['os_release']['PRETTY_NAME'] ?? '' }}
          @if (!empty($reportData['ip']))・IP：{{ $reportData['ip'] }}@endif
          @if (!empty($reportData['uptime']))・{{ $reportData['uptime'] }}@endif
        </p>
        <small class="text-muted">
          報告時間：{{ $reportDate }}
          @if ($host->agent_last_report_at)
            <span id="reportAgo" class="ms-2 badge"
                  data-ts="{{ $host->agent_last_report_at->timestamp }}"
                  style="font-size:.72rem;"></span>
          @endif
        </small>
      </div>
      <div class="d-flex gap-2">
        <a href="{{ route('hosts.exportDocx', $host) }}" class="btn btn-danger btn-sm">
          <i class="bi bi-file-earmark-word"></i> Word
        </a>
        <a href="{{ route('hosts.exportPdf', $host) }}" class="btn btn-success btn-sm">
          <i class="bi bi-file-earmark-pdf"></i> PDF
        </a>
        <a href="{{ route('hosts.edit', $host) }}" class="btn btn-outline-secondary btn-sm">
          <i class="bi bi-pencil"></i> 編輯
        </a>
        <form method="POST" action="{{ route('hosts.destroy', $host) }}" class="d-inline m-0"
              onsubmit="return confirm('確定刪除主機「{{ addslashes($host->name) }}」？此操作無法復原。')">
          @csrf @method('DELETE')
          <button type="submit" class="btn btn-outline-danger btn-sm">
            <i class="bi bi-trash"></i> 刪除
          </button>
        </form>
        <a href="{{ route('hosts.index') }}" class="btn btn-outline-secondary btn-sm">
          <i class="bi bi-arrow-left"></i> 返回
        </a>
      </div>
    </div>

    @if (!empty($reportData['error']))
      <div class="alert alert-danger"><i class="bi bi-exclamation-triangle me-1"></i> {{ $reportData['error'] }}</div>
    @endif

    {{-- ===== 完成度進度條 ===== --}}
    @if (empty($reportData['error']))
      @php
        $progressColor = match (true) {
            $completionRate >= 90 => 'bg-success',
            $completionRate >= 70 => 'bg-info',
            $completionRate >= 50 => 'bg-warning',
            default => 'bg-danger',
        };
      @endphp
      <div class="progress mb-4" style="height: 8px;">
        <div class="progress-bar {{ $progressColor }}" style="width: {{ $completionRate }}%"></div>
      </div>
    @endif

    {{-- ====================================================
         資安合規總覽
    ===================================================== --}}
    @php
      $rootDisk = null;
      foreach (($reportData['disk_info'] ?? []) as $disk) {
          if (($disk['mounted_on'] ?? '') === '/') { $rootDisk = $disk; break; }
      }
      $memPercent = 0;
      if (!empty($reportData['memory']['total_gb']) && $reportData['memory']['total_gb'] > 0) {
          $memPercent = round($reportData['memory']['used_gb'] / $reportData['memory']['total_gb'] * 100);
      }
      $diskPercent = $rootDisk ? intval($rootDisk['use'] ?? '0') : 0;

      // 告警閾值（主機個別設定 or 全域預設）
      $alertCpu  = $host->cpu_alert_threshold  ?? (int)\App\Models\SystemSetting::get('host_alert_cpu',  85);
      $alertMem  = $host->mem_alert_threshold  ?? (int)\App\Models\SystemSetting::get('host_alert_mem',  85);
      $alertDisk = $host->disk_alert_threshold ?? (int)\App\Models\SystemSetting::get('host_alert_disk', 80);

      $ssh = $reportData['ssh_config'] ?? [];
      $pwd = $reportData['password_policy'] ?? [];
      $secChecks = [
          ['name' => '防火牆', 'pass' => ($reportData['firewall_status'] ?? '') === 'active', 'icon' => 'bi-bricks'],
          ['name' => 'SSH Root 禁止', 'pass' => in_array($ssh['permit_root_login'] ?? '', ['no', 'prohibit-password', 'without-password', 'forced-commands-only']), 'icon' => 'bi-terminal'],
          ['name' => 'fail2ban', 'pass' => ($reportData['fail2ban_status'] ?? '') === 'active', 'icon' => 'bi-shield-lock'],
          ['name' => '掃毒軟體', 'pass' => !empty($reportData['antivirus_installed']), 'icon' => 'bi-bug'],
          ['name' => 'NTP 校時', 'pass' => ($reportData['ntp_status'] ?? '') === 'active', 'icon' => 'bi-clock'],
          ['name' => '密碼複雜度', 'pass' => !empty($pwd['pam_pwquality']), 'icon' => 'bi-key'],
          ['name' => '安全更新', 'pass' => ($reportData['security_updates'] ?? 0) == 0, 'icon' => 'bi-download'],
          ['name' => '存取控制', 'pass' => in_array(strtolower($reportData['mac_status'] ?? ''), ['enabled', 'enforcing']), 'icon' => 'bi-lock'],
      ];
      $passCount = count(array_filter($secChecks, fn($c) => $c['pass']));
    @endphp

    <div class="card border-0 shadow-sm mb-4">
      <div class="card-header bg-dark text-white d-flex justify-content-between align-items-center">
        <span><i class="bi bi-shield-check me-1"></i> 資安合規檢查</span>
        <span class="badge {{ $passCount >= 6 ? 'bg-success' : ($passCount >= 4 ? 'bg-warning' : 'bg-danger') }}">
          {{ $passCount }}/{{ count($secChecks) }} 通過
        </span>
      </div>
      <div class="card-body">
        <div class="row g-2">
          @foreach ($secChecks as $chk)
            <div class="col-md-3 col-sm-6">
              <div class="d-flex align-items-center p-2 rounded {{ $chk['pass'] ? 'bg-success bg-opacity-10' : 'bg-danger bg-opacity-10' }}">
                <i class="bi {{ $chk['icon'] }} fs-5 me-2 {{ $chk['pass'] ? 'text-success' : 'text-danger' }}"></i>
                <div>
                  <div class="fw-bold" style="font-size:13px">{{ $chk['name'] }}</div>
                  <small class="{{ $chk['pass'] ? 'text-success' : 'text-danger' }}">
                    {{ $chk['pass'] ? 'PASS' : 'FAIL' }}
                  </small>
                </div>
              </div>
            </div>
          @endforeach
        </div>
      </div>
    </div>

    {{-- ====================================================
         1-20 詳細檢查項目
    ===================================================== --}}
    <div class="row g-3">

      {{-- 1. 基本系統資訊 --}}
      <div class="col-lg-6">
        <div class="card border-0 shadow-sm h-100">
          <div class="card-header bg-success bg-opacity-10"><i class="bi bi-info-circle me-1 text-success"></i> 1. 基本系統資訊</div>
          <div class="card-body p-0">
            <div class="table-responsive"><table class="table table-sm table-hover mb-0">
              <tr><td class="text-muted ps-3" style="width:130px">作業系統</td><td>{{ $reportData['os_release']['PRETTY_NAME'] ?? ($reportData['os'] ?? 'N/A') }}</td></tr>
              <tr><td class="text-muted ps-3">核心版本</td><td>{{ $reportData['kernel_version'] ?? 'N/A' }}</td></tr>
              <tr><td class="text-muted ps-3">主機名稱</td><td>{{ $reportData['hostname'] ?? 'N/A' }}</td></tr>
              <tr><td class="text-muted ps-3">IP 位址</td><td>{{ $reportData['ip'] ?? 'N/A' }}</td></tr>
              <tr><td class="text-muted ps-3">時區</td><td>{{ $reportData['timezone'] ?? 'N/A' }}</td></tr>
              <tr><td class="text-muted ps-3">運行時間</td><td>{{ $reportData['uptime'] ?? 'N/A' }}</td></tr>
            </table></div>
          </div>
        </div>
      </div>

      {{-- 2. 硬體資訊 --}}
      <div class="col-lg-6">
        <div class="card border-0 shadow-sm h-100">
          <div class="card-header bg-success bg-opacity-10"><i class="bi bi-cpu me-1 text-success"></i> 2. 硬體資訊</div>
          <div class="card-body p-0">
            <div class="table-responsive"><table class="table table-sm table-hover mb-0">
              <tr><td class="text-muted ps-3" style="width:130px">CPU 型號</td><td>{{ $reportData['cpu_model'] ?? 'N/A' }}</td></tr>
              <tr><td class="text-muted ps-3">CPU 數量</td><td>{{ $reportData['cpu_count'] ?? 'N/A' }} 核心</td></tr>
              <tr>
                <td class="text-muted ps-3">記憶體</td>
                <td>
                  @if(isset($reportData['memory']))
                    {{ $reportData['memory']['total_gb'] ?? '?' }} GB（已用 {{ $reportData['memory']['used_gb'] ?? '?' }} GB / 可用 {{ $reportData['memory']['free_gb'] ?? '?' }} GB）
                    @if($memPercent >= $alertMem)
                      <span class="badge bg-danger-subtle text-danger border border-danger-subtle ms-1" style="font-size:.7rem;">
                        <i class="bi bi-exclamation-triangle-fill me-1"></i>超過告警閾值 {{ $alertMem }}%
                      </span>
                    @endif
                    <div class="progress mt-1" style="height:5px;">
                      <div class="progress-bar {{ $memPercent >= $alertMem ? 'bg-danger' : ($memPercent >= $alertMem * 0.85 ? 'bg-warning' : 'bg-success') }}" style="width:{{ $memPercent }}%"></div>
                    </div>
                  @else N/A @endif
                </td>
              </tr>
              @php $alertThreshold = $alertDisk; @endphp
              @forelse(collect($reportData['disk_info'] ?? [])->reject(fn($d) => str_starts_with($d['filesystem'] ?? '', '/dev/loop') || str_starts_with($d['mounted_on'] ?? '', '/snap/'))->values() as $disk)
                @php $pct = intval($disk['percent'] ?? $disk['use'] ?? 0); @endphp
                <tr>
                  <td class="text-muted ps-3" style="width:130px">
                    {{ $disk['mounted_on'] ?? '?' }}
                    @if($pct >= $alertThreshold)
                      <i class="bi bi-exclamation-triangle-fill text-danger ms-1" title="超過告警閾值 {{ $alertThreshold }}%"></i>
                    @endif
                  </td>
                  <td>
                    <div class="d-flex justify-content-between small mb-1">
                      <span class="{{ $pct >= $alertThreshold ? 'text-danger fw-semibold' : 'text-muted' }}">
                        已用 {{ $disk['used'] ?? '?' }} / 總計 {{ $disk['size'] ?? '?' }}
                      </span>
                      <span class="fw-semibold {{ $pct >= $alertThreshold ? 'text-danger' : ($pct >= $alertThreshold * 0.85 ? 'text-warning' : 'text-success') }}">
                        {{ $pct }}%
                      </span>
                    </div>
                    <div class="progress" style="height:6px;">
                      <div class="progress-bar {{ $pct >= $alertThreshold ? 'bg-danger' : ($pct >= $alertThreshold * 0.85 ? 'bg-warning' : 'bg-success') }}"
                           style="width:{{ min($pct,100) }}%"></div>
                    </div>
                    <div class="text-muted mt-1" style="font-size:.7rem;">
                      {{ $disk['filesystem'] ?? '' }}　剩餘 {{ $disk['avail'] ?? '?' }}
                    </div>
                  </td>
                </tr>
              @empty
                <tr><td class="text-muted ps-3">磁碟</td><td>N/A</td></tr>
              @endforelse
            </table></div>
            @php $overThreshold = collect($reportData['disk_info'] ?? [])->reject(fn($d) => str_starts_with($d['filesystem'] ?? '', '/dev/loop') || str_starts_with($d['mounted_on'] ?? '', '/snap/'))->filter(fn($d) => intval($d['percent'] ?? $d['use'] ?? 0) >= $alertThreshold)->count(); @endphp
            @if($overThreshold > 0)
              <div class="alert alert-danger m-2 py-2 small mb-0">
                <i class="bi bi-exclamation-triangle-fill me-1"></i>
                {{ $overThreshold }} 個磁碟分割區超過告警閾值（{{ $alertThreshold }}%）
              </div>
            @endif
          </div>
        </div>
      </div>

      {{-- 3. 網路與服務資訊 --}}
      <div class="col-lg-6">
        <div class="card border-0 shadow-sm h-100">
          <div class="card-header bg-success bg-opacity-10"><i class="bi bi-box-seam me-1 text-success"></i> 3. 網路與服務資訊</div>
          <div class="card-body p-0">
            @php
              $apacheRaw  = $reportData['apache_version'] ?? '';
              $nginxRaw   = $reportData['nginx_version']  ?? '';
              $apacheVer  = preg_match('/Apache\/([\d\.]+)/', $apacheRaw, $m) ? $m[1] : $apacheRaw;
              $nginxVer   = $nginxRaw;
              if ($apacheVer) {
                  $webLabel = 'Apache';
                  $webVer   = $apacheVer;
              } elseif ($nginxVer) {
                  $webLabel = 'Nginx';
                  $webVer   = $nginxVer;
              } else {
                  $webLabel = 'Web Server';
                  $webVer   = 'N/A';
              }
              $phpVer    = $reportData['php_version']    ?? '';
              $dotnetVer = $reportData['dotnet_version'] ?? '';
              if ($phpVer) {
                  $langLabel = 'PHP';
                  $langVer   = $phpVer;
              } elseif ($dotnetVer) {
                  $langLabel = '.NET';
                  $langVer   = $dotnetVer;
              } else {
                  $langLabel = 'PHP / .NET';
                  $langVer   = 'N/A';
              }
              $versions = [
                  $webLabel  => $webVer,
                  $langLabel => $langVer,
                  'MySQL'   => preg_match('/([\d\.]+)/', $reportData['mysql_version'] ?? '', $m) ? $m[1] : 'N/A',
                  'OpenSSL' => $reportData['openssl_version'] ?? 'N/A',
                  'OpenSSH' => $reportData['openssh_version'] ?? 'N/A',
                  'Python'  => $reportData['python_version'] ?? 'N/A',
                  'GCC'     => $reportData['gcc_version'] ?? 'N/A',
              ];
            @endphp
            <div class="table-responsive"><table class="table table-sm table-hover mb-0">
              @foreach ($versions as $name => $ver)
                <tr><td class="text-muted ps-3" style="width:120px">{{ $name }}</td><td class="fw-bold">{{ $ver }}</td></tr>
              @endforeach
              <tr>
                <td class="text-muted ps-3">NTP 校時</td>
                <td>
                  @if (($reportData['ntp_status'] ?? '') === 'active')
                    <span class="badge bg-success">已啟用</span>
                  @else
                    <span class="badge bg-danger">{{ $reportData['ntp_status'] ?? 'N/A' }}</span>
                  @endif
                  @if (!empty($reportData['ntp_servers']))
                    <small class="text-muted ms-1">{{ implode(', ', $reportData['ntp_servers']) }}</small>
                  @endif
                </td>
              </tr>
            </table></div>
          </div>
        </div>
      </div>

      {{-- 4. 帳號管理（僅特權帳號摘要） --}}
      <div class="col-lg-6">
        <div class="card border-0 shadow-sm h-100">
          <div class="card-header bg-warning bg-opacity-10"><i class="bi bi-people me-1 text-warning"></i> 4. 帳號管理</div>
          <div class="card-body">
            <p class="mb-1"><strong>特權帳號（sudo）：</strong>
              @foreach (($reportData['privileged_accounts'] ?? []) as $acct)
                <span class="badge bg-dark me-1">{{ $acct }}</span>
              @endforeach
              @if (empty($reportData['privileged_accounts'])) <span class="text-muted">N/A</span> @endif
            </p>
            <small class="text-muted">詳細帳號安全檢查請見第 15 項</small>
          </div>
        </div>
      </div>

      {{-- 5. 掃毒資訊 --}}
      <div class="col-lg-6">
        <div class="card border-0 shadow-sm h-100">
          <div class="card-header bg-danger bg-opacity-10"><i class="bi bi-bug me-1 text-danger"></i> 5. 掃毒資訊</div>
          <div class="card-body">
            <p class="mb-1"><strong>掃毒軟體：</strong>
              @if (!empty($reportData['antivirus_installed']))
                <span class="badge bg-success">已安裝</span>
              @else
                <span class="badge bg-danger">未安裝</span>
              @endif
            </p>
            <p class="mb-1"><strong>版本：</strong> {{ $reportData['antivirus_version'] ?? 'N/A' }}</p>
            @if (!empty($reportData['antivirus_result']) && $reportData['antivirus_result'] !== '無掃毒結果')
              <details class="mt-2">
                <summary class="text-muted" style="cursor:pointer">掃描結果（點擊展開）</summary>
                <pre class="bg-light p-2 rounded mt-1 mb-0" style="font-size:11px; max-height:200px; overflow-y:auto;">{{ $reportData['antivirus_result'] }}</pre>
              </details>
            @endif
          </div>
        </div>
      </div>

      {{-- 6. 防火牆設定 --}}
      <div class="col-lg-6">
        <div class="card border-0 shadow-sm h-100">
          <div class="card-header bg-danger bg-opacity-10"><i class="bi bi-bricks me-1 text-danger"></i> 6. 防火牆設定</div>
          <div class="card-body">
            <div class="d-flex justify-content-between mb-2">
              <span><strong>類型：</strong>{{ strtoupper($reportData['firewall_type'] ?? 'N/A') }}</span>
              <span>
                @if (($reportData['firewall_status'] ?? '') === 'active')
                  <span class="badge bg-success">已啟用</span>
                @else
                  <span class="badge bg-danger">{{ $reportData['firewall_status'] ?? 'N/A' }}</span>
                @endif
              </span>
            </div>
            @if (!empty($reportData['firewall_rules']))
              <details>
                <summary class="text-muted" style="cursor:pointer">防火牆規則（點擊展開）</summary>
                <pre class="bg-dark text-light p-2 rounded mt-1 mb-0" style="font-size:11px; max-height:250px; overflow-y:auto;">{{ $reportData['firewall_rules'] }}</pre>
              </details>
            @endif
          </div>
        </div>
      </div>

      {{-- 7. SSH 安全設定 --}}
      <div class="col-lg-6">
        <div class="card border-0 shadow-sm h-100">
          <div class="card-header bg-info bg-opacity-10"><i class="bi bi-terminal me-1 text-info"></i> 7. SSH 安全設定</div>
          <div class="card-body p-0">
            <div class="table-responsive"><table class="table table-sm table-hover mb-0">
              <tr><td class="text-muted ps-3" style="width:140px">Port</td><td><code>{{ $ssh['port'] ?? '22' }}</code></td></tr>
              <tr>
                <td class="text-muted ps-3">Root 登入</td>
                <td>
                  @php $rl = $ssh['permit_root_login'] ?? ''; @endphp
                  @if ($rl === 'no')
                    <span class="badge bg-success">已禁止（no）</span>
                  @elseif (in_array($rl, ['prohibit-password', 'without-password']))
                    <span class="badge bg-warning text-dark">僅金鑰（{{ $rl }}）</span>
                  @elseif ($rl === 'forced-commands-only')
                    <span class="badge bg-warning text-dark">僅指定指令（forced-commands-only）</span>
                  @else
                    <span class="badge bg-danger">{{ $rl ?: 'unknown' }}</span>
                  @endif
                </td>
              </tr>
              <tr>
                <td class="text-muted ps-3">密碼認證</td>
                <td>
                  @if (($ssh['password_auth'] ?? '') === 'no')
                    <span class="badge bg-success">已關閉（僅金鑰）</span>
                  @else
                    <span class="badge bg-warning text-dark">{{ $ssh['password_auth'] ?? 'unknown' }}</span>
                  @endif
                </td>
              </tr>
              <tr><td class="text-muted ps-3">公鑰認證</td><td>{{ $ssh['pubkey_auth'] ?? 'unknown' }}</td></tr>
              <tr><td class="text-muted ps-3">最大嘗試次數</td><td>{{ $ssh['max_auth_tries'] ?? 'unknown' }}</td></tr>
            </table></div>
          </div>
        </div>
      </div>

      {{-- 8. 密碼政策 --}}
      <div class="col-lg-6">
        <div class="card border-0 shadow-sm h-100">
          <div class="card-header bg-primary bg-opacity-10"><i class="bi bi-key me-1 text-primary"></i> 8. 密碼政策</div>
          <div class="card-body p-0">
            <div class="table-responsive"><table class="table table-sm table-hover mb-0">
              <tr><td class="text-muted ps-3" style="width:160px">最長有效天數</td><td>{{ $pwd['max_days'] ?? 'N/A' }} 天</td></tr>
              <tr><td class="text-muted ps-3">最短更改間隔</td><td>{{ $pwd['min_days'] ?? 'N/A' }} 天</td></tr>
              <tr><td class="text-muted ps-3">密碼最短長度</td><td>{{ $pwd['min_length'] ?? ($pwd['pam_minlen'] ?? 'N/A') }}</td></tr>
              <tr><td class="text-muted ps-3">到期警告天數</td><td>{{ $pwd['warn_age'] ?? 'N/A' }} 天</td></tr>
              <tr>
                <td class="text-muted ps-3">密碼複雜度</td>
                <td>
                  @if (!empty($pwd['pam_pwquality']))
                    <span class="badge bg-success">已啟用（pam_pwquality）</span>
                  @else
                    <span class="badge bg-danger">未設定</span>
                  @endif
                </td>
              </tr>
            </table></div>
          </div>
        </div>
      </div>

      {{-- 9. fail2ban 入侵防護 --}}
      <div class="col-lg-6">
        <div class="card border-0 shadow-sm h-100">
          <div class="card-header bg-secondary bg-opacity-10"><i class="bi bi-shield-lock me-1 text-secondary"></i> 9. fail2ban 入侵防護</div>
          <div class="card-body">
            <p class="mb-1"><strong>狀態：</strong>
              @if (($reportData['fail2ban_status'] ?? '') === 'active')
                <span class="badge bg-success">已啟用</span>
              @else
                <span class="badge bg-danger">{{ $reportData['fail2ban_status'] ?? 'N/A' }}</span>
              @endif
            </p>
            @if (!empty($reportData['fail2ban_jails']))
              <details class="mt-1">
                <summary class="text-muted" style="cursor:pointer">啟用的 Jail</summary>
                <pre class="bg-light p-2 rounded mt-1 mb-0" style="font-size:11px;">{{ $reportData['fail2ban_jails'] }}</pre>
              </details>
            @endif
          </div>
        </div>
      </div>

      {{-- 10. 系統更新狀態 --}}
      <div class="col-lg-6">
        <div class="card border-0 shadow-sm h-100">
          <div class="card-header bg-secondary bg-opacity-10"><i class="bi bi-download me-1 text-secondary"></i> 10. 系統更新狀態</div>
          <div class="card-body p-0">
            <div class="table-responsive"><table class="table table-sm table-hover mb-0">
              <tr><td class="text-muted ps-3" style="width:140px">上次更新</td><td>{{ $reportData['last_update'] ?? 'N/A' }}</td></tr>
              <tr>
                <td class="text-muted ps-3">待更新套件</td>
                <td>
                  @if (($reportData['pending_updates'] ?? 0) == 0)
                    <span class="badge bg-success">已是最新</span>
                  @else
                    <span class="badge bg-warning text-dark">{{ $reportData['pending_updates'] }} 個待更新</span>
                  @endif
                </td>
              </tr>
              <tr>
                <td class="text-muted ps-3">安全更新</td>
                <td>
                  @if (($reportData['security_updates'] ?? 0) == 0)
                    <span class="badge bg-success">無待處理</span>
                  @else
                    <span class="badge bg-danger">{{ $reportData['security_updates'] }} 個待處理</span>
                  @endif
                </td>
              </tr>
            </table></div>
          </div>
        </div>
      </div>

      {{-- 11. Web Server 安全設定 --}}
      @if (!empty($reportData['apache_security']))
      @php $as = $reportData['apache_security']; @endphp
      <div class="col-lg-6">
        <div class="card border-0 shadow-sm h-100">
          <div class="card-header bg-success bg-opacity-10"><i class="bi bi-globe me-1 text-success"></i> 11. Apache 安全設定</div>
          <div class="card-body p-0">
            <div class="table-responsive"><table class="table table-sm table-hover mb-0">
              <tr>
                <td class="text-muted ps-3" style="width:140px">ServerTokens</td>
                <td>@if (strtolower($as['server_tokens'] ?? '') === 'prod')<span class="badge bg-success">Prod</span>@else<span class="badge bg-warning text-dark">{{ $as['server_tokens'] ?? 'unknown' }}</span>@endif</td>
              </tr>
              <tr>
                <td class="text-muted ps-3">ServerSignature</td>
                <td>@if (strtolower($as['server_signature'] ?? '') === 'off')<span class="badge bg-success">Off</span>@else<span class="badge bg-warning text-dark">{{ $as['server_signature'] ?? 'unknown' }}</span>@endif</td>
              </tr>
              <tr>
                <td class="text-muted ps-3">TraceEnable</td>
                <td>@if (strtolower($as['trace_enable'] ?? '') === 'off')<span class="badge bg-success">Off</span>@else<span class="badge bg-warning text-dark">{{ $as['trace_enable'] ?? 'unknown' }}</span>@endif</td>
              </tr>
            </table></div>
          </div>
        </div>
      </div>
      @elseif (!empty($reportData['nginx_security']))
      @php $ns = $reportData['nginx_security']; @endphp
      <div class="col-lg-6">
        <div class="card border-0 shadow-sm h-100">
          <div class="card-header bg-success bg-opacity-10"><i class="bi bi-globe me-1 text-success"></i> 11. Nginx 安全設定</div>
          <div class="card-body p-0">
            <div class="table-responsive"><table class="table table-sm table-hover mb-0">
              <tr>
                <td class="text-muted ps-3" style="width:140px">server_tokens</td>
                <td>@if (strtolower($ns['server_tokens'] ?? '') === 'off')<span class="badge bg-success">off</span>@else<span class="badge bg-warning text-dark">{{ $ns['server_tokens'] ?? 'unknown' }}</span>@endif</td>
              </tr>
              <tr>
                <td class="text-muted ps-3">gzip</td>
                <td>@if (strtolower($ns['gzip'] ?? '') === 'on')<span class="badge bg-success">on</span>@else<span class="badge bg-secondary">{{ $ns['gzip'] ?? 'unknown' }}</span>@endif</td>
              </tr>
              <tr>
                <td class="text-muted ps-3">autoindex</td>
                <td>@if (strtolower($ns['autoindex'] ?? '') === 'off')<span class="badge bg-success">off</span>@else<span class="badge bg-warning text-dark">{{ $ns['autoindex'] ?? 'unknown' }}</span>@endif</td>
              </tr>
            </table></div>
          </div>
        </div>
      </div>
      @endif

      {{-- 11b. 網站安全標頭 + SSL 憑證 + 錯誤日誌 --}}
      @php
        $wsSec = $reportData['web_service'] ?? null;
        $wsSecName = $wsSec['name'] ?? '';
      @endphp
      @if (!empty($wsSecName) && ($wsSec['status'] ?? '') === 'active')
      @php
        $hdr      = $wsSec['http_headers'] ?? [];
        $sslDays  = isset($wsSec['ssl_cert_days_left']) ? intval($wsSec['ssl_cert_days_left']) : -1;
        $sslDate  = $wsSec['ssl_cert_expiry'] ?? '';
        $errCount = intval($wsSec['error_count'] ?? 0);
        $errSamp  = $wsSec['error_sample'] ?? '';
        $hdrRows  = [
          'Content-Security-Policy'   => $hdr['csp'] ?? '',
          'Strict-Transport-Security' => $hdr['hsts'] ?? '',
          'X-Frame-Options'           => $hdr['x_frame_options'] ?? '',
          'X-Content-Type-Options'    => $hdr['x_content_type_options'] ?? '',
          'X-XSS-Protection'          => $hdr['x_xss_protection'] ?? '',
          'Referrer-Policy'           => $hdr['referrer_policy'] ?? '',
          'Permissions-Policy'        => $hdr['permissions_policy'] ?? '',
          'Server'                    => $hdr['server'] ?? '',
        ];
      @endphp
      <div class="col-12">
        <div class="card border-0 shadow-sm">
          <div class="card-header bg-success bg-opacity-10">
            <i class="bi bi-shield-check me-1 text-success"></i> 11b. 網站資安檢測（{{ $wsSecName }}）
          </div>
          <div class="card-body p-0">
            <div class="row g-0">
              {{-- HTTP Security Headers --}}
              <div class="col-lg-6 border-end">
                <div class="px-3 pt-2 pb-1"><small class="text-muted fw-bold">HTTP 資安標頭</small></div>
                <div class="table-responsive"><table class="table table-sm table-hover mb-0">
                  @foreach ($hdrRows as $hName => $hVal)
                  @php
                    $isServer = ($hName === 'Server');
                    $hasVersionLeak = $isServer && $hVal && preg_match('/\d+\.\d+/', $hVal);
                    if ($isServer) {
                      $badge = $hVal ? ($hasVersionLeak ? 'bg-warning text-dark' : 'bg-success') : 'bg-secondary';
                      $label = $hVal ?: '未偵測';
                    } else {
                      $badge = $hVal ? 'bg-success' : 'bg-danger';
                      $label = $hVal ?: '未設定';
                    }
                  @endphp
                  <tr>
                    <td class="text-muted ps-3" style="width:200px;font-size:12px">{{ $hName }}</td>
                    <td>
                      @if (strlen($hVal) > 0 && !$isServer)
                        <span class="badge bg-success">已設定</span>
                        <small class="text-muted ms-1" style="font-size:11px" title="{{ $hVal }}">{{ Str::limit($hVal, 60) }}</small>
                      @elseif ($isServer)
                        <span class="badge {{ $badge }}">{{ $label }}</span>
                        @if ($hasVersionLeak)
                          <small class="text-danger ms-1" style="font-size:11px">版本資訊外洩</small>
                        @endif
                      @else
                        <span class="badge bg-danger">未設定</span>
                      @endif
                    </td>
                  </tr>
                  @endforeach
                </table></div>
              </div>
              {{-- SSL + Error Log --}}
              <div class="col-lg-6">
                <div class="px-3 pt-2 pb-1"><small class="text-muted fw-bold">SSL 憑證狀態</small></div>
                <div class="table-responsive"><table class="table table-sm table-hover mb-0">
                  <tr>
                    <td class="text-muted ps-3" style="width:140px">到期日</td>
                    <td>
                      @if ($sslDays >= 0)
                        {{ $sslDate }}
                      @else
                        <span class="badge bg-secondary">未偵測到 HTTPS</span>
                      @endif
                    </td>
                  </tr>
                  @if ($sslDays >= 0)
                  <tr>
                    <td class="text-muted ps-3">剩餘天數</td>
                    <td>
                      @if ($sslDays <= 7)
                        <span class="badge bg-danger">{{ $sslDays }} 天</span>
                      @elseif ($sslDays <= 30)
                        <span class="badge bg-warning text-dark">{{ $sslDays }} 天</span>
                      @else
                        <span class="badge bg-success">{{ $sslDays }} 天</span>
                      @endif
                    </td>
                  </tr>
                  @endif
                  <tr>
                    <td class="text-muted ps-3">HTTP 回應碼</td>
                    <td>
                      @php $code = intval($wsSec['http_code'] ?? 0); @endphp
                      @if ($code >= 200 && $code < 400)
                        <span class="badge bg-success">{{ $code }}</span>
                      @elseif ($code >= 400)
                        <span class="badge bg-danger">{{ $code }}</span>
                      @else
                        <span class="badge bg-secondary">無回應</span>
                      @endif
                      @if (intval($wsSec['response_ms'] ?? 0) > 0)
                        <small class="text-muted ms-1">{{ $wsSec['response_ms'] }}ms</small>
                      @endif
                    </td>
                  </tr>
                </table></div>
                <div class="px-3 pt-2 pb-1 border-top"><small class="text-muted fw-bold">錯誤日誌（最近 200 行）</small></div>
                <div class="table-responsive"><table class="table table-sm mb-0">
                  <tr>
                    <td class="text-muted ps-3" style="width:140px">Error 筆數</td>
                    <td>
                      @if ($errCount >= 50)
                        <span class="badge bg-warning text-dark">{{ $errCount }} 筆</span>
                      @elseif ($errCount > 0)
                        <span class="badge bg-secondary">{{ $errCount }} 筆</span>
                      @else
                        <span class="badge bg-success">無異常</span>
                      @endif
                    </td>
                  </tr>
                  @if ($errSamp)
                  <tr>
                    <td class="text-muted ps-3">範例</td>
                    <td>
                      @foreach (explode('§', $errSamp) as $errLine)
                        @if ($errLine)
                          <div style="font-size:10px;color:#6b7280;word-break:break-all">{{ Str::limit($errLine, 120) }}</div>
                        @endif
                      @endforeach
                    </td>
                  </tr>
                  @endif
                </table></div>
              </div>
            </div>
          </div>
        </div>
      </div>
      @endif

      {{-- 12. 存取控制機制 --}}
      <div class="col-lg-6">
        <div class="card border-0 shadow-sm h-100">
          <div class="card-header bg-primary bg-opacity-10"><i class="bi bi-lock me-1 text-primary"></i> 12. 存取控制機制</div>
          <div class="card-body p-0">
            <div class="table-responsive"><table class="table table-sm table-hover mb-0">
              <tr><td class="text-muted ps-3" style="width:140px">機制類型</td><td>{{ $reportData['mac_type'] ?? 'N/A' }}</td></tr>
              <tr>
                <td class="text-muted ps-3">狀態</td>
                <td>
                  @if (in_array(strtolower($reportData['mac_status'] ?? ''), ['enabled', 'enforcing']))
                    <span class="badge bg-success">{{ $reportData['mac_status'] }}</span>
                  @else
                    <span class="badge bg-warning text-dark">{{ $reportData['mac_status'] ?? 'N/A' }}</span>
                  @endif
                </td>
              </tr>
            </table></div>
          </div>
        </div>
      </div>

      {{-- 13. Log 管理設定 --}}
      <div class="col-lg-6">
        <div class="card border-0 shadow-sm h-100">
          <div class="card-header bg-secondary bg-opacity-10"><i class="bi bi-journal-text me-1 text-secondary"></i> 13. Log 管理設定</div>
          <div class="card-body p-0">
            <div class="table-responsive"><table class="table table-sm table-hover mb-0">
              <tr><td class="text-muted ps-3" style="width:160px">Logrotate (180天)</td>
                <td>
                  @if (!empty($reportData['log_rotate_180days']))
                    <span class="badge bg-success">已設定</span>
                  @else
                    <span class="badge bg-danger">未設定</span>
                  @endif
                  <small class="text-muted ms-1">{{ $reportData['log_rotate_detail'] ?? '' }}</small>
                </td>
              </tr>
              <tr><td class="text-muted ps-3">Apache Logrotate</td>
                <td>
                  @if (!empty($reportData['apache_logrotate_180days']))
                    <span class="badge bg-success">已設定</span>
                  @else
                    <span class="badge bg-danger">未設定</span>
                  @endif
                  <small class="text-muted ms-1">{{ $reportData['apache_logrotate_detail'] ?? '' }}</small>
                </td>
              </tr>
            </table></div>
          </div>
        </div>
      </div>

      {{-- 14. 螢幕保護設定 --}}
      <div class="col-lg-6">
        <div class="card border-0 shadow-sm h-100">
          <div class="card-header bg-warning bg-opacity-10"><i class="bi bi-display me-1 text-warning"></i> 14. 螢幕保護設定</div>
          <div class="card-body p-0">
            @php
              $rawTimeout = $reportData['screensaver_timeout'] ?? '';
              $humanTimeout = $rawTimeout;
              if (is_string($rawTimeout) && preg_match('/uint32\s+(\d+)/', $rawTimeout, $matches)) {
                  $seconds = intval($matches[1]);
                  $humanTimeout = $seconds . ' 秒（約 ' . round($seconds / 60, 1) . ' 分鐘）';
              }
            @endphp
            <div class="table-responsive"><table class="table table-sm table-hover mb-0">
              <tr><td class="text-muted ps-3" style="width:140px">螢幕保護啟用</td><td>{{ !empty($reportData['screensaver_configured']) ? '已設定' : '未設定' }}</td></tr>
              <tr><td class="text-muted ps-3">等待時間</td><td>{{ $humanTimeout }}</td></tr>
            </table></div>
          </div>
        </div>
      </div>

    </div>{{-- end .row --}}

    {{-- 15. 帳號安全檢查（chage / sudo / 群組）--}}
    @if(!empty($reportData['accounts_detail']))
    <div class="card border-0 shadow-sm mt-3">
      <div class="card-header bg-warning text-dark d-flex justify-content-between">
        <span><i class="bi bi-person-lock me-1"></i> 15. 帳號安全檢查</span>
        <span class="badge bg-dark">{{ count($reportData['accounts_detail']) }} 個帳號（UID≥1000 + root）</span>
      </div>
      <div class="card-body p-0 table-responsive">
        <table class="table table-sm table-striped table-hover mb-0">
          <thead class="table-warning">
            <tr>
              <th class="ps-3">帳號</th>
              <th>Sudo</th>
              <th>Shell</th>
              <th>所屬群組</th>
              <th>最後更改密碼</th>
              <th>密碼到期</th>
              <th>帳號到期</th>
              <th>最大間隔</th>
              <th>最小間隔</th>
              <th>警告天數</th>
            </tr>
          </thead>
          <tbody>
            @foreach($reportData['accounts_detail'] as $acctDetail)
              @php $c = $acctDetail['chage'] ?? []; @endphp
              <tr>
                <td class="ps-3 fw-bold">{{ $acctDetail['user'] }}</td>
                <td>
                  @if(!empty($acctDetail['is_sudo']))
                    <span class="badge bg-danger">sudo</span>
                  @else
                    <span class="badge bg-secondary">-</span>
                  @endif
                </td>
                <td><code style="font-size:10px">{{ basename($c['shell'] ?? '') ?: '-' }}</code></td>
                <td><small class="text-muted">{{ $acctDetail['groups'] ?? '-' }}</small></td>
                <td>{{ $c['last_change'] ?? 'N/A' }}</td>
                <td>{!! ($c['pw_expires'] ?? 'never') === 'never' ? '<span class="badge bg-warning text-dark">never</span>' : $c['pw_expires'] !!}</td>
                <td>{!! ($c['acct_expires'] ?? 'never') === 'never' ? '<span class="badge bg-warning text-dark">never</span>' : $c['acct_expires'] !!}</td>
                <td>{!! ($c['max_days'] ?? '99999') === '99999' ? '<span class="badge bg-warning text-dark">99999</span>' : $c['max_days'] !!}</td>
                <td>{{ $c['min_days'] ?? 'N/A' }}</td>
                <td>{{ $c['warn_days'] ?? 'N/A' }}</td>
              </tr>
            @endforeach
          </tbody>
        </table>
      </div>
    </div>
    @endif

    {{-- 16. 最近登入紀錄 --}}
    @if (!empty($reportData['last_logins']))
    <div class="card border-0 shadow-sm mt-3">
      <div class="card-header bg-dark text-white d-flex justify-content-between">
        <span><i class="bi bi-clock-history me-1"></i> 16. 最近登入紀錄（最近 20 筆）</span>
        @if (!empty($reportData['failed_login_count']))
          <span>失敗登入：
            <span class="badge {{ intval($reportData['failed_login_count']) > 100 ? 'bg-danger' : 'bg-success' }}">
              {{ $reportData['failed_login_count'] }} 次
            </span>
          </span>
        @endif
      </div>
      <div class="card-body p-0">
        <pre class="p-3 mb-0" style="font-size:11px; max-height:300px; overflow-y:auto; background:#f8f9fa;">{{ str_replace('§', "\n", $reportData['last_logins'] ?? '') }}</pre>
      </div>
    </div>
    @endif

    {{-- 16. 對外開放 Port 清單 --}}
    @if (!empty($reportData['listening_ports_parsed']))
    <div class="card border-0 shadow-sm mt-3">
      <div class="card-header bg-dark text-white d-flex justify-content-between">
        <span><i class="bi bi-hdd-network me-1"></i> 17. 對外開放 Port 清單</span>
        <span class="badge bg-light text-dark">{{ count($reportData['listening_ports_parsed']) }} 個 Port</span>
      </div>
      <div class="card-body p-0 table-responsive">
        <table class="table table-sm table-striped table-hover mb-0">
          <thead class="table-dark">
            <tr><th class="ps-3" style="width:80px">協定</th><th style="width:80px">Port</th><th>服務</th><th>監聽位址</th></tr>
          </thead>
          <tbody>
            @foreach ($reportData['listening_ports_parsed'] as $p)
              <tr>
                <td class="ps-3"><span class="badge {{ ($p['protocol'] ?? '') === 'TCP' ? 'bg-primary' : 'bg-info' }}">{{ $p['protocol'] ?? '' }}</span></td>
                <td class="fw-bold">{{ $p['port'] ?? '' }}</td>
                <td>{{ $p['service'] ?? $p['process'] ?? '-' }}</td>
                <td><code class="text-muted">{{ $p['address'] ?? '' }}</code></td>
              </tr>
            @endforeach
          </tbody>
        </table>
      </div>
    </div>
    @endif

    {{-- 18. 系統排程（root / www-data） --}}
    @if(!empty($reportData['cron_jobs']))
    <div class="card border-0 shadow-sm mt-3">
      <div class="card-header bg-secondary text-white d-flex justify-content-between">
        <span><i class="bi bi-clock-history me-1"></i> 19. 系統排程（root / www-data）</span>
        <span class="badge bg-light text-dark">{{ count($reportData['cron_jobs']) }} 筆</span>
      </div>
      <div class="card-body p-0 table-responsive">
        <table class="table table-sm table-striped table-hover mb-0">
          <thead class="table-secondary">
            <tr><th class="ps-3" style="width:20%">來源</th><th>排程內容</th></tr>
          </thead>
          <tbody>
            @foreach($reportData['cron_jobs'] as $cj)
              <tr>
                <td class="ps-3"><code>{{ $cj['source'] }}</code></td>
                <td><code>{{ $cj['job'] }}</code></td>
              </tr>
            @endforeach
          </tbody>
        </table>
      </div>
    </div>
    @endif

    {{-- 20. 子站 SSL 憑證資訊 --}}
    @if (!empty($reportData['apache_sites_certificates']['exists']))
    <div class="card border-0 shadow-sm mt-3">
      <div class="card-header bg-success text-white"><i class="bi bi-lock me-1"></i> 20. 子站 SSL 憑證資訊</div>
      <div class="card-body p-0 table-responsive">
        <table class="table table-sm table-striped mb-0">
          <thead class="table-success">
            <tr><th class="ps-3">站台名稱</th><th>憑證檔案</th><th>到期日</th><th>剩餘天數</th></tr>
          </thead>
          <tbody>
            @foreach ($reportData['apache_sites_certificates']['details'] ?? [] as $site)
              @php
                $certExpiry = $site['certificate_expiry'] ?? '';
                $certDays = -1;
                if ($certExpiry && $certExpiry !== 'N/A') {
                    try {
                        $exp = \Carbon\Carbon::parse($certExpiry)->startOfDay();
                        $certDays = (int) now()->startOfDay()->diffInDays($exp, false);
                    } catch (\Throwable $e) {}
                }
              @endphp
              <tr>
                <td class="ps-3">{{ $site['name'] ?? 'N/A' }}</td>
                <td><code style="font-size:11px">{{ $site['certificate_file'] ?? 'N/A' }}</code></td>
                <td>{{ $certExpiry ?: 'N/A' }}</td>
                <td>
                  @if ($certDays >= 0)
                    @if ($certDays <= 7)
                      <span class="badge bg-danger">{{ $certDays }} 天</span>
                    @elseif ($certDays <= 30)
                      <span class="badge bg-warning text-dark">{{ $certDays }} 天</span>
                    @else
                      <span class="badge bg-success">{{ $certDays }} 天</span>
                    @endif
                  @elseif ($certDays < 0 && $certExpiry && $certExpiry !== 'N/A')
                    <span class="badge bg-danger">已過期</span>
                  @else
                    <span class="text-muted">—</span>
                  @endif
                </td>
              </tr>
            @endforeach
          </tbody>
        </table>
      </div>
    </div>
    @endif

    {{-- 21. SSL/TLS 安全檢測 --}}
    @php
      $ws21       = $reportData['web_service'] ?? [];
      $hdr21      = $ws21['http_headers'] ?? [];
      $tls21      = $ws21['ssl_tls'] ?? [];
      $sslDays21  = isset($ws21['ssl_cert_days_left']) ? intval($ws21['ssl_cert_days_left']) : null;
      $wsActive21 = ($ws21['status'] ?? '') === 'active';

      // TLS grade calculation
      $tlsGrade = null;
      if (!empty($tls21)) {
        $g = 'A';
        if ($sslDays21 !== null && $sslDays21 <= 0) {
          $g = 'F';
        } elseif (($tls21['weak_cipher'] ?? false)) {
          $g = 'C';
        } elseif (($tls21['sslv3'] ?? false)) {
          $g = 'C';
        } elseif (($tls21['tls10'] ?? false) || ($tls21['tls11'] ?? false)) {
          $g = 'B';
        } elseif (
          ($tls21['tls13'] ?? false) &&
          ($tls21['forward_secrecy'] ?? false) &&
          !empty($hdr21['hsts'])
        ) {
          $g = 'A+';
        }
        $tlsGrade = $g;
      }
      $gradeColor = match($tlsGrade) {
        'A+' => '#00c853', 'A' => '#43a047',
        'B'  => '#f9a825', 'C' => '#ef6c00',
        'F'  => '#c62828', default => '#9e9e9e',
      };

      // HTTP header checks
    @endphp
    <div class="card border-0 shadow-sm mt-3 mb-4">
      <div class="card-header bg-dark text-white">
        <i class="bi bi-shield-shaded me-1"></i> 21. SSL/TLS 安全分析
        <small class="ms-2 opacity-75">（Agent 本機檢測）</small>
      </div>
      <div class="card-body">
        @if (!$wsActive21)
          <div class="alert alert-secondary mb-0">
            <i class="bi bi-info-circle me-1"></i>此主機未偵測到執行中的 Web 服務，略過 SSL 與標頭檢測。
          </div>
        @elseif (empty($tls21))
          <div class="alert alert-secondary mb-0">
            <i class="bi bi-info-circle me-1"></i>Agent 尚未回報 SSL/TLS 資料，請確認 Agent 已更新並重新執行。
          </div>
        @else
          <div class="row g-3">

            {{-- TLS 等級 --}}
            @if($tlsGrade)
            <div class="col-md-3 d-flex align-items-stretch">
              <div class="card border-0 bg-light w-100 text-center py-3 px-2">
                <div class="small text-muted mb-2">TLS 等級</div>
                <div class="fw-bold" style="font-size:3.5rem;line-height:1;color:{{ $gradeColor }}">{{ $tlsGrade }}</div>
                @if($tlsGrade === 'A+')
                  <small class="text-success mt-2">最佳</small>
                @elseif($tlsGrade === 'A')
                  <small class="text-success mt-2">良好</small>
                @elseif($tlsGrade === 'B')
                  <small class="text-warning mt-2">尚可（有舊協定）</small>
                @elseif($tlsGrade === 'C')
                  <small class="text-danger mt-2">不安全</small>
                @elseif($tlsGrade === 'F')
                  <small class="text-danger mt-2">危險</small>
                @endif
              </div>
            </div>
            @endif

            {{-- 協定支援 + 憑證細節 --}}
            <div class="col-md-9 d-flex align-items-stretch">
              <div class="card border-0 bg-light w-100">
                <div class="card-body pb-2">
                  <h6 class="text-muted mb-3"><i class="bi bi-diagram-3 me-1"></i>協定版本</h6>
                  @php
                    $protos = [
                      'SSLv3'   => ['key'=>'sslv3',  'good'=>false],
                      'TLS 1.0' => ['key'=>'tls10',  'good'=>false],
                      'TLS 1.1' => ['key'=>'tls11',  'good'=>false],
                      'TLS 1.2' => ['key'=>'tls12',  'good'=>true],
                      'TLS 1.3' => ['key'=>'tls13',  'good'=>true],
                    ];
                  @endphp
                  <div class="d-flex flex-column gap-1">
                    @foreach($protos as $pname => $pcfg)
                      @php
                        $supported = $tls21[$pcfg['key']] ?? false;
                        $isGood    = $pcfg['good'];
                        $danger    = $supported && !$isGood;
                        $success   = $supported && $isGood;
                      @endphp
                      <div class="d-flex justify-content-between align-items-center px-2 py-1 rounded"
                           style="background:{{ $danger ? '#fff3cd' : ($success ? '#d1f0da' : '#f1f5f9') }}">
                        <span class="small fw-semibold">{{ $pname }}</span>
                        @if($supported)
                          <span class="badge {{ $isGood ? 'bg-success' : 'bg-danger' }}">
                            <i class="bi {{ $isGood ? 'bi-check-circle' : 'bi-exclamation-triangle' }} me-1"></i>支援
                          </span>
                        @else
                          <span class="badge bg-light text-secondary border">
                            <i class="bi bi-dash-circle me-1"></i>不支援
                          </span>
                        @endif
                      </div>
                    @endforeach
                  </div>

                  @if(!empty($tls21))
                  <div class="mt-3 d-flex flex-column gap-1">
                    @php
                      $features = [
                        ['label'=>'前向保密 (FS)', 'val'=>$tls21['forward_secrecy']??false, 'good'=>true],
                        ['label'=>'弱加密套件',     'val'=>$tls21['weak_cipher']??false,    'good'=>false],
                      ];
                    @endphp
                    @foreach($features as $feat)
                      @php
                        $fOk = $feat['good'] ? $feat['val'] : !$feat['val'];
                      @endphp
                      <div class="d-flex justify-content-between align-items-center px-2 py-1 rounded"
                           style="background:{{ $fOk ? '#d1f0da' : '#fce8e8' }}">
                        <span class="small fw-semibold">{{ $feat['label'] }}</span>
                        <span class="badge {{ $fOk ? 'bg-success' : 'bg-danger' }}">
                          <i class="bi {{ $fOk ? 'bi-check-circle' : 'bi-x-circle' }} me-1"></i>
                          {{ $feat['val'] ? '是' : '否' }}
                        </span>
                      </div>
                    @endforeach
                  </div>
                  @endif

                  @if(!empty($tls21['cert_bits']) || !empty($tls21['cert_sig']) || !empty($tls21['cert_issuer']))
                  <hr class="my-2">
                  <h6 class="text-muted mb-2 small"><i class="bi bi-file-earmark-lock me-1"></i>憑證技術細節</h6>
                  <div class="table-responsive"><table class="table table-sm mb-0" style="font-size:12px">
                    @if(!empty($tls21['cert_bits']))
                    <tr>
                      <th style="width:70px">金鑰長度</th>
                      <td>
                        {{ $tls21['cert_bits'] }} bit
                        @if(intval($tls21['cert_bits']) < 2048)
                          <span class="badge bg-danger ms-1">弱</span>
                        @elseif(intval($tls21['cert_bits']) >= 4096)
                          <span class="badge bg-success ms-1">強</span>
                        @endif
                      </td>
                    </tr>
                    @endif
                    @if(!empty($tls21['cert_sig']))
                    <tr>
                      <th>簽章演算法</th>
                      <td>
                        {{ $tls21['cert_sig'] }}
                        @if(str_contains(strtolower($tls21['cert_sig']), 'sha1'))
                          <span class="badge bg-danger ms-1">已棄用</span>
                        @endif
                      </td>
                    </tr>
                    @endif
                    @if(!empty($tls21['cert_issuer']))
                    <tr>
                      <th>簽發機構</th>
                      <td class="text-muted" style="word-break:break-all;font-size:11px">{{ $tls21['cert_issuer'] }}</td>
                    </tr>
                    @endif
                  </table></div>
                  @endif
                </div>
              </div>
            </div>

          </div>

          {{-- 改善建議 --}}
          @php
            $suggestions = [];

            if (!($tls21['tls13'] ?? false))
              $suggestions[] = [
                'level' => 'warning',
                'icon'  => 'bi-arrow-up-circle',
                'title' => '啟用 TLS 1.3',
                'body'  => 'TLS 1.3 提供更快的握手速度與更強的安全性，且是取得 A+ 等級的必要條件。<br>
                            <strong>Apache：</strong><code>SSLProtocol -all +TLSv1.2 +TLSv1.3</code><br>
                            <strong>Nginx：</strong><code>ssl_protocols TLSv1.2 TLSv1.3;</code>',
              ];

            if (!($tls21['forward_secrecy'] ?? false))
              $suggestions[] = [
                'level' => 'danger',
                'icon'  => 'bi-shield-exclamation',
                'title' => '啟用前向保密（Forward Secrecy）',
                'body'  => '缺少前向保密表示若私鑰洩漏，過去所有加密流量均可被解密。需使用 ECDHE 或 DHE 加密套件。<br>
                            <strong>Apache：</strong><code>SSLCipherSuite ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305</code><br>
                            同時加上 <code>SSLSessionTickets off</code>',
              ];

            if ($tls21['weak_cipher'] ?? false)
              $suggestions[] = [
                'level' => 'danger',
                'icon'  => 'bi-exclamation-octagon',
                'title' => '停用弱加密套件',
                'body'  => '目前伺服器支援已知不安全的加密套件（如 RC4、3DES、NULL、EXPORT 等）。應限制為 ECDHE + AES-GCM 或 ChaCha20-Poly1305 的現代套件。',
              ];

            if ($tls21['sslv3'] ?? false)
              $suggestions[] = [
                'level' => 'danger',
                'icon'  => 'bi-x-octagon',
                'title' => '停用 SSLv3',
                'body'  => 'SSLv3 存在嚴重安全漏洞（POODLE 攻擊），必須明確停用。<br>
                            <strong>Apache：</strong><code>SSLProtocol -all +TLSv1.2 +TLSv1.3</code>',
              ];

            if (($tls21['tls10'] ?? false) || ($tls21['tls11'] ?? false))
              $suggestions[] = [
                'level' => 'warning',
                'icon'  => 'bi-exclamation-triangle',
                'title' => '停用 TLS 1.0 / TLS 1.1',
                'body'  => 'TLS 1.0 與 TLS 1.1 已於 2021 年由 RFC 8996 正式棄用，應停用以避免 BEAST、POODLE 等攻擊。<br>
                            <strong>Apache：</strong><code>SSLProtocol -all +TLSv1.2 +TLSv1.3</code>',
              ];

            if (empty($hdr21['hsts']))
              $suggestions[] = [
                'level' => 'info',
                'icon'  => 'bi-lock',
                'title' => '加入 HSTS 標頭',
                'body'  => 'HSTS（HTTP Strict Transport Security）強制瀏覽器只使用 HTTPS 連線，防止 SSL Stripping 攻擊，也是取得 A+ 等級的必要條件。<br>
                            <strong>Apache：</strong><code>Header always set Strict-Transport-Security "max-age=63072000; includeSubDomains; preload"</code>',
              ];

            if ($sslDays21 !== null && $sslDays21 <= 30 && $sslDays21 > 0)
              $suggestions[] = [
                'level' => 'warning',
                'icon'  => 'bi-calendar-x',
                'title' => 'SSL 憑證即將到期',
                'body'  => "憑證將於 <strong>{$sslDays21} 天後</strong>到期，請儘快更新以避免服務中斷。建議設定自動續期（如 certbot renew）。",
              ];

            if ($sslDays21 !== null && $sslDays21 <= 0)
              $suggestions[] = [
                'level' => 'danger',
                'icon'  => 'bi-calendar-x-fill',
                'title' => 'SSL 憑證已到期',
                'body'  => '憑證已過期，瀏覽器將顯示安全警告，使用者無法正常連線。請立即更新憑證。',
              ];
          @endphp

          @if(count($suggestions) > 0)
          <div class="mt-4">
            <h6 class="text-muted mb-3"><i class="bi bi-lightbulb me-1"></i>改善建議</h6>
            <div class="d-flex flex-column gap-2">
              @foreach($suggestions as $sg)
              @php
                $sgColor = match($sg['level']) {
                  'danger'  => ['border'=>'#dc3545','bg'=>'#fff5f5','icon'=>'text-danger','badge'=>'bg-danger'],
                  'warning' => ['border'=>'#fd7e14','bg'=>'#fff8f0','icon'=>'text-warning','badge'=>'bg-warning text-dark'],
                  default   => ['border'=>'#0dcaf0','bg'=>'#f0fbfe','icon'=>'text-info',  'badge'=>'bg-info text-dark'],
                };
              @endphp
              <div class="rounded p-3" style="border-left:4px solid {{ $sgColor['border'] }};background:{{ $sgColor['bg'] }}">
                <div class="d-flex align-items-center gap-2 mb-1">
                  <i class="bi {{ $sg['icon'] }} {{ $sgColor['icon'] }}"></i>
                  <strong class="small">{{ $sg['title'] }}</strong>
                </div>
                <div class="small text-muted" style="line-height:1.7">{!! $sg['body'] !!}</div>
              </div>
              @endforeach
            </div>
          </div>
          @endif

        @endif
      </div>
    </div>

    {{-- 22. 掃毒結果 --}}
    <div class="card shadow-sm mb-3">
      <div class="card-header fw-bold d-flex justify-content-between align-items-center">
        <span><i class="bi bi-shield-fill-check me-1"></i> 22. 掃毒結果（ClamAV）</span>
        @if($host->av_last_scan_at)
          <small class="opacity-75">最後掃描：{{ $host->av_last_scan_at->format('Y-m-d H:i') }}</small>
        @endif
      </div>
      <div class="card-body p-3">
        @if(!$host->av_last_scan)
          <p class="text-muted small mb-0"><i class="bi bi-info-circle me-1"></i>尚未有掃毒紀錄，Agent 將於每週六 02:00 自動執行掃描。</p>
        @else
          @php
            $av = $host->av_last_scan;
            $avStatus = $av['status'] ?? 'unknown';
            $avBadge = match($avStatus) {
              'clean'    => ['bg-success', '乾淨'],
              'infected' => ['bg-danger',  '發現威脅'],
              'error'    => ['bg-secondary','掃描錯誤'],
              default    => ['bg-secondary', $avStatus],
            };
            $avDur = $av['duration_seconds'] ?? null;
            $avDurStr = $avDur !== null
                ? ($avDur >= 3600
                    ? sprintf('%d 時 %d 分 %d 秒', intdiv($avDur,3600), intdiv($avDur%3600,60), $avDur%60)
                    : ($avDur >= 60
                        ? sprintf('%d 分 %d 秒', intdiv($avDur,60), $avDur%60)
                        : $avDur.' 秒'))
                : null;
          @endphp
          <div class="row g-2 mb-3">
            <div class="col-6 col-md-3">
              <div class="card border-0 bg-light text-center py-2 h-100">
                <div class="small text-muted">狀態</div>
                <span class="badge {{ $avBadge[0] }} fs-6 mt-1">{{ $avBadge[1] }}</span>
              </div>
            </div>
            <div class="col-6 col-md-3">
              <div class="card border-0 bg-light text-center py-2 h-100">
                <div class="small text-muted">掃描目錄數</div>
                <strong class="fs-5">{{ number_format($av['dirs_scanned'] ?? 0) }}</strong>
              </div>
            </div>
            <div class="col-6 col-md-3">
              <div class="card border-0 bg-light text-center py-2 h-100">
                <div class="small text-muted">掃描檔案數</div>
                <strong class="fs-5">{{ number_format($av['files_scanned'] ?? 0) }}</strong>
              </div>
            </div>
            <div class="col-6 col-md-3">
              <div class="card border-0 bg-light text-center py-2 h-100">
                <div class="small text-muted">發現威脅</div>
                <strong class="fs-5 {{ ($av['infected'] ?? 0) > 0 ? 'text-danger' : 'text-success' }}">{{ $av['infected'] ?? 0 }}</strong>
              </div>
            </div>
          </div>

          <div class="table-responsive"><table class="table table-sm small mb-3">
            <tr><th style="width:110px">開始時間</th><td>{{ $av['started_at'] ?? $av['scanned_at'] ?? 'N/A' }}</td></tr>
            <tr><th>結束時間</th><td>{{ $av['finished_at'] ?? 'N/A' }}</td></tr>
            @if($avDurStr)
            <tr><th>掃描耗時</th><td>{{ $avDurStr }}</td></tr>
            @endif
            <tr><th>掃描路徑</th><td>{{ implode('、', $av['paths'] ?? []) }}</td></tr>
            <tr><th>掃描引擎</th><td class="text-muted">{{ $av['engine'] ?? 'N/A' }}</td></tr>
          </table></div>

          @if(!empty($av['threats']))
            <div class="alert alert-danger py-2 mb-0">
              <strong><i class="bi bi-exclamation-triangle me-1"></i>發現 {{ count($av['threats']) }} 個威脅：</strong>
              <ul class="mb-0 mt-1 small">
                @foreach($av['threats'] as $t)
                  <li><code>{{ $t['file'] ?? '' }}</code> — <span class="text-danger">{{ $t['virus'] ?? '' }}</span></li>
                @endforeach
              </ul>
            </div>
          @else
            <p class="text-success small mb-0"><i class="bi bi-check-circle me-1"></i>未發現任何威脅。</p>
          @endif
          @if(isset($av['error']))
            <p class="text-danger small mt-2 mb-0"><i class="bi bi-exclamation-circle me-1"></i>{{ $av['error'] }}</p>
          @endif
        @endif
      </div>
    </div>

    {{-- 23. 備份狀態（總覽）--}}
    @php
      $backups24 = collect($reportData['backup'] ?? []);
    @endphp
    <div class="card shadow-sm mb-3" id="sec-backup-overview">
      <div class="card-header fw-bold d-flex justify-content-between align-items-center">
        <span><i class="bi bi-archive me-1"></i> 23. 備份狀態</span>
        <div class="d-flex align-items-center gap-2">
          @if($backups24->isNotEmpty())
            @php
              $allOk = $backups24->every(fn($b) =>
                ($b['dir_found'] ?? false) &&
                ($b['last_backup_hours'] ?? -1) >= 0 &&
                ($b['last_backup_hours'] ?? 999) <= 25
              );
              $anyWarn = $backups24->contains(fn($b) =>
                ($b['dir_found'] ?? false) &&
                ($b['last_backup_hours'] ?? -1) > 25
              );
            @endphp
            <span class="badge {{ $allOk ? 'bg-success' : ($anyWarn ? 'bg-warning text-dark' : 'bg-danger') }}">
              {{ $allOk ? '正常' : ($anyWarn ? '部分異常' : '未偵測到備份') }}
            </span>
          @endif
        </div>
      </div>
      <div class="card-body p-0">
        @if($backups24->isEmpty())
          <p class="text-muted small p-3 mb-0"><i class="bi bi-info-circle me-1"></i>Agent 尚未回報備份資料，請更新並重新執行 Agent。</p>
        @else
          <div class="table-responsive">
            <table class="table table-sm align-middle mb-0" style="white-space:nowrap">
              <thead class="table-light">
                <tr>
                  <th class="ps-3">備份類型</th>
                  <th>腳本</th>
                  <th>排程</th>
                  <th>備份目錄</th>
                  <th>最後備份時間</th>
                  <th>24h 檔案數</th>
                  <th>目錄大小</th>
                  <th>狀態</th>
                </tr>
              </thead>
              <tbody>
                @foreach($backups24 as $bk)
                  @php
                    $bkHours  = $bk['last_backup_hours'] ?? -1;
                    $bkDirOk  = $bk['dir_found'] ?? false;
                    $bkHasFile = $bkHours >= 0;
                    if (!$bkDirOk) {
                      $bkStatus = ['danger', 'bi-x-circle', '未設定備份目錄'];
                    } elseif (!$bkHasFile) {
                      $bkStatus = ['danger', 'bi-x-circle', '目錄為空'];
                    } elseif ($bkHours <= 25) {
                      $bkStatus = ['success', 'bi-check-circle', '正常（'.($bkHours < 1 ? '剛完成' : $bkHours.'h 前').'）'];
                    } elseif ($bkHours <= 48) {
                      $bkStatus = ['warning', 'bi-exclamation-circle', '逾時（'.$bkHours.'h 前）'];
                    } else {
                      $bkStatus = ['danger', 'bi-x-circle', '備份失敗（'.$bkHours.'h 前）'];
                    }
                  @endphp
                  <tr>
                    <td class="ps-3 fw-semibold">{{ $bk['type'] === 'data' ? '資料備份' : '系統備份' }}</td>
                    <td>
                      @if($bk['script_found'] ?? false)
                        <span class="badge bg-success"><i class="bi bi-check-circle me-1"></i>存在</span>
                        <div class="text-muted text-truncate" style="font-size:10px;max-width:160px" title="{{ $bk['script_path'] ?? '' }}">{{ $bk['script_path'] ?? '' }}</div>
                      @else
                        <span class="badge bg-secondary">未找到</span>
                      @endif
                    </td>
                    <td>
                      @if($bk['in_cron'] ?? false)
                        <span class="badge bg-success"><i class="bi bi-clock me-1"></i>已排程</span>
                      @else
                        <span class="badge bg-warning text-dark">未排程</span>
                      @endif
                    </td>
                    <td>
                      @if($bkDirOk)
                        <span class="badge bg-success"><i class="bi bi-folder-check me-1"></i>存在</span>
                        <div class="text-muted text-truncate" style="font-size:10px;max-width:160px" title="{{ $bk['dir_path'] ?? '' }}">{{ $bk['dir_path'] ?? '' }}</div>
                      @else
                        <span class="badge bg-secondary">未找到</span>
                      @endif
                    </td>
                    <td class="small">
                      @if($bkHasFile)
                        {{ $bk['last_backup'] ?? '—' }}
                      @else
                        <span class="text-muted">—</span>
                      @endif
                    </td>
                    <td class="text-center">
                      @if($bkDirOk)
                        <span class="{{ ($bk['files_24h'] ?? 0) > 0 ? 'text-success fw-bold' : 'text-danger' }}">
                          {{ $bk['files_24h'] ?? 0 }}
                        </span>
                      @else
                        <span class="text-muted">—</span>
                      @endif
                    </td>
                    <td class="small text-muted">{{ $bk['size'] ?? '—' }}</td>
                    <td>
                      <span class="badge bg-{{ $bkStatus[0] }}">
                        <i class="bi {{ $bkStatus[1] }} me-1"></i>{{ $bkStatus[2] }}
                      </span>
                    </td>
                  </tr>
                @endforeach
              </tbody>
            </table>
          </div>
        @endif
        {{-- 備份狀態檢查（每日詳細記錄）--}}
        @if(!empty($reportData['backup_check']))
          <div class="border-top" id="sec-backup-detail">
            <div class="px-3 py-2 d-flex align-items-center gap-2" style="background:#e8f5e9;">
              <i class="bi bi-calendar-check text-success"></i>
              <span class="fw-semibold small text-success">備份狀態檢查（每日詳細記錄）</span>
            </div>
            @foreach($reportData['backup_check'] as $bkIdx => $bk)
              @if(!empty($bk['subdirs']))
              <div class="{{ !$loop->last ? 'border-bottom' : '' }}">
                {{-- 目錄標題 --}}
                <div class="px-3 py-2 d-flex align-items-center gap-2" style="background:#f8f9fa;">
                  <i class="bi bi-folder2-open text-success"></i>
                  <code class="fw-semibold">{{ $bk['path'] }}</code>
                  <small class="text-muted">（{{ $bk['size'] }}）</small>
                </div>
                <div class="table-responsive">
                  <table class="table table-sm table-hover align-middle mb-0">
                    <thead class="table-light">
                      <tr>
                        <th class="ps-3" style="min-width:140px">子目錄</th>
                        <th style="width:70px">大小</th>
                        <th style="min-width:180px">檔案清單（前次備份）</th>
                        <th style="width:80px">距今</th>
                        <th>近 {{ $bk['subdirs'][0]['daily_total'] ?? 30 }} 天備份</th>
                        <th style="width:50px" class="text-center">詳細</th>
                      </tr>
                    </thead>
                    <tbody>
                      @foreach($bk['subdirs'] as $sdIdx => $sub)
                      @php
                        $dp    = $sub['daily_pass'] ?? 0;
                        $dt    = $sub['daily_total'] ?? 30;
                        $ratio = $dt > 0 ? $dp / $dt : 0;
                        $daysAgo = $sub['days_ago'] ?? 999;
                        $colId = 'bkd_'.$bkIdx.'_'.$sdIdx;
                        // 找最近一次有備份的那天的檔案清單
                        $latestFiles = [];
                        foreach (array_reverse($sub['daily_check'] ?? []) as $_dc) {
                            $_isOk = is_array($_dc) ? ($_dc['ok'] ?? false) : (bool)$_dc;
                            if ($_isOk) {
                                $latestFiles = is_array($_dc) ? ($_dc['files'] ?? []) : [];
                                break;
                            }
                        }
                      @endphp
                      {{-- 摘要列 --}}
                      <tr>
                        <td class="ps-3 fw-semibold font-monospace small">{{ $sub['name'] }}</td>
                        <td class="small text-muted">{{ $sub['size'] }}</td>
                        <td class="small">
                          @if(!empty($latestFiles))
                            @foreach($latestFiles as $fname)
                              <div class="text-muted font-monospace" style="white-space:nowrap;font-size:.78rem;">
                                <i class="bi bi-file-earmark me-1"></i>{{ $fname }}
                              </div>
                            @endforeach
                          @elseif(!empty($sub['newest_file']))
                            <span class="text-muted">{{ $sub['newest_file'] }}</span>
                          @else
                            <span class="text-muted">—</span>
                          @endif
                        </td>
                        <td>
                          @if($daysAgo > 3)
                            <span class="badge bg-danger">{{ $daysAgo }} 天前</span>
                          @elseif($daysAgo > 1)
                            <span class="badge bg-warning text-dark">{{ $daysAgo }} 天前</span>
                          @else
                            <span class="badge bg-success">{{ $daysAgo <= 0 ? '今天' : '昨天' }}</span>
                          @endif
                        </td>
                        <td>
                          <div class="d-flex align-items-center gap-2">
                            <span class="badge {{ $ratio >= 0.9 ? 'bg-success' : ($ratio >= 0.7 ? 'bg-warning text-dark' : 'bg-danger') }} me-1">
                              {{ $dp }}/{{ $dt }}
                            </span>
                            {{-- 日曆方格（假日同樣需備份，缺少一律紅色）--}}
                            <div class="d-flex flex-wrap gap-1 bk-day-grid">
                              @foreach(($sub['daily_check'] ?? []) as $date => $dayData)
                              @php
                                $ok  = is_array($dayData) ? ($dayData['ok']    ?? false) : (bool)$dayData;
                                $cnt = is_array($dayData) ? ($dayData['count'] ?? 0)     : 0;
                                $szB = is_array($dayData) ? ($dayData['size']  ?? 0)     : 0;
                                if ($szB >= 1073741824)      $szStr = number_format($szB/1073741824, 1).' GB';
                                elseif ($szB >= 1048576)     $szStr = number_format($szB/1048576,   1).' MB';
                                elseif ($szB >= 1024)        $szStr = number_format($szB/1024,      0).' KB';
                                else                         $szStr = $szB > 0 ? $szB.' B' : '—';
                                $dayNum = (int)substr($date, 8);
                                $tip = $date.' '.(\Carbon\Carbon::parse($date)->isoFormat('(ddd)')).'\n備份 '.$cnt.' 個 / '.$szStr;
                              @endphp
                              <div class="bk-dot"
                                   style="width:15px;height:15px;border-radius:3px;cursor:pointer;
                                          background:{{ $ok ? '#198754' : '#dc3545' }};
                                          font-size:7px;color:#fff;text-align:center;line-height:15px;"
                                   data-date="{{ $date }}"
                                   data-cnt="{{ $cnt }}"
                                   data-sz="{{ $szStr }}"
                                   data-ok="{{ $ok ? '1' : '0' }}"
                                   title="{{ $tip }}">{{ $dayNum }}</div>
                              @endforeach
                            </div>
                          </div>
                        </td>
                        <td class="text-center">
                          <button class="btn btn-sm btn-outline-secondary py-0"
                                  type="button"
                                  data-bs-toggle="collapse"
                                  data-bs-target="#{{ $colId }}"
                                  aria-expanded="false"
                                  title="查看每日詳情">
                            <i class="bi bi-calendar3" style="font-size:.8rem;"></i>
                          </button>
                        </td>
                      </tr>
                      {{-- 展開：每日明細 --}}
                      <tr>
                        <td colspan="6" class="p-0 border-0">
                          <div class="collapse" id="{{ $colId }}">
                            <div class="px-3 py-2" style="background:#f0fff4;border-top:1px solid #c3e6cb;">
                              <div class="fw-semibold small mb-2 text-success">
                                <i class="bi bi-calendar-check me-1"></i>{{ $sub['name'] }} — 每日備份明細（近 {{ $dt }} 天）
                              </div>
                              <div class="table-responsive">
                                <table class="table table-sm table-bordered mb-0" style="font-size:.82rem;min-width:460px">
                                  <thead class="table-success">
                                    <tr>
                                      <th style="width:90px">日期</th>
                                      <th style="width:50px">星期</th>
                                      <th style="width:70px">數量</th>
                                      <th style="width:80px">大小</th>
                                      <th>備份檔案</th>
                                      <th style="width:80px">狀態</th>
                                    </tr>
                                  </thead>
                                  <tbody>
                                    @foreach(array_reverse(array_keys($sub['daily_check'] ?? [])) as $date)
                                    @php
                                      $dayData = $sub['daily_check'][$date];
                                      $ok      = is_array($dayData) ? ($dayData['ok']    ?? false) : (bool)$dayData;
                                      $cnt     = is_array($dayData) ? ($dayData['count'] ?? 0)     : 0;
                                      $szB     = is_array($dayData) ? ($dayData['size']  ?? 0)     : 0;
                                      $files   = is_array($dayData) ? ($dayData['files'] ?? [])    : [];
                                      if ($szB >= 1073741824)      $szStr = number_format($szB/1073741824, 2).' GB';
                                      elseif ($szB >= 1048576)     $szStr = number_format($szB/1048576,   1).' MB';
                                      elseif ($szB >= 1024)        $szStr = number_format($szB/1024,      0).' KB';
                                      else                         $szStr = $szB > 0 ? $szB.' B' : '—';
                                      $carbonDate = \Carbon\Carbon::parse($date);
                                      $isToday = $carbonDate->isToday();
                                    @endphp
                                    <tr class="{{ $ok ? '' : 'table-danger' }} {{ $isToday ? 'fw-bold' : '' }}">
                                      <td>{{ $date }}{{ $isToday ? ' ★' : '' }}</td>
                                      <td>{{ $carbonDate->isoFormat('ddd') }}</td>
                                      <td class="text-center">{{ $cnt > 0 ? $cnt.' 個' : '—' }}</td>
                                      <td class="text-end pe-2">{{ $szB > 0 ? $szStr : '—' }}</td>
                                      <td class="small">
                                        @if(!empty($files))
                                          @foreach($files as $fname)
                                            <div class="text-muted font-monospace" style="white-space:nowrap;"><i class="bi bi-file-earmark me-1"></i>{{ $fname }}</div>
                                          @endforeach
                                        @else
                                          <span class="text-muted">—</span>
                                        @endif
                                      </td>
                                      <td>
                                        @if($ok)
                                          <span class="badge bg-success"><i class="bi bi-check-circle me-1"></i>有備份</span>
                                        @else
                                          <span class="badge bg-danger"><i class="bi bi-x-circle me-1"></i>無備份</span>
                                        @endif
                                      </td>
                                    </tr>
                                    @endforeach
                                  </tbody>
                                </table>
                              </div>
                            </div>
                          </div>
                        </td>
                      </tr>
                      @endforeach
                    </tbody>
                  </table>
                </div>
              </div>
              @else
                <div class="p-3 text-muted small"><i class="bi bi-info-circle me-1"></i>{{ $bk['path'] }} 無子目錄</div>
              @endif
            @endforeach
          </div>
        @endif
      </div>
    </div>
    {{-- 24. Log 完整性檢查 --}}
    @php
      $li = $reportData['log_integrity'] ?? null;
    @endphp
    <div class="card shadow-sm mb-3">
      <div class="card-header fw-bold d-flex justify-content-between align-items-center">
        <span><i class="bi bi-journal-check me-1"></i> 24. Log 完整性檢查</span>
        @if($li)
          @php
            $liStatus = $li['tampered'] > 0
              ? ['danger', '發現異動']
              : ($li['checked'] > 0 ? ['success', '正常'] : ['secondary', '尚無基準']);
          @endphp
          <span class="badge bg-{{ $liStatus[0] }}">{{ $liStatus[1] }}</span>
        @endif
      </div>
      <div class="card-body">
        @if(!$li)
          <p class="text-muted small mb-0"><i class="bi bi-info-circle me-1"></i>Agent 尚未回報 Log 完整性資料，請更新並重新執行 Agent。</p>
        @else
          {{-- Summary stats --}}
          <div class="row g-2 mb-3">
            <div class="col-6 col-md-3">
              <div class="card border-0 bg-light text-center py-2 h-100">
                <div class="small text-muted">檢查檔案數</div>
                <strong class="fs-4">{{ $li['checked'] ?? 0 }}</strong>
              </div>
            </div>
            <div class="col-6 col-md-3">
              <div class="card border-0 bg-light text-center py-2 h-100">
                <div class="small text-muted">正常</div>
                <strong class="fs-4 text-success">{{ $li['clean'] ?? 0 }}</strong>
              </div>
            </div>
            <div class="col-6 col-md-3">
              <div class="card border-0 bg-light text-center py-2 h-100">
                <div class="small text-muted">新增檔案</div>
                <strong class="fs-4 text-info">{{ $li['new_files'] ?? 0 }}</strong>
              </div>
            </div>
            <div class="col-6 col-md-3">
              <div class="card border-0 {{ ($li['tampered'] ?? 0) > 0 ? 'bg-danger bg-opacity-10' : 'bg-light' }} text-center py-2 h-100">
                <div class="small text-muted">疑似異動</div>
                <strong class="fs-4 {{ ($li['tampered'] ?? 0) > 0 ? 'text-danger' : 'text-success' }}">{{ $li['tampered'] ?? 0 }}</strong>
              </div>
            </div>
          </div>

          {{-- Per-category table --}}
          @if(!empty($li['categories']))
            <div class="d-flex justify-content-between align-items-center mb-1">
              <span class="small fw-bold text-muted">各類別統計</span>
              @if(!empty($li['files']))
                <button class="btn btn-sm btn-outline-secondary" type="button"
                  data-bs-toggle="collapse" data-bs-target="#liFileDetail">
                  <i class="bi bi-list-ul me-1"></i>詳細 <i class="bi bi-chevron-down" id="liDetailChevron"></i>
                </button>
              @endif
            </div>
            <div class="table-responsive"><table class="table table-sm table-bordered small mb-2">
              <thead class="table-light">
                <tr>
                  <th>日誌類別</th>
                  <th class="text-center">檢查</th>
                  <th class="text-center text-success">正常</th>
                  <th class="text-center text-info">新增</th>
                  <th class="text-center text-danger">異動</th>
                  <th class="text-center">狀態</th>
                </tr>
              </thead>
              <tbody>
                @foreach($li['categories'] as $cat)
                  @php
                    $catTampered = $cat['tampered'] ?? 0;
                    $catNew      = $cat['new_files'] ?? 0;
                    $catChecked  = $cat['checked'] ?? 0;
                    if ($catTampered > 0)       [$catBadge, $catLabel] = ['danger',  '異動'];
                    elseif ($catChecked === 0)   [$catBadge, $catLabel] = ['secondary','—'];
                    elseif ($catNew > 0)         [$catBadge, $catLabel] = ['info',    '新增'];
                    else                         [$catBadge, $catLabel] = ['success', '正常'];
                  @endphp
                  <tr>
                    <td>{{ $cat['name'] ?? '—' }}</td>
                    <td class="text-center">{{ $catChecked }}</td>
                    <td class="text-center">{{ $cat['clean'] ?? 0 }}</td>
                    <td class="text-center">{{ $catNew > 0 ? $catNew : '—' }}</td>
                    <td class="text-center {{ $catTampered > 0 ? 'text-danger fw-bold' : '' }}">{{ $catTampered > 0 ? $catTampered : '—' }}</td>
                    <td class="text-center"><span class="badge bg-{{ $catBadge }}">{{ $catLabel }}</span></td>
                  </tr>
                @endforeach
              </tbody>
            </table></div>

            {{-- Full file detail collapsible --}}
            @if(!empty($li['files']))
              @php
                $liFilesByCat = collect($li['files'])->groupBy('cat');
              @endphp
              <div class="collapse mb-3" id="liFileDetail">
                <div class="border rounded p-2 bg-light">
                  <div class="small fw-bold mb-2 text-muted">完整檢查紀錄（共 {{ count($li['files']) }} 個檔案）</div>
                  @foreach($liFilesByCat as $catName => $catFiles)
                    <div class="mb-2">
                      <div class="fw-bold small mb-1">
                        {{ $catName }}
                        <span class="text-muted fw-normal">（{{ count($catFiles) }} 個）</span>
                      </div>
                      <div class="table-responsive"><table class="table table-sm table-borderless mb-0 small">
                        <tbody>
                          @foreach($catFiles as $f)
                            @php
                              $fStatus = $f['status'] ?? 'clean';
                              [$fBadge, $fLabel] = match($fStatus) {
                                'tampered' => ['danger',  '異動'],
                                'new'      => ['info',    '新增'],
                                default    => ['success', '正常'],
                              };
                            @endphp
                            <tr class="{{ $fStatus === 'tampered' ? 'table-danger' : '' }}">
                              <td class="py-0"><code class="small">{{ $f['path'] ?? '' }}</code></td>
                              <td class="py-0 text-end" style="white-space:nowrap">
                                <span class="badge bg-{{ $fBadge }}">{{ $fLabel }}</span>
                              </td>
                            </tr>
                          @endforeach
                        </tbody>
                      </table></div>
                    </div>
                  @endforeach
                </div>
              </div>
            @endif
          @endif

          <div class="d-flex justify-content-between align-items-center mb-2">
            <small class="text-muted">
              <i class="bi bi-clock me-1"></i>檢查時間：{{ $li['checked_at'] ?? '—' }}
              &nbsp;｜&nbsp;
              <i class="bi bi-info-circle me-1"></i>僅比對非今日的輪替 log 檔（.1、.gz 等）
            </small>
            @if(($li['tampered'] ?? 0) > 0)
              <span class="badge bg-danger"><i class="bi bi-exclamation-triangle me-1"></i>需人工確認</span>
            @endif
          </div>

          {{-- Tampered files collapsible --}}
          @if(!empty($li['tampered_files']))
            <div class="alert alert-danger py-2 mb-2">
              <div class="d-flex justify-content-between align-items-center">
                <strong><i class="bi bi-exclamation-triangle me-1"></i>發現 {{ count($li['tampered_files']) }} 個 Log 檔 MD5 與基準不符</strong>
                <button class="btn btn-sm btn-outline-danger" type="button"
                  data-bs-toggle="collapse" data-bs-target="#liTamperedDetail">
                  詳細 <i class="bi bi-chevron-down"></i>
                </button>
              </div>
              <div class="collapse mt-2" id="liTamperedDetail">
                <ul class="mb-1 small">
                  @foreach($li['tampered_files'] as $tf)
                    <li><code>{{ $tf }}</code></li>
                  @endforeach
                </ul>
                <div class="small text-muted">若為正常輪替造成，可刪除 <code>/opt/host-agent/.log_hashes</code> 重建基準。</div>
              </div>
            </div>
          @elseif(($li['checked'] ?? 0) === 0)
            <div class="alert alert-secondary py-2 mb-0 small">
              <i class="bi bi-info-circle me-1"></i>未找到可檢查的輪替 Log 檔案（可能 logrotate 尚未執行或路徑不符）。
            </div>
          @else
            <div class="alert alert-success py-2 mb-0 small">
              <i class="bi bi-check-circle me-1"></i>所有已知輪替 Log 檔案 MD5 均與基準一致，未發現異動。
            </div>
          @endif
        @endif
      </div>
    </div>

    {{-- 25. SBOM 軟體清單 --}}
    <div class="card border-0 shadow-sm mt-3 mb-4">
      <div class="card-header bg-secondary text-white d-flex justify-content-between align-items-center">
        <span><i class="bi bi-box-seam me-1"></i> 25. SBOM 軟體清單（Software Bill of Materials）</span>
        @if ($host->sbom_collected_at)
          <small class="opacity-75">最後收集：{{ $host->sbom_collected_at->format('Y-m-d H:i') }}</small>
        @endif
      </div>
      <div class="card-body">
        @if (!$host->sbom_data)
          <div class="alert alert-secondary mb-0">
            <i class="bi bi-info-circle me-1"></i>尚未收集 SBOM 資料，Agent 將於每天首次執行時自動收集。
          </div>
        @else
          @php
            $sbom     = $host->sbom_data;
            $aptPkgs  = $sbom['apt']      ?? [];
            $pipPkgs  = $sbom['pip']      ?? [];
            $npmPkgs  = $sbom['npm']      ?? [];
            $compPkgs = $sbom['composer'] ?? [];
            $allPkgs  = array_merge(
              array_map(fn($p) => array_merge($p, ['type'=>'apt']),      $aptPkgs),
              array_map(fn($p) => array_merge($p, ['type'=>'pip']),      $pipPkgs),
              array_map(fn($p) => array_merge($p, ['type'=>'npm']),      $npmPkgs),
              array_map(fn($p) => array_merge($p, ['type'=>'composer']), $compPkgs),
            );
          @endphp

          {{-- 統計卡 --}}
          <div class="row g-2 mb-3">
            @foreach ([['apt','APT 套件','bg-primary',count($aptPkgs)],['pip','Python pip','bg-success',count($pipPkgs)],['npm','Node npm','bg-warning text-dark',count($npmPkgs)],['composer','PHP Composer','bg-info text-dark',count($compPkgs)]] as [$t,$label,$cls,$cnt])
              @if ($cnt > 0)
                <div class="col-6 col-md-3">
                  <div class="card border-0 bg-light text-center py-2 sbom-type-btn" data-type="{{ $t }}" style="cursor:pointer">
                    <div class="fw-bold fs-4">{{ $cnt }}</div>
                    <div class="small"><span class="badge {{ $cls }}">{{ $label }}</span></div>
                  </div>
                </div>
              @endif
            @endforeach
          </div>

          {{-- 搜尋 + 篩選 --}}
          <div class="d-flex gap-2 mb-2 flex-wrap align-items-center">
            <input type="text" id="sbomSearch" class="form-control form-control-sm" style="max-width:260px"
              placeholder="搜尋套件名稱 / 授權…">
            <select id="sbomType" class="form-select form-select-sm" style="max-width:160px">
              <option value="">全部類型</option>
              <option value="apt">APT</option>
              <option value="pip">pip</option>
              <option value="npm">npm</option>
              <option value="composer">composer</option>
            </select>
            <button id="sbomTranslateBtn" class="btn btn-sm btn-outline-secondary"
              data-url="{{ route('hosts.sbom-translate-desc', $host) }}"
              title="將套件描述翻譯為中文（每次只翻尚未翻譯的條目）">
              <i class="bi bi-translate me-1"></i>翻譯描述
            </button>
            <span id="sbomCount" class="text-muted small align-self-center"></span>
          </div>

          {{-- 套件表格 --}}
          <div style="max-height:480px;overflow-y:auto">
            <div class="table-responsive"><table class="table table-sm table-hover mb-0" id="sbomTable">
              <thead class="table-light sticky-top">
                <tr>
                  <th style="width:26%">套件名稱</th>
                  <th style="width:16%">版本</th>
                  <th style="width:13%">類型</th>
                  <th style="width:14%">授權</th>
                  <th>描述</th>
                </tr>
              </thead>
              <tbody>
                @foreach ($allPkgs as $pkg)
                  @php
                    $lic = $pkg['license'] ?? '';
                    $desc = $pkg['description'] ?? '';
                    $licBadge = match(true) {
                      empty($lic) || $lic === 'unknown' => ['bg-secondary', '—'],
                      str_contains(strtolower($lic), 'mit')           => ['bg-success text-white', $lic],
                      str_contains(strtolower($lic), 'apache')        => ['bg-primary text-white', $lic],
                      str_contains(strtolower($lic), 'gpl')           => ['bg-warning text-dark',  $lic],
                      str_contains(strtolower($lic), 'bsd')           => ['bg-info text-dark',     $lic],
                      str_contains(strtolower($lic), 'lgpl')          => ['bg-warning text-dark',  $lic],
                      str_contains(strtolower($lic), 'isc')           => ['bg-success text-white', $lic],
                      default                                          => ['bg-light text-dark border', $lic],
                    };
                    $typeBadge = match($pkg['type']) {
                      'apt'      => 'bg-primary',
                      'pip'      => 'bg-success',
                      'npm'      => 'bg-warning text-dark',
                      'composer' => 'bg-info text-dark',
                      default    => 'bg-secondary',
                    };
                  @endphp
                  @php $descZh = $pkg['description_zh'] ?? ''; @endphp
                  <tr class="sbom-row" data-type="{{ $pkg['type'] }}"
                    data-search="{{ strtolower($pkg['name'] . ' ' . ($pkg['license'] ?? '')) }}">
                    <td class="small fw-semibold">{{ $pkg['name'] }}</td>
                    <td class="small text-muted"><code>{{ $pkg['version'] }}</code></td>
                    <td><span class="badge {{ $typeBadge }}" style="font-size:10px">{{ $pkg['type'] }}</span></td>
                    <td><span class="badge {{ $licBadge[0] }}" style="font-size:10px;max-width:180px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap;display:inline-block" title="{{ $licBadge[1] }}">{{ Str::limit($licBadge[1], 30) }}</span></td>
                    <td class="small" style="max-width:300px">
                      @if($descZh)
                        <span class="text-dark" title="{{ $descZh }}">{{ Str::limit($descZh, 60) }}</span>
                        @if($desc)<div class="text-muted" style="font-size:10px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap" title="{{ $desc }}">{{ $desc }}</div>@endif
                      @elseif($desc)
                        <span class="text-muted" style="overflow:hidden;text-overflow:ellipsis;white-space:nowrap;display:block" title="{{ $desc }}">{{ $desc }}</span>
                      @endif
                    </td>
                  </tr>
                @endforeach
              </tbody>
            </table></div>
          </div>
        @endif
      </div>
    </div>

    {{-- 26. SBOM × CVE 漏洞比對 --}}
    <div class="card border-0 shadow-sm mt-3 mb-4">
      <div class="card-header bg-danger text-white d-flex justify-content-between align-items-center">
        <span><i class="bi bi-shield-exclamation me-1"></i> 26. SBOM 套件漏洞比對</span>
        @if($host->sbom_vuln_scanned_at)
          <small class="opacity-75">比對時間：{{ $host->sbom_vuln_scanned_at->format('Y-m-d H:i') }}</small>
        @endif
      </div>
      <div class="card-body">
        @if(!$host->sbom_vuln_scanned_at)
          <p class="text-muted small mb-0"><i class="bi bi-info-circle me-1"></i>
            尚未執行比對。Agent 提交新 SBOM 時會自動觸發，或由管理員執行
            <code>php artisan sbom:scan</code>。
          </p>
        @elseif(empty($host->sbom_vuln_data))
          <p class="text-success small mb-0"><i class="bi bi-check-circle me-1"></i>
            比對完成，在 CVE 資料庫中未發現有風險的套件。
          </p>
        @else
          @php
            $vulns = $host->sbom_vuln_data;
            $critical = collect($vulns)->where('max_severity', 'CRITICAL')->count();
            $high     = collect($vulns)->where('max_severity', 'HIGH')->count();
            $medium   = collect($vulns)->where('max_severity', 'MEDIUM')->count();
            $low      = collect($vulns)->where('max_severity', 'LOW')->count();
          @endphp

          {{-- 摘要統計 --}}
          <div class="row g-2 mb-3">
            <div class="col-6 col-md-3">
              <div class="card border-0 text-center py-2" style="background:#fff5f5;">
                <div class="small text-danger fw-semibold">CRITICAL</div>
                <div class="fs-4 fw-bold text-danger">{{ $critical }}</div>
              </div>
            </div>
            <div class="col-6 col-md-3">
              <div class="card border-0 text-center py-2" style="background:#fff8f0;">
                <div class="small text-warning fw-semibold">HIGH</div>
                <div class="fs-4 fw-bold text-warning">{{ $high }}</div>
              </div>
            </div>
            <div class="col-6 col-md-3">
              <div class="card border-0 text-center py-2" style="background:#f0f8ff;">
                <div class="small text-info fw-semibold">MEDIUM</div>
                <div class="fs-4 fw-bold text-info">{{ $medium }}</div>
              </div>
            </div>
            <div class="col-6 col-md-3">
              <div class="card border-0 text-center py-2 bg-light">
                <div class="small text-secondary fw-semibold">LOW</div>
                <div class="fs-4 fw-bold text-secondary">{{ $low }}</div>
              </div>
            </div>
          </div>

          {{-- Backport 免責說明 --}}
          @php $hasDistroPatched = collect($vulns)->contains('is_distro_patched', true); @endphp
          @if($hasDistroPatched)
          <div class="alert alert-warning py-2 px-3 mb-3 small d-flex gap-2 align-items-start">
            <i class="bi bi-exclamation-triangle-fill mt-1 flex-shrink-0"></i>
            <div>
              <strong>Ubuntu / Debian 回移修補（Backport）注意事項</strong><br>
              標有 <span class="badge bg-warning text-dark"><i class="bi bi-arrow-repeat me-1"></i>回移</span> 的套件版本含 <code>ubuntu</code> 或 <code>deb</code> 後綴，
              代表 Ubuntu / Debian 安全團隊可能已將漏洞補丁回移至該版本，
              即使套件版本號低於上游修復版本，漏洞實際上已修補。<br>
              <strong>建議在採取行動前，先至
              <a href="https://ubuntu.com/security/packages" target="_blank" rel="noopener">Ubuntu Security Packages</a>
              確認是否已有對應 USN（Ubuntu Security Notice）。</strong>
            </div>
          </div>
          @endif

          {{-- 套件列表 --}}
          <div class="table-responsive">
            <table class="table table-sm align-middle mb-0">
              <thead class="table-light">
                <tr>
                  <th class="ps-3" style="min-width:140px">套件名稱</th>
                  <th style="min-width:110px">目前版本</th>
                  <th style="min-width:120px">來源</th>
                  <th style="width:80px" class="text-center">最高風險</th>
                  <th style="width:70px" class="text-center">CVE 數</th>
                  <th style="width:50px" class="text-center">詳細</th>
                </tr>
              </thead>
              <tbody>
                @foreach($vulns as $vi => $vuln)
                @php
                  $sevColor = match($vuln['max_severity']) {
                    'CRITICAL' => 'danger',
                    'HIGH'     => 'warning',
                    'MEDIUM'   => 'info',
                    default    => 'secondary',
                  };
                  $colId = 'vuln_' . $vi;
                  $isDistro = !empty($vuln['is_distro_patched']);
                @endphp
                <tr>
                  <td class="ps-3 fw-semibold font-monospace small">{{ $vuln['name'] }}</td>
                  <td>
                    <code class="small">{{ $vuln['version'] ?: '—' }}</code>
                    @if($isDistro)
                      <span class="badge bg-warning text-dark ms-1" style="font-size:.65rem;"
                            title="此版本含 Ubuntu/Debian 回移補丁，CVE 結果需至 ubuntu.com/security 確認">
                        <i class="bi bi-arrow-repeat me-1"></i>回移
                      </span>
                    @endif
                  </td>
                  <td class="small text-muted">{{ $vuln['ecosystem'] }}</td>
                  <td class="text-center">
                    <span class="badge bg-{{ $sevColor }}">{{ $vuln['max_severity'] }}</span>
                    <div class="small text-muted">{{ number_format($vuln['max_score'], 1) }}</div>
                  </td>
                  <td class="text-center fw-bold text-{{ $sevColor }}">{{ $vuln['cve_count'] }}</td>
                  <td class="text-center">
                    <button class="btn btn-sm btn-outline-secondary py-0"
                            type="button"
                            data-bs-toggle="collapse"
                            data-bs-target="#{{ $colId }}"
                            aria-expanded="false">
                      <i class="bi bi-chevron-down" style="font-size:.75rem;"></i>
                    </button>
                  </td>
                </tr>
                {{-- 展開：CVE 清單 --}}
                <tr>
                  <td colspan="6" class="p-0 border-0">
                    <div class="collapse" id="{{ $colId }}">
                      <div class="px-3 py-2" style="background:#fff9f9;border-top:1px solid #f5c6cb;">
                        <div class="table-responsive"><table class="table table-sm table-bordered mb-0" style="font-size:.82rem;">
                          <thead class="table-danger">
                            <tr>
                              <th style="width:140px">CVE ID</th>
                              <th style="width:80px">嚴重性</th>
                              <th style="width:55px">分數</th>
                              <th style="width:90px">建議版本</th>
                              <th style="width:90px">發布日期</th>
                              <th>描述</th>
                            </tr>
                          </thead>
                          <tbody>
                            @foreach($vuln['cves'] as $cve)
                            @php
                              $cs = match($cve['severity']) {
                                'CRITICAL' => 'danger',
                                'HIGH'     => 'warning',
                                'MEDIUM'   => 'info',
                                default    => 'secondary',
                              };
                              $maybeBp = !empty($cve['maybe_backported']);
                            @endphp
                            <tr @if($maybeBp) style="opacity:.75;" @endif>
                              <td class="font-monospace small">
                                <a href="https://nvd.nist.gov/vuln/detail/{{ $cve['cve_id'] }}"
                                   target="_blank" rel="noopener"
                                   class="text-decoration-none">
                                  {{ $cve['cve_id'] }}
                                  <i class="bi bi-box-arrow-up-right ms-1" style="font-size:.65rem;"></i>
                                </a>
                                @if($maybeBp)
                                  <span class="badge bg-secondary ms-1" style="font-size:.6rem;"
                                        title="修復版本與安裝版本同 minor，Ubuntu 可能已透過回移修補此漏洞">
                                    可能已回移
                                  </span>
                                @endif
                              </td>
                              <td><span class="badge bg-{{ $cs }}">{{ $cve['severity'] }}</span></td>
                              <td class="text-center fw-bold">{{ number_format($cve['score'], 1) }}</td>
                              <td>
                                @if(!empty($cve['fixed_ver']))
                                  <span class="badge bg-{{ $maybeBp ? 'secondary' : 'success' }} font-monospace">≥ {{ $cve['fixed_ver'] }}</span>
                                @else
                                  <span class="text-muted small">—</span>
                                @endif
                              </td>
                              <td class="text-muted small">{{ $cve['published'] ?? '—' }}</td>
                              <td class="text-muted small">{{ $cve['description'] }}</td>
                            </tr>
                            @endforeach
                          </tbody>
                        </table></div>
                      </div>
                    </div>
                  </td>
                </tr>
                @endforeach
              </tbody>
            </table>
          </div>
        @endif
      </div>
    </div>

    {{-- 27. 弱點掃描（Nuclei） --}}
    <div class="card border-0 shadow-sm mt-3 mb-4">
      <div class="card-header bg-dark text-white d-flex justify-content-between align-items-center">
        <span><i class="bi bi-crosshair me-1"></i> 27. 弱點掃描（OWASP Top 10）</span>
        <a href="{{ route('vuln-scan.create', ['host_id' => $host->id]) }}"
           class="btn btn-sm btn-outline-light">
          <i class="bi bi-plus-lg me-1"></i>新增掃描
        </a>
      </div>
      <div class="card-body p-0">
        @php
          $hostScans = \App\Models\VulnScan::where('host_id', $host->id)
              ->orderByDesc('created_at')->take(5)->get();
        @endphp
        @if($hostScans->isEmpty())
          <div class="p-3 text-muted small">
            <i class="bi bi-info-circle me-1"></i>
            尚未對此主機執行弱點掃描。點擊右上角「新增掃描」開始。
          </div>
        @else
        <div class="table-responsive"><table class="table table-sm table-hover mb-0 align-middle">
          <thead class="table-light">
            <tr>
              <th>目標 URL</th>
              <th>Profile</th>
              <th>狀態</th>
              <th class="text-center">C</th>
              <th class="text-center">H</th>
              <th class="text-center">M</th>
              <th class="text-center">L</th>
              <th>時間</th>
              <th></th>
            </tr>
          </thead>
          <tbody>
          @foreach($hostScans as $scan)
          @php $bySev = $scan->summary['by_severity'] ?? []; @endphp
          <tr>
            <td class="font-monospace small">{{ $scan->target_url }}</td>
            <td><span class="badge bg-secondary">{{ $scan->profile }}</span></td>
            <td>
              @if($scan->status === 'done')   <span class="badge bg-success">完成</span>
              @elseif($scan->status === 'running') <span class="badge bg-warning text-dark">執行中</span>
              @elseif($scan->status === 'failed')  <span class="badge bg-danger">失敗</span>
              @else <span class="badge bg-secondary">待執行</span>
              @endif
            </td>
            <td class="text-center">@if(($bySev['critical']??0)>0)<span class="badge bg-danger">{{$bySev['critical']}}</span>@else<span class="text-muted">-</span>@endif</td>
            <td class="text-center">@if(($bySev['high']??0)>0)<span class="badge bg-warning text-dark">{{$bySev['high']}}</span>@else<span class="text-muted">-</span>@endif</td>
            <td class="text-center">@if(($bySev['medium']??0)>0)<span class="badge bg-info text-dark">{{$bySev['medium']}}</span>@else<span class="text-muted">-</span>@endif</td>
            <td class="text-center">@if(($bySev['low']??0)>0)<span class="badge bg-primary">{{$bySev['low']}}</span>@else<span class="text-muted">-</span>@endif</td>
            <td class="text-muted small">{{ $scan->created_at->format('m-d H:i') }}</td>
            <td>
              <a href="{{ route('vuln-scan.show', $scan) }}" class="btn btn-sm btn-outline-secondary py-0">
                <i class="bi bi-eye"></i>
              </a>
            </td>
          </tr>
          @endforeach
          </tbody>
        </table></div>
        @if(\App\Models\VulnScan::where('host_id', $host->id)->count() > 5)
          <div class="p-2 text-end">
            <a href="{{ route('vuln-scan.index') }}" class="small text-muted">查看全部掃描記錄 →</a>
          </div>
        @endif
        @endif
      </div>
    </div>

  </div>
@endsection

@push('scripts')
  <script>
    // SBOM 搜尋 + 篩選
    (function() {
      const search  = document.getElementById('sbomSearch');
      const typeEl  = document.getElementById('sbomType');
      const countEl = document.getElementById('sbomCount');
      const rows    = document.querySelectorAll('.sbom-row');
      if (!search || !rows.length) return;

      function filter() {
        const q    = search.value.toLowerCase().trim();
        const type = typeEl.value;
        let visible = 0;
        rows.forEach(r => {
          const matchType   = !type || r.dataset.type === type;
          const matchSearch = !q    || r.dataset.search.includes(q);
          const show = matchType && matchSearch;
          r.style.display = show ? '' : 'none';
          if (show) visible++;
        });
        if (countEl) countEl.textContent = `顯示 ${visible} / ${rows.length} 項`;
      }

      search.addEventListener('input', filter);
      typeEl.addEventListener('change', filter);

      document.querySelectorAll('.sbom-type-btn').forEach(btn => {
        btn.addEventListener('click', () => {
          typeEl.value = btn.dataset.type;
          filter();
        });
      });

      filter();
    })();

    // SBOM 描述翻譯
    (function() {
      const btn = document.getElementById('sbomTranslateBtn');
      if (!btn) return;
      btn.addEventListener('click', function() {
        if (!confirm('將所有尚未翻譯的套件描述翻譯為繁體中文？\n（依數量多寡可能需要數分鐘，請耐心等待）')) return;
        btn.disabled = true;
        btn.innerHTML = '<span class="spinner-border spinner-border-sm me-1"></span>翻譯中…';
        fetch(btn.dataset.url, {
          method: 'POST',
          headers: {
            'X-CSRF-TOKEN': document.querySelector('meta[name="csrf-token"]').content,
            'Accept': 'application/json',
          },
        }).then(r => r.json()).then(data => {
          if (data.ok) {
            btn.innerHTML = '<i class="bi bi-check2 me-1"></i>翻譯完成（' + data.translated + ' 筆）';
            btn.classList.replace('btn-outline-secondary', 'btn-outline-success');
            setTimeout(() => location.reload(), 1000);
          } else {
            alert(data.error || '翻譯失敗');
            btn.disabled = false;
            btn.innerHTML = '<i class="bi bi-translate me-1"></i>翻譯描述';
          }
        }).catch(() => {
          alert('請求失敗，請重試');
          btn.disabled = false;
          btn.innerHTML = '<i class="bi bi-translate me-1"></i>翻譯描述';
        });
      });
    })();

    // 備份日格 tooltip（hover 顯示日期/數量/大小）
    (function() {
      document.querySelectorAll('.bk-dot').forEach(el => {
        const tip = new bootstrap.Tooltip(el, {
          title: () => {
            const d   = el.dataset.date;
            const cnt = el.dataset.cnt;
            const sz  = el.dataset.sz;
            const ok  = el.dataset.ok === '1';
            return `${d}\n${ok ? '✓ 備份 '+cnt+' 個 / '+sz : '✗ 無備份'}`;
          },
          placement: 'top',
          trigger:   'hover focus',
          html:      false,
          sanitize:  false,
        });
      });
    })();

    // 展開按鈕 icon 切換
    document.querySelectorAll('[data-bs-target^="#bkd_"]').forEach(btn => {
      const target = document.querySelector(btn.dataset.bsTarget);
      if (!target) return;
      target.addEventListener('show.bs.collapse',  () => btn.querySelector('i').className = 'bi bi-calendar3-range');
      target.addEventListener('hidden.bs.collapse', () => btn.querySelector('i').className = 'bi bi-calendar3');
    });

    // reportAgo live badge
    (function() {
      const el = document.getElementById('reportAgo');
      if (!el) return;
      const ts = parseInt(el.dataset.ts, 10);
      function update() {
        const diff = Math.floor(Date.now() / 1000) - ts;
        let text, cls;
        if (diff < 60)        { text = diff + ' 秒前';                           cls = 'bg-success text-white'; }
        else if (diff < 3600) { text = Math.floor(diff/60) + ' 分鐘前';          cls = 'bg-success text-white'; }
        else if (diff < 7200) { text = Math.floor(diff/3600) + ' 小時前';        cls = 'bg-warning text-dark'; }
        else                  { text = Math.floor(diff/3600) + ' 小時前（異常）'; cls = 'bg-danger text-white'; }
        el.textContent = text;
        el.className = 'ms-2 badge ' + cls;
      }
      update();
      setInterval(update, 30000);
    })();
  </script>
@endpush