@extends('layouts.app')
@section('title', '滲透測試報告')

@section('content')
<div class="container-fluid">

  {{-- 頁首操作列 --}}
  <div class="mb-3 d-flex justify-content-between align-items-center">
    <a href="{{ route('pen-test.index') }}" class="text-decoration-none text-muted small">
      <i class="bi bi-arrow-left me-1"></i>返回掃描清單
    </a>
    <div class="d-flex gap-2">
      @if($penTest->status === 'done')
      <a href="{{ route('pen-test.pdf', $penTest) }}" class="btn btn-sm btn-danger">
        <i class="bi bi-file-earmark-pdf me-1"></i>匯出 PDF
      </a>
      <a href="{{ route('pen-test.create', ['scanner_type' => $penTest->scanner_type ?? 'nmap']) }}"
         class="btn btn-sm btn-outline-secondary">
        <i class="bi bi-arrow-repeat me-1"></i>重新掃描
      </a>
      @endif
      <form method="POST" action="{{ route('pen-test.destroy', $penTest) }}"
            onsubmit="return confirm('確定刪除？')">
        @csrf @method('DELETE')
        <button class="btn btn-sm btn-outline-secondary"><i class="bi bi-trash me-1"></i>刪除</button>
      </form>
    </div>
  </div>

  {{-- 基本資訊 --}}
  @php
    $modeInfo    = $scanModes[$penTest->scan_mode]              ?? ['label'=>$penTest->scan_mode,'icon'=>'bi-circle','desc'=>''];
    $scannerInfo = $scannerTypes[$penTest->scanner_type ?? 'nmap'] ?? ['label'=>'Nmap','color'=>'danger'];
    $sec = $penTest->durationSeconds();
    $dur = $sec ? ($sec>=60 ? floor($sec/60).'m '.($sec%60).'s' : $sec.'s') : null;
  @endphp
  <div class="card shadow-sm mb-3">
    <div class="card-body py-2">
      <div class="row g-3 align-items-center">
        <div class="col-md-4">
          <div class="text-muted small">掃描目標</div>
          <div class="fw-semibold font-monospace text-break">{{ $penTest->target }}</div>
          @if($penTest->project)
            <div class="text-muted small mt-1">{{ $penTest->project->name }}</div>
          @endif
        </div>
        <div class="col-md-2">
          <div class="text-muted small">掃描工具</div>
          <span class="badge bg-{{ $penTest->scannerColor() }}">{{ $penTest->scannerLabel() }}</span>
          <div class="small text-muted mt-1">{{ $modeInfo['label'] }}</div>
        </div>
        <div class="col-md-2">
          <div class="text-muted small">狀態</div>
          @if($penTest->status==='done')
            <span class="badge bg-success">完成</span>
          @elseif($penTest->status==='running')
            <span class="badge bg-warning text-dark"><span class="spinner-border spinner-border-sm me-1" style="width:.6rem;height:.6rem;"></span>執行中</span>
          @elseif($penTest->status==='failed')
            <span class="badge bg-danger">失敗</span>
          @else
            <span class="badge bg-secondary">待執行</span>
          @endif
        </div>
        <div class="col-md-4">
          <div class="row g-1">
            <div class="col-6">
              <div class="text-muted" style="font-size:.7rem;">開始</div>
              <div class="small font-monospace">{{ $penTest->started_at?->format('Y-m-d H:i:s') ?? '—' }}</div>
            </div>
            <div class="col-6">
              <div class="text-muted" style="font-size:.7rem;">結束</div>
              <div class="small font-monospace">{{ $penTest->finished_at?->format('H:i:s') ?? '—' }}</div>
            </div>
            @if($dur)
            <div class="col-12"><span class="badge bg-secondary">{{ $dur }}</span></div>
            @endif
          </div>
        </div>
      </div>
    </div>
  </div>

  {{-- 即時 log --}}
  @if(in_array($penTest->status, ['pending','running']))
  <div class="card shadow-sm mb-3 border-danger" id="progress-card">
    <div class="card-header bg-danger text-white py-2 d-flex align-items-center gap-2">
      <div class="spinner-border spinner-border-sm"></div>
      <span class="fw-semibold">掃描進行中</span>
      <span class="ms-auto small opacity-75">每 5 秒更新</span>
    </div>
    <pre id="scan-log" class="bg-black text-success p-3 mb-0 small font-monospace"
         style="max-height:320px;overflow-y:auto;white-space:pre-wrap;word-break:break-all;">等待輸出…</pre>
  </div>
  @endif

  {{-- 失敗 --}}
  @if($penTest->status === 'failed' && $penTest->error_log)
  <div class="alert alert-danger">
    <strong>錯誤訊息：</strong>
    <pre class="mb-0 mt-1 small">{{ $penTest->error_log }}</pre>
  </div>
  @endif

  {{-- 結果 --}}
  @if($penTest->status === 'done')
  @php
    $bySev      = $summary['by_severity'] ?? [];
    $total      = $summary['total']       ?? 0;
    $openPorts  = $summary['open_ports']  ?? 0;
    $hostsUp    = $summary['hosts_up']    ?? 0;
    $pagesScanned = $summary['pages_scanned'] ?? null;
    $byOwasp    = $summary['by_owasp']    ?? [];
    $fileCount  = $summary['file_count']  ?? null;
    $sevCounts  = [];
    foreach($findings as $f) { $s=$f['severity']??'info'; $sevCounts[$s]=($sevCounts[$s]??0)+1; }
  @endphp

  {{-- 統計 --}}
  <div class="row g-3 mb-3">
    <div class="col-6 col-md-2">
      <div class="card text-center border-0 bg-light">
        <div class="card-body py-2">
          <div class="fs-3 fw-bold">{{ $total }}</div>
          <div class="text-muted small">總計</div>
        </div>
      </div>
    </div>
    @if($openPorts > 0)
    <div class="col-6 col-md-2">
      <div class="card text-center border-0 bg-danger bg-opacity-10">
        <div class="card-body py-2">
          <div class="fs-3 fw-bold text-danger">{{ $openPorts }}</div>
          <div class="text-muted small">開放埠</div>
        </div>
      </div>
    </div>
    @endif
    @foreach(['critical'=>['danger','嚴重'],'high'=>['warning','高'],'medium'=>['info','中'],'low'=>['primary','低'],'info'=>['secondary','資訊']] as $sev=>[$col,$lbl])
    <div class="col-6 col-md-1">
      <div class="card text-center border-0 bg-{{ $col }} bg-opacity-75 {{ in_array($sev,['high','medium'])?'text-dark':'text-white' }}">
        <div class="card-body py-2">
          <div class="fs-4 fw-bold">{{ $bySev[$sev] ?? 0 }}</div>
          <div class="small">{{ $lbl }}</div>
        </div>
      </div>
    </div>
    @endforeach
  </div>

  {{-- 掃描範圍提示 --}}
  @php $hasMeta = ($hostsUp > 0 || $pagesScanned !== null); @endphp
  @if($hasMeta)
  <div class="d-flex gap-3 mb-3 text-muted small">
    @if($hostsUp > 0)
      <span><i class="bi bi-hdd-network me-1"></i>存活主機：<strong class="text-body">{{ $hostsUp }}</strong></span>
      <span><i class="bi bi-ethernet me-1"></i>開放埠：<strong class="text-body">{{ $openPorts }}</strong></span>
    @endif
    @if($pagesScanned !== null)
      <span><i class="bi bi-globe me-1"></i>掃描頁面：<strong class="text-body">{{ number_format($pagesScanned) }}</strong></span>
    @endif
  </div>
  @endif

  {{-- OWASP 分類（Nikto 會有）--}}
  @if(!empty($byOwasp))
  <div class="card shadow-sm mb-3">
    <div class="card-header py-2 fw-semibold"><i class="bi bi-diagram-3 me-1 text-danger"></i>OWASP Top 10</div>
    <div class="card-body py-2">
      <div class="row g-2">
        @php
          $owaspLabels = \App\Models\VulnScan::owaspLabels();
        @endphp
        @foreach($owaspLabels as $oid => $olabel)
        @php $cnt = $byOwasp[$oid] ?? 0; @endphp
        <div class="col-md-6 col-lg-4">
          <div class="d-flex align-items-center gap-2 p-2 rounded border {{ $cnt>0?'border-warning bg-warning bg-opacity-10':'' }}">
            <span class="badge bg-secondary font-monospace" style="font-size:.7rem;">{{ $oid }}</span>
            <span class="small flex-grow-1">{{ $olabel }}</span>
            @if($cnt>0)<span class="badge bg-danger">{{ $cnt }}</span>
            @else<span class="text-muted small">-</span>@endif
          </div>
        </div>
        @endforeach
      </div>
    </div>
  </div>
  @endif

  {{-- 發現清單 --}}
  <div class="card shadow-sm mb-4">
    <div class="card-header py-2">
      <div class="d-flex flex-wrap align-items-center gap-2">
        <div class="d-flex gap-1 flex-wrap" id="sevFilters">
          <button class="btn btn-sm btn-secondary active" data-sev="all">
            全部 <span class="badge bg-light text-dark ms-1">{{ $total }}</span>
          </button>
          @foreach(['critical'=>['danger','嚴重'],'high'=>['warning','高'],'medium'=>['info','中'],'low'=>['primary','低'],'info'=>['secondary','資訊']] as $sev=>[$col,$lbl])
            @if(($sevCounts[$sev]??0)>0)
            <button class="btn btn-sm btn-outline-{{ $col }}" data-sev="{{ $sev }}">
              {{ $lbl }} <span class="badge bg-{{ $col }} ms-1">{{ $sevCounts[$sev] }}</span>
            </button>
            @endif
          @endforeach
        </div>
        <div class="ms-auto">
          <div class="input-group input-group-sm" style="width:220px;">
            <span class="input-group-text bg-white"><i class="bi bi-search text-muted"></i></span>
            <input type="text" id="findingSearch" class="form-control border-start-0" placeholder="搜尋埠、服務、IP…">
          </div>
        </div>
      </div>
    </div>

    <div class="table-responsive">
      <table class="table table-sm table-hover align-middle mb-0" id="findingsTable">
        <thead class="table-light">
          <tr>
            <th style="width:70px;">嚴重度</th>
            <th>目標 / URL</th>
            @if(($penTest->scanner_type ?? 'nmap') === 'nmap')
            <th style="width:80px;">埠/協定</th>
            <th style="width:80px;">服務</th>
            <th>版本 / 說明</th>
            @else
            <th>問題說明</th>
            <th>修補建議</th>
            @endif
          </tr>
        </thead>
        <tbody>
          @forelse($findings as $f)
          @php
            $sev = $f['severity'] ?? 'info';
            $col = ['critical'=>'danger','high'=>'warning','medium'=>'info','low'=>'primary','info'=>'secondary'][$sev] ?? 'secondary';
            $textCls = in_array($sev,['high','medium']) ? ' text-dark' : '';
            $search  = strtolower(($f['matched_at']??'').($f['service']??'').($f['port']??'').($f['version']??'').($f['name']??'').($f['description']??''));
          @endphp
          <tr data-sev="{{ $sev }}" data-search="{{ $search }}">
            <td><span class="badge bg-{{ $col }}{{ $textCls }}">{{ strtoupper($sev) }}</span></td>
            <td class="font-monospace small">{{ $f['matched_at'] ?? '—' }}</td>
            @if(($penTest->scanner_type ?? 'nmap') === 'nmap')
            <td class="font-monospace small">{{ $f['port'] ?? '—' }}/{{ $f['protocol'] ?? 'tcp' }}</td>
            <td class="small fw-semibold">{{ $f['service'] ?? '—' }}</td>
            <td class="small">
              @if(!empty($f['version']))<div class="text-muted">{{ $f['version'] }}</div>@endif
              {{ $f['description'] ?? '' }}
              @if(!empty($f['script_output']))
              <details class="mt-1">
                <summary class="text-muted" style="cursor:pointer;font-size:.75rem;">Script 輸出</summary>
                <pre class="bg-dark text-success p-2 rounded mt-1 mb-0" style="font-size:.7rem;max-height:100px;overflow-y:auto;">{{ $f['script_output'] }}</pre>
              </details>
              @endif
            </td>
            @else
            <td class="small">{{ $f['description'] ?? $f['name'] ?? '—' }}</td>
            <td class="small text-muted">{{ $f['remediation'] ?? '' }}</td>
            @endif
          </tr>
          @empty
          <tr>
            <td colspan="5" class="text-center text-muted py-5">
              <i class="bi bi-check-circle-fill text-success fs-3 d-block mb-2"></i>
              未發現安全問題
            </td>
          </tr>
          @endforelse
        </tbody>
      </table>
    </div>
  </div>
  @endif

</div>
@endsection

@push('scripts')
<script>
@if(in_array($penTest->status, ['pending','running']))
(function poll() {
  fetch('{{ route('pen-test.log', $penTest) }}')
    .then(r => r.json()).then(data => {
      var box = document.getElementById('scan-log');
      if (box && data.lines) { box.textContent = data.lines.join('\n'); box.scrollTop = box.scrollHeight; }
      if (data.done) { location.reload(); return; }
      setTimeout(poll, 5000);
    }).catch(() => setTimeout(poll, 8000));
})();
@endif

document.querySelectorAll('#sevFilters button').forEach(function(btn) {
  btn.addEventListener('click', function() {
    document.querySelectorAll('#sevFilters button').forEach(b => b.classList.remove('active'));
    this.classList.add('active');
    var sev = this.dataset.sev;
    document.querySelectorAll('#findingsTable tbody tr[data-sev]').forEach(function(row) {
      row.style.display = (sev === 'all' || row.dataset.sev === sev) ? '' : 'none';
    });
  });
});

var searchInput = document.getElementById('findingSearch');
if (searchInput) {
  searchInput.addEventListener('input', function() {
    var q = this.value.toLowerCase();
    document.querySelectorAll('#findingsTable tbody tr[data-search]').forEach(function(row) {
      row.style.display = row.dataset.search.includes(q) ? '' : 'none';
    });
  });
}
</script>
@endpush