@extends('layouts.app')
@section('title', '弱點掃描')
@section('content')
<div class="container-fluid pb-5">

  <div class="d-flex justify-content-between align-items-center mb-3">
    <h4 class="mb-0"><i class="bi bi-shield-exclamation me-2 text-danger"></i>弱點掃描</h4>
    <div class="d-flex gap-2">
      <a href="{{ route('vuln-scan.engine') }}" class="btn btn-outline-secondary btn-sm">
        <i class="bi bi-cpu me-1"></i>引擎資訊
      </a>
    </div>
  </div>

  @if(session('success'))
    <div class="alert alert-success alert-dismissible fade show py-2">
      {{ session('success') }}<button type="button" class="btn-close" data-bs-dismiss="alert"></button>
    </div>
  @endif

  {{-- ══ 掃描工具選擇卡片 ══ --}}
  @php
    $allScannerDefs = [
      'nuclei' => [
        'label'   => 'Nuclei',
        'sub'     => 'ProjectDiscovery',
        'color'   => 'danger',
        'icon'    => 'bi-crosshair',
        'desc'    => '開源模板引擎，5000+ 漏洞模板',
        'tags'    => ['CVE', 'OWASP', '設定錯誤'],
        'ready'   => true,
        'badge'   => '已安裝',
        'badge_c' => 'success',
        'engine'  => 'Nuclei '.$engineVersion.' · '.$templateTotal.' 模板',
      ],
      'zap' => [
        'label'   => 'OWASP ZAP',
        'sub'     => 'Checkmarx / OWASP',
        'color'   => 'primary',
        'icon'    => 'bi-bug-fill',
        'desc'    => 'OWASP 官方認可，主動 DAST 掃描',
        'tags'    => ['XSS', 'CSP', 'OWASP Top 10'],
        'ready'   => true,
        'badge'   => 'Docker',
        'badge_c' => 'primary',
        'engine'  => 'ghcr.io/zaproxy/zaproxy:stable',
      ],
      'nessus' => [
        'label'   => 'Nessus',
        'sub'     => 'Tenable',
        'color'   => 'warning',
        'icon'    => 'bi-activity',
        'desc'    => '業界最具公信力，企業合規標準',
        'tags'    => ['CVE', 'CVSS', 'PCI-DSS'],
        'ready'   => \App\Services\NessusService::isConfigured(),
        'badge'   => \App\Services\NessusService::isConfigured() ? '已設定' : '需設定',
        'badge_c' => \App\Services\NessusService::isConfigured() ? 'success' : 'secondary',
        'engine'  => config('services.nessus.base_url', '—'),
      ],
      'garak' => [
        'label'   => 'Garak',
        'sub'     => 'NVIDIA / LLM Security',
        'color'   => 'success',
        'icon'    => 'bi-cpu',
        'desc'    => 'LLM 安全評估，OWASP LLM Top 10 2025',
        'tags'    => ['提示注入', '越獄', 'LLM01–LLM10'],
        'ready'   => true,
        'badge'   => 'LLM 專用',
        'badge_c' => 'success',
        'engine'  => 'garak v0.15 · OpenAI-compatible API',
      ],
    ];
    $scanners = array_filter($allScannerDefs, fn($_, $k) => in_array($k, $enabledScanners), ARRAY_FILTER_USE_BOTH);
  @endphp

  <div class="row g-3 mb-4">
    @foreach($scanners as $key => $s)
    @php
      $cnt   = $scannerCounts[$key] ?? null;
      $total = $cnt['total'] ?? 0;
      $done  = $cnt['done']  ?? 0;
      $active = $scannerFilter === $key;
    @endphp
    <div class="col-md-4">
      <div class="card h-100 shadow-sm border-2 {{ $active ? 'border-'.$s['color'] : 'border-transparent' }}"
           style="{{ $active ? '' : 'border-color:transparent!important;' }}">

        {{-- 卡片頂部色條 --}}
        <div class="rounded-top" style="height:5px;background:var(--bs-{{ $s['color'] }});"></div>

        <div class="card-body pb-2">
          {{-- 標題列 --}}
          <div class="d-flex align-items-start justify-content-between mb-2">
            <div>
              <div class="d-flex align-items-center gap-2">
                <i class="bi {{ $s['icon'] }} text-{{ $s['color'] }} fs-5"></i>
                <span class="fw-bold fs-6">{{ $s['label'] }}</span>
                <span class="badge bg-{{ $s['badge_c'] }}" style="font-size:.6rem;">{{ $s['badge'] }}</span>
              </div>
              <div class="text-muted small mt-1" style="font-size:.72rem;">{{ $s['sub'] }}</div>
            </div>
            {{-- 掃描數統計 --}}
            <div class="text-end">
              <div class="fw-bold fs-5 text-{{ $s['color'] }}">{{ $total }}</div>
              <div class="text-muted" style="font-size:.65rem;">次掃描</div>
            </div>
          </div>

          {{-- 說明 --}}
          <p class="text-muted small mb-2" style="font-size:.78rem;">{{ $s['desc'] }}</p>

          {{-- 標籤 --}}
          <div class="mb-2">
            @foreach($s['tags'] as $tag)
              <span class="badge text-bg-light border me-1" style="font-size:.62rem;">{{ $tag }}</span>
            @endforeach
          </div>

          {{-- 引擎資訊 --}}
          <div class="text-muted" style="font-size:.68rem; font-family:monospace;">
            {{ $s['engine'] }}
          </div>
        </div>

        <div class="card-footer bg-transparent pt-0 pb-2 px-3">
          <div class="d-flex gap-2">
            <a href="{{ route('vuln-scan.create', ['scanner_type' => $key]) }}"
               class="btn btn-{{ $s['color'] }} btn-sm flex-grow-1 {{ !$s['ready'] ? 'disabled' : '' }}">
              <i class="bi bi-plus-lg me-1"></i>新增掃描
            </a>
            <a href="{{ route('vuln-scan.index', ['scanner' => $key]) }}"
               class="btn btn-outline-{{ $s['color'] }} btn-sm {{ $active ? 'active' : '' }}">
              <i class="bi bi-list-ul me-1"></i>{{ $done }} 筆
            </a>
          </div>
        </div>
      </div>
    </div>
    @endforeach
  </div>

  {{-- ══ 掃描記錄列表 ══ --}}
  <div class="card shadow-sm">
    <div class="card-header py-2">
      <div class="d-flex flex-wrap align-items-center gap-2">

        <span class="fw-semibold me-1">
          @if($scannerFilter)
            <span class="badge bg-{{ $scanners[$scannerFilter]['color'] }} me-1">{{ $scanners[$scannerFilter]['label'] }}</span>
          @else
            <i class="bi bi-clock-history me-1"></i>
          @endif
          掃描記錄
        </span>

        <form method="GET" action="{{ route('vuln-scan.index') }}"
              class="d-flex gap-2 align-items-center ms-auto flex-wrap">
          @if($scannerFilter)
            <input type="hidden" name="scanner" value="{{ $scannerFilter }}">
          @endif

          <div class="input-group input-group-sm" style="width:220px;">
            <span class="input-group-text bg-white"><i class="bi bi-search text-muted"></i></span>
            <input type="text" name="q" class="form-control border-start-0"
                   placeholder="搜尋目標 URL、主機、模式…"
                   value="{{ $search }}">
            @if($search)
              <a href="{{ route('vuln-scan.index', array_filter(['scanner'=>$scannerFilter])) }}"
                 class="btn btn-outline-secondary"><i class="bi bi-x"></i></a>
            @endif
          </div>

          <button type="submit" class="btn btn-sm btn-danger px-3">搜尋</button>

          @if($scannerFilter)
            <a href="{{ route('vuln-scan.index', array_filter(['q'=>$search])) }}"
               class="btn btn-outline-secondary btn-sm">
              <i class="bi bi-x me-1"></i>清除篩選
            </a>
          @endif
        </form>

      </div>
    </div>
    <div class="card-body p-0">
      <div class="table-responsive">
      <table id="vulnScanTable" class="table table-hover table-sm mb-0 align-middle">
        <thead class="table-light">
          <tr>
            <th>目標 URL</th>
            <th>工具 / 模式</th>
            <th>共享</th>
            <th>狀態</th>
            <th class="text-center" style="color:#dc3545;">C</th>
            <th class="text-center" style="color:#fd7e14;">H</th>
            <th class="text-center" style="color:#0dcaf0;">M</th>
            <th class="text-center" style="color:#0d6efd;">L</th>
            <th class="text-center text-muted">I</th>
            @if($isAdmin) <th>建立者</th> @endif
            <th>時間</th>
            <th></th>
          </tr>
        </thead>
        <tbody>
          @forelse($scans as $scan)
          @php $bySev = $scan->summary['by_severity'] ?? []; @endphp
          <tr>
            <td>
              <a href="{{ route('vuln-scan.show', $scan) }}" class="text-decoration-none fw-semibold">
                {{ $scan->target_url }}
              </a>
              @if($scan->host)
                <span class="badge bg-secondary ms-1" style="font-size:.6rem;">{{ $scan->host->name }}</span>
              @endif
            </td>
            <td>
              <span class="badge bg-{{ $scan->scannerColor() }}">{{ $scan->scannerLabel() }}</span>
              <span class="text-muted ms-1" style="font-size:.7rem;">
                {{ $scan->scanner_type === 'nuclei' ? $scan->profile : ($scan->scan_mode ?? '') }}
              </span>
            </td>
            <td class="text-center">
              @if($scan->is_shared)
                <i class="bi bi-people-fill text-success" title="共享中"></i>
              @else
                <i class="bi bi-person text-muted" title="僅限本人"></i>
              @endif
            </td>
            <td>
              @if($scan->status === 'done')
                <span class="badge bg-success">完成</span>
              @elseif($scan->status === 'running')
                <span class="badge bg-warning text-dark">
                  <span class="spinner-border spinner-border-sm me-1" style="width:.6rem;height:.6rem;"></span>執行中
                </span>
              @elseif($scan->status === 'failed')
                <span class="badge bg-danger">失敗</span>
              @else
                <span class="badge bg-secondary">待執行</span>
              @endif
            </td>
            <td class="text-center fw-bold" style="color:#dc3545;">{{ ($bySev['critical']??0) ?: '·' }}</td>
            <td class="text-center fw-bold" style="color:#fd7e14;">{{ ($bySev['high']??0) ?: '·' }}</td>
            <td class="text-center fw-bold" style="color:#0dcaf0;">{{ ($bySev['medium']??0) ?: '·' }}</td>
            <td class="text-center fw-bold" style="color:#0d6efd;">{{ ($bySev['low']??0) ?: '·' }}</td>
            <td class="text-center text-muted">{{ ($bySev['info']??0) ?: '·' }}</td>
            @if($isAdmin)
            <td class="text-muted small">
              <i class="bi bi-person me-1"></i>{{ $scan->creator?->name ?? '—' }}
            </td>
            @endif
            <td class="text-muted small text-nowrap">{{ $scan->created_at->format('m-d H:i') }}</td>
            <td>
              <div class="d-flex gap-1">
                <a href="{{ route('vuln-scan.show', $scan) }}" class="btn btn-sm btn-outline-secondary" title="查看">
                  <i class="bi bi-eye"></i>
                </a>
                @if($scan->status === 'done')
                <button class="btn btn-sm btn-outline-primary send-report-btn"
                        data-url="{{ route('vuln-scan.send-email', $scan) }}"
                        data-name="{{ $scan->host?->project?->name ?? $scan->target_url ?? $scan->id }}"
                        title="寄送報告">
                  <i class="bi bi-envelope"></i>
                </button>
                @endif
                <form method="POST" action="{{ route('vuln-scan.destroy', $scan) }}"
                      onsubmit="return confirm('確定刪除此掃描記錄？')">
                  @csrf @method('DELETE')
                  <button class="btn btn-sm btn-outline-danger" title="刪除"><i class="bi bi-trash"></i></button>
                </form>
              </div>
            </td>
          </tr>
          @empty
          <tr>
            <td colspan="10" class="text-center text-muted py-5">
              <i class="bi bi-shield-slash fs-3 d-block mb-2 opacity-25"></i>
              @if($search)
                找不到「{{ $search }}」的掃描記錄
              @else
                尚無掃描記錄
                @if($scannerFilter)
                  ，<a href="{{ route('vuln-scan.create', ['scanner_type' => $scannerFilter]) }}">立即新增 {{ $scanners[$scannerFilter]['label'] }} 掃描</a>
                @else
                  ，請點選上方工具卡片開始掃描
                @endif
              @endif
            </td>
          </tr>
          @endforelse
        </tbody>
      </table>
      </div>{{-- end table-responsive --}}
    </div>

  </div>

</div>

{{-- 寄送報告 Modal --}}
@include('partials.send-report-modal')

@endsection

@push('scripts')
<script>
$(document).ready(function () {
  $('#vulnScanTable').DataTable({
    order: [[{{ $isAdmin ? 10 : 9 }}, 'desc']],
    pageLength: 20,
    lengthMenu: [10, 20, 50, 100],
    language: { url: '/vendor/datatables/i18n/zh-HANT.json' },
    columnDefs: [
      { orderable: false, targets: -1 },
    ],
  });
});
</script>
<script>
document.addEventListener('click', function(e) {
  var btn = e.target.closest('.send-report-btn');
  if (!btn) return;
  document.getElementById('sendReportForm').action = btn.dataset.url;
  document.getElementById('sendReportName').textContent = btn.dataset.name;
  document.querySelector('#sendReportForm input[name="recipients"]').value = '';
  document.querySelector('#sendReportForm textarea[name="note"]').value = '';
  new bootstrap.Modal(document.getElementById('sendReportModal')).show();
});
document.getElementById('sendReportForm').addEventListener('submit', function() {
  var btn = document.getElementById('sendReportSubmitBtn');
  btn.disabled = true;
  btn.innerHTML = '<span class="spinner-border spinner-border-sm me-1"></span>寄送中…';
});
</script>
@endpush