{% extends "base.html" %}
{% block title %}{{ vulnerability.cve_id or vulnerability.package }} — secfoo{% endblock %}
{% block content %}
<a href="/activities/{{ skill_id }}" class="ds-caption">&larr; Back to SCA Reachability</a>

<div style="display:flex;align-items:center;gap:var(--space-3);flex-wrap:wrap;margin-top:var(--space-4)">
  <span class="badge {{ vulnerability.severity | severity_badge }}">{{ vulnerability.severity }}</span>
  <span class="badge badge--neutral">{{ vulnerability.reachability }}</span>
  <h1 style="margin:0">
    {% if vulnerability.cve_id %}{{ vulnerability.cve_id }}{% else %}Unverified issue{% endif %}
    in <code>{{ vulnerability.package }}</code>
  </h1>
</div>
<p class="ds-body" style="color:var(--color-text-muted)">
  {{ vulnerability.package }}@{{ vulnerability.version }}
  {% if vulnerability.ecosystem_raw %} &middot; {{ vulnerability.ecosystem_raw }}{% endif %}
</p>

{% if not vulnerability.cve_id %}
<div class="alert alert--info" style="margin-top:var(--space-4)">
  <div>
    No matching entry in OSV.dev{% if vulnerability.ecosystem_osv is none %} (this ecosystem isn't recognized, so it was never looked up){% endif %} --
    this is the model's own finding from the report text, not a database-verified CVE.
    {% if vulnerability.llm_cve_text and vulnerability.llm_cve_text != "unverified" %}
    The report itself noted: <code>{{ vulnerability.llm_cve_text }}</code> (unconfirmed).
    {% endif %}
  </div>
</div>
{% endif %}

<div style="display:grid;grid-template-columns:2fr 1fr;gap:var(--space-6);margin-top:var(--space-6)">
  <div>
    <div class="card">
      <h4 class="card__title">Summary</h4>
      {% if vulnerability.osv_summary %}
      <p class="ds-body">{{ vulnerability.osv_summary }}</p>
      {% if vulnerability.osv_published %}
      <p class="ds-caption" style="color:var(--color-text-muted)">Published {{ vulnerability.osv_published }} (via OSV.dev)</p>
      {% endif %}
      {% else %}
      <p class="ds-body">{{ vulnerability.issue }}</p>
      {% endif %}
    </div>

    {% if vulnerability.reachability_evidence or vulnerability.recommendation %}
    <div class="card" style="margin-top:var(--space-6)">
      <h4 class="card__title">Risk &amp; recommendation</h4>
      {% if vulnerability.reachability_evidence %}
      <p class="ds-caption" style="color:var(--color-text-muted);margin-bottom:var(--space-1)">Reachability evidence</p>
      <p class="ds-body" style="margin-bottom:var(--space-4)">{{ vulnerability.reachability_evidence }}</p>
      {% endif %}
      {% if vulnerability.recommendation %}
      <p class="ds-caption" style="color:var(--color-text-muted);margin-bottom:var(--space-1)">Recommendation</p>
      <p class="ds-body">{{ vulnerability.recommendation }}</p>
      {% endif %}
    </div>
    {% endif %}

    <h2 style="margin-top:var(--space-8)">Affected applications</h2>
    {% if vulnerability.affected_projects %}
    <div class="table-wrap" style="margin-top:var(--space-4)">
      <table class="table">
        <thead><tr><th>Project</th><th>Severity</th><th>Reachability</th><th>Fixed in</th></tr></thead>
        <tbody>
          {% for p in vulnerability.affected_projects %}
          <tr class="run-row" onclick="location.href='/projects/{{ p.project_id }}'">
            <td>{{ p.project_display_name }}</td>
            <td><span class="badge {{ p.severity | severity_badge }}">{{ p.severity }}</span></td>
            <td>{{ p.reachability }}</td>
            <td>{{ p.fixed_in }}</td>
          </tr>
          {% endfor %}
        </tbody>
      </table>
    </div>
    {% else %}
    <div class="alert alert--info" style="margin-top:var(--space-4)"><div>No projects currently report this.</div></div>
    {% endif %}
  </div>

  <div>
    <div class="card">
      <h4 class="card__title">Remediation</h4>
      {% if vulnerability.fixed_in and vulnerability.fixed_in.lower() not in ["unknown", "n/a", "-", ""] %}
      <p class="ds-body"><strong>Fixed in:</strong> {{ vulnerability.fixed_in }}</p>
      {% else %}
      <div class="alert alert--warning"><div>No known fix -- currently on {{ vulnerability.version }}.</div></div>
      {% endif %}
    </div>
  </div>
</div>
{% endblock %}