{% extends "base.html" %}
{% block title %}Admin — Malware Reports{% endblock %}
{% block content %}
<h1>Malware Reports</h1>

<p class="text-dim">
    Filter:
    <a href="/admin/reports"{% if not status_filter %} class="badge badge-active"{% endif %}>all</a>
    {% for s in ["open", "reviewing", "resolved", "dismissed"] %}
        <a href="/admin/reports?status={{ s }}"{% if status_filter == s %} class="badge badge-active"{% endif %}>{{ s }}</a>
    {% endfor %}
    · Quarantined packages are hidden from search, metadata and downloads.
</p>

<div class="card">
<table>
    <thead>
        <tr>
            <th>#</th>
            <th>Package</th>
            <th>Reason</th>
            <th>Details</th>
            <th>Reporter</th>
            <th>Status</th>
            <th>Filed</th>
            <th>Actions</th>
        </tr>
    </thead>
    <tbody>
    {% for r in reports %}
        <tr>
            <td data-label="#">#{{ r.id }}</td>
            <td data-label="Package">
                <strong>{{ r.package_name }}</strong>
                {% if r.version %}<span class="text-dim">@ {{ r.version }}</span>{% endif %}
            </td>
            <td data-label="Reason"><span class="badge badge-suspended">{{ r.reason }}</span></td>
            <td data-label="Details">{{ r.details or "—" }}</td>
            <td data-label="Reporter">{{ r.reporter.email if r.reporter else "—" }}</td>
            <td data-label="Status">
                <span class="badge {% if r.status == 'open' %}badge-no-totp{% elif r.status == 'reviewing' %}badge-totp{% else %}badge-active{% endif %}">{{ r.status }}</span>
            </td>
            <td data-label="Filed">{{ r.created_at.strftime('%Y-%m-%d %H:%M') }}</td>
            <td data-label="Actions">
                <div class="btn-group">
                    {% if r.status == "open" %}
                    <form method="POST" action="/admin/reports/{{ r.id }}/status">
                        <input type="hidden" name="status" value="reviewing">
                        <button type="submit" class="btn btn-outline btn-sm">Review</button>
                    </form>
                    {% endif %}
                    {% if r.status != "resolved" %}
                    <form method="POST" action="/admin/reports/{{ r.id }}/status">
                        <input type="hidden" name="status" value="resolved">
                        <button type="submit" class="btn btn-primary btn-sm">Resolve</button>
                    </form>
                    {% endif %}
                    {% if r.status != "dismissed" %}
                    <form method="POST" action="/admin/reports/{{ r.id }}/status">
                        <input type="hidden" name="status" value="dismissed">
                        <button type="submit" class="btn btn-outline btn-sm">Dismiss</button>
                    </form>
                    {% endif %}
                    <form method="POST" action="/admin/reports/{{ r.id }}/quarantine"
                          onsubmit="return confirm('Toggle quarantine for {{ r.package_name }}?')">
                        <button type="submit" class="btn btn-danger btn-sm">Quarantine</button>
                    </form>
                </div>
            </td>
        </tr>
    {% else %}
        <tr><td colspan="8" class="text-dim">No reports{% if status_filter %} with status "{{ status_filter }}"{% endif %}.</td></tr>
    {% endfor %}
    </tbody>
</table>
</div>
{% endblock %}