function Get-SecurityBaselineAccount {
    $result = @()
    $pwdPolicy = net accounts | Out-String

    # 密码最短期限：防止用户改完密码后立刻改回旧密码
    $result += [PSCustomObject]@{
        Category = "密码策略"; Check = "密码最短期限"
        Value    = if ($pwdPolicy -match '密码最短期限:\s*(\d+)') { $Matches[1] + " 天" } else { "未知" }
        Expected = "≥ 1 天"
    }
    # 密码最长期限：长期不换密码会增加凭据泄露的风险
    $result += [PSCustomObject]@{
        Category = "密码策略"; Check = "密码最长期限"
        Value    = if ($pwdPolicy -match '密码最长期限:\s*(\d+)') { $Matches[1] + " 天" } else { "未知" }
        Expected = "≤ 90 天"
    }
    # 最小密码长度：14 位以下容易被暴力破解
    $result += [PSCustomObject]@{
        Category = "密码策略"; Check = "最小密码长度"
        Value    = if ($pwdPolicy -match '最小密码长度:\s*(\d+)') { $Matches[1] + " 字符" } else { "未知" }
        Expected = "≥ 14 字符"
    }
    # 管理员组成员应尽量精简，避免权限滥用
    $adminMembers = Get-LocalGroupMember -SID "S-1-5-32-544" -ErrorAction SilentlyContinue
    $result += [PSCustomObject]@{
        Category = "账户安全"; Check = "本地管理员组成员数"
        Value = "$($adminMembers.Count) 个"; Expected = "尽量精简"
    }
    # Guest 账户启用后任何人可匿名访问系统资源
    $guest = Get-LocalUser -Name "Guest" -ErrorAction SilentlyContinue
    $result += [PSCustomObject]@{
        Category = "账户安全"; Check = "Guest 账户状态"
        Value = if ($guest.Enabled) { "已启用 (风险)" } else { "已禁用" }; Expected = "已禁用"
    }
    return $result
}

function Get-SecurityBaselineNetwork {
    $result = @()

    # 逐个检查域、专用、公用三个防火墙配置文件
    foreach ($profile in @("Domain", "Private", "Public")) {
        $fw = Get-NetFirewallProfile -Name $profile -ErrorAction SilentlyContinue
        $result += [PSCustomObject]@{
            Category = "防火墙"; Check = "$profile 配置文件"
            Value    = if ($fw.Enabled) { "已启用" } else { "已禁用 (风险)" }
            Expected = "已启用"
        }
    }
    # 扫描监听在所有网卡上的高危端口
    $listeningPorts = Get-NetTCPConnection -State Listen -ErrorAction SilentlyContinue |
        Where-Object { $_.LocalAddress -eq "0.0.0.0" -or $_.LocalAddress -eq "::" } |
        Select-Object LocalPort, OwningProcess -Unique

    $highRiskPorts = @(21, 23, 445, 3389, 5800, 5900)
    $riskyPorts = $listeningPorts | Where-Object { $_.LocalPort -in $highRiskPorts }

    $result += [PSCustomObject]@{
        Category = "网络"; Check = "高危端口开放"
        Value    = if ($riskyPorts) {
            "发现 $($riskyPorts.Count) 个: $($riskyPorts.LocalPort -join ', ')"
        } else { "无" }
        Expected = "无"
    }
    return $result
}

function Get-SecurityBaselineRDP {
    $result = @()

    # 通过注册表检查 RDP 是否启用（0 = 启用，1 = 禁用）
    $rdp = Get-ItemProperty -Path "HKLM:\System\CurrentControlSet\Control\Terminal Server" `
        -Name "fDenyTSConnections" -ErrorAction SilentlyContinue
    $result += [PSCustomObject]@{
        Category = "RDP 安全"; Check = "RDP 状态"
        Value    = if ($rdp.fDenyTSConnections -eq 0) { "已启用" } else { "已禁用" }
        Expected = "按需启用"
    }

    # NLA 未启用时连接建立前不做身份验证，存在安全风险
    $nla = Get-ItemProperty -Path "HKLM:\System\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp" `
        -Name "UserAuthentication" -ErrorAction SilentlyContinue
    $result += [PSCustomObject]@{
        Category = "RDP 安全"; Check = "NLA（网络级别身份验证）"
        Value    = if ($nla.UserAuthentication -eq 1) { "已启用" } else { "未启用 (风险)" }
        Expected = "已启用"
    }
    return $result
}

function Get-SecurityBaselineUpdates {
    $result = @()
    # 获取最近安装的补丁，按时间降序排列
    $recentUpdates = Get-HotFix | Sort-Object InstalledOn -Descending | Select-Object -First 5
    $latestUpdate = $recentUpdates | Select-Object -First 1
    $result += [PSCustomObject]@{
        Category = "系统更新"; Check = "最新补丁日期"
        Value    = if ($latestUpdate.InstalledOn) {
            $latestUpdate.InstalledOn.ToString("yyyy-MM-dd")
        } else { "未知" }
        Expected = "30 天内"
    }
    # 检查 Windows Update 服务是否正常运行
    $wuService = Get-Service -Name wuauserv -ErrorAction SilentlyContinue
    $result += [PSCustomObject]@{
        Category = "系统更新"; Check = "Windows Update 服务"
        Value = "$($wuService.Status)"; Expected = "Running"
    }
    # 通过 COM 对象查询待安装的重要更新
    $updateSession = New-Object -ComObject Microsoft.Update.Session
    $searchResult = $updateSession.CreateUpdateSearcher().Search(
        "IsInstalled=0 and Type='Software' and AutoSelectOnWebSites=1"
    )
    $result += [PSCustomObject]@{
        Category = "系统更新"; Check = "待安装重要更新"
        Value = "$($searchResult.Updates.Count) 个"; Expected = "0 个"
    }
    return $result
}

function Get-SecurityBaselineServices {
    $result = @()
    # 常见高危服务列表：名称 => 服务标识
    $dangerousServices = @{
        "Telnet"        = "tlntsvr"
        "远程注册表"     = "RemoteRegistry"
        "SSDP 发现"     = "ssdpsrv"
        "UPnP 设备主机"  = "upnphost"
    }
    foreach ($svc in $dangerousServices.GetEnumerator()) {
        $service = Get-Service -Name $svc.Value -ErrorAction SilentlyContinue
        $result += [PSCustomObject]@{
            Category = "服务检查"; Check = "$($svc.Key) ($($svc.Value))"
            Value    = if ($service) {
                "$($service.Status), 启动类型: $($service.StartType)"
            } else { "未安装" }
            Expected = "未安装或已禁用"
        }
    }
    # 系统级自启动项过多可能意味着恶意软件持久化
    $startupItems = Get-CimInstance -ClassName Win32_StartupCommand |
        Where-Object { $_.Location -eq "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" }
    $result += [PSCustomObject]@{
        Category = "启动项"; Check = "系统级自启动项"
        Value = "$($startupItems.Count) 个"; Expected = "审查后保留必要项"
    }
    return $result
}

function New-SecurityBaselineReport {
    param(
        [string]$OutputPath = ".\SecurityBaseline_$(Get-Date -Format 'yyyyMMdd').html"
    )

    # 依次调用各维度的检查函数，汇总所有结果
    $allChecks = @(Get-SecurityBaselineAccount) + @(Get-SecurityBaselineNetwork) +
                 @(Get-SecurityBaselineRDP) +
                 @(Get-SecurityBaselineUpdates) + @(Get-SecurityBaselineServices)

    $totalChecks = $allChecks.Count
    $riskItems = ($allChecks | Where-Object {
        $_.Value -match "风险|FAIL|未启用"
    }).Count

    $html = @"
<!DOCTYPE html><html><head><title>安全基线审计报告</title>
<style>
body{font-family:Microsoft YaHei;margin:20px}
table{border-collapse:collapse;width:100%}
th,td{border:1px solid #ddd;padding:8px;text-align:left}
th{background-color:#4CAF50;color:white}
.risk{background-color:#ffcccc}
</style></head><body>
<h1>安全基线审计报告 - $(Get-Date -Format 'yyyy-MM-dd')</h1>
<p>检查项: $totalChecks | 风险项: <span style="color:red">$riskItems</span></p>
<table><tr><th>类别</th><th>检查项</th><th>当前值</th><th>期望值</th></tr>
"@
    foreach ($item in $allChecks) {
        $class = if ($item.Value -match "风险|FAIL|未启用") {
            ' class="risk"'
        } else { "" }
        $html += "<tr$class><td>$($item.Category)</td><td>$($item.Check)</td>" +
                 "<td>$($item.Value)</td><td>$($item.Expected)</td></tr>"
    }
    $html += "</table></body></html>"
    $html | Out-File -FilePath $OutputPath -Encoding UTF8
    Write-Host "报告已生成: $OutputPath"
}

function Install-SeleniumDriver {
    param(
        [ValidateSet("Chrome", "Firefox", "Edge")]
        [string]$Browser = "Chrome"
    )

    # 安装 Selenium PowerShell 模块
    Install-Module -Name Selenium -Scope CurrentUser -Force

    # 创建 WebDriver 存放目录
    $driverPath = "$env:TEMP\selenium"
    if (-not (Test-Path $driverPath)) {
        New-Item -Path $driverPath -ItemType Directory | Out-Null
    }

    Write-Host "$Browser WebDriver 已就绪"
}

function Start-BrowserSession {
    param(
        [ValidateSet("Chrome", "Firefox", "Edge")]
        [string]$Browser = "Chrome",

        [switch]$Headless
    )

    $options = New-Object OpenQA.Selenium.Chrome.ChromeOptions
    if ($Headless) {
        $options.AddArgument("--headless=new")
    }
    $options.AddArgument("--disable-gpu")
    $options.AddArgument("--no-sandbox")

    $driver = New-Object OpenQA.Selenium.Chrome.ChromeDriver($options)
    return $driver
}

function Invoke-WebPageTask {
    param(
        [Parameter(Mandatory)]
        [string]$Url,

        [scriptblock]$Action,

        [switch]$Headless,

        [int]$TimeoutSeconds = 30
    )

    $driver = Start-BrowserSession -Headless:$Headless
    try {
        # 设置隐式等待，避免元素未加载就操作
        $driver.Manage().Timeouts().ImplicitWait = [TimeSpan]::FromSeconds($TimeoutSeconds)
        $driver.Navigate().GoToUrl($Url)
        Write-Host "已打开: $Url"

        $result = & $Action -Driver $driver
        return $result
    }
    finally {
        # 务必释放浏览器进程
        $driver.Quit()
    }
}

$links = Invoke-WebPageTask -Url "https://learn.microsoft.com/powershell" -Headless -Action {
    param($Driver)

    $title = $Driver.Title
    $links = $Driver.FindElements([OpenQA.Selenium.By]::TagName("a")) |
        Where-Object { $_.GetAttribute("href") -match "^https://" } |
        Select-Object @{ N = "Text"; E = { $_.Text } },
                      @{ N = "Href"; E = { $_.GetAttribute("href") } }

    Write-Host "页面: $title, 链接数: $($links.Count)"
    return $links
}

function Save-WebPageScreenshot {
    param(
        [Parameter(Mandatory)]
        [string]$Url,

        [Parameter(Mandatory)]
        [string]$OutputPath,

        [int]$Width = 1920,
        [int]$Height = 1080
    )

    $driver = Start-BrowserSession -Headless
    try {
        $driver.Manage().Window.Size = New-Object System.Drawing.Size($Width, $Height)
        $driver.Navigate().GoToUrl($Url)
        Start-Sleep -Seconds 2

        $screenshot = $driver.GetScreenshot()
        $screenshot.SaveAsFile($OutputPath, [OpenQA.Selenium.ScreenshotImageFormat]::Png)
        Write-Host "截图已保存: $OutputPath"
    }
    finally {
        $driver.Quit()
    }
}

# 全局安装 Playwright 包
npm install -g playwright

# 下载 Chromium 浏览器内核
npx playwright install chromium

function Invoke-PlaywrightScript {
    param(
        [Parameter(Mandatory)]
        [string]$Url,

        [Parameter(Mandatory)]
        [string]$Script
    )

    # 拼接完整的 Node.js 脚本
    $fullScript = @"
const { chromium } = require('playwright');

(async () => {
    const browser = await chromium.launch({ headless: true });
    const page = await browser.newPage();
    await page.goto('$Url');

    $Script

    await browser.close();
})();
"@

    # 写入临时文件并执行
    $scriptPath = [System.IO.Path]::GetTempFileName() + ".js"
    $fullScript | Out-File -FilePath $scriptPath -Encoding UTF8
    node $scriptPath
    Remove-Item $scriptPath
}

function Save-PlaywrightScreenshot {
    param(
        [Parameter(Mandatory)]
        [string]$Url,

        [Parameter(Mandatory)]
        [string]$OutputPath
    )

    $jsCode = "await page.screenshot({ path: '$($OutputPath.Replace('\','/'))', fullPage: true });"
    Invoke-PlaywrightScript -Url $Url -Script $jsCode
    Write-Host "截图已保存: $OutputPath"
}

function Save-PlaywrightPdf {
    param(
        [Parameter(Mandatory)]
        [string]$Url,

        [Parameter(Mandatory)]
        [string]$OutputPath
    )

    $jsCode = "await page.pdf({ path: '$($OutputPath.Replace('\','/'))', format: 'A4' });"
    Invoke-PlaywrightScript -Url $Url -Script $jsCode
    Write-Host "PDF 已保存: $OutputPath"
}

function Test-WebsiteHealth {
    param(
        [Parameter(Mandatory)]
        [string[]]$Urls,

        [int]$TimeoutSeconds = 15
    )

    $driver = Start-BrowserSession -Headless
    $results = @()

    try {
        foreach ($url in $Urls) {
            $sw = [System.Diagnostics.Stopwatch]::StartNew()
            try {
                $driver.Manage().Timeouts().PageLoad = [TimeSpan]::FromSeconds($TimeoutSeconds)
                $driver.Navigate().GoToUrl($url)
                $sw.Stop()

                $results += [PSCustomObject]@{
                    Url        = $url
                    Status     = "OK"
                    LoadTimeMs = $sw.ElapsedMilliseconds
                    Title      = $driver.Title
                    Timestamp  = Get-Date
                }
            }
            catch {
                $sw.Stop()
                $results += [PSCustomObject]@{
                    Url        = $url
                    Status     = "FAIL"
                    LoadTimeMs = $sw.ElapsedMilliseconds
                    Title      = ""
                    Timestamp  = Get-Date
                    Error      = $_.Exception.Message
                }
            }
        }
    }
    finally {
        $driver.Quit()
    }

    return $results | Format-Table -AutoSize
}

# 在 PowerShell 配置文件中添加（只需执行一次）
Add-Content -Path $PROFILE -Value '`$env:OPENAI_API_KEY = "sk-your-key-here"'

# 设置自定义 API 端点（可选）
$env:OPENAI_API_BASE = "https://your-proxy.example.com/v1"

function Invoke-LLMChat {
    param(
        [Parameter(Mandatory)]
        [string]$Prompt,

        [string]$Model = "gpt-4o-mini",

        [string]$SystemMessage = "你是一个有帮助的 PowerShell 助手。",

        [double]$Temperature = 0.7,

        [int]$MaxTokens = 2048
    )

    # 检查 API Key 是否已配置
    $apiKey = $env:OPENAI_API_KEY
    if (-not $apiKey) {
        throw "请先设置环境变量 OPENAI_API_KEY"
    }

    # 确定请求地址：优先使用自定义端点
    $baseUrl = if ($env:OPENAI_API_BASE) { $env:OPENAI_API_BASE } else { "https://api.openai.com/v1" }
    $uri = "$baseUrl/chat/completions"

    # 构造请求体
    $body = @{
        model       = $Model
        messages    = @(
            @{ role = "system"; content = $SystemMessage }
            @{ role = "user";   content = $Prompt }
        )
        temperature = $Temperature
        max_tokens  = $MaxTokens
    } | ConvertTo-Json -Depth 5 -Compress

    # 发送请求（使用 UTF8 编码避免中文乱码）
    $response = Invoke-RestMethod `
        -Uri $uri `
        -Method Post `
        -Headers @{ Authorization = "Bearer $apiKey" } `
        -ContentType "application/json; charset=utf-8" `
        -Body ([System.Text.Encoding]::UTF8.GetBytes($body))

    return $response.choices[0].message.content
}

PS> Invoke-LLMChat -Prompt "用一行 PowerShell 代码获取本机所有 IP 地址"

你可以使用以下命令获取本机所有 IP 地址：
(Get-NetIPAddress -AddressFamily IPv4).IPAddress

function Start-LLMConversation {
    param(
        [string]$Model = "gpt-4o-mini"
    )

    $apiKey = $env:OPENAI_API_KEY
    $baseUrl = if ($env:OPENAI_API_BASE) { $env:OPENAI_API_BASE } else { "https://api.openai.com/v1" }
    $uri = "$baseUrl/chat/completions"

    # 初始化对话历史，包含系统提示
    $messages = @(
        @{ role = "system"; content = "你是一个有帮助的助手，请用中文回答。" }
    )

    Write-Host "多轮对话已启动，输入 'exit' 退出" -ForegroundColor Cyan

    while ($true) {
        $userInput = Read-Host "你"
        if ($userInput -eq "exit") { break }
        if ([string]::IsNullOrWhiteSpace($userInput)) { continue }

        # 追加用户消息到历史
        $messages += @{ role = "user"; content = $userInput }

        $body = @{
            model    = $Model
            messages = $messages
        } | ConvertTo-Json -Depth 10 -Compress

        $response = Invoke-RestMethod `
            -Uri $uri `
            -Method Post `
            -Headers @{ Authorization = "Bearer $apiKey" } `
            -ContentType "application/json; charset=utf-8" `
            -Body ([System.Text.Encoding]::UTF8.GetBytes($body))

        $assistantMessage = $response.choices[0].message.content

        # 追加助手回复到历史，保持上下文连续
        $messages += @{ role = "assistant"; content = $assistantMessage }

        Write-Host "`n助手: $assistantMessage`n" -ForegroundColor Green

        # 显示 Token 消耗，帮助控制成本
        $usage = $response.usage
        Write-Host "[Token] 输入: $($usage.prompt_tokens) | 输出: $($usage.completion_tokens)" -ForegroundColor DarkGray
    }
}

function Request-CodeReview {
    param(
        [Parameter(Mandatory)]
        [string]$ScriptPath
    )

    # 读取脚本内容
    $code = Get-Content $ScriptPath -Raw

    # 用数组拼接构造提示词，避免 here-string 中出现三反引号
    $promptParts = @(
        "请审查以下 PowerShell 脚本，指出潜在问题并提供改进建议："
        ""
        "--- 脚本内容开始 ---"
        $code
        "--- 脚本内容结束 ---"
        ""
        "请从以下角度分析："
        "1. 安全性（注入风险、凭据处理）"
        "2. 性能（循环优化、管道使用）"
        "3. 可维护性（命名规范、错误处理）"
        "4. 兼容性（PowerShell 版本差异）"
    )
    $prompt = $promptParts -join "`n"

    $review = Invoke-LLMChat -Prompt $prompt -Model "gpt-4o" -MaxTokens 4096

    Write-Host "`n========== 代码审查报告 ==========`n" -ForegroundColor Yellow
    Write-Host $review
    Write-Host "`n==================================`n" -ForegroundColor Yellow
}

function Get-LLMTokenCost {
    param(
        [int]$PromptTokens,
        [int]$CompletionTokens,
        [string]$Model = "gpt-4o-mini"
    )

    # 常见模型价格表（美元/千 Token，仅供参考）
    $pricing = @{
        "gpt-4o"       = @{ Input = 0.005;  Output = 0.015 }
        "gpt-4o-mini"  = @{ Input = 0.00015; Output = 0.0006 }
        "gpt-3.5-turbo" = @{ Input = 0.0005; Output = 0.0015 }
    }

    $rate = $pricing[$Model]
    if (-not $rate) {
        Write-Warning "未找到模型 $Model 的定价信息"
        return
    }

    $inputCost = [math]::Round($PromptTokens * $rate.Input / 1000, 6)
    $outputCost = [math]::Round($CompletionTokens * $rate.Output / 1000, 6)
    $totalCost = [math]::Round($inputCost + $outputCost, 6)

    [PSCustomObject]@{
        模型     = $Model
        输入Token = $PromptTokens
        输出Token = $CompletionTokens
        总Token   = $PromptTokens + $CompletionTokens
        输入费用  = "`$$inputCost"
        输出费用  = "`$$outputCost"
        总费用    = "`$$totalCost"
    }
}