PDF v2 generation: align layout, metadata, and usability

[techmore]

Goal\nShip a v2 PDF generation path that matches the HTML report’s structure, metadata, and layout while improving readability for client‑facing use.\n\n## Scope\n- Establish a PDF‑specific stylesheet and layout rules\n- Ensure all header/summary metadata from HTML is present\n- Improve spacing, typography, and section hierarchy\n- Validate on real scan outputs (small + large networks)\n\n## Notes\nThis should be treated as a prioritized enhancement under the report rendering parity initiative (#160).

[techmore]

Tracking under #160 (Report rendering parity initiative).

[techmore]

Progress (2026-08-22)

Shipped in PR #233 (merged):

• PDF reports now include the Network Scanned summary card (target, IP count, start time, duration) and the Vulnerability Levels severity breakdown (Critical/High/Medium/Low CVSS counts) - previously web-only.
• Verified end-to-end with a real scan through the app's Playwright PDF converter.

Remaining gaps for v2

Confirmed by rendering a real 7-page scan report:

1. Raw script output dominates pages 4-5: vulners CVE listings and HTTP probe logs are dumped as unstyled monospaced text. Should be parsed into structured tables (port -> service -> CVEs with severity).
2. Wide table truncation: CPE/extra-info columns cut off at right page edge; tables need width constraints or landscape orientation for detail pages.
3. Script errors inline: grep ERROR: Script execution failed lines appear mid-report without context.

These are stylesheet-level changes to nmap-pdf-olive-legacy.xsl.

[techmore]

v2 progress (2026-08-22, PR #234 merged)

Shipped: structured CVE Findings table on page 1 of the PDF - a recursive XSLT walker parses the vulners @output into rows of CVE ID (hyperlinked), host context, and reference. Verified with a real scan: 26 CVEs rendered as a proper table.

PDF page 1 now flows: summary stats -> severity breakdown -> CVE findings table -> host details. Clients no longer need to dig through raw script output to find vulnerabilities.

Still open for full v2

1. Raw script output sections on pages 3-5 (vulners dumps, HTTP probe logs) - could be collapsed to an appendix or dropped from the client-facing PDF now that the structured table exists
2. Wide-table truncation at page edges (CPE columns)
3. Inline script error lines without context

[techmore]

Raw-output collapse (2026-08-22, PR #235 merged)

Per-port vulners dumps (previously pages of raw text) now render as a one-line pointer to the CVE Findings table. PDF dropped from 7 to 5 pages; page 2 visually verified clean.

v2 scorecard

• Structured CVE Findings table on page 1 (PDF v2: structured CVE Findings table (#167) #234)
• Summary + severity cards (PDF parity: add summary + severity cards to PDF report (#167) #233)
• Raw output collapsed to pointer (PDF: collapse raw vulners dumps into CVE-table pointer (#167) #235)

Remaining minor items (cosmetic)

• Wide-table right-edge truncation (CPE columns) - could use landscape or column-width tuning
• Inline rpcinfo script error line renders without context

At this point the PDF is client-presentable for typical scans.

[techmore]

v2 complete (2026-08-22)

All items from the visual audit shipped:

• PDF parity: add summary + severity cards to PDF report (#167) #233: Network Scanned + Vulnerability Levels summary cards on page 1
• PDF v2: structured CVE Findings table (#167) #234: Structured CVE Findings table (26 CVEs rendered as linked rows in real-scan test)
• PDF: collapse raw vulners dumps into CVE-table pointer (#167) #235: Raw vulners dumps collapsed to pointers; 7 -> 5 pages
• PDF: wrap long CPE strings, fix page-edge truncation (#167) #236: Print CSS - long CPE strings wrap within columns, no page-edge truncation

Final PDF (5 pages, verified visually): summary stats -> severity breakdown -> CVE findings table -> host details -> clean structured tables throughout.

The PDF is client-presentable. Remaining enhancement ideas (optional, not blocking): parsed CVE severity per-row in the findings table, landscape orientation for very wide multi-host scans.