{% extends "base.html" %}
{% block title %}{{ assessment.project_display_name }} — secfoo{% endblock %}
{% from "_macros.html" import info_tip %}
{% block content %}
<a href="/assessments" class="ds-caption">&larr; All assessments</a>
<div class="u-d-flex u-justify-space-between u-items-flex-start u-gap-6 u-flex-wrap u-mt-4">
  <div>
    <span class="ds-overline">{{ assessment.assessment_type | assessment_type_label }}</span>
    <h1>{{ assessment.project_display_name }}</h1>
  </div>
  <a class="btn btn--primary btn--md" href="/assessments/{{ assessment.id }}/runs/new">Run Assessment</a>
</div>

{% if has_running_run %}
<div class="alert alert--info u-my-4" data-live-runs="{% for r in runs if r.status in ('pending', 'running') %}{{ r.run_uuid }}{{ ',' if not loop.last }}{% endfor %}">
  <div>A run is in progress. Open it to follow each step; this page updates when it finishes.</div>
</div>
{% endif %}

<div class="card u-mt-6 u-mb-6">
  <div class="meta-row">
    <div><span class="ds-caption">Status</span><br><span class="badge {{ assessment.status | assessment_status_badge }}">{{ assessment.status | assessment_status_label }}</span></div>
    <div><span class="ds-caption">Application ID</span><br>{{ assessment.application_id or '-' }}</div>
    <div><span class="ds-caption">Security Assessment Request</span><br>{{ assessment.sar_number or '-' }}</div>
    <div><span class="ds-caption">Reviewer</span><br>{{ assessment.reviewer or '-' }}</div>
    <div><span class="ds-caption">Review date</span><br>{{ assessment.review_date or '-' }}</div>
  </div>
  {% if assessment.notes %}
  <div class="u-mt-4"><span class="ds-caption">Notes</span><br>{{ assessment.notes }}</div>
  {% endif %}
  {% if assessment.responsible_ai_risk %}
  <div class="u-mt-4">
    <span class="ds-caption">Responsible AI</span><br>
    <span class="badge {{ assessment.responsible_ai_risk | responsible_ai_risk_badge }}">{{ assessment.responsible_ai_risk }}</span>
    <span class="badge {{ assessment.responsible_ai_status | responsible_ai_status_badge }}">{{ assessment.responsible_ai_status }}</span>
  </div>
  {% endif %}
</div>

{% from "_icons.html" import icon %}
{% set done = pipeline | selectattr("state", "equalto", "done") | list | length %}
{% set blocked = pipeline | selectattr("state", "equalto", "blocked") | list | length %}
<section class="pipeline" aria-label="Review pipeline">
  <div class="pipeline__head">
    <h2 class="u-m-0">Review pipeline</h2>
    <span class="pipeline__summary">{{ done }} of {{ pipeline | length }} done{% if blocked %} &middot; <span class="pipeline__summary--blocked">{{ blocked }} blocked</span>{% endif %}</span>
  </div>
  <ol class="pipeline__track">
    {% for n in pipeline %}
    <li class="pipeline__node" data-state="{{ n.state }}">
      <a class="pipeline__card" href="{{ '/runs/' ~ n.run.run_uuid if n.run else '/assessments/' ~ assessment.id ~ '/runs/new' }}">
        <span class="pipeline__top">
          <span class="pipeline__step">{{ '%02d' % loop.index }}</span>
          <span class="pipeline__state">{% if n.state == 'done' %}Done{% elif n.state == 'blocked' %}Blocked{% elif n.state == 'running' %}Running{% else %}Not run{% endif %}</span>
        </span>
        <span class="pipeline__label">{{ icon(n.id, "pipeline__icon", 1.6, 16) }}{{ n.label }}</span>
        <span class="pipeline__meta">
          {% if n.state == 'done' %}{{ n.findings }} finding{{ 's' if n.findings != 1 }}{% if n.severe %} &middot; <strong>{{ n.severe }} severe</strong>{% endif %}
          {% elif n.state == 'blocked' %}{{ {'binary_not_found': 'Agent not found', 'timeout': 'Timed out'}.get(n.run.status, 'Agent error') }} &middot; open for the fix
          {% elif n.state == 'running' %}started {{ n.run.started_at | fmt_ago }}
          {% else %}Start this activity &rarr;{% endif %}
        </span>
      </a>
    </li>
    {% endfor %}
  </ol>
</section>

<h2 class="heading-with-info">Findings by severity
  {% call info_tip("Findings by severity", inline=True) %}
  <p>Severity counts from the runs attached to this assessment.</p>
  <p>Repeat runs of the same activity count again, so this can be higher than the findings still open.</p>
  {% endcall %}
</h2>
<div class="card u-mb-6">
  {% for row in severity_rows %}
  <div class="severity-bar">
    <span class="severity-bar__dot severity-bar__dot--{{ row.key }}"></span>
    <span class="severity-bar__label">{{ row.label }}</span>
    <div class="severity-bar__track"><div class="severity-bar__fill severity-bar__fill--{{ row.key }}" data-bar-width="{{ row.percent }}"></div></div>
    <span class="severity-bar__count">{{ row.count }}</span>
  </div>
  {% endfor %}
</div>

<h2>Attached runs</h2>
{% if runs %}
<div class="table-wrap widget-scroll u-mb-6" data-scroll-rows="10">
  <table class="table">
    <thead><tr><th>Started</th><th>Skill</th><th>Agent</th><th>Status</th><th>Cost</th></tr></thead>
    <tbody>
      {% for run in runs %}
      <tr class="run-row" data-href="/runs/{{ run.run_uuid }}" tabindex="0">
        <td>{{ run.started_at | fmt_time }}</td>
        <td>{{ run.skill_name }}</td>
        <td>{{ run.agent_id }}</td>
        <td>{% if run.status in ('binary_not_found', 'failed', 'timeout') %}<span class="badge badge--error">Blocked</span> <span class="ds-caption">{{ run.status }}</span>{% else %}<span class="badge {{ run.status | status_badge }}">{{ run.status }}</span>{% endif %}</td>
        <td>{{ run.cost_usd | fmt_cost }}</td>
      </tr>
      {% endfor %}
    </tbody>
  </table>
</div>
{% else %}
<p class="ds-body u-color-text-muted">
  No runs attached yet. Run <code>secfoo run --assessment {{ assessment.id }} --skill security-architecture-review</code> to attach one.
</p>
{% endif %}

<h2 class="u-mt-8">Attachments</h2>
<p class="ds-body u-color-text-muted">AI-BOM: {{ models_count }} model(s), {{ tools_count }} tool(s) tracked.</p>
{% if attachments %}
<div class="table-wrap widget-scroll u-mt-4 u-mb-6" data-scroll-rows="10">
  <table class="table">
    <thead><tr><th>File</th><th>Kind</th><th>Uploaded</th></tr></thead>
    <tbody>
      {% for att in attachments %}
      <tr><td>{{ att.original_name }}</td><td>{{ att.attachment_kind }}</td><td>{{ att.uploaded_at | fmt_time }}</td></tr>
      {% endfor %}
    </tbody>
  </table>
</div>
{% endif %}

<form method="post" action="/assessments/{{ assessment.id }}/attachments" enctype="multipart/form-data" class="u-d-flex u-gap-3 u-items-center u-mt-4">
  <input class="input" type="file" name="file" required>
  <button class="btn btn--outline btn--sm" type="submit">Upload attachment</button>
</form>
{% endblock %}