{% extends "base.html" %}
{% from "_macros.html" import findings_badges, empty_state, info_tip %}
{% block title %}secfoo — Third-Party{% endblock %}
{% block content %}
{% from "_page.html" import page_head %}
{{ page_head("third-party", "Third-Party", "Third-party assessments", counts.total ~ " third-party assessment(s) · AI-BOM: " ~ models_count ~ " model(s), " ~ tools_count ~ " tool(s) tracked.") }}

{% if counts.total == 0 %}
{% call empty_state("No third-party assessments yet", "/assessments/new", "New Assessment", "u-mt-6") %}
  Create an assessment with type <strong>Third-Party</strong> and upload the
  vendor's documents (SOC 2 report, ISO certificate, pen test report or
  questionnaire). The conformance view below fills in from that evidence.
{% endcall %}
{% endif %}
<div class="card u-mt-6 has-info">
  {% call info_tip("Vendor CCM v4 conformance") %}
  <p>Average Cloud Controls Matrix score from each vendor's most recent Third-Party Risk Assessment.</p>
  <p>Scores come from evidence in the vendor's documents (SOC 2, ISO, pen tests, questionnaires), never a guess. Hatched means no vendor has provided evidence for that domain yet, which is not a failing score.</p>
  {% endcall %}
  <h4 class="card__title">Vendor CCM v4 conformance</h4>
  <p class="card__body u-mb-4">
    Aggregated from {{ dash.assessed_vendor_count }} vendor(s)' most recent Third-Party Risk Assessment run --
    evidence found in vendor-provided documents (SOC 2 reports, ISO certificates, pen test reports, questionnaires),
    never a guess. Hatched = no vendor has provided evidence for this domain yet, not a failing score.
  </p>
  <div class="widget-scroll" data-scroll-rows="10">
  {% for row in dash.ccm_rows %}
  <div class="conformance-bar">
    <span class="conformance-bar__label" title="{{ row.name }}">{{ row.name }}</span>
    <div class="conformance-bar__track">
      {% if row.hatched %}
      <div class="conformance-bar__fill conformance-bar__fill--unassessed"></div>
      {% else %}
      <div class="conformance-bar__fill {% if row.score >= 80 %}conformance-bar__fill--conformant{% elif row.score >= 50 %}conformance-bar__fill--partial{% else %}conformance-bar__fill--non-conformant{% endif %}" data-bar-width="{{ row.score }}"></div>
      {% endif %}
    </div>
    <span class="conformance-bar__value">{{ row.code }} — {% if row.hatched %}not assessed{% else %}{{ row.score }}%{% endif %}</span>
  </div>
  {% endfor %}
  </div>
</div>

{% if assessments %}
<div class="table-wrap widget-scroll u-mt-6" data-scroll-rows="10">
  <table class="table">
    <thead><tr><th>Project</th><th>Status</th><th>Findings</th><th>Reviewed</th></tr></thead>
    <tbody>
      {% for a in assessments %}
      <tr class="run-row" data-href="/assessments/{{ a.id }}" tabindex="0">
        <td>
          {{ a.project_display_name }}
          {% if a.application_id or a.sar_number %}
          <br><span class="ds-caption">{{ a.application_id or '' }}{% if a.application_id and a.sar_number %} &middot; {% endif %}{{ a.sar_number or '' }}</span>
          {% endif %}
        </td>
        <td><span class="badge {{ a.status | assessment_status_badge }}">{{ a.status | assessment_status_label }}</span></td>
        <td><div class="findings-cell">{{ findings_badges(a) }}</div></td>
        <td>{{ a.review_date or (a.updated_at | fmt_time) }}</td>
      </tr>
      {% endfor %}
    </tbody>
  </table>
</div>
{% else %}
<div class="alert alert--info u-mt-6">
  <div>No third-party assessments yet. Create one from the <a href="/assessments">Assessments</a> page with type "Third-Party".</div>
</div>
{% endif %}
{% endblock %}