feat: add compliance modules 2-5 (dashboard, security templates, process manager, evidence collector)

Module 2: Extended Compliance Dashboard with roadmap, module-status, next-actions, snapshots, score-history
Module 3: 7 German security document templates (IT-Sicherheitskonzept, Datenschutz, Backup, Logging, Incident-Response, Zugriff, Risikomanagement)
Module 4: Compliance Process Manager with CRUD, complete/skip/seed, ~50 seed tasks, 3-tab UI
Module 5: Evidence Collector Extended with automated checks, control-mapping, coverage report, 4-tab UI

Also includes: canonical control library enhancements (verification method, categories, dedup), control generator improvements, RAG client extensions

52 tests pass, frontend builds clean.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

admin-compliance/app/sdk/evidence/page.tsx

@@ -303,8 +303,76 @@ function LoadingSkeleton() {
 // MAIN PAGE
 // =============================================================================
 
+// =============================================================================
+// EVIDENCE CHECK TYPES
+// =============================================================================
+
+interface EvidenceCheck {
+  id: string
+  check_code: string
+  title: string
+  description: string | null
+  check_type: string
+  target_url: string | null
+  frequency: string
+  is_active: boolean
+  last_run_at: string | null
+  next_run_at: string | null
+}
+
+interface CheckResult {
+  id: string
+  check_id: string
+  run_status: string
+  summary: string | null
+  findings_count: number
+  critical_findings: number
+  duration_ms: number
+  run_at: string
+}
+
+interface EvidenceMapping {
+  id: string
+  evidence_id: string
+  control_code: string
+  mapping_type: string
+  verified_at: string | null
+  verified_by: string | null
+  notes: string | null
+}
+
+interface CoverageReport {
+  total_controls: number
+  controls_with_evidence: number
+  controls_without_evidence: number
+  coverage_percent: number
+}
+
+type EvidenceTabKey = 'evidence' | 'checks' | 'mapping' | 'report'
+
+const CHECK_TYPE_LABELS: Record<string, { label: string; color: string }> = {
+  tls_scan: { label: 'TLS-Scan', color: 'bg-blue-100 text-blue-700' },
+  header_check: { label: 'Header-Check', color: 'bg-green-100 text-green-700' },
+  certificate_check: { label: 'Zertifikat', color: 'bg-yellow-100 text-yellow-700' },
+  dns_check: { label: 'DNS-Check', color: 'bg-purple-100 text-purple-700' },
+  api_scan: { label: 'API-Scan', color: 'bg-indigo-100 text-indigo-700' },
+  config_scan: { label: 'Config-Scan', color: 'bg-orange-100 text-orange-700' },
+  port_scan: { label: 'Port-Scan', color: 'bg-red-100 text-red-700' },
+}
+
+const RUN_STATUS_LABELS: Record<string, { label: string; color: string }> = {
+  running: { label: 'Laeuft...', color: 'bg-blue-100 text-blue-700' },
+  passed: { label: 'Bestanden', color: 'bg-green-100 text-green-700' },
+  failed: { label: 'Fehlgeschlagen', color: 'bg-red-100 text-red-700' },
+  warning: { label: 'Warnung', color: 'bg-yellow-100 text-yellow-700' },
+  error: { label: 'Fehler', color: 'bg-red-100 text-red-700' },
+}
+
+const CHECK_API = '/api/sdk/v1/compliance/evidence-checks'
+
 export default function EvidencePage() {
   const { state, dispatch } = useSDK()
+  const [activeTab, setActiveTab] = useState<EvidenceTabKey>('evidence')
   const [filter, setFilter] = useState<string>('all')
   const [loading, setLoading] = useState(true)
   const [error, setError] = useState<string | null>(null)
@@ -314,6 +382,17 @@ export default function EvidencePage() {
   const [pageSize] = useState(20)
   const [total, setTotal] = useState(0)
 
+  // Evidence Checks state
+  const [checks, setChecks] = useState<EvidenceCheck[]>([])
+  const [checksLoading, setChecksLoading] = useState(false)
+  const [runningCheckId, setRunningCheckId] = useState<string | null>(null)
+  const [checkResults, setCheckResults] = useState<Record<string, CheckResult[]>>({})
+
+  // Mappings state
+  const [mappings, setMappings] = useState<EvidenceMapping[]>([])
+  const [coverageReport, setCoverageReport] = useState<CoverageReport | null>(null)
+  const [seedingChecks, setSeedingChecks] = useState(false)
+
   // Fetch evidence from backend on mount and when page changes
   useEffect(() => {
     const fetchEvidence = async () => {
@@ -511,8 +590,86 @@ export default function EvidencePage() {
     }
   }
 
+  // Load checks when tab changes
+  const loadChecks = async () => {
+    setChecksLoading(true)
+    try {
+      const res = await fetch(`${CHECK_API}?limit=50`)
+      if (res.ok) {
+        const data = await res.json()
+        setChecks(data.checks || [])
+      }
+    } catch { /* silent */ }
+    finally { setChecksLoading(false) }
+  }
+
+  const runCheck = async (checkId: string) => {
+    setRunningCheckId(checkId)
+    try {
+      const res = await fetch(`${CHECK_API}/${checkId}/run`, { method: 'POST' })
+      if (res.ok) {
+        const result = await res.json()
+        setCheckResults(prev => ({
+          ...prev,
+          [checkId]: [result, ...(prev[checkId] || [])].slice(0, 5),
+        }))
+        loadChecks() // refresh last_run_at
+      }
+    } catch { /* silent */ }
+    finally { setRunningCheckId(null) }
+  }
+
+  const loadCheckResults = async (checkId: string) => {
+    try {
+      const res = await fetch(`${CHECK_API}/${checkId}/results?limit=5`)
+      if (res.ok) {
+        const data = await res.json()
+        setCheckResults(prev => ({ ...prev, [checkId]: data.results || [] }))
+      }
+    } catch { /* silent */ }
+  }
+
+  const seedChecks = async () => {
+    setSeedingChecks(true)
+    try {
+      await fetch(`${CHECK_API}/seed`, { method: 'POST' })
+      loadChecks()
+    } catch { /* silent */ }
+    finally { setSeedingChecks(false) }
+  }
+
+  const loadMappings = async () => {
+    try {
+      const res = await fetch(`${CHECK_API}/mappings`)
+      if (res.ok) {
+        const data = await res.json()
+        setMappings(data.mappings || [])
+      }
+    } catch { /* silent */ }
+  }
+
+  const loadCoverageReport = async () => {
+    try {
+      const res = await fetch(`${CHECK_API}/mappings/report`)
+      if (res.ok) setCoverageReport(await res.json())
+    } catch { /* silent */ }
+  }
+
+  useEffect(() => {
+    if (activeTab === 'checks' && checks.length === 0) loadChecks()
+    if (activeTab === 'mapping') { loadMappings(); loadCoverageReport() }
+    if (activeTab === 'report') loadCoverageReport()
+  }, [activeTab]) // eslint-disable-line react-hooks/exhaustive-deps
+
   const stepInfo = STEP_EXPLANATIONS['evidence']
 
+  const evidenceTabs: { key: EvidenceTabKey; label: string }[] = [
+    { key: 'evidence', label: 'Nachweise' },
+    { key: 'checks', label: 'Automatische Checks' },
+    { key: 'mapping', label: 'Control-Mapping' },
+    { key: 'report', label: 'Report' },
+  ]
+
   return (
     <div className="space-y-6">
       {/* Hidden file input */}
@@ -556,6 +713,25 @@ export default function EvidencePage() {
         </button>
       </StepHeader>
 
+      {/* Tab Navigation */}
+      <div className="bg-white rounded-xl shadow-sm border">
+        <div className="flex border-b">
+          {evidenceTabs.map(tab => (
+            <button
+              key={tab.key}
+              onClick={() => setActiveTab(tab.key)}
+              className={`px-6 py-3 text-sm font-medium transition-colors ${
+                activeTab === tab.key
+                  ? 'text-purple-600 border-b-2 border-purple-600'
+                  : 'text-gray-500 hover:text-gray-700'
+              }`}
+            >
+              {tab.label}
+            </button>
+          ))}
+        </div>
+      </div>
+
       {/* Error Banner */}
       {error && (
         <div className="p-4 bg-red-50 border border-red-200 rounded-lg text-red-700 flex items-center justify-between">
@@ -564,6 +740,11 @@ export default function EvidencePage() {
         </div>
       )}
 
+      {/* ============================================================ */}
+      {/* TAB: Nachweise (existing content) */}
+      {/* ============================================================ */}
+      {activeTab === 'evidence' && <>
+
       {/* Controls Alert */}
       {state.controls.length === 0 && !loading && (
         <div className="bg-amber-50 border border-amber-200 rounded-xl p-4">
@@ -681,6 +862,250 @@ export default function EvidencePage() {
           <p className="mt-2 text-gray-500">Passen Sie den Filter an oder laden Sie neue Nachweise hoch.</p>
         </div>
       )}
+
+      </>}
+
+      {/* ============================================================ */}
+      {/* TAB: Automatische Checks */}
+      {/* ============================================================ */}
+      {activeTab === 'checks' && (
+        <>
+          {/* Seed if empty */}
+          {!checksLoading && checks.length === 0 && (
+            <div className="p-4 bg-yellow-50 border border-yellow-200 rounded-lg flex items-center justify-between">
+              <div>
+                <p className="font-medium text-yellow-800">Keine automatischen Checks vorhanden</p>
+                <p className="text-sm text-yellow-700">Laden Sie ca. 15 Standard-Checks (TLS, Header, Zertifikate, etc.).</p>
+              </div>
+              <button onClick={seedChecks} disabled={seedingChecks}
+                className="px-4 py-2 bg-yellow-600 text-white rounded-lg hover:bg-yellow-700 disabled:opacity-50">
+                {seedingChecks ? 'Lade...' : 'Standard-Checks laden'}
+              </button>
+            </div>
+          )}
+
+          {checksLoading ? (
+            <div className="flex justify-center py-12">
+              <div className="animate-spin rounded-full h-8 w-8 border-b-2 border-purple-600" />
+            </div>
+          ) : (
+            <div className="space-y-3">
+              {checks.map(check => {
+                const typeMeta = CHECK_TYPE_LABELS[check.check_type] || { label: check.check_type, color: 'bg-gray-100 text-gray-700' }
+                const results = checkResults[check.id] || []
+                const lastResult = results[0]
+                const isRunning = runningCheckId === check.id
+
+                return (
+                  <div key={check.id} className="bg-white rounded-xl border border-gray-200 p-5">
+                    <div className="flex items-start justify-between">
+                      <div className="flex-1">
+                        <div className="flex items-center gap-2">
+                          <h4 className="font-medium text-gray-900">{check.title}</h4>
+                          <span className={`px-2 py-0.5 text-xs rounded ${typeMeta.color}`}>{typeMeta.label}</span>
+                          {!check.is_active && (
+                            <span className="px-2 py-0.5 text-xs rounded bg-gray-100 text-gray-500">Deaktiviert</span>
+                          )}
+                        </div>
+                        {check.description && <p className="text-sm text-gray-500 mt-1">{check.description}</p>}
+                        <div className="flex items-center gap-4 mt-2 text-xs text-gray-400">
+                          <span>Code: {check.check_code}</span>
+                          {check.target_url && <span>Ziel: {check.target_url}</span>}
+                          <span>Frequenz: {check.frequency}</span>
+                          {check.last_run_at && <span>Letzter Lauf: {new Date(check.last_run_at).toLocaleDateString('de-DE')}</span>}
+                        </div>
+                      </div>
+                      <div className="flex items-center gap-2 ml-4">
+                        {lastResult && (
+                          <span className={`px-2 py-0.5 text-xs rounded ${RUN_STATUS_LABELS[lastResult.run_status]?.color || ''}`}>
+                            {RUN_STATUS_LABELS[lastResult.run_status]?.label || lastResult.run_status}
+                          </span>
+                        )}
+                        <button
+                          onClick={() => { runCheck(check.id); loadCheckResults(check.id) }}
+                          disabled={isRunning}
+                          className="px-3 py-1.5 text-xs bg-purple-600 text-white rounded-lg hover:bg-purple-700 disabled:opacity-50"
+                        >
+                          {isRunning ? 'Laeuft...' : 'Ausfuehren'}
+                        </button>
+                        <button
+                          onClick={() => loadCheckResults(check.id)}
+                          className="px-3 py-1.5 text-xs border rounded-lg hover:bg-gray-50"
+                        >
+                          Historie
+                        </button>
+                      </div>
+                    </div>
+
+                    {/* Results */}
+                    {results.length > 0 && (
+                      <div className="mt-3 border-t pt-3">
+                        <p className="text-xs font-medium text-gray-500 mb-2">Letzte Ergebnisse</p>
+                        <div className="space-y-1">
+                          {results.slice(0, 3).map(r => (
+                            <div key={r.id} className="flex items-center gap-3 text-xs">
+                              <span className={`px-1.5 py-0.5 rounded ${RUN_STATUS_LABELS[r.run_status]?.color || 'bg-gray-100'}`}>
+                                {RUN_STATUS_LABELS[r.run_status]?.label || r.run_status}
+                              </span>
+                              <span className="text-gray-500">{new Date(r.run_at).toLocaleString('de-DE')}</span>
+                              <span className="text-gray-400">{r.duration_ms}ms</span>
+                              {r.findings_count > 0 && (
+                                <span className="text-orange-600">{r.findings_count} Findings ({r.critical_findings} krit.)</span>
+                              )}
+                              {r.summary && <span className="text-gray-600 truncate">{r.summary}</span>}
+                            </div>
+                          ))}
+                        </div>
+                      </div>
+                    )}
+                  </div>
+                )
+              })}
+            </div>
+          )}
+        </>
+      )}
+
+      {/* ============================================================ */}
+      {/* TAB: Control-Mapping */}
+      {/* ============================================================ */}
+      {activeTab === 'mapping' && (
+        <>
+          {coverageReport && (
+            <div className="grid grid-cols-1 md:grid-cols-4 gap-4">
+              <div className="bg-white rounded-xl border border-gray-200 p-6">
+                <p className="text-sm text-gray-500">Gesamt Controls</p>
+                <p className="text-3xl font-bold text-gray-900">{coverageReport.total_controls}</p>
+              </div>
+              <div className="bg-white rounded-xl border border-green-200 p-6">
+                <p className="text-sm text-green-600">Mit Nachweis</p>
+                <p className="text-3xl font-bold text-green-600">{coverageReport.controls_with_evidence}</p>
+              </div>
+              <div className="bg-white rounded-xl border border-red-200 p-6">
+                <p className="text-sm text-red-600">Ohne Nachweis</p>
+                <p className="text-3xl font-bold text-red-600">{coverageReport.controls_without_evidence}</p>
+              </div>
+              <div className="bg-white rounded-xl border border-purple-200 p-6">
+                <p className="text-sm text-purple-600">Abdeckung</p>
+                <p className="text-3xl font-bold text-purple-600">{coverageReport.coverage_percent.toFixed(0)}%</p>
+              </div>
+            </div>
+          )}
+
+          <div className="bg-white rounded-xl shadow-sm border overflow-hidden">
+            <div className="p-4 border-b">
+              <h3 className="font-semibold text-gray-900">Evidence-Control-Verknuepfungen ({mappings.length})</h3>
+            </div>
+            {mappings.length === 0 ? (
+              <div className="p-8 text-center text-gray-500">
+                <p>Noch keine Verknuepfungen erstellt.</p>
+                <p className="text-sm mt-1">Fuehren Sie automatische Checks aus, um Nachweise automatisch mit Controls zu verknuepfen.</p>
+              </div>
+            ) : (
+              <table className="w-full">
+                <thead className="bg-gray-50">
+                  <tr>
+                    <th className="px-4 py-3 text-left text-xs font-medium text-gray-500 uppercase">Control</th>
+                    <th className="px-4 py-3 text-left text-xs font-medium text-gray-500 uppercase">Evidence</th>
+                    <th className="px-4 py-3 text-left text-xs font-medium text-gray-500 uppercase">Typ</th>
+                    <th className="px-4 py-3 text-left text-xs font-medium text-gray-500 uppercase">Verifiziert</th>
+                  </tr>
+                </thead>
+                <tbody className="divide-y divide-gray-200">
+                  {mappings.map(m => (
+                    <tr key={m.id} className="hover:bg-gray-50">
+                      <td className="px-4 py-3 font-mono text-sm text-purple-600">{m.control_code}</td>
+                      <td className="px-4 py-3 text-sm text-gray-700">{m.evidence_id.slice(0, 8)}...</td>
+                      <td className="px-4 py-3">
+                        <span className="px-2 py-0.5 text-xs rounded bg-blue-100 text-blue-700">{m.mapping_type}</span>
+                      </td>
+                      <td className="px-4 py-3 text-sm text-gray-500">
+                        {m.verified_at ? `${new Date(m.verified_at).toLocaleDateString('de-DE')} von ${m.verified_by || '—'}` : 'Ausstehend'}
+                      </td>
+                    </tr>
+                  ))}
+                </tbody>
+              </table>
+            )}
+          </div>
+        </>
+      )}
+
+      {/* ============================================================ */}
+      {/* TAB: Report */}
+      {/* ============================================================ */}
+      {activeTab === 'report' && (
+        <div className="bg-white rounded-xl shadow-sm border p-6">
+          <h3 className="text-lg font-semibold text-gray-900 mb-6">Evidence Coverage Report</h3>
+
+          {!coverageReport ? (
+            <div className="flex justify-center py-12">
+              <div className="animate-spin rounded-full h-8 w-8 border-b-2 border-purple-600" />
+            </div>
+          ) : (
+            <>
+              {/* Coverage Bar */}
+              <div className="mb-8">
+                <div className="flex items-center justify-between mb-2">
+                  <span className="text-sm font-medium text-gray-700">Gesamt-Abdeckung</span>
+                  <span className={`text-2xl font-bold ${
+                    coverageReport.coverage_percent >= 80 ? 'text-green-600' :
+                    coverageReport.coverage_percent >= 50 ? 'text-yellow-600' : 'text-red-600'
+                  }`}>
+                    {coverageReport.coverage_percent.toFixed(1)}%
+                  </span>
+                </div>
+                <div className="h-4 bg-gray-200 rounded-full overflow-hidden">
+                  <div
+                    className={`h-full transition-all duration-500 ${
+                      coverageReport.coverage_percent >= 80 ? 'bg-green-500' :
+                      coverageReport.coverage_percent >= 50 ? 'bg-yellow-500' : 'bg-red-500'
+                    }`}
+                    style={{ width: `${coverageReport.coverage_percent}%` }}
+                  />
+                </div>
+              </div>
+
+              {/* Summary */}
+              <div className="grid grid-cols-1 md:grid-cols-3 gap-4 mb-8">
+                <div className="p-4 bg-gray-50 rounded-lg text-center">
+                  <p className="text-3xl font-bold text-gray-900">{coverageReport.total_controls}</p>
+                  <p className="text-sm text-gray-500">Controls gesamt</p>
+                </div>
+                <div className="p-4 bg-green-50 rounded-lg text-center">
+                  <p className="text-3xl font-bold text-green-600">{coverageReport.controls_with_evidence}</p>
+                  <p className="text-sm text-green-600">Mit Nachweis belegt</p>
+                </div>
+                <div className="p-4 bg-red-50 rounded-lg text-center">
+                  <p className="text-3xl font-bold text-red-600">{coverageReport.controls_without_evidence}</p>
+                  <p className="text-sm text-red-600">Ohne Nachweis</p>
+                </div>
+              </div>
+
+              {/* Check Summary */}
+              <div className="border-t pt-6">
+                <h4 className="font-medium text-gray-900 mb-3">Automatische Checks</h4>
+                <div className="flex items-center gap-4 text-sm text-gray-600">
+                  <span>{checks.length} Check-Definitionen</span>
+                  <span>{checks.filter(c => c.is_active).length} aktiv</span>
+                  <span>{checks.filter(c => c.last_run_at).length} mindestens 1x ausgefuehrt</span>
+                </div>
+              </div>
+
+              {/* Evidence Summary */}
+              <div className="border-t pt-6 mt-6">
+                <h4 className="font-medium text-gray-900 mb-3">Nachweise</h4>
+                <div className="flex items-center gap-4 text-sm text-gray-600">
+                  <span>{displayEvidence.length} Nachweise gesamt</span>
+                  <span className="text-green-600">{validCount} gueltig</span>
+                  <span className="text-red-600">{expiredCount} abgelaufen</span>
+                  <span className="text-yellow-600">{pendingCount} ausstehend</span>
+                </div>
+              </div>
+            </>
+          )}
+        </div>
+      )}
     </div>
   )
 }