The Fine Print

from crewai import Agent, Task, Crew, Process
from langchain_openai import ChatOpenAI
llm = ChatOpenAI(model="gpt-4-turbo", temperature=0)
api_architect = Agent(
    role='API Integration Architect',
    goal='Extract exact endpoint URLs, authentication headers, and payload structures from vendor documentation.',
    backstory='You are a meticulous API specialist who never hallucinates endpoints.',
    verbose=True,
    llm=llm
)
logic_builder = Agent(
    role='Incident Response Process Engineer',
    goal='Design the step-by-step logic for the SOAR playbook, including error handling and rollback.',
    backstory='Veteran SOC engineer who designs resilient automation workflows.',
    verbose=True,
    llm=llm
)
code_generator = Agent(
    role='SOAR Python Developer',
    goal='Write production-ready Python code for Cortex XSOAR based on the architect and logic builder outputs.',
    backstory='Senior Python developer specializing in SOAR integrations and strict type hinting.',
    verbose=True,
    llm=llm
)
vendor_docs = """
Endpoint to block IP in AcmeFirewall: POST https://api.acme.local/v1/block
Headers: 'X-API-Key', 'Content-Type: application/json'
Payload: {"ip_address": "<IP>", "duration": "<minutes>"}
Response 200 OK.
"""
api_task = Task(
    description=f'Analyze these docs and extract the technical requirements for blocking an IP: {vendor_docs}',
    expected_output='Technical spec with endpoint, headers, and payload format.',
    agent=api_architect
)
logic_task = Task(
    description='Design the logic for the playbook. Include steps to validate the IP format before calling the API, and what to do if a 403 Forbidden is returned.',
    expected_output='Step-by-step pseudo-code and logic flow.',
    agent=logic_builder
)
code_task = Task(
    description='Write the final Python script. It MUST use the requests library, include typing, and contain a main() function returning a dictionary with "status" and "message".',
    expected_output='Complete, runnable Python script.',
    agent=code_generator,
    context=[api_task, logic_task]
)
soar_swarm = Crew(
    agents=[api_architect, logic_builder, code_generator],
    tasks=[api_task, logic_task, code_task],
    process=Process.sequential
)
if __name__ == "__main__":
    print("Initiating Playbook Generation Swarm...")
    playbook_code = soar_swarm.kickoff()
    print("\n--- Generated SOAR Playbook ---\n")
    print(playbook_code)