Compliance Monitor Agent

def sec_normalize_veracode_tool(xml_or_json_text: str) -> Dict[str, Any]:
    """
    Normalise un rapport Veracode(XML ou JSON) en findings génériques.
    Returns: {"findings":[{"cwe","severity","file","line","desc"}], "by_severity":{...}}
    """
    data = _extract_json(xml_or_json_text)
    findings = []
    if data:
        for f in data.get("findings", []):
            findings.append({
                "cwe": f.get("cwe"),
                "severity": (f.get("severity") or "LOW").upper(),
                "file": f.get("file"),
                "line": f.get("line"),
                "desc": f.get("desc"),
            })
        return {"findings": findings, "by_severity": _count_by(findings, "severity")}
    try:
        root = ET.fromstring(xml_or_json_text)
        for flaw in root.findall(".//flaw"):
            findings.append({
                "cwe": flaw.attrib.get("cweid"),
                "severity": str(flaw.attrib.get("severity") or "0"),
                "file": flaw.attrib.get("sourcefilepath") or flaw.attrib.get("module") or "",
                "line": flaw.attrib.get("line"),
                "desc": flaw.attrib.get("description") or "",
            })
        for f in findings:
            try:
                sev = int(f["severity"])
                f["severity"] = "HIGH" if sev >= 4 else "MEDIUM" if sev == 3 else "LOW"
            except Exception:
                f["severity"] = str(f["severity"]).upper()
    except Exception:
        pass
    return {"findings": findings, "by_severity": _count_by(findings, "severity")}

def sec_policy_compliance_tool(policy_yaml_or_json_text: str, findings_text: str) -> Dict[str, Any]:
    """
    Évalue une policy(YAML/JSON) contre des findings normalisés(JSON).
    Returns: {"status":"PASS|FAIL", "violations":[...]}
    Policy ex.: {"min_coverage":80,"block_on":{"HIGH":1,"MEDIUM":5}}
    """
    policy = _extract_yaml(policy_yaml_or_json_text) or _extract_json(policy_yaml_or_json_text) or {}
    f = _extract_json(findings_text) or {}
    by_sev = f.get("by_severity") or _count_by(f.get("findings", []), "severity")
    violations = []
    block_on = policy.get("block_on", {})
    for sev, limit in (block_on or {}).items():
        n = int(by_sev.get(str(sev).upper(), 0))
        if n >= int(limit):
            violations.append({"severity": str(sev).upper(), "count": n, "limit": int(limit)})
    status = "FAIL" if violations else "PASS"
    return {"status": status, "violations": violations}

def jira_create_issue_tool(
    base_url: str,
    project_key: str,
    summary: str,
    description: str,
    issue_type: str = "Task",
    email_env: str = "JIRA_EMAIL",
    api_token_env: str = "JIRA_API_TOKEN",
) -> Dict[str, Any]:
    """Create a Jira Cloud issue."""
    email = _env(email_env)
    api_token = _env(api_token_env)
    url = f"{base_url.rstrip('/')}/rest/api/3/issue"
    auth: Tuple[str, str] = (email, api_token)
    payload = {
        "fields": {
            "project": {"key": project_key},
            "summary": summary,
            "description": description,
            "issuetype": {"name": issue_type},
        }
    }
    r = requests.post(
        url,
        auth=auth,
        headers={"Accept": "application/json", "Content-Type": "application/json"},
        data=json.dumps(payload),
    )
    return _resp(r)