Turn forwarded emails into sorted Jira tickets

from clickruntime import on_event, credentials, http, ai, notify

JIRA = "https://api.atlassian.com/ex/jira/your-cloud-id"

def jira(method, path, **kw):
    resp = http.request(method, JIRA + path, headers={
        "Authorization": f"Bearer {credentials.connection('jira', 'work')}", "Accept": "application/json"}, **kw)
    resp.raise_for_status()
    return resp.json() if resp.content else None

def search(jql, fields, limit=100):
    return jira("POST", "/rest/api/3/search/jql", json={"jql": jql, "fields": fields, "maxResults": limit})["issues"]

def adf(text):
    return {"type": "doc", "version": 1, "content": [{"type": "paragraph", "content": [{"type": "text", "text": text}]}]}

SCHEMA = {"type": "object", "properties": {
    "category": {"enum": ["phishing", "IT", "HR", "Finance", "Security", "Other"]},
    "priority": {"enum": ["Highest", "High", "Medium", "Low"]},
    "summary": {"type": "string"}, "high_risk": {"type": "boolean"}}}

@on_event
def handle(event):
    mail = event.json or {}
    out = ai.generate(f"From: {mail.get('from')}\nSubject: {mail.get('subject')}\n\n{(mail.get('body') or '')[:4000]}",
                      system="Triage this forwarded email: is it phishing, or which team owns it? Give priority and a one-line summary.",
                      json_schema=SCHEMA, max_output_tokens=120).json
    issue = jira("POST", "/rest/api/3/issue", json={"fields": {
        "project": {"key": "SEC"}, "issuetype": {"name": "Task"}, "priority": {"name": out["priority"]},
        "labels": [out["category"].lower()], "summary": f"[{out['category']}] {mail.get('subject', '')}"[:250],
        "description": adf(f"{out['summary']}\n\nFrom: {mail.get('from')}")}})
    if out["high_risk"]:
        notify.email_me(f"High-risk email: {issue['key']}", f"{out['category']} · {out['priority']}\n{out['summary']}")
    return {"issue": issue["key"], **out}