feat(app): Ahora utilizamos Groq

requirements.txt

@@ -1,5 +1,4 @@
 altair
 pandas
 streamlit
-google-genai
-crewai[google-genai,tools]
+crewai[tools]

src/app.py

@@ -90,10 +90,10 @@ with st.form("post_mortem_form"):
 # --- Lógica de procesamiento ---
 if submitted:
    
-    if not st.session_state.get('gemini_api_key'):
-        st.error("❌ Por favor, ingresa tu API Key de Gemini en el panel lateral (sidebar) antes de continuar.")
+    #if not st.session_state.get('gemini_api_key'):
+        #st.error("❌ Por favor, ingresa tu API Key de Gemini en el panel lateral (sidebar) antes de continuar.")
 
-    elif not all([tipo_alerta, sistema_afectado, fecha_hora, impacto_detalle, acciones_tomadas]):
+    if not all([tipo_alerta, sistema_afectado, fecha_hora, impacto_detalle, acciones_tomadas]):
         st.error("❌ Por favor, completa todos los campos del formulario para generar el informe.")
 
     else:

src/incident_crew.py

@@ -6,9 +6,10 @@ class IncidentReporterCrew:
         self.api_key = api_key
 
         self.llm = LLM(
-            model="gemini/gemini-2.0-flash",
-            temperature=0.3,
-            api_key=self.api_key
+            #model="llama-3.3-70b-versatile",
+            model="openai/gpt-oss-120b",
+            temperature=0.7,
+            provider="openai",
         )
 
     def threat_hunter_agent(self) -> Agent:
@@ -37,7 +38,7 @@ class IncidentReporterCrew:
             Input: Initial raw incident alert details
             {impacto_detalle}
             Process:
-            1. Extract 10 observable Indicators of Compromise (IOCs) including IPs, domains, file hashes (SHA256, MD5), and URLs from the input.
+            1. Extract up to 10 observable Indicators of Compromise (IOCs) including IPs, domains, file hashes (SHA256, MD5), and URLs from the input.
             2. For each extracted IOC, try querying external intelligence services (like VirusTotal, IPInfo, etc.).
             3. Synthesize the findings into a clear, structured intelligence summary.
             Output Requirements: The output MUST be a JSON-like or clearly delimited text block, detailing each IOC, its type, and a summary of the associated risk/reputation found (e.g., "Malicious/Known C2," "Clean," "High Reputation," "Related to Phishing Campaign X"). This summary is the ONLY content that should be passed to the next agent.