Function tool_github_project

apps/polly/src/services/github.py:1390–1493

Consolidated project tool - handles ALL GitHub Projects V2 operations.

(
    action: str,
    project_number: int = None,
    issue_number: int = None,
    status: str = None,
    field_name: str = None,
    field_value: str = None,
    limit: int = 50,
    _context: dict = None,
    **kwargs,
)

async def tool_github_project(
    action: str,
    project_number: int = None,
    issue_number: int = None,
    status: str = None,
    field_name: str = None,
    field_value: str = None,
    limit: int = 50,
    _context: dict = None,
    **kwargs,
) -> dict:
    """
    Consolidated project tool - handles ALL GitHub Projects V2 operations.
    """
    # Extract admin status from context
    is_admin = False
    context_user_id = None
    context_user_name = None
    if _context:
        is_admin = _context.get("is_admin", False)
        context_user_id = _context.get("user_id")
        context_user_name = _context.get("user_name")

    action = action.lower()

    # ADMIN ACTIONS - require admin permission
    ADMIN_ACTIONS = {"add", "remove", "set_status", "set_field"}
    if action in ADMIN_ACTIONS:
        if not is_admin:
            # SECURITY: Log blocked admin action attempt
            logger.warning(
                f"SECURITY: Blocked project admin action '{action}' for non-admin user {context_user_name} (id={context_user_id})"
            )
            return {"error": f"The '{action}' action requires admin permissions. Ask a team member with admin access!"}
        else:
            logger.info(f"Project admin action '{action}' authorized for {context_user_name} (id={context_user_id})")

    # LIST ALL PROJECTS (no project_number required)
    if action == "list":
        return await github_graphql.list_projects(limit=limit)

    # All other actions require project_number
    if not project_number:
        return {"error": f"project_number required for '{action}' action. Use action='list' to see all projects."}

    # READ ACTIONS
    if action == "view":
        result = await github_graphql.get_project_view(project_number)
        if result.get("error"):
            return {
                "error": result["error"],
                "not_found": True,
                "hint": "Project doesn't exist. Use action='list' to see available projects.",
            }
        return result

    elif action == "list_items":
        result = await github_graphql.list_project_items(project_number=project_number, status=status, limit=limit)