Function parseGitHubAllowedToolsAndLimits

pkg/workflow/mcp_github_config.go:266–302

parseGitHubAllowedToolsAndLimits parses tools.github.allowed entries. Supports string entries and object entries: {name: "tool_name", max-calls: 1}.

(allowedSetting any)

// Supports string entries and object entries:
// {name: "tool_name", max-calls: 1}.
func parseGitHubAllowedToolsAndLimits(allowedSetting any) ([]string, map[string]int) {
	allowedItems, ok := allowedSetting.([]any)
	if !ok {
		return parseStringSliceAny(allowedSetting, nil), nil
	}

	allowedTools := make([]string, 0, len(allowedItems))
	toolCallLimits := make(map[string]int)

	for _, item := range allowedItems {
		switch entry := item.(type) {
		case string:
			toolName := strings.TrimSpace(entry)
			if toolName == "" {
				continue
			}
			allowedTools = append(allowedTools, toolName)
		case map[string]any:
			toolName, ok := entry["name"].(string)
			toolName = strings.TrimSpace(toolName)
			if !ok || toolName == "" {
				continue
			}
			allowedTools = append(allowedTools, toolName)
			if maxCalls, hasMax := entry["max-calls"]; hasMax {
				if max, ok := typeutil.ParseIntValue(maxCalls); ok && max > 0 {
					toolCallLimits[toolName] = max
				}
			}
		}
	}

	if len(toolCallLimits) == 0 {
		return allowedTools, nil
	}
	return allowedTools, toolCallLimits
}

// getGitHubGuardPolicies extracts guard policies from GitHub tool configuration.
// It reads the flat allowed-repos/repos/min-integrity/blocked-users/trusted-users/approval-labels fields