Add unassign-from-user safe output handler

.github/workflows/smoke-codex.md

@@ -51,6 +51,9 @@ safe-outputs:
       allowed: [smoke-codex]
     remove-labels:
       allowed: [smoke]
+    unassign-from-user:
+      allowed: [githubactionagent]
+      max: 1
     hide-comment:
     messages:
       footer: "> 🔮 *The oracle has spoken through [{workflow_name}]({run_url})*"
@@ -89,3 +92,4 @@ Add a **very brief** comment (max 5-10 lines) to the current pull request with:
 If all tests pass:
 - Use the `add_labels` safe-output tool to add the label `smoke-codex` to the pull request
 - Use the `remove_labels` safe-output tool to remove the label `smoke` from the pull request
+- Use the `unassign_from_user` safe-output tool to unassign the user `githubactionagent` from the pull request (this is a fictitious user used for testing)

actions/setup/js/safe_output_handler_manager.cjs

@@ -43,6 +43,7 @@ const HANDLER_MAP = {
   add_reviewer: "./add_reviewer.cjs",
   assign_milestone: "./assign_milestone.cjs",
   assign_to_user: "./assign_to_user.cjs",
+  unassign_from_user: "./unassign_from_user.cjs",
   create_code_scanning_alert: "./create_code_scanning_alert.cjs",
   autofix_code_scanning_alert: "./autofix_code_scanning_alert.cjs",
   dispatch_workflow: "./dispatch_workflow.cjs",

actions/setup/js/safe_output_unified_handler_manager.cjs

@@ -51,6 +51,7 @@ const HANDLER_MAP = {
   add_reviewer: "./add_reviewer.cjs",
   assign_milestone: "./assign_milestone.cjs",
   assign_to_user: "./assign_to_user.cjs",
+  unassign_from_user: "./unassign_from_user.cjs",
   create_code_scanning_alert: "./create_code_scanning_alert.cjs",
   autofix_code_scanning_alert: "./autofix_code_scanning_alert.cjs",
   dispatch_workflow: "./dispatch_workflow.cjs",

actions/setup/js/safe_outputs_tools.json

@@ -405,6 +405,35 @@
       "additionalProperties": false
     }
   },
+  {
+    "name": "unassign_from_user",
+    "description": "Remove one or more assignees from an issue. Use this to unassign users when work is being reassigned or removed from their queue.",
+    "inputSchema": {
+      "type": "object",
+      "properties": {
+        "issue_number": {
+          "type": ["number", "string"],
+          "description": "Issue number to unassign users from. This is the numeric ID from the GitHub URL (e.g., 543 in github.com/owner/repo/issues/543). If omitted, uses the issue that triggered this workflow."
+        },
+        "assignees": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          },
+          "description": "GitHub usernames to unassign from the issue (e.g., ['octocat', 'mona'])."
+        },
+        "assignee": {
+          "type": "string",
+          "description": "Single GitHub username to unassign. Use 'assignees' array for multiple users."
+        },
+        "repo": {
+          "type": "string",
+          "description": "Target repository in 'owner/repo' format. If omitted, uses the current repository. Must be in allowed-repos list if specified."
+        }
+      },
+      "additionalProperties": false
+    }
+  },
   {
     "name": "update_issue",
     "description": "Update an existing GitHub issue's status, title, or body. Use this to modify issue properties after creation. Only the fields you specify will be updated; other fields remain unchanged.",

actions/setup/js/unassign_from_user.cjs

@@ -0,0 +1,151 @@
+// @ts-check
+/// <reference types="@actions/github-script" />
+
+/**
+ * @typedef {import('./types/handler-factory').HandlerFactoryFunction} HandlerFactoryFunction
+ */
+
+const { processItems } = require("./safe_output_processor.cjs");
+const { getErrorMessage } = require("./error_helpers.cjs");
+const { resolveTargetRepoConfig, resolveAndValidateRepo } = require("./repo_helpers.cjs");
+
+/** @type {string} Safe output type handled by this module */
+const HANDLER_TYPE = "unassign_from_user";
+
+/**
+ * Main handler factory for unassign_from_user
+ * Returns a message handler function that processes individual unassign_from_user messages
+ * @type {HandlerFactoryFunction}
+ */
+async function main(config = {}) {
+  // Extract configuration
+  const allowedAssignees = config.allowed || [];
+  const maxCount = config.max || 10;
+
+  // Resolve target repository configuration
+  const { defaultTargetRepo, allowedRepos } = resolveTargetRepoConfig(config);
+
+  core.info(`Unassign from user configuration: max=${maxCount}`);
+  if (allowedAssignees.length > 0) {
+    core.info(`Allowed assignees to unassign: ${allowedAssignees.join(", ")}`);
+  }
+  core.info(`Default target repository: ${defaultTargetRepo}`);
+  if (allowedRepos.size > 0) {
+    core.info(`Additional allowed repositories: ${Array.from(allowedRepos).join(", ")}`);
+  }
+
+  // Track how many items we've processed for max limit
+  let processedCount = 0;
+
+  /**
+   * Message handler function that processes a single unassign_from_user message
+   * @param {Object} message - The unassign_from_user message to process
+   * @param {Object} resolvedTemporaryIds - Map of temporary IDs to {repo, number}
+   * @returns {Promise<Object>} Result with success/error status
+   */
+  return async function handleUnassignFromUser(message, resolvedTemporaryIds) {
+    // Check if we've hit the max limit
+    if (processedCount >= maxCount) {
+      core.warning(`Skipping unassign_from_user: max count of ${maxCount} reached`);
+      return {
+        success: false,
+        error: `Max count of ${maxCount} reached`,
+      };
+    }
+
+    processedCount++;
+
+    const unassignItem = message;
+
+    // Determine issue number
+    let issueNumber;
+    if (unassignItem.issue_number !== undefined) {
+      issueNumber = parseInt(String(unassignItem.issue_number), 10);
+      if (isNaN(issueNumber)) {
+        core.warning(`Invalid issue_number: ${unassignItem.issue_number}`);
+        return {
+          success: false,
+          error: `Invalid issue_number: ${unassignItem.issue_number}`,
+        };
+      }
+    } else {
+      // Use context issue if available
+      const contextIssue = context.payload?.issue?.number;
+      if (!contextIssue) {
+        core.warning("No issue_number provided and not in issue context");
+        return {
+          success: false,
+          error: "No issue number available",
+        };
+      }
+      issueNumber = contextIssue;
+    }
+
+    // Support both singular "assignee" and plural "assignees" for flexibility
+    let requestedAssignees = [];
+    if (unassignItem.assignees && Array.isArray(unassignItem.assignees)) {
+      requestedAssignees = unassignItem.assignees;
+    } else if (unassignItem.assignee) {
+      requestedAssignees = [unassignItem.assignee];
+    }
+
+    core.info(`Requested assignees to unassign: ${JSON.stringify(requestedAssignees)}`);
+
+    // Use shared helper to filter, sanitize, dedupe, and limit
+    const uniqueAssignees = processItems(requestedAssignees, allowedAssignees, maxCount);
+
+    if (uniqueAssignees.length === 0) {
+      core.info("No assignees to remove");
+      return {
+        success: true,
+        issueNumber: issueNumber,
+        assigneesRemoved: [],
+        message: "No valid assignees found",
+      };
+    }
+
+    // Resolve and validate target repository
+    const repoResult = resolveAndValidateRepo(unassignItem, defaultTargetRepo, allowedRepos, "issue");
+
+    if (!repoResult.success) {
+      core.warning(`Repository validation failed: ${repoResult.error}`);
+      return {
+        success: false,
+        error: repoResult.error,
+      };
+    }
+
+    const repoParts = repoResult.repoParts;
+    const targetRepo = repoResult.repo;
+
+    core.info(`Unassigning ${uniqueAssignees.length} users from issue #${issueNumber} in ${targetRepo}: ${JSON.stringify(uniqueAssignees)}`);
+
+    try {
+      // Remove assignees from the issue
+      await github.rest.issues.removeAssignees({
+        owner: repoParts.owner,
+        repo: repoParts.repo,
+        issue_number: issueNumber,
+        assignees: uniqueAssignees,
+      });
+
+      core.info(`Successfully unassigned ${uniqueAssignees.length} user(s) from issue #${issueNumber} in ${targetRepo}`);
+
+      return {
+        success: true,
+        issueNumber: issueNumber,
+        repo: targetRepo,
+        assigneesRemoved: uniqueAssignees,
+      };
+    } catch (error) {
+      const errorMessage = getErrorMessage(error);
+      core.error(`Failed to unassign users: ${errorMessage}`);
+      return {
+        success: false,
+        error: errorMessage,
+      };
+    }
+  };
+}
+
+module.exports = { main };