fix: correctly detect team members using permission level API

Signed-off-by: Abhijeet Saharan <abhijeetsaharan2236@gmail.com>

Author: Abhijeet2409

.github/scripts/bot-gfi-assign-on-comment.js

@@ -146,28 +146,40 @@ async function isRepoCollaborator({ github, owner, repo, username }) {
     }
 
     try {
-        await github.rest.repos.checkCollaborator({
+        const response = await github.rest.repos.getCollaboratorPermissionLevel({
             owner,
             repo,
             username,
         });
-        return true; // 204 = collaborator
+
+        const permission = response?.data?.permission;
+
+        const isTeamMember =
+            permission === 'admin' ||
+            permission === 'write' ||
+            permission === 'read';
+
+        console.log('[gfi-assign] isRepoCollaborator:', {
+            username,
+            permission,
+            isTeamMember,
+        });
+
+        return isTeamMember;
     } catch (error) {
-        if (error?.status === 404 || isPermissionFailure(error)) {
-            if (isPermissionFailure(error)) {
-                console.log(
-                    '[gfi-assign] isRepoCollaborator: insufficient permissions; treating as non-collaborator',
-                    { owner, repo, username, status: error.status }
-                );
-            }
+        if (isPermissionFailure(error) || error?.status === 404) {
+            console.log(
+                '[gfi-assign] isRepoCollaborator: no permission / not collaborator',
+                { username, status: error.status }
+            );
             return false;
         }
-        throw error; // unexpected error
+        throw error;
     }
-
 }
 
 
+
 /// START OF SCRIPT ///
 module.exports = async ({ github, context }) => {
     try {