Move lookup_group to core tier

lookup_group is the simplest path from a group email to a resource name
needed by other tools — it belongs in the default tool set.

Made-with: Cursor

Author: darkdreamingdan

README.md

@@ -1056,9 +1056,9 @@ Saved files expire after 1 hour and are cleaned up automatically.
 | `get_group` | **Core** | Retrieve group details |
 | `list_group_members` | **Core** | List members of a group |
 | `manage_group` | **Core** | Create, update, or delete groups |
+| `lookup_group` | **Core** | Look up group resource name by email |
 | `manage_group_members` | Extended | Add, remove, or modify member roles |
 | `list_groups` | Complete | List all groups under a customer |
-| `lookup_group` | Complete | Look up group resource name by email |
 
 </td>
 </tr>

core/tool_tiers.yaml

@@ -150,11 +150,11 @@ groups:
     - get_group
     - list_group_members
     - manage_group
+    - lookup_group
   extended:
     - manage_group_members
   complete:
     - list_groups
-    - lookup_group
 
 search:
   core:

ggroups/groups_tools.py

@@ -373,6 +373,47 @@ async def manage_group(
     return f"Group {group_id} has been deleted."
 
 
+@server.tool()
+@require_google_service("cloudidentity", "groups_read")
+@handle_http_errors("lookup_group", service_type="cloudidentity")
+async def lookup_group(
+    service: Resource,
+    user_google_email: str,
+    group_email: str,
+) -> str:
+    """
+    Look up the resource name of a group by its email address.
+
+    Args:
+        user_google_email (str): The user's Google email address. Required.
+        group_email (str): The group's email address to look up.
+
+    Returns:
+        str: The group's resource name and key information.
+    """
+    logger.info(
+        f"[lookup_group] Invoked. Email: '{user_google_email}', "
+        f"Group email: '{group_email}'"
+    )
+
+    result = await asyncio.to_thread(
+        service.groups()
+        .lookup(groupKey_id=group_email)
+        .execute
+    )
+
+    resource_name = result.get("name", "Unknown")
+    group_id = resource_name.replace("groups/", "")
+
+    response = f"Group Lookup Result:\n\n"
+    response += f"Email: {group_email}\n"
+    response += f"Resource Name: {resource_name}\n"
+    response += f"Group ID: {group_id}\n"
+
+    logger.info(f"Looked up group {group_email} -> {resource_name}")
+    return response
+
+
 # =============================================================================
 # Extended Tier Tools
 # =============================================================================
@@ -563,44 +604,3 @@ async def list_groups(
 
     logger.info(f"Found {len(groups)} groups under {parent} for {user_google_email}")
     return response
-
-
-@server.tool()
-@require_google_service("cloudidentity", "groups_read")
-@handle_http_errors("lookup_group", service_type="cloudidentity")
-async def lookup_group(
-    service: Resource,
-    user_google_email: str,
-    group_email: str,
-) -> str:
-    """
-    Look up the resource name of a group by its email address.
-
-    Args:
-        user_google_email (str): The user's Google email address. Required.
-        group_email (str): The group's email address to look up.
-
-    Returns:
-        str: The group's resource name and key information.
-    """
-    logger.info(
-        f"[lookup_group] Invoked. Email: '{user_google_email}', "
-        f"Group email: '{group_email}'"
-    )
-
-    result = await asyncio.to_thread(
-        service.groups()
-        .lookup(groupKey_id=group_email)
-        .execute
-    )
-
-    resource_name = result.get("name", "Unknown")
-    group_id = resource_name.replace("groups/", "")
-
-    response = f"Group Lookup Result:\n\n"
-    response += f"Email: {group_email}\n"
-    response += f"Resource Name: {resource_name}\n"
-    response += f"Group ID: {group_id}\n"
-
-    logger.info(f"Looked up group {group_email} -> {resource_name}")
-    return response