feat(tools/git): grant-reviewer.sh org-team reviewer grant with fail-closed read-back (#1415) (#1417)

Co-authored-by: veronica <[email protected]>
2026-08-25 02:30:33 +00:00
parent 8738a03893
commit 4cd280e48d
5 changed files with 969 additions and 1 deletions
@@ -25,6 +25,11 @@ tools/git/pr-create.sh ...   tools/git/issue-create.sh ...   tools/git/pr-merge.
 tools/git/ci-queue-wait.sh --purpose push|merge   # REQUIRED before any push/merge
 ```

+**Reviewer grants** — `tools/git/grant-reviewer.sh -u <user> [-r <owner>/<repo>] [-t <team>]` adds a
+review seat to an org repo through an org team (Gitea only; code read + issues/pulls write, verified
+by read-back). Team approvals do not count as official under branch protection unless the team is
+whitelisted — see the tool header.
+
 **GITEA_LOGIN gotcha** — the wrappers default to login `mosaicstack`; on a USC repo that fails with
 `gitea / Error: GetUserByName ... not found`. Pick the login from the repo's `origin` host first: