docs(tools): index grant-reviewer.sh in TOOLS.md and TOOLS-REFERENCE.md (#1415)

Review finding B1 on PR #1417: the tool shipped without an index entry, so check-tools-index.sh failed (git suite 29/30) and pipeline 2659 went terminal-red at sanitization. Adds the suite row note in defaults/TOOLS.md and an Access grants table in guides/TOOLS-REFERENCE.md, both naming the official-approval limitation. check-tools-index.sh now rc=0 (git 30/30); format:check and the enumeration guard stay green.
2026-08-24 21:10:54 -05:00
parent deb4760b11
commit b023b1a4dc
2 changed files with 9 additions and 0 deletions
@@ -25,6 +25,11 @@ tools/git/pr-create.sh ...   tools/git/issue-create.sh ...   tools/git/pr-merge.
 tools/git/ci-queue-wait.sh --purpose push|merge   # REQUIRED before any push/merge
 ```

+**Reviewer grants** — `tools/git/grant-reviewer.sh -u <user> [-r <owner>/<repo>] [-t <team>]` adds a
+review seat to an org repo through an org team (Gitea only; code read + issues/pulls write, verified
+by read-back). Team approvals do not count as official under branch protection unless the team is
+whitelisted — see the tool header.
+
 **GITEA_LOGIN gotcha** — the wrappers default to login `mosaicstack`; on a USC repo that fails with
 `gitea / Error: GetUserByName ... not found`. Pick the login from the repo's `origin` host first:

@@ -49,6 +49,10 @@ supply it explicitly on any host where the provider CLI's default account is an
 | `milestone-list.sh`   | List milestones    |
 | `milestone-close.sh`  | Close a milestone  |

+| Access grants       |                                                                                                                                                                                                                              |
+| ------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `grant-reviewer.sh` | Grant a review seat on an org repo via an org team (Gitea only): code read + issues/pulls write, verified by read-back. Team approvals count as official only if branch protection whitelists the team — see the tool header |
+
 | Gates and guards        |                                                                                                           |
 | ----------------------- | --------------------------------------------------------------------------------------------------------- |
 | `ci-queue-wait.sh`      | CI queue guard — required before push/merge (see below)                                                   |