feat(tools/git): grant-reviewer.sh org-team reviewer grant with fail-closed read-back (#1415) #1417

Merged
orch-01 merged 2 commits from feat/1415-grant-reviewer into next 2026-08-25 02:30:34 +00:00
2 changed files with 9 additions and 0 deletions
Showing only changes of commit b023b1a4dc - Show all commits
@@ -25,6 +25,11 @@ tools/git/pr-create.sh ... tools/git/issue-create.sh ... tools/git/pr-merge.
tools/git/ci-queue-wait.sh --purpose push|merge # REQUIRED before any push/merge
```
**Reviewer grants**`tools/git/grant-reviewer.sh -u <user> [-r <owner>/<repo>] [-t <team>]` adds a
review seat to an org repo through an org team (Gitea only; code read + issues/pulls write, verified
by read-back). Team approvals do not count as official under branch protection unless the team is
whitelisted — see the tool header.
**GITEA_LOGIN gotcha** — the wrappers default to login `mosaicstack`; on a USC repo that fails with
`gitea / Error: GetUserByName ... not found`. Pick the login from the repo's `origin` host first:
@@ -49,6 +49,10 @@ supply it explicitly on any host where the provider CLI's default account is an
| `milestone-list.sh` | List milestones |
| `milestone-close.sh` | Close a milestone |
| Access grants | |
| ------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| `grant-reviewer.sh` | Grant a review seat on an org repo via an org team (Gitea only): code read + issues/pulls write, verified by read-back. Team approvals count as official only if branch protection whitelists the team — see the tool header |
| Gates and guards | |
| ----------------------- | --------------------------------------------------------------------------------------------------------- |
| `ci-queue-wait.sh` | CI queue guard — required before push/merge (see below) |