@proggarapsody/bitbottle 1.35.0 → 1.37.0

package/README.md

@@ -5,6 +5,8 @@
 [![CI](https://github.com/proggarapsody/bitbottle/actions/workflows/ci.yml/badge.svg)](https://github.com/proggarapsody/bitbottle/actions/workflows/ci.yml)
 [![npm](https://img.shields.io/npm/v/@proggarapsody/bitbottle)](https://www.npmjs.com/package/@proggarapsody/bitbottle)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](LICENSE)
+[![OpenSSF Scorecard](https://api.securityscorecards.dev/projects/github.com/proggarapsody/bitbottle/badge)](https://securityscorecards.dev/viewer/?uri=github.com/proggarapsody/bitbottle)
+[![OpenSSF Best Practices](https://www.bestpractices.dev/projects/XXXX/badge)](https://www.bestpractices.dev/projects/XXXX)
 
 Work with Bitbucket from your terminal — pull requests, repos, branches, tags, commits, pipelines, and raw API access. One tool, both backends, same commands.
 
@@ -417,6 +419,41 @@ bitbottle --hostname git.example.com code-insights merge-check delete \
 Invoking any `code-insights` command against a Bitbucket Cloud host returns
 the typed `host.unsupported` error.
 
+### Permissions _(Bitbucket Server / DC only)_
+
+Manage user and group permissions for projects and repositories.
+Requires `PROJECT_ADMIN` on the target project.
+
+```bash
+# List all grants for a project (users + groups, sorted ADMIN → WRITE → READ)
+bitbottle --hostname git.example.com perms project list MYPROJ
+
+# Grant a user PROJECT_WRITE on a project
+bitbottle --hostname git.example.com perms project grant MYPROJ PROJECT_WRITE --user alice
+
+# Grant a group PROJECT_READ on a project
+bitbottle --hostname git.example.com perms project grant MYPROJ PROJECT_READ --group "qa team"
+
+# Revoke a user's permission on a project
+bitbottle --hostname git.example.com perms project revoke MYPROJ --user bob
+
+# List all grants for a repository
+bitbottle --hostname git.example.com perms repo list MYPROJ/my-service
+
+# Grant a user REPO_WRITE on a repository
+bitbottle --hostname git.example.com perms repo grant MYPROJ/my-service REPO_WRITE --user carol
+
+# Revoke a group's permission on a repository
+bitbottle --hostname git.example.com perms repo revoke MYPROJ/my-service --group "qa team"
+
+# Structured output
+bitbottle --hostname git.example.com perms project list MYPROJ --json permission,subject
+bitbottle --hostname git.example.com perms project list MYPROJ --jq '.[] | select(.permission == "PROJECT_ADMIN")'
+```
+
+If a grant call would **downgrade** an existing permission (e.g. ADMIN → READ),
+`grant` prompts for confirmation on a TTY. Pass `--force` to skip the prompt.
+
 ### Commit Comments
 
 Add and manage review-style comments on individual commits. Both Bitbucket

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@proggarapsody/bitbottle",
-  "version": "1.35.0",
+  "version": "1.37.0",
   "description": "Bitbucket CLI for Server/Data Center and Cloud — npm wrapper for bitbottle",
   "keywords": [
     "mcp",