atlas_rb 0.0.97 → 0.0.99

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 9b6ef40045a79aa04b9ca98e80e92a456ae933f5cbad55772d7de9c73786480d
-  data.tar.gz: 23c2f7a59045c1e1d7ec268fcaa2f47578f12e1a4ff4d7e21ab16a983e8c501b
+  metadata.gz: 4eca6ad0d27c37d1c2b6d367c620e981acef4c3dd39fcf7a888f05827438b8eb
+  data.tar.gz: 4d20891f98883ffa158039515f6108f7e147c181da4adc146933b571063640c2
 SHA512:
-  metadata.gz: 743d6f4b3e107a41597faca5108f7bfaefc2fae92c0efbc3ea2668cbd043206f104f095f87b722bd90bb23a95b3d2de0f90d549ffade362d4e1ee983163b8c90
-  data.tar.gz: 64bbc84b852c22d6d4894b1f59e2809ada532d8fc31790eccd2615756ac7c11905608e589a981940bfb1d6beaccd75bc4f3ba801c0e4fc6c1665dc9f7ffd53ba
+  metadata.gz: fe7aec013ecd78e381bef342e226e499a97b1c37b2120d912aec1636f64a2de4536182436407ebf920df254818054cf73f39046aa4848b93ff818af2a266d3fa
+  data.tar.gz: 32b39e4905ea9463d9c6cce7aff994e9925fb8de1d11ce8a619ab0520a07d358657d8f23c90c4b8ae7d35aa1ad799a825457b6a1a5bdeeaad4472ad1ef6ad579

data/.version

@@ -1 +1 @@
-0.0.97
+0.0.99

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    atlas_rb (0.0.97)
+    atlas_rb (0.0.99)
       faraday (~> 2.7)
       faraday-follow_redirects (~> 0.3.0)
       faraday-multipart (~> 1)
@@ -19,7 +19,7 @@ GEM
       faraday (>= 1, < 3)
     faraday-multipart (1.2.0)
       multipart-post (~> 2.0)
-    faraday-net_http (3.4.2)
+    faraday-net_http (3.4.3)
       net-http (~> 0.5)
     hashie (5.1.0)
       logger

data/lib/atlas_rb/blob.rb

@@ -17,14 +17,17 @@ module AtlasRb
     # Fetch a single Blob's metadata record (not its bytes — see {.content}).
     #
     # @param id [String] the Blob ID.
+    # @param nuid [String, nil] optional acting user's NUID, forwarded as the
+    #   `User:` header. Required for cerberus-token requests; legacy bearer
+    #   tokens still resolve without it.
     # @return [Hash] the `"blob"` object, already unwrapped — typically
     #   includes `"id"`, `"original_filename"`, `"size"`, and a download URL.
     #
     # @example
     #   AtlasRb::Blob.find("b-321")
     #   # => { "id" => "b-321", "original_filename" => "scan.pdf", ... }
-    def self.find(id)
-      AtlasRb::Mash.new(JSON.parse(connection({}).get(ROUTE + id)&.body))['blob']
+    def self.find(id, nuid: nil)
+      AtlasRb::Mash.new(JSON.parse(connection({}, nuid).get(ROUTE + id)&.body))['blob']
     end
 
     # Stream the Blob's binary content through a caller-supplied block.
@@ -35,6 +38,9 @@ module AtlasRb
     # returned so callers can inspect `Content-Type`, `Content-Length`, etc.
     #
     # @param id [String] the Blob ID.
+    # @param nuid [String, nil] optional acting user's NUID, forwarded as the
+    #   `User:` header. Required for cerberus-token requests; legacy bearer
+    #   tokens still resolve without it.
     # @yieldparam chunk [String] the next chunk of binary data.
     # @return [Hash] the response headers from `GET /files/<id>/content`.
     #
@@ -43,9 +49,9 @@ module AtlasRb
     #     headers = AtlasRb::Blob.content("b-321") { |chunk| f.write(chunk) }
     #     puts headers["content-type"]
     #   end
-    def self.content(id, &chunk_handler)
+    def self.content(id, nuid: nil, &chunk_handler)
       headers = {}
-      connection({}).get("#{ROUTE}#{id}/content") do |req|
+      connection({}, nuid).get("#{ROUTE}#{id}/content") do |req|
         req.options.on_data = proc do |chunk, _bytes_received, env|
           headers = env.response_headers if headers.empty? && env
           chunk_handler.call(chunk)
@@ -68,6 +74,9 @@ module AtlasRb
     # @param idempotency_key [String, nil] optional UUID. A repeat call with
     #   the same key returns the originally-created Blob instead of creating
     #   a new one. See {AtlasRb::Work.create} for full semantics.
+    # @param nuid [String, nil] optional acting user's NUID, forwarded as the
+    #   `User:` header. Required for cerberus-token requests; legacy bearer
+    #   tokens still resolve without it.
     # @return [Hash] the created `"blob"` payload, including its `"id"`.
     #
     # @example
@@ -78,7 +87,7 @@ module AtlasRb
     #   key = SecureRandom.uuid
     #   AtlasRb::Blob.create("w-789", "/tmp/upload.tmp", "thesis.pdf",
     #                        idempotency_key: key)
-    def self.create(id, blob_path, original_filename, idempotency_key: nil)
+    def self.create(id, blob_path, original_filename, idempotency_key: nil, nuid: nil)
       payload = { work_id: id,
                   original_filename: original_filename,
                   binary: Faraday::Multipart::FilePart.new(File.open(blob_path),
@@ -86,19 +95,22 @@ module AtlasRb
                                                           File.basename(blob_path)) }
 
       AtlasRb::Mash.new(JSON.parse(
-        multipart(nil, idempotency_key: idempotency_key).post(ROUTE, payload)&.body
+        multipart(nuid, idempotency_key: idempotency_key).post(ROUTE, payload)&.body
       ))['blob']
     end
 
     # Delete a Blob (the bytes *and* the metadata record).
     #
     # @param id [String] the Blob ID.
+    # @param nuid [String, nil] optional acting user's NUID, forwarded as the
+    #   `User:` header. Required for cerberus-token requests; legacy bearer
+    #   tokens still resolve without it.
     # @return [Faraday::Response] the raw delete response.
     #
     # @example
     #   AtlasRb::Blob.destroy("b-321")
-    def self.destroy(id)
-      connection({}).delete(ROUTE + id)
+    def self.destroy(id, nuid: nil)
+      connection({}, nuid).delete(ROUTE + id)
     end
 
     # Replace the bytes of an existing Blob in-place.
@@ -109,15 +121,18 @@ module AtlasRb
     #
     # @param id [String] the Blob ID.
     # @param blob_path [String] path to the replacement binary on disk.
+    # @param nuid [String, nil] optional acting user's NUID, forwarded as the
+    #   `User:` header. Required for cerberus-token requests; legacy bearer
+    #   tokens still resolve without it.
     # @return [Hash] the parsed JSON response from the patch.
     #
     # @example
     #   AtlasRb::Blob.update("b-321", "/tmp/revised.pdf")
-    def self.update(id, blob_path)
+    def self.update(id, blob_path, nuid: nil)
       payload = { binary: Faraday::Multipart::FilePart.new(File.open(blob_path),
                                                           "application/octet-stream",
                                                           File.basename(blob_path)) }
-      AtlasRb::Mash.new(JSON.parse(multipart({}).patch(ROUTE + id, payload)&.body))
+      AtlasRb::Mash.new(JSON.parse(multipart(nuid).patch(ROUTE + id, payload)&.body))
     end
   end
 end

data/lib/atlas_rb/collection.rb

@@ -16,14 +16,17 @@ module AtlasRb
     # Fetch a single Collection by ID.
     #
     # @param id [String] the Collection ID.
+    # @param nuid [String, nil] optional acting user's NUID, forwarded as the
+    #   `User:` header. Required for cerberus-token requests; legacy bearer
+    #   tokens still resolve without it.
     # @return [Hash] the `"collection"` object, already unwrapped from the
     #   JSON response.
     #
     # @example
     #   AtlasRb::Collection.find("col-456")
     #   # => { "id" => "col-456", "title" => "Faculty Publications", ... }
-    def self.find(id)
-      AtlasRb::Mash.new(JSON.parse(connection({}).get(ROUTE + id)&.body))["collection"]
+    def self.find(id, nuid: nil)
+      AtlasRb::Mash.new(JSON.parse(connection({}, nuid).get(ROUTE + id)&.body))["collection"]
     end
 
     # Create a new Collection under an existing Community.
@@ -36,13 +39,16 @@ module AtlasRb
     # @param xml_path [String, nil] optional path to a MODS XML file used to
     #   seed metadata. When given, the Collection is created and immediately
     #   patched with the metadata in the file.
+    # @param nuid [String, nil] optional acting user's NUID, forwarded as the
+    #   `User:` header. Required for cerberus-token requests; legacy bearer
+    #   tokens still resolve without it.
     # @return [Hash] the created Collection payload (post-update if
     #   `xml_path` was supplied).
     #
     # @example
     #   AtlasRb::Collection.create("c-123", "/tmp/collection-mods.xml")
-    def self.create(id, xml_path = nil)
-      result = AtlasRb::Mash.new(JSON.parse(connection({ parent_id: id }).post(ROUTE)&.body))["collection"]
+    def self.create(id, xml_path = nil, nuid: nil)
+      result = AtlasRb::Mash.new(JSON.parse(connection({ parent_id: id }, nuid).post(ROUTE)&.body))["collection"]
       return result unless xml_path.present?
 
       update(result["id"], xml_path)
@@ -114,15 +120,18 @@ module AtlasRb
     #
     # @param id [String] the Collection ID.
     # @param xml_path [String] path to a MODS XML file on disk.
+    # @param nuid [String, nil] optional acting user's NUID, forwarded as the
+    #   `User:` header. Required for cerberus-token requests; legacy bearer
+    #   tokens still resolve without it.
     # @return [Hash] the parsed JSON response from the patch.
     #
     # @example
     #   AtlasRb::Collection.update("col-456", "/tmp/collection-mods.xml")
-    def self.update(id, xml_path)
+    def self.update(id, xml_path, nuid: nil)
       payload = { binary: Faraday::Multipart::FilePart.new(File.open(xml_path),
                                                            "application/xml",
                                                            File.basename(xml_path)) }
-      AtlasRb::Mash.new(JSON.parse(multipart({}).patch(ROUTE + id, payload)&.body))
+      AtlasRb::Mash.new(JSON.parse(multipart(nuid).patch(ROUTE + id, payload)&.body))
     end
 
     # Patch individual descriptive-metadata fields without uploading a
@@ -134,12 +143,15 @@ module AtlasRb
     #
     # @param id [String] the Collection ID.
     # @param values [Hash] field-level metadata updates.
+    # @param nuid [String, nil] optional acting user's NUID, forwarded as the
+    #   `User:` header. Required for cerberus-token requests; legacy bearer
+    #   tokens still resolve without it.
     # @return [Hash] the parsed JSON response.
     #
     # @example
     #   AtlasRb::Collection.metadata("col-456", title: "Renamed Collection")
-    def self.metadata(id, values)
-      AtlasRb::Mash.new(JSON.parse(connection({ metadata: values }).patch(ROUTE + id)&.body))
+    def self.metadata(id, values, nuid: nil)
+      AtlasRb::Mash.new(JSON.parse(connection({ metadata: values }, nuid).patch(ROUTE + id)&.body))
     end
 
     # Attach the three thumbnail/preview Delegate URIs to a Collection.
@@ -153,6 +165,9 @@ module AtlasRb
     # @param thumbnail [String, nil] IIIF URI for the ~85² thumbnail.
     # @param thumbnail_2x [String, nil] IIIF URI for the ~170² 2x thumbnail.
     # @param preview [String, nil] IIIF URI for the ~500w preview image.
+    # @param nuid [String, nil] optional acting user's NUID, forwarded as the
+    #   `User:` header. Required for cerberus-token requests; legacy bearer
+    #   tokens still resolve without it.
     # @return [AtlasRb::Mash] the parsed JSON response.
     #
     # @example
@@ -162,10 +177,10 @@ module AtlasRb
     #     thumbnail_2x: "https://iiif.example.edu/iiif/3/c.jp2/full/!170,170/0/default.jpg",
     #     preview:      "https://iiif.example.edu/iiif/3/c.jp2/full/500,/0/default.jpg"
     #   )
-    def self.set_thumbnails(id, thumbnail: nil, thumbnail_2x: nil, preview: nil)
+    def self.set_thumbnails(id, thumbnail: nil, thumbnail_2x: nil, preview: nil, nuid: nil)
       body = { thumbnail: thumbnail, thumbnail_2x: thumbnail_2x, preview: preview }.compact
       AtlasRb::Mash.new(JSON.parse(
-        connection({}).patch(ROUTE + id + '/thumbnails', JSON.dump(body))&.body
+        connection({}, nuid).patch(ROUTE + id + '/thumbnails', JSON.dump(body))&.body
       ))
     end
 
@@ -174,13 +189,16 @@ module AtlasRb
     # @param id [String] the Collection ID.
     # @param kind [String, nil] one of `"json"` (default), `"html"`, or
     #   `"xml"`.
+    # @param nuid [String, nil] optional acting user's NUID, forwarded as the
+    #   `User:` header. Required for cerberus-token requests; legacy bearer
+    #   tokens still resolve without it.
     # @return [String] the raw response body in the requested format.
     #
     # @example
     #   AtlasRb::Collection.mods("col-456", "xml")
-    def self.mods(id, kind = nil)
+    def self.mods(id, kind = nil, nuid: nil)
       # json default, html, xml
-      connection({}).get(
+      connection({}, nuid).get(
         ROUTE + id + '/mods' + (kind.present? ? ".#{kind}" : '')
         )&.body
     end

data/lib/atlas_rb/community.rb

@@ -17,14 +17,17 @@ module AtlasRb
     # Fetch a single Community by ID.
     #
     # @param id [String] the Community ID.
+    # @param nuid [String, nil] optional acting user's NUID, forwarded as the
+    #   `User:` header. Required for cerberus-token requests; legacy bearer
+    #   tokens still resolve without it.
     # @return [Hash] the `"community"` object from the JSON response,
     #   already unwrapped.
     #
     # @example
     #   AtlasRb::Community.find("c-123")
     #   # => { "id" => "c-123", "title" => "College of Engineering", ... }
-    def self.find(id)
-      AtlasRb::Mash.new(JSON.parse(connection({}).get(ROUTE + id)&.body))["community"]
+    def self.find(id, nuid: nil)
+      AtlasRb::Mash.new(JSON.parse(connection({}, nuid).get(ROUTE + id)&.body))["community"]
     end
 
     # Create a new Community, optionally seeded with MODS metadata.
@@ -37,6 +40,9 @@ module AtlasRb
     # @param xml_path [String, nil] optional path to a MODS XML file. When
     #   given, the Community is created and immediately patched with the
     #   metadata in the file; the returned Hash reflects the patched state.
+    # @param nuid [String, nil] optional acting user's NUID, forwarded as the
+    #   `User:` header. Required for cerberus-token requests; legacy bearer
+    #   tokens still resolve without it.
     # @return [Hash] the created Community payload (post-update if `xml_path`
     #   was supplied).
     #
@@ -45,8 +51,8 @@ module AtlasRb
     #
     # @example Sub-community seeded from MODS
     #   AtlasRb::Community.create("c-parent", "/tmp/dept-mods.xml")
-    def self.create(id = nil, xml_path = nil)
-      result = AtlasRb::Mash.new(JSON.parse(connection({ parent_id: id }).post(ROUTE)&.body))["community"]
+    def self.create(id = nil, xml_path = nil, nuid: nil)
+      result = AtlasRb::Mash.new(JSON.parse(connection({ parent_id: id }, nuid).post(ROUTE)&.body))["community"]
       return result unless xml_path.present?
 
       update(result["id"], xml_path)
@@ -119,15 +125,18 @@ module AtlasRb
     #
     # @param id [String] the Community ID.
     # @param xml_path [String] path to a MODS XML file on disk.
+    # @param nuid [String, nil] optional acting user's NUID, forwarded as the
+    #   `User:` header. Required for cerberus-token requests; legacy bearer
+    #   tokens still resolve without it.
     # @return [Hash] the parsed JSON response from the patch.
     #
     # @example
     #   AtlasRb::Community.update("c-123", "/tmp/community-mods.xml")
-    def self.update(id, xml_path)
+    def self.update(id, xml_path, nuid: nil)
       payload = { binary: Faraday::Multipart::FilePart.new(File.open(xml_path),
                                                            "application/xml",
                                                            File.basename(xml_path)) }
-      AtlasRb::Mash.new(JSON.parse(multipart({}).patch(ROUTE + id, payload)&.body))
+      AtlasRb::Mash.new(JSON.parse(multipart(nuid).patch(ROUTE + id, payload)&.body))
     end
 
     # Patch individual descriptive-metadata fields without uploading a
@@ -140,12 +149,15 @@ module AtlasRb
     # @param id [String] the Community ID.
     # @param values [Hash] field-level metadata updates (shape determined by
     #   the Atlas server, typically a mapping from MODS field name to value).
+    # @param nuid [String, nil] optional acting user's NUID, forwarded as the
+    #   `User:` header. Required for cerberus-token requests; legacy bearer
+    #   tokens still resolve without it.
     # @return [Hash] the parsed JSON response.
     #
     # @example
     #   AtlasRb::Community.metadata("c-123", title: "New Name")
-    def self.metadata(id, values)
-      AtlasRb::Mash.new(JSON.parse(connection({ metadata: values }).patch(ROUTE + id)&.body))
+    def self.metadata(id, values, nuid: nil)
+      AtlasRb::Mash.new(JSON.parse(connection({ metadata: values }, nuid).patch(ROUTE + id)&.body))
     end
 
     # Attach the three thumbnail/preview Delegate URIs to a Community.
@@ -159,6 +171,9 @@ module AtlasRb
     # @param thumbnail [String, nil] IIIF URI for the ~85² thumbnail.
     # @param thumbnail_2x [String, nil] IIIF URI for the ~170² 2x thumbnail.
     # @param preview [String, nil] IIIF URI for the ~500w preview image.
+    # @param nuid [String, nil] optional acting user's NUID, forwarded as the
+    #   `User:` header. Required for cerberus-token requests; legacy bearer
+    #   tokens still resolve without it.
     # @return [AtlasRb::Mash] the parsed JSON response.
     #
     # @example
@@ -168,10 +183,10 @@ module AtlasRb
     #     thumbnail_2x: "https://iiif.example.edu/iiif/3/m.jp2/full/!170,170/0/default.jpg",
     #     preview:      "https://iiif.example.edu/iiif/3/m.jp2/full/500,/0/default.jpg"
     #   )
-    def self.set_thumbnails(id, thumbnail: nil, thumbnail_2x: nil, preview: nil)
+    def self.set_thumbnails(id, thumbnail: nil, thumbnail_2x: nil, preview: nil, nuid: nil)
       body = { thumbnail: thumbnail, thumbnail_2x: thumbnail_2x, preview: preview }.compact
       AtlasRb::Mash.new(JSON.parse(
-        connection({}).patch(ROUTE + id + '/thumbnails', JSON.dump(body))&.body
+        connection({}, nuid).patch(ROUTE + id + '/thumbnails', JSON.dump(body))&.body
       ))
     end
 
@@ -181,14 +196,17 @@ module AtlasRb
     # @param kind [String, nil] one of `"json"` (default when omitted),
     #   `"html"`, or `"xml"`. When `nil`, Atlas returns its default
     #   representation.
+    # @param nuid [String, nil] optional acting user's NUID, forwarded as the
+    #   `User:` header. Required for cerberus-token requests; legacy bearer
+    #   tokens still resolve without it.
     # @return [String] the raw response body (JSON, HTML, or XML serialized
     #   as a string).
     #
     # @example HTML rendering for display
     #   AtlasRb::Community.mods("c-123", "html")
-    def self.mods(id, kind = nil)
+    def self.mods(id, kind = nil, nuid: nil)
       # json default, html, xml
-      connection({}).get(
+      connection({}, nuid).get(
         ROUTE + id + '/mods' + (kind.present? ? ".#{kind}" : '')
         )&.body
     end

data/lib/atlas_rb/resource.rb

@@ -26,6 +26,9 @@ module AtlasRb
     # pair so callers can dispatch on type.
     #
     # @param id [String] an Atlas resource ID of any type.
+    # @param nuid [String, nil] optional acting user's NUID, forwarded as the
+    #   `User:` header. Required for cerberus-token requests; legacy bearer
+    #   tokens still resolve without it.
     # @return [Hash{String => String, Hash}] hash with two keys:
     #   - `"klass"` — the resource type, capitalized (e.g. `"Work"`).
     #   - `"resource"` — the resource payload as a Hash.
@@ -33,8 +36,8 @@ module AtlasRb
     # @example Polymorphic lookup
     #   AtlasRb::Resource.find("abc123")
     #   # => { "klass" => "Work", "resource" => { "id" => "abc123", "title" => "..." } }
-    def self.find(id)
-      result = JSON.parse(connection({}).get('/resources/' + id)&.body)
+    def self.find(id, nuid: nil)
+      result = JSON.parse(connection({}, nuid).get('/resources/' + id)&.body)
       AtlasRb::Mash.new("klass" => result.first[0].capitalize,
                         "resource" => result.first[1])
     end
@@ -44,29 +47,35 @@ module AtlasRb
     # Useful for surfacing validation errors in UIs before the user commits.
     #
     # @param xml_path [String] path to a MODS XML file on disk.
+    # @param nuid [String, nil] optional acting user's NUID, forwarded as the
+    #   `User:` header. Required for cerberus-token requests; legacy bearer
+    #   tokens still resolve without it.
     # @return [String] the raw response body from `POST /resources/preview`
     #   — typically a JSON or XML error report.
     #
     # @example
     #   AtlasRb::Resource.preview("/tmp/draft-mods.xml")
-    def self.preview(xml_path)
+    def self.preview(xml_path, nuid: nil)
       payload = { binary: Faraday::Multipart::FilePart.new(File.open(xml_path),
                                                            "application/xml",
                                                            File.basename(xml_path)) }
-      multipart({}).post('/resources/preview', payload)&.body
+      multipart(nuid).post('/resources/preview', payload)&.body
     end
 
     # Fetch the access-control entries for a resource.
     #
     # @param id [String] an Atlas resource ID.
+    # @param nuid [String, nil] optional acting user's NUID, forwarded as the
+    #   `User:` header. Required for cerberus-token requests; legacy bearer
+    #   tokens still resolve without it.
     # @return [Hash] the `"resource"` payload from `GET /resources/<id>/permissions`,
     #   typically containing read/write/admin grant lists.
     #
     # @example
     #   AtlasRb::Resource.permissions("abc123")
     #   # => { "id" => "abc123", "read" => [...], "write" => [...] }
-    def self.permissions(id)
-      AtlasRb::Mash.new(JSON.parse(connection({}).get('/resources/' + id + '/permissions')&.body))["resource"]
+    def self.permissions(id, nuid: nil)
+      AtlasRb::Mash.new(JSON.parse(connection({}, nuid).get('/resources/' + id + '/permissions')&.body))["resource"]
     end
   end
 end

data/lib/atlas_rb/work.rb

@@ -16,14 +16,17 @@ module AtlasRb
     # Fetch a single Work by ID.
     #
     # @param id [String] the Work ID.
+    # @param nuid [String, nil] optional acting user's NUID, forwarded as the
+    #   `User:` header. Required for cerberus-token requests; legacy bearer
+    #   tokens still resolve without it.
     # @return [Hash] the `"work"` object, already unwrapped from the JSON
     #   response.
     #
     # @example
     #   AtlasRb::Work.find("w-789")
     #   # => { "id" => "w-789", "title" => "An Article", ... }
-    def self.find(id)
-      AtlasRb::Mash.new(JSON.parse(connection({}).get(ROUTE + id)&.body))["work"]
+    def self.find(id, nuid: nil)
+      AtlasRb::Mash.new(JSON.parse(connection({}, nuid).get(ROUTE + id)&.body))["work"]
     end
 
     # List Works, paginated.
@@ -71,6 +74,9 @@ module AtlasRb
     #   follow-up PATCH/GET when `xml_path` is given do not carry the key.
     #   The caller (e.g. Cerberus's Solid Queue job) generates and persists
     #   the UUID; this gem does not mint keys.
+    # @param nuid [String, nil] optional acting user's NUID, forwarded as the
+    #   `User:` header. Required for cerberus-token requests; legacy bearer
+    #   tokens still resolve without it.
     # @return [Hash] the created Work payload (post-update if `xml_path` was
     #   supplied).
     #
@@ -83,9 +89,9 @@ module AtlasRb
     # @example Retry-safe bulk-deposit create
     #   key = SecureRandom.uuid
     #   AtlasRb::Work.create("col-456", idempotency_key: key)
-    def self.create(id, xml_path = nil, idempotency_key: nil)
+    def self.create(id, xml_path = nil, idempotency_key: nil, nuid: nil)
       result = AtlasRb::Mash.new(JSON.parse(
-        connection({ collection_id: id }, nil, idempotency_key: idempotency_key).post(ROUTE)&.body
+        connection({ collection_id: id }, nuid, idempotency_key: idempotency_key).post(ROUTE)&.body
       ))["work"]
       return result unless xml_path.present?
 
@@ -166,15 +172,18 @@ module AtlasRb
     #
     # @param id [String] the Work ID.
     # @param xml_path [String] path to a MODS XML file on disk.
+    # @param nuid [String, nil] optional acting user's NUID, forwarded as the
+    #   `User:` header. Required for cerberus-token requests; legacy bearer
+    #   tokens still resolve without it.
     # @return [Hash] the parsed JSON response from the patch.
     #
     # @example
     #   AtlasRb::Work.update("w-789", "/tmp/work-mods.xml")
-    def self.update(id, xml_path)
+    def self.update(id, xml_path, nuid: nil)
       payload = { binary: Faraday::Multipart::FilePart.new(File.open(xml_path),
                                                            "application/xml",
                                                            File.basename(xml_path)) }
-      AtlasRb::Mash.new(JSON.parse(multipart({}).patch(ROUTE + id, payload)&.body))
+      AtlasRb::Mash.new(JSON.parse(multipart(nuid).patch(ROUTE + id, payload)&.body))
     end
 
     # Patch individual descriptive-metadata fields without uploading a
@@ -187,12 +196,15 @@ module AtlasRb
     #
     # @param id [String] the Work ID.
     # @param values [Hash] field-level metadata updates.
+    # @param nuid [String, nil] optional acting user's NUID, forwarded as the
+    #   `User:` header. Required for cerberus-token requests; legacy bearer
+    #   tokens still resolve without it.
     # @return [Hash] the parsed JSON response.
     #
     # @example
     #   AtlasRb::Work.metadata("w-789", title: "Revised Title")
-    def self.metadata(id, values)
-      AtlasRb::Mash.new(JSON.parse(connection({ metadata: values }).patch(ROUTE + id)&.body))
+    def self.metadata(id, values, nuid: nil)
+      AtlasRb::Mash.new(JSON.parse(connection({ metadata: values }, nuid).patch(ROUTE + id)&.body))
     end
 
     # Attach the three thumbnail/preview Delegate URIs to a Work.
@@ -208,6 +220,9 @@ module AtlasRb
     # @param thumbnail [String, nil] IIIF URI for the ~85² thumbnail.
     # @param thumbnail_2x [String, nil] IIIF URI for the ~170² 2x thumbnail.
     # @param preview [String, nil] IIIF URI for the ~500w preview image.
+    # @param nuid [String, nil] optional acting user's NUID, forwarded as the
+    #   `User:` header. Required for cerberus-token requests; legacy bearer
+    #   tokens still resolve without it.
     # @return [AtlasRb::Mash] the parsed JSON response.
     #
     # @example
@@ -217,10 +232,10 @@ module AtlasRb
     #     thumbnail_2x: "https://iiif.example.edu/iiif/3/abc.jp2/full/!170,170/0/default.jpg",
     #     preview:      "https://iiif.example.edu/iiif/3/abc.jp2/full/500,/0/default.jpg"
     #   )
-    def self.set_thumbnails(id, thumbnail: nil, thumbnail_2x: nil, preview: nil)
+    def self.set_thumbnails(id, thumbnail: nil, thumbnail_2x: nil, preview: nil, nuid: nil)
       body = { thumbnail: thumbnail, thumbnail_2x: thumbnail_2x, preview: preview }.compact
       AtlasRb::Mash.new(JSON.parse(
-        connection({}).patch(ROUTE + id + '/thumbnails', JSON.dump(body))&.body
+        connection({}, nuid).patch(ROUTE + id + '/thumbnails', JSON.dump(body))&.body
       ))
     end
 
@@ -237,6 +252,9 @@ module AtlasRb
     # @param small [String, nil] IIIF URI for the small derivative.
     # @param medium [String, nil] IIIF URI for the medium derivative.
     # @param large [String, nil] IIIF URI for the large derivative.
+    # @param nuid [String, nil] optional acting user's NUID, forwarded as the
+    #   `User:` header. Required for cerberus-token requests; legacy bearer
+    #   tokens still resolve without it.
     # @return [AtlasRb::Mash] the parsed JSON response.
     #
     # @example
@@ -246,10 +264,10 @@ module AtlasRb
     #     medium: "https://iiif.example.edu/iiif/3/abc.jp2/full/1600,/0/default.jpg",
     #     large:  "https://iiif.example.edu/iiif/3/abc.jp2/full/full/0/default.jpg"
     #   )
-    def self.set_image_derivatives(id, small: nil, medium: nil, large: nil)
+    def self.set_image_derivatives(id, small: nil, medium: nil, large: nil, nuid: nil)
       body = { small: small, medium: medium, large: large }.compact
       AtlasRb::Mash.new(JSON.parse(
-        connection({}).patch(ROUTE + id + '/image_derivatives', JSON.dump(body))&.body
+        connection({}, nuid).patch(ROUTE + id + '/image_derivatives', JSON.dump(body))&.body
       ))
     end
 
@@ -263,13 +281,16 @@ module AtlasRb
     # schema.
     #
     # @param id [String] the Work ID.
+    # @param nuid [String, nil] optional acting user's NUID, forwarded as the
+    #   `User:` header. Required for cerberus-token requests; legacy bearer
+    #   tokens still resolve without it.
     # @return [Array<AtlasRb::Mash>] the listing from `GET /works/<id>/assets`,
     #   one entry per attached asset.
     #
     # @example
     #   AtlasRb::Work.assets("w-789").each { |a| puts a.label }
-    def self.assets(id)
-      JSON.parse(connection({}).get(ROUTE + id + '/assets')&.body).map { |entry| AtlasRb::Mash.new(entry) }
+    def self.assets(id, nuid: nil)
+      JSON.parse(connection({}, nuid).get(ROUTE + id + '/assets')&.body).map { |entry| AtlasRb::Mash.new(entry) }
     end
 
     # Fetch the Work's MODS representation in the requested format.
@@ -277,13 +298,16 @@ module AtlasRb
     # @param id [String] the Work ID.
     # @param kind [String, nil] one of `"json"` (default), `"html"`, or
     #   `"xml"`.
+    # @param nuid [String, nil] optional acting user's NUID, forwarded as the
+    #   `User:` header. Required for cerberus-token requests; legacy bearer
+    #   tokens still resolve without it.
     # @return [String] the raw response body in the requested format.
     #
     # @example
     #   AtlasRb::Work.mods("w-789", "html")
-    def self.mods(id, kind = nil)
+    def self.mods(id, kind = nil, nuid: nil)
       # json default, html, xml
-      connection({}).get(
+      connection({}, nuid).get(
         ROUTE + id + '/mods' + (kind.present? ? ".#{kind}" : '')
         )&.body
     end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: atlas_rb
 version: !ruby/object:Gem::Version
-  version: 0.0.97
+  version: 0.0.99
 platform: ruby
 authors:
 - David Cliff
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2026-05-19 00:00:00.000000000 Z
+date: 2026-05-22 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: faraday