atlas_rb 1.8.5 → 1.8.6

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 6b34244827cff750075d39c45f1fd628840b6b1637a06f6bfefc876f285eafbe
-  data.tar.gz: d3f429989a1b983ed13a39c8363b17f1eff439d829f3694244327a38cfc2ca7e
+  metadata.gz: c3cb4c5a2d7eb16f4647817a9afc282ce6ebb34d9a8b46c7bfaefa304373317f
+  data.tar.gz: 2524726c4bcc1d24bc0a51f812dde391da066ec5b65540ec3c91d8f37d7d4724
 SHA512:
-  metadata.gz: 70c4cce5eacaabca34495bee0cd8ed0ada54998e7a90f3b39b26b601d4d20be9e16355d64ac68e75fe39fce8f28d3e25e275d5627afd3644e296c18fdca3453e
-  data.tar.gz: b46212f70bfbec6a343654f89e73e33a13a372abb2e42ff0bf88a0a667d2d5033cee6e221dbdc63022b9feca6f0fd7000c12eb90172a76feaa11540696c04daa
+  metadata.gz: 77c312024d884794f49976c38d1cc53ea949db0e1e24f24f016f104158509d219ec0517deb29567176ce5e53a9e971d9ec11996cba4f77fc4fe2050be3965e9a
+  data.tar.gz: e8d194e9632802f871cbd89efb7625a6ca633643f119d4aefaab306aecde4719b098e2e78578f862b190c9d2172a0ada3208976ddb600d6c2a4c8de6bfb413d4

data/.version

@@ -1 +1 @@
-1.8.5
+1.8.6

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    atlas_rb (1.8.5)
+    atlas_rb (1.8.6)
       faraday (~> 2.7)
       faraday-follow_redirects (~> 0.3.0)
       faraday-multipart (~> 1)

data/lib/atlas_rb/work.rb

@@ -345,28 +345,37 @@ module AtlasRb
       ))
     end
 
-    # Replace a Work's per-tier derivative-visibility policy.
+    # Replace a Work's per-asset derivative-visibility policy.
     #
-    # Sets which read groups may fetch the Work's sized image derivatives —
-    # the `small` / `medium` / `large` / `service` (deep-zoom) tiers — reusing
-    # the resource read-group vocabulary (`"public"`, Grouper group names,
-    # `[]` = private). Unlike {.set_image_derivatives} (which upserts URIs) this
-    # is a whole-object REPLACE: the map you pass is the complete policy;
-    # omitted tiers inherit by cascade (an absent tier inherits the next
-    # lower-resolution tier; `small` inherits the Work's own visibility). Pass a
-    # tier as `[]` to make it private.
+    # Sets which read groups may fetch each of the Work's downloadable
+    # renditions, reusing the resource read-group vocabulary (`"public"`,
+    # Grouper group names, `[]` = private). Two media families:
+    #
+    # * the image ladder `small` / `medium` / `large` / `service` (deep-zoom) /
+    #   `master` (the original image), and
+    # * independent media `audio` / `video` / `pdf`.
     #
-    # Atlas enforces two invariants: a tier may not be more visible than the
-    # Work, and visibility must narrow as resolution grows
-    # (`service` ⊆ `large` ⊆ `medium` ⊆ `small`). The gate is advisory — it
-    # surfaces per Delegate on {.assets} as `gated` / `permission` for the
-    # display layer (Cerberus / the IIIF auth service) to enforce.
+    # Unlike {.set_image_derivatives} (which upserts URIs) this is a whole-object
+    # REPLACE: the map you pass is the complete policy. Within the image ladder
+    # omitted tiers inherit by cascade (an absent tier inherits the next
+    # lower-resolution tier; `small` inherits the Work's own visibility).
+    # Independent media do NOT cascade — an absent `audio`/`video`/`pdf` key
+    # rides the Work. Pass a tier as `[]` to make it private.
+    #
+    # Atlas enforces: a tier may not be more visible than the Work, and — within
+    # the image ladder — visibility must narrow as resolution grows
+    # (`master` ⊆ `service` ⊆ `large` ⊆ `medium` ⊆ `small`; independent media
+    # impose no ordering). The gate is advisory — it surfaces on {.assets} as
+    # `gated` / `permission` for BOTH Delegate (image tier) and Blob (master /
+    # pdf / audio / video, classified by media type) entries, for the display
+    # layer (Cerberus / the IIIF auth service; Cerberus's download :read check)
+    # to enforce.
     #
     # @param id [String] the Work ID.
     # @param policy [Hash] tier => Array(read groups), e.g.
-    #   `{ large: ["northeastern:drs:repository:archives"], service: [...] }`.
-    #   Keys may be strings or symbols; only `small` / `medium` / `large` /
-    #   `service` are recognized.
+    #   `{ large: ["northeastern:drs:repository:archives"], master: [...] }`.
+    #   Keys may be strings or symbols; recognized keys are `small` / `medium` /
+    #   `large` / `service` / `master` / `audio` / `video` / `pdf`.
     # @param nuid [String, nil] optional acting user's NUID. On the relay-signing
     #   path it is signed into the assertion `sub`; on the BYO-JWT (`ATLAS_JWT`)
     #   path it is ignored (identity lives in the token).
@@ -437,6 +446,11 @@ module AtlasRb
     # duck-type on the field they need rather than expecting a single
     # schema.
     #
+    # Every entry (Blob and Delegate) also carries the advisory read gate set
+    # via {.set_derivative_permissions}: `gated` (true if the asset must be
+    # authorized rather than fetched directly) and `permission` (the effective
+    # read-group set, or `nil` for guests, to whom group names are withheld).
+    #
     # @param id [String] the Work ID.
     # @param nuid [String, nil] optional acting user's NUID. On the relay-signing
     #   path it is signed into the assertion `sub`; on the BYO-JWT (`ATLAS_JWT`)

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: atlas_rb
 version: !ruby/object:Gem::Version
-  version: 1.8.5
+  version: 1.8.6
 platform: ruby
 authors:
 - David Cliff
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2026-07-02 00:00:00.000000000 Z
+date: 2026-07-03 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: faraday