atlas_rb 1.9.1 → 1.9.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: fe879cca7166684164dce3dc7651f22b68c83bd36d4463aaf70d1078147b26f8
-  data.tar.gz: ab88520172776ef649214806b30b2153d1804e960672e7c6ed4237a33ce9eb22
+  metadata.gz: 235448544b8690ecf3a941cc259ab5f049442f609766666297c571e336ac3eae
+  data.tar.gz: d3dc2e59aab57397176e959eec0a28478d5a15dbc0ebe2be459c775a42ec00ce
 SHA512:
-  metadata.gz: 89879f3e03444288baa4e04004bd83e706ace04652eca337cb85d7e665816d49d4ce2d006a598c3505317bff78106e647b477bcbd77fdd0408eda6c0632fa8ca
-  data.tar.gz: de9bf34fe94ff2192733ac5c21040b6b1dc8d1b941270398a8edfa0231d4c41fa5ccc69ba17cb68797b40c1a0c6263b187811200c9de13166543cd4bc9632bd8
+  metadata.gz: 786316240b620bed1a107503c2162d0add7979bbc70574a9f0d1b7cbc473e616e28001d8db9abc75edc972c544211207cbd93f1eee93e674f365d2b0cbecc5e0
+  data.tar.gz: aa6f59d62916ce00cb59ae8cca4e8e029ff96ff4c1fcb40041a4c4fd27d675dfcf98b7a2a04cca5a6f9876bdec846415196d09499f91ee170abb636964b22d25

data/.version

@@ -1 +1 @@
-1.9.1
+1.9.2

data/CHANGELOG.md

@@ -1,5 +1,15 @@
 # Changelog
 
+## 1.9.2
+
+### Added — `read_only:` on `System::Token.mint`
+
+`AtlasRb::System::Token.mint(nuid:, read_only: true)` mints a token Atlas
+structurally restricts to read-shaped actions, independent of what `nuid`
+could otherwise do — the shape to hand to a non-human caller (e.g. an Atlas
+MCP client) that must never be able to mutate the repository. Omitted, mint
+is unchanged (full-privilege, as before).
+
 ## 1.8.8
 
 ### Added — type-agnostic current MODS (`Resource.mods`)

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    atlas_rb (1.9.1)
+    atlas_rb (1.9.2)
       faraday (~> 2.7)
       faraday-follow_redirects (~> 0.3.0)
       faraday-multipart (~> 1)
@@ -25,7 +25,7 @@ GEM
       net-http (~> 0.5)
     hashie (5.1.0)
       logger
-    json (2.20.0)
+    json (2.21.1)
     jwt (2.10.3)
       base64
     logger (1.7.0)

data/lib/atlas_rb/system/token.rb

@@ -27,13 +27,21 @@ module AtlasRb
       # System-gated. The returned token authenticates as `nuid` in BYO-JWT
       # mode (Atlas resolves identity from the token's `sub`, ignores any
       # `User:` / `On-Behalf-Of` header, and refuses `:system`/`:anonymous`).
-      # Full-privilege for that user, 1-week TTL, single-jti.
+      # Full-privilege for that user, 1-week TTL, single-jti — unless
+      # `read_only` is set, in which case Atlas structurally restricts the
+      # token to read-shaped actions regardless of what `nuid` could
+      # otherwise do. That's the shape to hand to a non-human caller (e.g.
+      # an MCP client) that must never be able to mutate the repository.
       #
       # @param nuid [String] the NUID the token will act as.
+      # @param read_only [Boolean] mint a token restricted to read-shaped
+      #   actions only.
       # @return [String, nil] the JWT, or nil when the NUID has no Atlas User
       #   row (404) — a clean "no such user" signal for the caller to surface.
-      def self.mint(nuid:)
-        response = system_connection.post("/nuid", { nuid: nuid }.to_json)
+      def self.mint(nuid:, read_only: false)
+        body = { nuid: nuid }
+        body[:read_only] = true if read_only
+        response = system_connection.post("/nuid", body.to_json)
         return nil if response.status == 404
 
         AtlasRb::Mash.new(JSON.parse(response.body))["token"]

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: atlas_rb
 version: !ruby/object:Gem::Version
-  version: 1.9.1
+  version: 1.9.2
 platform: ruby
 authors:
 - David Cliff
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2026-07-27 00:00:00.000000000 Z
+date: 2026-07-29 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: faraday