toolroll 0.9.40 → 0.9.41

package/CHANGELOG.md

@@ -1,5 +1,15 @@
 # Changelog
 
+## 0.9.41 — 2026-10-06
+
+- **A read-only PostHog connection works for research.** PostHog adds
+  `introspection` to every connection it grants, asked for or not; it only
+  lets a connection be checked and reaches no data. Toolroll counted it as
+  write access, so research skipped PostHog even after **Reconnect read-only**.
+  It now counts as read-only alongside the reads it came with. Nothing is
+  requested differently, and a connection that already reconnected read-only
+  works without signing in again.
+
 ## 0.9.40 — 2026-10-06
 
 - **Confirming a proposal checks the same things the card does, everywhere.**

package/dist/mcp-connect.d.ts

@@ -64,7 +64,6 @@ export declare function connectionsOf(store: Store, repo: string, home?: string)
  */
 export declare function readsOnly(action: string, subjects: readonly string[]): boolean;
 export declare const readScope: (scope: string) => boolean;
-/** Whether a saved grant only reads: it names at least one scope and every one is a read or identity scope. Unknown (null) never is. */
 export declare const readOnlyGrant: (grant: readonly string[] | null) => boolean;
 /** An OAuth `scope` value as scope tokens (RFC 6749), sorted and deduplicated; null when absent, empty or malformed. */
 export declare function scopeList(value: unknown): string[] | null;

package/dist/mcp-connect.js

@@ -133,7 +133,10 @@ const IDENTITY_SCOPES = new Set(["openid", "profile", "email"]);
 const READ_SCOPE = /^[a-z][a-z0-9_]{0,63}:read$/;
 export const readScope = (scope) => IDENTITY_SCOPES.has(scope) || READ_SCOPE.test(scope);
 /** Whether a saved grant only reads: it names at least one scope and every one is a read or identity scope. Unknown (null) never is. */
-export const readOnlyGrant = (grant) => grant !== null && grant.length > 0 && grant.every(readScope);
+// A scope a server adds to every token without being asked, that grants no access to data. PostHog adds
+// `introspection` (its ALWAYS_ALLOWED_SCOPES): it lets the token be checked, and has no write form. Never requested.
+const GRANTED_ANYWAY = new Set(["introspection"]);
+export const readOnlyGrant = (grant) => grant !== null && grant.some(readScope) && grant.every(scope => readScope(scope) || GRANTED_ANYWAY.has(scope));
 /** An OAuth `scope` value as scope tokens (RFC 6749), sorted and deduplicated; null when absent, empty or malformed. */
 export function scopeList(value) {
     if (typeof value !== "string")

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "toolroll",
-  "version": "0.9.40",
+  "version": "0.9.41",
   "description": "A control plane for unattended coding agents — queue tasks, walk away, come back to pull requests. Agents build in leased worktrees, never touch your default branch, and interrupt you only for decisions that need a human.",
   "directories": {
     "doc": "docs"