From 1d9fcf73af37fc3a206086d0e5a4a400e9e758cf Mon Sep 17 00:00:00 2001
From: Ryan Malloy <ryan@supported.systems>
Date: Sun, 28 Dec 2025 12:50:57 -0700
Subject: [PATCH] release: v0.2.2 - OAuth claims extraction fix

- Fix OAuth user/group extraction using FastMCP's get_access_token()
- Update README with correct RBAC group names (vsphere-readers, not viewers)
- Add missing vsphere-host-admins group to documentation
---
 README.md      | 9 +++++----
 pyproject.toml | 2 +-
 2 files changed, 6 insertions(+), 5 deletions(-)

diff --git a/README.md b/README.md
index 4b2c95b..6a9cd52 100644
--- a/README.md
+++ b/README.md
@@ -220,10 +220,11 @@ Users authenticate via browser, and group memberships map to permission levels:
 
 | Group | Access |
 |-------|--------|
-| `vsphere-super-admins` | Full control |
-| `vsphere-admins` | VM management |
-| `vsphere-operators` | Basic operations |
-| `vsphere-viewers` | Read-only |
+| `vsphere-super-admins` | Full control (all 94 tools) |
+| `vsphere-host-admins` | Host operations + VM management |
+| `vsphere-admins` | VM lifecycle management |
+| `vsphere-operators` | Power ops + snapshots |
+| `vsphere-readers` | Read-only |
 
 See [OAUTH-ARCHITECTURE.md](OAUTH-ARCHITECTURE.md) for detailed setup instructions.
 
diff --git a/pyproject.toml b/pyproject.toml
index ed5a8bb..671a16e 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -1,6 +1,6 @@
 [project]
 name = "mcvsphere"
-version = "0.2.1"
+version = "0.2.2"
 description = "Model Control for vSphere - AI-driven VMware virtual machine management via MCP"
 readme = "README.md"
 license = "MIT"