v0.4.0

0.4.0 (2026-07-19)

Features

• add capability-scoped token triggers (5bca438)
• add oidc:install-self command for one-shot self-SSO setup (d9806a9)
• oidc:install-self command for one-shot self-SSO setup (0386155)

Bug Fixes

• align token trigger guidance and coverage (c5073e8)
• clean up OIDC publishing defaults (a9b2076)
• clean up OIDC publishing defaults (f6e67dd)
• make access-token warning context-neutral (d835934)
• preserve OIDC metadata for programmatic logins (3c6036b)
• reserve the oidc session claim (d6c10df)
• retain sessions until logout delivery is safe (c6631e7)

Refactoring

• centralize access-token claim decisions (b72fc6c)
• replace legacy claim hooks with token triggers (1a1fea3)

Documentation

• clarify session maintenance ordering (67f37e1)