Guest Key 0.1.4

Guest Key now requires the actual administrator role on the current site, together with the native manage_options capability. Custom roles with admin-like capabilities are no longer eligible.

• Non-admin roles get no Guest Key menus, toolbar controls, notices, scripts or styles and cannot create or use Guest Keys.
• Removing the administrator role immediately ends existing Guest Key REST/MCP and browser access, even when capabilities remain.
• Multisite additionally requires super-administrator status and the administrator role on the credential’s issuing subsite.
• Ordinary non-admin WordPress browser sessions remain intact.

Validation: 153 role, settings, native REST, MCP authentication, browser and multisite checks passed during implementation; the final 0.1.4 build passed the 49 role/settings checks, PHP lint on 72 project files and JavaScript syntax. The installable ZIP bootstrapped in WordPress with administrator eligibility and anonymous denial verified. Existing credentials and adapter configuration were preserved; disposable fixtures were removed. Development tests are excluded from release archives.

Remote hosting and PHP 7.4 runtime were not tested.