v0.4.0

Improvements

Performance

• Group and filter display lookups are now cached per authorization partition (10 minute TTL) and resolved concurrently, eliminating repeated per-page Graph requests
• Cached lookups no longer consume the Graph call budget

MCP protocol quality

• Every tool now declares a real typed outputSchema, enabling schema-aware clients to validate and introspect payloads

Error recovery

• A mid-flight token rejection is retried once with a silently refreshed token before surfacing reauthorization_required
• Graph 404 responses now map to an actionable not_found result that points the model back to search_policies

Token efficiency

• Model-visible record text is slimmer; structuredContent carries full detail
• Removed permanently empty AssignmentRecord fields

Diagnostics and operations

• New leveled stderr logging via IAC_MCP_LOG_LEVEL (debug, info, warn, error)
• Startup line includes version, auto sign-in mode, and tenant configuration
• New --version CLI flag
• Interactive sign-in launched from a tool call now logs a stderr notice
• Cursor eviction at capacity removes the earliest-expiring entry, and continuation guidance interpolates the real cursor TTL

Testing

• Test suite expanded from 59 to 89 tests covering auth states, Graph retry behavior, CLI exit codes, lookup caching, concurrency helpers, and cursor eviction