Features
- PAM Cloud Azure credential generation can now authenticate via an interactive Microsoft Entra sign-in (OAuth 2.0 authorization code flow with PKCE over a local loopback redirect), so Azure credentials can be generated without ever passing a password or MFA code through Commander.
- Export and the
pam action debug dumpcommand now support Service Mode JSON output, allowing these commands to be driven and consumed programmatically through Service Mode.
Fixes
- Fixed inheritance handling when revoking a parent folder's access on nested share folders: converting an inherited grant into a direct one now adds a new recipient-encrypted folder key instead of updating the inherited row, and explicit denials of inherited access are now tracked so a child folder no longer loses its access state or folder key when the parent grant is revoked.