4.19.0 (2026-08-18)

Bug Fixes

• add passwordGrantHint to getAccessToken error messages (c024fc3)
• auth: add password-grant tests + address review sweep feedback (22ea37a)
• auth: address 6 remaining PR #1460 review items (0fd2eaa)
• auth: address PR review - stale client/secret, process.exit, type safety (9ed998c)
• auth: cast refresh_token to string for TypeScript build (10a6638)
• auth: prevent double-refresh on 1h-token Viya estates (9b8ecdf), closes #262
• auth: use consistent 300s expiry threshold on fresh-token early return (c21b51a)
• deps: replace local adapter tarball with published @sasjs/adapter@^4.18.0 (93abc9a), closes #897

Features

• auth: add 'sasjs auth login' (password grant) and harden token handling (47bb9cc)