v2.13.0

New Features

• chat: slash commands
• moderation: 30-day soft-delete recovery for accounts and servers, with tombstones to preserve message history
• maintenance: embedded daily cleanup worker for soft-delete TTL, orphan files, and disk-delete retries
• admin: persistent platform bans, badge nullable migration, atomic delete cleanup
• admin: per-user storage quota column in user list, with inline download filename fix

Bug Fixes

• voice: force mono mic pipeline to prevent one-channel playback on first join
• chat: pin to bottom while async content (images, embeds) loads after refresh
• mentions: render legacy seed role IDs and persist mention-seen watermark across refresh
• auth: token hardening — aud-separated JWTs, token version revocation, atomic password rotation, reset sibling cleanup
• auth: sign avatar and wallpaper URLs in login, register, and refresh responses
• files: cookie-auth fallback for /api/files so in-app rendering survives signed URL expiry
• security: voice state stores raw URLs and signs at egress, SignIfNeeded refuses to launder tampered URLs, avatar update gated to own path
• admin: paged list edge cases — page clamp, status whitelist per endpoint, SQL voice overlay
• admin: soft-delete UX polish — recovery modal, badge contrast, status filter, hard-delete actions, server cap message
• ui: collapsed sidebar shows active server icon instead of hardcoded logo