v1.2.1

Fixes

• Editing a thread no longer makes it show up as a regular channel.
• Role colours now support gradient roles.
• Invite events now show who created the invite.

Faster

• Permission and emoji changes no longer force a full reload of server data.
• Search is lighter and now includes stage channels.

Maintenance

• Dependencies updated, no known vulnerabilities.

v1.2.0

Security hardening, five new tools and a round of bug fixes.

Security

• Admin-grade grants (Administrator, Manage Roles, Ban Members…) need DISCORD_ALLOW_DESTRUCTIVE=true: roles, role assignment, channel overwrites, category sync
• Un-hiding a private channel is gated too
• @everyone / @here pings need the new DISCORD_ALLOW_MASS_MENTIONS=true
• File uploads only from DISCORD_UPLOAD_DIRS (default: working folder); keys, .env files and the bot token are refused, even renamed
• URL uploads blocked for private, loopback and cloud-metadata addresses, including via redirects and DNS tricks; size capped
• Bans, kicks, timeouts, purges and deletes need the exact name or ID
• Misspelled arguments are rejected instead of silently ignored
• Discord text in results is quoted as data; batches capped at 100 calls

New

• Tools: discord_manage_poll, discord_automod, discord_scheduled_events, discord_manage_emojis, discord_manage_invites
• Message forwarding (forward on discord_send_message)
• Gradient role colours, media channels
• Unban and untimeout work with destructive actions off
• discord_whoami shows the safety settings

Fixes

• Gateway: no orphaned sessions, handles gateway errors, falls back when privileged intents are refused, no missed events when paging
• Names: no stale member matches, exact names win over partial, member search no longer capped at 25
• Channels: permission merge kept unlisted bits, sync_permissions works, 4096-char forum topics
• Messages: no duplicates when a split message fails midway, forwarded messages and field-only embeds read correctly
• All-failed bulk calls now report an error; blank env values no longer crash startup
• Invites default to 24h instead of never expiring

Other

• Dependencies updated, 0 known vulnerabilities
• 315 tests (from 107)

v1.0.0

Full rewrite in TypeScript.

• 33 tools: messages, DMs, file uploads, polls, channels, threads, forum posts, members, roles, moderation, live events
• Names or IDs everywhere (general, @everyone, alice)
• Every tool accepts arrays (up to 50 targets, parallel, rate-limit aware)
• Long messages split automatically, code blocks kept intact
• Real bulk endpoints for message deletes and bans; multi-role changes in one request
• Destructive tools hidden until DISCORD_ALLOW_DESTRUCTIVE=true
• Errors explain how to fix the problem