v0.5 — Pre-release
- Role split. Quest Manager, Economy Manager, Event Officer, Tracking Manager, and Auditor join Admin and the legacy Officer umbrella. Map any Discord role to the staff tier that fits — least-privilege without giving away Admin.
- Audit log. Every staff action, every economy movement, every config change is captured and searchable from the web admin. Default retention 90 days.
- Public API hardening. Per-key rate limit, request body cap, span enrichment for incident triage, and tighter authorization (personal data is self-or-staff, audit-tier reads gate on Auditor).
- Live session view. Browser-based monitoring of active tracking sessions, with per-member opt-out and presence event audit.
- Quest detail privacy. Dispute reasons and per-row review notes are now only visible to the parties involved (worker, owner, manager) — not to every guild member.