v1.2.3

Fixes

• MCP server — The bundled MCP server now starts correctly when launched as a standalone process by an external MCP client (e.g. Claude Code's claude mcp). It previously crashed on startup with a missing-stylesheet error, because jsdom (used by the HTML sanitizer) was bundled and could no longer find its own assets; it only ran inside the app. jsdom is now loaded from node_modules alongside the server, exactly as the Electron main process already did. HTML sanitization is unchanged — same library and version, so the security policy is untouched.

Documentation

• The documentation site now links the shared privacy notice and ships a same-origin Content-Security-Policy.