v0.1.12

Security & approval flow

• Prompt injection defense added to system prompt (soft nudge — real defense is the destructive tool approval flow)
• Anthropic web_search + web_fetch server tools enabled by default (behind gds-assistant/anthropic_web_tools filter)
• Gemini google_search grounding enabled by default (behind gds-assistant/gemini_web_tools filter)
• Approve-once-per-host trust flow for web-fetch — new "Approve & trust {host}" button persists trusted hosts to gds_mcp_trusted_web_hosts option
• gds-assistant/tool_requires_approval filter lets abilities exempt specific inputs from approval dynamically
• Settings page: manage trusted web-fetch hosts textarea

UX

• Resizable chat panel — drag the top-left handle, size persists in localStorage
• Draggable chat panel — drag by the header, position persists in localStorage. Double-click empty header area to reset to defaults
• Bundled default skills (idempotent via hash-match; user edits preserved across upgrades):
  • /audit-links — Link Quality Audit: placeholder hrefs, internal dead links, language mismatches, anchor↔target mismatches
  • /create-content — Guided content creation that mirrors existing site structure