Highlights
What this release added
- **Agentic tools phase 1:** web search, file uploads, and document analysis with explicit tool controls and structured outputs.
- **Unified tools UI:** single composer surface for search + uploads, with clear toggles and tool state feedback.
- **Security hardening:** SSRF guardrails for outbound fetches and CSP headers for scripts/images/connect.
Fixes
What this release corrected
- Restored chat list hydration by falling back to `token.sub` when `token.id` is missing in auth sessions.
- Blocked URL-style web search attempts that target private or unsafe hosts.
Known issues
What remained constrained
- Tool usage baselines and latency measurements are pending; update Sprint 41 test report after running suites.
- CSP production validation with all integrations (LogRocket, S3, realtime) is still pending.
- Tools settings/preferences panel remains unshipped (planned follow-up).