## Skill Management

- **Workspace skill management** — new "Skill Management" option in the workspace dropdown menu (next to Memory). Opens a dialog to toggle skill management on/off and set a permission risk level. When enabled, the agent can create, update, patch, and delete reusable workspace skills via the `skill_manage` tool. Skills and memory are independent — either can be enabled without the other.

## Session Search

- **Workspace session search** — new "Session Search" option in the workspace header toolbar and dropdown menu. Opens a dialog to enable full-text search across workspace sessions, set permission risk level, and toggle inclusion of tool results. When enabled, the agent can search past messages and read message context via the `session_search` tool.
- **Toolbar button** — a Search icon button is added to the workspace header (visible in expanded toolbar mode), alongside existing Memory and Skills buttons.

## Auto-Approve Permissions

- **Per-session auto-approve setting** — the auto-approve dropdown in the chat input now saves the severity level (`off / none / low / medium / high`) to the session on the server via `PUT /api/sessions/:id`, instead of client-side localStorage. The setting follows the session across devices.
- **Server-side fallback** — when no client is connected for the session (phone locked, PWA backgrounded), the server auto-approves permissions based on the stored severity, keeping the agent running uninterrupted.
- **Auto-approve always uses `'once'` scope** — auto-approved permissions are never persisted as grants. Each permission is evaluated fresh on every request.

## Expandable Toolbar

- **Expandable toolbar for app and workspace headers** — a standalone toggle button next to the 3-dot menu lets you expand all menu items (Configuration, Tools, Settings / MCP Servers, Additional Paths, Memory, Skill Management, Session Search, Permissions) into individual icon buttons with tooltips. Toggle back to collapsed 3-dot mode at any time. The preference is persisted to localStorage across sessions.
- **Mobile unchanged** — the expand/collapse toggle is hidden on mobile; the 3-dot dropdown always shows as before.

## Session Control

- **Auto-approve takeover** — when requesting control over a session (e.g. from your phone), the takeover is immediately approved by default. No need to click approve on the laptop you left behind. Controlled by the `JEAN2_AUTO_APPROVE_TAKEOVER` env var (default `true`).
