The default setting is to automatically allow all tool calls.

The default setting is to automatically allow all tool calls. That's really bad as a default non-prompted setting! Especially as you advertise this as the same experience as the CLI, where you manually approve tool uses by default.

---
| Field | Value |
| --- | --- |
| App version | 1.1.3 |
| OS | Windows 10.0.26200 |
| Theme | GitHub |
| Path | /chat |
| Tenure | Day 1 |

The issue points to the /chat experience in app version 1.1.3 but names no file or test. Start by locating where default tool-call permissions are configured, then compare the app's behavior with the manually approved CLI experience. Done means new users are prompted before tool calls by default rather than having all calls automatically allowed.

Written by the indexing model from the issue text.