v0.10.0

• Add afpsql ui with five panels: schema, table, indexes and connections open a window onto data a person reads and end when they close it, while plan shows one statement and returns their answer
• Run in every view panel the exact SQL its inspect sibling runs, and execute an approved statement through the ordinary path with the same connection, transport, permission resolution and readonly policy, so the window and the agent cannot disagree
• Execute a planned statement only on an explicit approval: closing the window, refusing, and letting the credential lapse are the same answer, reported as ui_plan_refused with executed:false, so absence of an answer is never consent
• Refuse before a window opens rather than after a person approves, both for a statement afpsql-readonly was always going to reject and for an administrator-locked profile, which withholds the host capabilities that opening a browser requires
• Ship no JavaScript from a watch panel by leaving script-src absent so default-src none governs, including the connections panel, which refreshes itself without any
• Render every panel from a MiniJinja template a person may replace through the frontend overlay, making the typed document each panel builds a contract: what a panel computes belongs to afpsql, what it looks like does not
• Add afpsql inspect connections with an --all flag, returning one row per server backend with its state, wait event and ages alongside the max_connections the count should be read against
• Adopt the shared value-source grammar for connection secrets in place of a private implementation of the same rules
• Fix a Windows build failure from matching a Unix-only connection host variant unconditionally, and add a Windows compile check to CI so a platform-only break fails the gate instead of the publish step
• Move to agent-first-data 0.32.1 and agent-first-ui 0.3.1