v0.19.5

Fixed

• Permission channel could die mid-conversation with "Stream closed" (#290): passing a plain string prompt to the Agent SDK set an internal flag that force-closed the CLI's stdin — the only channel for permission approvals, AskUserQuestion, and ExitPlanMode — at the very first response. Background tasks (now routine) kept the CLI running past that point, so every later permission request on such a turn failed instantly with "Stream closed," even though the session was still alive. Sessions now hold the input channel open until the CLI genuinely has no more pending work, verified against a live reproduction with the real CLI.
• Fixed a related bug where an ExitPlanMode approval card could render into a detached part of the page and never become visible, appearing to hang forever.

Internal

• Thread sessions that outlive their first response (background task still running) are now tracked so a new message won't start a second process against the same session, and Stop still works while one is running.