v0.19.1 — Share Plane UI

Ships the Share Plane's user interface and reorganizes settings. (Builds on v0.19.0, which introduced the Share Plane backend + the security hardening.)

Added

• Settings → Sharing — review every cross-utility grant (consumer → provider, plane, scope, revoked/expired state) and revoke any in place; a requireScopedReads toggle; and a read-only directory of installed providers (their data kinds + exported verbs).
• Just-in-time consent — when a utility's Share Plane call lacks a grant, the host raises an unspoofable consent prompt in the iframe wrapper and, on approval, records the grant and transparently retries the original call. Works regardless of install order (dynamic / late-bound).
• Install-preview transparency — the GitHub install dialog now surfaces the sensitive permission slots (tasks / worktree / shares.consume) and a Cross-utility access section (what a utility provides + may consume).
• Tabbed settings — General, Agents & models, Integrations, Notifications & sharing, and Advanced, each with a short description of what it covers.

Notes / limitations

• JIT consent currently covers utility iframe host calls. Worker (server-action) and scheduled-workflow contexts can't prompt, so they rely on a grant created earlier (an iframe prompt or Settings → Sharing).
• Grants are persistent ("Allow"); "allow once" and interface-level grants are not yet offered.
• The writer-studio utility and task-board's provides / slot declarations still ship in their own repos.

🤖 Generated with Claude Code

Full Changelog: v0.19.0...v0.19.1