list_shares, share_garden, remove_share and public_link (get / enable /
rotate / disable) wrap the sharing service. They change who can see a garden
beyond the screen, so they are gated twice: the prompt tells the model to say
exactly what it would do and ask, and the tools refuse without confirmed=true,
which their descriptions allow only after a yes in the conversation. The
refusal names the action, so the question the model asks is precise.

share_garden changes the role of an existing share instead of failing on it;
remove_share takes the email list_shares reports; an unknown email explains
that the person has to sign in once first. public_link returns the address
(PANSY_BASE_URL + /g/<token>, via the new Service.PublicShareURL), never a
bare token.

delete_planting is the hard delete for a plop that was never really planted,
as opposed to remove_planting's "it came out"; it is recorded, so undoable.

Co-Authored-By: Claude Fable 5 <[email protected]>

@@ -934,0 +1005,4 @@
+
+// linkView is a public link as the tools report it: on/off, and the address
+// when on. The token itself is only ever shown as part of that address.
+func (a *adapter) linkView(link *service.PublicShareLink) map[string]any {

@@ -934,0 +1038,4 @@
+			return nil, ferr
+		}
+		if existing.Role == role {
+			return map[string]any{"share": shareView{UserID: existing.UserID, Email: existing.Email, DisplayName: existing.DisplayName, Role: existing.Role},

@@ -934,0 +1050,4 @@
+	case err != nil:
+		return nil, err
+	}
+	return map[string]any{"share": shareView{UserID: share.UserID, Email: email, Role: share.Role}}, nil

@@ -934,0 +1099,4 @@
+	if action == "" {
+		action = "get"
+	}
+	if action != "get" && !args.Confirmed {

@@ -90,0 +93,4 @@
+// Exists so the assistant can hand the gardener a link rather than a token.
+func (s *Service) PublicShareURL(token string) string {
+	path := "/g/" + token
+	if s.cfg != nil && s.cfg.BaseURL != "" {