chore: release 0.18.2

[astyfx]

chore: release 0.18.2

Patch release cutting everything merged since v0.18.1.

Bug Fixes

• Keep Cursor and Kiro ACP turns alive past oversized stdout lines and Cursor Agent PING timeouts.
• Bind Worker and Advisor MCP tools to the active turn's grant across Claude, Codex, and ACP transports.
• Preserve login-shell discovery for GUI-launched providers, allow slow shells up to 10 seconds, and keep auth status unknown on non-auth probe failures.
• Preserve composer-selected effort through submit and queued prompts, skip usage queries below 97% cached usage, and immediately block a cached exhausted account.

Breaking Changes

• stave_run_worker and stave_consult_advisor are available only through Stave-managed turn connections. Their input schemas no longer require execution keys, and unscoped CLI connections cannot invoke these collaboration tools.

See CHANGELOG.md for the full outcome-first summary and the PR reference list (#511–#514).

Verification

• bun run typecheck — pass (run against the fast-forwarded main checkout that shares this source; the release branch changes only package.json and CHANGELOG.md).

🤖 Generated with Cursor Grok 4.6

[upwind-code-us]

Upwind Code Scan - ✅ Passed

0 newly introduced vulnerabilities · 0 resolved · 52 total in this PR vs main

Total breakdown: 🔶 5 High | 🟡 44 Medium | 🟢 3 Low

View full analysis in Upwind Console

Scan completed in 14s

Scan history (1 scan)

Commit	Scanned at	New	Resolved	Net
cccf96e <	2026-09-08 04:03 UTC	0	0	0

Last scanned: cccf96e · 2026-09-08 04:03 UTC

[upwind-code-us]

Upwind IaC Scan - ✅ Passed

0 newly introduced misconfigurations · 0 resolved · 0 total in this PR vs main

View full analysis in Upwind Console →

Scan completed in 4s

Scan history (1 scan)

Commit	Scanned at	New	Resolved	Net
cccf96e <	2026-09-08 04:03 UTC	0	0	0

Last scanned: cccf96e · 2026-09-08 04:03 UTC

[heath-s]

Approved