chore: release 0.18.3

[astyfx]

chore: release 0.18.3

Patch release cutting everything merged since v0.18.2.

Bug Fixes

• Label Claude extra usage credits separately from 5-hour and weekly rate-limit windows, including exhausted extra credits and reset dates that are not today.
• Unsubscribe idle Codex threads, retire idle App Server clients, escalate a failed host child from SIGTERM to SIGKILL, retain quiet active-turn streams for replay, and move elapsed-time updates onto the live message row.

See CHANGELOG.md for the full outcome-first summary and the PR reference list (#516–#517).

Verification

• bun run typecheck — pass (run against the fast-forwarded main checkout that shares this source; the release branch changes only package.json and CHANGELOG.md).

🤖 Generated with Cursor Grok 4.6

[upwind-code-us]

Upwind Code Scan - ✅ Passed

0 newly introduced vulnerabilities · 5 resolved · 52 total in this PR vs main

Total breakdown: 🔶 5 High | 🟡 44 Medium | 🟢 3 Low

---

✅ Resolved · 5 findings

CVE	Package	Version
CVE-2026-84365	hono	4.12.5
CVE-2026-84363	hono	4.12.5
CVE-2026-85062	colord	2.9.3
CVE-2026-84364	hono	4.12.5
CVE-2026-84375	js-yaml	4.1.1

View full analysis in Upwind Console

Scan completed in 17s

Scan history (1 scan)

Commit	Scanned at	New	Resolved	Net
758e169 <	2026-09-09 13:22 UTC	0	-5	-5

Last scanned: 758e169 · 2026-09-09 13:22 UTC

[upwind-code-us]

Upwind IaC Scan - ✅ Passed

0 newly introduced misconfigurations · 0 resolved · 0 total in this PR vs main

View full analysis in Upwind Console →

Scan completed in 4s

Scan history (1 scan)

Commit	Scanned at	New	Resolved	Net
758e169 <	2026-09-09 13:22 UTC	0	0	0

Last scanned: 758e169 · 2026-09-09 13:22 UTC

[heath-s]

Approved