diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index b2bee18..6ee2154 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,7 +1,7 @@
 {
   "name": "lich",
   "description": "Claude Code plugin for the lich harness",
-  "version": "0.18.3",
+  "version": "0.18.4",
   "author": {
     "name": "omartelo"
   }
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index 6a5132b..8163eab 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "lich",
-  "version": "0.18.3",
+  "version": "0.18.4",
   "description": "Codex CLI plugin for the lich harness",
   "author": {
     "name": "omartelo"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 5fa731a..2cfacb0 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.18.4] - 2026-10-08
+
 ### Added
 
 - **opencode has the six lich tools it was missing.** `control_session`
@@ -651,7 +653,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
   plugin is safe to install globally. Requests time out after ~1s and errors
   are swallowed — the hook never blocks or fails the turn.
 
-[Unreleased]: https://github.com/omartelo/lich-plugin/compare/v0.18.3...HEAD
+[Unreleased]: https://github.com/omartelo/lich-plugin/compare/v0.18.4...HEAD
+[0.18.4]: https://github.com/omartelo/lich-plugin/compare/v0.18.3...v0.18.4
 [0.18.3]: https://github.com/omartelo/lich-plugin/compare/v0.18.2...v0.18.3
 [0.18.2]: https://github.com/omartelo/lich-plugin/compare/v0.18.1...v0.18.2
 [0.18.1]: https://github.com/omartelo/lich-plugin/compare/v0.18.0...v0.18.1
diff --git a/hooks/mod-control.js b/hooks/mod-control.js
index 20e9bec..fe957fa 100644
--- a/hooks/mod-control.js
+++ b/hooks/mod-control.js
@@ -13,7 +13,7 @@
 // a module that hands `$` to a nested function.
 
 // Sent as X-Lich-Plugin on every request; bumped at release (CLAUDE.md, Release).
-const PLUGIN_VERSION = "0.18.3"
+const PLUGIN_VERSION = "0.18.4"
 
 const SETTLE_WHEN_IDLE = new Set(["prompt", "command"])
 
diff --git a/hooks/mod-status.js b/hooks/mod-status.js
index 1893ccd..60a05bf 100644
--- a/hooks/mod-status.js
+++ b/hooks/mod-status.js
@@ -12,7 +12,7 @@
 import { setStatusPart } from "./status-line.js"
 
 // Sent as X-Lich-Plugin on every request; bumped at release (CLAUDE.md, Release).
-const PLUGIN_VERSION = "0.18.3"
+const PLUGIN_VERSION = "0.18.4"
 
 // The contract asks for a read at most every few seconds; the worker count in
 // agent-cards.js polls lich on the same period.
diff --git a/hooks/mod-usage.js b/hooks/mod-usage.js
index 70df3ff..7802525 100644
--- a/hooks/mod-usage.js
+++ b/hooks/mod-usage.js
@@ -12,7 +12,7 @@
 // refuses a module that hands `$` to a nested function.
 
 // Sent as X-Lich-Plugin on every request; bumped at release (CLAUDE.md, Release).
-const PLUGIN_VERSION = "0.18.3"
+const PLUGIN_VERSION = "0.18.4"
 
 /**
  * @typedef {import('claude-code').EngineInterface} Engine
diff --git a/hooks/report-session-start.sh b/hooks/report-session-start.sh
index 7382604..2682ef0 100755
--- a/hooks/report-session-start.sh
+++ b/hooks/report-session-start.sh
@@ -7,7 +7,7 @@
 [ -n "$LICH_PORT" ] && [ -n "$LICH_TOKEN" ] && [ -n "$LICH_SESSION_ID" ] || exit 0
 
 # Sent as X-Lich-Plugin on every report; bumped at release (CLAUDE.md, Release).
-plugin_version=0.18.3
+plugin_version=0.18.4
 provider=${1:-claude}
 # Parse session_id from the stdin payload. Prefer jq; fall back to sed so the
 # hook works on Windows, where jq is usually absent but sed (Git Bash) is not.
diff --git a/hooks/report-state.sh b/hooks/report-state.sh
index 2d95449..26d2620 100755
--- a/hooks/report-state.sh
+++ b/hooks/report-state.sh
@@ -7,7 +7,7 @@
 [ -n "$LICH_PORT" ] && [ -n "$LICH_TOKEN" ] && [ -n "$LICH_SESSION_ID" ] || exit 0
 
 # Sent as X-Lich-Plugin on every report; bumped at release (CLAUDE.md, Release).
-plugin_version=0.18.3
+plugin_version=0.18.4
 
 state=$1
 body="{\"session_id\":\"${LICH_SESSION_ID}\",\"state\":\"${state}\"}"
diff --git a/hooks/report-title.sh b/hooks/report-title.sh
index d62b3db..b1f748f 100755
--- a/hooks/report-title.sh
+++ b/hooks/report-title.sh
@@ -11,7 +11,7 @@
 [ -n "$LICH_PORT" ] && [ -n "$LICH_TOKEN" ] && [ -n "$LICH_SESSION_ID" ] || exit 0
 
 # Sent as X-Lich-Plugin on every report; bumped at release (CLAUDE.md, Release).
-plugin_version=0.18.3
+plugin_version=0.18.4
 command -v jq >/dev/null 2>&1 || exit 0
 
 # Checked before stdin is read, because it is the whole point: finding a title
diff --git a/hooks/report-tool.sh b/hooks/report-tool.sh
index 6a198df..e235c5f 100755
--- a/hooks/report-tool.sh
+++ b/hooks/report-tool.sh
@@ -11,7 +11,7 @@
 [ -n "$LICH_PORT" ] && [ -n "$LICH_TOKEN" ] && [ -n "$LICH_SESSION_ID" ] || exit 0
 
 # Sent as X-Lich-Plugin on every report; bumped at release (CLAUDE.md, Release).
-plugin_version=0.18.3
+plugin_version=0.18.4
 
 here=$(dirname "$0")
 payload=$(cat)
diff --git a/hooks/report-touched.sh b/hooks/report-touched.sh
index 0964220..9173f03 100755
--- a/hooks/report-touched.sh
+++ b/hooks/report-touched.sh
@@ -6,7 +6,7 @@
 [ -n "$LICH_PORT" ] && [ -n "$LICH_TOKEN" ] && [ -n "$LICH_SESSION_ID" ] || exit 0
 
 # Sent as X-Lich-Plugin on every report; bumped at release (CLAUDE.md, Release).
-plugin_version=0.18.3
+plugin_version=0.18.4
 
 curl -s -o /dev/null --max-time 1 \
   -X POST "http://127.0.0.1:${LICH_PORT}/session-touched?token=${LICH_TOKEN}" \
diff --git a/hooks/worker-answer.js b/hooks/worker-answer.js
index 8b67027..5380d2b 100644
--- a/hooks/worker-answer.js
+++ b/hooks/worker-answer.js
@@ -22,7 +22,7 @@
 // refuses a module that hands `$` to a nested function.
 
 // Sent as X-Lich-Plugin on every request; bumped at release (CLAUDE.md, Release).
-const PLUGIN_VERSION = "0.18.3"
+const PLUGIN_VERSION = "0.18.4"
 
 // The value lich spawns a `--subagent` session with.
 const CARDS_OFF = "off"
diff --git a/omp/lich.js b/omp/lich.js
index bbb2c93..0153f87 100644
--- a/omp/lich.js
+++ b/omp/lich.js
@@ -24,7 +24,7 @@
 // environment is read per report rather than at import, so a module loaded
 // outside lich stays a no-op instead of a cached decision.
 // Sent as X-Lich-Plugin on every report; bumped at release (CLAUDE.md, Release).
-const PLUGIN_VERSION = "0.18.3"
+const PLUGIN_VERSION = "0.18.4"
 
 function report(path, body) {
   const port = process.env.LICH_PORT
diff --git a/opencode/lich.js b/opencode/lich.js
index c68bb7f..adbea45 100644
--- a/opencode/lich.js
+++ b/opencode/lich.js
@@ -11,7 +11,7 @@
 // environment is read per report rather than at import, so a module loaded
 // outside lich stays a no-op instead of a cached decision.
 // Sent as X-Lich-Plugin on every report; bumped at release (CLAUDE.md, Release).
-const PLUGIN_VERSION = "0.18.3"
+const PLUGIN_VERSION = "0.18.4"
 
 function report(path, body) {
   const port = process.env.LICH_PORT