codeam-cli 2.39.18 → 2.39.19

package/CHANGELOG.md

@@ -4,6 +4,12 @@ All notable changes to `codeam-cli` are documented here.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.39.18] — 2026-06-14
+
+### Added
+
+- **cli:** Send X-Plugin-Auth-Token on conversation-history writes (SEC crit1 #819) — v2.39.18
+
 ## [2.39.16] — 2026-06-14
 
 ### Added

package/dist/index.js

@@ -498,7 +498,7 @@ var import_qrcode_terminal = __toESM(require("qrcode-terminal"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.39.18",
+  version: "2.39.19",
   description: "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device \u2014 async. The terminal companion for CodeAgent Mobile.",
   type: "commonjs",
   main: "dist/index.js",
@@ -5908,7 +5908,7 @@ function readAnonId() {
 }
 function superProperties() {
   return {
-    cliVersion: true ? "2.39.18" : "0.0.0-dev",
+    cliVersion: true ? "2.39.19" : "0.0.0-dev",
     nodeVersion: process.version,
     platform: process.platform,
     arch: process.arch,
@@ -19734,7 +19734,7 @@ var previewStartH = (ctx, _cmd, parsed) => {
     const outcome = await waitForDevServerReady(devServer, readyRe, {
       timeoutMs: 12e4,
       onChunk: (s) => {
-        outputTail = (outputTail + s).slice(-4e3);
+        outputTail = (outputTail + s).slice(-16e3);
         if (!expoUrl && detection.framework === "Expo") {
           expoUrl = parseExpoUrl(s);
         }
@@ -19750,7 +19750,7 @@ var previewStartH = (ctx, _cmd, parsed) => {
         payload: {
           stage: "spawn",
           message: `The dev server exited (code ${outcome.code}) before it was ready. It may need a database or other services.`,
-          stderrTail: outputTail.slice(-2e3)
+          stderrTail: outputTail.slice(-8e3)
         }
       });
       return;
@@ -19768,7 +19768,7 @@ var previewStartH = (ctx, _cmd, parsed) => {
         payload: {
           stage: "ready_timeout",
           message: "The dev server didn't become ready in time. It may be stuck waiting on a database or other service.",
-          stderrTail: outputTail.slice(-2e3)
+          stderrTail: outputTail.slice(-8e3)
         }
       });
       return;
@@ -27056,7 +27056,7 @@ function checkChokidar() {
 }
 async function doctor(args2 = []) {
   const json = args2.includes("--json");
-  const cliVersion = true ? "2.39.18" : "0.0.0-dev";
+  const cliVersion = true ? "2.39.19" : "0.0.0-dev";
   const apiBase = resolveApiBaseUrl();
   const diagnosticId = (0, import_node_crypto8.randomUUID)();
   log.info("doctor", `run id=${diagnosticId} cli=${cliVersion}`);
@@ -27255,7 +27255,7 @@ async function completion(args2) {
 // src/commands/version.ts
 var import_picocolors13 = __toESM(require("picocolors"));
 function version2() {
-  const v = true ? "2.39.18" : "unknown";
+  const v = true ? "2.39.19" : "unknown";
   console.log(`${import_picocolors13.default.bold("codeam-cli")} ${import_picocolors13.default.cyan(v)}`);
 }
 
@@ -27541,7 +27541,7 @@ function checkForUpdates() {
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
   if (!process.stdout.isTTY) return;
-  const current = true ? "2.39.18" : null;
+  const current = true ? "2.39.19" : null;
   if (!current) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codeam-cli",
-  "version": "2.39.18",
+  "version": "2.39.19",
   "description": "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device — async. The terminal companion for CodeAgent Mobile.",
   "type": "commonjs",
   "main": "dist/index.js",